Added detection for Fiesta encrypted payloads
Modified PE header checks to allow them to be deeper in the file