joyce8/EMBER2024-capa huggingface dataset:
Function at 0x6d6c12bd
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
mov edi, dword [ebp + 0xc]
mov ecx, ebx
push edi
movzx eax, byte [edi]
mov esi, dword [eax*4 + 0x6d7b2c14]
call fcn.6d712e3b
push edi
mov dword [ebp - 4], eax
call fcn.6d660a54
mov dword [ebp + 0xc], eax
mov eax, dword [ebp + 0x18]
cmp esi, 0xb5
pop ecx
mov dword [eax], 1
jg 0x6d6c1391
cmp esi, 0xb2
jge 0x6d6c13c9
cmp esi, 0x53
jg 0x6d6c1346
je 0x6d6c13c9
cmp esi, 0x12
je 0x6d6c1340
jle 0x6d6c1366
cmp esi, 0x14
jg 0x6d6c1366
mov ax, word [edi + 1]
mov dword [ebp + 8], eax
mov ax, word [ebp + 8]
xchg ah, al
movzx eax, ax
push eax
push ebx
call fcn.6d6c1534
pop ecx
mov esi, eax
pop ecx
jmp 0x6d6c136d
movzx eax, byte [edi + 1]
jmp 0x6d6c1333
cmp esi, 0x94
jl 0x6d6c1366
cmp esi, 0xa7
jle 0x6d6c13c9
cmp esi, 0xa9
jle 0x6d6c1366
cmp esi, 0xab
jle 0x6d6c13c9
mov esi, dword [esi*4 + 0x6d7b334c]
cmp dword [ebp + 0x14], 0
lea eax, [esi - 4]
je 0x6d6c1499
cmp eax, 0xa
ja case.default.0x6d6c1383
jmp dword [eax*4 + 0x6d6c14dc]
xor eax, eax
jmp 0x6d6c148e
cmp esi, 0xb6
jl 0x6d6c1366
cmp esi, 0xb9
jle 0x6d6c13e2
cmp esi, 0xbf
je 0x6d6c13d5
cmp esi, 0xc5
jle 0x6d6c1366
cmp esi, 0xc8
jle 0x6d6c13c9
cmp esi, 0xe2
jle 0x6d6c1366
cmp esi, 0xe4
jg 0x6d6c1366
and dword [eax], 0
push 0
push 8
jmp 0x6d6c1492
and dword [eax], 0
mov eax, dword [0x6d7bd008]
jmp 0x6d6c14d7
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, eax
test ebx, ebx
mov eax, dword [esi + 0x8c]
mov dword [ebp - 0x14], eax
mov ecx, dword [eax + 4]
mov dword [ebp - 0x10], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0xc], ecx
mov eax, dword [eax + 0xc]
mov dword [ebp - 8], eax
je 0x6d6c141d
mov ecx, dword [esi + 0x90]
push ebx
call fcn.6d67a638
mov ebx, eax
push 8
call fcn.6d735879
test eax, eax
pop ecx
je 0x6d6c1433
mov ecx, dword [ebp - 4]
mov dword [eax], ebx
mov dword [eax + 4], ecx
jmp 0x6d6c1435
xor eax, eax
push esi
mov ecx, eax
call fcn.6d64d53a
cmp dword [ebp + 0x14], 0
mov esi, eax
jne 0x6d6c145e
movzx ecx, word [edi + 1]
mov eax, dword [ebp + 8]
push dword [ebp + 0x10]
inc ecx
mov eax, dword [eax + 0xc]
shl ecx, 4
add ecx, dword [eax + 0x10]
call fcn.6d6c168f
lea ecx, [ebp - 0x14]
call fcn.6d6a63ec
jmp 0x6d6c136d
push 1
jmp 0x6d6c148d
push 2
jmp 0x6d6c148d
push 3
jmp 0x6d6c148d
push 4
jmp 0x6d6c148d
push 5
jmp 0x6d6c148d
push 6
jmp 0x6d6c148d
push 8
jmp 0x6d6c148d
push 7
jmp 0x6d6c148d
push 0xa
pop eax
push dword [ebp + 0xc]
push eax
call fcn.6d6c1280
jmp 0x6d6c14d5
cmp eax, 0xa
ja case.default.0x6d6c149e
jmp dword [eax*4 + 0x6d6c1508]
xor eax, eax
jmp 0x6d6c14cc
push 1
jmp 0x6d6c14cb
push 2
jmp 0x6d6c14cb
push 3
jmp 0x6d6c14cb
push 4
jmp 0x6d6c14cb
push 5
jmp 0x6d6c14cb
push 6
jmp 0x6d6c14cb
push 8
jmp 0x6d6c14cb
push 7
jmp 0x6d6c14cb
push 0xa
pop eax
push dword [ebp + 0xc]
push eax
call fcn.6d6c1243
pop ecx
pop ecx
pop edi
pop esi
pop ebx
leave
ret
Function at 0x6d6c32d2
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
push ebx
mov ebx, dword [ebp + 8]
push edi
xor edi, edi
mov eax, dword [ebx]
cmp dword [eax + 0x3c], edi
jne 0x6d6c3429
cmp word [eax + 0x1e], 0xd
ja 0x6d6c340f
mov ecx, dword [0x6d7bdb9c]
mov dword [ebp - 4], ecx
call fcn.6d714b1e
call fcn.6d6c31d7
push ebx
lea ecx, [ebp - 0x44]
call fcn.6d6a86b9
mov ecx, eax
call fcn.6d6a8832
mov dword [ebp - 0xc], eax
mov eax, dword [0x6d7bd040]
mov dword [ebp - 8], edx
mov ecx, dword [eax + 8]
mov eax, dword [eax]
cmp eax, edi
jle 0x6d6c3343
mov edx, dword [ecx]
cmp edx, dword [ebp - 0xc]
jne 0x6d6c333b
mov edx, dword [ecx + 4]
cmp edx, dword [ebp - 8]
je 0x6d6c3346
inc edi
add ecx, 8
cmp edi, eax
jl 0x6d6c332c
or edi, 0xffffffff
test edi, edi
jge 0x6d6c3403
push esi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
push eax
lea ecx, [ebp - 0x1c]
call fcn.6d64bc19
mov eax, dword [0x6d7bd048]
push 0x64
lea esi, [eax + 0xf]
and esi, 0xfffffff0
sub esi, eax
call fcn.6d735879
test eax, eax
pop ecx
je 0x6d6c3399
mov ecx, 0x400
sub ecx, esi
push ecx
mov ecx, dword [0x6d7bd048]
add ecx, esi
push ecx
mov ecx, eax
call fcn.6d69098e
mov esi, eax
jmp 0x6d6c339b
xor esi, esi
push dword [ebp - 8]
lea ecx, [ebp - 0x44]
push dword [ebp - 0xc]
push esi
push ebx
call fcn.6d6c342d
mov ecx, eax
call fcn.6d6c1844
push esi
call fcn.6d6c3279
mov ebx, eax
pop ecx
test ebx, ebx
je 0x6d6c33f7
push dword [ebp - 8]
mov ecx, dword [0x6d7bd040]
push dword [ebp - 0xc]
call fcn.6d6c351f
mov esi, dword [0x6d7bd044]
mov eax, dword [esi]
cmp eax, dword [esi + 4]
jne 0x6d6c33e5
push eax
mov ecx, esi
call fcn.6d6b56d9
mov eax, dword [esi]
mov ecx, dword [esi + 8]
mov dword [ecx + eax*4], ebx
inc dword [esi]
mov eax, dword [0x6d7bd040]
mov edi, dword [eax]
dec edi
lea ecx, [ebp - 0x1c]
call fcn.6d6a63ec
mov ebx, dword [ebp + 8]
pop esi
mov ecx, dword [ebp - 4]
call fcn.6d715a3f
test edi, edi
jge 0x6d6c3417
push dword [0x6d7b5ca8]
jmp 0x6d6c3422
mov eax, dword [0x6d7bd044]
mov eax, dword [eax + 8]
push dword [eax + edi*4]
mov ecx, dword [ebx]
call fcn.6d713354
pop edi
pop ebx
leave
ret
Function at 0x6d6c6414
Capabilities:
Get thread local storage value
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
cmp dword [0x6d7a23c4], 0xffffffff
push esi
je 0x6d6c6431
call fcn.6d754e1e
mov esi, eax
xor eax, eax
cmp esi, eax
jne 0x6d6c643a
push dword [ebp + 8]
call dword [sym.imp.MSVCRT.dll_exit]
cmp dword [0x6d7c3764], eax
je 0x6d6c6480
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], eax
mov eax, dword [esi]
mov ecx, esi
mov dword [ebp - 0x1c], sym.jvm.dll_const_VM_Exit::vftable
mov dword [ebp - 4], edi
call dword [eax + 0x10]
test eax, eax
je 0x6d6c646e
mov dword [esi + 0xe8], 6
lea eax, [ebp - 0x1c]
push eax
call fcn.6d76a82f
pop ecx
push edi
call dword [sym.imp.MSVCRT.dll_exit]
pop edi
push dword [ebp + 8]
call dword [sym.imp.MSVCRT.dll_exit]

Function at 0x6d6c84da
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
push edi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, dword [ebp + 0xc]
mov ebx, eax
test esi, esi
mov dword [ebp - 0x10], ebx
jne 0x6d6c8500
and dword [ebp + 0xc], esi
jmp 0x6d6c8512
mov ecx, dword [ebx + 0x90]
push 4
call fcn.6d645be3
mov dword [eax], esi
mov dword [ebp + 0xc], eax
push dword [ebp + 8]
call fcn.6d6c81d5
pop ecx
push eax
push ebx
lea ecx, [ebp - 4]
call fcn.6d645ee5
cmp dword [ebp - 4], 0
je 0x6d6c8611
mov eax, dword [ebp - 4]
push 0xc
mov esi, dword [eax]
call fcn.6d645c02
pop ecx
push dword [esi + eax*4]
lea ecx, [ebp - 8]
push ebx
call fcn.6d645ee5
mov eax, dword [ebp - 4]
push 0xc
mov esi, dword [eax]
call fcn.6d645c02
mov eax, dword [esi + eax*4 + 4]
xor edi, edi
cmp eax, edi
pop ecx
jne 0x6d6c8564
mov dword [ebp + 8], edi
jmp 0x6d6c8573
mov ecx, dword [ebx + 0x90]
push eax
call fcn.6d67a638
mov dword [ebp + 8], eax
mov ecx, dword [ebp - 8]
cmp ecx, edi
je 0x6d6c8611
cmp dword [ebp + 8], edi
je 0x6d6c8611
mov eax, dword [ecx]
mov eax, dword [eax + 8]
test eax, eax
mov dword [ebp - 0xc], eax
jle 0x6d6c85dc
jmp 0x6d6c8598
mov ecx, dword [ebp - 8]
test ecx, ecx
jne 0x6d6c85a0
xor esi, esi
jmp 0x6d6c85a2
mov esi, dword [ecx]
push 0xc
call fcn.6d645c02
add eax, edi
pop ecx
mov ebx, dword [esi + eax*4]
test ebx, ebx
je 0x6d6c861a
mov eax, dword [ebp + 8]
push 9
mov esi, dword [eax]
call fcn.6d645c02
lea eax, [edi + eax*2]
movzx eax, word [esi + eax*2]
push eax
push ebx
push dword [ebp + 0xc]
call fcn.6d6c82af
add esp, 0x10
inc edi
cmp edi, dword [ebp - 0xc]
jl 0x6d6c8595
mov ebx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
push 0xc
mov esi, dword [eax]
call fcn.6d645c02
mov esi, dword [esi + eax*4 + 8]
pop ecx
test esi, esi
jne 0x6d6c85f5
xor eax, eax
jmp 0x6d6c8604
mov ecx, dword [ebx + 0x90]
push 4
call fcn.6d645be3
mov dword [eax], esi
test eax, eax
mov dword [ebp - 4], eax
jne 0x6d6c852f
jmp 0x6d6c861a
push dword [ebp + 0xc]
call fcn.6d6c8401
pop ecx
pop edi
pop esi
pop ebx
leave
ret
Function at 0x6d6c8ace
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xbc
cmp dword [0x6d791da4], 0
je 0x6d6c8baf
mov eax, dword [ebp + 8]
test eax, eax
je 0x6d6c8aed
mov eax, dword [eax]
push ebx
push esi
push edi
push eax
call fcn.6d6c81d5
push 0xc
mov edi, eax
call fcn.6d645c02
mov esi, dword [edi + eax*4]
push 0xc
call fcn.6d645c02
mov eax, dword [edi + eax*4 + 4]
add esp, 0xc
mov dword [ebp - 4], eax
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ecx, dword [eax + 0x8c]
push 0
mov dword [ebp - 0x14], ecx
push eax
mov edx, dword [ecx + 4]
mov dword [ebp - 0x10], edx
mov edx, dword [ecx + 8]
mov dword [ebp - 0xc], edx
mov ecx, dword [ecx + 0xc]
mov dword [ebp - 8], ecx
lea ecx, [ebp - 0xbc]
call fcn.6d7624bf
mov ecx, dword [esi + 8]
mov eax, dword [0x6d791fe8]
cmp ecx, eax
mov dword [ebp + 8], ecx
jl 0x6d6c8b5a
mov dword [ebp + 8], eax
xor edi, edi
cmp dword [ebp - 0x2c], 2
je 0x6d6c8ba4
mov ebx, dword [ebp - 0x1c]
push 9
call fcn.6d645c02
mov ecx, dword [ebp - 4]
lea eax, [edi + eax*2]
push 0xc
mov word [ecx + eax*2], bx
mov ebx, dword [ebp - 0x20]
call fcn.6d645c02
add eax, edi
push ebx
lea eax, [esi + eax*4]
push eax
mov dword [eax], ebx
call fcn.6d645e38
add esp, 0x10
inc edi
cmp edi, dword [ebp + 8]
jge 0x6d6c8ba4
lea ecx, [ebp - 0xbc]
call fcn.6d7625ad
jmp 0x6d6c8b5c
lea ecx, [ebp - 0x14]
call fcn.6d6a63ec
pop edi
pop esi
pop ebx
leave
ret

Function at 0x6d6d1c93
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
call fcn.6d71d118
mov dword [ebp - 8], eax
mov edx, 0x6d7bd23c
mov eax, 1
mov ecx, eax
cmp dword [ebp - 8], 0
je 0x6d6d1cb3
lock xadd dword [edx], eax
xadd dword [edx], eax
add eax, ecx
push 1
pop edx
cmp eax, edx
jg 0x6d6d1ce5
mov eax, 1
mov ecx, 0x6d7bd238
xchg dword [ecx], eax
cmp eax, edx
jne 0x6d6d1ced
call fcn.6d71d118
mov dword [ebp + 8], eax
mov edx, 0x6d7bd23c
cmp dword [ebp + 8], 0
je 0x6d6d1ce3
lock dec dword [edx]
dec dword [edx]
or eax, 0xffffffff
jmp 0x6d6d1d7e
push ebx
lea eax, [ebp - 4]
push edi
push eax
push dword [ebp + 0x10]
mov dword [ebp - 4], edx
call fcn.6d7527ae
mov ebx, eax
xor edi, edi
pop ecx
cmp ebx, edi
pop ecx
jne 0x6d6d1d4f
push esi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ecx, dword [ebp + 0xc]
mov esi, eax
mov eax, dword [ebp + 8]
mov dword [eax], 0x6d797c38
lea eax, [esi + 0xc0]
mov dword [ecx], eax
call fcn.6d73619a
cmp dword [0x6d7bd6e0], edi
je 0x6d6d1d3f
push esi
call fcn.6d6fd552
pop ecx
push 4
push 6
push esi
call fcn.6d681d7e
add esp, 0xc
pop esi
jmp 0x6d6d1d7a
mov eax, dword [ebp + 8]
cmp dword [ebp - 4], edi
mov dword [0x6d7bd238], edi
mov dword [eax], edi
mov eax, dword [ebp + 0xc]
mov dword [eax], edi
je 0x6d6d1d7a
call fcn.6d71d118
mov dword [ebp + 8], eax
mov edx, 0x6d7bd23c
cmp dword [ebp + 8], 0
je 0x6d6d1d78
lock dec dword [edx]
dec dword [edx]
mov eax, ebx
pop edi
pop ebx
leave
ret 0xc
Function at 0x6d6dc915
Capabilities:
Get thread local storage value

Disassembly:
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x14]
mov esi, ecx
push edi
call fcn.6d6dc97e
and dword [esi + 0x14], 0
and dword [esi + 0x18], 0
mov eax, dword [edi + 0xc]
push dword [0x6d7a23c4]
mov ebp, dword [eax + 0x14]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test edi, edi
mov ebx, eax
jne 0x6d6dc949
xor eax, eax
jmp 0x6d6dc958
mov ecx, dword [ebx + 0x90]
push 4
call fcn.6d645be3
mov dword [eax], edi
test ebp, ebp
mov dword [esi + 0x14], eax
jne 0x6d6dc963
xor eax, eax
jmp 0x6d6dc972
mov ecx, dword [ebx + 0x90]
push 4
call fcn.6d645be3
mov dword [eax], ebp
mov dword [esi + 0x18], eax
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
ret 4

Function at 0x6d6dcefd
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x110
push ebx
push esi
push edi
push dword [ebp + 8]
call fcn.6d6aa75f
mov esi, eax
push 6
push esi
call fcn.6d681e40
add esp, 0xc
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
push eax
lea ecx, [ebp - 0x10]
call fcn.6d64bc19
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
test eax, eax
jne 0x6d6dcf40
xor ebx, ebx
jmp 0x6d6dcf4e
mov ecx, dword [esi + 0x90]
push eax
call fcn.6d67a638
mov ebx, eax
mov edi, dword [0x6d7b2ab0]
test edi, edi
je 0x6d6dcf72
push esi
push dword [edi + 4]
push dword [edi]
push ebx
call fcn.6d6dcff7
add esp, 0x10
cmp dword [esi + 4], 0
jne 0x6d6dcfd0
mov edi, dword [edi + 8]
jmp 0x6d6dcf54
push dword [0x6d792120]
lea eax, [ebp - 0x110]
push 0x6d7891c4
push 0x100
push eax
call sym.jvm.dll_jio_snprintf
lea eax, [ebp - 0x110]
push esi
push eax
push str.sun.nio.MaxDirectMemorySize
push ebx
call fcn.6d6dcff7
xor edi, edi
add esp, 0x20
cmp dword [esi + 4], edi
jne 0x6d6dcfd0
cmp byte [str.HotSpot_Client_Compiler], 0
je 0x6d6dcfd0
cmp dword [0x6d785438], edi
je 0x6d6dcfd0
push esi
push str.HotSpot_Client_Compiler
push str.sun.management.compiler
push ebx
call fcn.6d6dcff7
add esp, 0x10
lea ecx, [ebp - 0x10]
call fcn.6d6a63ec
mov ecx, dword [esi + 0x2c]
call fcn.6d67a7cf
push 4
push 6
push esi
call fcn.6d681d7e
mov eax, dword [ebp + 0xc]
add esp, 0xc
pop edi
pop esi
pop ebx
leave
ret 8

Function at 0x6d6dd099
Capabilities:
Get thread local storage value

Disassembly:
push esi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, eax
push 6
push esi
call fcn.6d681e40
cmp dword [0x6d7bd238], 0
pop ecx
pop ecx
je 0x6d6dd0c7
cmp dword [esp + 8], 0
jne 0x6d6dd0c7
call fcn.6d75928b
push esi
call fcn.6d6c613b
push dword [esp + 0xc]
call fcn.6d6c6414
pop ecx
pop ecx
mov ecx, dword [esi + 0x2c]
call fcn.6d67a7cf
push 4
push 6
push esi
call fcn.6d681d7e
add esp, 0xc
pop esi
ret 4

Function at 0x6d6dd0f1
Capabilities:
Get thread local storage value

Disassembly:
push esi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, eax
push 6
push esi
call fcn.6d681e40
push esi
call fcn.6d6c613b
push dword [esp + 0x14]
call fcn.6d6c6414
mov ecx, dword [esi + 0x2c]
add esp, 0x10
call fcn.6d67a7cf
push 4
push 6
push esi
call fcn.6d681d7e
add esp, 0xc
pop esi
ret 4
Function at 0x6d6dd14e
Capabilities:
Get thread local storage value

Disassembly:
push esi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, eax
push 6
push esi
call fcn.6d681e40
cmp dword [0x6d7b5b2c], 0
pop ecx
pop ecx
jne 0x6d6dd17d
mov ecx, dword [0x6d7c1ef4]
push 0
mov eax, dword [ecx]
call dword [eax + 0x74]
mov ecx, dword [esi + 0x2c]
call fcn.6d67a7cf
push 4
push 6
push esi
call fcn.6d681d7e
add esp, 0xc
pop esi
ret

Function at 0x6d6dd1b0
Capabilities:
Get thread local storage value

Disassembly:
push ebx
push esi
push edi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, eax
push 6
push esi
call fcn.6d681e40
pop ecx
pop ecx
mov ecx, dword [0x6d7c1ef4]
mov eax, dword [ecx]
call dword [eax + 0x24]
mov ecx, dword [esi + 0x2c]
mov edi, eax
xor ebx, ebx
call fcn.6d67a7cf
push 4
push 6
push esi
call fcn.6d681d7e
add esp, 0xc
mov eax, edi
mov edx, ebx
pop edi
pop esi
pop ebx
ret

Function at 0x6d6dd1f7
Capabilities:
Get thread local storage value

Disassembly:
push ebx
push esi
push edi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov edi, eax
push 6
push edi
call fcn.6d681e40
mov esi, dword [0x6d7c1ef4]
pop ecx
pop ecx
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x28]
mov ebx, eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x24]
mov ecx, dword [edi + 0x2c]
mov esi, eax
sub esi, ebx
xor ebx, ebx
call fcn.6d67a7cf
push 4
push 6
push edi
call fcn.6d681d7e
add esp, 0xc
mov eax, esi
mov edx, ebx
pop edi
pop esi
pop ebx
ret

Function at 0x6d6dd24b
Capabilities:
Get thread local storage value

Disassembly:
push ebx
push esi
push edi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, eax
push 6
push esi
call fcn.6d681e40
pop ecx
pop ecx
mov ecx, dword [0x6d7c1ef4]
mov eax, dword [ecx]
call dword [eax + 0x34]
mov ecx, dword [esi + 0x2c]
mov edi, eax
xor ebx, ebx
call fcn.6d67a7cf
push 4
push 6
push esi
call fcn.6d681d7e
add esp, 0xc
mov eax, edi
mov edx, ebx
pop edi
pop esi
pop ebx
ret

Function at 0x6d6dd292
Capabilities:
Get thread local storage value

Disassembly:
push esi
push edi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, eax
push 6
push esi
call fcn.6d681e40
pop ecx
pop ecx
call fcn.6d71d170
mov ecx, dword [esi + 0x2c]
mov edi, eax
call fcn.6d67a7cf
push 4
push 6
push esi
call fcn.6d681d7e
add esp, 0xc
mov eax, edi
pop edi
pop esi
ret
Function at 0x6d6dde77
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
push edi
push dword [ebp + 8]
call fcn.6d6aa75f
mov ebx, eax
push 6
push ebx
call fcn.6d681e40
mov edx, dword [ebp + 0xc]
xor esi, esi
add esp, 0xc
cmp edx, esi
je 0x6d6ddfc0
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp ecx, 0xffff
jg 0x6d6ddfc0
mov edi, edx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ebx
push ecx
lea eax, [ebp + 0xc]
push edx
push eax
call fcn.6d6c3549
mov eax, dword [eax]
add esp, 0x10
cmp dword [ebx + 4], esi
mov dword [ebp + 0xc], eax
jne 0x6d6ddfda
mov eax, dword [ebp + 0x14]
cmp eax, esi
je 0x6d6ddeee
mov eax, dword [eax]
cmp eax, esi
jne 0x6d6ddef2
xor eax, eax
jmp 0x6d6ddef9
push eax
call fcn.6d6c7ab5
pop ecx
test eax, eax
je 0x6d6ddf16
lea esi, [eax + 8]
mov ecx, esi
mov eax, dword [esi]
call dword [eax + 0x38]
mov edi, eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x34]
test edi, edi
mov esi, eax
jne 0x6d6ddf1a
xor edi, edi
jmp 0x6d6ddf2b
mov ecx, dword [ebx + 0x90]
push 4
call fcn.6d645be3
mov dword [eax], edi
mov edi, eax
test esi, esi
jne 0x6d6ddf33
xor eax, eax
jmp 0x6d6ddf42
mov ecx, dword [ebx + 0x90]
push 4
call fcn.6d645be3
mov dword [eax], esi
push ebx
push 1
push eax
push edi
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.6d6e4811
add esp, 0x1c
cmp dword [0x6d7b5a94], 0
mov esi, eax
je 0x6d6ddfda
test esi, esi
je 0x6d6ddfda
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
push eax
lea ecx, [ebp - 0x10]
call fcn.6d64bc19
mov eax, dword [ebp + 0x14]
push dword [eax]
call fcn.6d6c7ab5
pop ecx
lea ecx, [eax + 8]
call fcn.6d7085ea
push dword [esi]
mov edi, eax
call fcn.6d6c7ab5
pop ecx
lea ecx, [eax + 8]
call fcn.6d7085ea
push eax
push edi
push str.RESOLVE__s__s__verification__n
push dword [0x6d7bf31c]
call fcn.6d71fd90
add esp, 0x10
lea ecx, [ebp - 0x10]
call fcn.6d6a63ec
jmp 0x6d6ddfda
push edx
push dword [0x6d7c3168]
push 0x27c
push str.C:_BUILD_AREA_jdk1.5.0_13_hotspot_src_share_vmprimsjvm.cpp
push ebx
call fcn.6d6a8f0c
add esp, 0x14
mov ecx, dword [ebx + 0x2c]
call fcn.6d67a7cf
push 4
push 6
push ebx
call fcn.6d681d7e
add esp, 0xc
mov eax, esi
pop edi
pop esi
pop ebx
leave
ret 0x10
Function at 0x6d6e398a
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x800
push ebx
push esi
push edi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, eax
push 6
push esi
call fcn.6d681e40
mov edi, 0x400
lea eax, [ebp - 0x400]
push edi
push eax
push dword [ebp + 8]
call fcn.6d68f174
mov ebx, eax
add esp, 0x14
test ebx, ebx
jne 0x6d6e3a2d
lea eax, [ebp - 0x400]
push eax
lea eax, [ebp - 0x800]
push dword [ebp + 8]
push str._s:__s
push edi
push eax
call sym.jvm.dll_jio_snprintf
lea eax, [ebp - 0x800]
push 1
push eax
lea eax, [ebp + 8]
push dword [0x6d7c3178]
push esi
push eax
call fcn.6d6a9240
push dword [eax]
push 0xcac
push str.C:_BUILD_AREA_jdk1.5.0_13_hotspot_src_share_vmprimsjvm.cpp
push esi
call fcn.6d6a8e78
mov ecx, dword [esi + 0x2c]
add esp, 0x38
call fcn.6d67a7cf
push 4
push 6
push esi
call fcn.6d681d7e
add esp, 0xc
xor eax, eax
jmp 0x6d6e3a44
mov ecx, dword [esi + 0x2c]
call fcn.6d67a7cf
push 4
push 6
push esi
call fcn.6d681d7e
add esp, 0xc
mov eax, ebx
pop edi
pop esi
pop ebx
leave
ret 4

Function at 0x6d6e5860
Capabilities:
Get thread local storage value

Disassembly:
push esi
push edi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, eax
push 6
push esi
call fcn.6d681e40
push dword [esp + 0x14]
call fcn.6d70f5a5
mov ecx, dword [esi + 0x2c]
add esp, 0xc
mov edi, eax
call fcn.6d67a7cf
push 4
push 6
push esi
call fcn.6d681d7e
add esp, 0xc
mov eax, edi
pop edi
pop esi
ret 4
Function at 0x6d6e6409
Capabilities:
Get thread local storage value

Disassembly:
push esi
push edi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov edi, eax
push 6
push edi
call fcn.6d681e40
mov eax, dword [esp + 0x18]
pop ecx
cmp eax, 2
pop ecx
jne 0x6d6e6431
call fcn.6d71dda6
mov ecx, dword [esp + 0xc]
dec ecx
dec ecx
je 0x6d6e644a
sub ecx, 6
je 0x6d6e6453
sub ecx, 7
je 0x6d6e644a
sub ecx, 6
jne 0x6d6e6458
jmp 0x6d6e6453
cmp dword [0x6d7b5a60], 0
je 0x6d6e6458
or esi, 0xffffffff
jmp 0x6d6e6472
push eax
push dword [esp + 0x10]
call fcn.6d71ddc8
pop ecx
mov esi, eax
pop ecx
call fcn.6d71dda6
cmp esi, eax
jne 0x6d6e6472
push 2
pop esi
mov ecx, dword [edi + 0x2c]
call fcn.6d67a7cf
push 4
push 6
push edi
call fcn.6d681d7e
add esp, 0xc
mov eax, esi
pop edi
pop esi
ret 8

Function at 0x6d6e648e
Capabilities:
Get thread local storage value

Disassembly:
push ebx
push esi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, eax
push 6
push esi
call fcn.6d681e40
mov eax, dword [esp + 0x14]
xor ebx, ebx
cmp dword [0x6d7b5a60], ebx
pop ecx
pop ecx
je 0x6d6e64c5
cmp eax, 2
je 0x6d6e64ce
cmp eax, 0xf
je 0x6d6e64ce
cmp eax, 0x15
je 0x6d6e64ce
push eax
call fcn.6d71ddf9
pop ecx
mov bl, 1
mov ecx, dword [esi + 0x2c]
call fcn.6d67a7cf
push 4
push 6
push esi
call fcn.6d681d7e
add esp, 0xc
mov al, bl
pop esi
pop ebx
ret 4

Function at 0x6d6e64ea
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
push 6
push ebx
call fcn.6d681e40
and dword [ebp - 4], 0
pop ecx
pop ecx
mov edi, 0x6d799028
mov eax, dword [edi]
mov esi, dword [ebp + 8]
mov dl, byte [esi]
mov cl, dl
cmp dl, byte [eax]
jne 0x6d6e6539
test cl, cl
je 0x6d6e6535
mov dl, byte [esi + 1]
mov cl, dl
cmp dl, byte [eax + 1]
jne 0x6d6e6539
inc esi
inc esi
inc eax
inc eax
test cl, cl
jne 0x6d6e6517
xor eax, eax
jmp 0x6d6e653e
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x6d6e6571
inc dword [ebp - 4]
add edi, 8
cmp edi, 0x6d799060
jb 0x6d6e6512
or esi, 0xffffffff
mov ecx, dword [ebx + 0x2c]
call fcn.6d67a7cf
push 4
push 6
push ebx
call fcn.6d681d7e
add esp, 0xc
mov eax, esi
pop edi
pop esi
pop ebx
leave
ret 4
mov eax, dword [ebp - 4]
mov esi, dword [eax*8 + 0x6d79902c]
jmp 0x6d6e6553
Function at 0x6d6eaeca
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, dword [eax + 0x150]
test esi, esi
je 0x6d6eaf02
push dword [ebp + 0x10]
lea ecx, [esi + 0x34]
push dword [ebp + 8]
call fcn.6d6eac8f
test eax, eax
je 0x6d6eaf02
mov ecx, dword [ebp + 0xc]
mov eax, dword [esi]
mov dword [ecx], eax
jmp 0x6d6eaf72
mov ebx, dword [0x6d7bdb88]
mov ecx, ebx
call fcn.6d714b1e
mov esi, dword [0x6d7bd838]
test esi, esi
je 0x6d6eaf77
mov eax, dword [esi]
and dword [ebp - 4], 0
lea ecx, [ebp - 4]
push ecx
push 1
push eax
call fcn.6d6fa98c
add esp, 0xc
test eax, eax
je 0x6d6eaf58
mov edi, dword [0x6d7bdb84]
mov ecx, edi
call fcn.6d714b1e
push dword [ebp + 0x10]
lea ecx, [esi + 0x34]
push dword [ebp + 8]
call fcn.6d6eac8f
test eax, eax
jne 0x6d6eaf5d
mov ecx, edi
call fcn.6d715a3f
mov esi, dword [esi + 0x2c]
jmp 0x6d6eaf15
mov ecx, dword [ebp + 0xc]
mov eax, dword [esi]
mov dword [ecx], eax
mov ecx, edi
call fcn.6d715a3f
mov ecx, ebx
call fcn.6d715a3f
push 1
pop eax
jmp 0x6d6eaf80
mov ecx, ebx
call fcn.6d715a3f
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret