Function at 0x412ba5
Capabilities:
Set registry value

Disassembly:
push 0x7c
mov eax, 0x473398
call fcn.00470dac
mov esi, edx
mov ebx, ecx
mov dword [ebp - 0x64], ebx
test ebx, ebx
je 0x41315c
xor edi, edi
mov dword [ebp - 0x88], edi
mov dword [ebp - 0x84], edi
mov dword [ebp - 0x80], edi
push 0x2001f
push str.SoftwareClasses
push SysReAllocString
lea ecx, [ebp - 0x88]
mov dword [ebp - 4], edi
call fcn.0040477b
cmp byte [ebp + 0xc], 0
jne 0x413077
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x68], edi
push ecx
push ecx
push 0x2001f
push ecx
push ecx
push ebx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x70]
mov ebx, dword [ebp - 0x88]
push ebx
call fcn.00404713
mov edi, eax
test edi, edi
jne 0x413010
push ecx
push str.URL:Zoom_Launcher
push eax
lea ecx, [ebp - 0x70]
call fcn.00404847
push ecx
push 0x4863a4
push str.URL_Protocol
lea ecx, [ebp - 0x70]
call fcn.00404847
push 4
lea eax, [ebp - 0x60]
mov dword [ebp - 0x60], 1
push eax
push 4
push edi
mov edi, dword [ebp - 0x70]
push str.UseOriginalUrlEncoding
push edi
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
xor eax, eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], eax
push ecx
push ecx
push 0x2001f
push ecx
push ecx
push str.DefaultIcon
push edi
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 2
call fcn.00404713
mov dword [ebp - 0x60], eax
test eax, eax
jne 0x412d43
push 0x4873d4
lea ecx, [ebp - 0x28]
call fcn.0040639f
mov byte [ebp - 4], 3
mov eax, esi
cmp dword [esi + 0x14], 8
jb 0x412cb5
mov eax, dword [esi]
push dword [esi + 0x10]
lea ecx, [ebp - 0x28]
push eax
call fcn.00404346
push 0x485444
call fcn.0044c8a9
pop ecx
push eax
push 0x485444
lea ecx, [ebp - 0x28]
call fcn.00404346
push str.Zoom.exe
call fcn.0044c8a9
pop ecx
push eax
push str.Zoom.exe
lea ecx, [ebp - 0x28]
call fcn.00404346
push 0x487e0c
call fcn.0044c8a9
pop ecx
push eax
push 0x487e0c
lea ecx, [ebp - 0x28]
call fcn.00404346
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
push ecx
cmovae eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x7c]
push eax
push 0
call fcn.00404847
mov eax, dword [ebp - 0x7c]
test eax, eax
je 0x412d35
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
and dword [ebp - 0x7c], 0
and dword [ebp - 0x78], 0
lea ecx, [ebp - 0x28]
call fcn.004042cc
jmp 0x412d9a
push 0x24e
push str.c:jenkinsworkspaceClientClientWindows_releasewin_common_srcinstallerIncludeZoomRegUtil.cpp
push 2
lea ecx, [ebp - 0x5c]
call fcn.0040808d
mov byte [ebp - 4], 4
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebp - 0x60]
mov edx, str._RegZoomAppProtocol__failed_to_create_app_protocol_home__defaultIcon__ret:
push ecx
mov ecx, 0x49f3a0
call fcn.00403a1c
pop ecx
mov ecx, eax
call fcn.00411296
push ecx
mov edx, 0x48793c
mov ecx, eax
call fcn.00403a1c
pop ecx
mov ecx, eax
call fcn.0040217e
lea ecx, [ebp - 0x5c]
call fcn.0040822b
xor eax, eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], eax
push ecx
push ecx
push 0x2001f
push ecx
push ecx
push str.shell
push edi
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 5
call fcn.00404713
mov dword [ebp - 0x5c], eax
test eax, eax
jne 0x412f03
push ecx
push ecx
push 0x2001f
push ecx
push ecx
push str.open
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1c]
call fcn.00404713
mov dword [ebp - 0x5c], eax
test eax, eax
jne 0x412e9a
push ecx
push ecx
push 0x2001f
push ecx
push ecx
push str.command
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1c]
call fcn.00404713
test eax, eax
jne 0x412ef1
push 0x4873d4
lea ecx, [ebp - 0x40]
call fcn.0040639f
mov byte [ebp - 4], 6
mov eax, esi
cmp dword [esi + 0x14], 8
jb 0x412e2b
mov eax, dword [esi]
push dword [esi + 0x10]
lea ecx, [ebp - 0x40]
push eax
call fcn.00404346
mov esi, 0x485444
push esi
call fcn.0044c8a9
pop ecx
push eax
push esi
lea ecx, [ebp - 0x40]
call fcn.00404346
mov esi, str.Zoom.exe
push esi
call fcn.0044c8a9
pop ecx
push eax
push esi
lea ecx, [ebp - 0x40]
call fcn.00404346
mov esi, str._____url_1_
push esi
call fcn.0044c8a9
pop ecx
push eax
push esi
lea ecx, [ebp - 0x40]
call fcn.00404346
cmp dword [ebp - 0x2c], 8
lea eax, [ebp - 0x40]
push ecx
cmovae eax, dword [ebp - 0x40]
lea ecx, [ebp - 0x1c]
push eax
push 0
call fcn.00404847
lea ecx, [ebp - 0x40]
call fcn.004042cc
jmp 0x412ef1
push 0x264
push str.c:jenkinsworkspaceClientClientWindows_releasewin_common_srcinstallerIncludeZoomRegUtil.cpp
push 2
lea ecx, [ebp - 0x60]
call fcn.0040808d
mov byte [ebp - 4], 7
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebp - 0x5c]
mov edx, str._RegZoomAppProtocol__failed_to_create_app_protocol___shell_open_command__ret:
push ecx
mov ecx, 0x49f3a0
call fcn.00403a1c
pop ecx
mov ecx, eax
call fcn.00411296
push ecx
mov edx, 0x48793c
mov ecx, eax
call fcn.00403a1c
pop ecx
mov ecx, eax
call fcn.0040217e
lea ecx, [ebp - 0x60]
call fcn.0040822b
mov esi, dword [ebp - 0x1c]
test esi, esi
je 0x412f5d
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor esi, esi
jmp 0x412f5d
push 0x269
push str.c:jenkinsworkspaceClientClientWindows_releasewin_common_srcinstallerIncludeZoomRegUtil.cpp
push 2
lea ecx, [ebp - 0x60]
call fcn.0040808d
mov byte [ebp - 4], 8
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push dword [ebp - 0x5c]
mov edx, str._RegZoomAppProtocol__failed_to_create_app_protocol_shell__ret:
push ecx
mov ecx, 0x49f3a0
call fcn.00403a1c
pop ecx
mov ecx, eax
call fcn.00411296
push ecx
mov edx, 0x48793c
mov ecx, eax
call fcn.00403a1c
pop ecx
mov ecx, eax
call fcn.0040217e
lea ecx, [ebp - 0x60]
call fcn.0040822b
mov esi, dword [ebp - 0x1c]
test edi, edi
je 0x412f6a
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor edi, edi
test esi, esi
je 0x412f75
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x7c]
test eax, eax
je 0x412f83
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test edi, edi
je 0x412f8e
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor edi, edi
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x68], edi
push str.SoftwareMicrosoftInternet_ExplorerProtocolExecute_
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0xb
call fcn.0040639f
mov byte [ebp - 4], 0xc
mov esi, dword [ebp - 0x64]
push esi
call fcn.0044c8a9
pop ecx
push eax
push esi
lea ecx, [ebp - 0x58]
call fcn.00404346
cmp dword [ebp - 0x44], 8
lea eax, [ebp - 0x58]
push ecx
cmovae eax, dword [ebp - 0x58]
push ecx
push 0x2001f
push ecx
push ecx
push eax
push SysReAllocString
lea ecx, [ebp - 0x70]
call fcn.00404713
mov esi, dword [ebp - 0x70]
mov edi, eax
test edi, edi
jne 0x4130e9
and dword [ebp - 0x64], 0
lea eax, [ebp - 0x64]
push 4
push eax
push 4
push 0
push str.WarnOnOpen
push esi
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
jmp 0x41313e
push 0x26e
push str.c:jenkinsworkspaceClientClientWindows_releasewin_common_srcinstallerIncludeZoomRegUtil.cpp
push 2
lea ecx, [ebp - 0x5c]
call fcn.0040808d
mov byte [ebp - 4], 9
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push edi
push ecx
mov edx, str._RegZoomAppProtocol__failed_to_create_app_protocol_home__ret:
mov ecx, 0x49f3a0
call fcn.00403a1c
pop ecx
mov ecx, eax
call fcn.00411296
push ecx
mov edx, 0x48793c
mov ecx, eax
call fcn.00403a1c
pop ecx
mov ecx, eax
call fcn.0040217e
lea ecx, [ebp - 0x5c]
call fcn.0040822b
cmp dword [ebp - 0x70], 0
je 0x413151
push dword [ebp - 0x70]
jmp 0x41314b
push ebx
lea ecx, [ebp - 0x88]
call fcn.00411f55
mov esi, eax
test esi, esi
je 0x4130de
push 0x275
push str.c:jenkinsworkspaceClientClientWindows_releasewin_common_srcinstallerIncludeZoomRegUtil.cpp
push 2
lea ecx, [ebp - 0x5c]
call fcn.0040808d
mov byte [ebp - 4], 0xa
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push esi
push ecx
mov edx, str._RegZoomAppProtocol__failed_to_RecurseDeleteKey__ret:
mov ecx, 0x49f3a0
call fcn.00403a1c
pop ecx
mov ecx, eax
call fcn.00411296
push ecx
mov edx, 0x48793c
mov ecx, eax
call fcn.00403a1c
pop ecx
mov ecx, eax
call fcn.0040217e
lea ecx, [ebp - 0x5c]
call fcn.0040822b
mov ebx, dword [ebp - 0x88]
jmp 0x412f90
push 0x297
push str.c:jenkinsworkspaceClientClientWindows_releasewin_common_srcinstallerIncludeZoomRegUtil.cpp
push 2
lea ecx, [ebp - 0x64]
call fcn.0040808d
mov byte [ebp - 4], 0xd
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push edi
push ecx
mov edx, str._RegZoomAppProtocol__failed_to_set_WarnOnOpen:
mov ecx, 0x49f3a0
call fcn.00403a1c
pop ecx
mov ecx, eax
call fcn.00411296
push ecx
mov edx, 0x48793c
mov ecx, eax
call fcn.00403a1c
pop ecx
mov ecx, eax
call fcn.0040217e
lea ecx, [ebp - 0x64]
call fcn.0040822b
lea ecx, [ebp - 0x58]
call fcn.004042cc
test esi, esi
je 0x413151
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test ebx, ebx
je 0x41315c
push ebx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call fcn.00470d5b
ret