Function at 0x10002260
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x26c
mov eax, dword [0x101e6040]
xor eax, esp
mov dword [esp + 0x264], eax
push ebx
push ebp
push esi
mov ebp, edx
push edi
mov edi, ecx
test ebp, ebp
je 0x10002287
mov dword [ebp + 4], 0
mov eax, dword [edi]
xorps xmm0, xmm0
push 0
push 0
push 0
movlpd qword [esp + 0x24], xmm0
call dword [eax + 0x20]
mov eax, dword [edi]
lea ecx, [esp + 0xc0]
push 0
push 0x40
push ecx
mov ecx, edi
call dword [eax + 0x18]
test eax, eax
je 0x10002860
mov eax, 0x5a4d
cmp word [esp + 0xc0], ax
jne 0x10002860
mov eax, dword [esp + 0xfc]
test eax, eax
je 0x10002858
js 0x10002858
mov esi, dword [edi]
mov ecx, edi
cdq
mov ebx, eax
mov dword [esp + 0x2c], edx
mov esi, dword [esi + 0x28]
call esi
mov ecx, dword [esp + 0x2c]
cmp ecx, edx
jg 0x10002858
jl 0x10002304
cmp ebx, eax
ja 0x10002858
mov eax, dword [edi]
push 0
push ecx
push ebx
mov eax, dword [eax + 0x20]
mov ecx, edi
call eax
mov ecx, eax
mov esi, edx
mov eax, dword [esp + 0xfc]
cdq
cmp ecx, eax
jne 0x10002860
cmp esi, edx
jne 0x10002860
mov eax, dword [edi]
lea ecx, [esp + 0x68]
push 0
push 4
push ecx
mov ecx, edi
call dword [eax + 0x18]
test eax, eax
je 0x10002860
cmp dword [esp + 0x68], 0x4550
jne 0x10002858
mov eax, dword [edi]
lea ecx, [esp + 0x8c]
push 0
push 0x14
push ecx
mov ecx, edi
call dword [eax + 0x18]
test eax, eax
je 0x10002860
mov eax, dword [edi]
lea ecx, [esp + 0x34]
push 0
push 2
push ecx
mov ecx, edi
call dword [eax + 0x18]
test eax, eax
je 0x10002860
mov ax, word [esp + 0x34]
mov ecx, 0x10b
xor esi, esi
cmp ax, cx
jne 0x1000239e
mov ecx, 0xde
jmp 0x100023b6
mov ecx, 0x20b
cmp ax, cx
jne 0x10002860
mov esi, 1
mov ecx, 0xee
xor ebx, ebx
mov word [esp + 0x100], ax
mov eax, dword [edi]
push ebx
push ecx
lea ecx, [esp + 0x10a]
mov dword [esp + 0x1c], ebx
push ecx
mov ecx, edi
mov dword [esp + 0x38], ebx
call dword [eax + 0x18]
test eax, eax
je 0x10002860
mov eax, dword [esp + 0x170]
test esi, esi
cmovne eax, dword [esp + 0x180]
xor esi, esi
mov dword [esp + 0x28], eax
xor eax, eax
cmp ax, word [esp + 0x8e]
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x18], eax
jae 0x100025e6
mov eax, dword [edi]
lea ecx, [esp + 0x40]
push 0
push 0x28
push ecx
mov ecx, edi
call dword [eax + 0x18]
test eax, eax
je 0x10002860
mov ecx, dword [esp + 0x50]
test ecx, ecx
je 0x1000247a
mov eax, dword [esp + 0x54]
add eax, ecx
xor ecx, ecx
cmp ecx, dword [esp + 0x24]
jl 0x1000247a
jg 0x1000244e
cmp eax, dword [esp + 0x18]
jbe 0x1000247a
push 8
lea eax, [esp + 0x44]
push str._winzip_
push eax
call fcn.1015d410
add esp, 0xc
test eax, eax
je 0x1000247a
mov eax, dword [esp + 0x54]
add eax, dword [esp + 0x50]
mov dword [esp + 0x18], eax
mov dword [esp + 0x24], 0
test ebx, ebx
jne 0x100024a6
push 8
lea eax, [esp + 0x44]
push str..rsrc
push eax
call fcn.1015d410
add esp, 0xc
test eax, eax
jne 0x100024a6
mov ebx, dword [esp + 0x54]
mov eax, dword [esp + 0x50]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x2c], eax
test ebp, ebp
je 0x100025d5
push 8
lea eax, [esp + 0x44]
push str..text
push eax
call fcn.1015d410
add esp, 0xc
test eax, eax
je 0x100025d5
push 8
lea eax, [esp + 0x44]
push 0x1018d650
push eax
call fcn.1015d410
add esp, 0xc
test eax, eax
je 0x100025d5
push 8
lea eax, [esp + 0x44]
push 0x1018d658
push eax
call fcn.1015d410
add esp, 0xc
test eax, eax
je 0x100025d5
push 8
lea eax, [esp + 0x44]
push str..reloc
push eax
call fcn.1015d410
add esp, 0xc
test eax, eax
je 0x100025d5
push 8
lea eax, [esp + 0x44]
push 0x1018d668
push eax
call fcn.1015d410
add esp, 0xc
test eax, eax
je 0x100025d5
push 8
lea eax, [esp + 0x44]
push str..idata
push eax
call fcn.1015d410
add esp, 0xc
test eax, eax
je 0x100025d5
push 8
lea eax, [esp + 0x44]
push str..rsrc
push eax
call fcn.1015d410
add esp, 0xc
test eax, eax
je 0x100025d5
push 8
lea eax, [esp + 0x44]
push str.UPX0
push eax
call fcn.1015d410
add esp, 0xc
test eax, eax
je 0x100025d5
push 8
lea eax, [esp + 0x44]
push str.UPX1
push eax
call fcn.1015d410
add esp, 0xc
test eax, eax
je 0x100025d5
push 8
lea eax, [esp + 0x44]
push str..CRT
push eax
call fcn.1015d410
add esp, 0xc
test eax, eax
je 0x100025d5
push 8
lea eax, [esp + 0x44]
push 0x1018d690
push eax
call fcn.1015d410
add esp, 0xc
test eax, eax
je 0x100025d5
mov eax, dword [esp + 0x54]
mov dword [ebp + 8], eax
movzx eax, word [esp + 0x8e]
inc esi
cmp esi, eax
jl 0x10002418
test ebp, ebp
je 0x1000284e
test ebx, ebx
je 0x1000284e
mov eax, dword [edi]
mov ecx, edi
push 0
push 0
push ebx
call dword [eax + 0x20]
mov eax, dword [edi]
lea ecx, [esp + 0x6c]
push 0
push 0x10
push ecx
mov ecx, edi
call dword [eax + 0x18]
test eax, eax
je 0x1000284e
mov esi, dword [esp + 0x2c]
add esi, 0xfffffff0
js 0x1000284e
xor eax, eax
xor ebx, ebx
cmp ax, word [esp + 0x78]
jae 0x1000265d
mov eax, dword [edi]
lea ecx, [esp + 0x38]
push 0
push 8
push ecx
mov ecx, edi
call dword [eax + 0x18]
test eax, eax
je 0x1000284e
sub esi, 8
js 0x1000284e
movzx eax, word [esp + 0x78]
inc ebx
cmp ebx, eax
jl 0x10002632
xor eax, eax
xor ebx, ebx
cmp ax, word [esp + 0x7a]
jae 0x1000284e
nop dword [eax]
mov eax, dword [edi]
lea ecx, [esp + 0x38]
push 0
push 8
push ecx
mov ecx, edi
call dword [eax + 0x18]
test eax, eax
je 0x1000284e
sub esi, 8
js 0x1000284e
cmp word [esp + 0x38], 0xa
je 0x100026b0
movzx eax, word [esp + 0x7a]
inc ebx
cmp ebx, eax
jl 0x10002670
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x24]
jmp 0x10002865
mov eax, dword [esp + 0x3c]
and eax, 0x7fffffff
je 0x1000284e
mov edx, dword [edi]
mov ecx, edi
add eax, dword [esp + 0x14]
push 0
push 0
push eax
call dword [edx + 0x20]
mov eax, dword [edi]
lea ecx, [esp + 0x7c]
push 0
push 0x10
push ecx
mov ecx, edi
call dword [eax + 0x18]
test eax, eax
je 0x1000284e
movzx ebx, word [esp + 0x88]
xor esi, esi
movzx eax, word [esp + 0x8a]
add ebx, eax
je 0x1000284e
mov eax, dword [edi]
lea ecx, [esp + 0x38]
push 0
push 8
push ecx
mov ecx, edi
call dword [eax + 0x18]
test eax, eax
je 0x1000284e
mov ecx, dword [esp + 0x3c]
test ecx, ecx
jns 0x1000284e
mov edx, dword [esp + 0x38]
test edx, edx
jns 0x100027b2
mov eax, dword [edi]
and edx, 0x7fffffff
add edx, dword [esp + 0x14]
mov ecx, edi
push 0
push 0
push edx
call dword [eax + 0x20]
mov eax, dword [edi]
lea ecx, [esp + 0x2c]
push 0
push 2
push ecx
mov ecx, edi
call dword [eax + 0x18]
test eax, eax
je 0x1000284e
mov eax, dword [esp + 0x2c]
mov ecx, 0x3f
cmp cx, ax
jae 0x10002773
mov eax, ecx
mov dword [esp + 0x2c], eax
mov edx, dword [edi]
mov ecx, edi
movzx eax, ax
add eax, eax
push 0
push eax
lea eax, [esp + 0x1f8]
push eax
call dword [edx + 0x18]
test eax, eax
je 0x1000284e
movzx eax, word [esp + 0x2c]
add eax, eax
cmp eax, 0x80
jae 0x1000287e
xor ecx, ecx
mov word [esp + eax + 0x1f0], cx
mov ecx, dword [esp + 0x3c]
mov eax, dword [edi]
and ecx, 0x7fffffff
add ecx, dword [esp + 0x14]
push 0
push 0
push ecx
mov ecx, edi
call dword [eax + 0x20]
mov eax, dword [edi]
lea ecx, [esp + 0xa0]
push 0
push 0x10
push ecx
mov ecx, edi
call dword [eax + 0x18]
test eax, eax
je 0x1000284e
cmp word [esp + 0xae], 0
jne 0x100027fd
inc esi
cmp esi, ebx
jl 0x10002701
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x24]
jmp 0x10002865
mov eax, dword [edi]
lea ecx, [esp + 0x2c]
push 0
push 8
push ecx
mov ecx, edi
call dword [eax + 0x18]
test eax, eax
je 0x1000284e
mov eax, dword [esp + 0x30]
mov ecx, edi
mov edx, dword [edi]
mov ebx, dword [esp + 0x14]
add eax, ebx
push 0
push 0
push eax
call dword [edx + 0x20]
mov eax, dword [edi]
lea ecx, [esp + 0xb0]
push 0
push 0x10
push ecx
mov ecx, edi
call dword [eax + 0x18]
test eax, eax
je 0x1000284e
mov ecx, dword [esp + 0xb0]
sub ecx, dword [esp + 0x28]
add ecx, ebx
mov dword [ebp + 4], ecx
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x24]
jmp 0x10002865
test ebp, ebp
je 0x10002860
mov byte [ebp], 1
or eax, 0xffffffff
or edx, eax
mov ecx, dword [esp + 0x274]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.10151433
add esp, 0x26c
ret
call fcn.10151c42
int3