Function at 0x4787f0
Capabilities:
Check if file exists
Create shortcut via ishelllink

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x520f0c
mov eax, dword fs:[0]
push eax
sub esp, 0xa44
mov eax, dword [0x56f790]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xa40], ecx
mov ecx, dword [ebp + 0x14]
mov dword [ebp - 0xa38], ecx
mov ecx, dword [ebp + 0x18]
mov dword [ebp - 0xa3c], ecx
mov ecx, dword [ebp + 0x20]
push eax
mov dword [ebp - 0xa2c], eax
mov dword [ebp - 0xa34], ecx
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x47899a
mov dword [ebp - 0xa20], 0
xor esi, esi
mov dword [ebp - 4], 0
mov dword [ebp - 0xa30], esi
lea eax, [ebp - 0xa24]
mov byte [ebp - 4], 1
push eax
push 0x539118
push 0x17
push esi
push 0x53ab84
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x4788ed
push dword [ebp - 0xa24]
call dword [sym.imp.ole32.dll_OleRun]
mov edi, eax
mov dword [ebp - 0xa28], edi
test edi, edi
js 0x4788cf
mov eax, dword [ebp - 0xa24]
lea edx, [ebp - 0xa20]
push edx
push 0x53ab74
push eax
mov ecx, dword [eax]
call dword [ecx]
mov edi, eax
mov dword [ebp - 0xa28], eax
mov eax, dword [ebp - 0xa24]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
test edi, edi
js 0x4788e7
mov edi, dword [ebp - 0xa20]
jmp 0x4788fd
mov eax, dword [ebp - 0xa28]
xor edi, edi
mov dword [ebp - 0xa20], edi
test eax, eax
js 0x47899a
mov byte [ebp - 4], 2
test edi, edi
je 0x4789a7
mov eax, dword [edi]
push edi
call dword [eax + 4]
test edi, edi
je 0x4789a1
lea ecx, [ebp - 0xa28]
mov dword [ebp - 0xa28], 0
mov eax, dword [edi]
push ecx
push 0x539108
push edi
call dword [eax]
mov ecx, dword [edi]
xor esi, esi
test eax, eax
mov dword [ebp - 0xa24], eax
push edi
cmovns esi, dword [ebp - 0xa28]
mov dword [ebp - 0xa30], esi
call dword [ecx + 8]
mov eax, dword [ebp - 0xa24]
test eax, eax
jns 0x4789a1
cmp eax, 0x80004002
jne 0x478c3a
jmp 0x4789a1
xor eax, eax
jmp 0x478c1c
mov edi, dword [ebp - 0xa20]
mov dword [ebp - 4], 1
test esi, esi
jne 0x4789ca
mov dword [ebp - 4], 0xffffffff
test edi, edi
je 0x47899a
mov eax, dword [edi]
push edi
call dword [eax + 8]
xor eax, eax
jmp 0x478c1c
test edi, edi
je 0x478c40
push dword [ebp - 0xa2c]
mov eax, dword [edi]
push edi
call dword [eax + 0x50]
test eax, eax
jns 0x478a0a
mov eax, dword [esi]
push esi
mov byte [ebp - 4], 0
call dword [eax + 8]
mov eax, dword [ebp - 0xa20]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x47899a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
jmp 0x478c1c
mov edx, dword [ebp - 0xa40]
test edx, edx
je 0x478a2d
mov eax, dword [ebp - 0xa20]
test eax, eax
je 0x478c4a
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x2c]
test eax, eax
js 0x4789e2
mov eax, dword [ebp - 0xa20]
test eax, eax
je 0x478c54
mov ecx, dword [eax]
push 5
push eax
call dword [ecx + 0x3c]
test eax, eax
js 0x4789e2
push 0x800
lea eax, [ebp - 0xa1c]
push 0
push eax
call fcn.004b17e0
mov edi, dword [ebp - 0xa2c]
lea eax, [ebp - 0xa1c]
push 0x400
push edi
push eax
call fcn.004d151e
add esp, 0x18
lea eax, [ebp - 0xa1c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
cmp dword [ebp + 0x1c], 0
jl 0x478ad4
push 0x208
lea eax, [ebp - 0x21c]
push 0
push eax
call fcn.004b17e0
add esp, 0xc
lea eax, [ebp - 0x21c]
push 0x104
push eax
push dword [ebp - 0xa3c]
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
mov eax, dword [ebp - 0xa20]
test eax, eax
je 0x478c5e
push dword [ebp + 0x1c]
mov ecx, dword [eax]
lea edx, [ebp - 0x21c]
push edx
push eax
call dword [ecx + 0x44]
mov eax, dword [ebp - 0xa20]
test eax, eax
je 0x478c68
mov ecx, dword [eax]
lea edx, [ebp - 0xa1c]
push edx
push eax
call dword [ecx + 0x24]
test eax, eax
js 0x4789e2
mov eax, dword [ebp - 0xa34]
test eax, eax
je 0x478bcc
cmp word [eax], 0
je 0x478bcc
mov dword [ebp - 0xa24], 0
mov eax, dword [ebp - 0xa20]
mov byte [ebp - 4], 4
test eax, eax
je 0x478c72
mov ecx, dword [eax]
lea edx, [ebp - 0xa24]
push edx
push 0x54d320
push eax
call dword [ecx]
test eax, eax
mov eax, dword [ebp - 0xa24]
jne 0x478bbe
test eax, eax
je 0x478bbe
mov ecx, dword [ebp - 0xa34]
push ecx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov edi, eax
mov dword [ebp - 0xa3c], edi
test edi, edi
je 0x478c7c
xorps xmm0, xmm0
mov byte [ebp - 4], 5
movups xmmword [ebp - 0xa50], xmm0
mov eax, 8
mov dword [ebp - 0xa48], edi
mov word [ebp - 0xa50], ax
lea edx, [ebp - 0xa50]
mov eax, dword [ebp - 0xa24]
push edx
push 0x534d9c
push eax
mov ecx, dword [eax]
call dword [ecx + 0x18]
mov eax, dword [ebp - 0xa24]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
push edi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp - 0xa24]
mov edi, dword [ebp - 0xa2c]
mov byte [ebp - 4], 1
test eax, eax
je 0x478bcc
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esi]
push 1
push dword [ebp - 0xa38]
push esi
call dword [eax + 0x18]
test eax, eax
js 0x4789e2
push dword [ebp - 0xa38]
push edi
push str.Create_link_from__s_to__s_success
call fcn.00441ac0
mov eax, dword [esi]
add esp, 0xc
mov byte [ebp - 4], 0
push esi
call dword [eax + 8]
mov eax, dword [ebp - 0xa20]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x478c17
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004ac4b8
mov esp, ebp
pop ebp
ret 0x1c
push eax
call fcn.004ab320
push 0x80004003
call fcn.004ab320
push 0x80004003
call fcn.004ab320
push 0x80004003
call fcn.004ab320
push 0x80004003
call fcn.004ab320
push 0x80004003
call fcn.004ab320
push 0x80004003
call fcn.004ab320
push 0x8007000e
call fcn.00404400
int3