Function at 0x18001dd20
Capabilities:
Link many functions at runtime

Disassembly:
sub rsp, 0x28
mov eax, dword [0x1800ac090]
mov rdx, rcx
test eax, eax
jne 0x18001e11b
test rdx, rdx
mov qword [rsp + 0x20], rbx
mov rbx, qword [0x1800ac098]
lea rcx, str.DtFrame64.dll
cmovne rcx, rdx
test rbx, rbx
jne 0x18001dd6a
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
mov qword [0x1800ac098], rax
mov eax, dword [0x1800ac090]
test rbx, rbx
je 0x18001e116
lea rdx, str.SetFlags
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.GetFlags
mov rcx, rbx
mov qword [0x1800abf50], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.SetNoCheckCalling
mov rcx, rbx
mov qword [0x1800abf58], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.RmLoadLibrary
mov rcx, rbx
mov qword [0x1800abfa0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.RmLoadLibrary21
mov rcx, rbx
mov qword [0x1800abf60], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.AddPassthru
mov rcx, rbx
mov qword [0x1800abf68], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.DelPassthru
mov rcx, rbx
mov qword [0x1800abf70], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.AddLocalPassthru
mov rcx, rbx
mov qword [0x1800abf78], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.DelLocalPassthru
mov rcx, rbx
mov qword [0x1800abf80], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.GetNextCB
mov rcx, rbx
mov qword [0x1800abf88], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.RegisterUnloadNotify
mov rcx, rbx
mov qword [0x1800abf90], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.DtTransactionBegin
mov rcx, rbx
mov qword [0x1800abf98], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.DtTransactionBeginEx
mov rcx, rbx
mov qword [0x1800abfa8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.DtTransactionCommit
mov rcx, rbx
mov qword [0x1800abfb0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.DtInstallOne
mov rcx, rbx
mov qword [0x1800abfb8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.DtInstallOne2
mov rcx, rbx
mov qword [0x1800abfc0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.DtUninstallOne
mov rcx, rbx
mov qword [0x1800abfc8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.DtSuspendOne
mov rcx, rbx
mov qword [0x1800abfd0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.DtResumeOne
mov rcx, rbx
mov qword [0x1800abfd8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.DtGetRealPPointer
mov rcx, rbx
mov qword [0x1800abfe0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.DtInstallRaw
mov qword [0x1800abff8], rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.DtUninstallRaw
mov rcx, rbx
mov qword [0x1800abfe8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.DtCheckFuncInc
mov rcx, rbx
mov qword [0x1800abff0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.DtRecoverFuncInc
mov rcx, rbx
mov qword [0x1800ac000], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.GetRestoredHookAPI
mov rcx, rbx
mov qword [0x1800ac008], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.DelRestoredHookAPI
mov rcx, rbx
mov qword [0x1800ac010], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.IEATTransactionBegin
mov rcx, rbx
mov qword [0x1800ac018], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.IEATTransactionBeginEx
mov rcx, rbx
mov qword [0x1800ac020], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.IEATTransactionCommit
mov rcx, rbx
mov qword [0x1800ac028], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.IEATInstallOne
mov rcx, rbx
mov qword [0x1800ac030], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.IEATUninstallOne
mov rcx, rbx
mov qword [0x1800ac038], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.IEATInstallOneDWMsApi
mov rcx, rbx
mov qword [0x1800ac040], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.IEATUninstallOneDWMsApi
mov rcx, rbx
mov qword [0x1800ac048], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.IEATSuspendOne
mov rcx, rbx
mov qword [0x1800ac050], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.IEATResumeOne
mov rcx, rbx
mov qword [0x1800ac058], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.IEATGetRealPPointer
mov rcx, rbx
mov qword [0x1800ac060], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.IATInstallRaw
mov rcx, rbx
mov qword [0x1800ac068], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.IATUninstallRaw
mov rcx, rbx
mov qword [0x1800ac070], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.EATInstallRaw
mov rcx, rbx
mov qword [0x1800ac078], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.EATUninstallRaw
mov rcx, rbx
mov qword [0x1800ac080], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1800ac088], rax
mov eax, 1
mov dword [0x1800ac090], eax
mov rbx, qword [rsp + 0x20]
add rsp, 0x28
ret
jmp 0x18001dd20