Function at 0x2b36a8b60
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
push r12
push rdi
push rsi
push rbx
sub rsp, 0x48
cmp dword [0x2b377edd0], 1
je 0x2b36a8a27
call fcn.2b36a8670
mov ecx, dword [0x2b3749158]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov r12, rax
test rax, rax
je 0x2b36a8a50
mov rax, r12
add rsp, 0x48
pop rbx
pop rsi
pop rdi
pop r12
ret
call fcn.2b36a83f0
cmp qword [0x2b3782040], 0
mov rbx, rax
je 0x2b36a8a3b
test rax, rax
je 0x2b36a8a3b
mov dword [rax + 0x44], 1
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
xor ecx, ecx
xor r9d, r9d
xor r8d, r8d
mov dword [rbx + 0x70], eax
mov edx, 1
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov qword [rbx + 0x38], 0xffffffffffffffff
lea rcx, [rbx + 0x68]
mov qword [rbx + 0x30], rax
call fcn.2b36a7db0
cmp eax, 1
je 0x2b36a8b5a
mov rdi, qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov qword [rbx + 0x68], 0xffffffffffffffff
mov dword [rbx + 0xb8], 0
mov qword [rbx + 0x28], 0
call rdi
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov r12, rax
call rdi
mov dword [rsp + 0x30], 2
mov r8, rsi
mov rdx, r12
mov dword [rsp + 0x28], 0
mov rcx, rax
lea r9, [rbx + 0x28]
mov dword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
je 0x2b374820c
mov rcx, qword [rbx + 0x28]
call qword [sym.imp.KERNEL32.dll_GetThreadPriority]
mov ecx, dword [0x2b3749158]
mov rdx, rbx
mov dword [rbx + 0xbc], 0
mov dword [rbx + 0xc0], eax
movzx eax, byte [rbx + 0x40]
and eax, 0xffffffcf
or eax, 0x10
mov byte [rbx + 0x40], al
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
test eax, eax
je 0x2b374820c
mov r12, rbx
mov rax, r12
add rsp, 0x48
pop rbx
pop rsi
pop rdi
pop r12
ret
call fcn.2b36a81c0
nop
push r14
push r13
push r12
sub rsp, 0x20
test edx, edx
jne 0x2b36a8b90
test r8, r8
je 0x2b36a8c50
mov eax, 1
add rsp, 0x20
pop r12
pop r13
pop r14
ret
cmp edx, 1
je 0x2b36a8c80
cmp edx, 3
jne 0x2b36a8b77
mov ecx, dword [0x2b3749158]
cmp ecx, 0xffffffff
je 0x2b36a8b77
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov r12, rax
test rax, rax
je 0x2b36a8b77
test byte [rax + 0x40], 0x30
je 0x2b36a8cb0
mov rcx, qword [rax + 0x1d8]
test rcx, rcx
je 0x2b36a8bd2
call fcn.2b36a8720
mov rcx, qword [r12 + 0x28]
test rcx, rcx
je 0x2b36a8c05
mov r13, qword [sym.imp.KERNEL32.dll_CloseHandle]
call r13
mov rcx, qword [r12 + 0x30]
test rcx, rcx
je 0x2b36a8bf3
call r13
mov qword [r12 + 0x30], 0
mov qword [r12 + 0x28], 0
lea rcx, [r12 + 0x38]
call fcn.2b36a7c30
lea rcx, [r12 + 0x68]
call fcn.2b36a7db0
cmp eax, 1
je 0x2b36a8d44
cmp qword [r12 + 0x1d0], 0
mov qword [r12 + 0x68], 0xffffffffffffffff
je 0x2b36a8db0
mov ecx, dword [0x2b3749158]
xor edx, edx
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
jmp 0x2b36a8b77
mov rcx, qword [0x2b377ed90]
test rcx, rcx
je 0x2b36a8b77
call qword [sym.imp.KERNEL32.dll_RemoveVectoredExceptionHandler]
mov qword [0x2b377ed90], 0
jmp 0x2b36a8b77
lea rdx, [0x2b36a7e10]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_AddVectoredExceptionHandler]
mov qword [0x2b377ed90], rax
mov eax, 1
add rsp, 0x20
pop r12
pop r13
pop r14
ret
mov rcx, qword [rax + 0x30]
mov eax, dword [rax + 0xbc]
test eax, eax
jne 0x2b36a8d50
test rcx, rcx
je 0x2b36a8ccd
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [r12 + 0x1d8]
mov qword [r12 + 0x30], 0
mov dword [r12 + 0xbc], 1
test rcx, rcx
je 0x2b36a8cf4
call fcn.2b36a8720
lea r14, [r12 + 0x38]
lea r13, [r12 + 0x68]
test byte [r12 + 0x44], 4
je 0x2b36a8d90
mov rcx, qword [r12 + 0x28]
mov dword [r12], 0xdeadbeef
test rcx, rcx
je 0x2b36a8d22
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [r12 + 0x28], 0
mov rcx, r14
call fcn.2b36a7c30
mov rcx, r13
call fcn.2b36a7db0
cmp eax, 1
jne 0x2b36a8c22
call fcn.2b36a81c0
nop dword [rax]
test rcx, rcx
je 0x2b36a8d5b
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [r12 + 0x30], 0
lea rcx, [r12 + 0x38]
call fcn.2b36a7c30
lea rcx, [r12 + 0x68]
call fcn.2b36a7db0
cmp eax, 1
je 0x2b36a8d44
mov qword [r12 + 0x68], 0xffffffffffffffff
jmp 0x2b36a8b77
mov rcx, r14
call fcn.2b36a7c30
mov rcx, r13
call fcn.2b36a7db0
cmp eax, 1
jne 0x2b36a8d7d
jmp 0x2b36a8d44
mov rcx, r12
call fcn.2b36a84c0
jmp 0x2b36a8c3a
call sub.msvcrt.dll_abort
nop
mov rax, qword [0x28]
ud2