Function at 0x402330
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, dword [0x4046f8]
sub esp, 0x54
test eax, eax
jne 0x402377
push edi
mov edi, str.lzzxB99
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
pop edi
cmp byte [ecx + 0x40430f], 0x71
jne 0x402366
cmp byte [ecx + 0x40430e], 0x64
jne 0x402366
mov byte [0x4046fc], 1
mov byte [ecx + 0x40430d], 0
mov dword [0x4046f8], 1
push ebx
push esi
mov esi, str.http:__www.baidu.com_index.html
mov eax, str.lzzxB99
mov dl, byte [eax]
mov bl, byte [esi]
mov cl, dl
cmp dl, bl
jne 0x4023ab
test cl, cl
je 0x4023a7
mov dl, byte [eax + 1]
mov bl, byte [esi + 1]
mov cl, dl
cmp dl, bl
jne 0x4023ab
add eax, 2
add esi, 2
test cl, cl
jne 0x402383
xor eax, eax
jmp 0x4023b0
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4023bc
pop esi
xor al, al
pop ebx
add esp, 0x54
ret
mov al, 0x72
mov cl, 0x5c
mov byte [esp + 0x30], al
mov byte [esp + 0x33], al
mov byte [esp + 0x41], al
mov byte [esp + 0x4b], al
mov byte [esp + 0x4d], al
mov al, 0x2e
mov byte [esp + 0x57], al
mov byte [esp + 0x17], al
mov byte [esp + 0x2e], cl
mov byte [esp + 0x3c], cl
mov byte [esp + 0x4e], cl
lea eax, [esp + 0x10]
mov bl, 0x65
mov dl, 0x49
mov cl, 0x58
push eax
mov byte [esp + 0x30], 0x43
mov byte [esp + 0x31], 0x3a
mov byte [esp + 0x33], 0x50
mov byte [esp + 0x35], 0x6f
mov byte [esp + 0x36], 0x67
mov byte [esp + 0x38], 0x61
mov byte [esp + 0x39], 0x6d
mov byte [esp + 0x3a], 0x20
mov byte [esp + 0x3b], 0x46
mov byte [esp + 0x3c], 0x69
mov byte [esp + 0x3d], 0x6c
mov byte [esp + 0x3e], bl
mov byte [esp + 0x3f], 0x73
mov byte [esp + 0x41], dl
mov byte [esp + 0x42], 0x6e
mov byte [esp + 0x43], 0x74
mov byte [esp + 0x44], bl
mov byte [esp + 0x46], 0x6e
mov byte [esp + 0x47], bl
mov byte [esp + 0x48], 0x74
mov byte [esp + 0x49], 0x20
mov byte [esp + 0x4a], 0x45
mov byte [esp + 0x4b], 0x78
mov byte [esp + 0x4c], 0x70
mov byte [esp + 0x4d], 0x6c
mov byte [esp + 0x4e], 0x6f
mov byte [esp + 0x50], bl
mov byte [esp + 0x53], dl
mov byte [esp + 0x54], 0x45
mov byte [esp + 0x55], cl
mov byte [esp + 0x56], 0x50
mov byte [esp + 0x57], 0x4c
mov byte [esp + 0x58], 0x4f
mov byte [esp + 0x59], 0x52
mov byte [esp + 0x5a], 0x45
mov byte [esp + 0x5c], 0x45
mov byte [esp + 0x5d], cl
mov byte [esp + 0x5e], 0x45
mov byte [esp + 0x5f], 0
mov byte [esp + 0x14], 0x53
mov byte [esp + 0x15], 0x68
mov byte [esp + 0x16], bl
mov byte [esp + 0x17], 0x6c
mov byte [esp + 0x18], 0x6c
mov byte [esp + 0x19], 0x33
mov byte [esp + 0x1a], 0x32
mov byte [esp + 0x1c], 0x64
mov byte [esp + 0x1d], 0x6c
mov byte [esp + 0x1e], 0x6c
mov byte [esp + 0x1f], 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov esi, eax
mov byte [esp + 0x1c], 0x53
mov byte [esp + 0x1d], 0x68
mov byte [esp + 0x1e], bl
mov byte [esp + 0x1f], 0x6c
mov byte [esp + 0x20], 0x6c
mov byte [esp + 0x21], 0x45
mov byte [esp + 0x22], 0x78
mov byte [esp + 0x23], bl
mov byte [esp + 0x24], 0x63
mov byte [esp + 0x25], 0x75
mov byte [esp + 0x26], 0x74
lea ecx, [esp + 0x1c]
mov byte [esp + 0x27], bl
push ecx
push esi
mov byte [esp + 0x30], 0x41
mov byte [esp + 0x31], 0
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov cl, byte [0x4046fc]
mov byte [esp + 8], 0x6f
test cl, cl
mov byte [esp + 9], 0x70
mov byte [esp + 0xa], bl
mov byte [esp + 0xb], 0x6e
mov byte [esp + 0xc], 0
je 0x402585
push 0
push 0
lea edx, [esp + 0x34]
push str.lzzxB99
lea ecx, [esp + 0x14]
push edx
push ecx
push 0
call eax
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
pop esi
mov al, 1
pop ebx
add esp, 0x54
ret
push 5
push 0
push 0
lea edx, [esp + 0x14]
push str.lzzxB99
push edx
push 0
call eax
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
pop esi
mov al, 1
pop ebx
add esp, 0x54
ret