Function at 0x402aef
Capabilities:
Create process on windows
Print debug messages

Disassembly:
push ebp
lea ebp, [esp - 0x20a4]
mov eax, 0x2124
call fcn.004124e0
mov eax, dword [0x41b034]
xor eax, ebp
mov dword [ebp + 0x20a0], eax
mov eax, dword [ebp + 0x20ac]
push ebx
push esi
push edi
mov dword [ebp - 0x64], eax
mov eax, dword [ebp + 0x20b0]
mov esi, 0x7ff
xor ebx, ebx
push esi
mov dword [ebp - 0x6c], eax
lea eax, [ebp + 0x17a1]
push ebx
push eax
mov byte [ebp + 0x17a0], bl
call fcn.00406970
push str.zoomlaunch:__win.launch_
lea edi, [esi + 1]
lea eax, [ebp + 0x17a0]
push edi
push eax
call fcn.00406c0d
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 8]
xor ecx, ecx
add esp, 0x18
cmp eax, ebx
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x74], ecx
jle 0x402c48
mov dword [ebp - 0x70], ebx
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 0xc]
cmp ecx, dword [eax + 8]
jge 0x402c31
cmp ecx, ebx
jl 0x402c31
mov eax, dword [eax]
mov ecx, dword [ebp - 0x70]
add eax, ecx
mov dword [ebp - 0x78], eax
sub eax, 0xffffff80
cmp eax, ebx
je 0x402c31
push eax
call fcn.00407660
mov dword [ebp - 0x7c], eax
lea eax, [eax*4 + 1]
push eax
call fcn.00406530
pop ecx
pop ecx
mov dword [ebp - 0x68], eax
cmp eax, ebx
je 0x402c31
mov eax, dword [ebp - 0x7c]
lea eax, [eax*4 + 1]
push eax
push ebx
push dword [ebp - 0x68]
call fcn.00406970
mov edx, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x68]
sub edx, 0xffffff80
call fcn.0040392e
push dword [ebp - 0x78]
lea eax, [ebp + 0x17a0]
push esi
push eax
call fcn.00406c0d
push 0x417ffc
lea eax, [ebp + 0x17a0]
push esi
push eax
call fcn.00406c0d
push dword [ebp - 0x68]
lea eax, [ebp + 0x17a0]
push esi
push eax
call fcn.00406c0d
push 0x418000
lea eax, [ebp + 0x17a0]
push esi
push eax
call fcn.00406c0d
push dword [ebp - 0x68]
call fcn.004069ea
add esp, 0x40
mov ecx, dword [ebp - 0x74]
add dword [ebp - 0x70], 0x480
inc ecx
cmp ecx, dword [ebp - 0x80]
mov dword [ebp - 0x74], ecx
jl 0x402b72
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + 8]
cmp eax, 2
jne 0x402c5a
push str.actionstart
jmp 0x402c7c
cmp eax, 1
jne 0x402c66
push str.actionjoin
jmp 0x402c7c
cmp eax, 4
jne 0x402c72
push str.actionschedule
jmp 0x402c7c
cmp eax, 3
jne 0x402c8c
push str.actionlaunch
lea eax, [ebp + 0x17a0]
push edi
push eax
call fcn.00406c0d
add esp, 0xc
push esi
lea eax, [ebp - 0x5f]
push ebx
push eax
mov byte [ebp - 0x60], bl
call fcn.00406970
mov ecx, dword [ebp - 0x64]
add esp, 0xc
lea eax, [ebp - 0x60]
push eax
call fcn.004027c9
test al, al
jne 0x402cc0
push str._CPluginImpHelper::LaunchPTApp__Error__failed_to_get_install_paht
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
xor eax, eax
inc eax
jmp 0x402e33
push esi
lea eax, [ebp + 0x7a1]
push ebx
push eax
mov byte [ebp + 0x7a0], bl
call fcn.00406970
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp + 0x7a0]
push edi
push eax
call fcn.004073f2
push 0x417e74
lea eax, [ebp + 0x7a0]
push edi
push eax
call fcn.00406c0d
push str.Zoom.exe
lea eax, [ebp + 0x7a0]
push edi
push eax
call fcn.00406c0d
push esi
lea eax, [ebp + 0xfa1]
push ebx
push eax
mov byte [ebp + 0xfa0], bl
call fcn.00406970
lea eax, [ebp + 0x7a0]
push eax
lea eax, [ebp + 0xfa0]
push edi
push eax
call fcn.00406c0d
mov eax, dword [ebp - 0x64]
add esp, 0x48
mov dword [eax + 8], ebx
cmp dword [ebp - 0x6c], ebx
je 0x402d63
push dword [ebp - 0x6c]
call fcn.00407660
pop ecx
test eax, eax
je 0x402d63
push 0x418090
lea eax, [ebp + 0xfa0]
push edi
push eax
call fcn.00406c0d
push dword [ebp - 0x6c]
jmp 0x402d7c
push str.____url
lea eax, [ebp + 0xfa0]
push edi
push eax
call fcn.00406c0d
lea eax, [ebp + 0x17a0]
push eax
lea eax, [ebp + 0xfa0]
push edi
push eax
call fcn.00406c0d
mov esi, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
add esp, 0x18
push str._CPluginImpHelper::LaunchPTApp__To_call_API_ShellExecuteA__program:
call esi
lea eax, [ebp + 0x7a0]
push eax
call esi
push str.cmd_line:
call esi
lea eax, [ebp + 0xfa0]
push eax
call esi
push 1
push ebx
lea eax, [ebp + 0xfa0]
push eax
lea eax, [ebp + 0x7a0]
push eax
push ebx
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp eax, 0x20
jle 0x402ddb
push str._CPluginImpHelper::LaunchPTApp__success_to_lauch_app
call esi
xor eax, eax
jmp 0x402e33
cmp eax, 2
je 0x402e29
cmp eax, 3
je 0x402e29
push 0xff
lea eax, [ebp + 0x1fa1]
push ebx
push eax
mov byte [ebp + 0x1fa0], bl
call fcn.00406970
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp + 0x1fa0]
push str._CPluginImpHelper::LaunchPTApp__failed_to_lauch_app__error:__d
push eax
call fcn.00403ee3
add esp, 0xc
lea eax, [ebp + 0x1fa0]
push eax
call esi
jmp 0x402cb8
push str._CPluginImpHelper::LaunchPTApp__failed__may_be_caused_you_uninstalled_Zoom
call esi
push 2
pop eax
mov ecx, dword [ebp + 0x20a0]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00406486
add ebp, 0x20a4
leave
ret 8