joyce8/EMBER2024-capa huggingface dataset:
Function at 0x6d6f9d2e
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
cmp dword [0x6d7c1d7c], 0
jne 0x6d6f9d49
push dword [ebp + 8]
call fcn.6d6f9dc0
pop ecx
xor eax, eax
pop ebp
ret 4
push edi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov edi, eax
mov ecx, edi
mov eax, dword [edi]
call dword [eax + 0x10]
test eax, eax
je 0x6d6f9d87
push ebx
push esi
lea esi, [edi + 0xe8]
mov ebx, dword [esi]
mov dword [esi], 0xa
mov ecx, dword [ebp + 8]
push 0
push edi
call fcn.6d71a311
mov dword [ebp + 8], eax
mov dword [esi], ebx
pop esi
pop ebx
jmp 0x6d6f9db4
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0xc]
test eax, eax
je 0x6d6f9da2
mov ecx, dword [ebp + 8]
push 0
push edi
call fcn.6d71a311
mov dword [ebp + 8], eax
jmp 0x6d6f9db4
push 0xa5d
push str.C:_BUILD_AREA_jdk1.5.0_13_hotspot_src_share_vmprimsjvmtiEnv.cpp
call fcn.6d6a37b4
pop ecx
pop ecx
int3
cmp dword [ebp + 8], 0
pop edi
je 0x6d6f9d43
push 0x71
pop eax
jmp 0x6d6f9d45

Function at 0x6d6f9de6
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push edi
xor edi, edi
cmp dword [0x6d7c1d7c], edi
jne 0x6d6f9e03
push dword [ebp + 8]
call fcn.6d6f9e61
test eax, eax
pop ecx
jne 0x6d6f9e5a
jmp 0x6d6f9e4f
push esi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, eax
mov ecx, esi
mov eax, dword [esi]
call dword [eax + 0x10]
test eax, eax
je 0x6d6f9e29
mov ecx, dword [ebp + 8]
push edi
push esi
call fcn.6d71a48b
jmp 0x6d6f9e49
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0xc]
test eax, eax
jne 0x6d6f9e1d
push 0xa83
push str.C:_BUILD_AREA_jdk1.5.0_13_hotspot_src_share_vmprimsjvmtiEnv.cpp
call fcn.6d6a37b4
pop ecx
pop ecx
int3
cmp eax, 2
pop esi
jne 0x6d6f9e53
push 0x33
jmp 0x6d6f9e59
cmp eax, edi
je 0x6d6f9e5a
push 0x71
pop edi
mov eax, edi
pop edi
pop ebp
ret 4

Function at 0x6d6f9e8a
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push edi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov edi, eax
mov ecx, edi
mov eax, dword [edi]
call dword [eax + 0x10]
test eax, eax
je 0x6d6f9ece
push ebx
push esi
lea esi, [edi + 0xe8]
mov ebx, dword [esi]
mov dword [esi], 0xa
mov ecx, dword [ebp + 8]
push edi
push 1
push dword [ebp + 0x10]
push dword [ebp + 0xc]
call fcn.6d71a519
mov dword [esi], ebx
pop esi
pop ebx
jmp 0x6d6f9f01
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0xc]
test eax, eax
je 0x6d6f9eec
mov ecx, dword [ebp + 8]
push edi
push 1
push dword [ebp + 0x10]
push dword [ebp + 0xc]
call fcn.6d71a519
jmp 0x6d6f9f01
push 0xabc
push str.C:_BUILD_AREA_jdk1.5.0_13_hotspot_src_share_vmprimsjvmtiEnv.cpp
call fcn.6d6a37b4
pop ecx
pop ecx
int3
mov ecx, eax
pop edi
dec ecx
dec ecx
je 0x6d6f9f18
dec ecx
je 0x6d6f9f14
neg eax
sbb eax, eax
and eax, 0x71
jmp 0x6d6f9f1b
push 0x34
jmp 0x6d6f9f1a
push 0x33
pop eax
pop ebp
ret 0xc
Function at 0x6d6f9f1f
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ecx
push esi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, eax
mov ecx, esi
mov eax, dword [esi]
call dword [eax + 0x10]
test eax, eax
je 0x6d6f9f67
lea ecx, [ebp - 4]
call fcn.6d6907a9
mov ecx, dword [ebp + 8]
push esi
call fcn.6d71a64b
cmp dword [ebp - 4], 0
mov esi, eax
je 0x6d6f9f94
push 4
push 6
push dword [ebp - 4]
call fcn.6d681d7e
add esp, 0xc
jmp 0x6d6f9f94
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0xc]
test eax, eax
je 0x6d6f9f7f
mov ecx, dword [ebp + 8]
push esi
call fcn.6d71a64b
mov esi, eax
jmp 0x6d6f9f94
push 0xade
push str.C:_BUILD_AREA_jdk1.5.0_13_hotspot_src_share_vmprimsjvmtiEnv.cpp
call fcn.6d6a37b4
pop ecx
pop ecx
int3
cmp esi, 2
jne 0x6d6f9f9e
push 0x33
pop eax
jmp 0x6d6f9fa7
mov eax, esi
neg eax
sbb eax, eax
and eax, 0x71
pop esi
leave
ret 4

Function at 0x6d6f9fac
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ecx
push esi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, eax
mov ecx, esi
mov eax, dword [esi]
call dword [eax + 0x10]
test eax, eax
je 0x6d6f9ff4
lea ecx, [ebp - 4]
call fcn.6d6907a9
mov ecx, dword [ebp + 8]
push esi
call fcn.6d71a67d
cmp dword [ebp - 4], 0
mov esi, eax
je 0x6d6fa021
push 4
push 6
push dword [ebp - 4]
call fcn.6d681d7e
add esp, 0xc
jmp 0x6d6fa021
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0xc]
test eax, eax
je 0x6d6fa00c
mov ecx, dword [ebp + 8]
push esi
call fcn.6d71a67d
mov esi, eax
jmp 0x6d6fa021
push 0xafc
push str.C:_BUILD_AREA_jdk1.5.0_13_hotspot_src_share_vmprimsjvmtiEnv.cpp
call fcn.6d6a37b4
pop ecx
pop ecx
int3
cmp esi, 2
jne 0x6d6fa02b
push 0x33
pop eax
jmp 0x6d6fa034
mov eax, esi
neg eax
sbb eax, eax
and eax, 0x71
pop esi
leave
ret 4

Function at 0x6d6fa98c
Capabilities:
Get thread local storage value

Disassembly:
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ecx, dword [esp + 4]
cmp ecx, eax
je 0x6d6fa9be
cmp dword [esp + 8], 0
push dword [esp + 0xc]
je 0x6d6fa9b4
push 0x64
call fcn.6d750668
jmp 0x6d6fa9b9
call fcn.6d6fbb0c
test eax, eax
jne 0x6d6fa9be
ret
push 1
pop eax
ret
Function at 0x6d6fa9c2
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
cmp dword [ebp + 0xc], 0
push ebx
mov ebx, dword [ebp + 8]
push esi
mov esi, ecx
jg 0x6d6fa9e0
jl 0x6d6fa9db
test ebx, ebx
jae 0x6d6fa9e0
push 0x67
pop eax
jmp 0x6d6faa5a
mov eax, dword [esi]
test eax, eax
jne 0x6d6fa9fd
push ebx
call fcn.6d71c250
pop ecx
mov ecx, dword [ebp + 0x10]
mov dword [ecx], eax
neg eax
sbb eax, eax
and al, 0x92
add eax, 0x6e
jmp 0x6d6faa5a
cmp dword [0x6d7c1d7c], 0
jle 0x6d6faa4e
push edi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov edi, eax
lea ecx, [ebp - 4]
push edi
call fcn.6d68f19c
push edi
lea ecx, [ebp - 0x1c]
call fcn.6d6b5a73
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push ebx
call dword [esi]
add esp, 0xc
lea ecx, [ebp - 0x1c]
mov esi, eax
call fcn.6d6b5aa6
push 6
push dword [ebp - 4]
call fcn.6d681e40
pop ecx
mov eax, esi
pop ecx
pop edi
jmp 0x6d6faa5a
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push ebx
call eax
add esp, 0xc
pop esi
pop ebx
leave
ret 0xc

Function at 0x6d6faccb
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa4
and dword [ebp - 4], 0
push esi
mov esi, dword [ebp + 8]
cmp dword [esi + 0xa8], 0
jne 0x6d6facec
xor eax, eax
jmp 0x6d6fad85
lea ecx, [ebp - 0x14]
call fcn.6d641711
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
push eax
lea ecx, [ebp - 0x2c]
call fcn.6d6b5a73
push 1
push esi
lea ecx, [ebp - 0xa4]
call fcn.6d6ac9f1
lea eax, [ebp - 0xa4]
mov ecx, esi
push eax
call fcn.6d752671
mov esi, eax
test esi, esi
je 0x6d6fad72
push ebx
mov ebx, dword [ebp + 0xc]
push edi
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2c]
mov ecx, dword [eax]
test ecx, ecx
je 0x6d6fad63
jle 0x6d6fad63
mov eax, dword [eax + 8]
mov edi, ecx
mov ecx, dword [eax]
mov ecx, dword [ecx]
test ecx, ecx
je 0x6d6fad5d
test ebx, ebx
jne 0x6d6fad54
xor edx, edx
jmp 0x6d6fad56
mov edx, dword [ebx]
cmp ecx, edx
jne 0x6d6fad5d
inc dword [ebp - 4]
add eax, 4
dec edi
jne 0x6d6fad44
mov ecx, esi
call fcn.6d761c98
mov esi, eax
test esi, esi
jne 0x6d6fad30
pop edi
pop ebx
lea ecx, [ebp - 0x2c]
call fcn.6d6b5aa6
lea ecx, [ebp - 0x14]
call fcn.6d6a63ec
mov eax, dword [ebp - 4]
pop esi
leave
ret 8
Function at 0x6d6fae18
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb4
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_TlsGetValue]
push edi
push dword [0x6d7a23c4]
mov dword [ebp - 4], ecx
call esi
mov eax, dword [eax + 0x8c]
push 0x10
mov dword [ebp - 0x14], eax
mov ecx, dword [eax + 4]
mov dword [ebp - 0x10], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0xc], ecx
mov eax, dword [eax + 0xc]
mov dword [ebp - 8], eax
call fcn.6d735879
mov edi, eax
pop ecx
test edi, edi
je 0x6d6fae6b
push 1
push 1
mov ecx, edi
call fcn.6d6b55d1
jmp 0x6d6fae6d
xor edi, edi
mov ebx, dword [ebp + 0xc]
cmp dword [ebx + 0xa8], 0
je 0x6d6faeed
lea ecx, [ebp - 0x24]
call fcn.6d641711
push dword [0x6d7a23c4]
call esi
push eax
lea ecx, [ebp - 0x3c]
call fcn.6d6b5a73
push 1
push ebx
lea ecx, [ebp - 0xb4]
call fcn.6d6ac9f1
and dword [ebp + 0xc], 0
lea eax, [ebp - 0xb4]
push eax
mov ecx, ebx
call fcn.6d752671
mov esi, eax
test esi, esi
je 0x6d6faedd
mov eax, dword [ebp + 0xc]
inc dword [ebp + 0xc]
cmp eax, dword [0x6d791fe8]
jge 0x6d6faed4
mov ecx, dword [ebp - 4]
push edi
push esi
push ebx
push dword [ebp + 8]
call fcn.6d6faf39
mov ecx, esi
call fcn.6d761c98
jmp 0x6d6faeb2
lea ecx, [ebp - 0x3c]
call fcn.6d6b5aa6
lea ecx, [ebp - 0x24]
call fcn.6d6a63ec
mov esi, dword [edi]
mov ebx, dword [ebp + 0x14]
mov ecx, dword [ebp - 4]
mov eax, esi
push ebx
push 0
shl eax, 2
push eax
call fcn.6d6f68f9
test eax, eax
je 0x6d6faf0b
mov esi, eax
jmp 0x6d6faf28
xor eax, eax
test esi, esi
jle 0x6d6faf21
mov ecx, dword [edi + 8]
mov edx, dword [ebx]
mov ecx, dword [ecx + eax*4]
mov dword [edx + eax*4], ecx
inc eax
cmp eax, esi
jl 0x6d6faf11
mov eax, dword [ebp + 0x10]
mov dword [eax], esi
xor esi, esi
lea ecx, [ebp - 0x14]
call fcn.6d6a63ec
mov eax, esi
pop edi
pop esi
pop ebx
leave
ret 0x10
Function at 0x6d6faf39
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_TlsGetValue]
push edi
push dword [0x6d7a23c4]
mov dword [ebp - 0xc], ecx
call esi
push eax
lea ecx, [ebp - 0x1c]
call fcn.6d64bc19
mov ecx, dword [ebp + 0x10]
mov eax, dword [ecx]
call dword [eax + 0x2c]
mov ebx, eax
xor edi, edi
mov dword [ebp - 8], ebx
cmp dword [ebx], edi
je 0x6d6fb06a
push dword [0x6d7a23c4]
call esi
push eax
lea ecx, [ebp - 0x34]
call fcn.6d6b5a73
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 4], edi
mov eax, dword [ecx + 0x84]
cmp eax, edi
je 0x6d6faf9a
mov eax, dword [eax + 4]
mov dword [ebp - 4], eax
mov ecx, dword [ecx + 0x7c]
mov dword [ebp + 0xc], edi
cmp ecx, edi
je 0x6d6fafaa
mov eax, dword [ecx + 4]
mov dword [ebp + 0xc], eax
cmp dword [ebx], edi
mov dword [ebp + 0x10], edi
jle 0x6d6fb062
mov esi, dword [ebp + 0x14]
mov eax, dword [ebx + 8]
mov ecx, dword [ebp + 0x10]
mov eax, dword [eax + ecx*4]
mov edi, dword [eax]
test edi, edi
je 0x6d6fb054
cmp dword [ebp - 4], edi
je 0x6d6fb054
cmp dword [ebp + 0xc], edi
je 0x6d6fb054
mov edx, dword [esi]
test edx, edx
jle 0x6d6fafff
xor ebx, ebx
test edx, edx
jle 0x6d6faffc
mov ecx, dword [esi + 8]
mov eax, dword [ecx]
test eax, eax
je 0x6d6faff0
mov eax, dword [eax]
cmp eax, edi
je 0x6d6fb051
inc ebx
add ecx, 4
cmp ebx, edx
jl 0x6d6fafe8
mov ebx, dword [ebp - 8]
push edi
lea ecx, [ebp + 0x14]
call fcn.6d6819e5
mov eax, dword [ebp - 0xc]
cmp dword [eax + 0xa0], 0
je 0x6d6fb020
push 1
push dword [ebp + 0x14]
call fcn.6d6dc05b
jmp 0x6d6fb032
mov eax, dword [ebp + 0x14]
test eax, eax
je 0x6d6fb029
mov eax, dword [eax]
push eax
push dword [ebp + 8]
call fcn.6d6dc01d
mov edi, eax
mov eax, dword [esi]
cmp eax, dword [esi + 4]
pop ecx
pop ecx
jne 0x6d6fb045
push eax
mov ecx, esi
call fcn.6d6b56d9
mov eax, dword [esi]
mov ecx, dword [esi + 8]
mov dword [ecx + eax*4], edi
inc dword [esi]
jmp 0x6d6fb054
mov ebx, dword [ebp - 8]
inc dword [ebp + 0x10]
mov eax, dword [ebp + 0x10]
cmp eax, dword [ebx]
jl 0x6d6fafb8
lea ecx, [ebp - 0x34]
call fcn.6d6b5aa6
lea ecx, [ebp - 0x1c]
call fcn.6d6a63ec
pop edi
pop esi
pop ebx
leave
ret 0x10
Function at 0x6d6fb079
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa4
push ebx
push esi
mov esi, dword [ebp + 8]
xor eax, eax
push edi
mov dword [ebp - 4], eax
cmp dword [esi + 0xa8], eax
je 0x6d6fb1eb
push 1
push esi
lea ecx, [ebp - 0xa4]
call fcn.6d6ac9f1
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov edi, eax
mov eax, dword [edi + 0x8c]
mov dword [ebp - 0x14], eax
mov ecx, dword [eax + 4]
mov dword [ebp - 0x10], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0xc], ecx
mov eax, dword [eax + 0xc]
mov dword [ebp - 8], eax
lea eax, [ebp - 0xa4]
push eax
mov ecx, esi
call fcn.6d752671
push edi
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.6d6b5a73
mov ebx, dword [ebp + 0xc]
test ebx, ebx
je 0x6d6fb178
jle 0x6d6fb127
xor edi, edi
test ebx, ebx
jle 0x6d6fb10e
test esi, esi
je 0x6d6fb112
mov ecx, esi
call fcn.6d761c98
inc edi
mov esi, eax
cmp edi, ebx
jl 0x6d6fb0fc
test esi, esi
jne 0x6d6fb178
lea ecx, [ebp - 0x2c]
call fcn.6d6b5aa6
lea ecx, [ebp - 0x14]
call fcn.6d6a63ec
jmp 0x6d6fb1f0
and dword [ebp + 0xc], 0
xor edi, edi
test esi, esi
mov eax, esi
je 0x6d6fb156
mov ecx, dword [ebp + 0xc]
xor edi, edi
test ebx, ebx
mov dword [ebp + 8], ecx
mov dword [ebp + 0xc], eax
jge 0x6d6fb152
test eax, eax
je 0x6d6fb156
mov ecx, eax
call fcn.6d761c98
dec edi
cmp edi, ebx
jg 0x6d6fb142
test eax, eax
jne 0x6d6fb133
cmp edi, ebx
jne 0x6d6fb15f
mov esi, dword [ebp + 0xc]
jmp 0x6d6fb178
mov esi, dword [ebp + 8]
test esi, esi
je 0x6d6fb112
test edi, edi
jge 0x6d6fb178
neg edi
mov ecx, esi
call fcn.6d761c98
dec edi
mov esi, eax
jne 0x6d6fb16c
mov ebx, dword [ebp + 0x10]
test ebx, ebx
jle 0x6d6fb1ca
mov edi, dword [ebp + 0x14]
test esi, esi
je 0x6d6fb1ca
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x1c]
mov ecx, eax
call fcn.6d7136ae
mov dword [edi], eax
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x1c]
test byte [eax + 0x11], 1
je 0x6d6fb1a8
or eax, 0xffffffff
jmp 0x6d6fb1af
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x20]
cdq
mov dword [edi + 8], eax
mov ecx, esi
mov dword [edi + 0xc], edx
call fcn.6d761c98
inc dword [ebp - 4]
add edi, 0x10
cmp dword [ebp - 4], ebx
mov esi, eax
jl 0x6d6fb182
lea ecx, [ebp - 0x2c]
call fcn.6d6b5aa6
lea ecx, [ebp - 0x14]
call fcn.6d6a63ec
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp - 4]
mov dword [eax], ecx
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 0x14
cmp dword [ebp + 0xc], eax
je 0x6d6fb1da
push 0x67
pop eax
jmp 0x6d6fb1e4
Function at 0x6d6fb209
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
push esi
push edi
push dword [0x6d7a23c4]
mov esi, ecx
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov edi, eax
push dword [ebp + 0xc]
mov eax, dword [edi + 0x8c]
push dword [ebp + 8]
mov dword [ebp - 0x10], eax
mov ecx, dword [eax + 4]
mov dword [ebp - 0xc], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 8], ecx
mov eax, dword [eax + 0xc]
mov ecx, esi
mov dword [ebp - 4], eax
call fcn.6d6fabe5
mov esi, eax
test esi, esi
jne 0x6d6fb254
push 0x1f
pop esi
jmp 0x6d6fb2ad
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x10]
test eax, eax
jne 0x6d6fb263
push 0x71
jmp 0x6d6fb251
push edi
lea ecx, [ebp - 0x28]
call fcn.6d6b5a73
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x1c]
mov edi, eax
test byte [edi + 0x11], 1
je 0x6d6fb287
mov eax, dword [ebp + 0x14]
or dword [eax], 0xffffffff
or dword [eax + 4], 0xffffffff
jmp 0x6d6fb297
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x20]
mov ecx, dword [ebp + 0x14]
cdq
mov dword [ecx], eax
mov dword [ecx + 4], edx
mov ecx, edi
call fcn.6d7136ae
mov ecx, dword [ebp + 0x10]
mov dword [ecx], eax
lea ecx, [ebp - 0x28]
call fcn.6d6b5aa6
xor esi, esi
lea ecx, [ebp - 0x10]
call fcn.6d6a63ec
mov eax, esi
pop edi
pop esi
leave
ret 0x10
Function at 0x6d6fc9eb
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c
push ebx
push esi
push edi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, dword [0x6d7bdb8c]
mov ebx, eax
xor edi, edi
mov ecx, esi
mov dword [ebp - 4], ebx
mov dword [ebp - 0xc], edi
call fcn.6d714b1e
mov ecx, dword [0x6d7bd66c]
cmp ecx, ebx
je 0x6d6fca3a
cmp ecx, edi
je 0x6d6fca3a
mov ecx, dword [0x6d7bdb8c]
push edi
push edi
call fcn.6d715ae1
mov ecx, dword [0x6d7bd66c]
jmp 0x6d6fca21
mov eax, dword [0x6d7bd674]
cmp eax, edi
je 0x6d6fcb4c
cmp dword [eax], edi
je 0x6d6fcb4c
cmp ecx, edi
jne 0x6d6fca62
mov dword [0x6d7bd66c], ebx
mov dword [ebp - 0xc], 1
jmp 0x6d6fca83
cmp ecx, ebx
je 0x6d6fca83
push str.checking
push 0x17f
push str.C:_BUILD_AREA_jdk1.5.0_13_hotspot_src_share_vmprimsjvmtiExport.cpp
call fcn.6d6a372c
add esp, 0xc
int3
dec dword [eax]
mov ecx, dword [eax]
mov eax, dword [eax + 8]
mov edi, dword [eax + ecx*4]
mov eax, dword [0x6d7bd670]
dec dword [eax]
mov ecx, dword [eax]
mov eax, dword [eax + 8]
mov ebx, dword [eax + ecx*4]
mov ecx, esi
call fcn.6d715a3f
mov eax, dword [0x6d7bd638]
mov ecx, dword [eax]
xor eax, eax
test ecx, ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 8], eax
jle 0x6d6fcb14
mov ecx, dword [0x6d7bd638]
mov ecx, dword [ecx + 8]
mov esi, dword [ecx + eax*4]
xor ecx, ecx
mov eax, dword [esi + 0xc0]
and eax, 0x100000
or eax, ecx
je 0x6d6fcb08
push dword [ebp - 4]
lea ecx, [ebp - 0x20]
call fcn.6d6fcb7e
push dword [ebp - 4]
lea ecx, [ebp - 0x4c]
call fcn.6d6fcb58
mov eax, dword [esi + 0x5c]
test eax, eax
je 0x6d6fcaf8
push ebx
add esi, 8
push edi
push esi
call eax
lea ecx, [ebp - 0x4c]
call fcn.6d6fcc2b
lea ecx, [ebp - 0x20]
call fcn.6d6fcbcd
mov eax, dword [ebp - 8]
inc eax
cmp eax, dword [ebp - 0x10]
mov dword [ebp - 8], eax
jl 0x6d6fcab6
mov esi, dword [0x6d7bdb8c]
mov ecx, esi
call fcn.6d714b1e
mov eax, dword [0x6d7bd674]
xor ecx, ecx
cmp dword [eax], ecx
jne 0x6d6fca83
cmp dword [ebp - 0xc], ecx
je 0x6d6fcb4c
mov dword [0x6d7bd678], ecx
mov dword [0x6d7bd66c], ecx
mov ecx, dword [0x6d7bdb8c]
call fcn.6d715c22
mov ecx, esi
call fcn.6d715a3f
pop edi
pop esi
pop ebx
leave
ret

Function at 0x6d6fcdb7
Capabilities:
Get thread local storage value

Disassembly:
mov eax, dword [0x6d79a1a0]
cmp eax, 4
jne 0x6d6fce01
push esi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, eax
push 6
push esi
call fcn.6d681e40
pop ecx
pop ecx
call fcn.6d6f68b7
mov ecx, dword [esp + 0xc]
add eax, 8
mov dword [ecx], eax
mov ecx, dword [esi + 0x2c]
call fcn.6d67a7cf
push 4
push 6
push esi
call fcn.6d681d7e
add esp, 0xc
xor eax, eax
pop esi
ret
cmp eax, 1
jne 0x6d6fce17
call fcn.6d6f68b7
mov ecx, dword [esp + 8]
add eax, 8
mov dword [ecx], eax
xor eax, eax
ret
mov eax, dword [esp + 8]
push 0xfffffffffffffffe
and dword [eax], 0
pop eax
ret
Function at 0x6d6fce22
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push esi
push edi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
push 6
push eax
mov dword [ebp - 4], eax
call fcn.6d681e40
xor esi, esi
pop ecx
cmp dword [0x6d7bd644], esi
pop ecx
jne 0x6d6fce5a
mov eax, dword [ebp + 0xc]
push 0xfffffffffffffffe
mov dword [eax], esi
pop esi
jmp 0x6d6fcf08
lea eax, [ebp - 0x14]
push eax
call fcn.6d6fcf26
mov edi, dword [0x6d7bd644]
pop ecx
lea eax, [ebp - 0x14]
mov ecx, edi
push eax
call fcn.6d6fa30f
test eax, eax
jne 0x6d6fce4d
push ebx
push esi
push 2
push 1
pop ebx
push ebx
push edi
call fcn.6d6fa18b
push esi
push 3
push ebx
push edi
call fcn.6d6fa18b
push esi
push 4
push ebx
push edi
call fcn.6d6fa18b
push esi
push 6
push ebx
push edi
call fcn.6d6fa18b
add esp, 0x40
push esi
push 7
push ebx
push edi
call fcn.6d6fa18b
push esi
push 8
push ebx
push edi
call fcn.6d6fa18b
push esi
push 0xa
push ebx
push edi
call fcn.6d6fa18b
push esi
push 9
push ebx
push edi
call fcn.6d6fa18b
add esp, 0x40
push esi
push 0x14
push ebx
push edi
call fcn.6d6fa18b
push esi
push 0x15
push ebx
push edi
call fcn.6d6fa18b
push esi
push 0x5a
push ebx
push edi
call fcn.6d6fa18b
push esi
push 0x63
push ebx
push edi
call fcn.6d6fa18b
mov eax, dword [ebp + 0xc]
add esp, 0x40
mov dword [eax], str.nmW
pop ebx
mov edi, dword [ebp - 4]
mov ecx, dword [edi + 0x2c]
call fcn.6d67a7cf
push 4
push 6
push edi
call fcn.6d681d7e
add esp, 0xc
mov eax, esi
pop edi
pop esi
leave
ret

Function at 0x6d6fd07f
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
push edi
call fcn.6d6fc999
mov eax, dword [0x6d7bd638]
xor edi, edi
mov eax, dword [eax]
test eax, eax
mov dword [ebp - 4], eax
jle 0x6d6fd101
push ebx
push esi
mov eax, dword [0x6d7bd638]
xor ecx, ecx
mov eax, dword [eax + 8]
mov esi, dword [eax + edi*4]
mov eax, dword [esi + 0xc0]
and eax, 0x100
or eax, ecx
je 0x6d6fd0f9
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
lea ecx, [ebp - 0x18]
push ebx
call fcn.6d6fcd90
push ebx
lea ecx, [ebp - 0x44]
call fcn.6d6fcb58
mov eax, dword [esi + 0x2c]
test eax, eax
je 0x6d6fd0e9
push dword [ebp - 0x14]
add esi, 8
push esi
call eax
lea ecx, [ebp - 0x44]
call fcn.6d6fcc2b
lea ecx, [ebp - 0x18]
call fcn.6d6fcbcd
inc edi
cmp edi, dword [ebp - 4]
jl 0x6d6fd09d
pop esi
pop ebx
pop edi
leave
ret
Function at 0x6d6fd104
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
push edi
call fcn.6d6fc9bf
mov eax, dword [0x6d7bd638]
xor edi, edi
mov eax, dword [eax]
test eax, eax
mov dword [ebp - 4], eax
jle 0x6d6fd187
push ebx
push esi
mov eax, dword [0x6d7bd638]
xor ecx, ecx
mov eax, dword [eax + 8]
mov esi, dword [eax + edi*4]
mov eax, dword [esi + 0xc0]
and eax, 2
or eax, ecx
je 0x6d6fd17f
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
lea ecx, [ebp - 0x18]
push ebx
call fcn.6d6fcd90
push ebx
lea ecx, [ebp - 0x44]
call fcn.6d6fcb58
mov eax, dword [esi + 0x10]
test eax, eax
je 0x6d6fd16f
push dword [ebp - 8]
add esi, 8
push dword [ebp - 0x14]
push esi
call eax
lea ecx, [ebp - 0x44]
call fcn.6d6fcc2b
lea ecx, [ebp - 0x18]
call fcn.6d6fcbcd
inc edi
cmp edi, dword [ebp - 4]
jl 0x6d6fd122
pop esi
pop ebx
pop edi
leave
ret

Function at 0x6d6fd18a
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44
mov eax, dword [0x6d7bd638]
push ebx
push esi
push edi
mov eax, dword [eax]
xor edi, edi
test eax, eax
mov dword [ebp - 4], eax
jle 0x6d6fd203
mov eax, dword [0x6d7bd638]
xor ecx, ecx
mov eax, dword [eax + 8]
mov esi, dword [eax + edi*4]
mov eax, dword [esi + 0xc0]
and eax, 4
or eax, ecx
je 0x6d6fd1fd
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
lea ecx, [ebp - 0x18]
push ebx
call fcn.6d6fcb7e
push ebx
lea ecx, [ebp - 0x44]
call fcn.6d6fcb58
mov eax, dword [esi + 0x14]
test eax, eax
je 0x6d6fd1ed
push dword [ebp - 0x14]
add esi, 8
push esi
call eax
lea ecx, [ebp - 0x44]
call fcn.6d6fcc2b
lea ecx, [ebp - 0x18]
call fcn.6d6fcbcd
inc edi
cmp edi, dword [ebp - 4]
jl 0x6d6fd1a3
mov dword [0x6d79a1a0], 8
call fcn.6d6fc999
mov esi, dword [0x6d7b2a80]
mov dword [ebp - 0x10], str._Agent_OnUnload_4
mov dword [ebp - 0xc], str.Agent_OnUnload
test esi, esi
je 0x6d6fd292
and dword [ebp - 4], 0
lea edi, [ebp - 0x10]
push dword [edi]
mov eax, dword [esi + 8]
push eax
call fcn.6d68f189
mov ebx, eax
pop ecx
test ebx, ebx
pop ecx
jne 0x6d6fd252
inc dword [ebp - 4]
add edi, 4
cmp dword [ebp - 4], 2
jb 0x6d6fd231
jmp 0x6d6fd28d
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov edi, eax
lea ecx, [ebp - 8]
push edi
call fcn.6d68f19c
push edi
lea ecx, [ebp - 0x30]
call fcn.6d6b5a73
push 0x6d797c38
call ebx
lea ecx, [ebp - 0x30]
call fcn.6d6b5aa6
push 6
push dword [ebp - 8]
call fcn.6d681e40
pop ecx
pop ecx
mov esi, dword [esi + 0x10]
jmp 0x6d6fd226
pop edi
pop esi
pop ebx
leave
ret