Function at 0x10021080
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x1007b6a0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x20
mov eax, dword [0x10098a04]
push esi
mov ecx, 0x10098a04
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 4], eax
xor esi, esi
push str.RegMyIE
lea ecx, [esp + 0x14]
mov dword [esp + 0x30], esi
mov dword [esp + 0x1c], esi
call fcn.10005e50
push str.DownloadToolbar
lea ecx, [esp + 0x18]
mov byte [esp + 0x30], 1
call fcn.10005e50
lea ecx, [esp + 0x18]
push ecx
lea edx, [esp + 0x14]
push edx
lea eax, [esp + 0x1c]
push eax
push SysReAllocStringLen
mov byte [esp + 0x3c], 2
call fcn.1004a4a0
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
add esp, 0x10
mov byte [esp + 0x2c], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1002111c
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
mov byte [esp + 0x2c], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1002113f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
cmp dword [esp + 0x18], esi
je 0x10021185
cmp dword [esp + 0x38], esi
jne 0x10021185
mov eax, dword [esp + 4]
add eax, 0xfffffff0
mov dword [esp + 0x2c], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x100214cd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
pop esi
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
add esp, 0x2c
ret
push ebx
lea eax, [esp + 8]
push eax
push str.SOFTWAREClassesMaxthonSkin_shellopencommand
call fcn.10020410
add esp, 8
test eax, eax
jne 0x100211e2
lea ecx, [esp + 8]
push ecx
push str.SOFTWAREClassesMaxthonSkin_shellMaxthoncommand
call fcn.10020410
add esp, 8
test eax, eax
jne 0x100211e2
lea edx, [esp + 8]
push edx
push str.SOFTWAREClassesApplicationsMaxthon.exe_shellopencommand
call fcn.10020410
add esp, 8
test eax, eax
jne 0x100211e2
lea eax, [esp + 8]
push eax
push str.SOFTWAREClassesApplicationsMaxthon.exe_shellMaxthoncommand
call fcn.10020410
add esp, 8
test eax, eax
je 0x100214a6
lea ecx, [esp + 8]
call fcn.1000d0f0
mov ecx, eax
call fcn.1000cd40
lea ecx, [esp + 8]
call fcn.10008d70
mov eax, dword [esp + 8]
cmp dword [eax - 0xc], esi
jge 0x10021209
or eax, 0xffffffff
jmp 0x10021224
push str.maxthon.exe
push eax
call fcn.10069ea0
add esp, 8
cmp eax, esi
jne 0x10021220
or eax, 0xffffffff
jmp 0x10021224
sub eax, dword [esp + 8]
push eax
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x10]
call fcn.10008ae0
mov edx, dword [0x10098a04]
mov ecx, 0x10098a04
mov byte [esp + 0x30], 3
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0xc], eax
mov eax, dword [0x10098a04]
mov ecx, 0x10098a04
mov byte [esp + 0x30], 4
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 0x14], eax
mov ebx, dword [esp + 0x10]
cmp dword [ebx - 0xc], esi
mov byte [esp + 0x30], 5
jge 0x1002127e
push 0x80070057
call fcn.10001330
cmp byte [ebx], 0x22
jne 0x100212ca
mov eax, dword [ebx - 0xc]
dec eax
push eax
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x18]
call fcn.10008dd0
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x34], 6
call fcn.10004aa0
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
mov byte [esp + 0x30], 5
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x100212d8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
jmp 0x100212d8
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x10]
call fcn.10004aa0
lea ecx, [esp + 0xc]
push ecx
lea ecx, [esp + 0x18]
call fcn.10004aa0
push 0x13
push str.ConfigPlugins.ini
lea ecx, [esp + 0x14]
call fcn.1000cde0
push 0x12
push str.Configconfig.ini
lea ecx, [esp + 0x1c]
call fcn.1000cde0
mov edx, dword [0x10098a04]
mov ecx, 0x10098a04
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x18], eax
cmp dword [esp + 0x38], esi
mov byte [esp + 0x30], 7
lea ecx, [esp + 0x18]
push 1
je 0x10021333
push 0x100830cc
jmp 0x10021338
push 0x100830c8
call fcn.100048d0
mov esi, dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
push ebp
mov ebp, dword [esp + 0x10]
push edi
mov edi, dword [esp + 0x20]
push ebp
push edi
push str.BARDBBB7978_AF21_4EF4_9AD1_B2F4BC75696C
push str.IEPlugins
call esi
test eax, eax
je 0x10021424
push ebp
push 0x1008308c
push str.bLoadAll
push str.IEPlugins
call esi
test eax, eax
je 0x10021424
mov eax, dword [esp + 0x1c]
push eax
push 0x100830cc
push str.IEExtensions
push str.Settings
call esi
test eax, eax
je 0x10021424
push str.RegMyIE
lea ecx, [esp + 0x30]
call fcn.10005e50
mov bl, 8
push str.DownloadToolbar
lea ecx, [esp + 0x2c]
mov byte [esp + 0x3c], bl
call fcn.10005e50
push 1
lea ecx, [esp + 0x30]
push ecx
lea edx, [esp + 0x30]
push edx
push SysReAllocStringLen
mov byte [esp + 0x48], 9
call fcn.1004acf0
mov eax, dword [esp + 0x38]
add eax, 0xfffffff0
add esp, 0x10
mov byte [esp + 0x38], bl
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x100213fd
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
mov byte [esp + 0x38], 7
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10021420
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov ebx, dword [esp + 0x18]
lea eax, [edi - 0x10]
mov byte [esp + 0x38], 5
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10021443
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 0x1c]
add eax, 0xfffffff0
mov byte [esp + 0x38], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10021466
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [ebp - 0x10]
mov byte [esp + 0x38], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
pop edi
pop ebp
jg 0x10021487
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
lea eax, [ebx - 0x10]
mov byte [esp + 0x30], 0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x100214a6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov eax, dword [esp + 8]
add eax, 0xfffffff0
mov dword [esp + 0x30], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x100214cc
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
pop ebx
mov ecx, dword [esp + 0x24]
pop esi
mov dword fs:[0], ecx
add esp, 0x2c
ret