Function at 0x1000b0f0
Capabilities:
Get thread local storage value

Disassembly:
mov ecx, dword fs:[0x18]
mov eax, dword [esp + 8]
cmp dword [ecx + 4], eax
ja 0x1000b111
mov eax, dword [esp + 4]
push eax
call dword [sym.imp.MSVCR100.dll_malloc]
add esp, 4
ret 8
lea edx, [esp + 8]
cmp eax, edx
jbe 0x1000b100
mov dl, byte [0x10037029]
push ebx
mov bl, byte [0x10039f71]
push esi
push edi
test dl, dl
jne 0x10014d10
test bl, bl
je 0x10014cc6
mov cl, byte [0x10039f72]
test cl, cl
je 0x10014cdb
mov esi, dword [0x10037060]
mov eax, esi
cmp eax, 0xffffffff
je 0x1000b1de
test dl, dl
jne 0x1000b16b
test bl, bl
je 0x10014d2c
test cl, cl
je 0x10014d41
mov edx, esi
mov eax, dword [0x10039fa4]
cmp eax, 0x1000b230
jne 0x10014dad
test bl, bl
je 0x10014d73
test cl, cl
je 0x10014d86
push edx
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
test eax, eax
je 0x1000b215
mov esi, eax
mov ecx, dword [esp + 0x10]
lea edx, [ecx + 4]
test dl, 7
je 0x1000b1b0
shr edx, 3
lea edx, [edx*8 + 8]
mov edi, dword [esi + 8]
lea eax, [edi + edx]
cmp eax, dword [esi + 4]
ja 0x1000b1ce
mov ecx, dword [esi]
mov dword [esi + 8], eax
add edi, ecx
mov dword [eax + ecx - 4], edx
mov eax, edi
pop edi
pop esi
pop ebx
ret 8
push ecx
call dword [sym.imp.MSVCR100.dll_malloc]
add esp, 4
pop edi
pop esi
pop ebx
ret 8
push 0x1000cb30
call dword [0x10039fa0]
mov esi, eax
call fcn.1000ae80
mov dl, byte [0x10037029]
mov cl, byte [0x10039f72]
mov bl, byte [0x10039f71]
test al, al
je 0x10014d1b
mov dword [0x10037060], esi
jmp 0x1000b157
call fcn.1000ad80
mov esi, eax
push esi
call fcn.1000b570
push eax
call dword [0x10039fa8]
jmp 0x1000b19a
push 1
pop eax
test eax, eax
je 0x10014d59
lea eax, [ebp - 0x230]
mov dword [ebp - 0x3a0], eax
cmp dword [ebp - 0x6fc], 0
jne 0x1001482e
and byte [ebp - 0x77c], 0
and byte [ebp - 0x77b], 0
mov byte [ebp - 0x77a], 4
and byte [ebp - 0x779], 0
mov byte [ebp - 0x778], 0xb8
mov byte [ebp - 0x777], 0xc1
mov byte [ebp - 0x776], 0xa7
mov byte [ebp - 0x775], 0xab
mov byte [ebp - 0x774], 0x89
mov byte [ebp - 0x773], 0x94
mov byte [ebp - 0x772], 0x9c
mov byte [ebp - 0x771], 0x89
mov byte [ebp - 0x770], 0x9a
mov byte [ebp - 0x76f], 0x96
mov byte [ebp - 0x76e], 0xdb
mov byte [ebp - 0x76d], 0xbd
mov byte [ebp - 0x76c], 0x92
mov byte [ebp - 0x76b], 0x97
mov byte [ebp - 0x76a], 0x9e
mov byte [ebp - 0x769], 0x88
mov byte [ebp - 0x768], 0xa7
mov byte [ebp - 0x767], 0xb8
mov byte [ebp - 0x766], 0x94
mov byte [ebp - 0x765], 0x96
mov byte [ebp - 0x764], 0x96
mov byte [ebp - 0x763], 0x94
mov byte [ebp - 0x762], 0x95
mov byte [ebp - 0x761], 0xdb
mov byte [ebp - 0x760], 0xbd
mov byte [ebp - 0x75f], 0x92
mov byte [ebp - 0x75e], 0x97
mov byte [ebp - 0x75d], 0x9e
mov byte [ebp - 0x75c], 0x88
mov byte [ebp - 0x75b], 0xa7
mov byte [ebp - 0x75a], 0xa8
mov byte [ebp - 0x759], 0x82
mov byte [ebp - 0x758], 0x88
mov byte [ebp - 0x757], 0x8f
mov byte [ebp - 0x756], 0x9e
mov byte [ebp - 0x755], 0x96
mov byte [ebp - 0x754], 0xa7
mov byte [ebp - 0x753], 0x88
mov byte [ebp - 0x752], 0x82
mov byte [ebp - 0x751], 0x96
mov byte [ebp - 0x750], 0x88
mov byte [ebp - 0x74f], 0x89
mov byte [ebp - 0x74e], 0x8d
mov byte [ebp - 0x74d], 0xd5
mov byte [ebp - 0x74c], 0x9f
mov byte [ebp - 0x74b], 0x97
mov byte [ebp - 0x74a], 0x97
mov byte [ebp - 0x749], 0xfb
lea eax, [ebp - 0x77c]
push eax
call fcn.10012cc3
pop ecx
mov al, byte [ebp - 0x12c]
mov byte [ebp - 0x778], al
push 0x30
lea eax, [ebp - 0x77c]
push eax
call fcn.10012cc3
pop ecx
push eax
lea eax, [ebp - 0x504]
push eax
call fcn.10012c24
add esp, 0xc
lea eax, [ebp - 0x504]
mov dword [ebp - 0x3a0], eax
jmp 0x10014c2b
cmp dword [ebp - 0x6fc], 1
jne 0x100148df
and byte [ebp - 0x78c], 0
and byte [ebp - 0x78b], 0
mov byte [ebp - 0x78a], 0xa0
and byte [ebp - 0x789], 0
mov byte [ebp - 0x788], 3
mov byte [ebp - 0x787], 0x3b
mov byte [ebp - 0x786], 0x33
mov byte [ebp - 0x785], 0x3c
mov byte [ebp - 0x784], 0x30
mov byte [ebp - 0x783], 0x3a
mov byte [ebp - 0x782], 0x2d
mov byte [ebp - 0x781], 0x71
mov byte [ebp - 0x780], 0x3b
mov byte [ebp - 0x77f], 0x33
mov byte [ebp - 0x77e], 0x33
mov byte [ebp - 0x77d], 0x5f
push 0xc
lea eax, [ebp - 0x78c]
push eax
call fcn.10012cc3
pop ecx
push eax
cmp dword [ebp - 0x6fc], 2
jne 0x1001499c
and byte [ebp - 0x79c], 0
and byte [ebp - 0x79b], 0
mov byte [ebp - 0x79a], 0x10
and byte [ebp - 0x799], 0
cmp dword [ebp - 0x6fc], 3
jne 0x10014a3d
and byte [ebp - 0x7ac], 0
and byte [ebp - 0x7ab], 0
cmp dword [ebp - 0x6fc], 4
jne 0x10014ae7
and byte [ebp - 0x7bc], 0
and byte [ebp - 0x7bb], 0
mov byte [ebp - 0x7ba], 2
and byte [ebp - 0x7b9], 0
mov byte [ebp - 0x7b8], 0xa1
mov byte [ebp - 0x7b7], 0xb2
mov byte [ebp - 0x7b6], 0xb1
mov byte [ebp - 0x7b5], 0xb8
mov byte [ebp - 0x7b4], 0xcf
mov byte [ebp - 0x7b3], 0xce
mov byte [ebp - 0x7b2], 0xd3
mov byte [ebp - 0x7b1], 0x99
mov byte [ebp - 0x7b0], 0x91
mov byte [ebp - 0x7af], 0x91
mov byte [ebp - 0x7ae], 0xfd
call fcn.10012cb3
and al, 0xaa
loope 0x10014b34
push 0xb
lea eax, [ebp - 0x7bc]
push eax
call fcn.10012cc3
pop ecx
push eax
mov eax, dword [ebp - 0x338]
lea eax, [ebp + eax - 0x230]
push eax
call fcn.10012c24
add esp, 0xc
jmp 0x10014c2b
cmp dword [ebp - 0x6fc], 5
jne 0x10014b88
and byte [ebp - 0x7cc], 0
and byte [ebp - 0x7cb], 0
mov byte [ebp - 0x7ca], 0x3f
and byte [ebp - 0x7c9], 0
mov byte [ebp - 0x7c8], 0x9c
mov byte [ebp - 0x7c7], 0x90
mov byte [ebp - 0x7c6], 0x93
mov byte [ebp - 0x7c5], 0x81
mov byte [ebp - 0x7c4], 0x90
mov byte [ebp - 0x7c3], 0xac
test dword [0xacfffff8], edi
mov byte [ebp - 0x7c2], 0xee
mov byte [ebp - 0x7c1], 0xa4
mov byte [ebp - 0x7c0], 0xac
mov byte [ebp - 0x7bf], 0xac
mov byte [ebp - 0x7be], 0xc0
push 0xb
lea eax, [ebp - 0x7cc]
push eax
call fcn.10012cc3
pop ecx
push eax
mov eax, dword [ebp - 0x338]
lea eax, [ebp + eax - 0x230]
push eax
call fcn.10012c24
add esp, 0xc
jmp 0x10014c2b
cmp dword [ebp - 0x6fc], 6
jne 0x10014c26
and byte [ebp - 0x7dc], 0
and byte [ebp - 0x7db], 0
mov byte [ebp - 0x7da], 0x11
and byte [ebp - 0x7d9], 0
mov byte [ebp - 0x7d8], 0xb2
mov byte [ebp - 0x7d7], 0x8b
mov byte [ebp - 0x7d6], 0x9c
mov byte [ebp - 0x7d5], 0x9c
mov byte [ebp - 0x7d4], 0x81
mov byte [ebp - 0x7d3], 0x9c
mov byte [ebp - 0x7d2], 0xc0
mov byte [ebp - 0x7d1], 0x82
mov byte [ebp - 0x7d0], 0x81
mov byte [ebp - 0x7cf], 0x89
mov byte [ebp - 0x7ce], 0xee
push 0xb
lea eax, [ebp - 0x7dc]
push eax
call fcn.10012cc3
pop ecx
push eax
mov eax, dword [ebp - 0x338]
lea eax, [ebp + eax - 0x230]
push eax
call fcn.10012c24
add esp, 0xc
jmp 0x10014c2b
jmp 0x10014d59
mov ebp, 0xfffffc80
push dword [edi + ebp + 0x6a]
add byte [ebp - 0x6c37b], cl
call dword [eax - 1]
mov ch, 0x74
cld
invalid
xchg ebp, eax
cld
clc
invalid
cmp dword [ebp - 0x3a4], 0
je 0x10014d49
lea eax, [ebp - 0x714]
push eax
call fcn.10012cc3
pop ecx
push eax
push dword [ebp - 0x3a4]
push dword [ebp + 0x14]
call fcn.10012c78
add esp, 0xc
mov dword [ebp - 0x37c], eax
xchg ebx, eax
invalid
les ecx, [ecx + ecx*4]
test dword [esp + edi*8 - 0x427c0001], eax
test ah, bh
invalid
cmp dword [ebp - 0x37c], 0
je 0x10014d54
jmp 0x10014d59
jmp 0x10014655
cmp dword [ebp - 0x37c], 0
jne 0x10014e03
mov eax, dword [ebp - 0x748]
mov dword [ebp - 0x7ec], eax
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0x7e8], eax
and dword [ebp - 0x7e0], 0
test dword [esp + edi*8 - 1], esi
dec dword [ecx - 0x7e77b]
inc dword [ebx - 0x7df5b]
inc dword [eax]
push 0x1000
add byte [eax], dl
add byte [eax], al
push 8
push dword [ebp - 0x674]
call dword [ebp - 0x67c]
mov dword [ebp - 0x7e4], eax
push dword [ebp - 0x7e4]
lea eax, [ebp - 0x7ec]
push eax
push dword [ebp - 0x748]
push dword [ebp + 0x18]
mov eax, 0xfffffff8
jne 0x10014dcc
push dword [ebp + 0x14]
call fcn.10012e8f
add esp, 0x14
mov dword [ebp - 0x7e0], eax
cmp dword [ebp - 0x7e0], 0
je 0x10014def
lea eax, [ebp - 0x714]
push eax
call fcn.10012cc3
pop ecx
push eax
push dword [ebp - 0x7e0]
call fcn.10012d58
pop ecx
pop ecx
mov dword [ebp - 0x37c], eax
push dword [ebp - 0x7e4]
push 1
push dword [ebp - 0x674]
call dword [ebp - 0x39c]
push dword [ebp + 0x1c]
push dword [ebp - 0xc]
push dword [ebp - 0x540]
push dword [ebp - 0x684]
push dword [ebp - 0x688]
push dword [ebp - 0x3ac]
push dword [ebp - 0x400]
push dword [ebp - 0x54c]
push dword [ebp - 0x678]
lea eax, [ebp - 0x334]
push eax
push dword [ebp - 4]
push dword [ebp + 8]
call dword [ebp - 0x37c]