Function at 0x53bba0
Capabilities:
Check for time delay via gettickcount
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov eax, dword [0x6baac0]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp + 0x20]
mov dword [ebp - 8], eax
mov eax, dword [ebp + 0x1c]
push ebx
mov ebx, dword [ebp + 0x18]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp + 0x24]
push esi
mov esi, dword [ebp + 0x14]
mov byte [ecx], 0
mov dword [ebp - 0x24], ecx
mov ecx, ebx
push edi
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x28], eax
mov byte [eax], 0
call fcn.00422240
mov eax, dword [ebp - 0x20]
push dword [ebp - 8]
mov dword [eax], 0
mov eax, dword [ebp - 0x1c]
add eax, 0x28
mov ecx, eax
mov dword [ebp - 0x18], eax
call fcn.00425430
mov ecx, dword [ebp - 0x18]
push 0x600cc0
push str.http:__
call fcn.00425100
mov ecx, dword [ebp - 0x18]
push 0x600cc0
push str.https:__
call fcn.00425100
mov ecx, dword [ebp - 0x18]
push 0x2f
call fcn.00422120
mov ecx, dword [ebp - 0x18]
push 0x3a
call fcn.00422120
mov ecx, dword [ebp - 0x18]
call fcn.00426220
mov ecx, dword [ebp - 0x18]
call fcn.004239b0
test eax, eax
jne 0x53bc6c
mov eax, dword [edi]
mov ecx, edi
push str.Invalid_hostname_for_resolving_hostname_to_IP_address.
call dword [eax + 0x14]
push dword [ebp - 8]
mov ecx, edi
push str.hostname
call fcn.004317e0
jmp 0x53bef1
mov ecx, dword [ebp - 0x18]
call fcn.00414900
test esi, esi
je 0x53bc85
push eax
push str.HostnameResolve
mov ecx, esi
call fcn.004810e0
push dword [ebp - 0x18]
mov ecx, edi
push str.dnsCacheLookup
call fcn.004317e0
mov ecx, ebx
call fcn.00422240
push dword [ebp - 0x18]
call fcn.0050a3b0
add esp, 4
test al, al
je 0x53bcb6
push dword [ebp - 0x18]
mov ecx, ebx
call fcn.00425430
jmp 0x53bcca
push ebx
push dword [ebp - 0x18]
call fcn.00444770
add esp, 8
test al, al
je 0x53bd5e
mov ecx, ebx
call fcn.004239b0
test eax, eax
je 0x53bd5e
lea eax, [ebp - 0x10]
mov ecx, ebx
push eax
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 8]
push eax
push str._d._d._d._d
call fcn.00414900
push eax
call fcn.0042ff80
add esp, 0x18
cmp eax, 4
jne 0x53bd5e
mov ecx, dword [ebp - 0x20]
mov al, byte [ebp - 8]
mov byte [ecx], al
mov al, byte [ebp - 0x14]
mov byte [ecx + 1], al
mov al, byte [ebp - 0xc]
mov byte [ecx + 2], al
mov al, byte [ebp - 0x10]
mov byte [ecx + 3], al
test esi, esi
je 0x53bd35
mov ecx, ebx
call fcn.00414900
push eax
push str.ResolvedToIp
mov ecx, esi
call fcn.004810e0
mov esi, dword [edi]
mov ecx, ebx
call fcn.00414900
push eax
push str.dnsCacheHit
mov ecx, edi
call dword [esi + 0x2c]
pop edi
pop esi
mov al, 1
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005ebe04
mov esp, ebp
pop ebp
ret 0x20
mov eax, dword [ebp - 0x1c]
mov ecx, eax
mov dword [eax + 0x9c], esi
mov byte [eax + 0x114], 1
call fcn.00411860
call sub.KERNEL32.dll_GetTickCount
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0xc]
push eax
push 0
push ecx
push 0x53b5e0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
test eax, eax
je 0x53bee5
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [edi]
mov ecx, edi
push str.Resolving_domain_name__IPV4_
call dword [eax + 0x18]
mov ecx, dword [ebp - 0x1c]
xor eax, eax
mov dword [ebp - 8], eax
cmp byte [ecx + 0x114], al
je 0x53be5c
inc eax
mov dword [ebp - 0xc], eax
cmp eax, 0xc8
jle 0x53bdde
push 0xa
call fcn.004308f0
mov ecx, 0xa
jmp 0x53bdea
push 2
call fcn.004308f0
mov ecx, 2
mov eax, dword [ebp - 8]
add esp, 4
add eax, ecx
mov dword [ebp - 8], eax
mov ecx, eax
test esi, esi
je 0x53be17
mov dword [ebp - 8], ecx
cmp ecx, dword [esi + 0x88]
jb 0x53be17
xor eax, eax
mov ecx, esi
push edi
mov dword [ebp - 8], eax
call fcn.00480960
test al, al
jne 0x53be41
cmp dword [ebp + 0xc], 0
je 0x53be30
call sub.KERNEL32.dll_GetTickCount
mov ecx, dword [ebp - 0x10]
cmp eax, ecx
jbe 0x53be30
sub eax, ecx
cmp eax, dword [ebp + 0xc]
ja 0x53be51
mov ecx, dword [ebp - 0x1c]
cmp byte [ecx + 0x114], 0
je 0x53be5c
mov eax, dword [ebp - 0xc]
jmp 0x53bdc5
mov eax, dword [ebp - 0x24]
push str.DNS_lookup_aborted_by_application_callback
mov byte [eax], 1
jmp 0x53beea
mov eax, dword [ebp - 0x28]
mov byte [eax], 1
jmp 0x53bef1
lea eax, [ecx + 0xa0]
mov ecx, ebx
push eax
call fcn.00425430
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ecx + 0x118]
mov ecx, dword [ebp - 0x20]
mov dword [ecx], eax
mov ecx, ebx
call fcn.004239b0
test eax, eax
je 0x53be96
mov ecx, ebx
call fcn.00414900
push eax
push dword [ebp - 0x18]
call fcn.004445d0
add esp, 8
test esi, esi
je 0x53beb9
mov ecx, ebx
call fcn.004239b0
test eax, eax
je 0x53beb9
mov ecx, ebx
call fcn.00414900
push eax
push str.ResolvedToIp
mov ecx, esi
call fcn.004810e0
push ebx
push str.resolvedToIp
mov ecx, edi
call fcn.004317e0
mov ecx, ebx
call fcn.004239b0
pop edi
test eax, eax
pop esi
setne al
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.005ebe04
mov esp, ebp
pop ebp
ret 0x20
push str.Failed_to_start_background_thread_for_resolving_IPV4_domain_name.
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x14]
mov ecx, dword [ebp - 4]
xor al, al
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005ebe04
mov esp, ebp
pop ebp
ret 0x20