Function at 0x10035394
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10073b08
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0xc3684
call fcn.1006e6a0
push ebx
push esi
push edi
mov edi, ecx
mov dword [esp + 0x60], edx
xor ebx, ebx
mov dword [esp + 0x5c], edi
cmp dword [edi + 0x10], ebx
jne 0x100353d5
xor al, al
jmp 0x100360df
push 2
lea ecx, [esp + 0x88]
call fcn.1002d70f
mov dword [esp + 0xc369c], ebx
lea ecx, [esp + 0xa4]
mov dword [esp + 0xa0], 0x4157736d
or esi, 0xffffffff
mov dword [esp + 0x108], 0x4faf
mov dword [esp + 0xf8], esi
push 3
call fcn.1002d70f
mov dword [esp + 0x2c], 0xfffffffe
mov dword [esp + 0x4c], 5
mov dword [esp + 0x40], ebx
jmp 0x10035444
mov ecx, dword [esp + 0x40]
mov eax, dword [esp + 0x84]
mov dword [eax + ecx*4], 0xda0e60f9
inc dword [esp + 0x40]
cmp dword [esp + 0x40], 2
jl 0x1003542e
lea edx, [esp + 0xa4]
lea ecx, [esp + 0x40]
call fcn.100350d9
lea eax, [esp + 0x2c]
push eax
lea eax, [esp + 0xa8]
push eax
lea eax, [esp + 0x110]
push eax
lea eax, [esp + 0xac]
push eax
lea eax, [esp + 0x94]
push eax
lea edx, [esp + 0x10c]
lea ecx, [esp + 0x60]
call fcn.100350f8
add esp, 0x14
mov dword [esp + 0x2c], ebx
jmp 0x100354d6
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x84]
mov dword [eax + ecx*4], 0xdcf4a941
mov dword [esp + 0x4c], 1
cmp dword [esp + 0x4c], ebx
jl 0x100354d2
lea edx, [esp + 0x84]
lea ecx, [esp + 0xa0]
call fcn.10035141
dec dword [esp + 0x4c]
jns 0x100354b9
inc dword [esp + 0x2c]
cmp dword [esp + 0x2c], 1
jle 0x10035499
cmp dword [esp + 0xa4], 0
je 0x10035509
push dword [esp + 0xa4]
call fcn.1005b5f7
pop ecx
mov dword [esp + 0xa4], ebx
mov dword [esp + 0xa8], ebx
mov dword [esp + 0xac], ebx
mov dword [esp + 0xc369c], esi
cmp dword [esp + 0x84], 0
je 0x1003553c
push dword [esp + 0x84]
call fcn.1005b5f7
pop ecx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x88], ebx
mov dword [esp + 0x8c], ebx
push 0x2f1f
lea eax, [esp + 0x64]
push ebx
push eax
call fcn.10036e9f
mov dword [esp + 0x34], esi
lea ecx, [esp + 0x78]
xor eax, eax
add esp, 0xc
inc eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x24], 0x86335c0d
mov dword [esp + 0x58], 0x355c
mov dword [esp + 0x18], eax
mov dword [esp + 0x20], 5
mov dword [esp + 0x18], 0xf8169c14
push eax
call fcn.1002d70f
xor esi, esi
lea edx, [esp + 0x6c]
inc esi
lea ecx, [esp + 0x160]
mov dword [esp + 0xc369c], esi
mov dword [esp + 0x38], 0xb704
mov dword [esp + 0x18], 9
call fcn.1003515f
mov eax, dword [esp + 0x28]
xor ecx, ecx
mov eax, dword [esp + 0x28]
cmp eax, esi
setge cl
xor edx, edx
mov dword [esp + 0x54], ecx
mov ecx, dword [esp + 0x54]
mov eax, dword [esp + 0x28]
cmp ecx, eax
setge dl
mov dword [esp + 0x24], edx
xor edx, edx
mov eax, dword [esp + 0x24]
cmp eax, 0xffffffff
mov eax, dword [esp + 0x28]
setl dl
xor ecx, ecx
cmp edx, eax
setg cl
cmp ecx, dword [esp + 0x28]
jg 0x100355fd
mov edx, esi
cmp dword [esp + 0x58], ebx
jne 0x100355ff
mov edx, ebx
mov eax, dword [esp + 0x28]
xor ecx, ecx
cmp eax, edx
setl cl
mov dword [esp + 0x18], ecx
cmp dword [esp + 0x18], 1
sbb ecx, ecx
sub ecx, dword [esp + 0x58]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, 0xfffffffb
setge al
mov dword [esp + 0x20], eax
cmp dword [esp + 0x20], ebx
je 0x1003563b
cmp dword [esp + 0x28], ebx
je 0x1003563b
xor eax, eax
inc eax
jmp 0x1003563d
mov eax, ebx
add eax, 0xa4c63829
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x28]
push 6
pop ecx
sub ecx, eax
cmp ecx, 1
jg 0x10035796
push 4
lea ecx, [esp + 0xb4]
call fcn.1002d70f
mov dword [esp + 0x10c], 0x77e2192f
lea edx, [esp + 0xb0]
lea ecx, [esp + 0x114]
call fcn.1003517e
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x10035698
call fcn.1003519a
mov dword [esp + 0x20], ebx
cmp dword [esp + 0x20], ebx
jl 0x10035761
lea eax, [esp + 0x58]
mov dword [esp + 0x110], 0xffffffff
push eax
lea eax, [esp + 0x114]
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x60]
push eax
lea eax, [esp + 0xc0]
push eax
lea eax, [esp + 0x120]
push eax
lea edx, [esp + 0x38]
lea ecx, [esp + 0x84]
call fcn.100351b4
mov byte [esp + 0x4b], bl
add esp, 0x18
mov dword [esp + 0x18], 0x1c9a
cmp dword [esp + 0x18], 0x745
jge 0x1003574e
lea eax, [esp + 0x9c]
push eax
lea eax, [esp + 0x108]
push eax
push 0x10008184
call fcn.1005b040
mov eax, dword [esp + 0x110]
add esp, 0xc
cmp dword [esp + 0x9c], eax
jg 0x10035743
sub eax, dword [esp + 0x9c]
push eax
push 0x10008114
call fcn.1005b488
pop ecx
jmp 0x1003574d
push 0x10008444
call fcn.1005b826
pop ecx
lea ecx, [esp + 0x33]
call fcn.10035224
dec dword [esp + 0x20]
jns 0x100356a6
cmp dword [esp + 0xb0], 0
je 0x10035970
push dword [esp + 0xb0]
call fcn.1005b5f7
pop ecx
mov dword [esp + 0xb0], ebx
mov dword [esp + 0xb4], ebx
mov dword [esp + 0xb8], ebx
jmp 0x10035970
mov dword [esp + 0x18], 0x1572
cmp dword [esp + 0x18], 0x6ed
jge 0x100358f4
lea eax, [esp + 0x50]
push eax
lea eax, [esp + 0x38]
push eax
push 0x10008184
call fcn.1005b040
mov edi, dword [esp + 0x40]
add esp, 0xc
test edi, edi
je 0x100358f0
xor esi, esi
mov dword [esp + 0x10], ebx
mov eax, edi
inc esi
and eax, 0x80000001
jns 0x100357e4
dec eax
or eax, 0xfffffffe
inc eax
jne 0x10035809
push 2
lea edx, [esp + 0x38]
pop ecx
call fcn.100352aa
imul eax, dword [esp + 0x50]
lea edx, [eax - 1]
call fcn.100352d3
mov edi, dword [esp + 0x34]
mov esi, eax
mov dword [esp + 0x10], edx
push 3
pop ecx
mov dword [esp + 0x1c], ecx
cmp edi, 9
jl 0x10035888
mov eax, edi
cdq
idiv ecx
test edx, edx
jne 0x10035878
lea edx, [esp + 0x34]
call fcn.100352aa
imul eax, dword [esp + 0x50]
lea edx, [eax - 1]
call fcn.100352d3
push dword [esp + 0x10]
push esi
push edx
push eax
call fcn.1005f270
push ebx
mov edi, 0x9c
push edi
push edx
push eax
call fcn.100728c0
mov esi, eax
mov ecx, edx
mov eax, dword [esp + 0x1c]
dec eax
cdq
push edx
push eax
push ecx
push esi
call fcn.1005f270
push ebx
push edi
push edx
push eax
call fcn.100728c0
mov edi, dword [esp + 0x34]
mov esi, eax
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x10], edx
add ecx, 2
mov eax, ecx
mov dword [esp + 0x1c], ecx
imul eax, ecx
cmp eax, edi
jle 0x10035815
cmp edi, 1
jle 0x100358d8
mov edx, dword [esp + 0x50]
mov ecx, edi
lea edx, [edx - 1]
call fcn.100352d3
push dword [esp + 0x10]
push esi
push edx
push eax
call fcn.1005f270
push ebx
push 0x9c
push edx
push eax
call fcn.100728c0
mov esi, eax
mov ecx, edx
lea eax, [edi - 1]
cdq
push edx
push eax
push ecx
push esi
call fcn.1005f270
push ebx
push 0x9c
push edx
push eax
call fcn.100728c0
mov esi, eax
mov eax, edx
jmp 0x100358dc
mov eax, dword [esp + 0x10]
push eax
push esi
push 0x10008124
call fcn.1005b488
add esp, 0xc
jmp 0x100357ac
mov edi, dword [esp + 0x5c]
mov dword [esp + 0x10], ebx
jmp 0x1003590d
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x174], 0x8dfe
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 3
jl 0x100358fa
mov dword [esp + 0x20], ebx
cmp dword [esp + 0x20], ebx
jl 0x10035970
mov dword [esp + 0x1c], 0xa6696b49
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x6c]
mov eax, dword [eax + ecx*4]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x1c]
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov esi, dword [esp + 0x20]
mov edx, dword [esp + 0x1c]
add edx, dword [esp + 0x17c]
mov eax, dword [esp + 0x6c]
imul edx, dword [eax + ecx*4]
xor ecx, ecx
mov eax, dword [esp + 0x38]
cmp edx, eax
mov eax, dword [esp + 0x6c]
sete cl
mov dword [eax + esi*4], ecx
dec dword [esp + 0x20]
jns 0x1003591e
or esi, 0xffffffff
mov dword [esp + 0xc369c], esi
cmp dword [esp + 0x6c], 0
je 0x10035997
push dword [esp + 0x6c]
call fcn.1005b5f7
pop ecx
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x70], ebx
mov dword [esp + 0x74], ebx
cmp dword [edi + 0x14], 0x10
jb 0x100359a1
mov ecx, dword [edi]
jmp 0x100359a3
mov ecx, edi
cmp dword [edi + 0x14], 0x10
mov dword [esp + 0x64], ecx
jb 0x100359b1
mov edx, dword [edi]
jmp 0x100359b3
mov edx, edi
mov eax, dword [edi + 0x10]
add eax, edx
cmp ecx, eax
je 0x100360dd
mov al, byte [ecx]
cmp al, 0x30
jl 0x10035fbe
cmp al, 0x39
jg 0x10035fbe
mov dword [esp + 0x38], 0x1dc0
cmp dword [esp + 0x38], 0x1010
jge 0x10035cc9
push 0xf
pop eax
mov dword [esp + 0xd0], eax
mov dword [esp + 0xcc], ebx
mov byte [esp + 0xbc], bl
mov dword [esp + 0xc369c], 2
mov dword [esp + 0xe8], eax
mov dword [esp + 0xe4], ebx
mov byte [esp + 0xd4], bl
lea edx, [esp + 0xbc]
mov byte [esp + 0xc369c], 3
mov ecx, 0x10663c90
