Function at 0x6f254be0
Capabilities:
Create thread

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
push ecx
sub esp, 0x68
mov eax, dword [ecx + 4]
mov ebx, dword [ecx]
mov esi, dword [ecx + 0xc]
mov dword [ebp - 0x2c], eax
mov eax, dword [ecx + 8]
mov dword [ebp - 0x30], eax
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x34], eax
test byte [0x6f266238], 8
jne 0x6f254da0
lea eax, [ebx - 1]
cmp eax, 0xfffe
jbe 0x6f254c30
xor eax, eax
jmp 0x6f254d8e
mov dword [esp], 0x6f266460
call dword [sym.imp.kernel32.dll_EnterCriticalSection]
mov edx, 0x6f27a572
xor eax, eax
sub esp, 4
lea esi, [esi]
nop
cmp word [edx], 0
je 0x6f254c80
add eax, 1
add edx, 0x18
cmp eax, 0x10
jne 0x6f254c50
mov dword [esp], 0x6f266460
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
xor eax, eax
sub esp, 4
jmp 0x6f254d8e
mov edi, dword [0x6f27a548]
lea edx, [edi + 1]
mov ecx, edx
shl ecx, 4
add cx, ax
mov word [ebp - 0x36], cx
jne 0x6f254ca3
lea edx, [edi + 2]
mov edi, edx
shl edi, 4
mov word [ebp - 0x36], di
lea edi, [eax + eax*2]
mov dword [0x6f27a548], edx
lea eax, [ebp - 0x28]
shl edi, 3
lea ecx, [edi + 0x6f27a560]
mov dword [edi + 0x6f27a560], ebx
mov dword [ebp - 0x44], ecx
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_QueryPerformanceCounter]
lea eax, [ebp - 0x20]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_QueryPerformanceFrequency]
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x24]
sub esp, 4
shld edx, eax, 5
shl eax, 5
sub eax, dword [ebp - 0x28]
sbb edx, dword [ebp - 0x24]
shld edx, eax, 2
shl eax, 2
add eax, dword [ebp - 0x28]
adc edx, dword [ebp - 0x24]
shld edx, eax, 3
shl eax, 3
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x3c], edx
mov edx, dword [ebp - 0x1c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.6f265130
mov ecx, dword [ebp - 0x44]
add eax, ebx
movzx ebx, word [ebp - 0x36]
movzx edx, word [ebp - 0x34]
mov dword [ecx + 0x14], eax
mov eax, dword [ebp - 0x2c]
mov dword [ecx + 0xc], esi
mov esi, dword [0x6f27a544]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x30]
mov dword [ecx + 8], eax
mov eax, ebx
shl eax, 0x10
or eax, edx
mov dword [edi + 0x6f27a570], eax
test esi, esi
je 0x6f254e18
mov dword [esp], 0x6f266460
call dword [sym.imp.kernel32.dll_LeaveCriticalSection]
sub esp, 4
mov dword [esp], 0x6f27a540
call dword [sym.imp.kernel32.dll_WakeConditionVariable]
sub esp, 4
test byte [0x6f266238], 8
jne 0x6f254de8
mov eax, ebx
lea esp, [ebp - 0x10]
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret 0x14
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], esi
mov eax, dword [ebp - 0x30]
mov dword [esp + 0x18], eax
mov eax, dword [ebp - 0x2c]
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], str.__u___u___p___08IX___04X___n
mov dword [esp + 8], str.timeSetEvent
mov dword [esp + 0x14], eax
mov dword [esp + 4], 0x6f266238
mov dword [esp], 3
call fcn.6f254610
jmp 0x6f254c18
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], str.___u_n
mov dword [esp + 8], str.timeSetEvent
mov dword [esp + 4], 0x6f266238
mov dword [esp], 3
call fcn.6f254610
jmp 0x6f254d8c
lea eax, [ebp - 0x20]
mov dword [esp + 4], 0x6f254660
mov dword [esp + 8], eax
mov dword [esp], 4
call dword [sym.imp.kernel32.dll_GetModuleHandleExW]
sub esp, 0xc
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov eax, dword [ebp - 0x20]
mov dword [esp + 8], 0x6f254660
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [esp + 0xc], eax
call dword [sym.imp.kernel32.dll_CreateThread]
sub esp, 0x18
mov dword [0x6f27a544], eax
mov dword [esp + 4], 0xf
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_SetThreadPriority]
sub esp, 8
jmp 0x6f254d63