joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4336f4
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x43375a
mov eax, dword [0x54d750]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x43375a
cmp ebx, 0xffffffff
jne 0x43372e
mov edx, dword [0x54d750]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x433741
mov ecx, dword [0x54d750]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
test byte [eax + 1], 0x20
je 0x43374e
push eax
call fcn.0043f598
pop ecx
test byte [eax + 1], 4
je 0x43375a
mov eax, dword [eax + 0x10]
pop ebx
pop ebp
ret
xor eax, eax
pop ebx
pop ebp
ret

Function at 0x433760
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x4337c6
mov eax, dword [0x54d750]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x4337c6
cmp ebx, 0xffffffff
jne 0x43379a
mov edx, dword [0x54d750]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x4337ad
mov ecx, dword [0x54d750]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
test byte [eax + 1], 0x20
je 0x4337ba
push eax
call fcn.0043f598
pop ecx
test byte [eax + 1], 4
je 0x4337c6
mov eax, dword [eax + 0x10]
pop ebx
pop ebp
ret
mov eax, 0x5392f0
pop ebx
pop ebp
ret

Function at 0x4337d0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x433836
mov eax, dword [0x54d750]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x433836
cmp ebx, 0xffffffff
jne 0x43380a
mov edx, dword [0x54d750]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x43381d
mov ecx, dword [0x54d750]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
test byte [eax + 1], 0x20
je 0x43382a
push eax
call fcn.0043f598
pop ecx
test byte [eax + 1], 4
je 0x433836
mov eax, dword [eax + 8]
pop ebx
pop ebp
ret
xor eax, eax
pop ebx
pop ebp
ret

Function at 0x43383c
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x4338a5
mov eax, dword [0x54d750]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x4338a5
cmp ebx, 0xffffffff
jne 0x433876
mov edx, dword [0x54d750]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x433889
mov ecx, dword [0x54d750]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
test byte [eax + 1], 0x20
je 0x4338a5
push eax
call fcn.0043f598
test byte [eax + 1], 4
pop ecx
je 0x4338a5
mov edx, dword [eax + 8]
inc edx
mov eax, edx
pop ebx
pop ebp
ret
xor eax, eax
pop ebx
pop ebp
ret
Function at 0x4338ac
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x43392e
mov eax, dword [0x54d750]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x43392e
cmp ebx, 0xffffffff
jne 0x4338e6
mov edx, dword [0x54d750]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x4338f9
mov ecx, dword [0x54d750]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
mov ebx, eax
test byte [ebx + 1], 0x20
je 0x43390a
push ebx
call fcn.0043f598
pop ecx
mov ebx, eax
test byte [ebx], 0x60
je 0x43392e
mov edx, dword [ebx + 8]
push edx
mov ecx, dword [0x54d750]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x68
push eax
call fcn.004a4dbc
add esp, 8
pop ebx
pop ebp
ret
push 0
mov eax, dword [0x54d750]
push eax
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x68
push eax
call fcn.004a4dbc
add esp, 8
pop ebx
pop ebp
ret

Function at 0x43394c
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
mov ebx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x4339be
mov eax, dword [0x54d750]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x4339be
cmp ebx, 0xffffffff
jne 0x43398a
mov edx, dword [0x54d750]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x43399d
mov ecx, dword [0x54d750]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
test byte [eax + 1], 0x20
je 0x4339aa
push eax
call fcn.0043f598
pop ecx
test byte [eax], 0x60
je 0x4339be
mov edx, dword [eax + 8]
push edx
push esi
call fcn.004a4dbc
add esp, 8
jmp 0x4339c9
push 0
push esi
call fcn.004a4dbc
add esp, 8
pop esi
pop ebx
pop ebp
ret

Function at 0x4339d0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x433a35
mov eax, dword [0x54d750]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x433a35
cmp ebx, 0xffffffff
jne 0x433a0a
mov edx, dword [0x54d750]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x433a1d
mov ecx, dword [0x54d750]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
test byte [eax + 1], 0x20
je 0x433a2a
push eax
call fcn.0043f598
pop ecx
test byte [eax], 0x60
je 0x433a35
mov eax, dword [eax + 8]
pop ebx
pop ebp
ret
push 0
call fcn.0043de30
pop ecx
pop ebx
pop ebp
ret
Function at 0x433ac4
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 0x10]
cmp ebx, 0xffffffff
jl 0x433b3b
mov eax, dword [0x54d750]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x433b3b
cmp ebx, 0xffffffff
jne 0x433afe
mov edx, dword [0x54d750]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x433b11
mov ecx, dword [0x54d750]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
test byte [eax + 1], 0x20
je 0x433b1e
push eax
call fcn.0043f598
pop ecx
test byte [eax], 0x60
je 0x433b3b
mov edx, dword [ebp + 8]
mov ecx, dword [eax + 8]
mov dword [edx], ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [eax + 0xc]
mov dword [edx], eax
mov eax, 1
pop ebx
pop ebp
ret
xor eax, eax
pop ebx
pop ebp
ret

Function at 0x433b40
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x433bb3
mov eax, dword [0x54d750]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x433bb3
cmp ebx, 0xffffffff
jne 0x433b7a
mov edx, dword [0x54d750]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x433b8d
mov ecx, dword [0x54d750]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
test byte [eax + 1], 0x20
je 0x433b9a
push eax
call fcn.0043f598
pop ecx
test byte [eax], 0x80
je 0x433bb3
cmp dword [eax + 8], 0
je 0x433bac
mov edx, 1
jmp 0x433bae
xor edx, edx
mov eax, edx
pop ebx
pop ebp
ret
xor eax, eax
pop ebx
pop ebp
ret

Function at 0x433bb8
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x433c2b
mov eax, dword [0x54d750]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x433c2b
cmp ebx, 0xffffffff
jne 0x433bf2
mov edx, dword [0x54d750]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x433c05
mov ecx, dword [0x54d750]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
test byte [eax + 1], 0x20
je 0x433c12
push eax
call fcn.0043f598
pop ecx
test byte [eax], 0x80
je 0x433c2b
cmp dword [eax + 8], 0
je 0x433c24
mov edx, 1
jmp 0x433c26
xor edx, edx
mov eax, edx
pop ebx
pop ebp
ret
mov eax, dword [ebp + 0xc]
pop ebx
pop ebp
ret
Function at 0x433c34
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x433cb1
mov eax, dword [0x54d750]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x433cb1
cmp ebx, 0xffffffff
jne 0x433c70
mov edx, dword [0x54d750]
push edx
call sub.KERNEL32.DLL_TlsGetValue
mov ecx, eax
add ecx, 0x10
jmp 0x433c82
mov eax, dword [0x54d750]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx + ebx*4 + 4]
test byte [ecx + 1], 0x20
je 0x433c91
push ecx
call fcn.0043f598
pop ecx
mov ecx, eax
mov eax, dword [ecx]
test al, 0x10
je 0x433c9d
fld qword [ecx + 8]
pop ebx
pop ebp
ret
test al, 2
je 0x433ca7
fild dword [ecx + 8]
pop ebx
pop ebp
ret
test al, 8
je 0x433cb1
fild qword [ecx + 8]
pop ebx
pop ebp
ret
fld qword [0x433cbc]
pop ebx
pop ebp
ret

Function at 0x433cc4
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x433d47
mov eax, dword [0x54d750]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x433d47
cmp ebx, 0xffffffff
jne 0x433cfe
mov edx, dword [0x54d750]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x433d11
mov ecx, dword [0x54d750]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
mov ebx, eax
test byte [ebx + 1], 0x20
je 0x433d22
push ebx
call fcn.0043f598
pop ecx
mov ebx, eax
mov eax, dword [ebx]
test al, 2
je 0x433d2e
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
test al, 8
je 0x433d38
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
test al, 0x10
je 0x433d47
fld qword [ebx + 8]
call fcn.004afaa8
pop ebx
pop ebp
ret
xor eax, eax
pop ebx
pop ebp
ret

Function at 0x433d4c
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x433dcf
mov eax, dword [0x54d750]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x433dcf
cmp ebx, 0xffffffff
jne 0x433d86
mov edx, dword [0x54d750]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x433d99
mov ecx, dword [0x54d750]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
mov ebx, eax
test byte [ebx + 1], 0x20
je 0x433daa
push ebx
call fcn.0043f598
pop ecx
mov ebx, eax
mov eax, dword [ebx]
test al, 2
je 0x433db6
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
test al, 8
je 0x433dc0
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
test al, 0x10
je 0x433dcf
fld qword [ebx + 8]
call fcn.004afaa8
pop ebx
pop ebp
ret
mov eax, dword [ebp + 0xc]
pop ebx
pop ebp
ret
Function at 0x433dd8
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x433e5b
mov eax, dword [0x54d750]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x433e5b
cmp ebx, 0xffffffff
jne 0x433e12
mov edx, dword [0x54d750]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x433e25
mov ecx, dword [0x54d750]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
mov ebx, eax
test byte [ebx + 1], 0x20
je 0x433e36
push ebx
call fcn.0043f598
pop ecx
mov ebx, eax
mov eax, dword [ebx]
test al, 8
je 0x433e42
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
test al, 2
je 0x433e4c
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
test al, 0x10
je 0x433e5b
fld qword [ebx + 8]
call fcn.004afaa8
pop ebx
pop ebp
ret
xor eax, eax
pop ebx
pop ebp
ret

Function at 0x433e60
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x433ee3
mov eax, dword [0x54d750]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x433ee3
cmp ebx, 0xffffffff
jne 0x433e9a
mov edx, dword [0x54d750]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x433ead
mov ecx, dword [0x54d750]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
mov ebx, eax
test byte [ebx + 1], 0x20
je 0x433ebe
push ebx
call fcn.0043f598
pop ecx
mov ebx, eax
mov eax, dword [ebx]
test al, 8
je 0x433eca
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
test al, 2
je 0x433ed4
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
test al, 0x10
je 0x433ee3
fld qword [ebx + 8]
call fcn.004afaa8
pop ebx
pop ebp
ret
mov eax, dword [ebp + 0xc]
pop ebx
pop ebp
ret

Function at 0x433eec
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x433f6f
mov eax, dword [0x54d750]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x433f6f
cmp ebx, 0xffffffff
jne 0x433f26
mov edx, dword [0x54d750]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x433f39
mov ecx, dword [0x54d750]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
mov ebx, eax
test byte [ebx + 1], 0x20
je 0x433f4a
push ebx
call fcn.0043f598
pop ecx
mov ebx, eax
mov eax, dword [ebx]
test al, 8
je 0x433f56
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
test al, 2
je 0x433f60
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
test al, 0x10
je 0x433f6f
fld qword [ebx + 8]
call fcn.004afaa8
pop ebx
pop ebp
ret
xor eax, eax
pop ebx
pop ebp
ret
Function at 0x433f74
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x433ff7
mov eax, dword [0x54d750]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x433ff7
cmp ebx, 0xffffffff
jne 0x433fae
mov edx, dword [0x54d750]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x433fc1
mov ecx, dword [0x54d750]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
mov ebx, eax
test byte [ebx + 1], 0x20
je 0x433fd2
push ebx
call fcn.0043f598
pop ecx
mov ebx, eax
mov eax, dword [ebx]
test al, 8
je 0x433fde
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
test al, 2
je 0x433fe8
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
test al, 0x10
je 0x433ff7
fld qword [ebx + 8]
call fcn.004afaa8
pop ebx
pop ebp
ret
mov eax, dword [ebp + 0xc]
pop ebx
pop ebp
ret

Function at 0x434090
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x434117
mov eax, dword [0x54d750]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x434117
cmp ebx, 0xffffffff
jne 0x4340ca
mov edx, dword [0x54d750]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x4340dd
mov ecx, dword [0x54d750]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
mov ebx, eax
test byte [ebx + 1], 0x20
je 0x4340ee
push ebx
call fcn.0043f598
pop ecx
mov ebx, eax
mov eax, dword [ebx]
test al, 8
je 0x4340fd
mov eax, dword [ebx + 8]
mov edx, dword [ebx + 0xc]
pop ebx
pop ebp
ret
test al, 2
je 0x434108
mov eax, dword [ebx + 8]
cdq
pop ebx
pop ebp
ret
test al, 0x10
je 0x434117
fld qword [ebx + 8]
call fcn.004afaa8
pop ebx
pop ebp
ret
xor eax, eax
xor edx, edx
pop ebx
pop ebp
ret

Function at 0x434120
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x4341a7
mov eax, dword [0x54d750]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x4341a7
cmp ebx, 0xffffffff
jne 0x43415a
mov edx, dword [0x54d750]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x43416d
mov ecx, dword [0x54d750]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
mov ebx, eax
test byte [ebx + 1], 0x20
je 0x43417e
push ebx
call fcn.0043f598
pop ecx
mov ebx, eax
mov eax, dword [ebx]
test al, 8
je 0x43418d
mov eax, dword [ebx + 8]
mov edx, dword [ebx + 0xc]
pop ebx
pop ebp
ret
test al, 2
je 0x434198
mov eax, dword [ebx + 8]
cdq
pop ebx
pop ebp
ret
test al, 0x10
je 0x4341a7
fld qword [ebx + 8]
call fcn.004afaa8
pop ebx
pop ebp
ret
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp + 0x10]
pop ebx
pop ebp
ret
Function at 0x4341b0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x434215
mov eax, dword [0x54d750]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x434215
cmp ebx, 0xffffffff
jne 0x4341ea
mov edx, dword [0x54d750]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x4341fd
mov ecx, dword [0x54d750]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
test byte [eax + 1], 0x20
je 0x43420a
push eax
call fcn.0043f598
pop ecx
test byte [eax], 1
je 0x434215
mov eax, dword [eax + 8]
pop ebx
pop ebp
ret
xor eax, eax
pop ebx
pop ebp
ret

Function at 0x43421c
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 0xc]
cmp ebx, 0xffffffff
jl 0x43429a
mov eax, dword [0x54d750]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x43429a
cmp ebx, 0xffffffff
jne 0x434256
mov edx, dword [0x54d750]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x434269
mov ecx, dword [0x54d750]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
mov ebx, eax
test byte [ebx + 1], 0x20
je 0x43427a
push ebx
call fcn.0043f598
pop ecx
mov ebx, eax
test byte [ebx], 1
je 0x43429a
cmp dword [ebx + 0xc], 0
je 0x43429a
mov edx, dword [ebx + 8]
push edx
call fcn.0043b7c4
pop ecx
cmp eax, dword [ebp + 8]
jne 0x43429a
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
xor eax, eax
pop ebx
pop ebp
ret

Function at 0x4349e8
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
cmp dword [ebp + 8], 0xffffffff
jl 0x434a8c
mov eax, dword [0x54d750]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp eax, dword [ebp + 8]
jl 0x434a8c
cmp dword [ebp + 8], 0xffffffff
jne 0x434a28
mov edx, dword [0x54d750]
push edx
call sub.KERNEL32.DLL_TlsGetValue
mov ebx, eax
add ebx, 0x10
jmp 0x434a3d
mov eax, dword [0x54d750]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [ebp + 8]
mov ebx, dword [edx + ecx*4 + 4]
test byte [ebx + 1], 0x20
je 0x434a4c
push ebx
call fcn.0043f598
pop ecx
mov ebx, eax
mov eax, dword [ebx]
test al, 2
je 0x434a58
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
test al, 8
je 0x434a62
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
test al, 0x10
je 0x434a71
fld qword [ebx + 8]
call fcn.004afaa8
pop ebx
pop ebp
ret
test ah, 0x80
je 0x434a8c
lea eax, [ebp + 0xc]
add eax, 4
mov eax, dword [eax - 4]
push eax
push ebx
call fcn.0042a0e0
add esp, 8
pop ebx
pop ebp
ret
xor eax, eax
pop ebx
pop ebp
ret
Function at 0x434a94
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
cmp dword [ebp + 8], 0xffffffff
jl 0x434b46
mov eax, dword [0x54d750]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp eax, dword [ebp + 8]
jl 0x434b46
cmp dword [ebp + 8], 0xffffffff
jne 0x434ad8
mov edx, dword [0x54d750]
push edx
call sub.KERNEL32.DLL_TlsGetValue
mov ebx, eax
add ebx, 0x10
jmp 0x434aed
mov eax, dword [0x54d750]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [ebp + 8]
mov ebx, dword [edx + ecx*4 + 4]
test byte [ebx + 1], 0x20
je 0x434afc
push ebx
call fcn.0043f598
pop ecx
mov ebx, eax
mov eax, dword [ebx]
test al, 8
je 0x434b08
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
test al, 2
je 0x434b12
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
test al, 0x10
je 0x434b21
fld qword [ebx + 8]
call fcn.004afaa8
pop ebx
pop ebp
ret
test al, 0x60
je 0x434b2b
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
test ah, 0x80
je 0x434b46
lea eax, [ebp + 0xc]
add eax, 4
mov eax, dword [eax - 4]
push eax
push ebx
call fcn.0042a118
add esp, 8
pop ebx
pop ebp
ret
xor eax, eax
pop ebx
pop ebp
ret

Function at 0x434de8
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
cmp dword [ebp + 0xc], 0xffffffff
mov esi, dword [ebp + 8]
jl 0x434eaf
mov eax, dword [0x54d750]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp eax, dword [ebp + 0xc]
jl 0x434eaf
cmp dword [ebp + 0xc], 0xffffffff
jne 0x434e30
mov edx, dword [0x54d750]
push edx
call sub.KERNEL32.DLL_TlsGetValue
mov ebx, eax
add ebx, 0x10
jmp 0x434e45
mov eax, dword [0x54d750]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [ebp + 0xc]
mov ebx, dword [edx + ecx*4 + 4]
test byte [ebx + 1], 0x20
je 0x434e54
push ebx
call fcn.0043f598
pop ecx
mov ebx, eax
test byte [ebx], 1
je 0x434e72
cmp dword [ebx + 0xc], 0
je 0x434eaf
mov eax, dword [ebx + 8]
push eax
call fcn.0043b7c4
pop ecx
cmp esi, eax
jne 0x434eaf
mov eax, dword [ebx + 8]
jmp 0x434eb1
test byte [ebx + 1], 0x80
je 0x434eaf
lea eax, [ebp + 0x10]
add eax, 4
mov eax, dword [eax - 4]
push eax
push ebx
call fcn.00429f58
add esp, 8
mov ebx, eax
test ebx, ebx
je 0x434eaf
test byte [ebx], 1
je 0x434eaf
cmp dword [ebx + 0xc], 0
je 0x434eaf
mov edx, dword [ebx + 8]
push edx
call fcn.0043b7c4
pop ecx
cmp esi, eax
jne 0x434eaf
mov eax, dword [ebx + 8]
jmp 0x434eb1
xor eax, eax
pop esi
pop ebx
pop ebp
ret

Function at 0x434eb8
Capabilities:
Get thread local storage value

Disassembly:
mov eax, dword [0x54d750]
push eax
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
push eax
call fcn.0043edc0
pop ecx
ret

Function at 0x434ed0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 8]
push eax
mov edx, dword [0x54d750]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
push eax
call fcn.004299e4
add esp, 8
pop ebp
ret