Function at 0x4804cb
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x2c
mov ebx, eax
mov esi, edx
test edx, edx
jne 0x4804fd
cmp dword [eax + 0x7c], 0
jne 0x480dd3
call fcn.0047f74e
mov eax, dword [ebx]
mov dword [esp + 4], eax
mov dword [esp], str.node_is_NULL_n
jmp 0x480b72
mov dword [ebx + 0x74], edx
mov eax, dword [edx + 4]
dec eax
cmp eax, 0x13
ja case.default.0x48050d
jmp dword [eax*4 + 0x66f08c]
cmp dword [ebx + 0x7c], 0
jne 0x480ba5
mov eax, ebx
call fcn.0047f74e
mov eax, dword [ebx]
mov dword [esp + 4], eax
mov dword [esp], str.ELEMENT
call fcn.0059fdc8
mov eax, dword [esi + 0x24]
test eax, eax
je 0x48055e
mov edx, dword [eax + 0xc]
test edx, edx
je 0x48055e
mov eax, ebx
call fcn.0047fbbb
mov eax, dword [ebx]
mov dword [esp + 4], eax
mov dword [esp], 0x3a
call fcn.0059fd00
mov edx, dword [esi + 8]
mov eax, ebx
call fcn.0047fbbb
jmp 0x480608
cmp dword [ebx + 0x7c], 0
jne 0x48057a
mov eax, ebx
call fcn.0047f74e
mov eax, dword [ebx]
mov dword [esp + 4], eax
mov dword [esp], str.Error__ATTRIBUTE_found_here_n
jmp 0x4806f5
cmp dword [ebx + 0x7c], 0
jne 0x480ba5
mov eax, ebx
call fcn.0047f74e
cmp dword [esi + 8], 0x660f44
mov eax, dword [ebx]
jne 0x4805b5
mov dword [esp + 4], eax
mov dword [esp], str.TEXT_no_enc
jmp 0x4805c0
mov dword [esp + 4], eax
mov dword [esp], str.TEXT
call fcn.0059fdc8
test byte [ebx + 0x88], 1
je 0x480608
mov eax, dword [esi + 0x28]
lea edx, [esi + 0x2c]
cmp eax, edx
jne 0x4805e7
mov eax, dword [ebx]
mov dword [esp + 4], eax
mov dword [esp], str._compact_n
jmp 0x48063d
mov dword [esp + 4], eax
mov eax, dword [ebx + 0x78]
mov dword [esp], eax
call sym.evasi0n_gui.exe_xmlDictOwns
dec eax
mov eax, dword [ebx]
jne 0x48060a
mov dword [esp + 4], eax
mov dword [esp], str._interned_n
jmp 0x48063d
mov eax, dword [ebx]
mov dword [esp + 4], eax
mov dword [esp], 0xa
call fcn.0059fd00
jmp 0x480ba5
cmp dword [ebx + 0x7c], 0
jne 0x480ba5
mov eax, ebx
call fcn.0047f74e
mov eax, dword [ebx]
mov dword [esp + 4], eax
mov dword [esp], str.CDATA_SECTION_n
call fcn.0059fdc8
jmp 0x480ba5
cmp dword [ebx + 0x7c], 0
jne 0x480ba5
mov eax, ebx
call fcn.0047f74e
mov eax, dword [esi + 8]
mov dword [esp + 8], eax
mov dword [esp + 4], str.ENTITY_REF__s__n
jmp 0x4806a9
cmp dword [ebx + 0x7c], 0
jne 0x480ba5
mov eax, ebx
call fcn.0047f74e
mov eax, dword [ebx]
mov dword [esp + 4], eax
mov dword [esp], str.ENTITY_n
jmp 0x48063d
cmp dword [ebx + 0x7c], 0
jne 0x480ba5
mov eax, ebx
call fcn.0047f74e
mov eax, dword [esi + 8]
mov dword [esp + 8], eax
mov dword [esp + 4], str.PI__s_n
mov eax, dword [ebx]
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
jmp 0x480ba5
cmp dword [ebx + 0x7c], 0
jne 0x480ba5
mov eax, ebx
call fcn.0047f74e
mov eax, dword [ebx]
mov dword [esp + 4], eax
mov dword [esp], str.COMMENT_n
jmp 0x48063d
cmp dword [ebx + 0x7c], 0
jne 0x4806e8
mov eax, ebx
call fcn.0047f74e
mov eax, dword [ebx]
mov dword [esp + 4], eax
mov dword [esp], str.Error__DOCUMENT_found_here_n
call fcn.0059fdc8
jmp 0x480dac
cmp dword [ebx + 0x7c], 0
jne 0x480ba5
mov eax, ebx
call fcn.0047f74e
mov eax, dword [ebx]
mov dword [esp + 4], eax
mov dword [esp], str.DOCUMENT_TYPE_n
jmp 0x48063d
cmp dword [ebx + 0x7c], 0
jne 0x480ba5
mov eax, ebx
call fcn.0047f74e
mov eax, dword [ebx]
mov dword [esp + 4], eax
mov dword [esp], str.DOCUMENT_FRAG_n
jmp 0x48063d
cmp dword [ebx + 0x7c], 0
jne 0x480ba5
mov eax, ebx
call fcn.0047f74e
mov eax, dword [ebx]
mov dword [esp + 4], eax
mov dword [esp], str.NOTATION_n
jmp 0x48063d
mov eax, ebx
add esp, 0x2c
pop ebx
pop esi
pop edi
leave
jmp fcn.00480275
mov eax, ebx
add esp, 0x2c
pop ebx
pop esi
pop edi
leave
jmp fcn.0048035f
mov eax, ebx
call fcn.0047f74e
cmp dword [esi + 4], 0x10
je 0x4807a0
mov ecx, str.Node_is_not_an_attribute_declaration
mov edx, 0x13a0
jmp 0x4809a8
mov eax, dword [esi + 8]
test eax, eax
je 0x4807c5
cmp dword [ebx + 0x7c], 0
jne 0x4807d6
mov dword [esp + 8], eax
mov dword [esp + 4], str.ATTRDECL__s_
mov eax, dword [ebx]
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
jmp 0x4807d6
mov ecx, str.Node_attribute_declaration_has_no_name
mov edx, 0x1397
mov eax, ebx
call fcn.0047f78e
mov eax, dword [esi + 0x3c]
test eax, eax
je 0x4807fb
cmp dword [ebx + 0x7c], 0
jne 0x48080c
mov dword [esp + 8], eax
mov dword [esp + 4], str._for__s
mov eax, dword [ebx]
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
jmp 0x48080c
mov ecx, str.Node_attribute_declaration_has_no_element_name
mov edx, 0x1398
mov eax, ebx
call fcn.0047f78e
cmp dword [ebx + 0x7c], 0
jne 0x480dac
mov edx, dword [esi + 0x28]
dec edx
cmp edx, 9
ja case.default.0x480825
mov eax, dword [ebx]
jmp dword [edx*4 + 0x66f0dc]
mov dword [esp + 4], eax
mov dword [esp], str._CDATA
jmp 0x4808ac
mov dword [esp + 4], eax
mov dword [esp], 0x66ee38
jmp 0x4808ac
mov dword [esp + 4], eax
mov dword [esp], str._IDREF
jmp 0x4808ac
mov dword [esp + 4], eax
mov dword [esp], str._IDREFS
jmp 0x4808ac
mov dword [esp + 4], eax
mov dword [esp], str._ENTITY
jmp 0x4808ac
mov dword [esp + 4], eax
mov dword [esp], str._ENTITIES
jmp 0x4808ac
mov dword [esp + 4], eax
mov dword [esp], str._NMTOKEN
jmp 0x4808ac
mov dword [esp + 4], eax
mov dword [esp], str._NMTOKENS
jmp 0x4808ac
mov dword [esp + 4], eax
mov dword [esp], str._ENUMERATION
jmp 0x4808ac
mov dword [esp + 4], eax
mov dword [esp], str._NOTATION
call fcn.0059fdc8
mov edi, dword [esi + 0x34]
test edi, edi
je 0x480912
mov dword [ebp - 0x1c], 0
cmp dword [ebp - 0x1c], 0
mov eax, dword [ebx]
mov edx, dword [edi + 4]
je 0x4808d8
mov dword [esp + 8], edx
mov dword [esp + 4], 0x66ee88
jmp 0x4808e4
mov dword [esp + 8], edx
mov dword [esp + 4], 0x66ee8c
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
mov edi, dword [edi]
test edi, edi
je 0x480900
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 5
jne 0x4808bf
jmp 0x480dbc
mov eax, dword [ebx]
mov dword [esp + 4], eax
mov dword [esp], 0x29
call fcn.0059fd00
mov eax, dword [esi + 0x2c]
cmp eax, 3
je 0x480933
cmp eax, 4
je 0x480942
cmp eax, 2
jne 0x480954
mov eax, dword [ebx]
mov dword [esp + 4], eax
mov dword [esp], str._REQUIRED
jmp 0x48094f
mov eax, dword [ebx]
mov dword [esp + 4], eax
mov dword [esp], str._IMPLIED
jmp 0x48094f
mov eax, dword [ebx]
mov dword [esp + 4], eax
mov dword [esp], str._FIXED
call fcn.0059fdc8
cmp dword [esi + 0x30], 0
je 0x480b0f
mov eax, dword [ebx]
mov dword [esp + 4], eax
mov dword [esp], 0x22
call fcn.0059fd00
mov edx, dword [esi + 0x30]
mov eax, ebx
call fcn.0047fbbb
mov eax, dword [ebx]
mov dword [esp + 4], eax
mov dword [esp], 0x22
call fcn.0059fd00
jmp 0x480b0f
mov eax, ebx
call fcn.0047f74e
cmp dword [esi + 4], 0x11
je 0x4809b6
mov ecx, str.Node_is_not_an_entity_declaration
mov edx, 0x13a2
mov eax, ebx
add esp, 0x2c
pop ebx
pop esi
pop edi
leave
jmp fcn.0047f78e
cmp dword [esi + 8], 0
je 0x4809f2
cmp dword [ebx + 0x7c], 0
jne 0x480a03
mov eax, dword [ebx]
mov dword [esp + 4], eax
mov dword [esp], str.ENTITYDECL_
call fcn.0059fdc8
mov edx, dword [esi + 8]
mov eax, ebx
call fcn.0047fbbb
mov eax, dword [ebx]
mov dword [esp + 4], eax
mov dword [esp], 0x29
call fcn.0059fd00
jmp 0x480a03
mov ecx, str.Entity_declaration_has_no_name
mov edx, 0x1397
mov eax, ebx
call fcn.0047f78e
cmp dword [ebx + 0x7c], 0
jne 0x480dac
mov edx, dword [esi + 0x30]
dec edx
cmp edx, 5
ja case.default.0x480a18
mov eax, dword [ebx]
jmp dword [edx*4 + 0x66f104]
mov dword [esp + 4], eax
mov dword [esp], str.__internal_n
jmp 0x480a6b
mov dword [esp + 4], eax
mov dword [esp], str.__external_parsed_n
jmp 0x480a6b
mov dword [esp + 4], eax
mov dword [esp], str.__unparsed_n
jmp 0x480a6b
mov dword [esp + 4], eax
mov dword [esp], str.__parameter_n
jmp 0x480a6b
mov dword [esp + 4], eax
mov dword [esp], str.__external_parameter_n
jmp 0x480a6b
mov dword [esp + 4], eax
mov dword [esp], str.__predefined_n
call fcn.0059fdc8
cmp dword [esi + 0x34], 0
je 0x480a96
mov eax, ebx
call fcn.0047f74e
mov eax, dword [esi + 0x34]
mov dword [esp + 8], eax
mov dword [esp + 4], str._ExternalID_s_n
mov eax, dword [ebx]
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
cmp dword [esi + 0x38], 0
je 0x480abc
mov eax, ebx
call fcn.0047f74e
mov eax, dword [esi + 0x38]
mov dword [esp + 8], eax
mov dword [esp + 4], str._SystemID_s_n
mov eax, dword [ebx]
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
cmp dword [esi + 0x40], 0
je 0x480ae2
mov eax, ebx
call fcn.0047f74e
mov eax, dword [esi + 0x40]
mov dword [esp + 8], eax
mov dword [esp + 4], str._URI_s_n
mov eax, dword [ebx]
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
cmp dword [esi + 0x28], 0
je 0x480dac
mov eax, ebx
call fcn.0047f74e
mov eax, dword [ebx]
mov dword [esp + 4], eax
mov dword [esp], str._content
call fcn.0059fdc8
mov edx, dword [esi + 0x28]
mov eax, ebx
call fcn.0047fbbb
mov eax, dword [ebx]
mov dword [esp + 4], eax
mov dword [esp], 0xa
call fcn.0059fd00
jmp 0x480dac
mov eax, ebx
add esp, 0x2c
pop ebx
pop esi
pop edi
leave
jmp fcn.0047fc5b
cmp dword [ebx + 0x7c], 0
jne 0x480dd3
mov eax, ebx
call fcn.0047f74e
mov eax, dword [ebx]
mov dword [esp + 4], eax
mov dword [esp], str.INCLUDE_START_n
jmp 0x480b72
cmp dword [ebx + 0x7c], 0
jne 0x480dd3
mov eax, ebx
call fcn.0047f74e
mov eax, dword [ebx]
mov dword [esp + 4], eax
mov dword [esp], str.INCLUDE_END_n
call fcn.0059fdc8
jmp 0x480dd3
cmp dword [ebx + 0x7c], 0
jne 0x480b89
mov eax, ebx
call fcn.0047f74e
mov eax, dword [esi + 4]
mov dword [esp], eax
mov ecx, str.Unknown_node_type__d_n
mov edx, 0x1393
mov eax, ebx
call fcn.0047f81f
jmp 0x480dd3
cmp dword [esi + 0x20], 0
jne 0x480bca
cmp dword [ebx + 0x7c], 0
jne 0x480bb8
mov eax, ebx
call fcn.0047f74e
mov eax, dword [ebx]
mov dword [esp + 4], eax
mov dword [esp], str.PBM:_doc__NULL_____n
call fcn.0059fdc8
inc dword [ebx + 0x6c]
cmp dword [esi + 4], 1
jne 0x480be7
mov edi, dword [esi + 0x30]
test edi, edi
je 0x480be7
mov edx, edi
mov eax, ebx
call fcn.0047fc5b
mov edi, dword [edi]
jmp 0x480bd6
cmp dword [esi + 4], 1
jne 0x480c02
mov edi, dword [esi + 0x2c]
test edi, edi
je 0x480c02
mov edx, edi
mov eax, ebx
call fcn.00480e56
mov edi, dword [edi + 0x18]
jmp 0x480bf0
mov eax, dword [esi + 4]
cmp eax, 5
je 0x480c46
dec eax
je 0x480da9
cmp dword [esi + 0x28], 0
je 0x480da9
cmp dword [ebx + 0x7c], 0
jne 0x480da9
mov eax, ebx
call fcn.0047f74e
mov eax, dword [ebx]
mov dword [esp + 4], eax
mov dword [esp], str.content
call fcn.0059fdc8
mov edx, dword [esi + 0x28]
jmp 0x480d90
mov eax, dword [esi + 8]
mov dword [esp + 4], eax
mov eax, dword [esi + 0x20]
mov dword [esp], eax
call sym.evasi0n_gui.exe_xmlGetDocEntity
mov edi, eax
test eax, eax
je 0x480da9
mov eax, ebx
call fcn.0047f74e
cmp dword [ebx + 0x7c], 0
jne 0x480da9
mov eax, dword [edi + 0x30]
lea edx, [eax - 1]
cmp edx, 4
ja case.default.0x480c80
mov eax, dword [ebx]
jmp dword [edx*4 + 0x66f11c]
mov dword [esp + 4], eax
mov dword [esp], str.INTERNAL_GENERAL_ENTITY
jmp 0x480c9f
mov dword [esp + 4], eax
mov dword [esp], str.EXTERNAL_GENERAL_PARSED_ENTITY
call fcn.0059fdc8
jmp 0x480ce3
mov dword [esp + 4], eax
mov dword [esp], str.EXTERNAL_GENERAL_UNPARSED_ENTITY
jmp 0x480c9f
mov dword [esp + 4], eax
mov dword [esp], str.INTERNAL_PARAMETER_ENTITY
jmp 0x480c9f
mov dword [esp + 4], eax
mov dword [esp], str.EXTERNAL_PARAMETER_ENTITY
jmp 0x480c9f
mov dword [esp + 8], eax
mov dword [esp + 4], str.ENTITY__d__
mov eax, dword [ebx]
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
mov eax, dword [edi + 8]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x66f05e
mov eax, dword [ebx]
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
cmp dword [edi + 0x34], 0
je 0x480d22
mov eax, ebx
call fcn.0047f74e
mov eax, dword [edi + 0x34]
mov dword [esp + 8], eax
mov dword [esp + 4], str.ExternalID_s_n
mov eax, dword [ebx]
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
cmp dword [edi + 0x38], 0
je 0x480d48
mov eax, ebx
call fcn.0047f74e
mov eax, dword [edi + 0x38]
mov dword [esp + 8], eax
mov dword [esp + 4], str.SystemID_s_n
mov eax, dword [ebx]
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
cmp dword [edi + 0x40], 0
je 0x480d6e
mov eax, ebx
call fcn.0047f74e
mov eax, dword [edi + 0x40]
mov dword [esp + 8], eax
mov dword [esp + 4], str.URI_s_n
mov eax, dword [ebx]
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
cmp dword [edi + 0x28], 0
je 0x480da9
mov eax, ebx
call fcn.0047f74e
mov eax, dword [ebx]
mov dword [esp + 4], eax
mov dword [esp], str.content
call fcn.0059fdc8
mov edx, dword [edi + 0x28]
mov eax, ebx
call fcn.0047fbbb
mov eax, dword [ebx]
mov dword [esp + 4], eax
mov dword [esp], 0xa
call fcn.0059fd00
dec dword [ebx + 0x6c]
mov edx, esi
mov eax, ebx
add esp, 0x2c
pop ebx
pop esi
pop edi
leave
jmp fcn.00480002
mov eax, dword [ebx]
mov dword [esp + 4], eax
mov dword [esp], str...._
call fcn.0059fdc8
jmp 0x480912
add esp, 0x2c
pop ebx
pop esi
pop edi
leave
ret