Function at 0x41deb0
Capabilities:
Check if file exists
Delete file
Get common file path
Get startup folder

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5e376b
mov eax, dword fs:[0]
push eax
sub esp, 0x224
mov eax, dword [0x676314]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.004736fd
test al, al
je 0x41df05
adc ecx, dword [ebp - 2]
invalid
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.004830b0
add esp, 0xc
mov dword [ebp - 0x21c], 7
xor eax, eax
mov dword [ebp - 0x220], 0
lea ecx, [ebp - 0x230]
mov word [ebp - 0x230], ax
push eax
push 0x5e87f0
call fcn.00402650
xor esi, esi
mov dword [ebp - 4], 0
test bh, 0x45
cld
add byte [eax], al
add byte [eax], al
push esi
push 0x10
lea eax, [ebp - 0x218]
push eax
push esi
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x41e01d
call fcn.004737cc
test al, al
je 0x41df84
jecxz 0x41dfb8
ljmp 0xc5e5:0x962dfcfd
in al, 0xea
aas
inc esp
inc edx
sahf
mov esi, 0x55660e8
add byte [eax + eax*8 + 0x6f001774], al
in al, 0x4b
call fcn.004735e9
test al, al
je 0x41dfa4
add byte [edi - 0x1c], ch
dec ebx
daa
push ebx
jp 0x41df4a
pop ecx
push 0xffffffffffffffd8
insd dword es:[edi], dx
jns 0x41df7d
mov dl, 0x20
sbb cl, ah
push ebp
and al, byte [ebp - 0x7c9925fa]
mov ebp, 0xfffffde8
add byte [ebp + 4], dh
cmp word [ebp - 0x218], 0
jne 0x41dfb2
xor ecx, ecx
jmp 0x41dfcf
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41dfc0
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x230]
call fcn.00402650
push 1
push 0x5e8aa0
lea ecx, [ebp - 0x230]
call fcn.00405710
push 7
push 0x5e9d38
lea ecx, [ebp - 0x230]
call fcn.00405710
push 4
push 0x5ea9b0
lea ecx, [ebp - 0x230]
call fcn.00405710
mov esi, 1
push 0
push 0x19
lea eax, [ebp - 0x218]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
test eax, eax
je 0x41e0fc
call fcn.004732ad
test al, al
je 0x41e051
out 0x38, al
das
add byte [esi], ch
mov dword [edi - 0x62bf0f36], edi
outsb dx, byte [esi]
xchg ebp, eax
sbb byte [edi + 0x4d], ah
call fcn.004735e9
test al, al
je 0x41e06a
iretd
call fcn.004732ad
test al, al
je 0x41e08b
add eax, 0x74c08400
sbb byte [eax + 0x7d], bl
div edx
int 0xd9
pop eax
jge 0x41e06d
int 0xd9
add dword [0xe0c261a5], ebp
invalid
cmp word [ebp - 0x218], 0
jne 0x41e099
xor ecx, ecx
jmp 0x41e0b1
lea ecx, [ebp - 0x218]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x41e0a2
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x230]
call fcn.00402650
push 1
push 0x5e8aa0
lea ecx, [ebp - 0x230]
call fcn.00405710
push 7
push 0x5e9d38
lea ecx, [ebp - 0x230]
call fcn.00405710
push 4
push 0x5ea9b0
lea ecx, [ebp - 0x230]
call fcn.00405710
jmp 0x41e104
test esi, esi
je 0x41e184
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x41e184
cmp dword [ebp - 0x21c], 8
lea eax, [ebp - 0x230]
cmovae eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
call fcn.00473787
test al, al
je 0x41e162
retf 0x162e
call fcn.00473406
test al, al
je 0x41e17d
mov eax, 0x3b102f88
xor dl, byte [ebp - 0x53a21114]
aas
cld
lds ecx, [esi + 0x65]
jno 0x41e1ba
mov esi, 1
jmp 0x41e1e3
call fcn.0047337c
test al, al
je 0x41e1a7
jnp 0x41e1f0
shl dl, 0xdc
mov ch, 0x1d
test dword [edi + 0x2d], esp
stc
dec esi
cmpsd dword [esi], dword es:[edi]
inc edi
pop ebp
jecxz 0x41e1e4
mov byte [ebx + eax*8 - 0x37], ch
xchg esi, eax
dec ebp
xchg ebx, eax
invalid
call fcn.004736b8
test al, al
je 0x41e1c1
pop edi
call 0x3dc179e
sbb byte [ecx + 0x24a944], cl
and al, 0
sub eax, 0xe899c627
sub eax, 0xe899c627
call fcn.00473742
test al, al
je 0x41e1e1
jl 0x41e219
add eax, 0x74c08400
pop ss
jecxz 0x41e1bd
stosb byte es:[edi], al
int 0xd0
jl 0x41e176
invalid
xor esi, esi
mov ecx, dword [ebp - 0x21c]
cmp ecx, 8
jb 0x41e201
invalid
inc ecx
push ecx
push dword [ebp - 0x230]
lea ecx, [ebp - 0x230]
call fcn.00402750
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0046ce06
add al, 0
mov esp, ebp
pop ebp
ret