Function at 0x10035b43
Capabilities:
Access peb ldr_data
Check for peb beingdebugged flag
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xc8
mov esi, esp
mov dword [esi + 0xb0], ebp
lea ebx, [esi + 0xb8]
lea edi, [esi + 0xa0]
mov dword [ebx - 4], esp
or dword [ebx + 8], 0xffffffff
mov dword [ebx + 4], 0x10037bb0
mov ecx, edi
mov eax, dword fs:[0]
mov dword [ebx], eax
mov dword fs:[0], ebx
call fcn.10011323
mov eax, dword [edi + 8]
mov ecx, dword [edi + 0xc]
mov edx, dword [edi]
mov edi, dword [edi + 4]
and dword [ebx + 8], 0
mov dword [esi + 0x68], edx
mov dword [esi + 0x6c], edi
mov dword [esi + 0x74], ecx
mov dword [esi + 0x70], eax
and dword [esi + 0x78], 0
and dword [esi + 0x7c], 0
and dword [esi + 0x80], 0
mov dword [esi + 0x84], 0x1010e400
lea ecx, [esi + 0xc]
mov edx, str.ImageTargetObjectDetailsPreviousDataValueNameSignerSignerStatusImageLoadedDestinationTypeOperationCommandLineOriginalFileHashesParentImageParentCommandLineCurrentDirectoryCompanyTargetFilenameQueryNameProcessCreate
push 5
call fcn.1000921d
pop eax
mov ecx, dword [ebp + 0x10]
lea edx, [esi + 0x18]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [esi + 0xc0], 0x1a
push ecx
push eax
push edx
call fcn.100eca50
add esp, 0xc
lea ecx, [esi + 0x28]
lea edx, [esi + 0x18]
mov byte [esi + 3], 1
mov dword [esi + 0xc0], 0x19
call fcn.100105da
lea ecx, [esi + 0x28]
mov byte [esi + 3], 1
lea eax, [esi + 0x48]
push ecx
push eax
call fcn.100d1853
pop eax
pop ecx
lea eax, [esi + 0x48]
mov byte [esi + 3], 0
lea ecx, [esi + 0x28]
lea edx, [esi + 0x68]
push eax
lea eax, [esi + 0xc]
push eax
call fcn.1000860f
pop eax
pop ecx
lea ecx, [esi + 0x28]
mov dword [esi + 0xc0], 0x18
call fcn.1000b7b8
and dword [esi + 0xc0], 0
lea ecx, [esi + 0x18]
call fcn.1000a0b5
lea ecx, [esi + 0xc]
mov edx, 0x1010e86a
push 0xb
call fcn.1000921d
pop eax
mov ecx, dword [ebp + 0x10]
mov eax, dword [ecx + 8]
mov ecx, dword [ecx + 0xc]
mov dword [esi + 0xc0], 0x17
push ecx
push eax
lea eax, [esi + 0x18]
push eax
call fcn.100eca50
add esp, 0xc
lea ecx, [esi + 0x28]
lea edx, [esi + 0x18]
mov byte [esi + 4], 1
mov dword [esi + 0xc0], 0x16
call fcn.100105da
lea eax, [esi + 0x28]
mov byte [esi + 4], 1
push eax
lea eax, [esi + 0x48]
push eax
call fcn.100d1853
pop eax
pop ecx
lea eax, [esi + 0x48]
mov byte [esi + 4], 0
lea ecx, [esi + 0x28]
lea edx, [esi + 0x68]
push eax
lea eax, [esi + 0xc]
push eax
call fcn.1000860f
pop eax
pop ecx
lea ecx, [esi + 0x28]
mov dword [esi + 0xc0], 0x15
call fcn.1000b7b8
and dword [esi + 0xc0], 0
lea ecx, [esi + 0x18]
call fcn.1000a0b5
lea ecx, [esi + 0xc]
mov edx, 0x1010e875
push 0xc
call fcn.1000921d
pop eax
mov ecx, dword [ebp + 0x10]
mov eax, dword [ecx + 0x10]
mov ecx, dword [ecx + 0x14]
mov dword [esi + 0xc0], 0x14
push ecx
push eax
lea eax, [esi + 0x18]
push eax
call fcn.100eca50
add esp, 0xc
lea ecx, [esi + 0x28]
lea edx, [esi + 0x18]
mov byte [esi + 5], 1
mov dword [esi + 0xc0], 0x13
call fcn.100105da
lea eax, [esi + 0x28]
mov byte [esi + 5], 1
push eax
lea eax, [esi + 0x48]
push eax
call fcn.100d1853
pop eax
pop ecx
lea eax, [esi + 0x48]
mov byte [esi + 5], 0
