Function at 0x403fd0
Capabilities:
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
mov ebx, edx
sub esp, 0x5c
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], ecx
test byte [section..data], 8
jne 0x404150
mov dword [esp + 8], ebx
mov eax, dword [0x419208]
mov dword [esp], str._s_applicationswine_s.desktop
mov dword [esp + 4], eax
call fcn.00401ae0
mov dword [esp + 4], 0x5c
mov esi, eax
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_wcsrchr]
xor edx, edx
mov word [eax], dx
mov edi, eax
mov eax, esi
call fcn.00401020
test eax, eax
jne 0x404090
test byte [section..data], 4
jne 0x404400
mov dword [ebp - 0x1c], 0
mov dword [esp + 8], esi
mov ebx, dword [sym.imp.kernel32.dll_HeapFree]
mov dword [esp + 4], 0
mov edi, dword fs:[0x18]
mov eax, dword [edi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call ebx
sub esp, 0xc
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov eax, dword [edi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call ebx
mov eax, dword [ebp - 0x1c]
sub esp, 0xc
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, 0x5c
mov ecx, ebx
mov edx, esi
mov word [edi], ax
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x14], eax
mov eax, dword [ebp + 0x14]
mov dword [esp + 0x10], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0xc], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 8], eax
mov eax, dword [ebp + 8]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x20]
mov dword [esp], eax
mov eax, dword [ebp - 0x1c]
call fcn.00403860
test eax, eax
jne 0x4043a0
test byte [section..data], 4
je 0x404039
test esi, esi
je 0x404620
mov eax, esi
shr eax, 0x10
je 0x4045d0
mov dword [esp + 4], 0xffffffff
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, str._invalid_
test edx, edx
jne 0x40411b
mov eax, esi
call fcn.00401250
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.couldnt_make_desktop_entry__s_n
mov dword [esp + 8], str.write_menu_entry
mov dword [esp + 4], 0x40c000
mov dword [esp], 2
call fcn.00401540
jmp 0x404039
mov eax, dword [ebp + 0x18]
test eax, eax
je 0x4045a0
mov eax, dword [ebp + 0x18]
shr eax, 0x10
je 0x404470
mov dword [esp + 4], 0xffffffff
mov eax, dword [ebp + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov dword [ebp - 0x30], str._invalid_
sub esp, 8
test eax, eax
jne 0x404194
mov eax, dword [ebp + 0x18]
call fcn.00401250
mov dword [ebp - 0x30], eax
mov eax, dword [ebp + 0x14]
test eax, eax
je 0x404590
mov eax, dword [ebp + 0x14]
shr eax, 0x10
je 0x4044b0
mov dword [esp + 4], 0xffffffff
mov eax, dword [ebp + 0x14]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov dword [ebp - 0x2c], str._invalid_
sub esp, 8
test eax, eax
jne 0x4041d8
mov eax, dword [ebp + 0x14]
call fcn.00401250
mov dword [ebp - 0x2c], eax
mov edi, dword [ebp + 0x10]
test edi, edi
je 0x4045b0
mov eax, dword [ebp + 0x10]
shr eax, 0x10
je 0x404550
mov dword [esp + 4], 0xffffffff
mov eax, dword [ebp + 0x10]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov dword [ebp - 0x28], str._invalid_
sub esp, 8
test eax, eax
jne 0x40421c
mov eax, dword [ebp + 0x10]
call fcn.00401250
mov dword [ebp - 0x28], eax
mov esi, dword [ebp + 0xc]
test esi, esi
je 0x404580
mov eax, dword [ebp + 0xc]
shr eax, 0x10
je 0x404530
mov dword [esp + 4], 0xffffffff
mov eax, dword [ebp + 0xc]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov dword [ebp - 0x24], str._invalid_
sub esp, 8
test eax, eax
jne 0x404260
mov eax, dword [ebp + 0xc]
call fcn.00401250
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp + 8]
test ecx, ecx
je 0x404570
mov eax, dword [ebp + 8]
shr eax, 0x10
je 0x404510
mov dword [esp + 4], 0xffffffff
mov eax, dword [ebp + 8]
mov esi, str._invalid_
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
sub esp, 8
test eax, eax
jne 0x4042a1
mov eax, dword [ebp + 8]
call fcn.00401250
mov esi, eax
mov eax, dword [ebp - 0x20]
shr eax, 0x10
je 0x4044f0
mov dword [esp + 4], 0xffffffff
mov edi, dword [ebp - 0x20]
mov dword [esp], edi
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov dword [ebp - 0x34], str._invalid_
sub esp, 8
test eax, eax
jne 0x4042d9
mov eax, edi
call fcn.00401250
mov dword [ebp - 0x34], eax
test ebx, ebx
je 0x4045c0
mov eax, ebx
shr eax, 0x10
je 0x4044d0
mov dword [esp + 4], 0xffffffff
mov edi, str._invalid_
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
sub esp, 8
test eax, eax
jne 0x404312
mov eax, ebx
call fcn.00401250
mov edi, eax
mov eax, dword [ebp - 0x1c]
shr eax, 0x10
je 0x404490
mov dword [esp + 4], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov ecx, eax
sub esp, 8
mov eax, str._invalid_
test ecx, ecx
jne 0x404348
mov eax, dword [ebp - 0x1c]
call fcn.00401250
mov ecx, dword [ebp - 0x30]
mov dword [esp + 0x2c], ecx
mov edx, dword [ebp - 0x2c]
mov dword [esp + 0x28], edx
mov ecx, dword [ebp - 0x28]
mov dword [esp + 0x24], ecx
mov edx, dword [ebp - 0x24]
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], edx
mov ecx, dword [ebp - 0x34]
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.__s___s___s___s___s___s___s___s__n
mov dword [esp + 8], str.write_menu_entry
mov dword [esp + 4], 0x40c000
mov dword [esp], 3
call fcn.00401540
jmp 0x403fee
mov eax, dword [ebp - 0x1c]
mov edx, ebx
call fcn.00403110
mov dword [ebp - 0x1c], 1
test eax, eax
jne 0x404040
test byte [section..data], 4
je 0x404039
mov dword [esp + 0x10], str._null_
mov dword [esp + 0xc], str.couldnt_make_menu_file__s_n
mov dword [esp + 8], str.write_menu_entry
mov dword [esp + 4], 0x40c000
mov dword [esp], 2
call fcn.00401540
jmp 0x404039
test esi, esi
je 0x404610
mov eax, esi
shr eax, 0x10
je 0x4045f0
mov dword [esp + 4], 0xffffffff
mov dword [esp], esi
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, eax
sub esp, 8
mov eax, str._invalid_
test edx, edx
jne 0x404439
mov eax, esi
call fcn.00401250
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.couldnt_make_parent_directories_for__s_n
mov dword [esp + 8], str.write_menu_entry
mov dword [esp + 4], 0x40c000
mov dword [esp], 2
call fcn.00401540
mov dword [ebp - 0x1c], 0
jmp 0x404040
movzx eax, word [ebp + 0x18]
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401430
mov dword [ebp - 0x30], eax
jmp 0x404194
movzx eax, word [ebp - 0x1c]
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401430
jmp 0x404348
movzx eax, word [ebp + 0x14]
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401430
mov dword [ebp - 0x2c], eax
jmp 0x4041d8
movzx eax, bx
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401430
mov edi, eax
jmp 0x404312
movzx eax, word [ebp - 0x20]
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401430
mov dword [ebp - 0x34], eax
jmp 0x4042d9
movzx eax, word [ebp + 8]
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401430
mov esi, eax
jmp 0x4042a1
movzx eax, word [ebp + 0xc]
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401430
mov dword [ebp - 0x24], eax
jmp 0x404260
movzx eax, word [ebp + 0x10]
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401430
mov dword [ebp - 0x28], eax
jmp 0x40421c
mov esi, str._null_
jmp 0x4042a1
mov dword [ebp - 0x24], str._null_
jmp 0x404260
mov dword [ebp - 0x2c], str._null_
jmp 0x4041d8
mov dword [ebp - 0x30], str._null_
jmp 0x404194
mov dword [ebp - 0x28], str._null_
jmp 0x40421c
mov edi, str._null_
jmp 0x404312
movzx eax, si
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401430
jmp 0x40411b
movzx eax, si
mov dword [esp], str._04x
mov dword [esp + 4], eax
call fcn.00401430
jmp 0x404439
mov eax, str._null_
jmp 0x404439
mov eax, str._null_
jmp 0x40411b