joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1019cb47
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
push dword [0x1065a1cc]
xor esi, esi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019cb66
mov ebx, dword [eax + 0x74]
jmp 0x1019cb68
mov ebx, esi
test ebx, ebx
jne 0x1019cb79
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019cbee
push ebx
push esi
push esi
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], esi
call fcn.101f90a3
test eax, eax
jne 0x1019cb98
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019cbe6
push edi
mov edi, dword [ebp + 8]
test edi, edi
je 0x1019cbae
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x1019cbb0
mov edi, esi
test edi, edi
jne 0x1019cbbb
push 0x80070057
jmp 0x1019cbc5
cmp ebx, dword [edi + 8]
je 0x1019cbcd
push 0x8004001e
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019cbe5
mov ecx, edi
call fcn.1019b4c2
mov ecx, dword [eax + 0x50]
test ecx, ecx
je 0x1019cbe5
mov eax, dword [ecx]
push dword [ebp + 0xc]
call dword [eax + 0x34]
mov esi, eax
pop edi
lea ecx, [ebp - 0xc]
call fcn.101f8f0d
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8

Function at 0x1019cc20
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
push ebx
push esi
push dword [0x1065a1cc]
xor ebx, ebx
mov dword [ebp - 4], ebx
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019cc42
mov esi, dword [eax + 0x74]
jmp 0x1019cc44
xor esi, esi
test esi, esi
jne 0x1019cc58
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019cd0b
and dword [ebp - 0x10], ebx
lea ecx, [ebp - 0x10]
push esi
push 0
push 1
call fcn.101f90a3
test eax, eax
jne 0x1019cc7c
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019cd03
mov ebx, dword [ebp + 8]
push edi
test ebx, ebx
je 0x1019cc96
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x14]
shr eax, 2
test al, 1
je 0x1019cc96
mov edi, ebx
jmp 0x1019cc98
xor edi, edi
test edi, edi
jne 0x1019cca3
push 0x80070057
jmp 0x1019ccad
cmp esi, dword [edi + 8]
je 0x1019ccb8
push 0x8004001e
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov ebx, dword [ebp - 4]
jmp 0x1019cd02
xor ecx, ecx
push ecx
cmp dword [esi + 0x10], ecx
je 0x1019ccec
xor eax, eax
lea edi, [ebp - 0x20]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x20], 0x10
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], 0x800c
call fcn.1019bc57
xor ebx, ebx
test eax, eax
setns bl
jmp 0x1019cd02
call fcn.10182f1e
mov ecx, edi
call fcn.101fc7e6
xor ebx, ebx
push 0
inc ebx
call fcn.101805c9
pop edi
lea ecx, [ebp - 0x10]
call fcn.101f8f0d
pop esi
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x1019cd15
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push edi
push dword [0x1065a1cc]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019cd31
mov edi, dword [eax + 0x74]
jmp 0x1019cd33
xor edi, edi
test edi, edi
jne 0x1019cd44
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019cdab
and dword [ebp - 0xc], 0
lea ecx, [ebp - 0xc]
push edi
push 0
push 1
call fcn.101f90a3
test eax, eax
jne 0x1019cd66
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019cda3
push esi
mov esi, dword [ebp + 8]
test esi, esi
je 0x1019cd7c
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x1019cd7e
xor esi, esi
test esi, esi
jne 0x1019cd89
push 0x80070057
jmp 0x1019cd93
cmp edi, dword [esi + 8]
je 0x1019cd9b
push 0x8004001e
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019cda2
mov ecx, esi
call fcn.101fa9fc
pop esi
lea ecx, [ebp - 0xc]
call fcn.101f8f0d
pop edi
mov esp, ebp
pop ebp
ret 4

Function at 0x1019cdd9
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push edi
push dword [0x1065a1cc]
xor edi, edi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019cdf8
mov ebx, dword [eax + 0x74]
jmp 0x1019cdfa
mov ebx, edi
test ebx, ebx
jne 0x1019ce0e
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019cebf
push ebx
push edi
push edi
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], edi
call fcn.101f90a3
test eax, eax
jne 0x1019ce30
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019ceb7
push esi
mov esi, dword [ebp + 8]
test esi, esi
je 0x1019ce46
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x1019ce48
mov esi, edi
test esi, esi
je 0x1019ceab
cmp ebx, dword [esi + 8]
je 0x1019ce58
push 0x8004001e
jmp 0x1019ceb0
cmp dword [ebp + 0x14], edi
jne 0x1019ceab
mov eax, dword [ebp + 0xc]
and eax, 0x1fffff
cmp eax, dword [ebp + 0xc]
jne 0x1019ceab
cmp dword [ebp + 0x10], edi
je 0x1019ceab
cmp dword [ebx + 0x10], edi
je 0x1019ce97
mov ecx, esi
call fcn.1019b4c2
test eax, eax
je 0x1019ce97
mov ecx, esi
call fcn.1019b4c2
mov eax, dword [eax + 0x54]
shr eax, 5
test al, 1
je 0x1019ce97
push 0x8004001f
jmp 0x1019ceb0
push dword [ebp + 0xc]
mov ecx, esi
call fcn.1019b50b
mov ecx, dword [ebp + 0x10]
xor edi, edi
inc edi
mov dword [ecx], eax
jmp 0x1019ceb6
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
pop esi
lea ecx, [ebp - 0xc]
call fcn.101f8f0d
mov eax, edi
pop edi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
Function at 0x1019cec9
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
push dword [0x1065a1cc]
xor esi, esi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019cee7
mov eax, dword [eax + 0x74]
jmp 0x1019cee9
mov eax, esi
test eax, eax
jne 0x1019cefa
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019cf48
push eax
push esi
push esi
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], esi
call fcn.101f90a3
test eax, eax
jne 0x1019cf19
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019cf40
push edi
mov edi, dword [ebp + 0xc]
test edi, edi
je 0x1019cf34
mov ecx, dword [ebp + 8]
test ecx, ecx
je 0x1019cf34
mov eax, dword [ecx]
call dword [eax + 0xc]
xor esi, esi
mov dword [edi], eax
inc esi
jmp 0x1019cf3f
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
pop edi
lea ecx, [ebp - 0xc]
call fcn.101f8f0d
mov eax, esi
pop esi
mov esp, ebp
pop ebp
ret 8

Function at 0x1019cfbc
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push esi
push edi
push dword [0x1065a1cc]
xor edi, edi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019cfde
mov esi, dword [eax + 0x74]
mov dword [ebp - 4], esi
jmp 0x1019cfe3
mov esi, edi
mov dword [ebp - 4], edi
test esi, esi
jne 0x1019cff7
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019d0a8
push esi
push edi
push edi
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], edi
call fcn.101f90a3
test eax, eax
jne 0x1019d019
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019d0a0
push ebx
mov ebx, dword [ebp + 8]
test ebx, ebx
je 0x1019d02f
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x1019d031
mov ebx, edi
test ebx, ebx
je 0x1019d094
cmp esi, dword [ebx + 8]
je 0x1019d041
push 0x8004001e
jmp 0x1019d099
mov esi, dword [ebp + 0xc]
test esi, esi
je 0x1019d056
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x1019d05b
mov esi, edi
mov dword [ebp + 0xc], esi
test esi, esi
je 0x1019d094
mov eax, dword [ebp - 4]
cmp eax, dword [esi + 8]
jne 0x1019d03a
cmp dword [ebp + 0x10], edi
je 0x1019d094
mov ecx, esi
call fcn.1019b4c2
mov ecx, ebx
mov esi, eax
call fcn.1019b4c2
cmp eax, esi
jne 0x1019d094
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push ebx
call fcn.101fbda5
xor edi, edi
inc edi
jmp 0x1019d09f
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
pop ebx
lea ecx, [ebp - 0x10]
call fcn.101f8f0d
mov eax, edi
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0x10
Function at 0x1019d0b2
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push edi
push dword [0x1065a1cc]
xor edi, edi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019d0d1
mov ebx, dword [eax + 0x74]
jmp 0x1019d0d3
mov ebx, edi
test ebx, ebx
jne 0x1019d0e7
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019d186
push ebx
push edi
push 1
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], edi
call fcn.101f90a3
test eax, eax
jne 0x1019d107
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019d17e
push esi
mov esi, dword [ebp + 8]
test esi, esi
je 0x1019d11d
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x1019d11f
mov esi, edi
test esi, esi
je 0x1019d172
cmp ebx, dword [esi + 8]
je 0x1019d12f
push 0x8004001e
jmp 0x1019d177
cmp dword [ebp + 0x18], edi
je 0x1019d172
cmp dword [ebx + 0x10], edi
je 0x1019d15c
mov ecx, esi
call fcn.1019b4c2
test eax, eax
je 0x1019d15c
mov ecx, esi
call fcn.1019b4c2
mov eax, dword [eax + 0x54]
shr eax, 5
test al, 1
je 0x1019d15c
push 0x8004001f
jmp 0x1019d177
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push esi
call fcn.101fcf37
mov edi, eax
jmp 0x1019d17d
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
pop esi
lea ecx, [ebp - 0xc]
call fcn.101f8f0d
mov eax, edi
pop edi
pop ebx
mov esp, ebp
pop ebp
ret 0x14

Function at 0x1019d190
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push edi
push dword [0x1065a1cc]
xor edi, edi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019d1af
mov ebx, dword [eax + 0x74]
jmp 0x1019d1b1
mov ebx, edi
test ebx, ebx
jne 0x1019d1c2
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019d23a
push ebx
push edi
push edi
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], edi
call fcn.101f90a3
test eax, eax
jne 0x1019d1e1
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019d232
push esi
mov esi, dword [ebp + 8]
test esi, esi
je 0x1019d1f7
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x1019d1f9
mov esi, edi
test esi, esi
jne 0x1019d204
push 0x80070057
jmp 0x1019d20e
cmp ebx, dword [esi + 8]
je 0x1019d216
push 0x8004001e
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019d231
test dword [esi + 0x38], 0x200000
je 0x1019d226
mov ecx, esi
call fcn.101fe80b
xor edi, edi
mov ecx, esi
inc edi
push edi
call fcn.101fb2f6
pop esi
lea ecx, [ebp - 0xc]
call fcn.101f8f0d
mov eax, edi
pop edi
pop ebx
mov esp, ebp
pop ebp
ret 4
Function at 0x1019d244
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
push dword [0x1065a1cc]
xor esi, esi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019d263
mov ebx, dword [eax + 0x74]
jmp 0x1019d265
mov ebx, esi
test ebx, ebx
jne 0x1019d276
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019d2de
push ebx
push esi
push esi
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], esi
call fcn.101f90a3
test eax, eax
jne 0x1019d295
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019d2d6
push edi
mov edi, dword [ebp + 8]
test edi, edi
je 0x1019d2ab
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x1019d2ad
mov edi, esi
test edi, edi
jne 0x1019d2b8
push 0x80070057
jmp 0x1019d2c2
cmp ebx, dword [edi + 8]
je 0x1019d2ca
push 0x8004001e
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019d2d5
push dword [ebp + 0xc]
push edi
call fcn.101fcfc8
mov esi, eax
pop edi
lea ecx, [ebp - 0xc]
call fcn.101f8f0d
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8

Function at 0x1019d316
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
push dword [0x1065a1cc]
xor esi, esi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019d335
mov ebx, dword [eax + 0x74]
jmp 0x1019d337
mov ebx, esi
test ebx, ebx
jne 0x1019d34b
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019d3e0
push ebx
push esi
push 1
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], esi
call fcn.101f90a3
test eax, eax
jne 0x1019d36b
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019d3d8
push edi
mov edi, dword [ebp + 8]
test edi, edi
je 0x1019d381
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x1019d383
mov edi, esi
test edi, edi
jne 0x1019d38e
push 0x80070057
jmp 0x1019d3c0
cmp ebx, dword [edi + 8]
je 0x1019d39a
push 0x8004001e
jmp 0x1019d3c0
cmp dword [ebx + 0x10], esi
je 0x1019d3c8
mov ecx, edi
call fcn.1019b4c2
test eax, eax
je 0x1019d3c8
mov ecx, edi
call fcn.1019b4c2
mov eax, dword [eax + 0x54]
shr eax, 5
test al, 1
je 0x1019d3c8
push 0x8004001f
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019d3d7
push esi
push dword [ebp + 0xc]
lea ecx, [edi + 0x34]
call fcn.101f9584
xor esi, esi
inc esi
pop edi
lea ecx, [ebp - 0xc]
call fcn.101f8f0d
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x1019d3ea
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push edi
push dword [0x1065a1cc]
xor edi, edi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019d409
mov ebx, dword [eax + 0x74]
jmp 0x1019d40b
mov ebx, edi
test ebx, ebx
jne 0x1019d41f
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019d4b3
push ebx
push edi
push 1
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], edi
call fcn.101f90a3
test eax, eax
jne 0x1019d43f
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019d4ab
push esi
mov esi, dword [ebp + 8]
test esi, esi
je 0x1019d455
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x1019d457
mov esi, edi
test esi, esi
je 0x1019d49f
cmp ebx, dword [esi + 8]
je 0x1019d467
push 0x8004001e
jmp 0x1019d4a4
mov ecx, dword [ebp + 0xc]
test ecx, ecx
je 0x1019d49f
cmp dword [ecx], 0x14
jne 0x1019d49f
mov eax, dword [ecx + 4]
and eax, 7
cmp eax, dword [ecx + 4]
jne 0x1019d49f
test byte [esi + 0x38], 8
jne 0x1019d48b
push 0x8004003c
jmp 0x1019d4a4
push ecx
mov ecx, esi
call fcn.101fc893
test eax, eax
js 0x1019d49c
xor edi, edi
inc edi
jmp 0x1019d4aa
push eax
jmp 0x1019d4a4
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
pop esi
lea ecx, [ebp - 0xc]
call fcn.101f8f0d
mov eax, edi
pop edi
pop ebx
mov esp, ebp
pop ebp
ret 8

Function at 0x1019d4bd
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push edi
push dword [0x1065a1cc]
xor edi, edi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019d4dc
mov ebx, dword [eax + 0x74]
jmp 0x1019d4de
mov ebx, edi
test ebx, ebx
jne 0x1019d4f2
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019d593
push ebx
push edi
push 1
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], edi
call fcn.101f90a3
test eax, eax
jne 0x1019d512
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019d58b
push esi
mov esi, dword [ebp + 8]
test esi, esi
je 0x1019d528
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x1019d52a
mov esi, edi
test esi, esi
jne 0x1019d535
push 0x80070057
jmp 0x1019d567
cmp ebx, dword [esi + 8]
je 0x1019d541
push 0x8004001e
jmp 0x1019d567
cmp dword [ebx + 0x10], edi
je 0x1019d56f
mov ecx, esi
call fcn.1019b4c2
test eax, eax
je 0x1019d56f
mov ecx, esi
call fcn.1019b4c2
mov eax, dword [eax + 0x54]
shr eax, 5
test al, 1
je 0x1019d56f
push 0x8004001f
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019d58a
mov ecx, esi
call fcn.1019b4c2
test eax, eax
je 0x1019d58a
push dword [ebp + 0x10]
mov ecx, eax
push dword [ebp + 0xc]
push esi
call fcn.101fea90
mov edi, eax
pop esi
lea ecx, [ebp - 0xc]
call fcn.101f8f0d
mov eax, edi
pop edi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
Function at 0x1019d59d
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push edi
push dword [0x1065a1cc]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019d5b9
mov edi, dword [eax + 0x74]
jmp 0x1019d5bb
xor edi, edi
test edi, edi
jne 0x1019d5cf
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019d65a
and dword [ebp - 0xc], 0
lea ecx, [ebp - 0xc]
push edi
push 0
push 1
call fcn.101f90a3
test eax, eax
jne 0x1019d5f1
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019d652
push esi
mov esi, dword [ebp + 8]
test esi, esi
je 0x1019d607
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x1019d609
xor esi, esi
test esi, esi
jne 0x1019d614
push 0x80070057
jmp 0x1019d61e
cmp edi, dword [esi + 8]
je 0x1019d626
push 0x8004001e
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019d651
push ebx
mov bl, byte [ebp + 0xc]
test bl, bl
je 0x1019d63b
cmp byte [ebp + 0x10], 0
je 0x1019d63b
mov ecx, esi
call fcn.101fa9fc
xor eax, eax
test bl, bl
pop ebx
sete al
shl eax, 0x18
xor eax, dword [esi + 0x38]
and eax, 0x1000000
xor dword [esi + 0x38], eax
pop esi
lea ecx, [ebp - 0xc]
call fcn.101f8f0d
pop edi
mov esp, ebp
pop ebp
ret 0xc

Function at 0x1019d661
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
push dword [0x1065a1cc]
xor esi, esi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019d680
mov ebx, dword [eax + 0x74]
jmp 0x1019d682
mov ebx, esi
test ebx, ebx
jne 0x1019d696
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019d74f
push ebx
push esi
push 1
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], esi
call fcn.101f90a3
test eax, eax
jne 0x1019d6b9
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019d747
push edi
mov edi, dword [ebp + 8]
push edi
call fcn.1019b455
mov dword [ebp + 8], eax
test eax, eax
je 0x1019d6e8
cmp ebx, dword [eax + 8]
je 0x1019d6d6
push 0x8004001e
jmp 0x1019d72d
mov eax, dword [ebp + 0x10]
and eax, 0x3ff
cmp eax, dword [ebp + 0x10]
jne 0x1019d6e8
cmp dword [ebp + 0xc], esi
je 0x1019d6ef
push 0x80070057
jmp 0x1019d72d
cmp dword [ebx + 0x10], esi
je 0x1019d735
test edi, edi
je 0x1019d706
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x1019d708
mov edi, esi
test edi, edi
je 0x1019d728
mov ecx, edi
call fcn.1019b4c2
test eax, eax
je 0x1019d735
mov ecx, edi
call fcn.1019b4c2
mov eax, dword [eax + 0x54]
shr eax, 5
test al, 1
je 0x1019d735
push 0x8004001f
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019d746
mov ecx, dword [ebp + 8]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
mov eax, dword [ecx]
call dword [eax + 0x18]
xor esi, esi
inc esi
pop edi
lea ecx, [ebp - 0xc]
call fcn.101f8f0d
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
Function at 0x1019d759
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push edi
push dword [0x1065a1cc]
xor edi, edi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019d778
mov ebx, dword [eax + 0x74]
jmp 0x1019d77a
mov ebx, edi
test ebx, ebx
jne 0x1019d78e
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019d82c
push ebx
push edi
push 1
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], edi
call fcn.101f90a3
test eax, eax
jne 0x1019d7ae
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019d824
push esi
mov esi, dword [ebp + 8]
test esi, esi
je 0x1019d7c4
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x1019d7c6
mov esi, edi
test esi, esi
jne 0x1019d7d1
push 0x80070057
jmp 0x1019d803
cmp ebx, dword [esi + 8]
je 0x1019d7dd
push 0x8004001e
jmp 0x1019d803
cmp dword [ebx + 0x10], edi
je 0x1019d80b
mov ecx, esi
call fcn.1019b4c2
test eax, eax
je 0x1019d80b
mov ecx, esi
call fcn.1019b4c2
mov eax, dword [eax + 0x54]
shr eax, 5
test al, 1
je 0x1019d80b
push 0x8004001f
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019d823
mov ecx, esi
call fcn.1019b4c2
mov ecx, dword [eax + 0x50]
test ecx, ecx
je 0x1019d823
push dword [ebp + 0xc]
call fcn.101fce72
mov edi, eax
pop esi
lea ecx, [ebp - 0xc]
call fcn.101f8f0d
mov eax, edi
pop edi
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x1019d836
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
push dword [0x1065a1cc]
xor esi, esi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019d855
mov ebx, dword [eax + 0x74]
jmp 0x1019d857
mov ebx, esi
test ebx, ebx
jne 0x1019d86b
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019d98a
push edi
push ebx
push esi
push 1
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], esi
call fcn.101f90a3
test eax, eax
je 0x1019d976
cmp dword [ebp + 0x14], 4
ja 0x1019d976
mov edi, dword [ebp + 8]
test edi, edi
je 0x1019d8a2
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x1019d8a4
mov edi, esi
test edi, edi
je 0x1019d976
cmp ebx, dword [edi + 8]
je 0x1019d8bb
push 0x8004001e
jmp 0x1019d97b
mov ecx, dword [ebp + 0xc]
test ecx, ecx
jne 0x1019d8c7
mov dword [ebp + 0xc], esi
jmp 0x1019d8e8
mov eax, dword [ecx]
call dword [eax + 0x14]
shr eax, 2
test al, 1
push 0
pop eax
cmovne eax, dword [ebp + 0xc]
mov dword [ebp + 0xc], eax
test eax, eax
je 0x1019d976
cmp ebx, dword [eax + 8]
jne 0x1019d8b1
mov ecx, dword [ebp + 0x10]
test ecx, ecx
jne 0x1019d8f4
mov dword [ebp + 0x10], esi
jmp 0x1019d911
mov eax, dword [ecx]
call dword [eax + 0x14]
shr eax, 2
test al, 1
push 0
pop eax
cmovne eax, dword [ebp + 0x10]
mov dword [ebp + 0x10], eax
test eax, eax
je 0x1019d976
cmp ebx, dword [eax + 8]
jne 0x1019d8b1
cmp dword [ebx + 0x10], esi
je 0x1019d939
mov ecx, edi
call fcn.1019b4c2
test eax, eax
je 0x1019d939
mov ecx, edi
call fcn.1019b4c2
mov eax, dword [eax + 0x54]
shr eax, 5
test al, 1
je 0x1019d939
push 0x8004001f
jmp 0x1019d97b
test dword [edi + 0x38], 0x200000
jne 0x1019d976
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x1019d95c
test byte [edi + 0x38], 1
jne 0x1019d95c
test byte [eax + 0x38], 1
je 0x1019d95c
push 0x80040028
jmp 0x1019d97b
push dword [ebp + 0x14]
mov ecx, edi
push dword [ebp + 0x10]
push eax
call fcn.101fad70
test eax, eax
js 0x1019d973
xor esi, esi
inc esi
jmp 0x1019d981
push eax
jmp 0x1019d97b
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea ecx, [ebp - 0xc]
call fcn.101f8f0d
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
Function at 0x1019d994
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push edi
push dword [0x1065a1cc]
xor edi, edi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019d9b3
mov ebx, dword [eax + 0x74]
jmp 0x1019d9b5
mov ebx, edi
test ebx, ebx
jne 0x1019d9c9
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019da67
push ebx
push edi
push 1
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], edi
call fcn.101f90a3
test eax, eax
jne 0x1019d9e9
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019da5f
push esi
mov esi, dword [ebp + 8]
test esi, esi
je 0x1019d9ff
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x1019da01
mov esi, edi
test esi, esi
jne 0x1019da0c
push 0x80070057
jmp 0x1019da58
cmp ebx, dword [esi + 8]
je 0x1019da18
push 0x8004001e
jmp 0x1019da58
cmp dword [ebx + 0x10], edi
je 0x1019da40
mov ecx, esi
call fcn.1019b4c2
test eax, eax
je 0x1019da40
mov ecx, esi
call fcn.1019b4c2
mov eax, dword [eax + 0x54]
shr eax, 5
test al, 1
je 0x1019da40
push 0x8004001f
jmp 0x1019da58
push dword [ebp + 0x10]
lea ecx, [esi + 0x34]
push dword [ebp + 0xc]
call fcn.101f965d
test eax, eax
js 0x1019da57
xor edi, edi
inc edi
jmp 0x1019da5e
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
pop esi
lea ecx, [ebp - 0xc]
call fcn.101f8f0d
mov eax, edi
pop edi
pop ebx
mov esp, ebp
pop ebp
ret 0xc