Function at 0x4840fb
Capabilities:
Read file on windows

Disassembly:
push 0x4c
mov eax, 0x4d477b
call fcn.004cbc99
mov esi, dword [ebp + 8]
xor edi, edi
cmp esi, edi
mov ebx, ecx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], esi
jne 0x48412c
push edi
push edi
push edi
push 2
call sym.QQProtectUpd.exe_public:_void___thiscall_TiXmlDocument::SetError_int__char_const___class_TiXmlParsingData___enum_TiXmlEncoding_
xor al, al
call fcn.004cbd1c
ret 8
call sym.QQProtectUpd.exe_public:_void___thiscall_TiXmlNode::Clear_void_
or dword [ebx + 8], 0xffffffff
or dword [ebx + 4], 0xffffffff
push 2
push edi
mov edi, dword [sym.imp.MSVCR80.dll_fseek]
push esi
call edi
push esi
call dword [sym.imp.MSVCR80.dll_ftell]
push 0
push 0
push dword [ebp - 0x54]
mov esi, eax
call edi
xor eax, eax
add esp, 0x1c
cmp esi, eax
jg 0x484169
push eax
push eax
push eax
push 0xd
mov ecx, ebx
jmp 0x48411d
lea eax, [esi + 1]
push eax
call fcn.004cb568
push dword [ebp - 0x54]
mov edi, eax
push 1
push esi
push edi
mov byte [edi], 0
call dword [sym.imp.MSVCR80.dll_fread]
add esp, 0x14
cmp eax, 1
push edi
je 0x48419c
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
pop ecx
xor eax, eax
push eax
push eax
push eax
push 2
jmp 0x484165
lea ebx, [edi + esi]
lea ecx, [ebp - 0x2c]
mov byte [ebx], 0
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_char_const__]
and dword [ebp - 4], 0
push 0
push str.encoding_GB2312_
lea ecx, [ebp - 0x2c]
call dword [sym.imp.MSVCP80.dll_public:_unsigned_int___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::find_char_const___unsigned_int_const]
mov ecx, dword [sym.imp.MSVCP80.dll_unsigned_int_const_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::npos]
cmp dword [ecx], eax
jne 0x4841e3
push 0
push str.encoding_gb2312_
lea ecx, [ebp - 0x2c]
call dword [sym.imp.MSVCP80.dll_public:_unsigned_int___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::find_char_const___unsigned_int_const]
mov ecx, dword [sym.imp.MSVCP80.dll_unsigned_int_const_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::npos]
cmp dword [ecx], eax
je 0x484244
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_void_]
lea eax, [ebp - 0x48]
push eax
push dword [ebp - 0x18]
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 1
call dword [sym.imp.MSVCP80.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
call fcn.0048312d
mov esi, dword [ebp - 0x34]
push edi
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
lea eax, [esi + 1]
push eax
call fcn.004cb568
add esp, 0x14
push esi
lea ecx, [ebp - 0x48]
mov edi, eax
call dword [sym.imp.MSVCP80.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
push edi
call sub.MSVCR80.dll_memcpy
lea ebx, [edi + esi]
add esp, 0xc
lea ecx, [ebp - 0x48]
mov byte [ebx], 0
mov byte [ebp - 4], 0
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
mov dword [ebp - 0x4c], 0x52d180
push esi
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 2
call fcn.00482c74
mov byte [ebx], 0
cmp byte [edi], 0
mov eax, edi
mov esi, edi
je 0x4842be
mov cl, byte [esi]
cmp cl, 0xa
jne 0x48427d
mov ecx, esi
sub ecx, eax
inc ecx
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.00482d57
inc esi
jmp 0x4842b4
cmp cl, 0xd
jne 0x4842b8
mov ecx, esi
sub ecx, eax
test ecx, ecx
jle 0x484294
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.00482d57
push 1
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x4c]
mov byte [ebp - 0x50], 0xa
call fcn.00482d57
lea eax, [esi + 1]
cmp byte [eax], 0xa
jne 0x4842b2
inc esi
inc esi
jmp 0x4842b4
mov esi, eax
mov eax, esi
jmp 0x4842b9
inc esi
cmp byte [esi], 0
jne 0x484264
sub esi, eax
je 0x4842cc
push esi
push eax
lea ecx, [ebp - 0x4c]
call fcn.00482d57
push edi
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
mov esi, dword [ebp - 0x58]
mov eax, dword [esi]
pop ecx
push dword [ebp + 0xc]
mov ecx, dword [ebp - 0x4c]
add ecx, 8
push 0
push ecx
mov ecx, esi
call dword [eax + 8]
cmp byte [esi + 0x2c], 0
je 0x484317
cmp dword [ebp - 0x4c], 0x52d180
je 0x484301
push dword [ebp - 0x4c]
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
pop ecx
xor bl, bl
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call dword [sym.imp.MSVCP80.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
mov al, bl
jmp 0x484124
cmp dword [ebp - 0x4c], 0x52d180
je 0x484329
push dword [ebp - 0x4c]
call sub.MSVCR80.dll_void___cdecl_operator_delete___void__
pop ecx
mov bl, 1
jmp 0x484303