Function at 0x100073a0
Capabilities:
Check os version
Resume thread

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x834
mov eax, dword [0x1006d004]
xor eax, esp
mov dword [esp + 0x830], eax
movups xmm0, xmmword [str.DragInterceptor::Intercept]
mov ax, word [0x10066ea4]
push ebx
push esi
push edi
movups xmmword [esp + 0x820], xmm0
mov word [esp + 0x838], ax
movq xmm0, qword [0x10066e9c]
mov al, byte [0x10066ea6]
push 0x1006f25c
movq qword [esp + 0x834], xmm0
mov byte [esp + 0x83e], al
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x1006f148], 0
jne 0x10007420
push 0x1006f148
mov dword [0x1006f148], 0x114
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
cmp dword [0x1006f158], 2
jne 0x1000789c
mov eax, dword [0x1006f14c]
cmp eax, 4
jbe 0x1000789c
cmp eax, 5
jbe 0x1000766c
cmp dword [0x1006f0cc], 0
mov dword [esp + 0x14], 0
jne 0x10007658
lea eax, [esp + 0x14]
push eax
push 0x1005bee0
push 1
push 0
push 0x1006838c
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x10007638
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x10007638
mov dword [esp + 0x18], 0xf00fbaa7
mov eax, dword [ecx]
mov ecx, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
push ecx
mov dword [0x1006f0b8], eax
lea eax, [esp + 0x824]
push eax
push str._s:_DSH2_InitializeFromBitmap_original:__p
push 0x64
mov dword [0x1006f0bc], ecx
call fcn.10009530
push dword [0x1006f0b8]
lea eax, [esp + 0x834]
push eax
push str._s:_DSH2_InitializeFromWindow_original:__p
push 0x64
call fcn.10009530
add esp, 0x20
cmp dword [0x1006f0bc], 0x100010e0
je 0x10007626
cmp dword [0x1006f0b8], 0x10001100
je 0x10007626
lea edx, [esp + 0xc]
mov dword [esp + 0x10], 0
lea ecx, [esp + 0x20]
mov dword [esp + 0x1c], 0
mov dword [esp + 0xc], 0
call fcn.1000a100
lea eax, [esp + 0x18]
push eax
mov eax, dword [esp + 0x18]
push 4
push 0x18
push dword [eax]
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
je 0x10007589
test byte [esp + 0x18], 4
jne 0x10007589
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
mov dword [eax + 0xc], 0x100010e0
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
mov dword [eax + 0x10], 0x10001100
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x1c]
mov eax, dword [esp + 0x1c]
push 0x18
push dword [eax]
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov ecx, dword [esp + 0x14]
mov dword [0x1006f0cc], ecx
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1c], eax
mov dword [0x1006f0d0], ecx
mov dword [esp + 0x10], 1
mov edi, dword [esp + 0xc]
test edi, edi
je 0x100075f7
xor ebx, ebx
xor esi, esi
test edi, edi
je 0x100075c1
nop dword [eax]
mov edi, dword [esp + esi*4 + 0x20]
push edi
call dword [sym.imp.KERNEL32.dll_ResumeThread]
cmp eax, 0xffffffff
je 0x100075b1
inc ebx
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, dword [esp + 0xc]
inc esi
cmp esi, edi
jb 0x100075a0
cmp ebx, edi
je 0x100075e3
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x23c
push str._assertion_failed:_resumed__suspendedThreadCount__line__i__err__i
push 0xc8
call fcn.10009530
add esp, 0x10
push edi
push ebx
push str.ResumeAllThreads:_resumed__i_threads__max_count__i
push 0xc8
call fcn.10009530
add esp, 0x10
cmp dword [esp + 0x10], 0
je 0x1000783f
lea eax, [esp + 0x820]
push eax
push str._s:_interception_successful
push 0xc8
call fcn.10009530
add esp, 0xc
cmp dword [esp + 0x1c], 0
jmp 0x1000783d
lea eax, [esp + 0x820]
push eax
push str._s:_DragSourceHelper2_already_intercepted
jmp 0x100078a9
push eax
lea eax, [esp + 0x824]
push eax
push str._s:_CoCreateInstance_failed_for_DragSourceHelper2_with__X
push 0xc8
call fcn.10009530
add esp, 0x10
jmp 0x100078b6
lea eax, [esp + 0x820]
push eax
push str._s:_DragSourceHelper2_already_initialized
push 0x64
jmp 0x100078ae
cmp dword [0x1006f0c8], 0
jne 0x1000788b
lea eax, [esp + 0x14]
mov dword [esp + 0x14], 0
push eax
push 0x10059ae0
push 1
push 0
push 0x1006838c
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jne 0x1000786e
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x1000786e
mov dword [esp + 0x18], 0xf00fbaa7
mov eax, dword [ecx]
mov ecx, dword [eax + 0xc]
mov eax, dword [eax + 0x10]
mov dword [0x1006f0bc], ecx
mov dword [0x1006f0b8], eax
cmp ecx, 0x100010e0
je 0x1000785f
cmp eax, 0x10001100
je 0x1000785f
push ecx
lea eax, [esp + 0x824]
mov dword [esp + 0x20], 0
push eax
push str._s:_DSH_InitializeFromBitmap_original:___p
push 0x64
mov dword [esp + 0x20], 0
call fcn.10009530
push dword [0x1006f0b8]
lea eax, [esp + 0x834]
push eax
push str._s:_DSH_InitializeFromWindow_original:___p
push 0x64
call fcn.10009530
add esp, 0x20
mov dword [esp + 0xc], 0
lea edx, [esp + 0xc]
lea ecx, [esp + 0x20]
call fcn.1000a100
lea eax, [esp + 0x18]
push eax
mov eax, dword [esp + 0x18]
push 4
push 0x14
push dword [eax]
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
je 0x100077a8
test byte [esp + 0x18], 4
jne 0x100077a8
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
mov dword [eax + 0xc], 0x100010e0
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
mov dword [eax + 0x10], 0x10001100
lea eax, [esp + 0x1c]
push eax
push dword [esp + 0x1c]
mov eax, dword [esp + 0x1c]
push 0x14
push dword [eax]
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
mov ecx, dword [esp + 0x14]
mov dword [0x1006f0c8], ecx
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x10], eax
mov dword [0x1006f0d0], ecx
mov dword [esp + 0x1c], 1
mov edi, dword [esp + 0xc]
test edi, edi
je 0x10007817
xor ebx, ebx
xor esi, esi
test edi, edi
je 0x100077e1
nop dword [eax + eax]
mov edi, dword [esp + esi*4 + 0x20]
push edi
call dword [sym.imp.KERNEL32.dll_ResumeThread]
cmp eax, 0xffffffff
je 0x100077d1
inc ebx
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, dword [esp + 0xc]
inc esi
cmp esi, edi
jb 0x100077c0
cmp ebx, edi
je 0x10007803
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x23c
push str._assertion_failed:_resumed__suspendedThreadCount__line__i__err__i
push 0xc8
call fcn.10009530
add esp, 0x10
push edi
push ebx
push str.ResumeAllThreads:_resumed__i_threads__max_count__i
push 0xc8
call fcn.10009530
add esp, 0x10
cmp dword [esp + 0x1c], 0
je 0x1000783f
lea eax, [esp + 0x820]
push eax
push str._s:_interception_successful
push 0xc8
call fcn.10009530
add esp, 0xc
cmp dword [esp + 0x10], 0
jne 0x100078b6
push dword [esp + 0x18]
lea eax, [esp + 0x824]
push eax
push str._s:_error___already_intercepted__0x_x
push 0xc8
call fcn.10009530
add esp, 0x10
jmp 0x100078b6
lea eax, [esp + 0x820]
push eax
push str._s:_DragSourceHelper_already_intercepted
jmp 0x100078a9
push eax
lea eax, [esp + 0x824]
push eax
push str._s:_CoCreateInstance_failed_for_DragSourceHelper_with__X
push 0xc8
call fcn.10009530
add esp, 0x10
jmp 0x100078b6
lea eax, [esp + 0x820]
push eax
push str._s:_DragSourceHelper_already_initialized
push 0x64
jmp 0x100078ae
lea eax, [esp + 0x820]
push eax
push str._s:_windows_version_not_supported
push 0xc8
call fcn.10009530
add esp, 0xc
push 0x1006f25c
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [0x1006f0cc], 0
jne 0x100078ea
cmp dword [0x1006f0c8], 0
jne 0x100078ea
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x830]
xor ecx, esp
call fcn.1000dfef
mov esp, ebp
pop ebp
ret
mov ecx, dword [esp + 0x83c]
mov eax, 1
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.1000dfef
mov esp, ebp
pop ebp
ret