Function at 0x402345
Capabilities:
Inspect section memory permissions

Disassembly:
sub esp, 0x70
push ebx
push ebp
push esi
mov esi, ecx
push edi
push 0xfffffffffffffff0
mov eax, dword [esi + 4]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov ebp, dword [sym.imp.USER32.dll_GetParent]
mov ebx, eax
and ebx, 0x40000000
je 0x40236d
mov ecx, dword [esi + 4]
push ecx
call ebp
jmp 0x402379
mov edx, dword [esi + 4]
push 4
push edx
call dword [sym.imp.USER32.dll_GetWindow]
mov ecx, dword [esi + 4]
mov edi, eax
lea eax, [esp + 0x34]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetWindowRect]
test ebx, ebx
jne 0x4023f0
test edi, edi
je 0x4023ab
push 0xfffffffffffffff0
push edi
call dword [sym.imp.USER32.dll_GetWindowLongA]
test eax, 0x10000000
je 0x4023a9
test eax, 0x20000000
je 0x4023ab
xor edi, edi
lea edx, [esp + 0x24]
push 0
push edx
push 0
push 0x30
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
test edi, edi
jne 0x4023e2
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], eax
jmp 0x40241d
lea ecx, [esp + 0x14]
push ecx
push edi
call dword [sym.imp.USER32.dll_GetWindowRect]
jmp 0x40241d
mov edx, dword [esi + 4]
push edx
call ebp
mov ebp, dword [sym.imp.USER32.dll_GetClientRect]
mov ebx, eax
lea eax, [esp + 0x24]
push eax
push ebx
call ebp
lea ecx, [esp + 0x14]
push ecx
push edi
call ebp
lea edx, [esp + 0x14]
push 2
push edx
push ebx
push edi
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov ebp, dword [esp + 0x40]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x3c]
mov edi, dword [esp + 0x34]
add eax, ecx
sub ebp, edx
cdq
sub eax, edx
sub ebx, edi
mov ecx, eax
mov eax, ebx
cdq
sub eax, edx
mov edx, dword [esp + 0x20]
sar ecx, 1
sar eax, 1
sub ecx, eax
mov eax, dword [esp + 0x18]
add eax, edx
cdq
sub eax, edx
mov edi, eax
mov eax, ebp
cdq
sub eax, edx
sar edi, 1
sar eax, 1
sub edi, eax
mov eax, dword [esp + 0x24]
cmp ecx, eax
jl 0x40247a
mov eax, dword [esp + 0x2c]
lea edx, [ecx + ebx]
cmp edx, eax
jle 0x40247c
sub eax, ebx
mov ecx, eax
mov eax, dword [esp + 0x28]
cmp edi, eax
jl 0x402491
mov eax, dword [esp + 0x30]
lea edx, [edi + ebp]
cmp edx, eax
jle 0x402493
sub eax, ebp
mov edi, eax
mov eax, dword [esi + 4]
push 0x15
push 0xffffffffffffffff
push 0xffffffffffffffff
push edi
push ecx
push 0
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
mov ecx, dword [esi + 4]
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x42d
push ecx
call edi
lea ebx, [esi + 0x1c]
push eax
mov ecx, ebx
call fcn.004049f0
test eax, eax
je 0x4024ce
mov ecx, ebx
call fcn.00403680
mov edx, dword [esi + 4]
push 0x42c
push edx
call edi
lea ebx, [esi + 0x74]
push eax
mov ecx, ebx
call fcn.004049f0
test eax, eax
je 0x4024ef
mov ecx, ebx
call fcn.00403680
mov eax, dword [esi + 4]
push 0x433
push eax
call edi
lea ebp, [esi + 0xcc]
push eax
mov ecx, ebp
call fcn.004049f0
test eax, eax
je 0x402513
mov ecx, ebp
call fcn.00403680
mov eax, 4
push str.http:__baike.360.cn_3229787_2649304.html
mov dword [esi + 0x6c], eax
mov ecx, ebx
mov dword [esi + 0x11c], eax
call fcn.00402e00
mov ecx, dword [esi + 4]
push 0x42b
push ecx
lea ebp, [esi + 0x124]
call edi
mov dword [ebp], eax
mov edx, dword [esi + 4]
lea ebx, [esi + 0x128]
push 0x429
push edx
mov dword [esp + 0x18], ebx
call edi
mov dword [ebx], eax
mov eax, dword [esi + 4]
push 0x42a
push eax
lea ebx, [esi + 0x12c]
call edi
mov dword [ebx], eax
mov ecx, 0xe
xor eax, eax
lea edi, [esp + 0x48]
rep stosd dword es:[edi], eax
push 0xffffffffffffffff
push 0x4362b8
lea ecx, [esp + 0x68]
push 0x20
push ecx
mov byte [esp + 0x6b], 1
mov dword [esp + 0x54], 0x64
call fcn.00402ce0
add esp, 0x10
lea edi, [esi + 0x130]
lea edx, [esp + 0x44]
mov ecx, edi
push 0
push edx
mov dword [esp + 0x5c], 0x2bc
call fcn.00403410
mov eax, dword [edi]
mov ecx, dword [ebp]
push 1
push eax
push 0x30
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov edx, dword [edi]
mov ecx, dword [esp + 0x10]
push 1
push edx
call fcn.00402de0
mov eax, dword [edi]
push 1
push eax
mov ecx, ebx
call fcn.00402de0
call fcn.00402670
test eax, eax
je 0x402600
call fcn.00415240
mov ecx, eax
call fcn.004155b0
test eax, eax
jne 0x402600
call fcn.004026e0
mov ecx, esi
call fcn.004029c0
test eax, eax
je 0x40261d
mov ecx, dword [ebx]
push 0
push 1
push 0xf1
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
call fcn.0040eaa0
test eax, eax
je 0x40263b
call fcn.0040eb00
push 0
push 1
push 0xf1
mov ecx, ebp
call fcn.00402d60
call fcn.0040e3e0
pop edi
pop esi
pop ebp
pop ebx
test eax, eax
je 0x40265f
call fcn.0040e970
mov ecx, dword [esp]
push 0
push 1
push 0xf1
call fcn.00402d60
xor eax, eax
add esp, 0x70
ret 0x10