joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1400e7510
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
mov qword [rsp + 8], rcx
push r14
sub rsp, 0xc0
mov r14, rdx
mov rsi, rcx
mov rax, qword [rcx + 8]
xor edi, edi
test al, 1
jne 0x1400e7573
and rax, 0xfffffffffffffffc
mov rax, qword [rax + 0x10]
lea rbx, [rax + 0x28]
test rax, rax
cmove rbx, rdi
mov ecx, dword [0x1403509d8]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x1400e7573
cmp qword [rax], rbx
je 0x1400e75ff
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x1400e7561
mov rbx, qword [rsi]
mov eax, 1
xchg dword [rbx + 0x408], eax
test eax, eax
je 0x1400e7592
mov ecx, 0xc8
call fcn.1401ae1f0
mov rbx, rax
mov qword [rbx + 0x20], rdi
lea rax, [0x140112300]
mov qword [rbx + 0x28], rax
mov qword [rbx], rdi
mov qword [rbx + 8], rdi
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], rdi
mov dword [rbx + 0x30], edi
lea rcx, [rbx + 0x38]
mov rdx, r14
call fcn.1400d4440
mov rax, qword [rsi]
mov qword [rbx + 0xc0], rax
mov rax, qword [rsi + 8]
and rax, 0xfffffffffffffffc
mov rcx, qword [rax + 0x10]
lock inc dword [rcx + 0x30]
mov rdx, rbx
call fcn.1401257a0
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop r14
ret
cmp qword [rax + 8], rdi
je 0x1400e7573
mov rdx, r14
lea rcx, [rsp + 0x20]
call fcn.1400d4440
nop
nop
lea rcx, [rsp + 0x28]
call fcn.1400f2a70
nop
nop
lea rcx, [rsp + 0x60]
call fcn.1400e0320
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x1400e766b
mov edi, 0xffffffff
mov eax, edi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400e766b
mov rbx, qword [rsp + 0x50]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], edi
cmp edi, 1
jne 0x1400e766b
mov rcx, qword [rsp + 0x50]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
jmp 0x1400e75e5
Function at 0x1400e7c20
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0x190]
sub rsp, 0x290
mov rbx, rdx
cmp qword [rcx + 0x20], 0
jne 0x1400e7c6e
cmp qword [rcx + 0x58], 0
jne 0x1400e7c6e
mov rcx, rdx
call fcn.1400f6680
lea r11, [rsp + 0x290]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret
lea rsi, [rcx + 0x38]
cmp qword [rsi + 0x20], 0
je 0x1400e7dd7
mov rcx, qword [rsi + 0x28]
mov rax, qword [rcx + 0x18]
test rax, rax
je 0x1400e7cb2
lea rcx, [0x1400b88b0]
mov qword [rsp + 0x20], rcx
mov qword [rsp + 0x28], rbx
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea rdx, [rsp + 0x20]
mov rcx, rsi
call rax
jmp 0x1400e7c56
mov r14, qword [rcx + 0x10]
lea rcx, [rsp + 0x40]
call fcn.1400d7540
movups xmm0, xmmword [rbx + 0x230]
movups xmmword [rbp + 0x170], xmm0
mov rax, qword [rbx + 0x240]
mov qword [rbp + 0x180], rax
lea rax, [rsp + 0x40]
mov qword [rbp + 0x1c8], rax
mov ecx, dword [0x1403509d8]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x1400e7cff
mov rdx, qword [rax + 8]
jmp 0x1400e7d01
xor edx, edx
mov r9d, 8
mov r8d, 0x258
movzx ecx, byte [rbp + 0x1b0]
call fcn.1400aa770
mov rdi, rax
lea rdx, [rsp + 0x40]
lea rcx, [rax + 8]
call fcn.1400d7540
movups xmm0, xmmword [rbp + 0x170]
movups xmmword [rdi + 0x238], xmm0
mov rcx, qword [rbp + 0x180]
mov qword [rdi + 0x248], rcx
lea rax, [0x1400b88c0]
mov qword [rdi], rax
mov qword [rbp + 0x1b0], rdi
cmp byte [rbp + 0x150], 0
je 0x1400e7d7e
cmp qword [rbp + 0x138], 0
je 0x1400e7d7e
mov rax, qword [rbp + 0x130]
mov rdx, qword [rax]
lea rcx, [rbp + 0x118]
call rdx
nop
cmp byte [rbp + 0xe0], 0
je 0x1400e7da5
cmp qword [rbp + 0xc8], 0
je 0x1400e7da5
mov rax, qword [rbp + 0xc0]
mov rdx, qword [rax]
lea rcx, [rbp + 0xa8]
call rdx
nop
lea rcx, [rsp + 0x50]
call fcn.1400e2070
nop
lea rdx, [rbp + 0x1b0]
mov rcx, rsi
call r14
nop
mov rcx, qword [rbp + 0x1b0]
test rcx, rcx
je 0x1400e7dd2
mov rax, qword [rcx]
xor edx, edx
call rax
nop
jmp 0x1400e7c56
lea rcx, [rsp + 0x20]
call fcn.1400d7910
nop
lea rcx, [rsp + 0x20]
call fcn.1400d01d0
int3
Function at 0x1400e7df0
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 8], rcx
push rsi
push rdi
push r14
sub rsp, 0xf0
mov r14, rdx
mov rsi, rcx
mov rax, qword [rcx + 8]
xor edi, edi
test al, 1
jne 0x1400e7e52
and rax, 0xfffffffffffffffc
mov rax, qword [rax + 0x10]
lea rbx, [rax + 0x28]
test rax, rax
cmove rbx, rdi
mov ecx, dword [0x1403509d8]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x1400e7e52
nop dword [rax]
cmp qword [rax], rbx
je 0x1400e7ee0
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x1400e7e40
mov rbx, qword [rsi]
mov eax, 1
xchg dword [rbx + 0x408], eax
test eax, eax
je 0x1400e7e71
mov ecx, 0xd8
call fcn.1401ae1f0
mov rbx, rax
mov qword [rbx + 0x20], rdi
lea rax, [0x140113230]
mov qword [rbx + 0x28], rax
mov qword [rbx], rdi
mov qword [rbx + 8], rdi
mov qword [rbx + 0x10], 0
mov qword [rbx + 0x18], rdi
mov dword [rbx + 0x30], edi
mov rcx, qword [r14]
mov qword [rbx + 0x38], rcx
lea rdx, [r14 + 8]
lea rcx, [rbx + 0x40]
call fcn.1400d2660
mov rax, qword [rsi]
mov qword [rbx + 0xd0], rax
mov rax, qword [rsi + 8]
and rax, 0xfffffffffffffffc
mov rcx, qword [rax + 0x10]
lock inc dword [rcx + 0x30]
mov rdx, rbx
call fcn.1401257a0
mov rbx, qword [rsp + 0x118]
add rsp, 0xf0
pop r14
pop rdi
pop rsi
ret
cmp qword [rax + 8], rdi
je 0x1400e7e52
mov rax, qword [r14]
mov qword [rsp + 0x40], rax
lea rdx, [r14 + 8]
lea rcx, [rsp + 0x48]
call fcn.1400d2660
nop
nop
mov rax, qword [rsp + 0xb8]
mov qword [rsp + 0x20], rax
mov rax, qword [rsp + 0xc0]
mov qword [rsp + 0x28], rax
mov rax, qword [rsp + 0xc8]
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
movdqa xmmword [rsp + 0xc0], xmm0
movzx eax, byte [rsp + 0xd0]
mov byte [rsp + 0x38], al
mov byte [rsp + 0xd0], 0
lea rdx, [rsp + 0x20]
lea rcx, [rsp + 0x48]
call fcn.1400ee170
nop
nop
lea rcx, [rsp + 0x48]
call fcn.1400dd720
jmp 0x1400e7ecc
Function at 0x1400e9300
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
mov qword [rsp + 8], rcx
push r14
sub rsp, 0xe0
mov rbx, rdx
mov r14, rcx
mov rax, qword [rcx + 8]
xor esi, esi
test al, 1
jne 0x1400e9363
and rax, 0xfffffffffffffffc
mov rax, qword [rax + 0x10]
lea rdi, [rax + 0x28]
test rax, rax
cmove rdi, rsi
mov ecx, dword [0x1403509d8]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x1400e9363
cmp qword [rax], rdi
je 0x1400e9417
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x1400e9351
mov rdi, qword [r14]
mov eax, 1
xchg dword [rdi + 0x408], eax
test eax, eax
je 0x1400e9382
mov ecx, 0xe8
call fcn.1401ae1f0
mov rdi, rax
mov qword [rdi + 0x20], rsi
lea rax, [0x1401111b0]
mov qword [rdi + 0x28], rax
mov qword [rdi], rsi
mov qword [rdi + 8], rsi
mov qword [rdi + 0x10], 0
mov qword [rdi + 0x18], rsi
mov dword [rdi + 0x30], esi
mov rcx, qword [rbx]
mov qword [rdi + 0x38], rcx
mov qword [rdi + 0x40], rsi
mov qword [rdi + 0x48], rsi
mov rax, qword [rbx + 8]
mov qword [rdi + 0x40], rax
mov rax, qword [rbx + 0x10]
mov qword [rdi + 0x48], rax
mov qword [rbx + 8], rsi
mov qword [rbx + 0x10], rsi
lea rdx, [rbx + 0x18]
lea rcx, [rdi + 0x50]
call fcn.1400d1e30
mov rax, qword [r14]
mov qword [rdi + 0xe0], rax
mov rax, qword [r14 + 8]
and rax, 0xfffffffffffffffc
mov rcx, qword [rax + 0x10]
lock inc dword [rcx + 0x30]
mov rdx, rdi
call fcn.1401257a0
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop r14
ret
cmp qword [rax + 8], rsi
je 0x1400e9363
mov rax, qword [rbx]
mov qword [rsp + 0x20], rax
mov rax, qword [rbx + 8]
mov qword [rsp + 0x28], rax
mov rax, qword [rbx + 0x10]
mov qword [rsp + 0x30], rax
mov qword [rbx + 8], rsi
mov qword [rbx + 0x10], rsi
lea rdx, [rbx + 0x18]
lea rcx, [rsp + 0x38]
call fcn.1400d1e30
nop
nop
lea rcx, [rsp + 0x20]
call fcn.1400f5db0
nop
nop
lea rcx, [rsp + 0x60]
call fcn.1400e0200
mov rcx, qword [rsp + 0x58]
mov edi, 0xffffffff
test rcx, rcx
je 0x1400e94a8
mov eax, edi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400e94a8
mov rbx, qword [rsp + 0x58]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, edi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400e94a8
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x1400e94e0
mov eax, edi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400e94e0
mov rbx, qword [rsp + 0x30]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], edi
cmp edi, 1
jne 0x1400e94e0
mov rcx, qword [rsp + 0x30]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
jmp 0x1400e93fd
Function at 0x1400ea260
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r14
lea rbp, [rsp - 0x1b0]
sub rsp, 0x2b0
mov rbx, rdx
cmp qword [rcx + 0x20], 0
jne 0x1400ea2ae
cmp qword [rcx + 0x58], 0
jne 0x1400ea2ae
mov rcx, rdx
call fcn.1400f65e0
lea r11, [rsp + 0x2b0]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret
lea rsi, [rcx + 0x38]
cmp qword [rsi + 0x20], 0
je 0x1400ea417
mov rcx, qword [rsi + 0x28]
mov rax, qword [rcx + 0x18]
test rax, rax
je 0x1400ea2f2
lea rcx, [0x1400b8790]
mov qword [rsp + 0x20], rcx
mov qword [rsp + 0x28], rbx
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea rdx, [rsp + 0x20]
mov rcx, rsi
call rax
jmp 0x1400ea296
mov r14, qword [rcx + 0x10]
lea rcx, [rsp + 0x40]
call fcn.1400d7470
movups xmm0, xmmword [rbx + 0x258]
movups xmmword [rbp + 0x198], xmm0
mov rax, qword [rbx + 0x268]
mov qword [rbp + 0x1a8], rax
lea rax, [rsp + 0x40]
mov qword [rbp + 0x1e8], rax
mov ecx, dword [0x1403509d8]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x1400ea33f
mov rdx, qword [rax + 8]
jmp 0x1400ea341
xor edx, edx
mov r9d, 8
mov r8d, 0x280
movzx ecx, byte [rbp + 0x1d0]
call fcn.1400aa770
mov rdi, rax
lea rdx, [rsp + 0x40]
lea rcx, [rax + 8]
call fcn.1400d7470
movups xmm0, xmmword [rbp + 0x198]
movups xmmword [rdi + 0x260], xmm0
mov rcx, qword [rbp + 0x1a8]
mov qword [rdi + 0x270], rcx
lea rax, [0x1400b87a0]
mov qword [rdi], rax
mov qword [rbp + 0x1d0], rdi
cmp byte [rbp + 0x178], 0
je 0x1400ea3be
cmp qword [rbp + 0x160], 0
je 0x1400ea3be
mov rax, qword [rbp + 0x158]
mov rdx, qword [rax]
lea rcx, [rbp + 0x140]
call rdx
nop
cmp byte [rbp + 0x108], 0
je 0x1400ea3e5
cmp qword [rbp + 0xf0], 0
je 0x1400ea3e5
mov rax, qword [rbp + 0xe8]
mov rdx, qword [rax]
lea rcx, [rbp + 0xd0]
call rdx
nop
lea rcx, [rsp + 0x50]
call fcn.1400e1fe0
nop
lea rdx, [rbp + 0x1d0]
mov rcx, rsi
call r14
nop
mov rcx, qword [rbp + 0x1d0]
test rcx, rcx
je 0x1400ea412
mov rax, qword [rcx]
xor edx, edx
call rax
nop
jmp 0x1400ea296
lea rcx, [rsp + 0x20]
call fcn.1400d7910
nop
lea rcx, [rsp + 0x20]
call fcn.1400d01d0
int3
Function at 0x1400ea430
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
sub rsp, 0x200
mov rax, rdx
cmp qword [rcx + 0x20], 0
jne 0x1400ea486
cmp qword [rcx + 0x58], 0
jne 0x1400ea486
movups xmm0, xmmword [rdx + 0x1a8]
movaps xmmword [rsp + 0x20], xmm0
xor r9d, r9d
mov r8, qword [rdx + 0x1b8]
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.1401004d0
mov rbx, qword [rsp + 0x228]
add rsp, 0x200
pop rdi
pop rsi
pop rbp
ret
lea rdi, [rcx + 0x38]
cmp qword [rdi + 0x20], 0
je 0x1400ea5ab
mov rcx, qword [rdi + 0x28]
mov r8, qword [rcx + 0x18]
test r8, r8
je 0x1400ea4cb
lea rcx, [0x1400b7f90]
mov qword [rsp + 0x20], rcx
mov qword [rsp + 0x28], rax
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea rdx, [rsp + 0x20]
mov rcx, rdi
call r8
jmp 0x1400ea473
mov rbp, qword [rcx + 0x10]
lea rcx, [rsp + 0x40]
call fcn.1400d2c40
mov rsi, rax
mov qword [rsp + 0x238], rax
mov ecx, dword [0x1403509d8]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x1400ea4fb
mov rdx, qword [rax + 8]
jmp 0x1400ea4fd
xor edx, edx
mov r9d, 8
mov r8d, 0x1d0
movzx ecx, byte [rsp + 0x220]
call fcn.1400aa770
mov rbx, rax
lea rcx, [rax + 8]
mov rdx, rsi
call fcn.1400d2c40
lea rax, [0x1400b7fc0]
mov qword [rbx], rax
mov qword [rsp + 0x220], rbx
mov rcx, qword [rsi + 0x148]
test rcx, rcx
je 0x1400ea558
mov eax, 0xffffffff
lock xadd dword [rcx + 0xc], eax
cmp eax, 1
jne 0x1400ea558
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
lea rcx, [rsi + 0xf0]
cmp byte [rcx + 0x38], 0
je 0x1400ea576
cmp qword [rcx + 0x20], 0
je 0x1400ea576
mov rax, qword [rcx + 0x18]
mov rdx, qword [rax]
call rdx
nop
lea rcx, [rsi + 0xd0]
call fcn.1400e1380
nop
lea rdx, [rsp + 0x220]
mov rcx, rdi
call rbp
nop
mov rcx, qword [rsp + 0x220]
test rcx, rcx
je 0x1400ea5a6
mov rax, qword [rcx]
xor edx, edx
call rax
nop
jmp 0x1400ea473
lea rcx, [rsp + 0x20]
call fcn.1400d7910
nop
lea rcx, [rsp + 0x20]
call fcn.1400d01d0
int3
Function at 0x1400ea750
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
mov qword [rsp + 8], rcx
push r14
sub rsp, 0x50
mov rbx, rdx
mov r14, rcx
mov rax, qword [rcx + 8]
xor esi, esi
test al, 1
jne 0x1400ea7b2
and rax, 0xfffffffffffffffc
mov rax, qword [rax + 0x10]
lea rdi, [rax + 0x28]
test rax, rax
cmove rdi, rsi
mov ecx, dword [0x1403509d8]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x1400ea7b2
nop
cmp qword [rax], rdi
je 0x1400ea85f
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x1400ea7a0
mov rdx, qword [r14]
mov eax, 1
xchg dword [rdx + 0x408], eax
test eax, eax
je 0x1400ea7d1
mov ecx, 0x68
call fcn.1401ae1f0
mov rdx, rax
mov qword [rdx + 0x20], rsi
lea rax, [0x1401128d0]
mov qword [rdx + 0x28], rax
mov qword [rdx], rsi
mov qword [rdx + 8], rsi
mov qword [rdx + 0x10], 0
mov qword [rdx + 0x18], rsi
mov dword [rdx + 0x30], esi
mov rcx, qword [rbx]
mov qword [rdx + 0x38], rcx
mov rax, qword [rbx + 8]
mov qword [rdx + 0x40], rax
mov rax, qword [rbx + 0x10]
mov qword [rdx + 0x48], rax
mov qword [rdx + 0x50], rsi
mov qword [rdx + 0x58], rsi
mov rax, qword [rbx + 0x18]
mov qword [rdx + 0x50], rax
mov rax, qword [rbx + 0x20]
mov qword [rdx + 0x58], rax
mov qword [rbx + 0x18], rsi
mov qword [rbx + 0x20], rsi
mov rax, qword [r14]
mov qword [rdx + 0x60], rax
mov rax, qword [r14 + 8]
and rax, 0xfffffffffffffffc
mov rcx, qword [rax + 0x10]
lock inc dword [rcx + 0x30]
call fcn.1401257a0
mov rbx, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x78]
add rsp, 0x50
pop r14
ret
cmp qword [rax + 8], rsi
je 0x1400ea7b2
mov rax, qword [rbx]
mov qword [rsp + 0x20], rax
mov rax, qword [rbx + 8]
mov qword [rsp + 0x28], rax
mov rax, qword [rbx + 0x10]
mov qword [rsp + 0x30], rax
mov rax, qword [rbx + 0x18]
mov qword [rsp + 0x38], rax
mov rax, qword [rbx + 0x20]
mov qword [rsp + 0x40], rax
mov qword [rbx + 0x18], rsi
mov qword [rbx + 0x20], rsi
nop
lea rcx, [rsp + 0x28]
call fcn.1400f34f0
nop
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x1400ea8e7
mov edi, 0xffffffff
mov eax, edi
lock xadd dword [rcx + 8], eax
cmp eax, 1
jne 0x1400ea8e7
mov rbx, qword [rsp + 0x40]
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], edi
cmp edi, 1
jne 0x1400ea8e7
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
jmp 0x1400ea849
Function at 0x1400eabc0
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x460]
sub rsp, 0x560
mov rax, qword [0x14032aa00]
xor rax, rsp
mov qword [rbp + 0x450], rax
mov rbx, rdx
mov rdi, rcx
xor r14d, r14d
mov r8, rcx
lea rcx, [rbp + 0x1d0]
call fcn.1400e6250
nop
mov rdx, rbx
lea rcx, [rbp + 0x208]
call fcn.1400d41a0
movups xmm0, xmmword [rbx + 0x200]
movups xmmword [rbp + 0x408], xmm0
cmp qword [rbp + 0x1f0], r14
je 0x1400eadfb
mov rax, qword [rbp + 0x200]
mov rbx, qword [rax + 0x58]
mov rax, qword [rbp + 0x1e8]
mov rdx, qword [rax + 0x18]
lea rcx, [rbp + 0x1d0]
call rdx
lea r8, [rsp + 0x20]
mov rdx, rax
lea rcx, [rsp + 0x50]
call rbx
lea rdx, [rsp + 0x50]
lea rcx, [rbp + 0x418]
call fcn.1400d7820
mov rax, qword [rbp - 0x80]
mov qword [rbp + 0x448], rax
lea rax, [0x14020a7c0]
mov qword [rbp - 0x80], rax
cmp qword [rsp + 0x70], r14
je 0x1400eac9b
mov rax, qword [rsp + 0x68]
mov rdx, qword [rax]
lea rcx, [rsp + 0x50]
call rdx
nop
cmp qword [rdi + 0x20], 0
je 0x1400eae11
mov rcx, qword [rdi + 0x28]
mov rax, qword [rcx + 0x18]
test rax, rax
je 0x1400eace5
lea rcx, [0x1400b8e90]
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0x208]
mov qword [rsp + 0x38], rcx
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
mov rcx, rdi
call rax
jmp 0x1400ead8c
mov r15, qword [rcx + 0x10]
lea rdx, [rbp + 0x208]
lea rcx, [rbp - 0x78]
call fcn.1400d6250
mov rsi, rax
mov qword [rsp + 0x30], rax
mov ecx, dword [0x1403509d8]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x1400ead16
mov r14, qword [rax + 8]
mov r9d, 8
mov r8d, 0x258
mov rdx, r14
movzx ecx, byte [rsp + 0x20]
call fcn.1400aa770
mov rbx, rax
lea rcx, [rax + 8]
mov rdx, rsi
call fcn.1400d6250
lea rax, [0x1400b8ea0]
mov qword [rbx], rax
mov qword [rsp + 0x20], rbx
lea rcx, [rsi + 0x210]
cmp qword [rcx + 0x20], 0
je 0x1400ead65
mov rax, qword [rcx + 0x18]
mov rdx, qword [rax]
call rdx
nop
mov rcx, rsi
call fcn.1400df420
nop
lea rdx, [rsp + 0x20]
mov rcx, rdi
call r15
nop
mov rcx, qword [rsp + 0x20]
test rcx, rcx
je 0x1400ead8c
mov rax, qword [rcx]
xor edx, edx
call rax
nop
cmp qword [rbp + 0x438], 0
je 0x1400eadaa
mov rax, qword [rbp + 0x430]
mov rdx, qword [rax]
lea rcx, [rbp + 0x418]
call rdx
nop
lea rcx, [rbp + 0x208]
call fcn.1400df420
nop
cmp qword [rbp + 0x1f0], 0
je 0x1400eadd5
mov rax, qword [rbp + 0x1e8]
mov rdx, qword [rax]
lea rcx, [rbp + 0x1d0]
call rdx
nop
mov rcx, qword [rbp + 0x450]
xor rcx, rsp
call fcn.1401ae6a0
mov rbx, qword [rsp + 0x5a0]
add rsp, 0x560
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
lea rcx, [rsp + 0x30]
call fcn.1400d7910
nop
lea rcx, [rsp + 0x30]
call fcn.1400d01d0
nop
lea rcx, [rsp + 0x30]
call fcn.1400d7910
nop
lea rcx, [rsp + 0x30]
call fcn.1400d01d0
int3
Function at 0x1400ebb20
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
sub rsp, 0x210
mov rax, rdx
cmp qword [rcx + 0x20], 0
jne 0x1400ebb76
cmp qword [rcx + 0x58], 0
jne 0x1400ebb76
movups xmm0, xmmword [rdx + 0x1b0]
movaps xmmword [rsp + 0x20], xmm0
xor r9d, r9d
mov r8, qword [rdx + 0x1c0]
lea rdx, [rsp + 0x20]
mov rcx, rax
call fcn.140100600
mov rbx, qword [rsp + 0x238]
add rsp, 0x210
pop rdi
pop rsi
pop rbp
ret
lea rdi, [rcx + 0x38]
cmp qword [rdi + 0x20], 0
je 0x1400ebc9b
mov rcx, qword [rdi + 0x28]
mov r8, qword [rcx + 0x18]
test r8, r8
je 0x1400ebbbb
lea rcx, [0x1400b8110]
mov qword [rsp + 0x20], rcx
mov qword [rsp + 0x28], rax
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea rdx, [rsp + 0x20]
mov rcx, rdi
call r8
jmp 0x1400ebb63
mov rbp, qword [rcx + 0x10]
lea rcx, [rsp + 0x40]
call fcn.1400d2cc0
mov rsi, rax
mov qword [rsp + 0x248], rax
mov ecx, dword [0x1403509d8]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x1400ebbeb
mov rdx, qword [rax + 8]
jmp 0x1400ebbed
xor edx, edx
mov r9d, 8
mov r8d, 0x1d8
movzx ecx, byte [rsp + 0x230]
call fcn.1400aa770
mov rbx, rax
lea rcx, [rax + 8]
mov rdx, rsi
call fcn.1400d2cc0
lea rax, [0x1400b8140]
mov qword [rbx], rax
mov qword [rsp + 0x230], rbx
mov rcx, qword [rsi + 0x150]
test rcx, rcx
je 0x1400ebc48
mov eax, 0xffffffff
lock xadd dword [rcx + 0xc], eax
cmp eax, 1
jne 0x1400ebc48
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
lea rcx, [rsi + 0xf8]
cmp byte [rcx + 0x38], 0
je 0x1400ebc66
cmp qword [rcx + 0x20], 0
je 0x1400ebc66
mov rax, qword [rcx + 0x18]
mov rdx, qword [rax]
call rdx
nop
lea rcx, [rsi + 0xd8]
call fcn.1400e1380
nop
lea rdx, [rsp + 0x230]
mov rcx, rdi
call rbp
nop
mov rcx, qword [rsp + 0x230]
test rcx, rcx
je 0x1400ebc96
mov rax, qword [rcx]
xor edx, edx
call rax
nop
jmp 0x1400ebb63
lea rcx, [rsp + 0x20]
call fcn.1400d7910
nop
lea rcx, [rsp + 0x20]
call fcn.1400d01d0
int3
Function at 0x1400f45a0
Capabilities:
Hash data using fnv

Disassembly:
push rbx
sub rsp, 0x20
mov rax, qword [rcx]
mov rbx, rcx
mov r8, qword [rax + 0x28]
test r8, r8
je 0x1400f46f4
mov r10, qword [rcx + 8]
movabs r9, 0x100000001b3
movabs rcx, 0xcbf29ce484222325
mov rax, r8
shr rax, 8
movzx edx, al
movzx eax, r8b
xor rax, rcx
imul rax, r9
xor rdx, rax
mov rax, r8
imul rdx, r9
shr rax, 0x10
movzx ecx, al
mov rax, r8
xor rdx, rcx
shr rax, 0x18
imul rdx, r9
movzx ecx, al
mov rax, r8
xor rdx, rcx
shr rax, 0x20
imul rdx, r9
movzx ecx, al
mov rax, r8
xor rdx, rcx
shr rax, 0x28
imul rdx, r9
movzx ecx, al
mov rax, r8
xor rdx, rcx
shr rax, 0x30
imul rdx, r9
movzx ecx, al
mov rax, r8
xor rdx, rcx
shr rax, 0x38
mov rcx, qword [r10 + 0x48]
imul rdx, r9
xor rdx, rax
imul rdx, r9
mov r9, qword [r10 + 0x20]
and rcx, rdx
mov rdx, qword [r10 + 0x30]
shl rcx, 4
add rdx, rcx
mov r11, qword [rdx + 8]
mov rcx, r11
cmp r11, r9
je 0x1400f4691
mov rax, qword [rdx]
cmp r8, qword [r11 + 0x10]
je 0x1400f4693
nop dword [rax + rax]
cmp rcx, rax
je 0x1400f4691
mov rcx, qword [rcx + 8]
cmp r8, qword [rcx + 0x10]
jne 0x1400f4680
jmp 0x1400f4693
xor ecx, ecx
test rcx, rcx
je 0x1400f46e3
mov rax, qword [rdx]
cmp r11, rcx
jne 0x1400f46b8
cmp rax, rcx
jne 0x1400f46ae
mov qword [rdx], r9
mov qword [rdx + 8], r9
jmp 0x1400f46c3
mov r9, qword [rcx + 8]
mov qword [rdx + 8], r9
jmp 0x1400f46c3
cmp rax, rcx
jne 0x1400f46c3
mov rax, qword [rcx]
mov qword [rdx], rax
mov rdx, qword [rcx]
dec qword [r10 + 0x28]
mov rax, qword [rcx + 8]
mov qword [rax], rdx
mov rax, qword [rcx + 8]
mov qword [rdx + 8], rax
mov edx, 0x18
call fcn.1401ae118
mov rcx, qword [rbx]
mov rcx, qword [rcx + 0x28]
add rsp, 0x20
pop rbx
jmp fcn.14010bcd0
add rsp, 0x20
pop rbx
ret
Function at 0x1400fd2c0
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
sub rsp, 0x140
lea rsi, [rcx + 0x80]
mov rdx, rcx
lea rcx, [rsp + 0xc0]
call fcn.1400d2980
nop
cmp qword [rsi + 0x20], 0
je 0x1400fd464
mov rcx, qword [rsi + 0x28]
mov rax, qword [rcx + 0x18]
mov edi, 0xffffffff
test rax, rax
je 0x1400fd337
lea rcx, [0x1400b37e0]
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0xc0]
mov qword [rsp + 0x28], rcx
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea rdx, [rsp + 0x20]
mov rcx, rsi
call rax
jmp 0x1400fd410
mov rbp, qword [rcx + 0x10]
lea rdx, [rsp + 0xc0]
lea rcx, [rsp + 0x40]
call fcn.1400d2980
lea rax, [rsp + 0x40]
mov qword [rsp + 0x168], rax
mov ecx, dword [0x1403509d8]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
test rax, rax
je 0x1400fd371
mov rdx, qword [rax + 8]
jmp 0x1400fd373
xor edx, edx
mov r9d, 8
mov r8d, 0x90
movzx ecx, byte [rsp + 0x160]
call fcn.1400aa770
mov rbx, rax
lea rcx, [rax + 8]
lea rdx, [rsp + 0x40]
call fcn.1400d2980
lea rax, [0x1400b3800]
mov qword [rbx], rax
mov qword [rsp + 0x160], rbx
lea rcx, [rsp + 0x58]
call fcn.1400df690
mov rbx, qword [rsp + 0x50]
test rbx, rbx
je 0x1400fd3ed
mov eax, edi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400fd3ed
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, edi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x1400fd3ed
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
nop
lea rdx, [rsp + 0x160]
mov rcx, rsi
call rbp
nop
mov rcx, qword [rsp + 0x160]
test rcx, rcx
je 0x1400fd410
mov rax, qword [rcx]
xor edx, edx
call rax
nop
lea rcx, [rsp + 0xd8]
call fcn.1400df690
mov rbx, qword [rsp + 0xd0]
test rbx, rbx
je 0x1400fd451
mov eax, edi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x1400fd451
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], edi
cmp edi, 1
jne 0x1400fd451
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
mov rbx, qword [rsp + 0x170]
add rsp, 0x140
pop rdi
pop rsi
pop rbp
ret
lea rcx, [rsp + 0x20]
call fcn.1400d7910
nop
lea rcx, [rsp + 0x20]
call fcn.1400d01d0
int3