joyce8/EMBER2024-capa huggingface dataset:
Function at 0x140131a6d
Capabilities:
Hash data using fnv
Resolve function by parsing pe exports

Disassembly:
add bh, bh
loope 0x1401308d9
call rax
lea r11d, [rdx - 0xddbc]
rcr ebx, 0xcc
rol byte [rbp + rcx*4 - 0x66], 1
and r15b, dil
inc ecx
fcmovne st(0), st(4)
jmp rcx
push 0x48fffffe
mov ebp, dword [rsp + 0x458]
add rcx, r9
movzx eax, byte [rcx]
inc rcx
test al, al
je 0x140131a7e
nop dword [rax]
movsx eax, al
jmp 0x140131952
lea rcx, [rcx + 1]
xor eax, edx
imul edx, eax, 0x1000193
jmp 0x140131a0e
mov rdi, qword [rcx + 0x10]
xchg rdi, rax
xchg rbx, rcx
mov rbx, qword [rax]
xchg rbx, rcx
xchg r9, r10
jmp 0x140131a49
movzx eax, byte [rcx - 1]
test al, al
jne 0x14013194a
cmp edx, 0x74f60c6b
jmp 0x140131a78
mov ebx, dword [rax + r9 + 0x88]
mov r11d, dword [rbx + r9 + 0x20]
nop
mov r10d, r8d
mov edx, 0xbf9fdb40
lea rax, [r9 + r10*4]
mov ecx, dword [rax + r11]
jmp 0x140131936
mov r10, qword [rcx + 0x30]
xchg r10, r9
movsxd rax, dword [r9 + 0x3c]
jmp 0x140131a25
mov rcx, qword [rax + 0x18]
xchg rdi, rax
jmp 0x1401319dc
je 0x140131a86
inc r8d
jmp 0x140131a34
mov ecx, dword [rbx + r9 + 0x24]
add rcx, r9
movzx edx, word [rcx + r10*2]
mov ecx, dword [rbx + r9 + 0x1c]
jmp 0x140131cb0
movzx eax, word [r13 + 6]
lea rbx, [r13 + 0x108]
lea rcx, [rax + rax*4]
lea rax, [r13 + 0x108]
lea rax, [rax + rcx*8]
jmp 0x140132189
xchg rcx, rbx
mov eax, dword [r13 + 0xa4]
mov dword [rbp + 0x1b4], eax
cmp rdx, rdi
jmp 0x140131f4e
add rcx, r9
mov r12d, dword [rcx + rdx*4]
mov edx, dword [r13 + 0xd8]
add r12, r9
mov qword [rbp + 0x230], rdx
jne 0x140131d0b
je 0x140131d0b
cmp r11, rcx
jp 0x1401316b6
call rax
or r13d, 0x77b8c8e7
mul r14
cmp rdx, rbp
rcr edi, 0x2f
rol edx, 0xdc
lea r14d, [rbx + 0x5b6a]
add r15d, 0xf7db8ee2
dec r15
and r12d, 0xe3f8b464
lea r9d, [rcx - 0xa5ff]
movabs r13, 0x384e8e000004a3e9
ror r11d, 2
test rbp, rbp
or r14d, 0x176cdb9e
test r12d, 0x7dbe7d
rol r9d, 0xb
jge 0x140130dd7
jmp 0x1401321b3
call fcn.140131089
popf
or r13d, 0x72be055e
ror r15d, 0xee
jge 0x140130d12
pause
lea ebx, [rdx + 0xb503]
jmp 0x140131dd3
cmp r13, rbp
jno 0x140130c50
jbe 0x1401308d6
cmp rbp, rcx
int3
xchg rbx, rax
mov qword [rbp + 0x150], rbx
xchg rbx, rax
mov r9d, 4
lea rax, [rbp + 0x110]
jmp 0x1401321e9
jae 0x1401322d4
lea rax, [rdx + rdi]
xchg r10, rax
jne 0x140131f6f
je 0x140131f6f
pushfq
rcl ebp, 0x8f
cpuid
bswap rbp
xor ecx, 0xbd316aa
movabs rcx, 0x5533da00000357e9
rol r11d, 0xb
call fcn.1401314b1
jmp 0x1401322cb
jae 0x140131f91
lea rax, [rcx + rdi]
mov qword [rbp + 0x238], rax
mov qword [rbp + 0x158], rdi
lea r8, [rbp + 0x150]
mov eax, dword [r13 + 0x54]
lea rdx, [rbp + 0x158]
je 0x140131fc7
jne 0x140131fc7
int3
jmp 0x140131eef
cmp rbx, rax
jae 0x140132da0
nop dword [rax]
mov eax, dword [r13 + 0xdc]
mov dword [rbp + 0x1b0], eax
mov ecx, dword [r13 + 0xa0]
xchg rcx, rbx
mov qword [rbp + 0x238], rbx
jmp 0x140131b24
mov dword [rbp + 0x110], r15d
invalid
invalid
Function at 0x14000a050
Capabilities:
Check os version
Query environment variable

Disassembly:
sub rsp, 0x178
mov rax, qword [0x1400a1080]
xor rax, rsp
mov qword [rsp + 0x160], rax
mov r8d, 0x20
lea rdx, [rsp + 0x140]
lea rcx, str.PA_MIN_LATENCY_MSEC
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
dec eax
cmp eax, 0x1e
ja 0x14000a0c0
lea rcx, [rsp + 0x140]
call fcn.14005dd60
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, qword [0x1400943f8]
mov rcx, qword [rsp + 0x160]
xor rcx, rsp
call fcn.140052090
add rsp, 0x178
ret
lea rcx, [rsp + 0x20]
mov dword [rsp + 0x20], 0x114
call qword [sym.imp.KERNEL32.dll_GetVersionExW]
mov eax, dword [rsp + 0x24]
cmp eax, 4
jne 0x14000a103
cmp dword [rsp + 0x30], 2
jne 0x14000a128
movsd xmm0, qword [0x140094458]
mov rcx, qword [rsp + 0x160]
xor rcx, rsp
call fcn.140052090
add rsp, 0x178
ret
cmp eax, 5
jb 0x14000a128
movsd xmm0, qword [0x140094438]
mov rcx, qword [rsp + 0x160]
xor rcx, rsp
call fcn.140052090
add rsp, 0x178
ret
movsd xmm0, qword [0x140094440]
mov rcx, qword [rsp + 0x160]
xor rcx, rsp
call fcn.140052090
add rsp, 0x178
ret
Function at 0x140017090
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x10], rdx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x20
mov rsi, rdx
mov r12, rcx
xor edx, edx
xor r8d, r8d
lea ecx, [rdx + 0x10]
call fcn.140023c10
lea r15, [r12 + 8]
mov rdi, rax
test rax, rax
je 0x14001728e
mov edx, 0x20
lea ecx, [rdx + 0x20]
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov rbx, rax
test rax, rax
je 0x140017280
lea rcx, [rdi + 0x10]
mov dword [rax], 0x10
mov qword [rax + 0x10], rcx
xor ecx, ecx
mov qword [rax + 8], rdi
mov qword [rax + 0x18], 0
mov qword [r15], rax
mov dword [rsp + 0x60], ecx
cmp dword [rsi + 0x430], ecx
jle 0x14001727c
xor r13d, r13d
lea edx, [rcx + 1]
mov r9d, 0x811c9dd7
mov rax, qword [rsi + 0x438]
mov rbp, qword [rax + r13]
test rbp, rbp
je 0x140017266
xor r14d, r14d
nop dword [rax]
mov eax, dword [rbp + 0x10]
cmp eax, 1
cmovb eax, edx
cmp r14d, eax
jae 0x14001725d
mov rcx, qword [rbp + 8]
test rcx, rcx
jne 0x140017161
lea rcx, [rbp + 0x14]
jmp 0x140017165
mov rcx, qword [rcx + r14*8]
cmp dword [rbp + 0x268], 2
mov edx, 0x811feb0b
movzx eax, word [rcx]
cmove edx, r9d
xor ebx, ebx
test ax, ax
je 0x140017194
nop
imul ebx, edx
lea rcx, [rcx + 2]
movzx eax, ax
xor ebx, eax
movzx eax, word [rcx]
test ax, ax
jne 0x140017180
mov rax, qword [r12]
xor esi, esi
test rax, rax
je 0x1400171b5
nop
cmp dword [rax + 8], ebx
je 0x14001724d
mov rsi, rax
mov rax, qword [rax + 0x10]
test rax, rax
jne 0x1400171a0
mov rdi, qword [r15]
cmp qword [rdi + 0x10], 0
jne 0x1400171ef
mov rdx, qword [rdi + 8]
xor r8d, r8d
mov ecx, dword [rdi]
call fcn.140023c10
test rax, rax
je 0x1400171e4
mov ecx, dword [rdi]
add ecx, ecx
mov qword [rdi + 8], rax
add rax, 0x10
mov dword [rdi], ecx
mov qword [rdi + 0x10], rax
cmp qword [rdi + 0x10], 0
je 0x140017295
mov edx, 0x18
lea ecx, [rdx + 0x28]
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
test rax, rax
je 0x140017295
mov rdx, qword [rdi + 0x10]
mov rcx, qword [rdx]
mov qword [rdi + 0x10], rcx
mov qword [rdx + 8], rax
mov rcx, qword [rdi + 0x18]
mov qword [rdx], rcx
mov qword [rdi + 0x18], rdx
mov edx, 1
mov dword [rax + 4], edx
mov dword [rax + 8], ebx
test rsi, rsi
je 0x140017234
mov qword [rsi + 0x10], rax
cmp qword [r12], 0
mov r9d, 0x811c9dd7
jne 0x140017245
mov qword [r12], rax
inc r14d
jmp 0x140017140
inc dword [rax + 4]
mov edx, 1
inc r14d
jmp 0x140017140
mov ecx, dword [rsp + 0x60]
mov rsi, qword [rsp + 0x68]
inc ecx
add r13, 8
mov dword [rsp + 0x60], ecx
cmp ecx, dword [rsi + 0x430]
jl 0x140017122
xor eax, eax
jmp 0x14001729a
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov qword [r15], rbx
jmp 0x140017295
mov qword [r15], 0
mov eax, 0xffffd8f8
mov rbx, qword [rsp + 0x70]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
Function at 0x14001f890
Capabilities:
Capture microphone audio

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rdi
push r14
sub rsp, 0x350
mov rax, qword [0x1400a1080]
xor rax, rsp
mov qword [rsp + 0x340], rax
xor r14d, r14d
mov rbx, rcx
mov ebp, r14d
mov edi, r14d
cmp dword [rcx + 0x188], r14d
jbe 0x14001f9cd
mov qword [rsp + 0x378], rsi
nop dword [rax]
nop word [rax + rax]
mov eax, edi
lea r9, [rax*8]
mov eax, dword [rbx + 0x19c]
lea r8, [rax + rax*2]
mov rax, qword [rbx + 0x190]
add r8, r8
mov rdx, qword [rax + r9]
and dword [rdx + r8*8 + 0x18], 0xfffffffe
mov r8d, 0x30
mov eax, dword [rbx + 0x19c]
mov rcx, qword [rbx + 0x180]
lea rdx, [rax + rax*2]
mov rax, qword [rbx + 0x190]
mov rcx, qword [r9 + rcx]
shl rdx, 4
add rdx, qword [rax + r9]
call qword [sym.imp.WINMM.dll_waveInAddBuffer]
mov esi, eax
test eax, eax
je 0x14001f9b7
mov r8d, pe_nt_image_headers64
lea rdx, [rsp + 0x140]
mov ecx, eax
mov ebp, 0xffffd8f1
call qword [sym.imp.WINMM.dll_waveInGetErrorTextW]
mov qword [rsp + 0x38], r14
lea rax, [rsp + 0x40]
mov qword [rsp + 0x30], r14
lea r8, [rsp + 0x140]
mov dword [rsp + 0x28], pe_nt_image_headers64
mov r9d, 0xffffffff
xor edx, edx
mov qword [rsp + 0x20], rax
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov r8d, 0x400
mov dword [0x1400a1d88], 2
lea rdx, [rsp + 0x40]
mov dword [0x1400a1d8c], esi
lea rcx, [0x1400a4360]
