Function at 0x10b28a0
Capabilities:
Parse pe header

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x44
push ebx
push esi
push edi
push 0x41
lea eax, [ebp - 0x44]
push 0
push eax
call sub.msvcrt.dll_memset
mov esi, dword [ebp + 8]
mov ebx, dword [esi + 0x14]
mov eax, dword [esi + 0x10]
mov edi, dword [eax + 0x3c]
add esp, 0xc
cmp ebx, 0x30
jbe 0x10b28e3
cmp dword [eax + 0x1c], 0x58465352
jne 0x10b28e3
pop edi
pop esi
mov eax, 0x1000002f
pop ebx
mov esp, ebp
pop ebp
ret 8
lea ecx, [ebx - 0x10]
cmp edi, ecx
ja 0x10b29ea
cmp ebx, 0x200
jb 0x10b29ea
movzx ecx, word [edi + eax + 4]
add edi, eax
mov edx, 0x8664
cmp cx, dx
je 0x10b2abe
mov edx, 0x200
cmp cx, dx
je 0x10b2abe
mov dword [esi + 0xc0], edi
movzx eax, word [edi]
cmp eax, 0x4550
jg 0x10b29dc
je 0x10b295b
sub eax, 0x454c
je 0x10b294f
sub eax, 2
jne 0x10b29ea
mov dword [esi + 4], 0x1c
jmp 0x10b29ea
mov dword [esi + 4], 0x1b
jmp 0x10b29ea
mov eax, 0x20b
cmp word [edi + 0x18], ax
je 0x10b29b9
mov eax, dword [esi + 0xe0]
test eax, eax
je 0x10b29b9
push 0xa34
push 0
push eax
call sub.msvcrt.dll_memset
mov ecx, dword [esi + 0x14]
mov edx, dword [esi + 0x10]
mov eax, dword [esi + 0xe0]
add esp, 0xc
push ecx
push edi
push edx
push eax
call fcn.01029fb0
cmp dword [ebp + 0xc], 0
jne 0x10b29b9
mov ecx, dword [esi + 0x14]
mov edx, dword [esi + 0x10]
mov eax, dword [esi + 0xe0]
push 0
push edi
push ecx
mov ecx, dword [esi + 0xe8]
push edx
push eax
push ecx
call fcn.0108be40
push edi
mov edx, 0x2000
push edi
push esi
test word [edi + 0x16], dx
je 0x10b29ce
mov dword [esi + 4], 0x20
call fcn.010621a0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
cmp eax, 0x5a4d
jne 0x10b29ea
mov dword [esi + 4], 0x1e
mov edi, ebx
mov dword [esi + 4], 0x1e
cmp edi, 0x10000
jbe 0x10b2a00
mov edi, 0x10000
mov eax, 0xcccccccd
mul edi
mov ecx, edx
mov eax, 0x24924925
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
lea ebx, [esi + 8]
push ebx
shr eax, 2
shr ecx, 3
push eax
mov eax, dword [esi + 0x10]
mov dword [ebp + 0xc], ecx
add ecx, eax
push ecx
mov ecx, dword [esi + 0xe8]
mov edx, dword [ecx + 0x2715c]
push edx
call fcn.01022990
mov eax, 0xaaaaaaab
mul edi
shr edx, 2
push ebx
push edx
mov dword [ebp + 8], edx
mov eax, 0xaaaaaaab
mul edi
mov eax, dword [esi + 0xe8]
mov ecx, dword [eax + 0x2715c]
shr edx, 1
add edx, dword [esi + 0x10]
push edx
push ecx
call fcn.01022990
mov edx, dword [ebp + 8]
mov ecx, dword [esi + 0xe8]
push ebx
mov eax, edi
shr eax, 1
add eax, dword [esi + 0x10]
push edx
mov edx, dword [ecx + 0x2715c]
push eax
push edx
call fcn.01022990
mov eax, 0xcccccccd
mul edi
sub edi, dword [ebp + 0xc]
mov eax, dword [esi + 0xe8]
add edi, dword [esi + 0x10]
mov ecx, dword [eax + 0x2715c]
push ebx
shr edx, 4
push edx
push edi
push ecx
call fcn.01022990
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret 8
push ebx
or ecx, 0xffffffff
push eax
mov dword [esi], 1
mov dword [esi + 8], ecx
mov dword [esi + 0xc], ecx
mov edx, dword [edi + 0x28]
push edi
push edx
call fcn.01021980
xor edi, edi
cmp eax, edi
je 0x10b2b91
sub eax, dword [esi + 0x10]
mov dword [esi + 0x2c], eax
cmp eax, ebx
jae 0x10b2b91
sub ebx, eax
cmp ebx, 0x3c
jbe 0x10b2b91
push 0x64
lea ebx, [esi + 0x48]
push edi
push ebx
call sub.msvcrt.dll_memset
mov eax, dword [esi + 0x10]
add esp, 0xc
mov dword [ebp + 0xc], eax
mov dword [ebp + 8], edi
mov ecx, dword [esi + 0x2c]
mov edx, dword [ebp + 0xc]
add ecx, edi
mov al, byte [ecx + edx]
add ecx, edx
cmp al, 0x20
jbe 0x10b2b34
cmp al, 0x7e
ja 0x10b2b34
push 1
push ecx
push ebx
call fcn.0101d030
jmp 0x10b2b55
movzx eax, al
push eax
push 0x100d4f0
lea ecx, [ebp - 0x44]
push 3
push ecx
call fcn.0101d440
add esp, 0x10
lea edx, [ebp - 0x44]
push edx
push ebx
call fcn.0101d060
inc edi
cmp edi, 8
jb 0x10b2b14
mov edi, dword [esi + 0x2c]
cmp edi, dword [esi + 0x14]
jae 0x10b2b91
mov eax, dword [ebp + 0xc]
mov cl, byte [eax + edi]
add eax, edi
cmp cl, 0x20
jbe 0x10b2b8b
cmp cl, 0x7e
ja 0x10b2b8b
inc dword [ebp + 8]
push 1
push eax
push ebx
call dword [sym.imp.msvcrt.dll_strncat]
add esp, 0xc
cmp dword [ebp + 8], 0x3c
je 0x10b2b91
inc edi
cmp edi, dword [esi + 0x14]
jb 0x10b2b63
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 8