Function at 0x41b222
Capabilities:
Create process on windows
Get file size

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x394
push ebx
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
push dword [ebp + 8]
lea eax, [ebp - 0x394]
push eax
call edi
mov ebx, str.Video
lea eax, [ebp - 0x394]
push ebx
push eax
call fcn.00409cbb
test eax, eax
je 0x41b30f
lea eax, [ebp - 0x394]
push eax
lea eax, [ebp - 0x394]
push eax
call fcn.004095c0
lea eax, [ebp - 0x28c]
push str.SCPLAYER.EXE
push eax
mov dword [ebp + 8], 1
call edi
lea eax, [ebp - 0x28c]
push ebx
push eax
call fcn.00409cbb
xor esi, esi
test eax, eax
je 0x41b2f0
lea eax, [ebp - 0x28c]
push esi
push eax
call fcn.0040a1a8
mov edi, eax
cmp edi, 0xffffffff
je 0x41b30f
lea eax, [ebp - 0x14]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
push edi
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp ebx, 0x87832
jne 0x41b2c8
mov dword [ebp + 8], esi
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0x28c]
push eax
call fcn.004095c0
cmp dword [ebp + 8], esi
je 0x41b433
cmp dword [ebp + 0x18], esi
je 0x41b317
push str.__SC
jmp 0x41b31c
lea eax, [ebp - 0x28c]
push str.SCPLAY31.EXE
push eax
call edi
lea eax, [ebp - 0x28c]
push ebx
push eax
call fcn.00409cbb
test eax, eax
jne 0x41b2c8
xor ax, ax
jmp 0x41b556
push str.__SCH
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [ebp - 0x28c]
push eax
call edi
cmp dword [ebp + 0x20], esi
je 0x41b33e
lea eax, [ebp - 0x28c]
push str.__R
push eax
call edi
test byte [ebp + 0x11], 8
jne 0x41b369
push dword [ebp + 0x14]
lea eax, [ebp - 0x80]
push dword [ebp + 0x10]
push str.__V_i__i
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x28c]
push eax
call edi
lea eax, [ebp - 0x394]
push eax
lea eax, [ebp - 0x28c]
push eax
call edi
push 0x44
lea eax, [ebp - 0x58]
pop edi
push edi
push esi
push eax
call fcn.004447a0
add esp, 0xc
lea eax, [ebp - 0x10]
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x2c], 0x41
push eax
lea eax, [ebp - 0x58]
push eax
push esi
push esi
push esi
push esi
push esi
lea eax, [ebp - 0x28c]
push esi
push eax
push esi
mov word [ebp - 0x28], 0xa
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x41b552
push 0xffffffffffffffff
push dword [ebp - 0x10]
call dword [sym.imp.USER32.dll_WaitForInputIdle]
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov ebx, eax
add ebx, 0x1388
call edi
cmp eax, ebx
jae 0x41b3f9
push esi
push str.CSCPlaybackView
call dword [sym.imp.USER32.dll_FindWindowA]
test eax, eax
jne 0x41b3f9
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x41b3d9
push esi
push str.CSCPlaybackView
call dword [sym.imp.USER32.dll_FindWindowA]
mov edi, eax
cmp edi, esi
je 0x41b534
push edi
call dword [sym.imp.USER32.dll_UpdateWindow]
cmp dword [ebp + 0x1c], esi
jne 0x41b534
push 3
push esi
push esi
push esi
push esi
push 0xffffffffffffffff
push edi
call dword [sym.imp.USER32.dll_SetWindowPos]
jmp 0x41b534
cmp dword [ebp + 0x18], esi
je 0x41b43f
push str.__SC_
jmp 0x41b444
push str.__SCH_
mov edi, dword [sym.imp.KERNEL32.dll_lstrcatA]
lea eax, [ebp - 0x28c]
push eax
call edi
cmp dword [ebp + 0x20], esi
je 0x41b466
lea eax, [ebp - 0x28c]
push str.__R
push eax
call edi
lea eax, [ebp - 0x394]
push eax
lea eax, [ebp - 0x28c]
push eax
call edi
push 0x44
lea eax, [ebp - 0x58]
pop edi
push edi
push esi
push eax
call fcn.004447a0
add esp, 0xc
lea eax, [ebp - 0x10]
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x2c], 0x41
push eax
lea eax, [ebp - 0x58]
push eax
push esi
push esi
push esi
push esi
push esi
lea eax, [ebp - 0x28c]
push esi
push eax
push esi
mov word [ebp - 0x28], 0xa
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x41b552
push 0xffffffffffffffff
push dword [ebp - 0x10]
call dword [sym.imp.USER32.dll_WaitForInputIdle]
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
mov ebx, eax
add ebx, 0x1388
call edi
cmp eax, ebx
jae 0x41b4f6
push esi
push str.PlayBack
call dword [sym.imp.USER32.dll_FindWindowA]
test eax, eax
jne 0x41b4f6
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x41b4d6
push esi
push str.PlayBack
call dword [sym.imp.USER32.dll_FindWindowA]
mov edi, eax
cmp edi, esi
je 0x41b534
cmp dword [ebp + 0x1c], esi
jne 0x41b51b
push 1
push esi
push esi
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push 0xffffffffffffffff
jmp 0x41b526
push 5
push esi
push esi
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push esi
push edi
call dword [sym.imp.USER32.dll_SetWindowPos]
push edi
call dword [sym.imp.USER32.dll_UpdateWindow]
push dword [ebp - 0x10]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
push dword [ebp - 0xc]
call edi
cmp dword [ebp + 0xc], esi
je 0x41b552
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_SetFocus]
mov ax, 1
pop edi
pop esi
pop ebx
leave
ret 0x1c