Function at 0x10001a80
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006b985
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push esi
push edi
mov eax, dword [0x100a9570]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
cmp byte [0x100aa5b8], 0
je 0x10001ae3
push 0x100aa5bc
push dword [0x100aacb0]
call fcn.10004610
add esp, 8
call fcn.1000a2e0
call fcn.1000b120
call fcn.1000b6c0
call fcn.1000bed0
call fcn.1000b0e0
mov byte [0x100aa5b8], 0
cmp byte [0x100aa5b9], 0
je 0x10001b75
push 0xc
call fcn.1004d15b
add esp, 4
test eax, eax
je 0x10001b16
mov dword [eax], 0x100a9028
mov ecx, dword [0x100ac47c]
mov dword [eax + 4], ecx
mov dword [eax + 8], 0x10004850
jmp 0x10001b18
xor eax, eax
mov dword [ebp - 0x10], eax
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], 0
push ecx
push 0
push eax
push 0x10001920
push 0
push 0
call fcn.10055d39
add esp, 0x18
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x10001d6d
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 4], 1
test ecx, ecx
je 0x10001d60
push ecx
push eax
call fcn.1004c623
add esp, 8
test eax, eax
jne 0x10001d67
mov dword [ebp - 4], 0xffffffff
mov byte [0x100aa5b9], al
mov esi, dword [0x100aacd0]
test esi, esi
je 0x10001c1f
cmp byte [0x100a9f8a], 0
je 0x10001c28
cmp byte [0x100a900b], 0
je 0x10001c1f
push 8
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x1c], esi
push eax
push dword [0x100ac078]
call sub.KERNEL32.dll_K32QueryWorkingSetEx
test eax, eax
je 0x10001c1f
test byte [ebp - 0x18], 1
je 0x10001c1f
mov ecx, dword [esi]
lea esi, [ecx + 0x80]
cmp esi, dword [0x100aa5dc]
je 0x10001c19
mov edi, dword [0x100a9334]
lea eax, [ebp - 0x14]
push 8
push eax
push dword [0x100ac078]
add edi, ecx
mov dword [ebp - 0x14], edi
call sub.KERNEL32.dll_K32QueryWorkingSetEx
test eax, eax
je 0x10001c19
test byte [ebp - 0x10], 1
je 0x10001c19
movss xmm1, dword [edi]
mulss xmm1, dword [0x1006d604]
movss xmm0, dword [0x1006d608]
subss xmm0, xmm1
subss xmm0, dword [0x1006d600]
movss dword [0x100a934c], xmm0
mov dword [0x100aa5dc], esi
cmp byte [0x100a9f8a], 0
jne 0x10001c3e
cmp byte [0x100a9f8b], 0
jne 0x10001c3e
cmp byte [0x100a9f88], 0
je 0x10001d4f
mov eax, dword [0x100aacc8]
test eax, eax
je 0x10001d4f
cmp dword [eax], 2
jne 0x10001d4f
mov eax, dword [0x100aacd8]
test eax, eax
je 0x10001d4f
mov al, byte [eax + 0x30]
test al, al
je 0x10001d4f
mov eax, dword [0x100aacb0]
test eax, eax
je 0x10001c89
mov eax, dword [eax]
test eax, eax
je 0x10001c89
mov al, byte [eax + 0x17b]
test al, al
jne 0x10001d4f
cmp byte [0x100a9f88], 0
je 0x10001ca0
cmp byte [0x100a9040], 0
je 0x10001ca0
call fcn.1000b6e0
cmp byte [0x100a9f8a], 0
jne 0x10001cb6
cmp byte [0x100a9f8b], 0
je 0x10001d4f
cmp byte [0x100aa5cc], 0
je 0x10001d4f
mov ecx, 0x100aa5bc
call fcn.10004600
mov ecx, dword [0x100aacd8]
mov edi, eax
mov esi, dword [ecx]
push esi
push edi
call fcn.1000a2f0
push esi
push edi
call fcn.1000b140
movd xmm0, dword [edi + 4]
add esp, 0x10
movd xmm1, esi
cvtdq2ps xmm1, xmm1
cvtdq2ps xmm0, xmm0
addss xmm1, dword [0x100ac444]
comiss xmm1, xmm0
jb 0x10001d4f
mov ecx, dword [0x100aa5c0]
mov eax, 0x2aaaaaab
sub ecx, dword [0x100aa5bc]
mov esi, dword [0x100aa5c8]
imul ecx
inc esi
sar edx, 2
mov eax, edx
mov dword [0x100aa5c8], esi
shr eax, 0x1f
add eax, edx
cmp esi, eax
jb 0x10001d4a
mov byte [0x100aa5cc], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
call fcn.1000a230
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret
push 1
call fcn.1004cbfb
push eax
call fcn.1004cbce
push 6
mov dword [ebp - 0x18], 0
call fcn.1004cbfb
int3