joyce8/EMBER2024-capa huggingface dataset:
Function at 0x101133e0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x14
mov eax, dword [ebp + 8]
mov ecx, dword [0x101f3f98]
mov dword [esp + 4], ecx
mov dword [esp], eax
call sym.nss3.dll_PR_GetIdentitiesLayer
test eax, eax
je 0x101134c1
mov edx, dword [eax + 4]
mov dword [edx], eax
mov esi, 0xffffe005
cmp dword [ebp + 0xc], 0
je 0x101134f7
mov edi, dword [ebp + 0x10]
cmp edi, 0x1f
ja 0x101134f7
xorps xmm0, xmm0
movups xmmword [edx + 0x398], xmm0
movups xmmword [edx + 0x38c], xmm0
movups xmmword [edx + 0x37c], xmm0
movups xmmword [edx + 0x36c], xmm0
movups xmmword [edx + 0x35c], xmm0
movups xmmword [edx + 0x34c], xmm0
movups xmmword [edx + 0x33c], xmm0
movups xmmword [edx + 0x32c], xmm0
test edi, edi
je 0x101134bd
xor esi, esi
mov dword [ebp - 0x10], 0
mov eax, dword [ebp + 0xc]
mov ebx, dword [eax + esi*4]
xor ecx, ecx
cmp dword [ecx + 0x101c5fc0], ebx
je 0x1011348d
add ecx, 0x14
cmp ecx, 0x26c
jne 0x10113476
xor ebx, ebx
jmp 0x101134aa
lea ebx, [ecx + 0x101c5fc0]
xor ecx, ecx
mov eax, dword [edx + ecx*4 + 0x32c]
test eax, eax
je 0x101134a4
cmp ebx, eax
je 0x101134b8
inc ecx
cmp ecx, 0x1f
jne 0x10113495
mov eax, dword [ebp - 0x10]
mov dword [edx + eax*4 + 0x32c], ebx
inc eax
mov dword [ebp - 0x10], eax
inc esi
cmp esi, edi
jne 0x1011346e
xor eax, eax
jmp 0x10113523
cmp dword [0x101f2f50], 0
je 0x10113556
mov eax, dword [0x101f25a4]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_TlsGetValue]
sub esp, 4
test eax, eax
je 0x1011353d
mov dword [eax + 0x28], 0xffffe891
xor ecx, ecx
mov dword [eax + 0x2c], ecx
mov dword [eax + 0x30], ecx
mov esi, 0xffffe09a
cmp dword [0x101f2f50], 0
je 0x1011354f
mov eax, dword [0x101f25a4]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_TlsGetValue]
sub esp, 4
test eax, eax
je 0x1011352b
mov dword [eax + 0x28], esi
xor ecx, ecx
mov dword [eax + 0x2c], ecx
mov dword [eax + 0x30], ecx
xor eax, eax
dec eax
add esp, 0x14
pop esi
pop edi
pop ebx
pop ebp
ret
movaps xmm0, xmmword [0x101af1a0]
movups xmmword [esp], xmm0
call fcn.1006d800
jmp 0x10113515
movaps xmm0, xmmword [0x101af1a0]
movups xmmword [esp], xmm0
call fcn.1006d800
jmp 0x101134e3
call fcn.100029d0
jmp 0x10113500
call fcn.100029d0
jmp 0x101134ce
Function at 0x10113780
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x18
mov esi, dword [ebp + 8]
mov eax, dword [0x101ef014]
xor eax, ebp
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x14]
mov dword [esp + 4], eax
mov dword [esp], 2
call sym.nss3.dll_NSS_OptionGet
test eax, eax
jne 0x101137b4
mov eax, dword [ebp - 0x14]
test eax, eax
jg 0x101137c0
mov dword [ebp - 0x14], 0x80
mov eax, 0x80
mov ecx, dword [ebp + 0xc]
cmp dword [esi + 0x6c0], 0
je 0x101137f3
movzx edx, word [esi + 0x58]
cmp edx, 0x303
ja 0x101137f3
cmp dword [esi + 0x980], 0
jne 0x101137f3
cmp eax, 0x400
ja 0x101137f3
mov dword [ecx], 0x101c62b8
jmp 0x10113877
mov edx, dword [esi + 0x6c4]
test edx, edx
je 0x1011381b
xor edi, edi
mov ebx, dword [esi + edi*4 + 0x32c]
test ebx, ebx
je 0x1011380e
cmp ebx, edx
je 0x10113816
inc edi
cmp edi, 0x1f
jne 0x101137ff
jmp 0x1011381b
cmp dword [edx + 4], eax
jae 0x10113875
xor edx, edx
mov edi, dword [esi + edx*4 + 0x32c]
test edi, edi
je 0x10113833
cmp dword [edi + 8], 2
jne 0x10113833
cmp dword [edi + 4], eax
jae 0x10113871
inc edx
cmp edx, 0x1f
jne 0x1011381d
mov dword [ecx], 0
cmp dword [0x101f2f50], 0
je 0x1011389f
mov eax, dword [0x101f25a4]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_TlsGetValue]
sub esp, 4
test eax, eax
je 0x1011388d
mov dword [eax + 0x28], 0xffffd002
xor ecx, ecx
mov dword [eax + 0x2c], ecx
mov dword [eax + 0x30], ecx
xor esi, esi
dec esi
jmp 0x10113879
mov dword [ecx], edi
jmp 0x10113877
mov dword [ecx], edx
xor esi, esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10156ff0
mov eax, esi
add esp, 0x18
pop esi
pop edi
pop ebx
pop ebp
ret
movaps xmm0, xmmword [0x101af1a0]
movups xmmword [esp], xmm0
call fcn.1006d800
jmp 0x1011385d
call fcn.100029d0
jmp 0x10113848
Function at 0x101138d0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x78
mov esi, edx
mov edi, ecx
mov eax, dword [0x101ef014]
xor eax, ebp
mov dword [esp + 0x70], eax
call fcn.1010b980
xor ebx, ebx
test eax, eax
jne 0x101139c0
mov edx, dword [ebp + 8]
test edi, edi
je 0x1011392f
push dword [0x101f3f98]
push edi
call sym.nss3.dll_PR_GetIdentitiesLayer
add esp, 8
test eax, eax
je 0x10113990
mov ecx, dword [eax + 4]
mov dword [ecx], eax
mov eax, dword [ebp + 8]
cmp dword [ecx + 0xa24], eax
jne 0x101139c0
call fcn.10116410
jmp 0x10113941
xor ecx, ecx
bt dword [0x101f1d2c], 0xa
setae cl
call fcn.10115fe0
mov edi, eax
test eax, eax
je 0x101139c0
push 0x10116880
push 0x101f3fa0
call sym.nss3.dll_PR_CallOnce
add esp, 8
test eax, eax
je 0x101139d5
push edi
call fcn.10111410
add esp, 4
cmp dword [0x101f2f50], 0
je 0x10113a76
push dword [0x101f25a4]
call dword [sym.imp.kernel32.dll_TlsGetValue]
test eax, eax
je 0x10113a40
mov dword [eax + 0x28], 0xffffe001
jmp 0x101139b8
cmp dword [0x101f2f50], 0
je 0x10113a80
push dword [0x101f25a4]
call dword [sym.imp.kernel32.dll_TlsGetValue]
test eax, eax
je 0x10113a5b
mov dword [eax + 0x28], 0xffffe891
xor ebx, ebx
mov dword [eax + 0x2c], ebx
mov dword [eax + 0x30], ebx
mov ecx, dword [esp + 0x70]
xor ecx, ebp
call fcn.10156ff0
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
push 0x101f3fac
push dword [0x101f3f98]
call sym.nss3.dll_PR_CreateIOLayerStub
add esp, 8
test eax, eax
je 0x1011395d
mov ebx, eax
mov dword [eax + 4], edi
push eax
push 0xfffffffffffffffe
push esi
call sym.nss3.dll_PR_PushIOLayer
add esp, 0xc
test eax, eax
je 0x10113a19
mov ecx, dword [ebx + 0x10]
call dword [section..00cfg]
push ebx
call ecx
add esp, 4
jmp 0x1011395d
mov dword [edi], esi
mov ebx, dword [esi + 8]
mov eax, dword [ebx]
mov ecx, dword [eax + 0x64]
call dword [section..00cfg]
mov eax, esp
push eax
push ebx
call ecx
add esp, 8
xor ecx, ecx
test eax, eax
sete cl
mov dword [edi + 0x4c], ecx
mov ebx, esi
jmp 0x101139c0
sub esp, 0x10
movaps xmm0, xmmword [0x101af1a0]
movups xmmword [esp], xmm0
call fcn.1006d800
add esp, 0x10
jmp 0x10113987
sub esp, 0x10
movaps xmm0, xmmword [0x101af1a0]
movups xmmword [esp], xmm0
call fcn.1006d800
add esp, 0x10
jmp 0x101139b1
call fcn.100029d0
jmp 0x10113973
call fcn.100029d0
jmp 0x1011399d
Function at 0x10113ab0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
push dword [0x101f3f98]
push dword [ebp + 8]
call sym.nss3.dll_PR_GetIdentitiesLayer
add esp, 8
test eax, eax
je 0x10113bc3
mov ebx, dword [ebp + 0x10]
mov edi, dword [eax + 4]
mov dword [edi], eax
test ebx, ebx
je 0x10113aef
push ebx
push dword [ebp + 0xc]
call fcn.10105db0
add esp, 8
test eax, eax
jne 0x10113beb
lea esi, [edi + 8]
test byte [edi + 0x1d], 4
jne 0x10113b06
push dword [edi + 0x170]
call sym.nss3.dll_PR_EnterMonitor
add esp, 4
push 0
push esi
call sym.nss3.dll_SECITEM_FreeItem_Util
add esp, 8
test ebx, ebx
je 0x10113b4f
push ebx
push esi
push 0
call sym.nss3.dll_SECITEM_AllocItem_Util
add esp, 0xc
mov edx, dword [ebp + 0xc]
movzx esi, byte [edx]
lea eax, [esi + 1]
sub ebx, eax
mov ecx, dword [edi + 0xc]
add ecx, ebx
push eax
push edx
push ecx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [ebp + 0xc]
add eax, esi
inc eax
push ebx
push eax
push dword [edi + 0xc]
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
test byte [edi + 0x1d], 4
jne 0x10113b63
push dword [edi + 0x170]
call sym.nss3.dll_PR_ExitMonitor
add esp, 4
push dword [0x101f3f98]
push dword [ebp + 8]
call sym.nss3.dll_PR_GetIdentitiesLayer
add esp, 8
test eax, eax
je 0x10113bc3
mov edi, dword [eax + 4]
mov dword [edi], eax
mov eax, dword [edi + 0x1c]
bt eax, 0xa
jb 0x10113b97
push dword [edi + 0x170]
call sym.nss3.dll_PR_EnterMonitor
add esp, 4
mov eax, dword [edi + 0x1c]
mov dword [edi + 0x120], 0x10113c20
mov dword [edi + 0x124], 0
xor esi, esi
bt eax, 0xa
jb 0x10113bee
push dword [edi + 0x170]
call sym.nss3.dll_PR_ExitMonitor
add esp, 4
jmp 0x10113bee
cmp dword [0x101f2f50], 0
je 0x10113c0d
push dword [0x101f25a4]
call dword [sym.imp.kernel32.dll_TlsGetValue]
test eax, eax
je 0x10113bf5
mov dword [eax + 0x28], 0xffffe891
xor ecx, ecx
mov dword [eax + 0x2c], ecx
mov dword [eax + 0x30], ecx
xor esi, esi
dec esi
mov eax, esi
pop esi
pop edi
pop ebx
pop ebp
ret
sub esp, 0x10
movaps xmm0, xmmword [0x101af1a0]
movups xmmword [esp], xmm0
call fcn.1006d800
add esp, 0x10
jmp 0x10113bdc
call fcn.100029d0
jmp 0x10113bcc
Function at 0x10113db0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x10
mov eax, dword [ebp + 8]
mov ecx, dword [0x101f3f98]
mov dword [esp + 4], ecx
mov dword [esp], eax
call sym.nss3.dll_PR_GetIdentitiesLayer
test eax, eax
je 0x10113e64
mov ecx, dword [ebp + 0xc]
mov edi, dword [eax + 4]
mov dword [edi], eax
test ecx, ecx
je 0x10113e8f
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x10113e8f
mov ebx, dword [ebp + 0x14]
test ebx, ebx
je 0x10113e8f
mov edx, dword [edi + 0x9c4]
mov dword [ecx], edx
xor esi, esi
cmp dword [edi + 0x9c4], 0
mov edx, 0
je 0x10113edb
mov ecx, dword [edi + 0x9bc]
test ecx, ecx
je 0x10113edb
mov edx, dword [edi + 0x9c0]
cmp edx, dword [ebp + 0x18]
jbe 0x10113ec5
cmp dword [0x101f2f50], 0
je 0x10113f34
mov eax, dword [0x101f25a4]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_TlsGetValue]
sub esp, 4
test eax, eax
je 0x10113f0b
mov dword [eax + 0x28], 0xffffe003
jmp 0x10113eb8
cmp dword [0x101f2f50], 0
je 0x10113f20
mov eax, dword [0x101f25a4]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_TlsGetValue]
sub esp, 4
test eax, eax
je 0x10113ee7
mov dword [eax + 0x28], 0xffffe891
jmp 0x10113eb8
cmp dword [0x101f2f50], 0
je 0x10113f2a
mov eax, dword [0x101f25a4]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_TlsGetValue]
sub esp, 4
test eax, eax
je 0x10113ef9
mov dword [eax + 0x28], 0xffffe005
xor ecx, ecx
mov dword [eax + 0x2c], ecx
mov dword [eax + 0x30], ecx
xor esi, esi
dec esi
jmp 0x10113edd
mov dword [esp + 8], edx
mov dword [esp + 4], ecx
mov dword [esp], eax
call sub.VCRUNTIME140.dll_memcpy
mov edx, dword [edi + 0x9c0]
mov dword [ebx], edx
mov eax, esi
add esp, 0x10
pop esi
pop edi
pop ebx
pop ebp
ret
movaps xmm0, xmmword [0x101af1a0]
movups xmmword [esp], xmm0
call fcn.1006d800
jmp 0x10113e86
movaps xmm0, xmmword [0x101af1a0]
movups xmmword [esp], xmm0
call fcn.1006d800
jmp 0x10113eb1
movaps xmm0, xmmword [0x101af1a0]
movups xmmword [esp], xmm0
call fcn.1006d800
jmp 0x10113e5b
call fcn.100029d0
jmp 0x10113e71
call fcn.100029d0
jmp 0x10113e9c
call fcn.100029d0
jmp 0x10113e42
Function at 0x10113f40
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x10
mov eax, dword [ebp + 8]
mov ecx, dword [0x101f3f98]
mov dword [esp + 4], ecx
mov dword [esp], eax
call sym.nss3.dll_PR_GetIdentitiesLayer
test eax, eax
je 0x10113fd2
mov edx, dword [ebp + 0x10]
mov ecx, dword [eax + 4]
mov dword [ecx], eax
cmp edx, 4
ja 0x10114003
cmp dword [ecx + 0xa24], 1
jne 0x10114003
mov word [ecx + 0x6ba], 0
test edx, edx
je 0x10114003
mov eax, dword [ebp + 0xc]
xor esi, esi
movzx edi, word [eax + esi*2]
lea ebx, [edi - 1]
cmp bx, 1
ja 0x10113fbf
movzx ebx, word [ecx + 0x6ba]
mov eax, edx
lea edx, [ebx + 1]
mov word [ecx + 0x6ba], dx
mov edx, eax
mov eax, dword [ebp + 0xc]
mov word [ecx + ebx*2 + 0x6b2], di
inc esi
cmp edx, esi
jne 0x10113f92
xor eax, eax
cmp word [ecx + 0x6ba], 0
jne 0x10114033
jmp 0x10114003
cmp dword [0x101f2f50], 0
je 0x10114066
mov eax, dword [0x101f25a4]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_TlsGetValue]
sub esp, 4
test eax, eax
je 0x1011404d
mov dword [eax + 0x28], 0xffffe891
xor ecx, ecx
mov dword [eax + 0x2c], ecx
mov dword [eax + 0x30], ecx
cmp dword [0x101f2f50], 0
je 0x1011405f
mov eax, dword [0x101f25a4]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_TlsGetValue]
sub esp, 4
test eax, eax
je 0x1011403b
mov dword [eax + 0x28], 0xffffe005
xor ecx, ecx
mov dword [eax + 0x2c], ecx
mov dword [eax + 0x30], ecx
xor eax, eax
dec eax
add esp, 0x10
pop esi
pop edi
pop ebx
pop ebp
ret
movaps xmm0, xmmword [0x101af1a0]
movups xmmword [esp], xmm0
call fcn.1006d800
jmp 0x10114021
movaps xmm0, xmmword [0x101af1a0]
movups xmmword [esp], xmm0
call fcn.1006d800
jmp 0x10113ff4
call fcn.100029d0
jmp 0x1011400c
call fcn.100029d0
jmp 0x10113fdf

Function at 0x10114070
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [ebp + 8]
mov ecx, dword [0x101f3f98]
mov dword [esp + 4], ecx
mov dword [esp], eax
call sym.nss3.dll_PR_GetIdentitiesLayer
test eax, eax
je 0x101140aa
mov ecx, dword [eax + 4]
mov dword [ecx], eax
movzx eax, word [ecx + 0x9c8]
test ax, ax
je 0x1011410f
mov ecx, dword [ebp + 0xc]
mov word [ecx], ax
xor eax, eax
jmp 0x1011410a
cmp dword [0x101f2f50], 0
je 0x10114143
mov eax, dword [0x101f25a4]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_TlsGetValue]
sub esp, 4
test eax, eax
je 0x10114131
mov dword [eax + 0x28], 0xffffe891
xor ecx, ecx
mov dword [eax + 0x2c], ecx
mov dword [eax + 0x30], ecx
cmp dword [0x101f2f50], ecx
je 0x10114118
mov eax, dword [0x101f25a4]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_TlsGetValue]
sub esp, 4
test eax, eax
je 0x1011411f
mov dword [eax + 0x28], 0xffffe005
xor ecx, ecx
mov dword [eax + 0x2c], ecx
mov dword [eax + 0x30], ecx
xor eax, eax
dec eax
add esp, 0x10
pop ebp
ret
cmp dword [0x101f2f50], 0
jne 0x101140e3
call fcn.100029d0
jmp 0x101140e3
movaps xmm0, xmmword [0x101af1a0]
movups xmmword [esp], xmm0
call fcn.1006d800
jmp 0x101140f8
movaps xmm0, xmmword [0x101af1a0]
movups xmmword [esp], xmm0
call fcn.1006d800
jmp 0x101140cc
call fcn.100029d0
jmp 0x101140b7
Function at 0x10114200
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
sub esp, 0x10
mov esi, 0xfffffe70
mov edi, dword [ebp + 8]
mov eax, dword [esi + 0x101c645c]
mov dword [esp + 4], eax
mov dword [esp], edi
call sub.api_ms_win_crt_string_l1_1_0.dll_strcmp
test eax, eax
je 0x1011425a
add esi, 8
jne 0x10114210
cmp dword [0x101f2f50], 0
je 0x1011427b
mov eax, dword [0x101f25a4]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_TlsGetValue]
sub esp, 4
test eax, eax
je 0x10114269
mov dword [eax + 0x28], 0xffffd0a4
xor ecx, ecx
mov dword [eax + 0x2c], ecx
mov dword [eax + 0x30], ecx
jmp 0x10114260
mov ecx, dword [esi + 0x101c6460]
mov eax, ecx
add esp, 0x10
pop esi
pop edi
pop ebp
ret
movaps xmm0, xmmword [0x101af1a0]
movups xmmword [esp], xmm0
call fcn.1006d800
jmp 0x10114249
call fcn.100029d0
jmp 0x10114234

Function at 0x10114570
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov eax, dword [ebp + 8]
mov ecx, dword [0x101f3f98]
mov dword [esp + 4], ecx
mov dword [esp], eax
call sym.nss3.dll_PR_GetIdentitiesLayer
test eax, eax
je 0x101145a5
mov ecx, dword [eax + 4]
mov dword [ecx], eax
mov eax, dword [ecx + 0xc4]
test eax, eax
je 0x101145ce
add eax, 0xf8
jmp 0x101145fd
cmp dword [0x101f2f50], 0
je 0x1011462a
mov eax, dword [0x101f25a4]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_TlsGetValue]
sub esp, 4
mov ecx, eax
test eax, eax
je 0x10114602
mov dword [ecx + 0x28], 0xffffe891
jmp 0x101145f5
cmp dword [0x101f2f50], 0
je 0x10114634
mov eax, dword [0x101f25a4]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_TlsGetValue]
sub esp, 4
mov ecx, eax
test eax, eax
je 0x10114616
mov dword [ecx + 0x28], 0xffffe09a
xor eax, eax
mov dword [ecx + 0x2c], eax
mov dword [ecx + 0x30], eax
add esp, 0x10
pop ebp
ret
movaps xmm0, xmmword [0x101af1a0]
movups xmmword [esp], xmm0
call fcn.1006d800
mov ecx, eax
jmp 0x101145c5
movaps xmm0, xmmword [0x101af1a0]
movups xmmword [esp], xmm0
call fcn.1006d800
mov ecx, eax
jmp 0x101145ee
call fcn.100029d0
jmp 0x101145ae
call fcn.100029d0
jmp 0x101145d7
Function at 0x10114640
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
sub esp, 0x18
mov edi, dword [ebp + 0xc]
mov eax, dword [0x101ef014]
xor eax, ebp
mov dword [ebp - 0xc], eax
test edi, edi
je 0x1011466b
mov ecx, dword [ebp + 8]
test ecx, ecx
je 0x101146a2
cmp ecx, 1
jne 0x1011466b
mov ax, 0x302
jmp 0x101146a6
cmp dword [0x101f2f50], 0
je 0x10114736
mov eax, dword [0x101f25a4]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_TlsGetValue]
sub esp, 4
test eax, eax
je 0x10114721
mov dword [eax + 0x28], 0xffffe005
xor ecx, ecx
mov dword [eax + 0x2c], ecx
mov dword [eax + 0x30], ecx
jmp 0x101146e1
mov ax, 0x300
mov word [edi], ax
mov word [edi + 2], 0x304
lea edx, [ebp - 0x10]
call fcn.10114290
cmp eax, 0xffffffff
je 0x101146db
movzx ecx, word [edi]
mov eax, dword [ebp - 0x10]
cmp cx, ax
cmova eax, ecx
movzx edx, word [edi + 2]
movzx ecx, word [ebp - 0xe]
cmp dx, cx
cmovb ecx, edx
cmp cx, ax
jae 0x101146f7
mov dword [edi], 0
xor esi, esi
dec esi
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.10156ff0
mov eax, esi
add esp, 0x18
pop esi
pop edi
pop ebp
ret
mov word [edi], ax
mov word [edi + 2], cx
movzx ecx, cx
xor esi, esi
cmp ecx, 0x304
jb 0x101146e4
movzx ecx, ax
cmp ecx, 0x302
mov ecx, 0x301
cmovae ecx, eax
mov word [edi], cx
jmp 0x101146e4
movaps xmm0, xmmword [0x101af1a0]
movups xmmword [esp], xmm0
call fcn.1006d800
jmp 0x10114691
call fcn.100029d0
jmp 0x10114678

Function at 0x10114740
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push esi
sub esp, 0x18
mov ecx, dword [ebp + 8]
mov eax, dword [0x101ef014]
xor eax, ebp
mov dword [ebp - 8], eax
cmp ecx, 1
ja 0x101147a7
mov esi, dword [ebp + 0xc]
test esi, esi
je 0x101147a7
test ecx, ecx
mov eax, 0x101f1d10
mov edx, 0x101f1d14
cmove edx, eax
mov eax, dword [edx]
mov dword [esi], eax
lea edx, [ebp - 0xc]
call fcn.10114290
cmp eax, 0xffffffff
je 0x1011479f
movzx ecx, word [esi]
mov eax, dword [ebp - 0xc]
cmp cx, ax
cmova eax, ecx
movzx edx, word [esi + 2]
movzx ecx, word [ebp - 0xa]
cmp dx, cx
cmovb ecx, edx
cmp cx, ax
jae 0x101147e9
mov dword [esi], 0
jmp 0x101147d4
cmp dword [0x101f2f50], 0
je 0x10114806
mov eax, dword [0x101f25a4]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_TlsGetValue]
sub esp, 4
test eax, eax
je 0x101147f4
mov dword [eax + 0x28], 0xffffe005
xor ecx, ecx
mov dword [eax + 0x2c], ecx
mov dword [eax + 0x30], ecx
xor esi, esi
dec esi
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.10156ff0
mov eax, esi
add esp, 0x18
pop esi
pop ebp
ret
mov word [esi], ax
mov word [esi + 2], cx
xor esi, esi
jmp 0x101147d7
movaps xmm0, xmmword [0x101af1a0]
movups xmmword [esp], xmm0
call fcn.1006d800
jmp 0x101147c5
call fcn.100029d0
jmp 0x101147b0
Function at 0x10114810
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x18
mov eax, dword [ebp + 0xc]
mov ecx, dword [0x101ef014]
xor ecx, ebp
mov dword [ebp - 0x10], ecx
test eax, eax
je 0x101148dc
mov ebx, dword [eax]
mov edi, ebx
shr edi, 0x10
cmp bx, di
ja 0x1011493d
mov esi, dword [ebp + 8]
test esi, esi
je 0x1011490b
cmp esi, 1
jne 0x1011493d
mov eax, 0xfffffcfe
lea ecx, [ebx + eax]
cmp cx, 2
ja 0x1011493d
add eax, edi
cmp ax, 3
jae 0x1011493d
lea edx, [ebp - 0x14]
mov ecx, esi
call fcn.10114290
cmp eax, 0xffffffff
je 0x1011496a
mov eax, dword [ebp - 0x14]
cmp bx, ax
cmovbe ebx, eax
movzx eax, word [ebp - 0x12]
cmp di, ax
cmovae edi, eax
cmp di, bx
jb 0x1011496a
movzx ecx, di
movzx eax, bx
cmp eax, 0x302
mov eax, 0x301
cmovae eax, ebx
cmp ecx, 0x304
cmovb eax, ebx
test esi, esi
mov ecx, 0x101f1d10
mov edx, 0x101f1d14
cmove edx, ecx
shl edi, 0x10
movzx eax, ax
or eax, edi
mov dword [edx], eax
xor esi, esi
jmp 0x1011496d
cmp dword [0x101f2f50], 0
je 0x101149af
mov eax, dword [0x101f25a4]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_TlsGetValue]
sub esp, 4
test eax, eax
je 0x10114993
mov dword [eax + 0x28], 0xffffe005
jmp 0x10114962
mov eax, 0xfffffd00
lea ecx, [ebx + eax]
cmp cx, 4
ja 0x1011493d
add eax, edi
cmp ax, 4
ja 0x1011493d
movzx eax, bx
cmp eax, 0x300
ja 0x10114871
movzx eax, di
cmp eax, 0x304
jb 0x10114871
cmp dword [0x101f2f50], 0
je 0x101149a8
mov eax, dword [0x101f25a4]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_TlsGetValue]
sub esp, 4
test eax, eax
je 0x10114981
mov dword [eax + 0x28], 0xffffd078
xor ecx, ecx
mov dword [eax + 0x2c], ecx
mov dword [eax + 0x30], ecx
xor esi, esi
dec esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10156ff0
mov eax, esi
add esp, 0x18
pop esi
pop edi
pop ebx
pop ebp
ret
movaps xmm0, xmmword [0x101af1a0]
movups xmmword [esp], xmm0
call fcn.1006d800
jmp 0x1011495b
movaps xmm0, xmmword [0x101af1a0]
movups xmmword [esp], xmm0
call fcn.1006d800
jmp 0x10114902
call fcn.100029d0
jmp 0x10114946
call fcn.100029d0
jmp 0x101148e9
Function at 0x101149c0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
sub esp, 0x18
mov eax, dword [ebp + 8]
mov ecx, dword [0x101ef014]
xor ecx, ebp
mov dword [ebp - 0xc], ecx
mov ecx, dword [0x101f3f98]
mov dword [esp + 4], ecx
mov dword [esp], eax
call sym.nss3.dll_PR_GetIdentitiesLayer
test eax, eax
je 0x10114a9b
mov esi, dword [ebp + 0xc]
mov edi, dword [eax + 4]
mov dword [edi], eax
test esi, esi
je 0x10114ac6
mov eax, dword [edi + 0x1c]
bt eax, 0xa
jb 0x10114a1a
mov eax, dword [edi + 0x16c]
mov dword [esp], eax
call sym.nss3.dll_PR_EnterMonitor
mov eax, dword [edi + 0x1c]
bt eax, 0xa
jb 0x10114a2e
mov eax, dword [edi + 0x170]
mov dword [esp], eax
call sym.nss3.dll_PR_EnterMonitor
mov eax, dword [edi + 0x24]
mov dword [esi], eax
mov eax, dword [edi + 0x1c]
bt eax, 0xa
jb 0x10114a4d
mov eax, dword [edi + 0x170]
mov dword [esp], eax
call sym.nss3.dll_PR_ExitMonitor
mov eax, dword [edi + 0x1c]
bt eax, 0xa
jb 0x10114a61
mov eax, dword [edi + 0x16c]
mov dword [esp], eax
call sym.nss3.dll_PR_ExitMonitor
mov ecx, dword [edi + 0xa24]
lea edx, [ebp - 0x10]
call fcn.10114290
cmp eax, 0xffffffff
je 0x10114a93
movzx ecx, word [esi]
mov eax, dword [ebp - 0x10]
cmp cx, ax
cmova eax, ecx
movzx edx, word [esi + 2]
movzx ecx, word [ebp - 0xe]
cmp dx, cx
cmovb ecx, edx
cmp cx, ax
jae 0x10114b09
mov dword [esi], 0
jmp 0x10114af3
cmp dword [0x101f2f50], 0
je 0x10114b38
mov eax, dword [0x101f25a4]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_TlsGetValue]
sub esp, 4
test eax, eax
je 0x10114b14
mov dword [eax + 0x28], 0xffffe891
jmp 0x10114aeb
cmp dword [0x101f2f50], 0
je 0x10114b42
mov eax, dword [0x101f25a4]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_TlsGetValue]
sub esp, 4
test eax, eax
je 0x10114b26
mov dword [eax + 0x28], 0xffffe005
xor ecx, ecx
mov dword [eax + 0x2c], ecx
mov dword [eax + 0x30], ecx
xor esi, esi
dec esi
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.10156ff0
mov eax, esi
add esp, 0x18
pop esi
pop edi
pop ebp
ret
mov word [esi], ax
mov word [esi + 2], cx
xor esi, esi
jmp 0x10114af6
movaps xmm0, xmmword [0x101af1a0]
movups xmmword [esp], xmm0
call fcn.1006d800
jmp 0x10114abd
movaps xmm0, xmmword [0x101af1a0]
movups xmmword [esp], xmm0
call fcn.1006d800
jmp 0x10114ae4
call fcn.100029d0
jmp 0x10114aa8
call fcn.100029d0
jmp 0x10114acf