Function at 0x140159f80
Capabilities:
Check for time delay via gettickcount
Create thread

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
mov rax, qword [0x14026be10]
xor rax, rsp
mov qword [rsp + 0x58], rax
mov rax, qword [rsp + 0xe0]
mov r15, rcx
mov rcx, qword [rsp + 0xd8]
mov rdi, r9
mov rbp, qword [rsp + 0xc8]
mov r13d, r8d
mov r12, qword [rsp + 0xd0]
mov r14, rdx
mov rbx, qword [rsp + 0xc0]
mov byte [rcx], 0
mov qword [rsp + 0x30], rcx
mov rcx, rbp
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], rax
mov byte [rax], 0
call fcn.14002d770
mov rdx, r14
mov dword [r12], 0
lea rcx, [r15 + 0x40]
call fcn.140030900
lea r8, [0x140218c92]
lea rdx, str.http:__
lea rcx, [r15 + 0x40]
call fcn.1400302d0
lea r8, [0x140218c92]
lea rdx, str.https:__
lea rcx, [r15 + 0x40]
call fcn.1400302d0
mov dl, 0x2f
lea rcx, [r15 + 0x40]
call fcn.14002d5e0
mov dl, 0x3a
lea rcx, [r15 + 0x40]
call fcn.14002d5e0
lea rcx, [r15 + 0x40]
call fcn.140031880
lea rcx, [r15 + 0x40]
call fcn.14002ed00
test eax, eax
jne 0x14015a089
mov rax, qword [rdi]
lea rdx, str.Invalid_hostname_for_resolving_hostname_to_IP_address.
mov rcx, rdi
call qword [rax + 0x28]
mov r8, r14
lea rdx, str.hostname
mov rcx, rdi
call fcn.140071b70
jmp 0x14015a349
lea rcx, [r15 + 0x40]
call fcn.14002ed10
test rbx, rbx
je 0x14015a0a9
mov r8, rax
lea rdx, str.HostnameResolve
mov rcx, rbx
call fcn.14008e810
lea r8, [r15 + 0x40]
mov rcx, rdi
lea rdx, str.dnsCacheLookup
call fcn.140071b70
mov rcx, rbp
call fcn.14002d770
lea rcx, [r15 + 0x40]
call fcn.1400f6a30
test al, al
je 0x14015a0df
lea rdx, [r15 + 0x40]
mov rcx, rbp
call fcn.140030900
jmp 0x14015a0f3
mov rdx, rbp
lea rcx, [r15 + 0x40]
call fcn.1400ce090
test al, al
je 0x14015a1a5
mov rcx, rbp
call fcn.14002ed00
test eax, eax
je 0x14015a1a5
mov rcx, rbp
call fcn.14002ed10
mov rcx, rax
lea r9, [rsp + 0x50]
lea rax, [rsp + 0x48]
mov qword [rsp + 0x28], rax
lea r8, [rsp + 0x4c]
lea rax, [rsp + 0x54]
lea rdx, str._d._d._d._d
mov qword [rsp + 0x20], rax
call fcn.14007b000
cmp eax, 4
jne 0x14015a1a5
movzx eax, byte [rsp + 0x4c]
mov byte [r12], al
movzx eax, byte [rsp + 0x50]
mov byte [r12 + 1], al
movzx eax, byte [rsp + 0x54]
mov byte [r12 + 2], al
movzx eax, byte [rsp + 0x48]
mov byte [r12 + 3], al
test rbx, rbx
je 0x14015a183
mov rcx, rbp
call fcn.14002ed10
mov r8, rax
lea rdx, str.ResolvedToIp
mov rcx, rbx
call fcn.14008e810
mov rbx, qword [rdi]
mov rcx, rbp
call fcn.14002ed10
mov r8, rax
lea rdx, str.dnsCacheHit
mov rcx, rdi
call qword [rbx + 0x58]
mov al, 1
jmp 0x14015a34b
mov rcx, r15
mov qword [r15 + 0xd0], rbx
mov byte [r15 + 0x168], 1
call fcn.140050dc0
call sub.KERNEL32.dll_GetTickCount
mov r12d, eax
lea r8, [0x140159980]
lea rax, [rsp + 0x48]
mov r9, r15
mov qword [rsp + 0x28], rax
xor edx, edx
xor ecx, ecx
mov dword [rsp + 0x20], 0
call qword [sym.imp.KERNEL32.dll_CreateThread]
test rax, rax
je 0x14015a339
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rdi]
lea rdx, str.Resolving_domain_name__IPV4_
mov rcx, rdi
call qword [rax + 0x30]
xor esi, esi
xor r14d, r14d
cmp byte [r15 + 0x168], sil
je 0x14015a295
nop word [rax + rax]
inc r14d
cmp r14d, 0xc8
jle 0x14015a23d
mov ecx, 0xa
call sub.KERNEL32.dll_Sleep
mov eax, 0xa
jmp 0x14015a24c
mov ecx, 2
call sub.KERNEL32.dll_Sleep
mov eax, 2
add esi, eax
test rbx, rbx
je 0x14015a270
cmp esi, dword [rbx + 0xd0]
jb 0x14015a270
mov rdx, rdi
mov rcx, rbx
xor esi, esi
call fcn.14008e0f0
test al, al
jne 0x14015a31e
test r13d, r13d
je 0x14015a28b
call sub.KERNEL32.dll_GetTickCount
cmp eax, r12d
jbe 0x14015a28b
sub eax, r12d
cmp eax, r13d
ja 0x14015a32f
cmp byte [r15 + 0x168], 0
jne 0x14015a220
lea rdx, [r15 + 0xd8]
mov rcx, rbp
call fcn.140030900
mov rcx, qword [rsp + 0x40]
mov eax, dword [r15 + 0x16c]
mov dword [rcx], eax
mov rcx, rbp
call fcn.14002ed00
test eax, eax
je 0x14015a2d2
mov rcx, rbp
call fcn.14002ed10
mov rdx, rax
lea rcx, [r15 + 0x40]
call fcn.1400cdef0
test rbx, rbx
je 0x14015a2fd
mov rcx, rbp
call fcn.14002ed00
test eax, eax
je 0x14015a2fd
mov rcx, rbp
call fcn.14002ed10
mov r8, rax
lea rdx, str.ResolvedToIp
mov rcx, rbx
call fcn.14008e810
mov r8, rbp
lea rdx, str.resolvedToIp
mov rcx, rdi
call fcn.140071b70
mov rcx, rbp
call fcn.14002ed00
test eax, eax
setne al
jmp 0x14015a34b
mov rax, qword [rsp + 0x30]
lea rdx, str.DNS_lookup_aborted_by_application_callback
mov byte [rax], 1
jmp 0x14015a340
mov rax, qword [rsp + 0x38]
mov byte [rax], 1
jmp 0x14015a349
lea rdx, str.Failed_to_start_background_thread_for_resolving_IPV4_domain_name.
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x28]
xor al, al
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.140168e10
mov rbx, qword [rsp + 0xb0]
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret