joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140020602
Capabilities:
Get thread local storage value

Disassembly:
sub rsp, 0xa8
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x60], rcx
mov ecx, dword [0x1401ab0a0]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x68]
add rax, 0x60
mov qword [rsp + 0x70], rax
mov rax, qword [rcx]
mov qword [rsp + 0x78], rax
cmp rax, rdx
jle 0x140020657
mov rdx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x60]
call fcn.140020411
jmp 0x140020884
mov rax, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x68]
cmp rax, rcx
jge 0x140020884
mov rax, qword [rsp + 0x60]
mov rcx, rax
add rcx, 8
mov qword [rsp + 0x50], rcx
mov rax, qword [rax + 8]
mov qword [rsp + 0x58], rax
cmp rax, 0
je 0x1400206be
mov rcx, qword [rsp + 0x68]
mov rax, qword [rsp + 0x58]
mov rax, qword [rax]
movabs rdx, 0x21e09d157e6a4d8e
movabs r8, 0x9e1f62ea8195b271
xor rdx, r8
and rax, rdx
cmp rax, rcx
jge 0x140020740
mov r8, qword [rsp + 0x78]
mov r9, qword [rsp + 0x68]
mov rdx, r9
sub rdx, r8
mov qword [rsp + 0x48], rdx
mov rax, rdx
and rax, r9
add rax, rax
mov rcx, rdx
add rcx, r9
sub rcx, rax
test rcx, rcx
sets al
xor rdx, r8
and rcx, rdx
test rcx, rcx
setns cl
add al, cl
inc al
test al, 1
jne 0x140020736
mov r8, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x78]
mov r9d, 0x20
mov qword [rsp + 0x20], 8
call fcn.1400184ef
mov rcx, rax
mov rax, qword [rsp + 0x50]
mov qword [rax], rcx
jmp 0x140020740
call fcn.14000a590
jmp 0x140020884
mov rax, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x68]
mov qword [rcx], rdx
lea rcx, [rsp + 0x80]
add rcx, 0x10
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x30], rax
mov ecx, dword [0x1401ab0a0]
mov rax, qword [sym.imp.KERNEL32.dll_TlsGetValue]
call rax
mov rdx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x50]
mov rax, qword [rsp + 0x30]
xorps xmm0, xmm0
movaps xmmword [rsp + 0x80], xmm0
movaps xmmword [rdx], xmm0
mov rcx, qword [rcx]
add rcx, 8
shl rax, 5
add rcx, rax
lea rdx, [rsp + 0x80]
call fcn.14004ec11
mov rax, qword [rsp + 0x70]
mov al, byte [rax]
mov cl, 0x62
xor cl, 0x62
cmp al, cl
jne 0x140020862
mov rcx, qword [rsp + 0x30]
movabs rdx, 0xb349afb5cfc6a3f4
movabs rax, 0xb349afb5cfc6a3f5
xor rdx, rax
mov rax, rcx
add rax, rdx
mov qword [rsp + 0x28], rax
mov r8, rcx
xor r8, 0xffffffffffffffff
movabs rdx, 0xbe23923e34984aaf
movabs r9, 0x41dc6dc1cb67b550
xor rdx, r9
xor r8, rdx
movabs rdx, 0xff00a1637a90c88d
movabs r9, 0xff5e9c856f3772
xor rdx, r9
and rdx, r8
shl rdx, 1
movabs r8, 0x2f4908dd9c7293f2
movabs r9, 0xd0b6f722638d6c0d
xor r8, r9
sub rdx, r8
sub rcx, rdx
and rax, rcx
cmp rax, 0
jge 0x140020867
call fcn.14000a590
jmp 0x140020884
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x68]
cmp rax, rcx
mov qword [rsp + 0x40], rax
je 0x140020862
jmp 0x140020768
add rsp, 0xa8
ret
sub rsp, 0x38
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rcx
xor eax, eax
mov edx, eax
call fcn.140020411
mov rcx, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x30]
add rsp, 0x38
jmp 0x140020602
Function at 0x14002088c
Capabilities:
Get thread local storage value

