joyce8/EMBER2024-capa huggingface dataset:
Function at 0x1019b69d
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push esi
push edi
push dword [0x1065a1cc]
xor esi, esi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019b6bc
mov edi, dword [eax + 0x74]
jmp 0x1019b6be
mov edi, esi
test edi, edi
jne 0x1019b6d2
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019b7a8
push edi
push esi
push 1
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], esi
call fcn.101f90a3
test eax, eax
jne 0x1019b6f5
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019b7a0
push ebx
mov ebx, dword [ebp + 8]
push ebx
call fcn.1019b455
mov dword [ebp - 4], eax
test eax, eax
jne 0x1019b710
push 0x80070057
jmp 0x1019b799
cmp edi, dword [eax + 8]
je 0x1019b71c
push 0x8004001e
jmp 0x1019b799
push dword [ebp + 0x10]
call fcn.1019b455
mov dword [ebp + 8], eax
test eax, eax
je 0x1019b706
cmp edi, dword [eax + 8]
jne 0x1019b715
cmp dword [ebp + 0xc], 1
jge 0x1019b73b
cmp dword [ebp + 0xc], esi
jg 0x1019b79f
cmp dword [ebp + 0xc], esi
jl 0x1019b79f
cmp dword [edi + 0x10], esi
je 0x1019b783
test ebx, ebx
je 0x1019b757
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x1019b759
mov ebx, esi
test ebx, ebx
je 0x1019b779
mov ecx, ebx
call fcn.1019b4c2
test eax, eax
je 0x1019b780
mov ecx, ebx
call fcn.1019b4c2
mov eax, dword [eax + 0x54]
shr eax, 5
test al, 1
je 0x1019b780
push 0x8004001f
jmp 0x1019b799
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 4]
push eax
push dword [ebp + 0xc]
call fcn.101fa13e
test eax, eax
js 0x1019b798
xor esi, esi
inc esi
jmp 0x1019b79f
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
pop ebx
lea ecx, [ebp - 0x10]
call fcn.101f8f0d
pop edi
mov eax, esi
pop esi
mov esp, ebp
pop ebp
ret 0xc

Function at 0x1019b7b2
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
push dword [0x1065a1cc]
xor esi, esi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019b7d1
mov ebx, dword [eax + 0x74]
jmp 0x1019b7d3
mov ebx, esi
test ebx, ebx
jne 0x1019b7e4
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019b84c
push ebx
push esi
push esi
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], esi
call fcn.101f90a3
test eax, eax
jne 0x1019b803
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019b844
push edi
mov edi, dword [ebp + 8]
test edi, edi
je 0x1019b819
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x1019b81b
mov edi, esi
test edi, edi
jne 0x1019b826
push 0x80070057
jmp 0x1019b830
cmp ebx, dword [edi + 8]
je 0x1019b838
push 0x8004001e
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019b843
push dword [ebp + 0xc]
push edi
call fcn.101fceaf
mov esi, eax
pop edi
lea ecx, [ebp - 0xc]
call fcn.101f8f0d
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x1019bce0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
test edi, edi
je 0x1019bd82
mov esi, dword [edi + 8]
test esi, esi
je 0x1019bd82
cmp dword [edi + 4], 0x8000
jl 0x1019bd82
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
mov ebx, eax
mov ecx, ebx
shr ecx, 1
test cl, 1
je 0x1019bd82
push dword [0x1065a1cc]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019bd2c
mov ecx, dword [eax + 0x74]
jmp 0x1019bd2e
xor ecx, ecx
cmp byte [ecx + 0x17], 0
mov edx, dword [esi + 8]
jne 0x1019bd82
cmp byte [edx + 0x17], 0
jne 0x1019bd82
cmp ecx, edx
jne 0x1019bd68
test byte [ebp + 0xc], 1
lea ecx, [esi + 0xc]
je 0x1019bd5d
shr ebx, 2
test bl, 1
je 0x1019bd5d
push 0
push edi
push esi
call fcn.101f9eea
jmp 0x1019bd87
push 0
push edi
push esi
call fcn.101f9d91
jmp 0x1019bd87
push dword [ebp + 0xc]
mov edx, dword [edx + 0x18]
mov ecx, dword [ecx + 0x18]
push esi
push edi
lea eax, [edx + 0x80]
push eax
push edx
call fcn.101af680
jmp 0x1019bd87
mov eax, 0x80070057
pop edi
pop esi
pop ebx
pop ebp
ret 8

Function at 0x1019be2d
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push edi
push dword [0x1065a1cc]
xor edi, edi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019be4c
mov ebx, dword [eax + 0x74]
jmp 0x1019be4e
mov ebx, edi
test ebx, ebx
jne 0x1019be5f
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019bed9
push ebx
push edi
push 1
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], edi
call fcn.101f90a3
test eax, eax
jne 0x1019be7f
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019bed1
push esi
mov esi, dword [ebp + 8]
test esi, esi
je 0x1019be95
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x1019be97
mov esi, edi
test esi, esi
je 0x1019beb2
cmp ebx, dword [esi + 8]
je 0x1019bea7
push 0x8004001e
jmp 0x1019beb7
mov eax, dword [ebp + 0x14]
and eax, 7
cmp eax, dword [ebp + 0x14]
je 0x1019bebf
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019bed0
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push esi
call fcn.101fdfee
mov edi, eax
pop esi
lea ecx, [ebp - 0xc]
call fcn.101f8f0d
mov eax, edi
pop edi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
Function at 0x1019bee3
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
push dword [0x1065a1cc]
xor esi, esi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019bf02
mov ebx, dword [eax + 0x74]
jmp 0x1019bf04
mov ebx, esi
test ebx, ebx
jne 0x1019bf15
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019bf94
push ebx
push esi
push esi
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], esi
call fcn.101f90a3
test eax, eax
jne 0x1019bf34
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019bf8c
mov eax, dword [ebp + 0x14]
and eax, 0x1fffff
cmp eax, dword [ebp + 0x14]
jne 0x1019bf27
push edi
mov edi, dword [ebp + 8]
test edi, edi
je 0x1019bf57
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x1019bf59
mov edi, esi
test edi, edi
jne 0x1019bf64
push 0x80070057
jmp 0x1019bf6e
cmp ebx, dword [edi + 8]
je 0x1019bf76
push 0x8004001e
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019bf8b
push dword [ebp + 0x18]
mov ecx, edi
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
call fcn.101fb5a5
mov esi, eax
pop edi
lea ecx, [ebp - 0xc]
call fcn.101f8f0d
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x14

Function at 0x1019bf9e
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push edi
push dword [0x1065a1cc]
xor edi, edi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019bfbd
mov ebx, dword [eax + 0x74]
jmp 0x1019bfbf
mov ebx, edi
test ebx, ebx
jne 0x1019bfd3
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019c068
push ebx
push edi
push 1
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], edi
call fcn.101f90a3
test eax, eax
jne 0x1019bff3
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019c060
push esi
mov esi, dword [ebp + 8]
test esi, esi
je 0x1019c009
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x1019c00b
mov esi, edi
test esi, esi
jne 0x1019c016
push 0x80070057
jmp 0x1019c048
cmp ebx, dword [esi + 8]
je 0x1019c022
push 0x8004001e
jmp 0x1019c048
cmp dword [ebx + 0x10], edi
je 0x1019c050
mov ecx, esi
call fcn.1019b4c2
test eax, eax
je 0x1019c050
mov ecx, esi
call fcn.1019b4c2
mov eax, dword [eax + 0x54]
shr eax, 5
test al, 1
je 0x1019c050
push 0x8004001f
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019c05f
push dword [ebp + 0xc]
lea ecx, [esi + 0xc]
push esi
call fcn.1019b63d
xor edi, edi
inc edi
pop esi
lea ecx, [ebp - 0xc]
call fcn.101f8f0d
mov eax, edi
pop edi
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x1019c072
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
push dword [0x1065a1cc]
xor ebx, ebx
mov dword [ebp - 0x10], ebx
mov esi, ebx
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019c099
mov eax, dword [eax + 0x74]
mov dword [ebp - 4], eax
jmp 0x1019c09e
mov eax, ebx
mov dword [ebp - 4], ebx
test eax, eax
jne 0x1019c0c1
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
xor ecx, ecx
call fcn.1019b687
lea ecx, [ebp - 0x10]
call fcn.101f8f0d
jmp 0x1019c16f
push edi
mov edi, dword [ebp + 8]
test edi, edi
je 0x1019c0d7
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x1019c0d9
mov edi, ebx
test edi, edi
je 0x1019c154
mov eax, dword [ebp - 4]
cmp eax, dword [edi + 8]
je 0x1019c0ec
push 0x8004001e
jmp 0x1019c159
mov ecx, edi
call fcn.1019b4c2
push dword [ebp - 4]
lea ecx, [ebp - 0x10]
mov eax, dword [eax + 0x50]
push eax
push 1
call fcn.101f90a3
test eax, eax
je 0x1019c154
lock inc dword [edi + 4]
mov esi, edi
cmp dword [ebp + 0x18], ebx
je 0x1019c154
mov eax, dword [ebp - 4]
cmp dword [eax + 0x10], ebx
je 0x1019c13e
mov ecx, edi
call fcn.1019b4c2
test eax, eax
je 0x1019c13e
mov ecx, edi
call fcn.1019b4c2
mov eax, dword [eax + 0x54]
shr eax, 5
test al, 1
je 0x1019c13e
push 0x8004001f
jmp 0x1019c159
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push edi
call fcn.101ff3ed
mov ebx, eax
jmp 0x1019c15f
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov ecx, esi
call fcn.1019b687
lea ecx, [ebp - 0x10]
call fcn.101f8f0d
pop edi
pop esi
mov eax, ebx
pop ebx
mov esp, ebp
pop ebp
ret 0x14

Function at 0x1019c179
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
push dword [0x1065a1cc]
xor esi, esi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019c198
mov ebx, dword [eax + 0x74]
jmp 0x1019c19a
mov ebx, esi
test ebx, ebx
jne 0x1019c1ab
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019c21a
push ebx
push esi
push esi
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], esi
call fcn.101f90a3
test eax, eax
jne 0x1019c1ca
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019c212
push edi
mov edi, dword [ebp + 8]
test edi, edi
je 0x1019c1e0
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x1019c1e2
mov edi, esi
test edi, edi
je 0x1019c206
cmp ebx, dword [edi + 8]
je 0x1019c1f2
push 0x8004001e
jmp 0x1019c20b
cmp dword [ebp + 0xc], 5
ja 0x1019c206
push dword [ebp + 0xc]
mov ecx, edi
call fcn.101fa866
mov esi, eax
jmp 0x1019c211
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
pop edi
lea ecx, [ebp - 0xc]
call fcn.101f8f0d
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x1019c224
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push edi
push dword [0x1065a1cc]
xor edi, edi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019c243
mov ebx, dword [eax + 0x74]
jmp 0x1019c245
mov ebx, edi
test ebx, ebx
jne 0x1019c259
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019c2ec
push ebx
push edi
push edi
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], edi
call fcn.101f90a3
test eax, eax
jne 0x1019c278
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019c2e4
push esi
mov esi, dword [ebp + 8]
test esi, esi
je 0x1019c28e
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x1019c290
mov esi, edi
test esi, esi
je 0x1019c2d8
cmp ebx, dword [esi + 8]
je 0x1019c2a0
push 0x8004001e
jmp 0x1019c2dd
mov ecx, dword [ebp + 0xc]
test ecx, ecx
je 0x1019c2d8
cmp dword [ecx], 0x14
jne 0x1019c2d8
mov eax, dword [ecx + 4]
and eax, 7
cmp eax, dword [ecx + 4]
jne 0x1019c2d8
test byte [esi + 0x38], 8
jne 0x1019c2c4
push 0x8004003c
jmp 0x1019c2dd
push ecx
mov ecx, esi
call fcn.101fc6b9
test eax, eax
js 0x1019c2d5
xor edi, edi
inc edi
jmp 0x1019c2e3
push eax
jmp 0x1019c2dd
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
pop esi
lea ecx, [ebp - 0xc]
call fcn.101f8f0d
mov eax, edi
pop edi
pop ebx
mov esp, ebp
pop ebp
ret 8

Function at 0x1019c2f6
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
push dword [0x1065a1cc]
xor esi, esi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019c315
mov ebx, dword [eax + 0x74]
jmp 0x1019c317
mov ebx, esi
test ebx, ebx
jne 0x1019c328
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019c399
push ebx
push esi
push esi
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], esi
call fcn.101f90a3
test eax, eax
jne 0x1019c347
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019c391
push edi
mov edi, dword [ebp + 8]
test edi, edi
je 0x1019c35d
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x1019c35f
mov edi, esi
test edi, edi
jne 0x1019c36a
push 0x80070057
jmp 0x1019c38a
cmp ebx, dword [edi + 8]
je 0x1019c376
push 0x8004001e
jmp 0x1019c38a
push dword [ebp + 0xc]
mov ecx, edi
call fcn.101fc6e3
test eax, eax
js 0x1019c389
xor esi, esi
inc esi
jmp 0x1019c390
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
pop edi
lea ecx, [ebp - 0xc]
call fcn.101f8f0d
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x1019c3a3
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
push dword [0x1065a1cc]
xor esi, esi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019c3c2
mov ebx, dword [eax + 0x74]
jmp 0x1019c3c4
mov ebx, esi
test ebx, ebx
jne 0x1019c3d8
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019c461
push ebx
push esi
push esi
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], esi
call fcn.101f90a3
test eax, eax
jne 0x1019c3f7
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019c459
mov eax, dword [ebp + 0x10]
and eax, 0x11c
cmp eax, dword [ebp + 0x10]
jne 0x1019c3ea
push edi
mov edi, dword [ebp + 8]
test edi, edi
je 0x1019c41a
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x1019c41c
mov edi, esi
test edi, edi
je 0x1019c44d
cmp ebx, dword [edi + 8]
je 0x1019c42c
push 0x8004001e
jmp 0x1019c452
cmp dword [ebp + 0xc], esi
je 0x1019c44d
mov eax, dword [ebp + 0x10]
shr eax, 8
test al, 1
jne 0x1019c458
push dword [ebp + 0x10]
mov ecx, edi
push dword [ebp + 0xc]
call fcn.101fc7a2
xor esi, esi
inc esi
jmp 0x1019c458
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
pop edi
lea ecx, [ebp - 0xc]
call fcn.101f8f0d
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc

Function at 0x1019c53f
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
push dword [0x1065a1cc]
xor esi, esi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019c55e
mov ebx, dword [eax + 0x74]
jmp 0x1019c560
mov ebx, esi
test ebx, ebx
jne 0x1019c574
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019c636
push ebx
push esi
push 1
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], esi
call fcn.101f90a3
test eax, eax
jne 0x1019c597
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019c62e
push edi
mov edi, dword [ebp + 8]
test edi, edi
je 0x1019c5ad
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x1019c5af
mov edi, esi
test edi, edi
jne 0x1019c5ba
push 0x80070057
jmp 0x1019c5c4
cmp ebx, dword [edi + 8]
je 0x1019c5cc
push 0x8004001e
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019c62d
mov ecx, edi
call fcn.1019b4c2
mov ebx, eax
test ebx, ebx
je 0x1019c62d
call fcn.101fe06d
mov dword [ebp + 8], eax
mov ecx, esi
test eax, eax
je 0x1019c609
mov ecx, eax
call fcn.1019b4c2
mov ecx, eax
mov dword [ebp - 4], ecx
cmp ecx, ebx
jne 0x1019c606
push dword [ebp + 8]
mov ecx, edi
call fcn.101faa50
mov ecx, dword [ebp - 4]
mov esi, eax
mov eax, dword [ebp + 8]
cmp byte [ebp + 0xc], 0
je 0x1019c62d
test esi, esi
jne 0x1019c62d
test eax, eax
je 0x1019c61b
cmp ecx, ebx
je 0x1019c62d
cmp dword [ebx + 0x78], 0
je 0x1019c62d
push dword [ebx + 0x78]
mov ecx, edi
call fcn.101faa50
mov esi, eax
pop edi
lea ecx, [ebp - 0x10]
call fcn.101f8f0d
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x1019c6c9
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push edi
push dword [0x1065a1cc]
xor edi, edi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019c6e8
mov ebx, dword [eax + 0x74]
jmp 0x1019c6ea
mov ebx, edi
test ebx, ebx
jne 0x1019c6fe
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019c799
push ebx
push edi
push 1
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], edi
call fcn.101f90a3
test eax, eax
jne 0x1019c71e
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019c791
push esi
mov esi, dword [ebp + 8]
test esi, esi
je 0x1019c734
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x1019c736
mov esi, edi
test esi, esi
jne 0x1019c741
push 0x80070057
jmp 0x1019c773
cmp ebx, dword [esi + 8]
je 0x1019c74d
push 0x8004001e
jmp 0x1019c773
cmp dword [ebx + 0x10], edi
je 0x1019c77b
mov ecx, esi
call fcn.1019b4c2
test eax, eax
je 0x1019c77b
mov ecx, esi
call fcn.1019b4c2
mov eax, dword [eax + 0x54]
shr eax, 5
test al, 1
je 0x1019c77b
push 0x8004001f
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019c790
mov ecx, esi
call fcn.1019b4c2
mov ecx, dword [eax + 0x50]
test ecx, ecx
je 0x1019c790
call fcn.1028f2f7
mov edi, eax
pop esi
lea ecx, [ebp - 0xc]
call fcn.101f8f0d
mov eax, edi
pop edi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x1019c7a3
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
push dword [0x1065a1cc]
xor esi, esi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019c7c2
mov ebx, dword [eax + 0x74]
jmp 0x1019c7c4
mov ebx, esi
test ebx, ebx
jne 0x1019c7d8
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019c87a
push ebx
push esi
push esi
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], esi
call fcn.101f90a3
test eax, eax
jne 0x1019c7f7
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019c872
push edi
mov edi, dword [ebp + 8]
test edi, edi
je 0x1019c80d
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x1019c80f
mov edi, esi
test edi, edi
je 0x1019c866
cmp ebx, dword [edi + 8]
je 0x1019c81f
push 0x8004001e
jmp 0x1019c86b
cmp dword [ebp + 0x10], esi
je 0x1019c866
cmp dword [ebx + 0x10], esi
je 0x1019c84c
mov ecx, edi
call fcn.1019b4c2
test eax, eax
je 0x1019c84c
mov ecx, edi
call fcn.1019b4c2
mov eax, dword [eax + 0x54]
shr eax, 5
test al, 1
je 0x1019c84c
push 0x8004001f
jmp 0x1019c86b
push dword [ebp + 0x10]
lea ecx, [edi + 0x34]
push dword [ebp + 0xc]
call fcn.101f9554
test eax, eax
js 0x1019c863
xor esi, esi
inc esi
jmp 0x1019c871
push eax
jmp 0x1019c86b
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
pop edi
lea ecx, [ebp - 0xc]
call fcn.101f8f0d
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
Function at 0x1019c884
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
push dword [0x1065a1cc]
xor esi, esi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019c8a3
mov ebx, dword [eax + 0x74]
jmp 0x1019c8a5
mov ebx, esi
test ebx, ebx
jne 0x1019c8b9
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019c942
push ebx
push esi
push esi
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], esi
call fcn.101f90a3
test eax, eax
jne 0x1019c8d8
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019c93a
mov eax, dword [ebp + 0x10]
and eax, 0x11c
cmp eax, dword [ebp + 0x10]
jne 0x1019c8cb
push edi
mov edi, dword [ebp + 8]
test edi, edi
je 0x1019c8fb
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x1019c8fd
mov edi, esi
test edi, edi
je 0x1019c92e
cmp ebx, dword [edi + 8]
je 0x1019c90d
push 0x8004001e
jmp 0x1019c933
cmp dword [ebp + 0xc], esi
je 0x1019c92e
mov eax, dword [ebp + 0x10]
shr eax, 8
test al, 1
jne 0x1019c939
push dword [ebp + 0x10]
mov ecx, edi
push dword [ebp + 0xc]
call fcn.101fbbb3
xor esi, esi
inc esi
jmp 0x1019c939
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
pop edi
lea ecx, [ebp - 0xc]
call fcn.101f8f0d
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc

Function at 0x1019c94c
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
push dword [0x1065a1cc]
xor esi, esi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019c96b
mov ebx, dword [eax + 0x74]
jmp 0x1019c96d
mov ebx, esi
test ebx, ebx
jne 0x1019c97e
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019c9ed
push ebx
push esi
push esi
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], esi
call fcn.101f90a3
test eax, eax
jne 0x1019c99d
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019c9e5
push edi
mov edi, dword [ebp + 8]
test edi, edi
je 0x1019c9b3
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x1019c9b5
mov edi, esi
test edi, edi
je 0x1019c9d9
cmp ebx, dword [edi + 8]
je 0x1019c9c5
push 0x8004001e
jmp 0x1019c9de
cmp dword [ebp + 0xc], esi
je 0x1019c9d9
push dword [ebp + 0xc]
mov ecx, edi
call fcn.101fbd02
xor esi, esi
inc esi
jmp 0x1019c9e4
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
pop edi
lea ecx, [ebp - 0xc]
call fcn.101f8f0d
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
Function at 0x1019c9f7
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
push dword [0x1065a1cc]
xor esi, esi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019ca16
mov ebx, dword [eax + 0x74]
jmp 0x1019ca18
mov ebx, esi
test ebx, ebx
jne 0x1019ca29
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019ca8f
push ebx
push esi
push esi
lea ecx, [ebp - 0xc]
mov dword [ebp - 0xc], esi
call fcn.101f90a3
test eax, eax
jne 0x1019ca48
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019ca87
push edi
mov edi, dword [ebp + 8]
test edi, edi
je 0x1019ca5e
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x1019ca60
mov edi, esi
test edi, edi
jne 0x1019ca6b
push 0x80070057
jmp 0x1019ca75
cmp ebx, dword [edi + 8]
je 0x1019ca7d
push 0x8004001e
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019ca86
mov esi, dword [edi + 0x38]
and esi, 0x1fffff
pop edi
lea ecx, [ebp - 0xc]
call fcn.101f8f0d
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4

Function at 0x1019ca99
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
push dword [0x1065a1cc]
xor esi, esi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1019cab8
mov ebx, dword [eax + 0x74]
jmp 0x1019caba
mov ebx, esi
test ebx, ebx
jne 0x1019cacb
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019cb3d
push ebx
push esi
push esi
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], esi
call fcn.101f90a3
test eax, eax
jne 0x1019caea
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1019cb35
push edi
mov edi, dword [ebp + 8]
test edi, edi
je 0x1019cb00
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x1019cb02
mov edi, esi
test edi, edi
jne 0x1019cb0d
push 0x80070057
jmp 0x1019cb2e
cmp ebx, dword [edi + 8]
je 0x1019cb19
push 0x8004001e
jmp 0x1019cb2e
lea eax, [ebp - 4]
mov ecx, edi
push eax
call fcn.101fa904
test eax, eax
js 0x1019cb2d
mov esi, dword [ebp - 4]
jmp 0x1019cb34
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
pop edi
lea ecx, [ebp - 0x10]
call fcn.101f8f0d
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4