joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4422fe
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
cmp dword [ebp + 8], 0
jne 0x442314
mov eax, 0
jmp 0x44239b
mov dword [esp], str.GIT_PAGER
call sub.cygwin1.dll_getenv
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x44234e
mov eax, dword [0x61ed50]
test eax, eax
jne 0x442346
mov dword [esp + 4], 0
mov dword [esp], 0x4422be
call fcn.00413b7f
mov eax, dword [0x61ed50]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x442363
mov dword [esp], str.PAGER
call sub.cygwin1.dll_getenv
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x442370
mov dword [ebp - 0xc], str.less
mov eax, dword [ebp - 0xc]
movzx eax, byte [eax]
test al, al
je 0x442391
mov dword [esp + 4], 0x5a96d0
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_strcmp
test eax, eax
jne 0x442398
mov dword [ebp - 0xc], 0
mov eax, dword [ebp - 0xc]
leave
ret

Function at 0x44239d
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
mov dword [esp], str.LESSFRX_LV_c
call fcn.004b4201
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x1c]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.004c9adb
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jns 0x4423e8
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
call fcn.004c9da6
mov dword [esp + 4], eax
mov dword [esp], str.malformed_build_time_PAGER_ENV:__s
call fcn.004ae00f
mov dword [ebp - 0xc], 0
jmp 0x442468
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xc]
shl eax, 2
add eax, edx
mov eax, dword [eax]
mov dword [esp + 4], 0x3d
mov dword [esp], eax
call sub.cygwin1.dll_strchr
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x442423
mov dword [esp], str.malformed_build_time_PAGER_ENV
call fcn.004ae00f
mov eax, dword [ebp - 0x18]
mov byte [eax], 0
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xc]
shl eax, 2
add eax, edx
mov eax, dword [eax]
mov dword [esp], eax
call sub.cygwin1.dll_getenv
test eax, eax
jne 0x442464
mov eax, dword [ebp - 0x18]
mov byte [eax], 0x3d
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xc]
shl eax, 2
add eax, edx
mov eax, dword [eax]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.0048ee3c
add dword [ebp - 0xc], 1
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x14]
jl 0x4423f1
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call sub.cygwin1.dll_free
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call sub.cygwin1.dll_free
nop
leave
ret
Function at 0x442624
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [0x61ed58]
test eax, eax
je 0x44263d
mov eax, dword [0x61ed58]
jmp 0x4426d1
mov dword [0x61ed58], 0x50
mov dword [0x61ed54], 1
mov dword [esp], str.COLUMNS
call sub.cygwin1.dll_getenv
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x44268e
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_atoi
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jle 0x44268e
mov eax, dword [ebp - 0x10]
mov dword [0x61ed58], eax
mov dword [0x61ed54], 0
jmp 0x4426cc
lea eax, [ebp - 0x18]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x5401
mov dword [esp], 1
call sub.cygwin1.dll_ioctl
test eax, eax
jne 0x4426cc
movzx eax, word [ebp - 0x16]
test ax, ax
je 0x4426cc
movzx eax, word [ebp - 0x16]
movzx eax, ax
mov dword [0x61ed58], eax
mov dword [0x61ed54], 0
mov eax, dword [0x61ed58]
leave
ret

Function at 0x4426d3
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
sub esp, 0x14
call fcn.00508892
test eax, eax
je 0x442710
call fcn.00442624
mov ebx, eax
call sub.cygwin1.dll___getreent
mov eax, dword [eax + 0xc]
mov dword [esp + 0xc], 0x5a974e
mov dword [esp + 8], ebx
mov dword [esp + 4], str._r_s_r
mov dword [esp], eax
call sub.cygwin1.dll_fprintf
jmp 0x442738
call sub.cygwin1.dll___getreent
mov eax, dword [eax + 0xc]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 4
mov dword [esp + 4], 1
mov dword [esp], str._re_K
call sub.cygwin1.dll_fwrite
nop
mov ebx, dword [ebp - 4]
leave
ret
Function at 0x444508
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x24], 0x62f624
mov eax, dword [ebp + 8]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp + 8]
test eax, eax
je 0x444649
mov eax, dword [ebp + 8]
lea edx, [ebp + 8]
mov dword [esp + 8], edx
mov dword [esp + 4], str.__prefix__
mov dword [esp], eax
call fcn.00442c8d
test eax, eax
je 0x444569
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.004291e1
jmp 0x444660
mov eax, dword [ebp + 8]
movzx eax, byte [eax]
cmp al, 0x7e
jne 0x444622
mov eax, dword [ebp + 8]
mov dword [esp + 4], 0x2f
mov dword [esp], eax
call fcn.00442d30
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 8]
add eax, 1
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x4445ec
mov dword [esp], str.HOME
call sub.cygwin1.dll_getenv
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x44464c
cmp dword [ebp + 0xc], 0
je 0x4445d8
mov eax, dword [ebp - 0x20]
mov dword [esp + 4], eax
lea eax, [ebp - 0x2c]
mov dword [esp], eax
call fcn.0048c84b
jmp 0x44461c
mov eax, dword [ebp - 0x20]
mov dword [esp + 4], eax
lea eax, [ebp - 0x2c]
mov dword [esp], eax
call fcn.00442e9b
jmp 0x44461c
mov eax, dword [ebp - 0x18]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
call fcn.004444cf
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x44464f
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 0x18]
mov dword [esp + 4], eax
lea eax, [ebp - 0x2c]
mov dword [esp], eax
call fcn.00442e9b
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov dword [esp + 4], eax
lea eax, [ebp - 0x2c]
mov dword [esp], eax
call fcn.00442e9b
mov dword [esp + 4], 0
lea eax, [ebp - 0x2c]
mov dword [esp], eax
call fcn.0048a853
jmp 0x444660
nop
jmp 0x444650
nop
jmp 0x444650
nop
lea eax, [ebp - 0x2c]
mov dword [esp], eax
call fcn.0048a820
mov eax, 0
leave
ret
Function at 0x445978
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
cmp dword [ebp + 8], 0
jne 0x4459a8
mov dword [esp + 0xc], str.subdir
mov dword [esp + 8], str.xdg_config_home_for
mov dword [esp + 4], 0x605
mov dword [esp], str.path.c
call sub.cygwin1.dll___assert_func
cmp dword [ebp + 0xc], 0
jne 0x4459d2
mov dword [esp + 0xc], 0x5a99bc
mov dword [esp + 8], str.xdg_config_home_for
mov dword [esp + 4], 0x606
mov dword [esp], str.path.c
call sub.cygwin1.dll___assert_func
mov dword [esp], str.XDG_CONFIG_HOME
call sub.cygwin1.dll_getenv
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x445a14
mov eax, dword [ebp - 0xc]
movzx eax, byte [eax]
test al, al
je 0x445a14
mov eax, dword [ebp + 0xc]
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 8]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0xc]
mov dword [esp + 4], eax
mov dword [esp], 0x5a99d5
call fcn.00443e97
jmp 0x445a51
mov dword [esp], str.HOME
call sub.cygwin1.dll_getenv
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x445a4c
mov eax, dword [ebp + 0xc]
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 8]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x10]
mov dword [esp + 4], eax
mov dword [esp], str._s_.config__s__s
call fcn.00443e97
jmp 0x445a51
mov eax, 0
leave
ret

Function at 0x44fce9
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [ebp - 0xc], 0
mov eax, dword [ebp + 0xc]
and eax, 1
test eax, eax
je 0x44fd57
mov dword [esp], str.GIT_ASKPASS
call sub.cygwin1.dll_getenv
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x44fd1d
mov eax, dword [0x61e724]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x44fd32
mov dword [esp], str.SSH_ASKPASS
call sub.cygwin1.dll_getenv
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x44fd57
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax]
test al, al
je 0x44fd57
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.0044fbbd
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x44fdc8
mov dword [esp + 4], 1
mov dword [esp], str.GIT_TERMINAL_PROMPT
call fcn.004135de
test eax, eax
je 0x44fda1
mov eax, dword [ebp + 0xc]
and eax, 2
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.004e8e34
mov dword [ebp - 0xc], eax
call sub.cygwin1.dll___errno
mov eax, dword [eax]
mov dword [esp], eax
call sub.cygwin1.dll_strerror
mov dword [ebp - 0x14], eax
jmp 0x44fda8
mov dword [ebp - 0x14], str.terminal_prompts_disabled
cmp dword [ebp - 0xc], 0
jne 0x44fdc8
mov eax, dword [ebp - 0x14]
mov dword [esp + 8], eax
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
mov dword [esp], str.could_not_read__s_s
call fcn.004ae00f
mov eax, dword [ebp - 0xc]
leave
ret
Function at 0x44feba
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
mov dword [ebp - 0xc], 0x5aad5a
lea eax, [ebp - 0x1c]
mov dword [esp + 4], eax
mov dword [esp], 0x5aad74
call fcn.00414835
test eax, eax
jne 0x44ff0a
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call fcn.0044fe53
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffff
jne 0x44ff05
mov eax, dword [ebp - 0x1c]
mov dword [esp + 4], eax
mov dword [esp], str.unknown_value_for_config_protocol.version:__s
call fcn.004ae00f
mov eax, dword [ebp - 0x18]
jmp 0x44ff60
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_getenv
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x44ff5b
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax]
test al, al
je 0x44ff5b
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.0044fe53
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xffffffff
jne 0x44ff56
mov eax, dword [ebp - 0x10]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0xc]
mov dword [esp + 4], eax
mov dword [esp], str.unknown_value_for__s:__s
call fcn.004ae00f
mov eax, dword [ebp - 0x14]
jmp 0x44ff60
mov eax, 2
leave
ret
Function at 0x455035
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [esp], str.GIT_INDEX_VERSION
call sub.cygwin1.dll_getenv
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], 3
cmp dword [ebp - 0x10], 0
jne 0x4550a9
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00471246
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x68]
test eax, eax
js 0x455075
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x68]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 1
jbe 0x455081
cmp dword [ebp - 0xc], 4
jbe 0x4550a4
mov dword [esp], str.index.version_set__but_the_value_is_invalid._nUsing_version__i
call fcn.00451a44
mov dword [esp + 4], 3
mov dword [esp], eax
call fcn.004ae342
mov eax, 3
jmp 0x455102
mov eax, dword [ebp - 0xc]
jmp 0x455102
mov dword [esp + 8], 0xa
lea eax, [ebp - 0x14]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call sub.cygwin1.dll_strtoul
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x14]
movzx eax, byte [eax]
test al, al
jne 0x4550dc
cmp dword [ebp - 0xc], 1
jbe 0x4550dc
cmp dword [ebp - 0xc], 4
jbe 0x4550ff
mov dword [esp], str.GIT_INDEX_VERSION_set__but_the_value_is_invalid._nUsing_version__i
call fcn.00451a44
mov dword [esp + 4], 3
mov dword [esp], eax
call fcn.004ae342
mov dword [ebp - 0xc], 3
mov eax, dword [ebp - 0xc]
leave
ret
Function at 0x45b6b1
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push ebx
sub esp, 0x34
mov dword [ebp - 0xc], str.init.defaultbranch
mov dword [ebp - 0x10], str.init.defaultBranch
mov dword [ebp - 0x1c], 0
mov dword [esp], str.GIT_TEST_DEFAULT_INITIAL_BRANCH_NAME
call sub.cygwin1.dll_getenv
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x45b6fc
mov eax, dword [ebp - 0x14]
movzx eax, byte [eax]
test al, al
je 0x45b6fc
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
call fcn.004b4201
mov dword [ebp - 0x1c], eax
jmp 0x45b734
lea eax, [ebp - 0x1c]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.004145bd
test eax, eax
jns 0x45b734
mov dword [esp], str.could_not_retrieve___s_
call fcn.0045a8e9
mov edx, dword [ebp - 0x10]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.004ae00f
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x45b76b
mov dword [esp], str.master
call fcn.004b4201
mov dword [ebp - 0x1c], eax
cmp dword [ebp + 0xc], 0
jne 0x45b76b
mov ebx, dword [ebp - 0x1c]
mov dword [esp], str.Using__s_as_the_name_for_the_initial_branch._This_default_branch_name_nis_subject_to_change._To_configure_the_initial_branch_name_to_use_in_all_nof_your_new_repositories__which_will_suppress_this_warning__call:_n_n_tgit_config___global_init.defaultBranch__name__n_nNames_commonly_chosen_instead_of_master_are_main__trunk_and_ndevelopment._The_just_created_branch_can_be_renamed_via_this_command:_n_n_tgit_branch__m__name__n
call fcn.0045a8e9
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.004c9457
mov eax, dword [ebp - 0x1c]
mov dword [esp + 4], eax
mov dword [esp], 0x5ac050
call fcn.0048ca85
mov dword [ebp - 0x18], eax
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x18]
mov dword [esp], eax
call fcn.0045ac55
test eax, eax
je 0x45b7ba
mov ebx, dword [ebp - 0x1c]
mov dword [esp], str.invalid_branch_name:__s___s
call fcn.0045a8e9
mov dword [esp + 8], ebx
mov edx, dword [ebp - 0x10]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.004ae00f
mov eax, dword [ebp - 0x18]
mov dword [esp], eax
call sub.cygwin1.dll_free
mov eax, dword [ebp - 0x1c]
mov ebx, dword [ebp - 4]
leave
ret
Function at 0x45c511
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb8
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x9c], eax
mov dword [esp + 8], 0x88
mov dword [esp + 4], 0
lea eax, [ebp - 0x90]
mov dword [esp], eax
call sub.cygwin1.dll_memset
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0xa0]
mov edx, dword [ebp - 0x9c]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], edx
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x80]
test eax, eax
jne 0x45c5c4
lea eax, [ebp - 0x90]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x45c434
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.0045eecc
mov eax, 0
jmp 0x45c66f
lea eax, [ebp - 0x90]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x45c1ca
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.0045eecc
mov eax, dword [ebp - 0x7c]
test eax, eax
jne 0x45c638
mov eax, dword [ebp + 0x10]
and eax, 1
test eax, eax
je 0x45c61d
mov dword [esp + 8], pe_nt_image_headers32
mov dword [esp + 4], 0x3dd
mov dword [esp], str.refs.c
call fcn.00499d7f
mov dword [esp], eax
call sub.cygwin1.dll_exit
mov dword [esp], str.log_for__s_is_empty
call fcn.0045a8e9
mov edx, dword [ebp + 0xc]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.004ae00f
mov eax, dword [ebp - 0x74]
test eax, eax
je 0x45c646
mov eax, 0
jmp 0x45c66f
lea eax, [ebp - 0x90]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x45c48f
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.0045ef2b
mov eax, 1
leave
ret
Function at 0x463fa2
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [ebp - 0xc], 0xffffffff
mov eax, dword [ebp + 8]
add eax, 4
mov dword [esp], eax
call fcn.0042d721
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call sub.cygwin1.dll_unlink
mov eax, dword [ebp - 0x10]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_symlink
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call sub.cygwin1.dll_free
cmp dword [ebp - 0xc], 0
je 0x464019
call sub.cygwin1.dll___getreent
mov eax, dword [eax + 0xc]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x2a
mov dword [esp + 4], 1
mov dword [esp], str.no_symlink___falling_back_to_symbolic_ref_n
call sub.cygwin1.dll_fwrite
mov eax, dword [ebp - 0xc]
leave
ret
Function at 0x47e219
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
mov dword [esp], str.PATH
call sub.cygwin1.dll_getenv
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x14], 0x62f624
cmp dword [ebp - 0xc], 0
je 0x47e25a
mov eax, dword [ebp - 0xc]
movzx eax, byte [eax]
test al, al
jne 0x47e264
mov eax, 0
jmp 0x47e323
mov dword [esp + 4], 0x3a
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
call fcn.0047dce7
mov dword [ebp - 0x10], eax
mov dword [esp + 4], 0
lea eax, [ebp - 0x1c]
mov dword [esp], eax
call fcn.0047dd91
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0xc]
je 0x47e2c4
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0xc]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0xc]
mov dword [esp + 4], eax
lea eax, [ebp - 0x1c]
mov dword [esp], eax
call fcn.0048b2d1
mov dword [esp + 4], 0x2f
lea eax, [ebp - 0x1c]
mov dword [esp], eax
call fcn.0047de28
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x1c]
mov dword [esp], eax
call fcn.0047de84
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
call fcn.0047e1df
test eax, eax
je 0x47e2fa
mov dword [esp + 4], 0
lea eax, [ebp - 0x1c]
mov dword [esp], eax
call fcn.0048a853
jmp 0x47e323
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax]
test al, al
je 0x47e312
mov eax, dword [ebp - 0x10]
add eax, 1
mov dword [ebp - 0xc], eax
jmp 0x47e264
nop
lea eax, [ebp - 0x1c]
mov dword [esp], eax
call fcn.0048a820
mov eax, 0
leave
ret
Function at 0x47ff85
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
cmp dword [ebp + 8], 0x20
jne 0x47ffea
call fcn.0047ff3d
test eax, eax
je 0x47ffa6
mov dword [esp], 0x8d
call fcn.0047ff74
mov dword [esp + 4], 0
mov dword [esp], 0xd
call sub.cygwin1.dll_signal
mov dword [esp], 0xd
call sub.cygwin1.dll_raise
mov dword [esp + 8], 0x8d
mov dword [esp + 4], 0x48b
mov dword [esp], str.run_command.c
call fcn.00499d7f
mov dword [esp], eax
call sub.cygwin1.dll_exit
nop
leave
ret

Function at 0x48208b
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [esp], str.GIT_COMMON_DIR
call sub.cygwin1.dll_getenv
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x4820bf
mov eax, dword [ebp - 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.0048188e
mov eax, 1
jmp 0x4820d1
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.004820d3
leave
ret
Function at 0x4836be
Capabilities:
Query environment variable
Set current directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [ebp + 0x18]
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.004829cc
test eax, eax
je 0x4836eb
mov eax, 0
jmp 0x48388f
mov dword [esp], str.GIT_WORK_TREE
call sub.cygwin1.dll_getenv
test eax, eax
jne 0x483708
mov eax, dword [0x61e758]
test eax, eax
je 0x4837a3
mov dword [ebp - 0xc], 0
mov eax, dword [ebp + 0xc]
mov edx, dword [eax + 4]
mov eax, dword [ebp + 0x10]
cmp edx, eax
je 0x483747
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00481942
test eax, eax
jne 0x483747
mov dword [esp + 4], 1
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.004c907f
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp + 8], eax
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 8]
mov dword [esp], eax
call sub.cygwin1.dll_chdir
test eax, eax
je 0x48376d
mov dword [esp], str.cannot_come_back_to_cwd
call fcn.004818fd
mov dword [esp], eax
call fcn.004ae15c
mov eax, dword [ebp + 0x18]
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 8], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00483352
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_free
mov eax, dword [ebp - 0x10]
jmp 0x48388f
mov eax, dword [0x59b3ec]
test eax, eax
jle 0x4837fc
mov eax, dword [ebp + 0xc]
mov edx, dword [eax + 4]
mov eax, dword [ebp + 0x10]
cmp edx, eax
setne al
movzx eax, al
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00426f3c
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 8]
mov dword [esp], eax
call sub.cygwin1.dll_chdir
test eax, eax
je 0x4837f2
mov dword [esp], str.cannot_come_back_to_cwd
call fcn.004818fd
mov dword [esp], eax
call fcn.004ae15c
mov eax, 0
jmp 0x48388f
mov dword [esp], 0x5b0bcc
call fcn.00426c20
mov dword [esp + 4], 0x5b0b5f
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sub.cygwin1.dll_strcmp
test eax, eax
je 0x483832
mov dword [esp + 4], 0
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00426f3c
mov dword [0x59bb90], 0
mov dword [0x59bb94], 1
mov eax, dword [ebp + 0xc]
mov edx, dword [eax + 4]
mov eax, dword [ebp + 0x10]
cmp edx, eax
ja 0x48385a
mov eax, 0
jmp 0x48388f
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 8]
mov dword [esp], eax
call fcn.004c84f8
cmp dword [ebp + 0x10], eax
je 0x483871
add dword [ebp + 0x10], 1
mov dword [esp + 4], 0x2f
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.00481832
mov eax, dword [ebp + 0xc]
mov edx, dword [eax + 8]
mov eax, dword [ebp + 0x10]
add eax, edx
leave
ret
Function at 0x483891
Capabilities:
Query environment variable
Set current directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [ebp + 0x14]
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 4], eax
mov dword [esp], 0x5b0bcc
call fcn.004829cc
test eax, eax
je 0x4838bf
mov eax, 0
jmp 0x483a12
mov dword [esp + 8], 1
mov dword [esp + 4], 0x5b0f86
mov dword [esp], str.GIT_IMPLICIT_WORK_TREE
call sub.cygwin1.dll_setenv
mov dword [esp], str.GIT_WORK_TREE
call sub.cygwin1.dll_getenv
test eax, eax
jne 0x4838f4
mov eax, dword [0x61e758]
test eax, eax
je 0x48396f
mov eax, dword [ebp + 8]
mov edx, dword [eax + 4]
mov eax, dword [ebp + 0xc]
cmp edx, eax
je 0x483918
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.004b4370
jmp 0x48391d
mov eax, 0x5b0bcc
mov dword [0x62f48c], eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov dword [esp], eax
call sub.cygwin1.dll_chdir
test eax, eax
je 0x483948
mov dword [esp], str.cannot_come_back_to_cwd
call fcn.004818fd
mov dword [esp], eax
call fcn.004ae15c
mov eax, dword [0x62f48c]
mov edx, dword [ebp + 0x14]
mov dword [esp + 0xc], edx
mov edx, dword [ebp + 0x10]
mov dword [esp + 8], edx
mov edx, dword [ebp + 8]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00483352
jmp 0x483a12
mov dword [0x59bb90], 1
mov dword [0x59bb94], 0
mov eax, dword [ebp + 8]
mov edx, dword [eax + 4]
mov eax, dword [ebp + 0xc]
cmp edx, eax
je 0x4839f9
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov dword [esp], eax
call sub.cygwin1.dll_chdir
test eax, eax
je 0x4839b6
mov dword [esp], str.cannot_come_back_to_cwd
call fcn.004818fd
mov dword [esp], eax
call fcn.004ae15c
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov dword [esp], eax
call fcn.004c84f8
mov dword [ebp - 0xc], eax
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp + 0xc]
cmp edx, eax
cmovge eax, edx
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.0048179b
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.00426f3c
jmp 0x483a0d
mov dword [esp + 4], 0
mov dword [esp], 0x5b0bcc
call fcn.00426f3c
mov eax, 0
leave
ret