Function at 0x1007506
Capabilities:
Create thread

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x220
push ebx
mov ebx, ecx
push esi
push edi
xor esi, esi
mov dword [ebx], 1
mov dword [ebx + 4], esi
mov dword [ebx + 8], esi
mov dword [ebx + 0x218], esi
mov dword [ebx + 0x21c], esi
mov dword [ebx + 0x244], esi
mov dword [ebx + 0x65c], esi
mov dword [ebx + 0x660], esi
mov dword [ebx + 0x668], esi
mov dword [ebx + 0x66c], esi
mov dword [ebx + 0x678], esi
mov dword [ebx + 0x67c], esi
mov dword [ebx + 0x680], esi
mov dword [ebx + 0x684], esi
mov dword [ebx + 0x688], esi
xor eax, eax
push 8
mov ecx, 0x80
lea edi, [ebx + 0xc]
rep stosd dword es:[edi], eax
pop ecx
lea edi, [ebx + 0x220]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov edx, 0x82
xor eax, eax
mov ecx, edx
lea edi, [ebx + 0x248]
rep stosd dword es:[edi], eax
mov ecx, edx
lea edi, [ebx + 0x450]
rep stosd dword es:[edi], eax
lea edi, [ebp - 0x10]
stosd dword es:[edi], eax
lea eax, [ebp - 0x14]
push eax
mov dword [ebp - 0x14], 8
mov dword [ebp - 0x10], 0x8000
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
call sub.SHELL32.dll_Ordinal_258
mov ecx, ebx
call fcn.010050e7
cmp dword [ebp + 0x10], esi
je 0x10075eb
push dword [ebp + 0x10]
lea eax, [ebx + 0x248]
push 0x104
push eax
mov dword [ebx + 0x244], 1
call fcn.01002a58
push esi
call dword [sym.imp.ole32.dll_CoInitialize]
mov dword [ebp - 8], eax
lea eax, [ebp - 0xc]
push eax
push 0x1c
push esi
push esi
call fcn.0100cb55
mov edi, dword [sym.imp.KERNEL32.dll_CreateEventW]
push esi
push esi
push 1
push esi
call edi
cmp eax, esi
mov dword [ebx + 0x670], eax
je 0x1007903
push esi
push esi
push 1
push esi
call edi
cmp eax, esi
mov dword [ebx + 0x674], eax
je 0x10078f7
lea eax, [ebp - 0x4c]
push eax
push esi
push ebx
push 0x10074ee
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateThread]
cmp eax, esi
mov dword [ebp - 4], eax
je 0x10078eb
push 0x74
pop ecx
xor eax, eax
lea edi, [ebp - 0x21c]
mov dword [ebp - 0x220], esi
rep stosd dword es:[edi], eax
push 0xc
pop ecx
lea edi, [ebp - 0x44]
mov dword [ebp - 0x48], esi
rep stosd dword es:[edi], eax
lea edi, [ebp - 0x21c]
mov dword [ebp + 0x10], 9
mov dword [edi - 4], 0x34
mov dword [edi], 0x1004
call fcn.010030a7
mov dword [edi + 4], eax
mov dword [edi + 0x18], ebx
add edi, 0x34
dec dword [ebp + 0x10]
jne 0x100767b
mov edx, dword [ebp - 0x30]
mov eax, edx
imul eax, eax, 0x34
mov dword [ebp + eax - 0x21c], 0x804
mov dword [ebp + eax - 0x214], 0x2777
mov dword [ebp + eax - 0x208], 0x1006648
inc edx
mov eax, edx
imul eax, eax, 0x34
mov dword [ebp + eax - 0x214], 0x277e
mov dword [ebp + eax - 0x208], 0x1005113
mov dword [ebp + eax - 0x1f8], 0x907
inc edx
mov eax, edx
imul eax, eax, 0x34
cmp dword [ebp + 0xc], esi
mov dword [ebp + eax - 0x214], 0x2779
mov dword [ebp + eax - 0x208], 0x1005312
mov dword [ebp + eax - 0x1f8], 0x908
je 0x1007736
mov esi, dword [ebp + 0xc]
push 6
mov edi, 0x10013a0
pop ecx
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x1007734
and dword [ebx + 4], eax
mov dword [ebx], 1
mov dword [ebp - 0x2c], edx
xor esi, esi
inc edx
mov eax, edx
imul eax, eax, 0x34
mov dword [ebp + eax - 0x214], 0x277a
mov dword [ebp + eax - 0x208], 0x1005f79
mov dword [ebp + eax - 0x1f8], 0x909
inc edx
mov eax, edx
imul eax, eax, 0x34
cmp dword [ebp + 0xc], esi
mov dword [ebp + eax - 0x214], 0x277c
mov dword [ebp + eax - 0x208], 0x1005769
mov dword [ebp + eax - 0x1f8], 0x90c
je 0x10077a8
mov esi, dword [ebp + 0xc]
push 9
mov edi, 0x10017c4
pop ecx
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x10077a6
and dword [ebx], eax
mov dword [ebx + 4], 1
mov dword [ebp - 0x2c], edx
xor esi, esi
inc edx
mov eax, edx
imul eax, eax, 0x34
mov ecx, 0x277b
mov dword [ebp + eax - 0x214], ecx
mov dword [ebp + eax - 0x208], 0x1005abc
mov dword [ebp + eax - 0x1f8], 0x90a
inc edx
mov eax, edx
imul eax, eax, 0x34
mov dword [ebp + eax - 0x214], ecx
mov dword [ebp + eax - 0x208], 0x1005b45
mov dword [ebp + eax - 0x1f8], 0x90b
inc edx
mov eax, edx
imul eax, eax, 0x34
mov dword [ebp + eax - 0x214], 0x277f
mov dword [ebp + eax - 0x208], 0x1006818
mov dword [ebp + eax - 0x1f8], 0x900
inc edx
mov eax, edx
imul eax, eax, 0x34
mov dword [ebp + eax - 0x21c], 0x804
mov dword [ebp + eax - 0x214], 0x2778
mov dword [ebp + eax - 0x208], 0x1006c3b
mov eax, dword [ebp + 8]
inc edx
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x48], 0x34
mov dword [ebp - 0x44], 0x119802a
mov dword [ebp - 0x40], eax
call fcn.010030a7
mov edi, dword [sym.imp.USER32.dll_LoadImageW]
push 0x6b
mov dword [ebp - 0x3c], eax
pop eax
push esi
push esi
push esi
push 1
push eax
push dword [0x100e704]
lea ecx, [ebp - 0x220]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x28], ecx
call edi
push 0x40
push esi
push esi
push esi
push 0x82
push dword [0x100e704]
mov dword [ebp - 0x38], eax
call edi
push 0x40
push esi
push esi
push esi
push 0x81
push dword [0x100e704]
mov dword [ebp - 0x18], eax
call edi
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x48]
push eax
call dword [sym.imp.COMCTL32.dll_PropertySheetW]
push dword [ebx + 0x670]
mov edi, dword [sym.imp.KERNEL32.dll_SetEvent]
mov dword [ebx + 0x680], esi
call edi
push dword [ebx + 0x674]
call edi
push 0xffffffffffffffff
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebp - 4]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebx + 0x674]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebx + 0x670]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 0xc]
push 0x1d
push esi
push esi
call fcn.0100cb55
cmp dword [ebp - 8], esi
jl 0x100791a
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, dword [ebx + 0x688]
cmp eax, esi
je 0x100792b
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
pop edi
pop esi
mov eax, ebx
pop ebx
leave
ret 0xc