Function at 0x403310
Capabilities:
Create shortcut via ishelllink

Disassembly:
push ebp
lea ebp, [esp - 0xa0]
push 0xffffffffffffffff
push 0x425af0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x114
mov eax, dword [0x431468]
push ebx
push esi
push edi
xor edi, edi
mov dword [ebp + 0x90], eax
mov dword [ebp - 0x78], edi
lea eax, [ebp - 0x78]
push eax
push 0x428f98
push 1
push edi
push 0x428fa8
mov dword [ebp + 0x9c], edi
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, eax
cmp esi, edi
jl 0x4036c2
mov eax, dword [ebp - 0x78]
cmp eax, edi
mov dword [ebp - 0x7c], edi
je 0x403385
mov ecx, dword [eax]
lea edx, [ebp - 0x7c]
push edx
push 0x427628
push eax
call dword [ecx]
mov byte [ebp + 0x9c], 1
call dword [fcn.00430090]
mov edx, dword [ebp + 0xa8]
push 1
mov ebx, eax
mov eax, dword [ebp - 0x7c]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x14]
mov esi, eax
cmp esi, edi
jl 0x4036ae
mov eax, dword [ebp - 0x78]
mov ecx, dword [eax]
push 0x45
push edi
push eax
call dword [ecx + 0x4c]
mov esi, eax
cmp esi, edi
jl 0x4036ae
mov byte [ebp - 0x74], 0
xor eax, eax
mov ecx, 0x40
lea edi, [ebp - 0x73]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [ebp - 0x80]
push ecx
push 0x104
stosb byte es:[edi], al
mov eax, dword [ebp - 0x78]
lea ecx, [ebp - 0x74]
or esi, 0xffffffff
push ecx
mov dword [ebp - 0x80], esi
mov edx, dword [eax]
push eax
call dword [edx + 0x40]
mov edi, eax
test edi, edi
jge 0x403429
mov eax, dword [ebp - 0x7c]
test eax, eax
mov byte [ebp + 0x9c], 0
je 0x40340f
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp - 0x78]
test eax, eax
mov dword [ebp + 0x9c], esi
je 0x403422
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, edi
jmp 0x4036db
mov edi, dword [ebp + 0xb4]
push edi
call fcn.004101b0
add esp, 4
test eax, eax
je 0x4034ac
test edi, edi
jne 0x403444
xor eax, eax
jmp 0x40346a
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea esi, [eax + eax + 2]
mov eax, esi
add eax, 3
and eax, 0xfffffffc
call fcn.00413770
mov eax, esp
push ebx
push esi
push edi
push eax
call fcn.00402020
or esi, 0xffffffff
mov ecx, dword [ebp - 0x78]
mov edx, dword [ecx]
push eax
push ecx
call dword [edx + 0x50]
mov edi, eax
test edi, edi
jge 0x4034ac
mov eax, dword [ebp - 0x7c]
test eax, eax
mov byte [ebp + 0x9c], 0
je 0x40348e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x78]
test eax, eax
mov dword [ebp + 0x9c], esi
je 0x40366f
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, edi
jmp 0x4036db
mov edi, dword [ebp + 0xac]
push edi
call fcn.004101b0
add esp, 4
test eax, eax
je 0x40352f
test edi, edi
jne 0x4034c7
xor eax, eax
jmp 0x4034ed
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea esi, [eax + eax + 2]
mov eax, esi
add eax, 3
and eax, 0xfffffffc
call fcn.00413770
mov eax, esp
push ebx
push esi
push edi
push eax
call fcn.00402020
or esi, 0xffffffff
mov ecx, dword [ebp - 0x78]
mov edx, dword [ecx]
push eax
push ecx
call dword [edx + 0x2c]
mov edi, eax
test edi, edi
jge 0x40352f
mov eax, dword [ebp - 0x7c]
test eax, eax
mov byte [ebp + 0x9c], 0
je 0x403511
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x78]
test eax, eax
mov dword [ebp + 0x9c], esi
je 0x40366f
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, edi
jmp 0x4036db
mov edi, dword [ebp + 0xb8]
push edi
call fcn.004101b0
add esp, 4
test eax, eax
je 0x4035b2
test edi, edi
jne 0x40354a
xor eax, eax
jmp 0x403570
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea esi, [eax + eax + 2]
mov eax, esi
add eax, 3
and eax, 0xfffffffc
call fcn.00413770
mov eax, esp
push ebx
push esi
push edi
push eax
call fcn.00402020
or esi, 0xffffffff
mov ecx, dword [ebp - 0x78]
mov edx, dword [ecx]
push eax
push ecx
call dword [edx + 0x1c]
mov edi, eax
test edi, edi
jge 0x4035b2
mov eax, dword [ebp - 0x7c]
test eax, eax
mov byte [ebp + 0x9c], 0
je 0x403594
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x78]
test eax, eax
mov dword [ebp + 0x9c], esi
je 0x40366f
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, edi
jmp 0x4036db
mov edi, dword [ebp + 0xb0]
push edi
call fcn.004101b0
add esp, 4
test eax, eax
je 0x403631
test edi, edi
jne 0x4035cd
xor eax, eax
jmp 0x4035f3
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea esi, [eax + eax + 2]
mov eax, esi
add eax, 3
and eax, 0xfffffffc
call fcn.00413770
mov eax, esp
push ebx
push esi
push edi
push eax
call fcn.00402020
or esi, 0xffffffff
mov ecx, dword [ebp - 0x78]
mov edx, dword [ecx]
push eax
push ecx
call dword [edx + 0x24]
mov edi, eax
test edi, edi
jge 0x403631
mov eax, dword [ebp - 0x7c]
test eax, eax
mov byte [ebp + 0x9c], 0
je 0x403617
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x78]
test eax, eax
mov dword [ebp + 0x9c], esi
je 0x40366f
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, edi
jmp 0x4036db
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x78]
mov ecx, dword [eax]
push edx
lea edx, [ebp - 0x74]
push edx
push eax
call dword [ecx + 0x44]
mov edi, eax
test edi, edi
jge 0x403673
mov eax, dword [ebp - 0x7c]
test eax, eax
mov byte [ebp + 0x9c], 0
je 0x40365c
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x78]
test eax, eax
mov dword [ebp + 0x9c], esi
je 0x40366f
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, edi
jmp 0x4036db
call dword [fcn.00430090]
mov edx, dword [ebp + 0xa8]
mov eax, dword [ebp - 0x7c]
mov ecx, dword [eax]
push 1
push edx
push eax
call dword [ecx + 0x18]
mov esi, eax
test esi, esi
jge 0x4036ac
mov eax, dword [ebp - 0x7c]
test eax, eax
mov byte [ebp + 0x9c], 0
je 0x4036a5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x78]
test eax, eax
jmp 0x4036c7
xor edi, edi
mov eax, dword [ebp - 0x7c]
cmp eax, edi
mov byte [ebp + 0x9c], 0
je 0x4036c2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x78]
cmp eax, edi
mov dword [ebp + 0x9c], 0xffffffff
je 0x4036d9
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, esi
lea esp, [ebp - 0x8c]
mov ecx, dword [ebp + 0x94]
mov dword fs:[0], ecx
mov ecx, dword [ebp + 0x90]
call fcn.00412e0b
pop edi
pop esi
pop ebx
add ebp, 0xa0
mov esp, ebp
pop ebp
ret