joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10015350
Capabilities:
Allocate thread local storage

Disassembly:
sub esp, 0xc
push esi
mov esi, dword [esp + 0x14]
test esi, esi
je 0x100153e4
push esi
call fcn.10133230
add esp, 4
test al, al
je 0x100153e4
cmp dword [esp + 0x18], 0x3055
je 0x100153a5
lea eax, [esp + 4]
mov dword [esp + 4], 0x322b
push eax
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.10016980
add esp, 4
xor eax, eax
pop esi
add esp, 0xc
ret 8
mov ecx, esi
call fcn.10137720
mov esi, eax
cmp dword [esi + 0x14], 0x10
jb 0x100153b6
mov esi, dword [esi]
lea eax, [esp + 4]
mov dword [esp + 4], 0x3000
push eax
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.10016980
add esp, 4
mov eax, esi
pop esi
add esp, 0xc
ret 8
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x100153f8
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x1001540a
call fcn.100079f0
mov dword [eax], 0x322b
xor eax, eax
pop esi
add esp, 0xc
ret 8

Function at 0x10015420
Capabilities:
Allocate thread local storage

Disassembly:
sub esp, 0x18
push ebx
push esi
mov esi, dword [esp + 0x24]
lea eax, [esp + 8]
push esi
push eax
call fcn.100b4690
add esp, 8
cmp dword [esp + 8], 0x3000
je 0x10015482
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x10015455
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x10015467
call fcn.100079f0
mov ecx, dword [esp + 8]
xor ebx, ebx
mov dword [eax], ecx
lea ecx, [esp + 0x10]
call fcn.100016b0
pop esi
mov eax, ebx
pop ebx
add esp, 0x18
ret 0xc
mov ecx, esi
call fcn.100276c0
cmp byte [eax + 9], 0
jne 0x100154d0
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x100154a3
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x100154b5
call fcn.100079f0
lea ecx, [esp + 0x10]
mov dword [eax], 0x3002
xor ebx, ebx
call fcn.100016b0
pop esi
mov eax, ebx
pop ebx
add esp, 0x18
ret 0xc
cmp dword [esp + 0x28], 0x322c
je 0x10015514
lea eax, [esp + 0x14]
mov dword [esp + 0x14], 0x3004
push eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0
call fcn.10016980
add esp, 4
lea ecx, [esp + 0x10]
xor ebx, ebx
call fcn.100016b0
pop esi
mov eax, ebx
pop ebx
add esp, 0x18
ret 0xc
mov ecx, esi
call fcn.100276a0
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
lea eax, [esp + 8]
push eax
call fcn.10016980
xor ebx, ebx
lea ecx, [esp + 0x14]
add esp, 4
cmp dword [esp + 8], 0x3000
sete bl
call fcn.100016b0
pop esi
mov eax, ebx
pop ebx
add esp, 0x18
ret 0xc
Function at 0x10015550
Capabilities:
Allocate thread local storage

Disassembly:
sub esp, 0xc
push ebx
mov ebx, dword [esp + 0x18]
lea eax, [esp + 4]
push esi
mov esi, dword [esp + 0x20]
push edi
mov edi, dword [esp + 0x28]
push edi
push esi
push ebx
push dword [esp + 0x28]
push eax
call fcn.100b6ec0
add esp, 0x14
cmp dword [esp + 0xc], 0x3000
je 0x100155aa
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x10015594
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x100155a6
call fcn.100079f0
xor esi, esi
jmp 0x10015602
sub esi, 0x3210
je 0x100155ce
sub esi, 4
je 0x100155c5
sub esi, 0xa
jne 0x100155d7
mov ecx, ebx
call fcn.10055fa0
jmp 0x100155d5
mov ecx, ebx
call fcn.100987b0
jmp 0x100155d5
mov ecx, ebx
call fcn.1007a410
mov dword [edi], eax
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x100155eb
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x100155fd
call fcn.100079f0
mov esi, 1
mov ecx, dword [esp + 0xc]
mov dword [eax], ecx
lea ecx, [esp + 0x14]
call fcn.100016b0
pop edi
mov eax, esi
pop esi
pop ebx
add esp, 0xc
ret 0x10

Function at 0x10015620
Capabilities:
Allocate thread local storage

Disassembly:
sub esp, 0xc
push ebx
mov ebx, dword [esp + 0x18]
lea eax, [esp + 4]
push esi
mov esi, dword [esp + 0x20]
push edi
mov edi, dword [esp + 0x28]
push edi
push esi
push ebx
push dword [esp + 0x28]
push eax
call fcn.100b6fc0
add esp, 0x14
cmp dword [esp + 0xc], 0x3000
je 0x1001567a
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x10015664
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x10015676
call fcn.100079f0
xor esi, esi
jmp 0x100156c7
sub esi, 0x3212
je 0x10015690
sub esi, 1
jne 0x1001569c
mov ecx, ebx
call fcn.10153c50
jmp 0x10015697
mov ecx, ebx
call fcn.10155240
mov dword [edi + 4], edx
mov dword [edi], eax
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x100156b0
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x100156c2
call fcn.100079f0
mov esi, 1
mov ecx, dword [esp + 0xc]
mov dword [eax], ecx
lea ecx, [esp + 0x14]
call fcn.100016b0
pop edi
mov eax, esi
pop esi
pop ebx
add esp, 0xc
ret 0x10
Function at 0x100156f0
Capabilities:
Allocate thread local storage

Disassembly:
sub esp, 0xc
push esi
mov esi, dword [esp + 0x14]
push edi
mov edi, dword [esp + 0x1c]
test esi, esi
jne 0x10015709
cmp edi, 0x3055
je 0x10015769
lea eax, [esp + 8]
push esi
push eax
call fcn.100b4690
add esp, 8
cmp dword [esp + 8], 0x3000
je 0x10015760
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x10015735
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x10015747
call fcn.100079f0
mov ecx, dword [esp + 8]
mov dword [eax], ecx
lea ecx, [esp + 0x10]
call fcn.100016b0
pop edi
xor eax, eax
pop esi
add esp, 0xc
ret 8
lea ecx, [esp + 0x10]
call fcn.100016b0
add edi, 0xffffcfad
cmp edi, 0x3a
ja case.0x1001577f.12374
movzx eax, byte [edi + 0x10015850]
jmp dword [eax*4 + 0x1001583c]
mov esi, str.OpenGL_ES
jmp 0x100157cd
test esi, esi
jne 0x100157a2
call fcn.100270f0
mov esi, eax
cmp dword [esi + 0x14], 0x10
jb 0x100157cd
mov esi, dword [esi]
jmp 0x100157cd
mov ecx, esi
call fcn.100276b0
mov esi, eax
cmp dword [esi + 0x14], 0x10
jb 0x100157cd
mov esi, dword [esi]
jmp 0x100157cd
mov ecx, esi
call fcn.10027700
mov esi, eax
cmp dword [esi + 0x14], 0x10
jb 0x100157cd
mov esi, dword [esi]
jmp 0x100157cd
mov esi, str.1.4__ANGLE_2.1.0._
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x100157e1
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x100157f3
call fcn.100079f0
mov dword [eax], 0x3000
mov eax, esi
pop edi
pop esi
add esp, 0xc
ret 8
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x10015817
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x10015829
call fcn.100079f0
pop edi
mov dword [eax], 0x300c
xor eax, eax
pop esi
add esp, 0xc
ret 8
Function at 0x10015c60
Capabilities:
Allocate thread local storage

Disassembly:
sub esp, 0x18
push ebx
mov ebx, dword [esp + 0x24]
lea eax, [esp + 4]
push esi
mov esi, dword [esp + 0x24]
push edi
push ebx
push esi
push eax
call fcn.100b8a20
add esp, 0xc
cmp dword [esp + 0xc], 0x3000
je 0x10015cc9
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x10015c9b
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x10015cad
call fcn.100079f0
mov ecx, dword [esp + 0xc]
xor ebx, ebx
mov dword [eax], ecx
lea ecx, [esp + 0x14]
call fcn.100016b0
pop edi
pop esi
mov eax, ebx
pop ebx
add esp, 0x18
ret 0x10
mov ecx, esi
call fcn.100276c0
cmp byte [eax + 3], 0
jne 0x10015d18
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x10015cea
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x10015cfc
call fcn.100079f0
lea ecx, [esp + 0x14]
mov dword [eax], 0x3000
xor ebx, ebx
call fcn.100016b0
pop edi
pop esi
mov eax, ebx
pop ebx
add esp, 0x18
ret 0x10
test ebx, ebx
jne 0x10015d26
mov dword [esp + 0x18], 0x300d
jmp 0x10015d5c
mov edi, dword [esp + 0x30]
cmp edi, 0x3200
je 0x10015d47
cmp edi, 0x33a2
jne 0x10015d54
mov ecx, esi
call fcn.100276c0
cmp byte [eax + 5], 0
jmp 0x10015d52
mov ecx, esi
call fcn.100276c0
cmp byte [eax + 2], 0
jne 0x10015d8f
mov dword [esp + 0x18], 0x3004
lea eax, [esp + 0x18]
mov dword [esp + 0x1c], 0
push eax
mov dword [esp + 0x24], 0
call fcn.10016980
add esp, 4
lea ecx, [esp + 0x14]
xor ebx, ebx
call fcn.100016b0
pop edi
pop esi
mov eax, ebx
pop ebx
add esp, 0x18
ret 0x10
push dword [esp + 0x34]
lea eax, [esp + 0x1c]
mov ecx, ebx
push edi
push eax
call fcn.10156da0
push eax
lea ecx, [esp + 0x10]
call fcn.10001760
lea ecx, [esp + 0x20]
call fcn.100016b0
lea eax, [esp + 0xc]
push eax
call fcn.10016980
xor ebx, ebx
lea ecx, [esp + 0x18]
add esp, 4
cmp dword [esp + 0xc], 0x3000
sete bl
call fcn.100016b0
pop edi
pop esi
mov eax, ebx
pop ebx
add esp, 0x18
ret 0x10

Function at 0x10015f10
Capabilities:
Allocate thread local storage

Disassembly:
sub esp, 0xc
push esi
mov esi, dword [esp + 0x14]
lea eax, [esp + 4]
push esi
push eax
call fcn.100b74c0
add esp, 8
cmp dword [esp + 4], 0x3000
je 0x10015f70
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x10015f44
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x10015f56
call fcn.100079f0
mov ecx, dword [esp + 4]
xor esi, esi
mov dword [eax], ecx
lea ecx, [esp + 0xc]
call fcn.100016b0
mov eax, esi
pop esi
add esp, 0xc
ret 4
test esi, esi
je 0x10015f85
mov ecx, esi
call fcn.101324a0
push esi
call dword [sym.imp.mozglue.dll_free]
add esp, 4
lea ecx, [esp + 0xc]
mov esi, 1
call fcn.100016b0
mov eax, esi
pop esi
add esp, 0xc
ret 4
Function at 0x10015ff0
Capabilities:
Allocate thread local storage

Disassembly:
sub esp, 0x18
push esi
mov esi, dword [esp + 0x24]
lea eax, [esp + 4]
push esi
push dword [esp + 0x24]
push eax
call fcn.100b8a20
add esp, 0xc
cmp dword [esp + 4], 0x3000
je 0x10016054
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x10016028
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x1001603a
call fcn.100079f0
mov ecx, dword [esp + 4]
xor esi, esi
mov dword [eax], ecx
lea ecx, [esp + 0xc]
call fcn.100016b0
mov eax, esi
pop esi
add esp, 0x18
ret 0xc
cmp dword [esp + 0x28], 0x3084
je 0x1001609e
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x10016072
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x10016084
call fcn.100079f0
lea ecx, [esp + 0xc]
mov dword [eax], 0x300c
xor esi, esi
call fcn.100016b0
mov eax, esi
pop esi
add esp, 0x18
ret 0xc
test esi, esi
je 0x1001618e
mov ecx, esi
call fcn.1007a410
cmp eax, 4
je 0x1001618e
mov ecx, esi
call fcn.1007a7d0
cmp eax, 0x305c
jne 0x100160fd
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x3009
push eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
call fcn.10016980
add esp, 4
lea ecx, [esp + 0xc]
xor esi, esi
call fcn.100016b0
mov eax, esi
pop esi
add esp, 0x18
ret 0xc
cmp dword [esi + 0x54], 0
je 0x10016152
push 0x3084
lea eax, [esp + 0x14]
mov ecx, esi
push eax
call fcn.10156e10
push eax
lea ecx, [esp + 8]
call fcn.10001760
lea ecx, [esp + 0x18]
call fcn.100016b0
cmp dword [esp + 4], 0x3000
je 0x10016152
lea eax, [esp + 4]
push eax
call fcn.10016980
add esp, 4
lea ecx, [esp + 0xc]
xor esi, esi
call fcn.100016b0
mov eax, esi
pop esi
add esp, 0x18
ret 0xc
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x3000
push eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
call fcn.10016980
add esp, 4
lea ecx, [esp + 0xc]
mov esi, 1
call fcn.100016b0
mov eax, esi
pop esi
add esp, 0x18
ret 0xc
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x100161a2
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x100161b4
call fcn.100079f0
lea ecx, [esp + 0xc]
mov dword [eax], 0x300d
xor esi, esi
call fcn.100016b0
mov eax, esi
pop esi
add esp, 0x18
ret 0xc

Function at 0x100161d0
Capabilities:
Allocate thread local storage

Disassembly:
sub esp, 0xc
lea eax, [esp]
push esi
push str.dpy_not_a_valid_EGLDisplay_handle
push 0x3008
push eax
call fcn.10131350
mov esi, eax
add esp, 0xc
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x10016200
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x10016212
call fcn.100079f0
mov ecx, dword [esi]
mov dword [eax], ecx
lea ecx, [esp + 0xc]
call fcn.100016b0
mov eax, dword [section..data]
pop esi
cmp eax, 0xffffffff
jne 0x10016234
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x10016246
call fcn.100079f0
mov dword [eax], 0x3000
mov eax, 1
add esp, 0xc
ret
Function at 0x10016920
Capabilities:
Allocate thread local storage

Disassembly:
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x10016934
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x10016946
call fcn.100079f0
mov ecx, dword [esp + 4]
mov dword [eax + 0x14], ecx
ret

Function at 0x10016950
Capabilities:
Allocate thread local storage

Disassembly:
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x10016964
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x10016976
call fcn.100079f0
mov ecx, dword [esp + 4]
mov dword [eax + 8], ecx
ret

Function at 0x10016980
Capabilities:
Allocate thread local storage

Disassembly:
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x10016994
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x100169a6
call fcn.100079f0
mov ecx, dword [esp + 4]
mov ecx, dword [ecx]
mov dword [eax], ecx
ret

Function at 0x100175e0
Capabilities:
Allocate thread local storage

Disassembly:
sub esp, 0xc
push ebx
mov ebx, dword [esp + 0x18]
lea eax, [esp + 4]
push esi
mov esi, dword [esp + 0x20]
push edi
mov edi, dword [esp + 0x28]
push edi
push esi
push ebx
push dword [esp + 0x28]
push eax
call fcn.100b7cd0
add esp, 0x14
cmp dword [esp + 0xc], 0x3000
je 0x1001763a
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x10017624
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x10017636
call fcn.100079f0
xor esi, esi
jmp 0x10017684
sub esi, 0x3210
je 0x10017651
sub esi, 0xe
jne 0x10017659
push edi
mov ecx, ebx
call fcn.10157730
jmp 0x10017659
push edi
mov ecx, ebx
call fcn.1013f810
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x1001766d
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x1001767f
call fcn.100079f0
mov esi, 1
mov ecx, dword [esp + 0xc]
mov dword [eax], ecx
lea ecx, [esp + 0x14]
call fcn.100016b0
pop edi
mov eax, esi
pop esi
pop ebx
add esp, 0xc
ret 0x10
Function at 0x100176a0
Capabilities:
Allocate thread local storage

Disassembly:
sub esp, 0x18
push esi
call fcn.10012a90
mov esi, dword [esp + 0x24]
push esi
push eax
push dword [esp + 0x28]
lea eax, [esp + 0x10]
push eax
call fcn.100b7eb0
add esp, 0x10
cmp dword [esp + 4], 0x3000
jne 0x100176f3
lea eax, [esp + 0x10]
mov ecx, esi
push eax
call fcn.10151b00
push eax
lea ecx, [esp + 8]
call fcn.10001760
lea ecx, [esp + 0x18]
call fcn.100016b0
cmp dword [esp + 4], 0x3000
je 0x1001771d
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x10017707
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x10017719
call fcn.100079f0
xor esi, esi
jmp 0x10017748
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x10017731
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x10017743
call fcn.100079f0
mov esi, 1
mov ecx, dword [esp + 4]
mov dword [eax], ecx
lea ecx, [esp + 0xc]
call fcn.100016b0
mov eax, esi
pop esi
add esp, 0x18
ret 8

Function at 0x10017760
Capabilities:
Allocate thread local storage

Disassembly:
sub esp, 0x20
push esi
call fcn.10012a90
push dword [esp + 0x30]
mov esi, eax
lea eax, [esp + 8]
push eax
call fcn.10115320
lea eax, [esp + 0xc]
push eax
push dword [esp + 0x38]
lea eax, [esp + 0x1c]
push esi
push dword [esp + 0x3c]
push eax
call fcn.100b80e0
add esp, 0x1c
cmp dword [esp + 0xc], 0x3000
jne 0x100177cf
mov ecx, dword [esp + 0x2c]
lea eax, [esp + 4]
push esi
push eax
lea eax, [esp + 0x20]
push eax
call fcn.10152050
push eax
lea ecx, [esp + 0x10]
call fcn.10001760
lea ecx, [esp + 0x20]
call fcn.100016b0
cmp dword [esp + 0xc], 0x3000
je 0x100177f9
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x100177e3
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x100177f5
call fcn.100079f0
xor esi, esi
jmp 0x10017824
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x1001780d
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x1001781f
call fcn.100079f0
mov esi, 1
mov ecx, dword [esp + 0xc]
mov dword [eax], ecx
lea ecx, [esp + 0x14]
call fcn.100016b0
lea ecx, [esp + 4]
call fcn.10001710
mov eax, esi
pop esi
add esp, 0x20
ret 0xc
Function at 0x10017850
Capabilities:
Allocate thread local storage

Disassembly:
sub esp, 0x20
push esi
call fcn.10012a90
push dword [esp + 0x2c]
mov esi, eax
lea eax, [esp + 0x10]
push esi
push dword [esp + 0x30]
push eax
call fcn.100b8580
add esp, 0x10
cmp dword [esp + 0xc], 0x3000
jne 0x100178ba
push esi
lea ecx, [esp + 8]
call fcn.10112130
mov ecx, dword [esp + 0x30]
push eax
lea eax, [esp + 0x20]
push eax
call fcn.10152050
push eax
lea ecx, [esp + 0x10]
call fcn.10001760
lea ecx, [esp + 0x20]
call fcn.100016b0
lea ecx, [esp + 4]
call fcn.10001710
cmp dword [esp + 0xc], 0x3000
je 0x100178e4
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x100178ce
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x100178e0
call fcn.100079f0
xor esi, esi
jmp 0x1001790f
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x100178f8
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x1001790a
call fcn.100079f0
mov esi, 1
mov ecx, dword [esp + 0xc]
mov dword [eax], ecx
lea ecx, [esp + 0x14]
call fcn.100016b0
mov eax, esi
pop esi
add esp, 0x20
ret 8

Function at 0x10017930
Capabilities:
Allocate thread local storage

Disassembly:
sub esp, 0x18
push esi
call fcn.10012a90
mov esi, dword [esp + 0x24]
push esi
push eax
push dword [esp + 0x28]
lea eax, [esp + 0x10]
push eax
call fcn.100b7eb0
add esp, 0x10
cmp dword [esp + 4], 0x3000
jne 0x10017983
lea eax, [esp + 0x10]
mov ecx, esi
push eax
call fcn.10151c10
push eax
lea ecx, [esp + 8]
call fcn.10001760
lea ecx, [esp + 0x18]
call fcn.100016b0
cmp dword [esp + 4], 0x3000
je 0x100179ad
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x10017997
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x100179a9
call fcn.100079f0
xor esi, esi
jmp 0x100179d8
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x100179c1
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x100179d3
call fcn.100079f0
mov esi, 1
mov ecx, dword [esp + 4]
mov dword [eax], ecx
lea ecx, [esp + 0xc]
call fcn.100016b0
mov eax, esi
pop esi
add esp, 0x18
ret 8
Function at 0x100179f0
Capabilities:
Allocate thread local storage

Disassembly:
sub esp, 0x20
push esi
push dword [esp + 0x34]
lea eax, [esp + 8]
push eax
call fcn.10115320
mov esi, dword [esp + 0x38]
lea eax, [esp + 0xc]
push eax
push esi
push dword [esp + 0x3c]
lea eax, [esp + 0x20]
push dword [esp + 0x3c]
push eax
call fcn.100b8780
add esp, 0x1c
cmp dword [esp + 0xc], 0x3000
jne 0x10017a5c
mov ecx, dword [esp + 0x2c]
lea eax, [esp + 4]
push eax
push esi
lea eax, [esp + 0x20]
push eax
call fcn.10156d30
push eax
lea ecx, [esp + 0x10]
call fcn.10001760
lea ecx, [esp + 0x20]
call fcn.100016b0
cmp dword [esp + 0xc], 0x3000
je 0x10017a86
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x10017a70
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x10017a82
call fcn.100079f0
xor esi, esi
jmp 0x10017ab1
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x10017a9a
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x10017aac
call fcn.100079f0
mov esi, 1
mov ecx, dword [esp + 0xc]
mov dword [eax], ecx
lea ecx, [esp + 0x14]
call fcn.100016b0
lea ecx, [esp + 4]
call fcn.10001710
mov eax, esi
pop esi
add esp, 0x20
ret 0x10

Function at 0x10017ae0
Capabilities:
Allocate thread local storage

Disassembly:
sub esp, 0xc
push esi
push dword [esp + 0x18]
lea eax, [esp + 8]
push dword [esp + 0x18]
push eax
call fcn.100b8a20
mov eax, dword [section..data]
add esp, 0xc
cmp dword [esp + 4], 0x3000
je 0x10017b43
cmp eax, 0xffffffff
jne 0x10017b17
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x10017b29
call fcn.100079f0
mov ecx, dword [esp + 4]
xor esi, esi
mov dword [eax], ecx
lea ecx, [esp + 0xc]
call fcn.100016b0
mov eax, esi
pop esi
add esp, 0xc
ret 0x10
cmp eax, 0xffffffff
jne 0x10017b52
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x10017b64
call fcn.100079f0
lea ecx, [esp + 0xc]
mov dword [eax], 0x3000
mov esi, 1
call fcn.100016b0
mov eax, esi
pop esi
add esp, 0xc
ret 0x10
Function at 0x10017b90
Capabilities:
Allocate thread local storage

Disassembly:
sub esp, 0x18
push esi
mov esi, dword [esp + 0x24]
lea eax, [esp + 4]
push esi
push dword [esp + 0x24]
push eax
call fcn.100b8a20
add esp, 0xc
cmp dword [esp + 4], 0x3000
je 0x10017bf4
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x10017bc8
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x10017bda
call fcn.100079f0
mov ecx, dword [esp + 4]
xor esi, esi
mov dword [eax], ecx
lea ecx, [esp + 0xc]
call fcn.100016b0
mov eax, esi
pop esi
add esp, 0x18
ret 8
mov ecx, dword [esp + 0x20]
call fcn.10028bd0
test al, al
je 0x10017c41
mov eax, dword [section..data]
cmp eax, 0xffffffff
jne 0x10017c15
call sub.KERNEL32.dll_TlsAlloc
mov dword [section..data], eax
push eax
call fcn.1002e140
add esp, 4
test eax, eax
jne 0x10017c27
call fcn.100079f0
lea ecx, [esp + 0xc]
mov dword [eax], 0x300e
xor esi, esi
call fcn.100016b0
mov eax, esi
pop esi
add esp, 0x18
ret 8
lea eax, [esp + 0x10]
push eax
test esi, esi
jne 0x10017c74
mov dword [esp + 0x14], 0x300d
mov dword [esp + 0x18], esi
mov dword [esp + 0x1c], esi
call fcn.10016980
add esp, 4
lea ecx, [esp + 0xc]
call fcn.100016b0
mov eax, esi
pop esi
add esp, 0x18
ret 8
mov ecx, esi
call fcn.10159320
push eax
lea ecx, [esp + 8]
call fcn.10001760
lea ecx, [esp + 0x18]
call fcn.100016b0
cmp dword [esp + 4], 0x3000
je 0x10017cb9
lea eax, [esp + 4]
push eax
call fcn.10016980
add esp, 4
lea ecx, [esp + 0xc]
xor esi, esi
call fcn.100016b0
mov eax, esi
pop esi
add esp, 0x18
ret 8
lea eax, [esp + 0x10]
mov dword [esp + 0x10], 0x3000
push eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
call fcn.10016980
add esp, 4
lea ecx, [esp + 0xc]
mov esi, 1
call fcn.100016b0
mov eax, esi
pop esi
add esp, 0x18
ret 8