Function at 0x7ff82669eb10
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
mov word [rsp + 8], cx
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xb0
mov rax, qword [0x7ff8266e2050]
xor rax, rsp
mov qword [rsp + 0xa0], rax
mov rbx, rdx
movzx r13d, cx
xor r15d, r15d
mov r12d, r15d
mov dword [rsp + 0x28], r15d
cmp qword [0x7ff8266e2820], r12
je 0x7ff8266aefc6
movzx edi, r13b
mov word [rsp + 0x22], di
mov byte [rsp + 0x20], dil
mov byte [rsp + 0x21], dil
mov r8d, edi
movzx ecx, r13w
shr cx, 8
mov edx, edi
cmp edi, 2
jne 0x7ff82669ee1c
cmp cx, di
ja 0x7ff8266aefed
shl cx, 8
or cx, di
movzx edx, cx
mov ecx, 0x202
mov eax, 0x101
mov word [rbx], dx
mov word [rbx + 2], cx
cmp r8w, 1
je 0x7ff82669ecc7
mov dword [rbx + 4], r15d
lea r9, [rbx + 0x10]
mov r11d, 0x7ffffffe
mov ecx, r11d
mov qword [rsp + 0x60], rcx
lea rdx, str.WinSock_2.0
mov qword [rsp + 0x50], rdx
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x30], r9
mov r10, r15
mov qword [rsp + 0x38], r15
nop dword [rax]
test rax, rax
je 0x7ff82669ecd3
test rcx, rcx
je 0x7ff82669ec34
movzx r8d, byte [rdx]
test r8b, r8b
je 0x7ff82669ec34
mov byte [r9], r8b
inc r9
mov qword [rsp + 0x30], r9
inc rdx
mov qword [rsp + 0x50], rdx
dec rax
mov qword [rsp + 0x58], rax
dec rcx
mov qword [rsp + 0x60], rcx
inc r10
mov qword [rsp + 0x38], r10
jmp 0x7ff82669ebf0
test rax, rax
je 0x7ff82669ecd3
mov byte [r9], 0
lea rcx, [rbx + 0x111]
mov qword [rsp + 0x78], r11
lea rdx, str.Running
mov qword [rsp + 0x68], rdx
mov eax, 0x81
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x40], rcx
mov r9, r15
mov qword [rsp + 0x48], r15
test rax, rax
je 0x7ff82669ecb5
test r11, r11
je 0x7ff82669ecb0
movzx r8d, byte [rdx]
test r8b, r8b
je 0x7ff82669ecb0
mov byte [rcx], r8b
inc rcx
mov qword [rsp + 0x40], rcx
inc rdx
mov qword [rsp + 0x68], rdx
dec rax
mov qword [rsp + 0x70], rax
dec r11
mov qword [rsp + 0x78], r11
inc r9
mov qword [rsp + 0x48], r9
jmp 0x7ff82669ec70
test rax, rax
jne 0x7ff82669ece8
dec rcx
mov qword [rsp + 0x40], rcx
dec r9
mov qword [rsp + 0x48], r9
jmp 0x7ff82669ece8
mov dword [rbx + 4], 0xffbb7fff
jmp 0x7ff82669ebbc
dec r9
mov qword [rsp + 0x30], r9
dec r10
mov qword [rsp + 0x38], r10
jmp 0x7ff82669ec3d
mov byte [rcx], 0
jmp 0x7ff82669ed14
test r12d, r12d
jne 0x7ff82669edeb
mov edi, r15d
mov r14d, r15d
mov esi, r15d
cmp dword [0x7ff8266e206c], 1
ja 0x7ff82669eee8
lea rcx, [0x7ff8266e29b0]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_EnterCriticalSection]
nop dword [rax + rax]
mov rbx, qword [0x7ff8266e2828]
test rbx, rbx
je 0x7ff82669ee48
mov r14d, edi
mov esi, edi
test r12d, r12d
jne 0x7ff8266af000
movzx edx, byte [rbx + 4]
cmp byte [rsp + 0x21], dl
jb 0x7ff82669eef2
jne 0x7ff82669ed8f
movzx edx, word [rbx + 4]
movzx ecx, dx
shr cx, 8
movzx eax, r13w
shr ax, 8
cmp al, cl
jb 0x7ff82669eef2
mov rax, qword [section..data]
lea rcx, [0x7ff82669ef80]
cmp dl, 1
cmove rax, rcx
mov qword [section..data], rax
lock inc dword [rbx]
mov dword [rsp + 0x28], 0x65
lea rdx, [0x7ff8266d6ec8]
mov rcx, qword [0x7ff8266e2858]
call qword [sym.imp.ntdll.dll_EtwEventEnabled]
nop dword [rax + rax]
test al, al
jne 0x7ff8266af070
lea rcx, [0x7ff8266e29b0]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_LeaveCriticalSection]
nop dword [rax + rax]
mov eax, r12d
mov rcx, qword [rsp + 0xa0]
xor rcx, rsp
call fcn.7ff8266a4480
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
test edx, edx
je 0x7ff8266aefe2
cmp edx, 1
jne 0x7ff8266aefd0
mov eax, 0x101
test cx, cx
mov ecx, 0x202
je 0x7ff8266aefd8
movzx edx, ax
jmp 0x7ff82669eba6
call fcn.7ff82669ea5c
mov r12d, eax
test eax, eax
jne 0x7ff82669ed5b
lea edi, [rax + 1]
mov rbx, qword [0x7ff8266e2828]
test rbx, rbx
je 0x7ff8266aeffa
cmp qword [0x7ff8266e2838], 0
jne 0x7ff82669ee8c
lea rcx, [0x7ff8266e2838]
call sym.WS2_32.dll_WahCreateHandleContextTable
mov r12d, eax
test eax, eax
jne 0x7ff82669ed5b
mov esi, edi
call fcn.7ff82669f328
mov r12d, eax
test eax, eax
jne 0x7ff82669ed5b
mov r14d, edi
mov ecx, dword [0x7ff8266e2068]
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_TlsGetValue]
nop dword [rax + rax]
mov qword [rsp + 0x80], rax
test rax, rax
jne 0x7ff82669eed3
lea rdx, [rsp + 0x80]
mov rcx, rbx
call fcn.7ff82669eff8
mov r12d, eax
mov rbx, qword [0x7ff8266e2828]
test rbx, rbx
jne 0x7ff82669ed56
jmp 0x7ff82669ee48
call fcn.7ff82669f68c
jmp 0x7ff82669ed33
mov word [rbx + 4], r13w
movzx edx, byte [rsp + 0x22]
jmp 0x7ff82669ed8f
add byte [rax], al
invalid
xor al, byte [rdx]
add byte [rax], al
add byte [rax], 0
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rbp - 0x7b], al
div byte [rax + rsi - 0xa]
add eax, 0x337ec
add dword [rcx + rdx - 0x47], esi
or eax, dword [rax]
add byte [rax], al
add byte [rax], al
add byte [rax], al
add byte [rax], al
test r14d, r14d
je 0x7ff8266af035
test byte [0x7ff8266e27f8], 1
je 0x7ff8266af01f
mov ecx, 0xb
lea rdx, [0x7ff8266d81d0]
call 0x7ff8266d2008
mov eax, dword [0x7ff8266e2068]
mov ecx, 0xffffffff
cmp eax, ecx
cmovne eax, ecx
mov dword [0x7ff8266e2068], eax
test esi, esi
je 0x7ff8266af051
mov rcx, qword [0x7ff8266e2838]
test rcx, rcx
je 0x7ff8266af051
call sym.WS2_32.dll_WahDestroyHandleContextTable
mov qword [0x7ff8266e2838], r15
test edi, edi
je 0x7ff82669edd8
test rbx, rbx
je 0x7ff82669edd8
mov rcx, rbx
call fcn.7ff8266a03cc
nop
jmp 0x7ff82669edd8
lea rax, [rsp + 0x28]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0x98], 4
lea r9, [rsp + 0x90]
mov r8d, 1
lea rdx, [0x7ff8266d6ec8]
mov rcx, qword [0x7ff8266e2858]
call qword [sym.imp.ntdll.dll_EtwEventWrite]
nop dword [rax + rax]
nop
jmp 0x7ff82669edd8