joyce8/EMBER2024-capa huggingface dataset:
Function at 0x100099580
Capabilities:
Get thread local storage value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rdi
sub rsp, 0x90
mov qword [rax - 0x60], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rdi, rcx
mov qword [rax - 0x68], 0
call fcn.100068a00
mov rsi, rax
mov rdx, qword gs:[0x30]
lea rbx, [rdx + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000995d6
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000995e7
mov rdx, qword [rbx + 0xd8]
test rdx, rdx
jne 0x10009961f
call fcn.100063d30
call fcn.100068a00
mov rbx, rax
mov rcx, qword gs:[0x30]
lea rsi, [rcx + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x100099618
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rsi, rax
mov rdx, qword [rsi + 0xd8]
mov rcx, rdi
call fcn.10009a610
nop
xor edx, edx
lea rax, [0x100062030]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rcx, [rsp + 0x68]
call fcn.10005b410
nop
mov qword [rsp + 0x30], 0
lea rcx, [rsp + 0x68]
call fcn.10005b4f0
nop
jmp 0x100099665
call fcn.100068a00
mov rsi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x100099690
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000996a1
mov rax, qword [rbx + 0xd8]
test rax, rax
jne 0x1000996d8
call fcn.100063d30
call fcn.100068a00
mov rsi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000996d1
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rax, qword [rbx + 0xd8]
cmp dword [rax + 0x204], 0
je 0x1000996e6
call fcn.1000618f0
mov qword [rdi + 0xf8], 0
mov eax, 0xffff7fff
lock xadd dword [rdi + 0xd8], eax
cmp eax, 0x8001
je 0x10009971d
lea rcx, [rdi + 0xb0]
call fcn.1000931d0
lea rcx, [rdi + 0x88]
call fcn.1000931d0
mov rax, qword [rsp + 0x30]
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x100099740
Capabilities:
Get thread local storage value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rdi
sub rsp, 0x90
mov qword [rax - 0x60], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rdi, rcx
mov qword [rax - 0x68], 0
call fcn.100068a00
mov rsi, rax
mov rdx, qword gs:[0x30]
lea rbx, [rdx + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x100099796
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000997a7
mov rdx, qword [rbx + 0xd8]
test rdx, rdx
jne 0x1000997df
call fcn.100063d30
call fcn.100068a00
mov rbx, rax
mov rcx, qword gs:[0x30]
lea rsi, [rcx + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000997d8
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rsi, rax
mov rdx, qword [rsi + 0xd8]
mov rcx, rdi
call fcn.10009a610
nop
xor edx, edx
lea rax, [0x100062030]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rcx, [rsp + 0x68]
call fcn.10005b410
nop
mov qword [rsp + 0x30], 0
lea rcx, [rsp + 0x68]
call fcn.10005b4f0
nop
jmp 0x100099825
call fcn.100068a00
mov rsi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x100099850
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x100099861
mov rax, qword [rbx + 0xd8]
test rax, rax
jne 0x100099898
call fcn.100063d30
call fcn.100068a00
mov rsi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x100099891
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rax, qword [rbx + 0xd8]
cmp dword [rax + 0x204], 0
je 0x1000998a6
call fcn.1000618f0
mov qword [rdi + 0xf8], 0
mov eax, 0xffff7fff
lock xadd dword [rdi + 0xd8], eax
cmp eax, 0x8001
je 0x1000998dd
lea rcx, [rdi + 0xb0]
call fcn.1000931d0
lea rcx, [rdi + 0x88]
call fcn.1000931d0
mov rax, qword [rsp + 0x30]
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x100099900
Capabilities:
Get thread local storage value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rdi
sub rsp, 0x90
mov qword [rax - 0x60], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rdi, rcx
mov qword [rax - 0x68], 0
call fcn.100068a00
mov rsi, rax
mov rdx, qword gs:[0x30]
lea rbx, [rdx + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x100099956
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x100099967
mov rdx, qword [rbx + 0xd8]
test rdx, rdx
jne 0x10009999f
call fcn.100063d30
call fcn.100068a00
mov rbx, rax
mov rcx, qword gs:[0x30]
lea rsi, [rcx + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x100099998
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rsi, rax
mov rdx, qword [rsi + 0xd8]
mov rcx, rdi
call fcn.10009a610
nop
xor edx, edx
lea rax, [0x100062030]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rcx, [rsp + 0x68]
call fcn.10005b410
nop
mov qword [rsp + 0x30], 0
lea rcx, [rsp + 0x68]
call fcn.10005b4f0
nop
jmp 0x1000999e5
call fcn.100068a00
mov rsi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x100099a10
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x100099a21
mov rax, qword [rbx + 0xd8]
test rax, rax
jne 0x100099a58
call fcn.100063d30
call fcn.100068a00
mov rsi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x100099a51
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rax, qword [rbx + 0xd8]
cmp dword [rax + 0x204], 0
je 0x100099a66
call fcn.1000618f0
mov qword [rdi + 0xf8], 0
mov eax, 0xffff7fff
lock xadd dword [rdi + 0xd8], eax
cmp eax, 0x8001
je 0x100099a9d
lea rcx, [rdi + 0xb0]
call fcn.1000931d0
lea rcx, [rdi + 0x88]
call fcn.1000931d0
mov rax, qword [rsp + 0x30]
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x100099ac0
Capabilities:
Get thread local storage value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rdi
sub rsp, 0x90
mov qword [rax - 0x68], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rdi, rcx
call fcn.100068a00
mov rsi, rax
mov rdx, qword gs:[0x30]
lea rbx, [rdx + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x100099b0e
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x100099b1f
mov rdx, qword [rbx + 0xd8]
test rdx, rdx
jne 0x100099b57
call fcn.100063d30
call fcn.100068a00
mov rbx, rax
mov rcx, qword gs:[0x30]
lea rsi, [rcx + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x100099b50
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rsi, rax
mov rdx, qword [rsi + 0xd8]
mov rcx, rdi
call fcn.10009a610
nop
xor edx, edx
lea rax, [0x100062030]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rcx, [rsp + 0x60]
call fcn.10005b410
nop
lea rcx, [rsp + 0x60]
call fcn.10005b4f0
nop
jmp 0x100099b94
call fcn.100068a00
mov rsi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x100099bbf
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x100099bd0
mov rax, qword [rbx + 0xd8]
test rax, rax
jne 0x100099c07
call fcn.100063d30
call fcn.100068a00
mov rsi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x100099c00
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rax, qword [rbx + 0xd8]
cmp dword [rax + 0x204], 0
je 0x100099c15
call fcn.1000618f0
mov qword [rdi + 0xf8], 0
mov eax, 0xffff7fff
lock xadd dword [rdi + 0xd8], eax
cmp eax, 0x8001
je 0x100099c4c
lea rcx, [rdi + 0xb0]
call fcn.1000931d0
lea rcx, [rdi + 0x88]
call fcn.1000931d0
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x100099c70
Capabilities:
Get thread local storage value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rdi
sub rsp, 0x90
mov qword [rax - 0x60], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rdi, rcx
call fcn.100068a00
mov rsi, rax
mov rdx, qword gs:[0x30]
lea rbx, [rdx + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x100099cbe
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x100099ccf
mov rdx, qword [rbx + 0xd8]
test rdx, rdx
jne 0x100099d07
call fcn.100063d30
call fcn.100068a00
mov rbx, rax
mov rcx, qword gs:[0x30]
lea rsi, [rcx + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x100099d00
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rsi, rax
mov rdx, qword [rsi + 0xd8]
mov rcx, rdi
call fcn.10009a610
mov dword [rsp + 0x30], 0
xor edx, edx
lea rax, [0x100062030]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rcx, [rsp + 0x68]
call fcn.10005b410
nop
mov dword [rsp + 0x30], 1
lea rcx, [rsp + 0x68]
call fcn.10005b4f0
nop
jmp 0x100099d53
call fcn.100068a00
mov rsi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x100099d7e
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x100099d8f
mov rax, qword [rbx + 0xd8]
test rax, rax
jne 0x100099dc6
call fcn.100063d30
call fcn.100068a00
mov rsi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x100099dbf
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rax, qword [rbx + 0xd8]
cmp dword [rax + 0x204], 0
je 0x100099dd4
call fcn.1000618f0
mov qword [rdi + 0xf8], 0
mov eax, 0xffff7fff
lock xadd dword [rdi + 0xd8], eax
cmp eax, 0x8001
je 0x100099e0b
lea rcx, [rdi + 0xb0]
call fcn.1000931d0
lea rcx, [rdi + 0x88]
call fcn.1000931d0
mov eax, dword [rsp + 0x30]
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x100099e30
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x20
mov rbp, rcx
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x100099e72
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x100099e83
mov rbx, qword [rbx + 0xd8]
test rbx, rbx
jne 0x100099eba
call fcn.100063d30
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x100099eb3
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rbx, qword [rbx + 0xd8]
mov rsi, qword [rbx + 0x3f8]
lea rax, [0x1000610e0]
mov rdx, rbx
mov rcx, rbp
mov qword [rbx + 0x3f8], rax
call fcn.10009a610
mov qword [rbp + 0xf8], 0
mov eax, 0xffff7fff
lock xadd dword [rbp + 0xd8], eax
cmp eax, 0x8001
je 0x100099f11
lea rcx, [rbp + 0xb0]
call fcn.1000931d0
lea rcx, [rbp + 0x88]
call fcn.1000931d0
mov rbp, qword [rsp + 0x38]
mov qword [rbx + 0x3f8], rsi
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret

Function at 0x100099f40
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x20
mov rbp, rcx
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x100099f82
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x100099f93
mov rbx, qword [rbx + 0xd8]
test rbx, rbx
jne 0x100099fca
call fcn.100063d30
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x100099fc3
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rbx, qword [rbx + 0xd8]
mov rsi, qword [rbx + 0x3f8]
lea rax, [0x1000610e0]
mov rdx, rbx
mov rcx, rbp
mov qword [rbx + 0x3f8], rax
call fcn.10009a610
mov qword [rbp + 0xf8], 0
mov eax, 0xffff7fff
lock xadd dword [rbp + 0xd8], eax
cmp eax, 0x8001
je 0x10009a021
lea rcx, [rbp + 0xb0]
call fcn.1000931d0
lea rcx, [rbp + 0x88]
call fcn.1000931d0
mov rbp, qword [rsp + 0x38]
mov qword [rbx + 0x3f8], rsi
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret
Function at 0x10009a050
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x20
mov rbp, rcx
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x10009a092
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x10009a0a3
mov rbx, qword [rbx + 0xd8]
test rbx, rbx
jne 0x10009a0da
call fcn.100063d30
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x10009a0d3
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rbx, qword [rbx + 0xd8]
mov rsi, qword [rbx + 0x3f8]
lea rax, [0x1000610e0]
mov rdx, rbx
mov rcx, rbp
mov qword [rbx + 0x3f8], rax
call fcn.10009a610
mov qword [rbp + 0xf8], 0
mov eax, 0xffff7fff
lock xadd dword [rbp + 0xd8], eax
cmp eax, 0x8001
je 0x10009a131
lea rcx, [rbp + 0xb0]
call fcn.1000931d0
lea rcx, [rbp + 0x88]
call fcn.1000931d0
mov rbp, qword [rsp + 0x38]
mov qword [rbx + 0x3f8], rsi
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret
Function at 0x1000a1840
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r14
push r15
sub rsp, 0x30
mov r15, rdx
mov rsi, rcx
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000a1889
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000a189a
mov rbx, qword [rbx + 0xd8]
test rbx, rbx
jne 0x1000a18d1
call fcn.100063d30
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000a18ca
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rbx, qword [rbx + 0xd8]
mov rbp, qword [rbx + 0x3f8]
mov r14, qword [rbx + 0x218]
lea rax, [0x1000610e0]
mov qword [rbx + 0x3f8], rax
lea rdi, [rsi + 0x68]
mov eax, dword [rdi + 0x50]
btr eax, 0xf
lea ecx, [rax + 0x8001]
lock cmpxchg dword [rdi + 0x50], ecx
je 0x1000a1922
lea r9, [rsi + 0xe0]
mov r8, r14
mov rdx, rbx
mov rcx, rdi
mov dword [rsp + 0x20], 0
call fcn.100104bd0
mov rax, qword [rbx + 0x210]
mov rdx, r15
mov rcx, rsi
mov qword [rdi + 0x70], rax
mov qword [rdi + 0x60], r14
call fcn.10010e8b0
mov qword [rdi + 0x70], 0
mov edx, 0xffff7fff
mov esi, eax
lock xadd dword [rdi + 0x50], edx
cmp edx, 0x8001
je 0x1000a196b
lea rcx, [rdi + 0x28]
call fcn.1000931d0
mov rcx, rdi
call fcn.1000931d0
mov eax, esi
mov rsi, qword [rsp + 0x68]
mov qword [rbx + 0x3f8], rbp
mov rbx, qword [rsp + 0x58]
mov rbp, qword [rsp + 0x60]
add rsp, 0x30
pop r15
pop r14
pop rdi
ret

Function at 0x1000a19a0
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0x30
mov r14, rcx
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000a19e0
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000a19f1
mov rbx, qword [rbx + 0xd8]
test rbx, rbx
jne 0x1000a1a28
call fcn.100063d30
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000a1a21
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rbx, qword [rbx + 0xd8]
mov rsi, qword [rbx + 0x3f8]
mov rbp, qword [rbx + 0x218]
lea rax, [0x1000610e0]
mov qword [rbx + 0x3f8], rax
mov eax, dword [r14 + 0xb8]
btr eax, 0xf
lea ecx, [rax + 0x8001]
lock cmpxchg dword [r14 + 0xb8], ecx
je 0x1000a1a7e
lea r9, [r14 + 0xe0]
lea rcx, [r14 + 0x68]
mov r8, rbp
mov rdx, rbx
mov dword [rsp + 0x20], 0
call fcn.100104bd0
mov qword [r14 + 0xc8], rbp
mov eax, 0xffff7fff
mov qword [r14 + 0xd8], 0
lock xadd dword [r14 + 0xb8], eax
cmp eax, 0x8001
je 0x1000a1aba
lea rcx, [r14 + 0x90]
call fcn.1000931d0
lea rcx, [r14 + 0x68]
call fcn.1000931d0
mov rbp, qword [rsp + 0x60]
mov qword [rbx + 0x3f8], rsi
mov rbx, qword [rsp + 0x58]
add rsp, 0x30
pop r14
pop rdi
pop rsi
ret
Function at 0x1000a1f50
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r12
push r14
push r15
sub rsp, 0x30
mov ebp, r9d
mov r15, r8
mov r12, rdx
mov r14, rcx
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000a1fa5
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000a1fb6
mov rbx, qword [rbx + 0xd8]
test rbx, rbx
jne 0x1000a1fed
call fcn.100063d30
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000a1fe6
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rbx, qword [rbx + 0xd8]
mov rsi, qword [rbx + 0x3f8]
lea rax, [0x1000610e0]
mov rdx, rbx
mov rcx, r14
mov qword [rbx + 0x3f8], rax
call fcn.1000a3450
movzx r11d, byte [rsp + 0x70]
mov r9d, ebp
mov r8, r15
mov rdx, r12
mov rcx, r14
mov byte [rsp + 0x20], r11b
call fcn.10010e920
mov edx, 0x7ffe7fff
mov rbp, rax
xor eax, eax
mov qword [r14 + 0xd8], rax
mov qword [r14 + 0xd0], rax
lock xadd dword [r14 + 0xb8], edx
cmp edx, 0x80018001
je 0x1000a2067
lea rcx, [r14 + 0x90]
call fcn.1000931d0
lea rcx, [r14 + 0x68]
call fcn.1000931d0
mov rdi, qword [rsp + 0x68]
mov qword [rbx + 0x3f8], rsi
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x60]
mov rax, rbp
mov rbp, qword [rsp + 0x58]
add rsp, 0x30
pop r15
pop r14
pop r12
ret

Function at 0x1000a20a0
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r12
push r14
push r15
sub rsp, 0x30
mov rbp, r9
mov r15, r8
mov r12, rdx
mov r14, rcx
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000a20f5
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000a2106
mov rbx, qword [rbx + 0xd8]
test rbx, rbx
jne 0x1000a213d
call fcn.100063d30
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000a2136
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rbx, qword [rbx + 0xd8]
mov rsi, qword [rbx + 0x3f8]
lea rax, [0x1000610e0]
mov rdx, rbx
mov rcx, r14
mov qword [rbx + 0x3f8], rax
call fcn.1000a3450
movzx r11d, byte [rsp + 0x78]
mov eax, dword [rsp + 0x70]
mov byte [rsp + 0x28], r11b
mov r9, rbp
mov r8, r15
mov rdx, r12
mov rcx, r14
mov dword [rsp + 0x20], eax
call fcn.10010e970
mov edx, 0x7ffe7fff
mov rbp, rax
xor eax, eax
mov qword [r14 + 0xd8], rax
mov qword [r14 + 0xd0], rax
lock xadd dword [r14 + 0xb8], edx
cmp edx, 0x80018001
je 0x1000a21bf
lea rcx, [r14 + 0x90]
call fcn.1000931d0
lea rcx, [r14 + 0x68]
call fcn.1000931d0
mov rdi, qword [rsp + 0x68]
mov qword [rbx + 0x3f8], rsi
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x60]
mov rax, rbp
mov rbp, qword [rsp + 0x58]
add rsp, 0x30
pop r15
pop r14
pop r12
ret
Function at 0x1000a21f0
Capabilities:
Get thread local storage value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rdi
push r14
push r15
sub rsp, 0x90
mov qword [rax - 0x70], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov r14, rcx
mov qword [rax - 0x78], 0
call fcn.100068a00
mov rdi, rax
mov rdx, qword gs:[0x30]
lea rbx, [rdx + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000a2246
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000a2257
mov rbx, qword [rbx + 0xd8]
test rbx, rbx
jne 0x1000a228f
call fcn.100063d30
call fcn.100068a00
mov rbx, rax
mov rcx, qword gs:[0x30]
lea rdi, [rcx + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000a2288
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rdi, rax
mov rbx, qword [rdi + 0xd8]
mov r15, qword [rbx + 0x218]
mov eax, dword [r14 + 0xb8]
btr eax, 0xf
lea ecx, [rax + 0x8001]
lock cmpxchg dword [r14 + 0xb8], ecx
je 0x1000a22d0
lea r9, [r14 + 0xe0]
mov dword [rsp + 0x20], 0
mov r8, r15
mov rdx, rbx
lea rcx, [r14 + 0x68]
call fcn.100104bd0
mov rax, qword [rbx + 0x210]
mov qword [r14 + 0xd8], rax
mov qword [r14 + 0xc8], r15
xor edx, edx
lea rax, [0x100062030]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rcx, [rsp + 0x68]
call fcn.10005b410
nop
mov qword [rsp + 0x30], 0
lea rcx, [rsp + 0x68]
call fcn.10005b4f0
nop
jmp 0x1000a2322
call fcn.100068a00
mov rdi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000a234d
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000a235e
mov rax, qword [rbx + 0xd8]
test rax, rax
jne 0x1000a2395
call fcn.100063d30
call fcn.100068a00
mov rdi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000a238e
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rax, qword [rbx + 0xd8]
cmp dword [rax + 0x204], 0
je 0x1000a23a3
call fcn.1000618f0
mov qword [r14 + 0xd8], 0
mov eax, 0xffff7fff
lock xadd dword [r14 + 0xb8], eax
cmp eax, 0x8001
je 0x1000a23d8
lea rcx, [r14 + 0x90]
call fcn.1000931d0
lea rcx, [r14 + 0x68]
call fcn.1000931d0
mov rax, qword [rsp + 0x30]
mov rbx, qword [rsp + 0xb8]
add rsp, 0x90
pop r15
pop r14
pop rdi
ret
Function at 0x1000a2400
Capabilities:
Get thread local storage value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rdi
push r14
push r15
sub rsp, 0x90
mov qword [rax - 0x70], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov r14, rcx
mov qword [rax - 0x78], 0
call fcn.100068a00
mov rdi, rax
mov rdx, qword gs:[0x30]
lea rbx, [rdx + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000a2456
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000a2467
mov rbx, qword [rbx + 0xd8]
test rbx, rbx
jne 0x1000a249f
call fcn.100063d30
call fcn.100068a00
mov rbx, rax
mov rcx, qword gs:[0x30]
lea rdi, [rcx + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000a2498
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rdi, rax
mov rbx, qword [rdi + 0xd8]
mov r15, qword [rbx + 0x218]
mov eax, dword [r14 + 0xb8]
btr eax, 0xf
lea ecx, [rax + 0x8001]
lock cmpxchg dword [r14 + 0xb8], ecx
je 0x1000a24e0
lea r9, [r14 + 0xe0]
mov dword [rsp + 0x20], 0
mov r8, r15
mov rdx, rbx
lea rcx, [r14 + 0x68]
call fcn.100104bd0
mov rax, qword [rbx + 0x210]
mov qword [r14 + 0xd8], rax
mov qword [r14 + 0xc8], r15
xor edx, edx
lea rax, [0x100062030]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rcx, [rsp + 0x68]
call fcn.10005b410
nop
mov qword [rsp + 0x30], 0
lea rcx, [rsp + 0x68]
call fcn.10005b4f0
nop
jmp 0x1000a2532
call fcn.100068a00
mov rdi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000a255d
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000a256e
mov rax, qword [rbx + 0xd8]
test rax, rax
jne 0x1000a25a5
call fcn.100063d30
call fcn.100068a00
mov rdi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000a259e
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rax, qword [rbx + 0xd8]
cmp dword [rax + 0x204], 0
je 0x1000a25b3
call fcn.1000618f0
mov qword [r14 + 0xd8], 0
mov eax, 0xffff7fff
lock xadd dword [r14 + 0xb8], eax
cmp eax, 0x8001
je 0x1000a25e8
lea rcx, [r14 + 0x90]
call fcn.1000931d0
lea rcx, [r14 + 0x68]
call fcn.1000931d0
mov rax, qword [rsp + 0x30]
mov rbx, qword [rsp + 0xb8]
add rsp, 0x90
pop r15
pop r14
pop rdi
ret