Function at 0x4e9ade
Capabilities:
Contain obfuscated stackstrings
Encrypt data using speck
Read file on windows
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [eax + 4]
cmp edx, 0x2000
ja 0x4e541b
jmp fcn.004f526c
push ebp
mov ebp, esp
sub esp, 0x18
mov dword [esp + 0xc], edx
mov dword [esp + 8], str.Invalid_PID__d
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
call fcn.004d2fb7
leave
ret
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x10c
test eax, eax
je 0x4ec75a
mov ebx, eax
cmp dword [eax], 0
jne 0x4e9b06
cmp dword [eax + 0x10], 0x100000
jne 0x4ec75a
mov edx, dword [ebx + 8]
mov eax, dword [ebx + 0x3c]
mov dword [ebp - 0xc0], eax
test edx, edx
jne 0x4e9b1f
test eax, eax
jne 0x4e9b28
jmp 0x4ec75a
cmp dword [ebp - 0xc0], 0
je 0x4e9b39
mov eax, ebx
add esp, 0x10c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.004d676c
mov esi, dword [ebx + 0x38]
test esi, esi
jne 0x4e9b67
mov dword [esp + 4], 0x2e
mov dword [esp], edx
mov dword [ebp - 0xa0], edx
call sub.api_ms_win_crt_private_l1_1_0.dll_strrchr
mov esi, eax
test eax, eax
mov edx, dword [ebp - 0xa0]
jne 0x4e9b67
mov esi, 0x5f1f13
mov edi, dword [ebx + 0x2c]
test edi, edi
jne 0x4e9b73
mov edi, 0x5f1f13
mov eax, edx
call fcn.0049b412
test eax, eax
je 0x4e9baf
mov eax, dword [ebx + 8]
xor ecx, ecx
mov edx, 1
call fcn.0049fce5
mov dword [ebx + 0x3c], eax
test eax, eax
je 0x4e9baf
mov eax, ebx
call fcn.004d676c
mov esi, eax
mov eax, dword [ebx + 0x3c]
call fcn.0049ae7d
xor ecx, ecx
mov dword [ebx + 0x3c], ecx
jmp 0x4ec786
mov dword [esp + 8], 4
mov dword [esp + 4], 0x5f2c88
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
jne 0x4e9bde
mov eax, ebx
call fcn.004d5680
mov esi, eax
test eax, eax
jne 0x4ec786
jmp 0x4e9bf4
mov dword [esp + 4], 0x5f2c8d
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4e9bcb
jmp 0x4e9c0f
cmp dword [ebx + 4], 1
je 0x4ec1cc
mov eax, ebx
add esp, 0x10c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.004f09de
mov dword [esp + 8], 4
mov dword [esp + 4], 0x5f2c91
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
jne 0x4e9c4d
mov eax, ebx
call fcn.004e352c
mov esi, eax
test eax, eax
jne 0x4ec786
mov eax, ebx
add esp, 0x10c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.004e3fd9
mov dword [esp + 4], 0x5f2c96
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4e9c2b
mov dword [esp + 8], 4
mov dword [esp + 4], str..mpg
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
jne 0x4e9c9f
mov eax, ebx
call fcn.004d794a
mov esi, eax
test eax, eax
jne 0x4ec786
mov eax, ebx
add esp, 0x10c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.004d814f
mov dword [esp + 8], 5
mov dword [esp + 4], str..mpeg
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4e9c7d
mov dword [esp + 8], 4
mov dword [esp + 4], str..vob
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4e9c7d
mov dword [esp + 8], 4
mov dword [esp + 4], str..vcd
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4e9c7d
mov dword [esp + 8], 5
mov dword [esp + 4], str..svcd
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4e9c7d
mov dword [esp + 4], str.MPEG1
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4e9c7d
mov dword [esp + 4], str.MPEG_PS
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4e9c7d
mov dword [esp + 4], str.MPEG2_PS
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4e9c7d
mov dword [esp + 8], 3
mov dword [esp + 4], 0x5f2ccc
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4ec727
mov dword [esp + 8], 4
mov dword [esp + 4], 0x5f2cd0
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4ec727
mov dword [esp + 8], 4
mov dword [esp + 4], str..trp
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4ec727
mov dword [esp + 8], 4
mov dword [esp + 4], str..mts
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4ec727
mov dword [esp + 4], str.MPEGTS
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4ec727
mov dword [esp + 4], str.MPEG_TS
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4ec727
mov dword [esp + 4], str.MPGTS
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4ec727
mov dword [esp + 4], str.MPG_TS
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4ec727
mov dword [esp + 4], str.MPEG2TS
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4ec727
mov dword [esp + 4], str.MPEG2_TS
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4ec727
mov dword [esp + 4], str.MPG2TS
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4ec727
mov dword [esp + 4], str.MPG2_TS
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4ec727
mov dword [esp + 8], 4
mov dword [esp + 4], str..mp2
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
jne 0x4e9ec8
mov eax, ebx
add esp, 0x10c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.004d330a
mov dword [esp + 8], 4
mov dword [esp + 4], 0x5f2d20
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4e9eb7
mov dword [esp + 8], 4
mov dword [esp + 4], str..m1a
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4e9eb7
mov dword [esp + 8], 4
mov dword [esp + 4], str..m2a
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4e9eb7
mov dword [esp + 4], 0x5f2d2f
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4e9eb7
mov dword [esp + 4], str.MPEG_AUDIO
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4e9eb7
mov dword [esp + 8], 4
mov dword [esp + 4], 0x5f2d3e
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
jne 0x4e9f75
mov eax, ebx
add esp, 0x10c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.004d3aab
mov dword [esp + 4], 0x5f2d43
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4e9f64
mov dword [esp + 4], str.MPEG4_AUDIO
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4e9f64
mov dword [esp + 8], 4
mov dword [esp + 4], 0x5f2d53
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
jne 0x4e9fbd
xor edx, edx
jmp 0x4ea022
mov dword [esp + 8], 4
mov dword [esp + 4], str..m4v
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4e9fb9
mov dword [esp + 4], 0x5f2d5d
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4e9fb9
mov dword [esp + 4], str.MPEG4_Video
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4e9fb9
mov dword [esp + 8], 4
mov dword [esp + 4], 0x5f2d6d
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
jne 0x4ea033
mov edx, 2
mov eax, ebx
add esp, 0x10c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.004d49f0
mov dword [esp + 8], 4
mov dword [esp + 4], 0x5f2d72
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4ea01d
mov dword [esp + 4], str.MPEG2_Video
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4ea01d
mov dword [esp + 4], str.MPEG1_Video
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4ea01d
mov dword [esp + 8], 4
mov dword [esp + 4], 0x5f2d8f
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
jne 0x4ea0be
mov eax, dword [ebx + 8]
mov edx, 0x5f1e38
call fcn.00427968
mov dword [ebp - 0xb8], eax
test eax, eax
jne 0x4ea0f3
mov eax, dword [ebx + 8]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x5f2d9f
jmp 0x4ec1f5
mov dword [esp + 8], 5
mov dword [esp + 4], str..h263
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4ea093
mov dword [esp + 4], str.H263
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4ea093
jmp 0x4ea70f
xor edx, edx
mov eax, dword [ebp - 0xb8]
call fcn.0042600f
mov dword [ebp - 0xa0], eax
xor edx, edx
mov dword [esp], edx
mov dword [esp + 4], edx
mov edx, 0x16
call fcn.004273b3
cmp eax, 0x20
je 0x4ea133
mov dword [esp + 8], str.Cannot_find_H263_Picture_Start_Code
mov dword [esp + 4], 0xfffffff6
jmp 0x4ea21b
movsd xmm1, qword [ebx + 0x20]
movsd qword [ebp - 0xc8], xmm1
ucomisd xmm1, qword [0x5f33e0]
jp 0x4ea16c
jne 0x4ea16c
xor edi, edi
mov dword [ebx + 0x20], edi
mov dword [ebx + 0x24], 0x40390000
xor eax, eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], 0x40390000
jmp 0x4ea18f
xorps xmm0, xmm0
movsd xmm3, qword [ebp - 0xc8]
ucomisd xmm3, xmm0
jp 0x4ea18f
jne 0x4ea18f
movsd xmm4, qword [0x5f33d8]
movsd qword [ebp - 0xc8], xmm4
lea edx, [ebp - 0x88]
lea eax, [ebp - 0x8c]
movsd xmm0, qword [ebp - 0xc8]
call fcn.004d328f
mov edx, 0x16
mov eax, dword [ebp - 0xa0]
call fcn.00427195
mov edx, 8
mov eax, dword [ebp - 0xa0]
call fcn.00427195
mov edx, 5
mov eax, dword [ebp - 0xa0]
call fcn.00427195
mov edx, 3
mov eax, dword [ebp - 0xa0]
call fcn.00427195
dec eax
cmp eax, 4
ja case.default.0x4ea1ee
jmp dword [eax*4 + 0x5f30cc]
mov dword [ebp - 0xb4], 0x480
mov dword [ebp - 0xb0], 0x581
jmp 0x4ea27e
mov dword [esp + 8], str.Unsupported_H263_frame_header
mov dword [esp + 4], 0xfffffffc
mov dword [esp], ebx
call fcn.004d2fb7
jmp 0x4ea31a
mov dword [ebp - 0xb4], 0x120
mov dword [ebp - 0xb0], 0x160
jmp 0x4ea27e
mov dword [ebp - 0xb4], 0x90
mov dword [ebp - 0xb0], 0xb0
jmp 0x4ea27e
mov dword [ebp - 0xb4], 0x60
mov dword [ebp - 0xb0], pe_nt_image_headers32
jmp 0x4ea27e
mov dword [ebp - 0xb4], 0x240
mov dword [ebp - 0xb0], 0x2c0
mov eax, dword [ebx + 0x10]
and eax, 0x100000
mov dword [ebp - 0xd4], eax
je 0x4ea2c7
mov dword [ebx + 0x68], 1
mov dword [ebx + 0x70], 1
mov dword [ebx + 0x74], 0x76696465
mov dword [ebx + 0x7c], 0x400001
mov eax, dword [ebp - 0xb0]
mov dword [ebx + 0x80], eax
mov eax, dword [ebp - 0xb4]
mov dword [ebx + 0x84], eax
jmp 0x4ea6f7
mov esi, dword [ebx + 0x28]
xor edi, edi
test esi, esi
je 0x4ea2e7
movzx edi, word [esi + 2]
cmp dword [esi + 0x14], 0
jne 0x4ea2e7
mov eax, 6
call fcn.004b21c0
mov dword [esi + 0x14], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0xd0], eax
mov dword [esp], eax
mov ecx, 0x76696465
mov edx, edi
mov eax, dword [ebx]
call fcn.004a0bad
mov dword [ebp - 0xa8], eax
mov eax, dword [ebx]
cmp dword [ebp - 0xa8], 0
jne 0x4ea321
call fcn.0049b37e
mov esi, eax
jmp 0x4ea6f9
mov ecx, 1
mov edx, dword [ebp - 0xa8]
call fcn.004a05bd
mov eax, dword [ebx + 0x28]
mov ecx, dword [ebx]
test eax, eax
je 0x4ea355
cmp word [eax + 2], 0
jne 0x4ea355
mov edx, dword [ebp - 0xa8]
mov eax, ecx
call fcn.0049c0c2
mov edx, dword [ebx + 0x28]
mov word [edx + 2], ax
mov edx, dword [ebp - 0xa8]
mov eax, dword [ebx]
call fcn.0049c0c2
mov dword [ebx + 0x34], eax
lea edx, [ebp - 0x78]
mov ecx, 2
xor eax, eax
mov edi, edx
rep stosd dword es:[edi], eax
mov dword [ebp - 0x80], 0x73323633
mov dword [ebp - 0x7c], 0x47504143
mov byte [ebp - 0x76], 0xa
test byte [ebx + 0x10], 1
je 0x4ea394
mov eax, dword [ebx + 8]
mov dword [ebp - 0xc0], eax
lea ecx, [ebp - 0x80]
lea eax, [ebp - 0x90]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xc0]
mov dword [esp], eax
mov edx, dword [ebp - 0xa8]
mov eax, dword [ebx]
call fcn.00578e92
mov esi, eax
test eax, eax
jne 0x4ea6f9
mov eax, dword [ebp - 0xb4]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xb0]
mov dword [esp], eax
mov ecx, dword [ebp - 0x90]
mov edx, dword [ebp - 0xa8]
mov eax, dword [ebx]
call fcn.00597724
movsd xmm5, qword [ebp - 0xc8]
movsd qword [esp + 0x14], xmm5
mov eax, dword [ebp - 0xb4]
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0xb0]
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.Importing_H263_video____d_x__d____02.4f
xor esi, esi
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.004d2fb7
call fcn.0049b3af
mov edi, eax
mov dword [ebp - 0x84], eax
mov eax, dword [ebx + 0xc]
add eax, 0x80000000
mov dword [ebp - 0xb0], eax
fild dword [ebp - 0xb0]
fadd qword [0x5f33b8]
mov eax, dword [ebp - 0xd0]
add eax, 0x80000000
mov dword [ebp - 0xb0], eax
fild dword [ebp - 0xb0]
fadd qword [0x5f33b8]
fmul qword [0x5f33c0]
fmulp st(1)
fld qword [0x5f33c8]
fxch st(1)
fcomi st(1)
fstp st(1)
jae 0x4ea4a4
fnstcw word [ebp - 0x9a]
mov ax, word [ebp - 0x9a]
or ah, 0xc
mov word [ebp - 0x9c], ax
fldcw word [ebp - 0x9c]
fistp qword [ebp - 0xb0]
fldcw word [ebp - 0x9a]
jmp 0x4ea4dd
fsub qword [0x5f33c8]
fnstcw word [ebp - 0x9a]
mov ax, word [ebp - 0x9a]
or ah, 0xc
mov word [ebp - 0x9c], ax
fldcw word [ebp - 0x9c]
fistp qword [ebp - 0xb0]
fldcw word [ebp - 0x9a]
add dword [ebp - 0xac], 0x80000000
mov eax, dword [ebp - 0xa0]
call fcn.004265b5
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], edx
mov dword [esp], 0x1000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov dword [ebp - 0xb4], eax
xor edx, edx
xor ecx, ecx
mov eax, dword [ebp - 0xa0]
call fcn.004272a7
xor ecx, ecx
mov dword [ebp - 0xd0], ecx
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0xc8], ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xc0], 0x1000
mov eax, dword [ebp - 0xa0]
call fcn.00426462
test edx, edx
je 0x4ea697
mov eax, dword [ebp - 0xa0]
call fcn.004dcbc0
mov esi, eax
mov dword [edi], eax
cmp dword [ebp - 0xc0], eax
jae 0x4ea581
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xb4]
mov dword [esp], eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xc0], esi
mov ecx, dword [edi]
mov edx, dword [ebp - 0xb4]
mov eax, dword [ebp - 0xa0]
call fcn.0042755d
mov eax, dword [ebp - 0xb4]
mov al, byte [eax + 4]
mov byte [ebp - 0xe8], al
shr al, 1
and eax, 1
xor eax, 1
mov dword [edi + 0x14], eax
mov eax, dword [ebp - 0xb4]
mov dword [edi + 4], eax
mov ecx, dword [ebp - 0x90]
mov esi, dword [ebx]
test byte [ebx + 0x10], 1
je 0x4ea5eb
mov eax, dword [ebp - 0xc8]
mov edx, dword [ebp - 0xc4]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp], edi
mov edx, dword [ebp - 0xa8]
mov eax, esi
call fcn.004a712d
jmp 0x4ea5fb
mov dword [esp], edi
mov edx, dword [ebp - 0xa8]
mov eax, esi
call fcn.004a7935
mov esi, eax
test eax, eax
jne 0x4ea6f9
xor edx, edx
mov dword [edi + 4], edx
mov eax, dword [ebp - 0x88]
xor edx, edx
add dword [edi + 8], eax
adc dword [edi + 0xc], edx
inc dword [ebp - 0xd4]
mov eax, dword [edi]
add dword [ebp - 0xc8], eax
adc dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0xe0]
mov edx, dword [ebp - 0xdc]
mov dword [esp], eax
mov dword [esp + 4], edx
mov edx, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0xcc]
mov eax, str.Importing_H263
call fcn.004266f7
mov eax, dword [edi]
add dword [ebp - 0xd0], eax
adc dword [ebp - 0xcc], 0
cmp dword [ebp - 0xac], 0
jne 0x4ea677
cmp dword [ebp - 0xb0], 0
je 0x4ea68b
mov eax, dword [ebp - 0xb0]
cmp eax, dword [edi + 8]
mov eax, dword [ebp - 0xac]
sbb eax, dword [edi + 0xc]
jb 0x4ea69f
cmp dword [ebx + 0x10], 0
jns 0x4ea539
jmp 0x4ea69f
test eax, eax
jne 0x4ea54c
mov eax, dword [ebp - 0xb4]
mov dword [esp], eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
lea eax, [ebp - 0x84]
call fcn.0049b3db
mov eax, dword [ebp - 0xd4]
xor edx, edx
mov dword [esp], eax
mov dword [esp + 4], edx
mov ecx, edx
mov edx, eax
mov eax, str.Importing_H263
call fcn.004266f7
mov ecx, 1
mov edx, 0x33676736
mov eax, dword [ebx]
call fcn.004a2518
mov ecx, 1
mov edx, 0x33676735
mov eax, dword [ebx]
call fcn.004a2518
xor esi, esi
mov eax, dword [ebp - 0xa0]
call fcn.004260fd
mov eax, dword [ebp - 0xb8]
jmp 0x4eba29
mov dword [esp + 8], 5
mov dword [esp + 4], 0x5f2e2c
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
jne 0x4ea73c
mov eax, ebx
add esp, 0x10c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.004dcd06
mov dword [esp + 8], 4
mov dword [esp + 4], 0x5f2e32
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4ea72b
mov dword [esp + 8], 5
mov dword [esp + 4], str..x264
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4ea72b
mov dword [esp + 8], 5
mov dword [esp + 4], str..h26L
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4ea72b
mov dword [esp + 8], 4
mov dword [esp + 4], str..26l
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4ea72b
mov dword [esp + 4], 0x5f2e48
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4ea72b
mov dword [esp + 4], 0x5f2e4c
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4ea72b
mov dword [esp + 8], 5
mov dword [esp + 4], str..hevc
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
jne 0x4ea80d
mov eax, ebx
add esp, 0x10c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.004dfd00
mov dword [esp + 8], 4
mov dword [esp + 4], 0x5f2e57
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4ea7fc
mov dword [esp + 8], 4
mov dword [esp + 4], str..265
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4ea7fc
mov dword [esp + 8], 5
mov dword [esp + 4], str..h265
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4ea7fc
mov dword [esp + 8], 5
mov dword [esp + 4], str..shvc
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4ea7fc
mov dword [esp + 8], 5
mov dword [esp + 4], str..lhvc
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4ea7fc
mov dword [esp + 8], 5
mov dword [esp + 4], str..mhvc
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4ea7fc
mov dword [esp + 4], str.HEVC
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4ea7fc
mov dword [esp + 4], str.SHVC
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4ea7fc
mov dword [esp + 4], str.MHVC
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4ea7fc
mov dword [esp + 4], str.LHVC
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4ea7fc
mov dword [esp + 4], 0x5f2e8d
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4ea7fc
mov dword [esp + 8], 4
mov dword [esp + 4], 0x5f2e92
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
jne 0x4ea959
xor edx, edx
jmp 0x4ea98e
mov dword [esp + 4], 0x5f2e97
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4ea955
mov dword [esp + 8], 4
mov dword [esp + 4], 0x5f2e9b
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
jne 0x4ea99f
mov edx, 1
mov eax, ebx
add esp, 0x10c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.004e6516
mov dword [esp + 4], 0x5f2ea0
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4ea989
mov dword [esp + 4], str.E_AC3
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4ea989
mov dword [esp + 4], str.EAC3
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4ea989
mov dword [esp + 8], 5
mov dword [esp + 4], 0x5f2eaf
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
jne 0x4eaa1c
test byte [ebx + 0x12], 0x10
je 0x4eaa6a
mov dword [ebx + 0x68], 1
mov dword [ebx + 0x70], 1
xor eax, eax
mov dword [ebx + 0x74], eax
mov dword [ebx + 0x7c], 1
jmp 0x4ec1cc
mov dword [esp + 8], 5
mov dword [esp + 4], 0x5f2eb6
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4ea9f7
mov dword [esp + 8], 5
mov dword [esp + 4], 0x5f2ebc
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4ea9f7
mov dword [esp + 4], str.NHNT
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4ea9f7
jmp 0x4eaa7b
mov eax, ebx
add esp, 0x10c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.004f0f4a
mov dword [esp + 8], 5
mov dword [esp + 4], str..nhml
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4ec6e0
mov dword [esp + 4], str.NHML
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4ec6e0
mov dword [esp + 8], 4
mov dword [esp + 4], 0x5f2ed2
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
jne 0x4eaaf7
mov dword [ebp - 0xb8], 1
test byte [ebx + 0x10], 0x20
jne 0x4eab98
xor eax, eax
cmp dword [ebx + 0x28], 0
setne al
mov dword [ebp - 0xb8], eax
jmp 0x4eab98
mov dword [esp + 8], 5
mov dword [esp + 4], 0x5f2ed7
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4eaacf
mov dword [esp + 8], 4
mov dword [esp + 4], 0x5f2edd
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4eaacf
mov dword [esp + 8], 4
mov dword [esp + 4], 0x5f2ee2
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4eaacf
mov dword [esp + 4], 0x5f2c30
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4eaacf
mov dword [esp + 4], 0x5f2c35
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4eaacf
mov dword [esp + 4], 0x5f2ee7
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4eaacf
jmp 0x4eb723
mov eax, dword [ebx + 8]
mov edx, 0x5f1e38
call fcn.00427968
mov esi, eax
test eax, eax
je 0x4ec1e6
mov dword [esp], 2
xor edx, edx
xor ecx, ecx
call fcn.00425b5e
mov dword [esp], esi
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__ftelli64]
mov edi, eax
xor eax, eax
mov dword [esp], eax
xor edx, edx
xor ecx, ecx
mov eax, esi
call fcn.00425b5e
mov dword [esp], edi
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov dword [ebp - 0xc8], eax
mov dword [esp + 0xc], esi
mov dword [esp + 8], edi
mov dword [esp + 4], 1
mov dword [esp], eax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fread
mov dword [ebp - 0xd0], eax
mov eax, esi
call fcn.00425b84
mov esi, 0xfffffffd
cmp dword [ebp - 0xd0], 0
js 0x4ec786
xor eax, eax
mov dword [esp], eax
mov eax, dword [ebp - 0xd0]
xor ecx, ecx
mov edx, eax
mov eax, dword [ebp - 0xc8]
call fcn.00425f6d
mov dword [ebp - 0xa0], eax
xor eax, eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0xb8], 0
je 0x4eac6a
lea eax, [ebp - 0x88]
mov dword [ebp - 0xd4], eax
lea eax, [ebp - 0x84]
mov dword [ebp - 0xb4], eax
jmp 0x4eac78
xor eax, eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xa0]
call fcn.004265d2
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe4], edx
xor edx, edx
xor ecx, ecx
mov eax, dword [ebp - 0xa0]
call fcn.004272a7
cmp dword [ebp - 0xb4], 0
je 0x4eacbb
mov eax, dword [ebp - 0xb4]
xor esi, esi
mov dword [eax], esi
mov eax, dword [ebp - 0xd4]
xor edi, edi
mov dword [eax], edi
mov eax, dword [ebp - 0xa0]
call fcn.00426ef9
mov edi, eax
mov eax, dword [ebp - 0xa0]
call fcn.00426ef9
mov esi, eax
mov eax, dword [ebp - 0xa0]
call fcn.00426ef9
mov edx, edi
and edx, eax
inc dl
jne 0x4eae9f
mov ecx, esi
cmp cl, 0xd8
jne 0x4eae9f
mov eax, dword [ebp - 0xa0]
call fcn.00427076
mov edx, 0xa
xor ecx, ecx
mov eax, dword [ebp - 0xa0]
call fcn.00427443
mov edx, 0x10
mov eax, dword [ebp - 0xa0]
call fcn.00427195
mov dword [ebp - 0xd8], eax
mov edx, 0x10
mov eax, dword [ebp - 0xa0]
call fcn.00427195
mov dword [ebp - 0xec], eax
xor ecx, ecx
mov dword [ebp - 0xb0], ecx
mov dword [ebp - 0xa8], ecx
mov dword [ebp - 0xe0], ecx
xor edi, edi
mov eax, dword [ebp - 0xa0]
call fcn.00426462
test edx, edx
je 0x4eae1f
mov eax, dword [ebp - 0xa0]
call fcn.00426ef9
inc al
jne 0x4ead56
test edi, edi
jne 0x4ead8a
mov eax, dword [ebp - 0xa0]
call fcn.004265d2
lea edi, [eax - 1]
mov eax, dword [ebp - 0xa0]
call fcn.00426ef9
add eax, 0x40
cmp al, 0xf
ja 0x4ead56
mov edx, 0xeeef
bt edx, eax
jae 0x4ead56
mov edx, 3
xor ecx, ecx
mov eax, dword [ebp - 0xa0]
call fcn.00427443
mov edx, 0x10
mov eax, dword [ebp - 0xa0]
call fcn.00427195
mov esi, eax
mov edx, 0x10
mov eax, dword [ebp - 0xa0]
call fcn.00427195
mov ecx, eax
cmp dword [ebp - 0xb0], esi
jb 0x4eadf8
cmp dword [ebp - 0xa8], eax
jb 0x4eadf8
mov esi, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0xa8]
mov dword [ebp - 0xa8], ecx
mov edx, 8
mov eax, dword [ebp - 0xa0]
call fcn.00427195
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xb0], esi
jmp 0x4ead56
test eax, eax
jne 0x4ead69
cmp dword [ebp - 0xb4], 0
jne 0x4eae41
mov byte [ebp - 0xb4], 0x6c
mov esi, 0x6a706567
jmp 0x4eb176
mov dword [esp], 1
xor edx, edx
xor ecx, ecx
xor eax, eax
call fcn.00425f6d
mov esi, eax
mov edx, edi
call fcn.00426343
mov edx, dword [ebp - 0xd8]
mov eax, esi
call fcn.00426343
mov edx, dword [ebp - 0xec]
mov eax, esi
call fcn.00426343
mov edx, dword [ebp - 0xe0]
mov eax, esi
call fcn.0042633b
mov ecx, dword [ebp - 0xd4]
mov edx, dword [ebp - 0xb4]
mov eax, esi
call fcn.004274c2
mov eax, esi
call fcn.004260fd
jmp 0x4eae30
mov ecx, edi
cmp cl, 0x89
sete cl
mov edx, esi
cmp dl, 0x50
sete dl
test cl, dl
je 0x4eaf9a
cmp al, 0x4e
jne 0x4eaf9a
mov eax, dword [ebp - 0xa0]
call fcn.00426ef9
cmp al, 0x47
je 0x4eaedc
mov byte [ebp - 0xb4], 0
xor esi, esi
jmp 0x4eb168
mov eax, dword [ebp - 0xa0]
call fcn.00426ef9
cmp al, 0xd
jne 0x4eaece
mov eax, dword [ebp - 0xa0]
call fcn.00426ef9
cmp al, 0xa
jne 0x4eaece
mov eax, dword [ebp - 0xa0]
call fcn.00426ef9
cmp al, 0x1a
jne 0x4eaece
mov eax, dword [ebp - 0xa0]
call fcn.00426ef9
cmp al, 0xa
jne 0x4eaece
mov eax, dword [ebp - 0xa0]
call fcn.00426faa
mov eax, dword [ebp - 0xa0]
call fcn.00426ef9
cmp al, 0x49
jne 0x4eaece
mov eax, dword [ebp - 0xa0]
call fcn.00426ef9
cmp al, 0x48
jne 0x4eaece
mov eax, dword [ebp - 0xa0]
call fcn.00426ef9
cmp al, 0x44
jne 0x4eaece
mov eax, dword [ebp - 0xa0]
call fcn.00426ef9
cmp al, 0x52
jne 0x4eaece
mov eax, dword [ebp - 0xa0]
call fcn.00426faa
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xa0]
call fcn.00426faa
mov dword [ebp - 0xb0], eax
mov byte [ebp - 0xb4], 0x6d
mov esi, 0x706e6720
jmp 0x4eb176
mov eax, dword [ebp - 0xa0]
call fcn.00426ef9
mov esi, eax
mov eax, dword [ebp - 0xa0]
call fcn.00426faa
mov ecx, esi
cmp cl, 0xc
jne 0x4eafc0
cmp eax, 0x6a502020
je 0x4eafcd
cmp eax, 0x6a703268
jne 0x4eaece
jmp 0x4eb013
mov eax, dword [ebp - 0xa0]
call fcn.00426faa
cmp eax, 0xd0a870a
jne 0x4eaece
jmp 0x4eb000
cmp eax, 0x6a703268
je 0x4eb013
sub esi, 8
xor edi, edi
mov edx, esi
mov ecx, edi
mov eax, dword [ebp - 0xa0]
call fcn.00427443
mov eax, dword [ebp - 0xa0]
call fcn.00426462
test edx, edx
je 0x4eb154
mov eax, dword [ebp - 0xa0]
call fcn.00426faa
mov esi, eax
mov eax, dword [ebp - 0xa0]
call fcn.00426faa
cmp eax, 0x69686472
jne 0x4eafe5
mov eax, dword [ebp - 0xa0]
call fcn.00426faa
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0xa0]
call fcn.00426faa
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xa0]
call fcn.00427054
mov edi, eax
mov eax, dword [ebp - 0xa0]
call fcn.00426ef9
movzx eax, al
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0xa0]
call fcn.00426ef9
movzx eax, al
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0xa0]
call fcn.00426ef9
movzx eax, al
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0xa0]
call fcn.00426ef9
movzx eax, al
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xb4], 0
jne 0x4eb0cb
mov byte [ebp - 0xb4], 0x6e
mov esi, 0x6a703220
jmp 0x4eb176
mov dword [esp], 1
xor edx, edx
xor ecx, ecx
xor eax, eax
call fcn.00425f6d
mov esi, eax
mov edx, dword [ebp - 0xb0]
call fcn.00426392
mov edx, dword [ebp - 0xa8]
mov eax, esi
call fcn.00426392
movzx edx, di
mov eax, esi
call fcn.00426343
mov edx, dword [ebp - 0xf0]
mov eax, esi
call fcn.0042633b
mov edx, dword [ebp - 0xec]
mov eax, esi
call fcn.0042633b
mov edx, dword [ebp - 0xd8]
mov eax, esi
call fcn.0042633b
mov edx, dword [ebp - 0xe0]
mov eax, esi
call fcn.0042633b
mov ecx, dword [ebp - 0xd4]
mov edx, dword [ebp - 0xb4]
mov eax, esi
call fcn.004274c2
mov eax, esi
call fcn.004260fd
jmp 0x4eb0ba
test eax, eax
jne 0x4eb013
mov byte [ebp - 0xb4], 0x6e
mov esi, 0x6a703220
xor edx, edx
mov dword [ebp - 0xb0], edx
mov dword [ebp - 0xa8], edx
mov edx, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xa0]
call fcn.004272a7
mov eax, dword [ebp - 0xa0]
call fcn.004260fd
cmp byte [ebp - 0xb4], 0
jne 0x4eb1cb
mov eax, dword [ebp - 0xc8]
mov dword [esp], eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov eax, dword [ebx + 8]
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.Unrecognized_file__s
mov dword [esp + 4], 0xfffffffc
jmp 0x4ec74e
cmp dword [ebp - 0xa8], 0
je 0x4eb1dd
cmp dword [ebp - 0xb0], 0
jne 0x4eb237
mov eax, dword [ebp - 0xc8]
mov dword [esp], eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov eax, dword [ebp - 0x84]
test eax, eax
je 0x4eb1fd
mov dword [esp], eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov eax, 0x5f2c30
cmp byte [ebp - 0xb4], 0x6c
je 0x4eb21e
mov eax, str.JPEG2000
cmp byte [ebp - 0xb4], 0x6d
jne 0x4eb21e
mov eax, 0x5f2c35
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.Invalid__s_file
mov dword [esp + 4], 0xfffffff6
jmp 0x4ec74e
mov eax, dword [ebx + 0x10]
and eax, 0x100000
mov dword [ebp - 0xd4], eax
je 0x4eb2a7
mov dword [ebx + 0x70], 1
mov dword [ebx + 0x74], 0x76696465
mov dword [ebx + 0x78], esi
mov dword [ebx + 0x7c], 0x800001
mov eax, dword [ebp - 0xa8]
mov dword [ebx + 0x80], eax
mov eax, dword [ebp - 0xb0]
mov dword [ebx + 0x84], eax
mov dword [ebx + 0x68], 1
mov eax, dword [ebp - 0xc8]
mov dword [esp], eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov eax, dword [ebp - 0x84]
test eax, eax
je 0x4ec1cc
mov dword [esp], eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
jmp 0x4ec1cc
xor esi, esi
cmp dword [ebp - 0xb8], 0
je 0x4eb3b3
mov esi, dword [ebx + 0x28]
test esi, esi
jne 0x4eb2d8
mov eax, 2
call fcn.004b2799
mov esi, eax
mov dword [ebx + 0x28], eax
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0xd4], eax
cmp dword [esi + 0x10], 0
jne 0x4eb2eb
mov eax, 4
call fcn.004b21c0
mov dword [esi + 0x10], eax
mov esi, dword [ebx + 0x28]
cmp dword [esi + 0x14], 0
jne 0x4eb301
mov eax, 6
call fcn.004b21c0
mov dword [esi + 0x14], eax
mov eax, dword [ebx + 0x28]
mov eax, dword [eax + 0x10]
mov byte [eax + 8], 4
mov eax, dword [ebx + 0x28]
mov eax, dword [eax + 0x10]
movzx edx, byte [ebp - 0xb4]
mov dword [eax + 4], edx
mov eax, dword [ebx + 0x28]
mov eax, dword [eax + 0x10]
mov ecx, dword [ebp - 0xd0]
mov dword [eax + 0xc], ecx
mov eax, dword [ebx + 0x28]
mov edx, dword [eax + 0x10]
mov eax, ecx
shl eax, 3
mov dword [edx + 0x14], eax
mov edx, dword [ebx + 0x28]
mov edx, dword [edx + 0x10]
mov dword [edx + 0x10], eax
mov eax, dword [ebx + 0x28]
mov eax, dword [eax + 0x14]
mov dword [eax + 0xc], 0x3e8
mov eax, dword [ebx + 0x28]
cmp dword [ebp - 0x84], 0
je 0x4eb3ac
mov esi, dword [eax + 0x10]
cmp dword [esi + 0x18], 0
jne 0x4eb370
mov eax, 5
call fcn.004b21c0
mov dword [esi + 0x18], eax
mov eax, dword [ebx + 0x28]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0x18]
mov eax, dword [eax + 8]
test eax, eax
je 0x4eb388
mov dword [esp], eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov eax, dword [ebx + 0x28]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 0x84]
mov dword [eax + 8], edx
mov eax, dword [ebx + 0x28]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 0x88]
mov dword [eax + 4], edx
mov eax, dword [ebx + 0x28]
movzx esi, word [eax + 2]
mov edx, esi
mov eax, dword [ebx]
call fcn.0049c0e4
mov dword [ebp - 0xa0], eax
mov eax, dword [ebx]
cmp dword [ebp - 0xa0], 0
jne 0x4eb3fd
mov dword [esp], 0x3e8
mov ecx, 0x76696465
mov edx, esi
call fcn.004a0bad
mov dword [ebp - 0xa0], eax
mov eax, dword [ebx]
cmp dword [ebp - 0xa0], 0
jne 0x4eb3fd
call fcn.0049b37e
mov esi, eax
jmp 0x4eb6fe
mov ecx, 1
mov edx, dword [ebp - 0xa0]
mov eax, dword [ebx]
call fcn.004a05bd
cmp dword [ebp - 0xb8], 0
je 0x4eb47e
mov eax, dword [ebx]
mov edx, dword [ebx + 0x28]
cmp word [edx + 2], 0
jne 0x4eb436
mov edx, dword [ebp - 0xa0]
call fcn.0049c0c2
mov edx, dword [ebx + 0x28]
mov word [edx + 2], ax
mov ecx, dword [ebx + 0x28]
movzx eax, word [ecx + 2]
mov dword [ebx + 0x34], eax
test byte [ebx + 0x10], 1
je 0x4eb44f
mov eax, dword [ebx + 8]
mov dword [ebp - 0xc0], eax
lea eax, [ebp - 0x8c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xc0]
mov dword [esp], eax
mov edx, dword [ebp - 0xa0]
mov eax, dword [ebx]
call fcn.00578daa
mov esi, eax
test eax, eax
je 0x4eb516
jmp 0x4eb6fe
lea edx, [ebp - 0x7c]
mov ecx, 0x19
mov edi, edx
mov eax, dword [ebp - 0xb8]
rep stosd dword es:[edi], eax
mov eax, 0x706e6720
cmp byte [ebp - 0xb4], 0x6d
je 0x4eb4b1
mov eax, 0x6a70326b
cmp byte [ebp - 0xb4], 0x6e
je 0x4eb4b1
mov eax, 0x6a706567
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0xa8]
mov word [ebp - 0x5c], ax
mov eax, dword [ebp - 0xb0]
mov word [ebp - 0x5a], ax
mov dword [ebp - 0x54], 0x48
mov dword [ebp - 0x58], 0x48
mov word [ebp - 0x50], 0x18
lea eax, [ebp - 0x80]
mov dword [ebp - 0x4c], 0x45504a04
mov byte [ebp - 0x48], 0x47
lea edx, [ebp - 0x8c]
mov dword [esp + 4], edx
mov dword [esp], eax
xor ecx, ecx
mov edx, dword [ebp - 0xa0]
mov eax, dword [ebx]
call fcn.00578a26
mov edx, dword [ebp - 0xa0]
mov eax, dword [ebx]
call fcn.0049c0c2
mov dword [ebx + 0x34], eax
mov eax, dword [ebp - 0xb0]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xa8]
mov dword [esp], eax
mov ecx, dword [ebp - 0x8c]
mov edx, dword [ebp - 0xa0]
mov eax, dword [ebx]
call fcn.00597724
call fcn.0049b3af
mov edi, eax
mov dword [ebp - 0x80], eax
mov dword [eax + 0x14], 1
mov eax, dword [ebp - 0xd0]
mov dword [edi], eax
fld qword [ebx + 0x60]
xorps xmm0, xmm0
fst qword [ebp - 0xc0]
movsd xmm6, qword [ebp - 0xc0]
ucomisd xmm6, xmm0
jp 0x4eb571
je 0x4eb5e2
fmul qword [0x5f33d0]
fld qword [0x5f33c8]
fxch st(1)
fcomi st(1)
fstp st(1)
jae 0x4eb5ad
fnstcw word [ebp - 0x9a]
mov ax, word [ebp - 0x9a]
or ah, 0xc
mov word [ebp - 0x9c], ax
fldcw word [ebp - 0x9c]
fistp qword [edi + 8]
fldcw word [ebp - 0x9a]
jmp 0x4eb5e4
fsub qword [0x5f33c8]
fnstcw word [ebp - 0x9a]
mov ax, word [ebp - 0x9a]
or ah, 0xc
mov word [ebp - 0x9c], ax
fldcw word [ebp - 0x9c]
fistp qword [edi + 8]
fldcw word [ebp - 0x9a]
add dword [edi + 0xc], 0x80000000
jmp 0x4eb5e4
fstp st(0)
mov edx, dword [ebx + 8]
mov eax, 0x5f2c30
cmp byte [ebp - 0xb4], 0x6c
je 0x4eb608
mov eax, str.JPEG2000
cmp byte [ebp - 0xb4], 0x6d
jne 0x4eb608
mov eax, 0x5f2c35
mov ecx, dword [ebp - 0xb0]
mov dword [esp + 0x18], ecx
mov ecx, dword [ebp - 0xa8]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], eax
mov dword [esp + 8], str._s_import__s___size__d_x__d
xor eax, eax
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.004d2fb7
mov edx, dword [ebp - 0xa0]
mov eax, dword [ebx]
call fcn.0049c641
test eax, eax
jne 0x4eb65f
cmp dword [edi + 0xc], 0
jne 0x4eb657
cmp dword [edi + 8], 0
je 0x4eb65f
xor eax, eax
mov dword [edi + 8], eax
mov dword [edi + 0xc], eax
mov dword [esp], 1
xor eax, eax
mov dword [esp + 4], eax
xor edx, edx
xor ecx, ecx
mov eax, str.Importing_Image
call fcn.004266f7
mov ecx, dword [ebp - 0x8c]
test byte [ebx + 0x10], 1
je 0x4eb6a4
xor eax, eax
mov dword [esp + 4], eax
mov dword [esp + 8], eax
mov dword [esp], edi
mov edx, dword [ebp - 0xa0]
mov eax, dword [ebx]
call fcn.004a712d
mov esi, eax
jmp 0x4eb6c4
mov eax, dword [ebp - 0xc8]
mov dword [edi + 4], eax
mov dword [esp], edi
mov edx, dword [ebp - 0xa0]
mov eax, dword [ebx]
call fcn.004a7935
mov esi, eax
xor eax, eax
mov dword [edi + 4], eax
mov dword [esp], 1
xor edi, edi
mov dword [esp + 4], edi
mov edx, 1
xor ecx, ecx
mov eax, str.Importing_Image
call fcn.004266f7
lea eax, [ebp - 0x80]
call fcn.0049b3db
mov ecx, dword [ebx + 0xc]
test ecx, ecx
je 0x4eb6fe
mov edx, dword [ebp - 0xa0]
mov eax, dword [ebx]
call fcn.004a11de
mov eax, dword [ebp - 0xc8]
mov dword [esp], eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov eax, dword [ebx + 0x28]
test eax, eax
je 0x4ec786
test byte [ebp - 0xd4], 1
jmp 0x4ec5c4
mov dword [esp + 8], 4
mov dword [esp + 4], 0x5f2f3c
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
jne 0x4eb74e
test byte [ebx + 0x12], 0x10
jne 0x4eb7e8
jmp 0x4eb809
mov dword [esp + 8], 4
mov dword [esp + 4], 0x5f2f41
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4eb73f
mov dword [esp + 8], 4
mov dword [esp + 4], 0x5f2f46
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4eb73f
mov dword [esp + 8], 4
mov dword [esp + 4], 0x5f2f4b
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4eb73f
mov dword [esp + 4], 0x5f2f50
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4eb73f
mov dword [esp + 4], 0x5f2f54
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4eb73f
mov dword [esp + 4], 0x5f2f59
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4eb73f
jmp 0x4eb81a
mov dword [ebx + 0x68], 1
mov dword [ebx + 0x70], 1
mov dword [ebx + 0x74], 0x736f756e
mov dword [ebx + 0x7c], 0x200021
jmp 0x4ec1cc
mov eax, ebx
add esp, 0x10c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.004f19f9
mov dword [esp + 8], 4
mov dword [esp + 4], 0x5f2f5d
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
jne 0x4eb84d
test byte [ebx + 0x12], 0x10
jne 0x4eb7e8
mov eax, ebx
add esp, 0x10c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.004f234b
mov dword [esp + 4], 0x5f2f62
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4eb836
mov dword [esp + 8], 4
mov dword [esp + 4], 0x5f2f68
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
jne 0x4eb88e
mov eax, dword [ebx + 0x10]
bt eax, 0x14
jae 0x4eb8c3
or eax, 1
mov dword [ebx + 0x10], eax
jmp 0x4eb8c3
mov dword [esp + 8], 4
mov dword [esp + 4], str..lsr
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4eb87d
mov dword [esp + 4], 0x5f2f72
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4eb87d
jmp 0x4ebf6e
mov eax, dword [ebx + 8]
mov edx, 0x5f1e38
call fcn.00427968
mov dword [ebp - 0xc8], eax
test eax, eax
je 0x4ec1e6
xor edx, edx
mov eax, dword [ebp - 0xc8]
call fcn.0042600f
mov dword [ebp - 0xa0], eax
call fcn.004265b5
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], edx
xor esi, esi
mov dword [ebp - 0xb0], esi
jmp 0x4eba57
mov edx, 4
mov eax, dword [ebp - 0xa0]
call fcn.00427195
mov dword [ebp - 0xd0], eax
mov edx, 0xc
mov eax, dword [ebp - 0xa0]
call fcn.00427195
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xb8]
sub eax, 2
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xb4], 0
jne 0x4eb95d
mov dword [ebp - 0xb4], 0x3e8
mov eax, dword [ebp - 0xd0]
dec eax
cmp eax, 1
jbe 0x4ebaf7
cmp dword [ebp - 0xd0], 7
je 0x4ebaf7
cmp dword [ebp - 0xd0], 4
jne 0x4eba42
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ebx + 4]
jne 0x4eba42
cmp dword [ebp - 0xb0], 0
je 0x4eba42
call fcn.0049b3af
mov esi, eax
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0xa8]
mov dword [esi], eax
mov dword [esi + 8], edi
xor eax, eax
mov dword [esi + 0xc], eax
xor eax, eax
cmp dword [ebp - 0xc0], 0
setne al
mov dword [esi + 0x14], eax
mov edi, dword [ebx + 0x10]
and edi, 1
je 0x4ebe8e
mov eax, dword [ebp - 0xa0]
call fcn.004265d2
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp], esi
mov ecx, 1
mov edx, dword [ebp - 0xb0]
mov eax, dword [ebx]
call fcn.004a712d
mov esi, eax
mov edi, dword [ebp - 0xa8]
lea eax, [ebp - 0x80]
call fcn.0049b3db
mov eax, dword [ebp - 0xa0]
test esi, esi
je 0x4ebece
call fcn.004260fd
mov eax, dword [ebp - 0xc8]
call fcn.00425b84
jmp 0x4ec786
mov eax, dword [ebp - 0xb4]
cmp dword [ebx + 4], eax
je 0x4ebc66
mov eax, dword [ebp - 0xa8]
xor ecx, ecx
mov edx, eax
mov eax, dword [ebp - 0xa0]
call fcn.00427443
mov eax, dword [ebp - 0xa0]
call fcn.00426462
test edx, edx
je 0x4ebf13
mov edx, 1
mov eax, dword [ebp - 0xa0]
call fcn.00427195
mov dword [ebp - 0xc0], eax
mov edx, 0xf
mov eax, dword [ebp - 0xa0]
call fcn.00427195
mov edx, 2
mov eax, dword [ebp - 0xa0]
call fcn.00427195
mov edx, 0x1e
mov eax, dword [ebp - 0xa0]
call fcn.00427195
mov edi, eax
mov eax, dword [ebp - 0xa0]
call fcn.00427054
mov dword [ebp - 0xb8], eax
cmp eax, 1
ja 0x4eb90f
mov eax, dword [ebp - 0xa0]
call fcn.004260fd
mov eax, dword [ebp - 0xc8]
call fcn.00425b84
mov dword [esp + 8], str.Invalid_SAF_Packet_Header
mov dword [esp + 4], 0xfffffff6
jmp 0x4ec10c
mov eax, dword [ebp - 0xa0]
call fcn.00426ef9
movzx edi, al
mov edx, edi
mov byte [ebp - 0xa8], dl
mov eax, dword [ebp - 0xa0]
call fcn.00426ef9
mov byte [ebp - 0xd4], al
mov eax, dword [ebp - 0xa0]
call fcn.0042701b
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xa0]
call fcn.00427054
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xe8], 0
mov dl, byte [ebp - 0xa8]
jne 0x4ebb59
mov dword [ebp - 0xe8], 0x3e8
mov eax, dword [ebp - 0xb8]
sub eax, 9
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x80], 0x6765736d
cmp byte [ebp - 0xd4], 3
jne 0x4ebb95
mov dword [ebp - 0x80], 0x7364736d
cmp dl, 9
jne 0x4ebbf0
mov dword [ebp - 0xc0], str.LASeR_Scene
mov edx, 0x4c415352
jmp 0x4ebbff
cmp byte [ebp - 0xd4], 4
jne 0x4ebbc3
mov dword [ebp - 0x80], 0x76696465
lea eax, [edi - 0x20]
cmp eax, 0x4d
ja 0x4ebbe2
mov edx, dword [eax*4 + str.V4PM462H]
mov eax, dword [eax*4 + 0x5f3138]
mov dword [ebp - 0xc0], eax
jmp 0x4ebc37
cmp byte [ebp - 0xd4], 5
jne 0x4ebbe2
mov dword [ebp - 0x80], 0x736f756e
cmp dl, 0x69
je 0x4ebc06
cmp dl, 0x6b
je 0x4ebc17
cmp dl, 0x40
je 0x4ebc28
mov dword [ebp - 0xc0], 0x5f2c59
xor edx, edx
jmp 0x4ebc37
mov dword [ebp - 0xc0], str.BIFS_Scene
mov edx, 0x42494653
mov esi, 1
jmp 0x4ebc39
mov dword [ebp - 0xc0], str.MPEG_2_Audio
mov edx, 0x4d503241
jmp 0x4ebc37
mov dword [ebp - 0xc0], str.MPEG_1_Audio
mov edx, 0x4d503141
jmp 0x4ebc37
mov dword [ebp - 0xc0], str.MPEG_4_Audio
mov edx, 0x4d503441
xor esi, esi
test byte [ebx + 0x12], 0x10
je 0x4eba33
mov ecx, dword [ebx + 0x68]
xor eax, eax
cmp eax, ecx
je 0x4ec75f
imul esi, eax, 0x50
mov edi, dword [ebp - 0xb4]
cmp dword [ebx + esi + 0x70], edi
je 0x4eba42
inc eax
jmp 0x4ebc48
cmp dword [ebp - 0xb0], 0
jne 0x4eba42
xor ecx, ecx
mov dword [ebp - 0xd8], ecx
cmp dword [ebx + 0x28], 0
jne 0x4ebcac
xor eax, eax
call fcn.004b2799
mov dword [ebx + 0x28], eax
mov eax, dword [eax + 0xc]
test eax, eax
je 0x4ebc9a
mov dword [esp], eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov eax, dword [ebx + 0x28]
xor edx, edx
mov dword [eax + 0xc], edx
mov dword [ebp - 0xd8], 1
mov eax, dword [ebx + 0x28]
mov eax, dword [eax + 0x10]
mov cl, byte [ebp - 0xd4]
mov byte [eax + 8], cl
mov eax, dword [ebx + 0x28]
mov eax, dword [eax + 0x10]
mov dword [eax + 4], edi
mov eax, dword [ebx + 0x28]
mov eax, dword [eax + 0x10]
mov ecx, dword [ebp - 0xec]
mov dword [eax + 0xc], ecx
cmp dword [ebp - 0xd0], 7
jne 0x4ebd34
mov eax, dword [ebp - 0xa0]
call fcn.00427054
mov edi, eax
mov edx, dword [ebx + 0x28]
mov dword [ebp - 0xa8], edx
lea eax, [eax + 1]
mov dword [esp], eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov edx, dword [ebp - 0xa8]
mov dword [edx + 0xc], eax
mov eax, dword [ebx + 0x28]
mov edx, dword [eax + 0xc]
mov ecx, edi
mov eax, dword [ebp - 0xa0]
call fcn.0042755d
mov eax, dword [ebx + 0x28]
mov eax, dword [eax + 0xc]
mov byte [eax + edi], 0
mov eax, dword [ebp - 0xb8]
sub eax, 0xb
sub eax, edi
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0
je 0x4ebdb1
mov eax, dword [ebx + 0x28]
mov edi, dword [eax + 0x10]
cmp dword [edi + 0x18], 0
jne 0x4ebd56
mov eax, 5
call fcn.004b21c0
mov dword [edi + 0x18], eax
mov eax, dword [ebx + 0x28]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0x18]
mov eax, dword [eax + 8]
test eax, eax
je 0x4ebd6e
mov dword [esp], eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov eax, dword [ebx + 0x28]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0x18]
mov ecx, dword [ebp - 0xa8]
mov dword [eax + 4], ecx
mov eax, dword [ebx + 0x28]
mov eax, dword [eax + 0x10]
mov edi, dword [eax + 0x18]
mov dword [esp], ecx
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov dword [edi + 8], eax
mov eax, dword [ebx + 0x28]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 0x18]
mov edx, dword [eax + 8]
mov ecx, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa0]
call fcn.0042755d
mov edx, dword [ebp - 0xb4]
mov eax, dword [ebx]
call fcn.0049c0e4
test eax, eax
je 0x4ebdca
xor eax, eax
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xe8]
mov dword [esp], eax
mov ecx, dword [ebp - 0x80]
mov edx, dword [ebp - 0xb4]
mov eax, dword [ebx]
call fcn.004a0bad
mov dword [ebp - 0xb0], eax
mov ecx, 1
mov edx, eax
mov eax, dword [ebx]
call fcn.004a05bd
mov edx, dword [ebp - 0xb0]
mov eax, dword [ebx]
call fcn.0049c0c2
mov edx, dword [ebx + 0x28]
mov word [edx + 2], ax
movzx edi, ax
mov dword [ebx + 0x34], edi
xor eax, eax
test byte [ebx + 0x10], 1
je 0x4ebe1c
mov eax, dword [ebx + 8]
mov ecx, dword [ebx + 0x28]
lea edx, [ebp - 0x80]
mov dword [esp + 4], edx
mov dword [esp], eax
mov edx, dword [ebp - 0xb0]
mov eax, dword [ebx]
call fcn.00578daa
cmp dword [ebp - 0xd8], 0
je 0x4ebe4c
mov eax, dword [ebx + 0x28]
call fcn.004b23d9
xor eax, eax
mov dword [ebx + 0x28], eax
test esi, esi
je 0x4ebe5d
mov edx, dword [ebp - 0xb0]
mov eax, dword [ebx]
call fcn.005979ef
mov eax, dword [ebp - 0xc0]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edi
mov dword [esp + 8], str.Importing_SAF_stream__d:__s
xor edx, edx
mov dword [esp + 4], edx
mov dword [esp], ebx
call fcn.004d2fb7
xor ecx, ecx
mov dword [ebp - 0xa8], ecx
jmp 0x4eba42
mov eax, dword [ebp - 0xa8]
mov dword [esp], eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov edx, eax
mov dword [esi + 4], eax
mov ecx, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa0]
call fcn.0042755d
mov dword [esp], esi
mov ecx, 1
mov edx, dword [ebp - 0xb0]
mov eax, dword [ebx]
call fcn.004a7935
mov esi, eax
jmp 0x4eba08
call fcn.004265d2
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], edx
mov eax, dword [ebp - 0xe0]
mov edx, dword [ebp - 0xdc]
mov dword [esp], eax
mov dword [esp + 4], edx
mov edx, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa4]
mov eax, str.Importing_SAF
call fcn.004266f7
mov dword [ebp - 0xa8], edi
jmp 0x4eba42
test eax, eax
jne 0x4eba6a
mov eax, dword [ebp - 0xa0]
call fcn.004260fd
mov eax, dword [ebp - 0xc8]
call fcn.00425b84
test byte [ebx + 0x12], 0x10
jne 0x4ec1cc
mov eax, dword [ebp - 0xe0]
mov edx, dword [ebp - 0xdc]
mov dword [esp], eax
mov dword [esp + 4], edx
mov ecx, edx
mov edx, eax
mov eax, str.Importing_SAF
call fcn.004266f7
mov edx, dword [ebp - 0xb0]
mov eax, dword [ebx]
call fcn.004d3031
jmp 0x4ec1cc
mov dword [esp + 8], 4
mov dword [esp + 4], str..srt
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4ec69f
mov dword [esp + 8], 4
mov dword [esp + 4], 0x5f211e
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4ec69f
mov dword [esp + 8], 5
mov dword [esp + 4], 0x5f2fbf
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4ec69f
mov dword [esp + 8], 4
mov dword [esp + 4], 0x5f2fc5
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4ec69f
mov dword [esp + 8], 5
mov dword [esp + 4], 0x5f2fca
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4ec69f
mov dword [esp + 4], 0x5f2fd0
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4ec69f
mov dword [esp + 4], 0x5f2fd4
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4ec69f
mov dword [esp + 4], str.TEXT
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4ec69f
mov dword [esp + 4], 0x5f2fdd
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4ec69f
mov dword [esp + 4], 0x5f2fe1
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4ec69f
mov dword [esp + 8], 4
mov dword [esp + 4], 0x5f2032
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
jne 0x4ec0b3
mov eax, ebx
add esp, 0x10c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.004e543f
mov dword [esp + 4], str.VOBSUB
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4ec0a2
mov dword [esp + 4], 0x5f2fed
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
jne 0x4ec12a
mov eax, dword [ebx + 0x10]
bt eax, 0x14
jae 0x4ec0ef
or eax, 1
mov dword [ebx + 0x10], eax
jmp 0x4ec1cc
mov eax, dword [ebx + 0x28]
test eax, eax
je 0x4ec0fc
cmp dword [eax + 0x10], 0
jne 0x4ec119
mov dword [esp + 8], str.Raw_stream_needs_ESD_and_DecoderConfig_for_import
mov dword [esp + 4], 0xffffffff
mov dword [esp], ebx
call fcn.004d2fb7
jmp 0x4ec756
mov eax, ebx
add esp, 0x10c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.004f2f33
mov dword [esp + 8], 4
mov dword [esp + 4], str..dml
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4ec700
mov dword [esp + 4], 0x5f3028
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4ec700
mov dword [esp + 8], 4
mov dword [esp + 4], str..s3d
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
jne 0x4ec1b3
mov eax, dword [ebx + 0x10]
and eax, 0x100000
mov dword [ebp - 0xb4], eax
je 0x4ec1d3
mov dword [ebx + 0x70], 1
mov dword [ebx + 0x74], 0x7364736d
mov dword [ebx + 0x78], 5
mov dword [ebx + 0x7c], 0x800001
mov dword [ebx + 0x68], 1
jmp 0x4ec1cc
mov dword [esp + 4], str.SC3DMC
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4ec17e
jmp 0x4ec5d9
xor esi, esi
jmp 0x4ec786
mov eax, dword [ebx + 8]
mov edx, 0x5f1e38
call fcn.00427968
mov esi, eax
test eax, eax
jne 0x4ec202
mov eax, dword [ebx + 8]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x5f1e74
mov dword [esp + 4], 0xfffffff4
jmp 0x4ec74e
mov dword [esp], 2
xor edx, edx
xor ecx, ecx
call fcn.00425b5e
mov dword [esp], esi
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__ftelli64]
mov edi, eax
xor eax, eax
mov dword [esp], eax
xor edx, edx
xor ecx, ecx
mov eax, esi
call fcn.00425b5e
mov dword [esp], edi
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov dword [ebp - 0xb0], eax
mov dword [esp + 0xc], esi
mov dword [esp + 8], edi
mov dword [esp + 4], 1
mov dword [esp], eax
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fread
mov dword [ebp - 0xa8], eax
mov eax, esi
call fcn.00425b84
mov esi, 0xfffffffd
cmp dword [ebp - 0xa8], 0
js 0x4ec786
mov dword [esp], 1
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov esi, eax
mov byte [eax], 0xc
mov edi, dword [ebx + 0x28]
test edi, edi
jne 0x4ec2a0
xor eax, eax
call fcn.004b2799
mov edi, eax
mov dword [ebx + 0x28], eax
mov dword [ebp - 0xb4], 1
cmp dword [edi + 0x10], 0
jne 0x4ec2b3
je 0x4ec786
call fcn.004b23d9
xor eax, eax
mov dword [ebx + 0x28], eax
jmp 0x4ec786
mov dword [esp + 8], 4
mov dword [esp + 4], 0x5f3057
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
jne 0x4ec606
mov eax, ebx
add esp, 0x10c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.004e6ca4
mov dword [esp + 8], 5
mov dword [esp + 4], str..chap
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4ec5f5
mov dword [esp + 4], str.CHAP
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x4ec5f5
mov dword [esp + 8], 4
mov dword [esp + 4], 0x5f3067
mov dword [esp], esi
call sub.api_ms_win_crt_string_l1_1_0.dll__strnicmp
test eax, eax
je 0x4ec69f
mov eax, ebx
add esp, 0x10c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.0050debe
xor edx, edx
jmp 0x4ec705
mov edx, 1
mov eax, ebx
add esp, 0x10c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.004d94b1
mov eax, ebx
add esp, 0x10c
pop ebx
pop esi
pop edi
pop ebp
jmp 0x4e540b
mov dword [esp], ebx
call fcn.004d2fb7
mov esi, eax
jmp 0x4ec786
or esi, 0xffffffff
jmp 0x4ec786
imul ecx, eax, 0x50
add ecx, ebx
mov dword [ecx + 0x78], edx
mov edx, dword [ebp - 0x80]
mov dword [ecx + 0x74], edx
mov dword [ecx + 0x7c], 1
mov edi, dword [ebp - 0xb4]
mov dword [ecx + 0x70], edi
inc eax
mov dword [ebx + 0x68], eax
jmp 0x4eba42
mov eax, esi
add esp, 0x10c
pop ebx
pop esi
pop edi
pop ebp
ret