Function at 0x10002490
Capabilities:
Access peb ldr_data
Get ntdll base address
Populate syswhispers2 syscall list
Resolve function by parsing pe exports

Disassembly:
sub rsp, 0x38
cmp dword [0x1011d4e0], 0
je 0x100024a7
mov eax, 1
add rsp, 0x38
ret
mov rax, qword gs:[0x60]
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x50], rsi
lea rcx, str.2929
mov qword [rsp + 0x58], rdi
mov rdi, qword [rax + 0x18]
xor esi, esi
call fcn.1002aad0
lea rcx, str.2368
neg eax
movsxd rbx, eax
call fcn.1002aad0
lea rcx, str.2486
neg eax
cdqe
add rbx, rax
call fcn.1002aad0
lea rcx, str.1604
neg eax
cdqe
add rbx, rax
call fcn.1002aad0
lea rcx, str.2429
neg eax
cdqe
add rbx, rax
call fcn.1002aad0
lea rcx, str.2248
neg eax
cdqe
add rbx, rax
call fcn.1002aad0
lea rcx, str.2496
neg eax
cdqe
add rbx, rax
call fcn.1002aad0
lea rcx, str.2698
neg eax
cdqe
add rbx, rax
call fcn.1002aad0
lea rcx, str.1328
neg eax
cdqe
add rbx, rax
call fcn.1002aad0
lea rcx, str.1360
neg eax
cdqe
add rbx, rax
call fcn.1002aad0
lea rcx, str.1884
neg eax
cdqe
add rbx, rax
call fcn.1002aad0
lea rcx, str.8656
neg eax
cdqe
add rbx, rax
call fcn.1002aad0
movsxd rcx, eax
add rbx, rcx
lea rcx, str.2729
call fcn.1002aad0
movsxd rcx, eax
add rbx, rcx
lea rcx, str.1517
call fcn.1002aad0
movsxd rcx, eax
add rbx, rcx
lea rcx, str.2593
call fcn.1002aad0
movsxd rcx, eax
add rbx, rcx
lea rcx, str.2800
call fcn.1002aad0
movsxd rcx, eax
add rbx, rcx
lea rcx, str.1614
call fcn.1002aad0
movsxd rcx, eax
add rbx, rcx
lea rcx, str.2463
call fcn.1002aad0
movsxd rcx, eax
add rbx, rcx
lea rcx, str.1458
call fcn.1002aad0
movsxd rcx, eax
add rcx, rbx
mov rdx, qword [rdi + rcx*8 + 0x10]
mov rax, qword [rdx + 0x30]
test rax, rax
je 0x100028c3
nop
nop
nop
mov rdi, rax
movsxd rax, dword [rax + 0x3c]
mov ecx, dword [rax + rdi + 0x88]
test ecx, ecx
je 0x10002679
lea rsi, [rdi + rcx]
mov ecx, dword [rdi + rcx + 0xc]
mov eax, dword [rcx + rdi]
or eax, 0x20202020
cmp eax, 0x6c64746e
jne 0x10002679
mov eax, dword [rcx + rdi + 4]
or eax, 0x20202020
cmp eax, 0x6c642e6c
je 0x10002685
mov rdx, qword [rdx]
mov rax, qword [rdx + 0x30]
test rax, rax
jne 0x10002640
test rsi, rsi
je 0x100028c3
mov edx, dword [rsi + 0x20]
mov ecx, dword [rsi + 0x24]
mov qword [rsp + 0x48], rbp
movsxd rbp, dword [rsi + 0x18]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], r14
mov r14d, dword [rsi + 0x1c]
add rdx, rdi
add rcx, rdi
add r14, rdi
lea rsi, [0x1011d4e4]
xor ebx, ebx
lea r13, [rcx + rbp*2 - 2]
lea r12, [rdx + rbp*4 - 4]
nop
mov ecx, dword [r12]
add rcx, rdi
cmp word [rcx], 0x775a
jne 0x10002701
call fcn.10002310
add ebx, 1
add rsi, 8
cmp ebx, 0x1f4
mov dword [rsi - 8], eax
movzx eax, word [r13]
mov ecx, dword [r14 + rax*4]
mov dword [rsi - 4], ecx
je 0x1000270e
sub r12, 4
sub r13, 2
add ebp, 0xffffffff
jne 0x100026d0
lea eax, [rbx - 1]
xor ebp, ebp
mov dword [0x1011d4e0], ebx
test eax, eax
je 0x10002896
lea r13, [0x1011d4f0]
lea r14, [0x1011d4e8]
nop
mov eax, ebx
xor esi, esi
sub eax, ebp
cmp eax, 1
je 0x10002888
mov rdi, r13
lea rcx, str.1458
call fcn.1002aad0
lea rcx, str.2463
mov ebx, esi
sub ebx, eax
call fcn.1002aad0
lea rcx, str.1614
sub ebx, eax
call fcn.1002aad0
lea rcx, str.2800
sub ebx, eax
call fcn.1002aad0
lea rcx, str.2593
sub ebx, eax
call fcn.1002aad0
lea rcx, str.1517
sub ebx, eax
call fcn.1002aad0
lea rcx, str.2729
sub ebx, eax
call fcn.1002aad0
lea rcx, str.8656
sub ebx, eax
call fcn.1002aad0
lea rcx, str.2929
sub ebx, eax
call fcn.1002aad0
lea rcx, str.2368
add ebx, eax
call fcn.1002aad0
lea rcx, str.2486
add ebx, eax
call fcn.1002aad0
lea rcx, str.1604
add ebx, eax
call fcn.1002aad0
lea rcx, str.2429
add ebx, eax
call fcn.1002aad0
lea rcx, str.2248
add ebx, eax
call fcn.1002aad0
lea rcx, str.2496
add ebx, eax
call fcn.1002aad0
lea rcx, str.2698
add ebx, eax
call fcn.1002aad0
lea rcx, str.1328
add ebx, eax
call fcn.1002aad0
lea rcx, str.1360
add ebx, eax
call fcn.1002aad0
mov r12d, dword [rdi]
lea rcx, str.1884
add ebx, eax
call fcn.1002aad0
add eax, ebx
cmp dword [r14 + rax*8], r12d
jbe 0x1000286c
mov edx, dword [rdi - 0xc]
mov ecx, dword [rdi - 8]
mov eax, dword [rdi - 4]
mov dword [rdi - 0xc], eax
mov dword [rdi - 4], edx
mov dword [rdi], ecx
mov dword [rdi - 8], r12d
mov ebx, dword [0x1011d4e0]
add esi, 1
add rdi, 8
mov eax, ebx
sub eax, ebp
sub eax, 1
cmp esi, eax
jb 0x10002742
lea eax, [rbx - 1]
add ebp, 1
cmp ebp, eax
jb 0x10002730
mov r14, qword [rsp + 0x20]
mov r13, qword [rsp + 0x28]
mov r12, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x58]
mov eax, 1
add rsp, 0x38
ret
mov rsi, qword [rsp + 0x50]
mov rbx, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x58]
xor eax, eax
add rsp, 0x38
ret