joyce8/EMBER2024-capa huggingface dataset:
Function at 0x63a02ad0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push esi
push ebx
and esp, 0xfffffff8
sub esp, 0x10
mov esi, dword [ebp + 8]
movsd xmm0, qword [ebp + 0xc]
lea esi, [esi]
nop
mov eax, dword [esi]
mov edx, dword [esi + 4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
movsd xmm1, qword [esp + 8]
addsd xmm1, xmm0
movsd qword [esp], xmm1
mov ebx, dword [esp]
mov ecx, dword [esp + 4]
lock cmpxchg8b qword [esi]
mov ecx, eax
mov ebx, edx
mov eax, dword [esp + 8]
mov edx, dword [esp + 0xc]
xor eax, ecx
xor edx, ebx
or edx, eax
jne 0x63a02ae8
lea esp, [ebp - 8]
pop ebx
pop esi
pop ebp
ret

Function at 0x63a02bc0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
and esp, 0xfffffff8
sub esp, 0x10
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x10]
mov dword [esp], eax
lea esi, [esi]
mov eax, dword [ebp + 8]
mov ebx, dword [esp + 4]
mov ecx, dword [esp]
mov edi, dword [ebp + 8]
mov edx, dword [eax + 4]
mov eax, dword [eax]
and ecx, edx
and ebx, eax
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
lock cmpxchg8b qword [edi]
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edi, edx
mov esi, eax
mov edx, ebx
xor edx, edi
xor esi, ecx
or edx, esi
jne 0x63a02be0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret

Function at 0x63a02cd0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
and esp, 0xfffffff8
sub esp, 0x18
mov eax, dword [ebp + 0x10]
or eax, dword [ebp + 0xc]
setne byte [esp + 4]
lea esi, [esi]
nop
mov eax, dword [ebp + 8]
xor ebx, ebx
mov edi, dword [ebp + 8]
mov dword [esp + 0xc], 0
mov edx, dword [eax]
mov ecx, dword [eax + 4]
mov eax, edx
mov dword [esp + 0x10], edx
or eax, ecx
mov dword [esp + 0x14], ecx
mov eax, edx
mov edx, ecx
mov ecx, dword [esp + 0xc]
setne bl
and ebx, dword [esp + 4]
mov dword [esp + 8], ebx
lock cmpxchg8b qword [edi]
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov esi, eax
mov edi, edx
mov eax, ecx
mov edx, ebx
xor edx, edi
xor eax, esi
or edx, eax
jne 0x63a02cf0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret

Function at 0x63a03120
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
and esp, 0xfffffff0
sub esp, 0x20
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp + 0x10]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
lea esi, [esi]
mov eax, dword [ebp + 8]
mov edx, dword [eax + 4]
mov eax, dword [eax]
mov esi, edx
mov ebx, eax
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
mov dword [esp], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 4], esi
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], esi
call sym.___divdi3
mov edi, dword [ebp + 8]
mov ebx, eax
mov ecx, edx
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
lock cmpxchg8b qword [edi]
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
mov ebx, edx
mov ecx, eax
mov edx, edi
xor edx, ebx
xor esi, ecx
or edx, esi
jne 0x63a03140
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
Function at 0x63a031e0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push esi
push ebx
and esp, 0xfffffff8
sub esp, 0x10
mov esi, dword [ebp + 8]
movsd xmm0, qword [ebp + 0xc]
lea esi, [esi]
nop
mov eax, dword [esi]
mov edx, dword [esi + 4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
movsd xmm1, qword [esp + 8]
divsd xmm1, xmm0
movsd qword [esp], xmm1
mov ebx, dword [esp]
mov ecx, dword [esp + 4]
lock cmpxchg8b qword [esi]
mov ecx, eax
mov ebx, edx
mov eax, dword [esp + 8]
mov edx, dword [esp + 0xc]
xor eax, ecx
xor edx, ebx
or edx, eax
jne 0x63a031f8
lea esp, [ebp - 8]
pop ebx
pop esi
pop ebp
ret

Function at 0x63a032d0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
and esp, 0xfffffff0
sub esp, 0x20
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp + 0x10]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
lea esi, [esi]
mov eax, dword [ebp + 8]
mov edx, dword [eax + 4]
mov eax, dword [eax]
mov esi, edx
mov ebx, eax
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
mov dword [esp], ebx
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 4], esi
mov dword [esp + 0x18], ebx
mov dword [esp + 0x1c], esi
call sym.___udivdi3
mov edi, dword [ebp + 8]
mov ebx, eax
mov ecx, edx
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
lock cmpxchg8b qword [edi]
mov edi, dword [esp + 0x1c]
mov esi, dword [esp + 0x18]
mov ebx, edx
mov ecx, eax
mov edx, edi
xor edx, ebx
xor esi, ecx
or edx, esi
jne 0x63a032f0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret

Function at 0x63a033f0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
and esp, 0xfffffff8
sub esp, 0x18
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x10]
mov dword [esp], eax
lea esi, [esi]
mov eax, dword [ebp + 8]
mov ebx, dword [esp + 4]
mov esi, dword [eax]
mov edi, dword [eax + 4]
mov edx, ebx
mov eax, dword [esp]
imul edx, edi
imul eax, esi
lea ecx, [edx + eax]
mov eax, ebx
mov ebx, esi
mov esi, edi
mul ebx
mov dword [esp + 8], ebx
mov edi, dword [ebp + 8]
mov dword [esp + 0xc], esi
mov dword [esp + 0x14], edx
mov edx, esi
mov dword [esp + 0x10], eax
mov eax, ebx
mov ebx, dword [esp + 0x10]
add dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x14]
lock cmpxchg8b qword [edi]
mov ecx, dword [esp + 8]
mov ebx, dword [esp + 0xc]
mov esi, eax
mov edi, edx
mov eax, ecx
mov edx, ebx
xor edx, edi
xor eax, esi
or edx, eax
jne 0x63a03410
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
Function at 0x63a034b0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push esi
push ebx
and esp, 0xfffffff8
sub esp, 0x10
mov esi, dword [ebp + 8]
movsd xmm0, qword [ebp + 0xc]
lea esi, [esi]
nop
mov eax, dword [esi]
mov edx, dword [esi + 4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
movsd xmm1, qword [esp + 8]
mulsd xmm1, xmm0
movsd qword [esp], xmm1
mov ebx, dword [esp]
mov ecx, dword [esp + 4]
lock cmpxchg8b qword [esi]
mov ecx, eax
mov ebx, edx
mov eax, dword [esp + 8]
mov edx, dword [esp + 0xc]
xor eax, ecx
xor edx, ebx
or edx, eax
jne 0x63a034c8
lea esp, [ebp - 8]
pop ebx
pop esi
pop ebp
ret

Function at 0x63a035a0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
and esp, 0xfffffff8
sub esp, 0x10
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x10]
mov dword [esp], eax
lea esi, [esi]
mov eax, dword [ebp + 8]
mov ebx, dword [esp + 4]
mov ecx, dword [esp]
mov edi, dword [ebp + 8]
mov edx, dword [eax + 4]
mov eax, dword [eax]
or ecx, edx
or ebx, eax
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
lock cmpxchg8b qword [edi]
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edi, edx
mov esi, eax
mov edx, ebx
xor edx, edi
xor esi, ecx
or edx, esi
jne 0x63a035c0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret

Function at 0x63a03690
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
and esp, 0xfffffff8
sub esp, 0x10
lea esi, [esi]
mov eax, dword [ebp + 8]
movzx ecx, byte [ebp + 0xc]
xor edi, edi
mov ebx, dword [eax]
mov esi, dword [eax + 4]
mov eax, ebx
mov edx, esi
mov dword [esp + 8], ebx
shld edx, ebx, cl
shl eax, cl
test cl, 0x20
mov dword [esp + 0xc], esi
cmovne edx, eax
cmovne eax, edi
mov edi, dword [ebp + 8]
mov dword [esp], eax
mov eax, ebx
mov ebx, dword [esp]
mov dword [esp + 4], edx
mov ecx, dword [esp + 4]
mov edx, esi
lock cmpxchg8b qword [edi]
mov ebx, eax
mov esi, edx
mov eax, dword [esp + 8]
mov edx, dword [esp + 0xc]
xor eax, ebx
xor edx, esi
or edx, eax
jne 0x63a036a0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret

Function at 0x63a03790
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
and esp, 0xfffffff8
sub esp, 0x10
lea esi, [esi]
mov eax, dword [ebp + 8]
movzx ecx, byte [ebp + 0xc]
mov esi, dword [eax + 4]
mov ebx, dword [eax]
mov edx, esi
mov eax, ebx
mov dword [esp + 8], ebx
sar edx, cl
shrd eax, esi, cl
mov dword [esp + 0xc], esi
mov edi, edx
sar edi, 0x1f
test cl, 0x20
cmovne eax, edx
cmovne edx, edi
mov edi, dword [ebp + 8]
mov dword [esp], eax
mov eax, ebx
mov ebx, dword [esp]
mov dword [esp + 4], edx
mov ecx, dword [esp + 4]
mov edx, esi
lock cmpxchg8b qword [edi]
mov ebx, eax
mov esi, edx
mov eax, dword [esp + 8]
mov edx, dword [esp + 0xc]
xor eax, ebx
xor edx, esi
or edx, eax
jne 0x63a037a0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
Function at 0x63a03890
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
and esp, 0xfffffff8
sub esp, 0x10
lea esi, [esi]
mov eax, dword [ebp + 8]
movzx ecx, byte [ebp + 0xc]
xor edi, edi
mov esi, dword [eax + 4]
mov ebx, dword [eax]
mov edx, esi
mov eax, ebx
mov dword [esp + 8], ebx
shrd eax, esi, cl
shr edx, cl
test cl, 0x20
mov dword [esp + 0xc], esi
cmovne eax, edx
cmovne edx, edi
mov edi, dword [ebp + 8]
mov dword [esp], eax
mov eax, ebx
mov ebx, dword [esp]
mov dword [esp + 4], edx
mov ecx, dword [esp + 4]
mov edx, esi
lock cmpxchg8b qword [edi]
mov ebx, eax
mov esi, edx
mov eax, dword [esp + 8]
mov edx, dword [esp + 0xc]
xor eax, ebx
xor edx, esi
or edx, eax
jne 0x63a038a0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret

Function at 0x63a03950
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
and esp, 0xfffffff8
sub esp, 0x18
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], edx
lea esi, [esi]
mov eax, dword [ebp + 8]
mov edi, dword [ebp + 8]
mov edx, dword [eax + 4]
mov eax, dword [eax]
mov ebx, edx
mov ecx, eax
sub ecx, dword [esp]
sbb ebx, dword [esp + 4]
mov dword [esp + 0xc], ebx
mov ebx, ecx
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
lock cmpxchg8b qword [edi]
mov ebx, eax
mov esi, edx
mov eax, dword [esp + 0x10]
mov edx, dword [esp + 0x14]
xor eax, ebx
xor edx, esi
or edx, eax
jne 0x63a03970
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret

Function at 0x63a039f0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push esi
push ebx
and esp, 0xfffffff8
sub esp, 0x10
mov esi, dword [ebp + 8]
movsd xmm0, qword [ebp + 0xc]
lea esi, [esi]
nop
mov eax, dword [esi]
mov edx, dword [esi + 4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
movsd xmm1, qword [esp + 8]
subsd xmm1, xmm0
movsd qword [esp], xmm1
mov ebx, dword [esp]
mov ecx, dword [esp + 4]
lock cmpxchg8b qword [esi]
mov ecx, eax
mov ebx, edx
mov eax, dword [esp + 8]
mov edx, dword [esp + 0xc]
xor eax, ecx
xor edx, ebx
or edx, eax
jne 0x63a03a08
lea esp, [ebp - 8]
pop ebx
pop esi
pop ebp
ret

Function at 0x63a03a50
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push esi
mov ecx, dword [ebp + 8]
movzx esi, byte [ebp + 0xc]
push ebx
lea esi, [esi]
movzx edx, byte [ecx]
mov ebx, esi
xor ebx, edx
mov eax, edx
lock cmpxchg byte [ecx], bl
cmp dl, al
jne 0x63a03a60
pop ebx
pop esi
pop ebp
ret

Function at 0x63a03a80
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push esi
mov ecx, dword [ebp + 8]
movzx esi, word [ebp + 0xc]
push ebx
lea esi, [esi]
movzx edx, word [ecx]
mov ebx, edx
mov eax, edx
xor ebx, esi
lock cmpxchg word [ecx], bx
cmp dx, ax
jne 0x63a03a90
pop ebx
pop esi
pop ebp
ret
Function at 0x63a03ab0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push esi
mov ecx, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
push ebx
lea esi, [esi]
nop
mov edx, dword [ecx]
mov ebx, edx
mov eax, edx
xor ebx, esi
lock cmpxchg dword [ecx], ebx
cmp edx, eax
jne 0x63a03ac0
pop ebx
pop esi
pop ebp
ret

Function at 0x63a03ae0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
and esp, 0xfffffff8
sub esp, 0x10
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], eax
mov eax, dword [ebp + 0x10]
mov dword [esp], eax
lea esi, [esi]
mov eax, dword [ebp + 8]
mov ebx, dword [esp + 4]
mov ecx, dword [esp]
mov edi, dword [ebp + 8]
mov edx, dword [eax + 4]
mov eax, dword [eax]
xor ecx, edx
xor ebx, eax
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
lock cmpxchg8b qword [edi]
mov ebx, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov edi, edx
mov esi, eax
mov edx, ebx
xor edx, edi
xor esi, ecx
or edx, esi
jne 0x63a03b00
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret

Function at 0x63a03b40
Capabilities:
Get thread local storage value

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
push ecx
sub esp, 0x18
mov eax, dword [0x63a08140]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_TlsGetValue]
sub esp, 4
test eax, eax
je 0x63a03c30
mov ebx, dword [eax]
test byte [0x63a08048], 8
jne 0x63a03c00
test ebx, ebx
je 0x63a03bd5
mov dword [esp], 0x63a08160
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov eax, dword [ebx + 0x1c]
sub esp, 4
inc eax
mov dword [ebx + 0x1c], eax
cmp eax, dword [ebx + 4]
jge 0x63a03be8
mov edi, dword [ebx + 0x18]
mov esi, dword [sym.imp.kernel32.dll_SleepConditionVariableCS]
lea esi, [esi]
mov dword [esp + 8], 0xffffffff
mov dword [esp + 4], 0x63a08160
mov dword [esp], ebx
call esi
sub esp, 0xc
cmp dword [ebx + 0x18], edi
je 0x63a03ba8
mov dword [esp], 0x63a08160
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
sub esp, 4
lea esp, [ebp - 0x10]
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret
inc dword [ebx + 0x18]
mov dword [ebx + 0x1c], 0
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_WakeAllConditionVariable]
sub esp, 4
jmp 0x63a03bc5
mov dword [esp + 0xc], 0x63a0a088
mov dword [esp + 8], str._vcomp_barrier
mov dword [esp + 4], 0x63a08048
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0
jmp 0x63a03b7c
call sym._vcomp_init_thread_data.part.0
jmp 0x63a03b6d
Function at 0x63a03c40
Capabilities:
Get process heap flags

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
push ecx
sub esp, 0x38
mov edi, dword [ecx]
test byte [0x63a08048], 8
jne 0x63a03c80
mov ebx, dword [edi]
test ebx, ebx
je 0x63a03cae
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
sub esp, 4
lea esp, [ebp - 0x10]
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], str.__p__n
mov dword [esp + 8], str._vcomp_enter_critsect
mov dword [esp + 4], 0x63a08048
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0
mov ebx, dword [edi]
test ebx, ebx
jne 0x63a03c65
mov dword [esp + 8], 0x18
mov dword [esp + 4], 0
mov esi, dword fs:[0x18]
mov eax, dword [esi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
sub esp, 0xc
test eax, eax
je 0x63a03d40
mov dword [ebp - 0x1c], eax
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_InitializeCriticalSection]
mov edx, dword [ebp - 0x1c]
sub esp, 4
mov eax, dword [edx]
mov dword [eax + 0x18], str..._src_wine_dlls_vcomp_main.c:_critsect
mov eax, ebx
lock cmpxchg dword [edi], edx
test eax, eax
je 0x63a03d39
mov eax, dword [edx]
mov dword [ebp - 0x1c], edx
mov dword [eax + 0x18], 0
mov dword [esp], edx
call dword [sym.imp.kernel32.dll_DeleteCriticalSection]
mov edx, dword [ebp - 0x1c]
sub esp, 4
mov dword [esp + 8], edx
mov dword [esp + 4], 0
mov eax, dword [esi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapFree]
sub esp, 0xc
mov ebx, dword [edi]
jmp 0x63a03c65
call sym._alloc_critsect.part.0
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
Function at 0x63a03fe0
Capabilities:
Get thread local storage value

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
push ecx
sub esp, 0x38
mov eax, dword [ecx]
mov esi, dword [ecx + 4]
mov dword [ebp - 0x1c], eax
mov eax, dword [0x63a08140]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_TlsGetValue]
sub esp, 4
mov ebx, eax
test eax, eax
je 0x63a040c8
mov eax, dword [ebx + 4]
mov ecx, 1
mov dword [ebp - 0x20], eax
mov eax, dword [ebx]
test eax, eax
je 0x63a0402b
mov ecx, dword [eax + 4]
test byte [0x63a08048], 8
jne 0x63a04060
mov eax, dword [ebx + 0x2c]
cmp eax, 1
je 0x63a0409d
sub eax, 2
xor edx, edx
cmp eax, 1
jbe 0x63a040d8
lea esp, [ebp - 0x10]
mov eax, edx
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret
mov eax, dword [ebp - 0x1c]
mov dword [esp + 0x14], esi
mov dword [esp + 0xc], str.__p___p__n
mov dword [esp + 0x10], eax
mov dword [esp + 8], str._vcomp_for_dynamic_next
mov dword [esp + 4], 0x63a08048
mov dword [esp], 3
mov dword [ebp - 0x24], ecx
call sym._wine_dbg_log.constprop.0
mov eax, dword [ebx + 0x2c]
mov ecx, dword [ebp - 0x24]
cmp eax, 1
jne 0x63a0403c
mov eax, dword [ebx + 0x30]
mov edi, dword [ebp - 0x1c]
mov edx, 1
mov dword [edi], eax
mov eax, dword [ebx + 0x34]
mov dword [esi], eax
mov eax, edx
mov dword [ebx + 0x2c], 0
lea esp, [ebp - 0x10]
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret
call sym._vcomp_init_thread_data.part.0
mov ebx, eax
jmp 0x63a04017
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x24], ecx
mov dword [esp], 0x63a08160
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
sub esp, 4
mov edx, dword [ebp - 0x28]
mov eax, dword [eax + 0x10]
cmp dword [ebx + 0x28], eax
je 0x63a04128
mov dword [ebp - 0x1c], edx
mov dword [esp], 0x63a08160
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
mov edx, dword [ebp - 0x1c]
sub esp, 4
lea esp, [ebp - 0x10]
pop ecx
mov eax, edx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret
mov edi, dword [ebp - 0x20]
mov eax, dword [edi + 0x1c]
test eax, eax
je 0x63a040ff
mov edx, dword [edi + 0x24]
cmp eax, edx
mov edi, edx
cmovbe edi, eax
cmp dword [ebx + 0x2c], 3
je 0x63a04183
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [eax + 0x14]
mov dword [edx], ecx
lea edx, [edi - 1]
imul edx, dword [eax + 0x20]
add edx, ecx
mov dword [esi], edx
mov edx, dword [eax + 0x1c]
mov ecx, edx
mov dword [ebp - 0x1c], edx
mov edx, dword [eax + 0x20]
sub ecx, edi
imul edx, edi
add dword [eax + 0x14], edx
xor edx, edx
test edi, edi
mov dword [eax + 0x1c], ecx
setne dl
test ecx, ecx
jne 0x63a040ff
mov eax, dword [eax + 0x18]
mov dword [esi], eax
jmp 0x63a040ff
imul edx, ecx
cmp eax, edx
jbe 0x63a04142
lea eax, [eax + ecx - 1]
xor edx, edx
div ecx
mov edi, eax
jmp 0x63a04142
Function at 0x63a04a50
Capabilities:
Get thread local storage value

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
push ecx
sub esp, 0x58
mov eax, dword [ecx + 4]
mov edi, dword [ecx]
mov ebx, dword [ecx + 8]
mov esi, dword [ecx + 0xc]
mov dword [ebp - 0x28], eax
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x20], eax
mov eax, dword [ecx + 0x14]
mov dword [ebp - 0x24], eax
mov eax, dword [0x63a08140]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_TlsGetValue]
sub esp, 4
test eax, eax
je 0x63a04bc0
mov edx, dword [eax]
mov ecx, dword [eax + 8]
movzx eax, byte [0x63a08048]
and eax, 8
test edx, edx
je 0x63a04ba0
mov edx, dword [edx + 4]
mov dword [ebp - 0x1c], edx
test al, al
jne 0x63a04b4f
cmp dword [ebp - 0x1c], 1
je 0x63a04ba4
test ebx, ebx
jle 0x63a04bd0
test esi, esi
jne 0x63a04b18
mov eax, edi
xor edx, edx
sub eax, dword [ebp - 0x28]
div ebx
xor edx, edx
neg ebx
lea esi, [eax + 1]
mov eax, esi
div dword [ebp - 0x1c]
cmp ecx, edx
jae 0x63a04b2f
lea edx, [eax + 1]
imul ecx, ebx
imul ebx, eax
mov eax, dword [ebp - 0x24]
imul ecx, edx
add ecx, edi
mov edi, dword [ebp - 0x20]
add ebx, ecx
mov dword [edi], ecx
mov dword [eax], ebx
lea esp, [ebp - 0x10]
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret
mov eax, dword [ebp - 0x28]
xor edx, edx
sub eax, edi
div ebx
xor edx, edx
lea esi, [eax + 1]
mov eax, esi
div dword [ebp - 0x1c]
cmp ecx, edx
jb 0x63a04aeb
cmp dword [ebp - 0x1c], esi
ja 0x63a04bf8
imul edx, ebx
add edi, edx
mov edx, eax
dec eax
jmp 0x63a04aee
mov dword [ebp - 0x1c], 1
mov eax, dword [ebp - 0x24]
mov dword [esp + 0x1c], esi
mov dword [esp + 0x18], ebx
mov dword [esp + 0x24], eax
mov eax, dword [ebp - 0x20]
mov dword [esp + 0x10], edi
mov dword [esp + 0x20], eax
mov eax, dword [ebp - 0x28]
mov dword [esp + 0xc], str.__u___u___d___u___p___p__n
mov dword [esp + 0x14], eax
mov dword [esp + 8], str._vcomp_for_static_simple_init
mov dword [esp + 4], 0x63a08048
mov dword [esp], 3
mov dword [ebp - 0x2c], ecx
call sym._wine_dbg_log.constprop.0
mov ecx, dword [ebp - 0x2c]
jmp 0x63a04abc
test al, al
jne 0x63a04b48
mov eax, dword [ebp - 0x20]
mov esi, dword [ebp - 0x28]
mov dword [eax], edi
mov eax, dword [ebp - 0x24]
mov dword [eax], esi
lea esp, [ebp - 0x10]
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret
call sym._vcomp_init_thread_data.part.0
jmp 0x63a04a97
mov eax, dword [ebp - 0x20]
cmp esi, 1
mov edi, dword [ebp - 0x24]
mov dword [eax], 0
sbb eax, eax
and eax, 2
dec eax
mov dword [edi], eax
lea esp, [ebp - 0x10]
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret
mov eax, dword [ebp - 0x20]
mov esi, dword [ebp - 0x24]
mov dword [eax], edi
mov eax, edi
sub eax, ebx
mov dword [esi], eax
jmp 0x63a04b05