joyce8/EMBER2024-capa huggingface dataset:
Function at 0x6d684f02
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
mov ebx, ecx
mov eax, dword [ebx + 4]
test eax, eax
je 0x6d684ff8
mov eax, dword [eax]
test eax, eax
mov dword [ebp - 4], eax
je 0x6d684ff8
push esi
push edi
push 0xd
lea esi, [eax + 8]
pop ecx
lea edi, [ebx + 0x30]
rep movsd dword es:[edi], dword [esi]
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov eax, dword [eax + 0x164]
mov esi, dword [ebp - 4]
mov ecx, dword [eax + 4]
mov eax, dword [esi + 0x34]
mov dword [ebx + 0x10], eax
mov eax, dword [esi + 0xc]
sub eax, dword [esi + 0x34]
mov edi, dword [ebx + 0x10]
add eax, 0xffffffc8
add edi, eax
mov dword [ebx + 0x14], eax
push edi
call fcn.6d641b98
mov dword [ebp - 8], eax
mov dword [ebx + 0x18], eax
mov eax, edi
push 4
cdq
pop ecx
mov edi, dword [ebp - 8]
idiv ecx
add esi, 0x38
mov ecx, eax
shl ecx, 2
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [ebp - 0x18]
call fcn.6d641711
push 0
mov ecx, ebx
call fcn.6d685050
mov edi, dword [ebp - 4]
push 0
mov ecx, edi
mov esi, eax
call fcn.6d7125c7
test esi, esi
mov dword [ebp - 4], eax
je 0x6d684fd2
mov eax, dword [esi]
push dword [ebp - 4]
mov ecx, esi
call dword [eax + 0x44]
push esi
mov ecx, ebx
call fcn.6d685167
push dword [ebp - 4]
mov ecx, edi
mov esi, eax
call fcn.6d7126c5
jmp 0x6d684fab
push dword [edi + 8]
call fcn.6d7126ec
pop ecx
mov dword [ebx + 0x24], eax
mov ecx, edi
call fcn.6d712727
test eax, eax
setne al
inc eax
lea ecx, [ebp - 0x18]
mov byte [ebx + 0x20], al
call fcn.6d6a63ec
pop edi
pop esi
pop ebx
leave
ret

Function at 0x6d6851c1
Capabilities:
Get thread local storage value

Disassembly:
push esi
push edi
push dword [esp + 0xc]
mov esi, ecx
call fcn.6d681a44
mov eax, dword [esi + 4]
mov dword [esi], sym.jvm.dll_const_ciObjArrayKlass::vftable
push dword [0x6d7a23c4]
mov eax, dword [eax]
mov edi, dword [eax + 0x8c]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov eax, dword [eax + 0x164]
test edi, edi
jne 0x6d6851fc
mov eax, dword [0x6d7b5438]
jmp 0x6d685205
mov ecx, dword [eax + 0x1c]
push edi
call fcn.6d685c47
cmp dword [esi + 0x18], 1
mov dword [esi + 0x20], eax
jne 0x6d685213
mov dword [esi + 0x1c], eax
jmp 0x6d685217
and dword [esi + 0x1c], 0
mov eax, esi
pop edi
pop esi
ret 4
Function at 0x6d685285
Capabilities:
Get thread local storage value

Disassembly:
push esi
mov esi, ecx
push edi
cmp dword [esi + 0x1c], 0
jne 0x6d685349
call fcn.6d6546a6
test eax, eax
je 0x6d6852f3
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov edi, eax
push 6
push edi
call fcn.6d681e40
mov eax, dword [esi + 4]
pop ecx
pop ecx
mov eax, dword [eax]
mov ecx, dword [edi + 0x164]
mov eax, dword [eax + 0x88]
test eax, eax
jne 0x6d6852d0
mov eax, dword [0x6d7b5438]
jmp 0x6d6852d9
mov ecx, dword [ecx + 0x1c]
push eax
call fcn.6d685c47
mov dword [esi + 0x1c], eax
mov ecx, dword [edi + 0x2c]
call fcn.6d67a7cf
push 4
push 6
push edi
call fcn.6d681d7e
add esp, 0xc
jmp 0x6d685349
push ebx
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov edi, eax
push 6
push edi
call fcn.6d681e40
mov eax, dword [esi + 0x18]
pop ecx
pop ecx
mov ebx, dword [edi + 0x164]
mov ecx, dword [esi + 0x20]
dec eax
push 0
push eax
mov ecx, dword [ecx + 0x14]
push ecx
call fcn.6d68534f
pop ecx
pop ecx
push eax
push esi
mov ecx, ebx
call fcn.6d6821a7
mov dword [esi + 0x1c], eax
mov ecx, dword [edi + 0x2c]
call fcn.6d67a7cf
push 4
push 6
push edi
call fcn.6d681d7e
add esp, 0xc
pop ebx
mov eax, dword [esi + 0x1c]
pop edi
pop esi
ret

Function at 0x6d68534f
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
push ebx
push esi
push edi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov edi, dword [ebp + 8]
mov esi, eax
mov ecx, edi
call fcn.6d686e5d
mov ebx, eax
mov eax, dword [edi + 4]
mov eax, dword [eax]
mov cl, byte [eax + 0xa]
cmp cl, 0x5b
je 0x6d6853eb
cmp cl, 0x4c
jne 0x6d68538a
cmp byte [eax + ebx + 9], 0x3b
je 0x6d6853eb
mov edi, dword [ebp + 0xc]
mov ecx, dword [esi + 0x164]
lea eax, [ebx + edi + 3]
push eax
mov dword [ebp - 4], eax
call fcn.6d682cbb
mov esi, eax
xor eax, eax
test edi, edi
jle 0x6d6853c1
mov ecx, edi
mov eax, 0x5b5b5b5b
mov edx, ecx
mov edi, esi
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov eax, edx
mov ecx, dword [ebp + 8]
lea edi, [eax + esi]
push ebx
mov byte [edi], 0x4c
call fcn.6d686daf
inc edi
push eax
push edi
call dword [sym.imp.MSVCRT.dll_strncpy]
mov eax, dword [ebp - 4]
add esp, 0xc
add eax, esi
mov byte [eax - 2], 0x3b
and byte [eax - 1], 0
jmp 0x6d685449
mov eax, dword [ebp + 0xc]
mov ecx, dword [esi + 0x164]
lea edi, [ebx + eax + 1]
push edi
mov dword [ebp - 8], edi
call fcn.6d682cbb
mov ecx, dword [ebp + 0xc]
and dword [ebp - 4], 0
test ecx, ecx
mov esi, eax
jle 0x6d68542b
mov edx, ecx
mov eax, 0x5b5b5b5b
mov edi, esi
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov edi, dword [ebp - 8]
mov eax, edx
mov dword [ebp - 4], eax
mov ecx, dword [ebp + 8]
push ebx
call fcn.6d686daf
push eax
mov eax, dword [ebp - 4]
add eax, esi
push eax
call dword [sym.imp.MSVCRT.dll_strncpy]
add esp, 0xc
and byte [esi + edi - 1], 0
push esi
call fcn.6d686f96
pop ecx
pop edi
pop esi
pop ebx
leave
ret
Function at 0x6d685455
Capabilities:
Get thread local storage value

Disassembly:
push esi
push edi
mov edi, dword [esp + 0xc]
mov ecx, edi
call fcn.6d6546a6
test eax, eax
je 0x6d6854b7
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, eax
mov eax, dword [edi + 4]
xor edi, edi
push esi
mov ecx, dword [eax]
mov eax, dword [ecx + 8]
add ecx, 8
push edi
call dword [eax + 0x3c]
cmp dword [esi + 4], edi
je 0x6d68549b
mov ecx, dword [esi + 0x164]
mov dword [esi + 4], edi
call fcn.6d683510
jmp 0x6d6854ce
mov esi, dword [esi + 0x164]
cmp eax, edi
jne 0x6d6854ac
mov eax, dword [0x6d7b5438]
jmp 0x6d6854f3
mov ecx, dword [esi + 0x1c]
push eax
call fcn.6d685c47
jmp 0x6d6854f3
mov eax, dword [edi + 0x14]
push 1
push eax
call fcn.6d68534f
mov esi, eax
pop ecx
cmp esi, dword [0x6d7b543c]
pop ecx
jne 0x6d6854d5
mov eax, dword [0x6d7b5444]
jmp 0x6d6854f3
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov eax, dword [eax + 0x164]
push 1
push esi
push edi
mov ecx, dword [eax + 0x1c]
call fcn.6d6862a5
pop edi
pop esi
ret

Function at 0x6d6854f6
Capabilities:
Get thread local storage value

Disassembly:
call fcn.6d682cf1
test eax, eax
je 0x6d68550a
push dword [esp + 4]
call fcn.6d685455
pop ecx
ret
push esi
push edi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, eax
push 6
push esi
call fcn.6d681e40
push dword [esp + 0x14]
call fcn.6d685455
mov ecx, dword [esi + 0x2c]
add esp, 0xc
mov edi, eax
call fcn.6d67a7cf
push 4
push 6
push esi
call fcn.6d681d7e
add esp, 0xc
mov eax, edi
pop edi
pop esi
ret

Function at 0x6d6855cc
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ecx
push esi
mov esi, ecx
push edi
cmp dword [esi + 8], 0
jne 0x6d685698
cmp dword [esi + 4], 0
jne 0x6d6855fa
push 0x5f
push str.C:_BUILD_AREA_jdk1.5.0_13_hotspot_src_share_vmciciObject.cpp
call fcn.6d6a37b4
pop ecx
pop ecx
int3
call fcn.6d682cf1
test eax, eax
je 0x6d685636
mov eax, dword [esi + 4]
push dword [0x6d7a23c4]
mov eax, dword [eax]
mov edi, dword [eax + 4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov eax, dword [eax + 0x164]
test edi, edi
jne 0x6d685628
mov eax, dword [0x6d7b5438]
jmp 0x6d685631
mov ecx, dword [eax + 0x1c]
push edi
call fcn.6d685c47
mov dword [esi + 8], eax
jmp 0x6d685698
mov edi, dword [sym.imp.KERNEL32.dll_TlsGetValue]
push ebx
push dword [0x6d7a23c4]
call edi
push 6
push eax
mov dword [ebp - 4], eax
call fcn.6d681e40
mov eax, dword [esi + 4]
pop ecx
pop ecx
mov eax, dword [eax]
push dword [0x6d7a23c4]
mov ebx, dword [eax + 4]
call edi
mov eax, dword [eax + 0x164]
test ebx, ebx
jne 0x6d685673
mov eax, dword [0x6d7b5438]
jmp 0x6d68567c
mov ecx, dword [eax + 0x1c]
push ebx
call fcn.6d685c47
mov edi, dword [ebp - 4]
mov dword [esi + 8], eax
mov ecx, dword [edi + 0x2c]
call fcn.6d67a7cf
push 4
push 6
push edi
call fcn.6d681d7e
add esp, 0xc
pop ebx
mov eax, dword [esi + 8]
pop edi
pop esi
leave
ret
Function at 0x6d6856d8
Capabilities:
Get thread local storage value

Disassembly:
push esi
mov esi, ecx
mov eax, dword [esi]
call dword [eax + 4]
push eax
push 0x6d78a0cc
push dword [0x6d7bf31c]
call fcn.6d71fd90
add esp, 0xc
call fcn.6d682cf1
test eax, eax
je 0x6d685705
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
jmp 0x6d68573a
push edi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov edi, eax
push 6
push edi
call fcn.6d681e40
mov eax, dword [esi]
pop ecx
pop ecx
mov ecx, esi
call dword [eax]
mov ecx, dword [edi + 0x2c]
call fcn.6d67a7cf
push 4
push 6
push edi
call fcn.6d681d7e
add esp, 0xc
pop edi
test byte [esi + 0xc], 1
mov eax, str.PERM
jne 0x6d68574a
mov eax, 0x6d7b2a70
push esi
push eax
mov ecx, esi
call fcn.6d6856ab
push eax
push str._ident_d__s_address0x_x_
push dword [0x6d7bf31c]
call fcn.6d71fd90
add esp, 0x14
pop esi
ret
Function at 0x6d6862a5
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
push edi
mov dword [ebp - 4], ecx
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov edi, dword [ebp + 8]
xor ebx, ebx
mov esi, eax
cmp edi, ebx
mov dword [ebp - 0x10], esi
mov dword [ebp - 8], ebx
mov dword [ebp - 0xc], ebx
je 0x6d6862e8
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x78]
mov dword [ebp - 8], eax
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x80]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xc]
cmp dword [eax], ebx
jle 0x6d686332
mov eax, dword [eax + 8]
push dword [ebp + 0xc]
mov esi, dword [eax + ebx*4]
mov ecx, dword [esi + 0x14]
call fcn.6d6856b1
test eax, eax
je 0x6d686322
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x78]
cmp eax, dword [ebp - 8]
jne 0x6d686322
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x80]
cmp eax, dword [ebp - 0xc]
je 0x6d68633e
mov eax, dword [ebp - 4]
inc ebx
mov eax, dword [eax + 0xc]
cmp ebx, dword [eax]
jl 0x6d6862f2
mov esi, dword [ebp - 0x10]
xor ebx, ebx
cmp dword [ebp + 0x10], ebx
jne 0x6d686345
xor eax, eax
jmp 0x6d686456
mov eax, esi
jmp 0x6d686456
mov ecx, dword [ebp + 0xc]
push ebx
call fcn.6d686dfe
cmp eax, 0x5b
jne 0x6d6863ee
mov eax, dword [ebp + 0xc]
lea ecx, [ebp + 0x10]
push esi
push ecx
mov eax, dword [eax + 4]
mov dword [ebp + 8], ebx
mov dword [ebp + 0x10], ebx
lea ecx, [ebp + 8]
mov eax, dword [eax]
push ecx
push eax
call fcn.6d6a964f
add esp, 0x10
cmp dword [esi + 4], ebx
je 0x6d686394
mov ecx, dword [esi + 0x164]
mov dword [esi + 4], ebx
call fcn.6d683510
mov eax, dword [0x6d7b5444]
jmp 0x6d686456
cmp eax, 0xc
jne 0x6d6863c2
cmp dword [ebp + 0x10], ebx
mov esi, dword [esi + 0x164]
jne 0x6d6863ab
mov eax, dword [0x6d7b5438]
jmp 0x6d6863b6
push dword [ebp + 0x10]
mov ecx, dword [esi + 0x1c]
call fcn.6d685c47
push ebx
push eax
push edi
mov ecx, esi
call fcn.6d682434
jmp 0x6d6863cc
dec dword [ebp + 8]
push eax
call fcn.6d6871e5
pop ecx
mov esi, eax
mov eax, dword [ebp - 4]
push 0x24
mov ecx, dword [eax]
call fcn.6d641b98
cmp eax, ebx
je 0x6d68642d
push dword [ebp + 8]
mov ecx, eax
push esi
push dword [ebp + 0xc]
call fcn.6d68524a
jmp 0x6d68642b
xor esi, esi
cmp edi, ebx
mov dword [ebp + 8], ebx
je 0x6d68640d
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x7c]
mov esi, eax
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x84]
mov dword [ebp + 8], eax
mov eax, dword [ebp - 4]
push 0x54
mov ecx, dword [eax]
call fcn.6d641b98
cmp eax, ebx
je 0x6d68642d
push dword [ebp + 8]
mov ecx, eax
push esi
push dword [ebp + 0xc]
call fcn.6d686638
mov ebx, eax
mov esi, dword [ebp - 4]
push ebx
mov ecx, esi
call fcn.6d68645d
mov esi, dword [esi + 0xc]
mov eax, dword [esi]
cmp eax, dword [esi + 4]
jne 0x6d68644a
push eax
mov ecx, esi
call fcn.6d6b56d9
mov eax, dword [esi]
mov ecx, dword [esi + 8]
mov dword [ecx + eax*4], ebx
inc dword [esi]
mov eax, ebx
pop edi
pop esi
pop ebx
leave
ret 0xc
Function at 0x6d686c13
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_TlsGetValue]
push dword [0x6d7a23c4]
mov esi, ecx
call edi
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov dword [esi], ebx
mov dword [esi + 4], eax
push dword [0x6d7a23c4]
call edi
mov eax, dword [eax + 0x164]
push 0x10
mov dword [ebp + 8], eax
mov edi, dword [eax + 4]
mov ecx, edi
call fcn.6d641b98
mov ecx, eax
xor eax, eax
cmp ecx, eax
mov dword [ebp + 0xc], ecx
je 0x6d686c6f
push eax
push eax
push 8
push edi
call fcn.6d6b569b
mov eax, dword [ebp + 0xc]
and dword [ebp + 0xc], 0
and dword [ebp - 8], 0
mov dword [esi + 8], eax
mov eax, dword [ebx + 4]
mov eax, dword [eax]
test eax, eax
jne 0x6d686c88
mov edi, dword [ebp - 4]
jmp 0x6d686c97
mov edi, dword [ebp - 4]
push eax
mov ecx, dword [edi + 0x90]
call fcn.6d67a638
push 1
push eax
lea ecx, [ebp - 0x1c]
call fcn.6d73a8f9
lea ecx, [ebp - 0x1c]
call fcn.6d73ab11
test eax, eax
jne 0x6d686cb9
push dword [ebp - 0x10]
call fcn.6d68714b
pop ecx
jmp 0x6d686d13
push edi
lea ecx, [ebp - 0x1c]
call fcn.6d73ab2f
cmp dword [edi + 4], 0
je 0x6d686cee
lea ecx, [ebp - 0x1c]
call fcn.6d73ab25
mov ebx, dword [0x6d7b5444]
test eax, eax
jne 0x6d686ce0
mov ebx, dword [0x6d7b5440]
mov ecx, dword [ebp + 8]
call fcn.6d683510
and dword [edi + 4], 0
jmp 0x6d686d15
test eax, eax
jne 0x6d686cf9
mov eax, dword [0x6d7b5438]
jmp 0x6d686d05
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x1c]
call fcn.6d685c47
mov ecx, dword [ebp + 8]
push 0
push eax
push dword [esi + 4]
call fcn.6d6821a7
mov ebx, eax
mov edi, dword [esi + 8]
mov eax, dword [edi]
cmp eax, dword [edi + 4]
jne 0x6d686d27
push eax
mov ecx, edi
call fcn.6d6b56d9
mov eax, dword [edi]
mov ecx, dword [edi + 8]
mov dword [ecx + eax*4], ebx
inc dword [edi]
cmp dword [ebp - 0xc], 0
jne 0x6d686d57
mov eax, dword [ebx + 0x10]
lea ecx, [ebp - 0x1c]
mov eax, dword [eax*4 + 0x6d791c28]
add dword [ebp + 0xc], eax
inc dword [ebp - 8]
call fcn.6d73a937
mov edi, dword [ebp - 4]
jmp 0x6d686ca2
mov eax, dword [ebp + 0xc]
pop edi
mov dword [esi + 0xc], eax
mov eax, dword [ebp - 8]
mov dword [esi + 0x10], eax
mov eax, esi
pop esi
pop ebx
leave
ret 8

Function at 0x6d686daf
Capabilities:
Get thread local storage value

Disassembly:
push edi
mov edi, ecx
call fcn.6d682cf1
test eax, eax
je 0x6d686dc5
mov eax, dword [edi + 4]
pop edi
mov eax, dword [eax]
add eax, 0xa
ret
push esi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, eax
push 6
push esi
call fcn.6d681e40
mov eax, dword [edi + 4]
pop ecx
pop ecx
mov ecx, dword [esi + 0x2c]
mov edi, dword [eax]
call fcn.6d67a7cf
push 4
push 6
push esi
call fcn.6d681d7e
add esp, 0xc
lea eax, [edi + 0xa]
pop esi
pop edi
ret
Function at 0x6d686dfe
Capabilities:
Get thread local storage value

Disassembly:
push edi
mov edi, ecx
call fcn.6d682cf1
test eax, eax
je 0x6d686e1a
mov eax, dword [edi + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax]
movsx eax, byte [eax + ecx + 0xa]
jmp 0x6d686e59
push esi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, eax
push 6
push esi
call fcn.6d681e40
mov eax, dword [edi + 4]
pop ecx
pop ecx
mov eax, dword [eax]
mov ecx, dword [esp + 0xc]
movsx edi, byte [eax + ecx + 0xa]
mov ecx, dword [esi + 0x2c]
call fcn.6d67a7cf
push 4
push 6
push esi
call fcn.6d681d7e
add esp, 0xc
mov eax, edi
pop esi
pop edi
ret 4

Function at 0x6d686e5d
Capabilities:
Get thread local storage value

Disassembly:
push edi
mov edi, ecx
call fcn.6d682cf1
test eax, eax
je 0x6d686e74
mov eax, dword [edi + 4]
pop edi
mov eax, dword [eax]
movzx eax, word [eax + 8]
ret
push esi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, eax
push 6
push esi
call fcn.6d681e40
mov eax, dword [edi + 4]
pop ecx
pop ecx
mov eax, dword [eax]
mov ecx, dword [esi + 0x2c]
movzx edi, word [eax + 8]
call fcn.6d67a7cf
push 4
push 6
push esi
call fcn.6d681d7e
add esp, 0xc
mov eax, edi
pop esi
pop edi
ret

Function at 0x6d686ed4
Capabilities:
Get thread local storage value

Disassembly:
push edi
mov edi, ecx
call fcn.6d682cf1
test eax, eax
je 0x6d686ef0
mov eax, dword [edi + 4]
push dword [esp + 8]
mov ecx, dword [eax]
call fcn.6d7415e3
jmp 0x6d686f2d
push esi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, eax
push 6
push esi
call fcn.6d681e40
mov eax, dword [edi + 4]
pop ecx
pop ecx
push dword [esp + 0xc]
mov ecx, dword [eax]
call fcn.6d7415e3
mov ecx, dword [esi + 0x2c]
call fcn.6d67a7cf
push 4
push 6
push esi
call fcn.6d681d7e
add esp, 0xc
pop esi
pop edi
ret 4

Function at 0x6d686f31
Capabilities:
Get thread local storage value

Disassembly:
push esi
push edi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov edi, dword [esp + 0xc]
mov esi, eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push esi
push ecx
push dword [esp + 0x14]
call fcn.6d71ac08
add esp, 0xc
cmp dword [esi + 4], 0
je 0x6d686f79
mov ecx, dword [esi + 0x164]
and dword [esi + 4], 0
call fcn.6d683510
mov eax, dword [0x6d7b543c]
jmp 0x6d686f93
mov esi, dword [esi + 0x164]
test eax, eax
jne 0x6d686f8a
mov eax, dword [0x6d7b5438]
jmp 0x6d686f93
mov ecx, dword [esi + 0x1c]
push eax
call fcn.6d685c47
pop edi
pop esi
ret

Function at 0x6d686f96
Capabilities:
Get thread local storage value

Disassembly:
call fcn.6d682cf1
test eax, eax
je 0x6d686faa
push dword [esp + 4]
call fcn.6d686f31
pop ecx
ret
push esi
push edi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, eax
push 6
push esi
call fcn.6d681e40
push dword [esp + 0x14]
call fcn.6d686f31
mov ecx, dword [esi + 0x2c]
add esp, 0xc
mov edi, eax
call fcn.6d67a7cf
push 4
push 6
push esi
call fcn.6d681d7e
add esp, 0xc
mov eax, edi
pop edi
pop esi
ret
Function at 0x6d6871e5
Capabilities:
Get thread local storage value

Disassembly:
call fcn.6d682cf1
test eax, eax
je 0x6d6871f9
push dword [esp + 4]
call fcn.6d6871b1
pop ecx
ret
push esi
push edi
push dword [0x6d7a23c4]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, eax
push 6
push esi
call fcn.6d681e40
push dword [esp + 0x14]
call fcn.6d6871b1
mov ecx, dword [esi + 0x2c]
add esp, 0xc
mov edi, eax
call fcn.6d67a7cf
push 4
push 6
push esi
call fcn.6d681d7e
add esp, 0xc
mov eax, edi
pop edi
pop esi
ret

Function at 0x6d68dd4a
Capabilities:
Parse credit card information

Disassembly:
push ebp
mov ebp, esp
push ecx
push ecx
and dword [ebp - 4], 0
push ebx
push esi
push edi
mov edi, dword [ebp + 0x10]
mov dword [ebp - 8], ecx
test edi, edi
jbe 0x6d68ddae
mov ebx, dword [ebp + 0x14]
mov esi, dword [ebp + 8]
movsx eax, byte [esi]
cmp eax, 0x53
jle 0x6d68ddb7
sub eax, 0x56
je 0x6d68de38
sub eax, 4
je 0x6d68de42
dec eax
jne 0x6d68ddae
inc dword [ebp - 4]
cmp dword [ebp - 4], 0xff
jbe 0x6d68dda3
mov ecx, dword [ebp - 8]
push ebx
push str.Array_type_descriptor_has_more_than_255_dimensions_in_class_file__s
call fcn.6d68dfa8
cmp dword [ebx + 4], 0
jne 0x6d68ddae
inc esi
dec edi
mov dword [ebp + 0xc], 0
jne 0x6d68dd66
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret 0x10
je 0x6d68de42
cmp eax, 0x42
jl 0x6d68ddae
cmp eax, 0x44
jle 0x6d68de42
cmp eax, 0x46
je 0x6d68de42
cmp eax, 0x48
jle 0x6d68ddae
cmp eax, 0x4a
jle 0x6d68de42
cmp eax, 0x4c
jne 0x6d68ddae
mov ecx, dword [ebp - 8]
cmp word [ecx + 8], 0x31
dec edi
jae 0x6d68de07
push edi
lea eax, [esi + 1]
push 1
push eax
call fcn.6d68dbba
test eax, eax
je 0x6d68ddae
mov ecx, eax
sub ecx, esi
cmp ecx, 1
jle 0x6d68ddae
cmp byte [eax], 0x3b
jne 0x6d68ddae
inc eax
jmp 0x6d68ddb0
inc esi
test edi, edi
jbe 0x6d68de2d
mov al, byte [esi]
cmp al, 0x3b
je 0x6d68de2d
cmp al, 0x2e
jne 0x6d68de2a
mov ecx, dword [ebp - 8]
push ebx
push str.Class_name_contains_illegal_character_._in_descriptor_in_class_file__s
call fcn.6d68dfa8
cmp dword [ebx + 4], 0
jne 0x6d68ddae
dec edi
jmp 0x6d68de07
cmp byte [esi], 0x3b
jne 0x6d68ddae
jmp 0x6d68de42
cmp dword [ebp + 0xc], 0
je 0x6d68ddae
lea eax, [esi + 1]
jmp 0x6d68ddb0
Function at 0x6d68e64b
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x120
mov eax, dword [ebp + 0x12]
push esi
and ax, 0x8000
cmp ax, 0x8000
jne 0x6d68e742
lea eax, [ebp - 0x120]
push 0x104
push eax
push dword [ebp + 8]
call fcn.6d68f0d0
add esp, 0xc
test eax, eax
jne 0x6d68e6ba
lea eax, [ebp + 8]
lea ecx, [ebp + 0x30]
push eax
call fcn.6d6a9287
push str.Bad_pathname
push dword [0x6d7c313c]
push 0x90
push str.C:_BUILD_AREA_jdk1.5.0_13_hotspot_src_share_vm_runtimeclassLoader.cpp
push dword [ebp + 8]
call fcn.6d6a8f0c
add esp, 0x14
lea ecx, [ebp + 0x30]
call fcn.6d6a92d6
jmp 0x6d68e780
push dword [0x6d7a23c4]
and dword [ebp + 0x2c], 0
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, eax
lea ecx, [ebp - 4]
push esi
call fcn.6d68f19c
push esi
lea ecx, [ebp - 0x1c]
call fcn.6d6b5a73
lea eax, [ebp + 0x2c]
push eax
lea eax, [ebp - 0x120]
push eax
call dword [0x6d7b54ac]
lea ecx, [ebp - 0x1c]
mov esi, eax
call fcn.6d6b5aa6
push 6
push dword [ebp - 4]
call fcn.6d681e40
pop ecx
test esi, esi
pop ecx
je 0x6d68e780
cmp dword [ebp + 0x2c], 0
jne 0x6d68e780
push 0x10
call fcn.6d641742
test eax, eax
pop ecx
je 0x6d68e728
push dword [ebp + 8]
mov ecx, eax
push esi
call fcn.6d68e4b7
jmp 0x6d68e72a
xor eax, eax
mov ecx, dword [ebp + 0x30]
mov dword [ecx], eax
cmp dword [0x6d7b5b54], 0
je 0x6d68e780
push dword [ebp + 8]
push str._Opened__s_
jmp 0x6d68e772
push 0xc
call fcn.6d641742
test eax, eax
pop ecx
je 0x6d68e75a
push dword [ebp + 8]
mov ecx, eax
call fcn.6d68e3dd
jmp 0x6d68e75c
xor eax, eax
mov ecx, dword [ebp + 0x30]
mov dword [ecx], eax
cmp dword [0x6d7b5b54], 0
je 0x6d68e780
push dword [ebp + 8]
push str._Path__s_
push dword [0x6d7bf31c]
call fcn.6d71fdc8
add esp, 0xc
pop esi
leave
ret