Function at 0x140097bf0
Capabilities:
Get thread local storage value

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov rax, qword [0x1402e7d18]
xor rax, rsp
mov qword [rbp - 8], rax
mov r14, rdx
mov rsi, rcx
movzx r15d, r8b
xor r15, 1
shl r15, 7
cmp qword [rcx + 0x410], r15
jle 0x140097ffe
lea rbx, str.ServiceNtfsMftScanner::flushFilesList
lea r12, [0x1402f10b8]
lea r13, [0x1402eb3e0]
mov eax, dword [r14]
test eax, eax
jne 0x140097ffe
mov edi, 0x80
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
mov qword [rbp - 0x10], rax
mov rax, qword [rsi + 0x80]
mov qword [rbp - 0x40], rax
mov word [rbp - 0x38], 0
mov qword [rbp - 0x30], 0
mov byte [rbp - 0x20], 1
mov qword [rbp - 0x18], rbx
mov dword [rbp - 0x10], 0xd9
lea r9, [0x14026dc30]
lea r8d, [rdi + 0x59]
mov rdx, rbx
lea rcx, [rbp - 0x40]
call fcn.1400bfee0
mov rcx, qword [0x1402f1100]
mov rax, qword [rcx]
mov rax, qword [rax + 0x80]
call qword [case.0x140047d56.0]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov qword [rbp - 0x28], rax
test rax, rax
jne 0x140097cf8
xor r8d, r8d
lea rdx, str.Retrieving_thread_context_failed._Queuing
lea rcx, [rbp - 0x40]
call fcn.1400bfe70
jmp 0x140097e2b
mov ebx, 0x65
mov qword [rbp - 0x60], r12
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov byte [rbp - 0x58], 1
cmp byte [rbp - 0x37], 0
je 0x140097d4d
mov rax, qword [0x1402f10a8]
test rax, rax
jne 0x140097d38
lea rax, [rbp - 0x40]
mov qword [0x1402f10a0], rax
lea rax, [rbp - 0x40]
mov qword [0x1402f10a8], rax
jmp 0x140097d84
lea rcx, [rbp - 0x40]
mov qword [rax + 0x10], rcx
lea rax, [rbp - 0x40]
mov qword [0x1402f10a8], rax
jmp 0x140097d84
mov rax, qword [0x1402f1098]
test rax, rax
jne 0x140097d71
lea rax, [rbp - 0x40]
mov qword [0x1402f1098], rax
lea rax, [rbp - 0x40]
mov qword [0x1402f1090], rax
jmp 0x140097d84
lea rcx, [rbp - 0x40]
mov qword [rax + 0x10], rcx
lea rax, [rbp - 0x40]
mov qword [0x1402f1098], rax
mov rax, qword [0x1402f1070]
inc rax
mov qword [0x1402f1070], rax
cmp byte [0x1402f1088], 0
jne 0x140097da9
lea rcx, [rbp - 0x40]
call fcn.14007fd90
mov ebx, eax
mov byte [rbp - 0x58], 0
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp ebx, 0x65
je 0x140097dce
mov r8d, ebx
lea rdx, str.Begin
lea rcx, [rbp - 0x40]
call fcn.1400bfe70
lea r9, str.WAITTING
mov r8d, 0xd9
lea rdx, str.ServiceNtfsMftScanner::flushFilesList
lea rcx, [rbp - 0x40]
call fcn.1400bfee0
mov edx, 0xffffffff
mov rcx, qword [rbp - 0x28]
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea r9, str.ENTERED
mov r8d, 0xd9
lea rdx, str.ServiceNtfsMftScanner::flushFilesList
lea rcx, [rbp - 0x40]
call fcn.1400bfee0
mov rax, qword [0x1402f1080]
inc rax
mov qword [0x1402f1080], rax
nop dword [rax + rax]
mov eax, dword [r14]
test eax, eax
jne 0x140097edf
lea rcx, [rsi + 0x400]
call qword [sym.imp.KERNEL32.dll_InterlockedPopEntrySList]
test rax, rax
je 0x140097edf
lock dec qword [rsi + 0x410]
mov rbx, qword [rax + 0x10]
mov rcx, rax
call fcn.1400e4e08
test rbx, rbx
je 0x140097edf
mov r8b, 1
mov rdx, rbx
mov rcx, qword [rsi + 0x80]
call fcn.1400bdfb0
test eax, eax
je 0x140097eb0
mov rcx, qword [0x1402eb3e0]
cmp rcx, r13
je 0x140097eb0
test byte [rcx + 0x44], 4
je 0x140097eb0
cmp byte [rcx + 0x41], 3
jb 0x140097eb0
mov r9d, eax
mov edx, 0x13
lea r8, [0x140270070]
mov rcx, qword [rcx + 0x38]
call fcn.140034a00
lea rcx, [rbx + 0x260]
call fcn.140088240
lea rcx, [rbx + 0x40]
call fcn.140037cb0
lea rcx, [rbx + 0x10]
call fcn.140037ee0
mov rcx, rbx
call fcn.1400e4e08
add edi, 0xffffffff
jne 0x140097e30
mov byte [rbp - 0x38], 1
mov ebx, 0x65
cmp byte [rbp - 0x20], 0
je 0x140097f11
lea r9, str.COMMIT
mov r8d, dword [rbp - 0x10]
mov rdx, qword [rbp - 0x18]
lea rcx, [rbp - 0x40]
call fcn.1400bfee0
mov rcx, qword [rbp - 0x40]
call fcn.1400bf740
mov ebx, eax
mov qword [rbp - 0x50], r12
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov byte [rbp - 0x48], 1
lea rcx, [rbp - 0x40]
call fcn.14007fd90
mov edi, eax
mov byte [rbp - 0x48], 0
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp ebx, 0x65
je 0x140097f52
mov r8d, ebx
lea rdx, str.Commit
lea rcx, [rbp - 0x40]
call fcn.1400bfe70
cmp edi, 0x65
je 0x140097f6b
mov r8d, edi
lea rdx, str.Begin
lea rcx, [rbp - 0x40]
call fcn.1400bfe70
nop
cmp byte [rbp - 0x38], 0
jne 0x140097fea
mov byte [rbp - 0x38], 1
cmp byte [rbp - 0x20], 0
je 0x140097fb4
lea r9, str.ROLLBACK
mov r8d, dword [rbp - 0x10]
mov rdx, qword [rbp - 0x18]
lea rcx, [rbp - 0x40]
call fcn.1400bfee0
mov rcx, qword [rbp - 0x40]
call fcn.1400bfca0
cmp eax, 0x65
je 0x140097fb4
mov r8d, eax
lea rdx, str.Rollback
lea rcx, [rbp - 0x40]
call fcn.1400bfe70
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea rcx, [rbp - 0x40]
call fcn.14007fd90
mov ebx, eax
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp ebx, 0x65
je 0x140097fea
mov r8d, ebx
lea rdx, str.Begin
lea rcx, [rbp - 0x40]
call fcn.1400bfe70
nop
cmp qword [rsi + 0x410], r15
lea rbx, str.ServiceNtfsMftScanner::flushFilesList
jg 0x140097c54
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.140154650
lea r11, [rsp + 0x80]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret