Function at 0x14010dbd0
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x40]
sub rsp, 0x140
mov rax, qword [0x140353c70]
xor rax, rsp
mov qword [rbp + 0x30], rax
add rcx, 0x98
mov rdx, qword [str.NoDnsHostsFile]
call fcn.140030ff0
test al, al
jne 0x14010deb0
cmp byte [0x1403594ca], al
je 0x14010dc4a
cmp dword [0x1403594e8], 0
je 0x14010dc4a
call sub.KERNEL32.dll_GetTickCount
mov ecx, dword [0x1403594e8]
cmp eax, ecx
jbe 0x14010dc4a
sub eax, ecx
cmp eax, 0xea60
jbe 0x14010deb0
call fcn.14010db50
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
lea rcx, [rbp - 0x60]
call fcn.14002e000
nop
xor r8d, r8d
lea rdx, str.c:_Windows_System32_drivers_etc_hosts
lea rcx, [rbp - 0x60]
call fcn.140034a00
test al, al
je 0x14010de95
mov rcx, qword [0x1403594d0]
call fcn.140070000
mov rcx, qword [0x1403594f0]
test rcx, rcx
je 0x14010dcc3
call fcn.14005fd80
mov qword [0x1403594f0], 0
mov ecx, Ordinal_105
call fcn.140073b70
mov qword [0x1403594f0], rax
xor r13d, r13d
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
movups xmmword [rsp + 0x78], xmm0
movups xmmword [rbp - 0x78], xmm0
lea rcx, [rsp + 0x68]
call fcn.140070450
nop
mov r8d, 0x1388
lea rdx, [rsp + 0x68]
lea rcx, [rbp - 0x60]
call fcn.140039a50
mov byte [rbp - 0x70], 1
lea rcx, [rsp + 0x68]
call fcn.140070f10
mov edi, eax
mov dword [rsp + 0x30], eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
movups xmmword [rsp + 0x58], xmm0
lea rcx, [rsp + 0x38]
call fcn.140070450
nop
mov byte [rsp + 0x60], 1
xor r15d, r15d
test edi, edi
jle 0x14010de5c
nop dword [rax + rax]
mov edx, r15d
lea rcx, [rsp + 0x68]
call fcn.140071c90
mov rbx, rax
test rax, rax
je 0x14010de4b
mov rcx, rax
call fcn.14003a680
lea rdx, [0x1402a2fe8]
mov rcx, rbx
call fcn.1400307d0
test al, al
jne 0x14010de4b
mov dl, 0x23
mov rcx, rbx
call fcn.140030d60
mov rcx, rbx
call fcn.14003a680
mov rcx, rbx
call fcn.14003a7d0
mov r8b, 0x20
mov dl, 9
mov rcx, rbx
call fcn.140036f20
mov byte [rsp + 0x20], 1
mov r9b, 1
mov r8b, 0x20
lea rdx, [rsp + 0x38]
mov rcx, rbx
call fcn.1400384d0
lea rcx, [rsp + 0x38]
call fcn.140070f10
mov r14d, eax
cmp eax, 1
jle 0x14010de41
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.140071c90
mov r12, rax
test rax, rax
je 0x14010de41
mov ebx, 1
mov edx, ebx
lea rcx, [rsp + 0x38]
call fcn.140071c90
mov rsi, rax
test rax, rax
je 0x14010de36
mov rcx, rax
call fcn.14003a540
mov rcx, r12
call fcn.140033b70
mov rdi, rax
mov rcx, rsi
call fcn.140033b70
mov rdx, rax
mov r8, rdi
mov rcx, qword [0x1403594f0]
call fcn.1400742e0
inc r13d
inc ebx
cmp ebx, r14d
jl 0x14010ddf2
mov edi, dword [rsp + 0x30]
lea rcx, [rsp + 0x38]
call fcn.1400719c0
inc r15d
cmp r15d, edi
jl 0x14010dd50
test r13d, r13d
jne 0x14010de73
mov rcx, qword [0x1403594f0]
call fcn.14005fd80
mov qword [0x1403594f0], 0
mov rcx, qword [0x1403594d0]
call fcn.140070040
nop
lea rcx, [rsp + 0x38]
call fcn.1400705e0
nop
lea rcx, [rsp + 0x68]
call fcn.1400705e0
mov byte [0x1403594ca], 1
call sub.KERNEL32.dll_GetTickCount
mov dword [0x1403594e8], eax
lea rcx, [rbp - 0x60]
call fcn.14002e050
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.1402474e0
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret