Function at 0x465b20
Capabilities:
Delete file
Get memory capacity

Disassembly:
push edi
push ebp
push ebx
sub esp, 0x2d0
push 0x87c320
call dword [sym.imp.kernel32.dll_DeleteFileA]
call fcn.00465f5c
lea eax, [esp + 0x1ac]
push eax
call dword [sym.imp.kernel32.dll_GlobalMemoryStatus]
mov ebx, dword [esp + 0x1b4]
shr ebx, 0x14
mov ebp, dword [esp + 0x1b8]
shr ebp, 0x14
movzx eax, byte [0x8722b8]
push eax
push 0x87c32c
push 0x8782b0
call fcn.0046ccf4
add esp, 0xc
mov edi, 0x872c80
xor eax, eax
mov dh, byte [edi]
mov ecx, edi
test dh, dh
je 0x465b8c
inc ecx
inc eax
mov dl, byte [ecx]
test dl, dl
jne 0x465b84
test eax, eax
jbe 0x465f53
xor eax, eax
mov dword [esp + 0x2cc], esi
mov esi, ebx
mov ebx, eax
movzx edx, byte [ebx + 0x872c80]
mov byte [ebx + 0x872cb4], dl
inc ebx
mov edi, 0x872c80
xor eax, eax
mov dh, byte [edi]
mov ecx, edi
test dh, dh
je 0x465bc6
inc ecx
inc eax
mov dl, byte [ecx]
test dl, dl
jne 0x465bbe
cmp ebx, eax
jb 0x465ba1
mov eax, ebx
mov ebx, esi
mov esi, dword [esp + 0x2cc]
mov byte [eax + 0x872cb4], 0
push 0x872cb4
push 0x87c338
push 0x8782b0
call fcn.0046ccf4
movzx eax, byte [0x5b85c8]
push eax
push 0x87c348
push 0x8782b0
call fcn.0046ccf4
movzx eax, byte [0x5b85d4]
push eax
push 0x87c358
push 0x8782b0
call fcn.0046ccf4
movzx eax, byte [0x5b85d8]
push eax
push 0x87c368
push 0x8782b0
call fcn.0046ccf4
movsx eax, byte [0x59b734]
push eax
push 0x87c378
push 0x8782b0
call fcn.0046ccf4
movsx eax, byte [0x59b730]
push eax
push 0x87c38c
push 0x8782b0
call fcn.0046ccf4
push dword [0x8722bc]
push 0x87c3a0
push 0x8782b0
call fcn.0046ccf4
push ebx
push 0x87c3b4
push 0x8782b0
call fcn.0046ccf4
push ebp
push 0x87c3c8
push 0x8782b0
call fcn.0046ccf4
add esp, 0x6c
push dword [0x872334]
push dword [0x872330]
push dword [0x87232c]
push dword [0x872328]
push 0x87c3dc
push 0x8782b0
call fcn.0046ccf4
add esp, 0x18
call fcn.0045c12c
movsx eax, al
push eax
push 0x87c400
push 0x8782b0
call fcn.0046ccf4
push 0x87c40c
push 0x8782b0
call fcn.0046ccf4
add esp, 0x14
push 0x878200
call dword [sym.imp.kernel32.dll_LoadLibraryA]
push 0x878208
push eax
call dword [sym.imp.kernel32.dll_GetProcAddress]
mov ebp, eax
test ebp, ebp
je 0x465f3c
lea edx, [esp + 4]
push 0x1a8
push 0
push edx
call fcn.0046cbd0
add esp, 0xc
mov dword [esp + 4], 0x1a8
xor ecx, ecx
lea edx, [esp + 4]
push ecx
push edx
push ecx
push ecx
call ebp
test eax, eax
je 0x465d9c
xor ebx, ebx
mov ecx, dword [esp + 0xa8]
mov edx, ecx
and edx, 1
and ecx, 4
test edx, edx
je 0x465d58
mov eax, 0x87c42c
jmp 0x465d5d
mov eax, 0x8782b0
test ecx, ecx
je 0x465d68
mov edx, 0x87c430
jmp 0x465d6d
mov edx, 0x8782b0
lea edi, [esp + 8]
lea ecx, [esp + 0x28]
push edx
push eax
push ecx
push edi
push 0x87c414
push 0x8782b0
call fcn.0046ccf4
add esp, 0x18
inc ebx
xor ecx, ecx
lea edx, [esp + 4]
push ecx
push edx
push ebx
push ecx
call ebp
test eax, eax
jne 0x465d3e
push 0x87c454
push 0x8782b0
call fcn.0046ccf4
add esp, 8
call dword [sym.imp.winmm.dll_waveOutGetNumDevs]
mov ebp, eax
test ebp, ebp
jle 0x465e17
xor ebx, ebx
lea eax, [esp + 0x268]
push 0x30
push eax
push ebx
call dword [sym.imp.winmm.dll_waveOutGetDevCapsA]
test eax, eax
jne 0x465e12
mov eax, dword [esp + 0x290]
call fcn.00465ad8
movzx edx, word [esp + 0x294]
test edx, edx
jne 0x465df0
mov edx, 0x87c47c
jmp 0x465df5
mov edx, 0x87c484
lea ecx, [esp + 0x270]
push edx
push eax
push ebx
push ecx
push 0x87c464
push 0x8782b0
call fcn.0046ccf4
add esp, 0x18
inc ebx
cmp ebx, ebp
jl 0x465dbc
push 0x87c48c
push 0x8782b0
call fcn.0046ccf4
add esp, 8
call dword [sym.imp.winmm.dll_waveInGetNumDevs]
mov ebp, eax
test ebp, ebp
jle 0x465e92
xor ebx, ebx
lea eax, [esp + 0x29c]
push 0x30
push eax
push ebx
call dword [sym.imp.winmm.dll_waveInGetDevCapsA]
test eax, eax
jne 0x465e8d
mov eax, dword [esp + 0x2c4]
call fcn.00465ad8
movzx edx, word [esp + 0x2c8]
test edx, edx
jne 0x465e6b
mov edx, 0x87c47c
jmp 0x465e70
mov edx, 0x87c484
lea ecx, [esp + 0x2a4]
push edx
push eax
push ebx
push ecx
push 0x87c464
push 0x8782b0
call fcn.0046ccf4
add esp, 0x18
inc ebx
cmp ebx, ebp
jl 0x465e37
push 0x87c49c
push 0x8782b0
call fcn.0046ccf4
lea eax, [esp + 0x1d4]
push 0x9c
push 0
push eax
call fcn.0046cbd0
add esp, 0x14
mov eax, 0x9c
mov word [esp + 0x1f0], ax
xor ecx, ecx
lea edx, [esp + 0x1cc]
push edx
push ecx
push ecx
call dword [sym.imp.user32.dll_EnumDisplaySettingsA]
test eax, eax
je 0x465f30
xor ebx, ebx
mov eax, dword [esp + 0x234]
cmp eax, 8
jbe 0x465f12
push dword [esp + 0x244]
push eax
push dword [esp + 0x244]
push dword [esp + 0x244]
push ebx
push 0x87c4a8
push 0x8782b0
call fcn.0046ccf4
add esp, 0x1c
inc ebx
cmp ebx, 0x270f
jg 0x465f30
lea eax, [esp + 0x1cc]
push eax
push ebx
push 0
call dword [sym.imp.user32.dll_EnumDisplaySettingsA]
test eax, eax
jne 0x465edd
xor eax, eax
add esp, 0x2d0
pop ebx
pop ebp
pop edi
ret
push 0x87c434
push 0x8782b0
call fcn.0046ccf4
add esp, 8
jmp 0x465d9c
xor eax, eax
jmp 0x465bd5