Function at 0x40a500
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x44652e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, dword [esp + 0x14]
push ebx
push ebp
push esi
push edi
mov ebp, ecx
push eax
push 0x66
mov dword [esp + 0x18], ebp
call fcn.00438640
xor ebx, ebx
mov dword [esp + 0x1c], ebx
mov dword [ebp + 0x60], ebx
mov dword [ebp + 0x64], ebx
mov ecx, dword [0x45ccac]
mov dword [ebp + 0x68], ecx
mov edx, dword [0x45ccac]
mov dword [ebp + 0x6c], edx
mov eax, dword [0x45ccac]
mov dword [ebp + 0x70], eax
mov ecx, dword [0x45ccac]
mov dword [ebp + 0x74], ecx
mov edx, dword [0x45ccac]
mov dword [ebp + 0x78], edx
mov eax, dword [0x45ccac]
mov dword [ebp + 0x7c], eax
mov ecx, dword [0x45ccac]
mov dword [ebp + 0x80], ecx
mov edx, dword [0x45ccac]
mov dword [ebp + 0x8c], edx
mov eax, dword [0x45ccac]
mov dword [ebp + 0x90], eax
mov ecx, dword [0x45ccac]
mov dword [ebp + 0x94], ecx
mov edx, dword [0x45ccac]
mov dword [ebp + 0xa0], edx
lea ecx, [ebp + 0x338]
mov byte [esp + 0x1c], 0xd
call fcn.00416ab0
mov eax, dword [0x45ccac]
mov dword [ebp + 0xde0], eax
mov ecx, dword [0x45ccac]
mov dword [ebp + 0xde4], ecx
mov edx, dword [0x45ccac]
mov dword [ebp + 0xde8], edx
mov eax, dword [0x45ccac]
mov dword [ebp + 0xdec], eax
mov ecx, dword [0x45ccac]
mov dword [ebp + 0xe08], ecx
lea ecx, [ebp + 0xe0c]
mov byte [esp + 0x1c], 0x13
call fcn.00405ad0
lea ecx, [ebp + 0x1e5c]
mov byte [esp + 0x1c], 0x14
call fcn.00431f57
mov edx, dword [0x45ccac]
mov dword [ebp + 0x1e78], edx
mov byte [esp + 0x1c], 0x16
lea ecx, [ebp + 0x1e7c]
call fcn.00415870
mov eax, dword [0x45ccac]
mov dword [ebp + 0x1edc], eax
mov ecx, dword [0x45ccac]
mov dword [ebp + 0x1ee4], ecx
mov edx, dword [0x45ccac]
mov dword [ebp + 0x1ee8], edx
mov eax, dword [0x45ccac]
mov dword [ebp + 0x1eec], eax
mov ecx, dword [0x45ccac]
mov dword [ebp + 0x1ef0], ecx
mov edx, dword [0x45ccac]
mov dword [ebp + 0x1f1c], edx
push fcn.00436752
push 0x40acb0
push 0x3c
lea eax, [ebp + 0x1f28]
push 4
push eax
mov byte [esp + 0x30], 0x1a
call fcn.00422414
mov ecx, dword [0x45ccac]
mov dword [ebp + 0x2018], ecx
mov edx, dword [0x45ccac]
mov dword [ebp + 0x201c], edx
mov eax, dword [0x45ccac]
mov dword [ebp + 0x2020], eax
mov ecx, dword [0x45ccac]
mov dword [ebp + 0x2024], ecx
mov edx, dword [0x45ccac]
mov dword [ebp + 0x2034], edx
mov eax, dword [0x45ccac]
mov dword [ebp + 0x2038], eax
mov ecx, dword [0x45ccac]
mov dword [ebp + 0x203c], ecx
mov edx, dword [0x45ccac]
mov dword [ebp + 0x2044], edx
mov eax, dword [0x45ccac]
mov dword [ebp + 0x204c], eax
lea ecx, [ebp + 0x2050]
mov byte [esp + 0x1c], 0x1f
call fcn.00431f57
lea ecx, [ebp + 0x2064]
mov byte [esp + 0x1c], 0x20
call fcn.00431f57
lea ecx, [ebp + 0x207c]
mov byte [esp + 0x1c], 0x21
call fcn.00431f57
lea ecx, [ebp + 0x2094]
mov byte [esp + 0x1c], 0x22
call fcn.00416cb0
lea ecx, [ebp + 0x209c]
mov byte [esp + 0x1c], 0x23
call fcn.0043138d
mov ecx, dword [0x45ccac]
mov dword [ebp + 0x20a8], ecx
mov edx, dword [0x45ccac]
mov dword [ebp + 0x20b0], edx
lea ecx, [ebp + 0x20b8]
mov byte [esp + 0x1c], 0x26
call fcn.00417e50
mov byte [esp + 0x1c], 0x27
lea esi, [ebp + 0x2120]
push ebx
mov ecx, esi
call fcn.0041a8aa
mov dword [esi], vtable.CCriticalSection.0
add esi, 8
push esi
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov dword [ebp + 0x2140], ebx
lea ecx, [ebp + 0x2144]
mov byte [esp + 0x1c], 0x29
call fcn.00416300
lea esi, [ebp + 0x2184]
mov byte [esp + 0x1c], 0x2a
mov ecx, esi
call fcn.00432d6c
mov dword [esi], vtable.CButton.0
lea esi, [ebp + 0x21c0]
mov byte [esp + 0x1c], 0x2b
mov ecx, esi
call fcn.00432d6c
mov dword [esi], vtable.CButton.0
lea esi, [ebp + 0x21fc]
mov byte [esp + 0x1c], 0x2c
mov ecx, esi
call fcn.00432d6c
mov dword [esi], vtable.CButton.0
lea esi, [ebp + 0x2238]
mov byte [esp + 0x1c], 0x2d
mov ecx, esi
call fcn.00432d6c
mov dword [esi], vtable.CButton.0
lea esi, [ebp + 0x2274]
mov byte [esp + 0x1c], 0x2e
mov ecx, esi
call fcn.00432d6c
mov dword [esi], vtable.CButton.0
lea esi, [ebp + 0x22b0]
mov byte [esp + 0x1c], 0x2f
mov ecx, esi
call fcn.00432d6c
mov dword [esi], vtable.CButton.0
lea esi, [ebp + 0x22ec]
mov byte [esp + 0x1c], 0x30
mov ecx, esi
call fcn.00432d6c
mov dword [esi], vtable.CButton.0
lea esi, [ebp + 0x2328]
mov byte [esp + 0x1c], 0x31
mov ecx, esi
call fcn.00432d6c
mov dword [esi], vtable.CButton.0
lea esi, [ebp + 0x2364]
mov byte [esp + 0x1c], 0x32
mov ecx, esi
call fcn.00432d6c
mov dword [esi], vtable.CButton.0
lea esi, [ebp + 0x23a0]
mov byte [esp + 0x1c], 0x33
mov ecx, esi
call fcn.00432d6c
mov dword [esi], vtable.CButton.0
lea esi, [ebp + 0x23dc]
mov byte [esp + 0x1c], 0x34
mov ecx, esi
call fcn.00432d6c
mov dword [esi], vtable.CButton.0
mov byte [esp + 0x1c], 0x35
lea esi, [ebp + 0x2418]
mov ecx, esi
call fcn.00432d6c
mov dword [esi], vtable.CButton.0
lea esi, [ebp + 0x2454]
mov byte [esp + 0x1c], 0x36
mov ecx, esi
call fcn.00432d6c
mov dword [esi], vtable.CButton.0
lea esi, [ebp + 0x2490]
mov byte [esp + 0x1c], 0x37
mov ecx, esi
call fcn.00432d6c
mov dword [esi], vtable.CButton.0
lea esi, [ebp + 0x24cc]
mov byte [esp + 0x1c], 0x38
mov ecx, esi
call fcn.00432d6c
mov dword [esi], vtable.CButton.0
lea esi, [ebp + 0x2508]
mov byte [esp + 0x1c], 0x39
mov ecx, esi
call fcn.00432d6c
mov dword [esi], vtable.CButton.0
lea esi, [ebp + 0x2544]
mov byte [esp + 0x1c], 0x3a
mov ecx, esi
call fcn.00432d6c
mov dword [esi], vtable.CButton.0
lea ecx, [ebp + 0x2580]
mov byte [esp + 0x1c], 0x3b
call fcn.00416d50
lea ecx, [ebp + 0x25c0]
mov byte [esp + 0x1c], 0x3c
call fcn.00416d50
mov eax, dword [0x45ccac]
mov dword [ebp + 0x2600], eax
mov ecx, dword [0x45ccac]
lea esi, [ebp + 0x2604]
mov dword [esi], ecx
mov edx, dword [0x45ccac]
lea edi, [ebp + 0x2608]
mov dword [edi], edx
mov eax, dword [0x45ccac]
mov dword [ebp + 0x260c], eax
lea ecx, [ebp + 0x2610]
mov byte [esp + 0x1c], 0x41
call fcn.00432d6c
mov dword [ebp + 0x2610], 0x44bee0
lea ecx, [ebp + 0x264c]
mov byte [esp + 0x1c], 0x42
call fcn.00432d6c
mov dword [ebp + 0x264c], 0x44bee0
lea ecx, [ebp + 0x2688]
mov byte [esp + 0x1c], 0x43
call fcn.00432d6c
mov dword [ebp + 0x2688], 0x44bee0
lea ecx, [ebp + 0x26c4]
mov byte [esp + 0x1c], 0x44
call fcn.00432d6c
mov dword [ebp + 0x26c4], 0x44bee0
mov ecx, dword [0x45ccac]
mov dword [ebp + 0x2700], ecx
mov byte [esp + 0x1c], 0x46
push 0x460d68
mov ecx, esi
mov dword [ebp], method.CDialog.virtual_0
call fcn.004368db
push 0x460d68
mov ecx, edi
call fcn.004368db
push 0x460d68
lea ecx, [ebp + 0x260c]
call fcn.004368db
push str.http:__www.ppdai.com_lend_
lea ecx, [ebp + 0x2700]
call fcn.004368db
call fcn.00441aca
call fcn.00441aca
mov eax, dword [eax + 0xc]
push 0x80
push eax
call dword [sym.imp.USER32.dll_LoadIconA]
mov dword [ebp + 0x2708], eax
mov eax, dword [ebp + 0x2140]
cmp eax, ebx
je 0x40aa83
mov dword [ebp + 0x2140], ebx
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov dword [ebp + 0x20b4], ebx
mov dword [ebp + 0x20a4], 0xe7e
mov byte [ebp + 0x2090], 1
mov dword [ebp + 0x1f00], ebx
push 0x460d68
lea ecx, [ebp + 0x2044]
mov dword [ebp + 0x1efc], ebx
mov dword [ebp + 0x1f04], ebx
mov dword [ebp + 0x1f0c], ebx
mov dword [ebp + 0x2078], ebx
mov dword [ebp + 0x2048], ebx
call fcn.004368db
push 0x460d68
lea ecx, [ebp + 0x203c]
mov dword [ebp + 0x2040], ebx
call fcn.004368db
push 0x460d68
lea ecx, [ebp + 0x2038]
call fcn.004368db
push str._r_n_r_nhttp:__www.ttlee.cn_
lea ecx, [ebp + 0x1e78]
mov dword [ebp + 0x1f24], ebx
mov dword [ebp + 0x1f20], ebx
mov dword [ebp + 0x1f18], ebx
call fcn.004368db
mov edi, 0x460d68
or ecx, 0xffffffff
xor eax, eax
mov dword [ebp + 0x1e74], ebx
mov dword [ebp + 0x1e70], ebx
mov dword [ebp + 0xdd0], ebx
mov dword [ebp + 0xdf0], ebx
mov dword [ebp + 0xdc0], ebx
mov dword [ebp + 0x330], ebx
mov dword [ebp + 0x334], ebx
mov dword [ebp + 0x32c], 4
mov dword [ebp + 0x328], ebx
mov dword [ebp + 0x1f0], 1
mov dword [ebp + 0x1ec], ebx
mov dword [ebp + 0x1f4], ebx
lea edx, [ebp + 0x1fc]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [ebp + 0x260]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x460d68
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [ebp + 0x2c4]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x460d68
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x460d68
or ecx, 0xffffffff
xor eax, eax
mov dword [ebp + 0x1e8], ebx
mov dword [ebp + 0xb4], ebx
lea edx, [ebp + 0x120]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [ebp + 0xbc]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x460d68
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [ebp + 0x184]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x460d68
or ecx, 0xffffffff
mov dword [ebp + 0xa8], ebx
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, ebp
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x14]
pop edi
mov dword [ebp + 0xb8], ebx
mov dword [ebp + 0xac], ebx
mov dword [ebp + 0xa4], ebx
mov dword [ebp + 0x35c], ebx
mov dword [ebp + 0x360], ebx
mov dword [ebp + 0xdd4], ebx
mov dword [ebp + 0xdd8], ebx
mov dword [ebp + 0x2704], ebx
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret 4