joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4a0e90
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x61198f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x24
push ebx
mov ebx, ecx
mov dword [ebp - 0x14], ebx
push esi
mov dword [ebp - 0x10], 0
lea esi, [ebx + 0x68]
mov dword [ebx], 0x6f11b8
mov dword [esi], 0x6ee9ac
push edi
mov dword [ebx + 0x78], vtable.std::basic_ios_char__struct_std::char_traits_char__.0
push ecx
push 2
mov dword [ebp - 4], 0
push dword [ebp + 0x10]
mov dword [ebp - 0x10], 1
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.004a0a00
mov dword [ebp - 4], 1
mov dword [ebp + 0x10], esi
mov eax, dword [esi]
push 8
mov eax, dword [eax + 4]
mov dword [esi + eax], vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov eax, dword [esi]
mov ecx, dword [eax + 4]
lea eax, [ecx - 8]
mov dword [ecx + esi - 4], eax
mov eax, dword [esi]
mov edi, dword [eax + 4]
add edi, esi
mov dword [edi + 0x30], 0
mov dword [edi + 8], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0x201
mov dword [edi + 0x18], 6
mov dword [edi + 0x1c], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x28], 0
mov dword [edi + 0x2c], 0
mov dword [edi + 0xc], 0
call fcn.004e2142
mov esi, eax
add esp, 4
test esi, esi
je 0x4a0f8b
push 1
mov dword [ebp - 4], 3
call fcn.00508da5
add esp, 4
mov dword [esi + 4], eax
jmp 0x4a0f8d
xor esi, esi
lea eax, [ebx + 8]
mov dword [edi + 0x30], esi
mov dword [edi + 0x38], eax
mov dword [edi + 0x3c], 0
mov dword [ebp - 4], 4
mov esi, dword [esi + 4]
mov ecx, esi
mov dword [ebp - 0x18], esi
mov eax, dword [esi]
call dword [eax + 4]
lea eax, [ebp - 0x1c]
mov dword [ebp - 4], 5
push eax
call fcn.00457f56
add esp, 4
mov ecx, eax
mov edx, dword [eax]
push 0x20
mov eax, dword [edx + 0x20]
call eax
mov byte [ebp + 0xb], al
mov dword [ebp - 4], 6
test esi, esi
je 0x4a0ff3
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 8]
test eax, eax
je 0x4a0ff0
mov edx, dword [eax]
mov ecx, eax
push 1
call dword [edx]
mov al, byte [ebp + 0xb]
mov byte [ebp - 4], 2
cmp dword [edi + 0x38], 0
mov byte [edi + 0x40], al
jne 0x4a1013
mov eax, dword [edi + 0xc]
mov ecx, dword [edi + 0x10]
and eax, 0x13
or eax, 4
mov dword [edi + 0xc], eax
and ecx, eax
jne 0x4a1040
mov eax, dword [ebx]
pop edi
pop esi
mov eax, dword [eax + 4]
mov dword [ebx + eax], vtable.Poco::Net::HTTPFixedLengthOutputStream.0
mov eax, dword [ebx]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x78]
mov dword [ecx + ebx - 4], eax
mov eax, ebx
mov ecx, dword [ebp - 0xc]
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0x10
test cl, 4
je 0x4a104c
mov esi, str.ios_base::badbit_set
jmp 0x4a105c
test cl, 2
mov esi, str.ios_base::failbit_set
mov eax, str.ios_base::eofbit_set
cmove esi, eax
lea eax, [ebp - 0x1c]
push 1
push eax
call fcn.00455295
add esp, 8
lea ecx, [ebp - 0x30]
push eax
push esi
call fcn.004554a6
push 0x708b84
lea eax, [ebp - 0x30]
push eax
call fcn.0050c727
int3
Function at 0x4a11d0
Capabilities:
Access peb ldr_data
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x610f18
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
push esi
mov esi, ecx
push edi
mov dword [ebp - 0x10], esi
push 8
mov dword [esi], vtable.std::basic_streambuf_char__struct_std::char_traits_char__.0
call fcn.004e2142
mov edi, eax
add esp, 4
test edi, edi
je 0x4a121e
push 1
mov dword [ebp - 4], 0
call fcn.00508da5
add esp, 4
mov dword [edi + 4], eax
jmp 0x4a1220
xor edi, edi
lea eax, [esi + 4]
mov dword [esi + 0x34], edi
mov dword [esi + 0xc], eax
lea ecx, [esi + 8]
lea eax, [esi + 0x14]
mov dword [esi + 0x10], ecx
mov dword [esi + 0x1c], eax
lea eax, [esi + 0x18]
mov dword [esi + 0x20], eax
lea eax, [esi + 0x24]
mov dword [esi + 0x2c], eax
lea eax, [esi + 0x28]
mov dword [esi + 0x30], eax
mov dword [ecx], 0
mov eax, dword [esi + 0x20]
mov dword [eax], 0
mov eax, dword [esi + 0x30]
mov dword [eax], 0
mov eax, dword [esi + 0xc]
mov dword [eax], 0
mov eax, dword [esi + 0x1c]
mov dword [eax], 0
mov eax, dword [esi + 0x2c]
mov dword [eax], 0
mov dword [ebp - 4], 1
sub esp, 8
mov dword [esi], vtable.Poco::BasicBufferedStreamBuf_char__struct_std::char_traits_char___class_Poco::Net::HTTPBufferAllocator_.0
mov dword [esi + 0x38], 0x1000
mov dword [esi + 0x3c], 0
call fcn.004a9700
mov ecx, dword [ebp + 0x10]
add esp, 8
mov dword [esi + 0x40], eax
mov dword [esi + 0x44], ecx
lea ecx, [eax + 4]
mov eax, dword [esi + 0xc]
pop edi
mov dword [eax], ecx
mov eax, dword [esi + 0x1c]
mov dword [eax], ecx
mov eax, dword [esi + 0x2c]
mov dword [eax], 0
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 0x40]
mov edx, dword [esi + 0x38]
mov dword [eax], ecx
mov eax, dword [esi + 0x20]
mov dword [eax], ecx
mov eax, dword [esi + 0x30]
mov ecx, dword [ebp - 0xc]
mov dword [eax], edx
mov eax, esi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret 0xc
Function at 0x4a30c0
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x611b62
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x28
push ebx
mov ebx, ecx
mov dword [ebp - 0x14], ebx
push esi
mov dword [ebp - 0x10], 0
lea esi, [ebx + 0x78]
mov dword [ebx], 0x6f12a8
mov dword [esi], 0x6ee228
push edi
mov dword [ebx + 0x90], vtable.std::basic_ios_char__struct_std::char_traits_char__.0
push ecx
push 1
push dword [ebp + 8]
mov dword [ebp - 4], 0
mov dword [ebp - 0x10], 1
call fcn.004a2f70
mov dword [ebp - 4], 1
mov dword [ebp - 0x18], esi
mov eax, dword [esi]
push 8
mov eax, dword [eax + 4]
mov dword [esi + eax], vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov eax, dword [esi]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x18]
mov dword [ecx + esi - 4], eax
mov eax, dword [esi]
mov dword [esi + 8], 0
mov dword [esi + 0xc], 0
mov edi, dword [eax + 4]
add edi, esi
mov dword [edi + 0x30], 0
mov dword [edi + 8], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0x201
mov dword [edi + 0x18], 6
mov dword [edi + 0x1c], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x28], 0
mov dword [edi + 0x2c], 0
mov dword [edi + 0xc], 0
call fcn.004e2142
mov esi, eax
add esp, 4
test esi, esi
je 0x4a31c6
push 1
mov dword [ebp - 4], 3
call fcn.00508da5
add esp, 4
mov dword [esi + 4], eax
jmp 0x4a31c8
xor esi, esi
lea eax, [ebx + 8]
mov dword [edi + 0x30], esi
mov dword [edi + 0x38], eax
mov dword [edi + 0x3c], 0
mov dword [ebp - 4], 4
mov esi, dword [esi + 4]
mov ecx, esi
mov dword [ebp - 0x1c], esi
mov eax, dword [esi]
call dword [eax + 4]
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 5
push eax
call fcn.00457f56
add esp, 4
mov ecx, eax
mov edx, dword [eax]
push 0x20
mov eax, dword [edx + 0x20]
call eax
mov byte [ebp + 0xb], al
mov dword [ebp - 4], 6
test esi, esi
je 0x4a322e
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 8]
test eax, eax
je 0x4a322b
mov edx, dword [eax]
mov ecx, eax
push 1
call dword [edx]
mov al, byte [ebp + 0xb]
mov byte [ebp - 4], 2
cmp dword [edi + 0x38], 0
mov byte [edi + 0x40], al
jne 0x4a324e
mov eax, dword [edi + 0xc]
mov ecx, dword [edi + 0x10]
and eax, 0x13
or eax, 4
mov dword [edi + 0xc], eax
and ecx, eax
jne 0x4a327e
mov eax, dword [ebx]
pop edi
pop esi
mov eax, dword [eax + 4]
mov dword [ebx + eax], vtable.Poco::Net::HTTPChunkedInputStream.0
mov eax, dword [ebx]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x90]
mov dword [ecx + ebx - 4], eax
mov eax, ebx
mov ecx, dword [ebp - 0xc]
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
test cl, 4
je 0x4a328a
mov esi, str.ios_base::badbit_set
jmp 0x4a329a
test cl, 2
mov esi, str.ios_base::failbit_set
mov eax, str.ios_base::eofbit_set
cmove esi, eax
lea eax, [ebp - 0x20]
push 1
push eax
call fcn.00455295
add esp, 8
lea ecx, [ebp - 0x34]
push eax
push esi
call fcn.004554a6
push 0x708b84
lea eax, [ebp - 0x34]
push eax
call fcn.0050c727
int3
Function at 0x4a3410
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x611bb2
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x28
push ebx
mov ebx, ecx
mov dword [ebp - 0x14], ebx
push esi
mov dword [ebp - 0x10], 0
lea esi, [ebx + 0x78]
mov dword [ebx], 0x6f1310
mov dword [esi], 0x6ee9ac
push edi
mov dword [ebx + 0x88], vtable.std::basic_ios_char__struct_std::char_traits_char__.0
push ecx
push 2
push dword [ebp + 8]
mov dword [ebp - 4], 0
mov dword [ebp - 0x10], 1
call fcn.004a2f70
mov dword [ebp - 4], 1
mov dword [ebp - 0x18], esi
mov eax, dword [esi]
push 8
mov eax, dword [eax + 4]
mov dword [esi + eax], vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov eax, dword [esi]
mov ecx, dword [eax + 4]
lea eax, [ecx - 8]
mov dword [ecx + esi - 4], eax
mov eax, dword [esi]
mov edi, dword [eax + 4]
add edi, esi
mov dword [edi + 0x30], 0
mov dword [edi + 8], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0x201
mov dword [edi + 0x18], 6
mov dword [edi + 0x1c], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x28], 0
mov dword [edi + 0x2c], 0
mov dword [edi + 0xc], 0
call fcn.004e2142
mov esi, eax
add esp, 4
test esi, esi
je 0x4a3508
push 1
mov dword [ebp - 4], 3
call fcn.00508da5
add esp, 4
mov dword [esi + 4], eax
jmp 0x4a350a
xor esi, esi
lea eax, [ebx + 8]
mov dword [edi + 0x30], esi
mov dword [edi + 0x38], eax
mov dword [edi + 0x3c], 0
mov dword [ebp - 4], 4
mov esi, dword [esi + 4]
mov ecx, esi
mov dword [ebp - 0x1c], esi
mov eax, dword [esi]
call dword [eax + 4]
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 5
push eax
call fcn.00457f56
add esp, 4
mov ecx, eax
mov edx, dword [eax]
push 0x20
mov eax, dword [edx + 0x20]
call eax
mov byte [ebp + 0xb], al
mov dword [ebp - 4], 6
test esi, esi
je 0x4a3570
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 8]
test eax, eax
je 0x4a356d
mov edx, dword [eax]
mov ecx, eax
push 1
call dword [edx]
mov al, byte [ebp + 0xb]
mov byte [ebp - 4], 2
cmp dword [edi + 0x38], 0
mov byte [edi + 0x40], al
jne 0x4a3590
mov eax, dword [edi + 0xc]
mov ecx, dword [edi + 0x10]
and eax, 0x13
or eax, 4
mov dword [edi + 0xc], eax
and ecx, eax
jne 0x4a35c0
mov eax, dword [ebx]
pop edi
pop esi
mov eax, dword [eax + 4]
mov dword [ebx + eax], vtable.Poco::Net::HTTPChunkedOutputStream.0
mov eax, dword [ebx]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x88]
mov dword [ecx + ebx - 4], eax
mov eax, ebx
mov ecx, dword [ebp - 0xc]
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
test cl, 4
je 0x4a35cc
mov esi, str.ios_base::badbit_set
jmp 0x4a35dc
test cl, 2
mov esi, str.ios_base::failbit_set
mov eax, str.ios_base::eofbit_set
cmove esi, eax
lea eax, [ebp - 0x20]
push 1
push eax
call fcn.00455295
add esp, 8
lea ecx, [ebp - 0x34]
push eax
push esi
call fcn.004554a6
push 0x708b84
lea eax, [ebp - 0x34]
push eax
call fcn.0050c727
int3
Function at 0x4a3e20
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x611c6f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x28
push ebx
mov ebx, ecx
mov dword [ebp - 0x14], ebx
push esi
mov dword [ebp - 0x10], 0
lea esi, [ebx + 0x58]
mov dword [ebx], 0x6ee230
mov dword [esi], 0x6ee228
push edi
mov dword [ebx + 0x70], vtable.std::basic_ios_char__struct_std::char_traits_char__.0
push ecx
push 1
push dword [ebp + 8]
mov dword [ebp - 4], 0
mov dword [ebp - 0x10], 1
call fcn.004a3ce0
mov dword [ebp - 4], 1
mov dword [ebp - 0x18], esi
mov eax, dword [esi]
push 8
mov eax, dword [eax + 4]
mov dword [esi + eax], vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov eax, dword [esi]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x18]
mov dword [ecx + esi - 4], eax
mov eax, dword [esi]
mov dword [esi + 8], 0
mov dword [esi + 0xc], 0
mov edi, dword [eax + 4]
add edi, esi
mov dword [edi + 0x30], 0
mov dword [edi + 8], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0x201
mov dword [edi + 0x18], 6
mov dword [edi + 0x1c], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x28], 0
mov dword [edi + 0x2c], 0
mov dword [edi + 0xc], 0
call fcn.004e2142
mov esi, eax
add esp, 4
test esi, esi
je 0x4a3f23
push 1
mov dword [ebp - 4], 3
call fcn.00508da5
add esp, 4
mov dword [esi + 4], eax
jmp 0x4a3f25
xor esi, esi
lea eax, [ebx + 8]
mov dword [edi + 0x30], esi
mov dword [edi + 0x38], eax
mov dword [edi + 0x3c], 0
mov dword [ebp - 4], 4
mov esi, dword [esi + 4]
mov ecx, esi
mov dword [ebp - 0x1c], esi
mov eax, dword [esi]
call dword [eax + 4]
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 5
push eax
call fcn.00457f56
add esp, 4
mov ecx, eax
mov edx, dword [eax]
push 0x20
mov eax, dword [edx + 0x20]
call eax
mov byte [ebp + 0xb], al
mov dword [ebp - 4], 6
test esi, esi
je 0x4a3f8b
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 8]
test eax, eax
je 0x4a3f88
mov edx, dword [eax]
mov ecx, eax
push 1
call dword [edx]
mov al, byte [ebp + 0xb]
mov byte [ebp - 4], 2
cmp dword [edi + 0x38], 0
mov byte [edi + 0x40], al
jne 0x4a3fab
mov eax, dword [edi + 0xc]
mov ecx, dword [edi + 0x10]
and eax, 0x13
or eax, 4
mov dword [edi + 0xc], eax
and ecx, eax
jne 0x4a3fd8
mov eax, dword [ebx]
pop edi
pop esi
mov eax, dword [eax + 4]
mov dword [ebx + eax], vtable.Poco::Net::HTTPInputStream.0
mov eax, dword [ebx]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x70]
mov dword [ecx + ebx - 4], eax
mov eax, ebx
mov ecx, dword [ebp - 0xc]
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
test cl, 4
je 0x4a3fe4
mov esi, str.ios_base::badbit_set
jmp 0x4a3ff4
test cl, 2
mov esi, str.ios_base::failbit_set
mov eax, str.ios_base::eofbit_set
cmove esi, eax
lea eax, [ebp - 0x20]
push 1
push eax
call fcn.00455295
add esp, 8
lea ecx, [ebp - 0x34]
push eax
push esi
call fcn.004554a6
push 0x708b84
lea eax, [ebp - 0x34]
push eax
call fcn.0050c727
int3
Function at 0x4a4150
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x611cbf
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x28
push ebx
mov ebx, ecx
mov dword [ebp - 0x14], ebx
push esi
mov dword [ebp - 0x10], 0
lea esi, [ebx + 0x58]
mov dword [ebx], 0x6edcec
mov dword [esi], 0x6ee9ac
push edi
mov dword [ebx + 0x68], vtable.std::basic_ios_char__struct_std::char_traits_char__.0
push ecx
push 2
push dword [ebp + 8]
mov dword [ebp - 4], 0
mov dword [ebp - 0x10], 1
call fcn.004a3ce0
mov dword [ebp - 4], 1
mov dword [ebp - 0x18], esi
mov eax, dword [esi]
push 8
mov eax, dword [eax + 4]
mov dword [esi + eax], vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov eax, dword [esi]
mov ecx, dword [eax + 4]
lea eax, [ecx - 8]
mov dword [ecx + esi - 4], eax
mov eax, dword [esi]
mov edi, dword [eax + 4]
add edi, esi
mov dword [edi + 0x30], 0
mov dword [edi + 8], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0x201
mov dword [edi + 0x18], 6
mov dword [edi + 0x1c], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x28], 0
mov dword [edi + 0x2c], 0
mov dword [edi + 0xc], 0
call fcn.004e2142
mov esi, eax
add esp, 4
test esi, esi
je 0x4a4245
push 1
mov dword [ebp - 4], 3
call fcn.00508da5
add esp, 4
mov dword [esi + 4], eax
jmp 0x4a4247
xor esi, esi
lea eax, [ebx + 8]
mov dword [edi + 0x30], esi
mov dword [edi + 0x38], eax
mov dword [edi + 0x3c], 0
mov dword [ebp - 4], 4
mov esi, dword [esi + 4]
mov ecx, esi
mov dword [ebp - 0x1c], esi
mov eax, dword [esi]
call dword [eax + 4]
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 5
push eax
call fcn.00457f56
add esp, 4
mov ecx, eax
mov edx, dword [eax]
push 0x20
mov eax, dword [edx + 0x20]
call eax
mov byte [ebp + 0xb], al
mov dword [ebp - 4], 6
test esi, esi
je 0x4a42ad
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 8]
test eax, eax
je 0x4a42aa
mov edx, dword [eax]
mov ecx, eax
push 1
call dword [edx]
mov al, byte [ebp + 0xb]
mov byte [ebp - 4], 2
cmp dword [edi + 0x38], 0
mov byte [edi + 0x40], al
jne 0x4a42cd
mov eax, dword [edi + 0xc]
mov ecx, dword [edi + 0x10]
and eax, 0x13
or eax, 4
mov dword [edi + 0xc], eax
and ecx, eax
jne 0x4a42fa
mov eax, dword [ebx]
pop edi
pop esi
mov eax, dword [eax + 4]
mov dword [ebx + eax], vtable.Poco::Net::HTTPOutputStream.0
mov eax, dword [ebx]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ecx + ebx - 4], eax
mov eax, ebx
mov ecx, dword [ebp - 0xc]
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
test cl, 4
je 0x4a4306
mov esi, str.ios_base::badbit_set
jmp 0x4a4316
test cl, 2
mov esi, str.ios_base::failbit_set
mov eax, str.ios_base::eofbit_set
cmove esi, eax
lea eax, [ebp - 0x20]
push 1
push eax
call fcn.00455295
add esp, 8
lea ecx, [ebp - 0x34]
push eax
push esi
call fcn.004554a6
push 0x708b84
lea eax, [ebp - 0x34]
push eax
call fcn.0050c727
int3
Function at 0x4a46a0
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x611d2f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x28
push ebx
mov ebx, ecx
mov dword [ebp - 0x14], ebx
push esi
mov dword [ebp - 0x10], 0
lea esi, [ebx + 0x58]
mov dword [ebx], 0x6ee230
mov dword [esi], 0x6ee228
push edi
mov dword [ebx + 0x70], vtable.std::basic_ios_char__struct_std::char_traits_char__.0
push ecx
push 1
push dword [ebp + 8]
mov dword [ebp - 4], 0
mov dword [ebp - 0x10], 1
call fcn.004a4560
mov dword [ebp - 4], 1
mov dword [ebp - 0x18], esi
mov eax, dword [esi]
push 8
mov eax, dword [eax + 4]
mov dword [esi + eax], vtable.std::basic_istream_char__struct_std::char_traits_char__.0
mov eax, dword [esi]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x18]
mov dword [ecx + esi - 4], eax
mov eax, dword [esi]
mov dword [esi + 8], 0
mov dword [esi + 0xc], 0
mov edi, dword [eax + 4]
add edi, esi
mov dword [edi + 0x30], 0
mov dword [edi + 8], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0x201
mov dword [edi + 0x18], 6
mov dword [edi + 0x1c], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x28], 0
mov dword [edi + 0x2c], 0
mov dword [edi + 0xc], 0
call fcn.004e2142
mov esi, eax
add esp, 4
test esi, esi
je 0x4a47a3
push 1
mov dword [ebp - 4], 3
call fcn.00508da5
add esp, 4
mov dword [esi + 4], eax
jmp 0x4a47a5
xor esi, esi
lea eax, [ebx + 8]
mov dword [edi + 0x30], esi
mov dword [edi + 0x38], eax
mov dword [edi + 0x3c], 0
mov dword [ebp - 4], 4
mov esi, dword [esi + 4]
mov ecx, esi
mov dword [ebp - 0x1c], esi
mov eax, dword [esi]
call dword [eax + 4]
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 5
push eax
call fcn.00457f56
add esp, 4
mov ecx, eax
mov edx, dword [eax]
push 0x20
mov eax, dword [edx + 0x20]
call eax
mov byte [ebp + 0xb], al
mov dword [ebp - 4], 6
test esi, esi
je 0x4a480b
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 8]
test eax, eax
je 0x4a4808
mov edx, dword [eax]
mov ecx, eax
push 1
call dword [edx]
mov al, byte [ebp + 0xb]
mov byte [ebp - 4], 2
cmp dword [edi + 0x38], 0
mov byte [edi + 0x40], al
jne 0x4a482b
mov eax, dword [edi + 0xc]
mov ecx, dword [edi + 0x10]
and eax, 0x13
or eax, 4
mov dword [edi + 0xc], eax
and ecx, eax
jne 0x4a4858
mov eax, dword [ebx]
pop edi
pop esi
mov eax, dword [eax + 4]
mov dword [ebx + eax], vtable.Poco::Net::HTTPHeaderInputStream.0
mov eax, dword [ebx]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x70]
mov dword [ecx + ebx - 4], eax
mov eax, ebx
mov ecx, dword [ebp - 0xc]
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
test cl, 4
je 0x4a4864
mov esi, str.ios_base::badbit_set
jmp 0x4a4874
test cl, 2
mov esi, str.ios_base::failbit_set
mov eax, str.ios_base::eofbit_set
cmove esi, eax
lea eax, [ebp - 0x20]
push 1
push eax
call fcn.00455295
add esp, 8
lea ecx, [ebp - 0x34]
push eax
push esi
call fcn.004554a6
push 0x708b84
lea eax, [ebp - 0x34]
push eax
call fcn.0050c727
int3
Function at 0x4a49c0
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x611d7f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x28
push ebx
mov ebx, ecx
mov dword [ebp - 0x14], ebx
push esi
mov dword [ebp - 0x10], 0
lea esi, [ebx + 0x58]
mov dword [ebx], 0x6edcec
mov dword [esi], 0x6ee9ac
push edi
mov dword [ebx + 0x68], vtable.std::basic_ios_char__struct_std::char_traits_char__.0
push ecx
push 2
push dword [ebp + 8]
mov dword [ebp - 4], 0
mov dword [ebp - 0x10], 1
call fcn.004a4560
mov dword [ebp - 4], 1
mov dword [ebp - 0x18], esi
mov eax, dword [esi]
push 8
mov eax, dword [eax + 4]
mov dword [esi + eax], vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov eax, dword [esi]
mov ecx, dword [eax + 4]
lea eax, [ecx - 8]
mov dword [ecx + esi - 4], eax
mov eax, dword [esi]
mov edi, dword [eax + 4]
add edi, esi
mov dword [edi + 0x30], 0
mov dword [edi + 8], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0x201
mov dword [edi + 0x18], 6
mov dword [edi + 0x1c], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x28], 0
mov dword [edi + 0x2c], 0
mov dword [edi + 0xc], 0
call fcn.004e2142
mov esi, eax
add esp, 4
test esi, esi
je 0x4a4ab5
push 1
mov dword [ebp - 4], 3
call fcn.00508da5
add esp, 4
mov dword [esi + 4], eax
jmp 0x4a4ab7
xor esi, esi
lea eax, [ebx + 8]
mov dword [edi + 0x30], esi
mov dword [edi + 0x38], eax
mov dword [edi + 0x3c], 0
mov dword [ebp - 4], 4
mov esi, dword [esi + 4]
mov ecx, esi
mov dword [ebp - 0x1c], esi
mov eax, dword [esi]
call dword [eax + 4]
lea eax, [ebp - 0x20]
mov dword [ebp - 4], 5
push eax
call fcn.00457f56
add esp, 4
mov ecx, eax
mov edx, dword [eax]
push 0x20
mov eax, dword [edx + 0x20]
call eax
mov byte [ebp + 0xb], al
mov dword [ebp - 4], 6
test esi, esi
je 0x4a4b1d
mov edx, dword [esi]
mov ecx, esi
call dword [edx + 8]
test eax, eax
je 0x4a4b1a
mov edx, dword [eax]
mov ecx, eax
push 1
call dword [edx]
mov al, byte [ebp + 0xb]
mov byte [ebp - 4], 2
cmp dword [edi + 0x38], 0
mov byte [edi + 0x40], al
jne 0x4a4b3d
mov eax, dword [edi + 0xc]
mov ecx, dword [edi + 0x10]
and eax, 0x13
or eax, 4
mov dword [edi + 0xc], eax
and ecx, eax
jne 0x4a4b6a
mov eax, dword [ebx]
pop edi
pop esi
mov eax, dword [eax + 4]
mov dword [ebx + eax], vtable.Poco::Net::HTTPHeaderOutputStream.0
mov eax, dword [ebx]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ecx + ebx - 4], eax
mov eax, ebx
mov ecx, dword [ebp - 0xc]
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8
test cl, 4
je 0x4a4b76
mov esi, str.ios_base::badbit_set
jmp 0x4a4b86
test cl, 2
mov esi, str.ios_base::failbit_set
mov eax, str.ios_base::eofbit_set
cmove esi, eax
lea eax, [ebp - 0x20]
push 1
push eax
call fcn.00455295
add esp, 8
lea ecx, [ebp - 0x34]
push eax
push esi
call fcn.004554a6
push 0x708b84
lea eax, [ebp - 0x34]
push eax
call fcn.0050c727
int3