Function at 0x44af80
Capabilities:
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff710
push ebx
push esi
push edi
mov byte [ebp - 1], dl
mov ebx, eax
mov esi, 0x4ca2ac
test cl, cl
je 0x44afb1
cmp byte [0x4bce50], 0
je 0x44b022
cmp dword [esi], 0
je 0x44b022
mov byte [0x4bce50], 0
jmp 0x44b022
mov al, 1
call fcn.0044a1d4
mov dword [0x4bdb0c], 2
test bl, bl
jne 0x44afcc
cmp byte [ebp - 1], 0
je 0x44afd5
mov dl, byte [ebp - 1]
mov byte [0x4bdb44], dl
mov dword [0x4ca1f0], 0
mov dword [0x4ca1f4], 0
cmp dword [0x4c988c], 0
jne 0x44b022
mov eax, 0x4c6f00
mov cl, 1
mov edx, dword [0x4c0540]
call fcn.0045e814
cmp byte [0x4c731d], 0
je 0x44b022
mov eax, dword [0x4c0540]
cmp dword [eax + 0x30], 1
jbe 0x44b022
mov dword [0x4bdb08], 5
cmp dword [0x4c988c], 0
jne 0x44b0f6
cmp byte [0x4bf940], 0
jne 0x44b0f6
xor ebx, ebx
mov edx, 0x4bf940
mov eax, dword [0x4be4f0]
call fcn.00449579
mov eax, 0x4bf940
xor edx, edx
call fcn.0040c818
push 0x4a9233
push 0x400
lea ecx, [ebp - 0x404]
mov edx, 0x4a97bb
mov eax, 0x4a95d5
call fcn.004619ec
cmp byte [ebp - 0x404], 0
jne 0x44b09b
cmp byte [0x4c731d], 0
je 0x44b09b
lea ecx, [ebp - 0x404]
push ecx
push 0x400
call sub.KERNEL32.DLL_GetCurrentDirectoryA
cmp byte [ebp - 0x404], 0
je 0x44b0d7
lea eax, [ebp - 0x404]
call fcn.0040c35c
push 0x4bf940
lea edx, [ebp - 0x404]
push edx
call fcn.00498da0
add esp, 8
lea ecx, [ebp - 0x404]
push ecx
push 0x4bf940
call fcn.00498e7c
add esp, 8
push dword [0x4be4f0]
cmp byte [0x4bbe50], 0
setne cl
and ecx, 1
mov eax, 0x4bf940
xor edx, edx
call fcn.0044b3c4
cmp dword [0x4bdb08], 0
jne 0x44b109
mov dword [0x4bdb08], 4
cmp dword [0x4c988c], 0
je 0x44b1e5
mov edi, dword [0x4c7e54]
test edi, edi
je 0x44b14d
cmp edi, 1
je 0x44b14d
push 0x30
mov eax, 0x65
call fcn.004129c8
push eax
mov eax, 0x1fd
call fcn.004129c8
push eax
push dword [0x4c6eec]
call sub.USER32.DLL_MessageBoxA
jmp 0x44b3bd
mov ecx, 0x4bfd40
mov edx, 0x4bf940
mov eax, 0x4c7c4c
call fcn.00457d7c
mov edx, 0x4bd258
mov eax, 0x4c7c4c
xor ecx, ecx
call fcn.00457d50
cmp byte [0x4bd258], 0
je 0x44b185
mov eax, 0x4bd258
call fcn.0040c35c
mov byte [0x4bdb46], 0
lea edx, [ebp - 0x4a0]
mov eax, 0x4c7c4c
call fcn.00457db0
mov edx, dword [ebp - 0x490]
test edi, edi
mov dword [0x4be4f0], edx
jne 0x44b1b5
cmp dword [ebp - 0x448], 0
je 0x44b1c1
mov ecx, dword [ebp - 0x41c]
mov dword [0x4bdaf8], ecx
cmp dword [ebp - 0x430], 0
je 0x44b1de
push str..rar_.zip_.cab_.7z_.ace_.arj_.bz2_.gz_.lha_.lzh_.taz_.tgz
push 0x4bbe50
call fcn.00498e7c
add esp, 8
jmp 0x44b1e5
mov byte [0x4bbe50], 0
push dword [0x4c6eec]
call sub.USER32.DLL_IsWindowVisible
test eax, eax
je 0x44b1fc
mov edi, dword [0x4c6eec]
jmp 0x44b1fe
xor edi, edi
xor ecx, ecx
mov edx, ebx
mov eax, edi
call fcn.004493bb
test al, al
je 0x44b3a4
cmp dword [esi + 8], 1
je 0x44b21d
cmp dword [esi + 8], 2
jne 0x44b262
push dword [esi + 0x14]
push dword [esi + 0x10]
push dword [esi + 0xc]
push str._dd_dh_dm
lea eax, [ebp - 0x4f0]
push eax
call fcn.0049bdcc
add esp, 0x14
cmp dword [esi + 8], 1
jne 0x44b252
lea edx, [ebp - 0x4f0]
mov eax, 0x4bdba4
call fcn.004145a4
jmp 0x44b262
lea edx, [ebp - 0x4f0]
mov eax, 0x4bdbd0
call fcn.004145a4
cmp dword [esi], 0
je 0x44b272
xor edx, edx
mov eax, dword [esi]
call fcn.0044a6e8
jmp 0x44b298
cmp dword [0x4c988c], 0
je 0x44b298
cmp dword [ebp - 0x430], 0
je 0x44b298
xor edx, edx
mov dl, byte [0x4bbe50]
cmp edx, 0x2a
jne 0x44b298
mov byte [0x4bbe50], 0
mov ecx, dword [0x4c0540]
cmp dword [ecx + 0x30], 0
jne 0x44b2cc
push 0x30
mov eax, 0x65
call fcn.004129c8
push eax
mov eax, 0x14b
call fcn.004129c8
push eax
push dword [0x4c6eec]
call sub.USER32.DLL_MessageBoxA
jmp 0x44b3a4
cmp byte [0x4bd658], 0
setne al
and eax, 1
mov byte [0x4c749c], al
mov eax, 0x4c7470
call fcn.0047d6a8
cmp byte [esi + 0x1a], 0
je 0x44b2f5
call fcn.00447ecd
jmp 0x44b305
mov eax, 0x4c7c4c
mov dl, byte [0x4becf6]
call fcn.004533d8
cmp dword [esi], 0
je 0x44b314
push 0x4bce50
call sub.KERNEL32.DLL_DeleteFileA
cmp dword [0x4c9890], 1
je 0x44b3a4
cmp dword [0x4c988c], 0
je 0x44b336
mov eax, 0x4c6f00
call fcn.0045a93c
jmp 0x44b3a4
cmp byte [0x4bdb44], 0
je 0x44b349
mov eax, 0x4c7428
call fcn.0045f220
lea edx, [ebp - 0x8f0]
push edx
push 0x400
call sub.KERNEL32.DLL_GetCurrentDirectoryA
lea ecx, [ebp - 0x8f0]
push ecx
call fcn.00498eac
pop ecx
mov ecx, eax
mov edx, 0x4bf940
lea eax, [ebp - 0x8f0]
call fcn.0040f580
test eax, eax
jne 0x44b395
mov eax, 0x4bf940
call fcn.0040be48
mov edx, eax
mov eax, 0x4c6f00
call fcn.0045905c
jmp 0x44b3a4
mov edx, 0x4bf940
mov eax, 0x4c6f00
call fcn.0045905c
push dword [esi]
call fcn.004974c8
pop ecx
mov byte [0x4c749c], 0
mov eax, 0x4c7470
call fcn.0047d6a8
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret