Function at 0x4484d4
Capabilities:
Get common file path
Get file system object information
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 5
add esp, 0xfffff004
push eax
dec eax
jne 0x4484dd
mov eax, dword [ebp - 4]
add esp, 0xfffffb54
push ebx
push esi
push edi
mov edi, 0x4ae7ec
mov eax, 0x49ddd8
call fcn.0048dbf8
lea edx, [ebp - 0xab0]
push edx
push 0x43d916
push dword [0x4b9820]
push str.VIRSCAN
push dword [0x4a6fb8]
call sub.USER32.DLL_DialogBoxParamA
test eax, eax
jne 0x44853c
mov ecx, dword [ebp - 0x22c]
mov dword fs:[0], ecx
mov eax, ecx
jmp 0x448add
mov word [ebp - 0x21c], 8
lea eax, [ebp - 0x110]
call fcn.00464d88
add dword [ebp - 0x210], 6
mov word [ebp - 0x21c], 0x14
cmp dword [0x4bc1a8], 0
je 0x4485a6
lea ecx, [ebp - 0x1ec0]
lea edx, [ebp - 0x16c0]
mov eax, 0x4ba564
call fcn.0045d0fc
lea ecx, [ebp - 0x1ec0]
lea edx, [ebp - 0x16c0]
lea eax, [ebp - 0x110]
call fcn.00465058
lea eax, [ebp - 0x110]
call fcn.0046517c
jmp 0x448677
mov word [ebp - 0x21c], 0x20
lea eax, [ebp - 0x208]
call fcn.0040ee04
add dword [ebp - 0x210], 4
mov word [ebp - 0x21c], 0x2c
lea edx, [ebp - 0x208]
mov eax, 0x4b9834
xor ecx, ecx
call fcn.00463858
push 0
push 1
push 0
push 1
lea ecx, [ebp - 0x110]
lea eax, [ebp - 0x208]
mov edx, 2
call fcn.00468854
test al, al
jne 0x448657
sub dword [ebp - 0x210], 4
lea eax, [ebp - 0x208]
mov edx, 2
call fcn.0040ef20
dec dword [ebp - 0x210]
dec dword [ebp - 0x210]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.00439274
sub dword [ebp - 0x210], 4
lea eax, [ebp - 0x110]
mov edx, 2
call fcn.0040ef20
mov ecx, dword [ebp - 0x22c]
mov dword fs:[0], ecx
jmp 0x448add
sub dword [ebp - 0x210], 4
lea eax, [ebp - 0x208]
mov edx, 2
call fcn.0040ef20
mov word [ebp - 0x21c], 0x14
lea edx, [ebp - 0x22c0]
mov eax, str.Rar_VRXXXXXX
call fcn.00467cd4
test al, al
jne 0x4486cd
dec dword [ebp - 0x210]
dec dword [ebp - 0x210]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.00439274
sub dword [ebp - 0x210], 4
lea eax, [ebp - 0x110]
mov edx, 2
call fcn.0040ef20
mov ecx, dword [ebp - 0x22c]
mov dword fs:[0], ecx
jmp 0x448add
lea eax, [ebp - 0x26c0]
push eax
push 0x400
call sub.KERNEL32.DLL_GetCurrentDirectoryA
mov word [ebp - 0x21c], 0x14
xor ebx, ebx
jmp 0x448874
lea eax, [ebp - 0x22c0]
push eax
call fcn.0048f15c
pop ecx
lea ecx, [ebp - 0x36f0]
lea eax, [ebp - 0x110]
mov edx, ebx
call fcn.004650b0
lea eax, [ebp - 0x36f0]
call fcn.0040b578
push eax
lea edx, [ebp - 0x2ac0]
push edx
call fcn.0048d758
add esp, 8
lea eax, [ebp - 0x2ac0]
xor ecx, ecx
xor edx, edx
call fcn.00409c34
test eax, eax
je 0x448785
lea eax, [ebp - 0x2ac0]
mov dl, 1
call fcn.0040bda0
lea eax, [ebp - 0x2ac0]
xor ecx, ecx
xor edx, edx
call fcn.00409c34
test eax, eax
je 0x448785
lea eax, [ebp - 0x2ac0]
push eax
mov eax, 0x1f7
call fcn.004116e0
push eax
call fcn.0044a170
add esp, 8
mov eax, 0x4a6984
call fcn.0042981c
jmp 0x448873
lea edx, [ebp - 0x2ac0]
push edx
call fcn.0048f15c
pop ecx
call fcn.004524d0
lea ecx, [ebp - 0x4320]
lea eax, [ebp - 0x110]
mov edx, ebx
call fcn.004650b0
lea eax, [ebp - 0x4320]
lea edx, [edi + 0x3ed8]
call fcn.0040a568
lea ecx, [ebp - 0x4f50]
lea eax, [ebp - 0x110]
mov edx, ebx
call fcn.004650b0
lea eax, [ebp - 0x4f50]
lea edx, [edi + 0x42d8]
add eax, 0x400
call fcn.0040a5b0
cmp dword [0x4bc1a8], 0
jne 0x448807
push 1
push 0
lea ecx, [edi + 0x42d8]
lea edx, [edi + 0x3ed8]
mov eax, 0x4ba564
call fcn.0045bbc8
mov ecx, dword [0x4ba76c]
mov dword [edi + 0x2a90], ecx
mov eax, dword [edi + 0x4ae4]
call fcn.0040ef9c
mov eax, dword [edi + 0x4ad8]
call fcn.0040ef9c
mov edx, 0x49cb51
mov eax, dword [edi + 0x4ad8]
call fcn.0040efcc
call fcn.0044a3d0
mov esi, eax
mov word [ebp - 0x21c], 0x14
mov eax, 0x4ba564
mov cl, 1
xor edx, edx
call fcn.00458638
call fcn.0044a3d0
cmp esi, eax
je 0x44886a
mov dword [0x4bc1b8], 1
cmp dword [0x4bc1b8], 0
jne 0x448886
inc ebx
cmp ebx, dword [ebp - 0xc]
jae 0x448886
cmp dword [0x4bc1b4], 0
je 0x4486ee
xor ebx, ebx
cmp dword [0x4bc1b8], 0
jne 0x448a6a
push 0
lea edx, [edi + 0x3ed8]
xor ecx, ecx
mov eax, 9
call fcn.00475d6c
mov ebx, eax
lea eax, [ebp - 0xab0]
call fcn.00477974
mov eax, 0x543
call fcn.004116e0
call fcn.00477974
lea edx, [ebp - 0x22c0]
push edx
call fcn.0048f15c
pop ecx
lea edx, [ebp - 0x22c0]
lea eax, [ebp - 0x6b0]
call fcn.0043e26b
push 0x2000
lea ecx, [ebp - 0x50b0]
push 0x160
push ecx
lea eax, [ebp - 0xab0]
push 0
push eax
call sub.SHELL32.DLL_SHGetFileInfoA
mov ecx, eax
shr ecx, 0x10
test cx, cx
jne 0x448921
mov edx, eax
and dx, 0xffff
cmp dx, 0x5a4d
je 0x448925
cmp dx, 0x4550
je 0x448925
xor eax, eax
jmp 0x44892a
mov eax, 1
test al, al
je 0x4489ee
lea edx, [ebp - 0x22c0]
push edx
lea ecx, [ebp - 0x54b0]
push ecx
call fcn.0048d758
add esp, 8
lea eax, [ebp - 0x54b0]
call fcn.0040ba60
call fcn.00495aec
push eax
push str.__rar_scan_d.bat
lea edx, [ebp - 0x54b0]
push edx
call fcn.0048d788
pop ecx
lea ecx, [ebp - 0x54b0]
add eax, ecx
push eax
call fcn.00490628
add esp, 0xc
push 0x49cb89
lea eax, [ebp - 0x54b0]
push eax
call fcn.0048f700
add esp, 8
mov esi, eax
test esi, esi
je 0x4489ee
xor eax, eax
mov al, byte [ebp - 0xab0]
cmp eax, 0x22
je 0x4489ae
lea eax, [ebp - 0xab0]
call fcn.0044445c
lea edx, [ebp - 0x6b0]
push edx
lea ecx, [ebp - 0xab0]
push ecx
push str.__s__s_r_n_echo._r_n_pause
push esi
call fcn.0048f734
add esp, 0x10
push esi
call fcn.0048f204
pop ecx
lea eax, [ebp - 0x54b0]
push eax
lea edx, [ebp - 0xab0]
push edx
call fcn.0048d758
add esp, 8
mov byte [ebp - 0x6b0], 0
lea ecx, [ebp - 0x6b0]
lea eax, [ebp - 0x230]
push ecx
push 0
push eax
lea eax, [ebp - 0xab0]
push 0
lea ecx, [ebp - 0x22c0]
xor edx, edx
call fcn.0046dc50
test al, al
jne 0x448a3f
lea ecx, [ebp - 0xab0]
mov eax, 0x201
push ecx
call fcn.004116e0
push eax
call fcn.0044a170
add esp, 8
jmp 0x448a3f
push 0x14
call sub.KERNEL32.DLL_Sleep
call fcn.00444258
push 0xc8
push dword [ebp - 0x230]
call sub.KERNEL32.DLL_WaitForSingleObject
cmp eax, 0x102
jne 0x448a5f
cmp dword [0x4bc1b4], 0
je 0x448a33
push dword [ebp - 0x230]
call sub.KERNEL32.DLL_CloseHandle
lea edx, [ebp - 0x26c0]
push edx
call fcn.0048f15c
pop ecx
lea eax, [ebp - 0x22c0]
call fcn.00467ef4
test al, al
je 0x448a91
lea eax, [ebp - 0x22c0]
call fcn.00467754
test bl, bl
je 0x448aa0
push dword [0x4b982c]
call sub.USER32.DLL_DestroyWindow
dec dword [ebp - 0x210]
dec dword [ebp - 0x210]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.00439274
sub dword [ebp - 0x210], 4
lea eax, [ebp - 0x110]
mov edx, 2
call fcn.0040ef20
mov ecx, dword [ebp - 0x22c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret