Function at 0x1400364ec
Capabilities:
Accept command line arguments

Disassembly:
mov rax, rsp
push r15
sub rsp, 0x1b0
mov qword [rsp + 0x78], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x14007edf8]
xor rax, rsp
mov qword [rsp + 0x1a0], rax
mov rbx, r8
mov dword [rsp + 0x40], 0x42
xor esi, esi
mov byte [rsp + 0x44], sil
mov dword [rsp + 0x48], 2
xor edx, edx
lea rcx, [rsp + 0x40]
call fcn.1400339f0
nop
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x80], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0x90], xmm1
movdqa xmmword [rsp + 0xa0], xmm0
mov qword [rsp + 0xb0], rsi
lea rax, str.Office
mov qword [rsp + 0xb8], rax
mov dword [rsp + 0xc0], esi
mov dword [rsp + 0xc4], 2
lea ecx, [rsi + 0x25]
mov dword [rsp + 0xc8], ecx
call sub.Mso20Win32Client.dll_Ordinal_457
lea edx, [rsi + 4]
lea rcx, [rsp + 0x80]
call sub.mso40uiWin32Client.dll_Ordinal_2954
lea rdx, [0x1400b8710]
mov rcx, rbx
call fcn.140051fb8
or rdi, 0xffffffffffffffff
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x34], esi
cmp word [rbx], si
jne 0x1400365f9
mov qword [rsp + 0x50], rsi
lea edx, [rsi + 4]
lea rcx, [rsp + 0x50]
call sub.mso40uiWin32Client.dll_Ordinal_1973
nop
cmp byte [rsp + 0x44], sil
je 0x1400365ef
call qword [sym.imp.ole32.dll_CoUninitialize]
mov eax, 1
jmp 0x14003690e
lea rdx, [rsp + 0x34]
mov rcx, rbx
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
mov rbx, rax
mov rdx, qword [rax]
mov qword [rsp + 0xe0], rsi
mov qword [rsp + 0xe8], rsi
mov r15d, 7
mov qword [rsp + 0xe8], r15
mov qword [rsp + 0xe0], rsi
mov word [rsp + 0xd0], si
cmp word [rdx], si
jne 0x140036645
mov rdi, rsi
jmp 0x14003664e
inc rdi
cmp word [rdx + rdi*2], si
jne 0x140036645
mov r8, rdi
lea rcx, [rsp + 0xd0]
call fcn.14000528c
nop
lea rcx, [rsp + 0xd0]
call fcn.140033b84
mov edi, eax
mov rdx, qword [rsp + 0xe8]
cmp rdx, 8
jb 0x14003668c
inc rdx
mov rcx, qword [rsp + 0xd0]
call fcn.140003198
mov qword [rsp + 0xe8], r15
mov qword [rsp + 0xe0], rsi
mov word [rsp + 0xd0], si
cmp edi, 9
ja 0x14003677b
je 0x14003676a
mov eax, edi
sub eax, 1
je 0x140036759
sub eax, 1
je 0x140036748
sub eax, 1
je 0x140036737
sub eax, 1
je 0x140036726
sub eax, 1
je 0x14003671c
sub eax, 1
je 0x14003670b
sub eax, 1
je 0x1400366fa
cmp eax, 1
jne 0x1400367a0
mov edx, dword [rsp + 0x34]
mov rcx, rbx
call fcn.14002db40
jmp 0x14003680a
mov edx, dword [rsp + 0x34]
mov rcx, rbx
call fcn.14002e1a0
jmp 0x14003680a
mov edx, dword [rsp + 0x34]
mov rcx, rbx
call fcn.14002cf04
jmp 0x14003680a
call fcn.140030418
jmp 0x14003680a
mov edx, dword [rsp + 0x34]
mov rcx, rbx
call fcn.14002ebc0
jmp 0x14003680a
mov edx, dword [rsp + 0x34]
mov rcx, rbx
call fcn.14003137c
jmp 0x14003680a
mov edx, dword [rsp + 0x34]
mov rcx, rbx
call fcn.14002f344
jmp 0x14003680a
mov edx, dword [rsp + 0x34]
mov rcx, rbx
call fcn.140031c98
jmp 0x14003680a
mov edx, dword [rsp + 0x34]
mov rcx, rbx
call fcn.14002ca94
jmp 0x14003680a
mov eax, edi
sub eax, 0xa
je 0x1400367fe
sub eax, 1
je 0x1400367f0
sub eax, 1
je 0x1400367e2
sub eax, 1
je 0x1400367d4
sub eax, 1
je 0x1400367c6
sub eax, 1
je 0x1400367b8
cmp eax, 1
je 0x1400367aa
mov dword [rsp + 0x30], 2
jmp 0x14003680e
mov edx, dword [rsp + 0x34]
mov rcx, rbx
call fcn.140030be8
jmp 0x14003680a
mov edx, dword [rsp + 0x34]
mov rcx, rbx
call fcn.14002f828
jmp 0x14003680a
mov edx, dword [rsp + 0x34]
mov rcx, rbx
call fcn.14002d96c
jmp 0x14003680a
mov edx, dword [rsp + 0x34]
mov rcx, rbx
call fcn.14002ccc8
jmp 0x14003680a
mov edx, dword [rsp + 0x34]
mov rcx, rbx
call fcn.140032d58
jmp 0x14003680a
mov edx, dword [rsp + 0x34]
mov rcx, rbx
call fcn.140032450
jmp 0x14003680a
mov edx, dword [rsp + 0x34]
mov rcx, rbx
call fcn.1400328d8
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x38], edi
lea r9, [rsp + 0x30]
lea r8, [rsp + 0x38]
lea rdx, str.ClientExe_complete._Action:_d_Result:_d
lea rcx, [rsp + 0xf0]
call fcn.14001a2a4
mov rdi, rax
cmp qword [rax + 0x18], 8
jb 0x14003683d
mov rdi, qword [rax]
lea rcx, [rsp + 0x110]
call fcn.140050f3c
nop
lea rcx, vtable.Mso::Logging::StructuredObject_wchar_t_const____ptr64__1_.0
mov qword [rsp + 0x60], rcx
lea rcx, str.ContextData
mov qword [rsp + 0x68], rcx
mov qword [rsp + 0x70], rdi
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
lea r9, str.::wWinMain
mov edx, 0x3b0
mov ecx, 0x645100
mov r8d, 0x32
call fcn.140017408
nop
lea rcx, [rsp + 0x110]
call fcn.14000da2c
nop
mov rdx, qword [rsp + 0x108]
cmp rdx, 8
jb 0x1400368c0
inc rdx
mov rcx, qword [rsp + 0xf0]
call fcn.140003198
mov qword [rsp + 0x108], r15
mov qword [rsp + 0x100], rsi
mov word [rsp + 0xf0], si
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov qword [rsp + 0x58], rsi
mov edx, 4
lea rcx, [rsp + 0x58]
call sub.mso40uiWin32Client.dll_Ordinal_1973
nop
cmp byte [rsp + 0x44], sil
je 0x140036903
call qword [sym.imp.ole32.dll_CoUninitialize]
mov eax, dword [rsp + 0x30]
jmp 0x14003690e
mov rcx, qword [rsp + 0x1a0]
xor rcx, rsp
call fcn.14003a6d0
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop r15
ret