Function at 0x41a670
Capabilities:
Delete registry value

Disassembly:
push 0xffffffffffffffff
push 0x42aff4
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xc
push ebx
push ebp
push esi
push edi
push str..rmvb
lea ecx, [esp + 0x14]
call fcn.00401de0
lea eax, [esp + 0x18]
xor ebx, ebx
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
mov dword [esp + 0x28], ebx
call fcn.00401770
mov eax, dword [eax]
mov esi, dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
mov ebp, dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
jne 0x41a6f6
mov edi, dword [esp + 0x14]
push str.Progid
push edi
call ebp
cmp edi, ebx
je 0x41a6f6
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41a714
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x41a75e
mov edi, dword [esp + 0x14]
push str.application
push edi
call ebp
cmp edi, ebx
je 0x41a75e
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41a77c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push 3
push 0x431200
lea ecx, [esp + 0x18]
call fcn.00401c50
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x41a7d6
mov edi, dword [esp + 0x14]
push str.Progid
push edi
call ebp
cmp edi, ebx
je 0x41a7d6
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41a7f4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x41a83e
mov edi, dword [esp + 0x14]
push str.application
push edi
call ebp
cmp edi, ebx
je 0x41a83e
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41a85c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push 4
push str..mp3
lea ecx, [esp + 0x18]
call fcn.00401c50
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x41a8b6
mov edi, dword [esp + 0x14]
push str.Progid
push edi
call ebp
cmp edi, ebx
je 0x41a8b6
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41a8d4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x41a91e
mov edi, dword [esp + 0x14]
push str.application
push edi
call ebp
cmp edi, ebx
je 0x41a91e
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41a93c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push 4
push str..wma
lea ecx, [esp + 0x18]
call fcn.00401c50
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x41a996
mov edi, dword [esp + 0x14]
push str.Progid
push edi
call ebp
cmp edi, ebx
je 0x41a996
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41a9b4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x41a9fe
mov edi, dword [esp + 0x14]
push str.application
push edi
call ebp
cmp edi, ebx
je 0x41a9fe
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41aa1c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push 4
push str..wmv
lea ecx, [esp + 0x18]
call fcn.00401c50
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x41aa76
mov edi, dword [esp + 0x14]
push str.Progid
push edi
call ebp
cmp edi, ebx
je 0x41aa76
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41aa94
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x41aade
mov edi, dword [esp + 0x14]
push str.application
push edi
call ebp
cmp edi, ebx
je 0x41aade
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41aafc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push 4
push str..ape
lea ecx, [esp + 0x18]
call fcn.00401c50
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x41ab56
mov edi, dword [esp + 0x14]
push str.Progid
push edi
call ebp
cmp edi, ebx
je 0x41ab56
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41ab74
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x41abbe
mov edi, dword [esp + 0x14]
push str.application
push edi
call ebp
cmp edi, ebx
je 0x41abbe
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41abdc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push 4
push str..avi
lea ecx, [esp + 0x18]
call fcn.00401c50
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x41ac36
mov edi, dword [esp + 0x14]
push str.Progid
push edi
call ebp
cmp edi, ebx
je 0x41ac36
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41ac54
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x41ac9e
mov edi, dword [esp + 0x14]
push str.application
push edi
call ebp
cmp edi, ebx
je 0x41ac9e
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41acbc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push 3
push 0x4311d4
lea ecx, [esp + 0x18]
call fcn.00401c50
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x41ad16
mov edi, dword [esp + 0x14]
push str.Progid
push edi
call ebp
cmp edi, ebx
je 0x41ad16
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41ad34
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x41ad7e
mov edi, dword [esp + 0x14]
push str.application
push edi
call ebp
cmp edi, ebx
je 0x41ad7e
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41ad9c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push 4
push str..mkv
lea ecx, [esp + 0x18]
call fcn.00401c50
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x41adf6
mov edi, dword [esp + 0x14]
push str.Progid
push edi
call ebp
cmp edi, ebx
je 0x41adf6
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41ae14
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x41ae5e
mov edi, dword [esp + 0x14]
push str.application
push edi
call ebp
cmp edi, ebx
je 0x41ae5e
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41ae7c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push 3
push 0x4311c8
lea ecx, [esp + 0x18]
call fcn.00401c50
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x41aed6
mov edi, dword [esp + 0x14]
push str.Progid
push edi
call ebp
cmp edi, ebx
je 0x41aed6
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41aef4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x41af3e
mov edi, dword [esp + 0x14]
push str.application
push edi
call ebp
cmp edi, ebx
je 0x41af3e
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41af5c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push 4
push str..mov
lea ecx, [esp + 0x18]
call fcn.00401c50
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x41afb6
mov edi, dword [esp + 0x14]
push str.Progid
push edi
call ebp
cmp edi, ebx
je 0x41afb6
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41afd4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x41b01e
mov edi, dword [esp + 0x14]
push str.application
push edi
call ebp
cmp edi, ebx
je 0x41b01e
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41b03c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push 4
push str..mp4
lea ecx, [esp + 0x18]
call fcn.00401c50
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x41b096
mov edi, dword [esp + 0x14]
push str.Progid
push edi
call ebp
cmp edi, ebx
je 0x41b096
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41b0b4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x41b0fe
mov edi, dword [esp + 0x14]
push str.application
push edi
call ebp
cmp edi, ebx
je 0x41b0fe
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41b11c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push 4
push str..3gp
lea ecx, [esp + 0x18]
call fcn.00401c50
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x41b176
mov edi, dword [esp + 0x14]
push str.Progid
push edi
call ebp
cmp edi, ebx
je 0x41b176
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41b194
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x41b1de
mov edi, dword [esp + 0x14]
push str.application
push edi
call ebp
cmp edi, ebx
je 0x41b1de
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41b1fc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push 4
push str..flv
lea ecx, [esp + 0x18]
call fcn.00401c50
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x41b256
mov edi, dword [esp + 0x14]
push str.Progid
push edi
call ebp
cmp edi, ebx
je 0x41b256
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41b274
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x41b2be
mov edi, dword [esp + 0x14]
push str.application
push edi
call ebp
cmp edi, ebx
je 0x41b2be
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41b2dc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push 4
push str..swf
lea ecx, [esp + 0x18]
call fcn.00401c50
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x41b336
mov edi, dword [esp + 0x14]
push str.Progid
push edi
call ebp
cmp edi, ebx
je 0x41b336
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41b354
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x41b39e
mov edi, dword [esp + 0x14]
push str.application
push edi
call ebp
cmp edi, ebx
je 0x41b39e
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41b3bc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push 4
push str..amr
lea ecx, [esp + 0x18]
call fcn.00401c50
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x41b416
mov edi, dword [esp + 0x14]
push str.Progid
push edi
call ebp
cmp edi, ebx
je 0x41b416
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41b434
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x41b47e
mov edi, dword [esp + 0x14]
push str.application
push edi
call ebp
cmp edi, ebx
je 0x41b47e
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41b49c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push 4
push str..dts
lea ecx, [esp + 0x18]
call fcn.00401c50
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x41b4f6
mov edi, dword [esp + 0x14]
push str.Progid
push edi
call ebp
cmp edi, ebx
je 0x41b4f6
push edi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41b514
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
lea ecx, [esp + 0x14]
push ecx
push 0x2001f
push ebx
push eax
push SysReAllocString
mov dword [esp + 0x28], ebx
call esi
cmp eax, ebx
jne 0x41b55e
mov esi, dword [esp + 0x14]
push str.application
push esi
call ebp
cmp esi, ebx
je 0x41b55e
push esi
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x41b57c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push 4
push str..cda
lea ecx, [esp + 0x18]
call fcn.00401c50
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
push str.Progid
mov ecx, eax
mov edx, SysReAllocString
call fcn.00419880
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41b5d3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
push str.application
mov ecx, eax
mov edx, SysReAllocString
call fcn.00419880
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41b61a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push 4
push str..vob
lea ecx, [esp + 0x18]
call fcn.00401c50
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
push str.Progid
mov ecx, eax
mov edx, SysReAllocString
call fcn.00419880
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41b671
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
push str.application
mov ecx, eax
mov edx, SysReAllocString
call fcn.00419880
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41b6b8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push 4
push str..mpg
lea ecx, [esp + 0x18]
call fcn.00401c50
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
push str.Progid
mov ecx, eax
mov edx, SysReAllocString
call fcn.00419880
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41b70f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
push str.application
mov ecx, eax
mov edx, SysReAllocString
call fcn.00419880
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41b756
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push 5
push str..mpeg
lea ecx, [esp + 0x18]
call fcn.00401c50
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
push str.Progid
mov ecx, eax
mov edx, SysReAllocString
call fcn.00419880
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41b7ad
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
push str.application
mov ecx, eax
mov edx, SysReAllocString
call fcn.00419880
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41b7f4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push 4
push str..asf
lea ecx, [esp + 0x18]
call fcn.00401c50
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
push str.Progid
mov ecx, eax
mov edx, SysReAllocString
call fcn.00419880
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41b84b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
push str.application
mov ecx, eax
mov edx, SysReAllocString
call fcn.00419880
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41b892
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push 4
push str..pmp
lea ecx, [esp + 0x18]
call fcn.00401c50
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
push str.Progid
mov ecx, eax
mov edx, SysReAllocString
call fcn.00419880
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41b8e9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
push str.application
mov ecx, eax
mov edx, SysReAllocString
call fcn.00419880
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41b930
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push 5
push str..flac
lea ecx, [esp + 0x18]
call fcn.00401c50
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
push str.Progid
mov ecx, eax
mov edx, SysReAllocString
call fcn.00419880
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41b987
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
push str.application
mov ecx, eax
mov edx, SysReAllocString
call fcn.00419880
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41b9ce
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push 4
push str..m3u
lea ecx, [esp + 0x18]
call fcn.00401c50
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
push str.Progid
mov ecx, eax
mov edx, SysReAllocString
call fcn.00419880
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41ba25
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
push str.application
mov ecx, eax
mov edx, SysReAllocString
call fcn.00419880
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41ba6c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
push 8
push str..torrent
lea ecx, [esp + 0x18]
call fcn.00401c50
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
push str.Progid
mov ecx, eax
mov edx, SysReAllocString
call fcn.00419880
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41bac3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x14]
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionExplorerFileExts_
call fcn.00401770
mov eax, dword [eax]
add esp, 4
push str.application
mov ecx, eax
mov edx, SysReAllocString
call fcn.00419880
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
pop edi
pop esi
pop ebp
pop ebx
jg 0x41bb0e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov dword [esp + 0x14], 0xffffffff
mov eax, dword [esp]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41bb33
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov ecx, dword [esp + 0xc]
mov dword fs:[0], ecx
add esp, 0x18
ret 4