Function at 0x1400bd860
Capabilities:
Link many functions at runtime

Disassembly:
push rbx
sub rsp, 0x20
lea rcx, str.kernel32.dll
call fcn.1400bd7d0
mov rbx, rax
test rax, rax
jne 0x1400bd88a
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
je 0x1400bd88a
call qword [sym.imp.KERNEL32.dll_DebugBreak]
lea rdx, str.SetProcessDEPPolicy
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.IsWow64Process
mov rcx, rbx
mov qword [0x140172458], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.GetProcessInformation
mov rcx, rbx
mov qword [0x140172448], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.SetDllDirectoryW
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.SetDefaultDllDirectories
mov rcx, rbx
mov qword [0x140172438], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [0x1401550f8]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.RtlCaptureStackBackTrace
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.SetThreadDescription
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.SetProcessMitigationPolicy
mov rcx, rbx
mov qword [0x1401723e8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.ntdll.dll
call fcn.1400bd7d0
mov rbx, rax
test rax, rax
jne 0x1400bd95a
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
je 0x1400bd95a
call qword [sym.imp.KERNEL32.dll_DebugBreak]
lea rdx, str.NtSetInformationProcess
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.user32.dll
mov qword [0x140172450], rax
call fcn.1400bd7d0
mov rbx, rax
test rax, rax
jne 0x1400bd995
call qword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
je 0x1400bd995
call qword [sym.imp.KERNEL32.dll_DebugBreak]
lea rdx, str.GetDpiForWindow
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.GetThreadDpiAwarenessContext
mov rcx, rbx
mov qword [0x140172420], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.GetAwarenessFromDpiAwarenessContext
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.SetThreadDpiAwarenessContext
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.SetGestureConfig
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.GetGestureInfo
mov rcx, rbx
mov qword [0x140172410], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.CloseGestureInfoHandle
mov rcx, rbx
mov qword [0x1401723f0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rcx, str.uxtheme.dll
mov qword [0x140172428], rax
call fcn.1400bd7d0
mov rbx, rax
test rax, rax
je 0x1400bdaf1
lea rdx, str.IsAppThemed
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.OpenThemeData
mov rcx, rbx
mov qword [0x140172400], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.CloseThemeData
mov rcx, rbx
mov qword [0x1401723f8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.DrawThemeBackground
mov rcx, rbx
mov qword [0x1401723b0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.IsThemeActive
mov rcx, rbx
mov qword [0x1401723e0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.IsThemeBackgroundPartiallyTransparent
mov rcx, rbx
mov qword [0x1401723b8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, [0x1401552b8]
mov rcx, rbx
mov qword [0x140172408], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.GetThemeColor
mov rcx, rbx
mov qword [0x140172430], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401723c8], rax
lea rcx, str.dwmapi.dll
call fcn.1400bd7d0
mov rbx, rax
test rax, rax
je 0x1400bdb78
lea rdx, str.DwmIsCompositionEnabled
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.DwmExtendFrameIntoClientArea
mov rcx, rbx
mov qword [0x140172418], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.DwmDefWindowProc
mov rcx, rbx
mov qword [0x1401723d0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.DwmGetWindowAttribute
mov rcx, rbx
mov qword [0x1401723a8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.DwmSetWindowAttribute
mov rcx, rbx
mov qword [0x1401723d8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1401723c0], rax
lea rcx, str.normaliz.dll
call fcn.1400bd7d0
test rax, rax
je 0x1400bdba0
lea rdx, str.NormalizeString
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140172440], rax
lea rcx, str.dbghelp.dll
call fcn.1400bd7d0
mov rbx, rax
test rax, rax
je 0x1400bdcb2
lea rdx, str.MiniDumpWriteDump
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.SymInitializeW
mov rcx, rbx
mov qword [0x140172380], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.SymCleanup
mov rcx, rbx
mov qword [0x140172398], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.SymGetOptions
mov rcx, rbx
mov qword [0x1401723a0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.SymSetOptions
mov rcx, rbx
mov qword [0x140172390], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.StackWalk64
mov rcx, rbx
mov qword [0x140172378], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.SymFromAddr
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.SymFunctionTableAccess64
mov rcx, rbx
mov qword [0x140172388], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.SymGetModuleBase64
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.SymSetSearchPathW
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.SymSetSearchPath
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.SymRefreshModuleList
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.SymGetLineFromAddr64
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
add rsp, 0x20
pop rbx
ret