Function at 0x100518a0
Capabilities:
Access peb ldr_data
Get ntdll base address
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x1007eab8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, dword [0x10098a04]
push esi
mov esi, ecx
mov ecx, 0x10098a04
call dword [eax + 0xc]
add eax, 0x10
mov dword [esp + 4], eax
mov ecx, dword [esi + 0x48]
push str.MainImageURL
push ecx
push str.DownloadToolbarTheme
lea edx, [esp + 0x10]
push 0x1008525c
push edx
mov dword [esp + 0x24], 0
call fcn.10004e20
lea eax, [esi + 0x10]
push eax
lea ecx, [esp + 0x1c]
push ecx
push SysReAllocStringLen
call fcn.1004a670
mov edx, dword [esi + 0x48]
push str.AboutImageURL
push edx
push str.DownloadToolbarTheme
lea eax, [esp + 0x30]
push 0x1008525c
push eax
call fcn.10004e20
lea ecx, [esi + 0x14]
push ecx
lea edx, [esp + 0x3c]
push edx
push SysReAllocStringLen
call fcn.1004a670
mov eax, dword [esi + 0x48]
add esp, 0x40
push str.ThemeGuid
push eax
push str.DownloadToolbarTheme
lea ecx, [esp + 0x10]
push 0x1008525c
push ecx
call fcn.10004e20
lea edx, [esi + 0x18]
push edx
lea eax, [esp + 0x1c]
push eax
push SysReAllocStringLen
call fcn.1004a670
mov ecx, dword [esi + 0x48]
push str.ThemeName
push ecx
push str.DownloadToolbarTheme
lea edx, [esp + 0x30]
push 0x1008525c
push edx
call fcn.10004e20
lea eax, [esi + 0x1c]
push eax
lea ecx, [esp + 0x3c]
push ecx
push SysReAllocStringLen
call fcn.1004a670
mov edx, dword [esi + 0x48]
add esp, 0x40
push str.ToolBarItemName
push edx
push str.DownloadToolbarTheme
lea eax, [esp + 0x10]
push 0x1008525c
push eax
call fcn.10004e20
lea ecx, [esi + 0x20]
push ecx
lea edx, [esp + 0x1c]
push edx
push SysReAllocStringLen
call fcn.1004a670
mov eax, dword [esi + 0x48]
push str.FirstPageURL
push eax
push str.DownloadToolbarTheme
lea ecx, [esp + 0x30]
push 0x1008525c
push ecx
call fcn.10004e20
lea edx, [esi + 0x24]
push edx
lea eax, [esp + 0x3c]
push eax
push SysReAllocStringLen
call fcn.1004a670
mov ecx, dword [esi + 0x48]
add esp, 0x40
push str.WelcomePageURL
push ecx
push str.DownloadToolbarTheme
lea edx, [esp + 0x10]
push 0x1008525c
push edx
call fcn.10004e20
lea eax, [esi + 0x28]
push eax
lea ecx, [esp + 0x1c]
push ecx
push SysReAllocStringLen
call fcn.1004a670
mov edx, dword [esi + 0x48]
push str.EnableAD
push edx
push str.DownloadToolbarTheme
lea eax, [esp + 0x30]
push 0x1008525c
push eax
call fcn.10004e20
lea ecx, [esi + 0x2c]
push ecx
lea edx, [esp + 0x3c]
push edx
push SysReAllocStringLen
call fcn.1004a670
mov eax, dword [esi + 0x48]
add esp, 0x40
push str.Marquee
push eax
push str.DownloadToolbarTheme
lea ecx, [esp + 0x10]
push 0x1008525c
push ecx
call fcn.10004e20
lea edx, [esi + 0x30]
push edx
lea eax, [esp + 0x1c]
push eax
push SysReAllocStringLen
call fcn.1004a670
mov ecx, dword [esi + 0x48]
push str.Refresh
push ecx
push str.DownloadToolbarTheme
lea edx, [esp + 0x30]
push 0x1008525c
push edx
call fcn.10004e20
lea eax, [esi + 0x34]
push eax
lea ecx, [esp + 0x3c]
push ecx
push SysReAllocStringLen
call fcn.1004a670
mov edx, dword [esi + 0x48]
add esp, 0x40
push str.ThemeVersion
push edx
push str.DownloadToolbarTheme
lea eax, [esp + 0x10]
push 0x1008525c
push eax
call fcn.10004e20
add esi, 0x4c
push esi
lea ecx, [esp + 0x1c]
push ecx
push SysReAllocStringLen
call fcn.1004a670
mov eax, dword [esp + 0x24]
add eax, 0xfffffff0
add esp, 0x20
mov dword [esp + 0x10], 0xffffffff
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
pop esi
jg 0x10051b1e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
call dword [edx + 4]
mov ecx, dword [esp + 4]
mov eax, 1
mov dword fs:[0], ecx
add esp, 0x10
ret