Function at 0x4e2c96
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
sub esp, 0x8c
lea ebp, [esp - 4]
mov eax, dword [0x61dc40]
xor eax, ebp
mov dword [ebp + 0x8c], eax
push 0x2c
mov eax, 0x5bb3c0
call fcn.00598f2b
mov eax, dword [ebp + 0x98]
mov dword [ebp - 0x24], edx
mov edx, dword [ebp + 0x9c]
mov dword [ebp - 0x28], edx
mov edx, dword [ebp + 0xa0]
mov dword [ebp - 0x38], edx
mov edx, dword [ebp + 0xa4]
mov dword [ebp - 0x20], edx
mov edx, dword [ebp + 0xa8]
mov dword [ebp - 0x30], edx
mov edx, dword [ebp + 0xac]
mov dword [ebp - 0x1c], edx
xor edx, edx
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x2c], edx
cmp word [eax], dx
je 0x4e36f7
cmp ecx, edx
je 0x4e36f7
cmp word [ecx], dx
je 0x4e36f7
mov eax, dword [0x6adfec]
test al, 1
jne 0x4e2d30
or eax, 1
mov dword [0x6adfec], eax
mov dword [0x6adfe8], 0x14
push 0x1c
pop ecx
test al, 2
jne 0x4e2d45
or eax, 2
mov dword [0x6adfec], eax
mov dword [0x6adfe4], ecx
test al, 4
jne 0x4e2d5b
or eax, 4
mov dword [0x6adfec], eax
mov dword [0x6adfe0], 0x1d
test al, 8
jne 0x4e2d71
or eax, 8
mov dword [0x6adfec], eax
mov dword [0x6adfdc], 0x1b
test al, 0x10
jne 0x4e2d83
or eax, 0x10
mov dword [0x6adfec], eax
mov dword [0x6adfd8], ecx
push 0x23
pop edx
test al, 0x20
jne 0x4e2d98
or eax, 0x20
mov dword [0x6adfec], eax
mov dword [0x6adfd4], edx
test al, 0x40
jne 0x4e2dae
or eax, 0x40
mov dword [0x6adfec], eax
mov dword [0x6adfd0], 0x24
test al, al
js 0x4e2dc6
or eax, 0x80
mov dword [0x6adfec], eax
mov dword [0x6adfcc], 0x22
mov ecx, 0x100
test ecx, eax
jne 0x4e2ddc
or eax, ecx
mov dword [0x6adfec], eax
mov dword [0x6adfc8], edx
mov ecx, 0x200
push 0x18
pop esi
test ecx, eax
jne 0x4e2df5
or eax, ecx
mov dword [0x6adfec], eax
mov dword [0x6adfc4], esi
mov ecx, 0x400
push 0x1f
pop edi
test ecx, eax
jne 0x4e2e0e
or eax, ecx
mov dword [0x6adfec], eax
mov dword [0x6adfc0], edi
mov ecx, 0x800
push 0x1e
pop ebx
test ecx, eax
jne 0x4e2e27
or eax, ecx
mov dword [0x6adfec], eax
mov dword [0x6adfbc], ebx
mov ecx, 0x1000
test ecx, eax
jne 0x4e2e3d
or eax, ecx
mov dword [0x6adfec], eax
mov dword [0x6adfb8], edi
mov ecx, 0x2000
test ecx, eax
jne 0x4e2e53
or eax, ecx
mov dword [0x6adfec], eax
mov dword [0x6adfb4], ebx
mov ecx, 0x4000
test ecx, eax
jne 0x4e2e6d
or eax, ecx
mov dword [0x6adfec], eax
mov dword [0x6adfb0], 0x13
mov ecx, 0x8000
test ecx, eax
jne 0x4e2e87
or eax, ecx
mov dword [0x6adfec], eax
mov dword [0x6adfac], 0x16
mov ecx, 0x10000
push 0x19
pop edx
test ecx, eax
jne 0x4e2ea0
or eax, ecx
mov dword [0x6adfec], eax
mov dword [0x6adfa8], edx
mov ecx, 0x20000
test ecx, eax
jne 0x4e2eb6
or eax, ecx
mov dword [0x6adfec], eax
mov dword [0x6adfa4], esi
mov ecx, 0x40000
test ecx, eax
jne 0x4e2ecc
or eax, ecx
mov dword [0x6adfec], eax
mov dword [0x6adfa0], edx
mov ecx, 0x80000
push 0x1d
pop edx
test ecx, eax
jne 0x4e2ee5
or eax, ecx
mov dword [0x6adfec], eax
mov dword [0x6adf9c], edx
mov ecx, 0x100000
test ecx, eax
jne 0x4e2eff
or eax, ecx
mov dword [0x6adfec], eax
mov dword [0x6adf98], 0x20
mov ecx, 0x200000
test ecx, eax
jne 0x4e2f15
or eax, ecx
mov dword [0x6adfec], eax
mov dword [0x6adf94], edi
mov ecx, 0x400000
test ecx, eax
jne 0x4e2f2f
or eax, ecx
mov dword [0x6adfec], eax
mov dword [0x6adf90], 0x20
mov ecx, 0x800000
test ecx, eax
jne 0x4e2f49
or eax, ecx
mov dword [0x6adfec], eax
mov dword [0x6adf8c], 0x17
mov ecx, 0x1000000
test ecx, eax
jne 0x4e2f5f
or eax, ecx
mov dword [0x6adfec], eax
mov dword [0x6adf88], ebx
mov ecx, 0x2000000
test ecx, eax
jne 0x4e2f75
or eax, ecx
mov dword [0x6adfec], eax
mov dword [0x6adf84], edx
mov ecx, 0x4000000
test ecx, eax
jne 0x4e2f8b
or eax, ecx
mov dword [0x6adfec], eax
mov dword [0x6adf80], ebx
mov ecx, 0x8000000
test ecx, eax
jne 0x4e2fa1
or eax, ecx
mov dword [0x6adfec], eax
mov dword [0x6adf7c], edx
xor eax, eax
push 0x7e
push eax
mov word [ebp], ax
lea eax, [ebp + 2]
push eax
call fcn.00596530
push dword [0x6adfe8]
mov ebx, dword [ebp - 0x20]
and dword [ebx], 0
push str.http:__v.hao123.com_
push dword [ebp - 0x14]
call fcn.00590d27
push dword [0x6adfb0]
mov esi, eax
neg esi
push str.http:__v.baidu.com_
push dword [ebp - 0x14]
sbb esi, esi
inc esi
call fcn.00590d27
add esp, 0x24
mov edi, eax
neg edi
sbb edi, edi
inc edi
test esi, esi
jne 0x4e2ffe
test edi, edi
je 0x4e3184
jmp 0x4e3018
push dword [0x6adfe4]
push str.http:__v.hao123.com_dianshi_
push dword [ebp - 0x14]
call fcn.00590d27
add esp, 0xc
test eax, eax
je 0x4e3036
test edi, edi
je 0x4e3053
push dword [0x6adfac]
push str.http:__v.baidu.com_tv_
push dword [ebp - 0x14]
call fcn.00590d27
add esp, 0xc
test eax, eax
jne 0x4e3053
mov eax, dword [0x6adfe4]
mov dword [ebx], 1
test esi, esi
jne 0x4e314e
mov eax, dword [0x6adfac]
jmp 0x4e314e
test esi, esi
je 0x4e3071
push dword [0x6adfe0]
push str.http:__v.hao123.com_dianying_
push dword [ebp - 0x14]
call fcn.00590d27
add esp, 0xc
test eax, eax
je 0x4e308f
test edi, edi
je 0x4e30ac
push dword [0x6adfa8]
push str.http:__v.baidu.com_movie_
push dword [ebp - 0x14]
call fcn.00590d27
add esp, 0xc
test eax, eax
jne 0x4e30ac
mov eax, dword [0x6adfe0]
mov dword [ebx], 2
test esi, esi
jne 0x4e314e
mov eax, dword [0x6adfa8]
jmp 0x4e314e
test esi, esi
je 0x4e30ca
push dword [0x6adfdc]
push str.http:__v.hao123.com_zongyi_
push dword [ebp - 0x14]
call fcn.00590d27
add esp, 0xc
test eax, eax
je 0x4e30e8
test edi, edi
je 0x4e30fe
push dword [0x6adfa4]
push str.http:__v.baidu.com_show_
push dword [ebp - 0x14]
call fcn.00590d27
add esp, 0xc
test eax, eax
jne 0x4e30fe
