Function at 0x405691
Capabilities:
Persist via default file association registry key
Set registry value

Disassembly:
sub esp, 0x414
push ebx
mov ebx, dword [sym.imp.MSVCRT.dll_wcslen]
push ebp
push esi
mov esi, 0x40d36c
push edi
mov dword [esp + 0x10], ecx
push esi
call ebx
mov ebp, dword [sym.imp.SHLWAPI.dll_SHSetValueW]
pop ecx
shl eax, 1
push eax
push esi
push 1
push str.ApplicationDescription
mov edi, 0x80000002
push str.SOFTWAREClientsStartMenuInternetTheWorld.exeCapabilities
push edi
call ebp
mov esi, str.TheWorld_Browser
push esi
call ebx
pop ecx
shl eax, 1
push eax
push esi
push 1
push str.ApplicationName
push str.SOFTWAREClientsStartMenuInternetTheWorld.exeCapabilities
push edi
call ebp
mov esi, str.TheWorldURL
push esi
call ebx
pop ecx
shl eax, 1
push eax
push esi
push 1
push str..htm
push str.SOFTWAREClientsStartMenuInternetTheWorld.exeCapabilities
push edi
call ebp
push esi
call ebx
pop ecx
shl eax, 1
push eax
push esi
push 1
push str..html
push str.SOFTWAREClientsStartMenuInternetTheWorld.exeCapabilities
push edi
call ebp
push esi
call ebx
pop ecx
shl eax, 1
push eax
push esi
push 1
push str..mht
push str.SOFTWAREClientsStartMenuInternetTheWorld.exeCapabilities
push edi
call ebp
push esi
call ebx
pop ecx
shl eax, 1
push eax
push esi
push 1
push str..mhtml
push str.SOFTWAREClientsStartMenuInternetTheWorld.exeCapabilities
push edi
call ebp
push str.SOFTWAREClientsStartMenuInternetTheWorld.exeCapabilities
call ebx
pop ecx
shl eax, 1
push eax
push str.SOFTWAREClientsStartMenuInternetTheWorld.exeCapabilities
push 1
push str.TheWorld.exe
push str.SOFTWARERegisteredApplications
push edi
call ebp
push str.TheWorld.exe
call ebx
pop ecx
shl eax, 1
push eax
push str.TheWorld.exe
push 1
push str.StartMenuInternet
push str.SOFTWAREClientsStartMenuInternetTheWorld.exeCapabilitiesStartMenu
push edi
call ebp
push esi
call ebx
pop ecx
shl eax, 1
push eax
push esi
push 1
push str.http
push str.SOFTWAREClientsStartMenuInternetTheWorld.exeCapabilitiesURLAssociations
push edi
call ebp
push esi
call ebx
pop ecx
shl eax, 1
push eax
push esi
push 1
push str.https
push str.SOFTWAREClientsStartMenuInternetTheWorld.exeCapabilitiesURLAssociations
push edi
call ebp
push esi
call ebx
pop ecx
shl eax, 1
push eax
push esi
push 1
push str.file
push str.SOFTWAREClientsStartMenuInternetTheWorld.exeCapabilitiesURLAssociations
push edi
call ebp
and word [esp + 0x14], 0
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x16]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push str._SYSDIRurl.dll_0
lea eax, [esp + 0x18]
push 0x103
push eax
call dword [sym.imp.MSVCRT.dll__snwprintf]
lea eax, [esp + 0x20]
push eax
call ebx
add esp, 0x10
mov edi, 0x40d820
shl eax, 1
push eax
lea eax, [esp + 0x18]
push eax
push 1
push edi
push str.TheWorldURLDefaultIcon
push 0x80000000
call ebp
push esi
call ebx
pop ecx
shl eax, 1
push eax
push esi
push 1
push edi
push esi
mov esi, 0x80000000
push esi
call ebp
push str.open
call ebx
pop ecx
shl eax, 1
push eax
push str.open
push 1
push edi
push str.TheWorldURL_shell
push esi
call ebp
push edi
call ebx
pop ecx
shl eax, 1
push eax
push edi
push 1
push edi
push str.TheWorldURL_shellopen
push esi
call ebp
and word [esp + 0x21c], 0
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x21e]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov eax, dword [esp + 0x10]
push 0x40cfc0
push dword [eax + 0x18]
lea eax, [esp + 0x224]
push str._sTheWorld.exe___s
push 0x103
push eax
call dword [sym.imp.MSVCRT.dll__snwprintf]
lea eax, [esp + 0x230]
push eax
call ebx
add esp, 0x18
shl eax, 1
push eax
lea eax, [esp + 0x220]
push eax
push 1
push 0x40d820
push str.TheWorldURL_shellopencommand
push esi
call ebp
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x414
ret