Function at 0x140146800
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x80
mov rsi, rcx
mov rax, qword [0x1403a6f08]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov rax, qword [0x1403a9de8]
mov r8, qword [0x1403ac818]
mov rdx, qword [rax + 8]
lea rcx, [rdx - 1]
mov r8, qword [r8 + 8]
add rdx, 0x17
call fcn.1400ef8d0
call fcn.14011d1b0
mov rdi, rax
mov rcx, qword [0x1403a4d08]
mov qword [rax + 8], rcx
mov rax, qword [0x1403ab460]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4d10]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ab5d8]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4d18]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ac848]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4d20]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403abb48]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4d28]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403abb30]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4d30]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403aba00]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4d38]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ab7d0]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4d40]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ab470]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4d48]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ab728]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4d50]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ab758]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4d58]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403aba50]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4d60]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ab928]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4d68]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ab990]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4d70]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ab8f8]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4e38]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403abbe0]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4e40]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403abbd8]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4d78]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ab480]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4d80]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ab870]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4d88]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ab878]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4d90]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ab880]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4d98]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ab9c8]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4da8]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ab488]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4da0]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403aba08]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4db0]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ab4b8]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4db8]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ab960]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4dc0]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ab640]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4dc8]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ab4c0]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4dd0]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ab4c8]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4dd8]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403aba68]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4de0]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403aba80]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4de8]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403abb98]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4df0]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ab980]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4df8]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ab840]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4e00]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ab978]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4e08]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403abac0]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4e10]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ab958]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4e18]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ab400]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4e20]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ab900]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4e28]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403abb88]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rcx, qword [0x1403a4e30]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403abbb8]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rax, qword [rsi + 0x20]
mov rcx, qword [rax + 0x260]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403abe60]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rax, qword [rsi + 0x20]
mov rcx, qword [rax + 0x230]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ab9d0]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rax, qword [rsi + 0x20]
mov rcx, qword [rax + 0xf0]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ab998]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rax, qword [rsi + 0x10]
mov rax, qword [rax + 0x30]
mov rcx, qword [rax + 0x10]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ab7c8]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov rax, qword [rsi + 0x10]
mov rax, qword [rax + 0x30]
mov rcx, qword [rax + 0x18]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ab7c0]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f8b0
mov eax, dword [0x1403ae1f0]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rsi, qword [rax + 8]
lea rdi, [rsp + 0x60]
mov rcx, rdi
mov rdx, rsi
call fcn.1401cdb00
lea rbx, [rsp + 0x30]
mov rcx, rbx
mov rdx, rsi
xor r8d, r8d
call fcn.1401cc700
lea rax, method..virtual_0
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 0x539
lea rdx, [rsp + 0x20]
mov rcx, rbx
call fcn.1401ccc20
mov rcx, rbx
call fcn.1401ccb90
mov rcx, rdi
call fcn.1401cdb80
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.140263800
nop
add rsp, 0x80
pop rbx
pop rdi
pop rsi
ret