Function at 0x649e60
Capabilities:
Get thread local storage value

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xb8
mov rsi, qword [0x006fe910]
mov rbx, qword [rcx]
test rsi, rsi
mov rdi, rcx
je 0x64a000
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [rsi]
mov ebp, eax
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ecx, ebp
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_SetLastError]
test rsi, rsi
je 0x64a000
mov rsi, qword [rsi + 0x10]
test rsi, rsi
je 0x649ebe
mov eax, dword [rsi + 0x28]
cmp eax, 3
je 0x649f24
test rbx, rbx
je 0x649f10
lea rbp, [rbx + 8]
mov rcx, rbp
call fcn.00641c60
test eax, eax
mov esi, eax
jne 0x649f15
cmp qword [rdi], 0
je 0x64a4c8
mov eax, dword [rbx]
mov rcx, rbp
lea edi, [rax - 1]
mov dword [rbx], edi
call fcn.00642b90
test edi, edi
js 0x64a0b4
xor eax, eax
add rsp, 0xb8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov esi, 0x16
call qword [sym.imp.msvcrt.dll__errno]
mov dword [rax], esi
mov eax, 0xffffffff
jmp 0x649ef8
mov qword [rsp + 0xa8], 0
lea rax, [rsi + 0x38]
lea rbp, [rsp + 0x90]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0xa0], 0
mov rdx, rbp
mov qword [rsp + 0x98], 0
xchg qword [rax], rdx
test rdx, rdx
je 0x649fa1
mov qword [rdx + 8], rbp
xor eax, eax
add rdx, 0x18
mov rcx, 0xffffffffffffffff
lock cmpxchg qword [rdx], rcx
test rax, rax
mov rcx, rax
je 0x649f8b
call qword [sym.imp.KERNEL32.dll_SetEvent]
lea r13, [rbp + 0x10]
xor r12d, r12d
lock xadd qword [r13], r12
test r12, r12
je 0x64a2d0
cmp dword [rsi + 0x18c], 1
jne 0x64a52b
mov r8, qword [rsp + 0x90]
lea rcx, [rbp + 8]
xor edx, edx
lock xadd qword [rcx], rdx
test rdx, rdx
mov rcx, rdx
je 0x64a330
add rcx, 0x10
xor eax, eax
mov rdx, 0xffffffffffffffff
lock cmpxchg qword [rcx], rdx
test rax, rax
mov rcx, rax
je 0x649ebe
call qword [sym.imp.KERNEL32.dll_SetEvent]
jmp 0x649ebe
lea r12, [rsp + 0x50]
mov rcx, r12
call fcn.0063edb0
mov rbp, qword [rsp + 0x50]
mov r14, qword [rsp + 0x58]
test rbp, rbp
mov rsi, rbp
je 0x649ebe
or byte [rbp + 0x194], 1
mov dword [rbp + 0x184], 1
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov r13, qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [rbp + 0x198], eax
call r13
mov qword [rsp + 0x48], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov r15, rax
call r13
lea r9, [rbp + 8]
mov r8, qword [rsp + 0x48]
mov rdx, r15
mov dword [rsp + 0x30], 2
mov rcx, rax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
je 0x64a310
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_GetThreadPriority]
mov rcx, qword [0x006fe910]
mov rdx, rbp
mov dword [rbp + 0x188], eax
call fcn.00641390
jmp 0x649eb6
lea rcx, [rsp + 0x70]
mov r8, rbx
lea rdx, [0x00646a40]
call fcn.006418c0
mov rax, qword [rbx + 0x10]
mov rbx, qword [0x006fe910]
mov qword [rsp + 0x60], rax
test rbx, rbx
je 0x64a3ee
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [rbx]
mov edi, eax
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ecx, edi
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_SetLastError]
test rbx, rbx
je 0x64a3ee
mov rbx, qword [rbx + 0x10]
test rbx, rbx
je 0x64a3a5
mov eax, dword [rbx + 0x18c]
test eax, eax
jne 0x64a303
mov rax, qword [rbx + 0x40]
mov ecx, 2
test rax, rax
mov qword [rsp + 0x68], rax
je 0x64a303
lea rdx, [rsp + 0x60]
xor r8d, r8d
mov r9d, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
test eax, eax
je 0x64a291
cmp eax, 1
jne 0x64a364
mov rcx, qword [rsp + 0x68]
lea rbp, [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rdx, [rbx + 0x38]
mov rax, rbp
mov qword [rsp + 0xa8], 0
mov qword [rsp + 0x90], rdx
mov qword [rsp + 0xa0], 0
mov qword [rsp + 0x98], 0
xchg qword [rdx], rax
test rax, rax
je 0x64a1e2
mov qword [rax + 8], rbp
lea rdx, [rax + 0x18]
mov rcx, 0xffffffffffffffff
xor eax, eax
lock cmpxchg qword [rdx], rcx
test rax, rax
mov rcx, rax
je 0x64a1ce
call qword [sym.imp.KERNEL32.dll_SetEvent]
lea rdi, [rbp + 0x10]
xor esi, esi
lock xadd qword [rdi], rsi
test rsi, rsi
je 0x64a49a
mov eax, dword [rbx + 0x28]
cmp eax, 3
jbe 0x64a558
mov rcx, qword [rsp + 0x90]
lea rax, [rbp + 8]
xor edx, edx
lock xadd qword [rax], rdx
test rdx, rdx
mov rax, rdx
je 0x64a4e6
lea rdx, [rax + 0x10]
mov rcx, 0xffffffffffffffff
xor eax, eax
lock cmpxchg qword [rdx], rcx
test rax, rax
mov rcx, rax
je 0x64a22d
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov esi, 0x16
mov rbx, qword [0x006fe908]
test rbx, rbx
je 0x649f15
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [rbx]
mov edi, eax
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ecx, edi
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_SetLastError]
test rbx, rbx
je 0x649f15
mov rax, qword [rbx]
test rax, rax
je 0x64a274
mov rcx, qword [rbx + 8]
call rax
mov rdx, qword [rbx + 0x10]
mov rcx, qword [0x006fe908]
call fcn.00641390
test esi, esi
je 0x649ef6
jmp 0x649f15
mov rbx, qword [0x006fe908]
test rbx, rbx
je 0x649ef6
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [rbx]
mov edi, eax
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ecx, edi
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_SetLastError]
test rbx, rbx
jne 0x64a274
jmp 0x649ef6
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov r14, rax
mov rax, r12
lock cmpxchg qword [r13], r14
test rax, rax
je 0x64a380
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x649fa1
mov ecx, 1
jmp 0x64a137
mov rcx, r12
mov qword [rsp + 0x50], rbp
mov qword [rsp + 0x58], r14
call fcn.0063ec10
jmp 0x649ebe
mov rax, rbp
lock cmpxchg qword [r8], rdx
cmp rbp, rax
je 0x649ebe
lea rcx, [rbp + 0x18]
lock xadd qword [rcx], rdx
test rdx, rdx
je 0x64a3e4
add rbp, 8
xor ecx, ecx
lock xadd qword [rbp], rcx
jmp 0x649fcd
cmp eax, 0x102
mov esi, 0x8a
mov eax, 0x16
cmovne esi, eax
jmp 0x64a232
mov edx, 0xffffffff
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
jmp 0x64a2f5
mov rcx, rbp
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], r13
call fcn.0063ec10
xor r8d, r8d
mov r9d, 0xffffffff
mov ecx, 1
mov qword [rsp + 0x68], 0
lea rdx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
test eax, eax
je 0x64a291
cmp eax, 1
jne 0x64a364
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
jmp 0x64a22d
call fcn.0063d400
jmp 0x64a353
lea rbp, [rsp + 0x50]
mov rcx, rbp
call fcn.0063edb0
mov rdi, qword [rsp + 0x50]
mov r13, qword [rsp + 0x58]
test rdi, rdi
mov rbx, rdi
je 0x64a3a5
or byte [rdi + 0x194], 1
mov dword [rdi + 0x184], 1
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov r12, qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [rdi + 0x198], eax
call r12
mov r15, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov r14, rax
call r12
lea r9, [rdi + 8]
mov r8, r15
mov rdx, r14
mov rcx, rax
mov dword [rsp + 0x30], 2
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
je 0x64a393
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_GetThreadPriority]
mov rcx, qword [0x006fe910]
mov rdx, rdi
mov dword [rdi + 0x188], eax
call fcn.00641390
jmp 0x64a112
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov r12, rax
mov rax, rsi
lock cmpxchg qword [rdi], r12
test rax, rax
je 0x64a516
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x64a1e2
mov rcx, rbp
call fcn.00642b90
call qword [sym.imp.msvcrt.dll__errno]
mov dword [rax], 0x16
mov eax, 0xffffffff
jmp 0x649ef8
mov rax, rbp
lock cmpxchg qword [rcx], rdx
cmp rbp, rax
je 0x64a22d
lea rcx, [rbp + 0x18]
lock xadd qword [rcx], rdx
test rdx, rdx
je 0x64a524
add rbp, 8
xor eax, eax
lock xadd qword [rbp], rax
jmp 0x64a20d
or edx, 0xffffffff
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
jmp 0x64a4ba
call fcn.0063d400
jmp 0x64a505
mov rcx, qword [rsi + 0x40]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rcx, rbp
mov dword [rsi + 0x28], 4
mov dword [rsi + 0x18c], 1
call fcn.0063d450
mov ecx, 2
call fcn.006486b0
mov rcx, rbp
mov dword [rbx + 0x28], 4
mov dword [rbx + 0x18c], 1
call fcn.0063d450
mov ecx, 2
call fcn.006486b0
nop
nop dword [rax]