Function at 0x49d470
Capabilities:
Check for software breakpoints

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x5c
mov dword [ebp - 0x60], str.application_x_pkcs7_
mov edi, dword [ebp + 8]
test dword [ebp + 0x14], 0x400
jne 0x49d493
mov dword [ebp - 0x60], str.application_pkcs7_
mov dword [ebp - 0x5c], 0x4d62e0
test dword [ebp + 0x14], 0x800
jne 0x49d4aa
mov dword [ebp - 0x5c], 0x4d6392
test byte [ebp + 0x14], 0x40
je 0x49d602
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x49d602
lea esi, [ebp - 0x3d]
push eax
push eax
push 0x20
push esi
call fcn.00427940
mov edx, 1
add esp, 0x10
jmp 0x49d4e3
add eax, 0x30
mov byte [edx + esi - 1], al
inc edx
cmp edx, 0x21
je 0x49d4fb
mov al, byte [edx + esi - 1]
and eax, 0xf
cmp al, 9
jle 0x49d4d6
add eax, 0x37
mov byte [edx + esi - 1], al
inc edx
cmp edx, 0x21
jne 0x49d4e3
mov byte [ebp - 0x1d], 0
push eax
mov eax, dword [ebp - 0x5c]
push eax
push str.MIME_Version:_1.0_s
push edi
call fcn.004302c0
pop ebx
pop eax
push str.Content_Type:_multipart_signed_
push edi
call fcn.004302c0
add esp, 0xc
mov ecx, dword [ebp - 0x60]
xor ebx, ebx
push ecx
push str._protocol__ssignature__
push edi
call fcn.004302c0
pop eax
pop edx
push str._micalg_
push edi
call fcn.0041f790
add esp, 0x10
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x58], 0
jmp 0x49d5cc
push eax
push eax
mov ebx, dword [ebp - 0x54]
push ebx
mov ecx, dword [ebp + 0x20]
push ecx
call fcn.0042ea80
pop edx
mov eax, dword [eax]
push eax
call fcn.004305c0
mov dword [esp], eax
mov ebx, eax
call fcn.004306e0
mov dword [esp], eax
call fcn.0043a870
add esp, 0x10
test eax, eax
je 0x49d6f0
mov eax, dword [eax + 0x48]
test eax, eax
je 0x49d6f0
lea edx, [ebp - 0x10]
push edx
push 0
push 2
push 0
call eax
add esp, 0x10
test eax, eax
jle 0x49d6ea
push ebx
push ebx
mov ecx, dword [ebp - 0x10]
mov ebx, 1
push ecx
push edi
call fcn.0041f790
pop edx
mov eax, dword [ebp - 0x10]
push eax
call fcn.00425260
add esp, 0x10
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
sub esp, 0xc
mov eax, dword [ebp + 0x20]
push eax
call fcn.0042ea60
add esp, 0x10
cmp dword [ebp - 0x54], eax
jge 0x49d765
test ebx, ebx
je 0x49d550
push eax
push 1
push 0x4d63eb
push edi
call fcn.0041f8a0
add esp, 0x10
jmp 0x49d550
cmp dword [ebp + 0x18], 0x17
je 0x49da0d
cmp dword [ebp + 0x18], 0x16
je 0x49d952
cmp dword [ebp + 0x18], 0x312
jne 0x49d89a
mov esi, str.smime.p7z
mov ebx, str.compressed_data
push eax
mov ecx, dword [ebp - 0x5c]
push ecx
push str.MIME_Version:_1.0_s
push edi
call fcn.004302c0
pop eax
pop edx
push str.Content_Disposition:_attachment_
push edi
call fcn.004302c0
mov eax, dword [ebp - 0x5c]
push eax
push esi
push str._filename__s__s
push edi
call fcn.004302c0
add esp, 0x1c
mov eax, dword [ebp - 0x60]
push eax
push str.Content_Type:__smime_
push edi
call fcn.004302c0
add esp, 0xc
push ebx
push str._smime_type_s_
push edi
call fcn.004302c0
add esp, 0x10
mov ebx, dword [ebp - 0x5c]
push ebx
push esi
push str._name__s__s
push edi
call fcn.004302c0
mov ecx, dword [ebp - 0x5c]
push ecx
mov edx, dword [ebp - 0x5c]
push edx
push str.Content_Transfer_Encoding:_base64_s_s
push edi
call fcn.004302c0
add esp, 0x18
mov eax, dword [ebp + 0x24]
push eax
mov eax, dword [ebp + 0x14]
push eax
mov eax, edi
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0xc]
call fcn.0049d3d0
add esp, 0x10
test eax, eax
jne 0x49d6ca
xor eax, eax
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
push eax
mov eax, dword [ebp - 0x5c]
push eax
push 0x4d65de
push edi
call fcn.004302c0
mov eax, 1
add esp, 0x10
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
cmp eax, 0xfffffffe
jne 0x49d765
nop
cmp ebx, 0x2a0
je 0x49d904
jg 0x49d73b
cmp ebx, 4
je 0x49d938
cmp ebx, 0x40
je 0x49d91e
mov ecx, dword [ebp - 0x58]
xor ebx, ebx
test ecx, ecx
jne 0x49d5c5
push edx
push edx
push str.unknown
push edi
call fcn.0041f790
mov bl, 1
add esp, 0x10
mov dword [ebp - 0x58], 1
jmp 0x49d5c5
cmp ebx, 0x2a2
je 0x49d8ea
jl 0x49d880
cmp ebx, 0x329
jne 0x49d710
push ebx
push ebx
push str.gostr3411_94
push edi
call fcn.0041f790
add esp, 0x10
sub esp, 0xc
mov eax, dword [ebp - 0x5c]
push eax
mov eax, dword [ebp - 0x5c]
push eax
push esi
push str.___boundary______s__s_s
push edi
call fcn.004302c0
add esp, 0x20
mov eax, dword [ebp - 0x5c]
push eax
mov eax, dword [ebp - 0x5c]
push eax
push str.This_is_an_S_MIME_signed_message_s_s
push edi
call fcn.004302c0
mov ebx, dword [ebp - 0x5c]
push ebx
push esi
push str._______s_s
push edi
call fcn.004302c0
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x10], eax
mov edx, dword [ebp + 0x24]
mov eax, dword [ebp + 0x14]
add esp, 0x20
and eax, 0x8040
mov ebx, dword [edx + 0x10]
cmp eax, 0x40
je 0x49d96e
push ecx
mov edx, dword [ebp + 0x14]
push edx
push edi
mov eax, dword [ebp + 0x10]
push eax
call fcn.0049cac0
add esp, 0x10
sub esp, 0xc
mov eax, dword [ebp - 0x5c]
push eax
push esi
mov eax, dword [ebp - 0x5c]
push eax
push str._s_______s_s
push edi
call fcn.004302c0
add esp, 0x1c
mov eax, dword [ebp - 0x60]
push eax
push str.Content_Type:__ssignature_
push edi
call fcn.004302c0
add esp, 0xc
mov ebx, dword [ebp - 0x5c]
push ebx
push str._name_smime.p7s__s
push edi
call fcn.004302c0
add esp, 0xc
mov ecx, dword [ebp - 0x5c]
push ecx
push str.Content_Transfer_Encoding:_base64_s
push edi
call fcn.004302c0
pop eax
pop edx
push str.Content_Disposition:_attachment_
push edi
call fcn.004302c0
mov eax, dword [ebp - 0x5c]
push eax
mov ebx, dword [ebp - 0x5c]
push ebx
push str._filename_smime.p7s__s_s
push edi
call fcn.004302c0
add esp, 0x18
mov ecx, dword [ebp + 0x24]
mov eax, edi
push ecx
push 0
mov edx, dword [ebp + 0xc]
xor ecx, ecx
call fcn.0049d3d0
pop eax
mov eax, dword [ebp - 0x5c]
pop edx
push eax
mov eax, dword [ebp - 0x5c]
push eax
push esi
mov eax, dword [ebp - 0x5c]
push eax
push str._s_______s___s_s
push edi
call fcn.004302c0
mov eax, 1
add esp, 0x20
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
push eax
push eax
push str.sha_384
push edi
call fcn.0041f790
mov ebx, 1
add esp, 0x10
jmp 0x49d5c5
push eax
mov eax, dword [ebp - 0x5c]
push eax
push str.MIME_Version:_1.0_s
push edi
call fcn.004302c0
pop ebx
pop esi
push str.Content_Disposition:_attachment_
push edi
call fcn.004302c0
mov ecx, dword [ebp - 0x5c]
push ecx
push str.smime.p7m
push str._filename__s__s
push edi
call fcn.004302c0
add esp, 0x1c
mov edx, dword [ebp - 0x60]
mov esi, str.smime.p7m
push edx
push str.Content_Type:__smime_
push edi
call fcn.004302c0
add esp, 0x10
jmp 0x49d67e
push eax
push eax
push str.sha_512
push edi
call fcn.0041f790
mov ebx, 1
add esp, 0x10
jmp 0x49d5c5
push eax
push eax
push str.sha_256
push edi
call fcn.0041f790
mov ebx, 1
add esp, 0x10
jmp 0x49d5c5
push eax
push eax
push str.sha1
push edi
call fcn.0041f790
mov ebx, 1
add esp, 0x10
jmp 0x49d5c5
push eax
push eax
push 0x4d63f2
push edi
call fcn.0041f790
mov ebx, 1
add esp, 0x10
jmp 0x49d5c5
cmp dword [ebp + 0x1c], 0xcc
jne 0x49da1c
mov esi, str.smime.p7m
mov ebx, str.signed_receipt
jmp 0x49d62d
test ebx, ebx
je 0x49da3e
mov eax, dword [ebx + 0x10]
test eax, eax
je 0x49da3e
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
push eax
lea edx, [ebp - 0x10]
mov eax, dword [ebp + 0x24]
push eax
push edx
push 0xc
call dword [ebx + 0x10]
add esp, 0x10
test eax, eax
jle 0x49d6c0
push eax
mov eax, dword [ebp + 0x14]
push eax
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
call fcn.0049cac0
lea eax, [ebp - 0x1c]
push eax
mov edx, dword [ebp + 0x24]
push edx
lea edx, [ebp - 0x10]
push edx
push 0xd
call dword [ebx + 0x10]
mov ebx, dword [ebp - 0x18]
add esp, 0x20
mov dword [ebp - 0x50], eax
cmp edi, ebx
je 0x49d9fd
sub esp, 0xc
push ebx
call fcn.0041f5a0
mov ebx, eax
pop eax
mov eax, dword [ebp - 0x18]
push eax
call fcn.0041fa20
add esp, 0x10
mov dword [ebp - 0x18], ebx
cmp edi, ebx
jne 0x49d9de
mov eax, dword [ebp - 0x50]
test eax, eax
jg 0x49d7d4
jmp 0x49d6c0
mov esi, str.smime.p7m
mov ebx, str.enveloped_data
jmp 0x49d62d
sub esp, 0xc
mov eax, dword [ebp + 0x20]
push eax
call fcn.0042ea60
add esp, 0x10
test eax, eax
js 0x49da66
mov esi, str.smime.p7m
mov ebx, str.signed_data
jmp 0x49d62d
sub esp, 0xc
push 0x18a
push str.external_openssl_crypto_asn1_asn_mime.c
push 0xca
push 0xd6
push 0xd
call fcn.00424900
xor eax, eax
add esp, 0x20
jmp 0x49d6c2
mov esi, str.smime.p7m
mov ebx, str.certs_only
jmp 0x49d62d