Disassembly:
sub rsp, 0xa8
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x60], rcx
mov ecx, dword [0x1401ab0a0]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x68]
add rax, 0x60
mov qword [rsp + 0x70], rax
mov rax, qword [rcx]
mov qword [rsp + 0x78], rax
cmp rax, rdx
jle 0x140020657
mov rdx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x60]
call fcn.140020411
jmp 0x140020884
mov rax, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x68]
cmp rax, rcx
jge 0x140020884
mov rax, qword [rsp + 0x60]
mov rcx, rax
add rcx, 8
mov qword [rsp + 0x50], rcx
mov rax, qword [rax + 8]
mov qword [rsp + 0x58], rax
cmp rax, 0
je 0x1400206be
mov rcx, qword [rsp + 0x68]
mov rax, qword [rsp + 0x58]
mov rax, qword [rax]
movabs rdx, 0x21e09d157e6a4d8e
movabs r8, 0x9e1f62ea8195b271
xor rdx, r8
and rax, rdx
cmp rax, rcx
jge 0x140020740
mov r8, qword [rsp + 0x78]
mov r9, qword [rsp + 0x68]
mov rdx, r9
sub rdx, r8
mov qword [rsp + 0x48], rdx
mov rax, rdx
and rax, r9
add rax, rax
mov rcx, rdx
add rcx, r9
sub rcx, rax
test rcx, rcx
sets al
xor rdx, r8
and rcx, rdx
test rcx, rcx
setns cl
add al, cl
inc al
test al, 1
jne 0x140020736
mov r8, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x58]
mov rcx, qword [rsp + 0x78]
mov r9d, 0x20
mov qword [rsp + 0x20], 8
call fcn.1400184ef
mov rcx, rax
mov rax, qword [rsp + 0x50]
mov qword [rax], rcx
jmp 0x140020740
call fcn.14000a590
jmp 0x140020884
mov rax, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x60]
mov rdx, qword [rsp + 0x68]
mov qword [rcx], rdx
lea rcx, [rsp + 0x80]
add rcx, 0x10
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x30], rax
mov ecx, dword [0x1401ab0a0]
mov rax, qword [sym.imp.KERNEL32.dll_TlsGetValue]
call rax
mov rdx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x50]
mov rax, qword [rsp + 0x30]
xorps xmm0, xmm0
movaps xmmword [rsp + 0x80], xmm0
movaps xmmword [rdx], xmm0
mov rcx, qword [rcx]
add rcx, 8
shl rax, 5
add rcx, rax
lea rdx, [rsp + 0x80]
call fcn.14004ec11
mov rax, qword [rsp + 0x70]
mov al, byte [rax]
mov cl, 0x62
xor cl, 0x62
cmp al, cl
jne 0x140020862
mov rcx, qword [rsp + 0x30]
movabs rdx, 0xb349afb5cfc6a3f4
movabs rax, 0xb349afb5cfc6a3f5
xor rdx, rax
mov rax, rcx
add rax, rdx
mov qword [rsp + 0x28], rax
mov r8, rcx
xor r8, 0xffffffffffffffff
movabs rdx, 0xbe23923e34984aaf
movabs r9, 0x41dc6dc1cb67b550
xor rdx, r9
xor r8, rdx
movabs rdx, 0xff00a1637a90c88d
movabs r9, 0xff5e9c856f3772
xor rdx, r9
and rdx, r8
shl rdx, 1
movabs r8, 0x2f4908dd9c7293f2
movabs r9, 0xd0b6f722638d6c0d
xor r8, r9
sub rdx, r8
sub rcx, rdx
and rax, rcx
cmp rax, 0
jge 0x140020867
call fcn.14000a590
jmp 0x140020884
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x68]
cmp rax, rcx
mov qword [rsp + 0x40], rax
je 0x140020862
jmp 0x140020768
add rsp, 0xa8
ret
sub rsp, 0x38
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x28], rcx
xor eax, eax
mov edx, eax
call fcn.140020411
mov rcx, qword [rsp + 0x28]
mov rdx, qword [rsp + 0x30]
add rsp, 0x38
jmp 0x140020602
Function at 0x1400208b6
Capabilities:
Get thread local storage value

Disassembly:
sub rsp, 0x78
mov qword [rsp + 0x68], rcx
mov rax, qword [rcx]
mov qword [rsp + 0x70], rax
movabs rcx, 0xbdb58a135b66c6b
movabs rdx, 0xbdb58a135b66c6b
xor rcx, rdx
cmp rax, rcx
jle 0x140020a63
mov rcx, qword [rsp + 0x70]
mov rax, qword [rsp + 0x68]
add rax, 8
mov qword [rsp + 0x50], rax
xor eax, eax
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x60], rax
mov rcx, qword [rsp + 0x50]
mov rax, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x60]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x38], rax
mov rcx, qword [rcx]
add rcx, 8
shl rdx, 4
add rcx, rdx
add rcx, 8
mov rcx, qword [rcx]
mov qword [rsp + 0x40], rcx
cmp rcx, 0
mov qword [rsp + 0x48], rax
je 0x140020a3d
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rcx]
movabs r8, 0x4000000000000000
mov rcx, rdx
and rcx, r8
movabs r8, 0x9becd3c5e79eec9
movabs r9, 0xf64132c3a1861136
xor r8, r9
xor rcx, r8
movabs r8, 0xfb1eeb41de089eb9
movabs r9, 0x4e114be21f76146
xor r8, r9
xor rdx, r8
movabs r8, 0xf32b41861eb0a43f
movabs r9, 0xb32b41861eb0a43f
xor r8, r9
movabs r9, 0x4485158898bc36d1
movabs r10, 0xbb7aea776743c92e
xor r9, r10
xor r8, r9
or rdx, r8
xor rcx, 0xffffffffffffffff
movabs r8, 0xbf09f92b70847a67
movabs r9, 0x40f606d48f7b8598
xor r8, r9
xor rdx, r8
or rcx, rdx
movabs rdx, 0xe9dda5894140023b
movabs r8, 0xe9dda5894140023b
xor rdx, r8
cmp rcx, rdx
mov qword [rsp + 0x48], rax
jne 0x140020a3d
mov ecx, dword [0x1401ab0a0]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rdx, qword [rsp + 0x40]
mov rcx, rax
add rcx, 0x68
call fcn.14000ffaa
mov rax, qword [rsp + 0x68]
mov rax, qword [rax]
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x30]
mov rcx, qword [rsp + 0x48]
xor edx, edx
sub rdx, 1
sub rax, rdx
cmp rax, rcx
mov qword [rsp + 0x58], rcx
mov qword [rsp + 0x60], rax
jl 0x140020906
mov rax, qword [rsp + 0x68]
mov rax, qword [rax + 8]
mov qword [rsp + 0x28], rax
cmp rax, 0
je 0x140020a98
mov ecx, dword [0x1401ab0a0]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rdx, qword [rsp + 0x28]
mov rcx, rax
add rcx, 0x68
call fcn.14000ffaa
nop
add rsp, 0x78
ret
Function at 0x140020b38
Capabilities:
Get thread local storage value

Disassembly:
sub rsp, 0x48
mov qword [rsp + 0x40], rcx
mov ecx, dword [0x1401ab0a0]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rcx, qword [rsp + 0x40]
cmp rcx, 0
je 0x140020c59
mov rax, qword [rsp + 0x40]
movabs rdx, 0xf8c72b2a923b1a52
movabs rcx, 0x738d4d56dc4e5a2
xor rdx, rcx
mov rcx, rax
and rcx, rdx
shl rcx, 1
xor rax, 0xfffffffffffffff0
add rax, rcx
mov qword [rsp + 0x30], rax
mov rax, qword [rax]
mov qword [rsp + 0x38], rax
cmp rax, 0x10
jb 0x140020c33
mov rdx, qword [rsp + 0x38]
movabs rcx, 0x40f105eae3c912f
movabs rax, 0xfbf0efa151c36edf
xor rcx, rax
mov rax, rdx
add rax, rcx
mov qword [rsp + 0x28], rax
mov rcx, rax
xor rcx, rdx
cmp rcx, 0
setl cl
movabs rdx, 0xdedccbb0720a91d0
movabs r8, 0x2123344f8df56e2f
xor rdx, r8
cmp rax, rdx
setg al
and al, cl
test al, 1
jne 0x140020c00
jmp 0x140020c0a
call fcn.14000a590
jmp 0x140020c59
mov rdx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x28]
mov qword [rdx], rcx
mov r8, qword [rax]
xor eax, eax
mov cl, al
xor cl, 0
and cl, 1
call fcn.140013f0f
jmp 0x140020c59
mov rax, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x30]
mov r8, qword [rax]
xor eax, eax
mov cl, al
xor cl, 1
and cl, 1
call fcn.140013f0f
mov rcx, qword [rsp + 0x40]
call fcn.140014085
nop
add rsp, 0x48
ret
Function at 0x14002180b
Capabilities:
Get thread local storage value

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x20], rcx
mov rax, rcx
add rax, 8
mov qword [rsp + 0x28], rax
mov rax, qword [rcx + 8]
mov qword [rsp + 0x30], rax
cmp rax, 0
je 0x14002189c
mov rax, qword [rsp + 0x30]
mov rcx, qword [rax]
movabs rdx, 0x8f5a935a071a115e
movabs rax, 0xcf5a935a071a115e
xor rdx, rax
movabs rax, 0x39d8fc7644e7eec3
movabs r8, 0xc6270389bb18113c
xor rax, r8
xor rdx, rax
mov rax, rcx
xor rax, rdx
and rax, rcx
cmp rax, 0
jne 0x14002189c
mov ecx, dword [0x1401ab0a0]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rdx, qword [rsp + 0x30]
mov rcx, rax
add rcx, 0x68
call fcn.14000ffaa
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x20]
movabs rdx, 0xc63d8f7d6334e502
movabs r8, 0xc63d8f7d6334e502
xor rdx, r8
mov qword [rcx], rdx
mov qword [rax], 0
add rsp, 0x38
ret

Function at 0x140021f70
Capabilities:
Get thread local storage value

Disassembly:
sub rsp, 0x48
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x38], rcx
mov qword [rsp + 0x40], rcx
movabs rax, 0x79a9f6c62a2d516e
movabs rcx, 0x79a9f6c62a2d516f
xor rax, rcx
cmp rdx, rax
jge 0x140021fbc
mov rax, qword [rsp + 0x38]
mov qword [rax], 0
mov qword [rax + 8], 0
jmp 0x14002214d
mov rcx, qword [rsp + 0x30]
movabs rdx, 0x4798209d5be6e9ba
movabs rax, 0x4798209d5be6e9bb
xor rdx, rax
mov rax, rcx
add rax, rdx
mov r8, rcx
and r8, 0xffffffffffffffff
movabs rdx, 0xd193a03d89e9241d
movabs r9, 0xd193a03d89e9241f
xor rdx, r9
imul rdx, r8
add rcx, 0xffffffffffffffff
sub rcx, rdx
and rax, rcx
cmp rax, 0
jge 0x14002201e
call fcn.14000a590
jmp 0x14002214d
mov rax, qword [rsp + 0x30]
movabs rdx, 0xe1f3e7fa52aa779e
movabs rcx, 0xe1f3e7fa52aa7797
xor rdx, rcx
mov rcx, rax
add rcx, rdx
mov qword [rsp + 0x28], rcx
movabs rdx, 0x9ca5a54d8906d369
movabs r8, 0x635a5ab276f92c97
xor rdx, r8
sub rdx, rax
mov rax, rcx
xor rax, 0xffffffffffffffff
movabs r8, 0x8e3ab26e2549a17a
movabs r9, 0x71c54d91dab65e85
xor r8, r9
xor rcx, r8
and rax, rcx
mov rcx, rdx
xor rcx, 0xffffffffffffffff
movabs r8, 0x2b8e5ec463735de9
movabs r9, 0xd471a13b9c8ca216
xor r8, r9
xor rdx, r8
and rcx, rdx
or rax, rcx
xor rax, 0xffffffffffffffff
movabs rcx, 0x647082ded9ee2db6
movabs rdx, 0x647082ded9ee2db6
xor rcx, rdx
cmp rax, rcx
jge 0x1400220d8
call fcn.14000a590
jmp 0x14002214d
mov rax, qword [rsp + 0x28]
movabs rcx, 0x519588a915bfbdae
movabs rdx, 0x519588a915bfbdae
xor rcx, rdx
cmp rax, rcx
jge 0x14002210d
mov rcx, r8
mov rdx, r8
call fcn.140010917
jmp 0x14002214d
mov ecx, dword [0x1401ab0a0]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rdx, qword [rsp + 0x28]
mov rcx, rax
add rcx, 0x68
call fcn.14000d5e6
mov rdx, qword [rsp + 0x30]
mov rcx, rax
mov rax, qword [rsp + 0x38]
mov qword [rcx], rdx
mov dl, 0xb8
xor dl, 0xb8
mov byte [rcx + 8], dl
mov qword [rax], 0
mov qword [rax + 8], rcx
mov rax, qword [rsp + 0x40]
add rsp, 0x48
ret
Function at 0x140023abd
Capabilities:
Get thread local storage value

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x28], rcx
mov ecx, dword [0x1401ab0a0]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x30], rax
mov rcx, qword [rcx]
call fcn.1400c337f
mov rax, qword [rsp + 0x30]
cmp byte [rax + 0x60], 0
jne 0x140023aff
mov rax, qword [rsp + 0x28]
mov qword [rax], 0
add rsp, 0x38
ret
Function at 0x140024419
Capabilities:
Get thread local storage value

Disassembly:
sub rsp, 0x78
mov qword [rsp + 0x48], rdx
mov qword [rsp + 0x50], rcx
mov ecx, dword [0x1401ab0a0]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rcx, qword [rsp + 0x50]
add rax, 0x60
mov qword [rsp + 0x58], rax
mov rax, qword [rcx]
mov qword [rsp + 0x60], rax
cmp rax, 0
je 0x1400245af
mov rax, qword [rsp + 0x60]
movabs rcx, 0x2c25a6882bcccdeb
movabs rdx, 0xd3da5977d433321b
xor rcx, rdx
movabs rdx, 0x4c24fb00d957600c
movabs r8, 0xb3db04ff26a89ff3
xor rdx, r8
xor rcx, rdx
movabs rdx, 0xc965ff9c61b8bce
movabs r8, 0xc965ff9c61b8bce
xor rdx, r8
movabs r8, 0xe615cd42ca70779b
movabs r9, 0xe615cd42ca70779a
xor r8, r9
sub rdx, r8
sub rcx, rdx
sub rax, rcx
mov qword [rsp + 0x38], rax
mov rax, qword [rax]
mov qword [rsp + 0x40], rax
cmp rax, 0x10
jb 0x14002453d
mov rdx, qword [rsp + 0x40]
mov rax, rdx
add rax, 0xfffffffffffffff0
mov qword [rsp + 0x30], rax
mov rcx, rax
xor rcx, rdx
movabs rdx, 0x42f03f175765581
movabs r8, 0x42f03f175765581
xor rdx, r8
cmp rcx, rdx
setl cl
cmp rax, 0xffffffffffffffff
setg al
and al, cl
test al, 1
jne 0x140024521
jmp 0x14002452b
call fcn.14000a590
jmp 0x1400245af
mov rax, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x30]
mov qword [rax], rcx
jmp 0x1400245af
mov rax, qword [rsp + 0x60]
mov rcx, qword [rax]
mov qword [rsp + 0x68], rcx
mov rax, qword [rax + 8]
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x68]
call fcn.1400c3e40
mov rax, qword [rsp + 0x58]
cmp byte [rax], 0
jne 0x1400245bc
mov rax, qword [rsp + 0x50]
mov rax, qword [rax]
movabs rcx, 0x46deba14075f3200
movabs rdx, 0xb92145ebf8a0cdf0
xor rcx, rdx
add rax, rcx
mov qword [rsp + 0x28], rax
mov ecx, dword [0x1401ab0a0]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rdx, qword [rsp + 0x28]
mov rcx, rax
add rcx, 0x68
call fcn.14000ffaa
mov rax, qword [rsp + 0x50]
mov rcx, qword [rsp + 0x48]
mov qword [rax], rcx
add rsp, 0x78
ret
Function at 0x1400245c1
Capabilities:
Get thread local storage value

Disassembly:
sub rsp, 0x58
mov qword [rsp + 0x38], rcx
mov ecx, dword [0x1401ab0a0]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rcx, qword [rsp + 0x38]
add rax, 0x60
mov qword [rsp + 0x40], rax
cmp rcx, 0
je 0x14002470e
mov rax, qword [rsp + 0x38]
movabs rcx, 0x8ad230fe6d87b1b1
movabs rdx, 0x752dcf0192784e41
xor rcx, rdx
add rax, rcx
mov qword [rsp + 0x28], rax
mov rax, qword [rax]
mov qword [rsp + 0x30], rax
movabs rcx, 0xa7432071d24d0892
movabs rdx, 0xa7432071d24d0882
xor rcx, rdx
cmp rax, rcx
jb 0x1400246c3
mov rdx, qword [rsp + 0x30]
movabs rcx, 0xb01f693b9e32b453
movabs rax, 0x4fe096c461cd4ba3
xor rcx, rax
movabs rax, 0x65e97cfd822dd9
movabs r8, 0xff9a1683027dd226
xor rax, r8
xor rcx, rax
xor eax, eax
sub rax, 1
sub rcx, rax
mov rax, rdx
sub rax, rcx
mov qword [rsp + 0x20], rax
mov rcx, rax
xor rcx, rdx
cmp rcx, 0
setl cl
cmp rax, 0xffffffffffffffff
setg al
and al, cl
test al, 1
jne 0x1400246a7
jmp 0x1400246b1
call fcn.14000a590
jmp 0x14002470e
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x20]
mov qword [rax], rcx
jmp 0x14002470e
mov rax, qword [rsp + 0x38]
mov rcx, qword [rax]
mov qword [rsp + 0x48], rcx
mov rax, qword [rax + 8]
mov qword [rsp + 0x50], rax
lea rcx, [rsp + 0x48]
call fcn.1400c3e40
mov rax, qword [rsp + 0x40]
cmp byte [rax], 0
jne 0x14002470e
mov ecx, dword [0x1401ab0a0]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rdx, qword [rsp + 0x28]
mov rcx, rax
add rcx, 0x68
call fcn.14000ffaa
nop
add rsp, 0x58
ret

Function at 0x14002471c
Capabilities:
Get thread local storage value

Disassembly:
sub rsp, 0x28
mov ecx, dword [0x1401ab0a0]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ecx, dword [0x1401ab0a0]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
movabs rcx, 0x319b81a9a5cfefc4
movabs rax, 0x319b81a9a5cfefd4
xor rcx, rax
movabs rdx, 0x19386e14b1943c25
movabs rax, 0x19386e14b1943c2d
xor rdx, rax
call fcn.140019bef
mov qword [rsp + 0x20], rax
xor eax, eax
mov ecx, eax
call fcn.1400245c1
mov rax, qword [rsp + 0x20]
add rsp, 0x28
ret

Function at 0x140024b6a
Capabilities:
Get thread local storage value

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x28], rcx
mov ecx, dword [0x1401ab0a0]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x30], rax
call fcn.14004fc17
mov rax, qword [rsp + 0x30]
cmp byte [rax + 0x60], 0
jne 0x140024ba7
mov rcx, qword [rsp + 0x28]
call fcn.14004fce3
nop
add rsp, 0x38
ret
Function at 0x14002589b
Capabilities:
Get thread local storage value

Disassembly:
sub rsp, 0x28
mov ecx, dword [0x1401ab0a0]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
movabs rcx, 0xcb741ecad198666f
movabs rax, 0xcb741ecad198662f
xor rcx, rax
movabs rdx, 0x88204fc5e644d0fc
movabs rax, 0x88204fc5e644d0f4
xor rdx, rax
call fcn.140019bef
mov rcx, rax
mov rax, qword [0x1401a1598]
mov qword [rcx], rax
lea rax, [0x140197d6e]
mov qword [rcx + 0x10], rax
movabs rax, 0x71c1851edf101c33
movabs rdx, 0x71c1851edf101c33
xor rax, rdx
mov qword [rcx + 0x18], rax
lea rax, [0x140197d30]
mov qword [rcx + 0x20], rax
mov rax, rsp
mov qword [rax + 0x20], 0x6d1fac57
lea rdx, [0x140197d6e]
lea r8, [0x140197d4c]
lea r9, [0x140197d55]
call fcn.140019b17
nop
add rsp, 0x28
ret

Function at 0x140025947
Capabilities:
Get thread local storage value

Disassembly:
sub rsp, 0x28
mov ecx, dword [0x1401ab0a0]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
movabs rcx, 0x79b68f3ec4bf1901
movabs rax, 0x79b68f3ec4bf1941
xor rcx, rax
movabs rdx, 0x69252481371c7262
movabs rax, 0x69252481371c726a
xor rdx, rax
call fcn.140019bef
mov rcx, rax
mov rax, qword [0x1401a1588]
mov qword [rcx], rax
lea rax, [0x140197d40]
mov qword [rcx + 0x10], rax
mov qword [rcx + 0x18], 0
lea rax, [0x140197d30]
mov qword [rcx + 0x20], rax
movabs rdx, 0x4ba4ae9dae9948ed
movabs rax, 0x4ba4ae9dc386e4ba
xor rdx, rax
mov rax, rsp
mov qword [rax + 0x20], rdx
lea rdx, [0x140197d40]
lea r8, [0x140197d4c]
lea r9, [0x140197d55]
call fcn.140019b17
nop
add rsp, 0x28
ret

Function at 0x1400259f3
Capabilities:
Get thread local storage value

Disassembly:
sub rsp, 0x28
mov qword [rsp + 0x20], rcx
mov ecx, dword [0x1401ab0a0]
mov rax, qword [sym.imp.KERNEL32.dll_TlsGetValue]
call rax
mov rdx, qword [rsp + 0x20]
mov rcx, rax
add rcx, 0x68
add rsp, 0x28
jmp fcn.14000ffaa
Function at 0x140025a20
Capabilities:
Get thread local storage value

Disassembly:
push rbp
sub rsp, 0x50
lea rbp, [rsp + 0x50]
mov eax, 0x10
call fcn.140195b60
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x28], rax
mov ecx, dword [0x1401ab0a0]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
add rsp, 0x20
mov rcx, rax
mov rax, qword [rbp - 0x28]
mov qword [rbp - 0x18], rcx
add rcx, 0x60
mov qword [rbp - 0x20], rcx
mov qword [rax], 0
xor eax, eax
mov ecx, eax
sub rsp, 0x20
call fcn.1400690a3
mov rcx, qword [rbp - 0x18]
add rsp, 0x20
xor eax, eax
cmp byte [rcx + 0x60], 0
mov rcx, rax
mov qword [rbp - 0x10], rcx
mov qword [rbp - 8], rax
jne 0x140025b43
movabs rcx, 0x26394a1dc8b175a2
movabs rax, 0x26394a1dc8b175d2
xor rcx, rax
movabs rdx, 0x31badf0d91a41018
movabs rax, 0x31badf0d91a41010
xor rdx, rax
sub rsp, 0x20
call fcn.140019bef
mov rcx, qword [rbp - 0x28]
add rsp, 0x20
mov qword [rcx], rax
mov rdx, qword [0x1401a1600]
mov qword [rax], rdx
mov rax, qword [rcx]
mov qword [rbp - 0x38], rax
sub rsp, 0x20
call fcn.1400692a2
mov rdx, qword [rbp - 0x20]
mov rcx, qword [rbp - 0x28]
mov rax, qword [rbp - 0x38]
add rsp, 0x20
mov dl, byte [rdx]
mov r8b, 0xf8
xor r8b, 0xf8
mov rcx, qword [rcx]
mov qword [rbp - 0x30], rcx
cmp dl, r8b
mov qword [rbp - 0x10], rcx
mov qword [rbp - 8], rax
jne 0x140025b43
mov rcx, qword [rbp - 0x30]
sub rsp, 0x20
call fcn.1400690a3
mov rax, qword [rbp - 0x38]
add rsp, 0x20
mov qword [rbp - 0x40], rax
jmp 0x140025b8d
mov rax, qword [rbp - 0x20]
mov rcx, qword [rbp - 0x10]
mov rdx, qword [rbp - 8]
mov qword [rbp - 0x48], rdx
mov byte [rax], 0
sub rsp, 0x20
call fcn.1400690a3
mov rcx, qword [rbp - 0x20]
mov rax, qword [rbp - 0x48]
add rsp, 0x20
mov cl, byte [rcx]
mov dl, 0x53
xor dl, 0x53
cmp cl, dl
mov qword [rbp - 0x40], rax
jne 0x140025b8d
mov rax, qword [rbp - 0x48]
mov rcx, qword [rbp - 0x20]
mov byte [rcx], 1
mov qword [rbp - 0x40], rax
mov rax, qword [rbp - 0x40]
mov rsp, rbp
pop rbp
ret

Function at 0x140025b96
Capabilities:
Get thread local storage value

Disassembly:
sub rsp, 0x38
mov qword [rsp + 0x28], rcx
mov ecx, dword [0x1401ab0a0]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rcx, qword [rsp + 0x28]
mov qword [rsp + 0x30], rax
call fcn.14004418b
mov rax, qword [rsp + 0x30]
cmp byte [rax + 0x60], 0
jne 0x140025be7
mov ecx, dword [0x1401ab0a0]
mov rax, qword [sym.imp.KERNEL32.dll_TlsGetValue]
call rax
mov rax, qword [rsp + 0x28]
xorps xmm0, xmm0
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
add rsp, 0x38
ret
Function at 0x14002634e
Capabilities:
Get thread local storage value

Disassembly:
sub rsp, 0x48
mov qword [rsp + 0x40], rcx
mov ecx, dword [0x1401ab0a0]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rcx, qword [rsp + 0x40]
cmp rcx, 0
je 0x14002645f
mov rax, qword [rsp + 0x40]
xor ecx, ecx
sub rcx, rax
movabs rax, 0xf879a899236b3bbf
movabs rdx, 0xf879a899236b3bbf
xor rax, rdx
movabs rdx, 0xfef46217e15f2546
movabs r8, 0x10b9de81ea0dab6
xor rdx, r8
sub rax, rdx
add rcx, rax
xor eax, eax
sub rax, rcx
mov qword [rsp + 0x30], rax
mov rax, qword [rax]
mov qword [rsp + 0x38], rax
movabs rcx, 0xc10d33513e55e2fa
movabs rdx, 0xc10d33513e55e2ea
xor rcx, rdx
cmp rax, rcx
jb 0x14002643b
mov rcx, qword [rsp + 0x38]
mov rdx, rcx
add rdx, 0xfffffffffffffff0
mov qword [rsp + 0x28], rdx
test rdx, rdx
setns al
or rcx, rdx
sets cl
add al, cl
inc al
test al, 1
jne 0x140026410
jmp 0x14002641a
call fcn.14000a590
jmp 0x14002645f
mov rdx, qword [rsp + 0x30]
mov rax, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x28]
mov qword [rdx], rcx
mov r8, qword [rax]
xor ecx, ecx
call fcn.140013f0f
jmp 0x14002645f
mov rax, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x30]
mov r8, qword [rax]
mov cl, 1
xor cl, 0
and cl, 1
call fcn.140013f0f
mov rcx, qword [rsp + 0x40]
call fcn.140014085
nop
add rsp, 0x48
ret