Function at 0x41f6b0
Capabilities:
Get graphical window text
Query environment variable

Disassembly:
mov eax, 0x3cd4
call fcn.004d3780
mov dx, word [0x4ffec0]
push ebx
push ebp
push esi
push edi
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x85e]
mov word [esp + 0x85c], dx
mov word [esp + 0x3c], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x3e]
push 0x104
rep stosd dword es:[edi], eax
mov ecx, dword [0x6dcf80]
stosw word es:[edi], ax
lea eax, [esp + 0x860]
push eax
push 0xf
push ecx
call dword [sym.imp.USER32.dll_LoadStringW]
mov esi, dword [esp + 0x3cec]
mov ebx, dword [esp + 0x3ce8]
mov ecx, 0x412
xor eax, eax
lea ebp, [esi + 4]
push 0x824
mov edi, ebp
push ebp
rep stosd dword es:[edi], eax
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x406
push ebx
call edi
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
lea edx, [esp + 0x189c]
push 0
push edx
push ebp
call fcn.004a2450
add esp, 0xc
test eax, eax
jne 0x41f7ab
mov ecx, dword [0x6dcf80]
lea eax, [esp + 0x3c]
push 0x104
push eax
push 0x11e
push ecx
call dword [sym.imp.USER32.dll_LoadStringW]
lea edx, [esp + 0x85c]
push 0x40
lea eax, [esp + 0x40]
push edx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0x406
push ebx
call edi
push eax
call dword [sym.imp.USER32.dll_SetFocus]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x3cd4
ret
lea ebp, [esi + 0x2094]
push 0x104
mov ecx, 0x82
xor eax, eax
mov edi, ebp
push ebp
push 0x408
push ebx
rep stosd dword es:[edi], eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
push ebp
call dword [sym.imp.MSVCRT.dll_wcslen]
add esp, 4
test eax, eax
jle 0x41f7fa
mov ecx, 0x5c
cmp word [esi + eax*2 + 0x2092], cx
je 0x41f7fa
mov word [esi + eax*2 + 0x2094], cx
mov cx, word [0x4ffec0]
xor eax, eax
mov word [esp + 0x44c], cx
mov ecx, 0x81
lea edi, [esp + 0x44e]
lea edx, [esp + 0x44c]
rep stosd dword es:[edi], eax
push 0x104
push edx
push ebp
stosw word es:[edi], ax
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
mov edi, dword [sym.imp.MSVCRT.dll_wcslen]
lea eax, [esp + 0x44c]
push eax
call edi
add esp, 4
cmp eax, 0x103
jbe 0x41f850
mov eax, 0x103
jmp 0x41f85d
lea ecx, [esp + 0x44c]
push ecx
call edi
add esp, 4
lea edx, [esp + 0x44c]
push eax
push edx
push ebp
call dword [sym.imp.MSVCRT.dll_wcsncpy]
mov dx, word [0x4ffec0]
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x149a]
mov word [esp + 0x1498], dx
mov word [esp + 0x660], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x662]
push 0
rep stosd dword es:[edi], eax
mov ecx, dword [0x6dcf84]
push 0x104
stosw word es:[edi], ax
lea eax, [esp + 0x14a0]
push eax
push ecx
call fcn.004a7ac0
add esp, 0x1c
lea edx, [esp + 0x148c]
lea eax, [esp + 0x654]
push ebp
push edx
push eax
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea ecx, [esp + 0x654]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathGetDriveNumberW]
cmp eax, 0xffffffff
je 0x41ff9c
lea edx, [esp + 0x654]
push edx
call fcn.004a7f30
add esp, 4
test eax, eax
je 0x41ff9c
lea eax, [esp + 0x654]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
je 0x41ff9c
mov cx, word [0x4ffec0]
xor eax, eax
mov word [esp + 0xa64], cx
mov ecx, 0x81
lea edi, [esp + 0xa66]
lea ebp, [esi + 0x229c]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov edi, dword [sym.imp.MSVCRT.dll_wcslen]
push ebp
call edi
add esp, 4
cmp eax, 0x103
jbe 0x41f963
mov eax, 0x103
jmp 0x41f969
push ebp
call edi
add esp, 4
push eax
lea edx, [esp + 0xa68]
push ebp
push edx
call dword [sym.imp.MSVCRT.dll_wcsncpy]
add esp, 0xc
mov ecx, 0x82
xor eax, eax
mov edi, ebp
push 0x104
push ebp
rep stosd dword es:[edi], eax
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x409
push ebx
call edi
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
push ebp
call dword [sym.imp.MSVCRT.dll_wcslen]
add esp, 4
test eax, eax
jne 0x41f9fe
mov ecx, dword [0x6dcf80]
lea eax, [esp + 0x3c]
push 0x104
push eax
push 0x120
push ecx
call dword [sym.imp.USER32.dll_LoadStringW]
lea edx, [esp + 0x85c]
push 0x40
lea eax, [esp + 0x40]
push edx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0x409
push ebx
call edi
push eax
call dword [sym.imp.USER32.dll_SetFocus]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x3cd4
ret
mov eax, dword [esi + 0x2cd0]
test eax, eax
je 0x41fabd
mov cx, word [0x4ffec0]
xor eax, eax
mov word [esp + 0x244], cx
mov ecx, 0x81
lea edi, [esp + 0x246]
push ebp
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
call dword [sym.imp.SHLWAPI.dll_PathFindExtensionW]
add eax, 2
je 0x41fabd
lea edx, [esp + 0x244]
push 0
push edx
push eax
lea eax, [esi + 4]
push 0
push eax
call dword [sym.imp.WININET.dll_CreateUrlCacheEntryW]
test eax, eax
je 0x41fabd
lea eax, [esp + 0x244]
push 0x5c
push eax
call dword [sym.imp.MSVCRT.dll_wcsrchr]
add esp, 8
mov dword [esp + 0x10], eax
test eax, eax
je 0x41fabd
lea edx, [esi + 0x2094]
mov word [eax], 0
mov ecx, 0x82
xor eax, eax
mov edi, edx
rep stosd dword es:[edi], eax
mov ecx, 0x82
mov edi, ebp
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x244]
push ecx
push 0x4ecd64
push 0x103
push edx
call dword [sym.imp.MSVCRT.dll__snwprintf]
mov edx, dword [esp + 0x20]
add edx, 2
push edx
push ebp
call dword [sym.imp.MSVCRT.dll_wcscpy]
add esp, 0x18
mov eax, dword [esi + 0x2f08]
test eax, eax
je 0x41faeb
mov eax, dword [esi + 0x2cd0]
test eax, eax
jne 0x41faeb
push 0x103
lea eax, [esi + 0x2094]
push ebp
push eax
call fcn.00422b50
add esp, 0xc
jmp 0x41fcf7
lea eax, [esp + 0xa64]
push eax
push ebp
call dword [sym.imp.MSVCRT.dll__wcsicmp]
add esp, 8
test eax, eax
je 0x41fcf7
mov eax, dword [esi + 0x2cd0]
test eax, eax
jne 0x41fcf7
push 0x103
lea eax, [esi + 0x2094]
push ebp
push eax
call fcn.00422b50
mov dx, word [0x4ffec0]
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x252]
mov word [esp + 0x250], dx
mov word [esp + 0x1290], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x1292]
mov word [esp + 0xe80], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xe82]
mov word [esp + 0x16a0], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x16a2]
add esp, 0xc
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [esp + 0xa64]
lea edi, [esi + 0x2094]
push ecx
lea edx, [esp + 0x248]
push edi
push edx
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [esp + 0x244]
push 0x4eca94
push eax
push str._s._s
lea ecx, [esp + 0x1290]
push 0x103
push ecx
call dword [sym.imp.MSVCRT.dll__snwprintf]
add esp, 0x14
lea edx, [esp + 0xe74]
push ebp
push edi
push edx
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
lea eax, [esp + 0xe74]
push 0x4eca94
push eax
push str._s._s
lea ecx, [esp + 0x16a0]
push 0x103
push ecx
call dword [sym.imp.MSVCRT.dll__snwprintf]
lea edx, [esp + 0x258]
push 0
push edx
call fcn.004a7ab0
add esp, 0x1c
test eax, eax
je 0x41fc41
lea eax, [esp + 0xe74]
push 0
lea ecx, [esp + 0x248]
push eax
push ecx
call fcn.004b10c0
add esp, 0xc
lea edx, [esp + 0x1284]
push 0
push edx
call fcn.004a7ab0
add esp, 8
test eax, eax
je 0x41fc71
lea eax, [esp + 0x1694]
push 0
lea ecx, [esp + 0x1288]
push eax
push ecx
call fcn.004b10c0
add esp, 0xc
mov ecx, dword [esi + 0x2ef8]
mov eax, dword [esi + 0x2ef0]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
lea edx, [esp + 0x14]
mov dword [esp + 0x1c], 1
mov dword [esp + 0x28], ebp
push edx
mov edx, dword [ecx + 0x6dc]
push eax
push 0x1074
push edx
call edi
mov ecx, dword [esi + 0x2ef8]
mov eax, dword [esi + 0x2ef0]
push 0
push eax
mov edx, dword [ecx + 0x6dc]
push 0x102a
push edx
call edi
mov eax, dword [esi + 0x2ef8]
mov edx, dword [esi + 0x2ef0]
mov ecx, dword [eax + 0x878]
cmp ecx, edx
jne 0x41fcf7
lea edx, [esp + 0x14]
mov dword [esp + 0x1c], 1
mov dword [esp + 0x28], ebp
mov eax, dword [eax + 0x78c]
push edx
push 2
push 0x1074
push eax
call edi
mov ebp, dword [sym.imp.USER32.dll_GetDlgItem]
