Function at 0xbaab80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x2ec
mov edx, dword [esp + 0x308]
mov ebp, dword [esp + 0x30c]
mov ebx, dword [esp + 0x300]
mov edi, dword [edx + ebp*4]
mov ebp, dword [esp + 0x310]
mov eax, dword [edx + ebp*4]
mov ebp, dword [esp + 0x314]
mov edx, dword [edx + ebp*4]
mov dword [esp + 0x48], edx
mov edx, dword [esp + 0x310]
mov esi, dword [esp + 0x48]
cmp ebp, edx
mov ebp, dword [ebx + 0x3a520]
setl dl
movzx edx, dl
mov dword [esp + 0x40], edx
mov edx, dword [ebx + 0x3a524]
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x50], edx
mov edx, dword [ebx + 0x910]
mov ecx, dword [esp + 0x50]
mov edx, dword [edx + 0x43c]
mov dword [esp + 0x38], edx
mov edx, dword [esp + 0x48]
mov ebp, dword [edx + 0x5c]
lea edx, [ebx + 0x9d6c0]
mov dword [ebx + 0x9dba0], edx
mov dword [esp + 0x10], 8
imul ecx, ebp
add ecx, dword [esp + 0x4c]
mov dword [esp + 0xc], ebp
shl ecx, 3
mov dword [esp + 0x28], ecx
add ecx, dword [esi + 0x84]
mov esi, 0x10000000
mov dword [esp + 8], ecx
mov dword [esp], edx
mov dword [esp + 0x24], eax
mov dword [esp + 4], 0x10
call dword [ebx + 0x9f6a0]
mov edx, dword [esp + 0x310]
or edx, dword [esp + 0x30c]
or edx, dword [esp + 0x314]
mov eax, dword [esp + 0x24]
je 0xbab172
mov ecx, dword [ebx + 0x3a520]
neg ecx
shl ecx, 3
lea edx, [ecx - 4]
mov dword [ebx + 0x3a568], edx
mov edx, dword [ebx + 0x910]
lea ecx, [ecx*4 - 0x30]
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x3c], edx
mov edx, dword [ebx + 0x3a520]
mov esi, dword [esp + 0x3c]
not edx
add edx, dword [esi + 0x43c]
mov dword [ebx + 0x3a558], ecx
shl edx, 3
cmp dword [ebx + 0x3a520], 1
lea esi, [edx + 4]
lea edx, [edx*4 + 0x30]
mov dword [ebx + 0x3a570], esi
mov dword [esp + 0x34], edx
mov dword [ebx + 0x3a560], edx
jle 0xbab720
mov edx, dword [esp + 0x50]
imul edx, dword [esp + 0x38]
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x198], 3
mov dword [esp + 0x1d0], ebp
add ecx, edx
mov edx, dword [esp + 0x304]
shl ecx, 2
mov dword [esp + 0x5c], ecx
mov edx, dword [edx + 0xc]
mov dword [esp + 0x19c], edx
mov edx, dword [ebx + 0x9dba0]
mov dword [esp + 0x1c0], edx
mov edx, dword [esp + 0x28]
add edx, dword [edi + 0x84]
mov dword [esp + 0x1a8], edx
mov edx, dword [esp + 0x28]
add edx, dword [edi + 0x88]
mov dword [esp + 0x1ac], edx
mov edx, dword [esp + 0x28]
add edx, dword [edi + 0x8c]
mov dword [esp + 0x1b0], edx
mov edx, dword [esp + 0x28]
add edx, dword [edi + 0x90]
mov dword [esp + 0x1b4], edx
mov edx, dword [esp + 0x40]
test edx, edx
jne 0xbab3b0
lea esi, [esp + 0x198]
mov dword [esp + 0x58], 0x10000000
mov dword [esp + 0x54], esi
mov eax, dword [esp + 0x38]
lea edi, [esp + 0x1e4]
mov esi, dword [esp + 0x58]
mov dword [esp + 0x68], ebp
mov dword [esp + 0x20], ebx
neg eax
shl eax, 2
mov dword [esp + 0x60], eax
add eax, 4
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x38], 0
not eax
shl eax, 2
mov dword [esp + 0x64], eax
mov ebx, dword [esp + 0x20]
xor eax, eax
mov dword [esp + eax + 0x78], 0
add eax, 4
cmp eax, 0x20
jb 0xbaadbf
mov dword [esp + 0x20], ebx
mov ebp, dword [esp + 0x48]
mov ebx, dword [esp + 0x38]
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x5c]
add ecx, dword [ebp + ebx*4 + 0xcc]
test eax, eax
jle 0xbab7c0
movsx edx, word [ecx - 4]
mov ebx, 3
movsx eax, word [ecx - 2]
mov dword [esp + 0x44], 3
mov dword [esp + 0x30], 4
mov dword [esp + 0x78], edx
mov dword [esp + 0x7c], eax
mov dword [esp + 0x34], 2
mov dword [esp + 0x3c], 1
mov ebp, dword [esp + 0x50]
test ebp, ebp
jle 0xbab7a0
mov eax, dword [esp + 0x60]
mov ebp, dword [esp + 0x3c]
add eax, ecx
movsx edx, word [eax]
movsx eax, word [eax + 2]
mov dword [esp + ebp*8 + 0x78], edx
mov edx, dword [esp + 0x20]
mov dword [esp + ebp*8 + 0x7c], eax
mov eax, dword [edx + 0x910]
mov eax, dword [eax + 0x43c]
sub eax, 1
cmp dword [esp + 0x4c], eax
jge 0xbaae8a
mov eax, dword [esp + 0x6c]
mov ebp, dword [esp + 0x34]
mov dword [esp + 0x34], ebx
add eax, ecx
movsx edx, word [eax]
movsx eax, word [eax + 2]
mov dword [esp + ebp*8 + 0x78], edx
mov dword [esp + ebp*8 + 0x7c], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x4c]
test eax, eax
jle 0xbab7f0
add ecx, dword [esp + 0x64]
mov ebp, dword [esp + 0x34]
mov ebx, dword [esp + 0x44]
movsx eax, word [ecx]
mov dword [esp + 0x3c], ebx
mov dword [esp + ebp*8 + 0x78], eax
movsx eax, word [ecx + 2]
mov dword [esp + ebp*8 + 0x7c], eax
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x8c]
mov ebp, dword [esp + 0x80]
mov edx, dword [esp + 0x78]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x30], ecx
mov ecx, dword [esp + 0x84]
cmp ebp, edx
mov ebx, edx
cmovge ebx, ebp
mov dword [esp + 0x44], ebx
mov ebx, ebp
cmovge ebx, edx
mov dword [esp + 0x34], ebx
mov ebx, dword [esp + 0x2c]
cmp dword [esp + 0x34], ebx
jg 0xbab790
cmp dword [esp + 0x44], ebx
cmovge ebx, dword [esp + 0x44]
mov dword [esp + 0x44], ebx
add edx, ebp
mov ebp, eax
add edx, dword [esp + 0x2c]
sub edx, dword [esp + 0x34]
sub edx, dword [esp + 0x44]
cmp ecx, eax
cmovge ebp, ecx
mov dword [edi - 0xc], edx
mov edx, ecx
cmovge edx, eax
cmp edx, dword [esp + 0x30]
jg 0xbab780
cmp ebp, dword [esp + 0x30]
cmovl ebp, dword [esp + 0x30]
add eax, ecx
add eax, dword [esp + 0x30]
sub eax, edx
mov edx, dword [esp + 0x20]
sub eax, ebp
mov ebp, dword [esp + 0x3c]
mov dword [edi - 8], eax
lea eax, [esp + 0x78]
mov dword [esp + 8], eax
imul eax, dword [esp + 0x38], 0x58
add eax, dword [esp + 0x54]
mov dword [esp], edx
mov dword [esp + 0x10], 0
mov dword [esp + 4], eax
mov dword [esp + 0xc], ebp
call fcn.00bd4960
mov eax, dword [edi]
lea edx, [eax + 2]
add eax, 3
cmp edx, esi
cmovl esi, eax
add edi, 0x58
add dword [esp + 0x38], 1
mov ecx, dword [esp + 0x38]
cmp dword [esp + 0x40], ecx
jge 0xbaadb9
mov eax, dword [esp + 0x40]
mov ebp, dword [esp + 0x68]
mov ebx, dword [esp + 0x20]
test eax, eax
je 0xbab11e
mov eax, dword [esp + 0x1e8]
test eax, eax
jne 0xbaafe0
mov edi, dword [esp + 0x1ec]
test edi, edi
jne 0xbaafe0
mov ecx, dword [esp + 0x240]
test ecx, ecx
je 0xbab830
lea esi, [esi]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x1d0]
lea edi, [esp + 0x24b]
mov edx, dword [esp + 0x1ec]
mov dword [esp + 0x2dc], 8
mov dword [esp + 0x1c], 8
mov dword [esp + 4], eax
lea eax, [esp + 0x1a8]
mov dword [esp + 0x14], edx
mov dword [esp], eax
mov dword [esp + 0x18], 8
mov dword [esp + 0xc], 8
mov dword [esp + 8], edi
call dword [ebx + 0x9f638]
mov eax, dword [esp + 0x244]
mov dword [esp + 0x1c], 8
mov dword [esp + 0x18], 8
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x240]
mov dword [esp + 0x10], eax
lea eax, [esp + 0x2dc]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x29c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x228]
mov dword [esp + 4], eax
lea eax, [esp + 0x200]
mov dword [esp], eax
call dword [ebx + 0x9f63c]
mov edx, dword [esp + 0x2dc]
mov dword [esp + 4], 8
mov dword [esp], edi
mov dword [esp + 0xc], edx
mov dword [esp + 8], eax
call dword [ebx + 0x9f650]
mov eax, dword [esp + 0x1c0]
mov dword [esp + 0xc], 8
mov dword [esp + 8], edi
mov dword [esp + 4], 0x10
mov dword [esp], eax
call dword [ebx + 0x9f5d4]
add eax, 5
cmp eax, esi
jge 0xbab11e
mov esi, dword [esp + 0x48]
mov ecx, dword [esp + 0x1e8]
mov edx, dword [esp + 0x5c]
add edx, dword [esi + 0xcc]
mov word [edx], cx
mov ecx, dword [esp + 0x1ec]
mov word [edx + 2], cx
mov ecx, dword [esp + 0x240]
mov edx, dword [esp + 0x5c]
add edx, dword [esi + 0xd0]
mov esi, eax
mov word [edx], cx
mov ecx, dword [esp + 0x244]
mov word [edx + 2], cx
cmp dword [esp + 0x58], esi
jle 0xbab172
mov edx, dword [esp + 0x48]
mov eax, dword [esp + 0x5c]
add eax, dword [edx + 0xcc]
mov edx, dword [esp + 0x1e8]
mov word [eax], dx
mov edx, dword [esp + 0x1ec]
mov word [eax + 2], dx
mov eax, dword [esp + 0x40]
test eax, eax
je 0xbab172
mov edx, dword [esp + 0x48]
mov eax, dword [esp + 0x5c]
add eax, dword [edx + 0xd0]
mov edx, dword [esp + 0x240]
mov word [eax], dx
mov edx, dword [esp + 0x244]
mov word [eax + 2], dx
mov eax, dword [esp + 0x28]
mov edx, dword [esp + 0x48]
mov edi, dword [esp + 0x40]
sub eax, 1
add eax, dword [edx + 0x84]
mov edx, dword [esp + 0x40]
lea edx, [edi + edx*4]
lea edx, [edx + edx + 5]
mov dword [esp + 0x28], edx
mov edx, eax
sub edx, ebp
mov ecx, dword [edx]
lea edi, [esp + 0xa0]
mov dword [esp + 0x7f], ecx
mov ecx, dword [edx + 4]
mov dword [esp + 0x83], ecx
movzx edx, byte [edx + 8]
mov byte [esp + 0x87], dl
movzx edx, byte [eax]
mov byte [esp + 0x9f], dl
movzx edx, byte [eax + ebp]
mov byte [esp + 0xbf], dl
movzx edx, byte [eax + ebp*2]
mov byte [esp + 0xdf], dl
lea edx, [ebp + ebp*2]
movzx ecx, byte [eax + edx]
mov byte [esp + 0xff], cl
movzx ecx, byte [eax + ebp*4]
mov byte [esp + 0x11f], cl
lea ecx, [ebp + ebp*4]
movzx ecx, byte [eax + ecx]
mov byte [esp + 0x13f], cl
movzx edx, byte [eax + edx*2]
lea eax, [eax + ebp*8]
sub eax, ebp
mov byte [esp + 0x15f], dl
movzx eax, byte [eax]
mov byte [esp + 0x17f], al
mov eax, dword [ebx + 0x3a578]
mov dword [esp], edi
mov dword [esp + 4], eax
call dword [ebx + 0x9f518]
mov dword [esp + 0xc], 0x10
mov eax, dword [ebx + 0x9dba0]
mov dword [esp + 4], 0x20
mov dword [esp], edi
mov dword [esp + 8], eax
call dword [ebx + 0x9f5d4]
mov ebp, dword [esp + 0x28]
add ebp, eax
mov eax, dword [ebx + 0x3a578]
mov dword [esp], edi
mov dword [esp + 4], eax
call dword [ebx + 0x9f51c]
mov dword [esp + 0xc], 0x10
mov eax, dword [ebx + 0x9dba0]
mov dword [esp + 4], 0x20
mov dword [esp], edi
mov dword [esp + 8], eax
call dword [ebx + 0x9f5d4]
add eax, dword [esp + 0x28]
cmp ebp, eax
cmovg ebp, eax
mov eax, dword [ebx + 0x3a578]
cmp ebp, esi
cmovg ebp, esi
mov dword [esp], edi
mov dword [esp + 4], eax
call dword [ebx + 0x9f520]
mov dword [esp + 0xc], 0x10
mov eax, dword [ebx + 0x9dba0]
mov dword [esp + 4], 0x20
mov dword [esp], edi
mov dword [esp + 8], eax
call dword [ebx + 0x9f5d4]
add eax, dword [esp + 0x28]
cmp ebp, eax
cmovg ebp, eax
mov eax, dword [ebx + 0x3a578]
mov dword [esp], edi
mov dword [esp + 4], eax
call dword [ebx + 0x9f524]
mov dword [esp + 0xc], 0x10
mov eax, dword [ebx + 0x9dba0]
mov dword [esp + 4], 0x20
mov dword [esp], edi
mov dword [esp + 8], eax
call dword [ebx + 0x9f5d4]
add eax, dword [esp + 0x28]
cmp eax, ebp
cmovg eax, ebp
cmp esi, eax
je 0xbab3a1
mov ecx, dword [esp + 0x40]
test ecx, ecx
jne 0xbab380
mov edx, dword [esp + 0x4c]
test edx, edx
jle 0xbab380
mov edx, dword [ebx + 0x910]
mov ecx, dword [edx + 0x43c]
sub ecx, 1
cmp ecx, dword [esp + 0x4c]
jle 0xbab380
mov ebp, dword [esp + 0x50]
test ebp, ebp
jle 0xbab380
mov edx, dword [edx + 0x440]
sub edx, 1
cmp dword [esp + 0x50], edx
jge 0xbab380
mov edx, dword [esp + 0x314]
mov ebx, dword [esp + 0x48]
sub edx, dword [esp + 0x30c]
add dword [ebx + edx*4 + 0x678], 1
nop
lea esi, [esi]
mov edx, dword [esp + 0x30c]
add edx, 1
cmp dword [esp + 0x310], edx
jle 0xbab3a1
lea eax, [eax + eax*8]
test eax, eax
lea ebp, [eax + 7]
cmovs eax, ebp
sar eax, 3
add esp, 0x2ec
pop ebx
pop esi
pop edi
pop ebp
ret
add ecx, dword [eax + 0xcc]
lea esi, [esp + 0x198]
mov edx, dword [esp + 0x28]
lea edi, [esp + 0x1f0]
mov dword [esp + 0x30], ecx
mov ecx, 0x16
mov dword [esp + 0x54], esi
rep movsd dword es:[edi], dword [esi]
add edx, dword [eax + 0x84]
mov ecx, dword [esp + 0x318]
mov dword [esp + 0x200], edx
mov edx, dword [esp + 0x28]
add edx, dword [eax + 0x88]
mov dword [esp + 0x204], edx
mov edx, dword [esp + 0x28]
add edx, dword [eax + 0x8c]
mov eax, dword [eax + 0x90]
add eax, dword [esp + 0x28]
mov dword [esp + 0x208], edx
mov dword [esp + 0x20c], eax
mov eax, dword [esp + 0x30]
movsx esi, word [eax]
movsx edx, word [eax + 2]
mov eax, dword [esp + 0x318]
imul ecx, esi
imul eax, edx
sub ecx, 0xffffff80
sar ecx, 8
sub eax, 0xffffff80
mov edi, ecx
sar eax, 8
sub edi, esi
mov esi, eax
sub esi, edx
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x3c], edi
cmp edx, ecx
jg 0xbab461
mov edx, dword [esp + 0x34]
cmp ecx, dword [esp + 0x34]
cmovle edx, ecx
mov edi, dword [ebx + 0x3a55c]
mov ecx, dword [ebx + 0x3a564]
cmp eax, edi
mov dword [esp + 0x30], edi
jl 0xbab47e
cmp eax, ecx
cmovg eax, ecx
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x3c]
cmp dword [esp + 0x2c], eax
jg 0xbab499
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x3c], eax
cmovle eax, dword [esp + 0x3c]
mov dword [esp + 0x2c], eax
cmp esi, edi
jl 0xbab4a4
cmp esi, ecx
mov edi, ecx
cmovle edi, esi
mov ecx, dword [esp + 0x30]
lea esi, [esp + 0x24b]
lea eax, [esp + 0x1a8]
mov dword [esp + 0x10], edx
mov dword [esp + 0x24], edx
mov dword [esp + 0x14], ecx
mov dword [esp], eax
mov dword [esp + 0x2dc], 8
mov dword [esp + 0x1c], 8
mov dword [esp + 0x18], 8
mov dword [esp + 0xc], 8
mov dword [esp + 8], esi
mov dword [esp + 4], ebp
call dword [ebx + 0x9f638]
lea eax, [esp + 0x2dc]
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x228]
mov dword [esp + 0x1c], 8
mov dword [esp + 0x18], 8
mov dword [esp + 0x10], ecx
lea ecx, [esp + 0x29c]
mov dword [esp + 4], eax
lea eax, [esp + 0x200]
mov dword [esp + 8], ecx
mov dword [esp + 0x14], edi
mov dword [esp], eax
call dword [ebx + 0x9f63c]
mov ecx, dword [esp + 0x2dc]
mov dword [esp + 4], 8
mov dword [esp], esi
mov dword [esp + 0xc], ecx
mov dword [esp + 8], eax
call dword [ebx + 0x9f650]
mov eax, dword [esp + 0x1c0]
mov dword [esp + 0xc], 8
mov dword [esp + 8], esi
mov dword [esp + 4], 0x10
mov dword [esp], eax
call dword [ebx + 0x9f5d4]
mov edx, dword [esp + 0x24]
mov dword [esp + 0x58], 0x10000000
cmp eax, 0xfffffff
mov dword [esp + 0x3c], eax
jg 0xbab5da
mov ecx, dword [esp + 0x48]
mov eax, dword [esp + 0x5c]
add eax, dword [ecx + 0xcc]
movzx ecx, word [esp + 0x30]
mov word [eax], dx
mov word [eax + 2], cx
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x5c]
add ecx, dword [eax + 0xd0]
movzx eax, word [esp + 0x2c]
mov word [ecx + 2], di
mov word [ecx], ax
mov eax, dword [esp + 0x3c]
mov dword [esp + 0x58], eax
test edx, edx
jne 0xbab5f2
mov eax, dword [esp + 0x30]
test eax, eax
jne 0xbab5f2
mov eax, dword [esp + 0x2c]
test eax, eax
je 0xbab844
mov eax, dword [esp + 0x1d0]
lea edx, [esp + 0x1a8]
mov dword [esp], edx
lea edi, [esp + 0x29c]
mov dword [esp + 0x2dc], 8
mov dword [esp + 0x1c], 8
mov dword [esp + 4], eax
mov dword [esp + 0x18], 8
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 8
mov dword [esp + 8], esi
call dword [ebx + 0x9f638]
mov eax, dword [esp + 0x228]
lea ecx, [esp + 0x2dc]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x1c], 8
mov dword [esp + 0x18], 8
mov dword [esp + 4], eax
lea eax, [esp + 0x200]
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 8], edi
mov dword [esp], eax
call dword [ebx + 0x9f63c]
mov edx, dword [esp + 0x2dc]
mov dword [esp + 4], 8
mov dword [esp], esi
mov dword [esp + 0xc], edx
mov dword [esp + 8], eax
call dword [ebx + 0x9f650]
mov eax, dword [esp + 0x1c0]
mov dword [esp + 0xc], 8
mov dword [esp + 8], esi
mov dword [esp + 4], 0x10
mov dword [esp], eax
call dword [ebx + 0x9f5d4]
cmp dword [esp + 0x58], eax
jle 0xbaad7d
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x58], eax
add edx, dword [ecx + 0xcc]
mov word [edx], 0
mov word [edx + 2], 0
mov edx, dword [esp + 0x5c]
add edx, dword [ecx + 0xd0]
mov word [edx], 0
mov word [edx + 2], 0
jmp 0xbaad7d
mov ecx, dword [ebx + 0x3a524]
mov edx, ecx
neg edx
shl edx, 3
mov dword [esp + 0x30], edx
sub edx, 4
mov esi, dword [esp + 0x30]
mov dword [ebx + 0x3a56c], edx
mov edx, ecx
mov ecx, dword [esp + 0x3c]
not edx
add edx, dword [ecx + 0x440]
lea ecx, [edx*8]
lea edx, [ecx + 4]
mov dword [ebx + 0x3a574], edx
lea edx, [esi*4 - 0x30]
mov dword [ebx + 0x3a55c], edx
lea edx, [ecx*4 + 0x30]
mov dword [ebx + 0x3a564], edx
jmp 0xbaacd4
mov edx, dword [esp + 0x30]
jmp 0xbaaf40
mov dword [esp + 0x34], ebx
jmp 0xbaaf10
xor ecx, ecx
xor ebp, ebp
mov dword [esp + 0x30], 0
mov dword [esp + 0x2c], 0
jmp 0xbaaee1
mov dword [esp + 0x44], 2
xor eax, eax
xor edx, edx
mov dword [esp + 0x30], 3
mov ebx, 2
mov dword [esp + 0x34], 1
mov dword [esp + 0x3c], 0
jmp 0xbaae27
mov edx, dword [esp + 0x88]
mov ecx, dword [esp + 0x8c]
mov ebx, dword [esp + 0x34]
mov ebp, dword [esp + 0x80]
mov dword [esp + 0x2c], edx
mov eax, dword [esp + 0x7c]
mov dword [esp + 0x30], ecx
mov edx, dword [esp + 0x78]
mov ecx, dword [esp + 0x84]
mov dword [esp + 0x3c], ebx
jmp 0xbaaee1
mov edx, dword [esp + 0x244]
test edx, edx
je 0xbab11e
jmp 0xbaafe0
test edi, edi
je 0xbaad7d
lea esi, [esi]
jmp 0xbab5f2