Function at 0x4c2bd3
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x3c
mov ebx, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 0x10]
test ebx, ebx
jne 0x4c2bff
or edx, 0xffffffff
test esi, esi
je 0x4c302e
mov dword [esp], esi
mov dword [ebp - 0x20], edx
jmp 0x4c2e06
mov eax, dword [ebp + 0x18]
or eax, 0x10000
mov dword [ebp - 0x1c], eax
mov dword [ebx + 4], 0
mov dword [ebx + 0x60], 0
mov dword [ebx + 0xb8], eax
mov dword [ebx + 8], 0
test esi, esi
je 0x4c2c4e
mov eax, dword [ebx + 0x1c]
test eax, eax
je 0x4c3038
test byte [ebx + 0xc], 1
je 0x4c3038
mov dword [esp], eax
call sym.evasi0n_gui.exe_xmlFreeParserInputBuffer
dec dword [ebx + 0xc]
jmp 0x4c3038
cmp dword [ebx + 0x54], 0
jne 0x4c2c63
mov dword [esp], 0x64
call sym.evasi0n_gui.exe_xmlBufferCreateSize
mov dword [ebx + 0x54], eax
cmp dword [ebx + 0x54], 0
je 0x4c2e60
cmp dword [ebx + 0x18], 0
jne 0x4c2c83
mov dword [esp], pe_nt_image_headers32
call dword [sym.evasi0n_gui.exe_xmlMalloc]
mov dword [ebx + 0x18], eax
mov eax, dword [ebx + 0x18]
test eax, eax
je 0x4c2e60
mov dword [esp + 4], 2
mov dword [esp], eax
call sym.evasi0n_gui.exe_xmlSAXVersion
mov eax, dword [ebx + 0x18]
mov edx, dword [eax + 0x38]
mov dword [ebx + 0x20], edx
mov dword [eax + 0x38], 0x4be960
mov edx, dword [eax + 0x3c]
mov dword [ebx + 0x24], edx
mov dword [eax + 0x3c], 0x4be9c3
cmp dword [eax + 0x6c], 0xdeedbeaf
jne 0x4c2ce0
mov edx, dword [eax + 0x74]
mov dword [ebx + 0x28], edx
mov dword [eax + 0x74], 0x4be9e2
mov edx, dword [eax + 0x78]
mov dword [ebx + 0x2c], edx
mov dword [eax + 0x78], 0x4bea6f
jmp 0x4c2cee
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0
mov edx, dword [eax + 0x44]
mov dword [ebx + 0x30], edx
mov dword [eax + 0x44], 0x4bea91
mov dword [eax + 0x48], 0x4bea91
mov edx, dword [eax + 0x64]
mov dword [ebx + 0x34], edx
mov dword [eax + 0x64], 0x4beab5
mov dword [ebx], 0
mov dword [ebx + 0x40], 0
mov dword [ebx + 0x44], 0
test esi, esi
je 0x4c2e83
mov eax, dword [ebx + 0x1c]
mov eax, dword [eax + 0x10]
cmp dword [eax + 4], 3
ja 0x4c2d47
mov dword [esp + 4], 4
mov dword [esp], esi
call sym.evasi0n_gui.exe_xmlParserInputBufferRead
mov eax, dword [ebx + 0x14]
test eax, eax
jne 0x4c2dc8
mov eax, dword [ebx + 0x1c]
mov edx, dword [eax + 0x10]
cmp dword [edx + 4], 3
mov eax, dword [ebx + 0x18]
jbe 0x4c2d95
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], 4
mov edx, dword [edx]
mov dword [esp + 8], edx
mov dword [esp + 4], 0
mov dword [esp], eax
call sym.evasi0n_gui.exe_xmlCreatePushParserCtxt
mov dword [ebx + 0x14], eax
mov dword [ebx + 0x38], 0
mov dword [ebx + 0x3c], 4
jmp 0x4c2e5a
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call sym.evasi0n_gui.exe_xmlCreatePushParserCtxt
mov dword [ebx + 0x14], eax
mov dword [ebx + 0x38], 0
jmp 0x4c2e53
mov dword [esp], eax
call sym.evasi0n_gui.exe_xmlCtxtReset
mov dword [esp], 0
call sym.evasi0n_gui.exe_xmlAllocParserInputBuffer
mov ecx, eax
or edx, 0xffffffff
test eax, eax
je 0x4c302e
mov eax, dword [ebx + 0x14]
mov dword [esp], eax
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x24], ecx
call sym.evasi0n_gui.exe_xmlNewInputStream
mov esi, eax
test eax, eax
mov ecx, dword [ebp - 0x24]
jne 0x4c2e13
mov dword [esp], ecx
call sym.evasi0n_gui.exe_xmlFreeParserInputBuffer
mov edx, dword [ebp - 0x20]
jmp 0x4c302e
test edi, edi
jne 0x4c2e20
mov dword [eax + 4], 0
jmp 0x4c2e31
mov dword [esp], edi
mov dword [ebp - 0x24], ecx
call sym.evasi0n_gui.exe_xmlCanonicPath
mov dword [esi + 4], eax
mov ecx, dword [ebp - 0x24]
mov dword [esi], ecx
mov edx, dword [ecx + 0x10]
mov eax, dword [edx]
mov dword [esi + 0xc], eax
mov dword [esi + 0x10], eax
add eax, dword [edx + 4]
mov dword [esi + 0x14], eax
mov dword [esp + 4], esi
mov eax, dword [ebx + 0x14]
mov dword [esp], eax
call sym.evasi0n_gui.exe_inputPush
mov dword [ebx + 0x3c], 0
cmp dword [ebx + 0x14], 0
jne 0x4c2e83
call sym.evasi0n_gui.exe___xmlGenericError
mov ebx, dword [eax]
call sym.evasi0n_gui.exe___xmlGenericErrorContext
mov dword [esp + 4], str.xmlTextReaderSetup_:_malloc_failed_n
mov eax, dword [eax]
mov dword [esp], eax
call ebx
or edx, 0xffffffff
jmp 0x4c302e
mov eax, dword [ebx + 0x58]
test eax, eax
mov esi, dword [ebx + 0x14]
je 0x4c2ead
mov edx, dword [esi + 0x128]
test edx, edx
je 0x4c2ea5
cmp eax, edx
je 0x4c2ecd
mov dword [esp], eax
call sym.evasi0n_gui.exe_xmlDictFree
jmp 0x4c2ec1
mov dword [esi + 0x128], eax
jmp 0x4c2ecd
cmp dword [esi + 0x128], 0
jne 0x4c2ec1
call sym.evasi0n_gui.exe_xmlDictCreate
mov dword [esi + 0x128], eax
mov eax, dword [ebx + 0x14]
mov eax, dword [eax + 0x128]
mov dword [ebx + 0x58], eax
mov eax, dword [ebx + 0x14]
mov dword [eax + 0x110], ebx
mov dword [eax + 0x118], 1
mov dword [eax + 0x16c], 1
mov dword [eax + 0x134], 1
mov dword [eax + 0x1b4], 5
mov eax, dword [ebx + 0xa0]
test eax, eax
je 0x4c2f1a
mov dword [esp], eax
call sym.evasi0n_gui.exe_xmlXIncludeFreeContext
mov dword [ebx + 0xa0], 0
test dword [ebp - 0x1c], 0x400
je 0x4c2f57
mov dword [ebx + 0x98], 1
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x67ec94
mov eax, dword [ebx + 0x58]
mov dword [esp], eax
call sym.evasi0n_gui.exe_xmlDictLookup
mov dword [ebx + 0x9c], eax
sub dword [ebp - 0x1c], 0x400
jmp 0x4c2f61
mov dword [ebx + 0x98], 0
mov dword [ebx + 0xa4], 0
cmp dword [ebx + 0xb0], 0
jne 0x4c2fb9
mov dword [ebx + 0xa8], 0
mov dword [ebx + 0xac], 0
jmp 0x4c2fb9
dec eax
mov dword [ebx + 0xa8], eax
mov edx, dword [ebx + 0xb0]
mov eax, dword [edx + eax*4]
test eax, eax
je 0x4c2fb9
mov dword [esp], eax
call sym.evasi0n_gui.exe_xmlFreePattern
mov edx, dword [ebx + 0xa8]
mov eax, dword [ebx + 0xb0]
mov dword [eax + edx*4], 0
mov eax, dword [ebx + 0xa8]
test eax, eax
jg 0x4c2f8a
test byte [ebp - 0x1c], 0x10
je 0x4c2fd0
mov dword [ebx + 8], 1
mov eax, dword [ebp - 0x1c]
mov dword [esp + 4], eax
mov eax, dword [ebx + 0x14]
mov dword [esp], eax
call sym.evasi0n_gui.exe_xmlCtxtUseOptions
cmp dword [ebp + 0x14], 0
je 0x4c3006
mov eax, dword [ebp + 0x14]
mov dword [esp], eax
call sym.evasi0n_gui.exe_xmlFindCharEncodingHandler
test eax, eax
je 0x4c3006
mov dword [esp + 4], eax
mov eax, dword [ebx + 0x14]
mov dword [esp], eax
call sym.evasi0n_gui.exe_xmlSwitchToEncoding
test edi, edi
je 0x4c3025
mov eax, dword [ebx + 0x14]
mov esi, dword [eax + 0x24]
test esi, esi
je 0x4c3025
cmp dword [esi + 4], 0
jne 0x4c3025
mov dword [esp], edi
call sym.evasi0n_gui.exe_xmlStrdup
mov dword [esi + 4], eax
mov dword [ebx + 4], 0
xor edx, edx
mov eax, edx
add esp, 0x3c
pop ebx
pop esi
pop edi
leave
ret
mov dword [ebx + 0x1c], esi
or dword [ebx + 0xc], 1
jmp 0x4c2c4e