Function at 0x485c6c
Capabilities:
Delete file
Move file
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov ecx, 8
push 0
push 0
dec ecx
jne 0x485c74
mov eax, 0x484b84
call fcn.004074e4
xor eax, eax
push ebp
push 0x485fb6
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x59d88c]
mov edx, 0x485fcc
call fcn.004057b4
jne 0x485cf0
push 0
push 0x485fe4
push 0x485fe8
push 0
call sub.user32.dll_MessageBoxW
push 0
push 0x485fe4
push 0x486020
push 0
call sub.user32.dll_MessageBoxW
push 0
push 0x485fe4
push 0x486050
push 1
call sub.user32.dll_MessageBoxA_1
push 0
push 0x485fe4
push 0x48607c
push 2
call sub.user32.dll_MessageBoxA_1
call fcn.004849bc
call fcn.00484908
call fcn.00484458
test al, al
jne 0x485d29
push 0x10
push 0
lea edx, [ebp - 0x14]
mov eax, 0xb0fd
call fcn.004624e4
mov eax, dword [ebp - 0x14]
call fcn.0040581c
push eax
push 0
call sub.user32.dll_MessageBoxA_1
jmp 0x485f76
call fcn.00484af4
mov edx, dword [0x59dfb0]
mov byte [edx], al
lea edx, [ebp - 0x20]
xor eax, eax
call fcn.004033c4
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x1c]
call fcn.00422c80
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00422198
mov eax, dword [ebp - 0x18]
mov edx, 0x4860c4
call fcn.004057b4
jne 0x485e32
call fcn.00403364
cmp eax, 2
jle 0x485e6e
push 0x32
call main
push 0
lea edx, [ebp - 0x24]
mov eax, 2
call fcn.004033c4
mov eax, dword [ebp - 0x24]
mov edx, 0xde
call fcn.004099cc
push eax
push 0
push 1
call sub.kernel32.dll_OpenProcess
push eax
call sub.kernel32.dll_TerminateProcess
push 0x64
call main
lea edx, [ebp - 0x2c]
mov eax, 3
call fcn.004033c4
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x28]
xor edx, edx
call fcn.00484a6c
mov eax, dword [ebp - 0x28]
call fcn.00405cf8
push eax
call sub.kernel32.dll_DeleteFileW
push 0x28
call main
lea edx, [ebp - 0x34]
mov eax, 3
call fcn.004033c4
mov eax, dword [ebp - 0x34]
lea ecx, [ebp - 0x30]
xor edx, edx
call fcn.00484a6c
mov eax, dword [ebp - 0x30]
call fcn.00405cf8
push eax
push 0x4860d4
call sub.kernel32.dll_MoveFileW
test eax, eax
je 0x485daa
lea edx, [ebp - 0x38]
mov eax, 3
call fcn.004033c4
mov edx, dword [ebp - 0x38]
mov ecx, 0x4860f8
xor eax, eax
call fcn.00461d98
jmp 0x485f76
call fcn.00403364
test eax, eax
jne 0x485e44
mov byte [0x59d888], 0
jmp 0x485e6e
push 1
call main
lea edx, [ebp - 0x3c]
mov eax, 1
call fcn.004033c4
mov eax, dword [ebp - 0x3c]
mov edx, 0x4860f8
call fcn.004057b4
je 0x485e6e
mov byte [0x59d888], 0
cmp byte [0x59d888], 0
jne 0x485e95
lea edx, [ebp - 0x40]
xor eax, eax
call fcn.004033c4
mov edx, dword [ebp - 0x40]
mov ecx, 0x4860f8
xor eax, eax
call fcn.00461d98
jmp 0x485f76
push 1
call main
call fcn.00463398
nop
nop
mov eax, 0x486108
call fcn.0047f834
test al, al
jne 0x485edb
mov byte [0x59d884], 1
mov edx, dword [0x47f7e4]
xor eax, eax
call fcn.004805a4
mov edx, dword [0x59da74]
mov dword [edx], eax
call fcn.004268a4
mov eax, dword [0x59da74]
xor edx, edx
mov dword [eax], edx
mov eax, 0x486108
call fcn.0047f834
test al, al
je 0x485f76
mov eax, 0x48610c
call fcn.00422bb8
test al, al
je 0x485f1f
mov eax, 0x486114
call fcn.00422bb8
test al, al
je 0x485f1f
mov eax, 0x486120
call fcn.00422bb8
test al, al
je 0x485f1f
mov eax, dword [0x59dee4]
mov byte [eax], 1
mov eax, dword [0x59dee4]
cmp byte [eax], 0
jne 0x485f31
mov eax, dword [0x59dd88]
mov byte [eax], 0
mov edx, dword [0x481784]
xor eax, eax
call fcn.00483f90
mov edx, dword [0x59da0c]
mov dword [edx], eax
call fcn.004268a4
mov eax, dword [0x59de70]
cmp byte [eax], 0
je 0x485f76
push 1
call main
mov edx, dword [0x47b684]
xor eax, eax
call fcn.0047eec0
mov edx, dword [0x59dac8]
mov dword [edx], eax
call fcn.004268a4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x485fbd
lea eax, [ebp - 0x40]
mov edx, 4
call fcn.004053b0
lea eax, [ebp - 0x30]
call fcn.00405b68
lea eax, [ebp - 0x2c]
call fcn.0040538c
lea eax, [ebp - 0x28]
call fcn.00405b68
lea eax, [ebp - 0x24]
mov edx, 5
call fcn.004053b0
ret