Function at 0x10007114
Capabilities:
Check if file exists
Create process on windows
Create thread
Get file attributes

Disassembly:
mov eax, dword [esp + 8]
push ebx
xor ebx, ebx
push esi
sub eax, ebx
je 0x1000734c
dec eax
jne 0x10007395
push ebp
push edi
push dword [esp + 0x14]
call dword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
push 0x37
push str.LpkEditControl
call fcn.1000261c
add eax, 4
push eax
push 0x10021054
call fcn.10011940
add esp, 0xc
mov word [0x10026cc0], 0x7d4
mov word [0x10026cc2], 8
mov word [0x10026cc6], 0xd
push 0x10026b00
push 0x10026cc0
mov word [0x10026cc8], 0x10
mov word [0x10026cca], bx
mov word [0x10026ccc], bx
mov word [0x10026cc4], bx
mov word [0x10026cce], bx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
mov esi, 0x104
mov edi, 0x10025dd8
push esi
push ebx
push edi
call fcn.100118e0
push esi
push ebx
push 0x100269c8
call fcn.100118e0
add esp, 0x18
push esi
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push edi
call fcn.1001b726
push esi
mov ebp, 0x10026cd0
push ebx
push ebp
call fcn.100118e0
push esi
push ebx
push 0x10026f84
call fcn.100118e0
push esi
push ebx
push 0x10028880
call fcn.100118e0
push esi
mov esi, 0x100261f0
push ebx
push esi
call fcn.100118e0
push 0x5c
push edi
mov dword [esp + 0x54], edi
call fcn.10012320
add esp, 0x3c
test eax, eax
je 0x10007236
push 0x5c
push dword [esp + 0x1c]
call fcn.10012320
inc eax
push 0x5c
push eax
mov dword [esp + 0x28], eax
call fcn.10012320
add esp, 0x10
jmp 0x10007215
mov eax, dword [esp + 0x18]
sub eax, edi
push eax
push edi
push ebp
call fcn.10012190
push ebp
call fcn.10011ee0
add esp, 0x10
cmp byte [eax + 0x10026ccf], 0x5c
jne 0x10007263
push ebp
call fcn.10011ee0
pop ecx
mov byte [eax + 0x10026ccf], bl
push ebp
push str._sThumbs.db
push 0x10026f84
call fcn.10011f5b
push ebp
mov edi, 0x10028880
push str._sUsp10.dll
push edi
call fcn.10011f5b
push ebp
push str._sLpk.dll
push esi
call fcn.10011f5b
add esp, 0x24
call dword [sym.imp.KERNEL32.dll_GetTickCount]
test al, 1
push ebp
jne 0x100072b3
mov ebp, 0x100269c8
push str._sLpk.dll
push ebp
call fcn.10011f5b
add esp, 0xc
jmp 0x100072ca
push str._sUsp10.dll
push 0x100269c8
call fcn.10011f5b
add esp, 0xc
mov ebp, 0x100269c8
push edi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x100072d9
push ebp
jmp 0x10007329
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x100072e9
push ebp
push edi
jmp 0x1000732a
push 0x10026f84
call fcn.10012bf1
mov dword [esp], str.Lpk.dll
push ebp
call fcn.10012290
pop ecx
test eax, eax
pop ecx
je 0x10007313
push 0x10026f84
push edi
call fcn.10012ebd
pop ecx
pop ecx
push 0x10021868
push ebp
call fcn.10012290
pop ecx
test eax, eax
pop ecx
je 0x10007331
push 0x10026f84
push esi
call fcn.10012ebd
pop ecx
pop ecx
push ebx
push ebx
push ebx
push 0x10006d8a
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
pop ebp
jmp 0x10007395
push str.winhlp32.exe
push 0x10025dd8
call fcn.10012290
pop ecx
test eax, eax
pop ecx
je 0x10007377
cmp dword [0x100289cc], 0xb
je 0x10007377
push 1
push str.winhlp32.exe_211
call dword [sym.imp.KERNEL32.dll_WinExec]
mov eax, dword [0x100289a0]
mov esi, dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp eax, ebx
je 0x10007389
push eax
call esi
mov eax, dword [0x100289a4]
cmp eax, ebx
je 0x10007395
push eax
call esi
push 1
pop eax
pop esi
pop ebx
ret 0xc