Function at 0x63205c00
Capabilities:
Access peb ldr_data
Get process heap flags
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x2cc
mov dword [ebp - 0x290], eax
or eax, edx
mov dword [ebp - 0x2b4], edx
mov dword [ebp - 0x2a8], ecx
je 0x6320634d
lea eax, [ebp - 0x280]
mov dword [esp + 0xc], 0x20019
mov dword [esp + 0x10], eax
mov eax, dword [sym.imp.advapi32.dll_RegOpenKeyExW]
mov dword [esp + 8], 0
mov dword [esp + 4], 0x6321f1b8
mov dword [esp], 0x80000002
mov dword [ebp - 0x28c], eax
call eax
mov dword [ebp - 0x2a0], eax
sub esp, 0x14
test eax, eax
jne 0x6320635c
mov ebx, dword [sym.imp.advapi32.dll_RegEnumKeyW]
xor esi, esi
lea edi, [ebp - 0x216]
lea esi, [esi]
nop
mov eax, dword [ebp - 0x280]
mov dword [esp + 4], esi
add esi, 1
mov dword [ebp - 0x27c], 0xff
mov dword [esp + 0xc], 0xff
mov dword [esp + 8], edi
mov dword [esp], eax
call ebx
sub esp, 0x10
test eax, eax
je 0x63205c80
cmp dword [0x63238004], esi
jb 0x63206200
mov dword [ebp - 0x2b0], 0
xor esi, esi
mov dword [ebp - 0x2a4], 0
mov dword [ebp - 0x2ac], 0
mov dword [ebp - 0x294], 0
lea esi, [esi]
lea eax, [ebp - 0x26c]
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], eax
lea eax, [ebp - 0x27c]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x274], 0x4e
mov dword [ebp - 0x27c], 0xff
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 8], edi
mov dword [esp + 4], esi
mov dword [esp], eax
call dword [sym.imp.advapi32.dll_RegEnumKeyExW]
sub esp, 0x20
cmp eax, 0x103
je 0x63206130
movzx edx, byte [0x6321d03c]
test eax, eax
jne 0x63206190
and edx, 8
jne 0x63205e90
lea eax, [ebp - 0x278]
mov dword [esp + 0xc], 0x20019
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x280]
mov dword [esp + 8], 0
mov dword [esp], eax
mov eax, dword [ebp - 0x28c]
mov dword [esp + 4], edi
call eax
sub esp, 0x14
test eax, eax
je 0x63205de0
test byte [0x6321d03c], 2
je 0x63205ce8
mov eax, edi
call fcn.63205540
mov dword [esp + 0xc], str.:_could_not_open_registry_key_for_service_provider__s._n
mov dword [esp + 0x10], eax
mov dword [esp + 8], str.DirectPlayEnumerateAW
mov dword [esp + 4], 0x6321d03c
mov dword [esp], 1
call fcn.63205bb0
jmp 0x63205ce8
lea eax, [ebp - 0x274]
lea edx, [ebp - 0x264]
mov dword [esp + 0xc], 0
mov ebx, dword [sym.imp.advapi32.dll_RegQueryValueExW]
mov dword [esp + 0x14], eax
mov eax, dword [ebp - 0x278]
mov dword [esp + 0x10], edx
mov dword [esp + 8], 0
mov dword [esp + 4], 0x6321f318
mov dword [esp], eax
call ebx
lea edx, [ebp - 0x264]
sub esp, 0x18
test eax, eax
jne 0x63205ec8
cmp dword [ebp - 0x274], 0x4e
je 0x63205f10
test byte [0x6321d03c], 2
je 0x63205ce8
mov eax, edx
call fcn.63205540
mov ebx, eax
mov eax, edi
call fcn.63205540
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], str.:_invalid_format_for_the_GUID_registry_data_member_for_service_provider__s___s_._n
mov dword [esp + 8], str.DirectPlayEnumerateAW
mov dword [esp + 4], 0x6321d03c
mov dword [esp], 1
call fcn.63205bb0
jmp 0x63205ce8
mov eax, edi
call fcn.63205540
mov dword [esp + 0xc], str._this_time_through_sub_key__s._n
mov dword [esp + 0x10], eax
mov dword [esp + 8], str.DirectPlayEnumerateAW
mov dword [esp + 4], 0x6321d03c
mov dword [esp], 3
call fcn.63205bb0
jmp 0x63205d65
test byte [0x6321d03c], 2
je 0x63205ce8
mov eax, edi
call fcn.63205540
mov dword [esp + 0xc], str.:_missing_GUID_registry_data_member_for_service_provider__s._n
mov dword [esp + 0x10], eax
mov dword [esp + 8], str.DirectPlayEnumerateAW
mov dword [esp + 4], 0x6321d03c
mov dword [esp], 1
call fcn.63205bb0
jmp 0x63205ce8
mov eax, esi
mov dword [esp], edx
shl eax, 4
mov dword [ebp - 0x298], eax
add eax, dword [section..bss]
mov dword [esp + 4], eax
call dword [sym.imp.ole32.dll_CLSIDFromString]
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x270], 0
sub esp, 8
test eax, eax
lea eax, [ebp - 0x270]
mov dword [esp + 0x10], 0
mov dword [ebp - 0x29c], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
je 0x63206058
mov eax, dword [ebp - 0x278]
mov dword [esp + 4], str.DescriptionA
mov ebx, dword [sym.imp.advapi32.dll_RegQueryValueExA]
mov dword [esp], eax
call ebx
sub esp, 0x18
test eax, eax
jne 0x632061b8
mov eax, dword [ebp - 0x270]
cmp eax, dword [ebp - 0x2ac]
ja 0x63206268
mov edx, dword fs:[0x18]
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov eax, dword [edx + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov ecx, dword [ebp - 0x29c]
sub esp, 0xc
mov dword [ebp - 0x294], eax
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x278]
mov dword [esp + 0x14], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], str.DescriptionA
mov dword [esp], eax
call ebx
mov eax, dword [ebp - 0x294]
mov ecx, dword [ebp - 0x2a8]
sub esp, 0x18
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x298]
add eax, dword [section..bss]
mov dword [esp + 0x10], ecx
mov dword [esp], eax
mov eax, dword [ebp - 0x290]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 6
call eax
sub esp, 0x14
test eax, eax
je 0x63206130
add esi, 1
jmp 0x63205ce8
mov eax, dword [ebp - 0x278]
mov dword [esp + 4], str.DescriptionW
mov dword [esp], eax
call ebx
sub esp, 0x18
test eax, eax
jne 0x632062a8
mov eax, dword [ebp - 0x270]
cmp eax, dword [ebp - 0x2b0]
ja 0x63206312
mov edx, dword fs:[0x18]
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov eax, dword [edx + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov ecx, dword [ebp - 0x29c]
sub esp, 0xc
mov dword [ebp - 0x2a4], eax
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x278]
mov dword [esp + 0x14], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], str.DescriptionW
mov dword [esp], eax
call ebx
mov eax, dword [ebp - 0x2a4]
mov ecx, dword [ebp - 0x2a8]
sub esp, 0x18
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x298]
add eax, dword [section..bss]
mov dword [esp + 0x10], ecx
mov dword [esp], eax
mov eax, dword [ebp - 0x2b4]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 6
call eax
sub esp, 0x14
test eax, eax
jne 0x6320604c
lea esi, [esi]
mov eax, dword [ebp - 0x294]
mov dword [esp + 4], 0
mov esi, dword fs:[0x18]
mov dword [esp + 8], eax
mov eax, dword [esi + 0x30]
mov ebx, dword [sym.imp.kernel32.dll_HeapFree]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call ebx
mov eax, dword [ebp - 0x2a4]
sub esp, 0xc
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov eax, dword [esi + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call ebx
sub esp, 0xc
mov eax, dword [ebp - 0x2a0]
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
and edx, 2
jne 0x632062e9
mov dword [ebp - 0x2a0], 0x8877005a
mov eax, dword [ebp - 0x2a0]
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
test byte [0x6321d03c], 2
je 0x63205ce8
mov eax, edi
call fcn.63205540
mov dword [esp + 0xc], str.:_missing_DescriptionA_registry_data_member_for_service_provider__s._n
mov dword [esp + 0x10], eax
mov dword [esp + 8], str.DirectPlayEnumerateAW
mov dword [esp + 4], 0x6321d03c
mov dword [esp], 1
call fcn.63205bb0
jmp 0x63205ce8
mov eax, dword [section..bss]
mov dword [esp + 4], 0
mov ebx, dword fs:[0x18]
mov dword [esp + 8], eax
mov eax, dword [ebx + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapFree]
mov eax, esi
sub esp, 0xc
shl eax, 4
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov eax, dword [ebx + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov dword [section..bss], eax
sub esp, 0xc
test eax, eax
je 0x6320639c
mov dword [0x63238004], esi
jmp 0x63205cbb
mov ecx, dword [ebp - 0x294]
mov dword [esp + 4], 0
mov eax, dword fs:[0x18]
mov dword [esp + 8], ecx
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapFree]
mov eax, dword [ebp - 0x270]
sub esp, 0xc
mov dword [ebp - 0x2ac], eax
jmp 0x63205fa7
test byte [0x6321d03c], 2
je 0x63205ce8
mov eax, edi
call fcn.63205540
mov dword [esp + 0xc], str.:_missing_DescriptionW_registry_data_member_for_service_provider__s._n
mov dword [esp + 0x10], eax
mov dword [esp + 8], str.DirectPlayEnumerateAW
mov dword [esp + 4], 0x6321d03c
mov dword [esp], 1
call fcn.63205bb0
jmp 0x63205ce8
mov dword [esp + 0xc], str.:_could_not_enumerate_on_service_provider_key._n
mov dword [esp + 8], str.DirectPlayEnumerateAW
mov dword [esp + 4], 0x6321d03c
mov dword [esp], 1
call fcn.63205bb0
jmp 0x63206199
mov ecx, dword [ebp - 0x2a4]
mov dword [esp + 4], 0
mov eax, dword fs:[0x18]
mov dword [esp + 8], ecx
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapFree]
mov eax, dword [ebp - 0x270]
sub esp, 0xc
mov dword [ebp - 0x2b0], eax
jmp 0x63206088
mov dword [ebp - 0x2a0], 0x80070057
jmp 0x6320617d
mov dword [ebp - 0x2a0], 0x80004005
test byte [0x6321d03c], 2
je 0x6320617d
mov dword [esp + 0xc], str.:_no_service_provider_key_in_the_registry___check_your_Wine_installation_____n
mov dword [esp + 8], str.DirectPlayEnumerateAW
mov dword [esp + 4], 0x6321d03c
mov dword [esp], 1
call fcn.63205bb0
jmp 0x6320617d
mov dword [ebp - 0x2a0], 0x8877005a
test byte [0x6321d03c], 2
je 0x6320617d
mov dword [esp + 0xc], str.:_failed_to_allocate_required_memory._n
mov dword [esp + 8], str.DirectPlayEnumerateAW
mov dword [esp + 4], 0x6321d03c
mov dword [esp], 1
call fcn.63205bb0
jmp 0x6320617d