Function at 0x4239d0
Capabilities:
Check for time delay via gettickcount
Check if file exists
Check internet connectivity via wininet
Create process on windows
Print debug messages
Write and execute a file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ba1c8
mov eax, dword fs:[0]
push eax
sub esp, 0x5c
push ebx
push esi
push edi
mov eax, dword [0x4f52c0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
cmp byte [0x4f683a], 0
mov ebx, dword [sym.imp.KERNEL32.dll_GetTickCount]
je 0x423a0e
call ebx
mov dword [0x4fb388], eax
mov esi, dword [ebp + 8]
push esi
call fcn.0043b7d0
cmp byte [0x4f683a], 0
je 0x423a8c
call ebx
mov dword [0x4fb38c], eax
sub eax, dword [0x4fb388]
mov edi, 0x4fb418
push eax
push 0x4cbae0
push 0x4cbaf4
call fcn.00401f80
mov eax, dword [0x4fb418]
add esp, 0xc
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov eax, dword [0x4fb390]
test eax, eax
je 0x423a7c
mov ecx, dword [0x4fb418]
mov edx, dword [ecx - 0xc]
push eax
push edx
push 2
push ecx
call fcn.0049c567
mov ecx, dword [0x4fb390]
push ecx
call fcn.0049cdd7
add esp, 0x14
cmp byte [0x4f683a], 0
je 0x423a8c
call ebx
mov dword [0x4fb388], eax
add esi, 0xb0
lea edx, [ebp - 0x10]
push esi
push edx
mov ebx, 0x4cbb20
call fcn.00404180
add esp, 8
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x423ad4
push 0xb
push str.__RegServer
lea ebx, [ebp - 0x10]
call fcn.00406d60
mov ecx, dword [ebp - 0x10]
push ecx
call fcn.00423950
add esp, 4
cmp byte [0x4f683a], 0
je 0x423b3d
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x4fb38c], eax
sub eax, dword [0x4fb388]
mov edi, 0x4fb418
push eax
push 0x4cbb58
push 0x4cbaf4
call fcn.00401f80
mov edx, dword [0x4fb418]
add esp, 0xc
push edx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov eax, dword [0x4fb390]
test eax, eax
je 0x423b3d
mov ecx, dword [0x4fb418]
mov edx, dword [ecx - 0xc]
push eax
push edx
push 2
push ecx
call fcn.0049c567
mov eax, dword [0x4fb390]
push eax
call fcn.0049cdd7
add esp, 0x14
lea ecx, [ebp - 0x14]
push esi
push ecx
mov ebx, 0x4cbb20
call fcn.00404180
push 0x40
xor ebx, ebx
lea edx, [ebp - 0x64]
push ebx
push edx
call fcn.0049dad0
mov edx, dword [ebp - 0x14]
add esp, 0x14
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x68]
push ecx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push edx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x68], 0x44
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x423ba1
mov eax, dword [ebp - 0x24]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push eax
call esi
mov ecx, dword [ebp - 0x20]
push ecx
call esi
mov eax, dword [ebp - 0x14]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x423bc0
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [ebp - 0x14]
push ecx
mov dword [ebp - 0x14], ebx
call dword [sym.imp.SensApi.dll_IsNetworkAlive]
test eax, eax
jne 0x423c05
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
je 0x423c8f
push ebx
lea edx, [ebp - 0x14]
push edx
call dword [sym.imp.WININET.dll_InternetGetConnectedState]
test eax, eax
je 0x423c8f
mov al, byte [ebp - 0x14]
test al, 0x20
jne 0x423c8f
test al, 7
je 0x423c8f
cmp byte [0x4f683a], bl
je 0x423c18
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x4fb388], eax
mov ebx, dword [ebp + 8]
call fcn.0043a440
push ebx
call fcn.0043ac80
cmp byte [0x4f683a], 0
je 0x423c8f
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x4fb38c], eax
sub eax, dword [0x4fb388]
mov edi, 0x4fb418
push eax
push 0x4cbb84
push 0x4cbaf4
call fcn.00401f80
mov eax, dword [0x4fb418]
add esp, 0xc
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov eax, dword [0x4fb390]
test eax, eax
je 0x423c8f
mov ecx, dword [0x4fb418]
mov edx, dword [ecx - 0xc]
push eax
push edx
push 2
push ecx
call fcn.0049c567
mov ecx, dword [0x4fb390]
push ecx
call fcn.0049cdd7
add esp, 0x14
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x10]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x423cb5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4