joyce8/EMBER2024-capa huggingface dataset:
Function at 0x421ea8
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov esi, dword [ebp + 8]
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov ebx, eax
push esi
push 0xffffffffffffffff
call fcn.00421d64
add esp, 8
mov edi, eax
movzx eax, si
shl eax, 2
sub dword [ebx], eax
test dword [ebx + 0x10], 0xb405
je 0x421ee8
lea edx, [ebx + 0x10]
push edx
call fcn.0043f008
pop ecx
jmp 0x421eed
xor ecx, ecx
mov dword [ebx + 0x10], ecx
push edi
call fcn.00422408
mov eax, dword [ebx]
pop ecx
lea esi, [ebx + 0x10]
mov ecx, 6
mov edx, dword [eax]
mov edi, edx
rep movsd dword es:[edi], dword [esi]
xor eax, eax
mov dword [ebx + 0x10], eax
add dword [ebx], 4
mov edx, dword [ebx]
cmp edx, dword [ebx + 4]
jne 0x421f18
call fcn.00432d24
pop edi
pop esi
pop ebx
pop ebp
ret

Function at 0x421f20
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
mov ebx, dword [ebp + 8]
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov esi, eax
push ebx
push 0xffffffffffffffff
call fcn.00421d64
add esp, 8
movzx edx, bx
shl edx, 2
sub dword [esi], edx
push eax
call fcn.00421a48
pop ecx
pop esi
pop ebx
pop ebp
ret

Function at 0x421f54
Capabilities:
Get thread local storage value

Disassembly:
push ebx
push esi
push edi
push ebp
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edi, eax
xor esi, esi
mov eax, dword [edi + 0xc]
mov eax, dword [eax]
movzx ebx, word [eax + 0x12]
movzx ebp, word [eax + 0x10]
jmp 0x421f85
mov eax, dword [edi + 0xc]
mov edx, dword [eax + ebx*4 + 4]
push edx
call fcn.00422db8
pop ecx
inc esi
inc ebx
cmp ebp, ebx
jge 0x421f76
push esi
call fcn.00422f60
pop ecx
pop ebp
pop edi
pop esi
pop ebx
ret

Function at 0x421f98
Capabilities:
Get thread local storage value

Disassembly:
push ebx
push esi
push edi
push ebp
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov ebp, eax
mov eax, dword [ebp]
mov ebx, dword [eax - 4]
test byte [ebx + 1], 0x80
je 0x42202c
mov eax, dword [ebx + 8]
mov edi, dword [eax + 4]
test edi, edi
je 0x42201f
mov esi, 1
cmp edi, esi
jbe 0x421fe3
mov ecx, esi
mov eax, dword [ebx + 8]
shl ecx, 3
mov edx, dword [eax]
lea ecx, [ecx + ecx*2]
add edx, ecx
push edx
call fcn.00422db8
pop ecx
inc esi
cmp edi, esi
ja 0x421fc8
add dword [ebp], 4
mov eax, dword [ebp]
cmp eax, dword [ebp + 4]
jne 0x421ff4
call fcn.00432d24
mov edx, dword [ebp]
mov eax, dword [ebx + 8]
mov esi, dword [edx - 4]
mov edx, dword [eax]
push edx
push esi
call fcn.0043f0d4
add esp, 8
push esi
push ebx
call fcn.0043f284
add esp, 8
push edi
push esi
call fcn.0043e6ec
add esp, 8
jmp 0x422049
push 0
push ebx
call fcn.0043e694
add esp, 8
jmp 0x422049
push ebx
push 1
push 0x2e
call fcn.0046c000
pop ecx
push eax
push 0
push 0x42c
push 1
call fcn.00457160
add esp, 0x18
pop ebp
pop edi
pop esi
pop ebx
ret
Function at 0x422050
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffec
push ebx
push esi
push edi
mov ebx, dword [ebp + 8]
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov dword [ebp - 4], eax
mov eax, dword [ebx]
xor edi, edi
and eax, 0xfffbffff
xor esi, esi
cmp eax, 0x10
jg 0x42208b
je 0x4220c4
sub eax, 2
je 0x42209e
sub eax, 6
je 0x4220b1
jmp 0x422152
sub eax, 0x100
je 0x4220dc
sub eax, 0x300
je 0x4220f1
jmp 0x422152
mov edx, dword [ebx + 8]
push edx
call fcn.00482f94
pop ecx
xor ecx, ecx
mov dword [ebx], ecx
jmp 0x422215
mov eax, dword [ebx + 8]
push eax
call fcn.00482f94
pop ecx
xor edx, edx
mov dword [ebx], edx
jmp 0x422215
fld qword [ebx + 8]
call fcn.004afcf0
push eax
call fcn.00482f94
pop ecx
xor edx, edx
mov dword [ebx], edx
jmp 0x422215
mov ecx, dword [ebx + 8]
push ecx
call fcn.004838f0
pop ecx
mov esi, eax
xor eax, eax
mov dword [ebx], eax
jmp 0x422215
lea edx, [ebp - 0xc]
push edx
mov ecx, dword [ebx + 8]
push ecx
mov eax, dword [ebx + 0x10]
push eax
call fcn.004424e8
add esp, 0xc
mov dword [ebp - 8], eax
cmp dword [ebp + 0xc], 0
je 0x42211c
mov edx, dword [ebp - 8]
push edx
call fcn.004839dc
pop ecx
mov esi, eax
jmp 0x422136
lea eax, [ebp - 0x10]
push eax
mov edx, dword [ebp - 8]
push edx
call fcn.0048384c
add esp, 8
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.00482f94
pop ecx
cmp dword [ebp - 0xc], 0
je 0x422146
mov eax, dword [ebp - 8]
push eax
call fcn.0043b450
pop ecx
push ebx
call fcn.0043f008
pop ecx
jmp 0x422215
cmp dword [ebp + 0xc], 0
je 0x4221f8
mov edx, dword [ebp + 0xc]
mov ecx, dword [edx]
push ecx
call fcn.004ab86c
pop ecx
push eax
mov eax, dword [ebp + 0xc]
mov edx, dword [eax]
push edx
call fcn.004233a8
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, dword [ecx]
mov edx, dword [eax - 4]
push edx
push ebx
push 2
push 0x5407fc
push 0
push 0x429
push 1
call fcn.00457300
add esp, 0x1c
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 4]
sub dword [ecx], 4
mov eax, dword [ebp - 4]
mov edx, dword [eax]
mov eax, dword [edx]
test dword [eax], 0xb405
je 0x4221b8
push eax
call fcn.0043f008
pop ecx
cmp dword [ebp - 0x14], 0
je 0x4221dc
mov edx, dword [ebp - 0x14]
push edx
push ebx
call fcn.0043f284
add esp, 8
mov ecx, dword [ebp - 0x14]
push ecx
call fcn.0043dbc0
pop ecx
mov edi, 1
jmp 0x422215
test dword [ebx], 0xb405
je 0x4221ed
push ebx
call fcn.0043f008
pop ecx
jmp 0x4221f1
xor eax, eax
mov dword [ebx], eax
mov esi, 1
jmp 0x422215
push 0xffffffffffffffff
call fcn.00482f94
test dword [ebx], 0xb405
pop ecx
je 0x422211
push ebx
call fcn.0043f008
pop ecx
jmp 0x422215
xor eax, eax
mov dword [ebx], eax
test edi, edi
jne 0x42206a
mov eax, esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x422228
Capabilities:
Get thread local storage value

Disassembly:
push ebx
push esi
push edi
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov ebx, eax
mov eax, dword [ebx]
mov edi, dword [eax - 4]
mov esi, dword [eax - 8]
push 0
push esi
call fcn.00422050
add esp, 8
push edi
push esi
call fcn.0043f284
add esp, 8
sub dword [ebx], 4
pop edi
pop esi
pop ebx
ret
Function at 0x4222dc
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffec
mov eax, dword [0x555894]
push ebx
push esi
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov esi, eax
mov ax, word [ebp + 8]
push eax
lea edx, [ebp - 0x14]
push edx
call fcn.00432e04
mov ebx, dword [eax + 8]
mov eax, dword [esi + 0xc]
add esp, 8
mov eax, dword [eax + 4]
test dword [eax], 0xfffbffff
je 0x42239f
lea edx, [ebp - 0x14]
push edx
push ebx
push eax
call fcn.0042cbd8
add esp, 0xc
test eax, eax
je 0x42233a
test byte [eax + 5], 8
je 0x42233a
cmp dword [eax + 0xc], 0
je 0x42233a
mov ecx, dword [eax + 0xc]
mov eax, dword [ecx]
test eax, eax
je 0x422369
cmp dword [eax + 8], 0
je 0x422369
test byte [eax + 5], 1
je 0x422361
mov edx, dword [eax + 8]
mov ecx, dword [edx + 4]
push ecx
mov eax, dword [edx]
push eax
call fcn.0041b75c
add esp, 8
jmp 0x4223e9
call dword [eax + 8]
jmp 0x4223e9
mov eax, dword [ebx]
cmp byte [eax], 0x5f
jne 0x422387
push 0xfffffffffffffffe
inc eax
push eax
push 0
push 0x3ed
push 0x10
call fcn.004573cc
add esp, 0x14
jmp 0x4223e9
push 0xfffffffffffffffe
mov edx, dword [ebx]
push edx
push 0
push 0x3ec
push 0xd
call fcn.004573cc
add esp, 0x14
jmp 0x4223e9
test byte [ebx + 5], 8
je 0x4223b0
cmp dword [ebx + 0xc], 0
je 0x4223b0
mov ecx, dword [ebx + 0xc]
mov ebx, dword [ecx]
mov eax, dword [ebx + 8]
test eax, eax
je 0x4223d3
test byte [ebx + 5], 1
je 0x4223ce
mov edx, dword [eax + 4]
push edx
mov ecx, dword [eax]
push ecx
call fcn.0041b75c
add esp, 8
jmp 0x4223e9
call dword [ebx + 8]
jmp 0x4223e9
push 0xffffffffffffffff
mov eax, dword [ebx]
push eax
push 0
push 0x3e9
push 0xc
call fcn.004573cc
add esp, 0x14
cmp word [ebp - 2], 0
je 0x4223f5
call fcn.00422a3c
lea edx, [ebp - 0x14]
push edx
call fcn.00432ea8
pop ecx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x422408
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffec
mov eax, dword [0x555894]
push ebx
push esi
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov esi, eax
mov ax, word [ebp + 8]
push eax
lea edx, [ebp - 0x14]
push edx
call fcn.00432e04
add esp, 8
mov ebx, dword [eax + 8]
mov eax, dword [esi + 0xc]
mov eax, dword [eax + 4]
lea edx, [ebp - 0x14]
push edx
push ebx
push eax
call fcn.0042cbd8
add esp, 0xc
test eax, eax
je 0x42245a
test byte [eax + 5], 8
je 0x42245a
cmp dword [eax + 0xc], 0
je 0x42245a
mov ecx, dword [eax + 0xc]
mov eax, dword [ecx]
test eax, eax
je 0x422483
cmp dword [eax + 8], 0
je 0x422483
test byte [eax + 5], 1
je 0x42247e
mov edx, dword [eax + 8]
mov ecx, dword [edx + 4]
push ecx
mov eax, dword [edx]
push eax
call fcn.0041b75c
add esp, 8
jmp 0x4224b7
call dword [eax + 8]
jmp 0x4224b7
mov eax, dword [ebx]
cmp byte [eax], 0x5f
jne 0x4224a1
push 0xfffffffffffffffe
inc eax
push eax
push 0
push 0x3ed
push 0x10
call fcn.004573cc
add esp, 0x14
jmp 0x4224b7
push 0xfffffffffffffffe
mov edx, dword [ebx]
push edx
push 0
push 0x3ec
push 0xd
call fcn.004573cc
add esp, 0x14
cmp word [ebp - 2], 0
je 0x4224c3
call fcn.00422a3c
lea ecx, [ebp - 0x14]
push ecx
call fcn.00432ea8
pop ecx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x4224d4
Capabilities:
Get thread local storage value

Disassembly:
push ebx
push esi
push edi
add esp, 0xffffffec
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov ebx, eax
push 0
lea eax, [esp + 4]
push eax
call fcn.00432e04
add esp, 8
mov esi, dword [eax + 8]
push esp
push esi
mov eax, dword [ebx + 0xc]
mov edx, dword [eax + 4]
push edx
call fcn.0042d3d4
add esp, 0xc
test eax, eax
jne 0x422545
call fcn.0042557c
test ax, ax
jne 0x422545
mov ecx, dword [ebx + 0xc]
mov edx, dword [ecx + 4]
push edx
push 1
mov eax, dword [esi]
cmp byte [eax], 0x5f
jne 0x42252f
mov ecx, 1
jmp 0x422531
xor ecx, ecx
add ecx, eax
push ecx
push 0
push 0x3ed
push 0x10
call fcn.004573cc
add esp, 0x18
push esp
call fcn.00432ea8
mov eax, dword [ebx]
pop ecx
lea esi, [ebx + 0x10]
mov ecx, 6
mov edx, dword [eax]
mov edi, edx
rep movsd dword es:[edi], dword [esi]
xor eax, eax
mov dword [ebx + 0x10], eax
add dword [ebx], 4
mov edx, dword [ebx]
cmp edx, dword [ebx + 4]
jne 0x422570
call fcn.00432d24
add esp, 0x14
pop edi
pop esi
pop ebx
ret

Function at 0x4225b0
Capabilities:
Get thread local storage value

Disassembly:
push ebx
push esi
push edi
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov ebx, eax
mov eax, dword [ebx + 0xc]
mov esi, dword [eax + 4]
test byte [esi + 1], 0x10
jne 0x4225e2
push 0
push str.hb_vmDoBlock__
push 0
push 0x2339
call fcn.00457568
add esp, 0x10
mov eax, dword [ebx + 0xc]
mov eax, dword [eax]
mov dx, word [esi + 0xc]
mov word [eax + 0x12], dx
mov edx, dword [eax + 0xc]
mov cx, word [esi + 0xe]
mov word [edx + 0x10], cx
mov cx, word [esi + 0x10]
mov word [edx + 0xc], cx
mov cx, word [esi + 0x12]
mov word [edx + 0xe], cx
movzx edi, word [esi + 0xc]
movzx eax, word [eax + 0x10]
sub edi, eax
jmp 0x42262e
add dword [ebx], 4
mov edx, dword [ebx]
cmp edx, dword [ebx + 4]
jne 0x422625
call fcn.00432d24
mov ecx, dword [ebx]
mov eax, dword [ecx - 4]
xor edx, edx
mov dword [eax], edx
dec edi
jns 0x422616
mov ecx, dword [esi + 8]
mov eax, dword [ecx + 0x10]
mov dword [ebx + 0x8c], eax
mov eax, dword [esi + 8]
mov edx, dword [eax + 4]
push edx
mov ecx, dword [eax]
push ecx
call fcn.0041b75c
add esp, 8
pop edi
pop esi
pop ebx
ret

Function at 0x422684
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edi, eax
call fcn.0042349c
mov eax, dword [ebp + 8]
push eax
call fcn.00422db8
pop ecx
lea esi, [ebp + 0x10]
mov ebx, 1
cmp ebx, dword [ebp + 0xc]
ja 0x4226c6
add esi, 4
mov eax, dword [esi - 4]
push eax
call fcn.00422db8
pop ecx
inc ebx
cmp ebx, dword [ebp + 0xc]
jbe 0x4226b3
mov dx, word [ebp + 0xc]
push edx
call fcn.00422408
pop ecx
lea eax, [edi + 0x10]
pop edi
pop esi
pop ebx
pop ebp
ret
Function at 0x422a6c
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
mov eax, dword [ecx + 0xc]
cmp word [eax + 0x12], 0
je 0x422aa1
push 0
movzx edx, word [ebp + 8]
push edx
mov ecx, dword [ebp + 0xc]
push ecx
push 0
push 2
call dword [0x555890]
add esp, 0x14
pop ebp
ret

Function at 0x422aa4
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
mov edx, dword [ecx + 0xc]
cmp word [edx + 0x12], 0
je 0x422ade
mov eax, dword [eax + 0x8c]
push eax
movzx ecx, word [ebp + 0xc]
push ecx
mov eax, dword [ebp + 0x10]
push eax
push 0
push 3
call dword [0x555890]
add esp, 0x14
pop ebp
ret

Function at 0x422ae0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
cmp dword [0x555890], 0
je 0x422b1d
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
push 0
push 0
mov ebx, eax
mov eax, dword [ebp + 8]
push eax
push 0
push 1
call dword [0x555890]
add esp, 0x14
mov edx, dword [ebx + 0xc]
mov ecx, dword [edx]
mov eax, dword [ecx + 0xc]
mov word [eax + 0x12], 1
pop ebx
pop ebp
ret

Function at 0x422b20
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 0xc]
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov eax, dword [edx]
xor ecx, ecx
mov cl, bl
mov word [eax + 0x12], cx
xor edx, edx
mov dl, bl
movzx eax, word [eax + 0x10]
sub edx, eax
mov ebx, edx
test ebx, ebx
jge 0x422b51
xor ebx, ebx
movzx eax, word [ebp + 8]
add ebx, eax
test ebx, ebx
je 0x422b65
call fcn.00422df0
dec ebx
test ebx, ebx
jg 0x422b5b
pop ebx
pop ebp
ret

Function at 0x422b68
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 0xc]
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov eax, dword [edx]
xor ecx, ecx
mov cl, bl
mov word [eax + 0x12], cx
xor edx, edx
mov dl, bl
movzx eax, word [eax + 0x10]
sub edx, eax
mov ebx, edx
test ebx, ebx
jge 0x422b99
xor ebx, ebx
movzx eax, word [ebp + 8]
add ebx, eax
test ebx, ebx
je 0x422bad
call fcn.00422df0
dec ebx
test ebx, ebx
jg 0x422ba3
pop ebx
pop ebp
ret
Function at 0x422ce8
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov esi, eax
push 0x28
call fcn.0043b368
mov ebx, eax
xor eax, eax
pop ecx
xor edx, edx
mov dword [ebx], eax
mov dword [ebx + 0x18], edx
mov dword [ebx + 0x1c], 0x18
xor ecx, ecx
add esi, 0x10
mov dword [ebx + 0x20], ecx
mov dword [ebx + 0x24], 0x422cd0
test dword [esi], 0xb405
je 0x422d36
push esi
call fcn.0043f008
pop ecx
mov dword [esi], 0x22000
mov dword [esi + 8], ebx
mov dword [esi + 0xc], 0x540714
push edi
push ebx
call fcn.0043f284
add esp, 8
push esi
push edi
call fcn.0043f284
add esp, 8
pop edi
pop esi
pop ebx
pop ebp
ret

Function at 0x422d60
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov eax, dword [0x555894]
mov edi, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov esi, eax
jmp 0x422da5
mov ax, word [ebx]
mov edx, dword [esi + 0x8c]
mov ecx, dword [edx + 8]
mov edx, dword [ecx]
movzx eax, ax
mov ecx, eax
shl ecx, 3
lea ecx, [ecx + ecx*2]
add edx, ecx
add edx, 0xffffffe8
mov eax, edx
push eax
call fcn.00422ce8
pop ecx
add ebx, 2
mov eax, edi
add di, 0xffff
test ax, ax
jne 0x422d7b
pop edi
pop esi
pop ebx
pop ebp
ret

Function at 0x422db8
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov ebx, eax
mov eax, dword [ebp + 8]
push eax
add dword [ebx], 4
mov edx, dword [ebx]
cmp edx, dword [ebx + 4]
jne 0x422ddc
call fcn.00432d24
mov ecx, dword [ebx]
mov eax, dword [ecx - 4]
push eax
call fcn.0043f0d4
add esp, 8
pop ebx
pop ebp
ret

Function at 0x422df0
Capabilities:
Get thread local storage value

Disassembly:
push ebx
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov ebx, eax
add dword [ebx], 4
mov eax, dword [ebx]
cmp eax, dword [ebx + 4]
jne 0x422e0d
call fcn.00432d24
mov edx, dword [ebx]
mov ecx, dword [edx - 4]
xor eax, eax
mov dword [ecx], eax
pop ebx
ret

Function at 0x422e18
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov ebx, eax
add dword [ebx], 4
mov eax, dword [ebx]
cmp eax, dword [ebx + 4]
jne 0x422e38
call fcn.00432d24
mov edx, dword [ebx]
mov eax, dword [edx - 4]
mov dword [eax], 0x80
mov edx, dword [ebp + 8]
mov dword [eax + 8], edx
pop ebx
pop ebp
ret

Function at 0x422f60
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
mov esi, dword [ebp + 8]
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov ebx, eax
add dword [ebx], 4
mov eax, dword [ebx]
cmp eax, dword [ebx + 4]
jne 0x422f84
call fcn.00432d24
mov edx, dword [ebx]
mov eax, dword [edx - 4]
mov dword [eax], 2
mov dword [eax + 8], esi
cmp esi, 0xc4653601
jl 0x422fa2
cmp esi, 0x3b9ac9ff
jle 0x422fa8
mov dx, 0x14
jmp 0x422fac
mov dx, 0xa
mov word [eax + 0xc], dx
pop esi
pop ebx
pop ebp
ret
Function at 0x422fb4
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
mov esi, dword [ebp + 8]
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov ebx, eax
add dword [ebx], 4
mov eax, dword [ebx]
cmp eax, dword [ebx + 4]
jne 0x422fd8
call fcn.00432d24
mov edx, dword [ebx]
mov eax, esi
mov ecx, dword [edx - 4]
cdq
mov ebx, ecx
mov dword [ebx], 2
mov dword [ebx + 8], esi
push edx
push eax
call fcn.00422f0c
add esp, 8
mov word [ebx + 0xc], ax
pop esi
pop ebx
pop ebp
ret

Function at 0x423000
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
mov esi, dword [ebp + 8]
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov ebx, eax
add dword [ebx], 4
mov eax, dword [ebx]
cmp eax, dword [ebx + 4]
jne 0x423024
call fcn.00432d24
mov edx, dword [ebx]
mov eax, dword [edx - 4]
mov dword [eax], 2
mov dword [eax + 8], esi
cmp esi, 0xc4653601
jl 0x423042
cmp esi, 0x3b9ac9ff
jle 0x423048
mov dx, 0x14
jmp 0x42304c
mov dx, 0xa
mov word [eax + 0xc], dx
pop esi
pop ebx
pop ebp
ret

Function at 0x423064
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov ebx, eax
add dword [ebx], 4
mov eax, dword [ebx]
cmp eax, dword [ebx + 4]
jne 0x423084
call fcn.00432d24
mov edx, dword [ebx]
mov ecx, dword [edx - 4]
mov dword [ecx], 8
mov eax, dword [ebp + 8]
mov dword [ecx + 8], eax
mov eax, dword [ebp + 0xc]
mov dword [ecx + 0xc], eax
cmp dword [ebp + 0xc], 0xffffffff
jne 0x4230ac
cmp dword [ebp + 8], 0xc4653601
jb 0x4230c1
jmp 0x4230ae
jl 0x4230c1
cmp dword [ebp + 0xc], 2
jne 0x4230bf
cmp dword [ebp + 8], 0x540be3ff
jbe 0x4230c7
jmp 0x4230c1
jle 0x4230c7
mov dx, 0x14
jmp 0x4230cb
mov dx, 0xa
mov word [ecx + 0x10], dx
pop ebx
pop ebp
ret

Function at 0x4230d4
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov ebx, eax
add dword [ebx], 4
mov eax, dword [ebx]
cmp eax, dword [ebx + 4]
jne 0x4230f4
call fcn.00432d24
mov edx, dword [ebx]
mov ecx, dword [edx - 4]
mov ebx, ecx
mov dword [ebx], 8
mov eax, dword [ebp + 8]
mov dword [ebx + 8], eax
mov eax, dword [ebp + 0xc]
mov dword [ebx + 0xc], eax
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.00422f0c
add esp, 8
mov word [ebx + 0x10], ax
pop ebx
pop ebp
ret
Function at 0x42316c
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
mov esi, dword [ebp + 0x10]
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov ebx, eax
add dword [ebx], 4
mov eax, dword [ebx]
cmp eax, dword [ebx + 4]
jne 0x423190
call fcn.00432d24
mov edx, dword [ebx]
mov edx, dword [edx - 4]
mov dword [edx], 0x10
mov eax, dword [ebp + 8]
mov dword [edx + 8], eax
mov eax, dword [ebp + 0xc]
mov dword [edx + 0xc], eax
fld qword [ebp + 8]
fcomp qword [0x4231f0]
fnstsw ax
sahf
ja 0x4231c3
fld qword [ebp + 8]
fcomp qword [0x4231f8]
fnstsw ax
sahf
jae 0x4231c9
mov cx, 0x14
jmp 0x4231cd
mov cx, 0xa
mov word [edx + 0x10], cx
cmp esi, 0xff
jne 0x4231e6
mov ax, word [ebx + 0xf4]
mov word [edx + 0x12], ax
jmp 0x4231ea
mov word [edx + 0x12], si
pop esi
pop ebx
pop ebp
ret

Function at 0x423200
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov eax, dword [0x555894]
mov edi, dword [ebp + 0x14]
mov esi, dword [ebp + 0x10]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov ebx, eax
add dword [ebx], 4
mov eax, dword [ebx]
cmp eax, dword [ebx + 4]
jne 0x423228
call fcn.00432d24
mov edx, dword [ebx]
cmp edi, 0xff
mov edx, dword [edx - 4]
mov dword [edx], 0x10
mov eax, dword [ebp + 8]
mov dword [edx + 8], eax
mov eax, dword [ebp + 0xc]
mov dword [edx + 0xc], eax
jne 0x423254
mov cx, word [ebx + 0xf4]
mov word [edx + 0x12], cx
jmp 0x423258
mov word [edx + 0x12], di
cmp esi, 0xff
jne 0x42328c
fld qword [ebp + 8]
fcomp qword [0x423298]
fnstsw ax
sahf
ja 0x42327c
fld qword [ebp + 8]
fcomp qword [0x4232a0]
fnstsw ax
sahf
jae 0x423282
mov cx, 0x14
jmp 0x423286
mov cx, 0xa
mov word [edx + 0x10], cx
jmp 0x423290
mov word [edx + 0x10], si
pop edi
pop esi
pop ebx
pop ebp
ret

Function at 0x423320
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov ebx, eax
add dword [ebx], 4
mov eax, dword [ebx]
cmp eax, dword [ebx + 4]
jne 0x423340
call fcn.00432d24
mov edx, dword [ebx]
xor ecx, ecx
mov eax, dword [edx - 4]
mov dword [eax], 1
mov edx, dword [ebp + 8]
mov dword [eax + 8], edx
mov dword [eax + 0x10], ecx
mov dword [eax + 0xc], ecx
pop ebx
pop ebp
ret

Function at 0x4233a8
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov ebx, eax
mov eax, dword [ebp + 0xc]
push eax
mov edx, dword [ebp + 8]
push edx
add dword [ebx], 4
mov ecx, dword [ebx]
cmp ecx, dword [ebx + 4]
jne 0x4233d0
call fcn.00432d24
mov eax, dword [ebx]
mov edx, dword [eax - 4]
push edx
call fcn.0043dce8
add esp, 0xc
pop ebx
pop ebp
ret