joyce8/EMBER2024-capa huggingface dataset:
Function at 0x40a111
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push esi
push ebx
sub esp, 0x50
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x2c], 0x61d2e4
mov dword [esp + 4], 1
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.00407583
mov dword [ebp - 0xc], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00431daa
mov dword [esp + 8], eax
mov dword [esp + 4], 0x5a052f
lea eax, [ebp - 0x34]
mov dword [esp], eax
call fcn.00492911
call fcn.00404058
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 0x24]
mov dword [eax + 0x14], edx
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
mov dword [esp + 0x10], 0x4017d5
lea ecx, [ebp - 0x34]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], 0x59fe79
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00407412
mov dword [ebp - 0x14], 0x2727
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xc]
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], eax
call sub.cygcurl_4.dll_curl_easy_setopt
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.004043fd
test eax, eax
je 0x40a22d
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.004045c2
lea eax, [ebp - 0x34]
mov dword [esp], eax
call fcn.00491cd8
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x40a267
mov esi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x24]
call sub.cygwin1.dll___getreent
mov eax, dword [eax + 0xc]
mov dword [esp + 0xc], esi
mov dword [esp + 8], ebx
mov dword [esp + 4], str.PUT_error:_curl_result_d__HTTP_code_ld_n
mov dword [esp], eax
call sub.cygwin1.dll_fprintf
mov eax, 0
jmp 0x40a26c
lea eax, [ebp - 0x34]
mov dword [esp], eax
call fcn.00491cd8
call sub.cygwin1.dll___getreent
mov eax, dword [eax + 0xc]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x1c
mov dword [esp + 4], 1
mov dword [esp], str.Unable_to_start_PUT_request_n
call sub.cygwin1.dll_fwrite
mov eax, 0
jmp 0x40a26c
mov eax, 1
add esp, 0x50
pop ebx
pop esi
pop ebp
ret
Function at 0x4160f2
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x10], 0x61d2e4
mov dword [esp], 0x5a18a8
call sub.cygwin1.dll_getenv
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x416158
mov eax, dword [ebp - 0xc]
movzx eax, byte [eax]
test al, al
je 0x416158
mov eax, dword [ebp - 0xc]
mov dword [esp + 4], eax
lea eax, [ebp - 0x18]
mov dword [esp], eax
call fcn.00415275
mov dword [esp + 4], 0x20
lea eax, [ebp - 0x18]
mov dword [esp], eax
call fcn.004151e8
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x18]
mov dword [esp], eax
call fcn.004576eb
mov dword [esp + 4], 0x3d
lea eax, [ebp - 0x18]
mov dword [esp], eax
call fcn.004151e8
cmp dword [ebp + 0xc], 0
je 0x416195
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
lea eax, [ebp - 0x18]
mov dword [esp], eax
call fcn.004576eb
mov eax, dword [ebp - 0x10]
mov dword [esp + 8], 1
mov dword [esp + 4], eax
mov dword [esp], 0x5a18a8
call sub.cygwin1.dll_setenv
lea eax, [ebp - 0x18]
mov dword [esp], eax
call fcn.00491cd8
nop
leave
ret
Function at 0x419c1a
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [esp], str.GIT_CONFIG_SYSTEM
call sub.cygwin1.dll_getenv
mov dword [esp], eax
call fcn.0041508d
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x419c4c
mov dword [esp], str._etc_gitconfig
call fcn.0042cb25
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
call fcn.0044dcfb
mov eax, dword [ebp - 0xc]
leave
ret

Function at 0x419c63
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [esp], str.GIT_CONFIG_GLOBAL
call sub.cygwin1.dll_getenv
mov dword [esp], eax
call fcn.0041508d
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], 0
cmp dword [ebp - 0xc], 0
jne 0x419cb3
mov dword [esp + 4], 0
mov dword [esp], 0x5a25fa
call fcn.0044cfe8
mov dword [ebp - 0xc], eax
mov dword [esp], 0x5a2607
call fcn.0044e533
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0xc]
mov dword [eax], edx
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x10]
mov dword [eax], edx
nop
leave
ret

Function at 0x419cc6
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sub.cygwin1.dll_getenv
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x419cf4
mov eax, dword [ebp - 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00418294
jmp 0x419cf7
mov eax, dword [ebp + 0xc]
leave
ret

Function at 0x419cf9
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sub.cygwin1.dll_getenv
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x419d44
lea eax, [ebp + 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
call fcn.00417c45
test eax, eax
jne 0x419d44
mov dword [esp], str.failed_to_parse__s
call fcn.0041532e
mov edx, dword [ebp + 8]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.004b54c7
mov eax, dword [ebp + 0xc]
leave
ret

Function at 0x41eef5
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [esp], str.GIT_TEST_DATE_NOW
call sub.cygwin1.dll_getenv
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x41ef2c
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_atoi
mov edx, dword [ebp + 8]
mov dword [edx], eax
mov eax, dword [ebp + 8]
mov dword [eax + 4], 0
jmp 0x41ef3f
mov dword [esp + 4], 0
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sub.cygwin1.dll_gettimeofday
nop
leave
ret
Function at 0x42a228
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_getenv
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x42a249
mov eax, 0
jmp 0x42a272
mov eax, dword [ebp - 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.004962f4
mov eax, dword [ebp + 8]
mov edx, dword [eax]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
add eax, 0x3fffffff
shl eax, 2
add eax, edx
mov eax, dword [eax]
leave
ret

Function at 0x42a274
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
mov ecx, 0
mov eax, 0x18
and eax, 0xfffffffc
mov edx, eax
mov eax, 0
mov dword [ebp + eax - 0x28], ecx
add eax, 4
cmp eax, edx
jb 0x42a28e
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x34], 0x61d2ec
mov dword [esp + 4], 0x5a4009
lea eax, [ebp - 0x34]
mov dword [esp], eax
call fcn.0042a228
mov dword [ebp - 0x28], eax
mov dword [esp + 4], 0x5a3f47
lea eax, [ebp - 0x34]
mov dword [esp], eax
call fcn.0042a228
mov dword [ebp - 0x24], eax
mov dword [esp + 4], str.GIT_GRAFT_FILE
lea eax, [ebp - 0x34]
mov dword [esp], eax
call fcn.0042a228
mov dword [ebp - 0x20], eax
mov dword [esp + 4], str.GIT_INDEX_FILE
lea eax, [ebp - 0x34]
mov dword [esp], eax
call fcn.0042a228
mov dword [ebp - 0x1c], eax
mov dword [esp + 4], 0x5a3ef4
lea eax, [ebp - 0x34]
mov dword [esp], eax
call fcn.0042a228
mov dword [ebp - 0x18], eax
mov dword [esp], 0x5a4095
call sub.cygwin1.dll_getenv
test eax, eax
je 0x42a33a
mov dword [ebp - 0x14], 1
mov eax, dword [0x61cf40]
lea edx, [ebp - 0x28]
mov dword [esp + 8], edx
mov edx, dword [ebp + 8]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.0047963c
lea eax, [ebp - 0x34]
mov dword [esp], eax
call fcn.0049651f
mov dword [esp], str.GIT_NO_REPLACE_OBJECTS
call sub.cygwin1.dll_getenv
test eax, eax
je 0x42a37a
mov dword [0x5993a0], 0
mov dword [esp], str.GIT_REPLACE_REF_BASE
call sub.cygwin1.dll_getenv
mov dword [ebp - 0xc], eax
mov eax, dword [0x61c3c4]
mov dword [esp], eax
call sub.cygwin1.dll_free
cmp dword [ebp - 0xc], 0
je 0x42a3a1
mov eax, dword [ebp - 0xc]
jmp 0x42a3a6
mov eax, str.refs_replace_
mov dword [esp], eax
call fcn.004ba79d
mov dword [0x61c3c4], eax
mov eax, dword [0x61c3f0]
mov dword [esp], eax
call sub.cygwin1.dll_free
mov dword [esp], str.GIT_NAMESPACE
call sub.cygwin1.dll_getenv
mov dword [esp], eax
call fcn.0042a0f5
mov dword [0x61c3f0], eax
mov dword [esp], str.GIT_SHALLOW_FILE
call sub.cygwin1.dll_getenv
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x42a40a
mov eax, dword [0x61cf40]
mov dword [esp + 8], 0
mov edx, dword [ebp - 0x10]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.0048cd52
nop
leave
ret
Function at 0x42e4d0
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [esp], str.LANGUAGE
call sub.cygwin1.dll_getenv
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x42e4fa
mov eax, dword [ebp - 0xc]
movzx eax, byte [eax]
test al, al
je 0x42e4fa
mov eax, dword [ebp - 0xc]
jmp 0x42e559
mov dword [esp + 4], 0
mov dword [esp], 6
call sub.cygintl_8.dll_libintl_setlocale
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x42e554
mov eax, dword [ebp - 0xc]
movzx eax, byte [eax]
test al, al
je 0x42e554
mov dword [esp + 4], 0x5a4879
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_strcmp
test eax, eax
je 0x42e554
mov dword [esp + 4], str.POSIX
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_strcmp
test eax, eax
je 0x42e554
mov eax, dword [ebp - 0xc]
jmp 0x42e559
mov eax, 0
leave
ret

Function at 0x42e5ff
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [esp], str.GIT_TEXTDOMAINDIR
call sub.cygwin1.dll_getenv
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], 0
cmp dword [ebp - 0xc], 0
jne 0x42e636
mov dword [esp], str.share_locale
call fcn.0042cb25
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
call fcn.004cf044
test eax, eax
jne 0x42e652
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call sub.cygwin1.dll_free
jmp 0x42e6b0
mov eax, dword [ebp - 0xc]
mov dword [esp + 4], eax
mov dword [esp], 0x5a48b4
call sub.cygintl_8.dll_libintl_bindtextdomain
mov dword [esp + 4], 0x5a4881
mov dword [esp], 6
call sub.cygintl_8.dll_libintl_setlocale
mov dword [esp + 4], 0x5a4881
mov dword [esp], 5
call sub.cygintl_8.dll_libintl_setlocale
mov dword [esp], 0x5a48b4
call fcn.0042e590
mov dword [esp], 0x5a48b4
call sub.cygintl_8.dll_libintl_textdomain
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call sub.cygwin1.dll_free
leave
ret

Function at 0x42fba2
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [ebp + 0xc]
and eax, 2
test eax, eax
je 0x42fbba
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x1c]
jmp 0x42fbc0
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x18]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp + 0xc]
and eax, 1
test eax, eax
je 0x42fc01
mov eax, dword [ebp + 8]
mov eax, dword [eax]
test eax, eax
je 0x42fc01
call sub.cygwin1.dll___getreent
mov ecx, dword [eax + 8]
mov eax, dword [ebp + 8]
mov edx, dword [eax + 4]
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
mov dword [esp + 4], 1
mov dword [esp], eax
call sub.cygwin1.dll_fwrite
cmp dword [ebp - 0xc], 0
je 0x42fc1e
call sub.cygwin1.dll___getreent
mov eax, dword [eax + 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_fputs
nop
leave
ret
Function at 0x431029
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov dword [ebp - 4], 0x811c9dc5
jmp 0x431047
mov eax, dword [ebp - 4]
imul eax, eax, 0x1000193
xor eax, dword [ebp - 8]
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
lea edx, [eax + 1]
mov dword [ebp + 8], edx
movzx eax, byte [eax]
movzx eax, al
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x431038
mov eax, dword [ebp - 4]
leave
ret

Function at 0x431064
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov dword [ebp - 8], 0x811c9dc5
jmp 0x431092
cmp dword [ebp - 4], 0x60
jbe 0x431083
cmp dword [ebp - 4], 0x7a
ja 0x431083
sub dword [ebp - 4], 0x20
mov eax, dword [ebp - 8]
imul eax, eax, 0x1000193
xor eax, dword [ebp - 4]
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
lea edx, [eax + 1]
mov dword [ebp + 8], edx
movzx eax, byte [eax]
movzx eax, al
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x431073
mov eax, dword [ebp - 8]
leave
ret

Function at 0x4310af
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov dword [ebp - 4], 0x811c9dc5
mov eax, dword [ebp + 8]
mov dword [ebp - 8], eax
jmp 0x4310e5
mov eax, dword [ebp - 8]
lea edx, [eax + 1]
mov dword [ebp - 8], edx
movzx eax, byte [eax]
movzx eax, al
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 4]
imul eax, eax, 0x1000193
xor eax, dword [ebp - 0xc]
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
lea edx, [eax - 1]
mov dword [ebp + 0xc], edx
test eax, eax
jne 0x4310c4
mov eax, dword [ebp - 4]
leave
ret

Function at 0x4310f7
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov dword [ebp - 4], 0x811c9dc5
mov eax, dword [ebp + 8]
mov dword [ebp - 8], eax
jmp 0x43113d
mov eax, dword [ebp - 8]
lea edx, [eax + 1]
mov dword [ebp - 8], edx
movzx eax, byte [eax]
movzx eax, al
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x60
jbe 0x43112e
cmp dword [ebp - 0xc], 0x7a
ja 0x43112e
sub dword [ebp - 0xc], 0x20
mov eax, dword [ebp - 4]
imul eax, eax, 0x1000193
xor eax, dword [ebp - 0xc]
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
lea edx, [eax - 1]
mov dword [ebp + 0xc], edx
test eax, eax
jne 0x43110c
mov eax, dword [ebp - 4]
leave
ret

Function at 0x43114f
Capabilities:
Hash data using fnv

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [ebp + 8]
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 8], eax
jmp 0x431194
mov eax, dword [ebp - 8]
lea edx, [eax + 1]
mov dword [ebp - 8], edx
movzx eax, byte [eax]
movzx eax, al
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x60
jbe 0x431185
cmp dword [ebp - 0xc], 0x7a
ja 0x431185
sub dword [ebp - 0xc], 0x20
mov eax, dword [ebp - 4]
imul eax, eax, 0x1000193
xor eax, dword [ebp - 0xc]
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
lea edx, [eax - 1]
mov dword [ebp + 0x10], edx
test eax, eax
jne 0x431163
mov eax, dword [ebp - 4]
leave
ret
Function at 0x432632
Capabilities:
Resolve dns

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
mov dword [ebp - 0xc], 0xffffffff
mov dword [esp + 8], 0x20
mov dword [esp + 4], 0
lea eax, [ebp - 0x2c]
mov dword [esp], eax
call sub.cygwin1.dll_memset
mov dword [ebp - 0x2c], 2
lea eax, [ebp - 0x30]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x2c]
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sub.cygwin1.dll_getaddrinfo
test eax, eax
jne 0x4326d8
mov eax, dword [ebp - 0x30]
test eax, eax
je 0x4326cd
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0x14]
test eax, eax
je 0x4326cd
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0x14]
mov dword [esp + 4], 0x2e
mov dword [esp], eax
call sub.cygwin1.dll_strchr
test eax, eax
je 0x4326cd
mov eax, dword [ebp - 0x30]
mov eax, dword [eax + 0x14]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.00432437
mov dword [ebp - 0xc], 0
mov eax, dword [ebp - 0x30]
mov dword [esp], eax
call sub.cygwin1.dll_freeaddrinfo
mov eax, dword [ebp - 0xc]
leave
ret

Function at 0x432839
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [0x61c634]
and eax, 2
test eax, eax
jne 0x432911
mov eax, dword [0x599590]
test eax, eax
jne 0x432911
mov dword [esp], str.EMAIL
call sub.cygwin1.dll_getenv
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x4328aa
mov eax, dword [ebp - 0xc]
movzx eax, byte [eax]
test al, al
je 0x4328aa
mov eax, dword [ebp - 0xc]
mov dword [esp + 4], eax
mov dword [esp], 0x59958c
call fcn.00432437
mov eax, dword [0x61c62c]
or eax, 2
mov dword [0x61c62c], eax
mov eax, dword [0x61c630]
or eax, 2
mov dword [0x61c630], eax
jmp 0x432905
mov dword [ebp - 0xc], 0
cmp dword [ebp - 0xc], 0
je 0x4328e1
mov eax, dword [ebp - 0xc]
movzx eax, byte [eax]
test al, al
je 0x4328e1
mov eax, dword [ebp - 0xc]
mov dword [esp + 4], eax
mov dword [esp], 0x59958c
call fcn.00432437
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_free
jmp 0x432905
mov dword [esp], 0x61c620
call fcn.00432485
mov dword [esp + 8], 0x61c620
mov dword [esp + 4], 0x59958c
mov dword [esp], eax
call fcn.0043279c
mov dword [esp], 0x59958c
call fcn.00491ebf
mov eax, dword [0x599594]
leave
ret

Function at 0x433113
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
cmp dword [ebp + 8], 2
je 0x43315f
cmp dword [ebp + 8], 2
ja 0x433180
cmp dword [ebp + 8], 0
je 0x43317f
cmp dword [ebp + 8], 1
jne 0x433180
mov dword [esp], 0x5a567b
call sub.cygwin1.dll_getenv
mov dword [ebp - 0xc], eax
mov dword [esp], 0x5a568b
call sub.cygwin1.dll_getenv
mov dword [ebp - 0x10], eax
jmp 0x433180
mov dword [esp], 0x5a569c
call sub.cygwin1.dll_getenv
mov dword [ebp - 0xc], eax
mov dword [esp], 0x5a56af
call sub.cygwin1.dll_getenv
mov dword [ebp - 0x10], eax
jmp 0x433180
nop
mov dword [esp + 0x10], 3
mov dword [esp + 0xc], 0
mov eax, dword [ebp + 8]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x10]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
call fcn.00432ddb
leave
ret
Function at 0x4331ab
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push esi
push ebx
sub esp, 0x20
mov dword [esp], 0x5a567b
call sub.cygwin1.dll_getenv
test eax, eax
je 0x4331d0
mov eax, dword [0x61c630]
or eax, 1
mov dword [0x61c630], eax
mov dword [esp], 0x5a568b
call sub.cygwin1.dll_getenv
test eax, eax
je 0x4331ed
mov eax, dword [0x61c630]
or eax, 2
mov dword [0x61c630], eax
mov dword [esp], 0x5a56c3
call sub.cygwin1.dll_getenv
mov esi, eax
mov dword [esp], 0x5a568b
call sub.cygwin1.dll_getenv
mov ebx, eax
mov dword [esp], 0x5a567b
call sub.cygwin1.dll_getenv
mov edx, dword [ebp + 8]
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], esi
mov dword [esp + 8], 1
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00432ddb
add esp, 0x20
pop ebx
pop esi
pop ebp
ret

Function at 0x43323b
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push esi
push ebx
sub esp, 0x20
mov dword [esp], 0x5a569c
call sub.cygwin1.dll_getenv
test eax, eax
je 0x433260
mov eax, dword [0x61c62c]
or eax, 1
mov dword [0x61c62c], eax
mov dword [esp], 0x5a56af
call sub.cygwin1.dll_getenv
test eax, eax
je 0x43327d
mov eax, dword [0x61c62c]
or eax, 2
mov dword [0x61c62c], eax
mov dword [esp], str.GIT_COMMITTER_DATE
call sub.cygwin1.dll_getenv
mov esi, eax
mov dword [esp], 0x5a56af
call sub.cygwin1.dll_getenv
mov ebx, eax
mov dword [esp], 0x5a569c
call sub.cygwin1.dll_getenv
mov edx, dword [ebp + 8]
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], esi
mov dword [esp + 8], 2
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.00432ddb
add esp, 0x20
pop ebx
pop esi
pop ebp
ret
Function at 0x438874
Capabilities:
Create directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x88
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.004cea94
mov edx, eax
mov eax, dword [ebp + 8]
add eax, edx
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], 0
jmp 0x4389e3
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x14], eax
jmp 0x4388aa
add dword [ebp - 0x14], 1
mov eax, dword [ebp - 0x14]
movzx eax, byte [eax]
test al, al
je 0x4388c9
mov eax, dword [ebp - 0x14]
movzx eax, byte [eax]
movsx eax, al
mov dword [esp], eax
call fcn.004374bc
test eax, eax
je 0x4388a6
mov eax, dword [ebp - 0x14]
movzx eax, byte [eax]
test al, al
je 0x4389f5
mov eax, dword [ebp - 0x14]
add eax, 1
mov dword [ebp - 0xc], eax
jmp 0x4388e6
add dword [ebp - 0xc], 1
mov eax, dword [ebp - 0xc]
movzx eax, byte [eax]
movsx eax, al
mov dword [esp], eax
call fcn.004374bc
test eax, eax
jne 0x4388e2
mov eax, dword [ebp - 0xc]
movzx eax, byte [eax]
test al, al
je 0x4389f8
mov eax, dword [ebp - 0x14]
movzx eax, byte [eax]
mov byte [ebp - 0x15], al
mov eax, dword [ebp - 0x14]
mov byte [eax], 0
lea eax, [ebp - 0x78]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sub.cygwin1.dll__stat64
test eax, eax
jne 0x438958
mov eax, dword [ebp - 0x68]
and eax, 0xf000
cmp eax, 0x4000
je 0x4389da
call sub.cygwin1.dll___errno
mov dword [eax], 0x14
mov dword [ebp - 0x10], 0xfffffffd
jmp 0x4389da
mov dword [esp + 4], 0x1ff
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sub.cygwin1.dll_mkdir
test eax, eax
je 0x4389be
call sub.cygwin1.dll___errno
mov eax, dword [eax]
cmp eax, 0x11
jne 0x4389a0
lea eax, [ebp - 0x78]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sub.cygwin1.dll__stat64
test eax, eax
jne 0x4389a0
mov eax, dword [ebp - 0x68]
and eax, 0xf000
cmp eax, 0x4000
je 0x4389da
call sub.cygwin1.dll___errno
mov eax, dword [eax]
cmp eax, 2
jne 0x4389b5
mov dword [ebp - 0x10], 0xfffffffc
jmp 0x4389da
mov dword [ebp - 0x10], 0xffffffff
jmp 0x4389da
cmp dword [ebp + 0xc], 0
je 0x4389da
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.0044d488
test eax, eax
je 0x4389da
mov dword [ebp - 0x10], 0xfffffffe
mov eax, dword [ebp - 0x14]
movzx edx, byte [ebp - 0x15]
mov byte [eax], dl
cmp dword [ebp - 0x10], 0
jne 0x4389f9
cmp dword [ebp - 0xc], 0
jne 0x43889e
jmp 0x4389f9
nop
jmp 0x4389f9
nop
mov eax, dword [ebp - 0x10]
leave
ret

Function at 0x439bb9
Capabilities:
Set file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov dword [esp + 4], 0
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sub.cygwin1.dll_utime
test eax, eax
sete al
movzx eax, al
leave
ret