Function at 0x3cfb80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x2e4
mov eax, dword [ebp + 0x1c]
mov ecx, dword [ebp + 0x18]
push ebx
mov ebx, dword [ebp + 8]
mov dword [esp + 0x68], eax
mov eax, dword [ebx + 8]
push esi
mov esi, dword [eax]
mov dword [esp + 0x38], ecx
mov ecx, dword [ebp + 0xc]
mov edx, 1
mov dword [ebx + 0x11ce8], esi
mov eax, dword [ecx + 4]
push edi
xor edi, edi
test dl, ah
mov dword [esp + 0x74], edi
mov byte [esp + 0x13], 0
mov dword [esp + 0x48], edi
mov dword [esp + 0xa0], edx
je 0x3cfbd4
mov ecx, edx
jmp 0x3cfbdd
test ah, 2
jne 0x3cfbdb
xor edx, edx
xor ecx, ecx
test ah, 0x10
mov dword [esp + 0x6c], edx
jne 0x3cfbfd
mov eax, dword [ebx + 0x12440]
cmp eax, edi
je 0x3cfc02
cmp dword [eax + 0x144], edi
je 0x3cfc02
cmp dword [eax + 0x14], edi
je 0x3cfc02
mov byte [esp + 0x13], 1
cmp ecx, edx
mov dword [esp + 0x44], ecx
jg 0x3d0862
jmp 0x3cfc12
xor edi, edi
mov esi, dword [ebp + 0xc]
mov ecx, dword [esi + 0x75c]
test byte [ecx + 0x13], 2
mov eax, dword [esp + 0x3c]
mov edx, dword [esp + 0x70]
mov dword [ebp + 0x1c], edx
mov dword [ebp + 0x18], eax
je 0x3cfe66
cmp byte [ebp + 0x24], 0
jne 0x3cfe66
cmp byte [ebp + 0x20], 0
jne 0x3cfe66
test byte [esi + 9], 4
jne 0x3cfe66
cmp dword [ebx + 0x12ec8], 2
jne 0x3cfe66
lea edx, [eax + eax*8]
shl edx, 5
push edx
call fcn.00061fc0
cmp eax, edi
mov dword [esp + 0x48], eax
je 0x3cfe66
xor ecx, ecx
cmp dword [ebx + 0x12ec4], edi
mov dword [esp + 0x14], edi
mov dword [esp + 0x34], 0x10
jle 0x3cfcbb
mov edx, dword [ebx + 0x12ecc]
lea eax, [esp + 0xb8]
lea esp, [esp]
mov edi, 1
shl edi, cl
test edx, edi
je 0x3cfcb0
mov dword [eax], ecx
add eax, 4
add ecx, 1
cmp ecx, dword [ebx + 0x12ec4]
jl 0x3cfca0
mov ecx, dword [esp + 0xbc]
mov edi, dword [esp + 0xb8]
mov eax, dword [esi + 0x75c]
shl edi, 4
mov edi, dword [edi + eax + 0x101a4]
mov edx, ecx
shl edx, 4
cmp edi, dword [edx + eax + 0x101a4]
jge 0x3cfd00
mov eax, dword [esp + 0xb8]
add eax, 0x101a
shl eax, 4
add eax, dword [esi + 0x75c]
mov esi, eax
jmp 0x3cfd11
add ecx, 0x101a
shl ecx, 4
add ecx, dword [esi + 0x75c]
mov esi, ecx
mov ecx, dword [esi]
mov eax, dword [esi + 4]
mov edx, dword [esi + 8]
mov edi, dword [esi + 0xc]
mov esi, edi
sub esi, eax
mov dword [esp + 0x18], esi
mov esi, dword [ebp + 0xc]
mov esi, dword [esi + 0x274]
mov dword [esp + 0x1c], esi
mov esi, dword [ebp + 0xc]
mov esi, dword [esi + 0x270]
sub eax, dword [esp + 0x1c]
sub ecx, esi
sub edx, esi
sub edi, dword [esp + 0x1c]
mov dword [esp + 0x78], ecx
mov dword [esp + 0xcc], edi
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], edx
mov dword [esp + 0x84], edi
mov dword [esp + 0x30], 0
