joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1010aec0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov ebx, dword [ebp + 8]
mov eax, dword [ebx + 0x14]
mov edi, dword [eax]
push dword [0x101d4d30]
call dword [sym.imp.kernel32.dll_TlsGetValue]
mov esi, eax
test eax, eax
je 0x1010af6f
lea eax, [edi + 0x1c]
push eax
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov dword [edi + 8], esi
mov eax, dword [ebx + 0x14]
mov edi, dword [eax + 0xc]
mov ebx, dword [edi + 8]
push dword [0x101d4d30]
call dword [sym.imp.kernel32.dll_TlsGetValue]
mov esi, eax
test eax, eax
je 0x1010af85
lea eax, [ebx + 0x1c]
push eax
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov dword [ebx + 8], esi
push dword [ebp + 0xc]
push dword [edi + 0xc]
call sym.nss3.dll_PL_HashTableLookup
add esp, 8
mov esi, eax
push dword [edi + 8]
call sym.nss3.dll_PR_Unlock
add esp, 4
test esi, esi
je 0x1010af56
mov edi, dword [ebp + 0x10]
inc dword [esi + 4]
call sym.nss3.dll_PR_Now
mov dword [esi + 0xc], edx
mov dword [esi + 8], eax
mov edx, edi
mov ecx, dword [esi]
call fcn.1010afa0
mov esi, eax
jmp 0x1010af58
xor esi, esi
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x14]
push dword [eax]
call sym.nss3.dll_PR_Unlock
add esp, 4
mov eax, esi
pop esi
pop edi
pop ebx
pop ebp
ret
xor eax, eax
push eax
push eax
push 1
push eax
call fcn.100e2c70
add esp, 0x10
mov esi, eax
jmp 0x1010aee4
xor eax, eax
push eax
push eax
push 1
push eax
call fcn.100e2c70
add esp, 0x10
mov esi, eax
jmp 0x1010af0c

Function at 0x1010b030
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov ebx, dword [ebp + 8]
mov eax, dword [ebx + 0x14]
mov edi, dword [eax]
push dword [0x101d4d30]
call dword [sym.imp.kernel32.dll_TlsGetValue]
mov esi, eax
test eax, eax
je 0x1010b0df
lea eax, [edi + 0x1c]
push eax
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov dword [edi + 8], esi
mov eax, dword [ebx + 0x14]
mov edi, dword [eax + 0x10]
mov ebx, dword [edi + 8]
push dword [0x101d4d30]
call dword [sym.imp.kernel32.dll_TlsGetValue]
mov esi, eax
test eax, eax
je 0x1010b0f5
lea eax, [ebx + 0x1c]
push eax
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov dword [ebx + 8], esi
push dword [ebp + 0xc]
push dword [edi + 0xc]
call sym.nss3.dll_PL_HashTableLookup
add esp, 8
mov esi, eax
push dword [edi + 8]
call sym.nss3.dll_PR_Unlock
add esp, 4
test esi, esi
je 0x1010b0c6
mov edi, dword [ebp + 0x10]
inc dword [esi + 4]
call sym.nss3.dll_PR_Now
mov dword [esi + 0xc], edx
mov dword [esi + 8], eax
mov edx, edi
mov ecx, dword [esi]
call fcn.1010afa0
mov esi, eax
jmp 0x1010b0c8
xor esi, esi
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x14]
push dword [eax]
call sym.nss3.dll_PR_Unlock
add esp, 4
mov eax, esi
pop esi
pop edi
pop ebx
pop ebp
ret
xor eax, eax
push eax
push eax
push 1
push eax
call fcn.100e2c70
add esp, 0x10
mov esi, eax
jmp 0x1010b054
xor eax, eax
push eax
push eax
push 1
push eax
call fcn.100e2c70
add esp, 0x10
mov esi, eax
jmp 0x1010b07c
Function at 0x1010b110
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov ebx, dword [ebp + 8]
mov eax, dword [ebx + 0x14]
mov edi, dword [eax]
push dword [0x101d4d30]
call dword [sym.imp.kernel32.dll_TlsGetValue]
mov esi, eax
test eax, eax
je 0x1010b27c
lea eax, [edi + 0x1c]
push eax
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov dword [edi + 8], esi
mov eax, dword [ebx + 0x14]
mov edi, dword [eax + 0x14]
mov ebx, dword [edi + 8]
push dword [0x101d4d30]
call dword [sym.imp.kernel32.dll_TlsGetValue]
mov esi, eax
test eax, eax
je 0x1010b292
lea eax, [ebx + 0x1c]
push eax
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov dword [ebx + 8], esi
push dword [ebp + 0xc]
push dword [edi + 0xc]
call sym.nss3.dll_PL_HashTableLookup
add esp, 8
mov ebx, eax
push dword [edi + 8]
call sym.nss3.dll_PR_Unlock
add esp, 4
xor esi, esi
test ebx, ebx
mov edi, 0
je 0x1010b1fe
inc dword [ebx + 4]
call sym.nss3.dll_PR_Now
mov edi, dword [ebp + 0x10]
mov dword [ebx + 0xc], edx
mov dword [ebx + 8], eax
test edi, edi
jne 0x1010b1be
xor eax, eax
push eax
push eax
call fcn.100fffc0
add esp, 8
mov edi, eax
test eax, eax
je 0x1010b268
push dword [ebx]
call fcn.10100560
add esp, 4
test eax, eax
je 0x1010b240
mov ebx, eax
push eax
call fcn.10100750
add esp, 4
test eax, eax
je 0x1010b1ec
mov ecx, eax
mov edx, edi
call fcn.1010afa0
push ebx
call fcn.101007b0
jmp 0x1010b1d4
push ebx
call fcn.101007f0
add esp, 4
push ebx
call fcn.10100710
add esp, 4
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x14]
push dword [eax]
call sym.nss3.dll_PR_Unlock
add esp, 4
cmp dword [ebp + 0x10], 0
jne 0x1010b261
test edi, edi
je 0x1010b261
mov ebx, dword [edi + 0xc]
lea eax, [ebx*4]
push eax
push 0
call fcn.100ff2b0
add esp, 8
mov esi, eax
test eax, eax
je 0x1010b258
push ebx
push esi
push edi
call fcn.101004c0
add esp, 0xc
jmp 0x1010b258
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x14]
push dword [eax]
call sym.nss3.dll_PR_Unlock
add esp, 4
xor esi, esi
cmp dword [ebp + 0x10], 0
jne 0x1010b261
push edi
call fcn.10100060
add esp, 4
mov eax, esi
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x14]
push dword [eax]
call sym.nss3.dll_PR_Unlock
add esp, 4
xor esi, esi
jmp 0x1010b261
xor eax, eax
push eax
push eax
push 1
push eax
call fcn.100e2c70
add esp, 0x10
mov esi, eax
jmp 0x1010b134
xor eax, eax
push eax
push eax
push 1
push eax
call fcn.100e2c70
add esp, 0x10
mov esi, eax
jmp 0x1010b160
Function at 0x1010b2b0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x5c
mov edx, dword [0x101d2014]
mov ecx, dword [ebp + 0xc]
mov eax, dword [ebp + 0x10]
mov ebx, dword [ebp + 8]
xor edx, ebp
mov dword [ebp - 0x10], edx
mov edx, dword [ecx]
mov dword [ebp - 0x30], edx
mov ecx, dword [ecx + 4]
mov dword [ebp - 0x2c], ecx
mov ecx, dword [eax]
mov dword [ebp - 0x20], ecx
mov eax, dword [eax + 4]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebx + 0x14]
mov edi, dword [eax]
push dword [0x101d4d30]
call dword [sym.imp.kernel32.dll_TlsGetValue]
mov esi, eax
test eax, eax
je 0x1010b39c
lea eax, [edi + 0x1c]
push eax
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov dword [edi + 8], esi
mov eax, dword [ebx + 0x14]
mov ebx, dword [eax + 8]
mov edi, dword [ebx + 8]
push dword [0x101d4d30]
call dword [sym.imp.kernel32.dll_TlsGetValue]
mov esi, eax
test eax, eax
je 0x1010b3b2
lea eax, [edi + 0x1c]
push eax
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
lea eax, [ebp - 0x68]
mov dword [edi + 8], esi
push eax
push dword [ebx + 0xc]
call sym.nss3.dll_PL_HashTableLookup
add esp, 8
mov edi, eax
push dword [ebx + 8]
call sym.nss3.dll_PR_Unlock
add esp, 4
xor esi, esi
test edi, edi
je 0x1010b378
inc dword [edi + 4]
call sym.nss3.dll_PR_Now
mov dword [edi + 0xc], edx
mov dword [edi + 8], eax
mov ecx, dword [ebp + 8]
mov eax, dword [edi]
test eax, eax
je 0x1010b37b
lock inc dword [eax + 4]
mov esi, eax
jmp 0x1010b37b
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x14]
push dword [eax]
call sym.nss3.dll_PR_Unlock
add esp, 4
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10192ef0
mov eax, esi
add esp, 0x5c
pop esi
pop edi
pop ebx
pop ebp
ret
xor eax, eax
push eax
push eax
push 1
push eax
call fcn.100e2c70
add esp, 0x10
mov esi, eax
jmp 0x1010b2fe
xor eax, eax
push eax
push eax
push 1
push eax
call fcn.100e2c70
add esp, 0x10
mov esi, eax
jmp 0x1010b32a

Function at 0x1010bec0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 8]
test eax, eax
je 0x1010bee7
cmp dword [eax + 0xc], 0
je 0x1010bee1
mov ecx, dword [eax + 8]
push dword [eax + 4]
push dword [ecx + 0x48]
call fcn.101364f0
add esp, 8
pop ebp
jmp fcn.100ff3c0
xor eax, eax
pop ebp
ret
Function at 0x1010eb60
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 8
mov eax, dword [0x101d2014]
mov ecx, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
xor eax, ebp
test ecx, ecx
mov dword [ebp - 0x10], eax
je 0x1010eb9d
cmp dword [esi + 8], ecx
je 0x1010eb9d
mov edx, esi
push 0x8a
push 0
call fcn.1010df00
add esp, 8
mov edi, eax
test eax, eax
jne 0x1010ec3c
mov ebx, dword [esi + 8]
push dword [esi + 0x14]
push 1
push ebx
call sym.nss3.dll_PK11_Authenticate
add esp, 0xc
mov esi, dword [ebx + 0x3c]
push dword [0x101d4d30]
call dword [sym.imp.kernel32.dll_TlsGetValue]
mov edi, eax
test eax, eax
je 0x1010ec50
lea eax, [esi + 0x1c]
push eax
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov dword [esi + 8], edi
mov edx, dword [ebp + 0xc]
mov eax, dword [ebx]
mov esi, dword [ebx + 0x38]
mov edi, dword [edx + 0xc]
mov ecx, dword [eax + 0x56]
call dword [section..00cfg]
lea eax, [ebp - 0x14]
push eax
push 1
push 0x1019f1fc
push edi
push esi
call ecx
add esp, 0x14
mov edi, eax
push dword [ebx + 0x3c]
call sym.nss3.dll_PR_Unlock
add esp, 4
test edi, edi
je 0x1010ec23
push edi
call fcn.10115520
add esp, 4
push 0
push eax
call sym.nss3.dll_PR_SetError
add esp, 8
xor edi, edi
jmp 0x1010ec3c
mov eax, dword [ebp + 0xc]
push dword [eax + 0x14]
push dword [ebp - 0x14]
push 1
push dword [eax + 4]
push ebx
call fcn.1010d030
add esp, 0x14
mov edi, eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10192ef0
mov eax, edi
add esp, 8
pop esi
pop edi
pop ebx
pop ebp
ret
xor eax, eax
push eax
push eax
push 1
push eax
call fcn.100e2c70
add esp, 0x10
mov edi, eax
jmp 0x1010ebc7
Function at 0x1010f100
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xc
mov edi, dword [ebp + 8]
call sym.nss3.dll_PR_Now
cmp dword [edi + 0x12c], 0
mov esi, eax
je 0x1010f131
xor ebx, ebx
cmp dword [edi + 0x24], 0
mov eax, 0
mov dword [ebp - 0x10], edx
jne 0x1010f152
jmp 0x1010f22e
mov ebx, dword [ebp + 0xc]
test ebx, ebx
je 0x1010f20f
mov dword [ebp - 0x10], edx
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
cmp dword [edi + 0x24], 0
je 0x1010f218
mov dword [ebp - 0x14], esi
mov esi, dword [edi + 0x3c]
mov dword [ebp - 0x18], eax
push dword [0x101d4d30]
call dword [sym.imp.kernel32.dll_TlsGetValue]
mov edi, eax
test eax, eax
je 0x1010f238
lea eax, [esi + 0x1c]
push eax
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov dword [esi + 8], edi
mov edi, dword [ebp + 8]
mov eax, dword [edi]
mov esi, dword [edi + 0x38]
mov ecx, dword [eax + 0x4e]
call dword [section..00cfg]
push esi
call ecx
add esp, 4
mov eax, dword [edi]
mov esi, dword [edi + 0x38]
mov ecx, dword [eax + 0x4a]
call dword [section..00cfg]
push dword [ebp - 0x18]
push ebx
push 1
push esi
call ecx
add esp, 0x10
mov esi, eax
mov dword [edi + 0x134], 0
push dword [edi + 0x3c]
call sym.nss3.dll_PR_Unlock
add esp, 4
cmp esi, 0xa0
je 0x1010f1eb
test esi, esi
jne 0x1010f201
mov eax, edi
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov dword [edi + 0x68], 1
mov dword [edi + 0x70], ecx
mov dword [edi + 0x74], eax
xor ebx, ebx
jmp 0x1010f22e
push 0
push 0xffffe00f
call sym.nss3.dll_PR_SetError
add esp, 8
mov ebx, 0xfffffffe
jmp 0x1010f22e
push esi
call fcn.10115520
add esp, 4
push 0
push eax
jmp 0x1010f223
push 0
push 0xffffe005
jmp 0x1010f223
test eax, eax
je 0x1010f1e7
push 0
push 0xffffe00f
call sym.nss3.dll_PR_SetError
add esp, 8
xor ebx, ebx
dec ebx
mov eax, ebx
add esp, 0xc
pop esi
pop edi
pop ebx
pop ebp
ret
xor eax, eax
push eax
push eax
push 1
push eax
call fcn.100e2c70
add esp, 0x10
mov edi, eax
jmp 0x1010f171

Function at 0x1010f250
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov edi, dword [ebp + 8]
mov ebx, dword [edi + 0x3c]
push dword [0x101d4d30]
call dword [sym.imp.kernel32.dll_TlsGetValue]
mov esi, eax
test eax, eax
je 0x1010f2ca
lea eax, [ebx + 0x1c]
push eax
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov dword [ebx + 8], esi
mov eax, dword [edi]
mov esi, dword [edi + 0x38]
mov ecx, dword [eax + 0x4e]
call dword [section..00cfg]
push esi
call ecx
add esp, 4
mov esi, eax
mov dword [edi + 0x134], 0
push dword [edi + 0x3c]
call sym.nss3.dll_PR_Unlock
add esp, 4
test esi, esi
je 0x1010f2c3
push esi
call fcn.10115520
add esp, 4
push 0
push eax
call sym.nss3.dll_PR_SetError
add esp, 8
xor eax, eax
dec eax
jmp 0x1010f2c5
xor eax, eax
pop esi
pop edi
pop ebx
pop ebp
ret
xor eax, eax
push eax
push eax
push 1
push eax
call fcn.100e2c70
add esp, 0x10
mov esi, eax
jmp 0x1010f26e
Function at 0x1010f2e0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov edi, dword [ebp + 8]
cmp dword [edi + 0x24], 0
je 0x1010f39e
mov ebx, dword [ebp + 0xc]
mov esi, dword [edi + 0x60]
test byte [edi + 0x47], 0x20
jne 0x1010f31a
call sym.nss3.dll_PK11_GetInternalKeySlot
test eax, eax
je 0x1010f31a
mov esi, dword [eax + 0x60]
lock dec dword [eax + 0x48]
jne 0x1010f31a
push eax
call fcn.10135de0
add esp, 4
push ebx
push edi
call sym.nss3.dll_PK11_IsLoggedIn
add esp, 8
test eax, eax
je 0x1010f37b
cmp esi, 0xffffffff
jne 0x1010f39e
mov ebx, dword [edi + 0x3c]
push dword [0x101d4d30]
call dword [sym.imp.kernel32.dll_TlsGetValue]
mov esi, eax
test eax, eax
je 0x1010f3a3
lea eax, [ebx + 0x1c]
push eax
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov dword [ebx + 8], esi
mov eax, dword [edi]
mov esi, dword [edi + 0x38]
mov ecx, dword [eax + 0x4e]
call dword [section..00cfg]
push esi
call ecx
add esp, 4
mov dword [edi + 0x134], 0
push dword [edi + 0x3c]
call sym.nss3.dll_PR_Unlock
add esp, 4
mov ebx, dword [ebp + 0xc]
mov eax, dword [edi + 0x38]
sub esp, 0x18
xor ecx, ecx
mov dword [esp + 0xc], ebx
mov dword [esp + 4], eax
mov dword [esp], edi
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], ecx
call fcn.1010f5c0
add esp, 0x18
pop esi
pop edi
pop ebx
pop ebp
ret
xor eax, eax
push eax
push eax
push 1
push eax
call fcn.100e2c70
add esp, 0x10
mov esi, eax
jmp 0x1010f342
Function at 0x1010f3c0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x14
mov eax, dword [0x101d2014]
mov ebx, dword [ebp + 8]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov edi, dword [ebx + 0x60]
mov esi, dword [ebx + 0x64]
cmp byte [0x101d5810], 0
jne 0x1010f3f9
cmp dword [0x101d4d40], 0
je 0x1010f5b0
mov byte [0x101d5810], 1
test byte [ebx + 0x47], 0x20
jne 0x1010f41d
call sym.nss3.dll_PK11_GetInternalKeySlot
test eax, eax
je 0x1010f41d
mov edi, dword [eax + 0x60]
mov esi, dword [eax + 0x64]
lock dec dword [eax + 0x48]
jne 0x1010f41d
push eax
call fcn.10135de0
add esp, 4
cmp edi, 1
jne 0x1010f497
call sym.nss3.dll_PR_Now
mov ecx, eax
mov edi, edx
mov edx, 0x3938700
mov eax, esi
imul edx
add eax, dword [ebx + 0x70]
adc edx, dword [ebx + 0x74]
cmp eax, ecx
sbb edx, edi
jge 0x1010f491
mov edi, dword [ebx + 0x3c]
push dword [0x101d4d30]
call dword [sym.imp.kernel32.dll_TlsGetValue]
mov esi, eax
test eax, eax
je 0x1010f590
lea eax, [edi + 0x1c]
push eax
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov dword [edi + 8], esi
mov eax, dword [ebx]
mov esi, dword [ebx + 0x38]
mov ecx, dword [eax + 0x4e]
call dword [section..00cfg]
push esi
call ecx
add esp, 4
mov dword [ebx + 0x134], 0
push dword [ebx + 0x3c]
call sym.nss3.dll_PR_Unlock
add esp, 4
jmp 0x1010f497
mov dword [ebx + 0x70], ecx
mov dword [ebx + 0x74], edi
mov edi, dword [ebx + 0x3c]
push dword [0x101d4d30]
call dword [sym.imp.kernel32.dll_TlsGetValue]
mov esi, eax
test eax, eax
je 0x1010f57a
lea eax, [edi + 0x1c]
push eax
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov dword [edi + 8], esi
xor eax, eax
mov edi, 0x3e8
cmp byte [0x101d5810], 0
mov ebx, dword [ebx + 0x134]
cmove edi, eax
cmp dword [0x101d4d40], 0
je 0x1010f5a6
call dword [sym.imp.winmm.dll_timeGetTime]
mov esi, eax
test ebx, ebx
je 0x1010f503
mov eax, esi
sub eax, ebx
cmp eax, edi
jae 0x1010f503
mov ebx, dword [ebp + 8]
mov eax, dword [ebx + 0x138]
mov dword [ebp - 0x1c], eax
jmp 0x1010f547
mov ebx, dword [ebp + 8]
mov eax, dword [ebx]
mov edi, dword [ebx + 0x38]
mov ecx, dword [eax + 0x3e]
call dword [section..00cfg]
lea eax, [ebp - 0x20]
push eax
push edi
call ecx
add esp, 8
test eax, eax
je 0x1010f538
push dword [ebx + 0x3c]
call sym.nss3.dll_PR_Unlock
add esp, 4
mov dword [ebx + 0x38], 0
xor esi, esi
jmp 0x1010f566
mov eax, dword [ebp - 0x1c]
mov dword [ebx + 0x138], eax
mov dword [ebx + 0x134], esi
push dword [ebx + 0x3c]
call sym.nss3.dll_PR_Unlock
add esp, 4
mov eax, dword [ebp - 0x1c]
xor esi, esi
lea ecx, [eax - 1]
cmp ecx, 3
ja 0x1010f566
mov esi, dword [eax*4 + 0x1019f4bc]
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10192ef0
mov eax, esi
add esp, 0x14
pop esi
pop edi
pop ebx
pop ebp
ret
xor eax, eax
push eax
push eax
push 1
push eax
call fcn.100e2c70
add esp, 0x10
mov esi, eax
jmp 0x1010f4b0
xor eax, eax
push eax
push eax
push 1
push eax
call fcn.100e2c70
add esp, 0x10
mov esi, eax
jmp 0x1010f459
call fcn.100da0a0
jmp 0x1010f4e1
call fcn.100da0a0
jmp 0x1010f3f2
Function at 0x1010f960
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x10
mov edi, dword [ebp + 0x10]
mov ebx, dword [ebp + 0xc]
mov eax, 0x101c3b42
test edi, edi
cmove edi, eax
test ebx, ebx
cmove ebx, eax
push edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov esi, eax
push ebx
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov dword [ebp - 0x10], eax
push dword [ebp + 8]
call fcn.101363c0
add esp, 4
test eax, eax
je 0x1010facc
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x1c], eax
mov eax, edi
xor edi, edi
cmp dword [ecx + 0x12c], edi
mov edx, dword [ecx]
cmovne esi, edi
mov ecx, dword [edx + 0x4a]
cmovne eax, edi
cmovne ebx, edi
mov dword [ebp - 0x14], esi
mov esi, dword [ebp - 0x10]
mov dword [ebp - 0x18], eax
cmovne esi, edi
call dword [section..00cfg]
push esi
push ebx
push edi
mov esi, dword [ebp - 0x1c]
push esi
call ecx
add esp, 0x10
mov ecx, dword [ebp + 8]
test eax, eax
mov dword [ecx + 0x134], edi
jne 0x1010fa13
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov ecx, dword [eax + 0x2a]
call dword [section..00cfg]
push dword [ebp - 0x14]
push dword [ebp - 0x18]
push esi
call ecx
add esp, 0xc
test eax, eax
je 0x1010faf2
push eax
call fcn.10115520
add esp, 4
push 0
push eax
call sym.nss3.dll_PR_SetError
add esp, 8
xor edi, edi
mov dword [ebp - 0x10], 0
dec edi
mov ebx, dword [ebp + 8]
mov eax, dword [ebx]
mov ecx, dword [eax + 0x4e]
call dword [section..00cfg]
push esi
call ecx
add esp, 4
mov dword [ebx + 0x134], 0
push esi
push ebx
call fcn.101364f0
add esp, 8
cmp byte [ebp - 0x10], 0
je 0x1010fae8
push 1
push ebx
call fcn.10137be0
add esp, 8
cmp dword [ebx + 0x24], 0
je 0x1010fae8
mov ebx, dword [ebx + 0x3c]
push dword [0x101d4d30]
call dword [sym.imp.kernel32.dll_TlsGetValue]
mov esi, eax
test eax, eax
je 0x1010fafc
lea eax, [ebx + 0x1c]
push eax
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov dword [ebx + 8], esi
mov ebx, dword [ebp + 8]
mov eax, dword [ebx]
mov esi, dword [ebx + 0x38]
mov ecx, dword [eax + 0x4a]
call dword [section..00cfg]
push dword [ebp - 0x14]
push dword [ebp - 0x18]
push 1
push esi
call ecx
add esp, 0x10
mov dword [ebx + 0x134], 0
push dword [ebx + 0x3c]
call sym.nss3.dll_PR_Unlock
add esp, 4
jmp 0x1010fae8
xor esi, esi
push esi
push 0xffffe002
call sym.nss3.dll_PR_SetError
add esp, 8
mov eax, dword [ebp + 8]
xor edi, edi
dec edi
mov dword [eax + 0x134], esi
mov eax, edi
add esp, 0x10
pop esi
pop edi
pop ebx
pop ebp
ret
mov al, 1
mov dword [ebp - 0x10], eax
jmp 0x1010fa31
xor eax, eax
push eax
push eax
push 1
push eax
call fcn.100e2c70
add esp, 0x10
mov esi, eax
jmp 0x1010fa89
Function at 0x1010fc10
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x10
mov eax, dword [0x101d5b48]
test eax, eax
je 0x1010fcfe
mov dword [ebp - 0x10], eax
push eax
call fcn.1013e010
add esp, 4
mov ecx, dword [0x101d5b54]
test ecx, ecx
je 0x1010fcf1
mov eax, dword [ecx + 4]
cmp dword [eax + 0x2c], 0
jle 0x1010fcea
xor edi, edi
mov dword [ebp - 0x14], ecx
mov eax, dword [eax + 0x28]
mov ebx, dword [eax + edi*4]
mov eax, dword [ebx + 0x3c]
mov dword [ebp - 0x1c], eax
push dword [0x101d4d30]
call dword [sym.imp.kernel32.dll_TlsGetValue]
test eax, eax
je 0x1010fcd9
mov esi, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
lea eax, [esi + 0x1c]
push eax
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov eax, dword [ebp - 0x18]
mov dword [esi + 8], eax
mov eax, dword [ebx]
mov esi, dword [ebx + 0x38]
mov ecx, dword [eax + 0x4e]
call dword [section..00cfg]
push esi
call ecx
add esp, 4
mov esi, eax
mov dword [ebx + 0x134], 0
push dword [ebx + 0x3c]
call sym.nss3.dll_PR_Unlock
add esp, 4
test esi, esi
je 0x1010fcc7
push esi
call fcn.10115520
add esp, 4
push 0
push eax
call sym.nss3.dll_PR_SetError
add esp, 8
mov ecx, dword [ebp - 0x14]
inc edi
mov eax, dword [ecx + 4]
cmp edi, dword [eax + 0x2c]
jl 0x1010fc52
jmp 0x1010fcea
xor eax, eax
push eax
push eax
push 1
push eax
call fcn.100e2c70
add esp, 0x10
jmp 0x1010fc6e
mov ecx, dword [ecx]
jmp 0x1010fc38
push dword [ebp - 0x10]
call fcn.1013e0d0
