joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1000ae7f0
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x20
mov r14d, edx
mov rbp, rcx
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000ae83b
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000ae84c
mov rbx, qword [rbx + 0xd8]
test rbx, rbx
jne 0x1000ae883
call fcn.100063d30
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000ae87c
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rbx, qword [rbx + 0xd8]
mov rsi, qword [rbx + 0x3f8]
lea rax, [0x1000610e0]
mov rdx, rbx
mov rcx, rbp
mov qword [rbx + 0x3f8], rax
call fcn.1000aedd0
mov edx, r14d
mov rcx, rbp
call fcn.100111db0
mov qword [rbp + 0x530], 0
mov eax, 0xffff7fff
lock xadd dword [rbp + 0x510], eax
cmp eax, 0x8001
je 0x1000ae8e5
lea rcx, [rbp + 0x4e8]
call fcn.1000931d0
lea rcx, [rbp + 0x4c0]
call fcn.1000931d0
mov rbp, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x48]
mov qword [rbx + 0x3f8], rsi
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop r14
ret

Function at 0x1000b44e0
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x20
mov rbp, rdx
mov r14, rcx
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b452b
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000b453c
mov rbx, qword [rbx + 0xd8]
test rbx, rbx
jne 0x1000b4573
call fcn.100063d30
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b456c
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rbx, qword [rbx + 0xd8]
mov rsi, qword [rbx + 0x3f8]
lea rax, [0x1000610e0]
mov rdx, rbx
mov rcx, r14
mov qword [rbx + 0x3f8], rax
call fcn.1000b5e30
mov rdx, rbp
mov rcx, r14
call fcn.100105d20
mov qword [r14 + 0x220], 0
mov edx, 0xffff7fff
mov ebp, eax
lock xadd dword [r14 + 0x200], edx
cmp edx, 0x8001
je 0x1000b45db
lea rcx, [r14 + 0x1d8]
call fcn.1000931d0
lea rcx, [r14 + 0x1b0]
call fcn.1000931d0
mov eax, ebp
mov rbp, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x48]
mov qword [rbx + 0x3f8], rsi
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop r14
ret
Function at 0x1000b4610
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x20
mov rbp, rcx
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b4652
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000b4663
mov rbx, qword [rbx + 0xd8]
test rbx, rbx
jne 0x1000b469a
call fcn.100063d30
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b4693
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rbx, qword [rbx + 0xd8]
mov rsi, qword [rbx + 0x3f8]
lea rax, [0x1000610e0]
mov rdx, rbx
mov rcx, rbp
mov qword [rbx + 0x3f8], rax
call fcn.1000b5e30
mov rcx, rbp
call fcn.100107940
mov qword [rbp + 0x220], 0
mov eax, 0xffff7fff
lock xadd dword [rbp + 0x200], eax
cmp eax, 0x8001
je 0x1000b46f9
lea rcx, [rbp + 0x1d8]
call fcn.1000931d0
lea rcx, [rbp + 0x1b0]
call fcn.1000931d0
mov rbp, qword [rsp + 0x38]
mov qword [rbx + 0x3f8], rsi
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret

Function at 0x1000b4b30
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r12
push r14
push r15
sub rsp, 0x30
mov ebp, r9d
mov r15, r8
mov r12, rdx
mov r14, rcx
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b4b85
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000b4b96
mov rbx, qword [rbx + 0xd8]
test rbx, rbx
jne 0x1000b4bcd
call fcn.100063d30
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b4bc6
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rbx, qword [rbx + 0xd8]
mov rsi, qword [rbx + 0x3f8]
lea rax, [0x1000610e0]
mov rdx, rbx
mov rcx, r14
mov qword [rbx + 0x3f8], rax
call fcn.1000b5d70
movzx r11d, byte [rsp + 0x70]
mov r9d, ebp
mov r8, r15
mov rdx, r12
mov rcx, r14
mov byte [rsp + 0x20], r11b
call fcn.1000946d0
lea rdi, [r14 + 0x1b0]
mov rbp, rax
xor eax, eax
mov edx, 0x7ffe7fff
mov qword [rdi + 0x70], rax
mov qword [rdi + 0x68], rax
lock xadd dword [rdi + 0x50], edx
cmp edx, 0x80018001
je 0x1000b4c40
lea rcx, [rdi + 0x28]
call fcn.1000931d0
mov rcx, rdi
call fcn.1000931d0
mov rdi, qword [rsp + 0x68]
mov qword [rbx + 0x3f8], rsi
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x60]
mov rax, rbp
mov rbp, qword [rsp + 0x58]
add rsp, 0x30
pop r15
pop r14
pop r12
ret
Function at 0x1000b4da0
Capabilities:
Get thread local storage value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rdi
sub rsp, 0x90
mov qword [rax - 0x60], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rdi, rcx
mov qword [rax - 0x68], 0
call fcn.100068a00
mov rsi, rax
mov rdx, qword gs:[0x30]
lea rbx, [rdx + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b4df6
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000b4e07
mov rdx, qword [rbx + 0xd8]
test rdx, rdx
jne 0x1000b4e3f
call fcn.100063d30
call fcn.100068a00
mov rbx, rax
mov rcx, qword gs:[0x30]
lea rsi, [rcx + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b4e38
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rsi, rax
mov rdx, qword [rsi + 0xd8]
mov rcx, rdi
call fcn.1000b5e30
nop
xor edx, edx
lea rax, [0x100062030]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rcx, [rsp + 0x68]
call fcn.10005b410
nop
mov qword [rsp + 0x30], 0
lea rcx, [rsp + 0x68]
call fcn.10005b4f0
nop
jmp 0x1000b4e85
call fcn.100068a00
mov rsi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b4eb0
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000b4ec1
mov rax, qword [rbx + 0xd8]
test rax, rax
jne 0x1000b4ef8
call fcn.100063d30
call fcn.100068a00
mov rsi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b4ef1
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rax, qword [rbx + 0xd8]
cmp dword [rax + 0x204], 0
je 0x1000b4f06
call fcn.1000618f0
mov qword [rdi + 0x220], 0
mov eax, 0xffff7fff
lock xadd dword [rdi + 0x200], eax
cmp eax, 0x8001
je 0x1000b4f3d
lea rcx, [rdi + 0x1d8]
call fcn.1000931d0
lea rcx, [rdi + 0x1b0]
call fcn.1000931d0
mov rax, qword [rsp + 0x30]
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x1000b4f60
Capabilities:
Get thread local storage value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rdi
sub rsp, 0x90
mov qword [rax - 0x60], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rdi, rcx
mov qword [rax - 0x68], 0
call fcn.100068a00
mov rsi, rax
mov rdx, qword gs:[0x30]
lea rbx, [rdx + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b4fb6
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000b4fc7
mov rdx, qword [rbx + 0xd8]
test rdx, rdx
jne 0x1000b4fff
call fcn.100063d30
call fcn.100068a00
mov rbx, rax
mov rcx, qword gs:[0x30]
lea rsi, [rcx + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b4ff8
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rsi, rax
mov rdx, qword [rsi + 0xd8]
mov rcx, rdi
call fcn.1000b5e30
nop
xor edx, edx
lea rax, [0x100062030]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rcx, [rsp + 0x68]
call fcn.10005b410
nop
mov qword [rsp + 0x30], 0
lea rcx, [rsp + 0x68]
call fcn.10005b4f0
nop
jmp 0x1000b5045
call fcn.100068a00
mov rsi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b5070
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000b5081
mov rax, qword [rbx + 0xd8]
test rax, rax
jne 0x1000b50b8
call fcn.100063d30
call fcn.100068a00
mov rsi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b50b1
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rax, qword [rbx + 0xd8]
cmp dword [rax + 0x204], 0
je 0x1000b50c6
call fcn.1000618f0
mov qword [rdi + 0x220], 0
mov eax, 0xffff7fff
lock xadd dword [rdi + 0x200], eax
cmp eax, 0x8001
je 0x1000b50fd
lea rcx, [rdi + 0x1d8]
call fcn.1000931d0
lea rcx, [rdi + 0x1b0]
call fcn.1000931d0
mov rax, qword [rsp + 0x30]
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x1000b5120
Capabilities:
Get thread local storage value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rdi
sub rsp, 0x90
mov qword [rax - 0x60], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rdi, rcx
mov qword [rax - 0x68], 0
call fcn.100068a00
mov rsi, rax
mov rdx, qword gs:[0x30]
lea rbx, [rdx + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b5176
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000b5187
mov rdx, qword [rbx + 0xd8]
test rdx, rdx
jne 0x1000b51bf
call fcn.100063d30
call fcn.100068a00
mov rbx, rax
mov rcx, qword gs:[0x30]
lea rsi, [rcx + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b51b8
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rsi, rax
mov rdx, qword [rsi + 0xd8]
mov rcx, rdi
call fcn.1000b5e30
nop
xor edx, edx
lea rax, [0x100062030]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rcx, [rsp + 0x68]
call fcn.10005b410
nop
mov qword [rsp + 0x30], 0
lea rcx, [rsp + 0x68]
call fcn.10005b4f0
nop
jmp 0x1000b5205
call fcn.100068a00
mov rsi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b5230
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000b5241
mov rax, qword [rbx + 0xd8]
test rax, rax
jne 0x1000b5278
call fcn.100063d30
call fcn.100068a00
mov rsi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b5271
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rax, qword [rbx + 0xd8]
cmp dword [rax + 0x204], 0
je 0x1000b5286
call fcn.1000618f0
mov qword [rdi + 0x220], 0
mov eax, 0xffff7fff
lock xadd dword [rdi + 0x200], eax
cmp eax, 0x8001
je 0x1000b52bd
lea rcx, [rdi + 0x1d8]
call fcn.1000931d0
lea rcx, [rdi + 0x1b0]
call fcn.1000931d0
mov rax, qword [rsp + 0x30]
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x1000b52e0
Capabilities:
Get thread local storage value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rdi
sub rsp, 0x90
mov qword [rax - 0x68], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rdi, rcx
call fcn.100068a00
mov rsi, rax
mov rdx, qword gs:[0x30]
lea rbx, [rdx + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b532e
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000b533f
mov rdx, qword [rbx + 0xd8]
test rdx, rdx
jne 0x1000b5377
call fcn.100063d30
call fcn.100068a00
mov rbx, rax
mov rcx, qword gs:[0x30]
lea rsi, [rcx + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b5370
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rsi, rax
mov rdx, qword [rsi + 0xd8]
mov rcx, rdi
call fcn.1000b5e30
nop
xor edx, edx
lea rax, [0x100062030]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rcx, [rsp + 0x60]
call fcn.10005b410
nop
lea rcx, [rsp + 0x60]
call fcn.10005b4f0
nop
jmp 0x1000b53b4
call fcn.100068a00
mov rsi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b53df
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000b53f0
mov rax, qword [rbx + 0xd8]
test rax, rax
jne 0x1000b5427
call fcn.100063d30
call fcn.100068a00
mov rsi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b5420
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rax, qword [rbx + 0xd8]
cmp dword [rax + 0x204], 0
je 0x1000b5435
call fcn.1000618f0
mov qword [rdi + 0x220], 0
mov eax, 0xffff7fff
lock xadd dword [rdi + 0x200], eax
cmp eax, 0x8001
je 0x1000b546c
lea rcx, [rdi + 0x1d8]
call fcn.1000931d0
lea rcx, [rdi + 0x1b0]
call fcn.1000931d0
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x1000b5490
Capabilities:
Get thread local storage value

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rdi
sub rsp, 0x90
mov qword [rax - 0x60], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rdi, rcx
call fcn.100068a00
mov rsi, rax
mov rdx, qword gs:[0x30]
lea rbx, [rdx + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b54de
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000b54ef
mov rdx, qword [rbx + 0xd8]
test rdx, rdx
jne 0x1000b5527
call fcn.100063d30
call fcn.100068a00
mov rbx, rax
mov rcx, qword gs:[0x30]
lea rsi, [rcx + rax]
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b5520
mov ecx, ebx
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rsi, rax
mov rdx, qword [rsi + 0xd8]
mov rcx, rdi
call fcn.1000b5e30
mov dword [rsp + 0x30], 0
xor edx, edx
lea rax, [0x100062030]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
lea rcx, [rsp + 0x68]
call fcn.10005b410
nop
mov dword [rsp + 0x30], 1
lea rcx, [rsp + 0x68]
call fcn.10005b4f0
nop
jmp 0x1000b5573
call fcn.100068a00
mov rsi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b559e
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000b55af
mov rax, qword [rbx + 0xd8]
test rax, rax
jne 0x1000b55e6
call fcn.100063d30
call fcn.100068a00
mov rsi, rax
mov rbx, qword gs:[0x30]
add rbx, rax
mov rcx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b55df
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rax, qword [rbx + 0xd8]
cmp dword [rax + 0x204], 0
je 0x1000b55f4
call fcn.1000618f0
mov qword [rdi + 0x220], 0
mov eax, 0xffff7fff
lock xadd dword [rdi + 0x200], eax
cmp eax, 0x8001
je 0x1000b562b
lea rcx, [rdi + 0x1d8]
call fcn.1000931d0
lea rcx, [rdi + 0x1b0]
call fcn.1000931d0
mov eax, dword [rsp + 0x30]
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret
Function at 0x1000b5650
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x20
mov rbp, rcx
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b5692
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000b56a3
mov rbx, qword [rbx + 0xd8]
test rbx, rbx
jne 0x1000b56da
call fcn.100063d30
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b56d3
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rbx, qword [rbx + 0xd8]
mov rsi, qword [rbx + 0x3f8]
lea rax, [0x1000610e0]
mov rdx, rbx
mov rcx, rbp
mov qword [rbx + 0x3f8], rax
call fcn.1000b5e30
mov qword [rbp + 0x220], 0
mov eax, 0xffff7fff
lock xadd dword [rbp + 0x200], eax
cmp eax, 0x8001
je 0x1000b5731
lea rcx, [rbp + 0x1d8]
call fcn.1000931d0
lea rcx, [rbp + 0x1b0]
call fcn.1000931d0
mov rbp, qword [rsp + 0x38]
mov qword [rbx + 0x3f8], rsi
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret

Function at 0x1000b5760
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x20
mov rbp, rcx
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b57a2
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000b57b3
mov rbx, qword [rbx + 0xd8]
test rbx, rbx
jne 0x1000b57ea
call fcn.100063d30
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b57e3
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rbx, qword [rbx + 0xd8]
mov rsi, qword [rbx + 0x3f8]
lea rax, [0x1000610e0]
mov rdx, rbx
mov rcx, rbp
mov qword [rbx + 0x3f8], rax
call fcn.1000b5e30
mov qword [rbp + 0x220], 0
mov eax, 0xffff7fff
lock xadd dword [rbp + 0x200], eax
cmp eax, 0x8001
je 0x1000b5841
lea rcx, [rbp + 0x1d8]
call fcn.1000931d0
lea rcx, [rbp + 0x1b0]
call fcn.1000931d0
mov rbp, qword [rsp + 0x38]
mov qword [rbx + 0x3f8], rsi
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret
Function at 0x1000b5870
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x20
mov rbp, rcx
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b58b2
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000b58c3
mov rbx, qword [rbx + 0xd8]
test rbx, rbx
jne 0x1000b58fa
call fcn.100063d30
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b58f3
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rbx, qword [rbx + 0xd8]
mov rsi, qword [rbx + 0x3f8]
lea rax, [0x1000610e0]
mov rdx, rbx
mov rcx, rbp
mov qword [rbx + 0x3f8], rax
call fcn.1000b5e30
mov qword [rbp + 0x220], 0
mov eax, 0xffff7fff
lock xadd dword [rbp + 0x200], eax
cmp eax, 0x8001
je 0x1000b5951
lea rcx, [rbp + 0x1d8]
call fcn.1000931d0
lea rcx, [rbp + 0x1b0]
call fcn.1000931d0
mov rbp, qword [rsp + 0x38]
mov qword [rbx + 0x3f8], rsi
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret

Function at 0x1000b66f0
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r14
sub rsp, 0x20
mov rbp, rdx
mov r14, rcx
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b673b
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000b674c
mov rbx, qword [rbx + 0xd8]
test rbx, rbx
jne 0x1000b6783
call fcn.100063d30
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b677c
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rbx, qword [rbx + 0xd8]
mov rsi, qword [rbx + 0x3f8]
lea rax, [0x1000610e0]
mov rdx, rbx
mov rcx, r14
mov qword [rbx + 0x3f8], rax
call fcn.1000b8120
mov rdx, rbp
mov rcx, r14
call fcn.100113a10
mov qword [r14 + 0x5f0], 0
mov edx, 0xffff7fff
mov ebp, eax
lock xadd dword [r14 + 0x5d0], edx
cmp edx, 0x8001
je 0x1000b67eb
lea rcx, [r14 + 0x5a8]
call fcn.1000931d0
lea rcx, [r14 + 0x580]
call fcn.1000931d0
mov eax, ebp
mov rbp, qword [rsp + 0x38]
mov rdi, qword [rsp + 0x48]
mov qword [rbx + 0x3f8], rsi
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop r14
ret
Function at 0x1000b6820
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x20
mov rbp, rcx
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b6862
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000b6873
mov rbx, qword [rbx + 0xd8]
test rbx, rbx
jne 0x1000b68aa
call fcn.100063d30
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b68a3
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rbx, qword [rbx + 0xd8]
mov rsi, qword [rbx + 0x3f8]
lea rax, [0x1000610e0]
mov rdx, rbx
mov rcx, rbp
mov qword [rbx + 0x3f8], rax
call fcn.1000b8120
mov rcx, rbp
call fcn.100113a80
mov qword [rbp + 0x5f0], 0
mov eax, 0xffff7fff
lock xadd dword [rbp + 0x5d0], eax
cmp eax, 0x8001
je 0x1000b6909
lea rcx, [rbp + 0x5a8]
call fcn.1000931d0
lea rcx, [rbp + 0x580]
call fcn.1000931d0
mov rbp, qword [rsp + 0x38]
mov qword [rbx + 0x3f8], rsi
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret

Function at 0x1000b6d70
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push r12
push r14
push r15
sub rsp, 0x30
mov ebp, r9d
mov r15, r8
mov r12, rdx
mov r14, rcx
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b6dc5
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
test rbx, rbx
je 0x1000b6dd6
mov rbx, qword [rbx + 0xd8]
test rbx, rbx
jne 0x1000b6e0d
call fcn.100063d30
call fcn.100068a00
mov rbx, qword gs:[0x30]
mov rcx, rax
mov rdi, rax
add rbx, rax
call fcn.10006c530
test eax, eax
jne 0x1000b6e06
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rbx, rax
mov rbx, qword [rbx + 0xd8]
mov rsi, qword [rbx + 0x3f8]
lea rax, [0x1000610e0]
mov rdx, rbx
mov rcx, r14
mov qword [rbx + 0x3f8], rax
call fcn.1000b8060
movzx r11d, byte [rsp + 0x70]
mov r9d, ebp
mov r8, r15
mov rdx, r12
mov rcx, r14
mov byte [rsp + 0x20], r11b
call fcn.100112fd0
lea rdi, [r14 + 0x580]
mov rbp, rax
xor eax, eax
mov edx, 0x7ffe7fff
mov qword [rdi + 0x70], rax
mov qword [rdi + 0x68], rax
lock xadd dword [rdi + 0x50], edx
cmp edx, 0x80018001
je 0x1000b6e80
lea rcx, [rdi + 0x28]
call fcn.1000931d0
mov rcx, rdi
call fcn.1000931d0
mov rdi, qword [rsp + 0x68]
mov qword [rbx + 0x3f8], rsi
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x60]
mov rax, rbp
mov rbp, qword [rsp + 0x58]
add rsp, 0x30
pop r15
pop r14
pop r12
ret