Function at 0x14000ba8c
Capabilities:
Allocate thread local storage

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0xe0
mov rax, qword [0x1401411c8]
xor rax, rsp
mov qword [rsp + 0xd0], rax
mov rdi, rcx
call qword [sym.imp.api_ms_win_downlevel_kernel32_l1_1_0.dll_TlsAlloc]
mov dword [rdi + 0x160], eax
cmp eax, 0xffffffff
jne 0x14000bae7
mov rcx, qword [rsp + 0xe8]
lea r8, str.onecoreuap_adminwebbhttpsrvexe_service.cpp
mov edx, 0x3af
call fcn.1400036b8
jmp 0x14000bd35
mov al, byte [rdi + 0x118]
lea rcx, str.wdp.dll
neg al
mov eax, 0x800
sbb r8d, r8d
xor edx, edx
and r8d, eax
add r8d, eax
call qword [sym.imp.api_ms_win_downlevel_kernel32_l1_1_0.dll_LoadLibraryExW]
mov rbp, qword [rdi + 0x120]
mov rsi, rax
test rbp, rbp
je 0x14000bb34
call qword [sym.imp.api_ms_win_downlevel_kernel32_l1_1_0.dll_GetLastError]
mov rcx, rbp
mov ebx, eax
call qword [sym.imp.api_ms_win_downlevel_kernel32_l1_1_0.dll_FreeLibrary]
mov ecx, ebx
call qword [sym.imp.api_ms_win_downlevel_kernel32_l1_1_0.dll_SetLastError]
mov qword [rdi + 0x120], rsi
test rsi, rsi
jne 0x14000bb62
lea r9d, [rsi + 0x7e]
lea edx, [rsi + 0x66]
mov rcx, qword [rsp + 0xe8]
lea r8, str.onecoreuap_adminwebbhttpsrvexepackagedpluginsupport.cpp
call fcn.140008688
mov ebx, eax
jmp 0x14000bc78
lea rdx, str.LoadPackagedPlugins
mov rcx, rsi
call qword [sym.imp.api_ms_win_downlevel_kernel32_l1_1_0.dll_GetProcAddress]
mov qword [rdi + 0x148], rax
test rax, rax
jne 0x14000bb87
lea r9d, [rax + 0x7f]
lea edx, [rax + 0x6b]
jmp 0x14000bb47
mov rcx, qword [rdi + 0x120]
lea rdx, str.UnloadPackagedPlugins
call qword [sym.imp.api_ms_win_downlevel_kernel32_l1_1_0.dll_GetProcAddress]
mov qword [rdi + 0x150], rax
test rax, rax
jne 0x14000bbb0
lea r9d, [rax + 0x7f]
lea edx, [rax + 0x70]
jmp 0x14000bb47
mov rcx, qword [rdi + 0x120]
lea rdx, str.HandleServerRequest
call qword [sym.imp.api_ms_win_downlevel_kernel32_l1_1_0.dll_GetProcAddress]
mov qword [rdi + 0x158], rax
test rax, rax
jne 0x14000bbdc
lea r9d, [rax + 0x7f]
lea edx, [rax + 0x75]
jmp 0x14000bb47
xor edx, edx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_job_l2_1_0.dll_CreateJobObjectW]
mov rbp, qword [rdi + 0x128]
mov rsi, rax
lea rax, [rbp - 1]
cmp rax, 0xfffffffffffffffd
ja 0x14000bc13
call qword [sym.imp.api_ms_win_downlevel_kernel32_l1_1_0.dll_GetLastError]
mov rcx, rbp
mov ebx, eax
call qword [sym.imp.api_ms_win_downlevel_kernel32_l1_1_0.dll_CloseHandle]
mov ecx, ebx
call qword [sym.imp.api_ms_win_downlevel_kernel32_l1_1_0.dll_SetLastError]
mov qword [rdi + 0x128], rsi
test rsi, rsi
jne 0x14000bc3b
lea edx, [rsi + 0x7a]
mov rcx, qword [rsp + 0xe8]
lea r8, str.onecoreuap_adminwebbhttpsrvexepackagedpluginsupport.cpp
call fcn.1400036b8
jmp 0x14000bb5b
mov ebx, 0x90
lea rcx, [rsp + 0x40]
mov r8d, ebx
xor edx, edx
call sub.msvcrt.dll_memset
mov r9d, ebx
mov dword [rsp + 0x50], 0x2000
lea r8, [rsp + 0x40]
mov edx, 9
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_job_l2_1_0.dll_SetInformationJobObject]
test eax, eax
jne 0x14000bc76
lea edx, [rbx - 0x12]
jmp 0x14000bc22
xor ebx, ebx
test ebx, ebx
jns 0x14000bc9f
mov edx, 0x3b0
mov rcx, qword [rsp + 0xe8]
lea r8, str.onecoreuap_adminwebbhttpsrvexe_service.cpp
mov r9d, ebx
call fcn.140003684
mov eax, ebx
jmp 0x14000bd35
mov rbx, qword [rdi + 0x100]
lea rax, [0x14004b4d0]
mov qword [rsp + 0x30], rax
lea r9, [rdi + 0x158]
lea rax, [fcn.14004aac0]
mov rdx, rbx
mov qword [rsp + 0x28], rax
lea rax, [0x14000ba10]
mov r8, qword [rbx + 8]
mov qword [rsp + 0x20], rax
call fcn.14000eda8
mov rdx, rax
movabs rcx, 0x492492492492491
mov rax, qword [rdi + 0x108]
sub rcx, rax
cmp rcx, 1
jb 0x14000bd5e
inc rax
lea rcx, [rdi + 0xe0]
mov qword [rdi + 0x108], rax
mov qword [rbx + 8], rdx
mov rax, qword [rdx + 8]
mov qword [rax], rdx
mov rax, qword [rdi + 0x148]
call qword [0x1400f5e38]
mov ebx, eax
test eax, eax
jns 0x14000bd33
mov edx, 0x3b8
jmp 0x14000bc81
xor eax, eax
mov rcx, qword [rsp + 0xd0]
xor rcx, rsp
call fcn.1400c20a0
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x18]
mov rbp, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rsp, r11
pop rdi
ret
lea rcx, str.list_T__too_long
call fcn.1400c1c68
int3