Function at 0x404a10
Capabilities:
Create shortcut via ishelllink
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x539111
mov eax, dword fs:[0]
push eax
sub esp, 0x4b0
mov eax, dword [0x58bcc0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea eax, [ebp - 0x4b4]
push eax
push ecx
push 0
mov dword [ebp - 4], 1
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
mov eax, dword [ebp - 0x4b4]
lea edx, [ebp - 0x420]
push edx
push eax
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
lea ecx, [ebp - 0x4b8]
push ecx
call dword [sym.imp.SHELL32.dll_SHGetMalloc]
mov eax, dword [ebp - 0x4b8]
mov ecx, dword [ebp - 0x4b4]
mov edx, dword [eax]
mov edx, dword [edx + 0x14]
push ecx
push eax
call edx
mov eax, dword [ebp - 0x4b8]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
push 4
push 0x566cfc
lea ecx, [ebp + 8]
call fcn.00401c40
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0x4b0]
call fcn.00402330
lea ecx, [ebp + 8]
push ecx
lea ecx, [ebp - 0x4bc]
mov byte [ebp - 4], 2
call fcn.00401d30
mov byte [ebp - 4], 3
mov esi, dword [ebp - 0x4bc]
mov edx, dword [ebp - 0x4b0]
push esi
push edx
lea eax, [ebp + 8]
push str._s_s
push eax
call fcn.00405bd0
add esp, 0x10
lea ecx, [ebp - 0x4a8]
push ecx
push 0x56614c
push 1
push 0
push 0x56644c
mov dword [ebp - 0x4a8], 0
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x404be9
mov eax, dword [ebp - 0x4a8]
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x4ac], 0
mov edx, dword [eax]
mov edx, dword [edx + 0x50]
push ecx
push eax
call edx
mov eax, dword [ebp - 0x4a8]
mov ecx, dword [eax]
lea edx, [ebp - 0x4ac]
push edx
push 0x5664ac
push eax
mov eax, dword [ecx]
call eax
test eax, eax
js 0x404bdb
mov edx, dword [ebp + 8]
push 3
push edx
lea eax, [ebp - 0x4a4]
lea ecx, [ebp - 0x4a0]
push eax
mov dword [ebp - 0x4a4], ecx
call fcn.00401ac0
push 0x104
lea ecx, [ebp - 0x218]
push ecx
push 0xffffffffffffffff
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0x4a4]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov eax, dword [ebp - 0x4ac]
mov ecx, dword [eax]
push 1
lea edx, [ebp - 0x218]
push edx
push eax
mov eax, dword [ecx + 0x18]
call eax
mov eax, dword [ebp - 0x4ac]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x4a4]
lea ecx, [ebp - 0x4a0]
cmp eax, ecx
je 0x404bdb
push eax
call fcn.00513741
add esp, 4
mov eax, dword [ebp - 0x4a8]
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
lea eax, [esi - 0x10]
mov byte [ebp - 4], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x404c09
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x4b0]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x404c2f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [ebp - 4], 0
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x404c52
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp + 0xc]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x404c78
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005132f8
mov esp, ebp
pop ebp
ret 8