Function at 0x41500f
Capabilities:
Delete registry value

Disassembly:
push 0x3c
mov eax, 0x466839
call fcn.00464982
mov edi, edx
push 0x334
push str.c:jenkinsworkspaceClientClientWindows_releaseclient_srcinstallwindowsIncludeZoomRegUtil.cpp
xor ebx, ebx
lea ecx, [ebp - 0x2c]
push ebx
call fcn.0040c45a
mov dword [ebp - 4], ebx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ebx
push ecx
mov edx, str._UnregMIMEZoommtg__Start__forAllUser:
mov ecx, 0x490340
call fcn.0040b7dd
pop ecx
mov ecx, eax
call fcn.0040a41c
mov edx, str._UserSID:
mov ecx, eax
call fcn.0040b7dd
mov edx, edi
mov ecx, eax
call fcn.0040b99e
push ecx
mov edx, str.error_code:
mov ecx, eax
call fcn.0040b7dd
pop ecx
mov ecx, eax
call fcn.0040a220
lea ecx, [ebp - 0x2c]
call fcn.0040c5f9
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], ebx
push edi
lea ecx, [ebp - 0x38]
mov dword [ebp - 4], 1
call fcn.0041384f
lea ecx, [ebp - 0x38]
mov dword [esp], str.ZoomLauncher
call fcn.0041360f
push 0x33c
push str.c:jenkinsworkspaceClientClientWindows_releaseclient_srcinstallwindowsIncludeZoomRegUtil.cpp
push ebx
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.0040c45a
mov byte [ebp - 4], 2
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push esi
push ecx
mov edx, str._UnregMIMEZoommtg__Remove_mtg_root_ret:
mov ecx, 0x490290
call fcn.0040635c
pop ecx
mov ecx, eax
call fcn.00416564
push ecx
mov edx, 0x47b4e4
mov ecx, eax
call fcn.0040635c
pop ecx
mov ecx, eax
call fcn.0040719b
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 1
call fcn.0040c5f9
push str..zoommtg
lea ecx, [ebp - 0x38]
call fcn.0041360f
push 0x341
push str.c:jenkinsworkspaceClientClientWindows_releaseclient_srcinstallwindowsIncludeZoomRegUtil.cpp
push ebx
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.0040c45a
mov byte [ebp - 4], 3
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push esi
push ecx
mov edx, str._UnregMIMEZoommtg__Remove_mtg_postfix_ret:
mov ecx, 0x490290
call fcn.0040635c
pop ecx
mov ecx, eax
call fcn.00416564
push ecx
mov edx, 0x47b4e4
mov ecx, eax
call fcn.0040635c
pop ecx
mov ecx, eax
call fcn.0040719b
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 1
call fcn.0040c5f9
push str.MIMEDatabaseContent_Type_
lea ecx, [ebp - 0x28]
call fcn.0040a58e
mov esi, str.application_x_zoommtg_launcher
mov byte [ebp - 4], 4
push esi
call fcn.0043d5e8
pop ecx
push eax
push esi
lea ecx, [ebp - 0x28]
call fcn.0040b5aa
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x38]
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.0041360f
push 0x349
push str.c:jenkinsworkspaceClientClientWindows_releaseclient_srcinstallwindowsIncludeZoomRegUtil.cpp
push ebx
lea ecx, [ebp - 0x2c]
mov esi, eax
call fcn.0040c45a
mov byte [ebp - 4], 5
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push esi
push ecx
mov edx, str._UnregMIMEZoommtg__Remove_launcher_ret:
mov ecx, 0x490290
call fcn.0040635c
pop ecx
mov ecx, eax
call fcn.00416564
push ecx
mov edx, 0x47b4e4
mov ecx, eax
call fcn.0040635c
pop ecx
mov ecx, eax
call fcn.0040719b
lea ecx, [ebp - 0x2c]
call fcn.0040c5f9
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], ebx
push str.SOFTWAREMicrosoftWindowsCurrentVersionInternet_Settings5.0User_AgentPost_Platform
push edi
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 6
call fcn.004136df
mov esi, dword [ebp - 0x44]
mov edi, eax
pop ecx
pop ecx
test edi, edi
jne 0x415248
push str.Zoom_3.6.0
push esi
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueW]
mov edi, eax
test esi, esi
je 0x415245
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esi, ebx
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x40], ebx
push 0x356
push str.c:jenkinsworkspaceClientClientWindows_releaseclient_srcinstallwindowsIncludeZoomRegUtil.cpp
push ebx
lea ecx, [ebp - 0x48]
call fcn.0040c45a
mov byte [ebp - 4], 7
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push edi
push ecx
mov edx, str._UnregMIMEZoommtg__Remove_user_agent_postfix_ret:
mov ecx, 0x490290
call fcn.0040635c
pop ecx
mov ecx, eax
call fcn.00416564
push ecx
mov edx, 0x47b4e4
mov ecx, eax
call fcn.0040635c
pop ecx
mov ecx, eax
call fcn.0040719b
lea ecx, [ebp - 0x48]
call fcn.0040c5f9
test esi, esi
je 0x4152a7
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [ebp - 0x28]
call fcn.0040acc1
cmp dword [ebp - 0x38], 0
je 0x4152be
push dword [ebp - 0x38]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call fcn.0046493d
ret