Function at 0x536868
Capabilities:
Delete file
Move file
Set file attributes

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff74
call fcn.005bc3c5
mov byte [ebp - 0x89], dl
mov dword [ebp - 4], eax
mov eax, 0x5d0664
call fcn.005ae2c8
mov dword [ebp - 0x6c], 0x18
cmp byte [ebp - 0x89], 0
jl 0x536cfe
mov word [ebp - 0x78], 0xc
mov edx, dword [ebp - 4]
mov ecx, dword [edx + 0xa4]
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0xc], 0
je 0x5368d6
mov eax, dword [ebp - 0xc]
mov edx, dword [eax]
mov dword [ebp - 8], edx
mov word [ebp - 0x78], 0x30
mov edx, 3
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x78], 0x18
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0xa8]
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x14], 0
je 0x536909
mov ecx, dword [ebp - 0x14]
mov eax, dword [ecx]
mov dword [ebp - 0x10], eax
mov word [ebp - 0x78], 0x54
mov edx, 3
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x78], 0x3c
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x100]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x53693c
mov edx, dword [ebp - 0x1c]
mov ecx, dword [edx]
mov dword [ebp - 0x18], ecx
mov word [ebp - 0x78], 0x78
mov edx, 3
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x78], 0x60
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0xa0]
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0
je 0x53696f
mov ecx, dword [ebp - 0x24]
mov eax, dword [ecx]
mov dword [ebp - 0x20], eax
mov word [ebp - 0x78], 0x9c
mov edx, 3
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x78], 0x84
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0xf8]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
je 0x5369a2
mov edx, dword [ebp - 0x2c]
mov ecx, dword [edx]
mov dword [ebp - 0x28], ecx
mov word [ebp - 0x78], 0xc0
mov edx, 3
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x78], 0xa8
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0xfc]
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], 0
je 0x5369d5
mov ecx, dword [ebp - 0x34]
mov eax, dword [ecx]
mov dword [ebp - 0x30], eax
mov word [ebp - 0x78], 0xe4
mov edx, 3
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x78], 0xcc
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x104]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
je 0x536a08
mov edx, dword [ebp - 0x3c]
mov ecx, dword [edx]
mov dword [ebp - 0x38], ecx
mov word [ebp - 0x78], 0x108
mov edx, 3
mov eax, dword [ebp - 0x3c]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x78], 0xf0
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x114]
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], 0
je 0x536a3b
mov ecx, dword [ebp - 0x44]
mov eax, dword [ecx]
mov dword [ebp - 0x40], eax
mov word [ebp - 0x78], 0x12c
mov edx, 3
mov eax, dword [ebp - 0x44]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x78], 0x114
mov edx, dword [ebp - 4]
mov eax, dword [edx + 0x11c]
call fcn.00468c04
mov eax, dword [ebp - 4]
call sym.default.exe__TWMActionManager_rInstallator_qqrv
test al, al
jne 0x536ba6
mov edx, dword [ebp - 4]
cmp byte [edx + 0xf0], 1
jne 0x536ba6
mov ecx, dword [ebp - 4]
cmp byte [ecx + 0xd8], 0
jne 0x536ba6
mov word [ebp - 0x78], 0x144
xor eax, eax
mov dword [ebp - 0x48], eax
lea edx, [ebp - 0x48]
inc dword [ebp - 0x6c]
mov ecx, dword [0x5e7530]
mov eax, dword [ecx]
call fcn.004d0fc8
mov word [ebp - 0x78], 0x138
push 2
cmp dword [ebp - 0x48], 0
je 0x536aaa
mov edx, dword [ebp - 0x48]
jmp 0x536aaf
mov edx, 0x5cfc1c
push edx
call sub.KERNEL32.DLL_SetFileAttributesW
push 1
mov word [ebp - 0x78], 0x150
mov edx, 0x5cfc1e
lea eax, [ebp - 0x4c]
call fcn.005bbcb4
inc dword [ebp - 0x6c]
lea edx, [ebp - 0x4c]
xor eax, eax
mov dword [ebp - 0x50], eax
lea ecx, [ebp - 0x50]
inc dword [ebp - 0x6c]
lea eax, [ebp - 0x48]
call fcn.005bbe94
cmp dword [ebp - 0x50], 0
je 0x536aee
mov edx, dword [ebp - 0x50]
jmp 0x536af3
mov edx, 0x5cfc26
push edx
cmp dword [ebp - 0x48], 0
je 0x536aff
mov eax, dword [ebp - 0x48]
jmp 0x536b04
mov eax, 0x5cfc24
push eax
call sub.KERNEL32.DLL_MoveFileExW
dec dword [ebp - 0x6c]
lea eax, [ebp - 0x50]
mov edx, 2
call fcn.005bbe44
dec dword [ebp - 0x6c]
lea eax, [ebp - 0x4c]
mov edx, 2
call fcn.005bbe44
push 4
push 0
mov word [ebp - 0x78], 0x15c
mov edx, str..del
lea eax, [ebp - 0x54]
call fcn.005bbcb4
inc dword [ebp - 0x6c]
lea edx, [ebp - 0x54]
xor eax, eax
mov dword [ebp - 0x58], eax
lea ecx, [ebp - 0x58]
inc dword [ebp - 0x6c]
lea eax, [ebp - 0x48]
call fcn.005bbe94
cmp dword [ebp - 0x58], 0
je 0x536b65
mov edx, dword [ebp - 0x58]
jmp 0x536b6a
mov edx, 0x5cfc2e
push edx
call sub.KERNEL32.DLL_MoveFileExW
dec dword [ebp - 0x6c]
lea eax, [ebp - 0x58]
mov edx, 2
call fcn.005bbe44
dec dword [ebp - 0x6c]
lea eax, [ebp - 0x54]
mov edx, 2
call fcn.005bbe44
dec dword [ebp - 0x6c]
lea eax, [ebp - 0x48]
mov edx, 2
call fcn.005bbe44
mov word [ebp - 0x78], 0xc
mov eax, dword [ebp - 4]
cmp byte [eax + 0xf2], 0
je 0x536be5
mov word [ebp - 0x78], 0x168
xor ecx, ecx
mov dword [ebp - 0x5c], ecx
lea edx, [ebp - 0x5c]
inc dword [ebp - 0x6c]
mov eax, dword [ebp - 4]
call sym.default.exe__TWMActionManager_rFileName_qqrv
lea eax, [ebp - 0x5c]
mov eax, dword [eax]
call fcn.005bafa0
dec dword [ebp - 0x6c]
lea eax, [ebp - 0x5c]
mov edx, 2
call fcn.005bbe44
mov ecx, dword [0x5ed910]
mov dword [ebp - 0x64], ecx
cmp dword [ebp - 0x64], 0
je 0x536c15
mov eax, dword [ebp - 0x64]
mov edx, dword [eax]
mov dword [ebp - 0x60], edx
mov word [ebp - 0x78], 0x18c
mov edx, 3
mov eax, dword [ebp - 0x64]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x78], 0x174
dec dword [ebp - 0x6c]
mov eax, dword [ebp - 4]
add eax, 0x110
mov edx, 2
call fcn.005bbe44
sub dword [ebp - 0x6c], 2
mov eax, dword [ebp - 4]
add eax, 0x108
mov edx, 2
call fcn.004026fc
add dword [ebp - 0x6c], 0xfffffff7
push 0x53499c
push 1
push 3
push 0xc
mov ecx, dword [ebp - 4]
add ecx, 0xb4
push ecx
call fcn.005ac994
add esp, 0x14
dec dword [ebp - 0x6c]
mov eax, dword [ebp - 4]
add eax, 0xb0
mov edx, 2
call fcn.005bbe44
dec dword [ebp - 0x6c]
mov eax, dword [ebp - 4]
add eax, 0x98
mov edx, 2
call fcn.005bbe44
dec dword [ebp - 0x6c]
mov eax, dword [ebp - 4]
add eax, 0x94
mov edx, 2
call fcn.005bbe44
dec dword [ebp - 0x6c]
mov eax, dword [ebp - 4]
add eax, 0x90
mov edx, 2
call fcn.005bbe44
dec dword [ebp - 0x6c]
mov eax, dword [ebp - 4]
add eax, 0x8c
mov edx, 2
call fcn.005bbe44
dec dword [ebp - 0x6c]
mov eax, dword [ebp - 4]
add eax, 0x7c
mov edx, 2
call fcn.005bbe44
dec dword [ebp - 0x6c]
mov eax, dword [ebp - 4]
add eax, 0x50
mov edx, 2
call fcn.005bbe44
sub dword [ebp - 0x6c], 5
xor edx, edx
mov eax, dword [ebp - 4]
call sym.default.exe__TWMLangSource__bdtr_qqrv
mov ecx, dword [ebp - 0x88]
mov dword fs:[0], ecx
cmp byte [ebp - 0x89], 0
jle 0x536d1c
mov eax, dword [ebp - 4]
call fcn.005bc3b8
mov esp, ebp
pop ebp
ret