Function at 0x465c08
Capabilities:
Delete file
Get memory capacity

Disassembly:
push edi
push ebp
push ebx
sub esp, 0x2d0
push 0x87c340
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
call fcn.00466044
lea eax, [esp + 0x1ac]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
mov ebx, dword [esp + 0x1b4]
shr ebx, 0x14
mov ebp, dword [esp + 0x1b8]
shr ebp, 0x14
movzx eax, byte [0x8722dc]
push eax
push 0x87c34c
push 0x8782b0
call fcn.00423904
add esp, 0xc
mov edi, 0x872ca4
xor eax, eax
mov dh, byte [edi]
mov ecx, edi
test dh, dh
je 0x465c74
inc ecx
inc eax
mov dl, byte [ecx]
test dl, dl
jne 0x465c6c
test eax, eax
jbe 0x46603b
xor eax, eax
mov dword [esp + 0x2cc], esi
mov esi, ebx
mov ebx, eax
movzx edx, byte [ebx + 0x872ca4]
mov byte [ebx + 0x872cd8], dl
inc ebx
mov edi, 0x872ca4
xor eax, eax
mov dh, byte [edi]
mov ecx, edi
test dh, dh
je 0x465cae
inc ecx
inc eax
mov dl, byte [ecx]
test dl, dl
jne 0x465ca6
cmp ebx, eax
jb 0x465c89
mov eax, ebx
mov ebx, esi
mov esi, dword [esp + 0x2cc]
mov byte [eax + 0x872cd8], 0
push 0x872cd8
push 0x87c358
push 0x8782b0
call fcn.00423904
movzx eax, byte [0x5b85c8]
push eax
push 0x87c368
push 0x8782b0
call fcn.00423904
movzx eax, byte [0x5b85d4]
push eax
push 0x87c378
push 0x8782b0
call fcn.00423904
movzx eax, byte [0x5b85d8]
push eax
push 0x87c388
push 0x8782b0
call fcn.00423904
movsx eax, byte [0x59b714]
push eax
push 0x87c398
push 0x8782b0
call fcn.00423904
movsx eax, byte [0x59b710]
push eax
push 0x87c3ac
push 0x8782b0
call fcn.00423904
push dword [0x8722e0]
push 0x87c3c0
push 0x8782b0
call fcn.00423904
push ebx
push 0x87c3d4
push 0x8782b0
call fcn.00423904
push ebp
push 0x87c3e8
push 0x8782b0
call fcn.00423904
add esp, 0x6c
push dword [0x872358]
push dword [0x872354]
push dword [0x872350]
push dword [0x87234c]
push 0x87c3fc
push 0x8782b0
call fcn.00423904
add esp, 0x18
call fcn.0045c22c
movsx eax, al
push eax
push 0x87c420
push 0x8782b0
call fcn.00423904
push 0x87c42c
push 0x8782b0
call fcn.00423904
add esp, 0x14
push 0x878200
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x878208
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ebp, eax
test ebp, ebp
je 0x466024
lea edx, [esp + 4]
push 0x1a8
push 0
push edx
call fcn.0046cdb0
add esp, 0xc
mov dword [esp + 4], 0x1a8
xor ecx, ecx
lea edx, [esp + 4]
push ecx
push edx
push ecx
push ecx
call ebp
test eax, eax
je 0x465e84
xor ebx, ebx
mov ecx, dword [esp + 0xa8]
mov edx, ecx
and edx, 1
and ecx, 4
test edx, edx
je 0x465e40
mov eax, 0x87c44c
jmp 0x465e45
mov eax, 0x8782b0
test ecx, ecx
je 0x465e50
mov edx, 0x87c450
jmp 0x465e55
mov edx, 0x8782b0
lea edi, [esp + 8]
lea ecx, [esp + 0x28]
push edx
push eax
push ecx
push edi
push 0x87c434
push 0x8782b0
call fcn.00423904
add esp, 0x18
inc ebx
xor ecx, ecx
lea edx, [esp + 4]
push ecx
push edx
push ebx
push ecx
call ebp
test eax, eax
jne 0x465e26
push 0x87c474
push 0x8782b0
call fcn.00423904
add esp, 8
call dword [sym.imp.WINMM.dll_waveOutGetNumDevs]
mov ebp, eax
test ebp, ebp
jle 0x465eff
xor ebx, ebx
lea eax, [esp + 0x268]
push 0x30
push eax
push ebx
call dword [sym.imp.WINMM.dll_waveOutGetDevCapsA]
test eax, eax
jne 0x465efa
mov eax, dword [esp + 0x290]
call fcn.00465bc0
movzx edx, word [esp + 0x294]
test edx, edx
jne 0x465ed8
mov edx, 0x87c49c
jmp 0x465edd
mov edx, 0x87c4a4
lea ecx, [esp + 0x270]
push edx
push eax
push ebx
push ecx
push 0x87c484
push 0x8782b0
call fcn.00423904
add esp, 0x18
inc ebx
cmp ebx, ebp
jl 0x465ea4
push 0x87c4ac
push 0x8782b0
call fcn.00423904
add esp, 8
call dword [sym.imp.WINMM.dll_waveInGetNumDevs]
mov ebp, eax
test ebp, ebp
jle 0x465f7a
xor ebx, ebx
lea eax, [esp + 0x29c]
push 0x30
push eax
push ebx
call dword [sym.imp.WINMM.dll_waveInGetDevCapsA]
test eax, eax
jne 0x465f75
mov eax, dword [esp + 0x2c4]
call fcn.00465bc0
movzx edx, word [esp + 0x2c8]
test edx, edx
jne 0x465f53
mov edx, 0x87c49c
jmp 0x465f58
mov edx, 0x87c4a4
lea ecx, [esp + 0x2a4]
push edx
push eax
push ebx
push ecx
push 0x87c484
push 0x8782b0
call fcn.00423904
add esp, 0x18
inc ebx
cmp ebx, ebp
jl 0x465f1f
push 0x87c4bc
push 0x8782b0
call fcn.00423904
lea eax, [esp + 0x1d4]
push 0x9c
push 0
push eax
call fcn.0046cdb0
add esp, 0x14
mov eax, 0x9c
mov word [esp + 0x1f0], ax
xor ecx, ecx
lea edx, [esp + 0x1cc]
push edx
push ecx
push ecx
call dword [sym.imp.USER32.dll_EnumDisplaySettingsA]
test eax, eax
je 0x466018
xor ebx, ebx
mov eax, dword [esp + 0x234]
cmp eax, 8
jbe 0x465ffa
push dword [esp + 0x244]
push eax
push dword [esp + 0x244]
push dword [esp + 0x244]
push ebx
push 0x87c4c8
push 0x8782b0
call fcn.00423904
add esp, 0x1c
inc ebx
cmp ebx, 0x270f
jg 0x466018
lea eax, [esp + 0x1cc]
push eax
push ebx
push 0
call dword [sym.imp.USER32.dll_EnumDisplaySettingsA]
test eax, eax
jne 0x465fc5
xor eax, eax
add esp, 0x2d0
pop ebx
pop ebp
pop edi
ret
push 0x87c454
push 0x8782b0
call fcn.00423904
add esp, 8
jmp 0x465e84
xor eax, eax
jmp 0x465cbd