Function at 0x481b00
Capabilities:
Access peb ldr_data
Encode data using xor
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5fe6ec
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x230
mov eax, dword [0x672494]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x15c], ecx
mov eax, dword [ebx + 8]
xor esi, esi
movq xmm0, qword [0x64e9a0]
mov dword [ebp - 0x184], eax
mov eax, dword [ebx + 0xc]
mov dword [ebp - 0x188], eax
mov ax, word [0x64e9a8]
movq qword [ebp - 0x194], xmm0
mov word [ebp - 0x18c], ax
nop dword [eax + eax]
mov eax, 0x51eb851f
mov ecx, esi
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x32
sub ecx, eax
add ecx, 0x39
xor word [ebp + esi*2 - 0x194], cx
inc esi
cmp esi, 5
jl 0x481b80
xor eax, eax
mov dword [ebp - 0x110], 0
lea ecx, [ebp - 0x194]
mov dword [ebp - 0x10c], 7
mov word [ebp - 0x120], ax
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x481bd0
sub ecx, edx
lea eax, [ebp - 0x194]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x120]
call fcn.00417d60
mov dword [ebp - 4], 0
mov ecx, 4
movups xmm0, xmmword [str.hkvINW__BQ]
mov edi, dword [0x67be1c]
pextrw eax, xmm0, 7
movups xmmword [ebp - 0x1e4], xmm0
lea edx, [ecx + 0x1b]
test ax, ax
je 0x481d49
xor esi, esi
cmp edi, 2
jl 0x481d20
movaps xmm2, xmmword [0x654300]
mov eax, str.hkvINW__BQ
movaps xmm4, xmmword [0x6543d0]
movaps xmm1, xmm2
punpckldq xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
movd xmm5, ecx
psrad xmm1, xmm5
movd xmm6, edx
movaps xmm0, xmm1
psrld xmm0, xmm6
paddd xmm0, xmm1
pmulld xmm0, xmmword [str.2222]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movaps xmm2, xmmword [0x654310]
paddd xmm2, xmmword [0x654300]
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
paddw xmm1, xmmword [str.99999999]
movq xmm0, qword [eax]
pxor xmm1, xmm0
movaps xmm0, xmm2
movq qword [ebp - 0x1e4], xmm1
movaps xmm1, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm6
paddd xmm0, xmm1
pmulld xmm0, xmmword [str.2222]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
movq xmm0, qword [ebp - 0x1dc]
paddw xmm1, xmmword [str.99999999]
pxor xmm1, xmm0
movq qword [ebp - 0x1dc], xmm1
jmp 0x481d49
mov eax, 0x51eb851f
mov ecx, esi
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x32
sub ecx, eax
add ecx, 0x39
xor word [ebp + esi*2 - 0x1e4], cx
inc esi
cmp esi, 8
jl 0x481d20
xor eax, eax
mov dword [ebp - 0xf8], 0
lea ecx, [ebp - 0x1e4]
mov dword [ebp - 0xf4], 7
mov word [ebp - 0x108], ax
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x481d70
sub ecx, edx
lea eax, [ebp - 0x1e4]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x108]
call fcn.00417d60
mov byte [ebp - 4], 1
cmp word [0x64ea0e], 0
movq xmm0, qword [0x64ea04]
mov eax, dword [0x64ea0c]
movq qword [ebp - 0x1c4], xmm0
mov dword [ebp - 0x1bc], eax
je 0x481de9
xor esi, esi
nop dword [eax]
mov eax, 0x51eb851f
mov ecx, esi
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x32
sub ecx, eax
add ecx, 0x39
xor word [ebp + esi*2 - 0x1c4], cx
inc esi
cmp esi, 6
jl 0x481dc0
xor eax, eax
mov dword [ebp - 0xe0], 0
lea ecx, [ebp - 0x1c4]
mov dword [ebp - 0xdc], 7
mov word [ebp - 0xf0], ax
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x481e10
sub ecx, edx
lea eax, [ebp - 0x1c4]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0xf0]
call fcn.00417d60
mov byte [ebp - 4], 2
cmp word [0x64ea02], 0
movups xmm0, xmmword [0x64e9f0]
mov eax, dword [0x64ea00]
mov dword [ebp - 0x22c], eax
movups xmmword [ebp - 0x23c], xmm0
je 0x481e89
xor esi, esi
nop dword [eax + eax]
mov eax, 0x51eb851f
mov ecx, esi
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x32
sub ecx, eax
add ecx, 0x39
xor word [ebp + esi*2 - 0x23c], cx
inc esi
cmp esi, 0xa
jl 0x481e60
xor eax, eax
mov dword [ebp - 0xc8], 0
lea ecx, [ebp - 0x23c]
mov dword [ebp - 0xc4], 7
mov word [ebp - 0xd8], ax
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x481eb0
sub ecx, edx
lea eax, [ebp - 0x23c]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0xd8]
call fcn.00417d60
mov byte [ebp - 4], 3
cmp word [0x64e9ee], 0
movups xmm0, xmmword [str.jUSHsJ3__]
mov eax, dword [0x64e9ec]
mov dword [ebp - 0x1e8], eax
movups xmmword [ebp - 0x200], xmm0
movq xmm0, qword [0x64e9e4]
movq qword [ebp - 0x1f0], xmm0
je 0x482049
xor esi, esi
cmp edi, 2
jl 0x482020
movaps xmm2, xmmword [0x654300]
mov eax, 4
movaps xmm4, xmmword [0x6543d0]
movaps xmm1, xmm2
punpckldq xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
mov esi, 8
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
movd xmm5, eax
mov eax, 0x1f
psrad xmm1, xmm5
movaps xmm0, xmm1
movd xmm6, eax
mov eax, str.jUSHsJ3__
psrld xmm0, xmm6
paddd xmm0, xmm1
pmulld xmm0, xmmword [str.2222]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
movaps xmm2, xmmword [0x654310]
paddd xmm2, xmmword [0x654300]
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
movq xmm0, qword [str.99999999]
paddw xmm1, xmm0
movq xmm0, qword [eax]
pxor xmm1, xmm0
movaps xmm0, xmm2
movq qword [ebp - 0x200], xmm1
movaps xmm1, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm4
pmuldq xmm1, xmm4
shufps xmm1, xmm0, 0xdd
psrad xmm1, xmm5
movaps xmm0, xmm1
psrld xmm0, xmm6
paddd xmm0, xmm1
pmulld xmm0, xmmword [str.2222]
psubd xmm2, xmm0
pshuflw xmm0, xmm2, 0xd8
pshufhw xmm0, xmm0, 0xd8
pshufd xmm1, xmm0, 0xd8
movq xmm0, qword [str.99999999]
paddw xmm1, xmm0
movq xmm0, qword [ebp - 0x1f8]
pxor xmm1, xmm0
movq qword [ebp - 0x1f8], xmm1
nop dword [eax + eax]
mov eax, 0x51eb851f
mov ecx, esi
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x32
sub ecx, eax
add ecx, 0x39
xor word [ebp + esi*2 - 0x200], cx
inc esi
cmp esi, 0xe
jl 0x482020
xor eax, eax
mov dword [ebp - 0xb0], 0
lea ecx, [ebp - 0x200]
mov dword [ebp - 0xac], 7
mov word [ebp - 0xc0], ax
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x482070
sub ecx, edx
lea eax, [ebp - 0x200]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0xc0]
call fcn.00417d60
mov byte [ebp - 4], 4
xor esi, esi
movq xmm0, qword [0x64e9c8]
mov ax, word [0x64e9d0]
movq qword [ebp - 0x1a0], xmm0
mov word [ebp - 0x198], ax
mov eax, 0x51eb851f
mov ecx, esi
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x32
sub ecx, eax
add ecx, 0x39
xor word [ebp + esi*2 - 0x1a0], cx
inc esi
cmp esi, 5
jl 0x4820b5
xor eax, eax
mov dword [ebp - 0x98], 0
lea ecx, [ebp - 0x1a0]
mov dword [ebp - 0x94], 7
mov word [ebp - 0xa8], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x482104
sub ecx, edx
lea eax, [ebp - 0x1a0]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0xa8]
call fcn.00417d60
mov dword [ebp - 4], 5
xor esi, esi
movq xmm0, qword [0x64e9bc]
mov ax, word [0x64e9c4]
movq qword [ebp - 0x1ac], xmm0
mov word [ebp - 0x1a4], ax
nop dword [eax]
mov eax, 0x51eb851f
mov ecx, esi
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x32
sub ecx, eax
add ecx, 0x39
xor word [ebp + esi*2 - 0x1ac], cx
inc esi
cmp esi, 5
jl 0x482150
xor eax, eax
mov dword [ebp - 0x80], 0
lea ecx, [ebp - 0x1ac]
mov dword [ebp - 0x7c], 7
mov word [ebp - 0x90], ax
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4821a0
sub ecx, edx
lea eax, [ebp - 0x1ac]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x90]
call fcn.00417d60
mov byte [ebp - 4], 6
xor esi, esi
mov eax, dword [0x64e9b4]
movq xmm0, qword [0x64e9ac]
mov dword [ebp - 0x1cc], eax
mov ax, word [0x64e9b8]
movq qword [ebp - 0x1d4], xmm0
mov word [ebp - 0x1c8], ax
mov eax, 0x51eb851f
mov ecx, esi
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x32
sub ecx, eax
add ecx, 0x39
xor word [ebp + esi*2 - 0x1d4], cx
inc esi
cmp esi, 7
jl 0x4821f0
xor eax, eax
mov dword [ebp - 0x68], 0
lea ecx, [ebp - 0x1d4]
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x482236
sub ecx, edx
lea eax, [ebp - 0x1d4]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x78]
call fcn.00417d60
mov byte [ebp - 4], 7
xor esi, esi
movq xmm0, qword [0x64e9a0]
mov ax, word [0x64e9a8]
movq qword [ebp - 0x1b8], xmm0
mov word [ebp - 0x1b0], ax
nop dword [eax + eax]
mov eax, 0x51eb851f
mov ecx, esi
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x32
sub ecx, eax
add ecx, 0x39
xor word [ebp + esi*2 - 0x1b8], cx
inc esi
cmp esi, 5
jl 0x482280
xor eax, eax
mov dword [ebp - 0x50], 0
lea ecx, [ebp - 0x1b8]
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4822c6
sub ecx, edx
lea eax, [ebp - 0x1b8]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x60]
call fcn.00417d60
mov byte [ebp - 4], 8
xor esi, esi
movups xmm0, xmmword [str.hCxPT_Q4A]
mov ax, word [0x64e99c]
mov word [ebp - 0x204], ax
movups xmmword [ebp - 0x214], xmm0
mov eax, 0x51eb851f
mov ecx, esi
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x32
sub ecx, eax
add ecx, 0x39
xor word [ebp + esi*2 - 0x214], cx
inc esi
cmp esi, 9
jl 0x482306
xor eax, eax
mov dword [ebp - 0x38], 0
lea ecx, [ebp - 0x214]
mov dword [ebp - 0x34], 7
mov word [ebp - 0x48], ax
lea edx, [ecx + 2]
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x482350
sub ecx, edx
lea eax, [ebp - 0x214]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x48]
call fcn.00417d60
mov byte [ebp - 4], 9
xor esi, esi
movups xmm0, xmmword [0x64e978]
mov ax, word [0x64e988]
mov word [ebp - 0x218], ax
movups xmmword [ebp - 0x228], xmm0
mov eax, 0x51eb851f
mov ecx, esi
imul esi
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x32
sub ecx, eax
add ecx, 0x39
xor word [ebp + esi*2 - 0x228], cx
inc esi
cmp esi, 9
jl 0x482390
xor eax, eax
mov dword [ebp - 0x20], 0
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4823d6
sub ecx, edx
lea eax, [ebp - 0x228]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x30]
call fcn.00417d60
mov ecx, dword [ebp - 0x15c]
mov byte [ebp - 4], 0xa
mov eax, dword [ecx + 0x664]
mov edx, dword [ecx + 0x668]
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x170], edx
cmp eax, edx
je 0x48265c
nop
push eax
lea ecx, [ebp - 0x138]
call fcn.0040c5c0
lea eax, [ebp - 0x120]
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x16c], eax
nop word [eax + eax]
cmp dword [ebp - 0x124], 8
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x164], eax
cmovae ecx, dword [ebp - 0x138]
cmp dword [eax + 0x14], 8
mov dword [ebp - 0x17c], ecx
jb 0x48247e
mov eax, dword [eax]
mov dword [ebp - 0x164], eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
movzx ecx, word [eax + 0x2c]
mov esi, 0x811c9dc5
mov edi, dword [eax + 0x30]
and ecx, 0xfffffffe
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x174], 0
lea edx, [ecx + edi]
inc ecx
shr ecx, 1
cmp edi, edx
cmova ecx, dword [ebp - 0x158]
mov dword [ebp - 0x158], ecx
test ecx, ecx
je 0x482504
mov eax, dword [ebp - 0x174]
mov dl, byte [edi]
lea ecx, [edx - 0x41]
cmp cl, 0x19
movsx ecx, dl
ja 0x4824e2
or ecx, 0x20
xor esi, ecx
inc eax
imul esi, esi, 0x1000193
add edi, 2
cmp eax, dword [ebp - 0x158]
jne 0x4824d2
mov eax, dword [ebp - 0x154]
cmp esi, 0x8ec4c73b
je 0x482508
mov eax, dword [eax]
jmp 0x48248a
mov esi, dword [eax + 0x18]
mov eax, dword [0x67f40c]
mov dword [ebp - 0x158], esi
test eax, eax
jne 0x4825e5
test esi, esi
je 0x4825de
mov eax, dword [esi + 0x3c]
mov ecx, dword [eax + esi + 0x78]
mov eax, dword [eax + esi + 0x7c]
add ecx, esi
mov dword [ebp - 0x174], eax
xor eax, eax
mov dword [ebp - 0x174], ecx
cmp ecx, esi
je 0x4825e0
mov dword [ebp - 0x154], eax
cmp dword [ecx + 0x18], eax
je 0x4825de
mov edi, dword [ecx + 0x20]
add edi, esi
nop dword [eax]
mov edx, dword [edi]
add edx, esi
mov esi, 0x811c9dc5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x48259a
lea eax, [ecx - 0x41]
cmp al, 0x19
movsx eax, cl
ja 0x48257d
or eax, 0x20
mov cl, byte [edx]
xor esi, eax
imul esi, esi, 0x1000193
inc edx
test cl, cl
jne 0x482570
cmp esi, 0xc626c590
je 0x4825b7
mov eax, dword [ebp - 0x154]
mov ecx, dword [ebp - 0x174]
inc eax
add edi, 4
mov dword [ebp - 0x154], eax
cmp eax, dword [ecx + 0x18]
je 0x4825de
mov esi, dword [ebp - 0x158]
jmp 0x482560
mov eax, dword [ebp - 0x174]
mov esi, dword [ebp - 0x158]
mov edx, dword [ebp - 0x154]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, esi
add eax, esi
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, esi
jmp 0x4825e0
xor eax, eax
mov dword [0x67f40c], eax
push dword [ebp - 0x17c]
push dword [ebp - 0x164]
call eax
test eax, eax
je 0x482758
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x16c]
inc edx
add eax, 0x18
mov dword [ebp - 0x168], edx
mov dword [ebp - 0x16c], eax
cmp edx, 6
jb 0x482450
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0xa
call fcn.0040f8c0
mov eax, dword [ebp - 0x160]
add eax, 0x18
mov dword [ebp - 0x160], eax
cmp eax, dword [ebp - 0x170]
jne 0x482420
mov ecx, dword [ebp - 0x15c]
mov edx, dword [ecx + 0x668]
mov dword [ebp - 0x170], edx
mov eax, dword [ecx + 0x664]
mov dword [ebp - 0x158], eax
cmp eax, edx
je 0x4828fb
push eax
lea ecx, [ebp - 0x150]
call fcn.0040c5c0
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], eax
nop word [eax + eax]
cmp dword [ebp - 0x13c], 8
lea ecx, [ebp - 0x150]
mov dword [ebp - 0x16c], eax
cmovae ecx, dword [ebp - 0x150]
cmp dword [eax + 0x14], 8
mov dword [ebp - 0x174], ecx
jb 0x4826ce
mov eax, dword [eax]
mov dword [ebp - 0x16c], eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
movzx ecx, word [eax + 0x2c]
mov esi, 0x811c9dc5
mov edi, dword [eax + 0x30]
and ecx, 0xfffffffe
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x160], 0
lea edx, [ecx + edi]
inc ecx
shr ecx, 1
cmp edi, edx
cmova ecx, dword [ebp - 0x17c]
mov dword [ebp - 0x17c], ecx
test ecx, ecx
je 0x482754
mov eax, dword [ebp - 0x160]
mov dl, byte [edi]
lea ecx, [edx - 0x41]
cmp cl, 0x19
movsx ecx, dl
ja 0x482732
or ecx, 0x20
xor esi, ecx
inc eax
imul esi, esi, 0x1000193
add edi, 2
cmp eax, dword [ebp - 0x17c]
jne 0x482722
mov eax, dword [ebp - 0x15c]
cmp esi, 0x8ec4c73b
je 0x48278a
mov eax, dword [eax]
jmp 0x4826da
mov ecx, dword [ebp - 0x184]
push 7
push str.qqmusic
call fcn.00417d60
mov ecx, dword [ebp - 0x188]
push 0x8a
push str.https:__wenku.baidu.com_ndbusiness_browse_alliancecashier_corpId119corpUid692d94ebb7360b4c2f3f64c9frwklm_692d94ebb7360b4c2f3f64c9_119
call fcn.00417d60
lea ecx, [ebp - 0x138]
jmp 0x4828f6
mov esi, dword [eax + 0x18]
mov eax, dword [0x67f40c]
mov dword [ebp - 0x160], esi
test eax, eax
jne 0x482866
test esi, esi
je 0x48285f
mov eax, dword [esi + 0x3c]
mov ecx, dword [eax + esi + 0x78]
mov eax, dword [eax + esi + 0x7c]
mov dword [ebp - 0x17c], eax
lea eax, [ecx + esi]
mov dword [ebp - 0x15c], eax
cmp eax, esi
je 0x48285f
xor ecx, ecx
mov dword [ebp - 0x154], ecx
cmp dword [eax + 0x18], ecx
je 0x48285f
mov edi, dword [eax + 0x20]
add edi, esi
mov edx, dword [edi]
add edx, esi
mov esi, 0x811c9dc5
mov al, byte [edx]
inc edx
test al, al
je 0x48281b
lea ecx, [eax - 0x41]
movsx eax, al
cmp cl, 0x19
ja 0x4827fe
or eax, 0x20
xor esi, eax
mov al, byte [edx]
imul esi, esi, 0x1000193
inc edx
test al, al
jne 0x4827f0
cmp esi, 0xc626c590
je 0x482838
mov ecx, dword [ebp - 0x154]
mov eax, dword [ebp - 0x15c]
inc ecx
add edi, 4
mov dword [ebp - 0x154], ecx
cmp ecx, dword [eax + 0x18]
je 0x48285f
mov esi, dword [ebp - 0x160]
jmp 0x4827e0
mov eax, dword [ebp - 0x15c]
mov esi, dword [ebp - 0x160]
mov edx, dword [ebp - 0x154]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, esi
add eax, esi
movzx eax, word [eax + edx*2]
mov eax, dword [ecx + eax*4]
add eax, esi
jmp 0x482861
xor eax, eax
mov dword [0x67f40c], eax
push dword [ebp - 0x174]
push dword [ebp - 0x16c]
call eax
test eax, eax
je 0x4828c9
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x164]
inc edx
add eax, 0x18
mov dword [ebp - 0x168], edx
mov dword [ebp - 0x164], eax
cmp edx, 5
jb 0x4826a0
lea ecx, [ebp - 0x150]
mov byte [ebp - 4], 0xa
call fcn.0040f8c0
mov eax, dword [ebp - 0x158]
add eax, 0x18
mov dword [ebp - 0x158], eax
cmp eax, dword [ebp - 0x170]
jne 0x482670
jmp 0x4828fb
mov ecx, dword [ebp - 0x184]
push 6
push str.aiqiyi
call fcn.00417d60
mov ecx, dword [ebp - 0x188]
push 0x8a
push str.https:__wenku.baidu.com_ndbusiness_browse_alliancecashier_corpId120corpUid692d94ebb7360b4c2f3f64c9frwklm_692d94ebb7360b4c2f3f64c9_120
call fcn.00417d60
lea ecx, [ebp - 0x150]
call fcn.0040f8c0
push fcn.0040f920
push 5
push 0x18
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 5
push eax
call fcn.004d0f5c
push fcn.0040f920
push 6
push 0x18
lea eax, [ebp - 0x120]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.004d0f5c
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004d0a85
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 8