lea edx, [esi + 0x104c]
push 0x824
mov ecx, 0x412
xor eax, eax
mov edi, edx
push edx
push 0x407
rep stosd dword es:[edi], eax
push ebx
call ebp
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
lea edx, [esi + 0x26ac]
push 0x104
mov ecx, 0x82
xor eax, eax
mov edi, edx
push edx
push 0x413
push ebx
rep stosd dword es:[edi], eax
call ebp
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
lea edx, [esi + 0x2cd4]
push 0x80
mov ecx, 0x40
xor eax, eax
mov edi, edx
push edx
push 0x40e
push ebx
rep stosd dword es:[edi], eax
call ebp
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
lea edx, [esi + 0x2dd4]
push 0x80
mov ecx, 0x40
xor eax, eax
mov edi, edx
push edx
push 0x40f
push ebx
rep stosd dword es:[edi], eax
call ebp
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
mov edi, dword [sym.imp.USER32.dll_IsDlgButtonChecked]
push 0x3f6
push ebx
call edi
dec eax
push 0x41e
neg eax
sbb eax, eax
push ebx
inc eax
mov dword [esi + 0x2cc4], eax
call edi
dec eax
mov ecx, 0x82
neg eax
sbb eax, eax
lea edi, [esp + 0x3c]
inc eax
push 0x104
mov dword [esi + 0x2ccc], eax
xor eax, eax
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x40]
push ecx
push 0x410
push ebx
call ebp
mov edi, dword [sym.imp.USER32.dll_GetWindowTextW]
push eax
call edi
lea edx, [esp + 0x3c]
push edx
call dword [sym.imp.MSVCRT.dll__wtoi]
add esp, 4
mov dword [esi + 0x2eec], eax
test eax, eax
ja 0x41fe0d
mov dword [esi + 0x2eec], 5
mov ecx, dword [esi + 0x2eec]
mov eax, 0xa
cmp ecx, eax
jbe 0x41fe22
mov dword [esi + 0x2eec], eax
push 0x408
push ebx
call ebp
mov ebp, eax
lea eax, [esp + 0x3c]
push 0x104
push eax
push ebp
call edi
lea ecx, [esp + 0x3c]
push ecx
call dword [sym.imp.MSVCRT.dll_wcslen]
add esp, 4
test eax, eax
jbe 0x41fe92
cmp word [esp + eax*2 + 0x3a], 0x5c
lea eax, [esp + eax*2 + 0x3c]
je 0x41fe5c
mov word [eax], 0x5c
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
lea edx, [esp + 0x3c]
push edx
push 0xffffffffffffffff
push 0x158
push ebp
call esi
cmp eax, 0xffffffff
je 0x41fe81
push 0
push eax
push 0x144
push ebp
call esi
lea eax, [esp + 0x3c]
push eax
push 0
push 0x14a
push ebp
call esi
jmp 0x41fe98
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x146
push ebp
call esi
mov dword [esp + 0x10], eax
dec eax
push reloc.DSOUND.dll_DirectSoundCreate
push eax
push str.PathCount
push str.Download
call fcn.004ae2c0
mov dx, word [0x4ffec0]
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0x108e]
mov word [esp + 0x108c], dx
mov word [esp + 0xc7c], dx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, 0x81
xor eax, eax
lea edi, [esp + 0xc7e]
add esp, 0x10
rep stosd dword es:[edi], eax
mov ecx, dword [esp + 0x10]
xor esi, esi
stosw word es:[edi], ax
lea eax, [ecx - 1]
test eax, eax
mov dword [esp + 0x10], eax
jle 0x41ff86
mov ecx, 0x82
xor eax, eax
lea edi, [esp + 0x107c]
lea edx, [esp + 0x107c]
rep stosd dword es:[edi], eax
push edx
mov ecx, 0x82
lea edi, [esp + 0xc70]
push esi
push 0x148
push ebp
rep stosd dword es:[edi], eax
call dword [sym.imp.USER32.dll_SendMessageW]
push esi
push str.Path_d
lea eax, [esp + 0xc74]
push 0x103
push eax
call dword [sym.imp.MSVCRT.dll__snwprintf]
push reloc.DSOUND.dll_DirectSoundCreate
lea ecx, [esp + 0x1090]
push 0xffffffffffffffff
lea edx, [esp + 0xc84]
push ecx
push edx
push str.Download
call fcn.004adf80
mov eax, dword [esp + 0x34]
add esp, 0x24
inc esi
cmp esi, eax
jl 0x41ff0d
push 1
push ebx
call dword [sym.imp.USER32.dll_EndDialog]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x3cd4
ret
mov ecx, dword [0x6dcf80]
lea eax, [esp + 0x3c]
push 0x104
push eax
push 0x11f
push ecx
call dword [sym.imp.USER32.dll_LoadStringW]
lea edx, [esp + 0x85c]
push 0x40
lea eax, [esp + 0x40]
push edx
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0x408
push ebx
call dword [sym.imp.USER32.dll_GetDlgItem]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x3cd4
ret