Function at 0x409b30
Capabilities:
Create shortcut via ishelllink

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x320
mov eax, dword [0x452550]
xor eax, ebp
mov dword [ebp - 4], eax
cmp dword [ebp + 0xc], 0
jne 0x409b50
xor eax, eax
jmp 0x409d64
lea eax, [ebp - 0x314]
push eax
push 0x445d4c
push 1
push 0
push 0x44601c
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 0
jge 0x409b81
xor eax, eax
jmp 0x409d64
lea ecx, [ebp - 0x31c]
push ecx
push 0x44602c
mov edx, dword [ebp - 0x314]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x314]
push ecx
mov edx, dword [eax]
call edx
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 0
jge 0x409bca
mov eax, dword [ebp - 0x314]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x314]
push edx
mov eax, dword [ecx + 8]
call eax
xor eax, eax
jmp 0x409d64
cmp dword [ebp + 8], 0
jne 0x409bed
mov ecx, dword [0x637e4c]
push ecx
mov edx, dword [ebp - 0x314]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x314]
push ecx
mov edx, dword [eax + 0x50]
call edx
jmp 0x409c05
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x314]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x314]
push eax
mov ecx, dword [edx + 0x50]
call ecx
cmp dword [ebp + 0x14], 0
je 0x409c23
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp - 0x314]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x314]
push edx
mov eax, dword [ecx + 0x50]
call eax
movzx ecx, word [ebp + 0x18]
test ecx, ecx
je 0x409c44
movzx edx, word [ebp + 0x18]
push edx
mov eax, dword [ebp - 0x314]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x314]
push edx
mov eax, dword [ecx + 0x34]
call eax
mov ecx, dword [ebp + 0x20]
push ecx
mov edx, dword [ebp - 0x314]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x314]
push ecx
mov edx, dword [eax + 0x3c]
call edx
mov eax, dword [ebp + 0x1c]
push eax
mov ecx, dword [ebp - 0x314]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x314]
push eax
mov ecx, dword [edx + 0x1c]
call ecx
cmp dword [ebp + 8], 0
je 0x409c94
push 0
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0x314]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x314]
push edx
mov eax, dword [ecx + 0x44]
call eax
cmp dword [ebp + 0x10], 0
je 0x409cb8
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
push 0x448678
lea eax, [ebp - 0x108]
push eax
call fcn.00428c74
add esp, 0x10
jmp 0x409cd5
push str.unknown.lnk
mov ecx, dword [ebp + 0xc]
push ecx
push 0x44868c
lea edx, [ebp - 0x108]
push edx
call fcn.00428c74
add esp, 0x10
push 0x104
lea eax, [ebp - 0x310]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0x108]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
push 1
lea edx, [ebp - 0x310]
push edx
mov eax, dword [ebp - 0x31c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x31c]
push edx
mov eax, dword [ecx + 0x18]
call eax
mov dword [ebp - 0x318], eax
mov ecx, dword [ebp - 0x31c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x31c]
push eax
mov ecx, dword [edx + 8]
call ecx
mov edx, dword [ebp - 0x314]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x314]
push ecx
mov edx, dword [eax + 8]
call edx
cmp dword [ebp - 0x318], 0
jl 0x409d54
mov dword [ebp - 0x320], 1
jmp 0x409d5e
mov dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x320]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004279e7
mov esp, ebp
pop ebp
ret