Function at 0x416920
Capabilities:
Create shortcut via ishelllink
Get common file path

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xc48
mov eax, dword [0x434040]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push esi
push edi
xor esi, esi
push 0x206
mov dword [ebp - 0xc48], eax
mov edi, ecx
lea eax, [ebp - 0x61e]
xor ecx, ecx
push esi
push eax
mov dword [ebp - 0xc44], edi
mov dword [ebp - 0xc3c], esi
mov dword [ebp - 0xc40], esi
mov word [ebp - 0x620], cx
call fcn.0040d442
add esp, 0xc
push 0x206
lea eax, [ebp - 0x20e]
xor ecx, ecx
push esi
push eax
mov word [ebp - 0x210], cx
call fcn.0040d442
add esp, 0xc
push 0x206
lea eax, [ebp - 0x416]
xor ecx, ecx
push esi
push eax
mov word [ebp - 0x418], cx
call fcn.0040d442
add esp, 0xc
push 0x206
lea eax, [ebp - 0x826]
xor ecx, ecx
push esi
push eax
mov word [ebp - 0x828], cx
call fcn.0040d442
add esp, 0xc
push 0x206
lea eax, [ebp - 0xa2e]
xor ecx, ecx
push esi
push eax
mov word [ebp - 0xa30], cx
call fcn.0040d442
add esp, 0xc
push 0x206
lea eax, [ebp - 0xc36]
xor ecx, ecx
push esi
push eax
mov word [ebp - 0xc38], cx
call fcn.0040d442
add esp, 0xc
push edx
lea ecx, [ebp - 0x210]
push 0x104
push ecx
call fcn.00420d20
add esp, 0xc
test eax, eax
je 0x416a2d
mov esi, 0x80004005
jmp 0x416c1c
push 0x404d30
lea edx, [ebp - 0x210]
push 0x104
push edx
call fcn.00420d20
add esp, 0xc
test eax, eax
je 0x416a54
mov esi, 0x80004005
jmp 0x416c1c
cmp byte [ebp + 0xc], 0
je 0x416a67
lea eax, [ebp - 0x418]
push eax
push esi
push esi
push 2
jmp 0x416a72
lea ecx, [ebp - 0x418]
push ecx
push esi
push esi
push 0x10
push esi
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
mov esi, eax
test esi, esi
js 0x416c1c
lea edx, [ebp - 0x210]
push edx
lea eax, [ebp - 0x418]
push eax
lea ecx, [ebp - 0x828]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
test eax, eax
jne 0x416aac
mov esi, 0x8000ffff
jmp 0x416c1c
push edi
lea edx, [ebp - 0xa30]
push 0x104
push edx
call fcn.00420d20
add esp, 0xc
test eax, eax
je 0x416acf
mov esi, 0x80004005
jmp 0x416c1c
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
mov esi, eax
test esi, esi
js 0x416c1c
lea eax, [ebp - 0xc3c]
push eax
push 0x405008
push 0x17
push 0
push 0x402e6c
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov esi, eax
test esi, esi
js 0x416c1c
mov esi, dword [ebp - 0xc40]
mov eax, dword [ebp - 0xc3c]
cmp esi, eax
je 0x416b43
mov dword [ebp - 0xc40], 0
test eax, eax
je 0x416b37
mov ecx, dword [eax]
lea edx, [ebp - 0xc40]
push edx
push 0x404ff8
push eax
mov eax, dword [ecx]
call eax
test esi, esi
je 0x416b43
mov ecx, dword [esi]
mov edx, dword [ecx + 8]
push esi
call edx
cmp dword [ebp - 0xc40], 0
jne 0x416b56
mov esi, 0x8000ffff
jmp 0x416c1c
lea edi, [ebp - 0x620]
call fcn.00416e50
mov esi, eax
test esi, esi
js 0x416c1c
lea eax, [ebp - 0xc38]
call fcn.00416e20
mov esi, eax
test esi, esi
js 0x416c1c
mov eax, dword [ebp - 0xc3c]
mov ecx, dword [eax]
mov edx, edi
push edx
push eax
mov eax, dword [ecx + 0x50]
call eax
mov esi, eax
test esi, esi
js 0x416c1c
test ebx, ebx
je 0x416bb6
mov eax, dword [ebp - 0xc3c]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x44]
push 0
push ebx
push eax
call edx
mov esi, eax
test esi, esi
js 0x416c1c
mov eax, dword [ebp - 0xc3c]
mov ecx, dword [eax]
lea edx, [ebp - 0xa30]
push edx
push eax
mov eax, dword [ecx + 0x2c]
call eax
mov esi, eax
test esi, esi
js 0x416c1c
mov eax, dword [ebp - 0xc3c]
mov edx, dword [ebp - 0xc48]
mov ecx, dword [eax]
push edx
push eax
mov eax, dword [ecx + 0x1c]
call eax
mov esi, eax
test esi, esi
js 0x416c1c
mov edi, dword [ebp - 0xc3c]
mov ecx, dword [ebp - 0xc44]
call fcn.00417e80
mov esi, eax
test esi, esi
js 0x416c1c
mov eax, dword [ebp - 0xc40]
mov ecx, dword [eax]
push 1
lea edx, [ebp - 0x828]
push edx
push eax
mov eax, dword [ecx + 0x18]
call eax
mov esi, eax
mov eax, dword [ebp - 0xc40]
test eax, eax
je 0x416c38
mov dword [ebp - 0xc40], 0
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0xc3c]
test eax, eax
je 0x416c54
mov dword [ebp - 0xc3c], 0
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, dword [ebp - 0xc40]
test eax, eax
je 0x416c6c
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0xc3c]
test eax, eax
je 0x416c7e
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov ecx, dword [ebp - 4]
pop edi
mov eax, esi
xor ecx, ebp
pop esi
call fcn.00420627
mov esp, ebp
pop ebp
ret 8