Function at 0x466020
Capabilities:
Delete file
Get memory capacity

Disassembly:
push edi
push ebp
push ebx
sub esp, 0x2d0
push 0x87d360
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
call fcn.0046645c
lea eax, [esp + 0x1ac]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
mov ebx, dword [esp + 0x1b4]
shr ebx, 0x14
mov ebp, dword [esp + 0x1b8]
shr ebp, 0x14
movzx eax, byte [0x873a18]
push eax
push 0x87d36c
push 0x8792b0
call fcn.00423828
add esp, 0xc
mov edi, 0x8743e0
xor eax, eax
mov dh, byte [edi]
mov ecx, edi
test dh, dh
je 0x46608c
inc ecx
inc eax
mov dl, byte [ecx]
test dl, dl
jne 0x466084
test eax, eax
jbe 0x466453
xor eax, eax
mov dword [esp + 0x2cc], esi
mov esi, ebx
mov ebx, eax
movzx edx, byte [ebx + 0x8743e0]
mov byte [ebx + 0x874414], dl
inc ebx
mov edi, 0x8743e0
xor eax, eax
mov dh, byte [edi]
mov ecx, edi
test dh, dh
je 0x4660c6
inc ecx
inc eax
mov dl, byte [ecx]
test dl, dl
jne 0x4660be
cmp ebx, eax
jb 0x4660a1
mov eax, ebx
mov ebx, esi
mov esi, dword [esp + 0x2cc]
mov byte [eax + 0x874414], 0
push 0x874414
push 0x87d378
push 0x8792b0
call fcn.00423828
movzx eax, byte [0x5b9b08]
push eax
push 0x87d388
push 0x8792b0
call fcn.00423828
movzx eax, byte [0x5b9b14]
push eax
push 0x87d398
push 0x8792b0
call fcn.00423828
movzx eax, byte [0x5b9b18]
push eax
push 0x87d3a8
push 0x8792b0
call fcn.00423828
movsx eax, byte [0x59cc34]
push eax
push 0x87d3b8
push 0x8792b0
call fcn.00423828
movsx eax, byte [0x59cc30]
push eax
push 0x87d3cc
push 0x8792b0
call fcn.00423828
push dword [0x873a1c]
push 0x87d3e0
push 0x8792b0
call fcn.00423828
push ebx
push 0x87d3f4
push 0x8792b0
call fcn.00423828
push ebp
push 0x87d408
push 0x8792b0
call fcn.00423828
add esp, 0x6c
push dword [0x873a94]
push dword [0x873a90]
push dword [0x873a8c]
push dword [0x873a88]
push 0x87d41c
push 0x8792b0
call fcn.00423828
add esp, 0x18
call fcn.0045c48c
movsx eax, al
push eax
push 0x87d440
push 0x8792b0
call fcn.00423828
push 0x87d44c
push 0x8792b0
call fcn.00423828
add esp, 0x14
push 0x879200
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push 0x879208
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ebp, eax
test ebp, ebp
je 0x46643c
lea edx, [esp + 4]
push 0x1a8
push 0
push edx
call fcn.0046dfcc
add esp, 0xc
mov dword [esp + 4], 0x1a8
xor ecx, ecx
lea edx, [esp + 4]
push ecx
push edx
push ecx
push ecx
call ebp
test eax, eax
je 0x46629c
xor ebx, ebx
mov ecx, dword [esp + 0xa8]
mov edx, ecx
and edx, 1
and ecx, 4
test edx, edx
je 0x466258
mov eax, 0x87d46c
jmp 0x46625d
mov eax, 0x8792b0
test ecx, ecx
je 0x466268
mov edx, 0x87d470
jmp 0x46626d
mov edx, 0x8792b0
lea edi, [esp + 8]
lea ecx, [esp + 0x28]
push edx
push eax
push ecx
push edi
push 0x87d454
push 0x8792b0
call fcn.00423828
add esp, 0x18
inc ebx
xor ecx, ecx
lea edx, [esp + 4]
push ecx
push edx
push ebx
push ecx
call ebp
test eax, eax
jne 0x46623e
push 0x87d494
push 0x8792b0
call fcn.00423828
add esp, 8
call dword [sym.imp.WINMM.dll_waveOutGetNumDevs]
mov ebp, eax
test ebp, ebp
jle 0x466317
xor ebx, ebx
lea eax, [esp + 0x268]
push 0x30
push eax
push ebx
call dword [sym.imp.WINMM.dll_waveOutGetDevCapsA]
test eax, eax
jne 0x466312
mov eax, dword [esp + 0x290]
call fcn.00465fd8
movzx edx, word [esp + 0x294]
test edx, edx
jne 0x4662f0
mov edx, 0x87d4bc
jmp 0x4662f5
mov edx, 0x87d4c4
lea ecx, [esp + 0x270]
push edx
push eax
push ebx
push ecx
push 0x87d4a4
push 0x8792b0
call fcn.00423828
add esp, 0x18
inc ebx
cmp ebx, ebp
jl 0x4662bc
push 0x87d4cc
push 0x8792b0
call fcn.00423828
add esp, 8
call dword [sym.imp.WINMM.dll_waveInGetNumDevs]
mov ebp, eax
test ebp, ebp
jle 0x466392
xor ebx, ebx
lea eax, [esp + 0x29c]
push 0x30
push eax
push ebx
call dword [sym.imp.WINMM.dll_waveInGetDevCapsA]
test eax, eax
jne 0x46638d
mov eax, dword [esp + 0x2c4]
call fcn.00465fd8
movzx edx, word [esp + 0x2c8]
test edx, edx
jne 0x46636b
mov edx, 0x87d4bc
jmp 0x466370
mov edx, 0x87d4c4
lea ecx, [esp + 0x2a4]
push edx
push eax
push ebx
push ecx
push 0x87d4a4
push 0x8792b0
call fcn.00423828
add esp, 0x18
inc ebx
cmp ebx, ebp
jl 0x466337
push 0x87d4dc
push 0x8792b0
call fcn.00423828
lea eax, [esp + 0x1d4]
push 0x9c
push 0
push eax
call fcn.0046dfcc
add esp, 0x14
mov eax, 0x9c
mov word [esp + 0x1f0], ax
xor ecx, ecx
lea edx, [esp + 0x1cc]
push edx
push ecx
push ecx
call dword [sym.imp.USER32.dll_EnumDisplaySettingsA]
test eax, eax
je 0x466430
xor ebx, ebx
mov eax, dword [esp + 0x234]
cmp eax, 8
jbe 0x466412
push dword [esp + 0x244]
push eax
push dword [esp + 0x244]
push dword [esp + 0x244]
push ebx
push 0x87d4e8
push 0x8792b0
call fcn.00423828
add esp, 0x1c
inc ebx
cmp ebx, 0x270f
jg 0x466430
lea eax, [esp + 0x1cc]
push eax
push ebx
push 0
call dword [sym.imp.USER32.dll_EnumDisplaySettingsA]
test eax, eax
jne 0x4663dd
xor eax, eax
add esp, 0x2d0
pop ebx
pop ebp
pop edi
ret
push 0x87d474
push 0x8792b0
call fcn.00423828
add esp, 8
jmp 0x46629c
xor eax, eax
jmp 0x4660d5