Function at 0x100126c3
Capabilities:
Create thread

Disassembly:
mov eax, 0x100563f4
call fcn.10048f38
sub esp, 0xd4
mov eax, dword [0x1006da94]
push ebx
push esi
push edi
xor ebx, ebx
push ebx
push ebx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 0xc]
push ebx
or eax, 0x1800
push eax
push ebx
lea eax, [ebp - 0x34]
push eax
push dword [ebp + 8]
mov edi, ecx
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], 0x64
call fcn.10026653
push 0xfffffffffffffff0
push dword [edi + 4]
lea esi, [edi + 4]
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov ecx, eax
or ecx, 0x1000
cmp eax, ecx
je 0x10012730
push ecx
push 0xfffffffffffffff0
push dword [esi]
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov ecx, edi
call fcn.10009196
call fcn.1003fb9b
test al, al
je 0x1001276b
mov eax, edi
neg eax
sbb eax, eax
and eax, esi
push dword [eax]
call dword [0x100710dc]
test eax, eax
je 0x1001276b
cmp byte [edi + 0xdc], bl
je 0x1001276b
cmp byte [edi + 0x1c4], bl
jne 0x1001276b
mov ecx, edi
call fcn.10010865
push dword [esi]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x100127fc
mov al, byte [ebp + 0xb]
push ebx
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x24], ebx
mov byte [ebp - 0x20], al
call fcn.1002622b
push str.ToolbarIsFailed
call fcn.100493c0
pop ecx
push eax
push str.ToolbarIsFailed
lea ecx, [ebp - 0x20]
call fcn.10027116
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 4], ebx
call fcn.10003b5a
neg eax
pop ecx
sbb al, al
or dword [ebp - 4], 0xffffffff
pop ecx
inc al
push 1
lea ecx, [ebp - 0x20]
mov byte [ebp + 0xf], al
call fcn.1002622b
cmp byte [ebp + 0xf], bl
je 0x100127fc
push ebx
push 0x64
push 0x6f
push dword [esi]
call dword [sym.imp.USER32.dll_SetTimer]
push edi
push ebx
push 0x10007317
call fcn.10049d48
mov ecx, dword [edi + 0xb4]
add esp, 0xc
mov dword [ecx + 0x2bc], eax
push dword [ebp + 8]
mov edi, dword [sym.imp.USER32.dll_GetParent]
call edi
push eax
call edi
push eax
mov eax, dword [ebp - 0x10]
lea ecx, [eax + 0xec]
call fcn.100248de
call dword [sym.imp.KERNEL32.dll_GetVersion]
cmp eax, 0x80000000
jae 0x1001286c
mov al, byte [ebp + 0xb]
push ebx
lea ecx, [ebp - 0x20]
mov byte [ebp - 0x20], al
call fcn.1002622b
push str.OldOS
call fcn.100493c0
pop ecx
push eax
push str.OldOS
lea ecx, [ebp - 0x20]
call fcn.10027116
lea eax, [ebp - 0x20]
push ebx
push eax
mov dword [ebp - 4], 1
call fcn.1000375f
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
push 1
lea ecx, [ebp - 0x20]
jmp 0x100128b1
mov al, byte [ebp + 0xb]
push ebx
lea ecx, [ebp - 0x20]
mov byte [ebp - 0x20], al
call fcn.1002622b
push str.OldOS
call fcn.100493c0
pop ecx
push eax
push str.OldOS
lea ecx, [ebp - 0x20]
call fcn.10027116
lea eax, [ebp - 0x20]
push 1
push eax
mov dword [ebp - 4], 2
call fcn.1000375f
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
push 1
lea ecx, [ebp - 0x20]
call fcn.1002622b
push 0x94
lea eax, [ebp - 0xe0]
push ebx
push eax
mov byte [ebp + 0xb], bl
call fcn.10049020
add esp, 0xc
lea eax, [ebp - 0xe0]
push eax
mov dword [ebp - 0xe0], 0x94
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
mov eax, dword [ebp - 0xd0]
dec eax
jne 0x10012904
cmp dword [ebp - 0xdc], 4
jne 0x10012904
cmp dword [ebp - 0xd8], 0x5a
jne 0x10012904
mov byte [ebp + 0xb], 1
mov al, byte [ebp + 0xb]
push ebx
lea ecx, [ebp - 0x44]
mov byte [ebp - 0x44], al
call fcn.1002622b
push str.CountOS
call fcn.100493c0
pop ecx
push eax
push str.CountOS
lea ecx, [ebp - 0x44]
call fcn.10027116
push dword [0x10073004]
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 4], 3
call fcn.1000375f
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
push 1
lea ecx, [ebp - 0x44]
call fcn.1002622b
mov esi, dword [esi]
push esi
call edi
cmp eax, ebx
je 0x10012960
mov esi, eax
push eax
jmp 0x10012955
cmp esi, ebx
je 0x100129af
xor eax, eax
cmp byte [0x10071299], bl
jne 0x10012988
cmp byte [ebp + 0xb], bl
jne 0x1001299c
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push ebx
push 0x100123ef
push 7
call dword [sym.imp.USER32.dll_SetWindowsHookExA]
cmp byte [ebp + 0xb], bl
jne 0x1001299c
cmp eax, ebx
je 0x100129af
mov ecx, dword [ebp - 0x10]
cmp dword [ecx + 0xb4], ebx
je 0x100129af
push eax
mov eax, dword [ebp - 0x10]
push dword [eax + 0xb4]
push esi
call fcn.10001bb9
add esp, 0xc
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 0xc