call fcn.10032f78
lea edx, [esp + 0xd4]
mov ecx, eax
call fcn.10032f78
lea edx, [esp + 0x180]
lea ecx, [esp + 0xbc]
call fcn.1003532d
lea edx, [esp + 0x61c08]
lea ecx, [esp + 0xd4]
call fcn.1003532d
mov esi, dword [esp + 0xcc]
xor edx, edx
mov ecx, esi
mov eax, esi
sub ecx, dword [esp + esi*4 + 0x17c]
div ecx
lea eax, [esp + 0x13c]
test edx, edx
cmove esi, ecx
lea ecx, [esp + 0xbc]
push esi
push ebx
push eax
mov dword [esp + 0x30], esi
call fcn.1002d074
mov byte [esp + 0xc369c], 4
xor edx, edx
mov edi, dword [esp + 0xe4]
mov ecx, edi
mov eax, edi
sub ecx, dword [esp + edi*4 + 0x61c04]
div ecx
lea eax, [esp + 0x124]
test edx, edx
cmove edi, ecx
lea ecx, [esp + 0xd4]
push edi
push ebx
push eax
mov dword [esp + 0x28], edi
call fcn.1002d074
mov byte [esp + 0xc369c], 5
lea eax, [esp + 0x124]
cmp dword [esp + 0x138], 0x10
push dword [esp + 0x134]
cmovae eax, dword [esp + 0x128]
push eax
push dword [esp + 0x154]
push ecx
lea ecx, [esp + 0x14c]
call fcn.1002e239
test eax, eax
je 0x10035b24
push ebx
jmp 0x10035c72
mov ecx, ebx
mov dword [esp + 0x10], ecx
jmp 0x10035c64
cmp edi, dword [esp + 0xe4]
ja 0x10035c71
mov eax, dword [esp + 0xcc]
xor edx, edx
div esi
test edx, edx
jne 0x10035c5c
mov eax, dword [esp + 0xe4]
div edi
test edx, edx
jne 0x10035c5c
cmp dword [esp + 0xcc], 0
mov edx, ebx
mov byte [esp + 0x17], 1
mov dword [esp + 0x18], ebx
jbe 0x10035bda
cmp dword [esp + 0xd0], 0x10
lea eax, [esp + 0xbc]
mov ebx, dword [esp + 0x18]
lea ecx, [esp + 0x13c]
cmovae eax, dword [esp + 0xbc]
cmp dword [esp + 0x150], 0x10
push 0
cmovae ecx, dword [esp + 0x140]
mov al, byte [eax + ebx]
pop ebx
cmp al, byte [ecx + edx]
jne 0x10035cec
mov eax, dword [esp + 0x24]
dec eax
cmp edx, eax
push 0xffffffffffffffff
pop eax
cmove edx, eax
mov eax, dword [esp + 0x18]
inc eax
inc edx
mov dword [esp + 0x18], eax
cmp eax, dword [esp + 0xcc]
jb 0x10035b75
mov ecx, dword [esp + 0x10]
cmp dword [esp + 0xe4], 0
mov edx, ebx
mov dword [esp + 0x18], ebx
jbe 0x10035c4f
cmp dword [esp + 0xe8], 0x10
lea eax, [esp + 0xd4]
mov ebx, dword [esp + 0x18]
lea ecx, [esp + 0x124]
cmovae eax, dword [esp + 0xd4]
cmp dword [esp + 0x138], 0x10
push 0
cmovae ecx, dword [esp + 0x128]
mov al, byte [eax + ebx]
pop ebx
cmp al, byte [ecx + edx]
jne 0x10035cf5
mov eax, dword [esp + 0x1c]
dec eax
cmp edx, eax
push 0xffffffffffffffff
pop eax
cmove edx, eax
mov eax, dword [esp + 0x18]
inc eax
inc edx
mov dword [esp + 0x18], eax
cmp eax, dword [esp + 0xe4]
jb 0x10035bea
mov ecx, dword [esp + 0x10]
mov al, byte [esp + 0x17]
movzx eax, al
add ecx, eax
mov dword [esp + 0x10], ecx
add edi, dword [esp + 0x1c]
add esi, dword [esp + 0x24]
cmp esi, dword [esp + 0xcc]
jbe 0x10035b2f
push ecx
mov ecx, 0x10663bd8
call fcn.1002d4de
push eax
call fcn.10031f18
pop ecx
push ebx
push 1
lea ecx, [esp + 0x12c]
call fcn.1002e289
push ebx
push 1
lea ecx, [esp + 0x144]
call fcn.1002e289
push ebx
push 1
lea ecx, [esp + 0xdc]
call fcn.1002e289
push ebx
or esi, 0xffffffff
lea ecx, [esp + 0xc0]
push 1
mov dword [esp + 0xc36a4], esi
call fcn.1002e289
push 1
lea ecx, [esp + 0x94]
call fcn.1002d70f
mov dword [esp + 0xc369c], 6
mov dword [esp + 0x3c], esi
mov dword [esp + 0x10], ebx
jmp 0x10035d16
mov ecx, dword [esp + 0x10]
jmp 0x10035c5c
mov ecx, dword [esp + 0x10]
mov al, bl
jmp 0x10035c53
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x90]
mov dword [eax + ecx*4], 0x9f9b3198
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 1
jl 0x10035d00
mov dword [esp + 0x3c], ebx
jmp 0x10035f5b
mov dword [esp + 0x1c], 0xb0ceafd
mov dword [esp + 0x68], 0x37c5b151
mov dword [esp + 0x1c], ebx
cmp dword [esp + 0x1c], ebx
jg 0x10035f34
push 3
lea ecx, [esp + 0xf0]
call fcn.1002d70f
mov byte [esp + 0xc369c], 7
lea eax, [esp + 0x174]
push dword [esp + 0x114]
xorps xmm0, xmm0
mov dword [esp + 0x7c], ebx
push eax
lea eax, [esp + 0x16c]
mov dword [esp + 0x84], ebx
push eax
push ebx
lea ecx, [esp + 0x88]
mov dword [esp + 0x90], ebx
movdqu xmmword [esp + 0x174], xmm0
call fcn.100330fa
mov dword [esp + 0x10], ebx
jmp 0x10035db4
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xec]
mov dword [eax + ecx*4], esi
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 3
jl 0x10035da2
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x10035dcb
call fcn.10035230
mov edi, dword [esp + 0xec]
mov dword [edi + 4], ebx
xor ecx, ecx
mov dword [esp + 0x10], 0x815cbcef
mov dword [esp + 0x10], ebx
inc ecx
jmp 0x10035df9
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0xfc], 0xfffffffa
inc dword [esp + 0x10]
cmp dword [esp + 0x10], ecx
jl 0x10035de6
mov dword [esp + 0x10], ebx
cmp dword [esp + 0x10], ebx
jl 0x10035eb4
mov dword [esp + 0x24], ebx
jmp 0x10035e22
mov eax, dword [esp + 0x24]
mov dword [esp + eax*4 + 0x100], ecx
inc dword [esp + 0x24]
cmp dword [esp + 0x24], ecx
jl 0x10035e13
mov edx, dword [esp + 0x10]
mov eax, dword [edi + 4]
mov esi, dword [esp + 0x90]
mov dword [esp + 0x100], edx
push 1
mov ecx, dword [esi + eax*4]
mov eax, dword [esp + 0x7c]
sub ecx, edx
mov dword [eax], ecx
mov eax, dword [edi + 4]
mov dword [esp + 0x6c], ecx
xor ecx, ecx
cmp dword [esi + eax*4], 0x9ea7eb8e
setne cl
xor edx, edx
mov dword [esp + 0x3c], ecx
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x3c]
add eax, 0xbd4a
add ecx, eax
mov eax, dword [esp + 0x14]
cmp ecx, eax
mov eax, dword [esp + 0x6c]
setle dl
xor ecx, ecx
sub esi, edx
cmp eax, esi
mov eax, dword [esp + 0x40]
setne cl
xor edx, edx
cmp ecx, dword [edi + 4]
setg dl
xor ecx, ecx
sub edx, 8
cmp edx, eax
setle cl
mov dword [esp + 0x100], ecx
dec dword [esp + 0x14]
pop ecx
jns 0x10035e0d
lea eax, [esp + 0x3c]
push eax
lea edx, [esp + 0x94]
lea ecx, [esp + 0x6c]
call fcn.10035240
inc dword [edi + 4]
cmp dword [edi + 4], 0
pop ecx
jle 0x10035dd5
cmp dword [esp + 0x78], 0
je 0x10035ef7
push dword [esp + 0x78]
call fcn.1005b5f7
pop ecx
mov dword [esp + 0x78], ebx
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x80], ebx
mov byte [esp + 0xc369c], 6
push dword [esp + 0xec]
call fcn.1005b5f7
pop ecx
mov dword [esp + 0xec], ebx
mov dword [esp + 0xf0], ebx
mov dword [esp + 0xf4], ebx
inc dword [esp + 0x1c]
push 0xffffffffffffffff
pop esi
cmp dword [esp + 0x1c], ebx
jle 0x10035d44
or esi, esi
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x10035f57
push ebx
push 0x1b21
push 0x5fd
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetDlgItemInt]
inc dword [esp + 0x3c]
cmp dword [esp + 0x3c], ebx
jle 0x10035d26
mov dword [esp + 0xc369c], esi
cmp dword [esp + 0x90], 0
je 0x10035f98
push dword [esp + 0x90]
call fcn.1005b5f7
pop ecx
mov dword [esp + 0x90], ebx
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], ebx
push ebx
lea eax, [esp + 0x64]
push eax
lea eax, [esp + 0x6c]
push eax
push 0x563f
call fcn.10036fa1
mov ecx, dword [esp + 0x74]
add esp, 0x10
mov edi, dword [esp + 0x5c]
inc ecx
jmp 0x100359a3
push 3
lea ecx, [esp + 0x11c]
call fcn.1002d70f
mov dword [esp + 0x44], ebx
jmp 0x10035fe5
mov eax, dword [esp + 0x44]
mov dword [esp + eax*4 + 0x154], 0x7117
inc dword [esp + 0x44]
cmp dword [esp + 0x44], 3
jl 0x10035fd2
lea edx, [esp + 0x118]
lea ecx, [esp + 0x44]
call fcn.10035282
mov eax, dword [esp + 0x118]
push 2
pop esi
mov dword [eax], esi
mov eax, dword [eax]
mov ecx, dword [esp + eax*4 + 0x154]
mov eax, dword [esp + 0x118]
mov eax, dword [eax]
mov dword [esp + eax*4 + 0x154], ecx
mov dword [esp + 0x38], 0x1dd6
cmp dword [esp + 0x38], 0x74b
jge 0x100360ac
lea eax, [esp + 0x48]
push eax
push 0x100080f0
call fcn.1005b040
mov eax, dword [esp + 0x50]
pop ecx
jmp 0x10036082
test cl, cl
je 0x1003606a
cmp eax, esi
jl 0x10036089
push 0x10008448
call fcn.1005b488
mov eax, dword [esp + 0x4c]
pop ecx
sub eax, esi
mov cl, bl
mov dword [esp + 0x48], eax
jmp 0x10036085
cmp eax, esi
jl 0x10036089
push 0x1000844c
call fcn.1005b488
mov eax, dword [esp + 0x4c]
sub eax, esi
mov dword [esp + 0x4c], eax
pop ecx
mov cl, 1
test eax, eax
jne 0x10036049
cmp eax, 1
jne 0x100360a4
test cl, cl
je 0x10036099
push 0x10008450
jmp 0x1003609e
push 0x10008454
call fcn.1005b488
pop ecx
push 0xa
call fcn.1005b81d
pop ecx
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x100360bc
call fcn.100352a1
mov eax, dword [esp + 0x118]
dec dword [eax]
jns 0x10036008
push eax
call fcn.1005b5f7
mov eax, dword [esp + 0x64]
pop ecx
mov dword [eax], ebx
jmp 0x100353ce
mov al, 1
mov ecx, dword [esp + 0xc3694]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret