Function at 0x409930
Capabilities:
Create shortcut via ishelllink
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x444
mov dword [ebp - 0x444], ecx
mov dword [ebp - 4], 0
cmp dword [ebp + 8], 0
je 0x409952
cmp dword [ebp + 0xc], 0
jne 0x409959
xor eax, eax
jmp 0x409c41
push 0
push 0
push str.create_shortcu
mov ecx, 0x428d78
call fcn.00419220
push eax
mov ecx, dword [ebp - 0x444]
call fcn.0040a7d0
lea eax, [ebp - 0xc]
push eax
push 0x425290
push 1
push 0
push 0x4252a0
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jl 0x409c3e
cmp dword [ebp + 0x18], 0
je 0x4099cc
mov ecx, dword [ebp + 0x18]
push ecx
lea edx, [ebp - 0x220]
push edx
call fcn.0041a280
add esp, 8
push 0x4244f8
lea eax, [ebp - 0x220]
push eax
call fcn.0041a290
add esp, 8
jmp 0x4099d3
mov byte [ebp - 0x220], 0
lea ecx, [ebp - 0x220]
push ecx
lea edx, [ebp - 0x118]
push edx
call fcn.0041a280
add esp, 8
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x220]
push ecx
call fcn.0041a290
add esp, 8
cmp dword [ebp + 0x10], 0
je 0x409a17
mov edx, dword [ebp + 0x10]
push edx
lea eax, [ebp - 0x118]
push eax
call fcn.0041a290
add esp, 8
jmp 0x409a7f
mov ecx, dword [ebp + 0xc]
push ecx
lea edx, [ebp - 0x118]
push edx
call fcn.0041a290
add esp, 8
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x328]
push ecx
call fcn.0041a280
add esp, 8
push str..ico
lea edx, [ebp - 0x328]
push edx
call fcn.0041a290
add esp, 8
push 0
lea eax, [ebp - 0x328]
push eax
call fcn.0041a97b
add esp, 8
test eax, eax
jne 0x409a7f
lea ecx, [ebp - 0x328]
push ecx
lea edx, [ebp - 0x118]
push edx
call fcn.0041a280
add esp, 8
lea eax, [ebp - 0x220]
push eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ecx]
mov eax, dword [ebp - 0xc]
push eax
call dword [edx + 0x50]
cmp dword [ebp + 0x1c], 0
je 0x409aa8
mov ecx, dword [ebp + 0x1c]
push ecx
mov edx, dword [ebp - 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xc]
push ecx
call dword [eax + 0x2c]
cmp dword [ebp + 0x24], 0
je 0x409abe
mov edx, dword [ebp + 0x24]
push edx
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xc]
push edx
call dword [ecx + 0x1c]
cmp dword [ebp + 0x18], 0
je 0x409ad4
mov eax, dword [ebp + 0x18]
push eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ecx]
mov eax, dword [ebp - 0xc]
push eax
call dword [edx + 0x24]
push 0
lea ecx, [ebp - 0x118]
push ecx
mov edx, dword [ebp - 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xc]
push ecx
call dword [eax + 0x44]
lea edx, [ebp - 0x10]
push edx
push 0x4252b0
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xc]
push edx
call dword [ecx]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jl 0x409c32
lea eax, [ebp - 0x434]
push eax
mov ecx, dword [ebp + 0x20]
push ecx
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
lea edx, [ebp - 0x430]
push edx
mov eax, dword [ebp - 0x434]
push eax
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListA]
push 0x424504
lea ecx, [ebp - 0x430]
push ecx
call fcn.0041a290
add esp, 8
cmp dword [ebp + 0x14], 0
je 0x409b72
mov edx, dword [ebp + 0x14]
push edx
lea eax, [ebp - 0x430]
push eax
call fcn.0041a290
add esp, 8
push 0x424508
lea ecx, [ebp - 0x430]
push ecx
call fcn.0041a290
add esp, 8
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0x430]
push eax
call fcn.0041a290
add esp, 8
push str..lnk
lea ecx, [ebp - 0x430]
push ecx
call fcn.0041a290
add esp, 8
push 1
lea edx, [ebp - 0x430]
push edx
mov ecx, 0x428d78
call fcn.004192b0
push eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x10]
push edx
call dword [ecx + 0x18]
test eax, eax
jne 0x409c26
cmp dword [ebp + 0x14], 0
jne 0x409c1f
push 0xa
lea eax, [ebp - 0x440]
push eax
mov ecx, dword [ebp - 0x444]
mov edx, dword [ecx + 0x180]
push edx
call fcn.0041d990
add esp, 0xc
mov eax, dword [ebp - 0x444]
add eax, 0x7c
push eax
lea ecx, [ebp - 0x430]
push ecx
lea edx, [ebp - 0x440]
push edx
push str.Shortcuts
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov eax, dword [ebp - 0x444]
mov ecx, dword [eax + 0x180]
add ecx, 1
mov edx, dword [ebp - 0x444]
mov dword [edx + 0x180], ecx
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x10]
push edx
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xc]
push edx
call dword [ecx + 8]
mov eax, dword [ebp - 4]
mov esp, ebp
pop ebp
ret 0x20