Function at 0x56c8a0
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xac
mov eax, dword [0x69fa44]
xor ecx, ecx
push ebx
push esi
cmp eax, ecx
push edi
mov dword [esp + 0xc], ecx
je 0x56c966
mov edx, dword [ebp + 8]
cmp edx, ecx
je 0x56c966
mov eax, dword [ebp + 0x14]
test eax, 0x20000000
je 0x56c950
mov esi, eax
mov eax, dword [0x6a43d0]
and esi, 0xdfffffff
cmp eax, ecx
mov dword [ebp + 0x14], esi
mov ebx, 3
jne 0x56c966
lea esi, [ebx + ebx*2]
push edx
shl esi, 4
mov dword [esi + 0x6a435c], ecx
call fcn.0056b450
mov edi, eax
add esp, 4
cmp edi, 0xffffffff
mov dword [esp + 0x20], edi
je 0x56cbd4
push edi
push ebx
call fcn.0056eec0
add esp, 8
test eax, eax
je 0x56cbc5
lea eax, [esp + 0x70]
push eax
push ebx
call fcn.0056efc0
add esp, 8
mov dword [esp + 0x30], eax
test eax, eax
jne 0x56c96f
push ebx
call fcn.0056ef70
mov eax, dword [esp + 0x10]
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
xor ebx, ebx
mov eax, 0x6a4340
cmp dword [eax], ecx
je 0x56c8f0
add eax, 0x30
inc ebx
cmp eax, 0x6a43d0
jl 0x56c957
mov eax, ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [0x69fa60]
test eax, eax
jne 0x56c9b4
lea ecx, [esp + 0x34]
push ecx
push 0
push 0x69ca20
push 0x56c680
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
test eax, eax
mov dword [0x69fa60], eax
jne 0x56c9a8
mov dword [0x69fa60], 0xffffffff
jmp 0x56c9b4
mov eax, dword [0x69fa64]
or al, 1
mov dword [0x69fa64], eax
mov ecx, 9
xor eax, eax
lea edi, [esp + 0x38]
mov dword [esp + 0x10], eax
rep stosd dword es:[edi], eax
mov al, byte [ebp + 0x14]
lea edx, [esp + 0x70]
test al, 1
mov dword [esp + 0x38], 0x24
mov dword [esp + 0x3c], 0x10080
mov dword [esp + 0x48], edx
je 0x56c9f2
mov eax, dword [esi + 0x6a435c]
or al, 2
mov dword [esi + 0x6a435c], eax
mov eax, dword [ebp + 0x18]
mov dword [esp + 0x28], 0
test eax, eax
mov dword [esp + 0x2c], 0
je 0x56ca16
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x28], ecx
mov dword [esp + 0x2c], edx
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
push eax
push ecx
push ebx
call fcn.0056ee80
mov edx, dword [esi + 0x6a435c]
mov eax, dword [esp + 0x84]
or edx, 1
add esp, 0xc
mov dword [esi + 0x6a435c], edx
mov dword [esi + 0x6a4364], eax
imul eax, dword [ebp + 0x10]
lea ecx, [esp + 0x10]
mov edi, eax
mov eax, dword [0x69fa44]
push 0
push ecx
lea ecx, [esp + 0x40]
mov dword [esp + 0x48], edi
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0xc]
test eax, eax
jl 0x56cbb3
lea ecx, [esp + 0x14]
push 0
mov eax, dword [esp + 0x14]
push ecx
lea ecx, [esp + 0x24]
mov edx, dword [eax]
push ecx
lea ecx, [esp + 0x30]
push ecx
lea ecx, [esp + 0x28]
push ecx
push edi
push 0
push eax
call dword [edx + 0x2c]
test eax, eax
jl 0x56cba9
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x20]
xor eax, eax
mov dword [esi + 0x6a4348], eax
mov dword [esi + 0x6a4350], edx
mov dword [esi + 0x6a4354], eax
mov dword [esi + 0x6a4358], eax
mov dword [esi + 0x6a4368], eax
mov dword [esi + 0x6a4344], ecx
mov ecx, dword [esp + 0x24]
mov dword [esi + 0x6a434c], edi
mov edi, dword [ebp + 0xc]
cmp edi, eax
mov dword [esi + 0x6a436c], edi
je 0x56cb10
cmp ecx, eax
je 0x56caf3
mov edx, dword [esp + 0x18]
push ecx
push edx
push ebx
call fcn.0056c600
add esp, 0xc
xor eax, eax
mov ecx, dword [esp + 0x14]
cmp ecx, eax
je 0x56cb50
mov eax, dword [esp + 0x1c]
push ecx
push eax
push ebx
call fcn.0056c600
mov ecx, dword [esp + 0x20]
add esp, 0xc
jmp 0x56cb50
cmp ecx, eax
je 0x56cb2d
mov edi, dword [esp + 0x18]
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov edi, dword [ebp + 0xc]
xor eax, eax
mov ecx, dword [esp + 0x14]
cmp ecx, eax
je 0x56cb50
mov edi, dword [esp + 0x1c]
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov ecx, dword [esp + 0x14]
mov edi, dword [ebp + 0xc]
mov eax, dword [esp + 0x10]
push ecx
mov ecx, dword [esp + 0x20]
mov edx, dword [eax]
push ecx
mov ecx, dword [esp + 0x2c]
push ecx
mov ecx, dword [esp + 0x24]
push ecx
push eax
call dword [edx + 0x4c]
mov eax, dword [esp + 0x10]
push 1
push edi
push eax
mov dword [esi + 0x6a4340], eax
call fcn.0056cdc0
add esp, 0xc
test eax, eax
je 0x56cb9d
inc ebx
push edi
push ebx
mov dword [esp + 0x28], 0xffffffff
mov dword [esp + 0x14], ebx
call fcn.0056c560
add esp, 8
jmp 0x56cbb3
inc ebx
push ebx
call fcn.0056c4a0
add esp, 4
jmp 0x56cbb3
mov eax, dword [esp + 0x10]
push eax
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [esi + 0x6a435c]
mov edi, dword [esp + 0x20]
and al, 0xfe
mov dword [esi + 0x6a435c], eax
cmp edi, 0xffffffff
je 0x56cbd4
push edi
call dword [0x5c6a2c]
add esp, 4
mov eax, dword [esp + 0xc]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret