Function at 0x14003dfa0
Capabilities:
Check for sandbox and av modules
Link many functions at runtime

Disassembly:
sub rsp, 0x38
cmp qword [0x140140db0], 0
je 0x14003dfbc
mov rax, qword [0x140140db0]
mov qword [rsp + 0x20], rax
jmp 0x14003dfce
lea rcx, str.dbghelp.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rsp + 0x20], rax
lea rcx, str.symsrv.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rsp + 0x28], rax
lea rdx, str.SymInitialize
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140140d98], rax
lea rdx, str.SymCleanup
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140140db8], rax
lea rdx, str.SymEnumSymbolsW
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140140de8], rax
cmp qword [0x140140de8], 0
jne 0x14003e04e
lea rdx, str.SymEnumSymbols
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140140e58], rax
lea rdx, str.SymFromAddrW
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140140e18], rax
cmp qword [0x140140e18], 0
jne 0x14003e08a
lea rdx, str.SymFromAddr
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140140e28], rax
lea rdx, str.SymFromNameW
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140140df0], rax
cmp qword [0x140140df0], 0
jne 0x14003e0c6
lea rdx, str.SymFromName
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140140e48], rax
lea rdx, str.SymGetLineFromAddrW64
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140140d90], rax
cmp qword [0x140140d90], 0
jne 0x14003e102
lea rdx, str.SymGetLineFromAddr64
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140140dc0], rax
lea rdx, str.SymLoadModule64
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140140e08], rax
lea rdx, str.SymGetOptions
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140140e20], rax
lea rdx, str.SymSetOptions
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140140df8], rax
lea rdx, str.SymGetSearchPathW
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140140de0], rax
cmp qword [0x140140de0], 0
jne 0x14003e189
lea rdx, str.SymGetSearchPath
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140140e38], rax
lea rdx, str.SymSetSearchPathW
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140140dd0], rax
cmp qword [0x140140dd0], 0
jne 0x14003e1c5
lea rdx, str.SymSetSearchPath
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140140e30], rax
lea rdx, str.SymUnloadModule64
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140140dd8], rax
lea rdx, str.SymFunctionTableAccess64
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140140da8], rax
lea rdx, str.SymGetModuleBase64
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140140e00], rax
lea rdx, str.SymRegisterCallbackW64
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140140d88], rax
lea rdx, str.StackWalk64
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140140e10], rax
lea rdx, str.MiniDumpWriteDump
mov rcx, qword [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140140e50], rax
lea rdx, str.SymbolServerGetOptions
mov rcx, qword [rsp + 0x28]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140140da0], rax
lea rdx, str.SymbolServerSetOptions
mov rcx, qword [rsp + 0x28]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140140e40], rax
cmp qword [0x140140e20], 0
je 0x14003e2b2
cmp qword [0x140140df8], 0
je 0x14003e2b2
call qword [0x140140e20]
or eax, 4
mov ecx, eax
call qword [0x140140df8]
add rsp, 0x38
ret