Function at 0x14011c010
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x40]
sub rsp, 0x140
mov rax, qword [0x14036a040]
xor rax, rsp
mov qword [rbp + 0x30], rax
cmp byte [0x1403afcca], 0
je 0x14011c070
cmp dword [0x1403afcdc], 0
je 0x14011c070
call sub.KERNEL32.dll_GetTickCount
mov ecx, dword [0x1403afcdc]
cmp eax, ecx
jbe 0x14011c070
sub eax, ecx
cmp eax, 0xea60
jbe 0x14011c2d0
call fcn.14011bf90
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
lea rcx, [rbp - 0x60]
call fcn.1400b7020
nop
xor r8d, r8d
lea rdx, str.c:_Windows_System32_drivers_etc_hosts
lea rcx, [rbp - 0x60]
call fcn.1400bde40
test al, al
je 0x14011c2b5
mov rcx, qword [0x1403afcd0]
call fcn.1400b6e90
mov rcx, qword [0x1403afcf0]
test rcx, rcx
je 0x14011c0e9
call fcn.1400b6b00
mov qword [0x1403afcf0], 0
mov ecx, 0x65
call fcn.1401465b0
mov qword [0x1403afcf0], rax
xor r13d, r13d
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
movups xmmword [rsp + 0x78], xmm0
movups xmmword [rbp - 0x78], xmm0
lea rcx, [rsp + 0x68]
call fcn.1400eec10
nop
mov r8d, 0x1388
lea rdx, [rsp + 0x68]
lea rcx, [rbp - 0x60]
call fcn.1400c2c10
mov byte [rbp - 0x70], 1
lea rcx, [rsp + 0x68]
call fcn.1400ef640
mov edi, eax
mov dword [rsp + 0x30], eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
movups xmmword [rsp + 0x58], xmm0
lea rcx, [rsp + 0x38]
call fcn.1400eec10
nop
mov byte [rsp + 0x60], 1
xor r15d, r15d
test edi, edi
jle 0x14011c27c
nop
mov edx, r15d
lea rcx, [rsp + 0x68]
call fcn.1400f03b0
mov rbx, rax
test rax, rax
je 0x14011c26b
mov rcx, rax
call fcn.1400c3860
lea rdx, [0x1402ae3b0]
mov rcx, rbx
call fcn.1400b96e0
test al, al
jne 0x14011c26b
mov dl, 0x23
mov rcx, rbx
call fcn.1400b9b70
mov rcx, rbx
call fcn.1400c3860
mov rcx, rbx
call fcn.1400c39b0
mov r8b, 0x20
mov dl, 9
mov rcx, rbx
call fcn.1400c0220
mov byte [rsp + 0x20], 1
mov r9b, 1
mov r8b, 0x20
lea rdx, [rsp + 0x38]
mov rcx, rbx
call fcn.1400c1670
lea rcx, [rsp + 0x38]
call fcn.1400ef640
mov r14d, eax
cmp eax, 1
jle 0x14011c261
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.1400f03b0
mov r12, rax
test rax, rax
je 0x14011c261
mov ebx, 1
mov edx, ebx
lea rcx, [rsp + 0x38]
call fcn.1400f03b0
mov rsi, rax
test rax, rax
je 0x14011c256
mov rcx, rax
call fcn.1400c3720
mov rcx, r12
call fcn.1400bcff0
mov rdi, rax
mov rcx, rsi
call fcn.1400bcff0
mov rdx, rax
mov r8, rdi
mov rcx, qword [0x1403afcf0]
call fcn.140146d20
inc r13d
inc ebx
cmp ebx, r14d
jl 0x14011c212
mov edi, dword [rsp + 0x30]
lea rcx, [rsp + 0x38]
call fcn.1400f00e0
inc r15d
cmp r15d, edi
jl 0x14011c170
test r13d, r13d
jne 0x14011c293
mov rcx, qword [0x1403afcf0]
call fcn.1400b6b00
mov qword [0x1403afcf0], 0
mov rcx, qword [0x1403afcd0]
call fcn.1400b6ed0
nop
lea rcx, [rsp + 0x38]
call fcn.1400eeda0
nop
lea rcx, [rsp + 0x68]
call fcn.1400eeda0
mov byte [0x1403afcca], 1
call sub.KERNEL32.dll_GetTickCount
mov dword [0x1403afcdc], eax
lea rcx, [rbp - 0x60]
call fcn.1400b7070
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.14008b8a0
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret