Function at 0x14013df10
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x80
mov rsi, rcx
mov rax, qword [0x1403a1f58]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov rax, qword [0x1403a5118]
mov r8, qword [0x1403a7c10]
mov rdx, qword [rax + 8]
lea rcx, [rdx - 1]
mov r8, qword [r8 + 8]
add rdx, 0x17
call fcn.1400ef220
call fcn.140114970
mov rdi, rax
mov rdx, qword [0x14039fda8]
mov qword [rax + 8], rdx
mov rax, qword [0x1403a6798]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fdb0]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6910]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fdb8]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a7c40]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fdc0]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6e90]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fdc8]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6e78]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fdd0]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6d48]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fdd8]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6b18]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fde0]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a67a8]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fde8]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6a70]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fdf0]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6aa0]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fdf8]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6d98]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fe00]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6c70]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fe08]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6cd8]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fe10]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6c40]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fed8]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6f28]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fee0]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6f20]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fe18]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a67b8]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fe20]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6bb8]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fe28]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6bc0]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fe30]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6bc8]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fe38]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6d10]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fe48]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a67c0]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fe40]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6d50]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fe50]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a67f0]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fe58]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6ca8]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fe60]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6978]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fe68]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a67f8]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fe70]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6800]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fe78]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6db0]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fe80]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6dc8]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fe88]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6ee0]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fe90]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6cc8]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fe98]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6b88]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fea0]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6cc0]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fea8]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6e08]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039feb0]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6ca0]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039feb8]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6738]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fec0]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6c48]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fec8]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6ed0]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rdx, qword [0x14039fed0]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6f00]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rax, qword [rsi + 0x20]
mov rdx, qword [rax + 0x268]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a71a8]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rax, qword [rsi + 0x20]
mov rdx, qword [rax + 0x238]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6d18]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rax, qword [rsi + 0x20]
mov rdx, qword [rax + 0xf8]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6ce0]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rax, qword [rsi + 0x10]
mov rax, qword [rax + 0x30]
mov rdx, qword [rax + 0x10]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6b10]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov rax, qword [rsi + 0x10]
mov rax, qword [rax + 0x30]
mov rdx, qword [rax + 0x18]
mov qword [rdi + 8], rdx
mov rax, qword [0x1403a6b08]
lea rcx, [rdx - 1]
mov r8, qword [rax + 8]
add rdx, 7
call fcn.1400eeb50
mov eax, dword [0x1403a95e8]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rsi, qword [rax + 8]
lea rdi, [rsp + 0x60]
mov rcx, rdi
mov rdx, rsi
call fcn.1401c66a0
lea rbx, [rsp + 0x30]
mov rcx, rbx
mov rdx, rsi
xor r8d, r8d
call fcn.1401c5200
lea rax, method..virtual_0
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 0x539
lea rdx, [rsp + 0x20]
mov rcx, rbx
call fcn.1401c5410
mov rcx, rbx
call fcn.1401c5380
mov rcx, rdi
call fcn.1401c6720
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.14025cd50
nop
add rsp, 0x80
pop rbx
pop rdi
pop rsi
ret