joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400cd890
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r14
push r15
sub rsp, 0x80
mov rax, qword [0x1401970d0]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov rdi, r8
mov r14, rdx
mov rbp, rcx
mov rbx, qword [rdx]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x1400cd8e2
nop
cmp qword [rax], rbx
je 0x1400cda22
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x1400cd8d0
mov qword [rsp + 0x30], rdi
mov rdx, rdi
mov ecx, 0xa8
call fcn.1400762f0
mov rbx, rax
xor r15d, r15d
mov qword [rax + 0x20], r15
lea rax, [fcn.1400cdf30]
mov qword [rbx + 0x28], rax
mov qword [rbx], r15
mov qword [rbx + 8], r15
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], r15
mov dword [rbx + 0x30], r15d
mov rcx, qword [rdi]
mov qword [rbx + 0x38], rcx
movzx eax, byte [rdi + 8]
mov byte [rbx + 0x40], al
lea rdx, [rdi + 0x10]
lea rcx, [rbx + 0x48]
call fcn.1400850c0
mov qword [rbx + 0x88], r15
mov qword [rbx + 0x90], r15
mov rax, qword [rdi + 0x50]
mov qword [rbx + 0x88], rax
mov rax, qword [rdi + 0x58]
mov qword [rbx + 0x90], rax
mov qword [rdi + 0x50], r15
mov qword [rdi + 0x58], r15
movups xmm0, xmmword [rdi + 0x60]
movups xmmword [rbx + 0x98], xmm0
mov r8, rbx
mov rdx, r14
mov rcx, rbp
call fcn.14007a6f0
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x38], r15
test al, al
je 0x1400cda92
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rax
mov rax, qword [r14]
mov qword [rsp + 0x58], rax
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x58]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
nop
mov rsi, qword [rbp + 0x28]
mov qword [rsp + 0x20], rsi
mov rdi, qword [r14]
mov qword [rsp + 0x28], rdi
call fcn.14010c950
xor r9d, r9d
lea r8, [rsp + 0x48]
mov rdx, rbx
mov rcx, qword [rbp + 0x28]
call fcn.1400cdf30
nop
lea rcx, [rdi + 0x38]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rdi + 0x68]
test rcx, rcx
je 0x1400cda52
mov rax, qword [rdi + 0x80]
test rax, rax
je 0x1400cda3b
mov qword [rax + 0x20], rcx
jmp 0x1400cda3f
cmp qword [rax + 8], 0
je 0x1400cd8e2
mov rdx, rdi
mov rcx, rdi
call fcn.1400ae690
nop
jmp 0x1400cda92
mov qword [rdi + 0x78], rcx
mov rax, qword [rdi + 0x70]
mov qword [rdi + 0x80], rax
mov qword [rdi + 0x68], r15
mov qword [rdi + 0x70], r15
mov rbx, qword [rdi + 0x78]
test rbx, rbx
setne al
mov byte [rdi + 0x60], al
lea rcx, [rdi + 0x38]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test rbx, rbx
je 0x1400cda80
lock inc dword [rsi + 0x30]
mov rdx, qword [rsp + 0x28]
mov rcx, rsi
call fcn.140076e20
nop
mov rdx, qword [rsp + 0x68]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
nop
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.14010a950
mov rbx, qword [rsp + 0xc8]
add rsp, 0x80
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
Function at 0x1400cdac0
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x80
mov rax, qword [0x1401970d0]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov rdi, r8
mov r14, rdx
mov r15, rcx
mov rbx, qword [rdx]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x1400cdb12
nop
cmp qword [rax], rbx
je 0x1400cdc14
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x1400cdb00
mov qword [rsp + 0x30], rdi
mov rdx, rdi
mov ecx, 0x88
call fcn.1400762f0
mov rsi, rax
xor r12d, r12d
mov qword [rax + 0x20], r12
lea rax, [fcn.1400cdd80]
mov qword [rsi + 0x28], rax
mov qword [rsi], r12
mov qword [rsi + 8], r12
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], r12
mov dword [rsi + 0x30], r12d
mov rdx, rdi
lea rcx, [rsi + 0x38]
call fcn.1400850c0
movups xmm0, xmmword [rdi + 0x40]
movups xmmword [rsi + 0x78], xmm0
mov r8, rsi
mov rdx, r14
mov rcx, r15
call fcn.14007a6f0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r12
test al, al
je 0x1400cdc84
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rax
mov rax, qword [r14]
mov qword [rsp + 0x58], rax
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x58]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
nop
mov rbp, qword [r15 + 0x28]
mov qword [rsp + 0x20], rbp
mov rdi, qword [r14]
mov qword [rsp + 0x28], rdi
call fcn.14010c950
xor r9d, r9d
lea r8, [rsp + 0x48]
mov rdx, rsi
mov rcx, qword [r15 + 0x28]
call fcn.1400cdd80
nop
lea rcx, [rdi + 0x38]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rdi + 0x68]
test rcx, rcx
je 0x1400cdc44
mov rax, qword [rdi + 0x80]
test rax, rax
je 0x1400cdc2d
mov qword [rax + 0x20], rcx
jmp 0x1400cdc31
cmp qword [rax + 8], 0
je 0x1400cdb12
mov rdx, rdi
mov rcx, rdi
call fcn.1400d2840
nop
jmp 0x1400cdc8e
mov qword [rdi + 0x78], rcx
mov rax, qword [rdi + 0x70]
mov qword [rdi + 0x80], rax
mov qword [rdi + 0x68], r12
mov qword [rdi + 0x70], r12
mov rbx, qword [rdi + 0x78]
test rbx, rbx
setne al
mov byte [rdi + 0x60], al
lea rcx, [rdi + 0x38]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test rbx, rbx
je 0x1400cdc72
lock inc dword [rbp + 0x30]
mov rdx, qword [rsp + 0x28]
mov rcx, rbp
call fcn.140076e20
nop
mov rdx, qword [rsp + 0x68]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
nop
lea rcx, [rsp + 0x30]
call fcn.1400cf020
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.14010a950
add rsp, 0x80
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
Function at 0x1400d0320
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r14
push r15
sub rsp, 0x80
mov rax, qword [0x1401970d0]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov rdi, r8
mov r14, rdx
mov rbp, rcx
mov rbx, qword [rdx]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x1400d0372
nop
cmp qword [rax], rbx
je 0x1400d046c
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x1400d0360
mov qword [rsp + 0x30], rdi
mov rdx, rdi
mov ecx, 0x108
call fcn.1400762f0
mov rbx, rax
xor r15d, r15d
mov qword [rax + 0x20], r15
lea rax, [fcn.1400d0b90]
mov qword [rbx + 0x28], rax
mov qword [rbx], r15
mov qword [rbx + 8], r15
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], r15
mov dword [rbx + 0x30], r15d
lea rcx, [rbx + 0x38]
mov rdx, rdi
call fcn.1400d0ed0
mov r8, rbx
mov rdx, r14
mov rcx, rbp
call fcn.14007a6f0
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x38], r15
test al, al
je 0x1400d04dc
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rax
mov rax, qword [r14]
mov qword [rsp + 0x58], rax
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x58]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
nop
mov rsi, qword [rbp + 0x28]
mov qword [rsp + 0x20], rsi
mov rdi, qword [r14]
mov qword [rsp + 0x28], rdi
call fcn.14010c950
xor r9d, r9d
lea r8, [rsp + 0x48]
mov rdx, rbx
mov rcx, qword [rbp + 0x28]
call fcn.1400d0b90
nop
lea rcx, [rdi + 0x38]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rdi + 0x68]
test rcx, rcx
je 0x1400d049c
mov rax, qword [rdi + 0x80]
test rax, rax
je 0x1400d0485
mov qword [rax + 0x20], rcx
jmp 0x1400d0489
cmp qword [rax + 8], 0
je 0x1400d0372
mov rdx, rdi
mov rcx, rdi
call fcn.1400d2880
nop
jmp 0x1400d04e6
mov qword [rdi + 0x78], rcx
mov rax, qword [rdi + 0x70]
mov qword [rdi + 0x80], rax
mov qword [rdi + 0x68], r15
mov qword [rdi + 0x70], r15
mov rbx, qword [rdi + 0x78]
test rbx, rbx
setne al
mov byte [rdi + 0x60], al
lea rcx, [rdi + 0x38]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test rbx, rbx
je 0x1400d04ca
lock inc dword [rsi + 0x30]
mov rdx, qword [rsp + 0x28]
mov rcx, rsi
call fcn.140076e20
nop
mov rdx, qword [rsp + 0x68]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
nop
lea rcx, [rsp + 0x30]
call fcn.1400d0d90
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.14010a950
mov rbx, qword [rsp + 0xc8]
add rsp, 0x80
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
Function at 0x1400d2930
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r14
push r15
sub rsp, 0x80
mov rax, qword [0x1401970d0]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov rdi, r8
mov r14, rdx
mov rbp, rcx
mov rbx, qword [rdx]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x1400d2982
nop
cmp qword [rax], rbx
je 0x1400d2a7c
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x1400d2970
mov qword [rsp + 0x30], rdi
mov rdx, rdi
mov ecx, 0x150
call fcn.1400762f0
mov rbx, rax
xor r15d, r15d
mov qword [rax + 0x20], r15
lea rax, [fcn.1400d3ac0]
mov qword [rbx + 0x28], rax
mov qword [rbx], r15
mov qword [rbx + 8], r15
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], r15
mov dword [rbx + 0x30], r15d
lea rcx, [rbx + 0x38]
mov rdx, rdi
call fcn.1400d4450
mov r8, rbx
mov rdx, r14
mov rcx, rbp
call fcn.14007a6f0
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x38], r15
test al, al
je 0x1400d2aec
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rax
mov rax, qword [r14]
mov qword [rsp + 0x58], rax
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x58]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
nop
mov rsi, qword [rbp + 0x28]
mov qword [rsp + 0x20], rsi
mov rdi, qword [r14]
mov qword [rsp + 0x28], rdi
call fcn.14010c950
xor r9d, r9d
lea r8, [rsp + 0x48]
mov rdx, rbx
mov rcx, qword [rbp + 0x28]
call fcn.1400d3ac0
nop
lea rcx, [rdi + 0x38]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rdi + 0x68]
test rcx, rcx
je 0x1400d2aac
mov rax, qword [rdi + 0x80]
test rax, rax
je 0x1400d2a95
mov qword [rax + 0x20], rcx
jmp 0x1400d2a99
cmp qword [rax + 8], 0
je 0x1400d2982
mov rdx, rdi
mov rcx, rdi
call fcn.1400d4a40
nop
jmp 0x1400d2aec
mov qword [rdi + 0x78], rcx
mov rax, qword [rdi + 0x70]
mov qword [rdi + 0x80], rax
mov qword [rdi + 0x68], r15
mov qword [rdi + 0x70], r15
mov rbx, qword [rdi + 0x78]
test rbx, rbx
setne al
mov byte [rdi + 0x60], al
lea rcx, [rdi + 0x38]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test rbx, rbx
je 0x1400d2ada
lock inc dword [rsi + 0x30]
mov rdx, qword [rsp + 0x28]
mov rcx, rsi
call fcn.140076e20
nop
mov rdx, qword [rsp + 0x68]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
nop
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.14010a950
mov rbx, qword [rsp + 0xc8]
add rsp, 0x80
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
Function at 0x1400d2b10
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r14
push r15
sub rsp, 0x80
mov rax, qword [0x1401970d0]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov rdi, r8
mov r14, rdx
mov rbp, rcx
mov rbx, qword [rdx]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x1400d2b62
nop
cmp qword [rax], rbx
je 0x1400d2c5c
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x1400d2b50
mov qword [rsp + 0x30], rdi
mov rdx, rdi
mov ecx, 0x158
call fcn.1400762f0
mov rbx, rax
xor r15d, r15d
mov qword [rax + 0x20], r15
lea rax, [fcn.1400d38c0]
mov qword [rbx + 0x28], rax
mov qword [rbx], r15
mov qword [rbx + 8], r15
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], r15
mov dword [rbx + 0x30], r15d
lea rcx, [rbx + 0x38]
mov rdx, rdi
call fcn.1400d43c0
mov r8, rbx
mov rdx, r14
mov rcx, rbp
call fcn.14007a6f0
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x38], r15
test al, al
je 0x1400d2ccc
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rax
mov rax, qword [r14]
mov qword [rsp + 0x58], rax
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x58]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
nop
mov rsi, qword [rbp + 0x28]
mov qword [rsp + 0x20], rsi
mov rdi, qword [r14]
mov qword [rsp + 0x28], rdi
call fcn.14010c950
xor r9d, r9d
lea r8, [rsp + 0x48]
mov rdx, rbx
mov rcx, qword [rbp + 0x28]
call fcn.1400d38c0
nop
lea rcx, [rdi + 0x38]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rdi + 0x68]
test rcx, rcx
je 0x1400d2c8c
mov rax, qword [rdi + 0x80]
test rax, rax
je 0x1400d2c75
mov qword [rax + 0x20], rcx
jmp 0x1400d2c79
cmp qword [rax + 8], 0
je 0x1400d2b62
mov rdx, rdi
mov rcx, rdi
call fcn.1400d4a80
nop
jmp 0x1400d2ccc
mov qword [rdi + 0x78], rcx
mov rax, qword [rdi + 0x70]
mov qword [rdi + 0x80], rax
mov qword [rdi + 0x68], r15
mov qword [rdi + 0x70], r15
mov rbx, qword [rdi + 0x78]
test rbx, rbx
setne al
mov byte [rdi + 0x60], al
lea rcx, [rdi + 0x38]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test rbx, rbx
je 0x1400d2cba
lock inc dword [rsi + 0x30]
mov rdx, qword [rsp + 0x28]
mov rcx, rsi
call fcn.140076e20
nop
mov rdx, qword [rsp + 0x68]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
nop
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.14010a950
mov rbx, qword [rsp + 0xc8]
add rsp, 0x80
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
Function at 0x1400d2cf0
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x80
mov rax, qword [0x1401970d0]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov rdi, r8
mov r14, rdx
mov r15, rcx
mov rbx, qword [rdx]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x1400d2d42
nop
cmp qword [rax], rbx
je 0x1400d2e49
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x1400d2d30
mov qword [rsp + 0x30], rdi
mov rdx, rdi
mov ecx, 0x110
call fcn.1400762f0
mov rsi, rax
xor r12d, r12d
mov qword [rax + 0x20], r12
lea rax, [fcn.1400d3690]
mov qword [rsi + 0x28], rax
mov qword [rsi], r12
mov qword [rsi + 8], r12
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], r12
mov dword [rsi + 0x30], r12d
mov rdx, rdi
lea rcx, [rsi + 0x38]
call fcn.1400850c0
lea rdx, [rdi + 0x40]
lea rcx, [rsi + 0x78]
call fcn.1400d27d0
mov r8, rsi
mov rdx, r14
mov rcx, r15
call fcn.14007a6f0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r12
test al, al
je 0x1400d2eb9
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rax
mov rax, qword [r14]
mov qword [rsp + 0x58], rax
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x58]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
nop
mov rbp, qword [r15 + 0x28]
mov qword [rsp + 0x20], rbp
mov rdi, qword [r14]
mov qword [rsp + 0x28], rdi
call fcn.14010c950
xor r9d, r9d
lea r8, [rsp + 0x48]
mov rdx, rsi
mov rcx, qword [r15 + 0x28]
call fcn.1400d3690
nop
lea rcx, [rdi + 0x38]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rdi + 0x68]
test rcx, rcx
je 0x1400d2e79
mov rax, qword [rdi + 0x80]
test rax, rax
je 0x1400d2e62
mov qword [rax + 0x20], rcx
jmp 0x1400d2e66
cmp qword [rax + 8], 0
je 0x1400d2d42
mov rdx, rdi
mov rcx, rdi
call fcn.1400d4ac0
nop
jmp 0x1400d2ec3
mov qword [rdi + 0x78], rcx
mov rax, qword [rdi + 0x70]
mov qword [rdi + 0x80], rax
mov qword [rdi + 0x68], r12
mov qword [rdi + 0x70], r12
mov rbx, qword [rdi + 0x78]
test rbx, rbx
setne al
mov byte [rdi + 0x60], al
lea rcx, [rdi + 0x38]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test rbx, rbx
je 0x1400d2ea7
lock inc dword [rbp + 0x30]
mov rdx, qword [rsp + 0x28]
mov rcx, rbp
call fcn.140076e20
nop
mov rdx, qword [rsp + 0x68]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
nop
lea rcx, [rsp + 0x30]
call fcn.1400d4320
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.14010a950
add rsp, 0x80
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
Function at 0x1400d2ef0
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x80
mov rax, qword [0x1401970d0]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov rdi, r8
mov r14, rdx
mov r15, rcx
mov rbx, qword [rdx]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x1400d2f42
nop
cmp qword [rax], rbx
je 0x1400d3049
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x1400d2f30
mov qword [rsp + 0x30], rdi
mov rdx, rdi
mov ecx, pe_nt_image_headers64
call fcn.1400762f0
mov rsi, rax
xor r12d, r12d
mov qword [rax + 0x20], r12
lea rax, [fcn.1400d34b0]
mov qword [rsi + 0x28], rax
mov qword [rsi], r12
mov qword [rsi + 8], r12
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], r12
mov dword [rsi + 0x30], r12d
mov rdx, rdi
lea rcx, [rsi + 0x38]
call fcn.1400850c0
lea rdx, [rdi + 0x40]
lea rcx, [rsi + 0x78]
call fcn.1400d2750
mov r8, rsi
mov rdx, r14
mov rcx, r15
call fcn.14007a6f0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r12
test al, al
je 0x1400d30b9
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rax
mov rax, qword [r14]
mov qword [rsp + 0x58], rax
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x58]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
nop
mov rbp, qword [r15 + 0x28]
mov qword [rsp + 0x20], rbp
mov rdi, qword [r14]
mov qword [rsp + 0x28], rdi
call fcn.14010c950
xor r9d, r9d
lea r8, [rsp + 0x48]
mov rdx, rsi
mov rcx, qword [r15 + 0x28]
call fcn.1400d34b0
nop
lea rcx, [rdi + 0x38]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rdi + 0x68]
test rcx, rcx
je 0x1400d3079
mov rax, qword [rdi + 0x80]
test rax, rax
je 0x1400d3062
mov qword [rax + 0x20], rcx
jmp 0x1400d3066
cmp qword [rax + 8], 0
je 0x1400d2f42
mov rdx, rdi
mov rcx, rdi
call fcn.1400d4b00
nop
jmp 0x1400d30c3
mov qword [rdi + 0x78], rcx
mov rax, qword [rdi + 0x70]
mov qword [rdi + 0x80], rax
mov qword [rdi + 0x68], r12
mov qword [rdi + 0x70], r12
mov rbx, qword [rdi + 0x78]
test rbx, rbx
setne al
mov byte [rdi + 0x60], al
lea rcx, [rdi + 0x38]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test rbx, rbx
je 0x1400d30a7
lock inc dword [rbp + 0x30]
mov rdx, qword [rsp + 0x28]
mov rcx, rbp
call fcn.140076e20
nop
mov rdx, qword [rsp + 0x68]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
nop
lea rcx, [rsp + 0x30]
call fcn.1400d4280
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.14010a950
add rsp, 0x80
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
Function at 0x1400d4630
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x80
mov rax, qword [0x1401970d0]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov rbx, r8
mov r14, rdx
mov r15, rcx
mov rdi, qword [rdx]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x1400d4682
nop
cmp qword [rax], rdi
je 0x1400d47a1
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x1400d4670
mov qword [rsp + 0x30], rbx
mov rdx, rbx
mov ecx, 0xa0
call fcn.1400762f0
mov rsi, rax
xor r12d, r12d
mov qword [rax + 0x20], r12
lea rax, [fcn.1400d4850]
mov qword [rsi + 0x28], rax
mov qword [rsi], r12
mov qword [rsi + 8], r12
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], r12
mov dword [rsi + 0x30], r12d
mov rcx, qword [rbx]
mov qword [rsi + 0x38], rcx
movzx eax, byte [rbx + 8]
mov byte [rsi + 0x40], al
lea rdx, [rbx + 0x10]
lea rcx, [rsi + 0x48]
call fcn.1400850c0
mov rax, qword [rbx + 0x50]
mov qword [rsi + 0x88], rax
movups xmm0, xmmword [rbx + 0x58]
movups xmmword [rsi + 0x90], xmm0
mov r8, rsi
mov rdx, r14
mov rcx, r15
call fcn.14007a6f0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r12
test al, al
je 0x1400d4811
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rax
mov rax, qword [r14]
mov qword [rsp + 0x58], rax
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x58]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
nop
mov rbp, qword [r15 + 0x28]
mov qword [rsp + 0x20], rbp
mov rdi, qword [r14]
mov qword [rsp + 0x28], rdi
call fcn.14010c950
xor r9d, r9d
lea r8, [rsp + 0x48]
mov rdx, rsi
mov rcx, qword [r15 + 0x28]
call fcn.1400d4850
nop
lea rcx, [rdi + 0x38]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rdi + 0x68]
test rcx, rcx
je 0x1400d47d1
mov rax, qword [rdi + 0x80]
test rax, rax
je 0x1400d47ba
mov qword [rax + 0x20], rcx
jmp 0x1400d47be
cmp qword [rax + 8], 0
je 0x1400d4682
mov rdx, rbx
mov rcx, rbx
call fcn.1400cb570
nop
jmp 0x1400d481b
mov qword [rdi + 0x78], rcx
mov rax, qword [rdi + 0x70]
mov qword [rdi + 0x80], rax
mov qword [rdi + 0x68], r12
mov qword [rdi + 0x70], r12
mov rbx, qword [rdi + 0x78]
test rbx, rbx
setne al
mov byte [rdi + 0x60], al
lea rcx, [rdi + 0x38]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test rbx, rbx
je 0x1400d47ff
lock inc dword [rbp + 0x30]
mov rdx, qword [rsp + 0x28]
mov rcx, rbp
call fcn.140076e20
nop
mov rdx, qword [rsp + 0x68]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
nop
lea rcx, [rsp + 0x30]
call fcn.1400d49d0
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.14010a950
add rsp, 0x80
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret