Function at 0x10013ecd
Capabilities:
Create thread

Disassembly:
mov eax, 0x100524ec
call fcn.100457f4
sub esp, 0x38
mov eax, dword [0x100697f8]
push ebx
push esi
push edi
xor ebx, ebx
push ebx
push ebx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp + 0xc]
push ebx
or eax, 0x1800
push eax
push ebx
lea eax, [ebp - 0x24]
push eax
push dword [ebp + 8]
mov edi, ecx
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], 0x64
call fcn.10023ad2
push 0xfffffffffffffff0
push dword [edi + 4]
lea esi, [edi + 4]
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov ecx, eax
or ecx, 0x1000
cmp eax, ecx
je 0x10013f37
push ecx
push 0xfffffffffffffff0
push dword [esi]
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov ecx, edi
call fcn.1000a58c
call fcn.1003bc50
test al, al
je 0x10013f72
mov eax, edi
neg eax
sbb eax, eax
and eax, esi
push dword [eax]
call dword [0x1006cdfc]
test eax, eax
je 0x10013f72
cmp byte [edi + 0xdc], bl
je 0x10013f72
cmp byte [edi + 0x1c0], bl
jne 0x10013f72
mov ecx, edi
call fcn.10011b09
push dword [esi]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x10014003
mov al, byte [ebp + 0xb]
push ebx
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x14], ebx
mov byte [ebp - 0x34], al
call fcn.1002376b
push str.ToolbarIsFailed
call fcn.10045c20
pop ecx
push eax
push str.ToolbarIsFailed
lea ecx, [ebp - 0x34]
call fcn.100243fe
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 4], ebx
call fcn.10003aa7
neg eax
pop ecx
sbb al, al
or dword [ebp - 4], 0xffffffff
pop ecx
inc al
push 1
lea ecx, [ebp - 0x34]
mov byte [ebp + 0xf], al
call fcn.1002376b
cmp byte [ebp + 0xf], bl
je 0x10014003
push ebx
push 0x64
push 0x6f
push dword [esi]
call dword [sym.imp.USER32.dll_SetTimer]
push edi
push ebx
push 0x1000868f
call fcn.100465d4
mov ecx, dword [edi + 0xb4]
add esp, 0xc
mov dword [ecx + 0x2b8], eax
push dword [ebp + 8]
mov edi, dword [sym.imp.USER32.dll_GetParent]
call edi
push eax
call edi
push eax
mov eax, dword [ebp - 0x10]
lea ecx, [eax + 0xe8]
call fcn.10021f22
call dword [sym.imp.KERNEL32.dll_GetVersion]
cmp eax, 0x80000000
jae 0x10014073
mov al, byte [ebp + 0xb]
push ebx
lea ecx, [ebp - 0x34]
mov byte [ebp - 0x34], al
call fcn.1002376b
push str.OldOS
call fcn.10045c20
pop ecx
push eax
push str.OldOS
lea ecx, [ebp - 0x34]
call fcn.100243fe
lea eax, [ebp - 0x34]
push ebx
push eax
mov dword [ebp - 4], 1
call fcn.100036ee
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
push 1
lea ecx, [ebp - 0x34]
jmp 0x100140b8
mov al, byte [ebp + 0xb]
push ebx
lea ecx, [ebp - 0x34]
mov byte [ebp - 0x34], al
call fcn.1002376b
push str.OldOS
call fcn.10045c20
pop ecx
push eax
push str.OldOS
lea ecx, [ebp - 0x34]
call fcn.100243fe
lea eax, [ebp - 0x34]
push 1
push eax
mov dword [ebp - 4], 2
call fcn.100036ee
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
push 1
lea ecx, [ebp - 0x34]
call fcn.1002376b
mov al, byte [ebp + 0xb]
push ebx
lea ecx, [ebp - 0x44]
mov byte [ebp - 0x44], al
call fcn.1002376b
push str.CountOS
call fcn.10045c20
pop ecx
push eax
push str.CountOS
lea ecx, [ebp - 0x44]
call fcn.100243fe
push dword [0x1006f004]
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 4], 3
call fcn.100036ee
or dword [ebp - 4], 0xffffffff
pop ecx
pop ecx
push 1
lea ecx, [ebp - 0x44]
call fcn.1002376b
mov esi, dword [esi]
push esi
call edi
cmp eax, ebx
je 0x10014119
mov esi, eax
push eax
jmp 0x1001410e
cmp esi, ebx
je 0x1001415c
cmp dword [0x1006f004], ebx
jne 0x1001413e
mov eax, dword [0x1006cfa4]
push ebx
push eax
push 0x10013bd7
push 7
call dword [sym.imp.USER32.dll_SetWindowsHookExA]
mov dword [0x1006f678], eax
cmp dword [0x1006f678], ebx
je 0x1001415c
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0xb4]
cmp eax, ebx
je 0x1001415c
push eax
push esi
call fcn.10001b7b
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 0xc