Function at 0x100045a0
Capabilities:
Parse pe header

Disassembly:
sub esp, 0x18
mov eax, dword [0x101ed004]
xor eax, esp
mov dword [esp + 0x14], eax
push ebx
push ebp
mov ebp, dword [esp + 0x2c]
push esi
mov esi, dword [esp + 0x28]
push edi
mov edi, dword [esp + 0x30]
cmp edi, 0x1e
jb 0x1000460d
cmp dword [esi], 0x4034b50
jne 0x1000460d
movzx ecx, word [esi + 8]
mov eax, ecx
cmp eax, 0x63
ja case.0x100045dd.7
movzx eax, byte [eax + 0x10005308]
jmp dword [eax*4 + 0x10005300]
cmp ecx, 0x16
jbe case.0x100045dd.0
lea eax, [ecx - 0x5a]
cmp ax, 0xa
jbe case.0x100045dd.0
mov eax, dword [esi]
mov edx, eax
mov ebx, eax
shr edx, 0x18
mov ecx, eax
shr ebx, 0x10
shr ecx, 8
jmp 0x1000463d
mov ecx, dword [esi]
mov eax, ecx
shr eax, 8
mov edx, ecx
mov ebx, ecx
shr edx, 0x18
shr ebx, 0x10
mov byte [esp + 0x10], al
mov al, cl
cmp ecx, 0x6054b50
jne 0x10004639
test ebp, ebp
jne 0x10004639
cmp edi, 0x16
je case.0x100045dd.0
mov ecx, dword [esp + 0x10]
cmp edi, 8
jle 0x10004727
cmp al, 0x50
jne 0x10004730
cmp cl, 0x4b
jne 0x10004730
cmp bl, 7
jne 0x100046ac
cmp dl, 8
jne 0x10004730
cmp byte [esi + 4], al
jne 0x10004730
cmp byte [esi + 5], cl
jne 0x10004730
cmp byte [esi + 6], 3
jne 0x10004730
cmp byte [esi + 7], 4
jne 0x10004730
cmp byte [esi + 8], 0x80
jae 0x10004730
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp bl, 3
jne 0x100046e9
cmp dl, bl
jne 0x10004730
cmp byte [esi + 4], 0x50
jne 0x10004730
cmp byte [esi + 5], 0x4b
jne 0x10004730
cmp byte [esi + 6], bl
jne 0x10004730
cmp byte [esi + 7], 4
jne 0x10004730
cmp byte [esi + 8], 0x80
jae 0x10004730
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp bl, 0x30
jne 0x10004730
cmp dl, bl
jne 0x10004730
cmp byte [esi + 4], 0x50
jne 0x10004730
cmp byte [esi + 5], 0x4b
jne 0x10004730
cmp byte [esi + 6], 3
jne 0x10004730
cmp byte [esi + 7], 4
jne 0x10004730
cmp byte [esi + 8], 0x80
jae 0x10004730
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp edi, 7
jle 0x10004811
cmp dword [esp + 0x38], 0
jne 0x1000479e
cmp al, 0x50
jne 0x1000479e
cmp cl, 0x4b
jne 0x1000485a
cmp bl, 7
jne 0x1000474e
cmp dl, 8
jmp 0x10004759
cmp bl, 0x30
jne 0x1000485a
cmp dl, bl
jne 0x1000485a
cmp byte [esi + 4], 0x50
jne 0x1000485a
cmp byte [esi + 5], 0x4b
jne 0x1000485a
cmp byte [esi + 6], 3
jne 0x1000485a
cmp byte [esi + 7], 4
jne 0x1000485a
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp al, 0x41
jne 0x10004816
cmp cl, 0x4c
jne 0x1000485a
cmp bl, 0x5a
jne 0x1000485a
cmp dl, 1
jne 0x1000485a
cmp byte [esi + 4], 0xa
jne 0x1000485a
cmp byte [esi + 5], 0
jne 0x1000485a
cmp byte [esi + 6], 0
jne 0x100047f7
cmp byte [esi + 7], 0
jne 0x100047f7
pop edi
pop esi
pop ebp
mov eax, 3
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
pop edi
pop esi
pop ebp
mov eax, 4
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp edi, 6
jle 0x1000485a
cmp al, 0x52
jne 0x1000485a
cmp cl, 0x61
jne 0x1000485a
cmp bl, 0x72
jne 0x1000485a
cmp dl, 0x21
jne 0x1000485a
cmp byte [esi + 4], 0x1a
jne 0x1000485a
cmp byte [esi + 5], 7
jne 0x1000485a
xor eax, eax
cmp byte [esi + 6], 1
pop edi
sete al
pop esi
pop ebp
pop ebx
lea eax, [eax*2 + 6]
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp edi, 0x20
jb 0x100048c3
cmp al, 0x37
jne 0x100048c3
cmp cl, 0x7a
jne 0x100048c3
cmp bl, 0xbc
jne 0x100048c3
cmp dl, 0xaf
jne 0x100048c3
cmp byte [esi + 4], 0x27
jne 0x100048c3
cmp byte [esi + 5], 0x1c
jne 0x100048c3
mov ebx, dword [esi + 8]
lea edx, [esi + 0xc]
push 0x101f1fd0
push 0x14
or ecx, 0xffffffff
call fcn.100d5f20
not eax
cmp eax, ebx
je 0x100048a9
test ebx, ebx
je 0x100048a9
cmp byte [esi + 6], 0
jne 0x100048c3
cmp byte [esi + 7], 3
jae 0x100048c3
pop edi
pop esi
pop ebp
mov eax, 0xa
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp edi, 3
jle 0x100048fb
test ebp, ebp
jne 0x100048fb
cmp byte [esi], 0x48
jne 0x100048fb
cmp byte [esi + 1], 0x56
jne 0x100048fb
cmp byte [esi + 2], 0x33
jne 0x100048fb
cmp byte [esi + 3], 0x30
jne 0x100048fb
pop edi
pop esi
lea eax, [ebp + 0x14]
pop ebp
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp edi, 6
jle 0x10004956
test ebp, ebp
jne 0x10004956
cmp byte [esi + 2], 0x2d
jne 0x10004956
cmp byte [esi + 3], 0x6c
jne 0x1000491b
mov al, byte [esi + 4]
cmp al, 0x68
je 0x10004936
cmp al, 0x7a
jmp 0x10004934
cmp byte [esi + 3], 0x70
jne 0x10004956
cmp byte [esi + 4], 0x6d
jne 0x10004956
mov al, byte [esi + 5]
cmp al, 0x30
je 0x10004936
cmp al, 0x32
je 0x10004936
cmp al, 0x31
jne 0x10004956
cmp byte [esi + 6], 0x2d
jne 0x10004956
pop edi
pop esi
pop ebp
mov eax, 5
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp edi, 7
jle 0x100049c9
cmp byte [esi], 0x4d
jne 0x100049ce
cmp byte [esi + 1], 0x53
jne 0x100049ce
cmp byte [esi + 2], 0x43
jne 0x100049ce
cmp byte [esi + 3], 0x46
jne 0x100049ce
cmp byte [esi + 4], 0
jne 0x100049ce
cmp byte [esi + 5], 0
jne 0x100049ce
cmp byte [esi + 6], 0
jne 0x100049ce
cmp byte [esi + 7], 0
jne 0x100049ce
cmp edi, 0x1e
jle 0x100049af
test byte [esi + 0x1e], 1
je 0x100049af
pop edi
pop esi
pop ebp
mov eax, 0xf
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
pop edi
pop esi
pop ebp
mov eax, 0xe
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp edi, 2
jle 0x100049fb
test ebp, ebp
jne 0x100049fb
cmp byte [esi], 0x1f
jne 0x100049fb
cmp byte [esi + 1], 0x8b
jne 0x100049fb
cmp byte [esi + 2], 8
jne 0x100049fb
pop edi
pop esi
lea eax, [ebp + 0x15]
pop ebp
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp edi, 6
jle 0x10004a5d
test ebp, ebp
jne 0x10004a91
cmp byte [esi], 0x28
jne 0x10004a66
cmp byte [esi + 1], 0xb5
jne 0x10004a66
cmp byte [esi + 2], 0x2f
jne 0x10004a66
cmp byte [esi + 3], 0xfd
jne 0x10004a66
lea eax, [esp + 0x14]
mov dword [esp + 0x10], ebp
push eax
lea eax, [esp + 0x14]
xorps xmm0, xmm0
push eax
mov edx, edi
mov ecx, esi
movups xmmword [esp + 0x1c], xmm0
call fcn.10016500
add esp, 8
test al, al
je 0x10004a66
pop edi
pop esi
lea eax, [ebp + 0x30]
pop ebp
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp edi, 2
jle 0x10004a91
test ebp, ebp
jne 0x10004a91
cmp byte [esi], 0x42
jne 0x10004a91
cmp byte [esi + 1], 0x5a
jne 0x10004a91
cmp byte [esi + 2], 0x68
jne 0x10004a91
pop edi
pop esi
pop ebp
mov eax, 0x16
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp edi, 5
jle 0x10004ad3
cmp byte [esi], 0xfd
jne 0x10004ad3
cmp byte [esi + 1], 0x37
jne 0x10004ad3
cmp byte [esi + 2], 0x7a
jne 0x10004ad3
cmp byte [esi + 3], 0x58
jne 0x10004ad3
cmp byte [esi + 4], 0x5a
jne 0x10004ad3
cmp byte [esi + 5], 0
jne 0x10004ad3
pop edi
pop esi
pop ebp
mov eax, 0x1b
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp edi, 8
jl 0x10004b2e
push 8
push str.MSWIM
push esi
call fcn.1014c3c0
add esp, 0xc
test eax, eax
jne 0x10004b33
cmp edi, 0xd0
jb 0x10004b14
test byte [esi + 0x10], 2
je 0x10004b14
pop edi
pop esi
pop ebp
mov eax, 0x1d
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
pop edi
pop esi
pop ebp
mov eax, 0x1c
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp edi, 3
jle 0x10004ba4
test ebp, ebp
jne 0x10004b68
cmp byte [esi], 0x41
jne 0x10004b68
cmp byte [esi + 1], 0x72
jne 0x10004b68
cmp byte [esi + 2], 0x43
jne 0x10004b68
cmp byte [esi + 3], 1
jne 0x10004b68
pop edi
pop esi
pop ebp
mov eax, 0x109
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp edi, 0xe
jl 0x10004ba4
test ebp, ebp
jne 0x10004c1a
cmp dword [esi + 7], 0x43412a2a
jne 0x10004bad
cmp word [esi + 0xb], 0x2a45
jne 0x10004bad
cmp byte [esi + 0xd], 0x2a
jne 0x10004bad
pop edi
pop esi
lea eax, [ebp + 0x2f]
pop ebp
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp edi, 5
jl 0x10004bdc
test ebp, ebp
jne 0x10004c1a
cmp dword [esp + 0x38], 1
jne 0x10004be9
cmp dword [esi], 0x78667321
jne 0x10004be9
cmp byte [esi + 4], 0x21
jne 0x10004be9
pop edi
pop esi
pop ebp
mov eax, 0x2f
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp edi, 3
jle 0x10004c85
test ebp, ebp
jne 0x10004c1a
cmp byte [esi], 0x42
jne 0x10004c1a
cmp byte [esi + 1], 0x48
jne 0x10004c1a
cmp byte [esi + 2], 5
jne 0x10004c1a
cmp byte [esi + 3], 7
jne 0x10004c1a
pop edi
pop esi
pop ebp
mov eax, 0x18
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp edi, 5
jle 0x10004c85
cmp byte [esi], 0x45
jne 0x10004c8a
cmp byte [esi + 1], 0x47
jne 0x10004c8a
cmp byte [esi + 2], 0x47
jne 0x10004c8a
cmp byte [esi + 3], 0x41
jne 0x10004c8a
cmp byte [esi + 4], 0
jne 0x10004c8a
cmp byte [esi + 5], 1
jne 0x10004c8a
cmp dword [esi + 0xe], 0x24f5a262
jne 0x10004c6b
cmp dword [esi + 0x14], 0
je 0x10004c6b
pop edi
pop esi
pop ebp
mov eax, 0x1a
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
pop edi
pop esi
pop ebp
mov eax, 0x19
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp edi, 2
jle 0x10004cb1
test ebp, ebp
jne 0x10004cba
cmp byte [esi], 0x1f
jne 0x10004cba
cmp byte [esi + 1], 0x9d
jne 0x10004cba
pop edi
pop esi
lea eax, [ebp + 0x1e]
pop ebp
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp edi, 1
jle 0x10005276
cmp dword [esp + 0x38], 0
je 0x10004cd1
cmp ebp, 0x10
jge 0x10004cd1
cmp byte [esi], 0x60
jne 0x10004cd1
cmp byte [esi + 1], 0xea
je 0x10004ce0
test ebp, ebp
jne 0x10004cfa
cmp byte [esi], 0x60
jne 0x10004cfa
cmp byte [esi + 1], 0xea
jne 0x10004cfa
pop edi
pop esi
pop ebp
mov eax, 0x1f
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp edi, 3
jle 0x10004d32
test ebp, ebp
jne 0x10004d32
cmp byte [esi], 0x45
jne 0x10004d32
cmp byte [esi + 1], 0x43
jne 0x10004d32
cmp byte [esi + 2], 0x32
jne 0x10004d32
cmp byte [esi + 3], 0
jne 0x10004d32
pop edi
pop esi
lea eax, [ebp + 0x21]
pop ebp
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp edi, 0x17
jl 0x10004d80
test ebp, ebp
jne 0x10004d80
mov ecx, esi
lea ebx, [ebp + 0x13]
mov edx, str.Rijndael_Encrypted_File
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x10004d80
add ecx, 4
add edx, 4
sub ebx, 4
jae 0x10004d45
mov ax, word [ecx]
cmp ax, word [edx]
jne 0x10004d80
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x10004d80
pop edi
pop esi
pop ebp
mov eax, 0x104
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp edi, 0x20
jl 0x10004f5b
test ebp, ebp
jne 0x10004f7c
cmp byte [esi], 0x28
jne 0x10004f64
mov ecx, esi
lea ebx, [ebp + 0x1c]
mov edx, str._34380E57F8FBFCACBF6A15EC302EE1A
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x10004dcf
add ecx, 4
add edx, 4
sub ebx, 4
jae 0x10004da4
pop edi
pop esi
pop ebp
mov eax, 0x105
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
mov ecx, esi
mov edx, str._C1C02118909B9BCF57C4CFB77372042
mov ebx, 0x1c
nop dword [eax + eax]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x10004e0b
add ecx, 4
add edx, 4
sub ebx, 4
jae 0x10004de0
pop edi
pop esi
pop ebp
mov eax, 0x105
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
mov ecx, esi
mov edx, str._15285659087E77B3313C9119878E873
mov ebx, 0x1c
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x10004e42
add ecx, 4
add edx, 4
sub ebx, 4
jae 0x10004e17
pop edi
pop esi
pop ebp
mov eax, 0x105
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
mov ecx, esi
mov edx, str._0F068CDD5E5C651D1470C095772CDE0
mov ebx, 0x1c
nop
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x10004e7b
add ecx, 4
add edx, 4
sub ebx, 4
jae 0x10004e50
pop edi
pop esi
pop ebp
mov eax, 0x105
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
mov ecx, esi
mov edx, str._2853D1F1C7FBE524C961103EBC77CF9
mov ebx, 0x1c
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x10004eb2
add ecx, 4
add edx, 4
sub ebx, 4
jae 0x10004e87
pop edi
pop esi
pop ebp
mov eax, 0x105
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
mov ecx, esi
mov edx, str._D30EE03CAC992A211C7DFC8D25C4BA5
mov ebx, 0x1c
nop
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x10004eeb
add ecx, 4
add edx, 4
sub ebx, 4
jae 0x10004ec0
pop edi
pop esi
pop ebp
mov eax, 0x105
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
mov ecx, esi
mov edx, str._2B69EA076BD364D53AD2617C3A0BF33
mov ebx, 0x1c
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x10004f22
add ecx, 4
add edx, 4
sub ebx, 4
jae 0x10004ef7
pop edi
pop esi
pop ebp
mov eax, 0x105
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
mov ecx, esi
mov edx, str._3A70C13A7977E75260E88E3E85C851F
mov ebx, 0x1c
nop
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x10004f64
add ecx, 4
add edx, 4
sub ebx, 4
jae 0x10004f30
pop edi
pop esi
pop ebp
mov eax, 0x105
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp edi, 3
jle 0x10004f7c
test ebp, ebp
jne 0x10004f7c
mov al, byte [esi]
cmp al, 0x52
jne 0x10004fbb
cmp byte [esi + 1], 0x5b
jne 0x10004f7c
cmp byte [esi + 2], 0x46
jne 0x10004f7c
cmp byte [esi + 3], 0x46
je 0x10004fd1
cmp edi, 0x14
jl 0x10004feb
lea ecx, [esi + 4]
mov edx, 0x1016c098
mov ebx, 0xc
nop
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x10004ff0
add ecx, 4
add edx, 4
sub ebx, 4
jae 0x10004f90
pop edi
pop esi
pop ebp
mov eax, 0x27
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp al, 0x6a
jne 0x10004f7c
cmp byte [esi + 1], 0x47
jne 0x10004f7c
cmp byte [esi + 2], 0x21
jne 0x10004f7c
cmp byte [esi + 3], 0xe5
jne 0x10004f7c
pop edi
pop esi
pop ebp
mov eax, 0x26
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp edi, 3
jle 0x10005023
test ebp, ebp
jne 0x10005023
cmp byte [esi], 0x49
jne 0x10005023
cmp byte [esi + 1], 0x73
jne 0x10005023
cmp byte [esi + 2], 0x5a
jne 0x10005023
cmp byte [esi + 3], 0x21
jne 0x10005023
pop edi
pop esi
lea eax, [ebp + 0x28]
pop ebp
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp edi, 0xf
jle 0x10005087
test ebp, ebp
jne 0x10005087
cmp byte [esi], 0x52
jne 0x10005087
cmp byte [esi + 1], 0x49
jne 0x10005087
cmp byte [esi + 2], 0x46
jne 0x10005087
cmp byte [esi + 3], 0x46
jne 0x10005087
cmp byte [esi + 8], 0x41
jne 0x10005087
cmp byte [esi + 9], 0x56
jne 0x10005087
cmp byte [esi + 0xa], 0x49
jne 0x10005087
cmp byte [esi + 0xc], 0x4c
jne 0x10005087
cmp byte [esi + 0xd], 0x49
jne 0x10005087
cmp byte [esi + 0xe], 0x53
jne 0x10005087
cmp byte [esi + 0xf], 0x54
jne 0x10005087
pop edi
pop esi
pop ebp
mov eax, 0x202
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp edi, 0x10
jl 0x100050d7
test ebp, ebp
jne 0x10005114
cmp byte [esi], 0x1a
jne 0x100050e4
cmp byte [esi + 1], 0x45
jne 0x100050e4
cmp byte [esi + 2], 0xdf
jne 0x100050e4
cmp byte [esi + 3], 0xa3
jne 0x100050e4
cmp dword [esi + 8], 0x7274616d
jne 0x100050e4
cmp dword [esi + 0xc], 0x616b736f
jne 0x100050e4
pop edi
pop esi
pop ebp
mov eax, 0x209
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp edi, 7
jl 0x1000516c
test ebp, ebp
jne 0x10005114
cmp dword [esi], 0x46445025
jne 0x10005114
cmp word [esi + 4], 0x312d
jne 0x10005114
cmp byte [esi + 6], 0x2e
jne 0x10005114
pop edi
pop esi
pop ebp
mov eax, 0x20a
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp edi, 7
jle 0x1000516c
test ebp, ebp
jne 0x100051b0
cmp byte [esi], 0xd0
jne 0x10005179
cmp byte [esi + 1], 0xcf
jne 0x100051b0
cmp byte [esi + 2], 0x11
jne 0x100051b0
cmp byte [esi + 3], 0xe0
jne 0x100051b0
cmp byte [esi + 4], 0xa1
jne 0x100051b0
cmp byte [esi + 5], 0xb1
jne 0x100051b0
cmp byte [esi + 6], 0x1a
jne 0x100051b0
cmp byte [esi + 7], 0xe1
jne 0x100051b0
pop edi
pop esi
lea eax, [ebp + 0x2b]
pop ebp
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp edi, 4
jle 0x1000524a
test ebp, ebp
jne 0x100051b0
cmp byte [esi], 0x4c
jne 0x100051b0
cmp byte [esi + 1], 0x5a
jne 0x100051b0
cmp byte [esi + 2], 0x49
jne 0x100051b0
cmp byte [esi + 3], 0x50
jne 0x100051b0
cmp byte [esi + 4], 1
jne 0x100051b0
pop edi
pop esi
pop ebp
mov eax, 0x2c
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp edi, 0xc
jl 0x100051f5
test ebp, ebp
jne 0x100052e5
mov eax, dword [esi]
cmp eax, dword [0x101d1ca0]
jne 0x10005202
mov eax, dword [esi + 4]
cmp eax, dword [0x101d1ca4]
jne 0x10005202
mov eax, dword [esi + 8]
cmp eax, dword [0x101d1ca8]
jne 0x10005202
pop edi
pop esi
lea eax, [ebp + 0x29]
pop ebp
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp edi, 4
jle 0x1000524a
test ebp, ebp
jne 0x100052e5
cmp byte [esi], 0x41
jne 0x10005254
cmp byte [esi + 1], 0x45
jne 0x10005254
cmp byte [esi + 2], 0x53
jne 0x10005254
mov al, byte [esi + 3]
test al, al
je 0x10005230
cmp al, 1
jne 0x10005226
cmp byte [esi + 4], 0
je 0x10005230
jmp 0x10005254
cmp al, 2
jne 0x10005254
cmp byte [esi + 4], 0
jne 0x10005254
pop edi
pop esi
pop ebp
mov eax, 0x2a
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
jl 0x10005276
test ebp, ebp
jne 0x100052e5
cmp dword [esi], 0x74536b37
jne 0x1000527f
pop edi
pop esi
pop ebp
mov eax, 0x2e
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
test ebp, ebp
jne 0x100052e5
cmp edi, 3
jle 0x100052b1
cmp word [esi], 0x507a
jne 0x100052b1
cmp byte [esi + 2], 0x51
jne 0x100052b1
mov al, byte [esi + 3]
cmp al, 1
je 0x10005297
cmp al, 2
jne 0x100052b1
pop edi
pop esi
pop ebp
mov eax, 0x2e
pop ebx
mov ecx, dword [esp + 0x14]
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10
cmp byte [esi], 0x78
jne 0x100052e5
cmp byte [esi + 1], 0x61
jne 0x100052e5
cmp byte [esi + 2], 0x72
jne 0x100052e5
cmp byte [esi + 3], 0x21
jne 0x100052e5
cmp byte [esi + 4], 0
jne 0x100052e5
cmp byte [esi + 5], 0x1c
jne 0x100052e5
cmp byte [esi + 6], 0
jne 0x100052e5
cmp byte [esi + 7], 1
mov eax, 0x10a
je 0x100052ea
mov eax, 0xff
mov ecx, dword [esp + 0x24]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.10142783
add esp, 0x18
ret 0x10