Function at 0x486c70
Capabilities:
Delete file
Move file
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov ecx, 8
push 0
push 0
dec ecx
jne 0x486c78
mov eax, 0x485208
call fcn.004074e4
xor eax, eax
push ebp
push 0x486fbf
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x59e88c]
mov edx, 0x486fd4
call fcn.004057b4
jne 0x486cf4
push 0
push 0x487004
push 0x487008
push 0
call sub.user32.dll_MessageBoxW
push 0
push 0x487004
push 0x487040
push 0
call sub.user32.dll_MessageBoxW
push 0
push 0x487004
push 0x487070
push 1
call sub.user32.dll_MessageBoxA_1
push 0
push 0x487004
push 0x48709c
push 2
call sub.user32.dll_MessageBoxA_1
call fcn.00485040
call fcn.00484f8c
call fcn.00484adc
test al, al
jne 0x486d2d
push 0x10
push 0
lea edx, [ebp - 0x14]
mov eax, 0xb0fd
call fcn.004641cc
mov eax, dword [ebp - 0x14]
call fcn.0040581c
push eax
push 0
call sub.user32.dll_MessageBoxA_1
jmp 0x486f7f
call fcn.00485178
mov edx, dword [0x59efb0]
mov byte [edx], al
lea edx, [ebp - 0x20]
xor eax, eax
call fcn.004033c4
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x1c]
call fcn.00422c80
mov eax, dword [ebp - 0x1c]
lea edx, [ebp - 0x18]
call fcn.00422198
mov eax, dword [ebp - 0x18]
mov edx, 0x4870e4
call fcn.004057b4
jne 0x486e36
call fcn.00403364
cmp eax, 2
jle 0x486e72
push 0x32
call main
push 0
lea edx, [ebp - 0x24]
mov eax, 2
call fcn.004033c4
mov eax, dword [ebp - 0x24]
mov edx, 0xde
call fcn.004099cc
push eax
push 0
push 1
call sub.kernel32.dll_OpenProcess
push eax
call sub.kernel32.dll_TerminateProcess
push 0x64
call main
lea edx, [ebp - 0x2c]
mov eax, 3
call fcn.004033c4
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x28]
xor edx, edx
call fcn.004850f0
mov eax, dword [ebp - 0x28]
call fcn.00405cf8
push eax
call sub.kernel32.dll_DeleteFileW
push 0x28
call main
lea edx, [ebp - 0x34]
mov eax, 3
call fcn.004033c4
mov eax, dword [ebp - 0x34]
lea ecx, [ebp - 0x30]
xor edx, edx
call fcn.004850f0
mov eax, dword [ebp - 0x30]
call fcn.00405cf8
push eax
push 0x4870f4
call sub.kernel32.dll_MoveFileW
test eax, eax
je 0x486dae
lea edx, [ebp - 0x38]
mov eax, 3
call fcn.004033c4
mov edx, dword [ebp - 0x38]
mov ecx, 0x487118
xor eax, eax
call fcn.00463934
jmp 0x486f7f
call fcn.00403364
test eax, eax
jne 0x486e48
mov byte [0x59e888], 0
jmp 0x486e72
push 1
call main
lea edx, [ebp - 0x3c]
mov eax, 1
call fcn.004033c4
mov eax, dword [ebp - 0x3c]
mov edx, 0x487118
call fcn.004057b4
je 0x486e72
mov byte [0x59e888], 0
cmp byte [0x59e888], 0
jne 0x486e99
lea edx, [ebp - 0x40]
xor eax, eax
call fcn.004033c4
mov edx, dword [ebp - 0x40]
mov ecx, 0x487118
xor eax, eax
call fcn.00463934
jmp 0x486f7f
push 1
call main
call fcn.00463e30
call fcn.0046505c
nop
nop
mov eax, 0x487128
call fcn.0047feb0
test al, al
jne 0x486ee4
mov byte [0x59e884], 1
mov edx, dword [0x47fe60]
xor eax, eax
call fcn.00480c20
mov edx, dword [0x59ea74]
mov dword [edx], eax
call fcn.004268a4
mov eax, dword [0x59ea74]
xor edx, edx
mov dword [eax], edx
mov eax, 0x487128
call fcn.0047feb0
test al, al
je 0x486f7f
mov eax, 0x48712c
call fcn.00422bb8
test al, al
je 0x486f28
mov eax, 0x487134
call fcn.00422bb8
test al, al
je 0x486f28
mov eax, 0x487140
call fcn.00422bb8
test al, al
je 0x486f28
mov eax, dword [0x59eee4]
mov byte [eax], 1
mov eax, dword [0x59eee4]
cmp byte [eax], 0
jne 0x486f3a
mov eax, dword [0x59ed88]
mov byte [eax], 0
mov edx, dword [0x481e00]
xor eax, eax
call fcn.0048460c
mov edx, dword [0x59ea0c]
mov dword [edx], eax
call fcn.004268a4
mov eax, dword [0x59ee70]
cmp byte [eax], 0
je 0x486f7f
push 1
call main
mov edx, dword [0x47bd00]
xor eax, eax
call fcn.0047f53c
mov edx, dword [0x59eac8]
mov dword [edx], eax
call fcn.004268a4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x486fc6
lea eax, [ebp - 0x40]
mov edx, 4
call fcn.004053b0
lea eax, [ebp - 0x30]
call fcn.00405b68
lea eax, [ebp - 0x2c]
call fcn.0040538c
lea eax, [ebp - 0x28]
call fcn.00405b68
lea eax, [ebp - 0x24]
mov edx, 5
call fcn.004053b0
ret