joyce8/EMBER2024-capa huggingface dataset:
Function at 0x516af2
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x10], 0x62f624
mov dword [ebp - 0xc], 0
mov eax, dword [0x62ff10]
mov dword [esp], eax
call fcn.00514e02
cmp dword [ebp + 8], 0
je 0x516c09
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00516adf
test eax, eax
je 0x516be3
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00516c8d
mov dword [ebp - 0xc], 1
jmp 0x516be3
lea eax, [ebp - 0x18]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00516912
mov dword [ebp - 0xc], eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0x608]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
mov dword [esp + 4], 1
mov dword [esp], eax
call sub.cygwin1.dll_fwrite
cmp dword [ebp - 0xc], 0
jne 0x516bd0
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + 0x608]
mov dword [esp + 4], eax
mov dword [esp], 0xa
call sub.cygwin1.dll_putc
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
add eax, 0x4a4
mov dword [esp], eax
call fcn.00514e02
mov dword [esp + 4], 0
lea eax, [ebp - 0x18]
mov dword [esp], eax
call fcn.00514cc1
cmp dword [ebp - 0xc], 0
jne 0x516bfc
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00516adf
test eax, eax
je 0x516b5c
lea eax, [ebp - 0x18]
mov dword [esp], eax
call fcn.0048a820
jmp 0x516c0a
nop
leave
ret

Function at 0x516c0c
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0xc], 0x62f624
mov eax, dword [0x62ff10]
mov dword [esp], eax
call fcn.00514e02
cmp dword [ebp + 8], 0
je 0x516c8a
lea eax, [ebp - 0x14]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00516912
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0x608]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
mov dword [esp + 4], 1
mov dword [esp], eax
call sub.cygwin1.dll_fwrite
lea eax, [ebp - 0x14]
mov dword [esp], eax
call fcn.0048a820
jmp 0x516c8b
nop
leave
ret

Function at 0x516c8d
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0xc], 0x62f624
mov eax, dword [0x62ff10]
mov dword [esp], eax
call fcn.00514e02
cmp dword [ebp + 8], 0
je 0x516d0b
lea eax, [ebp - 0x14]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.005169ec
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0x608]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
mov dword [esp + 4], 1
mov dword [esp], eax
call sub.cygwin1.dll_fwrite
lea eax, [ebp - 0x14]
mov dword [esp], eax
call fcn.0048a820
jmp 0x516d0c
nop
leave
ret
Function at 0x516d0e
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x10], 0x62f624
mov dword [ebp - 0xc], 0
mov eax, dword [0x62ff10]
mov dword [esp], eax
call fcn.00514e02
cmp dword [ebp + 8], 0
jne 0x516d54
mov eax, 0
jmp 0x516e15
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00516adf
test eax, eax
je 0x516d6d
mov eax, 0
jmp 0x516e15
lea eax, [ebp - 0x18]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00516912
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0x608]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
mov dword [esp + 4], 1
mov dword [esp], eax
call sub.cygwin1.dll_fwrite
mov dword [esp + 4], 0
lea eax, [ebp - 0x18]
mov dword [esp], eax
call fcn.00514cc1
mov dword [ebp - 0xc], 1
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00516adf
test eax, eax
jne 0x516e06
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov eax, dword [eax + 0x608]
mov dword [esp + 4], eax
mov dword [esp], 0xa
call sub.cygwin1.dll_putc
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
add eax, 0x4a4
mov dword [esp], eax
call fcn.00514e02
jmp 0x516d6d
nop
lea eax, [ebp - 0x18]
mov dword [esp], eax
call fcn.0048a820
mov eax, dword [ebp - 0xc]
leave
ret

Function at 0x516e17
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [ebp + 0x10]
mov eax, dword [eax + 8]
mov dword [ebp - 0xc], eax
jmp 0x516eac
mov dword [esp + 4], 0xa
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_strchr
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x516e56
add dword [ebp - 0x14], 1
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0x10], eax
jmp 0x516e6a
mov eax, dword [ebp + 0x10]
mov edx, dword [eax + 8]
mov eax, dword [ebp + 0x10]
mov eax, dword [eax + 4]
add eax, edx
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x10]
mov dword [esp + 8], eax
mov dword [esp + 4], 1
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_fwrite
cmp dword [ebp - 0x14], 0
je 0x516ea6
mov eax, dword [ebp - 0x14]
movzx eax, byte [eax]
test al, al
je 0x516ea6
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00516c0c
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x516e2b
nop
nop
leave
ret
Function at 0x51f913
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
mov eax, dword [ebp + 0xc]
mov byte [ebp - 0x1c], al
mov eax, dword [ebp + 0x18]
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x10]
mov dword [esp], eax
call fcn.0051f8ea
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 0x10]
lea edx, [eax + 1]
mov eax, dword [ebp + 0x18]
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.0051f8ea
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], 0
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x14]
jbe 0x51f981
mov eax, dword [ebp - 0xc]
sub eax, 1
movzx eax, byte [eax]
cmp al, 0xa
jne 0x51f981
sub dword [ebp - 0xc], 1
mov dword [ebp - 0x10], 1
mov eax, dword [ebp + 0x24]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sub.cygwin1.dll_fputs
mov eax, dword [ebp + 0x24]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x1c]
mov dword [esp], eax
call sub.cygwin1.dll_fputs
movsx eax, byte [ebp - 0x1c]
mov edx, dword [ebp + 0x24]
mov dword [esp + 4], edx
mov dword [esp], eax
call sub.cygwin1.dll_putc
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x14]
mov edx, eax
mov eax, dword [ebp + 0x24]
mov dword [esp + 0xc], eax
mov dword [esp + 8], edx
mov dword [esp + 4], 1
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
call sub.cygwin1.dll_fwrite
mov eax, dword [ebp + 0x24]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x20]
mov dword [esp], eax
call sub.cygwin1.dll_fputs
mov eax, dword [ebp + 0x24]
mov dword [esp + 4], eax
mov dword [esp], 0xa
call sub.cygwin1.dll_putc
cmp dword [ebp - 0x10], 0
jne 0x51fa2c
mov eax, dword [ebp + 0x24]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x1c
mov dword [esp + 4], 1
mov dword [esp], str._No_newline_at_end_of_file_n
call sub.cygwin1.dll_fwrite
nop
leave
ret
Function at 0x526e4e
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [ebp + 8]
movzx edx, byte [eax + 0xa0]
and edx, 0xfffffffd
mov byte [eax + 0xa0], dl
mov eax, dword [ebp + 8]
add eax, 0x4a4
mov dword [esp], eax
call fcn.00501bc7
mov eax, dword [ebp + 8]
add eax, 0x4a4
mov dword [esp], eax
call fcn.004ffac4
test eax, eax
je 0x526eca
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x590]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 8]
mov dword [eax + 0x590], 0x800
mov eax, dword [ebp + 8]
add eax, 0x4a4
mov dword [esp], eax
call fcn.00501161
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x14]
mov dword [eax + 0x590], edx
mov eax, 0
jmp 0x527037
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xc0]
test eax, eax
je 0x527022
mov eax, dword [ebp + 8]
movzx eax, byte [eax + 0x99]
and eax, 0xffffff80
test al, al
jne 0x527022
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.005262d3
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x590]
and ah, 0xf7
test eax, eax
je 0x527022
mov eax, dword [ebp + 8]
movzx eax, byte [eax + 0x9a]
and eax, 1
test al, al
je 0x527022
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xbc]
cmp eax, 5
je 0x527022
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xbc]
mov dword [esp], eax
call fcn.0044954a
test eax, eax
jne 0x527022
mov dword [ebp - 0xc], 0x12
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x640]
test eax, eax
je 0x526fbe
mov dword [ebp - 0x10], 0
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x640]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x644]
mov ecx, dword [ebp + 8]
add ecx, 0x4a4
mov dword [esp + 4], edx
mov dword [esp], ecx
call eax
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x608]
mov eax, dword [ebp - 0x10]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 8]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], 1
mov dword [esp + 4], edx
mov dword [esp], eax
call sub.cygwin1.dll_fwrite
mov eax, dword [ebp + 8]
movzx eax, byte [eax + 0xa0]
and eax, 2
test al, al
jne 0x527009
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x590]
and eax, dword [ebp - 0xc]
cmp dword [ebp - 0xc], eax
jne 0x527009
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x608]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 3
mov dword [esp + 4], 1
mov dword [esp], 0x5c5622
call sub.cygwin1.dll_fwrite
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x608]
mov dword [esp + 4], eax
mov dword [esp], 0xa
call sub.cygwin1.dll_putc
mov eax, dword [ebp + 8]
add eax, 0x4a4
mov dword [esp], eax
call fcn.00501161
mov eax, 1
leave
ret
Function at 0x53c01c
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [esp + 8], 0x50
mov dword [esp + 4], 0
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sub.cygwin1.dll_memset
mov eax, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
mov dword [eax], edx
mov eax, dword [ebp + 8]
mov dword [eax + 0x10], 0xffffffff
mov eax, dword [ebp + 8]
mov dword [eax + 0x14], 1
mov eax, dword [ebp + 8]
mov dword [eax + 0x18], 0xffffffff
mov eax, dword [ebp + 8]
mov dword [eax + 0x2c], 2
mov eax, dword [ebp + 8]
mov dword [eax + 0x30], 1
mov eax, dword [ebp + 8]
add eax, 0x34
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.0048a7c9
mov eax, dword [ebp + 8]
movzx edx, byte [eax + 0x44]
and edx, 0xfffffffe
mov byte [eax + 0x44], dl
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.0053be9b
mov dword [esp], str.GIT_MERGE_VERBOSITY
call sub.cygwin1.dll_getenv
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x53c0db
mov dword [esp + 8], 0xa
mov dword [esp + 4], 0
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_strtol
mov edx, dword [ebp + 8]
mov dword [edx + 0x2c], eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x2c]
cmp eax, 4
jle 0x53c0f0
mov eax, dword [ebp + 8]
mov dword [eax + 0x30], 0
nop
leave
ret
Function at 0x543de6
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [ebp - 0xc], 0
cmp dword [ebp - 0xc], 0
jne 0x543e08
mov dword [esp], str.GIT_NOTES_REF
call sub.cygwin1.dll_getenv
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x543e16
mov eax, dword [0x61e73c]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x543e23
mov dword [ebp - 0xc], str.refs_notes_commits
mov eax, dword [ebp - 0xc]
leave
ret
Function at 0x54849b
Capabilities:
Move file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x68
mov eax, dword [ebp + 0x14]
mov word [ebp - 0x4c], ax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x14], 0x62f624
mov dword [esp + 4], str.pack_tmp_bitmap_XXXXXX
lea eax, [ebp - 0x1c]
mov dword [esp], eax
call fcn.00426d22
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x14]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
call fcn.004ed6cb
mov dword [ebp - 0x10], eax
mov eax, dword [str.BITMMissing_type_information_for__s___d__d_]
mov dword [ebp - 0x48], eax
movzx eax, word [0x5a07c4]
movzx eax, ax
mov dword [esp], eax
call sub.cygwin1.dll_htons
mov word [ebp - 0x44], ax
movzx eax, word [0x5a07c6]
or ax, word [ebp - 0x4c]
movzx eax, ax
mov dword [esp], eax
call sub.cygwin1.dll_htons
mov word [ebp - 0x42], ax
mov eax, dword [0x62fffc]
mov dword [esp], eax
call fcn.00545d34
mov dword [ebp - 0x40], eax
mov dword [esp + 4], 0x63000c
lea eax, [ebp - 0x48]
add eax, 0xc
mov dword [esp], eax
call fcn.00545e78
mov eax, dword [0x62f280]
mov eax, dword [eax + 0x8c]
mov eax, dword [eax + 8]
add eax, 0xc
mov dword [esp + 8], eax
lea eax, [ebp - 0x48]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.004ed486
mov eax, dword [0x62ffe0]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.00548301
mov eax, dword [0x62ffe4]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.00548301
mov eax, dword [0x62ffe8]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.00548301
mov eax, dword [0x62ffec]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.00548301
mov eax, dword [ebp + 0xc]
mov dword [esp + 8], eax
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.00548353
movzx eax, word [ebp - 0x4c]
and eax, 4
test eax, eax
je 0x548601
mov eax, dword [ebp + 0xc]
mov dword [esp + 8], eax
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.00548437
mov dword [esp + 0xc], 7
mov dword [esp + 8], 4
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.004ed2e6
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
call fcn.004449a8
test eax, eax
je 0x54863f
mov dword [esp], str.unable_to_make_temporary_bitmap_file_readable
call fcn.004ae15c
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp + 0x10]
mov dword [esp + 4], edx
mov dword [esp], eax
call sub.cygwin1.dll_rename
test eax, eax
je 0x548668
mov eax, dword [ebp + 0x10]
mov dword [esp + 4], eax
mov dword [esp], str.unable_to_rename_temporary_bitmap_file_to__s
call fcn.004ae15c
lea eax, [ebp - 0x1c]
mov dword [esp], eax
call fcn.0048a820
nop
leave
ret
Function at 0x5536b5
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sub.cygwin1.dll_strlen
cmp eax, 2
jbe 0x5537a5
mov dword [esp + 4], 0x5cb4a4
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.0048a6ba
test eax, eax
je 0x55379a
mov dword [esp], str.did_you_mean_____s___with_two_dashes__
call fcn.005525aa
mov edx, dword [ebp + 8]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.004ae2ca
call fcn.005523d9
mov dword [esp + 8], 0x81
mov dword [esp + 4], 0x1ad
mov dword [esp], str.parse_options.c
call fcn.00499d7f
mov dword [esp], eax
call sub.cygwin1.dll_exit
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 8]
test eax, eax
je 0x553795
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 8]
mov edx, dword [ebp + 8]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.0048a6ba
test eax, eax
je 0x553796
mov dword [esp], str.did_you_mean_____s___with_two_dashes__
call fcn.005525aa
mov edx, dword [ebp + 8]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.004ae2ca
call fcn.005523d9
mov dword [esp + 8], 0x81
mov dword [esp + 4], 0x1b5
mov dword [esp], str.parse_options.c
call fcn.00499d7f
mov dword [esp], eax
call sub.cygwin1.dll_exit
nop
add dword [ebp + 0xc], 0x2c
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
test eax, eax
jne 0x55372e
jmp 0x5537a6
nop
leave
ret
Function at 0x55474d
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
sub esp, 0x54
mov dword [esp + 4], 0
mov dword [esp], str.GIT_TEST_DISALLOW_ABBREVIATED_OPTIONS
call fcn.004135de
mov dword [0x630040], eax
mov dword [esp + 8], 0x28
mov dword [esp + 4], 0
lea eax, [ebp - 0x34]
mov dword [esp], eax
call sub.cygwin1.dll_memset
mov eax, dword [ebp + 0x14]
mov dword [esp + 4], eax
lea eax, [ebp - 0x34]
mov dword [esp], eax
call fcn.00553e3d
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x5547a9
mov eax, dword [ebp - 0xc]
mov dword [ebp + 0x14], eax
mov eax, dword [ebp + 0x1c]
mov dword [esp + 0x14], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x10], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 8], eax
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x34]
mov dword [esp], eax
call fcn.00553a73
mov eax, dword [ebp + 0x18]
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 4], eax
lea eax, [ebp - 0x34]
mov dword [esp], eax
call fcn.005541f0
cmp eax, 2
je 0x554871
cmp eax, 2
jg 0x55490e
cmp eax, 1
jg 0x55490e
test eax, eax
jns 0x55490d
cmp eax, 0xfffffffd
je 0x55484d
cmp eax, 0xfffffffd
jl 0x55490e
add eax, 2
cmp eax, 1
ja 0x55490e
mov dword [esp + 8], 0x81
mov dword [esp + 4], 0x374
mov dword [esp], str.parse_options.c
call fcn.00499d7f
mov dword [esp], eax
call sub.cygwin1.dll_exit
mov dword [esp + 8], 0
mov dword [esp + 4], 0x376
mov dword [esp], str.parse_options.c
call fcn.00499d7f
mov dword [esp], eax
call sub.cygwin1.dll_exit
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
add eax, 1
movzx eax, byte [eax]
cmp al, 0x2d
jne 0x5548a7
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
lea ebx, [eax + 2]
mov dword [esp], str.unknown_option___s
call fcn.005525aa
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.004ae2ca
call fcn.005523d9
jmp 0x5548fb
mov eax, dword [ebp - 0x20]
movzx eax, byte [eax]
test al, al
js 0x5548d9
mov eax, dword [ebp - 0x20]
movzx eax, byte [eax]
movsx ebx, al
mov dword [esp], str.unknown_switch___c
call fcn.005525aa
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.004ae2ca
call fcn.005523d9
jmp 0x5548fb
mov eax, dword [ebp - 0x34]
mov ebx, dword [eax]
mov dword [esp], str.unknown_non_ascii_option_in_string:___s
call fcn.005525aa
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.004ae2ca
call fcn.005523d9
mov eax, dword [ebp + 0x14]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x18]
mov dword [esp], eax
call fcn.00554f42
nop
mov dword [esp + 8], 0
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.005523d1
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
call fcn.00554189
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
call sub.cygwin1.dll_free
lea eax, [ebp - 0x34]
mov dword [esp], eax
call fcn.005546bf
mov ebx, dword [ebp - 4]
leave
ret
Function at 0x554f42
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
mov eax, dword [ebp + 0xc]
mov dword [esp + 8], eax
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
mov dword [esp], 0
call fcn.00554a2c
mov dword [esp + 8], 0x81
mov dword [esp + 4], 0x430
mov dword [esp], str.parse_options.c
call fcn.00499d7f
mov dword [esp], eax
call sub.cygwin1.dll_exit
push ebp
mov ebp, esp
sub esp, 0x18
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
mov dword [esp], 0x5cba5a
call fcn.004ae1f9
mov eax, dword [ebp + 0x10]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.00554f42
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0xc], 0x62f624
lea eax, [ebp + 0x14]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [esp + 8], eax
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x14]
mov dword [esp], eax
call fcn.0048b693
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp + 0x10]
mov dword [esp + 8], edx
mov edx, dword [ebp + 0xc]
mov dword [esp + 4], edx
mov dword [esp], eax
call 0x554f96
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x4c
mov dword [ebp - 0x1c], 0
cmp dword [ebp + 8], 0
je 0x555041
mov eax, dword [ebp - 0x1c]
lea edx, [eax + 1]
mov dword [ebp - 0x1c], edx
mov edx, dword [ebp + 0xc]
mov dword [ebp + eax*4 - 0x2c], edx
cmp dword [ebp + 0x10], 0
je 0x555057
mov eax, dword [ebp - 0x1c]
lea edx, [eax + 1]
mov dword [ebp - 0x1c], edx
mov edx, dword [ebp + 0x14]
mov dword [ebp + eax*4 - 0x2c], edx
cmp dword [ebp + 0x18], 0
je 0x55506d
mov eax, dword [ebp - 0x1c]
lea edx, [eax + 1]
mov dword [ebp - 0x1c], edx
mov edx, dword [ebp + 0x1c]
mov dword [ebp + eax*4 - 0x2c], edx
cmp dword [ebp + 0x20], 0
je 0x555083
mov eax, dword [ebp - 0x1c]
lea edx, [eax + 1]
mov dword [ebp - 0x1c], edx
mov edx, dword [ebp + 0x24]
mov dword [ebp + eax*4 - 0x2c], edx
cmp dword [ebp - 0x1c], 4
je 0x5550a1
cmp dword [ebp - 0x1c], 4
jg 0x55511c
cmp dword [ebp - 0x1c], 2
je 0x5550fa
cmp dword [ebp - 0x1c], 3
je 0x5550d1
jmp 0x55511c
mov dword [esp], str.options__s___s___s__and__s_cannot_be_used_together
call fcn.005525aa
mov edx, dword [ebp + 0x24]
mov dword [esp + 0x10], edx
mov edx, dword [ebp + 0x1c]
mov dword [esp + 0xc], edx
mov edx, dword [ebp + 0x14]
mov dword [esp + 8], edx
mov edx, dword [ebp + 0xc]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.004ae00f
mov edi, dword [ebp - 0x24]
mov esi, dword [ebp - 0x28]
mov ebx, dword [ebp - 0x2c]
mov dword [esp], str.options__s___s__and__s_cannot_be_used_together
call fcn.005525aa
mov dword [esp + 0xc], edi
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.004ae00f
mov esi, dword [ebp - 0x28]
mov ebx, dword [ebp - 0x2c]
mov dword [esp], 0x5cbaf4
call fcn.005525aa
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.004ae00f
nop
nop
add esp, 0x4c
pop ebx
pop esi
pop edi
pop ebp
ret
Function at 0x55c035
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
mov dword [esp], str.GIT_CHERRY_PICK_HELP
call sub.cygwin1.dll_getenv
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x55c09b
mov eax, dword [ebp - 0xc]
mov dword [esp + 4], eax
mov dword [esp], 0x5ccdc6
call fcn.004c9457
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.0045e0ef
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], str.CHERRY_PICK_HEAD
mov dword [esp + 4], 0x5cc894
mov dword [esp], eax
call fcn.0045be7a
jmp 0x55c11c
cmp dword [ebp + 0xc], 0
je 0x55c11c
mov eax, dword [ebp + 0x10]
mov eax, dword [eax + 0xc]
test eax, eax
je 0x55c0c1
mov dword [esp], str.after_resolving_the_conflicts__mark_the_corrected_paths_nwith_git_add__paths__or_git_rm__paths_
call fcn.0055aea9
mov dword [esp], eax
call fcn.004c9457
jmp 0x55c11c
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
cmp eax, 1
jne 0x55c0e1
mov dword [esp], str.After_resolving_the_conflicts__mark_them_with_n_git_add_rm__pathspec____then_run_n_git_cherry_pick___continue_._nYou_can_instead_skip_this_commit_with__git_cherry_pick___skip_._nTo_abort_and_get_back_to_the_state_before__git_cherry_pick___nrun__git_cherry_pick___abort_.
call fcn.0055aea9
mov dword [esp], eax
call fcn.004c9457
jmp 0x55c11c
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
test eax, eax
jne 0x55c100
mov dword [esp], str.After_resolving_the_conflicts__mark_them_with_n_git_add_rm__pathspec____then_run_n_git_revert___continue_._nYou_can_instead_skip_this_commit_with__git_revert___skip_._nTo_abort_and_get_back_to_the_state_before__git_revert___nrun__git_revert___abort_.
call fcn.0055aea9
mov dword [esp], eax
call fcn.004c9457
jmp 0x55c11c
mov dword [esp + 8], str.unexpected_pick_action_in_print_advice__
mov dword [esp + 4], 0x1b5
mov dword [esp], str.sequencer.c
call fcn.004ae42f
leave
ret