Function at 0x45ab80
Capabilities:
Check for time delay via gettickcount
Get memory capacity
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x4f8
lea eax, [ebp - 0x160]
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x160], 0x94
push eax
call sub.KERNEL32.dll_GetVersionExA
push str.ADVAPI32.DLL
call sub.KERNEL32.dll_LoadLibraryA
mov dword [ebp - 0x4f0], eax
push str.KERNEL32.DLL
call sub.KERNEL32.dll_LoadLibraryA
mov edi, eax
push str.NETAPI32.DLL
call sub.KERNEL32.dll_LoadLibraryA
add esp, 0xc
mov ebx, eax
test eax, eax
je 0x45ac6c
push esi
push esi
push str.NetStatisticsGet
push eax
call sub.KERNEL32.dll_GetProcAddress
mov esi, eax
push str.NetApiBufferFree
push ebx
call sub.KERNEL32.dll_GetProcAddress
test esi, esi
pop edx
mov dword [ebp - 0x4e8], eax
pop ecx
je 0x45ac60
test eax, eax
je 0x45ac60
sub esp, 0xc
lea eax, [ebp - 0x18]
push eax
push 0
push 0
push str.LanmanWorkstation
push 0
call esi
add esp, 0xc
test eax, eax
je 0x45b1d8
sub esp, 0xc
lea eax, [ebp - 0x18]
push eax
push 0
push 0
push str.LanmanServer
push 0
call esi
add esp, 0xc
test eax, eax
jne 0x45ac60
mov ecx, dword [ebp - 0x18]
push 0x40310000
push 0
push 0x44
push ecx
call fcn.00426be0
pop edx
mov eax, dword [ebp - 0x18]
push eax
call dword [ebp - 0x4e8]
add esp, 0xc
sub esp, 0xc
push ebx
call sub.KERNEL32.dll_FreeLibrary
add esp, 0xc
mov eax, dword [ebp - 0x4f0]
mov dword [ebp - 0x4f4], 0
test eax, eax
je 0x45ad37
push eax
push eax
mov eax, dword [ebp - 0x4f0]
push str.CryptAcquireContextW
push eax
call sub.KERNEL32.dll_GetProcAddress
mov ebx, eax
mov eax, dword [ebp - 0x4f0]
push str.CryptGenRandom
push eax
call sub.KERNEL32.dll_GetProcAddress
mov esi, eax
mov eax, dword [ebp - 0x4f0]
push str.CryptReleaseContext
push eax
call sub.KERNEL32.dll_GetProcAddress
test ebx, ebx
pop edx
mov dword [ebp - 0x4ec], eax
pop ecx
je 0x45b150
test esi, esi
je 0x45b150
test eax, eax
je 0x45b150
sub esp, 0xc
lea eax, [ebp - 0x10]
push 0xf0000000
push 1
push 0
push 0
push eax
call ebx
mov dword [ebp - 0x4f4], 0
add esp, 0xc
test eax, eax
jne 0x45b172
sub esp, 0xc
lea eax, [ebp - 0x10]
push 0
push 0x16
push str.Intel_Hardware_Cryptographic_Service_Provider
push 0
push eax
call ebx
add esp, 0xc
test eax, eax
jne 0x45b1aa
sub esp, 0xc
mov ebx, dword [ebp - 0x4f0]
push ebx
call sub.KERNEL32.dll_FreeLibrary
add esp, 0xc
cmp dword [ebp - 0x150], 2
je 0x45b160
sub esp, 0xc
push str.USER32.DLL
call sub.KERNEL32.dll_LoadLibraryA
add esp, 0xc
mov ebx, eax
test eax, eax
je 0x45ae0f
push ecx
push ecx
push str.GetForegroundWindow
push eax
call sub.KERNEL32.dll_GetProcAddress
mov esi, eax
push str.GetCursorInfo
push ebx
call sub.KERNEL32.dll_GetProcAddress
mov dword [ebp - 0x4e4], eax
push str.GetQueueStatus
push ebx
call sub.KERNEL32.dll_GetProcAddress
test esi, esi
mov dword [ebp - 0x4e0], eax
pop eax
pop edx
je 0x45adac
call esi
push 0
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push 0
push 4
push eax
call fcn.00426be0
add esp, 0x10
mov eax, dword [ebp - 0x4e4]
test eax, eax
je 0x45add0
cmp dword [ebp - 0x150], 2
jne 0x45b106
cmp dword [ebp - 0x15c], 4
ja 0x45b106
mov esi, dword [ebp - 0x4e0]
test esi, esi
je 0x45ae03
sub esp, 0xc
push 0xbf
call dword [ebp - 0x4e0]
add esp, 0xc
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push 0x3ff00000
push 0
push 4
push eax
call fcn.00426be0
add esp, 0x10
sub esp, 0xc
push ebx
call sub.KERNEL32.dll_FreeLibrary
add esp, 0xc
test edi, edi
je 0x45b0bc
push ebx
push ebx
push str.CreateToolhelp32Snapshot
push edi
call sub.KERNEL32.dll_GetProcAddress
mov ebx, eax
push str.CloseToolhelp32Snapshot
push edi
call sub.KERNEL32.dll_GetProcAddress
mov dword [ebp - 0x4dc], eax
push str.Heap32First
push edi
call sub.KERNEL32.dll_GetProcAddress
mov dword [ebp - 0x4d4], eax
push str.Heap32Next
push edi
call sub.KERNEL32.dll_GetProcAddress
mov dword [ebp - 0x4d0], eax
push str.Heap32ListFirst
push edi
call sub.KERNEL32.dll_GetProcAddress
mov esi, eax
push str.Heap32ListNext
push edi
call sub.KERNEL32.dll_GetProcAddress
mov dword [ebp - 0x4cc], eax
push str.Process32First
push edi
call sub.KERNEL32.dll_GetProcAddress
mov dword [ebp - 0x4c8], eax
push str.Process32Next
push edi
call sub.KERNEL32.dll_GetProcAddress
mov dword [ebp - 0x4c4], eax
push str.Thread32First
push edi
call sub.KERNEL32.dll_GetProcAddress
mov dword [ebp - 0x4c0], eax
push str.Thread32Next
push edi
call sub.KERNEL32.dll_GetProcAddress
mov dword [ebp - 0x4bc], eax
push str.Module32First
push edi
call sub.KERNEL32.dll_GetProcAddress
mov dword [ebp - 0x4b8], eax
push str.Module32Next
push edi
call sub.KERNEL32.dll_GetProcAddress
test ebx, ebx
pop edx
mov dword [ebp - 0x4b4], eax
pop ecx
je 0x45b0b0
mov ecx, dword [ebp - 0x4d4]
test ecx, ecx
je 0x45b0b0
mov edx, dword [ebp - 0x4d0]
test edx, edx
je 0x45b0b0
test esi, esi
je 0x45b0b0
mov ecx, dword [ebp - 0x4cc]
test ecx, ecx
je 0x45b0b0
mov edx, dword [ebp - 0x4c8]
test edx, edx
je 0x45b0b0
mov ecx, dword [ebp - 0x4c4]
test ecx, ecx
je 0x45b0b0
mov edx, dword [ebp - 0x4c0]
test edx, edx
je 0x45b0b0
mov ecx, dword [ebp - 0x4bc]
test ecx, ecx
je 0x45b0b0
mov edx, dword [ebp - 0x4b8]
test edx, edx
je 0x45b0b0
test eax, eax
je 0x45b0b0
push eax
push eax
push 0
push 0xf
call ebx
mov dword [ebp - 0x4d8], eax
pop edx
inc eax
pop ecx
je 0x45b0b0
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x2c], 0x10
mov dword [ebp - 0x4b0], 0
test eax, eax
jne 0x45b401
mov ebx, dword [ebp - 0x4d8]
push eax
push eax
lea eax, [ebp - 0x2c]
push eax
push ebx
call esi
lea esi, [ebp - 0x8c]
pop edx
test eax, eax
pop ecx
jne 0x45b302
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x288], 0x128
test eax, eax
je 0x45aff0
call sub.KERNEL32.dll_GetTickCount
mov dword [ebp - 0x4b0], eax
mov esi, dword [ebp - 0x4d8]
lea ebx, [ebp - 0x288]
push eax
push eax
push ebx
push esi
call dword [ebp - 0x4c8]
pop edx
test eax, eax
pop ecx
jne 0x45b258
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x48], 0x1c
test eax, eax
je 0x45b02c
call sub.KERNEL32.dll_GetTickCount
mov dword [ebp - 0x4b0], eax
mov esi, dword [ebp - 0x4d8]
lea ebx, [ebp - 0x48]
push eax
push eax
push ebx
push esi
call dword [ebp - 0x4c0]
pop edx
test eax, eax
pop ecx
jne 0x45b200
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x4ac], 0x224
test eax, eax
je 0x45b068
call sub.KERNEL32.dll_GetTickCount
mov dword [ebp - 0x4b0], eax
mov esi, dword [ebp - 0x4d8]
lea ebx, [ebp - 0x4ac]
push eax
push eax
push ebx
push esi
call dword [ebp - 0x4b8]
pop edx
test eax, eax
pop ecx
jne 0x45b2c8
mov esi, dword [ebp - 0x4dc]
test esi, esi
je 0x45b411
sub esp, 0xc
mov ebx, dword [ebp - 0x4d8]
push ebx
call dword [ebp - 0x4dc]
add esp, 0xc
lea esi, [esi]
sub esp, 0xc
push edi
call sub.KERNEL32.dll_FreeLibrary
add esp, 0xc
call fcn.0045aa20
sub esp, 0xc
lea ebx, [ebp - 0x68]
push ebx
call sub.KERNEL32.dll_GlobalMemoryStatus
add esp, 0xc
push 0x3ff00000
push 0
push 0x20
push ebx
call fcn.00426be0
call sub.KERNEL32.dll_GetCurrentProcessId
push 0x3ff00000
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push 0
push 4
push eax
call fcn.00426be0
lea esp, [ebp - 0xc]
mov eax, 1
pop ebx
pop esi
pop edi
pop ebp
ret
sub esp, 0xc
mov dword [ebp - 0x2c], 0x14
lea esi, [ebp - 0x2c]
push esi
call dword [ebp - 0x4e4]
add esp, 0xc
test eax, eax
je 0x45add0
mov eax, dword [ebp - 0x2c]
push 0x40000000
push 0
push eax
push esi
call fcn.00426be0
mov esi, dword [ebp - 0x4e0]
add esp, 0x10
test esi, esi
jne 0x45adda
jmp 0x45ae03
mov dword [ebp - 0x4f4], 0
jmp 0x45ad25
call fcn.00426dd0
test eax, eax
jne 0x45ae0f
jmp 0x45ad44
mov ecx, dword [ebp - 0x10]
push eax
lea eax, [ebp - 0xcc]
push eax
push 0x40
push ecx
call esi
mov dword [ebp - 0x4f4], 0
pop edx
test eax, eax
jne 0x45b3a6
mov ecx, dword [ebp - 0x10]
push eax
push eax
push 0
push ecx
call dword [ebp - 0x4ec]
pop eax
pop edx
jmp 0x45ad06
mov ecx, dword [ebp - 0x10]
push ebx
lea ebx, [ebp - 0xcc]
push ebx
push 0x40
push ecx
call esi
pop edx
test eax, eax
jne 0x45b385
push eax
push eax
mov eax, dword [ebp - 0x10]
push 0
push eax
call dword [ebp - 0x4ec]
pop esi
pop eax
jmp 0x45ad25
mov eax, dword [ebp - 0x18]
push 0x40468000
push 0
push 0xd8
push eax
call fcn.00426be0
pop eax
mov eax, dword [ebp - 0x18]
push eax
call dword [ebp - 0x4e8]
add esp, 0xc
jmp 0x45ac25
mov eax, dword [ebp - 0x48]
push 0x40180000
push 0
push eax
push ebx
call fcn.00426be0
pop esi
mov ecx, dword [ebp - 0x4d8]
pop eax
push ebx
push ecx
call dword [ebp - 0x4bc]
pop esi
test eax, eax
pop edx
je 0x45b049
mov ecx, dword [ebp - 0x4f4]
test ecx, ecx
je 0x45b200
call sub.KERNEL32.dll_GetTickCount
mov edx, dword [ebp - 0x4b0]
sub eax, edx
cmp eax, 0x3e7
jbe 0x45b200
mov dword [ebp - 0x4ac], 0x224
jmp 0x45b05d
mov eax, dword [ebp - 0x288]
push 0x40220000
push 0
push eax
push ebx
call fcn.00426be0
pop esi
mov ecx, dword [ebp - 0x4d8]
pop eax
push ebx
push ecx
call dword [ebp - 0x4c4]
pop esi
test eax, eax
pop edx
je 0x45b010
mov ecx, dword [ebp - 0x4f4]
test ecx, ecx
je 0x45b258
call sub.KERNEL32.dll_GetTickCount
mov edx, dword [ebp - 0x4b0]
sub eax, edx
cmp eax, 0x3e7
jbe 0x45b258
mov dword [ebp - 0x48], 0x1c
jmp 0x45b021
call sub.KERNEL32.dll_GetTickCount
mov edx, dword [ebp - 0x4b0]
sub eax, edx
cmp eax, 0x3e7
ja 0x45b088
mov eax, dword [ebp - 0x4ac]
push 0x40220000
push 0
push eax
push ebx
call fcn.00426be0
pop esi
mov ecx, dword [ebp - 0x4d8]
pop eax
push ebx
push ecx
call dword [ebp - 0x4b4]
pop esi
test eax, eax
pop edx
je 0x45b088
mov ecx, dword [ebp - 0x4f4]
test ecx, ecx
je 0x45b2c8
jmp 0x45b2b0
mov eax, dword [ebp - 0x2c]
push 0x40080000
push 0
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00426be0
add esp, 0xc
mov ebx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x8c], 0x24
push ebx
push ecx
push esi
call dword [ebp - 0x4d4]
pop edx
test eax, eax
jne 0x45b3ca
lea eax, [ebp - 0x2c]
mov ecx, dword [ebp - 0x4d8]
push ebx
push ebx
push eax
push ecx
call dword [ebp - 0x4cc]
pop ebx
test eax, eax
pop edx
je 0x45afd1
mov ecx, dword [ebp - 0x4f4]
test ecx, ecx
je 0x45b302
call sub.KERNEL32.dll_GetTickCount
mov edx, dword [ebp - 0x4b0]
sub eax, edx
cmp eax, 0x3e7
jbe 0x45b302
mov dword [ebp - 0x288], 0x128
jmp 0x45afe5
push 0x40500000
push 0
push 0x40
push ebx
call fcn.00426be0
add esp, 0x10
mov dword [ebp - 0x4f4], 1
jmp 0x45b1c3
lea eax, [ebp - 0xcc]
push 0
push 0
push 0x40
push eax
call fcn.00426be0
add esp, 0x10
mov dword [ebp - 0x4f4], 1
jmp 0x45b195
mov ebx, 0x50
jmp 0x45b3d8
dec ebx
je 0x45b33b
mov eax, dword [ebp - 0x8c]
push 0x40140000
push 0
push eax
push esi
call fcn.00426be0
mov dword [esp], esi
call dword [ebp - 0x4d0]
add esp, 0xc
test eax, eax
jne 0x45b3d1
jmp 0x45b33b
call sub.KERNEL32.dll_GetTickCount
mov dword [ebp - 0x4b0], eax
jmp 0x45afb2
sub esp, 0xc
mov ecx, dword [ebp - 0x4d8]
push ecx
call sub.KERNEL32.dll_CloseHandle
add esp, 0xc
jmp 0x45b0b0