Function at 0x48ef20
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xffffffffffffffff
push 0x4fa978
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x138
push ebx
push ebp
mov ebp, ecx
push esi
push edi
lea ecx, [esp + 0x28]
call sub.MFC42.DLL_CString::CString_4
lea ecx, [esp + 0x2c]
mov dword [esp + 0x150], 0
call sub.MFC42.DLL_CString::CString_4
lea ecx, [esp + 0x14]
mov dword [esp + 0x150], 1
call sub.MFC42.DLL_CString::CString_4
mov ebx, dword [esp + 0x158]
mov byte [esp + 0x150], 2
cmp ebx, 1
mov eax, 0x5265e4
je 0x48ef90
mov eax, 0x5265ec
push eax
lea ecx, [esp + 0x28]
call sub.MFC42.DLL_CString::CString_2
mov eax, dword [esp + 0x15c]
mov byte [esp + 0x150], 3
test eax, eax
je 0x48f66d
mov ecx, 0x40
xor eax, eax
lea edi, [esp + 0x45]
mov byte [esp + 0x44], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0x10]
push 1
push eax
call fcn.0040dae0
add esp, 8
push 0x524458
lea ecx, [esp + 0x20]
push eax
push ecx
mov byte [esp + 0x15c], 4
call sub.MFC42.DLL_operator_4
lea ecx, [ebp + 0x650]
lea edx, [esp + 0x20]
push ecx
push eax
push edx
mov byte [esp + 0x15c], 5
call sub.MFC42.DLL_operator_2
push str.ct_config.xml
push eax
lea eax, [esp + 0x20]
mov byte [esp + 0x158], 6
push eax
call sub.MFC42.DLL_operator_4
mov eax, dword [eax]
or ecx, 0xffffffff
mov edi, eax
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x44]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x18]
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x20]
mov byte [esp + 0x150], 5
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x1c]
mov byte [esp + 0x150], 4
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x10]
mov byte [esp + 0x150], 3
call sub.MFC42.DLL_CString::CString
push 0
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x5307a8
call sub.MFC42.DLL_CString::CString_2
lea ecx, [ebx + ebx*4]
push 0
push 0
push 0
lea ebx, [ebx + ecx*2]
push 0
shl ebx, 2
push ecx
mov byte [esp + 0x170], 7
lea eax, [ebx + 0x536928]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
call sub.MFC42.DLL_CString::CString_3
push ecx
lea edx, [esp + 0x68]
mov ecx, esp
mov dword [esp + 0x44], esp
push edx
mov byte [esp + 0x178], 8
call sub.MFC42.DLL_CString::CString_2
push ecx
lea eax, [ebx + 0x53692c]
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
mov byte [esp + 0x17c], 9
call sub.MFC42.DLL_CString::CString_3
mov byte [esp + 0x178], 3
call fcn.0040ae30
add esp, 0x28
test eax, eax
jne 0x48f12f
mov ecx, dword [esp + 0x24]
lea edx, [esp + 0x14]
push ecx
push 0x52c474
push edx
call sub.MFC42.DLL_CString::Format
mov ecx, dword [esp + 0x20]
mov eax, dword [ebp]
add esp, 0xc
push ecx
push 4
mov ecx, ebp
call dword [eax + 4]
lea edx, [esp + 0x44]
mov ecx, ebp
push edx
call fcn.00443c00
push ecx
lea eax, [esp + 0x48]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call sub.MFC42.DLL_CString::CString_2
mov ecx, ebp
call fcn.0049c180
lea ecx, [esp + 0x18]
push 1
push ecx
call fcn.0040dae0
add esp, 8
push 0x524458
lea edx, [esp + 0x24]
push eax
push edx
mov byte [esp + 0x15c], 0xa
call sub.MFC42.DLL_operator_4
lea ecx, [ebp + 0x650]
mov byte [esp + 0x150], 0xb
push ecx
push eax
lea eax, [esp + 0x24]
push eax
call sub.MFC42.DLL_operator_2
push str.ct_data.xml
lea ecx, [esp + 0x14]
push eax
push ecx
mov byte [esp + 0x15c], 0xc
call sub.MFC42.DLL_operator_4
mov eax, dword [eax]
or ecx, 0xffffffff
mov edi, eax
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x44]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x1c]
mov byte [esp + 0x150], 0xb
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x20]
mov byte [esp + 0x150], 0xa
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x18]
mov byte [esp + 0x150], 3
call sub.MFC42.DLL_CString::CString
push 0
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x5307a8
call sub.MFC42.DLL_CString::CString_2
push 0
push 0
push 0
push 0
push ecx
mov byte [esp + 0x170], 0xd
mov ecx, esp
lea eax, [ebx + 0x536928]
mov dword [esp + 0x3c], esp
push eax
call sub.MFC42.DLL_CString::CString_3
push ecx
lea edx, [esp + 0x68]
mov ecx, esp
mov dword [esp + 0x44], esp
push edx
mov byte [esp + 0x178], 0xe
call sub.MFC42.DLL_CString::CString_2
push ecx
lea eax, [ebx + 0x536930]
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
mov byte [esp + 0x17c], 0xf
call sub.MFC42.DLL_CString::CString_3
mov byte [esp + 0x178], 3
call fcn.0040ae30
add esp, 0x28
test eax, eax
jne 0x48f2b3
mov ecx, dword [esp + 0x24]
lea edx, [esp + 0x14]
push ecx
push 0x52c448
push edx
call sub.MFC42.DLL_CString::Format
mov ecx, dword [esp + 0x20]
mov eax, dword [ebp]
add esp, 0xc
push ecx
push 4
mov ecx, ebp
call dword [eax + 4]
lea edx, [esp + 0x44]
mov ecx, ebp
push edx
call fcn.00443c00
push ecx
lea eax, [esp + 0x48]
mov ecx, esp
mov dword [esp + 0x14], esp
push eax
call sub.MFC42.DLL_CString::CString_2
mov ecx, ebp
call fcn.0048f990
test eax, eax
jne 0x48f30d
lea ecx, [esp + 0x24]
mov byte [esp + 0x150], 2
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x14]
mov byte [esp + 0x150], 1
call sub.MFC42.DLL_CString::CString
mov dword [esp + 0x150], 0x10
jmp 0x48f4c4
lea ecx, [esp + 0x18]
push 1
push ecx
call fcn.0040dae0
add esp, 8
push 0x524458
lea edx, [esp + 0x24]
push eax
push edx
mov byte [esp + 0x15c], 0x11
call sub.MFC42.DLL_operator_4
lea ecx, [ebp + 0x650]
mov byte [esp + 0x150], 0x12
push ecx
push eax
lea eax, [esp + 0x24]
push eax
call sub.MFC42.DLL_operator_2
push str.ct_addon.xml
lea ecx, [esp + 0x14]
push eax
push ecx
mov byte [esp + 0x15c], 0x13
call sub.MFC42.DLL_operator_4
mov eax, dword [eax]
or ecx, 0xffffffff
mov edi, eax
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [esp + 0x44]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x10]
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x1c]
mov byte [esp + 0x150], 0x12
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x20]
mov byte [esp + 0x150], 0x11
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x18]
mov byte [esp + 0x150], 3
call sub.MFC42.DLL_CString::CString
push 0
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push 0x5307a8
call sub.MFC42.DLL_CString::CString_2
push 0
push 0
push 0
push 0
push ecx
lea eax, [ebx + 0x536928]
mov ecx, esp
mov dword [esp + 0x3c], esp
push eax
mov byte [esp + 0x174], 0x14
call sub.MFC42.DLL_CString::CString_3
push ecx
lea edx, [esp + 0x68]
mov ecx, esp
mov dword [esp + 0x44], esp
push edx
mov byte [esp + 0x178], 0x15
call sub.MFC42.DLL_CString::CString_2
push ecx
lea eax, [ebx + 0x536934]
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
mov byte [esp + 0x17c], 0x16
call sub.MFC42.DLL_CString::CString_3
mov byte [esp + 0x178], 3
call fcn.0040ae30
add esp, 0x28
lea ecx, [esp + 0x44]
mov esi, eax
push ecx
mov ecx, ebp
call fcn.00443c00
test esi, esi
jne 0x48f47b
mov edx, dword [esp + 0x24]
lea eax, [esp + 0x14]
push edx
push 0x52c41c
push eax
call sub.MFC42.DLL_CString::Format
mov eax, dword [esp + 0x20]
mov edx, dword [ebp]
add esp, 0xc
mov ecx, ebp
push eax
push 4
call dword [edx + 4]
push ecx
lea edx, [esp + 0x48]
mov ecx, esp
mov dword [esp + 0x14], esp
push edx
call sub.MFC42.DLL_CString::CString_2
mov ecx, ebp
call fcn.004a0190
test eax, eax
jne 0x48f4eb
lea ecx, [esp + 0x24]
mov byte [esp + 0x150], 2
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x14]
mov byte [esp + 0x150], 1
call sub.MFC42.DLL_CString::CString
mov dword [esp + 0x150], 0x17
lea ecx, [esp + 0x2c]
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x28]
mov dword [esp + 0x150], 0xffffffff
call sub.MFC42.DLL_CString::CString
mov eax, 0x14
jmp 0x48f966
mov esi, dword [esp + 0x158]
lea eax, [esp + 0x28]
lea ecx, [ebp + 0x178]
push eax
push ecx
push esi
mov ecx, ebp
call fcn.00490910
test eax, eax
jne 0x48f55e
lea ecx, [esp + 0x24]
mov byte [esp + 0x150], 2
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x14]
mov byte [esp + 0x150], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x2c]
mov dword [esp + 0x150], 0x18
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x28]
mov dword [esp + 0x150], 0xffffffff
call sub.MFC42.DLL_CString::CString
mov eax, 0x15
jmp 0x48f966
lea edx, [esp + 0x28]
mov ecx, ebp
push edx
push esi
call fcn.00498580
test eax, eax
jne 0x48f5c3
lea ecx, [esp + 0x24]
mov byte [esp + 0x150], 2
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x14]
mov byte [esp + 0x150], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x2c]
mov dword [esp + 0x150], 0x19
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x28]
mov dword [esp + 0x150], 0xffffffff
call sub.MFC42.DLL_CString::CString
mov eax, 0x16
jmp 0x48f966
lea eax, [esp + 0x28]
mov ecx, ebp
push eax
push esi
call fcn.0049d200
test eax, eax
jne 0x48f628
lea ecx, [esp + 0x24]
mov byte [esp + 0x150], 2
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x14]
mov byte [esp + 0x150], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x2c]
mov dword [esp + 0x150], 0x1a
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x28]
mov dword [esp + 0x150], 0xffffffff
call sub.MFC42.DLL_CString::CString
mov eax, 0x17
jmp 0x48f966
lea ecx, [esp + 0x28]
push ecx
mov ecx, ebp
call fcn.004a1280
test eax, eax
jne 0x48f647
mov edx, dword [ebp]
push 0x52c404
push 0x14
mov ecx, ebp
call dword [edx + 4]
lea eax, [esp + 0x28]
mov ecx, ebp
push eax
call fcn.004a1e40
test eax, eax
jne 0x48f666
mov edx, dword [ebp]
push 0x52c3f0
push 0x14
mov ecx, ebp
call dword [edx + 4]
mov ebx, dword [esp + 0x158]
lea eax, [esp + 0x28]
mov ecx, ebp
push eax
push ebx
call fcn.004961d0
test eax, eax
jne 0x48f6d2
lea ecx, [esp + 0x24]
mov byte [esp + 0x150], 2
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x14]
mov byte [esp + 0x150], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x2c]
mov dword [esp + 0x150], 0x1b
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x28]
mov dword [esp + 0x150], 0xffffffff
call sub.MFC42.DLL_CString::CString
mov eax, 0x18
jmp 0x48f966
lea ecx, [esp + 0x28]
push ecx
push ebx
mov ecx, ebp
call fcn.00499ff0
test eax, eax
jne 0x48f737
lea ecx, [esp + 0x24]
mov byte [esp + 0x150], 2
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x14]
mov byte [esp + 0x150], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x2c]
mov dword [esp + 0x150], 0x1c
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x28]
mov dword [esp + 0x150], 0xffffffff
call sub.MFC42.DLL_CString::CString
mov eax, 0x19
jmp 0x48f966
lea edx, [esp + 0x28]
mov ecx, ebp
push edx
push ebx
call fcn.004a3900
cmp ebx, 1
jne 0x48f914
lea ecx, [esp + 0x18]
call sub.MFC42.DLL_CString::CString_4
push 0
push 0
push 0
push 0
push 0
push ecx
mov ecx, esp
mov dword [esp + 0x38], esp
push 0x5307a8
mov byte [esp + 0x16c], 0x1d
call sub.MFC42.DLL_CString::CString_2
lea eax, [ebp + 0x650]
lea ecx, [esp + 0x34]
push eax
push str.http:__base.qzone.qq.com_fcg_bin_cgi_get_portrait.fcg_uins
push ecx
mov byte [esp + 0x174], 0x1e
call sub.MFC42.DLL_operator_3
push ecx
mov byte [esp + 0x16c], 0x1f
mov edx, esp
mov dword [esp + 0x5c], esp
push str.get_nick1
push eax
push edx
call sub.MFC42.DLL_operator_4
lea eax, [esp + 0x2c]
mov byte [esp + 0x16c], 0x20
push eax
call fcn.0040b4c0
add esp, 0x20
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0x154], 0x21
call sub.MFC42.DLL_CString::operator_2
lea ecx, [esp + 0x10]
mov byte [esp + 0x150], 0x20
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x1c]
mov byte [esp + 0x150], 0x1d
call sub.MFC42.DLL_CString::CString
push ecx
mov ecx, esp
mov dword [esp + 0x44], esp
push 0x5234a4
call sub.MFC42.DLL_CString::CString_2
push ecx
mov byte [esp + 0x158], 0x22
mov ecx, esp
mov dword [esp + 0x24], esp
push 0x526564
call sub.MFC42.DLL_CString::CString_2
push ecx
lea edx, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x2c], esp
push edx
mov byte [esp + 0x160], 0x23
call sub.MFC42.DLL_CString::CString_3
lea eax, [esp + 0x1c]
mov ecx, ebp
push eax
mov byte [esp + 0x160], 0x1d
call fcn.00443080
push eax
lea ecx, [ebp + 0x1a8]
mov byte [esp + 0x154], 0x24
call sub.MFC42.DLL_CString::operator_2
lea ecx, [esp + 0x10]
mov byte [esp + 0x150], 0x1d
call sub.MFC42.DLL_CString::CString
push ecx
mov esi, esp
mov dword [esp + 0x44], esp
push ecx
mov ecx, esp
mov dword [esp + 0x48], esp
push 0x5234a4
call sub.MFC42.DLL_CString::CString_2
push ecx
mov byte [esp + 0x15c], 0x25
mov ecx, esp
mov dword [esp + 0x28], esp
push 0x526560
call sub.MFC42.DLL_CString::CString_2
push ecx
lea edx, [esp + 0x28]
mov ecx, esp
mov dword [esp + 0x30], esp
push edx
mov byte [esp + 0x164], 0x26
call sub.MFC42.DLL_CString::CString_3
push esi
mov ecx, ebp
mov byte [esp + 0x164], 0x1d
call fcn.00443080
lea eax, [esp + 0x14]
push eax
call fcn.0040d950
add esp, 8
push eax
lea ecx, [ebp + 0x1a0]
mov byte [esp + 0x154], 0x27
call sub.MFC42.DLL_CString::operator_2
lea ecx, [esp + 0x10]
mov byte [esp + 0x150], 0x1d
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x18]
mov byte [esp + 0x150], 3
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x24]
mov dword [ebp + 0x178], ebx
mov byte [esp + 0x150], 2
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x14]
mov byte [esp + 0x150], 1
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x2c]
mov dword [esp + 0x150], 0x28
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x28]
mov dword [esp + 0x150], 0xffffffff
call sub.MFC42.DLL_CString::CString
xor eax, eax
mov ecx, dword [esp + 0x148]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x144
ret 0xc