Function at 0x485d8e
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x10
push 0
push 0
dec ecx
jne 0x485948
push ebx
push esi
push edi
mov dword [ebp - 0x10], eax
xor eax, eax
push ebp
push 0x485ef2
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x485f08
call fcn.00409564
test al, al
jne 0x485983
mov eax, 0x485f38
call fcn.00409564
test al, al
je 0x485eba
mov eax, 0x485f68
call fcn.00409564
test al, al
jne 0x4859ef
mov eax, 0x485f90
call fcn.00409564
test al, al
jne 0x4859ef
mov eax, 0x485f90
call fcn.00405064
push eax
call sub.kernel32.dll_DeleteFileA
push 0x485fac
push 0x485fb4
mov ecx, dword [0x48f7f8]
mov dl, 1
mov eax, dword [0x41668c]
call fcn.0041ab6c
mov ebx, eax
mov edx, 0x485f90
mov eax, ebx
call fcn.0041a974
mov eax, ebx
call fcn.00403cb0
mov edx, 1
mov eax, 0x485f90
call fcn.004843a4
lea edx, [ebp - 0x20]
mov eax, dword [0x48c9cc]
mov eax, dword [eax]
call fcn.00461fe4
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x1c]
call fcn.00409828
lea eax, [ebp - 0x1c]
mov edx, 0x485fc4
call fcn.00404ea0
mov ecx, dword [ebp - 0x1c]
mov dl, 1
mov eax, dword [0x421f78]
call fcn.00422030
mov dword [ebp - 0x14], eax
push 0x485fd8
lea eax, [ebp - 4]
push eax
mov ecx, 0x485fe4
mov edx, 0x485ff0
mov eax, dword [ebp - 0x14]
mov ebx, dword [eax]
call dword [ebx]
xor edx, edx
push ebp
push 0x485da4
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 0x10]
call fcn.00484074
xor eax, eax
push ebp
push 0x485b14
push dword fs:[eax]
mov dword fs:[eax], esp
mov dl, 1
mov eax, dword [0x423d5c]
call fcn.00423ec8
mov ebx, eax
mov edx, 0x80000002
mov eax, ebx
call fcn.00423fa4
mov cl, 1
mov edx, 0x485ffc
mov eax, ebx
call fcn.0042400c
mov ecx, 0x486020
mov edx, 0x486040
mov eax, ebx
call fcn.00424378
mov eax, ebx
call fcn.00423f74
mov edx, 0x80000002
mov eax, ebx
call fcn.00423fa4
mov cl, 1
mov edx, 0x486054
mov eax, ebx
call fcn.0042400c
mov ecx, 0x486070
mov edx, 0x486080
mov eax, ebx
call fcn.00424378
mov eax, ebx
call fcn.00423f74
mov edx, 0x80000001
mov eax, ebx
call fcn.00423fa4
mov cl, 1
mov edx, 0x486090
mov eax, ebx
call fcn.0042400c
mov ecx, 1
mov edx, 0x4860d4
mov eax, ebx
call fcn.00424420
mov eax, ebx
call fcn.00403cb0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x485b1e
push 0
lea eax, [ebp - 0x24]
push eax
mov ecx, 0x4860e8
mov edx, 0x4860f4
mov eax, dword [ebp - 0x14]
mov ebx, dword [eax]
call dword [ebx]
mov edx, dword [ebp - 0x24]
mov eax, 0x492e54
call fcn.00404c28
push 0
lea eax, [ebp - 8]
push eax
mov ecx, 0x486100
mov edx, 0x4860f4
mov eax, dword [ebp - 0x14]
mov ebx, dword [eax]
call dword [ebx]
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x48610c
mov edx, 0x4860f4
mov eax, dword [ebp - 0x14]
mov ebx, dword [eax]
call dword [ebx]
push 0
mov ecx, 0x486118
mov edx, 0x4860f4
mov eax, dword [ebp - 0x14]
mov ebx, dword [eax]
call dword [ebx + 8]
cmp dword [0x492e54], 0
je 0x485d8e
mov dl, 1
mov eax, dword [0x41630c]
call fcn.00403c80
mov ebx, eax
mov edx, 0x486124
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x68]
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x485d7b
inc eax
mov dword [ebp - 0x18], eax
xor esi, esi
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x30]
mov edx, esi
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x30]
mov ecx, 2
mov edx, 1
call fcn.004050cc
mov eax, dword [ebp - 0x2c]
lea edx, [ebp - 0x28]
call fcn.00408a5c
mov eax, dword [ebp - 0x28]
push eax
lea edx, [ebp - 0x34]
mov eax, 0x48614c
call fcn.00408a5c
mov edx, dword [ebp - 0x34]
pop eax
call fcn.00404ffc
jne 0x485c29
lea eax, [ebp - 0x38]
mov ecx, dword [0x492e54]
mov edx, 0x486158
call fcn.00404eec
mov ecx, dword [ebp - 0x38]
mov edx, esi
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0x20]
lea edx, [ebp - 0x3c]
mov eax, dword [ebp - 8]
call fcn.00408a5c
mov eax, dword [ebp - 0x3c]
mov edx, 0x486164
call fcn.00404ffc
jne 0x485c9a
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x48]
mov edx, esi
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x48]
mov ecx, 2
mov edx, 1
call fcn.004050cc
mov eax, dword [ebp - 0x44]
lea edx, [ebp - 0x40]
call fcn.00408a5c
mov eax, dword [ebp - 0x40]
push eax
lea edx, [ebp - 0x4c]
mov eax, 0x486170
call fcn.00408a5c
mov edx, dword [ebp - 0x4c]
pop eax
call fcn.00404ffc
jne 0x485c9a
mov ecx, 0x48617c
mov edx, esi
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0x20]
lea edx, [ebp - 0x50]
mov eax, dword [ebp - 8]
call fcn.00408a5c
mov eax, dword [ebp - 0x50]
mov edx, 0x48618c
call fcn.00404ffc
jne 0x485d0b
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x5c]
mov edx, esi
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x5c]
mov ecx, 2
mov edx, 1
call fcn.004050cc
mov eax, dword [ebp - 0x58]
lea edx, [ebp - 0x54]
call fcn.00408a5c
mov eax, dword [ebp - 0x54]
push eax
lea edx, [ebp - 0x60]
mov eax, 0x486170
call fcn.00408a5c
mov edx, dword [ebp - 0x60]
pop eax
call fcn.00404ffc
jne 0x485d0b
mov ecx, 0x486198
mov edx, esi
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0x20]
mov eax, dword [ebp - 0xc]
mov edx, 0x4861a8
call fcn.00404ffc
jne 0x485d71
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x6c]
mov edx, esi
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x6c]
mov ecx, 1
mov edx, 1
call fcn.004050cc
mov eax, dword [ebp - 0x68]
lea edx, [ebp - 0x64]
call fcn.00408a5c
mov eax, dword [ebp - 0x64]
push eax
lea edx, [ebp - 0x70]
mov eax, 0x4861b4
call fcn.00408a5c
mov edx, dword [ebp - 0x70]
pop eax
call fcn.00404ffc
jne 0x485d71
mov ecx, 0x4861c0
mov edx, esi
mov eax, ebx
mov edi, dword [eax]
call dword [edi + 0x20]
inc esi
dec dword [ebp - 0x18]
jne 0x485bc1
mov edx, 0x486124
mov eax, ebx
mov ecx, dword [eax]
call dword [ecx + 0x74]
mov eax, ebx
call fcn.00403cb0
push 1
push 0x4861c4
call sub.kernel32.dll_WinExec
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x485dae
xor edx, edx
push ebp
push 0x485ea8
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [0x492e18]
call fcn.0048425c
jmp 0x485dde
push 1
push 0x4861c4
call sub.kernel32.dll_WinExec
push 0x3e8
call sub.kernel32.dll_Sleep_2
mov eax, dword [ebp - 0x10]
call fcn.0048410c
test al, al
je 0x485dc8
mov eax, dword [ebp - 4]
call fcn.00409194
mov edx, dword [ebp - 0x10]
mov edx, dword [edx + 0x36c]
mov word [edx + 0x11ea], ax
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x374]
mov dl, 1
call fcn.004341b8
mov eax, dword [0x492e18]
mov eax, dword [eax + 0x36c]
call fcn.0047b5e8
lea eax, [ebp - 0x74]
call fcn.004844a0
mov ecx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x370]
mov eax, dword [eax + 0x270]
mov edx, 2
mov ebx, dword [eax]
call dword [ebx + 0x20]
lea edx, [ebp - 0x78]
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x370]
call fcn.00442e28
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x7c], eax
mov ebx, dword [ebp - 0x7c]
test ebx, ebx
je 0x485e69
sub ebx, 4
mov ebx, dword [ebx]
lea edx, [ebp - 0x80]
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x370]
call fcn.00442e28
mov eax, dword [ebp - 0x80]
call fcn.00405064
mov edx, eax
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 0x36c]
mov ecx, ebx
call fcn.0047bc90
push 0x3e8
call sub.kernel32.dll_Sleep_2
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x485eb2
mov eax, dword [ebp - 0x14]
call fcn.00403cb0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x485ef9
lea eax, [ebp - 0x80]
call fcn.00404bd4
lea eax, [ebp - 0x78]
call fcn.00404bd4
lea eax, [ebp - 0x74]
mov edx, 0x17
call fcn.00404bf8
lea eax, [ebp - 0xc]
mov edx, 3
call fcn.00404bf8
ret