Function at 0x49b69b
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xb0
mov edi, edx
mov dword [esp + 0xc], ecx
lea eax, [edx + 0x24]
mov dword [esp + 0xa0], eax
lea eax, [edx + 0x80]
mov dword [esp + 0x64], eax
lea eax, [edx + 0x2c]
mov dword [esp + 0xa8], eax
lea eax, [edx + 4]
mov dword [esp + 0x78], eax
lea eax, [edx + 0x70]
mov dword [esp + 0xa4], eax
lea ebp, [esp + 0x3c]
mov dword [esp], edx
movzx eax, byte [edi + 0x20]
test eax, eax
jne 0x49c086
mov bh, byte [edi + 0x21]
mov al, byte [edi + 0x22]
mov byte [esp + 0x18], al
mov al, byte [edi + 0x23]
mov byte [esp + 7], al
mov bl, byte [edi + 0x24]
mov ecx, ebp
mov edx, edi
call fcn.0049c221
cmp byte [esp + 0x3c], 4
jne 0x49b717
mov eax, dword [esp + 0x40]
jmp 0x49b728
mov ecx, dword [esp + 0x3c]
mov eax, dword [esp + 0x40]
cmp cl, 4
jne 0x49c0ba
test eax, eax
je 0x49b738
cmp byte [edi + 0x20], 0
jne 0x49b73c
mov byte [edi + 0x21], 1
jmp 0x49b73c
test bh, bh
je 0x49b763
mov edx, dword [edi + 0x1c]
mov ecx, ebp
call fcn.0049c2e2
cmp byte [esp + 0x3c], 4
je 0x49b759
mov eax, dword [esp + 0x3c]
cmp al, 4
jne 0x49c0e9
cmp byte [edi + 0x20], 0
jne 0x49b763
mov byte [edi + 0x21], 0
or bl, byte [esp + 7]
mov dword [esp + 0x10], esi
jne 0x49bc0a
cmp byte [edi + 0xb6], 0
je 0x49b781
xor ebx, ebx
jmp 0x49bbf6
mov ecx, ebp
mov edx, dword [esp + 0x64]
call fcn.004ba66d
cmp byte [esp + 0x3c], 4
je 0x49b7aa
cmp byte [esp + 0x18], 0
je 0x49b7aa
mov ecx, ebp
call fcn.0049c67e
mov dl, 4
xor ebx, ebx
jmp 0x49bbed
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x40]
cmp dl, 4
jne 0x49b843
mov dword [esp + 8], ecx
mov ecx, dword [ecx + 0x10]
call fcn.004ba285
mov ecx, dword [edi]
mov dword [esp + 0x14], eax
test eax, eax
je 0x49b85b
mov esi, edx
test ecx, ecx
je 0x49b881
and dword [esp + 0x3c], 0
mov eax, dword [esp + 0x78]
mov dword [esp + 0x44], eax
mov ecx, ebp
call fcn.004ba2e7
test eax, eax
je 0x49b869
mov ebp, edx
lea ecx, [esp + 0x2c]
mov edx, esi
push ebp
call fcn.004ba2b0
pop eax
cmp byte [esp + 0x2c], 4
jne 0x49b81e
mov ebx, dword [esp + 0x30]
mov ecx, edi
and ecx, 0xffffff00
or ecx, 4
jmp 0x49b826
mov ecx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x30]
cmp cl, 4
jne 0x49ba05
mov edi, ecx
push ebx
mov ebx, dword [sym.imp.crypt32.dll_CertFreeCertificateContext]
call ebx
push ebp
call ebx
lea ebp, [esp + 0x3c]
jmp 0x49b7ec
mov eax, edx
shrd eax, ecx, 0x10
mov dword [esp + 0x28], eax
shr ecx, 0x10
mov dword [esp + 0x24], ecx
mov bl, dh
jmp 0x49bbed
test ecx, ecx
je 0x49b865
mov eax, dword [esp + 0x78]
mov ecx, dword [eax]
mov esi, ecx
jmp 0x49b888
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x40]
call fcn.0049aa99
cmp dword [esp + 0x14], 0
lea ebp, [esp + 0x3c]
je 0x49b888
mov ecx, esi
call fcn.004ba29e
mov edi, dword [esp]
mov ecx, dword [esp + 8]
mov dword [esp + 0x3c], 0x10
mov dword [esp + 0x40], 1
mov dword [esp + 0x2c], str.1.3.6.1.5.5.7.3.1
mov dword [esp + 0x30], str.1.3.6.1.4.1.311.10.3.3
mov dword [esp + 0x34], str.2.16.840.1.113730.4.1
mov dword [esp + 0x44], 3
lea eax, [esp + 0x2c]
mov dword [esp + 0x48], eax
and dword [esp + 0x88], 0
lea eax, [esp + 0x88]
push eax
push 0
push 0xc0000001
push ebp
push esi
push 0
push ecx
push 0
call dword [sym.imp.crypt32.dll_CertGetCertificateChain]
test eax, eax
je 0x49b9e1
mov eax, dword [esp + 0x88]
mov dword [esp + 0x60], eax
mov dword [esp + 0x74], eax
cmp dword [edi], 0
je 0x49b9d7
lea ecx, [esp + 0x2c]
lea edx, [esp + 0x74]
call fcn.004babad
cmp dword [esp + 0x2c], 0
je 0x49b9d7
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x34]
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], ecx
lea eax, [esp + 0x68]
mov dword [esp + 0x88], eax
and dword [esp + 0x8c], 0
lea ecx, [esp + 0x88]
call fcn.004bac44
mov esi, edx
cmp eax, 1
jne 0x49ba4b
mov eax, dword [esp + 0x78]
mov dword [esp + 0x44], eax
and dword [esp + 0x3c], 0
mov ecx, ebp
call fcn.004ba2e7
mov edi, eax
mov ebp, edx
cmp eax, 1
jne 0x49b9a0
mov ecx, dword [ebp + 4]
mov edx, dword [ebp + 8]
push dword [esi + 8]
push dword [esi + 4]
call fcn.00417eba
pop ecx
pop edx
mov ebx, eax
push ebp
call dword [sym.imp.crypt32.dll_CertFreeCertificateContext]
test bl, bl
lea ebp, [esp + 0x3c]
je 0x49b96a
jmp 0x49b9ad
mov ecx, edi
mov edx, ebp
call fcn.0049aa99
lea ebp, [esp + 0x3c]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x40]
call fcn.0049aa99
push esi
call dword [sym.imp.crypt32.dll_CertFreeCertificateContext]
cmp edi, 1
mov edi, dword [esp]
jne 0x49b946
mov esi, 0xf10
jmp 0x49ba59
mov esi, 0xf00
jmp 0x49ba63
call sub.kernel32.dll_GetLastError
mov ecx, eax
shr ecx, 0x10
mov dword [esp + 0x24], ecx
shl eax, 0x10
mov dword [esp + 0x28], eax
xor ebx, ebx
mov dword [esp + 0x14], 0
jmp 0x49bbb3
mov eax, ecx
shrd eax, ebx, 0x10
mov dword [esp + 0x28], eax
shr ebx, 0x10
push ebp
mov edi, ecx
call dword [sym.imp.crypt32.dll_CertFreeCertificateContext]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x40]
call fcn.0049aa99
mov ecx, dword [esp + 0x14]
mov edx, esi
call fcn.0049b485
mov dword [esp + 0x24], ebx
mov eax, edi
mov dword [esp + 0x14], edi
mov bl, ah
mov edi, dword [esp]
lea ebp, [esp + 0x3c]
jmp 0x49bbb3
mov ecx, eax
mov edx, esi
call fcn.0049aa99
mov esi, 0xf00
push dword [esp + 0x6c]
call dword [sym.imp.crypt32.dll_CertFreeCertificateChain]
movaps xmm0, xmmword [0x50cc40]
movups xmmword [esp + 0x88], xmm0
mov eax, dword [edi + 0x94]
test eax, eax
je 0x49ba8c
cmp byte [edi + 0xb5], 0
jne 0x49ba8c
mov dword [esp + 0x94], eax
mov dword [esp + 0x68], 0xc
mov dword [esp + 0x6c], esi
lea eax, [esp + 0x88]
mov dword [esp + 0x70], eax
lea eax, [esp + 0x48]
xorps xmm0, xmm0
movups xmmword [eax - 8], xmm0
mov dword [esp + 0x3c], 0x14
push ebp
lea eax, [esp + 0x6c]
push eax
push dword [esp + 0x68]
push 4
call dword [sym.imp.crypt32.dll_CertVerifyCertificateChainPolicy]
test eax, eax
je 0x49badf
mov esi, dword [esp + 0x40]
test esi, esi
je 0x49bb07
mov dword [esp + 0x20], esi
and dword [esp + 0x1c], 0
jmp 0x49bb0c
call sub.kernel32.dll_GetLastError
mov ecx, eax
shr ecx, 0x10
mov dword [esp + 0x24], ecx
shl eax, 0x10
mov dword [esp + 0x28], eax
xor ebx, ebx
mov dword [esp + 0x14], 0
mov esi, dword [esp + 0x10]
jmp 0x49bbd4
mov byte [esp + 0x1c], 4
mov ecx, dword [edi + 0x88]
test ecx, ecx
je 0x49bb6c
mov edx, dword [edi + 0x8c]
call fcn.004e4f4c
mov ecx, dword [esp + 0x44]
mov edi, dword [esp + 0x48]
mov ebx, dword [esp + 0x60]
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], esi
mov dword [esp + 0x34], ecx
mov dword [esp + 0x38], edi
lea ecx, [esp + 0x2c]
push ecx
push eax
lea eax, [esp + 0x84]
push eax
call dword [edx + 0x14]
add esp, 0xc
lea ecx, [esp + 0x1c]
call fcn.0049c670
mov edx, dword [esp + 0x7c]
cmp dl, 4
jne 0x49bb92
mov edi, dword [esp]
mov esi, dword [esp + 0x10]
jmp 0x49bb83
mov edx, dword [esp + 0x1c]
cmp dl, 4
mov esi, dword [esp + 0x10]
jne 0x49bbb9
push dword [esp + 0x60]
call dword [sym.imp.crypt32.dll_CertFreeCertificateChain]
mov eax, dword [esp + 8]
push eax
call dword [sym.imp.crypt32.dll_CertFreeCertificateContext]
mov bl, 1
jmp 0x49bbf6
mov ecx, dword [esp + 0x80]
mov eax, edx
shrd eax, ecx, 0x10
mov dword [esp + 0x28], eax
shr ecx, 0x10
mov dword [esp + 0x24], ecx
mov dword [esp + 0x14], edx
mov bl, dh
mov edi, dword [esp]
mov esi, dword [esp + 0x10]
jmp 0x49bbde
mov ecx, dword [esp + 0x20]
mov eax, edx
shrd eax, ecx, 0x10
mov dword [esp + 0x28], eax
shr ecx, 0x10
mov dword [esp + 0x24], ecx
mov dword [esp + 0x14], edx
mov bl, dh
push dword [esp + 0x60]
call dword [sym.imp.crypt32.dll_CertFreeCertificateChain]
mov eax, dword [esp + 8]
push eax
call dword [sym.imp.crypt32.dll_CertFreeCertificateContext]
mov edx, dword [esp + 0x14]
cmp dl, 4
jne 0x49c10e
test bl, bl
je 0x49bc0a
cmp byte [edi + 0x20], 0
jne 0x49bc0a
mov eax, dword [esp + 0xa0]
mov byte [eax], 1
cmp byte [esp + 0x18], 0
je 0x49c006
cmp dword [edi + 0xa0], 0
je 0x49bc4d
mov ecx, ebp
mov edx, edi
call fcn.0049c306
cmp byte [esp + 0x3c], 4
jne 0x49bc34
mov eax, dword [esp + 0x40]
jmp 0x49bc45
mov ecx, dword [esp + 0x3c]
mov eax, dword [esp + 0x40]
cmp cl, 4
jne 0x49c0ba
test eax, eax
je 0x49c0c6
mov esi, dword [edi + 0x50]
push 0x18
pop ecx
push 4
pop edx
call fcn.0049a4ee
mov ebp, eax
mov ecx, dword [edi + 0x58]
mov edx, dword [edi + 0x60]
push 0x541c30
push esi
call fcn.0049c430
pop ecx
pop ecx
test eax, eax
cmove edx, eax
mov dword [ebp], edx
push 2
pop esi
mov dword [ebp + 4], esi
mov dword [ebp + 8], eax
and dword [ebp + 0xc], 0
and dword [ebp + 0x10], 0
and dword [ebp + 0x14], 0
mov dword [esp + 0x7c], ebp
mov dword [esp + 0x80], esi
mov dword [esp + 0x84], esi
mov edx, dword [edi + 0xa8]
test edx, edx
je 0x49bcf9
lea ecx, [esp + 0x68]
push dword [edi + 0xb0]
call fcn.004ba345
pop eax
mov eax, dword [esp + 0x68]
test eax, eax
je 0x49bd08
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x70]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], 0x12
mov dword [esp + 0x44], ecx
lea ecx, [esp + 0x7c]
lea ebx, [esp + 0x3c]
mov edx, ebx
call fcn.00455e52
mov ebp, dword [esp + 0x7c]
mov esi, dword [esp + 0x84]
jmp 0x49bd17
and dword [esp + 0x68], 0
mov dword [esp + 0x18], 0
jmp 0x49bd13
mov dword [esp + 0x18], 0
push 2
pop esi
lea ebx, [esp + 0x3c]
and dword [esp + 0x88], 0
mov dword [esp + 0x8c], esi
mov dword [esp + 0x90], ebp
movaps xmm0, xmmword [0x50cc50]
movups xmmword [esp + 0x3c], xmm0
mov dword [esp + 0x4c], 0x11
and dword [esp + 0x2c], 0
lea eax, [esp + 0x48]
xorps xmm0, xmm0
movups xmmword [eax + 8], xmm0
and dword [esp + 0x74], 0
mov dword [esp + 0x30], 3
mov dword [esp + 0x34], ebx
cmp byte [edi + 0xb6], 0
je 0x49bdbc
cmp byte [edi + 0xb7], 0
mov eax, 0
mov ebx, dword [esp + 0x64]
cmove eax, ebx
mov ecx, dword [edi + 0x90]
mov edx, dword [ecx + 8]
mov ecx, dword [ecx + 0xc]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ecx
push 0
lea ecx, [esp + 0x78]
push ecx
lea ecx, [esp + 0x34]
push ecx
push ebx
push 0
push 0x1011c
lea ecx, [esp + 0xa0]
push ecx
push eax
lea eax, [esp + 0x3c]
push eax
call dword [sym.imp.secur32.dll_AcceptSecurityContext]
jmp 0x49be20
cmp byte [edi + 0xb4], 0
mov ecx, dword [edi + 0x94]
mov eax, ecx
mov edx, 0
cmove eax, edx
test ecx, ecx
cmove eax, ecx
mov ecx, dword [edi + 0x90]
mov edx, dword [ecx + 8]
mov ecx, dword [ecx + 0xc]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], ecx
push 0
lea ecx, [esp + 0x78]
push ecx
lea ecx, [esp + 0x34]
push ecx
push 0
push 0
lea ecx, [esp + 0x9c]
push ecx
push 0
push 0
push 0x9819c
push eax
push dword [esp + 0x8c]
lea eax, [esp + 0x48]
push eax
call dword [sym.imp.secur32.dll_InitializeSecurityContextW]
mov ebx, eax
push 0x14
pop edi
cmp edi, 0x2c
je 0x49be3e
mov eax, dword [esp + edi + 0x3c]
test eax, eax
je 0x49be39
push eax
call dword [sym.imp.secur32.dll_FreeContextBuffer]
add edi, 0xc
jmp 0x49be25
cmp ebx, 0x80090318
je 0x49bedd
test ebx, ebx
je 0x49bf1a
cmp ebx, 0x90312
jne 0x49c102
mov edi, dword [esp]
mov byte [edi + 0xb7], 0
mov ecx, ebp
mov edx, esi
push 0x541c60
call fcn.0049c445
pop ecx
cmp dword [eax + 4], 5
mov edx, dword [edi + 0x50]
jne 0x49be97
mov ecx, ebp
mov edi, edx
mov edx, esi
push 0x541c70
call fcn.0049c445
mov edx, edi
add esp, 4
sub edx, dword [eax]
mov esi, dword [esp + 0x3c]
mov ebx, dword [esp + 0x44]
mov edi, dword [esp]
mov ecx, edi
call fcn.0049c45f
mov eax, dword [edi + 0x50]
xor ecx, ecx
or eax, dword [edi + 0x54]
sete cl
mov dword [edi + 0xa0], ecx
test esi, esi
mov edx, ebx
mov eax, str.OutOfRangeImpossibleNotEnoughInvalidTooShortTooLongBadFormat__NonexhaustiveEmpty
cmove edx, eax
mov ecx, dword [esp + 0xa4]
push esi
call fcn.004ebac3
pop eax
push ebx
call dword [sym.imp.secur32.dll_FreeContextBuffer]
jmp 0x49bf11
mov ecx, ebp
mov edx, esi
push 0x541c80
call fcn.0049c445
pop ecx
cmp dword [eax + 4], 4
mov eax, 1
jne 0x49bf08
mov ecx, ebp
mov edx, esi
push 0x541c90
call fcn.0049c445
pop ecx
mov eax, dword [eax]
mov edi, dword [esp]
mov dword [edi + 0xa0], eax
mov esi, dword [esp + 0x10]
jmp 0x49bfe2
mov ecx, ebp
mov edx, esi
push 0x541c40
call fcn.0049c445
pop ecx
cmp dword [eax + 4], 5
mov edi, dword [esp]
mov ebx, dword [edi + 0x50]
jne 0x49bf46
mov ecx, ebp
mov edx, esi
push 0x541c50
call fcn.0049c445
pop ecx
sub ebx, dword [eax]
mov esi, dword [esp + 0x44]
test esi, esi
je 0x49bf59
mov eax, dword [esp + 0x3c]
mov dword [esp + 0xac], eax
mov ecx, edi
mov edx, ebx
call fcn.0049c45f
mov eax, dword [edi + 0x50]
mov ecx, dword [edi + 0x54]
xor edx, edx
mov edi, eax
or edi, ecx
mov edi, dword [esp]
sete dl
mov dword [edi + 0xa0], edx
test esi, esi
mov edx, dword [esp + 0x10]
cmovne edx, esi
mov esi, edx
je 0x49bfb5
mov ebx, dword [esp + 0xac]
test ebx, ebx
mov edx, esi
mov eax, str.OutOfRangeImpossibleNotEnoughInvalidTooShortTooLongBadFormat__NonexhaustiveEmpty
cmove edx, eax
mov ecx, dword [esp + 0xa4]
push ebx
call fcn.004ebac3
pop eax
push esi
call dword [sym.imp.secur32.dll_FreeContextBuffer]
mov eax, dword [edi + 0x50]
mov ecx, dword [edi + 0x54]
or eax, ecx
je 0x49bfd8
lea ecx, [esp + 0x1c]
mov edx, edi
call fcn.0049c4aa
cmp byte [esp + 0x1c], 4
je 0x49bfd8
mov ebx, dword [esp + 0x1c]
cmp bl, 4
jne 0x49c13e
cmp byte [edi + 0x20], 0
jne 0x49bfe2
mov byte [edi + 0x22], 0
mov edx, dword [esp + 0x70]
mov ecx, dword [esp + 0x18]
call fcn.0049c5f9
mov edx, dword [esp + 0x80]
mov ecx, ebp
call fcn.004f2ec8
lea ebp, [esp + 0x3c]
jmp 0x49b6e1
mov al, 2
cmp byte [esp + 7], 0
jne 0x49c052
mov ecx, ebp
mov edx, dword [esp + 0x64]
call fcn.004ba629
cmp dword [esp + 0x3c], 0
mov eax, dword [esp + 0x40]
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0x44]
mov dword [esp + 0x98], eax
jne 0x49c18f
lea ecx, [esp + 0x48]
mov eax, dword [ecx + 8]
mov dword [esp + 0x34], eax
movsd xmm0, qword [ecx]
movsd qword [esp + 0x2c], xmm0
mov al, 1
mov byte [edi + 0x20], al
mov eax, dword [esp + 0x9c]
mov dword [edi + 0x24], eax
mov eax, dword [esp + 0x98]
mov dword [edi + 0x28], eax
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0xa8]
mov dword [ecx + 8], eax
movsd xmm0, qword [esp + 0x2c]
movsd qword [ecx], xmm0
jmp 0x49b6e1
cmp eax, 1
jne 0x49c0ae
mov edx, dword [esp + 0xa0]
mov eax, dword [edx + 0x10]
mov ecx, dword [esp + 0xc]
mov dword [ecx + 0x14], eax
movups xmm0, xmmword [edx]
movups xmmword [ecx + 4], xmm0
mov dword [ecx], 1
jmp 0x49c184
mov eax, dword [esp + 0xc]
and dword [eax], 0
jmp 0x49c184
mov edx, dword [esp + 0xc]
mov dword [edx + 4], ecx
mov dword [edx + 8], eax
jmp 0x49c0f7
mov esi, dword [esp + 0xc]
lea ecx, [esi + 4]
push 0x25
pop edx
push 0x1f
push str.unexpected_EOF_during_handshakeassertion_failed:_size___nread
call fcn.004c53c3
pop eax
pop ecx
mov dword [esi], 2
jmp 0x49c184
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0xc]
mov dword [edx + 4], eax
mov dword [edx + 8], ecx
mov dword [edx], 2
jmp 0x49c184
mov esi, ebx
shr esi, 8
shl ebx, 0x18
xor edi, edi
jmp 0x49c14b
mov ecx, dword [esp + 0x28]
mov eax, edx
mov edx, dword [esp + 0x24]
shld edx, ecx, 0x10
shl ecx, 0x10
movzx eax, al
or eax, ecx
movzx ecx, bl
shl ecx, 8
or ecx, eax
mov eax, dword [esp + 0xc]
mov dword [eax + 8], edx
mov dword [eax + 4], ecx
mov dword [eax], 2
jmp 0x49c184
mov esi, dword [esp + 0x20]
mov edi, ebx
shrd ebx, esi, 8
shr esi, 8
mov edx, dword [esp + 0x70]
mov ecx, dword [esp + 0x18]
call fcn.0049c5f9
mov edx, dword [esp + 0x80]
mov ecx, ebp
call fcn.004f2ec8
shld esi, ebx, 8
shl ebx, 8
mov eax, edi
movzx eax, al
or eax, ebx
mov ecx, dword [esp + 0xc]
mov dword [ecx + 8], esi
mov dword [ecx + 4], eax
mov dword [ecx], 2
add esp, 0xb0
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x9c]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x98]
mov dword [eax + 8], ecx
jmp 0x49c136