Function at 0x100092eb
Capabilities:
Get thread local storage value

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x14
push ebx
push esi
push edi
mov esi, ecx
mov dword [esp + 0x18], edx
push 0xc
mov dword [esp + 0x10], esi
xor ebx, ebx
call fcn.10007d64
mov ecx, eax
test ecx, ecx
jne 0x1000931a
mov eax, dword [esi + 0x1c]
jmp 0x100094db
mov esi, dword [ebp + 8]
mov edi, ebx
mov eax, dword [ecx]
mov dword [esi], eax
mov eax, dword [ecx + 8]
mov dword [esp + 0x1c], eax
test eax, eax
je 0x10009353
push 0x2c
call dword [sym.imp.ole32.dll_CoTaskMemAlloc]
mov dword [esp + 0x14], eax
test eax, eax
je 0x10009349
mov dword [eax], 0x1000101c
mov dword [eax + 0x1c], ebx
jmp 0x10009359
mov eax, 0x8007000e
jmp 0x100094db
mov eax, ebx
mov dword [esp + 0x14], ebx
push 1
push 0xc
push dword [esp + 0x20]
mov dword [esi + 8], eax
mov esi, dword [0x100136a8]
mov ecx, esi
call dword [0x100142a8]
call esi
mov ecx, eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x10], ecx
push 2
pop edx
test eax, eax
je 0x1000941d
movzx eax, word [eax]
push 9
pop edx
push 2
pop esi
cmp ax, si
je 0x1000939b
cmp ax, dx
jne 0x1000941a
cmp dword [ecx], 1
jne 0x1000941a
push dword [0x100131bc]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test dword [eax + 0x44], 0x20000000
je 0x10009416
mov eax, dword [esp + 0x10]
mov esi, dword [0x100136c8]
mov ecx, esi
push 8
movzx eax, word [eax + 4]
push eax
call dword [0x100142a8]
call esi
mov esi, eax
test esi, esi
jne 0x100093e0
mov eax, 0x80070057
jmp 0x100094db
push esi
call dword [sym.imp.GDI32.dll_GetObjectType]
mov ecx, dword [ebp + 0xc]
push 2
pop edx
movzx ecx, word [ecx]
cmp cx, dx
jne 0x100093fa
cmp eax, 7
je 0x1000940a
push 9
pop edx
cmp cx, dx
jne 0x10009416
cmp eax, 5
jne 0x10009416
push 2
pop edx
mov ecx, dword [esp + 0x10]
mov dword [ecx], 0x10
jmp 0x1000941f
mov ecx, dword [esp + 0x10]
push 2
pop edx
mov esi, ebx
mov eax, dword [ecx]
sub eax, ebx
je 0x10009498
sub eax, 1
je 0x1000953f
sub eax, 1
je 0x1000951c
sub eax, edx
je 0x10009516
sub eax, 4
je 0x100094e4
sub eax, 8
je 0x10009475
sub eax, 0x10
je 0x1000945c
mov edi, 0x80070057
jmp 0x100095c5
mov eax, dword [ebp + 8]
movzx edx, word [ecx + 4]
add eax, 4
mov ecx, dword [esp + 0xc]
push eax
call fcn.10008a57
jmp 0x100095bb
test esi, esi
jne 0x10009492
movzx eax, word [ecx + 4]
mov esi, dword [0x100136c8]
mov ecx, esi
push 8
push eax
call dword [0x100142a8]
call esi
mov esi, eax
mov eax, dword [ebp + 8]
mov dword [eax + 4], esi
cmp dword [esp + 0x14], ebx
je 0x100094d9
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x100094a8
movzx ebx, word [eax]
mov esi, dword [0x100136a8]
mov ecx, esi
push 1
push 0xc
push dword [esp + 0x20]
call dword [0x100142a8]
call esi
mov ecx, dword [esp + 0x14]
push ebx
push dword [esp + 0x20]
push dword [ebp + 8]
push eax
mov eax, dword [esp + 0x1c]
push dword [eax + 0x28]
call fcn.10009008
mov eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push ebx
push ebx
push 0xb
push ebx
push dword [ecx + 4]
mov ecx, dword [esp + 0x20]
push ebx
mov ecx, dword [ecx + 0x28]
call fcn.10006a1c
mov edi, eax
mov eax, dword [ebp + 8]
mov dword [eax + 4], edi
neg edi
sbb edi, edi
and edi, 0x7ff8fff2
add edi, 0x8007000e
jmp 0x100095bd
push ebx
push ebx
push 0xa
jmp 0x100094e8
mov edx, dword [ecx + 4]
mov esi, dword [esp + 0xc]
mov ecx, esi
push ebx
push ebx
call fcn.10007aed
mov ecx, dword [ebp + 8]
mov dword [ecx + 4], eax
test eax, eax
jne 0x10009498
mov edi, dword [esi + 0x1c]
jmp 0x100095bd
mov eax, dword [ebp + 0xc]
movzx edx, word [ecx + 4]
test eax, eax
je 0x100095a1
movzx eax, word [eax]
cmp ax, word [0x10013690]
je 0x1000958f
cmp ax, word [0x10013694]
je 0x1000958f
cmp eax, 0xf
jne 0x100095a1
mov esi, dword [0x100136a0]
mov ecx, esi
push edx
call dword [0x100142a8]
call esi
mov edi, eax
mov eax, dword [ebp + 8]
mov dword [eax + 4], edi
neg edi
sbb edi, edi
and edi, 0x7ff8ffa9
add edi, 0x80070057
jmp 0x100095bd
mov eax, dword [ebp + 8]
mov ecx, dword [esp + 0xc]
add eax, 4
push eax
call fcn.10008c72
jmp 0x100095bb
push dword [ebp + 0x14]
mov eax, dword [ebp + 8]
mov ecx, dword [esp + 0x10]
add eax, 4
push eax
push 0xc0
mov dword [eax], ebx
call fcn.1000881a
mov edi, eax
test edi, edi
jns 0x10009498
mov eax, dword [esp + 0x14]
test eax, eax
je 0x100094d9
push eax
mov dword [eax], 0x1000101c
call dword [sym.imp.ole32.dll_CoTaskMemFree]
jmp 0x100094d9