Function at 0x4034d2
Capabilities:
Create process on windows
Print debug messages

Disassembly:
push ebp
lea ebp, [esp - 0x2098]
mov eax, 0x2118
call fcn.00412f50
mov eax, dword [0x41b044]
xor eax, ebp
mov dword [ebp + 0x2094], eax
mov eax, dword [ebp + 0x20a0]
push ebx
push esi
push edi
push 0x7ff
mov dword [ebp - 0x7c], eax
lea eax, [ebp + 0xf95]
mov edi, ecx
push 0
push eax
mov dword [ebp - 0x78], edi
mov byte [ebp + 0xf94], 0
call fcn.00407320
push str.zoomatt
mov esi, 0x800
lea eax, [ebp + 0xf94]
push esi
push eax
call fcn.004075bd
push str.:__win.launch_
lea eax, [ebp + 0xf94]
push esi
push eax
call fcn.004075bd
mov eax, dword [edi + 0xc]
mov ebx, dword [eax + 0x10]
sub ebx, dword [eax + 0xc]
and dword [ebp - 0x70], 0
sar ebx, 2
add esp, 0x24
test ebx, ebx
jle 0x403645
mov eax, dword [edi + 0xc]
mov ecx, dword [eax + 0x10]
sub ecx, dword [eax + 0xc]
mov dword [ebp - 0x74], eax
sar ecx, 2
cmp dword [ebp - 0x70], ecx
jae 0x403639
cmp dword [ebp - 0x70], 0
jl 0x403639
mov edi, dword [ebp - 0x70]
mov esi, eax
call fcn.004026ca
mov eax, dword [eax]
mov dword [ebp - 0x80], eax
call fcn.004026ca
mov esi, dword [eax]
add esi, 0x80
je 0x403631
push esi
call fcn.00407f90
mov dword [ebp - 0x74], eax
lea eax, [eax*4 + 1]
push eax
call fcn.00406eda
mov edi, eax
pop ecx
pop ecx
test edi, edi
je 0x403631
mov eax, dword [ebp - 0x74]
lea eax, [eax*4 + 1]
push eax
push 0
push edi
call fcn.00407320
mov ecx, dword [ebp - 0x74]
mov eax, edi
mov edx, esi
call fcn.00404352
push dword [ebp - 0x80]
mov esi, 0x7ff
lea eax, [ebp + 0xf94]
push esi
push eax
call fcn.004075bd
push 0x418020
lea eax, [ebp + 0xf94]
push esi
push eax
call fcn.004075bd
push edi
lea eax, [ebp + 0xf94]
push esi
push eax
call fcn.004075bd
push 0x418024
lea eax, [ebp + 0xf94]
push esi
push eax
call fcn.004075bd
push edi
call fcn.0040739a
add esp, 0x40
mov edi, dword [ebp - 0x78]
mov esi, 0x800
inc dword [ebp - 0x70]
cmp dword [ebp - 0x70], ebx
jl 0x403560
mov ebx, 0x7ff
push ebx
lea eax, [ebp - 0x6b]
push 0
push eax
mov byte [ebp - 0x6c], 0
call fcn.00407320
add esp, 0xc
lea eax, [ebp - 0x6c]
push eax
mov ecx, edi
call fcn.0040317b
test al, al
jne 0x40367f
push str._CPluginImpHelper::LaunchPTApp__Error__failed_to_get_install_paht
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
xor eax, eax
inc eax
jmp 0x403825
push ebx
lea eax, [ebp + 0x1795]
push 0
push eax
mov byte [ebp + 0x1794], 0
call fcn.00407320
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp + 0x1794]
push esi
push eax
call fcn.00407da2
push 0x417e70
lea eax, [ebp + 0x1794]
push esi
push eax
call fcn.004075bd
add esp, 0x24
mov ebx, str.OfficeAtHandMeetings.exe
lea edi, [ebp - 0x6c]
call fcn.00404668
test eax, eax
lea eax, [ebp + 0x1794]
je 0x4036d5
push ebx
jmp 0x4036da
push str.Zoom.exe
push esi
push eax
call fcn.004075bd
add esp, 0xc
xor ebx, ebx
push 0x7ff
lea eax, [ebp + 0x795]
push ebx
push eax
mov byte [ebp + 0x794], bl
call fcn.00407320
lea eax, [ebp + 0x1794]
push eax
lea eax, [ebp + 0x794]
push esi
push eax
call fcn.004075bd
mov edi, dword [ebp - 0x78]
add esp, 0x18
mov dword [edi + 8], ebx
cmp dword [ebp - 0x7c], ebx
je 0x403744
push dword [ebp - 0x7c]
call fcn.00407f90
pop ecx
test eax, eax
je 0x403744
push 0x418094
lea eax, [ebp + 0x794]
push esi
push eax
call fcn.004075bd
push dword [ebp - 0x7c]
jmp 0x40376e
mov eax, dword [edi + 0xc]
mov ecx, dword [eax + 0x10]
sub ecx, dword [eax + 0xc]
test ecx, 0xfffffffc
jle 0x40377e
push str.____url
lea eax, [ebp + 0x794]
push esi
push eax
call fcn.004075bd
lea eax, [ebp + 0xf94]
push eax
lea eax, [ebp + 0x794]
push esi
push eax
call fcn.004075bd
add esp, 0x18
mov esi, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str._CPluginImpHelper::LaunchPTApp__To_call_API_ShellExecuteA__program:
call esi
lea eax, [ebp + 0x1794]
push eax
call esi
push str.cmd_line:
call esi
lea eax, [ebp + 0x794]
push eax
call esi
push 1
push ebx
lea eax, [ebp + 0x794]
push eax
lea eax, [ebp + 0x1794]
push eax
push ebx
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp eax, 0x20
jle 0x4037cd
push str._CPluginImpHelper::LaunchPTApp__success_to_lauch_app
call esi
xor eax, eax
jmp 0x403825
cmp eax, 2
je 0x40381b
cmp eax, 3
je 0x40381b
push 0xff
lea eax, [ebp + 0x1f95]
push ebx
push eax
mov byte [ebp + 0x1f94], bl
call fcn.00407320
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp + 0x1f94]
push str._CPluginImpHelper::LaunchPTApp__failed_to_lauch_app__error:__d
push eax
call fcn.00404443
add esp, 0xc
lea eax, [ebp + 0x1f94]
push eax
call esi
jmp 0x403677
push str._CPluginImpHelper::LaunchPTApp__failed__may_be_caused_you_uninstalled_the_product.
call esi
push 2
pop eax
mov ecx, dword [ebp + 0x2094]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00406e30
add ebp, 0x2098
leave
ret 4