Function at 0x56c200
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xac
mov eax, dword [0x693184]
xor ecx, ecx
push ebx
push esi
cmp eax, ecx
push edi
mov dword [esp + 0xc], ecx
je 0x56c2c6
mov edx, dword [ebp + 8]
cmp edx, ecx
je 0x56c2c6
mov eax, dword [ebp + 0x14]
test eax, 0x20000000
je 0x56c2b0
mov esi, eax
mov eax, dword [0x697b30]
and esi, 0xdfffffff
cmp eax, ecx
mov dword [ebp + 0x14], esi
mov ebx, 3
jne 0x56c2c6
lea esi, [ebx + ebx*2]
push edx
shl esi, 4
mov dword [esi + 0x697abc], ecx
call fcn.0056ae10
mov edi, eax
add esp, 4
cmp edi, 0xffffffff
mov dword [esp + 0x20], edi
je 0x56c534
push edi
push ebx
call fcn.0056e820
add esp, 8
test eax, eax
je 0x56c525
lea eax, [esp + 0x70]
push eax
push ebx
call fcn.0056e920
add esp, 8
mov dword [esp + 0x30], eax
test eax, eax
jne 0x56c2cf
push ebx
call fcn.0056e8d0
mov eax, dword [esp + 0x10]
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor ebx, ebx
mov eax, 0x697aa0
cmp dword [eax], ecx
je 0x56c250
add eax, 0x30
inc ebx
cmp eax, 0x697b30
jl 0x56c2b7
mov eax, ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [0x6931a0]
test eax, eax
jne 0x56c314
lea ecx, [esp + 0x34]
push ecx
push 0
push 0x690160
push 0x56bfe0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
test eax, eax
mov dword [0x6931a0], eax
jne 0x56c308
mov dword [0x6931a0], 0xffffffff
jmp 0x56c314
mov eax, dword [0x6931a4]
or al, 1
mov dword [0x6931a4], eax
mov ecx, 9
xor eax, eax
lea edi, [esp + 0x38]
mov dword [esp + 0x10], eax
rep stosd dword es:[edi], eax
mov al, byte [ebp + 0x14]
lea edx, [esp + 0x70]
test al, 1
mov dword [esp + 0x38], 0x24
mov dword [esp + 0x3c], 0x10080
mov dword [esp + 0x48], edx
je 0x56c352
mov eax, dword [esi + 0x697abc]
or al, 2
mov dword [esi + 0x697abc], eax
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x28], 0
test eax, eax
mov dword [esp + 0x2c], 0
je 0x56c376
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x28], ecx
mov dword [esp + 0x2c], edx
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
push eax
push ecx
push ebx
call fcn.0056e7e0
mov edx, dword [esi + 0x697abc]
mov eax, dword [esp + 0x84]
or edx, 1
add esp, 0xc
mov dword [esi + 0x697abc], edx
mov dword [esi + 0x697ac4], eax
imul eax, dword [ebp + 0x10]
lea ecx, [esp + 0x10]
mov edi, eax
mov eax, dword [0x693184]
push 0
push ecx
lea ecx, [esp + 0x40]
mov dword [esp + 0x48], edi
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0xc]
test eax, eax
jl 0x56c513
lea ecx, [esp + 0x14]
push 0
mov eax, dword [esp + 0x14]
push ecx
lea ecx, [esp + 0x24]
mov edx, dword [eax]
push ecx
lea ecx, [esp + 0x30]
push ecx
lea ecx, [esp + 0x28]
push ecx
push edi
push 0
push eax
call dword [edx + 0x2c]
test eax, eax
jl 0x56c509
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x20]
xor eax, eax
mov dword [esi + 0x697aa8], eax
mov dword [esi + 0x697ab0], edx
mov dword [esi + 0x697ab4], eax
mov dword [esi + 0x697ab8], eax
mov dword [esi + 0x697ac8], eax
mov dword [esi + 0x697aa4], ecx
mov ecx, dword [esp + 0x24]
mov dword [esi + 0x697aac], edi
mov edi, dword [ebp + 0xc]
cmp edi, eax
mov dword [esi + 0x697acc], edi
je 0x56c470
cmp ecx, eax
je 0x56c453
mov edx, dword [esp + 0x18]
push ecx
push edx
push ebx
call fcn.0056bf60
add esp, 0xc
xor eax, eax
mov ecx, dword [esp + 0x14]
cmp ecx, eax
je 0x56c4b0
mov eax, dword [esp + 0x1c]
push ecx
push eax
push ebx
call fcn.0056bf60
mov ecx, dword [esp + 0x20]
add esp, 0xc
jmp 0x56c4b0
cmp ecx, eax
je 0x56c48d
mov edi, dword [esp + 0x18]
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov edi, dword [ebp + 0xc]
xor eax, eax
mov ecx, dword [esp + 0x14]
cmp ecx, eax
je 0x56c4b0
mov edi, dword [esp + 0x1c]
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov ecx, dword [esp + 0x14]
mov edi, dword [ebp + 0xc]
mov eax, dword [esp + 0x10]
push ecx
mov ecx, dword [esp + 0x20]
mov edx, dword [eax]
push ecx
mov ecx, dword [esp + 0x2c]
push ecx
mov ecx, dword [esp + 0x24]
push ecx
push eax
call dword [edx + 0x4c]
mov eax, dword [esp + 0x10]
push 1
push edi
push eax
mov dword [esi + 0x697aa0], eax
call fcn.0056c720
add esp, 0xc
test eax, eax
je 0x56c4fd
inc ebx
push edi
push ebx
mov dword [esp + 0x28], 0xffffffff
mov dword [esp + 0x14], ebx
call fcn.0056bec0
add esp, 8
jmp 0x56c513
inc ebx
push ebx
call fcn.0056be00
add esp, 4
jmp 0x56c513
mov eax, dword [esp + 0x10]
push eax
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [esi + 0x697abc]
mov edi, dword [esp + 0x20]
and al, 0xfe
mov dword [esi + 0x697abc], eax
cmp edi, 0xffffffff
je 0x56c534
push edi
call dword [0x5c5a2c]
add esp, 4
mov eax, dword [esp + 0xc]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret