Function at 0x140005e50
Capabilities:
Accept command line arguments
Terminate process

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x9f0
mov rax, qword [0x14003d040]
xor rax, rsp
mov qword [rsp + 0x9e0], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, [rsp + 0x154]
mov rcx, rax
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x1a0]
mov rdi, rax
xor eax, eax
mov ecx, 0x208
rep stosb byte [rdi], al
lea rax, [rsp + 0x3b0]
mov rdi, rax
xor eax, eax
mov ecx, 0x208
rep stosb byte [rdi], al
lea rax, [rsp + 0x5c0]
mov rdi, rax
xor eax, eax
mov ecx, 0x208
rep stosb byte [rdi], al
mov dword [rsp + 0x4c], 0
lea rdx, [0x140023ee0]
lea rcx, [rsp + 0x1a0]
call fcn.14000aa90
lea rdx, str.Acrobat.Reader.Notification.Manager
lea rcx, [rsp + 0x3b0]
call fcn.14000aa90
mov dword [rsp + 0x48], 0
mov dword [rsp + 0x44], 0
mov dword [rsp + 0x50], 0
lea rax, [rsp + 0x188]
mov rdi, rax
xor eax, eax
mov ecx, 0xa
rep stosb byte [rdi], al
mov r8d, 0xa
lea rdx, [rsp + 0x188]
mov ecx, dword [rsp + 0x154]
call fcn.14000aac0
cmp dword [rsp + 0x154], 2
jl 0x140006218
mov eax, 8
imul rax, rax, 1
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx + rax]
lea rcx, [0x140023f48]
sub rcx, rax
movzx edx, word [rax]
cmp dx, word [rax + rcx]
jne 0x140005f8c
add rax, 2
test dx, dx
jne 0x140005f76
xor eax, eax
jmp 0x140005f91
sbb eax, eax
or eax, 1
test eax, eax
jne 0x140005faa
mov dword [rsp + 0x48], 0
mov dword [rsp + 0x4c], 1
jmp 0x140006218
lea rax, [rsp + 0x7d0]
mov rdi, rax
xor eax, eax
mov ecx, 0x208
rep stosb byte [rdi], al
lea rdx, [0x140023f68]
lea rcx, [rsp + 0x7d0]
call fcn.14000aa90
lea rdx, [0x140023fa8]
lea rcx, [rsp + 0x7d0]
call fcn.14000ab00
mov dword [rsp + 0x30], 0x104
mov dword [rsp + 0x28], 0
lea rax, [rsp + 0x5c0]
mov qword [rsp + 0x20], rax
lea r9, [0x140023fc8]
lea r8, [rsp + 0x7d0]
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x150]
call fcn.140015a30
lea rax, [rsp + 0x5c0]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x60], 0xffffffffffffffff
inc qword [rsp + 0x60]
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x60]
cmp word [rax + rcx*2], 0
jne 0x14000603c
mov rax, qword [rsp + 0x60]
test rax, rax
jbe 0x140006070
lea rdx, str._acrobat_reader_appicon_16.png
lea rcx, [rsp + 0x5c0]
call fcn.14000ab00
mov eax, 8
imul rax, rax, 1
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx + rax]
lea rcx, str._Reader
sub rcx, rax
movzx edx, word [rax]
cmp dx, word [rax + rcx]
jne 0x1400060a2
add rax, 2
test dx, dx
jne 0x14000608c
xor eax, eax
jmp 0x1400060a7
sbb eax, eax
or eax, 1
test eax, eax
jne 0x1400060e8
mov dword [rsp + 0x44], 1
lea rdx, [0x140024020]
lea rcx, [rsp + 0x1a0]
call fcn.14000aa90
lea rdx, [0x140024040]
lea rcx, [rsp + 0x3b0]
call fcn.14000aa90
mov dword [rsp + 0x48], 1
jmp 0x140006218
mov eax, 8
imul rax, rax, 1
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx + rax]
lea rcx, str._CollabSync
sub rcx, rax
movzx edx, word [rax]
cmp dx, word [rax + rcx]
jne 0x14000611a
add rax, 2
test dx, dx
jne 0x140006104
xor eax, eax
jmp 0x14000611f
sbb eax, eax
or eax, 1
test eax, eax
jne 0x140006130
mov dword [rsp + 0x50], 1
jmp 0x140006218
mov eax, 8
imul rax, rax, 1
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx + rax]
lea rcx, [0x1400240a0]
sub rcx, rax
movzx edx, word [rax]
cmp dx, word [rax + rcx]
jne 0x140006162
add rax, 2
test dx, dx
jne 0x14000614c
xor eax, eax
jmp 0x140006167
sbb eax, eax
or eax, 1
test eax, eax
jne 0x1400061a5
mov dword [rsp + 0x44], 1
lea rdx, [0x1400240b8]
lea rcx, [rsp + 0x1a0]
call fcn.14000aa90
lea rdx, [0x1400240e0]
lea rcx, [rsp + 0x3b0]
call fcn.14000aa90
mov dword [rsp + 0x48], 3
jmp 0x140006218
mov eax, 8
imul rax, rax, 1
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx + rax]
lea rcx, str._ShowToast
sub rcx, rax
movzx edx, word [rax]
cmp dx, word [rax + rcx]
jne 0x1400061d7
add rax, 2
test dx, dx
jne 0x1400061c1
xor eax, eax
jmp 0x1400061dc
sbb eax, eax
or eax, 1
test eax, eax
jne 0x140006218
lea rdx, [0x140024140]
lea rcx, [rsp + 0x1a0]
call fcn.14000aa90
lea rdx, str.Adobe.Acrobat.Notification.Manager
lea rcx, [rsp + 0x3b0]
call fcn.14000aa90
mov dword [rsp + 0x4c], 1
mov dword [rsp + 0x48], 5
cmp dword [rsp + 0x48], 3
jne 0x140006229
mov dword [0x14003e6a8], 1
cmp dword [rsp + 0x44], 0
jne 0x140006264
call fcn.14001ae50
test eax, eax
je 0x140006241
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov rcx, qword [rsp + 0xa00]
call fcn.140008b30
mov qword [rsp + 0x70], rax
cmp qword [rsp + 0x70], 0
jne 0x140006262
xor eax, eax
jmp 0x1400064b2
jmp 0x14000626e
mov dword [0x14003e6a4], 1
cmp dword [rsp + 0x44], 0
jne 0x14000628b
cmp dword [rsp + 0x50], 0
jne 0x14000628b
cmp dword [rsp + 0x4c], 0
jne 0x14000628b
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x78], rax
lea rdx, [rsp + 0x5c0]
mov rcx, qword [rsp + 0x78]
call fcn.140009510
mov qword [rsp + 0x90], rax
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x80], rax
lea rdx, [rsp + 0x1a0]
mov rcx, qword [rsp + 0x80]
call fcn.140009510
mov qword [rsp + 0x98], rax
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x88], rax
lea rdx, [rsp + 0x3b0]
mov rcx, qword [rsp + 0x88]
call fcn.140009510
mov qword [rsp + 0xa0], rax
mov r8, qword [rsp + 0x90]
mov rdx, qword [rsp + 0x98]
mov rcx, qword [rsp + 0xa0]
call fcn.14000f920
cmp dword [rsp + 0x4c], 0
jne 0x1400063e5
cmp dword [rsp + 0x44], 0
jne 0x140006352
cmp dword [rsp + 0x50], 0
je 0x140006352
call fcn.1400160e0
test eax, eax
jne 0x140006352
xor eax, eax
jmp 0x1400064b2
call fcn.140017e00
test eax, eax
jne 0x140006364
call fcn.140018200
test eax, eax
je 0x14000636b
xor eax, eax
jmp 0x1400064b2
cmp dword [rsp + 0x50], 0
je 0x140006391
mov edx, 0x18d8
mov ecx, 1
call fcn.140016710
test eax, eax
je 0x14000638a
call fcn.1400167e0
xor eax, eax
jmp 0x1400064b2
xor ecx, ecx
call fcn.140017620
test eax, eax
jne 0x1400063a5
call fcn.140015fc0
test eax, eax
jne 0x1400063ac
xor eax, eax
jmp 0x1400064b2
call fcn.140017b00
test eax, eax
jne 0x1400063cb
call fcn.140017a50
mov ecx, 0x7e0
call fcn.1400184b0
xor eax, eax
jmp 0x1400064b2
call fcn.1400177f0
test eax, eax
je 0x1400063e5
mov ecx, 0x7e5
call fcn.1400184b0
xor eax, eax
jmp 0x1400064b2
cmp dword [0x14003e6a0], 0
je 0x14000640a
lea r8, str.ToastStarted
lea rdx, [0x1400241b8]
lea rcx, [0x1400241d0]
call fcn.14000df70
jmp 0x140006414
mov ecx, 0x7d0
call fcn.1400184b0
lea rax, [rsp + 0x110]
mov qword [rsp + 0xa8], rax
lea rax, [rsp + 0x40]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rdx, [rsp + 0x40]
mov rcx, qword [rsp + 0xa8]
call fcn.14000ab70
mov rcx, rax
call fcn.14000fed0
cmp dword [rsp + 0x44], 0
jne 0x140006496
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x158]
call qword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
je 0x140006494
lea rcx, [rsp + 0x158]
call qword [sym.imp.USER32.dll_TranslateMessage]
test eax, eax
je 0x140006484
jmp 0x140006456
lea rcx, [rsp + 0x158]
call qword [sym.imp.USER32.dll_DispatchMessageW]
jmp 0x140006456
jmp 0x1400064aa
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [rsp + 0x48]
call fcn.140006ad0
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov rcx, qword [rsp + 0x9e0]
xor rcx, rsp
call fcn.14001f370
add rsp, 0x9f0
pop rdi
ret