Function at 0x673d37f0
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0x67406c3c
mov eax, dword fs:[0]
push eax
sub esp, 0x30
push ebx
push ebp
push esi
push edi
mov eax, dword [0x67460ecc]
xor eax, esp
push eax
lea eax, [esp + 0x44]
mov dword fs:[0], eax
mov esi, ecx
push str.CImIExplorerBrowser::IsProtectedSite
push 0x6741f400
lea ecx, [esp + 0x40]
call fcn.67377fc0
xor ebx, ebx
mov dword [esp + 0x4c], ebx
push 0x6742b46c
lea eax, [esp + 0x30]
push eax
lea ecx, [esi + 8]
xor ebp, ebp
call dword [sym.imp.MFC80U.DLL_Ordinal_6094]
mov byte [esp + 0x4c], 1
mov ecx, dword [esp + 0x2c]
mov edx, dword [esi + 0xc]
push ecx
push edx
lea eax, [esp + 0x40]
push str.m_eWinVersion___d__sMajorVer__IE____s
push eax
call fcn.67378120
add esp, 0x10
cmp dword [esi + 0xc], 9
jl 0x673d3a5b
lea ecx, [esp + 0x2c]
call dword [sym.imp.MFC80U.DLL_Ordinal_870]
push eax
call dword [sym.imp.MSVCR80.dll__wtoi]
add esp, 4
cmp eax, 7
jl 0x673d3a5b
lea ecx, [esp + 0x18]
push ecx
push 0x6742aa84
push 0x15
push ebx
push 0x67425084
mov dword [esp + 0x2c], ebx
call sym.ImUtilsU.dll_Ordinal_679
add esp, 0x14
cmp dword [esp + 0x18], ebx
je 0x673d3a5b
push str.CLSID_InternetSecurityManager_created_successfully
lea ecx, [esp + 0x3c]
call fcn.673780f0
lea ecx, [esp + 0x28]
call dword [sym.imp.MFC80U.DLL_Ordinal_293]
mov byte [esp + 0x4c], 2
lea ecx, [esp + 0x34]
call sym.ImUtilsU.dll_Ordinal_32
mov byte [esp + 0x4c], 3
lea edx, [esp + 0x28]
push edx
lea ecx, [esp + 0x38]
call sym.ImUtilsU.dll_Ordinal_1933
mov eax, dword [esp + 0x18]
push ebx
lea ecx, [esp + 0x34]
push ecx
mov dword [esp + 0x38], 3
mov esi, dword [eax]
lea ecx, [esp + 0x30]
call dword [sym.imp.MFC80U.DLL_Ordinal_870]
mov edx, dword [esp + 0x20]
push eax
mov eax, dword [esi + 0x14]
push edx
call eax
push str.SoftwareMicrosoftWindowsCurrentVersionInternet_SettingsZones
lea ecx, [esp + 0x20]
call dword [sym.imp.MFC80U.DLL_Ordinal_283]
mov byte [esp + 0x4c], 4
lea ecx, [esp + 0x24]
call dword [sym.imp.MFC80U.DLL_Ordinal_293]
mov byte [esp + 0x4c], 5
mov ecx, dword [esp + 0x30]
push ecx
lea edx, [esp + 0x28]
push 0x6741fc54
push edx
call dword [sym.imp.MFC80U.DLL_Ordinal_2311]
add esp, 0xc
lea ecx, [esp + 0x24]
call dword [sym.imp.MFC80U.DLL_Ordinal_870]
push eax
lea eax, [esp + 0x20]
push eax
call sym.ImUtilsU.dll_Ordinal_1356
add esp, 8
mov dword [esp + 0x14], ebx
mov byte [esp + 0x4c], 6
push 0x20019
lea ecx, [esp + 0x20]
call dword [sym.imp.MFC80U.DLL_Ordinal_870]
push eax
push Ordinal_2
lea ecx, [esp + 0x20]
call fcn.673212f0
mov ecx, dword [esp + 0x1c]
mov esi, eax
push esi
push ecx
lea edx, [esp + 0x40]
push str.Result_returned_when_openning_HKEY_CURRENT_USER_s_is_0x_x
push edx
call fcn.67378120
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
add esp, 0x10
cmp esi, ebx
jl 0x673d3a00
push str.2500
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x1c]
mov dword [esp + 0x28], ebx
call fcn.67397010
mov ecx, dword [esp + 0x20]
push ecx
lea edx, [esp + 0x3c]
push str.Value_returned_from_2500_is__d
push edx
call fcn.67378120
add esp, 0xc
cmp dword [esp + 0x20], ebx
jne 0x673d39ed
lea ebp, [ebx + 1]
mov esi, dword [esp + 0x14]
cmp esi, ebx
je 0x673d3a04
push esi
call edi
xor esi, esi
mov dword [esp + 0x14], esi
jmp 0x673d3a04
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov byte [esp + 0x4c], 5
cmp esi, ebx
je 0x673d3a20
push esi
call edi
mov dword [esp + 0x14], ebx
mov byte [esp + 0x4c], 4
lea ecx, [esp + 0x24]
call dword [sym.imp.MFC80U.DLL_Ordinal_577]
mov byte [esp + 0x4c], 3
lea ecx, [esp + 0x1c]
call dword [sym.imp.MFC80U.DLL_Ordinal_577]
mov byte [esp + 0x4c], 2
lea ecx, [esp + 0x34]
call sym.ImUtilsU.dll_Ordinal_87
mov byte [esp + 0x4c], 1
lea ecx, [esp + 0x28]
call dword [sym.imp.MFC80U.DLL_Ordinal_577]
push ebp
lea eax, [esp + 0x3c]
push str.Protected_mode_is_state__d
push eax
call fcn.67378120
add esp, 0xc
mov byte [esp + 0x4c], bl
lea ecx, [esp + 0x2c]
call dword [sym.imp.MFC80U.DLL_Ordinal_577]
mov dword [esp + 0x4c], 0xffffffff
lea ecx, [esp + 0x38]
call fcn.67378060
mov eax, ebp
mov ecx, dword [esp + 0x44]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3c
ret