Function at 0x1000bedb
Capabilities:
Delete file

Disassembly:
mov eax, 0x1005e213
call fcn.1005db30
sub esp, 0x74
push ebx
push esi
push edi
xor ebx, ebx
mov esi, edx
mov edi, ecx
mov dword [ebp - 0x20], ebx
call fcn.10008284
push ecx
push eax
lea ecx, [ebp - 0x38]
call fcn.1000ca62
mov dword [ebp - 4], ebx
mov dword [ebp - 0x18], 0x68de
mov dword [ebp - 0x14], 0x1516
push 2
mov dword [ebp - 0x1c], ebx
pop ebx
jmp 0x1000bf2a
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x30], 0xffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x1000bf1c
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x30], 0x90350d8a
jae 0x1000bf41
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
imul ecx, dword [ebp - 0x2c]
test ecx, ecx
setns al
cmp eax, 1
mov eax, dword [ebp - 0x2c]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x30]
setl dl
xor ecx, ecx
cmp edx, eax
setle cl
xor edx, edx
cmp ecx, dword [ebp - 0x2c]
jle 0x1000bf8e
cmp dword [ebp - 0x18], edx
jne 0x1000bf8e
mov ecx, edx
jmp 0x1000bf91
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x14]
imul eax, ecx
test eax, eax
je 0x1000bfc3
mov dword [ebp - 0x18], edx
jmp 0x1000bfbb
mov dword [ebp - 0x14], edx
jmp 0x1000bfb3
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x30], 0xfff8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1000bfa5
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jle 0x1000bfa0
jmp 0x1000c010
mov dword [ebp - 0x14], 0xffffffef
jmp 0x1000bfe1
mov byte [ebp - 0xd], dl
cmp byte [ebp - 0xd], 0
je 0x1000bfde
push edx
call dword [sym.imp.GDI32.dll_CreateFontIndirectA]
xor edx, edx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x1b
jl 0x1000bfcc
mov dword [ebp - 0x14], 1
cmp dword [ebp - 0x14], edx
jl 0x1000c010
mov byte [ebp - 0xd], dl
cmp byte [ebp - 0xd], 0
je 0x1000c00b
push edx
push edx
push edx
push edx
push edx
push edx
push edx
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
xor edx, edx
dec dword [ebp - 0x14]
jns 0x1000bff3
mov edx, dword [ebp - 0x38]
add esi, 0xffffd3ba
mov ecx, edx
mov eax, dword [edx + 4]
cmp byte [eax + 0xd], 0
jne 0x1000c049
cmp dword [eax + 0x10], esi
jge 0x1000c02e
mov eax, dword [eax + 8]
jmp 0x1000c032
mov ecx, eax
mov eax, dword [eax]
cmp byte [eax + 0xd], 0
je 0x1000c024
cmp ecx, edx
je 0x1000c049
cmp esi, dword [ecx + 0x10]
jl 0x1000c049
mov dword [ebp - 0x24], ecx
lea esi, [ebp - 0x24]
jmp 0x1000c04f
mov dword [ebp - 0x28], edx
lea esi, [ebp - 0x28]
mov esi, dword [esi]
mov dword [ebp - 0x14], 0x8ec0ae97
mov dword [ebp - 0x14], 0
jmp 0x1000c0fa
push 4
lea ecx, [ebp - 0x50]
call fcn.1000c44b
xor edx, edx
mov dword [ebp - 0x18], 0xc6e5c7a0
mov dword [ebp - 0x1c], edx
jmp 0x1000c08c
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x50]
mov dword [eax + ecx*4], 0x386cce57
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1000c07c
mov byte [ebp - 0xd], dl
cmp byte [ebp - 0xd], dl
je 0x1000c0a3
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
xor edx, edx
push 3
mov dword [ebp - 0x18], edx
pop ecx
jmp 0x1000c0ea
mov dword [ebp - 0x1c], edx
jmp 0x1000c0be
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x44], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1000c0b0
mov dword [ebp - 0x44], ecx
cmp dword [ebp - 0x44], edx
jl 0x1000c0e7
mov byte [ebp - 0xd], dl
cmp byte [ebp - 0xd], 0
je 0x1000c0df
push edx
push edx
push edx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
xor edx, edx
dec dword [ebp - 0x44]
jns 0x1000c0cb
push 3
pop ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jle 0x1000c0ab
lea ecx, [ebp - 0x50]
call fcn.1000c4ce
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xe
je 0x1000c064
mov eax, dword [0x10076c48]
test al, 1
jne 0x1000c139
and dword [0x1007b0ac], 0
or eax, 1
mov dword [0x10076c48], eax
xor eax, eax
push 0x1005f32c
mov dword [0x1007b0b0], 7
mov word [0x1007b09c], ax
call fcn.10048a92
pop ecx
cmp esi, dword [ebp - 0x38]
je 0x1000c156
push dword [esi + 0x18]
mov edx, dword [esi + 0x14]
lea ecx, [ebp - 0x80]
call fcn.10001bcc
pop ecx
xor ebx, ebx
mov byte [ebp - 4], 1
inc ebx
jmp 0x1000c166
push 0x1007b09c
lea ecx, [ebp - 0x68]
call fcn.1000c348
mov dword [ebp - 4], ebx
push eax
mov ecx, edi
mov dword [ebp - 0x20], ebx
call fcn.1000c348
or ebx, 4
test bl, 2
je 0x1000c188
push 0
push 1
lea ecx, [ebp - 0x68]
and ebx, 0xfffffffd
call fcn.1000ca18
test bl, 1
je 0x1000c199
push 0
push 1
lea ecx, [ebp - 0x80]
call fcn.1000ca18
lea ecx, [ebp - 0x38]
call fcn.1000c510
mov ecx, dword [ebp - 0xc]
mov eax, edi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret