Function at 0x536970
Capabilities:
Check for time delay via gettickcount
Create thread
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x582df8
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
push ebx
push ebp
push esi
push edi
mov eax, dword [0x641030]
xor eax, esp
push eax
lea eax, [esp + 0x40]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [esp + 0x5c]
push str.resolveHostname6
push eax
lea ecx, [esp + 0x1c]
call fcn.00437740
mov ecx, dword [esp + 0x74]
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x78]
mov byte [ecx], 0
lea edi, [esi + 0x30]
push eax
mov ecx, edi
mov dword [esp + 0x4c], 0
mov byte [edx], 0
call fcn.0042ed20
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x6c]
mov eax, dword [esp + 0x70]
mov ebp, dword [esp + 0x64]
mov ebx, dword [esp + 0x68]
push 0
push 0x584371
mov dword [esi + 0xa4], ecx
push str.http:__
mov ecx, edi
mov dword [esi + 0xb0], ebp
mov dword [esi + 0xac], ebx
mov dword [esi + 0xb8], edx
mov dword [esi + 0xb4], eax
call fcn.0042d510
push 0
push 0x584371
push str.https:__
mov ecx, edi
call fcn.0042d510
push 0x2f
mov ecx, edi
call fcn.0042c770
push 0x3a
mov ecx, edi
call fcn.0042c770
mov ecx, edi
call fcn.0042bc00
mov ecx, edi
call fcn.0042bab0
test eax, eax
jne 0x536a88
mov esi, dword [esp + 0x5c]
mov edx, dword [esi]
mov eax, dword [edx + 0x14]
push str.Invalid_hostname_for_resolving_hostname_to_IP_address.
mov ecx, esi
call eax
mov ecx, dword [esp + 0x50]
push ecx
push str.hostname
mov ecx, esi
call fcn.004370f0
lea ecx, [esp + 0x14]
mov dword [esp + 0x48], 0xffffffff
call fcn.004377b0
xor al, al
jmp 0x536bd7
mov ecx, edi
call fcn.0051b3b0
mov ecx, dword [esp + 0x60]
mov edi, eax
test ecx, ecx
je 0x536ab1
push edi
push str.HostnameResolve
call fcn.004851b0
mov eax, dword [esp + 0x60]
cmp dword [eax + 0x88], 0
jne 0x536b19
mov edx, dword [esp + 0x6c]
mov ecx, dword [esp + 0x5c]
xor eax, eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x70]
push 0
mov dword [esp + 0x2c], eax
lea eax, [esi + 0xbc]
push eax
push ecx
mov dword [esp + 0x38], edx
lea edx, [esp + 0x2c]
mov dword [eax], 0
mov eax, dword [esp + 0x60]
push edx
push eax
push edi
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x38], ebx
call fcn.004ad080
add esp, 0x18
mov bl, al
jmp 0x536bc4
mov ecx, dword [esp + 0x6c]
mov edx, dword [esp + 0x70]
mov dword [esi + 0xb8], ecx
xor edi, edi
mov ecx, esi
mov dword [esi + 0x2c], eax
mov byte [esi + 0x28], 1
mov dword [esi + 0xb0], ebp
mov dword [esi + 0xac], ebx
mov dword [esi + 0xb4], edx
mov dword [esi + 0xbc], edi
mov byte [esi + 0xa8], 0
call fcn.004127f0
call sub.KERNEL32.dll_GetTickCount
mov ebp, eax
lea eax, [esp + 0x6c]
push eax
push edi
push esi
push 0x536900
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ebx, eax
cmp ebx, edi
je 0x536b80
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp ebx, edi
setne al
test al, al
jne 0x536b9c
mov ecx, dword [esp + 0x5c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
push str.Failed_to_start_background_thread_for_resolving_domain_name.
call eax
jmp 0x536a70
mov ebx, dword [esp + 0x5c]
cmp byte [ebx + 0x121], 0
je 0x536bb7
mov edx, dword [ebx]
mov eax, dword [edx + 0x18]
push str.Resolving_domain_name__IPV4_IPV6_...
mov ecx, ebx
call eax
xor eax, eax
cmp byte [esi + 0x28], al
jne 0x536bf4
mov bl, byte [esi + 0xa8]
lea ecx, [esp + 0x14]
mov dword [esp + 0x48], 0xffffffff
call fcn.004377b0
mov al, bl
mov ecx, dword [esp + 0x40]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x38
ret 0x2c
mov eax, dword [esp + 0x5c]
inc eax
cmp eax, 0xc8
mov dword [esp + 0x5c], eax
jle 0x536c04
push 0xa
jmp 0x536c06
push 2
call fcn.004357f0
mov ecx, dword [esp + 0x64]
inc edi
add esp, 4
cmp edi, dword [ecx + 0x88]
jb 0x536c3f
push ebx
xor edi, edi
call fcn.00485430
test al, al
jne 0x536c4a
cmp dword [esp + 0x58], 0
je 0x536c3f
call sub.KERNEL32.dll_GetTickCount
cmp eax, ebp
jbe 0x536c3f
sub eax, ebp
cmp eax, dword [esp + 0x58]
ja 0x536c64
cmp byte [esi + 0x28], 0
jne 0x536bf0
jmp 0x536bbe
mov ecx, dword [esp + 0x74]
mov byte [ecx], 1
mov edx, dword [ebx]
mov eax, dword [edx + 0x14]
push str.DNS_lookup_aborted_by_application_callback
mov ecx, ebx
call eax
jmp 0x536a70
mov edx, dword [ebx]
mov eax, dword [edx + 0x14]
push str.Timeout_in_resolving_domain_name.
mov ecx, ebx
call eax
mov ecx, dword [esp + 0x78]
mov byte [ecx], 1
jmp 0x536a70