Function at 0x14000b8b4
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x250]
sub rsp, 0x350
mov rax, qword [0x14003d0d8]
xor rax, rsp
mov qword [rbp + 0x240], rax
mov r13, rcx
mov r14, r8
mov ecx, dword [0x14003d17c]
mov rsi, rdx
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_TlsGetValue]
or ebx, 0xffffffff
xor edi, edi
mov r15, rax
test rax, rax
jne 0x14000b922
mov ebx, dword [0x14003d17c]
lea rdx, [rsp + 0x58]
mov ecx, ebx
mov dword [rsp + 0x58], edi
lea r15, [rsp + 0x58]
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_TlsSetValue]
inc dword [r15]
mov r10, qword [0x14003d048]
lea rax, [0x14003d048]
lea r8, [0x140035650]
mov r12d, 0x1df
cmp r10, rax
je 0x14000b9a2
test byte [r10 + 0x1c], 1
je 0x14000b9a2
mov eax, dword [r15]
lea ecx, [rax + rax*4]
cmp ecx, 0x1e1
ja 0x14000b964
mov eax, ecx
mov edx, r12d
sub rdx, rax
jmp 0x14000b967
mov rdx, rdi
test r14, r14
lea r9, [rdx + r8]
lea rcx, str.null
mov edx, ntohl
mov rax, rcx
lea r8, [0x140036090]
cmovne rax, r14
test rsi, rsi
mov qword [rsp + 0x28], rax
cmovne rcx, rsi
mov qword [rsp + 0x20], rcx
mov rcx, qword [r10 + 0x10]
call fcn.14000b660
mov qword [rsp + 0x50], rdi
test r14, r14
jne 0x14000bb31
lea rax, [rsp + 0x50]
mov r8, rsi
lea r9, [0x140036080]
mov qword [rsp + 0x20], rax
mov edx, 0x4000
lea rcx, [0x140036f58]
call qword [sym.imp.SHELL32.dll_SHCreateItemInKnownFolder]
mov esi, eax
test eax, eax
js 0x14000bd09
mov rax, qword gs:[0x58]
mov edx, 4
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x14003dad0], eax
jg 0x14000bdd2
mov rcx, qword [rsp + 0x50]
lea r8, [rsp + 0x60]
xor eax, eax
lea rdx, [0x140036020]
mov qword [rsp + 0x48], rax
mov rax, qword [rcx]
mov rax, qword [rax]
call qword [0x140034e68]
xor edx, edx
mov esi, eax
test eax, eax
js 0x14000ba78
mov rcx, qword [rsp + 0x60]
lea rdx, [rsp + 0x48]
mov qword [rsp + 0x28], rdx
xor r9d, r9d
lea rdx, [0x1400360a0]
mov qword [rsp + 0x20], rdx
lea rdx, [0x14003d990]
mov rax, qword [rcx]
lea r8d, [r9 + 1]
mov rax, qword [rax + 0x50]
call qword [0x140034e68]
mov rcx, qword [rsp + 0x60]
mov esi, eax
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [0x140034e68]
xor edx, edx
test esi, esi
js 0x14000bb0b
mov eax, dword [0x140035608]
lea r8, [rsp + 0x68]
mov rcx, qword [rsp + 0x48]
mov rdi, rdx
movups xmm0, xmmword [0x1400355f8]
mov word [rsp + 0x68], dx
lea rdx, [rbp - 0x80]
mov dword [rbp - 0x70], eax
mov rax, qword [rcx]
movaps xmmword [rbp - 0x80], xmm0
mov rax, qword [rax + 0x28]
call qword [0x140034e68]
mov esi, eax
xor edx, edx
movzx eax, word [rsp + 0x68]
test esi, esi
js 0x14000bb00
test ax, ax
mov ecx, 0x80070490
cmove esi, ecx
test esi, esi
js 0x14000bb00
mov edi, edx
cmp ax, 0x1f
jne 0x14000bafb
mov rax, qword [rsp + 0x70]
test rax, rax
je 0x14000bafb
mov rdi, rax
xor eax, eax
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x78], rax
jmp 0x14000bb00
mov esi, 0x80020005
lea rcx, [rsp + 0x68]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_PropVariantClear]
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14000bb29
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [0x140034e68]
xor edx, edx
mov qword [rsp + 0x48], rdx
test esi, esi
js 0x14000bd09
mov rcx, qword [0x14003d810]
lea r8, [rbp - 0x60]
mov r9d, 0x42
mov edx, 0x3e9
call qword [sym.imp.USER32.dll_LoadStringW]
test eax, eax
jne 0x14000bb77
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
mov eax, 0x80004005
test esi, esi
cmovns esi, eax
test esi, esi
js 0x14000bd09
mov rcx, qword [0x14003d810]
lea r8, [rbp + 0x30]
mov r9d, 0x104
mov edx, 0x3ea
call qword [sym.imp.USER32.dll_LoadStringW]
xor edx, edx
test eax, eax
jne 0x14000bbc1
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
xor edx, edx
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
mov eax, 0x80004005
test esi, esi
cmovns esi, eax
test esi, esi
js 0x14000bd09
mov qword [rsp + 0x48], rdx
lea rcx, [rbp + 0x30]
test r14, r14
lea rdx, [rsp + 0x48]
mov r8, rdi
cmovne r8, r14
call fcn.14000d4cc
mov esi, eax
test eax, eax
js 0x14000bcf4
lea rdx, [0x140035918]
mov ecx, 0x40
call fcn.1400308a0
xor ecx, ecx
mov r14, rax
test rax, rax
je 0x14000bc33
mov dword [r14 + 8], 1
lea rax, [0x1400333a8]
mov qword [r14], rax
mov byte [r14 + 0xc], cl
mov qword [r14 + 0x10], rcx
mov qword [r14 + 0x18], rcx
mov qword [r14 + 0x20], rcx
mov qword [r14 + 0x28], rcx
mov dword [r14 + 0x30], ecx
mov qword [r14 + 0x38], rcx
jmp 0x14000bc36
mov r14, rcx
test r14, r14
mov eax, 0x8007000e
cmove esi, eax
test esi, esi
js 0x14000bcdf
mov r9, qword [rsp + 0x48]
lea rax, [rsp + 0x40]
mov qword [rsp + 0x30], rax
lea r8, [rbp - 0x60]
lea rax, str.Windows.SystemToast.NfpAppLaunch
mov byte [rsp + 0x40], cl
mov rdx, r13
mov qword [rsp + 0x20], rax
mov rcx, r14
call fcn.140012978
xor ecx, ecx
cmp byte [rsp + 0x40], cl
je 0x14000bc83
mov esi, ecx
jmp 0x14000bcdf
mov esi, 0x80004004
mov r10, qword [0x14003d048]
lea rax, [0x14003d048]
cmp r10, rax
je 0x14000bcdf
test byte [r10 + 0x1c], 8
je 0x14000bcdf
mov eax, dword [r15]
inc eax
lea ecx, [rax + rax*4]
cmp ecx, 0x1e1
ja 0x14000bcbc
mov eax, ecx
mov rcx, r12
sub rcx, rax
jmp 0x14000bcc0
xor eax, eax
mov ecx, eax
lea r9, [0x140035650]
mov edx, ntohl
add r9, rcx
lea r8, [0x140036090]
mov rcx, qword [r10 + 0x10]
call fcn.1400012b0
test r14, r14
je 0x14000bcf4
mov rax, qword [r14]
mov rcx, r14
mov rax, qword [rax + 0x10]
call qword [0x140034e68]
mov rcx, qword [rsp + 0x48]
xor r13d, r13d
mov qword [rsp + 0x48], r13
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
jmp 0x14000bd0c
xor r13d, r13d
mov rcx, qword [0x14003d048]
lea rax, [0x14003d048]
cmp rcx, rax
je 0x14000bd60
test byte [rcx + 0x1c], 1
je 0x14000bd60
mov eax, dword [r15]
lea edx, [rax + rax*4]
cmp edx, 0x1e1
ja 0x14000bd3a
mov eax, edx
sub r12, rax
jmp 0x14000bd3d
mov r12, r13
mov rcx, qword [rcx + 0x10]
lea r9, [0x140035650]
add r9, r12
mov dword [rsp + 0x20], esi
mov edx, reloc.WS2_32.dll_ntohl
lea r8, [0x140036090]
call fcn.140001304
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x14000bd85
mov qword [rsp + 0x50], r13
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [0x140034e68]
or eax, 0xffffffff
add dword [r15], eax
cmp ebx, eax
je 0x14000bda6
mov ecx, ebx
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_TlsGetValue]
test rax, rax
je 0x14000bda6
xor edx, edx
mov ecx, ebx
call qword [sym.imp.api_ms_win_core_processthreads_l1_1_0.dll_TlsSetValue]
mov eax, esi
mov rcx, qword [rbp + 0x240]
xor rcx, rsp
call fcn.1400304d0
mov rbx, qword [rsp + 0x3a8]
add rsp, 0x350
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
lea rcx, [0x14003dad0]
call fcn.140030768
cmp dword [0x14003dad0], 0xffffffff
jne 0x14000ba00
movups xmm0, xmmword [0x1400355f8]
mov eax, dword [0x140035608]
lea rcx, [0x14003dad0]
mov dword [0x14003d9a0], eax
movups xmmword [0x14003d990], xmm0
call fcn.140030708
jmp 0x14000ba00