Function at 0x45ab50
Capabilities:
Check for time delay via gettickcount
Get memory capacity
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x4f8
lea eax, [ebp - 0x160]
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x160], 0x94
push eax
call sub.KERNEL32.dll_GetVersionExA
push str.ADVAPI32.DLL
call sub.KERNEL32.dll_LoadLibraryA
mov dword [ebp - 0x4f0], eax
push str.KERNEL32.DLL
call sub.KERNEL32.dll_LoadLibraryA
mov edi, eax
push str.NETAPI32.DLL
call sub.KERNEL32.dll_LoadLibraryA
add esp, 0xc
mov ebx, eax
test eax, eax
je 0x45ac3c
push esi
push esi
push str.NetStatisticsGet
push eax
call sub.KERNEL32.dll_GetProcAddress
mov esi, eax
push str.NetApiBufferFree
push ebx
call sub.KERNEL32.dll_GetProcAddress
test esi, esi
pop edx
mov dword [ebp - 0x4e8], eax
pop ecx
je 0x45ac30
test eax, eax
je 0x45ac30
sub esp, 0xc
lea eax, [ebp - 0x18]
push eax
push 0
push 0
push str.LanmanWorkstation
push 0
call esi
add esp, 0xc
test eax, eax
je 0x45b1a8
sub esp, 0xc
lea eax, [ebp - 0x18]
push eax
push 0
push 0
push str.LanmanServer
push 0
call esi
add esp, 0xc
test eax, eax
jne 0x45ac30
mov ecx, dword [ebp - 0x18]
push 0x40310000
push 0
push 0x44
push ecx
call fcn.00426bb0
pop edx
mov eax, dword [ebp - 0x18]
push eax
call dword [ebp - 0x4e8]
add esp, 0xc
sub esp, 0xc
push ebx
call sub.KERNEL32.dll_FreeLibrary
add esp, 0xc
mov eax, dword [ebp - 0x4f0]
mov dword [ebp - 0x4f4], 0
test eax, eax
je 0x45ad07
push eax
push eax
mov eax, dword [ebp - 0x4f0]
push str.CryptAcquireContextW
push eax
call sub.KERNEL32.dll_GetProcAddress
mov ebx, eax
mov eax, dword [ebp - 0x4f0]
push str.CryptGenRandom
push eax
call sub.KERNEL32.dll_GetProcAddress
mov esi, eax
mov eax, dword [ebp - 0x4f0]
push str.CryptReleaseContext
push eax
call sub.KERNEL32.dll_GetProcAddress
test ebx, ebx
pop edx
mov dword [ebp - 0x4ec], eax
pop ecx
je 0x45b120
test esi, esi
je 0x45b120
test eax, eax
je 0x45b120
sub esp, 0xc
lea eax, [ebp - 0x10]
push 0xf0000000
push 1
push 0
push 0
push eax
call ebx
mov dword [ebp - 0x4f4], 0
add esp, 0xc
test eax, eax
jne 0x45b142
sub esp, 0xc
lea eax, [ebp - 0x10]
push 0
push 0x16
push str.Intel_Hardware_Cryptographic_Service_Provider
push 0
push eax
call ebx
add esp, 0xc
test eax, eax
jne 0x45b17a
sub esp, 0xc
mov ebx, dword [ebp - 0x4f0]
push ebx
call sub.KERNEL32.dll_FreeLibrary
add esp, 0xc
cmp dword [ebp - 0x150], 2
je 0x45b130
sub esp, 0xc
push str.USER32.DLL
call sub.KERNEL32.dll_LoadLibraryA
add esp, 0xc
mov ebx, eax
test eax, eax
je 0x45addf
push ecx
push ecx
push str.GetForegroundWindow
push eax
call sub.KERNEL32.dll_GetProcAddress
mov esi, eax
push str.GetCursorInfo
push ebx
call sub.KERNEL32.dll_GetProcAddress
mov dword [ebp - 0x4e4], eax
push str.GetQueueStatus
push ebx
call sub.KERNEL32.dll_GetProcAddress
test esi, esi
mov dword [ebp - 0x4e0], eax
pop eax
pop edx
je 0x45ad7c
call esi
push 0
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push 0
push 4
push eax
call fcn.00426bb0
add esp, 0x10
mov eax, dword [ebp - 0x4e4]
test eax, eax
je 0x45ada0
cmp dword [ebp - 0x150], 2
jne 0x45b0d6
cmp dword [ebp - 0x15c], 4
ja 0x45b0d6
mov esi, dword [ebp - 0x4e0]
test esi, esi
je 0x45add3
sub esp, 0xc
push 0xbf
call dword [ebp - 0x4e0]
add esp, 0xc
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push 0x3ff00000
push 0
push 4
push eax
call fcn.00426bb0
add esp, 0x10
sub esp, 0xc
push ebx
call sub.KERNEL32.dll_FreeLibrary
add esp, 0xc
test edi, edi
je 0x45b08c
push ebx
push ebx
push str.CreateToolhelp32Snapshot
push edi
call sub.KERNEL32.dll_GetProcAddress
mov ebx, eax
push str.CloseToolhelp32Snapshot
push edi
call sub.KERNEL32.dll_GetProcAddress
mov dword [ebp - 0x4dc], eax
push str.Heap32First
push edi
call sub.KERNEL32.dll_GetProcAddress
mov dword [ebp - 0x4d4], eax
push str.Heap32Next
push edi
call sub.KERNEL32.dll_GetProcAddress
mov dword [ebp - 0x4d0], eax
push str.Heap32ListFirst
push edi
call sub.KERNEL32.dll_GetProcAddress
mov esi, eax
push str.Heap32ListNext
push edi
call sub.KERNEL32.dll_GetProcAddress
mov dword [ebp - 0x4cc], eax
push str.Process32First
push edi
call sub.KERNEL32.dll_GetProcAddress
mov dword [ebp - 0x4c8], eax
push str.Process32Next
push edi
call sub.KERNEL32.dll_GetProcAddress
mov dword [ebp - 0x4c4], eax
push str.Thread32First
push edi
call sub.KERNEL32.dll_GetProcAddress
mov dword [ebp - 0x4c0], eax
push str.Thread32Next
push edi
call sub.KERNEL32.dll_GetProcAddress
mov dword [ebp - 0x4bc], eax
push str.Module32First
push edi
call sub.KERNEL32.dll_GetProcAddress
mov dword [ebp - 0x4b8], eax
push str.Module32Next
push edi
call sub.KERNEL32.dll_GetProcAddress
test ebx, ebx
pop edx
mov dword [ebp - 0x4b4], eax
pop ecx
je 0x45b080
mov ecx, dword [ebp - 0x4d4]
test ecx, ecx
je 0x45b080
mov edx, dword [ebp - 0x4d0]
test edx, edx
je 0x45b080
test esi, esi
je 0x45b080
mov ecx, dword [ebp - 0x4cc]
test ecx, ecx
je 0x45b080
mov edx, dword [ebp - 0x4c8]
test edx, edx
je 0x45b080
mov ecx, dword [ebp - 0x4c4]
test ecx, ecx
je 0x45b080
mov edx, dword [ebp - 0x4c0]
test edx, edx
je 0x45b080
mov ecx, dword [ebp - 0x4bc]
test ecx, ecx
je 0x45b080
mov edx, dword [ebp - 0x4b8]
test edx, edx
je 0x45b080
test eax, eax
je 0x45b080
push eax
push eax
push 0
push 0xf
call ebx
mov dword [ebp - 0x4d8], eax
pop edx
inc eax
pop ecx
je 0x45b080
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x2c], 0x10
mov dword [ebp - 0x4b0], 0
test eax, eax
jne 0x45b3d1
mov ebx, dword [ebp - 0x4d8]
push eax
push eax
lea eax, [ebp - 0x2c]
push eax
push ebx
call esi
lea esi, [ebp - 0x8c]
pop edx
test eax, eax
pop ecx
jne 0x45b2d2
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x288], 0x128
test eax, eax
je 0x45afc0
call sub.KERNEL32.dll_GetTickCount
mov dword [ebp - 0x4b0], eax
mov esi, dword [ebp - 0x4d8]
lea ebx, [ebp - 0x288]
push eax
push eax
push ebx
push esi
call dword [ebp - 0x4c8]
pop edx
test eax, eax
pop ecx
jne 0x45b228
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x48], 0x1c
test eax, eax
je 0x45affc
call sub.KERNEL32.dll_GetTickCount
mov dword [ebp - 0x4b0], eax
mov esi, dword [ebp - 0x4d8]
lea ebx, [ebp - 0x48]
push eax
push eax
push ebx
push esi
call dword [ebp - 0x4c0]
pop edx
test eax, eax
pop ecx
jne 0x45b1d0
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x4ac], 0x224
test eax, eax
je 0x45b038
call sub.KERNEL32.dll_GetTickCount
mov dword [ebp - 0x4b0], eax
mov esi, dword [ebp - 0x4d8]
lea ebx, [ebp - 0x4ac]
push eax
push eax
push ebx
push esi
call dword [ebp - 0x4b8]
pop edx
test eax, eax
pop ecx
jne 0x45b298
mov esi, dword [ebp - 0x4dc]
test esi, esi
je 0x45b3e1
sub esp, 0xc
mov ebx, dword [ebp - 0x4d8]
push ebx
call dword [ebp - 0x4dc]
add esp, 0xc
lea esi, [esi]
sub esp, 0xc
push edi
call sub.KERNEL32.dll_FreeLibrary
add esp, 0xc
call fcn.0045a9f0
sub esp, 0xc
lea ebx, [ebp - 0x68]
push ebx
call sub.KERNEL32.dll_GlobalMemoryStatus
add esp, 0xc
push 0x3ff00000
push 0
push 0x20
push ebx
call fcn.00426bb0
call sub.KERNEL32.dll_GetCurrentProcessId
push 0x3ff00000
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push 0
push 4
push eax
call fcn.00426bb0
lea esp, [ebp - 0xc]
mov eax, 1
pop ebx
pop esi
pop edi
pop ebp
ret
sub esp, 0xc
mov dword [ebp - 0x2c], 0x14
lea esi, [ebp - 0x2c]
push esi
call dword [ebp - 0x4e4]
add esp, 0xc
test eax, eax
je 0x45ada0
mov eax, dword [ebp - 0x2c]
push 0x40000000
push 0
push eax
push esi
call fcn.00426bb0
mov esi, dword [ebp - 0x4e0]
add esp, 0x10
test esi, esi
jne 0x45adaa
jmp 0x45add3
mov dword [ebp - 0x4f4], 0
jmp 0x45acf5
call fcn.00426da0
test eax, eax
jne 0x45addf
jmp 0x45ad14
mov ecx, dword [ebp - 0x10]
push eax
lea eax, [ebp - 0xcc]
push eax
push 0x40
push ecx
call esi
mov dword [ebp - 0x4f4], 0
pop edx
test eax, eax
jne 0x45b376
mov ecx, dword [ebp - 0x10]
push eax
push eax
push 0
push ecx
call dword [ebp - 0x4ec]
pop eax
pop edx
jmp 0x45acd6
mov ecx, dword [ebp - 0x10]
push ebx
lea ebx, [ebp - 0xcc]
push ebx
push 0x40
push ecx
call esi
pop edx
test eax, eax
jne 0x45b355
push eax
push eax
mov eax, dword [ebp - 0x10]
push 0
push eax
call dword [ebp - 0x4ec]
pop esi
pop eax
jmp 0x45acf5
mov eax, dword [ebp - 0x18]
push 0x40468000
push 0
push 0xd8
push eax
call fcn.00426bb0
pop eax
mov eax, dword [ebp - 0x18]
push eax
call dword [ebp - 0x4e8]
add esp, 0xc
jmp 0x45abf5
mov eax, dword [ebp - 0x48]
push 0x40180000
push 0
push eax
push ebx
call fcn.00426bb0
pop esi
mov ecx, dword [ebp - 0x4d8]
pop eax
push ebx
push ecx
call dword [ebp - 0x4bc]
pop esi
test eax, eax
pop edx
je 0x45b019
mov ecx, dword [ebp - 0x4f4]
test ecx, ecx
je 0x45b1d0
call sub.KERNEL32.dll_GetTickCount
mov edx, dword [ebp - 0x4b0]
sub eax, edx
cmp eax, 0x3e7
jbe 0x45b1d0
mov dword [ebp - 0x4ac], 0x224
jmp 0x45b02d
mov eax, dword [ebp - 0x288]
push 0x40220000
push 0
push eax
push ebx
call fcn.00426bb0
pop esi
mov ecx, dword [ebp - 0x4d8]
pop eax
push ebx
push ecx
call dword [ebp - 0x4c4]
pop esi
test eax, eax
pop edx
je 0x45afe0
mov ecx, dword [ebp - 0x4f4]
test ecx, ecx
je 0x45b228
call sub.KERNEL32.dll_GetTickCount
mov edx, dword [ebp - 0x4b0]
sub eax, edx
cmp eax, 0x3e7
jbe 0x45b228
mov dword [ebp - 0x48], 0x1c
jmp 0x45aff1
call sub.KERNEL32.dll_GetTickCount
mov edx, dword [ebp - 0x4b0]
sub eax, edx
cmp eax, 0x3e7
ja 0x45b058
mov eax, dword [ebp - 0x4ac]
push 0x40220000
push 0
push eax
push ebx
call fcn.00426bb0
pop esi
mov ecx, dword [ebp - 0x4d8]
pop eax
push ebx
push ecx
call dword [ebp - 0x4b4]
pop esi
test eax, eax
pop edx
je 0x45b058
mov ecx, dword [ebp - 0x4f4]
test ecx, ecx
je 0x45b298
jmp 0x45b280
mov eax, dword [ebp - 0x2c]
push 0x40080000
push 0
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00426bb0
add esp, 0xc
mov ebx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x8c], 0x24
push ebx
push ecx
push esi
call dword [ebp - 0x4d4]
pop edx
test eax, eax
jne 0x45b39a
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x4d8]
push ebx
push ebx
push eax
push ecx
call dword [ebp - 0x4cc]
pop ebx
test eax, eax
pop edx
je 0x45afa1
mov ecx, dword [ebp - 0x4f4]
test ecx, ecx
je 0x45b2d2
call sub.KERNEL32.dll_GetTickCount
mov edx, dword [ebp - 0x4b0]
sub eax, edx
cmp eax, 0x3e7
jbe 0x45b2d2
mov dword [ebp - 0x288], 0x128
jmp 0x45afb5
push 0x40500000
push 0
push 0x40
push ebx
call fcn.00426bb0
add esp, 0x10
mov dword [ebp - 0x4f4], 1
jmp 0x45b193
lea eax, [ebp - 0xcc]
push 0
push 0
push 0x40
push eax
call fcn.00426bb0
add esp, 0x10
mov dword [ebp - 0x4f4], 1
jmp 0x45b165
mov ebx, 0x50
jmp 0x45b3a8
dec ebx
je 0x45b30b
mov eax, dword [ebp - 0x8c]
push 0x40140000
push 0
push eax
push esi
call fcn.00426bb0
mov dword [esp], esi
call dword [ebp - 0x4d0]
add esp, 0xc
test eax, eax
jne 0x45b3a1
jmp 0x45b30b
call sub.KERNEL32.dll_GetTickCount
mov dword [ebp - 0x4b0], eax
jmp 0x45af82
sub esp, 0xc
mov ecx, dword [ebp - 0x4d8]
push ecx
call sub.KERNEL32.dll_CloseHandle
add esp, 0xc
jmp 0x45b080