Function at 0x459c1d
Capabilities:
Get common file path
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xf84
push ebx
mov ebx, dword [ebp + 8]
lea ecx, [eax + 0x217]
push esi
add eax, 0x41f
push edi
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x760]
push eax
push 0x104
mov dword [ebp - 0x10], ecx
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
push str..vbs
lea eax, [ebp - 0x558]
push eax
lea eax, [ebp - 0x760]
push eax
call fcn.00536833
movzx eax, word [ebp - 0x558]
xor edi, edi
xor edx, edx
cmp word [ebp - 0x558], di
lea ecx, [ebp - 0x556]
je 0x459c9c
cmp edx, 0x103
jae 0x459c9c
mov word [ebp + edx*2 - 0x350], ax
movzx eax, word [ecx]
inc edx
inc ecx
inc ecx
cmp ax, di
jne 0x459c81
lea esi, [ebp - 0x40]
mov word [ebp + edx*2 - 0x350], di
call fcn.00405a26
push 0xbb8
push 2
pop esi
push esi
push edi
push 0xc0000000
lea eax, [ebp - 0x558]
push eax
call fcn.005365d4
cmp eax, 0xffffffff
mov dword [ebp + 8], eax
jne 0x459cd6
mov dword [ebx], esi
jmp 0x459f30
mov edi, 0x30c
lea esi, [ebp - 0x20]
call fcn.00496e3f
push str.On_Error_Resume_Next_r_nDim_oWordlApp_r_nSet_oWordlApp__CreateObject__Word.Application___r_nIf_Err.Number__0_Then_r_n___oWordlApp.Visible__False_r_n___oWordlApp.DisplayAlerts__False_r_n___Dim_oDocument_r_n___Set_oDocument__oWordlApp.Documents.Open_Wscript.Arguments.Item_0___False__True__r_n
mov eax, esi
call fcn.00496f64
cmp byte [ebp - 0x40], 0
je 0x459d94
lea eax, [ebp - 0x40]
call fcn.00405abb
mov dword [ebp - 0xc], eax
fild dword [ebp - 0xc]
lea eax, [ebp - 0x40]
fmul dword [0x6944c0]
fmul dword [0x694a40]
fstp dword [ebp - 0x28]
call fcn.00405af7
mov dword [ebp - 0xc], eax
fild dword [ebp - 0xc]
lea eax, [ebp - 0x40]
fmul dword [0x6944c0]
fmul dword [0x694a40]
fstp dword [ebp - 0x24]
call fcn.00405b33
mov dword [ebp - 0xc], eax
fild dword [ebp - 0xc]
lea eax, [ebp - 0x40]
fmul dword [0x6944c0]
fmul dword [0x694a40]
fstp dword [ebp - 0x2c]
call fcn.00405b6f
mov dword [ebp - 0xc], eax
fild dword [ebp - 0xc]
sub esp, 0x20
mov eax, esi
fmul dword [0x6944c0]
fmul dword [0x694a40]
fstp qword [esp + 0x18]
fld dword [ebp - 0x2c]
fstp qword [esp + 0x10]
fld dword [ebp - 0x24]
fstp qword [esp + 8]
fld dword [ebp - 0x28]
fstp qword [esp]
push str.___oDocument.PageSetup.LeftMargin___f_r_n___oDocument.PageSetup.TopMargin___f_r_n___oDocument.PageSetup.RightMargin___f_r_n___oDocument.PageSetup.BottomMargin___f_r_n
call fcn.0053fe39
add esp, 0x24
push str.___If_Err.Number__0_Then_r_n______oDocument.SaveAs_WScript.Arguments.Item_1___Int_WScript.Arguments.Item_2___r_n______oDocument.Close_False_r_n___End_If_r_n___oWordlApp.Quit_r_nEnd_If_r_nWScript.Echo_Err.Number_r_n
lea eax, [ebp - 0x20]
call fcn.00496f64
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x459dad
mov eax, 0x631a7e
push dword [ebp - 0x1c]
push eax
lea eax, [ebp + 8]
push eax
call fcn.00401faa
push dword [ebp - 0x20]
call fcn.005f858a
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
pop ecx
push dword [ebp + 8]
call esi
push 0x11
push dword [ebp - 0x14]
lea eax, [ebp - 0x558]
push dword [ebp - 0x10]
lea edi, [ebp - 0xf80]
push eax
push str.cscript___Nologo___s____s____s___d
mov eax, 0x410
call fcn.005383cd
or dword [ebp - 8], 0xffffffff
or dword [ebp - 4], 0xffffffff
add esp, 0x14
push 0xffffffffffffffff
call esi
push dword [ebp - 8]
call esi
mov eax, edi
push eax
lea eax, [ebp - 8]
push eax
call fcn.0058969d
test al, al
jne 0x459e21
mov dword [ebx], 2
jmp 0x459f26
and dword [ebp + 8], 0
mov edi, dword [sym.imp.KERNEL32.dll_ReadFile]
mov byte [ebp - 0x148], 0
push 0
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x459eb2
lea eax, [ebp - 8]
push eax
call fcn.00459bf9
test eax, eax
setne al
test al, al
jne 0x459eb2
mov eax, dword [ebp + 8]
xor edx, edx
mov ecx, 0x190
div ecx
test edx, edx
jne 0x459e6e
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx]
call dword [eax]
test al, al
jne 0x459ea2
lea eax, [ebp - 8]
push eax
call fcn.00459bf9
test eax, eax
jbe 0x459e9d
push 0
lea eax, [ebp - 0x10]
push eax
push 0x103
lea eax, [ebp - 0x148]
push eax
push dword [ebp - 4]
call edi
mov eax, dword [ebp - 0x10]
mov byte [ebp + eax - 0x148], 0
inc dword [ebp + 8]
jmp 0x459e32
push dword [ebp - 0x14]
call fcn.00401d4e
mov dword [ebx], 1
jmp 0x459f26
cmp byte [ebp - 0x148], 0
jne 0x459eea
lea eax, [ebp - 8]
push eax
call fcn.00459bf9
test eax, eax
jbe 0x459eea
push 0
lea eax, [ebp + 8]
push eax
push 0x103
lea eax, [ebp - 0x148]
push eax
push dword [ebp - 4]
call edi
mov eax, dword [ebp + 8]
mov byte [ebp + eax - 0x148], 0
push dword [ebp - 4]
call esi
push dword [ebp - 8]
call esi
or dword [ebp - 4], 0xffffffff
or dword [ebp - 8], 0xffffffff
cmp byte [ebp - 0x148], 0
jne 0x459f0f
mov dword [ebx], 2
push 0xffffffffffffffff
jmp 0x459f29
lea eax, [ebp - 0x148]
push eax
call fcn.005f8585
test eax, eax
pop ecx
jne 0x459e16
and dword [ebx], eax
push dword [ebp - 4]
call esi
push dword [ebp - 8]
call esi
lea eax, [ebp - 0x350]
push eax
mov eax, 0x1f4
call fcn.00536630
pop edi
pop esi
mov eax, ebx
pop ebx
leave
ret 8