Function at 0x412084
Capabilities:
Set registry value

Disassembly:
push 0x70
mov eax, 0x462e02
call fcn.00461432
mov esi, edx
mov ebx, ecx
mov al, byte [ebp + 0x10]
lea ecx, [ebp - 0x5c]
xor edi, edi
mov byte [ebp - 0x5d], al
push ebx
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x48], edi
call fcn.0040aaae
mov dword [ebp - 4], edi
xor eax, eax
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
push 0x4757d8
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 1
call fcn.0040a1bb
push str.Zoom.exe
lea ecx, [ebp - 0x5c]
call fcn.0040a1bb
push 0x4772e0
lea ecx, [ebp - 0x2c]
call fcn.0040a1bb
cmp dword [esi + 0x14], 8
mov eax, esi
jb 0x4120f3
mov eax, dword [esi]
push dword [esi + 0x10]
lea ecx, [ebp - 0x2c]
push eax
call fcn.0040b2aa
push 0x4772e4
lea ecx, [ebp - 0x2c]
call fcn.0040a1bb
cmp byte [ebp - 0x5d], 0
je 0x41211f
push str.__ignoremsi
lea ecx, [ebp - 0x2c]
call fcn.0040a1bb
mov dword [ebp - 0x7c], edi
mov dword [ebp - 0x78], edi
mov dword [ebp - 0x74], edi
mov esi, 0x2001f
mov byte [ebp - 4], 2
push esi
push str.SoftwareMicrosoftWindowsCurrentVersionUninstall
push SysReAllocString
lea ecx, [ebp - 0x7c]
call fcn.0040872b
test eax, eax
je 0x4121e6
push esi
push str.SoftwareMicrosoftWindowsCurrentVersion
push SysReAllocString
lea ecx, [ebp - 0x7c]
call fcn.0040872b
mov esi, eax
test esi, esi
jne 0x412184
push ecx
push ecx
push 0x2001f
push ecx
push ecx
push str.Uninstall
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x7c]
call fcn.004086c3
mov esi, eax
test esi, esi
je 0x4121e1
push 0x145
push str.C:zoomcodeEP_2017Client_srcinstallwindowsIncludeZoomRegUtil.cpp
push 2
lea ecx, [ebp - 0x64]
call fcn.0040c17a
mov byte [ebp - 4], 6
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push esi
push ecx
mov edx, str._RegZoomInstaller__failed_to_create_uninstall_home__ret:
mov ecx, 0x48b190
call fcn.00405dcc
pop ecx
mov ecx, eax
call fcn.00414d8e
push ecx
mov edx, 0x477284
mov ecx, eax
call fcn.00405dcc
pop ecx
mov ecx, eax
call fcn.00406c0b
lea ecx, [ebp - 0x64]
call fcn.0040c319
mov edi, dword [ebp - 0x7c]
jmp 0x412403
mov esi, 0x2001f
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x68], edi
push ecx
push ecx
push esi
push ecx
push ecx
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x70]
mov edi, dword [ebp - 0x7c]
push str.ZoomUMX
push edi
call fcn.004086c3
mov esi, eax
test esi, esi
jne 0x412393
cmp dword [ebp - 0x48], 8
lea eax, [ebp - 0x5c]
push ecx
cmovae eax, dword [ebp - 0x5c]
lea ecx, [ebp - 0x70]
push eax
push str.DisplayIcon
call fcn.004087f7
cmp byte [ebp - 0x5d], 0
mov eax, str.Zoom_5.0
push ecx
mov ecx, str.Zoom
cmove eax, ecx
lea ecx, [ebp - 0x70]
push eax
push str.DisplayName
call fcn.004087f7
and dword [ebp - 0x34], esi
lea ecx, [ebp - 0x44]
xor eax, eax
mov dword [ebp - 0x30], 7
push str.5.4.58891.1115
mov word [ebp - 0x44], ax
call fcn.0040aa0b
push str.5.4.3__58891.1115_
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 4
call fcn.0040aa0b
cmp dword [ebp - 0x30], 8
lea eax, [ebp - 0x44]
push ecx
cmovae eax, dword [ebp - 0x44]
lea ecx, [ebp - 0x70]
push eax
push str.DisplayVersion
call fcn.004087f7
push 4
lea eax, [ebp - 0x64]
mov dword [ebp - 0x64], 0x2710
push eax
push 4
push esi
mov esi, dword [ebp - 0x70]
push str.EstimatedSize
push esi
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push ecx
push str.https:__support.zoom.us_home
push str.HelpLink
lea ecx, [ebp - 0x70]
call fcn.004087f7
push ecx
push str.https:__zoom.us
push str.URLInfoAbout
lea ecx, [ebp - 0x70]
call fcn.004087f7
push ecx
push str.https:__zoom.us
push str.URLUpdateInfo
lea ecx, [ebp - 0x70]
call fcn.004087f7
push ecx
push 0x474f28
push str.Publisher
lea ecx, [ebp - 0x70]
call fcn.004087f7
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push ecx
cmovae eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x70]
push eax
push str.UninstallString
call fcn.004087f7
cmp dword [ebx + 0x14], 8
jb 0x412322
mov ebx, dword [ebx]
push ecx
push ebx
push str.InstallLocation
lea ecx, [ebp - 0x70]
call fcn.004087f7
push 4
pop ebx
push ebx
lea eax, [ebp - 0x64]
mov dword [ebp - 0x64], 1
push eax
push ebx
push 0
push str.NoModify
push esi
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push ebx
lea eax, [ebp - 0x64]
mov dword [ebp - 0x64], 1
push eax
push ebx
push 0
push str.NoRepair
push esi
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test esi, esi
je 0x412377
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor esi, esi
mov eax, dword [ebp - 0x30]
cmp eax, 8
jb 0x4123eb
lea eax, [eax*2 + 2]
push eax
push dword [ebp - 0x44]
call fcn.004031ab
pop ecx
pop ecx
jmp 0x4123eb
push 0x140
push str.C:zoomcodeEP_2017Client_srcinstallwindowsIncludeZoomRegUtil.cpp
push 2
lea ecx, [ebp - 0x64]
call fcn.0040c17a
mov byte [ebp - 4], 5
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push esi
push ecx
mov edx, str._RegZoomInstaller__failed_to_create_uninstall_home1__ret:
mov ecx, 0x48b190
call fcn.00405dcc
pop ecx
mov ecx, eax
call fcn.00414d8e
push ecx
mov edx, 0x477284
mov ecx, eax
call fcn.00405dcc
pop ecx
mov ecx, eax
call fcn.00406c0b
lea ecx, [ebp - 0x64]
call fcn.0040c319
mov esi, dword [ebp - 0x70]
test edi, edi
je 0x4123f8
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor edi, edi
test esi, esi
je 0x412403
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test edi, edi
je 0x41240e
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x18]
cmp eax, 8
jb 0x412428
lea eax, [eax*2 + 2]
push eax
push dword [ebp - 0x2c]
call fcn.004031ab
pop ecx
pop ecx
and dword [ebp - 0x1c], 0
xor eax, eax
mov word [ebp - 0x2c], ax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x18], 7
cmp eax, 8
jb 0x412453
lea eax, [eax*2 + 2]
push eax
push dword [ebp - 0x5c]
call fcn.004031ab
pop ecx
pop ecx
call fcn.004613ed
ret