Function at 0x44c714
Capabilities:
Get common file path
Get file system object information
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 5
add esp, 0xfffff004
push eax
dec eax
jne 0x44c71d
mov eax, dword [ebp - 4]
add esp, 0xfffffb54
push ebx
push esi
push edi
mov edi, 0x4b6fc4
mov eax, 0x4a61dc
call fcn.00495388
lea edx, [ebp - 0xab0]
push edx
push 0x44150d
push dword [0x4c2440]
push str.VIRSCAN
push dword [0x4af754]
call sub.USER32.DLL_DialogBoxParamA
test eax, eax
jne 0x44c77c
mov ecx, dword [ebp - 0x22c]
mov dword fs:[0], ecx
mov eax, ecx
jmp 0x44cd1d
mov word [ebp - 0x21c], 8
lea eax, [ebp - 0x110]
call fcn.0046b718
add dword [ebp - 0x210], 6
mov word [ebp - 0x21c], 0x14
cmp dword [0x4c4de0], 0
je 0x44c7e6
lea ecx, [ebp - 0x1ec0]
lea edx, [ebp - 0x16c0]
mov eax, 0x4c319c
call fcn.00462710
lea ecx, [ebp - 0x1ec0]
lea edx, [ebp - 0x16c0]
lea eax, [ebp - 0x110]
call fcn.0046b9e8
lea eax, [ebp - 0x110]
call fcn.0046bb0c
jmp 0x44c8b7
mov word [ebp - 0x21c], 0x20
lea eax, [ebp - 0x208]
call fcn.0040f5f8
add dword [ebp - 0x210], 4
mov word [ebp - 0x21c], 0x2c
lea edx, [ebp - 0x208]
mov eax, 0x4c2454
xor ecx, ecx
call fcn.00469058
push 0
push 1
push 0
push 1
lea ecx, [ebp - 0x110]
lea eax, [ebp - 0x208]
mov edx, 2
call fcn.0046f464
test al, al
jne 0x44c897
sub dword [ebp - 0x210], 4
lea eax, [ebp - 0x208]
mov edx, 2
call fcn.0040f6d0
dec dword [ebp - 0x210]
dec dword [ebp - 0x210]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.0043ccb8
sub dword [ebp - 0x210], 4
lea eax, [ebp - 0x110]
mov edx, 2
call fcn.0040f6d0
mov ecx, dword [ebp - 0x22c]
mov dword fs:[0], ecx
jmp 0x44cd1d
sub dword [ebp - 0x210], 4
lea eax, [ebp - 0x208]
mov edx, 2
call fcn.0040f6d0
mov word [ebp - 0x21c], 0x14
lea edx, [ebp - 0x22c0]
mov eax, str.Rar_VRXXXXXX
call fcn.0046e83c
test al, al
jne 0x44c90d
dec dword [ebp - 0x210]
dec dword [ebp - 0x210]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.0043ccb8
sub dword [ebp - 0x210], 4
lea eax, [ebp - 0x110]
mov edx, 2
call fcn.0040f6d0
mov ecx, dword [ebp - 0x22c]
mov dword fs:[0], ecx
jmp 0x44cd1d
lea eax, [ebp - 0x26c0]
push eax
push 0x400
call sub.KERNEL32.DLL_GetCurrentDirectoryA
mov word [ebp - 0x21c], 0x14
xor ebx, ebx
jmp 0x44cab4
lea eax, [ebp - 0x22c0]
push eax
call fcn.004968ec
pop ecx
lea ecx, [ebp - 0x36f0]
lea eax, [ebp - 0x110]
mov edx, ebx
call fcn.0046ba40
lea eax, [ebp - 0x36f0]
call fcn.0040ba60
push eax
lea edx, [ebp - 0x2ac0]
push edx
call fcn.00494f58
add esp, 8
lea eax, [ebp - 0x2ac0]
xor ecx, ecx
xor edx, edx
call fcn.0040a05c
test eax, eax
je 0x44c9c5
lea eax, [ebp - 0x2ac0]
mov dl, 1
call fcn.0040c310
lea eax, [ebp - 0x2ac0]
xor ecx, ecx
xor edx, edx
call fcn.0040a05c
test eax, eax
je 0x44c9c5
lea eax, [ebp - 0x2ac0]
push eax
mov eax, 0x1f7
call fcn.0041202c
push eax
call fcn.0044e46c
add esp, 8
mov eax, 0x4af120
call fcn.0042d020
jmp 0x44cab3
lea edx, [ebp - 0x2ac0]
push edx
call fcn.004968ec
pop ecx
call fcn.00456dc0
lea ecx, [ebp - 0x4320]
lea eax, [ebp - 0x110]
mov edx, ebx
call fcn.0046ba40
lea eax, [ebp - 0x4320]
lea edx, [edi + 0x3ef0]
call fcn.0040a9a4
lea ecx, [ebp - 0x4f50]
lea eax, [ebp - 0x110]
mov edx, ebx
call fcn.0046ba40
lea eax, [ebp - 0x4f50]
lea edx, [edi + 0x42f0]
add eax, 0x400
call fcn.0040a9ec
cmp dword [0x4c4de0], 0
jne 0x44ca47
push 1
push 0
lea ecx, [edi + 0x42f0]
lea edx, [edi + 0x3ef0]
mov eax, 0x4c319c
call fcn.00461128
mov ecx, dword [0x4c33a4]
mov dword [edi + 0x2aa8], ecx
mov eax, dword [edi + 0x4afc]
call fcn.0040f74c
mov eax, dword [edi + 0x4af0]
call fcn.0040f74c
mov edx, 0x4a4eb5
mov eax, dword [edi + 0x4af0]
call fcn.0040f77c
call fcn.0044e674
mov esi, eax
mov word [ebp - 0x21c], 0x14
mov eax, 0x4c319c
mov cl, 1
xor edx, edx
call fcn.0045d718
call fcn.0044e674
cmp esi, eax
je 0x44caaa
mov dword [0x4c4df4], 1
cmp dword [0x4c4df4], 0
jne 0x44cac6
inc ebx
cmp ebx, dword [ebp - 0xc]
jae 0x44cac6
cmp dword [0x4c4df0], 0
je 0x44c92e
xor ebx, ebx
cmp dword [0x4c4df4], 0
jne 0x44ccaa
push 0
lea edx, [edi + 0x3ef0]
xor ecx, ecx
mov eax, 9
call fcn.0047cd94
mov ebx, eax
lea eax, [ebp - 0xab0]
call fcn.0047ea94
mov eax, 0x543
call fcn.0041202c
call fcn.0047ea94
lea edx, [ebp - 0x22c0]
push edx
call fcn.004968ec
pop ecx
lea edx, [ebp - 0x22c0]
lea eax, [ebp - 0x6b0]
call fcn.00441ec0
push 0x2000
lea ecx, [ebp - 0x50b0]
push 0x160
push ecx
lea eax, [ebp - 0xab0]
push 0
push eax
call sub.SHELL32.DLL_SHGetFileInfoA
mov ecx, eax
shr ecx, 0x10
test cx, cx
jne 0x44cb61
mov edx, eax
and dx, 0xffff
cmp dx, 0x5a4d
je 0x44cb65
cmp dx, 0x4550
je 0x44cb65
xor eax, eax
jmp 0x44cb6a
mov eax, 1
test al, al
je 0x44cc2e
lea edx, [ebp - 0x22c0]
push edx
lea ecx, [ebp - 0x54b0]
push ecx
call fcn.00494f58
add esp, 8
lea eax, [ebp - 0x54b0]
call fcn.0040bf64
call fcn.0049d37c
push eax
push str.__rar_scan_d.bat
lea edx, [ebp - 0x54b0]
push edx
call fcn.00494f88
pop ecx
lea ecx, [ebp - 0x54b0]
add eax, ecx
push eax
call fcn.00497eb8
add esp, 0xc
push 0x4a4eed
lea eax, [ebp - 0x54b0]
push eax
call fcn.00496e90
add esp, 8
mov esi, eax
test esi, esi
je 0x44cc2e
xor eax, eax
mov al, byte [ebp - 0xab0]
cmp eax, 0x22
je 0x44cbee
lea eax, [ebp - 0xab0]
call fcn.00448650
lea edx, [ebp - 0x6b0]
push edx
lea ecx, [ebp - 0xab0]
push ecx
push str.__s__s_r_n_echo._r_n_pause
push esi
call fcn.00496ec4
add esp, 0x10
push esi
call fcn.00496994
pop ecx
lea eax, [ebp - 0x54b0]
push eax
lea edx, [ebp - 0xab0]
push edx
call fcn.00494f58
add esp, 8
mov byte [ebp - 0x6b0], 0
lea ecx, [ebp - 0x6b0]
lea eax, [ebp - 0x230]
push ecx
push 0
push eax
lea eax, [ebp - 0xab0]
push 0
lea ecx, [ebp - 0x22c0]
xor edx, edx
call fcn.00474a24
test al, al
jne 0x44cc7f
lea ecx, [ebp - 0xab0]
mov eax, 0x201
push ecx
call fcn.0041202c
push eax
call fcn.0044e46c
add esp, 8
jmp 0x44cc7f
push 0x14
call sub.KERNEL32.DLL_Sleep
call fcn.0044844c
push 0xc8
push dword [ebp - 0x230]
call sub.KERNEL32.DLL_WaitForSingleObject
cmp eax, 0x102
jne 0x44cc9f
cmp dword [0x4c4df0], 0
je 0x44cc73
push dword [ebp - 0x230]
call sub.KERNEL32.DLL_CloseHandle
lea edx, [ebp - 0x26c0]
push edx
call fcn.004968ec
pop ecx
lea eax, [ebp - 0x22c0]
call fcn.0046ea5c
test al, al
je 0x44ccd1
lea eax, [ebp - 0x22c0]
call fcn.0046e23c
test bl, bl
je 0x44cce0
push dword [0x4c244c]
call sub.USER32.DLL_DestroyWindow
dec dword [ebp - 0x210]
dec dword [ebp - 0x210]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.0043ccb8
sub dword [ebp - 0x210], 4
lea eax, [ebp - 0x110]
mov edx, 2
call fcn.0040f6d0
mov ecx, dword [ebp - 0x22c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret