joyce8/EMBER2024-capa huggingface dataset:
Function at 0x445b8d
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x60
lea eax, [ebp - 0x4c]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_BeginPaint]
mov dword [ebp - 0xc], eax
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_GetWindowTextLengthA]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
add eax, 1
push eax
call fcn.0049b580
add esp, 4
mov dword [ebp - 8], eax
push 0
push 0
push 0x31
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetParent]
push eax
call dword [sym.imp.USER32.dll_GetParent]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
push eax
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x60]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_GetClientRect]
push 1
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.GDI32.dll_SetBkMode]
mov eax, dword [ebp - 4]
add eax, 1
push eax
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_GetWindowTextA]
push 0
lea eax, [ebp - 0x60]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.USER32.dll_DrawTextA]
mov eax, dword [ebp - 8]
push eax
call fcn.0049b640
add esp, 4
mov ecx, dword [ebp - 0x50]
push ecx
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
lea eax, [ebp - 0x4c]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_EndPaint]
xor eax, eax
mov esp, ebp
pop ebp
ret
Function at 0x45b410
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 4
mov eax, dword [0x7d8230]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov dword [ebp - 4], eax
push 0x696fb5
call fcn.0045b4a0
pop ecx
test eax, eax
jne 0x45b44a
push 0
push 0
push str.Error__missing___ErrorBlock__
push 0x2328
call fcn.00492ef0
add esp, 0x10
push 0x696f8a
call fcn.0045b4a0
pop ecx
test eax, eax
je 0x45b47d
push 0
call fcn.0049f730
pop ecx
mov dword [0x7be2a8], eax
mov eax, dword [ebp - 4]
lea eax, [eax + 0x10]
push eax
mov eax, dword [0x7be2a8]
push eax
call fcn.004a44a0
add esp, 8
jmp 0x45b493
push 0
push 0
push str.Error__missing___BreakBlock__
push 0x2328
call fcn.00492ef0
add esp, 0x10
mov esp, ebp
pop ebp
ret
Function at 0x461740
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
push ebx
push esi
push edi
mov eax, dword [0x7d8230]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
mov eax, dword [ebx + 4]
mov esi, dword [eax - 8]
mov eax, dword [ebx + 4]
mov edi, dword [eax - 4]
mov eax, dword [esi]
mov edx, eax
and edx, 0x3a
jne 0x461783
and eax, 0x400
je 0x4617fd
mov eax, dword [esi + 8]
cmp eax, 1
jne 0x4617fd
mov eax, dword [edi]
mov edx, eax
and edx, 0x3a
jne 0x46179b
and eax, 0x400
je 0x4617fd
mov eax, dword [edi + 8]
cmp eax, 1
jne 0x4617fd
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov eax, dword [edi]
mov dword [ebp - 0xc], eax
mov eax, dword [esi]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 4]
push eax
call fcn.0046c000
pop ecx
fst qword [ebp - 0x28]
fstp qword [ebp - 0x18]
lea eax, [ebp - 8]
push eax
call fcn.0046c000
pop ecx
fst qword [ebp - 0x30]
fstp qword [ebp - 0x20]
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 0x10]
push eax
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 4]
add eax, edx
push eax
fld qword [ebp - 0x20]
fmul qword [ebp - 0x18]
sub esp, 8
fstp qword [esp]
call fcn.0046aab0
add esp, 0x14
jmp 0x461904
push esi
call fcn.004874e0
pop ecx
and eax, 4
je 0x46182d
push 0
push 2
push 0
push str.__OPMULT
push edi
push esi
call fcn.004689e0
add esp, 0x18
lea eax, [ebx + 0x10]
push eax
call fcn.004a4430
pop ecx
jmp 0x461904
push edi
push esi
push 2
push 0x696e1c
push 0
push 0x43b
push 1
call fcn.00492ab0
add esp, 0x1c
mov dword [ebp - 4], eax
test eax, eax
je 0x461904
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov eax, dword [eax]
and eax, 0xf405
je 0x461870
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
push eax
call fcn.004a45e0
pop ecx
jmp 0x46187c
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov dword [eax], 0
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx - 4]
mov dword [eax], edx
mov eax, edx
mov edx, dword [ebx]
cmp eax, edx
jae 0x4618a1
push 0
push 0
push 0
push 0x233b
call fcn.00492ef0
add esp, 0x10
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov eax, dword [eax]
and eax, 0xf405
je 0x4618bf
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
push eax
call fcn.004a45e0
pop ecx
jmp 0x4618cb
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov dword [eax], 0
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx - 4]
mov dword [eax], edx
mov eax, edx
mov edx, dword [ebx]
cmp eax, edx
jae 0x4618f0
push 0
push 0
push 0
push 0x233b
call fcn.00492ef0
add esp, 0x10
mov eax, dword [ebp - 4]
push eax
call fcn.004a4430
pop ecx
mov eax, dword [ebp - 4]
push eax
call fcn.0049f7d0
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x462170
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
push ebx
push esi
push edi
mov eax, dword [0x7d8230]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
mov eax, dword [ebx + 4]
mov esi, dword [eax - 8]
mov eax, dword [ebx + 4]
mov edi, dword [eax - 4]
mov eax, dword [esi]
mov edx, eax
and edx, 0x3a
jne 0x4621af
and eax, 0x400
je 0x462216
mov eax, dword [esi + 8]
cmp eax, 1
jne 0x462216
mov eax, dword [edi]
mov edx, eax
and edx, 0x3a
jne 0x4621c7
and eax, 0x400
je 0x462216
mov eax, dword [edi + 8]
cmp eax, 1
jne 0x462216
call fcn.0046bde0
fst qword [ebp - 0x18]
fstp qword [ebp - 8]
call fcn.0046bde0
fst qword [ebp - 0x20]
fstp qword [ebp - 0x10]
fld qword [ebp - 8]
sub esp, 8
fstp qword [esp]
fld qword [ebp - 0x10]
sub esp, 8
fstp qword [esp]
call fcn.005340d0
add esp, 0x10
fstp qword [ebp - 0x28]
mov eax, dword [0x7d7f4c]
push eax
fld qword [ebp - 0x28]
sub esp, 8
fstp qword [esp]
call fcn.0046af40
add esp, 0xc
jmp 0x46231d
push esi
call fcn.004874e0
pop ecx
and eax, 0x20
je 0x462246
push 0
push 2
push 0
push str.__OPPOWER
push edi
push esi
call fcn.004689e0
add esp, 0x18
lea eax, [ebx + 0x10]
push eax
call fcn.004a4430
pop ecx
jmp 0x46231d
push edi
push esi
push 2
push 0x696dec
push 0
push 0x440
push 1
call fcn.00492ab0
add esp, 0x1c
mov dword [ebp - 4], eax
test eax, eax
je 0x46231d
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov eax, dword [eax]
and eax, 0xf405
je 0x462289
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
push eax
call fcn.004a45e0
pop ecx
jmp 0x462295
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov dword [eax], 0
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx - 4]
mov dword [eax], edx
mov eax, edx
mov edx, dword [ebx]
cmp eax, edx
jae 0x4622ba
push 0
push 0
push 0
push 0x233b
call fcn.00492ef0
add esp, 0x10
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov eax, dword [eax]
and eax, 0xf405
je 0x4622d8
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
push eax
call fcn.004a45e0
pop ecx
jmp 0x4622e4
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov dword [eax], 0
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx - 4]
mov dword [eax], edx
mov eax, edx
mov edx, dword [ebx]
cmp eax, edx
jae 0x462309
push 0
push 0
push 0
push 0x233b
call fcn.00492ef0
add esp, 0x10
mov eax, dword [ebp - 4]
push eax
call fcn.004a4430
pop ecx
mov eax, dword [ebp - 4]
push eax
call fcn.0049f7d0
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x462850
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
mov eax, dword [0x7d8230]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, eax
mov eax, dword [esi + 4]
mov ebx, dword [eax - 4]
mov eax, dword [ebx]
and eax, 0x100
je 0x462887
mov eax, dword [ebx + 0x14]
mov dword [ebx + 8], eax
mov dword [ebx + 0xc], 0
mov dword [ebx], 1
jmp 0x46289d
push 0
push str.hb_vmFuncPtr__
push 0
push 0x2337
call fcn.00492ef0
add esp, 0x10
pop esi
pop ebx
pop ebp
ret
Function at 0x465600
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 4
push ebx
push esi
push edi
mov eax, dword [0x7d8230]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
mov eax, dword [ebx + 4]
mov esi, dword [eax - 4]
mov eax, dword [esi]
and eax, 0x80
je 0x46563e
lea eax, [esi + 8]
cmp dword [eax], 0
jne 0x465635
mov edi, 1
jmp 0x465637
xor edi, edi
mov dword [eax], edi
jmp 0x4656e3
push esi
call fcn.004874e0
pop ecx
and eax, 0x20000
je 0x465660
push esi
push str.__OPNOT
push esi
call fcn.00468ac0
add esp, 0xc
jmp 0x4656e3
push esi
push 1
push 0x696d24
push 0
push 0x435
push 1
call fcn.00492ab0
add esp, 0x18
mov dword [ebp - 4], eax
test eax, eax
je 0x4656e3
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov eax, dword [eax]
and eax, 0xf405
je 0x46569e
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
push eax
call fcn.004a45e0
pop ecx
jmp 0x4656aa
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov dword [eax], 0
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx - 4]
mov dword [eax], edx
mov eax, edx
mov edx, dword [ebx]
cmp eax, edx
jae 0x4656cf
push 0
push 0
push 0
push 0x233b
call fcn.00492ef0
add esp, 0x10
mov eax, dword [ebp - 4]
push eax
call fcn.004a4430
pop ecx
mov eax, dword [ebp - 4]
push eax
call fcn.0049f7d0
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x4656f0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 4
push ebx
push esi
push edi
mov eax, dword [0x7d8230]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
mov eax, dword [ebx + 4]
mov edi, dword [eax - 4]
mov eax, dword [ebx + 4]
mov esi, dword [eax - 8]
mov eax, dword [esi]
and eax, 0x80
je 0x46577b
mov eax, dword [edi]
and eax, 0x80
je 0x46577b
cmp dword [esi + 8], 0
je 0x46573a
cmp dword [edi + 8], 0
je 0x46573a
mov dword [ebp - 4], 1
jmp 0x465741
mov dword [ebp - 4], 0
mov eax, dword [ebp - 4]
mov dword [esi + 8], eax
mov dword [edi], 0
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx - 4]
mov dword [eax], edx
mov eax, edx
mov edx, dword [ebx]
cmp eax, edx
jae 0x465884
push 0
push 0
push 0
push 0x233b
call fcn.00492ef0
add esp, 0x10
jmp 0x465884
push esi
call fcn.004874e0
pop ecx
and eax, 0x40000
je 0x4657ad
push 0
push 2
push 0
push str.__OPAND
push edi
push esi
call fcn.004689e0
add esp, 0x18
lea eax, [ebx + 0x10]
push eax
call fcn.004a4430
pop ecx
jmp 0x465884
push edi
push esi
push 2
push 0x696d16
push 0
push 0x436
push 1
call fcn.00492ab0
add esp, 0x1c
mov dword [ebp - 4], eax
test eax, eax
je 0x465884
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov eax, dword [eax]
and eax, 0xf405
je 0x4657f0
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
push eax
call fcn.004a45e0
pop ecx
jmp 0x4657fc
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov dword [eax], 0
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx - 4]
mov dword [eax], edx
mov eax, edx
mov edx, dword [ebx]
cmp eax, edx
jae 0x465821
push 0
push 0
push 0
push 0x233b
call fcn.00492ef0
add esp, 0x10
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov eax, dword [eax]
and eax, 0xf405
je 0x46583f
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
push eax
call fcn.004a45e0
pop ecx
jmp 0x46584b
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov dword [eax], 0
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx - 4]
mov dword [eax], edx
mov eax, edx
mov edx, dword [ebx]
cmp eax, edx
jae 0x465870
push 0
push 0
push 0
push 0x233b
call fcn.00492ef0
add esp, 0x10
mov eax, dword [ebp - 4]
push eax
call fcn.004a4430
pop ecx
mov eax, dword [ebp - 4]
push eax
call fcn.0049f7d0
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x465890
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 4
push ebx
push esi
push edi
mov eax, dword [0x7d8230]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
mov eax, dword [ebx + 4]
mov edi, dword [eax - 4]
mov eax, dword [ebx + 4]
mov esi, dword [eax - 8]
mov eax, dword [esi]
and eax, 0x80
je 0x46591b
mov eax, dword [edi]
and eax, 0x80
je 0x46591b
cmp dword [esi + 8], 0
jne 0x4658d1
cmp dword [edi + 8], 0
je 0x4658da
mov dword [ebp - 4], 1
jmp 0x4658e1
mov dword [ebp - 4], 0
mov eax, dword [ebp - 4]
mov dword [esi + 8], eax
mov dword [edi], 0
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx - 4]
mov dword [eax], edx
mov eax, edx
mov edx, dword [ebx]
cmp eax, edx
jae 0x465a24
push 0
push 0
push 0
push 0x233b
call fcn.00492ef0
add esp, 0x10
jmp 0x465a24
push esi
call fcn.004874e0
pop ecx
and eax, 0x80000
je 0x46594d
push 0
push 2
push 0
push str.__OPOR
push edi
push esi
call fcn.004689e0
add esp, 0x18
lea eax, [ebx + 0x10]
push eax
call fcn.004a4430
pop ecx
jmp 0x465a24
push edi
push esi
push 2
push 0x696d0a
push 0
push 0x437
push 1
call fcn.00492ab0
add esp, 0x1c
mov dword [ebp - 4], eax
test eax, eax
je 0x465a24
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov eax, dword [eax]
and eax, 0xf405
je 0x465990
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
push eax
call fcn.004a45e0
pop ecx
jmp 0x46599c
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov dword [eax], 0
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx - 4]
mov dword [eax], edx
mov eax, edx
mov edx, dword [ebx]
cmp eax, edx
jae 0x4659c1
push 0
push 0
push 0
push 0x233b
call fcn.00492ef0
add esp, 0x10
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov eax, dword [eax]
and eax, 0xf405
je 0x4659df
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
push eax
call fcn.004a45e0
pop ecx
jmp 0x4659eb
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov dword [eax], 0
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx - 4]
mov dword [eax], edx
mov eax, edx
mov edx, dword [ebx]
cmp eax, edx
jae 0x465a10
push 0
push 0
push 0
push 0x233b
call fcn.00492ef0
add esp, 0x10
mov eax, dword [ebp - 4]
push eax
call fcn.004a4430
pop ecx
mov eax, dword [ebp - 4]
push eax
call fcn.0049f7d0
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x466c90
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x7d8230]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
mov eax, dword [ebx + 4]
mov eax, dword [eax - 8]
mov dword [ebp - 4], eax
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
mov edx, dword [eax]
mov ecx, edx
and ecx, 0x3a
jne 0x466cdd
and edx, 0x400
je 0x466d94
mov eax, dword [eax + 8]
cmp eax, 1
jne 0x466d94
mov eax, dword [ebp - 8]
mov edx, dword [eax]
mov ecx, edx
and ecx, 0x3a
jne 0x466d01
and edx, 0x400
je 0x466d94
mov eax, dword [eax + 8]
cmp eax, 1
jne 0x466d94
mov eax, dword [ebp - 4]
push eax
call fcn.004a1a80
pop ecx
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], edx
mov ecx, dword [ebp - 8]
push ecx
call fcn.0049ff30
pop ecx
push dword [ebp - 0xc]
mov esi, dword [ebp - 0x10]
pop edi
push dword [ebp - 0xc]
push dword [ebp - 0x10]
push eax
call fcn.00533bc0
push edx
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.004a19b0
add esp, 0xc
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov eax, dword [eax]
and eax, 0xf405
je 0x466d5a
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
push eax
call fcn.004a45e0
pop ecx
jmp 0x466d66
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov dword [eax], 0
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx - 4]
mov dword [eax], edx
mov eax, edx
mov edx, dword [ebx]
cmp eax, edx
jae 0x466e71
push 0
push 0
push 0
push 0x233b
call fcn.00492ef0
add esp, 0x10
jmp 0x466e71
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp - 4]
push eax
push 2
push 0x696d00
push 0
push 0x641
push 1
call fcn.00492ab0
add esp, 0x1c
mov dword [ebp - 0xc], eax
test eax, eax
je 0x466e71
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov eax, dword [eax]
and eax, 0xf405
je 0x466ddd
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
push eax
call fcn.004a45e0
pop ecx
jmp 0x466de9
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov dword [eax], 0
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx - 4]
mov dword [eax], edx
mov eax, edx
mov edx, dword [ebx]
cmp eax, edx
jae 0x466e0e
push 0
push 0
push 0
push 0x233b
call fcn.00492ef0
add esp, 0x10
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov eax, dword [eax]
and eax, 0xf405
je 0x466e2c
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
push eax
call fcn.004a45e0
pop ecx
jmp 0x466e38
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov dword [eax], 0
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx - 4]
mov dword [eax], edx
mov eax, edx
mov edx, dword [ebx]
cmp eax, edx
jae 0x466e5d
push 0
push 0
push 0
push 0x233b
call fcn.00492ef0
add esp, 0x10
mov eax, dword [ebp - 0xc]
push eax
call fcn.004a4430
pop ecx
mov eax, dword [ebp - 0xc]
push eax
call fcn.0049f7d0
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x466e80
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x7d8230]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
mov eax, dword [ebx + 4]
mov eax, dword [eax - 8]
mov dword [ebp - 4], eax
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
mov edx, dword [eax]
mov ecx, edx
and ecx, 0x3a
jne 0x466ecd
and edx, 0x400
je 0x466f84
mov eax, dword [eax + 8]
cmp eax, 1
jne 0x466f84
mov eax, dword [ebp - 8]
mov edx, dword [eax]
mov ecx, edx
and ecx, 0x3a
jne 0x466ef1
and edx, 0x400
je 0x466f84
mov eax, dword [eax + 8]
cmp eax, 1
jne 0x466f84
mov eax, dword [ebp - 4]
push eax
call fcn.004a1a80
pop ecx
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], edx
mov ecx, dword [ebp - 8]
push ecx
call fcn.0049ff30
pop ecx
push dword [ebp - 0xc]
mov esi, dword [ebp - 0x10]
pop edi
push dword [ebp - 0xc]
push dword [ebp - 0x10]
push eax
call fcn.00534710
push edx
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.004a19b0
add esp, 0xc
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov eax, dword [eax]
and eax, 0xf405
je 0x466f4a
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
push eax
call fcn.004a45e0
pop ecx
jmp 0x466f56
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov dword [eax], 0
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx - 4]
mov dword [eax], edx
mov eax, edx
mov edx, dword [ebx]
cmp eax, edx
jae 0x467061
push 0
push 0
push 0
push 0x233b
call fcn.00492ef0
add esp, 0x10
jmp 0x467061
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp - 4]
push eax
push 2
push 0x696cfd
push 0
push 0x641
push 1
call fcn.00492ab0
add esp, 0x1c
mov dword [ebp - 0xc], eax
test eax, eax
je 0x467061
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov eax, dword [eax]
and eax, 0xf405
je 0x466fcd
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
push eax
call fcn.004a45e0
pop ecx
jmp 0x466fd9
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov dword [eax], 0
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx - 4]
mov dword [eax], edx
mov eax, edx
mov edx, dword [ebx]
cmp eax, edx
jae 0x466ffe
push 0
push 0
push 0
push 0x233b
call fcn.00492ef0
add esp, 0x10
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov eax, dword [eax]
and eax, 0xf405
je 0x46701c
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
push eax
call fcn.004a45e0
pop ecx
jmp 0x467028
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov dword [eax], 0
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx - 4]
mov dword [eax], edx
mov eax, edx
mov edx, dword [ebx]
cmp eax, edx
jae 0x46704d
push 0
push 0
push 0
push 0x233b
call fcn.00492ef0
add esp, 0x10
mov eax, dword [ebp - 0xc]
push eax
call fcn.004a4430
pop ecx
mov eax, dword [ebp - 0xc]
push eax
call fcn.0049f7d0
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x468560
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
push ebx
push esi
push edi
mov eax, dword [0x7d8230]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
lea edi, [ebp - 0x20]
lea esi, [0x6967b4]
mov ecx, 8
rep movsd dword es:[edi], dword [esi]
movzx eax, word [ebp + 8]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00468920
add esp, 8
jmp 0x4685e9
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov eax, dword [eax]
and eax, 0xf405
je 0x4685b8
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
push eax
call fcn.004a45e0
pop ecx
jmp 0x4685c4
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov dword [eax], 0
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx - 4]
mov dword [eax], edx
mov eax, edx
mov edx, dword [ebx]
cmp eax, edx
jae 0x4685e9
push 0
push 0
push 0
push 0x233b
call fcn.00492ef0
add esp, 0x10
movzx eax, word [ebp + 8]
lea edx, [eax - 1]
mov word [ebp + 8], dx
test eax, eax
jne 0x46859a
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebx + 4]
mov eax, dword [eax]
push eax
call fcn.004a44a0
add esp, 8
mov eax, dword [ebx + 8]
dec eax
mov dword [ebp - 0x28], eax
mov edx, dword [ebx + 4]
mov ecx, dword [ebx]
sub edx, ecx
mov dword [ebp - 0x24], edx
mov eax, edx
cdq
and edx, 3
add eax, edx
sar eax, 2
mov ecx, dword [ebp - 0x28]
cmp ecx, eax
jg 0x468632
call fcn.004a8c60
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx + 4]
mov dword [eax], edx
mov eax, dword [edx]
mov dword [eax], 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x468650
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x30
push ebx
push esi
push edi
mov eax, dword [0x7d8230]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
lea edi, [ebp - 0x28]
lea esi, [0x6967d4]
mov ecx, 8
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.004a2750
add esp, 8
mov dword [ebp - 4], 0
jmp 0x4686c3
mov eax, dword [ebp - 4]
sub eax, dword [ebp + 8]
mov edx, dword [ebx + 4]
mov eax, dword [edx + eax*4]
mov dword [ebp - 8], eax
and dword [eax], 0xfffff7ff
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp - 4]
shl eax, 5
mov edx, dword [ebp - 0x20]
mov edx, dword [edx]
add eax, edx
push eax
call fcn.004a44a0
add esp, 8
add dword [ebp - 4], 1
mov eax, dword [ebp + 8]
cmp dword [ebp - 4], eax
jb 0x468690
mov dword [ebp - 4], 1
jmp 0x468727
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov eax, dword [eax]
and eax, 0xf405
je 0x4686f2
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
push eax
call fcn.004a45e0
pop ecx
jmp 0x4686fe
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov dword [eax], 0
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx - 4]
mov dword [eax], edx
mov eax, edx
mov edx, dword [ebx]
cmp eax, edx
jae 0x468723
push 0
push 0
push 0
push 0x233b
call fcn.00492ef0
add esp, 0x10
add dword [ebp - 4], 1
mov eax, dword [ebp + 8]
cmp dword [ebp - 4], eax
jb 0x4686d4
mov eax, dword [ebp + 8]
test eax, eax
je 0x46874b
lea eax, [ebp - 0x28]
push eax
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
push eax
call fcn.004a44a0
add esp, 8
jmp 0x468797
lea eax, [ebp - 0x28]
push eax
mov eax, dword [ebx + 4]
mov eax, dword [eax]
push eax
call fcn.004a44a0
add esp, 8
mov eax, dword [ebx + 8]
dec eax
mov dword [ebp - 0x30], eax
mov edx, dword [ebx + 4]
mov ecx, dword [ebx]
sub edx, ecx
mov dword [ebp - 0x2c], edx
mov eax, edx
cdq
and edx, 3
add eax, edx
sar eax, 2
mov ecx, dword [ebp - 0x30]
cmp ecx, eax
jg 0x468785
call fcn.004a8c60
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx + 4]
mov dword [eax], edx
mov eax, dword [edx]
mov dword [eax], 0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret