Function at 0x40f0a8
Capabilities:
Delete registry key
Persist via default file association registry key
Set registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push ebx
xor ebx, ebx
cmp byte [ebp + 8], bl
push esi
push edi
je 0x40f252
mov esi, 0x476908
lea edi, [ebp - 0x1c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp + 8], ebx
movsd dword es:[edi], dword [esi]
call fcn.004580ae
mov eax, dword [eax + 4]
push str.NetworkView.exe__2
add eax, 0x848
mov esi, 0x476218
push eax
lea eax, [ebp - 0x10]
push esi
push eax
call fcn.004441ef
push eax
lea eax, [ebp - 8]
push eax
call fcn.0044417b
lea ecx, [ebp - 0x10]
call fcn.00443f32
call fcn.004580ae
mov eax, dword [eax + 4]
push str.NetworkView.exe____1_
add eax, 0x848
push eax
lea eax, [ebp - 0x10]
push esi
push eax
call fcn.004441ef
push eax
lea eax, [ebp - 4]
push eax
call fcn.0044417b
lea ecx, [ebp - 0x10]
call fcn.00443f32
lea eax, [ebp - 0xc]
mov esi, 0x47c1d0
push eax
lea eax, [ebp + 8]
push eax
push ebx
push 6
push ebx
push esi
push ebx
mov edi, 0x80000000
push str..nvd
push edi
call dword [sym.imp.advapi32.dll_RegCreateKeyExA]
test eax, eax
jne 0x40f229
lea eax, [ebp - 0x1c]
push 0xd
push eax
push 1
push ebx
push esi
push dword [ebp + 8]
call dword [sym.imp.advapi32.dll_RegSetValueExA]
test eax, eax
jne 0x40f229
push dword [ebp + 8]
call dword [sym.imp.advapi32.dll_RegCloseKey]
test eax, eax
jne 0x40f229
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp + 8]
push eax
push ebx
push 6
push ebx
push esi
push ebx
push str.NetworkViewDefaultIcon
push edi
call dword [sym.imp.advapi32.dll_RegCreateKeyExA]
test eax, eax
jne 0x40f229
mov eax, dword [ebp - 8]
mov eax, dword [eax - 8]
lea ecx, [eax + 1]
push ecx
push eax
lea ecx, [ebp - 8]
call fcn.00444316
push eax
push 1
push ebx
push esi
push dword [ebp + 8]
call dword [sym.imp.advapi32.dll_RegSetValueExA]
test eax, eax
jne 0x40f229
push dword [ebp + 8]
call dword [sym.imp.advapi32.dll_RegCloseKey]
test eax, eax
jne 0x40f229
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp + 8]
push eax
push ebx
push 6
push ebx
push esi
push ebx
push str.NetworkViewShellOpencommand
push edi
call dword [sym.imp.advapi32.dll_RegCreateKeyExA]
test eax, eax
jne 0x40f229
mov eax, dword [ebp - 4]
mov eax, dword [eax - 8]
lea ecx, [eax + 1]
push ecx
push eax
lea ecx, [ebp - 4]
call fcn.00444316
push eax
push 1
push ebx
push esi
push dword [ebp + 8]
call dword [sym.imp.advapi32.dll_RegSetValueExA]
test eax, eax
jne 0x40f229
push dword [ebp + 8]
call dword [sym.imp.advapi32.dll_RegCloseKey]
test eax, eax
je 0x40f233
push ebx
push 0x10
push str.Error_creating_NVD_File_Association.
jmp 0x40f23b
push ebx
push 0x40
push str.NVD_File_Association_created.
call fcn.0044bafa
lea ecx, [ebp - 4]
call fcn.00443f32
lea ecx, [ebp - 8]
call fcn.00443f32
jmp 0x40f2bc
mov esi, dword [sym.imp.advapi32.dll_RegDeleteKeyA]
mov edi, 0x80000000
push str..nvd
push edi
call esi
test eax, eax
jne 0x40f2a5
push str.NetworkViewShellOpencommand
push edi
call esi
test eax, eax
jne 0x40f2a5
push str.NetworkViewShellOpen
push edi
call esi
test eax, eax
jne 0x40f2a5
push str.NetworkViewShell
push edi
call esi
test eax, eax
jne 0x40f2a5
push str.NetworkViewDefaultIcon
push edi
call esi
test eax, eax
jne 0x40f2a5
push 0x476908
push edi
call esi
test eax, eax
je 0x40f2af
push ebx
push 0x10
push str.Error_deleting_NVD_File_Association.
jmp 0x40f2b7
push ebx
push 0x40
push str.NVD_File_Association_deleted.
call fcn.0044bafa
pop edi
pop esi
pop ebx
leave
ret 4