Function at 0x100bd8b0
Capabilities:
Parse pe header

Disassembly:
push ebx
push ebp
push esi
mov esi, dword [esp + 0x10]
or ebx, 0xffffffff
push edi
xor edi, edi
mov ecx, dword [esi + 0x24]
mov eax, dword [ecx + 0x10]
cmp byte [eax], 0x3c
jne 0x100bdb92
cmp byte [eax + 1], 0x21
jne 0x100bdb92
cmp byte [eax + 2], 0x45
jne 0x100bdb92
cmp byte [eax + 3], 0x4c
jne 0x100bdb92
cmp byte [eax + 4], 0x45
jne 0x100bdb92
cmp byte [eax + 5], 0x4d
jne 0x100bdb92
cmp byte [eax + 6], 0x45
jne 0x100bdb92
cmp byte [eax + 7], 0x4e
jne 0x100bdb92
cmp byte [eax + 8], 0x54
jne 0x100bdb92
mov edx, dword [ecx + 0x38]
add eax, 9
mov dword [ecx + 0x10], eax
mov eax, dword [esi + 0x24]
mov dword [esp + 0x14], edx
add dword [eax + 0x20], 9
mov ecx, dword [esi + 0x24]
mov eax, dword [ecx + 0x10]
cmp byte [eax], 0
jne 0x100bd949
push 0xfa
push ecx
call fcn.100f22c0
add esp, 8
push esi
call fcn.100ca050
add esp, 4
test eax, eax
jne 0x100bd96e
push str.Space_required_after_ELEMENT_n
push 0x41
push esi
call fcn.100b6940
add esp, 0xc
or eax, 0xffffffff
pop edi
pop esi
pop ebp
pop ebx
ret
push esi
call fcn.100c1a50
mov ebp, eax
add esp, 4
test ebp, ebp
jne 0x100bd995
push str.xmlParseElementDecl:_no_name_for_Element_n
push 0x44
push esi
call fcn.100b6940
add esp, 0xc
or eax, 0xffffffff
pop edi
pop esi
pop ebp
pop ebx
ret
push esi
call fcn.100ca050
add esp, 4
test eax, eax
jne 0x100bd9b2
push str.Space_required_after_the_element_name_n
push 0x41
push esi
call fcn.100b6940
add esp, 0xc
mov edx, dword [esi + 0x24]
mov eax, dword [edx + 0x10]
mov cl, byte [eax]
cmp cl, 0x45
jne 0x100bda17
cmp byte [eax + 1], 0x4d
jne 0x100bdcb8
cmp byte [eax + 2], 0x50
jne 0x100bdcb8
cmp byte [eax + 3], 0x54
jne 0x100bdcb8
cmp byte [eax + 4], 0x59
jne 0x100bdcb8
add eax, 5
mov dword [edx + 0x10], eax
mov eax, dword [esi + 0x24]
add dword [eax + 0x20], 5
mov ecx, dword [esi + 0x24]
mov eax, dword [ecx + 0x10]
cmp byte [eax], 0
jne 0x100bda0d
push 0xfa
push ecx
call fcn.100f22c0
add esp, 8
mov ebx, 1
jmp 0x100bdb0c
cmp cl, 0x41
jne 0x100bda60
cmp byte [eax + 1], 0x4e
jne 0x100bdcb8
cmp byte [eax + 2], 0x59
jne 0x100bdcb8
add eax, 3
mov dword [edx + 0x10], eax
mov eax, dword [esi + 0x24]
add dword [eax + 0x20], 3
mov ecx, dword [esi + 0x24]
mov eax, dword [ecx + 0x10]
cmp byte [eax], 0
jne 0x100bda56
push 0xfa
push ecx
call fcn.100f22c0
add esp, 8
mov ebx, 2
jmp 0x100bdb0c
cmp cl, 0x28
jne 0x100bdc6e
mov ebx, dword [edx + 0x38]
xor edi, edi
push esi
call fcn.100f1cd0
add esp, 4
cmp dword [esi + 0x124], edi
jne 0x100bda99
mov eax, dword [esi + 0x24]
mov ecx, dword [eax + 0x14]
sub ecx, dword [eax + 0x10]
cmp ecx, 0xfa
jge 0x100bda99
push esi
call fcn.100b6a20
add esp, 4
cmp dword [esi + 0xac], 0xffffffff
jne 0x100bdaa7
or ebx, 0xffffffff
jmp 0x100bdb0c
push esi
call fcn.100ca050
mov eax, dword [esi + 0x24]
add esp, 4
mov eax, dword [eax + 0x10]
cmp byte [eax], 0x23
jne 0x100bdaf0
cmp byte [eax + 1], 0x50
jne 0x100bdaf0
cmp byte [eax + 2], 0x43
jne 0x100bdaf0
cmp byte [eax + 3], 0x44
jne 0x100bdaf0
cmp byte [eax + 4], 0x41
jne 0x100bdaf0
cmp byte [eax + 5], 0x54
jne 0x100bdaf0
cmp byte [eax + 6], 0x41
jne 0x100bdaf0
push ebx
push esi
call fcn.100bdde0
add esp, 8
mov ebx, 3
jmp 0x100bdb01
push 1
push ebx
push esi
call fcn.100bd110
add esp, 0xc
mov ebx, 4
push esi
mov edi, eax
call fcn.100ca050
add esp, 4
push esi
call fcn.100ca050
mov ecx, dword [esi + 0x24]
add esp, 4
mov eax, dword [ecx + 0x10]
cmp byte [eax], 0x3e
je 0x100bdb99
cmp dword [esi + 0xd4], 0
je 0x100bdb32
cmp dword [esi + 0xac], 0xffffffff
je 0x100bdb82
push str.expected__
push 0x10271630
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 3
push 0x49
push 1
push 0
push esi
push 0
push 0
push 0
mov dword [esi + 0x54], 0x49
call fcn.100db7e0
add esp, 0x44
mov dword [esi + 0xc], 0
cmp dword [esi + 0x120], 0
jne 0x100bdb82
mov dword [esi + 0xd4], 1
test edi, edi
je 0x100bdb92
push edi
push dword [esi + 8]
call fcn.100e6b10
add esp, 8
pop edi
pop esi
pop ebp
mov eax, ebx
pop ebx
ret
mov eax, dword [esp + 0x14]
cmp eax, dword [ecx + 0x38]
je 0x100bdc04
cmp dword [esi + 0xd4], 0
je 0x100bdbb4
cmp dword [esi + 0xac], 0xffffffff
je 0x100bdc04
push str.Element_declaration_doesnt_start_and_stop_in_the_same_entity_n
push 0x10267d34
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 3
push 0x5a
push 1
push 0
push esi
push 0
push 0
push 0
mov dword [esi + 0x54], 0x5a
call fcn.100db7e0
add esp, 0x44
mov dword [esi + 0xc], 0
cmp dword [esi + 0x120], 0
jne 0x100bdc04
mov dword [esi + 0xd4], 1
push esi
call fcn.100f1cd0
mov eax, dword [esi]
add esp, 4
test eax, eax
je 0x100bdb82
cmp dword [esi + 0xd4], 0
jne 0x100bdb82
cmp dword [eax + 0x24], 0
je 0x100bdb82
test edi, edi
je 0x100bdc3b
mov dword [edi + 0x14], 0
mov eax, dword [esi]
mov eax, dword [eax + 0x24]
push edi
push ebx
push ebp
push dword [esi + 4]
call eax
add esp, 0x10
test edi, edi
je 0x100bdb92
cmp dword [edi + 0x14], 0
jne 0x100bdb92
push edi
push dword [esi + 8]
call fcn.100e6b10
add esp, 8
mov eax, ebx
pop edi
pop esi
pop ebp
pop ebx
ret
cmp cl, 0x25
jne 0x100bdcb8
cmp dword [esi + 0x60], edi
jne 0x100bdcb8
cmp dword [esi + 0x28], 1
jne 0x100bdcb8
cmp dword [esi + 0xd4], edi
je 0x100bdc93
cmp dword [esi + 0xac], 0xffffffff
je 0x100bdd14
push str.PEReference:_forbidden_within_markup_decl_in_internal_subset_n
push 0x10267d34
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 3
mov dword [esi + 0x54], 0x15
push 0x15
jmp 0x100bdcec
cmp dword [esi + 0xd4], edi
je 0x100bdcc9
cmp dword [esi + 0xac], 0xffffffff
je 0x100bdd14
push str.xmlParseElementDecl:_EMPTY__ANY_or___expected_n
push 0x10267d34
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 3
mov dword [esi + 0x54], 0x36
push 0x36
push 1
push 0
push esi
push 0
push 0
push 0
call fcn.100db7e0
add esp, 0x44
mov dword [esi + 0xc], edi
cmp dword [esi + 0x120], edi
jne 0x100bdd14
mov dword [esi + 0xd4], 1
pop edi
pop esi
pop ebp
or eax, 0xffffffff
pop ebx
ret