Function at 0x401733
Capabilities:
Accept command line arguments
Check if file exists

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x45ed9d
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x3b14
call fcn.00441ba0
mov eax, dword [0x4849a0]
xor eax, esp
mov dword [esp + 0x3b10], eax
push ebx
push esi
push edi
mov eax, dword [0x4849a0]
xor eax, esp
push eax
lea eax, [esp + 0x3b28]
mov dword fs:[0], eax
xor ebx, ebx
push ebx
mov dword [esp + 0x30], ecx
call fcn.004213b5
mov dword [esp], 0x401722
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
call fcn.004016b3
call fcn.00422e3b
test eax, eax
jne 0x4017d1
push ebx
push ebx
push str.Unable_to_initialize_OLE._nTerminating_application_
call fcn.004204bd
xor eax, eax
mov ecx, dword [esp + 0x3b28]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x3b10]
xor ecx, esp
call fcn.0043a2d7
mov esp, ebp
pop ebp
ret
push ecx
mov ecx, esp
mov dword [esp + 0x34], esp
mov esi, 0x467314
push esi
call fcn.00403310
call fcn.00416881
pop ecx
mov dword [esp + 0x34], ebx
call fcn.00418961
cmp eax, ebx
je 0x401804
call fcn.00402e8c
cmp eax, 1
mov dword [esp + 0x34], eax
je 0x4017ad
call fcn.0041ef9c
push eax
lea ecx, [esp + 0x40]
call fcn.00406449
push ecx
mov dword [esp + 0x3b34], ebx
mov ecx, esp
mov dword [esp + 0x34], esp
push esi
call fcn.00403310
push ecx
mov byte [esp + 0x3b38], 1
mov ecx, esp
mov dword [esp + 0x2c], esp
push 0x467688
call fcn.00403310
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x3b3c], bl
call fcn.00417d54
add esp, 0xc
push eax
lea ecx, [esp + 0x40]
mov byte [esp + 0x3b34], 2
call fcn.004035bc
mov byte [esp + 0x3b30], bl
mov ecx, dword [esp + 0x10]
add ecx, 0xfffffff0
call fcn.00401109
push ebx
lea ecx, [esp + 0x40]
call fcn.004036cd
push eax
call fcn.00408bce
pop ecx
push 2
pop eax
call fcn.00408f74
lea ecx, [esp + 0x30]
lea edi, [esp + 0x10]
call fcn.00417437
mov edi, eax
mov byte [esp + 0x3b30], 3
push dword [esp + 0x34]
call fcn.00417386
push eax
push dword [edi]
push str.OS_version:__s__Server:_d__UAC:_d
call fcn.00409842
mov byte [esp + 0x3b40], bl
mov ecx, dword [esp + 0x20]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.00401109
lea eax, [esp + 0x10]
push eax
call fcn.00419045
pop ecx
mov ecx, dword [esp + 0x10]
add ecx, 0xfffffff0
call fcn.00401109
call fcn.0041ef9c
push eax
lea ecx, [esp + 0x38]
call fcn.00406449
lea eax, [esp + 0x28]
push eax
mov byte [esp + 0x3b34], 4
call fcn.00419045
pop ecx
mov byte [esp + 0x3b30], 5
push dword [eax]
lea ecx, [esp + 0x24]
call fcn.00403354
mov dword [esp + 0x10], eax
lea ecx, [esp + 0x30]
lea edi, [esp + 0x24]
mov byte [esp + 0x3b30], 6
call fcn.00417437
mov edi, eax
mov byte [esp + 0x3b30], 7
mov eax, dword [esp + 0x10]
push dword [eax]
call fcn.00417386
push eax
push dword [edi]
lea eax, [esp + 0x40]
push str.meeting.zoho.com
push dword [esp + 0x4c]
push str.Name:JoinEXE_Version:_s_Build:_s_OS:_s_Server:_d_TimeStamp:_s
push eax
call fcn.00403c8e
mov ecx, dword [esp + 0x40]
add esp, 0x1c
add ecx, 0xfffffff0
call fcn.00401109
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.00401109
mov byte [esp + 0x3b30], 4
mov ecx, dword [esp + 0x28]
add ecx, 0xfffffff0
call fcn.00401109
push ecx
lea eax, [esp + 0x38]
mov dword [esp + 0x14], esp
mov ecx, esp
push eax
call fcn.0040359e
call fcn.0040c53d
pop ecx
push dword [0x489390]
push str.Logging_Started._Path_:_s
call fcn.00409842
pop ecx
pop ecx
push ebx
lea ecx, [esp + 0x40]
call fcn.004036cd
push eax
push 0x489040
call fcn.0043b05d
pop ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.00403310
mov edi, 0x4894e0
mov ecx, edi
call fcn.0041c3f7
push dword [0x489394]
push str.App_dir_:_s
call fcn.00409842
pop ecx
pop ecx
call fcn.004012ad
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push ebx
call fcn.00403310
call fcn.00402cbb
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push str.Settings.conf
call fcn.00403310
push edi
call fcn.0041c185
call fcn.0041c502
push ecx
mov ecx, esp
mov dword [esp + 0x14], esp
push esi
call fcn.00403310
call fcn.0041c499
call fcn.0041befb
mov eax, dword [0x488150]
mov dword [esp + 0x10], eax
call fcn.0041a38d
xor eax, eax
inc eax
cmp dword [0x488150], eax
mov dword [esp + 0x1c], eax
jle 0x4021e6
mov edi, dword [esp + 0x1c]
mov eax, dword [0x488158]
shl edi, 2
push dword [edi + eax]
push str._cmdlog
call fcn.0043b20a
test eax, eax
pop ecx
pop ecx
jne 0x401a96
call fcn.00409a90
jmp 0x4021d2
mov eax, dword [0x488158]
push dword [edi + eax]
push str._gateway
call fcn.0043b20a
test eax, eax
pop ecx
pop ecx
jne 0x401adc
mov eax, dword [0x488150]
cmp eax, dword [esp + 0x1c]
jl 0x4021d2
mov eax, dword [0x488158]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [edi + eax + 4]
call fcn.00403310
call fcn.004011af
jmp 0x4021d2
mov eax, dword [0x488158]
push dword [edi + eax]
push str._join_src
call fcn.0043b20a
test eax, eax
pop ecx
pop ecx
jne 0x401b24
mov eax, dword [esp + 0x1c]
inc eax
cmp dword [0x488150], eax
jle 0x4021d2
mov eax, dword [0x488158]
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push dword [edi + eax + 4]
call fcn.00403310
call fcn.004011d0
jmp 0x4021d2
mov eax, dword [0x488158]
push dword [edi + eax]
push str._gatewayport
call fcn.0043b20a
test eax, eax
pop ecx
pop ecx
jne 0x401b64
mov eax, dword [0x488150]
cmp eax, dword [esp + 0x1c]
jl 0x4021d2
mov eax, dword [0x488158]
push dword [edi + eax + 4]
call fcn.0043a606
pop ecx
mov dword [0x48950c], eax
jmp 0x4021d2
mov eax, dword [0x488158]
push dword [edi + eax]
push 0x467850
call fcn.0043b20a
test eax, eax
pop ecx
pop ecx
jne 0x401b8b
mov dword [0x4894c4], 1
jmp 0x4021d2
mov eax, dword [0x488158]
push dword [edi + eax]
push str._proxyserver
call fcn.0043b20a
test eax, eax
pop ecx
pop ecx
jne 0x401bd0
mov eax, dword [0x488150]
cmp eax, dword [esp + 0x1c]
jl 0x401bc1
mov eax, dword [0x488158]
push dword [edi + eax + 4]
mov ecx, 0x4894a8
call fcn.0040387a
mov dword [0x4894b8], 3
jmp 0x4021d2
mov eax, dword [0x488158]
push dword [edi + eax]
push str._LanguageId
call fcn.0043b20a
test eax, eax
pop ecx
pop ecx
jne 0x401c0c
mov eax, dword [0x488158]
push dword [edi + eax + 4]
call fcn.0043a606
cmp eax, ebx
pop ecx
je 0x401c0c
mov esi, eax
call fcn.0040311a
mov dword [0x4894ec], eax
mov esi, 0x467314
mov eax, dword [0x488158]
push dword [edi + eax]
push str._proxyPac
call fcn.0043b20a
test eax, eax
pop ecx
pop ecx
jne 0x401c51
mov eax, dword [0x488150]
cmp eax, dword [esp + 0x1c]
jl 0x401c42
mov eax, dword [0x488158]
push dword [edi + eax + 4]
mov ecx, 0x4894bc
call fcn.0040387a
mov dword [0x4894b8], 1
jmp 0x4021d2
mov eax, dword [0x488158]
push dword [edi + eax]
push str._proxyport
call fcn.0043b20a
test eax, eax
pop ecx
pop ecx
jne 0x401c91
mov eax, dword [0x488150]
cmp eax, dword [esp + 0x1c]
jl 0x4021d2
mov eax, dword [0x488158]
push dword [edi + eax + 4]
call fcn.0043a606
pop ecx
mov dword [0x4894b0], eax
jmp 0x4021d2
mov eax, dword [0x488158]
push dword [edi + eax]
push str._proxyusername
call fcn.0043b20a
test eax, eax
pop ecx
pop ecx
jne 0x401cd0
mov eax, dword [0x488150]
cmp eax, dword [esp + 0x1c]
jl 0x4021d2
mov ecx, 0x489488
mov eax, dword [0x488158]
push dword [edi + eax + 4]
call fcn.0040387a
jmp 0x4021d2
mov eax, dword [0x488158]
push dword [edi + eax]
push str._proxypassword
call fcn.0043b20a
test eax, eax
pop ecx
pop ecx
jne 0x401cfe
mov eax, dword [0x488150]
cmp eax, dword [esp + 0x1c]
jl 0x4021d2
mov ecx, 0x48948c
jmp 0x401cbd
mov eax, dword [0x488158]
push dword [edi + eax]
push str._InstallCustomerPlugin
call fcn.0043b20a
test eax, eax
pop ecx
pop ecx
je 0x4021cb
mov eax, dword [0x488158]
push dword [edi + eax]
push str._ICP
call fcn.0043b20a
test eax, eax
pop ecx
pop ecx
je 0x4021cb
mov eax, dword [0x488158]
push dword [edi + eax]
push str._AssistInstall
call fcn.0043b20a
test eax, eax
pop ecx
pop ecx
jne 0x401d64
mov dword [0x489504], 1
mov byte [0x489501], 1
jmp 0x4021d2
mov eax, dword [0x488158]
push dword [edi + eax]
push str._AssistUnInstall
call fcn.0043b20a
test eax, eax
pop ecx
pop ecx
jne 0x401d92
mov dword [0x489504], 1
mov byte [0x489500], 1
jmp 0x4021d2
mov eax, dword [0x488158]
push dword [edi + eax]
push str._MeetingInstall
call fcn.0043b20a
test eax, eax
pop ecx
pop ecx
jne 0x401db2
mov dword [0x489504], ebx
jmp 0x401d58
mov eax, dword [0x488158]
push dword [edi + eax]
push str._MeetingUnInstall
call fcn.0043b20a
test eax, eax
pop ecx
pop ecx
jne 0x401dd2
mov dword [0x489504], ebx
jmp 0x401d86
mov eax, dword [0x488158]
push dword [edi + eax]
push 0x4679bc
call fcn.0043b20a
test eax, eax
pop ecx
pop ecx
je 0x4021b8
mov eax, dword [0x488158]
push dword [edi + eax]
push str._viewer
call fcn.0043b20a
test eax, eax
pop ecx
pop ecx
je 0x4021b8
mov eax, dword [0x488158]
push dword [edi + eax]
push 0x4679d4
call fcn.0043b20a
test eax, eax
pop ecx
pop ecx
je 0x4021a4
mov eax, dword [0x488158]
push dword [edi + eax]
push str._agent
call fcn.0043b20a
test eax, eax
pop ecx
pop ecx
je 0x4021a4
mov eax, dword [0x488158]
push dword [edi + eax]
push str._CAK
call fcn.0043b20a
test eax, eax
pop ecx
pop ecx
jne 0x401eab
mov eax, dword [0x488150]
cmp eax, dword [esp + 0x1c]
jl 0x4021d2
mov eax, dword [0x488158]
push dword [edi + eax + 4]
lea ecx, [esp + 0x28]
call fcn.00403310
lea eax, [esp + 0x24]
push eax
mov ecx, 0x48961c
mov byte [esp + 0x3b34], 8
call fcn.004035bc
mov byte [esp + 0x3b30], 4
mov ecx, dword [esp + 0x24]
add ecx, 0xfffffff0
call fcn.00401109
jmp 0x4021d2
mov eax, dword [0x488158]
push dword [edi + eax]
push str._UNC
call fcn.0043b20a
test eax, eax
pop ecx
pop ecx
jne 0x401ed2
mov dword [0x4893b0], 1
jmp 0x4021d2
mov eax, dword [0x488158]
push dword [edi + eax]
push str._dir
call fcn.0043b20a
test eax, eax
pop ecx
pop ecx
jne 0x401f70
push esi
lea ecx, [esp + 0x1c]
call fcn.00403310
mov eax, dword [esp + 0x1c]
mov byte [esp + 0x3b30], 9
cmp dword [0x488150], eax
jl 0x401f1e
mov eax, dword [0x488158]
push dword [edi + eax + 4]
lea ecx, [esp + 0x1c]
call fcn.0040387a
push dword [esp + 0x18]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmp eax, ebx
je 0x401f3f
push ecx
lea eax, [esp + 0x1c]
mov dword [esp + 0x18], esp
mov ecx, esp
push eax
call fcn.0040359e
jmp 0x401f5a
push dword [esp + 0x18]
push str.Dir_path_is_invalid.
call fcn.004098d8
pop ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push esi
call fcn.00403310
call fcn.00402cbb
mov byte [esp + 0x3b30], 4
mov ecx, dword [esp + 0x18]
jmp 0x401e9e
mov eax, dword [0x488158]
push dword [edi + eax]
push str._UPDATE
call fcn.0043b20a
test eax, eax
pop ecx
pop ecx
je 0x402284
mov eax, dword [0x488158]
push dword [edi + eax]
push str._UpdateDS
call fcn.0043b20a
test eax, eax
pop ecx
pop ecx
jne 0x40201b
call fcn.00416e55
cmp eax, ebx
je 0x4022e6
push str.Updating...__UpdateDS
call fcn.004098d8
pop ecx
lea edi, [esp + 0x28]
mov dword [0x489384], 1
call fcn.00416bf3
push ebx
mov ecx, edi
mov byte [esp + 0x3b34], 0xb
call fcn.004036cd
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
mov edi, dword [esp + 0x28]
push edi
push str.Updating...__UpdateDS_:_s
call fcn.004098d8
pop ecx
lea eax, [esp + 0x2c]
mov dword [esp + 0x18], esp
mov ecx, esp
push eax
call fcn.0040359e
call fcn.00402cbb
mov byte [esp + 0x3b30], 4
lea ecx, [edi - 0x10]
jmp 0x401ea1
mov eax, dword [0x488158]
push dword [edi + eax]
push str._UpdateURS
call fcn.0043b20a
test eax, eax
pop ecx
pop ecx
jne 0x40206a
call fcn.00416e55
cmp eax, ebx
je 0x4022f4
push str.Updating...__UpdateDS
call fcn.004098d8
mov ecx, esp
mov dword [esp + 0x18], esp
push ebx
mov dword [0x489388], 1
call fcn.00403310
call fcn.00402cbb
jmp 0x4021d2
mov eax, dword [0x488158]
push dword [edi + eax]
push str._UnInstallURS
call fcn.0043b20a
test eax, eax
pop ecx
pop ecx
je 0x40230a
mov eax, dword [0x488158]
push dword [edi + eax]
push str._URS_SERVICE_INSTALL
call fcn.0043b20a
test eax, eax
pop ecx
pop ecx
je 0x402160
cmp dword [0x489610], ebx
jne 0x402160
mov eax, dword [0x488158]
push dword [edi + eax]
push 0x467c38
call fcn.0043b20a
test eax, eax
pop ecx
pop ecx
je 0x402378
mov eax, dword [0x488158]
push dword [edi + eax]
push str._auth
call fcn.0043b20a
test eax, eax
pop ecx
pop ecx
jne 0x40213c
push esi
lea ecx, [esp + 0x24]
call fcn.00403310
mov eax, dword [esp + 0x1c]
mov byte [esp + 0x3b30], 0x13
cmp dword [0x488150], eax
jl 0x402128
mov eax, dword [0x488158]
push dword [edi + eax + 4]
lea ecx, [esp + 0x24]
call fcn.0040387a
push ecx
lea eax, [esp + 0x24]
mov dword [esp + 0x18], esp
mov ecx, esp
push eax
call fcn.0040359e
call fcn.0041c426
mov byte [esp + 0x3b30], 4
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.00401109
mov eax, dword [0x488158]
push dword [edi + eax]
push str._URS
call fcn.0043b20a
test eax, eax
pop ecx
pop ecx
jne 0x4021d2
mov dword [0x489610], 1
jmp 0x4021d2
push str.Unattended_installer_started
call fcn.004098d8
pop ecx
push esi
lea ecx, [esp + 0x34]
call fcn.00403310
xor edi, edi
mov byte [esp + 0x3b30], 0xd
inc edi
mov dword [0x489380], edi
call fcn.00416e55
cmp eax, ebx
je 0x402449
mov byte [esp + 0x3b30], 4
mov ecx, dword [esp + 0x30]
jmp 0x401e9e
mov eax, dword [0x488150]
cmp eax, dword [esp + 0x1c]
jl 0x4021d2
mov byte [0x4894f8], 1
jmp 0x4021d2
mov eax, dword [0x488150]
cmp eax, dword [esp + 0x1c]
jl 0x4021d2
mov byte [0x4894f8], bl
jmp 0x4021d2
mov byte [0x4894ff], 1
inc dword [esp + 0x1c]
mov eax, dword [esp + 0x1c]
cmp eax, dword [0x488150]
jl 0x401a6d
call fcn.004032c8
cmp al, bl
jne 0x4021fa
push str.ZohoTray_:_Problem_with_setting_Resource_Olnly_DLL
call fcn.00409842
pop ecx
call fcn.00416e08
cmp eax, ebx
mov dword [0x489038], eax
jne 0x4024fc
mov ebx, dword [0x4894ec]
lea eax, [esp + 0x24]
push 0x234a
push eax
call fcn.00418e02
pop ecx
pop ecx
xor ebx, ebx
push ebx
mov byte [esp + 0x3b34], 0x14
mov eax, dword [eax]
push 4
push eax
call fcn.004204bd
mov byte [esp + 0x3b30], 4
mov ecx, dword [esp + 0x24]
add ecx, 0xfffffff0
mov edi, eax
call fcn.00401109
cmp edi, 6
jne 0x4024ed
push str.Some_other_instance_running._Terminating_them_and_starting_our_process
call fcn.00409842
pop ecx
push 1
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.join.exe
call fcn.00403310
call fcn.00417014
pop ecx
xor edi, edi
pop ecx
inc edi
jmp 0x4024ff
lea edi, [esp + 0x20]
call fcn.00416bf3
push ebx
mov ecx, edi
mov byte [esp + 0x3b34], 0xa
call fcn.004036cd
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
push ecx
mov eax, edi
mov dword [esp + 0x18], esp
mov ecx, esp
push eax
call fcn.0040359e
call fcn.00402cbb
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.00401109
xor ebx, ebx
inc ebx
mov ecx, dword [esp + 0x34]
add ecx, 0xfffffff0
call fcn.00401109
mov ecx, dword [esp + 0x3c]
add ecx, 0xfffffff0
call fcn.00401109
mov eax, ebx
jmp 0x4017ad
push ebx
push ebx
push str.Automatic_update_has_failed_
call fcn.004204bd
jmp 0x4022c7
call fcn.00402e8c
mov esi, eax
push esi
push str.Applcation_restarted_as_UAC_elevated_process:_d
call fcn.004098d8
pop ecx
pop ecx
jmp 0x4022c7
call fcn.00416e55
cmp eax, ebx
je 0x4022f4
push str.uninstalling_urs
call fcn.004098d8
pop ecx
lea eax, [esp + 0x10]
push eax
call fcn.0041cd0c
mov byte [esp + 0x3b30], 0xc
call fcn.0041d292
push str.Uninstalling_service_and_quitting_tray
call fcn.004098d8
mov ecx, esp
mov dword [esp + 0x18], esp
push str.Zoho_Assist_Unattended_Support
call fcn.00403310
push 0x85
call fcn.00417ac5
pop ecx
pop ecx
push ebx
push ebx
push str.The_Unattended_Agent_is_now_removed.
call fcn.004204bd
mov ecx, dword [esp + 0x10]
add ecx, 0xfffffff0
call fcn.00401109
jmp 0x4022c7
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push esi
lea ecx, [esp + 0x1c]
call fcn.00403310
mov eax, dword [esp + 0x1c]
mov byte [esp + 0x3b30], 0x11
cmp dword [0x488150], eax
jl 0x4023b4
mov ecx, dword [0x488158]
push dword [ecx + eax*4 + 4]
lea ecx, [esp + 0x1c]
call fcn.0040387a
push dword [esp + 0x18]
mov dword [esp + 0x28], ebx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
cmp eax, ebx
je 0x402430
push 0x104
lea eax, [esp + 0x3508]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [esp + 0x24]
push eax
push ecx
lea eax, [esp + 0x350c]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00403310
push ecx
mov byte [esp + 0x3b3c], 0x12
lea eax, [esp + 0x24]
mov dword [esp + 0x38], esp
mov ecx, esp
push eax
call fcn.0040359e
mov byte [esp + 0x3b3c], 0x11
call fcn.00416b52
add esp, 0xc
push eax
push dword [esp + 0x28]
push str.Exe_updated:er:_d_:_res___d
call fcn.004098d8
add esp, 0xc
jmp 0x402440
push dword [esp + 0x18]
push str.invalid_path_file:_s
call fcn.004098d8
pop ecx
pop ecx
mov ecx, dword [esp + 0x18]
jmp 0x4022bc
push 0x104
lea eax, [esp + 0x3508]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push edi
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x18]
push eax
mov ecx, edi
call fcn.00416fb6
pop ecx
push ebx
mov ecx, eax
mov byte [esp + 0x3b3c], 0xe
call fcn.004036cd
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.00403310
push ecx
mov byte [esp + 0x3b40], 0xf
mov ecx, esp
mov dword [esp + 0x3c], esp
push esi
call fcn.00403310
push ecx
mov byte [esp + 0x3b44], 0x10
lea eax, [esp + 0x3518]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.00403310
mov byte [esp + 0x3b44], 0xe
call fcn.00416ef7
mov ecx, dword [esp + 0x24]
add esp, 0x14
add ecx, 0xfffffff0
call fcn.00401109
mov ecx, dword [esp + 0x30]
add ecx, 0xfffffff0
call fcn.00401109
mov ebx, edi
jmp 0x4022c7
push str.Another_instance_running._User_chose_to_quit_application
call fcn.00409842
jmp 0x402307
xor edi, edi
inc edi
cmp dword [0x489610], ebx
je 0x4025e6
push str.Unattended_installer_started
call fcn.004098d8
pop ecx
push esi
lea ecx, [esp + 0x28]
call fcn.00403310
mov byte [esp + 0x3b30], 0x15
mov dword [0x489380], edi
call fcn.00416e55
cmp eax, ebx
jne 0x4025d5
push 0x104
lea eax, [esp + 0x3918]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push edi
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x18]
push eax
mov ecx, edi
call fcn.00416fb6
pop ecx
push ebx
mov ecx, eax
mov byte [esp + 0x3b3c], 0x16
call fcn.004036cd
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.00403310
push ecx
mov byte [esp + 0x3b40], 0x17
mov ecx, esp
mov dword [esp + 0x3c], esp
push esi
call fcn.00403310
push ecx
mov byte [esp + 0x3b44], 0x18
lea eax, [esp + 0x3928]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00403310
mov byte [esp + 0x3b44], 0x16
call fcn.00416ef7
mov ecx, dword [esp + 0x24]
add esp, 0x14
add ecx, 0xfffffff0
call fcn.00401109
mov ecx, dword [esp + 0x24]
jmp 0x4024de
mov byte [esp + 0x3b30], 4
mov ecx, dword [esp + 0x24]
jmp 0x4026c8
cmp byte [0x4894ff], bl
je 0x4026d0
push 0x467da4
call fcn.004098d8
pop ecx
push esi
lea ecx, [esp + 0x2c]
call fcn.00403310
mov byte [esp + 0x3b30], 0x19
mov dword [0x489380], edi
call fcn.00416e55
cmp eax, ebx
jne 0x4026bc
push 0x104
lea eax, [esp + 0x3710]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push edi
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x18]
push eax
mov ecx, edi
call fcn.00416fb6
pop ecx
push ebx
mov ecx, eax
mov byte [esp + 0x3b3c], 0x1a
call fcn.004036cd
push ecx
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.00403310
push ecx
mov byte [esp + 0x3b40], 0x1b
mov ecx, esp
mov dword [esp + 0x3c], esp
push esi
call fcn.00403310
push ecx
mov byte [esp + 0x3b44], 0x1c
lea eax, [esp + 0x3720]
mov ecx, esp
mov dword [esp + 0x38], esp
push eax
call fcn.00403310
mov byte [esp + 0x3b44], 0x1a
call fcn.00416ef7
mov ecx, dword [esp + 0x24]
add esp, 0x14
add ecx, 0xfffffff0
call fcn.00401109
mov ecx, dword [esp + 0x28]
jmp 0x4024de
mov byte [esp + 0x3b30], 4
mov ecx, dword [esp + 0x28]
add ecx, 0xfffffff0
call fcn.00401109
lea eax, [esp + 0x53c]
push eax
call fcn.0040a001
mov byte [esp + 0x3b30], 0x1d
call fcn.0040bd35
lea eax, [esp + 0x38]
push eax
xor ecx, ecx
call fcn.00416fb6
pop ecx
mov byte [esp + 0x3b30], 0x1e
push dword [esp + 0x10]
push dword [esp + 0x3c]
push str.CommandLineArgs_:__s_arglen:_d
call fcn.00409842
pop ecx
pop ecx
lea eax, [esp + 0x3c]
mov dword [esp + 0x18], esp
mov ecx, esp
push eax
call fcn.0040359e
push dword [esp + 0x14]
call fcn.00402f72
cmp eax, edi
jne 0x402758
push str.Exe_launched
call fcn.00409842
pop ecx
mov ecx, dword [esp + 0x38]
add ecx, 0xfffffff0
call fcn.00401109
lea esi, [esp + 0x53c]
call fcn.0040a10a
jmp 0x4024e6
cmp dword [0x4894c4], edi
jne 0x4028c8
call fcn.0041ef9c
push eax
lea ecx, [esp + 0x1c]
call fcn.00406449
lea eax, [esp + 0x10]
push eax
mov byte [esp + 0x3b34], 0x1f
call fcn.00401193
mov byte [esp + 0x3b30], 0x20
movzx ecx, byte [0x4894f8]
push ecx
push dword [eax]
lea eax, [esp + 0x20]
push str.Join_Start_k_s_Role_d_UpdateTypeSilent
push eax
call fcn.00403c8e
mov byte [esp + 0x3b40], 0x1f
mov ecx, dword [esp + 0x20]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.00401109
push ecx
lea eax, [esp + 0x1c]
mov dword [esp + 0x18], esp
mov ecx, esp
push eax
call fcn.0040359e
lea ecx, [esp + 0x540]
call fcn.0040b3da
cmp eax, 7
je 0x40281a
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push str.meeting.zoho.com
call fcn.00403310
lea eax, [esp + 0x540]
push eax
call fcn.0040cb09
push ecx
lea eax, [esp + 0x1c]
mov dword [esp + 0x18], esp
mov ecx, esp
push eax
call fcn.0040359e
lea ecx, [esp + 0x540]
call fcn.0040b3da
call fcn.0041ef9c
push eax
lea ecx, [esp + 0x24]
call fcn.00406449
push ecx
mov byte [esp + 0x3b34], 0x21
mov eax, esp
mov dword [esp + 0x18], esp
push eax
call fcn.00401193
mov esi, 0x489368
call fcn.0040522b
cmp eax, ebx
je 0x40286d
lea eax, [esp + 0x20]
push eax
xor ecx, ecx
mov edi, esi
call fcn.00405c09
push dword [esp + 0x20]
push str.Silent_Update_:__s
call fcn.00409842
pop ecx
xor edi, edi
pop ecx
inc edi
push edi
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.UpTypeSilent
call fcn.00403310
mov byte [esp + 0x3b38], 0x22
movzx eax, byte [0x4894f8]
push eax
push ecx
mov eax, esp
mov dword [esp + 0x3c], esp
push eax
call fcn.00401193
mov ecx, esi
mov byte [esp + 0x3b40], 0x21
call fcn.0040479c
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.00401109
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.00401109
jmp 0x40273b
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
lea ecx, [esp + 0x44]
call fcn.00403310
push esi
lea ecx, [esp + 0x48]
mov byte [esp + 0x3b34], 0x23
call fcn.00403310
mov byte [esp + 0x3b30], 0x24
call fcn.0041ef9c
push eax
lea ecx, [esp + 0x1c]
call fcn.00406449
mov byte [esp + 0x3b30], 0x25
cmp dword [0x4898ac], ebx
je 0x4029fe
push str.Preparing_for_first_time_installation
call fcn.004098d8
pop ecx
call fcn.0041ef9c
push eax
lea ecx, [esp + 0x24]
call fcn.00406449
lea esi, [esp + 0x10]
mov byte [esp + 0x3b30], 0x26
call fcn.00416a67
push str.join.exe
mov byte [esp + 0x3b34], 0x27
push dword [eax]
lea eax, [esp + 0x28]
push 0x467544
push eax
call fcn.00403c8e
mov byte [esp + 0x3b40], 0x26
mov ecx, dword [esp + 0x20]
add esp, 0x10
add ecx, 0xfffffff0
call fcn.00401109
push 0x104
lea eax, [esp + 0x3710]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
or dword [esp + 0x10], 0xffffffff
lea eax, [esp + 0x10]
push eax
push ecx
lea eax, [esp + 0x3714]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00403310
push ecx
lea eax, [esp + 0x2c]
mov dword [esp + 0x28], esp
mov ecx, esp
push eax
mov byte [esp + 0x3b40], 0x28
call fcn.0040359e
mov byte [esp + 0x3b3c], 0x26
call fcn.00416b52
add esp, 0xc
push dword [esp + 0x10]
push str.Join_exe_copied_Exe_copied:_d
call fcn.004098d8
pop ecx
pop ecx
call fcn.00401404
mov byte [esp + 0x3b30], 0x25
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.00401109
mov esi, 0x467314
mov edi, dword [esp + 0x18]
cmp dword [edi - 0xc], 5
jle 0x402a1e
push ecx
lea eax, [esp + 0x1c]
mov dword [esp + 0x18], esp
mov ecx, esp
push eax
call fcn.0040359e
call fcn.0041c499
push esi
lea ecx, [esp + 0x4c]
call fcn.00403310
push str.After_GetConnection
mov byte [esp + 0x3b34], 0x29
call fcn.00409842
pop ecx
lea ebx, [esp + 0x4c]
call fcn.0040e125
mov byte [esp + 0x3b30], 0x2a
mov ecx, dword [esp + 0x2c]
mov eax, ebx
mov dword [ecx + 0x20], eax
mov ecx, ebx
call fcn.00422958
push str.Done
call fcn.004098d8
pop ecx
mov eax, ebx
push eax
mov byte [esp + 0x3b34], 0x29
call fcn.0040e291
mov ecx, dword [esp + 0x48]
add ecx, 0xfffffff0
call fcn.00401109
lea ecx, [edi - 0x10]
call fcn.00401109
mov ecx, dword [esp + 0x44]
add ecx, 0xfffffff0
call fcn.00401109
mov ecx, dword [esp + 0x40]
add ecx, 0xfffffff0
call fcn.00401109
mov ecx, dword [esp + 0x38]
add ecx, 0xfffffff0
call fcn.00401109
lea esi, [esp + 0x53c]
call fcn.0040a10a
xor ebx, ebx
jmp 0x4022c7