joyce8/EMBER2024-capa huggingface dataset:
Function at 0x4328a4
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
mov ebx, dword [ebp + 8]
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov esi, eax
mov eax, dword [ebx]
test eax, eax
je 0x43291b
cmp eax, dword [esi + 0x84]
jg 0x43291b
mov edx, dword [esi + 0x88]
cmp dword [edx + eax*8 + 4], 0
je 0x43291b
cmp dword [ebx + 0xc], 0
je 0x4328e9
mov ecx, dword [esi + 0x88]
mov eax, dword [ecx + eax*8 + 4]
push eax
call dword [ebx + 0xc]
pop ecx
mov edx, dword [esi + 0x88]
mov ecx, dword [ebx]
mov eax, dword [edx + ecx*8 + 4]
push eax
call fcn.0043b450
pop ecx
mov edx, dword [esi + 0x88]
mov ecx, dword [ebx]
xor eax, eax
mov dword [edx + ecx*8 + 4], eax
mov edx, dword [esi + 0x88]
mov ecx, dword [ebx]
xor eax, eax
mov dword [edx + ecx*8], eax
xor edx, edx
mov dword [ebx], edx
pop esi
pop ebx
pop ebp
ret

Function at 0x432a00
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov ebx, eax
mov eax, dword [ebp + 8]
movzx esi, word [eax + 4]
cmp esi, dword [ebx + 0x1c8]
jle 0x432a63
mov eax, esi
shl eax, 3
push eax
mov edx, dword [ebx + 0x1c4]
push edx
call fcn.0043b3c0
mov edi, eax
mov edx, esi
mov dword [ebx + 0x1c4], edi
add esp, 8
mov eax, dword [ebx + 0x1c8]
sub edx, eax
shl edx, 3
shl eax, 3
push edx
add eax, edi
push 0
push eax
call fcn.004ab738
add esp, 0xc
mov dword [ebx + 0x1c8], esi
mov eax, esi
shl eax, 3
add eax, dword [ebx + 0x1c4]
add eax, 0xfffffff8
pop edi
pop esi
pop ebx
pop ebp
ret

Function at 0x432bb4
Capabilities:
Get thread local storage value

Disassembly:
push ebx
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov ebx, eax
sub dword [ebx], 4
mov eax, dword [ebx]
cmp eax, dword [ebx + 0xc]
ja 0x432bdf
push 0
push 0
push 0
push 0x233b
call fcn.00457568
add esp, 0x10
mov edx, dword [ebx]
mov eax, dword [edx]
test dword [eax], 0xb405
je 0x432bf2
push eax
call fcn.0043f008
pop ecx
pop ebx
ret

Function at 0x432ccc
Capabilities:
Get thread local storage value

Disassembly:
push ebx
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov ebx, eax
add dword [ebx], 4
mov eax, dword [ebx]
cmp eax, dword [ebx + 4]
jne 0x432ce9
call fcn.00432d24
mov edx, dword [ebx]
mov eax, dword [edx - 4]
pop ebx
ret
Function at 0x432d24
Capabilities:
Get thread local storage value

Disassembly:
push ebx
push esi
push edi
push ebp
push ecx
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov ebx, eax
mov ebp, dword [ebx + 0xc]
mov edi, dword [ebx + 8]
sub ebp, edi
test ebp, ebp
jns 0x432d45
add ebp, 3
sar ebp, 2
mov eax, dword [ebx]
sub eax, edi
test eax, eax
jns 0x432d53
add eax, 3
sar eax, 2
mov dword [esp], eax
mov esi, dword [ebx + 4]
sub esi, edi
test esi, esi
jns 0x432d65
add esi, 3
sar esi, 2
mov eax, dword [ebx + 0x28]
add eax, 0x14
shl eax, 2
push eax
push edi
call fcn.0043b3c0
add esp, 8
mov dword [ebx + 8], eax
shl ebp, 2
mov edx, dword [esp]
shl edx, 2
add edx, dword [ebx + 8]
mov dword [ebx], edx
add ebp, dword [ebx + 8]
mov dword [ebx + 0xc], ebp
add dword [ebx + 0x28], 0x14
mov ecx, dword [ebx + 0x28]
shl ecx, 2
add ecx, dword [ebx + 8]
mov dword [ebx + 4], ecx
push 0x18
call fcn.0043b368
mov edi, eax
mov eax, dword [ebx + 8]
pop ecx
xor ecx, ecx
mov dword [eax + esi*4], edi
mov edx, dword [ebx + 8]
mov dword [edi], ecx
inc esi
cmp esi, dword [ebx + 0x28]
jl 0x432da2
pop edx
pop ebp
pop edi
pop esi
pop ebx
ret

Function at 0x432dc8
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov ebx, eax
mov esi, dword [ebp + 8]
shl esi, 2
add esi, dword [ebx + 8]
jmp 0x432dfb
sub dword [ebx], 4
mov eax, dword [ebx]
mov eax, dword [eax]
test dword [eax], 0xb405
je 0x432dfb
push eax
call fcn.0043f008
pop ecx
cmp esi, dword [ebx]
jb 0x432de5
pop esi
pop ebx
pop ebp
ret

Function at 0x432e04
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
mov ebx, dword [ebp + 8]
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov esi, eax
movzx eax, word [ebp + 0xc]
shl eax, 2
mov edx, dword [esi]
sub edx, eax
add edx, 0xfffffff8
mov dword [ebp - 4], edx
mov ecx, dword [ebp - 4]
mov edi, dword [ecx]
test byte [edi + 1], 1
jne 0x432e4d
push 0
push str.hb_vmDo__
push 0
push 0x2337
call fcn.00457568
add esp, 0x10
mov eax, dword [esi + 0xc]
sub eax, dword [esi + 8]
test eax, eax
jns 0x432e5a
add eax, 3
sar eax, 2
mov dword [ebx], eax
mov edx, dword [esi + 0x8c]
mov dword [ebx + 8], edx
call fcn.00443bac
mov dword [ebx + 4], eax
xor ecx, ecx
mov word [ebx + 0x10], cx
mov word [ebx + 0xe], cx
mov word [ebx + 0xc], cx
mov word [ebx + 0x12], 0
mov dword [edi + 0xc], ebx
mov ax, word [ebp + 0xc]
mov word [edi + 0x10], ax
mov dx, word [ebp + 0xc]
mov word [edi + 0x12], dx
mov eax, dword [ebp - 4]
mov dword [esi + 0xc], eax
mov eax, edi
pop edi
pop esi
pop ebx
pop ecx
pop ebp
ret
Function at 0x432ea8
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
mov esi, dword [ebp + 8]
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov ebx, eax
mov eax, dword [ebx]
cmp eax, dword [ebx + 0xc]
ja 0x432ed7
push 0
push 0
push 0
push 0x233b
call fcn.00457568
add esp, 0x10
sub dword [ebx], 4
mov edx, dword [ebx]
mov eax, dword [edx]
test dword [eax], 0xb405
je 0x432eed
push eax
call fcn.0043f008
pop ecx
mov edx, dword [ebx]
cmp edx, dword [ebx + 0xc]
ja 0x432ed7
mov ecx, dword [esi]
shl ecx, 2
add ecx, dword [ebx + 8]
mov dword [ebx + 0xc], ecx
mov eax, dword [esi + 8]
mov dword [ebx + 0x8c], eax
mov edx, dword [esi + 4]
push edx
call fcn.00443be8
pop ecx
pop esi
pop ebx
pop ebp
ret

Function at 0x432f18
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
mov ebx, dword [ebp + 8]
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov esi, eax
test ebx, ebx
jge 0x432f44
push 0
push 0
push 0
push 0x233b
call fcn.00457568
add esp, 0x10
mov eax, dword [esi + 8]
mov eax, dword [eax + ebx*4]
pop esi
pop ebx
pop ebp
ret

Function at 0x432f50
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
mov ebx, dword [ebp + 8]
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov esi, eax
test ebx, ebx
jl 0x432f7c
push 0
push 0
push 0
push 0x233b
call fcn.00457568
add esp, 0x10
mov eax, dword [esi]
mov eax, dword [eax + ebx*4]
pop esi
pop ebx
pop ebp
ret

Function at 0x432f88
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
mov ebx, dword [ebp + 8]
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov esi, eax
test ebx, ebx
jge 0x432fb4
push 0
push 0
push 0
push 0x233b
call fcn.00457568
add esp, 0x10
mov eax, dword [esi + 0xc]
mov eax, dword [eax + ebx*4 + 4]
pop esi
pop ebx
pop ebp
ret

Function at 0x433044
Capabilities:
Get thread local storage value

Disassembly:
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov eax, dword [edx]
ret

Function at 0x433058
Capabilities:
Get thread local storage value

Disassembly:
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov eax, dword [edx + 4]
ret

Function at 0x43306c
Capabilities:
Get thread local storage value

Disassembly:
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
ret

Function at 0x433178
Capabilities:
Get thread local storage value

Disassembly:
cmp dword [0x5413ec], 0
je 0x4331a2
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
test eax, eax
je 0x4331a2
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x1d0
ret
mov eax, 0x5559a0
ret

Function at 0x4331f4
Capabilities:
Get thread local storage value

Disassembly:
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x4c
ret
Function at 0x433354
Capabilities:
Get thread local storage value

Disassembly:
push ebx
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov ecx, eax
mov edx, dword [ecx + 0xc]
mov eax, dword [edx]
jmp 0x433376
xor ebx, ebx
mov dword [edx + 4], ebx
mov eax, dword [edx]
mov edx, dword [ecx + 8]
mov eax, dword [edx + eax*4]
mov edx, dword [eax + 0xc]
cmp dword [edx + 4], 0
jne 0x433369
pop ebx
ret

Function at 0x433384
Capabilities:
Get thread local storage value

Disassembly:
push ebx
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, eax
mov eax, dword [edx + 0xc]
sub eax, dword [edx + 8]
test eax, eax
jns 0x43339f
add eax, 3
sar eax, 2
xor ecx, ecx
test eax, eax
jle 0x4333b8
mov ebx, dword [edx + 8]
mov eax, dword [ebx + eax*4]
mov eax, dword [eax + 0xc]
mov eax, dword [eax]
inc ecx
test eax, eax
jg 0x4333a8
mov eax, ecx
pop ebx
ret

Function at 0x4333bc
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, eax
mov eax, dword [edx + 0xc]
sub eax, dword [edx + 8]
test eax, eax
jns 0x4333dd
add eax, 3
sar eax, 2
jmp 0x4333ed
mov ecx, dword [edx + 8]
mov eax, dword [ecx + eax*4]
mov ecx, dword [eax + 0xc]
mov eax, dword [ecx]
mov ecx, ebx
add ebx, 0xffffffff
test ecx, ecx
jle 0x4333fa
test eax, eax
jg 0x4333e2
test ebx, ebx
jge 0x43340d
test eax, eax
jg 0x433410
mov edx, dword [edx + 8]
mov edx, dword [edx]
test byte [edx + 1], 1
jne 0x433410
or eax, 0xffffffff
pop ebx
pop ebp
ret

Function at 0x433670
Capabilities:
Get thread local storage value

Disassembly:
cmp dword [0x5413ec], 0
je 0x43369a
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
test eax, eax
je 0x43369a
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x1e4
ret
mov eax, 0x5559b4
ret

Function at 0x4336c4
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
mov esi, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x433737
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x433737
cmp ebx, 0xffffffff
jne 0x433702
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x433715
mov ecx, dword [0x555894]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
test byte [eax + 1], 0x20
je 0x43372a
push eax
call fcn.0043f7e0
pop ecx
cmp esi, 0x2000
je 0x433739
mov ecx, dword [eax]
mov edx, esi
and ecx, edx
jne 0x433739
cmp edx, 0xffffffff
je 0x433739
xor eax, eax
pop esi
pop ebx
pop ebp
ret
Function at 0x433768
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
mov ebx, dword [ebp + 8]
test ebx, ebx
jne 0x43378a
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
jmp 0x4337f7
cmp ebx, 0xffffffff
jl 0x4337f5
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
mov ecx, dword [eax + 0xc]
mov eax, dword [ecx]
movzx edx, word [eax + 0x10]
cmp ebx, edx
jg 0x4337f5
cmp ebx, 0xffffffff
jne 0x4337c0
mov ecx, dword [0x555894]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov esi, eax
add esi, 0x10
jmp 0x4337d2
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov esi, dword [edx + ebx*4 + 4]
mov ebx, dword [esi]
and ebx, 0xfffbffff
test bh, 0x20
je 0x4337ef
push esi
call fcn.0043f7e0
pop ecx
mov eax, dword [eax]
and eax, 0xfffbffff
or ebx, eax
mov eax, ebx
jmp 0x4337f7
xor eax, eax
pop esi
pop ebx
pop ebp
ret

Function at 0x43383c
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jne 0x433858
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x43388f
test ebx, ebx
jl 0x43388a
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
mov ecx, dword [eax + 0xc]
mov eax, dword [ecx]
movzx edx, word [eax + 0x10]
cmp ebx, edx
jg 0x43388a
mov ecx, dword [0x555894]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
jmp 0x43388f
xor eax, eax
pop ebx
pop ebp
ret
test byte [eax + 1], 0x20
je 0x43389c
push eax
call fcn.0043f7e0
pop ecx
test byte [eax + 1], 0x80
je 0x4338ac
mov edx, dword [eax + 8]
cmp word [edx + 0xc], 0
je 0x4338b0
xor ecx, ecx
jmp 0x4338b5
mov ecx, 1
mov eax, ecx
pop ebx
pop ebp
ret

Function at 0x4338bc
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jne 0x4338d8
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x43390f
test ebx, ebx
jl 0x43390a
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
mov ecx, dword [eax + 0xc]
mov eax, dword [ecx]
movzx edx, word [eax + 0x10]
cmp ebx, edx
jg 0x43390a
mov ecx, dword [0x555894]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
jmp 0x43390f
xor eax, eax
pop ebx
pop ebp
ret
test byte [eax + 1], 0x20
je 0x43391c
push eax
call fcn.0043f7e0
pop ecx
test byte [eax + 1], 0x80
je 0x43392c
mov edx, dword [eax + 8]
cmp word [edx + 0xc], 0
jne 0x433930
xor ecx, ecx
jmp 0x433935
mov ecx, 1
mov eax, ecx
pop ebx
pop ebp
ret
Function at 0x43393c
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x4339a2
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x4339a2
cmp ebx, 0xffffffff
jne 0x433976
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x433989
mov ecx, dword [0x555894]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
test byte [eax + 1], 0x20
je 0x433996
push eax
call fcn.0043f7e0
pop ecx
test byte [eax + 1], 4
je 0x4339a2
mov eax, dword [eax + 0x10]
pop ebx
pop ebp
ret
xor eax, eax
pop ebx
pop ebp
ret

Function at 0x4339a8
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x433a0e
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x433a0e
cmp ebx, 0xffffffff
jne 0x4339e2
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x4339f5
mov ecx, dword [0x555894]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
test byte [eax + 1], 0x20
je 0x433a02
push eax
call fcn.0043f7e0
pop ecx
test byte [eax + 1], 4
je 0x433a0e
mov eax, dword [eax + 0x10]
pop ebx
pop ebp
ret
mov eax, 0x541434
pop ebx
pop ebp
ret

Function at 0x433a18
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x433a7e
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x433a7e
cmp ebx, 0xffffffff
jne 0x433a52
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x433a65
mov ecx, dword [0x555894]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
test byte [eax + 1], 0x20
je 0x433a72
push eax
call fcn.0043f7e0
pop ecx
test byte [eax + 1], 4
je 0x433a7e
mov eax, dword [eax + 8]
pop ebx
pop ebp
ret
xor eax, eax
pop ebx
pop ebp
ret

Function at 0x433a84
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x433aed
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x433aed
cmp ebx, 0xffffffff
jne 0x433abe
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x433ad1
mov ecx, dword [0x555894]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
test byte [eax + 1], 0x20
je 0x433aed
push eax
call fcn.0043f7e0
test byte [eax + 1], 4
pop ecx
je 0x433aed
mov edx, dword [eax + 8]
inc edx
mov eax, edx
pop ebx
pop ebp
ret
xor eax, eax
pop ebx
pop ebp
ret
Function at 0x433af4
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x433b76
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x433b76
cmp ebx, 0xffffffff
jne 0x433b2e
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x433b41
mov ecx, dword [0x555894]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
mov ebx, eax
test byte [ebx + 1], 0x20
je 0x433b52
push ebx
call fcn.0043f7e0
pop ecx
mov ebx, eax
test byte [ebx], 0x60
je 0x433b76
mov edx, dword [ebx + 8]
push edx
mov ecx, dword [0x555894]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x68
push eax
call fcn.004a5004
add esp, 8
pop ebx
pop ebp
ret
push 0
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x68
push eax
call fcn.004a5004
add esp, 8
pop ebx
pop ebp
ret

Function at 0x433b94
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
mov ebx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x433c06
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x433c06
cmp ebx, 0xffffffff
jne 0x433bd2
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x433be5
mov ecx, dword [0x555894]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
test byte [eax + 1], 0x20
je 0x433bf2
push eax
call fcn.0043f7e0
pop ecx
test byte [eax], 0x60
je 0x433c06
mov edx, dword [eax + 8]
push edx
push esi
call fcn.004a5004
add esp, 8
jmp 0x433c11
push 0
push esi
call fcn.004a5004
add esp, 8
pop esi
pop ebx
pop ebp
ret

Function at 0x433c18
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x433c7d
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x433c7d
cmp ebx, 0xffffffff
jne 0x433c52
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x433c65
mov ecx, dword [0x555894]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
test byte [eax + 1], 0x20
je 0x433c72
push eax
call fcn.0043f7e0
pop ecx
test byte [eax], 0x60
je 0x433c7d
mov eax, dword [eax + 8]
pop ebx
pop ebp
ret
push 0
call fcn.0043e078
pop ecx
pop ebx
pop ebp
ret
Function at 0x433d0c
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 0x10]
cmp ebx, 0xffffffff
jl 0x433d83
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x433d83
cmp ebx, 0xffffffff
jne 0x433d46
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x433d59
mov ecx, dword [0x555894]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
test byte [eax + 1], 0x20
je 0x433d66
push eax
call fcn.0043f7e0
pop ecx
test byte [eax], 0x60
je 0x433d83
mov edx, dword [ebp + 8]
mov ecx, dword [eax + 8]
mov dword [edx], ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [eax + 0xc]
mov dword [edx], eax
mov eax, 1
pop ebx
pop ebp
ret
xor eax, eax
pop ebx
pop ebp
ret

Function at 0x433d88
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x433dfb
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x433dfb
cmp ebx, 0xffffffff
jne 0x433dc2
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x433dd5
mov ecx, dword [0x555894]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
test byte [eax + 1], 0x20
je 0x433de2
push eax
call fcn.0043f7e0
pop ecx
test byte [eax], 0x80
je 0x433dfb
cmp dword [eax + 8], 0
je 0x433df4
mov edx, 1
jmp 0x433df6
xor edx, edx
mov eax, edx
pop ebx
pop ebp
ret
xor eax, eax
pop ebx
pop ebp
ret

Function at 0x433e00
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, dword [ebp + 8]
cmp ebx, 0xffffffff
jl 0x433e73
mov eax, dword [0x555894]
push eax
call sub.KERNEL32.DLL_TlsGetValue
mov edx, dword [eax + 0xc]
mov ecx, dword [edx]
movzx eax, word [ecx + 0x10]
cmp ebx, eax
jg 0x433e73
cmp ebx, 0xffffffff
jne 0x433e3a
mov edx, dword [0x555894]
push edx
call sub.KERNEL32.DLL_TlsGetValue
add eax, 0x10
jmp 0x433e4d
mov ecx, dword [0x555894]
push ecx
call sub.KERNEL32.DLL_TlsGetValue
mov eax, dword [eax + 0xc]
mov eax, dword [eax + ebx*4 + 4]
test byte [eax + 1], 0x20
je 0x433e5a
push eax
call fcn.0043f7e0
pop ecx
test byte [eax], 0x80
je 0x433e73
cmp dword [eax + 8], 0
je 0x433e6c
mov edx, 1
jmp 0x433e6e
xor edx, edx
mov eax, edx
pop ebx
pop ebp
ret
mov eax, dword [ebp + 0xc]
pop ebx
pop ebp
ret