
FUNCTION 0xba5140
00ba5140 push esi
00ba5141 mov esi, ecx
00ba5143 call 0xba3c10
00ba5148 call 0xba3f50
00ba514d cmp eax, 1
00ba5150 jne 0xba521f
00ba5156 lea eax, [esi + 0x2020]
00ba515c lea ecx, [eax + 0xc]
00ba515f nop 
00ba5160 mov dword ptr [eax], 0
00ba5166 add eax, 4
00ba5169 cmp eax, ecx
00ba516b jb 0xba5160
00ba516d mov edx, 7
00ba5172 mov ecx, esi
00ba5174 call 0x5c69e0
00ba5179 mov edx, 8
00ba517e mov ecx, esi
00ba5180 call 0x5c69e0
00ba5185 mov edx, 9
00ba518a mov ecx, esi
00ba518c call 0x5c69e0
00ba5191 mov edx, 0xa
00ba5196 mov ecx, esi
00ba5198 call 0x5c69e0
00ba519d mov edx, 0xb
00ba51a2 mov ecx, esi
00ba51a4 call 0x5c69e0
00ba51a9 mov edx, 0xd
00ba51ae mov ecx, esi
00ba51b0 call 0x5c69e0
00ba51b5 mov edx, 0xe
00ba51ba mov ecx, esi
00ba51bc call 0x5c69e0
00ba51c1 mov edx, 0xf
00ba51c6 mov ecx, esi
00ba51c8 call 0x5c69e0
00ba51cd mov edx, 0x10
00ba51d2 mov ecx, esi
00ba51d4 call 0x5c69e0
00ba51d9 mov edx, 0x11
00ba51de mov ecx, esi
00ba51e0 call 0x5c69e0
00ba51e5 mov edx, 0x12
00ba51ea mov ecx, esi
00ba51ec call 0x5c69e0
00ba51f1 mov edx, 0x38
00ba51f6 mov ecx, esi
00ba51f8 call 0x5c6ef0
00ba51fd mov edx, 0x37
00ba5202 mov ecx, esi
00ba5204 call 0x5c6ef0
00ba5209 mov edx, 0x3b
00ba520e mov ecx, esi
00ba5210 call 0x5c6ef0
00ba5215 mov dword ptr [esi + 0x202c], 0
00ba521f pop esi
00ba5220 ret 
00ba5221 int3 
00ba5222 int3 
00ba5223 int3 
00ba5224 int3 
00ba5225 int3 
00ba5226 int3 
00ba5227 int3 
00ba5228 int3 
00ba5229 int3 
00ba522a int3 
00ba522b int3 
00ba522c int3 
00ba522d int3 
00ba522e int3 
00ba522f int3 

