Function at 0xa9640
Capabilities:
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 8
push 0
push 0
dec ecx
jne 0xa9649
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0xa9d97
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x1f8], edx
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0xc0], edx
mov eax, dword [ebp - 4]
add eax, 0xd4
call fcn.00013d18
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x1d0]
mov dword [ebp - 0x10], eax
xor ebx, ebx
lea eax, [ebp - 0x14]
call fcn.00013d18
xor eax, eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 4]
cmp byte [eax + 0x200], 0
jne 0xa9d6f
mov eax, dword [ebp - 4]
mov byte [eax + 0x200], 1
xor edx, edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 8]
xor edx, edx
push ebp
push 0xa9d1b
push dword fs:[edx]
mov dword fs:[edx], esp
cmp dword [ebp - 8], 2
jge 0xa98f6
mov eax, dword [ebp - 4]
cmp dword [eax + 0x224], 0
jne 0xa970b
push 1
mov ecx, 0x2776
mov dl, 1
mov eax, dword [0xa4304]
call fcn.000a4484
call fcn.00013748
mov eax, dword [ebp - 4]
call fcn.000a9f74
test eax, eax
jne 0xa971f
mov eax, dword [ebp - 4]
call fcn.000aacac
mov eax, dword [ebp - 4]
call fcn.000a9f74
test eax, eax
jne 0xa9759
mov eax, dword [ebp - 4]
mov byte [eax + 0x200], 0
mov eax, dword [ebp - 4]
cmp dword [eax + 0xc0], 0
jne 0xa9759
push 1
mov ecx, 0x2afa
mov dl, 1
mov eax, dword [0xa4304]
call fcn.000a4484
call fcn.00013748
xor edx, edx
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 4]
cmp byte [eax + 0x200], 0
je 0xa98f6
lea eax, [ebp - 0x18]
call fcn.00013d18
cmp dword [ebp - 8], 0
jne 0xa985c
mov eax, dword [ebp - 4]
cmp dword [eax + 0x170], 0
je 0xa985c
mov eax, dword [ebp - 4]
test byte [eax + 0x174], 0x10
jne 0xa985c
lea ecx, [ebp - 0x2c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x170]
mov dl, 1
call fcn.000a2b24
mov eax, dword [ebp - 0x2c]
lea edx, [ebp - 0x18]
call fcn.00030a10
mov eax, dword [ebp - 4]
test byte [eax + 0x174], 0x20
je 0xa97d7
mov eax, dword [ebp - 0x18]
call fcn.000a29d0
mov eax, dword [ebp - 0x18]
call fcn.000a2a7c
test al, al
jne 0xa97fd
mov eax, dword [ebp - 0x18]
push eax
mov ecx, 0x2908
mov dl, 1
mov eax, dword [0xa4304]
call fcn.000a45e0
call fcn.00013748
lea eax, [ebp - 0x1c]
mov edx, 0x106
call fcn.000142dc
mov eax, dword [ebp - 0x1c]
call fcn.0001416c
push eax
push 0
push 0xa9da8
mov eax, dword [ebp - 0x18]
call fcn.0001416c
push eax
call sub.kernel32.dll_GetTempFileNameA
test eax, eax
jne 0xa9846
mov eax, dword [ebp - 0x18]
push eax
mov ecx, 0x2b2b
mov dl, 1
mov eax, dword [0xa4304]
call fcn.000a45e0
call fcn.00013748
mov eax, dword [ebp - 0x1c]
call fcn.0001416c
push eax
call sub.kernel32.dll_DeleteFileA
lea eax, [ebp - 0x1c]
call fcn.00013d18
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x224]
call fcn.00013db0
mov eax, dword [ebp - 4]
cmp dword [eax + 0x1fc], 0
jle 0xa98f6
mov eax, dword [ebp - 4]
cmp dword [eax + 0xe4], 0
jne 0xa98bf
lea eax, [ebp - 0x1c]
mov edx, 0x106
call fcn.000142dc
mov eax, dword [ebp - 0x1c]
call fcn.0001416c
push eax
push 0x104
call sub.kernel32.dll_GetTempPathA
mov eax, dword [ebp - 0x1c]
call fcn.0001416c
mov edx, eax
lea eax, [ebp - 0x14]
call fcn.00013ee0
lea eax, [ebp - 0x1c]
call fcn.00013d18
lea ecx, [ebp - 0x14]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0xe4]
mov dl, 1
call fcn.000a2b24
push 1
lea ecx, [ebp - 0x14]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x224]
mov eax, dword [ebp - 4]
call fcn.000abb24
test eax, eax
sete al
mov edx, dword [ebp - 4]
mov byte [edx + 0x200], al
mov eax, dword [ebp - 4]
cmp byte [eax + 0x200], 0
je 0xa990c
mov eax, dword [ebp - 4]
call fcn.000a7030
mov ebx, eax
test ebx, ebx
jle 0xa9d11
xor edx, edx
push ebp
push 0xa9d07
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, 0x98
call fcn.0002fcd0
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
call fcn.000ac954
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x18], 0
je 0xa9975
mov eax, dword [ebp - 0x18]
call fcn.00013fa8
inc eax
call fcn.00030d30
mov ebx, eax
mov eax, dword [ebp - 0x24]
mov dword [eax + 0x70], ebx
mov eax, dword [ebp - 0x18]
call fcn.00013fa8
mov ecx, eax
mov eax, ebx
mov edx, dword [ebp - 0x18]
call fcn.00030c1c
jmp 0xa997d
mov eax, dword [ebp - 0x24]
xor edx, edx
mov dword [eax + 0x70], edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x198]
mov edx, dword [eax]
call dword [edx + 0x14]
shl eax, 5
call fcn.0002fcd0
mov edx, dword [ebp - 0x24]
mov dword [edx + 0x4c], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x198]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
je 0xa9a75
lea ecx, [ebp - 0x30]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x198]
xor edx, edx
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x30]
mov edx, 0xa9db4
call fcn.000140b8
je 0xa9a75
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x198]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0xa9a5f
inc eax
mov dword [ebp - 0x28], eax
xor ebx, ebx
mov eax, dword [ebp - 0x24]
mov esi, dword [eax + 0x4c]
mov eax, ebx
shl eax, 5
add esi, eax
lea ecx, [ebp - 0x34]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x198]
mov edx, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x34]
call fcn.00013fa8
inc eax
call fcn.00030d30
mov dword [esi], eax
lea ecx, [ebp - 0x38]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x198]
mov edx, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x38]
call fcn.00013fa8
inc eax
push eax
lea ecx, [ebp - 0x3c]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x198]
mov edx, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x3c]
mov eax, dword [esi]
pop ecx
call fcn.00030c1c
inc ebx
dec dword [ebp - 0x28]
jne 0xa99ee
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x198]
mov edx, dword [eax]
call dword [edx + 0x14]
mov edx, dword [ebp - 0x24]
mov dword [edx + 0x44], eax
jmp 0xa9a7d
mov eax, dword [ebp - 0x24]
xor edx, edx
mov dword [eax + 0x44], edx
cmp dword [ebp - 8], 1
jne 0xa9b2b
mov eax, dword [ebp - 4]
call fcn.000a9f74
dec eax
test eax, eax
jl 0xa9b2b
inc eax
mov dword [ebp - 0x28], eax
xor ebx, ebx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x218]
mov edx, ebx
call fcn.00036e0c
mov esi, eax
lea ecx, [ebp - 0x40]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x198]
xor edx, edx
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x40]
call fcn.0001416c
push eax
mov eax, dword [esi + 0x2a]
call fcn.0001416c
mov edx, eax
pop eax
call fcn.0002ff78
test eax, eax
jne 0xa9b21
mov edx, dword [esi + 0x14]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x22c]
mov ecx, dword [eax]
call dword [ecx]
mov eax, dword [ebp - 0x24]
mov dword [eax + 0x54], 0xffffffff
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x22c]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0x24]
mov dword [edx + 0x58], eax
mov eax, dword [esi + 0x14]
mov edx, dword [ebp - 0x24]
mov dword [edx + 0x5c], eax
mov eax, dword [ebp - 0x24]
mov dword [eax + 0x44], 1
jmp 0xa9b2b
inc ebx
dec dword [ebp - 0x28]
jne 0xa9a9e
cmp dword [ebp - 8], 2
jne 0xa9b85
mov eax, dword [ebp - 0x24]
mov dword [eax + 0x60], 0xffffffff
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0x24]
mov dword [edx + 0x64], eax
mov eax, dword [ebp - 0xc]
call fcn.00039088
mov edx, dword [ebp - 0x24]
mov dword [edx + 0x68], eax
mov eax, dword [ebp - 0x24]
mov dword [eax + 0x54], 0xffffffff
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x22c]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0x24]
mov dword [edx + 0x58], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x22c]
call fcn.00039088
mov edx, dword [ebp - 0x24]
mov dword [edx + 0x5c], eax
mov eax, dword [ebp - 0x24]
mov dword [eax + 0x94], 7
mov eax, dword [ebp - 4]
add eax, 0xc4
call fcn.00013d18
cmp dword [ebp - 8], 2
jge 0xa9bf6
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe9], 0
je 0xa9bf6
mov eax, dword [ebp - 4]
cmp dword [eax + 0x1cc], 0
jne 0xa9bf6
mov eax, dword [ebp - 4]
cmp word [eax + 0x8a], 0
jne 0xa9bf6
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x1d0], edx
lea edx, [ebp - 0x44]
mov eax, 0x2906
call fcn.000a40a4
mov eax, dword [ebp - 0x44]
push eax
push 0
push 0
xor ecx, ecx
mov dl, 4
mov eax, dword [ebp - 4]
call fcn.000a6270
cmp dword [ebp - 8], 0
je 0xa9c0b
cmp dword [ebp - 8], 0
jle 0xa9c1f
mov eax, dword [ebp - 0x20]
cmp dword [eax + 0x54], 0
je 0xa9c1f
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 4]
call fcn.000a7098
mov edx, dword [ebp - 4]
mov dword [edx + 0x1f8], eax
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0xa9d11
mov eax, dword [ebp - 4]
call fcn.000a708c
mov eax, dword [ebp - 4]
mov byte [eax + 0x200], 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x198]
mov edx, dword [eax]
call dword [edx + 0x40]
cmp dword [ebp - 8], 0
jle 0xa9c6c
mov eax, dword [ebp - 4]
cmp dword [eax + 0x1f8], 1
je 0xa9c6c
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x22c]
call fcn.00039494
mov eax, dword [ebp - 4]
cmp dword [eax + 0x1fc], 0
jle 0xa9c80
mov eax, dword [ebp - 0x14]
call fcn.00030504
mov edi, dword [ebp - 0x20]
mov eax, dword [edi + 0x48]
call fcn.00030d7c
mov eax, dword [edi + 0x1c]
call fcn.00030d7c
mov eax, dword [edi + 0x70]
test eax, eax
je 0xa9c9f
call fcn.00030d7c
mov ebx, dword [edi + 0x44]
dec ebx
cmp ebx, 0
jl 0xa9cbf
mov esi, dword [edi + 0x4c]
mov eax, ebx
shl eax, 5
add esi, eax
mov eax, dword [esi]
call fcn.00030d7c
dec ebx
cmp ebx, 0xffffffff
jne 0xa9ca8
mov eax, dword [edi + 0x4c]
call fcn.00012734
mov eax, dword [ebp - 0x20]
call fcn.00012734
cmp dword [ebp - 8], 2
jge 0xa9d06
mov eax, dword [ebp - 4]
cmp byte [eax + 0xe9], 0
je 0xa9d06
mov eax, dword [ebp - 4]
cmp dword [eax + 0x1cc], 0
jne 0xa9d06
mov eax, dword [ebp - 4]
cmp word [eax + 0x8a], 0
jne 0xa9d06
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x10]
mov dword [eax + 0x1d0], edx
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0xa9d6f
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0xa9d9e
lea eax, [ebp - 0x44]
mov edx, 7
call fcn.00013d3c
lea eax, [ebp - 0x1c]
mov edx, 3
call fcn.00013d3c
ret