Function at 0x563a90
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xac
mov eax, dword [0x69574c]
xor ecx, ecx
push ebx
push esi
cmp eax, ecx
push edi
mov dword [esp + 0xc], ecx
je 0x563b56
mov edx, dword [ebp + 8]
cmp edx, ecx
je 0x563b56
mov eax, dword [ebp + 0x14]
test eax, 0x20000000
je 0x563b40
mov esi, eax
mov eax, dword [0x69a0b0]
and esi, 0xdfffffff
cmp eax, ecx
mov dword [ebp + 0x14], esi
mov ebx, 3
jne 0x563b56
lea esi, [ebx + ebx*2]
push edx
shl esi, 4
mov dword [esi + 0x69a03c], ecx
call fcn.00562640
mov edi, eax
add esp, 4
cmp edi, 0xffffffff
mov dword [esp + 0x20], edi
je 0x563dc4
push edi
push ebx
call fcn.005660b0
add esp, 8
test eax, eax
je 0x563db5
lea eax, [esp + 0x70]
push eax
push ebx
call fcn.005661b0
add esp, 8
mov dword [esp + 0x30], eax
test eax, eax
jne 0x563b5f
push ebx
call fcn.00566160
mov eax, dword [esp + 0x10]
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor ebx, ebx
mov eax, 0x69a020
cmp dword [eax], ecx
je 0x563ae0
add eax, 0x30
inc ebx
cmp eax, 0x69a0b0
jl 0x563b47
mov eax, ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [0x695768]
test eax, eax
jne 0x563ba4
lea ecx, [esp + 0x34]
push ecx
push 0
push 0x692730
push 0x563870
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
test eax, eax
mov dword [0x695768], eax
jne 0x563b98
mov dword [0x695768], 0xffffffff
jmp 0x563ba4
mov eax, dword [0x69576c]
or al, 1
mov dword [0x69576c], eax
mov ecx, 9
xor eax, eax
lea edi, [esp + 0x38]
mov dword [esp + 0x10], eax
rep stosd dword es:[edi], eax
mov al, byte [ebp + 0x14]
lea edx, [esp + 0x70]
test al, 1
mov dword [esp + 0x38], 0x24
mov dword [esp + 0x3c], 0x10080
mov dword [esp + 0x48], edx
je 0x563be2
mov eax, dword [esi + 0x69a03c]
or al, 2
mov dword [esi + 0x69a03c], eax
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x28], 0
test eax, eax
mov dword [esp + 0x2c], 0
je 0x563c06
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x28], ecx
mov dword [esp + 0x2c], edx
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
push eax
push ecx
push ebx
call fcn.00566070
mov edx, dword [esi + 0x69a03c]
mov eax, dword [esp + 0x84]
or edx, 1
add esp, 0xc
mov dword [esi + 0x69a03c], edx
mov dword [esi + 0x69a044], eax
imul eax, dword [ebp + 0x10]
lea ecx, [esp + 0x10]
mov edi, eax
mov eax, dword [0x69574c]
push 0
push ecx
lea ecx, [esp + 0x40]
mov dword [esp + 0x48], edi
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0xc]
test eax, eax
jl 0x563da3
lea ecx, [esp + 0x14]
push 0
mov eax, dword [esp + 0x14]
push ecx
lea ecx, [esp + 0x24]
mov edx, dword [eax]
push ecx
lea ecx, [esp + 0x30]
push ecx
lea ecx, [esp + 0x28]
push ecx
push edi
push 0
push eax
call dword [edx + 0x2c]
test eax, eax
jl 0x563d99
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x20]
xor eax, eax
mov dword [esi + 0x69a028], eax
mov dword [esi + 0x69a030], edx
mov dword [esi + 0x69a034], eax
mov dword [esi + 0x69a038], eax
mov dword [esi + 0x69a048], eax
mov dword [esi + 0x69a024], ecx
mov ecx, dword [esp + 0x24]
mov dword [esi + 0x69a02c], edi
mov edi, dword [ebp + 0xc]
cmp edi, eax
mov dword [esi + 0x69a04c], edi
je 0x563d00
cmp ecx, eax
je 0x563ce3
mov edx, dword [esp + 0x18]
push ecx
push edx
push ebx
call fcn.005637f0
add esp, 0xc
xor eax, eax
mov ecx, dword [esp + 0x14]
cmp ecx, eax
je 0x563d40
mov eax, dword [esp + 0x1c]
push ecx
push eax
push ebx
call fcn.005637f0
mov ecx, dword [esp + 0x20]
add esp, 0xc
jmp 0x563d40
cmp ecx, eax
je 0x563d1d
mov edi, dword [esp + 0x18]
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov edi, dword [ebp + 0xc]
xor eax, eax
mov ecx, dword [esp + 0x14]
cmp ecx, eax
je 0x563d40
mov edi, dword [esp + 0x1c]
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov ecx, dword [esp + 0x14]
mov edi, dword [ebp + 0xc]
mov eax, dword [esp + 0x10]
push ecx
mov ecx, dword [esp + 0x20]
mov edx, dword [eax]
push ecx
mov ecx, dword [esp + 0x2c]
push ecx
mov ecx, dword [esp + 0x24]
push ecx
push eax
call dword [edx + 0x4c]
mov eax, dword [esp + 0x10]
push 1
push edi
push eax
mov dword [esi + 0x69a020], eax
call fcn.00563fb0
add esp, 0xc
test eax, eax
je 0x563d8d
inc ebx
push edi
push ebx
mov dword [esp + 0x28], 0xffffffff
mov dword [esp + 0x14], ebx
call fcn.00563750
add esp, 8
jmp 0x563da3
inc ebx
push ebx
call fcn.00563690
add esp, 4
jmp 0x563da3
mov eax, dword [esp + 0x10]
push eax
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [esi + 0x69a03c]
mov edi, dword [esp + 0x20]
and al, 0xfe
mov dword [esi + 0x69a03c], eax
cmp edi, 0xffffffff
je 0x563dc4
push edi
call dword [0x5bc85c]
add esp, 4
mov eax, dword [esp + 0xc]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret