Function at 0x401010
Capabilities:
Create shortcut via ishelllink
Get common file path
Get startup folder

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x744
mov eax, dword [0x412860]
mov dword [ebp - 8], eax
push edi
mov dword [ebp - 0x210], 0
mov dword [ebp - 4], 0
mov word [ebp - 0x208], 0
mov ecx, 0x7f
xor eax, eax
lea edi, [ebp - 0x206]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0x210]
push eax
push 0x40e9dc
push 1
push 0
push 0x40ec0c
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0
jl 0x4012d4
lea ecx, [ebp - 4]
push ecx
push 0x40efd0
mov edx, dword [ebp - 0x210]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x210]
push ecx
call dword [eax]
test eax, eax
jl 0x4012cd
mov byte [ebp - 0x528], 0
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x527]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x740], 0
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x73f]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov byte [ebp - 0x638], 0
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x637]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov dword [ebp - 0x41c], 0
mov dword [ebp - 0x41c], 0x104
push 0
push 0
mov edx, dword [ebp - 0x41c]
push edx
lea eax, [ebp - 0x528]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp + 0xc]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov dword [ebp - 0x41c], 0x104
push 0
push 0
mov edx, dword [ebp - 0x41c]
push edx
lea eax, [ebp - 0x740]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp + 0x14]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov dword [ebp - 0x41c], 0x104
push 0
push 0
mov edx, dword [ebp - 0x41c]
push edx
lea eax, [ebp - 0x638]
push eax
push 0xffffffffffffffff
mov ecx, dword [ebp + 0x18]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea edx, [ebp - 0x528]
push edx
mov eax, dword [ebp - 0x210]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x210]
push edx
call dword [ecx + 0x50]
test eax, eax
jl 0x4012c9
lea eax, [ebp - 0x740]
push eax
mov ecx, dword [ebp - 0x210]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x210]
push eax
call dword [edx + 0x1c]
test eax, eax
jl 0x4012c9
lea ecx, [ebp - 0x638]
push ecx
mov edx, dword [ebp - 0x210]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x210]
push ecx
call dword [eax + 0x2c]
test eax, eax
jl 0x4012c9
lea edx, [ebp - 0x52c]
push edx
push 0x18
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
test eax, eax
je 0x40120e
lea ecx, [ebp - 0x52c]
push ecx
push 7
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderLocation]
test eax, eax
je 0x40120e
jmp 0x4012e7
push 0x208
push 0
lea eax, [ebp - 0x418]
push eax
call sub.MSVCR71.dll_memset
add esp, 0xc
lea ecx, [ebp - 0x418]
push ecx
mov edx, dword [ebp - 0x52c]
push edx
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
test eax, eax
je 0x40127d
push 0x40e30c
push 0x208
lea eax, [ebp - 0x418]
push eax
call fcn.004013d0
mov ecx, dword [ebp + 0x10]
push ecx
push 0x208
lea edx, [ebp - 0x418]
push edx
call fcn.004013d0
push 0x40e310
push 0x208
lea eax, [ebp - 0x418]
push eax
call fcn.004013d0
push 1
lea ecx, [ebp - 0x418]
push ecx
mov edx, dword [ebp - 4]
mov eax, dword [edx]
mov ecx, dword [ebp - 4]
push ecx
call dword [eax + 0x18]
test eax, eax
jge 0x401298
jmp 0x4012e7
mov edx, dword [ebp - 0x210]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x210]
push ecx
call dword [eax + 8]
mov dword [ebp - 0x210], 0
mov edx, dword [ebp - 4]
mov eax, dword [edx]
mov ecx, dword [ebp - 4]
push ecx
call dword [eax + 8]
mov dword [ebp - 4], 0
jmp 0x4012cb
jmp 0x4012e7
jmp 0x4012cf
jmp 0x4012e7
jmp 0x4013b3
push 0
push 0
push str.CocreateInstance_Failed
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp dword [ebp - 0x210], 0
je 0x401302
mov eax, dword [ebp - 0x210]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x210]
push edx
call dword [ecx + 8]
cmp dword [ebp - 4], 0
je 0x401314
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
mov edx, dword [ebp - 4]
push edx
call dword [ecx + 8]
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x744], eax
cmp dword [ebp - 0x744], 0x80070057
jg 0x401352
cmp dword [ebp - 0x744], 0x80070057
je 0x40139c
cmp dword [ebp - 0x744], 0x80040110
je 0x401372
cmp dword [ebp - 0x744], 0x80040154
je 0x40135d
jmp 0x4013af
cmp dword [ebp - 0x744], 0
je 0x401387
jmp 0x4013af
push 0
push 0
push str.REGDB_E_CLASSNOTREG
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x4013af
push 0
push 0
push str.CLASS_E_NOAGGREGATION
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x4013af
push 0
push 0
push str.S_OK
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x4013af
push 0
push 0
push str.E_INVALIDARG
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_MessageBoxW]
xor eax, eax
jmp 0x4013b8
mov eax, 1
mov ecx, dword [ebp - 8]
call fcn.0040cd05
pop edi
mov esp, ebp
pop ebp
ret