Function at 0x434480
Capabilities:
Access peb ldr_data
Check for peb ntglobalflag flag
Get ntdll base address
Get number of processors
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x49cbdc
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push ebp
push esi
push edi
mov esi, ecx
push 0x434990
push 0x434970
push 4
lea ebp, [esi + 4]
push 8
push ebp
mov dword [esp + 0x24], esi
call fcn.00475606
push 0x4349e0
push 0x434970
lea eax, [esi + 0x24]
push 0x1c
xor edi, edi
push 0xc
push eax
mov dword [esp + 0x30], edi
call fcn.00475606
mov ebx, 1
push str.AdvancedSetting
mov ecx, ebp
mov byte [esp + 0x20], bl
mov dword [esi], 0x4a86dc
call fcn.0048c58c
push str.SoftwareMicrosoftInternet_ExplorerMain
lea ecx, [esi + 8]
call fcn.0048c58c
push str.InternetSetting
lea ecx, [esi + 0xc]
call fcn.0048c58c
push str.SoftwareMicrosoftWindowsCurrentVersionInternet_SettingsZones3
lea ecx, [esi + 0x10]
call fcn.0048c58c
push str.LocalSetting
lea ecx, [esi + 0x14]
call fcn.0048c58c
push str.SoftwareMicrosoftWindowsCurrentVersionInternet_SettingsZones1
lea ecx, [esi + 0x18]
call fcn.0048c58c
push str.TrustSetting
lea ecx, [esi + 0x1c]
call fcn.0048c58c
push str.SoftwareMicrosoftWindowsCurrentVersionInternet_SettingsZones2
lea ecx, [esi + 0x20]
call fcn.0048c58c
push str.InlineImages
lea ecx, [esi + 0x24]
call fcn.0048c58c
push str.Display_Inline_Images
lea ecx, [esi + 0x28]
call fcn.0048c58c
push str.StartPage
lea ecx, [esi + 0x30]
mov dword [esi + 0x2c], ebx
call fcn.0048c58c
push str.Start_Page
lea ecx, [esi + 0x34]
call fcn.0048c58c
push str.DownloadComplete
lea ecx, [esi + 0x3c]
mov dword [esi + 0x38], ebx
call fcn.0048c58c
push str.NotifyDownloadComplete
lea ecx, [esi + 0x40]
call fcn.0048c58c
push str.PrintBackground
lea ecx, [esi + 0x48]
mov dword [esi + 0x44], ebx
call fcn.0048c58c
push str.Print_Background
lea ecx, [esi + 0x4c]
call fcn.0048c58c
mov dword [esi + 0x50], ebx
push str.PlayAnimations
lea ecx, [esi + 0x54]
call fcn.0048c58c
push str.Play_Animations
lea ecx, [esi + 0x58]
call fcn.0048c58c
push str.BackgroundSounds
lea ecx, [esi + 0x60]
mov dword [esi + 0x5c], ebx
call fcn.0048c58c
push str.Play_Background_Sounds
lea ecx, [esi + 0x64]
call fcn.0048c58c
push str.InlineVideos
lea ecx, [esi + 0x6c]
mov dword [esi + 0x68], ebx
call fcn.0048c58c
push str.Display_Inline_Videos
lea ecx, [esi + 0x70]
call fcn.0048c58c
push str.ImageResize
lea ecx, [esi + 0x78]
mov dword [esi + 0x74], ebx
call fcn.0048c58c
push str.Enable_AutoImageResize
lea ecx, [esi + 0x7c]
call fcn.0048c58c
push str.ScriptDebugIE
lea ecx, [esi + 0x84]
mov dword [esi + 0x80], ebx
call fcn.0048c58c
push str.DisableScriptDebuggerIE
lea ecx, [esi + 0x88]
call fcn.0048c58c
push str.1405
lea ecx, [esi + 0x90]
mov dword [esi + 0x8c], ebx
call fcn.0048c58c
push str.1405
lea ecx, [esi + 0x94]
call fcn.0048c58c
push str.1201
lea ecx, [esi + 0x9c]
mov dword [esi + 0x98], edi
call fcn.0048c58c
push str.1201
lea ecx, [esi + 0xa0]
call fcn.0048c58c
push str.1004
lea ecx, [esi + 0xa8]
mov dword [esi + 0xa4], edi
call fcn.0048c58c
push str.1004
lea ecx, [esi + 0xac]
call fcn.0048c58c
push str.1001
lea ecx, [esi + 0xb4]
mov dword [esi + 0xb0], edi
call fcn.0048c58c
push str.1001
lea ecx, [esi + 0xb8]
call fcn.0048c58c
push str.1200
lea ecx, [esi + 0xc0]
mov dword [esi + 0xbc], edi
call fcn.0048c58c
push str.1200
lea ecx, [esi + 0xc4]
call fcn.0048c58c
push str.1A02
lea ecx, [esi + 0xcc]
mov dword [esi + 0xc8], edi
call fcn.0048c58c
push str.1A02
lea ecx, [esi + 0xd0]
call fcn.0048c58c
push str.1A03
lea ecx, [esi + 0xd8]
mov dword [esi + 0xd4], edi
call fcn.0048c58c
push str.1A03
lea ecx, [esi + 0xdc]
call fcn.0048c58c
push str.1402
lea ecx, [esi + 0xe4]
mov dword [esi + 0xe0], edi
call fcn.0048c58c
push str.1402
lea ecx, [esi + 0xe8]
call fcn.0048c58c
push str.1400
lea ecx, [esi + 0xf0]
mov dword [esi + 0xec], edi
call fcn.0048c58c
push str.1400
lea ecx, [esi + 0xf4]
call fcn.0048c58c
push str.1407
lea ecx, [esi + 0xfc]
mov dword [esi + 0xf8], edi
call fcn.0048c58c
push str.1407
lea ecx, [esi + 0x100]
call fcn.0048c58c
push str.1606
lea ecx, [esi + 0x108]
mov dword [esi + 0x104], edi
call fcn.0048c58c
push str.1606
lea ecx, [esi + 0x10c]
call fcn.0048c58c
push str.1607
lea ecx, [esi + 0x114]
mov dword [esi + 0x110], edi
call fcn.0048c58c
push str.1607
lea ecx, [esi + 0x118]
call fcn.0048c58c
push str.1A04
lea ecx, [esi + 0x120]
mov dword [esi + 0x11c], edi
call fcn.0048c58c
push str.1A04
lea ecx, [esi + 0x124]
call fcn.0048c58c
push str.1601
lea ecx, [esi + 0x12c]
mov dword [esi + 0x128], edi
call fcn.0048c58c
push str.1601
lea ecx, [esi + 0x130]
call fcn.0048c58c
push str.1802
lea ecx, [esi + 0x138]
mov dword [esi + 0x134], edi
call fcn.0048c58c
push str.1802
lea ecx, [esi + 0x13c]
call fcn.0048c58c
push str.1804
lea ecx, [esi + 0x144]
mov dword [esi + 0x140], edi
call fcn.0048c58c
push str.1804
lea ecx, [esi + 0x148]
call fcn.0048c58c
push str.1800
lea ecx, [esi + 0x150]
mov dword [esi + 0x14c], edi
call fcn.0048c58c
push str.1800
lea ecx, [esi + 0x154]
call fcn.0048c58c
push str.1803
lea ecx, [esi + 0x15c]
mov dword [esi + 0x158], edi
call fcn.0048c58c
push str.1803
lea ecx, [esi + 0x160]
call fcn.0048c58c
push str.1604
lea ecx, [esi + 0x168]
mov dword [esi + 0x164], edi
call fcn.0048c58c
push str.1604
lea ecx, [esi + 0x16c]
call fcn.0048c58c
mov ecx, dword [esp + 0x14]
mov dword [esi + 0x170], edi
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret