Function at 0x4016ce
Capabilities:
Accept command line arguments
Check if file exists

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x45c683
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x3704
call fcn.0043fb50
mov eax, dword [0x4809a0]
xor eax, esp
mov dword [esp + 0x3700], eax
push ebx
push esi
push edi
mov eax, dword [0x4809a0]
xor eax, esp
push eax
lea eax, [esp + 0x3718]
mov dword fs:[0], eax
xor edi, edi
push edi
mov dword [esp + 0x3c], ecx
call fcn.0041f9cf
mov dword [esp], 0x4016bd
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
call fcn.0040164e
call fcn.00421435
test eax, eax
jne 0x40176c
push edi
push edi
push str.Unable_to_initialize_OLE._nTerminating_application_
call fcn.0041eac0
xor eax, eax
mov ecx, dword [esp + 0x3718]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x3700]
xor ecx, esp
call fcn.004388b9
mov esp, ebp
pop ebp
ret
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
mov esi, 0x464fb4
push esi
call fcn.00402fb8
call fcn.00414821
pop ecx
call fcn.00416819
cmp eax, edi
je 0x401797
call fcn.00402b34
cmp eax, 1
je 0x401748
call fcn.0041d57f
push eax
lea ecx, [esp + 0x30]
call fcn.00403246
and dword [esp + 0x3720], 0
push ecx
mov ecx, esp
mov dword [esp + 0x2c], esp
push esi
call fcn.00402fb8
push ecx
mov byte [esp + 0x3728], 1
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x465308
call fcn.00402fb8
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x372c], 0
call fcn.00415cf4
add esp, 0xc
push eax
lea ecx, [esp + 0x30]
mov byte [esp + 0x3724], 2
call fcn.00403289
mov byte [esp + 0x3720], 0
mov ecx, dword [esp + 0x10]
add ecx, 0xfffffff0
call fcn.004010ea
push 0
lea ecx, [esp + 0x30]
call fcn.0040339a
push eax
call fcn.004069ea
pop ecx
push 2
pop eax
call fcn.00406d5e
lea ecx, [esp + 0x28]
lea edi, [esp + 0x10]
call fcn.004153d7
mov edi, eax
mov byte [esp + 0x3720], 3
call fcn.00415326
push eax
push dword [edi]
push str.OS_version:__s__Server:_d
call fcn.0040762c
mov byte [esp + 0x372c], 0
mov ecx, dword [esp + 0x1c]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.004010ea
lea eax, [esp + 0x10]
push eax
call fcn.00416efd
pop ecx
mov ecx, dword [esp + 0x10]
add ecx, 0xfffffff0
call fcn.004010ea
call fcn.0041d57f
push eax
lea ecx, [esp + 0x40]
call fcn.00403246
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x3724], 4
call fcn.00416efd
pop ecx
mov byte [esp + 0x3720], 5
push dword [eax]
lea ecx, [esp + 0x28]
call fcn.00402ffc
mov ebx, eax
lea ecx, [esp + 0x28]
lea edi, [esp + 0x10]
mov byte [esp + 0x3720], 6
call fcn.004153d7
mov edi, eax
mov byte [esp + 0x3720], 7
push dword [ebx]
call fcn.00415326
push eax
push dword [edi]
lea eax, [esp + 0x48]
push str.meeting.zoho.com
push dword [esp + 0x3c]
push str.Name:JoinEXE_Version:_s_Build:_s_OS:_s_Server:_d_TimeStamp:_s
push eax
call fcn.0040397a
mov ecx, dword [esp + 0x2c]
add esp, 0x1c
add ecx, 0xfffffff0
call fcn.004010ea
mov ecx, dword [esp + 0x24]
add ecx, 0xfffffff0
call fcn.004010ea
mov byte [esp + 0x3720], 4
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.004010ea
push ecx
lea eax, [esp + 0x40]
mov dword [esp + 0x14], esp
mov ecx, esp
push eax
call fcn.0040326b
call fcn.0040a72e
pop ecx
push dword [0x4852b8]
push str.Logging_Started._Path_:_s
call fcn.0040762c
pop ecx
pop ecx
push 0
lea ecx, [esp + 0x30]
call fcn.0040339a
push eax
push 0x484f68
call fcn.004395cc
pop ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.00402fb8
mov edi, 0x485408
mov ecx, edi
call fcn.0041a4e7
push dword [0x4852bc]
push str.App_dir_:_s
call fcn.0040762c
pop ecx
pop ecx
call fcn.0040125d
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push 0
call fcn.00402fb8
call fcn.00402963
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.Settings.conf
call fcn.00402fb8
push edi
call fcn.0041a275
call fcn.0041a5f2
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.00402fb8
call fcn.0041a589
call fcn.00419feb
mov eax, dword [0x484070]
mov dword [esp + 0x10], eax
call fcn.0041834f
xor eax, eax
inc eax
cmp dword [0x484070], eax
mov dword [esp + 0x1c], eax
jle 0x402072
xor ebx, ebx
inc ebx
mov edi, dword [esp + 0x1c]
mov eax, dword [0x484078]
shl edi, 2
push dword [edi + eax]
push str._cmdlog
call fcn.00439779
test eax, eax
pop ecx
pop ecx
jne 0x401a29
call fcn.0040787a
jmp 0x40205e
mov eax, dword [0x484078]
push dword [edi + eax]
push str._gateway
call fcn.00439779
test eax, eax
pop ecx
pop ecx
jne 0x401a6f
mov eax, dword [0x484070]
cmp eax, dword [esp + 0x1c]
jl 0x40205e
mov eax, dword [0x484078]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [edi + eax + 4]
call fcn.00402fb8
call fcn.00401190
jmp 0x40205e
mov eax, dword [0x484078]
push dword [edi + eax]
push str._gatewayport
call fcn.00439779
test eax, eax
pop ecx
pop ecx
jne 0x401aaf
mov eax, dword [0x484070]
cmp eax, dword [esp + 0x1c]
jl 0x40205e
mov eax, dword [0x484078]
push dword [edi + eax + 4]
call fcn.00438b93
pop ecx
mov dword [0x48542c], eax
jmp 0x40205e
mov eax, dword [0x484078]
push dword [edi + eax]
push 0x4654a4
call fcn.00439779
test eax, eax
pop ecx
pop ecx
jne 0x401ad2
mov dword [0x4853ec], ebx
jmp 0x40205e
mov eax, dword [0x484078]
push dword [edi + eax]
push str._proxyserver
call fcn.00439779
test eax, eax
pop ecx
pop ecx
jne 0x401b17
mov eax, dword [0x484070]
cmp eax, dword [esp + 0x1c]
jl 0x401b08
mov eax, dword [0x484078]
push dword [edi + eax + 4]
mov ecx, 0x4853d0
call fcn.00403547
mov dword [0x4853e0], 3
jmp 0x40205e
mov eax, dword [0x484078]
push dword [edi + eax]
push str._LanguageId
call fcn.00439779
test eax, eax
pop ecx
pop ecx
jne 0x401b53
mov eax, dword [0x484078]
push dword [edi + eax + 4]
call fcn.00438b93
test eax, eax
pop ecx
je 0x401b53
mov esi, eax
call fcn.00402dc2
mov dword [0x485414], eax
mov esi, 0x464fb4
mov eax, dword [0x484078]
push dword [edi + eax]
push str._proxyPac
call fcn.00439779
test eax, eax
pop ecx
pop ecx
jne 0x401b94
mov eax, dword [0x484070]
cmp eax, dword [esp + 0x1c]
jl 0x401b89
mov eax, dword [0x484078]
push dword [edi + eax + 4]
mov ecx, 0x4853e4
call fcn.00403547
mov dword [0x4853e0], ebx
jmp 0x40205e
mov eax, dword [0x484078]
push dword [edi + eax]
push str._proxyport
call fcn.00439779
test eax, eax
pop ecx
pop ecx
jne 0x401bd4
mov eax, dword [0x484070]
cmp eax, dword [esp + 0x1c]
jl 0x40205e
mov eax, dword [0x484078]
push dword [edi + eax + 4]
call fcn.00438b93
pop ecx
mov dword [0x4853d8], eax
jmp 0x40205e
mov eax, dword [0x484078]
push dword [edi + eax]
push str._proxyusername
call fcn.00439779
test eax, eax
pop ecx
pop ecx
jne 0x401c13
mov eax, dword [0x484070]
cmp eax, dword [esp + 0x1c]
jl 0x40205e
mov ecx, 0x4853b0
mov eax, dword [0x484078]
push dword [edi + eax + 4]
call fcn.00403547
jmp 0x40205e
mov eax, dword [0x484078]
push dword [edi + eax]
push str._proxypassword
call fcn.00439779
test eax, eax
pop ecx
pop ecx
jne 0x401c41
mov eax, dword [0x484070]
cmp eax, dword [esp + 0x1c]
jl 0x40205e
mov ecx, 0x4853b4
jmp 0x401c00
mov eax, dword [0x484078]
push dword [edi + eax]
push str._InstallCustomerPlugin
call fcn.00439779
test eax, eax
pop ecx
pop ecx
je 0x402057
mov eax, dword [0x484078]
push dword [edi + eax]
push str._ICP
call fcn.00439779
test eax, eax
pop ecx
pop ecx
je 0x402057
mov eax, dword [0x484078]
push dword [edi + eax]
push 0x465588
call fcn.00439779
test eax, eax
pop ecx
pop ecx
je 0x402043
mov eax, dword [0x484078]
push dword [edi + eax]
push str._viewer
call fcn.00439779
test eax, eax
pop ecx
pop ecx
je 0x402043
mov eax, dword [0x484078]
push dword [edi + eax]
push 0x4655a0
call fcn.00439779
test eax, eax
pop ecx
pop ecx
je 0x40202f
mov eax, dword [0x484078]
push dword [edi + eax]
push str._agent
call fcn.00439779
test eax, eax
pop ecx
pop ecx
je 0x40202f
mov eax, dword [0x484078]
push dword [edi + eax]
push str._CAK
call fcn.00439779
test eax, eax
pop ecx
pop ecx
jne 0x401d52
mov eax, dword [0x484070]
cmp eax, dword [esp + 0x1c]
jl 0x40205e
mov eax, dword [0x484078]
push dword [edi + eax + 4]
lea ecx, [esp + 0x28]
call fcn.00402fb8
lea eax, [esp + 0x24]
push eax
mov ecx, 0x485538
mov byte [esp + 0x3724], 8
call fcn.00403289
mov byte [esp + 0x3720], 4
mov ecx, dword [esp + 0x24]
add ecx, 0xfffffff0
call fcn.004010ea
jmp 0x40205e
mov eax, dword [0x484078]
push dword [edi + eax]
push str._UNC
call fcn.00439779
test eax, eax
pop ecx
pop ecx
jne 0x401d75
mov dword [0x4852d8], ebx
jmp 0x40205e
mov eax, dword [0x484078]
push dword [edi + eax]
push str._dir
call fcn.00439779
test eax, eax
pop ecx
pop ecx
jne 0x401e13
push esi
lea ecx, [esp + 0x24]
call fcn.00402fb8
mov eax, dword [esp + 0x1c]
mov byte [esp + 0x3720], 9
cmp dword [0x484070], eax
jl 0x401dc1
mov eax, dword [0x484078]
push dword [edi + eax + 4]
lea ecx, [esp + 0x24]
call fcn.00403547
push dword [esp + 0x20]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x401de2
push ecx
lea eax, [esp + 0x24]
mov dword [esp + 0x18], esp
mov ecx, esp
push eax
call fcn.0040326b
jmp 0x401dfd
push dword [esp + 0x20]
push str.Dir_path_is_invalid.
call fcn.004076c2
pop ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.00402fb8
call fcn.00402963
mov byte [esp + 0x3720], 4
mov ecx, dword [esp + 0x20]
jmp 0x401d45
mov eax, dword [0x484078]
push dword [edi + eax]
push str._UPDATE
call fcn.00439779
test eax, eax
pop ecx
pop ecx
je 0x402190
mov eax, dword [0x484078]
push dword [edi + eax]
push str._UpdateDS
call fcn.00439779
test eax, eax
pop ecx
pop ecx
jne 0x401ebb
call fcn.00414df5
test eax, eax
je 0x4021f2
push str.Updating...__UpdateDS
call fcn.004076c2
pop ecx
lea edi, [esp + 0x34]
mov dword [0x4852ac], ebx
call fcn.00414b93
push 0
mov ecx, edi
mov byte [esp + 0x3724], 0xb
call fcn.0040339a
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
mov edi, dword [esp + 0x34]
push edi
push str.Updating...__UpdateDS_:_s
call fcn.004076c2
pop ecx
lea eax, [esp + 0x38]
mov dword [esp + 0x18], esp
mov ecx, esp
push eax
call fcn.0040326b
call fcn.00402963
mov byte [esp + 0x3720], 4
lea ecx, [edi - 0x10]
jmp 0x401d48
mov eax, dword [0x484078]
push dword [edi + eax]
push str._UpdateURS
call fcn.00439779
test eax, eax
pop ecx
pop ecx
jne 0x401f07
call fcn.00414df5
test eax, eax
je 0x402204
push str.Updating...__UpdateDS
call fcn.004076c2
mov ecx, esp
mov dword [esp + 0x18], esp
push 0
mov dword [0x4852b0], ebx
call fcn.00402fb8
call fcn.00402963
jmp 0x40205e
mov eax, dword [0x484078]
push dword [edi + eax]
push str._UnInstallURS
call fcn.00439779
test eax, eax
pop ecx
pop ecx
je 0x40221a
mov eax, dword [0x484078]
push dword [edi + eax]
push str._URS_SERVICE_INSTALL
call fcn.00439779
test eax, eax
pop ecx
pop ecx
je 0x401ff9
cmp dword [0x48552c], ebx
je 0x401ff9
mov eax, dword [0x484078]
push dword [edi + eax]
push 0x4657e0
call fcn.00439779
test eax, eax
pop ecx
pop ecx
je 0x40228a
mov eax, dword [0x484078]
push dword [edi + eax]
push str._auth
call fcn.00439779
test eax, eax
pop ecx
pop ecx
jne 0x401fd9
push esi
lea ecx, [esp + 0x1c]
call fcn.00402fb8
mov eax, dword [esp + 0x1c]
mov byte [esp + 0x3720], 0x13
cmp dword [0x484070], eax
jl 0x401fc5
mov eax, dword [0x484078]
push dword [edi + eax + 4]
lea ecx, [esp + 0x1c]
call fcn.00403547
push ecx
lea eax, [esp + 0x1c]
mov dword [esp + 0x18], esp
mov ecx, esp
push eax
call fcn.0040326b
call fcn.0041a516
mov byte [esp + 0x3720], 4
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.004010ea
mov eax, dword [0x484078]
push dword [edi + eax]
push str._URS
call fcn.00439779
test eax, eax
pop ecx
pop ecx
jne 0x40205e
mov dword [0x48552c], ebx
jmp 0x40205e
push esi
lea ecx, [esp + 0x2c]
call fcn.00402fb8
mov byte [esp + 0x3720], 0xd
mov dword [0x4852a8], ebx
call fcn.00414df5
test eax, eax
je 0x40235d
mov byte [esp + 0x3720], 4
mov ecx, dword [esp + 0x28]
jmp 0x401d45
mov eax, dword [0x484070]
cmp eax, dword [esp + 0x1c]
jl 0x40205e
mov byte [0x485420], 1
jmp 0x40205e
mov eax, dword [0x484070]
cmp eax, dword [esp + 0x1c]
jl 0x40205e
mov byte [0x485420], 0
jmp 0x40205e
mov byte [0x485427], 1
inc dword [esp + 0x1c]
mov eax, dword [esp + 0x1c]
cmp eax, dword [0x484070]
jl 0x401a00
call fcn.00402f70
test al, al
jne 0x402086
push str.ZohoTray_:_Problem_with_setting_Resource_Olnly_DLL
call fcn.0040762c
pop ecx
call fcn.00414da8
test eax, eax
mov dword [0x484f60], eax
mov edi, str.join.exe
jne 0x402104
mov ebx, dword [0x485414]
lea eax, [esp + 0x24]
push 0x234a
push eax
call fcn.00416cba
pop ecx
pop ecx
push 0
mov byte [esp + 0x3724], 0x14
mov eax, dword [eax]
push 4
push eax
call fcn.0041eac0
mov byte [esp + 0x3720], 4
mov ecx, dword [esp + 0x24]
add ecx, 0xfffffff0
mov ebx, eax
call fcn.004010ea
cmp ebx, 6
jne 0x4023f9
push str.Some_other_instance_running._Terminating_them_and_starting_our_process
call fcn.0040762c
pop ecx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push edi
call fcn.00402fb8
call fcn.00414fb4
pop ecx
pop ecx
lea eax, [esp + 0x53c]
push eax
call fcn.004081f2
mov byte [esp + 0x3720], 0x15
call fcn.00409f26
lea eax, [esp + 0x30]
push eax
xor ecx, ecx
call fcn.00414f56
pop ecx
mov byte [esp + 0x3720], 0x16
push dword [esp + 0x10]
push dword [esp + 0x34]
push str.CommandLineArgs_:__s_arglen:_d
call fcn.0040762c
pop ecx
pop ecx
lea eax, [esp + 0x34]
mov dword [esp + 0x18], esp
mov ecx, esp
push eax
call fcn.0040326b
push dword [esp + 0x14]
call fcn.00402c1a
xor ebx, ebx
inc ebx
cmp eax, ebx
jne 0x402408
push str.Exe_launched
call fcn.0040762c
pop ecx
mov ecx, dword [esp + 0x30]
add ecx, 0xfffffff0
call fcn.004010ea
lea esi, [esp + 0x53c]
call fcn.004082fb
jmp 0x4021d1
lea edi, [esp + 0x18]
call fcn.00414b93
push 0
mov ecx, edi
mov byte [esp + 0x3724], 0xa
call fcn.0040339a
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
push ecx
mov eax, edi
mov dword [esp + 0x18], esp
mov ecx, esp
push eax
call fcn.0040326b
call fcn.00402963
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.004010ea
mov esi, ebx
mov ecx, dword [esp + 0x3c]
add ecx, 0xfffffff0
call fcn.004010ea
mov ecx, dword [esp + 0x2c]
add ecx, 0xfffffff0
call fcn.004010ea
mov eax, esi
jmp 0x401748
push 0
push 0
push str.Automatic_update_has_failed_
call fcn.0041eac0
xor esi, esi
jmp 0x4021d3
call fcn.00402b34
mov esi, eax
push esi
push str.Applcation_restarted_as_UAC_elevated_process:_d
call fcn.004076c2
pop ecx
pop ecx
jmp 0x402200
call fcn.00414df5
test eax, eax
je 0x402204
push str.uninstalling_urs
call fcn.004076c2
pop ecx
lea eax, [esp + 0x10]
push eax
call fcn.0041b2e0
mov byte [esp + 0x3720], 0xc
call fcn.0041b866
push str.Uninstalling_service_and_quitting_tray
call fcn.004076c2
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Zoho_Assist_Unattended_Support
call fcn.00402fb8
push 0x85
call fcn.00415a65
pop ecx
pop ecx
push 0
push 0
push str.The_Unattended_Agent_is_now_removed.
call fcn.0041eac0
mov ecx, dword [esp + 0x10]
add ecx, 0xfffffff0
call fcn.004010ea
jmp 0x402200
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push esi
lea ecx, [esp + 0x24]
call fcn.00402fb8
mov eax, dword [esp + 0x1c]
mov byte [esp + 0x3720], 0x11
cmp dword [0x484070], eax
jl 0x4022c6
mov ecx, dword [0x484078]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x24]
call fcn.00403547
push dword [esp + 0x20]
and dword [esp + 0x28], 0
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x402344
push 0x104
lea eax, [esp + 0x3508]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [esp + 0x24]
push eax
push ecx
lea eax, [esp + 0x350c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00402fb8
push ecx
mov byte [esp + 0x372c], 0x12
lea eax, [esp + 0x2c]
mov dword [esp + 0x44], esp
mov ecx, esp
push eax
call fcn.0040326b
mov byte [esp + 0x372c], 0x11
call fcn.00414af2
add esp, 0xc
push eax
push dword [esp + 0x28]
push str.Exe_updated:er:_d_:_res___d
call fcn.004076c2
add esp, 0xc
jmp 0x402354
push dword [esp + 0x20]
push str.invalid_path_file:_s
call fcn.004076c2
pop ecx
pop ecx
mov ecx, dword [esp + 0x20]
jmp 0x4021c9
push 0x104
lea eax, [esp + 0x3508]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push ebx
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x18]
push eax
mov ecx, ebx
call fcn.00414f56
pop ecx
push 0
mov ecx, eax
mov byte [esp + 0x372c], 0xe
call fcn.0040339a
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.00402fb8
push ecx
mov byte [esp + 0x3730], 0xf
mov ecx, esp
mov dword [esp + 0x48], esp
push esi
call fcn.00402fb8
push ecx
mov byte [esp + 0x3734], 0x10
lea eax, [esp + 0x3518]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.00402fb8
mov byte [esp + 0x3734], 0xe
call fcn.00414e97
mov ecx, dword [esp + 0x24]
add esp, 0x14
add ecx, 0xfffffff0
call fcn.004010ea
mov ecx, dword [esp + 0x28]
jmp 0x4021c9
push str.Another_instance_running._User_chose_to_quit_application
call fcn.0040762c
jmp 0x402217
cmp dword [0x4853ec], ebx
jne 0x402574
call fcn.0041d57f
push eax
lea ecx, [esp + 0x24]
call fcn.00403246
lea eax, [esp + 0x10]
push eax
mov byte [esp + 0x3724], 0x17
call fcn.00401174
mov byte [esp + 0x3720], 0x18
movzx ecx, byte [0x485420]
push ecx
push dword [eax]
lea eax, [esp + 0x28]
push str.Join_Start_k_s_Role_d_UpdateTypeSilent
push eax
call fcn.0040397a
mov byte [esp + 0x3730], 0x17
mov ecx, dword [esp + 0x20]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004010ea
push ecx
lea eax, [esp + 0x24]
mov dword [esp + 0x18], esp
mov ecx, esp
push eax
call fcn.0040326b
lea ecx, [esp + 0x540]
call fcn.004095cb
cmp eax, 7
je 0x4024ca
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.meeting.zoho.com
call fcn.00402fb8
lea eax, [esp + 0x540]
push eax
call fcn.0040acfa
push ecx
lea eax, [esp + 0x24]
mov dword [esp + 0x18], esp
mov ecx, esp
push eax
call fcn.0040326b
lea ecx, [esp + 0x540]
call fcn.004095cb
call fcn.0041d57f
push eax
lea ecx, [esp + 0x1c]
call fcn.00403246
push ecx
mov byte [esp + 0x3724], 0x19
mov eax, esp
mov dword [esp + 0x18], esp
push eax
call fcn.00401174
mov edi, 0x485290
push edi
call fcn.00404e59
test eax, eax
je 0x402519
lea eax, [esp + 0x18]
push eax
xor ecx, ecx
call fcn.00405838
push dword [esp + 0x18]
push str.Silent_Update_:__s
call fcn.0040762c
pop ecx
pop ecx
push ebx
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.UpTypeSilent
call fcn.00402fb8
mov byte [esp + 0x3728], 0x1a
movzx eax, byte [0x485420]
push eax
push ecx
mov eax, esp
mov dword [esp + 0x48], esp
push eax
call fcn.00401174
mov ecx, edi
mov byte [esp + 0x3730], 0x19
call fcn.00404432
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.004010ea
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.004010ea
jmp 0x402176
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
lea ecx, [esp + 0x4c]
call fcn.00402fb8
push esi
lea ecx, [esp + 0x44]
mov byte [esp + 0x3724], 0x1b
call fcn.00402fb8
mov byte [esp + 0x3720], 0x1c
call fcn.0041d57f
push eax
lea ecx, [esp + 0x28]
call fcn.00403246
mov byte [esp + 0x3720], 0x1d
cmp dword [0x4857c4], 0
je 0x4026a8
push str.Preparing_for_first_time_installation
call fcn.004076c2
pop ecx
call fcn.0041d57f
push eax
lea ecx, [esp + 0x1c]
call fcn.00403246
lea esi, [esp + 0x10]
mov byte [esp + 0x3720], 0x1e
call fcn.00414a07
push edi
mov byte [esp + 0x3724], 0x1f
push dword [eax]
lea eax, [esp + 0x20]
push 0x4651c4
push eax
call fcn.0040397a
mov byte [esp + 0x3730], 0x1e
mov ecx, dword [esp + 0x20]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.004010ea
push 0x104
lea eax, [esp + 0x3508]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
or dword [esp + 0x10], 0xffffffff
lea eax, [esp + 0x10]
push eax
push ecx
lea eax, [esp + 0x350c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00402fb8
push ecx
mov byte [esp + 0x372c], 0x20
lea eax, [esp + 0x24]
mov dword [esp + 0x40], esp
mov ecx, esp
push eax
call fcn.0040326b
mov byte [esp + 0x372c], 0x1e
call fcn.00414af2
add esp, 0xc
push dword [esp + 0x10]
push str.Join_exe_copied_Exe_copied:_d
call fcn.004076c2
pop ecx
pop ecx
call fcn.0040139f
mov byte [esp + 0x3720], 0x1d
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.004010ea
mov esi, 0x464fb4
mov edi, dword [esp + 0x24]
cmp dword [edi - 0xc], 5
jle 0x4026c8
push ecx
lea eax, [esp + 0x28]
mov dword [esp + 0x18], esp
mov ecx, esp
push eax
call fcn.0040326b
call fcn.0041a589
push esi
lea ecx, [esp + 0x48]
call fcn.00402fb8
push str.After_GetConnection
mov byte [esp + 0x3724], 0x21
call fcn.0040762c
pop ecx
lea ebx, [esp + 0x4c]
call fcn.0040c305
mov byte [esp + 0x3720], 0x22
mov ecx, dword [esp + 0x38]
mov eax, ebx
mov dword [ecx + 0x20], eax
mov ecx, ebx
call fcn.00420f72
push str.Done
call fcn.004076c2
pop ecx
mov eax, ebx
push eax
mov byte [esp + 0x3724], 0x21
call fcn.0040c471
mov ecx, dword [esp + 0x44]
add ecx, 0xfffffff0
call fcn.004010ea
lea ecx, [edi - 0x10]
call fcn.004010ea
mov ecx, dword [esp + 0x40]
add ecx, 0xfffffff0
call fcn.004010ea
mov ecx, dword [esp + 0x48]
add ecx, 0xfffffff0
call fcn.004010ea
mov ecx, dword [esp + 0x30]
add ecx, 0xfffffff0
call fcn.004010ea
lea esi, [esp + 0x53c]
call fcn.004082fb
jmp 0x402200