Function at 0x429633
Capabilities:
Parse url

Disassembly:
push ebp
lea ebp, [esp - 0xe78c]
mov eax, 0xe78c
call fcn.005a41d0
push 0xffffffffffffffff
push 0x5bc0f6
mov eax, dword fs:[0]
push eax
sub esp, 0x50
mov eax, dword [0x61dc40]
xor eax, ebp
mov dword [ebp + 0xe788], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0xe794]
xor ebx, ebx
mov dword [ebp - 0x20], eax
cmp eax, ebx
je 0x42b0cc
mov eax, dword [eax + 4]
mov dword [ebp - 0x1c], eax
cmp dword [eax - 0xc], ebx
je 0x42b0cc
push 5
pop ecx
mov dword [ebp], 0x15
mov dword [ebp + 4], ebx
mov esi, str.taobao.com
lea edi, [ebp + 8]
rep movsd dword es:[edi], dword [esi]
push 0x1ea
lea eax, [ebp + 0x1e]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 5
pop ecx
push 0x1ec
lea eax, [ebp + 0x224]
push ebx
mov dword [ebp + 0x208], 0x15
mov dword [ebp + 0x20c], ebx
mov esi, str.tmall.com
lea edi, [ebp + 0x210]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
mov dword [ebp + 0x410], 0x15
mov dword [ebp + 0x414], ebx
mov esi, str.jd.com
lea edi, [ebp + 0x418]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x1f2
lea eax, [ebp + 0x426]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
mov dword [ebp + 0x618], 0x15
mov dword [ebp + 0x61c], ebx
mov esi, str.yhd.com
lea edi, [ebp + 0x620]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x1f0
lea eax, [ebp + 0x630]
push ebx
push eax
movsd dword es:[edi], dword [esi]
call fcn.00596530
push 6
pop ecx
mov dword [ebp + 0x820], 0x15
mov dword [ebp + 0x824], ebx
mov esi, str.dangdang.com
lea edi, [ebp + 0x828]
rep movsd dword es:[edi], dword [esi]
push 0x1e6
lea eax, [ebp + 0x842]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 5
pop ecx
push 0x1ec
lea eax, [ebp + 0xa44]
push ebx
mov dword [ebp + 0xa28], 0x15
mov dword [ebp + 0xa2c], ebx
mov esi, str.amazon.cn
lea edi, [ebp + 0xa30]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
add esp, 0x48
push 5
mov dword [ebp + 0xc30], 0x15
mov dword [ebp + 0xc34], ebx
pop ecx
mov esi, str.paipai.com
lea edi, [ebp + 0xc38]
rep movsd dword es:[edi], dword [esi]
push 0x1ea
lea eax, [ebp + 0xc4e]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 6
pop ecx
push 0x1e8
lea eax, [ebp + 0xe58]
push ebx
mov dword [ebp + 0xe38], 0x15
mov dword [ebp + 0xe3c], ebx
mov esi, str.wanggou.com
lea edi, [ebp + 0xe40]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
push 5
pop ecx
push 0x1ec
lea eax, [ebp + 0x105c]
push ebx
mov dword [ebp + 0x1040], 0x15
mov dword [ebp + 0x1044], ebx
mov esi, str.vancl.com
lea edi, [ebp + 0x1048]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
push 6
pop ecx
mov dword [ebp + 0x1248], 0x15
mov dword [ebp + 0x124c], ebx
mov esi, str.moonbasa.com
lea edi, [ebp + 0x1250]
rep movsd dword es:[edi], dword [esi]
push 0x1e6
lea eax, [ebp + 0x126a]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 5
pop ecx
push 0x1ec
lea eax, [ebp + 0x146c]
push ebx
mov dword [ebp + 0x1450], 0x15
mov dword [ebp + 0x1454], ebx
mov esi, str.vplaza.cn
lea edi, [ebp + 0x1458]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
push 8
pop ecx
push 0x1e0
lea eax, [ebp + 0x1680]
push ebx
mov dword [ebp + 0x1658], 0x15
mov dword [ebp + 0x165c], ebx
mov esi, str.cherriespie.com
lea edi, [ebp + 0x1660]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
add esp, 0x48
push 5
pop ecx
mov dword [ebp + 0x1860], 0x15
mov dword [ebp + 0x1864], ebx
mov esi, str.korirl.com
lea edi, [ebp + 0x1868]
rep movsd dword es:[edi], dword [esi]
push 0x1ea
movsw word es:[edi], word [esi]
push ebx
lea eax, [ebp + 0x187e]
push eax
call fcn.00596530
push 6
pop ecx
mov dword [ebp + 0x1a68], 0x15
mov dword [ebp + 0x1a6c], ebx
mov esi, str.rutisher.com
lea edi, [ebp + 0x1a70]
rep movsd dword es:[edi], dword [esi]
push 0x1e6
lea eax, [ebp + 0x1a8a]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 6
pop ecx
push 0x1e8
lea eax, [ebp + 0x1c90]
push ebx
mov dword [ebp + 0x1c70], 0x15
mov dword [ebp + 0x1c74], ebx
mov esi, str.suorang.com
lea edi, [ebp + 0x1c78]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
mov dword [ebp + 0x1e78], 0x15
mov dword [ebp + 0x1e7c], ebx
mov esi, str.vip.com
lea edi, [ebp + 0x1e80]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x1f0
lea eax, [ebp + 0x1e90]
push ebx
push eax
movsd dword es:[edi], dword [esi]
call fcn.00596530
push 5
pop ecx
mov dword [ebp + 0x2080], 0x15
mov dword [ebp + 0x2084], ebx
mov esi, str.lefeng.com
lea edi, [ebp + 0x2088]
rep movsd dword es:[edi], dword [esi]
push 0x1ea
lea eax, [ebp + 0x209e]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 5
pop ecx
push 0x1ec
lea eax, [ebp + 0x22a4]
push ebx
mov dword [ebp + 0x2288], 0x15
mov dword [ebp + 0x228c], ebx
mov esi, str.jumei.com
lea edi, [ebp + 0x2290]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
add esp, 0x48
push 5
pop ecx
push 0x1ec
lea eax, [ebp + 0x24ac]
push ebx
mov dword [ebp + 0x2490], 0x15
mov dword [ebp + 0x2494], ebx
mov esi, str.womai.com
lea edi, [ebp + 0x2498]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
mov dword [ebp + 0x2698], 0x15
mov dword [ebp + 0x269c], ebx
push 6
pop ecx
push 0x1e8
lea eax, [ebp + 0x26b8]
push ebx
mov esi, str.meituan.com
lea edi, [ebp + 0x26a0]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
push 5
pop ecx
push 0x1ec
lea eax, [ebp + 0x28bc]
push ebx
mov dword [ebp + 0x28a0], 0x15
mov dword [ebp + 0x28a4], ebx
mov esi, str.nuomi.com
lea edi, [ebp + 0x28a8]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
push 6
pop ecx
mov dword [ebp + 0x2aa8], 0x15
mov dword [ebp + 0x2aac], ebx
mov esi, str.dianping.com
lea edi, [ebp + 0x2ab0]
rep movsd dword es:[edi], dword [esi]
push 0x1e6
lea eax, [ebp + 0x2aca]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 5
pop ecx
push 0x1ec
lea eax, [ebp + 0x2ccc]
push ebx
mov dword [ebp + 0x2cb0], 0x15
mov dword [ebp + 0x2cb4], ebx
mov esi, str.qunar.com
lea edi, [ebp + 0x2cb8]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
push 5
pop ecx
push 0x1ec
lea eax, [ebp + 0x2ed4]
push ebx
mov dword [ebp + 0x2eb8], 0x16
mov dword [ebp + 0x2ebc], ebx
mov esi, str.17173.com
lea edi, [ebp + 0x2ec0]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
add esp, 0x48
push 5
pop ecx
mov dword [ebp + 0x30c0], 0x16
mov dword [ebp + 0x30c4], ebx
mov esi, str.duowan.com
lea edi, [ebp + 0x30c8]
rep movsd dword es:[edi], dword [esi]
push 0x1ea
lea eax, [ebp + 0x30de]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
mov dword [ebp + 0x32c8], 0x16
mov dword [ebp + 0x32cc], ebx
mov esi, str.7k7k.com
lea edi, [ebp + 0x32d0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x1ee
lea eax, [ebp + 0x32e2]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
mov dword [ebp + 0x34d0], 0x16
mov dword [ebp + 0x34d4], ebx
mov esi, str.4399.com
lea edi, [ebp + 0x34d8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x1ee
lea eax, [ebp + 0x34ea]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 5
pop ecx
push 0x1ec
lea eax, [ebp + 0x36f4]
push ebx
mov dword [ebp + 0x36d8], 0x16
mov dword [ebp + 0x36dc], ebx
mov esi, str.yeyou.com
lea edi, [ebp + 0x36e0]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
push 6
pop ecx
push 0x1e8
lea eax, [ebp + 0x3900]
push ebx
mov dword [ebp + 0x38e0], 0x16
mov dword [ebp + 0x38e4], ebx
mov esi, str.shouyou.com
lea edi, [ebp + 0x38e8]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
mov dword [ebp + 0x3ae8], 0x16
mov dword [ebp + 0x3aec], ebx
mov esi, str.5253.com
lea edi, [ebp + 0x3af0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x1ee
lea eax, [ebp + 0x3b02]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
mov dword [ebp + 0x3cf0], 0x16
mov dword [ebp + 0x3cf4], ebx
mov esi, str.4399.cn
lea edi, [ebp + 0x3cf8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
add esp, 0x48
movsd dword es:[edi], dword [esi]
push 0x1f0
lea eax, [ebp + 0x3d08]
push ebx
push eax
movsd dword es:[edi], dword [esi]
call fcn.00596530
push 7
pop ecx
mov dword [ebp + 0x3ef8], 0x16
mov dword [ebp + 0x3efc], ebx
mov esi, str.xyx.hao123.com
lea edi, [ebp + 0x3f00]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
push 0x1e2
lea eax, [ebp + 0x3f1e]
push ebx
push eax
call fcn.00596530
push 8
pop ecx
push 0x1e0
lea eax, [ebp + 0x4128]
push ebx
mov dword [ebp + 0x4100], 0x16
mov dword [ebp + 0x4104], ebx
mov esi, str.youxi.baidu.com
lea edi, [ebp + 0x4108]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
push 8
pop ecx
push 0x1e0
lea eax, [ebp + 0x4330]
push ebx
mov dword [ebp + 0x4308], 0x16
mov dword [ebp + 0x430c], ebx
mov esi, str.qipai.baidu.com
lea edi, [ebp + 0x4310]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
push 8
pop ecx
mov dword [ebp + 0x4510], 1
mov dword [ebp + 0x4514], ebx
mov esi, str.dating.baidu.com
lea edi, [ebp + 0x4518]
rep movsd dword es:[edi], dword [esi]
push 0x1de
lea eax, [ebp + 0x453a]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 6
pop ecx
mov dword [ebp + 0x4718], 0x16
mov dword [ebp + 0x471c], ebx
mov esi, str.games.qq.com
lea edi, [ebp + 0x4720]
rep movsd dword es:[edi], dword [esi]
push 0x1e6
lea eax, [ebp + 0x473a]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
add esp, 0x48
push 6
pop ecx
push 0x1e8
lea eax, [ebp + 0x4940]
push ebx
mov dword [ebp + 0x4920], 0x16
mov dword [ebp + 0x4924], ebx
mov esi, str.iwan.qq.com
lea edi, [ebp + 0x4928]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
mov dword [ebp + 0x4b28], 0x16
mov dword [ebp + 0x4b2c], ebx
mov esi, str.37.com
lea edi, [ebp + 0x4b30]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x1f2
lea eax, [ebp + 0x4b3e]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
mov dword [ebp + 0x4d30], 0x16
push 7
pop ecx
push 0x1e4
lea eax, [ebp + 0x4d54]
push ebx
mov dword [ebp + 0x4d34], ebx
mov esi, str.wan.tgbus.com
lea edi, [ebp + 0x4d38]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
push 6
pop ecx
mov dword [ebp + 0x4f38], 0x16
mov dword [ebp + 0x4f3c], ebx
mov esi, str.game.163.com
lea edi, [ebp + 0x4f40]
rep movsd dword es:[edi], dword [esi]
push 0x1e6
lea eax, [ebp + 0x4f5a]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 6
pop ecx
mov dword [ebp + 0x5140], 0x16
mov dword [ebp + 0x5144], ebx
mov esi, str.37wanwan.com
lea edi, [ebp + 0x5148]
rep movsd dword es:[edi], dword [esi]
push 0x1e6
lea eax, [ebp + 0x5162]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 6
pop ecx
push 0x1e8
lea eax, [ebp + 0x5368]
push ebx
mov dword [ebp + 0x5348], 0x16
mov dword [ebp + 0x534c], ebx
mov esi, str.4399dmw.com
lea edi, [ebp + 0x5350]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
add esp, 0x48
push 7
pop ecx
push 0x1e4
lea eax, [ebp + 0x5574]
push ebx
mov dword [ebp + 0x5550], 0x16
mov dword [ebp + 0x5554], ebx
mov esi, str.xiu.baidu.com
lea edi, [ebp + 0x5558]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
push 8
pop ecx
push 0x1e0
lea eax, [ebp + 0x5780]
push ebx
mov dword [ebp + 0x5758], 0x16
mov dword [ebp + 0x575c], ebx
mov esi, str.rc.qzone.qq.com
lea edi, [ebp + 0x5760]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
push 8
pop ecx
mov esi, str.guide.renren.com
lea edi, [ebp + 0x5968]
mov dword [ebp + 0x5960], 0x17
mov dword [ebp + 0x5964], ebx
rep movsd dword es:[edi], dword [esi]
push 0x1de
lea eax, [ebp + 0x598a]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 5
pop ecx
mov dword [ebp + 0x5b68], 0x17
mov dword [ebp + 0x5b6c], ebx
mov esi, str.renren.com
lea edi, [ebp + 0x5b70]
rep movsd dword es:[edi], dword [esi]
push 0x1ea
lea eax, [ebp + 0x5b86]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 9
pop ecx
push 0x1dc
lea eax, [ebp + 0x5d9c]
push ebx
mov dword [ebp + 0x5d70], 0x17
mov dword [ebp + 0x5d74], ebx
mov esi, str.user.qzone.qq.com
lea edi, [ebp + 0x5d78]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
mov dword [ebp + 0x5f78], 0x17
mov dword [ebp + 0x5f7c], ebx
mov esi, str.t.qq.com
lea edi, [ebp + 0x5f80]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x1ee
lea eax, [ebp + 0x5f92]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
add esp, 0x48
push 5
pop ecx
push 0x1ec
lea eax, [ebp + 0x619c]
push ebx
mov dword [ebp + 0x6180], 0x17
mov dword [ebp + 0x6184], ebx
mov esi, str.weibo.com
lea edi, [ebp + 0x6188]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
push 5
pop ecx
mov dword [ebp + 0x6388], 0x17
mov dword [ebp + 0x638c], ebx
mov esi, str.douban.com
lea edi, [ebp + 0x6390]
rep movsd dword es:[edi], dword [esi]
push 0x1ea
lea eax, [ebp + 0x63a6]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 8
pop ecx
mov esi, str.tieba.baidu.com
lea edi, [ebp + 0x6598]
push 0x1e0
mov dword [ebp + 0x6590], 0x17
mov dword [ebp + 0x6594], ebx
rep movsd dword es:[edi], dword [esi]
push ebx
lea eax, [ebp + 0x65b8]
push eax
call fcn.00596530
push 6
pop ecx
push 0x1e8
lea eax, [ebp + 0x67b8]
push ebx
mov dword [ebp + 0x6798], 0x17
mov dword [ebp + 0x679c], ebx
mov esi, str.pengyou.com
lea edi, [ebp + 0x67a0]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
push 7
pop ecx
push 0x1e4
lea eax, [ebp + 0x69c4]
push ebx
mov dword [ebp + 0x69a0], 0x17
mov dword [ebp + 0x69a4], ebx
mov esi, str.kaixin001.com
lea edi, [ebp + 0x69a8]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
push 5
pop ecx
push 0x1ec
lea eax, [ebp + 0x6bc4]
push ebx
mov dword [ebp + 0x6ba8], 0x18
mov dword [ebp + 0x6bac], ebx
mov esi, str.youku.com
lea edi, [ebp + 0x6bb0]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
add esp, 0x48
push 5
pop ecx
push 0x1ec
lea eax, [ebp + 0x6dcc]
push ebx
mov dword [ebp + 0x6db0], 0x18
mov dword [ebp + 0x6db4], ebx
mov esi, str.tudou.com
lea edi, [ebp + 0x6db8]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
mov dword [ebp + 0x6fb8], 0x18
mov dword [ebp + 0x6fbc], ebx
mov esi, str.ku6.com
lea edi, [ebp + 0x6fc0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x1f0
lea eax, [ebp + 0x6fd0]
push ebx
push eax
movsd dword es:[edi], dword [esi]
call fcn.00596530
mov dword [ebp + 0x71c0], 0x18
mov dword [ebp + 0x71c4], ebx
mov esi, str.letv.com
lea edi, [ebp + 0x71c8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x1ee
lea eax, [ebp + 0x71da]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
mov dword [ebp + 0x73c8], 0x18
mov dword [ebp + 0x73cc], ebx
push 5
pop ecx
push 0x1ec
lea eax, [ebp + 0x73e4]
push ebx
mov esi, str.iqiyi.com
lea edi, [ebp + 0x73d0]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
push 6
pop ecx
push 0x1e8
lea eax, [ebp + 0x75f0]
push ebx
mov dword [ebp + 0x75d0], 0x18
mov dword [ebp + 0x75d4], ebx
mov esi, str.tv.sohu.com
lea edi, [ebp + 0x75d8]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
push 5
pop ecx
mov dword [ebp + 0x77d8], 0x18
mov dword [ebp + 0x77dc], ebx
mov esi, str.kankan.com
lea edi, [ebp + 0x77e0]
rep movsd dword es:[edi], dword [esi]
push 0x1ea
lea eax, [ebp + 0x77f6]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
mov dword [ebp + 0x79e0], 0x18
mov dword [ebp + 0x79e4], ebx
mov esi, str.v.qq.com
lea edi, [ebp + 0x79e8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
add esp, 0x48
movsd dword es:[edi], dword [esi]
push 0x1ee
lea eax, [ebp + 0x79fa]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 9
pop ecx
push 0x1dc
lea eax, [ebp + 0x7c14]
push ebx
mov dword [ebp + 0x7be8], 0x18
mov dword [ebp + 0x7bec], ebx
mov esi, str.video.sina.com.cn
lea edi, [ebp + 0x7bf0]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
mov dword [ebp + 0x7df0], 0x18
mov dword [ebp + 0x7df4], ebx
mov esi, str.cntv.cn
lea edi, [ebp + 0x7df8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x1f0
lea eax, [ebp + 0x7e08]
push ebx
push eax
movsd dword es:[edi], dword [esi]
call fcn.00596530
push 6
pop ecx
mov esi, str.v.hao123.com
lea edi, [ebp + 0x8000]
mov dword [ebp + 0x7ff8], 0x18
mov dword [ebp + 0x7ffc], ebx
rep movsd dword es:[edi], dword [esi]
push 0x1e6
lea eax, [ebp + 0x801a]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 8
pop ecx
mov dword [ebp + 0x8200], 0x18
mov dword [ebp + 0x8204], ebx
mov esi, str.topic.hao123.com
lea edi, [ebp + 0x8208]
rep movsd dword es:[edi], dword [esi]
push 0x1de
lea eax, [ebp + 0x822a]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 8
pop ecx
push 0x1e0
lea eax, [ebp + 0x8430]
push ebx
mov dword [ebp + 0x8408], 0x18
mov dword [ebp + 0x840c], ebx
mov esi, str.live.hao123.com
lea edi, [ebp + 0x8410]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
mov dword [ebp + 0x8610], 0x18
mov dword [ebp + 0x8614], ebx
mov esi, str.56.com
lea edi, [ebp + 0x8618]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
add esp, 0x48
movsd dword es:[edi], dword [esi]
push 0x1f2
lea eax, [ebp + 0x8626]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 6
pop ecx
push 0x1e8
lea eax, [ebp + 0x8838]
push ebx
mov dword [ebp + 0x8818], 0x19
mov dword [ebp + 0x881c], ebx
mov esi, str.news.qq.com
lea edi, [ebp + 0x8820]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
push 8
pop ecx
mov dword [ebp + 0x8a20], 0x19
mov dword [ebp + 0x8a24], ebx
mov esi, str.news.sina.com.cn
lea edi, [ebp + 0x8a28]
rep movsd dword es:[edi], dword [esi]
push 0x1de
lea eax, [ebp + 0x8a4a]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 7
pop ecx
push 0x1e4
mov esi, str.news.sohu.com
lea edi, [ebp + 0x8c30]
push ebx
lea eax, [ebp + 0x8c4c]
mov dword [ebp + 0x8c28], 0x19
mov dword [ebp + 0x8c2c], ebx
rep movsd dword es:[edi], dword [esi]
push eax
call fcn.00596530
push 5
pop ecx
push 0x1ec
lea eax, [ebp + 0x8e4c]
push ebx
mov dword [ebp + 0x8e30], 0x19
mov dword [ebp + 0x8e34], ebx
mov esi, str.ifeng.com
lea edi, [ebp + 0x8e38]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
push 6
pop ecx
mov dword [ebp + 0x9038], 0x19
mov dword [ebp + 0x903c], ebx
mov esi, str.news.163.com
lea edi, [ebp + 0x9040]
rep movsd dword es:[edi], dword [esi]
push 0x1e6
lea eax, [ebp + 0x905a]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
add esp, 0x48
push 7
pop ecx
mov dword [ebp + 0x9240], 0x19
mov dword [ebp + 0x9244], ebx
mov esi, str.news.baidu.com
lea edi, [ebp + 0x9248]
rep movsd dword es:[edi], dword [esi]
push 0x1e2
lea eax, [ebp + 0x9266]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 8
pop ecx
push 0x1e0
lea eax, [ebp + 0x9470]
push ebx
mov dword [ebp + 0x9448], 0x19
mov dword [ebp + 0x944c], ebx
mov esi, str.news.hao123.com
lea edi, [ebp + 0x9450]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
push 7
pop ecx
push 0x1e4
lea eax, [ebp + 0x9674]
push ebx
mov dword [ebp + 0x9650], 0x1a
mov dword [ebp + 0x9654], ebx
mov esi, 0x5e3838
lea edi, [ebp + 0x9658]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
push 9
pop ecx
push 0x1dc
lea eax, [ebp + 0x9884]
push ebx
mov dword [ebp + 0x9858], 0x1a
mov dword [ebp + 0x985c], ebx
mov esi, str.www.google.com.hk
lea edi, [ebp + 0x9860]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
push 6
mov dword [ebp + 0x9a60], 0x1a
mov dword [ebp + 0x9a64], ebx
pop ecx
mov esi, str.www.soso.com
lea edi, [ebp + 0x9a68]
rep movsd dword es:[edi], dword [esi]
push 0x1e6
lea eax, [ebp + 0x9a82]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 5
pop ecx
mov dword [ebp + 0x9c68], 0x1a
mov dword [ebp + 0x9c6c], ebx
mov esi, str.www.so.com
lea edi, [ebp + 0x9c70]
rep movsd dword es:[edi], dword [esi]
push 0x1ea
lea eax, [ebp + 0x9c86]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
add esp, 0x48
push 7
pop ecx
push 0x1e4
lea eax, [ebp + 0x9e94]
push ebx
mov dword [ebp + 0x9e70], 0x1a
mov dword [ebp + 0x9e74], ebx
mov esi, str.www.sogou.com
lea edi, [ebp + 0x9e78]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
push 5
pop ecx
mov dword [ebp + 0xa078], 0x1b
mov dword [ebp + 0xa07c], ebx
mov esi, str.ithome.com
lea edi, [ebp + 0xa080]
rep movsd dword es:[edi], dword [esi]
push 0x1ea
lea eax, [ebp + 0xa096]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 5
pop ecx
push 0x1ec
lea eax, [ebp + 0xa29c]
push ebx
mov dword [ebp + 0xa280], 0x1b
mov dword [ebp + 0xa284], ebx
mov esi, str.zhihu.com
lea edi, [ebp + 0xa288]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
push 6
pop ecx
push 0x1e8
lea eax, [ebp + 0xa4a8]
push ebx
mov dword [ebp + 0xa488], 0x1b
mov dword [ebp + 0xa48c], ebx
mov esi, str.it.sohu.com
lea edi, [ebp + 0xa490]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
push 5
pop ecx
mov esi, str.it168.com
lea edi, [ebp + 0xa698]
push 0x1ec
mov dword [ebp + 0xa690], 0x1b
mov dword [ebp + 0xa694], ebx
