Function at 0x414322
Capabilities:
Create process on windows
Get file size

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x394
push ebx
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push dword [ebp + 8]
lea eax, [ebp - 0x394]
push eax
call edi
mov ebx, str.Video
lea eax, [ebp - 0x394]
push ebx
push eax
call fcn.0043312f
test eax, eax
je 0x41440f
lea eax, [ebp - 0x394]
push eax
lea eax, [ebp - 0x394]
push eax
call fcn.00433d9c
lea eax, [ebp - 0x28c]
push str.SCPLAYER.EXE
push eax
mov dword [ebp + 8], 1
call edi
lea eax, [ebp - 0x28c]
push ebx
push eax
call fcn.0043312f
xor esi, esi
test eax, eax
je 0x4143f0
lea eax, [ebp - 0x28c]
push esi
push eax
call fcn.004335d8
mov edi, eax
cmp edi, 0xffffffff
je 0x41440f
lea eax, [ebp - 0x14]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
push edi
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp ebx, 0x87832
jne 0x4143c8
mov dword [ebp + 8], esi
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0x28c]
push eax
call fcn.00433d9c
cmp dword [ebp + 8], esi
je 0x414533
cmp dword [ebp + 0x18], esi
je 0x414417
push str.__SC
jmp 0x41441c
lea eax, [ebp - 0x28c]
push str.SCPLAY31.EXE
push eax
call edi
lea eax, [ebp - 0x28c]
push ebx
push eax
call fcn.0043312f
test eax, eax
jne 0x4143c8
xor ax, ax
jmp 0x414656
push str.__SCH
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [ebp - 0x28c]
push eax
call edi
cmp dword [ebp + 0x20], esi
je 0x41443e
lea eax, [ebp - 0x28c]
push str.__R
push eax
call edi
test byte [ebp + 0x11], 8
jne 0x414469
push dword [ebp + 0x14]
lea eax, [ebp - 0x80]
push dword [ebp + 0x10]
push str.__V_i__i
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x28c]
push eax
call edi
lea eax, [ebp - 0x394]
push eax
lea eax, [ebp - 0x28c]
push eax
call edi
push 0x44
lea eax, [ebp - 0x58]
pop edi
push edi
push esi
push eax
call fcn.0044bf00
add esp, 0xc
lea eax, [ebp - 0x10]
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x2c], 0x41
push eax
lea eax, [ebp - 0x58]
push eax
push esi
push esi
push esi
push esi
push esi
lea eax, [ebp - 0x28c]
push esi
push eax
push esi
mov word [ebp - 0x28], 0xa
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x414652
push 0xffffffffffffffff
push dword [ebp - 0x10]
call dword [sym.imp.USER32.dll_WaitForInputIdle]
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov ebx, eax
add ebx, 0x1388
call edi
cmp eax, ebx
jae 0x4144f9
push esi
push str.CSCPlaybackView
call dword [sym.imp.USER32.dll_FindWindowA]
test eax, eax
jne 0x4144f9
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4144d9
push esi
push str.CSCPlaybackView
call dword [sym.imp.USER32.dll_FindWindowA]
mov edi, eax
cmp edi, esi
je 0x414634
push edi
call dword [sym.imp.USER32.dll_UpdateWindow]
cmp dword [ebp + 0x1c], esi
jne 0x414634
push 3
push esi
push esi
push esi
push esi
push 0xffffffffffffffff
push edi
call dword [sym.imp.USER32.dll_SetWindowPos]
jmp 0x414634
cmp dword [ebp + 0x18], esi
je 0x41453f
push str.__SC_
jmp 0x414544
push str.__SCH_
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [ebp - 0x28c]
push eax
call edi
cmp dword [ebp + 0x20], esi
je 0x414566
lea eax, [ebp - 0x28c]
push str.__R
push eax
call edi
lea eax, [ebp - 0x394]
push eax
lea eax, [ebp - 0x28c]
push eax
call edi
push 0x44
lea eax, [ebp - 0x58]
pop edi
push edi
push esi
push eax
call fcn.0044bf00
add esp, 0xc
lea eax, [ebp - 0x10]
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x2c], 0x41
push eax
lea eax, [ebp - 0x58]
push eax
push esi
push esi
push esi
push esi
push esi
lea eax, [ebp - 0x28c]
push esi
push eax
push esi
mov word [ebp - 0x28], 0xa
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x414652
push 0xffffffffffffffff
push dword [ebp - 0x10]
call dword [sym.imp.USER32.dll_WaitForInputIdle]
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov ebx, eax
add ebx, 0x1388
call edi
cmp eax, ebx
jae 0x4145f6
push esi
push str.PlayBack
call dword [sym.imp.USER32.dll_FindWindowA]
test eax, eax
jne 0x4145f6
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x4145d6
push esi
push str.PlayBack
call dword [sym.imp.USER32.dll_FindWindowA]
mov edi, eax
cmp edi, esi
je 0x414634
cmp dword [ebp + 0x1c], esi
jne 0x41461b
push 1
push esi
push esi
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push 0xffffffffffffffff
jmp 0x414626
push 5
push esi
push esi
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push esi
push edi
call dword [sym.imp.USER32.dll_SetWindowPos]
push edi
call dword [sym.imp.USER32.dll_UpdateWindow]
push dword [ebp - 0x10]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
push dword [ebp - 0xc]
call edi
cmp dword [ebp + 0xc], esi
je 0x414652
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_SetFocus]
mov ax, 1
pop edi
pop esi
pop ebx
leave
ret 0x1c