Function at 0x10035b70
Capabilities:
Create process on windows

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x90
mov esi, ecx
mov eax, dword [0x10066040]
xor eax, esp
mov dword [esp + 0x8c], eax
cmp dword [ecx + 0x10], 0
sete byte [esp + 0x2f]
mov ecx, 0xd17b28b3
mov eax, 0x429e4698
lea ebx, [esp + 0x48]
lea ebp, [esp + 0x38]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x10035bc0
mov eax, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
mov ecx, 0xb43d0ea3
mov eax, 0x65cde787
nop
cmp ecx, 0xfb6e2680
jg 0x10035c20
cmp ecx, 0xbabaa452
jle 0x10035c70
cmp ecx, 0xcfe9a623
jle 0x10035d03
cmp ecx, 0xcfe9a624
je 0x10035dd3
cmp ecx, 0xd17b28b3
je 0x10035e62
cmp ecx, 0xdef1ccd2
jne 0x10035bc0
mov ecx, dword [esp + 0x28]
cmp ecx, 0x7ae51f5d
mov ecx, 0x4548a2b4
mov edx, 0xb5af2229
cmovl ecx, edx
jmp 0x10035bc0
cmp ecx, 0x2d2e90a3
jle 0x10035ca0
cmp ecx, 0x4548a2b3
jg 0x10035d37
cmp ecx, 0x2d2e90a4
je 0x10035bad
cmp ecx, 0x45284f21
jne 0x10035ef4
mov ecx, dword [esp + 0x28]
cmp ecx, 0xd6195480
mov ecx, 0x18f3b55a
mov edx, 0xcfe9a624
cmove ecx, edx
jmp 0x10035bc0
cmp ecx, 0xb5af2228
jg 0x10035d6b
cmp ecx, 0x962569d9
je 0x10035e70
cmp ecx, 0xb43d0ea3
jne 0x10035bc0
mov ecx, 0xd17b28b3
jmp 0x10035bc0
cmp ecx, 0x18f3b559
jg 0x10035d9f
cmp ecx, 0xfb6e2681
je 0x10035e8c
cmp ecx, 0x16d06dbe
jne 0x10035bc0
mov eax, dword [esp + 0x38]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call edi
sub esp, 4
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call edi
sub esp, 4
mov ecx, 0xb43d0ea3
mov eax, 0xc79ab86a
jmp 0x10035bc0
cmp ecx, 0xbabaa453
je 0x10035ea8
cmp ecx, 0xbe9f9169
jne 0x10035bc0
mov ecx, dword [esp + 0x28]
cmp ecx, 0x65cde787
mov ecx, 0xdef1ccd2
mov edx, 0x1c0e0158
cmovl ecx, edx
jmp 0x10035bc0
cmp ecx, 0x4548a2b4
je 0x10035eb2
cmp ecx, 0x4b279d19
jne 0x10035bc0
mov ecx, dword [esp + 0x28]
cmp ecx, 0xd6195480
mov ecx, 0x45284f21
mov edx, 0x962569d9
cmovl ecx, edx
jmp 0x10035bc0
cmp ecx, 0xb5af2229
je 0x10035ece
cmp ecx, 0xb6cabdfe
jne 0x10035bc0
cmp byte [esp + 0x2f], 0
mov eax, 0xd6195480
mov ecx, 0x65cde787
cmovne eax, ecx
mov ecx, 0xb43d0ea3
jmp 0x10035bc0
cmp ecx, 0x18f3b55a
je 0x10035eea
cmp ecx, 0x1c0e0158
jne 0x10035bc0
mov ecx, dword [esp + 0x28]
cmp ecx, 0x429e4698
mov ecx, 0x18f3b55a
mov edx, 0xb6cabdfe
cmove ecx, edx
jmp 0x10035bc0
mov dword [esp + 0x30], ebx
mov eax, dword [esp + 0x30]
mov eax, dword [esp + 0x30]
xorps xmm0, xmm0
movups xmmword [eax + 0x30], xmm0
movups xmmword [eax + 0x20], xmm0
movups xmmword [eax + 0x10], xmm0
movups xmmword [eax], xmm0
mov dword [eax + 0x40], 0
mov dword [esp + 0x34], ebp
mov eax, dword [esp + 0x34]
mov eax, dword [esp + 0x34]
movups xmmword [eax], xmm0
cmp dword [esi + 0x14], 0x10
mov eax, esi
jb 0x10035e11
mov eax, dword [esi]
mov dword [esp + 0x24], ebp
mov dword [esp + 0x20], ebx
movaps xmm0, xmmword [0x10062970]
movups xmmword [esp + 8], xmm0
mov dword [esp + 4], eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
sub esp, 0x28
test eax, eax
mov eax, 0x7ae51f5d
mov ecx, 0xc79ab86a
cmove eax, ecx
mov ecx, 0xb43d0ea3
jmp 0x10035bc0
mov dword [esp + 0x28], eax
mov ecx, 0xfb6e2681
jmp 0x10035bc0
mov ecx, dword [esp + 0x28]
cmp ecx, 0xc79ab86a
mov ecx, 0x18f3b55a
mov edx, 0x2d2e90a4
cmove ecx, edx
jmp 0x10035bc0
mov ecx, dword [esp + 0x28]
cmp ecx, 0x429e4698
mov ecx, 0xbe9f9169
mov edx, 0x4b279d19
cmovl ecx, edx
jmp 0x10035bc0
mov ecx, 0xb43d0ea3
jmp 0x10035bc0
mov ecx, dword [esp + 0x28]
cmp ecx, 0x7ae51f5d
mov ecx, 0x18f3b55a
mov edx, 0x16d06dbe
cmove ecx, edx
jmp 0x10035bc0
mov ecx, dword [esp + 0x28]
cmp ecx, 0x65cde787
mov ecx, 0x18f3b55a
mov edx, 0x2e4ab61a
cmove ecx, edx
jmp 0x10035bc0
mov ecx, 0xbabaa453
jmp 0x10035bc0
cmp ecx, 0x2e4ab61a
jne 0x10035bc0
mov ecx, dword [esp + 0x8c]
xor ecx, esp
call fcn.1005440a
add esp, 0x90
pop esi
pop edi
pop ebx
pop ebp
ret