joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1000be3e0
Capabilities:
Get thread local storage value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rdi
sub rsp, 0x90
mov qword [rax - 0x60], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rdi, rcx
mov qword [rax - 0x68], 0
call fcn.100068a00
mov rsi, rax
mov rdx, qword gs:[0x30]
lea rbx, [rdx + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000be436
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000be447
mov rdx, qword [rbx + 0xd8]
test rdx, rdx
jne 0x1000be47f
call fcn.100063d30
call fcn.100068a00
mov rbx, rax
mov rcx, qword gs:[0x30]
lea rsi, [rcx + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000be478
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rsi, rax
mov rdx, qword [rsi + 0xd8]
mov rcx, rdi
call fcn.1000bf0f0
nop
xor edx, edx
lea rax, [0x100062030]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rcx, [rsp + 0x68]
call fcn.10005b410
nop
mov qword [rsp + 0x30], 0
lea rcx, [rsp + 0x68]
call fcn.10005b4f0
nop
jmp 0x1000be4c5
call fcn.100068a00
mov rsi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000be4f0
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000be501
mov rax, qword [rbx + 0xd8]
test rax, rax
jne 0x1000be538
call fcn.100063d30
call fcn.100068a00
mov rsi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000be531
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rax, qword [rbx + 0xd8]
cmp dword [rax + 0x204], 0
je 0x1000be546
call fcn.1000618f0
mov qword [rdi + 0x180], 0
mov eax, 0xffff7fff
lock xadd dword [rdi + 0x160], eax
cmp eax, 0x8001
je 0x1000be57d
lea rcx, [rdi + 0x138]
call fcn.1000931d0
lea rcx, [rdi + 0x110]
call fcn.1000931d0
mov rax, qword [rsp + 0x30]
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x1000be5a0
Capabilities:
Get thread local storage value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rdi
sub rsp, 0x90
mov qword [rax - 0x68], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rdi, rcx
call fcn.100068a00
mov rsi, rax
mov rdx, qword gs:[0x30]
lea rbx, [rdx + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000be5ee
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000be5ff
mov rdx, qword [rbx + 0xd8]
test rdx, rdx
jne 0x1000be637
call fcn.100063d30
call fcn.100068a00
mov rbx, rax
mov rcx, qword gs:[0x30]
lea rsi, [rcx + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000be630
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rsi, rax
mov rdx, qword [rsi + 0xd8]
mov rcx, rdi
call fcn.1000bf0f0
nop
xor edx, edx
lea rax, [0x100062030]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rcx, [rsp + 0x60]
call fcn.10005b410
nop
lea rcx, [rsp + 0x60]
call fcn.10005b4f0
nop
jmp 0x1000be674
call fcn.100068a00
mov rsi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000be69f
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000be6b0
mov rax, qword [rbx + 0xd8]
test rax, rax
jne 0x1000be6e7
call fcn.100063d30
call fcn.100068a00
mov rsi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000be6e0
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rax, qword [rbx + 0xd8]
cmp dword [rax + 0x204], 0
je 0x1000be6f5
call fcn.1000618f0
mov qword [rdi + 0x180], 0
mov eax, 0xffff7fff
lock xadd dword [rdi + 0x160], eax
cmp eax, 0x8001
je 0x1000be72c
lea rcx, [rdi + 0x138]
call fcn.1000931d0
lea rcx, [rdi + 0x110]
call fcn.1000931d0
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x1000be750
Capabilities:
Get thread local storage value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rdi
sub rsp, 0x90
mov qword [rax - 0x60], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rdi, rcx
call fcn.100068a00
mov rsi, rax
mov rdx, qword gs:[0x30]
lea rbx, [rdx + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000be79e
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000be7af
mov rdx, qword [rbx + 0xd8]
test rdx, rdx
jne 0x1000be7e7
call fcn.100063d30
call fcn.100068a00
mov rbx, rax
mov rcx, qword gs:[0x30]
lea rsi, [rcx + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000be7e0
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rsi, rax
mov rdx, qword [rsi + 0xd8]
mov rcx, rdi
call fcn.1000bf0f0
mov dword [rsp + 0x30], 0
xor edx, edx
lea rax, [0x100062030]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rcx, [rsp + 0x68]
call fcn.10005b410
nop
mov dword [rsp + 0x30], 1
lea rcx, [rsp + 0x68]
call fcn.10005b4f0
nop
jmp 0x1000be833
call fcn.100068a00
mov rsi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000be85e
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000be86f
mov rax, qword [rbx + 0xd8]
test rax, rax
jne 0x1000be8a6
call fcn.100063d30
call fcn.100068a00
mov rsi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000be89f
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rax, qword [rbx + 0xd8]
cmp dword [rax + 0x204], 0
je 0x1000be8b4
call fcn.1000618f0
mov qword [rdi + 0x180], 0
mov eax, 0xffff7fff
lock xadd dword [rdi + 0x160], eax
cmp eax, 0x8001
je 0x1000be8eb
lea rcx, [rdi + 0x138]
call fcn.1000931d0
lea rcx, [rdi + 0x110]
call fcn.1000931d0
mov eax, dword [rsp + 0x30]
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x1000be910
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x20
mov rbp, rcx
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000be952
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000be963
mov rbx, qword [rbx + 0xd8]
test rbx, rbx
jne 0x1000be99a
call fcn.100063d30
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000be993
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rbx, qword [rbx + 0xd8]
mov rsi, qword [rbx + 0x3f8]
lea rax, [0x1000610e0]
mov rdx, rbx
mov rcx, rbp
mov qword [rbx + 0x3f8], rax
call fcn.1000bf0f0
mov qword [rbp + 0x180], 0
mov eax, 0xffff7fff
lock xadd dword [rbp + 0x160], eax
cmp eax, 0x8001
je 0x1000be9f1
lea rcx, [rbp + 0x138]
call fcn.1000931d0
lea rcx, [rbp + 0x110]
call fcn.1000931d0
mov rbp, qword [rsp + 0x38]
mov qword [rbx + 0x3f8], rsi
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret

Function at 0x1000bea20
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x20
mov rbp, rcx
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000bea62
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000bea73
mov rbx, qword [rbx + 0xd8]
test rbx, rbx
jne 0x1000beaaa
call fcn.100063d30
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000beaa3
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rbx, qword [rbx + 0xd8]
mov rsi, qword [rbx + 0x3f8]
lea rax, [0x1000610e0]
mov rdx, rbx
mov rcx, rbp
mov qword [rbx + 0x3f8], rax
call fcn.1000bf0f0
mov qword [rbp + 0x180], 0
mov eax, 0xffff7fff
lock xadd dword [rbp + 0x160], eax
cmp eax, 0x8001
je 0x1000beb01
lea rcx, [rbp + 0x138]
call fcn.1000931d0
lea rcx, [rbp + 0x110]
call fcn.1000931d0
mov rbp, qword [rsp + 0x38]
mov qword [rbx + 0x3f8], rsi
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret
Function at 0x1000beb30
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x20
mov rbp, rcx
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000beb72
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000beb83
mov rbx, qword [rbx + 0xd8]
test rbx, rbx
jne 0x1000bebba
call fcn.100063d30
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000bebb3
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rbx, qword [rbx + 0xd8]
mov rsi, qword [rbx + 0x3f8]
lea rax, [0x1000610e0]
mov rdx, rbx
mov rcx, rbp
mov qword [rbx + 0x3f8], rax
call fcn.1000bf0f0
mov qword [rbp + 0x180], 0
mov eax, 0xffff7fff
lock xadd dword [rbp + 0x160], eax
cmp eax, 0x8001
je 0x1000bec11
lea rcx, [rbp + 0x138]
call fcn.1000931d0
lea rcx, [rbp + 0x110]
call fcn.1000931d0
mov rbp, qword [rsp + 0x38]
mov qword [rbx + 0x3f8], rsi
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret

Function at 0x1000bf9b0
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x20
mov rbp, rdx
mov r14, rcx
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000bf9fb
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000bfa0c
mov rbx, qword [rbx + 0xd8]
test rbx, rbx
jne 0x1000bfa43
call fcn.100063d30
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000bfa3c
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rbx, qword [rbx + 0xd8]
mov rsi, qword [rbx + 0x3f8]
lea rax, [0x1000610e0]
mov rdx, rbx
mov rcx, r14
mov qword [rbx + 0x3f8], rax
call fcn.1000c13e0
mov rdx, rbp
mov rcx, r14
call fcn.10010fbf0
mov qword [r14 + 0x550], 0
mov edx, 0xffff7fff
mov ebp, eax
lock xadd dword [r14 + 0x530], edx
cmp edx, 0x8001
je 0x1000bfaab
lea rcx, [r14 + 0x508]
call fcn.1000931d0
lea rcx, [r14 + 0x4e0]
call fcn.1000931d0
mov eax, ebp
mov rbp, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x48]
mov qword [rbx + 0x3f8], rsi
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop r14
ret
Function at 0x1000bfae0
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x20
mov rbp, rcx
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000bfb22
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000bfb33
mov rbx, qword [rbx + 0xd8]
test rbx, rbx
jne 0x1000bfb6a
call fcn.100063d30
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000bfb63
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rbx, qword [rbx + 0xd8]
mov rsi, qword [rbx + 0x3f8]
lea rax, [0x1000610e0]
mov rdx, rbx
mov rcx, rbp
mov qword [rbx + 0x3f8], rax
call fcn.1000c13e0
mov rcx, rbp
call fcn.10010fc60
mov qword [rbp + 0x550], 0
mov eax, 0xffff7fff
lock xadd dword [rbp + 0x530], eax
cmp eax, 0x8001
je 0x1000bfbc9
lea rcx, [rbp + 0x508]
call fcn.1000931d0
lea rcx, [rbp + 0x4e0]
call fcn.1000931d0
mov rbp, qword [rsp + 0x38]
mov qword [rbx + 0x3f8], rsi
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret

Function at 0x1000c0030
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r12
push r14
push r15
sub rsp, 0x30
mov ebp, r9d
mov r15, r8
mov r12, rdx
mov r14, rcx
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000c0085
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000c0096
mov rbx, qword [rbx + 0xd8]
test rbx, rbx
jne 0x1000c00cd
call fcn.100063d30
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000c00c6
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rbx, qword [rbx + 0xd8]
mov rsi, qword [rbx + 0x3f8]
lea rax, [0x1000610e0]
mov rdx, rbx
mov rcx, r14
mov qword [rbx + 0x3f8], rax
call fcn.1000c1320
movzx r11d, byte [rsp + 0x70]
mov r9d, ebp
mov r8, r15
mov rdx, r12
mov rcx, r14
mov byte [rsp + 0x20], r11b
call fcn.10010f190
lea rdi, [r14 + 0x4e0]
mov rbp, rax
xor eax, eax
mov edx, 0x7ffe7fff
mov qword [rdi + 0x70], rax
mov qword [rdi + 0x68], rax
lock xadd dword [rdi + 0x50], edx
cmp edx, 0x80018001
je 0x1000c0140
lea rcx, [rdi + 0x28]
call fcn.1000931d0
mov rcx, rdi
call fcn.1000931d0
mov rdi, qword [rsp + 0x68]
mov qword [rbx + 0x3f8], rsi
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x60]
mov rax, rbp
mov rbp, qword [rsp + 0x58]
add rsp, 0x30
pop r15
pop r14
pop r12
ret
Function at 0x1000c0170
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r12
push r14
push r15
sub rsp, 0x30
mov rbp, r9
mov r15, r8
mov r12, rdx
mov r14, rcx
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000c01c5
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000c01d6
mov rbx, qword [rbx + 0xd8]
test rbx, rbx
jne 0x1000c020d
call fcn.100063d30
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000c0206
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rbx, qword [rbx + 0xd8]
mov rsi, qword [rbx + 0x3f8]
lea rax, [0x1000610e0]
mov rdx, rbx
mov rcx, r14
mov qword [rbx + 0x3f8], rax
call fcn.1000c1320
movzx r11d, byte [rsp + 0x78]
mov eax, dword [rsp + 0x70]
mov byte [rsp + 0x28], r11b
mov r9, rbp
mov r8, r15
mov rdx, r12
mov rcx, r14
mov dword [rsp + 0x20], eax
call fcn.10010f3a0
lea rdi, [r14 + 0x4e0]
mov edx, 0x7ffe7fff
mov rbp, rax
xor eax, eax
mov qword [rdi + 0x70], rax
mov qword [rdi + 0x68], rax
lock xadd dword [rdi + 0x50], edx
cmp edx, 0x80018001
je 0x1000c0288
lea rcx, [rdi + 0x28]
call fcn.1000931d0
mov rcx, rdi
call fcn.1000931d0
mov rdi, qword [rsp + 0x68]
mov qword [rbx + 0x3f8], rsi
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x60]
mov rax, rbp
mov rbp, qword [rsp + 0x58]
add rsp, 0x30
pop r15
pop r14
pop r12
ret
Function at 0x1000c02c0
Capabilities:
Get thread local storage value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rsi
push rdi
push r14
sub rsp, 0x90
mov qword [rax - 0x70], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
movzx r14d, dl
mov rdi, rcx
mov qword [rax - 0x78], 0
call fcn.100068a00
mov rsi, rax
mov r8, qword gs:[0x30]
lea rbx, [r8 + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000c0319
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000c032a
mov rdx, qword [rbx + 0xd8]
test rdx, rdx
jne 0x1000c0362
call fcn.100063d30
call fcn.100068a00
mov rbx, rax
mov rcx, qword gs:[0x30]
lea rsi, [rcx + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000c035b
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rsi, rax
mov rdx, qword [rsi + 0xd8]
mov rcx, rdi
call fcn.1000c13e0
nop
xor edx, edx
lea rax, [0x100062030]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rcx, [rsp + 0x68]
call fcn.10005b410
nop
movzx eax, r14b
mov rcx, qword [rdi + rax*8 + 0x258]
mov qword [rsp + 0xc0], rcx
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0x68]
call fcn.10005b4f0
nop
jmp 0x1000c03b8
call fcn.100068a00
mov rsi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000c03e3
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000c03f4
mov rax, qword [rbx + 0xd8]
test rax, rax
jne 0x1000c042b
call fcn.100063d30
call fcn.100068a00
mov rsi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000c0424
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rax, qword [rbx + 0xd8]
cmp dword [rax + 0x204], 0
je 0x1000c0439
call fcn.1000618f0
mov qword [rdi + 0x550], 0
mov eax, 0xffff7fff
lock xadd dword [rdi + 0x530], eax
cmp eax, 0x8001
je 0x1000c0470
lea rcx, [rdi + 0x508]
call fcn.1000931d0
lea rcx, [rdi + 0x4e0]
call fcn.1000931d0
mov rax, qword [rsp + 0x30]
mov rbx, qword [rsp + 0xb8]
add rsp, 0x90
pop r14
pop rdi
pop rsi
ret
Function at 0x1000c0490
Capabilities:
Get thread local storage value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rsi
push rdi
push r14
sub rsp, 0x90
mov qword [rax - 0x70], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
movzx r14d, dl
mov rdi, rcx
mov qword [rax - 0x78], 0
call fcn.100068a00
mov rsi, rax
mov r8, qword gs:[0x30]
lea rbx, [r8 + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000c04e9
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000c04fa
mov rdx, qword [rbx + 0xd8]
test rdx, rdx
jne 0x1000c0532
call fcn.100063d30
call fcn.100068a00
mov rbx, rax
mov rcx, qword gs:[0x30]
lea rsi, [rcx + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000c052b
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rsi, rax
mov rdx, qword [rsi + 0xd8]
mov rcx, rdi
call fcn.1000c13e0
nop
xor edx, edx
lea rax, [0x100062030]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rcx, [rsp + 0x68]
call fcn.10005b410
nop
movzx eax, r14b
mov rcx, qword [rdi + rax*8 + 0x358]
mov qword [rsp + 0xc0], rcx
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0x68]
call fcn.10005b4f0
nop
jmp 0x1000c0588
call fcn.100068a00
mov rsi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000c05b3
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000c05c4
mov rax, qword [rbx + 0xd8]
test rax, rax
jne 0x1000c05fb
call fcn.100063d30
call fcn.100068a00
mov rsi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000c05f4
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rax, qword [rbx + 0xd8]
cmp dword [rax + 0x204], 0
je 0x1000c0609
call fcn.1000618f0
mov qword [rdi + 0x550], 0
mov eax, 0xffff7fff
lock xadd dword [rdi + 0x530], eax
cmp eax, 0x8001
je 0x1000c0640
lea rcx, [rdi + 0x508]
call fcn.1000931d0
lea rcx, [rdi + 0x4e0]
call fcn.1000931d0
mov rax, qword [rsp + 0x30]
mov rbx, qword [rsp + 0xb8]
add rsp, 0x90
pop r14
pop rdi
pop rsi
ret
Function at 0x1000c0660
Capabilities:
Get thread local storage value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rsi
push rdi
push r14
sub rsp, 0x90
mov qword [rax - 0x70], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
movzx r14d, dl
mov rdi, rcx
mov qword [rax - 0x78], 0
call fcn.100068a00
mov rsi, rax
mov r8, qword gs:[0x30]
lea rbx, [r8 + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000c06b9
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000c06ca
mov rdx, qword [rbx + 0xd8]
test rdx, rdx
jne 0x1000c0702
call fcn.100063d30
call fcn.100068a00
mov rbx, rax
mov rcx, qword gs:[0x30]
lea rsi, [rcx + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000c06fb
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rsi, rax
mov rdx, qword [rsi + 0xd8]
mov rcx, rdi
call fcn.1000c13e0
nop
xor edx, edx
lea rax, [0x100062030]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rcx, [rsp + 0x68]
call fcn.10005b410
nop
movzx edx, r14b
mov qword [rsp + 0xc0], rdx
lea rcx, [rdi + 0x120]
mov qword [rsp + 0xc8], rcx
mov rax, qword [rcx + rdx*8 + 0x138]
sub rax, qword [rcx + rdx*8 + 0x238]
mov qword [rsp + 0x30], rax
lea rcx, [rsp + 0x68]
call fcn.10005b4f0
nop
jmp 0x1000c076f
call fcn.100068a00
mov rsi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000c079a
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000c07ab
mov rax, qword [rbx + 0xd8]
test rax, rax
jne 0x1000c07e2
call fcn.100063d30
call fcn.100068a00
mov rsi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000c07db
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rax, qword [rbx + 0xd8]
cmp dword [rax + 0x204], 0
je 0x1000c07f0
call fcn.1000618f0
mov qword [rdi + 0x550], 0
mov eax, 0xffff7fff
lock xadd dword [rdi + 0x530], eax
cmp eax, 0x8001
je 0x1000c0827
lea rcx, [rdi + 0x508]
call fcn.1000931d0
lea rcx, [rdi + 0x4e0]
call fcn.1000931d0
mov rax, qword [rsp + 0x30]
mov rbx, qword [rsp + 0xb8]
add rsp, 0x90
pop r14
pop rdi
pop rsi
ret
Function at 0x1000c0850
Capabilities:
Get thread local storage value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push r14
sub rsp, 0x90
mov qword [rax - 0x68], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov r14, rdx
mov rdi, rcx
call fcn.100068a00
mov rsi, rax
mov r8, qword gs:[0x30]
lea rbx, [r8 + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000c08a6
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000c08b7
mov rdx, qword [rbx + 0xd8]
test rdx, rdx
jne 0x1000c08ef
call fcn.100063d30
call fcn.100068a00
mov rbx, rax
mov rcx, qword gs:[0x30]
lea rsi, [rcx + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000c08e8
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rsi, rax
mov rdx, qword [rsi + 0xd8]
mov rcx, rdi
call fcn.1000c13e0
nop
xor edx, edx
lea rax, [0x100062030]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rcx, [rsp + 0x60]
call fcn.10005b410
nop
mov rdx, r14
mov rcx, rdi
call fcn.10010fdc0
nop
lea rcx, [rsp + 0x60]
call fcn.10005b4f0
nop
jmp 0x1000c0938
call fcn.100068a00
mov rsi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000c0963
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000c0974
mov rax, qword [rbx + 0xd8]
test rax, rax
jne 0x1000c09ab
call fcn.100063d30
call fcn.100068a00
mov rsi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000c09a4
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rax, qword [rbx + 0xd8]
cmp dword [rax + 0x204], 0
je 0x1000c09b9
call fcn.1000618f0
mov qword [rdi + 0x550], 0
mov eax, 0xffff7fff
lock xadd dword [rdi + 0x530], eax
cmp eax, 0x8001
je 0x1000c09f0
lea rcx, [rdi + 0x508]
call fcn.1000931d0
lea rcx, [rdi + 0x4e0]
call fcn.1000931d0
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop r14
ret