Function at 0x5140d0
Capabilities:
Get thread local storage value

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x180
push ebx
push esi
mov esi, dword [ebp + 8]
mov eax, dword [esi + 0xaa78]
mov ebx, dword [eax + 0x38]
xor ecx, ecx
push edi
push ecx
mov byte [ebp - 5], cl
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x3c], ecx
mov byte [ebp - 6], cl
and ebx, 0xfffff
push ebx
lea ecx, [ebp - 0x3c]
push ecx
lea edx, [ebp - 0xec]
push edx
lea ecx, [ebp - 0x18]
push ecx
lea edx, [ebp - 0x17c]
push edx
push 0x429260
push eax
mov ecx, esi
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x34], 2
mov dword [ebp - 0x30], 3
call fcn.004e14d0
mov edi, 0x20
cmp dword [ebp - 0x18], edi
ja 0x514414
cmp eax, 1
jne 0x51418b
push 0
push ebx
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0xec]
push ecx
mov ecx, dword [esi + 0xaa78]
lea edx, [ebp - 0x18]
push edx
lea eax, [ebp - 0x17c]
push eax
push 0x4291c0
push ecx
mov ecx, esi
call fcn.004e14d0
cmp dword [ebp - 0x18], edi
jbe 0x514187
mov eax, 0x80004005
mov byte [ebp - 5], 1
xor ecx, ecx
cmp eax, ecx
jne 0x514414
fld1
lea edx, [ebp - 0xdc]
fldz
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x24], edx
test ebx, ebx
mov byte [ebp - 7], 0
jbe 0x514224
mov esi, dword [ebp - 0x24]
mov edi, ebx
mov ecx, dword [esi]
mov eax, dword [ecx + 0x10]
fld qword [ecx + 0xa8]
mov eax, dword [eax + 8]
and eax, 0x100
xor edx, edx
or eax, edx
je 0x5141f9
cmp dword [ecx + 0x24], 0xffffffff
jne 0x5141f9
cmp byte [ebp - 5], dl
je 0x5141e0
fxch st(2)
fst dword [ebp - 0x10]
jmp 0x5141e9
fxch st(1)
fst dword [ebp - 0x10]
fxch st(1)
fxch st(2)
fld dword [ebp - 0x10]
fucomp st(3)
fnstsw ax
fstp st(2)
test ah, 0x44
jnp 0x5141ff
jmp 0x5141fb
fstp st(0)
mov byte [ebp - 7], 1
add esi, 4
sub edi, 1
jne 0x5141b5
cmp byte [ebp - 7], 0
je 0x514224
mov eax, dword [ebp - 0x14]
add dword [ebp - 0x24], 0x10
add eax, 1
cmp eax, 2
mov dword [ebp - 0x14], eax
jb 0x5141a8
mov eax, dword [ebp - 0xc]
jmp 0x514237
mov eax, dword [ebp - 0x14]
shl eax, 4
mov ecx, eax
lea eax, [ebp - 0xcc]
sub eax, ecx
mov dword [ebp - 0xc], eax
xor esi, esi
test ebx, ebx
mov byte [ebp - 7], 0
jbe 0x51440b
or edi, 0xffffffff
mov ecx, dword [ebp + esi*4 - 0xec]
mov eax, dword [ecx + 0x10]
fld qword [ecx + 0xa8]
mov eax, dword [eax + 8]
and eax, 0x100
xor edx, edx
or eax, edx
je 0x514296
cmp dword [ecx + 0x24], edi
jne 0x514296
cmp byte [ebp - 5], dl
je 0x514277
fxch st(1)
fst dword [ebp - 0x10]
jmp 0x514280
fxch st(2)
fst dword [ebp - 0x10]
fxch st(2)
fxch st(1)
fxch st(1)
fstp dword [ebp - 0x28]
fld dword [ebp - 0x28]
fld dword [ebp - 0x10]
fucompp
fnstsw ax
test ah, 0x44
jnp 0x51429c
jmp 0x514298
fstp st(0)
mov byte [ebp - 7], 1
add esi, 1
cmp esi, ebx
jb 0x514248
cmp byte [ebp - 7], 0
fstp st(1)
fstp st(0)
jne 0x5147f0
mov eax, dword [ebp - 0xc]
test eax, eax
je 0x5147f0
xor ecx, ecx
test ebx, ebx
jbe 0x5142fb
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + ecx*4]
xor eax, eax
cmp dword [ebp - 0x20], eax
jbe 0x5142e0
mov esi, dword [edx + 0x6c]
cmp esi, dword [ebp + eax*4 - 0x3c]
je 0x5142e0
add eax, 1
cmp eax, dword [ebp - 0x20]
jb 0x5142d2
mov esi, dword [ebp - 0x20]
cmp eax, esi
jne 0x5142f4
mov eax, dword [edx + 0x6c]
mov dword [ebp + esi*4 - 0x3c], eax
add esi, 1
mov dword [ebp - 0x20], esi
add ecx, 1
cmp ecx, ebx
jb 0x5142c2
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
jbe 0x5143b6
mov edx, dword [ebp - 0x24]
mov ebx, dword [ebp + edx*4 - 0x3c]
cmp ebx, 0xffffffff
je 0x514add
mov eax, dword [ebx + 0x38]
and eax, 0xf0000000
cmp eax, 0x60000000
je 0x514add
cmp eax, 0xa0000000
je 0x514add
mov eax, dword [ebp + 8]
test byte [eax + 0xae], 0x40
je 0x51435b
mov eax, ebx
call fcn.004ce460
test al, al
je 0x514add
mov edi, dword [ebx + 8]
xor edx, edx
cmp dword [ebp - 0x1c], edx
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x10], edx
jbe 0x51439b
jmp 0x514370
test edi, edi
jbe 0x514393
mov ecx, dword [ebp - 0xc]
mov esi, dword [ecx + edx*4]
mov eax, dword [ebx + 0xc]
mov ecx, edi
nop
cmp dword [eax], esi
jne 0x51438b
add dword [ebp - 0x10], 1
mov edi, dword [ebp - 0x2c]
add eax, 4
sub ecx, 1
jne 0x514380
add edx, 1
cmp edx, dword [ebp - 0x1c]
jb 0x514370
cmp dword [ebp - 0x10], edi
jne 0x514add
mov eax, dword [ebp - 0x24]
add eax, 1
cmp eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
jb 0x514312
cmp byte [ebp - 6], 0
jne 0x514add
xor edx, edx
xor esi, esi
or edi, 0xffffffff
cmp dword [ebp - 0x1c], edx
jbe 0x5143f0
mov ebx, dword [ebp - 0xc]
nop
mov eax, dword [ebx + edx*4]
mov ecx, dword [eax + 0x80]
cmp esi, ecx
jae 0x5143df
mov esi, ecx
mov eax, dword [eax + 0x7c]
cmp edi, eax
jbe 0x5143e8
mov edi, eax
add edx, 1
cmp edx, dword [ebp - 0x1c]
jb 0x5143d0
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x10]
test eax, eax
mov dword [ebp - 0x28], eax
jbe 0x514a24
mov edx, dword [ecx + 0x14]
mov ecx, dword [edx]
jmp 0x514a26
fstp st(1)
fstp st(0)
jmp 0x5142b4
mov eax, dword [esi + 0xaa78]
mov edi, dword [eax + 0x38]
push 0
and edi, 0xfffff
push edi
lea edx, [ebp - 0x3c]
push edx
lea ecx, [ebp - 0xec]
push ecx
lea edx, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x17c]
push ecx
push 0x428db0
push eax
mov ecx, esi
mov dword [ebp - 0x1c], edi
mov byte [ebp - 7], 1
call fcn.004e14d0
mov ebx, eax
cmp ebx, 1
jne 0x514489
push 0
push edi
lea edx, [ebp - 0x3c]
push edx
lea eax, [ebp - 0xec]
push eax
mov eax, dword [esi + 0xaa78]
lea ecx, [ebp - 0x18]
push ecx
lea edx, [ebp - 0x17c]
push edx
push 0x428ef0
push eax
mov ecx, esi
call fcn.004e14d0
mov ebx, eax
mov byte [ebp - 7], 0
test ebx, ebx
jne 0x514598
xor edx, edx
test edi, edi
jbe 0x51458d
fld1
fldz
mov edi, dword [ebp + edx*4 - 0xec]
mov eax, dword [edi + 0x10]
mov eax, dword [eax + 8]
mov esi, dword [ebp + edx*4 - 0xdc]
mov ebx, dword [ebp + edx*4 - 0xbc]
and eax, 0x100
xor ecx, ecx
or eax, ecx
je 0x5147ec
mov eax, dword [esi + 0x10]
mov eax, dword [eax + 8]
and eax, 0x100
or eax, ecx
je 0x5147ec
mov eax, dword [ebx + 0x10]
mov eax, dword [eax + 8]
and eax, 0x100
or eax, ecx
je 0x5147ec
fld st(1)
fcomp qword [edi + 0xa8]
fnstsw ax
test ah, 0x44
jp 0x5147ec
cmp byte [ebp - 7], cl
sete cl
lea ecx, [ecx + ecx - 1]
mov dword [ebp - 0x28], ecx
fild dword [ebp - 0x28]
fcomp qword [esi + 0xa8]
fnstsw ax
test ah, 0x44
jp 0x5147ec
fcom qword [ebx + 0xa8]
fnstsw ax
test ah, 0x44
jp 0x5147ec
mov edi, dword [ebp + edx*4 - 0xcc]
mov eax, dword [edi + 0x10]
mov ecx, dword [ebp + 8]
cmp eax, dword [ecx + 0x28fc]
je 0x51454d
mov byte [ebp - 6], 1
mov ecx, dword [ebp - 0x20]
xor eax, eax
test ecx, ecx
jbe 0x514566
mov esi, dword [edi + 0x6c]
cmp esi, dword [ebp + eax*4 - 0x3c]
je 0x514566
add eax, 1
cmp eax, ecx
jb 0x514559
cmp eax, ecx
jne 0x51457d
cmp byte [ebp - 6], 0
jne 0x51457d
mov eax, dword [edi + 0x6c]
mov dword [ebp + ecx*4 - 0x3c], eax
add ecx, 1
mov dword [ebp - 0x20], ecx
add edx, 1
cmp edx, dword [ebp - 0x1c]
jb 0x51449f
fstp st(1)
fstp st(0)
lea ecx, [ebp - 0xcc]
jmp 0x5142fe
cmp ebx, 1
jne 0x514a11
push 0
push edi
lea edx, [ebp - 0x3c]
push edx
lea eax, [ebp - 0xec]
push eax
mov eax, dword [esi + 0xaa78]
lea ecx, [ebp - 0x18]
push ecx
lea edx, [ebp - 0x17c]
push edx
push 0x429030
push eax
mov ecx, esi
call fcn.004e14d0
mov ebx, eax
test ebx, ebx
jne 0x5147fe
test edi, edi
mov dword [ebp - 0x14], eax
jbe 0x514301
fld1
fldz
fld qword [0x468928]
mov esi, dword [ebp - 0x14]
mov ecx, dword [ebp + esi*4 - 0xbc]
mov edx, dword [ebp + esi*4 - 0xac]
fld qword [ecx + 0xa8]
mov eax, dword [ecx + 0x10]
fld qword [edx + 0xa8]
mov edi, dword [edx + 0x10]
xor bl, bl
cmp ecx, dword [ebp + esi*4 - 0xcc]
mov dword [ebp - 0x10], eax
mov byte [ebp - 5], bl
jne 0x514639
mov eax, dword [edi + 8]
and eax, 0x100
xor esi, esi
or eax, esi
je 0x514639
fld st(2)
fucomp st(1)
fnstsw ax
test ah, 0x44
jnp 0x514661
mov eax, dword [ebp - 0x14]
cmp edx, dword [ebp + eax*4 - 0xcc]
jne 0x514665
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 8]
and eax, 0x100
xor esi, esi
or eax, esi
je 0x514665
fld st(2)
fucomp st(2)
fnstsw ax
test ah, 0x44
jp 0x514665
mov byte [ebp - 5], 1
cmp byte [ebp - 5], 0
lea eax, [ebp - 0xcc]
mov dword [ebp - 0xc], eax
jne 0x51471b
mov eax, dword [ebp - 0x14]
mov esi, dword [ebp + eax*4 - 0xdc]
mov eax, dword [ecx + 0x44]
cmp eax, esi
je 0x514693
cmp eax, 0xffffffff
je 0x5146bf
cmp dword [esi + 0x44], eax
jne 0x5146bf
mov eax, dword [esi + 0x48]
xor eax, 0x400
cmp dword [ecx + 0x48], eax
jne 0x5146bf
mov eax, dword [edi + 8]
and eax, 0x100
xor ecx, ecx
or eax, ecx
je 0x5146bf
fld st(4)
fucompp
fnstsw ax
test ah, 0x44
jp 0x5146c1
mov byte [ebp - 5], 1
jmp 0x5146c1
fstp st(0)
mov eax, dword [edx + 0x44]
cmp eax, esi
je 0x5146d2
cmp eax, 0xffffffff
je 0x514702
cmp dword [esi + 0x44], eax
jne 0x514702
mov ecx, dword [esi + 0x48]
xor ecx, 0x400
cmp dword [edx + 0x48], ecx
jne 0x514702
mov edx, dword [ebp - 0x10]
mov eax, dword [edx + 8]
and eax, 0x100
xor ecx, ecx
or eax, ecx
je 0x514702
fld st(3)
fucompp
fnstsw ax
test ah, 0x44
jp 0x514704
mov byte [ebp - 5], 1
jmp 0x514704
fstp st(0)
cmp byte [ebp - 5], 0
mov bl, 1
je 0x5147ea
lea eax, [ebp - 0xdc]
mov dword [ebp - 0xc], eax
jmp 0x51471f
fstp st(0)
fstp st(0)
test bl, bl
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp + ecx*4 - 0xec]
mov edi, ecx
je 0x514738
mov esi, dword [ebp + edi*4 - 0xcc]
jmp 0x514742
mov eax, dword [ebp - 0x14]
mov esi, dword [ebp + eax*4 - 0xdc]
mov eax, dword [edx + 0x10]
mov eax, dword [eax + 8]
and eax, 0x100
xor ecx, ecx
or eax, ecx
je 0x5147ea
fld st(1)
fcomp qword [edx + 0xa8]
fnstsw ax
test ah, 0x44
jp 0x5147ea
mov eax, dword [esi + 0x10]
mov eax, dword [eax + 8]
and eax, 0x100
or eax, ecx
je 0x5147ea
fld st(2)
fcomp qword [esi + 0xa8]
fnstsw ax
test ah, 0x44
jp 0x5147ea
mov ecx, dword [ebp - 0xc]
mov edx, dword [ecx + edi*4]
mov eax, dword [edx + 0x10]
mov ecx, dword [ebp + 8]
cmp eax, dword [ecx + 0x28fc]
je 0x5147a0
mov byte [ebp - 6], 1
mov ecx, dword [ebp - 0x20]
xor eax, eax
test ecx, ecx
jbe 0x5147b9
mov esi, dword [edx + 0x6c]
cmp esi, dword [ebp + eax*4 - 0x3c]
je 0x5147b9
add eax, 1
cmp eax, ecx
jb 0x5147ac
cmp eax, ecx
jne 0x5147d0
cmp byte [ebp - 6], 0
jne 0x5147d0
mov edx, dword [edx + 0x6c]
mov dword [ebp + ecx*4 - 0x3c], edx
add ecx, 1
mov dword [ebp - 0x20], ecx
add edi, 1
cmp edi, dword [ebp - 0x1c]
mov dword [ebp - 0x14], edi
jb 0x5145ec
fstp st(2)
fstp st(1)
fstp st(0)
jmp 0x514301
fstp st(2)
fstp st(1)
fstp st(0)
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
xor edi, edi
test byte [esi + 0xab], 2
mov dword [ebp - 0xc], edi
mov dword [ebp - 0x14], edi
je 0x51484b
push edi
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x17c]
push ecx
lea edx, [ebp - 0xc]
push edx
push esi
call fcn.00513420
test eax, eax
je 0x514843
push edi
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x17c]
push ecx
lea edx, [ebp - 0xc]
push edx
push esi
call fcn.00513bc0
test eax, eax
jne 0x51484b
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x14], eax
jmp 0x514861
mov eax, dword [esi + 0xaa78]
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0xc], eax
cmp eax, edi
je 0x5149e7
mov eax, dword [eax + 0x38]
mov ecx, eax
and ecx, 0xfff00000
cmp ecx, 0x70b00000
jne 0x5149e7
fld1
and eax, 0xfffff
lea ecx, [eax*4]
mov dword [ebp - 0x1c], eax
neg eax
xor edi, edi
add eax, eax
add eax, eax
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], ecx
xor ebx, ebx
cmp dword [ebp - 0x1c], ebx
jbe 0x514945
mov edx, dword [ebp - 0xc]
mov eax, dword [edx + 4]
add ecx, eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x10], ecx
jmp 0x5148c6
mov eax, dword [ebp - 0x4c]
mov ecx, dword [eax + edi]
mov edx, dword [ebp - 0x10]
mov edx, dword [edx]
fld qword [edx + 0xa8]
mov eax, dword [ecx + 8]
xor esi, esi
test dword [ecx + 0x48], 0x400
je 0x5148e7
and eax, 8
jmp 0x5148ea
and eax, 4
or eax, esi
je 0x514943
mov eax, dword [edx + 0x10]
mov eax, dword [eax + 8]
and eax, 0x100
xor esi, esi
or eax, esi
je 0x514943
fld st(1)
fucompp
fnstsw ax
test ah, 0x44
jp 0x514945
cmp dword [edx + 0x24], 0xffffffff
jne 0x514945
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 4]
mov eax, dword [edi + edx]
mov ecx, dword [ecx + 0x10]
mov edx, dword [ebp + 8]
cmp ecx, dword [edx + 0x28fc]
mov dword [ebp + ebx*4 - 0xfc], eax
je 0x514932
mov byte [ebp - 6], 1
add dword [ebp - 0x10], 4
add ebx, 1
add edi, 4
cmp ebx, dword [ebp - 0x1c]
jb 0x5148c3
jmp 0x514945
fstp st(0)
mov eax, dword [ebp - 0x1c]
cmp ebx, eax
je 0x514974
mov eax, dword [ebp - 0x24]
mov edi, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x28]
add edi, dword [ebp - 0x40]
add ecx, dword [ebp - 0x2c]
add eax, 1
cmp eax, 2
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x28], ecx
jb 0x5148a8
fstp st(0)
jmp 0x5149d2
test eax, eax
fstp st(0)
jbe 0x5149d2
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0xc]
imul ecx, eax
mov edx, dword [edx + 4]
lea edi, [edx + ecx*4]
mov ecx, dword [ebp - 0x20]
mov ebx, eax
mov esi, dword [edi]
cmp dword [esi + 0x44], 0xffffffff
jne 0x5149c3
xor eax, eax
test ecx, ecx
jbe 0x5149ad
mov edx, dword [esi + 0x6c]
nop
cmp edx, dword [ebp + eax*4 - 0x3c]
je 0x5149ad
add eax, 1
cmp eax, ecx
jb 0x5149a0
cmp eax, ecx
jne 0x5149c7
cmp byte [ebp - 6], 0
jne 0x5149c7
mov eax, dword [esi + 0x6c]
mov dword [ebp + ecx*4 - 0x3c], eax
add ecx, 1
jmp 0x5149c7
mov byte [ebp - 6], 1
add edi, 4
sub ebx, 1
jne 0x51498e
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x24], 2
je 0x5147f0
lea ecx, [ebp - 0xfc]
mov dword [ebp - 0xc], ecx
xor ebx, ebx
cmp dword [ebp - 0x14], 0
je 0x514a11
mov eax, dword [ebp - 0x14]
lea esi, [eax + 4]
lea edi, [eax + 0x3c]
call fcn.004cc530
mov eax, dword [ebp - 0x14]
lea esi, [eax + 0xc]
lea edi, [eax + 0x3e]
call fcn.004cc530
mov esi, dword [ebp - 0x14]
call fcn.004ce8a0
test ebx, ebx
je 0x514301
mov eax, ebx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
xor ecx, ecx
test eax, eax
mov dword [ebp - 0x40], 0
jbe 0x514e58
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x10]
mov dword [ebp - 0x2c], edx
mov edi, edi
test dword [ecx + 0x38], 0xfff00000
je 0x514aa3
mov edx, dword [ebp - 0x18]
xor eax, eax
test edx, edx
jbe 0x514a62
cmp ecx, dword [ebp + eax*4 - 0x17c]
je 0x514a62
add eax, 1
cmp eax, edx
jb 0x514a52
cmp eax, edx
jne 0x514aa3
mov eax, dword [ecx]
test eax, eax
jbe 0x514aa3
mov esi, dword [ecx + 4]
mov ebx, eax
mov edi, dword [esi]
xor eax, eax
cmp dword [ebp - 0x1c], eax
jbe 0x514a9b
mov edx, edi
lea esp, [esp]
mov ecx, dword [ebp - 0xc]
mov ecx, dword [ecx + eax*4]
cmp ecx, edx
je 0x514a8f
cmp dword [edi + 0x44], ecx
jne 0x514a93
mov byte [ebp - 6], 1
add eax, 1
cmp eax, dword [ebp - 0x1c]
jb 0x514a80
add esi, 4
sub ebx, 1
jne 0x514a71
mov eax, dword [ebp - 0x40]
add eax, 1
cmp eax, dword [ebp - 0x28]
mov dword [ebp - 0x40], eax
jb 0x514abb
mov edx, dword [ebp - 0x28]
xor ecx, ecx
mov dword [ebp - 0x40], edx
jmp 0x514ac7
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x14]
mov edx, dword [ebp - 0x40]
mov ecx, dword [ecx + edx*4]
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x2c]
jb 0x514a40
cmp byte [ebp - 6], 0
je 0x514e58
mov eax, dword [0x776138]
test eax, eax
jge 0x514aea
xor eax, eax
jmp 0x514af1
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
cmp dword [eax + 0x10], 0
je 0x514b18
mov ecx, dword [eax + 0x10]
test ecx, ecx
jne 0x514b02
mov esi, ecx
jmp 0x514b26
mov edx, dword [ecx]
test edx, edx
mov dword [eax + 0x10], edx
jne 0x514b0e
mov dword [eax + 0x14], edx
mov dword [ecx], 0xfefefefe
mov esi, ecx
jmp 0x514b26
mov ecx, dword [eax + 0xc]
push 0x10
push 0x40
call fcn.007515ae
mov esi, eax
xor ebx, ebx
cmp esi, ebx
je 0x5147f0
mov edi, dword [ebp - 0x1c]
or eax, 0xffffffff
mov dword [esi + 0x10], eax
mov dword [esi + 0x20], eax
mov eax, edi
push ebx
and eax, 0xfffff
or eax, 0x10000000
push esi
mov edx, edi
mov ecx, edi
mov dword [esi], ebx
mov dword [esi + 8], ebx
mov dword [esi + 0x38], ebx
mov dword [esi + 4], ebx
mov word [esi + 0x3c], bx
mov dword [esi + 0xc], ebx
mov word [esi + 0x3e], bx
mov dword [esi + 0x14], ebx
mov dword [esi + 0x18], ebx
mov dword [esi + 0x1c], ebx
mov dword [esi + 0x24], ebx
mov dword [esi + 0x30], ebx
mov dword [esi + 0x34], ebx
call fcn.004cc5e0
cmp eax, ebx
mov dword [ebp - 0x2c], eax
jge 0x514c6e
cmp word [esi + 0x3c], bx
je 0x514bcf
mov eax, dword [0x776138]
cmp eax, ebx
jge 0x514b99
xor eax, eax
jmp 0x514ba0
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
movzx ecx, word [esi + 0x3c]
cmp ecx, dword [eax + 0x120]
ja 0x514bc8
mov edx, dword [esi + 4]
mov eax, dword [eax + 0x11c]
shl ecx, 4
cmp edx, ebx
lea ecx, [ecx + eax - 0x10]
je 0x514bc8
mov eax, dword [ecx + 4]
mov dword [edx], eax
mov dword [ecx + 4], edx
mov word [esi + 0x3c], bx
mov dword [esi + 4], ebx
cmp word [esi + 0x3e], bx
je 0x514c18
mov eax, dword [0x776138]
cmp eax, ebx
jge 0x514be2
xor eax, eax
jmp 0x514be9
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
movzx ecx, word [esi + 0x3e]
cmp ecx, dword [eax + 0x120]
ja 0x514c11
mov edx, dword [esi + 0xc]
mov eax, dword [eax + 0x11c]
shl ecx, 4
cmp edx, ebx
lea ecx, [ecx + eax - 0x10]
je 0x514c11
mov eax, dword [ecx + 4]
mov dword [edx], eax
mov dword [ecx + 4], edx
mov word [esi + 0x3e], bx
mov dword [esi + 0xc], ebx
mov eax, dword [0x776138]
cmp eax, ebx
jl 0x514c62
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
test ebx, ebx
je 0x514c62
push 0x40
push 0xfe
push esi
call sub.msvcrt.dll_memset
mov dword [esi], 0
mov eax, dword [ebx + 0x14]
add esp, 0xc
test eax, eax
je 0x514c5c
mov dword [eax], esi
mov eax, dword [ebp - 0x2c]
mov dword [ebx + 0x14], esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov dword [ebx + 0x10], esi
mov dword [ebx + 0x14], esi
mov eax, dword [ebp - 0x2c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0xaa78]
mov edx, dword [eax + 0x30]
mov ecx, dword [ebp - 0xc]
lea ebx, [edi*4]
mov dword [esi + 0x30], edx
mov edx, dword [esi + 4]
mov eax, dword [eax + 0x34]
push ebx
push ecx
push edx
mov dword [esi + 0x34], eax
call sub.msvcrt.dll_memcpy
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xaa78]
mov edx, dword [ecx + 0xc]
mov eax, dword [esi + 0xc]
add esp, 0xc
push ebx
push edx
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
xor eax, eax
test edi, edi
jbe 0x514cd1
jmp 0x514cc0
mov ecx, dword [esi + 0xc]
mov ecx, dword [ecx + eax*4]
or dword [ecx + 0x48], 1
add eax, 1
cmp eax, edi
jb 0x514cc0
mov edx, dword [ebp - 0x18]
xor edi, edi
xor ecx, ecx
cmp edx, edi
jbe 0x514cf6
lea esp, [esp]
mov eax, dword [ebp + ecx*4 - 0x17c]
add ecx, 1
cmp ecx, edx
mov dword [eax + 0x38], edi
mov dword [eax], edi
mov dword [eax + 8], edi
jb 0x514ce0
xor eax, eax
cmp dword [esi + 8], edi
jbe 0x514d1a
or ecx, 0xffffffff
mov edx, dword [esi + 0xc]
mov edx, dword [edx + eax*4]
mov dword [edx + 0x6c], esi
mov edx, dword [esi + 0xc]
mov edx, dword [edx + eax*4]
add eax, 1
mov dword [edx + 0x70], ecx
cmp eax, dword [esi + 8]
jb 0x514d00
mov edx, dword [ebp + 8]
mov edi, dword [edx + 0xaa78]
mov eax, dword [edi + 0x10]
mov ecx, dword [edx + 0x10]
cmp eax, ecx
jae 0x514d3c
mov ebx, dword [edx + 0x14]
cmp dword [ebx + eax*4], edi
jne 0x514d3c
mov ebx, eax
mov dword [ebp - 0xc], ebx
jmp 0x514d65
mov ebx, ecx
test ebx, ebx
jbe 0x514d56
mov eax, dword [edx + 0x14]
lea eax, [eax + ebx*4]
sub eax, 4
sub ebx, 1
cmp dword [eax], edi
je 0x514d59
test ebx, ebx
ja 0x514d48
sub ebx, 1
cmp ebx, 0xffffffff
mov dword [ebp - 0xc], ebx
je 0x514f2a
cmp word [edi + 0x3c], 0
je 0x514db1
mov eax, dword [0x776138]
test eax, eax
jge 0x514d79
xor eax, eax
jmp 0x514d80
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
movzx ecx, word [edi + 0x3c]
cmp ecx, dword [eax + 0x120]
ja 0x514da8
mov edx, dword [edi + 4]
mov eax, dword [eax + 0x11c]
shl ecx, 4
test edx, edx
lea ecx, [eax + ecx - 0x10]
je 0x514da8
mov eax, dword [ecx + 4]
mov dword [edx], eax
mov dword [ecx + 4], edx
xor eax, eax
mov word [edi + 0x3c], ax
mov dword [edi + 4], eax
cmp word [edi + 0x3e], 0
je 0x514dfd
mov eax, dword [0x776138]
test eax, eax
jge 0x514dc5
xor eax, eax
jmp 0x514dcc
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
movzx ecx, word [edi + 0x3e]
cmp ecx, dword [eax + 0x120]
ja 0x514df4
mov edx, dword [edi + 0xc]
mov eax, dword [eax + 0x11c]
shl ecx, 4
test edx, edx
lea ecx, [eax + ecx - 0x10]
je 0x514df4
mov eax, dword [ecx + 4]
mov dword [edx], eax
mov dword [ecx + 4], edx
xor eax, eax
mov word [edi + 0x3e], ax
mov dword [edi + 0xc], eax
mov eax, dword [0x776138]
test eax, eax
jl 0x514e3d
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
test ebx, ebx
je 0x514e3a
push 0x40
push 0xfe
push edi
call sub.msvcrt.dll_memset
mov dword [edi], 0
mov eax, dword [ebx + 0x14]
add esp, 0xc
test eax, eax
je 0x514e34
mov dword [eax], edi
jmp 0x514e37
mov dword [ebx + 0x10], edi
mov dword [ebx + 0x14], edi
mov ebx, dword [ebp - 0xc]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x14]
mov dword [ecx + ebx*4], esi
mov dword [esi + 0x10], ebx
or dword [eax + 0x18], 6
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
cmp dword [ebp - 0x20], 0
mov dword [ebp - 0x10], 0
jbe 0x514f00
mov edi, dword [ebp + 8]
mov ebx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x10]
mov eax, dword [edi + 0xaa78]
mov ecx, dword [ebp + edx*4 - 0x3c]
mov edx, dword [eax + 8]
xor esi, esi
test edx, edx
mov dword [ebp + 8], edx
jbe 0x514ecf
xor eax, eax
cmp dword [ecx + 8], eax
jbe 0x514ec8
nop
mov edx, dword [ecx + 0xc]
mov edx, dword [edx + eax*4]
mov ebx, dword [ebp - 0xc]
cmp edx, dword [ebx + esi*4]
jne 0x514eba
mov edx, dword [edi + 0xaa78]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + esi*4]
mov ebx, dword [ecx + 0xc]
mov dword [ebx + eax*4], edx
mov edx, dword [ecx + 0xc]
mov edx, dword [edx + eax*4]
or dword [edx + 0x48], 1
add eax, 1
cmp eax, dword [ecx + 8]
jb 0x514e90
mov ebx, dword [ebp - 0x18]
mov edx, dword [ebp + 8]
add esi, 1
cmp esi, edx
jb 0x514e88
xor edx, edx
xor eax, eax
cmp ebx, edx
jbe 0x514eee
cmp ecx, dword [ebp + eax*4 - 0x17c]
jne 0x514ee7
mov dword [ebp + eax*4 - 0x17c], edx
add eax, 1
cmp eax, ebx
jb 0x514ed7
mov eax, dword [ebp - 0x10]
add eax, 1
cmp eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], eax
jb 0x514e6f
mov edx, dword [ebp - 0x18]
xor esi, esi
xor ecx, ecx
cmp edx, esi
jbe 0x514f2a
jmp 0x514f10
mov eax, dword [ebp + ecx*4 - 0x17c]
cmp eax, esi
je 0x514f23
mov dword [eax + 0x38], esi
mov dword [eax], esi
mov dword [eax + 8], esi
add ecx, 1
cmp ecx, edx
jb 0x514f10
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 4