Function at 0x435137
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0x2c]
sub esp, 0xb4
mov ecx, dword [0x4ae73c]
push ebx
push esi
mov esi, dword [eax + ecx*4]
mov eax, dword [0x4adcb4]
push edi
cmp eax, dword [esi + 4]
jg 0x435656
mov eax, dword [0x4adcd8]
mov ebx, 0x4adcc0
cmp eax, dword [esi + 4]
jg 0x435690
call sub.KERNEL32.dll_GetTickCount
mov ecx, ebx
mov esi, eax
call fcn.00457e06
cmp byte [ebp + 0xc], 0
jne 0x4351cf
mov ecx, dword [0x4adcb8]
test ecx, ecx
je 0x4351cf
push esi
push ecx
call fcn.0044990d
pop ecx
pop ecx
cmp eax, 0x36ee80
jae 0x4351cf
mov esi, dword [ebp + 8]
mov ecx, esi
mov eax, dword [esi]
call dword [eax + 0x18]
mov eax, dword [esi]
mov edi, 0x4a628c
push edi
mov ecx, esi
call dword [eax + 0xc]
mov ecx, ebx
call fcn.00457f57
mov al, byte [0x4adcbc]
jmp 0x435651
xor ebx, ebx
mov dword [0x4adcb8], esi
lea ecx, [ebp - 0xb4]
mov byte [0x4adcbc], bl
call fcn.00406de4
lea ecx, [ebp - 0x10]
call fcn.0042717c
mov edi, 0x20009
lea ecx, [ebp - 0xb4]
push edi
push 0x40
push str.SystemCurrentControlSetServicesVxDMSTCP
mov esi, reloc.OLEAUT32.dll_SysReAllocString
push esi
call fcn.0044ec72
test eax, eax
je 0x435291
push ebx
push 0x481222
push str.EnableDNS
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0044e4cc
push 0x486894
lea ecx, [ebp - 0x1c]
call fcn.00425a97
test al, al
je 0x43527e
push ebx
push 0x481222
push str.NameServer
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0044e4cc
push eax
lea ecx, [ebp - 0x10]
call fcn.00422b93
lea ecx, [ebp - 0x2c]
call fcn.00424b62
push 1
lea eax, [ebp + 0xc]
mov byte [ebp + 0xc], 0x20
push eax
push ebx
push dword [ebp - 0xc]
lea ecx, [ebp - 0x10]
call fcn.0042acb8
lea ecx, [ebp - 0xb4]
call fcn.0044d66f
lea ecx, [ebp - 0x1c]
call fcn.00424b62
push edi
push 0x40
push str.SystemCurrentControlSetServicesVxDDHCPDhcpInfo00
push esi
lea ecx, [ebp - 0xb4]
call fcn.0044ec72
test eax, eax
je 0x4353be
push ebx
push 0x481222
push str.OptionInfo
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0044e4cc
lea ecx, [ebp - 0xb4]
call fcn.0044d66f
mov esi, ebx
cmp dword [ebp - 0x18], ebx
jle 0x4353b1
push esi
lea ecx, [ebp - 0x1c]
inc esi
call fcn.0042365c
movsx edi, al
test al, al
je 0x4353a1
push esi
inc esi
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x30], esi
call fcn.0042365c
movzx ebx, al
mov dword [ebp - 0x20], ebx
cmp ebx, 0x100
jae 0x4353aa
cmp edi, 6
jne 0x43539f
push 4
push ebx
call fcn.0046adc1
mov dword [ebp + 0xc], eax
pop ecx
pop ecx
test edx, edx
jne 0x43539f
xor edi, edi
mov ebx, esi
test eax, eax
jle 0x43539c
mov esi, eax
push ebx
lea ecx, [ebp - 0x1c]
call fcn.004292ed
test eax, eax
je 0x435399
xor ecx, ecx
mov dword [ebp - 4], ecx
lea ecx, [ebp - 4]
push dword [eax]
call fcn.004592a8
lea ecx, [ebp - 4]
call fcn.004364f7
test al, al
jne 0x435391
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 4]
call fcn.00458e5f
push eax
lea ecx, [ebp - 0x10]
call fcn.00422b93
lea ecx, [ebp - 0x2c]
call fcn.00424b62
push 1
lea eax, [ebp + 0xc]
mov byte [ebp + 0xc], 0x20
push eax
push 0
push dword [ebp - 0xc]
lea ecx, [ebp - 0x10]
call fcn.0042acb8
add ebx, 4
inc edi
cmp edi, esi
jl 0x435335
mov esi, dword [ebp - 0x30]
mov ebx, dword [ebp - 0x20]
add esi, ebx
cmp esi, dword [ebp - 0x18]
jl 0x4352dd
xor ebx, ebx
mov edi, 0x20009
lea ecx, [ebp - 0x1c]
call fcn.00424b62
mov esi, reloc.OLEAUT32.dll_SysReAllocString
push edi
push 0x40
push str.SystemCurrentControlSetServicesTcpipParameters
push esi
lea ecx, [ebp - 0xb4]
call fcn.0044ec72
test eax, eax
je 0x435422
push ebx
push 0x481222
push str.DhcpNameServer
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0044e4cc
push eax
lea ecx, [ebp - 0x10]
call fcn.00422b93
lea ecx, [ebp - 0x2c]
call fcn.00424b62
push 1
lea eax, [ebp + 0xc]
mov byte [ebp + 0xc], 0x20
push eax
push ebx
push dword [ebp - 0xc]
lea ecx, [ebp - 0x10]
call fcn.0042acb8
lea ecx, [ebp - 0xb4]
call fcn.0044d66f
lea ecx, [ebp - 0x10]
call fcn.0040a238
mov esi, 0x47f558
test al, al
je 0x435565
push edi
push 0x40
push str.SystemCurrentControlSetServicesTcpipParametersInterfaces
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0xb4]
call fcn.0044ec72
test eax, eax
je 0x435565
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x58], esi
call fcn.00403ccf
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0044e101
test eax, eax
je 0x43554f
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x70]
call fcn.00402c89
jmp 0x43553f
mov eax, dword [ebp - 0x5c]
mov ecx, 0x47e730
push edi
push 0x40
cmp dword [eax], 0
cmovne ecx, dword [eax]
push ecx
lea ecx, [ebp - 0xb4]
call fcn.0044ee26
test eax, eax
je 0x43553f
push ebx
push 0x481222
push str.NameServer
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0044e4cc
push eax
lea ecx, [ebp - 0x10]
call fcn.00422b93
lea ecx, [ebp - 0x2c]
call fcn.00424b62
push 1
lea eax, [ebp + 0xc]
mov byte [ebp + 0xc], 0x20
push eax
push ebx
push dword [ebp - 0xc]
lea ecx, [ebp - 0x10]
call fcn.0042acb8
push ebx
push 0x481222
push str.DhcpNameServer
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0044e4cc
push eax
lea ecx, [ebp - 0x10]
call fcn.00422b93
lea ecx, [ebp - 0x1c]
call fcn.00424b62
push 1
lea eax, [ebp + 0xc]
mov byte [ebp + 0xc], 0x20
push eax
push ebx
push dword [ebp - 0xc]
lea ecx, [ebp - 0x10]
call fcn.0042acb8
lea ecx, [ebp - 0xb4]
call fcn.0044d66f
lea ecx, [ebp - 0x70]
call fcn.00402e3b
test al, al
jne 0x43548d
lea ecx, [ebp - 0xb4]
call fcn.0044d66f
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x58], esi
call fcn.00409854
lea ecx, [ebp - 0x10]
call fcn.0042ee2b
lea ecx, [ebp - 0x10]
call fcn.0042ee13
and dword [ebp - 0x40], 0
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x44], esi
call fcn.00403ccf
push 8
push str.____r_n
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x10]
call fcn.00425e85
lea eax, [ebp - 0x44]
push eax
call fcn.00433e7e
pop ecx
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x70]
call fcn.00402c89
lea ecx, [ebp - 0x70]
call fcn.00402e3b
mov esi, dword [ebp + 8]
jmp 0x4355ff
mov eax, dword [esi]
mov ecx, esi
push 0
call dword [eax + 4]
mov ecx, dword [ebp - 0x5c]
mov edx, 0x47e730
mov edi, eax
push 0
cmp dword [ecx], 0
cmovne edx, dword [ecx]
mov ecx, edi
push edx
call fcn.0045919d
test al, al
je 0x4355f0
mov ecx, edi
call fcn.004364f7
test al, al
jne 0x4355f0
mov bl, 1
jmp 0x4355f7
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2c]
lea ecx, [ebp - 0x70]
call fcn.00402e3b
test al, al
jne 0x4355ba
mov eax, dword [0x4a628c]
mov edi, 0x4a628c
mov ecx, edi
call dword [eax + 0x18]
mov eax, dword [0x4a628c]
mov ecx, edi
push esi
call dword [eax + 0xc]
mov ecx, 0x4adcc0
mov byte [0x4adcbc], bl
call fcn.00457f57
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x44], 0x47f558
call fcn.00409854
lea ecx, [ebp - 0x10]
call fcn.00424b62
lea ecx, [ebp - 0xb4]
call fcn.004071db
mov al, bl
pop edi
pop esi
pop ebx
leave
ret
mov edi, 0x4adcb4
push edi
call fcn.0045b4cb
cmp dword [0x4adcb4], 0xffffffff
pop ecx
jne 0x435163
mov ecx, 0x4a628c
call fcn.004046f2
push 0x47d370
call fcn.0045ac98
push edi
call fcn.0045b481
pop ecx
pop ecx
jmp 0x435163
mov esi, 0x4adcd8
push esi
call fcn.0045b4cb
cmp dword [0x4adcd8], 0xffffffff
pop ecx
jne 0x435179
mov ecx, ebx
call fcn.004576b3
push 0x47d35c
call fcn.0045ac98
push esi
call fcn.0045b481
pop ecx
pop ecx
jmp 0x435179