Function at 0x10035d80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x101e6231
mov eax, dword fs:[0]
push eax
sub esp, 0x1c8
mov eax, dword [0x102683e0]
xor eax, esp
mov dword [esp + 0x1c0], eax
push ebx
push esi
push edi
mov eax, dword [0x102683e0]
xor eax, esp
push eax
lea eax, [esp + 0x1d8]
mov dword fs:[0], eax
mov ebx, ecx
mov esi, dword [ebp + 0xc]
lea eax, [esp + 0x58]
mov edi, dword [ebp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 0x3f
lea eax, [esp + 0x89]
mov byte [esp + 0x88], 0
push 0
push eax
call fcn.101a01b0
push 0x5c
push esi
call fcn.101ac100
add esp, 0x14
push 0xffffffffffffffff
test eax, eax
je 0x10035e29
inc eax
push eax
lea eax, [esp + 0x8c]
push 0x40
push eax
call fcn.101ac342
lea eax, [esp + 0x94]
push 0x2e
push eax
call fcn.101ab540
add esp, 0x18
test eax, eax
je 0x10035e69
mov byte [eax], 0
jmp 0x10035e69
cmp byte [esi], 0
lea eax, [esp + 0x88]
je 0x10035e59
push esi
push 0x40
push eax
call fcn.101ac342
lea eax, [esp + 0x94]
push 0x2e
push eax
call fcn.101ab540
add esp, 0x18
test eax, eax
je 0x10035e69
mov byte [eax], 0
jmp 0x10035e69
push str.unknown
push 0x40
push eax
call fcn.101ac342
add esp, 0x10
push 0x103
lea eax, [esp + 0xc9]
mov byte [esp + 0xc8], 0
push 0
push eax
call fcn.101a01b0
mov eax, dword [0x1027b324]
add esp, 0xc
test al, 1
jne 0x10035eb6
or eax, 1
mov dword [0x1027b324], eax
lea eax, [esp + 0x68]
push 0x1c
push eax
push 0x10035cc0
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
mov eax, dword [esp + 0x6c]
mov dword [0x1027aad8], eax
jmp 0x10035ebb
mov eax, dword [0x1027aad8]
push 0x104
lea ecx, [esp + 0xc8]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
cmp byte [esp + 0xc4], 0
mov dword [esp + 0x24], 0xf
mov dword [esp + 0x20], 0
mov byte [esp + 0x10], 0
jne 0x10035ef2
xor ecx, ecx
jmp 0x10035f09
lea ecx, [esp + 0xc4]
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035f00
sub ecx, edx
push ecx
lea eax, [esp + 0xc8]
push eax
lea ecx, [esp + 0x18]
call fcn.100037c0
lea edx, [esp + 0x10]
mov dword [esp + 0x1e0], 0
lea ecx, [esp + 0x40]
call fcn.10035d00
push 1
push 0xffffffffffffffff
push 0x1022b0b8
lea ecx, [esp + 0x4c]
mov byte [esp + 0x1ec], 1
call fcn.1001d090
cmp eax, 0xffffffff
je 0x10035fb2
push eax
push 0
lea eax, [esp + 0x70]
push eax
lea ecx, [esp + 0x4c]
call fcn.10010c70
mov esi, eax
lea eax, [esp + 0x10]
cmp eax, esi
je 0x10035f9f
cmp dword [esp + 0x24], 0x10
jb 0x10035f80
push dword [esp + 0x10]
call fcn.101a02f0
add esp, 4
push esi
lea ecx, [esp + 0x14]
mov dword [esp + 0x28], 0xf
mov dword [esp + 0x24], 0
mov byte [esp + 0x14], 0
call fcn.1000f160
cmp dword [esp + 0x7c], 0x10
jb 0x10035fb2
push dword [esp + 0x68]
call fcn.101a02f0
add esp, 4
cmp dword [esp + 0x20], 0
jne 0x10035fc9
push 7
push str.unknown
lea ecx, [esp + 0x18]
call fcn.100037c0
cmp byte [edi], 0
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], 0
mov byte [esp + 0x28], 0
jne 0x10035fe7
xor ecx, ecx
jmp 0x10035ff9
mov ecx, edi
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10035ff0
sub ecx, edx
push ecx
push edi
lea ecx, [esp + 0x30]
call fcn.100037c0
mov byte [esp + 0x1e0], 2
mov esi, dword [esp + 0x38]
add esi, 0x100
lea eax, [esi + 1]
push eax
call fcn.101875f8
mov edi, eax
lea edx, [esp + 0x2c]
add esp, 4
lea eax, [esp + 0x84]
lea ecx, [esp + 0x10]
mov byte [edi], 0
cmp dword [esp + 0x3c], 0x10
cmovae edx, dword [esp + 0x28]
cmp dword [esp + 0x24], 0x10
push edx
cmovae ecx, dword [esp + 0x14]
push eax
movzx eax, word [esp + 0x6e]
push ecx
push eax
movzx eax, word [esp + 0x74]
push eax
movzx eax, word [esp + 0x76]
push eax
movzx eax, word [esp + 0x78]
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push str.__d___02d:_02d:_02d._03d__s__s:__s
push 0xffffffffffffffff
push esi
push edi
call fcn.101a87ab
mov edx, dword [ebx]
add esp, 0x30
mov ecx, ebx
push eax
push edi
call dword [edx + 4]
push edi
call fcn.101a1ad1
add esp, 4
cmp dword [esp + 0x3c], 0x10
jb 0x100360a2
push dword [esp + 0x28]
call fcn.101a02f0
add esp, 4
cmp dword [esp + 0x54], 0x10
mov dword [esp + 0x3c], 0xf
mov dword [esp + 0x38], 0
mov byte [esp + 0x28], 0
jb 0x100360ca
push dword [esp + 0x40]
call fcn.101a02f0
add esp, 4
cmp dword [esp + 0x24], 0x10
mov dword [esp + 0x54], 0xf
mov dword [esp + 0x50], 0
mov byte [esp + 0x40], 0
jb 0x100360f2
push dword [esp + 0x10]
call fcn.101a02f0
add esp, 4
mov ecx, dword [esp + 0x1d8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1c0]
xor ecx, esp
call fcn.101a0193
mov esp, ebp
pop ebp
ret 0xc