Function at 0x10007111
Capabilities:
Create thread
Delete file
Query environment variable

Disassembly:
push ebp
lea ebp, [esp - 0x1ec]
sub esp, 0x26c
mov eax, dword [0x1003a0a0]
xor eax, ebp
mov dword [ebp + 0x1e8], eax
mov eax, dword [ebp + 0x1f4]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp + 0x1f8]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp + 0x1fc]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp + 0x200]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp + 0x208]
push ebx
mov dword [ebp - 0x34], eax
mov eax, dword [ebp + 0x20c]
push esi
push edi
mov edi, dword [ebp + 0x204]
mov dword [ebp - 0x38], eax
call fcn.1000169a
mov esi, 0x104
xor ebx, ebx
push esi
lea eax, [ebp - 0x27]
push ebx
push eax
mov byte [ebp - 0x28], bl
call fcn.10016180
add esp, 0xc
push esi
lea eax, [ebp - 0x28]
push eax
push str._ProgramFiles_
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsA]
push esi
lea eax, [ebp + 0xe1]
push ebx
push eax
mov byte [ebp + 0xe0], bl
call fcn.10016180
lea eax, [ebp - 0x28]
push eax
push str._scheck.txt
lea eax, [ebp + 0xe0]
push esi
push eax
call fcn.10016a82
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileA]
add esp, 0x1c
lea eax, [ebp + 0xe0]
push eax
mov dword [ebp - 0x40], ebx
call esi
lea eax, [ebp + 0xe0]
push 0x1002f064
push eax
call fcn.10016fa6
pop ecx
pop ecx
cmp eax, ebx
je 0x100071fc
push eax
call fcn.10017034
pop ecx
mov dword [ebp - 0x40], 1
lea eax, [ebp + 0xe0]
push eax
call esi
cmp dword [ebp - 0x40], ebx
jne 0x10007222
push 0x40
push str.GameLauncher
push 0x10031280
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x10007472
cmp edi, ebx
je 0x10007235
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cmp eax, 0x3fffffff
jle 0x10007239
xor eax, eax
jmp 0x10007250
lea esi, [eax + eax]
mov eax, esi
call fcn.100278d0
mov eax, esp
push 3
push esi
push edi
mov esi, eax
call fcn.10012224
push eax
mov ecx, 0x1004d9e0
call fcn.10001c4f
cmp dword [ebp - 0x34], ebx
je 0x10007271
push dword [ebp - 0x34]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cmp eax, 0x3fffffff
jle 0x10007275
xor eax, eax
jmp 0x1000728c
lea edi, [eax + eax]
mov eax, edi
call fcn.100278d0
mov esi, esp
push 3
push edi
push dword [ebp - 0x34]
call fcn.10012224
push eax
mov ecx, 0x1004d9fc
call fcn.10001c4f
cmp dword [ebp - 0x38], ebx
je 0x100072ad
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cmp eax, 0x3fffffff
jle 0x100072b1
xor eax, eax
jmp 0x100072c8
lea edi, [eax + eax]
mov eax, edi
call fcn.100278d0
mov esi, esp
push 3
push edi
push dword [ebp - 0x38]
call fcn.10012224
push eax
mov ecx, 0x1004da34
call fcn.10001c4f
cmp dword [ebp - 0x3c], ebx
je 0x100072e9
push dword [ebp - 0x3c]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cmp eax, 0x3fffffff
jle 0x100072ed
xor eax, eax
jmp 0x10007304
lea edi, [eax + eax]
mov eax, edi
call fcn.100278d0
mov esi, esp
push 3
push edi
push dword [ebp - 0x3c]
call fcn.10012224
push eax
mov ecx, 0x1004d954
call fcn.10001c4f
cmp dword [ebp - 0x2c], ebx
je 0x10007325
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cmp eax, 0x3fffffff
jle 0x10007329
xor eax, eax
jmp 0x10007340
lea edi, [eax + eax]
mov eax, edi
call fcn.100278d0
mov esi, esp
push 3
push edi
push dword [ebp - 0x2c]
call fcn.10012224
push eax
mov ecx, 0x1004d970
call fcn.10001c4f
cmp dword [ebp - 0x30], ebx
je 0x10007361
push dword [ebp - 0x30]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cmp eax, 0x3fffffff
jle 0x10007365
xor eax, eax
jmp 0x1000737c
lea edi, [eax + eax]
mov eax, edi
call fcn.100278d0
mov esi, esp
push 3
push edi
push dword [ebp - 0x30]
call fcn.10012224
push eax
mov ecx, 0x1004d98c
call fcn.10001c4f
xor edi, edi
inc edi
push edi
push ebx
lea esi, [ebp - 0x64]
call fcn.10001780
push 0xffffffffffffffff
push ebx
push eax
mov ecx, 0x1004d9a8
call fcn.100018f9
push ebx
push edi
mov ecx, esi
call fcn.10001afc
mov eax, dword [0x1004d9a0]
dec eax
push eax
push edi
lea esi, [ebp - 0x64]
call fcn.10001780
push 0xffffffffffffffff
push ebx
push eax
mov ecx, 0x1004d9c4
call fcn.100018f9
push ebx
push edi
mov ecx, esi
call fcn.10001afc
mov eax, dword [0x1004d9f8]
mov ecx, dword [0x1004d9e4]
mov edx, 0x1004d9e4
mov esi, ecx
cmp eax, 0x10
jae 0x100073eb
mov esi, edx
cmp byte [esi], 0x23
jne 0x10007433
cmp eax, 0x10
jae 0x100073f7
mov ecx, edx
push ecx
lea eax, [ebp - 0x80]
push eax
call fcn.100135e9
push 0x3a
lea ebx, [ebp - 0x80]
call fcn.1001365c
push 1
mov eax, ebx
call fcn.1000a476
call fcn.10013cf5
call fcn.10013a8e
inc eax
push eax
mov ecx, 0x1004d938
call fcn.10001c4f
mov ecx, ebx
call fcn.1001362b
xor ebx, ebx
mov edi, dword [ebp - 0x44]
lea eax, [ebp - 0x48]
push eax
push ebx
add edi, 0xac
push edi
push 0x100069b0
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
test eax, eax
je 0x10007472
call dword [sym.imp.USER32.dll_GetActiveWindow]
mov ebx, eax
lea esi, [edi + 8]
mov eax, edi
call fcn.1000f3c0
mov esi, dword [0x1004ccd4]
push ebx
call fcn.1000a3ac
pop ecx
xor eax, eax
lea esp, [ebp - 0x8c]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x1e8]
xor ecx, ebp
call fcn.10016165
add ebp, 0x1ec
leave
ret 0x1c