Function at 0x180066500
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push r14
sub rsp, 0x50
movzx edi, dl
mov rbx, rcx
lea rcx, [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
nop
lea rcx, [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [0x1800ee3b0]
cmp ecx, 0xffffffff
je 0x180066600
cmp qword [rbx + 0x10], 0
je 0x180066600
test dil, dil
je 0x18006659b
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
xor esi, esi
mov edx, esi
mov r9d, dword [rbx + 0xc]
test r9d, r9d
je 0x180066587
mov r10, qword [rbx + 0x10]
nop dword [rax + rax]
mov ecx, edx
lea r8, [r10 + rcx*8]
cmp qword [r8], rax
je 0x180066584
inc edx
cmp edx, r9d
jb 0x180066570
jmp 0x180066587
mov qword [r8], rsi
test rax, rax
je 0x180066600
mov edx, 0xc
mov rcx, rax
call fcn.180068578
jmp 0x180066600
call qword [sym.imp.KERNEL32.dll_TlsFree]
mov dword [0x1800ee3b0], 0xffffffff
xor esi, esi
mov edi, esi
cmp dword [rbx + 0xc], esi
jbe 0x1800665f0
nop dword [rax]
nop dword [rax + rax]
mov eax, edi
lea r14, [rax*8]
mov rax, qword [rbx + 0x10]
mov rcx, qword [r14 + rax]
test rcx, rcx
je 0x1800665e9
mov edx, 0xc
call fcn.180068578
mov rax, qword [rbx + 0x10]
mov qword [r14 + rax], rsi
inc edi
cmp edi, dword [rbx + 0xc]
jb 0x1800665c0
mov rcx, qword [rbx + 0x10]
call fcn.180068884
mov qword [rbx + 0x10], rsi
mov dword [rbx + 0xc], esi
lea rcx, [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
nop
lea rcx, [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
mov rdi, qword [rsp + 0x70]
add rsp, 0x50
pop r14
ret

Function at 0x180066720
Capabilities:
Get thread local storage value

Disassembly:
push rbx
sub rsp, 0x20
mov ecx, dword [0x1800ee3b0]
mov ebx, edx
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ecx, dword [0x1800ef560]
test rax, rax
cmovne ecx, ebx
mov dword [0x1800ef560], ecx
add rsp, 0x20
pop rbx
ret

Function at 0x180069484
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
push rbx

Function at 0x180069490
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xf8
xor eax, eax
mov dword [rsp + 0x20], 0x2a24574e
mov dword [rsp + 0x24], 0x36472455
mov dword [rsp + 0x28], 0x24594333
mov dword [rsp + 0x2c], 0x23716d21
mov dword [rsp + 0x30], 0x6849344c
mov word [rsp + 0x58], ax
mov dword [rsp + 0x34], 0x5e5f4a49
mov dword [rsp + 0x38], 0x3f3647
mov dword [rsp + 0x40], 0x65006b
mov dword [rsp + 0x44], 0x6e0072
mov dword [rsp + 0x48], 0x6c0065
mov dword [rsp + 0x4c], 0x320033
mov dword [rsp + 0x50], 0x64002e
mov dword [rsp + 0x54], 0x6c006c
mov edx, 0x3d090c
nop word [rax + rax]
lea rcx, [rbp - 0x59]
nop dword [rax]
nop dword [rax + rax]
mov byte [rcx], al
inc eax
lea rcx, [rcx + 1]
cmp eax, 0x6a
jb 0x180069534
mov eax, 0
dec rdx
jne 0x180069524
cmp byte [rbp - 0x29], 0x30
jne 0x180069560
lea rcx, [rsp + 0x40]
call fcn.180069bd4
mov rbx, rax
jmp fcn.180069564
mov rbx, qword [rbp + 0x6f]