Function at 0x413b72
Capabilities:
Set registry value

Disassembly:
push 0x70
mov eax, 0x4665ff
call fcn.00464982
mov esi, edx
mov ebx, ecx
mov al, byte [ebp + 0x10]
lea ecx, [ebp - 0x44]
xor edi, edi
mov byte [ebp - 0x5d], al
push ebx
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x30], edi
call fcn.0040ada7
mov dword [ebp - 4], edi
xor eax, eax
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
mov edi, 0x4799c8
mov byte [ebp - 4], 1
push edi
call fcn.0043d5e8
pop ecx
push eax
push edi
lea ecx, [ebp - 0x44]
call fcn.0040b5aa
mov edi, str.Zoom.exe
push edi
call fcn.0043d5e8
pop ecx
push eax
push edi
lea ecx, [ebp - 0x44]
call fcn.0040b5aa
mov edi, 0x47b540
push edi
call fcn.0043d5e8
pop ecx
push eax
push edi
lea ecx, [ebp - 0x2c]
call fcn.0040b5aa
cmp dword [esi + 0x14], 8
mov eax, esi
jb 0x413bfc
mov eax, dword [esi]
push dword [esi + 0x10]
lea ecx, [ebp - 0x2c]
push eax
call fcn.0040b5aa
mov esi, 0x47b544
push esi
call fcn.0043d5e8
pop ecx
push eax
push esi
lea ecx, [ebp - 0x2c]
call fcn.0040b5aa
cmp byte [ebp - 0x5d], 0
je 0x413c3a
mov esi, str.__ignoremsi
push esi
call fcn.0043d5e8
pop ecx
push eax
push esi
lea ecx, [ebp - 0x2c]
call fcn.0040b5aa
xor edi, edi
mov dword [ebp - 0x7c], edi
mov dword [ebp - 0x78], edi
mov dword [ebp - 0x74], edi
mov esi, 0x2001f
mov byte [ebp - 4], 2
push esi
push str.SoftwareMicrosoftWindowsCurrentVersionUninstall
push SysReAllocString
lea ecx, [ebp - 0x7c]
call fcn.00408cbb
test eax, eax
je 0x413d03
push esi
push str.SoftwareMicrosoftWindowsCurrentVersion
push SysReAllocString
lea ecx, [ebp - 0x7c]
call fcn.00408cbb
mov esi, eax
test esi, esi
jne 0x413ca1
push ecx
push ecx
push 0x2001f
push ecx
push ecx
push str.Uninstall
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x7c]
call fcn.00408c53
mov esi, eax
test esi, esi
je 0x413cfe
push 0x178
push str.c:jenkinsworkspaceClientClientWindows_releaseclient_srcinstallwindowsIncludeZoomRegUtil.cpp
push 2
lea ecx, [ebp - 0x64]
call fcn.0040c45a
mov byte [ebp - 4], 6
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push esi
push ecx
mov edx, str._RegZoomInstaller__failed_to_create_uninstall_home__ret:
mov ecx, 0x490290
call fcn.0040635c
pop ecx
mov ecx, eax
call fcn.00416564
push ecx
mov edx, 0x47b4e4
mov ecx, eax
call fcn.0040635c
pop ecx
mov ecx, eax
call fcn.0040719b
lea ecx, [ebp - 0x64]
call fcn.0040c5f9
mov edi, dword [ebp - 0x7c]
jmp 0x413f08
mov esi, 0x2001f
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x68], edi
push ecx
push ecx
push esi
push ecx
push ecx
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x70]
mov edi, dword [ebp - 0x7c]
push str.ZoomUMX
push edi
call fcn.00408c53
mov esi, eax
test esi, esi
jne 0x413e98
cmp dword [ebp - 0x30], 8
lea eax, [ebp - 0x44]
push ecx
cmovae eax, dword [ebp - 0x44]
lea ecx, [ebp - 0x70]
push eax
push str.DisplayIcon
call fcn.00408d87
cmp byte [ebp - 0x5d], 0
mov eax, str.Zoom_5.0
push ecx
mov ecx, str.Zoom
cmove eax, ecx
lea ecx, [ebp - 0x70]
push eax
push str.DisplayName
call fcn.00408d87
push str.5.7.4.804
lea ecx, [ebp - 0x5c]
call fcn.0040a58e
mov esi, str.5.7.4__804_
mov byte [ebp - 4], 4
push esi
call fcn.0043d5e8
pop ecx
push eax
push esi
lea ecx, [ebp - 0x5c]
call fcn.0040ad3b
cmp dword [ebp - 0x48], 8
lea eax, [ebp - 0x5c]
push ecx
cmovae eax, dword [ebp - 0x5c]
lea ecx, [ebp - 0x70]
push eax
push str.DisplayVersion
call fcn.00408d87
mov esi, dword [ebp - 0x70]
lea eax, [ebp - 0x64]
push 4
push eax
push 4
push 0
push str.EstimatedSize
push esi
mov dword [ebp - 0x64], 0x2710
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push ecx
push str.https:__support.zoom.us_home
push str.HelpLink
lea ecx, [ebp - 0x70]
call fcn.00408d87
push ecx
push str.https:__zoom.us
push str.URLInfoAbout
lea ecx, [ebp - 0x70]
call fcn.00408d87
push ecx
push str.https:__zoom.us
push str.URLUpdateInfo
lea ecx, [ebp - 0x70]
call fcn.00408d87
push ecx
push 0x4790e0
push str.Publisher
lea ecx, [ebp - 0x70]
call fcn.00408d87
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
push ecx
cmovae eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x70]
push eax
push str.UninstallString
call fcn.00408d87
cmp dword [ebx + 0x14], 8
jb 0x413e39
mov ebx, dword [ebx]
push ecx
push ebx
push str.InstallLocation
lea ecx, [ebp - 0x70]
call fcn.00408d87
push 4
pop ebx
push ebx
lea eax, [ebp - 0x64]
mov dword [ebp - 0x64], 1
push eax
push ebx
push 0
push str.NoModify
push esi
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push ebx
lea eax, [ebp - 0x64]
mov dword [ebp - 0x64], 1
push eax
push ebx
push 0
push str.NoRepair
push esi
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
test esi, esi
je 0x413e8e
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor esi, esi
lea ecx, [ebp - 0x5c]
call fcn.0040acc1
jmp 0x413ef0
push 0x173
push str.c:jenkinsworkspaceClientClientWindows_releaseclient_srcinstallwindowsIncludeZoomRegUtil.cpp
push 2
lea ecx, [ebp - 0x64]
call fcn.0040c45a
mov byte [ebp - 4], 5
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push esi
push ecx
mov edx, str._RegZoomInstaller__failed_to_create_uninstall_home1__ret:
mov ecx, 0x490290
call fcn.0040635c
pop ecx
mov ecx, eax
call fcn.00416564
push ecx
mov edx, 0x47b4e4
mov ecx, eax
call fcn.0040635c
pop ecx
mov ecx, eax
call fcn.0040719b
lea ecx, [ebp - 0x64]
call fcn.0040c5f9
mov esi, dword [ebp - 0x70]
test edi, edi
je 0x413efd
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor edi, edi
test esi, esi
je 0x413f08
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test edi, edi
je 0x413f13
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x18]
cmp eax, 8
jb 0x413f2d
lea eax, [eax*2 + 2]
push eax
push dword [ebp - 0x2c]
call fcn.00403711
pop ecx
pop ecx
and dword [ebp - 0x1c], 0
xor eax, eax
mov word [ebp - 0x2c], ax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x18], 7
cmp eax, 8
jb 0x413f58
lea eax, [eax*2 + 2]
push eax
push dword [ebp - 0x44]
call fcn.00403711
pop ecx
pop ecx
call fcn.0046493d
ret