Function at 0x409c28
Capabilities:
Create process on windows
Create shortcut via ishelllink

Disassembly:
mov eax, 0x43c3f8
call fcn.0043ad60
push ecx
push ecx
push ebx
push esi
push edi
lea eax, [ebp - 0x10]
xor ebx, ebx
push eax
push 0x4418a0
push 1
push ebx
push 0x441890
mov dword [ebp - 4], 3
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov edi, eax
cmp edi, ebx
jl 0x409d41
mov ecx, dword [ebp + 0xc]
cmp ecx, ebx
jne 0x409c6e
mov ecx, dword [sym.imp.MSVCP60.dll_unsigned_short_int_const__private:_static_unsigned_short_int_const____cdecl_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Nullstr_void_::_2::_C]
mov eax, dword [ebp - 0x10]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x50]
mov ecx, dword [ebp + 0x2c]
cmp ecx, ebx
jne 0x409c85
mov ecx, dword [sym.imp.MSVCP60.dll_unsigned_short_int_const__private:_static_unsigned_short_int_const____cdecl_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Nullstr_void_::_2::_C]
mov eax, dword [ebp - 0x10]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x1c]
mov ecx, dword [ebp + 0x2c]
cmp ecx, ebx
jne 0x409c9c
mov ecx, dword [sym.imp.MSVCP60.dll_unsigned_short_int_const__private:_static_unsigned_short_int_const____cdecl_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Nullstr_void_::_2::_C]
mov eax, dword [ebp - 0x10]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x2c]
mov ecx, dword [ebp + 0x3c]
cmp ecx, ebx
jne 0x409cb3
mov ecx, dword [sym.imp.MSVCP60.dll_unsigned_short_int_const__private:_static_unsigned_short_int_const____cdecl_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Nullstr_void_::_2::_C]
mov eax, dword [ebp - 0x10]
push ebx
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x44]
mov eax, dword [ebp - 0x10]
lea edx, [ebp - 0x14]
push edx
push 0x4418b0
mov ecx, dword [eax]
push eax
call dword [ecx]
mov edi, eax
cmp edi, ebx
jl 0x409d38
mov ecx, dword [ebp + 0x1c]
cmp ecx, ebx
jne 0x409ce2
mov ecx, dword [sym.imp.MSVCP60.dll_unsigned_short_int_const__private:_static_unsigned_short_int_const____cdecl_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Nullstr_void_::_2::_C]
mov eax, dword [ebp - 0x14]
push 1
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x18]
mov esi, str.Quick_Launch
mov edi, eax
push esi
call dword [sym.imp.MSVCRT.dll_wcslen]
pop ecx
push eax
push ebx
push esi
lea ecx, [ebp + 0x18]
call dword [sym.imp.MSVCP60.dll_public:_unsigned_int___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::find_unsigned_short_int_const___unsigned_int__unsigned_int_const]
mov ecx, dword [sym.imp.MSVCP60.dll_unsigned_int_const_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::npos]
cmp eax, dword [ecx]
je 0x409d2f
mov eax, dword [ebp + 0x1c]
cmp eax, ebx
jne 0x409d1f
mov eax, dword [sym.imp.MSVCP60.dll_unsigned_short_int_const__private:_static_unsigned_short_int_const____cdecl_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Nullstr_void_::_2::_C]
push ebx
push ebx
push ebx
push eax
push str.taskbarpin
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 1
lea ecx, [ebp + 8]
pop esi
mov byte [ebp - 4], 2
push esi
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
push esi
lea ecx, [ebp + 0x18]
mov byte [ebp - 4], 1
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
push esi
lea ecx, [ebp + 0x28]
mov byte [ebp - 4], bl
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
or dword [ebp - 4], 0xffffffff
push esi
lea ecx, [ebp + 0x38]
call dword [sym.imp.MSVCP60.dll_private:_void___thiscall_std::basic_string_unsigned_short_int__struct_std::char_traits_unsigned_short_int___class_std::allocator_unsigned_short_int__::_Tidy_bool_]
mov ecx, dword [ebp - 0xc]
mov eax, edi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret