Function at 0x451e5e
Capabilities:
Get common file path

Disassembly:
push 0x254
mov eax, 0x457c58
call fcn.00452711
xor edi, edi
mov dword [ebp - 0x25c], ecx
cmp ecx, edi
jne 0x451ea2
mov dword [0x47f300], edi
cmp word [0x47f0f8], di
je 0x451e92
push 0x47f0f8
call fcn.00440901
xor eax, eax
mov word [0x47f0f8], ax
xor eax, eax
call fcn.00452794
ret
mov eax, dword [0x47f300]
cmp eax, edi
je 0x452020
mov dword [ecx], eax
mov ecx, dword [eax]
push eax
call dword [ecx + reloc.winhttp.dll_WinHttpQueryHeaders]
fld qword [0x476998]
fst qword [ebp - 0x260]
fld qword [ebp - 0x260]
fld qword [ebp - 0x260]
fmul qword [0x476988]
fsubp st(1)
fsub qword [ebp - 0x260]
fadd qword [ebp - 0x260]
fstp qword [ebp - 0x260]
fld qword [ebp - 0x260]
fadd qword [0x476980]
fld qword [ebp - 0x260]
fdivrp st(2)
fsubrp st(1)
fstp qword [ebp - 0x260]
fld qword [ebp - 0x260]
fldz
fsub st(1), st(0)
fld qword [ebp - 0x260]
fsubp st(2)
fld qword [ebp - 0x260]
faddp st(2)
fxch st(1)
fadd qword [0x476978]
fsub qword [ebp - 0x260]
fstp qword [ebp - 0x260]
fld qword [ebp - 0x260]
fld qword [0x476970]
fadd st(1), st(0)
fxch st(1)
fstp qword [ebp - 0x260]
fsubr qword [ebp - 0x260]
fadd qword [ebp - 0x260]
fadd qword [0x4768e0]
fadd qword [ebp - 0x260]
fstp qword [ebp - 0x260]
fld qword [ebp - 0x260]
fsub qword [ebp - 0x260]
fstp qword [ebp - 0x260]
fld qword [ebp - 0x260]
fdiv qword [0x476888]
fadd qword [ebp - 0x260]
fsub qword [ebp - 0x260]
fadd qword [0x476968]
fsub qword [ebp - 0x260]
fsub qword [0x476960]
fadd qword [ebp - 0x260]
fadd qword [0x476958]
fsub qword [ebp - 0x260]
fstp qword [ebp - 0x260]
fld qword [ebp - 0x260]
fsub qword [ebp - 0x260]
fstp qword [ebp - 0x260]
fld qword [ebp - 0x260]
fmul qword [0x476950]
fadd qword [ebp - 0x260]
fsub qword [ebp - 0x260]
fstp qword [ebp - 0x260]
fld qword [ebp - 0x260]
fmul qword [ebp - 0x260]
fsubrp st(1)
fld qword [ebp - 0x260]
fdiv qword [0x476948]
fsubp st(1)
fld qword [ebp - 0x260]
fmul qword [0x476910]
fsubp st(1)
fstp qword [ebp - 0x260]
jmp 0x451e9a
mov dword [ebp - 0x220], 0xf
mov dword [ebp - 0x224], edi
mov byte [ebp - 0x234], 0
mov dword [ebp - 4], edi
push dword [0x47d88c]
lea ecx, [ebp - 0x234]
call fcn.0043bf68
pop ecx
test al, al
jne 0x452069
push 1
xor edi, edi
lea esi, [ebp - 0x234]
call fcn.00405711
mov eax, 0x8000ffff
jmp 0x451e9c
push dword [0x47d890]
lea eax, [ebp - 0x218]
push eax
call fcn.004141d2
pop ecx
pop ecx
push 0x104
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHELL32.dll_DoEnvironmentSubstW]
mov esi, 0x47f0f8
push esi
push edi
push dword [0x47d894]
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
mov dword [ebp - 0x254], 8
add dword [ebp - 0x254], 0x1a
mov eax, dword [ebp - 0x254]
mov ecx, dword [ebp - 0x254]
lea eax, [ecx + eax - 0x61]
add eax, dword [ebp - 0x254]
push 0xffffffffffffffe1
mov dword [ebp - 0x254], eax
mov eax, dword [ebp - 0x254]
mov ecx, dword [ebp - 0x254]
imul eax, ecx
pop ecx
sub ecx, eax
mov eax, dword [ebp - 0x254]
mov edx, dword [ebp - 0x254]
imul eax, edx
mov edx, dword [ebp - 0x254]
imul eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x254]
sub ecx, eax
mov eax, dword [ebp - 0x254]
sub ecx, eax
mov eax, dword [ebp - 0x254]
sub ecx, eax
add ecx, dword [ebp - 0x254]
push 0x5b
add ecx, dword [ebp - 0x254]
mov dword [ebp - 0x254], ecx
mov eax, dword [ebp - 0x254]
mov ecx, dword [ebp - 0x254]
imul eax, ecx
pop ecx
sub ecx, eax
add ecx, dword [ebp - 0x254]
push esi
add ecx, dword [ebp - 0x254]
lea eax, [ebp - 0x250]
add ecx, dword [ebp - 0x254]
mov dword [ebp - 0x254], ecx
add dword [ebp - 0x254], 0x3d
call fcn.00405b7c
lea edx, [ebp - 0x234]
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 1
call fcn.0043d573
mov bl, al
neg bl
sbb bl, bl
push 1
xor edi, edi
lea esi, [ebp - 0x250]
mov byte [ebp - 4], 0
call fcn.00405a55
inc bl
je 0x4521ba
mov ebx, 0x8000ffff
push 1
xor edi, edi
lea esi, [ebp - 0x234]
call fcn.00405711
mov eax, ebx
jmp 0x451e9c
mov esi, dword [ebp - 0x25c]
push esi
push 0x47f0f8
call fcn.0043f850
mov ecx, dword [esi]
mov dword [0x47f300], ecx
mov ebx, eax
jmp 0x4521a4