joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1007e210
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 8
xor ebx, ebx
dec ebx
cmp dword [0x101f5028], 0
je 0x1007e311
push dword [ebp + 8]
call sym.nss3.dll_SECITEM_DupItem_Util
add esp, 4
mov edi, eax
xor eax, eax
push 4
push eax
push eax
call sym.nss3.dll_SECITEM_AllocItem_Util
add esp, 0xc
mov esi, eax
test edi, edi
je 0x1007e2e4
test esi, esi
je 0x1007e2e4
mov dword [ebp - 0x10], edi
mov eax, dword [ebp + 0xc]
mov ecx, dword [esi + 4]
mov dword [ecx], eax
mov eax, dword [0x101f5028]
mov dword [ebp - 0x14], eax
push dword [0x101f45d4]
call dword [sym.imp.kernel32.dll_TlsGetValue]
mov ebx, eax
test eax, eax
je 0x1007e31b
mov edi, dword [ebp - 0x14]
lea eax, [edi + 0x1c]
push eax
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov dword [edi + 8], ebx
mov ebx, dword [ebp + 8]
push ebx
push dword [0x101f5024]
call sym.nss3.dll_PL_HashTableLookup
add esp, 8
test eax, eax
je 0x1007e2b4
push ebx
push dword [0x101f5024]
call sym.nss3.dll_PL_HashTableRemove
add esp, 8
push esi
mov edi, dword [ebp - 0x10]
push edi
push dword [0x101f5024]
call sym.nss3.dll_PL_HashTableAdd
add esp, 0xc
mov ebx, eax
push dword [0x101f5028]
call sym.nss3.dll_PR_Unlock
add esp, 4
xor eax, eax
test ebx, ebx
mov ebx, 0xffffffff
jne 0x1007e313
jmp 0x1007e2f7
push 0
push 0xffffe013
call sym.nss3.dll_PR_SetError
add esp, 8
test edi, edi
je 0x1007e302
push 1
push edi
call sym.nss3.dll_SECITEM_FreeItem_Util
add esp, 8
test esi, esi
je 0x1007e311
push 1
push esi
call sym.nss3.dll_SECITEM_FreeItem_Util
add esp, 8
mov eax, ebx
add esp, 8
pop esi
pop edi
pop ebx
pop ebp
ret
sub esp, 0x10
movaps xmm0, xmmword [0x101b11e0]
movups xmmword [esp], xmm0
call fcn.1006e720
add esp, 0x10
mov ebx, eax
jmp 0x1007e27f

Function at 0x1007e340
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov edi, dword [0x101f5028]
test edi, edi
je 0x1007e3a2
mov ebx, dword [ebp + 8]
push dword [0x101f45d4]
call dword [sym.imp.kernel32.dll_TlsGetValue]
mov esi, eax
test eax, eax
je 0x1007e3c6
lea eax, [edi + 0x1c]
push eax
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov dword [edi + 8], esi
push ebx
push dword [0x101f5024]
call sym.nss3.dll_PL_HashTableLookup
add esp, 8
mov esi, eax
push dword [0x101f5028]
call sym.nss3.dll_PR_Unlock
add esp, 4
test esi, esi
je 0x1007e3ab
cmp dword [esi + 8], 4
jne 0x1007e3af
mov eax, dword [esi + 4]
mov eax, dword [eax]
jmp 0x1007e3c1
push 0
push 0xffffe09a
jmp 0x1007e3b6
xor eax, eax
jmp 0x1007e3c1
push 0
push 0xffffe001
call sym.nss3.dll_PR_SetError
add esp, 8
xor eax, eax
dec eax
pop esi
pop edi
pop ebx
pop ebp
ret
sub esp, 0x10
movaps xmm0, xmmword [0x101b11e0]
movups xmmword [esp], xmm0
call fcn.1006e720
add esp, 0x10
mov esi, eax
jmp 0x1007e365
Function at 0x1007e3e0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x10
mov edi, dword [0x101f5030]
test edi, edi
je 0x1007e440
mov ebx, dword [ebp + 8]
mov eax, dword [0x101f45d4]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_TlsGetValue]
sub esp, 4
mov esi, eax
test eax, eax
je 0x1007e45d
lea eax, [edi + 0x1c]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
sub esp, 4
mov dword [edi + 8], esi
mov eax, dword [0x101f502c]
mov dword [esp + 4], ebx
mov dword [esp], eax
call sym.nss3.dll_PL_HashTableLookup
test eax, eax
je 0x1007e444
mov dword [esp], eax
call sym.nss3.dll_SECITEM_DupItem_Util
mov esi, eax
jmp 0x1007e446
xor esi, esi
jmp 0x1007e453
xor esi, esi
mov eax, dword [0x101f5030]
mov dword [esp], eax
call sym.nss3.dll_PR_Unlock
mov eax, esi
add esp, 0x10
pop esi
pop edi
pop ebx
pop ebp
ret
movaps xmm0, xmmword [0x101b11e0]
movups xmmword [esp], xmm0
call fcn.1006e720
mov esi, eax
jmp 0x1007e40d

Function at 0x1007e480
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
mov edi, dword [0x101f5030]
test edi, edi
je 0x1007e50d
mov ebx, dword [ebp + 0xc]
push dword [0x101f45d4]
call dword [sym.imp.kernel32.dll_TlsGetValue]
mov esi, eax
test eax, eax
je 0x1007e514
lea eax, [edi + 0x1c]
push eax
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov dword [edi + 8], esi
push ebx
push dword [0x101f502c]
call sym.nss3.dll_PL_HashTableLookup
add esp, 8
test eax, eax
je 0x1007e4ff
push eax
call sym.nss3.dll_SECITEM_DupItem_Util
add esp, 4
mov esi, eax
push dword [0x101f5030]
call sym.nss3.dll_PR_Unlock
add esp, 4
test esi, esi
je 0x1007e50d
push esi
push dword [ebp + 8]
call sym.nss3.dll_CERT_FindCertByDERCert
add esp, 8
mov edi, eax
push 1
push esi
call sym.nss3.dll_SECITEM_FreeItem_Util
add esp, 8
mov eax, edi
jmp 0x1007e50f
push dword [0x101f5030]
call sym.nss3.dll_PR_Unlock
add esp, 4
xor eax, eax
pop esi
pop edi
pop ebx
pop ebp
ret
sub esp, 0x10
movaps xmm0, xmmword [0x101b11e0]
movups xmmword [esp], xmm0
call fcn.1006e720
add esp, 0x10
mov esi, eax
jmp 0x1007e4a5
Function at 0x1007e810
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
sub esp, 0x10
mov eax, dword [ebp + 8]
mov ecx, dword [0x101f1014]
xor ecx, ebp
mov dword [ebp - 8], ecx
mov eax, dword [eax + 0x114]
test eax, eax
je 0x1007e874
lea ecx, [ebp - 0x14]
mov dword [ecx + 4], 0
push ecx
push 0x51
push eax
call fcn.1007edd0
add esp, 0xc
cmp eax, 0xffffffff
je 0x1007e878
mov ebx, eax
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x1007e860
cmp dword [ebp - 0xc], 0
je 0x1007e860
mov cl, byte [ebp + 0xc]
test byte [eax], cl
jne 0x1007e89f
push 0
push 0xffffe026
call sym.nss3.dll_PR_SetError
add esp, 8
xor ebx, ebx
dec ebx
jmp 0x1007e89f
xor ebx, ebx
jmp 0x1007e8b0
cmp dword [0x101f4f80], 0
je 0x1007e8da
push dword [0x101f45d4]
call dword [sym.imp.kernel32.dll_TlsGetValue]
test eax, eax
je 0x1007e8c2
xor ebx, ebx
cmp dword [eax + 0x28], 0xffffe023
setne bl
neg ebx
mov eax, dword [ebp - 0x10]
test eax, eax
je 0x1007e8b0
push eax
call dword [sym.imp.mozglue.dll_free]
add esp, 4
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.10157a00
mov eax, ebx
add esp, 0x10
pop ebx
pop ebp
ret
sub esp, 0x10
movaps xmm0, xmmword [0x101b11e0]
movups xmmword [esp], xmm0
call fcn.1006e720
add esp, 0x10
jmp 0x1007e891
call fcn.1001b2e0
jmp 0x1007e881
Function at 0x100810e0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x14
mov ebx, dword [ebp + 8]
test ebx, ebx
je 0x1008116d
mov edi, dword [ebx + 0x10]
mov eax, dword [0x101f45d4]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_TlsGetValue]
sub esp, 4
mov esi, eax
test eax, eax
je 0x10081175
lea eax, [edi + 0x1c]
mov dword [ebp - 0x10], eax
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
sub esp, 4
mov dword [edi + 8], esi
mov eax, dword [ebx + 8]
lea ecx, [eax - 1]
mov dword [ebx + 8], ecx
cmp eax, 1
jg 0x10081165
mov eax, dword [ebx]
test eax, eax
je 0x10081165
mov dword [esp], eax
mov dword [esp + 4], 0
call sym.nss3.dll_PORT_FreeArena_Util
mov dword [esp], edi
call sym.nss3.dll_PR_Unlock
mov eax, dword [ebp - 0x10]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_DeleteCriticalSection]
sub esp, 4
mov dword [esp], edi
call dword [sym.imp.mozglue.dll_free]
jmp 0x1008116d
mov dword [esp], edi
call sym.nss3.dll_PR_Unlock
add esp, 0x14
pop esi
pop edi
pop ebx
pop ebp
ret
movaps xmm0, xmmword [0x101b11e0]
movups xmmword [esp], xmm0
call fcn.1006e720
mov esi, eax
jmp 0x1008110a
Function at 0x10082450
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x14
mov esi, dword [ebp + 0x18]
mov eax, dword [0x101f1014]
xor eax, ebp
mov dword [ebp - 0x10], eax
cmp dword [ebp + 0xc], 0
je 0x10082552
mov eax, dword [ebp + 8]
lea ebx, [ebp - 0x1c]
push ebx
push 0x56
push dword [eax + 0x114]
call fcn.1007e8f0
add esp, 0xc
test eax, eax
je 0x10082509
mov edi, eax
cmp dword [0x101f4f80], 0
je 0x10082621
push dword [0x101f45d4]
call dword [sym.imp.kernel32.dll_TlsGetValue]
test eax, eax
je 0x100825eb
cmp dword [eax + 0x28], 0xffffe023
jne 0x100825c4
mov eax, dword [ebp + 8]
lea esi, [eax + 0x54]
push 0x101bb360
push esi
call sym.nss3.dll_SECITEM_HashCompare
add esp, 8
xor ecx, ecx
test eax, eax
jne 0x100824ea
push 0x101bb378
push esi
call sym.nss3.dll_SECITEM_HashCompare
add esp, 8
test eax, eax
je 0x10082558
xor ecx, ecx
inc ecx
lea eax, [ecx + ecx*2]
lea eax, [eax*8 + 0x101bb36c]
push eax
push ebx
push 0
call sym.nss3.dll_SECITEM_CopyItem_Util
add esp, 0xc
mov edi, eax
test eax, eax
mov esi, dword [ebp + 0x18]
jne 0x1008256d
mov eax, dword [ebp + 0x14]
mov edi, ebx
mov ebx, eax
push eax
call sym.nss3.dll_PORT_ArenaMark_Util
add esp, 4
mov dword [ebp - 0x20], eax
push edi
push ebx
call fcn.10081580
add esp, 8
mov ebx, eax
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x10082539
push eax
call dword [sym.imp.mozglue.dll_free]
add esp, 4
test ebx, ebx
jne 0x10082595
mov ecx, dword [ebp + 0x14]
mov edx, dword [ebp - 0x20]
push 0
call fcn.100dd3f0
add esp, 4
xor edi, edi
dec edi
jmp 0x100825c4
xor edi, edi
xor eax, eax
jmp 0x100825d1
push 0
push 0xffffe023
call sym.nss3.dll_PR_SetError
add esp, 8
xor edi, edi
dec edi
mov esi, dword [ebp + 0x18]
cmp dword [0x101f4f80], 0
je 0x1008262b
push dword [0x101f45d4]
call dword [sym.imp.kernel32.dll_TlsGetValue]
test eax, eax
je 0x10082606
xor ebx, ebx
cmp dword [eax + 0x28], 0xffffe023
jne 0x100825c4
mov edi, dword [ebp + 0x10]
mov esi, dword [ebp + 0xc]
test ebx, ebx
je 0x100825b0
push esi
push ebx
push dword [ebp + 0x14]
call sym.nss3.dll_CERT_CheckNameSpace
add esp, 0xc
test eax, eax
jne 0x100825c9
mov esi, dword [esi + 0x28]
add esi, 0xffffffd8
add edi, 4
cmp esi, dword [ebp + 0xc]
jne 0x1008259b
xor edi, edi
xor eax, eax
jmp 0x100825ce
mov eax, dword [ebp + 8]
jmp 0x100825d1
mov eax, dword [edi]
xor edi, edi
dec edi
mov esi, dword [ebp + 0x18]
test esi, esi
je 0x100825d7
mov dword [esi], eax
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10157a00
mov eax, edi
add esp, 0x14
pop esi
pop edi
pop ebx
pop ebp
ret
sub esp, 0x10
movaps xmm0, xmmword [0x101b11e0]
movups xmmword [esp], xmm0
call fcn.1006e720
add esp, 0x10
jmp 0x100824ae
sub esp, 0x10
movaps xmm0, xmmword [0x101b11e0]
movups xmmword [esp], xmm0
call fcn.1006e720
add esp, 0x10
jmp 0x1008258a
call fcn.1001b2e0
jmp 0x1008249a
call fcn.1001b2e0
jmp 0x1008257a
Function at 0x10083b80
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x14
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
call sym.nss3.dll_CERT_FindCertByNickname
test eax, eax
je 0x10083c03
mov esi, eax
mov eax, dword [ebp + 0xc]
mov ecx, esi
add ecx, 0x54
mov dword [esp + 4], ecx
mov dword [esp], eax
call sym.nss3.dll_SECITEM_HashCompare
test eax, eax
sete al
mov dword [ebp - 0x10], eax
mov ebx, dword [0x101f5020]
test ebx, ebx
je 0x10083c07
mov eax, dword [0x101f45d4]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_TlsGetValue]
sub esp, 4
mov edi, eax
test eax, eax
je 0x10083c3f
lea eax, [ebx + 0x1c]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
sub esp, 4
mov dword [ebx + 8], edi
mov eax, dword [0x101f5020]
mov edi, dword [esi + 0x15c]
test eax, eax
je 0x10083c0d
mov dword [esp], eax
call sym.nss3.dll_PR_Unlock
jmp 0x10083c0d
xor eax, eax
jmp 0x10083c34
mov edi, dword [esi + 0x15c]
test edi, edi
je 0x10083c1b
mov dword [esp], edi
call fcn.10099ca0
jmp 0x10083c31
mov eax, dword [esi]
test eax, eax
je 0x10083c31
mov dword [esp], eax
mov dword [esp + 4], 0
call sym.nss3.dll_PORT_FreeArena_Util
mov eax, dword [ebp - 0x10]
movzx eax, al
add esp, 0x14
pop esi
pop edi
pop ebx
pop ebp
ret
movaps xmm0, xmmword [0x101b11e0]
movups xmmword [esp], xmm0
call fcn.1006e720
mov edi, eax
jmp 0x10083bd8
Function at 0x10083e90
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x10
mov edi, dword [ebp + 8]
test edi, edi
je 0x10083f16
mov ebx, dword [0x101f5020]
test ebx, ebx
je 0x10083eec
mov eax, dword [0x101f45d4]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_TlsGetValue]
sub esp, 4
mov esi, eax
test eax, eax
je 0x10083f1e
lea eax, [ebx + 0x1c]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
sub esp, 4
mov dword [ebx + 8], esi
mov eax, dword [0x101f5020]
mov esi, dword [edi + 0x15c]
test eax, eax
je 0x10083ef2
mov dword [esp], eax
call sym.nss3.dll_PR_Unlock
jmp 0x10083ef2
mov esi, dword [edi + 0x15c]
test esi, esi
je 0x10083f00
mov dword [esp], esi
call fcn.10099ca0
jmp 0x10083f16
mov eax, dword [edi]
test eax, eax
je 0x10083f16
mov dword [esp], eax
mov dword [esp + 4], 0
call sym.nss3.dll_PORT_FreeArena_Util
