joyce8/EMBER2024-capa huggingface dataset:
Function at 0x56469a
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [esp], 0x5cdc81
call sub.cygwin1.dll_getenv
mov dword [ebp - 0xc], eax
lea eax, [ebp + 0x14]
mov dword [ebp - 0x10], eax
mov dword [esp + 4], 0
mov dword [esp], 0x5a08ec
call fcn.0055ab9d
cmp dword [ebp - 0xc], 0
jne 0x5646dc
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.0055beaf
jmp 0x5646df
mov eax, dword [ebp - 0xc]
mov dword [esp + 4], eax
mov dword [esp], 0x5a08ec
call fcn.0055ac90
cmp dword [ebp + 0xc], 0
je 0x564710
mov eax, dword [ebp + 0xc]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x5ceaed
mov dword [esp], 0x5a08ec
call fcn.0048b459
cmp dword [ebp + 0x10], 0
je 0x564744
mov dword [esp + 4], 0x5cd636
mov dword [esp], 0x5a08ec
call fcn.0055ac90
mov eax, dword [ebp - 0x10]
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 4], eax
mov dword [esp], 0x5a08ec
call fcn.0048b693
mov eax, dword [0x5a08f4]
leave
ret
Function at 0x56c758
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
sub esp, 0x14
mov dword [esp + 4], 0
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0056c51e
mov eax, dword [0x6300ec]
test eax, eax
je 0x56c7a3
call sub.cygwin1.dll___getreent
mov eax, dword [eax + 0xc]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x21
mov dword [esp + 4], 1
mov dword [esp], str.Debug:_Remote_helper:_Waiting..._n
call sub.cygwin1.dll_fwrite
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.0048c00e
cmp eax, 0xffffffff
jne 0x56c7f2
mov eax, dword [0x6300ec]
test eax, eax
je 0x56c7eb
call sub.cygwin1.dll___getreent
mov eax, dword [eax + 0xc]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x1b
mov dword [esp + 4], 1
mov dword [esp], str.Debug:_Remote_helper_quit._n
call sub.cygwin1.dll_fwrite
mov eax, 1
jmp 0x56c822
mov eax, dword [0x6300ec]
test eax, eax
je 0x56c81d
mov eax, dword [ebp + 0xc]
mov ebx, dword [eax + 8]
call sub.cygwin1.dll___getreent
mov eax, dword [eax + 0xc]
mov dword [esp + 8], ebx
mov dword [esp + 4], str.Debug:_Remote_helper:_____s_n
mov dword [esp], eax
call sub.cygwin1.dll_fprintf
mov eax, 0
mov ebx, dword [ebp - 4]
leave
ret
Function at 0x56cf26
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 4]
test eax, eax
je 0x56d023
mov eax, dword [0x6300ec]
test eax, eax
je 0x56cf7b
call sub.cygwin1.dll___getreent
mov eax, dword [eax + 0xc]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x16
mov dword [esp + 4], 1
mov dword [esp], str.Debug:_Disconnecting._n
call sub.cygwin1.dll_fwrite
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 0xd]
and eax, 4
test al, al
jne 0x56cfca
mov dword [esp + 4], 1
mov dword [esp], 0xd
call fcn.00487d09
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 4]
mov eax, dword [eax + 0x30]
mov dword [esp + 8], 1
mov dword [esp + 4], 0x5cfb26
mov dword [esp], eax
call fcn.004b4733
mov dword [esp], 0xd
call fcn.00487e1a
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 4]
mov eax, dword [eax + 0x30]
mov dword [esp], eax
call sub.cygwin1.dll_close
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 4]
mov eax, dword [eax + 0x34]
mov dword [esp], eax
call sub.cygwin1.dll_close
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 8]
mov dword [esp], eax
call sub.cygwin1.dll_fclose
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 4]
mov dword [esp], eax
call fcn.0047fada
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 4]
mov dword [esp], eax
call sub.cygwin1.dll_free
mov eax, dword [ebp - 0x10]
mov dword [eax + 4], 0
mov eax, dword [ebp - 0xc]
leave
ret

Function at 0x56d028
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push esi
push ebx
sub esp, 0x20
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.0056c6e3
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.0056c827
test eax, eax
je 0x56d07c
mov dword [esp + 8], pe_nt_image_headers32
mov dword [esp + 4], 0x116
mov dword [esp], str.transport_helper.c
call fcn.00499d7f
mov dword [esp], eax
call sub.cygwin1.dll_exit
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 8]
mov dword [esp + 4], 0x5cfb64
mov dword [esp], eax
call sub.cygwin1.dll_strcmp
test eax, eax
jne 0x56d09f
mov dword [ebp - 0xc], 0
jmp 0x56d113
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 8]
mov dword [esp + 4], 0x5cfb67
mov dword [esp], eax
call fcn.0048a6ba
test eax, eax
je 0x56d0c2
mov dword [ebp - 0xc], 0xffffffff
jmp 0x56d113
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 8]
mov dword [esp + 4], str.unsupported
mov dword [esp], eax
call sub.cygwin1.dll_strcmp
test eax, eax
jne 0x56d0e5
mov dword [ebp - 0xc], 1
jmp 0x56d113
mov eax, dword [ebp + 0xc]
mov esi, dword [eax + 8]
mov eax, dword [ebp + 8]
mov ebx, dword [eax]
mov dword [esp], str._s_unexpectedly_said:__s
call fcn.0056c696
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.004ae342
mov dword [ebp - 0xc], 1
mov eax, dword [ebp - 0xc]
add esp, 0x20
pop ebx
pop esi
pop ebp
ret
Function at 0x56d4c8
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push esi
push ebx
sub esp, 0x30
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x18], 0x62f624
mov dword [ebp - 0xc], 0
jmp 0x56d56d
mov eax, dword [ebp - 0xc]
lea edx, [eax*4]
mov eax, dword [ebp + 0x10]
add eax, edx
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x84]
and eax, 0xa
test eax, eax
jne 0x56d568
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x70]
test eax, eax
je 0x56d534
mov eax, dword [ebp - 0x14]
mov ebx, dword [eax + 0x70]
jmp 0x56d53d
mov eax, dword [ebp - 0x14]
lea ebx, [eax + 0x94]
mov eax, dword [ebp - 0x14]
add eax, 4
mov dword [esp], eax
call fcn.0042bbe2
mov dword [esp + 0xc], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], str.fetch__s__s_n
lea eax, [ebp - 0x20]
mov dword [esp], eax
call fcn.0048b459
jmp 0x56d569
nop
add dword [ebp - 0xc], 1
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp + 0xc]
jl 0x56d4fe
mov dword [esp + 4], 0xa
lea eax, [ebp - 0x20]
mov dword [esp], eax
call fcn.0056c5b5
lea eax, [ebp - 0x20]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.0056c6e3
lea eax, [ebp - 0x20]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.0056c827
test eax, eax
je 0x56d5d4
mov dword [esp + 8], pe_nt_image_headers32
mov dword [esp + 4], 0x19d
mov dword [esp], str.transport_helper.c
call fcn.00499d7f
mov dword [esp], eax
call sub.cygwin1.dll_exit
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x24]
mov dword [esp + 8], edx
mov dword [esp + 4], str.lock
mov dword [esp], eax
call fcn.0056c472
test eax, eax
je 0x56d63f
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x24]
test eax, eax
je 0x56d625
mov esi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax]
mov dword [esp], str._s_also_locked__s
call fcn.0056c696
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.004ae342
jmp 0x56d59a
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp + 8]
add edx, 0x20
mov dword [esp + 4], eax
mov dword [esp], edx
call fcn.0048e96e
jmp 0x56d59a
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 0xd]
and eax, 2
test al, al
je 0x56d681
mov eax, dword [ebp - 0x10]
movzx eax, byte [eax + 0x34]
and eax, 8
test al, al
je 0x56d681
mov eax, dword [ebp - 0x18]
mov dword [esp + 4], str.connectivity_ok
mov dword [esp], eax
call sub.cygwin1.dll_strcmp
test eax, eax
jne 0x56d681
mov eax, dword [ebp - 0x10]
movzx edx, byte [eax + 0x34]
or edx, 0x10
mov byte [eax + 0x34], dl
jmp 0x56d6be
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x56d69a
lea eax, [ebp - 0x20]
mov dword [esp], eax
call fcn.0048a820
mov eax, 0
jmp 0x56d6c3
mov esi, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
mov ebx, dword [eax]
mov dword [esp], str._s_unexpectedly_said:__s
call fcn.0056c696
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.004ae342
jmp 0x56d59a
add esp, 0x30
pop ebx
pop esi
pop ebp
ret
Function at 0x56daf9
Capabilities:
Terminate process
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
sub esp, 0x34
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], 0
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.0056c930
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax + 0x34]
mov dword [esp], eax
call sub.cygwin1.dll_dup
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jns 0x56db49
mov dword [esp], str.cant_dup_helper_output_fd
call fcn.0056c696
mov dword [esp], eax
call fcn.004ae15c
mov dword [esp + 4], 0x5cf990
mov eax, dword [ebp - 0x18]
mov dword [esp], eax
call fcn.004b4a61
mov dword [ebp - 0x1c], eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 2
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call sub.cygwin1.dll_setvbuf
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.0056c6e3
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call fcn.0056c758
test eax, eax
je 0x56dbce
mov dword [esp + 8], pe_nt_image_headers32
mov dword [esp + 4], 0x245
mov dword [esp], str.transport_helper.c
call fcn.00499d7f
mov dword [esp], eax
call sub.cygwin1.dll_exit
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 8]
movzx eax, byte [eax]
movzx eax, al
test eax, eax
jne 0x56dc25
mov eax, dword [ebp - 0x10]
movzx edx, byte [eax + 0xd]
or edx, 4
mov byte [eax + 0xd], dl
mov eax, dword [0x6300ec]
test eax, eax
je 0x56dc1c
call sub.cygwin1.dll___getreent
mov eax, dword [eax + 0xc]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x29
mov dword [esp + 4], 1
mov dword [esp], str.Debug:_Smart_transport_connection_ready._n
call sub.cygwin1.dll_fwrite
mov dword [ebp - 0xc], 1
jmp 0x56dc90
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 8]
mov dword [esp + 4], str.fallback
mov dword [esp], eax
call sub.cygwin1.dll_strcmp
test eax, eax
jne 0x56dc72
mov eax, dword [0x6300ec]
test eax, eax
je 0x56dc90
call sub.cygwin1.dll___getreent
mov eax, dword [eax + 0xc]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x27
mov dword [esp + 4], 1
mov dword [esp], str.Debug:_Falling_back_to_dumb_transport._n
call sub.cygwin1.dll_fwrite
jmp 0x56dc90
mov eax, dword [ebp + 0xc]
mov ebx, dword [eax + 8]
mov dword [esp], str.unknown_response_to_connect:__s
call fcn.0056c696
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.004ae00f
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call sub.cygwin1.dll_fclose
mov eax, dword [ebp - 0xc]
mov ebx, dword [ebp - 4]
leave
ret
Function at 0x56f8a3
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [esp + 4], 0x90
mov dword [esp], 1
call fcn.004b4484
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp + 0xc]
mov dword [eax], edx
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.004a6c3f
mov dword [esp], str.GIT_TRANSPORT_HELPER_DEBUG
call sub.cygwin1.dll_getenv
test eax, eax
je 0x56f8ed
mov dword [0x6300ec], 1
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0xc]
mov dword [eax + 0xc], edx
mov eax, dword [ebp + 8]
mov dword [eax], fcn.0056d203
mov eax, dword [ebp - 0xc]
lea edx, [eax + 0x34]
mov eax, dword [ebp + 8]
mov dword [eax + 0x38], edx
mov eax, 0
leave
ret

Function at 0x56f912
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2028
call fcn.0059946c
sub esp, eax
mov eax, dword [0x5a0938]
test eax, eax
jns 0x56f943
mov dword [esp], str.GIT_TRANSLOOP_DEBUG
call sub.cygwin1.dll_getenv
test eax, eax
setne al
movzx eax, al
mov dword [0x5a0938], eax
mov eax, dword [0x5a0938]
test eax, eax
je 0x56f99a
lea eax, [ebp + 0xc]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 8]
mov dword [esp + 8], eax
mov dword [esp + 4], 0x2000
lea eax, [ebp - 0x200c]
mov dword [esp], eax
call sub.cygwin1.dll_vsnprintf
call sub.cygwin1.dll___getreent
mov eax, dword [eax + 0xc]
lea edx, [ebp - 0x200c]
mov dword [esp + 8], edx
mov dword [esp + 4], str.Transfer_loop_debugging:__s_n
mov dword [esp], eax
call sub.cygwin1.dll_fprintf
jmp 0x56f99b
nop
leave
ret
Function at 0x577370
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x88
lea eax, [ebp - 0x70]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call sub.cygwin1.dll__stat64
test eax, eax
je 0x5773ac
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
mov dword [esp], str.Could_not_stat__s
call fcn.004ae275
call fcn.00576bb4
jmp 0x577483
mov dword [esp + 4], 0x5d30a7
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.004c85b0
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x5773e5
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
mov dword [esp], str.Could_not_open__s
call fcn.004ae275
call fcn.00576bb4
jmp 0x577483
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x44]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.00576c1b
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x577405
mov eax, dword [ebp - 0x10]
jmp 0x57740a
mov eax, 1
mov dword [esp], eax
call fcn.004b42bb
mov edx, dword [ebp + 8]
mov dword [edx], eax
cmp dword [ebp - 0x10], 0
je 0x57746a
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov edx, dword [ebp - 0xc]
mov dword [esp + 0xc], edx
mov dword [esp + 8], 1
mov edx, dword [ebp - 0x10]
mov dword [esp + 4], edx
mov dword [esp], eax
call sub.cygwin1.dll_fread
cmp eax, 1
je 0x57746a
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_fclose
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
mov dword [esp], str.Could_not_read__s
call fcn.004ae2ca
call fcn.00576bb4
jmp 0x577483
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_fclose
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp + 8]
mov dword [eax + 4], edx
mov eax, 0
leave
ret
Function at 0x581438
Capabilities:
Create directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa8
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x14], 0x62f624
mov eax, dword [ebp + 0x10]
and eax, 0xf000
cmp eax, 0xe000
jne 0x5814bb
lea eax, [ebp - 0x80]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call sub.cygwin1.dll__lstat64
test eax, eax
jne 0x58149b
mov eax, dword [ebp - 0x70]
and eax, 0xf000
cmp eax, 0x4000
jne 0x58149b
mov eax, 0
jmp 0x581616
mov dword [esp + 4], 0x1ff
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_mkdir
test eax, eax
setne al
movzx eax, al
jmp 0x581616
mov eax, dword [0x59b3e0]
test eax, eax
je 0x5814f2
mov eax, dword [ebp + 0x10]
and eax, 0xf000
cmp eax, 0xa000
jne 0x5814f2
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x14]
mov dword [esp], eax
call sub.cygwin1.dll_symlink
test eax, eax
setne al
movzx eax, al
jmp 0x581616
mov eax, dword [ebp + 0x10]
and eax, 0x40
test eax, eax
je 0x581503
mov eax, 0x1ff
jmp 0x581508
mov eax, 0x1b6
mov dword [esp + 8], eax
mov dword [esp + 4], 0xa01
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call sub.cygwin1.dll__open64
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jns 0x581532
mov eax, 1
jmp 0x581616
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x4c]
mov eax, dword [eax + 0x84]
mov dword [esp + 0x14], 0
lea edx, [ebp - 0x1c]
mov dword [esp + 0x10], edx
mov edx, dword [ebp + 0x18]
mov dword [esp + 0xc], edx
mov edx, dword [ebp + 0x14]
mov dword [esp + 8], edx
mov edx, dword [ebp + 0xc]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00577f71
test eax, eax
je 0x58157a
mov eax, dword [ebp - 0x18]
mov dword [ebp + 0x18], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp + 0x14], eax
mov eax, dword [ebp + 0x18]
mov dword [esp + 8], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
call fcn.004b4880
shr eax, 0x1f
movzx eax, al
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x5815c2
mov dword [esp], str.failed_to_write_to__s
call fcn.00577f2c
mov edx, dword [ebp + 0xc]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.004ae275
call fcn.00577a38
lea eax, [ebp - 0x1c]
mov dword [esp], eax
call fcn.0048a820
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_close
test eax, eax
jns 0x581604
cmp dword [ebp - 0x10], 0
jne 0x581604
mov dword [esp], str.closing_file__s
call fcn.00577f2c
mov edx, dword [ebp + 0xc]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.004ae275
call fcn.00577a38
jmp 0x581616
cmp dword [ebp - 0x10], 0
je 0x581611
mov eax, 0xffffffff
jmp 0x581616
mov eax, 0
leave
ret
Function at 0x585a74
Capabilities:
Create directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call fcn.004b433a
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], 0
jmp 0x585b69
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
add eax, edx
mov ecx, dword [ebp - 0xc]
mov edx, dword [ebp - 0x10]
add edx, ecx
movzx eax, byte [eax]
mov byte [edx], al
add dword [ebp - 0xc], 1
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp + 0xc]
jge 0x585ac4
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
add eax, edx
movzx eax, byte [eax]
cmp al, 0x2f
jne 0x585a94
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp + 0xc]
jge 0x585b77
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
add eax, edx
mov byte [eax], 0
mov eax, dword [ebp + 0x10]
mov eax, dword [eax + 8]
mov dword [esp + 8], eax
mov eax, dword [ebp - 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.00496a15
test eax, eax
je 0x585afd
jmp 0x585b69
mov dword [esp + 4], 0x1ff
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call sub.cygwin1.dll_mkdir
test eax, eax
je 0x585b69
call sub.cygwin1.dll___errno
mov eax, dword [eax]
cmp eax, 0x11
jne 0x585b56
mov eax, dword [ebp + 0x10]
movzx eax, byte [eax + 0x5c]
and eax, 1
test al, al
je 0x585b56
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.004b50b5
test eax, eax
jne 0x585b56
mov dword [esp + 4], 0x1ff
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call sub.cygwin1.dll_mkdir
test eax, eax
jne 0x585b56
jmp 0x585b69
mov eax, dword [ebp - 0x10]
mov dword [esp + 4], eax
mov dword [esp], str.cannot_create_directory_at__s
call fcn.004ae15c
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp + 0xc]
jl 0x585a94
jmp 0x585b78
nop
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call sub.cygwin1.dll_free
nop
leave
ret
Function at 0x58c235
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [esp], 0x1c
call fcn.004b42bb
mov dword [ebp - 0xc], eax
mov dword [esp], str.GIT_NOTES_REWRITE_MODE
call sub.cygwin1.dll_getenv
mov dword [ebp - 0x10], eax
mov dword [esp], str.GIT_NOTES_REWRITE_REF
call sub.cygwin1.dll_getenv
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp + 8]
mov dword [eax + 4], edx
mov eax, dword [ebp - 0xc]
mov dword [eax + 8], 1
mov eax, dword [ebp - 0xc]
mov dword [eax + 0xc], 0x5437d0
mov dword [esp + 4], 0x14
mov dword [esp], 1
call fcn.004b4484
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x10], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
movzx edx, byte [eax + 0xc]
or edx, 1
mov byte [eax + 0xc], dl
mov eax, dword [ebp - 0xc]
mov dword [eax + 0x14], 0
mov eax, dword [ebp - 0xc]
mov dword [eax + 0x18], 0
cmp dword [ebp - 0x10], 0
je 0x58c316
mov eax, dword [ebp - 0xc]
mov dword [eax + 0x18], 1
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call fcn.0058c052
mov edx, dword [ebp - 0xc]
mov dword [edx + 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
test eax, eax
jne 0x58c316
mov dword [esp], str.Bad__s_value:__s
call fcn.0058bd19
mov edx, dword [ebp - 0x10]
mov dword [esp + 8], edx
mov dword [esp + 4], str.GIT_NOTES_REWRITE_MODE
mov dword [esp], eax
call fcn.004ae2ca
call fcn.0058bbd0
cmp dword [ebp - 0x14], 0
je 0x58c33b
mov eax, dword [ebp - 0xc]
mov dword [eax + 0x14], 1
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
mov edx, dword [ebp - 0x14]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00543cc8
mov eax, dword [ebp - 0xc]
mov dword [esp + 4], eax
mov dword [esp], 0x58c0d7
call fcn.00414799
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
test eax, eax
je 0x58c365
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
mov eax, dword [eax + 4]
test eax, eax
jne 0x58c39b
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.0048e723
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
mov dword [esp], eax
call sub.cygwin1.dll_free
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_free
mov eax, 0
jmp 0x58c3dd
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
mov dword [esp + 4], 2
mov dword [esp], eax
call fcn.0054400e
mov edx, dword [ebp - 0xc]
mov dword [edx], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
mov dword [esp + 4], 0
mov dword [esp], eax
call fcn.0048e723
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
mov dword [esp], eax
call sub.cygwin1.dll_free
mov eax, dword [ebp - 0xc]
leave
ret
Function at 0x58c6b1
Capabilities:
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [esp], str.GIT_TEST_CHECKOUT_WORKERS
call sub.cygwin1.dll_getenv
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x58c735
mov eax, dword [ebp - 0xc]
movzx eax, byte [eax]
test al, al
je 0x58c735
mov eax, dword [ebp + 8]
mov dword [esp + 8], eax
mov dword [esp + 4], 0xa
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
call fcn.0058c5a1
test eax, eax
je 0x58c717
mov dword [esp], str.invalid_value_for__s:__s
call fcn.0058c683
mov edx, dword [ebp - 0xc]
mov dword [esp + 8], edx
mov dword [esp + 4], str.GIT_TEST_CHECKOUT_WORKERS
mov dword [esp], eax
call fcn.004ae00f
mov eax, dword [ebp + 8]
mov eax, dword [eax]
test eax, eax
jg 0x58c72a
call fcn.00497e6c
mov edx, dword [ebp + 8]
mov dword [edx], eax
mov eax, dword [ebp + 0xc]
mov dword [eax], 0
jmp 0x58c78c
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
mov dword [esp], str.checkout.workers
call fcn.00414858
test eax, eax
je 0x58c758
mov edx, 1
mov eax, dword [ebp + 8]
mov dword [eax], edx
jmp 0x58c76b
mov eax, dword [ebp + 8]
mov eax, dword [eax]
test eax, eax
jg 0x58c76b
call fcn.00497e6c
mov edx, dword [ebp + 8]
mov dword [edx], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
mov dword [esp], str.checkout.thresholdForParallelism
call fcn.00414858
test eax, eax
je 0x58c78c
mov edx, 0x64
mov eax, dword [ebp + 0xc]
mov dword [eax], edx
leave
ret

Function at 0x58f0b0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
cmp dword [ebp + 0xc], 0
je 0x58f0f9
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
test eax, eax
jne 0x58f0f9
mov eax, dword [ebp + 0x10]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 1
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp], eax
call sub.cygwin1.dll_fwrite
cmp eax, 1
je 0x58f0fa
call sub.cygwin1.dll___errno
mov edx, dword [eax]
mov eax, dword [ebp + 0x14]
mov dword [eax], edx
jmp 0x58f0fa
nop
leave
ret