Function at 0x1400089c0
Capabilities:
Link many functions at runtime

Disassembly:
sub rsp, 0x28
mov edx, 4
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov eax, dword [rdx + rcx]
cmp dword [0x140081be8], eax
jle 0x140008a72
lea rcx, [0x140081be8]
call fcn.14002ae58
cmp dword [0x140081be8], 0xffffffff
jne 0x140008a72
xor eax, eax
mov qword [0x140081c08], rax
mov word [0x140081bf0], 1
mov qword [0x140081bf8], rax
mov qword [0x140081c00], rax
mov qword [0x140081c10], rax
mov qword [0x140081c18], rax
mov qword [0x140081c20], rax
mov qword [0x140081c28], rax
mov qword [0x140081c30], rax
mov qword [0x140081c38], rax
mov qword [0x140081c40], rax
mov qword [0x140081c48], rax
mov qword [0x140081c50], rax
mov qword [0x140081c58], rax
mov qword [0x140081c60], rax
lea rcx, [0x140081be8]
call fcn.14002adec
cmp byte [0x140081bf0], 0
je 0x140008c74
mov byte [0x140081bf0], 0
lea rcx, str.dbghelp.dll
call fcn.140003210
mov qword [0x140081bf8], rax
lea rcx, str.psapi.dll
call fcn.140003210
mov qword [0x140081c00], rax
lea rcx, str.powrprof.dll
call fcn.140003210
mov qword [0x140081c08], rax
mov rcx, qword [0x140081bf8]
test rcx, rcx
je 0x140008ba7
lea rdx, str.StackWalk64
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140081c10], rax
lea rdx, str.SymCleanup
mov rcx, qword [0x140081bf8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140081c18], rax
lea rdx, str.SymFunctionTableAccess64
mov rcx, qword [0x140081bf8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140081c20], rax
lea rdx, str.SymGetModuleBase64
mov rcx, qword [0x140081bf8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140081c28], rax
lea rdx, str.SymInitialize
mov rcx, qword [0x140081bf8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140081c30], rax
lea rdx, str.SymGetSymFromAddr64
mov rcx, qword [0x140081bf8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140081c38], rax
lea rdx, str.SymFromAddr
mov rcx, qword [0x140081bf8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140081c40], rax
lea rdx, str.MiniDumpWriteDump
mov rcx, qword [0x140081bf8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140081c48], rax
mov rax, qword [0x140081c08]
mov rcx, qword [0x140081c00]
test rcx, rcx
je 0x140008be9
lea rdx, str.GetModuleBaseNameW
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140081c50], rax
lea rdx, str.GetProcessMemoryInfo
mov rcx, qword [0x140081c00]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140081c58], rax
mov rax, qword [0x140081c08]
test rax, rax
je 0x140008c07
lea rdx, str.CallNtPowerInformation
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140081c60], rax
jmp 0x140008c0e
mov rax, qword [0x140081c60]
cmp qword [0x140081c10], 0
je 0x140008c74
cmp qword [0x140081c18], 0
je 0x140008c74
cmp qword [0x140081c20], 0
je 0x140008c74
cmp qword [0x140081c28], 0
je 0x140008c74
cmp qword [0x140081c30], 0
je 0x140008c74
cmp qword [0x140081c38], 0
je 0x140008c74
cmp qword [0x140081c40], 0
je 0x140008c74
cmp qword [0x140081c50], 0
je 0x140008c74
cmp qword [0x140081c58], 0
je 0x140008c74
test rax, rax
je 0x140008c74
mov byte [0x140081bf1], 1
lea rax, [0x140081bf0]
add rsp, 0x28
ret