joyce8/EMBER2024-capa huggingface dataset:
Function at 0x180001950
Capabilities:
Create directory

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x20
xor ebp, ebp
xor edx, edx
mov ebx, ebp
mov rsi, rcx
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x1800019e4
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x1800019e4
movzx eax, word [rsi]
mov edi, ebp
mov rcx, rsi
test ax, ax
je 0x1800019e1
lea edx, [rbp + 0x5c]
cmp ax, dx
cmove rdi, rcx
add rcx, 2
movzx eax, word [rcx]
test ax, ax
jne 0x180001994
test rdi, rdi
je 0x1800019e1
mov rcx, rsi
mov word [rdi], bp
call fcn.180001950
mov ebx, eax
mov eax, 0x5c
mov word [rdi], ax
test ebx, ebx
jne 0x1800019e4
xor edx, edx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
jne 0x1800019e4
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x1800019e4
or ebx, 0xffffffff
mov rbp, qword [rsp + 0x38]
mov eax, ebx
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x40]
add rsp, 0x20
pop rdi
ret

Function at 0x180002a00
Capabilities:
Connect pipe
Create pipe

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x40
xor ebx, ebx
mov eax, 0x400
and qword [rsp + 0x38], rbx
mov rdi, rcx
and dword [rsp + 0x30], ebx
xor r8d, r8d
mov rcx, qword [rcx + 0x18]
mov edx, 0x40080003
mov dword [rsp + 0x28], eax
lea r9d, [rbx + 1]
mov dword [rsp + 0x20], eax
call qword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
mov qword [rdi + 0x20], rax
cmp rax, 0xffffffffffffffff
jne 0x180002a53
and qword [rdi + 0x20], rbx
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x180002aa4
lea rdx, [rdi + 0x38]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
test eax, eax
je 0x180002a6a
mov byte [rdi + 0x76], 1
jmp 0x180002aa4
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
cmp eax, 0xe7
jne 0x180002a96
mov rcx, qword [rdi + 0x18]
mov edx, 0x4e20
xor ebx, ebx
call qword [sym.imp.KERNEL32.dll_WaitNamedPipeW]
test eax, eax
jne 0x180002a64
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
cmp ebx, 0x3e5
jne 0x180002aa4
xor ebx, ebx
mov byte [rdi + 0x75], 1
mov eax, ebx
mov rbx, qword [rsp + 0x50]
add rsp, 0x40
pop rdi
ret
Function at 0x180002ab4
Capabilities:
Check if file exists

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x610]
sub rsp, 0x710
mov rax, qword [0x180031008]
xor rax, rsp
mov qword [rbp + 0x600], rax
cmp byte [0x180031af0], 0
mov r15, r8
mov rdi, rdx
mov ebx, ecx
jne 0x180002b02
test rdx, rdx
jne 0x180002b02
mov rdx, r8
call fcn.180002e54
jmp 0x180002c77
xor r14b, r14b
test rdx, rdx
jne 0x180002b3b
mov rdx, qword [0x180031ae8]
lea r8, [rbp + 0x180]
mov r9d, 0x104
call fcn.1800043e8
test al, al
jne 0x180002b31
mov eax, 0x643
jmp 0x180002c77
lea rdi, [rbp + 0x180]
mov r14b, 1
mov esi, 0x118
lea rcx, [rsp + 0x50]
mov edx, esi
mov r8, rdi
call fcn.18000164c
lea r8, str.CustomAction.config
mov edx, esi
lea rcx, [rsp + 0x50]
call fcn.18000157c
lea rcx, [rsp + 0x50]
lea rsi, [rsp + 0x50]
call qword [sym.imp.SHLWAPI.dll_PathFileExistsW]
mov r8, rdi
lea rcx, [rbp + 0x390]
neg eax
sbb r12, r12
and r12, rsi
mov esi, 0x136
mov edx, esi
call fcn.18000164c
lea r8, str.Microsoft.Deployment.WindowsInstaller.dll
mov edx, esi
lea rcx, [rbp + 0x390]
call fcn.18000157c
lea rax, [rsp + 0x38]
mov esi, 0x643
lea r9, [rbp + 0x390]
mov qword [rsp + 0x20], rax
mov r8, r12
mov dword [rsp + 0x30], esi
xor edx, edx
mov ecx, ebx
call fcn.180001378
test al, al
je 0x180002c64
mov rdx, qword [rsp + 0x38]
lea rax, [rsp + 0x40]
mov qword [rsp + 0x28], rax
lea r8, str.CustomAction
mov r9, rdi
mov qword [rsp + 0x20], r12
mov ecx, ebx
call section..text
test al, al
je 0x180002c4e
mov rdx, qword [rsp + 0x40]
lea r9, [rsp + 0x30]
mov r8, r15
mov ecx, ebx
call fcn.180002c98
mov ecx, dword [rsp + 0x30]
test al, al
mov rdx, qword [rsp + 0x40]
cmove ecx, esi
mov esi, ecx
mov rcx, qword [rsp + 0x38]
mov rax, qword [rcx]
call qword [rax + reloc.msi.dll_MsiDatabaseIsTablePersistentA]
test eax, eax
jns 0x180002c43
mov r8d, eax
lea rdx, str.Failed_to_unload_app_domain._Error_code_0x_X
mov ecx, ebx
call fcn.18000465c
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rcx]
call qword [rdx + 0x58]
mov rcx, qword [rsp + 0x38]
mov rdx, qword [rcx]
call qword [rdx + reloc.OLEAUT32.dll_SafeArrayGetDim]
test r14b, r14b
je 0x180002c75
lea rcx, [rbp + 0x180]
call fcn.180004230
mov eax, esi
mov rcx, qword [rbp + 0x600]
xor rcx, rsp
call fcn.1800051e0
add rsp, 0x710
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
Function at 0x180003280
Capabilities:
Read file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x40
xor ebx, ebx
mov ebp, r8d
xor esi, esi
mov r15, rdx
mov rdi, rcx
cmp esi, ebp
jae 0x18000336f
mov rcx, qword [rdi + 0x50]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rcx, qword [rdi + 0x20]
lea r14, [rdi + 0x38]
mov r8d, ebp
mov edx, esi
sub r8d, esi
mov qword [rsp + 0x20], r14
add rdx, r15
lea r9, [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x180003363
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
cmp eax, 0x3e5
jne 0x180003363
cmp byte [rdi + 0x74], 0
je 0x180003321
mov rax, qword [rdi + 0x50]
lea rdx, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x30], rax
mov rax, qword [rdi + 0x30]
or r9d, 0xffffffff
mov qword [rsp + 0x38], rax
lea ecx, [r8 + 2]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
jmp 0x18000332e
mov rcx, qword [rdi + 0x50]
or edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ebx, eax
test eax, eax
jne 0x18000334f
mov rcx, qword [rdi + 0x20]
lea r8, [rsp + 0x78]
xor r9d, r9d
mov rdx, r14
call qword [sym.imp.KERNEL32.dll_GetOverlappedResult]
test eax, eax
jne 0x180003363
jmp 0x180003354
cmp ebx, 0xffffffff
jne 0x18000335e
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x180003363
mov ebx, 0x3e3
add esi, dword [rsp + 0x78]
test ebx, ebx
je 0x1800032a5
test ebx, ebx
je 0x18000339e
cmp byte [rdi + 0x74], 0
mov rcx, qword [rdi + 0x20]
je 0x18000338f
call qword [sym.imp.KERNEL32.dll_CancelIo]
mov rcx, qword [rdi + 0x20]
call qword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
jmp 0x18000339a
call qword [sym.imp.KERNEL32.dll_CloseHandle]
and qword [rdi + 0x20], 0
mov byte [rdi + 0x76], 0
mov rbp, qword [rsp + 0x68]
mov eax, ebx
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x70]
add rsp, 0x40
pop r15
pop r14
pop rdi
ret

Function at 0x180003570
Capabilities:
Create thread

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x30
cmp byte [rcx + 0x74], 0
mov rbx, rcx
je 0x180003600
cmp qword [rcx + 0x30], 0
jne 0x180003600
xor edi, edi
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
lea edx, [rdi + 1]
call qword [sym.imp.KERNEL32.dll_CreateEventW]
mov qword [rbx + 0x30], rax
test rax, rax
jne 0x1800035b0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
jmp 0x1800035fc
mov rcx, qword [rbx + 0x28]
test rcx, rcx
je 0x1800035bf
call qword [sym.imp.KERNEL32.dll_CloseHandle]
and qword [rsp + 0x28], rdi
lea r8, [0x180003278]
and dword [rsp + 0x20], edi
mov r9, rbx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rbx + 0x28], rax
test rax, rax
jne 0x1800035fc
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rbx + 0x30]
mov edi, eax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
and qword [rbx + 0x30], 0
mov eax, edi
jmp 0x180003605
mov eax, 0x10dd
mov rbx, qword [rsp + 0x40]
add rsp, 0x30
pop rdi
ret
Function at 0x180003610
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x40
xor ebx, ebx
mov ebp, r8d
xor esi, esi
mov r15, rdx
mov rdi, rcx
cmp esi, ebp
jae 0x1800036ff
mov rcx, qword [rdi + 0x50]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rcx, qword [rdi + 0x20]
lea r14, [rdi + 0x38]
mov r8d, ebp
mov edx, esi
sub r8d, esi
mov qword [rsp + 0x20], r14
add rdx, r15
lea r9, [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1800036f3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
cmp eax, 0x3e5
jne 0x1800036f3
cmp byte [rdi + 0x74], 0
je 0x1800036b1
mov rax, qword [rdi + 0x50]
lea rdx, [rsp + 0x30]
xor r8d, r8d
mov qword [rsp + 0x30], rax
mov rax, qword [rdi + 0x30]
or r9d, 0xffffffff
mov qword [rsp + 0x38], rax
lea ecx, [r8 + 2]
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
jmp 0x1800036be
mov rcx, qword [rdi + 0x50]
or edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ebx, eax
test eax, eax
jne 0x1800036df
mov rcx, qword [rdi + 0x20]
lea r8, [rsp + 0x78]
xor r9d, r9d
mov rdx, r14
call qword [sym.imp.KERNEL32.dll_GetOverlappedResult]
test eax, eax
jne 0x1800036f3
jmp 0x1800036e4
cmp ebx, 0xffffffff
jne 0x1800036ee
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
jmp 0x1800036f3
mov ebx, 0x3e3
add esi, dword [rsp + 0x78]
test ebx, ebx
je 0x180003635
mov rbp, qword [rsp + 0x68]
mov eax, ebx
mov rbx, qword [rsp + 0x60]
mov rsi, qword [rsp + 0x70]
add rsp, 0x40
pop r15
pop r14
pop rdi
ret

Function at 0x180003858
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x180017de0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003868
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x180017f30]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003878
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x180018080]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003888
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x1800181d0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003898
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x180018320]
xor edx, edx
jmp fcn.180002ab4

Function at 0x1800038a8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x180018470]
xor edx, edx
jmp fcn.180002ab4

Function at 0x1800038b8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x1800185c0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x1800038c8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x180018710]
xor edx, edx
jmp fcn.180002ab4

Function at 0x1800038d8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x180018860]
xor edx, edx
jmp fcn.180002ab4

Function at 0x1800038e8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x1800189b0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x1800038f8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x180018b00]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003908
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x180018c50]
xor edx, edx
jmp fcn.180002ab4
Function at 0x180003918
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x180018da0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003928
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x180018ef0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003938
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x180019040]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003948
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x180019190]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003958
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x1800192e0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003968
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x180019430]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003978
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x180019580]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003988
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x1800196d0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003998
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x180019820]
xor edx, edx
jmp fcn.180002ab4

Function at 0x1800039a8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x180019970]
xor edx, edx
jmp fcn.180002ab4

Function at 0x1800039b8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x180019ac0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x1800039c8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x180019c10]
xor edx, edx
jmp fcn.180002ab4

Function at 0x1800039d8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x180019d60]
xor edx, edx
jmp fcn.180002ab4

Function at 0x1800039e8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x180019eb0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x1800039f8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001a000]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003a08
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001a150]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003a18
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001a2a0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003a28
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001a3f0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003a38
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001a540]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003a48
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001a690]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003a58
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001a7e0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003a68
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001a930]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003a78
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001aa80]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003a88
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001abd0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003a98
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001ad20]
xor edx, edx
jmp fcn.180002ab4
Function at 0x180003aa8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001ae70]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003ab8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001afc0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003ac8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001b110]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003ad8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001b260]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003ae8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001b3b0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003af8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001b500]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003b08
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001b650]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003b18
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001b7a0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003b28
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001b8f0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003b38
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001ba40]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003b48
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001bb90]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003b58
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001bce0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003b68
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001be30]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003b78
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001bf80]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003b88
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001c0d0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003b98
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001c220]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003ba8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001c370]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003bb8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001c4c0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003bc8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001c610]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003bd8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001c760]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003be8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001c8b0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003bf8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001ca00]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003c08
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001cb50]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003c18
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001cca0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003c28
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001cdf0]
xor edx, edx
jmp fcn.180002ab4
Function at 0x180003c38
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001cf40]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003c48
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001d090]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003c58
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001d1e0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003c68
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001d330]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003c78
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001d480]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003c88
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001d5d0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003c98
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001d720]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003ca8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001d870]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003cb8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001d9c0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003cc8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001db10]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003cd8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001dc60]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003ce8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001ddb0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003cf8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001df00]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003d08
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001e050]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003d18
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001e1a0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003d28
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001e2f0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003d38
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001e440]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003d48
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001e590]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003d58
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001e6e0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003d68
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001e830]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003d78
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001e980]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003d88
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001ead0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003d98
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001ec20]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003da8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001ed70]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003db8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001eec0]
xor edx, edx
jmp fcn.180002ab4
Function at 0x180003dc8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001f010]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003dd8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001f160]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003de8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001f2b0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003df8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001f400]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003e08
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001f550]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003e18
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001f6a0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003e28
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001f7f0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003e38
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001f940]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003e48
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001fa90]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003e58
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001fbe0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003e68
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001fd30]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003e78
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001fe80]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003e88
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x18001ffd0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003e98
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x180020120]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003ea8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x180020270]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003eb8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x1800203c0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003ec8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x180020510]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003ed8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x180020660]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003ee8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x1800207b0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003ef8
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x180020900]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003f08
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x180020a50]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003f18
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x180020ba0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003f28
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x180020cf0]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003f38
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x180020e40]
xor edx, edx
jmp fcn.180002ab4

Function at 0x180003f48
Capabilities:
Check if file exists

Disassembly:
lea r8, [0x180020f90]
xor edx, edx
jmp fcn.180002ab4