Function at 0x40c600
Capabilities:
Set current directory

Disassembly:
push 0xffffffffffffffff
push 0x461aa2
mov eax, dword fs:[0]
push eax
sub esp, 0x138
mov eax, dword [0x486904]
xor eax, esp
mov dword [esp + 0x134], eax
push ebp
push esi
push edi
mov eax, dword [0x486904]
xor eax, esp
push eax
lea eax, [esp + 0x148]
mov dword fs:[0], eax
cmp byte [0x488049], 0
mov edi, dword [esp + 0x158]
mov esi, ecx
je 0x40c687
sub esp, 0xc
mov eax, esp
mov dword [esp + 0x1c], esp
push 7
push eax
mov dword [esi + 0x204], 6
call fcn.0040da50
add esp, 8
mov ecx, 0x493528
call fcn.0041a410
mov ecx, dword [0x493528]
push ecx
mov ecx, 0x493528
mov edi, eax
call fcn.004197d0
mov eax, dword [esi + 0x204]
cmp eax, 6
jne 0x40c74b
sub esp, 0xc
mov edx, esp
mov dword [esp + 0x1c], esp
push edx
mov ecx, edi
call fcn.00424510
call fcn.0040df50
add esp, 0xc
cmp eax, 7
jne 0x40c74b
mov eax, dword [esi + 0x1f4]
mov eax, dword [eax + 0xa14]
push eax
lea ecx, [esp + 0x1c]
push 0x12c
push ecx
call fcn.00446925
lea eax, [esp + 0x24]
add esp, 0xc
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x40c6e0
sub eax, edx
cmp eax, 3
jge 0x40c6ff
mov ecx, 0x493528
call fcn.0041a360
jmp case.default.0x40c88a
cmp eax, 4
jle 0x40c712
cmp byte [esp + eax + 0x17], 0x5c
lea eax, [esp + eax + 0x17]
jne 0x40c712
mov byte [eax], 0
sub esp, 0xc
lea edx, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call fcn.00421590
call fcn.00403e50
add esp, 0xc
lea eax, [esp + 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
test eax, eax
je 0x40c6f0
lea ecx, [esp + 0x18]
push ecx
mov ecx, 0x49351c
call fcn.004216d0
push 1
push 0x3e9
mov ecx, esi
mov byte [esi + 0x180], 1
call fcn.00429a86
mov ecx, eax
call fcn.00429c83
mov eax, dword [esi + 0x204]
add eax, 0xffffffff
cmp eax, 6
ja case.default.0x40c779
jmp dword [eax*4 + 0x40cb0c]
mov ecx, dword [esi + 0x1e4]
call fcn.0041d3f0
jmp case.default.0x40c779
mov ecx, dword [esi + 0x1e8]
call fcn.0041d3f0
jmp case.default.0x40c779
mov ecx, dword [esi + 0x1ec]
call fcn.0041d3f0
jmp case.default.0x40c779
sub esp, 0xc
mov edx, esp
mov dword [esp + 0x1c], esp
push 4
push edx
call fcn.0040da50
add esp, 8
call fcn.00403750
mov ebp, eax
mov eax, esp
mov dword [esp + 0x1c], esp
push eax
mov ecx, edi
call fcn.00424510
call fcn.00403750
add esp, 0xc
cmp eax, ebp
jle 0x40c7f8
mov ecx, dword [esi + 0x1f0]
call fcn.0041da80
test al, al
je 0x40c6f0
mov ecx, dword [esi + 0x1f0]
call fcn.0041d3f0
mov ecx, dword [esi + 0x1f0]
call fcn.0041d1c0
jmp case.default.0x40c779
mov ecx, dword [esi + 0x1f4]
call fcn.0041d3f0
jmp case.default.0x40c779
mov ecx, dword [esi + 0x1f8]
add ecx, 0x188
push ecx
mov ecx, 0x488154
call fcn.004214b0
mov ecx, dword [esi + 0x1f8]
call fcn.0041d3f0
jmp case.default.0x40c779
mov ecx, dword [esi + 0x1fc]
call fcn.0041d3f0
sub esp, 0xc
mov edx, esp
mov dword [esp + 0x1c], esp
push edx
mov ecx, edi
call fcn.00424510
call fcn.0040df50
mov dword [esi + 0x204], eax
mov eax, esp
mov dword [esp + 0x1c], esp
push eax
mov ecx, edi
call fcn.00424510
call fcn.0040df50
sub eax, 1
add esp, 0xc
cmp eax, 6
ja case.default.0x40c88a
jmp dword [eax*4 + 0x40cb28]
mov ecx, dword [esi + 0x1e4]
mov byte [esi + 0x180], 0
call fcn.004010f0
jmp case.default.0x40c88a
sub esp, 0xc
mov ecx, esp
mov dword [esp + 0x1c], esp
push ecx
mov ecx, dword [esi + 0x1e8]
call fcn.00417130
mov ecx, dword [esi + 0x1e8]
sub esp, 0xc
mov edx, esp
mov dword [esp + 0x2c], esp
push edx
mov dword [esp + 0x16c], 0
call fcn.0041d3c0
mov ecx, esi
mov dword [esp + 0x168], 0xffffffff
call fcn.0040c570
cmp byte [0x488045], 0
jne 0x40c90d
push 0
push 0x3e9
mov ecx, esi
call fcn.00429a86
mov ecx, eax
call fcn.00429c83
mov ecx, dword [esi + 0x1e8]
call fcn.0041ca40
jmp case.default.0x40c88a
mov ecx, dword [esi + 0x1ec]
sub esp, 0xc
mov eax, esp
mov dword [esp + 0x20], esp
push eax
call fcn.00417130
sub esp, 0xc
mov ecx, esp
mov dword [esp + 0x28], esp
push ecx
mov ecx, dword [esi + 0x1ec]
mov dword [esp + 0x16c], 1
call fcn.0041d3c0
mov ecx, esi
mov dword [esp + 0x168], 0xffffffff
call fcn.0040c570
mov ecx, dword [esi + 0x1ec]
call fcn.004010f0
jmp case.default.0x40c88a
mov ecx, dword [esi + 0x1f0]
sub esp, 0xc
mov edx, esp
mov dword [esp + 0x20], esp
push edx
call fcn.00417130
mov ecx, dword [esi + 0x1f0]
sub esp, 0xc
mov eax, esp
mov dword [esp + 0x28], esp
push eax
mov dword [esp + 0x16c], 2
call fcn.0041d3c0
mov ecx, esi
mov dword [esp + 0x168], 0xffffffff
call fcn.0040c570
mov ecx, dword [esi + 0x1f0]
call fcn.004010f0
jmp case.default.0x40c88a
sub esp, 0xc
mov ecx, esp
mov dword [esp + 0x20], esp
push ecx
mov ecx, dword [esi + 0x1f4]
call fcn.00417130
mov ecx, dword [esi + 0x1f4]
sub esp, 0xc
mov edx, esp
mov dword [esp + 0x28], esp
push edx
mov dword [esp + 0x16c], 3
call fcn.0041d3c0
mov ecx, esi
mov dword [esp + 0x168], 0xffffffff
call fcn.0040c570
mov ecx, dword [esi + 0x1f4]
call fcn.004010f0
jmp case.default.0x40c88a
mov ecx, dword [esi + 0x1f8]
sub esp, 0xc
mov eax, esp
mov dword [esp + 0x20], esp
push eax
call fcn.00417130
sub esp, 0xc
mov ecx, esp
mov dword [esp + 0x28], esp
push ecx
mov ecx, dword [esi + 0x1f8]
mov dword [esp + 0x16c], 4
call fcn.0041d3c0
mov ecx, esi
mov dword [esp + 0x168], 0xffffffff
call fcn.0040c570
mov ecx, dword [esi + 0x1f8]
call fcn.004010f0
jmp case.default.0x40c88a
mov ecx, dword [esi + 0x1fc]
sub esp, 0xc
mov edx, esp
mov dword [esp + 0x20], esp
push edx
call fcn.00417130
mov ecx, dword [esi + 0x1fc]
sub esp, 0xc
mov eax, esp
mov dword [esp + 0x28], esp
push eax
mov dword [esp + 0x16c], 5
call fcn.0041d3c0
mov ecx, esi
mov dword [esp + 0x168], 0xffffffff
call fcn.0040c570
push 0
lea ecx, [esi + 0x11c]
call fcn.00429c83
push 0
lea ecx, [esi + 0xc8]
call fcn.00429c83
mov ecx, dword [esi + 0x1fc]
call fcn.004192b0
mov ecx, dword [esp + 0x148]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0x134]
xor ecx, esp
call fcn.00445fb9
add esp, 0x144
ret 4