Function at 0x4050b0
Capabilities:
Create shortcut via ishelllink
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5394f1
mov eax, dword fs:[0]
push eax
sub esp, 0x4b0
mov eax, dword [0x58bc40]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea eax, [ebp - 0x4b4]
push eax
push ecx
push 0
mov dword [ebp - 4], 1
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
mov eax, dword [ebp - 0x4b4]
lea edx, [ebp - 0x420]
push edx
push eax
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
lea ecx, [ebp - 0x4b8]
push ecx
call dword [sym.imp.SHELL32.dll_SHGetMalloc]
mov eax, dword [ebp - 0x4b8]
mov ecx, dword [ebp - 0x4b4]
mov edx, dword [eax]
mov edx, dword [edx + 0x14]
push ecx
push eax
call edx
mov eax, dword [ebp - 0x4b8]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
push 4
push 0x568a88
lea ecx, [ebp + 8]
call fcn.00401c40
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0x4b0]
call fcn.00402330
lea ecx, [ebp + 8]
push ecx
lea ecx, [ebp - 0x4bc]
mov byte [ebp - 4], 2
call fcn.00401d30
mov byte [ebp - 4], 3
mov esi, dword [ebp - 0x4bc]
mov edx, dword [ebp - 0x4b0]
push esi
push edx
lea eax, [ebp + 8]
push str._s_s
push eax
call fcn.00406080
add esp, 0x10
lea ecx, [ebp - 0x4a8]
push ecx
push 0x56611c
push 1
push 0
push 0x56643c
mov dword [ebp - 0x4a8], 0
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x405289
mov eax, dword [ebp - 0x4a8]
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x4ac], 0
mov edx, dword [eax]
mov edx, dword [edx + 0x50]
push ecx
push eax
call edx
mov eax, dword [ebp - 0x4a8]
mov ecx, dword [eax]
lea edx, [ebp - 0x4ac]
push edx
push 0x56649c
push eax
mov eax, dword [ecx]
call eax
test eax, eax
js 0x40527b
mov edx, dword [ebp + 8]
push 3
push edx
lea eax, [ebp - 0x4a4]
lea ecx, [ebp - 0x4a0]
push eax
mov dword [ebp - 0x4a4], ecx
call fcn.00401ac0
push 0x104
lea ecx, [ebp - 0x218]
push ecx
push 0xffffffffffffffff
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x4a4]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov eax, dword [ebp - 0x4ac]
mov ecx, dword [eax]
push 1
lea edx, [ebp - 0x218]
push edx
push eax
mov eax, dword [ecx + 0x18]
call eax
mov eax, dword [ebp - 0x4ac]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x4a4]
lea ecx, [ebp - 0x4a0]
cmp eax, ecx
je 0x40527b
push eax
call fcn.00513b49
add esp, 4
mov eax, dword [ebp - 0x4a8]
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
lea eax, [esi - 0x10]
mov byte [ebp - 4], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4052a9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x4b0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4052cf
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4052f2
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0xc]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x405318
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00513700
mov esp, ebp
pop ebp
ret 8