Function at 0x140036a50
Capabilities:
Get thread local storage value
Set thread local storage value

Disassembly:
mov dword [rsp + 0x20], r9d
push rbp
push rdi
push r12
push r13
sub rsp, 0x4b8
mov r12, qword [0x1400d6100]
mov r13, qword [0x1400d60e0]
mov ecx, dword [0x1400d5794]
xor ebp, ebp
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x68], r13
mov edi, edx
mov dword [rsp + 0xb0], ebp
mov dword [rsp + 0x2b8], ebp
mov dword [rsp + 0x2bc], ebp
mov qword [rsp + 0x2c0], rbp
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
mov ecx, dword [0x1400d5794]
lea rdx, [rsp + 0xb0]
mov qword [rsp + 0x2c8], rax
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
test eax, eax
jne 0x140036ad3
mov ecx, 0xc0000001
call qword [sym.imp.ntdll.dll_RtlRaiseStatus]
int3
mov qword [rsp + 0x4e0], rbx
mov qword [rsp + 0x4e8], rsi
lea esi, [rdi + 1]
mov qword [rsp + 0x4f0], r14
mov edi, ebp
mov dword [rsp + 0x5c], esi
mov qword [rsp + 0x4b0], r15
mov r14d, ebp
nop
lea r9, [rsp + 0x80]
xor r8d, r8d
mov edx, 0x84b8
mov rcx, r13
mov dword [rsp + 0x84], edi
call qword [sym.imp.USER32.dll_SendMessageW]
test rax, rax
je 0x140036b50
test byte [rsp + 0x80], 1
je 0x140036b50
mov ecx, dword [rsp + 0x98]
mov rax, qword [rsp + 0x88]
inc r14d
mov dword [rsp + rcx*4 + 0x2d0], edi
mov qword [rsp + rcx*8 + 0x370], rax
inc edi
cmp edi, 0x28
jb 0x140036b00
mov rbx, qword [0x1400d6400]
lea rdi, [rsi*8]
mov r15d, esi
xor r8d, r8d
mov rcx, rbx
mov rdx, rdi
mov dword [rsp + 0x58], r14d
mov qword [rsp + 0x78], r15
call fcn.14001fbe0
lock add dword [rbx + 0x18], 1
mov qword [rax + 8], rdi
lea rdi, [rax + 0x20]
mov ecx, 1
mov dword [rax], ecx
mov rcx, rdi
mov qword [rax + 0x10], rbx
mov qword [rsp + 0x60], rdi
call sym.ProcessHacker.exe_PhaDereferenceObject
test esi, esi
je 0x140036bfe
mov esi, r14d
mov rbx, rdi
mov rbp, r15
shl rsi, 3
nop word [rax + rax]
mov rdi, qword [0x1400d6400]
xor r8d, r8d
mov rdx, rsi
mov rcx, rdi
call fcn.14001fbe0
lock add dword [rdi + 0x18], 1
lea rcx, [rax + 0x20]
mov dword [rax], 1
mov qword [rax + 8], rsi
mov qword [rax + 0x10], rdi
mov qword [rbx], rcx
call sym.ProcessHacker.exe_PhaDereferenceObject
add rbx, 8
sub rbp, 1
jne 0x140036bc0
test r14d, r14d
je 0x140036ccb
mov r15, qword [rsp + 0x60]
mov r13d, r14d
xor r14d, r14d
nop word [rax + rax]
mov r12, qword [rsp + rbp + 0x370]
mov rbx, qword [0x1400d91a8]
or rcx, 0xffffffffffffffff
xor eax, eax
mov rdi, r12
xor r8d, r8d
repne scasw ax, word [rdi]
not rcx
lea rsi, [rcx - 1]
mov rcx, rbx
add rsi, rsi
lea rdi, [rsi + 0x12]
mov rdx, rdi
call fcn.14001fbe0
lock add dword [rbx + 0x18], 1
mov qword [rax + 8], rdi
lea rdi, [rax + 0x20]
mov dword [rax], 1
mov qword [rax + 0x10], rbx
mov rax, rsi
lea rcx, [rdi + 0x10]
shr rax, 1
mov word [rdi], si
mov word [rdi + 2], si
mov qword [rdi + 8], rcx
mov word [rdi + rax*2 + 0x10], r14w
test r12, r12
je 0x140036c99
mov r8, rsi
mov rdx, r12
call fcn.140094930
mov rcx, rdi
call sym.ProcessHacker.exe_PhaDereferenceObject
mov rdx, qword [r15]
add rbp, 8
sub r13, 1
mov qword [rdx + rbp - 8], rdi
jne 0x140036c20
mov r14d, dword [rsp + 0x58]
mov r15, qword [rsp + 0x78]
mov r12, qword [rsp + 0x70]
mov r13, qword [rsp + 0x68]
xor esi, esi
mov ebp, 1
mov dword [rsp + 0x40], ebp
mov edi, esi
cmp dword [r12], esi
jbe 0x140036d31
mov rbx, rsi
mov rsi, qword [rsp + 0x60]
nop word [rax + rax]
mov rdx, qword [r12 + 8]
lea rax, [rsp + 0x2d0]
mov dword [rsp + 0x30], r14d
mov rdx, qword [rbx + rdx]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x40]
mov r9, rsi
xor r8d, r8d
mov rcx, r13
mov qword [rsp + 0x20], rax
call fcn.140036690
inc edi
add rbx, 8
cmp edi, dword [r12]
jb 0x140036cf0
xor esi, esi
mov eax, dword [rsp + 0x4f8]
test eax, eax
je 0x140036d54
cmp eax, ebp
je 0x140036d54
mov rbp, qword [rsp + 0x70]
mov r12, qword [rsp + 0x60]
mov r13d, dword [rsp + 0x5c]
jmp 0x140036df9
mov rdi, qword [0x1400d6400]
mov ebx, r14d
xor r8d, r8d
shl rbx, 2
mov rcx, rdi
mov rdx, rbx
call fcn.14001fbe0
lock add dword [rdi + 0x18], ebp
mov dword [rax], ebp
lea rbp, [rax + 0x20]
mov qword [rax + 8], rbx
mov rcx, rbp
mov qword [rax + 0x10], rdi
mov qword [rsp + 0x70], rbp
call sym.ProcessHacker.exe_PhaDereferenceObject
mov r8, rbx
xor edx, edx
mov rcx, rbp
call fcn.14009e740
mov r13d, dword [rsp + 0x5c]
test r13d, r13d
je 0x140036df4
mov r12, qword [rsp + 0x60]
mov r8, r12
nop
mov edx, esi
mov dword [rsp + 0x40], edx
test r14d, r14d
je 0x140036de8
nop dword [rax + rax]
mov rax, qword [r8]
mov edi, edx
mov rcx, qword [rax + rdi*8]
movzx eax, word [rcx]
shr eax, 4
cmp dword [rbp + rdi*4], eax
jae 0x140036ddd
mov dword [rbp + rdi*4], eax
mov edx, dword [rsp + 0x40]
inc edx
mov dword [rsp + 0x40], edx
cmp edx, r14d
jb 0x140036dc0
add r8, 8
sub r15, 1
jne 0x140036db0
jmp 0x140036df9
mov r12, qword [rsp + 0x60]
mov rdi, qword [0x1400d91a0]
test byte [rdi], 1
je 0x140036e4e
lea rcx, [rdi + 0x20]
call qword [sym.imp.ntdll.dll_RtlInterlockedPopEntrySList]
test rax, rax
je 0x140036e26
lock add dword [rdi + 0x30], 0xffffffff
add rax, 0x10
mov dword [rax + 4], 4
jmp 0x140036e73
mov r8, qword [rdi + 0x38]
mov rcx, qword [0x1400d8fb0]
xor edx, edx
add r8, 0x10
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
test rax, rax
jne 0x140036e19
mov ecx, 0xc000009a
call qword [sym.imp.ntdll.dll_RtlRaiseStatus]
int3
lea rcx, [0x1400d57f0]
call qword [sym.imp.ntdll.dll_RtlInterlockedPopEntrySList]
test rax, rax
je 0x140036ecb
lock add dword [0x1400d5800], 0xffffffff
add rax, 0x10
mov dword [rax + 4], 2
lock add dword [rdi + 0x18], 1
mov rcx, qword [0x1400d8fb0]
lea r15, [rax + 0x20]
mov qword [rax + 8], 0x10
mov qword [rax + 0x10], rdi
mov ebx, 1
test r13d, r13d
mov dword [rax], ebx
mov eax, r13d
mov qword [rsp + 0x78], r15
cmove eax, ebx
xor edx, edx
mov dword [r15], esi
mov r8d, eax
mov dword [r15 + 4], eax
shl r8, 3
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
test rax, rax
jne 0x140036efa
mov ecx, 0xc000009a
call qword [sym.imp.ntdll.dll_RtlRaiseStatus]
int3
mov r8, qword [0x1400d5808]
mov rcx, qword [0x1400d8fb0]
xor edx, edx
add r8, 0x10
call qword [sym.imp.ntdll.dll_RtlAllocateHeap]
test rax, rax
jne 0x140036e68
mov ecx, 0xc000009a
call qword [sym.imp.ntdll.dll_RtlRaiseStatus]
int3
mov qword [r15 + 8], rax
mov dword [rsp + 0x58], esi
test r13d, r13d
je 0x140037727
mov edi, 0x64
xor r8d, r8d
mov dword [rsp + 0x48], edi
mov rdi, qword [0x1400d91a8]
lea edx, [r8 + 0x76]
mov rcx, rdi
call fcn.14001fbe0
lock add dword [rdi + 0x18], 1
mov dword [rax], ebx
mov qword [rax + 0x10], rdi
lea rbx, [rax + 0x20]
mov qword [rax + 8], 0x76
xor ecx, ecx
lea rax, [rbx + 0x10]
mov qword [rbx + 8], rax
mov edi, 0x64
mov qword [rsp + 0x50], rbx
mov word [rbx + 2], di
mov word [rbx + 0x74], cx
mov word [rax], cx
mov eax, dword [rsp + 0x4f8]
mov word [rbx], cx
test eax, eax
je 0x140037460
sub eax, 1
je 0x14003723a
cmp eax, 1
jne 0x140037695
mov dword [rsp + 0x40], ecx
test r14d, r14d
je 0x140037695
mov edx, dword [rsp + 0x48]
lea ebp, [r14 - 1]
xor r15d, r15d
mov r13d, eax
nop
movzx edi, word [rbx]
mov eax, edx
lea rcx, [rdi + 2]
cmp rax, rcx
jae 0x14003703e
mov rbx, qword [0x1400d91a8]
lea ecx, [rdx + rdx]
lea eax, [rdi + 2]
cmp ecx, eax
cmovb ecx, eax
xor r8d, r8d
lea rdi, [rcx + 0x12]
mov dword [rsp + 0x48], ecx
mov esi, ecx
mov rdx, rdi
mov rcx, rbx
call fcn.14001fbe0
lock add dword [rbx + 0x18], r13d
mov qword [rax + 0x10], rbx
mov qword [rax + 8], rdi
mov rdi, qword [rsp + 0x50]
lea rbx, [rax + 0x20]
mov dword [rax], r13d
lea rdx, [rdi + 0x10]
mov word [rbx], si
mov word [rbx + 2], si
lea rcx, [rbx + 0x10]
mov qword [rbx + 8], rcx
shr rsi, 1
mov word [rbx + rsi*2 + 0x10], r15w
movzx r8d, word [rdi]
add r8, 2
call fcn.140094930
movzx edx, word [rdi]
lea rcx, [rdi - 0x20]
mov word [rbx], dx
or eax, 0xffffffff
lock xadd dword [rcx], eax
add eax, 0xffffffff
jne 0x140037039
call fcn.14001fcd0
mov qword [rsp + 0x50], rbx
movzx eax, word [rbx]
mov ecx, 0x22
shr rax, 1
mov word [rbx + rax*2 + 0x10], cx
add word [rbx], 2
movzx eax, word [rbx]
shr rax, 1
lea rcx, [rsp + 0x48]
mov word [rbx + rax*2 + 0x10], r15w
mov eax, dword [rsp + 0x40]
mov rdx, qword [r12]
mov rdx, qword [rdx + rax*8]
call fcn.1400368d0
mov edx, dword [rsp + 0x48]
mov rbx, qword [rsp + 0x50]
movzx ecx, word [rbx]
mov rsi, rdx
lea rax, [rcx + 2]
cmp rdx, rax
jae 0x140037123
mov rbx, qword [0x1400d91a8]
lea eax, [rcx + 2]
lea ecx, [rdx + rdx]
cmp ecx, eax
cmovb ecx, eax
xor r8d, r8d
lea rdi, [rcx + 0x12]
mov dword [rsp + 0x48], ecx
mov esi, ecx
mov rdx, rdi
mov rcx, rbx
call fcn.14001fbe0
lock add dword [rbx + 0x18], r13d
mov qword [rax + 0x10], rbx
mov qword [rax + 8], rdi
mov rdi, qword [rsp + 0x50]
lea rbx, [rax + 0x20]
mov dword [rax], r13d
mov rax, rsi
mov word [rbx], si
mov word [rbx + 2], si
lea rcx, [rbx + 0x10]
mov qword [rbx + 8], rcx
shr rax, 1
lea rdx, [rdi + 0x10]
mov word [rbx + rax*2 + 0x10], r15w
movzx r8d, word [rdi]
add r8, 2
call fcn.140094930
movzx edx, word [rdi]
lea rcx, [rdi - 0x20]
mov word [rbx], dx
or eax, 0xffffffff
lock xadd dword [rcx], eax
add eax, 0xffffffff
jne 0x14003711a
call fcn.14001fcd0
mov edx, dword [rsp + 0x48]
mov qword [rsp + 0x50], rbx
movzx eax, word [rbx]
mov ecx, 0x22
shr rax, 1
mov word [rbx + rax*2 + 0x10], cx
add word [rbx], 2
movzx eax, word [rbx]
shr rax, 1
mov word [rbx + rax*2 + 0x10], r15w
mov eax, dword [rsp + 0x40]
cmp eax, ebp
je 0x140037213
movzx ecx, word [rbx]
lea rax, [rcx + 2]
cmp rsi, rax
jae 0x1400371ef
mov rbx, qword [0x1400d91a8]
lea eax, [rcx + 2]
lea ecx, [rdx + rdx]
cmp ecx, eax
cmovb ecx, eax
xor r8d, r8d
lea rdi, [rcx + 0x12]
mov dword [rsp + 0x48], ecx
mov esi, ecx
mov rdx, rdi
mov rcx, rbx
call fcn.14001fbe0
lock add dword [rbx + 0x18], r13d
mov qword [rax + 0x10], rbx
mov qword [rax + 8], rdi
mov rdi, qword [rsp + 0x50]
lea rbx, [rax + 0x20]
mov dword [rax], r13d
lea rdx, [rdi + 0x10]
mov word [rbx], si
mov word [rbx + 2], si
lea rcx, [rbx + 0x10]
mov qword [rbx + 8], rcx
shr rsi, 1
mov word [rbx + rsi*2 + 0x10], r15w
movzx r8d, word [rdi]
add r8, 2
call fcn.140094930
movzx edx, word [rdi]
lea rcx, [rdi - 0x20]
mov word [rbx], dx
or eax, 0xffffffff
lock xadd dword [rcx], eax
add eax, 0xffffffff
jne 0x1400371e6
call fcn.14001fcd0
mov edx, dword [rsp + 0x48]
mov qword [rsp + 0x50], rbx
movzx eax, word [rbx]
mov ecx, 0x2c
shr rax, 1
mov word [rbx + rax*2 + 0x10], cx
add word [rbx], 2
movzx eax, word [rbx]
shr rax, 1
mov word [rbx + rax*2 + 0x10], r15w
mov eax, dword [rsp + 0x40]
inc eax
mov dword [rsp + 0x40], eax
cmp eax, r14d
jb 0x140036fa0
mov r15, qword [rsp + 0x78]
mov r13d, dword [rsp + 0x5c]
mov esi, dword [rsp + 0x58]
mov edi, 0x64
jmp 0x140037695
mov edi, ecx
mov dword [rsp + 0x40], ecx
test r14d, r14d
je 0x140037689
mov esi, dword [rsp + 0x48]
xor r15d, r15d
mov rax, qword [r12]
mov ecx, edi
mov rdx, qword [rax + rcx*8]
mov eax, dword [rbp + rcx*4]
movzx r12d, word [rdx]
lea ebp, [rax*8 + 8]
movzx eax, word [rdx]
shr eax, 1
lea r13, [rdx + 0x10]
sub ebp, eax
test r12d, r12d
je 0x14003734b
movzx ecx, word [rbx]
add ecx, r12d
cmp esi, ecx
jae 0x14003731c
mov rbx, qword [0x1400d91a8]
lea eax, [rsi + rsi]
cmp eax, ecx
cmovb eax, ecx
xor r8d, r8d
mov rcx, rbx
lea rdi, [rax + 0x12]
mov dword [rsp + 0x48], eax
mov esi, eax
mov rdx, rdi
call fcn.14001fbe0
lock add dword [rbx + 0x18], 1
mov qword [rax + 0x10], rbx
mov qword [rax + 8], rdi
mov rdi, qword [rsp + 0x50]
lea rbx, [rax + 0x20]
mov ecx, 1
lea rdx, [rdi + 0x10]
mov dword [rax], ecx
mov word [rbx], si
mov word [rbx + 2], si
lea rcx, [rbx + 0x10]
shr rsi, 1
mov qword [rbx + 8], rcx
mov word [rbx + rsi*2 + 0x10], r15w
movzx r8d, word [rdi]
add r8, 2
call fcn.140094930
movzx edx, word [rdi]
lea rcx, [rdi - 0x20]
mov word [rbx], dx
or eax, 0xffffffff
lock xadd dword [rcx], eax
add eax, 0xffffffff
jne 0x140037313
call fcn.14001fcd0
mov esi, dword [rsp + 0x48]
mov qword [rsp + 0x50], rbx
test r13, r13
je 0x140037337
movzx eax, word [rbx]
mov r8, r12
mov rdx, r13
shr rax, 1
lea rcx, [rbx + rax*2 + 0x10]
call fcn.140094930
add word [rbx], r12w
movzx eax, word [rbx]
shr rax, 1
mov word [rbx + rax*2 + 0x10], r15w
mov edi, dword [rsp + 0x40]
test ebp, ebp
je 0x14003742f
movzx edx, word [rbx]
mov eax, esi
mov r12d, ebp
lea rcx, [rdx + rbp*2]
cmp rax, rcx
jae 0x1400373fc
mov rbx, qword [0x1400d91a8]
lea ecx, [rdx + rbp*2]
lea eax, [rsi + rsi]
cmp eax, ecx
cmovb eax, ecx
xor r8d, r8d
mov rcx, rbx
lea rdi, [rax + 0x12]
mov dword [rsp + 0x48], eax
mov esi, eax
mov rdx, rdi
call fcn.14001fbe0
lock add dword [rbx + 0x18], 1
mov qword [rax + 0x10], rbx
mov qword [rax + 8], rdi
mov rdi, qword [rsp + 0x50]
lea rbx, [rax + 0x20]
mov ecx, 1
lea rdx, [rdi + 0x10]
mov dword [rax], ecx
mov word [rbx], si
mov word [rbx + 2], si
lea rcx, [rbx + 0x10]
shr rsi, 1
mov qword [rbx + 8], rcx
mov word [rbx + rsi*2 + 0x10], r15w
movzx r8d, word [rdi]
add r8, 2
call fcn.140094930
movzx edx, word [rdi]
lea rcx, [rdi - 0x20]
mov word [rbx], dx
or eax, 0xffffffff
lock xadd dword [rcx], eax
add eax, 0xffffffff
jne 0x1400373f3
call fcn.14001fcd0
mov esi, dword [rsp + 0x48]
mov qword [rsp + 0x50], rbx
movzx eax, word [rbx]
shr rax, 1
lea rdi, [rbx + rax*2 + 0x10]
test ebp, ebp
je 0x140037419
mov eax, 0x20
mov rcx, r12
movzx eax, ax
rep stosw word [rdi], ax
add bp, bp
add word [rbx], bp
movzx eax, word [rbx]
shr rax, 1
mov word [rbx + rax*2 + 0x10], r15w
mov edi, dword [rsp + 0x40]
mov rbp, qword [rsp + 0x70]
mov r12, qword [rsp + 0x60]
inc edi
mov dword [rsp + 0x40], edi
cmp edi, r14d
jb 0x140037250
mov r15, qword [rsp + 0x78]
mov esi, dword [rsp + 0x58]
mov r13d, dword [rsp + 0x5c]
mov edi, 0x64
jmp 0x140037695
mov edi, ecx
mov dword [rsp + 0x40], ecx
test r14d, r14d
je 0x140037690
mov esi, dword [rsp + 0x48]
xor r15d, r15d
nop word [rax + rax]
mov rax, qword [r12]
mov ecx, edi
mov rdx, qword [rax + rcx*8]
mov ebp, dword [rbp + rcx*4]
movzx eax, word [rdx]
movzx r12d, word [rdx]
lea r13, [rdx + 0x10]
shr eax, 4
sub ebp, eax
inc ebp
test r12d, r12d
je 0x140037577
movzx ecx, word [rbx]
add ecx, r12d
cmp esi, ecx
jae 0x140037548
mov rbx, qword [0x1400d91a8]
lea eax, [rsi + rsi]
cmp eax, ecx
cmovb eax, ecx
xor r8d, r8d
mov rcx, rbx
lea rdi, [rax + 0x12]
mov dword [rsp + 0x48], eax
mov esi, eax
mov rdx, rdi
call fcn.14001fbe0
lock add dword [rbx + 0x18], 1
mov qword [rax + 0x10], rbx
mov qword [rax + 8], rdi
mov rdi, qword [rsp + 0x50]
lea rbx, [rax + 0x20]
mov ecx, 1
lea rdx, [rdi + 0x10]
mov dword [rax], ecx
mov word [rbx], si
mov word [rbx + 2], si
lea rcx, [rbx + 0x10]
shr rsi, 1
mov qword [rbx + 8], rcx
mov word [rbx + rsi*2 + 0x10], r15w
movzx r8d, word [rdi]
add r8, 2
call fcn.140094930
movzx edx, word [rdi]
lea rcx, [rdi - 0x20]
mov word [rbx], dx
or eax, 0xffffffff
lock xadd dword [rcx], eax
add eax, 0xffffffff
jne 0x14003753f
call fcn.14001fcd0
mov esi, dword [rsp + 0x48]
mov qword [rsp + 0x50], rbx
test r13, r13
je 0x140037563
movzx eax, word [rbx]
mov r8, r12
mov rdx, r13
shr rax, 1
lea rcx, [rbx + rax*2 + 0x10]
call fcn.140094930
add word [rbx], r12w
movzx eax, word [rbx]
shr rax, 1
mov word [rbx + rax*2 + 0x10], r15w
mov edi, dword [rsp + 0x40]
test ebp, ebp
je 0x14003765b
movzx edx, word [rbx]
mov eax, esi
mov r12d, ebp
lea rcx, [rdx + rbp*2]
cmp rax, rcx
jae 0x140037628
mov rbx, qword [0x1400d91a8]
lea ecx, [rdx + rbp*2]
lea eax, [rsi + rsi]
cmp eax, ecx
cmovb eax, ecx
xor r8d, r8d
mov rcx, rbx
lea rdi, [rax + 0x12]
mov dword [rsp + 0x48], eax
mov esi, eax
mov rdx, rdi
call fcn.14001fbe0
lock add dword [rbx + 0x18], 1
mov qword [rax + 0x10], rbx
mov qword [rax + 8], rdi
mov rdi, qword [rsp + 0x50]
lea rbx, [rax + 0x20]
mov ecx, 1
lea rdx, [rdi + 0x10]
mov dword [rax], ecx
mov word [rbx], si
mov word [rbx + 2], si
lea rcx, [rbx + 0x10]
shr rsi, 1
mov qword [rbx + 8], rcx
mov word [rbx + rsi*2 + 0x10], r15w
movzx r8d, word [rdi]
add r8, 2
call fcn.140094930
movzx edx, word [rdi]
lea rcx, [rdi - 0x20]
mov word [rbx], dx
or eax, 0xffffffff
lock xadd dword [rcx], eax
add eax, 0xffffffff
jne 0x14003761f
call fcn.14001fcd0
mov esi, dword [rsp + 0x48]
mov qword [rsp + 0x50], rbx
movzx eax, word [rbx]
shr rax, 1
lea rdi, [rbx + rax*2 + 0x10]
test ebp, ebp
je 0x140037645
mov eax, 9
mov rcx, r12
movzx eax, ax
rep stosw word [rdi], ax
add bp, bp
add word [rbx], bp
movzx eax, word [rbx]
shr rax, 1
mov word [rbx + rax*2 + 0x10], r15w
mov edi, dword [rsp + 0x40]
mov rbp, qword [rsp + 0x70]
mov r12, qword [rsp + 0x60]
inc edi
mov dword [rsp + 0x40], edi
cmp edi, r14d
jb 0x140037480
mov r15, qword [rsp + 0x78]
mov esi, dword [rsp + 0x58]
mov r13d, dword [rsp + 0x5c]
mov edi, 0x64
jmp 0x140037695
mov edi, 0x64
jmp 0x140037695
mov edi, 0x64
lea rcx, [rbx - 0x20]
lock add dword [rcx], 1
or eax, 0xffffffff
lock xadd dword [rcx], eax
add eax, 0xffffffff
jne 0x1400376ae
call fcn.14001fcd0
mov eax, dword [r15 + 4]
cmp dword [r15], eax
jne 0x1400376e0
mov r8, qword [r15 + 8]
mov rcx, qword [0x1400d8fb0]
add eax, eax
mov r9d, eax
xor edx, edx
mov dword [r15 + 4], eax
shl r9, 3
call qword [sym.imp.ntdll.dll_RtlReAllocateHeap]
test rax, rax
je 0x14003771b
mov qword [r15 + 8], rax
mov edx, dword [r15]
mov r12, qword [rsp + 0x60]
mov rcx, qword [r15 + 8]
mov rax, qword [rsp + 0x50]
inc esi
add r12, 8
mov qword [rcx + rdx*8], rax
inc dword [r15]
mov dword [rsp + 0x58], esi
mov qword [rsp + 0x60], r12
cmp esi, r13d
jae 0x140037727
mov rbp, qword [rsp + 0x70]
mov ebx, 1
jmp 0x140036f10
mov ecx, 0xc000009a
call qword [sym.imp.ntdll.dll_RtlRaiseStatus]
int3
lea rcx, [rsp + 0xb0]
call sym.ProcessHacker.exe_PhDrainAutoPool
mov ecx, dword [0x1400d5794]
call qword [sym.imp.KERNEL32.dll_TlsGetValue]
lea rcx, [rsp + 0xb0]
cmp rax, rcx
je 0x140037759
mov ecx, 0xc0000001
call qword [sym.imp.ntdll.dll_RtlRaiseStatus]
int3
mov rdx, qword [rsp + 0x2c8]
mov ecx, dword [0x1400d5794]
call qword [sym.imp.KERNEL32.dll_TlsSetValue]
test eax, eax
jne 0x14003777d
mov ecx, 0xc0000001
call qword [sym.imp.ntdll.dll_RtlRaiseStatus]
int3
mov r8, qword [rsp + 0x2c0]
test r8, r8
je 0x140037799
mov rcx, qword [0x1400d8fb0]
xor edx, edx
call qword [sym.imp.ntdll.dll_RtlFreeHeap]
mov r14, qword [rsp + 0x4f0]
mov rsi, qword [rsp + 0x4e8]
mov rbx, qword [rsp + 0x4e0]
mov rax, r15
mov r15, qword [rsp + 0x4b0]
add rsp, 0x4b8
pop r13
pop r12
pop rdi
pop rbp
ret