Function at 0x1401de7b0
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x40]
sub rsp, 0x140
mov rax, qword [0x14040f040]
xor rax, rsp
mov qword [rbp + 0x30], rax
add rcx, 0x98
mov rdx, qword [str.NoDnsHostsFile]
call fcn.14013c050
test al, al
jne 0x1401dea90
cmp byte [0x140549a4a], al
je 0x1401de82a
cmp dword [0x140549a68], 0
je 0x1401de82a
call sub.KERNEL32.dll_GetTickCount
mov ecx, dword [0x140549a68]
cmp eax, ecx
jbe 0x1401de82a
sub eax, ecx
cmp eax, 0xea60
jbe 0x1401dea90
call fcn.1401de730
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
lea rcx, [rbp - 0x60]
call fcn.140138d70
nop
xor r8d, r8d
lea rdx, str.c:_Windows_System32_drivers_etc_hosts
lea rcx, [rbp - 0x60]
call fcn.14013fce0
test al, al
je 0x1401dea75
mov rcx, qword [0x140549a50]
call fcn.140173c10
mov rcx, qword [0x140549a70]
test rcx, rcx
je 0x1401de8a3
call fcn.14011a220
mov qword [0x140549a70], 0
mov ecx, 0x65
call fcn.1401c8980
mov qword [0x140549a70], rax
xor r13d, r13d
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
movups xmmword [rsp + 0x78], xmm0
movups xmmword [rbp - 0x78], xmm0
lea rcx, [rsp + 0x68]
call fcn.140171d70
nop
mov r8d, 0x1388
lea rdx, [rsp + 0x68]
lea rcx, [rbp - 0x60]
call fcn.140144bb0
mov byte [rbp - 0x70], 1
lea rcx, [rsp + 0x68]
call fcn.140172830
mov edi, eax
mov dword [rsp + 0x30], eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
movups xmmword [rsp + 0x58], xmm0
lea rcx, [rsp + 0x38]
call fcn.140171d70
nop
mov byte [rsp + 0x60], 1
xor r15d, r15d
test edi, edi
jle 0x1401dea3c
nop dword [rax + rax]
mov edx, r15d
lea rcx, [rsp + 0x68]
call fcn.1401735b0
mov rbx, rax
test rax, rax
je 0x1401dea2b
mov rcx, rax
call fcn.140145850
lea rdx, [0x14035cf10]
mov rcx, rbx
call fcn.14013b7f0
test al, al
jne 0x1401dea2b
mov dl, 0x23
mov rcx, rbx
call fcn.14013bc80
mov rcx, rbx
call fcn.140145850
mov rcx, rbx
call fcn.1401459a0
mov r8b, 0x20
mov dl, 9
mov rcx, rbx
call fcn.140142080
mov byte [rsp + 0x20], 1
mov r9b, 1
mov r8b, 0x20
lea rdx, [rsp + 0x38]
mov rcx, rbx
call fcn.140143630
lea rcx, [rsp + 0x38]
call fcn.140172830
mov r14d, eax
cmp eax, 1
jle 0x1401dea21
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.1401735b0
mov r12, rax
test rax, rax
je 0x1401dea21
mov ebx, 1
mov edx, ebx
lea rcx, [rsp + 0x38]
call fcn.1401735b0
mov rsi, rax
test rax, rax
je 0x1401dea16
mov rcx, rax
call fcn.140145710
mov rcx, r12
call fcn.14013ec50
mov rdi, rax
mov rcx, rsi
call fcn.14013ec50
mov rdx, rax
mov r8, rdi
mov rcx, qword [0x140549a70]
call fcn.1401c90f0
inc r13d
inc ebx
cmp ebx, r14d
jl 0x1401de9d2
mov edi, dword [rsp + 0x30]
lea rcx, [rsp + 0x38]
call fcn.1401732e0
inc r15d
cmp r15d, edi
jl 0x1401de930
test r13d, r13d
jne 0x1401dea53
mov rcx, qword [0x140549a70]
call fcn.14011a220
mov qword [0x140549a70], 0
mov rcx, qword [0x140549a50]
call fcn.140173c50
nop
lea rcx, [rsp + 0x38]
call fcn.140171f00
nop
lea rcx, [rsp + 0x68]
call fcn.140171f00
mov byte [0x140549a4a], 1
call sub.KERNEL32.dll_GetTickCount
mov dword [0x140549a68], eax
lea rcx, [rbp - 0x60]
call fcn.140138dc0
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.140109210
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret