Function at 0x40b480
Capabilities:
Create shortcut via ishelllink
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x44c
mov dword [ebp - 0x44c], ecx
mov dword [ebp - 4], 0
cmp dword [ebp + 8], 0
je 0x40b4a2
cmp dword [ebp + 0xc], 0
jne 0x40b4a9
xor eax, eax
jmp 0x40b7f5
push 0x42a850
mov eax, dword [ebp - 0x44c]
mov ecx, dword [eax + 4]
mov edx, dword [ecx + 0x74]
push edx
call fcn.00420120
add esp, 8
test eax, eax
jne 0x40b4ce
xor eax, eax
jmp 0x40b7f5
push 0
push 0
push 0
push 0
push str.create_shortcut
mov ecx, 0x42fdb8
call fcn.0041c530
push eax
mov ecx, dword [ebp - 0x44c]
call fcn.0040c650
lea eax, [ebp - 0xc]
push eax
push 0x42ba88
push 1
push 0
push 0x42ba98
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jl 0x40b7f2
cmp dword [ebp + 0x18], 0
je 0x40b545
mov ecx, dword [ebp + 0x18]
push ecx
lea edx, [ebp - 0x220]
push edx
call fcn.0041e1b0
add esp, 8
push 0x42a868
lea eax, [ebp - 0x220]
push eax
call fcn.0041e1c0
add esp, 8
jmp 0x40b54c
mov byte [ebp - 0x220], 0
lea ecx, [ebp - 0x220]
push ecx
lea edx, [ebp - 0x118]
push edx
call fcn.0041e1b0
add esp, 8
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0x220]
push ecx
call fcn.0041e1c0
add esp, 8
cmp dword [ebp + 0x10], 0
je 0x40b590
mov edx, dword [ebp + 0x10]
push edx
lea eax, [ebp - 0x118]
push eax
call fcn.0041e1c0
add esp, 8
jmp 0x40b5f8
mov ecx, dword [ebp + 0xc]
push ecx
lea edx, [ebp - 0x118]
push edx
call fcn.0041e1c0
add esp, 8
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x328]
push ecx
call fcn.0041e1b0
add esp, 8
push str..ico
lea edx, [ebp - 0x328]
push edx
call fcn.0041e1c0
add esp, 8
push 0
lea eax, [ebp - 0x328]
push eax
call fcn.0041ea1b
add esp, 8
test eax, eax
jne 0x40b5f8
lea ecx, [ebp - 0x328]
push ecx
lea edx, [ebp - 0x118]
push edx
call fcn.0041e1b0
add esp, 8
lea eax, [ebp - 0x220]
push eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ecx]
mov eax, dword [ebp - 0xc]
push eax
call dword [edx + 0x50]
cmp dword [ebp + 0x1c], 0
je 0x40b621
mov ecx, dword [ebp + 0x1c]
push ecx
mov edx, dword [ebp - 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xc]
push ecx
call dword [eax + 0x2c]
cmp dword [ebp + 0x24], 0
je 0x40b637
mov edx, dword [ebp + 0x24]
push edx
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xc]
push edx
call dword [ecx + 0x1c]
cmp dword [ebp + 0x18], 0
je 0x40b64d
mov eax, dword [ebp + 0x18]
push eax
mov ecx, dword [ebp - 0xc]
mov edx, dword [ecx]
mov eax, dword [ebp - 0xc]
push eax
call dword [edx + 0x24]
push 0
lea ecx, [ebp - 0x118]
push ecx
mov edx, dword [ebp - 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xc]
push ecx
call dword [eax + 0x44]
lea edx, [ebp - 0x10]
push edx
push 0x42baa8
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xc]
push edx
call dword [ecx]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jl 0x40b7e6
lea eax, [ebp - 0x43c]
push eax
mov ecx, dword [ebp + 0x20]
push ecx
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
lea edx, [ebp - 0x438]
push edx
mov eax, dword [ebp - 0x43c]
push eax
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListA]
lea ecx, [ebp - 0x32c]
push ecx
call dword [sym.imp.SHELL32.dll_SHGetMalloc]
mov edx, dword [ebp - 0x43c]
push edx
mov eax, dword [ebp - 0x32c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x32c]
push edx
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x32c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x32c]
push edx
call dword [ecx + 8]
push 0x42a874
lea eax, [ebp - 0x438]
push eax
call fcn.0041e1c0
add esp, 8
cmp dword [ebp + 0x14], 0
je 0x40b723
mov ecx, dword [ebp + 0x14]
push ecx
lea edx, [ebp - 0x438]
push edx
call fcn.0041e1c0
add esp, 8
push 0x42a878
lea eax, [ebp - 0x438]
push eax
call fcn.0041e1c0
add esp, 8
mov ecx, dword [ebp + 8]
push ecx
lea edx, [ebp - 0x438]
push edx
call fcn.0041e1c0
add esp, 8
push str..lnk
lea eax, [ebp - 0x438]
push eax
call fcn.0041e1c0
add esp, 8
push 1
lea ecx, [ebp - 0x438]
push ecx
mov ecx, 0x42fdb8
call fcn.0041c5d0
push eax
mov edx, dword [ebp - 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x10]
push ecx
call dword [eax + 0x18]
test eax, eax
jne 0x40b7da
cmp dword [ebp + 0x14], 0
jne 0x40b7d3
push 0xa
lea edx, [ebp - 0x448]
push edx
mov eax, dword [ebp - 0x44c]
mov ecx, dword [eax + 0x288]
push ecx
call fcn.00422515
add esp, 0xc
mov edx, dword [ebp - 0x44c]
add edx, 0x184
push edx
lea eax, [ebp - 0x438]
push eax
lea ecx, [ebp - 0x448]
push ecx
push str.Shortcuts
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
mov edx, dword [ebp - 0x44c]
mov eax, dword [edx + 0x288]
add eax, 1
mov ecx, dword [ebp - 0x44c]
mov dword [ecx + 0x288], eax
mov dword [ebp - 4], 1
mov edx, dword [ebp - 0x10]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x10]
push ecx
call dword [eax + 8]
mov edx, dword [ebp - 0xc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xc]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 4]
mov esp, ebp
pop ebp
ret 0x20