add esp, 0x14
jmp 0x1010fd01
add esp, 0x10
pop esi
pop edi
pop ebx
pop ebp
ret
Function at 0x10113100
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x14
mov eax, dword [0x101d2014]
xor eax, ebp
test edx, edx
mov dword [ebp - 0x10], eax
je 0x10113195
mov edi, dword [ebp + 0xc]
mov ebx, edx
test edi, edi
jne 0x10113131
cmp ecx, 0x1002
je 0x10113195
cmp dword [ebp + 8], 0x81000000
jne 0x10113195
mov dword [ebp - 0x20], ecx
push 0x60
call sym.nss3.dll_PORT_Alloc_Util
add esp, 4
test eax, eax
je 0x1011328e
cmp dword [ebp - 0x20], 0x1002
mov esi, eax
mov dword [eax + 0x30], 0
jne 0x10113165
cmp dword [edi + 0x34], 3
jne 0x10113165
mov dword [esi + 0x30], 1
mov eax, dword [ebp + 8]
test edi, edi
mov dword [esi], eax
je 0x10113172
lock inc dword [edi + 0x2c]
mov dword [esi + 4], edi
lea eax, [esi + 0x14]
lock inc dword [ebx + 0x48]
mov dword [esi + 8], ebx
push eax
push ebx
call fcn.10127d30
add esp, 8
test edi, edi
mov dword [esi + 0xc], eax
je 0x101131a6
mov eax, dword [edi + 0xc]
jmp 0x101131a8
push 0
push 0xffffe005
call sym.nss3.dll_PR_SetError
jmp 0x1011328b
xor eax, eax
mov edi, dword [ebp + 0x10]
mov ecx, dword [ebp - 0x20]
mov dword [esi + 0x18], eax
mov dword [esi + 0x1c], 0
test edi, edi
mov dword [esi + 0x2c], ecx
je 0x101131d3
cmp dword [edi + 8], 0
je 0x101131eb
push edi
call sym.nss3.dll_SECITEM_DupItem_Util
add esp, 4
mov dword [esi + 0x24], eax
jmp 0x101131f2
xor edi, edi
push edi
push 0xffffe005
call sym.nss3.dll_PR_SetError
add esp, 8
mov dword [esi + 0x24], edi
mov edi, dword [ebp + 0x10]
jmp 0x101131f2
mov dword [esi + 0x24], 0x1019f530
mov dword [esi + 0x28], 0
call sym.nss3.dll_PR_NewLock
test eax, eax
mov dword [esi + 0x10], eax
je 0x10113283
cmp dword [esi + 0x24], 0
je 0x10113283
mov ebx, eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1c], eax
mov eax, dword [edi + 4]
mov dword [ebp - 0x18], eax
mov eax, dword [edi + 8]
mov dword [ebp - 0x14], eax
cmp dword [esi + 0x14], 0
mov eax, dword [esi + 8]
je 0x1011322e
cmp dword [eax + 0x30], 0
jne 0x10113231
mov ebx, dword [eax + 0x3c]
push dword [0x101d4d30]
call dword [sym.imp.kernel32.dll_TlsGetValue]
test eax, eax
je 0x101132ad
mov edi, eax
lea eax, [ebx + 0x1c]
push eax
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
lea edx, [ebp - 0x1c]
mov ecx, esi
mov dword [ebx + 8], edi
call fcn.10113b10
mov edi, eax
cmp dword [esi + 0x14], 0
mov eax, dword [esi + 8]
je 0x10113272
cmp dword [eax + 0x30], 0
je 0x10113272
mov eax, esi
add eax, 0x10
jmp 0x10113275
add eax, 0x3c
push dword [eax]
call sym.nss3.dll_PR_Unlock
add esp, 4
test edi, edi
je 0x101132a4
push 1
push esi
call sym.nss3.dll_PK11_DestroyContext
add esp, 8
xor esi, esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10192ef0
mov eax, esi
add esp, 0x14
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [esi + 0x28], 1
jmp 0x10113290
xor eax, eax
push eax
push eax
push 1
push eax
call fcn.100e2c70
add esp, 0x10
jmp 0x10113241