Function at 0x1800ebde0
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x40]
sub rsp, 0x140
mov rax, qword [0x1802cd010]
xor rax, rsp
mov qword [rbp + 0x30], rax
add rcx, 0x98
mov rdx, qword [str.NoDnsHostsFile]
call fcn.18000da10
test al, al
jne 0x1800ec0c0
cmp byte [0x1802e3d6a], al
je 0x1800ebe5a
cmp dword [0x1802e3d88], 0
je 0x1800ebe5a
call sub.KERNEL32.dll_GetTickCount
mov ecx, dword [0x1802e3d88]
cmp eax, ecx
jbe 0x1800ebe5a
sub eax, ecx
cmp eax, 0xea60
jbe 0x1800ec0c0
call fcn.1800ebd60
xorps xmm0, xmm0
movups xmmword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
movups xmmword [rbp + 0x10], xmm0
movups xmmword [rbp + 0x20], xmm0
lea rcx, [rbp - 0x60]
call fcn.18000aea0
nop
xor r8d, r8d
lea rdx, str.c:_Windows_System32_drivers_etc_hosts
lea rcx, [rbp - 0x60]
call fcn.180011900
test al, al
je 0x1800ec0a5
mov rcx, qword [0x1802e3d70]
call fcn.18004bef0
mov rcx, qword [0x1802e3d90]
test rcx, rcx
je 0x1800ebed3
call fcn.18003ccf0
mov qword [0x1802e3d90], 0
mov ecx, 0x65
call fcn.18004f9a0
mov qword [0x1802e3d90], rax
xor r13d, r13d
xorps xmm0, xmm0
movups xmmword [rsp + 0x68], xmm0
movups xmmword [rsp + 0x78], xmm0
movups xmmword [rbp - 0x78], xmm0
lea rcx, [rsp + 0x68]
call fcn.18004c330
nop
mov r8d, 0x1388
lea rdx, [rsp + 0x68]
lea rcx, [rbp - 0x60]
call fcn.1800168e0
mov byte [rbp - 0x70], 1
lea rcx, [rsp + 0x68]
call fcn.18004cdd0
mov edi, eax
mov dword [rsp + 0x30], eax
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
movups xmmword [rsp + 0x48], xmm0
movups xmmword [rsp + 0x58], xmm0
lea rcx, [rsp + 0x38]
call fcn.18004c330
nop
mov byte [rsp + 0x60], 1
xor r15d, r15d
test edi, edi
jle 0x1800ec06c
nop dword [rax + rax]
mov edx, r15d
lea rcx, [rsp + 0x68]
call fcn.18004dad0
mov rbx, rax
test rax, rax
je 0x1800ec05b
mov rcx, rax
call fcn.180017540
lea rdx, [0x180240168]
mov rcx, rbx
call fcn.18000d1f0
test al, al
jne 0x1800ec05b
mov dl, 0x23
mov rcx, rbx
call fcn.18000d780
mov rcx, rbx
call fcn.180017540
mov rcx, rbx
call fcn.180017680
mov r8b, 0x20
mov dl, 9
mov rcx, rbx
call fcn.180013e10
mov byte [rsp + 0x20], 1
mov r9b, 1
mov r8b, 0x20
lea rdx, [rsp + 0x38]
mov rcx, rbx
call fcn.1800153a0
lea rcx, [rsp + 0x38]
call fcn.18004cdd0
mov r14d, eax
cmp eax, 1
jle 0x1800ec051
xor edx, edx
lea rcx, [rsp + 0x38]
call fcn.18004dad0
mov r12, rax
test rax, rax
je 0x1800ec051
mov ebx, 1
mov edx, ebx
lea rcx, [rsp + 0x38]
call fcn.18004dad0
mov rsi, rax
test rax, rax
je 0x1800ec046
mov rcx, rax
call fcn.180017400
mov rcx, r12
call fcn.180010a70
mov rdi, rax
mov rcx, rsi
call fcn.180010a70
mov rdx, rax
mov r8, rdi
mov rcx, qword [0x1802e3d90]
call fcn.180050110
inc r13d
inc ebx
cmp ebx, r14d
jl 0x1800ec002
mov edi, dword [rsp + 0x30]
lea rcx, [rsp + 0x38]
call fcn.18004d800
inc r15d
cmp r15d, edi
jl 0x1800ebf60
test r13d, r13d
jne 0x1800ec083
mov rcx, qword [0x1802e3d90]
call fcn.18003ccf0
mov qword [0x1802e3d90], 0
mov rcx, qword [0x1802e3d70]
call fcn.18004bf30
nop
lea rcx, [rsp + 0x38]
call fcn.18004c4c0
nop
lea rcx, [rsp + 0x68]
call fcn.18004c4c0
mov byte [0x1802e3d6a], 1
call sub.KERNEL32.dll_GetTickCount
mov dword [0x1802e3d88], eax
lea rcx, [rbp - 0x60]
call fcn.18000aef0
mov rcx, qword [rbp + 0x30]
xor rcx, rsp
call fcn.180009610
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret