Function at 0x140146750
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x80
mov rsi, rcx
mov rax, qword [0x14039bf08]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov rax, qword [0x14039ecb8]
mov r8, qword [0x1403a1680]
mov rdx, qword [rax + 8]
lea rcx, [rdx - 1]
mov r8, qword [r8 + 8]
add rdx, 0x17
call fcn.1400ef8d0
call fcn.14011d440
mov rdi, rax
mov rcx, qword [0x140399d08]
mov qword [rax + 8], rcx
mov rax, qword [0x1403a0310]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399d10]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a0488]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399d18]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a16b0]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399d20]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a09f8]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399d28]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a09e0]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399d30]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a08b0]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399d38]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a0680]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399d40]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a0320]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399d48]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a05d8]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399d50]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a0608]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399d58]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a0900]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399d60]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a07d8]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399d68]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a0840]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399d70]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a07a8]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399e38]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a0a90]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399e40]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a0a88]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399d78]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a0330]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399d80]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a0720]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399d88]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a0728]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399d90]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a0730]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399d98]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a0878]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399da8]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a0338]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399da0]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a08b8]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399db0]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a0368]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399db8]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a0810]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399dc0]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a04f0]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399dc8]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a0370]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399dd0]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a0378]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399dd8]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a0918]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399de0]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a0930]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399de8]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a0a48]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399df0]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a0830]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399df8]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a06f0]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399e00]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a0828]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399e08]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a0970]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399e10]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a0808]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399e18]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a02b0]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399e20]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a07b0]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399e28]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a0a38]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rcx, qword [0x140399e30]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a0a68]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rax, qword [rsi + 0x20]
mov rcx, qword [rax + 0x258]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a0d10]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rax, qword [rsi + 0x20]
mov rcx, qword [rax + 0x228]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a0880]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rax, qword [rsi + 0x20]
mov rcx, qword [rax + 0xf0]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a0848]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rax, qword [rsi + 0x10]
mov rax, qword [rax + 0x30]
mov rcx, qword [rax + 0x10]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a0678]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov rax, qword [rsi + 0x10]
mov rax, qword [rax + 0x30]
mov rcx, qword [rax + 0x18]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403a0670]
dec rcx
mov rdx, qword [rax + 8]
call fcn.14012f770
mov eax, dword [0x1403a3040]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rsi, qword [rax + 8]
lea rdi, [rsp + 0x60]
mov rcx, rdi
mov rdx, rsi
call fcn.1401ce720
lea rbx, [rsp + 0x30]
mov rcx, rbx
mov rdx, rsi
xor r8d, r8d
call fcn.1401cd400
lea rax, method..virtual_0
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 0x539
lea rdx, [rsp + 0x20]
mov rcx, rbx
call fcn.1401cd850
mov rcx, rbx
call fcn.1401cd7c0
mov rcx, rdi
call fcn.1401ce7a0
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.140263300
nop
add rsp, 0x80
pop rbx
pop rdi
pop rsi
ret