Function at 0x41353f
Capabilities:
Delete registry value

Disassembly:
push 0x3c
mov eax, 0x46303c
call fcn.00461432
mov edi, edx
push 0x2bd
push str.C:zoomcodeEP_2017Client_srcinstallwindowsIncludeZoomRegUtil.cpp
xor ebx, ebx
lea ecx, [ebp - 0x2c]
push ebx
call fcn.0040c17a
mov dword [ebp - 4], ebx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ebx
push ecx
mov edx, str._UnregMIMEZoommtg__Start__forAllUser:
mov ecx, 0x48b250
call fcn.0040b4dd
pop ecx
mov ecx, eax
call fcn.0040a0bd
mov edx, str._UserSID:
mov ecx, eax
call fcn.0040b4dd
mov edx, edi
mov ecx, eax
call fcn.0040b69e
push ecx
mov edx, str.error_code:
mov ecx, eax
call fcn.0040b4dd
pop ecx
mov ecx, eax
call fcn.00409ec1
lea ecx, [ebp - 0x2c]
call fcn.0040c319
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], ebx
push edi
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], 1
call fcn.00411d46
lea ecx, [ebp - 0x38]
mov dword [esp], str.ZoomLauncher
call fcn.00411b12
push 0x2c5
push str.C:zoomcodeEP_2017Client_srcinstallwindowsIncludeZoomRegUtil.cpp
push ebx
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.0040c17a
mov byte [ebp - 4], 2
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push esi
push ecx
mov edx, str._UnregMIMEZoommtg__Remove_mtg_root_ret:
mov ecx, 0x48b190
call fcn.00405dcc
pop ecx
mov ecx, eax
call fcn.00414d8e
push ecx
mov edx, 0x477284
mov ecx, eax
call fcn.00405dcc
pop ecx
mov ecx, eax
call fcn.00406c0b
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 1
call fcn.0040c319
push str..zoommtg
lea ecx, [ebp - 0x38]
call fcn.00411b12
push 0x2ca
push str.C:zoomcodeEP_2017Client_srcinstallwindowsIncludeZoomRegUtil.cpp
push ebx
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.0040c17a
mov byte [ebp - 4], 3
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push esi
push ecx
mov edx, str._UnregMIMEZoommtg__Remove_mtg_postfix_ret:
mov ecx, 0x48b190
call fcn.00405dcc
pop ecx
mov ecx, eax
call fcn.00414d8e
push ecx
mov edx, 0x477284
mov ecx, eax
call fcn.00405dcc
pop ecx
mov ecx, eax
call fcn.00406c0b
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 1
call fcn.0040c319
xor eax, eax
mov dword [ebp - 0x18], ebx
push str.MIMEDatabaseContent_Type_
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
call fcn.0040aa0b
push str.application_x_zoommtg_launcher
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 4
call fcn.0040a1bb
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x38]
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.00411b12
push 0x2d2
push str.C:zoomcodeEP_2017Client_srcinstallwindowsIncludeZoomRegUtil.cpp
push ebx
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.0040c17a
mov byte [ebp - 4], 5
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push esi
push ecx
mov edx, str._UnregMIMEZoommtg__Remove_launcher_ret:
mov ecx, 0x48b190
call fcn.00405dcc
pop ecx
mov ecx, eax
call fcn.00414d8e
push ecx
mov edx, 0x477284
mov ecx, eax
call fcn.00405dcc
pop ecx
mov ecx, eax
call fcn.00406c0b
lea ecx, [ebp - 0x2c]
call fcn.0040c319
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], ebx
push str.SOFTWAREMicrosoftWindowsCurrentVersionInternet_Settings5.0User_AgentPost_Platform
push edi
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 6
call fcn.00411be2
mov esi, dword [ebp - 0x44]
mov edi, eax
pop ecx
pop ecx
test edi, edi
jne 0x41377f
push str.Zoom_3.6.0
push esi
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov edi, eax
test esi, esi
je 0x41377c
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, ebx
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x40], ebx
push 0x2df
push str.C:zoomcodeEP_2017Client_srcinstallwindowsIncludeZoomRegUtil.cpp
push ebx
lea ecx, [ebp - 0x48]
call fcn.0040c17a
mov byte [ebp - 4], 7
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push edi
push ecx
mov edx, str._UnregMIMEZoommtg__Remove_user_agent_postfix_ret:
mov ecx, 0x48b190
call fcn.00405dcc
pop ecx
mov ecx, eax
call fcn.00414d8e
push ecx
mov edx, 0x477284
mov ecx, eax
call fcn.00405dcc
pop ecx
mov ecx, eax
call fcn.00406c0b
lea ecx, [ebp - 0x48]
call fcn.0040c319
test esi, esi
je 0x4137de
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x4137f8
lea eax, [eax*2 + 2]
push eax
push dword [ebp - 0x28]
call fcn.004031ab
pop ecx
pop ecx
xor eax, eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp dword [ebp - 0x38], eax
je 0x413816
push dword [ebp - 0x38]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call fcn.004613ed
ret