mov eax, dword [0x6adfdc]
mov dword [ebx], 3
test esi, esi
jne 0x4e314e
mov eax, dword [0x6adfa4]
jmp 0x4e314e
test esi, esi
je 0x4e311c
push dword [0x6adfd8]
push str.http:__v.hao123.com_dongman_
push dword [ebp - 0x14]
call fcn.00590d27
add esp, 0xc
test eax, eax
je 0x4e313a
test edi, edi
je 0x4e3184
push dword [0x6adfa0]
push str.http:__v.baidu.com_comic_
push dword [ebp - 0x14]
call fcn.00590d27
add esp, 0xc
test eax, eax
jne 0x4e3184
mov eax, dword [0x6adfd8]
mov dword [ebx], 4
test esi, esi
jne 0x4e314e
mov eax, dword [0x6adfa0]
mov ecx, dword [ebp - 0x14]
lea esi, [ecx + eax*2]
test esi, esi
je 0x4e3184
push str..htm
push esi
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
test eax, eax
je 0x4e3184
sub eax, esi
sar eax, 1
cmp eax, 1
jl 0x4e3184
cmp eax, 0x40
jge 0x4e3184
push eax
lea eax, [ebp]
push esi
push eax
call fcn.0058fee1
add esp, 0xc
push dword [0x6adfc4]
push str.http:__v.hao123.com_kan_
push dword [ebp - 0x10]
call fcn.00590d27
push dword [0x6adf8c]
mov ebx, eax
neg ebx
push str.http:__v.baidu.com_kan_
push dword [ebp - 0x10]
sbb ebx, ebx
inc ebx
call fcn.00590d27
mov esi, dword [ebp - 0x20]
add esp, 0x18
mov edi, eax
neg edi
sbb edi, edi
inc edi
cmp dword [esi], 0
mov dword [ebp - 0x34], edi
jne 0x4e3578
test ebx, ebx
jne 0x4e31d8
test edi, edi
je 0x4e3338
jmp 0x4e31f2
push dword [0x6adfc0]
push str.http:__v.hao123.com_kan_tvplay_
push dword [ebp - 0x10]
call fcn.00590d27
add esp, 0xc
test eax, eax
je 0x4e3210
test edi, edi
je 0x4e321b
push dword [0x6adf88]
push str.http:__v.baidu.com_kan_tvplay_
push dword [ebp - 0x10]
call fcn.00590d27
add esp, 0xc
test eax, eax
jne 0x4e321b
mov dword [esi], 1
jmp 0x4e32e8
test ebx, ebx
je 0x4e3239
push dword [0x6adfbc]
push str.http:__v.hao123.com_kan_movie_
push dword [ebp - 0x10]
call fcn.00590d27
add esp, 0xc
test eax, eax
je 0x4e3257
test edi, edi
je 0x4e3262
push dword [0x6adf84]
push str.http:__v.baidu.com_kan_movie_
push dword [ebp - 0x10]
call fcn.00590d27
add esp, 0xc
test eax, eax
jne 0x4e3262
mov dword [esi], 2
jmp 0x4e32e8
test ebx, ebx
je 0x4e3280
push dword [0x6adfb8]
push str.http:__v.hao123.com_kan_tvshow_
push dword [ebp - 0x10]
call fcn.00590d27
add esp, 0xc
test eax, eax
je 0x4e329e
test edi, edi
je 0x4e32a6
push dword [0x6adf80]
push str.http:__v.baidu.com_kan_tvshow_
push dword [ebp - 0x10]
call fcn.00590d27
add esp, 0xc
test eax, eax
jne 0x4e32a6
mov dword [esi], 3
jmp 0x4e32e8
test ebx, ebx
je 0x4e32c4
push dword [0x6adfb4]
push str.http:__v.hao123.com_kan_comic_
push dword [ebp - 0x10]
call fcn.00590d27
add esp, 0xc
test eax, eax
je 0x4e32e2
test edi, edi
je 0x4e32e8
push dword [0x6adf7c]
push str.http:__v.baidu.com_kan_comic_
push dword [ebp - 0x10]
call fcn.00590d27
add esp, 0xc
test eax, eax
jne 0x4e32e8
mov dword [esi], 4
mov eax, dword [0x63696c]
mov ecx, 0x63696c
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x18], eax
and dword [ebp - 4], 0
lea eax, [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x10]
mov edi, 0x5edde8
call fcn.00426f0a
mov edi, dword [ebp - 0x18]
pop ecx
test eax, eax
je 0x4e332c
push edi
push 0x5db9e0
lea eax, [ebp]
push 0x3f
push eax
call fcn.0058f42f
add esp, 0x10
or dword [ebp - 4], 0xffffffff
lea eax, [edi - 0x10]
call fcn.00407b6b
cmp dword [esi], 0
jne 0x4e3578
push dword [0x6adfd4]
mov edi, dword [ebp - 0x14]
push str.http:__v.hao123.com_dianshi_intro__
push edi
call fcn.00590d27
add esp, 0xc
test eax, eax
je 0x4e3428
push dword [0x6adf9c]
push str.http:__v.baidu.com_tv_intro__
push edi
call fcn.00590d27
add esp, 0xc
test eax, eax
je 0x4e3428
push dword [0x6adfd0]
push str.http:__v.hao123.com_dianying_intro__
push edi
call fcn.00590d27
add esp, 0xc
test eax, eax
je 0x4e3420
push dword [0x6adf98]
push str.http:__v.baidu.com_movie_intro__
push edi
call fcn.00590d27
add esp, 0xc
test eax, eax
je 0x4e3420
push dword [0x6adfcc]
push str.http:__v.hao123.com_zongyi_intro__
push edi
call fcn.00590d27
add esp, 0xc
test eax, eax
je 0x4e3418
push dword [0x6adf94]
push str.http:__v.baidu.com_show_intro__
push edi
call fcn.00590d27
add esp, 0xc
test eax, eax
je 0x4e3418
push dword [0x6adfc8]
push str.http:__v.hao123.com_dongman_intro__
push edi
call fcn.00590d27
add esp, 0xc
test eax, eax
je 0x4e3410
push dword [0x6adf90]
push str.http:__v.baidu.com_comic_intro__
push edi
call fcn.00590d27
add esp, 0xc
test eax, eax
jne 0x4e342e
mov dword [esi], 4
jmp 0x4e342e
mov dword [esi], 3
jmp 0x4e342e
mov dword [esi], 2
jmp 0x4e342e
mov dword [esi], 1
mov eax, dword [0x63696c]
mov ecx, 0x63696c
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x14]
mov edi, 0x5edde8
mov dword [ebp - 4], 1
call fcn.00426f0a
mov edi, dword [ebp - 0x18]
pop ecx
test eax, eax
je 0x4e3475
push edi
push 0x5db9e0
lea eax, [ebp]
push 0x3f
push eax
call fcn.0058f42f
add esp, 0x10
or dword [ebp - 4], 0xffffffff
lea eax, [edi - 0x10]
call fcn.00407b6b
cmp dword [esi], 0
jne 0x4e3578
mov eax, 0x10000000
push 0x15
pop ecx
test dword [0x6adfec], eax
jne 0x4e34a6
or dword [0x6adfec], eax
mov dword [0x6adf78], ecx
mov eax, 0x20000000
test dword [0x6adfec], eax
jne 0x4e34bf
or dword [0x6adfec], eax
mov dword [0x6adf74], ecx
push dword [0x6adf78]
push str.http:__v.baidu.com_v_
push dword [ebp - 0x14]
call fcn.00590d27
add esp, 0xc
test eax, eax
jne 0x4e356f
push dword [0x6adf74]
push str.http:__www.iqiyi.com_
push dword [ebp - 0x10]
call fcn.00590d27
add esp, 0xc
test eax, eax
jne 0x4e356f
mov eax, dword [0x63696c]
mov ecx, 0x63696c
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x10]
mov edi, str.kwid
mov dword [ebp - 4], 2
call fcn.00426f0a
mov edi, dword [ebp - 0x18]
pop ecx
test eax, eax
je 0x4e3563
push edi
push 0x5db9e0
lea eax, [ebp]
push 0x3f
push eax
call fcn.0058f42f
lea eax, [ebp]
push eax
call fcn.00593d3c
add esp, 0x14
cmp eax, 0x2710
jge 0x4e3556
mov dword [esi], 4
jmp 0x4e3563
xor ecx, ecx
cmp eax, 0x61a8
setge cl
inc ecx
mov dword [esi], ecx
or dword [ebp - 4], 0xffffffff
lea eax, [edi - 0x10]
call fcn.00407b6b
cmp dword [esi], 0
je 0x4e36f2
cmp word [ebp], 0
je 0x4e36f2
lea esi, [ebp]
call fcn.0047f2c2
test eax, eax
je 0x4e36f2
mov eax, esi
push eax
push dword [ebp - 0x38]
call fcn.00407af8
test ebx, ebx
jne 0x4e3629
cmp dword [ebp - 0x34], ebx
jne 0x4e3629
push dword [ebp - 0x10]
push dword [ebp - 0x24]
call fcn.00407af8
mov eax, dword [ebp - 0x20]
cmp dword [eax], 3
jne 0x4e369f
mov eax, 0x40000000
test dword [0x6adfec], eax
jne 0x4e35df
or dword [0x6adfec], eax
mov dword [0x6adf70], 0x13
push dword [0x6adf70]
push 0x5f6d48
push dword [ebp - 0x10]
call fcn.00590d27
add esp, 0xc
test eax, eax
jne 0x4e369f
mov eax, dword [0x6adf70]
mov ecx, dword [ebp - 0x10]
lea esi, [ecx + eax*2]
push 0x2f
push esi
call fcn.0059289e
pop ecx
pop ecx
test eax, eax
je 0x4e369f
sub eax, esi
and eax, 0xfffffffe
cmp eax, 0x10
jne 0x4e369f
push 4
push esi
jmp 0x4e3670
push dword [ebp - 0x24]
mov eax, dword [ebp - 0x10]
mov edi, 0x5e9544
call fcn.00426f0a
push dword [ebp - 0x28]
mov eax, dword [ebp - 0x10]
mov edi, str.site
call fcn.00426f0a
mov esi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x10]
push esi
mov edi, 0x5f7b94
call fcn.00426f0a
mov eax, dword [ebp - 0x20]
add esp, 0xc
cmp dword [eax], 3
jne 0x4e369f
mov ecx, dword [esi]
cmp dword [ecx - 0xc], 8
jne 0x4e369f
push 4
push ecx
xor eax, eax
mov word [ebp + 0x80], ax
lea edi, [ebp + 0x82]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp + 0x80]
push eax
call fcn.0058fee1
add esp, 0xc
lea eax, [ebp + 0x80]
push eax
push dword [ebp - 0x1c]
call fcn.00407af8
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
xor edi, edi
cmp dword [ecx - 0xc], edi
jne 0x4e36b6
push 0x5d0700
push eax
call fcn.00407af8
mov esi, dword [ebp - 0x28]
mov eax, dword [esi]
cmp dword [eax - 0xc], edi
jne 0x4e36e4
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
lea eax, [ebp - 0x1c]
push eax
mov dword [ebp - 0x1c], edi
call fcn.004e23de
pop ecx
test eax, eax
je 0x4e36e4
cmp dword [ebp - 0x1c], edi
je 0x4e36e4
push dword [ebp - 0x1c]
push esi
call fcn.00407af8
mov eax, dword [esi]
cmp dword [eax - 0xc], edi
je 0x4e36f2
mov dword [ebp - 0x2c], 1
mov eax, dword [ebp - 0x2c]
jmp 0x4e36f9
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x8c]
xor ecx, ebp
call fcn.0058f3cf
add ebp, 0x90
leave
ret 0x18