Function at 0x40d3e0
Capabilities:
Set current directory

Disassembly:
push 0xffffffffffffffff
push 0x466c82
mov eax, dword fs:[0]
push eax
sub esp, 0x138
mov eax, dword [0x48bb84]
xor eax, esp
mov dword [esp + 0x134], eax
push ebp
push esi
push edi
mov eax, dword [0x48bb84]
xor eax, esp
push eax
lea eax, [esp + 0x148]
mov dword fs:[0], eax
cmp byte [0x48d269], 0
mov edi, dword [esp + 0x158]
mov esi, ecx
je 0x40d467
sub esp, 0xc
mov eax, esp
mov dword [esp + 0x1c], esp
push 7
push eax
mov dword [esi + 0x2ac], 6
call fcn.0040eca0
add esp, 8
mov ecx, 0x48e748
call fcn.0041bdf0
mov ecx, dword [0x48e748]
push ecx
mov ecx, 0x48e748
mov edi, eax
call fcn.0041b530
mov eax, dword [esi + 0x2ac]
cmp eax, 6
jne 0x40d529
sub esp, 0xc
mov edx, esp
mov dword [esp + 0x1c], esp
push edx
mov ecx, edi
call fcn.00429080
call fcn.0040f1a0
add esp, 0xc
cmp eax, 7
jne 0x40d529
mov eax, dword [esi + 0x29c]
mov eax, dword [eax + 0xa14]
push eax
lea ecx, [esp + 0x1c]
push 0x12c
push ecx
call fcn.0044bd9e
lea eax, [esp + 0x24]
add esp, 0xc
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x40d4c0
sub eax, edx
cmp eax, 3
jge 0x40d4dd
mov ecx, 0x48e748
call fcn.0041b5f0
jmp case.default.0x40d664
cmp eax, 4
jle 0x40d4f0
cmp byte [esp + eax + 0x17], 0x5c
lea eax, [esp + eax + 0x17]
jne 0x40d4f0
mov byte [eax], 0
sub esp, 0xc
lea edx, [esp + 0x24]
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call fcn.00425490
call fcn.004045d0
add esp, 0xc
lea eax, [esp + 0x18]
push eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
test eax, eax
je 0x40d4ce
lea ecx, [esp + 0x18]
push ecx
mov ecx, 0x48e73c
call fcn.004255d0
push 1
push 0x3e9
mov ecx, esi
mov byte [esi + 0x228], 1
call fcn.004343d4
mov ecx, eax
call fcn.004345f8
mov eax, dword [esi + 0x2ac]
dec eax
cmp eax, 6
ja case.default.0x40d555
jmp dword [eax*4 + 0x40d8e8]
mov ecx, dword [esi + 0x28c]
call fcn.0042cf20
jmp case.default.0x40d555
mov ecx, dword [esi + 0x290]
call fcn.004201a0
jmp case.default.0x40d555
mov ecx, dword [esi + 0x294]
call fcn.004244e0
jmp case.default.0x40d555
sub esp, 0xc
mov edx, esp
mov dword [esp + 0x1c], esp
push 4
push edx
call fcn.0040eca0
add esp, 8
call fcn.00403bd0
mov ebp, eax
mov eax, esp
mov dword [esp + 0x1c], esp
push eax
mov ecx, edi
call fcn.00429080
call fcn.00403bd0
add esp, 0xc
cmp eax, ebp
jle 0x40d5d4
mov ecx, dword [esi + 0x298]
call fcn.00420c20
test al, al
je 0x40d4ce
mov ecx, dword [esi + 0x298]
call fcn.00421530
mov ecx, dword [esi + 0x298]
call fcn.004208c0
jmp case.default.0x40d555
mov ecx, dword [esi + 0x29c]
call fcn.00401e00
jmp case.default.0x40d555
mov ecx, dword [esi + 0x2a0]
add ecx, 0x188
push ecx
mov ecx, 0x48d374
call fcn.00425580
mov ecx, dword [esi + 0x2a0]
call fcn.004238c0
jmp case.default.0x40d555
mov ecx, dword [esi + 0x2a4]
call fcn.0041b0e0
sub esp, 0xc
mov edx, esp
mov dword [esp + 0x1c], esp
push edx
mov ecx, edi
call fcn.00429080
call fcn.0040f1a0
mov dword [esi + 0x2ac], eax
mov eax, esp
mov dword [esp + 0x1c], esp
push eax
mov ecx, edi
call fcn.00429080
call fcn.0040f1a0
dec eax
add esp, 0xc
cmp eax, 6
ja case.default.0x40d664
jmp dword [eax*4 + 0x40d904]
mov ecx, dword [esi + 0x28c]
mov byte [esi + 0x228], 0
call fcn.0042cf10
jmp case.default.0x40d664
sub esp, 0xc
mov ecx, esp
mov dword [esp + 0x1c], esp
push ecx
mov ecx, dword [esi + 0x290]
call fcn.0041fd70
mov ecx, dword [esi + 0x290]
sub esp, 0xc
mov edx, esp
mov dword [esp + 0x2c], esp
push edx
mov dword [esp + 0x16c], 0
call fcn.0041fd40
mov ecx, esi
mov dword [esp + 0x168], 0xffffffff
call fcn.0040d350
cmp byte [0x48d265], 0
jne 0x40d6e7
push 0
push 0x3e9
mov ecx, esi
call fcn.004343d4
mov ecx, eax
call fcn.004345f8
mov ecx, dword [esi + 0x290]
call fcn.00420160
jmp case.default.0x40d664
mov ecx, dword [esi + 0x294]
sub esp, 0xc
mov eax, esp
mov dword [esp + 0x20], esp
push eax
call fcn.00424150
sub esp, 0xc
mov ecx, esp
mov dword [esp + 0x28], esp
push ecx
mov ecx, dword [esi + 0x294]
mov dword [esp + 0x16c], 1
call fcn.00424120
mov ecx, esi
mov dword [esp + 0x168], 0xffffffff
call fcn.0040d350
mov ecx, dword [esi + 0x294]
call fcn.004244d0
jmp case.default.0x40d664
mov ecx, dword [esi + 0x298]
sub esp, 0xc
mov edx, esp
mov dword [esp + 0x20], esp
push edx
call fcn.00420af0
mov ecx, dword [esi + 0x298]
sub esp, 0xc
mov eax, esp
mov dword [esp + 0x28], esp
push eax
mov dword [esp + 0x16c], 2
call fcn.00420ac0
mov ecx, esi
mov dword [esp + 0x168], 0xffffffff
call fcn.0040d350
mov ecx, dword [esi + 0x298]
call fcn.00421520
jmp case.default.0x40d664
sub esp, 0xc
mov ecx, esp
mov dword [esp + 0x20], esp
push ecx
mov ecx, dword [esi + 0x29c]
call fcn.00401cf0
mov ecx, dword [esi + 0x29c]
sub esp, 0xc
mov edx, esp
mov dword [esp + 0x28], esp
push edx
mov dword [esp + 0x16c], 3
call fcn.00401cc0
mov ecx, esi
mov dword [esp + 0x168], 0xffffffff
call fcn.0040d350
mov ecx, dword [esi + 0x29c]
call fcn.00401df0
jmp case.default.0x40d664
mov ecx, dword [esi + 0x2a0]
sub esp, 0xc
mov eax, esp
mov dword [esp + 0x20], esp
push eax
call fcn.004237b0
sub esp, 0xc
mov ecx, esp
mov dword [esp + 0x28], esp
push ecx
mov ecx, dword [esi + 0x2a0]
mov dword [esp + 0x16c], 4
call fcn.00423780
mov ecx, esi
mov dword [esp + 0x168], 0xffffffff
call fcn.0040d350
mov ecx, dword [esi + 0x2a0]
call fcn.004238b0
jmp case.default.0x40d664
mov ecx, dword [esi + 0x2a4]
sub esp, 0xc
mov edx, esp
mov dword [esp + 0x20], esp
push edx
call fcn.0041af70
mov ecx, dword [esi + 0x2a4]
sub esp, 0xc
mov eax, esp
mov dword [esp + 0x28], esp
push eax
mov dword [esp + 0x16c], 5
call fcn.0041af40
mov ecx, esi
mov dword [esp + 0x168], 0xffffffff
call fcn.0040d350
push 0
lea ecx, [esi + 0x18c]
call fcn.004345f8
push 0
lea ecx, [esi + 0x100]
call fcn.004345f8
mov ecx, dword [esi + 0x2a4]
call fcn.0041b070
mov ecx, dword [esp + 0x148]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0x134]
xor ecx, esp
call fcn.0044b758
add esp, 0x144
ret 4