Function at 0x43810a
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0x2c]
sub esp, 0xb4
mov ecx, dword [0x4e2198]
push ebx
push esi
mov esi, dword [eax + ecx*4]
mov eax, dword [0x4e0444]
push edi
cmp eax, dword [esi + 4]
jg 0x438629
mov eax, dword [0x4e0468]
mov ebx, 0x4e0450
cmp eax, dword [esi + 4]
jg 0x438663
call sub.KERNEL32.dll_GetTickCount
mov ecx, ebx
mov esi, eax
call fcn.004689d4
cmp byte [ebp + 0xc], 0
jne 0x4381a2
mov ecx, dword [0x4e0448]
test ecx, ecx
je 0x4381a2
push esi
push ecx
call fcn.00459100
pop ecx
pop ecx
cmp eax, 0x36ee80
jae 0x4381a2
mov esi, dword [ebp + 8]
mov ecx, esi
mov eax, dword [esi]
call dword [eax + 0x18]
mov eax, dword [esi]
mov edi, 0x4d247c
push edi
mov ecx, esi
call dword [eax + 0xc]
mov ecx, ebx
call fcn.00468e16
mov al, byte [0x4e044c]
jmp 0x438624
xor ebx, ebx
mov dword [0x4e0448], esi
lea ecx, [ebp - 0xb4]
mov byte [0x4e044c], bl
call fcn.004081b3
lea ecx, [ebp - 0x10]
call fcn.00428d6d
mov edi, 0x20009
lea ecx, [ebp - 0xb4]
push edi
push 0x40
push str.SystemCurrentControlSetServicesVxDMSTCP
mov esi, reloc.OLEAUT32.dll_SysReAllocString
push esi
call fcn.0045e720
test eax, eax
je 0x438264
push ebx
push 0x49dd3d
push str.EnableDNS
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0045df15
push 0x4a56e0
lea ecx, [ebp - 0x1c]
call fcn.0042768a
test al, al
je 0x438251
push ebx
push 0x49dd3d
push str.NameServer
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0045df15
push eax
lea ecx, [ebp - 0x10]
call fcn.004240fb
lea ecx, [ebp - 0x2c]
call fcn.004266a4
push 1
lea eax, [ebp + 0xc]
mov byte [ebp + 0xc], 0x20
push eax
push ebx
push dword [ebp - 0xc]
lea ecx, [ebp - 0x10]
call fcn.0042d659
lea ecx, [ebp - 0xb4]
call fcn.0045d0db
lea ecx, [ebp - 0x1c]
call fcn.004266a4
push edi
push 0x40
push str.SystemCurrentControlSetServicesVxDDHCPDhcpInfo00
push esi
lea ecx, [ebp - 0xb4]
call fcn.0045e720
test eax, eax
je 0x438391
push ebx
push 0x49dd3d
push str.OptionInfo
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0045df15
lea ecx, [ebp - 0xb4]
call fcn.0045d0db
mov esi, ebx
cmp dword [ebp - 0x18], ebx
jle 0x438384
push esi
lea ecx, [ebp - 0x1c]
inc esi
call fcn.00424f79
movsx edi, al
test al, al
je 0x438374
push esi
inc esi
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x30], esi
call fcn.00424f79
movzx ebx, al
mov dword [ebp - 0x20], ebx
cmp ebx, 0x100
jae 0x43837d
cmp edi, 6
jne 0x438372
push 4
push ebx
call fcn.00489c0c
mov dword [ebp + 0xc], eax
pop ecx
pop ecx
test edx, edx
jne 0x438372
xor edi, edi
mov ebx, esi
test eax, eax
jle 0x43836f
mov esi, eax
push ebx
lea ecx, [ebp - 0x1c]
call fcn.0042ba03
test eax, eax
je 0x43836c
xor ecx, ecx
mov dword [ebp - 4], ecx
lea ecx, [ebp - 4]
push dword [eax]
call fcn.0046a7fe
lea ecx, [ebp - 4]
call fcn.00439508
test al, al
jne 0x438364
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 4]
call fcn.0046a61c
push eax
lea ecx, [ebp - 0x10]
call fcn.004240fb
lea ecx, [ebp - 0x2c]
call fcn.004266a4
push 1
lea eax, [ebp + 0xc]
mov byte [ebp + 0xc], 0x20
push eax
push 0
push dword [ebp - 0xc]
lea ecx, [ebp - 0x10]
call fcn.0042d659
add ebx, 4
inc edi
cmp edi, esi
jl 0x438308
mov esi, dword [ebp - 0x30]
mov ebx, dword [ebp - 0x20]
add esi, ebx
cmp esi, dword [ebp - 0x18]
jl 0x4382b0
xor ebx, ebx
mov edi, 0x20009
lea ecx, [ebp - 0x1c]
call fcn.004266a4
mov esi, reloc.OLEAUT32.dll_SysReAllocString
push edi
push 0x40
push str.SystemCurrentControlSetServicesTcpipParameters
push esi
lea ecx, [ebp - 0xb4]
call fcn.0045e720
test eax, eax
je 0x4383f5
push ebx
push 0x49dd3d
push str.DhcpNameServer
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0045df15
push eax
lea ecx, [ebp - 0x10]
call fcn.004240fb
lea ecx, [ebp - 0x2c]
call fcn.004266a4
push 1
lea eax, [ebp + 0xc]
mov byte [ebp + 0xc], 0x20
push eax
push ebx
push dword [ebp - 0xc]
lea ecx, [ebp - 0x10]
call fcn.0042d659
lea ecx, [ebp - 0xb4]
call fcn.0045d0db
lea ecx, [ebp - 0x10]
call fcn.0040b4a8
mov esi, 0x49db64
test al, al
je 0x438538
push edi
push 0x40
push str.SystemCurrentControlSetServicesTcpipParametersInterfaces
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0xb4]
call fcn.0045e720
test eax, eax
je 0x438538
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x58], esi
call fcn.00406a2c
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0045db07
test eax, eax
je 0x438522
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x70]
call fcn.00402541
jmp 0x438512
mov eax, dword [ebp - 0x5c]
mov ecx, 0x49cb70
push edi
push 0x40
cmp dword [eax], 0
cmovne ecx, dword [eax]
push ecx
lea ecx, [ebp - 0xb4]
call fcn.0045e9d0
test eax, eax
je 0x438512
push ebx
push 0x49dd3d
push str.NameServer
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0045df15
push eax
lea ecx, [ebp - 0x10]
call fcn.004240fb
lea ecx, [ebp - 0x2c]
call fcn.004266a4
push 1
lea eax, [ebp + 0xc]
mov byte [ebp + 0xc], 0x20
push eax
push ebx
push dword [ebp - 0xc]
lea ecx, [ebp - 0x10]
call fcn.0042d659
push ebx
push 0x49dd3d
push str.DhcpNameServer
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0xb4]
call fcn.0045df15
push eax
lea ecx, [ebp - 0x10]
call fcn.004240fb
lea ecx, [ebp - 0x1c]
call fcn.004266a4
push 1
lea eax, [ebp + 0xc]
mov byte [ebp + 0xc], 0x20
push eax
push ebx
push dword [ebp - 0xc]
lea ecx, [ebp - 0x10]
call fcn.0042d659
lea ecx, [ebp - 0xb4]
call fcn.0045d0db
lea ecx, [ebp - 0x70]
call fcn.004025a6
test al, al
jne 0x438460
lea ecx, [ebp - 0xb4]
call fcn.0045d0db
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x58], esi
call fcn.0040ab81
lea ecx, [ebp - 0x10]
call fcn.0043191f
lea ecx, [ebp - 0x10]
call fcn.00431907
and dword [ebp - 0x40], 0
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x44], esi
call fcn.00406a2c
push 8
push str.____r_n
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x10]
call fcn.00427a21
lea eax, [ebp - 0x44]
push eax
call fcn.00436e51
pop ecx
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x70]
call fcn.00402541
lea ecx, [ebp - 0x70]
call fcn.004025a6
mov esi, dword [ebp + 8]
jmp 0x4385d2
mov eax, dword [esi]
mov ecx, esi
push 0
call dword [eax + 4]
mov ecx, dword [ebp - 0x5c]
mov edx, 0x49cb70
mov edi, eax
push 0
cmp dword [ecx], 0
cmovne edx, dword [ecx]
mov ecx, edi
push edx
call fcn.0046a6f3
test al, al
je 0x4385c3
mov ecx, edi
call fcn.00439508
test al, al
jne 0x4385c3
mov bl, 1
jmp 0x4385ca
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x2c]
lea ecx, [ebp - 0x70]
call fcn.004025a6
test al, al
jne 0x43858d
mov eax, dword [0x4d247c]
mov edi, 0x4d247c
mov ecx, edi
call dword [eax + 0x18]
mov eax, dword [0x4d247c]
mov ecx, edi
push esi
call dword [eax + 0xc]
mov ecx, 0x4e0450
mov byte [0x4e044c], bl
call fcn.00468e16
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x44], 0x49db64
call fcn.0040ab81
lea ecx, [ebp - 0x10]
call fcn.004266a4
lea ecx, [ebp - 0xb4]
call fcn.00408581
mov al, bl
pop edi
pop esi
pop ebx
leave
ret
mov edi, 0x4e0444
push edi
call fcn.0046c419
cmp dword [0x4e0444], 0xffffffff
pop ecx
jne 0x438136
mov ecx, 0x4d247c
call fcn.004073c2
push 0x49b11c
call fcn.0046c208
push edi
call fcn.0046c3cf
pop ecx
pop ecx
jmp 0x438136
mov esi, 0x4e0468
push esi
call fcn.0046c419
cmp dword [0x4e0468], 0xffffffff
pop ecx
jne 0x43814c
mov ecx, ebx
call fcn.004680b5
push 0x49b108
call fcn.0046c208
push esi
call fcn.0046c3cf
pop ecx
pop ecx
jmp 0x43814c