Function at 0x44b9f0
Capabilities:
Execute anti-debugging instructions
Get thread local storage value

Disassembly:
sub esp, 8
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_TlsGetValue]
push esi
mov esi, dword [esp + 0x14]
mov eax, dword [esi + 0xcc]
test eax, eax
push edi
mov dword [esp + 0xc], eax
je 0x44ba9f
push ebp
movzx ebp, word [eax + 0xc]
sub ebp, 1
js 0x44ba9e
jmp 0x44ba26
mov eax, dword [esp + 0x10]
mov eax, dword [eax + 8]
cmp dword [eax + ebp*4], 0
je 0x44ba99
mov ecx, dword [0x4c6074]
push ecx
call ebx
mov edi, eax
mov ecx, dword [edi + 4]
cmp ecx, dword [edi + 0xc]
jae 0x44ba5b
mov dword [ecx], str.TtentRemCb
rdtsc
mov dword [esp + 0x1c], eax
mov edx, dword [esp + 0x1c]
mov dword [ecx + 4], edx
add ecx, 0xc
mov dword [edi + 4], ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 8]
mov ecx, dword [ecx + ebp*4]
mov edx, dword [ecx]
mov eax, dword [edx + 8]
push esi
call eax
mov ecx, dword [0x4c6074]
push ecx
call ebx
mov ecx, eax
mov edi, dword [ecx + 4]
cmp edi, dword [ecx + 0xc]
jae 0x44ba99
mov dword [edi], 0x4b2454
rdtsc
mov dword [esp + 0x14], eax
mov edx, dword [esp + 0x14]
mov dword [edi + 4], edx
add edi, 0xc
mov dword [ecx + 4], edi
sub ebp, 1
jns 0x44ba22
pop ebp
cmp word [esi + 0x9c], 0
je 0x44bb21
lea esp, [esp]
mov eax, dword [0x4c6074]
push eax
call ebx
mov edi, eax
mov ecx, dword [edi + 4]
cmp ecx, dword [edi + 0xc]
jae 0x44badb
mov dword [ecx], str.TtentRemCb
rdtsc
mov dword [esp + 0x18], eax
mov edx, dword [esp + 0x18]
mov dword [ecx + 4], edx
add ecx, 0xc
mov dword [edi + 4], ecx
mov eax, dword [esi + 0x98]
mov ecx, dword [eax]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
push esi
call eax
mov ecx, dword [0x4c6074]
push ecx
call ebx
mov edi, eax
mov ecx, dword [edi + 4]
cmp ecx, dword [edi + 0xc]
jae 0x44bb17
mov dword [ecx], 0x4b2454
rdtsc
mov dword [esp + 0x10], eax
mov edx, dword [esp + 0x10]
mov dword [ecx + 4], edx
add ecx, 0xc
mov dword [edi + 4], ecx
cmp word [esi + 0x9c], 0
jne 0x44bab0
cmp dword [esi + 0xa4], 0
je 0x44bba0
lea ebx, [ebx]
mov eax, dword [0x4c6074]
push eax
call ebx
mov edi, eax
mov ecx, dword [edi + 4]
cmp ecx, dword [edi + 0xc]
jae 0x44bb5b
mov dword [ecx], str.TtentRemCb
rdtsc
mov dword [esp + 0x18], eax
mov edx, dword [esp + 0x18]
mov dword [ecx + 4], edx
add ecx, 0xc
mov dword [edi + 4], ecx
mov eax, dword [esi + 0xa0]
mov ecx, dword [eax]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
push esi
call eax
mov ecx, dword [0x4c6074]
push ecx
call ebx
mov edi, eax
mov ecx, dword [edi + 4]
cmp ecx, dword [edi + 0xc]
jae 0x44bb97
mov dword [ecx], 0x4b2454
rdtsc
mov dword [esp + 0x10], eax
mov edx, dword [esp + 0x10]
mov dword [ecx + 4], edx
add ecx, 0xc
mov dword [edi + 4], ecx
cmp dword [esi + 0xa4], 0
jne 0x44bb30
cmp word [esi + 0x1fc], 0
je 0x44bc21
lea ebx, [ebx]
mov eax, dword [0x4c6074]
push eax
call ebx
mov edi, eax
mov ecx, dword [edi + 4]
cmp ecx, dword [edi + 0xc]
jae 0x44bbdb
mov dword [ecx], str.TtentRemCb
rdtsc
mov dword [esp + 0x18], eax
mov edx, dword [esp + 0x18]
mov dword [ecx + 4], edx
add ecx, 0xc
mov dword [edi + 4], ecx
mov eax, dword [esi + 0x1f8]
mov ecx, dword [eax]
mov edx, dword [ecx]
mov eax, dword [edx + 0x18]
push esi
call eax
mov ecx, dword [0x4c6074]
push ecx
call ebx
mov edi, eax
mov ecx, dword [edi + 4]
cmp ecx, dword [edi + 0xc]
jae 0x44bc17
mov dword [ecx], 0x4b2454
rdtsc
mov dword [esp + 0x10], eax
mov edx, dword [esp + 0x10]
mov dword [ecx + 4], edx
add ecx, 0xc
mov dword [edi + 4], ecx
cmp word [esi + 0x1fc], 0
jne 0x44bbb0
pop edi
pop esi
pop ebx
add esp, 8
ret