joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10045570
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
cmp byte [0x101f8099], 0
je 0x10045731
push esi
push edi
push 0x16
mov esi, 0x861110
call esi
mov edi, 0x85ec20
mov ecx, eax
call edi
test al, al
jne 0x1004572f
push 0x17
call esi
mov ecx, eax
call edi
test al, al
jne 0x1004572f
push 0x18
call esi
mov ecx, eax
call edi
test al, al
jne 0x1004572f
push 8
call esi
mov ecx, eax
call edi
test al, al
jne 0x1004572f
push 0x41
call esi
mov ecx, eax
call edi
test al, al
jne 0x1004572f
push 0x39
call fcn.10039dd0
test al, al
jne 0x1004572f
push 0x48
call fcn.10039dd0
test al, al
jne 0x1004572f
push 2
call fcn.10039dd0
test al, al
jne 0x1004572f
push 0xd
call fcn.10039dd0
test al, al
je 0x1004562e
push 0x4d
call fcn.10039dd0
test al, al
je 0x1004562e
push 0xe
call fcn.10039dd0
test al, al
jne 0x1004572f
push 0xd
call fcn.10039dd0
test al, al
je 0x10045653
push 8
call fcn.10039dd0
test al, al
je 0x10045653
push 0x4e
call fcn.10039dd0
test al, al
jne 0x1004572f
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
push 0x4d
mov esi, eax
call fcn.10039dd0
mov ecx, 0x101f5d40
test al, al
je 0x100456c7
push 0xc7
call fcn.10039e30
test al, al
je 0x1004572f
sub esi, dword [0x101f9564]
cmp dword [ebp + 8], 0x201
jne 0x100456a5
pop edi
mov byte [0x101f9568], 1
mov dword [0xe8cb3c], 1
pop esi
pop ebp
ret 4
mov byte [0x101f9568], 0
mov dword [0xe8cb3c], 0
cmp esi, 0x1f4
jb 0x1004572f
call edi
mov dword [0x101f9564], eax
jmp 0x1004571b
push 0xb1
call fcn.10039e30
test al, al
je 0x1004572f
sub esi, dword [0x101f8f34]
cmp dword [ebp + 8], 0x201
jne 0x100456fb
pop edi
mov byte [0x101f8f38], 1
mov dword [0xe8cb3c], 1
pop esi
pop ebp
ret 4
mov byte [0x101f8f38], 0
mov dword [0xe8cb3c], 0
cmp esi, 0x1f4
jb 0x1004572f
call edi
mov dword [0x101f8f34], eax
mov edx, 4
mov dword [ebp + 8], 0x107904c1
lea ecx, [ebp + 8]
call fcn.1005d410
pop edi
pop esi
pop ebp
ret 4
Function at 0x10045910
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
cmp byte [0x101f8099], 0
je 0x10045ad1
push esi
push edi
push 0x16
mov esi, 0x861110
call esi
mov edi, 0x85ec20
mov ecx, eax
call edi
test al, al
jne 0x10045acf
push 0x17
call esi
mov ecx, eax
call edi
test al, al
jne 0x10045acf
push 0x18
call esi
mov ecx, eax
call edi
test al, al
jne 0x10045acf
push 8
call esi
mov ecx, eax
call edi
test al, al
jne 0x10045acf
push 0x41
call esi
mov ecx, eax
call edi
test al, al
jne 0x10045acf
push 0x39
call fcn.10039dd0
test al, al
jne 0x10045acf
push 0x48
call fcn.10039dd0
test al, al
jne 0x10045acf
push 2
call fcn.10039dd0
test al, al
jne 0x10045acf
push 0xd
call fcn.10039dd0
test al, al
je 0x100459ce
push 0x4d
call fcn.10039dd0
test al, al
je 0x100459ce
push 0xe
call fcn.10039dd0
test al, al
jne 0x10045acf
push 0xd
call fcn.10039dd0
test al, al
je 0x100459f3
push 8
call fcn.10039dd0
test al, al
je 0x100459f3
push 0x4e
call fcn.10039dd0
test al, al
jne 0x10045acf
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
push 0x4d
mov esi, eax
call fcn.10039dd0
mov ecx, 0x101f5d40
test al, al
je 0x10045a67
push 0xc8
call fcn.10039e30
test al, al
je 0x10045acf
sub esi, dword [0x101f95ac]
cmp dword [ebp + 8], 0x201
jne 0x10045a45
pop edi
mov byte [0x101f95b0], 1
mov dword [0xe8cb3c], 1
pop esi
pop ebp
ret 4
mov byte [0x101f95b0], 0
mov dword [0xe8cb3c], 0
cmp esi, 0x1f4
jb 0x10045acf
call edi
mov dword [0x101f95ac], eax
jmp 0x10045abb
push 0xb2
call fcn.10039e30
test al, al
je 0x10045acf
sub esi, dword [0x101f8f7c]
cmp dword [ebp + 8], 0x201
jne 0x10045a9b
pop edi
mov byte [0x101f8f80], 1
mov dword [0xe8cb3c], 1
pop esi
pop ebp
ret 4
mov byte [0x101f8f80], 0
mov dword [0xe8cb3c], 0
cmp esi, 0x1f4
jb 0x10045acf
call edi
mov dword [0x101f8f7c], eax
mov edx, 4
mov dword [ebp + 8], 0x117904c1
lea ecx, [ebp + 8]
call fcn.1005d410
pop edi
pop esi
pop ebp
ret 4
Function at 0x10045cb0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
cmp byte [0x101f8099], 0
je 0x10045e71
push esi
push edi
push 0x16
mov esi, 0x861110
call esi
mov edi, 0x85ec20
mov ecx, eax
call edi
test al, al
jne 0x10045e6f
push 0x17
call esi
mov ecx, eax
call edi
test al, al
jne 0x10045e6f
push 0x18
call esi
mov ecx, eax
call edi
test al, al
jne 0x10045e6f
push 8
call esi
mov ecx, eax
call edi
test al, al
jne 0x10045e6f
push 0x41
call esi
mov ecx, eax
call edi
test al, al
jne 0x10045e6f
push 0x39
call fcn.10039dd0
test al, al
jne 0x10045e6f
push 0x48
call fcn.10039dd0
test al, al
jne 0x10045e6f
push 2
call fcn.10039dd0
test al, al
jne 0x10045e6f
push 0xd
call fcn.10039dd0
test al, al
je 0x10045d6e
push 0x4d
call fcn.10039dd0
test al, al
je 0x10045d6e
push 0xe
call fcn.10039dd0
test al, al
jne 0x10045e6f
push 0xd
call fcn.10039dd0
test al, al
je 0x10045d93
push 8
call fcn.10039dd0
test al, al
je 0x10045d93
push 0x4e
call fcn.10039dd0
test al, al
jne 0x10045e6f
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
push 0x4d
mov esi, eax
call fcn.10039dd0
mov ecx, 0x101f5d40
test al, al
je 0x10045e07
push 0xc9
call fcn.10039e30
test al, al
je 0x10045e6f
sub esi, dword [0x101f95f4]
cmp dword [ebp + 8], 0x201
jne 0x10045de5
pop edi
mov byte [0x101f95f8], 1
mov dword [0xe8cb3c], 1
pop esi
pop ebp
ret 4
mov byte [0x101f95f8], 0
mov dword [0xe8cb3c], 0
cmp esi, 0x1f4
jb 0x10045e6f
call edi
mov dword [0x101f95f4], eax
jmp 0x10045e5b
push 0xb3
call fcn.10039e30
test al, al
je 0x10045e6f
sub esi, dword [0x101f8fc4]
cmp dword [ebp + 8], 0x201
jne 0x10045e3b
pop edi
mov byte [0x101f8fc8], 1
mov dword [0xe8cb3c], 1
pop esi
pop ebp
ret 4
mov byte [0x101f8fc8], 0
mov dword [0xe8cb3c], 0
cmp esi, 0x1f4
jb 0x10045e6f
call edi
mov dword [0x101f8fc4], eax
mov edx, 4
mov dword [ebp + 8], 0x127904c1
lea ecx, [ebp + 8]
call fcn.1005d410
pop edi
pop esi
pop ebp
ret 4
Function at 0x10046050
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
cmp byte [0x101f8099], 0
je 0x10046211
push esi
push edi
push 0x16
mov esi, 0x861110
call esi
mov edi, 0x85ec20
mov ecx, eax
call edi
test al, al
jne 0x1004620f
push 0x17
call esi
mov ecx, eax
call edi
test al, al
jne 0x1004620f
push 0x18
call esi
mov ecx, eax
call edi
test al, al
jne 0x1004620f
push 8
call esi
mov ecx, eax
call edi
test al, al
jne 0x1004620f
push 0x41
call esi
mov ecx, eax
call edi
test al, al
jne 0x1004620f
push 0x39
call fcn.10039dd0
test al, al
jne 0x1004620f
push 0x48
call fcn.10039dd0
test al, al
jne 0x1004620f
push 2
call fcn.10039dd0
test al, al
jne 0x1004620f
push 0xd
call fcn.10039dd0
test al, al
je 0x1004610e
push 0x4d
call fcn.10039dd0
test al, al
je 0x1004610e
push 0xe
call fcn.10039dd0
test al, al
jne 0x1004620f
push 0xd
call fcn.10039dd0
test al, al
je 0x10046133
push 8
call fcn.10039dd0
test al, al
je 0x10046133
push 0x4e
call fcn.10039dd0
test al, al
jne 0x1004620f
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
push 0x4d
mov esi, eax
call fcn.10039dd0
mov ecx, 0x101f5d40
test al, al
je 0x100461a7
push 0xca
call fcn.10039e30
test al, al
je 0x1004620f
sub esi, dword [0x101f963c]
cmp dword [ebp + 8], 0x201
jne 0x10046185
pop edi
mov byte [0x101f9640], 1
mov dword [0xe8cb3c], 1
pop esi
pop ebp
ret 4
mov byte [0x101f9640], 0
mov dword [0xe8cb3c], 0
cmp esi, 0x1f4
jb 0x1004620f
call edi
mov dword [0x101f963c], eax
jmp 0x100461fb
push 0xb4
call fcn.10039e30
test al, al
je 0x1004620f
sub esi, dword [0x101f900c]
cmp dword [ebp + 8], 0x201
jne 0x100461db
pop edi
mov byte [0x101f9010], 1
mov dword [0xe8cb3c], 1
pop esi
pop ebp
ret 4
mov byte [0x101f9010], 0
mov dword [0xe8cb3c], 0
cmp esi, 0x1f4
jb 0x1004620f
call edi
mov dword [0x101f900c], eax
mov edx, 4
mov dword [ebp + 8], 0x137904c1
lea ecx, [ebp + 8]
call fcn.1005d410
pop edi
pop esi
pop ebp
ret 4
Function at 0x100463f0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
cmp byte [0x101f8099], 0
je 0x100465b1
push esi
push edi
push 0x16
mov esi, 0x861110
call esi
mov edi, 0x85ec20
mov ecx, eax
call edi
test al, al
jne 0x100465af
push 0x17
call esi
mov ecx, eax
call edi
test al, al
jne 0x100465af
push 0x18
call esi
mov ecx, eax
call edi
test al, al
jne 0x100465af
push 8
call esi
mov ecx, eax
call edi
test al, al
jne 0x100465af
push 0x41
call esi
mov ecx, eax
call edi
test al, al
jne 0x100465af
push 0x39
call fcn.10039dd0
test al, al
jne 0x100465af
push 0x48
call fcn.10039dd0
test al, al
jne 0x100465af
push 2
call fcn.10039dd0
test al, al
jne 0x100465af
push 0xd
call fcn.10039dd0
test al, al
je 0x100464ae
push 0x4d
call fcn.10039dd0
test al, al
je 0x100464ae
push 0xe
call fcn.10039dd0
test al, al
jne 0x100465af
push 0xd
call fcn.10039dd0
test al, al
je 0x100464d3
push 8
call fcn.10039dd0
test al, al
je 0x100464d3
push 0x4e
call fcn.10039dd0
test al, al
jne 0x100465af
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
push 0x4d
mov esi, eax
call fcn.10039dd0
mov ecx, 0x101f5d40
test al, al
je 0x10046547
push 0xcb
call fcn.10039e30
test al, al
je 0x100465af
sub esi, dword [0x101f9684]
cmp dword [ebp + 8], 0x201
jne 0x10046525
pop edi
mov byte [0x101f9688], 1
mov dword [0xe8cb3c], 1
pop esi
pop ebp
ret 4
mov byte [0x101f9688], 0
mov dword [0xe8cb3c], 0
cmp esi, 0x1f4
jb 0x100465af
call edi
mov dword [0x101f9684], eax
jmp 0x1004659b
push 0xb5
call fcn.10039e30
test al, al
je 0x100465af
sub esi, dword [0x101f9054]
cmp dword [ebp + 8], 0x201
jne 0x1004657b
pop edi
mov byte [0x101f9058], 1
mov dword [0xe8cb3c], 1
pop esi
pop ebp
ret 4
mov byte [0x101f9058], 0
mov dword [0xe8cb3c], 0
cmp esi, 0x1f4
jb 0x100465af
call edi
mov dword [0x101f9054], eax
mov edx, 4
mov dword [ebp + 8], 0x147904c1
lea ecx, [ebp + 8]
call fcn.1005d410
pop edi
pop esi
pop ebp
ret 4
Function at 0x10046790
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
cmp byte [0x101f8099], 0
je 0x10046951
push esi
push edi
push 0x16
mov esi, 0x861110
call esi
mov edi, 0x85ec20
mov ecx, eax
call edi
test al, al
jne 0x1004694f
push 0x17
call esi
mov ecx, eax
call edi
test al, al
jne 0x1004694f
push 0x18
call esi
mov ecx, eax
call edi
test al, al
jne 0x1004694f
push 8
call esi
mov ecx, eax
call edi
test al, al
jne 0x1004694f
push 0x41
call esi
mov ecx, eax
call edi
test al, al
jne 0x1004694f
push 0x39
call fcn.10039dd0
test al, al
jne 0x1004694f
push 0x48
call fcn.10039dd0
test al, al
jne 0x1004694f
push 2
call fcn.10039dd0
test al, al
jne 0x1004694f
push 0xd
call fcn.10039dd0
test al, al
je 0x1004684e
push 0x4d
call fcn.10039dd0
test al, al
je 0x1004684e
push 0xe
call fcn.10039dd0
test al, al
jne 0x1004694f
push 0xd
call fcn.10039dd0
test al, al
je 0x10046873
push 8
call fcn.10039dd0
test al, al
je 0x10046873
push 0x4e
call fcn.10039dd0
test al, al
jne 0x1004694f
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
push 0x4d
mov esi, eax
call fcn.10039dd0
mov ecx, 0x101f5d40
test al, al
je 0x100468e7
push 0xcc
call fcn.10039e30
test al, al
je 0x1004694f
sub esi, dword [0x101f96cc]
cmp dword [ebp + 8], 0x201
jne 0x100468c5
pop edi
mov byte [0x101f96d0], 1
mov dword [0xe8cb3c], 1
pop esi
pop ebp
ret 4
mov byte [0x101f96d0], 0
mov dword [0xe8cb3c], 0
cmp esi, 0x1f4
jb 0x1004694f
call edi
mov dword [0x101f96cc], eax
jmp 0x1004693b
push 0xb6
call fcn.10039e30
test al, al
je 0x1004694f
sub esi, dword [0x101f909c]
cmp dword [ebp + 8], 0x201
jne 0x1004691b
pop edi
mov byte [0x101f90a0], 1
mov dword [0xe8cb3c], 1
pop esi
pop ebp
ret 4
mov byte [0x101f90a0], 0
mov dword [0xe8cb3c], 0
cmp esi, 0x1f4
jb 0x1004694f
call edi
mov dword [0x101f909c], eax
mov edx, 4
mov dword [ebp + 8], 0x157904c1
lea ecx, [ebp + 8]
call fcn.1005d410
pop edi
pop esi
pop ebp
ret 4
Function at 0x10046b30
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
cmp byte [0x101f8099], 0
je 0x10046cf1
push esi
push edi
push 0x16
mov esi, 0x861110
call esi
mov edi, 0x85ec20
mov ecx, eax
call edi
test al, al
jne 0x10046cef
push 0x17
call esi
mov ecx, eax
call edi
test al, al
jne 0x10046cef
push 0x18
call esi
mov ecx, eax
call edi
test al, al
jne 0x10046cef
push 8
call esi
mov ecx, eax
call edi
test al, al
jne 0x10046cef
push 0x41
call esi
mov ecx, eax
call edi
test al, al
jne 0x10046cef
push 0x39
call fcn.10039dd0
test al, al
jne 0x10046cef
push 0x48
call fcn.10039dd0
test al, al
jne 0x10046cef
push 2
call fcn.10039dd0
test al, al
jne 0x10046cef
push 0xd
call fcn.10039dd0
test al, al
je 0x10046bee
push 0x4d
call fcn.10039dd0
test al, al
je 0x10046bee
push 0xe
call fcn.10039dd0
test al, al
jne 0x10046cef
push 0xd
call fcn.10039dd0
test al, al
je 0x10046c13
push 8
call fcn.10039dd0
test al, al
je 0x10046c13
push 0x4e
call fcn.10039dd0
test al, al
jne 0x10046cef
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
push 0x4d
mov esi, eax
call fcn.10039dd0
mov ecx, 0x101f5d40
test al, al
je 0x10046c87
push 0xcd
call fcn.10039e30
test al, al
je 0x10046cef
sub esi, dword [0x101f9714]
cmp dword [ebp + 8], 0x201
jne 0x10046c65
pop edi
mov byte [0x101f9718], 1
mov dword [0xe8cb3c], 1
pop esi
pop ebp
ret 4
mov byte [0x101f9718], 0
mov dword [0xe8cb3c], 0
cmp esi, 0x1f4
jb 0x10046cef
call edi
mov dword [0x101f9714], eax
jmp 0x10046cdb
push 0xb7
call fcn.10039e30
test al, al
je 0x10046cef
sub esi, dword [0x101f90e4]
cmp dword [ebp + 8], 0x201
jne 0x10046cbb
pop edi
mov byte [0x101f90e8], 1
mov dword [0xe8cb3c], 1
pop esi
pop ebp
ret 4
mov byte [0x101f90e8], 0
mov dword [0xe8cb3c], 0
cmp esi, 0x1f4
jb 0x10046cef
call edi
mov dword [0x101f90e4], eax
mov edx, 4
mov dword [ebp + 8], 0x167904c1
lea ecx, [ebp + 8]
call fcn.1005d410
pop edi
pop esi
pop ebp
ret 4
Function at 0x10046ed0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
cmp byte [0x101f8099], 0
je 0x10047091
push esi
push edi
push 0x16
mov esi, 0x861110
call esi
mov edi, 0x85ec20
mov ecx, eax
call edi
test al, al
jne 0x1004708f
push 0x17
call esi
mov ecx, eax
call edi
test al, al
jne 0x1004708f
push 0x18
call esi
mov ecx, eax
call edi
test al, al
jne 0x1004708f
push 8
call esi
mov ecx, eax
call edi
test al, al
jne 0x1004708f
push 0x41
call esi
mov ecx, eax
call edi
test al, al
jne 0x1004708f
push 0x39
call fcn.10039dd0
test al, al
jne 0x1004708f
push 0x48
call fcn.10039dd0
test al, al
jne 0x1004708f
push 2
call fcn.10039dd0
test al, al
jne 0x1004708f
push 0xd
call fcn.10039dd0
test al, al
je 0x10046f8e
push 0x4d
call fcn.10039dd0
test al, al
je 0x10046f8e
push 0xe
call fcn.10039dd0
test al, al
jne 0x1004708f
push 0xd
call fcn.10039dd0
test al, al
je 0x10046fb3
push 8
call fcn.10039dd0
test al, al
je 0x10046fb3
push 0x4e
call fcn.10039dd0
test al, al
jne 0x1004708f
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
push 0x4d
mov esi, eax
call fcn.10039dd0
mov ecx, 0x101f5d40
test al, al
je 0x10047027
push 0xce
call fcn.10039e30
test al, al
je 0x1004708f
sub esi, dword [0x101f975c]
cmp dword [ebp + 8], 0x201
jne 0x10047005
pop edi
mov byte [0x101f9760], 1
mov dword [0xe8cb3c], 1
pop esi
pop ebp
ret 4
mov byte [0x101f9760], 0
mov dword [0xe8cb3c], 0
cmp esi, 0x1f4
jb 0x1004708f
call edi
mov dword [0x101f975c], eax
jmp 0x1004707b
push 0xb8
call fcn.10039e30
test al, al
je 0x1004708f
sub esi, dword [0x101f912c]
cmp dword [ebp + 8], 0x201
jne 0x1004705b
pop edi
mov byte [0x101f9130], 1
mov dword [0xe8cb3c], 1
pop esi
pop ebp
ret 4
mov byte [0x101f9130], 0
mov dword [0xe8cb3c], 0
cmp esi, 0x1f4
jb 0x1004708f
call edi
mov dword [0x101f912c], eax
mov edx, 4
mov dword [ebp + 8], 0x177904c1
lea ecx, [ebp + 8]
call fcn.1005d410
pop edi
pop esi
pop ebp
ret 4
Function at 0x10047270
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
cmp byte [0x101f8099], 0
je 0x10047431
push esi
push edi
push 0x16
mov esi, 0x861110
call esi
mov edi, 0x85ec20
mov ecx, eax
call edi
test al, al
jne 0x1004742f
push 0x17
call esi
mov ecx, eax
call edi
test al, al
jne 0x1004742f
push 0x18
call esi
mov ecx, eax
call edi
test al, al
jne 0x1004742f
push 8
call esi
mov ecx, eax
call edi
test al, al
jne 0x1004742f
push 0x41
call esi
mov ecx, eax
call edi
test al, al
jne 0x1004742f
push 0x39
call fcn.10039dd0
test al, al
jne 0x1004742f
push 0x48
call fcn.10039dd0
test al, al
jne 0x1004742f
push 2
call fcn.10039dd0
test al, al
jne 0x1004742f
push 0xd
call fcn.10039dd0
test al, al
je 0x1004732e
push 0x4d
call fcn.10039dd0
test al, al
je 0x1004732e
push 0xe
call fcn.10039dd0
test al, al
jne 0x1004742f
push 0xd
call fcn.10039dd0
test al, al
je 0x10047353
push 8
call fcn.10039dd0
test al, al
je 0x10047353
push 0x4e
call fcn.10039dd0
test al, al
jne 0x1004742f
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
push 0x4d
mov esi, eax
call fcn.10039dd0
mov ecx, 0x101f5d40
test al, al
je 0x100473c7
push 0xcf
call fcn.10039e30
test al, al
je 0x1004742f
sub esi, dword [0x101f97a4]
cmp dword [ebp + 8], 0x201
jne 0x100473a5
pop edi
mov byte [0x101f97a8], 1
mov dword [0xe8cb3c], 1
pop esi
pop ebp
ret 4
mov byte [0x101f97a8], 0
mov dword [0xe8cb3c], 0
cmp esi, 0x1f4
jb 0x1004742f
call edi
mov dword [0x101f97a4], eax
jmp 0x1004741b
push 0xb9
call fcn.10039e30
test al, al
je 0x1004742f
sub esi, dword [0x101f9174]
cmp dword [ebp + 8], 0x201
jne 0x100473fb
pop edi
mov byte [0x101f9178], 1
mov dword [0xe8cb3c], 1
pop esi
pop ebp
ret 4
mov byte [0x101f9178], 0
mov dword [0xe8cb3c], 0
cmp esi, 0x1f4
jb 0x1004742f
call edi
mov dword [0x101f9174], eax
mov edx, 4
mov dword [ebp + 8], 0x187904c1
lea ecx, [ebp + 8]
call fcn.1005d410
pop edi
pop esi
pop ebp
ret 4
Function at 0x10047610
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
cmp byte [0x101f8099], 0
je 0x100477d1
push esi
push edi
push 0x16
mov esi, 0x861110
call esi
mov edi, 0x85ec20
mov ecx, eax
call edi
test al, al
jne 0x100477cf
push 0x17
call esi
mov ecx, eax
call edi
test al, al
jne 0x100477cf
push 0x18
call esi
mov ecx, eax
call edi
test al, al
jne 0x100477cf
push 8
call esi
mov ecx, eax
call edi
test al, al
jne 0x100477cf
push 0x41
call esi
mov ecx, eax
call edi
test al, al
jne 0x100477cf
push 0x39
call fcn.10039dd0
test al, al
jne 0x100477cf
push 0x48
call fcn.10039dd0
test al, al
jne 0x100477cf
push 2
call fcn.10039dd0
test al, al
jne 0x100477cf
push 0xd
call fcn.10039dd0
test al, al
je 0x100476ce
push 0x4d
call fcn.10039dd0
test al, al
je 0x100476ce
push 0xe
call fcn.10039dd0
test al, al
jne 0x100477cf
push 0xd
call fcn.10039dd0
test al, al
je 0x100476f3
push 8
call fcn.10039dd0
test al, al
je 0x100476f3
push 0x4e
call fcn.10039dd0
test al, al
jne 0x100477cf
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
push 0x4d
mov esi, eax
call fcn.10039dd0
mov ecx, 0x101f5d40
test al, al
je 0x10047767
push 0xd0
call fcn.10039e30
test al, al
je 0x100477cf
sub esi, dword [0x101f97ec]
cmp dword [ebp + 8], 0x201
jne 0x10047745
pop edi
mov byte [0x101f97f0], 1
mov dword [0xe8cb3c], 1
pop esi
pop ebp
ret 4
mov byte [0x101f97f0], 0
mov dword [0xe8cb3c], 0
cmp esi, 0x1f4
jb 0x100477cf
call edi
mov dword [0x101f97ec], eax
jmp 0x100477bb
push 0xba
call fcn.10039e30
test al, al
je 0x100477cf
sub esi, dword [0x101f91bc]
cmp dword [ebp + 8], 0x201
jne 0x1004779b
pop edi
mov byte [0x101f91c0], 1
mov dword [0xe8cb3c], 1
pop esi
pop ebp
ret 4
mov byte [0x101f91c0], 0
mov dword [0xe8cb3c], 0
cmp esi, 0x1f4
jb 0x100477cf
call edi
mov dword [0x101f91bc], eax
mov edx, 4
mov dword [ebp + 8], 0x197904c1
lea ecx, [ebp + 8]
call fcn.1005d410
pop edi
pop esi
pop ebp
ret 4
Function at 0x100479b0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
cmp byte [0x101f8099], 0
je 0x10047b71
push esi
push edi
push 0x16
mov esi, 0x861110
call esi
mov edi, 0x85ec20
mov ecx, eax
call edi
test al, al
jne 0x10047b6f
push 0x17
call esi
mov ecx, eax
call edi
test al, al
jne 0x10047b6f
push 0x18
call esi
mov ecx, eax
call edi
test al, al
jne 0x10047b6f
push 8
call esi
mov ecx, eax
call edi
test al, al
jne 0x10047b6f
push 0x41
call esi
mov ecx, eax
call edi
test al, al
jne 0x10047b6f
push 0x39
call fcn.10039dd0
test al, al
jne 0x10047b6f
push 0x48
call fcn.10039dd0
test al, al
jne 0x10047b6f
push 2
call fcn.10039dd0
test al, al
jne 0x10047b6f
push 0xd
call fcn.10039dd0
test al, al
je 0x10047a6e
push 0x4d
call fcn.10039dd0
test al, al
je 0x10047a6e
push 0xe
call fcn.10039dd0
test al, al
jne 0x10047b6f
push 0xd
call fcn.10039dd0
test al, al
je 0x10047a93
push 8
call fcn.10039dd0
test al, al
je 0x10047a93
push 0x4e
call fcn.10039dd0
test al, al
jne 0x10047b6f
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
push 0x4d
mov esi, eax
call fcn.10039dd0
mov ecx, 0x101f5d40
test al, al
je 0x10047b07
push 0xd1
call fcn.10039e30
test al, al
je 0x10047b6f
sub esi, dword [0x101f9834]
cmp dword [ebp + 8], 0x201
jne 0x10047ae5
pop edi
mov byte [0x101f9838], 1
mov dword [0xe8cb3c], 1
pop esi
pop ebp
ret 4
mov byte [0x101f9838], 0
mov dword [0xe8cb3c], 0
cmp esi, 0x1f4
jb 0x10047b6f
call edi
mov dword [0x101f9834], eax
jmp 0x10047b5b
push 0xbb
call fcn.10039e30
test al, al
je 0x10047b6f
sub esi, dword [0x101f9204]
cmp dword [ebp + 8], 0x201
jne 0x10047b3b
pop edi
mov byte [0x101f9208], 1
mov dword [0xe8cb3c], 1
pop esi
pop ebp
ret 4
mov byte [0x101f9208], 0
mov dword [0xe8cb3c], 0
cmp esi, 0x1f4
jb 0x10047b6f
call edi
mov dword [0x101f9204], eax
mov edx, 4
mov dword [ebp + 8], 0x207904c1
lea ecx, [ebp + 8]
call fcn.1005d410
pop edi
pop esi
pop ebp
ret 4
Function at 0x10047d50
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
cmp byte [0x101f8099], 0
je 0x10047f11
push esi
push edi
push 0x16
mov esi, 0x861110
call esi
mov edi, 0x85ec20
mov ecx, eax
call edi
test al, al
jne 0x10047f0f
push 0x17
call esi
mov ecx, eax
call edi
test al, al
jne 0x10047f0f
push 0x18
call esi
mov ecx, eax
call edi
test al, al
jne 0x10047f0f
push 8
call esi
mov ecx, eax
call edi
test al, al
jne 0x10047f0f
push 0x41
call esi
mov ecx, eax
call edi
test al, al
jne 0x10047f0f
push 0x39
call fcn.10039dd0
test al, al
jne 0x10047f0f
push 0x48
call fcn.10039dd0
test al, al
jne 0x10047f0f
push 2
call fcn.10039dd0
test al, al
jne 0x10047f0f
push 0xd
call fcn.10039dd0
test al, al
je 0x10047e0e
push 0x4d
call fcn.10039dd0
test al, al
je 0x10047e0e
push 0xe
call fcn.10039dd0
test al, al
jne 0x10047f0f
push 0xd
call fcn.10039dd0
test al, al
je 0x10047e33
push 8
call fcn.10039dd0
test al, al
je 0x10047e33
push 0x4e
call fcn.10039dd0
test al, al
jne 0x10047f0f
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
push 0x4d
mov esi, eax
call fcn.10039dd0
mov ecx, 0x101f5d40
test al, al
je 0x10047ea7
push 0xd2
call fcn.10039e30
test al, al
je 0x10047f0f
sub esi, dword [0x101f987c]
cmp dword [ebp + 8], 0x201
jne 0x10047e85
pop edi
mov byte [0x101f9880], 1
mov dword [0xe8cb3c], 1
pop esi
pop ebp
ret 4
mov byte [0x101f9880], 0
mov dword [0xe8cb3c], 0
cmp esi, 0x1f4
jb 0x10047f0f
call edi
mov dword [0x101f987c], eax
jmp 0x10047efb
push 0xbc
call fcn.10039e30
test al, al
je 0x10047f0f
sub esi, dword [0x101f924c]
cmp dword [ebp + 8], 0x201
jne 0x10047edb
pop edi
mov byte [0x101f9250], 1
mov dword [0xe8cb3c], 1
pop esi
pop ebp
ret 4
mov byte [0x101f9250], 0
mov dword [0xe8cb3c], 0
cmp esi, 0x1f4
jb 0x10047f0f
call edi
mov dword [0x101f924c], eax
mov edx, 4
mov dword [ebp + 8], 0x217904c1
lea ecx, [ebp + 8]
call fcn.1005d410
pop edi
pop esi
pop ebp
ret 4