Function at 0x461c2c
Capabilities:
Delete file
Get memory capacity

Disassembly:
push edi
push ebp
push ebx
sub esp, 0x2d0
push 0x813220
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
call fcn.00462068
lea eax, [esp + 0x1ac]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
mov ebx, dword [esp + 0x1b4]
shr ebx, 0x14
mov ebp, dword [esp + 0x1b8]
shr ebp, 0x14
movzx eax, byte [0x8093cc]
push eax
push 0x81322c
push 0x80f270
call fcn.00417454
add esp, 0xc
mov edi, 0x809ca8
xor eax, eax
mov dh, byte [edi]
mov ecx, edi
test dh, dh
je 0x461c98
inc ecx
inc eax
mov dl, byte [ecx]
test dl, dl
jne 0x461c90
test eax, eax
jbe 0x46205f
xor eax, eax
mov dword [esp + 0x2cc], esi
mov esi, ebx
mov ebx, eax
movzx edx, byte [ebx + 0x809ca8]
mov byte [ebx + 0x809cdc], dl
inc ebx
mov edi, 0x809ca8
xor eax, eax
mov dh, byte [edi]
mov ecx, edi
test dh, dh
je 0x461cd2
inc ecx
inc eax
mov dl, byte [ecx]
test dl, dl
jne 0x461cca
cmp ebx, eax
jb 0x461cad
mov eax, ebx
mov ebx, esi
mov esi, dword [esp + 0x2cc]
mov byte [eax + 0x809cdc], 0
push 0x809cdc
push 0x813238
push 0x80f270
call fcn.00417454
movzx eax, byte [0x5d34e8]
push eax
push 0x813248
push 0x80f270
call fcn.00417454
movzx eax, byte [0x5d34f4]
push eax
push 0x813258
push 0x80f270
call fcn.00417454
movzx eax, byte [0x5d34f8]
push eax
push 0x813268
push 0x80f270
call fcn.00417454
movsx eax, byte [0x5b66fc]
push eax
push 0x813278
push 0x80f270
call fcn.00417454
movsx eax, byte [0x5b66f8]
push eax
push 0x81328c
push 0x80f270
call fcn.00417454
push dword [0x8093d0]
push 0x8132a0
push 0x80f270
call fcn.00417454
push ebx
push 0x8132b4
push 0x80f270
call fcn.00417454
push ebp
push 0x8132c8
push 0x80f270
call fcn.00417454
add esp, 0x6c
push dword [0x809448]
push dword [0x809444]
push dword [0x809440]
push dword [0x80943c]
push 0x8132dc
push 0x80f270
call fcn.00417454
add esp, 0x18
call fcn.00461b88
movsx eax, al
push eax
push 0x813300
push 0x80f270
call fcn.00417454
push 0x81330c
push 0x80f270
call fcn.00417454
add esp, 0x14
push 0x80f1c0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x80f1c8
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ebp, eax
test ebp, ebp
je 0x462048
lea edx, [esp + 4]
push 0x1a8
push 0
push edx
call fcn.00468c4c
add esp, 0xc
mov dword [esp + 4], 0x1a8
xor ecx, ecx
lea edx, [esp + 4]
push ecx
push edx
push ecx
push ecx
call ebp
test eax, eax
je 0x461ea8
xor ebx, ebx
mov ecx, dword [esp + 0xa8]
mov edx, ecx
and edx, 1
and ecx, 4
test edx, edx
je 0x461e64
mov eax, 0x81332c
jmp 0x461e69
mov eax, 0x80f270
test ecx, ecx
je 0x461e74
mov edx, 0x813330
jmp 0x461e79
mov edx, 0x80f270
lea edi, [esp + 8]
lea ecx, [esp + 0x28]
push edx
push eax
push ecx
push edi
push 0x813314
push 0x80f270
call fcn.00417454
add esp, 0x18
inc ebx
xor ecx, ecx
lea edx, [esp + 4]
push ecx
push edx
push ebx
push ecx
call ebp
test eax, eax
jne 0x461e4a
push 0x813354
push 0x80f270
call fcn.00417454
add esp, 8
call dword [sym.imp.WINMM.dll_waveOutGetNumDevs]
mov ebp, eax
test ebp, ebp
jle 0x461f23
xor ebx, ebx
lea eax, [esp + 0x268]
push 0x30
push eax
push ebx
call dword [sym.imp.WINMM.dll_waveOutGetDevCapsA]
test eax, eax
jne 0x461f1e
mov eax, dword [esp + 0x290]
call fcn.00461be4
movzx edx, word [esp + 0x294]
test edx, edx
jne 0x461efc
mov edx, 0x81337c
jmp 0x461f01
mov edx, 0x813384
lea ecx, [esp + 0x270]
push edx
push eax
push ebx
push ecx
push 0x813364
push 0x80f270
call fcn.00417454
add esp, 0x18
inc ebx
cmp ebx, ebp
jl 0x461ec8
push 0x81338c
push 0x80f270
call fcn.00417454
add esp, 8
call dword [sym.imp.WINMM.dll_waveInGetNumDevs]
mov ebp, eax
test ebp, ebp
jle 0x461f9e
xor ebx, ebx
lea eax, [esp + 0x29c]
push 0x30
push eax
push ebx
call dword [sym.imp.WINMM.dll_waveInGetDevCapsA]
test eax, eax
jne 0x461f99
mov eax, dword [esp + 0x2c4]
call fcn.00461be4
movzx edx, word [esp + 0x2c8]
test edx, edx
jne 0x461f77
mov edx, 0x81337c
jmp 0x461f7c
mov edx, 0x813384
lea ecx, [esp + 0x2a4]
push edx
push eax
push ebx
push ecx
push 0x813364
push 0x80f270
call fcn.00417454
add esp, 0x18
inc ebx
cmp ebx, ebp
jl 0x461f43
push 0x81339c
push 0x80f270
call fcn.00417454
lea eax, [esp + 0x1d4]
push 0x9c
push 0
push eax
call fcn.00468c4c
add esp, 0x14
mov eax, 0x9c
mov word [esp + 0x1f0], ax
xor ecx, ecx
lea edx, [esp + 0x1cc]
push edx
push ecx
push ecx
call dword [sym.imp.USER32.dll_EnumDisplaySettingsA]
test eax, eax
je 0x46203c
xor ebx, ebx
mov eax, dword [esp + 0x234]
cmp eax, 8
jbe 0x46201e
push dword [esp + 0x244]
push eax
push dword [esp + 0x244]
push dword [esp + 0x244]
push ebx
push 0x8133a8
push 0x80f270
call fcn.00417454
add esp, 0x1c
inc ebx
cmp ebx, 0x270f
jg 0x46203c
lea eax, [esp + 0x1cc]
push eax
push ebx
push 0
call dword [sym.imp.USER32.dll_EnumDisplaySettingsA]
test eax, eax
jne 0x461fe9
xor eax, eax
add esp, 0x2d0
pop ebx
pop ebp
pop edi
ret
push 0x813334
push 0x80f270
call fcn.00417454
add esp, 8
jmp 0x461ea8
xor eax, eax
jmp 0x461ce1