Function at 0x486c70
Capabilities:
Delete file
Move file
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov ecx, 8
push 0
push 0
dec ecx
jne 0x486c78
mov eax, 0x485158
call fcn.004074e4
xor eax, eax
push ebp
push 0x486fbf
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x59e88c]
mov edx, 0x486fd4
call fcn.004057b4
jne 0x486cf4
push 0
push 0x487004
push 0x487008
push 0
call sub.user32.dll_MessageBoxW
push 0
push 0x487004
push 0x487040
push 0
call sub.user32.dll_MessageBoxW
push 0
push 0x487004
push 0x487070
push 1
call sub.user32.dll_MessageBoxA_1
push 0
push 0x487004
push 0x48709c
push 2
call sub.user32.dll_MessageBoxA_1
call fcn.00484f90
call fcn.00484edc
call fcn.00484a2c
test al, al
jne 0x486d2d
push 0x10
push 0
lea edx, [ebp - 0x14]
mov eax, 0xb0fd
call fcn.00462630
mov eax, dword [ebp - 0x14]
call fcn.0040581c
push eax
push 0
call sub.user32.dll_MessageBoxA_1
jmp 0x486f7f
call fcn.004850c8
mov edx, dword [0x59efb0]
mov byte [edx], al
lea edx, [ebp - 0x20]
xor eax, eax
call fcn.004033c4
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x1c]
call fcn.00422c80
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00422198
mov eax, dword [ebp - 0x18]
mov edx, 0x4870e4
call fcn.004057b4
jne 0x486e36
call fcn.00403364
cmp eax, 2
jle 0x486e72
push 0x32
call main
push 0
lea edx, [ebp - 0x24]
mov eax, 2
call fcn.004033c4
mov eax, dword [ebp - 0x24]
mov edx, 0xde
call fcn.004099cc
push eax
push 0
push 1
call sub.kernel32.dll_OpenProcess
push eax
call sub.kernel32.dll_TerminateProcess
push 0x64
call main
lea edx, [ebp - 0x2c]
mov eax, 3
call fcn.004033c4
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x28]
xor edx, edx
call fcn.00485040
mov eax, dword [ebp - 0x28]
call fcn.00405cf8
push eax
call sub.kernel32.dll_DeleteFileW
push 0x28
call main
lea edx, [ebp - 0x34]
mov eax, 3
call fcn.004033c4
mov eax, dword [ebp - 0x34]
lea ecx, [ebp - 0x30]
xor edx, edx
call fcn.00485040
mov eax, dword [ebp - 0x30]
call fcn.00405cf8
push eax
push 0x4870f4
call sub.kernel32.dll_MoveFileW
test eax, eax
je 0x486dae
lea edx, [ebp - 0x38]
mov eax, 3
call fcn.004033c4
mov edx, dword [ebp - 0x38]
mov ecx, 0x487118
xor eax, eax
call fcn.00461d98
jmp 0x486f7f
call fcn.00403364
test eax, eax
jne 0x486e48
mov byte [0x59e888], 0
jmp 0x486e72
push 1
call main
lea edx, [ebp - 0x3c]
mov eax, 1
call fcn.004033c4
mov eax, dword [ebp - 0x3c]
mov edx, 0x487118
call fcn.004057b4
je 0x486e72
mov byte [0x59e888], 0
cmp byte [0x59e888], 0
jne 0x486e99
lea edx, [ebp - 0x40]
xor eax, eax
call fcn.004033c4
mov edx, dword [ebp - 0x40]
mov ecx, 0x487118
xor eax, eax
call fcn.00461d98
jmp 0x486f7f
push 1
call main
call fcn.00462294
call fcn.004634c0
nop
nop
mov eax, 0x487128
call fcn.0047fe00
test al, al
jne 0x486ee4
mov byte [0x59e884], 1
mov edx, dword [0x47fdb0]
xor eax, eax
call fcn.00480b70
mov edx, dword [0x59ea74]
mov dword [edx], eax
call fcn.004268a4
mov eax, dword [0x59ea74]
xor edx, edx
mov dword [eax], edx
mov eax, 0x487128
call fcn.0047fe00
test al, al
je 0x486f7f
mov eax, 0x48712c
call fcn.00422bb8
test al, al
je 0x486f28
mov eax, 0x487134
call fcn.00422bb8
test al, al
je 0x486f28
mov eax, 0x487140
call fcn.00422bb8
test al, al
je 0x486f28
mov eax, dword [0x59eee4]
mov byte [eax], 1
mov eax, dword [0x59eee4]
cmp byte [eax], 0
jne 0x486f3a
mov eax, dword [0x59ed88]
mov byte [eax], 0
mov edx, dword [0x481d50]
xor eax, eax
call fcn.0048455c
mov edx, dword [0x59ea0c]
mov dword [edx], eax
call fcn.004268a4
mov eax, dword [0x59ee70]
cmp byte [eax], 0
je 0x486f7f
push 1
call main
mov edx, dword [0x47bc50]
xor eax, eax
call fcn.0047f48c
mov edx, dword [0x59eac8]
mov dword [edx], eax
call fcn.004268a4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x486fc6
lea eax, [ebp - 0x40]
mov edx, 4
call fcn.004053b0
lea eax, [ebp - 0x30]
call fcn.00405b68
lea eax, [ebp - 0x2c]
call fcn.0040538c
lea eax, [ebp - 0x28]
call fcn.00405b68
lea eax, [ebp - 0x24]
mov edx, 5
call fcn.004053b0
ret