Function at 0x100067d5
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1004d21d
mov eax, dword fs:[0]
push eax
sub esp, 0x20
push ebx
push esi
push edi
mov eax, dword [0x100611cc]
xor eax, esp
push eax
lea eax, [esp + 0x30]
mov dword fs:[0], eax
mov ebx, dword [ebp + 8]
xor edi, edi
push edi
push edi
add ebx, 0xc
push str.http:__ns.adobe.com_exif_1.0_
push ebx
call fcn.1001fabd
mov esi, eax
add esp, 0x10
cmp esi, edi
je 0x1000683c
push edi
push edi
push str.exif:GPSTimeStamp
push esi
call fcn.1001fc38
add esp, 0x10
cmp eax, edi
je 0x1000683c
push esi
mov ecx, eax
call fcn.100063b5
pop ecx
push edi
push edi
push str.http:__ns.adobe.com_xmp_1.0_DynamicMedia_
push ebx
call fcn.1001fabd
add esp, 0x10
cmp eax, edi
je 0x1000686f
push edi
push edi
push str.xmpDM:copyright
push eax
call fcn.1001fc38
add esp, 0x10
cmp eax, edi
je 0x1000686f
push dword [ebp + 8]
mov ecx, eax
call fcn.1000648e
pop ecx
push edi
push edi
mov esi, str.http:__purl.org_dc_elements_1.1_
push esi
push ebx
call fcn.1001fabd
add esp, 0x10
cmp eax, edi
je 0x1000689f
push edi
push edi
push str.dc:subject
push eax
call fcn.1001fc38
add esp, 0x10
cmp eax, edi
je 0x1000689f
and dword [eax + 4], 0xffffe3ff
push str.dc:description
push esi
push ebx
call fcn.10006653
add esp, 0xc
push str.dc:rights
push esi
push ebx
call fcn.10006653
add esp, 0xc
push str.dc:title
push esi
push ebx
call fcn.10006653
add esp, 0xc
push str.xmpRights:UsageTerms
push str.http:__ns.adobe.com_xap_1.0_rights_
push ebx
call fcn.10006653
add esp, 0xc
push str.exif:UserComment
push str.http:__ns.adobe.com_exif_1.0_
push ebx
call fcn.10006653
add esp, 0xc
cmp dword [ebx + 0x1c], edi
je 0x100069fa
lea esi, [ebx + 8]
cmp dword [esi + 0x18], 0x10
jb 0x10006909
mov eax, dword [esi + 4]
jmp 0x1000690c
lea eax, [esi + 4]
push 5
push str.uuid:
push eax
mov dword [esp + 0x20], eax
call fcn.1003629d
add esp, 0xc
test eax, eax
je 0x1000696f
mov eax, dword [ebx + 0x1c]
cmp eax, 0x24
jne 0x100069fa
xor ecx, ecx
mov eax, dword [esp + 0x14]
mov al, byte [ecx + eax]
cmp al, 0x2d
jne 0x10006957
cmp ecx, 8
je 0x10006969
cmp ecx, 0xd
je 0x10006969
cmp ecx, 0x12
je 0x10006969
cmp ecx, 0x17
jne 0x100069fa
jmp 0x10006969
cmp al, 0x30
jb 0x1000695f
cmp al, 0x39
jbe 0x10006969
sub al, 0x61
cmp al, 0x19
ja 0x100069fa
inc ecx
cmp ecx, 0x24
jl 0x10006932
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edi
push str.http:__ns.adobe.com_xap_1.0_mm_
lea edx, [esp + 0x20]
mov ecx, str.InstanceID
mov dword [esp + 0x3c], edi
call fcn.1001f5b0
pop ecx
push edi
push edi
push 1
lea eax, [esp + 0x28]
push eax
push ebx
call fcn.100200fa
mov ebx, eax
add esp, 0x14
cmp ebx, edi
jne 0x100069ca
push 9
pop eax
mov dword [esp + 0x14], eax
push 0x10058310
lea eax, [esp + 0x18]
mov ecx, str.Failure_creating_xmpMM:InstanceID
push eax
mov dword [esp + 0x20], ecx
call fcn.1003a718
push 0xffffffffffffffff
push edi
push esi
lea ecx, [ebx + 0x24]
mov dword [ebx + 4], edi
call fcn.100029ac
mov eax, ebx
call fcn.1000119a
mov eax, ebx
call fcn.100011dc
push 0xffffffffffffffff
push edi
mov ecx, esi
call fcn.10002485
lea esi, [esp + 0x1c]
call fcn.10002b10
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret