Function at 0x1800346b0
Capabilities:
Link many functions at runtime

Disassembly:
mov r11, rsp
push r12
sub rsp, 0x70
mov qword [rsp + 0x30], 0xfffffffffffffffe
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rbp
mov qword [r11 + 0x18], rsi
mov qword [r11 + 0x20], rdi
mov rax, qword [0x1800d1eb0]
xor rax, rsp
mov qword [rsp + 0x60], rax
lea r12, [0x1800d99f0]
mov qword [r11 - 0x50], r12
mov edi, 7
mov qword [0x1800d9a08], rdi
xor ebx, ebx
mov qword [0x1800d9a00], rbx
mov word [0x1800d99f0], bx
mov rax, qword [0x1800d6f10]
test rax, rax
jne 0x18003473c
mov ecx, 0x2a8
call fcn.18007b11c
mov qword [rsp + 0x20], rax
test rax, rax
je 0x180034732
mov rcx, rax
call fcn.180015880
jmp 0x180034735
mov rax, rbx
mov qword [0x1800d6f10], rax
cmp dword [rax], 6
jne 0x18003479b
lea rdx, [0x1800abb50]
mov rcx, qword [0x1800d9568]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1800d9648], rax
mov qword [0x1800d9650], rax
cmp qword [0x1800d6f78], 0
jne 0x18003478f
lea rdx, [0x1800abb60]
mov rcx, qword [0x1800d9568]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1800d6f78], rax
mov qword [0x1800d97d8], rax
mov rax, qword [0x1800d96d8]
jmp 0x18003482a
mov rax, qword [0x1800d9570]
test rax, rax
jne 0x1800347bb
lea rcx, str.KernelBase.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [0x1800d9570], rax
cmp qword [0x1800d6f78], 0
jne 0x1800347ea
lea rdx, [0x1800abb60]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1800d6f78], rax
mov qword [0x1800d97d8], rax
mov rax, qword [0x1800d9570]
lea rdx, [0x1800abb50]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1800d9648], rax
mov qword [0x1800d9650], rax
lea rdx, [0x1800abb70]
mov rcx, qword [0x1800d9570]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1800d96d8], rax
mov qword [0x1800d96e0], rax
test rax, rax
jne 0x180034877
mov rax, qword [0x1800d9568]
test rax, rax
jne 0x18003484f
lea rcx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [0x1800d9568], rax
cmp qword [0x1800d9708], 0
jne 0x180034877
lea rdx, str.CreateFileMappingA
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x1800d9708], rax
mov qword [0x1800d9710], rax
mov rax, qword [0x1800d6f10]
test rax, rax
jne 0x1800348ab
mov ecx, 0x2a8
call fcn.18007b11c
mov qword [rsp + 0x20], rax
test rax, rax
je 0x1800348a1
mov rcx, rax
call fcn.180015880
jmp 0x1800348a4
mov rax, rbx
mov qword [0x1800d6f10], rax
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rbx
mov word [rsp + 0x38], bx
lea rdx, [rax + 0x230]
or rbp, 0xffffffffffffffff
mov r9, rbp
xor r8d, r8d
lea rcx, [rsp + 0x38]
call fcn.1800049e0
nop
lea rcx, [rsp + 0x38]
mov r11, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x50]
cmp rsi, 8
cmovae rcx, r11
mov r8, qword [rsp + 0x48]
cmp r8, 7
cmovb rdi, r8
lea rdx, str.winword
test rdi, rdi
je 0x18003492c
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x18003491d
add rcx, 2
add rdx, 2
dec rdi
jne 0x180034906
jmp 0x18003492c
mov r9d, 1
cmp word [rcx], ax
cmovb r9d, ebp
jmp 0x18003492f
mov r9d, ebx
movsxd rax, r9d
test r9d, r9d
jne 0x18003494a
cmp r8, 7
jae 0x180034941
mov eax, ebp
jmp 0x18003494a
mov eax, ebx
cmp r8, 7
setne al
test eax, eax
sete al
test al, al
jne 0x180034c8c
lea rcx, [rsp + 0x38]
cmp rsi, 8
cmovae rcx, r11
mov r9d, 5
cmp r8, r9
cmovb r9, r8
lea rdx, str.excel
test r9, r9
je 0x1800349a6
nop dword [rax]
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x180034997
add rcx, 2
add rdx, 2
dec r9
jne 0x180034980
jmp 0x1800349a6
mov r9d, 1
cmp word [rcx], ax
cmovb r9d, ebp
jmp 0x1800349a9
mov r9d, ebx
movsxd rax, r9d
test r9d, r9d
jne 0x1800349c4
cmp r8, 5
jae 0x1800349bb
