Function at 0x435b10
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4766b5
mov eax, dword fs:[0]
push eax
sub esp, 0x78
mov eax, dword [0x490040]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
cmp dword [esi + 0xc], 0
jne 0x435e38
mov eax, dword [ebp + 8]
mov dword [esi + 0x18], eax
mov al, byte [ebp + 0xc]
mov byte [esi + 0x20], al
mov eax, dword [ebp + 0x14]
mov dword [esi + 0x1c], eax
mov eax, dword [esi + 0x2c]
mov dword [esi + 0x30], 0
mov byte [esi + 0x21], 0
test eax, eax
je 0x435b85
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
test eax, eax
jne 0x435b85
push dword [esi + 0x2c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 0x2c], 0
cmp dword [esi + 0x2c], 0
mov edi, dword [sym.imp.KERNEL32.dll_CreateEventA]
jne 0x435cdb
push 0
push 0
push 1
push 0
call edi
mov dword [esi + 0x2c], eax
test eax, eax
jne 0x435cdb
push ecx
or edx, 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.0041a470
add esp, 4
mov edi, eax
mov dword [ebp - 4], 0
cmp dword [edi + 0x14], 7
jbe 0x435bca
mov edi, dword [edi]
cmp dword [esi + 0xc], 0
jne 0x435bd4
xor esi, esi
jmp 0x435bd7
mov esi, dword [esi + 0x10]
mov eax, dword fs:[0x2c]
movaps xmm0, xmmword [0x487e80]
movups xmmword [ebp - 0x70], xmm0
mov dword [ebp - 0x50], 0x6f14cf63
mov ecx, dword [eax]
movaps xmm0, xmmword [0x487830]
mov eax, dword [0x499d38]
movups xmmword [ebp - 0x60], xmm0
mov dword [ebp - 0x4c], 0x70dfd7f9
mov dword [ebp - 0x48], 0x7919cf21
mov word [ebp - 0x44], 0xa5a2
cmp eax, dword [ecx + 4]
jle 0x435c83
push 0x499d38
call fcn.00452992
add esp, 4
cmp dword [0x499d38], 0xffffffff
jne 0x435c83
xorps xmm0, xmm0
mov byte [0x499cfe], 1
movlpd qword [ebp - 0x80], xmm0
mov edx, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x80]
nop dword [eax + eax]
mov al, byte [ebp + ecx - 0x70]
mov byte [ecx + 0x499cd0], al
add ecx, 1
adc edx, 0
test edx, edx
jne 0x435c69
cmp ecx, 0x2e
jb 0x435c50
push 0x47c370
call fcn.00452c62
add esp, 4
push 0x499d38
call fcn.00452941
add esp, 4
mov ecx, 0x499cd0
call fcn.0041efd0
push edi
push esi
push 0x499cd0
push 1
call fcn.00401610
mov ecx, dword [ebp - 0x18]
add esp, 0x10
cmp ecx, 7
jbe 0x435e38
mov edx, dword [ebp - 0x2c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x435e2e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x435eba
jmp 0x435e2e
mov eax, dword [esi + 0x14]
test eax, eax
je 0x435cfd
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
test eax, eax
jne 0x435cfd
push dword [esi + 0x14]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi + 0x14], 0
cmp dword [esi + 0x14], 0
jne 0x435e57
push 0
push 0
push 1
push 0
call edi
mov dword [esi + 0x14], eax
test eax, eax
jne 0x435e57
push ecx
or edx, 0xffffffff
lea ecx, [ebp - 0x5c]
call fcn.0041a470
add esp, 4
mov esi, eax
mov dword [ebp - 4], 1
cmp dword [esi + 0x14], 7
jbe 0x435d3c
mov esi, dword [esi]
mov eax, dword fs:[0x2c]
movaps xmm0, xmmword [0x487e80]
movups xmmword [ebp - 0x40], xmm0
mov dword [ebp - 0x20], 0x21c973e
mov ecx, dword [eax]
movaps xmm0, xmmword [0x488be0]
mov eax, dword [0x499cc0]
movups xmmword [ebp - 0x30], xmm0
mov dword [ebp - 0x1c], 0x6dc2d7ce
mov dword [ebp - 0x18], 0xf1cd569
mov word [ebp - 0x14], 0x8cd8
mov byte [ebp - 0x12], 0xb0
cmp eax, dword [ecx + 4]
jle 0x435de4
push 0x499cc0
call fcn.00452992
add esp, 4
cmp dword [0x499cc0], 0xffffffff
jne 0x435de4
xorps xmm0, xmm0
mov byte [0x499b17], 1
movlpd qword [ebp - 0x80], xmm0
mov edx, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x80]
mov al, byte [ebp + ecx - 0x40]
mov byte [ecx + 0x499ae8], al
add ecx, 1
adc edx, 0
test edx, edx
jne 0x435dca
cmp ecx, 0x2f
jb 0x435db1
push 0x47c340
call fcn.00452c62
add esp, 4
push 0x499cc0
call fcn.00452941
add esp, 4
mov ecx, 0x499ae8
call fcn.0041e850
push esi
push 0x499ae8
push 1
call fcn.00401610
mov ecx, dword [ebp - 0x48]
add esp, 0xc
cmp ecx, 7
jbe 0x435e38
mov edx, dword [ebp - 0x5c]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x435e2e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x435ebf
push ecx
push edx
call fcn.00452c7c
add esp, 8
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00452933
mov esp, ebp
pop ebp
ret 0x10
mov eax, dword [ebp + 0x14]
mov dword [esi + 0x28], eax
lea eax, [ebp - 0x74]
push eax
push 0
push esi
push 0x435900
push 0
push 0
mov byte [esi + 8], 0
mov byte [esi + 0x23], 0
mov dword [ebp - 0x74], 0
call fcn.0045cfc9
add esp, 0x18
mov dword [esi + 0xc], eax
test eax, eax
je 0x435e38
mov ecx, eax
call fcn.0040e500
push dword [ebp + 8]
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
movzx eax, byte [ebp + 0xc]
push eax
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.dll_SetThreadPriorityBoost]
mov eax, dword [ebp - 0x74]
mov dword [esi + 0x10], eax
mov al, 1
mov byte [esi + 0x22], 1
jmp 0x435e3a
call fcn.004579bf
call fcn.004579bf
int3