Function at 0x1000e3fa
Capabilities:
Check for time delay via gettickcount
Copy file
Get common file path

Disassembly:
mov eax, 0x10053d70
call fcn.10052270
sub esp, 0x310
and byte [ebp - 0x218], 0
push ebx
push esi
push edi
mov ebx, ecx
push 0x40
pop ecx
xor eax, eax
lea edi, [ebp - 0x217]
and byte [ebp - 0x31c], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0x40
xor eax, eax
pop ecx
lea edi, [ebp - 0x31b]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x10078b14
lea ecx, [ebp - 0x10]
stosb byte es:[edi], al
call fcn.100034da
and byte [ebp - 0x114], 0
push 0x40
pop ecx
xor eax, eax
lea edi, [ebp - 0x113]
and dword [ebp - 4], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov esi, 0x104
push str.WinSockLSP.reg
lea eax, [ebp - 0x218]
push esi
push eax
push dword [0x10078af4]
call fcn.10016dbe
lea eax, [ebp - 0x218]
push eax
call fcn.10016b34
add esp, 0x14
test eax, eax
je 0x1000e49d
push 1
pop esi
jmp 0x1000e53d
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
push eax
lea eax, [ebp - 0x10]
push str.brg__08d.tmp
push eax
call fcn.10009c35
add esp, 0xc
lea eax, [ebp - 0x114]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
test eax, eax
je 0x1000e53b
lea eax, [ebp - 0x114]
push eax
call fcn.1000ea17
test eax, eax
je 0x1000e53b
lea eax, [ebp - 0x114]
push eax
call fcn.1000e9c7
test eax, eax
je 0x1000e53b
push dword [ebp - 0x10]
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendA]
test eax, eax
je 0x1000e53b
lea eax, [ebp - 0x114]
lea ecx, [ebx + 0x2c]
push eax
push str.HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesWinSock2Parameters
call fcn.10017c9e
test eax, eax
je 0x1000e53b
lea eax, [ebp - 0x218]
push 0
push eax
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
lea eax, [ebp - 0x114]
push eax
jne 0x1000e55a
call fcn.1000a646
xor esi, esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.1000349d
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret
call fcn.1000a646
push esi
lea eax, [ebp - 0x114]
push 0
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
call edi
push eax
lea eax, [ebp - 0x10]
push str.brg2__08d.tmp
push eax
call fcn.10009c35
add esp, 0xc
lea eax, [ebp - 0x114]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
test eax, eax
je 0x1000e600
push dword [ebp - 0x10]
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendA]
test eax, eax
je 0x1000e600
push str.WinSockLSPIFSL.reg
lea eax, [ebp - 0x31c]
push esi
push eax
push dword [0x10078af4]
call fcn.10016dbe
add esp, 0x10
lea eax, [ebp - 0x114]
lea ecx, [ebx + 0x2c]
push eax
push str.HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesWS2IFSL
call fcn.10017c9e
test eax, eax
je 0x1000e600
lea eax, [ebp - 0x31c]
push 0
push eax
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileA]
lea eax, [ebp - 0x114]
push eax
call fcn.1000a646
xor esi, esi
mov eax, dword [ebx + 0x1c]
test eax, eax
je 0x1000e495
mov ecx, dword [ebx + 0x20]
sub ecx, eax
sar ecx, 2
cmp esi, ecx
jae 0x1000e495
mov eax, dword [eax + esi*4]
test eax, eax
je 0x1000e63c
cmp dword [eax + 0x480], 0
jne 0x1000e63c
push eax
add eax, 0x378
push eax
lea ecx, [ebx + 0x2c]
call fcn.10017f03
inc esi
jmp 0x1000e602