Function at 0x4375b0
Capabilities:
Check for time delay via gettickcount
Get common file path
Link many functions at runtime
Print debug messages
Query or enumerate registry value
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ad237
mov eax, dword fs:[0]
push eax
sub esp, 0x424
mov eax, dword [0x4e52d0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
cmp byte [0x4e6790], 0
mov esi, ecx
mov dword [ebp - 0x42c], esi
je 0x4375fa
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x4eb36c], eax
lea eax, [esi + 0xa0]
push eax
lea eax, [ebp - 0x428]
push eax
mov ebx, 0x4c4210
call fcn.00404520
add esp, 8
mov dword [ebp - 4], 0
mov edi, dword [ebp - 0x428]
push 0
call dword [sym.imp.ole32.dll_OleInitialize]
mov esi, dword [sym.imp.ole32.dll_OleUninitialize]
test eax, eax
jns 0x437638
xor bl, bl
jmp 0x437692
push 1
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 8
push 0
push edi
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov edi, eax
cmp edi, 0x20
jae 0x437658
call esi
xor bl, bl
jmp 0x437692
push str.DllRegisterServer
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
jne 0x437675
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
call esi
xor bl, bl
jmp 0x437692
call eax
push edi
test eax, eax
jns 0x437688
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
call esi
xor bl, bl
jmp 0x437692
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
call esi
mov bl, 1
cmp byte [0x4e6790], 0
je 0x4376fc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x4eb370], eax
sub eax, dword [0x4eb36c]
mov edi, 0x4eb3f4
push eax
push 0x4c4224
push 0x4bdff8
call fcn.00402360
mov ecx, dword [0x4eb3f4]
add esp, 0xc
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov eax, dword [0x4eb374]
test eax, eax
je 0x4376fc
mov ecx, dword [0x4eb3f4]
mov edx, dword [ecx - 0xc]
push eax
push edx
push 2
push ecx
call fcn.00493e99
mov edx, dword [0x4eb374]
push edx
call fcn.00494637
add esp, 0x14
test bl, bl
jne 0x437721
mov edi, dword [ebp - 0x42c]
add edi, 0xa4
lea eax, [ebp - 0x424]
mov dword [ebp - 0x424], 0xfa1
call fcn.00407530
cmp byte [0x4e6790], 0
je 0x437735
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x4eb36c], eax
mov eax, dword [ebp - 0x42c]
add eax, 0xa0
push eax
lea eax, [ebp - 0x424]
push eax
mov ebx, 0x4c4244
call fcn.00404520
add esp, 8
mov ebx, 1
lea edi, [ebp - 0x428]
mov byte [ebp - 4], bl
call fcn.00404600
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x424]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x43778e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edi, dword [ebp - 0x428]
push 0
call dword [sym.imp.ole32.dll_OleInitialize]
test eax, eax
jns 0x4377a4
xor bl, bl
jmp 0x4377fb
push ebx
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 8
push 0
push edi
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov edi, eax
cmp edi, 0x20
jae 0x4377c3
call esi
xor bl, bl
jmp 0x4377fb
push str.DllRegisterServer
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
jne 0x4377e0
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
call esi
xor bl, bl
jmp 0x4377fb
call eax
push edi
test eax, eax
jns 0x4377f3
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
call esi
xor bl, bl
jmp 0x4377fb
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
call esi
cmp byte [0x4e6790], 0
je 0x437865
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x4eb370], eax
sub eax, dword [0x4eb36c]
mov edi, 0x4eb3f4
push eax
push 0x4c4260
push 0x4bdff8
call fcn.00402360
mov ecx, dword [0x4eb3f4]
add esp, 0xc
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov eax, dword [0x4eb374]
test eax, eax
je 0x437865
mov ecx, dword [0x4eb3f4]
mov edx, dword [ecx - 0xc]
push eax
push edx
push 2
push ecx
call fcn.00493e99
mov edx, dword [0x4eb374]
push edx
call fcn.00494637
add esp, 0x14
test bl, bl
jne 0x43788a
mov edi, dword [ebp - 0x42c]
add edi, 0xa4
lea eax, [ebp - 0x424]
mov dword [ebp - 0x424], 0xfa5
call fcn.00407530
cmp byte [0x4e6790], 0
je 0x43789e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x4eb36c], eax
mov eax, dword [ebp - 0x42c]
add eax, 0xa0
push eax
lea eax, [ebp - 0x424]
push eax
mov ebx, 0x4c4288
call fcn.00404520
add esp, 8
lea edi, [ebp - 0x428]
mov byte [ebp - 4], 2
call fcn.00404600
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x424]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x4378f3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edi, dword [ebp - 0x428]
push 0
call dword [sym.imp.ole32.dll_OleInitialize]
test eax, eax
jns 0x437909
xor bl, bl
jmp 0x437963
push 1
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 8
push 0
push edi
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov edi, eax
cmp edi, 0x20
jae 0x437929
call esi
xor bl, bl
jmp 0x437963
push str.DllRegisterServer
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
jne 0x437946
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
call esi
xor bl, bl
jmp 0x437963
call eax
push edi
test eax, eax
jns 0x437959
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
call esi
xor bl, bl
jmp 0x437963
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
call esi
mov bl, 1
cmp byte [0x4e6790], 0
je 0x4379cd
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x4eb370], eax
sub eax, dword [0x4eb36c]
mov edi, 0x4eb3f4
push eax
push 0x4c42a4
push 0x4bdff8
call fcn.00402360
mov ecx, dword [0x4eb3f4]
add esp, 0xc
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov eax, dword [0x4eb374]
test eax, eax
je 0x4379cd
mov ecx, dword [0x4eb3f4]
mov edx, dword [ecx - 0xc]
push eax
push edx
push 2
push ecx
call fcn.00493e99
mov edx, dword [0x4eb374]
push edx
call fcn.00494637
add esp, 0x14
test bl, bl
jne 0x4379f2
mov edi, dword [ebp - 0x42c]
add edi, 0xa4
lea eax, [ebp - 0x424]
mov dword [ebp - 0x424], 0xfa6
call fcn.00407530
cmp byte [0x4e6790], 0
je 0x437a06
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x4eb36c], eax
mov eax, dword [ebp - 0x42c]
add eax, 0xa0
push eax
lea eax, [ebp - 0x424]
push eax
mov ebx, 0x4c42cc
call fcn.00404520
add esp, 8
lea edi, [ebp - 0x428]
mov byte [ebp - 4], 3
call fcn.00404600
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x424]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x437a5b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov edi, dword [ebp - 0x428]
push 0
call dword [sym.imp.ole32.dll_OleInitialize]
test eax, eax
jns 0x437a71
xor bl, bl
jmp 0x437acb
push 1
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 8
push 0
push edi
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov edi, eax
cmp edi, 0x20
jae 0x437a91
call esi
xor bl, bl
jmp 0x437acb
push str.DllRegisterServer
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
jne 0x437aae
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
call esi
xor bl, bl
jmp 0x437acb
call eax
push edi
test eax, eax
jns 0x437ac1
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
call esi
xor bl, bl
jmp 0x437acb
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
call esi
mov bl, 1
cmp byte [0x4e6790], 0
je 0x437b35
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x4eb370], eax
sub eax, dword [0x4eb36c]
mov edi, 0x4eb3f4
push eax
push 0x4c42fc
push 0x4bdff8
call fcn.00402360
mov ecx, dword [0x4eb3f4]
add esp, 0xc
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov eax, dword [0x4eb374]
test eax, eax
je 0x437b35
mov ecx, dword [0x4eb3f4]
mov edx, dword [ecx - 0xc]
push eax
push edx
push 2
push ecx
call fcn.00493e99
mov edx, dword [0x4eb374]
push edx
call fcn.00494637
add esp, 0x14
test bl, bl
jne 0x437b5a
mov edi, dword [ebp - 0x42c]
add edi, 0xa4
lea eax, [ebp - 0x424]
mov dword [ebp - 0x424], 0xfa7
call fcn.00407530
xor eax, eax
push 0x206
push eax
lea ecx, [ebp - 0x216]
push ecx
mov word [ebp - 0x218], ax
call fcn.004950a0
add esp, 0xc
lea edx, [ebp - 0x424]
push edx
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x430]
push ecx
push str.ThreadingModel
push str.CLSIDF6D90F11_9C73_11D3_B32E_00C04F990BB4InProcServer32
push SysReAllocStringLen
mov dword [ebp - 0x424], 0x102
mov dword [ebp - 0x430], 1
call dword [sym.imp.SHLWAPI.dll_SHGetValueW]
test eax, eax
je 0x437d32
push 1
push 0x25
lea edx, [ebp - 0x420]
push edx
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
cmp byte [0x4e6790], 0
je 0x437be5
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x4eb36c], eax
lea eax, [ebp - 0x424]
push eax
lea ecx, [ebp - 0x420]
call fcn.00402120
push 0xb
push 0x4c43d0
lea ebx, [ebp - 0x424]
mov byte [ebp - 4], 4
call fcn.00409220
mov edi, dword [ebp - 0x424]
push 0
call dword [sym.imp.ole32.dll_OleInitialize]
test eax, eax
jns 0x437c23
xor bl, bl
jmp 0x437c7d
push 1
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 8
push 0
push edi
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov edi, eax
cmp edi, 0x20
jae 0x437c43
call esi
xor bl, bl
jmp 0x437c7d
push str.DllRegisterServer
push edi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
jne 0x437c60
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
call esi
xor bl, bl
jmp 0x437c7d
call eax
push edi
test eax, eax
jns 0x437c73
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
call esi
xor bl, bl
jmp 0x437c7d
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
call esi
mov bl, 1
cmp byte [0x4e6790], 0
je 0x437ce7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [0x4eb370], eax
sub eax, dword [0x4eb36c]
mov edi, 0x4eb3f4
push eax
push 0x4c43e8
push 0x4bdff8
call fcn.00402360
mov ecx, dword [0x4eb3f4]
add esp, 0xc
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov eax, dword [0x4eb374]
test eax, eax
je 0x437ce7
mov ecx, dword [0x4eb3f4]
mov edx, dword [ecx - 0xc]
push eax
push edx
push 2
push ecx
call fcn.00493e99
mov edx, dword [0x4eb374]
push edx
call fcn.00494637
add esp, 0x14
test bl, bl
jne 0x437d0c
mov edi, dword [ebp - 0x42c]
add edi, 0xa4
lea eax, [ebp - 0x430]
mov dword [ebp - 0x430], 0xfa9
call fcn.00407530
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x424]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x437d32
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x428]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x437d5b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004912db
mov esp, ebp
pop ebp
ret