joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10263e11
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
and dword [ebp - 4], 0
push edi
push dword [0x1039deb8]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x10263e31
mov edi, dword [eax + 0x74]
jmp 0x10263e33
xor edi, edi
test edi, edi
jne 0x10263e47
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10263ee8
and dword [ebp - 0x10], 0
push edi
push 0
push 1
lea ecx, [ebp - 0x10]
call fcn.102bde47
test eax, eax
jne 0x10263e69
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10263ee0
push esi
mov esi, dword [ebp + 8]
test esi, esi
je 0x10263e7f
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x10263e81
xor esi, esi
test esi, esi
jne 0x10263e8c
push 0x80070057
jmp 0x10263ed9
cmp edi, dword [esi + 8]
je 0x10263e98
push 0x8004001e
jmp 0x10263ed9
cmp dword [edi + 0x10], 0
je 0x10263ebd
mov ecx, esi
call fcn.10261249
test eax, eax
je 0x10263ebd
mov ecx, esi
call fcn.10261249
test byte [eax + 0x54], 0x20
je 0x10263ebd
push 0x8004001f
jmp 0x10263ed9
fld dword [ebp + 0xc]
push ecx
mov ecx, esi
fstp dword [esp]
call fcn.102bf4f1
test eax, eax
jl 0x10263ed8
mov dword [ebp - 4], 1
jmp 0x10263edf
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
pop esi
lea ecx, [ebp - 0x10]
call fcn.102bde00
mov eax, dword [ebp - 4]
pop edi
leave
ret 8

Function at 0x10263ef0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push esi
push dword [0x1039deb8]
xor ebx, ebx
mov dword [ebp - 4], ebx
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
cmp eax, ebx
je 0x10263f12
mov esi, dword [eax + 0x74]
jmp 0x10263f14
xor esi, esi
cmp esi, ebx
jne 0x10263f28
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10264000
push esi
push ebx
push 1
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x14], ebx
call fcn.102bde47
test eax, eax
jne 0x10263f4b
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10263ff8
push edi
mov edi, dword [ebp + 8]
push edi
call fcn.10262469
mov dword [ebp - 8], eax
cmp eax, ebx
jne 0x10263f66
push 0x80070057
jmp 0x10263ff1
cmp esi, dword [eax + 8]
je 0x10263f72
push 0x8004001e
jmp 0x10263ff1
push dword [ebp + 0x10]
call fcn.10262469
mov dword [ebp + 8], eax
cmp eax, ebx
je 0x10263f5c
cmp esi, dword [eax + 8]
jne 0x10263f6b
mov ebx, dword [ebp + 0xc]
cmp ebx, 1
jge 0x10263f92
test ebx, ebx
jg 0x10263ff7
test ebx, ebx
jl 0x10263ff7
cmp dword [esi + 0x10], 0
je 0x10263fd7
test edi, edi
je 0x10263fb2
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
shr eax, 2
test al, 1
je 0x10263fb2
mov esi, edi
jmp 0x10263fb4
xor esi, esi
test esi, esi
je 0x10263fd0
mov ecx, esi
call fcn.10261249
test eax, eax
je 0x10263fd7
mov ecx, esi
call fcn.10261249
test byte [eax + 0x54], 0x20
je 0x10263fd7
push 0x8004001f
jmp 0x10263ff1
push dword [ebp + 8]
mov ecx, dword [ebp - 8]
push ebx
call fcn.102c2341
test eax, eax
jl 0x10263ff0
mov dword [ebp - 4], 1
jmp 0x10263ff7
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
pop edi
lea ecx, [ebp - 0x14]
call fcn.102bde00
mov eax, dword [ebp - 4]
pop esi
pop ebx
leave
ret 0xc
Function at 0x10264009
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
and dword [ebp - 4], 0
push esi
push dword [0x1039deb8]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x10264029
mov esi, dword [eax + 0x74]
jmp 0x1026402b
xor esi, esi
test esi, esi
jne 0x1026403c
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x102640ac
and dword [ebp - 0x10], 0
push esi
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.102bde47
test eax, eax
jne 0x1026405e
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x102640a4
push edi
mov edi, dword [ebp + 8]
test edi, edi
je 0x10264078
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
shr eax, 2
test al, 1
je 0x10264078
mov ecx, edi
jmp 0x1026407a
xor ecx, ecx
pop edi
test ecx, ecx
je 0x10264051
cmp esi, dword [ecx + 8]
je 0x1026408b
push 0x8004001e
jmp 0x10264056
call fcn.10261249
mov eax, dword [eax + 0x50]
test eax, eax
je 0x102640a4
push dword [ebp + 0xc]
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0x34]
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x10]
call fcn.102bde00
mov eax, dword [ebp - 4]
pop esi
leave
ret 8

Function at 0x102640b4
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
push dword [0x1039deb8]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x102640d0
mov esi, dword [eax + 0x74]
jmp 0x102640d2
xor esi, esi
test esi, esi
jne 0x102640e3
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10264153
and dword [ebp - 0xc], 0
push esi
push 0
push 0
lea ecx, [ebp - 0xc]
call fcn.102bde47
test eax, eax
jne 0x10264105
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1026414b
push edi
mov edi, dword [ebp + 8]
test edi, edi
je 0x1026411f
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
shr eax, 2
test al, 1
je 0x1026411f
mov ecx, edi
jmp 0x10264121
xor ecx, ecx
pop edi
test ecx, ecx
je 0x102640f8
cmp esi, dword [ecx + 8]
je 0x10264132
push 0x8004001e
jmp 0x102640fd
call fcn.10261249
mov eax, dword [eax + 0x50]
test eax, eax
je 0x1026414b
push dword [ebp + 0x10]
mov edx, dword [eax]
push dword [ebp + 0xc]
mov ecx, eax
call dword [edx + 0x3c]
lea ecx, [ebp - 0xc]
call fcn.102bde00
pop esi
leave
ret 0xc
Function at 0x10264158
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push edi
push dword [0x1039deb8]
xor ebx, ebx
mov dword [ebp - 4], ebx
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
cmp eax, ebx
je 0x1026417a
mov edi, dword [eax + 0x74]
jmp 0x1026417c
xor edi, edi
cmp edi, ebx
jne 0x10264190
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1026424a
push edi
push ebx
push 1
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], ebx
call fcn.102bde47
test eax, eax
jne 0x102641b3
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10264242
push esi
mov esi, dword [ebp + 8]
cmp esi, ebx
je 0x102641c9
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x102641cb
xor esi, esi
cmp esi, ebx
jne 0x102641d6
push 0x80070057
jmp 0x1026423b
cmp edi, dword [esi + 8]
je 0x102641e2
push 0x8004001e
jmp 0x1026423b
mov ecx, dword [ebp + 0xc]
mov eax, 0xfffff
and ecx, eax
cmp ecx, dword [ebp + 0xc]
jne 0x102641cf
mov ecx, dword [ebp + 0x10]
and ecx, eax
cmp ecx, dword [ebp + 0x10]
jne 0x102641cf
cmp dword [edi + 0x10], ebx
je 0x1026421f
mov ecx, esi
call fcn.10261249
test eax, eax
je 0x1026421f
mov ecx, esi
call fcn.10261249
test byte [eax + 0x54], 0x20
je 0x1026421f
push 0x8004001f
jmp 0x1026423b
push ebx
push dword [ebp + 0x10]
mov ecx, esi
push dword [ebp + 0xc]
call fcn.102bccfc
cmp eax, ebx
jl 0x1026423a
mov dword [ebp - 4], 1
jmp 0x10264241
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
pop esi
lea ecx, [ebp - 0x10]
call fcn.102bde00
mov eax, dword [ebp - 4]
pop edi
pop ebx
leave
ret 0xc

Function at 0x10264253
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push edi
push dword [0x1039deb8]
xor ebx, ebx
mov dword [ebp - 4], ebx
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
cmp eax, ebx
je 0x10264275
mov edi, dword [eax + 0x74]
jmp 0x10264277
xor edi, edi
cmp edi, ebx
jne 0x1026428b
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1026432d
push edi
push ebx
push ebx
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], ebx
call fcn.102bde47
test eax, eax
jne 0x102642aa
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10264325
push esi
mov esi, dword [ebp + 8]
cmp esi, ebx
je 0x102642c0
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x102642c2
xor esi, esi
cmp esi, ebx
je 0x10264319
cmp edi, dword [esi + 8]
je 0x102642d2
push 0x8004001e
jmp 0x1026431e
cmp dword [ebp + 0x10], ebx
je 0x10264319
cmp dword [edi + 0x10], ebx
je 0x102642fb
mov ecx, esi
call fcn.10261249
test eax, eax
je 0x102642fb
mov ecx, esi
call fcn.10261249
test byte [eax + 0x54], 0x20
je 0x102642fb
push 0x8004001f
jmp 0x1026431e
push dword [ebp + 0x10]
lea ecx, [esi + 0x34]
push dword [ebp + 0xc]
call fcn.102be87d
cmp eax, ebx
jl 0x10264316
mov dword [ebp - 4], 1
jmp 0x10264324
push eax
jmp 0x1026431e
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
pop esi
lea ecx, [ebp - 0x10]
call fcn.102bde00
mov eax, dword [ebp - 4]
pop edi
pop ebx
leave
ret 0xc
Function at 0x10264336
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
and dword [ebp - 4], 0
push edi
push dword [0x1039deb8]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x10264356
mov edi, dword [eax + 0x74]
jmp 0x10264358
xor edi, edi
test edi, edi
jne 0x1026436c
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1026440d
and dword [ebp - 0x10], 0
push edi
push 0
push 1
lea ecx, [ebp - 0x10]
call fcn.102bde47
test eax, eax
jne 0x1026438e
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10264405
push esi
mov esi, dword [ebp + 8]
test esi, esi
je 0x102643a4
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x102643a6
xor esi, esi
test esi, esi
jne 0x102643b1
push 0x80070057
jmp 0x102643fe
cmp edi, dword [esi + 8]
je 0x102643bd
push 0x8004001e
jmp 0x102643fe
cmp dword [edi + 0x10], 0
je 0x102643e2
mov ecx, esi
call fcn.10261249
test eax, eax
je 0x102643e2
mov ecx, esi
call fcn.10261249
test byte [eax + 0x54], 0x20
je 0x102643e2
push 0x8004001f
jmp 0x102643fe
push dword [ebp + 0x10]
lea ecx, [esi + 0x34]
push dword [ebp + 0xc]
call fcn.102be8ad
test eax, eax
jl 0x102643fd
mov dword [ebp - 4], 1
jmp 0x10264404
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
pop esi
lea ecx, [ebp - 0x10]
call fcn.102bde00
mov eax, dword [ebp - 4]
pop edi
leave
ret 0xc

Function at 0x10264415
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push edi
push dword [0x1039deb8]
xor ebx, ebx
mov dword [ebp - 4], ebx
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
cmp eax, ebx
je 0x10264437
mov edi, dword [eax + 0x74]
jmp 0x10264439
xor edi, edi
cmp edi, ebx
jne 0x1026444d
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x102644e2
push edi
push ebx
push 1
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], ebx
call fcn.102bde47
test eax, eax
jne 0x1026446d
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x102644da
push esi
mov esi, dword [ebp + 8]
cmp esi, ebx
je 0x10264483
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x10264485
xor esi, esi
cmp esi, ebx
jne 0x10264490
push 0x80070057
jmp 0x102644be
cmp edi, dword [esi + 8]
je 0x1026449c
push 0x8004001e
jmp 0x102644be
cmp dword [edi + 0x10], ebx
je 0x102644c6
mov ecx, esi
call fcn.10261249
test eax, eax
je 0x102644c6
mov ecx, esi
call fcn.10261249
test byte [eax + 0x54], 0x20
je 0x102644c6
push 0x8004001f
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x102644d9
push ebx
push dword [ebp + 0xc]
lea ecx, [esi + 0x34]
call fcn.102be96d
mov dword [ebp - 4], 1
pop esi
lea ecx, [ebp - 0x10]
call fcn.102bde00
mov eax, dword [ebp - 4]
pop edi
pop ebx
leave
ret 8
Function at 0x102644eb
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push esi
push edi
push dword [0x1039deb8]
xor edi, edi
mov dword [ebp - 4], edi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
cmp eax, edi
je 0x1026450d
mov esi, dword [eax + 0x74]
jmp 0x1026450f
xor esi, esi
cmp esi, edi
jne 0x10264523
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10264613
push esi
push edi
push 1
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], edi
call fcn.102bde47
test eax, eax
jne 0x10264546
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1026460b
push ebx
mov ebx, dword [ebp + 0x1c]
mov eax, ebx
and eax, 0x31f
cmp eax, ebx
je 0x1026455f
push 0x80070057
jmp 0x10264604
mov edi, dword [ebp + 8]
test edi, edi
je 0x10264574
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x10264576
xor edi, edi
test edi, edi
je 0x10264555
cmp esi, dword [edi + 8]
je 0x10264586
push 0x8004001e
jmp 0x10264604
cmp dword [esi + 0x10], 0
je 0x102645ab
mov ecx, edi
call fcn.10261249
test eax, eax
je 0x102645ab
mov ecx, edi
call fcn.10261249
test byte [eax + 0x54], 0x20
je 0x102645ab
push 0x8004001f
jmp 0x10264604
test dword [edi + 0x38], 0x100000
je 0x102645b9
test bl, 1
jne 0x10264555
mov eax, ebx
shr eax, 1
test al, 1
je 0x102645d3
xor eax, eax
cmp dword [ebp + 0x14], eax
jge 0x102645cb
mov dword [ebp + 0x14], eax
cmp dword [ebp + 0x18], eax
jge 0x102645d3
mov dword [ebp + 0x18], eax
mov eax, ebx
shr eax, 8
mov ecx, edi
test al, 1
je 0x102645e4
and ebx, 0xfffffeff
push ebx
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
call fcn.102c078f
test eax, eax
jl 0x10264603
mov dword [ebp - 4], 1
jmp 0x1026460a
push eax
call dword [sym.imp.KERNEL32.dll_SetLastError]
pop ebx
lea ecx, [ebp - 0x10]
call fcn.102bde00
mov eax, dword [ebp - 4]
pop edi
pop esi
leave
ret 0x18

Function at 0x1026461c
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
and dword [ebp - 4], 0
push edi
push dword [0x1039deb8]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1026463c
mov edi, dword [eax + 0x74]
jmp 0x1026463e
xor edi, edi
test edi, edi
jne 0x1026464f
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x102646c7
and dword [ebp - 0x10], 0
push edi
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.102bde47
test eax, eax
jne 0x10264671
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x102646bf
mov eax, dword [ebp + 0x14]
and eax, 0xfffff
cmp eax, dword [ebp + 0x14]
jne 0x10264664
push esi
mov esi, dword [ebp + 8]
test esi, esi
je 0x10264698
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
shr eax, 2
test al, 1
je 0x10264698
mov ecx, esi
jmp 0x1026469a
xor ecx, ecx
pop esi
test ecx, ecx
je 0x10264664
cmp edi, dword [ecx + 8]
je 0x102646ab
push 0x8004001e
jmp 0x10264669
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
call fcn.102c05b7
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x10]
call fcn.102bde00
mov eax, dword [ebp - 4]
pop edi
leave
ret 0x14
Function at 0x102646cf
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push edi
push dword [0x1039deb8]
xor edi, edi
mov dword [ebp - 4], edi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
cmp eax, edi
je 0x102646f1
mov ebx, dword [eax + 0x74]
jmp 0x102646f3
xor ebx, ebx
cmp ebx, edi
jne 0x10264707
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x102647b5
push ebx
push edi
push edi
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], edi
call fcn.102bde47
test eax, eax
jne 0x10264729
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x102647ad
push esi
mov esi, dword [ebp + 8]
cmp esi, edi
je 0x10264741
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
shr eax, 2
test al, 1
je 0x10264741
mov edi, esi
test edi, edi
je 0x102647a1
cmp ebx, dword [edi + 8]
je 0x10264751
push 0x8004001e
jmp 0x102647a6
mov esi, dword [ebp + 0xc]
test esi, esi
je 0x10264766
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x10264768
xor esi, esi
test esi, esi
je 0x102647a1
cmp ebx, dword [esi + 8]
jne 0x1026474a
cmp dword [ebp + 0x10], 0
je 0x102647a1
mov ecx, esi
call fcn.10261249
mov ecx, edi
mov ebx, eax
call fcn.10261249
cmp eax, ebx
jne 0x102647a1
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push esi
push edi
call fcn.102c01f1
mov dword [ebp - 4], 1
jmp 0x102647ac
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
pop esi
lea ecx, [ebp - 0x10]
call fcn.102bde00
mov eax, dword [ebp - 4]
pop edi
pop ebx
leave
ret 0x10
Function at 0x102647be
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push ebx
push edi
push dword [0x1039deb8]
xor ebx, ebx
mov dword [ebp - 8], ebx
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
cmp eax, ebx
je 0x102647e3
mov edi, dword [eax + 0x74]
mov dword [ebp - 4], edi
jmp 0x102647e8
mov dword [ebp - 4], ebx
mov edi, ebx
cmp edi, ebx
jne 0x102647fc
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10264922
push esi
push edi
push ebx
push 1
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x14], ebx
call fcn.102bde47
test eax, eax
je 0x1026490e
cmp dword [ebp + 0x14], 6
ja 0x1026490e
mov esi, dword [ebp + 8]
cmp esi, ebx
je 0x10264836
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
shr eax, 2
mov dword [ebp + 8], esi
test al, 1
jne 0x10264839
mov dword [ebp + 8], ebx
mov eax, dword [ebp + 8]
cmp eax, ebx
je 0x1026490e
cmp edi, dword [eax + 8]
je 0x10264853
push 0x8004001e
jmp 0x10264913
mov ebx, dword [ebp + 0xc]
test ebx, ebx
jne 0x1026485e
xor esi, esi
jmp 0x1026487e
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x14]
shr eax, 2
and al, 1
movzx esi, al
neg esi
sbb esi, esi
and esi, ebx
je 0x1026490e
cmp edi, dword [esi + 8]
jne 0x10264849
mov ebx, dword [ebp + 0x10]
test ebx, ebx
jne 0x10264889
xor edi, edi
jmp 0x102648a8
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x14]
shr eax, 2
and al, 1
movzx edi, al
neg edi
sbb edi, edi
and edi, ebx
je 0x1026490e
mov eax, dword [ebp - 4]
cmp eax, dword [edi + 8]
jne 0x10264849
mov eax, dword [ebp - 4]
cmp dword [eax + 0x10], 0
je 0x102648d2
mov ecx, dword [ebp + 8]
call fcn.10261249
test eax, eax
je 0x102648d2
mov ecx, dword [ebp + 8]
call fcn.10261249
test byte [eax + 0x54], 0x20
je 0x102648d2
push 0x8004001f
jmp 0x10264913
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x38]
test eax, 0x100000
jne 0x1026490e
test esi, esi
je 0x102648f4
test al, 1
jne 0x102648f4
test byte [esi + 0x38], 1
je 0x102648f4
push 0x80040028
jmp 0x10264913
push dword [ebp + 0x14]
push edi
push esi
call fcn.102bd011
test eax, eax
jl 0x1026490b
mov dword [ebp - 8], 1
jmp 0x10264919
push eax
jmp 0x10264913
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea ecx, [ebp - 0x14]
call fcn.102bde00
pop esi
mov eax, dword [ebp - 8]
pop edi
pop ebx
leave
ret 0x10
Function at 0x1026492b
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
and dword [ebp - 4], 0
push esi
push dword [0x1039deb8]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1026494b
mov esi, dword [eax + 0x74]
jmp 0x1026494d
xor esi, esi
test esi, esi
jne 0x1026495e
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x102649c6
and dword [ebp - 0x10], 0
push esi
push 0
push 0
lea ecx, [ebp - 0x10]
call fcn.102bde47
test eax, eax
je 0x102649b3
push edi
mov edi, dword [ebp + 8]
test edi, edi
je 0x1026498d
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
shr eax, 2
test al, 1
je 0x1026498d
mov ecx, edi
jmp 0x1026498f
xor ecx, ecx
pop edi
test ecx, ecx
je 0x102649b3
cmp esi, dword [ecx + 8]
je 0x102649a0
push 0x8004001e
jmp 0x102649b8
cmp dword [ebp + 0xc], 5
ja 0x102649b3
push dword [ebp + 0xc]
call fcn.102bcc40
mov dword [ebp - 4], eax
jmp 0x102649be
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea ecx, [ebp - 0x10]
call fcn.102bde00
mov eax, dword [ebp - 4]
pop esi
leave
ret 8

Function at 0x102649ce
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push esi
push edi
push dword [0x1039deb8]
xor edi, edi
mov dword [ebp - 4], edi
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
cmp eax, edi
je 0x102649f0
mov esi, dword [eax + 0x74]
jmp 0x102649f2
xor esi, esi
cmp esi, edi
jne 0x10264a06
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10264abb
push esi
push edi
push 1
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], edi
call fcn.102bde47
test eax, eax
jne 0x10264a29
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10264ab3
push ebx
mov ebx, dword [ebp + 8]
push ebx
call fcn.10262469
mov edi, eax
test edi, edi
je 0x10264a54
cmp esi, dword [edi + 8]
je 0x10264a45
push 0x8004001e
jmp 0x10264a96
movzx eax, byte [ebp + 0x10]
cmp eax, dword [ebp + 0x10]
jne 0x10264a54
cmp dword [ebp + 0xc], 0
je 0x10264a5b
push 0x80070057
jmp 0x10264a96
cmp dword [esi + 0x10], 0
je 0x10264a9e
test ebx, ebx
je 0x10264a73
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x10264a75
xor ebx, ebx
test ebx, ebx
je 0x10264a91
mov ecx, ebx
call fcn.10261249
test eax, eax
je 0x10264a9e
mov ecx, ebx
call fcn.10261249
test byte [eax + 0x54], 0x20
je 0x10264a9e
push 0x8004001f
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10264ab2
push dword [ebp + 0x14]
mov eax, dword [edi]
push dword [ebp + 0x10]
mov ecx, edi
call dword [eax + 0x18]
mov dword [ebp - 4], 1
pop ebx
lea ecx, [ebp - 0x10]
call fcn.102bde00
mov eax, dword [ebp - 4]
pop edi
pop esi
leave
ret 0x10
Function at 0x10264ac4
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
and dword [ebp - 4], 0
push edi
push dword [0x1039deb8]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x10264ae4
mov edi, dword [eax + 0x74]
jmp 0x10264ae6
xor edi, edi
test edi, edi
jne 0x10264afa
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10264b97
and dword [ebp - 0x10], 0
push edi
push 0
push 1
lea ecx, [ebp - 0x10]
call fcn.102bde47
test eax, eax
jne 0x10264b1c
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10264b8f
push esi
mov esi, dword [ebp + 8]
test esi, esi
je 0x10264b32
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x10264b34
xor esi, esi
test esi, esi
jne 0x10264b3f
push 0x80070057
jmp 0x10264b6e
cmp edi, dword [esi + 8]
je 0x10264b4b
push 0x8004001e
jmp 0x10264b6e
cmp dword [edi + 0x10], 0
je 0x10264b76
mov ecx, esi
call fcn.10261249
test eax, eax
je 0x10264b76
mov ecx, esi
call fcn.10261249
test byte [eax + 0x54], 0x20
je 0x10264b76
push 0x8004001f
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10264b8e
mov ecx, esi
call fcn.10261249
mov eax, dword [eax + 0x50]
test eax, eax
je 0x10264b8e
mov ecx, eax
call fcn.1029d39d
mov dword [ebp - 4], eax
pop esi
lea ecx, [ebp - 0x10]
call fcn.102bde00
mov eax, dword [ebp - 4]
pop edi
leave
ret 4

Function at 0x10264b9f
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
and dword [ebp - 4], 0
push edi
push dword [0x1039deb8]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x10264bbf
mov edi, dword [eax + 0x74]
jmp 0x10264bc1
xor edi, edi
test edi, edi
jne 0x10264bd5
push 0x80040014
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10264c75
and dword [ebp - 0x10], 0
push edi
push 0
push 1
lea ecx, [ebp - 0x10]
call fcn.102bde47
test eax, eax
jne 0x10264bf7
push 0x80070057
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10264c6d
push esi
mov esi, dword [ebp + 8]
test esi, esi
je 0x10264c0d
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x14]
shr eax, 2
test al, 1
jne 0x10264c0f
xor esi, esi
test esi, esi
jne 0x10264c1a
push 0x80070057
jmp 0x10264c49
cmp edi, dword [esi + 8]
je 0x10264c26
push 0x8004001e
jmp 0x10264c49
cmp dword [edi + 0x10], 0
je 0x10264c51
mov ecx, esi
call fcn.10261249
test eax, eax
je 0x10264c51
mov ecx, esi
call fcn.10261249
test byte [eax + 0x54], 0x20
je 0x10264c51
push 0x8004001f
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10264c6c
mov ecx, esi
call fcn.10261249
mov eax, dword [eax + 0x50]
test eax, eax
je 0x10264c6c
push dword [ebp + 0xc]
mov ecx, eax
call fcn.102be15d
mov dword [ebp - 4], eax
pop esi
lea ecx, [ebp - 0x10]
call fcn.102bde00
mov eax, dword [ebp - 4]
pop edi
leave
ret 8