add esp, 0x10
pop esi
pop edi
pop ebx
pop ebp
ret
movaps xmm0, xmmword [0x101b11e0]
movups xmmword [esp], xmm0
call fcn.1006e720
mov esi, eax
jmp 0x10083ec1

Function at 0x10083f40
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 8
mov edi, dword [ebp + 8]
mov ebx, dword [0x101f50a0]
push edi
call fcn.1009bef0
add esp, 4
test eax, eax
je 0x10083ffa
mov esi, eax
push edi
push eax
call fcn.1009b3a0
add esp, 8
test eax, eax
mov edi, ebx
je 0x10083fa0
push esi
push edi
call fcn.100a1020
add esp, 8
test eax, eax
je 0x10083fa0
mov ebx, eax
push esi
call fcn.1009c770
add esp, 4
test eax, eax
je 0x10083f97
call fcn.100840b0
push ebx
call fcn.1009cc00
add esp, 4
push 1
push 0
push esi
call fcn.1009cd90
add esp, 0xc
mov dword [ebp - 0x14], eax
mov eax, dword [edi + 0x14]
mov dword [ebp - 0x10], edi
mov edi, dword [eax]
push dword [0x101f45d4]
call dword [sym.imp.kernel32.dll_TlsGetValue]
mov ebx, eax
test eax, eax
je 0x10084005
lea eax, [edi + 0x1c]
push eax
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov dword [edi + 8], ebx
push esi
mov esi, dword [ebp - 0x10]
push esi
call fcn.1009f3a0
add esp, 8
mov eax, dword [esi + 0x14]
push dword [eax]
call sym.nss3.dll_PR_Unlock
add esp, 4
xor eax, eax
neg dword [ebp - 0x14]
sbb eax, eax
jmp 0x10083ffd
xor eax, eax
dec eax
add esp, 8
pop esi
pop edi
pop ebx
pop ebp
ret
sub esp, 0x10
movaps xmm0, xmmword [0x101b11e0]
movups xmmword [esp], xmm0
call fcn.1006e720
add esp, 0x10
mov ebx, eax
jmp 0x10083fca
Function at 0x10084020
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x10
mov edi, dword [ebp + 8]
mov ebx, dword [0x101f501c]
mov eax, dword [0x101f45d4]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_TlsGetValue]
sub esp, 4
mov esi, eax
test eax, eax
je 0x10084096
lea eax, [ebx + 0x1c]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
sub esp, 4
mov dword [ebx + 8], esi
xor esi, esi
dec esi
test edi, edi
je 0x1008407f
mov eax, dword [edi + 0x160]
test eax, eax
je 0x1008407f
mov ecx, dword [ebp + 0xc]
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
movsd xmm0, qword [eax]
movsd qword [ecx], xmm0
xor esi, esi
mov eax, dword [0x101f501c]
mov dword [esp], eax
call sym.nss3.dll_PR_Unlock
mov eax, esi
add esp, 0x10
pop esi
pop edi
pop ebx
pop ebp
ret
movaps xmm0, xmmword [0x101b11e0]
movups xmmword [esp], xmm0
call fcn.1006e720
mov esi, eax
jmp 0x10084049
Function at 0x10084cb0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
mov ecx, dword [ebp + 0xc]
xor edx, edx
pop ebp
jmp fcn.10084cc0

Function at 0x10084f60
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp + 0x10]
pop ebp
jmp fcn.10084cc0

Function at 0x10084f70
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x10
mov esi, edx
mov edi, ecx
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
mov edx, dword [0x101f1014]
xor edx, ebp
mov dword [esp + 8], edx
mov dword [esp + 4], ecx
mov dword [esp], eax
cmp dword [ebp + 8], 0
je 0x10084fb0
push 0
push ecx
push eax
push esi
call sym.nss3.dll_CERT_CheckCertValidTimes
add esp, 0x10
test eax, eax
jne 0x10084fc6
mov eax, esp
push eax
push 0x1007d970
push esi
push edi
call fcn.1007db60
add esp, 0x10
test eax, eax
je 0x1008502f
mov ebx, dword [0x101f5020]
test ebx, ebx
je 0x10085009
push dword [0x101f45d4]
call dword [sym.imp.kernel32.dll_TlsGetValue]
mov edi, eax
test eax, eax
je 0x10085042
lea eax, [ebx + 0x1c]
push eax
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov dword [ebx + 8], edi
mov eax, dword [0x101f5020]
mov edi, dword [esi + 0x15c]
test eax, eax
je 0x1008500f
push eax
call sym.nss3.dll_PR_Unlock
add esp, 4
jmp 0x1008500f
mov edi, dword [esi + 0x15c]
test edi, edi
je 0x1008501e
push edi
call fcn.10099ca0
add esp, 4
jmp 0x1008502f
mov eax, dword [esi]
test eax, eax
je 0x1008502f
push 0
push eax
call sym.nss3.dll_PORT_FreeArena_Util
add esp, 8
mov ecx, dword [esp + 8]
xor ecx, ebp
call fcn.10157a00
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
sub esp, 0x10
movaps xmm0, xmmword [0x101b11e0]
movups xmmword [esp], xmm0
call fcn.1006e720
add esp, 0x10
mov edi, eax
jmp 0x10084fe2
Function at 0x10085460
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x10
mov edi, dword [ebp + 8]
test edi, edi
je 0x100854bb
mov ebx, dword [0x101f5020]
mov eax, dword [0x101f45d4]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_TlsGetValue]
sub esp, 4
mov esi, eax
test eax, eax
je 0x100854c6
lea eax, [ebx + 0x1c]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
sub esp, 4
mov dword [ebx + 8], esi
mov eax, dword [edi + 0x14c]
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
mov eax, dword [0x101f5020]
mov dword [esp], eax
call sym.nss3.dll_PR_Unlock
xor eax, eax
jmp 0x100854be
xor eax, eax
dec eax
add esp, 0x10
pop esi
pop edi
pop ebx
pop ebp
ret
movaps xmm0, xmmword [0x101b11e0]
movups xmmword [esp], xmm0
call fcn.1006e720
mov esi, eax
jmp 0x1008548d
Function at 0x1008a6a0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x18
mov edi, dword [ebp + 0x18]
mov eax, dword [0x101f1014]
xor eax, ebp
mov dword [esp + 0x10], eax
test edi, edi
je 0x1008a71f
mov ebx, ecx
mov ecx, dword [ebp + 0x10]
test ecx, ecx
je 0x1008a71f
mov eax, dword [ebp + 0x14]
test eax, eax
je 0x1008a71f
mov dword [esp + 4], edx
mov dword [ecx], 0xffffffff
xor esi, esi
mov dword [eax], esi
mov dword [edi], esi
push dword [0x101f3598]
call sym.nss3.dll_PR_EnterMonitor
add esp, 4
mov ecx, ebx
call fcn.1008a860
test eax, eax
je 0x1008a81a
mov ebx, eax
call sym.nss3.dll_PR_Now
cmp eax, dword [ebx + 0x10]
mov eax, 2
sbb edx, dword [ebx + 0x14]
jge 0x1008a71b
cmp dword [ebx + 0x18], 0
je 0x1008a736
cmp dword [ebx + 0x1c], 2
jne 0x1008a736
xor ecx, ecx
jmp 0x1008a73b
push 0
push 0xffffe005
call sym.nss3.dll_PR_SetError
add esp, 8
xor esi, esi
dec esi
jmp 0x1008a828
xor eax, eax
inc eax
mov cl, 1
mov dword [edi], eax
cmp dword [ebx + 0x18], 0
je 0x1008a76a
mov eax, dword [ebx + 0x1c]
cmp eax, 2
je 0x1008a7da
cmp eax, 1
je 0x1008a792
test eax, eax
jne 0x1008a7e1
mov eax, dword [ebp + 0x10]
mov dword [eax], 0
jmp 0x1008a81a
cmp dword [ebp + 0xc], 0
setne al
xor cl, 1
or cl, al
jne 0x1008a78a
cmp dword [0x101f35c0], 1
jne 0x1008a78a
mov eax, dword [ebp + 0x10]
mov dword [eax], 0
mov eax, dword [ebx + 0x24]
jmp 0x1008a815
lea eax, [esp + 8]
push dword [ebx + 0x20]
push eax
call sym.nss3.dll_DER_GeneralizedTimeToTime_Util
add esp, 8
test eax, eax
jne 0x1008a7f4
mov edi, dword [ebp + 8]
push 0
push 0xffffe00c
call sym.nss3.dll_PR_SetError
add esp, 8
mov eax, dword [esp + 4]
cmp eax, dword [esp + 8]
sbb edi, dword [esp + 0xc]
setge al
setge cl
movzx ecx, cl
neg ecx
mov edx, dword [ebp + 0x10]
mov dword [edx], ecx
test al, al
jne 0x1008a7f9
jmp 0x1008a81a
mov eax, 0xffffe07e
jmp 0x1008a7e6
mov eax, 0xffffe081
push 0
push eax
call sym.nss3.dll_PR_SetError
add esp, 8
xor eax, eax
dec eax
mov ecx, dword [ebp + 0x10]
mov dword [ecx], eax
cmp dword [0x101f4f80], 0
je 0x1008a855
push dword [0x101f45d4]
call dword [sym.imp.kernel32.dll_TlsGetValue]
test eax, eax
je 0x1008a83d
mov eax, dword [eax + 0x28]
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
push dword [0x101f3598]
call sym.nss3.dll_PR_ExitMonitor
add esp, 4
mov ecx, dword [esp + 0x10]
xor ecx, ebp
call fcn.10157a00
mov eax, esi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
sub esp, 0x10
movaps xmm0, xmmword [0x101b11e0]
movups xmmword [esp], xmm0
call fcn.1006e720
add esp, 0x10
jmp 0x1008a812
call fcn.1001b2e0
jmp 0x1008a802
Function at 0x1008e450
Capabilities:
Check http status code

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
push eax
xor edi, edi
dec edi
cmp edx, 0x13
jg 0x1008e548
mov ebx, edx
mov esi, ecx
lea eax, [ecx + 0xd8]
push eax
call sym.nss3.dll_SECOID_FindOID_Util
add esp, 4
test eax, eax
je 0x1008e548
mov eax, dword [eax + 0xc]
xor edi, edi
cmp eax, 0xc7
jg 0x1008e49e
lea ecx, [eax - 0x7c]
cmp ecx, 3
jb 0x1008e4b4
cmp eax, 0xbd
je 0x1008e4b4
jmp 0x1008e548
lea ecx, [eax - 0x13a]
cmp ecx, 2
jb 0x1008e4b4
cmp eax, 0xc8
jne 0x1008e548
cmp dword [esi + 0xec], 0
jne 0x1008e548
cmp dword [esi + 0x170], 0
je 0x1008e4cf
xor edi, edi
dec edi
jmp 0x1008e548
call sym.nss3.dll_PR_Now
push 0xb
push edx
push eax
push esi
call sym.nss3.dll_CERT_FindCertIssuer
add esp, 0x10
xor edi, edi
dec edi
test eax, eax
je 0x1008e548
mov dword [ebp - 0x10], eax
add eax, 0xd8
push eax
call sym.nss3.dll_SECOID_FindOID_Util
add esp, 4
xor edi, edi
dec edi
test eax, eax
je 0x1008e53c
mov eax, dword [eax + 0xc]
cmp eax, 0xc7
jg 0x1008e51b
lea ecx, [eax - 0x7c]
cmp ecx, 3
jb 0x1008e52d
cmp eax, 0xbd
je 0x1008e52d
jmp 0x1008e53c
lea ecx, [eax - 0x13a]
cmp ecx, 2
jb 0x1008e52d
cmp eax, 0xc8
jne 0x1008e53c
inc ebx
mov ecx, dword [ebp - 0x10]
mov edx, ebx
call fcn.1008e450
test eax, eax
je 0x1008e552
mov ecx, dword [ebp - 0x10]
push ecx
call sym.nss3.dll_CERT_DestroyCertificate
add esp, 4
mov eax, edi
add esp, 4
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, dword [ebp - 0x10]
cmp dword [ecx + 0xec], 0
je 0x1008e53f
lea eax, [esi + 0xe4]
mov ecx, dword [ebp - 0x10]
add ecx, 0xe4
push ecx
push eax
push dword [esi]
call sym.nss3.dll_SECITEM_CopyItem_Util
mov ecx, dword [ebp - 0x10]
add esp, 0xc
mov edi, eax
jmp 0x1008e53f