Function at 0x4061e4
Capabilities:
Create process on windows

Disassembly:
push ebp
lea ebp, [esp - 0x70]
sub esp, 0xad8
mov eax, dword [0x41b044]
xor eax, ebp
mov dword [ebp + 0x6c], eax
mov eax, dword [ebp + 0x78]
push ebx
push esi
push edi
xor ebx, ebx
push 0x3ff
mov dword [ebp - 0xa68], eax
lea eax, [ebp - 0x853]
mov edi, ecx
push ebx
push eax
mov dword [ebp - 0xa64], edi
mov byte [ebp - 0x854], bl
call fcn.00407320
add esp, 0xc
push str.domain
mov eax, 0x41dddc
call fcn.004033e3
mov esi, 0x400
cmp eax, ebx
je 0x406245
push eax
jmp 0x40624a
push str.https:__ringcentral_officeathand_att.zoom.us
lea eax, [ebp - 0x854]
push esi
push eax
call fcn.004075bd
add esp, 0xc
push str._support_down4j_oswinerr
lea eax, [ebp - 0x854]
push esi
push eax
call fcn.004075bd
push 0x7f
lea eax, [ebp - 0x53]
push ebx
push eax
mov byte [ebp - 0x54], bl
call fcn.00407320
push 0xa
push 0x80
lea eax, [ebp - 0x54]
push eax
push dword [edi + 0x24]
call fcn.00408fb1
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x854]
push esi
push eax
call fcn.004075bd
push 0x4186f8
lea eax, [ebp - 0x854]
push esi
push eax
call fcn.004075bd
add esp, 0x40
lea eax, [ebp - 0xa58]
mov dword [ebp - 0xa5c], ebx
mov dword [ebp - 0xa60], ebx
mov dword [ebp - 0xa58], ebx
push eax
lea ebx, [ebp - 0xa60]
lea edi, [ebp - 0xa5c]
call fcn.00403fe0
xor ebx, ebx
push 0x3f
lea eax, [ebp + 0x2d]
push ebx
push eax
mov byte [ebp + 0x2c], bl
call fcn.00407320
push dword [ebp - 0xa58]
lea eax, [ebp + 0x2c]
push dword [ebp - 0xa60]
push dword [ebp - 0xa5c]
push str._d__d__d
push eax
call fcn.00406df2
lea eax, [ebp + 0x2c]
push eax
lea eax, [ebp - 0x854]
push esi
push eax
call fcn.004075bd
add esp, 0x2c
cmp dword [ebp + 0x7c], 1
jne 0x406349
push 5
mov eax, 0x417cc6
push eax
push eax
lea eax, [ebp - 0x854]
push eax
push str.open
push dword [ebp - 0xa68]
jmp 0x406498
mov ecx, dword [ebp - 0xa64]
mov edx, dword [ecx + 0x4c]
xor esi, esi
cmp edx, ebx
jle 0x40636f
mov eax, dword [ecx + 0x44]
add eax, 0x804
cmp dword [eax], 2
jne 0x40637f
inc esi
add eax, 0x80c
cmp esi, edx
jl 0x406360
push dword [ecx + 0x458]
call fcn.00406ae2
jmp 0x40649e
mov esi, 0x1ff
push esi
lea eax, [ebp - 0x253]
push ebx
push eax
mov byte [ebp - 0x254], bl
call fcn.00407320
push esi
lea eax, [ebp - 0x453]
push ebx
push eax
mov byte [ebp - 0x454], bl
call fcn.00407320
push esi
lea eax, [ebp - 0xa53]
push ebx
push eax
mov byte [ebp - 0xa54], bl
call fcn.00407320
lea eax, [ebp - 0x254]
push eax
push 0x9b
call fcn.004043d5
lea eax, [ebp - 0x454]
push eax
push 0x7d
call fcn.004043d5
lea eax, [ebp - 0xa54]
push eax
push 0x73
call fcn.004043d5
push str.Failed_to_install
lea eax, [ebp - 0x254]
push esi
push eax
call fcn.004075bd
add esp, 0x48
mov edi, 0x418600
push edi
lea eax, [ebp - 0x254]
push esi
push eax
call fcn.004075bd
push str.__please_get_latest
lea eax, [ebp - 0x254]
push esi
push eax
call fcn.004075bd
push edi
lea eax, [ebp - 0x254]
push esi
push eax
call fcn.004075bd
push str._client_from_our_web_site_and_install_it_manually.
lea eax, [ebp - 0x254]
push esi
push eax
call fcn.004075bd
push edi
lea eax, [ebp - 0x454]
push esi
push eax
call fcn.004075bd
lea eax, [ebp - 0xa54]
push eax
lea eax, [ebp - 0x454]
push esi
push eax
call fcn.004075bd
add esp, 0x48
push ebx
lea eax, [ebp - 0x454]
push eax
lea eax, [ebp - 0x254]
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
push 5
mov eax, 0x417cc6
push eax
push eax
lea eax, [ebp - 0x854]
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, dword [ebp + 0x6c]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00406e30
add ebp, 0x70
leave
ret 8