Function at 0x14004f070
Capabilities:
Link many functions at runtime

Disassembly:
sub rsp, 0x28
mov ecx, 4
mov rax, qword gs:[0x58]
mov rax, qword [rax]
mov eax, dword [rcx + rax]
cmp dword [0x14030ff90], eax
jg 0x14004f2a2
cmp byte [0x14030ffa0], 0
je 0x14004f296
mov byte [0x14030ffa0], 0
lea rcx, str.dbghelp.dll
call fcn.140027960
mov qword [0x14030ffa8], rax
lea rcx, str.psapi.dll
call fcn.140027960
mov qword [0x14030ffb0], rax
lea rcx, str.powrprof.dll
call fcn.140027960
mov qword [0x14030ffb8], rax
mov rcx, qword [0x14030ffa8]
test rcx, rcx
je 0x14004f1c9
lea rdx, str.StackWalk64
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14030ffc0], rax
lea rdx, str.SymCleanup
mov rcx, qword [0x14030ffa8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14030ffc8], rax
lea rdx, str.SymFunctionTableAccess64
mov rcx, qword [0x14030ffa8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14030ffd0], rax
lea rdx, str.SymGetModuleBase64
mov rcx, qword [0x14030ffa8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14030ffd8], rax
lea rdx, str.SymInitialize
mov rcx, qword [0x14030ffa8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14030ffe0], rax
lea rdx, str.SymGetSymFromAddr64
mov rcx, qword [0x14030ffa8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14030ffe8], rax
lea rdx, str.SymFromAddr
mov rcx, qword [0x14030ffa8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14030fff0], rax
lea rdx, str.MiniDumpWriteDump
mov rcx, qword [0x14030ffa8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14030fff8], rax
mov rax, qword [0x14030ffb8]
mov rcx, qword [0x14030ffb0]
test rcx, rcx
je 0x14004f20b
lea rdx, str.GetModuleBaseNameW
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140310000], rax
lea rdx, str.GetProcessMemoryInfo
mov rcx, qword [0x14030ffb0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140310008], rax
mov rax, qword [0x14030ffb8]
test rax, rax
je 0x14004f229
lea rdx, str.CallNtPowerInformation
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140310010], rax
jmp 0x14004f230
mov rax, qword [0x140310010]
cmp qword [0x14030ffc0], 0
je 0x14004f296
cmp qword [0x14030ffc8], 0
je 0x14004f296
cmp qword [0x14030ffd0], 0
je 0x14004f296
cmp qword [0x14030ffd8], 0
je 0x14004f296
cmp qword [0x14030ffe0], 0
je 0x14004f296
cmp qword [0x14030ffe8], 0
je 0x14004f296
cmp qword [0x14030fff0], 0
je 0x14004f296
cmp qword [0x140310000], 0
je 0x14004f296
cmp qword [0x140310008], 0
je 0x14004f296
test rax, rax
je 0x14004f296
mov byte [0x14030ffa1], 1
lea rax, [0x14030ffa0]
add rsp, 0x28
ret
lea rcx, [0x14030ff90]
call fcn.1401f3cb8
cmp dword [0x14030ff90], 0xffffffff
jne 0x14004f094
xor eax, eax
mov qword [0x14030ffb8], rax
mov word [0x14030ffa0], 1
mov qword [0x14030ffa8], rax
mov qword [0x14030ffb0], rax
mov qword [0x14030ffc0], rax
mov qword [0x14030ffc8], rax
mov qword [0x14030ffd0], rax
mov qword [0x14030ffd8], rax
mov qword [0x14030ffe0], rax
mov qword [0x14030ffe8], rax
mov qword [0x14030fff0], rax
mov qword [0x14030fff8], rax
mov qword [0x140310000], rax
mov qword [0x140310008], rax
mov qword [0x140310010], rax
lea rcx, [0x14030ff90]
call fcn.1401f3c4c
jmp 0x14004f094