joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4bd778
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push ebx
sub esp, 0x34
mov dword [ebp - 0x14], 0
mov dword [ebp - 0xc], 0
mov dword [esp + 8], 0
lea eax, [ebp - 0x14]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.0047216a
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x84]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 4
mov dword [esp], eax
call fcn.00454a47
cmp dword [ebp - 0x10], 0
js 0x4bd7f3
lea eax, [ebp - 0x14]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00457450
lea eax, [ebp - 0x14]
mov dword [esp], eax
call fcn.004b6922
mov eax, dword [ebp + 0x14]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.004bd5d9
test eax, eax
je 0x4bd845
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.004b67d9
mov ebx, eax
mov dword [esp], str.cannot__s:_You_have_unstaged_changes.
call fcn.004b67d9
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.004ae2ca
call fcn.004b6508
mov dword [ebp - 0xc], 1
mov eax, dword [ebp + 0x14]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.004bd66b
test eax, eax
je 0x4bd8ad
cmp dword [ebp - 0xc], 0
je 0x4bd87c
mov dword [esp], str.additionally__your_index_contains_uncommitted_changes.
call fcn.004b67d9
mov dword [esp], eax
call fcn.004ae2ca
call fcn.004b6508
jmp 0x4bd8a6
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.004b67d9
mov ebx, eax
mov dword [esp], str.cannot__s:_Your_index_contains_uncommitted_changes.
call fcn.004b67d9
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.004ae2ca
call fcn.004b6508
mov dword [ebp - 0xc], 1
cmp dword [ebp - 0xc], 0
je 0x4bd8fb
cmp dword [ebp + 0x10], 0
je 0x4bd8d1
mov eax, dword [ebp + 0x10]
mov dword [esp + 4], eax
mov dword [esp], 0x5b7824
call fcn.004ae2ca
call fcn.004b6508
cmp dword [ebp + 0x18], 0
jne 0x4bd8fb
mov dword [esp + 8], pe_nt_image_headers32
mov dword [esp + 4], 0xa3e
mov dword [esp], str.wt_status.c
call fcn.00499d7f
mov dword [esp], eax
call sub.cygwin1.dll_exit
mov eax, dword [ebp - 0xc]
mov ebx, dword [ebp - 4]
leave
ret

Function at 0x4c37f5
Capabilities:
Hash data using sha1

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 8]
mov dword [eax], 0
mov dword [eax + 4], 0
mov eax, dword [ebp + 8]
mov dword [eax + 8], 0x67452301
mov eax, dword [ebp + 8]
mov dword [eax + 0xc], 0xefcdab89
mov eax, dword [ebp + 8]
mov dword [eax + 0x10], 0x98badcfe
mov eax, dword [ebp + 8]
mov dword [eax + 0x14], 0x10325476
mov eax, dword [ebp + 8]
mov dword [eax + 0x18], 0xc3d2e1f0
mov eax, dword [ebp + 8]
mov dword [eax + 0x5c], 0
mov eax, dword [ebp + 8]
mov dword [eax + 0x60], 0
mov eax, dword [ebp + 8]
mov dword [eax + 0x68], 1
mov eax, dword [ebp + 8]
mov dword [eax + 0x64], 1
mov eax, dword [ebp + 8]
mov dword [eax + 0x6c], 0
mov eax, dword [ebp + 8]
mov dword [eax + 0x70], 0
nop
pop ebp
ret
Function at 0x4c60ca
Capabilities:
Hash data using sha256

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 8]
mov dword [eax + 0x28], 0
mov eax, dword [ebp + 8]
mov dword [eax + 0x20], 0
mov dword [eax + 0x24], 0
mov eax, dword [ebp + 8]
mov dword [eax], 0x6a09e667
mov eax, dword [ebp + 8]
mov dword [eax + 4], 0xbb67ae85
mov eax, dword [ebp + 8]
mov dword [eax + 8], 0x3c6ef372
mov eax, dword [ebp + 8]
mov dword [eax + 0xc], 0xa54ff53a
mov eax, dword [ebp + 8]
mov dword [eax + 0x10], 0x510e527f
mov eax, dword [ebp + 8]
mov dword [eax + 0x14], 0x9b05688c
mov eax, dword [ebp + 8]
mov dword [eax + 0x18], 0x1f83d9ab
mov eax, dword [ebp + 8]
mov dword [eax + 0x1c], 0x5be0cd19
nop
pop ebp
ret
Function at 0x4d3c0d
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x6c
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x84]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x18]
test eax, eax
je 0x4d3c45
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call fcn.004d2d45
test eax, eax
je 0x4d3c45
mov eax, 1
jmp 0x4d3c4a
mov eax, 0
mov dword [ebp - 0x24], eax
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov eax, dword [ebp - 0x24]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x20]
mov dword [esp + 4], eax
lea eax, [ebp - 0x50]
mov dword [esp], eax
call fcn.004d3b64
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xfffffffe
jne 0x4d3d43
call sub.cygwin1.dll___getreent
mov eax, dword [eax + 0xc]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x27
mov dword [esp + 4], 1
mov dword [esp], str.BUG:_There_are_unmerged_index_entries:_n
call sub.cygwin1.dll_fwrite
mov dword [ebp - 0x1c], 0
jmp 0x4d3d1a
mov eax, dword [ebp - 0x20]
mov edx, dword [eax]
mov eax, dword [ebp - 0x1c]
shl eax, 2
add eax, edx
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + 0x30]
shr eax, 0xc
and eax, 3
test eax, eax
je 0x4d3d16
mov eax, dword [ebp - 0x2c]
lea esi, [eax + 0x64]
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + 0x38]
mov edi, eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax + 0x30]
shr eax, 0xc
and eax, 3
mov ebx, eax
call sub.cygwin1.dll___getreent
mov eax, dword [eax + 0xc]
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], edi
mov dword [esp + 8], ebx
mov dword [esp + 4], str.BUG:__d__.s_n
mov dword [esp], eax
call sub.cygwin1.dll_fprintf
add dword [ebp - 0x1c], 1
mov eax, dword [ebp - 0x20]
mov edx, dword [eax + 8]
mov eax, dword [ebp - 0x1c]
cmp edx, eax
ja 0x4d3cb4
mov dword [esp + 8], str.unmerged_index_entries_when_writing_inmemory_index
mov dword [esp + 4], 0x2be
mov dword [esp], str.cache_tree.c
call fcn.004ae42f
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0x18]
add eax, 4
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.004ac08a
add esp, 0x6c
pop ebx
pop esi
pop edi
pop ebp
ret
Function at 0x4d4cc1
Capabilities:
Set current directory

Disassembly:
push ebp
mov ebp, esp
push ebx
sub esp, 0x44
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x18], 0x62f624
lea eax, [ebp - 0x20]
mov dword [esp], eax
call fcn.0048bd7b
test eax, eax
jns 0x4d4cfd
mov eax, 0xffffffff
jmp 0x4d4dd3
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sub.cygwin1.dll_chdir
test eax, eax
jns 0x4d4d35
call sub.cygwin1.dll___errno
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x20]
mov dword [esp], eax
call fcn.0048a820
call sub.cygwin1.dll___errno
mov edx, dword [ebp - 0x14]
mov dword [eax], edx
mov eax, 0xffffffff
jmp 0x4d4dd3
mov dword [esp], str.GIT_TRACE_SETUP
call fcn.004d4b63
test eax, eax
je 0x4d4d77
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp + 8]
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.setup:_chdir_from__s_to__s
mov dword [esp + 8], 0x59bd68
mov dword [esp + 4], 0x41
mov dword [esp], str.chdir_notify.c
call fcn.004993cd
mov eax, dword [0x59f410]
mov dword [ebp - 0xc], eax
jmp 0x4d4dba
mov eax, dword [ebp - 0xc]
sub eax, 0xc
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0x10]
mov ebx, dword [edx + 8]
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x10]
mov edx, dword [edx]
mov dword [esp + 0xc], ebx
mov ebx, dword [ebp + 8]
mov dword [esp + 8], ebx
mov dword [esp + 4], ecx
mov dword [esp], edx
call eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x59f410
jne 0x4d4d81
lea eax, [ebp - 0x20]
mov dword [esp], eax
call fcn.0048a820
mov eax, 0
mov ebx, dword [ebp - 4]
leave
ret

Function at 0x4d5aa7
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
test al, al
je 0x4d5ac9
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_fputs
mov eax, dword [ebp + 0x10]
mov eax, dword [eax + 8]
mov edx, dword [ebp + 8]
mov dword [esp + 4], edx
mov dword [esp], eax
call sub.cygwin1.dll_fputs
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
test al, al
je 0x4d5b0b
mov eax, dword [ebp + 8]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 3
mov dword [esp + 4], 1
mov dword [esp], 0x5bbad5
call sub.cygwin1.dll_fwrite
nop
leave
ret
Function at 0x4e0aa0
Capabilities:
Set file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x88
mov dword [esp], 0
call sub.cygwin1.dll_time
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x50]
sub eax, 1
mov dword [ebp - 0xc], eax
jmp 0x4e0b14
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x54]
mov eax, dword [ebp - 0xc]
shl eax, 2
add eax, edx
mov eax, dword [eax]
lea edx, [ebp - 0x78]
mov dword [esp + 4], edx
mov dword [esp], eax
call sub.cygwin1.dll__stat64
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x54]
mov eax, dword [ebp - 0xc]
shl eax, 2
add eax, edx
mov eax, dword [eax]
lea edx, [ebp - 0x18]
mov dword [esp + 4], edx
mov dword [esp], eax
call sub.cygwin1.dll_utime
add dword [ebp - 0xc], 1
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x4c]
cmp dword [ebp - 0xc], eax
jb 0x4e0ac6
nop
nop
leave
ret

Function at 0x4ece52
Capabilities:
Set file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x88
lea eax, [ebp - 0x68]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call sub.cygwin1.dll__stat64
test eax, eax
jns 0x4ece78
mov eax, 0xffffffff
jmp 0x4ecea6
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x70]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sub.cygwin1.dll_utime
test eax, eax
jns 0x4ecea1
mov eax, 0xffffffff
jmp 0x4ecea6
mov eax, 0
leave
ret
Function at 0x4eff22
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa8
mov eax, dword [ebp + 0xc]
and eax, 1
test eax, eax
setne al
movzx eax, al
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0xc]
and eax, 2
test eax, eax
setne al
movzx eax, al
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x658]
mov eax, dword [eax + 0x84]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
cmp eax, 1
je 0x4eff86
mov dword [esp + 8], str.run_diff_index_must_be_passed_exactly_one_tree
mov dword [esp + 4], 0x25f
mov dword [esp], str.diff_lib.c
call fcn.004ae42f
call fcn.00499217
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x18]
mov dword [esp], eax
call fcn.00429f94
cmp dword [ebp - 0x14], 0
je 0x4effd1
lea eax, [ebp - 0x40]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.004efd4f
lea eax, [ebp - 0x40]
mov dword [esp + 4], eax
lea eax, [ebp - 0x81]
mov dword [esp], eax
call fcn.0042bb52
mov dword [ebp - 0xc], eax
jmp 0x4efff1
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
add eax, 4
mov dword [esp + 4], eax
lea eax, [ebp - 0x40]
mov dword [esp], eax
call fcn.004ee4ae
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax + 4]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x10]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0xc]
mov dword [esp + 8], eax
lea eax, [ebp - 0x40]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.004efc14
test eax, eax
je 0x4f0039
mov dword [esp + 8], pe_nt_image_headers32
mov dword [esp + 4], 0x26f
mov dword [esp], str.diff_lib.c
call fcn.00499d7f
mov dword [esp], eax
call sub.cygwin1.dll_exit
cmp dword [ebp - 0x10], 0
je 0x4f0046
mov edx, 0x5be14a
jmp 0x4f004b
mov edx, 0x5be147
mov eax, dword [ebp + 8]
add eax, 0x4a4
mov dword [esp + 8], edx
mov dword [esp + 4], 0x5be29b
mov dword [esp], eax
call fcn.004f88bf
call fcn.00501a6a
mov eax, dword [ebp + 8]
add eax, 0x4a4
mov dword [esp], eax
call fcn.00501bc7
mov eax, dword [ebp + 8]
add eax, 0x4a4
mov dword [esp], eax
call fcn.00501161
mov dword [esp], str.GIT_TRACE_PERFORMANCE
call fcn.004ee53e
test eax, eax
je 0x4f00c5
call fcn.00499831
mov dword [esp + 0x10], str.diff_index
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 4], 0x275
mov dword [esp], str.diff_lib.c
call fcn.00499482
mov eax, 0
leave
ret
Function at 0x4f00cc
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x8fc
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x1b4]
mov dword [esp + 8], 0
lea edx, [ebp - 0x8f0]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00476cb5
mov eax, dword [ebp + 0xc]
add eax, 0x170
mov dword [esp + 4], eax
lea eax, [ebp - 0x8f0]
add eax, 0x70
mov dword [esp], eax
call fcn.0044757f
lea eax, [ebp - 0x8f0]
add eax, 0x4a4
mov dword [esp], eax
call fcn.004fc010
mov edx, dword [ebp + 0xc]
lea eax, [ebp - 0x44c]
mov ebx, edx
mov edx, 0x71
mov edi, eax
mov esi, ebx
mov ecx, edx
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
lea eax, [ebp - 0x8f0]
mov dword [esp], eax
call fcn.004efc14
test eax, eax
je 0x4f0190
mov dword [esp + 8], pe_nt_image_headers32
mov dword [esp + 4], 0x283
mov dword [esp], str.diff_lib.c
call fcn.00499d7f
mov dword [esp], eax
call sub.cygwin1.dll_exit
lea eax, [ebp - 0x8f0]
add eax, 0x70
mov dword [esp], eax
call fcn.0044771c
mov eax, 0
add esp, 0x8fc
pop ebx
pop esi
pop edi
pop ebp
ret
Function at 0x4f204b
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [ebp - 0xc], 0
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x164]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.004f5d32
mov edx, dword [ebp - 0x10]
mov dword [esp + 4], edx
mov dword [esp], eax
call sub.cygwin1.dll_fputs
cmp dword [ebp + 0x24], 0
jle 0x4f209d
mov eax, dword [ebp + 0x24]
lea edx, [eax - 1]
mov eax, dword [ebp + 0x20]
add eax, edx
movzx eax, byte [eax]
cmp al, 0xa
jne 0x4f209d
mov eax, 1
jmp 0x4f20a2
mov eax, 0
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x4f20af
sub dword [ebp + 0x24], 1
cmp dword [ebp + 0x24], 0
jle 0x4f20ce
mov eax, dword [ebp + 0x24]
lea edx, [eax - 1]
mov eax, dword [ebp + 0x20]
add eax, edx
movzx eax, byte [eax]
cmp al, 0xd
jne 0x4f20ce
mov eax, 1
jmp 0x4f20d3
mov eax, 0
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x4f20e0
sub dword [ebp + 0x24], 1
cmp dword [ebp + 0x24], 0
jne 0x4f20f0
cmp dword [ebp + 0x1c], 0
je 0x4f21e3
cmp dword [ebp + 0x14], 0
je 0x4f213d
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xcc]
mov dword [esp + 4], eax
mov dword [esp], 1
call fcn.004d59a1
test eax, eax
je 0x4f213d
mov eax, dword [ebp - 0x10]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 4
mov dword [esp + 4], 1
mov dword [esp], str.e_7m
call sub.cygwin1.dll_fwrite
mov dword [ebp - 0xc], 1
cmp dword [ebp + 0xc], 0
je 0x4f215c
mov eax, dword [ebp - 0x10]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_fputs
mov dword [ebp - 0xc], 1
cmp dword [ebp + 0x1c], 0
je 0x4f2174
mov eax, dword [ebp - 0x10]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x1c]
mov dword [esp], eax
call sub.cygwin1.dll_fputc
cmp dword [ebp + 0x24], 0
je 0x4f21e6
cmp dword [ebp + 0x10], 0
je 0x4f21b9
cmp dword [ebp + 0xc], 0
je 0x4f21a0
mov eax, dword [ebp + 0x10]
cmp eax, dword [ebp + 0xc]
je 0x4f21a0
mov eax, dword [ebp - 0x10]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x18]
mov dword [esp], eax
call sub.cygwin1.dll_fputs
mov eax, dword [ebp - 0x10]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x10]
mov dword [esp], eax
call sub.cygwin1.dll_fputs
mov dword [ebp - 0xc], 1
mov eax, dword [ebp + 0x24]
mov edx, dword [ebp - 0x10]
mov dword [esp + 0xc], edx
mov dword [esp + 8], 1
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x20]
mov dword [esp], eax
call sub.cygwin1.dll_fwrite
mov dword [ebp - 0xc], 1
jmp 0x4f21e7
nop
jmp 0x4f21e7
nop
cmp dword [ebp - 0xc], 0
je 0x4f21ff
mov eax, dword [ebp - 0x10]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x18]
mov dword [esp], eax
call sub.cygwin1.dll_fputs
cmp dword [ebp - 0x18], 0
je 0x4f2218
mov eax, dword [ebp - 0x10]
mov dword [esp + 4], eax
mov dword [esp], 0xd
call sub.cygwin1.dll_fputc
cmp dword [ebp - 0x14], 0
je 0x4f2231
mov eax, dword [ebp - 0x10]
mov dword [esp + 4], eax
mov dword [esp], 0xa
call sub.cygwin1.dll_fputc
nop
leave
ret
Function at 0x4f768c
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push esi
push ebx
sub esp, 0x30
mov eax, dword [ebp + 8]
mov eax, dword [eax]
test eax, eax
je 0x4f7866
mov dword [ebp - 0xc], 0
jmp 0x4f7856
mov eax, dword [ebp + 8]
mov edx, dword [eax + 8]
mov eax, dword [ebp - 0xc]
shl eax, 2
add eax, edx
mov eax, dword [eax]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.004f5d32
mov edx, dword [ebp + 0xc]
mov edx, dword [edx + 0x164]
mov dword [esp + 4], edx
mov dword [esp], eax
call sub.cygwin1.dll_fputs
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 0x10]
and eax, 2
test al, al
je 0x4f7719
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x164]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 4
mov dword [esp + 4], 1
mov dword [esp], 0x5becac
call sub.cygwin1.dll_fwrite
jmp 0x4f7754
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax + 0x20]
mov ebx, dword [eax + 0x24]
mov eax, dword [ebp - 0x10]
mov edx, dword [eax + 0x1c]
mov eax, dword [eax + 0x18]
mov esi, dword [ebp + 0xc]
mov esi, dword [esi + 0x164]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 4], str._llu_t_llu_t
mov dword [esp], esi
call sub.cygwin1.dll_fprintf
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xe8]
test eax, eax
je 0x4f77e6
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.004f6706
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 0x10]
and eax, 4
test al, al
jne 0x4f77ab
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0xe8]
mov eax, dword [ebp + 0xc]
mov edx, dword [eax + 0x164]
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 4]
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00450d87
jmp 0x4f7852
mov eax, dword [ebp + 0xc]
mov edx, dword [eax + 0x164]
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 8]
mov dword [esp + 4], edx
mov dword [esp], eax
call sub.cygwin1.dll_fputs
mov eax, dword [ebp + 0xc]
mov edx, dword [eax + 0x164]
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0xe8]
mov dword [esp + 4], edx
mov dword [esp], eax
call sub.cygwin1.dll_putc
jmp 0x4f7852
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 0x10]
and eax, 4
test al, al
je 0x4f782f
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x164]
mov dword [esp + 4], eax
mov dword [esp], 0
call sub.cygwin1.dll_putc
mov eax, dword [ebp + 0xc]
mov edx, dword [eax + 0x164]
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
mov dword [esp + 8], 0
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00450d87
mov eax, dword [ebp + 0xc]
mov edx, dword [eax + 0x164]
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 4]
mov dword [esp + 8], 0
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00450d87
add dword [ebp - 0xc], 1
mov eax, dword [ebp + 8]
mov eax, dword [eax]
cmp dword [ebp - 0xc], eax
jl 0x4f76ad
jmp 0x4f7867
nop
add esp, 0x30
pop ebx
pop esi
pop ebp
ret
Function at 0x508892
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [esp], str.TERM
call sub.cygwin1.dll_getenv
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x5088c4
mov dword [esp + 4], str.dumb
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_strcmp
test eax, eax
jne 0x5088cb
mov eax, 1
jmp 0x5088d0
mov eax, 0
leave
ret

Function at 0x5088d2
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [esp], str.GIT_EDITOR
call sub.cygwin1.dll_getenv
mov dword [ebp - 0xc], eax
call fcn.00508892
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0xc], 0
jne 0x508906
mov eax, dword [0x61e720]
test eax, eax
je 0x508906
mov eax, dword [0x61e720]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x508921
cmp dword [ebp - 0x10], 0
jne 0x508921
mov dword [esp], str.VISUAL
call sub.cygwin1.dll_getenv
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x508936
mov dword [esp], str.EDITOR
call sub.cygwin1.dll_getenv
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x508949
cmp dword [ebp - 0x10], 0
je 0x508949
mov eax, 0
jmp 0x508959
cmp dword [ebp - 0xc], 0
jne 0x508956
mov dword [ebp - 0xc], 0x5c1398
mov eax, dword [ebp - 0xc]
leave
ret

Function at 0x513bde
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [ebp + 0xc]
and eax, 2
test eax, eax
je 0x513bf6
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x1c]
jmp 0x513bfc
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x18]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp + 0xc]
and eax, 1
test eax, eax
je 0x513c3d
mov eax, dword [ebp + 8]
mov eax, dword [eax]
test eax, eax
je 0x513c3d
call sub.cygwin1.dll___getreent
mov ecx, dword [eax + 8]
mov eax, dword [ebp + 8]
mov edx, dword [eax + 4]
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
mov dword [esp + 4], 1
mov dword [esp], eax
call sub.cygwin1.dll_fwrite
cmp dword [ebp - 0xc], 0
je 0x513c5a
call sub.cygwin1.dll___getreent
mov eax, dword [eax + 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_fputs
nop
leave
ret

Function at 0x514e02
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
cmp dword [ebp + 8], 0
je 0x514e47
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x30]
test eax, eax
je 0x514e47
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x164]
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x34]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x30]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
mov dword [esp + 4], 1
mov dword [esp], eax
call sub.cygwin1.dll_fwrite
jmp 0x514e48
nop
leave
ret