Function at 0x140026278
Capabilities:
Terminate thread

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xe0
mov r13d, dword [0x1400a6568]
call fcn.14000ccd0
xor r14d, r14d
lea rsi, [0x14009f050]
mov ebx, 8
jmp 0x140026378
mov rax, qword [0x1400a6558]
mov qword [rsp + 0x30], r14
xchg qword [rsp + 0x30], rax
movsxd rcx, dword [0x1400a6564]
cmp ecx, 0xffffffff
je 0x140026333
cmp ecx, 0xa
jge 0x140026333
mov rax, rcx
mov qword [rbp - 0x69], r14
add rax, rax
lea r9, [rbp - 0x31]
mov edx, ebx
mov rax, qword [rsi + rax*8]
xchg qword [rbp - 0x69], rax
mov rcx, qword [rsp + 0x30]
cmp rcx, qword [rbp - 0x69]
movsxd rax, dword [0x1400a6564]
cmovne rcx, qword [rbp - 0x69]
add rax, rax
mov qword [rsp + 0x30], rcx
lea rcx, [rbp + 0x6f]
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x30]
mov qword [rbp - 0x31], r14
mov r8d, dword [rsi + rax*8 + 8]
mov dword [rbp + 0x6f], ebx
call fcn.1400320b0
mov rax, qword [rbp - 0x31]
mov qword [rsp + 0x30], rax
mov r8d, dword [0x1400a6560]
lea rax, [rbp + 0x77]
xor r8d, dword [0x14009f0f4]
lea r9, [rbp - 0x29]
mov edx, ebx
mov qword [rbp - 0x29], r14
lea rcx, [rsp + 0x30]
mov dword [rbp + 0x77], ebx
mov qword [rsp + 0x20], rax
call fcn.1400320b0
mov eax, dword [rbp - 0x29]
add eax, 0xcbc55031
jne 0x140026380
lea ecx, [rax + 0x64]
call fcn.140026ed4
call fcn.14000ccd0
test al, al
je 0x1400262b4
mov rax, qword [0x1400a6558]
mov qword [rsp + 0x38], r14
xchg qword [rsp + 0x38], rax
movsxd rcx, dword [0x1400a6564]
cmp ecx, 0xffffffff
je 0x1400263ff
cmp ecx, 0xa
jge 0x1400263ff
mov rax, rcx
mov qword [rbp - 0x61], r14
add rax, rax
lea r9, [rbp - 0x21]
mov edx, ebx
mov rax, qword [rsi + rax*8]
xchg qword [rbp - 0x61], rax
mov rcx, qword [rsp + 0x38]
cmp rcx, qword [rbp - 0x61]
movsxd rax, dword [0x1400a6564]
cmovne rcx, qword [rbp - 0x61]
add rax, rax
mov qword [rsp + 0x38], rcx
lea rcx, [rbp + 0x7f]
mov qword [rsp + 0x20], rcx
lea rcx, [rsp + 0x38]
mov qword [rbp - 0x21], r14
mov r8d, dword [rsi + rax*8 + 8]
mov dword [rbp + 0x7f], ebx
call fcn.1400320b0
mov rax, qword [rbp - 0x21]
mov qword [rsp + 0x38], rax
mov r8d, dword [0x1400a6560]
lea rax, [rbp - 0x49]
xor r8d, dword [0x14009f0f4]
lea r9, [rbp - 0x19]
mov edx, ebx
mov qword [rbp - 0x19], r14
lea rcx, [rsp + 0x38]
mov dword [rbp - 0x49], ebx
mov qword [rsp + 0x20], rax
call fcn.1400320b0
mov eax, dword [rbp - 0x19]
add eax, 0xcbc55031
jne 0x140026772
mov edx, 0x82a4
lea ecx, [rax + 1]
mov r8d, 0x50434946
call qword [sym.imp.ntoskrnl.exe_ExAllocatePoolWithTag]
mov rdi, rax
test rax, rax
je 0x140026772
mov rcx, rax
call fcn.1400259e4
cmp eax, 0xdead000a
je 0x140026472
test eax, eax
jne 0x140026772
cmp dword [rdi], r14d
jne 0x140026486
mov ecx, 0xc8
call fcn.140026ed4
jmp 0x140026380
call fcn.140009f20
mov r15d, r14d
cmp dword [rdi], r14d
je 0x14002675f
mov eax, r15d
lea rbx, [rdi + 4]
imul rcx, rax, 0xd10
add rbx, rcx
mov edx, dword [rbx + 0x10c]
test edx, edx
je 0x14002674e
lea r12, [rbx + 0x110]
mov rcx, r12
call fcn.140025bf4
test al, al
je 0x14002674e
mov esi, r14d
cmp dword [rbx + 0x10c], r14d
je 0x140026611
lea r12, [0x14009f050]
mov eax, esi
mov r9d, 1
mov edx, esi
lea rcx, [rax + rax*2]
lea r14, [rbx + rcx*4]
mov rcx, qword [rbx]
lea r8, [r14 + 0x110]
call fcn.1400257e4
test eax, eax
jne 0x1400265f9
mov rcx, qword [r14 + 0x110]
test rcx, rcx
je 0x140026531
mov edx, dword [r14 + 0x118]
xor r14d, r14d
test edx, edx
je 0x140026534
xor r8d, r8d
call fcn.14000cce0
jmp 0x140026534
xor r14d, r14d
mov rax, qword [0x1400a6558]
mov qword [rbp - 0x79], r14
xchg qword [rbp - 0x79], rax
movsxd rcx, dword [0x1400a6564]
cmp ecx, 0xffffffff
je 0x1400265b0
cmp ecx, 0xa
jge 0x1400265b0
mov rax, rcx
mov qword [rbp - 0x59], r14
add rax, rax
lea r9, [rbp - 0x11]
mov edx, 8
mov rax, qword [r12 + rax*8]
xchg qword [rbp - 0x59], rax
mov rcx, qword [rbp - 0x79]
cmp rcx, qword [rbp - 0x59]
movsxd rax, dword [0x1400a6564]
cmovne rcx, qword [rbp - 0x59]
add rax, rax
mov qword [rbp - 0x79], rcx
lea rcx, [rbp - 0x45]
mov qword [rsp + 0x20], rcx
lea rcx, [rbp - 0x79]
mov qword [rbp - 0x11], r14
mov r8d, dword [r12 + rax*8 + 8]
mov dword [rbp - 0x45], edx
call fcn.1400320b0
mov rax, qword [rbp - 0x11]
mov qword [rbp - 0x79], rax
mov r8d, dword [0x1400a6560]
lea rax, [rbp - 0x41]
xor r8d, dword [0x14009f0f4]
lea r9, [rbp - 9]
mov ecx, 8
mov qword [rbp - 9], r14
mov dword [rbp - 0x41], ecx
mov edx, ecx
lea rcx, [rbp - 0x79]
mov qword [rsp + 0x20], rax
call fcn.1400320b0
mov eax, dword [rbp - 9]
add eax, 0xcbc55031
cmp eax, 1
je 0x14002660a
mov ecx, r13d
call fcn.140026ed4
jmp 0x1400265fc
xor r14d, r14d
inc esi
cmp esi, dword [rbx + 0x10c]
jne 0x1400264e4
lea r12, [rbx + 0x110]
mov edx, dword [rbx + 0x10c]
mov rcx, r12
call fcn.140025c84
mov rcx, r14
mov qword [rbp - 1], rcx
add rbx, 8
je 0x140026666
mov r8d, 0x104
mov rax, rbx
cmp byte [rax], r14b
je 0x140026643
inc rax
sub r8, 1
jne 0x140026635
mov rax, r8
neg rax
sbb edx, edx
not edx
and edx, 0xc000000d
test r8, r8
je 0x140026660
mov ecx, 0x104
sub rcx, r8
mov qword [rbp - 1], rcx
jmp 0x14002666b
mov edx, 0xc000000d
test edx, edx
mov rax, r14
mov rdx, rbx
cmovns rax, rcx
xor ecx, ecx
mov r8d, eax
mov qword [rbp + 0x17], rax
call fcn.14000ccb0
mov rax, qword [0x1400a6558]
lea rsi, [0x14009f050]
mov qword [rbp - 0x71], r14
mov ebx, 8
xchg qword [rbp - 0x71], rax
movsxd rcx, dword [0x1400a6564]
cmp ecx, 0xffffffff
je 0x14002670a
cmp ecx, 0xa
jge 0x14002670a
mov rax, rcx
mov qword [rbp - 0x51], r14
add rax, rax
lea r9, [rbp + 7]
mov edx, ebx
mov rax, qword [rsi + rax*8]
xchg qword [rbp - 0x51], rax
mov rcx, qword [rbp - 0x71]
cmp rcx, qword [rbp - 0x51]
movsxd rax, dword [0x1400a6564]
cmovne rcx, qword [rbp - 0x51]
add rax, rax
mov qword [rbp - 0x71], rcx
lea rcx, [rbp - 0x3d]
mov qword [rsp + 0x20], rcx
lea rcx, [rbp - 0x71]
mov qword [rbp + 7], r14
mov r8d, dword [rsi + rax*8 + 8]
mov dword [rbp - 0x3d], ebx
call fcn.1400320b0
mov rax, qword [rbp + 7]
mov qword [rbp - 0x71], rax
mov r8d, dword [0x1400a6560]
lea rax, [rbp - 0x39]
xor r8d, dword [0x14009f0f4]
lea r9, [rbp + 0xf]
mov edx, ebx
mov qword [rbp + 0xf], r14
lea rcx, [rbp - 0x71]
mov dword [rbp - 0x39], ebx
mov qword [rsp + 0x20], rax
call fcn.1400320b0
mov eax, dword [rbp + 0xf]
add eax, 0xcbc55031
cmp eax, 1
je 0x14002675f
mov ecx, r13d
call fcn.140026ed4
jmp 0x140026753
mov ebx, 8
inc r15d
cmp r15d, dword [rdi]
jne 0x140026497
xor edx, edx
mov rcx, rdi
call qword [sym.imp.ntoskrnl.exe_ExFreePoolWithTag]
mov ecx, r13d
jmp 0x14002647c
xor ecx, ecx
mov rbx, qword [rsp + 0x120]
add rsp, 0xe0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
jmp qword [sym.imp.ntoskrnl.exe_PsTerminateSystemThread]