lea ecx, [esi + 0x28]
lea edx, [esi + 0x68]
push eax
lea eax, [esi + 0xc]
push eax
call fcn.1000860f
pop eax
pop ecx
lea ecx, [esi + 0x28]
mov dword [esi + 0xc0], 0x12
call fcn.1000b7b8
and dword [esi + 0xc0], 0
lea ecx, [esi + 0x18]
call fcn.1000a0b5
lea ecx, [esi + 0xc]
mov edx, 0x1010e892
push 0x11
call fcn.1000921d
pop eax
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx + 8]
mov ecx, dword [ecx + 0xc]
mov dword [esi + 0xc0], 0x11
push ecx
push eax
lea eax, [esi + 0x18]
push eax
call fcn.100eca50
add esp, 0xc
lea ecx, [esi + 0x28]
lea edx, [esi + 0x18]
mov byte [esi + 6], 1
mov dword [esi + 0xc0], 0x10
call fcn.100105da
lea eax, [esi + 0x28]
mov byte [esi + 6], 1
push eax
lea eax, [esi + 0x48]
push eax
call fcn.100d1853
pop eax
pop ecx
lea eax, [esi + 0x48]
mov byte [esi + 6], 0
lea ecx, [esi + 0x28]
lea edx, [esi + 0x68]
push eax
lea eax, [esi + 0xc]
push eax
call fcn.1000860f
pop eax
pop ecx
lea ecx, [esi + 0x28]
mov dword [esi + 0xc0], 0xf
call fcn.1000b7b8
and dword [esi + 0xc0], 0
lea ecx, [esi + 0x18]
call fcn.1000a0b5
lea ecx, [esi + 0xc]
mov edx, 0x1010e887
push 0xb
call fcn.1000921d
pop eax
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [esi + 0xc0], 0xe
push ecx
push eax
lea eax, [esi + 0x18]
push eax
call fcn.100eca50
add esp, 0xc
lea ecx, [esi + 0x28]
lea edx, [esi + 0x18]
mov byte [esi + 7], 1
mov dword [esi + 0xc0], 0xd
call fcn.100105da
lea eax, [esi + 0x28]
mov byte [esi + 7], 1
push eax
lea eax, [esi + 0x48]
push eax
call fcn.100d1853
pop eax
pop ecx
lea eax, [esi + 0x48]
mov byte [esi + 7], 0
lea ecx, [esi + 0x28]
lea edx, [esi + 0x68]
push eax
lea eax, [esi + 0xc]
push eax
call fcn.1000860f
pop eax
pop ecx
lea ecx, [esi + 0x28]
mov dword [esi + 0xc0], 0xc
call fcn.1000b7b8
and dword [esi + 0xc0], 0
lea ecx, [esi + 0x18]
call fcn.1000a0b5
lea ecx, [esi + 0xc]
mov edx, 0x1010e835
push 6
call fcn.1000921d
pop eax
mov ecx, dword [ebp + 0x10]
mov eax, dword [ecx + 0x28]
mov ecx, dword [ecx + 0x2c]
mov dword [esi + 0xc0], 0xb
push ecx
push eax
lea eax, [esi + 0x18]
push eax
call fcn.100eca50
add esp, 0xc
lea ecx, [esi + 0x28]
lea edx, [esi + 0x18]
mov byte [esi + 8], 1
mov dword [esi + 0xc0], 0xa
call fcn.100105da
lea eax, [esi + 0x28]
mov byte [esi + 8], 1
push eax
lea eax, [esi + 0x48]
push eax
call fcn.100d1853
pop eax
pop ecx
lea eax, [esi + 0x48]
mov byte [esi + 8], 0
lea ecx, [esi + 0x28]
lea edx, [esi + 0x68]
push eax
lea eax, [esi + 0xc]
push eax
call fcn.1000860f
pop eax
pop ecx
lea ecx, [esi + 0x28]
mov dword [esi + 0xc0], 9
call fcn.1000b7b8
and dword [esi + 0xc0], 0
lea ecx, [esi + 0x18]
call fcn.1000a0b5
mov eax, dword [ebp + 0x10]
push dword [eax + 0xc]
push dword [eax + 8]
lea eax, [esi + 0x48]
push eax
call fcn.100eca50
add esp, 0xc
lea ecx, [esi + 0x28]
lea edx, [esi + 0x48]
mov dword [esi + 0xc0], 6
call fcn.100105da
mov ecx, dword [esi + 0x30]
mov eax, dword [esi + 0x2c]
mov dword [esi + 0xc0], 7
push ecx
push eax
lea eax, [esi + 0x18]
push eax
call fcn.10038558
add esp, 0xc
mov eax, dword [esi + 0x1c]
mov ecx, dword [esi + 0x20]
mov dword [esi + 0xc0], 8
push 1
push str._n_not_signrule_engine_src_rulecommon.rs
push ecx
push eax
lea eax, [esi + 0xc]
push eax
call fcn.1009a5bb
add esp, 0x14
lea eax, [esi + 0x18]
mov dword [esi + 0xc0], 5
push eax
call fcn.1000b442
pop eax
lea ecx, [esi + 0x28]
mov dword [esi + 0xc0], 4
call fcn.10009d76
lea ecx, [esi + 0x48]
mov byte [esi + 2], 1
mov dword [esi + 0xc0], 1
call fcn.1000a0b5
mov byte [esi + 2], 1
lea ecx, [esi + 0x18]
mov edx, 0x1010f991
push 0x10
call fcn.1000921d
pop eax
mov eax, dword [esi + 0x14]
movsd xmm0, qword [esi + 0xc]
mov byte [esi + 0xb], 1
mov dword [esi + 0xc0], 3
mov dword [esi + 0x30], eax
lea eax, [esi + 0x28]
movsd qword [esi + 0x28], xmm0
push eax
lea eax, [esi + 0x48]
push eax
call fcn.100d1853
pop eax
pop ecx
lea eax, [esi + 0x48]
mov byte [esi + 0xb], 0
lea ecx, [esi + 0x28]
lea edx, [esi + 0x68]
push eax
lea eax, [esi + 0x18]
push eax
call fcn.1000860f
pop eax
pop ecx
lea ecx, [esi + 0x28]
mov byte [esi + 2], 0
mov dword [esi + 0xc0], 1
call fcn.1000b7b8
mov byte [esi + 2], 0
lea ecx, [esi + 0x18]
mov edx, str.log_typeServerScoreServerLevelServerSuggestionrender_template_error:
push 8
call fcn.1000921d
pop eax
mov byte [esi + 9], 1
mov dword [esi + 0xc0], 2
lea ecx, [esi + 0x28]
mov edx, 0x1010e8d1
push 0xd
call fcn.1000921d
pop eax
lea eax, [esi + 0x48]
lea ecx, [esi + 0x28]
mov byte [esi + 9], 1
push ecx
push eax
call fcn.100d1853
lea eax, [esi + 0x48]
add esp, 8
mov byte [esi + 9], 0
lea ecx, [esi + 0x28]
lea edx, [esi + 0x68]
push eax
lea eax, [esi + 0x18]
push eax
call fcn.1000860f
pop eax
pop ecx
lea ecx, [esi + 0x28]
mov byte [esi + 2], 0
mov dword [esi + 0xc0], 1
call fcn.1000b7b8
mov byte [esi + 2], 0
push 0x1019c138
call fcn.10014dce
pop ecx
mov eax, dword [eax]
lea ecx, [esi + 0x68]
mov byte [esi + 2], 0
add eax, 8
push ecx
push eax
lea eax, [esi + 0x28]
push eax
call fcn.1001c7d3
add esp, 0xc
mov eax, dword [esi + 0x44]
lea ecx, [esi + 0x78]
test eax, eax
mov dword [esi + 0x8c], eax
je 0x100361c9
movsd xmm1, qword [esi + 0x38]
lea ecx, [esi + 0x48]
movsd xmm0, qword [esi + 0x40]
movsd xmm2, qword [esi + 0x28]
mov dword [esi + 0xc0], 0x1d
mov edx, 0x1010f288
movsd qword [ecx + 0x10], xmm1
movsd xmm1, qword [esi + 0x30]
movsd qword [ecx + 0x18], xmm0
movsd qword [ecx], xmm2
movsd qword [ecx + 8], xmm1
push 7
call fcn.10008525
pop ecx
test eax, eax
je 0x100361ae
lea ecx, [esi + 0x90]
push eax
push ecx
call fcn.100d146b
pop eax
pop ecx
cmp dword [esi + 0x90], 1
jne 0x100361ae
mov eax, dword [esi + 0x98]
mov dword [esi + 0xc0], 0x1c
mov dword [esi + 0x88], eax
lea eax, [esi + 0x58]
push eax
call fcn.100108ee
pop eax
lea eax, [esi + 0x78]
mov byte [esi + 0xa], 0
mov dword [esi + 0xc0], 0x1b
push eax
call fcn.100108ee
pop eax
mov eax, dword [esi + 0x88]
jmp 0x100361e1
lea eax, [esi + 0x58]
mov dword [esi + 0xc0], 0x1c
push eax
call fcn.100108ee
pop eax
xor eax, eax
lea ecx, [esi + 0x78]
jmp 0x100361cb
mov al, 1
mov byte [esi + 0xa], al
mov dword [esi + 0xc0], 0x1b
push ecx
call fcn.100108ee
pop eax
xor eax, eax
mov ecx, dword [esi + 0xb8]
mov dword fs:[0], ecx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret