joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10262f2c
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push edi
push dword [0x1039deb8]
xor ebx, ebx
mov dword [ebp - 4], ebx
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
cmp eax, ebx
je 0x10262f4e
mov edi, dword [eax + 0x74]
jmp 0x10262f50
xor edi, edi
cmp edi, ebx
jne 0x10262f61
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10262fc9
push edi
push ebx
push ebx
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], ebx
call fcn.102bde47
test eax, eax
je 0x10262fb6
push esi
mov esi, dword [ebp + 8]
cmp esi, ebx
je 0x10262f8d
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
shr eax, 2
test al, 1
je 0x10262f8d
mov ecx, esi
jmp 0x10262f8f
xor ecx, ecx
pop esi
cmp ecx, ebx
je 0x10262fb6
cmp edi, dword [ecx + 8]
je 0x10262fa0
push 0x8004001e
jmp 0x10262fbb
cmp dword [ebp + 0xc], ebx
je 0x10262fb6
push dword [ebp + 0xc]
call fcn.102bff9f
mov dword [ebp - 4], 1
jmp 0x10262fc1
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea ecx, [ebp - 0x10]
call fcn.102bde00
mov eax, dword [ebp - 4]
pop edi
pop ebx
leave
ret 8

Function at 0x10262fd2
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push edi
push dword [0x1039deb8]
xor ebx, ebx
mov dword [ebp - 4], ebx
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
cmp eax, ebx
je 0x10262ff4
mov edi, dword [eax + 0x74]
jmp 0x10262ff6
xor edi, edi
cmp edi, ebx
jne 0x1026300a
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1026308c
push edi
push ebx
push ebx
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], ebx
call fcn.102bde47
test eax, eax
je 0x10263079
mov eax, dword [ebp + 0x10]
and eax, 0x11c
cmp eax, dword [ebp + 0x10]
jne 0x10263079
push esi
mov esi, dword [ebp + 8]
cmp esi, ebx
je 0x10263043
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
shr eax, 2
test al, 1
je 0x10263043
mov ecx, esi
jmp 0x10263045
xor ecx, ecx
pop esi
cmp ecx, ebx
je 0x10263079
cmp edi, dword [ecx + 8]
je 0x10263056
push 0x8004001e
jmp 0x1026307e
cmp dword [ebp + 0xc], ebx
je 0x10263079
mov eax, dword [ebp + 0x10]
shr eax, 8
test al, 1
jne 0x10263084
push dword [ebp + 0x10]
push dword [ebp + 0xc]
call fcn.102c024a
mov dword [ebp - 4], 1
jmp 0x10263084
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea ecx, [ebp - 0x10]
call fcn.102bde00
mov eax, dword [ebp - 4]
pop edi
pop ebx
leave
ret 0xc
Function at 0x10263095
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
push esi
push edi
push dword [0x1039deb8]
xor edi, edi
mov dword [ebp - 4], edi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
cmp eax, edi
je 0x102630b7
mov esi, dword [eax + 0x74]
jmp 0x102630b9
xor esi, esi
cmp esi, edi
jne 0x102630cd
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10263171
push esi
push edi
push 1
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], edi
call fcn.102bde47
test eax, eax
jne 0x102630ed
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10263169
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, edi
je 0x10263107
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x14]
shr eax, 2
test al, 1
je 0x10263107
mov ecx, ebx
jmp 0x10263109
xor ecx, ecx
cmp ecx, edi
jne 0x10263114
push 0x80070057
jmp 0x1026311e
cmp esi, dword [ecx + 8]
je 0x10263126
push 0x8004001e
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10263168
cmp dword [esi + 0x10], edi
je 0x1026315c
xor eax, eax
lea edi, [ebp - 0x20]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
push 0
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x20], 0x10
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], 0x800c
call fcn.10262cbc
xor ecx, ecx
test eax, eax
setge cl
mov dword [ebp - 4], ecx
jmp 0x10263168
call fcn.102bfeff
mov dword [ebp - 4], 1
pop ebx
lea ecx, [ebp - 0x10]
call fcn.102bde00
mov eax, dword [ebp - 4]
pop edi
pop esi
leave
ret 4

Function at 0x102631a3
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
push edi
push dword [0x1039deb8]
xor edi, edi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
cmp eax, edi
je 0x102631c2
mov esi, dword [eax + 0x74]
jmp 0x102631c4
xor esi, esi
cmp esi, edi
jne 0x102631d5
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1026321d
push esi
push edi
push edi
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], edi
call fcn.102bde47
test eax, eax
jne 0x102631f4
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10263215
push dword [ebp + 8]
call fcn.10262469
cmp eax, edi
je 0x102631e7
cmp esi, dword [eax + 8]
je 0x1026320c
push 0x8004001e
jmp 0x102631ec
cmp dword [ebp + 0xc], edi
jne 0x102631e7
movzx edi, byte [eax + 0x14]
lea ecx, [ebp - 0xc]
call fcn.102bde00
mov eax, edi
pop edi
pop esi
leave
ret 8
Function at 0x10263225
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push edi
push dword [0x1039deb8]
xor ebx, ebx
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
cmp eax, ebx
je 0x10263244
mov edi, dword [eax + 0x74]
jmp 0x10263246
xor edi, edi
cmp edi, ebx
jne 0x10263257
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x102632c8
push edi
push ebx
push 1
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], ebx
call fcn.102bde47
test eax, eax
jne 0x10263277
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x102632c0
push esi
mov esi, dword [ebp + 8]
cmp esi, ebx
je 0x10263291
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
shr eax, 2
test al, 1
je 0x10263291
mov eax, esi
jmp 0x10263293
xor eax, eax
pop esi
test eax, eax
je 0x1026326a
cmp edi, dword [eax + 8]
je 0x102632a4
push 0x8004001e
jmp 0x1026326f
mov ecx, dword [ebp + 0x14]
and ecx, 7
cmp ecx, dword [ebp + 0x14]
jne 0x1026326a
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push eax
call fcn.1029e281
mov ebx, eax
lea ecx, [ebp - 0xc]
call fcn.102bde00
pop edi
mov eax, ebx
pop ebx
leave
ret 0x10

Function at 0x102632d0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
and dword [ebp - 4], 0
push esi
push dword [0x1039deb8]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x102632f0
mov esi, dword [eax + 0x74]
jmp 0x102632f2
xor esi, esi
test esi, esi
jne 0x10263303
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10263366
and dword [ebp - 0x10], 0
push esi
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.102bde47
test eax, eax
jne 0x10263325
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1026335e
push edi
mov edi, dword [ebp + 8]
test edi, edi
je 0x1026333f
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
shr eax, 2
test al, 1
je 0x1026333f
mov eax, edi
jmp 0x10263341
xor eax, eax
pop edi
test eax, eax
je 0x10263318
cmp esi, dword [eax + 8]
je 0x10263352
push 0x8004001e
jmp 0x1026331d
push dword [ebp + 0xc]
push eax
call fcn.102c0ec3
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x10]
call fcn.102bde00
mov eax, dword [ebp - 4]
pop esi
leave
ret 8
Function at 0x1026336e
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
and dword [ebp - 4], 0
push esi
push dword [0x1039deb8]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1026338e
mov esi, dword [eax + 0x74]
jmp 0x10263390
xor esi, esi
test esi, esi
jne 0x102633a1
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10263404
and dword [ebp - 0x10], 0
push esi
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.102bde47
test eax, eax
jne 0x102633c3
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x102633fc
push edi
mov edi, dword [ebp + 8]
test edi, edi
je 0x102633dd
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
shr eax, 2
test al, 1
je 0x102633dd
mov eax, edi
jmp 0x102633df
xor eax, eax
pop edi
test eax, eax
je 0x102633b6
cmp esi, dword [eax + 8]
je 0x102633f0
push 0x8004001e
jmp 0x102633bb
push dword [ebp + 0xc]
push eax
call fcn.102c0f49
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x10]
call fcn.102bde00
mov eax, dword [ebp - 4]
pop esi
leave
ret 8

Function at 0x1026340c
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
push dword [0x1039deb8]
xor esi, esi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
cmp eax, esi
je 0x1026342a
mov eax, dword [eax + 0x74]
jmp 0x1026342c
xor eax, eax
cmp eax, esi
jne 0x1026343d
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10263478
push eax
push esi
push esi
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], esi
call fcn.102bde47
test eax, eax
je 0x10263465
mov eax, dword [ebp + 8]
cmp eax, esi
je 0x10263465
cmp dword [eax], 0x20
jne 0x10263465
push eax
call fcn.102c1b6d
mov esi, eax
jmp 0x10263470
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea ecx, [ebp - 0xc]
call fcn.102bde00
mov eax, esi
pop esi
leave
ret 4

Function at 0x102634ad
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
push dword [0x1039deb8]
xor esi, esi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
cmp eax, esi
je 0x102634cb
mov eax, dword [eax + 0x74]
jmp 0x102634cd
xor eax, eax
cmp eax, esi
jne 0x102634de
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10263522
push eax
push esi
push esi
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], esi
call fcn.102bde47
test eax, eax
je 0x1026350f
cmp dword [ebp + 8], 0x8b
ja 0x1026350f
call fcn.10261033
mov eax, dword [eax + 0x24]
push dword [ebp + 8]
mov ecx, eax
call fcn.1026250b
mov esi, eax
jmp 0x1026351a
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea ecx, [ebp - 0xc]
call fcn.102bde00
mov eax, esi
pop esi
leave
ret 4
Function at 0x10263556
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
and dword [ebp - 4], 0
push esi
push dword [0x1039deb8]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x10263576
mov esi, dword [eax + 0x74]
jmp 0x10263578
xor esi, esi
test esi, esi
jne 0x10263589
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x102635f6
and dword [ebp - 0x14], 0
push esi
push 0
push 0
lea ecx, [ebp - 0x14]
call fcn.102bde47
test eax, eax
jne 0x102635a5
push 0x80070057
jmp 0x102635e8
push edi
mov edi, dword [ebp + 8]
test edi, edi
je 0x102635bf
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
shr eax, 2
test al, 1
je 0x102635bf
mov ecx, edi
jmp 0x102635c1
xor ecx, ecx
pop edi
test ecx, ecx
je 0x1026359e
cmp esi, dword [ecx + 8]
je 0x102635d2
push 0x8004001e
jmp 0x102635e8
lea eax, [ebp - 8]
push eax
call fcn.102bc685
test eax, eax
jl 0x102635e7
mov eax, dword [ebp - 8]
mov dword [ebp - 4], eax
jmp 0x102635ee
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea ecx, [ebp - 0x14]
call fcn.102bde00
mov eax, dword [ebp - 4]
pop esi
leave
ret 4

Function at 0x102635fe
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
push dword [0x1039deb8]
xor esi, esi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
cmp eax, esi
je 0x1026361c
mov eax, dword [eax + 0x74]
jmp 0x1026361e
xor eax, eax
cmp eax, esi
jne 0x1026362f
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10263660
push eax
push esi
push esi
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], esi
call fcn.102bde47
test eax, eax
jne 0x1026364e
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10263658
push dword [ebp + 8]
call fcn.102bc96b
mov esi, eax
lea ecx, [ebp - 0xc]
call fcn.102bde00
mov eax, esi
pop esi
leave
ret 4
Function at 0x10263721
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push edi
push dword [0x1039deb8]
xor edi, edi
mov dword [ebp - 4], edi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
cmp eax, edi
je 0x10263743
mov ebx, dword [eax + 0x74]
jmp 0x10263745
xor ebx, ebx
cmp ebx, edi
jne 0x10263759
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10263909
push ebx
push edi
push 1
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], edi
call fcn.102bde47
test eax, eax
jne 0x1026377c
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10263901
push esi
mov esi, dword [ebp + 0x10]
cmp esi, edi
je 0x102638f5
mov ecx, dword [esi + 0x10]
mov edx, ecx
mov eax, 0xfffff
and edx, eax
cmp edx, ecx
jne 0x102638f5
mov ecx, dword [esi + 0x14]
mov edx, ecx
and edx, eax
cmp edx, ecx
jne 0x102638f5
mov eax, dword [esi + 8]
movzx ecx, al
cmp ecx, eax
jne 0x102638f5
mov eax, dword [esi + 4]
mov ecx, dword [esi]
mov dword [ebp - 8], eax
mov eax, dword [ebp + 0xc]
and eax, 0xf
dec eax
mov dword [ebp - 0xc], ecx
je 0x1026388c
sub eax, 4
je 0x10263814
dec eax
dec eax
jne 0x102638f5
cmp dword [ebp + 8], edi
jne 0x102638f5
cmp ecx, edi
je 0x102638f5
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0xc]
push eax
mov dword [ebp + 8], edi
call fcn.102c2135
cmp eax, edi
jl 0x1026380e
mov eax, dword [ebp + 8]
mov dword [ebp - 4], eax
jmp 0x10263900
push eax
jmp 0x102638fa
mov edi, dword [ebp + 8]
test edi, edi
je 0x10263845
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
shr eax, 2
and al, 1
movzx eax, al
neg eax
sbb eax, eax
and eax, edi
je 0x102638f5
cmp ebx, dword [eax + 8]
je 0x10263861
push 0x8004001e
jmp 0x102638fa
call fcn.10261033
test eax, eax
je 0x10263851
mov eax, dword [eax + 0x20]
mov ecx, dword [eax + 8]
call sym.osetup.dll_public:_struct_FlexUI::IDataSource____thiscall_FlexUI::FlexValue::GetDataSource_void_const
test eax, eax
je 0x102638f5
and dword [ebp + 8], 0
lea ecx, [ebp + 8]
push ecx
lea ecx, [ebp - 0xc]
push ecx
mov ecx, eax
call fcn.102bd49f
test eax, eax
jl 0x10263880
mov eax, dword [ebp + 8]
mov dword [ebp - 4], eax
jmp 0x10263887
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov edi, dword [ebp + 8]
jmp 0x102638c7
cmp dword [ebp + 8], edi
je 0x102638f5
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x102638f5
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp - 0xc]
push eax
push dword [ebp + 8]
mov dword [ebp + 0x10], edi
call fcn.102c1ffe
cmp eax, edi
jl 0x102638bd
mov eax, dword [ebp + 0x10]
mov dword [ebp - 4], eax
jmp 0x102638c4
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov edi, dword [ebp + 0x10]
test edi, edi
je 0x10263900
mov eax, dword [esi + 0xc]
test eax, eax
je 0x102638dd
mov edx, dword [edi]
push eax
push dword [esi + 8]
mov ecx, edi
call dword [edx + 0x18]
mov eax, dword [esi + 0x14]
test eax, eax
je 0x10263900
push 0
push eax
push dword [esi + 0x10]
mov ecx, edi
call fcn.102bccfc
test eax, eax
jge 0x10263900
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
pop esi
lea ecx, [ebp - 0x18]
call fcn.102bde00
mov eax, dword [ebp - 4]
pop edi
pop ebx
leave
ret 0xc
Function at 0x10263912
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
push dword [0x1039deb8]
xor esi, esi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
cmp eax, esi
je 0x10263930
mov eax, dword [eax + 0x74]
jmp 0x10263932
xor eax, eax
cmp eax, esi
jne 0x10263943
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10263971
push eax
push esi
push esi
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], esi
call fcn.102bde47
test eax, eax
jne 0x10263962
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10263969
call fcn.1029d8f0
mov esi, eax
lea ecx, [ebp - 0xc]
call fcn.102bde00
mov eax, esi
pop esi
leave
ret

Function at 0x10263976
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push edi
push dword [0x1039deb8]
xor ebx, ebx
mov dword [ebp - 4], ebx
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
cmp eax, ebx
je 0x10263998
mov edi, dword [eax + 0x74]
jmp 0x1026399a
xor edi, edi
cmp edi, ebx
jne 0x102639ae
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10263a6e
push edi
push ebx
push 1
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], ebx
call fcn.102bde47
test eax, eax
jne 0x102639d1
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10263a66
push esi
mov esi, dword [ebp + 8]
cmp esi, ebx
je 0x102639e9
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
shr eax, 2
test al, 1
je 0x102639e9
mov ebx, esi
test ebx, ebx
jne 0x102639f4
push 0x80070057
jmp 0x102639fe
cmp edi, dword [ebx + 8]
je 0x10263a06
push 0x8004001e
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10263a65
mov ecx, ebx
call fcn.10261249
mov esi, eax
test esi, esi
je 0x10263a65
call fcn.1029d8f0
and dword [ebp + 8], 0
mov edi, eax
test edi, edi
je 0x10263a3b
mov ecx, edi
call fcn.10261249
mov dword [ebp + 8], eax
cmp eax, esi
jne 0x10263a3b
push edi
mov ecx, ebx
call fcn.102bc8f5
mov dword [ebp - 4], eax
cmp byte [ebp + 0xc], 0
je 0x10263a65
cmp dword [ebp - 4], 0
jne 0x10263a65
test edi, edi
je 0x10263a50
cmp dword [ebp + 8], esi
je 0x10263a65
mov eax, dword [esi + 0x80]
test eax, eax
je 0x10263a65
push eax
mov ecx, ebx
call fcn.102bc8f5
mov dword [ebp - 4], eax
pop esi
lea ecx, [ebp - 0x10]
call fcn.102bde00
mov eax, dword [ebp - 4]
pop edi
pop ebx
leave
ret 8
Function at 0x10263a77
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
and dword [ebp - 4], 0
push edi
push dword [0x1039deb8]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x10263a97
mov edi, dword [eax + 0x74]
jmp 0x10263a99
xor edi, edi
test edi, edi
jne 0x10263aad
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10263b4e
and dword [ebp - 0x10], 0
push edi
push 0
push 1
lea ecx, [ebp - 0x10]
call fcn.102bde47
test eax, eax
jne 0x10263acf
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10263b46
push esi
mov esi, dword [ebp + 8]
test esi, esi
je 0x10263ae5
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x10263ae7
xor esi, esi
test esi, esi
jne 0x10263af2
push 0x80070057
jmp 0x10263b21
cmp edi, dword [esi + 8]
je 0x10263afe
push 0x8004001e
jmp 0x10263b21
cmp dword [edi + 0x10], 0
je 0x10263b29
mov ecx, esi
call fcn.10261249
test eax, eax
je 0x10263b29
mov ecx, esi
call fcn.10261249
test byte [eax + 0x54], 0x20
je 0x10263b29
push 0x8004001f
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10263b45
mov ecx, esi
call fcn.10261249
test eax, eax
je 0x10263b45
push dword [ebp + 0x10]
mov ecx, eax
push dword [ebp + 0xc]
push esi
call fcn.102bea6f
mov dword [ebp - 4], eax
pop esi
lea ecx, [ebp - 0x10]
call fcn.102bde00
mov eax, dword [ebp - 4]
pop edi
leave
ret 0xc

Function at 0x10263b56
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
and dword [ebp - 4], 0
push edi
push dword [0x1039deb8]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x10263b76
mov edi, dword [eax + 0x74]
jmp 0x10263b78
xor edi, edi
test edi, edi
jne 0x10263b8c
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10263c30
and dword [ebp - 0x10], 0
push edi
push 0
push 1
lea ecx, [ebp - 0x10]
call fcn.102bde47
test eax, eax
jne 0x10263bae
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10263c28
push esi
mov esi, dword [ebp + 8]
test esi, esi
je 0x10263bc4
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x10263bc6
xor esi, esi
test esi, esi
jne 0x10263bd1
push 0x80070057
jmp 0x10263c00
cmp edi, dword [esi + 8]
je 0x10263bdd
push 0x8004001e
jmp 0x10263c00
cmp dword [edi + 0x10], 0
je 0x10263c08
mov ecx, esi
call fcn.10261249
test eax, eax
je 0x10263c08
mov ecx, esi
call fcn.10261249
test byte [eax + 0x54], 0x20
je 0x10263c08
push 0x8004001f
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10263c27
mov ecx, esi
call fcn.10261249
test eax, eax
je 0x10263c27
mov ecx, dword [ebp + 0xc]
neg ecx
sbb ecx, ecx
and ecx, esi
push ecx
mov ecx, eax
call fcn.102bea0b
mov dword [ebp - 4], eax
pop esi
lea ecx, [ebp - 0x10]
call fcn.102bde00
mov eax, dword [ebp - 4]
pop edi
leave
ret 8
Function at 0x10263c38
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
push dword [0x1039deb8]
xor esi, esi
mov dword [ebp - 4], esi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
cmp eax, esi
je 0x10263c5a
mov ebx, dword [eax + 0x74]
jmp 0x10263c5c
xor ebx, ebx
cmp ebx, esi
jne 0x10263c70
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10263d21
push ebx
push esi
push esi
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], esi
call fcn.102bde47
test eax, eax
jne 0x10263c92
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10263d19
push edi
mov edi, dword [ebp + 8]
cmp edi, esi
je 0x10263ca8
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x10263caa
xor edi, edi
cmp edi, esi
je 0x10263d0d
cmp ebx, dword [edi + 8]
je 0x10263cba
push 0x8004001e
jmp 0x10263d12
cmp dword [ebp + 0x14], esi
jne 0x10263d0d
mov eax, dword [ebp + 0xc]
and eax, 0xfffff
cmp eax, dword [ebp + 0xc]
jne 0x10263d0d
mov esi, dword [ebp + 0x10]
test esi, esi
je 0x10263d0d
cmp dword [ebx + 0x10], 0
je 0x10263cf8
mov ecx, edi
call fcn.10261249
test eax, eax
je 0x10263cf8
mov ecx, edi
call fcn.10261249
test byte [eax + 0x54], 0x20
je 0x10263cf8
push 0x8004001f
jmp 0x10263d12
push dword [ebp + 0xc]
mov ecx, edi
call fcn.102636a0
mov dword [esi], eax
mov dword [ebp - 4], 1
jmp 0x10263d18
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
pop edi
lea ecx, [ebp - 0x10]
call fcn.102bde00
mov eax, dword [ebp - 4]
pop esi
pop ebx
leave
ret 0x10

Function at 0x10263d2a
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
and dword [ebp - 4], 0
push edi
push dword [0x1039deb8]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x10263d4a
mov edi, dword [eax + 0x74]
jmp 0x10263d4c
xor edi, edi
test edi, edi
jne 0x10263d60
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10263e09
and dword [ebp - 0x10], 0
push edi
push 0
push 1
lea ecx, [ebp - 0x10]
call fcn.102bde47
test eax, eax
jne 0x10263d82
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10263e01
push esi
mov esi, dword [ebp + 8]
test esi, esi
je 0x10263d98
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x10263d9a
xor esi, esi
test esi, esi
jne 0x10263da5
push 0x80070057
jmp 0x10263dfa
cmp edi, dword [esi + 8]
je 0x10263db1
push 0x8004001e
jmp 0x10263dfa
cmp dword [edi + 0x10], 0
je 0x10263dd6
mov ecx, esi
call fcn.10261249
test eax, eax
je 0x10263dd6
mov ecx, esi
call fcn.10261249
test byte [eax + 0x54], 0x20
je 0x10263dd6
push 0x8004001f
jmp 0x10263dfa
fld dword [ebp + 0x10]
push ecx
push ecx
fstp dword [esp + 4]
mov ecx, esi
fld dword [ebp + 0xc]
fstp dword [esp]
call fcn.102bf3e9
test eax, eax
jl 0x10263df9
mov dword [ebp - 4], 1
jmp 0x10263e00
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
pop esi
lea ecx, [ebp - 0x10]
call fcn.102bde00
mov eax, dword [ebp - 4]
pop edi
leave
ret 0xc