joyce8/EMBER2024-capa huggingface dataset:
Function at 0x555f70
Capabilities:
Get thread local storage value

Disassembly:
push esi
mov esi, ecx
call fcn.00555c30
mov eax, dword [esp + 8]
test al, 1
je 0x555fc2
test al, 4
jne 0x555fb7
movzx eax, word [esi + 4]
mov ecx, 0xffff
push edi
mov edi, 0x20
cmp ax, cx
je 0x555f9a
mov edi, eax
push dword [0x884adc]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
push edi
push esi
mov ecx, dword [eax + 0x2c]
mov eax, dword [ecx]
call dword [eax + 8]
pop edi
mov eax, esi
pop esi
ret 4
push 0x20
push esi
call fcn.0045b780
add esp, 8
mov eax, esi
pop esi
ret 4

Function at 0x556120
Capabilities:
Get thread local storage value

Disassembly:
push ecx
push ebx
mov ebx, ecx
push esi
mov eax, dword [ebx + 0x50]
mov dword [ebx], vtable.hkpBallGun.0
cmp dword [eax + 0x10], 0
je 0x55618b
push edi
mov edx, dword [ebx + 0x50]
mov ecx, dword [edx + 8]
mov eax, dword [edx]
mov edi, dword [eax + ecx*4]
inc ecx
xor eax, eax
cmp ecx, dword [edx + 4]
cmove ecx, eax
dec dword [edx + 0x10]
mov dword [edx + 8], ecx
mov esi, dword [ebx + 0x18]
sub esi, 1
js 0x556168
mov eax, dword [ebx + 0x14]
push edi
mov ecx, dword [eax + esi*4]
mov eax, dword [ecx]
call dword [eax + 0x10]
sub esi, 1
jns 0x556157
mov ecx, dword [edi + 8]
test ecx, ecx
je 0x55617a
push edi
lea eax, [esp + 0x13]
push eax
call fcn.0050a4e0
mov ecx, edi
call fcn.0045c160
mov eax, dword [ebx + 0x50]
cmp dword [eax + 0x10], 0
jne 0x556135
pop edi
mov esi, dword [ebx + 0x50]
test esi, esi
je 0x5561b0
mov ecx, esi
call fcn.00556530
push dword [0x884adc]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
push 0x14
push esi
mov ecx, dword [eax + 0x2c]
mov eax, dword [ecx]
call dword [eax + 8]
pop esi
mov ecx, ebx
pop ebx
add esp, 4
jmp fcn.00555c30
Function at 0x556560
Capabilities:
Get thread local storage value

Disassembly:
push esi
mov esi, ecx
call fcn.00556120
mov eax, dword [esp + 8]
test al, 1
je 0x5565b2
test al, 4
jne 0x5565a7
movzx eax, word [esi + 4]
mov ecx, 0xffff
push edi
mov edi, 0x60
cmp ax, cx
je 0x55658a
mov edi, eax
push dword [0x884adc]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
push edi
push esi
mov ecx, dword [eax + 0x2c]
mov eax, dword [ecx]
call dword [eax + 8]
pop edi
mov eax, esi
pop esi
ret 4
push 0x60
push esi
call fcn.0045b780
add esp, 8
mov eax, esi
pop esi
ret 4

Function at 0x5565c0
Capabilities:
Get thread local storage value

Disassembly:
push ebx
mov ebx, dword [esp + 8]
push edi
mov edi, ecx
mov eax, dword [edi + 4]
cmp eax, ebx
jge 0x556695
push ebp
add eax, eax
push esi
push dword [0x884adc]
cmp eax, ebx
cmovge ebx, eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ecx, dword [eax + 0x2c]
lea eax, [ebx*4]
push eax
mov edx, dword [ecx]
call dword [edx + 4]
mov esi, dword [edi]
mov ebp, eax
test esi, esi
je 0x556664
mov eax, dword [edi + 0x10]
test eax, eax
je 0x556657
mov edx, dword [edi + 0xc]
mov ecx, dword [edi + 8]
mov dword [esp + 0x14], edx
cmp edx, ecx
jg 0x556646
mov eax, dword [edi + 4]
sub eax, ecx
lea esi, [eax*4]
mov eax, dword [edi]
push esi
lea eax, [eax + ecx*4]
push eax
push ebp
call fcn.0045d810
mov eax, dword [esp + 0x20]
shl eax, 2
push eax
push dword [edi]
lea eax, [esi + ebp]
push eax
call fcn.0045d810
add esp, 0x18
jmp 0x556657
shl eax, 2
push eax
lea eax, [esi + ecx*4]
push eax
push ebp
call fcn.0045d810
add esp, 0xc
mov eax, dword [edi + 0x10]
mov dword [edi + 8], 0
mov dword [edi + 0xc], eax
mov eax, dword [edi + 4]
mov dword [esp + 0x14], eax
test eax, eax
je 0x55668e
push dword [0x884adc]
mov esi, dword [edi]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ecx, dword [eax + 0x2c]
mov eax, dword [esp + 0x14]
shl eax, 2
push eax
mov edx, dword [ecx]
push esi
call dword [edx + 8]
pop esi
mov dword [edi], ebp
mov dword [edi + 4], ebx
pop ebp
pop edi
pop ebx
ret 4

Function at 0x556f74
Capabilities:
Get thread local storage value

Disassembly:
mov eax, dword [esp + 4]
push esi
mov esi, ecx
mov dword [esi], vtable.hkpRayHitCollector.0
test al, 1
je 0x556fad
test al, 4
jne 0x556fa2
push dword [0x884adc]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
push 0x70
push esi
mov ecx, dword [eax + 0x2c]
mov eax, dword [ecx]
call dword [eax + 8]
mov eax, esi
pop esi
ret 4
push 0x70
push esi
call fcn.0045b780
add esp, 8
mov eax, esi
pop esi
ret 4
Function at 0x556fc0
Capabilities:
Get thread local storage value

Disassembly:
push esi
mov esi, ecx
mov eax, dword [esi + 0x28]
mov dword [esi + 0x24], 0
test eax, eax
js 0x556fea
and eax, 0x3fffffff
mov ecx, 0x7d8954
shl eax, 2
push eax
mov eax, dword [0x7d8954]
push dword [esi + 0x20]
call dword [eax + 0x10]
mov ecx, esi
mov dword [esi + 0x20], 0
mov dword [esi + 0x28], connect
call fcn.00555c30
mov eax, dword [esp + 8]
test al, 1
je 0x557049
test al, 4
jne 0x55703e
movzx eax, word [esi + 4]
mov ecx, 0xffff
push edi
mov edi, 0x60
cmp ax, cx
je 0x557021
mov edi, eax
push dword [0x884adc]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
push edi
push esi
mov ecx, dword [eax + 0x2c]
mov eax, dword [ecx]
call dword [eax + 8]
pop edi
mov eax, esi
pop esi
ret 4
push 0x60
push esi
call fcn.0045b780
add esp, 8
mov eax, esi
pop esi
ret 4
Function at 0x557380
Capabilities:
Get thread local storage value

Disassembly:
push esi
mov esi, ecx
call fcn.00556120
mov eax, dword [esp + 8]
test al, 1
je 0x5573d2
test al, 4
jne 0x5573c7
movzx eax, word [esi + 4]
mov ecx, 0xffff
push edi
mov edi, 0x70
cmp ax, cx
je 0x5573aa
mov edi, eax
push dword [0x884adc]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
push edi
push esi
mov ecx, dword [eax + 0x2c]
mov eax, dword [ecx]
call dword [eax + 8]
pop edi
mov eax, esi
pop esi
ret 4
push 0x70
push esi
call fcn.0045b780
add esp, 8
mov eax, esi
pop esi
ret 4

Function at 0x557ad0
Capabilities:
Get thread local storage value

Disassembly:
sub ecx, 8
jmp method.hkpGunProjectile.virtual_0
push esi
mov esi, ecx
call fcn.00557430
mov eax, dword [esp + 8]
test al, 1
je 0x557b22
test al, 4
jne 0x557b17
movzx eax, word [esi + 4]
mov ecx, 0xffff
push edi
mov edi, 0x1c
cmp ax, cx
je 0x557afa
mov edi, eax
push dword [0x884adc]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
push edi
push esi
mov ecx, dword [eax + 0x2c]
mov eax, dword [ecx]
call dword [eax + 8]
pop edi
mov eax, esi
pop esi
ret 4
push 0x1c
push esi
call fcn.0045b780
add esp, 8
mov eax, esi
pop esi
ret 4

Function at 0x557b30
Capabilities:
Get thread local storage value

Disassembly:
push esi
mov esi, ecx
call fcn.00557810
mov eax, dword [esp + 8]
test al, 1
je 0x557b82
test al, 4
jne 0x557b77
movzx eax, word [esi + 4]
mov ecx, 0xffff
push edi
mov edi, 0x40
cmp ax, cx
je 0x557b5a
mov edi, eax
push dword [0x884adc]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
push edi
push esi
mov ecx, dword [eax + 0x2c]
mov eax, dword [ecx]
call dword [eax + 8]
pop edi
mov eax, esi
pop esi
ret 4
push 0x40
push esi
call fcn.0045b780
add esp, 8
mov eax, esi
pop esi
ret 4
Function at 0x558f10
Capabilities:
Get thread local storage value

Disassembly:
push ebx
mov ebx, dword [esp + 8]
push ebp
push esi
push edi
mov esi, dword [ebx + 0xc]
mov ecx, esi
mov eax, dword [esi]
call dword [eax + 0x2c]
add eax, 0xfffffffe
cmp eax, 0x11
ja case.0x558f35.3
movzx eax, byte [eax + 0x5590e0]
jmp dword [eax*4 + 0x5590d0]
push dword [0x884adc]
mov ebp, dword [sym.imp.KERNEL32.dll_TlsGetValue]
call ebp
push 0xc0
mov ecx, dword [eax + 0x2c]
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, 0xc0
mov word [eax + 4], cx
mov ecx, eax
call fcn.0051b310
movaps xmm0, xmmword [esi + 0x20]
mov edi, eax
mov ecx, edi
movaps xmmword [edi + 0x20], xmm0
movaps xmm0, xmmword [esi + 0x30]
movaps xmmword [edi + 0x30], xmm0
movaps xmm0, xmmword [esi + 0x40]
movaps xmmword [edi + 0x40], xmm0
movaps xmm0, xmmword [esi + 0x60]
movaps xmmword [edi + 0x50], xmm0
movaps xmm0, xmmword [esi + 0x70]
movaps xmmword [edi + 0x60], xmm0
movaps xmm0, xmmword [esi + 0x80]
movaps xmmword [edi + 0x70], xmm0
movups xmm0, xmmword [esi + 0x10c]
movups xmmword [edi + 0x80], xmm0
mov eax, dword [esi + 0x11c]
mov dword [edi + 0x90], eax
movups xmm0, xmmword [esi + 0x134]
movups xmmword [edi + 0xa8], xmm0
mov eax, dword [esi + 0x144]
mov dword [edi + 0xb8], eax
movups xmm0, xmmword [esi + 0x120]
movups xmmword [edi + 0x94], xmm0
mov eax, dword [esi + 0x130]
mov dword [edi + 0xa4], eax
cmp byte [esi + 0x126], 0
setne byte [esp + 0x14]
push dword [esp + 0x14]
call fcn.0051b870
jmp 0x55907d
push dword [0x884adc]
mov ebp, dword [sym.imp.KERNEL32.dll_TlsGetValue]
call ebp
push 0xa0
mov ecx, dword [eax + 0x2c]
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, 0xa0
mov word [eax + 4], cx
mov ecx, eax
call fcn.0051aca0
movaps xmm0, xmmword [esi + 0x20]
mov edi, eax
movaps xmmword [edi + 0x20], xmm0
movaps xmm0, xmmword [esi + 0x30]
movaps xmmword [edi + 0x30], xmm0
movaps xmm0, xmmword [esi + 0x40]
movaps xmmword [edi + 0x40], xmm0
movaps xmm0, xmmword [esi + 0x60]
movaps xmmword [edi + 0x50], xmm0
movaps xmm0, xmmword [esi + 0x70]
movaps xmmword [edi + 0x60], xmm0
movaps xmm0, xmmword [esi + 0x80]
movaps xmmword [edi + 0x70], xmm0
movups xmm0, xmmword [esi + 0xd0]
movups xmmword [edi + 0x80], xmm0
mov eax, dword [esi + 0xe0]
mov dword [edi + 0x90], eax
push dword [0x884adc]
call ebp
push 0x38
mov ecx, dword [eax + 0x2c]
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, 0x38
mov word [eax + 4], cx
mov ecx, eax
movzx edx, byte [ebx + 0x1c]
push edx
push edi
push dword [ebx + 0x18]
push dword [ebx + 0x14]
call fcn.005061e0
mov ecx, edi
mov esi, eax
call fcn.0045c160
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
ret
mov ecx, ebx
call fcn.0045c0c0
pop edi
pop esi
pop ebp
mov eax, ebx
pop ebx
ret
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret
Function at 0x559c80
Capabilities:
Get thread local storage value

Disassembly:
sub esp, 0x24
push ebx
mov ebx, dword [esp + 0x30]
push esi
xor esi, esi
mov dword [esp + 0x28], connect
push edi
mov eax, dword [ebx + 0x2c]
mov dword [esp + 0x24], esi
mov dword [esp + 0x28], esi
test eax, eax
jle 0x559cd3
shl eax, 2
mov ecx, 0x7d8954
mov dword [esp + 0xc], eax
lea eax, [esp + 0xc]
push eax
mov eax, dword [0x7d8954]
call dword [eax + 0xc]
mov esi, eax
mov eax, dword [esp + 0xc]
cdq
and edx, 3
mov dword [esp + 0x24], esi
add eax, edx
sar eax, 2
mov dword [esp + 0x2c], eax
mov edx, dword [ebx + 0x2c]
xor ecx, ecx
mov edi, dword [ebx + 0x28]
mov dword [esp + 0x28], edx
test edx, edx
jle 0x559cf2
mov eax, dword [edi + ecx*4]
mov dword [esi + ecx*4], eax
inc ecx
cmp ecx, edx
jl 0x559ce3
mov edx, dword [esp + 0x28]
push dword [ebx + 0x38]
lea ecx, [esp + 0x28]
push dword [ebx + 0x34]
push edx
push 0x7d8954
call fcn.0055b430
xor ecx, ecx
mov dword [esp + 0x10], ecx
cmp dword [esp + 0x28], ecx
jle 0x559e14
mov edi, 0x140
push ebp
nop dword [eax]
mov eax, dword [esp + 0x28]
mov ecx, dword [eax + ecx*4]
lea eax, [ecx + 0x70]
mov dword [esp + 0x20], eax
lea eax, [ecx + 0x5c]
mov dword [esp + 0x24], eax
xor eax, eax
mov dword [esp + 0x10], eax
nop dword [eax + eax]
mov ecx, dword [esp + eax*4 + 0x20]
xor ebp, ebp
mov dword [esp + 0x1c], ecx
mov eax, dword [ecx + 8]
test eax, eax
jle 0x559dee
mov esi, dword [ecx + 4]
mov esi, dword [esi + ebp*4]
inc ebp
mov dword [esp + 0x18], ebp
cmp ebp, eax
jne 0x559d6b
movzx ebx, word [ecx]
add ebx, esi
jmp 0x559d71
lea ebx, [esi + 0x200]
cmp esi, ebx
jae 0x559de3
mov ebp, dword [esp + 0x3c]
nop dword [eax]
push dword [0x884adc]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
push 0x140
mov ecx, dword [eax + 0x2c]
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, eax
mov word [eax + 4], di
call fcn.0055b260
mov edi, eax
push edi
push dword [ebp + 0x78]
push esi
push dword [esp + 0x44]
call fcn.0055a120
add esp, 0x10
test eax, eax
jne 0x559dc5
mov ecx, dword [esp + 0x40]
push edi
call fcn.00554f10
mov ecx, edi
call fcn.0045c160
movzx eax, byte [esi + 3]
mov edi, 0x140
add esi, eax
cmp esi, ebx
jb 0x559d80
mov ebp, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx + 8]
cmp ebp, eax
jl 0x559d55
mov eax, dword [esp + 0x10]
inc eax
mov dword [esp + 0x10], eax
cmp eax, 2
jl 0x559d40
mov ecx, dword [esp + 0x14]
inc ecx
mov dword [esp + 0x14], ecx
cmp ecx, dword [esp + 0x2c]
jl 0x559d20
pop ebp
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x28], 0
pop edi
pop esi
pop ebx
test eax, eax
js 0x559e41
and eax, 0x3fffffff
mov ecx, 0x7d8954
shl eax, 2
push eax
mov eax, dword [0x7d8954]
push dword [esp + 0x1c]
call dword [eax + 0x10]
add esp, 0x24
ret
Function at 0x55b030
Capabilities:
Get thread local storage value

Disassembly:
push ebx
mov ebx, dword [esp + 8]
push ebp
mov ebp, dword [esp + 0x14]
push esi
mov esi, dword [ebx + 4]
push edi
mov ecx, dword [ebp + 8]
and ecx, 0x3fffffff
cmp ecx, esi
jge 0x55b066
add ecx, ecx
mov eax, esi
cmp esi, ecx
push 4
cmovl eax, ecx
push eax
push ebp
push 0x7d8954
call fcn.00467b80
add esp, 0x10
mov dword [ebp + 4], esi
cmp dword [ebx + 4], 0
mov dword [esp + 0x14], 0
jle 0x55b0cf
nop word [eax + eax]
push dword [0x884adc]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
push 0x200
mov ecx, dword [eax + 0x2c]
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, eax
test ecx, ecx
je 0x55b0a7
mov dword [ecx], 0
jmp 0x55b0a9
xor ecx, ecx
mov edx, dword [esp + 0x14]
mov eax, dword [ebp]
mov dword [eax + edx*4], ecx
mov ecx, 0x80
mov esi, dword [ebx]
mov edi, dword [ebp]
mov esi, dword [esi + edx*4]
mov edi, dword [edi + edx*4]
inc edx
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x14], edx
cmp edx, dword [ebx + 4]
jl 0x55b080
xor esi, esi
cmp dword [ebx + 0x10], esi
jle 0x55b131
mov edi, dword [esp + 0x18]
nop word [eax + eax]
mov eax, dword [ebx + 0xc]
mov edx, dword [eax + esi*4]
mov eax, dword [ebp]
mov ecx, dword [edx + 0x18]
mov ecx, dword [eax + ecx*4]
mov eax, dword [edx + 0x1c]
add eax, 0x10
add eax, ecx
je 0x55b11b
xorps xmm0, xmm0
movq qword [eax], xmm0
mov dword [eax + 8], 0
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 8], connect
push eax
push edi
push edx
call fcn.0055b030
add esp, 0xc
cmp eax, 1
je 0x55b138
inc esi
cmp esi, dword [ebx + 0x10]
jl 0x55b0e0
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
ret
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
ret

Function at 0x55d8c0
Capabilities:
Get thread local storage value

Disassembly:
push esi
mov esi, ecx
call fcn.0055d260
mov eax, dword [esp + 8]
test al, 1
je 0x55d912
test al, 4
jne 0x55d907
movzx eax, word [esi + 4]
mov ecx, 0xffff
push edi
mov edi, 0x28
cmp ax, cx
je 0x55d8ea
mov edi, eax
push dword [0x884adc]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
push edi
push esi
mov ecx, dword [eax + 0x2c]
mov eax, dword [ecx]
call dword [eax + 8]
pop edi
mov eax, esi
pop esi
ret 4
push 0x28
push esi
call fcn.0045b780
add esp, 8
mov eax, esi
pop esi
ret 4

Function at 0x55d920
Capabilities:
Get thread local storage value

Disassembly:
push esi
mov esi, ecx
call fcn.0055d350
mov eax, dword [esp + 8]
test al, 1
je 0x55d972
test al, 4
jne 0x55d967
movzx eax, word [esi + 4]
mov ecx, 0xffff
push edi
mov edi, 0x2c
cmp ax, cx
je 0x55d94a
mov edi, eax
push dword [0x884adc]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
push edi
push esi
mov ecx, dword [eax + 0x2c]
mov eax, dword [ecx]
call dword [eax + 8]
pop edi
mov eax, esi
pop esi
ret 4
push 0x2c
push esi
call fcn.0045b780
add esp, 8
mov eax, esi
pop esi
ret 4
Function at 0x55d980
Capabilities:
Get thread local storage value

Disassembly:
push esi
mov esi, ecx
call fcn.0055d3e0
mov eax, dword [esp + 8]
test al, 1
je 0x55d9d2
test al, 4
jne 0x55d9c7
movzx eax, word [esi + 4]
mov ecx, 0xffff
push edi
mov edi, 0x44
cmp ax, cx
je 0x55d9aa
mov edi, eax
push dword [0x884adc]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
push edi
push esi
mov ecx, dword [eax + 0x2c]
mov eax, dword [ecx]
call dword [eax + 8]
pop edi
mov eax, esi
pop esi
ret 4
push 0x44
push esi
call fcn.0045b780
add esp, 8
mov eax, esi
pop esi
ret 4

Function at 0x55d9e0
Capabilities:
Get thread local storage value

Disassembly:
push esi
mov esi, ecx
call fcn.00568e10
mov eax, dword [esp + 8]
test al, 1
je 0x55da32
test al, 4
jne 0x55da27
movzx eax, word [esi + 4]
mov ecx, 0xffff
push edi
mov edi, 0x14
cmp ax, cx
je 0x55da0a
mov edi, eax
push dword [0x884adc]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
push edi
push esi
mov ecx, dword [eax + 0x2c]
mov eax, dword [ecx]
call dword [eax + 8]
pop edi
mov eax, esi
pop esi
ret 4
push 0x14
push esi
call fcn.0045b780
add esp, 8
mov eax, esi
pop esi
ret 4

Function at 0x55da40
Capabilities:
Get thread local storage value

Disassembly:
push esi
mov esi, ecx
lea ecx, [esi + 0x54]
call fcn.0045d990
mov ecx, dword [esi + 0x50]
test ecx, ecx
je 0x55da57
call fcn.0045c160
lea ecx, [esi + 8]
mov dword [esi + 0x50], 0
call fcn.0045d990
mov eax, dword [esp + 8]
mov dword [esi], vtable.hkBaseObject.0
test al, 1
je 0x55dab6
test al, 4
jne 0x55daab
movzx eax, word [esi + 4]
mov ecx, 0xffff
push edi
mov edi, 0x60
cmp ax, cx
je 0x55da8e
mov edi, eax
push dword [0x884adc]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
push edi
push esi
mov ecx, dword [eax + 0x2c]
mov eax, dword [ecx]
call dword [eax + 8]
pop edi
mov eax, esi
pop esi
ret 4
push 0x60
push esi
call fcn.0045b780
add esp, 8
mov eax, esi
pop esi
ret 4

Function at 0x55dac0
Capabilities:
Get thread local storage value

Disassembly:
push esi
mov esi, ecx
mov eax, dword [esi + 0x3c]
mov dword [esi + 0x38], 0
test eax, eax
js 0x55daea
and eax, 0x3fffffff
mov ecx, 0x7d8954
shl eax, 4
push eax
mov eax, dword [0x7d8954]
push dword [esi + 0x34]
call dword [eax + 0x10]
mov eax, dword [esp + 8]
mov dword [esi + 0x34], 0
mov dword [esi + 0x3c], connect
mov dword [esi], vtable.hkBaseObject.0
test al, 1
je 0x55db48
test al, 4
jne 0x55db3d
movzx eax, word [esi + 4]
mov ecx, 0xffff
push edi
mov edi, 0x40
cmp ax, cx
je 0x55db20
mov edi, eax
push dword [0x884adc]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
push edi
push esi
mov ecx, dword [eax + 0x2c]
mov eax, dword [ecx]
call dword [eax + 8]
pop edi
mov eax, esi
pop esi
ret 4
push 0x40
push esi
call fcn.0045b780
add esp, 8
mov eax, esi
pop esi
ret 4
Function at 0x55db50
Capabilities:
Get thread local storage value

Disassembly:
push esi
mov esi, ecx
mov eax, dword [esi + 0x74]
mov dword [esi + 0x70], 0
test eax, eax
js 0x55db77
and eax, 0x3fffffff
mov ecx, 0x7d8954
push eax
mov eax, dword [0x7d8954]
push dword [esi + 0x6c]
call dword [eax + 0x10]
mov ecx, esi
mov dword [esi + 0x6c], 0
mov dword [esi + 0x74], connect
call fcn.0055d260
mov eax, dword [esp + 8]
test al, 1
je 0x55dbd6
test al, 4
jne 0x55dbcb
movzx eax, word [esi + 4]
mov ecx, 0xffff
push edi
mov edi, 0x78
cmp ax, cx
je 0x55dbae
mov edi, eax
push dword [0x884adc]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
push edi
push esi
mov ecx, dword [eax + 0x2c]
mov eax, dword [ecx]
call dword [eax + 8]
pop edi
mov eax, esi
pop esi
ret 4
push 0x78
push esi
call fcn.0045b780
add esp, 8
mov eax, esi
pop esi
ret 4

Function at 0x55dbe0
Capabilities:
Get thread local storage value

Disassembly:
push esi
mov esi, ecx
call fcn.0056d250
mov eax, dword [esp + 8]
test al, 1
je 0x55dc32
test al, 4
jne 0x55dc27
movzx eax, word [esi + 4]
mov ecx, 0xffff
push edi
mov edi, 0x14
cmp ax, cx
je 0x55dc0a
mov edi, eax
push dword [0x884adc]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
push edi
push esi
mov ecx, dword [eax + 0x2c]
mov eax, dword [ecx]
call dword [eax + 8]
pop edi
mov eax, esi
pop esi
ret 4
push 0x14
push esi
call fcn.0045b780
add esp, 8
mov eax, esi
pop esi
ret 4

Function at 0x55dc40
Capabilities:
Get thread local storage value

Disassembly:
push esi
mov esi, ecx
call fcn.0055d620
mov eax, dword [esp + 8]
test al, 1
je 0x55dc92
test al, 4
jne 0x55dc87
movzx eax, word [esi + 4]
mov ecx, 0xffff
push edi
mov edi, 0x40
cmp ax, cx
je 0x55dc6a
mov edi, eax
push dword [0x884adc]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
push edi
push esi
mov ecx, dword [eax + 0x2c]
mov eax, dword [ecx]
call dword [eax + 8]
pop edi
mov eax, esi
pop esi
ret 4
push 0x40
push esi
call fcn.0045b780
add esp, 8
mov eax, esi
pop esi
ret 4

Function at 0x55dca0
Capabilities:
Get thread local storage value

Disassembly:
push esi
mov esi, ecx
call fcn.00562830
mov eax, dword [esp + 8]
test al, 1
je 0x55dcf2
test al, 4
jne 0x55dce7
movzx eax, word [esi + 4]
mov ecx, 0xffff
push edi
mov edi, 0x3c
cmp ax, cx
je 0x55dcca
mov edi, eax
push dword [0x884adc]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
push edi
push esi
mov ecx, dword [eax + 0x2c]
mov eax, dword [ecx]
call dword [eax + 8]
pop edi
mov eax, esi
pop esi
ret 4
push 0x3c
push esi
call fcn.0045b780
add esp, 8
mov eax, esi
pop esi
ret 4

Function at 0x55dd00
Capabilities:
Get thread local storage value

Disassembly:
push esi
mov esi, ecx
call fcn.0055d6a0
mov eax, dword [esp + 8]
test al, 1
je 0x55dd52
test al, 4
jne 0x55dd47
movzx eax, word [esi + 4]
mov ecx, 0xffff
push edi
mov edi, 0x54
cmp ax, cx
je 0x55dd2a
mov edi, eax
push dword [0x884adc]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
push edi
push esi
mov ecx, dword [eax + 0x2c]
mov eax, dword [ecx]
call dword [eax + 8]
pop edi
mov eax, esi
pop esi
ret 4
push 0x54
push esi
call fcn.0045b780
add esp, 8
mov eax, esi
pop esi
ret 4
Function at 0x55dd60
Capabilities:
Get thread local storage value

Disassembly:
push esi
mov esi, ecx
call fcn.00569200
mov eax, dword [esp + 8]
test al, 1
je 0x55ddb5
test al, 4
jne 0x55dda7
movzx eax, word [esi + 4]
mov ecx, 0xffff
push edi
mov edi, 0x80
cmp ax, cx
je 0x55dd8a
mov edi, eax
push dword [0x884adc]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
push edi
push esi
mov ecx, dword [eax + 0x2c]
mov eax, dword [ecx]
call dword [eax + 8]
pop edi
mov eax, esi
pop esi
ret 4
push 0x80
push esi
call fcn.0045b780
add esp, 8
mov eax, esi
pop esi
ret 4

Function at 0x55ddc0
Capabilities:
Get thread local storage value

Disassembly:
push esi
mov esi, ecx
call fcn.00566180
mov eax, dword [esp + 8]
test al, 1
je 0x55de15
test al, 4
jne 0x55de07
movzx eax, word [esi + 4]
mov ecx, 0xffff
push edi
mov edi, 0x84
cmp ax, cx
je 0x55ddea
mov edi, eax
push dword [0x884adc]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
push edi
push esi
mov ecx, dword [eax + 0x2c]
mov eax, dword [ecx]
call dword [eax + 8]
pop edi
mov eax, esi
pop esi
ret 4
push 0x84
push esi
call fcn.0045b780
add esp, 8
mov eax, esi
pop esi
ret 4

Function at 0x55de20
Capabilities:
Get thread local storage value

Disassembly:
push esi
mov esi, ecx
mov eax, dword [esi + 0x6c]
mov dword [esi + 0x68], 0
test eax, eax
js 0x55de47
and eax, 0x3fffffff
mov ecx, 0x7d8954
push eax
mov eax, dword [0x7d8954]
push dword [esi + 0x64]
call dword [eax + 0x10]
mov ecx, esi
mov dword [esi + 0x64], 0
mov dword [esi + 0x6c], connect
call fcn.0055d260
mov eax, dword [esp + 8]
test al, 1
je 0x55dea6
test al, 4
jne 0x55de9b
movzx eax, word [esi + 4]
mov ecx, 0xffff
push edi
mov edi, 0x70
cmp ax, cx
je 0x55de7e
mov edi, eax
push dword [0x884adc]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
push edi
push esi
mov ecx, dword [eax + 0x2c]
mov eax, dword [ecx]
call dword [eax + 8]
pop edi
mov eax, esi
pop esi
ret 4
push 0x70
push esi
call fcn.0045b780
add esp, 8
mov eax, esi
pop esi
ret 4