Function at 0x14002ac70
Capabilities:
Link many functions at runtime

Disassembly:
mov r11, rsp
push r12
sub rsp, 0x70
mov qword [rsp + 0x30], 0xfffffffffffffffe
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rbp
mov qword [r11 + 0x18], rsi
mov qword [r11 + 0x20], rdi
mov rax, qword [0x14007bec0]
xor rax, rsp
mov qword [rsp + 0x60], rax
lea r12, [0x140089788]
mov qword [r11 - 0x50], r12
mov edi, 7
mov qword [0x1400897a0], rdi
xor ebx, ebx
mov qword [0x140089798], rbx
mov word [0x140089788], bx
mov rax, qword [0x1400850b0]
test rax, rax
jne 0x14002acfc
mov ecx, 0x2a8
call fcn.140033f0c
mov qword [rsp + 0x20], rax
test rax, rax
je 0x14002acf2
mov rcx, rax
call fcn.140005770
jmp 0x14002acf5
mov rax, rbx
mov qword [0x1400850b0], rax
cmp dword [rax], 6
jne 0x14002ad5b
lea rdx, str.GetFileSizeEx
mov rcx, qword [0x1400892f0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400893d0], rax
mov qword [0x1400893d8], rax
cmp qword [0x140085100], 0
jne 0x14002ad4f
lea rdx, [0x14006a318]
mov rcx, qword [0x1400892f0]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140085100], rax
mov qword [0x140089560], rax
mov rax, qword [0x140089460]
jmp 0x14002adea
mov rax, qword [0x1400892f8]
test rax, rax
jne 0x14002ad7b
lea rcx, str.KernelBase.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [0x1400892f8], rax
cmp qword [0x140085100], 0
jne 0x14002adaa
lea rdx, [0x14006a318]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140085100], rax
mov qword [0x140089560], rax
mov rax, qword [0x1400892f8]
lea rdx, str.GetFileSizeEx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1400893d0], rax
mov qword [0x1400893d8], rax
lea rdx, [0x14006a328]
mov rcx, qword [0x1400892f8]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140089460], rax
mov qword [0x140089468], rax
test rax, rax
jne 0x14002ae37
mov rax, qword [0x1400892f0]
test rax, rax
jne 0x14002ae0f
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [0x1400892f0], rax
cmp qword [0x140089490], 0
jne 0x14002ae37
lea rdx, str.CreateFileMappingA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x140089490], rax
mov qword [0x140089498], rax
mov rax, qword [0x1400850b0]
test rax, rax
jne 0x14002ae6b
mov ecx, 0x2a8
call fcn.140033f0c
mov qword [rsp + 0x20], rax
test rax, rax
je 0x14002ae61
mov rcx, rax
call fcn.140005770
jmp 0x14002ae64
mov rax, rbx
mov qword [0x1400850b0], rax
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rbx
mov word [rsp + 0x38], bx
lea rdx, [rax + 0x230]
or rbp, 0xffffffffffffffff
mov r9, rbp
xor r8d, r8d
lea rcx, [rsp + 0x38]
call fcn.1400030d0
nop
lea rcx, [rsp + 0x38]
mov r11, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x50]
cmp rsi, 8
cmovae rcx, r11
mov r8, qword [rsp + 0x48]
cmp r8, 7
cmovb rdi, r8
lea rdx, str.winword
test rdi, rdi
je 0x14002aeec
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x14002aedd
add rcx, 2
add rdx, 2
dec rdi
jne 0x14002aec6
jmp 0x14002aeec
mov r9d, 1
cmp word [rcx], ax
cmovb r9d, ebp
jmp 0x14002aeef
mov r9d, ebx
movsxd rax, r9d
test r9d, r9d
jne 0x14002af0a
cmp r8, 7
jae 0x14002af01
mov eax, ebp
jmp 0x14002af0a
mov eax, ebx
cmp r8, 7
setne al
test eax, eax
sete al
test al, al
jne 0x14002b24c
lea rcx, [rsp + 0x38]
cmp rsi, 8
cmovae rcx, r11
mov r9d, 5
cmp r8, r9
cmovb r9, r8
lea rdx, str.excel
test r9, r9
je 0x14002af66
nop dword [rax]
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x14002af57
add rcx, 2
add rdx, 2
dec r9
jne 0x14002af40
jmp 0x14002af66
mov r9d, 1
cmp word [rcx], ax
cmovb r9d, ebp
jmp 0x14002af69
mov r9d, ebx
movsxd rax, r9d
test r9d, r9d
jne 0x14002af84
cmp r8, 5
jae 0x14002af7b
mov eax, ebp
jmp 0x14002af84
mov eax, ebx
cmp r8, 5
setne al
test eax, eax
sete al
test al, al
jne 0x14002b24c
lea rcx, [rsp + 0x38]
cmp rsi, 8
cmovae rcx, r11
mov r10d, 8
mov r9d, r10d
cmp r8, r10
cmovb r9, r8
lea rdx, str.powerpnt
test r9, r9
je 0x14002afe6
nop word [rax + rax]
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x14002afd7
add rcx, 2
add rdx, 2
dec r9
jne 0x14002afc0
jmp 0x14002afe6
mov r9d, 1
cmp word [rcx], ax
cmovb r9d, ebp
jmp 0x14002afe9
mov r9d, ebx
movsxd rax, r9d
test r9d, r9d
jne 0x14002b002
cmp r8, r10
jae 0x14002affa
mov eax, ebp
jmp 0x14002b002
mov eax, ebx
cmp r8, r10
setne al
test eax, eax
sete al
test al, al
jne 0x14002b24c
lea rcx, [rsp + 0x38]
cmp rsi, r10
cmovae rcx, r11
cmp r8, r10
cmovb r10, r8
lea rdx, str.msaccess
test r10, r10
je 0x14002b056
nop
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x14002b047
add rcx, 2
add rdx, 2
dec r10
jne 0x14002b030
jmp 0x14002b056
mov r9d, 1
cmp word [rcx], ax
cmovb r9d, ebp
jmp 0x14002b059
mov r9d, ebx
movsxd rax, r9d
test r9d, r9d
jne 0x14002b074
cmp r8, 8
jae 0x14002b06b
mov eax, ebp
jmp 0x14002b074
mov eax, ebx
cmp r8, 8
setne al
test eax, eax
sete al
test al, al
jne 0x14002b24c
lea rcx, [rsp + 0x38]
cmp rsi, 8
cmovae rcx, r11
mov r9d, 6
cmp r8, r9
cmovb r9, r8
lea rdx, str.arcmap
test r9, r9
je 0x14002b0cd
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x14002b0be
add rcx, 2
add rdx, 2
dec r9
jne 0x14002b0a7
jmp 0x14002b0cd
mov r9d, 1
cmp word [rcx], ax
cmovb r9d, ebp
jmp 0x14002b0d0
mov r9d, ebx
movsxd rax, r9d
test r9d, r9d
jne 0x14002b0eb
cmp r8, 6
jae 0x14002b0e2
mov eax, ebp
jmp 0x14002b0eb
mov eax, ebx
cmp r8, 6
setne al
test eax, eax
sete al
test al, al
jne 0x14002b24c
lea rcx, [rsp + 0x38]
cmp rsi, 8
cmovae rcx, r11
mov r10d, 3
mov r9d, r10d
cmp r8, r10
cmovb r9, r8
lea rdx, [0x140068ad8]
test r9, r9
je 0x14002b147
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x14002b138
add rcx, 2
add rdx, 2
dec r9
jne 0x14002b121
jmp 0x14002b147
mov r9d, 1
cmp word [rcx], ax
cmovb r9d, ebp
jmp 0x14002b14a
mov r9d, ebx
movsxd rax, r9d
test r9d, r9d
jne 0x14002b163
cmp r8, r10
jae 0x14002b15b
mov eax, ebp
jmp 0x14002b163
mov eax, ebx
cmp r8, r10
setne al
test eax, eax
sete al
test al, al
jne 0x14002b24c
lea rcx, [rsp + 0x38]
cmp rsi, 8
cmovae rcx, r11
mov r9d, 2
cmp r8, r9
cmovb r9, r8
lea rdx, [0x140068ae0]
test r9, r9
je 0x14002b1bc
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x14002b1ad
add rcx, 2
add rdx, 2
dec r9
jne 0x14002b196
jmp 0x14002b1bc
mov r9d, 1
cmp word [rcx], ax
cmovb r9d, ebp
jmp 0x14002b1bf
mov r9d, ebx
movsxd rax, r9d
test r9d, r9d
jne 0x14002b1da
cmp r8, 2
jae 0x14002b1d1
mov eax, ebp
jmp 0x14002b1da
mov eax, ebx
cmp r8, 2
setne al
test eax, eax
sete al
test al, al
jne 0x14002b24c
lea rcx, [rsp + 0x38]
cmp rsi, 8
cmovae rcx, r11
cmp r8, r10
cmovb r10, r8
lea rdx, [0x14006a358]
test r10, r10
je 0x14002b229
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x14002b21a
add rcx, 2
add rdx, 2
dec r10
jne 0x14002b203
jmp 0x14002b229
mov r9d, 1
cmp word [rcx], ax
cmovb r9d, ebp
jmp 0x14002b22c
mov r9d, ebx
movsxd rax, r9d
test r9d, r9d
jne 0x14002b243
cmp r8, 3
jae 0x14002b23e
mov eax, ebp
jmp 0x14002b243
setne bl
mov eax, ebx
test eax, eax
sete al
test al, al
je 0x14002b256
mov dword [0x1400897b0], 1
call fcn.14002ba80
nop
cmp qword [rsp + 0x50], 8
jb 0x14002b26f
mov rcx, qword [rsp + 0x38]
call fcn.140033ccc
nop
mov rax, r12
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.140033cf0
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop r12
ret