Function at 0x4e8208
Capabilities:
Check if file exists
Create process on windows
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
push edi
mov edi, ecx
push 0x10
pop ebx
mov eax, dword [edi + 8]
sub eax, ebx
push eax
call fcn.004c69bb
add eax, ebx
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
call fcn.004e20f3
mov eax, dword [edi + 0x40]
pop ecx
pop ecx
lea ecx, [ebp - 8]
push dword [eax - 0xc]
push eax
call fcn.004c6828
xor esi, esi
cmp dword [edi + 0x44], esi
jne 0x4e84fa
call fcn.004c5a90
push eax
lea ecx, [ebp - 4]
call fcn.004c65c1
push 0x104
lea ecx, [ebp - 4]
call fcn.004c7772
cmp dword [edi + 0x1c], esi
push eax
push esi
push esi
push 0x19
pop eax
cmovne eax, ebx
push eax
push esi
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
push 0xffffffffffffffff
lea ecx, [ebp - 4]
call fcn.004cd175
lea eax, [ebp - 4]
push eax
call fcn.004e20f3
lea eax, [ebp - 4]
mov dword [esp], str.CapCut.lnk
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004dca78
add esp, 0xc
push dword [eax]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov ecx, dword [ebp - 0xc]
mov esi, eax
add ecx, 0xfffffff0
call fcn.004c77e2
mov ebx, dword [sym.imp.KERNEL32.dll_DeleteFileW]
test esi, esi
mov esi, str.CapCut.lnk
je 0x4e82e8
push esi
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004dca78
add esp, 0xc
push dword [eax]
call ebx
mov ecx, dword [ebp - 0xc]
lea ecx, [ecx - 0x10]
call fcn.004c77e2
mov ecx, dword [ebp - 4]
lea ecx, [ecx - 0x10]
call fcn.004c77e2
call fcn.004e1eb0
test eax, eax
je 0x4e845f
call fcn.004c5a90
push eax
lea ecx, [ebp - 4]
call fcn.004c65c1
push 0x104
lea ecx, [ebp - 4]
call fcn.004c7772
push eax
xor eax, eax
push eax
push 0x1a
push eax
call fcn.004e2eee
add esp, 0x10
lea ecx, [ebp - 4]
push 0xffffffffffffffff
call fcn.004cd175
push str.MicrosoftInternet_ExplorerQuick_LaunchUser_PinnedTaskBar_
lea ecx, [ebp - 4]
call fcn.004c67ff
push esi
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004dca78
add esp, 0xc
push dword [eax]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov ecx, dword [ebp - 0xc]
mov esi, eax
add ecx, 0xfffffff0
call fcn.004c77e2
mov ebx, dword [sym.imp.SHELL32.dll_ShellExecuteW]
test esi, esi
je 0x4e83a2
push str.CapCut.lnk
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004dca78
add esp, 0xc
xor esi, esi
push esi
push esi
push esi
push dword [eax]
push str.taskbarunpin
push esi
call ebx
mov ecx, dword [ebp - 0xc]
lea ecx, [ecx - 0x10]
call fcn.004c77e2
jmp 0x4e83a4
xor esi, esi
mov ecx, dword [ebp - 4]
lea ecx, [ecx - 0x10]
call fcn.004c77e2
call fcn.004c5a90
push eax
lea ecx, [ebp - 4]
call fcn.004c65c1
push 0x104
lea ecx, [ebp - 4]
call fcn.004c7772
push eax
push esi
push 0x1a
push esi
call fcn.004e2eee
add esp, 0x10
lea ecx, [ebp - 4]
push 0xffffffffffffffff
call fcn.004cd175
push str.MicrosoftInternet_ExplorerQuick_LaunchUser_PinnedStartMenu_
lea ecx, [ebp - 4]
call fcn.004c67ff
push str.CapCut.lnk
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004dca78
add esp, 0xc
push dword [eax]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov ecx, dword [ebp - 0xc]
mov esi, eax
add ecx, 0xfffffff0
call fcn.004c77e2
test esi, esi
je 0x4e844d
push str.CapCut.lnk
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004dca78
add esp, 0xc
xor esi, esi
push esi
push esi
push esi
push dword [eax]
push str.startunpin
push esi
call ebx
mov ecx, dword [ebp - 0xc]
lea ecx, [ecx - 0x10]
call fcn.004c77e2
jmp 0x4e844f
xor esi, esi
mov ecx, dword [ebp - 4]
lea ecx, [ecx - 0x10]
call fcn.004c77e2
jmp 0x4e84fa
call fcn.004c5a90
push eax
lea ecx, [ebp - 4]
call fcn.004c65c1
push 0x104
lea ecx, [ebp - 4]
call fcn.004c7772
push eax
xor eax, eax
push eax
push eax
push 0x1a
push eax
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
push 0xffffffffffffffff
lea ecx, [ebp - 4]
call fcn.004cd175
push str.MicrosoftInternet_ExplorerQuick_Launch_
lea ecx, [ebp - 4]
call fcn.004c67ff
push esi
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004dca78
add esp, 0xc
push dword [eax]
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov ecx, dword [ebp - 0xc]
mov esi, eax
add ecx, 0xfffffff0
call fcn.004c77e2
test esi, esi
je 0x4e84ed
push str.CapCut.lnk
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004dca78
add esp, 0xc
push dword [eax]
call ebx
mov ecx, dword [ebp - 0xc]
lea ecx, [ecx - 0x10]
call fcn.004c77e2
mov ecx, dword [ebp - 4]
lea ecx, [ecx - 0x10]
call fcn.004c77e2
xor esi, esi
call fcn.004c5a90
push eax
lea ecx, [ebp - 4]
call fcn.004c65c1
push 0x104
lea ecx, [ebp - 4]
call fcn.004c7772
cmp dword [edi + 0x1c], esi
push eax
push esi
push esi
push 0x17
pop eax
push 2
pop ecx
cmovne eax, ecx
push eax
push esi
call dword [sym.imp.SHELL32.dll_SHGetFolderPathW]
push 0xffffffffffffffff
lea ecx, [ebp - 4]
call fcn.004cd175
lea eax, [ebp - 4]
push eax
call fcn.004e20f3
lea eax, [ebp - 4]
mov dword [esp], 0x54f3d8
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.004dca78
push 1
push 1
push dword [eax]
call fcn.004ddbee
mov ecx, dword [ebp - 0xc]
add esp, 0x18
lea ecx, [ecx - 0x10]
call fcn.004c77e2
mov ecx, dword [ebp - 4]
add ecx, 0xfffffff0
call fcn.004c77e2
mov ecx, dword [ebp - 8]
add ecx, 0xfffffff0
call fcn.004c77e2
pop edi
xor eax, eax
pop esi
inc eax
pop ebx
mov esp, ebp
pop ebp
ret