Function at 0x40191c
Capabilities:
Accept command line arguments
Create process on windows

Disassembly:
push 0x2e0
mov eax, 0x4659e1
call fcn.0043d28e
mov esi, ecx
mov dword [ebp - 0x2dc], esi
lea eax, [ebp - 0x2ec]
mov dword [ebp - 0x2ec], 8
push eax
mov dword [ebp - 0x2e8], 0xff
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
mov ecx, esi
call fcn.00418229
xor edi, edi
push edi
call fcn.0041b4ae
pop ecx
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
lea ecx, [ebp - 0x2e0]
call fcn.004042c5
push 6
push edi
mov dword [ebp - 4], edi
call dword [sym.imp.ole32.dll_CoInitializeEx]
push edi
push str._LaunchExeUpdate
lea ecx, [ebp - 0x2e0]
call fcn.004040f0
cmp eax, 0xffffffff
je 0x401b63
call fcn.0040328d
mov eax, dword [ebp - 0x2e0]
xor esi, esi
inc esi
mov dword [ebp - 0x2d4], esi
cmp dword [eax - 4], esi
jle 0x4019c9
push dword [eax - 0xc]
lea ecx, [ebp - 0x2e0]
call fcn.00404809
mov eax, dword [ebp - 0x2e0]
push eax
push str.Launch_exe_update_:__s
call fcn.004064a1
lea eax, [ebp - 0x2cc]
push eax
lea eax, [ebp - 0x2c4]
push eax
push 0x1c
pop edx
lea ecx, [ebp - 0x2d0]
call fcn.0040dee0
add esp, 0x10
lea ecx, [ebp - 0x2c8]
call fcn.0040431c
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x2d0]
cmp dword [eax - 4], esi
jle 0x401a21
push dword [eax - 0xc]
lea ecx, [ebp - 0x2d0]
call fcn.00404809
mov eax, dword [ebp - 0x2d0]
push str.ZohoMeeting
push eax
lea eax, [ebp - 0x2c8]
push 0x47d25c
push eax
call fcn.00404e31
add esp, 0x10
lea ecx, [ebp - 0x2dc]
call fcn.0040431c
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x2c8]
cmp dword [eax - 4], esi
jle 0x401a69
push dword [eax - 0xc]
lea ecx, [ebp - 0x2c8]
call fcn.00404809
mov eax, dword [ebp - 0x2c8]
push str.MeetingLauncher.log
push eax
lea eax, [ebp - 0x2dc]
push 0x47d25c
push eax
call fcn.00404e31
add esp, 0x10
lea eax, [ebp - 0x218]
push 0x104
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [ebp - 0x2d8]
call fcn.0040431c
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0x2d8]
push 0x47d290
push eax
call fcn.00404e31
or dword [ebp - 0x2c4], 0xffffffff
add esp, 8
mov esi, esp
mov dword [ebp - 0x2e4], esp
mov dword [ebp - 0x2cc], esi
mov edi, dword [ebp - 0x2d8]
lea eax, [edi - 0x10]
push eax
call fcn.00404a80
add eax, 0x10
mov dword [esi], eax
mov byte [ebp - 4], 5
mov dword [ebp - 0x2cc], esp
mov esi, dword [ebp - 0x2dc]
lea eax, [esi - 0x10]
push eax
call fcn.00404a80
mov edx, dword [ebp - 0x2cc]
add eax, 0x10
pop ecx
lea ecx, [ebp - 0x2c4]
mov dword [edx], eax
mov byte [ebp - 4], 4
call fcn.0040dea5
push dword [ebp - 0x2c4]
push esi
push edi
push str.Launch_exe_update:_ZohoMeetingLauncher_exe_copied_from__s_to__s_:__d
call fcn.004064a1
add esp, 0x18
lea ecx, [edi - 0x10]
call fcn.00401696
lea ecx, [esi - 0x10]
call fcn.00401696
mov ecx, dword [ebp - 0x2c8]
lea ecx, [ecx - 0x10]
call fcn.00401696
mov ecx, dword [ebp - 0x2d0]
lea ecx, [ecx - 0x10]
call fcn.00401696
jmp 0x4020dc
call fcn.0040328d
push 0x47d324
mov ecx, esi
call fcn.004191af
mov ecx, esi
call fcn.00402fcd
mov ecx, esi
call fcn.0040212d
call fcn.00403c09
lea ecx, [ebp - 0x2d8]
call fcn.0040431c
mov byte [ebp - 4], 6
lea eax, [ebp - 0x2d8]
push dword [0x498a08]
push str.ZOHOMEETINGLAUNCHER_EXE__s
push eax
call fcn.00404e31
mov edi, dword [ebp - 0x2d8]
add esp, 0xc
mov ecx, edi
call fcn.0040ec11
mov dword [0x498880], eax
test eax, eax
jne 0x401c11
lea ecx, [ebp - 0x2c4]
call fcn.0040431c
push 0x66
mov byte [ebp - 4], 7
call fcn.0041aeb7
test eax, eax
je 0x401bee
push 0x66
push eax
lea ecx, [ebp - 0x2c4]
call fcn.00404624
mov esi, dword [ebp - 0x2c4]
push 0
push 0
push esi
call fcn.004196f9
push str.Another_instance_running._User_chose_to_quit_application
call fcn.004064a1
pop ecx
lea ecx, [esi - 0x10]
jmp 0x4020c8
lea ecx, [ebp - 0x2c8]
call fcn.0040431c
xor esi, esi
mov byte [ebp - 4], 8
mov eax, dword [0x498a08]
inc esi
cmp byte [0x498a26], 0
mov dword [ebp - 0x2c4], eax
je 0x401c6e
cmp dword [eax - 4], esi
jle 0x401c54
push dword [eax - 0xc]
mov ecx, 0x498a08
call fcn.00404809
mov eax, dword [0x498a08]
mov dword [ebp - 0x2c4], eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
push dword [0x498a58]
push dword [ebp - 0x2c4]
push str.ZohoMettingLauncherExe_Startkey_scid_sarg_sUpdateTypeLaunchApp
jmp 0x401ca3
cmp dword [eax - 4], esi
jle 0x401c8b
push dword [eax - 0xc]
mov ecx, 0x498a08
call fcn.00404809
mov eax, dword [0x498a08]
mov dword [ebp - 0x2c4], eax
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
push dword [0x498a58]
push dword [ebp - 0x2c4]
push str.ZohoMeetingLauncherExe_Startkey_scid_sarg_s
lea eax, [ebp - 0x2c8]
push eax
call fcn.00404e31
mov eax, dword [ebp - 0x2dc]
add esp, 0x14
cmp dword [eax + 0xcc], 0
jne 0x401fa5
push ecx
lea ecx, [ebp - 0x2c0]
call fcn.004068da
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x2c0]
mov eax, dword [ebp - 0x2dc]
mov dword [eax + 0x20], ecx
call fcn.0041a315
cmp byte [0x498a70], 0
je 0x401d1b
mov eax, dword [0x498a74]
cmp dword [eax - 4], esi
jle 0x401d0e
push dword [eax - 0xc]
mov ecx, 0x498a74
call fcn.00404809
mov eax, dword [0x498a74]
push eax
push str.App_launched_with_argument__s
call fcn.004064a1
pop ecx
pop ecx
cmp byte [0x498a78], 0
je 0x401d30
mov esi, 0x498a80
mov eax, 0x498a84
jmp 0x401d3a
mov esi, 0x498a58
mov eax, 0x498a08
push eax
mov ecx, 0x498a88
call fcn.00404926
push esi
mov ecx, 0x498a8c
call fcn.00404926
cmp dword [0x4989f0], 0
je 0x401eb7
mov edx, dword [0x4989ec]
mov ecx, edx
mov eax, dword [0x4989e8]
and edx, 3
shr ecx, 2
dec eax
and ecx, eax
mov eax, dword [0x4989e4]
mov eax, dword [eax + ecx*4]
mov eax, dword [eax + edx*4]
sub eax, 0x10
push eax
call fcn.00404a80
add eax, 0x10
mov dword [ebp - 0x2d0], eax
push ecx
lea ecx, [ebp - 0x2d0]
mov byte [ebp - 4], 0xa
call fcn.004041fd
push ecx
mov dword [ebp - 0x2cc], esp
mov esi, dword [ebp - 0x2d0]
mov dword [ebp - 0x2e4], esp
lea edi, [esi - 0x10]
push edi
call fcn.00404a80
mov ecx, dword [ebp - 0x2cc]
add eax, 0x10
mov dword [ecx], eax
mov byte [ebp - 4], 0xb
mov eax, dword [0x498a8c]
add eax, 0xfffffff0
mov dword [ebp - 0x2dc], esp
mov dword [ebp - 0x2d4], esp
push eax
call fcn.00404a80
mov ecx, dword [ebp - 0x2d4]
add eax, 0x10
mov dword [ecx], eax
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x2c4], esp
mov eax, dword [0x498a88]
add eax, 0xfffffff0
push eax
call fcn.00404a80
pop ecx
mov ecx, dword [ebp - 0x2c4]
add eax, 0x10
mov dword [ecx], eax
mov byte [ebp - 4], 0xa
call fcn.00415045
add esp, 0xc
test al, al
jne 0x401e4c
push str.monitoring_failed_to_send_data
call fcn.004064a1
cmp dword [edi + 0xc], 1
pop ecx
jle 0x401e49
push dword [edi + 4]
lea ecx, [ebp - 0x2d0]
call fcn.00404809
mov esi, dword [ebp - 0x2d0]
push esi
jmp 0x401e51
push str.monitoring_data_successfully_sent
call fcn.004064a1
mov edx, dword [0x4989e8]
pop ecx
mov ecx, dword [0x4989ec]
dec edx
mov eax, ecx
and ecx, 3
shr eax, 2
and edx, eax
mov eax, dword [0x4989e4]
push 0
mov eax, dword [eax + edx*4]
lea ecx, [eax + ecx*4]
call fcn.00405018
sub dword [0x4989f0], 1
jne 0x401e92
and dword [0x4989ec], 0
jmp 0x401e98
inc dword [0x4989ec]
lea ecx, [esi - 0x10]
mov byte [ebp - 4], 9
call fcn.00401696
cmp dword [0x4989f0], 0
jne 0x401d5d
mov edi, dword [ebp - 0x2d8]
mov eax, dword [0x498a6c]
cmp dword [eax - 0xc], 0
je 0x401f96
mov esi, 0x47d5a4
push esi
call fcn.00443870
pop ecx
push eax
push esi
mov esi, 0x498a6c
mov ecx, esi
call fcn.00404875
push ecx
push ecx
mov ecx, esi
call fcn.004041fd
push ecx
mov esi, esp
mov dword [ebp - 0x2e4], esp
mov dword [ebp - 0x2cc], esi
mov eax, dword [0x498a6c]
add eax, 0xfffffff0
push eax
call fcn.00404a80
add eax, 0x10
mov dword [esi], eax
mov byte [ebp - 4], 0xd
mov esi, esp
mov eax, dword [0x498a8c]
add eax, 0xfffffff0
mov dword [ebp - 0x2cc], esp
push eax
mov dword [ebp - 0x2d4], esi
call fcn.00404a80
add eax, 0x10
mov dword [esi], eax
mov byte [ebp - 4], 0xe
mov esi, esp
mov eax, dword [0x498a88]
add eax, 0xfffffff0
mov dword [ebp - 0x2d4], esi
push eax
call fcn.00404a80
add eax, 0x10
mov dword [esi], eax
pop ecx
mov byte [ebp - 4], 9
call fcn.00415045
add esp, 0xc
test al, al
jne 0x401f8b
push str.monitoring_failed_to_send_data
call fcn.004064a1
mov eax, dword [0x498a6c]
pop ecx
cmp dword [eax - 4], 1
jle 0x401f88
push dword [eax - 0xc]
mov ecx, 0x498a6c
call fcn.00404809
mov eax, dword [0x498a6c]
push eax
jmp 0x401f90
push str.monitoring_data_successfully_sent
call fcn.004064a1
pop ecx
lea ecx, [ebp - 0x2c0]
mov byte [ebp - 4], 8
call fcn.004020f6
cmp byte [0x498a1c], 0
jne 0x4020a4
cmp byte [0x498a78], 0
jne 0x4020a4
cmp byte [0x498a22], 0
je 0x4020a4
push 0x47d5a8
call fcn.004064a1
cmp byte [0x498a26], 0
pop ecx
jne 0x402007
push ecx
mov esi, esp
mov dword [ebp - 0x2e4], esi
mov eax, dword [0x498a28]
add eax, 0xfffffff0
push eax
call fcn.00404a80
add eax, 0x10
pop ecx
mov dword [esi], eax
call fcn.00403436
jmp 0x4020a4
push str._LaunchExeUpdate
lea ecx, [ebp - 0x2c4]
call fcn.004042c5
xor esi, esi
mov byte [ebp - 4], 0xf
inc esi
push esi
push dword [0x498a28]
push dword [ebp - 0x2c4]
push 0x47d5e8
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, dword [ebp - 0x2c8]
mov dword [ebp - 0x2cc], eax
cmp dword [ecx - 4], esi
jle 0x40205c
push dword [ecx - 0xc]
lea ecx, [ebp - 0x2c8]
call fcn.00404809
mov eax, dword [0x498a28]
cmp dword [eax - 4], esi
jle 0x402078
push dword [eax - 0xc]
mov ecx, 0x498a28
call fcn.00404809
mov eax, dword [0x498a28]
push dword [ebp - 0x2c8]
push eax
push dword [ebp - 0x2cc]
push str.Launch_app_exe_update__d
call fcn.004064a1
mov byte [ebp - 4], 8
add esp, 0x10
mov ecx, dword [ebp - 0x2c4]
lea ecx, [ecx - 0x10]
call fcn.00401696
mov eax, dword [0x498880]
test eax, eax
je 0x4020b4
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.ZohoMeetingLauncher_Closed
call fcn.004064a1
pop ecx
mov ecx, dword [ebp - 0x2c8]
add ecx, 0xfffffff0
call fcn.00401696
lea ecx, [edi - 0x10]
call fcn.00401696
and dword [ebp - 0x2d4], 0
mov ecx, dword [ebp - 0x2e0]
add ecx, 0xfffffff0
call fcn.00401696
mov eax, dword [ebp - 0x2d4]
call fcn.0043d23d
ret