Function at 0x4c3e33
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x3c
mov ebx, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 0x10]
test ebx, ebx
jne 0x4c3e5f
or edx, 0xffffffff
test esi, esi
je 0x4c428e
mov dword [esp], esi
mov dword [ebp - 0x20], edx
jmp 0x4c4066
mov eax, dword [ebp + 0x18]
or eax, 0x10000
mov dword [ebp - 0x1c], eax
mov dword [ebx + 4], 0
mov dword [ebx + 0x60], 0
mov dword [ebx + 0xb8], eax
mov dword [ebx + 8], 0
test esi, esi
je 0x4c3eae
mov eax, dword [ebx + 0x1c]
test eax, eax
je 0x4c4298
test byte [ebx + 0xc], 1
je 0x4c4298
mov dword [esp], eax
call sym.evasi0n_gui.exe_xmlFreeParserInputBuffer
dec dword [ebx + 0xc]
jmp 0x4c4298
cmp dword [ebx + 0x54], 0
jne 0x4c3ec3
mov dword [esp], 0x64
call sym.evasi0n_gui.exe_xmlBufferCreateSize
mov dword [ebx + 0x54], eax
cmp dword [ebx + 0x54], 0
je 0x4c40c0
cmp dword [ebx + 0x18], 0
jne 0x4c3ee3
mov dword [esp], 0x80
call dword [sym.evasi0n_gui.exe_xmlMalloc]
mov dword [ebx + 0x18], eax
mov eax, dword [ebx + 0x18]
test eax, eax
je 0x4c40c0
mov dword [esp + 4], 2
mov dword [esp], eax
call sym.evasi0n_gui.exe_xmlSAXVersion
mov eax, dword [ebx + 0x18]
mov edx, dword [eax + 0x38]
mov dword [ebx + 0x20], edx
mov dword [eax + 0x38], 0x4bfbc0
mov edx, dword [eax + 0x3c]
mov dword [ebx + 0x24], edx
mov dword [eax + 0x3c], 0x4bfc23
cmp dword [eax + 0x6c], 0xdeedbeaf
jne 0x4c3f40
mov edx, dword [eax + 0x74]
mov dword [ebx + 0x28], edx
mov dword [eax + 0x74], 0x4bfc42
mov edx, dword [eax + 0x78]
mov dword [ebx + 0x2c], edx
mov dword [eax + 0x78], 0x4bfccf
jmp 0x4c3f4e
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0
mov edx, dword [eax + 0x44]
mov dword [ebx + 0x30], edx
mov dword [eax + 0x44], 0x4bfcf1
mov dword [eax + 0x48], 0x4bfcf1
mov edx, dword [eax + 0x64]
mov dword [ebx + 0x34], edx
mov dword [eax + 0x64], 0x4bfd15
mov dword [ebx], 0
mov dword [ebx + 0x40], 0
mov dword [ebx + 0x44], 0
test esi, esi
je 0x4c40e3
mov eax, dword [ebx + 0x1c]
mov eax, dword [eax + 0x10]
cmp dword [eax + 4], 3
ja 0x4c3fa7
mov dword [esp + 4], 4
mov dword [esp], esi
call sym.evasi0n_gui.exe_xmlParserInputBufferRead
mov eax, dword [ebx + 0x14]
test eax, eax
jne 0x4c4028
mov eax, dword [ebx + 0x1c]
mov edx, dword [eax + 0x10]
cmp dword [edx + 4], 3
mov eax, dword [ebx + 0x18]
jbe 0x4c3ff5
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], 4
mov edx, dword [edx]
mov dword [esp + 8], edx
mov dword [esp + 4], 0
mov dword [esp], eax
call sym.evasi0n_gui.exe_xmlCreatePushParserCtxt
mov dword [ebx + 0x14], eax
mov dword [ebx + 0x38], 0
mov dword [ebx + 0x3c], 4
jmp 0x4c40ba
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call sym.evasi0n_gui.exe_xmlCreatePushParserCtxt
mov dword [ebx + 0x14], eax
mov dword [ebx + 0x38], 0
jmp 0x4c40b3
mov dword [esp], eax
call sym.evasi0n_gui.exe_xmlCtxtReset
mov dword [esp], 0
call sym.evasi0n_gui.exe_xmlAllocParserInputBuffer
mov ecx, eax
or edx, 0xffffffff
test eax, eax
je 0x4c428e
mov eax, dword [ebx + 0x14]
mov dword [esp], eax
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x24], ecx
call sym.evasi0n_gui.exe_xmlNewInputStream
mov esi, eax
test eax, eax
mov ecx, dword [ebp - 0x24]
jne 0x4c4073
mov dword [esp], ecx
call sym.evasi0n_gui.exe_xmlFreeParserInputBuffer
mov edx, dword [ebp - 0x20]
jmp 0x4c428e
test edi, edi
jne 0x4c4080
mov dword [eax + 4], 0
jmp 0x4c4091
mov dword [esp], edi
mov dword [ebp - 0x24], ecx
call sym.evasi0n_gui.exe_xmlCanonicPath
mov dword [esi + 4], eax
mov ecx, dword [ebp - 0x24]
mov dword [esi], ecx
mov edx, dword [ecx + 0x10]
mov eax, dword [edx]
mov dword [esi + 0xc], eax
mov dword [esi + 0x10], eax
add eax, dword [edx + 4]
mov dword [esi + 0x14], eax
mov dword [esp + 4], esi
mov eax, dword [ebx + 0x14]
mov dword [esp], eax
call sym.evasi0n_gui.exe_inputPush
mov dword [ebx + 0x3c], 0
cmp dword [ebx + 0x14], 0
jne 0x4c40e3
call sym.evasi0n_gui.exe___xmlGenericError
mov ebx, dword [eax]
call sym.evasi0n_gui.exe___xmlGenericErrorContext
mov dword [esp + 4], str.xmlTextReaderSetup_:_malloc_failed_n
mov eax, dword [eax]
mov dword [esp], eax
call ebx
or edx, 0xffffffff
jmp 0x4c428e
mov eax, dword [ebx + 0x58]
test eax, eax
mov esi, dword [ebx + 0x14]
je 0x4c410d
mov edx, dword [esi + 0x128]
test edx, edx
je 0x4c4105
cmp eax, edx
je 0x4c412d
mov dword [esp], eax
call sym.evasi0n_gui.exe_xmlDictFree
jmp 0x4c4121
mov dword [esi + 0x128], eax
jmp 0x4c412d
cmp dword [esi + 0x128], 0
jne 0x4c4121
call sym.evasi0n_gui.exe_xmlDictCreate
mov dword [esi + 0x128], eax
mov eax, dword [ebx + 0x14]
mov eax, dword [eax + 0x128]
mov dword [ebx + 0x58], eax
mov eax, dword [ebx + 0x14]
mov dword [eax + 0x110], ebx
mov dword [eax + 0x118], 1
mov dword [eax + 0x16c], 1
mov dword [eax + 0x134], 1
mov dword [eax + 0x1b4], 5
mov eax, dword [ebx + 0xa0]
test eax, eax
je 0x4c417a
mov dword [esp], eax
call sym.evasi0n_gui.exe_xmlXIncludeFreeContext
mov dword [ebx + 0xa0], 0
test dword [ebp - 0x1c], 0x400
je 0x4c41b7
mov dword [ebx + 0x98], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x69b5d4
mov eax, dword [ebx + 0x58]
mov dword [esp], eax
call sym.evasi0n_gui.exe_xmlDictLookup
mov dword [ebx + 0x9c], eax
sub dword [ebp - 0x1c], 0x400
jmp 0x4c41c1
mov dword [ebx + 0x98], 0
mov dword [ebx + 0xa4], 0
cmp dword [ebx + 0xb0], 0
jne 0x4c4219
mov dword [ebx + 0xa8], 0
mov dword [ebx + 0xac], 0
jmp 0x4c4219
dec eax
mov dword [ebx + 0xa8], eax
mov edx, dword [ebx + 0xb0]
mov eax, dword [edx + eax*4]
test eax, eax
je 0x4c4219
mov dword [esp], eax
call sym.evasi0n_gui.exe_xmlFreePattern
mov edx, dword [ebx + 0xa8]
mov eax, dword [ebx + 0xb0]
mov dword [eax + edx*4], 0
mov eax, dword [ebx + 0xa8]
test eax, eax
jg 0x4c41ea
test byte [ebp - 0x1c], 0x10
je 0x4c4230
mov dword [ebx + 8], 1
mov eax, dword [ebp - 0x1c]
mov dword [esp + 4], eax
mov eax, dword [ebx + 0x14]
mov dword [esp], eax
call sym.evasi0n_gui.exe_xmlCtxtUseOptions
cmp dword [ebp + 0x14], 0
je 0x4c4266
mov eax, dword [ebp + 0x14]
mov dword [esp], eax
call sym.evasi0n_gui.exe_xmlFindCharEncodingHandler
test eax, eax
je 0x4c4266
mov dword [esp + 4], eax
mov eax, dword [ebx + 0x14]
mov dword [esp], eax
call sym.evasi0n_gui.exe_xmlSwitchToEncoding
test edi, edi
je 0x4c4285
mov eax, dword [ebx + 0x14]
mov esi, dword [eax + 0x24]
test esi, esi
je 0x4c4285
cmp dword [esi + 4], 0
jne 0x4c4285
mov dword [esp], edi
call sym.evasi0n_gui.exe_xmlStrdup
mov dword [esi + 4], eax
mov dword [ebx + 4], 0
xor edx, edx
mov eax, edx
add esp, 0x3c
pop ebx
pop esi
pop edi
leave
ret
mov dword [ebx + 0x1c], esi
or dword [ebx + 0xc], 1
jmp 0x4c3eae