Function at 0x49ec20
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5c
mov eax, dword [0x62aabc]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov eax, dword [edi]
cmp byte [eax + 9], 1
jne 0x49ed54
mov eax, dword [edi + 0x40]
test eax, eax
je 0x49ed54
mov ebx, dword [eax + 0x20c]
mov esi, dword [eax + 0x210]
mov eax, dword [eax + 0x214]
mov dword [ebp - 0x4c], eax
test ebx, ebx
je 0x49ed54
mov eax, dword [edi + 0x88]
cmp eax, dword [edi + 0x90]
ja 0x49ed54
push 0x569c80
push 0x11e6
push str.D:UsersphiliDropboxDevelopmentlibmbedtlsmbedtlslibrary_ssl_msg.c
push 2
push edi
call fcn.004a8a60
movzx eax, word [edi + 0x8c]
add esp, 0x14
cmp dword [ebp - 0x4c], eax
je 0x49ecbe
push str.Buffered_record_not_from_current_epoch.
push 0x11ea
push str.D:UsersphiliDropboxDevelopmentlibmbedtlsmbedtlslibrary_ssl_msg.c
push 2
push edi
call fcn.004a8a60
add esp, 0x14
jmp 0x49ed3a
push str.Found_buffered_record_from_current_epoch___load
push 0x11ee
push str.D:UsersphiliDropboxDevelopmentlibmbedtlsmbedtlslibrary_ssl_msg.c
push 2
push edi
call fcn.004a8a60
mov eax, dword [edi + 0x60]
add esp, 0x14
mov ecx, dword [edi + 0x68]
sub eax, ecx
add eax, 0x417d
cmp esi, eax
jbe 0x49ed19
push str.should_never_happen
push 0x11f3
push str.D:UsersphiliDropboxDevelopmentlibmbedtlsmbedtlslibrary_ssl_msg.c
push 1
push edi
call fcn.004a8a60
add esp, 0x14
mov eax, 0xffff9400
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0054f742
mov esp, ebp
pop ebp
ret
push esi
push ebx
push ecx
call sub.VCRUNTIME140.dll_memcpy
push edi
mov dword [edi + 0x88], esi
mov dword [edi + 0x90], 0
call fcn.0049ebe0
add esp, 0x10
push str.__ssl_load_buffered_record
push 0x11fe
push str.D:UsersphiliDropboxDevelopmentlibmbedtlsmbedtlslibrary_ssl_msg.c
push 2
push edi
call fcn.004a8a60
add esp, 0x14
mov eax, edi
mov ecx, 0x40
lea ebx, [eax + ecx]
mov eax, dword [edi]
xor ecx, ecx
cmp byte [eax + 9], 1
sete cl
lea ecx, [ecx*8 + 5]
push ecx
push edi
call fcn.0049b660
mov esi, eax
add esp, 8
test esi, esi
je 0x49edae
push esi
push str.mbedtls_ssl_fetch_input
push 0x1255
push str.D:UsersphiliDropboxDevelopmentlibmbedtlsmbedtlslibrary_ssl_msg.c
push 1
push edi
call fcn.004a8b10
add esp, 0x18
pop edi
mov eax, esi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0054f742
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x44]
push eax
push dword [edi + 0x88]
push dword [edi + 0x68]
push edi
call fcn.0049f900
mov ecx, dword [edi]
add esp, 0x10
mov cl, byte [ecx + 9]
test eax, eax
je 0x49f3b3
cmp cl, 1
jne 0x49f547
cmp eax, 0xffff9b80
jne 0x49eec4
mov esi, dword [ebx]
test esi, esi
je 0x49eecf
cmp byte [ebp - 0x3c], 0x16
jne 0x49eecf
cmp dword [esi + 0x20c], 0
jne 0x49eecf
mov ecx, dword [esi + 0x1d4]
mov eax, 0x8000
mov edx, dword [ebp - 0x34]
sub eax, ecx
cmp edx, eax
jbe 0x49ee40
push ecx
push 0x8000
push edx
push str.Buffering_of_future_epoch_record_of_size__zu_would_exceed_the_compile_time_limit__zu__already__zu_bytes_buffered_____ignore_n
push 0x121e
push str.D:UsersphiliDropboxDevelopmentlibmbedtlsmbedtlslibrary_ssl_msg.c
push 2
push edi
call fcn.004a8a60
add esp, 0x20
jmp 0x49eecf
movzx eax, word [edi + 0x8c]
inc eax
push eax
push str.Buffer_record_from_epoch__u
push 0x1224
push str.D:UsersphiliDropboxDevelopmentlibmbedtlsmbedtlslibrary_ssl_msg.c
push 2
push edi
call fcn.004a8a60
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push str.Buffered_record
push 0x1225
push str.D:UsersphiliDropboxDevelopmentlibmbedtlsmbedtlslibrary_ssl_msg.c
push 3
push edi
call fcn.004a8320
movzx eax, word [edi + 0x8c]
inc eax
mov dword [esi + 0x214], eax
mov eax, dword [ebp - 0x34]
push eax
push 1
mov dword [esi + 0x210], eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
add esp, 0x3c
mov dword [esi + 0x20c], eax
test eax, eax
je 0x49eecf
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push eax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [ebp - 0x34]
add esp, 0xc
add dword [esi + 0x1d4], eax
jmp 0x49eecf
cmp eax, 0xffff9900
jne 0x49f36d
push edi
call fcn.0049d8d0
movzx eax, byte [ebp - 0x28]
add esp, 4
add eax, dword [edi + 0x6c]
movzx edx, byte [ebp - 0x3c]
mov dword [edi + 0x70], eax
add eax, 2
mov dword [edi + 0x78], eax
mov dword [edi + 0x74], eax
mov eax, dword [ebp - 0x2c]
mov dword [edi + 0x84], eax
mov eax, dword [edi + 0x64]
mov dword [edi + 0x80], edx
movzx ecx, byte [eax + 1]
movzx eax, byte [eax]
shl eax, 8
or ecx, eax
jne 0x49f33c
mov eax, dword [edi]
cmp byte [eax + 8], 1
jne 0x49f33c
cmp dword [edi + 4], 0x19
jl 0x49f33c
cmp edx, 0x16
jne 0x49f33c
cmp dword [edi + 0x88], 0xd
jbe 0x49f33c
mov eax, dword [edi + 0x60]
cmp byte [eax + 0xd], 1
jne 0x49f33c
push str.possible_client_reconnect_from_the_same_port
push 0xef2
push str.D:UsersphiliDropboxDevelopmentlibmbedtlsmbedtlslibrary_ssl_msg.c
push 1
push edi
call fcn.004a8a60
mov eax, dword [edi]
add esp, 0x14
cmp dword [eax + 0x50], 0
je 0x49f2ee
cmp dword [eax + 0x54], 0
je 0x49f2ee
mov esi, dword [edi + 0x88]
mov eax, dword [edi + 0xc0]
mov ebx, dword [edi + 0x60]
push esi
push str.check_cookie:_in_len_u
push 0xd28
mov dword [ebp - 0x5c], eax
mov eax, dword [edi + 0x100]
push str.D:UsersphiliDropboxDevelopmentlibmbedtlsmbedtlslibrary_ssl_msg.c
mov dword [ebp - 0x50], eax
mov eax, dword [edi + 0xfc]
push 4
push edi
mov dword [ebp - 0x54], eax
call fcn.004a8a60
push dword [ebp - 0x50]
push dword [ebp - 0x54]
push str.cli_id
push 0xd29
push str.D:UsersphiliDropboxDevelopmentlibmbedtlsmbedtlslibrary_ssl_msg.c
push 4
push edi
call fcn.004a8320
add esp, 0x34
cmp esi, 0x3d
jae 0x49effc
push str.check_cookie:_record_too_short
push 0xd2c
push str.D:UsersphiliDropboxDevelopmentlibmbedtlsmbedtlslibrary_ssl_msg.c
push 4
push edi
call fcn.004a8a60
add esp, 0x14
jmp 0x49f2c8
movzx edx, byte [ebx + 3]
movzx eax, byte [ebx + 4]
movzx ecx, byte [ebx + 0x13]
shl edx, 8
or edx, eax
shl ecx, 8
movzx eax, byte [ebx + 0x14]
or ecx, eax
mov dword [ebp - 0x48], edx
movzx eax, byte [ebx + 0x15]
shl ecx, 8
or ecx, eax
cmp byte [ebx], 0x16
mov dword [ebp - 0x58], ecx
jne 0x49f28d
test edx, edx
jne 0x49f28d
test ecx, ecx
jne 0x49f28d
movzx ecx, byte [ebx + 0x3b]
mov dword [ebp - 0x48], ecx
lea eax, [ecx + 0x3d]
cmp eax, esi
jbe 0x49f070
lea eax, [esi - 0x3d]
push eax
push ecx
push str.check_cookie:_sid_len_u____u
push 0xd42
push str.D:UsersphiliDropboxDevelopmentlibmbedtlsmbedtlslibrary_ssl_msg.c
push 4
push edi
call fcn.004a8a60
add esp, 0x1c
jmp 0x49f2c8
push ecx
lea eax, [ebx + 0x3c]
push eax
push str.sid_received_from_network
push 0xd46
push str.D:UsersphiliDropboxDevelopmentlibmbedtlsmbedtlslibrary_ssl_msg.c
push 4
push edi
call fcn.004a8320
mov ecx, dword [ebp - 0x48]
add esp, 0x1c
movzx edx, byte [ecx + ebx + 0x3c]
lea eax, [ecx + ebx]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x58], edx
lea eax, [ecx + 0x3d]
add eax, edx
cmp eax, esi
jbe 0x49f0bc
sub esi, ecx
sub esi, 0x3d
push esi
push edx
push str.check_cookie:_cookie_len_u____u
push 0xd4d
jmp 0x49f05b
mov esi, dword [ebp - 0x48]
push edx
add esi, 0x3d
push esi
push str.cookie_received_from_network
push 0xd52
push str.D:UsersphiliDropboxDevelopmentlibmbedtlsmbedtlslibrary_ssl_msg.c
push 4
push edi
call fcn.004a8320
push dword [ebp - 0x50]
mov eax, dword [edi]
push dword [ebp - 0x54]
push dword [ebp - 0x58]
push esi
push dword [eax + 0x58]
mov eax, dword [eax + 0x54]
call eax
add esp, 0x30
test eax, eax
jne 0x49f17f
push str.check_cookie:_valid
push 0xd57
push str.D:UsersphiliDropboxDevelopmentlibmbedtlsmbedtlslibrary_ssl_msg.c
push 4
push edi
call fcn.004a8a60
push 0
push str.mbedtls_ssl_check_dtls_clihlo_cookie
push 0xdb9
push str.D:UsersphiliDropboxDevelopmentlibmbedtlsmbedtlslibrary_ssl_msg.c
push 2
push edi
call fcn.004a8b10
push str.cookie_is_valid__resetting_context
push 0xdcd
push str.D:UsersphiliDropboxDevelopmentlibmbedtlsmbedtlslibrary_ssl_msg.c
push 1
push edi
call fcn.004a8a60
add esp, 0x40
push 1
push edi
call fcn.004976c0
mov esi, eax
add esp, 8
test esi, esi
je 0x49f175
push esi
push str.reset
push 0xdd0
push str.D:UsersphiliDropboxDevelopmentlibmbedtlsmbedtlslibrary_ssl_msg.c
push 1
push edi
call fcn.004a8b10
add esp, 0x18
jmp 0x49f30a
mov esi, 0xffff9880
jmp 0x49f30a
mov esi, dword [ebp - 0x5c]
movups xmm0, xmmword [ebx]
push dword [ebp - 0x50]
movups xmmword [esi], xmm0
movq xmm0, qword [ebx + 0x10]
push dword [ebp - 0x54]
movq qword [esi + 0x10], xmm0
mov al, byte [ebx + 0x18]
mov byte [esi + 0x18], al
lea eax, [esi + 0x1c]
mov dword [ebp - 0x4c], eax
lea eax, [esi + 0x4000]
mov byte [esi + 0xd], 3
mov word [esi + 0x19], 0xfffe
mov ecx, dword [edi]
push eax
lea eax, [ebp - 0x4c]
push eax
push dword [ecx + 0x58]
mov eax, dword [ecx + 0x50]
call eax
add esp, 0x14
test eax, eax
je 0x49f1d4
mov esi, 0xffff9400
jmp 0x49f2cd
mov ebx, dword [ebp - 0x4c]
sub ebx, esi
push 0xffff9580
push str.mbedtls_ssl_check_dtls_clihlo_cookie
push 0xdb9
lea ecx, [ebx - 0x19]
lea eax, [ebx - 0x1c]
mov byte [esi + 0x18], cl
mov byte [esi + 0x1b], al
mov eax, ecx
shr eax, 0x10
mov byte [esi + 0x16], al
mov byte [esi + 0xe], al
mov eax, ecx
shr eax, 8
mov byte [esi + 0x17], al
mov byte [esi + 0xf], al
lea eax, [ebx - 0xd]
shr eax, 8
push str.D:UsersphiliDropboxDevelopmentlibmbedtlsmbedtlslibrary_ssl_msg.c
mov byte [esi + 0xb], al
lea eax, [ebx - 0xd]
push 2
push edi
mov byte [esi + 0x10], cl
mov byte [esi + 0xc], al
call fcn.004a8b10
push str.sending_HelloVerifyRequest
push 0xdbe
push str.D:UsersphiliDropboxDevelopmentlibmbedtlsmbedtlslibrary_ssl_msg.c
push 1
push edi
call fcn.004a8a60
push ebx
push dword [edi + 0xc0]
push str.output_record_sent_to_network
push 0xdc0
push str.D:UsersphiliDropboxDevelopmentlibmbedtlsmbedtlslibrary_ssl_msg.c
push 4
push edi
call fcn.004a8320
mov eax, dword [edi + 0x20]
add esp, 0x48
push ebx
push dword [edi + 0xc0]
push dword [edi + 0x2c]
call eax
push eax
push str.ssl__f_send
push 0xdc5
push str.D:UsersphiliDropboxDevelopmentlibmbedtlsmbedtlslibrary_ssl_msg.c
push 2
push edi
call fcn.004a8b10
add esp, 0x24
jmp 0x49f308
push str.check_cookie:_not_a_good_ClientHello
push 0xd36
push str.D:UsersphiliDropboxDevelopmentlibmbedtlsmbedtlslibrary_ssl_msg.c
push 4
push edi
call fcn.004a8a60
push dword [ebp - 0x58]
movzx eax, byte [ebx]
push dword [ebp - 0x48]
push eax
push str.____type_u_epoch_u_fragment_offset_u
push 0xd39
push str.D:UsersphiliDropboxDevelopmentlibmbedtlsmbedtlslibrary_ssl_msg.c
push 4
push edi
call fcn.004a8a60
add esp, 0x34
mov esi, 0xffff8d00
mov ecx, esi
mov eax, edi
push ecx
push str.mbedtls_ssl_check_dtls_clihlo_cookie
push 0xdb9
push str.D:UsersphiliDropboxDevelopmentlibmbedtlsmbedtlslibrary_ssl_msg.c
push 2
push eax
call fcn.004a8b10
add esp, 0x18
jmp 0x49f30a
push str.no_cookie_callbacks__cant_check_reconnect_validity
push 0xdaf
push str.D:UsersphiliDropboxDevelopmentlibmbedtlsmbedtlslibrary_ssl_msg.c
push 1
push edi
call fcn.004a8a60
add esp, 0x14
xor esi, esi
push esi
push str.ssl_check_client_reconnect
push 0x127a
push str.D:UsersphiliDropboxDevelopmentlibmbedtlsmbedtlslibrary_ssl_msg.c
push 2
push edi
call fcn.004a8b10
add esp, 0x18
test esi, esi
je 0x49f358
pop edi
mov eax, esi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0054f742
mov esp, ebp
pop ebp
ret
push 0
push str.ssl_check_client_reconnect
push 0x127a
push str.D:UsersphiliDropboxDevelopmentlibmbedtlsmbedtlslibrary_ssl_msg.c
push 2
push edi
call fcn.004a8b10
add esp, 0x18
mov eax, dword [ebp - 0x34]
mov ecx, str.discarding_unexpected_record__header_
mov dword [edi + 0x90], eax
mov eax, 0x1283
jmp 0x49f38b
mov dword [edi + 0x90], 0
mov eax, 0x128c
mov dword [edi + 0x88], 0
mov ecx, str.discarding_invalid_record__header_
push ecx
push eax
push str.D:UsersphiliDropboxDevelopmentlibmbedtlsmbedtlslibrary_ssl_msg.c
push 1
push edi
call fcn.004a8a60
add esp, 0x14
mov eax, 0xffff9a80
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0054f742
mov esp, ebp
pop ebp
ret
cmp cl, 1
jne 0x49f3e5
mov eax, dword [ebp - 0x34]
mov dword [edi + 0x90], eax
cmp eax, dword [edi + 0x88]
jae 0x49f411
push str.more_than_one_record_within_datagram
push 0x12a0
push str.D:UsersphiliDropboxDevelopmentlibmbedtlsmbedtlslibrary_ssl_msg.c
push 3
push edi
call fcn.004a8a60
add esp, 0x14
jmp 0x49f411
push dword [ebp - 0x34]
push edi
call fcn.0049b660
mov esi, eax
add esp, 8
test esi, esi
je 0x49f407
push esi
push str.mbedtls_ssl_fetch_input
push 0x12ac
jmp 0x49ed8b
mov dword [edi + 0x88], 0
lea eax, [ebp - 0x44]
push eax
push edi
call fcn.0049fc70
mov esi, eax
add esp, 8
test esi, esi
je 0x49f4f8
mov ecx, dword [edi]
mov al, byte [ecx + 9]
cmp esi, 0xffff8e80
jne 0x49ed9b
cmp al, 1
jne 0x49f4d8
mov eax, dword [edi + 4]
cmp eax, 0xb
je 0x49f4b5
cmp eax, 0xd
je 0x49f4b5
cmp dword [ecx + 0xd0], 0
je 0x49f492
inc dword [edi + 0x14]
mov eax, dword [edi + 0x14]
cmp eax, dword [ecx + 0xd0]
jb 0x49f492
push str.too_many_records_with_bad_MAC
push 0x12d3
push str.D:UsersphiliDropboxDevelopmentlibmbedtlsmbedtlslibrary_ssl_msg.c
push 1
push edi
call fcn.004a8a60
add esp, 0x14
mov eax, esi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0054f742
mov esp, ebp
pop ebp
ret
push str.discarding_invalid_record__mac_
mov dword [edi + 0x90], 0
mov dword [edi + 0x88], 0
push 0x12dd
jmp 0x49f38d
push 0x14
push 2
push edi
call fcn.0049d5a0
add esp, 0xc
mov eax, 0xffff8e80
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0054f742
mov esp, ebp
pop ebp
ret
push 0x14
push 2
push edi
call fcn.0049d5a0
add esp, 0xc
mov eax, esi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0054f742
mov esp, ebp
pop ebp
ret
push edi
call fcn.0049d8d0
movzx eax, byte [ebp - 0x28]
add esp, 4
add eax, dword [edi + 0x6c]
mov cl, byte [ebp - 0x3c]
mov dword [edi + 0x70], eax
add eax, 2
mov dword [edi + 0x74], eax
movzx eax, cl
mov dword [edi + 0x80], eax
mov eax, dword [edi + 0x68]
mov byte [eax], cl
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x2c]
mov dword [edi + 0x78], eax
mov eax, dword [edi + 0x70]
mov dword [edi + 0x84], ecx
shr ecx, 8
mov byte [eax], cl
mov ecx, dword [edi + 0x70]
mov al, byte [ebp - 0x2c]
mov byte [ecx + 1], al
xor eax, eax
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0054f742
mov esp, ebp
pop ebp
ret