Function at 0x412dbb
Capabilities:
Get common file path
Suspend thread

Disassembly:
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x10]
push ebx
push ebp
push esi
mov esi, dword [esp + 0x18]
mov ebp, ecx
push edi
mov eax, esi
lea edi, [ecx - 0x16db]
mov ecx, dword [esp + 0x24]
xor eax, 0xc6f
mov dword [esp + 0x14], eax
xor ebp, 0xd55
xor eax, 0x8f
add edx, 0xfffffa2a
push eax
xor esi, 0x55
mov dword [esp + 0x24], edx
push esi
push 0x4bc9f0
lea ebx, [ecx - 0x18ea]
xor ecx, 0x18ea
lea eax, [ebp - 0x31c]
add ecx, 0x16db
push eax
lea eax, [edx + 0x1aa]
push eax
push ecx
lea eax, [ebx + 0x1958]
push eax
call fcn.00413916
mov esi, dword [esp + 0x34]
add esp, 0x1c
mov dword [esp + 0x24], eax
cmp dword [esi + 0x70], 0x1980
jae 0x412e52
mov eax, dword [esi + 0x120]
add eax, 0x10fd33
mov dword [esi + 0x5c], eax
jmp 0x412e59
mov dword [esi + 0x5c], 0x25a89
mov eax, dword [0x4a67bc]
cmp dword [eax + 0x98], 0x1091d
je 0x412e74
add dword [esi + 0xf4], 0xffe6b3e7
mov eax, dword [esi + 0xe8]
sub ebp, 0x66a
mov ecx, dword [esp + 0x14]
sub eax, 0xb84c7
mov edx, dword [esp + 0x20]
add dword [esi + 0xf0], 0xab
add edx, 0x65c
mov dword [esi + 0x108], eax
lea eax, [ecx - 0x165]
cmp edx, eax
jl 0x4130a4
mov eax, edx
xor eax, 0x4fe
cmp ebp, eax
jg 0x412f16
mov eax, dword [esi + 0xdc]
xor edi, 0x1872
xor eax, 0x160c54
add dword [0x4bcb08], eax
mov eax, dword [esi + 8]
cmp eax, dword [0x4bca10]
jb 0x412ef1
mov eax, dword [esi + 0x118]
xor eax, 0x1d2176
mov dword [esi + 0xe8], eax
jmp 0x412f02
mov eax, 0x1b4a3
sub eax, dword [0x4bca90]
add dword [esi + 0x10c], eax
mov eax, dword [esi + 0xc4]
add ebp, 0x7f
add eax, 0x825
add dword [esi + 0xf0], eax
lea eax, [edx - 0x257]
cmp edi, eax
jg 0x412ff7
mov eax, dword [esi + 0x110]
add ebx, 0x15ed
add eax, dword [esi + 0x7c]
xor edi, 0x1cf
mov ecx, dword [0x4a67bc]
xor eax, 0x18c59d
sub dword [ecx + 0xf0], eax
mov eax, dword [esp + 0x1c]
xor eax, 0xe00
push eax
push 0x4bc9f0
lea eax, [ebx + 0x2fd]
push eax
mov eax, dword [esp + 0x30]
xor eax, 0xb69
push eax
lea eax, [edx - 0x539]
push eax
push edi
call fcn.00413b8f
mov edx, dword [esi + 0x50]
add esp, 0x18
jmp 0x412fed
mov eax, dword [0x4a67bc]
mov eax, dword [eax + 0x7c]
add eax, dword [0x4bcacc]
xor eax, 0x18c976
add dword [esi + 0x5c], eax
mov ecx, dword [0x4a67bc]
mov eax, dword [esi + 0x120]
sub eax, dword [esi + 8]
add eax, 0x14
xor dword [ecx + 0x110], eax
mov eax, dword [esi + 0x108]
sub eax, 0x8e8bf
add dword [esi + 8], eax
mov eax, edx
mov ecx, dword [0x4a67bc]
imul eax, edx
add dword [ecx + 0xd4], eax
mov eax, dword [esi + 0x44]
xor eax, 0x13ffcb
imul eax, dword [0x4bc9f8]
mov dword [0x4bc9f8], eax
mov eax, dword [esi + 0x1c]
sub eax, 0x12
add dword [esi + 0x108], eax
inc edx
cmp edx, dword [esi + 0x54]
jbe 0x412f7f
jmp 0x4130a4
mov eax, dword [0x4bcacc]
sub edx, dword [esp + 0x1c]
add eax, ecx
push esi
push eax
mov eax, dword [esp + 0x24]
xor eax, 0x18ea
push eax
push edx
lea eax, [ebp + 0x1b3b]
push eax
call fcn.00413d35
add esp, 0x14
call dword [sym.imp.KERNEL32.dll_GetLastError]
lea eax, [edi - 0x15a3]
push eax
mov eax, dword [esp + 0x18]
or eax, 0x1b30
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
lea eax, [ebx + 0x1bb8]
push eax
call dword [sym.imp.KERNEL32.dll_SuspendThread]
mov eax, dword [esi + 0x68]
or ebp, 0x19d7
sub eax, ebx
xor eax, dword [esi + 0xc]
push eax
mov eax, dword [esi + 0x44]
push ebp
xor eax, 0x1926
push eax
call dword [sym.imp.KERNEL32.dll_OpenThread]
mov eax, dword [0x4a67bc]
xor edi, 0x38a
or edi, 0x1c14
mov esi, dword [eax + 0x10c]
jmp 0x4130a0
push 0x262
push 0x1d27
push 0xda0
call fcn.00414313
add esp, 0xc
mov word [0x4bd5c8], ax
add esi, 2
cmp esi, edi
je 0x413080
pop edi
pop esi
xor ebx, 0x4e
pop ebp
mov eax, ebx
pop ebx
ret