Function at 0x439103
Capabilities:
Delete file
Resolve path using msvcrt
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x420
mov eax, dword [0x45eb24]
xor eax, ebp
mov dword [ebp - 4], eax
cmp word [0x4777a0], 1
push ebx
push esi
push edi
jae 0x43913a
cmp byte [0x467233], 0
jne 0x43913a
cmp byte [0x4672b7], 0
jne 0x43913a
call fcn.00438e47
mov ecx, dword [0x477684]
xor edi, edi
test ecx, ecx
je 0x439151
call fcn.004463db
mov dword [0x477684], edi
mov ecx, dword [0x4672f4]
test ecx, ecx
je 0x439166
call fcn.004463db
mov dword [0x4672f4], edi
mov ecx, dword [0x4777b4]
test ecx, ecx
je 0x43917b
call fcn.004463db
mov dword [0x4777b4], edi
mov ecx, dword [0x478d14]
test ecx, ecx
je 0x439192
mov esi, dword [ecx]
call fcn.004463db
mov ecx, esi
test esi, esi
jne 0x439185
mov edx, 0x428a3e
xor cl, cl
call fcn.00446224
mov dword [0x465ebc], eax
mov eax, dword [0x467284]
test eax, eax
jne 0x4391b4
mov eax, dword [0x467258]
add eax, 4
push 0x4289c0
mov ecx, eax
call fcn.00438fa1
mov edx, eax
mov ecx, 0x467240
call fcn.00437df5
mov ecx, 0x4289cc
mov dword [0x467240], eax
call fcn.00439046
cmp byte [0x465dce], 0
je 0x4391ee
mov ecx, 0x4289d0
call fcn.00439046
mov edx, dword [0x467280]
test edx, edx
je 0x439202
mov ecx, 0x4289e4
call fcn.00439093
cmp dword [0x46728c], edi
setne al
or byte [0x4672d1], al
je 0x43923b
mov ecx, dword [0x467240]
push 0x4289f0
call fcn.00438fa1
mov edx, eax
mov ecx, 0x46728c
call fcn.00437df5
mov edx, eax
mov ecx, 0x4289fc
call fcn.00439093
mov edx, dword [0x467240]
mov ecx, 0x428a08
call fcn.00439093
cmp dword [0x46727c], edi
je 0x439272
mov ecx, 0x428a14
call fcn.00439046
mov ecx, dword [0x46727c]
call fcn.00439046
mov ecx, 0x4289b8
call fcn.00439046
mov esi, dword [0x467258]
mov ebx, 0x428768
jmp 0x43928b
lea edx, [esi + 4]
mov ecx, ebx
call fcn.00439093
mov esi, dword [esi]
test esi, esi
jne 0x43927f
mov esi, dword [0x467250]
jmp 0x4392a3
lea edx, [esi + 4]
mov ecx, ebx
call fcn.00439093
mov esi, dword [esi]
test esi, esi
jne 0x439297
mov ecx, dword [0x465ebc]
call fcn.004463db
mov eax, dword [0x467278]
mov esi, 0x428110
mov dword [0x465ebc], edi
mov dword [ebp - 0x420], esi
mov dword [ebp - 0x41c], 0x428a3c
mov dword [ebp - 0x418], edi
test eax, eax
je 0x4392e6
lea ecx, [ebp - 0x420]
push ecx
push eax
jmp 0x439356
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll___p__wpgmptr]
push edi
push edi
push edi
push edi
push 0x100
lea ecx, [ebp - 0x414]
push ecx
push 3
lea ecx, [ebp - 0xc]
push ecx
push dword [eax]
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wsplitpath_s]
push 0x4289c0
lea eax, [ebp - 0x414]
push esi
push eax
lea edx, [ebp - 0xc]
lea ecx, [ebp - 0x214]
call fcn.00439416
lea eax, [ebp - 0x214]
push edi
push eax
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__waccess]
add esp, 0x38
test eax, eax
lea eax, [ebp - 0x420]
push eax
jne 0x439351
lea eax, [ebp - 0x214]
push eax
push edi
call dword [sym.imp.api_ms_win_crt_process_l1_1_0.dll__wspawnv]
jmp 0x43935d
push 0x428a28
push edi
call dword [sym.imp.api_ms_win_crt_process_l1_1_0.dll__wspawnvp]
mov esi, eax
add esp, 0xc
test esi, esi
je 0x439384
cmp esi, 0xffffffff
jne 0x439378
push edi
xor edx, edx
mov ecx, 0x3fc
call fcn.0043ecd1
push 0x428a3e
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wremove]
pop ecx
push esi
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3