Function at 0x1400025a0
Capabilities:
Link many functions at runtime

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov ecx, 0x11c
call fcn.14000ae10
lea rcx, str.ntdll.dll
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.RtlGetVersion
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, rbx
call rax
cmp dword [rbx + 4], 0xa
mov esi, 1
jne 0x1400026a9
cmp dword [rbx + 8], 0
jne 0x1400026a9
mov eax, dword [rbx + 0xc]
cmp eax, 0x47bb
ja 0x140002686
je 0x140002658
cmp eax, 0x3fab
ja 0x140002643
je 0x14000262c
cmp eax, 0x2800
je 0x14000262c
cmp eax, 0x295a
je 0x14000262c
cmp eax, 0x3839
je 0x14000262c
cmp eax, 0x3ad7
jne 0x1400026a9
mov dword [0x140039bd4], 0x70b
mov qword [0x140039b90], 0x30
jmp 0x1400026a9
cmp eax, 0x42ee
je 0x14000262c
cmp eax, 0x4563
je 0x14000266f
cmp eax, 0x47ba
jne 0x1400026a9
mov dword [0x140039bd4], 0x775
mov qword [0x140039b90], 0x30
jmp 0x1400026a9
mov dword [0x140039bd4], 0x711
mov qword [0x140039b90], 0x30
jmp 0x1400026a9
cmp eax, 0x4a64
ja 0x1400026ca
je 0x14000269e
sub eax, 0x4a61
je 0x14000269e
sub eax, esi
je 0x14000269e
cmp eax, esi
jne 0x1400026a9
mov qword [0x140039b90], 0x10
xor edi, edi
mov ebx, edi
xor eax, eax
lock cmpxchg dword [0x140039bd8], esi
je 0x14000270c
nop dword [rax]
cmp rbx, 0x20
jae 0x1400026f5
xor ecx, ecx
jmp 0x1400026f7
cmp eax, 0x4a65
je 0x14000269e
cmp eax, 0x4f7c
je 0x1400026e1
cmp eax, 0x55f0
je 0x1400026e1
jbe 0x1400026a9
mov qword [0x140039b90], 0x18
mov qword [0x140039ba0], rsi
jmp 0x1400026a9
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_Sleep]
inc rbx
xor eax, eax
lock cmpxchg dword [0x140039bd8], esi
jne 0x1400026c0
cmp qword [0x140039be0], rdi
jne 0x140002729
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_HeapCreate]
mov qword [0x140039be0], rax
xchg dword [0x140039bd8], edi
lea rcx, str.KERNELBASE.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test rax, rax
je 0x14000275e
lea rdx, str.MapViewOfFile
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14000275e
mov rcx, rax
call fcn.1400036f0
lea rcx, str.KERNELBASE.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rcx, rax
lea rdx, str.MapViewOfFile
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp qword [0x140039ba8], 0
mov rbx, rax
jne 0x1400027ac
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rcx, rax
lea rdx, [0x1400226b0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140039ba8], rax
cmp qword [0x140039b80], 0
jne 0x1400027da
lea rcx, str.win32u.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rcx, rax
lea rdx, str.NtDCompositionDestroyConnection
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140039b80], rax
cmp qword [0x140039bb0], 0
jne 0x140002808
lea rcx, str.combase.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rcx, rax
lea rdx, str.CStdStubBuffer2_Disconnect
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140039bb0], rax
cmp qword [0x140039b98], 0
jne 0x140002836
lea rcx, str.combase.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rcx, rax
lea rdx, str.CStdStubBuffer_DebugServerRelease
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140039b98], rax
cmp qword [0x140039b88], 0
jne 0x140002864
lea rcx, str.combase.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov rcx, rax
lea rdx, str.NdrProxyForwardingFunction3
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140039b88], rax
cmp qword [0x140039bc8], 0
jne 0x140002882
mov rax, qword gs:[0x60]
mov rcx, qword [rax + 0x58]
mov qword [0x140039bc8], rcx
mov rcx, rbx
call fcn.1400039f0
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret