Function at 0x72a377ab
Capabilities:
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x418
push ebx
push esi
push edi
push dword [0x72a4ef9c]
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ebx, dword [ebp + 8]
mov esi, eax
push ebx
call fcn.72a3766b
cmp word [ebp + 0xc], 0xa
mov ecx, 0x80020004
jne 0x72a3781e
cmp dword [ebp + 0x14], ecx
jne 0x72a3781e
or eax, 0xffffffff
cmp word [ebp + 0x1c], 0xa
movsx eax, ax
jne 0x72a37822
cmp dword [ebp + 0x24], ecx
jne 0x72a37822
or ecx, 0xffffffff
test cx, cx
je 0x72a37953
test eax, eax
je 0x72a378f6
test ebx, ebx
jne 0x72a37826
xor eax, eax
add eax, 0x26
mov esi, 0x104
cmp eax, esi
jb 0x72a3782d
push 5
call fcn.72a0e22c
xor eax, eax
jmp 0x72a377e2
xor ecx, ecx
jmp 0x72a377f4
mov eax, dword [ebx - 4]
shr eax, 1
jmp 0x72a3780b
lea eax, [ebp - 0x418]
push 0x72970914
push eax
call fcn.729491f6
pop ecx
lea eax, [ebp - 0x418]
pop ecx
push ebx
push eax
call fcn.72a2bbb8
pop ecx
lea eax, [ebp - 4]
pop ecx
mov ebx, 0x80000001
push eax
lea eax, [ebp - 0x418]
push eax
push ebx
call fcn.72a22185
test eax, eax
je 0x72a37870
push 5
call fcn.72a0e22c
lea eax, [ebp - 0x210]
push esi
push eax
push 0
push dword [ebp - 4]
call fcn.72a222d4
test eax, eax
jne 0x72a378ba
lea eax, [ebp - 0x210]
push eax
push dword [ebp - 4]
call fcn.72a37a1a
mov edi, eax
test edi, edi
je 0x72a37870
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
je 0x72a378af
test edi, edi
jne 0x72a378b7
push 5
pop edi
test edi, edi
je 0x72a37a13
push edi
jmp 0x72a378ec
cmp eax, 0x103
jne 0x72a378f1
push dword [ebp - 4]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
je 0x72a378d5
push 5
call fcn.72a0e22c
lea eax, [ebp - 0x418]
push eax
push ebx
call fcn.72a221e4
test eax, eax
je 0x72a37a13
push 5
call fcn.72a0e22c
push 5
pop edi
jmp 0x72a3789b
lea eax, [ebp + 0xc]
push eax
call sym.MSVBVM60.DLL___vbaStrVarCopy
mov edi, eax
mov word [esi + 0x50], 8
push edi
mov dword [esi + 0x58], edi
call fcn.72a3766b
lea eax, [ebp - 0x210]
push 0x104
push eax
push edi
push ebx
call fcn.72a37686
mov ebx, eax
test ebx, ebx
jne 0x72a3793c
lea eax, [ebp - 0x210]
push eax
push 0x80000001
call fcn.72a37a1a
mov ebx, eax
and word [esi + 0x50], 0
push edi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
test ebx, ebx
je 0x72a37a13
push ebx
jmp 0x72a378ec
test eax, eax
je 0x72a3795e
push 5
call fcn.72a0e22c
lea eax, [ebp + 0xc]
push eax
call sym.MSVBVM60.DLL___vbaStrVarCopy
mov ebx, eax
mov word [esi + 0x50], 8
push ebx
mov dword [esi + 0x58], ebx
call fcn.72a3766b
lea eax, [ebp + 0x1c]
push eax
call sym.MSVBVM60.DLL___vbaStrVarCopy
mov edi, eax
mov word [esi + 0x60], 8
push edi
mov dword [esi + 0x68], edi
call fcn.72a3766b
lea eax, [ebp - 0x210]
push 0x104
push eax
push ebx
push dword [ebp + 8]
call fcn.72a37686
test eax, eax
mov dword [ebp + 8], eax
jne 0x72a379ef
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0x210]
push eax
push 0x80000001
call fcn.72a22185
test eax, eax
jne 0x72a379e8
push edi
push dword [ebp - 8]
call fcn.72a22242
test eax, eax
je 0x72a379db
mov dword [ebp + 8], 5
push dword [ebp - 8]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test eax, eax
je 0x72a379ef
mov dword [ebp + 8], 5
and word [esi + 0x60], 0
push edi
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call edi
and word [esi + 0x50], 0
push ebx
call edi
cmp dword [ebp + 8], 0
je 0x72a37a13
push dword [ebp + 8]
jmp 0x72a378ec
pop edi
pop esi
pop ebx
leave
ret 0x24