Function at 0x5eb9a0
Capabilities:
Check for time delay via gettickcount
Get memory capacity

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x650100
push 0x60cc10
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
mov eax, 0x8a4
call fcn.00609610
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
xor esi, esi
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x268], 0x114
lea eax, [ebp - 0x268]
push eax
call dword [0x673858]
push str.ADVAPI32.DLL
mov ebx, dword [0x673864]
call ebx
mov dword [ebp - 0x3c], eax
push str.KERNEL32.DLL
call ebx
mov edi, eax
mov dword [ebp - 0xa0], edi
push str.NETAPI32.DLL
call ebx
mov ebx, eax
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x38], esi
cmp ebx, esi
mov esi, dword [0x673850]
je 0x5eba46
push str.NetStatisticsGet
push ebx
call esi
mov dword [ebp - 0x30], eax
push str.NetApiBufferFree
push ebx
call esi
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x30]
test eax, eax
je 0x5ebad7
mov eax, dword [ebp - 0x38]
test eax, eax
je 0x5ebad7
lea ecx, [ebp - 0x28]
push ecx
push 0
push 0
push str.LanmanWorkstation
push 0
call dword [ebp - 0x30]
test eax, eax
jne 0x5eba99
fld qword [0x650058]
mov eax, 8
call fcn.00609610
fstp qword [esp]
push 0xd8
mov edx, dword [ebp - 0x28]
push edx
call fcn.005ba500
add esp, 0x10
mov eax, dword [ebp - 0x28]
push eax
call dword [ebp - 0x38]
lea ecx, [ebp - 0x28]
push ecx
push 0
push 0
push str.LanmanServer
push 0
call dword [ebp - 0x30]
test eax, eax
jne 0x5ebad7
fld qword [0x650030]
mov eax, 8
call fcn.00609610
fstp qword [esp]
push 0x44
mov edx, dword [ebp - 0x28]
push edx
call fcn.005ba500
add esp, 0x10
mov eax, dword [ebp - 0x28]
push eax
call dword [ebp - 0x38]
test ebx, ebx
je 0x5ebae2
push ebx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x5ebb0c
push str.CryptAcquireContextW
mov ebx, eax
push ebx
call esi
mov dword [ebp - 0x40], eax
push 0x650008
push ebx
call esi
mov dword [ebp - 0x2c], eax
push 0x64fff4
push ebx
call esi
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x40]
test eax, eax
je 0x5ebbea
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x5ebbea
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x5ebbea
push 0xf0000000
push 1
push 0
push 0
lea ecx, [ebp - 0x24]
push ecx
mov ebx, dword [ebp - 0x40]
call ebx
test eax, eax
je 0x5ebb8d
lea edx, [ebp - 0x154]
push edx
push 0x40
mov eax, dword [ebp - 0x24]
push eax
call dword [ebp - 0x2c]
test eax, eax
je 0x5ebb84
fld qword [0x63c9a8]
mov eax, 8
call fcn.00609610
fstp qword [esp]
push 0x40
lea ecx, [ebp - 0x154]
push ecx
call fcn.005ba500
add esp, 0x10
mov dword [ebp - 0x1c], 1
push 0
mov edx, dword [ebp - 0x24]
push edx
call dword [ebp - 0x34]
push 0
push 0x16
push str.Intel_Hardware_Cryptographic_Service_Provider
push 0
lea eax, [ebp - 0x24]
push eax
call ebx
test eax, eax
je 0x5ebbea
lea ecx, [ebp - 0x154]
push ecx
push 0x40
mov edx, dword [ebp - 0x24]
push edx
call dword [ebp - 0x2c]
test eax, eax
je 0x5ebbe1
fld qword [0x64ff90]
mov eax, 8
call fcn.00609610
fstp qword [esp]
push 0x40
lea eax, [ebp - 0x154]
push eax
call fcn.005ba500
add esp, 0x10
mov dword [ebp - 0x1c], 1
push 0
mov ecx, dword [ebp - 0x24]
push ecx
call dword [ebp - 0x34]
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x5ebbfa
mov edx, eax
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp dword [ebp - 0x258], 2
jne 0x5ebc10
call fcn.005b4dc0
test eax, eax
jne 0x5ebd15
push str.USER32.DLL
call dword [0x673864]
mov ebx, eax
test ebx, ebx
je 0x5ebd15
push str.GetForegroundWindow
push ebx
call esi
mov dword [ebp - 0x7c], eax
push str.GetCursorInfo
push ebx
call esi
mov dword [ebp - 0x4c], eax
push 0x64ff40
push ebx
call esi
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x7c]
test eax, eax
je 0x5ebc79
call eax
mov dword [ebp - 0x94], eax
fld qword [0x63c9a8]
mov eax, 8
call fcn.00609610
fstp qword [esp]
push 4
lea eax, [ebp - 0x94]
push eax
call fcn.005ba500
add esp, 0x10
mov eax, dword [ebp - 0x4c]
test eax, eax
je 0x5ebcdc
cmp dword [ebp - 0x258], 2
jne 0x5ebc97
cmp dword [ebp - 0x264], 5
jae 0x5ebc97
xor eax, eax
mov dword [ebp - 0x4c], eax
test eax, eax
je 0x5ebcdc
mov dword [ebp - 0xd8], 0x14
lea ecx, [ebp - 0xd8]
push ecx
call dword [ebp - 0x4c]
test eax, eax
je 0x5ebcdc
fld qword [0x64ff38]
mov eax, 8
call fcn.00609610
fstp qword [esp]
mov edx, dword [ebp - 0xd8]
push edx
lea eax, [ebp - 0xd8]
push eax
call fcn.005ba500
add esp, 0x10
mov eax, dword [ebp - 0x74]
test eax, eax
je 0x5ebd0e
push 0xbf
call eax
mov dword [ebp - 0x50], eax
fld qword [0x63add0]
mov eax, 8
call fcn.00609610
fstp qword [esp]
push 4
lea ecx, [ebp - 0x50]
push ecx
call fcn.005ba500
add esp, 0x10
push ebx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
test edi, edi
je 0x5ec183
mov dword [ebp - 0x44], 0
push str.CreateToolhelp32Snapshot
push edi
call esi
mov ebx, eax
push str.CloseToolhelp32Snapshot
push edi
call esi
mov dword [ebp - 0x9c], eax
push str.Heap32First
push edi
call esi
mov dword [ebp - 0x70], eax
push str.Heap32Next
push edi
call esi
mov dword [ebp - 0x68], eax
push str.Heap32ListFirst
push edi
call esi
mov dword [ebp - 0x60], eax
push str.Heap32ListNext
push edi
call esi
mov dword [ebp - 0x54], eax
push str.Process32First
push edi
call esi
mov dword [ebp - 0x58], eax
push str.Process32Next
push edi
call esi
mov dword [ebp - 0x5c], eax
push str.Thread32First
push edi
call esi
mov dword [ebp - 0x64], eax
push str.Thread32Next
push edi
call esi
mov dword [ebp - 0x6c], eax
push str.Module32First
push edi
call esi
mov dword [ebp - 0x78], eax
push 0x64fe68
push edi
call esi
mov dword [ebp - 0x80], eax
test ebx, ebx
je 0x5ec17c
mov eax, dword [ebp - 0x70]
test eax, eax
je 0x5ec17c
mov eax, dword [ebp - 0x68]
test eax, eax
je 0x5ec17c
mov eax, dword [ebp - 0x60]
test eax, eax
je 0x5ec17c
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x5ec17c
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x5ec17c
mov eax, dword [ebp - 0x5c]
test eax, eax
je 0x5ec17c
mov eax, dword [ebp - 0x64]
test eax, eax
je 0x5ec17c
mov eax, dword [ebp - 0x6c]
test eax, eax
je 0x5ec17c
mov eax, dword [ebp - 0x78]
test eax, eax
je 0x5ec17c
mov eax, dword [ebp - 0x80]
test eax, eax
je 0x5ec17c
push 0
push 0xf
call ebx
mov dword [ebp - 0x20], eax
cmp eax, 0xffffffff
je 0x5ec17c
xor edx, edx
mov dword [ebp - 0x90], edx
mov dword [ebp - 0x8c], edx
mov dword [ebp - 0x88], edx
mov dword [ebp - 0x84], edx
mov dword [ebp - 0x90], 0x10
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x5ebe6a
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, eax
mov dword [ebp - 0x44], esi
jmp 0x5ebe6d
mov esi, dword [ebp - 0x44]
lea eax, [ebp - 0x90]
push eax
mov ebx, dword [ebp - 0x20]
push ebx
call dword [ebp - 0x60]
test eax, eax
je 0x5ebfe1
mov dword [ebp - 0x48], 0x2a
lea ebx, [ebx]
fld qword [0x64fe60]
mov eax, 8
call fcn.00609610
fstp qword [esp]
mov ecx, dword [ebp - 0x90]
push ecx
lea edx, [ebp - 0x90]
push edx
call fcn.005ba500
add esp, 0x10
wait
mov dword [ebp - 4], 0
xor eax, eax
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xc4], 0x24
mov ecx, dword [ebp - 0x88]
push ecx
mov edx, dword [ebp - 0x8c]
push edx
lea eax, [ebp - 0xc4]
push eax
call dword [ebp - 0x70]
test eax, eax
je 0x5ebf88
mov ebx, 0x50
mov dword [ebp - 0x98], ebx
lea ebx, [ebx]
fld qword [0x64fe58]
mov eax, 8
call fcn.00609610
fstp qword [esp]
mov ecx, dword [ebp - 0xc4]
push ecx
lea edx, [ebp - 0xc4]
push edx
call fcn.005ba500
add esp, 0x10
lea eax, [ebp - 0xc4]
push eax
call dword [ebp - 0x68]
test eax, eax
je 0x5ebf88
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x5ebf7d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, esi
cmp eax, 0x3e8
jae 0x5ebf88
dec ebx
mov dword [ebp - 0x98], ebx
test ebx, ebx
jg 0x5ebf30
wait
mov dword [ebp - 4], 0xffffffff
jmp 0x5ebfae
lea ecx, [ebp - 0x90]
push ecx
mov ebx, dword [ebp - 0x20]
push ebx
call dword [ebp - 0x54]
test eax, eax
je 0x5ebfe1
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x5ebfd6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, esi
cmp eax, 0x3e8
jae 0x5ebfe1
mov eax, dword [ebp - 0x48]
test eax, eax
jg 0x5ebe90
mov dword [ebp - 0x494], 0x22c
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x5ebffa
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, eax
lea edx, [ebp - 0x494]
push edx
push ebx
call dword [ebp - 0x58]
test eax, eax
je 0x5ec060
mov ebx, dword [ebp - 0x5c]
lea esp, [esp]
fld qword [0x64fe50]
mov eax, 8
call fcn.00609610
fstp qword [esp]
mov eax, dword [ebp - 0x494]
push eax
lea ecx, [ebp - 0x494]
push ecx
call fcn.005ba500
add esp, 0x10
lea edx, [ebp - 0x494]
push edx
mov eax, dword [ebp - 0x20]
push eax
call ebx
test eax, eax
je 0x5ec060
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x5ec010
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, esi
cmp eax, 0x3e8
jb 0x5ec010
mov dword [ebp - 0xf4], 0x1c
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x5ec079
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, eax
lea ecx, [ebp - 0xf4]
push ecx
mov edx, dword [ebp - 0x20]
push edx
call dword [ebp - 0x64]
test eax, eax
je 0x5ec0e0
mov ebx, dword [ebp - 0x6c]
mov edi, edi
fld qword [0x64fe48]
mov eax, 8
call fcn.00609610
fstp qword [esp]
mov eax, dword [ebp - 0xf4]
push eax
lea ecx, [ebp - 0xf4]
push ecx
call fcn.005ba500
add esp, 0x10
lea edx, [ebp - 0xf4]
push edx
mov eax, dword [ebp - 0x20]
push eax
call ebx
test eax, eax
je 0x5ec0e0
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x5ec090
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, esi
cmp eax, 0x3e8
jb 0x5ec090
mov dword [ebp - 0x8bc], 0x428
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x5ec0f9
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, eax
lea ecx, [ebp - 0x8bc]
push ecx
mov edx, dword [ebp - 0x20]
push edx
call dword [ebp - 0x78]
test eax, eax
je 0x5ec160
mov ebx, dword [ebp - 0x80]
mov edi, edi
fld qword [0x64fe50]
mov eax, 8
call fcn.00609610
fstp qword [esp]
mov eax, dword [ebp - 0x8bc]
push eax
lea ecx, [ebp - 0x8bc]
push ecx
call fcn.005ba500
add esp, 0x10
lea edx, [ebp - 0x8bc]
push edx
mov eax, dword [ebp - 0x20]
push eax
call ebx
test eax, eax
je 0x5ec160
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x5ec110
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, esi
cmp eax, 0x3e8
jb 0x5ec110
mov eax, dword [ebp - 0x9c]
test eax, eax
je 0x5ec172
mov ecx, dword [ebp - 0x20]
push ecx
call eax
jmp 0x5ec17c
mov edx, dword [ebp - 0x20]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
call fcn.005eb910
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
fld qword [0x63add0]
mov eax, 8
call fcn.00609610
fstp qword [esp]
push 0x20
lea ecx, [ebp - 0x114]
push ecx
call fcn.005ba500
add esp, 0x10
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x50], eax
fld qword [0x63add0]
mov eax, 8
call fcn.00609610
fstp qword [esp]
push 4
lea edx, [ebp - 0x50]
push edx
call fcn.005ba500
add esp, 0x10
mov eax, 1
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret