Function at 0x140148240
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x80
mov rsi, rcx
mov rax, qword [0x1403a8f38]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov rax, qword [0x1403abe18]
mov r8, qword [0x1403ae888]
mov rdx, qword [rax + 8]
lea rcx, [rdx - 1]
mov r8, qword [r8 + 8]
add rdx, 0x17
call fcn.1400f0620
call fcn.14011e9b0
mov rdi, rax
mov rcx, qword [0x1403a6ce8]
mov qword [rax + 8], rcx
mov rax, qword [0x1403ad490]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6cf0]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ad608]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6cf8]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ae8b8]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6d00]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403adb88]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6d08]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403adb70]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6d10]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ada40]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6d18]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ad810]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6d20]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ad4a0]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6d28]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ad768]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6d30]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ad798]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6d38]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ada90]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6d40]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ad968]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6d48]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ad9d0]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6d50]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ad938]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6e18]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403adc20]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6e20]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403adc18]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6d58]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ad4b0]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6d60]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ad8b0]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6d68]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ad8b8]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6d70]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ad8c0]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6d78]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ada08]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6d88]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ad4b8]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6d80]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ada48]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6d90]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ad4e8]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6d98]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ad9a0]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6da0]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ad670]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6da8]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ad4f0]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6db0]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ad4f8]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6db8]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403adaa8]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6dc0]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403adac0]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6dc8]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403adbd8]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6dd0]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ad9c0]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6dd8]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ad880]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6de0]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ad9b8]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6de8]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403adb00]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6df0]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ad998]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6df8]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ad430]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6e00]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ad940]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6e08]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403adbc8]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rcx, qword [0x1403a6e10]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403adbf8]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rax, qword [rsi + 0x20]
mov rcx, qword [rax + 0x268]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403adea0]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rax, qword [rsi + 0x20]
mov rcx, qword [rax + 0x238]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ada10]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rax, qword [rsi + 0x20]
mov rcx, qword [rax + 0xf8]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ad9d8]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rax, qword [rsi + 0x10]
mov rax, qword [rax + 0x30]
mov rcx, qword [rax + 0x10]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ad808]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov rax, qword [rsi + 0x10]
mov rax, qword [rax + 0x30]
mov rcx, qword [rax + 0x18]
mov qword [rdi + 8], rcx
mov rax, qword [0x1403ad800]
dec rcx
mov rdx, qword [rax + 8]
call fcn.140131340
mov eax, dword [0x1403b0260]
mov rcx, qword gs:[0x58]
mov rax, qword [rcx + rax*8]
mov rsi, qword [rax + 8]
lea rdi, [rsp + 0x60]
mov rcx, rdi
mov rdx, rsi
call fcn.1401cf8f0
lea rbx, [rsp + 0x30]
mov rcx, rbx
mov rdx, rsi
xor r8d, r8d
call fcn.1401ce490
lea rax, method..virtual_0
mov qword [rsp + 0x20], rax
mov dword [rsp + 0x28], 0x539
lea rdx, [rsp + 0x20]
mov rcx, rbx
call fcn.1401ce9b0
mov rcx, rbx
call fcn.1401ce920
mov rcx, rdi
call fcn.1401cf970
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.140265fa0
nop
add rsp, 0x80
pop rbx
pop rdi
pop rsi
ret