joyce8/EMBER2024-capa huggingface dataset:
Function at 0x433e7c
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x433ef9
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x433ef9
cmp ebx, 0xffffffff
jne 0x433eb8
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
mov ecx, eax
add ecx, 0x10
jmp 0x433eca
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx + ebx*4 + 4]
test byte [ecx + 1], 0x20
je 0x433ed9
push ecx
call fcn.0043f7e0
pop ecx
mov ecx, eax
mov eax, dword [ecx]
test al, 0x10
je 0x433ee5
fld qword [ecx + 8]
pop ebx
pop ebp
ret
test al, 2
je 0x433eef
fild dword [ecx + 8]
pop ebx
pop ebp
ret
test al, 8
je 0x433ef9
fild qword [ecx + 8]
pop ebx
pop ebp
ret
fld qword [0x433f04]
pop ebx
pop ebp
ret

Function at 0x433f0c
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x433f8f
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x433f8f
cmp ebx, 0xffffffff
jne 0x433f46
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x433f59
mov ecx, dword [0x555894]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
mov ebx, eax
test byte [ebx + 1], 0x20
je 0x433f6a
push ebx
call fcn.0043f7e0
pop ecx
mov ebx, eax
mov eax, dword [ebx]
test al, 2
je 0x433f76
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
test al, 8
je 0x433f80
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
test al, 0x10
je 0x433f8f
fld qword [ebx + 8]
call fcn.004afcf0
pop ebx
pop ebp
ret
xor eax, eax
pop ebx
pop ebp
ret

Function at 0x433f94
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x434017
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x434017
cmp ebx, 0xffffffff
jne 0x433fce
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x433fe1
mov ecx, dword [0x555894]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
mov ebx, eax
test byte [ebx + 1], 0x20
je 0x433ff2
push ebx
call fcn.0043f7e0
pop ecx
mov ebx, eax
mov eax, dword [ebx]
test al, 2
je 0x433ffe
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
test al, 8
je 0x434008
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
test al, 0x10
je 0x434017
fld qword [ebx + 8]
call fcn.004afcf0
pop ebx
pop ebp
ret
mov eax, dword [ebp + 0xc]
pop ebx
pop ebp
ret
Function at 0x434020
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x4340a3
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x4340a3
cmp ebx, 0xffffffff
jne 0x43405a
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x43406d
mov ecx, dword [0x555894]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
mov ebx, eax
test byte [ebx + 1], 0x20
je 0x43407e
push ebx
call fcn.0043f7e0
pop ecx
mov ebx, eax
mov eax, dword [ebx]
test al, 8
je 0x43408a
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
test al, 2
je 0x434094
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
test al, 0x10
je 0x4340a3
fld qword [ebx + 8]
call fcn.004afcf0
pop ebx
pop ebp
ret
xor eax, eax
pop ebx
pop ebp
ret

Function at 0x4340a8
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x43412b
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x43412b
cmp ebx, 0xffffffff
jne 0x4340e2
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x4340f5
mov ecx, dword [0x555894]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
mov ebx, eax
test byte [ebx + 1], 0x20
je 0x434106
push ebx
call fcn.0043f7e0
pop ecx
mov ebx, eax
mov eax, dword [ebx]
test al, 8
je 0x434112
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
test al, 2
je 0x43411c
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
test al, 0x10
je 0x43412b
fld qword [ebx + 8]
call fcn.004afcf0
pop ebx
pop ebp
ret
mov eax, dword [ebp + 0xc]
pop ebx
pop ebp
ret

Function at 0x434134
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x4341b7
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x4341b7
cmp ebx, 0xffffffff
jne 0x43416e
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x434181
mov ecx, dword [0x555894]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
mov ebx, eax
test byte [ebx + 1], 0x20
je 0x434192
push ebx
call fcn.0043f7e0
pop ecx
mov ebx, eax
mov eax, dword [ebx]
test al, 8
je 0x43419e
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
test al, 2
je 0x4341a8
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
test al, 0x10
je 0x4341b7
fld qword [ebx + 8]
call fcn.004afcf0
pop ebx
pop ebp
ret
xor eax, eax
pop ebx
pop ebp
ret
Function at 0x4341bc
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x43423f
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x43423f
cmp ebx, 0xffffffff
jne 0x4341f6
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x434209
mov ecx, dword [0x555894]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
mov ebx, eax
test byte [ebx + 1], 0x20
je 0x43421a
push ebx
call fcn.0043f7e0
pop ecx
mov ebx, eax
mov eax, dword [ebx]
test al, 8
je 0x434226
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
test al, 2
je 0x434230
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
test al, 0x10
je 0x43423f
fld qword [ebx + 8]
call fcn.004afcf0
pop ebx
pop ebp
ret
mov eax, dword [ebp + 0xc]
pop ebx
pop ebp
ret

Function at 0x4342d8
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x43435f
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x43435f
cmp ebx, 0xffffffff
jne 0x434312
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x434325
mov ecx, dword [0x555894]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
mov ebx, eax
test byte [ebx + 1], 0x20
je 0x434336
push ebx
call fcn.0043f7e0
pop ecx
mov ebx, eax
mov eax, dword [ebx]
test al, 8
je 0x434345
mov eax, dword [ebx + 8]
mov edx, dword [ebx + 0xc]
pop ebx
pop ebp
ret
test al, 2
je 0x434350
mov eax, dword [ebx + 8]
cdq
pop ebx
pop ebp
ret
test al, 0x10
je 0x43435f
fld qword [ebx + 8]
call fcn.004afcf0
pop ebx
pop ebp
ret
xor eax, eax
xor edx, edx
pop ebx
pop ebp
ret

Function at 0x434368
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x4343ef
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x4343ef
cmp ebx, 0xffffffff
jne 0x4343a2
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x4343b5
mov ecx, dword [0x555894]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
mov ebx, eax
test byte [ebx + 1], 0x20
je 0x4343c6
push ebx
call fcn.0043f7e0
pop ecx
mov ebx, eax
mov eax, dword [ebx]
test al, 8
je 0x4343d5
mov eax, dword [ebx + 8]
mov edx, dword [ebx + 0xc]
pop ebx
pop ebp
ret
test al, 2
je 0x4343e0
mov eax, dword [ebx + 8]
cdq
pop ebx
pop ebp
ret
test al, 0x10
je 0x4343ef
fld qword [ebx + 8]
call fcn.004afcf0
pop ebx
pop ebp
ret
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp + 0x10]
pop ebx
pop ebp
ret
Function at 0x4343f8
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x43445d
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x43445d
cmp ebx, 0xffffffff
jne 0x434432
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x434445
mov ecx, dword [0x555894]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
test byte [eax + 1], 0x20
je 0x434452
push eax
call fcn.0043f7e0
pop ecx
test byte [eax], 1
je 0x43445d
mov eax, dword [eax + 8]
pop ebx
pop ebp
ret
xor eax, eax
pop ebx
pop ebp
ret

Function at 0x434464
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 0xc]
cmp ebx, 0xffffffff
jl 0x4344e2
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x4344e2
cmp ebx, 0xffffffff
jne 0x43449e
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x4344b1
mov ecx, dword [0x555894]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
mov ebx, eax
test byte [ebx + 1], 0x20
je 0x4344c2
push ebx
call fcn.0043f7e0
pop ecx
mov ebx, eax
test byte [ebx], 1
je 0x4344e2
cmp dword [ebx + 0xc], 0
je 0x4344e2
mov edx, dword [ebx + 8]
push edx
call fcn.0043ba0c
pop ecx
cmp eax, dword [ebp + 8]
jne 0x4344e2
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
xor eax, eax
pop ebx
pop ebp
ret

Function at 0x434c30
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
cmp dword [ebp + 8], 0xffffffff
jl 0x434cd4
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp eax, dword [ebp + 8]
jl 0x434cd4
cmp dword [ebp + 8], 0xffffffff
jne 0x434c70
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
mov ebx, eax
add ebx, 0x10
jmp 0x434c85
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [ebp + 8]
mov ebx, dword [edx + ecx*4 + 4]
test byte [ebx + 1], 0x20
je 0x434c94
push ebx
call fcn.0043f7e0
pop ecx
mov ebx, eax
mov eax, dword [ebx]
test al, 2
je 0x434ca0
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
test al, 8
je 0x434caa
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
test al, 0x10
je 0x434cb9
fld qword [ebx + 8]
call fcn.004afcf0
pop ebx
pop ebp
ret
test ah, 0x80
je 0x434cd4
lea eax, [ebp + 0xc]
add eax, 4
mov eax, dword [eax - 4]
push eax
push ebx
call fcn.0042a328
add esp, 8
pop ebx
pop ebp
ret
xor eax, eax
pop ebx
pop ebp
ret
Function at 0x434cdc
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
cmp dword [ebp + 8], 0xffffffff
jl 0x434d8e
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp eax, dword [ebp + 8]
jl 0x434d8e
cmp dword [ebp + 8], 0xffffffff
jne 0x434d20
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
mov ebx, eax
add ebx, 0x10
jmp 0x434d35
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [ebp + 8]
mov ebx, dword [edx + ecx*4 + 4]
test byte [ebx + 1], 0x20
je 0x434d44
push ebx
call fcn.0043f7e0
pop ecx
mov ebx, eax
mov eax, dword [ebx]
test al, 8
je 0x434d50
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
test al, 2
je 0x434d5a
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
test al, 0x10
je 0x434d69
fld qword [ebx + 8]
call fcn.004afcf0
pop ebx
pop ebp
ret
test al, 0x60
je 0x434d73
mov eax, dword [ebx + 8]
pop ebx
pop ebp
ret
test ah, 0x80
je 0x434d8e
lea eax, [ebp + 0xc]
add eax, 4
mov eax, dword [eax - 4]
push eax
push ebx
call fcn.0042a360
add esp, 8
pop ebx
pop ebp
ret
xor eax, eax
pop ebx
pop ebp
ret

Function at 0x435030
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
cmp dword [ebp + 0xc], 0xffffffff
mov esi, dword [ebp + 8]
jl 0x4350f7
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp eax, dword [ebp + 0xc]
jl 0x4350f7
cmp dword [ebp + 0xc], 0xffffffff
jne 0x435078
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
mov ebx, eax
add ebx, 0x10
jmp 0x43508d
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [ebp + 0xc]
mov ebx, dword [edx + ecx*4 + 4]
test byte [ebx + 1], 0x20
je 0x43509c
push ebx
call fcn.0043f7e0
pop ecx
mov ebx, eax
test byte [ebx], 1
je 0x4350ba
cmp dword [ebx + 0xc], 0
je 0x4350f7
mov eax, dword [ebx + 8]
push eax
call fcn.0043ba0c
pop ecx
cmp esi, eax
jne 0x4350f7
mov eax, dword [ebx + 8]
jmp 0x4350f9
test byte [ebx + 1], 0x80
je 0x4350f7
lea eax, [ebp + 0x10]
add eax, 4
mov eax, dword [eax - 4]
push eax
push ebx
call fcn.0042a1a0
add esp, 8
mov ebx, eax
test ebx, ebx
je 0x4350f7
test byte [ebx], 1
je 0x4350f7
cmp dword [ebx + 0xc], 0
je 0x4350f7
mov edx, dword [ebx + 8]
push edx
call fcn.0043ba0c
pop ecx
cmp esi, eax
jne 0x4350f7
mov eax, dword [ebx + 8]
jmp 0x4350f9
xor eax, eax
pop esi
pop ebx
pop ebp
ret

Function at 0x435100
Capabilities:
Get thread local storage value

Disassembly:
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
push eax
call fcn.0043f008
pop ecx
ret

Function at 0x435118
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 8]
push eax
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
push eax
call fcn.00429c2c
add esp, 8
pop ebp
ret
Function at 0x43513c
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 8]
push eax
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
push eax
call fcn.0043dc4c
add esp, 8
pop ebp
ret

Function at 0x435160
Capabilities:
Get thread local storage value

Disassembly:
push 0
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
push eax
call fcn.0043dc4c
add esp, 8
ret

Function at 0x43517c
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 8]
push eax
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
push eax
call fcn.0043de48
add esp, 8
pop ebp
ret

Function at 0x4351a0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 8]
push eax
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
push eax
call fcn.0043dd78
add esp, 8
pop ebp
ret

Function at 0x4351c4
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 0xc]
push eax
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [0x555894]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
push eax
call fcn.0043dce8
add esp, 0xc
pop ebp
ret

Function at 0x4351ec
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 0xc]
push eax
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [0x555894]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
push eax
call fcn.0043ded8
add esp, 0xc
pop ebp
ret

Function at 0x43523c
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 8]
push eax
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
push eax
call fcn.0043e3c4
add esp, 8
pop ebp
ret

Function at 0x435260
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 0x10]
push eax
mov edx, dword [ebp + 0xc]
push edx
mov ecx, dword [ebp + 8]
push ecx
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
push eax
call fcn.0043e408
add esp, 0x10
pop ebp
ret

Function at 0x435288
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 8]
push eax
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
push eax
call fcn.0043e458
add esp, 8
pop ebp
ret

Function at 0x4352ac
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
mov edx, dword [0x555894]
push dword [ebp + 0xc]
push dword [ebp + 8]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
push eax
call fcn.0043e4dc
add esp, 0xc
pop ebp
ret

Function at 0x4352d0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 0xc]
push eax
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [0x555894]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
push eax
call fcn.0043e534
add esp, 0xc
pop ebp
ret
Function at 0x4352f8
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
cmp dword [ebp + 8], 0
je 0x435308
mov eax, 1
jmp 0x43530a
xor eax, eax
push eax
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
push eax
call fcn.0043e574
add esp, 8
pop ebp
ret

Function at 0x435328
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
mov edx, dword [0x555894]
push dword [ebp + 0xc]
push dword [ebp + 8]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
push eax
call fcn.0043e5ac
add esp, 0xc
pop ebp
ret

Function at 0x43534c
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 8]
push eax
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
push eax
call fcn.0043e63c
add esp, 8
pop ebp
ret

Function at 0x435370
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 8]
push eax
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
push eax
call fcn.0043e694
add esp, 8
pop ebp
ret

Function at 0x435394
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 8]
push eax
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
push eax
call fcn.0043e6ec
add esp, 8
pop ebp
ret

Function at 0x4353dc
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
mov edx, dword [0x555894]
push dword [ebp + 0xc]
push dword [ebp + 8]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
push eax
call fcn.0043e7b0
add esp, 0xc
pop ebp
ret

Function at 0x435400
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 0x14]
push eax
mov eax, dword [0x555894]
mov edx, dword [ebp + 0x10]
push edx
push dword [ebp + 0xc]
push dword [ebp + 8]
push eax
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
push eax
call fcn.0043e8cc
add esp, 0x14
pop ebp
ret

Function at 0x43542c
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 0x14]
push eax
mov eax, dword [0x555894]
mov edx, dword [ebp + 0x10]
push edx
push dword [ebp + 0xc]
push dword [ebp + 8]
push eax
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
push eax
call fcn.0043e97c
add esp, 0x14
pop ebp
ret

Function at 0x435458
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 0xc]
push eax
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [0x555894]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
push eax
call fcn.0043eb10
add esp, 0xc
pop ebp
ret

Function at 0x4354d0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
mov ecx, dword [0x555894]
mov eax, dword [ebp + 0x10]
push eax
push dword [ebp + 0xc]
push dword [ebp + 8]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
push eax
call fcn.0043e878
add esp, 0x10
pop ebp
ret
Function at 0x4354f8
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 8]
push eax
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
push eax
call fcn.0043ed24
add esp, 8
pop ebp
ret

Function at 0x43551c
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [ebp + 8]
push eax
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
push eax
call fcn.0043ed64
add esp, 8
pop ebp
ret

Function at 0x4355bc
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 0xc]
cmp ebx, 0xffffffff
jne 0x4355ec
mov eax, dword [ebp + 8]
push eax
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
push eax
call fcn.0043dc4c
add esp, 8
mov eax, 1
pop ebx
pop ebp
ret
test ebx, ebx
jl 0x43563e
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
mov ecx, dword [eax + 0xc]
mov eax, dword [ecx]
movzx edx, word [eax + 0x10]
cmp ebx, edx
jg 0x43563e
mov ecx, dword [0x555894]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov ebx, dword [eax + ebx*4 + 4]
test byte [ebx + 1], 0x20
je 0x43563e
mov edx, dword [ebp + 8]
push edx
push ebx
call fcn.0043f7e0
pop ecx
push eax
call fcn.0043dc4c
add esp, 8
mov eax, 1
pop ebx
pop ebp
ret
xor eax, eax
pop ebx
pop ebp
ret

Function at 0x435644
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 0x10]
cmp ebx, 0xffffffff
jne 0x435678
mov eax, dword [ebp + 0xc]
push eax
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [0x555894]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
push eax
call fcn.0043dce8
add esp, 0xc
mov eax, 1
pop ebx
pop ebp
ret
test ebx, ebx
jl 0x4356ce
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
mov ecx, dword [eax + 0xc]
mov eax, dword [ecx]
movzx edx, word [eax + 0x10]
cmp ebx, edx
jg 0x4356ce
mov ecx, dword [0x555894]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov ebx, dword [eax + ebx*4 + 4]
test byte [ebx + 1], 0x20
je 0x4356ce
mov edx, dword [ebp + 0xc]
push edx
mov ecx, dword [ebp + 8]
push ecx
push ebx
call fcn.0043f7e0
pop ecx
push eax
call fcn.0043dce8
add esp, 0xc
mov eax, 1
pop ebx
pop ebp
ret
xor eax, eax
pop ebx
pop ebp
ret