Function at 0x49b57e
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0xa4c
mov esi, edx
mov byte [ebp - 0x9fd], 0
lea ebx, [eax + 0xa]
xor edx, edx
mov dword [ebp - 0xa14], edx
mov dword [ebp - 0xa38], edx
mov dword [ebp - 0xa34], edx
mov dword [ebp - 0xa24], 0x989680
xor ecx, ecx
mov dword [ebp - 0xa20], ecx
mov dword [ebp - 0xa18], ecx
mov dword [ebp - 0xa2c], 4
xor edi, edi
mov dword [ebp - 0xa28], edi
mov dword [ebp - 0xa1c], edi
mov dword [ebp - 0xa10], edi
mov dword [esp + 4], 0x20
mov dword [esp], ebx
call sub.api_ms_win_crt_private_l1_1_0.dll_strchr
mov dword [ebp - 0xa0c], eax
test eax, eax
je 0x49b5fd
mov byte [eax], 0
mov dword [esp + 8], 4
mov dword [esp + 4], str.4cc
mov dword [esp], ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strncmp
test eax, eax
jne 0x49b633
add ebx, 4
mov dword [esp + 4], ebx
lea eax, [ebp - 0x9fd]
mov dword [esp], eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy
jmp 0x49b89c
mov dword [esp + 8], 5
mov dword [esp + 4], 0x5ea653
mov dword [esp], ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strncmp
test eax, eax
jne 0x49b6e2
lea eax, [ebx + 5]
mov dword [esp], eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov edi, eax
mov eax, dword [ebp - 0xa14]
lea ecx, [ebp + eax - 0x818]
xor edx, edx
cmp edx, edi
jae 0x49b6d4
mov dword [ebp - 0xa3c], ecx
mov al, byte [ebx + edx + 5]
mov byte [ebp - 0xa00], al
mov al, byte [ebx + edx + 6]
mov dword [ebp - 0xa30], edx
mov byte [ebp - 0x9ff], al
mov byte [ebp - 0x9fe], 0
lea eax, [ebp - 0x9f8]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x5ea659
lea eax, [ebp - 0xa00]
mov dword [esp], eax
call fcn.005ae14c
mov eax, dword [ebp - 0x9f8]
mov ecx, dword [ebp - 0xa3c]
mov byte [ecx], al
mov edx, dword [ebp - 0xa30]
add edx, 2
inc ecx
jmp 0x49b66f
inc edi
shr edi, 1
add dword [ebp - 0xa14], edi
jmp 0x49b89c
mov dword [esp + 8], 4
mov dword [esp + 4], str.nal
mov dword [esp], ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strncmp
test eax, eax
jne 0x49b714
add ebx, 4
mov dword [esp], ebx
call sub.api_ms_win_crt_convert_l1_1_0.dll_atoi
mov dword [ebp - 0xa2c], eax
jmp 0x49b89c
mov dword [esp + 8], 4
mov dword [esp + 4], str.bps
mov dword [esp], ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strncmp
test eax, eax
jne 0x49b746
add ebx, 4
mov dword [esp], ebx
call sub.api_ms_win_crt_convert_l1_1_0.dll_atoi
mov dword [ebp - 0xa28], eax
jmp 0x49b89c
mov dword [esp + 8], 5
mov dword [esp + 4], str.atag
mov dword [esp], ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strncmp
test eax, eax
jne 0x49b772
add ebx, 5
mov dword [esp], ebx
call sub.api_ms_win_crt_convert_l1_1_0.dll_atoi
jmp 0x49b89c
mov dword [esp + 8], 3
mov dword [esp + 4], 0x5ea66c
mov dword [esp], ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strncmp
test eax, eax
jne 0x49b7a4
add ebx, 3
mov dword [esp], ebx
call sub.api_ms_win_crt_convert_l1_1_0.dll_atoi
mov dword [ebp - 0xa1c], eax
jmp 0x49b89c
mov dword [esp + 8], 6
mov dword [esp + 4], str.srate
mov dword [esp], ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strncmp
test eax, eax
jne 0x49b7d6
add ebx, 6
mov dword [esp], ebx
call sub.api_ms_win_crt_convert_l1_1_0.dll_atoi
mov dword [ebp - 0xa10], eax
jmp 0x49b89c
mov dword [esp + 8], 2
mov dword [esp + 4], 0x5ea677
mov dword [esp], ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strncmp
test eax, eax
jne 0x49b808
add ebx, 2
mov dword [esp], ebx
call sub.api_ms_win_crt_convert_l1_1_0.dll_atoi
mov dword [ebp - 0xa18], eax
jmp 0x49b89c
mov dword [esp + 8], 2
mov dword [esp + 4], 0x5ea67a
mov dword [esp], ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strncmp
test eax, eax
jne 0x49b837
add ebx, 2
mov dword [esp], ebx
call sub.api_ms_win_crt_convert_l1_1_0.dll_atoi
mov dword [ebp - 0xa20], eax
jmp 0x49b89c
mov dword [esp + 8], 6
mov dword [esp + 4], 0x5ea67d
mov dword [esp], ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strncmp
test eax, eax
jne 0x49b866
add ebx, 6
mov dword [esp], ebx
call sub.api_ms_win_crt_convert_l1_1_0.dll_atoi
mov dword [ebp - 0xa24], eax
jmp 0x49b89c
mov dword [esp + 8], 5
mov dword [esp + 4], str.tfdt
mov dword [esp], ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strncmp
test eax, eax
jne 0x49b89c
add ebx, 5
mov dword [esp], ebx
call sub.api_ms_win_crt_convert_l1_1_0.dll_atoi
mov dword [ebp - 0xa38], eax
sar eax, 0x1f
mov dword [ebp - 0xa34], eax
cmp dword [ebp - 0xa0c], 0
je 0x49b8b6
mov eax, dword [ebp - 0xa0c]
mov byte [eax], 0x20
lea ebx, [eax + 1]
jmp 0x49b5e0
mov dword [esp + 4], 0x5ea68a
lea ebx, [ebp - 0x9fd]
mov dword [esp], ebx
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x49b91a
mov dword [esp + 4], str.AACL
mov dword [esp], ebx
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x49b91a
cmp dword [0x5af048], 1
jbe 0x49be6f
mov dword [0x611418], 2
mov dword [0x611414], 2
mov dword [esp + 4], ebx
mov dword [esp], str._iso_file__Cannot_convert_smooth_media_type__s_to_ISO_init_segment_n
call fcn.004268ea
jmp 0x49be6f
mov eax, 0x6d6f6f76
call fcn.00497474
mov dword [esi + 0x28], eax
mov dword [eax + 0x30], esi
mov dword [esi + 0xa0], 1
mov ebx, dword [esi + 0x28]
mov eax, 0x6d766864
call fcn.00497474
mov dword [ebx + 0x18], eax
mov eax, dword [esi + 0x28]
mov eax, dword [eax + 0x18]
mov edi, dword [ebp - 0xa24]
mov dword [eax + 0x30], edi
mov ebx, dword [esi + 0x28]
mov eax, 0x6d766578
call fcn.00497474
mov dword [ebx + 0x24], eax
mov eax, 0x74726578
call fcn.00497474
mov edx, eax
mov dword [eax + 0x24], 1
mov dword [eax + 0x20], 1
mov eax, dword [esi + 0x28]
mov eax, dword [eax + 0x24]
mov eax, dword [eax + 0x18]
call fcn.00425c52
mov eax, 0x7472616b
call fcn.00497474
mov dword [ebp - 0xa0c], eax
mov eax, dword [esi + 0x28]
mov edi, dword [ebp - 0xa0c]
mov dword [edi + 0x34], eax
mov eax, dword [eax + 0x2c]
mov edx, edi
call fcn.00425c52
mov eax, 0x746b6864
call fcn.00497474
mov edi, dword [ebp - 0xa0c]
mov dword [edi + 0x1c], eax
mov dword [eax + 0x30], 1
mov eax, dword [edi + 0x1c]
or dword [eax + 0x1c], 1
mov eax, dword [edi + 0x1c]
mov edi, dword [ebp - 0xa18]
mov dword [eax + 0x74], edi
mov eax, dword [ebp - 0xa0c]
mov eax, dword [eax + 0x1c]
mov edi, dword [ebp - 0xa20]
mov dword [eax + 0x78], edi
mov eax, 0x6d646961
call fcn.00497474
mov edi, dword [ebp - 0xa0c]
mov dword [edi + 0x20], eax
mov dword [eax + 0x18], edi
mov ebx, dword [edi + 0x20]
mov eax, 0x6d646864
call fcn.00497474
mov dword [ebx + 0x1c], eax
mov eax, dword [ebp - 0xa0c]
mov eax, dword [eax + 0x20]
mov eax, dword [eax + 0x1c]
mov ecx, dword [ebp - 0xa24]
mov dword [eax + 0x30], ecx
mov eax, dword [ebp - 0xa0c]
mov ebx, dword [eax + 0x20]
mov eax, 0x68646c72
call fcn.00497474
mov dword [ebx + 0x20], eax
mov eax, 0x736f756e
cmp dword [ebp - 0xa18], 0
je 0x49ba54
mov eax, 0x76696465
mov esi, dword [ebp - 0xa0c]
mov edx, dword [esi + 0x20]
mov edx, dword [edx + 0x20]
mov dword [edx + 0x24], eax
mov ebx, dword [esi + 0x20]
mov eax, 0x6d696e66
call fcn.00497474
mov dword [ebx + 0x24], eax
mov eax, dword [ebp - 0xa0c]
mov eax, dword [eax + 0x20]
mov ebx, dword [eax + 0x24]
mov eax, 0x7374626c
call fcn.00497474
mov dword [ebx + 0x1c], eax
mov eax, dword [ebp - 0xa0c]
mov eax, dword [eax + 0x20]
mov eax, dword [eax + 0x24]
mov ebx, dword [eax + 0x1c]
mov eax, 0x7374737a
call fcn.00497474
mov dword [ebx + 0x2c], eax
mov eax, dword [ebp - 0xa0c]
mov eax, dword [eax + 0x20]
mov eax, dword [eax + 0x24]
mov ebx, dword [eax + 0x1c]
mov eax, 0x73747473
call fcn.00497474
mov dword [ebx + 0x18], eax
mov eax, dword [ebp - 0xa0c]
mov eax, dword [eax + 0x20]
mov eax, dword [eax + 0x24]
mov ebx, dword [eax + 0x1c]
mov eax, 0x7374636f
call fcn.00497474
mov dword [ebx + 0x34], eax
mov eax, dword [ebp - 0xa0c]
mov eax, dword [eax + 0x20]
mov eax, dword [eax + 0x24]
mov ebx, dword [eax + 0x1c]
mov eax, 0x73747363
call fcn.00497474
mov dword [ebx + 0x30], eax
mov eax, dword [ebp - 0xa0c]
mov eax, dword [eax + 0x20]
mov eax, dword [eax + 0x24]
mov ebx, dword [eax + 0x1c]
mov eax, 0x73747373
call fcn.00497474
mov dword [ebx + 0x24], eax
mov eax, dword [ebp - 0xa0c]
mov eax, dword [eax + 0x20]
mov eax, dword [eax + 0x24]
mov ebx, dword [eax + 0x1c]
mov eax, 0x73747364
call fcn.00497474
mov dword [ebx + 0x28], eax
mov ecx, dword [ebp - 0xa0c]
mov eax, dword [ebp - 0xa38]
mov edx, dword [ebp - 0xa34]
mov dword [ecx + 0x58], eax
mov dword [ecx + 0x5c], edx
mov dword [esp + 4], 0x5ea68a
lea ebx, [ebp - 0x9fd]
mov dword [esp], ebx
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
jne 0x49bd7a
mov eax, 0x61766331
call fcn.00497474
mov dword [ebp - 0xa10], eax
mov eax, 0x61766343
call fcn.00497474
mov ebx, eax
mov eax, dword [ebp - 0xa10]
mov dword [eax + 0x9c], ebx
mov edi, dword [ebp - 0xa18]
mov word [eax + 0x4c], di
mov esi, dword [ebp - 0xa20]
mov word [eax + 0x4e], si
call fcn.004b0f6d
mov dword [ebx + 0x18], eax
mov eax, dword [ebp - 0xa10]
mov eax, dword [eax + 0x9c]
mov eax, dword [eax + 0x18]
mov cl, byte [ebp - 0xa2c]
mov byte [eax + 4], cl
mov eax, dword [ebp - 0xa10]
mov eax, dword [eax + 0x9c]
mov eax, dword [eax + 0x18]
mov byte [eax], 1
xor edx, edx
or eax, 0xffffffff
lea ecx, [ebp - 0x818]
cmp dword [ebp - 0xa14], edx
je 0x49bc11
shl eax, 8
movzx ebx, byte [edx + ecx]
or eax, ebx
inc edx
cmp eax, 1
je 0x49bc1b
mov ebx, eax
and ebx, 0xffffff
dec ebx
jne 0x49bbe3
mov dword [ebp - 0xa1c], 3
jmp 0x49bc25
xor eax, eax
mov dword [ebp - 0xa1c], eax
jmp 0x49bc25
mov dword [ebp - 0xa1c], 4
mov eax, dword [ebp - 0xa1c]
mov dword [ebp - 0xa18], eax
mov ecx, dword [ebp - 0xa14]
cmp dword [ebp - 0xa18], ecx
jae 0x49bd4f
mov eax, dword [ebp - 0xa18]
lea eax, [ebp + eax - 0x818]
mov dword [ebp - 0xa20], eax
mov esi, dword [ebp - 0xa14]
mov eax, dword [ebp - 0xa18]
sub esi, eax
xor edx, edx
or eax, 0xffffffff
shl eax, 8
mov ecx, dword [ebp - 0xa20]
movzx ecx, byte [ecx + edx]
or eax, ecx
mov ecx, edx
inc edx
cmp eax, 1
jne 0x49bc8f
lea esi, [ecx - 3]
mov dword [ebp - 0xa1c], 4
jmp 0x49bcaf
mov ebx, eax
and ebx, 0xffffff
dec ebx
jne 0x49bca9
lea esi, [ecx - 2]
mov dword [ebp - 0xa1c], 3
jmp 0x49bcaf
cmp esi, edx
jne 0x49bc69
jmp 0x49bcb8
test esi, esi
cmove esi, dword [ebp - 0xa14]
mov dword [esp], 0xc
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov ebx, eax
test eax, eax
je 0x49bcd8
lea edx, [eax + 2]
mov ecx, 0xa
xor eax, eax
mov edi, edx
rep stosb byte es:[edi], al
mov word [ebx], si
movzx ecx, si
mov dword [esp], ecx
mov dword [ebp - 0xa24], ecx
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov dword [ebx + 4], eax
mov edi, eax
mov esi, dword [ebp - 0xa20]
mov ecx, dword [ebp - 0xa24]
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0xa10]
mov eax, dword [eax + 0x9c]
mov edx, dword [eax + 0x18]
mov eax, dword [ebp - 0xa18]
mov al, byte [ebp + eax - 0x818]
mov byte [ebp - 0xa20], al
and eax, 0x1f
cmp al, 7
jne 0x49bd2d
mov eax, dword [edx + 8]
jmp 0x49bd30
mov eax, dword [edx + 0xc]
mov edx, ebx
call fcn.00425c52
mov eax, dword [ebp - 0xa18]
mov esi, dword [ebp - 0xa1c]
add eax, esi
movzx edx, word [ebx]
add eax, edx
jmp 0x49bc2b
mov eax, dword [ebp - 0xa10]
call fcn.0048f23b
mov eax, dword [ebp - 0xa0c]
mov eax, dword [eax + 0x20]
mov eax, dword [eax + 0x24]
mov eax, dword [eax + 0x1c]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xa10]
jmp 0x49be65
mov dword [esp + 4], str.AACL
mov dword [esp], ebx
call sub.api_ms_win_crt_string_l1_1_0.dll__stricmp
test eax, eax
je 0x49bd95
xor eax, eax
jmp 0x49be74
mov dword [ebp - 0xa14], eax
mov eax, 0x6d703461
call fcn.00497474
mov ebx, eax
mov eax, 0x65736473
call fcn.00497474
mov esi, eax
mov dword [ebx + 0x74], eax
mov eax, 2
call fcn.004b2799
mov dword [esi + 0x20], eax
lea esi, [ebp - 0x9f8]
mov ecx, 0x78
mov edi, esi
mov eax, dword [ebp - 0xa14]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0xa1c]
mov dword [ebp - 0x9f8], eax
mov dword [ebp - 0x9f4], 2
mov eax, dword [ebp - 0xa10]
mov dword [ebp - 0x9f0], eax
mov eax, dword [ebx + 0x74]
mov eax, dword [eax + 0x20]
mov eax, dword [eax + 0x10]
mov edx, dword [eax + 0x18]
lea ecx, [edx + 4]
add edx, 8
mov eax, esi
call fcn.0058f375
mov eax, dword [ebx + 0x74]
mov eax, dword [eax + 0x20]
mov eax, dword [eax + 0x10]
mov byte [eax + 8], 5
mov eax, dword [ebx + 0x74]
mov eax, dword [eax + 0x20]
mov eax, dword [eax + 0x10]
mov dword [eax + 4], 0x40
mov eax, dword [ebp - 0xa28]
mov word [ebx + 0x46], ax
mov eax, dword [ebp - 0xa10]
mov word [ebx + 0x4c], ax
mov eax, dword [ebp - 0xa1c]
mov word [ebx + 0x44], ax
mov eax, dword [ebp - 0xa0c]
mov eax, dword [eax + 0x20]
mov eax, dword [eax + 0x24]
mov eax, dword [eax + 0x1c]
mov eax, dword [eax + 0x28]
mov eax, dword [eax + 0x14]
mov edx, ebx
call fcn.00425c52
jmp 0x49bd8e
mov eax, 0xfffffffc
add esp, 0xa4c
pop ebx
pop esi
pop edi
pop ebp
ret