jmp 0x3cfd74
mov edi, dword [esp + 0xcc]
cmp eax, dword [esp + 0x18]
jge 0x3cfe55
mov ecx, dword [esp + 0x34]
add eax, ecx
cmp eax, edi
mov dword [esp + 0x84], eax
jle 0x3cfd96
mov dword [esp + 0x84], edi
cmp dword [esp + 0x3c], 0
jbe 0x3cfdd7
mov esi, dword [esp + 0x14]
mov edx, dword [esp + 0x3c]
mov edi, dword [esp + 0x70]
shl esi, 4
add esi, dword [esp + 0x48]
mov dword [esp + 0x1c], edx
lea eax, [esp + 0x78]
mov ecx, edi
mov edx, esi
call fcn.003cf220
test eax, eax
je 0x3cfdcd
add dword [esp + 0x14], 1
add esi, 0x10
add edi, 0x10
sub dword [esp + 0x1c], 1
jne 0x3cfdb4
mov eax, dword [esp + 0x18]
add dword [esp + 0x7c], eax
add dword [esp + 0x84], eax
cmp dword [esp + 0x3c], 0
jbe 0x3cfe27
mov esi, dword [esp + 0x14]
mov eax, dword [esp + 0x3c]
mov edi, dword [esp + 0x70]
shl esi, 4
add esi, dword [esp + 0x48]
mov dword [esp + 0x1c], eax
lea eax, [esp + 0x78]
mov ecx, edi
mov edx, esi
call fcn.003cf220
test eax, eax
je 0x3cfe1d
add dword [esp + 0x14], 1
add esi, 0x10
add edi, 0x10
sub dword [esp + 0x1c], 1
jne 0x3cfe04
mov ecx, dword [esp + 0x34]
mov eax, dword [esp + 0x84]
sub eax, dword [esp + 0x18]
lea edx, [ecx + ecx]
mov ecx, dword [esp + 0x30]
add ecx, 1
cmp ecx, 9
mov dword [esp + 0x7c], eax
mov dword [esp + 0x34], edx
mov dword [esp + 0x30], ecx
jl 0x3cfd6d
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x14]
mov esi, dword [ebp + 0xc]
mov dword [ebp + 0x1c], eax
mov dword [ebp + 0x18], ecx
mov eax, dword [esi + 0x7a8]
mov esi, dword [esi + 0x7ac]
cmp eax, esi
mov dword [esp + 0x38], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x40], esi
jg 0x3d0173
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 4]
mov dword [esp + 0xb4], eax
and eax, 1
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x44]
lea eax, [eax + eax*4]
shl eax, 6
mov dword [esp + 0x18], eax
jmp 0x3cfeb0
mov eax, dword [ebp + 0x14]
mov ecx, dword [esp + 0x14]
mov edx, dword [eax + ecx*4]
mov eax, dword [esp + 0x18]
add eax, edx
lea edx, [eax + 0x30]
test edx, edx
je 0x3cff31
mov eax, dword [eax + 0x108]
lea edx, [eax + eax*2]
add edx, edx
add edx, edx
add edx, edx
sub edx, eax
mov eax, dword [edx*4 + 0x41c808]
and eax, 0xfc000
cmp eax, 0x30000
jg 0x3cff1f
je 0x3cff12
test eax, eax
je 0x3cff05
cmp eax, 0x4000
jne 0x3cff31
mov dword [esp + ecx*4 + 0x98], 4
jmp 0x3cff31
mov dword [esp + ecx*4 + 0x98], 0xa
jmp 0x3cff31
mov dword [esp + 0xa0], 3
jmp 0x3cff26
cmp eax, 0x38000
jne 0x3cff31
mov dword [esp + ecx*4 + 0x98], 1
cmp dword [esp + 0x1c], 0
je 0x3d00e5
cmp ecx, 1
mov byte [ebp + 0x24], 0
jne 0x3cff82
cmp byte [esp + 0x13], 0
jne 0x3cff82
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
mov eax, dword [esp + 0x18]
lea edx, [ecx + eax]
lea esi, [edx + 0x88]
mov ecx, 0x22
lea edi, [esp + 0x158]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [edx + 0x30]
mov dword [esp + 0x158], ecx
mov edx, dword [edx + 0x34]
mov dword [esp + 0x15c], edx
jmp 0x3cffcb
mov eax, dword [esp + 0x14]
mov edx, dword [ebp + 0x10]
mov ecx, eax
shl ecx, 4
add ecx, eax
lea edi, [esp + ecx*8 + 0xd0]
mov ecx, dword [edx + eax*4]
mov edx, dword [esp + 0x18]
lea esi, [ecx + edx + 0x88]
mov dword [esp + 0x30], edi
mov ecx, 0x22
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp + 0x10]
mov ecx, dword [ecx + eax*4]
mov esi, dword [ecx + edx + 0x30]
mov eax, dword [esp + 0x30]
mov dword [eax], esi
mov edx, dword [ecx + edx + 0x34]
mov dword [eax + 4], edx
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ecx, edx
shl ecx, 4
add ecx, edx
add ecx, ecx
add ecx, ecx
add ecx, ecx
lea edi, [esp + ecx + 0x1e0]
mov dword [esp + 0x30], ecx
mov ecx, dword [ebp + 0x14]
mov ecx, dword [ecx + edx*4]
lea esi, [eax + ecx + 0x88]
mov dword [esp + 0x34], edi
mov ecx, 0x22
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp + 0x14]
mov esi, dword [ecx + edx*4]
mov edi, dword [eax + esi + 0x30]
mov ecx, dword [esp + 0x34]
mov dword [ecx], edi
mov esi, dword [eax + esi + 0x34]
mov dword [ecx + 4], esi
mov ecx, dword [ebp + 0x10]
mov esi, dword [ecx + edx*4]
mov ecx, dword [esi + eax + 0x48]
mov edi, dword [esi + eax + 0x4c]
mov esi, dword [ebp + 0x14]
mov esi, dword [esi + edx*4]
cmp edi, dword [eax + esi + 0x4c]
ja 0x3d0038
jb 0x3d0042
cmp ecx, dword [eax + esi + 0x48]
jb 0x3d0042
mov ecx, dword [ebp + 0x14]
mov edx, dword [ecx + edx*4]
mov ecx, dword [eax + edx + 0x48]
xor eax, eax
cmp dword [ebx + 0x12430], eax
mov dword [ebp + 0x18], 1
je 0x3d007b
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
mov eax, dword [ebp + 0xc]
mov edx, dword [eax + 0xc4]
mov dword [esp + 0x74], ecx
mov ecx, dword [eax + 0xc0]
mov dword [esp + 0x28], ecx
mov dword [esp + 0x2c], edx
jmp 0x3d015e
xor eax, eax
test byte [esp + 0xb5], 4
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], eax
je 0x3d00c0
mov esi, dword [esp + 0x30]
mov edi, 0x800
mov eax, edi
cdq
idiv dword [esp + esi + 0x120]
shr ecx, 0xb
mov dword [esp + 0x2c], ecx
mov dword [esp + esi + 0x1ec], edi
mov dword [esp + esi + 0xdc], edi
mov dword [esp + 0x28], eax
jmp 0x3d015e
mov edi, dword [esp + 0x30]
mov esi, dword [esp + edi + 0xdc]
mov eax, esi
cdq
idiv dword [esp + edi + 0x120]
xor edx, edx
mov dword [esp + 0x28], eax
mov eax, ecx
div esi
mov dword [esp + 0x2c], eax
jmp 0x3d015e
cmp ecx, 1
jne 0x3d010a
cmp byte [esp + 0x13], 0
jne 0x3d010a
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
mov edx, dword [esp + 0x18]
lea esi, [ecx + edx + 0x88]
lea edi, [esp + 0x158]
jmp 0x3d012d
mov eax, dword [esp + 0x14]
mov ecx, dword [ebp + 0x10]
mov edx, dword [ecx + eax*4]
mov ecx, dword [esp + 0x18]
lea esi, [edx + ecx + 0x88]
mov edx, eax
shl edx, 4
add edx, eax
lea edi, [esp + edx*8 + 0xd0]
mov eax, dword [esp + 0x14]
mov ecx, 0x22
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp + 0x14]
mov edx, dword [ecx + eax*4]
mov ecx, dword [esp + 0x18]
lea esi, [ecx + edx + 0x88]
mov edx, eax
shl edx, 4
add edx, eax
lea edi, [esp + edx*8 + 0x1e0]
mov ecx, 0x22
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 0x14]
add eax, 1
cmp eax, dword [esp + 0x40]
mov dword [esp + 0x14], eax
jle 0x3cfeb0
cmp byte [ebp + 0x20], 0
je 0x3d0207
mov eax, dword [ebp + 0x28]
lea ecx, [eax + 0x101a]
mov eax, dword [ebp + 0xc]
shl ecx, 4
add ecx, dword [eax + 0x75c]
mov esi, ecx
mov ecx, dword [esi]
mov edx, dword [esi + 4]
mov edi, dword [esi + 8]
mov esi, dword [esi + 0xc]
mov dword [esp + 0xb0], esi
mov esi, dword [eax + 0x75c]
mov dword [esp + 0xac], edi
mov edi, dword [esi + 0x101ec]
mov esi, dword [esi + 0x101e8]
add dword [esp + 0xac], esi
add ecx, esi
mov esi, edi
mov dword [esp + 0x40], edi
mov edi, dword [esp + 0xb0]
add edx, esi
add edi, esi
mov esi, dword [eax + 0x274]
mov eax, dword [eax + 0x270]
sub dword [esp + 0xac], eax
sub ecx, eax
sub edx, esi
sub edi, esi
mov dword [esp + 0xa4], ecx
mov dword [esp + 0xa8], edx
mov dword [esp + 0xb0], edi
cmp dword [ebx + 0x12430], 0
mov edx, dword [ebx + 8]
mov esi, dword [edx]
jne 0x3d032b
cmp byte [ebp + 0x24], 0
jne 0x3d032b
cmp byte [esp + 0x13], 0
jne 0x3d032b
cmp dword [ebp + 0x18], 0
je 0x3d032b
mov ecx, dword [esp + 0x38]
mov eax, dword [esp + ecx*4 + 0x98]
mov dword [esi + 4], eax
mov eax, ecx
shl eax, 4
add eax, ecx
add eax, eax
mov dword [esi], 0x10c300
add eax, eax
add eax, eax
mov ecx, dword [esp + eax + 0x1ec]
shl ecx, 0x10
or ecx, dword [esp + eax + 0xdc]
add esi, 0x14
mov dword [esi - 0xc], ecx
mov edx, dword [esp + eax + 0xd0]
mov dword [esi - 8], edx
mov ecx, dword [esp + eax + 0x1e0]
mov dword [esi - 4], ecx
mov ecx, dword [esp + eax + 0xd8]
cmp ecx, dword [ebx + 0x12480]
lea edx, [esp + eax + 0xd8]
jne 0x3d02a9
mov edi, dword [esp + eax + 0x1e8]
cmp edi, dword [ebx + 0x12484]
je 0x3d030e
mov dword [ebx + 0x12480], ecx
mov ecx, dword [esp + eax + 0x1e8]
lea eax, [esp + eax + 0x1e8]
mov dword [ebx + 0x12484], ecx
mov ecx, dword [ebx + 0x12544]
test byte [ecx + 0x103b0], 1
je 0x3d02db
mov dword [esi], 0x1fff0
add esi, 4
mov dword [esi], 0x8c184
mov edx, dword [edx]
mov dword [esi + 4], edx
mov eax, dword [eax]
mov dword [esi + 8], eax
mov ecx, dword [ebx + 0x12544]
add esi, 0xc
test byte [ecx + 0x103b0], 1
je 0x3d030e
mov edx, dword [ebx + 0x20c4c]
or dh, 0x10
shl edx, 4
mov dword [esi], edx
add esi, 4
mov eax, dword [ebx + 8]
mov dword [eax], esi
mov ecx, dword [ebx + 8]
cmp esi, dword [ecx + 4]
jb 0x3d032b
push 0
xor edx, edx
mov ecx, ebx
call fcn.003bfc90
mov edx, dword [ebx + 8]
mov esi, dword [edx]
mov eax, dword [ebp + 0x18]
test eax, eax
mov edi, dword [esp + 0x44]
jbe 0x3d0847
mov ecx, dword [ebp + 0x1c]
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x30], eax
jmp 0x3d0350
mov eax, dword [ebp + 0xc]
test byte [eax + 4], 1
mov edx, dword [eax + 0x7a8]
mov dword [esp + 0x14], edx
jne 0x3d0382
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [esp + 0x20], ecx
mov ecx, dword [eax + 8]
mov dword [esp + 0x24], edx
mov edx, dword [eax + 0xc]
mov dword [esp + 0x28], ecx
mov dword [esp + 0x2c], edx
cmp byte [ebp + 0x20], 0
je 0x3d03a2
lea ecx, [esp + 0x20]
lea eax, [esp + 0xa4]
mov edx, ecx
call fcn.003cf220
test eax, eax
je 0x3d0837
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov edx, dword [esp + 0x20]
mov dword [esp + 0x54], ecx
mov ecx, dword [ebp + 0x10]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x58], eax
lea eax, [edi + edi*4]
mov edi, dword [esp + 0x14]
mov ecx, dword [ecx + edi*4]
shl eax, 6
mov edi, dword [ecx + eax + 0x144]
add ecx, eax
mov ecx, dword [ecx + 0x140]
add dword [esp + 0x20], ecx
add dword [esp + 0x28], ecx
mov ecx, edi
add dword [esp + 0x24], ecx
add dword [esp + 0x2c], ecx
mov ecx, dword [ebp + 0x14]
mov dword [esp + 0x38], edi
mov edi, dword [esp + 0x14]
mov ecx, dword [ecx + edi*4]
mov edi, dword [ecx + eax + 0x144]
add ecx, eax
mov ecx, dword [ecx + 0x140]
add dword [esp + 0x54], ecx
add edx, ecx
mov ecx, edi
add dword [esp + 0x50], ecx
add dword [esp + 0x58], ecx
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x38], edi
mov edi, dword [esp + 0xa0]
imul edx, edi
imul ecx, edi
mov dword [esp + 0x4c], edx
mov edx, dword [esp + 0x54]
imul edx, edi
mov dword [esp + 0x20], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x54], edx
imul ecx, edi
mov edx, dword [ebp + 0xc]
mov edx, dword [edx + 0x7a8]
mov edi, dword [ebp + 0x10]
mov edx, dword [edi + edx*4]
mov edi, dword [edx + eax + 0xe0]
add edx, eax
mov edx, dword [edx + 0xdc]
mov dword [esp + 0x38], edx
imul edx, dword [esp + 0x20]
imul ecx, dword [esp + 0x38]
sar ecx, 3
sar edx, 3
mov dword [esp + 0x28], ecx
mov dword [esp + 0x20], edx
mov edx, dword [esp + 0x24]
mov ecx, edi
imul edx, ecx
imul ecx, dword [esp + 0x2c]
sar ecx, 3
sar edx, 3
mov dword [esp + 0x40], edi
mov edi, ecx
mov ecx, dword [ebp + 0xc]
mov ecx, dword [ecx + 0x7a8]
mov dword [esp + 0x24], edx
mov edx, dword [ebp + 0x14]
mov ecx, dword [edx + ecx*4]
mov edx, dword [eax + ecx + 0xdc]
add eax, ecx
mov ecx, dword [eax + 0xe0]
mov eax, dword [esp + 0x4c]
imul eax, edx
sar eax, 3
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x2c], edi
imul eax, edx
sar eax, 3
mov edx, eax
mov eax, dword [esp + 0x50]
imul eax, ecx
imul ecx, dword [esp + 0x58]
sar eax, 3
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x4c]
sar ecx, 3
cmp byte [ebp + 0x24], 0
mov dword [esp + 0x88], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x58], ecx
mov dword [esp + 0x68], edi
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], edx
mov dword [esp + 0x94], ecx
jne 0x3d053f
mov eax, edi
sub eax, dword [esp + 0x24]
jmp 0x3d0544
mov eax, 8
mov edx, dword [esp + 0x60]
add edx, eax
mov dword [esp + 0x68], edx
mov edx, dword [esp + 0x8c]
add edx, eax
mov dword [esp + 0x94], edx
cmp dword [esp + 0x68], edi
mov edx, dword [ebp + 0xc]
mov dword [esp + 0x18], eax
jle 0x3d0576
mov dword [esp + 0x68], edi
mov dword [esp + 0x94], ecx
mov eax, dword [edx + 0x7a8]
cmp eax, dword [edx + 0x7ac]
mov dword [esp + 0x14], eax
jg 0x3d07f5
mov edi, eax
shl edi, 4
add edi, eax
add edi, edi
add edi, edi
add edi, edi
lea esp, [esp]
cmp dword [ebx + 0x12430], 0
mov dword [esp + 0x34], 0
jne 0x3d069f
cmp byte [ebp + 0x24], 0
jne 0x3d05c6
cmp byte [esp + 0x13], 0
je 0x3d069f
mov eax, dword [esp + eax*4 + 0x98]
mov dword [esi], 0x10c300
mov dword [esi + 4], eax
mov ecx, dword [esp + edi + 0x1ec]
shl ecx, 0x10
or ecx, dword [esp + edi + 0xdc]
add esi, 0x14
mov dword [esi - 0xc], ecx
mov edx, dword [esp + edi + 0xd0]
mov dword [esi - 8], edx
mov eax, dword [esp + edi + 0x1e0]
mov dword [esi - 4], eax
mov eax, dword [esp + edi + 0xd8]
cmp eax, dword [ebx + 0x12480]
jne 0x3d061f
mov ecx, dword [esp + edi + 0x1e8]
cmp ecx, dword [ebx + 0x12484]
je 0x3d0687
mov edx, dword [esp + edi + 0x1e8]
mov dword [ebx + 0x12480], eax
mov eax, dword [ebx + 0x12544]
mov dword [ebx + 0x12484], edx
test byte [eax + 0x103b0], 1
je 0x3d064a
mov dword [esi], 0x1fff0
add esi, 4
mov dword [esi], 0x8c184
mov ecx, dword [esp + edi + 0xd8]
mov dword [esi + 4], ecx
mov edx, dword [esp + edi + 0x1e8]
mov dword [esi + 8], edx
mov eax, dword [ebx + 0x12544]
add esi, 0xc
test byte [eax + 0x103b0], 1
je 0x3d0687
mov ecx, dword [ebx + 0x20c4c]
or ch, 0x10
shl ecx, 4
mov dword [esi], ecx
add esi, 4
mov edx, dword [ebx + 8]
mov dword [edx], esi
mov eax, dword [ebx + 8]
cmp esi, dword [eax + 4]
jb 0x3d069f
push 0
xor edx, edx
mov ecx, ebx
call fcn.003bfc90
mov ecx, dword [ebx + 0x12544]
test byte [ecx + 0x103b0], 1
je 0x3d06d1
mov edx, dword [ebp + 0xc]
mov eax, dword [edx + 8]
test al, al
js 0x3d06d1
test al, 8
je 0x3d06d1
mov eax, dword [ebx + 0x20c4c]
push 1
push ebx
mov dword [esp + 0x3c], eax
call fcn.003b7810
add esp, 8
cmp dword [esp + 0x74], 0
je 0x3d0707
mov ecx, dword [esp + 0x74]
push 0
push 1
push ecx
mov ecx, dword [0x3fa0b8]
lea edx, [esp + edi + 0x1ec]
push edx
lea eax, [esp + edi + 0xe0]
push eax
push ebx
call dword [ebx + ecx*4 + fcn.000128f4]
add esp, 0x18
jmp 0x3d07bb
cmp dword [ebx + 0x12430], 0
je 0x3d075b
mov eax, dword [esp + 0x60]
mov edx, dword [esp + 0x68]
mov ecx, dword [esp + 0x5c]
push 1
push 0
sub edx, eax
push edx
mov edx, dword [esp + 0x34]
sub edx, ecx
push edx
mov edx, dword [esp + 0x9c]
push 0
push edx
mov edx, dword [esp + 0xa0]
push edx
push 0
push eax
push ecx
lea eax, [esp + edi + 0x208]
push eax
lea ecx, [esp + edi + 0xfc]
push ecx
push ebx
call fcn.003c21c0
add esp, 0x34
jmp 0x3d07bb
mov edx, dword [ebx + 8]
mov eax, dword [edx]
mov ecx, dword [esp + 0x60]
mov edx, ecx
shl edx, 0x10
or edx, dword [esp + 0x5c]
mov dword [eax], 0xca300
mov dword [eax + 4], edx
mov edx, dword [esp + 0x8c]
shl edx, 0x10
or edx, dword [esp + 0x88]
add eax, 0x10
mov dword [eax - 8], edx
mov edx, dword [esp + 0x68]
sub edx, ecx
mov ecx, dword [esp + 0x28]
sub ecx, dword [esp + 0x5c]
shl edx, 0x10
or edx, ecx
mov dword [eax - 4], edx
mov ecx, dword [ebx + 8]
mov dword [ecx], eax
mov edx, dword [ebx + 8]
cmp eax, dword [edx + 4]
jb 0x3d07bb
push 0
xor edx, edx
mov ecx, ebx
call fcn.003bfc90
cmp dword [esp + 0x34], 0
je 0x3d07d0
mov eax, dword [esp + 0x34]
push eax
push ebx
call fcn.003b7810
add esp, 8
mov eax, dword [esp + 0x14]
mov edx, dword [ebp + 0xc]
mov ecx, dword [ebx + 8]
mov esi, dword [ecx]
add eax, 1
add edi, 0x88
cmp eax, dword [edx + 0x7ac]
mov dword [esp + 0x14], eax
jle 0x3d05a0
mov ecx, dword [esp + 0x68]
cmp ecx, dword [esp + 0x2c]
jge 0x3d0833
mov eax, dword [esp + 0x18]
mov edi, dword [esp + 0x2c]
mov dword [esp + 0x60], ecx
add eax, eax
add ecx, eax
mov dword [esp + 0x68], ecx
mov ecx, dword [esp + 0x94]
mov dword [esp + 0x8c], ecx
add ecx, eax
mov dword [esp + 0x94], ecx
mov ecx, dword [esp + 0x58]
jmp 0x3d055e
mov edi, dword [esp + 0x44]
add dword [esp + 0x1c], 0x10
sub dword [esp + 0x30], 1
jne 0x3d0350
mov ecx, dword [esp + 0x48]
push ecx
call fcn.00061ff0
add edi, 1
cmp edi, dword [esp + 0x6c]
mov dword [esp + 0x44], edi
jle 0x3cfc10
mov dword [ebx + 0x11cec], esi
mov edx, dword [ebx + 8]
pop edi
mov dword [edx], esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret