Function at 0x40beb0
Capabilities:
Create shortcut via ishelllink

Disassembly:
push 0xffffffffffffffff
push 0x52afb6
mov eax, dword fs:[0]
push eax
sub esp, 0xa58
mov eax, dword [0x56fcac]
xor eax, esp
mov dword [esp + 0xa54], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x56fcac]
xor eax, esp
push eax
lea eax, [esp + 0xa6c]
mov dword fs:[0], eax
xor ebx, ebx
mov edi, edx
mov esi, ecx
xor ebp, ebp
mov dword [esp + 0x1c], ebx
call fcn.00401ed0
push esi
call fcn.00406870
add esp, 4
test al, al
je 0x40c200
lea eax, [esp + 0x3c]
push esi
push eax
call fcn.004076e0
add esp, 8
mov dword [esp + 0xa74], ebp
cmp dword [esp + 0x50], ebp
je 0x40bf69
push 4
push str..lnk
lea ecx, [esp + 0x28]
mov dword [esp + 0x40], 7
mov dword [esp + 0x3c], ebp
mov word [esp + 0x2c], bp
call fcn.00402af0
lea ecx, [esp + 0x20]
push ecx
lea edx, [esp + 0x40]
push edx
mov ebx, 1
call fcn.004048a0
add esp, 8
test eax, eax
mov byte [esp + 0x17], 0
je 0x40bf6e
mov byte [esp + 0x17], 1
test bl, 1
mov ebx, 8
je 0x40bf8b
cmp dword [esp + 0x38], ebx
jb 0x40bf8b
mov eax, dword [esp + 0x24]
push eax
call fcn.004aaa59
add esp, 4
cmp byte [esp + 0x17], 0
je 0x40bfa6
cmp dword [esp + 0x54], ebx
jb 0x40c200
mov ecx, dword [esp + 0x40]
push ecx
jmp 0x40c1f8
lea edx, [esp + 0x18]
push edx
push 0x543d00
push 1
push ebp
push 0x543fe0
mov dword [esp + 0x2c], ebp
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jl 0x40c1ed
mov eax, dword [esp + 0x18]
cmp eax, ebp
je 0x40c1ed
lea edx, [esp + 0x1c]
push edx
mov dword [esp + 0x20], ebp
mov ecx, dword [eax]
push 0x544640
push eax
mov eax, dword [ecx]
call eax
cmp eax, ebp
jl 0x40c1ce
cmp dword [esp + 0x1c], ebp
je 0x40c1ce
push esi
lea esi, [esp + 0x24]
call fcn.0043f330
add esp, 4
mov byte [esp + 0xa74], 1
cmp dword [esp + 0x38], ebx
mov ecx, dword [esp + 0x24]
jae 0x40c020
lea ecx, [esp + 0x24]
mov eax, dword [esp + 0x1c]
mov edx, dword [eax]
push 0x30
push ecx
push eax
mov eax, dword [edx + 0x14]
call eax
cmp eax, ebp
jl 0x40c1b1
push 0x208
lea ecx, [esp + 0x5e]
push ebp
push ecx
mov word [esp + 0x64], bp
call fcn.004ec1b0
push 0x800
lea edx, [esp + 0x276]
push ebp
push edx
mov word [esp + 0x27c], bp
call fcn.004ec1b0
mov eax, dword [esp + 0x30]
mov ecx, dword [eax]
add esp, 0x18
push 4
push ebp
push 0x104
lea edx, [esp + 0x64]
push edx
push eax
mov eax, dword [ecx + 0xc]
call eax
cmp eax, ebp
jl 0x40c093
lea ecx, [esp + 0x58]
push ecx
mov ecx, edi
call fcn.00401ea0
push 0x105
lea edx, [esp + 0x5c]
push ebp
push edx
call fcn.004ec1b0
mov eax, dword [esp + 0x24]
mov ecx, dword [eax]
add esp, 0xc
push 0x104
lea edx, [esp + 0x5c]
push edx
push eax
mov eax, dword [ecx + 0x20]
call eax
test eax, eax
jne 0x40c0cd
lea ecx, [esp + 0x58]
push ecx
lea ecx, [edi + 0x7c]
call fcn.00401ea0
push 0x401
lea edx, [esp + 0x268]
push ebp
push edx
call fcn.004ec1b0
mov eax, dword [esp + 0x24]
mov ecx, dword [eax]
add esp, 0xc
push 0x400
lea edx, [esp + 0x268]
push edx
push eax
mov eax, dword [ecx + 0x28]
call eax
test eax, eax
jne 0x40c110
lea ecx, [esp + 0x264]
push ecx
lea ecx, [edi + 0x1c]
call fcn.00401ea0
push 0x401
lea edx, [esp + 0x268]
push ebp
push edx
call fcn.004ec1b0
mov eax, dword [esp + 0x24]
mov ecx, dword [eax]
add esp, 0xc
push 0x400
lea edx, [esp + 0x268]
push edx
push eax
mov eax, dword [ecx + 0x18]
call eax
test eax, eax
jne 0x40c153
lea ecx, [esp + 0x264]
push ecx
lea ecx, [edi + 0x38]
call fcn.00401ea0
push 0x105
lea edx, [esp + 0x5c]
push ebp
push edx
call fcn.004ec1b0
mov eax, dword [esp + 0x24]
mov ecx, dword [eax]
add esp, 0xc
lea edx, [edi + 0x74]
push edx
push 0x104
lea edx, [esp + 0x60]
push edx
push eax
mov eax, dword [ecx + 0x40]
call eax
test eax, eax
jne 0x40c191
lea ecx, [esp + 0x58]
push ecx
lea ecx, [edi + 0x58]
call fcn.00401ea0
mov eax, dword [esp + 0x18]
mov edx, dword [eax]
mov edx, dword [edx + 0x30]
lea ecx, [edi + 0x54]
push ecx
push eax
call edx
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
lea edx, [edi + 0x78]
push edx
push eax
mov eax, dword [ecx + 0x38]
call eax
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
lea ecx, [esp + 0x20]
mov byte [esp + 0xa74], 0
call fcn.00401e70
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp dword [edi + 0x14], ebp
lea ecx, [esp + 0x3c]
setne bl
call fcn.00401e70
mov al, bl
jmp 0x40c202
cmp dword [esp + 0x54], ebx
jb 0x40c200
mov eax, dword [esp + 0x40]
push eax
call fcn.004aaa59
add esp, 4
xor al, al
mov ecx, dword [esp + 0xa6c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xa54]
xor ecx, esp
call fcn.004ead41
add esp, 0xa64
ret