Function at 0x402777
Capabilities:
Create shortcut via ishelllink

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb8
mov eax, dword [0x46600c]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
mov esi, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xb0], ecx
mov ecx, dword [ebp + 0x14]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp + 0x20]
push edi
mov edi, dword [ebp + 0x18]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], eax
cmp dword [esi + 0x10], ebx
je 0x402be6
cmp dword [ecx + 0x10], ebx
je 0x402be6
xor ecx, ecx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x6c], 7
mov word [ebp - 0x80], cx
test eax, eax
je 0x4027fd
push eax
call fcn.0043ef4e
pop ecx
push eax
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x80]
call fcn.0040206a
jmp 0x40280f
lea edx, [ebp - 0x80]
mov ecx, esi
call fcn.0040dd80
test al, al
je 0x402bda
push 7
pop ecx
xor eax, eax
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x54], ecx
lea edx, [ebp - 0x68]
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0x28], ebx
mov word [ebp - 0x38], ax
mov dword [ebp - 0x58], ebx
mov word [ebp - 0x68], ax
call fcn.0040dc30
test al, al
je 0x402bca
cmp dword [ebp - 0x58], ebx
je 0x402bca
mov ecx, dword [ebp - 0xa4]
lea edx, [ebp - 0x38]
call fcn.0040dd80
test al, al
je 0x402bca
push 0x20
pop edx
lea ecx, [ebp - 0x38]
call fcn.0040e680
lea ecx, [ebp - 0x38]
call fcn.0040efc0
test al, al
jne 0x40287c
lea ecx, [ebp - 0x38]
call fcn.00410e30
lea ecx, [ebp - 0x38]
call fcn.0040efc0
test al, al
je 0x402bca
lea ecx, [ebp - 0x38]
call fcn.0040f220
test al, al
je 0x402bca
push 0x5c
lea ecx, [ebp - 0x38]
call fcn.00403157
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x20]
call fcn.0040241c
cmp dword [ebp - 0x54], 8
lea eax, [ebp - 0x68]
push dword [ebp - 0x58]
cmovae eax, dword [ebp - 0x68]
lea ecx, [ebp - 0x20]
push eax
call fcn.004025a8
lea eax, [ebp - 0xa0]
mov dword [ebp - 0xa0], ebx
push eax
push 0x450330
push 1
push ebx
push 0x450350
mov dword [ebp - 0xac], ebx
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x402bc2
mov ecx, dword [ebp - 0xa0]
test ecx, ecx
je 0x402bc2
mov eax, dword [ecx]
lea edx, [ebp - 0xac]
push edx
push 0x450340
push ecx
call dword [eax]
test eax, eax
js 0x402bb6
cmp dword [ebp - 0xac], ebx
je 0x402bb6
cmp dword [esi + 0x14], 8
mov edx, esi
jb 0x402934
mov edx, dword [esi]
mov eax, dword [ebp - 0xa0]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x50]
mov eax, dword [ebp - 0xa0]
lea edx, [ebp - 0x80]
cmp dword [ebp - 0x6c], 8
cmovae edx, dword [ebp - 0x80]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x24]
cmp dword [edi + 0x10], ebx
je 0x402984
mov ecx, edi
call fcn.0040f0f0
test al, al
je 0x402984
cmp dword [edi + 0x14], 8
jb 0x402971
mov edi, dword [edi]
mov eax, dword [ebp - 0xa0]
push ebx
push edi
push eax
mov ecx, dword [eax]
call dword [ecx + 0x44]
push 8
pop edi
jmp 0x40299c
push 8
pop edi
cmp dword [esi + 0x14], edi
jb 0x40298e
mov esi, dword [esi]
mov eax, dword [ebp - 0xa0]
push ebx
push esi
push eax
mov ecx, dword [eax]
call dword [ecx + 0x44]
mov edx, dword [ebp - 0xb4]
cmp dword [edx + 0x14], edi
jb 0x4029a9
mov edx, dword [edx]
mov eax, dword [ebp - 0xa0]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov edx, dword [ebp - 0xb8]
cmp dword [edx + 0x14], edi
jb 0x4029c3
mov edx, dword [edx]
mov eax, dword [ebp - 0xa0]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x1c]
push 0x4597ac
lea ecx, [ebp - 0x50]
call fcn.00401fbc
push ecx
push ecx
lea ecx, [ebp - 0x20]
call fcn.0040313b
lea ecx, [ebp - 0x20]
cmp eax, 0xffffffff
jne 0x402a04
cmp dword [ebp - 0x3c], edi
lea eax, [ebp - 0x50]
push dword [ebp - 0x40]
cmovae eax, dword [ebp - 0x50]
push eax
call fcn.004025a8
jmp 0x402a46
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x98]
push eax
call fcn.004030ed
lea edx, [ebp - 0x50]
lea ecx, [ebp - 0x98]
call fcn.0040bfd0
test al, al
jne 0x402a3b
cmp dword [ebp - 0x3c], edi
lea eax, [ebp - 0x50]
push dword [ebp - 0x40]
cmovae eax, dword [ebp - 0x50]
lea ecx, [ebp - 0x20]
push eax
call fcn.004025a8
lea ecx, [ebp - 0x98]
call fcn.0040203f
lea ecx, [ebp - 0x20]
call fcn.0040efc0
test al, al
je 0x402b0d
lea eax, [ebp - 0xa8]
mov byte [ebp - 0x99], bl
push eax
push 0x450330
push 1
push ebx
push 0x450350
mov dword [ebp - 0xa8], ebx
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x402b7b
mov ecx, dword [ebp - 0xa8]
test ecx, ecx
je 0x402b7b
lea edx, [ebp - 0xa4]
mov dword [ebp - 0xa4], ebx
mov eax, dword [ecx]
push edx
push 0x450340
push ecx
call dword [eax]
test eax, eax
js 0x402af1
mov edx, dword [ebp - 0xa4]
test edx, edx
je 0x402af1
cmp dword [ebp - 0xc], edi
lea ecx, [ebp - 0x20]
mov eax, dword [edx]
cmovae ecx, dword [ebp - 0x20]
push 0x30
push ecx
push edx
call dword [eax + 0x14]
test eax, eax
js 0x402ae5
mov edx, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xa0]
call fcn.00402dd4
mov byte [ebp - 0x99], al
mov ecx, dword [ebp - 0xa4]
push ecx
mov edx, dword [ecx]
call dword [edx + 8]
mov ecx, dword [ebp - 0xa8]
push ecx
mov eax, dword [ecx]
call dword [eax + 8]
mov dword [ebp - 0xa8], ebx
cmp byte [ebp - 0x99], bl
je 0x402b7b
mov bl, 1
mov byte [ebp - 0xa4], 1
test bl, bl
jne 0x402b53
mov esi, dword [ebp - 0xb0]
cmp byte [esi], 0
mov byte [ebp - 0xa4], 1
jne 0x402b4f
mov eax, dword [ebp - 0xac]
lea edx, [ebp - 0x20]
cmp dword [ebp - 0xc], edi
push 1
cmovae edx, dword [ebp - 0x20]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x18]
neg eax
sbb al, al
inc al
mov dword [ebp - 0xa4], eax
mov byte [esi + 1], 1
mov eax, dword [ebp - 0xac]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0xa0]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov bl, byte [ebp - 0xa4]
lea ecx, [ebp - 0x50]
call fcn.0040203f
jmp 0x402bc2
mov esi, dword [ebp - 0xb0]
cmp byte [esi], bl
jne 0x402b1e
cmp dword [ebp - 0xc], edi
lea eax, [ebp - 0x20]
lea ecx, [ebp - 0x98]
cmovae eax, dword [ebp - 0x20]
push eax
call fcn.00401fbc
lea ecx, [ebp - 0x98]
call fcn.00417c90
lea ecx, [ebp - 0x98]
call fcn.0040203f
jmp 0x402b1e
mov eax, dword [ebp - 0xa0]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
lea ecx, [ebp - 0x20]
call fcn.0040203f
lea ecx, [ebp - 0x68]
call fcn.0040203f
lea ecx, [ebp - 0x38]
call fcn.0040203f
lea ecx, [ebp - 0x80]
call fcn.0040203f
mov al, bl
jmp 0x402be8
xor al, al
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0043af96
leave
ret 0x1c