Function at 0x536c80
Capabilities:
Check for time delay via gettickcount
Create thread

Disassembly:
mov eax, dword [esp + 0x1c]
sub esp, 8
push ebx
push esi
push edi
mov edi, ecx
mov ecx, dword [esp + 0x34]
mov byte [eax], 0
mov byte [ecx], 0
mov ecx, dword [esp + 0x28]
call fcn.0042c960
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x18]
lea esi, [edi + 0x28]
push ebx
mov ecx, esi
mov dword [edx], 0
call fcn.0042ed20
push 0
push 0x584371
push str.http:__
mov ecx, esi
call fcn.0042d510
push 0
push 0x584371
push str.https:__
mov ecx, esi
call fcn.0042d510
push 0x2f
mov ecx, esi
call fcn.0042c770
push 0x3a
mov ecx, esi
call fcn.0042c770
mov ecx, esi
call fcn.0042bc00
mov ecx, esi
call fcn.0042bab0
test eax, eax
jne 0x536d2c
mov esi, dword [esp + 0x20]
mov eax, dword [esi]
mov edx, dword [eax + 0x14]
push str.Invalid_hostname_for_resolving_hostname_to_IP_address.
mov ecx, esi
call edx
push ebx
push str.hostname
mov ecx, esi
call fcn.004370f0
pop edi
pop esi
xor al, al
pop ebx
add esp, 8
ret 0x20
push ebp
mov ecx, esi
call fcn.0051b3b0
mov ebp, dword [esp + 0x28]
test ebp, ebp
je 0x536d49
push eax
push str.HostnameResolve
mov ecx, ebp
call fcn.004851b0
mov ecx, dword [esp + 0x24]
push esi
push str.dnsCacheLookup
call fcn.004370f0
mov ebx, dword [esp + 0x2c]
mov ecx, ebx
call fcn.0042c960
push esi
call fcn.004ab7e0
add esp, 4
test al, al
je 0x536d7a
push esi
mov ecx, ebx
call fcn.0042ed20
jmp 0x536d8c
push ebx
push esi
call fcn.00475c80
add esp, 8
test al, al
je 0x536e2c
mov ecx, ebx
call fcn.0042bab0
test eax, eax
je 0x536e2c
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x14]
push ecx
lea edx, [esp + 0x30]
push edx
lea eax, [esp + 0x28]
push eax
push str._d._d._d._d
mov ecx, ebx
call fcn.0051b3b0
push eax
call fcn.00435ef0
add esp, 0x18
cmp eax, 4
jne 0x536e2c
movzx ecx, byte [esp + 0x1c]
mov eax, dword [esp + 0x30]
movzx edx, byte [esp + 0x28]
mov byte [eax], cl
movzx ecx, byte [esp + 0x10]
mov byte [eax + 1], dl
movzx edx, byte [esp + 0x14]
mov byte [eax + 2], cl
mov byte [eax + 3], dl
test ebp, ebp
je 0x536e04
mov ecx, ebx
call fcn.0051b3b0
push eax
push str.ResolvedToIp
mov ecx, ebp
call fcn.004851b0
mov edi, dword [esp + 0x24]
mov esi, dword [edi]
mov ecx, ebx
add esi, 0x2c
call fcn.0051b3b0
push eax
mov eax, dword [esi]
push str.dnsCacheHit
mov ecx, edi
call eax
pop ebp
pop edi
pop esi
mov al, 1
pop ebx
add esp, 8
ret 0x20
mov ecx, edi
mov dword [edi + 0x9c], ebp
mov byte [edi + 0x114], 1
call fcn.004127f0
call sub.KERNEL32.dll_GetTickCount
lea ecx, [esp + 0x1c]
push ecx
push 0
push edi
push 0x536890
push 0
push 0
mov dword [esp + 0x40], eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
test eax, eax
je 0x536f11
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [esp + 0x24]
mov edx, dword [ecx]
mov eax, dword [edx + 0x18]
push str.Resolving_domain_name__IPV4_
call eax
xor eax, eax
xor ebx, ebx
cmp byte [edi + 0x114], al
jne 0x536f34
mov ebx, dword [esp + 0x2c]
lea ecx, [edi + 0xa0]
push ecx
mov ecx, ebx
call fcn.0042ed20
mov edx, dword [edi + 0x118]
mov eax, dword [esp + 0x30]
mov ecx, ebx
mov dword [eax], edx
call fcn.0042bab0
test eax, eax
je 0x536ec9
mov ecx, ebx
call fcn.0051b3b0
push eax
push esi
call fcn.00475ae0
add esp, 8
test ebp, ebp
je 0x536eec
mov ecx, ebx
call fcn.0042bab0
test eax, eax
je 0x536eec
mov ecx, ebx
call fcn.0051b3b0
push eax
push str.ResolvedToIp
mov ecx, ebp
call fcn.004851b0
mov ecx, dword [esp + 0x24]
push ebx
push str.resolvedToIp
call fcn.004370f0
mov ecx, ebx
call fcn.0042bab0
pop ebp
pop edi
test eax, eax
pop esi
setne al
pop ebx
add esp, 8
ret 0x20
mov ecx, dword [esp + 0x24]
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
push str.Failed_to_start_background_thread_for_resolving_IPV4_domain_name.
call eax
pop ebp
pop edi
pop esi
xor al, al
pop ebx
add esp, 8
ret 0x20
mov eax, dword [esp + 0x1c]
inc eax
cmp eax, 0xc8
mov dword [esp + 0x1c], eax
jle 0x536f4f
push 0xa
call fcn.004357f0
add esp, 4
add ebx, 0xa
jmp 0x536f5c
push 2
call fcn.004357f0
add esp, 4
add ebx, 2
test ebp, ebp
je 0x536f7a
cmp ebx, dword [ebp + 0x88]
jb 0x536f7a
mov ecx, dword [esp + 0x24]
push ecx
mov ecx, ebp
xor ebx, ebx
call fcn.00485430
test al, al
jne 0x536fa4
cmp dword [esp + 0x20], 0
je 0x536f96
call sub.KERNEL32.dll_GetTickCount
mov ecx, dword [esp + 0x28]
cmp eax, ecx
jbe 0x536f96
sub eax, ecx
cmp eax, dword [esp + 0x20]
ja 0x536fc7
cmp byte [edi + 0x114], 0
jne 0x536f30
jmp 0x536e8f
mov edx, dword [esp + 0x34]
mov ecx, dword [esp + 0x24]
mov byte [edx], 1
mov eax, dword [ecx]
mov edx, dword [eax + 0x14]
push str.DNS_lookup_aborted_by_application_callback
call edx
pop ebp
pop edi
pop esi
xor al, al
pop ebx
add esp, 8
ret 0x20
mov eax, dword [esp + 0x38]
pop ebp
pop edi
pop esi
mov byte [eax], 1
xor al, al
pop ebx
add esp, 8
ret 0x20