mov eax, ebp
jmp 0x1800349c4
mov eax, ebx
cmp r8, 5
setne al
test eax, eax
sete al
test al, al
jne 0x180034c8c
lea rcx, [rsp + 0x38]
cmp rsi, 8
cmovae rcx, r11
mov r10d, 8
mov r9d, r10d
cmp r8, r10
cmovb r9, r8
lea rdx, str.powerpnt
test r9, r9
je 0x180034a26
nop word [rax + rax]
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x180034a17
add rcx, 2
add rdx, 2
dec r9
jne 0x180034a00
jmp 0x180034a26
mov r9d, 1
cmp word [rcx], ax
cmovb r9d, ebp
jmp 0x180034a29
mov r9d, ebx
movsxd rax, r9d
test r9d, r9d
jne 0x180034a42
cmp r8, r10
jae 0x180034a3a
mov eax, ebp
jmp 0x180034a42
mov eax, ebx
cmp r8, r10
setne al
test eax, eax
sete al
test al, al
jne 0x180034c8c
lea rcx, [rsp + 0x38]
cmp rsi, r10
cmovae rcx, r11
cmp r8, r10
cmovb r10, r8
lea rdx, str.msaccess
test r10, r10
je 0x180034a96
nop
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x180034a87
add rcx, 2
add rdx, 2
dec r10
jne 0x180034a70
jmp 0x180034a96
mov r9d, 1
cmp word [rcx], ax
cmovb r9d, ebp
jmp 0x180034a99
mov r9d, ebx
movsxd rax, r9d
test r9d, r9d
jne 0x180034ab4
cmp r8, 8
jae 0x180034aab
mov eax, ebp
jmp 0x180034ab4
mov eax, ebx
cmp r8, 8
setne al
test eax, eax
sete al
test al, al
jne 0x180034c8c
lea rcx, [rsp + 0x38]
cmp rsi, 8
cmovae rcx, r11
mov r9d, 6
cmp r8, r9
cmovb r9, r8
lea rdx, str.arcmap
test r9, r9
je 0x180034b0d
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x180034afe
add rcx, 2
add rdx, 2
dec r9
jne 0x180034ae7
jmp 0x180034b0d
mov r9d, 1
cmp word [rcx], ax
cmovb r9d, ebp
jmp 0x180034b10
mov r9d, ebx
movsxd rax, r9d
test r9d, r9d
jne 0x180034b2b
cmp r8, 6
jae 0x180034b22
mov eax, ebp
jmp 0x180034b2b
mov eax, ebx
cmp r8, 6
setne al
test eax, eax
sete al
test al, al
jne 0x180034c8c
lea rcx, [rsp + 0x38]
cmp rsi, 8
cmovae rcx, r11
mov r10d, 3
mov r9d, r10d
cmp r8, r10
cmovb r9, r8
lea rdx, [0x1800a92c8]
test r9, r9
je 0x180034b87
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x180034b78
add rcx, 2
add rdx, 2
dec r9
jne 0x180034b61
jmp 0x180034b87
mov r9d, 1
cmp word [rcx], ax
cmovb r9d, ebp
jmp 0x180034b8a
mov r9d, ebx
movsxd rax, r9d
test r9d, r9d
jne 0x180034ba3
cmp r8, r10
jae 0x180034b9b
mov eax, ebp
jmp 0x180034ba3
mov eax, ebx
cmp r8, r10
setne al
test eax, eax
sete al
test al, al
jne 0x180034c8c
lea rcx, [rsp + 0x38]
cmp rsi, 8
cmovae rcx, r11
mov r9d, 2
cmp r8, r9
cmovb r9, r8
lea rdx, [0x1800aa304]
test r9, r9
je 0x180034bfc
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x180034bed
add rcx, 2
add rdx, 2
dec r9
jne 0x180034bd6
jmp 0x180034bfc
mov r9d, 1
cmp word [rcx], ax
cmovb r9d, ebp
jmp 0x180034bff
mov r9d, ebx
movsxd rax, r9d
test r9d, r9d
jne 0x180034c1a
cmp r8, 2
jae 0x180034c11
mov eax, ebp
jmp 0x180034c1a
mov eax, ebx
cmp r8, 2
setne al
test eax, eax
sete al
test al, al
jne 0x180034c8c
lea rcx, [rsp + 0x38]
cmp rsi, 8
cmovae rcx, r11
cmp r8, r10
cmovb r10, r8
lea rdx, [0x1800abba0]
test r10, r10
je 0x180034c69
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x180034c5a
add rcx, 2
add rdx, 2
dec r10
jne 0x180034c43
jmp 0x180034c69
mov r9d, 1
cmp word [rcx], ax
cmovb r9d, ebp
jmp 0x180034c6c
mov r9d, ebx
movsxd rax, r9d
test r9d, r9d
jne 0x180034c83
cmp r8, 3
jae 0x180034c7e
mov eax, ebp
jmp 0x180034c83
setne bl
mov eax, ebx
test eax, eax
sete al
test al, al
je 0x180034c96
mov dword [0x1800d9a18], 1
call fcn.180035450
nop
cmp qword [rsp + 0x50], 8
jb 0x180034caf
mov rcx, qword [rsp + 0x38]
call fcn.18007a7a4
nop
mov rax, r12
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.18007a7c0
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x10]
mov rbp, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop r12
ret