joyce8/EMBER2024-capa huggingface dataset:
Function at 0x6d67f59d
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
push ebx
push esi
push edi
mov edi, ecx
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
push eax
lea ecx, [ebp - 0x2c]
call fcn.6d64bc19
mov esi, dword [edi + 8]
mov eax, esi
shl eax, 2
push eax
call fcn.6d735879
pop ecx
xor edx, edx
mov ebx, eax
mov ecx, dword [edi + 0x10]
mov ecx, dword [ecx + edx*4]
test ecx, ecx
je 0x6d67f5e9
mov dword [ebx], ecx
mov ecx, dword [edi + 0x10]
add ebx, 4
and dword [ecx + edx*4], 0
dec dword [edi + 8]
inc edx
cmp edx, dword [edi + 0xc]
jbe 0x6d67f5d0
mov edx, dword [edi]
and dword [edi + 0x14], 0
test esi, esi
mov ecx, dword [edx + 0xb4]
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x10], ecx
jbe 0x6d67f6b0
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], esi
mov esi, dword [ebp - 8]
mov eax, dword [edi + 4]
mov ebx, dword [edx + 0xac]
mov esi, dword [esi]
sub esi, dword [eax + 0x50]
shl esi, 9
mov eax, esi
shr eax, 0x10
lea eax, [eax + eax*2]
lea eax, [ebx + eax*8]
mov ebx, dword [eax + 0xc]
cmp ebx, dword [ecx + 0xc]
jne 0x6d67f652
cmp dword [ebp + 0xc], 0
jne 0x6d67f6a3
mov ebx, dword [eax]
cmp ebx, dword [ecx]
jne 0x6d67f652
mov ebx, dword [eax + 4]
cmp ebx, dword [ecx + 4]
jne 0x6d67f652
mov ebx, dword [eax + 8]
cmp ebx, dword [ecx + 8]
je 0x6d67f6a3
mov eax, dword [eax + 0x10]
lea edx, [esi + 0x200]
mov ecx, dword [eax + 0x34]
cmp ecx, edx
mov dword [ebp - 4], ecx
jb 0x6d67f668
mov dword [ebp - 4], edx
mov ecx, dword [ebp - 4]
mov edx, dword [eax]
sub ecx, esi
push esi
shr ecx, 2
mov dword [ebp - 0x18], ecx
mov ecx, eax
call dword [edx + 0x3c]
mov ebx, eax
cmp ebx, dword [ebp - 4]
jae 0x6d67f69d
push ecx
push ecx
mov ecx, dword [ebp - 0x18]
mov eax, esp
push dword [ebp + 8]
mov dword [eax + 4], ecx
mov ecx, ebx
mov dword [eax], esi
call fcn.6d67f711
lea ebx, [ebx + eax*4]
jmp 0x6d67f67d
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x14]
add dword [ebp - 8], 4
dec dword [ebp - 0xc]
jne 0x6d67f60f
lea ecx, [ebp - 0x2c]
call fcn.6d6a63ec
pop edi
pop esi
pop ebx
leave
ret 8

Function at 0x6d6819e5
Capabilities:
Get thread local storage value

Disassembly:
push esi
push edi
mov edi, dword [esp + 0xc]
mov esi, ecx
test edi, edi
jne 0x6d6819f5
and dword [esi], edi
jmp 0x6d681a14
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov eax, dword [eax + 0x90]
push 4
mov ecx, eax
call fcn.6d645be3
mov dword [eax], edi
mov dword [esi], eax
mov eax, esi
pop edi
pop esi
ret 4
Function at 0x6d681be7
Capabilities:
Get thread local storage value

Disassembly:
push ecx
push ebx
push ebp
mov ebx, ecx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_TlsGetValue]
push edi
mov eax, dword [ebx]
push dword [0x6d7a23c4]
mov edi, dword [eax + 0x18]
call esi
mov ebp, dword [eax + 0x164]
lea eax, [esp + 0x10]
push eax
mov ecx, ebx
call fcn.6d681b52
push eax
push edi
mov ecx, ebp
call fcn.6d682640
cmp dword [esp + 0x10], 0
mov edi, eax
jne 0x6d681cb0
mov ecx, edi
call fcn.6d6546a6
test eax, eax
je 0x6d681cb0
call fcn.6d682cf1
test eax, eax
je 0x6d681c63
mov eax, dword [ebx]
push dword [0x6d7a23c4]
mov edi, dword [edi + 0x14]
mov ebx, dword [eax + 0x18]
call esi
mov eax, dword [eax + 0x164]
push 1
push edi
push ebx
mov ecx, dword [eax + 0x1c]
call fcn.6d6862a5
mov edi, eax
jmp 0x6d681cb0
push dword [0x6d7a23c4]
call esi
mov ebp, eax
push 6
push ebp
call fcn.6d681e40
mov eax, dword [ebx]
mov edi, dword [edi + 0x14]
pop ecx
mov ebx, dword [eax + 0x18]
pop ecx
push dword [0x6d7a23c4]
call esi
mov eax, dword [eax + 0x164]
push 1
push edi
push ebx
mov ecx, dword [eax + 0x1c]
call fcn.6d6862a5
mov ecx, dword [ebp + 0x2c]
mov edi, eax
call fcn.6d67a7cf
push 4
push 6
push ebp
call fcn.6d681d7e
add esp, 0xc
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret

Function at 0x6d681cee
Capabilities:
Get thread local storage value

Disassembly:
push ecx
push ebx
push esi
mov esi, ecx
push edi
push dword [0x6d7a23c4]
mov eax, dword [esi]
mov edi, dword [eax + 0x18]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, dword [eax + 0x164]
lea eax, [esp + 0xc]
push eax
mov ecx, esi
call fcn.6d681d25
push eax
push edi
mov ecx, ebx
call fcn.6d682640
pop edi
pop esi
pop ebx
pop ecx
ret

Function at 0x6d681d25
Capabilities:
Get thread local storage value

Disassembly:
push ebx
push esi
push edi
mov edi, ecx
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, eax
push 6
push esi
call fcn.6d681e40
mov eax, dword [edi]
pop ecx
pop ecx
mov eax, dword [eax + 0x18]
mov ecx, edi
mov eax, dword [eax + 4]
mov eax, dword [eax]
mov ebx, dword [eax + 0x88]
call fcn.6d681b52
push eax
mov ecx, ebx
call fcn.6d6a1e8b
mov ecx, dword [esi + 0x2c]
mov edi, eax
call fcn.6d67a7cf
push 4
push 6
push esi
call fcn.6d681d7e
add esp, 0xc
mov eax, edi
pop edi
pop esi
pop ebx
ret
Function at 0x6d681fd2
Capabilities:
Get thread local storage value

Disassembly:
push ebx
push esi
mov esi, ecx
push edi
lea ecx, [esi + 8]
call fcn.6d641a4a
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov edi, eax
push 6
push edi
call fcn.6d681e40
mov eax, dword [esp + 0x20]
xor ebx, ebx
mov dword [edi + 0x168], ebx
mov dword [edi + 0x164], esi
mov dword [esi + 0x30], eax
mov eax, dword [esp + 0x24]
mov dword [esi + 0x34], eax
mov eax, dword [esp + 0x18]
pop ecx
mov dword [esi], eax
mov eax, dword [esp + 0x18]
pop ecx
mov dword [esi + 0x20], ebx
mov dword [esi + 0x24], ebx
mov dword [esi + 0x28], ebx
mov dword [esi + 0x2c], ebx
mov dword [esi + 0x18], eax
mov dword [esi + 0x38], ebx
mov eax, dword [edi + 0x16c]
lea ecx, [esi + 8]
push 0x110
mov dword [esi + 0x3c], eax
mov dword [esi + 0x40], ebx
mov dword [esi + 0x44], ebx
mov dword [esi + 4], ecx
call fcn.6d641b98
cmp eax, ebx
je 0x6d682063
push 0x80
mov ecx, eax
push dword [esi + 4]
call fcn.6d68576f
jmp 0x6d682065
xor eax, eax
mov dword [esi + 0x1c], eax
cmp dword [0x6d7c1ef0], ebx
je 0x6d6820aa
mov ecx, dword [0x6d7c1eac]
cmp ecx, ebx
jne 0x6d682081
mov eax, dword [0x6d7b5438]
jmp 0x6d682089
push ecx
mov ecx, eax
call fcn.6d685c47
mov dword [esi + 0x48], eax
mov eax, dword [0x6d7c1eb0]
cmp eax, ebx
jne 0x6d68209c
mov eax, dword [0x6d7b5438]
jmp 0x6d6820a5
mov ecx, dword [esi + 0x1c]
push eax
call fcn.6d685c47
mov dword [esi + 0x4c], eax
jmp 0x6d6820b0
mov dword [esi + 0x48], ebx
mov dword [esi + 0x4c], ebx
mov dword [esi + 0x50], ebx
mov dword [esi + 0x54], ebx
mov dword [esi + 0x58], ebx
mov ecx, dword [edi + 0x2c]
call fcn.6d67a7cf
push 4
push 6
push edi
call fcn.6d681d7e
add esp, 0xc
mov eax, esi
pop edi
pop esi
pop ebx
ret 0x10

Function at 0x6d6820de
Capabilities:
Get thread local storage value

Disassembly:
push esi
push edi
push dword [0x6d7a23c4]
mov edi, ecx
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, eax
push 6
push esi
call fcn.6d681e40
mov eax, dword [esp + 0x14]
pop ecx
test eax, eax
pop ecx
je 0x6d682108
mov eax, dword [eax]
test eax, eax
jne 0x6d682110
mov edi, dword [0x6d7b5438]
jmp 0x6d68211b
mov ecx, dword [edi + 0x1c]
push eax
call fcn.6d685c47
mov edi, eax
mov ecx, dword [esi + 0x2c]
call fcn.6d67a7cf
push 4
push 6
push esi
call fcn.6d681d7e
add esp, 0xc
mov eax, edi
pop edi
pop esi
ret 4
Function at 0x6d682434
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push edi
mov edi, ecx
call fcn.6d682cf1
test eax, eax
je 0x6d682455
push dword [ebp + 0x10]
mov ecx, edi
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.6d6821a7
jmp 0x6d682498
push esi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, eax
push 6
push esi
call fcn.6d681e40
pop ecx
pop ecx
push dword [ebp + 0x10]
mov ecx, edi
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.6d6821a7
mov ecx, dword [esi + 0x2c]
mov edi, eax
call fcn.6d67a7cf
push 4
push 6
push esi
call fcn.6d681d7e
add esp, 0xc
mov eax, edi
pop esi
pop edi
pop ebp
ret 0xc
Function at 0x6d68249d
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
mov ebx, ecx
push dword [0x6d7a23c4]
mov dword [ebp - 8], ebx
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ecx, dword [ebp + 8]
mov dword [ebp - 0xc], eax
mov ecx, dword [ecx + 4]
mov ecx, dword [ecx]
push dword [ecx + 0x88]
lea ecx, [ebp - 4]
push eax
call fcn.6d645ee5
mov esi, dword [ebp + 0xc]
push esi
push dword [ebp - 4]
call fcn.6d6a1b8a
pop ecx
xor edi, edi
test eax, eax
pop ecx
mov dword [ebp + 0xc], eax
jne 0x6d6825e5
push 1
lea ecx, [ebp - 0x1c]
push dword [ebp - 0xc]
push dword [ebp - 4]
call fcn.6d741b5e
mov eax, dword [ebp - 4]
push 8
mov eax, dword [eax]
mov ebx, dword [eax + 0xc]
call fcn.6d645c02
lea eax, [ebx + eax*4]
pop ecx
mov al, byte [eax + esi]
cmp al, 7
jne 0x6d682526
mov eax, dword [ebp - 4]
push esi
mov ecx, dword [eax]
call fcn.6d68351d
mov dword [ebp + 0xc], eax
jmp 0x6d682555
cmp al, 1
mov eax, dword [ebp - 4]
mov eax, dword [eax]
jne 0x6d682543
push dword [eax + esi*4 + 0x1c]
lea ecx, [ebp - 0xc]
push dword [ebp - 0xc]
call fcn.6d645ee5
mov edi, dword [ebp - 0xc]
jmp 0x6d682555
push dword [eax + esi*4 + 0x1c]
push dword [ebp - 0xc]
lea ecx, [ebp - 0xc]
call fcn.6d645ee5
mov edi, dword [ebp - 0xc]
lea ecx, [ebp - 0x1c]
call fcn.6d741b93
cmp dword [ebp + 0xc], 0
jne 0x6d6825e2
test edi, edi
je 0x6d68256d
mov edi, dword [edi]
test edi, edi
jne 0x6d682574
mov eax, dword [0x6d7b5438]
jmp 0x6d682580
mov eax, dword [ebp - 8]
push edi
mov ecx, dword [eax + 0x1c]
call fcn.6d685c47
mov edi, dword [ebp + 8]
mov ecx, dword [ebp - 8]
push 0
push eax
push edi
call fcn.6d6821a7
mov esi, eax
mov ecx, esi
call fcn.6d6546a6
test eax, eax
jne 0x6d6825a4
mov eax, dword [ebp + 0x10]
and dword [eax], 0
jmp 0x6d6825de
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x78]
mov ebx, eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x78]
cmp eax, ebx
je 0x6d6825cb
mov eax, dword [esi + 0x14]
mov ecx, dword [ebp - 8]
push 1
push eax
push edi
call fcn.6d6821a7
test eax, eax
je 0x6d68259c
mov eax, dword [esi + 4]
mov ecx, dword [ebp - 8]
push dword [eax]
push edi
call fcn.6d682137
mov ecx, dword [ebp + 0x10]
mov dword [ecx], eax
mov eax, esi
jmp 0x6d682639
mov ebx, dword [ebp - 8]
mov eax, dword [ebp + 0xc]
xor esi, esi
mov eax, dword [eax + 0x44]
cmp eax, esi
jne 0x6d6825f8
mov eax, dword [0x6d7b5438]
jmp 0x6d682601
mov ecx, dword [ebx + 0x1c]
push eax
call fcn.6d685c47
mov ecx, dword [ebx + 0x1c]
push esi
push eax
push dword [ebp + 8]
call fcn.6d6862a5
cmp eax, esi
je 0x6d682619
mov ecx, dword [ebp + 0x10]
mov dword [ecx], esi
jmp 0x6d682639
mov eax, dword [ebp + 0x10]
cmp dword [ebp + 0xc], esi
mov dword [eax], 1
jne 0x6d68262e
mov eax, dword [0x6d7b5438]
jmp 0x6d682639
push dword [ebp + 0xc]
mov ecx, dword [ebx + 0x1c]
call fcn.6d685c47
pop edi
pop esi
pop ebx
leave
ret 0xc
Function at 0x6d682640
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push edi
mov edi, ecx
call fcn.6d682cf1
test eax, eax
je 0x6d682661
push dword [ebp + 0x10]
mov ecx, edi
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.6d68249d
jmp 0x6d6826a4
push esi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, eax
push 6
push esi
call fcn.6d681e40
pop ecx
pop ecx
push dword [ebp + 0x10]
mov ecx, edi
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.6d68249d
mov ecx, dword [esi + 0x2c]
mov edi, eax
call fcn.6d67a7cf
push 4
push 6
push esi
call fcn.6d681d7e
add esp, 0xc
mov eax, edi
pop esi
pop edi
pop ebp
ret 0xc
Function at 0x6d6826a9
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
push ebx
push esi
push edi
mov dword [ebp - 4], ecx
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
mov eax, dword [ebp + 0xc]
push 8
mov eax, dword [eax + 4]
mov eax, dword [eax]
mov esi, dword [eax + 0x88]
mov edi, dword [esi + 0xc]
call fcn.6d645c02
lea eax, [edi + eax*4]
mov edi, dword [ebp + 0x10]
pop ecx
mov al, byte [eax + edi]
cmp al, 3
jne 0x6d6826ff
mov eax, dword [esi + edi*4 + 0x1c]
mov dword [ebp - 0x10], 0xa
mov dword [ebp - 8], eax
lea esi, [ebp - 0x10]
jmp 0x6d682840
cmp al, 5
jne 0x6d682720
mov eax, dword [esi + edi*4 + 0x1c]
mov dword [ebp - 0x10], 0xb
mov dword [ebp - 8], eax
mov eax, dword [esi + edi*4 + 0x20]
mov dword [ebp - 4], eax
lea esi, [ebp - 0x10]
jmp 0x6d682840
cmp al, 4
jne 0x6d68273a
fld dword [esi + edi*4 + 0x1c]
fstp dword [ebp - 8]
mov dword [ebp - 0x10], 6
lea esi, [ebp - 0x10]
jmp 0x6d682840
cmp al, 6
jne 0x6d682761
mov eax, dword [esi + edi*4 + 0x1c]
mov dword [ebp - 0x20], 7
mov dword [ebp - 8], eax
mov eax, dword [esi + edi*4 + 0x20]
mov dword [ebp - 4], eax
lea esi, [ebp - 0x20]
fld qword [ebp - 8]
fstp qword [ebp - 0x18]
jmp 0x6d682840
cmp al, 8
je 0x6d6827df
cmp al, 0x66
je 0x6d6827df
cmp al, 7
je 0x6d68279a
cmp al, 0x64
je 0x6d68279a
push 0x1c0
push str.C:_BUILD_AREA_jdk1.5.0_13_hotspot_src_share_vmciciEnv.cpp
call fcn.6d6a37b4
pop ecx
pop ecx
int3
mov ecx, dword [ebp - 4]
lea eax, [ebp + 0xc]
push eax
push edi
push dword [ebp + 0xc]
call fcn.6d68249d
cmp dword [ebx + 4], 0
je 0x6d6827d0
mov ecx, dword [ebp - 4]
and dword [ebx + 4], 0
call fcn.6d683510
or dword [ebp - 8], 0xffffffff
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x10], 0x63
lea esi, [ebp - 0x10]
jmp 0x6d682840
mov dword [ebp - 0x20], 0xc
mov dword [ebp - 0x18], eax
lea esi, [ebp - 0x20]
jmp 0x6d682840
push esi
push ebx
lea ecx, [ebp + 0xc]
call fcn.6d645ee5
push ebx
push edi
push dword [ebp + 0xc]
call fcn.6d6a1ff4
add esp, 0xc
cmp dword [ebx + 4], 0
je 0x6d68281c
mov ecx, dword [ebp - 4]
and dword [ebx + 4], 0
call fcn.6d683510
or dword [ebp - 8], 0xffffffff
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x10], 0x63
lea esi, [ebp - 0x10]
jmp 0x6d682840
test eax, eax
jne 0x6d682827
mov eax, dword [0x6d7b5438]
jmp 0x6d682833
push eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax + 0x1c]
call fcn.6d685c47
mov dword [ebp - 0x20], 0xc
mov dword [ebp - 0x18], eax
lea esi, [ebp - 0x20]
mov eax, dword [ebp + 8]
mov edi, eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop edi
pop esi
pop ebx
leave
ret 0xc
Function at 0x6d682850
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push esi
push edi
mov esi, ecx
call fcn.6d682cf1
test eax, eax
je 0x6d682881
push dword [ebp + 0x10]
lea eax, [ebp - 0x10]
mov ecx, esi
push dword [ebp + 0xc]
push eax
call fcn.6d6826a9
mov esi, eax
mov eax, dword [ebp + 8]
mov edi, eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
jmp 0x6d6828cd
push ebx
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
push 6
push ebx
call fcn.6d681e40
pop ecx
lea eax, [ebp - 0x10]
pop ecx
push dword [ebp + 0x10]
mov ecx, esi
push dword [ebp + 0xc]
push eax
call fcn.6d6826a9
mov edi, dword [ebp + 8]
mov esi, eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov ecx, dword [ebx + 0x2c]
call fcn.6d67a7cf
push 4
push 6
push ebx
call fcn.6d681d7e
mov eax, dword [ebp + 8]
add esp, 0xc
pop ebx
pop edi
pop esi
leave
ret 0xc

Function at 0x6d68294f
Capabilities:
Get thread local storage value

Disassembly:
push edi
mov edi, ecx
call fcn.6d682cf1
test eax, eax
je 0x6d68296c
push dword [esp + 0xc]
mov ecx, edi
push dword [esp + 0xc]
call fcn.6d6828d3
jmp 0x6d6829ae
push esi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, eax
push 6
push esi
call fcn.6d681e40
pop ecx
pop ecx
push dword [esp + 0x10]
mov ecx, edi
push dword [esp + 0x10]
call fcn.6d6828d3
mov ecx, dword [esi + 0x2c]
mov edi, eax
call fcn.6d67a7cf
push 4
push 6
push esi
call fcn.6d681d7e
add esp, 0xc
mov eax, edi
pop esi
pop edi
ret 8
Function at 0x6d6829b2
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, eax
mov eax, dword [ebp + 8]
xor edi, edi
cmp eax, edi
je 0x6d6829d4
add eax, 0xfffffff8
jmp 0x6d6829d6
xor eax, eax
cmp eax, edi
jne 0x6d6829df
mov dword [ebp + 8], edi
jmp 0x6d6829ee
mov ecx, dword [esi + 0x90]
push eax
call fcn.6d67a638
mov dword [ebp + 8], eax
mov eax, dword [ebp + 0xc]
cmp eax, edi
je 0x6d6829fa
add eax, 0xfffffff8
jmp 0x6d6829fc
xor eax, eax
cmp eax, edi
jne 0x6d682a04
xor ebx, ebx
jmp 0x6d682a12
mov ecx, dword [esi + 0x90]
push eax
call fcn.6d67a638
mov ebx, eax
cmp dword [ebp + 0x10], edi
jne 0x6d682a1c
mov dword [ebp + 0x10], edi
jmp 0x6d682a2d
push dword [ebp + 0x10]
mov ecx, dword [esi + 0x90]
call fcn.6d67a638
mov dword [ebp + 0x10], eax
cmp dword [ebp + 0x14], edi
je 0x6d682a42
push dword [ebp + 0x14]
mov ecx, dword [esi + 0x90]
call fcn.6d67a638
mov edi, eax
push esi
push ebx
push dword [ebp + 8]
call fcn.6d70a09c
mov eax, dword [esi + 4]
add esp, 0xc
test eax, eax
je 0x6d682a87
mov eax, dword [eax + 4]
cmp eax, dword [0x6d7bf7e0]
jne 0x6d682a7e
push str.unhandled_ci_exception
push 0x22d
push str.C:_BUILD_AREA_jdk1.5.0_13_hotspot_src_share_vmciciEnv.cpp
call fcn.6d6a372c
add esp, 0xc
int3
and dword [esi + 4], 0
jmp 0x6d682b08
mov eax, dword [ebp + 0x18]
sub eax, 0xb6
je 0x6d682aec
dec eax
je 0x6d682ad6
dec eax
je 0x6d682ac3
dec eax
je 0x6d682aae
push 0x242
push str.C:_BUILD_AREA_jdk1.5.0_13_hotspot_src_share_vmciciEnv.cpp
call fcn.6d6a37b4
pop ecx
pop ecx
int3
push 1
lea eax, [ebp + 0x10]
push dword [ebp + 8]
push edi
push dword [ebp + 0x10]
push ebx
push eax
call fcn.6d70b57e
jmp 0x6d682aff
push dword [ebp + 8]
lea eax, [ebp + 0x14]
push edi
push dword [ebp + 0x10]
push ebx
push eax
call fcn.6d70b76f
jmp 0x6d682ae7
push dword [ebp + 8]
lea eax, [ebp + 8]
push edi
push dword [ebp + 0x10]
push ebx
push eax
call fcn.6d70b7d4
add esp, 0x14
jmp 0x6d682b02
push 1
lea eax, [ebp + 0xc]
push dword [ebp + 8]
push edi
push dword [ebp + 0x10]
push ebx
push eax
call fcn.6d70b5dd
add esp, 0x18
mov eax, dword [eax]
test eax, eax
jne 0x6d682b0c
xor eax, eax
jmp 0x6d682b0e
mov eax, dword [eax]
pop edi
pop esi
pop ebx
pop ebp
ret 0x14

Function at 0x6d682c52
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push edi
mov edi, ecx
call fcn.6d682cf1
test eax, eax
je 0x6d682c73
push dword [ebp + 0x10]
mov ecx, edi
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.6d682b15
jmp 0x6d682cb6
push esi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, eax
push 6
push esi
call fcn.6d681e40
pop ecx
pop ecx
push dword [ebp + 0x10]
mov ecx, edi
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.6d682b15
mov ecx, dword [esi + 0x2c]
mov edi, eax
call fcn.6d67a7cf
push 4
push 6
push esi
call fcn.6d681d7e
add esp, 0xc
mov eax, edi
pop esi
pop edi
pop ebp
ret 0xc
Function at 0x6d682da5
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
mov ebx, dword [ebp + 0xc]
test ebx, ebx
push esi
je 0x6d682dbf
test byte [ebx + 0x12], 1
jne 0x6d682dd9
cmp word [ebx + 0x22], 0
ja 0x6d682dd9
mov eax, dword [ebp + 8]
test eax, eax
je 0x6d682e75
test byte [eax + 0x55], 2
je 0x6d682de1
cmp dword [eax + 0x108], 1
jle 0x6d682de1
push 1
pop eax
jmp 0x6d682e75
lea esi, [eax + 8]
test ebx, ebx
mov dword [ebp - 4], esi
jne 0x6d682e0e
test byte [esi + 0x4d], 4
mov ecx, esi
je 0x6d682e01
call fcn.6d707eb4
sub eax, esi
neg eax
sbb eax, eax
inc eax
jmp 0x6d682e75
call fcn.6d7083e6
neg eax
sbb eax, eax
neg eax
jmp 0x6d682e75
push edi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ecx, ebx
mov esi, eax
call fcn.6d68355d
mov edi, eax
test edi, edi
jne 0x6d682e2f
and dword [ebp + 0xc], eax
jmp 0x6d682e41
mov ecx, dword [esi + 0x90]
push 4
call fcn.6d645be3
mov dword [eax], edi
mov dword [ebp + 0xc], eax
mov ecx, ebx
call fcn.6d68356c
mov edi, eax
test edi, edi
je 0x6d682e5d
mov ecx, dword [esi + 0x90]
push 4
call fcn.6d645be3
mov dword [eax], edi
lea ecx, [ebp + 8]
and dword [ebp + 8], 0
push ecx
push eax
push dword [ebp + 0xc]
push dword [ebp - 4]
call fcn.6d682d0e
add esp, 0x10
pop edi
pop esi
pop ebx
leave
ret
Function at 0x6d68357b
Capabilities:
Get thread local storage value

Disassembly:
push ecx
push esi
mov esi, ecx
cmp dword [esi + 0x14], 0
jne 0x6d683645
push ebx
push edi
push dword [0x6d7a23c4]
mov edi, dword [sym.imp.KERNEL32.dll_TlsGetValue]
call edi
mov eax, dword [eax + 0x164]
lea ecx, [esp + 0xc]
push ecx
mov ecx, eax
push dword [esi + 0x10]
push dword [esi]
call fcn.6d682640
cmp dword [esp + 0xc], 0
mov ebx, eax
jne 0x6d683640
mov ecx, ebx
call fcn.6d6546a6
test eax, eax
je 0x6d683640
call fcn.6d682cf1
test eax, eax
je 0x6d6835f4
push dword [0x6d7a23c4]
mov ebx, dword [ebx + 0x14]
call edi
mov eax, dword [eax + 0x164]
mov ecx, dword [esi]
push 1
push ebx
push ecx
mov ecx, dword [eax + 0x1c]
call fcn.6d6862a5
mov ebx, eax
jmp 0x6d683640
push ebp
push dword [0x6d7a23c4]
call edi
mov ebp, eax
push 6
push ebp
call fcn.6d681e40
mov ebx, dword [ebx + 0x14]
pop ecx
pop ecx
push dword [0x6d7a23c4]
call edi
mov eax, dword [eax + 0x164]
mov ecx, dword [esi]
push 1
push ebx
push ecx
mov ecx, dword [eax + 0x1c]
call fcn.6d6862a5
mov ecx, dword [ebp + 0x2c]
mov ebx, eax
call fcn.6d67a7cf
push 4
push 6
push ebp
call fcn.6d681d7e
add esp, 0xc
pop ebp
mov dword [esi + 0x14], ebx
pop edi
pop ebx
mov eax, dword [esi + 0x14]
pop esi
pop ecx
ret
Function at 0x6d68364b
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
push ebx
push esi
mov esi, ecx
push edi
and dword [esi], 0
and dword [esi + 0x14], 0
or dword [esi + 0x20], 0xffffffff
or dword [esi + 0x24], 0xffffffff
mov dword [esi + 0x18], 0x63
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, dword [ebp + 0xc]
mov edi, eax
mov eax, dword [ebp + 8]
mov dword [esi + 0x28], ebx
lea ecx, [ebp - 4]
mov eax, dword [eax + 4]
mov eax, dword [eax]
push dword [eax + 0x88]
push edi
call fcn.6d645ee5
mov eax, dword [ebp - 4]
push ebx
mov ecx, dword [eax]
call fcn.6d6a1f62
push eax
push edi
lea ecx, [ebp - 0x10]
call fcn.6d645ee5
mov eax, dword [ebp - 4]
push ebx
mov ecx, dword [eax]
call fcn.6d6a1e9e
mov ecx, dword [ebp - 4]
push eax
mov ecx, dword [ecx]
call fcn.6d6a1ec4
mov ecx, dword [ebp - 4]
mov dword [ebp - 8], eax
mov ecx, dword [ecx]
mov eax, dword [ecx + eax*4 + 0x1c]
test eax, eax
jne 0x6d6836d7
and dword [ebp + 0xc], eax
jmp 0x6d6836ea
mov ecx, dword [edi + 0x90]
push eax
call fcn.6d67a638
test eax, eax
mov dword [ebp + 0xc], eax
jne 0x6d6836ee
xor eax, eax
jmp 0x6d6836f3
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
push eax
call fcn.6d6a9577
cmp eax, 0xc
pop ecx
je 0x6d68370d
cmp eax, 0xd
je 0x6d68370d
push eax
call fcn.6d68714b
pop ecx
jmp 0x6d683722
mov ecx, dword [edi + 0x164]
lea eax, [ebp - 8]
push eax
push dword [ebp - 8]
push dword [ebp + 8]
call fcn.6d682640
mov dword [esi + 8], eax
mov eax, dword [ebp - 4]
push ebx
mov ecx, dword [eax]
call fcn.6d6a1e8b
mov edi, dword [edi + 0x164]
lea ecx, [ebp - 0xc]
push ecx
push eax
push dword [ebp + 8]
mov ecx, edi
call fcn.6d682640
xor ebx, ebx
mov edi, eax
cmp dword [ebp - 0xc], ebx
je 0x6d683788
mov eax, dword [edi + 4]
mov ecx, dword [eax]
mov eax, dword [ebp + 0xc]
add ecx, 8
cmp eax, ebx
mov dword [ebp - 0x14], ebx
jne 0x6d683765
mov dword [ebp + 8], ebx
jmp 0x6d68376a
mov eax, dword [eax]
mov dword [ebp + 8], eax
mov eax, dword [ebp - 0x10]
cmp eax, ebx
jne 0x6d683775
xor eax, eax
jmp 0x6d683777
mov eax, dword [eax]
lea edx, [ebp - 0x30]
push edx
push dword [ebp + 8]
push eax
call fcn.6d6b9afe
test eax, eax
jne 0x6d683794
or dword [esi + 0xc], 0xffffffff
mov dword [esi + 4], edi
mov dword [esi + 0x10], ebx
jmp 0x6d68379f
lea eax, [ebp - 0x30]
mov ecx, esi
push eax
call fcn.6d6837a8
mov eax, esi
pop edi
pop esi
pop ebx
leave
ret 8