joyce8/EMBER2024-capa huggingface dataset:
Function at 0x46b0f0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
mov eax, dword [0x7d8230]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
mov eax, dword [ebx + 4]
mov eax, dword [eax]
mov dword [eax], 0x20
mov eax, dword [ebx + 4]
mov eax, dword [eax]
mov edx, dword [ebp + 8]
mov dword [eax + 8], edx
mov eax, dword [ebx + 4]
mov eax, dword [eax]
mov dword [eax + 0xc], 0
mov eax, dword [ebx + 8]
dec eax
mov dword [ebp - 8], eax
mov edx, dword [ebx + 4]
mov ecx, dword [ebx]
sub edx, ecx
mov dword [ebp - 4], edx
mov eax, edx
cdq
and edx, 3
add eax, edx
sar eax, 2
mov ecx, dword [ebp - 8]
cmp ecx, eax
jg 0x46b14f
call fcn.004a8c60
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx + 4]
mov dword [eax], edx
mov eax, dword [edx]
mov dword [eax], 0
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x46b170
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
mov eax, dword [0x7d8230]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
mov eax, dword [ebx + 4]
mov eax, dword [eax]
mov dword [eax], 0x20
mov eax, dword [ebx + 4]
mov eax, dword [eax]
mov edx, dword [ebp + 8]
mov dword [eax + 8], edx
mov eax, dword [ebx + 4]
mov eax, dword [eax]
mov edx, dword [ebp + 0xc]
mov dword [eax + 0xc], edx
mov eax, dword [ebx + 8]
dec eax
mov dword [ebp - 8], eax
mov edx, dword [ebx + 4]
mov ecx, dword [ebx]
sub edx, ecx
mov dword [ebp - 4], edx
mov eax, edx
cdq
and edx, 3
add eax, edx
sar eax, 2
mov ecx, dword [ebp - 8]
cmp ecx, eax
jg 0x46b1ce
call fcn.004a8c60
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx + 4]
mov dword [eax], edx
mov eax, dword [edx]
mov dword [eax], 0
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x46b1f0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
mov eax, dword [0x7d8230]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
mov eax, dword [ebx + 4]
mov eax, dword [eax]
mov dword [eax], 1
mov eax, dword [ebx + 4]
mov eax, dword [eax]
mov edx, dword [ebp + 8]
mov dword [eax + 8], edx
mov eax, dword [ebx + 4]
mov eax, dword [eax]
mov dword [eax + 0xc], 0
mov eax, dword [ebx + 8]
dec eax
mov dword [ebp - 8], eax
mov edx, dword [ebx + 4]
mov ecx, dword [ebx]
sub edx, ecx
mov dword [ebp - 4], edx
mov eax, edx
cdq
and edx, 3
add eax, edx
sar eax, 2
mov ecx, dword [ebp - 8]
cmp ecx, eax
jg 0x46b24f
call fcn.004a8c60
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx + 4]
mov dword [eax], edx
mov eax, dword [edx]
mov dword [eax], 0
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x46b270
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
mov eax, dword [0x7d8230]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
mov eax, dword [ebp + 0xc]
push eax
mov eax, dword [ebp + 8]
push eax
mov eax, dword [ebx + 4]
mov eax, dword [eax]
push eax
call fcn.004a4ad0
add esp, 0xc
mov eax, dword [ebx + 8]
dec eax
mov dword [ebp - 8], eax
mov edx, dword [ebx + 4]
mov ecx, dword [ebx]
sub edx, ecx
mov dword [ebp - 4], edx
mov eax, edx
cdq
and edx, 3
add eax, edx
sar eax, 2
mov ecx, dword [ebp - 8]
cmp ecx, eax
jg 0x46b2c3
call fcn.004a8c60
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx + 4]
mov dword [eax], edx
mov eax, dword [edx]
mov dword [eax], 0
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x46b2e0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
mov eax, dword [0x7d8230]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
mov eax, dword [ebx + 4]
mov eax, dword [eax]
mov dword [eax], 0x100
mov eax, dword [ebx + 4]
mov eax, dword [eax]
mov edx, dword [ebp + 8]
mov dword [eax + 0x14], edx
mov eax, dword [ebx + 4]
mov eax, dword [eax]
mov dword [eax + 0x18], 0
mov eax, dword [ebx + 8]
dec eax
mov dword [ebp - 8], eax
mov edx, dword [ebx + 4]
mov ecx, dword [ebx]
sub edx, ecx
mov dword [ebp - 4], edx
mov eax, edx
cdq
and edx, 3
add eax, edx
sar eax, 2
mov ecx, dword [ebp - 8]
cmp ecx, eax
jg 0x46b33f
call fcn.004a8c60
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx + 4]
mov dword [eax], edx
mov eax, dword [edx]
mov dword [eax], 0
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x46b390
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x7d8230]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
mov eax, dword [ebx + 4]
mov esi, dword [eax]
mov eax, dword [ebx + 8]
dec eax
mov dword [ebp - 0x10], eax
mov edx, dword [ebx + 4]
mov ecx, dword [ebx]
sub edx, ecx
mov dword [ebp - 0xc], edx
mov eax, edx
cdq
and edx, 3
add eax, edx
sar eax, 2
mov ecx, dword [ebp - 0x10]
cmp ecx, eax
jg 0x46b3d4
call fcn.004a8c60
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx + 4]
mov dword [eax], edx
mov eax, dword [edx]
mov dword [eax], 0
mov eax, dword [ebp + 8]
mov di, word [eax + 2]
movzx eax, word [ebp + 0xc]
movzx edx, di
lea edx, [edx + edx + 4]
sub eax, edx
mov word [ebp + 0xc], ax
movzx eax, di
mov edx, dword [ebp + 8]
lea eax, [edx + eax*2 + 4]
mov dword [ebp - 4], eax
cmp dword [ebp + 0x10], 0
je 0x46b43a
mov eax, dword [ebp - 4]
mov dword [ebp - 8], eax
movzx eax, word [ebp + 0xc]
push eax
call fcn.0049b580
pop ecx
mov dword [ebp - 4], eax
movzx eax, word [ebp + 0xc]
push eax
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.00531d20
add esp, 0xc
mov eax, dword [ebx + 0x30]
mov eax, dword [eax]
mov eax, dword [eax + 0x14]
push eax
mov eax, dword [ebp + 8]
lea eax, [eax + 4]
push eax
movzx eax, di
push eax
mov eax, dword [ebp - 4]
push eax
call fcn.004bc480
add esp, 0x10
mov dword [esi + 0x10], eax
mov dword [esi], 0x1000
mov eax, dword [ebx + 0x38]
mov dword [esi + 8], eax
mov eax, dword [ebp + 8]
mov ax, word [eax]
mov word [esi + 0xc], ax
mov eax, dword [esi + 0x10]
mov edx, dword [ebx + 0x30]
mov edx, dword [edx]
mov dx, word [edx + 0xc]
mov word [eax + 4], dx
mov eax, dword [esi + 0x10]
mov word [eax + 0x1a], 0
mov eax, dword [ebx + 0x30]
mov eax, dword [eax + 4]
mov eax, dword [eax]
and eax, 0x8000
je 0x46b4af
mov eax, dword [esi + 0x10]
mov edx, dword [ebx + 0x30]
mov edx, dword [edx + 4]
mov edx, dword [edx + 8]
mov dx, word [edx + 0xc]
mov word [eax + 0x1a], dx
mov eax, dword [esi + 0x10]
mov dx, word [ebp + 0xc]
mov word [eax + 0x18], dx
mov eax, dword [esi + 0x10]
mov edx, dword [ebp + 0x10]
mov dword [eax + 0x14], edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x46b4d0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
push edi
mov eax, dword [0x7d8230]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
mov eax, dword [ebx + 4]
mov esi, dword [eax]
mov eax, dword [ebx + 8]
dec eax
mov dword [ebp - 8], eax
mov edx, dword [ebx + 4]
mov ecx, dword [ebx]
sub edx, ecx
mov dword [ebp - 4], edx
mov eax, edx
cdq
and edx, 3
add eax, edx
sar eax, 2
mov ecx, dword [ebp - 8]
cmp ecx, eax
jg 0x46b514
call fcn.004a8c60
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx + 4]
mov dword [eax], edx
mov eax, dword [edx]
mov dword [eax], 0
cmp dword [ebp + 0x10], 0
je 0x46b54e
movzx eax, word [ebp + 0xc]
push eax
call fcn.0049b580
pop ecx
mov edi, eax
movzx eax, word [ebp + 0xc]
push eax
mov eax, dword [ebp + 8]
push eax
push edi
call fcn.00531d20
add esp, 0xc
mov dword [ebp + 8], edi
mov eax, dword [ebx + 0x30]
mov eax, dword [eax]
mov eax, dword [eax + 0x14]
push eax
push 0
push 0
mov eax, dword [ebp + 8]
push eax
call fcn.004bc480
add esp, 0x10
mov dword [esi + 0x10], eax
mov dword [esi], 0x1000
mov eax, dword [ebx + 0x38]
mov dword [esi + 8], eax
mov word [esi + 0xc], 0
mov eax, dword [esi + 0x10]
mov edx, dword [ebx + 0x30]
mov edx, dword [edx]
mov dx, word [edx + 0xc]
mov word [eax + 4], dx
mov eax, dword [esi + 0x10]
mov word [eax + 0x1a], 0
mov eax, dword [ebx + 0x30]
mov eax, dword [eax + 4]
mov eax, dword [eax]
and eax, 0x8000
je 0x46b5b8
mov eax, dword [esi + 0x10]
mov edx, dword [ebx + 0x30]
mov edx, dword [edx + 4]
mov edx, dword [edx + 8]
mov dx, word [edx + 0xc]
mov word [eax + 0x1a], dx
mov eax, dword [esi + 0x10]
mov dx, word [ebp + 0xc]
mov word [eax + 0x18], dx
mov eax, dword [esi + 0x10]
mov edx, dword [ebp + 0x10]
mov dword [eax + 0x14], edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x46b5e0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
mov eax, dword [0x7d8230]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
mov eax, dword [ebx + 4]
mov esi, dword [eax]
mov eax, dword [ebx + 8]
dec eax
mov dword [ebp - 8], eax
mov edx, dword [ebx + 4]
mov ecx, dword [ebx]
sub edx, ecx
mov dword [ebp - 4], edx
mov eax, edx
cdq
and edx, 3
add eax, edx
sar eax, 2
mov ecx, dword [ebp - 8]
cmp ecx, eax
jg 0x46b623
call fcn.004a8c60
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx + 4]
mov dword [eax], edx
mov eax, dword [edx]
mov dword [eax], 0
mov eax, dword [ebp + 8]
movzx edx, word [eax + 1]
lea edx, [edx - 5]
movzx edx, dx
push edx
lea eax, [eax + 5]
push eax
call fcn.004bc640
add esp, 8
mov dword [esi + 0x10], eax
mov dword [esi], 0x1000
mov eax, dword [ebx + 0x38]
mov dword [esi + 8], eax
mov eax, dword [ebp + 8]
mov ax, word [eax + 3]
mov word [esi + 0xc], ax
mov eax, dword [esi + 0x10]
mov edx, dword [ebx + 0x30]
mov edx, dword [edx]
mov edx, dword [edx + 0x14]
mov dword [eax], edx
mov eax, dword [esi + 0x10]
mov edx, dword [ebx + 0x30]
mov edx, dword [edx]
mov dx, word [edx + 0xc]
mov word [eax + 4], dx
mov eax, dword [esi + 0x10]
mov word [eax + 0x1a], 0
mov eax, dword [ebx + 0x30]
mov eax, dword [eax + 4]
mov eax, dword [eax]
and eax, 0x8000
je 0x46b6b2
mov eax, dword [esi + 0x10]
mov edx, dword [ebx + 0x30]
mov edx, dword [edx + 4]
mov edx, dword [edx + 8]
mov dx, word [edx + 0xc]
mov word [eax + 0x1a], dx
mov eax, dword [esi + 0x10]
mov edx, dword [ebp + 8]
movzx edx, word [edx + 1]
lea edx, [edx - 5]
mov word [eax + 0x18], dx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x46b6d0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
mov eax, dword [0x7d8230]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
mov eax, dword [ebx + 4]
mov eax, dword [eax]
mov dword [eax], 2
call fcn.004f11df
mov edx, dword [ebx + 4]
mov edx, dword [edx]
mov dword [edx + 0xc], eax
mov eax, dword [ebx + 4]
mov eax, dword [eax]
mov dword [eax + 8], 0xa
mov eax, dword [ebx + 8]
dec eax
mov dword [ebp - 8], eax
mov edx, dword [ebx + 4]
mov ecx, dword [ebx]
sub edx, ecx
mov dword [ebp - 4], edx
mov eax, edx
cdq
and edx, 3
add eax, edx
sar eax, 2
mov ecx, dword [ebp - 8]
cmp ecx, eax
jg 0x46b731
call fcn.004a8c60
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx + 4]
mov dword [eax], edx
mov eax, dword [edx]
mov dword [eax], 0
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x46b750
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov eax, dword [0x7d8230]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, eax
call fcn.004f11df
mov edi, eax
mov eax, dword [esi + 4]
mov ebx, dword [eax - 4]
mov eax, dword [ebp + 8]
push eax
push ebx
call fcn.00468b20
add esp, 8
test ax, ax
jne 0x46b790
mov eax, dword [ebp + 8]
push eax
push ebx
call fcn.004f1ebc
add esp, 8
push edi
call fcn.004f11eb
pop ecx
pop edi
pop esi
pop ebx
pop ebp
ret
Function at 0x46b7a0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov eax, dword [0x7d8230]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov esi, eax
mov eax, dword [esi + 4]
mov ebx, dword [eax - 4]
mov eax, dword [ebx]
and eax, 0x400
je 0x46b831
mov edi, dword [ebx + 0x10]
movsx eax, byte [edi]
cmp eax, 0x4d
je 0x46b7d7
cmp eax, 0x6d
jne 0x46b807
cmp byte [edi + 1], 0
je 0x46b7f8
mov eax, dword [ebx + 8]
cmp eax, 4
jb 0x46b831
push eax
push 0x696b72
push edi
call fcn.004a9d10
add esp, 0xc
test eax, eax
jne 0x46b831
mov eax, dword [ebp + 8]
push eax
push ebx
call fcn.00473b70
add esp, 8
jmp 0x46b83b
mov eax, dword [ebx + 8]
cmp eax, 4
jb 0x46b831
push eax
push 0x696b6c
push edi
call fcn.004a9d10
add esp, 0xc
test eax, eax
jne 0x46b831
mov eax, dword [ebp + 8]
push eax
push ebx
call fcn.004f1ebc
add esp, 8
jmp 0x46b83b
mov eax, dword [ebp + 8]
push eax
call fcn.0046b750
pop ecx
pop edi
pop esi
pop ebx
pop ebp
ret

Function at 0x46b840
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
mov eax, dword [0x7d8230]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
movsx eax, word [ebp + 8]
test eax, eax
jl 0x46b87d
movsx eax, word [ebp + 8]
mov edx, dword [ebx + 0x30]
mov esi, dword [edx + eax*4 + 4]
mov eax, dword [esi]
and eax, 0x2000
je 0x46b893
push esi
call fcn.004a0990
pop ecx
mov esi, eax
jmp 0x46b893
movsx eax, word [ebp + 8]
push eax
mov eax, dword [ebx + 0x30]
mov eax, dword [eax + 4]
push eax
call fcn.004bc850
add esp, 8
mov esi, eax
push esi
mov eax, dword [ebx + 4]
mov eax, dword [eax]
push eax
call fcn.004a4960
add esp, 8
mov eax, dword [ebx + 8]
dec eax
mov dword [ebp - 8], eax
mov edx, dword [ebx + 4]
mov ecx, dword [ebx]
sub edx, ecx
mov dword [ebp - 4], edx
mov eax, edx
cdq
and edx, 3
add eax, edx
sar eax, 2
mov ecx, dword [ebp - 8]
cmp ecx, eax
jg 0x46b8ca
call fcn.004a8c60
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx + 4]
mov dword [eax], edx
mov eax, dword [edx]
mov dword [eax], 0
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x46b8f0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
mov eax, dword [0x7d8230]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
mov eax, dword [ebx + 4]
mov esi, dword [eax]
mov dword [esi], 0x2000
mov eax, dword [ebx + 0x30]
mov edx, dword [ebx]
sub eax, edx
cdq
and edx, 3
add eax, edx
sar eax, 2
inc eax
mov dword [esi + 0xc], eax
movsx eax, word [ebp + 8]
test eax, eax
jl 0x46b932
mov dword [esi + 8], ebx
jmp 0x46b93e
mov eax, dword [ebx + 0x30]
mov eax, dword [eax + 4]
mov eax, dword [eax + 0x10]
mov dword [esi + 8], eax
movsx eax, word [ebp + 8]
mov dword [esi + 0x10], eax
mov eax, dword [ebx + 8]
dec eax
mov dword [ebp - 8], eax
mov edx, dword [ebx + 4]
mov ecx, dword [ebx]
sub edx, ecx
mov dword [ebp - 4], edx
mov eax, edx
cdq
and edx, 3
add eax, edx
sar eax, 2
mov ecx, dword [ebp - 8]
cmp ecx, eax
jg 0x46b96d
call fcn.004a8c60
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx + 4]
mov dword [eax], edx
mov eax, dword [edx]
mov dword [eax], 0
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x46b990
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
mov eax, dword [0x7d8230]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
movzx eax, word [ebp + 8]
shl eax, 5
mov edx, dword [ebx + 0x38]
shl edx, 5
mov ecx, dword [0x7cd4d4]
mov ecx, dword [ecx]
add edx, ecx
lea esi, [edx + eax - 0x20]
mov eax, dword [esi]
and eax, 0x2000
je 0x46b9e2
push esi
call fcn.004a0990
pop ecx
push eax
mov eax, dword [ebx + 4]
mov eax, dword [eax]
push eax
call fcn.004a4960
add esp, 8
jmp 0x46b9f1
push esi
mov eax, dword [ebx + 4]
mov eax, dword [eax]
push eax
call fcn.004a4960
add esp, 8
mov eax, dword [ebx + 8]
dec eax
mov dword [ebp - 8], eax
mov edx, dword [ebx + 4]
mov ecx, dword [ebx]
sub edx, ecx
mov dword [ebp - 4], edx
mov eax, edx
cdq
and edx, 3
add eax, edx
sar eax, 2
mov ecx, dword [ebp - 8]
cmp ecx, eax
jg 0x46ba19
call fcn.004a8c60
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx + 4]
mov dword [eax], edx
mov eax, dword [edx]
mov dword [eax], 0
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x46ba40
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
mov eax, dword [0x7d8230]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
mov eax, dword [ebx + 4]
mov esi, dword [eax]
mov dword [esi], 0x2000
mov eax, dword [ebx + 0x38]
movzx edx, word [ebp + 8]
lea eax, [edx + eax - 1]
mov dword [esi + 0x10], eax
mov dword [esi + 0xc], 0
mov eax, dword [0x7cd4d4]
mov dword [esi + 8], eax
mov eax, dword [0x7cd4d4]
lea eax, [eax + 8]
add dword [eax], 1
mov eax, dword [ebx + 8]
dec eax
mov dword [ebp - 8], eax
mov edx, dword [ebx + 4]
mov ecx, dword [ebx]
sub edx, ecx
mov dword [ebp - 4], edx
mov eax, edx
cdq
and edx, 3
add eax, edx
sar eax, 2
mov ecx, dword [ebp - 8]
cmp ecx, eax
jg 0x46bab1
call fcn.004a8c60
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx + 4]
mov dword [eax], edx
mov eax, dword [edx]
mov dword [eax], 0
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x46bad0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
push edi
mov eax, dword [0x7d8230]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
xor di, di
mov eax, dword [ebx + 4]
mov esi, dword [eax]
mov eax, dword [ebx + 8]
dec eax
mov dword [ebp - 8], eax
mov edx, dword [ebx + 4]
mov ecx, dword [ebx]
sub edx, ecx
mov dword [ebp - 4], edx
mov eax, edx
cdq
and edx, 3
add eax, edx
sar eax, 2
mov ecx, dword [ebp - 8]
cmp ecx, eax
jg 0x46bb17
call fcn.004a8c60
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx + 4]
mov dword [eax], edx
mov eax, dword [edx]
mov dword [eax], 0
mov eax, dword [ebp + 8]
push eax
push esi
call fcn.004f1da0
add esp, 8
test ax, ax
je 0x46bb84
mov eax, dword [ebp + 8]
push eax
push esi
call fcn.00473ac0
add esp, 8
movzx eax, ax
test eax, eax
je 0x46bb84
push 1
push 0
mov eax, dword [ebp + 8]
mov eax, dword [eax]
push eax
push 0
push 0x3eb
push 0xe
push 0
push 2
call fcn.00492330
add esp, 0x20
mov dword [ebp - 4], eax
push eax
call fcn.004912d0
pop ecx
mov edi, eax
mov eax, dword [ebp - 4]
push eax
call fcn.00493080
pop ecx
movzx eax, di
cmp eax, 1
je 0x46bb29
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x46bba0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
mov eax, dword [0x7d8230]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
mov eax, dword [ebx + 4]
mov edx, dword [eax - 4]
push edx
mov eax, dword [eax]
push eax
call fcn.004a4960
add esp, 8
mov eax, dword [ebx + 8]
dec eax
mov dword [ebp - 8], eax
mov edx, dword [ebx + 4]
mov ecx, dword [ebx]
sub edx, ecx
mov dword [ebp - 4], edx
mov eax, edx
cdq
and edx, 3
add eax, edx
sar eax, 2
mov ecx, dword [ebp - 8]
cmp ecx, eax
jg 0x46bbef
call fcn.004a8c60
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx + 4]
mov dword [eax], edx
mov eax, dword [edx]
mov dword [eax], 0
pop ebx
mov esp, ebp
pop ebp
ret
Function at 0x46bc10
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
mov eax, dword [0x7d8230]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
mov eax, dword [ebx + 4]
mov edx, dword [eax - 8]
push edx
mov eax, dword [eax]
push eax
call fcn.004a4960
add esp, 8
mov eax, dword [ebx + 8]
dec eax
mov dword [ebp - 8], eax
mov edx, dword [ebx + 4]
mov ecx, dword [ebx]
sub edx, ecx
mov dword [ebp - 4], edx
mov eax, edx
cdq
and edx, 3
add eax, edx
sar eax, 2
mov ecx, dword [ebp - 8]
cmp ecx, eax
jg 0x46bc5f
call fcn.004a8c60
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx + 4]
mov dword [eax], edx
mov eax, dword [edx]
mov dword [eax], 0
mov eax, dword [ebx + 4]
mov edx, dword [eax - 8]
push edx
mov eax, dword [eax]
push eax
call fcn.004a4960
add esp, 8
mov eax, dword [ebx + 8]
dec eax
mov dword [ebp - 8], eax
mov edx, dword [ebx + 4]
mov ecx, dword [ebx]
sub edx, ecx
mov dword [ebp - 4], edx
mov eax, edx
cdq
and edx, 3
add eax, edx
sar eax, 2
mov ecx, dword [ebp - 8]
cmp ecx, eax
jg 0x46bcab
call fcn.004a8c60
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx + 4]
mov dword [eax], edx
mov eax, dword [edx]
mov dword [eax], 0
pop ebx
mov esp, ebp
pop ebp
ret

Function at 0x46bcd0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov eax, dword [0x7d8230]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
push eax
lea eax, [ebx + 0x10]
push eax
call fcn.004a44a0
add esp, 8
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx - 4]
mov dword [eax], edx
mov eax, edx
mov edx, dword [ebx]
cmp eax, edx
jae 0x46bd1a
push 0
push 0
push 0
push 0x233b
call fcn.00492ef0
add esp, 0x10
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx - 4]
mov dword [eax], edx
mov eax, edx
mov edx, dword [ebx]
cmp eax, edx
jae 0x46bd3f
push 0
push 0
push 0
push 0x233b
call fcn.00492ef0
add esp, 0x10
pop ebx
pop ebp
ret

Function at 0x46bd50
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push ebx
mov eax, dword [0x7d8230]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov eax, dword [eax]
and eax, 0x80
je 0x46bdab
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx - 4]
mov dword [eax], edx
mov eax, edx
mov edx, dword [ebx]
cmp eax, edx
jae 0x46bd96
push 0
push 0
push 0
push 0x233b
call fcn.00492ef0
add esp, 0x10
mov eax, dword [ebx + 4]
mov eax, dword [eax]
mov dword [eax], 0
mov eax, dword [ebx + 4]
mov eax, dword [eax]
mov eax, dword [eax + 8]
jmp 0x46bdd0
push 0x32
call fcn.004ab070
pop ecx
mov edx, dword [ebx + 4]
mov edx, dword [edx - 4]
push edx
push 1
push eax
push 0
push 0x42a
push 1
call fcn.00492870
add esp, 0x18
xor eax, eax
pop ebx
pop ebp
ret
Function at 0x46bde0
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
push ebx
mov eax, dword [0x7d8230]
push eax
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, eax
mov eax, dword [ebx + 4]
mov eax, dword [eax - 4]
mov dword [ebp - 4], eax
lea eax, [ebx + 4]
mov edx, dword [eax]
lea edx, [edx - 4]
mov dword [eax], edx
mov eax, edx
mov edx, dword [ebx]
cmp eax, edx
jae 0x46be23
push 0
push 0
push 0
push 0x233b
call fcn.00492ef0
add esp, 0x10
mov eax, dword [ebp - 4]
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
cmp eax, 0x10
je 0x46be86
jg 0x46be4d
mov eax, dword [ebp - 0x14]
cmp eax, 2
je 0x46be6a
jl 0x46bee3
mov eax, dword [ebp - 0x14]
cmp eax, 8
je 0x46be78
jmp 0x46bee3
mov eax, dword [ebp - 0x14]
cmp eax, 0x20
je 0x46be94
jl 0x46bee3
mov eax, dword [ebp - 0x14]
cmp eax, 0x400
je 0x46bec1
jmp 0x46bee3
mov eax, dword [ebp - 4]
fild dword [eax + 0xc]
fstp qword [ebp - 0x10]
jmp 0x46bf02
mov eax, dword [ebp - 4]
fild qword [eax + 8]
fstp qword [ebp - 0x10]
jmp 0x46bf02
mov eax, dword [ebp - 4]
fld qword [eax + 8]
fstp qword [ebp - 0x10]
jmp 0x46bf02
mov eax, dword [ebp - 4]
fild dword [eax + 8]
fstp qword [ebp - 0x10]
mov eax, dword [ebp - 4]
cmp dword [eax + 0xc], 0
je 0x46bf02
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0xc]
push edx
mov eax, dword [eax + 8]
push eax
call fcn.004bdca0
add esp, 8
fst qword [ebp - 0x20]
fstp qword [ebp - 0x10]
jmp 0x46bf02
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x10]
movsx eax, byte [eax]
movzx eax, al
push eax
fild dword [esp]
add esp, 4
fstp qword [ebp - 0x10]
mov eax, dword [ebp - 4]
push eax
call fcn.004a4580
pop ecx
jmp 0x46bf02
fld qword [0x696e14]
fstp qword [ebp - 0x10]
push 0
push str.hb_vmPopNumber__
push 0
push 0x233a
call fcn.00492ef0
add esp, 0x10
mov eax, dword [ebx + 4]
mov eax, dword [eax]
mov dword [eax], 0
fld qword [ebp - 0x10]
pop ebx
mov esp, ebp
pop ebp
ret