Function at 0x100126f4
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x144
mov eax, dword [0x100704f4]
push ebx
push esi
push edi
xor ebx, ebx
push ebx
push ebx
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp + 0xc]
push ebx
or eax, 0x1800
push eax
push ebx
lea eax, [ebp - 0x28]
push eax
push dword [ebp + 8]
mov edi, ecx
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], 0x64
call fcn.10026973
push 0xfffffffffffffff0
push dword [edi + 4]
lea esi, [edi + 4]
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov ecx, eax
or ecx, 0x1000
cmp eax, ecx
je 0x1001275a
push ecx
push 0xfffffffffffffff0
push dword [esi]
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov ecx, edi
call fcn.100092af
call fcn.1003ff47
test al, al
je 0x1001279c
mov eax, edi
neg eax
sbb eax, eax
and eax, esi
push dword [eax]
call dword [0x10073d3c]
test eax, eax
je 0x1001279c
cmp byte [edi + 0xdc], bl
je 0x1001279c
cmp byte [edi + 0x11c0], bl
jne 0x1001279c
mov ecx, edi
call fcn.1001821d
mov ecx, edi
call fcn.10010888
push dword [esi]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x10012822
mov al, byte [ebp + 0xb]
push ebx
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x18], ebx
mov byte [ebp - 0x10], al
call fcn.10026566
push str.ToolbarIsFailed
call fcn.100492e5
pop ecx
push eax
push str.ToolbarIsFailed
lea ecx, [ebp - 0x10]
call fcn.100275d3
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.10003d3b
neg eax
pop ecx
pop ecx
sbb al, al
inc al
push 1
lea ecx, [ebp - 0x10]
mov byte [ebp + 0xf], al
call fcn.10026566
cmp byte [ebp + 0xf], bl
je 0x10012822
push ebx
push 0x64
push 0x6f
push dword [esi]
call dword [sym.imp.USER32.dll_SetTimer]
push edi
push ebx
push 0x10007469
call fcn.10049c4f
mov ecx, dword [edi + 0xb4]
add esp, 0xc
mov dword [ecx + 0x12b8], eax
push dword [ebp + 8]
mov edi, dword [sym.imp.USER32.dll_GetParent]
call edi
push eax
call edi
push eax
mov eax, dword [ebp - 0x14]
lea ecx, [eax + 0xec]
call fcn.10024a0a
call dword [sym.imp.KERNEL32.dll_GetVersion]
cmp eax, 0x80000000
jae 0x10012887
mov al, byte [ebp + 0xb]
push ebx
lea ecx, [ebp - 0x10]
mov byte [ebp - 0x10], al
call fcn.10026566
push str.OldOS
call fcn.100492e5
pop ecx
push eax
push str.OldOS
lea ecx, [ebp - 0x10]
call fcn.100275d3
lea eax, [ebp - 0x10]
push ebx
push eax
call fcn.100039e0
pop ecx
pop ecx
push 1
lea ecx, [ebp - 0x10]
jmp 0x100128c1
mov al, byte [ebp + 0xb]
push ebx
lea ecx, [ebp - 0x10]
mov byte [ebp - 0x10], al
call fcn.10026566
push str.OldOS
call fcn.100492e5
pop ecx
push eax
push str.OldOS
lea ecx, [ebp - 0x10]
call fcn.100275d3
lea eax, [ebp - 0x10]
push 1
push eax
call fcn.100039e0
pop ecx
pop ecx
push 1
lea ecx, [ebp - 0x10]
call fcn.10026566
push 0x114
lea eax, [ebp - 0x144]
push ebx
push eax
mov byte [ebp + 0xb], bl
call fcn.10048f50
add esp, 0xc
lea eax, [ebp - 0x144]
push eax
mov dword [ebp - 0x144], 0x114
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov eax, dword [ebp - 0x134]
dec eax
jne 0x10012914
cmp dword [ebp - 0x140], 4
jne 0x10012914
cmp dword [ebp - 0x13c], 0x5a
jne 0x10012914
mov byte [ebp + 0xb], 1
mov al, byte [ebp + 0xb]
push ebx
lea ecx, [ebp - 0x10]
mov byte [ebp - 0x10], al
call fcn.10026566
push str.CountOS
call fcn.100492e5
pop ecx
push eax
push str.CountOS
lea ecx, [ebp - 0x10]
call fcn.100275d3
push dword [0x10087004]
lea eax, [ebp - 0x10]
push eax
call fcn.100039e0
pop ecx
pop ecx
push 1
lea ecx, [ebp - 0x10]
call fcn.10026566
mov esi, dword [esi]
push esi
call edi
cmp eax, ebx
je 0x10012965
mov esi, eax
push eax
jmp 0x1001295a
cmp esi, ebx
je 0x100129b4
xor eax, eax
cmp byte [0x100850c1], bl
jne 0x1001298d
cmp byte [ebp + 0xb], bl
jne 0x100129a1
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push ebx
push 0x1001240a
push 7
call dword [sym.imp.USER32.dll_SetWindowsHookExW]
cmp byte [ebp + 0xb], bl
jne 0x100129a1
cmp eax, ebx
je 0x100129b4
mov ecx, dword [ebp - 0x14]
cmp dword [ecx + 0xb4], ebx
je 0x100129b4
push eax
mov eax, dword [ebp - 0x14]
push dword [eax + 0xb4]
push esi
call fcn.10001c11
add esp, 0xc
pop edi
pop esi
pop ebx
leave
ret 0xc