Function at 0x45bc20
Capabilities:
Check for time delay via gettickcount
Get memory capacity
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x4f8
lea eax, [ebp - 0x160]
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x160], 0x94
push eax
call sub.KERNEL32.dll_GetVersionExA
push str.ADVAPI32.DLL
call sub.KERNEL32.dll_LoadLibraryA
mov dword [ebp - 0x4f0], eax
push str.KERNEL32.DLL
call sub.KERNEL32.dll_LoadLibraryA
mov edi, eax
push str.NETAPI32.DLL
call sub.KERNEL32.dll_LoadLibraryA
add esp, 0xc
mov ebx, eax
test eax, eax
je 0x45bd0c
push esi
push esi
push str.NetStatisticsGet
push eax
call sub.KERNEL32.dll_GetProcAddress
mov esi, eax
push str.NetApiBufferFree
push ebx
call sub.KERNEL32.dll_GetProcAddress
test esi, esi
pop edx
mov dword [ebp - 0x4e8], eax
pop ecx
je 0x45bd00
test eax, eax
je 0x45bd00
sub esp, 0xc
lea eax, [ebp - 0x18]
push eax
push 0
push 0
push str.LanmanWorkstation
push 0
call esi
add esp, 0xc
test eax, eax
je 0x45c278
sub esp, 0xc
lea eax, [ebp - 0x18]
push eax
push 0
push 0
push str.LanmanServer
push 0
call esi
add esp, 0xc
test eax, eax
jne 0x45bd00
mov ecx, dword [ebp - 0x18]
push 0x40310000
push 0
push 0x44
push ecx
call fcn.00427a80
pop edx
mov eax, dword [ebp - 0x18]
push eax
call dword [ebp - 0x4e8]
add esp, 0xc
sub esp, 0xc
push ebx
call sub.KERNEL32.dll_FreeLibrary
add esp, 0xc
mov eax, dword [ebp - 0x4f0]
mov dword [ebp - 0x4f4], 0
test eax, eax
je 0x45bdd7
push eax
push eax
mov eax, dword [ebp - 0x4f0]
push str.CryptAcquireContextW
push eax
call sub.KERNEL32.dll_GetProcAddress
mov ebx, eax
mov eax, dword [ebp - 0x4f0]
push str.CryptGenRandom
push eax
call sub.KERNEL32.dll_GetProcAddress
mov esi, eax
mov eax, dword [ebp - 0x4f0]
push str.CryptReleaseContext
push eax
call sub.KERNEL32.dll_GetProcAddress
test ebx, ebx
pop edx
mov dword [ebp - 0x4ec], eax
pop ecx
je 0x45c1f0
test esi, esi
je 0x45c1f0
test eax, eax
je 0x45c1f0
sub esp, 0xc
lea eax, [ebp - 0x10]
push 0xf0000000
push 1
push 0
push 0
push eax
call ebx
mov dword [ebp - 0x4f4], 0
add esp, 0xc
test eax, eax
jne 0x45c212
sub esp, 0xc
lea eax, [ebp - 0x10]
push 0
push 0x16
push str.Intel_Hardware_Cryptographic_Service_Provider
push 0
push eax
call ebx
add esp, 0xc
test eax, eax
jne 0x45c24a
sub esp, 0xc
mov ebx, dword [ebp - 0x4f0]
push ebx
call sub.KERNEL32.dll_FreeLibrary
add esp, 0xc
cmp dword [ebp - 0x150], 2
je 0x45c200
sub esp, 0xc
push str.USER32.DLL
call sub.KERNEL32.dll_LoadLibraryA
add esp, 0xc
mov ebx, eax
test eax, eax
je 0x45beaf
push ecx
push ecx
push str.GetForegroundWindow
push eax
call sub.KERNEL32.dll_GetProcAddress
mov esi, eax
push str.GetCursorInfo
push ebx
call sub.KERNEL32.dll_GetProcAddress
mov dword [ebp - 0x4e4], eax
push str.GetQueueStatus
push ebx
call sub.KERNEL32.dll_GetProcAddress
test esi, esi
mov dword [ebp - 0x4e0], eax
pop eax
pop edx
je 0x45be4c
call esi
push 0
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push 0
push 4
push eax
call fcn.00427a80
add esp, 0x10
mov eax, dword [ebp - 0x4e4]
test eax, eax
je 0x45be70
cmp dword [ebp - 0x150], 2
jne 0x45c1a6
cmp dword [ebp - 0x15c], 4
ja 0x45c1a6
mov esi, dword [ebp - 0x4e0]
test esi, esi
je 0x45bea3
sub esp, 0xc
push 0xbf
call dword [ebp - 0x4e0]
add esp, 0xc
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push 0x3ff00000
push 0
push 4
push eax
call fcn.00427a80
add esp, 0x10
sub esp, 0xc
push ebx
call sub.KERNEL32.dll_FreeLibrary
add esp, 0xc
test edi, edi
je 0x45c15c
push ebx
push ebx
push str.CreateToolhelp32Snapshot
push edi
call sub.KERNEL32.dll_GetProcAddress
mov ebx, eax
push str.CloseToolhelp32Snapshot
push edi
call sub.KERNEL32.dll_GetProcAddress
mov dword [ebp - 0x4dc], eax
push str.Heap32First
push edi
call sub.KERNEL32.dll_GetProcAddress
mov dword [ebp - 0x4d4], eax
push str.Heap32Next
push edi
call sub.KERNEL32.dll_GetProcAddress
mov dword [ebp - 0x4d0], eax
push str.Heap32ListFirst
push edi
call sub.KERNEL32.dll_GetProcAddress
mov esi, eax
push str.Heap32ListNext
push edi
call sub.KERNEL32.dll_GetProcAddress
mov dword [ebp - 0x4cc], eax
push str.Process32First
push edi
call sub.KERNEL32.dll_GetProcAddress
mov dword [ebp - 0x4c8], eax
push str.Process32Next
push edi
call sub.KERNEL32.dll_GetProcAddress
mov dword [ebp - 0x4c4], eax
push str.Thread32First
push edi
call sub.KERNEL32.dll_GetProcAddress
mov dword [ebp - 0x4c0], eax
push str.Thread32Next
push edi
call sub.KERNEL32.dll_GetProcAddress
mov dword [ebp - 0x4bc], eax
push str.Module32First
push edi
call sub.KERNEL32.dll_GetProcAddress
mov dword [ebp - 0x4b8], eax
push str.Module32Next
push edi
call sub.KERNEL32.dll_GetProcAddress
test ebx, ebx
pop edx
mov dword [ebp - 0x4b4], eax
pop ecx
je 0x45c150
mov ecx, dword [ebp - 0x4d4]
test ecx, ecx
je 0x45c150
mov edx, dword [ebp - 0x4d0]
test edx, edx
je 0x45c150
test esi, esi
je 0x45c150
mov ecx, dword [ebp - 0x4cc]
test ecx, ecx
je 0x45c150
mov edx, dword [ebp - 0x4c8]
test edx, edx
je 0x45c150
mov ecx, dword [ebp - 0x4c4]
test ecx, ecx
je 0x45c150
mov edx, dword [ebp - 0x4c0]
test edx, edx
je 0x45c150
mov ecx, dword [ebp - 0x4bc]
test ecx, ecx
je 0x45c150
mov edx, dword [ebp - 0x4b8]
test edx, edx
je 0x45c150
test eax, eax
je 0x45c150
push eax
push eax
push 0
push 0xf
call ebx
mov dword [ebp - 0x4d8], eax
pop edx
inc eax
pop ecx
je 0x45c150
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x2c], 0x10
mov dword [ebp - 0x4b0], 0
test eax, eax
jne 0x45c4a1
mov ebx, dword [ebp - 0x4d8]
push eax
push eax
lea eax, [ebp - 0x2c]
push eax
push ebx
call esi
lea esi, [ebp - 0x8c]
pop edx
test eax, eax
pop ecx
jne 0x45c3a2
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x288], 0x128
test eax, eax
je 0x45c090
call sub.KERNEL32.dll_GetTickCount
mov dword [ebp - 0x4b0], eax
mov esi, dword [ebp - 0x4d8]
lea ebx, [ebp - 0x288]
push eax
push eax
push ebx
push esi
call dword [ebp - 0x4c8]
pop edx
test eax, eax
pop ecx
jne 0x45c2f8
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x48], 0x1c
test eax, eax
je 0x45c0cc
call sub.KERNEL32.dll_GetTickCount
mov dword [ebp - 0x4b0], eax
mov esi, dword [ebp - 0x4d8]
lea ebx, [ebp - 0x48]
push eax
push eax
push ebx
push esi
call dword [ebp - 0x4c0]
pop edx
test eax, eax
pop ecx
jne 0x45c2a0
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x4ac], 0x224
test eax, eax
je 0x45c108
call sub.KERNEL32.dll_GetTickCount
mov dword [ebp - 0x4b0], eax
mov esi, dword [ebp - 0x4d8]
lea ebx, [ebp - 0x4ac]
push eax
push eax
push ebx
push esi
call dword [ebp - 0x4b8]
pop edx
test eax, eax
pop ecx
jne 0x45c368
mov esi, dword [ebp - 0x4dc]
test esi, esi
je 0x45c4b1
sub esp, 0xc
mov ebx, dword [ebp - 0x4d8]
push ebx
call dword [ebp - 0x4dc]
add esp, 0xc
lea esi, [esi]
sub esp, 0xc
push edi
call sub.KERNEL32.dll_FreeLibrary
add esp, 0xc
call fcn.0045bac0
sub esp, 0xc
lea ebx, [ebp - 0x68]
push ebx
call sub.KERNEL32.dll_GlobalMemoryStatus
add esp, 0xc
push 0x3ff00000
push 0
push 0x20
push ebx
call fcn.00427a80
call sub.KERNEL32.dll_GetCurrentProcessId
push 0x3ff00000
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push 0
push 4
push eax
call fcn.00427a80
lea esp, [ebp - 0xc]
mov eax, 1
pop ebx
pop esi
pop edi
pop ebp
ret
sub esp, 0xc
mov dword [ebp - 0x2c], 0x14
lea esi, [ebp - 0x2c]
push esi
call dword [ebp - 0x4e4]
add esp, 0xc
test eax, eax
je 0x45be70
mov eax, dword [ebp - 0x2c]
push 0x40000000
push 0
push eax
push esi
call fcn.00427a80
mov esi, dword [ebp - 0x4e0]
add esp, 0x10
test esi, esi
jne 0x45be7a
jmp 0x45bea3
mov dword [ebp - 0x4f4], 0
jmp 0x45bdc5
call fcn.00427cb0
test eax, eax
jne 0x45beaf
jmp 0x45bde4
mov ecx, dword [ebp - 0x10]
push eax
lea eax, [ebp - 0xcc]
push eax
push 0x40
push ecx
call esi
mov dword [ebp - 0x4f4], 0
pop edx
test eax, eax
jne 0x45c446
mov ecx, dword [ebp - 0x10]
push eax
push eax
push 0
push ecx
call dword [ebp - 0x4ec]
pop eax
pop edx
jmp 0x45bda6
mov ecx, dword [ebp - 0x10]
push ebx
lea ebx, [ebp - 0xcc]
push ebx
push 0x40
push ecx
call esi
pop edx
test eax, eax
jne 0x45c425
push eax
push eax
mov eax, dword [ebp - 0x10]
push 0
push eax
call dword [ebp - 0x4ec]
pop esi
pop eax
jmp 0x45bdc5
mov eax, dword [ebp - 0x18]
push 0x40468000
push 0
push 0xd8
push eax
call fcn.00427a80
pop eax
mov eax, dword [ebp - 0x18]
push eax
call dword [ebp - 0x4e8]
add esp, 0xc
jmp 0x45bcc5
mov eax, dword [ebp - 0x48]
push 0x40180000
push 0
push eax
push ebx
call fcn.00427a80
pop esi
mov ecx, dword [ebp - 0x4d8]
pop eax
push ebx
push ecx
call dword [ebp - 0x4bc]
pop esi
test eax, eax
pop edx
je 0x45c0e9
mov ecx, dword [ebp - 0x4f4]
test ecx, ecx
je 0x45c2a0
call sub.KERNEL32.dll_GetTickCount
mov edx, dword [ebp - 0x4b0]
sub eax, edx
cmp eax, 0x3e7
jbe 0x45c2a0
mov dword [ebp - 0x4ac], 0x224
jmp 0x45c0fd
mov eax, dword [ebp - 0x288]
push 0x40220000
push 0
push eax
push ebx
call fcn.00427a80
pop esi
mov ecx, dword [ebp - 0x4d8]
pop eax
push ebx
push ecx
call dword [ebp - 0x4c4]
pop esi
test eax, eax
pop edx
je 0x45c0b0
mov ecx, dword [ebp - 0x4f4]
test ecx, ecx
je 0x45c2f8
call sub.KERNEL32.dll_GetTickCount
mov edx, dword [ebp - 0x4b0]
sub eax, edx
cmp eax, 0x3e7
jbe 0x45c2f8
mov dword [ebp - 0x48], 0x1c
jmp 0x45c0c1
call sub.KERNEL32.dll_GetTickCount
mov edx, dword [ebp - 0x4b0]
sub eax, edx
cmp eax, 0x3e7
ja 0x45c128
mov eax, dword [ebp - 0x4ac]
push 0x40220000
push 0
push eax
push ebx
call fcn.00427a80
pop esi
mov ecx, dword [ebp - 0x4d8]
pop eax
push ebx
push ecx
call dword [ebp - 0x4b4]
pop esi
test eax, eax
pop edx
je 0x45c128
mov ecx, dword [ebp - 0x4f4]
test ecx, ecx
je 0x45c368
jmp 0x45c350
mov eax, dword [ebp - 0x2c]
push 0x40080000
push 0
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00427a80
add esp, 0xc
mov ebx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x8c], 0x24
push ebx
push ecx
push esi
call dword [ebp - 0x4d4]
pop edx
test eax, eax
jne 0x45c46a
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x4d8]
push ebx
push ebx
push eax
push ecx
call dword [ebp - 0x4cc]
pop ebx
test eax, eax
pop edx
je 0x45c071
mov ecx, dword [ebp - 0x4f4]
test ecx, ecx
je 0x45c3a2
call sub.KERNEL32.dll_GetTickCount
mov edx, dword [ebp - 0x4b0]
sub eax, edx
cmp eax, 0x3e7
jbe 0x45c3a2
mov dword [ebp - 0x288], 0x128
jmp 0x45c085
push 0x40500000
push 0
push 0x40
push ebx
call fcn.00427a80
add esp, 0x10
mov dword [ebp - 0x4f4], 1
jmp 0x45c263
lea eax, [ebp - 0xcc]
push 0
push 0
push 0x40
push eax
call fcn.00427a80
add esp, 0x10
mov dword [ebp - 0x4f4], 1
jmp 0x45c235
mov ebx, 0x50
jmp 0x45c478
dec ebx
je 0x45c3db
mov eax, dword [ebp - 0x8c]
push 0x40140000
push 0
push eax
push esi
call fcn.00427a80
mov dword [esp], esi
call dword [ebp - 0x4d0]
add esp, 0xc
test eax, eax
jne 0x45c471
jmp 0x45c3db
call sub.KERNEL32.dll_GetTickCount
mov dword [ebp - 0x4b0], eax
jmp 0x45c052
sub esp, 0xc
mov ecx, dword [ebp - 0x4d8]
push ecx
call sub.KERNEL32.dll_CloseHandle
add esp, 0xc
jmp 0x45c150