I'd reverse-engineered member function VMClassRegistry::Unk_13, which I use to grab a Papyrus' class object by name so that I can dynamically override SKSE's Papyrus functions SetBool, SetInt, SetFloat, SetString, GetBool, GetInt, GetFloat and GetString. Further analysis shows that Unk_13 not only grabs the class object but also creates a new reference for it, which should be destroyed after use. This never caught my eyes before because I never started a new game other than the first time,