Function at 0x41a5b0
Capabilities:
Create shortcut via ishelllink

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x21c
mov eax, dword [0x4713e0]
xor eax, ebp
mov dword [ebp - 4], eax
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
push eax
push 0x4545b0
call fcn.0041a520
add esp, 8
lea ecx, [ebp - 0x210]
push ecx
push 0x4640d4
push 1
push 0
push 0x4640e4
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov dword [ebp - 0x214], eax
mov edx, dword [ebp - 0x214]
push edx
push str.CoCreateInstance____08lx_r_n
call fcn.0041a520
add esp, 8
cmp dword [ebp - 0x214], 0
jl 0x41a81e
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp - 0x210]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x210]
push ecx
mov edx, dword [eax + 0x50]
call edx
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 4]
and ecx, 2
je 0x41a667
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 0xc]
push eax
mov ecx, dword [ebp - 0x210]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x210]
push eax
mov ecx, dword [edx + 0x2c]
call ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 4]
and eax, 1
je 0x41a68d
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x210]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x210]
push edx
mov eax, dword [ecx + 0x1c]
call eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 4]
and edx, 4
je 0x41a6ba
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0x14]
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 0x10]
push eax
mov ecx, dword [ebp - 0x210]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x210]
push eax
mov ecx, dword [edx + 0x44]
call ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 4]
and eax, 8
je 0x41a6e0
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 0x18]
push edx
mov eax, dword [ebp - 0x210]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x210]
push edx
mov eax, dword [ecx + 0x24]
call eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 4]
and edx, 0x20
je 0x41a706
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0x1c]
push ecx
mov edx, dword [ebp - 0x210]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x210]
push ecx
mov edx, dword [eax + 0x3c]
call edx
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 4]
and ecx, 0x10
je 0x41a72d
mov edx, dword [ebp + 0xc]
movzx eax, word [edx + 0x20]
push eax
mov ecx, dword [ebp - 0x210]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x210]
push eax
mov ecx, dword [edx + 0x34]
call ecx
lea edx, [ebp - 0x218]
push edx
push 0x4640c4
mov eax, dword [ebp - 0x210]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x210]
push edx
mov eax, dword [ecx]
call eax
mov dword [ebp - 0x214], eax
mov ecx, dword [ebp - 0x214]
push ecx
push str.psl__QueryInterface____08lx_r_n
call fcn.0041a520
add esp, 8
cmp dword [ebp - 0x214], 0
jl 0x41a80a
xor edx, edx
mov word [ebp - 0x20c], dx
push 0x206
push 0
lea eax, [ebp - 0x20a]
push eax
call fcn.0043a830
add esp, 0xc
push 0x104
lea ecx, [ebp - 0x20c]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004393f0
add esp, 4
add eax, 1
push eax
mov eax, dword [ebp + 8]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 1
lea ecx, [ebp - 0x20c]
push ecx
mov edx, dword [ebp - 0x218]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x218]
push ecx
mov edx, dword [eax + 0x18]
call edx
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x218]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x218]
push edx
mov eax, dword [ecx + 8]
call eax
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx + 4]
and edx, 0x40
je 0x41a80a
lea eax, [ebp - 0x20c]
push eax
call fcn.0040ecdc
mov ecx, dword [ebp - 0x210]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x210]
push eax
mov ecx, dword [edx + 8]
call ecx
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp dword [ebp - 0x214], 0
jl 0x41a839
mov dword [ebp - 0x21c], 1
jmp 0x41a843
mov dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x21c]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00439b24
mov esp, ebp
pop ebp
ret 8