Function at 0x1015b230
Capabilities:
Access peb ldr_data
Get kernel32 base address
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x150
mov esi, esp
mov dword [esi + 0x138], ebp
mov dword [esi + 0x13c], esp
mov dword [esi + 0x148], 0xffffffff
mov dword [esi + 0x144], 0x1015d040
mov eax, dword fs:[0]
mov dword [esi + 0x140], eax
lea eax, [esi + 0x140]
mov dword fs:[0], eax
mov byte [esi + 2], 1
mov byte [esi + 3], 1
mov dword [esi + 0x148], 0
call fcn.101959b0
mov dword [esi + 0x10], eax
lock dec dword [eax]
jne 0x1015b2ac
lea eax, [esi + 0x10]
mov byte [esi + 2], 1
mov byte [esi + 3], 1
push eax
call fcn.10006c40
add esp, 4
mov eax, dword [ebp + 0x1c]
cmp byte [eax], 0
mov eax, 0x1f
je 0x1015b2bf
mov eax, dword [ebp + 0x1c]
mov eax, dword [eax + 4]
mov dword [esi + 4], eax
mov byte [esi + 2], 1
mov byte [esi + 3], 1
lea eax, [esi + 0x10]
push 4
push eax
call fcn.1014e840
add esp, 8
nop dword [eax + eax]
mov edx, dword [0x1027137c]
mov eax, dword [0x10271378]
nop dword [eax + eax]
mov ebx, eax
mov ecx, edx
add ebx, 1
adc ecx, 0
lock cmpxchg8b qword [0x10271378]
jne 0x1015b2f0
mov ecx, eax
or ecx, edx
je 0x1015b2e0
movsd xmm1, qword [esi + 0x18]
mov ecx, dword [ebp + 0x1c]
movsd xmm0, qword [esi + 0x20]
movsd xmm2, qword [esi + 0x10]
movsd qword [esi + 0x128], xmm1
movsd xmm1, qword [ecx + 8]
movsd qword [esi + 0x120], xmm2
movsd qword [esi + 0x130], xmm0
movsd xmm2, qword [ecx + 0x10]
movsd xmm3, qword [ecx]
movsd qword [esi + 0xf8], xmm1
movsd xmm1, qword [ecx + 0x18]
movsd qword [esi + 0x100], xmm2
movsd xmm2, qword [ecx + 0x20]
movsd qword [esi + 0xf0], xmm3
movsd qword [esi + 0x108], xmm1
movsd xmm1, qword [ecx + 0x28]
movsd qword [esi + 0x110], xmm2
lea ecx, [esi + 0x88]
movsd qword [esi + 0x118], xmm1
push 0x58
push dword [ebp + 0x10]
push ecx
mov edi, eax
mov ebx, edx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [ebp + 0x14]
mov dword [esi + 0x10], 1
mov dword [esi + 0x14], 1
lea ecx, [esi + 0xf0]
mov dword [esi + 8], eax
lea eax, [esi + 0x18]
push 0x48
push ecx
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov eax, dword [esi + 8]
mov dword [esi + 0x64], ebx
mov dword [esi + 0x60], edi
mov byte [esi + 0x68], 0
mov word [esi + 0x70], 0
mov dword [esi + 0x74], 0
mov dword [esi + 0x78], 0
mov byte [esi + 0x7c], 0
mov dword [esi + 0x80], 0
mov byte [esi + 0x84], 0
mov dword [esi + 0xe0], eax
mov eax, dword [ebp + 0x18]
movsd xmm0, qword [eax]
mov eax, dword [eax + 8]
movsd qword [esi + 0xe4], xmm0
mov dword [esi + 0xec], eax
movzx eax, byte [0x10284b49]
push 8
push 0xe0
call fcn.10013770
add esp, 8
test eax, eax
je 0x1015b560
mov edi, eax
push 0xe0
lea eax, [esi + 0x10]
push eax
push edi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov dword [esi + 0xc], edi
movzx eax, byte [0x10284b49]
push 4
push pe_nt_image_headers32
call fcn.10013770
add esp, 8
mov ecx, dword [ebp + 0xc]
test eax, eax
sete bl
je 0x1015b57b
movsd xmm1, qword [ecx + 0x10]
movsd xmm0, qword [ecx + 0x18]
movsd xmm2, qword [ecx]
movsd qword [esi + 0x20], xmm1
movsd xmm1, qword [ecx + 8]
movsd qword [esi + 0x28], xmm0
movsd qword [esi + 0x10], xmm2
movsd qword [esi + 0x18], xmm1
mov dword [esi + 0x30], 0x40
mov dword [esi + 0x34], eax
mov eax, dword [esi + 4]
mov dword [esi + 0x38], 0
mov dword [esi + 0x3c], 0
mov dword [esi + 0x40], 0
mov dword [esi + 0x44], eax
mov byte [esi + 0x48], 0
movzx eax, byte [0x10284b49]
push 4
push 0x3c
call fcn.10013770
add esp, 8
test eax, eax
je 0x1015b59c
movsd xmm2, qword [esi + 0x38]
movsd xmm1, qword [esi + 0x30]
mov ecx, dword [esi + 0x48]
movsd xmm0, qword [esi + 0x40]
movsd qword [eax + 0x28], xmm2
movsd qword [eax + 0x20], xmm1
movsd xmm2, qword [esi + 0x28]
movsd xmm1, qword [esi + 0x20]
mov dword [eax + 0x38], ecx
mov ecx, dword [ebp + 8]
movsd qword [eax + 0x30], xmm0
movsd qword [eax + 0x18], xmm2
movsd qword [eax + 0x10], xmm1
movsd xmm2, qword [esi + 0x10]
movsd xmm1, qword [esi + 0x18]
mov dword [ecx], 0
mov byte [ecx + 4], 0
mov byte [ecx + 5], 0
mov dword [ecx + 8], 0
mov dword [ecx + 0xc], 0
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], edi
movsd qword [eax + 8], xmm1
movsd qword [eax], xmm2
mov eax, dword [esi + 0x140]
mov dword fs:[0], eax
mov eax, ecx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [esi + 0x148], 3
push 0xe0
push 8
call fcn.101cc679
add esp, 8
jmp 0x1015b5b8
mov byte [esi + 4], bl
mov dword [esi + 8], edi
mov dword [esi + 0x148], 1
push pe_nt_image_headers32
push 4
call fcn.101cc661
add esp, 8
jmp 0x1015b5b8
mov byte [esi + 4], bl
mov dword [esi + 8], edi
mov dword [esi + 0x148], 2
push 0x3c
push 4
call fcn.101cc679
add esp, 8
ud2