Function at 0x1008193
Capabilities:
Create thread
Get common file path

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x248
mov eax, dword [0x1023da8]
push ebx
push esi
push edi
push 1
push 0x1024c98
push dword [0x1068664]
mov edi, ecx
mov dword [ebp - 4], eax
mov dword [ebp - 0x218], edi
call fcn.0101e0b7
mov ebx, eax
xor esi, esi
cmp ebx, esi
je 0x10081e3
push 0x10
push 0x10021f8
push 0x1002068
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x1008535
mov eax, dword [0x1068668]
mov ecx, dword [0x1024c98]
mov dword [0x1024c90], eax
call fcn.0101e088
mov dword [0x1068668], eax
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
lea eax, [ebp - 0x214]
push eax
mov dword [ebp - 0x214], esi
call fcn.0100593e
cmp eax, esi
jne 0x1008669
cmp dword [ebp - 0x214], esi
je 0x1008669
push 8
pop ebx
lea eax, [ebp - 0x220]
push eax
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x21c], 0x8000
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
mov edi, dword [sym.imp.msvcrt.dll__beginthreadex]
push 0x1024e88
push esi
push 0x1024e70
push 0x10113ba
push esi
push esi
call edi
push 0x1024e8c
push esi
push 0x1024e70
push 0x10105dc
push esi
push esi
mov dword [0x1024e90], eax
call edi
mov dword [0x1024e94], eax
add esp, 0x30
lea eax, [ebp - 0x248]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
movzx eax, word [ebp - 0x23a]
push eax
call dword [sym.imp.msvcrt.dll_srand]
xor edi, edi
inc edi
cmp word [ebp - 0x23c], di
pop ecx
mov dword [ebp - 0x210], edi
jbe 0x10082ce
call dword [sym.imp.msvcrt.dll_rand]
movzx eax, word [ebp - 0x23c]
inc dword [ebp - 0x210]
cmp dword [ebp - 0x210], eax
jl 0x10082b3
push 0x1024c58
call fcn.01011447
neg eax
sbb eax, eax
inc eax
mov dword [0x1024c5c], eax
mov dword [0x1024c70], edi
mov dword [0x1024c6c], edi
call fcn.01005e59
push ebx
lea eax, [ebp - 0x228]
push eax
call dword [sym.imp.WINMM.dll_timeGetDevCaps]
cmp eax, esi
je 0x1008311
mov dword [0x1024c88], 0x32
jmp 0x100833c
mov eax, dword [ebp - 0x228]
push 0x32
pop ecx
cmp eax, ecx
mov dword [0x1024c88], ecx
jb 0x1008329
mov dword [0x1024c88], eax
mov eax, dword [ebp - 0x224]
cmp dword [0x1024c88], eax
jb 0x100833c
mov dword [0x1024c88], eax
push dword [ebp + 8]
mov ecx, dword [ebp - 0x218]
call fcn.010078cd
cmp eax, esi
jge 0x1008360
mov dword [0x1024cac], eax
mov dword [0x10231a0], esi
mov eax, edi
jmp 0x10086d1
xor eax, eax
mov ecx, 0x1024440
mov edi, ecx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov word [0x1024020], si
mov word [0x1023e18], si
mov edi, ecx
push edi
xor ebx, ebx
inc ebx
push ebx
push esi
call sub.WMVCore.DLL_WMCreateSyncReader
cmp eax, esi
jl 0x10083c7
add edi, 4
cmp edi, 0x1024454
jl 0x100837e
push dword [0x1024450]
mov ecx, 0x1024d70
push 0x1023e18
mov dword [0x102443c], esi
call fcn.0100ee32
mov edi, eax
cmp edi, esi
jge 0x10083e4
cmp edi, 0x8007000e
push 0x10
jne 0x10083d1
push 0x6f
jmp 0x10083d3
mov dword [0x1024cac], eax
jmp 0x1008535
push 0x70
push esi
call fcn.01011e17
mov dword [0x1024cac], edi
jmp 0x1008535
cmp dword [0x1024d78], esi
jne 0x10083f5
push 0x10
push 0x70
jmp 0x1008525
push 0x1024020
mov ecx, 0x1024d20
call fcn.0100d8b6
test eax, eax
jne 0x1008417
mov dword [0x1024cac], 0xd
jmp 0x1008535
push 0xc
mov dword [0x1024c60], ebx
call sub.msvcrt.dll_void____cdecl_operator_new_unsigned_int_
cmp eax, esi
pop ecx
je 0x1008432
mov ecx, eax
call fcn.0100f4b7
jmp 0x1008434
xor eax, eax
cmp eax, esi
mov dword [0x1024228], eax
jne 0x1008456
push 0x10
push 0x6f
push esi
call fcn.01011e17
mov dword [0x1024cac], 0x8007000e
jmp 0x1008535
mov ecx, eax
call fcn.0100449e
test eax, eax
je 0x10083ec
push 0x388
mov dword [ebp - 0x238], esi
mov dword [ebp - 0x230], esi
mov dword [ebp - 0x234], esi
mov dword [ebp - 0x22c], esi
call sub.msvcrt.dll_void____cdecl_operator_new_unsigned_int_
cmp eax, esi
pop ecx
je 0x1008491
mov ecx, eax
call fcn.01013871
jmp 0x1008493
xor eax, eax
cmp eax, esi
mov dword [0x1024c84], eax
je 0x100843d
push esi
push ecx
mov eax, esp
mov dword [ebp - 0x218], esp
push 0x80
push SysReAllocStringLen
push 0x1002048
push ecx
mov dword [eax], esi
mov eax, esp
lea ecx, [ebp - 0x238]
mov dword [ebp - 0x218], esp
mov dword [eax], ecx
mov ecx, dword [0x1024c84]
push esi
call fcn.0100807f
cmp eax, esi
je 0x100852b
cmp dword [0x1024c5c], esi
mov dword [0x1024c68], esi
mov edi, 0x1024e20
jne 0x1008548
push dword [0x1024c58]
mov ecx, edi
mov dword [0x1024e20], 0x10110e5
mov dword [0x1024e24], 0x1024e70
call fcn.0100a11a
cmp eax, 7
je 0x1008521
cmp eax, esi
jne 0x1008540
mov ecx, edi
call fcn.0100a09c
cmp eax, 7
jne 0x100853c
push 0x10
push 0x6f
push esi
call fcn.01011e17
mov dword [0x1024cac], 0x80004005
mov eax, ebx
jmp 0x10086d1
cmp eax, esi
je 0x1008548
mov dword [0x1024c9c], ebx
jmp 0x100855b
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x1024c9c], esi
je 0x1008569
mov ecx, edi
call fcn.0100a0c1
mov ecx, edi
call fcn.0100a016
cmp dword [0x1024c5c], esi
je 0x1008579
cmp dword [0x1024c9c], esi
jne 0x1008589
cmp dword [0x1024d54], 2
jne 0x1008589
mov ecx, edi
call fcn.0100a0c1
mov eax, dword [0x1024c5c]
cmp eax, esi
jne 0x100859a
cmp dword [0x1024c9c], esi
je 0x10085a4
cmp eax, esi
mov dword [0x1024e14], esi
jne 0x10085b2
cmp dword [0x1024d54], esi
jne 0x10085b2
push esi
call fcn.0101161f
lea eax, [ebp - 0x20c]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
mov edi, 0x1024230
push edi
push esi
push 0x1002040
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
push esi
push 2
push 2
push esi
push esi
push 0xc0000000
push edi
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp dword [0x1024d54], esi
mov dword [0x1024ca0], eax
mov dword [0x1024c80], esi
mov dword [0x1024c7c], esi
mov dword [0x1024c78], esi
mov dword [0x1024c74], esi
mov dword [0x1024e10], ebx
jne 0x1008640
cmp dword [0x1024c5c], esi
jne 0x100862b
cmp dword [0x1024c9c], esi
je 0x1008640
mov ecx, dword [0x1024c84]
push 0xd9
push 0x68
add ecx, 0x24
call fcn.010188a0
mov eax, dword [0x1024c84]
push esi
push esi
push 0x4db
push dword [eax + 4]
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, dword [0x1024c8c]
push 5
push dword [eax + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
xor eax, eax
jmp 0x10086d1
lea ecx, [ebp - 0x214]
call fcn.010046b4
lea ecx, [ebp - 0x210]
call fcn.010046b4
push 0x64
lea ecx, [ebp - 0x214]
call fcn.0100485d
push 0x7b
lea ecx, [ebp - 0x210]
call fcn.0100485d
push 0x10
push dword [ebp - 0x214]
push dword [ebp - 0x210]
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [ebp - 0x210]
mov dword [0x1024cac], 0x80004005
call fcn.010045db
lea ecx, [ebp - 0x214]
call fcn.010045db
xor eax, eax
inc eax
mov ecx, dword [ebp - 4]
call fcn.0101d23a
pop edi
pop esi
pop ebx
leave
ret 4