joyce8/EMBER2024-capa huggingface dataset:
Function at 0x10027770
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
cmp byte [0x10124295], 0
mov edx, eax
je 0x100277fd
mov eax, 0x116
mov ecx, 0x10123c90
call fcn.10051040
test al, al
je 0x100277fd
cmp dword [ebp + 8], 0x201
jne 0x100277b4
mov al, 1
mov byte [0x10128354], al
pop esi
mov esp, ebp
pop ebp
ret 4
sub edx, dword [0x10128350]
mov byte [0x10128354], 0
cmp edx, 0x1f4
jb 0x100277fd
call esi
mov dword [0x10128350], eax
lea eax, [ebp - 0xc]
mov ecx, 0xc
push eax
mov byte [0x10129d55], 0
mov dword [ebp - 0xc], 0x27f30cc1
mov dword [ebp - 8], 5
call fcn.1008c360
add esp, 4
mov byte [0x10124295], 0
xor al, al
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10027810
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
cmp byte [0x10124295], 0
mov edx, eax
je 0x1002789d
mov eax, 0x117
mov ecx, 0x10123c90
call fcn.10051040
test al, al
je 0x1002789d
cmp dword [ebp + 8], 0x201
jne 0x10027854
mov al, 1
mov byte [0x10128394], al
pop esi
mov esp, ebp
pop ebp
ret 4
sub edx, dword [0x10128390]
mov byte [0x10128394], 0
cmp edx, 0x1f4
jb 0x1002789d
call esi
mov dword [0x10128390], eax
lea eax, [ebp - 0xc]
mov ecx, 0xc
push eax
mov byte [0x10129d55], 0
mov dword [ebp - 0xc], 0x27f30cc1
mov dword [ebp - 8], 6
call fcn.1008c360
add esp, 4
mov byte [0x10124295], 0
xor al, al
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100278b0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
cmp byte [0x10124295], 0
mov edx, eax
je 0x1002793d
mov eax, 0x118
mov ecx, 0x10123c90
call fcn.10051040
test al, al
je 0x1002793d
cmp dword [ebp + 8], 0x201
jne 0x100278f4
mov al, 1
mov byte [0x101283d4], al
pop esi
mov esp, ebp
pop ebp
ret 4
sub edx, dword [0x101283d0]
mov byte [0x101283d4], 0
cmp edx, 0x1f4
jb 0x1002793d
call esi
mov dword [0x101283d0], eax
lea eax, [ebp - 0xc]
mov ecx, 0xc
push eax
mov byte [0x10129d55], 0
mov dword [ebp - 0xc], 0x27f30cc1
mov dword [ebp - 8], 7
call fcn.1008c360
add esp, 4
mov byte [0x10124295], 0
xor al, al
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10027950
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
cmp byte [0x10124295], 0
mov edx, eax
je 0x100279dd
mov eax, 0x119
mov ecx, 0x10123c90
call fcn.10051040
test al, al
je 0x100279dd
cmp dword [ebp + 8], 0x201
jne 0x10027994
mov al, 1
mov byte [0x10128414], al
pop esi
mov esp, ebp
pop ebp
ret 4
sub edx, dword [0x10128410]
mov byte [0x10128414], 0
cmp edx, 0x1f4
jb 0x100279dd
call esi
mov dword [0x10128410], eax
lea eax, [ebp - 0xc]
mov ecx, 0xc
push eax
mov byte [0x10129d55], 0
mov dword [ebp - 0xc], 0x27f30cc1
mov dword [ebp - 8], 8
call fcn.1008c360
add esp, 4
mov byte [0x10124295], 0
xor al, al
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x100279f0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
cmp byte [0x10124295], 0
mov edx, eax
je 0x10027a7d
mov eax, 0x11a
mov ecx, 0x10123c90
call fcn.10051040
test al, al
je 0x10027a7d
cmp dword [ebp + 8], 0x201
jne 0x10027a34
mov al, 1
mov byte [0x10128454], al
pop esi
mov esp, ebp
pop ebp
ret 4
sub edx, dword [0x10128450]
mov byte [0x10128454], 0
cmp edx, 0x1f4
jb 0x10027a7d
call esi
mov dword [0x10128450], eax
lea eax, [ebp - 0xc]
mov ecx, 0xc
push eax
mov byte [0x10129d55], 0
mov dword [ebp - 0xc], 0x27f30cc1
mov dword [ebp - 8], 9
call fcn.1008c360
add esp, 4
mov byte [0x10124295], 0
xor al, al
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10027a90
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
cmp byte [0x10124295], 0
mov edx, eax
je 0x10027b1d
mov eax, 0x11b
mov ecx, 0x10123c90
call fcn.10051040
test al, al
je 0x10027b1d
cmp dword [ebp + 8], 0x201
jne 0x10027ad4
mov al, 1
mov byte [0x10128494], al
pop esi
mov esp, ebp
pop ebp
ret 4
sub edx, dword [0x10128490]
mov byte [0x10128494], 0
cmp edx, 0x1f4
jb 0x10027b1d
call esi
mov dword [0x10128490], eax
lea eax, [ebp - 0xc]
mov ecx, 0xc
push eax
mov byte [0x10129d55], 0
mov dword [ebp - 0xc], 0x27f30cc1
mov dword [ebp - 8], 0xa
call fcn.1008c360
add esp, 4
mov byte [0x10124295], 0
xor al, al
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10027b30
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
cmp byte [0x10124295], 0
mov edx, eax
je 0x10027bbd
mov eax, 0x11c
mov ecx, 0x10123c90
call fcn.10051040
test al, al
je 0x10027bbd
cmp dword [ebp + 8], 0x201
jne 0x10027b74
mov al, 1
mov byte [0x101284d4], al
pop esi
mov esp, ebp
pop ebp
ret 4
sub edx, dword [0x101284d0]
mov byte [0x101284d4], 0
cmp edx, 0x1f4
jb 0x10027bbd
call esi
mov dword [0x101284d0], eax
lea eax, [ebp - 0xc]
mov ecx, 0xc
push eax
mov byte [0x10129d55], 0
mov dword [ebp - 0xc], 0x27f30cc1
mov dword [ebp - 8], 0xb
call fcn.1008c360
add esp, 4
mov byte [0x10124295], 0
xor al, al
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10027bd0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
cmp byte [0x10124295], 0
mov edx, eax
je 0x10027c59
mov eax, 0x11d
mov ecx, 0x10123c90
call fcn.10051040
test al, al
je 0x10027c59
cmp dword [ebp + 8], 0x201
jne 0x10027c14
mov al, 1
mov byte [0x10128514], al
pop esi
mov esp, ebp
pop ebp
ret 4
sub edx, dword [0x10128510]
mov byte [0x10128514], 0
cmp edx, 0x1f4
jb 0x10027c59
call esi
mov dword [0x10128510], eax
lea eax, [ebp - 0xc]
mov ecx, 0xc
push eax
mov byte [0x10129d55], 0
mov dword [ebp - 0xc], 0x27f30cc1
mov dword [ebp - 8], ecx
call fcn.1008c360
add esp, 4
mov byte [0x10124295], 0
xor al, al
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x10027c70
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
cmp byte [0x10124295], 0
mov edx, eax
je 0x10027cfd
mov eax, 0x11e
mov ecx, 0x10123c90
call fcn.10051040
test al, al
je 0x10027cfd
cmp dword [ebp + 8], 0x201
jne 0x10027cb4
mov al, 1
mov byte [0x10128554], al
pop esi
mov esp, ebp
pop ebp
ret 4
sub edx, dword [0x10128550]
mov byte [0x10128554], 0
cmp edx, 0x1f4
jb 0x10027cfd
call esi
mov dword [0x10128550], eax
lea eax, [ebp - 0xc]
mov ecx, 0xc
push eax
mov byte [0x10129d55], 0
mov dword [ebp - 0xc], 0x27f30cc1
mov dword [ebp - 8], 0xd
call fcn.1008c360
add esp, 4
mov byte [0x10124295], 0
xor al, al
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10027d10
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
cmp byte [0x10124295], 0
mov edx, eax
je 0x10027d9d
mov eax, 0x11f
mov ecx, 0x10123c90
call fcn.10051040
test al, al
je 0x10027d9d
cmp dword [ebp + 8], 0x201
jne 0x10027d54
mov al, 1
mov byte [0x10128594], al
pop esi
mov esp, ebp
pop ebp
ret 4
sub edx, dword [0x10128590]
mov byte [0x10128594], 0
cmp edx, 0x1f4
jb 0x10027d9d
call esi
mov dword [0x10128590], eax
lea eax, [ebp - 0xc]
mov ecx, 0xc
push eax
mov byte [0x10129d55], 0
mov dword [ebp - 0xc], 0x27f30cc1
mov dword [ebp - 8], 0xe
call fcn.1008c360
add esp, 4
mov byte [0x10124295], 0
xor al, al
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10027db0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
cmp byte [0x10124295], 0
mov edx, eax
je 0x10027e3d
mov eax, 0x120
mov ecx, 0x10123c90
call fcn.10051040
test al, al
je 0x10027e3d
cmp dword [ebp + 8], 0x201
jne 0x10027df4
mov al, 1
mov byte [0x101285d4], al
pop esi
mov esp, ebp
pop ebp
ret 4
sub edx, dword [0x101285d0]
mov byte [0x101285d4], 0
cmp edx, 0x1f4
jb 0x10027e3d
call esi
mov dword [0x101285d0], eax
lea eax, [ebp - 0xc]
mov ecx, 0xc
push eax
mov byte [0x10129d55], 0
mov dword [ebp - 0xc], 0x27f30cc1
mov dword [ebp - 8], 0xf
call fcn.1008c360
add esp, 4
mov byte [0x10124295], 0
xor al, al
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10027e50
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
cmp byte [0x10124295], 0
mov edx, eax
je 0x10027edd
mov eax, 0x121
mov ecx, 0x10123c90
call fcn.10051040
test al, al
je 0x10027edd
cmp dword [ebp + 8], 0x201
jne 0x10027e94
mov al, 1
mov byte [0x10128614], al
pop esi
mov esp, ebp
pop ebp
ret 4
sub edx, dword [0x10128610]
mov byte [0x10128614], 0
cmp edx, 0x1f4
jb 0x10027edd
call esi
mov dword [0x10128610], eax
lea eax, [ebp - 0xc]
mov ecx, 0xc
push eax
mov byte [0x10129d55], 0
mov dword [ebp - 0xc], 0x27f30cc1
mov dword [ebp - 8], 0x10
call fcn.1008c360
add esp, 4
mov byte [0x10124295], 0
xor al, al
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x10027ef0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
cmp byte [0x10124295], 0
mov edx, eax
je 0x10027f7d
mov eax, 0x122
mov ecx, 0x10123c90
call fcn.10051040
test al, al
je 0x10027f7d
cmp dword [ebp + 8], 0x201
jne 0x10027f34
mov al, 1
mov byte [0x10128654], al
pop esi
mov esp, ebp
pop ebp
ret 4
sub edx, dword [0x10128650]
mov byte [0x10128654], 0
cmp edx, 0x1f4
jb 0x10027f7d
call esi
mov dword [0x10128650], eax
lea eax, [ebp - 0xc]
mov ecx, 0xc
push eax
mov byte [0x10129d55], 0
mov dword [ebp - 0xc], 0x27f30cc1
mov dword [ebp - 8], 0x11
call fcn.1008c360
add esp, 4
mov byte [0x10124295], 0
xor al, al
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10027f90
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
cmp byte [0x10124295], 0
mov edx, eax
je 0x1002801d
mov eax, 0x123
mov ecx, 0x10123c90
call fcn.10051040
test al, al
je 0x1002801d
cmp dword [ebp + 8], 0x201
jne 0x10027fd4
mov al, 1
mov byte [0x10128694], al
pop esi
mov esp, ebp
pop ebp
ret 4
sub edx, dword [0x10128690]
mov byte [0x10128694], 0
cmp edx, 0x1f4
jb 0x1002801d
call esi
mov dword [0x10128690], eax
lea eax, [ebp - 0xc]
mov ecx, 0xc
push eax
mov byte [0x10129d55], 0
mov dword [ebp - 0xc], 0x27f30cc1
mov dword [ebp - 8], 0x12
call fcn.1008c360
add esp, 4
mov byte [0x10124295], 0
xor al, al
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10028030
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
cmp byte [0x10124295], 0
mov edx, eax
je 0x100280bd
mov eax, 0x124
mov ecx, 0x10123c90
call fcn.10051040
test al, al
je 0x100280bd
cmp dword [ebp + 8], 0x201
jne 0x10028074
mov al, 1
mov byte [0x101286d4], al
pop esi
mov esp, ebp
pop ebp
ret 4
sub edx, dword [0x101286d0]
mov byte [0x101286d4], 0
cmp edx, 0x1f4
jb 0x100280bd
call esi
mov dword [0x101286d0], eax
lea eax, [ebp - 0xc]
mov ecx, 0xc
push eax
mov byte [0x10129d55], 0
mov dword [ebp - 0xc], 0x27f30cc1
mov dword [ebp - 8], 0x13
call fcn.1008c360
add esp, 4
mov byte [0x10124295], 0
xor al, al
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100280d0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
cmp byte [0x10124295], 0
mov edx, eax
je 0x1002815d
mov eax, 0x125
mov ecx, 0x10123c90
call fcn.10051040
test al, al
je 0x1002815d
cmp dword [ebp + 8], 0x201
jne 0x10028114
mov al, 1
mov byte [0x10128714], al
pop esi
mov esp, ebp
pop ebp
ret 4
sub edx, dword [0x10128710]
mov byte [0x10128714], 0
cmp edx, 0x1f4
jb 0x1002815d
call esi
mov dword [0x10128710], eax
lea eax, [ebp - 0xc]
mov ecx, 0xc
push eax
mov byte [0x10129d55], 0
mov dword [ebp - 0xc], 0x27f30cc1
mov dword [ebp - 8], 0x14
call fcn.1008c360
add esp, 4
mov byte [0x10124295], 0
xor al, al
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x10028170
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
cmp byte [0x10124295], 0
mov edx, eax
je 0x100281fd
mov eax, 0x126
mov ecx, 0x10123c90
call fcn.10051040
test al, al
je 0x100281fd
cmp dword [ebp + 8], 0x201
jne 0x100281b4
mov al, 1
mov byte [0x10128754], al
pop esi
mov esp, ebp
pop ebp
ret 4
sub edx, dword [0x10128750]
mov byte [0x10128754], 0
cmp edx, 0x1f4
jb 0x100281fd
call esi
mov dword [0x10128750], eax
lea eax, [ebp - 0xc]
mov ecx, 0xc
push eax
mov byte [0x10129d55], 0
mov dword [ebp - 0xc], 0x27f30cc1
mov dword [ebp - 8], 0x15
call fcn.1008c360
add esp, 4
mov byte [0x10124295], 0
xor al, al
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10028210
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
cmp byte [0x10124295], 0
mov edx, eax
je 0x1002829d
mov eax, 0x127
mov ecx, 0x10123c90
call fcn.10051040
test al, al
je 0x1002829d
cmp dword [ebp + 8], 0x201
jne 0x10028254
mov al, 1
mov byte [0x10128794], al
pop esi
mov esp, ebp
pop ebp
ret 4
sub edx, dword [0x10128790]
mov byte [0x10128794], 0
cmp edx, 0x1f4
jb 0x1002829d
call esi
mov dword [0x10128790], eax
lea eax, [ebp - 0xc]
mov ecx, 0xc
push eax
mov byte [0x10129d55], 0
mov dword [ebp - 0xc], 0x27f30cc1
mov dword [ebp - 8], 0x16
call fcn.1008c360
add esp, 4
mov byte [0x10124295], 0
xor al, al
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100282b0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
cmp byte [0x10124295], 0
mov edx, eax
je 0x1002833d
mov eax, 0x128
mov ecx, 0x10123c90
call fcn.10051040
test al, al
je 0x1002833d
cmp dword [ebp + 8], 0x201
jne 0x100282f4
mov al, 1
mov byte [0x101287d4], al
pop esi
mov esp, ebp
pop ebp
ret 4
sub edx, dword [0x101287d0]
mov byte [0x101287d4], 0
cmp edx, 0x1f4
jb 0x1002833d
call esi
mov dword [0x101287d0], eax
lea eax, [ebp - 0xc]
mov ecx, 0xc
push eax
