Function at 0x10014c80
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, dword [0x1006aee8]
mov edx, dword [esi + 8]
mov ecx, dword [esi + 0x14]
sub ecx, dword [esi + 0x10]
lea eax, [edx + 4]
cmp eax, ecx
jbe 0x10014ca6
xor ecx, ecx
jmp 0x10014cac
mov eax, dword [esi + 0x10]
mov ecx, dword [edx + eax]
lea eax, [edx + 4]
mov dword [esi + 8], eax
lea eax, [edi + 8]
mov dword [edi], ecx
mov ecx, esi
push eax
call fcn.1000a170
lea eax, [edi + 0x20]
mov byte [esi + 4], 0
push eax
mov ecx, esi
call fcn.1000a170
mov esi, eax
mov ebx, dword [esi + 8]
mov edx, dword [esi + 0x14]
sub edx, dword [esi + 0x10]
lea ecx, [ebx + 1]
cmp ecx, edx
jbe 0x10014ce4
xor cl, cl
jmp 0x10014cea
mov eax, dword [esi + 0x10]
mov cl, byte [ebx + eax]
lea eax, [ebx + 1]
mov dword [esi + 8], eax
mov byte [edi + 0x38], cl
mov edx, dword [esi + 8]
mov ecx, dword [esi + 0x14]
sub ecx, dword [esi + 0x10]
lea eax, [edx + 1]
cmp eax, ecx
jbe 0x10014d07
xor cl, cl
jmp 0x10014d0d
mov eax, dword [esi + 0x10]
mov cl, byte [edx + eax]
lea eax, [edx + 1]
mov dword [esi + 8], eax
mov byte [edi + 0x39], cl
mov edx, dword [esi + 8]
mov ecx, dword [esi + 0x14]
sub ecx, dword [esi + 0x10]
lea eax, [edx + 2]
cmp eax, ecx
jbe 0x10014d2a
xor ecx, ecx
jmp 0x10014d31
mov eax, dword [esi + 0x10]
movzx ecx, word [edx + eax]
lea eax, [edx + 2]
mov dword [esi + 8], eax
mov word [edi + 0x3e], cx
mov edx, dword [esi + 8]
mov ecx, dword [esi + 0x14]
sub ecx, dword [esi + 0x10]
lea eax, [edx + 1]
cmp eax, ecx
jbe 0x10014d4f
xor cl, cl
jmp 0x10014d55
mov eax, dword [esi + 0x10]
mov cl, byte [edx + eax]
lea eax, [edx + 1]
mov dword [esi + 8], eax
mov byte [edi + 0x3a], cl
mov edx, dword [esi + 8]
mov ecx, dword [esi + 0x14]
sub ecx, dword [esi + 0x10]
lea eax, [edx + 1]
cmp eax, ecx
jbe 0x10014d72
xor cl, cl
jmp 0x10014d78
mov eax, dword [esi + 0x10]
mov cl, byte [edx + eax]
lea eax, [edx + 1]
mov dword [esi + 8], eax
mov byte [edi + 0x3b], cl
mov edx, dword [esi + 8]
mov ecx, dword [esi + 0x14]
sub ecx, dword [esi + 0x10]
lea eax, [edx + 1]
cmp eax, ecx
jbe 0x10014d95
xor cl, cl
jmp 0x10014d9b
mov eax, dword [esi + 0x10]
mov cl, byte [edx + eax]
lea eax, [edx + 1]
mov dword [esi + 8], eax
mov byte [edi + 0x3c], cl
mov edx, dword [esi + 8]
mov ecx, dword [esi + 0x14]
sub ecx, dword [esi + 0x10]
lea eax, [edx + 1]
cmp eax, ecx
jbe 0x10014db8
xor cl, cl
jmp 0x10014dbe
mov eax, dword [esi + 0x10]
mov cl, byte [edx + eax]
lea eax, [edx + 1]
mov dword [esi + 8], eax
mov byte [edi + 0x68], cl
mov edx, dword [esi + 8]
mov ecx, dword [esi + 0x14]
sub ecx, dword [esi + 0x10]
lea eax, [edx + 1]
cmp eax, ecx
jbe 0x10014ddb
xor cl, cl
jmp 0x10014de1
mov eax, dword [esi + 0x10]
mov cl, byte [edx + eax]
lea eax, [edx + 1]
mov dword [esi + 8], eax
mov byte [edi + 0x69], cl
mov edx, dword [esi + 8]
mov ecx, dword [esi + 0x14]
sub ecx, dword [esi + 0x10]
lea eax, [edx + 1]
cmp eax, ecx
jbe 0x10014dfe
xor cl, cl
jmp 0x10014e04
mov eax, dword [esi + 0x10]
mov cl, byte [edx + eax]
lea eax, [edx + 1]
mov dword [esi + 8], eax
mov byte [edi + 0x6a], cl
mov edx, dword [esi + 8]
mov ecx, dword [esi + 0x14]
sub ecx, dword [esi + 0x10]
lea eax, [edx + 1]
cmp eax, ecx
jbe 0x10014e21
xor cl, cl
jmp 0x10014e27
mov eax, dword [esi + 0x10]
mov cl, byte [edx + eax]
lea eax, [edx + 1]
mov dword [esi + 8], eax
mov byte [edi + 0x6b], cl
mov edx, dword [esi + 8]
mov ecx, dword [esi + 0x14]
sub ecx, dword [esi + 0x10]
lea eax, [edx + 1]
cmp eax, ecx
jbe 0x10014e44
xor cl, cl
jmp 0x10014e4a
mov eax, dword [esi + 0x10]
mov cl, byte [edx + eax]
lea eax, [edx + 1]
mov dword [esi + 8], eax
mov byte [edi + 0x6c], cl
mov edx, dword [esi + 8]
mov ecx, dword [esi + 0x14]
sub ecx, dword [esi + 0x10]
lea eax, [edx + 4]
cmp eax, ecx
jbe 0x10014e67
xor ecx, ecx
jmp 0x10014e6d
mov eax, dword [esi + 0x10]
mov ecx, dword [edx + eax]
lea eax, [edx + 4]
mov dword [esi + 8], eax
mov dword [edi + 0x4c], ecx
mov edx, dword [esi + 8]
mov ecx, dword [esi + 0x14]
sub ecx, dword [esi + 0x10]
lea eax, [edx + 4]
cmp eax, ecx
jbe 0x10014e8a
xor ecx, ecx
jmp 0x10014e90
mov eax, dword [esi + 0x10]
mov ecx, dword [edx + eax]
lea eax, [edx + 4]
mov byte [0x1006afb6], 1
mov dword [esi + 8], eax
mov dword [edi + 0x50], ecx
mov ecx, dword [0x1006aef0]
test ecx, ecx
je 0x10014eb6
mov ecx, dword [ecx + 0x20]
test ecx, ecx
je 0x10014eb6
call fcn.1001c180
mov eax, dword [0x1006aeec]
test eax, eax
je 0x10014ee6
cmp byte [eax], 0
jne 0x10014ee6
push 0
push 0
push eax
push 0x10016720
push 0
push 0
mov byte [eax], 1
call dword [sym.imp.KERNEL32.dll_CreateThread]
test eax, eax
je 0x10014ee6
mov ecx, eax
call fcn.10016400
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4