joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400213e0
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
push rsi
push r14
sub rsp, 0x48
mov qword [rsp + 0x40], rbx
mov r14, rcx
mov qword [rsp + 0x38], rbp
mov rbp, rdx
mov qword [rsp + 0x30], rdi
xor edi, edi
mov qword [rsp + 0x28], r12
mov r12d, r8d
mov qword [rsp + 0x20], r15
mov dword [rsp + 0x70], edi
test rdx, rdx
je 0x14002141b
mov r15d, dword [rdx + 0x28]
jmp 0x14002141e
mov r15d, edi
mov ecx, dword [0x140361290]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rax, rax
jne 0x140021460
lea ecx, [rax + 0x18]
call fcn.14000c600
mov rbx, rax
test rax, rax
je 0x14002144e
mov qword [rax], rdi
mov qword [rax + 8], rdi
mov dword [rax + 0x10], edi
jmp 0x140021451
mov rbx, rdi
mov ecx, dword [0x140361290]
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
cmp qword [rbx + 8], rdi
jne 0x1400214be
mov rax, qword [rbx]
test rax, rax
je 0x140021477
mov qword [rbx + 8], rax
mov qword [rbx], rdi
jmp 0x1400214b7
lea rcx, [0x140361298]
call fcn.140029190
mov qword [rbx + 8], rax
test rax, rax
jne 0x1400214b7
xor edx, edx
mov ecx, 0x2000
call fcn.140042ef0
mov qword [rbx + 8], rax
mov edx, 0x1f
lea rcx, [rax + 0x100]
mov qword [rax], rcx
mov rax, rcx
sub rdx, 1
jne 0x1400214a1
mov qword [rcx], rdi
mov dword [rbx + 0x10], 0x20
mov rsi, qword [rbx + 8]
mov rax, qword [rsi]
dec dword [rbx + 0x10]
mov qword [rbx + 8], rax
test rsi, rsi
je 0x14002151e
lea rcx, [0x1403613a8]
call fcn.14001ea40
test rax, rax
je 0x1400214f7
mov qword [rax + 8], rdi
mov qword [rax + 0x38], rdi
mov qword [rax + 0x40], rdi
mov dword [rax + 0x48], edi
lock inc dword [rax + 0x48]
jmp 0x1400214fa
mov rax, rdi
mov rbx, rdi
mov qword [rsp + 0x68], rax
mov r8d, r15d
mov qword [rsp + 0x60], rbx
lea rdx, [rsp + 0x68]
mov rcx, rsi
call fcn.140019290
mov edi, 2
jmp 0x140021526
mov rbx, qword [rsp + 0x60]
mov rax, rdi
mov r15, qword [rsp + 0x20]
or esi, 0xffffffff
mov qword [r14 + 8], rbp
mov rbp, qword [rsp + 0x38]
mov dword [r14 + 0x10], r12d
mov r12, qword [rsp + 0x28]
mov qword [r14], rax
test dil, 2
je 0x14002156e
and edi, 0xfffffffd
test rbx, rbx
je 0x14002156e
mov eax, esi
lock xadd dword [rbx + 0x48], eax
cmp eax, 1
jne 0x14002156e
mov rdx, qword [rsp + 0x60]
lea rcx, [0x1403613a8]
call fcn.140024640
mov rbx, qword [rsp + 0x40]
test dil, 1
mov rdi, qword [rsp + 0x30]
je 0x1400215a3
mov rax, qword [rsp + 0x78]
test rax, rax
je 0x1400215a3
lock xadd dword [rax + 0x48], esi
cmp esi, 1
jne 0x1400215a3
mov rdx, qword [rsp + 0x78]
lea rcx, [0x1403613a8]
call fcn.140024640
mov rax, r14
add rsp, 0x48
pop r14
pop rsi
ret
Function at 0x1400215b0
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
push rbx
push rsi
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
mov rsi, rcx
mov qword [rsp + 0x38], rdi
mov rbp, rdx
xor edi, edi
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r15
mov r15d, r8d
mov dword [rsp + 0x70], edi
test rdx, rdx
je 0x1400215e5
mov r14d, dword [rdx + 0x28]
jmp 0x1400215e8
mov r14d, edi
mov ecx, dword [0x140361290]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rax, rax
jne 0x14002162a
lea ecx, [rax + 0x18]
call fcn.14000c600
mov rbx, rax
test rax, rax
je 0x140021618
mov qword [rax], rdi
mov qword [rax + 8], rdi
mov dword [rax + 0x10], edi
jmp 0x14002161b
mov rbx, rdi
mov ecx, dword [0x140361290]
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
cmp qword [rbx + 8], rdi
jne 0x14002168d
mov rax, qword [rbx]
test rax, rax
je 0x140021641
mov qword [rbx + 8], rax
mov qword [rbx], rdi
jmp 0x140021686
lea rcx, [0x140361298]
call fcn.140029190
mov qword [rbx + 8], rax
test rax, rax
jne 0x140021686
xor edx, edx
mov ecx, 0x2000
call fcn.140042ef0
mov qword [rbx + 8], rax
mov edx, 0x1f
nop dword [rax + rax]
lea rcx, [rax + 0x100]
mov qword [rax], rcx
mov rax, rcx
sub rdx, 1
jne 0x140021670
mov qword [rcx], rdi
mov dword [rbx + 0x10], 0x20
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
dec dword [rbx + 0x10]
mov qword [rbx + 8], rax
test rcx, rcx
je 0x1400216be
mov r8d, r14d
mov qword [rsp + 0x68], rdi
lea rdx, [rsp + 0x68]
mov qword [rsp + 0x60], rdi
call fcn.140019310
mov edi, 1
jmp 0x1400216c1
mov rax, rdi
mov r14, qword [rsp + 0x30]
or ebx, 0xffffffff
mov qword [rsi + 8], rbp
mov rbp, qword [rsp + 0x40]
mov dword [rsi + 0x10], r15d
mov r15, qword [rsp + 0x28]
mov qword [rsi], rax
test dil, 2
je 0x14002170e
mov rax, qword [rsp + 0x78]
and edi, 0xfffffffd
test rax, rax
je 0x14002170e
mov ecx, ebx
lock xadd dword [rax + 0x48], ecx
cmp ecx, 1
jne 0x14002170e
mov rdx, qword [rsp + 0x78]
lea rcx, [0x1403613a8]
call fcn.140024640
test dil, 1
mov rdi, qword [rsp + 0x38]
je 0x14002173e
mov rax, qword [rsp + 0x60]
test rax, rax
je 0x14002173e
lock xadd dword [rax + 0x48], ebx
cmp ebx, 1
jne 0x14002173e
mov rdx, qword [rsp + 0x60]
lea rcx, [0x1403613a8]
call fcn.140024640
mov rax, rsi
add rsp, 0x48
pop rsi
pop rbx
ret
Function at 0x140021750
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
push rsi
push r14
sub rsp, 0x48
mov qword [rsp + 0x40], rbx
mov r14, rcx
mov qword [rsp + 0x38], rbp
mov rbp, rdx
mov qword [rsp + 0x30], rdi
xor edi, edi
mov qword [rsp + 0x28], r12
mov r12d, r8d
mov qword [rsp + 0x20], r15
mov dword [rsp + 0x70], edi
test rdx, rdx
je 0x14002178b
mov r15d, dword [rdx + 0x28]
jmp 0x14002178e
mov r15d, edi
mov ecx, dword [0x140361290]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rax, rax
jne 0x1400217d0
lea ecx, [rax + 0x18]
call fcn.14000c600
mov rbx, rax
test rax, rax
je 0x1400217be
mov qword [rax], rdi
mov qword [rax + 8], rdi
mov dword [rax + 0x10], edi
jmp 0x1400217c1
mov rbx, rdi
mov ecx, dword [0x140361290]
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
cmp qword [rbx + 8], rdi
jne 0x14002182e
mov rax, qword [rbx]
test rax, rax
je 0x1400217e7
mov qword [rbx + 8], rax
mov qword [rbx], rdi
jmp 0x140021827
lea rcx, [0x140361298]
call fcn.140029190
mov qword [rbx + 8], rax
test rax, rax
jne 0x140021827
xor edx, edx
mov ecx, 0x2000
call fcn.140042ef0
mov qword [rbx + 8], rax
mov edx, 0x1f
lea rcx, [rax + 0x100]
mov qword [rax], rcx
mov rax, rcx
sub rdx, 1
jne 0x140021811
mov qword [rcx], rdi
mov dword [rbx + 0x10], 0x20
mov rsi, qword [rbx + 8]
mov rax, qword [rsi]
dec dword [rbx + 0x10]
mov qword [rbx + 8], rax
test rsi, rsi
je 0x14002188e
lea rcx, [0x1403613a8]
call fcn.14001ea40
test rax, rax
je 0x140021867
mov qword [rax + 8], rdi
mov qword [rax + 0x38], rdi
mov qword [rax + 0x40], rdi
mov dword [rax + 0x48], edi
lock inc dword [rax + 0x48]
jmp 0x14002186a
mov rax, rdi
mov rbx, rdi
mov qword [rsp + 0x68], rax
mov r8d, r15d
mov qword [rsp + 0x60], rbx
lea rdx, [rsp + 0x68]
mov rcx, rsi
call fcn.140019380
mov edi, 2
jmp 0x140021896
mov rbx, qword [rsp + 0x60]
mov rax, rdi
mov r15, qword [rsp + 0x20]
or esi, 0xffffffff
mov qword [r14 + 8], rbp
mov rbp, qword [rsp + 0x38]
mov dword [r14 + 0x10], r12d
mov r12, qword [rsp + 0x28]
mov qword [r14], rax
test dil, 2
je 0x1400218de
and edi, 0xfffffffd
test rbx, rbx
je 0x1400218de
mov eax, esi
lock xadd dword [rbx + 0x48], eax
cmp eax, 1
jne 0x1400218de
mov rdx, qword [rsp + 0x60]
lea rcx, [0x1403613a8]
call fcn.140024640
mov rbx, qword [rsp + 0x40]
test dil, 1
mov rdi, qword [rsp + 0x30]
je 0x140021913
mov rax, qword [rsp + 0x78]
test rax, rax
je 0x140021913
lock xadd dword [rax + 0x48], esi
cmp esi, 1
jne 0x140021913
mov rdx, qword [rsp + 0x78]
lea rcx, [0x1403613a8]
call fcn.140024640
mov rax, r14
add rsp, 0x48
pop r14
pop rsi
ret
Function at 0x140021920
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r14
push r15
sub rsp, 0x20
mov rsi, rcx
mov r15d, r9d
mov ecx, dword [0x140361290]
mov rbp, r8
mov r14, rdx
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
xor edi, edi
mov rbx, rax
test rax, rax
jne 0x140021980
lea ecx, [rax + 0x18]
call fcn.14000c600
mov rbx, rax
test rax, rax
je 0x14002196e
mov qword [rax], rdi
mov qword [rax + 8], rdi
mov dword [rax + 0x10], edi
jmp 0x140021971
mov rbx, rdi
mov ecx, dword [0x140361290]
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
cmp qword [rbx + 8], rdi
jne 0x1400219de
mov rax, qword [rbx]
test rax, rax
je 0x140021997
mov qword [rbx + 8], rax
mov qword [rbx], rdi
jmp 0x1400219d7
lea rcx, [0x140361298]
call fcn.140029190
mov qword [rbx + 8], rax
test rax, rax
jne 0x1400219d7
xor edx, edx
mov ecx, 0x2000
call fcn.140042ef0
mov qword [rbx + 8], rax
mov edx, 0x1f
lea rcx, [rax + 0x100]
mov qword [rax], rcx
mov rax, rcx
sub rdx, 1
jne 0x1400219c1
mov qword [rcx], rdi
mov dword [rbx + 0x10], 0x20
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
dec dword [rbx + 0x10]
mov qword [rbx + 8], rax
test rcx, rcx
je 0x140021a1a
test rbp, rbp
je 0x1400219f9
mov edi, dword [rbp + 0x28]
mov rax, qword [r14]
mov qword [rsp + 0x50], rax
test rax, rax
je 0x140021a0a
lock inc dword [rax + 0x48]
mov r8d, edi
lea rdx, [rsp + 0x50]
call fcn.1400193f0
mov rdi, rax
mov rdx, qword [r14]
mov qword [rsi], rdi
