Function at 0x10035e20
Capabilities:
Create process on windows

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x90
mov esi, ecx
mov eax, dword [0x10067040]
xor eax, esp
mov dword [esp + 0x8c], eax
cmp dword [ecx + 0x10], 0
sete byte [esp + 0x2f]
mov ecx, 0xc6d4e99b
mov eax, 0x319a17b8
lea ebx, [esp + 0x48]
lea ebp, [esp + 0x38]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x10035e70
mov ecx, 0xc6d4e99b
nop word cs:[eax + eax]
nop dword [eax]
cmp ecx, 0x354e13d
jle 0x10035ef0
cmp ecx, 0x249bcc8d
jle 0x10035f40
cmp ecx, 0x3476fe6f
jle 0x10035fc0
cmp ecx, 0x3476fe70
je 0x1003607e
cmp ecx, 0x54b899e6
je 0x10036088
cmp ecx, 0x72a0dc5a
jne 0x10035e70
mov eax, dword [esp + 0x38]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call edi
sub esp, 4
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call edi
sub esp, 4
mov ecx, 0x249bcc8e
mov eax, 0x908b3b45
jmp 0x10035e70
cmp ecx, 0xe651c734
jg 0x10035f80
cmp ecx, 0xdd2e6ec4
jg 0x10035ff4
cmp ecx, 0xc6d4e99b
je 0x10036117
cmp ecx, 0xd3fea370
jne 0x100361ac
mov ecx, dword [esp + 0x28]
cmp ecx, 0x3f7718c2
mov ecx, 0x3476fe70
mov edx, 0x54b899e6
cmove ecx, edx
jmp 0x10035e70
cmp ecx, 0x17a15592
jg 0x10036016
cmp ecx, 0x354e13e
je 0x10036125
cmp ecx, 0xda10db2
jne 0x10035e70
mov ecx, dword [esp + 0x28]
cmp ecx, 0xde48d7d3
mov ecx, 0x354e13e
mov edx, 0xe651c735
cmovl ecx, edx
jmp 0x10035e70
cmp ecx, 0xf2bd68c2
jg 0x1003604a
cmp ecx, 0xe651c735
je 0x10036141
cmp ecx, 0xed5aaf74
jne 0x10035e70
mov ecx, dword [esp + 0x28]
cmp ecx, 0x581a0f94
mov ecx, 0x199c3698
mov edx, 0xd3fea370
cmovl ecx, edx
jmp 0x10035e70
cmp ecx, 0x249bcc8e
je 0x10035e5d
cmp ecx, 0x2855effe
jne 0x10035e70
cmp byte [esp + 0x2f], 0
mov eax, 0x3f7718c2
mov ecx, 0x581a0f94
cmovne eax, ecx
mov ecx, 0x249bcc8e
jmp 0x10035e70
cmp ecx, 0xdd2e6ec5
je 0x1003615d
cmp ecx, 0xe5657757
jne 0x10035e70
mov ecx, 0x249bcc8e
jmp 0x10035e70
cmp ecx, 0x17a15593
je 0x10036179
cmp ecx, 0x199c3698
jne 0x10035e70
mov ecx, dword [esp + 0x28]
cmp ecx, 0x581a0f94
mov ecx, 0x3476fe70
mov edx, 0xa2aef6c9
cmove ecx, edx
jmp 0x10035e70
cmp ecx, 0xf2bd68c3
je 0x10036190
cmp ecx, 0xfe5ae8a2
jne 0x10035e70
mov ecx, dword [esp + 0x28]
cmp ecx, 0x319a17b8
mov ecx, 0xdd2e6ec5
mov edx, 0xda10db2
cmovl ecx, edx
jmp 0x10035e70
mov ecx, 0xe5657757
jmp 0x10035e70
mov dword [esp + 0x30], ebx
mov eax, dword [esp + 0x30]
mov eax, dword [esp + 0x30]
xorps xmm0, xmm0
movups xmmword [eax + 0x30], xmm0
movups xmmword [eax + 0x20], xmm0
movups xmmword [eax + 0x10], xmm0
movups xmmword [eax], xmm0
mov dword [eax + 0x40], 0
mov dword [esp + 0x34], ebp
mov eax, dword [esp + 0x34]
mov eax, dword [esp + 0x34]
movups xmmword [eax], xmm0
cmp dword [esi + 0x14], 0x10
mov eax, esi
jb 0x100360c6
mov eax, dword [esi]
mov dword [esp + 0x24], ebp
mov dword [esp + 0x20], ebx
movaps xmm0, xmmword [0x10063970]
movups xmmword [esp + 8], xmm0
mov dword [esp + 4], eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
sub esp, 0x28
test eax, eax
mov eax, 0xde48d7d3
mov ecx, 0x908b3b45
cmove eax, ecx
mov ecx, 0x249bcc8e
jmp 0x10035e70
mov dword [esp + 0x28], eax
mov ecx, 0xfe5ae8a2
jmp 0x10035e70
mov ecx, dword [esp + 0x28]
cmp ecx, 0xde48d7d3
mov ecx, 0x3476fe70
mov edx, 0x72a0dc5a
cmove ecx, edx
jmp 0x10035e70
mov ecx, dword [esp + 0x28]
cmp ecx, 0x908b3b45
mov ecx, 0x3476fe70
mov edx, 0x17a15593
cmove ecx, edx
jmp 0x10035e70
mov ecx, dword [esp + 0x28]
cmp ecx, 0x3f7718c2
mov ecx, 0xed5aaf74
mov edx, 0xf2bd68c3
cmovl ecx, edx
jmp 0x10035e70
mov eax, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
mov ecx, 0x249bcc8e
mov eax, 0x581a0f94
jmp 0x10035e70
mov ecx, dword [esp + 0x28]
cmp ecx, 0x319a17b8
mov ecx, 0x3476fe70
mov edx, 0x2855effe
cmove ecx, edx
jmp 0x10035e70
cmp ecx, 0xa2aef6c9
jne 0x10035e70
mov ecx, dword [esp + 0x8c]
xor ecx, esp
call fcn.1005560a
add esp, 0x90
pop esi
pop edi
pop ebx
pop ebp
ret