Function at 0x10035ba0
Capabilities:
Create process on windows

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x90
mov esi, ecx
mov eax, dword [0x10069040]
xor eax, esp
mov dword [esp + 0x8c], eax
cmp dword [ecx + 0x10], 0
sete byte [esp + 0x2f]
mov ecx, 0x6637cf87
mov eax, 0x90cd080c
mov ebp, dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ebx, [esp + 0x48]
lea edi, [esp + 0x38]
jmp 0x10035bf0
mov ecx, 0x6637cf87
nop word cs:[eax + eax]
nop dword [eax]
cmp ecx, 0x16237aa5
jle 0x10035c40
cmp ecx, 0x4a65873f
jle 0x10035c90
cmp ecx, 0x6637cf86
jle 0x10035d40
cmp ecx, 0x7ff24955
je 0x10035dfe
cmp ecx, 0x794ec260
je 0x10035e8d
cmp ecx, 0x6637cf87
jne 0x10035bf0
mov dword [esp + 0x28], eax
mov ecx, 0x16237aa6
jmp 0x10035bf0
cmp ecx, 0xcc2fc73c
jg 0x10035d00
cmp ecx, 0xc59da6e0
jg 0x10035d74
cmp ecx, 0x9f492fba
je 0x10035bdd
cmp ecx, 0xbb692ed9
jne 0x10035f3a
cmp byte [esp + 0x2f], 0
mov eax, 0x9601a9e1
mov ecx, 0xa23ae010
cmovne eax, ecx
mov ecx, 0x9f492fba
jmp 0x10035bf0
cmp ecx, 0x414e9e66
jg 0x10035da8
cmp ecx, 0x16237aa6
je 0x10035e97
cmp ecx, 0x2e2b218f
jne 0x10035bf0
mov eax, dword [esp + 0x38]
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
sub esp, 8
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call ebp
sub esp, 4
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call ebp
sub esp, 4
mov ecx, 0x9f492fba
mov eax, 0xf7d14c0d
jmp 0x10035bf0
cmp ecx, 0xf07e3318
jg 0x10035ddc
cmp ecx, 0xcc2fc73d
je 0x10035eb3
cmp ecx, 0xef65908f
jne 0x10035bf0
mov ecx, dword [esp + 0x28]
cmp ecx, 0x9601a9e1
mov ecx, 0x5777bf93
mov edx, 0xf07e3319
cmovl ecx, edx
jmp 0x10035bf0
cmp ecx, 0x4a658740
je 0x10035ecf
cmp ecx, 0x5777bf93
jne 0x10035bf0
mov ecx, dword [esp + 0x28]
cmp ecx, 0x9601a9e1
mov ecx, 0x794ec260
mov edx, 0x7ff24955
cmove ecx, edx
jmp 0x10035bf0
cmp ecx, 0xc59da6e1
je 0x10035eeb
cmp ecx, 0xc66ae1dc
jne 0x10035bf0
mov ecx, dword [esp + 0x28]
cmp ecx, 0xa23ae010
mov ecx, 0x794ec260
mov edx, 0xb5346b13
cmove ecx, edx
jmp 0x10035bf0
cmp ecx, 0x414e9e67
je 0x10035f07
cmp ecx, 0x4339a195
jne 0x10035bf0
mov ecx, dword [esp + 0x28]
cmp ecx, 0x75f459fa
mov ecx, 0x4a658740
mov edx, 0xcc2fc73d
cmovl ecx, edx
jmp 0x10035bf0
cmp ecx, 0xf07e3319
je 0x10035f1e
cmp ecx, 0xfd06bcd6
jne 0x10035bf0
mov ecx, 0x9f492fba
jmp 0x10035bf0
mov dword [esp + 0x30], ebx
mov eax, dword [esp + 0x30]
mov eax, dword [esp + 0x30]
xorps xmm0, xmm0
movups xmmword [eax + 0x30], xmm0
movups xmmword [eax + 0x20], xmm0
movups xmmword [eax + 0x10], xmm0
movups xmmword [eax], xmm0
mov dword [eax + 0x40], 0
mov dword [esp + 0x34], edi
mov eax, dword [esp + 0x34]
mov eax, dword [esp + 0x34]
movups xmmword [eax], xmm0
cmp dword [esi + 0x14], 0x10
mov eax, esi
jb 0x10035e3c
mov eax, dword [esi]
mov dword [esp + 0x24], edi
mov dword [esp + 0x20], ebx
movaps xmm0, xmmword [0x10065970]
movups xmmword [esp + 8], xmm0
mov dword [esp + 4], eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp], 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
sub esp, 0x28
test eax, eax
mov eax, 0x75f459fa
mov ecx, 0xf7d14c0d
cmove eax, ecx
mov ecx, 0x9f492fba
jmp 0x10035bf0
mov ecx, 0xfd06bcd6
jmp 0x10035bf0
mov ecx, dword [esp + 0x28]
cmp ecx, 0xa23ae010
mov ecx, 0xc59da6e1
mov edx, 0xef65908f
cmovl ecx, edx
jmp 0x10035bf0
mov ecx, dword [esp + 0x28]
cmp ecx, 0xf7d14c0d
mov ecx, 0x794ec260
mov edx, 0x414e9e67
cmove ecx, edx
jmp 0x10035bf0
mov ecx, dword [esp + 0x28]
cmp ecx, 0x75f459fa
mov ecx, 0x794ec260
mov edx, 0x2e2b218f
cmove ecx, edx
jmp 0x10035bf0
mov ecx, dword [esp + 0x28]
cmp ecx, 0xf7d14c0d
mov ecx, 0x4339a195
mov edx, 0xc66ae1dc
cmovl ecx, edx
jmp 0x10035bf0
mov eax, dword [esp + 0x34]
mov eax, dword [esp + 0x30]
mov ecx, 0x9f492fba
mov eax, 0xa23ae010
jmp 0x10035bf0
mov ecx, dword [esp + 0x28]
cmp ecx, 0x90cd080c
mov ecx, 0x794ec260
mov edx, 0xbb692ed9
cmove ecx, edx
jmp 0x10035bf0
cmp ecx, 0xb5346b13
jne 0x10035bf0
mov ecx, dword [esp + 0x8c]
xor ecx, esp
call fcn.100568da
add esp, 0x90
pop esi
pop edi
pop ebx
pop ebp
ret