Function at 0x1001f420
Capabilities:
Get thread local storage value
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x60
push esi
mov esi, dword [esp + 0x68]
mov eax, dword [esi + 8]
push str.CreateUser
lea ecx, [esp + 0xc]
mov dword [esp + 0xc], vtable.CDAOContext.0
mov dword [esp + 0x10], eax
call fcn.10009750
lea ecx, [esp + 0x4c]
mov dword [esp + 8], vtable.CDAOVARGContext.0
mov word [esp + 0x18], 0
mov dword [esp + 0x14], 1
call fcn.10013930
lea ecx, [esp + 0x34]
call fcn.10013930
lea ecx, [esp + 0x1c]
call fcn.10013930
mov edx, dword [esp + 0x6c]
push 0
lea ecx, [esp + 0x50]
push ecx
mov ecx, dword [esp + 0x78]
sub esp, 0x10
mov eax, esp
mov dword [eax], edx
mov edx, dword [esp + 0x8c]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x90]
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
lea ecx, [esp + 0x20]
call fcn.1000a260
mov ecx, dword [esp + 0x7c]
push 0
lea edx, [esp + 0x38]
push edx
mov edx, dword [esp + 0x88]
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x9c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0xa0]
mov dword [eax + 8], ecx
lea ecx, [esp + 0x20]
mov dword [eax + 0xc], edx
call fcn.1000a260
mov ecx, dword [esp + 0x8c]
mov edx, dword [esp + 0x90]
push 0
lea eax, [esp + 0x20]
push eax
sub esp, 0x10
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0xac]
mov dword [eax + 4], edx
mov edx, dword [esp + 0xb0]
mov dword [eax + 8], ecx
lea ecx, [esp + 0x20]
mov dword [eax + 0xc], edx
call fcn.1000a260
mov eax, dword [esp + 0x10]
test eax, eax
jl 0x1001f5d5
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x20]
push eax
sub esp, 0x14
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x40]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x44]
mov dword [eax + 0xc], edx
mov edx, dword [esp + 0x4c]
mov dword [eax + 0x10], ecx
mov ecx, dword [esp + 0x50]
sub esp, 0x14
mov eax, esp
mov dword [eax], edx
mov edx, dword [esp + 0x68]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x6c]
mov dword [eax + 8], edx
mov edx, dword [esp + 0x70]
mov dword [eax + 0xc], ecx
mov ecx, dword [esp + 0x78]
mov dword [eax + 0x10], edx
mov edx, dword [esp + 0x7c]
sub esp, 0x14
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x94]
mov dword [eax + 4], edx
mov edx, dword [esp + 0x98]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x9c]
mov dword [eax + 0xc], edx
mov edx, dword [esi + 8]
mov dword [eax + 0x10], ecx
mov eax, dword [edx + 8]
push eax
lea ecx, [esp + 0xac]
push ecx
call fcn.10066ad0
test eax, eax
je 0x1001f5dc
movzx eax, ax
or eax, 0x800a0000
mov dword [esp + 0x10], eax
mov esi, eax
jmp 0x1001f68b
call fcn.10020d20
test eax, eax
jl 0x1001f60b
mov edx, dword [0x1007eed0]
push 0xe4
push edx
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
push eax
call fcn.10069dc0
test eax, eax
jne 0x1001f661
push 0x100202e0
call fcn.1005ad10
xor eax, eax
mov ecx, dword [esp + 0x68]
mov edx, dword [esi + 8]
push ecx
mov ecx, dword [edx + 0x28]
push ecx
lea edx, [esp + 0xc]
push edx
push 0x100703e8
push 0
push eax
call fcn.10005db0
mov esi, eax
test esi, esi
mov dword [esp + 0x10], esi
jge 0x1001f67e
mov eax, dword [esp + 0xc]
test eax, eax
je 0x1001f66a
mov eax, dword [eax + 8]
test eax, eax
je 0x1001f66a
push 2
push esi
push eax
call fcn.10019ba0
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x68]
push eax
call fcn.100573a0
mov esi, dword [esp + 0x10]
jmp 0x1001f68b
mov ecx, eax
call fcn.10004a40
jmp 0x1001f60d
mov eax, dword [esp + 0x68]
push eax
mov dword [esp + 0x14], esi
call fcn.100573a0
mov esi, dword [esp + 0x10]
jmp 0x1001f68b
mov ecx, dword [esp + 0x9c]
mov edx, dword [esp + 4]
mov dword [ecx], edx
lea ecx, [esp + 0x1c]
call fcn.10013940
lea ecx, [esp + 0x34]
call fcn.10013940
lea ecx, [esp + 0x4c]
call fcn.10013940
lea ecx, [esp + 8]
call fcn.100097c0
mov eax, esi
pop esi
add esp, 0x60
ret 0x38