Function at 0x140005e10
Capabilities:
Accept command line arguments
Terminate process

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x9f0
mov rax, qword [0x14008d010]
xor rax, rsp
mov qword [rsp + 0x9e0], rax
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, [rsp + 0x154]
mov rcx, rax
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x1a0]
mov rdi, rax
xor eax, eax
mov ecx, 0x208
rep stosb byte [rdi], al
lea rax, [rsp + 0x3b0]
mov rdi, rax
xor eax, eax
mov ecx, 0x208
rep stosb byte [rdi], al
lea rax, [rsp + 0x5c0]
mov rdi, rax
xor eax, eax
mov ecx, 0x208
rep stosb byte [rdi], al
mov dword [rsp + 0x4c], 0
lea rdx, [0x14002c768]
lea rcx, [rsp + 0x1a0]
call fcn.14000ad40
lea rdx, str.Acrobat.Reader.Notification.Manager
lea rcx, [rsp + 0x3b0]
call fcn.14000ad40
mov dword [rsp + 0x48], 0
mov dword [rsp + 0x44], 0
mov dword [rsp + 0x50], 0
lea rax, [rsp + 0x188]
mov rdi, rax
xor eax, eax
mov ecx, 0xa
rep stosb byte [rdi], al
mov r8d, 0xa
lea rdx, [rsp + 0x188]
mov ecx, dword [rsp + 0x154]
call fcn.14000ad70
cmp dword [rsp + 0x154], 2
jl 0x1400061d8
mov eax, 8
imul rax, rax, 1
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx + rax]
lea rcx, [0x140027038]
sub rcx, rax
movzx edx, word [rax]
cmp dx, word [rax + rcx]
jne 0x140005f4c
add rax, 2
test dx, dx
jne 0x140005f36
xor eax, eax
jmp 0x140005f51
sbb eax, eax
or eax, 1
test eax, eax
jne 0x140005f6a
mov dword [rsp + 0x48], 0
mov dword [rsp + 0x4c], 1
jmp 0x1400061d8
lea rax, [rsp + 0x7d0]
mov rdi, rax
xor eax, eax
mov ecx, 0x208
rep stosb byte [rdi], al
lea rdx, [0x14002c848]
lea rcx, [rsp + 0x7d0]
call fcn.14000ad40
lea rdx, [0x14002d458]
lea rcx, [rsp + 0x7d0]
call fcn.14000adb0
mov dword [rsp + 0x30], 0x104
mov dword [rsp + 0x28], 0
lea rax, [rsp + 0x5c0]
mov qword [rsp + 0x20], rax
lea r9, [0x140024b4c]
lea r8, [rsp + 0x7d0]
mov rdx, 0xffffffff80000002
lea rcx, [rsp + 0x150]
call fcn.1400163f0
lea rax, [rsp + 0x5c0]
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x60], 0xffffffffffffffff
inc qword [rsp + 0x60]
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x60]
cmp word [rax + rcx*2], 0
jne 0x140005ffc
mov rax, qword [rsp + 0x60]
test rax, rax
jbe 0x140006030
lea rdx, str._acrobat_reader_appicon_16.png
lea rcx, [rsp + 0x5c0]
call fcn.14000adb0
mov eax, 8
imul rax, rax, 1
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx + rax]
lea rcx, str._Reader
sub rcx, rax
movzx edx, word [rax]
cmp dx, word [rax + rcx]
jne 0x140006062
add rax, 2
test dx, dx
jne 0x14000604c
xor eax, eax
jmp 0x140006067
sbb eax, eax
or eax, 1
test eax, eax
jne 0x1400060a8
mov dword [rsp + 0x44], 1
lea rdx, [0x14002d6a8]
lea rcx, [rsp + 0x1a0]
call fcn.14000ad40
lea rdx, [0x140039830]
lea rcx, [rsp + 0x3b0]
call fcn.14000ad40
mov dword [rsp + 0x48], 1
jmp 0x1400061d8
mov eax, 8
imul rax, rax, 1
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx + rax]
lea rcx, [0x140026ef8]
sub rcx, rax
movzx edx, word [rax]
cmp dx, word [rax + rcx]
jne 0x1400060da
add rax, 2
test dx, dx
jne 0x1400060c4
xor eax, eax
jmp 0x1400060df
sbb eax, eax
or eax, 1
test eax, eax
jne 0x1400060f0
mov dword [rsp + 0x50], 1
jmp 0x1400061d8
mov eax, 8
imul rax, rax, 1
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx + rax]
lea rcx, [0x140027058]
sub rcx, rax
movzx edx, word [rax]
cmp dx, word [rax + rcx]
jne 0x140006122
add rax, 2
test dx, dx
jne 0x14000610c
xor eax, eax
jmp 0x140006127
sbb eax, eax
or eax, 1
test eax, eax
jne 0x140006165
mov dword [rsp + 0x44], 1
lea rdx, [0x14002db58]
lea rcx, [rsp + 0x1a0]
call fcn.14000ad40
lea rdx, [0x140039880]
lea rcx, [rsp + 0x3b0]
call fcn.14000ad40
mov dword [rsp + 0x48], 3
jmp 0x1400061d8
mov eax, 8
imul rax, rax, 1
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx + rax]
lea rcx, str._ShowToast
sub rcx, rax
movzx edx, word [rax]
cmp dx, word [rax + rcx]
jne 0x140006197
add rax, 2
test dx, dx
jne 0x140006181
xor eax, eax
jmp 0x14000619c
sbb eax, eax
or eax, 1
test eax, eax
jne 0x1400061d8
lea rdx, [0x14002de98]
lea rcx, [rsp + 0x1a0]
call fcn.14000ad40
lea rdx, str.Adobe.Acrobat.Notification.Manager
lea rcx, [rsp + 0x3b0]
call fcn.14000ad40
mov dword [rsp + 0x4c], 1
mov dword [rsp + 0x48], 5
cmp dword [rsp + 0x48], 3
jne 0x1400061e9
mov dword [0x14008e678], 1
cmp dword [rsp + 0x44], 0
jne 0x140006224
call fcn.14001b9b0
test eax, eax
je 0x140006201
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov rcx, qword [rsp + 0xa00]
call fcn.140008b50
mov qword [rsp + 0x70], rax
cmp qword [rsp + 0x70], 0
jne 0x140006222
xor eax, eax
jmp 0x140006482
jmp 0x14000622e
mov dword [0x14008e674], 1
cmp dword [rsp + 0x44], 0
jne 0x14000624b
cmp dword [rsp + 0x50], 0
jne 0x14000624b
cmp dword [rsp + 0x4c], 0
jne 0x14000624b
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
lea rax, [rsp + 0xb0]
mov qword [rsp + 0x78], rax
lea rdx, [rsp + 0x5c0]
mov rcx, qword [rsp + 0x78]
call fcn.140009570
mov qword [rsp + 0x90], rax
lea rax, [rsp + 0xd0]
mov qword [rsp + 0x80], rax
lea rdx, [rsp + 0x1a0]
mov rcx, qword [rsp + 0x80]
call fcn.140009570
mov qword [rsp + 0x98], rax
lea rax, [rsp + 0xf0]
mov qword [rsp + 0x88], rax
lea rdx, [rsp + 0x3b0]
mov rcx, qword [rsp + 0x88]
call fcn.140009570
mov qword [rsp + 0xa0], rax
mov r8, qword [rsp + 0x90]
mov rdx, qword [rsp + 0x98]
mov rcx, qword [rsp + 0xa0]
call fcn.14000f9c0
cmp dword [rsp + 0x4c], 0
jne 0x1400063b5
cmp dword [rsp + 0x44], 0
jne 0x140006312
cmp dword [rsp + 0x50], 0
je 0x140006312
call fcn.140016aa0
test eax, eax
jne 0x140006312
xor eax, eax
jmp 0x140006482
call fcn.140018860
test eax, eax
jne 0x140006324
call fcn.140018c60
test eax, eax
je 0x14000632b
xor eax, eax
jmp 0x140006482
cmp dword [rsp + 0x50], 0
je 0x140006351
mov edx, 0x18d8
mov ecx, 1
call fcn.1400170d0
test eax, eax
je 0x14000634a
call fcn.1400171a0
xor eax, eax
jmp 0x140006482
xor ecx, ecx
call fcn.140017fe0
test eax, eax
jne 0x140006365
call fcn.140016980
test eax, eax
jne 0x14000636c
xor eax, eax
jmp 0x140006482
call fcn.1400181b0
test eax, eax
je 0x14000637c
xor eax, eax
jmp 0x140006482
call fcn.140018560
test eax, eax
jne 0x14000639b
call fcn.1400184b0
mov ecx, 0x7e0
call fcn.140018fc0
xor eax, eax
jmp 0x140006482
call fcn.140018250
test eax, eax
je 0x1400063b5
mov ecx, 0x7e5
call fcn.140018fc0
xor eax, eax
jmp 0x140006482
cmp dword [0x14008e670], 0
je 0x1400063da
lea r8, str.ToastStarted
lea rdx, [0x140027428]
lea rcx, [0x140027498]
call fcn.14000df70
jmp 0x1400063e4
mov ecx, 0x7d0
call fcn.140018fc0
lea rax, [rsp + 0x110]
mov qword [rsp + 0xa8], rax
lea rax, [rsp + 0x40]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx edx, byte [rsp + 0x40]
mov rcx, qword [rsp + 0xa8]
call fcn.14000ae30
mov rcx, rax
call fcn.14000ff70
cmp dword [rsp + 0x44], 0
jne 0x140006466
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x158]
call qword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
je 0x140006464
lea rcx, [rsp + 0x158]
call qword [sym.imp.USER32.dll_TranslateMessage]
test eax, eax
je 0x140006454
jmp 0x140006426
lea rcx, [rsp + 0x158]
call qword [sym.imp.USER32.dll_DispatchMessageW]
jmp 0x140006426
jmp 0x14000647a
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [rsp + 0x48]
call fcn.140006a90
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov rcx, qword [rsp + 0x9e0]
xor rcx, rsp
call fcn.140020090
add rsp, 0x9f0
pop rdi
ret