Function at 0x402315
Capabilities:
Inspect section memory permissions

Disassembly:
sub esp, 0x70
push ebx
push ebp
push esi
mov esi, ecx
push edi
push 0xfffffffffffffff0
mov eax, dword [esi + 4]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov ebp, dword [sym.imp.USER32.dll_GetParent]
mov ebx, eax
and ebx, 0x40000000
je 0x40233d
mov ecx, dword [esi + 4]
push ecx
call ebp
jmp 0x402349
mov edx, dword [esi + 4]
push 4
push edx
call dword [sym.imp.USER32.dll_GetWindow]
mov ecx, dword [esi + 4]
mov edi, eax
lea eax, [esp + 0x34]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetWindowRect]
test ebx, ebx
jne 0x4023c0
test edi, edi
je 0x40237b
push 0xfffffffffffffff0
push edi
call dword [sym.imp.USER32.dll_GetWindowLongA]
test eax, 0x10000000
je 0x402379
test eax, 0x20000000
je 0x40237b
xor edi, edi
lea edx, [esp + 0x24]
push 0
push edx
push 0
push 0x30
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
test edi, edi
jne 0x4023b2
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], eax
jmp 0x4023ed
lea ecx, [esp + 0x14]
push ecx
push edi
call dword [sym.imp.USER32.dll_GetWindowRect]
jmp 0x4023ed
mov edx, dword [esi + 4]
push edx
call ebp
mov ebp, dword [sym.imp.USER32.dll_GetClientRect]
mov ebx, eax
lea eax, [esp + 0x24]
push eax
push ebx
call ebp
lea ecx, [esp + 0x14]
push ecx
push edi
call ebp
lea edx, [esp + 0x14]
push 2
push edx
push ebx
push edi
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov ebp, dword [esp + 0x40]
mov edx, dword [esp + 0x38]
mov ebx, dword [esp + 0x3c]
mov edi, dword [esp + 0x34]
add eax, ecx
sub ebp, edx
cdq
sub eax, edx
sub ebx, edi
mov ecx, eax
mov eax, ebx
cdq
sub eax, edx
mov edx, dword [esp + 0x20]
sar ecx, 1
sar eax, 1
sub ecx, eax
mov eax, dword [esp + 0x18]
add eax, edx
cdq
sub eax, edx
mov edi, eax
mov eax, ebp
cdq
sub eax, edx
sar edi, 1
sar eax, 1
sub edi, eax
mov eax, dword [esp + 0x24]
cmp ecx, eax
jl 0x40244a
mov eax, dword [esp + 0x2c]
lea edx, [ecx + ebx]
cmp edx, eax
jle 0x40244c
sub eax, ebx
mov ecx, eax
mov eax, dword [esp + 0x28]
cmp edi, eax
jl 0x402461
mov eax, dword [esp + 0x30]
lea edx, [edi + ebp]
cmp edx, eax
jle 0x402463
sub eax, ebp
mov edi, eax
mov eax, dword [esi + 4]
push 0x15
push 0xffffffffffffffff
push 0xffffffffffffffff
push edi
push ecx
push 0
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
mov ecx, dword [esi + 4]
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x42d
push ecx
call edi
lea ebx, [esi + 0x1c]
push eax
mov ecx, ebx
call fcn.004049d0
test eax, eax
je 0x40249e
mov ecx, ebx
call fcn.00403660
mov edx, dword [esi + 4]
push 0x42c
push edx
call edi
lea ebx, [esi + 0x74]
push eax
mov ecx, ebx
call fcn.004049d0
test eax, eax
je 0x4024bf
mov ecx, ebx
call fcn.00403660
mov eax, dword [esi + 4]
push 0x433
push eax
call edi
lea ebp, [esi + 0xcc]
push eax
mov ecx, ebp
call fcn.004049d0
test eax, eax
je 0x4024e3
mov ecx, ebp
call fcn.00403660
mov eax, 4
push str.http:__baike.360.cn_3229787_2649304.html
mov dword [esi + 0x6c], eax
mov ecx, ebx
mov dword [esi + 0x11c], eax
call fcn.00402de0
mov ecx, dword [esi + 4]
push 0x42b
push ecx
lea ebp, [esi + 0x124]
call edi
mov dword [ebp], eax
mov edx, dword [esi + 4]
lea ebx, [esi + 0x128]
push 0x429
push edx
mov dword [esp + 0x18], ebx
call edi
mov dword [ebx], eax
mov eax, dword [esi + 4]
push 0x42a
push eax
lea ebx, [esi + 0x12c]
call edi
mov dword [ebx], eax
mov ecx, 0xe
xor eax, eax
lea edi, [esp + 0x48]
rep stosd dword es:[edi], eax
push 0xffffffffffffffff
push 0x4492e8
lea ecx, [esp + 0x68]
push 0x20
push ecx
mov byte [esp + 0x6b], 1
mov dword [esp + 0x54], 0x64
call fcn.00402cc0
add esp, 0x10
lea edi, [esi + 0x130]
lea edx, [esp + 0x44]
mov ecx, edi
push 0
push edx
mov dword [esp + 0x5c], 0x2bc
call fcn.004033f0
mov eax, dword [edi]
mov ecx, dword [ebp]
push 1
push eax
push 0x30
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
mov edx, dword [edi]
mov ecx, dword [esp + 0x10]
push 1
push edx
call fcn.00402dc0
mov eax, dword [edi]
push 1
push eax
mov ecx, ebx
call fcn.00402dc0
call fcn.00402640
test eax, eax
je 0x4025d0
call fcn.00419aa0
mov ecx, eax
call fcn.00419da0
test eax, eax
jne 0x4025d0
call fcn.004026b0
mov ecx, esi
call fcn.004029a0
test eax, eax
je 0x4025ed
mov ecx, dword [ebx]
push 0
push 1
push 0xf1
push ecx
call dword [sym.imp.USER32.dll_PostMessageA]
call fcn.00410110
test eax, eax
je 0x40260b
call fcn.00410170
push 0
push 1
push 0xf1
mov ecx, ebp
call fcn.00402d40
call fcn.0040fa50
pop edi
pop esi
pop ebp
pop ebx
test eax, eax
je 0x40262f
call fcn.0040ffe0
mov ecx, dword [esp]
push 0
push 1
push 0xf1
call fcn.00402d40
xor eax, eax
add esp, 0x70
ret 0x10