Function at 0x141271e40
Capabilities:
Create thread
Get thread local storage value
Set thread local storage value

Disassembly:
mov qword [rsp + 8], rbx
push rsi
push rdi
push r12
push r14
push r15
sub rsp, 0x50
movzx ebx, cl
call fcn.141272710
mov ecx, dword [0x14136f468]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov rsi, rax
test rax, rax
jne 0x141271f1f
test bl, bl
je 0x141271f1f
mov ecx, 0x98
call fcn.1413164c8
mov qword [rsp + 0x88], rax
mov r15d, 1
mov edx, r15d
mov rcx, rax
call fcn.141210d40
mov rsi, rax
mov qword [rsp + 0x90], rax
mov rdx, rax
mov ecx, dword [0x14136f468]
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
nop
mov ecx, 0x10
call fcn.1413164c8
mov qword [rsp + 0x88], rax
mov rdx, rsi
mov rcx, rax
call fcn.141210c20
nop
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x88]
nop
nop
mov qword [rsi + 0x60], rax
mov rcx, rsi
call fcn.141211670
mov byte [rsi + 0x92], 1
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov eax, eax
mov qword [rsi + 0x68], rax
mov rax, qword [0x141372258]
nop
test rax, rax
jne 0x141271f37
mov rax, qword [rsi + 0x60]
nop
mov qword [0x141372258], rax
mov rax, rsi
mov rbx, qword [rsp + 0x80]
add rsp, 0x50
pop r15
pop r14
pop r12
pop rdi
pop rsi
ret
mov qword [rsp + 0x88], 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [rsp + 0x30], 2
xor r12d, r12d
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
lea r9, [rsp + 0x88]
mov r8, rdi
mov rdx, rbx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
mov rdi, qword [rsi + 0x60]
nop
mov rbx, qword [rsp + 0x88]
lea r14, [0x141372be8]
mov qword [rsp + 0x40], r14
xor eax, eax
lock cmpxchg qword [0x141372be8], r15
je 0x141271fb5
mov rcx, r14
call fcn.141207060
mov byte [rsp + 0x48], 1
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp eax, dword [0x141372bf0]
jne 0x141271ff1
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov rax, r15
lock cmpxchg qword [0x141372be8], r12
je 0x141271f1f
mov rcx, r14
call fcn.141207560
jmp 0x141271f1f
mov qword [rsp + 0x90], rbx
lea r8, [rsp + 0x90]
mov rdx, qword [0x141372c18]
lea rcx, [0x141372c08]
call fcn.1411e3db0
mov rax, qword [0x141372c08]
test rax, rax
je 0x141272027
mov eax, dword [rax]
cmp eax, 1
jle 0x14127203b
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [0x141372c08]
call fcn.1411dd100
mov qword [rsp + 0x90], rdi
lea r8, [rsp + 0x90]
mov rdx, qword [0x141372c30]
lea rcx, [0x141372c20]
call fcn.1411e3db0
mov rax, qword [0x141372c20]
test rax, rax
je 0x141272071
mov eax, dword [rax]
cmp eax, 1
jle 0x141272085
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [0x141372c20]
call fcn.1411dd100
cmp dword [0x141372bf0], 0
jne 0x1412720fa
cmp qword [0x141372c38], 0
jne 0x1412720cd
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [0x141372c38], rax
mov qword [rsp + 0x90], rax
lea r8, [rsp + 0x90]
xor edx, edx
lea rcx, [0x141372c08]
call fcn.1411e3db0
lea rax, [0x141372bf0]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], r12d
xor r9d, r9d
lea r8, [0x141272320]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rcx, rax
jmp 0x141271fcb
mov rcx, qword [0x141372c38]
call qword [sym.imp.KERNEL32.dll_SetEvent]
jmp 0x141271fd2