Function at 0x14004e160
Capabilities:
Create shortcut via ishelllink

Disassembly:
push r14
push rsi
push rdi
push rbx
sub rsp, 0x2c8
mov r14, r8
mov edi, edx
mov rsi, rcx
mov rax, qword [0x14017b818]
xor rax, rsp
mov qword [rsp + 0x2c0], rax
mov qword [rsp + 0x88], 0
lea rax, [rsp + 0x88]
mov qword [rsp + 0x20], rax
lea rcx, [0x14015fc90]
lea r9, [0x14014fe88]
xor ebx, ebx
xor edx, edx
mov r8d, 1
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x14004ea01
mov qword [rsp + 0x80], 0
mov rcx, qword [rsp + 0x88]
mov rax, qword [rcx]
lea rdx, [0x14014fec8]
lea r8, [rsp + 0x80]
call qword [rax]
test eax, eax
js 0x14004e9e0
mov rcx, qword [rsp + 0x80]
cmp qword [rsi + 0x18], 7
jbe 0x14004e207
mov rsi, qword [rsi]
mov rax, qword [rcx]
xor ebx, ebx
xor r8d, r8d
mov rdx, rsi
call qword [rax + 0x28]
test eax, eax
js 0x14004e9e2
mov dword [r14 + 0xdc], 0
test dil, 1
je 0x14004e2a4
mov rcx, qword [rsp + 0x88]
mov rax, qword [rcx]
mov dword [rsp + 0x20], 2
xor ebx, ebx
lea rsi, [rsp + 0xb0]
mov r8d, 0x104
xor r9d, r9d
mov rdx, rsi
call qword [rax + 0x18]
test eax, eax
js 0x14004e9e2
mov qword [rsp + 0x70], rsi
mov rcx, rsi
call fcn.140120930
mov qword [rsp + 0x78], rax
lea rsi, [rsp + 0x90]
lea rdx, [rsp + 0x70]
mov rcx, rsi
call fcn.140028910
mov rcx, r14
mov rdx, rsi
call fcn.140028a30
or byte [r14 + 0xdc], 1
mov rcx, rsi
call fcn.1400289c0
test dil, 2
je 0x14004e314
mov rcx, qword [rsp + 0x88]
mov rax, qword [rcx]
lea rsi, [rsp + 0xb0]
mov r8d, 0x104
mov rdx, rsi
call qword [rax + 0x40]
test eax, eax
js 0x14004e9e0
mov qword [rsp + 0x60], rsi
mov rcx, rsi
call fcn.140120930
mov qword [rsp + 0x68], rax
lea rsi, [rsp + 0x90]
lea rdx, [rsp + 0x60]
mov rcx, rsi
call fcn.140028910
lea rcx, [r14 + 0x20]
mov rdx, rsi
call fcn.140028a30
or byte [r14 + 0xdc], 2
mov rcx, rsi
call fcn.1400289c0
test dil, 4
je 0x14004e48a
mov rcx, qword [rsp + 0x88]
mov rax, qword [rcx]
lea rdx, [rsp + 0xb0]
mov r8d, 0x104
call qword [rax + 0x50]
test eax, eax
js 0x14004e9e0
mov eax, 7
movq xmm0, rax
pslldq xmm0, 8
movdqu xmmword [rsp + 0xa0], xmm0
mov word [rsp + 0x90], 0
lea rcx, [rsp + 0xb0]
call fcn.140120930
mov rsi, rax
cmp rax, 7
jbe 0x14004e394
lea rcx, [rsp + 0x90]
lea r9, [rsp + 0xb0]
mov rdx, rsi
call fcn.140005da0
jmp 0x14004e3c1
mov qword [rsp + 0xa0], rsi
mov r8, rsi
add r8, rsi
lea rcx, [rsp + 0x90]
lea rdx, [rsp + 0xb0]
call fcn.14011d3a0
mov word [rsp + rsi*2 + 0x90], 0
lea rsi, [r14 + 0x40]
lea rax, [rsp + 0x90]
cmp rsi, rax
je 0x14004e428
mov rbx, qword [rsp + 0xa0]
cmp qword [rsp + 0xa8], 7
jbe 0x14004e3ed
mov rax, qword [rsp + 0x90]
mov rcx, qword [r14 + 0x58]
cmp rcx, rbx
jae 0x14004e406
mov rcx, rsi
mov rdx, rbx
mov r9, rax
call fcn.140005da0
jmp 0x14004e428
cmp rcx, 8
jb 0x14004e40f
mov rsi, qword [rsi]
mov qword [r14 + 0x50], rbx
lea r8, [rbx + rbx]
mov rcx, rsi
mov rdx, rax
call fcn.14011d3a0
mov word [rsi + rbx*2], 0
or byte [r14 + 0xdc], 4
mov rax, qword [rsp + 0xa8]
cmp rax, 8
jb 0x14004e48a
add rax, 1
js 0x14004eac9
mov rcx, qword [rsp + 0x90]
add rax, rax
cmp rax, 0x1000
jb 0x14004e485
test cl, 0x1f
jne 0x14004eac9
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x14004eac9
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
mov rcx, rax
jae 0x14004eac9
call fcn.14011a350
test dil, 8
je 0x14004e600
mov rcx, qword [rsp + 0x88]
mov rax, qword [rcx]
lea rdx, [rsp + 0xb0]
mov r8d, 0x104
call qword [rax + 0x30]
test eax, eax
js 0x14004e9e0
mov eax, 7
movq xmm0, rax
pslldq xmm0, 8
movdqu xmmword [rsp + 0xa0], xmm0
mov word [rsp + 0x90], 0
lea rcx, [rsp + 0xb0]
call fcn.140120930
mov rsi, rax
cmp rax, 7
jbe 0x14004e50a
lea rcx, [rsp + 0x90]
lea r9, [rsp + 0xb0]
mov rdx, rsi
call fcn.140005da0
jmp 0x14004e537
mov qword [rsp + 0xa0], rsi
mov r8, rsi
add r8, rsi
lea rcx, [rsp + 0x90]
lea rdx, [rsp + 0xb0]
call fcn.14011d3a0
mov word [rsp + rsi*2 + 0x90], 0
lea rsi, [r14 + 0x60]
lea rax, [rsp + 0x90]
cmp rsi, rax
je 0x14004e59e
mov rbx, qword [rsp + 0xa0]
cmp qword [rsp + 0xa8], 7
jbe 0x14004e563
mov rax, qword [rsp + 0x90]
mov rcx, qword [r14 + 0x78]
cmp rcx, rbx
jae 0x14004e57c
mov rcx, rsi
mov rdx, rbx
mov r9, rax
call fcn.140005da0
jmp 0x14004e59e
cmp rcx, 8
jb 0x14004e585
mov rsi, qword [rsi]
mov qword [r14 + 0x70], rbx
lea r8, [rbx + rbx]
mov rcx, rsi
mov rdx, rax
call fcn.14011d3a0
mov word [rsi + rbx*2], 0
or byte [r14 + 0xdc], 8
mov rax, qword [rsp + 0xa8]
cmp rax, 8
jb 0x14004e600
add rax, 1
js 0x14004eac9
mov rcx, qword [rsp + 0x90]
add rax, rax
cmp rax, 0x1000
jb 0x14004e5fb
test cl, 0x1f
jne 0x14004eac9
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x14004eac9
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
mov rcx, rax
jae 0x14004eac9
call fcn.14011a350
test dil, 0x10
je 0x14004e68a
mov rcx, qword [rsp + 0x88]
mov rax, qword [rcx]
lea rsi, [rsp + 0xb0]
lea r9, [rsp + 0x30]
mov r8d, 0x104
mov rdx, rsi
call qword [rax + 0x80]
test eax, eax
js 0x14004e9e0
mov ebx, dword [rsp + 0x30]
mov qword [rsp + 0x50], rsi
mov rcx, rsi
call fcn.140120930
mov qword [rsp + 0x58], rax
lea rsi, [rsp + 0x90]
lea rdx, [rsp + 0x50]
mov rcx, rsi
call fcn.140028910
mov rcx, r14
sub rcx, 0xffffffffffffff80
mov rdx, rsi
call fcn.140028a30
mov dword [r14 + 0xa0], ebx
or byte [r14 + 0xdc], 0x10
mov rcx, rsi
call fcn.1400289c0
test dil, 0xe0
je 0x14004ea3f
mov qword [rsp + 0x48], 0
mov rcx, qword [rsp + 0x88]
mov rax, qword [rcx]
lea rdx, [0x14014fed8]
lea r8, [rsp + 0x48]
call qword [rax]
mov esi, 1
test eax, eax
js 0x14004e9c3
test dil, 0x20
je 0x14004e8ec
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x30], xmm0
mov qword [rsp + 0x40], 0
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
lea rdx, [0x14014fa60]
lea r8, [rsp + 0x30]
call qword [rax + 0x28]
mov ebx, 1
test eax, eax
jne 0x14004e8ca
movzx eax, word [rsp + 0x30]
cmp eax, 0x1f
je 0x14004e781
mov ebx, 1
test ax, ax
jne 0x14004e8cf
mov eax, 7
movq xmm0, rax
pslldq xmm0, 8
movdqu xmmword [rsp + 0xa0], xmm0
mov word [rsp + 0x90], 0
lea rax, [r14 + 0xa8]
cmp qword [r14 + 0xc0], 8
jb 0x14004e752
mov rax, qword [rax]
mov qword [r14 + 0xb8], 0
mov word [rax], 0
mov rax, qword [rsp + 0xa8]
or dword [r14 + 0xdc], 0x20
cmp rax, 8
jae 0x14004e87c
jmp 0x14004e8c8
mov rsi, qword [rsp + 0x38]
mov eax, 7
movq xmm0, rax
pslldq xmm0, 8
movdqu xmmword [rsp + 0xa0], xmm0
mov word [rsp + 0x90], 0
mov rcx, rsi
call fcn.140120930
mov rbx, rax
cmp rax, 7
jbe 0x14004e7ce
lea rcx, [rsp + 0x90]
mov rdx, rbx
mov r9, rsi
call fcn.140005da0
jmp 0x14004e7f6
mov qword [rsp + 0xa0], rbx
mov r8, rbx
add r8, rbx
lea rcx, [rsp + 0x90]
mov rdx, rsi
call fcn.14011d3a0
mov word [rsp + rbx*2 + 0x90], 0
lea rsi, [r14 + 0xa8]
lea rax, [rsp + 0x90]
cmp rsi, rax
je 0x14004e866
mov rbx, qword [rsp + 0xa0]
cmp qword [rsp + 0xa8], 7
jbe 0x14004e825
mov rax, qword [rsp + 0x90]
mov rcx, qword [r14 + 0xc0]
cmp rcx, rbx
jae 0x14004e841
mov rcx, rsi
mov rdx, rbx
mov r9, rax
call fcn.140005da0
jmp 0x14004e866
cmp rcx, 8
jb 0x14004e84a
mov rsi, qword [rsi]
mov qword [r14 + 0xb8], rbx
lea r8, [rbx + rbx]
mov rcx, rsi
mov rdx, rax
call fcn.14011d3a0
mov word [rsi + rbx*2], 0
or byte [r14 + 0xdc], 0x20
mov rax, qword [rsp + 0xa8]
cmp rax, 8
jb 0x14004e8c8
add rax, 1
js 0x14004eac9
mov rcx, qword [rsp + 0x90]
add rax, rax
cmp rax, 0x1000
jb 0x14004e8c3
test cl, 0x1f
jne 0x14004eac9
mov rax, qword [rcx - 8]
cmp rax, rcx
jae 0x14004eac9
add rcx, 0xfffffffffffffff8
sub rcx, rax
cmp rcx, 0x20
mov rcx, rax
jae 0x14004eac9
call fcn.14011a350
xor ebx, ebx
movzx eax, word [rsp + 0x30]
test ax, ax
je 0x14004e8df
lea rcx, [rsp + 0x30]
call qword [sym.imp.ole32.dll_PropVariantClear]
mov esi, 1
test ebx, ebx
jne 0x14004e9c3
test dil, 0x40
jne 0x14004e968
xor esi, esi
test dil, dil
jns 0x14004e9c3
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x90], xmm0
mov qword [rsp + 0xa0], 0
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
lea rdx, [0x14014fa88]
lea r8, [rsp + 0x90]
call qword [rax + 0x28]
movzx ecx, word [rsp + 0x90]
test eax, eax
jne 0x14004e9ab
movzx eax, cx
cmp eax, 0x48
je 0x14004ea99
test cx, cx
jne 0x14004e9b0
movdqu xmm0, xmmword [0x14015fc80]
movdqu xmmword [r14 + 0xcc], xmm0
or byte [r14 + 0xdc], 0x80
jmp 0x14004e9c3
pxor xmm0, xmm0
movdqa xmmword [rsp + 0x90], xmm0
mov qword [rsp + 0xa0], 0
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
lea rdx, [0x14014fa74]
lea r8, [rsp + 0x90]
call qword [rax + 0x28]
movzx ecx, word [rsp + 0x90]
test eax, eax
je 0x14004ea43
test cx, cx
je 0x14004e9be
lea rcx, [rsp + 0x90]
call qword [sym.imp.ole32.dll_PropVariantClear]
mov esi, 1
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14004e9dc
mov qword [rsp + 0x48], 0
mov rax, qword [rcx]
call qword [rax + 0x10]
test esi, esi
je 0x14004ea3f
xor ebx, ebx
mov rcx, qword [rsp + 0x80]
test rcx, rcx
je 0x14004ea01
mov qword [rsp + 0x80], 0
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x88]
test rcx, rcx
je 0x14004ea20
mov qword [rsp + 0x88], 0
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rsp + 0x2c0]
xor rcx, rsp
call fcn.14011a370
mov eax, ebx
add rsp, 0x2c8
pop rbx
pop rdi
pop rsi
pop r14
ret
mov bl, 1
jmp 0x14004e9e2
movzx eax, cx
cmp eax, 0xb
je 0x14004ea69
test cx, cx
jne 0x14004e9b0
mov byte [r14 + 0xc8], 0
or byte [r14 + 0xdc], 0x40
jmp 0x14004e8f2
movzx eax, word [rsp + 0x98]
cmp eax, 0xffff
sete byte [r14 + 0xc8]
or byte [r14 + 0xdc], 0x40
lea rcx, [rsp + 0x90]
call qword [sym.imp.ole32.dll_PropVariantClear]
jmp 0x14004e8f2
mov rax, qword [rsp + 0x98]
movdqu xmm0, xmmword [rax]
movdqu xmmword [r14 + 0xcc], xmm0
or byte [r14 + 0xdc], 0x80
lea rcx, [rsp + 0x90]
call qword [sym.imp.ole32.dll_PropVariantClear]
jmp 0x14004e9c3
call fcn.140120f80
ud2