Function at 0x1007e460
Capabilities:
Check for time delay via gettickcount
Check os version
Get memory capacity
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x10108718
push 0x100b5990
mov eax, dword fs:[0]
push eax
sub esp, 0x880
mov eax, dword [0x1010d170]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
xor esi, esi
mov dword [ebp - 0x7f4], esi
mov dword [ebp - 0x7e0], esi
mov dword [ebp - 0x178], 0x114
lea eax, [ebp - 0x178]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
push str.ADVAPI32.DLL
mov ebx, dword [sym.imp.KERNEL32.dll_LoadLibraryW]
call ebx
mov dword [ebp - 0x7e4], eax
push str.KERNEL32.DLL
call ebx
mov edi, eax
mov dword [ebp - 0x824], edi
push str.NETAPI32.DLL
call ebx
mov ebx, eax
mov dword [ebp - 0x7dc], esi
mov dword [ebp - 0x7ec], esi
mov dword [ebp - 0x7e8], esi
mov dword [ebp - 0x7d8], esi
mov dword [ebp - 0x7f0], esi
cmp ebx, esi
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
je 0x1007e52d
push str.NetStatisticsGet
push ebx
call esi
mov dword [ebp - 0x7d8], eax
push str.NetApiBufferFree
push ebx
call esi
mov dword [ebp - 0x7f0], eax
cmp dword [ebp - 0x7d8], 0
je 0x1007e5d6
cmp dword [ebp - 0x7f0], 0
je 0x1007e5d6
lea ecx, [ebp - 0x7d4]
push ecx
push 0
push 0
push str.LanmanWorkstation
push 0
call dword [ebp - 0x7d8]
test eax, eax
jne 0x1007e590
sub esp, 8
fld qword [0x101034a8]
fstp qword [esp]
push 0xd8
mov edx, dword [ebp - 0x7d4]
push edx
call fcn.100367b0
add esp, 0x10
mov eax, dword [ebp - 0x7d4]
push eax
call dword [ebp - 0x7f0]
lea ecx, [ebp - 0x7d4]
push ecx
push 0
push 0
push str.LanmanServer
push 0
call dword [ebp - 0x7d8]
test eax, eax
jne 0x1007e5d6
sub esp, 8
fld qword [0x101034a0]
fstp qword [esp]
push 0x44
mov edx, dword [ebp - 0x7d4]
push edx
call fcn.100367b0
add esp, 0x10
mov eax, dword [ebp - 0x7d4]
push eax
call dword [ebp - 0x7f0]
test ebx, ebx
je 0x1007e5e1
push ebx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp dword [ebp - 0x7e4], 0
je 0x1007e61a
push str.CryptAcquireContextW
mov ebx, dword [ebp - 0x7e4]
push ebx
call esi
mov dword [ebp - 0x7dc], eax
push str.CryptGenRandom
push ebx
call esi
mov dword [ebp - 0x7ec], eax
push str.CryptReleaseContext
push ebx
call esi
mov dword [ebp - 0x7e8], eax
cmp dword [ebp - 0x7dc], 0
je 0x1007e707
cmp dword [ebp - 0x7ec], 0
je 0x1007e707
cmp dword [ebp - 0x7e8], 0
je 0x1007e707
push 0xf0000000
push 1
push 0
push 0
lea ecx, [ebp - 0x7f4]
push ecx
mov ebx, dword [ebp - 0x7dc]
call ebx
test eax, eax
je 0x1007e6a5
lea edx, [ebp - 0x60]
push edx
push 0x40
mov eax, dword [ebp - 0x7f4]
push eax
call dword [ebp - 0x7ec]
test eax, eax
je 0x1007e696
sub esp, 8
fldz
fstp qword [esp]
push 0x40
lea ecx, [ebp - 0x60]
push ecx
call fcn.100367b0
add esp, 0x10
mov dword [ebp - 0x7e0], 1
push 0
mov edx, dword [ebp - 0x7f4]
push edx
call dword [ebp - 0x7e8]
push 0
push 0x16
push str.Intel_Hardware_Cryptographic_Service_Provider
push 0
lea eax, [ebp - 0x7f4]
push eax
call ebx
test eax, eax
je 0x1007e707
lea ecx, [ebp - 0x60]
push ecx
push 0x40
mov edx, dword [ebp - 0x7f4]
push edx
call dword [ebp - 0x7ec]
test eax, eax
je 0x1007e6f8
sub esp, 8
fld qword [0x10103498]
fstp qword [esp]
push 0x40
lea eax, [ebp - 0x60]
push eax
call fcn.100367b0
add esp, 0x10
mov dword [ebp - 0x7e0], 1
push 0
mov ecx, dword [ebp - 0x7f4]
push ecx
call dword [ebp - 0x7e8]
cmp dword [ebp - 0x7e4], 0
je 0x1007e71d
mov edx, dword [ebp - 0x7e4]
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp dword [ebp - 0x168], 2
jne 0x1007e733
call fcn.10031c40
test eax, eax
jne 0x1007e837
push str.USER32.DLL
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov ebx, eax
test ebx, ebx
je 0x1007e837
push 0x10101b6c
push ebx
call esi
mov dword [ebp - 0x7dc], eax
push str.GetCursorInfo
push ebx
call esi
mov dword [ebp - 0x7e4], eax
push str.GetQueueStatus
push ebx
call esi
mov dword [ebp - 0x7e8], eax
cmp dword [ebp - 0x7dc], 0
je 0x1007e7a0
call dword [ebp - 0x7dc]
mov dword [ebp - 0x7f8], eax
sub esp, 8
fldz
fstp qword [esp]
push 4
lea eax, [ebp - 0x7f8]
push eax
call fcn.100367b0
add esp, 0x10
mov eax, dword [ebp - 0x7e4]
test eax, eax
je 0x1007e7fd
cmp dword [ebp - 0x168], 2
jne 0x1007e7bc
cmp dword [ebp - 0x174], 5
jb 0x1007e7fd
test eax, eax
je 0x1007e7fd
mov dword [ebp - 0x814], 0x14
lea ecx, [ebp - 0x814]
push ecx
call dword [ebp - 0x7e4]
test eax, eax
je 0x1007e7fd
sub esp, 8
fld qword [0x10103490]
fstp qword [esp]
mov edx, dword [ebp - 0x814]
push edx
lea eax, [ebp - 0x814]
push eax
call fcn.100367b0
add esp, 0x10
cmp dword [ebp - 0x7e8], 0
je 0x1007e830
push 0xbf
call dword [ebp - 0x7e8]
mov dword [ebp - 0x7fc], eax
sub esp, 8
fld1
fstp qword [esp]
push 4
lea ecx, [ebp - 0x7fc]
push ecx
call fcn.100367b0
add esp, 0x10
push ebx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
test edi, edi
je 0x1007ed17
mov dword [ebp - 0x7d8], 0
push str.CreateToolhelp32Snapshot
push edi
call esi
mov ebx, eax
push str.CloseToolhelp32Snapshot
push edi
call esi
mov dword [ebp - 0x828], eax
push str.Heap32First
push edi
call esi
mov dword [ebp - 0x7e4], eax
push str.Heap32Next
push edi
call esi
mov dword [ebp - 0x7e8], eax
push str.Heap32ListFirst
push edi
call esi
mov dword [ebp - 0x7dc], eax
push str.Heap32ListNext
push edi
call esi
mov dword [ebp - 0x7ec], eax
push str.Process32First
push edi
call esi
mov dword [ebp - 0x7f0], eax
push str.Process32Next
push edi
call esi
mov dword [ebp - 0x818], eax
push str.Thread32First
push edi
call esi
mov dword [ebp - 0x81c], eax
push str.Thread32Next
push edi
call esi
mov dword [ebp - 0x800], eax
push str.Module32First
push edi
call esi
mov dword [ebp - 0x820], eax
push str.Module32Next
push edi
call esi
mov dword [ebp - 0x7f8], eax
test ebx, ebx
je 0x1007ed10
cmp dword [ebp - 0x7e4], 0
je 0x1007ed10
cmp dword [ebp - 0x7e8], 0
je 0x1007ed10
cmp dword [ebp - 0x7dc], 0
je 0x1007ed10
cmp dword [ebp - 0x7ec], 0
je 0x1007ed10
cmp dword [ebp - 0x7f0], 0
je 0x1007ed10
cmp dword [ebp - 0x818], 0
je 0x1007ed10
cmp dword [ebp - 0x81c], 0
je 0x1007ed10
cmp dword [ebp - 0x800], 0
je 0x1007ed10
cmp dword [ebp - 0x820], 0
je 0x1007ed10
test eax, eax
je 0x1007ed10
push 0
push 0xf
call ebx
mov dword [ebp - 0x7d4], eax
cmp eax, 0xffffffff
je 0x1007ed10
xor eax, eax
mov dword [ebp - 0x810], eax
mov dword [ebp - 0x80c], eax
mov dword [ebp - 0x808], eax
mov dword [ebp - 0x804], eax
mov dword [ebp - 0x810], 0x10
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
cmp dword [ebp - 0x7e0], eax
je 0x1007e9c1
call esi
mov dword [ebp - 0x7d8], eax
lea edx, [ebp - 0x810]
push edx
mov ebx, dword [ebp - 0x7d4]
push ebx
call dword [ebp - 0x7dc]
test eax, eax
je 0x1007eb41
mov dword [ebp - 0x7dc], 0x2a
jmp 0x1007e9f0
sub esp, 8
fld qword [0x10103488]
fstp qword [esp]
mov eax, dword [ebp - 0x810]
push eax
lea ecx, [ebp - 0x810]
push ecx
call fcn.100367b0
add esp, 0x10
wait
xor eax, eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x850], eax
mov dword [ebp - 0x84c], eax
mov dword [ebp - 0x848], eax
mov dword [ebp - 0x844], eax
mov dword [ebp - 0x840], eax
mov dword [ebp - 0x83c], eax
mov dword [ebp - 0x838], eax
mov dword [ebp - 0x834], eax
mov dword [ebp - 0x830], eax
mov dword [ebp - 0x850], 0x24
mov edx, dword [ebp - 0x808]
push edx
mov eax, dword [ebp - 0x80c]
push eax
lea ecx, [ebp - 0x850]
push ecx
call dword [ebp - 0x7e4]
test eax, eax
je 0x1007ead8
mov ebx, 0x50
mov dword [ebp - 0x82c], ebx
sub esp, 8
fld qword [0x10103480]
fstp qword [esp]
mov edx, dword [ebp - 0x850]
push edx
lea eax, [ebp - 0x850]
push eax
call fcn.100367b0
add esp, 0x10
lea ecx, [ebp - 0x850]
push ecx
call dword [ebp - 0x7e8]
test eax, eax
je 0x1007ead8
cmp dword [ebp - 0x7e0], 0
je 0x1007eacd
call esi
sub eax, dword [ebp - 0x7d8]
cmp eax, 0x3e8
jae 0x1007ead8
dec ebx
mov dword [ebp - 0x82c], ebx
test ebx, ebx
jg 0x1007ea82
wait
mov dword [ebp - 4], 0xfffffffe
jmp 0x1007eb04
lea edx, [ebp - 0x810]
push edx
mov ebx, dword [ebp - 0x7d4]
push ebx
call dword [ebp - 0x7ec]
test eax, eax
je 0x1007eb41
cmp dword [ebp - 0x7e0], 0
je 0x1007eb34
call esi
sub eax, dword [ebp - 0x7d8]
cmp eax, 0x3e8
jae 0x1007eb41
cmp dword [ebp - 0x7dc], 0
jg 0x1007e9f0
mov dword [ebp - 0x3a8], 0x22c
cmp dword [ebp - 0x7e0], 0
je 0x1007eb5c
call esi
mov dword [ebp - 0x7d8], eax
lea eax, [ebp - 0x3a8]
push eax
push ebx
call dword [ebp - 0x7f0]
test eax, eax
je 0x1007ebce
mov ebx, dword [ebp - 0x7d8]
mov esi, dword [ebp - 0x818]
sub esp, 8
fld qword [0x10103478]
fstp qword [esp]
mov ecx, dword [ebp - 0x3a8]
push ecx
lea edx, [ebp - 0x3a8]
push edx
call fcn.100367b0
add esp, 0x10
lea eax, [ebp - 0x3a8]
push eax
mov ecx, dword [ebp - 0x7d4]
push ecx
call esi
test eax, eax
je 0x1007ebc8
cmp dword [ebp - 0x7e0], 0
je 0x1007eb7a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, ebx
cmp eax, 0x3e8
jb 0x1007eb7a
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x86c], 0x1c
cmp dword [ebp - 0x7e0], 0
je 0x1007ebe9
call esi
mov dword [ebp - 0x7d8], eax
lea edx, [ebp - 0x86c]
push edx
mov eax, dword [ebp - 0x7d4]
push eax
call dword [ebp - 0x81c]
test eax, eax
je 0x1007ec61
mov ebx, dword [ebp - 0x7d8]
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
sub esp, 8
fld qword [0x10103470]
fstp qword [esp]
mov ecx, dword [ebp - 0x86c]
push ecx
lea edx, [ebp - 0x86c]
push edx
call fcn.100367b0
add esp, 0x10
lea eax, [ebp - 0x86c]
push eax
mov ecx, dword [ebp - 0x7d4]
push ecx
call dword [ebp - 0x800]
test eax, eax
je 0x1007ec5b
cmp dword [ebp - 0x7e0], 0
je 0x1007ec0d
call esi
sub eax, ebx
cmp eax, 0x3e8
jb 0x1007ec0d
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x7d0], 0x428
cmp dword [ebp - 0x7e0], 0
je 0x1007ec7c
call esi
mov dword [ebp - 0x7d8], eax
lea edx, [ebp - 0x7d0]
push edx
mov eax, dword [ebp - 0x7d4]
push eax
call dword [ebp - 0x820]
test eax, eax
je 0x1007ecee
mov ebx, dword [ebp - 0x7f8]
lea ebx, [ebx]
sub esp, 8
fld qword [0x10103478]
fstp qword [esp]
mov ecx, dword [ebp - 0x7d0]
push ecx
lea edx, [ebp - 0x7d0]
push edx
call fcn.100367b0
add esp, 0x10
lea eax, [ebp - 0x7d0]
push eax
mov ecx, dword [ebp - 0x7d4]
push ecx
call ebx
test eax, eax
je 0x1007ecee
cmp dword [ebp - 0x7e0], 0
je 0x1007eca0
call esi
sub eax, dword [ebp - 0x7d8]
cmp eax, 0x3e8
jb 0x1007eca0
mov eax, dword [ebp - 0x828]
test eax, eax
je 0x1007ed03
mov edx, dword [ebp - 0x7d4]
push edx
call eax
jmp 0x1007ed10
mov eax, dword [ebp - 0x7d4]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
call fcn.1007ed90
lea ecx, [ebp - 0x88c]
push ecx
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
sub esp, 8
fld1
fstp qword [esp]
push 0x20
lea edx, [ebp - 0x88c]
push edx
call fcn.100367b0
add esp, 0x10
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x7fc], eax
sub esp, 8
fld1
fstp qword [esp]
push 4
lea eax, [ebp - 0x7fc]
push eax
call fcn.100367b0
add esp, 0x10
mov eax, 1
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.100ae60d
mov esp, ebp
pop ebp
ret