Function at 0x407b60
Capabilities:
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
push edi
mov edi, eax
push esi
push ebx
mov ebx, edx
lea edx, [ebp - 0x5c]
mov eax, ebx
sub esp, 0x9c
mov dword [ebp - 0x70], ecx
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x5c], 0xffffffff
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
call fcn.00402c60
test eax, eax
je 0x407e70
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x74], eax
cmp eax, 0x19
ja 0x407de0
movzx ecx, byte [ebp - 0x74]
mov edx, 0xfdbef7ff
movzx eax, byte [section..data]
mov esi, dword [ebp - 0x60]
sar edx, cl
and edx, 1
mov dword [ebp - 0x6c], edx
jne 0x407dea
test al, 8
jne 0x407ef0
mov eax, dword [edi]
lea edx, [ebp - 0x58]
mov dword [esp], edi
mov dword [esp + 4], edx
call dword [eax + 0x10]
sub esp, 8
test eax, eax
js 0x407df2
test byte [section..data], 8
jne 0x407f60
mov eax, dword [edi]
lea edx, [ebp - 0x50]
mov dword [ebp - 0x48], 1
mov dword [ebp - 0x44], 9
mov dword [ebp - 0x40], 1
mov dword [ebp - 0x3c], 8
mov dword [esp + 8], edx
mov dword [esp + 4], 0x415718
mov dword [esp], edi
call dword [eax]
sub esp, 0xc
test eax, eax
js 0x407cfb
mov eax, dword [ebp - 0x50]
lea ecx, [ebp - 0x4c]
mov edx, dword [eax]
mov dword [esp + 0xc], ecx
mov dword [esp + 8], 0x10
mov dword [esp + 4], 0x413f18
mov dword [esp], eax
call dword [edx + 0x10]
sub esp, 0x10
test eax, eax
js 0x4081d0
mov eax, dword [ebp - 0x4c]
lea ecx, [ebp - 0x48]
lea edi, [ebp - 0x38]
mov edx, dword [eax]
mov dword [esp + 0xc], edi
mov dword [esp + 8], ecx
mov dword [esp + 4], 2
mov dword [esp], eax
call dword [edx + 0xc]
sub esp, 0x10
test eax, eax
js 0x4081ba
xor edi, edi
cmp word [ebp - 0x38], 0x1f
mov byte [ebp - 0x78], 0
je 0x408170
lea eax, [ebp - 0x38]
mov dword [esp], eax
call sub.ole32.dll_PropVariantClear
lea eax, [ebp - 0x28]
sub esp, 4
mov dword [esp], eax
call sub.ole32.dll_PropVariantClear
mov eax, dword [ebp - 0x4c]
sub esp, 4
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
mov eax, dword [ebp - 0x50]
sub esp, 4
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
sub esp, 4
cmp byte [ebp - 0x78], 0
je 0x407d00
mov edx, dword [ebp - 0x70]
movzx eax, byte [section..data]
test edx, edx
jne 0x408030
test al, 2
jne 0x408068
xor edi, edi
lea esi, [esi]
mov dword [esp + 0xc], str.winemenubuilder_semaphore
mov dword [esp + 8], 1
mov dword [esp + 4], 1
mov dword [esp], 0
call dword [sym.imp.kernel32.dll_CreateSemaphoreA]
mov dword [ebp - 0x54], eax
sub esp, 0x10
lea eax, [ebp - 0x54]
mov dword [esp + 0x10], 0x1cff
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], 1
call dword [sym.imp.user32.dll_MsgWaitForMultipleObjects]
sub esp, 0x14
test eax, eax
jne 0x407fd0
mov ecx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x58]
cmp ecx, 0x10
je 0x407ff0
cmp ecx, 0x19
je 0x407ff0
mov dword [esp], eax
mov ecx, str.start.exe
mov edx, esi
mov eax, ebx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0
mov dword [esp + 4], 0
call fcn.00403fd0
test eax, eax
sete al
movzx eax, al
xor eax, 1
mov dword [ebp - 0x6c], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 1
mov eax, dword [ebp - 0x54]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_ReleaseSemaphore]
sub esp, 0xc
jmp 0x407dfb
movzx eax, byte [section..data]
mov esi, dword [ebp - 0x60]
test al, 4
jne 0x4080f0
mov dword [ebp - 0x6c], 1
xor edi, edi
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x407e0e
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_CloseHandle]
sub esp, 4
mov dword [esp + 8], edi
mov ebx, dword [sym.imp.kernel32.dll_HeapFree]
mov dword [esp + 4], 0
mov edx, dword fs:[0x18]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x70], edx
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call ebx
sub esp, 0xc
mov dword [esp + 8], esi
mov dword [esp + 4], 0
mov edx, dword [ebp - 0x70]
mov eax, dword [edx + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call ebx
mov eax, dword [ebp - 0x58]
sub esp, 0xc
mov dword [esp], eax
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov eax, dword [ebp - 0x6c]
sub esp, 4
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
test byte [section..data], 4
jne 0x407e90
mov dword [ebp - 0x6c], 1
mov eax, dword [ebp - 0x6c]
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, ebx
shr eax, 0x10
je 0x408150
mov dword [esp + 4], 0xffffffff
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, str._invalid_
test edx, edx
jne 0x407ec1
mov eax, ebx
call fcn.00401250
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.Unknown_link_location__s._Ignoring._n
mov dword [esp + 8], str.InvokeShellLinkerForURL
mov dword [esp + 4], 0x40c000
mov dword [esp], 2
call fcn.00401540
jmp 0x407e79
test esi, esi
je 0x4081b0
mov eax, esi
shr eax, 0x10
je 0x408190
mov dword [esp + 4], 0xffffffff
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, str._invalid_
test edx, edx
jne 0x407f29
mov eax, esi
call fcn.00401250
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.Link_______:__s_n
mov dword [esp + 8], str.InvokeShellLinkerForURL
mov dword [esp + 4], 0x40c000
mov dword [esp], 3
call fcn.00401540
jmp 0x407bd5
mov edx, dword [ebp - 0x58]
test edx, edx
je 0x4081e8
mov eax, edx
shr eax, 0x10
je 0x4080d8
mov dword [esp + 4], 0xffffffff
mov dword [esp], edx
mov dword [ebp - 0x78], edx
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov ecx, eax
sub esp, 8
mov eax, str._invalid_
test ecx, ecx
jne 0x407fa0
mov eax, dword [ebp - 0x78]
call fcn.00401250
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.path_______:__s_n
mov dword [esp + 8], str.InvokeShellLinkerForURL
mov dword [esp + 4], 0x40c000
mov dword [esp], 3
call fcn.00401540
jmp 0x407bfc
test byte [section..data], 2
jne 0x408120
mov dword [ebp - 0x6c], 1
jmp 0x407dfb
mov dword [esp + 4], eax
xor edx, edx
xor eax, eax
mov ecx, esi
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp], str.start.exe
call fcn.00403860
test eax, eax
sete al
movzx eax, al
jmp 0x407daf
test al, 4
je 0x407df9
mov dword [esp + 0xc], str.Unable_to_extract_icon__deferring._n
mov dword [esp + 8], str.InvokeShellLinkerForURL
mov dword [esp + 4], 0x40c000
mov dword [esp], 2
call fcn.00401540
jmp 0x407df9
mov edi, dword [ebp - 0x30]
test edi, edi
je 0x408210
mov eax, edi
shr eax, 0x10
je 0x4081f8
mov dword [esp + 4], 0xffffffff
mov dword [esp], edi
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, str._invalid_
test edx, edx
jne 0x4080a4
mov eax, edi
call fcn.00401250
mov dword [esp + 0x10], eax
xor edi, edi
mov dword [esp + 0xc], str.failed_to_extract_icon_from__s_n
mov dword [esp + 8], str.InvokeShellLinkerForURL
mov dword [esp + 4], 0x40c000
mov dword [esp], 1
call fcn.00401540
jmp 0x407d00
movzx edx, dx
mov dword [esp], str._04x
mov dword [esp + 4], edx
call fcn.00401430
jmp 0x407fa0
mov dword [esp + 0xc], str.Not_under_desktop_or_start_menu._Ignoring._n
mov dword [esp + 8], str.InvokeShellLinkerForURL
mov dword [esp + 4], 0x40c000
mov dword [esp], 2
call fcn.00401540
jmp 0x407df2
mov dword [esp + 0xc], str.failed_wait_for_semaphore_n
mov dword [esp + 8], str.InvokeShellLinkerForURL
mov dword [esp + 4], 0x40c000
mov dword [esp], 1
call fcn.00401540
jmp 0x407fdd
movzx ebx, bx
mov dword [esp], str._04x
mov dword [esp + 4], ebx
call fcn.00401430
jmp 0x407ec1
mov edi, dword [ebp - 0x30]
test edi, edi
je 0x407ca3
cmp word [edi], 0
jne 0x40821a
xor edi, edi
jmp 0x407ca3
movzx eax, si
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401430
jmp 0x407f29
mov eax, str._null_
jmp 0x407f29
mov eax, dword [ebp - 0x4c]
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
push eax
lea esi, [esi]
lea esi, [esi]
mov eax, dword [ebp - 0x50]
xor edi, edi
mov edx, dword [eax]
mov dword [esp], eax
call dword [edx + 8]
sub esp, 4
jmp 0x407d00
mov eax, str._null_
jmp 0x407fa0
movzx edi, di
mov dword [esp], str._04x
mov dword [esp + 4], edi
call fcn.00401430
jmp 0x4080a4
mov eax, str._null_
jmp 0x4080a4
mov eax, dword [ebp - 0x70]
movsx edx, word [ebp - 0x20]
xor ecx, ecx
mov dword [esp], eax
mov eax, edi
call fcn.00406380
mov edi, eax
test byte [section..data], 8
jne 0x408243
test edi, edi
sete byte [ebp - 0x78]
jmp 0x407ca3
test eax, eax
je 0x408326
shr eax, 0x10
je 0x4082ef
mov dword [esp + 4], 0xffffffff
mov dword [esp], edi
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
push edx
push edx
test eax, eax
jne 0x40833c
mov eax, edi
call fcn.00401250
mov dword [ebp - 0x78], eax
movsx eax, word [ebp - 0x20]
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x7c], eax
test edx, edx
je 0x408332
mov eax, edx
shr eax, 0x10
je 0x40830a
mov dword [esp + 4], 0xffffffff
mov dword [esp], edx
mov dword [ebp - 0x80], edx
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
push ecx
push ecx
test eax, eax
jne 0x40831f
mov eax, dword [ebp - 0x80]
call fcn.00401250
mov ecx, dword [ebp - 0x78]
mov dword [esp + 0x18], ecx
mov ecx, dword [ebp - 0x7c]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], ecx
mov dword [esp + 0xc], str.URL_icon_path:__s_icon_index:__d_icon_name:__s_n
mov dword [esp + 8], str.InvokeShellLinkerForURL
mov dword [esp + 4], 0x40c000
mov dword [esp], 3
call fcn.00401540
jmp 0x408238
movzx eax, di
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401430
mov dword [ebp - 0x78], eax
jmp 0x408279
movzx edx, dx
mov dword [esp], str._04x
mov dword [esp + 4], edx
call fcn.00401430
jmp 0x4082b4
mov eax, str._invalid_
jmp 0x4082b4
mov dword [ebp - 0x78], str._null_
jmp 0x408279
mov eax, str._null_
jmp 0x4082b4
mov dword [ebp - 0x78], str._invalid_
jmp 0x408279