Function at 0x661db063
Capabilities:
Query or enumerate registry value
Set registry value

Disassembly:
push 0x260
mov eax, 0x66243767
call fcn.6623bab7
mov eax, dword [ebp + 8]
mov dword [ebp - 0x23c], eax
lea eax, [ebp - 0x238]
push eax
call fcn.661def35
xor ebx, ebx
mov dword [ebp - 4], ebx
cmp byte [ebp + 0x10], bl
je 0x661db167
lea edi, [ebp - 0x21c]
call fcn.66237aa7
mov eax, edi
push eax
mov ecx, str.IEXPLORE.EXE
call fcn.661d84fb
test eax, eax
jne 0x661db167
lea eax, [ebp - 0x220]
push eax
push 1
push ebx
push str.SoftwareMicrosoftInternet_ExplorerToolbarWebBrowser
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
cmp eax, ebx
jne 0x661db167
lea eax, [ebp - 0x228]
push eax
push ebx
lea eax, [ebp - 0x224]
push eax
push ebx
mov edi, str.ITBarLayout
push edi
push dword [ebp - 0x220]
mov esi, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
call esi
cmp eax, ebx
jne 0x661db15b
mov eax, dword [ebp - 0x228]
cmp eax, dword [ebp - 0x234]
je 0x661db15b
push eax
lea ebx, [ebp - 0x238]
call fcn.661db534
lea eax, [ebp - 0x228]
push eax
push dword [ebp - 0x238]
lea eax, [ebp - 0x224]
push eax
push 0
push edi
push dword [ebp - 0x220]
call esi
test eax, eax
jne 0x661db14c
mov eax, dword [ebp - 0x228]
cmp eax, dword [ebp - 0x234]
jne 0x661db10d
jmp 0x661db159
push 0
lea ebx, [ebp - 0x238]
call fcn.661db534
xor ebx, ebx
push dword [ebp - 0x220]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push ebx
call dword [sym.imp.GrooveUtil.DLL_public:_static_void___stdcall_GCCriticalErrorInfo::StartErrorBlock_bool_]
mov byte [ebp - 4], 1
mov byte [ebp - 4], 2
push 0x66250b7c
lea esi, [ebp - 0x254]
call fcn.661d7d59
mov byte [ebp - 4], 3
mov al, byte [ebp + 0xc]
neg al
sbb eax, eax
and eax, 0xffff
mov word [ebp - 0x224], ax
push dword [ebp - 0x224]
lea esi, [ebp - 0x26c]
call fcn.661dc7bb
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x23c]
mov esi, dword [eax + 0xa0]
lea eax, [ebp - 0x26c]
push eax
call fcn.661dc5c3
mov edi, eax
lea eax, [ebp - 0x254]
push eax
call fcn.661dc5c3
mov ecx, dword [esi]
push ebx
push edi
push eax
push esi
call dword [ecx + 0xdc]
cmp eax, ebx
jge 0x661db1f4
push 0x6625b608
push esi
push eax
call fcn.661d63be
mov byte [ebp - 4], 3
cmp word [ebp - 0x26c], bx
je 0x661db20d
lea ecx, [ebp - 0x26c]
call dword [sym.imp.GrooveUtil.DLL_private:_void___thiscall_GCVariant::_Release_void_]
mov byte [ebp - 4], 2
cmp word [ebp - 0x254], bx
je 0x661db226
lea ecx, [ebp - 0x254]
call dword [sym.imp.GrooveUtil.DLL_private:_void___thiscall_GCVariant::_Release_void_]
mov dword [ebp - 4], 1
jmp 0x661db23d
mov byte [ebp - 4], bl
call dword [sym.imp.GrooveUtil.DLL_public:_static_void___stdcall_GCCriticalErrorInfo::EndErrorBlock_void_]
cmp byte [ebp + 0x10], bl
je 0x661db29d
cmp dword [ebp - 0x234], ebx
jle 0x661db29d
lea eax, [ebp - 0x220]
push eax
push 2
push ebx
push str.SoftwareMicrosoftInternet_ExplorerToolbarWebBrowser
push SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
cmp eax, ebx
jne 0x661db29d
push dword [ebp - 0x234]
push dword [ebp - 0x238]
push 3
push ebx
push str.ITBarLayout
push dword [ebp - 0x220]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
push dword [ebp - 0x220]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x238]
push eax
call fcn.6621d9e9
call fcn.6623bb13
ret 0xc