Function at 0x28c0d7b
Capabilities:
Resolve function by parsing pe exports
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xf4
push ebx
mov ebx, ecx
xor ecx, ecx
inc ecx
mov dword [esp + 0x40], ebx
push esi
push edi
mov eax, dword [ebx + 0x19c]
mov edi, edx
mov dword [esp + 0xb8], eax
mov eax, dword [ebx + 0x1a0]
mov dword [ebx + 0x19c], eax
inc eax
mov dword [ebx + 0x1a0], eax
mov eax, dword [ebx]
mov dword [esp + 0x50], edi
mov dword [esp + 0x58], ecx
mov dword [esp + 0x30], eax
test edi, edi
je 0x28c1fbc
cmp byte [eax + 0x45], 0
jne 0x28c1fbc
xor eax, eax
cmp dword [ebx + 0x24], eax
jne 0x28c1fbc
push eax
push eax
push eax
push 0x15
pop edx
mov ecx, ebx
call fcn.028ad74f
add esp, 0xc
test eax, eax
je 0x28c0dfc
xor eax, eax
inc eax
jmp 0x28c1fbe
push 0x30
lea eax, [esp + 0x8c]
push 0
push eax
call fcn.028dab50
mov eax, dword [ebp + 8]
add esp, 0xc
mov esi, dword [esp + 0x30]
cmp byte [eax], 8
ja 0x28c0e2e
mov edx, dword [edi + 0x2c]
mov ecx, esi
call fcn.028a7f14
and dword [edi + 0x2c], 0
and dword [edi + 8], 0xfffffffe
push 0
mov edx, edi
mov ecx, ebx
call fcn.028c0893
pop ecx
push 0x20
lea eax, [esp + 0x6c]
push 0
push eax
call fcn.028dab50
mov eax, dword [edi + 0x2c]
add esp, 0xc
cmp dword [ebx + 0x24], 0
mov dword [esp + 0x68], eax
mov eax, dword [edi + 0x1c]
mov dword [esp + 0x1c], eax
jne 0x28c1f89
cmp byte [esi + 0x45], 0
jne 0x28c1f89
mov eax, dword [edi + 8]
mov ecx, ebx
shr eax, 3
and eax, 1
mov dword [esp + 0x2c], eax
call fcn.028bdf3f
mov esi, eax
mov dword [esp + 0x20], esi
test esi, esi
je 0x28c1f89
mov eax, dword [ebp + 8]
cmp byte [eax], 9
jne 0x28c0ea3
mov edx, edi
mov ecx, ebx
call fcn.028bd9c7
mov eax, dword [ebp + 8]
xor edx, edx
mov dword [esp + 0x14], edx
cmp dword [edi + 0x30], edx
jne 0x28c0f68
mov ecx, dword [esp + 0x1c]
cmp edx, dword [ecx]
jge 0x28c0f68
imul eax, edx, 0x50
mov esi, dword [eax + ecx + 0x1c]
mov eax, dword [eax + ecx + 0x18]
mov dword [esp + 0x3c], eax
mov eax, esi
mov dword [esp + 0x34], esi
mov esi, dword [esp + 0x20]
test eax, eax
je 0x28c0f56
mov ecx, dword [esp + 0x3c]
mov eax, dword [eax]
movsx ecx, word [ecx + 0x2a]
cmp ecx, dword [eax]
mov eax, dword [esp + 0x34]
jne 0x28c0f8b
mov eax, dword [eax + 8]
mov ecx, ebx
shr eax, 3
and eax, 1
push eax
push dword [esp + 0x30]
mov dword [esp + 0x20], eax
push edx
mov edx, edi
call fcn.028bf5c1
add esp, 0xc
test eax, eax
je 0x28c0f2e
cmp dword [esp + 0x18], 0
je 0x28c0f29
push 8
pop eax
or dword [edi + 8], eax
mov dword [esp + 0x2c], 1
or edx, 0xffffffff
jmp 0x28c0f32
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x30]
mov ecx, dword [edi + 0x1c]
mov dword [esp + 0x1c], ecx
cmp byte [eax + 0x45], 0
jne 0x28c1f89
mov eax, dword [ebp + 8]
cmp byte [eax], 8
jbe 0x28c0f59
mov eax, dword [edi + 0x2c]
mov dword [esp + 0x68], eax
mov eax, dword [ebp + 8]
inc edx
cmp dword [edi + 0x30], 0
mov dword [esp + 0x14], edx
je 0x28c0eb6
cmp dword [edi + 0x30], 0
je 0x28c0fad
push eax
mov edx, edi
mov ecx, ebx
call fcn.028be452
pop ecx
mov ecx, dword [esp + 0xb8]
mov dword [ebx + 0x19c], ecx
jmp 0x28c1fbe
mov eax, dword [eax]
push dword [eax]
mov eax, dword [esp + 0x40]
push dword [eax]
movsx eax, word [eax + 0x2a]
push eax
push 0x4ad938
push ebx
call fcn.02884527
add esp, 0x14
jmp 0x28c1f89
mov ecx, dword [esp + 0x1c]
xor eax, eax
mov dword [esp + 0x34], eax
cmp dword [ecx], eax
jle 0x28c1271
imul eax, eax, 0x50
add eax, 8
add ecx, eax
mov dword [esp + 0x10], ecx
mov eax, dword [ecx + 0x40]
or eax, dword [ecx + 0x44]
jne 0x28c0fef
push dword [ecx + 4]
push 0x4a3288
push dword [ecx + 8]
mov ecx, ebx
push 0x14
pop edx
call fcn.028ad74f
mov ecx, dword [esp + 0x1c]
add esp, 0xc
mov eax, dword [ecx + 0x14]
mov dword [esp + 0x24], eax
test eax, eax
je 0x28c125c
cmp dword [ecx + 0x18], 0
je 0x28c1025
test byte [ecx + 0x28], 0x10
jne 0x28c125c
push dword [ecx + 0x18]
push dword [ecx + 0x1c]
mov ecx, esi
push 0xe
pop edx
call fcn.02899192
pop ecx
pop ecx
jmp 0x28c125c
mov ecx, edi
call fcn.028a6fcf
mov edx, dword [esp + 0x10]
add dword [ebx + 0x198], eax
test byte [edx + 0x24], 0x20
jne 0x28c1053
push dword [edx + 0x30]
mov edx, dword [esp + 0x28]
mov ecx, ebx
push dword [edi + 0x20]
call fcn.028bfaff
mov edx, dword [esp + 0x18]
pop ecx
pop ecx
cmp dword [esp + 0x34], 0
jne 0x28c1132
mov eax, dword [esp + 0x1c]
cmp dword [eax], 1
je 0x28c1071
test byte [eax + 0x7c], 0xa
je 0x28c1132
test byte [edi + 8], 2
jne 0x28c1132
mov eax, dword [esp + 0x30]
mov ecx, 0x100
test word [eax + 0x40], cx
jne 0x28c1132
mov ecx, esi
call fcn.0289950e
mov ecx, dword [esp + 0x20]
lea esi, [eax + 1]
mov eax, dword [ebx + 0x2c]
push esi
inc eax
push 0
push eax
mov dword [ebx + 0x2c], eax
mov dword [edx + 0x1c], eax
push 0xf
pop edx
call fcn.0289910e
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0xc8]
add esp, 0xc
mov dword [eax + 0x18], esi
push dword [eax + 0x1c]
push 0xd
pop edx
call fcn.028bc33f
mov ecx, dword [esp + 0x14]
add esp, 4
mov al, byte [ebx + 0x1a0]
mov edx, dword [esp + 0x24]
mov byte [ecx + 0x2c], al
lea eax, [esp + 0xbc]
push eax
mov ecx, ebx
call fcn.028c0d7b
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x28]
pop ecx
mov ecx, dword [edx + 0x10]
mov ax, word [eax + 6]
mov word [ecx + 0x2c], ax
mov eax, dword [esp + 0xc4]
or dword [edx + 0x28], 0x10
mov ecx, dword [esp + 0x20]
mov dword [edx + 0x20], eax
mov edx, dword [edx + 0x1c]
call fcn.02899341
lea edx, [esi - 1]
mov esi, dword [esp + 0x20]
mov ecx, esi
call fcn.02899643
jmp 0x28c123a
xor eax, eax
mov ecx, esi
mov dword [esp + 0x14], eax
mov eax, dword [ebx + 0x2c]
inc eax
push eax
push 0
mov dword [ebx + 0x2c], eax
mov dword [edx + 0x1c], eax
push 0x38
pop edx
call fcn.02899192
pop ecx
pop ecx
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x40], eax
inc eax
test byte [ecx + 0x28], 8
mov dword [ecx + 0x18], eax
jne 0x28c1175
push 0x14
pop edx
mov ecx, esi
call fcn.02899170
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x14], eax
mov edx, ecx
mov ecx, dword [esp + 0x1c]
call fcn.028c0d13
mov dword [esp + 0x18], eax
test eax, eax
je 0x28c11bd
push dword [eax + 0x30]
mov eax, dword [esp + 0x14]
mov ecx, esi
push dword [eax + 0x30]
push 0x6a
pop edx
call fcn.02899192
mov edx, dword [esp + 0x20]
pop ecx
pop ecx
mov ecx, dword [esp + 0x10]
mov al, byte [edx + 0x2c]
mov byte [ecx + 0x2c], al
mov eax, dword [edx + 0x14]
mov ecx, dword [esp + 0x24]
mov ax, word [eax + 6]
mov word [ecx + 6], ax
jmp 0x28c11f7
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0xbc]
push dword [eax + 0x30]
push 0xc
pop edx
call fcn.028bc33f
mov ecx, dword [esp + 0x14]
add esp, 4
mov al, byte [ebx + 0x1a0]
mov edx, dword [esp + 0x24]
mov byte [ecx + 0x2c], al
lea eax, [esp + 0xbc]
push eax
mov ecx, ebx
call fcn.028c0d7b
pop ecx
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 0x10]
mov eax, dword [esp + 0x24]
mov ax, word [eax + 6]
mov word [ecx + 0x2c], ax
mov eax, dword [esp + 0x14]
test eax, eax
je 0x28c121b
mov edx, eax
mov ecx, esi
call fcn.02899643
mov eax, dword [esp + 0x10]
mov ecx, esi
push dword [eax + 0x1c]
push 0x34
pop edx
call fcn.0289917e
mov edx, dword [esp + 0x44]
pop ecx
push eax
mov ecx, esi
call fcn.028995fb
pop ecx
mov ecx, ebx
call fcn.028ab4c5
mov eax, dword [esp + 0x30]
cmp byte [eax + 0x45], 0
jne 0x28c1f89
mov ecx, edi
call fcn.028a6fcf
sub dword [ebx + 0x198], eax
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x1c]
inc eax
mov dword [esp + 0x34], eax
cmp eax, dword [ecx]
jl 0x28c0fbf
mov eax, dword [edi + 0x20]
xor ecx, ecx
mov edx, dword [edi]
inc ecx
mov dword [esp + 0x38], eax
mov eax, dword [edi + 0x24]
mov dword [esp + 0x10], eax
mov eax, dword [edi + 0x28]
mov dword [esp + 0x4c], eax
mov al, byte [edi + 8]
and al, cl
mov dword [esp + 0x24], edx
mov byte [esp + 0xf], al
mov byte [esp + 0xbc], al
mov eax, dword [edi + 8]
and al, 9
cmp al, cl
jne 0x28c12d2
mov ecx, dword [esp + 0x68]
push 0xffffffffffffffff
call fcn.028aaef5
pop ecx
test eax, eax
jne 0x28c12d2
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x30]
and dword [edi + 8], 0xfffffffe
push eax
call fcn.028a7855
pop ecx
mov dword [esp + 0x10], eax
mov dword [edi + 0x24], eax
mov edx, dword [esp + 0x68]
test edx, edx
je 0x28c1324
mov eax, dword [esp + 0x24]
mov ecx, ebx
push dword [eax]
push 0
call fcn.028bd3aa
mov edx, dword [ebx + 0x28]
mov ecx, eax
push 0xfffffffffffffff7
push ecx
mov dword [esp + 0x80], edx
lea eax, [edx + 1]
mov dword [ebx + 0x28], eax
mov eax, dword [esp + 0x34]
push 0
mov ecx, dword [eax]
mov eax, dword [esp + 0x7c]
inc ecx
mov eax, dword [eax]
add eax, ecx
mov ecx, esi
push eax
push edx
push 0x6c
pop edx
call fcn.02899258
add esp, 0x1c
mov dword [esp + 0x7c], eax
jmp 0x28c1329
or dword [esp + 0x7c], 0xffffffff
mov eax, dword [ebp + 8]
cmp byte [eax], 0xc
jne 0x28c1346
mov ecx, dword [esp + 0x24]
push dword [ecx]
mov ecx, esi
push dword [eax + 4]
push 0x6c
pop edx
call fcn.02899192
pop ecx
pop ecx
mov ecx, esi
call fcn.0289935e
mov ecx, 0x4000
mov dword [esp + 0xdc], eax
test dword [edi + 8], ecx
jne 0x28c1367
mov ecx, 0x140
mov word [edi + 6], cx
push eax
mov edx, edi
mov ecx, ebx
call fcn.028bdf4e
cmp dword [edi + 0xc], 0
pop ecx
jne 0x28c1392
mov edx, dword [esp + 0x7c]
test edx, edx
js 0x28c1392
push 0x6d
mov ecx, esi
call fcn.028995ec
or byte [esp + 0x88], 1
pop ecx
test byte [edi + 8], 1
je 0x28c13ea
mov esi, dword [ebx + 0x28]
push 0xfffffffffffffff7
push ecx
push 0
lea eax, [esi + 1]
mov dword [esp + 0xcc], esi
mov dword [ebx + 0x28], eax
mov ecx, ebx
mov edx, dword [edi]
push 0
call fcn.028bd3aa
add esp, 0xc
push eax
push 0
push 0
push esi
mov esi, dword [esp + 0x34]
mov ecx, esi
push 0x6c
pop edx
call fcn.02899258
add esp, 0x14
mov dword [esp + 0xc4], eax
mov ecx, esi
push 8
pop eax
mov edx, eax
call fcn.0289962b
push 3
pop eax
jmp 0x28c13ec
xor al, al
cmp dword [esp + 0x2c], 0
mov byte [esp + 0xbd], al
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x10]
jne 0x28c151b
test eax, eax
jne 0x28c151b
xor ecx, ecx
mov eax, 0x100
cmp byte [esp + 0xf], cl
mov edx, 0x4000
cmovne ecx, eax
mov ax, word [edi + 8]
and ax, dx
mov edx, dword [esp + 0x1c]
or cx, ax
movsx eax, word [edi + 6]
push eax
movzx ecx, cx
push ecx
push dword [edi]
mov ecx, ebx
push dword [esp + 0x74]
push dword [esp + 0x48]
call fcn.028cd016
mov ecx, eax
add esp, 0x14
mov dword [esp + 0x4c], ecx
test ecx, ecx
je 0x28c1f89
call fcn.028c926e
cmp ax, word [edi + 6]
jge 0x28c1469
mov word [edi + 6], ax
cmp byte [esp + 0xf], 0
je 0x28c1495
call fcn.028c9273
mov edx, dword [esp + 0x34]
mov ecx, eax
test ecx, ecx
movzx eax, cl
mov ecx, dword [esp + 0x4c]
movzx edx, dl
cmovne edx, eax
mov dword [esp + 0x34], edx
mov byte [esp + 0xbd], dl
mov eax, dword [esp + 0x68]
mov dword [esp + 0x18], eax
test eax, eax
je 0x28c14c7
call fcn.028c9278
mov edx, eax
mov dword [esp + 0x6c], edx
call fcn.028c927d
mov byte [esp + 0x85], al
xor ecx, ecx
mov eax, dword [esp + 0x18]
cmp edx, dword [eax]
cmove eax, ecx
mov dword [esp + 0x68], eax
mov edx, dword [esp + 0x7c]
test edx, edx
js 0x28c14da
test eax, eax
jne 0x28c14da
mov ecx, esi
call fcn.0289978a
mov ecx, dword [esp + 0x4c]
call fcn.02869b04
push eax
call fcn.028c9282
push eax
mov eax, dword [ebp + 8]
mov edx, edi
push eax
lea eax, [esp + 0xc8]
mov ecx, ebx
push eax
lea eax, [esp + 0x78]
push eax
push 0xffffffffffffffff
push dword [esp + 0x3c]
call fcn.028bcc76
mov ecx, dword [esp + 0x68]
add esp, 0x1c
call fcn.028cd836
jmp 0x28c1f22
and dword [esp + 0x44], 0
and dword [esp + 0x18], 0
test eax, eax
je 0x28c156a
mov edx, dword [edi]
mov ecx, dword [edx]
test ecx, ecx
jle 0x28c1545
add edx, 0x1e
xor esi, esi
dec ecx
mov word [edx], si
lea edx, [edx + 0x18]
test ecx, ecx
jg 0x28c1534
mov esi, dword [esp + 0x20]
mov ecx, dword [eax]
test ecx, ecx
jle 0x28c155f
lea edx, [eax + 0x1e]
xor esi, esi
dec ecx
mov word [edx], si
lea edx, [edx + 0x18]
test ecx, ecx
jg 0x28c154e
mov esi, dword [esp + 0x20]
push 0x42
pop ecx
cmp word [edi + 6], cx
jle 0x28c1570
jmp 0x28c156c
xor ecx, ecx
mov word [edi + 6], cx
mov edx, dword [esp + 0x68]
mov ecx, eax
push 0xffffffffffffffff
call fcn.028aaef5
pop ecx
xor ecx, ecx
test eax, eax
push 1
pop eax
cmove ecx, eax
mov dword [esp + 0x40], ecx
mov ecx, esi
call fcn.0289935e
push 0x20
mov dword [esp + 0x58], eax
lea eax, [esp + 0xe4]
push 0
push eax
call fcn.028dab50
mov ecx, dword [esp + 0x28]
lea eax, [esp + 0x94]
mov dword [esp + 0xf8], eax
add esp, 0xc
mov eax, dword [ebx + 0x2c]
mov dword [esp + 0xe4], ecx
inc eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xe0], ebx
mov dword [esp + 0x98], eax
test ecx, ecx
je 0x28c15e9
mov eax, dword [ecx]
mov dword [esp + 0x94], eax
jmp 0x28c15f1
and dword [esp + 0x94], 0
mov edx, dword [esp + 0x24]
mov dword [esp + 0xa0], ecx
lea ecx, [esp + 0xe0]
call fcn.028ab3c5
mov edx, dword [esp + 0x68]
lea ecx, [esp + 0xe0]
call fcn.028ab3c5
mov edx, dword [esp + 0x4c]
test edx, edx
je 0x28c164f
mov eax, dword [esp + 0x10]
test eax, eax
je 0x28c1643
lea ecx, [edi + 0x20]
push ecx
push edx
mov edx, eax
mov ecx, ebx
call fcn.028c0cd1
mov eax, dword [edi + 0x20]
mov edx, dword [esp + 0x54]
pop ecx
pop ecx
mov dword [esp + 0x38], eax
lea ecx, [esp + 0xe0]
call fcn.028ab397
and dword [esp + 0x14], 0
cmp dword [esp + 0xb4], 0
mov edx, dword [esp + 0xa8]
mov dword [esp + 0xac], edx
jle 0x28c16d9
mov ax, word [esp + 0xfc]
xor edi, edi
mov esi, dword [esp + 0x14]
push 8
pop ebx
or ax, bx
lea ecx, [esp + 0xe0]
mov word [esp + 0xfc], ax
mov eax, dword [esp + 0xb0]
mov edx, dword [eax + edi]
mov edx, dword [edx + 0x14]
call fcn.028ab3c5
mov ax, word [esp + 0xfc]
lea edi, [edi + 0x10]
mov ecx, 0xfff7
and ax, cx
inc esi
mov word [esp + 0xfc], ax
cmp esi, dword [esp + 0xb4]
jl 0x28c167d
mov edx, dword [esp + 0xa8]
mov ebx, dword [esp + 0x48]
mov edi, dword [esp + 0x50]
mov esi, dword [esp + 0x20]
mov eax, dword [ebx + 0x2c]
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0x30]
cmp byte [eax + 0x45], 0
jne 0x28c1f89
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x28c1c94
mov eax, dword [ebx + 0x28]
push edx
mov dword [esp + 0x90], eax
mov edx, ecx
inc eax
mov ecx, ebx
push 0
mov dword [ebx + 0x28], eax
call fcn.028bd3aa
push 0xfffffffffffffff7
push eax
push 0
push dword [esp + 0xa8]
mov ecx, esi
mov dword [esp + 0xf0], eax
push dword [esp + 0xa4]
push 0x6d
pop edx
call fcn.02899258
mov dword [esp + 0xf0], eax
add esp, 0x1c
mov eax, dword [ebx + 0x2c]
mov ecx, esi
inc eax
mov dword [esp + 0x48], eax
inc eax
mov dword [esp + 0x28], eax
inc eax
mov dword [ebx + 0x2c], eax
call fcn.0289935e
inc dword [ebx + 0x2c]
mov ecx, esi
mov dword [esp + 0x60], eax
mov eax, dword [ebx + 0x2c]
mov dword [esp + 0x14], eax
call fcn.0289935e
mov ecx, dword [ebx + 0x2c]
mov edx, dword [esp + 0x10]
push dword [esp + 0x28]
mov dword [esp + 0x40], eax
lea eax, [ecx + 1]
add ecx, dword [edx]
mov dword [esp + 0x68], eax
mov dword [ebx + 0x2c], ecx
push 0
lea eax, [ecx + 1]
mov dword [esp + 0x34], eax
mov eax, dword [edx]
add eax, ecx
mov ecx, esi
push 0x38
pop edx
mov dword [ebx + 0x2c], eax
call fcn.02899192
push dword [esp + 0x50]
mov ecx, esi
push 0
push 0x38
pop edx
call fcn.02899192
mov ecx, dword [esp + 0x20]
mov eax, dword [ecx]
mov ecx, dword [esp + 0x74]
dec eax
add eax, ecx
push eax
push ecx
push 0
push 0x3b
pop edx
mov ecx, esi
call fcn.0289910e
add esp, 0x1c
mov ecx, esi
push dword [esp + 0x3c]
push dword [esp + 0x18]
push 0xe
pop edx
call fcn.02899192
mov eax, dword [esp + 0x48]
push 0
mov edx, dword [esp + 0x28]
neg eax
mov ecx, ebx
sbb eax, eax
and eax, 0x200
or ax, 0x40
movzx eax, ax
push eax
push 0
push dword [esp + 0x24]
push dword [esp + 0x50]
call fcn.028cd016
mov edx, eax
add esp, 0x1c
mov dword [esp + 0x5c], edx
test edx, edx
je 0x28c1f89
mov ecx, edx
call fcn.028c9278
mov ecx, dword [esp + 0x10]
cmp eax, dword [ecx]
jne 0x28c183e
xor edi, edi
mov dword [esp + 0x58], edi
jmp 0x28c19d2
cmp byte [esp + 0xf], 0
je 0x28c1850
test byte [edi + 8], 1
mov edx, 0x4a4324
je 0x28c1855
mov edx, 0x4ad960
mov ecx, ebx
call fcn.028bd457
mov esi, dword [esp + 0x10]
mov eax, dword [esp + 0xa8]
mov dword [esp + 0x58], 1
mov dword [esp + 0x44], eax
mov edi, dword [esi]
mov ecx, edi
mov dword [esp + 0x38], edi
mov edx, edi
test eax, eax
jle 0x28c189e
mov eax, dword [esp + 0xa4]
add eax, 0xc
cmp dword [eax], edx
jl 0x28c1891
inc ecx
inc edx
add eax, 0x18
dec dword [esp + 0x44]
jne 0x28c188b
mov dword [esp + 0x38], ecx
mov edx, ecx
mov ecx, ebx
call fcn.028ab45d
mov ecx, ebx
mov dword [esp + 0x1c], eax
call fcn.028a96be
push 0
push 0
push dword [esp + 0x24]
mov edx, esi
mov ecx, ebx
call fcn.028aa592
mov ecx, dword [esp + 0xb4]
xor eax, eax
add esp, 0xc
mov dword [esp + 0x44], eax
test ecx, ecx
jle 0x28c191a
xor esi, esi
mov edx, dword [esp + 0xa4]
cmp dword [edx + esi + 0xc], edi
jl 0x28c190e
mov eax, dword [esp + 0x1c]
mov ecx, ebx
add eax, edi
push eax
push dword [edx + esi + 4]
push dword [edx + esi + 8]
mov edx, dword [edx + esi]
call fcn.028a968c
mov ecx, dword [esp + 0xb4]
add esp, 0xc
mov eax, dword [esp + 0x44]
inc edi
inc eax
add esi, 0x18
mov dword [esp + 0x44], eax
cmp eax, ecx
jl 0x28c18d9
mov ecx, ebx
call fcn.028ab3fb
mov ecx, dword [esp + 0x20]
mov esi, eax
push esi
push dword [esp + 0x3c]
push dword [esp + 0x24]
push 0x63
pop edx
call fcn.0289910e
mov ecx, dword [esp + 0x2c]
add esp, 0xc
push esi
push dword [esp + 0x90]
push 0x7d
pop edx
call fcn.02899192
mov edx, esi
mov ecx, ebx
call fcn.028ab41a
mov esi, dword [esp + 0x40]
mov edx, dword [esp + 0x24]
push esi
call fcn.028ab493
mov ecx, dword [esp + 0x68]
add esp, 0xc
call fcn.028cd836
mov edx, dword [ebx + 0x28]
mov ecx, ebx
mov dword [esp + 0x44], edx
mov dword [esp + 0x90], edx
lea eax, [edx + 1]
mov dword [ebx + 0x28], eax
call fcn.028ab3fb
push esi
mov esi, dword [esp + 0x24]
mov ecx, esi
push eax
push edx
push 0x6f
pop edx
mov dword [esp + 0x24], eax
call fcn.0289910e
add esp, 0xc
mov ecx, esi
push dword [esp + 0x54]
push dword [esp + 0x90]
push 0x23
pop edx
call fcn.02899192
pop ecx
pop ecx
mov ecx, ebx
mov byte [esp + 0x89], 1
call fcn.028a96be
mov edx, dword [esp + 0x5c]
xor edi, edi
inc edi
cmp dword [esp + 0x40], 0
je 0x28c1a02
mov eax, dword [esp + 0x30]
test byte [eax + 0x40], 4
jne 0x28c1a02
test edi, edi
jne 0x28c19f2
mov ecx, edx
call fcn.028cc7a1
test eax, eax
je 0x28c1a02
mov edx, dword [esp + 0x7c]
mov ecx, esi
and dword [esp + 0x68], 0
call fcn.0289978a
mov ecx, esi
call fcn.0289950e
mov ecx, ebx
mov dword [esp + 0x38], eax
call fcn.028a96be
test edi, edi
je 0x28c1a34
push dword [esp + 0x44]
mov ecx, esi
push dword [esp + 0x1c]
push dword [esp + 0x94]
push 0x79
pop edx
call fcn.0289910e
add esp, 0xc
mov edi, dword [esp + 0x10]
xor ecx, ecx
mov dword [esp + 0x18], ecx
cmp dword [edi], ecx
jle 0x28c1a95
lea edx, [edi + 8]
mov dword [esp + 0x40], edx
mov eax, dword [esp + 0x2c]
add eax, ecx
cmp dword [esp + 0x58], 0
push eax
je 0x28c1a6b
push ecx
push dword [esp + 0x4c]
mov ecx, esi
push 0x60
pop edx
call fcn.0289910e
add esp, 0xc
jmp 0x28c1a7d
mov byte [esp + 0x8c], 1
mov ecx, ebx
mov edx, dword [edx]
call fcn.028aa4a0
pop ecx
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x40]
inc ecx
add edx, 0x18
mov dword [esp + 0x18], ecx
mov dword [esp + 0x40], edx
cmp ecx, dword [edi]
jl 0x28c1a49
mov ecx, dword [esp + 0xd8]
push 0xfffffffffffffff7
call fcn.028bd3a1
push eax
push dword [edi]
mov ecx, esi
push dword [esp + 0x38]
push dword [esp + 0x74]
push 0x5e
pop edx
call fcn.02899258
add esp, 0x14
mov ecx, esi
call fcn.0289950e
mov edi, dword [esp + 0x20]
mov esi, eax
mov ecx, edi
lea eax, [esi + 1]
push eax
push 0
push eax
push 0x12
pop edx
call fcn.0289910e
mov eax, dword [esp + 0x1c]
add esp, 0xc
mov edx, dword [esp + 0x2c]
mov ecx, ebx
push dword [eax]
push dword [esp + 0x68]
call fcn.028a9708
push dword [esp + 0x68]
mov eax, dword [esp + 0x34]
mov ecx, edi
inc eax
push eax
push 0xe
pop edx
call fcn.02899192
push dword [esp + 0x64]
mov ecx, edi
push dword [esp + 0x3c]
push 0x2e
pop edx
call fcn.02899192
push dword [esp + 0x54]
mov ecx, edi
push dword [esp + 0x30]
push 0xe
pop edx
call fcn.02899192
mov edx, esi
mov esi, edi
mov ecx, esi
call fcn.02899643
lea edx, [esp + 0xa8]
mov ecx, ebx
call fcn.028c09dc
push dword [esp + 0x68]
mov ecx, esi
push 1
push 0x38
pop edx
call fcn.02899192
add esp, 0x28
cmp dword [esp + 0x58], 0
je 0x28c1b75
push dword [esp + 0x38]
mov ecx, esi
push dword [esp + 0x90]
push 3
pop edx
call fcn.02899192
pop ecx
pop ecx
jmp 0x28c1b8c
mov ecx, dword [esp + 0x5c]
call fcn.028cd836
mov edx, dword [esp + 0xd4]
mov ecx, esi
call fcn.0289978a
push dword [esp + 0x60]
mov eax, dword [esp + 0x2c]
mov ecx, esi
inc eax
push eax
push 0xe
pop edx
call fcn.02899192
mov edx, dword [esp + 0x5c]
mov ecx, esi
call fcn.028991a7
mov ecx, esi
call fcn.0289950e
push dword [esp + 0x30]
mov edi, eax
push 1
push 0x38
pop edx
call fcn.02899192
mov eax, dword [esp + 0x38]
mov ecx, esi
inc eax
push eax
push 0x34
pop edx
call fcn.0289917e
mov edx, dword [esp + 0x74]
add esp, 0x14
mov ecx, esi
call fcn.028993a0
call fcn.0289950e
mov esi, eax
lea eax, [esi + 2]
push eax
push dword [esp + 0x4c]
push 0x2e
pop edx
call fcn.02899192
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x28]
inc eax
push eax
push 0x34
pop edx
call fcn.0289917e
add esp, 0xc
lea edx, [esp + 0x88]
mov ecx, ebx
call fcn.028c0983
push 0x10
inc esi
push esi
push dword [esp + 0x54]
push ebx
call fcn.028aa9f2
mov eax, dword [ebp + 8]
mov ecx, ebx
push edi
mov edi, dword [esp + 0x64]
mov edx, edi
push esi
push eax
lea eax, [esp + 0xd8]
push eax
lea eax, [esp + 0x88]
push eax
push 0xffffffffffffffff
push dword [edi]
call fcn.028bcc76
mov eax, dword [esp + 0x54]
add esp, 0x2c
mov esi, dword [esp + 0x20]
inc eax
mov ecx, esi
push eax
push 0x34
pop edx
call fcn.0289917e
mov edx, dword [esp + 0x40]
pop ecx
mov ecx, esi
call fcn.028993a0
lea edx, [esp + 0x88]
mov ecx, ebx
call fcn.028c08eb
push dword [esp + 0x14]
mov ecx, esi
push 0x34
pop edx
call fcn.0289917e
pop ecx
jmp 0x28c1f17
and dword [esp + 0x3c], 0
lea edx, [esp + 0x88]
mov ecx, edi
call fcn.028bfc28
mov dword [esp + 0x28], eax
test eax, eax
je 0x28c1de3
mov edx, dword [eax + 0x48]
mov ecx, dword [ebx]
call fcn.028bbc8a
mov edx, dword [esp + 0x28]
mov ecx, eax
mov eax, dword [ebx + 0x28]
mov dword [esp + 0x14], eax
inc eax
mov dword [ebx + 0x28], eax
xor eax, eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x2c], eax
mov eax, dword [edx + 0x1c]
mov edx, ecx
mov dword [esp + 0x18], ecx
mov ecx, ebx
mov dword [esp + 0x40], eax
call fcn.028b16df
mov eax, dword [esp + 0x28]
mov ecx, ebx
mov edx, dword [esp + 0x18]
push dword [eax]
push 0
push dword [eax + 0x1c]
call fcn.028ad7f8
mov edx, dword [esp + 0x34]
add esp, 0xc
test byte [edx + 0x24], 0x20
je 0x28c1d1e
mov ecx, edx
call fcn.028ae23e
mov ecx, eax
mov dword [esp + 0x2c], ecx
jmp 0x28c1d22
mov ecx, dword [esp + 0x2c]
mov eax, dword [edx + 8]
test eax, eax
je 0x28c1d5a
test byte [eax + 0x38], 4
jne 0x28c1d4b
movzx edi, word [eax + 0x30]
cmp di, word [edx + 0x2e]
jge 0x28c1d4b
cmp dword [eax + 0x24], 0
jne 0x28c1d4b
test ecx, ecx
je 0x28c1d49
cmp di, word [ecx + 0x30]
jge 0x28c1d4b
mov ecx, eax
mov eax, dword [eax + 0x14]
test eax, eax
jne 0x28c1d29
mov edi, dword [esp + 0x50]
mov dword [esp + 0x2c], ecx
test ecx, ecx
je 0x28c1d72
mov eax, dword [ecx + 0x2c]
mov edx, ecx
mov ecx, ebx
mov dword [esp + 0x40], eax
call fcn.028b1b7b
mov dword [esp + 0x48], eax
push 1
push dword [esp + 0x1c]
mov ecx, esi
push dword [esp + 0x48]
push dword [esp + 0x20]
push 0x68
pop edx
call fcn.0289930f
mov eax, dword [esp + 0x58]
add esp, 0x10
test eax, eax
je 0x28c1da4
push 0xfffffffffffffff7
push eax
or edx, 0xffffffff
mov ecx, esi
call fcn.0289984a
pop ecx
pop ecx
mov eax, dword [esp + 0xb0]
mov ecx, esi
push dword [eax + 8]
push dword [esp + 0x18]
push 0x64
pop edx
call fcn.02899192
push dword [esp + 0x1c]
mov ecx, esi
push 0x70
pop edx
call fcn.0289917e
mov eax, dword [esp + 0x38]
add esp, 0xc
mov edx, dword [esp + 0x28]
mov ecx, ebx
push eax
call fcn.028c0bd0
pop ecx
jmp 0x28c1ed7
xor eax, eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x50], eax
mov byte [esp + 0xf], al
cmp dword [edi + 0x28], eax
jne 0x28c1e4d
lea edx, [esp + 0x50]
lea ecx, [esp + 0x88]
call fcn.028bfbc4
mov byte [esp + 0xf], al
test al, al
je 0x28c1e45
mov edx, dword [esp + 0x50]
mov ecx, dword [esp + 0x30]
push 0
call fcn.028a7855
pop ecx
mov ecx, eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x3c], ecx
cmp byte [eax + 0x45], 0
jne 0x28c1e4d
cmp byte [esp + 0xf], 1
setne al
mov byte [ecx + 0x14], al
mov eax, dword [ecx + 8]
mov byte [eax], 0x98
jmp 0x28c1e4d
mov eax, dword [esp + 0x50]
mov dword [esp + 0x14], eax
lea edx, [esp + 0x88]
mov ecx, ebx
call fcn.028c08eb
mov al, byte [esp + 0xf]
mov ecx, ebx
mov edx, dword [esp + 0x1c]
push 0
movzx eax, al
push eax
push 0
push dword [esp + 0x20]
push dword [esp + 0x48]
call fcn.028cd016
add esp, 0x14
mov dword [esp + 0x18], eax
test eax, eax
jne 0x28c1e97
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x30]
call fcn.028a7f14
jmp 0x28c1f89
lea edx, [esp + 0x88]
mov ecx, ebx
call fcn.028c09dc
mov ecx, dword [esp + 0x18]
call fcn.028c9278
test eax, eax
jle 0x28c1ec4
call fcn.02869b04
mov edx, eax
mov ecx, esi
call fcn.028991a7
mov ecx, dword [esp + 0x18]
call fcn.028cd836
lea edx, [esp + 0x88]
mov ecx, ebx
call fcn.028c0983
and dword [esp + 0x68], 0
push 0x10
push dword [esp + 0x58]
push dword [esp + 0x54]
push ebx
call fcn.028aa9f2
mov eax, dword [esp + 0x64]
mov edx, edi
push eax
push eax
mov eax, dword [ebp + 8]
mov ecx, ebx
push eax
push 0
push 0
push 0xffffffffffffffff
push dword [edi]
call fcn.028bcc76
mov edx, dword [esp + 0x68]
add esp, 0x2c
mov ecx, dword [esp + 0x30]
call fcn.028a7f14
mov edx, dword [esp + 0x54]
mov ecx, esi
call fcn.028993a0
cmp byte [esp + 0x34], 3
jne 0x28c1f35
mov edx, 0x4a4324
mov ecx, ebx
call fcn.028bd457
cmp dword [esp + 0x68], 0
je 0x28c1f6f
cmp dword [esp + 0x6c], 0
mov eax, 0x4ad984
mov edx, 0x4ad96c
mov ecx, ebx
cmovle edx, eax
call fcn.028bd457
mov eax, dword [esp + 0x24]
mov edx, edi
push dword [ebp + 8]
mov ecx, ebx
push dword [eax]
lea eax, [esp + 0x70]
push eax
call fcn.028bd4f9
add esp, 0xc
mov edx, dword [esp + 0xdc]
mov ecx, esi
call fcn.028993a0
xor eax, eax
cmp dword [ebx + 0x24], eax
setg al
mov dword [esp + 0x58], eax
mov ecx, dword [esp + 0xb8]
mov edx, dword [esp + 0xa4]
mov dword [ebx + 0x19c], ecx
mov ecx, dword [esp + 0x30]
call fcn.02882404
mov edx, dword [esp + 0xb0]
mov ecx, dword [esp + 0x30]
call fcn.02882404
mov eax, dword [esp + 0x58]
jmp 0x28c1fbe
mov eax, ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret