joyce8/EMBER2024-capa huggingface dataset:
Function at 0x14007ac50
Capabilities:
Set socket configuration

Disassembly:
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x30
mov rbp, qword [rsp + 0x80]
mov dword [rsp + 0x78], r9d
mov rbx, rcx
mov esi, edx
mov edi, r8d
test rcx, rcx
je 0x14007ad50
call fcn.140073e30
mov rdx, rax
mov rax, qword [rbx]
test rax, rax
je 0x14007ac8d
cmp qword [rax], rdx
je 0x14007ac9d
mov rcx, rbx
call fcn.1400b1670
test eax, eax
je 0x14007ad50
mov rcx, qword [rbx + 0x18]
test byte [rcx + 0x28], 1
je 0x14007acbb
mov rdx, rbp
call fcn.1402cb260
test eax, eax
je 0x14007ad3c
mov rcx, qword [rbx + 0x18]
movsxd rcx, dword [rcx + 0xc]
mov edx, esi
lea r9, [rsp + 0x78]
mov r8d, edi
mov dword [rsp + 0x20], 4
call qword [sym.imp.WS2_32.dll_setsockopt]
mov edx, eax
mov eax, 1
test edx, edx
jne 0x14007acf0
add rsp, 0x30
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
ret
call qword [sym.imp.WS2_32.dll_WSAGetLastError]
mov ecx, eax
mov ebx, eax
call fcn.140075150
mov r12, qword [0x14048eee0]
mov rdi, rax
mov esi, dword [r12]
test esi, esi
je 0x14007ad80
test rbp, rbp
je 0x14007ad3c
cmp qword [rbp], 0
je 0x14007ada0
mov r9, rdi
lea r8, [0x14037c4f0]
mov edx, 0x10
lea rcx, [0x14037c3ca]
call fcn.1400d2190
xor eax, eax
add rsp, 0x30
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
ret
lea rax, [0x14037c4d8]
lea r9, str.g_socket_set_option
mov edx, 8
mov qword [rsp + 0x20], rax
lea r8, [0x14037bda0]
lea rcx, [0x14037bea6]
call fcn.1400d2190
xor eax, eax
jmp 0x14007ad3e
lea rcx, [0x14037c0b8]
call fcn.1400daa90
mov dword [r12], eax
mov esi, eax
jmp 0x14007ad11
mov ecx, ebx
call fcn.1400264c0
mov r8, rdi
mov ecx, esi
mov edx, eax
call fcn.1400cac00
mov qword [rbp], rax
xor eax, eax
jmp 0x14007ad3e

Function at 0x14007d1c0
Capabilities:
Encode data using base64
Get thread local storage value
Set thread local storage value

Disassembly:
push rdi
push rsi
push rbx
sub rsp, 0x30
mov rax, qword [rcx + 0x18]
mov rsi, rcx
lea rcx, [rax + 0x58]
mov rbx, rdx
call fcn.140341618
mov rdi, qword [rsi + 0x18]
mov rcx, qword [rdi + 0x50]
test rcx, rcx
je 0x14007d188
mov rax, rcx
jmp 0x14007d139
mov rax, qword [rax + 8]
test rax, rax
je 0x14007d188
cmp rbx, qword [rax]
jne 0x14007d130
mov rdx, rbx
call fcn.1400d3ec0
mov qword [rdi + 0x50], rax
mov rcx, qword [rsi + 0x18]
test byte [rcx + 0x28], 8
je 0x14007d168
add rcx, 0x58
add rsp, 0x30
pop rbx
pop rsi
pop rdi
jmp fcn.140341260
mov rcx, rsi
call fcn.14007adc0
mov rcx, qword [rsi + 0x18]
add rcx, 0x58
add rsp, 0x30
pop rbx
pop rsi
pop rdi
jmp fcn.140341260
lea rax, str.g_list_find__socket__priv__requested_conditions__condition____NULL
lea r9, str.remove_condition_watch
mov r8d, 0xf16
mov qword [rsp + 0x20], rax
lea rdx, str..._gio_gsocket.c
lea rcx, [0x14037bea6]
call fcn.1400e7f70
nop
nop word cs:[rax + rax]
push rbx
sub rsp, 0x30
mov rbx, qword [rcx + 0x70]
lea rdx, [rcx + 0x78]
mov rcx, rbx
call fcn.14007d100
mov edx, 0x50
mov rcx, rbx
call fcn.1400b1750
test eax, eax
jne 0x14007d220
lea rax, [0x14037cf14]
mov r9, qword [str.g_object_unref]
lea r8, [0x14037bda0]
mov edx, 8
mov qword [rsp + 0x20], rax
lea rcx, [0x14037bdba]
call fcn.1400d2190
nop
add rsp, 0x30
pop rbx
ret
mov rcx, rbx
add rsp, 0x30
pop rbx
jmp fcn.1400a9e30
Function at 0x1400839e0
Capabilities:
Encode data using base64
Get thread local storage value
Resolve function by parsing pe exports
Set thread local storage value

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x48
mov rbx, rcx
mov esi, edx
call fcn.14002b8d0
mov rcx, rbx
mov rdi, rax
call fcn.14002b950
mov r15, rax
mov eax, dword [rax + 0x10]
test eax, eax
je 0x140083a40
lea rax, str._data__delivered
lea r9, str.send_message_with_reply_cleanup
mov r8d, 0x6f4
mov qword [rsp + 0x20], rax
lea rdx, [0x14037ddfa]
lea rcx, [0x14037dc89]
call fcn.1400e7f70
nop dword [rax + rax]
mov rcx, qword [r15 + 8]
mov dword [r15 + 0x10], 1
test rcx, rcx
je 0x140083a5e
call fcn.1400d8fc0
mov qword [r15 + 8], 0
mov ebp, dword [r15 + 4]
test ebp, ebp
jne 0x140083ad0
test esi, esi
jne 0x140083a88
mov rcx, rbx
add rsp, 0x48
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp fcn.1400a9ff0
mov edx, dword [r15]
mov rcx, qword [rdi + 0x88]
call fcn.1400c9800
test eax, eax
jne 0x140083a6a
lea rax, str.removed
lea r9, str.send_message_with_reply_cleanup
mov r8d, 0x707
mov qword [rsp + 0x20], rax
lea rdx, [0x14037ddfa]
lea rcx, [0x14037dc89]
call fcn.1400d7d20
jmp 0x140083a6a
mov rcx, rbx
call fcn.14002bd80
mov qword [rsp + 0x38], rax
mov r14, rax
test rax, rax
jne 0x140083af8
mov dword [r15 + 4], 0
jmp 0x140083a66
mov r12, qword [0x14048c8a0]
mov rcx, r12
call fcn.140341618
mov r13, qword [r14 + 0x18]
test byte [r13 + 4], 1
je 0x140083b42
mov r14, qword [sym.imp.KERNEL32.dll_SleepConditionVariableSRW]
nop dword [rax]
or byte [r13 + 4], 2
xor r9d, r9d
mov rcx, qword [0x14048c890]
mov rdx, r12
mov r8d, 0xffffffff
call r14
test byte [r13 + 4], 1
jne 0x140083b20
mov rcx, qword [rsp + 0x38]
mov edx, ebp
call fcn.1400b6880
mov rcx, r12
call fcn.140341260
mov dword [r15 + 4], 0
jmp 0x140083a66

Function at 0x140083b70
Capabilities:
Encode data using base64
Get thread local storage value
Resolve function by parsing pe exports
Set thread local storage value

Disassembly:
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x38
mov ebp, edx
mov r12d, r8d
mov r13, r9
mov rbx, rcx
call fcn.14002b8d0
mov rcx, rbx
mov rsi, rax
call fcn.14002b950
add rsi, 0x18
mov rdi, rax
mov rcx, rsi
call fcn.140341618
mov eax, dword [rdi + 0x10]
test eax, eax
jne 0x140083c00
mov rcx, rbx
call fcn.1400a9ca0
mov edx, 1
mov rcx, rbx
call fcn.1400839e0
mov rcx, rsi
call fcn.140341260
mov qword [rsp + 0x20], r13
mov rcx, rbx
mov r8d, r12d
lea r9, [0x14037e244]
mov edx, ebp
call fcn.140032870
mov rcx, rbx
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
jmp fcn.1400a9ff0
mov rcx, rsi
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
jmp fcn.140341260
Function at 0x140086870
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x58
mov r12, qword [rsp + 0xc0]
mov r13, qword [rsp + 0xc8]
mov r14, qword [rsp + 0xd0]
mov r15, qword [rsp + 0xd8]
mov rbx, rcx
mov rsi, rdx
mov ebp, r8d
mov edi, r9d
test rcx, rcx
je 0x1400869b8
call fcn.140082170
mov rdx, rax
mov rax, qword [rbx]
test rax, rax
je 0x1400868ca
cmp qword [rax], rdx
je 0x1400868da
mov rcx, rbx
call fcn.1400b1670
test eax, eax
je 0x1400869b8
test rsi, rsi
je 0x140086900
call fcn.14008b570
mov rdx, rax
mov rax, qword [rsi]
test rax, rax
je 0x1400868f4
cmp qword [rax], rdx
je 0x140086940
mov rcx, rsi
call fcn.1400b1670
test eax, eax
jne 0x140086940
lea rax, [0x14037dc92]
lea r9, str.g_dbus_connection_send_message_with_reply
lea r8, [0x14037dbc2]
mov edx, 8
mov qword [rsp + 0xc0], rax
lea rcx, [0x14037dc89]
add rsp, 0x58
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp fcn.1400d2190
mov rcx, rsi
call fcn.14008b800
test eax, eax
jne 0x1400869c8
cmp edi, 0xffffffff
jl 0x1400869a8
lea rax, [rbx + 0x18]
mov rcx, rax
mov qword [rsp + 0x48], rax
call fcn.140341618
mov qword [rsp + 0x38], r15
mov rcx, rbx
mov r9d, edi
mov qword [rsp + 0x30], r14
mov r8d, ebp
mov rdx, rsi
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r12
call fcn.1400865e0
mov rcx, qword [rsp + 0x48]
add rsp, 0x58
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp fcn.140341260
lea rax, [0x14037eaf8]
jmp 0x140086907
lea rax, [0x14037ddd8]
jmp 0x140086907
lea rax, [0x14037ea98]
jmp 0x140086907

Function at 0x14008b640
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
push rsi
push rbx
sub rsp, 0x38
mov rbx, rcx
mov esi, edx
test rcx, rcx
je 0x14008b6c8
call fcn.14008b570
mov rdx, rax
mov rax, qword [rbx]
test rax, rax
je 0x14008b665
cmp qword [rax], rdx
je 0x14008b671
mov rcx, rbx
call fcn.1400b1670
test eax, eax
je 0x14008b6c8
cmp esi, 0xff
ja 0x14008b690
mov eax, dword [rbx + 0x20]
test eax, eax
jne 0x14008b6d8
mov dword [rbx + 0x1c], esi
add rsp, 0x38
pop rbx
pop rsi
ret
lea rax, str._guint__flags___256
mov qword [rsp + 0x20], rax
lea r9, str.g_dbus_message_set_flags
lea r8, [0x140381220]
mov edx, 8
lea rcx, [0x14038125c]
call fcn.1400d2190
nop
add rsp, 0x38
pop rbx
pop rsi
ret
lea rax, [0x1403817a7]
jmp 0x14008b697
lea r9, str.g_dbus_message_set_flags
lea r8, str._s:_Attempted_to_modify_a_locked_message
mov edx, 0x10
lea rcx, [0x14038125c]
add rsp, 0x38
pop rbx
pop rsi
jmp fcn.1400d2190
Function at 0x14008f700
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
push rdi
push rsi
push rbx
sub rsp, 0x30
mov rbx, rcx
mov esi, edx
mov rdi, r8
test rcx, rcx
je 0x14008f760
call fcn.14008b570
mov rdx, rax
mov rax, qword [rbx]
test rax, rax
je 0x14008f729
cmp qword [rax], rdx
je 0x14008f735
mov rcx, rbx
call fcn.1400b1670
test eax, eax
je 0x14008f760
mov eax, dword [rbx + 0x20]
test eax, eax
jne 0x14008f7b0
test rdi, rdi
je 0x14008f798
mov rcx, rdi
call fcn.1400f65b0
mov rcx, qword [rbx + 0x30]
mov rdx, rsi
mov r8, rax
add rsp, 0x30
pop rbx
pop rsi
pop rdi
jmp fcn.1400c89e0
lea rax, [0x1403817a7]
lea r9, str.g_dbus_message_set_header
mov edx, 8
mov qword [rsp + 0x20], rax
lea r8, [0x140381220]
lea rcx, [0x14038125c]
call fcn.1400d2190
nop
add rsp, 0x30
pop rbx
pop rsi
pop rdi
ret
mov rcx, qword [rbx + 0x30]
mov rdx, rsi
add rsp, 0x30
pop rbx
pop rsi
pop rdi
jmp fcn.1400c9800
lea r9, str.g_dbus_message_set_header
lea r8, str._s:_Attempted_to_modify_a_locked_message
mov edx, 0x10
lea rcx, [0x14038125c]
add rsp, 0x30
pop rbx
pop rsi
pop rdi
jmp fcn.1400d2190

Function at 0x14008f7e0
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
push rdi
push rsi
push rbx
sub rsp, 0x30
mov rbx, rcx
mov esi, edx
test rcx, rcx
je 0x14008f880
call fcn.14008b570
mov rdx, rax
mov rax, qword [rbx]
test rax, rax
je 0x14008f80a
cmp qword [rax], rdx
je 0x14008f816
mov rcx, rbx
call fcn.1400b1670
test eax, eax
je 0x14008f880
mov ecx, 4
call sub.msvcrt.dll_malloc
mov rcx, rax
test rax, rax
je 0x14008f8b4
mov dword [rax], esi
mov r9, rax
mov edx, 4
lea r8, [fcn.1400d07c0]
call fcn.1400bd9d0
mov r8d, 1
lea rcx, [0x140381945]
mov rdx, rax
mov rsi, rax
call fcn.1400f0830
mov rcx, rsi
mov rdi, rax
call fcn.1400be1a0
mov r8, rdi
mov edx, 5
mov rcx, rbx
add rsp, 0x30
pop rbx
pop rsi
pop rdi
jmp fcn.14008f700
lea rax, [0x1403817a7]
lea r9, str.g_dbus_message_set_reply_serial
mov edx, 8
mov qword [rsp + 0x20], rax
lea r8, [0x140381220]
lea rcx, [0x14038125c]
call fcn.1400d2190
nop
add rsp, 0x30
pop rbx
pop rsi
pop rdi
ret
mov qword [rsp + 0x20], 4
lea r9, [0x140381aac]
lea r8, [0x140381750]
mov edx, 4
lea rcx, [0x14038151e]
call fcn.1400d2190
jmp 0x14008f8dc

Function at 0x14008f8e0
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
push rsi
push rbx
sub rsp, 0x38
mov rsi, rcx
mov rbx, rdx
test rcx, rcx
je 0x14008f988
call fcn.14008b570
mov rdx, rax
mov rax, qword [rsi]
test rax, rax
je 0x14008f90a
cmp qword [rax], rdx
je 0x14008f916
mov rcx, rsi
call fcn.1400b1670
test eax, eax
je 0x14008f988
test rbx, rbx
je 0x14008f96b
mov rcx, rbx
call fcn.140081e40
test eax, eax
jne 0x14008f960
lea rax, str.value__NULL__g_dbus_is_name__value_
mov qword [rsp + 0x20], rax
lea r9, str.g_dbus_message_set_destination
lea r8, [0x140381220]
mov edx, 8
lea rcx, [0x14038125c]
call fcn.1400d2190
nop
add rsp, 0x38
pop rbx
pop rsi
ret
mov rcx, rbx
call fcn.1400f0ab0
mov rbx, rax
mov r8, rbx
mov edx, 6
mov rcx, rsi
add rsp, 0x38
pop rbx
pop rsi
jmp fcn.14008f700
lea rax, [0x1403817a7]
jmp 0x14008f92e
Function at 0x14008fdb0
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
push rsi
push rbx
sub rsp, 0x38
mov rsi, rcx
mov rbx, rdx
test rcx, rcx
je 0x14008fe68
call fcn.14008b570
mov rdx, rax
mov rax, qword [rsi]
test rax, rax
je 0x14008fdda
cmp qword [rax], rdx
je 0x14008fdea
mov rcx, rsi
call fcn.1400b1670
test eax, eax
je 0x14008fe68
test rbx, rbx
je 0x14008fe4b
mov rcx, rbx
call sub.msvcrt.dll_strlen
mov rcx, rbx
lea rdx, [rax + 1]
call fcn.1400f6b50
test eax, eax
jne 0x14008fe40
lea rax, str.value__NULL__g_variant_is_signature__value_
mov qword [rsp + 0x20], rax
lea r9, str.g_dbus_message_set_signature
lea r8, [0x140381220]
mov edx, 8
lea rcx, [0x14038125c]
call fcn.1400d2190
nop
add rsp, 0x38
pop rbx
pop rsi
ret
mov rcx, rbx
call fcn.1400f0da0
mov rbx, rax
mov r8, rbx
mov edx, 8
mov rcx, rsi
add rsp, 0x38
pop rbx
pop rsi
jmp fcn.14008f700
lea rax, [0x1403817a7]
jmp 0x14008fe0e

Function at 0x14008fe80
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
push rsi
push rbx
sub rsp, 0x38
mov rbx, rcx
mov rsi, rdx
test rcx, rcx
je 0x14008ffb0
call fcn.14008b570
mov rdx, rax
mov rax, qword [rbx]
test rax, rax
je 0x14008feaa
cmp qword [rax], rdx
je 0x14008feba
mov rcx, rbx
call fcn.1400b1670
test eax, eax
je 0x14008ffb0
test rsi, rsi
je 0x14008ff08
lea rdx, [0x140382338]
mov rcx, rsi
call fcn.1400edc90
test eax, eax
jne 0x14008ff40
lea rax, str._body__NULL___g_variant_is_of_type__body__G_VARIANT_TYPE_TUPLE_
mov qword [rsp + 0x20], rax
lea r9, str.g_dbus_message_set_body
lea r8, [0x140381220]
mov edx, 8
lea rcx, [0x14038125c]
call fcn.1400d2190
nop
add rsp, 0x38
pop rbx
pop rsi
ret
mov edx, dword [rbx + 0x20]
test edx, edx
jne 0x14008fff0
mov rcx, qword [rbx + 0x38]
test rcx, rcx
je 0x14008ff21
call fcn.1400f8d60
xor edx, edx
mov rcx, rbx
mov qword [rbx + 0x38], 0
add rsp, 0x38
pop rbx
pop rsi
jmp fcn.14008fdb0
mov eax, dword [rbx + 0x20]
test eax, eax
jne 0x14008fff0
mov rcx, qword [rbx + 0x38]
test rcx, rcx
je 0x14008ff59
call fcn.1400f8d60
mov rcx, rsi
call fcn.1400f65b0
mov rcx, rsi
mov qword [rbx + 0x38], rax
call fcn.1400ee7d0
mov rcx, rax
mov rsi, rax
call sub.msvcrt.dll_strlen
cmp rax, 1
jbe 0x14008ffc0
lea rcx, [rsi + 1]
lea rdx, [rax - 2]
call fcn.1400e4b90
mov rcx, rbx
mov rsi, rax
mov rdx, rax
call fcn.14008fdb0
mov rcx, rsi
add rsp, 0x38
pop rbx
pop rsi
jmp fcn.14034efb0
lea rax, [0x1403817a7]
jmp 0x14008fed9
lea rax, str.type_string_len___2
lea r9, str.g_dbus_message_set_body
mov r8d, 0x49c
mov qword [rsp + 0x20], rax
lea rdx, [0x140381801]
lea rcx, [0x14038125c]
call fcn.1400e7f70
nop dword [rax]
lea r9, str.g_dbus_message_set_body
lea r8, str._s:_Attempted_to_modify_a_locked_message
mov edx, 0x10
lea rcx, [0x14038125c]
add rsp, 0x38
pop rbx
pop rsi
jmp fcn.1400d2190
Function at 0x140093af0
Capabilities:
Encode data using base64
Get thread local storage value
Resolve function by parsing pe exports
Set thread local storage value

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x38
mov r12, qword [rsp + 0xa0]
mov r13, qword [rsp + 0xa8]
mov eax, r8d
mov rdi, rcx
mov rbx, rdx
mov rbp, r9
and eax, 2
and r8d, 1
jne 0x140093c10
xor r14d, r14d
test eax, eax
jne 0x140093c50
mov ecx, 0x10
call sub.msvcrt.dll_malloc
mov rsi, rax
test rax, rax
je 0x140093c84
test rbx, rbx
je 0x140093c60
mov rcx, rbx
call sub.msvcrt.dll_strlen
lea r15, [rax + 1]
mov rcx, r15
call sub.msvcrt.dll_malloc
mov rcx, rax
test rax, rax
je 0x140093cae
mov r8, r15
mov rdx, rbx
call sub.msvcrt.dll_memcpy
mov rcx, rax
mov qword [rsi], rcx
mov r9, r13
mov r8, r12
mov rdx, rbp
mov dword [rsi + 8], r14d
mov rcx, rdi
call fcn.140029f90
lea rdx, [fcn.140093af0]
mov rbx, rax
mov rcx, rax
call fcn.14002a300
mov rcx, rbx
call fcn.140030520
test rax, rax
je 0x140093c70
mov rcx, rbx
lea rdx, str._gio__resolver_lookup
call fcn.14002a380
lea r8, [0x140092db0]
mov rdx, rsi
mov rcx, rbx
call fcn.14002a0d0
mov rcx, rbx
call fcn.1402b3b50
mov rcx, rbx
lea rdx, [0x140097ff0]
call fcn.140032450
mov rcx, rbx
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp fcn.1400a9ff0
mov r14d, 2
test eax, eax
je 0x140093b34
lea rax, str.__flags__G_RESOLVER_NAME_LOOKUP_FLAGS_IPV4_ONLY_
lea r9, str.flags_to_family
mov edx, 8
mov qword [rsp + 0x20], rax
lea r8, [0x1403833e4]
lea rcx, [0x1403834ae]
call fcn.1400d2190
nop dword [rax]
mov r14d, 0x17
jmp 0x140093b34
xor ecx, ecx
jmp 0x140093b81
lea rdx, str.lookup_by_name_with_flags_async
mov rcx, rbx
call fcn.14002a380
jmp 0x140093bbc
mov qword [rsp + 0x20], 0x10
lea r9, [0x140383460]
lea r8, [0x140383478]
mov edx, 4
lea rcx, [0x14038349a]
call fcn.1400d2190
jmp 0x140093cac
mov qword [rsp + 0x20], r15
lea r9, [0x140383460]
lea r8, [0x140383478]
mov edx, 4
lea rcx, [0x14038349a]
call fcn.1400d2190
jmp 0x140093cd2
Function at 0x140097c20
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x30
mov r14, qword [rsp + 0x90]
mov r12, qword [rsp + 0x98]
mov r13, qword [rsp + 0xa0]
mov rbx, rcx
mov rsi, rdx
mov rdi, r8
mov rbp, r9
test rcx, rcx
je 0x140097d28
call fcn.14008c530
mov rdx, rax
mov rax, qword [rbx]
test rax, rax
je 0x140097c70
cmp qword [rax], rdx
je 0x140097c80
mov rcx, rbx
call fcn.1400b1670
test eax, eax
je 0x140097d28
test rsi, rsi
je 0x140097ce8
lea rax, [0x140383e24]
test rdi, rdi
je 0x140097cef
lea rax, [0x140383e35]
test rbp, rbp
je 0x140097cef
mov rcx, rsi
mov r8, rbp
mov rdx, rdi
call fcn.140097b90
mov rsi, rax
test rax, rax
je 0x140097d31
mov rax, qword [rbx]
mov rcx, rbx
mov qword [rsp + 0x20], r13
mov r9, r12
mov r8, r14
mov rdx, rsi
call qword [rax + 0xc8]
mov rcx, rsi
add rsp, 0x30
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
jmp fcn.14034efb0
lea rax, [0x140383e14]
lea r9, str.g_resolver_lookup_service_async
lea r8, [0x1403833e4]
mov edx, 8
mov qword [rsp + 0x90], rax
lea rcx, [0x1403834ae]
add rsp, 0x30
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
jmp fcn.1400d2190
lea rax, [0x140383773]
jmp 0x140097cef
lea rcx, [0x140383e44]
call fcn.1400cb540
mov rsi, rax
call fcn.140025c60
xor edx, edx
mov r8, r13
mov rcx, rbx
mov dword [rsp + 0x98], edx
lea r9, [fcn.140097c20]
mov rdx, r12
mov qword [rsp + 0xa0], rsi
mov dword [rsp + 0x90], eax
add rsp, 0x30
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
jmp fcn.14002b370

Function at 0x14009de20
Capabilities:
Encode data using base64
Get thread local storage value
Resolve function by parsing pe exports
Set thread local storage value

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x38
mov rsi, rcx
call fcn.14002b8d0
cmp qword [rax + 0x28], 0
mov rbx, rax
je 0x14009de60
mov rcx, rsi
call fcn.14002bd80
mov rcx, qword [rbx + 0x28]
mov r9, rsi
lea r8, [0x14009dfd0]
mov rdx, rax
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
jmp fcn.140056390
mov rax, qword [rax + 0x30]
test rax, rax
je 0x14009decf
mov rdi, qword [rax]
mov rax, qword [rax + 8]
mov qword [rbx + 0x30], rax
mov rbp, qword [rdi]
call fcn.140096d50
lea r9, [0x14038583b]
mov r8, rbp
mov qword [rsp + 0x28], 0
mov rcx, rax
movzx eax, word [rdi + 8]
lea rdx, [0x140385840]
mov dword [rsp + 0x20], eax
call fcn.1400ad9f0
mov rdi, rax
mov rcx, rax
mov eax, dword [rbx + 0x38]
test eax, eax
je 0x14009df20
call fcn.1400565f0
mov qword [rbx + 0x28], rax
mov rcx, rdi
call fcn.1400a9ff0
cmp qword [rbx + 0x28], 0
jne 0x14009de3a
mov rdx, qword [rbx + 0x40]
test rdx, rdx
je 0x14009df00
mov rcx, rsi
call fcn.140032790
mov rcx, rsi
mov qword [rbx + 0x40], 0
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
jmp fcn.1400a9ff0
mov rcx, rsi
xor r8d, r8d
xor edx, edx
call fcn.140032520
mov rcx, rsi
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
jmp fcn.1400a9ff0
call fcn.140056560
jmp 0x14009deb8
Function at 0x14009f8e0
Capabilities:
Encode data using base64
Get thread local storage value
Set thread local storage value

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x58
mov r14, qword [rsp + 0xc0]
mov rbx, rcx
mov rdi, rdx
mov ebp, r8d
mov r12, r9
test rcx, rcx
je 0x14009f9d8
call fcn.14009c5c0
cmp byte [rbx + 3], 0
js 0x14009f9a7
movzx esi, byte [rbx + 3]
shr sil, 6
and esi, 1
cmp qword [rbx + 8], 0
je 0x14009f9c0
mov eax, dword [rbx]
mov edx, eax
mov dword [rsp + 0x30], eax
shr edx, 0x18
or edx, 0x40
mov byte [rsp + 0x33], dl
mov edx, dword [rsp + 0x30]
lock cmpxchg dword [rbx], edx
jne 0x14009f932
mov r13, qword [rbx - 0x20]
test r13, r13
je 0x14009fa20
mov r15, qword [rbx - 0x18]
test sil, sil
je 0x14009fa30
mov qword [rsp + 0x28], r15
mov r9, r12
mov r8d, ebp
mov rdx, rdi
mov qword [rsp + 0x20], r14
mov rcx, rbx
call r13
and esi, 1
shl esi, 6
mov eax, dword [rbx]
mov edi, eax
mov dword [rsp + 0x30], eax
shr edi, 0x18
mov edx, edi
and edx, 0xffffffbf
or edx, esi
mov byte [rsp + 0x33], dl
mov edx, dword [rsp + 0x30]
lock cmpxchg dword [rbx], edx
jne 0x14009f987
mov rcx, rbx
add rsp, 0x58
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp fcn.14009ca00
cmp qword [rbx - 0x20], 0
jne 0x14009f932
lea rax, [0x140385a98]
jmp 0x14009f9df
lea rax, [0x140385407]
lea r9, str.g_closure_invoke
lea r8, [0x1403853e0]
mov edx, 8
mov qword [rsp + 0xc0], rax
lea rcx, [0x1403853fa]
add rsp, 0x58
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
jmp fcn.1400d2190
mov r13, qword [rbx + 8]
xor r15d, r15d
test sil, sil
jne 0x14009f968
test byte [rbx + 2], 1
je 0x14009fa43
mov rax, qword [rbx + 0x18]
mov rdx, rbx
mov rcx, qword [rax]
call qword [rax + 8]
mov qword [rsp + 0x28], r15
mov r9, r12
mov r8d, ebp
mov rdx, rdi
mov qword [rsp + 0x20], r14
mov rcx, rbx
call r13
test byte [rbx + 2], 1
je 0x14009f981
mov rax, qword [rbx + 0x18]
mov rdx, rbx
mov rcx, qword [rax + 0x10]
call qword [rax + 0x18]
jmp 0x14009f981
Function at 0x1400a9ff0
Capabilities:
Encode data using base64
Get thread local storage value
Resolve function by parsing pe exports
Set thread local storage value

Disassembly:
sub rsp, 0x38
test rcx, rcx
je 0x1400aa01c
mov rax, qword [rcx]
test rax, rax
je 0x1400aa01c
mov rax, qword [rax]
cmp rax, 0x3fc
jbe 0x1400aa050
and rax, 0xfffffffffffffffc
movzx edx, byte [rax + 0x14]
cmp qword [rax + rdx*8 + 0x48], 0x50
je 0x1400aa070
lea rax, [0x1403879a3]
mov r9, qword [str.g_object_unref]
lea r8, [0x140387700]
mov edx, 8
mov qword [rsp + 0x20], rax
lea rcx, [0x14038771a]
call fcn.1400d2190
nop
add rsp, 0x38
ret
mov rdx, qword [0x14048f570]
shr rax, 2
mov rax, qword [rdx + rax*8]
test rax, rax
je 0x1400aa01c
jmp 0x1400aa010
add rsp, 0x38
jmp fcn.1400a9e30

Function at 0x1400aa100
Capabilities:
Encode data using base64
Get thread local storage value
Resolve function by parsing pe exports
Set thread local storage value

Disassembly:
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x38
mov rbx, rcx
mov rsi, rdx
test rcx, rcx
je 0x1400aa12a
mov rbp, qword [rcx]
cmp rbp, 0x50
je 0x1400aa138
mov edx, 0x50
call fcn.1400b8900
test eax, eax
jne 0x1400aa138
lea rax, str.G_VALUE_HOLDS_OBJECT__value_
jmp 0x1400aa15d
mov rdi, qword [rbx + 8]
test rsi, rsi
je 0x1400aa1d8
mov edx, 0x50
mov rcx, rsi
call fcn.1400b1750
test eax, eax
jne 0x1400aa190
lea rax, str.G_IS_OBJECT__v_object_
mov qword [rsp + 0x20], rax
lea r9, str.g_value_set_object
lea r8, [0x140387700]
mov edx, 8
lea rcx, [0x14038771a]
call fcn.1400d2190
nop
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
ret
mov rax, qword [rsi]
mov rdx, rbp
mov rcx, qword [rax]
call fcn.1400b95c0
test eax, eax
je 0x1400aa1c8
mov qword [rbx + 8], rsi
mov rcx, rsi
call fcn.1400a9ca0
test rdi, rdi
je 0x1400aa182
mov rcx, rdi
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
jmp fcn.1400a9ff0
lea rax, str.g_value_type_compatible__G_OBJECT_TYPE__v_object___G_VALUE_TYPE__value__
jmp 0x1400aa15d
mov qword [rbx + 8], 0
jmp 0x1400aa1ae