Function at 0x403450
Capabilities:
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
mov esi, eax
push ebx
sub esp, 0x5c
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x20], ecx
test byte [section..data], 8
jne 0x403570
mov eax, dword [ebp - 0x1c]
mov dword [esp], str._s_applicationswine_s.desktop
mov dword [esp + 8], eax
mov eax, dword [0x419208]
mov dword [esp + 4], eax
call fcn.004018f0
mov dword [esp + 4], 0x5c
mov ebx, eax
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_wcsrchr]
xor edx, edx
mov word [eax], dx
mov dword [ebp - 0x24], eax
mov eax, ebx
call section..text
mov ecx, dword [ebp - 0x24]
test eax, eax
mov edi, eax
jne 0x403518
test byte [section..data], 4
jne 0x4037c8
xor edi, edi
mov dword [esp + 8], ebx
mov ebx, dword [sym.imp.kernel32.dll_HeapFree]
mov dword [esp + 4], 0
mov esi, dword fs:[0x18]
mov eax, dword [esi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call ebx
sub esp, 0xc
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov eax, dword [esi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call ebx
mov eax, edi
sub esp, 0xc
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, 0x5c
mov edx, ebx
mov word [ecx], ax
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp - 0x1c]
mov dword [esp + 0x14], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x10], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 8], eax
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x20]
mov dword [esp], eax
mov eax, esi
call fcn.00402b20
mov edi, eax
test eax, eax
je 0x403850
mov edi, 1
jmp 0x4034c4
mov eax, dword [ebp + 0x18]
test eax, eax
je 0x4039f0
mov eax, dword [ebp + 0x18]
shr eax, 0x10
je 0x403830
mov eax, dword [ebp + 0x18]
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov dword [ebp - 0x30], str._invalid_
sub esp, 8
test eax, eax
jne 0x4035b4
mov eax, dword [ebp + 0x18]
call fcn.00401240
mov dword [ebp - 0x30], eax
mov eax, dword [ebp + 0x14]
test eax, eax
je 0x4039d0
mov eax, dword [ebp + 0x14]
shr eax, 0x10
je 0x4038e8
mov eax, dword [ebp + 0x14]
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov dword [ebp - 0x2c], str._invalid_
sub esp, 8
test eax, eax
jne 0x4035f8
mov eax, dword [ebp + 0x14]
call fcn.00401240
mov dword [ebp - 0x2c], eax
mov edi, dword [ebp + 0x10]
test edi, edi
je 0x403a00
mov eax, dword [ebp + 0x10]
shr eax, 0x10
je 0x4038c8
mov eax, dword [ebp + 0x10]
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov dword [ebp - 0x28], str._invalid_
sub esp, 8
test eax, eax
jne 0x40363c
mov eax, dword [ebp + 0x10]
call fcn.00401240
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp + 0xc]
test ebx, ebx
je 0x4039c0
mov eax, dword [ebp + 0xc]
shr eax, 0x10
je 0x403990
mov eax, dword [ebp + 0xc]
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov dword [ebp - 0x24], str._invalid_
sub esp, 8
test eax, eax
jne 0x403680
mov eax, dword [ebp + 0xc]
call fcn.00401240
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp + 8]
test ecx, ecx
je 0x4039b0
mov eax, dword [ebp + 8]
shr eax, 0x10
je 0x403970
mov eax, dword [ebp + 8]
mov dword [esp + 4], 0xffffffff
mov edi, str._invalid_
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
sub esp, 8
test eax, eax
jne 0x4036c1
mov eax, dword [ebp + 8]
call fcn.00401240
mov edi, eax
mov eax, dword [ebp - 0x20]
shr eax, 0x10
je 0x403950
mov eax, dword [ebp - 0x20]
mov dword [esp + 4], 0xffffffff
mov ebx, str._invalid_
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
sub esp, 8
test eax, eax
jne 0x4036f7
mov eax, dword [ebp - 0x20]
call fcn.00401240
mov ebx, eax
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x4039e0
shr eax, 0x10
je 0x403930
mov eax, dword [ebp - 0x1c]
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, str._invalid_
sub esp, 8
test eax, eax
jne 0x403735
mov eax, dword [ebp - 0x1c]
call fcn.00401240
mov edx, eax
mov eax, esi
shr eax, 0x10
je 0x403908
mov dword [ebp - 0x34], edx
mov dword [esp + 4], 0xffffffff
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, dword [ebp - 0x34]
mov ecx, eax
sub esp, 8
mov eax, str._invalid_
test ecx, ecx
jne 0x40376f
mov eax, esi
call fcn.00401240
mov edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x18], ebx
mov dword [esp + 0x2c], ecx
mov ecx, dword [ebp - 0x2c]
mov dword [esp + 0x14], edx
mov dword [esp + 0x28], ecx
mov ecx, dword [ebp - 0x28]
mov dword [esp + 0x10], eax
mov dword [esp + 0x24], ecx
mov ecx, dword [ebp - 0x24]
mov dword [esp + 0xc], str.__s___s___s___s___s___s___s___s__n
mov dword [esp + 0x20], ecx
mov dword [esp + 8], str.write_menu_entry
mov dword [esp + 4], 0x40c000
mov dword [esp], 3
call fcn.004014e0
jmp 0x40346e
test ebx, ebx
je 0x403a40
mov eax, ebx
shr eax, 0x10
je 0x403a20
mov dword [esp + 4], 0xffffffff
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov ecx, eax
sub esp, 8
mov eax, str._invalid_
test ecx, ecx
jne 0x403801
mov eax, ebx
call fcn.00401240
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.couldnt_make_parent_directories_for__s_n
mov dword [esp + 8], str.write_menu_entry
mov dword [esp + 4], 0x40c000
mov dword [esp], 2
call fcn.004014e0
jmp 0x4034c4
movzx eax, word [ebp + 0x18]
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401420
mov dword [ebp - 0x30], eax
jmp 0x4035b4
test byte [section..data], 4
je 0x4034c2
test ebx, ebx
je 0x403a0c
mov eax, ebx
shr eax, 0x10
je 0x403a50
mov dword [esp + 4], 0xffffffff
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov ecx, eax
sub esp, 8
mov eax, str._invalid_
test ecx, ecx
jne 0x403896
mov eax, ebx
call fcn.00401240
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.couldnt_make_desktop_entry__s_n
mov dword [esp + 8], str.write_menu_entry
mov dword [esp + 4], 0x40c000
mov dword [esp], 2
call fcn.004014e0
jmp 0x4034c4
movzx eax, word [ebp + 0x10]
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401420
mov dword [ebp - 0x28], eax
jmp 0x40363c
movzx eax, word [ebp + 0x14]
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401420
mov dword [ebp - 0x2c], eax
jmp 0x4035f8
movzx eax, si
mov dword [esp], str._04x
mov dword [esp + 4], eax
mov dword [ebp - 0x34], edx
call fcn.00401420
mov edx, dword [ebp - 0x34]
jmp 0x40376f
movzx eax, word [ebp - 0x1c]
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401420
mov edx, eax
jmp 0x403735
movzx eax, word [ebp - 0x20]
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401420
mov ebx, eax
jmp 0x4036f7
movzx eax, word [ebp + 8]
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401420
mov edi, eax
jmp 0x4036c1
movzx eax, word [ebp + 0xc]
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401420
mov dword [ebp - 0x24], eax
jmp 0x403680
mov edi, str._null_
jmp 0x4036c1
mov dword [ebp - 0x24], str._null_
jmp 0x403680
mov dword [ebp - 0x2c], str._null_
jmp 0x4035f8
mov edx, str._null_
jmp 0x403735
mov dword [ebp - 0x30], str._null_
jmp 0x4035b4
mov dword [ebp - 0x28], str._null_
jmp 0x40363c
mov eax, str._null_
jmp 0x403896
movzx eax, bx
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401420
jmp 0x403801
mov eax, str._null_
jmp 0x403801
movzx eax, bx
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401420
jmp 0x403896