Function at 0x14013b0b0
Capabilities:
Accept command line arguments

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x3a8]
sub rsp, 0x490
mov rax, qword [0x140262958]
xor rax, rsp
mov qword [rbp + 0x380], rax
mov rbx, rdx
mov qword [rsp + 0x38], rdx
xor r14d, r14d
mov dword [rsp + 0x34], r14d
mov qword [rdx + 0x10], r14
lea edi, [r14 + 0xf]
mov qword [rdx + 0x18], rdi
mov byte [rdx], r14b
lea rdx, [0x1401e96a8]
mov rcx, rbx
call fcn.140054ecc
mov dword [rsp + 0x34], 1
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x410
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
test rax, rax
je 0x14013b431
mov r9d, 0x400
lea r8, [rbp - 0x80]
xor edx, edx
mov rcx, rax
call sub.PSAPI.DLL_GetModuleFileNameExA
test eax, eax
je 0x14013b39d
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], rdi
mov byte [rsp + 0x40], r14b
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x40]
call fcn.140054ecc
nop
lea rcx, [0x1401f4e5c]
call fcn.1401730d0
nop
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rcx, qword [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [0x1401f4e5c]
or r8, 0xffffffffffffffff
mov rdx, qword [rsp + 0x50]
call fcn.1400f4f18
mov r15d, 0x1000
cmp rax, 0xffffffffffffffff
je 0x14013b363
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], rdi
mov byte [rsp + 0x60], r14b
lea r8, [rax + 1]
or r9, 0xffffffffffffffff
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x60]
call fcn.1400dc4e4
mov dword [rsp + 0x34], 3
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14013b225
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, r15
jb 0x14013b21f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14013b49a
call fcn.14016b110
nop
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], rdi
mov byte [rsp + 0x40], r14b
mov r8d, 0x20
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x40]
call fcn.14016c6d0
nop
lea rcx, [0x1401e9b90]
call fcn.1401730d0
nop
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rcx, qword [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [0x1401e9b90]
xor r8d, r8d
mov rdx, qword [rsp + 0x50]
call fcn.1400bf2c0
cmp rax, 0xffffffffffffffff
je 0x14013b363
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], rdi
mov byte [rsp + 0x60], r14b
mov r9, rax
xor r8d, r8d
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x60]
call fcn.1400dc4e4
mov dword [rsp + 0x34], 7
lea rax, [rsp + 0x60]
cmp rbx, rax
je 0x14013b328
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x14013b2f8
mov rcx, qword [rbx]
inc rdx
cmp rdx, r15
jb 0x14013b2f2
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14013b4a0
mov rcx, r8
call fcn.14016b110
nop
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], rdi
mov byte [rbx], r14b
mov r8d, 0x20
lea rdx, [rsp + 0x60]
mov rcx, rbx
call fcn.14016c6d0
nop
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], rdi
mov byte [rsp + 0x60], r14b
jmp 0x14013b32d
mov rdi, qword [rsp + 0x78]
cmp rdi, 0x10
jb 0x14013b363
lea rdx, [rdi + 1]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, r15
jb 0x14013b35d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14013b4a6
call fcn.14016b110
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14013b39d
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, r15
jb 0x14013b397
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14013b4ac
call fcn.14016b110
nop
lea rdx, str.Acrobat
mov rcx, rbx
call fcn.14006fe48
test al, al
jne 0x14013b3c3
lea rdx, str.AcroRd32
mov rcx, rbx
call fcn.14006fe48
test al, al
je 0x14013b428
mov ecx, dword [0x140274a78]
mov rax, qword gs:[0x58]
mov edx, 0x14
mov rax, qword [rax + rcx*8]
mov ecx, dword [rdx + rax]
cmp dword [0x140273f10], ecx
jg 0x14013b460
cmp byte [0x140273f0c], r14b
je 0x14013b428
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, str.__typerenderer
mov rcx, rax
call fcn.14016eaa0
test rax, rax
jne 0x14013b428
lea rcx, str.Broker
call fcn.1401730d0
nop
mov r8, rax
lea rdx, str.Broker
mov rcx, rbx
call fcn.140054d5c
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, rbx
mov rcx, qword [rbp + 0x380]
xor rcx, rsp
call fcn.14016b720
lea r11, [rsp + 0x490]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
lea rcx, [0x140273f10]
call fcn.14016b4f8
cmp dword [0x140273f10], 0xffffffff
jne 0x14013b3e6
lea rcx, [rsp + 0x30]
call fcn.14013a994
mov byte [0x140273f0c], al
lea rcx, [0x140273f10]
call fcn.14016b498
jmp 0x14013b3e6
call fcn.14017266c
nop
call fcn.14017266c
nop
call fcn.14017266c
nop
call fcn.14017266c
int3