Function at 0x14010c784
Capabilities:
Accept command line arguments

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r14
push r15
lea rbp, [rax - 0x3a8]
sub rsp, 0x490
mov rax, qword [0x140268998]
xor rax, rsp
mov qword [rbp + 0x380], rax
mov rbx, rdx
mov qword [rsp + 0x38], rdx
xor r14d, r14d
mov dword [rsp + 0x34], r14d
mov qword [rdx + 0x10], r14
lea edi, [r14 + 0xf]
mov qword [rdx + 0x18], rdi
mov byte [rdx], r14b
lea rdx, [0x1401ee708]
mov rcx, rbx
call fcn.140054efc
mov dword [rsp + 0x34], 1
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r8d, eax
xor edx, edx
mov ecx, 0x410
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov rsi, rax
test rax, rax
je 0x14010cb05
mov r9d, 0x400
lea r8, [rbp - 0x80]
xor edx, edx
mov rcx, rax
call sub.PSAPI.DLL_GetModuleFileNameExA
test eax, eax
je 0x14010ca71
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], rdi
mov byte [rsp + 0x40], r14b
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x40]
call fcn.140054efc
nop
lea rcx, [0x1401f9f24]
call fcn.140177210
nop
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rcx, qword [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [0x1401f9f24]
or r8, 0xffffffffffffffff
mov rdx, qword [rsp + 0x50]
call fcn.1401024b0
mov r15d, 0x1000
cmp rax, 0xffffffffffffffff
je 0x14010ca37
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], rdi
mov byte [rsp + 0x60], r14b
lea r8, [rax + 1]
or r9, 0xffffffffffffffff
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x60]
call fcn.1400e9f34
mov dword [rsp + 0x34], 3
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14010c8f9
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, r15
jb 0x14010c8f3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14010cb6e
call fcn.14016f250
nop
mov qword [rsp + 0x50], r14
mov qword [rsp + 0x58], rdi
mov byte [rsp + 0x40], r14b
mov r8d, 0x20
lea rdx, [rsp + 0x60]
lea rcx, [rsp + 0x40]
call fcn.140170810
nop
lea rcx, [0x1401eebf0]
call fcn.140177210
nop
lea rcx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rcx, qword [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [0x1401eebf0]
xor r8d, r8d
mov rdx, qword [rsp + 0x50]
call fcn.1400bf3f0
cmp rax, 0xffffffffffffffff
je 0x14010ca37
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], rdi
mov byte [rsp + 0x60], r14b
mov r9, rax
xor r8d, r8d
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x60]
call fcn.1400e9f34
mov dword [rsp + 0x34], 7
lea rax, [rsp + 0x60]
cmp rbx, rax
je 0x14010c9fc
mov rdx, qword [rbx + 0x18]
cmp rdx, 0x10
jb 0x14010c9cc
mov rcx, qword [rbx]
inc rdx
cmp rdx, r15
jb 0x14010c9c6
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14010cb74
mov rcx, r8
call fcn.14016f250
nop
mov qword [rbx + 0x10], r14
mov qword [rbx + 0x18], rdi
mov byte [rbx], r14b
mov r8d, 0x20
lea rdx, [rsp + 0x60]
mov rcx, rbx
call fcn.140170810
nop
mov qword [rsp + 0x70], r14
mov qword [rsp + 0x78], rdi
mov byte [rsp + 0x60], r14b
jmp 0x14010ca01
mov rdi, qword [rsp + 0x78]
cmp rdi, 0x10
jb 0x14010ca37
lea rdx, [rdi + 1]
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, r15
jb 0x14010ca31
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14010cb7a
call fcn.14016f250
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x14010ca71
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, r15
jb 0x14010ca6b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14010cb80
call fcn.14016f250
nop
lea rdx, str.Acrobat
mov rcx, rbx
call fcn.14006ff78
test al, al
jne 0x14010ca97
lea rdx, str.AcroRd32
mov rcx, rbx
call fcn.14006ff78
test al, al
je 0x14010cafc
mov ecx, dword [0x14027ace8]
mov rax, qword gs:[0x58]
mov edx, 0x14
mov rax, qword [rax + rcx*8]
mov ecx, dword [rdx + rax]
cmp dword [0x140279f70], ecx
jg 0x14010cb34
cmp byte [0x140279f6c], r14b
je 0x14010cafc
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
lea rdx, str.__typerenderer
mov rcx, rax
call fcn.140172b60
test rax, rax
jne 0x14010cafc
lea rcx, str.Broker
call fcn.140177210
nop
mov r8, rax
lea rdx, str.Broker
mov rcx, rbx
call fcn.140054d8c
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, rbx
mov rcx, qword [rbp + 0x380]
xor rcx, rsp
call fcn.14016f860
lea r11, [rsp + 0x490]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
lea rcx, [0x140279f70]
call fcn.14016f638
cmp dword [0x140279f70], 0xffffffff
jne 0x14010caba
lea rcx, [rsp + 0x30]
call fcn.14010c068
mov byte [0x140279f6c], al
lea rcx, [0x140279f70]
call fcn.14016f5d8
jmp 0x14010caba
call fcn.1401767ac
nop
call fcn.1401767ac
nop
call fcn.1401767ac
nop
call fcn.1401767ac
int3