Function at 0x18002c9e0
Capabilities:
Link many functions at runtime

Disassembly:
mov rax, rsp
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xc0
mov qword [rbp + 0x47], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rdi
mov rdi, rcx
lea rcx, [rbp - 0x39]
call fcn.1800272c0
mov r11, qword [0x1800f5df0]
mov qword [rbp - 0x29], r11
mov qword [rbp - 0x21], r11
mov qword [rbp - 0x19], r11
mov qword [rbp - 0x11], r11
mov qword [rbp - 9], r11
mov qword [rbp - 1], r11
mov qword [rbp + 0x27], r11
mov qword [rbp + 0x2f], r11
mov qword [rbp + 0x37], r11
mov edx, SafeArrayCreate
lea rcx, [rbp - 0x49]
call fcn.180027270
nop
lea r8, [rbp - 0x39]
lea rdx, [rbp - 0x49]
lea rcx, [0x1801515d8]
call fcn.180022d00
mov rcx, qword [rbp - 0x21]
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov qword [rdi + 0x10], rax
test rax, rax
je 0x18002cb61
lea rdx, str.SetSecurityRegion
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180152138], rax
lea rdx, str.SetGlobalInfo
mov rcx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180152140], rax
lea rdx, str.SetPolicyInfo
mov rcx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180152148], rax
lea rdx, str.SetUserCfgInfo
mov rcx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180152150], rax
lea rdx, str.SetUserLib
mov rcx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180152158], rax
lea rdx, str.SetUGroupLib
mov rcx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180152160], rax
lea rdx, str.SetAgentLib
mov rcx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180152168], rax
lea rdx, str.SetAGroupLib
mov rcx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180152170], rax
lea rdx, str.SetGroupIDInfo
mov rcx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180152178], rax
lea rdx, str.SetRelationship
mov rcx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180152180], rax
jmp 0x18002cb68
mov rax, qword [0x180152180]
cmp qword [0x180152138], 0
je 0x18002cbce
cmp qword [0x180152140], 0
je 0x18002cbce
cmp qword [0x180152148], 0
je 0x18002cbce
cmp qword [0x180152150], 0
je 0x18002cbce
cmp qword [0x180152158], 0
je 0x18002cbce
cmp qword [0x180152160], 0
je 0x18002cbce
cmp qword [0x180152168], 0
je 0x18002cbce
cmp qword [0x180152170], 0
je 0x18002cbce
cmp qword [0x180152178], 0
je 0x18002cbce
test rax, rax
je 0x18002cbce
mov ebx, 1
jmp 0x18002cbd0
xor ebx, ebx
mov dword [rdi + 8], ebx
lea rcx, [rbp - 0x49]
call fcn.180027260
nop
lea rcx, [rbp + 0x37]
call fcn.180040610
nop
lea rcx, [rbp + 0x2f]
call fcn.180040610
nop
lea rcx, [rbp + 0x27]
call fcn.180040610
nop
lea rcx, [rbp - 1]
call fcn.180040610
nop
lea rcx, [rbp - 9]
call fcn.180040610
nop
lea rcx, [rbp - 0x11]
call fcn.180040610
nop
lea rcx, [rbp - 0x19]
call fcn.180040610
nop
lea rcx, [rbp - 0x21]
call fcn.180040610
nop
lea rcx, [rbp - 0x29]
call fcn.180040610
nop
lea rcx, [rbp - 0x39]
call fcn.180027260
mov eax, ebx
lea r11, [rsp + 0xc0]
mov rbx, qword [r11 + 0x10]
mov rdi, qword [r11 + 0x18]
mov rsp, r11
pop rbp
ret