Function at 0x40344e
Capabilities:
Create process on windows
Print debug messages

Disassembly:
push ebp
lea ebp, [esp - 0x2098]
mov eax, 0x2118
call fcn.00412d00
mov eax, dword [0x41b044]
xor eax, ebp
mov dword [ebp + 0x2094], eax
mov eax, dword [ebp + 0x20a0]
push ebx
push esi
push edi
push 0x7ff
mov dword [ebp - 0x7c], eax
lea eax, [ebp + 0xf95]
mov edi, ecx
push 0
push eax
mov dword [ebp - 0x78], edi
mov byte [ebp + 0xf94], 0
call fcn.004070d0
push str.zoomrc
mov esi, 0x800
lea eax, [ebp + 0xf94]
push esi
push eax
call fcn.0040736d
push str.:__win.launch_
lea eax, [ebp + 0xf94]
push esi
push eax
call fcn.0040736d
mov eax, dword [edi + 0xc]
mov ebx, dword [eax + 0x10]
sub ebx, dword [eax + 0xc]
and dword [ebp - 0x70], 0
sar ebx, 2
add esp, 0x24
test ebx, ebx
jle 0x4035c1
mov eax, dword [edi + 0xc]
mov ecx, dword [eax + 0x10]
sub ecx, dword [eax + 0xc]
mov dword [ebp - 0x74], eax
sar ecx, 2
cmp dword [ebp - 0x70], ecx
jae 0x4035b5
cmp dword [ebp - 0x70], 0
jl 0x4035b5
mov edi, dword [ebp - 0x70]
mov esi, eax
call fcn.0040263d
mov eax, dword [eax]
mov dword [ebp - 0x80], eax
call fcn.0040263d
mov esi, dword [eax]
add esi, 0x80
je 0x4035ad
push esi
call fcn.00407d40
mov dword [ebp - 0x74], eax
lea eax, [eax*4 + 1]
push eax
call fcn.00406c89
mov edi, eax
pop ecx
pop ecx
test edi, edi
je 0x4035ad
mov eax, dword [ebp - 0x74]
lea eax, [eax*4 + 1]
push eax
push 0
push edi
call fcn.004070d0
mov ecx, dword [ebp - 0x74]
mov eax, edi
mov edx, esi
call fcn.004042ce
push dword [ebp - 0x80]
mov esi, 0x7ff
lea eax, [ebp + 0xf94]
push esi
push eax
call fcn.0040736d
push 0x418028
lea eax, [ebp + 0xf94]
push esi
push eax
call fcn.0040736d
push edi
lea eax, [ebp + 0xf94]
push esi
push eax
call fcn.0040736d
push 0x41802c
lea eax, [ebp + 0xf94]
push esi
push eax
call fcn.0040736d
push edi
call fcn.0040714a
add esp, 0x40
mov edi, dword [ebp - 0x78]
mov esi, 0x800
inc dword [ebp - 0x70]
cmp dword [ebp - 0x70], ebx
jl 0x4034dc
mov ebx, 0x7ff
push ebx
lea eax, [ebp - 0x6b]
push 0
push eax
mov byte [ebp - 0x6c], 0
call fcn.004070d0
add esp, 0xc
lea eax, [ebp - 0x6c]
push eax
mov ecx, edi
call fcn.004030f7
test al, al
jne 0x4035fb
push str._CPluginImpHelper::LaunchPTApp__Error__failed_to_get_install_paht
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
xor eax, eax
inc eax
jmp 0x4037a1
push ebx
lea eax, [ebp + 0x1795]
push 0
push eax
mov byte [ebp + 0x1794], 0
call fcn.004070d0
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp + 0x1794]
push esi
push eax
call fcn.00407b52
push 0x417e70
lea eax, [ebp + 0x1794]
push esi
push eax
call fcn.0040736d
add esp, 0x24
mov ebx, str.RingCentralMeetings.exe
lea edi, [ebp - 0x6c]
call fcn.0040461c
test eax, eax
lea eax, [ebp + 0x1794]
je 0x403651
push ebx
jmp 0x403656
push str.Zoom.exe
push esi
push eax
call fcn.0040736d
add esp, 0xc
xor ebx, ebx
push 0x7ff
lea eax, [ebp + 0x795]
push ebx
push eax
mov byte [ebp + 0x794], bl
call fcn.004070d0
lea eax, [ebp + 0x1794]
push eax
lea eax, [ebp + 0x794]
push esi
push eax
call fcn.0040736d
mov edi, dword [ebp - 0x78]
add esp, 0x18
mov dword [edi + 8], ebx
cmp dword [ebp - 0x7c], ebx
je 0x4036c0
push dword [ebp - 0x7c]
call fcn.00407d40
pop ecx
test eax, eax
je 0x4036c0
push 0x418098
lea eax, [ebp + 0x794]
push esi
push eax
call fcn.0040736d
push dword [ebp - 0x7c]
jmp 0x4036ea
mov eax, dword [edi + 0xc]
mov ecx, dword [eax + 0x10]
sub ecx, dword [eax + 0xc]
test ecx, 0xfffffffc
jle 0x4036fa
push str.____url
lea eax, [ebp + 0x794]
push esi
push eax
call fcn.0040736d
lea eax, [ebp + 0xf94]
push eax
lea eax, [ebp + 0x794]
push esi
push eax
call fcn.0040736d
add esp, 0x18
mov esi, dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
push str._CPluginImpHelper::LaunchPTApp__To_call_API_ShellExecuteA__program:
call esi
lea eax, [ebp + 0x1794]
push eax
call esi
push str.cmd_line:
call esi
lea eax, [ebp + 0x794]
push eax
call esi
push 1
push ebx
lea eax, [ebp + 0x794]
push eax
lea eax, [ebp + 0x1794]
push eax
push ebx
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp eax, 0x20
jle 0x403749
push str._CPluginImpHelper::LaunchPTApp__success_to_lauch_app
call esi
xor eax, eax
jmp 0x4037a1
cmp eax, 2
je 0x403797
cmp eax, 3
je 0x403797
push 0xff
lea eax, [ebp + 0x1f95]
push ebx
push eax
mov byte [ebp + 0x1f94], bl
call fcn.004070d0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp + 0x1f94]
push str._CPluginImpHelper::LaunchPTApp__failed_to_lauch_app__error:__d
push eax
call fcn.004043f7
add esp, 0xc
lea eax, [ebp + 0x1f94]
push eax
call esi
jmp 0x4035f3
push str._CPluginImpHelper::LaunchPTApp__failed__may_be_caused_you_uninstalled_the_product.
call esi
push 2
pop eax
mov ecx, dword [ebp + 0x2094]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00406bdf
add ebp, 0x2098
leave
ret 4