rep movsd dword es:[edi], dword [esi]
push ebx
lea eax, [ebp + 0xa6ac]
push eax
call fcn.00596530
push 0xa
pop ecx
push 0x1d8
lea eax, [ebp + 0xa8c8]
push ebx
mov dword [ebp + 0xa898], 0x1b
mov dword [ebp + 0xa89c], 1
mov esi, str.:__tech.163.com_it_
lea edi, [ebp + 0xa8a0]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
add esp, 0x48
push 5
pop ecx
mov dword [ebp + 0xaaa0], 0x1b
mov dword [ebp + 0xaaa4], ebx
mov esi, str.cnbeta.com
lea edi, [ebp + 0xaaa8]
rep movsd dword es:[edi], dword [esi]
push 0x1ea
lea eax, [ebp + 0xaabe]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 6
pop ecx
push 0x1e8
lea eax, [ebp + 0xacc8]
push ebx
mov dword [ebp + 0xaca8], 0x1b
mov dword [ebp + 0xacac], ebx
mov esi, str.tech.qq.com
lea edi, [ebp + 0xacb0]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
push 8
pop ecx
mov dword [ebp + 0xaeb0], 0x1b
mov dword [ebp + 0xaeb4], ebx
mov esi, str.tech.sina.com.cn
lea edi, [ebp + 0xaeb8]
rep movsd dword es:[edi], dword [esi]
push 0x1de
lea eax, [ebp + 0xaeda]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 9
pop ecx
mov dword [ebp + 0xb0b8], 0x1c
mov dword [ebp + 0xb0bc], ebx
mov esi, str.sports.sina.com.cn
lea edi, [ebp + 0xb0c0]
rep movsd dword es:[edi], dword [esi]
push 0x1da
lea eax, [ebp + 0xb0e6]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 8
pop ecx
push 0x1e0
lea eax, [ebp + 0xb2e8]
push ebx
mov dword [ebp + 0xb2c0], 0x1c
mov dword [ebp + 0xb2c4], ebx
mov esi, str.sports.sohu.com
lea edi, [ebp + 0xb2c8]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
mov dword [ebp + 0xb4c8], 0x1c
mov dword [ebp + 0xb4cc], ebx
push 7
pop ecx
mov esi, str.sports.163.com
lea edi, [ebp + 0xb4d0]
rep movsd dword es:[edi], dword [esi]
push 0x1e2
lea eax, [ebp + 0xb4ee]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
add esp, 0x48
push 7
pop ecx
push 0x1e4
lea eax, [ebp + 0xb6f4]
push ebx
mov dword [ebp + 0xb6d0], 0x1c
mov dword [ebp + 0xb6d4], ebx
mov esi, str.sports.qq.com
lea edi, [ebp + 0xb6d8]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
push 7
pop ecx
mov dword [ebp + 0xb8d8], 0x1c
mov dword [ebp + 0xb8dc], ebx
mov esi, str.sports.cntv.cn
lea edi, [ebp + 0xb8e0]
rep movsd dword es:[edi], dword [esi]
push 0x1e2
lea eax, [ebp + 0xb8fe]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 6
pop ecx
mov dword [ebp + 0xbae0], 0x1c
mov dword [ebp + 0xbae4], ebx
mov esi, str.www.hupu.com
lea edi, [ebp + 0xbae8]
rep movsd dword es:[edi], dword [esi]
push 0x1e6
lea eax, [ebp + 0xbb02]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 7
pop ecx
mov dword [ebp + 0xbce8], 0x1d
mov dword [ebp + 0xbcec], ebx
mov esi, str.fashion.qq.com
lea edi, [ebp + 0xbcf0]
rep movsd dword es:[edi], dword [esi]
push 0x1e2
lea eax, [ebp + 0xbd0e]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 8
pop ecx
mov dword [ebp + 0xbef0], 0x1d
mov dword [ebp + 0xbef4], ebx
mov esi, str.fashion.sohu.com
lea edi, [ebp + 0xbef8]
rep movsd dword es:[edi], dword [esi]
push 0x1de
lea eax, [ebp + 0xbf1a]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 7
mov dword [ebp + 0xc0f8], 0x1d
mov dword [ebp + 0xc0fc], ebx
pop ecx
mov esi, str.women.sohu.com
lea edi, [ebp + 0xc100]
rep movsd dword es:[edi], dword [esi]
push 0x1e2
lea eax, [ebp + 0xc11e]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
add esp, 0x48
push 0xa
pop ecx
push 0x1d8
lea eax, [ebp + 0xc330]
push ebx
mov dword [ebp + 0xc300], 0x1d
mov dword [ebp + 0xc304], ebx
mov esi, str.fashion.sina.com.cn
lea edi, [ebp + 0xc308]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
push 0xa
pop ecx
push 0x1d8
lea eax, [ebp + 0xc538]
push ebx
mov dword [ebp + 0xc508], 0x1d
mov dword [ebp + 0xc50c], ebx
mov esi, str.eladies.sina.com.cn
lea edi, [ebp + 0xc510]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
push 6
pop ecx
mov dword [ebp + 0xc710], 0x1d
mov dword [ebp + 0xc714], ebx
mov esi, str.lady.163.com
lea edi, [ebp + 0xc718]
rep movsd dword es:[edi], dword [esi]
push 0x1e6
lea eax, [ebp + 0xc732]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 7
pop ecx
mov dword [ebp + 0xc918], 0x1e
mov dword [ebp + 0xc91c], ebx
mov esi, 0x5e3b2c
lea edi, [ebp + 0xc920]
rep movsd dword es:[edi], dword [esi]
push 0x1e2
lea eax, [ebp + 0xc93e]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 6
pop ecx
mov dword [ebp + 0xcb20], 0x1e
mov dword [ebp + 0xcb24], ebx
mov esi, str.www.duba.com
lea edi, [ebp + 0xcb28]
rep movsd dword es:[edi], dword [esi]
push 0x1e6
lea eax, [ebp + 0xcb42]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 5
pop ecx
mov dword [ebp + 0xcd28], 0x1e
mov dword [ebp + 0xcd2c], ebx
mov esi, str.hao.360.cn
lea edi, [ebp + 0xcd30]
rep movsd dword es:[edi], dword [esi]
push 0x1ea
movsw word es:[edi], word [esi]
push ebx
lea eax, [ebp + 0xcd46]
push eax
call fcn.00596530
add esp, 0x48
push 7
pop ecx
mov dword [ebp + 0xcf30], 0x1e
mov dword [ebp + 0xcf34], ebx
mov esi, str.daohang.qq.com
lea edi, [ebp + 0xcf38]
rep movsd dword es:[edi], dword [esi]
push 0x1e2
lea eax, [ebp + 0xcf56]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 6
pop ecx
mov dword [ebp + 0xd138], 0x1e
mov dword [ebp + 0xd13c], ebx
mov esi, str.www.2345.com
lea edi, [ebp + 0xd140]
rep movsd dword es:[edi], dword [esi]
push 0x1e6
lea eax, [ebp + 0xd15a]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 5
pop ecx
mov dword [ebp + 0xd340], 0x1e
mov dword [ebp + 0xd344], ebx
mov esi, str.hao.qq.com
lea edi, [ebp + 0xd348]
rep movsd dword es:[edi], dword [esi]
push 0x1ea
lea eax, [ebp + 0xd35e]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 6
pop ecx
mov dword [ebp + 0xd548], 0x1e
mov dword [ebp + 0xd54c], ebx
mov esi, str.www.3600.com
lea edi, [ebp + 0xd550]
rep movsd dword es:[edi], dword [esi]
push 0x1e6
lea eax, [ebp + 0xd56a]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 6
pop ecx
mov dword [ebp + 0xd750], 0x1e
mov dword [ebp + 0xd754], ebx
mov esi, str.123.duba.net
lea edi, [ebp + 0xd758]
rep movsd dword es:[edi], dword [esi]
push 0x1e6
lea eax, [ebp + 0xd772]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 7
pop ecx
push 0x1e4
lea eax, [ebp + 0xd97c]
push ebx
mov dword [ebp + 0xd958], 0x1e
mov dword [ebp + 0xd95c], ebx
mov esi, str.123.sogou.com
lea edi, [ebp + 0xd960]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
add esp, 0x48
push 7
pop ecx
push 0x1e4
lea eax, [ebp + 0xdb84]
push ebx
mov dword [ebp + 0xdb60], 0x1e
mov dword [ebp + 0xdb64], ebx
mov esi, str.www.114la.com
lea edi, [ebp + 0xdb68]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
push 7
pop ecx
push 0x1e4
lea eax, [ebp + 0xdd8c]
push ebx
mov dword [ebp + 0xdd68], 0x1e
mov dword [ebp + 0xdd6c], ebx
mov esi, str.hao.rising.cn
lea edi, [ebp + 0xdd70]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
push 7
pop ecx
mov dword [ebp + 0xdf70], 0x1e
mov dword [ebp + 0xdf74], ebx
mov esi, str.www.tao123.com
lea edi, [ebp + 0xdf78]
rep movsd dword es:[edi], dword [esi]
push 0x1e2
lea eax, [ebp + 0xdf96]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 6
pop ecx
mov dword [ebp + 0xe178], 0x1e
mov dword [ebp + 0xe17c], ebx
mov esi, str.www.1616.net
lea edi, [ebp + 0xe180]
rep movsd dword es:[edi], dword [esi]
push 0x1e6
lea eax, [ebp + 0xe19a]
push ebx
push eax
movsw word es:[edi], word [esi]
call fcn.00596530
push 6
pop ecx
push 0x1e8
lea eax, [ebp + 0xe3a0]
push ebx
mov dword [ebp + 0xe380], 0x1e
mov dword [ebp + 0xe384], ebx
mov esi, str.www.265.com
lea edi, [ebp + 0xe388]
push eax
rep movsd dword es:[edi], dword [esi]
call fcn.00596530
xor eax, eax
push 0x1fe
mov word [ebp + 0xe588], ax
lea eax, [ebp + 0xe58a]
push ebx
push eax
call fcn.00596530
add esp, 0x48
push 0x38
lea eax, [ebp - 0x58]
push ebx
push eax
call fcn.00596530
lea eax, [ebp + 0xe588]
add esp, 0xc
mov dword [ebp - 0x5c], 0x3c
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], 0xff
lea eax, [ebp - 0x5c]
push eax
push ebx
push ebx
push dword [ebp - 0x1c]
call dword [sym.imp.WININET.dll_InternetCrackUrlW]
test eax, eax
je 0x42b0b6
cmp word [ebp + 0xe588], bx
je 0x42b0b6
xor edi, edi
lea esi, [ebp + 8]
mov eax, dword [esi - 4]
cmp eax, ebx
jne 0x42ade8
push esi
push ebx
lea eax, [ebp + 0xe588]
push eax
call dword [sym.imp.SHLWAPI.dll_StrRStrIW]
cmp eax, ebx
je 0x42ae03
lea ecx, [ebp + 0xe588]
cmp eax, ecx
je 0x42adc9
push 0x2e
pop ecx
cmp cx, word [eax - 2]
jne 0x42ae03
call fcn.0045f8eb
imul edi, edi, 0x208
mov ecx, dword [ebp + edi]
mov edi, str.typeurl
push 1
mov edx, edi
call fcn.0045f9b4
jmp 0x42ae31
cmp eax, 1
jne 0x42ae03
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
push esi
push dword [ebp - 0x1c]
call dword [sym.imp.SHLWAPI.dll_StrCmpNIW]
test eax, eax
je 0x42ae11
inc edi
add esi, 0x208
cmp edi, 0x71
jb 0x42ad9c
jmp 0x42ae2c
call fcn.0045f8eb
imul edi, edi, 0x208
mov ecx, dword [ebp + edi]
push 1
mov edx, str.typeurl
call fcn.0045f9b4
mov edi, str.typeurl
mov esi, dword [ebp - 0x1c]
call fcn.0042cfae
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], ebx
cmp eax, ebx
jne 0x42ae4d
mov eax, esi
call fcn.0042cfea
mov dword [ebp - 0x18], eax
mov esi, dword [ebp - 0x20]
mov eax, dword [esi]
dec eax
dec eax
je 0x42ae6d
dec eax
dec eax
je 0x42aea1
sub eax, 4
je 0x42ae91
sub eax, 0x18
je 0x42ae6d
sub eax, 0x20
jne 0x42aef3
call fcn.0045f8eb
push 1
push 0xa
pop ecx
mov edx, str.siteurl
call fcn.0045f9b4
cmp dword [ebp - 0x14], ebx
je 0x42aed9
call fcn.0045f8eb
push 1
push 4
jmp 0x42aeeb
call fcn.0045f8eb
push 1
push 0xb
mov edx, str.siteurl
jmp 0x42aeed
call fcn.0045f8eb
push 1
push 0xc
pop ecx
mov edx, str.siteurl
call fcn.0045f9b4
cmp dword [ebp - 0x14], ebx
je 0x42aec5
call fcn.0045f8eb
push 1
push 8
jmp 0x42aeeb
cmp dword [ebp - 0x18], ebx
je 0x42b0bb
call fcn.0045f8eb
push 1
push 7
jmp 0x42aeeb
cmp dword [ebp - 0x18], ebx
je 0x42b0bb
call fcn.0045f8eb
push 1
push 6
mov edx, edi
pop ecx
call fcn.0045f9b4
cmp dword [ebp - 0x14], ebx
je 0x42af8b
call fcn.0045f8eb
xor ecx, ecx
push 1
inc ecx
mov edx, edi
call fcn.0045f9b4
push 0x16
push str.https:__www.hao123.com
push dword [ebp - 0x1c]
call fcn.00590d27
add esp, 0xc
test eax, eax
jne 0x42af34
call fcn.0045f8eb
push 1
push 3
pop ecx
mov edx, edi
call fcn.0045f9b4
mov eax, dword [0x63696c]
mov ecx, 0x63696c
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x1c]
mov edi, 0x5d0324
mov dword [ebp - 4], ebx
call fcn.00426f0a
pop ecx
call fcn.0045f8eb
mov esi, dword [ebp - 0x14]
push 1
push 1
mov ecx, esi
call fcn.0045e549
pop ecx
mov ecx, eax
add ecx, 0x22
mov edx, str.typeurl
call fcn.0045f9b4
or dword [ebp - 4], 0xffffffff
lea eax, [esi - 0x10]
jmp 0x42b0b1
cmp dword [ebp - 0x18], ebx
je 0x42b0bb
call fcn.0045f8eb
push 1
push 5
pop ecx
mov edx, edi
call fcn.0045f9b4
mov eax, dword [0x63696c]
mov ecx, 0x63696c
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x1c]
mov edi, 0x5d0324
mov dword [ebp - 4], 1
call fcn.00426f0a
pop ecx
call fcn.0045f8eb
mov ecx, dword [ebp - 0x18]
push 1
push ebx
call fcn.0045e549
pop ecx
mov ecx, eax
add ecx, 0x1e
mov edx, str.typeurl
call fcn.0045f9b4
add esi, 8
mov eax, dword [esi]
cmp dword [eax - 0xc], ebx
je 0x42b0a7
push str.__www.hao123.com_
xor ecx, ecx
mov byte [ebp - 0xd], bl
call fcn.004187b1
test eax, eax
jle 0x42b02a
call fcn.0045f8eb
push 1
push 0x10
pop ecx
mov edx, str.typeurl
call fcn.0045f9b4
mov byte [ebp - 0xd], 1
push str.__www.baidu.com_
xor ecx, ecx
call fcn.004187b1
test eax, eax
jle 0x42b052
call fcn.0045f8eb
push 1
push 0x11
pop ecx
mov edx, str.typeurl
call fcn.0045f9b4
mov byte [ebp - 0xd], 1
cmp byte [ebp - 0xd], bl
je 0x42b0a7
mov eax, dword [0x63696c]
mov ecx, 0x63696c
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 2
mov eax, dword [esi]
push ecx
call fcn.00426f0a
mov esi, dword [ebp - 0x14]
pop ecx
push esi
lea eax, [ebp - 0x18]
push eax
call fcn.0042e684
test eax, eax
je 0x42b09f
call fcn.0045f8eb
push 1
push 0x12
pop ecx
mov edx, str.typeurl
call fcn.0045f9b4
lea eax, [esi - 0x10]
call fcn.00407b6b
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x18]
add eax, 0xfffffff0
call fcn.00407b6b
mov edi, str.typeurl
call fcn.0045f8eb
push 1
push 0x14
pop ecx
mov edx, edi
call fcn.0045f9b4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0xe788]
xor ecx, ebp
call fcn.0058f3cf
add ebp, 0xe78c
leave
ret