mov qword [rsi + 8], rbp
mov dword [rsi + 0x10], r15d
test rdx, rdx
je 0x140021a46
or eax, 0xffffffff
lock xadd dword [rdx + 0x48], eax
cmp eax, 1
jne 0x140021a46
lea rcx, [0x1403613a8]
call fcn.140024640
mov rax, rsi
mov rbx, qword [rsp + 0x58]
add rsp, 0x20
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
Function at 0x140021a60
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
push rsi
push r14
sub rsp, 0x48
mov qword [rsp + 0x40], rbx
mov r14, rcx
mov qword [rsp + 0x38], rbp
mov rbp, rdx
mov qword [rsp + 0x30], rdi
xor edi, edi
mov qword [rsp + 0x28], r12
mov r12d, r8d
mov qword [rsp + 0x20], r15
mov dword [rsp + 0x70], edi
test rdx, rdx
je 0x140021a9b
mov r15d, dword [rdx + 0x28]
jmp 0x140021a9e
mov r15d, edi
mov ecx, dword [0x140361290]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rax, rax
jne 0x140021ae0
lea ecx, [rax + 0x18]
call fcn.14000c600
mov rbx, rax
test rax, rax
je 0x140021ace
mov qword [rax], rdi
mov qword [rax + 8], rdi
mov dword [rax + 0x10], edi
jmp 0x140021ad1
mov rbx, rdi
mov ecx, dword [0x140361290]
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
cmp qword [rbx + 8], rdi
jne 0x140021b3e
mov rax, qword [rbx]
test rax, rax
je 0x140021af7
mov qword [rbx + 8], rax
mov qword [rbx], rdi
jmp 0x140021b37
lea rcx, [0x140361298]
call fcn.140029190
mov qword [rbx + 8], rax
test rax, rax
jne 0x140021b37
xor edx, edx
mov ecx, 0x2000
call fcn.140042ef0
mov qword [rbx + 8], rax
mov edx, 0x1f
lea rcx, [rax + 0x100]
mov qword [rax], rcx
mov rax, rcx
sub rdx, 1
jne 0x140021b21
mov qword [rcx], rdi
mov dword [rbx + 0x10], 0x20
mov rsi, qword [rbx + 8]
mov rax, qword [rsi]
dec dword [rbx + 0x10]
mov qword [rbx + 8], rax
test rsi, rsi
je 0x140021b9e
lea rcx, [0x1403613a8]
call fcn.14001ea40
test rax, rax
je 0x140021b77
mov qword [rax + 8], rdi
mov qword [rax + 0x38], rdi
mov qword [rax + 0x40], rdi
mov dword [rax + 0x48], edi
lock inc dword [rax + 0x48]
jmp 0x140021b7a
mov rax, rdi
mov rbx, rdi
mov qword [rsp + 0x68], rax
mov r8d, r15d
mov qword [rsp + 0x60], rbx
lea rdx, [rsp + 0x68]
mov rcx, rsi
call fcn.1400193f0
mov edi, 2
jmp 0x140021ba6
mov rbx, qword [rsp + 0x60]
mov rax, rdi
mov r15, qword [rsp + 0x20]
or esi, 0xffffffff
mov qword [r14 + 8], rbp
mov rbp, qword [rsp + 0x38]
mov dword [r14 + 0x10], r12d
mov r12, qword [rsp + 0x28]
mov qword [r14], rax
test dil, 2
je 0x140021bee
and edi, 0xfffffffd
test rbx, rbx
je 0x140021bee
mov eax, esi
lock xadd dword [rbx + 0x48], eax
cmp eax, 1
jne 0x140021bee
mov rdx, qword [rsp + 0x60]
lea rcx, [0x1403613a8]
call fcn.140024640
mov rbx, qword [rsp + 0x40]
test dil, 1
mov rdi, qword [rsp + 0x30]
je 0x140021c23
mov rax, qword [rsp + 0x78]
test rax, rax
je 0x140021c23
lock xadd dword [rax + 0x48], esi
cmp esi, 1
jne 0x140021c23
mov rdx, qword [rsp + 0x78]
lea rcx, [0x1403613a8]
call fcn.140024640
mov rax, r14
add rsp, 0x48
pop r14
pop rsi
ret
Function at 0x140021c30
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
push rbx
push rsi
sub rsp, 0x48
mov qword [rsp + 0x40], rbp
mov rsi, rcx
mov qword [rsp + 0x38], rdi
mov rbp, rdx
xor edi, edi
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r15
mov r15d, r8d
mov dword [rsp + 0x70], edi
test rdx, rdx
je 0x140021c65
mov r14d, dword [rdx + 0x28]
jmp 0x140021c68
mov r14d, edi
mov ecx, dword [0x140361290]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rax, rax
jne 0x140021caa
lea ecx, [rax + 0x18]
call fcn.14000c600
mov rbx, rax
test rax, rax
je 0x140021c98
mov qword [rax], rdi
mov qword [rax + 8], rdi
mov dword [rax + 0x10], edi
jmp 0x140021c9b
mov rbx, rdi
mov ecx, dword [0x140361290]
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
cmp qword [rbx + 8], rdi
jne 0x140021d0d
mov rax, qword [rbx]
test rax, rax
je 0x140021cc1
mov qword [rbx + 8], rax
mov qword [rbx], rdi
jmp 0x140021d06
lea rcx, [0x140361298]
call fcn.140029190
mov qword [rbx + 8], rax
test rax, rax
jne 0x140021d06
xor edx, edx
mov ecx, 0x2000
call fcn.140042ef0
mov qword [rbx + 8], rax
mov edx, 0x1f
nop dword [rax + rax]
lea rcx, [rax + 0x100]
mov qword [rax], rcx
mov rax, rcx
sub rdx, 1
jne 0x140021cf0
mov qword [rcx], rdi
mov dword [rbx + 0x10], 0x20
mov rcx, qword [rbx + 8]
mov rax, qword [rcx]
dec dword [rbx + 0x10]
mov qword [rbx + 8], rax
test rcx, rcx
je 0x140021d3e
mov r8d, r14d
mov qword [rsp + 0x68], rdi
lea rdx, [rsp + 0x68]
mov qword [rsp + 0x60], rdi
call fcn.140019460
mov edi, 1
jmp 0x140021d41
mov rax, rdi
mov r14, qword [rsp + 0x30]
or ebx, 0xffffffff
mov qword [rsi + 8], rbp
mov rbp, qword [rsp + 0x40]
mov dword [rsi + 0x10], r15d
mov r15, qword [rsp + 0x28]
mov qword [rsi], rax
test dil, 2
je 0x140021d8e
mov rax, qword [rsp + 0x78]
and edi, 0xfffffffd
test rax, rax
je 0x140021d8e
mov ecx, ebx
lock xadd dword [rax + 0x48], ecx
cmp ecx, 1
jne 0x140021d8e
mov rdx, qword [rsp + 0x78]
lea rcx, [0x1403613a8]
call fcn.140024640
test dil, 1
mov rdi, qword [rsp + 0x38]
je 0x140021dbe
mov rax, qword [rsp + 0x60]
test rax, rax
je 0x140021dbe
lock xadd dword [rax + 0x48], ebx
cmp ebx, 1
jne 0x140021dbe
mov rdx, qword [rsp + 0x60]
lea rcx, [0x1403613a8]
call fcn.140024640
mov rax, rsi
add rsp, 0x48
pop rsi
pop rbx
ret
Function at 0x140024640
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push r15
sub rsp, 0x20
mov rax, qword [rdx + 0x38]
lea rsi, [rdx + 0x18]
mov edi, dword [rsi + 0x28]
neg rax
mov r15, rdx
mov r14, rcx
sbb rbx, rbx
neg rbx
dec rbx
and rbx, rsi
or rbx, qword [rsi + 0x20]
test edi, edi
je 0x140024693
mov rcx, rbx
call fcn.14001a920
add rbx, 8
sub edi, 1
jne 0x140024682
mov rcx, qword [rsi + 0x20]
test rcx, rcx
je 0x1400246a1
call fcn.14003e1e0
mov ecx, dword [r14]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
xor edi, edi
mov rbx, rax
test rax, rax
jne 0x1400246df
lea ecx, [rax + 0x18]
call fcn.14000c600
mov rbx, rax
test rax, rax
je 0x1400246d0
mov qword [rax], rdi
mov qword [rax + 8], rdi
mov dword [rax + 0x10], edi
jmp 0x1400246d3
mov rbx, rdi
mov ecx, dword [r14]
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
cmp dword [rbx + 0x10], 0x20
jl 0x140024704
mov rdx, qword [rbx]
test rdx, rdx
je 0x1400246f6
lea rcx, [r14 + 8]
call fcn.14002b340
mov rax, qword [rbx + 8]
mov qword [rbx], rax
mov qword [rbx + 8], rdi
mov dword [rbx + 0x10], edi
mov rax, qword [rbx + 8]
mov rsi, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x40]
mov r14, qword [rsp + 0x48]
mov qword [r15], rax
inc dword [rbx + 0x10]
mov qword [rbx + 8], r15
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop r15
ret

Function at 0x140024870
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
mov edx, ecx
lea rcx, [0x140361500]
jmp fcn.14002b3a0
Function at 0x140026bc0
Capabilities:
Print debug messages

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rcx
mov qword [r11 + 0x10], rdx
mov qword [r11 + 0x18], r8
mov qword [r11 + 0x20], r9
push rbx
push rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x440
mov rax, qword [0x14035d4f0]
xor rax, rsp
mov qword [rsp + 0x430], rax
xor r12d, r12d
lea r14, [rsp + 0x30]
mov esi, r12d
lea rbp, [r11 + 0x10]
mov rbx, rcx
mov edi, 0x400
call fcn.140016280
mov qword [rsp + 0x28], rbp
lea rdx, [rsp + 0x30]
mov r9, rbx
mov qword [rsp + 0x20], r12
mov r8d, 0x1ff
mov r15, rax
mov rcx, qword [rax]
or rcx, 1
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___stdio_common_vswprintf]
or ebx, 0xffffffff
test eax, eax
cmovs eax, ebx
cmp eax, 0x200
jae 0x140026c50
cmp eax, ebx
jne 0x140026cac
nop dword [rax]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
movsxd rcx, edi
add rcx, rcx
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rcx, qword [r15]
lea rdx, [rsp + 0x488]
mov r9, qword [rsp + 0x480]
mov r14, rax
mov qword [rsp + 0x28], rdx
mov rsi, rax
lea eax, [rdi - 1]
mov qword [rsp + 0x20], r12
movsxd r8, eax
or rcx, 1
mov rdx, r14
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___stdio_common_vswprintf]
test eax, eax
cmovs eax, ebx
cmp eax, edi
cmovge eax, ebx
add edi, edi
cmp eax, 0xffffffff
je 0x140026c50
movsxd rdx, eax
mov rcx, r14
mov word [r14 + rdx*2], r12w
call sub.KERNEL32.dll_OutputDebugStringW
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [rsp + 0x430]
xor rcx, rsp
call fcn.140236770
add rsp, 0x440
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
Function at 0x140026cf0
Capabilities:
Print debug messages

Disassembly:
push rbx
sub rsp, 0x20
mov r9, rcx
xor eax, eax
mov ecx, dword [rcx + 0x4018]
test ecx, ecx
je 0x14001eb36
mov rbx, qword [r9 + rax*8 + 0x18]
cmp qword [rbx], 0
je 0x14001eb60
inc eax
cmp eax, ecx
jb 0x14001eb25
mov r8d, ecx
lea rcx, str.AllocateFromPool_run_out_of_memory_allocating__u_bytes_for__u_allocations_n
call fcn.140026bc0
lea rcx, str.Please_increase_MaxNumAllocations_for_that_pool__exiting..._n
call sub.KERNEL32.dll_OutputDebugStringW
mov cl, 1
call fcn.140094b10
xor eax, eax
add rsp, 0x20
pop rbx
ret
cmp dword [r9 + 4], eax
mov r8d, edx
mov edx, 0xfe
cmovae eax, dword [r9 + 4]
inc dword [r9]
mov ecx, dword [r9]
inc dword [r9 + 0xc]
cmp dword [r9 + 8], ecx
mov dword [r9 + 4], eax
cmovae ecx, dword [r9 + 8]
mov dword [r9 + 8], ecx
mov rcx, qword [rbx + 8]
mov qword [rbx], r8
call sub.VCRUNTIME140.dll_memset
mov rax, qword [rbx + 8]
add rsp, 0x20
pop rbx
ret
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov rdi, rdx
mov rsi, rcx
cmp r8d, 0x10
jbe 0x140026d12
lea rcx, str.Alignment___16_is_not_supported_n
call sub.KERNEL32.dll_OutputDebugStringW
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [rsi + 0x30], eax
je 0x140026d2f
call fcn.14009a4f0
xor eax, eax
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
xor eax, eax
lea rdx, [rsi + 0x60]
nop word [rax + rax]
mov r8, qword [rdx]
mov ecx, dword [r8 + 0x10]
sub ecx, 0x10
cmp edi, ecx
jbe 0x140026df3
inc eax
add rdx, 8
cmp eax, 0xe
jb 0x140026d40
mov ecx, dword [rsi + 0x40]
lea edx, [rdi + 0x10]
add ecx, 0xf
mov r8d, 0x200000
and ecx, 0xfffffff0
add edx, ecx
mov dword [rsi + 0x40], ecx
cmp edx, r8d
ja 0x140026dc2
mov dword [rsi + 0x40], edx
mov edx, edi
mov qword [rsp + 0x30], rbx
mov rbx, qword [rsi + 0x38]
add rbx, rcx
mov eax, edi
mov qword [rbx], rax
mov rax, qword [rsi + 0x38]
add rax, 0x10
add rcx, rax
mov qword [rbx + 8], rcx
lea rcx, str.Malloc_Size_u_LargeMemoryPoolOffset_u__n
mov r8d, dword [rsi + 0x40]
call fcn.140026bc0
mov rax, qword [rbx + 8]
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
sub r8d, ecx
mov edx, edi
lea rcx, str.MallocCrash_run_out_of_memory_allocating__u_bytes__free__u_bytes_n
call fcn.140026bc0
lea rcx, str.Please_increase_LARGE_MEMORYPOOL_SIZE__exiting..._n
call sub.KERNEL32.dll_OutputDebugStringW
mov cl, 1
call fcn.140094b10
xor eax, eax
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
mov edx, edi
mov rcx, r8
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp 0x14001eb10
Function at 0x1400291f0
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
push rbx
push r12
push r13
sub rsp, 0x40
mov qword [rsp + 0x78], rdi
mov rdi, rcx
mov ecx, dword [rcx]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
xor r12d, r12d
mov rbx, rax
test rax, rax
jne 0x14002923c
lea ecx, [rax + 0xc]
call fcn.14000c600
mov rbx, rax
test rax, rax
je 0x14002922e
mov qword [rax], r12
mov dword [rax + 8], r12d
jmp 0x140029231
mov rbx, r12
mov ecx, dword [rdi]
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
lea r13, [0x140361610]
cmp dword [rbx + 4], r12d
jne 0x1400293e7
mov eax, dword [rbx]
test eax, eax
je 0x14002925e
mov dword [rbx + 4], eax
mov dword [rbx], r12d
jmp 0x1400293e0
lea rcx, [rdi + 8]
call fcn.140029070
mov dword [rbx + 4], eax
test eax, eax
jne 0x1400293e0
mov qword [rsp + 0x70], rsi
mov edi, 0x40
mov qword [rsp + 0x30], r15
lock xadd dword [0x140361690], edi
lea r15d, [rdi + 0x40]
cmp r15d, 0x4000000
jbe 0x1400292da
mov r9d, 0x4000000
lea r8, [0x140260090]
lea edx, [rax + 0x30]
lea rcx, [0x140260180]
call fcn.1400712f0
lea r9, str.Consumed__d_lock_free_links__there_are_no_more.
mov dword [rsp + 0x20], 0x4000000
mov r8d, 0x30
lea rdx, str.D:EpicOrionRelease_NowEngineSourceRuntimeCorePrivateContainersLockFreeList.cpp
lea rcx, [0x14025dbfe]
call fcn.140069960
mov esi, edi
cmp edi, r15d
jae 0x14002938c
mov qword [rsp + 0x68], rbp
mov qword [rsp + 0x38], r14
nop
mov eax, esi
mov ebp, esi
shr eax, 0xe
and ebp, 0x3fff
lea r14, [rax*8]
add r14, r13
cmp qword [r14 + 0x108], r12
jne 0x14002934f
mov eax, 0x60000
lock xadd dword [0x14036aa60], eax
xor edx, edx
mov ecx, 0x60000
call fcn.140042ef0
mov rdx, rax
xor eax, eax
lock cmpxchg qword [r14 + 0x108], rdx
je 0x14002934f
mov ecx, 0xfffa0000
lock xadd dword [0x14036aa60], ecx
mov rcx, rdx
call fcn.14003e1e0
mov rax, qword [r14 + 0x108]
lea rcx, [rbp*2]
add rcx, rbp
lea rdx, [rax + rcx*8]
test rdx, rdx
je 0x140029377
xor eax, eax
mov qword [rdx], rax
mov qword [rdx + 8], rax
mov qword [rdx + 0x10], rax
inc esi
cmp esi, r15d
jb 0x1400292f0
mov r14, qword [rsp + 0x38]
mov rbp, qword [rsp + 0x68]
mov r15, qword [rsp + 0x30]
mov edx, 0x40
mov rsi, qword [rsp + 0x70]
nop dword [rax + rax]
test edi, edi
jne 0x1400293a9
mov rcx, r12
jmp 0x1400293c7
mov ecx, edi
mov eax, edi
shr rax, 0xe
and ecx, 0x3fff
mov rax, qword [r13 + rax*8 + 0x108]
lea rcx, [rcx + rcx*2]
lea rcx, [rax + rcx*8]
mov qword [rcx], r12
mov dword [rcx + 0x10], r12d
mov eax, dword [rbx + 4]
mov qword [rcx + 8], rax
mov dword [rbx + 4], edi
inc edi
sub rdx, 1
jne 0x1400293a0
mov dword [rbx + 8], 0x40
mov r8d, dword [rbx + 4]
mov rdi, qword [rsp + 0x78]
test r8d, r8d
jne 0x1400293fa
mov rax, r12
jmp 0x14002941a
mov rdx, r8
mov rcx, r8
shr rcx, 0xe
and edx, 0x3fff
mov rcx, qword [r13 + rcx*8 + 0x108]
lea rdx, [rdx + rdx*2]
lea rax, [rcx + rdx*8]
mov ecx, dword [rax + 8]
dec dword [rbx + 8]
mov dword [rbx + 4], ecx
mov qword [rax + 8], r12
mov eax, r8d
add rsp, 0x40
pop r13
pop r12
pop rbx
ret