Function at 0x100de890
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc0
push ebx
mov ebx, dword [ebp + 8]
mov eax, 0x5a4d
push edi
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x20], ecx
cmp word [ebx], ax
jne 0x100deb18
mov eax, dword [ebx + 0x3c]
cmp eax, 0x400
jg 0x100deb18
cmp dword [eax + ebx], 0x4550
lea edi, [eax + ebx]
jne 0x100deb18
mov eax, 0x10b
cmp word [edi + 0x18], ax
je 0x100de8e8
pop edi
mov eax, 0xe0010002
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov eax, dword [edi + 0x78]
mov dword [ebp - 0x10], eax
test eax, eax
je 0x100deb0b
mov ecx, dword [edi + 0x7c]
add ecx, eax
mov dword [ebp - 0x1c], ecx
je 0x100deb0b
push esi
mov esi, dword [ebp + 0x14]
test esi, esi
jne 0x100de91e
push 0x100de870
call fcn.100dee30
mov esi, eax
mov eax, dword [ebp - 0x10]
mov dword [ebp + 0x14], esi
lea ecx, [ebp + 8]
push ecx
push eax
push edi
call esi
test eax, eax
js 0x100de9f0
mov eax, dword [ebp + 8]
lea ecx, [ebp + 8]
add eax, ebx
push ecx
mov dword [ebp - 4], eax
push dword [eax + 0x1c]
push edi
call esi
test eax, eax
js 0x100de9f0
mov eax, dword [ebp + 8]
add eax, ebx
mov dword [ebp - 8], eax
lea eax, [ebp + 8]
push eax
mov eax, dword [ebp - 4]
push dword [eax + 0x20]
push edi
call esi
test eax, eax
js 0x100de9f0
mov eax, dword [ebp + 8]
add eax, ebx
mov dword [ebp - 0x18], eax
lea eax, [ebp + 8]
push eax
mov eax, dword [ebp - 4]
push dword [eax + 0x24]
push edi
call esi
test eax, eax
js 0x100de9f0
mov edx, dword [ebp - 4]
xor esi, esi
mov eax, dword [ebp + 8]
add eax, ebx
mov dword [ebp - 0xc], eax
cmp dword [edx + 0x14], esi
jbe 0x100de9eb
mov ecx, dword [ebp - 8]
cmp dword [ecx + esi*4], 0
je 0x100de9e5
mov edx, dword [edx + 0x18]
xor ecx, ecx
test edx, edx
je 0x100de9df
movzx eax, word [eax + ecx*2]
cmp eax, esi
je 0x100de9b4
mov eax, dword [ebp - 0xc]
inc ecx
cmp ecx, edx
jb 0x100de9a2
jmp 0x100de9df
lea eax, [ebp + 8]
push eax
mov eax, dword [ebp - 0x18]
push dword [eax + ecx*4]
push edi
call dword [ebp + 0x14]
test eax, eax
js 0x100de9f0
mov ecx, dword [ebp + 8]
add ecx, ebx
je 0x100de9dc
mov edx, 0x15389724
call fcn.100de790
cmp eax, dword [ebp + 0xc]
je 0x100de9f9
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 4]
inc esi
cmp esi, dword [edx + 0x14]
jb 0x100de993
mov eax, 0xe0d0021f
pop esi
pop edi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov eax, dword [ebp - 8]
mov eax, dword [eax + esi*4]
cmp eax, dword [ebp - 0x10]
jb 0x100deae5
cmp eax, dword [ebp - 0x1c]
jae 0x100deae5
lea ecx, [ebp + 8]
push ecx
push eax
push edi
call dword [ebp + 0x14]
test eax, eax
js 0x100de9f0
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x70]
add eax, ebx
push eax
call fcn.100decd0
xor edi, edi
lea eax, [ebp - 0x70]
xor ecx, ecx
mov dl, byte [eax]
test dl, dl
je 0x100dea47
cmp dl, 0x2e
jne 0x100dea40
mov edi, eax
inc ecx
inc eax
cmp ecx, 0x4f
jb 0x100dea33
test edi, edi
jne 0x100dea59
pop esi
pop edi
mov eax, 0xe0d0021c
pop ebx
mov esp, ebp
pop ebp
ret 0x10
lea esi, [edi + 1]
mov byte [edi], 0
push esi
lea ecx, [ebp - 0xc0]
call fcn.100decd0
mov byte [edi], 0x2e
mov edx, 0xcaffca3d
push ecx
lea ecx, [ebp - 0x70]
mov byte [esi], 0x64
mov word [edi + 2], 0x6c6c
mov byte [edi + 4], 0
mov dword [ebp + 0xc], 0
call fcn.100de790
mov edi, dword [ebp - 0x20]
lea edx, [ebp + 0xc]
push eax
mov ecx, edi
call fcn.100de7c0
test eax, eax
js 0x100de9f0
mov esi, dword [ebp + 0xc]
test esi, esi
jne 0x100deabb
pop esi
pop edi
mov eax, 0xe0d0021e
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push dword [ebp + 0x14]
mov edx, 0x15389724
lea ecx, [ebp - 0xc0]
push 0
call fcn.100de790
mov edx, dword [ebp - 0x14]
mov ecx, edi
push eax
push esi
call fcn.100de890
pop esi
pop edi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
lea ecx, [ebp + 8]
push ecx
push eax
push edi
call dword [ebp + 0x14]
test eax, eax
js 0x100de9f0
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp + 8]
add eax, ebx
pop esi
pop edi
mov dword [ecx], eax
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10
pop edi
mov eax, 0xe0d0021b
pop ebx
mov esp, ebp
pop ebp
ret 0x10
pop edi
mov eax, 0xe0d0021a
pop ebx
mov esp, ebp
pop ebp
ret 0x10