Function at 0x1000568b
Capabilities:
Check if file exists
Delete file
Delete registry value
Move file

Disassembly:
push 0x678
mov eax, 0x1003c4a1
call fcn.10023bba
mov eax, dword [ebp + 8]
mov dword [ebp - 0x630], eax
xor edi, edi
xor eax, eax
mov esi, 0x206
mov dword [ebp - 0x634], edi
push esi
mov word [ebp - 0x21c], ax
lea eax, [ebp - 0x21a]
push edi
push eax
call fcn.10025220
add esp, 0xc
lea eax, [ebp - 0x21c]
push eax
mov eax, dword [ebp - 0x630]
push str..tmp
mov ebx, str..avi
push ebx
call fcn.1000b662
lea eax, [ebp - 0x21c]
push eax
push dword [ebp - 0x630]
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
je 0x1000587b
lea eax, [ebp - 0x21c]
push eax
call fcn.1000a08f
cmp edx, edi
ja 0x1000573e
jb 0x1000571b
cmp eax, 0x100000
jae 0x1000573e
lea eax, [ebp - 0x21c]
push eax
push 0x10040200
call fcn.10019e14
pop ecx
pop ecx
lea edi, [ebp - 0x21c]
call fcn.10004ed3
jmp 0x1000587b
lea eax, [ebp - 0x21c]
push eax
call fcn.10005020
pop ecx
test eax, eax
jne 0x1000575d
lea eax, [ebp - 0x21c]
push eax
push str._cOW
jmp 0x10005727
xor eax, eax
push esi
mov word [ebp - 0x424], ax
lea eax, [ebp - 0x422]
push edi
push eax
call fcn.10025220
add esp, 0xc
lea eax, [ebp - 0x424]
push eax
mov eax, dword [ebp - 0x630]
push str..flv
push ebx
call fcn.1000b662
push str.scrnRcdCfg
lea ecx, [ebp - 0x684]
call fcn.10001789
lea eax, [ebp - 0x684]
push eax
lea eax, [ebp - 0x64c]
push eax
mov dword [ebp - 4], edi
call fcn.10002f9d
pop ecx
pop ecx
push edi
push 1
lea ecx, [ebp - 0x684]
mov byte [ebp - 4], 2
call fcn.10001a41
push str.reportAvi
lea ecx, [ebp - 0x668]
call fcn.10001789
lea eax, [ebp - 0x668]
push edi
push eax
lea eax, [ebp - 0x64c]
mov byte [ebp - 4], 3
call fcn.10002ca8
pop ecx
pop ecx
push edi
push 1
lea ecx, [ebp - 0x668]
mov ebx, eax
mov byte [ebp - 4], 2
call fcn.10001a41
cmp ebx, edi
je 0x10005881
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_MoveFileW]
test eax, eax
je 0x1000582e
push str.9hncM
call fcn.10019b3e
jmp 0x10005840
lea eax, [ebp - 0x424]
push eax
push str.avi_rename_to_flv_failed:_s
call fcn.10019e14
pop ecx
pop ecx
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFindFileNameW]
push eax
push 0x10040058
push 0x80000002
call dword [sym.imp.SHLWAPI.dll_SHDeleteValueW]
or dword [ebp - 4], 0xffffffff
lea esi, [ebp - 0x64c]
call fcn.10010fb4
call fcn.10023c3d
ret
xor eax, eax
push esi
mov word [ebp - 0x62c], ax
lea eax, [ebp - 0x62a]
push edi
push eax
call fcn.10025220
add esp, 0xc
lea eax, [ebp - 0x62c]
push eax
mov ebx, str.ffmpeg.exe
call fcn.1000a521
lea eax, [ebp - 0x62c]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1000586c
lea eax, [ebp - 0x424]
push eax
xor esi, esi
push 0x10040284
mov dword [ebp - 0x634], esi
call fcn.10019b3e
lea eax, [ebp - 0x424]
push eax
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x62c]
push eax
push str.__s___i___s____s_
lea ecx, [ebp - 0x668]
call fcn.1000b78e
add esp, 0x18
cmp dword [eax + 0x18], 8
jb 0x10005909
mov eax, dword [eax + 4]
jmp 0x1000590c
add eax, 4
lea ecx, [ebp - 0x634]
push ecx
push eax
call fcn.1000b01c
test eax, eax
je 0x10005929
cmp dword [ebp - 0x634], esi
jne 0x10005929
xor bl, bl
jmp 0x1000592b
mov bl, 1
push esi
push 1
lea esi, [ebp - 0x668]
call fcn.10001b39
test bl, bl
je 0x10005841
push dword [ebp - 0x630]
push 0x100402bc
call fcn.10019e14
pop ecx
pop ecx
push 0x2000
call dword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
je 0x10005972
push str._g_kl
call fcn.10019ca9
pop ecx
jmp 0x1000586c
lea eax, [ebp - 0x21c]
push eax
call fcn.1000509c
jmp 0x1000596c