Function at 0x28cd836
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
push ebx
mov ebx, ecx
push esi
push edi
mov dword [ebp - 0x10], ebx
mov eax, dword [ebx]
mov esi, dword [ebx + 4]
mov dword [ebp - 8], eax
mov dword [ebp - 4], esi
mov ecx, dword [eax]
mov edi, dword [eax + 8]
mov dword [ebp - 0x2c], ecx
mov ecx, eax
mov dword [ebp - 0x30], edi
call fcn.028a96be
movzx ecx, byte [ebx + 0x2e]
dec ecx
mov dword [ebp - 0x24], ecx
js 0x28cdaf4
imul eax, ecx, 0x50
lea ecx, [esi + 0x38]
lea esi, [ebx + 0x324]
add ecx, eax
add esi, eax
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x28], esi
cmp byte [esi - 7], 0xa6
mov ecx, dword [esi + 0xc]
mov dword [ebp - 0x20], ecx
je 0x28cd989
xor eax, eax
cmp byte [ebx + 0x33], 2
mov dword [ebp - 0x1c], eax
jne 0x28cd94e
test dword [ecx + 0x24], 0x200
je 0x28cd94e
mov eax, dword [ecx + 0x20]
test byte [eax + 0x38], 0x80
je 0x28cd94e
movzx ecx, word [ecx + 0x1e]
mov dword [ebp - 0x18], ecx
test ecx, ecx
jle 0x28cd94e
mov eax, dword [eax + 8]
cmp word [eax + ecx*2], 0x24
jl 0x28cd94e
mov edx, dword [ebp - 8]
mov eax, dword [edx + 0x2c]
xor edx, edx
inc eax
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x1c], eax
test ecx, ecx
jle 0x28cd914
mov ebx, ecx
add eax, edx
mov ecx, edi
push eax
push edx
push dword [esi - 0x2c]
push 0x60
pop edx
call fcn.0289910e
mov edx, dword [ebp - 0x14]
add esp, 0xc
mov eax, dword [ebp - 0x1c]
inc edx
mov dword [ebp - 0x14], edx
cmp edx, ebx
jl 0x28cd8ec
mov ebx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 8]
lea eax, [ecx + 1]
push 0x1b
add dword [edx + 0x2c], eax
cmp byte [esi - 7], 6
pop edx
push 0x18
pop eax
push ecx
push dword [ebp - 0x1c]
cmove edx, eax
mov ecx, edi
push 0
push dword [esi - 0x2c]
call fcn.0289930f
push dword [esi]
mov ecx, edi
mov dword [ebp - 0x1c], eax
push 1
push 0xd
pop edx
call fcn.02899192
add esp, 0x18
mov edx, dword [esi - 0x1c]
mov ecx, edi
call fcn.028993a0
movzx eax, byte [esi - 6]
movzx edx, byte [esi - 7]
push eax
push dword [esi]
push dword [esi - 4]
call fcn.0289910e
movzx edx, byte [esi - 5]
add esp, 0xc
mov ecx, edi
call fcn.0289962b
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x28cd993
mov edx, eax
call fcn.02899643
jmp 0x28cd993
mov edx, dword [esi - 0x1c]
mov ecx, edi
call fcn.028993a0
mov eax, dword [ebp - 0x20]
test dword [eax + 0x24], 0x800
je 0x28cda07
cmp dword [esi + 4], 0
jle 0x28cda07
mov edx, dword [esi - 0x24]
mov ecx, edi
call fcn.028993a0
mov edx, dword [esi + 4]
mov eax, dword [esi + 8]
imul ecx, edx, 0xc
add eax, 0xfffffff4
mov dword [ebp - 0x18], edx
add eax, ecx
mov dword [ebp - 0x1c], eax
test edx, edx
jle 0x28cda07
mov ebx, eax
mov esi, edx
mov edx, dword [ebx + 4]
mov ecx, edi
inc edx
call fcn.02899643
mov al, byte [ebx + 8]
cmp al, 0xa6
je 0x28cd9ee
push dword [ebx + 4]
movzx edx, al
mov ecx, edi
push dword [ebx]
call fcn.02899192
pop ecx
pop ecx
mov edx, dword [ebx + 4]
mov ecx, edi
dec edx
call fcn.02899643
dec esi
sub ebx, 0xc
test esi, esi
jg 0x28cd9cb
mov esi, dword [ebp - 0x28]
mov ebx, dword [ebp - 0x10]
mov edx, dword [esi - 0x28]
mov ecx, edi
call fcn.028993a0
mov edx, dword [esi - 0x20]
test edx, edx
je 0x28cda34
call fcn.028991a7
mov edx, dword [esi - 0x20]
mov ecx, edi
call fcn.02899643
mov edx, dword [esi - 0x20]
mov ecx, edi
sub edx, 2
call fcn.02899643
cmp dword [esi - 0xc], 0
je 0x28cda4f
push dword [esi - 0xc]
mov eax, dword [esi - 0x10]
mov ecx, edi
shr eax, 1
push eax
push 0x30
pop edx
call fcn.02899192
pop ecx
pop ecx
cmp dword [esi - 0x34], 0
je 0x28cdadb
push dword [esi - 0x34]
mov eax, dword [ebp - 0x20]
mov ecx, edi
push 0x2e
pop edx
mov eax, dword [eax + 0x24]
mov dword [ebp - 0x20], eax
call fcn.0289917e
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x20]
pop ecx
test al, 0x40
jne 0x28cda8d
mov eax, dword [ebp - 0xc]
mov ecx, edi
push dword [eax]
push 0x7c
pop edx
call fcn.0289917e
mov eax, dword [ebp - 0x20]
pop ecx
test eax, 0x200
jne 0x28cdaa1
test eax, 0x2000
je 0x28cdaaf
cmp dword [esi + 4], 0
je 0x28cdaaf
push dword [esi - 0x2c]
mov ecx, edi
push 0x7c
pop edx
call fcn.0289917e
pop ecx
cmp byte [esi - 7], 0x34
mov ecx, edi
jne 0x28cdac9
push dword [esi - 0x18]
push dword [esi - 4]
push 0xe
pop edx
call fcn.02899192
pop ecx
pop ecx
jmp 0x28cdad1
mov edx, dword [esi - 0x18]
call fcn.028991a7
mov edx, dword [ebp - 0x28]
mov ecx, edi
call fcn.02899643
mov eax, dword [ebp - 0x24]
sub esi, 0x50
sub dword [ebp - 0xc], 0x50
dec eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], esi
test eax, eax
jns 0x28cd885
mov edx, dword [ebx + 0x24]
mov ecx, edi
call fcn.028993a0
and dword [ebp - 0x24], 0
cmp byte [ebx + 0x2e], 0
jbe 0x28cdc2d
mov edx, dword [ebp - 4]
lea esi, [ebx + 0x330]
movzx eax, byte [esi - 0x14]
imul eax, eax, 0x50
test byte [eax + edx + 0x30], 0x10
mov ecx, dword [eax + edx + 0x18]
mov dword [ebp - 0x20], ecx
mov ecx, dword [esi]
je 0x28cdb48
mov ecx, dword [ebp - 8]
push 0
push dword [eax + edx + 0x28]
mov edx, dword [esi - 0x20]
push dword [esi - 0x3c]
call fcn.028c98ac
add esp, 0xc
jmp 0x28cdc14
test dword [ecx + 0x24], 0x240
je 0x28cdb56
mov eax, dword [ecx + 0x20]
jmp 0x28cdb66
test dword [ecx + 0x24], 0x2000
je 0x28cdc17
mov eax, dword [esi - 8]
mov dword [ebp - 0x28], eax
test eax, eax
je 0x28cdc17
cmp byte [ebx + 0x31], 0
je 0x28cdb84
mov eax, dword [eax + 0xc]
test byte [eax + 0x24], 0x20
je 0x28cdc17
mov eax, dword [ebp - 0x2c]
cmp byte [eax + 0x45], 0
jne 0x28cdc17
mov ecx, edi
call fcn.0289950e
mov edx, dword [esi - 0x20]
mov dword [ebp - 0xc], eax
call fcn.02899912
mov ecx, eax
mov eax, dword [ebp - 0xc]
cmp dword [esi - 0x20], eax
jge 0x28cdc14
sub eax, dword [esi - 0x20]
lea ebx, [ecx + 4]
mov dword [ebp - 0xc], eax
mov edi, eax
mov eax, dword [ebx]
cmp eax, dword [esi - 0x3c]
jne 0x28cdc08
mov al, byte [ebx - 4]
cmp al, 0x60
jne 0x28cdbf2
mov eax, dword [ebp - 0x20]
mov edx, dword [ebx + 4]
test byte [eax + 0x24], 0x20
je 0x28cdbe0
mov ecx, eax
call fcn.028ae23e
mov eax, dword [eax + 4]
movsx edx, word [eax + edx*2]
mov ecx, dword [ebp - 0x28]
call fcn.028ae256
cwde
test eax, eax
js 0x28cdc08
mov dword [ebx + 4], eax
jmp 0x28cdc03
cmp al, 0x7b
jne 0x28cdbff
mov eax, dword [esi - 0x38]
mov byte [ebx - 4], 0x81
jmp 0x28cdc06
cmp al, 0x17
jne 0x28cdc08
mov eax, dword [esi - 0x38]
mov dword [ebx], eax
add ebx, 0x14
dec edi
jne 0x28cdbb8
mov edi, dword [ebp - 0x30]
mov ebx, dword [ebp - 0x10]
mov edx, dword [ebp - 4]
mov ecx, dword [ebp - 0x24]
add esi, 0x50
movzx eax, byte [ebx + 0x2e]
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, eax
jl 0x28cdb15
mov edx, dword [ebp - 8]
mov eax, dword [ebx + 0x28]
mov ecx, dword [ebp - 0x2c]
mov dword [edx + 0x84], eax
mov edx, ebx
call fcn.028ca3cc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret