Function at 0x6de89ce0
Capabilities:
Get session user name
Set registry value

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
lea edi, [ebp - 0x67c]
push ebx
push ecx
sub esp, 0x928
mov eax, dword [ecx]
mov dword [ebp - 0x8a8], 0
mov dword [ebp - 0x8a4], 0
mov dword [ebp - 0x8f0], eax
mov eax, dword [ecx + 4]
mov dword [ebp - 0x8a0], 0
mov dword [ebp - 0x8ec], eax
mov eax, dword [ecx + 8]
mov dword [ebp - 0x8b4], 0x18
mov dword [ebp - 0x904], eax
mov eax, dword [ecx + 0xc]
mov ecx, 0x86
mov dword [ebp - 0x8b0], 0x10
mov dword [ebp - 0x8f8], eax
xor eax, eax
mov dword [ebp - 0x8ac], 2
mov dword [ebp - 0x8c0], 0
mov dword [ebp - 0x8bc], 0
mov dword [ebp - 0x8b8], 0
mov dword [ebp - 0x8c8], 0x14
mov dword [ebp - 0x8c4], 0x10
mov dword [ebp - 0x894], 0
mov dword [ebp - 0x890], 0
mov dword [ebp - 0x88c], 0
mov dword [ebp - 0x888], 0
mov dword [ebp - 0x89c], 0x18
mov dword [ebp - 0x898], 0x10
rep stosd dword es:[edi], eax
mov dword [ebp - 0x8e4], 0x104
mov dword [ebp - 0x67c], 0x218
mov dword [ebp - 0x678], 0x10
test byte [0x6dea0028], 8
jne 0x6de8a4fe
mov edi, dword [ebp - 0x8ec]
test edi, edi
je 0x6de8a729
cmp dword [ebp - 0x8f8], 2
ja 0x6de8a729
test byte [0x6dea0028], 8
jne 0x6de8a554
mov eax, dword [ebp - 0x8ec]
mov eax, dword [eax + 0xc]
mov edx, eax
test eax, eax
je 0x6de89f67
xor esi, esi
jmp 0x6de89e49
inc esi
cmp eax, esi
jbe 0x6de89f62
test byte [0x6dea0028], 8
je 0x6de89e40
mov edi, dword [ebp - 0x8ec]
lea eax, [esi + esi*4]
mov edx, dword [edi + 0x10]
lea ebx, [edx + eax*8]
mov eax, dword [ebx + 0xc]
call sym._wine_dbgstr_wn.constprop.0
mov ecx, dword [ebx + 0x24]
mov edx, dword [ebx + 0x20]
mov dword [ebp - 0x8f4], eax
lea eax, [ebx + 0x10]
mov edi, eax
mov dword [ebp - 0x900], edx
shr edi, 0x10
mov dword [ebp - 0x8fc], ecx
je 0x6de8a460
movzx eax, byte [ebx + 0x1f]
mov dword [esp + 0x2c], eax
movzx eax, byte [ebx + 0x1e]
mov dword [esp + 0x28], eax
movzx eax, byte [ebx + 0x1d]
mov dword [esp + 0x24], eax
movzx eax, byte [ebx + 0x1c]
mov dword [esp + 0x20], eax
movzx eax, byte [ebx + 0x1b]
mov dword [esp + 0x1c], eax
movzx eax, byte [ebx + 0x1a]
mov dword [esp + 0x18], eax
movzx eax, byte [ebx + 0x19]
mov dword [esp + 0x14], eax
movzx eax, byte [ebx + 0x18]
mov dword [esp + 0x10], eax
movzx eax, word [ebx + 0x16]
mov dword [esp + 0xc], eax
movzx eax, word [ebx + 0x14]
mov dword [esp + 8], eax
mov eax, dword [ebx + 0x10]
mov dword [esp], 0x6dea3420
mov dword [esp + 4], eax
call sym._wine_dbg_sprintf_1
mov edx, dword [ebp - 0x900]
mov ecx, dword [ebp - 0x8fc]
mov edi, dword [ebp - 0x8f4]
mov dword [esp + 0x28], ecx
mov dword [esp + 0x24], edx
mov dword [esp + 0x2c], edi
mov dword [esp + 0x20], eax
mov eax, dword [ebx + 8]
mov dword [esp + 0x1c], eax
mov eax, dword [ebx + 4]
mov dword [esp + 0x18], eax
mov eax, dword [ebx]
mov dword [esp + 0x10], esi
inc esi
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], 0x6dea3668
mov dword [esp + 8], str.dinput_device_SetActionMap
mov dword [esp + 4], 0x6dea0028
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0_1
mov eax, dword [ebp - 0x8ec]
mov eax, dword [eax + 0xc]
cmp eax, esi
ja 0x6de89e49
shl eax, 4
mov edx, eax
mov eax, dword [sym.imp.ucrtbase.dll_malloc]
mov dword [esp], edx
mov dword [ebp - 0x8fc], eax
call eax
mov dword [ebp - 0x8a0], eax
test eax, eax
je 0x6de8a733
mov edi, dword [ebp - 0x8ec]
xor ebx, ebx
mov eax, dword [edi + 8]
mov esi, dword [edi + 0xc]
mov dword [ebp - 0x8a8], eax
test esi, esi
jne 0x6de89fb8
jmp 0x6de8a0c4
mov eax, dword [ebp - 0x8ec]
inc ebx
cmp dword [eax + 0xc], ebx
jbe 0x6de8a0c4
mov eax, dword [ebp - 0x8ec]
lea edi, [ebx*4]
lea edx, [edi + ebx]
mov eax, dword [eax + 0x10]
lea eax, [eax + edx*8]
test byte [eax + 8], 4
jne 0x6de89fa8
mov esi, dword [ebp - 0x8f0]
lea edx, [eax + 0x10]
mov dword [ebp - 0x8f4], edx
mov edx, dword [eax + 0x10]
lea ecx, [esi + 0x10]
cmp dword [esi + 0x10], edx
jne 0x6de89fa8
mov esi, dword [ebp - 0x8f4]
mov esi, dword [esi + 4]
cmp dword [ecx + 4], esi
jne 0x6de89fa8
mov esi, dword [ebp - 0x8f4]
mov esi, dword [esi + 8]
cmp dword [ecx + 8], esi
jne 0x6de89fa8
mov esi, dword [ebp - 0x8f4]
mov esi, dword [esi + 0xc]
cmp dword [ecx + 0xc], esi
jne 0x6de89fa8
mov esi, dword [eax + 0x20]
mov eax, dword [ebp - 0x8f0]
mov ecx, dword [eax + 0x500]
test ecx, ecx
je 0x6de89fa8
mov eax, dword [eax + 0x4fc]
mov edx, eax
mov dword [ebp - 0x8f4], eax
shl edx, 4
add edx, ecx
lea eax, [edx - 0x10]
cmp ecx, edx
jb 0x6de8a05e
jmp 0x6de89fa8
sub eax, 0x10
lea edx, [eax + 0x10]
cmp ecx, edx
jae 0x6de89fa8
mov edx, dword [eax + 8]
test edx, edx
je 0x6de8a050
xor edx, esi
and edx, 0xffffff
jne 0x6de8a050
cmp eax, ecx
js 0x6de89fa8
mov edx, dword [ebp - 0x8a4]
mov ecx, dword [eax]
inc ebx
shl edx, 4
add edx, dword [ebp - 0x8a0]
mov dword [edx], ecx
mov ecx, dword [eax + 4]
mov dword [edx + 4], ecx
mov ecx, dword [eax + 8]
mov dword [edx + 8], ecx
mov eax, dword [eax + 0xc]
mov dword [edx + 0xc], eax
mov eax, dword [ebp - 0x8a4]
shl eax, 4
add eax, dword [ebp - 0x8a0]
mov dword [eax + 4], edi
mov eax, dword [ebp - 0x8ec]
inc dword [ebp - 0x8a4]
cmp dword [eax + 0xc], ebx
ja 0x6de89fb8
mov edi, dword [ebp - 0x8f0]
lea eax, [edi + 0x20]
mov dword [ebp - 0x8f4], eax
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov eax, dword [edi]
lea edx, [ebp - 0x8b4]
sub esp, 4
mov dword [esp], edi
mov dword [esp + 4], edx
call dword [eax + 0x2c]
sub esp, 8
mov edi, eax
test eax, eax
js 0x6de8a4c0
mov esi, dword [ebp - 0x8f0]
mov ebx, dword [ebp - 0x8ec]
mov eax, dword [esi + 0x520]
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], sym._init_object_app_data
mov dword [esp + 8], 0
mov dword [esp + 4], 0x6dea3fb8
mov dword [esp], esi
call dword [eax + 0x14]
test eax, eax
js 0x6de8a484
mov eax, dword [ebp - 0x8ec]
mov edx, dword [eax + 0x2c]
mov eax, dword [eax + 0x30]
cmp edx, eax
je 0x6de8a17b
mov ebx, dword [ebp - 0x8f0]
mov dword [ebp - 0x888], eax
lea eax, [ebp - 0x89c]
mov dword [ebp - 0x88c], edx
mov ecx, dword [ebx]
mov ecx, dword [ecx + 0x18]
mov dword [esp + 8], eax
mov dword [esp + 4], 4
mov dword [esp], ebx
call ecx
sub esp, 0xc
mov eax, dword [ebp - 0x8ec]
mov esi, dword [ebp - 0x8f0]
lea edx, [ebp - 0x8c8]
mov eax, dword [eax + 0x28]
mov dword [ebp - 0x8b8], eax
mov eax, dword [esi]
mov dword [esp + 8], edx
mov dword [esp + 4], 1
mov dword [esp], esi
call dword [eax + 0x18]
mov ebx, dword [ebp - 0x904]
lea eax, [ebp - 0x884]
lea ecx, [ebp - 0x67e]
sub esp, 0xc
test ebx, ebx
je 0x6de8a613
mov ebx, dword [ebp - 0x904]
lea esi, [esi]
movzx edx, word [ebx]
test dx, dx
je 0x6de8a1e6
add eax, 2
add ebx, 2
mov word [eax - 2], dx
cmp eax, ecx
jne 0x6de8a1d0
xor edx, edx
mov word [eax], dx
test byte [ebp - 0x8f8], 1
je 0x6de8a63c
mov ecx, dword [ebp - 0x8f0]
mov esi, dword [ecx + 0x38]
mov edx, dword [esi + 0x24]
lea ebx, [esi + 0x24]
lea eax, [edx - 0x218]
cmp ebx, edx
je 0x6de8a688
add ecx, 0x10
jmp 0x6de8a234
mov edx, dword [eax + 0x218]
lea eax, [edx - 0x218]
cmp ebx, edx
je 0x6de8a688
mov edx, dword [ecx]
cmp dword [eax], edx
jne 0x6de8a220
mov edx, dword [ecx + 4]
cmp dword [eax + 4], edx
jne 0x6de8a220
mov edx, dword [ecx + 8]
cmp dword [eax + 8], edx
jne 0x6de8a220
mov edx, dword [ecx + 0xc]
cmp dword [eax + 0xc], edx
jne 0x6de8a220
add eax, 0x10
lea edx, [ebp - 0x66c]
lea ebx, [ebp - 0x466]
lea esi, [esi]
movzx ecx, word [edx]
test cx, cx
je 0x6de8a27e
add edx, 2
add eax, 2
mov word [eax - 2], cx
cmp edx, ebx
jne 0x6de8a268
xor ebx, ebx
mov word [eax], bx
mov esi, dword [ebp - 0x8f0]
lea edx, [ebp - 0x464]
mov dword [ebp - 0x8e0], 0
mov dword [ebp - 0x464], 0x44c
mov eax, dword [esi]
mov dword [esp + 4], edx
mov dword [esp], esi
call dword [eax + 0x3c]
lea eax, [ebp - 0x8e0]
sub esp, 8
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x8ec]
add eax, 0x14
mov dword [esp], eax
call dword [sym.imp.ole32.dll_StringFromCLSID]
sub esp, 8
mov ebx, eax
test eax, eax
jne 0x6de8a40f
mov dword [esp], 1
lea esi, [ebp - 0x43c]
mov ecx, dword [ebp - 0x8e0]
lea edx, [ebp - 0x884]
mov eax, esi
call sym._get_mapping_key
mov esi, eax
test eax, eax
je 0x6de8a712
mov eax, dword [ebp - 0x8ec]
mov ecx, dword [eax + 0xc]
test ecx, ecx
je 0x6de8a3f1
mov dword [ebp - 0x8f0], esi
mov esi, dword [ebp - 0x8ec]
mov dword [ebp - 0x8fc], edi
jmp 0x6de8a33a
inc ebx
cmp dword [esi + 0xc], ebx
jbe 0x6de8a3e5
mov eax, dword [esi + 0x10]
lea edi, [ebx + ebx*4]
shl edi, 3
add eax, edi
mov edx, dword [eax + 0x10]
cmp dword [ebp - 0x460], edx
jne 0x6de8a330
mov edx, dword [eax + 0x14]
cmp dword [ebp - 0x45c], edx
jne 0x6de8a330
mov edx, dword [eax + 0x18]
cmp dword [ebp - 0x458], edx
jne 0x6de8a330
mov ecx, dword [eax + 0x1c]
cmp dword [ebp - 0x454], ecx
jne 0x6de8a330
mov edx, dword [eax + 0x24]
test edx, edx
je 0x6de8a330
mov eax, dword [eax + 4]
mov dword [esp + 8], 0x6dea3726
inc ebx
mov dword [esp + 4], 9
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x8da]
mov dword [esp], eax
call sym._swprintf
mov dword [esp + 0x14], 4
add edi, dword [esi + 0x10]
lea eax, [edi + 0x20]
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], eax
lea eax, [ebp - 0x8da]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x8f0]
mov dword [esp + 8], 0
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegSetValueExW]
sub esp, 0x18
cmp dword [esi + 0xc], ebx
ja 0x6de8a33a
mov esi, dword [ebp - 0x8f0]
mov edi, dword [ebp - 0x8fc]
mov dword [esp], esi
call dword [sym.imp.advapi32.dll_RegCloseKey]
mov eax, dword [ebp - 0x8e0]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.ole32.dll_CoTaskMemFree]
sub esp, 4
mov eax, dword [ebp - 0x8f4]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
mov eax, dword [ebp - 0x8a0]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_free]
cmp dword [ebp - 0x8f8], 2
je 0x6de8a708
mov esi, dword [ebp - 0x8a4]
mov eax, 1
test esi, esi
cmove edi, eax
lea esp, [ebp - 0x10]
pop ecx
pop ebx
mov eax, edi
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret 0x10
movzx eax, ax
mov dword [esp], 0x6dea3410
mov dword [esp + 4], eax
call sym._wine_dbg_sprintf_1
mov ecx, dword [ebp - 0x8fc]
mov edx, dword [ebp - 0x900]
jmp 0x6de89efe
test byte [0x6dea0028], 4
je 0x6de8a13a
mov dword [esp + 0xc], str.Failed_to_initialize_action_map_app_data_n
mov dword [esp + 8], str.dinput_device_SetActionMap
mov dword [esp + 4], 0x6dea0028
mov dword [esp], 2
call sym._wine_dbg_log.constprop.0_1
jmp 0x6de8a13a
test byte [0x6dea0028], 4
jne 0x6de8a6db
mov eax, dword [ebp - 0x8f4]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
mov eax, dword [ebp - 0x8a0]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_free]
lea esp, [ebp - 0x10]
mov eax, edi
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret 0x10
mov eax, dword [ebp - 0x904]
call sym._wine_dbgstr_wn.constprop.0
mov edi, dword [ebp - 0x8f8]
mov dword [esp + 0xc], str.iface__p__format__p__username__s__flags__lx_n
mov dword [esp + 0x18], eax
mov eax, dword [ebp - 0x8ec]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x14], eax
mov eax, dword [ebp - 0x8f0]
mov dword [esp + 8], str.dinput_device_SetActionMap
mov dword [esp + 0x10], eax
mov dword [esp + 4], 0x6dea0028
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0_1
jmp 0x6de89dfe
mov edi, dword [ebp - 0x8ec]
lea eax, [edi + 0x44]
call sym._wine_dbgstr_wn.constprop.0
mov esi, dword [edi + 0x24]
mov ebx, eax
lea eax, [edi + 0x14]
mov edi, eax
shr edi, 0x10
je 0x6de8a670
mov edi, dword [ebp - 0x8ec]
movzx eax, byte [edi + 0x23]
mov dword [esp + 0x2c], eax
movzx eax, byte [edi + 0x22]
mov dword [esp + 0x28], eax
movzx eax, byte [edi + 0x21]
mov dword [esp + 0x24], eax
movzx eax, byte [edi + 0x20]
mov dword [esp + 0x20], eax
movzx eax, byte [edi + 0x1f]
mov dword [esp + 0x1c], eax
movzx eax, byte [edi + 0x1e]
mov dword [esp + 0x18], eax
movzx eax, byte [edi + 0x1d]
mov dword [esp + 0x14], eax
movzx eax, byte [edi + 0x1c]
mov dword [esp + 0x10], eax
movzx eax, word [edi + 0x1a]
mov dword [esp + 0xc], eax
movzx eax, word [edi + 0x18]
mov dword [esp + 8], eax
mov eax, dword [edi + 0x14]
mov dword [esp], 0x6dea3420
mov dword [esp + 4], eax
call sym._wine_dbg_sprintf_1
mov dword [esp + 0x18], ebx
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x6dea3640
mov dword [esp + 8], str.dinput_device_SetActionMap
mov dword [esp + 4], 0x6dea0028
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0_1
jmp 0x6de89e26
lea eax, [ebp - 0x8e4]
mov dword [esp + 4], eax
lea eax, [ebp - 0x884]
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_GetUserNameW]
sub esp, 8
test byte [ebp - 0x8f8], 1
jne 0x6de8a1f8
lea edx, [ebp - 0x66c]
lea eax, [ebp - 0x884]
lea ebx, [ebp - 0x67e]
nop
movzx ecx, word [eax]
test cx, cx
je 0x6de8a666
add eax, 2
add edx, 2
mov word [edx - 2], cx
cmp eax, ebx
jne 0x6de8a650
xor ecx, ecx
mov word [edx], cx
jmp 0x6de8a1f8
movzx eax, ax
mov dword [esp], 0x6dea3410
mov dword [esp + 4], eax
call sym._wine_dbg_sprintf_1
jmp 0x6de8a5de
mov dword [esp], 0x220
mov eax, dword [ebp - 0x8fc]
call eax
test eax, eax
je 0x6de8a283
mov dword [eax + 0x218], ebx
mov ecx, dword [esi + 0x28]
lea edx, [eax + 0x218]
mov dword [eax + 0x21c], ecx
mov dword [ecx], edx
mov dword [esi + 0x28], edx
mov esi, dword [ebp - 0x8f0]
mov edx, dword [esi + 0x10]
mov dword [eax], edx
mov edx, dword [esi + 0x14]
mov dword [eax + 4], edx
mov edx, dword [esi + 0x18]
mov dword [eax + 8], edx
mov edx, dword [esi + 0x1c]
mov dword [eax + 0xc], edx
jmp 0x6de8a252
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.Failed_to_set_data_format_from_action_map__hr__lx_n
mov dword [esp + 8], str.dinput_device_SetActionMap
mov dword [esp + 4], 0x6dea0028
mov dword [esp], 2
call sym._wine_dbg_log.constprop.0_1
jmp 0x6de8a4cd
mov edi, 0xb
jmp 0x6de8a4ee
mov eax, dword [ebp - 0x8e0]
mov dword [esp], eax
call dword [sym.imp.ole32.dll_CoTaskMemFree]
sub esp, 4
jmp 0x6de8a40f
mov edi, 0x80070057
jmp 0x6de8a4ee
mov edi, 0x8007000e
jmp 0x6de8a4ee