call fcn.140062450
inc edi
cmp edi, dword [rbx + 0x188]
jb 0x14001f8e0
mov rsi, qword [rsp + 0x378]
mov edx, dword [rbx + 0x19c]
mov ecx, r14d
inc edx
mov dword [rbx + 0x1a4], r14d
cmp edx, dword [rbx + 0x198]
mov eax, ebp
cmovb ecx, edx
mov dword [rbx + 0x19c], ecx
mov rcx, qword [rsp + 0x340]
xor rcx, rsp
call fcn.140052090
mov rbx, qword [rsp + 0x380]
add rsp, 0x350
pop r14
pop rdi
pop rbp
ret
Function at 0x14002abf0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r15
sub rsp, 0x20
mov r15, qword [rdx + 0x18]
mov rdi, rdx
mov rsi, qword [rdx + 0x10]
mov r10, rcx
mov r9, rdx
cmp r15, 0x10
jb 0x14002ac1c
mov r9, qword [rdx]
xor ebp, ebp
movabs r8, 0xcbf29ce484222325
mov edx, ebp
test rsi, rsi
je 0x14002ac54
movabs rcx, 0x100000001b3
nop dword [rax]
movzx eax, byte [rdx + r9]
inc rdx
xor r8, rax
imul r8, rcx
cmp rdx, rsi
jb 0x14002ac40
mov rcx, qword [r10 + 0x30]
mov rax, qword [r10 + 0x18]
and rcx, r8
add rcx, rcx
mov rbx, qword [rax + rcx*8 + 8]
cmp rbx, qword [r10 + 8]
jne 0x14002ac72
mov rbx, rbp
jmp 0x14002acc2
mov qword [rsp + 0x40], r14
mov r14, qword [rax + rcx*8]
nop dword [rax + rax]
cmp qword [rbx + 0x28], 0x10
lea rdx, [rbx + 0x10]
mov rax, qword [rdx + 0x10]
jb 0x14002ac92
mov rdx, qword [rdx]
mov rcx, rdi
cmp r15, 0x10
jb 0x14002ac9e
mov rcx, qword [rdi]
cmp rsi, rax
jne 0x14002acaf
mov r8, rsi
call fcn.140054a20
test eax, eax
je 0x14002acbd
cmp rbx, r14
je 0x14002acba
mov rbx, qword [rbx + 8]
jmp 0x14002ac80
mov rbx, rbp
mov r14, qword [rsp + 0x40]
test rbx, rbx
mov rbx, qword [rsp + 0x48]
setne bpl
mov rax, rbp
mov rbp, qword [rsp + 0x50]
add rsp, 0x20
pop r15
pop rdi
pop rsi
ret
Function at 0x140034b10
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r14
sub rsp, 0x70
mov rax, qword [0x1400a1080]
xor rax, rsp
mov qword [rsp + 0x60], rax
mov r14, r9
mov rbp, r8
mov rbx, rdx
mov rdi, rcx
lea rcx, [rsp + 0x40]
call fcn.140006500
nop
lea rdx, [rsp + 0x40]
call fcn.1400327d0
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rdx, qword [rsp + 0x40]
xor ecx, ecx
movabs r9, 0xcbf29ce484222325
mov r8, qword [rsp + 0x50]
test r8, r8
je 0x140034b93
movabs r10, 0x100000001b3
nop dword [rax]
movzx eax, byte [rcx + rdx]
xor r9, rax
imul r9, r10
inc rcx
cmp rcx, r8
jb 0x140034b80
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x30]
lea rcx, [rdi + 0x1c0]
call fcn.1400354b0
mov rcx, qword [rax + 8]
test rcx, rcx
jne 0x140034bb9
mov rcx, qword [rdi + 0x1c8]
cmp rcx, qword [rdi + 0x1c8]
je 0x140034c32
mov ecx, 2
call fcn.14005897c
mov rcx, rax
mov dword [rsp + 0x20], 0x65
lea r9, str.RegisterCommon
lea r8, str.D:_a_sherpa_onnx_sherpa_onnx_sherpa_onnxcsrcparse_options.cc
lea rdx, str._s:_s:_d
call fcn.140001100
cmp qword [rbx + 0x18], 0x10
jb 0x140034bfb
mov rbx, qword [rbx]
mov ecx, 2
call fcn.14005897c
mov r8, rbx
lea rdx, str.Registering_option_twice__ignoring_second_time:__s
mov rcx, rax
call fcn.140001100
mov ecx, 2
call fcn.14005897c
mov rcx, rax
lea rdx, [0x14008fcf8]
call fcn.140001100
jmp 0x140034c57
movzx eax, byte [rsp + 0xc0]
mov byte [rsp + 0x28], al
mov qword [rsp + 0x20], r14
mov r9, rbp
lea r8, [rsp + 0x40]
mov rdx, rbx
mov rcx, rdi
call fcn.140030080
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140034c90
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034c8b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034ca8
call fcn.1400520b0
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.140052090
add rsp, 0x70
pop r14
pop rdi
pop rsi
pop rbp
pop rbx
ret
call fcn.1400622c8
int3
Function at 0x140034cb0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r14
sub rsp, 0x70
mov rax, qword [0x1400a1080]
xor rax, rsp
mov qword [rsp + 0x60], rax
mov r14, r9
mov rbp, r8
mov rbx, rdx
mov rdi, rcx
lea rcx, [rsp + 0x40]
call fcn.140006500
nop
lea rdx, [rsp + 0x40]
call fcn.1400327d0
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rdx, qword [rsp + 0x40]
xor ecx, ecx
movabs r9, 0xcbf29ce484222325
mov r8, qword [rsp + 0x50]
test r8, r8
je 0x140034d33
movabs r10, 0x100000001b3
nop dword [rax]
movzx eax, byte [rcx + rdx]
xor r9, rax
imul r9, r10
inc rcx
cmp rcx, r8
jb 0x140034d20
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x30]
lea rcx, [rdi + 0x1c0]
call fcn.1400354b0
mov rcx, qword [rax + 8]
test rcx, rcx
jne 0x140034d59
mov rcx, qword [rdi + 0x1c8]
cmp rcx, qword [rdi + 0x1c8]
je 0x140034dd2
mov ecx, 2
call fcn.14005897c
mov rcx, rax
mov dword [rsp + 0x20], 0x65
lea r9, str.RegisterCommon
lea r8, str.D:_a_sherpa_onnx_sherpa_onnx_sherpa_onnxcsrcparse_options.cc
lea rdx, str._s:_s:_d
call fcn.140001100
cmp qword [rbx + 0x18], 0x10
jb 0x140034d9b
mov rbx, qword [rbx]
mov ecx, 2
call fcn.14005897c
mov r8, rbx
lea rdx, str.Registering_option_twice__ignoring_second_time:__s
mov rcx, rax
call fcn.140001100
mov ecx, 2
call fcn.14005897c
mov rcx, rax
lea rdx, [0x14008fcf8]
call fcn.140001100
jmp 0x140034deb
mov qword [rsp + 0x20], r14
mov r9, rbp
lea r8, [rsp + 0x40]
mov rdx, rbx
mov rcx, rdi
call fcn.1400303b0
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140034e24
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034e1f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034e3c
call fcn.1400520b0
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.140052090
add rsp, 0x70
pop r14
pop rdi
pop rsi
pop rbp
pop rbx
ret
call fcn.1400622c8
int3
Function at 0x140034e50
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r14
sub rsp, 0x70
mov rax, qword [0x1400a1080]
xor rax, rsp
mov qword [rsp + 0x60], rax
mov r14, r9
mov rbp, r8
mov rbx, rdx
mov rdi, rcx
lea rcx, [rsp + 0x40]
call fcn.140006500
nop
lea rdx, [rsp + 0x40]
call fcn.1400327d0
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rdx, qword [rsp + 0x40]
xor ecx, ecx
movabs r9, 0xcbf29ce484222325
mov r8, qword [rsp + 0x50]
test r8, r8
je 0x140034ed3
movabs r10, 0x100000001b3
nop dword [rax]
movzx eax, byte [rcx + rdx]
xor r9, rax
imul r9, r10
inc rcx
cmp rcx, r8
jb 0x140034ec0
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x30]
lea rcx, [rdi + 0x1c0]
call fcn.1400354b0
mov rcx, qword [rax + 8]
test rcx, rcx
jne 0x140034ef9
mov rcx, qword [rdi + 0x1c8]
cmp rcx, qword [rdi + 0x1c8]
je 0x140034f72
mov ecx, 2
call fcn.14005897c
mov rcx, rax
mov dword [rsp + 0x20], 0x65
lea r9, str.RegisterCommon
lea r8, str.D:_a_sherpa_onnx_sherpa_onnx_sherpa_onnxcsrcparse_options.cc
lea rdx, str._s:_s:_d
call fcn.140001100
cmp qword [rbx + 0x18], 0x10
jb 0x140034f3b
mov rbx, qword [rbx]
mov ecx, 2
call fcn.14005897c
mov r8, rbx
lea rdx, str.Registering_option_twice__ignoring_second_time:__s
mov rcx, rax
call fcn.140001100
mov ecx, 2
call fcn.14005897c
mov rcx, rax
lea rdx, [0x14008fcf8]
call fcn.140001100
jmp 0x140034f8b
mov qword [rsp + 0x20], r14
mov r9, rbp
lea r8, [rsp + 0x40]
mov rdx, rbx
mov rcx, rdi
call fcn.140030620
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140034fc4
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140034fbf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140034fdc
call fcn.1400520b0
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.140052090
add rsp, 0x70
pop r14
pop rdi
pop rsi
pop rbp
pop rbx
ret
call fcn.1400622c8
int3
Function at 0x140034ff0
Capabilities:
Encode data using xor
Hash data using fnv

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r14
sub rsp, 0x70
mov rax, qword [0x1400a1080]
xor rax, rsp
mov qword [rsp + 0x60], rax
mov r14, r9
mov rbp, r8
mov rbx, rdx
mov rdi, rcx
lea rcx, [rsp + 0x40]
call fcn.140006500
nop
lea rdx, [rsp + 0x40]
call fcn.1400327d0
lea rdx, [rsp + 0x40]
cmp qword [rsp + 0x58], 0x10
cmovae rdx, qword [rsp + 0x40]
xor ecx, ecx
movabs r9, 0xcbf29ce484222325
mov r8, qword [rsp + 0x50]
test r8, r8
je 0x140035073
movabs r10, 0x100000001b3
nop dword [rax]
movzx eax, byte [rcx + rdx]
xor r9, rax
imul r9, r10
inc rcx
cmp rcx, r8
jb 0x140035060
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x30]
lea rcx, [rdi + 0x1c0]
call fcn.1400354b0
mov rcx, qword [rax + 8]
test rcx, rcx
jne 0x140035099
mov rcx, qword [rdi + 0x1c8]
cmp rcx, qword [rdi + 0x1c8]
je 0x140035112
mov ecx, 2
call fcn.14005897c
mov rcx, rax
mov dword [rsp + 0x20], 0x65
lea r9, str.RegisterCommon
lea r8, str.D:_a_sherpa_onnx_sherpa_onnx_sherpa_onnxcsrcparse_options.cc
lea rdx, str._s:_s:_d
call fcn.140001100
cmp qword [rbx + 0x18], 0x10
jb 0x1400350db
mov rbx, qword [rbx]
mov ecx, 2
call fcn.14005897c
mov r8, rbx
lea rdx, str.Registering_option_twice__ignoring_second_time:__s
mov rcx, rax
call fcn.140001100
mov ecx, 2
call fcn.14005897c
mov rcx, rax
lea rdx, [0x14008fcf8]
call fcn.140001100
jmp 0x140035137
movzx eax, byte [rsp + 0xc0]
mov byte [rsp + 0x28], al
mov qword [rsp + 0x20], r14
mov r9, rbp
lea r8, [rsp + 0x40]
mov rdx, rbx
mov rcx, rdi
call fcn.140030890
nop
mov rdx, qword [rsp + 0x58]
cmp rdx, 0x10
jb 0x140035170
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14003516b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140035188
call fcn.1400520b0
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.140052090
add rsp, 0x70
pop r14
pop rdi
pop rsi
pop rbp
pop rbx
ret
call fcn.1400622c8
int3
Function at 0x14003f040
Capabilities:
Encode data using xor

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x20
mov rdx, qword [rcx + 0x10]
mov rdi, rcx
add rdx, 1
mov rbx, qword [rcx + 0x38]
xorps xmm0, xmm0
js 0x14003f065
cvtsi2ss xmm0, rdx
jmp 0x14003f07a
mov rax, rdx
and edx, 1
shr rax, 1
or rax, rdx
cvtsi2ss xmm0, rax
addss xmm0, xmm0
divss xmm0, dword [rcx]
call fcn.14007ac80
movss xmm1, dword [0x1400945c8]
xor ecx, ecx
comiss xmm0, xmm1
jb 0x14003f0a8
subss xmm0, xmm1
comiss xmm0, xmm1
jae 0x14003f0a8
movabs rax, 0x8000000000000000
mov rcx, rax
cvttss2si rax, xmm0
add rax, rcx
mov ecx, 8
cmp rax, rcx
cmova rcx, rax
cmp rbx, rcx
jae 0x14003f0da
cmp rbx, 0x200
jae 0x14003f0d7
lea rbx, [rbx*8]
cmp rbx, rcx
jae 0x14003f0da
mov rbx, rcx
mov rdx, rbx
mov rcx, rdi
mov rbx, qword [rsp + 0x30]
add rsp, 0x20
pop rdi
jmp fcn.140008bc0
Function at 0x140048c80
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rsi
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x20
mov rsi, rdx
mov rdi, rcx
mov qword [rsp + 0x38], rcx
mov eax, dword [rdx]
mov dword [rcx], eax
mov eax, dword [rdx + 4]
mov dword [rcx + 4], eax
mov eax, dword [rdx + 8]
mov dword [rcx + 8], eax
mov eax, dword [rdx + 0xc]
mov dword [rcx + 0xc], eax
mov eax, dword [rdx + 0x10]
mov dword [rcx + 0x10], eax
movzx eax, byte [rdx + 0x14]
mov byte [rcx + 0x14], al
add rcx, 0x18
add rdx, 0x18
call fcn.140006500
movzx eax, byte [rsi + 0x38]
mov byte [rdi + 0x38], al
mov eax, dword [rsi + 0x3c]
mov dword [rdi + 0x3c], eax
movzx eax, byte [rsi + 0x40]
mov byte [rdi + 0x40], al
mov eax, dword [rsi + 0x48]
mov dword [rdi + 0x48], eax
mov eax, dword [rsi + 0x4c]
mov dword [rdi + 0x4c], eax
mov eax, dword [rsi + 0x50]
mov dword [rdi + 0x50], eax
mov eax, dword [rsi + 0x54]
mov dword [rdi + 0x54], eax
mov eax, dword [rsi + 0x58]
mov dword [rdi + 0x58], eax
movzx eax, byte [rsi + 0x5c]
mov byte [rdi + 0x5c], al
movzx eax, byte [rsi + 0x5d]
mov byte [rdi + 0x5d], al
movzx eax, byte [rsi + 0x5e]
mov byte [rdi + 0x5e], al
lea rcx, [rdi + 0x60]
lea rdx, [rsi + 0x60]
call fcn.140006500
movzx eax, byte [rsi + 0x80]
mov byte [rdi + 0x80], al
mov eax, dword [rsi + 0x84]
mov dword [rdi + 0x84], eax
movzx eax, byte [rsi + 0x88]
mov byte [rdi + 0x88], al
movzx eax, byte [rsi + 0x89]
mov byte [rdi + 0x89], al
movzx eax, byte [rsi + 0x8a]
mov byte [rdi + 0x8a], al
movzx eax, byte [rsi + 0x8b]
mov byte [rdi + 0x8b], al
lea rbx, [rdi + 0x98]
mov qword [rsp + 0x38], rbx
xor eax, eax
mov qword [rbx], rax
mov qword [rbx + 8], rax
lea ecx, [rax + 0x30]
call fcn.1400520b8
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbx], rax
movss xmm0, dword [rsi]
movss xmm1, dword [rsi + 8]
cmp byte [rsi + 0x38], 0
je 0x140048de8
mulss xmm0, dword [0x1400945d0]
mulss xmm0, xmm1
cvttss2si ecx, xmm0
not ecx
mov eax, ecx
sar eax, 1
or ecx, eax
mov eax, ecx
sar eax, 2
or ecx, eax
mov eax, ecx
sar eax, 4
or ecx, eax
mov eax, ecx
sar eax, 8
or ecx, eax
mov edx, ecx
sar edx, 0x10
or edx, ecx
inc edx
jmp 0x140048df8
mulss xmm0, dword [0x1400943c4]
mulss xmm0, xmm1
cvttss2si edx, xmm0
lea rcx, [rdi + 0xa8]
call fcn.14004a0c0
nop
movss xmm0, dword [rsi + 0x84]
xorps xmm1, xmm1
comiss xmm0, xmm1
jbe 0x140048e22
call fcn.14007bb70
movss dword [rdi + 0x90], xmm0
movss xmm1, dword [0x140094400]
mov rcx, rdi
call fcn.140048fc0
nop
mov rax, rdi
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
add rsp, 0x20
pop rdi
ret
Function at 0x140058714
Capabilities:
Parse pe header

Disassembly:
mov qword [rsp + 8], rbx
mov dword [rsp + 0x18], r8d
mov dword [rsp + 0x10], edx
push rbp
mov rbp, rsp
sub rsp, 0x50
mov ebx, ecx
test r8d, r8d
jne 0x1400585a7
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test rax, rax
je 0x1400585a7
mov ecx, 0x5a4d
cmp word [rax], cx
jne 0x1400585a7
movsxd rcx, dword [rax + 0x3c]
add rcx, rax
cmp dword [rcx], 0x4550
jne 0x1400585a7
mov eax, 0x20b
cmp word [rcx + 0x18], ax
jne 0x1400585a7
cmp dword [rcx + 0x84], 0xe
jbe 0x1400585a7
cmp dword [rcx + 0xf8], 0
je 0x1400585a7
mov ecx, ebx
call fcn.140058648
lea rax, [rbp + 0x18]
mov byte [rbp + 0x28], 0
mov qword [rbp - 0x20], rax
lea r9, [rbp - 0x2c]
lea rax, [rbp + 0x20]
mov qword [rbp - 0x18], rax
lea r8, [rbp - 0x20]
lea rax, [rbp + 0x28]
mov qword [rbp - 0x10], rax
lea rdx, [rbp - 0x28]
mov eax, 2
lea rcx, [rbp - 0x30]
mov dword [rbp - 0x2c], eax
mov dword [rbp - 0x28], eax
call fcn.140058438
cmp dword [rbp + 0x20], 0
je 0x1400585f4
mov rbx, qword [rsp + 0x60]
add rsp, 0x50
pop rbp
ret
mov ecx, ebx
call fcn.1400585fc
int3
xor r8d, r8d
xor edx, edx
jmp 0x140058540