joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400bfe60
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xf0
movups xmm0, xmmword [rdx + 0x10]
movups xmmword [rbp - 0x79], xmm0
mov rax, qword [rcx]
mov qword [rbp - 0x69], rax
mov rax, qword [rcx + 8]
mov qword [rbp - 0x61], rax
movups xmm0, xmmword [rcx + 0x10]
movups xmmword [rbp - 0x59], xmm0
mov eax, dword [rcx + 0x20]
mov dword [rbp - 0x49], eax
mov eax, dword [rcx + 0x24]
mov dword [rbp - 0x45], eax
movups xmm0, xmmword [rcx + 0x28]
movups xmmword [rbp - 0x41], xmm0
mov rax, qword [rcx + 0x38]
mov qword [rbp - 0x31], rax
mov rax, qword [rcx + 0x40]
mov qword [rbp - 0x29], rax
mov rax, qword [rcx + 0x48]
mov qword [rbp - 0x21], rax
mov rax, qword [rcx + 0x50]
mov qword [rbp - 0x19], rax
mov eax, dword [rcx + 0x58]
mov dword [rbp - 0x11], eax
mov rax, qword [rcx + 0x60]
mov qword [rbp - 9], rax
movups xmm0, xmmword [rcx + 0x68]
movups xmmword [rbp - 1], xmm0
movups xmm1, xmmword [rcx + 0x78]
movups xmmword [rbp + 0xf], xmm1
movups xmm0, xmmword [rcx + 0x88]
movups xmmword [rbp + 0x1f], xmm0
mov rax, qword [rcx + 0x98]
mov qword [rbp + 0x2f], rax
lea rdi, [rdx + 8]
mov rsi, qword [rdx]
mov rbx, qword [rdi]
mov ecx, dword [0x1403caaf0]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x1400bff32
nop
cmp qword [rax], rbx
je 0x1400c0045
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x1400bff20
lea rax, [rbp - 0x79]
mov qword [rbp + 0x37], rax
lea rdx, [rbp + 0xf]
mov ecx, 0xf0
call fcn.140034dd0
mov r8, rax
xor ecx, ecx
mov qword [rax + 0x20], rcx
lea rax, [0x1400c1760]
mov qword [r8 + 0x28], rax
mov qword [r8], rcx
mov qword [r8 + 8], rcx
mov qword [r8 + 0x10], rcx
mov qword [r8 + 0x18], rcx
mov dword [r8 + 0x30], ecx
movups xmm0, xmmword [rbp - 0x79]
movups xmmword [r8 + 0x38], xmm0
mov rax, qword [rbp - 0x69]
mov qword [r8 + 0x48], rax
mov rax, qword [rbp - 0x61]
mov qword [r8 + 0x50], rax
movups xmm0, xmmword [rbp - 0x59]
movups xmmword [r8 + 0x58], xmm0
mov eax, dword [rbp - 0x49]
mov dword [r8 + 0x68], eax
mov eax, dword [rbp - 0x45]
mov dword [r8 + 0x6c], eax
movups xmm0, xmmword [rbp - 0x41]
movups xmmword [r8 + 0x70], xmm0
mov rax, qword [rbp - 0x31]
mov qword [r8 + 0x80], rax
mov rax, qword [rbp - 0x29]
mov qword [r8 + 0x88], rax
mov rax, qword [rbp - 0x21]
mov qword [r8 + 0x90], rax
mov rax, qword [rbp - 0x19]
mov qword [r8 + 0x98], rax
mov eax, dword [rbp - 0x11]
mov dword [r8 + 0xa0], eax
mov rax, qword [rbp - 9]
mov qword [r8 + 0xa8], rax
movups xmm0, xmmword [rbp - 1]
movups xmmword [r8 + 0xb0], xmm0
movups xmm1, xmmword [rbp + 0xf]
movups xmmword [r8 + 0xc0], xmm1
movups xmm0, xmmword [rbp + 0x1f]
movups xmmword [r8 + 0xd0], xmm0
mov rax, qword [rbp + 0x2f]
mov qword [r8 + 0xe0], rax
mov qword [rbp + 0x47], rcx
mov qword [rbp + 0x3f], rcx
mov rdx, rdi
mov rcx, rsi
call fcn.140037050
nop
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
cmp qword [rax + 8], 0
je 0x1400bff32
lea rdx, [rbp - 0x79]
lea rcx, [rbp - 0x79]
call fcn.1400c1f30
nop
jmp 0x1400c002c
Function at 0x1400c0550
Capabilities:
Get thread local storage value

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x150
movaps xmmword [rax - 0x48], xmm6
movaps xmmword [rax - 0x58], xmm7
movaps xmmword [rax - 0x68], xmm8
movaps xmmword [rax - 0x78], xmm9
movaps xmmword [rax - 0x88], xmm10
movaps xmmword [rax - 0x98], xmm11
movaps xmmword [rax - 0xa8], xmm12
mov rbx, rcx
mov rax, qword [rcx + 0x20]
mov r8, qword [rax + 0x18]
test r8, r8
je 0x1400c05cc
lea rax, [0x1400c0e90]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], rdx
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea rdx, [rsp + 0x20]
call r8
jmp 0x1400c0715
mov rdi, qword [rdx]
mov rsi, qword [rdx + 8]
movups xmm6, xmmword [rdx + 0x10]
mov ebp, dword [rdx + 0x20]
mov r14d, dword [rdx + 0x24]
movups xmm7, xmmword [rdx + 0x28]
mov r15, qword [rdx + 0x38]
mov r12, qword [rdx + 0x40]
movups xmm8, xmmword [rdx + 0x48]
movsd xmm9, qword [rdx + 0x58]
mov r13d, dword [rdx + 0x60]
mov rax, qword [rdx + 0x68]
mov qword [rsp + 0x1a0], rax
mov rax, qword [rdx + 0x70]
mov qword [rsp + 0x1a8], rax
movups xmm10, xmmword [rdx + 0x80]
movups xmm11, xmmword [rdx + 0x90]
movups xmm12, xmmword [rdx + 0xa0]
mov ecx, dword [0x1403caaa8]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x1400c066c
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x1400c066c
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x1400c066c
mov qword [rcx + 0x10], 0
movzx ecx, byte [rax]
cmp cl, 0x30
jb 0x1400c0664
mov byte [rax + 0xc0], cl
jmp 0x1400c067d
mov rcx, rax
call fcn.1400e9a90
mov ecx, 0xc1
call fcn.140250dd4
mov byte [rax + 0xc0], 0x30
mov qword [rax + 8], rdi
mov qword [rax + 0x10], rsi
movups xmmword [rax + 0x18], xmm6
mov dword [rax + 0x28], ebp
mov dword [rax + 0x2c], r14d
movups xmmword [rax + 0x30], xmm7
mov qword [rax + 0x40], r15
mov qword [rax + 0x48], r12
movups xmmword [rax + 0x50], xmm8
movsd qword [rax + 0x60], xmm9
mov dword [rax + 0x68], r13d
mov rcx, qword [rsp + 0x1a0]
mov qword [rax + 0x70], rcx
mov rcx, qword [rsp + 0x1a8]
mov qword [rax + 0x78], rcx
movups xmmword [rax + 0x88], xmm10
movups xmmword [rax + 0x98], xmm11
movups xmmword [rax + 0xa8], xmm12
lea rcx, [0x1400c13c0]
mov qword [rax], rcx
mov qword [rsp + 0x190], rax
mov rax, qword [rbx + 0x20]
lea rdx, [rsp + 0x190]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_recv]
nop
mov rax, qword [rsp + 0x190]
test rax, rax
je 0x1400c0715
xor edx, edx
mov rcx, rax
call qword [rax]
nop
lea r11, [rsp + 0x150]
mov rbx, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
Function at 0x1400c0ef0
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x130
mov r8, rdx
mov rdx, rcx
movups xmm0, xmmword [r8 + 0xb8]
movups xmmword [rsp + 0x38], xmm0
lea rcx, [rsp + 0x48]
call fcn.1400c0b20
movups xmm2, xmmword [rdx + 0xc8]
movups xmmword [rsp + 0x110], xmm2
mov rax, qword [rdx + 0xd8]
mov qword [rsp + 0x120], rax
lea rdi, [r8 + 0xb0]
mov rsi, qword [r8 + 0xa8]
mov rbx, qword [rdi]
mov ecx, dword [0x1403caaf0]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x1400c0f72
nop
cmp qword [rax], rbx
je 0x1400c1017
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x1400c0f60
lea rax, [rsp + 0x38]
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x100]
mov ecx, 0x130
call fcn.140034dd0
mov r8, rax
xor r9d, r9d
mov qword [rax + 0x20], r9
lea rax, [0x1400c2690]
mov qword [r8 + 0x28], rax
mov qword [r8], r9
mov qword [r8 + 8], r9
mov qword [r8 + 0x10], r9
mov qword [r8 + 0x18], r9
mov dword [r8 + 0x30], r9d
movups xmm0, xmmword [rsp + 0x38]
movups xmmword [r8 + 0x38], xmm0
lea rcx, [r8 + 0x48]
lea rdx, [rsp + 0x48]
call fcn.1400c0b20
movups xmm2, xmmword [rsp + 0x110]
movups xmmword [rcx + 0xc8], xmm2
mov rax, qword [rsp + 0x120]
mov qword [rcx + 0xd8], rax
mov qword [rsp + 0x30], r9
mov qword [rsp + 0x28], r9
mov rdx, rdi
mov rcx, rsi
call fcn.140037050
nop
lea r11, [rsp + 0x130]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rsp, r11
pop rdi
ret
cmp qword [rax + 8], 0
je 0x1400c0f72
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x38]
call fcn.1400c2750
nop
jmp 0x1400c1002
Function at 0x1400c1040
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rdi
push rbp
lea rbp, [rsp - 0x80]
sub rsp, 0x180
mov rax, qword [0x1403b8550]
xor rax, rsp
mov qword [rbp + 0x70], rax
mov rbx, rdx
lea rdx, [rsp + 0x30]
call fcn.140062a80
mov rdi, rax
mov rcx, qword [rax + 0x10]
mov qword [rbp + 0x50], rcx
mov rcx, qword [rax + 0x20]
mov qword [rbp + 0x60], rcx
lea rax, method.std::basic_streambuf_char__struct_std::char_traits_char__.virtual_8
mov qword [rdi + 0x10], rax
lea rax, [0x14035ce80]
mov qword [rdi + 0x20], rax
mov rdx, rdi
lea rcx, [rbp + 0x40]
mov rax, qword [rbp + 0x50]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [rdi + 0x18], 0
mov rax, qword [rdi + 0x28]
mov qword [rbp + 0x68], rax
lea rax, [0x14035c800]
mov qword [rdi + 0x28], rax
mov rax, qword [rdi + 0x10]
mov rdx, qword [rax]
lea rax, [sym.ethminer.exe_public_virtual:_void___cdecl_Json::CharReader::destructor_void____ptr64]
cmp rdx, rax
je 0x1400c10dd
mov rcx, rdi
call rdx
nop
mov rax, qword [rbp + 0x60]
mov r8, qword [rax + 0x18]
test r8, r8
je 0x1400c1117
lea rax, [0x1400c1ea0]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], rbx
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x40]
call r8
jmp 0x1400c11e8
mov rdx, rbx
lea rcx, [rsp + 0x60]
call fcn.1400c0b20
movups xmm0, xmmword [rbx + 0xc8]
movups xmmword [rbp + 0x28], xmm0
mov rax, qword [rbx + 0xd8]
mov qword [rbp + 0x38], rax
mov ecx, dword [0x1403caaa8]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x1400c117e
mov rax, qword [rax + 8]
test rax, rax
je 0x1400c117e
mov r8, qword [rax + 0x10]
test r8, r8
je 0x1400c117e
mov qword [rax + 0x10], 0
movzx eax, byte [r8]
cmp al, 0x3c
jb 0x1400c1176
mov byte [r8 + 0xf0], al
jmp 0x1400c1192
mov rcx, r8
call fcn.1400e9a90
mov ecx, 0xf1
call fcn.140250dd4
mov r8, rax
mov byte [rax + 0xf0], 0x3c
lea rcx, [r8 + 8]
lea rdx, [rsp + 0x60]
call fcn.1400c0b20
movups xmm0, xmmword [rbp + 0x28]
movups xmmword [rcx + 0xc8], xmm0
mov rax, qword [rbp + 0x38]
mov qword [rcx + 0xd8], rax
lea rax, [0x1400c1f70]
mov qword [r8], rax
mov qword [rsp + 0x20], r8
lea rdx, [rsp + 0x20]
lea rcx, [rbp + 0x40]
mov rax, qword [rbp + 0x60]
call qword [rax + reloc.WS2_32.dll_recv]
nop
mov rax, qword [rsp + 0x20]
test rax, rax
je 0x1400c11e8
xor edx, edx
mov rcx, rax
call qword [rax]
nop
lea rcx, [rbp + 0x40]
mov rax, qword [rbp + 0x50]
call qword [rax]
nop
mov rcx, qword [rbp + 0x70]
xor rcx, rsp
call fcn.140250db0
lea r11, [rsp + 0x180]
mov rbx, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret
Function at 0x1400c7dc0
Capabilities:
Get thread local storage value

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rcx
push rbx
sub rsp, 0x90
movaps xmmword [r11 - 0x18], xmm6
movaps xmmword [rsp + 0x70], xmm7
movaps xmmword [r11 - 0x38], xmm8
mov rbx, rdx
mov rax, qword [rdx + 0x20]
mov r9, qword [rax + 0x18]
test r9, r9
je 0x1400c7e17
lea rax, [0x140062c30]
mov qword [r11 - 0x78], rax
mov qword [r11 - 0x70], r8
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea rdx, [r11 - 0x78]
mov rcx, rbx
call r9
jmp 0x1400c7eba
movups xmm6, xmmword [r8]
movups xmm7, xmmword [r8 + 0x10]
movups xmm8, xmmword [r8 + 0x20]
mov ecx, dword [0x1403caaa8]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x1400c7e65
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x1400c7e65
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x1400c7e65
mov qword [rcx + 0x10], 0
movzx ecx, byte [rax]
cmp cl, 0x10
jb 0x1400c7e5d
mov byte [rax + 0x40], cl
jmp 0x1400c7e73
mov rcx, rax
call fcn.1400e9a90
mov ecx, 0x41
call fcn.140250dd4
mov byte [rax + 0x40], reloc.WS2_32.dll_recv
movups xmmword [rax + 8], xmm6
movups xmmword [rax + 0x18], xmm7
movups xmmword [rax + 0x28], xmm8
lea rcx, [0x140062d40]
mov qword [rax], rcx
mov qword [rsp + 0xa0], rax
mov rax, qword [rbx + 0x20]
lea rdx, [rsp + 0xa0]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_recv]
nop
mov rax, qword [rsp + 0xa0]
test rax, rax
je 0x1400c7eba
xor edx, edx
mov rcx, rax
call qword [rax]
nop
movaps xmm6, xmmword [rsp + 0x80]
movaps xmm7, xmmword [rsp + 0x70]
movaps xmm8, xmmword [rsp + 0x60]
add rsp, 0x90
pop rbx
ret
Function at 0x1400c8330
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xb0
movups xmm0, xmmword [rdx + 0x30]
movups xmmword [rbp - 0x39], xmm0
mov rax, qword [rcx]
mov qword [rbp - 0x29], rax
mov rax, qword [rcx + 8]
mov qword [rbp - 0x21], rax
mov eax, dword [rcx + 0x10]
mov dword [rbp - 0x19], eax
mov rax, qword [rcx + 0x18]
mov qword [rbp - 0x11], rax
movups xmm0, xmmword [rcx + 0x20]
movups xmmword [rbp - 9], xmm0
movups xmm1, xmmword [rcx + 0x30]
movups xmmword [rbp + 7], xmm1
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rbp + 0x17], xmm0
mov rax, qword [rcx + 0x50]
mov qword [rbp + 0x27], rax
lea rdi, [rdx + 0x28]
mov rsi, qword [rdx + 0x20]
mov rbx, qword [rdi]
mov ecx, dword [0x1403caaf0]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x1400c83c2
nop dword [rax]
cmp qword [rax], rbx
je 0x1400c847d
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x1400c83b0
lea rax, [rbp - 0x39]
mov qword [rbp + 0x2f], rax
lea rdx, [rbp + 7]
mov ecx, 0xa8
call fcn.140034dd0
mov r8, rax
xor ecx, ecx
mov qword [rax + 0x20], rcx
lea rax, [0x1400c9070]
mov qword [r8 + 0x28], rax
mov qword [r8], rcx
mov qword [r8 + 8], rcx
mov qword [r8 + 0x10], rcx
mov qword [r8 + 0x18], rcx
mov dword [r8 + 0x30], ecx
movups xmm0, xmmword [rbp - 0x39]
movups xmmword [r8 + 0x38], xmm0
mov rax, qword [rbp - 0x29]
mov qword [r8 + 0x48], rax
mov rax, qword [rbp - 0x21]
mov qword [r8 + 0x50], rax
mov eax, dword [rbp - 0x19]
mov dword [r8 + 0x58], eax
mov rax, qword [rbp - 0x11]
mov qword [r8 + 0x60], rax
movups xmm0, xmmword [rbp - 9]
movups xmmword [r8 + 0x68], xmm0
movups xmm1, xmmword [rbp + 7]
movups xmmword [r8 + 0x78], xmm1
movups xmm0, xmmword [rbp + 0x17]
movups xmmword [r8 + 0x88], xmm0
mov rax, qword [rbp + 0x27]
mov qword [r8 + 0x98], rax
mov qword [rbp + 0x3f], rcx
mov qword [rbp + 0x37], rcx
mov rdx, rdi
mov rcx, rsi
call fcn.140037050
nop
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
cmp qword [rax + 8], 0
je 0x1400c83c2
lea rdx, [rbp - 0x39]
lea rcx, [rbp - 0x39]
call fcn.1400c92a0
nop
jmp 0x1400c8464
Function at 0x1400c84a0
Capabilities:
Get thread local storage value

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
push rsi
push rdi
push r14
sub rsp, 0x120
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
mov rax, qword [0x1403b8550]
xor rax, rsp
mov qword [rsp + 0xe8], rax
mov rbx, rdx
lea rdx, [rsp + 0x30]
call fcn.140062a80
mov rdi, rax
mov rcx, qword [rax + 0x10]
mov qword [rsp + 0xc8], rcx
mov rcx, qword [rax + 0x20]
mov qword [rsp + 0xd8], rcx
lea rax, method.std::basic_streambuf_char__struct_std::char_traits_char__.virtual_8
mov qword [rdi + 0x10], rax
lea rax, [0x14035ce80]
mov qword [rdi + 0x20], rax
mov rdx, rdi
lea rcx, [rsp + 0xb8]
mov rax, qword [rsp + 0xc8]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [rdi + 0x18], 0
mov rax, qword [rdi + 0x28]
mov qword [rsp + 0xe0], rax
lea rax, [0x14035c800]
mov qword [rdi + 0x28], rax
mov rax, qword [rdi + 0x10]
mov rdx, qword [rax]
lea rax, [sym.ethminer.exe_public_virtual:_void___cdecl_Json::CharReader::destructor_void____ptr64]
cmp rdx, rax
je 0x1400c8561
mov rcx, rdi
call rdx
nop
mov rax, qword [rsp + 0xd8]
mov r8, qword [rax + 0x18]
test r8, r8
je 0x1400c85a3
lea rax, [0x1400c8b10]
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], rbx
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0xb8]
call r8
jmp 0x1400c866a
mov rdi, qword [rbx]
mov rsi, qword [rbx + 8]
mov ebp, dword [rbx + 0x10]
mov r14, qword [rbx + 0x18]
movups xmm6, xmmword [rbx + 0x20]
movups xmm7, xmmword [rbx + 0x30]
movups xmm8, xmmword [rbx + 0x40]
mov rbx, qword [rbx + 0x50]
mov ecx, dword [0x1403caaa8]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x1400c8602
mov rcx, qword [rax + 8]
test rcx, rcx
je 0x1400c8602
mov rax, qword [rcx + 0x10]
test rax, rax
je 0x1400c8602
mov qword [rcx + 0x10], 0
movzx ecx, byte [rax]
cmp cl, 0x1a
jb 0x1400c85fa
mov byte [rax + 0x68], cl
jmp 0x1400c8610
mov rcx, rax
call fcn.1400e9a90
mov ecx, 0x69
call fcn.140250dd4
mov byte [rax + 0x68], 0x1a
mov qword [rax + 8], rdi
mov qword [rax + 0x10], rsi
mov dword [rax + 0x18], ebp
mov qword [rax + 0x20], r14
movups xmmword [rax + 0x28], xmm6
movups xmmword [rax + 0x38], xmm7
movups xmmword [rax + 0x48], xmm8
mov qword [rax + 0x58], rbx
lea rcx, [0x1400c8f10]
mov qword [rax], rcx
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0xb8]
mov rax, qword [rsp + 0xd8]
call qword [rax + reloc.WS2_32.dll_recv]
nop
mov rax, qword [rsp + 0x20]
test rax, rax
je 0x1400c866a
xor edx, edx
mov rcx, rax
call qword [rax]
nop
lea rcx, [rsp + 0xb8]
mov rax, qword [rsp + 0xc8]
call qword [rax]
nop
mov rcx, qword [rsp + 0xe8]
xor rcx, rsp
call fcn.140250db0
lea r11, [rsp + 0x120]
mov rbx, qword [r11 + 0x28]
mov rbp, qword [r11 + 0x30]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret
Function at 0x1400c8b20
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xd0
movups xmm0, xmmword [rdx + 0x50]
movups xmmword [rbp - 0x59], xmm0
mov rax, qword [rcx]
mov qword [rbp - 0x49], rax
movups xmm0, xmmword [rcx + 8]
movups xmmword [rbp - 0x41], xmm0
movsd xmm1, qword [rcx + 0x18]
movsd qword [rbp - 0x31], xmm1
mov eax, dword [rcx + 0x20]
mov dword [rbp - 0x29], eax
mov rax, qword [rcx + 0x28]
mov qword [rbp - 0x21], rax
mov rax, qword [rcx + 0x30]
mov qword [rbp - 0x19], rax
movups xmm0, xmmword [rcx + 0x40]
movups xmmword [rbp - 9], xmm0
movups xmm1, xmmword [rcx + 0x50]
movups xmmword [rbp + 7], xmm1
movups xmm0, xmmword [rcx + 0x60]
movups xmmword [rbp + 0x17], xmm0
mov rax, qword [rcx + 0x70]
mov qword [rbp + 0x27], rax
lea rdi, [rdx + 0x48]
mov rsi, qword [rdx + 0x40]
mov rbx, qword [rdi]
mov ecx, dword [0x1403caaf0]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x1400c8bc2
nop
cmp qword [rax], rbx
je 0x1400c8c97
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x1400c8bb0
lea rax, [rbp - 0x59]
mov qword [rbp + 0x2f], rax
lea rdx, [rbp + 7]
mov ecx, 0xc8
call fcn.140034dd0
mov r8, rax
xor ecx, ecx
mov qword [rax + 0x20], rcx
lea rax, [0x1400c92d0]
mov qword [r8 + 0x28], rax
mov qword [r8], rcx
mov qword [r8 + 8], rcx
mov qword [r8 + 0x10], rcx
mov qword [r8 + 0x18], rcx
mov dword [r8 + 0x30], ecx
movups xmm0, xmmword [rbp - 0x59]
movups xmmword [r8 + 0x38], xmm0
mov rax, qword [rbp - 0x49]
mov qword [r8 + 0x48], rax
movups xmm0, xmmword [rbp - 0x41]
movups xmmword [r8 + 0x50], xmm0
movsd xmm1, qword [rbp - 0x31]
movsd qword [r8 + 0x60], xmm1
mov eax, dword [rbp - 0x29]
mov dword [r8 + 0x68], eax
mov rax, qword [rbp - 0x21]
mov qword [r8 + 0x70], rax
mov rax, qword [rbp - 0x19]
mov qword [r8 + 0x78], rax
movups xmm0, xmmword [rbp - 9]
movups xmmword [r8 + 0x88], xmm0
movups xmm1, xmmword [rbp + 7]
movups xmmword [r8 + 0x98], xmm1
movups xmm0, xmmword [rbp + 0x17]
movups xmmword [r8 + 0xa8], xmm0
mov rax, qword [rbp + 0x27]
mov qword [r8 + 0xb8], rax
mov qword [rbp + 0x3f], rcx
mov qword [rbp + 0x37], rcx
mov rdx, rdi
mov rcx, rsi
call fcn.140037050
nop
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop rbp
ret
cmp qword [rax + 8], 0
je 0x1400c8bc2
lea rdx, [rbp - 0x59]
lea rcx, [rbp - 0x59]
call fcn.1400c93d0
nop
jmp 0x1400c8c7e
Function at 0x1400d40f0
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 0x20], rbx
push rsi
push rdi
push r14
sub rsp, 0x30
mov rdi, rcx
add rcx, 0x28
mov qword [rsp + 0x58], rcx
call fcn.14022f004
test eax, eax
jne 0x1400d4229
xor ebx, ebx
cmp qword [rdi + 0x78], rbx
je 0x1400d412d
mov eax, 3
lock cmpxchg dword [rdi + 0x80], ebx
jmp 0x1400d41a6
mov eax, ebx
xchg dword [rdi + 0x80], eax
mov ecx, reloc.WS2_32.dll_recv
call fcn.140250dd4
mov rsi, rax
mov qword [rsp + 0x50], rax
mov ecx, 8
call fcn.140250dd4
mov qword [rax], rdi
mov qword [rsp + 0x60], rax
lea r14, [rsi + 8]
mov qword [rsp + 0x28], r14
mov dword [rsp + 0x20], ebx
mov r9, rax
lea r8, [0x1400d4570]
xor edx, edx
xor ecx, ecx
call fcn.140280a58
mov qword [rsi], rax
test rax, rax
je 0x1400d421b
mov rcx, qword [rdi + 0x78]
mov qword [rdi + 0x78], rsi
test rcx, rcx
je 0x1400d41a6
cmp dword [rcx + 8], 0
jne 0x1400d4231
mov edx, reloc.WS2_32.dll_recv
call fcn.140250e10
mov eax, dword [rdi + 0x80]
test eax, eax
jne 0x1400d41f7
call fcn.14022dc00
mov rbx, rax
call fcn.14022dbe4
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, 0x4e20
add rcx, rax
mov qword [rsp + 0x50], rcx
lea rcx, [rsp + 0x50]
call fcn.14008be20
mov eax, dword [rdi + 0x80]
test eax, eax
je 0x1400d41b0
mov rcx, qword [rsp + 0x58]
call fcn.14022f028
test eax, eax
jne 0x1400d4213
mov rbx, qword [rsp + 0x68]
add rsp, 0x30
pop r14
pop rdi
pop rsi
ret
mov ecx, eax
call fcn.14022e220
nop
mov dword [r14], ebx
mov ecx, 6
call fcn.14022e25c
nop
mov ecx, eax
call fcn.14022e220
nop
call fcn.140284c80
int3
Function at 0x1400e9700
Capabilities:
Access peb ldr_data

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push r14
sub rsp, 0x70
mov rax, qword [0x1403b8550]
xor rax, rsp
mov qword [rsp + 0x60], rax
mov edi, dword [rcx]
mov ecx, dword [0x1403c9130]
mov rax, qword gs:[0x58]
mov esi, 0x1028
mov r14d, 0x1020
add rsi, qword [rax + rcx*8]
add r14, qword [rax + rcx*8]
movups xmm1, xmmword [rsi]
mov ebx, dword [r14]
movups xmm0, xmmword [rsi + 0x10]
movd ecx, xmm1
movups xmmword [rsp + 0x40], xmm1
movups xmmword [rsp + 0x50], xmm0
cmp ecx, edi
je 0x1400e97ee
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.1400ea7c0
cmp dword [rsp + 0x20], edi
jne 0x1400e9796
movups xmm0, xmmword [rsp + 0x20]
lea eax, [rbx + 1]
movups xmm1, xmmword [rsp + 0x30]
mov dword [r14], eax
movups xmmword [rsi], xmm0
movups xmmword [rsi + 0x10], xmm1
jmp 0x1400e97f0
xorps xmm0, xmm0
xorps xmm1, xmm1
movups xmmword [rsp + 0x40], xmm0
xor ebx, ebx
movups xmmword [rsp + 0x50], xmm1
movd eax, xmm0
cmp eax, edi
je 0x1400e97e4
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x20]
call fcn.1400ea7c0
movups xmm0, xmmword [rsp + 0x20]
inc ebx
movups xmm1, xmmword [rsp + 0x30]
movups xmmword [rsp + 0x40], xmm0
movups xmmword [rsp + 0x50], xmm1
cmp ebx, 0x7530
jl 0x1400e97a8
mov eax, 0xffffffff
jmp 0x1400e97f0
movups xmmword [rsi], xmm0
mov dword [r14], ebx
movups xmmword [rsi + 0x10], xmm1
mov eax, ebx
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.140250db0
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov rsp, r11
pop r14
ret