Function at 0x1400330b0
Capabilities:
Link many functions at runtime

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x20
mov rbx, rcx
lea rax, [0x14006dd98]
mov qword [rcx], rax
lea rax, str.SYSTEMCurrentControlSetControlPowerUserPowerSchemes
mov qword [rcx + 8], rax
call fcn.140002ed0
mov rcx, rax
test rax, rax
je 0x1400333c1
mov rax, qword [rax]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbx + 0x28], rax
lea rcx, [rbx + 0x30]
mov qword [rsp + 0x38], rcx
call fcn.140037be0
xor edi, edi
mov qword [rbx + 0xc8], rdi
mov qword [rbx + 0xd0], rdi
mov qword [rbx + 0xd8], rdi
movups xmm0, xmmword [0x140067cc0]
movups xmmword [rbx + 0x14], xmm0
cmp byte [0x14007cb0c], dil
jne 0x140033151
xor edx, edx
lea ecx, [rdi + 6]
call fcn.14000daa0
mov byte [0x14007cb0b], al
lea edx, [rdi + 2]
lea ecx, [rdi + 6]
call fcn.14000daa0
mov byte [0x14007cb0c], 1
cmp byte [0x14007cb0b], 1
jne 0x1400333af
lea rcx, str.powrprof.dll
cmp byte [0x14007cbd8], dil
jne 0x1400332f4
mov byte [0x14007cbd8], 1
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rdi, rax
lea rdx, str.PowerSetActiveScheme
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14007d5c8], rax
lea rdx, str.PowerGetActiveScheme
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14007d5b0], rax
lea rdx, str.PowerEnumerate
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14007d5b8], rax
lea rdx, str.PowerReadFriendlyName
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14007d5a0], rax
lea rdx, str.PowerDuplicateScheme
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14007d5a8], rax
lea rdx, str.PowerWriteFriendlyName
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14007d590], rax
lea rdx, str.PowerWriteDescription
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14007d598], rax
lea rdx, str.PowerDeleteScheme
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14007d580], rax
lea rdx, str.PowerReadACValueIndex
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14007d570], rax
lea rdx, str.PowerReadDCValueIndex
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14007d578], rax
lea rdx, str.PowerWriteACValueIndex
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14007d560], rax
lea rdx, str.PowerWriteDCValueIndex
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14007d568], rax
lea rdx, str.PowerReadPossibleValue
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14007d588], rax
lea rdx, str.PowerWriteSettingAttributes
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14007d550], rax
lea rdx, str.PowerGetActualOverlayScheme
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14007d558], rax
lea rdx, str.PowerSetActiveOverlayScheme
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14007d548], rax
jmp 0x1400332fa
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
cmp qword [0x14007d5c8], 0
je 0x1400333a9
cmp qword [0x14007d5a0], 0
je 0x1400333a9
cmp qword [0x14007d5b8], 0
je 0x1400333a9
cmp qword [0x14007d5b0], 0
je 0x1400333a9
cmp qword [0x14007d588], 0
je 0x1400333a9
cmp qword [0x14007d550], 0
je 0x1400333a9
cmp qword [0x14007d5a8], 0
je 0x1400333a9
cmp qword [0x14007d590], 0
je 0x1400333a9
cmp qword [0x14007d598], 0
je 0x1400333a9
cmp qword [0x14007d580], 0
je 0x1400333a9
cmp qword [0x14007d570], 0
je 0x1400333a9
cmp qword [0x14007d578], 0
je 0x1400333a9
cmp qword [0x14007d560], 0
je 0x1400333a9
cmp qword [0x14007d568], 0
je 0x1400333a9
mov byte [rbx + 0x10], 1
cmp qword [0x14007d5c0], 0
jne 0x1400333b3
mov qword [0x14007d5c0], rdi
jmp 0x1400333b3
mov byte [rbx + 0x10], 0
jmp 0x1400333b3
mov byte [rbx + 0x10], dil
mov rax, rbx
mov rbx, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret
mov ecx, 0x80004005
call fcn.140002c40
int3