Function at 0x407440
Capabilities:
Create shortcut via ishelllink

Disassembly:
sub esp, 0x428
push ebx
push ebp
push esi
lea eax, [esp + 0xc]
push edi
push eax
push 0x421538
push 1
push 0
push 0x421548
mov dword [esp + 0x2c], 0
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jl 0x4076f7
mov eax, dword [esp + 0x10]
mov esi, dword [esp + 0x43c]
push esi
push eax
mov ecx, dword [eax]
call dword [ecx + 0x50]
lea edx, [esp + 0x28]
mov eax, esi
sub edx, esi
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x40748d
lea edx, [esp + 0x28]
push 0x5c
push edx
call fcn.00418f90
add esp, 8
test eax, eax
je 0x4074bc
mov byte [eax], 0
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x28]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x24]
mov eax, dword [esp + 0x444]
test eax, eax
je 0x4074d7
cmp byte [eax], 0
je 0x4074d7
mov ecx, dword [esp + 0x10]
push eax
push ecx
mov edx, dword [ecx]
call dword [edx + 0x2c]
mov edx, dword [esp + 0x44c]
mov eax, dword [esp + 0x448]
test edx, edx
jne 0x4074f2
test eax, eax
je 0x407509
cmp byte [eax], 0
je 0x407509
test eax, eax
je 0x4074fb
cmp byte [eax], 0
jne 0x4074fd
mov eax, esi
mov ecx, dword [esp + 0x10]
push edx
push eax
push ecx
mov esi, dword [ecx]
call dword [esi + 0x44]
mov eax, dword [esp + 0x450]
mov ecx, 1
dec eax
je 0x407522
dec eax
jne 0x407527
mov ecx, 3
jmp 0x407527
mov ecx, 7
mov eax, dword [esp + 0x10]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x3c]
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x14]
push edx
push 0x421558
mov ecx, dword [eax]
push eax
call dword [ecx]
mov ebx, dword [esp + 0x440]
mov ebp, eax
test ebp, ebp
jl 0x407651
lea eax, [esp + 0x230]
push 0x104
push eax
push 0xffffffffffffffff
push ebx
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_MultiByteToWideChar]
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x230]
push 1
push edx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x18]
mov ebp, eax
test ebp, ebp
mov dword [esp + 0x1c], ebp
jl 0x407647
mov eax, dword [esp + 0x14]
lea edx, [esp + 0x20]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
test eax, eax
jl 0x4076df
mov eax, dword [esp + 0x20]
test eax, eax
je 0x4076df
push 0
push 0
lea ecx, [esp + 0x134]
push 0x104
push ecx
push 0xffffffffffffffff
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_WideCharToMultiByte]
lea edx, [esp + 0x24]
push edx
push 1
call dword [sym.imp.ole32.dll_CoGetMalloc]
test eax, eax
jl 0x4075f3
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x14]
push 0x2e
push ebx
call fcn.00418f90
mov esi, eax
lea eax, [esp + 0x134]
push 0x2e
push eax
call fcn.00418f90
add esp, 0x10
mov edx, eax
test esi, esi
je 0x407647
test edx, edx
je 0x407647
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, esi
mov ebp, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp ebp, ecx
ja 0x407643
mov eax, edx
sub esi, edx
mov cl, byte [eax]
mov byte [esi + eax], cl
inc eax
test cl, cl
jne 0x407639
mov ebp, dword [esp + 0x1c]
mov eax, dword [esp + 0x14]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [esp + 0x10]
push eax
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4076f5
push 0
push ebx
call fcn.004010a0
add esp, 8
cmp eax, 0xffffffff
jne 0x4076ec
or ecx, eax
mov edi, ebx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
sub ecx, 4
js 0x4076f5
lea esi, [ecx + ebx]
push str..lnk
push esi
call fcn.00418d70
add esp, 8
test eax, eax
jne 0x4076f5
mov eax, str..pif
mov edx, esi
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4076a5
push 0
push ebx
call fcn.004010a0
add esp, 8
cmp eax, 0xffffffff
jne 0x4076ec
mov eax, str..lnk
mov edx, esi
sub edx, eax
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x4076c8
pop edi
mov eax, ebp
pop esi
pop ebp
pop ebx
add esp, 0x428
ret
mov dword [esp + 0x18], 1
jmp 0x407647
push eax
call fcn.00401320
add esp, 4
mov eax, ebp
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x428
ret