Function at 0x1400d0000
Capabilities:
Enumerate pe sections

Disassembly:
push r14
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x38
mov r8d, dword [rcx + 0x30]
mov rbx, rcx
mov ecx, dword [rcx + 0x38]
mov rsi, rdx
mov edx, r8d
mov r11d, dword [rbx + 0x34]
mov byte [rsp + 0x26], pe_nt_image_headers64
mov byte [rsp + 0x27], 0
add edx, ecx
movzx eax, dh
movzx r14d, dl
adc r11d, 0
mov ebp, edx
mov r12, rax
mov rax, r14
shr ebp, 0x10
mov edi, edx
shl rax, 8
movzx ebp, bpl
shr edi, 0x18
mov r9d, r11d
or rax, r12
movzx edi, dil
mov r10d, r11d
shr r9d, 0x18
shl rax, 8
shr r10d, 0x10
movzx r9d, r9b
or rax, rbp
movzx r10d, r10b
shl rax, 8
or rax, rdi
movzx edi, r11b
shl rax, 8
or rdi, rax
mov eax, r11d
movzx eax, ah
mov r11, rax
mov rax, rdi
shl rax, 8
or rax, r11
shl rax, 8
or rax, r10
shl rax, 8
or rax, r9
mov qword [rsp + 0x28], rax
cmp ecx, 0x1b8
je 0x1400d0270
cmp ecx, 0x1b7
jg 0x1400d0220
test ecx, ecx
je 0x1400d0210
mov r8d, 0x1b8
sub edx, 0x1b8
sub r8d, ecx
mov dword [rbx + 0x30], edx
mov rcx, rbx
lea rdx, [0x1401f8700]
movsxd r8, r8d
call sym.blake256_update
lea rdx, [rsp + 0x27]
mov r8d, 8
mov rcx, rbx
call sym.blake256_update
mov eax, dword [rbx + 0x30]
sub eax, 8
sub eax, 0x40
lea rdx, [rsp + 0x28]
mov r8d, 0x40
mov rcx, rbx
mov dword [rbx + 0x30], eax
call sym.blake256_update
mov eax, 0x18
shrx eax, dword [rbx], eax
mov byte [rsi], al
mov eax, 0x10
shrx eax, dword [rbx], eax
mov byte [rsi + 1], al
mov eax, dword [rbx]
mov byte [rsi + 2], ah
mov eax, dword [rbx]
mov byte [rsi + 3], al
movzx eax, byte [rbx + 7]
mov byte [rsi + 4], al
movzx eax, word [rbx + 6]
mov byte [rsi + 5], al
mov eax, dword [rbx + 4]
mov byte [rsi + 6], ah
mov eax, dword [rbx + 4]
mov byte [rsi + 7], al
movzx eax, byte [rbx + 0xb]
mov byte [rsi + 8], al
movzx eax, word [rbx + 0xa]
mov byte [rsi + 9], al
mov eax, dword [rbx + 8]
mov byte [rsi + 0xa], ah
mov eax, dword [rbx + 8]
mov byte [rsi + 0xb], al
movzx eax, byte [rbx + 0xf]
mov byte [rsi + 0xc], al
movzx eax, word [rbx + 0xe]
mov byte [rsi + 0xd], al
mov eax, dword [rbx + 0xc]
mov byte [rsi + 0xe], ah
mov eax, dword [rbx + 0xc]
mov byte [rsi + 0xf], al
movzx eax, byte [rbx + 0x13]
mov byte [rsi + 0x10], al
movzx eax, word [rbx + 0x12]
mov byte [rsi + 0x11], al
mov eax, dword [rbx + 0x10]
mov byte [rsi + 0x12], ah
mov eax, dword [rbx + 0x10]
mov byte [rsi + 0x13], al
movzx eax, byte [rbx + 0x17]
mov byte [rsi + 0x14], al
movzx eax, word [rbx + 0x16]
mov byte [rsi + 0x15], al
mov eax, dword [rbx + 0x14]
mov byte [rsi + 0x16], ah
mov eax, dword [rbx + 0x14]
mov byte [rsi + 0x17], al
movzx eax, byte [rbx + 0x1b]
mov byte [rsi + 0x18], al
movzx eax, word [rbx + 0x1a]
mov byte [rsi + 0x19], al
mov eax, dword [rbx + 0x18]
mov byte [rsi + 0x1a], ah
mov eax, dword [rbx + 0x18]
mov byte [rsi + 0x1b], al
movzx eax, byte [rbx + 0x1f]
mov byte [rsi + 0x1c], al
movzx eax, word [rbx + 0x1e]
mov byte [rsi + 0x1d], al
mov eax, dword [rbx + 0x1c]
mov byte [rsi + 0x1e], ah
mov eax, dword [rbx + 0x1c]
mov byte [rsi + 0x1f], al
add rsp, 0x38
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r14
ret
mov dword [rbx + 0x3c], 1
jmp 0x1400d00cb
mov r8d, 0x200
sub edx, 0x200
sub r8d, ecx
mov dword [rbx + 0x30], edx
mov rcx, rbx
lea rdx, [0x1401f8700]
movsxd r8, r8d
call sym.blake256_update
sub dword [rbx + 0x30], 0x1b8
mov r8d, 0x1b8
lea rdx, [0x1401f8701]
mov rcx, rbx
call sym.blake256_update
mov dword [rbx + 0x3c], 1
jmp 0x1400d00ef
sub r8d, 8
lea rdx, [rsp + 0x26]
mov rcx, rbx
mov dword [rbx + 0x30], r8d
mov r8d, 8
call sym.blake256_update
mov eax, dword [rbx + 0x30]
jmp 0x1400d0108