joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400aaec0
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r14
push r15
sub rsp, 0x80
mov rax, qword [0x1401970d0]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov rdi, r8
mov r14, rdx
mov rbp, rcx
mov rbx, qword [rdx]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x1400aaf12
nop
cmp qword [rax], rbx
je 0x1400ab00c
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x1400aaf00
mov qword [rsp + 0x30], rdi
mov rdx, rdi
mov ecx, 0xb0
call fcn.1400762f0
mov rbx, rax
xor r15d, r15d
mov qword [rax + 0x20], r15
lea rax, [fcn.1400ab4a0]
mov qword [rbx + 0x28], rax
mov qword [rbx], r15
mov qword [rbx + 8], r15
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], r15
mov dword [rbx + 0x30], r15d
lea rcx, [rbx + 0x38]
mov rdx, rdi
call fcn.1400abae0
mov r8, rbx
mov rdx, r14
mov rcx, rbp
call fcn.14007a6f0
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x38], r15
test al, al
je 0x1400ab07c
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rax
mov rax, qword [r14]
mov qword [rsp + 0x58], rax
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x58]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
nop
mov rsi, qword [rbp + 0x28]
mov qword [rsp + 0x20], rsi
mov rdi, qword [r14]
mov qword [rsp + 0x28], rdi
call fcn.14010c950
xor r9d, r9d
lea r8, [rsp + 0x48]
mov rdx, rbx
mov rcx, qword [rbp + 0x28]
call fcn.1400ab4a0
nop
lea rcx, [rdi + 0x38]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rdi + 0x68]
test rcx, rcx
je 0x1400ab03c
mov rax, qword [rdi + 0x80]
test rax, rax
je 0x1400ab025
mov qword [rax + 0x20], rcx
jmp 0x1400ab029
cmp qword [rax + 8], 0
je 0x1400aaf12
mov rdx, rdi
mov rcx, rdi
call fcn.1400ae6f0
nop
jmp 0x1400ab07c
mov qword [rdi + 0x78], rcx
mov rax, qword [rdi + 0x70]
mov qword [rdi + 0x80], rax
mov qword [rdi + 0x68], r15
mov qword [rdi + 0x70], r15
mov rbx, qword [rdi + 0x78]
test rbx, rbx
setne al
mov byte [rdi + 0x60], al
lea rcx, [rdi + 0x38]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test rbx, rbx
je 0x1400ab06a
lock inc dword [rsi + 0x30]
mov rdx, qword [rsp + 0x28]
mov rcx, rsi
call fcn.140076e20
nop
mov rdx, qword [rsp + 0x68]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
nop
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.14010a950
mov rbx, qword [rsp + 0xc8]
add rsp, 0x80
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
Function at 0x1400ac6d0
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r14
push r15
sub rsp, 0x80
mov rax, qword [0x1401970d0]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov rdi, r8
mov r14, rdx
mov rbp, rcx
mov rbx, qword [rdx]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x1400ac722
nop
cmp qword [rax], rbx
je 0x1400ac81c
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x1400ac710
mov qword [rsp + 0x30], rdi
mov rdx, rdi
mov ecx, 0x138
call fcn.1400762f0
mov rbx, rax
xor r15d, r15d
mov qword [rax + 0x20], r15
lea rax, [fcn.1400ad190]
mov qword [rbx + 0x28], rax
mov qword [rbx], r15
mov qword [rbx + 8], r15
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], r15
mov dword [rbx + 0x30], r15d
lea rcx, [rbx + 0x38]
mov rdx, rdi
call fcn.1400ad9a0
mov r8, rbx
mov rdx, r14
mov rcx, rbp
call fcn.14007a6f0
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x38], r15
test al, al
je 0x1400ac88c
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rax
mov rax, qword [r14]
mov qword [rsp + 0x58], rax
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x58]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
nop
mov rsi, qword [rbp + 0x28]
mov qword [rsp + 0x20], rsi
mov rdi, qword [r14]
mov qword [rsp + 0x28], rdi
call fcn.14010c950
xor r9d, r9d
lea r8, [rsp + 0x48]
mov rdx, rbx
mov rcx, qword [rbp + 0x28]
call fcn.1400ad190
nop
lea rcx, [rdi + 0x38]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rdi + 0x68]
test rcx, rcx
je 0x1400ac84c
mov rax, qword [rdi + 0x80]
test rax, rax
je 0x1400ac835
mov qword [rax + 0x20], rcx
jmp 0x1400ac839
cmp qword [rax + 8], 0
je 0x1400ac722
mov rdx, rdi
mov rcx, rdi
call fcn.1400aeb90
nop
jmp 0x1400ac88c
mov qword [rdi + 0x78], rcx
mov rax, qword [rdi + 0x70]
mov qword [rdi + 0x80], rax
mov qword [rdi + 0x68], r15
mov qword [rdi + 0x70], r15
mov rbx, qword [rdi + 0x78]
test rbx, rbx
setne al
mov byte [rdi + 0x60], al
lea rcx, [rdi + 0x38]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test rbx, rbx
je 0x1400ac87a
lock inc dword [rsi + 0x30]
mov rdx, qword [rsp + 0x28]
mov rcx, rsi
call fcn.140076e20
nop
mov rdx, qword [rsp + 0x68]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
nop
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.14010a950
mov rbx, qword [rsp + 0xc8]
add rsp, 0x80
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
Function at 0x1400ac8b0
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x80
mov rax, qword [0x1401970d0]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov rdi, r8
mov r14, rdx
mov r15, rcx
mov rbx, qword [rdx]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x1400ac902
nop
cmp qword [rax], rbx
je 0x1400aca0c
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x1400ac8f0
mov qword [rsp + 0x30], rdi
mov rdx, rdi
mov ecx, 0x160
call fcn.1400762f0
mov rsi, rax
xor r12d, r12d
mov qword [rax + 0x20], r12
lea rax, [fcn.1400acff0]
mov qword [rsi + 0x28], rax
mov qword [rsi], r12
mov qword [rsi + 8], r12
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], r12
mov dword [rsi + 0x30], r12d
mov rdx, rdi
lea rcx, [rsi + 0x38]
call fcn.140085030
lea rdx, [rdi + 0x78]
lea rcx, [rsi + 0xb0]
call fcn.1400a9560
mov r8, rsi
mov rdx, r14
mov rcx, r15
call fcn.14007a6f0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r12
test al, al
je 0x1400aca7c
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rax
mov rax, qword [r14]
mov qword [rsp + 0x58], rax
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x58]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
nop
mov rbp, qword [r15 + 0x28]
mov qword [rsp + 0x20], rbp
mov rdi, qword [r14]
mov qword [rsp + 0x28], rdi
call fcn.14010c950
xor r9d, r9d
lea r8, [rsp + 0x48]
mov rdx, rsi
mov rcx, qword [r15 + 0x28]
call fcn.1400acff0
nop
lea rcx, [rdi + 0x38]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rdi + 0x68]
test rcx, rcx
je 0x1400aca3c
mov rax, qword [rdi + 0x80]
test rax, rax
je 0x1400aca25
mov qword [rax + 0x20], rcx
jmp 0x1400aca29
cmp qword [rax + 8], 0
je 0x1400ac902
mov rdx, rdi
mov rcx, rdi
call fcn.1400aebf0
nop
jmp 0x1400aca7c
mov qword [rdi + 0x78], rcx
mov rax, qword [rdi + 0x70]
mov qword [rdi + 0x80], rax
mov qword [rdi + 0x68], r12
mov qword [rdi + 0x70], r12
mov rbx, qword [rdi + 0x78]
test rbx, rbx
setne al
mov byte [rdi + 0x60], al
lea rcx, [rdi + 0x38]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test rbx, rbx
je 0x1400aca6a
lock inc dword [rbp + 0x30]
mov rdx, qword [rsp + 0x28]
mov rcx, rbp
call fcn.140076e20
nop
mov rdx, qword [rsp + 0x68]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
nop
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.14010a950
add rsp, 0x80
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
Function at 0x1400ada40
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x80
mov rax, qword [0x1401970d0]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov rsi, r8
mov r14, rdx
mov r15, rcx
mov rbx, qword [rdx]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x1400ada8e
nop
cmp qword [rax], rbx
je 0x1400adaa8
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x1400ada80
mov qword [rsp + 0x30], rsi
mov rdi, qword [rsi]
cmp byte [rdi + 0x400], 0
jne 0x1400adac0
mov byte [rdi + 0x400], 1
jmp 0x1400adacd
cmp qword [rax + 8], 0
je 0x1400ada8e
mov rdx, rsi
mov rcx, rsi
call fcn.1400aece0
nop
jmp 0x1400adc29
mov ecx, 0xb8
call fcn.14010a978
mov rdi, rax
xor r12d, r12d
mov qword [rdi + 0x20], r12
lea rax, [fcn.1400adfe0]
mov qword [rdi + 0x28], rax
mov qword [rdi], r12
mov qword [rdi + 8], r12
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], r12
mov dword [rdi + 0x30], r12d
mov rdx, rsi
lea rcx, [rdi + 0x38]
call fcn.14009ec00
movups xmm0, xmmword [rsi + 0x68]
movups xmmword [rdi + 0xa0], xmm0
mov rax, qword [rsi + 0x78]
mov qword [rdi + 0xb0], rax
mov r8, rdi
mov rdx, r14
mov rcx, r15
call fcn.14007a6f0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r12
test al, al
je 0x1400adc1f
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rax
mov rax, qword [r14]
mov qword [rsp + 0x58], rax
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x58]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
nop
mov rbp, qword [r15 + 0x28]
mov qword [rsp + 0x20], rbp
mov rsi, qword [r14]
mov qword [rsp + 0x28], rsi
call fcn.14010c950
xor r9d, r9d
lea r8, [rsp + 0x48]
mov rdx, rdi
mov rcx, qword [r15 + 0x28]
call fcn.1400adfe0
nop
lea rcx, [rsi + 0x38]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rsi + 0x68]
test rcx, rcx
je 0x1400adbdf
mov rax, qword [rsi + 0x80]
test rax, rax
je 0x1400adbc8
mov qword [rax + 0x20], rcx
jmp 0x1400adbcc
mov qword [rsi + 0x78], rcx
mov rax, qword [rsi + 0x70]
mov qword [rsi + 0x80], rax
mov qword [rsi + 0x68], r12
mov qword [rsi + 0x70], r12
mov rbx, qword [rsi + 0x78]
test rbx, rbx
setne al
mov byte [rsi + 0x60], al
lea rcx, [rsi + 0x38]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test rbx, rbx
je 0x1400adc0d
lock inc dword [rbp + 0x30]
mov rdx, qword [rsp + 0x28]
mov rcx, rbp
call fcn.140076e20
nop
mov rdx, qword [rsp + 0x68]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
nop
lea rcx, [rsp + 0x30]
call fcn.1400ae130
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.14010a950
add rsp, 0x80
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
Function at 0x1400adc50
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x80
mov rax, qword [0x1401970d0]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov rsi, r8
mov r14, rdx
mov r15, rcx
mov rbx, qword [rdx]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x1400adc9e
nop
cmp qword [rax], rbx
je 0x1400adcb8
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x1400adc90
mov qword [rsp + 0x30], rsi
mov rdi, qword [rsi]
cmp byte [rdi + 0x400], 0
jne 0x1400adcd0
mov byte [rdi + 0x400], 1
jmp 0x1400adcdd
cmp qword [rax + 8], 0
je 0x1400adc9e
mov rdx, rsi
mov rcx, rsi
call fcn.1400aece0
nop
jmp 0x1400ade39
mov ecx, 0xb8
call fcn.14010a978
mov rdi, rax
xor r12d, r12d
mov qword [rdi + 0x20], r12
lea rax, [fcn.1400ade90]
mov qword [rdi + 0x28], rax
mov qword [rdi], r12
mov qword [rdi + 8], r12
mov qword [rdi + 0x10], r12
mov qword [rdi + 0x18], r12
mov dword [rdi + 0x30], r12d
mov rdx, rsi
lea rcx, [rdi + 0x38]
call fcn.14009ed00
movups xmm0, xmmword [rsi + 0x68]
movups xmmword [rdi + 0xa0], xmm0
mov rax, qword [rsi + 0x78]
mov qword [rdi + 0xb0], rax
mov r8, rdi
mov rdx, r14
mov rcx, r15
call fcn.14007a6f0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r12
test al, al
je 0x1400ade2f
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rax
mov rax, qword [r14]
mov qword [rsp + 0x58], rax
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x58]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
nop
mov rbp, qword [r15 + 0x28]
mov qword [rsp + 0x20], rbp
mov rsi, qword [r14]
mov qword [rsp + 0x28], rsi
call fcn.14010c950
xor r9d, r9d
lea r8, [rsp + 0x48]
mov rdx, rdi
mov rcx, qword [r15 + 0x28]
call fcn.1400ade90
nop
lea rcx, [rsi + 0x38]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rsi + 0x68]
test rcx, rcx
je 0x1400addef
mov rax, qword [rsi + 0x80]
test rax, rax
je 0x1400addd8
mov qword [rax + 0x20], rcx
jmp 0x1400adddc
mov qword [rsi + 0x78], rcx
mov rax, qword [rsi + 0x70]
mov qword [rsi + 0x80], rax
mov qword [rsi + 0x68], r12
mov qword [rsi + 0x70], r12
mov rbx, qword [rsi + 0x78]
test rbx, rbx
setne al
mov byte [rsi + 0x60], al
lea rcx, [rsi + 0x38]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test rbx, rbx
je 0x1400ade1d
lock inc dword [rbp + 0x30]
mov rdx, qword [rsp + 0x28]
mov rcx, rbp
call fcn.140076e20
nop
mov rdx, qword [rsp + 0x68]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
nop
lea rcx, [rsp + 0x30]
call fcn.1400ae130
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.14010a950
add rsp, 0x80
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
Function at 0x1400ae220
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x80
mov rax, qword [0x1401970d0]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov rdi, r8
mov r14, rdx
mov r15, rcx
mov rbx, qword [rdx]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x1400ae272
nop
cmp qword [rax], rbx
je 0x1400ae384
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x1400ae260
mov qword [rsp + 0x30], rdi
mov rdx, rdi
mov ecx, 0xc8
call fcn.1400762f0
mov rsi, rax
xor r12d, r12d
mov qword [rax + 0x20], r12
lea rax, [fcn.1400ae430]
mov qword [rsi + 0x28], rax
mov qword [rsi], r12
mov qword [rsi + 8], r12
mov qword [rsi + 0x10], r12
mov qword [rsi + 0x18], r12
mov dword [rsi + 0x30], r12d
mov rdx, rdi
lea rcx, [rsi + 0x38]
call fcn.1400850c0
movups xmm0, xmmword [rdi + 0x40]
movups xmmword [rsi + 0x78], xmm0
lea rdx, [rdi + 0x50]
lea rcx, [rsi + 0x88]
call fcn.1400850c0
mov r8, rsi
mov rdx, r14
mov rcx, r15
call fcn.14007a6f0
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r12
test al, al
je 0x1400ae3f4
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rax
mov rax, qword [r14]
mov qword [rsp + 0x58], rax
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x58]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
nop
mov rbp, qword [r15 + 0x28]
mov qword [rsp + 0x20], rbp
mov rdi, qword [r14]
mov qword [rsp + 0x28], rdi
call fcn.14010c950
xor r9d, r9d
lea r8, [rsp + 0x48]
mov rdx, rsi
mov rcx, qword [r15 + 0x28]
call fcn.1400ae430
nop
lea rcx, [rdi + 0x38]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rdi + 0x68]
test rcx, rcx
je 0x1400ae3b4
mov rax, qword [rdi + 0x80]
test rax, rax
je 0x1400ae39d
mov qword [rax + 0x20], rcx
jmp 0x1400ae3a1
cmp qword [rax + 8], 0
je 0x1400ae272
mov rdx, rdi
mov rcx, rdi
call fcn.1400af790
nop
jmp 0x1400ae3fe
mov qword [rdi + 0x78], rcx
mov rax, qword [rdi + 0x70]
mov qword [rdi + 0x80], rax
mov qword [rdi + 0x68], r12
mov qword [rdi + 0x70], r12
mov rbx, qword [rdi + 0x78]
test rbx, rbx
setne al
mov byte [rdi + 0x60], al
lea rcx, [rdi + 0x38]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test rbx, rbx
je 0x1400ae3e2
lock inc dword [rbp + 0x30]
mov rdx, qword [rsp + 0x28]
mov rcx, rbp
call fcn.140076e20
nop
mov rdx, qword [rsp + 0x68]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
nop
lea rcx, [rsp + 0x30]
call fcn.1400ae600
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.14010a950
add rsp, 0x80
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
Function at 0x1400ae720
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r14
push r15
sub rsp, 0x80
mov rax, qword [0x1401970d0]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov rdi, r8
mov r14, rdx
mov rbp, rcx
mov rbx, qword [rdx]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x1400ae772
nop
cmp qword [rax], rbx
je 0x1400ae86c
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x1400ae760
mov qword [rsp + 0x30], rdi
mov rdx, rdi
mov ecx, 0x188
call fcn.1400762f0
mov rbx, rax
xor r15d, r15d
mov qword [rax + 0x20], r15
lea rax, [fcn.1400ae9b0]
mov qword [rbx + 0x28], rax
mov qword [rbx], r15
mov qword [rbx + 8], r15
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], r15
mov dword [rbx + 0x30], r15d
lea rcx, [rbx + 0x38]
mov rdx, rdi
call fcn.1400aeb20
mov r8, rbx
mov rdx, r14
mov rcx, rbp
call fcn.14007a6f0
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x38], r15
test al, al
je 0x1400ae8dc
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rax
mov rax, qword [r14]
mov qword [rsp + 0x58], rax
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x58]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
nop
mov rsi, qword [rbp + 0x28]
mov qword [rsp + 0x20], rsi
mov rdi, qword [r14]
mov qword [rsp + 0x28], rdi
call fcn.14010c950
xor r9d, r9d
lea r8, [rsp + 0x48]
mov rdx, rbx
mov rcx, qword [rbp + 0x28]
call fcn.1400ae9b0
nop
lea rcx, [rdi + 0x38]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rdi + 0x68]
test rcx, rcx
je 0x1400ae89c
mov rax, qword [rdi + 0x80]
test rax, rax
je 0x1400ae885
mov qword [rax + 0x20], rcx
jmp 0x1400ae889
cmp qword [rax + 8], 0
je 0x1400ae772
mov rdx, rdi
mov rcx, rdi
call fcn.1400af7c0
nop
jmp 0x1400ae8dc
mov qword [rdi + 0x78], rcx
mov rax, qword [rdi + 0x70]
mov qword [rdi + 0x80], rax
mov qword [rdi + 0x68], r15
mov qword [rdi + 0x70], r15
mov rbx, qword [rdi + 0x78]
test rbx, rbx
setne al
mov byte [rdi + 0x60], al
lea rcx, [rdi + 0x38]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test rbx, rbx
je 0x1400ae8ca
lock inc dword [rsi + 0x30]
mov rdx, qword [rsp + 0x28]
mov rcx, rsi
call fcn.140076e20
nop
mov rdx, qword [rsp + 0x68]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
nop
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.14010a950
mov rbx, qword [rsp + 0xc8]
add rsp, 0x80
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
Function at 0x1400aed50
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r14
push r15
sub rsp, 0x80
mov rax, qword [0x1401970d0]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov rdi, r8
mov r14, rdx
mov rbp, rcx
mov rbx, qword [rdx]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x1400aeda2
nop
cmp qword [rax], rbx
je 0x1400aeea6
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x1400aed90
mov qword [rsp + 0x20], rdi
mov rdx, rdi
mov ecx, 0x168
call fcn.1400762f0
mov rbx, rax
mov qword [rsp + 0x28], rax
xor r15d, r15d
mov qword [rsp + 0x30], r15
mov qword [rax + 0x20], r15
lea rax, [fcn.1400af3c0]
mov qword [rbx + 0x28], rax
mov qword [rbx], r15
mov qword [rbx + 8], r15
mov qword [rbx + 0x10], r15
mov qword [rbx + 0x18], r15
mov dword [rbx + 0x30], r15d
lea rcx, [rbx + 0x38]
mov rdx, rdi
call fcn.1400af670
mov r8, rbx
mov rdx, r14
mov rcx, rbp
call fcn.14007a6f0
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], r15
test al, al
je 0x1400aef16
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0x58], xmm0
mov qword [rsp + 0x68], rax
mov rax, qword [r14]
mov qword [rsp + 0x58], rax
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov qword [rsp + 0x68], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x60], rax
lea rdx, [rsp + 0x58]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
nop
mov rsi, qword [rbp + 0x28]
mov qword [rsp + 0x38], rsi
mov rdi, qword [r14]
mov qword [rsp + 0x40], rdi
call fcn.14010c950
xor r9d, r9d
lea r8, [rsp + 0x48]
mov rdx, rbx
mov rcx, qword [rbp + 0x28]
call fcn.1400af3c0
nop
lea rcx, [rdi + 0x38]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov rcx, qword [rdi + 0x68]
test rcx, rcx
je 0x1400aeed6
mov rax, qword [rdi + 0x80]
test rax, rax
je 0x1400aeebf
mov qword [rax + 0x20], rcx
jmp 0x1400aeec3
cmp qword [rax + 8], 0
je 0x1400aeda2
mov rdx, rdi
mov rcx, rdi
call fcn.1400b09c0
nop
jmp 0x1400aef16
mov qword [rdi + 0x78], rcx
mov rax, qword [rdi + 0x70]
mov qword [rdi + 0x80], rax
mov qword [rdi + 0x68], r15
mov qword [rdi + 0x70], r15
mov rbx, qword [rdi + 0x78]
test rbx, rbx
setne al
mov byte [rdi + 0x60], al
lea rcx, [rdi + 0x38]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test rbx, rbx
je 0x1400aef04
lock inc dword [rsi + 0x30]
mov rdx, qword [rsp + 0x40]
mov rcx, rsi
call fcn.140076e20
nop
mov rdx, qword [rsp + 0x68]
mov ecx, dword [0x1401a5e84]
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
nop
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.14010a950
mov rbx, qword [rsp + 0xc8]
add rsp, 0x80
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret