; 
; TlsCallback_1 from 0x18001f700 to 0x18001f7a5 (165 bytes)
; 
; 3 xrefs:
; > <???> @ 0x1800232a8
; > <???> @ 0x180023310
; > <???> @ 0x18004b22c
; 
; This function is hookable on this platform!
; 
; Using BromaIDA 8.0.0 @ https:;github.com/Stazzical/BromaIDA
; Using bindings at commit ba9f177b at Thu Jul 16 22:52:06 2026 from https:;github.com/geode-sdk/bindings
; 

mov     rax, rsp                                                       ; +0x0, 0x18001f700
mov     [rax+8], rbx                                                   ; +0x3, 0x18001f703
mov     [rax+10h], rbp                                                 ; +0x7, 0x18001f707
mov     [rax+18h], rsi                                                 ; +0xb, 0x18001f70b
mov     [rax+20h], rdi                                                 ; +0xf, 0x18001f70f
push    r14                                                            ; +0x13, 0x18001f713
sub     rsp, 20h                                                       ; +0x15, 0x18001f715
cmp     edx, 3                                                         ; +0x19, 0x18001f719
jz      short loc_18001F722                                            ; +0x1c, 0x18001f71c
test    edx, edx                                                       ; +0x1e, 0x18001f71e
jnz     short loc_18001F78A                                            ; +0x20, 0x18001f720
mov     ecx, cs:TlsIndex                                               ; +0x22, 0x18001f722
mov     rax, gs:58h                                                    ; +0x28, 0x18001f728
mov     ebp, 20h ; ' '                                                 ; +0x31, 0x18001f731
mov     r14, [rax+rcx*8]                                               ; +0x36, 0x18001f736
mov     rdi, [r14+rbp]                                                 ; +0x3a, 0x18001f73a
test    rdi, rdi                                                       ; +0x3e, 0x18001f73e
jz      short loc_18001F78A                                            ; +0x41, 0x18001f741
mov     ebx, [rdi]                                                     ; +0x43, 0x18001f743
sub     ebx, 1                                                         ; +0x45, 0x18001f745
js      short loc_18001F76C                                            ; +0x48, 0x18001f748
movsxd  rsi, ebx                                                       ; +0x4a, 0x18001f74a
add     rsi, 2                                                         ; +0x4d, 0x18001f74d
lea     rsi, [rdi+rsi*8]                                               ; +0x51, 0x18001f751
mov     rax, [rsi]                                                     ; +0x55, 0x18001f755
test    rax, rax                                                       ; +0x58, 0x18001f758
jz      short loc_18001F763                                            ; +0x5b, 0x18001f75b
call    cs:__guard_dispatch_icall_fptr                                 ; +0x5d, 0x18001f75d
sub     rsi, 8                                                         ; +0x63, 0x18001f763
sub     ebx, 1                                                         ; +0x67, 0x18001f767
jns     short loc_18001F755                                            ; +0x6a, 0x18001f76a
mov     rbx, [rdi+8]                                                   ; +0x6c, 0x18001f76c
test    rbx, rbx                                                       ; +0x70, 0x18001f770
jz      short loc_18001F786                                            ; +0x73, 0x18001f773
mov     rcx, rdi; Block                                                ; +0x75, 0x18001f775
call    free                                                           ; +0x78, 0x18001f778
mov     [r14+rbp], rbx                                                 ; +0x7d, 0x18001f77d
mov     rdi, rbx                                                       ; +0x81, 0x18001f781
jmp     short loc_18001F743                                            ; +0x84, 0x18001f784
mov     [r14+rbp], rbx                                                 ; +0x86, 0x18001f786
mov     rbx, [rsp+28h+arg_0]                                           ; +0x8a, 0x18001f78a
mov     rbp, [rsp+28h+arg_8]                                           ; +0x8f, 0x18001f78f
mov     rsi, [rsp+28h+arg_10]                                          ; +0x94, 0x18001f794
mov     rdi, [rsp+28h+arg_18]                                          ; +0x99, 0x18001f799
add     rsp, 20h                                                       ; +0x9e, 0x18001f79e
pop     r14                                                            ; +0xa2, 0x18001f7a2
retn                                                                   ; +0xa4, 0x18001f7a4