Function at 0x437f0a
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0x2c]
sub esp, 0xb4
mov ecx, dword [0x4e1188]
push ebx
push esi
mov esi, dword [eax + ecx*4]
mov eax, dword [0x4df444]
push edi
cmp eax, dword [esi + 4]
jg 0x438429
mov eax, dword [0x4df468]
mov ebx, 0x4df450
cmp eax, dword [esi + 4]
jg 0x438463
call sub.KERNEL32.dll_GetTickCount
mov ecx, ebx
mov esi, eax
call fcn.004684b9
cmp byte [ebp + 0xc], 0
jne 0x437fa2
mov ecx, dword [0x4df448]
test ecx, ecx
je 0x437fa2
push esi
push ecx
call fcn.00458ebd
pop ecx
pop ecx
cmp eax, 0x36ee80
jae 0x437fa2
mov esi, dword [ebp + 8]
mov ecx, esi
mov eax, dword [esi]
call dword [eax + 0x18]
mov eax, dword [esi]
mov edi, 0x4d147c
push edi
mov ecx, esi
call dword [eax + 0xc]
mov ecx, ebx
call fcn.004688fb
mov al, byte [0x4df44c]
jmp 0x438424
xor ebx, ebx
mov dword [0x4df448], esi
lea ecx, [ebp - 0xb4]
mov byte [0x4df44c], bl
call fcn.004081b3
lea ecx, [ebp - 0x10]
call fcn.00428bf1
mov edi, 0x20009
lea ecx, [ebp - 0xb4]
push edi
push 0x40
push str.SystemCurrentControlSetServicesVxDMSTCP
mov esi, reloc.OLEAUT32.dll_SysReAllocString
push esi
call fcn.0045e545
test eax, eax
je 0x438064
push ebx
push 0x49cd2d
push str.EnableDNS
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0045dd3a
push 0x4a46b0
lea ecx, [ebp - 0x1c]
call fcn.0042750e
test al, al
je 0x438051
push ebx
push 0x49cd2d
push str.NameServer
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0045dd3a
push eax
lea ecx, [ebp - 0x10]
call fcn.00423f7f
lea ecx, [ebp - 0x2c]
call fcn.00426528
push 1
lea eax, [ebp + 0xc]
mov byte [ebp + 0xc], 0x20
push eax
push ebx
push dword [ebp - 0xc]
lea ecx, [ebp - 0x10]
call fcn.0042d4dd
lea ecx, [ebp - 0xb4]
call fcn.0045ce97
lea ecx, [ebp - 0x1c]
call fcn.00426528
push edi
push 0x40
push str.SystemCurrentControlSetServicesVxDDHCPDhcpInfo00
push esi
lea ecx, [ebp - 0xb4]
call fcn.0045e545
test eax, eax
je 0x438191
push ebx
push 0x49cd2d
push str.OptionInfo
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0045dd3a
lea ecx, [ebp - 0xb4]
call fcn.0045ce97
mov esi, ebx
cmp dword [ebp - 0x18], ebx
jle 0x438184
push esi
lea ecx, [ebp - 0x1c]
inc esi
call fcn.00424dfd
movsx edi, al
test al, al
je 0x438174
push esi
inc esi
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x30], esi
call fcn.00424dfd
movzx ebx, al
mov dword [ebp - 0x20], ebx
cmp ebx, 0x100
jae 0x43817d
cmp edi, 6
jne 0x438172
push 4
push ebx
call fcn.004896dc
mov dword [ebp + 0xc], eax
pop ecx
pop ecx
test edx, edx
jne 0x438172
xor edi, edi
mov ebx, esi
test eax, eax
jle 0x43816f
mov esi, eax
push ebx
lea ecx, [ebp - 0x1c]
call fcn.0042b887
test eax, eax
je 0x43816c
xor ecx, ecx
mov dword [ebp - 4], ecx
lea ecx, [ebp - 4]
push dword [eax]
call fcn.0046a2ce
lea ecx, [ebp - 4]
call fcn.00439308
test al, al
jne 0x438164
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 4]
call fcn.0046a0ec
push eax
lea ecx, [ebp - 0x10]
call fcn.00423f7f
lea ecx, [ebp - 0x2c]
call fcn.00426528
push 1
lea eax, [ebp + 0xc]
mov byte [ebp + 0xc], 0x20
push eax
push 0
push dword [ebp - 0xc]
lea ecx, [ebp - 0x10]
call fcn.0042d4dd
add ebx, 4
inc edi
cmp edi, esi
jl 0x438108
mov esi, dword [ebp - 0x30]
mov ebx, dword [ebp - 0x20]
add esi, ebx
cmp esi, dword [ebp - 0x18]
jl 0x4380b0
xor ebx, ebx
mov edi, 0x20009
lea ecx, [ebp - 0x1c]
call fcn.00426528
mov esi, reloc.OLEAUT32.dll_SysReAllocString
push edi
push 0x40
push str.SystemCurrentControlSetServicesTcpipParameters
push esi
lea ecx, [ebp - 0xb4]
call fcn.0045e545
test eax, eax
je 0x4381f5
push ebx
push 0x49cd2d
push str.DhcpNameServer
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0045dd3a
push eax
lea ecx, [ebp - 0x10]
call fcn.00423f7f
lea ecx, [ebp - 0x2c]
call fcn.00426528
push 1
lea eax, [ebp + 0xc]
mov byte [ebp + 0xc], 0x20
push eax
push ebx
push dword [ebp - 0xc]
lea ecx, [ebp - 0x10]
call fcn.0042d4dd
lea ecx, [ebp - 0xb4]
call fcn.0045ce97
lea ecx, [ebp - 0x10]
call fcn.0040b46c
mov esi, 0x49cb54
test al, al
je 0x438338
push edi
push 0x40
push str.SystemCurrentControlSetServicesTcpipParametersInterfaces
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0xb4]
call fcn.0045e545
test eax, eax
je 0x438338
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x58], esi
call fcn.00406a2c
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0045d92c
test eax, eax
je 0x438322
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x70]
call fcn.00402541
jmp 0x438312
mov eax, dword [ebp - 0x5c]
mov ecx, 0x49bb60
push edi
push 0x40
cmp dword [eax], 0
cmovne ecx, dword [eax]
push ecx
lea ecx, [ebp - 0xb4]
call fcn.0045e7f5
test eax, eax
je 0x438312
push ebx
push 0x49cd2d
push str.NameServer
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0045dd3a
push eax
lea ecx, [ebp - 0x10]
call fcn.00423f7f
lea ecx, [ebp - 0x2c]
call fcn.00426528
push 1
lea eax, [ebp + 0xc]
mov byte [ebp + 0xc], 0x20
push eax
push ebx
push dword [ebp - 0xc]
lea ecx, [ebp - 0x10]
call fcn.0042d4dd
push ebx
push 0x49cd2d
push str.DhcpNameServer
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0045dd3a
push eax
lea ecx, [ebp - 0x10]
call fcn.00423f7f
lea ecx, [ebp - 0x1c]
call fcn.00426528
push 1
lea eax, [ebp + 0xc]
mov byte [ebp + 0xc], 0x20
push eax
push ebx
push dword [ebp - 0xc]
lea ecx, [ebp - 0x10]
call fcn.0042d4dd
lea ecx, [ebp - 0xb4]
call fcn.0045ce97
lea ecx, [ebp - 0x70]
call fcn.004025a6
test al, al
jne 0x438260
lea ecx, [ebp - 0xb4]
call fcn.0045ce97
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x58], esi
call fcn.0040ab45
lea ecx, [ebp - 0x10]
call fcn.00431818
lea ecx, [ebp - 0x10]
call fcn.00431800
and dword [ebp - 0x40], 0
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x44], esi
call fcn.00406a2c
push 8
push str.____r_n
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x10]
call fcn.004278a5
lea eax, [ebp - 0x44]
push eax
call fcn.00436c4f
pop ecx
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x70]
call fcn.00402541
lea ecx, [ebp - 0x70]
call fcn.004025a6
mov esi, dword [ebp + 8]
jmp 0x4383d2
mov eax, dword [esi]
mov ecx, esi
push 0
call dword [eax + 4]
mov ecx, dword [ebp - 0x5c]
mov edx, 0x49bb60
mov edi, eax
push 0
cmp dword [ecx], 0
cmovne edx, dword [ecx]
mov ecx, edi
push edx
call fcn.0046a1c3
test al, al
je 0x4383c3
mov ecx, edi
call fcn.00439308
test al, al
jne 0x4383c3
mov bl, 1
jmp 0x4383ca
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2c]
lea ecx, [ebp - 0x70]
call fcn.004025a6
test al, al
jne 0x43838d
mov eax, dword [0x4d147c]
mov edi, 0x4d147c
mov ecx, edi
call dword [eax + 0x18]
mov eax, dword [0x4d147c]
mov ecx, edi
push esi
call dword [eax + 0xc]
mov ecx, 0x4df450
mov byte [0x4df44c], bl
call fcn.004688fb
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x44], 0x49cb54
call fcn.0040ab45
lea ecx, [ebp - 0x10]
call fcn.00426528
lea ecx, [ebp - 0xb4]
call fcn.00408581
mov al, bl
pop edi
pop esi
pop ebx
leave
ret
mov edi, 0x4df444
push edi
call fcn.0046bee9
cmp dword [0x4df444], 0xffffffff
pop ecx
jne 0x437f36
mov ecx, 0x4d147c
call fcn.004073c2
push 0x49abec
call fcn.0046bcd8
push edi
call fcn.0046be9f
pop ecx
pop ecx
jmp 0x437f36
mov esi, 0x4df468
push esi
call fcn.0046bee9
cmp dword [0x4df468], 0xffffffff
pop ecx
jne 0x437f4c
mov ecx, ebx
call fcn.00467b9a
push 0x49abd8
call fcn.0046bcd8
push esi
call fcn.0046be9f
pop ecx
pop ecx
jmp 0x437f4c