Function at 0x180106b48
Capabilities:
Link many functions at runtime

Disassembly:
jmp 0x1801d2310
sub rsp, 0x2d8
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, str.CreateRemoteThreadEx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x20], rax
cmp qword [rsp + 0x20], 0
jne 0x1801d2371
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.18010d01f
mov edx, eax
lea rcx, [rsp + 0xa8]
call fcn.180104744
lea rdx, [0x1803b9740]
lea rcx, [rsp + 0xa8]
call fcn.180109019
mov rcx, qword [rsp + 0x20]
call fcn.18010cc73
mov qword [0x1803c4588], rax
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, str.CreateUmsCompletionList
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x28], rax
cmp qword [rsp + 0x28], 0
jne 0x1801d23dc
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.18010d01f
mov edx, eax
lea rcx, [rsp + 0xc8]
call fcn.180104744
lea rdx, [0x1803b9740]
lea rcx, [rsp + 0xc8]
call fcn.180109019
mov rcx, qword [rsp + 0x28]
call fcn.18010cc73
mov qword [0x1803c4520], rax
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, str.CreateUmsThreadContext
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x30], rax
cmp qword [rsp + 0x30], 0
jne 0x1801d2447
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.18010d01f
mov edx, eax
lea rcx, [rsp + 0xe8]
call fcn.180104744
lea rdx, [0x1803b9740]
lea rcx, [rsp + 0xe8]
call fcn.180109019
mov rcx, qword [rsp + 0x30]
call fcn.18010cc73
mov qword [0x1803c4578], rax
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, str.DeleteProcThreadAttributeList
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
jne 0x1801d24b2
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.18010d01f
mov edx, eax
lea rcx, [rsp + 0x108]
call fcn.180104744
lea rdx, [0x1803b9740]
lea rcx, [rsp + 0x108]
call fcn.180109019
mov rcx, qword [rsp + 0x38]
call fcn.18010cc73
mov qword [0x1803c45a0], rax
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, str.DeleteUmsCompletionList
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x40], rax
cmp qword [rsp + 0x40], 0
jne 0x1801d251d
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.18010d01f
mov edx, eax
lea rcx, [rsp + 0x128]
call fcn.180104744
lea rdx, [0x1803b9740]
lea rcx, [rsp + 0x128]
call fcn.180109019
mov rcx, qword [rsp + 0x40]
call fcn.18010cc73
mov qword [0x1803c4548], rax
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, str.DeleteUmsThreadContext
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x48], rax
cmp qword [rsp + 0x48], 0
jne 0x1801d2588
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.18010d01f
mov edx, eax
lea rcx, [rsp + 0x148]
call fcn.180104744
lea rdx, [0x1803b9740]
lea rcx, [rsp + 0x148]
call fcn.180109019
mov rcx, qword [rsp + 0x48]
call fcn.18010cc73
mov qword [0x1803c4570], rax
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, str.DequeueUmsCompletionListItems
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x50], rax
cmp qword [rsp + 0x50], 0
jne 0x1801d25f3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.18010d01f
mov edx, eax
lea rcx, [rsp + 0x168]
call fcn.180104744
lea rdx, [0x1803b9740]
lea rcx, [rsp + 0x168]
call fcn.180109019
mov rcx, qword [rsp + 0x50]
call fcn.18010cc73
mov qword [0x1803c4528], rax
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, str.EnterUmsSchedulingMode
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x58], rax
cmp qword [rsp + 0x58], 0
jne 0x1801d265e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.18010d01f
mov edx, eax
lea rcx, [rsp + 0x188]
call fcn.180104744
lea rdx, [0x1803b9740]
lea rcx, [rsp + 0x188]
call fcn.180109019
mov rcx, qword [rsp + 0x58]
call fcn.18010cc73
mov qword [0x1803c4580], rax
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, str.ExecuteUmsThread
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x60], rax
cmp qword [rsp + 0x60], 0
jne 0x1801d26c9
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.18010d01f
mov edx, eax
lea rcx, [rsp + 0x1a8]
call fcn.180104744
lea rdx, [0x1803b9740]
lea rcx, [rsp + 0x1a8]
call fcn.180109019
mov rcx, qword [rsp + 0x60]
call fcn.18010cc73
mov qword [0x1803c4538], rax
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, str.GetCurrentUmsThread
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x68], rax
cmp qword [rsp + 0x68], 0
jne 0x1801d2734
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.18010d01f
mov edx, eax
lea rcx, [rsp + 0x1c8]
call fcn.180104744
lea rdx, [0x1803b9740]
lea rcx, [rsp + 0x1c8]
call fcn.180109019
mov rcx, qword [rsp + 0x68]
call fcn.18010cc73
mov qword [0x1803c4550], rax
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, str.GetNextUmsListItem
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x70], rax
cmp qword [rsp + 0x70], 0
jne 0x1801d279f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.18010d01f
mov edx, eax
lea rcx, [rsp + 0x1e8]
call fcn.180104744
lea rdx, [0x1803b9740]
lea rcx, [rsp + 0x1e8]
call fcn.180109019
mov rcx, qword [rsp + 0x70]
call fcn.18010cc73
mov qword [0x1803c4558], rax
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, str.GetUmsCompletionListEvent
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x78], rax
cmp qword [rsp + 0x78], 0
jne 0x1801d280a
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.18010d01f
mov edx, eax
lea rcx, [rsp + 0x208]
call fcn.180104744
lea rdx, [0x1803b9740]
lea rcx, [rsp + 0x208]
call fcn.180109019
mov rcx, qword [rsp + 0x78]
call fcn.18010cc73
mov qword [0x1803c4530], rax
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, str.InitializeProcThreadAttributeList
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x80], rax
cmp qword [rsp + 0x80], 0
jne 0x1801d287b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.18010d01f
mov edx, eax
lea rcx, [rsp + 0x228]
call fcn.180104744
lea rdx, [0x1803b9740]
lea rcx, [rsp + 0x228]
call fcn.180109019
mov rcx, qword [rsp + 0x80]
call fcn.18010cc73
mov qword [0x1803c4590], rax
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, str.QueryUmsThreadInformation
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x88], rax
cmp qword [rsp + 0x88], 0
jne 0x1801d28ef
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.18010d01f
mov edx, eax
lea rcx, [rsp + 0x248]
call fcn.180104744
lea rdx, [0x1803b9740]
lea rcx, [rsp + 0x248]
call fcn.180109019
mov rcx, qword [rsp + 0x88]
call fcn.18010cc73
mov qword [0x1803c4560], rax
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, str.SetUmsThreadInformation
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x90], rax
cmp qword [rsp + 0x90], 0
jne 0x1801d2963
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.18010d01f
mov edx, eax
lea rcx, [rsp + 0x268]
call fcn.180104744
lea rdx, [0x1803b9740]
lea rcx, [rsp + 0x268]
call fcn.180109019
mov rcx, qword [rsp + 0x90]
call fcn.18010cc73
mov qword [0x1803c4568], rax
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, str.UmsThreadYield
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0x98], rax
cmp qword [rsp + 0x98], 0
jne 0x1801d29d7
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.18010d01f
mov edx, eax
lea rcx, [rsp + 0x288]
call fcn.180104744
lea rdx, [0x1803b9740]
lea rcx, [rsp + 0x288]
call fcn.180109019
mov rcx, qword [rsp + 0x98]
call fcn.18010cc73
mov qword [0x1803c4540], rax
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, str.UpdateProcThreadAttribute
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xa0], rax
cmp qword [rsp + 0xa0], 0
jne 0x1801d2a4b
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.18010d01f
mov edx, eax
lea rcx, [rsp + reloc.SHELL32.dll_IsUserAnAdmin]
call fcn.180104744
lea rdx, [0x1803b9740]
lea rcx, [rsp + reloc.SHELL32.dll_IsUserAnAdmin]
call fcn.180109019
mov rcx, qword [rsp + 0xa0]
call fcn.18010cc73
mov qword [0x1803c4598], rax
mov eax, 1
lea rcx, [0x1803c45a8]
xchg dword [rcx], eax
add rsp, 0x2d8
ret