FUNCTION 0xba5230
00ba5230 push esi
00ba5231 mov esi, ecx
00ba5233 call 0xba4480
00ba5238 lea eax, [esi + 0x2020]
00ba523e lea ecx, [eax + 0xc]
00ba5241 mov dword ptr [eax], 0
00ba5247 add eax, 4
00ba524a cmp eax, ecx
00ba524c jb 0xba5241
00ba524e mov dword ptr [esi + 0x202c], 0
00ba5258 pop esi
00ba5259 ret 
00ba525a int3 
00ba525b int3 
00ba525c int3 
00ba525d int3 
00ba525e int3 
00ba525f int3 
00ba5260 push esi
00ba5261 push edi
00ba5262 mov esi, edx
00ba5264 mov edi, ecx
00ba5266 call 0x5c5ea0
00ba526b test eax, eax
00ba526d jne 0xba5274
00ba526f pop edi
00ba5270 xor eax, eax
00ba5272 pop esi
00ba5273 ret 
00ba5274 mov eax, esi
00ba5276 sub eax, 0
00ba5279 je 0xba52bb
00ba527b dec eax
00ba527c je 0xba5288
00ba527e dec eax
00ba527f jne 0xba52b3
00ba5281 mov edx, 0x2eae192c
00ba5286 jmp 0xba52c0
00ba5288 mov esi, 0x13a3a98
00ba528d lea ecx, [ecx]
00ba5290 mov edx, dword ptr [esi]
00ba5292 test edx, edx
00ba5294 je 0xba52a8
00ba5296 mov eax, dword ptr [edi]
00ba5298 mov eax, dword ptr [eax + 0x68]
00ba529b push 0xb50dd1c5
00ba52a0 mov ecx, edi
00ba52a2 call eax
00ba52a4 test eax, eax
00ba52a6 jne 0xba526f
00ba52a8 add esi, 0xc
00ba52ab cmp esi, 0x13a3b34
00ba52b1 jle 0xba5290
00ba52b3 pop edi
00ba52b4 mov eax, 1
00ba52b9 pop esi
00ba52ba ret 
00ba52bb mov edx, 0xe7ba44e2
00ba52c0 mov eax, dword ptr [edi]
00ba52c2 mov eax, dword ptr [eax + 0x68]
00ba52c5 push 0xb50dd1c5
00ba52ca mov ecx, edi
00ba52cc call eax
00ba52ce neg eax
00ba52d0 sbb eax, eax
00ba52d2 pop edi
00ba52d3 inc eax
00ba52d4 pop esi
00ba52d5 ret 
00ba52d6 int3 
00ba52d7 int3 
00ba52d8 int3 
00ba52d9 int3 
00ba52da int3 
00ba52db int3 
00ba52dc int3 
00ba52dd int3 
00ba52de int3 
00ba52df int3 
00ba52e0 push esi
00ba52e1 mov esi, ecx
00ba52e3 call 0xb91980
00ba52e8 test eax, eax
00ba52ea je 0xba52f7
00ba52ec call 0xb91970
00ba52f1 test eax, eax
00ba52f3 jne 0xba52f7
00ba52f5 pop esi
00ba52f6 ret 
00ba52f7 mov ecx, esi
00ba52f9 pop esi
00ba52fa jmp 0xba3da0
00ba52ff int3 
00ba5300 mov eax, dword ptr [ecx]
00ba5302 mov edx, dword ptr [eax + 0x30]
00ba5305 call edx
00ba5307 neg eax
00ba5309 sbb eax, eax
00ba530b inc eax
00ba530c ret 
00ba530d int3 
00ba530e int3 
00ba530f int3 
00ba5310 push esi
00ba5311 push edi
00ba5312 mov eax, edx
00ba5314 xor edi, edi
00ba5316 sub eax, edi
00ba5318 mov esi, ecx
00ba531a je 0xba5363
00ba531c dec eax
00ba531d je 0xba5341
00ba531f mov eax, dword ptr [esi + 0x202c]
00ba5325 lea eax, [eax + eax*2]
00ba5328 mov edx, dword ptr [eax*4 + 0x13a3aa0]
00ba532f push ebx
00ba5330 mov ebx, dword ptr [esi]
00ba5332 mov eax, dword ptr [ebx + 0x58]
00ba5335 call eax
00ba5337 pop ebx
00ba5338 mov dword ptr [esi + 0x202c], edi
00ba533e pop edi
00ba533f pop esi
00ba5340 ret 
00ba5341 push 0x15c
00ba5346 lea ecx, [esi + 0x2030]
00ba534c xor dl, dl
00ba534e call 0xd95820
00ba5353 mov eax, dword ptr [esi]
00ba5355 mov eax, dword ptr [eax + 0x58]
00ba5358 pop edi
00ba5359 mov ecx, esi
00ba535b mov edx, 0x980aabc
00ba5360 pop esi
00ba5361 jmp eax
00ba5363 movss xmm0, dword ptr [esi + 0x2024]
00ba536b comiss xmm0, dword ptr [0xf0fc08]
00ba5372 jbe 0xba53c8
00ba5374 cmp dword ptr [esi + 0x2188], edi
00ba537a je 0xba53b8
00ba537c lea ecx, [esi + 0x203c]
00ba5382 push ecx
00ba5383 mov edx, 0x41faa6d1
00ba5388 lea ecx, [esi + 0x5c]
00ba538b call 0x5c7590
00ba5390 lea edx, [esi + 0x20a8]
00ba5396 push edx
00ba5397 mov edx, 0xf7795159
00ba539c lea ecx, [esi + 0x5c]
00ba539f call 0x5c7590
00ba53a4 lea eax, [esi + 0x2114]
00ba53aa push eax
00ba53ab mov edx, 0x6e7000e3
00ba53b0 lea ecx, [esi + 0x5c]
00ba53b3 call 0x5c7590
00ba53b8 mov eax, dword ptr [esi]
00ba53ba mov eax, dword ptr [eax + 0x58]
00ba53bd pop edi
00ba53be mov ecx, esi
00ba53c0 mov edx, 0xc191293b
00ba53c5 pop esi
00ba53c6 jmp eax
00ba53c8 push 0x15c
00ba53cd lea ecx, [esi + 0x2030]
00ba53d3 xor dl, dl
00ba53d5 mov dword ptr [esi + 0x2188], edi
00ba53db call 0xd95820
00ba53e0 mov eax, dword ptr [esi]
00ba53e2 mov eax, dword ptr [eax + 0x58]
00ba53e5 pop edi
00ba53e6 mov ecx, esi
00ba53e8 mov edx, 0x980aabc
00ba53ed pop esi
00ba53ee jmp eax
00ba53f0 push esi
00ba53f1 mov esi, ecx
00ba53f3 mov eax, dword ptr [esi]
00ba53f5 mov edx, dword ptr [eax + 0x8c]
00ba53fb call edx
00ba53fd mov eax, dword ptr [esi]
00ba53ff mov eax, dword ptr [eax + 0x58]
00ba5402 mov edx, 0x980aabc
00ba5407 mov ecx, esi
00ba5409 call eax
00ba540b mov ecx, esi
00ba540d pop esi
00ba540e jmp 0x5c5b10
00ba5413 int3 
00ba5414 int3 
00ba5415 int3 
00ba5416 int3 
00ba5417 int3 
00ba5418 int3 
00ba5419 int3 
00ba541a int3 
00ba541b int3 
00ba541c int3 
00ba541d int3 
00ba541e int3 
00ba541f int3 
00ba5420 push esi
00ba5421 push edi
00ba5422 mov edi, ecx
00ba5424 mov esi, 0x13a3aa0
00ba5429 lea esp, [esp]
00ba5430 cmp dword ptr [esi], 0
00ba5433 je 0xba5455
00ba5435 mov eax, dword ptr [edi]
00ba5437 mov edx, dword ptr [esi - 8]
00ba543a mov eax, dword ptr [eax + 0x68]
00ba543d push 0xb50dd1c5
00ba5442 mov ecx, edi
00ba5444 call eax
00ba5446 test eax, eax
00ba5448 je 0xba5455
00ba544a mov eax, dword ptr [edi]
00ba544c mov edx, dword ptr [esi]
00ba544e mov eax, dword ptr [eax + 0x58]
00ba5451 mov ecx, edi
00ba5453 call eax
00ba5455 add esi, 0xc
00ba5458 cmp esi, 0x13a3b3c
00ba545e jle 0xba5430
00ba5460 pop edi
00ba5461 pop esi
00ba5462 ret 
00ba5463 int3 
00ba5464 int3 
00ba5465 int3 
00ba5466 int3 
00ba5467 int3 
00ba5468 int3 
00ba5469 int3 
00ba546a int3 
00ba546b int3 
00ba546c int3 
00ba546d int3 
00ba546e int3 
00ba546f int3 
00ba5470 push edi
00ba5471 mov edi, edx
00ba5473 cmp edi, 0xd
00ba5476 ja 0xba54e5
00ba5478 cmp edi, 0xc
00ba547b je 0xba54e5
00ba547d cmp edi, 0xb
00ba5480 je 0xba54e5
00ba5482 cmp edi, 0xa
00ba5485 je 0xba54e5
00ba5487 cmp edi, 0xd
00ba548a je 0xba54e5
00ba548c push ebx
00ba548d lea eax, [edi + edi*2]
00ba5490 mov edx, dword ptr [eax*4 + 0x13a3a98]
00ba5497 push 0xe26c9b5d
00ba549c mov ecx, 0xbb05a9c1
00ba54a1 call 0x699010
00ba54a6 mov ebx, eax
00ba54a8 mov ecx, ebx
00ba54aa call 0x45c590
00ba54af test eax, eax
00ba54b1 je 0xba54e4
00ba54b3 push esi
00ba54b4 mov esi, dword ptr [edi*4 + 0x13a3b64]
00ba54bb mov ecx, dword ptr [esi]
00ba54bd mov edx, dword ptr [eax + 0x44]
00ba54c0 test ecx, ecx
00ba54c2 je 0xba54d2
00ba54c4 cmp edx, ecx
00ba54c6 je 0xba54e7
00ba54c8 mov ecx, dword ptr [esi + 4]
00ba54cb add esi, 4
00ba54ce test ecx, ecx
00ba54d0 jne 0xba54c4
00ba54d2 or dword ptr [eax + 0x5c], 0x10
00ba54d6 mov edx, eax
00ba54d8 mov ecx, ebx
00ba54da call 0x5592b0
00ba54df test eax, eax
00ba54e1 jne 0xba54b4
00ba54e3 pop esi
00ba54e4 pop ebx
00ba54e5 pop edi
00ba54e6 ret 
00ba54e7 cmp dword ptr [esi], 0
00ba54ea je 0xba54d2
00ba54ec and dword ptr [eax + 0x5c], 0xffffffef
00ba54f0 jmp 0xba54d6
00ba54f2 int3 
00ba54f3 int3 
00ba54f4 int3 
00ba54f5 int3 
00ba54f6 int3 
00ba54f7 int3 
00ba54f8 int3 
00ba54f9 int3 
00ba54fa int3 
00ba54fb int3 
00ba54fc int3 
00ba54fd int3 
00ba54fe int3 
00ba54ff int3 

FUNCTION 0xba5500
00ba5500 call 0xba3f50
00ba5505 dec eax
00ba5506 neg eax
00ba5508 sbb eax, eax
00ba550a inc eax
00ba550b ret 
00ba550c int3 
00ba550d int3 
00ba550e int3 
00ba550f int3 
00ba5510 xorps xmm0, xmm0
00ba5513 movss xmm2, dword ptr [esp + 4]
00ba5519 push esi
00ba551a mov esi, ecx
00ba551c movss xmm1, dword ptr [esi + 0x2020]
00ba5524 comiss xmm1, xmm0
00ba5527 jbe 0xba554b
00ba5529 subss xmm1, xmm2
00ba552d comiss xmm0, xmm1
00ba5530 jbe 0xba5535
00ba5532 movaps xmm1, xmm0
00ba5535 comiss xmm0, xmm1
00ba5538 movss dword ptr [esi + 0x2020], xmm1
00ba5540 jb 0xba5594
00ba5542 xor edx, edx
00ba5544 call 0xba5310
00ba5549 jmp 0xba5591
00ba554b movss xmm1, dword ptr [esi + 0x2024]
00ba5553 comiss xmm1, xmm0
00ba5556 jbe 0xba5594
00ba5558 subss xmm1, xmm2
00ba555c comiss xmm0, xmm1
00ba555f jbe 0xba5564
00ba5561 movaps xmm1, xmm0
00ba5564 comiss xmm0, xmm1
00ba5567 movss dword ptr [esi + 0x2024], xmm1
00ba556f jb 0xba5594
00ba5571 push 0x15c
00ba5576 lea ecx, [esi + 0x2030]
00ba557c xor dl, dl
00ba557e call 0xd95820
00ba5583 mov eax, dword ptr [esi]
00ba5585 mov eax, dword ptr [eax + 0x58]
00ba5588 mov edx, 0x980aabc
00ba558d mov ecx, esi
00ba558f call eax
00ba5591 xorps xmm0, xmm0
00ba5594 movss xmm1, dword ptr [esi + 0x2028]
00ba559c comiss xmm1, xmm0
00ba559f jbe 0xba55e1
00ba55a1 subss xmm1, dword ptr [esp + 8]
00ba55a7 comiss xmm0, xmm1
00ba55aa jbe 0xba55af
00ba55ac movaps xmm1, xmm0
00ba55af comiss xmm0, xmm1
00ba55b2 movss dword ptr [esi + 0x2028], xmm1
00ba55ba jb 0xba55e1
00ba55bc mov eax, dword ptr [esi + 0x202c]
00ba55c2 lea ecx, [eax + eax*2]
00ba55c5 mov edx, dword ptr [ecx*4 + 0x13a3aa0]
00ba55cc push edi
00ba55cd mov edi, dword ptr [esi]
00ba55cf mov eax, dword ptr [edi + 0x58]
00ba55d2 mov ecx, esi
00ba55d4 call eax
00ba55d6 mov dword ptr [esi + 0x202c], 0
00ba55e0 pop edi
00ba55e1 pop esi
00ba55e2 ret 4
00ba55e5 int3 
00ba55e6 int3 
00ba55e7 int3 
00ba55e8 int3 
00ba55e9 int3 
00ba55ea int3 
00ba55eb int3 
00ba55ec int3 
00ba55ed int3 
00ba55ee int3 
00ba55ef int3 
00ba55f0 sub esp, 0x10
00ba55f3 push ebp
00ba55f4 push esi
00ba55f5 push edi
00ba55f6 mov edi, ecx
00ba55f8 mov esi, dword ptr [edi + 0x202c]
00ba55fe mov dword ptr [esp + 0xc], edx
00ba5602 mov dword ptr [esp + 0x10], 0
00ba560a call 0x5c5ea0
00ba560f test eax, eax
00ba5611 je 0xba5628
00ba5613 lea ecx, [esi + esi*2]
00ba5616 mov edx, dword ptr [ecx*4 + 0x13a3a98]
00ba561d mov ecx, eax
00ba561f call 0x69f140
00ba5624 mov ebp, eax
00ba5626 jmp 0xba562a
00ba5628 xor ebp, ebp
00ba562a mov esi, dword ptr [ebp + 0x1c]
00ba562d test esi, esi
00ba562f je 0xba567b
00ba5631 cmp dword ptr [esi + 8], 0x526257df
00ba5638 jne 0xba5674
00ba563a mov ecx, dword ptr [esi + 0xc]
00ba563d test ecx, ecx
00ba563f je 0xba5674
00ba5641 lea edx, [esp + 0x10]
00ba5645 push edx
00ba5646 mov edx, 0x656ac9cd
00ba564b call 0x69e120
00ba5650 test eax, eax
00ba5652 jne 0xba5674
00ba5654 mov ecx, dword ptr [esi + 0xc]
00ba5657 mov dword ptr [esp + 0x14], eax
00ba565b mov dword ptr [esp + 0x18], 0x82f6983b
00ba5663 mov eax, dword ptr [ecx]
00ba5665 mov eax, dword ptr [eax + 0x10]
00ba5668 lea edx, [esp + 0x14]
00ba566c push edx
00ba566d mov edx, 0x656ac9cd
00ba5672 call eax
00ba5674 mov esi, dword ptr [esi + 0x20]
00ba5677 test esi, esi
00ba5679 jne 0xba5631
00ba567b cmp dword ptr [esp + 0xc], 0xc
00ba5680 jne 0xba56ac
00ba5682 push 0
00ba5684 call 0x9f4080
00ba5689 push eax
00ba568a mov edx, 0x81d95c11
00ba568f lea ecx, [edi + 0x5c]
00ba5692 call 0x5c74e0
00ba5697 push 0
00ba5699 call 0x9f4070
00ba569e push eax
00ba569f mov edx, 0x18d00dab
00ba56a4 lea ecx, [edi + 0x5c]
00ba56a7 call 0x5c74e0
00ba56ac mov ecx, dword ptr [esp + 0x20]
00ba56b0 mov edx, dword ptr [ecx*4 + 0x13a3d00]
00ba56b7 mov ecx, ebp
00ba56b9 call 0x5cb470
00ba56be mov edx, dword ptr [esp + 0xc]
00ba56c2 mov edx, dword ptr [edx*4 + 0x13a3cc8]
00ba56c9 push 0
00ba56cb mov ecx, ebp
00ba56cd call 0x5cb730
00ba56d2 mov edx, dword ptr [edi + 0x202c]
00ba56d8 mov ecx, edi
00ba56da call 0xba5470
00ba56df pop edi
00ba56e0 pop esi
00ba56e1 pop ebp
00ba56e2 add esp, 0x10
00ba56e5 ret 4
00ba56e8 int3 
00ba56e9 int3 
00ba56ea int3 
00ba56eb int3 
00ba56ec int3 
00ba56ed int3 
00ba56ee int3 
00ba56ef int3 
00ba56f0 movss xmm0, dword ptr [esp + 4]
00ba56f6 push ebx
00ba56f7 push edi
00ba56f8 push ecx
00ba56f9 mov edi, ecx
00ba56fb movss dword ptr [esp], xmm0
00ba5700 call 0xba5020
00ba5705 movss xmm0, dword ptr [esp + 0xc]
00ba570b push ecx
00ba570c mov ecx, edi
00ba570e movss dword ptr [esp], xmm0
00ba5713 call 0xba5510
00ba5718 lea ecx, [edi + 0x5c]
00ba571b call 0x5c7270
00ba5720 test eax, eax
00ba5722 je 0xba5751
00ba5724 push esi
00ba5725 xor esi, esi
00ba5727 jmp 0xba5730
00ba5729 lea esp, [esp]
00ba5730 mov eax, dword ptr [edi]
00ba5732 mov eax, dword ptr [eax + 0x88]
00ba5738 mov edx, esi
00ba573a mov ecx, edi
00ba573c call eax
00ba573e test eax, eax
00ba5740 je 0xba5750
00ba5742 inc esi
00ba5743 cmp esi, 5
00ba5746 jle 0xba5730
00ba5748 lea ecx, [edi + 0x5c]
00ba574b call 0x5c72a0
00ba5750 pop esi
00ba5751 pop edi
00ba5752 pop ebx
00ba5753 ret 4
00ba5756 int3 
00ba5757 int3 
00ba5758 int3 
00ba5759 int3 
00ba575a int3 
00ba575b int3 
00ba575c int3 
00ba575d int3 
00ba575e int3 
00ba575f int3 
00ba5760 push ebx
00ba5761 push esi
00ba5762 push edi
00ba5763 mov edi, edx
00ba5765 mov eax, dword ptr [edi]
00ba5767 sub eax, 0
00ba576a mov esi, ecx
00ba576c je 0xba57bd
00ba576e dec eax
00ba576f je 0xba5783
00ba5771 dec eax
00ba5772 jne 0xba57b9
00ba5774 mov eax, dword ptr [esi]
00ba5776 mov eax, dword ptr [eax + 0x58]
00ba5779 pop edi
00ba577a pop esi
00ba577b mov edx, 0x95a56cd5
00ba5780 pop ebx
00ba5781 jmp eax
00ba5783 mov edx, dword ptr [edi + 4]
00ba5786 mov dword ptr [esi + 0x202c], edx
00ba578c mov ecx, dword ptr [edi + 8]
00ba578f push ecx
00ba5790 mov ecx, esi
00ba5792 call 0xba55f0
00ba5797 mov eax, dword ptr [esi + 0x202c]
00ba579d mov ebx, dword ptr [esi]
00ba579f lea edx, [eax + eax*2]
00ba57a2 mov edx, dword ptr [edx*4 + 0x13a3a9c]
00ba57a9 mov eax, dword ptr [ebx + 0x58]
00ba57ac mov ecx, esi
00ba57ae call eax
00ba57b0 fld dword ptr [edi + 0xc]
00ba57b3 fstp dword ptr [esi + 0x2028]
00ba57b9 pop edi
00ba57ba pop esi
00ba57bb pop ebx

FUNCTION 0xba3c10
00ba3c10 push ebx
00ba3c11 push esi
00ba3c12 push edi
00ba3c13 mov esi, ecx
00ba3c15 call 0x5c5ae0
00ba3c1a push 0x1580
00ba3c1f xor dl, dl
00ba3c21 lea ecx, [esi + 0xa88]
00ba3c27 call 0xd95820
00ba3c2c lea eax, [esi + 0x2008]
00ba3c32 lea ecx, [eax + 0x10]
00ba3c35 mov dword ptr [eax], 0
00ba3c3b add eax, 4
00ba3c3e cmp eax, ecx
00ba3c40 jb 0xba3c35
00ba3c42 lea eax, [esi + 0x120]
00ba3c48 mov dword ptr [esi + 0x270], eax
00ba3c4e mov dword ptr [esi + 0x274], eax
00ba3c54 lea eax, [esi + 0x278]
00ba3c5a mov dword ptr [esi + 0x3c8], eax
00ba3c60 mov dword ptr [esi + 0x3cc], eax
00ba3c66 lea eax, [esi + 0x3d0]
00ba3c6c mov dword ptr [esi + 0x520], eax
00ba3c72 mov dword ptr [esi + 0x524], eax
00ba3c78 lea eax, [esi + 0x528]
00ba3c7e mov dword ptr [esi + 0x678], eax
00ba3c84 mov dword ptr [esi + 0x67c], eax
00ba3c8a lea eax, [esi + 0x680]
00ba3c90 mov dword ptr [esi + 0x7d0], eax
00ba3c96 mov dword ptr [esi + 0x7d4], eax
00ba3c9c lea eax, [esi + 0x7d8]
00ba3ca2 mov dword ptr [esi + 0x928], eax
00ba3ca8 mov dword ptr [esi + 0x92c], eax
00ba3cae lea ecx, [esi + 0x930]
00ba3cb4 mov dword ptr [esi + 0xa80], ecx
00ba3cba mov dword ptr [esi + 0xa84], ecx

FUNCTION 0xba4480
00ba4480 push esi
00ba4481 mov esi, ecx
00ba4483 lea eax, [esi + 0x930]
00ba4489 mov dword ptr [esi + 0xa80], eax
00ba448f mov dword ptr [esi + 0xa84], eax
00ba4495 lea eax, [esi + 0x120]
00ba449b mov dword ptr [esi + 0x270], eax
00ba44a1 mov dword ptr [esi + 0x274], eax
00ba44a7 lea eax, [esi + 0x278]
00ba44ad mov dword ptr [esi + 0x3c8], eax
00ba44b3 mov dword ptr [esi + 0x3cc], eax
00ba44b9 lea eax, [esi + 0x3d0]
00ba44bf mov dword ptr [esi + 0x520], eax
00ba44c5 mov dword ptr [esi + 0x524], eax
00ba44cb lea eax, [esi + 0x528]
00ba44d1 mov dword ptr [esi + 0x678], eax
00ba44d7 mov dword ptr [esi + 0x67c], eax
00ba44dd lea eax, [esi + 0x680]
00ba44e3 mov dword ptr [esi + 0x7d0], eax
00ba44e9 mov dword ptr [esi + 0x7d4], eax
00ba44ef lea eax, [esi + 0x7d8]
00ba44f5 push 0x1580
00ba44fa lea ecx, [esi + 0xa88]
00ba4500 xor dl, dl
00ba4502 mov dword ptr [esi + 0x928], eax
00ba4508 mov dword ptr [esi + 0x92c], eax
00ba450e call 0xd95820
00ba4513 mov edx, dword ptr [esi + 0x18]
00ba4516 mov ecx, 0x10dacf0
00ba451b call 0x5c7ca0
00ba4520 test eax, eax
00ba4522 je 0xba4538
00ba4524 mov edx, dword ptr [esi + 0x18]
00ba4527 push 0x49
00ba4529 push 0x82f80414
00ba452e mov ecx, 0x10dacf0

FUNCTION 0xba4540
00ba4540 push esi
00ba4541 call 0xba4000
00ba4546 mov esi, eax
00ba4548 test esi, esi
00ba454a je 0xba457d
00ba454c mov ecx, esi
00ba454e call 0x5c5ea0
00ba4553 test eax, eax
00ba4555 je 0xba457d
00ba4557 mov ecx, esi
00ba4559 call 0x5c5ea0
00ba455e cmp dword ptr [eax + 0xc], 0
00ba4562 je 0xba457d
00ba4564 mov eax, dword ptr [esi]
00ba4566 mov eax, dword ptr [eax + 0x60]
00ba4569 mov edx, 0xb50dd1c5
00ba456e mov ecx, esi
00ba4570 call eax
00ba4572 test eax, eax
00ba4574 je 0xba457d
00ba4576 mov eax, 1
00ba457b pop esi
00ba457c ret 
00ba457d xor eax, eax
00ba457f pop esi
00ba4580 ret 
00ba4581 int3 
00ba4582 int3 
00ba4583 int3 
00ba4584 int3 
00ba4585 int3 
00ba4586 int3 
00ba4587 int3 
00ba4588 int3 
00ba4589 int3 
00ba458a int3 
00ba458b int3 
00ba458c int3 
00ba458d int3 
00ba458e int3 
00ba458f int3 
00ba4590 push esi
00ba4591 call 0xba4000
00ba4596 mov esi, eax
00ba4598 test esi, esi
00ba459a je 0xba45c6
00ba459c mov ecx, esi
00ba459e call 0x5c5ea0
00ba45a3 test eax, eax
00ba45a5 je 0xba45c6
00ba45a7 mov ecx, esi
00ba45a9 call 0x5c5ea0
00ba45ae cmp dword ptr [eax + 0xc], 0
00ba45b2 je 0xba45c6
00ba45b4 mov eax, dword ptr [esi]
00ba45b6 mov eax, dword ptr [eax + 0x60]
00ba45b9 mov edx, 0xb50dd1c5
00ba45be mov ecx, esi
00ba45c0 call eax

FUNCTION 0x5c64a0
005c64a0 push esi
005c64a1 mov esi, ecx
005c64a3 call 0x5c61c0
005c64a8 test eax, eax
005c64aa je 0x5c64e2
005c64ac test dword ptr [esi + 0x10c], 0x100
005c64b6 ja 0x5c64e2
005c64b8 call 0x9f0f40
005c64bd test eax, eax
005c64bf je 0x5c64cd
005c64c1 test dword ptr [esi + 0x10c], 0x4000000
005c64cb jbe 0x5c64e2
005c64cd mov eax, dword ptr [esi]
005c64cf movss xmm0, dword ptr [esp + 8]
005c64d5 mov edx, dword ptr [eax + 0x70]
005c64d8 push ecx
005c64d9 mov ecx, esi
005c64db movss dword ptr [esp], xmm0
005c64e0 call edx
005c64e2 pop esi
005c64e3 ret 4
005c64e6 je 0x5c64b4
005c64e8 int3 
005c64e9 int3 
005c64ea int3 
005c64eb int3 
005c64ec int3 
005c64ed int3 
005c64ee int3 
005c64ef int3 
005c64f0 push ecx
005c64f1 push esi
005c64f2 mov esi, ecx
005c64f4 mov eax, dword ptr [esi + 0x10c]
005c64fa test eax, eax
005c64fc je 0x5c6554
005c64fe test al, 2
005c6500 jbe 0x5c6507
005c6502 call 0x5c62c0
005c6507 test byte ptr [esi + 0x10c], 4
005c650e jbe 0x5c6517
005c6510 mov ecx, esi
005c6512 call 0x5c63b0
005c6517 test byte ptr [esi + 0x10c], 1
005c651e jbe 0x5c6527
005c6520 mov ecx, esi
005c6522 call 0x5c6330
005c6527 test byte ptr [esi + 0x10c], 8
005c652e jbe 0x5c6537
005c6530 mov ecx, esi
005c6532 call 0x5c6430
005c6537 test byte ptr [esi + 0x10c], 0x10
005c653e jbe 0x5c6554
005c6540 mov ecx, esi
005c6542 call 0x5c5ea0
005c6547 mov edx, dword ptr [esi + 0x108]
005c654d mov ecx, eax
005c654f call 0x5cb470

FUNCTION 0x5c5da0
005c5da0 push esi
005c5da1 mov esi, ecx
005c5da3 push edi
005c5da4 mov edi, edx
005c5da6 mov edx, dword ptr [esi + 0x18]
005c5da9 mov ecx, 0x10dacf0
005c5dae call 0x5c7ca0
005c5db3 test eax, eax
005c5db5 jne 0x5c5dce
005c5db7 mov edx, dword ptr [esi + 0x18]
005c5dba push 0xc6
005c5dbf push 0x2d572878
005c5dc4 mov ecx, 0x10dacf0
005c5dc9 call 0x5c85f0
005c5dce mov eax, dword ptr [esp + 0xc]
005c5dd2 mov edx, dword ptr [esi + 0x18]
005c5dd5 push eax
005c5dd6 push edi
005c5dd7 mov ecx, 7
005c5ddc call 0x4da2c0
005c5de1 or dword ptr [esi + 0x10c], 0x40
005c5de8 pop edi
005c5de9 pop esi
005c5dea ret 4
005c5ded stosb byte ptr es:[edi], al
005c5dee int3 
005c5def int3 
005c5df0 mov eax, dword ptr [esp + 4]
005c5df4 push esi
005c5df5 mov esi, ecx
005c5df7 push eax
005c5df8 push edx

FUNCTION 0x5c5df0
005c5df0 mov eax, dword ptr [esp + 4]
005c5df4 push esi
005c5df5 mov esi, ecx
005c5df7 push eax
005c5df8 push edx
005c5df9 mov edx, dword ptr [esi + 0x18]
005c5dfc mov ecx, 8
005c5e01 call 0x4da2c0
005c5e06 or dword ptr [esi + 0x10c], 0x80
005c5e10 pop esi
005c5e11 ret 4
005c5e14 int3 
005c5e15 int3 
005c5e16 int3 
005c5e17 int3 
005c5e18 int3 
005c5e19 int3 
005c5e1a int3 
005c5e1b int3 
005c5e1c int3 
005c5e1d int3 
005c5e1e int3 
005c5e1f int3 
005c5e20 test dword ptr [ecx + 0x10c], 0x8000000
005c5e2a mov edx, dword ptr [ecx + 0x1c]
005c5e2d jbe 0x5c5e39
005c5e2f mov ecx, 0x154c150
005c5e34 jmp 0x48def0
005c5e39 push 0x637fb88a
005c5e3e mov ecx, 0xbb05a9c1
005c5e43 call 0x699010
005c5e48 neg eax

FUNCTION 0x5c68a0
005c68a0 push esi
005c68a1 mov esi, ecx
005c68a3 lea eax, [esi + 0x104]
005c68a9 lea ecx, [esp + 8]
005c68ad lea edx, [eax + 8]
005c68b0 sub ecx, eax
005c68b2 push edi
005c68b3 mov edi, dword ptr [ecx + eax]
005c68b6 mov dword ptr [eax], edi
005c68b8 add eax, 4
005c68bb cmp eax, edx
005c68bd jb 0x5c68b3
005c68bf mov ecx, esi
005c68c1 call 0x5c5ea0
005c68c6 pop edi
005c68c7 test eax, eax
005c68c9 jne 0x5c68d6
005c68cb or dword ptr [esi + 0x10c], 0x10
005c68d2 pop esi
005c68d3 ret 8
005c68d6 mov ecx, esi
005c68d8 call 0x5c5ea0
005c68dd mov edx, dword ptr [esi + 0x108]
005c68e3 mov ecx, eax
005c68e5 call 0x5cb470
005c68ea pop esi
005c68eb ret 8
005c68ee mov eax, 0xec8b55cc
005c68f3 and esp, 0xfffffff0
005c68f6 sub esp, 0x1c
005c68f9 mov eax, dword ptr [ecx + 8]
005c68fc and eax, dword ptr [edx + 8]
005c68ff push esi
005c6900 mov esi, dword ptr [ecx + 0xc]

FUNCTION 0x5c5e20
005c5e20 test dword ptr [ecx + 0x10c], 0x8000000
005c5e2a mov edx, dword ptr [ecx + 0x1c]
005c5e2d jbe 0x5c5e39
005c5e2f mov ecx, 0x154c150
005c5e34 jmp 0x48def0
005c5e39 push 0x637fb88a
005c5e3e mov ecx, 0xbb05a9c1
005c5e43 call 0x699010
005c5e48 neg eax
005c5e4a sbb eax, eax
005c5e4c neg eax
005c5e4e ret 
005c5e4f int3 
005c5e50 push esi
005c5e51 mov esi, ecx
005c5e53 mov eax, dword ptr [esi]
005c5e55 mov edx, dword ptr [eax + 0x3c]
005c5e58 and dword ptr [esi + 0x10c], 0xdfffffff
005c5e62 call edx
005c5e64 lea ecx, [esi + 0x5c]
005c5e67 pop esi
005c5e68 jmp 0x5c7250
005c5e6d int3 
005c5e6e int3 
005c5e6f int3 

FUNCTION 0x5c6860
005c6860 push esi
005c6861 mov esi, ecx
005c6863 test edx, edx
005c6865 je 0x5c6870
005c6867 or dword ptr [esi + 0x10c], 0x20
005c686e jmp 0x5c6877
005c6870 and dword ptr [esi + 0x10c], 0xffffffdf
005c6877 call 0x5c5ea0
005c687c test eax, eax
005c687e jne 0x5c6889
005c6880 or dword ptr [esi + 0x10c], 8
005c6887 pop esi
005c6888 ret 
005c6889 mov ecx, esi
005c688b pop esi
005c688c jmp 0x5c6430
005c6891 int3 
005c6892 int3 
005c6893 int3 
005c6894 int3 
005c6895 int3 
005c6896 int3 
005c6897 int3 
005c6898 int3 
005c6899 int3 
005c689a int3 
005c689b int3 
005c689c int3 
005c689d int3 
005c689e int3 
005c689f int3 
005c68a0 push esi
005c68a1 mov esi, ecx
005c68a3 lea eax, [esi + 0x104]
005c68a9 lea ecx, [esp + 8]
005c68ad lea edx, [eax + 8]

FUNCTION 0x5c5e50
005c5e50 push esi
005c5e51 mov esi, ecx
005c5e53 mov eax, dword ptr [esi]
005c5e55 mov edx, dword ptr [eax + 0x3c]
005c5e58 and dword ptr [esi + 0x10c], 0xdfffffff
005c5e62 call edx
005c5e64 lea ecx, [esi + 0x5c]
005c5e67 pop esi
005c5e68 jmp 0x5c7250
005c5e6d int3 
005c5e6e int3 
005c5e6f int3 
005c5e70 push esi
005c5e71 mov esi, ecx
005c5e73 and dword ptr [esi + 0x10c], 0xdfffffff
005c5e7d test dword ptr [esi + 0x10c], 0x10000000
005c5e87 jbe 0x5c5e9c
005c5e89 mov eax, dword ptr [esi]
005c5e8b mov eax, dword ptr [eax + 0x38]
005c5e8e xor edx, edx
005c5e90 call eax
005c5e92 or dword ptr [esi + 0x10c], 0x20000000
005c5e9c pop esi
005c5e9d ret 
005c5e9e ror ah, 1
005c5ea0 push esi
005c5ea1 mov esi, ecx
005c5ea3 mov eax, dword ptr [esi]
005c5ea5 mov edx, dword ptr [eax + 0x24]
005c5ea8 call edx
005c5eaa test eax, eax
005c5eac jne 0x5c5eb0
005c5eae pop esi
005c5eaf ret 
005c5eb0 mov eax, dword ptr [esi + 0x100]
005c5eb6 test eax, eax
005c5eb8 jne 0x5c5ef6
005c5eba push eax
005c5ebb push eax
005c5ebc push eax
005c5ebd mov eax, dword ptr [esi + 0x1c]
005c5ec0 push 0x637fb88a
005c5ec5 push eax
005c5ec6 push 0xf15d32f0
005c5ecb mov edx, 0xbb05a9c1
005c5ed0 mov ecx, 0x20e3760
005c5ed5 call 0xd94400
005c5eda test eax, eax
005c5edc jne 0x5c5ef0
005c5ede mov edx, dword ptr [esi + 0x1c]
005c5ee1 push 0x637fb88a
005c5ee6 mov ecx, 0xbb05a9c1
005c5eeb call 0x699010
005c5ef0 mov dword ptr [esi + 0x100], eax
005c5ef6 pop esi
005c5ef7 ret 
005c5ef8 int3 
005c5ef9 int3 
005c5efa int3 
005c5efb int3 
005c5efc int3 
005c5efd int3 
005c5efe int3 
005c5eff int3 
005c5f00 push ebp
005c5f01 push esi
005c5f02 mov esi, ecx
005c5f04 cmp dword ptr [esi + 0x24], 0
005c5f08 mov ebp, edx
005c5f0a jne 0x5c5ffc
005c5f10 mov eax, dword ptr [esi + 0x1c]
005c5f13 push ebx
005c5f14 push edi
005c5f15 push 0
005c5f17 push 0
005c5f19 push 0
005c5f1b push 0x637fb88a
005c5f20 push eax
005c5f21 push 0xf15d32f0
005c5f26 mov edx, 0xbb05a9c1
005c5f2b mov ecx, 0x20e3760
005c5f30 call 0xd94400
005c5f35 mov edi, eax
005c5f37 test edi, edi
005c5f39 jne 0x5c5f4f
005c5f3b mov edx, dword ptr [esi + 0x1c]
005c5f3e push 0x637fb88a
005c5f43 mov ecx, 0xbb05a9c1

FUNCTION 0x5c7220
005c7220 push esi
005c7221 mov esi, ecx
005c7223 mov edx, esi
005c7225 xor ecx, ecx
005c7227 mov dword ptr [esi], 0xf11c2c
005c722d call 0x5c6be0
005c7232 lea ecx, [esi + 0x5c]
005c7235 call 0x5c72a0
005c723a test byte ptr [esp + 8], 1
005c723f je 0x5c7248
005c7241 mov ecx, esi
005c7243 call 0xd92ea0
005c7248 mov eax, esi
005c724a pop esi
005c724b ret 4
005c724e sub esp, ecx
005c7250 mov dword ptr [ecx + 0x68], ecx
005c7253 mov dword ptr [ecx + 0x64], ecx
005c7256 ret 

FUNCTION 0x5c7f30
005c7f30 test byte ptr [esp + 4], 1
005c7f35 push esi
005c7f36 mov esi, ecx
005c7f38 mov dword ptr [esi], 0xf11c88
005c7f3e je 0x5c7f45
005c7f40 call 0xd92ea0
005c7f45 mov eax, esi
005c7f47 pop esi
005c7f48 ret 4
005c7f4b dec edi
005c7f4c int3 
005c7f4d int3 
005c7f4e int3 
005c7f4f int3 
005c7f50 sub esp, 0x1c
005c7f53 push esi
005c7f54 push edi
005c7f55 mov edi, ecx
005c7f57 xor eax, eax
005c7f59 lea ecx, [edi + 4]
005c7f5c lea esp, [esp]
005c7f60 mov esi, dword ptr [ecx]
005c7f62 test esi, esi
005c7f64 je 0x5c7f6b
005c7f66 cmp dword ptr [esi + 0x18], edx
005c7f69 je 0x5c7f7c
005c7f6b inc eax
005c7f6c add ecx, 0xc
005c7f6f cmp eax, 0x14
005c7f72 jl 0x5c7f60
005c7f74 pop edi
005c7f75 pop esi
005c7f76 add esp, 0x1c
005c7f79 ret 8
005c7f7c lea eax, [eax + eax*2]
005c7f7f mov esi, dword ptr [edi + eax*4 + 4]
005c7f83 test esi, esi
005c7f85 je 0x5c7ff3
005c7f87 mov edx, dword ptr [esi]
005c7f89 mov eax, dword ptr [edx + 0x3c]
005c7f8c mov ecx, esi
005c7f8e call eax
005c7f90 mov edx, esi
005c7f92 mov ecx, edi
005c7f94 call 0x5c7da0
005c7f99 mov dword ptr [esp + 0xc], 0
005c7fa1 mov dword ptr [esp + 0x10], 2
005c7fa9 mov ecx, dword ptr [esi + 0x24]
005c7fac mov dword ptr [esp + 8], ecx
005c7fb0 lea ecx, [esp + 0xc]
005c7fb4 push ecx
005c7fb5 lea edx, [esp + 0xc]
005c7fb9 mov dword ptr [esp + 0x20], edx
005c7fbd mov edx, dword ptr [esp + 0x30]

FUNCTION 0x4c4e20
004c4e20 push esi
004c4e21 mov esi, ecx
004c4e23 mov eax, dword ptr [esi]
004c4e25 mov edx, dword ptr [eax + 0xc]
004c4e28 call edx
004c4e2a test eax, eax
004c4e2c je 0x4c4e45
004c4e2e mov ecx, dword ptr [esi + 8]
004c4e31 test ecx, ecx
004c4e33 je 0x4c4e3e
004c4e35 call 0x6a8530
004c4e3a test eax, eax
004c4e3c je 0x4c4e45
004c4e3e mov eax, 1
004c4e43 pop esi
004c4e44 ret 
004c4e45 xor eax, eax
004c4e47 pop esi
004c4e48 ret 
004c4e49 add cl, ah
004c4e4b int3 
004c4e4c int3 
004c4e4d int3 
004c4e4e int3 
004c4e4f int3 
004c4e50 push esi
004c4e51 mov esi, ecx
004c4e53 mov eax, dword ptr [esi]
004c4e55 mov edx, dword ptr [eax + 0xc]
004c4e58 call edx
004c4e5a test eax, eax
004c4e5c je 0x4c4e75
004c4e5e mov ecx, dword ptr [esi + 8]
004c4e61 test ecx, ecx
004c4e63 je 0x4c4e6e
004c4e65 call 0x6a8430
004c4e6a test eax, eax
004c4e6c je 0x4c4e75
004c4e6e mov eax, 1
004c4e73 pop esi
004c4e74 ret 
004c4e75 xor eax, eax
004c4e77 pop esi
004c4e78 ret 
004c4e79 insb byte ptr es:[edi], dx
004c4e7a int3 
004c4e7b int3 
004c4e7c int3 
004c4e7d int3 
004c4e7e int3 
004c4e7f int3 
004c4e80 push ecx
004c4e81 mov ecx, dword ptr [ecx + 8]
004c4e84 test ecx, ecx
004c4e86 jne 0x4c4e95
004c4e88 xorps xmm0, xmm0
004c4e8b movss dword ptr [esp], xmm0
004c4e90 fld dword ptr [esp]
004c4e93 pop ecx
004c4e94 ret 
004c4e95 add esp, 4
004c4e98 jmp 0x6a8310
004c4e9d int3 
004c4e9e int3 
004c4e9f int3 
