Function at 0x49c7aa
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xb4
mov ebp, edx
mov dword [esp + 4], ecx
lea eax, [edx + 0xcc]
mov dword [esp + 0x9c], eax
lea eax, [edx + 8]
mov dword [esp + 0xb0], eax
lea eax, [edx + 0x128]
mov dword [esp + 0x60], eax
lea eax, [edx + 0xd4]
mov dword [esp + 0xa4], eax
lea eax, [edx + 4]
mov dword [esp + 0x74], eax
lea eax, [edx + 0x118]
mov dword [esp + 0xa0], eax
lea edi, [esp + 0x28]
mov dword [esp + 0x10], edx
movzx eax, byte [ebp + 0xc8]
test eax, eax
jne 0x49d1e7
mov bh, byte [ebp + 0xc9]
mov al, byte [ebp + 0xca]
mov byte [esp + 8], al
mov al, byte [ebp + 0xcb]
mov byte [esp + 3], al
mov bl, byte [ebp + 0xcc]
mov ecx, edi
mov edx, ebp
call fcn.0049d395
cmp byte [esp + 0x28], 4
jne 0x49c849
mov eax, dword [esp + 0x2c]
jmp 0x49c85a
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
cmp cl, 4
jne 0x49d21b
test eax, eax
je 0x49c870
cmp byte [ebp + 0xc8], 0
jne 0x49c874
mov byte [ebp + 0xc9], 1
jmp 0x49c874
test bh, bh
je 0x49c8a5
mov ecx, edi
mov edx, dword [esp + 0xb0]
call fcn.0049d44e
cmp byte [esp + 0x28], 4
je 0x49c895
mov eax, dword [esp + 0x28]
cmp al, 4
jne 0x49d24a
cmp byte [ebp + 0xc8], 0
jne 0x49c8a5
mov byte [ebp + 0xc9], 0
or bl, byte [esp + 3]
jne 0x49cd3c
cmp byte [ebp + 0x15e], 0
je 0x49c8bf
xor ebx, ebx
jmp 0x49cd25
mov ecx, edi
mov edx, dword [esp + 0x60]
call fcn.004ba66d
cmp byte [esp + 0x28], 4
je 0x49c8e8
cmp byte [esp + 8], 0
je 0x49c8e8
mov ecx, edi
call fcn.0049c67e
mov dl, 4
xor ebx, ebx
jmp 0x49cd1c
mov edx, dword [esp + 0x28]
mov ecx, dword [esp + 0x2c]
cmp dl, 4
jne 0x49c980
mov dword [esp + 0x24], ecx
mov ecx, dword [ecx + 0x10]
call fcn.004ba285
mov ecx, dword [ebp]
test eax, eax
je 0x49c998
mov esi, edx
test ecx, ecx
je 0x49c9c2
mov dword [esp + 0xc], eax
and dword [esp + 0x28], 0
mov eax, dword [esp + 0x74]
mov dword [esp + 0x30], eax
lea ecx, [esp + 0x28]
call fcn.004ba2e7
test eax, eax
je 0x49c9aa
mov ebp, edx
lea ecx, [esp + 0x4c]
mov edx, esi
push ebp
call fcn.004ba2b0
pop eax
cmp byte [esp + 0x4c], 4
jne 0x49c95f
mov ebx, dword [esp + 0x50]
mov ecx, edi
and ecx, 0xffffff00
or ecx, 4
jmp 0x49c967
mov ecx, dword [esp + 0x4c]
mov ebx, dword [esp + 0x50]
cmp cl, 4
jne 0x49cb3c
mov edi, ecx
push ebx
mov ebx, dword [sym.imp.crypt32.dll_CertFreeCertificateContext]
call ebx
push ebp
call ebx
jmp 0x49c92b
mov eax, edx
shrd eax, ecx, 0x10
mov dword [esp + 0x20], eax
shr ecx, 0x10
mov dword [esp + 0x1c], ecx
mov bl, dh
jmp 0x49cd1c
test ecx, ecx
lea edi, [esp + 0x28]
je 0x49c9a6
mov eax, dword [esp + 0x74]
mov ecx, dword [eax]
mov esi, ecx
jmp 0x49c9cd
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
call fcn.0049aa99
cmp dword [esp + 0xc], 0
mov ebp, dword [esp + 0x10]
je 0x49c9c9
mov ecx, esi
call fcn.004ba29e
lea edi, [esp + 0x28]
mov dword [esp + 0x28], 0x10
mov dword [esp + 0x2c], 1
mov dword [esp + 0x4c], str.1.3.6.1.5.5.7.3.1
mov dword [esp + 0x50], str.1.3.6.1.4.1.311.10.3.3
mov dword [esp + 0x54], str.2.16.840.1.113730.4.1
mov dword [esp + 0x30], 3
lea eax, [esp + 0x4c]
mov dword [esp + 0x34], eax
and dword [esp + 0x84], 0
lea eax, [esp + 0x84]
push eax
push 0
push 0xc0000001
push edi
push esi
push 0
mov esi, dword [esp + 0x3c]
push esi
push 0
call dword [sym.imp.crypt32.dll_CertGetCertificateChain]
test eax, eax
je 0x49cb18
mov eax, dword [esp + 0x84]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x70], eax
cmp dword [ebp], 0
je 0x49cb0e
lea ecx, [esp + 0x4c]
lea edx, [esp + 0x70]
call fcn.004babad
cmp dword [esp + 0x4c], 0
je 0x49cb0e
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], ecx
lea eax, [esp + 0x64]
mov dword [esp + 0x84], eax
and dword [esp + 0x88], 0
lea ecx, [esp + 0x84]
call fcn.004bac44
mov esi, edx
cmp eax, 1
jne 0x49cb7f
mov eax, dword [esp + 0x74]
mov dword [esp + 0x30], eax
and dword [esp + 0x28], 0
lea ecx, [esp + 0x28]
call fcn.004ba2e7
mov edi, eax
mov ebp, edx
cmp eax, 1
jne 0x49cae1
mov ecx, dword [ebp + 4]
mov edx, dword [ebp + 8]
push dword [esi + 8]
push dword [esi + 4]
call fcn.00417eba
pop ecx
pop edx
mov ebx, eax
push ebp
call dword [sym.imp.crypt32.dll_CertFreeCertificateContext]
test bl, bl
je 0x49caad
jmp 0x49caea
mov ecx, edi
mov edx, ebp
call fcn.0049aa99
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
call fcn.0049aa99
push esi
call dword [sym.imp.crypt32.dll_CertFreeCertificateContext]
cmp edi, 1
mov ebp, dword [esp + 0x10]
jne 0x49ca89
mov esi, 0xf10
jmp 0x49cb8d
mov esi, 0xf00
jmp 0x49cb9b
call sub.kernel32.dll_GetLastError
mov ecx, eax
shr ecx, 0x10
mov dword [esp + 0x1c], ecx
shl eax, 0x10
mov dword [esp + 0x20], eax
xor ebx, ebx
mov dword [esp + 0xc], 0
jmp 0x49cd11
mov eax, ecx
shrd eax, ebx, 0x10
mov dword [esp + 0x20], eax
shr ebx, 0x10
push ebp
mov edi, ecx
call dword [sym.imp.crypt32.dll_CertFreeCertificateContext]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x2c]
call fcn.0049aa99
mov ecx, dword [esp + 0xc]
mov edx, esi
call fcn.0049b485
mov dword [esp + 0x1c], ebx
mov eax, edi
mov dword [esp + 0xc], edi
mov bl, ah
mov ebp, dword [esp + 0x10]
jmp 0x49cce2
mov ecx, eax
mov edx, esi
call fcn.0049aa99
mov esi, 0xf00
lea edi, [esp + 0x28]
push dword [esp + 0x68]
call dword [sym.imp.crypt32.dll_CertFreeCertificateChain]
movaps xmm0, xmmword [0x50cc40]
movups xmmword [esp + 0x84], xmm0
mov eax, dword [ebp + 0x13c]
test eax, eax
je 0x49cbc4
cmp byte [ebp + 0x15d], 0
jne 0x49cbc4
mov dword [esp + 0x90], eax
mov dword [esp + 0x64], 0xc
mov dword [esp + 0x68], esi
lea eax, [esp + 0x84]
mov dword [esp + 0x6c], eax
lea eax, [esp + 0x34]
xorps xmm0, xmm0
movups xmmword [eax - 8], xmm0
mov dword [esp + 0x28], 0x14
push edi
lea eax, [esp + 0x68]
push eax
push dword [esp + 0x64]
push 4
call dword [sym.imp.crypt32.dll_CertVerifyCertificateChainPolicy]
test eax, eax
je 0x49cc17
mov esi, dword [esp + 0x2c]
test esi, esi
je 0x49cc3f
mov dword [esp + 0x18], esi
and dword [esp + 0x14], 0
jmp 0x49cc44
call sub.kernel32.dll_GetLastError
mov ecx, eax
shr ecx, 0x10
mov dword [esp + 0x1c], ecx
shl eax, 0x10
mov dword [esp + 0x20], eax
xor ebx, ebx
mov dword [esp + 0xc], 0
mov esi, dword [esp + 0x24]
jmp 0x49cd07
mov byte [esp + 0x14], 4
mov ecx, dword [ebp + 0x130]
test ecx, ecx
je 0x49cca5
mov edx, dword [ebp + 0x134]
call fcn.004e4f4c
mov ecx, dword [esp + 0x30]
mov edi, dword [esp + 0x34]
mov ebx, dword [esp + 0x5c]
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], esi
mov dword [esp + 0x54], ecx
mov dword [esp + 0x58], edi
lea ecx, [esp + 0x4c]
push ecx
push eax
lea eax, [esp + 0x80]
push eax
call dword [edx + 0x14]
add esp, 0xc
lea ecx, [esp + 0x14]
call fcn.0049c670
mov edx, dword [esp + 0x78]
cmp dl, 4
jne 0x49ccc7
lea edi, [esp + 0x28]
mov esi, dword [esp + 0x24]
jmp 0x49ccbc
mov edx, dword [esp + 0x14]
cmp dl, 4
mov esi, dword [esp + 0x24]
jne 0x49ccec
push dword [esp + 0x5c]
call dword [sym.imp.crypt32.dll_CertFreeCertificateChain]
push esi
call dword [sym.imp.crypt32.dll_CertFreeCertificateContext]
mov bl, 1
jmp 0x49cd25
mov ecx, dword [esp + 0x7c]
mov eax, edx
shrd eax, ecx, 0x10
mov dword [esp + 0x20], eax
shr ecx, 0x10
mov dword [esp + 0x1c], ecx
mov dword [esp + 0xc], edx
mov bl, dh
lea edi, [esp + 0x28]
mov esi, dword [esp + 0x24]
jmp 0x49cd11
mov ecx, dword [esp + 0x18]
mov eax, edx
shrd eax, ecx, 0x10
mov dword [esp + 0x20], eax
shr ecx, 0x10
mov dword [esp + 0x1c], ecx
mov dword [esp + 0xc], edx
mov bl, dh
push dword [esp + 0x5c]
call dword [sym.imp.crypt32.dll_CertFreeCertificateChain]
push esi
call dword [sym.imp.crypt32.dll_CertFreeCertificateContext]
mov edx, dword [esp + 0xc]
cmp dl, 4
jne 0x49d26f
test bl, bl
je 0x49cd3c
cmp byte [ebp + 0xc8], 0
jne 0x49cd3c
mov eax, dword [esp + 0x9c]
mov byte [eax], 1
cmp byte [esp + 8], 0
je 0x49d15e
cmp dword [ebp + 0x148], 0
je 0x49cd7f
mov ecx, edi
mov edx, ebp
call fcn.0049d4a1
cmp byte [esp + 0x28], 4
jne 0x49cd66
mov eax, dword [esp + 0x2c]
jmp 0x49cd77
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
cmp cl, 4
jne 0x49d21b
test eax, eax
je 0x49d227
mov esi, dword [ebp + 0xf8]
push 0x18
pop ecx
push 4
pop edx
call fcn.0049a4ee
mov ebx, eax
mov ecx, dword [ebp + 0x100]
mov edx, dword [ebp + 0x108]
push 0x541c30
push esi
call fcn.0049c430
pop ecx
pop ecx
test eax, eax
cmove edx, eax
mov dword [ebx], edx
push 2
pop esi
mov dword [ebx + 4], esi
mov dword [ebx + 8], eax
and dword [ebx + 0xc], 0
and dword [ebx + 0x10], 0
and dword [ebx + 0x14], 0
mov dword [esp + 0x78], ebx
mov dword [esp + 0x7c], esi
mov dword [esp + 0x80], esi
mov edx, dword [ebp + 0x150]
test edx, edx
je 0x49ce2c
lea ecx, [esp + 0x64]
push dword [ebp + 0x158]
call fcn.004ba345
pop eax
mov eax, dword [esp + 0x64]
test eax, eax
je 0x49ce3b
mov dword [esp + 8], eax
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x6c]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], 0x12
mov dword [esp + 0x30], ecx
lea ecx, [esp + 0x78]
mov edx, edi
call fcn.00455e52
mov ebx, dword [esp + 0x78]
mov esi, dword [esp + 0x80]
jmp 0x49ce46
and dword [esp + 0x64], 0
mov dword [esp + 8], 0
jmp 0x49ce46
mov dword [esp + 8], 0
push 2
pop esi
and dword [esp + 0x84], 0
mov dword [esp + 0x88], esi
mov dword [esp + 0x8c], ebx
movaps xmm0, xmmword [0x50cc50]
movups xmmword [esp + 0x28], xmm0
mov dword [esp + 0x38], 0x11
and dword [esp + 0x4c], 0
lea eax, [esp + 0x34]
xorps xmm0, xmm0
movups xmmword [eax + 8], xmm0
and dword [esp + 0x70], 0
mov dword [esp + 0x50], 3
mov dword [esp + 0x54], edi
cmp byte [ebp + 0x15e], 0
je 0x49ceeb
cmp byte [ebp + 0x15f], 0
mov eax, 0
mov edi, dword [esp + 0x60]
cmove eax, edi
mov ecx, dword [ebp + 0x138]
mov edx, dword [ecx + 8]
mov ecx, dword [ecx + 0xc]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], ecx
push 0
lea ecx, [esp + 0x74]
push ecx
lea ecx, [esp + 0x54]
push ecx
push edi
push 0
push 0x1011c
lea ecx, [esp + 0x9c]
push ecx
push eax
lea eax, [esp + 0x34]
push eax
call dword [sym.imp.secur32.dll_AcceptSecurityContext]
jmp 0x49cf4f
cmp byte [ebp + 0x15c], 0
mov ecx, dword [ebp + 0x13c]
mov eax, ecx
mov edx, 0
cmove eax, edx
test ecx, ecx
cmove eax, ecx
mov ecx, dword [ebp + 0x138]
mov edx, dword [ecx + 8]
mov ecx, dword [ecx + 0xc]
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], ecx
push 0
lea ecx, [esp + 0x74]
push ecx
lea ecx, [esp + 0x54]
push ecx
push 0
push 0
lea ecx, [esp + 0x98]
push ecx
push 0
push 0
push 0x9819c
push eax
push dword [esp + 0x88]
lea eax, [esp + 0x40]
push eax
call dword [sym.imp.secur32.dll_InitializeSecurityContextW]
mov ebp, eax
push 0x14
pop edi
cmp edi, 0x2c
je 0x49cf6d
mov eax, dword [esp + edi + 0x28]
test eax, eax
je 0x49cf68
push eax
call dword [sym.imp.secur32.dll_FreeContextBuffer]
add edi, 0xc
jmp 0x49cf54
cmp ebp, 0x80090318
je 0x49d013
test ebp, ebp
je 0x49d055
cmp ebp, 0x90312
jne 0x49d263
mov edi, dword [esp + 0x10]
mov byte [edi + 0x15f], 0
mov ecx, ebx
mov edx, esi
push 0x541c60
call fcn.0049c445
pop ecx
cmp dword [eax + 4], 5
mov ebp, dword [edi + 0xf8]
jne 0x49cfc4
mov ecx, ebx
mov edx, esi
push 0x541c70
call fcn.0049c445
pop ecx
sub ebp, dword [eax]
mov edi, dword [esp + 0x28]
mov esi, dword [esp + 0x30]
mov ecx, dword [esp + 0x10]
mov edx, ebp
mov ebp, ecx
call fcn.0049d5de
mov eax, dword [ebp + 0xf8]
xor ecx, ecx
or eax, dword [ebp + 0xfc]
sete cl
mov dword [ebp + 0x148], ecx
test edi, edi
mov edx, esi
mov eax, str.OutOfRangeImpossibleNotEnoughInvalidTooShortTooLongBadFormat__NonexhaustiveEmpty
cmove edx, eax
mov ecx, dword [esp + 0xa0]
push edi
call fcn.004ebac3
pop eax
push esi
call dword [sym.imp.secur32.dll_FreeContextBuffer]
jmp 0x49d048
mov ecx, ebx
mov edx, esi
push 0x541c80
call fcn.0049c445
pop ecx
cmp dword [eax + 4], 4
mov eax, 1
jne 0x49d03e
mov ecx, ebx
mov edx, esi
push 0x541c90
call fcn.0049c445
pop ecx
mov eax, dword [eax]
mov ebp, dword [esp + 0x10]
mov dword [ebp + 0x148], eax
lea edi, [esp + 0x28]
mov esi, dword [esp + 8]
jmp 0x49d143
mov ecx, ebx
mov edx, esi
push 0x541c40
call fcn.0049c445
pop ecx
cmp dword [eax + 4], 5
mov eax, dword [esp + 0x10]
mov ebp, dword [eax + 0xf8]
jne 0x49d085
mov ecx, ebx
mov edx, esi
push 0x541c50
call fcn.0049c445
pop ecx
sub ebp, dword [eax]
mov esi, dword [esp + 0x30]
test esi, esi
je 0x49d098
mov eax, dword [esp + 0x28]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0x10]
mov edx, ebp
mov ebp, ecx
call fcn.0049d5de
mov eax, dword [ebp + 0xf8]
mov ecx, dword [ebp + 0xfc]
xor edx, edx
mov edi, eax
or edi, ecx
sete dl
mov dword [ebp + 0x148], edx
test esi, esi
mov edi, dword [esp + 0xac]
cmovne edi, esi
je 0x49d102
mov esi, dword [esp + 0xa8]
test esi, esi
mov edx, edi
mov eax, str.OutOfRangeImpossibleNotEnoughInvalidTooShortTooLongBadFormat__NonexhaustiveEmpty
cmove edx, eax
mov ecx, dword [esp + 0xa0]
push esi
call fcn.004ebac3
pop eax
push edi
call dword [sym.imp.secur32.dll_FreeContextBuffer]
mov eax, dword [ebp + 0xf8]
mov ecx, dword [ebp + 0xfc]
mov dword [esp + 0xac], edi
or eax, ecx
lea edi, [esp + 0x28]
mov esi, dword [esp + 8]
je 0x49d133
lea ecx, [esp + 0x14]
mov edx, ebp
call fcn.0049d635
cmp byte [esp + 0x14], 4
je 0x49d133
mov eax, dword [esp + 0x14]
cmp al, 4
jne 0x49d29f
cmp byte [ebp + 0xc8], 0
jne 0x49d143
mov byte [ebp + 0xca], 0
mov edx, dword [esp + 0x6c]
mov ecx, esi
call fcn.0049c5f9
mov edx, dword [esp + 0x7c]
mov ecx, ebx
call fcn.004f2ec8
jmp 0x49c804
mov al, 2
cmp byte [esp + 3], 0
jne 0x49d1aa
mov ecx, edi
mov edx, dword [esp + 0x60]
call fcn.004ba629
cmp dword [esp + 0x28], 0
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x94], eax
jne 0x49d2ef
lea ecx, [esp + 0x34]
mov eax, dword [ecx + 8]
mov dword [esp + 0x54], eax
movsd xmm0, qword [ecx]
movsd qword [esp + 0x4c], xmm0
mov al, 1
mov byte [ebp + 0xc8], al
mov eax, dword [esp + 0x98]
mov dword [ebp + 0xcc], eax
mov eax, dword [esp + 0x94]
mov dword [ebp + 0xd0], eax
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0xa4]
mov dword [ecx + 8], eax
movsd xmm0, qword [esp + 0x4c]
movsd qword [ecx], xmm0
jmp 0x49c804
cmp eax, 1
jne 0x49d20f
mov edx, dword [esp + 0x9c]
mov eax, dword [edx + 0x10]
mov ecx, dword [esp + 4]
mov dword [ecx + 0x14], eax
movups xmm0, xmmword [edx]
movups xmmword [ecx + 4], xmm0
mov dword [ecx], 1
jmp 0x49d2e4
mov eax, dword [esp + 4]
and dword [eax], 0
jmp 0x49d2e4
mov edx, dword [esp + 4]
mov dword [edx + 4], ecx
mov dword [edx + 8], eax
jmp 0x49d258
mov esi, dword [esp + 4]
lea ecx, [esi + 4]
push 0x25
pop edx
push 0x1f
push str.unexpected_EOF_during_handshakeassertion_failed:_size___nread
call fcn.004c53c3
pop eax
pop ecx
mov dword [esi], 2
jmp 0x49d2e4
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 4]
mov dword [edx + 4], eax
mov dword [edx + 8], ecx
mov dword [edx], 2
jmp 0x49d2e4
mov esi, ebp
shr esi, 8
shl ebp, 0x18
xor edi, edi
jmp 0x49d2ae
mov ecx, dword [esp + 0x20]
mov eax, edx
mov edx, dword [esp + 0x1c]
shld edx, ecx, 0x10
shl ecx, 0x10
movzx eax, al
or eax, ecx
movzx ecx, bl
shl ecx, 8
or ecx, eax
mov eax, dword [esp + 4]
mov dword [eax + 8], edx
mov dword [eax + 4], ecx
mov dword [eax], 2
jmp 0x49d2e4
mov esi, dword [esp + 0x18]
mov edi, eax
mov ebp, eax
shrd ebp, esi, 8
shr esi, 8
mov edx, dword [esp + 0x6c]
mov ecx, dword [esp + 8]
call fcn.0049c5f9
mov edx, dword [esp + 0x7c]
mov ecx, ebx
call fcn.004f2ec8
shld esi, ebp, 8
shl ebp, 8
mov eax, edi
movzx eax, al
or eax, ebp
mov ecx, dword [esp + 4]
mov dword [ecx + 8], esi
mov dword [ecx + 4], eax
mov dword [ecx], 2
add esp, 0xb4
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x98]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x94]
mov dword [eax + 8], ecx
jmp 0x49d297