Function at 0x6cf500
Capabilities:
Get thread local storage value

Disassembly:
push r15
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0xb8
mov rsi, qword [0x00794450]
mov rbx, qword [rcx]
test rsi, rsi
mov rdi, rcx
je 0x6cf6a0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [rsi]
mov ebp, eax
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ecx, ebp
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_SetLastError]
test rsi, rsi
je 0x6cf6a0
mov rsi, qword [rsi + 0x10]
test rsi, rsi
je 0x6cf55e
mov eax, dword [rsi + 0x28]
cmp eax, 3
je 0x6cf5c4
test rbx, rbx
je 0x6cf5b0
lea rbp, [rbx + 8]
mov rcx, rbp
call fcn.006c7300
test eax, eax
mov esi, eax
jne 0x6cf5b5
cmp qword [rdi], 0
je 0x6cfb68
mov eax, dword [rbx]
mov rcx, rbp
lea edi, [rax - 1]
mov dword [rbx], edi
call fcn.006c8230
test edi, edi
js 0x6cf754
xor eax, eax
add rsp, 0xb8
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
pop r15
ret
mov esi, 0x16
call qword [sym.imp.msvcrt.dll__errno]
mov dword [rax], esi
mov eax, 0xffffffff
jmp 0x6cf598
mov qword [rsp + 0xa8], 0
lea rax, [rsi + 0x38]
lea rbp, [rsp + 0x90]
mov qword [rsp + 0x90], rax
mov qword [rsp + 0xa0], 0
mov rdx, rbp
mov qword [rsp + 0x98], 0
xchg qword [rax], rdx
test rdx, rdx
je 0x6cf641
mov qword [rdx + 8], rbp
xor eax, eax
add rdx, 0x18
mov rcx, 0xffffffffffffffff
lock cmpxchg qword [rdx], rcx
test rax, rax
mov rcx, rax
je 0x6cf62b
call qword [sym.imp.KERNEL32.dll_SetEvent]
lea r13, [rbp + 0x10]
xor r12d, r12d
lock xadd qword [r13], r12
test r12, r12
je 0x6cf970
cmp dword [rsi + 0x18c], 1
jne 0x6cfbcb
mov r8, qword [rsp + 0x90]
lea rcx, [rbp + 8]
xor edx, edx
lock xadd qword [rcx], rdx
test rdx, rdx
mov rcx, rdx
je 0x6cf9d0
add rcx, 0x10
xor eax, eax
mov rdx, 0xffffffffffffffff
lock cmpxchg qword [rcx], rdx
test rax, rax
mov rcx, rax
je 0x6cf55e
call qword [sym.imp.KERNEL32.dll_SetEvent]
jmp 0x6cf55e
lea r12, [rsp + 0x50]
mov rcx, r12
call fcn.006c4450
mov rbp, qword [rsp + 0x50]
mov r14, qword [rsp + 0x58]
test rbp, rbp
mov rsi, rbp
je 0x6cf55e
or byte [rbp + 0x194], 1
mov dword [rbp + 0x184], 1
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov r13, qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [rbp + 0x198], eax
call r13
mov qword [rsp + 0x48], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov r15, rax
call r13
lea r9, [rbp + 8]
mov r8, qword [rsp + 0x48]
mov rdx, r15
mov dword [rsp + 0x30], 2
mov rcx, rax
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
je 0x6cf9b0
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_GetThreadPriority]
mov rcx, qword [0x00794450]
mov rdx, rbp
mov dword [rbp + 0x188], eax
call fcn.006c6a30
jmp 0x6cf556
lea rcx, [rsp + 0x70]
mov r8, rbx
lea rdx, [0x006cc0e0]
call fcn.006c6f60
mov rax, qword [rbx + 0x10]
mov rbx, qword [0x00794450]
mov qword [rsp + 0x60], rax
test rbx, rbx
je 0x6cfa8e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [rbx]
mov edi, eax
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ecx, edi
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_SetLastError]
test rbx, rbx
je 0x6cfa8e
mov rbx, qword [rbx + 0x10]
test rbx, rbx
je 0x6cfa45
mov eax, dword [rbx + 0x18c]
test eax, eax
jne 0x6cf9a3
mov rax, qword [rbx + 0x40]
mov ecx, 2
test rax, rax
mov qword [rsp + 0x68], rax
je 0x6cf9a3
lea rdx, [rsp + 0x60]
xor r8d, r8d
mov r9d, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
test eax, eax
je 0x6cf931
cmp eax, 1
jne 0x6cfa04
mov rcx, qword [rsp + 0x68]
lea rbp, [rsp + 0x90]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
lea rdx, [rbx + 0x38]
mov rax, rbp
mov qword [rsp + 0xa8], 0
mov qword [rsp + 0x90], rdx
mov qword [rsp + 0xa0], 0
mov qword [rsp + 0x98], 0
xchg qword [rdx], rax
test rax, rax
je 0x6cf882
mov qword [rax + 8], rbp
lea rdx, [rax + 0x18]
mov rcx, 0xffffffffffffffff
xor eax, eax
lock cmpxchg qword [rdx], rcx
test rax, rax
mov rcx, rax
je 0x6cf86e
call qword [sym.imp.KERNEL32.dll_SetEvent]
lea rdi, [rbp + 0x10]
xor esi, esi
lock xadd qword [rdi], rsi
test rsi, rsi
je 0x6cfb3a
mov eax, dword [rbx + 0x28]
cmp eax, 3
jbe 0x6cfbf8
mov rcx, qword [rsp + 0x90]
lea rax, [rbp + 8]
xor edx, edx
lock xadd qword [rax], rdx
test rdx, rdx
mov rax, rdx
je 0x6cfb86
lea rdx, [rax + 0x10]
mov rcx, 0xffffffffffffffff
xor eax, eax
lock cmpxchg qword [rdx], rcx
test rax, rax
mov rcx, rax
je 0x6cf8cd
call qword [sym.imp.KERNEL32.dll_SetEvent]
mov esi, 0x16
mov rbx, qword [0x00794448]
test rbx, rbx
je 0x6cf5b5
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [rbx]
mov edi, eax
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ecx, edi
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_SetLastError]
test rbx, rbx
je 0x6cf5b5
mov rax, qword [rbx]
test rax, rax
je 0x6cf914
mov rcx, qword [rbx + 8]
call rax
mov rdx, qword [rbx + 0x10]
mov rcx, qword [0x00794448]
call fcn.006c6a30
test esi, esi
je 0x6cf596
jmp 0x6cf5b5
mov rbx, qword [0x00794448]
test rbx, rbx
je 0x6cf596
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [rbx]
mov edi, eax
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ecx, edi
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_SetLastError]
test rbx, rbx
jne 0x6cf914
jmp 0x6cf596
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov r14, rax
mov rax, r12
lock cmpxchg qword [r13], r14
test rax, rax
je 0x6cfa20
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x6cf641
mov ecx, 1
jmp 0x6cf7d7
mov rcx, r12
mov qword [rsp + 0x50], rbp
mov qword [rsp + 0x58], r14
call fcn.006c42b0
jmp 0x6cf55e
mov rax, rbp
lock cmpxchg qword [r8], rdx
cmp rbp, rax
je 0x6cf55e
lea rcx, [rbp + 0x18]
lock xadd qword [rcx], rdx
test rdx, rdx
je 0x6cfa84
add rbp, 8
xor ecx, ecx
lock xadd qword [rbp], rcx
jmp 0x6cf66d
cmp eax, 0x102
mov esi, 0x8a
mov eax, 0x16
cmovne esi, eax
jmp 0x6cf8d2
mov edx, 0xffffffff
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
jmp 0x6cf995
mov rcx, rbp
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x58], r13
call fcn.006c42b0
xor r8d, r8d
mov r9d, 0xffffffff
mov ecx, 1
mov qword [rsp + 0x68], 0
lea rdx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
test eax, eax
je 0x6cf931
cmp eax, 1
jne 0x6cfa04
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
jmp 0x6cf8cd
call fcn.006c2aa0
jmp 0x6cf9f3
lea rbp, [rsp + 0x50]
mov rcx, rbp
call fcn.006c4450
mov rdi, qword [rsp + 0x50]
mov r13, qword [rsp + 0x58]
test rdi, rdi
mov rbx, rdi
je 0x6cfa45
or byte [rdi + 0x194], 1
mov dword [rdi + 0x184], 1
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov r12, qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [rdi + 0x198], eax
call r12
mov r15, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov r14, rax
call r12
lea r9, [rdi + 8]
mov r8, r15
mov rdx, r14
mov rcx, rax
mov dword [rsp + 0x30], 2
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
je 0x6cfa33
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_GetThreadPriority]
mov rcx, qword [0x00794450]
mov rdx, rdi
mov dword [rdi + 0x188], eax
call fcn.006c6a30
jmp 0x6cf7b2
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov r12, rax
mov rax, rsi
lock cmpxchg qword [rdi], r12
test rax, rax
je 0x6cfbb6
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x6cf882
mov rcx, rbp
call fcn.006c8230
call qword [sym.imp.msvcrt.dll__errno]
mov dword [rax], 0x16
mov eax, 0xffffffff
jmp 0x6cf598
mov rax, rbp
lock cmpxchg qword [rcx], rdx
cmp rbp, rax
je 0x6cf8cd
lea rcx, [rbp + 0x18]
lock xadd qword [rcx], rdx
test rdx, rdx
je 0x6cfbc4
add rbp, 8
xor eax, eax
lock xadd qword [rbp], rax
jmp 0x6cf8ad
or edx, 0xffffffff
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
jmp 0x6cfb5a
call fcn.006c2aa0
jmp 0x6cfba5
mov rcx, qword [rsi + 0x40]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rcx, rbp
mov dword [rsi + 0x28], 4
mov dword [rsi + 0x18c], 1
call fcn.006c2af0
mov ecx, 2
call fcn.006cdd50
mov rcx, rbp
mov dword [rbx + 0x28], 4
mov dword [rbx + 0x18c], 1
call fcn.006c2af0
mov ecx, 2
call fcn.006cdd50
nop
nop dword [rax]