Function at 0x401251
Capabilities:
Accept command line arguments
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1f0
push esi
push edi
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
xor edi, edi
mov dword [ebp - 0x54], eax
push edi
call dword [sym.imp.ole32.dll_CoInitialize]
push dword [ebp + 8]
mov eax, 0x407618
mov dword [0x407688], 0x407010
mov dword [0x407dec], eax
push 0x407dc8
push eax
mov dword [0x407618], 0x84
mov dword [0x40767c], 0x300
call fcn.004017cd
call fcn.00401000
mov ax, word [0x4070e4]
mov dword [ebp - 0x10], 1
mov word [ebp - 0x12], ax
mov eax, 0xc8
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x12]
mov dword [ebp - 0x28], edi
push eax
lea eax, [ebp - 0x54]
push eax
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], edi
call fcn.00401071
mov esi, eax
pop ecx
cmp esi, edi
pop ecx
mov dword [ebp - 0xc], esi
jne 0x4012f3
call dword [sym.imp.ole32.dll_CoUninitialize]
xor eax, eax
jmp 0x4017c7
push ebx
push 0x20
push esi
call dword [sym.imp.MSVCRT.dll_strchr]
pop ecx
cmp eax, edi
pop ecx
je 0x401310
and byte [eax], 0
mov edi, 0x104
inc eax
push edi
push eax
jmp 0x40131b
mov edi, 0x104
push edi
push 0x4076a0
mov ebx, 0x407bb8
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenA]
call esi
inc eax
cmp eax, edi
jae 0x40133d
push dword [ebp - 0xc]
call esi
inc eax
jmp 0x40133f
mov eax, edi
push eax
push dword [ebp - 0xc]
push 0x407cbc
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
cmp byte [0x407bb8], 0
mov edi, str.webex.ini
push edi
jne 0x4013a4
call esi
push 0x4076a0
mov ebx, eax
call esi
lea eax, [ebx + eax + 2]
push eax
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [ebp + 8], eax
push edi
call esi
mov ebx, 0x4076a0
mov edx, eax
push ebx
mov dword [ebp - 8], edx
call esi
mov ecx, dword [ebp - 8]
lea eax, [ecx + eax + 2]
push eax
push 0
push dword [ebp + 8]
call sub.MSVCRT.dll_memset
add esp, 0xc
push edi
push ebx
push str._s_s
jmp 0x4013eb
call esi
mov edx, eax
push ebx
mov dword [ebp + 8], edx
call esi
mov ecx, dword [ebp + 8]
lea eax, [ecx + eax + 1]
push eax
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
pop ecx
mov dword [ebp + 8], eax
push edi
call esi
mov ebx, 0x407bb8
mov edx, eax
push ebx
mov dword [ebp - 8], edx
call esi
mov ecx, dword [ebp - 8]
lea eax, [ecx + eax + 1]
push eax
push 0
push dword [ebp + 8]
call sub.MSVCRT.dll_memset
add esp, 0xc
push edi
push ebx
push 0x4070c8
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_wsprintfA]
and byte [ebp - 0x34], 0
xor eax, eax
lea edi, [ebp - 0x33]
add esp, 0x10
stosd dword es:[edi], eax
push dword [ebp + 8]
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
stosd dword es:[edi], eax
stosb byte es:[edi], al
lea eax, [ebp - 0x34]
push 0xa
push eax
push 0x407df0
mov ebx, str.WebEx
push str.OnlySetupClient
push ebx
call esi
lea eax, [ebp - 0x34]
test eax, eax
lea eax, [ebp - 0x34]
jne 0x401433
mov eax, 0x4070ac
push eax
call dword [sym.imp.MSVCRT.dll_atoi]
and byte [ebp - 0x50], 0
mov dword [ebp - 4], eax
xor eax, eax
lea edi, [ebp - 0x4f]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
pop ecx
push dword [ebp + 8]
stosb byte es:[edi], al
lea eax, [ebp - 0x50]
push 0xa
mov edi, 0x407df0
push eax
push edi
push str.MeetingStartType
push ebx
call esi
lea eax, [ebp - 0x50]
test eax, eax
lea eax, [ebp - 0x50]
jne 0x401470
mov eax, 0x4070ac
push eax
call dword [sym.imp.MSVCRT.dll_atoi]
cmp eax, 3
pop ecx
mov dword [ebp - 0x38], eax
jne 0x40148a
cmp dword [ebp - 4], 0
je 0x40148a
and dword [ebp - 4], 0
push 0x407094
push 0x407cbc
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x401739
cmp dword [ebp - 4], eax
jne 0x401739
push 0x4280
mov dword [ebp - 0x1c], 0xc8
mov dword [ebp - 0x18], 0x1c2
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
test eax, eax
pop ecx
je 0x4014d4
mov ecx, eax
call fcn.00402911
mov dword [ebp - 4], eax
jmp 0x4014d8
and dword [ebp - 4], 0
mov eax, dword [ebp - 4]
test eax, eax
mov dword [ebp - 0x28], eax
je 0x401739
push 0x407094
push 0x407cbc
call dword [sym.imp.KERNEL32.dll_lstrcmpiA]
test eax, eax
jne 0x401515
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1c], 0x2fa
mov dword [ebp - 0x18], 0x1dc
mov dword [eax + 0x2250], 1
push dword [ebp + 8]
lea eax, [ebp - 0x44]
push 0xa
push eax
push edi
push str.HOST
push ebx
call esi
lea eax, [ebp - 0x44]
test eax, eax
lea eax, [ebp - 0x44]
jne 0x401536
mov eax, 0x407088
push eax
call dword [sym.imp.MSVCRT.dll_atoi]
test eax, eax
pop ecx
jne 0x401550
mov dword [ebp - 0x1c], 0x210
mov dword [ebp - 0x18], 0x176
and byte [ebp - 0xf0], 0
push 0xf
pop ecx
xor eax, eax
lea edi, [ebp - 0xef]
push dword [ebp + 8]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0xf0]
push 0x40
push eax
push 0x407df0
push str.IS_API_MODE
push ebx
call esi
lea eax, [ebp - 0xf0]
test eax, eax
lea eax, [ebp - 0xf0]
jne 0x401595
mov eax, 0x4070ac
push eax
call dword [sym.imp.MSVCRT.dll_atoi]
and byte [ebp - 0xb0], 0
pop ecx
push 0xf
mov dword [0x407dc0], eax
mov dword [ebp - 8], eax
pop ecx
xor eax, eax
lea edi, [ebp - 0xaf]
rep stosd dword es:[edi], eax
push dword [ebp + 8]
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0xb0]
push 0x40
push eax
push 0x407df0
push str.SCSettingEx
push ebx
call esi
lea eax, [ebp - 0xb0]
test eax, eax
lea eax, [ebp - 0xb0]
jne 0x4015ea
mov eax, 0x4070ac
push eax
call dword [sym.imp.MSVCRT.dll_atol]
mov edi, eax
lea eax, [ebp - 0x44]
test eax, eax
pop ecx
lea eax, [ebp - 0x44]
jne 0x401603
mov eax, 0x407088
mov esi, dword [sym.imp.MSVCRT.dll_atoi]
push eax
call esi
test eax, eax
pop ecx
je 0x401620
test edi, 0x400000
jne 0x401620
mov dword [ebp - 8], 1
lea eax, [ebp - 0x34]
test eax, eax
lea eax, [ebp - 0x34]
jne 0x40162f
mov eax, 0x4070ac
push eax
call esi
cmp dword [ebp - 0x38], 3
pop ecx
jne 0x401648
xor edi, edi
cmp eax, edi
je 0x40164a
mov dword [ebp - 8], 1
jmp 0x40164a
xor edi, edi
cmp dword [ebp - 8], edi
je 0x4016a3
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], edi
call dword [sym.imp.USER32.dll_GetDesktopWindow]
cmp dword [0x407050], edi
mov ebx, eax
jne 0x40166b
mov dword [0x407050], edi
mov esi, dword [ebp - 4]
lea eax, [esi + 0x1c]
push eax
push 0x407020
push 0x407618
call fcn.00401a11
push edi
push eax
push edi
push edi
push 0x80ca0008
lea eax, [ebp - 0x24]
push edi
push eax
push ebx
mov ecx, esi
call fcn.00401924
push edi
push dword [esi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x4016e5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
cmp dword [0x407050], edi
mov ebx, eax
jne 0x4016b9
mov dword [0x407050], edi
mov esi, dword [ebp - 4]
lea eax, [esi + 0x1c]
push eax
push 0x407020
push 0x407618
call fcn.00401a11
push edi
push eax
push edi
push edi
push 0x90ca0000
lea eax, [ebp - 0x24]
push edi
push eax
push ebx
mov ecx, esi
call fcn.00401924
and byte [ebp - 0x1f0], 0
push 0x3f
pop ecx
xor eax, eax
lea edi, [ebp - 0x1ef]
push 0x100
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x1f0]
push eax
push 0x65
push dword [0x407620]
call dword [sym.imp.USER32.dll_LoadStringA]
lea eax, [ebp - 0x1f0]
push eax
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SetWindowTextA]
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push dword [esi + 4]
call fcn.0040110a
pop ecx
pop ecx
jmp 0x40173d
and dword [ebp - 0x10], 0
cmp dword [ebp + 8], 0
je 0x40174c
push dword [ebp + 8]
call sub.MSVCRT.dll_void___cdecl_operator_delete_void__
pop ecx
push dword [ebp - 0xc]
call dword [sym.imp.MSVCRT.dll_free]
xor edi, edi
pop ecx
cmp dword [ebp - 0x10], edi
je 0x4017be
mov ebx, dword [sym.imp.USER32.dll_GetMessageA]
push edi
push edi
lea eax, [ebp - 0x70]
push edi
push eax
call ebx
test eax, eax
je 0x4017b4
lea eax, [ebp - 0x70]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x70]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
mov esi, dword [ebp - 0x28]
cmp esi, edi
je 0x40179e
cmp dword [esi + 0x20], 1
je 0x4017a7
push dword [esi + 4]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x4017a7
push edi
push edi
lea eax, [ebp - 0x70]
push edi
push eax
jmp 0x40176a
cmp esi, edi
je 0x4017b4
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax + 0xc]
push 0x407618
call fcn.00401850
call dword [sym.imp.ole32.dll_CoUninitialize]
xor eax, eax
pop ebx
pop edi
pop esi
leave
ret 0x10