Function at 0x140003bfc
Capabilities:
Link many functions at runtime

Disassembly:
jmp 0x140087114
mov qword [rsp + 8], rbx
push rbp
lea rbp, [rsp - 0x140]
sub rsp, 0x240
lea rbx, str.kernel32.dll
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.CreateRemoteThreadEx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14008748d
mov rcx, rax
call fcn.140002d88
mov rcx, rbx
mov qword [0x140156910], rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.CreateUmsCompletionList
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400874bd
mov rcx, rax
call fcn.140002d88
mov rcx, rbx
mov qword [0x1401568a8], rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.CreateUmsThreadContext
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400874ed
mov rcx, rax
call fcn.140002d88
mov rcx, rbx
mov qword [0x140156900], rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.DeleteProcThreadAttributeList
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14008751d
mov rcx, rax
call fcn.140002d88
mov rcx, rbx
mov qword [0x140156928], rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.DeleteUmsCompletionList
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14008754b
mov rcx, rax
call fcn.140002d88
mov rcx, rbx
mov qword [0x1401568d0], rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.DeleteUmsThreadContext
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140087579
mov rcx, rax
call fcn.140002d88
mov rcx, rbx
mov qword [0x1401568f8], rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.DequeueUmsCompletionListItems
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400875a7
mov rcx, rax
call fcn.140002d88
mov rcx, rbx
mov qword [0x1401568b0], rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.EnterUmsSchedulingMode
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400875d5
mov rcx, rax
call fcn.140002d88
mov rcx, rbx
mov qword [0x140156908], rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.ExecuteUmsThread
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140087603
mov rcx, rax
call fcn.140002d88
mov rcx, rbx
mov qword [0x1401568c0], rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.GetCurrentUmsThread
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140087631
mov rcx, rax
call fcn.140002d88
mov rcx, rbx
mov qword [0x1401568d8], rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.GetNextUmsListItem
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14008765f
mov rcx, rax
call fcn.140002d88
mov rcx, rbx
mov qword [0x1401568e0], rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.GetUmsCompletionListEvent
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14008768d
mov rcx, rax
call fcn.140002d88
mov rcx, rbx
mov qword [0x1401568b8], rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.InitializeProcThreadAttributeList
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400876c1
mov rcx, rax
call fcn.140002d88
mov rcx, rbx
mov qword [0x140156918], rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.QueryUmsThreadInformation
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x1400876f5
mov rcx, rax
call fcn.140002d88
mov rcx, rbx
mov qword [0x1401568e8], rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.SetUmsThreadInformation
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140087729
mov rcx, rax
call fcn.140002d88
mov rcx, rbx
mov qword [0x1401568f0], rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.UmsThreadYield
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14008775d
mov rcx, rax
call fcn.140002d88
mov rcx, rbx
mov qword [0x1401568c8], rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.UpdateProcThreadAttribute
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140087791
mov rcx, rax
call fcn.140002d88
mov rbx, qword [rsp + 0x250]
mov qword [0x140156920], rax
mov eax, 1
xchg dword [0x140156930], eax
add rsp, 0x240
pop rbp
ret
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx edx, ax
lea rcx, [rsp + 0x20]
or edx, 0x80070000
test eax, eax
cmovle edx, eax
call fcn.140004381
lea rdx, [0x14014e7f0]
lea rcx, [rsp + 0x20]
call fcn.140007829
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx edx, ax
lea rcx, [rsp + 0x40]
or edx, 0x80070000
test eax, eax
cmovle edx, eax
call fcn.140004381
lea rdx, [0x14014e7f0]
lea rcx, [rsp + 0x40]
call fcn.140007829
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx edx, ax
lea rcx, [rsp + 0x60]
or edx, 0x80070000
test eax, eax
cmovle edx, eax
call fcn.140004381
lea rdx, [0x14014e7f0]
lea rcx, [rsp + 0x60]
call fcn.140007829
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx edx, ax
lea rcx, [rbp - 0x80]
or edx, 0x80070000
test eax, eax
cmovle edx, eax
call fcn.140004381
lea rdx, [0x14014e7f0]
lea rcx, [rbp - 0x80]
call fcn.140007829
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx edx, ax
lea rcx, [rbp - 0x60]
or edx, 0x80070000
test eax, eax
cmovle edx, eax
call fcn.140004381
lea rdx, [0x14014e7f0]
lea rcx, [rbp - 0x60]
call fcn.140007829
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx edx, ax
lea rcx, [rbp - 0x40]
or edx, 0x80070000
test eax, eax
cmovle edx, eax
call fcn.140004381
lea rdx, [0x14014e7f0]
lea rcx, [rbp - 0x40]
call fcn.140007829
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx edx, ax
lea rcx, [rbp - 0x20]
or edx, 0x80070000
test eax, eax
cmovle edx, eax
call fcn.140004381
lea rdx, [0x14014e7f0]
lea rcx, [rbp - 0x20]
call fcn.140007829
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx edx, ax
lea rcx, [rbp]
or edx, 0x80070000
test eax, eax
cmovle edx, eax
call fcn.140004381
lea rdx, [0x14014e7f0]
lea rcx, [rbp]
call fcn.140007829
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx edx, ax
lea rcx, [rbp + 0x20]
or edx, 0x80070000
test eax, eax
cmovle edx, eax
call fcn.140004381
lea rdx, [0x14014e7f0]
lea rcx, [rbp + 0x20]
call fcn.140007829
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx edx, ax
lea rcx, [rbp + 0x40]
or edx, 0x80070000
test eax, eax
cmovle edx, eax
call fcn.140004381
lea rdx, [0x14014e7f0]
lea rcx, [rbp + 0x40]
call fcn.140007829
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx edx, ax
lea rcx, [rbp + 0x60]
or edx, 0x80070000
test eax, eax
cmovle edx, eax
call fcn.140004381
lea rdx, [0x14014e7f0]
lea rcx, [rbp + 0x60]
call fcn.140007829
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx edx, ax
lea rcx, [rbp + 0x80]
or edx, 0x80070000
test eax, eax
cmovle edx, eax
call fcn.140004381
lea rdx, [0x14014e7f0]
lea rcx, [rbp + 0x80]
call fcn.140007829
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx edx, ax
lea rcx, [rbp + 0xa0]
or edx, 0x80070000
test eax, eax
cmovle edx, eax
call fcn.140004381
lea rdx, [0x14014e7f0]
lea rcx, [rbp + 0xa0]
call fcn.140007829
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx edx, ax
lea rcx, [rbp + 0xc0]
or edx, 0x80070000
test eax, eax
cmovle edx, eax
call fcn.140004381
lea rdx, [0x14014e7f0]
lea rcx, [rbp + 0xc0]
call fcn.140007829
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx edx, ax
lea rcx, [rbp + 0xe0]
or edx, 0x80070000
test eax, eax
cmovle edx, eax
call fcn.140004381
lea rdx, [0x14014e7f0]
lea rcx, [rbp + 0xe0]
call fcn.140007829
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx edx, ax
lea rcx, [rbp + 0x100]
or edx, 0x80070000
test eax, eax
cmovle edx, eax
call fcn.140004381
lea rdx, [0x14014e7f0]
lea rcx, [rbp + 0x100]
call fcn.140007829
int3
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx edx, ax
lea rcx, [rbp + 0x120]
or edx, 0x80070000
test eax, eax
cmovle edx, eax
call fcn.140004381
lea rdx, [0x14014e7f0]
lea rcx, [rbp + 0x120]
call fcn.140007829
int3