mov byte [0x10129d55], 0
mov dword [ebp - 0xc], 0x27f30cc1
mov dword [ebp - 8], 0x17
call fcn.1008c360
add esp, 4
mov byte [0x10124295], 0
xor al, al
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10028350
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
cmp byte [0x10124295], 0
mov edx, eax
je 0x100283dd
mov eax, 0x129
mov ecx, 0x10123c90
call fcn.10051040
test al, al
je 0x100283dd
cmp dword [ebp + 8], 0x201
jne 0x10028394
mov al, 1
mov byte [0x10128814], al
pop esi
mov esp, ebp
pop ebp
ret 4
sub edx, dword [0x10128810]
mov byte [0x10128814], 0
cmp edx, 0x1f4
jb 0x100283dd
call esi
mov dword [0x10128810], eax
lea eax, [ebp - 0xc]
mov ecx, 0xc
push eax
mov byte [0x10129d55], 0
mov dword [ebp - 0xc], 0x27f30cc1
mov dword [ebp - 8], 0x18
call fcn.1008c360
add esp, 4
mov byte [0x10124295], 0
xor al, al
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x100283f0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
cmp byte [0x10124295], 0
mov edx, eax
je 0x1002847d
mov eax, 0x12a
mov ecx, 0x10123c90
call fcn.10051040
test al, al
je 0x1002847d
cmp dword [ebp + 8], 0x201
jne 0x10028434
mov al, 1
mov byte [0x10128854], al
pop esi
mov esp, ebp
pop ebp
ret 4
sub edx, dword [0x10128850]
mov byte [0x10128854], 0
cmp edx, 0x1f4
jb 0x1002847d
call esi
mov dword [0x10128850], eax
lea eax, [ebp - 0xc]
mov ecx, 0xc
push eax
mov byte [0x10129d55], 0
mov dword [ebp - 0xc], 0x27f30cc1
mov dword [ebp - 8], 0x19
call fcn.1008c360
add esp, 4
mov byte [0x10124295], 0
xor al, al
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10028490
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
cmp byte [0x10124295], 0
mov edx, eax
je 0x1002851d
mov eax, 0x12b
mov ecx, 0x10123c90
call fcn.10051040
test al, al
je 0x1002851d
cmp dword [ebp + 8], 0x201
jne 0x100284d4
mov al, 1
mov byte [0x10128894], al
pop esi
mov esp, ebp
pop ebp
ret 4
sub edx, dword [0x10128890]
mov byte [0x10128894], 0
cmp edx, 0x1f4
jb 0x1002851d
call esi
mov dword [0x10128890], eax
lea eax, [ebp - 0xc]
mov ecx, 0xc
push eax
mov byte [0x10129d55], 0
mov dword [ebp - 0xc], 0x27f30cc1
mov dword [ebp - 8], 0x1a
call fcn.1008c360
add esp, 4
mov byte [0x10124295], 0
xor al, al
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10028530
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
cmp byte [0x10124295], 0
mov edx, eax
je 0x100285bd
mov eax, 0x12c
mov ecx, 0x10123c90
call fcn.10051040
test al, al
je 0x100285bd
cmp dword [ebp + 8], 0x201
jne 0x10028574
mov al, 1
mov byte [0x101288d4], al
pop esi
mov esp, ebp
pop ebp
ret 4
sub edx, dword [0x101288d0]
mov byte [0x101288d4], 0
cmp edx, 0x1f4
jb 0x100285bd
call esi
mov dword [0x101288d0], eax
lea eax, [ebp - 0xc]
mov ecx, 0xc
push eax
mov byte [0x10129d55], 0
mov dword [ebp - 0xc], 0x27f30cc1
mov dword [ebp - 8], 0x1b
call fcn.1008c360
add esp, 4
mov byte [0x10124295], 0
xor al, al
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100285d0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
cmp byte [0x10124295], 0
mov edx, eax
je 0x1002865d
mov eax, 0x12d
mov ecx, 0x10123c90
call fcn.10051040
test al, al
je 0x1002865d
cmp dword [ebp + 8], 0x201
jne 0x10028614
mov al, 1
mov byte [0x10128914], al
pop esi
mov esp, ebp
pop ebp
ret 4
sub edx, dword [0x10128910]
mov byte [0x10128914], 0
cmp edx, 0x1f4
jb 0x1002865d
call esi
mov dword [0x10128910], eax
lea eax, [ebp - 0xc]
mov ecx, 0xc
push eax
mov byte [0x10129d55], 0
mov dword [ebp - 0xc], 0x27f30cc1
mov dword [ebp - 8], 0x1c
call fcn.1008c360
add esp, 4
mov byte [0x10124295], 0
xor al, al
pop esi
mov esp, ebp
pop ebp
ret 4
Function at 0x10028670
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
cmp byte [0x10124295], 0
mov edx, eax
je 0x100286fd
mov eax, 0x12e
mov ecx, 0x10123c90
call fcn.10051040
test al, al
je 0x100286fd
cmp dword [ebp + 8], 0x201
jne 0x100286b4
mov al, 1
mov byte [0x10128954], al
pop esi
mov esp, ebp
pop ebp
ret 4
sub edx, dword [0x10128950]
mov byte [0x10128954], 0
cmp edx, 0x1f4
jb 0x100286fd
call esi
mov dword [0x10128950], eax
lea eax, [ebp - 0xc]
mov ecx, 0xc
push eax
mov byte [0x10129d55], 0
mov dword [ebp - 0xc], 0x27f30cc1
mov dword [ebp - 8], 0x1d
call fcn.1008c360
add esp, 4
mov byte [0x10124295], 0
xor al, al
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10028710
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
cmp byte [0x10124295], 0
mov edx, eax
je 0x1002879d
mov eax, 0x12f
mov ecx, 0x10123c90
call fcn.10051040
test al, al
je 0x1002879d
cmp dword [ebp + 8], 0x201
jne 0x10028754
mov al, 1
mov byte [0x10128994], al
pop esi
mov esp, ebp
pop ebp
ret 4
sub edx, dword [0x10128990]
mov byte [0x10128994], 0
cmp edx, 0x1f4
jb 0x1002879d
call esi
mov dword [0x10128990], eax
lea eax, [ebp - 0xc]
mov ecx, 0xc
push eax
mov byte [0x10129d55], 0
mov dword [ebp - 0xc], 0x27f30cc1
mov dword [ebp - 8], 0x1e
call fcn.1008c360
add esp, 4
mov byte [0x10124295], 0
xor al, al
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x100287b0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
cmp byte [0x10124295], 0
mov edx, eax
je 0x1002883d
mov eax, 0x130
mov ecx, 0x10123c90
call fcn.10051040
test al, al
je 0x1002883d
cmp dword [ebp + 8], 0x201
jne 0x100287f4
mov al, 1
mov byte [0x101289d4], al
pop esi
mov esp, ebp
pop ebp
ret 4
sub edx, dword [0x101289d0]
mov byte [0x101289d4], 0
cmp edx, 0x1f4
jb 0x1002883d
call esi
mov dword [0x101289d0], eax
lea eax, [ebp - 0xc]
mov ecx, 0xc
push eax
mov byte [0x10129d55], 0
mov dword [ebp - 0xc], 0x27f30cc1
mov dword [ebp - 8], 0x1f
call fcn.1008c360
add esp, 4
mov byte [0x10124295], 0
xor al, al
pop esi
mov esp, ebp
pop ebp
ret 4

Function at 0x10028850
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push esi
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call esi
cmp byte [0x10124295], 0
mov edx, eax
je 0x100288dd
mov eax, 0x131
mov ecx, 0x10123c90
call fcn.10051040
test al, al
je 0x100288dd
cmp dword [ebp + 8], 0x201
jne 0x10028894
mov al, 1
mov byte [0x10128a14], al
pop esi
mov esp, ebp
pop ebp
ret 4
sub edx, dword [0x10128a10]
mov byte [0x10128a14], 0
cmp edx, 0x1f4
jb 0x100288dd
call esi
mov dword [0x10128a10], eax
lea eax, [ebp - 0xc]
mov ecx, 0xc
push eax
mov byte [0x10129d55], 0
mov dword [ebp - 0xc], 0x27f30cc1
mov dword [ebp - 8], 0x20
call fcn.1008c360
add esp, 4
mov byte [0x10124295], 0
xor al, al
pop esi
mov esp, ebp
pop ebp
ret 4