Function at 0x10004af0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x38
mov eax, dword [0x101e6040]
xor eax, esp
mov dword [esp + 0x34], eax
mov edx, dword [ebp + 0x10]
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, dword [ebp + 0xc]
cmp edi, 0x1e
jb 0x10004b67
cmp dword [esi], 0x4034b50
jne 0x10004b67
movzx ecx, word [esi + 8]
mov eax, ecx
cmp eax, 0x63
ja case.0x10004b2e.7
movzx eax, byte [eax + 0x10005a34]
jmp dword [eax*4 + 0x10005a2c]
cmp ecx, 0x16
jbe case.0x10004b2e.0
lea eax, [ecx - 0x5a]
cmp ax, 0xa
jbe case.0x10004b2e.0
mov ecx, dword [esi]
mov eax, ecx
mov edx, dword [esi]
mov dword [esp + 0x1c], ecx
shr eax, 0x18
shr ecx, 0x10
shr edx, 8
mov dword [esp + 0x18], edx
mov edx, dword [ebp + 0x10]
jmp 0x10004ba5
mov ecx, dword [esi]
mov eax, ecx
shr eax, 0x18
mov byte [esp + 0x14], al
mov eax, ecx
shr eax, 0x10
mov byte [esp + 0x10], al
mov eax, ecx
shr eax, 8
mov byte [esp + 0x18], al
mov byte [esp + 0x1c], cl
cmp ecx, 0x6054b50
jne 0x10004b9d
test edx, edx
jne 0x10004b9d
cmp edi, 0x16
je case.0x10004b2e.0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
cmp edi, 8
jle 0x10004c52
cmp byte [esp + 0x1c], 0x50
jne 0x10004c5b
cmp byte [esp + 0x18], 0x4b
jne 0x10004c5b
cmp cl, 7
jne 0x10004bf9
cmp al, 8
jne 0x10004c5b
cmp byte [esi + 4], 0x50
jne 0x10004c5b
cmp byte [esi + 5], 0x4b
jne 0x10004c5b
cmp byte [esi + 6], 3
jne 0x10004c5b
cmp byte [esi + 7], 4
jne 0x10004c5b
cmp byte [esi + 8], 0x80
jb case.0x10004b2e.0
jmp 0x10004c5b
cmp cl, 3
jne 0x10004c25
cmp al, cl
jne 0x10004c5b
cmp byte [esi + 4], 0x50
jne 0x10004c5b
cmp byte [esi + 5], 0x4b
jne 0x10004c5b
cmp byte [esi + 6], cl
jne 0x10004c5b
cmp byte [esi + 7], 4
jne 0x10004c5b
cmp byte [esi + 8], 0x80
jb case.0x10004b2e.0
jmp 0x10004c5b
cmp cl, 0x30
jne 0x10004c5b
cmp al, cl
jne 0x10004c5b
cmp byte [esi + 4], 0x50
jne 0x10004c5b
cmp byte [esi + 5], 0x4b
jne 0x10004c5b
cmp byte [esi + 6], 3
jne 0x10004c5b
cmp byte [esi + 7], 4
jne 0x10004c5b
cmp byte [esi + 8], 0x80
jb case.0x10004b2e.0
jmp 0x10004c5b
cmp edi, 7
jle 0x10004df0
cmp dword [ebp + 0x14], 0
jne 0x10004d7d
cmp byte [esp + 0x1c], 0x50
jne 0x10004d7d
cmp byte [esp + 0x18], 0x4b
jne 0x10004ca0
cmp cl, 7
jne 0x10004d2f
cmp al, 8
jne 0x10004ca0
cmp byte [esi + 4], 0x50
jne 0x10004ca0
cmp byte [esi + 5], 0x4b
jne 0x10004ca0
cmp byte [esi + 6], 3
jne 0x10004ca0
cmp byte [esi + 7], 4
je case.0x10004b2e.0
cmp edi, 0x20
jb 0x10004e5a
cmp byte [esp + 0x1c], 0x37
jne 0x10004e5a
cmp byte [esp + 0x18], 0x7a
jne 0x10004e5a
cmp cl, 0xbc
jne 0x10004e5a
cmp al, 0xaf
jne 0x10004e5a
cmp byte [esi + 4], 0x27
jne 0x10004e5a
cmp byte [esi + 5], 0x1c
jne 0x10004e5a
push 0x101eb0a8
push 0x14
lea edx, [esi + 0xc]
or ecx, 0xffffffff
call fcn.10108970
mov ecx, dword [esi + 8]
not eax
cmp eax, ecx
je 0x10004d17
test ecx, ecx
je 0x10004d17
cmp byte [esi + 6], 0
jne 0x10004e57
cmp byte [esi + 7], 3
jae 0x10004e57
mov eax, 0xa
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
cmp cl, 0x30
jne 0x10004ca0
cmp al, cl
jne 0x10004ca0
cmp byte [esi + 4], 0x50
jne 0x10004ca0
cmp byte [esi + 5], 0x4b
jne 0x10004ca0
cmp byte [esi + 6], 3
jne 0x10004ca0
cmp byte [esi + 7], 4
jne 0x10004ca0
xor eax, eax
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
cmp byte [esp + 0x1c], 0x41
jne 0x10004df9
cmp byte [esp + 0x18], 0x4c
jne 0x10004ca0
cmp cl, 0x5a
jne 0x10004ca0
cmp al, 1
jne 0x10004ca0
cmp byte [esi + 4], 0xa
jne 0x10004ca0
cmp byte [esi + 5], 0
jne 0x10004ca0
cmp byte [esi + 6], 0
jne 0x10004dd8
xor eax, eax
cmp byte [esi + 7], al
setne al
add eax, 3
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
mov eax, 4
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
cmp edi, 6
jle 0x10004ca0
cmp byte [esp + 0x1c], 0x52
jne 0x10004ca0
cmp byte [esp + 0x18], 0x61
jne 0x10004ca0
cmp cl, 0x72
jne 0x10004ca0
cmp al, 0x21
jne 0x10004ca0
cmp byte [esi + 4], 0x1a
jne 0x10004ca0
cmp byte [esi + 5], 7
jne 0x10004ca0
xor eax, eax
cmp byte [esi + 6], 1
sete al
lea eax, [eax*2 + 6]
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
mov edx, dword [ebp + 0x10]
cmp edi, 3
jle 0x10004e90
test edx, edx
jne 0x10004e90
cmp byte [esi], 0x48
jne 0x10004e90
cmp byte [esi + 1], 0x56
jne 0x10004e90
cmp byte [esi + 2], 0x33
jne 0x10004e90
cmp byte [esi + 3], 0x30
jne 0x10004e90
lea eax, [edx + 0x14]
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
cmp edi, 6
jle 0x10004ebe
test edx, edx
jne 0x10004ebe
cmp byte [esi + 2], 0x2d
jne 0x10004ebe
cmp byte [esi + 3], 0x6c
jne 0x10004f38
mov al, byte [esi + 4]
cmp al, 0x68
je 0x10004eb4
cmp al, 0x7a
jne 0x10004ebe
cmp byte [esi + 6], 0x2d
je 0x10004f65
cmp edi, 7
jle 0x10004f95
cmp byte [esi], 0x4d
jne 0x10004f9a
cmp byte [esi + 1], 0x53
jne 0x10004f9a
cmp byte [esi + 2], 0x43
jne 0x10004f9a
cmp byte [esi + 3], 0x46
jne 0x10004f9a
cmp byte [esi + 4], 0
jne 0x10004f9a
cmp byte [esi + 5], 0
jne 0x10004f9a
cmp byte [esi + 6], 0
jne 0x10004f9a
cmp byte [esi + 7], 0
jne 0x10004f9a
cmp edi, 0x1e
jle 0x10004f7d
movzx eax, byte [esi + 0x1e]
and eax, 1
or eax, 0xe
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
cmp byte [esi + 3], 0x70
jne 0x10004ebe
cmp byte [esi + 4], 0x6d
jne 0x10004ebe
mov al, byte [esi + 5]
cmp al, 0x30
je 0x10004f5b
cmp al, 0x32
je 0x10004f5b
cmp al, 0x31
jne 0x10004ebe
cmp byte [esi + 6], 0x2d
jne 0x10004ebe
mov eax, 5
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
mov eax, 0xe
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
cmp edi, 2
jle 0x10004fc5
test edx, edx
jne 0x10004fc5
cmp byte [esi], 0x1f
jne 0x10004fc5
cmp byte [esi + 1], 0x8b
jne 0x10004fc5
cmp byte [esi + 2], 8
jne 0x10004fc5
lea eax, [edx + 0x15]
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
cmp edi, 6
jle 0x10005033
test edx, edx
jne 0x1000503c
cmp byte [esi], 0x28
jne 0x1000507f
cmp byte [esi + 1], 0xb5
jne 0x1000507f
cmp byte [esi + 2], 0x2f
jne 0x1000507f
cmp byte [esi + 3], 0xfd
jne 0x1000507f
lea eax, [esp + 0x20]
mov dword [esp + 0x10], edx
push eax
lea eax, [esp + 0x14]
xorps xmm0, xmm0
push eax
mov edx, edi
movaps xmmword [esp + 0x28], xmm0
mov ecx, esi
call fcn.10013360
add esp, 8
test al, al
je 0x1000507c
mov eax, 0x31
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
cmp edi, 2
jle 0x1000503c
test edx, edx
je 0x1000507f
cmp edi, 5
jle 0x100050a8
cmp byte [esi], 0xfd
jne 0x100050a8
cmp byte [esi + 1], 0x37
jne 0x100050a8
cmp byte [esi + 2], 0x7a
jne 0x100050a8
cmp byte [esi + 3], 0x58
jne 0x100050a8
cmp byte [esi + 4], 0x5a
jne 0x100050a8
cmp byte [esi + 5], 0
jne 0x100050a8
mov eax, 0x1b
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
mov edx, dword [ebp + 0x10]
cmp byte [esi], 0x42
jne 0x1000503c
cmp byte [esi + 1], 0x5a
jne 0x1000503c
cmp byte [esi + 2], 0x68
jne 0x1000503c
mov eax, 0x16
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
cmp edi, 8
jl 0x10005103
push 8
push str.MSWIM
push esi
call fcn.1015d410
add esp, 0xc
test eax, eax
jne 0x10005151
cmp edi, 0xd0
jb 0x100050eb
mov eax, dword [esi + 0x10]
and eax, 2
or eax, 0x38
shr eax, 1
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
mov eax, 0x1c
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
cmp edi, 3
jg 0x10005154
cmp edi, 5
jl 0x100051b8
test edx, edx
jne 0x100051f4
cmp dword [ebp + 0x14], 1
jne 0x100051c5
cmp dword [esi], 0x78667321
jne 0x100051c5
cmp byte [esi + 4], 0x21
jne 0x100051c5
mov eax, 0x30
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
mov edx, dword [ebp + 0x10]
test edx, edx
jne 0x10005187
cmp byte [esi], 0x41
jne 0x10005187
cmp byte [esi + 1], 0x72
jne 0x10005187
cmp byte [esi + 2], 0x43
jne 0x10005187
cmp byte [esi + 3], 1
jne 0x10005187
mov eax, 0x109
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
cmp edi, 0xe
jl 0x10005108
test edx, edx
jne 0x100051f4
cmp dword [esi + 7], 0x43412a2a
jne 0x10005119
cmp word [esi + 0xb], 0x2a45
jne 0x10005119
cmp byte [esi + 0xd], 0x2a
je 0x10005139
jmp 0x10005119
cmp edi, 3
jle 0x1000525b
test edx, edx
jne 0x100051f4
cmp byte [esi], 0x42
jne 0x100051f4
cmp byte [esi + 1], 0x48
jne 0x100051f4
cmp byte [esi + 2], 5
jne 0x100051f4
cmp byte [esi + 3], 7
jne 0x100051f4
mov eax, 0x18
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
cmp edi, 5
jle 0x1000525b
cmp byte [esi], 0x45
jne 0x10005260
cmp byte [esi + 1], 0x47
jne 0x10005260
cmp byte [esi + 2], 0x47
jne 0x10005260
cmp byte [esi + 3], 0x41
jne 0x10005260
cmp byte [esi + 4], 0
jne 0x10005260
cmp byte [esi + 5], 1
jne 0x10005260
cmp dword [esi + 0xe], 0x24f5a262
jne 0x10005243
xor eax, eax
cmp dword [esi + 0x14], eax
setne al
add eax, 0x19
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
mov eax, 0x19
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
cmp edi, 2
jle 0x10005285
test edx, edx
jne 0x1000528e
cmp byte [esi], 0x1f
jne 0x1000528e
cmp byte [esi + 1], 0x9d
jne 0x1000528e
lea eax, [edx + 0x1e]
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
cmp edi, 1
jle 0x1000590c
cmp dword [ebp + 0x14], 0
je 0x100052a4
cmp edx, 0x10
jge 0x100052a4
cmp byte [esi], 0x60
jne 0x100052a4
cmp byte [esi + 1], 0xea
je 0x100052b3
test edx, edx
jne 0x100052cb
cmp byte [esi], 0x60
jne 0x100052cb
cmp byte [esi + 1], 0xea
jne 0x100052cb
mov eax, 0x1f
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
cmp edi, 3
jle 0x10005300
test edx, edx
jne 0x10005300
cmp byte [esi], 0x45
jne 0x10005300
cmp byte [esi + 1], 0x43
jne 0x10005300
cmp byte [esi + 2], 0x32
jne 0x10005300
cmp byte [esi + 3], dl
jne 0x10005300
lea eax, [edx + 0x21]
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
cmp edi, 0x17
jl 0x1000536f
test edx, edx
jne 0x1000536f
mov ecx, esi
mov dword [esp + 0x18], str.Rijndael_Encrypted_File
mov dword [esp + 0x10], 0x13
nop dword [eax + eax]
mov edi, dword [esp + 0x18]
mov eax, dword [ecx]
cmp eax, dword [edi]
mov edi, dword [ebp + 0xc]
jne 0x1000536f
add dword [esp + 0x18], 4
add ecx, 4
sub dword [esp + 0x10], 4
jae 0x10005320
mov edx, dword [esp + 0x18]
mov ax, word [ecx]
cmp ax, word [edx]
mov edx, dword [ebp + 0x10]
jne 0x1000536f
mov al, byte [ecx + 2]
mov ecx, dword [esp + 0x18]
cmp al, byte [ecx + 2]
jne 0x1000536f
mov eax, 0x104
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
cmp edi, 0x20
jl 0x100055ba
test edx, edx
jne 0x100055db
cmp byte [esi], 0x28
jne 0x100055c3
mov ecx, esi
mov dword [esp + 0x10], str._34380E57F8FBFCACBF6A15EC302EE1A
mov dword [esp + 0x14], 0x1c
nop dword [eax + eax]
mov edi, dword [esp + 0x10]
mov eax, dword [ecx]
cmp eax, dword [edi]
mov edi, dword [ebp + 0xc]
jne 0x100053d4
add dword [esp + 0x10], 4
add ecx, 4
sub dword [esp + 0x14], 4
jae 0x100053a0
mov eax, 0x105
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
mov ecx, esi
mov dword [esp + 0x10], str._C1C02118909B9BCF57C4CFB77372042
mov dword [esp + 0x14], 0x1c
mov edx, dword [esp + 0x10]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x10005417
add dword [esp + 0x10], 4
add ecx, 4
sub dword [esp + 0x14], 4
jae 0x100053e6
mov eax, 0x105
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
mov ecx, esi
mov dword [esp + 0x10], str._15285659087E77B3313C9119878E873
mov dword [esp + 0x14], 0x1c
nop dword [eax]
mov edx, dword [esp + 0x10]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x10005461
add dword [esp + 0x10], 4
add ecx, 4
sub dword [esp + 0x14], 4
jae 0x10005430
mov eax, 0x105
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
mov ecx, esi
mov dword [esp + 0x10], str._0F068CDD5E5C651D1470C095772CDE0
mov dword [esp + 0x14], 0x1c
mov edx, dword [esp + 0x10]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x100054a4
add dword [esp + 0x10], 4
add ecx, 4
sub dword [esp + 0x14], 4
jae 0x10005473
mov eax, 0x105
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
mov ecx, esi
mov dword [esp + 0x10], str._2853D1F1C7FBE524C961103EBC77CF9
mov dword [esp + 0x14], 0x1c
mov edx, dword [esp + 0x10]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x100054e7
add dword [esp + 0x10], 4
add ecx, 4
sub dword [esp + 0x14], 4
jae 0x100054b6
mov eax, 0x105
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
mov ecx, esi
mov dword [esp + 0x10], str._D30EE03CAC992A211C7DFC8D25C4BA5
mov dword [esp + 0x14], 0x1c
nop dword [eax]
mov edx, dword [esp + 0x10]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x10005531
add dword [esp + 0x10], 4
add ecx, 4
sub dword [esp + 0x14], 4
jae 0x10005500
mov eax, 0x105
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
mov ecx, esi
mov dword [esp + 0x10], str._2B69EA076BD364D53AD2617C3A0BF33
mov dword [esp + 0x14], 0x1c
mov edx, dword [esp + 0x10]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x10005574
add dword [esp + 0x10], 4
add ecx, 4
sub dword [esp + 0x14], 4
jae 0x10005543
mov eax, 0x105
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
mov ecx, esi
mov dword [esp + 0x10], str._3A70C13A7977E75260E88E3E85C851F
mov dword [esp + 0x14], 0x1c
mov edx, dword [esp + 0x10]
mov eax, dword [ecx]
cmp eax, dword [edx]
mov edx, dword [ebp + 0x10]
jne 0x100055c3
add dword [esp + 0x10], 4
add ecx, 4
sub dword [esp + 0x14], 4
jae 0x10005586
mov eax, 0x105
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
cmp edi, 3
jle 0x100055db
test edx, edx
jne 0x100055db
mov al, byte [esi]
cmp al, 0x52
jne 0x10005627
cmp byte [esi + 1], 0x5b
jne 0x100055db
cmp byte [esi + 2], 0x46
jne 0x100055db
cmp byte [esi + 3], 0x46
je 0x1000563d
cmp edi, 0x14
jl 0x10005655
lea ecx, [esi + 4]
mov dword [esp + 0x10], 0x1018d908
mov dword [esp + 0x14], 0xc
mov edx, dword [esp + 0x10]
mov eax, dword [ecx]
cmp eax, dword [edx]
mov edx, dword [ebp + 0x10]
jne 0x1000565e
add dword [esp + 0x10], 4
add ecx, 4
sub dword [esp + 0x14], 4
jae 0x100055f3
mov eax, 0x27
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
cmp al, 0x6a
jne 0x100055db
cmp byte [esi + 1], 0x47
jne 0x100055db
cmp byte [esi + 2], 0x21
jne 0x100055db
cmp byte [esi + 3], 0xe5
jne 0x100055db
mov eax, 0x26
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
cmp edi, 3
jle 0x100056e7
test edx, edx
jne 0x1000568f
cmp byte [esi], 0x49
jne 0x1000568f
cmp byte [esi + 1], 0x73
jne 0x1000568f
cmp byte [esi + 2], 0x5a
jne 0x1000568f
cmp byte [esi + 3], 0x21
jne 0x1000568f
lea eax, [edx + 0x28]
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
cmp edi, 0x4c
jle 0x100056e7
test edx, edx
jne 0x10005749
cmp byte [esi], 0x44
jne 0x100056f0
cmp byte [esi + 1], 0x41
jne 0x100057a0
cmp byte [esi + 2], 0x41
jne 0x100057a0
cmp byte [esi + 3], dl
jne 0x100057a0
cmp byte [esi + 0x1c], 1
jne 0x100057a0
cmp byte [esi + 0x1d], dl
jne 0x100057a0
lea eax, [edx + 0x33]
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
cmp edi, 0xf
jle 0x10005749
test edx, edx
jne 0x10005749
cmp byte [esi], 0x52
jne 0x10005749
cmp byte [esi + 1], 0x49
jne 0x10005749
cmp byte [esi + 2], 0x46
jne 0x10005749
cmp byte [esi + 3], 0x46
jne 0x10005749
cmp byte [esi + 8], 0x41
jne 0x10005749
cmp byte [esi + 9], 0x56
jne 0x10005749
cmp byte [esi + 0xa], 0x49
jne 0x10005749
cmp byte [esi + 0xc], 0x4c
jne 0x10005749
cmp byte [esi + 0xd], 0x49
jne 0x10005749
cmp byte [esi + 0xe], 0x53
jne 0x10005749
cmp byte [esi + 0xf], 0x54
jne 0x10005749
mov eax, 0x202
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
cmp edi, 0x10
jl 0x10005793
test edx, edx
jne 0x100057ce
cmp byte [esi], 0x1a
jne 0x100057a0
cmp byte [esi + 1], 0x45
jne 0x100057a0
cmp byte [esi + 2], 0xdf
jne 0x100057a0
cmp byte [esi + 3], 0xa3
jne 0x100057a0
cmp dword [esi + 8], 0x7274616d
jne 0x100057a0
cmp dword [esi + 0xc], 0x616b736f
jne 0x100057a0
mov eax, 0x209
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
cmp edi, 7
jl 0x10005820
test edx, edx
jne 0x100057ce
cmp dword [esi], 0x46445025
jne 0x100057ce
cmp word [esi + 4], 0x312d
jne 0x100057ce
cmp byte [esi + 6], 0x2e
jne 0x100057ce
mov eax, 0x20a
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
cmp edi, 7
jle 0x10005820
test edx, edx
jne 0x10005862
cmp byte [esi], 0xd0
jne 0x1000582d
cmp byte [esi + 1], 0xcf
jne 0x10005862
cmp byte [esi + 2], 0x11
jne 0x10005862
cmp byte [esi + 3], 0xe0
jne 0x10005862
cmp byte [esi + 4], 0xa1
jne 0x10005862
cmp byte [esi + 5], 0xb1
jne 0x10005862
cmp byte [esi + 6], 0x1a
jne 0x10005862
cmp byte [esi + 7], 0xe1
jne 0x10005862
lea eax, [edx + 0x2b]
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
cmp edi, 4
jle 0x100058f8
test edx, edx
jne 0x10005862
cmp byte [esi], 0x4c
jne 0x10005862
cmp byte [esi + 1], 0x5a
jne 0x10005862
cmp byte [esi + 2], 0x49
jne 0x10005862
cmp byte [esi + 3], 0x50
jne 0x10005862
cmp byte [esi + 4], 1
jne 0x10005862
mov eax, 0x2c
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
cmp edi, 0xc
jl 0x100058a5
test edx, edx
jne 0x100059e0
mov eax, dword [esi]
cmp eax, dword [0x101c6804]
jne 0x100058b2
mov eax, dword [esi + 4]
cmp eax, dword [0x101c6808]
jne 0x100058b2
mov eax, dword [esi + 8]
cmp eax, dword [0x101c680c]
jne 0x100058b2
lea eax, [edx + 0x29]
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
cmp edi, 4
jle 0x100058f8
test edx, edx
jne 0x100059e0
cmp byte [esi], 0x41
jne 0x10005902
cmp byte [esi + 1], 0x45
jne 0x10005902
cmp byte [esi + 2], 0x53
jne 0x10005902
mov al, byte [esi + 3]
test al, al
je 0x100058e0
cmp al, 1
jne 0x100058d6
cmp byte [esi + 4], 0
je 0x100058e0
jmp 0x10005902
cmp al, 2
jne 0x10005902
cmp byte [esi + 4], 0
jne 0x10005902
mov eax, 0x2a
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
jl 0x1000590c
test edx, edx
jne 0x100059e0
cmp dword [esi], 0x74536b37
je 0x10005931
jmp 0x10005919
test edx, edx
jne 0x100059e0
cmp edi, 3
jle 0x10005949
cmp word [esi], 0x507a
jne 0x10005949
cmp byte [esi + 2], 0x51
jne 0x10005949
mov al, byte [esi + 3]
cmp al, 1
je 0x10005931
cmp al, 2
jne 0x10005949
mov eax, 0x2e
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
cmp byte [esi], 0x78
jne 0x10005990
cmp byte [esi + 1], 0x61
jne 0x10005990
cmp byte [esi + 2], 0x72
jne 0x10005990
cmp byte [esi + 3], 0x21
jne 0x10005990
cmp byte [esi + 4], 0
jne 0x10005990
cmp byte [esi + 5], 0x1c
jne 0x10005990
cmp byte [esi + 6], 0
jne 0x10005990
cmp byte [esi + 7], 1
jne 0x10005990
mov eax, 0x10a
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
mov ecx, esi
mov dword [esp + 0x18], str.__arch__ndebian_binary
mov dword [esp + 0x10], 0x11
mov edx, dword [esp + 0x18]
mov eax, dword [ecx]
cmp eax, dword [edx]
mov edx, dword [ebp + 0x10]
jne 0x100059e0
add dword [esp + 0x18], 4
add ecx, 4
sub dword [esp + 0x10], 4
jae 0x100059a2
mov al, byte [ecx]
mov ecx, dword [esp + 0x18]
cmp al, byte [ecx]
jne 0x100059e0
mov eax, 0x10c
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
cmp edi, 0xa
jb 0x10005a14
test edx, edx
jne 0x10005a14
mov ecx, esi
call fcn.10003f70
test al, al
mov ecx, 0xff
mov edx, 0x36
cmovne ecx, edx
mov eax, ecx
pop edi
pop esi
mov ecx, dword [esp + 0x34]
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10
mov ecx, dword [esp + 0x3c]
mov eax, 0xff
pop edi
pop esi
xor ecx, esp
call fcn.10151433
mov esp, ebp
pop ebp
ret 0x10