Function at 0x5258d0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6328d0
mov eax, dword fs:[0]
push eax
sub esp, 0xc4
mov eax, dword [0x717f80]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ecx, dword [ebp + 8]
push dword [0x715254]
add ecx, 0x90
call fcn.004970c0
test al, al
jne 0x525b9b
cmp byte [0x7dac3a], al
je 0x525946
cmp dword [0x7dac4c], 0
je 0x525946
call sub.KERNEL32.dll_GetTickCount
mov ecx, dword [0x7dac4c]
cmp eax, ecx
jbe 0x525946
sub eax, ecx
cmp eax, 0xea60
jbe 0x525b9b
call fcn.00525860
push 0x74
lea eax, [ebp - 0xbc]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0xbc]
call fcn.00494a40
push 0
push str.c:_Windows_System32_drivers_etc_hosts
lea ecx, [ebp - 0xbc]
mov dword [ebp - 4], 0
call fcn.00499f90
test al, al
je 0x525b7f
mov ecx, dword [0x7dac3c]
call fcn.004c8510
mov eax, dword [0x7dac50]
test eax, eax
je 0x5259b1
push eax
call fcn.00477310
add esp, 4
mov dword [0x7dac50], 0
push 0x65
call fcn.00510900
add esp, 4
mov dword [0x7dac50], eax
xorps xmm0, xmm0
lea ecx, [ebp - 0x48]
xor edi, edi
movq qword [ebp - 0x38], xmm0
mov dword [ebp - 0xc0], edi
movups xmmword [ebp - 0x48], xmm0
mov dword [ebp - 0x30], edi
call fcn.004c67b0
push 0x1388
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0xbc]
call fcn.0049caf0
lea ecx, [ebp - 0x48]
mov byte [ebp - 0x30], 1
call fcn.004c73a0
xorps xmm0, xmm0
mov dword [ebp - 0x14], edi
mov esi, eax
movq qword [ebp - 0x1c], xmm0
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0xd0], esi
movups xmmword [ebp - 0x2c], xmm0
call fcn.004c67b0
xor eax, eax
mov byte [ebp - 4], 2
mov byte [ebp - 0x14], 1
mov dword [ebp - 0xc4], eax
test esi, esi
jle 0x525b48
nop word [eax + eax]
push eax
lea ecx, [ebp - 0x48]
call fcn.004c7df0
mov esi, eax
test esi, esi
je 0x525b2b
mov ecx, esi
call fcn.0049d520
push 0x6dcddc
mov ecx, esi
call fcn.004969c0
test al, al
jne 0x525b2b
push 0x23
mov ecx, esi
call fcn.00496d30
mov ecx, esi
call fcn.0049d520
mov ecx, esi
call fcn.0049d610
push 0x20
push 9
mov ecx, esi
call fcn.0049b1a0
push 1
push 1
push 0x20
lea eax, [ebp - 0x2c]
mov ecx, esi
push eax
call fcn.0049bf30
lea ecx, [ebp - 0x2c]
call fcn.004c73a0
mov dword [ebp - 0xcc], eax
cmp eax, 1
jle 0x525b23
push 0
lea ecx, [ebp - 0x2c]
call fcn.004c7df0
mov dword [ebp - 0xc8], eax
test eax, eax
je 0x525b23
mov esi, 1
nop dword [eax]
push esi
lea ecx, [ebp - 0x2c]
call fcn.004c7df0
mov edi, eax
test edi, edi
je 0x525b14
mov ecx, edi
call fcn.0049d3c0
mov ecx, dword [ebp - 0xc8]
call fcn.00499300
push eax
mov ecx, edi
call fcn.00499300
mov ecx, dword [0x7dac50]
push eax
call fcn.00510ec0
mov edi, dword [ebp - 0xc0]
inc edi
mov dword [ebp - 0xc0], edi
jmp 0x525b1a
mov edi, dword [ebp - 0xc0]
inc esi
cmp esi, dword [ebp - 0xcc]
jl 0x525ad0
lea ecx, [ebp - 0x2c]
call fcn.004c7c10
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp eax, dword [ebp - 0xd0]
jl 0x525a40
test edi, edi
jne 0x525b60
push dword [0x7dac50]
call fcn.00477310
add esp, 4
mov dword [0x7dac50], 0
mov ecx, dword [0x7dac3c]
call fcn.004c8540
lea ecx, [ebp - 0x2c]
call fcn.004c6b10
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0
call fcn.004c6b10
mov byte [0x7dac3a], 1
call sub.KERNEL32.dll_GetTickCount
lea ecx, [ebp - 0xbc]
mov dword [0x7dac4c], eax
call fcn.00494a90
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00622073
mov esp, ebp
pop ebp
ret