Function at 0x40fa60
Capabilities:
Check if file exists
Delete file
Get common file path
Get file attributes

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x6064
call fcn.00467480
mov eax, dword [0x4c4754]
xor eax, ebp
mov dword [ebp - 4], eax
mov ax, word [0x4910f8]
mov word [ebp - 0x2010], ax
push 0x2000
push 0
lea ecx, [ebp - 0x200e]
push ecx
call fcn.00466b50
add esp, 0xc
push 0x1000
lea edx, [ebp - 0x2010]
push edx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
mov dword [ebp - 0x2014], eax
cmp dword [ebp - 0x2014], 0
je 0x40fae9
movzx eax, word [ebp - 0x2010]
test eax, eax
je 0x40fae9
movzx ecx, word [ebp - 0x200e]
cmp ecx, 0x3a
jne 0x40fae9
movzx edx, word [ebp - 0x200c]
cmp edx, 0x5c
jne 0x40fae9
mov word [ebp - 0x200c], 0
jmp 0x40fafb
push 0x4910fc
lea eax, [ebp - 0x2010]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
lea ecx, [ebp - 0x2010]
push ecx
lea edx, [ebp - 0x4020]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0x491104
lea eax, [ebp - 0x4020]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea ecx, [ebp - 0x4020]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea edx, [ebp - 0x2010]
push edx
lea eax, [ebp - 0x4020]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push str._rf_rf.log
lea ecx, [ebp - 0x4020]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea edx, [ebp - 0x4020]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0x1000
lea eax, [ebp - 0x4020]
push eax
call fcn.0040fdb0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x40fd3b
push 0x1000
lea edx, [ebp - 0x6030]
push edx
call fcn.0040f1d0
add esp, 8
test eax, eax
je 0x40fbcf
lea eax, [ebp - 0x4020]
push eax
lea ecx, [ebp - 0x6030]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
test eax, eax
je 0x40fbcf
push 0x491134
lea edx, [ebp - 0x6030]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
lea eax, [ebp - 0x6030]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0x491148
lea ecx, [ebp - 0x4020]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcatW]
mov dword [ebp - 0x4024], 1
lea edx, [ebp - 0x4020]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x40fd3b
push 0
push 0x80
push 3
push 0
push 3
push 0
lea eax, [ebp - 0x4020]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x6034], eax
cmp dword [ebp - 0x6034], 0xffffffff
je 0x40fd25
xor ecx, ecx
mov dword [ebp - 0x6054], ecx
mov dword [ebp - 0x6050], ecx
mov dword [ebp - 0x604c], ecx
mov dword [ebp - 0x6048], ecx
mov dword [ebp - 0x6044], ecx
mov dword [ebp - 0x6040], ecx
mov dword [ebp - 0x603c], ecx
mov dword [ebp - 0x6038], ecx
lea edx, [ebp - 0x6044]
push edx
lea eax, [ebp - 0x604c]
push eax
lea ecx, [ebp - 0x6054]
push ecx
mov edx, dword [ebp - 0x6034]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileTime]
lea eax, [ebp - 0x603c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov dword [ebp - 0x6060], 0x2a69c000
mov dword [ebp - 0x605c], 0xc9
mov ecx, dword [ebp - 0x603c]
sub ecx, 0x2a69c000
mov edx, dword [ebp - 0x6038]
sbb edx, 0xc9
mov dword [ebp - 0x603c], ecx
mov dword [ebp - 0x6038], edx
mov dword [ebp - 0x6064], 0
jmp 0x40fce4
mov eax, dword [ebp - 0x6064]
add eax, 1
mov dword [ebp - 0x6064], eax
cmp dword [ebp - 0x6064], 3
jge 0x40fd18
lea ecx, [ebp - 0x603c]
push ecx
mov edx, dword [ebp - 0x6064]
lea eax, [ebp + edx*8 - 0x6054]
push eax
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
test eax, eax
jle 0x40fd16
mov dword [ebp - 0x4024], 0
jmp 0x40fcd5
mov ecx, dword [ebp - 0x6034]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x4024], 0
je 0x40fd3b
lea edx, [ebp - 0x4020]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00466b32
mov esp, ebp
pop ebp
ret