Function at 0x609920
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x735d9e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x178
mov eax, dword [ebp + 0xc]
push ebx
mov edx, ecx
xor bl, bl
push esi
push edi
test eax, eax
mov dword [ebp - 0x24], edx
jne 0x609984
mov eax, dword [ebp + 8]
mov esi, dword [eax + 0x10]
mov ecx, dword [eax + 2]
mov edi, dword [eax + 6]
mov dword [ebp - 0x20], esi
mov esi, dword [eax + 0x14]
mov dword [ebp - 0x4c], ecx
mov dword [ebp + 0xc], esi
mov si, word [eax + 0xe]
mov word [ebp - 0x3c], si
mov si, word [eax + 0xa]
mov ax, word [eax + 0xc]
mov dword [ebp - 0x38], edi
mov word [ebp - 0x48], si
mov word [ebp - 0x44], ax
jmp 0x6099c7
cmp eax, 1
jne 0x6099c1
mov eax, dword [ebp + 8]
mov esi, dword [eax + 0x10]
mov ecx, dword [eax + 2]
mov dword [ebp - 0x20], esi
mov esi, dword [eax + 0x14]
mov edi, dword [eax + 6]
mov dword [ebp + 0xc], esi
mov si, word [eax + 0xe]
mov bl, byte [eax + 0x18]
mov word [ebp - 0x3c], si
mov si, word [eax + 0xa]
mov word [ebp - 0x48], si
mov si, word [eax + 0xc]
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x38], edi
mov word [ebp - 0x44], si
jmp 0x6099c7
mov ecx, dword [ebp - 0x4c]
mov edi, dword [ebp - 0x38]
cmp ecx, dword [0x83c484]
jne 0x6099dd
mov ecx, dword [edx + 0xb4]
mov esi, dword [ecx + 0x3c]
mov dword [ebp + 8], esi
jmp 0x6099f1
push ecx
mov ecx, dword [edx + 0xb4]
call fcn.00529760
mov edx, dword [ebp - 0x24]
mov esi, eax
mov dword [ebp + 8], esi
test esi, esi
je 0x60a509
cmp edi, dword [0x83c484]
jne 0x609a0c
mov edx, dword [edx + 0xb4]
mov eax, dword [edx + 0x3c]
jmp 0x609a18
mov ecx, dword [edx + 0xb4]
push edi
call fcn.00529760
test bl, bl
mov dword [ebp - 0x1c], eax
jne 0x609eba
mov edi, dword [esi + 0x214]
push 1
push edi
mov ecx, 0x83a9e0
call fcn.006f21f0
mov ecx, dword [0x83c484]
test eax, eax
je 0x609a4b
cmp ecx, edi
je 0x609a4b
mov eax, 1
jmp 0x609a4d
xor eax, eax
cmp ecx, edi
mov dword [ebp - 0x40], eax
je 0x609a5c
test eax, eax
je 0x609eba
mov eax, dword [ebp - 0x1c]
xor ebx, ebx
test eax, eax
je 0x609a6b
mov ebx, dword [eax + 0x214]
lea ecx, [ebp - 0x84]
push edi
push ecx
mov ecx, 0x814260
call fcn.00533580
mov ecx, eax
call fcn.005aac20
lea edx, [ebp - 0x60]
push ebx
push edx
mov ecx, 0x814260
mov dword [ebp - 4], 0
call fcn.00533580
mov ecx, eax
call fcn.005aac20
mov eax, dword [ebp - 0x3c]
mov byte [ebp - 4], 1
and eax, 0xffff
push eax
call fcn.00543f10
mov cl, byte [ebp + 0xb]
add esp, 4
mov edi, eax
mov byte [ebp - 0x70], cl
push 0
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x10], edi
call fcn.00420200
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push 1
mov ebx, ecx
lea ecx, [ebp - 0x70]
push ebx
call fcn.004219e0
test al, al
je 0x609b09
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x6c]
mov ecx, ebx
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x6c]
mov esi, dword [ebp + 8]
mov dword [ebp - 0x68], ebx
mov byte [eax + ebx], 0
mov eax, dword [ebp - 0x7c]
mov byte [ebp - 4], 2
test eax, eax
jne 0x609b67
push 0x644
call fcn.00581bb0
mov dword [ebp - 0x10], eax
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
add esp, 4
repne scasb al, byte es:[edi]
not ecx
dec ecx
push 1
mov ebx, ecx
lea ecx, [ebp - 0x84]
push ebx
call fcn.004219e0
test al, al
je 0x609b67
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x80]
mov ecx, ebx
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x80]
mov esi, dword [ebp + 8]
mov dword [ebp - 0x7c], ebx
mov byte [eax + ebx], 0
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x609bc5
mov eax, dword [ebp - 0x58]
test eax, eax
jne 0x609bc5
push 0x644
call fcn.00581bb0
mov dword [ebp - 0x10], eax
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
add esp, 4
repne scasb al, byte es:[edi]
not ecx
dec ecx
push 1
mov ebx, ecx
lea ecx, [ebp - 0x60]
push ebx
call fcn.004219e0
test al, al
je 0x609bc5
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x5c]
mov ecx, ebx
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x5c]
mov esi, dword [ebp + 8]
mov dword [ebp - 0x58], ebx
mov byte [eax + ebx], 0
mov cl, byte [ebp + 0xb]
mov edi, 0x7c1a4c
mov byte [ebp - 0x34], cl
or ecx, 0xffffffff
xor eax, eax
xor ebx, ebx
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov dword [ebp - 0x10], 0xf
push ecx
push 0x7c1a4c
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ebx
call fcn.0042f5e0
mov eax, dword [ebp - 0x40]
mov byte [ebp - 4], 3
cmp eax, ebx
je 0x609ca5
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x10], 0x10
cmp eax, ebx
jne 0x609c1c
mov eax, 0x73a7f4
push eax
push 0x64c
call fcn.00581bb0
add esp, 4
lea edx, [ebp - 0x184]
push eax
push edx
call fcn.00711e28
lea edi, [ebp - 0x184]
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
mov eax, dword [0x73a7f0]
mov edx, dword [ebp - 0x2c]
not ecx
dec ecx
sub eax, edx
mov edi, ecx
cmp eax, edi
ja 0x609c5f
call fcn.00704fbb
cmp edi, ebx
jbe 0x609ca5
mov ecx, dword [ebp - 0x2c]
push 0
lea ebx, [ecx + edi]
lea ecx, [ebp - 0x34]
push ebx
call fcn.004219e0
test al, al
je 0x609ca5
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
mov ecx, edi
add eax, edx
mov edx, ecx
lea esi, [ebp - 0x184]
mov edi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x30]
mov esi, dword [ebp + 8]
mov dword [ebp - 0x2c], ebx
mov byte [eax + ebx], 0
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x609d47
mov eax, dword [ebp - 0x5c]
test eax, eax
jne 0x609cbc
mov eax, 0x73a7f4
push eax
push 0x658
call fcn.00581bb0
add esp, 4
lea ecx, [ebp - 0x184]
push eax
push ecx
call fcn.00711e28
lea edi, [ebp - 0x184]
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
mov edx, dword [0x73a7f0]
not ecx
dec ecx
mov edi, ecx
mov ecx, dword [ebp - 0x2c]
sub edx, ecx
cmp edx, edi
ja 0x609d00
call fcn.00704fbb
test edi, edi
jbe 0x609d47
mov eax, dword [ebp - 0x2c]
push 0
lea ecx, [ebp - 0x34]
lea ebx, [eax + edi]
push ebx
call fcn.004219e0
test al, al
je 0x609d47
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
lea esi, [ebp - 0x184]
lea eax, [edx + ecx]
mov ecx, edi
mov edi, eax
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [ebp - 0x30]
mov esi, dword [ebp + 8]
mov dword [ebp - 0x2c], ebx
mov byte [ecx + ebx], 0
mov eax, dword [ebp - 0x6c]
test eax, eax
jne 0x609d53
mov eax, 0x73a7f4
push eax
push 0x659
call fcn.00581bb0
add esp, 4
lea edx, [ebp - 0x184]
push eax
push edx
call fcn.00711e28
lea edi, [ebp - 0x184]
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
mov eax, dword [0x73a7f0]
mov edx, dword [ebp - 0x2c]
not ecx
dec ecx
sub eax, edx
mov edi, ecx
cmp eax, edi
ja 0x609d96
call fcn.00704fbb
test edi, edi
jbe 0x609ddc
mov ecx, dword [ebp - 0x2c]
push 0
lea ebx, [ecx + edi]
lea ecx, [ebp - 0x34]
push ebx
call fcn.004219e0
test al, al
je 0x609ddc
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
mov ecx, edi
add eax, edx
mov edx, ecx
lea esi, [ebp - 0x184]
mov edi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x30]
mov esi, dword [ebp + 8]
mov dword [ebp - 0x2c], ebx
mov byte [eax + ebx], 0
mov eax, dword [ebp - 0x2c]
xor edi, edi
cmp eax, edi
je 0x609e08
mov eax, dword [ebp - 0x30]
cmp eax, edi
jne 0x609df1
mov eax, 0x73a7f4
mov ecx, dword [ebp - 0x10]
push edi
push ecx
push 0xffff
push eax
push 1
mov ecx, 0x7dabc0
call fcn.00512f20
mov eax, dword [ebp - 0x30]
cmp eax, edi
je 0x609e2c
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x609e23
cmp al, 0xff
je 0x609e23
dec al
mov byte [ecx], al
jmp 0x609e2c
push ecx
call fcn.00703996
add esp, 4
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x30], edi
cmp eax, edi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x28], edi
je 0x609e59
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x609e50
cmp al, 0xff
je 0x609e50
dec al
mov byte [ecx], al
jmp 0x609e59
push ecx
call fcn.00703996
add esp, 4
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x6c], edi
cmp eax, edi
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x64], edi
je 0x609e86
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x609e7d
cmp al, 0xff
je 0x609e7d
dec al
mov byte [ecx], al
jmp 0x609e86
push ecx
call fcn.00703996
add esp, 4
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x5c], edi
cmp eax, edi
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x54], edi
mov dword [ebp - 4], 0xffffffff
je 0x609eba
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x609eb1
cmp al, 0xff
je 0x609eb1
dec al
mov byte [ecx], al
jmp 0x609eba
push ecx
call fcn.00703996
add esp, 4
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x60a509
mov edi, dword [ebp - 0x3c]
mov ecx, esi
mov ebx, edi
and ebx, 0xffff
mov dword [ebp - 0x1c], ebx
call fcn.00591350
mov edx, dword [ebp - 0x20]
push eax
lea eax, [ebp - 0x50]
push edx
lea ecx, [ebp - 0x74]
push eax
push ecx
push ebx
mov ecx, 0x83a9e0
call fcn.006eada0
cmp di, 0x3e
je 0x60a17b
cmp di, 0x39
je 0x60a17b
mov eax, dword [ebp - 0x50]
mov edx, dword [esi]
push eax
mov ecx, esi
call dword [edx + 0x28]
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x74]
mov edx, dword [esi]
push 0
shr eax, 4
push eax
push ecx
push 0x55
push 0
mov ecx, esi
call dword [edx + 8]
mov eax, dword [ebp + 0xc]
mov edx, dword [esi]
push 0
push 0
push eax
push 0x52
push 0
mov ecx, esi
call dword [edx + 8]
cmp di, 0x7f0
jne 0x609f81
push 0
mov dword [ebp - 0x18], 0
mov edx, dword [ebp - 0x18]
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], 0
mov dword [ecx], edx
mov edx, dword [ebp - 0x10]
push 0x300
mov dword [ecx + 4], eax
mov dword [ecx + 8], edx
mov ecx, esi
call fcn.0058f300
jmp 0x60a0b5
cmp di, 0x89e
jne 0x609fc6
push 0
mov dword [ebp - 0x18], 0
mov ecx, dword [ebp - 0x18]
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x14], 0
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x10], 0
mov dword [eax], ecx
mov ecx, dword [ebp - 0x10]
push 0x323
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov ecx, esi
call fcn.0058f300
jmp 0x60a0b5
cmp di, 0x9a0
jne 0x60a053
push 0x3f800000
push 0x28
push 0xfa
push 0
push 0
push 0
push 0x78d328
call fcn.00433ab0
add esp, 0x1c
mov dword [ebp - 0x18], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x14], 0
push 0
mov ecx, dword [ebp - 0x14]
sub esp, 0xc
mov dword [ebp - 0x10], 0
mov edx, esp
push 0xd8
mov dword [edx], eax
mov eax, dword [ebp - 0x10]
mov dword [edx + 4], ecx
mov ecx, esi
mov dword [edx + 8], eax
call fcn.0058f300
test eax, eax
je 0x60a0b5
lea ecx, [esi + 4]
push 0
push 0
mov edx, dword [ecx]
mov dword [ebp - 0x18], edx
mov edx, dword [ecx + 4]
mov dword [ebp - 0x14], edx
mov edx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0x18]
push ecx
push 0xe
jmp 0x60a0ae
cmp di, 0x8ee
je 0x60a0b5
cmp di, 0x900
jne 0x60a0b5
push 0
mov dword [ebp - 0x18], 0
mov eax, dword [ebp - 0x18]
sub esp, 0xc
mov edx, esp
mov dword [ebp - 0x14], 0
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x10], 0
mov dword [edx], eax
mov eax, dword [ebp - 0x10]
push 0x338
mov dword [edx + 4], ecx
mov ecx, esi
mov dword [edx + 8], eax
call fcn.0058f300
test eax, eax
je 0x60a0b5
mov edx, dword [eax]
push 0
push 0x338
push 0xffff
push 0x2c
push 0
mov ecx, eax
call dword [edx + 8]
push esi
mov ecx, 0x83a9e0
call fcn.006f5940
test eax, eax
jne 0x60a0fe
cmp di, 0x14e
je 0x60a0e7
cmp di, 0x14f
je 0x60a0e7
mov edi, dword [ebp - 0x24]
push 0
push esi
push ebx
mov eax, dword [edi]
push 0x56
mov ecx, edi
call dword [eax + 0x18]
jmp 0x60a19f
mov eax, dword [ebp - 0x38]
mov edi, dword [ebp - 0x24]
push eax
push esi
mov edx, dword [edi]
push ebx
push 0x56
mov ecx, edi
call dword [edx + 0x18]
jmp 0x60a19f
mov ecx, dword [0x83bf20]
lea edx, [ebp - 0x20]
lea eax, [ebp - 0x40]
push edx
mov dword [ebp - 0x10], ecx
push eax
push ebx
mov ecx, esi
call fcn.00591350
mov ecx, dword [ebp - 0x10]
mov edx, dword [ecx + eax*4]
mov ecx, 0x83a9e0
push edx
call fcn.006f3db0
mov ecx, dword [ebp - 0x40]
cmp ecx, 0xffffffff
je 0x60a19c
mov edx, dword [ebp - 0x20]
xor eax, eax
test edx, edx
mov edx, dword [esi]
sete al
mov dword [ebp - 0x20], eax
push eax
lea eax, [ecx*8 - 8]
push 1
push eax
mov ecx, esi
call dword [edx + 0x1c]
cmp di, 0xc1
jne 0x60a19c
mov eax, 0x1b4e81b5
mov dword [ebp - 0x10], 0
mul dword [ebp + 0xc]
shr edx, 5
mov dword [ebp - 0x14], edx
push ecx
fild qword [ebp - 0x14]
mov ecx, esi
fstp dword [esp]
call fcn.0058e400
jmp 0x60a19c
mov eax, dword [ebp - 0x50]
mov edx, dword [esi]
push eax
mov ecx, esi
call dword [edx + 0x28]
mov byte [esi + 0x8a], 1
call dword [sym.imp.WINMM.dll_timeGetTime]
add eax, dword [ebp + 0xc]
mov dword [esi + 0x234], eax
mov edi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x38]
test eax, eax
je 0x60a353
cmp eax, dword [0x83c484]
jne 0x60a1bd
mov ecx, dword [edi + 0xb4]
mov ebx, dword [ecx + 0x3c]
jmp 0x60a1ce
mov edx, dword [ebp - 0x38]
mov ecx, dword [edi + 0xb4]
push edx
call fcn.00529760
mov ebx, eax
test ebx, ebx
je 0x60a454
cmp esi, ebx
je 0x60a454
mov ecx, ebx
call fcn.00591350
push eax
mov ecx, 0x83a9e0
call fcn.006f5b50
test eax, eax
jne 0x60a1fd
cmp byte [ebx + 0x2b8], 9
jne 0x60a230
mov edi, dword [edi + 0xb4]
mov byte [ebp + 0xb], 0
mov eax, dword [edi + 0x5c]
test eax, eax
jne 0x60a215
mov eax, dword [edi + 0x60]
test eax, eax
je 0x60a219
mov byte [ebp + 0xb], 1
mov eax, dword [ebp - 0x1c]
push eax
call fcn.005439a0
add esp, 4
test al, al
je 0x60a230
mov al, byte [ebp + 0xb]
test al, al
je 0x60a243
mov eax, dword [ebp - 0x38]
mov edx, dword [esi]
push 0
push 0
push eax
push 0x51
push 0
mov ecx, esi
call dword [edx + 8]
mov ecx, dword [ebx + 0xc]
mov edx, dword [ebx + 4]
lea edi, [ebx + 4]
push ecx
push edx
mov ecx, esi
call fcn.0058aed0
mov ecx, dword [ebp + 0xc]
mov eax, dword [ebx]
shr ecx, 4
push 0
push ecx
push 0x3c
push 0x56
push 0
mov ecx, ebx
call dword [eax + 8]
cmp word [ebp - 0x3c], 0x1ea
jne 0x60a2dd
push 0
mov dword [ebp - 0x18], 0
mov eax, dword [ebp - 0x18]
sub esp, 0xc
mov edx, esp
mov dword [ebp - 0x14], 0
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x10], 0
mov dword [edx], eax
mov eax, dword [ebp - 0x10]
push 0x21b
mov dword [edx + 4], ecx
mov ecx, esi
mov dword [edx + 8], eax
call fcn.0058f300
test eax, eax
je 0x60a454
mov ecx, dword [edi]
mov edx, dword [edi + 4]
mov dword [ebp - 0x18], ecx
mov ecx, dword [edi + 8]
mov dword [ebp - 0x10], ecx
push 0
lea ecx, [ebp - 0x18]
push 0
mov dword [ebp - 0x14], edx
mov edx, dword [eax]
push ecx
push 0xe
push 0
mov ecx, eax
call dword [edx + 8]
jmp 0x60a454
cmp word [ebp - 0x3c], 0x8d3
jne 0x60a454
push 0
mov dword [ebp - 0x18], 0
mov eax, dword [ebp - 0x18]
sub esp, 0xc
mov edx, esp
mov dword [ebp - 0x14], 0
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x10], 0
mov dword [edx], eax
mov eax, dword [ebp - 0x10]
push 0x313
mov dword [edx + 4], ecx
mov ecx, esi
mov dword [edx + 8], eax
call fcn.0058f300
test eax, eax
je 0x60a454
mov ecx, dword [edi]
mov edx, dword [edi + 4]
mov dword [ebp - 0x18], ecx
mov ecx, dword [edi + 8]
mov dword [ebp - 0x10], ecx
push 0
lea ecx, [ebp - 0x18]
push 0
mov dword [ebp - 0x14], edx
mov edx, dword [eax]
push ecx
push 0xe
push 0
mov ecx, eax
call dword [edx + 8]
jmp 0x60a454
movsx edi, word [ebp - 0x44]
movsx ebx, word [ebp - 0x48]
lea edx, [ebp - 0x48]
lea eax, [ebp - 0x44]
push edx
push eax
push edi
push ebx
mov ecx, 0x814260
call fcn.00533580
mov ecx, eax
call fcn.005a9ee0
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x44]
push ecx
push edx
mov ecx, esi
call fcn.0058aed0
push 0x134
call fcn.00711d5b
add esp, 4
mov dword [ebp - 0x20], eax
test eax, eax
mov dword [ebp - 4], 4
je 0x60a3ab
mov ecx, eax
call fcn.007006b0
mov esi, eax
jmp 0x60a3ad
xor esi, esi
mov ecx, dword [ebp - 0x4c]
mov eax, dword [esi]
push 0
push 0
push ecx
push 0x16
push 0
mov ecx, esi
mov dword [ebp - 4], 0xffffffff
call dword [eax + 8]
mov edx, dword [esi]
push 0
push edi
push ebx
push 0xe
push 0
mov ecx, esi
call dword [edx + 8]
mov edi, dword [esi]
push 0
push 0
call dword [sym.imp.WINMM.dll_timeGetTime]
mov edx, dword [ebp + 0xc]
mov ecx, esi
add eax, edx
push eax
push 0x73
push 0
call dword [edi + 8]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [esi]
push 0
push 0
push ecx
push 0x75
push 0
mov ecx, esi
call dword [eax + 8]
mov edx, dword [ebp - 0x24]
push 0xc
mov edi, dword [edx + 0xb4]
add edi, 8
mov ebx, dword [edi + 4]
mov eax, dword [ebx + 4]
mov dword [ebp - 0x20], eax
call fcn.00711d5b
add esp, 4
mov ecx, ebx
test ebx, ebx
jne 0x60a42b
mov ecx, eax
mov dword [eax], ecx
mov ecx, dword [ebp - 0x20]
test ecx, ecx
jne 0x60a436
mov ecx, eax
mov dword [eax + 4], ecx
mov dword [ebx + 4], eax
mov ecx, dword [eax + 4]
mov dword [ecx], eax
add eax, 8
test eax, eax
je 0x60a44a
mov dword [eax], esi
mov eax, dword [edi + 8]
mov esi, dword [ebp + 8]
inc eax
mov dword [edi + 8], eax
mov eax, dword [ebp - 0x1c]
cmp eax, 0x191
jg 0x60a4eb
je 0x60a488
sub eax, 0x105
je 0x60a4f2
sub eax, 7
jne 0x60a509
mov edx, dword [ebp + 0xc]
push 0
add edx, 0x3e8
push edx
push 1
jmp 0x60a4f8
push 0
push 0
push 0
push 0
push 0x60
push 0
push 0
push 0x60
mov ecx, esi
call fcn.0059aeb0
push 0
mov dword [ebp - 0x18], 0
mov ecx, dword [ebp - 0x18]
sub esp, 0xc
mov eax, esp
mov dword [ebp - 0x14], 0
mov edx, dword [ebp - 0x14]
mov dword [ebp - 0x10], 0
mov dword [eax], ecx
mov ecx, dword [ebp - 0x10]
push 0x192
mov dword [eax + 4], edx
mov dword [eax + 8], ecx
mov ecx, esi
call fcn.0058f300
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
cmp eax, 0x3f7
jne 0x60a509
push 0
push 0
push 0
push 0
push 0x60
push 0
push 0
push 0x60
mov ecx, esi
call fcn.0059aeb0
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 8