Function at 0x140005c60
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov qword [rsp + 0x10], rdx
mov dword [rsp + 8], ecx
push rbx
push rbp
push rsi
push rdi
sub rsp, 0x58
mov eax, dword [rsp + 0x80]
shl eax, 1
lea r8, [0x14017de90]
mov edx, eax
lea rcx, str._sVAULT_CREDENTIAL_n
call fcn.140013fd0
cmp qword [rsp + 0x88], 0
je 0x140005f75
mov eax, dword [rsp + 0x80]
shl eax, 1
lea r8, [0x14017de90]
mov edx, eax
lea rcx, str._s__SchemaId____________:
call fcn.140013fd0
mov rax, qword [rsp + 0x88]
mov rcx, rax
call fcn.1400206f0
lea rcx, reloc.Cabinet.dll_FCICreate
call fcn.140013fd0
mov eax, dword [rsp + 0x80]
shl eax, 1
mov rcx, qword [rsp + 0x88]
mov ecx, dword [rcx + 0x10]
mov dword [rsp + 0x20], ecx
mov rcx, qword [rsp + 0x88]
mov r9d, dword [rcx + 0x10]
lea r8, [0x14017de90]
mov edx, eax
lea rcx, str._s__unk0________________:__08x____u_n
call fcn.140013fd0
mov eax, dword [rsp + 0x80]
shl eax, 1
lea r8, [0x14017de90]
mov edx, eax
lea rcx, str._s__LastWritten_________:
call fcn.140013fd0
mov rax, qword [rsp + 0x88]
add rax, 0x14
mov rcx, rax
call fcn.1400205f0
lea rcx, reloc.Cabinet.dll_FCICreate
call fcn.140013fd0
mov eax, dword [rsp + 0x80]
shl eax, 1
mov rcx, qword [rsp + 0x88]
mov ecx, dword [rcx + 0x1c]
mov dword [rsp + 0x20], ecx
mov rcx, qword [rsp + 0x88]
mov r9d, dword [rcx + 0x1c]
lea r8, [0x14017de90]
mov edx, eax
lea rcx, str._s__unk1________________:__08x____u_n
call fcn.140013fd0
mov eax, dword [rsp + 0x80]
shl eax, 1
mov rcx, qword [rsp + 0x88]
mov ecx, dword [rcx + 0x20]
mov dword [rsp + 0x20], ecx
mov rcx, qword [rsp + 0x88]
mov r9d, dword [rcx + 0x20]
lea r8, [0x14017de90]
mov edx, eax
lea rcx, str._s__unk2________________:__08x____u_n
call fcn.140013fd0
mov eax, dword [rsp + 0x80]
shl eax, 1
mov rcx, qword [rsp + 0x88]
mov r9, qword [rcx + 0x28]
lea r8, [0x14017de90]
mov edx, eax
lea rcx, str._s__FriendlyName________:__s_n
call fcn.140013fd0
mov eax, dword [rsp + 0x80]
shl eax, 1
mov rcx, qword [rsp + 0x88]
mov ecx, dword [rcx + 0x30]
mov dword [rsp + 0x20], ecx
mov rcx, qword [rsp + 0x88]
mov r9d, dword [rcx + 0x30]
lea r8, [0x14017de90]
mov edx, eax
lea rcx, str._s__dwAttributesMapSize_:__08x____u_n
call fcn.140013fd0
mov dword [rsp + 0x40], 0
jmp 0x140005e38
mov eax, dword [rsp + 0x40]
inc eax
mov dword [rsp + 0x40], eax
mov eax, dword [rsp + 0x40]
mov qword [rsp + 0x48], rax
mov rcx, qword [rsp + 0x88]
mov ecx, dword [rcx + 0x30]
xor edx, edx
mov eax, ecx
mov ecx, reloc.WLDAP32.dll_Ordinal_12
div rcx
mov rcx, qword [rsp + 0x48]
cmp rcx, rax
jae 0x140005f16
mov eax, dword [rsp + 0x40]
imul rax, rax, 0xc
mov rcx, qword [rsp + 0x88]
mov rcx, qword [rcx + 0x34]
mov edx, dword [rsp + 0x40]
imul rdx, rdx, 0xc
mov r8, qword [rsp + 0x88]
mov r8, qword [r8 + 0x34]
mov r9d, dword [rsp + 0x40]
imul r9, r9, 0xc
mov r10, qword [rsp + 0x88]
mov r10, qword [r10 + 0x34]
mov r11d, dword [rsp + 0x40]
imul r11, r11, 0xc
mov rbx, qword [rsp + 0x88]
mov rbx, qword [rbx + 0x34]
mov edi, dword [rsp + 0x40]
imul rdi, rdi, 0xc
mov rsi, qword [rsp + 0x88]
mov rsi, qword [rsi + 0x34]
mov ebp, dword [rsp + 0x80]
shl ebp, 1
mov eax, dword [rcx + rax + 8]
mov dword [rsp + 0x38], eax
mov eax, dword [r8 + rdx + 8]
mov dword [rsp + 0x30], eax
mov eax, dword [r10 + r9 + 4]
mov dword [rsp + 0x28], eax
mov eax, dword [rbx + r11 + 4]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsi + rdi]
lea r8, [0x14017de90]
mov edx, ebp
lea rcx, str._s___Attribute__3u___offset__08x____u___unk__08x____u__n
call fcn.140013fd0
jmp 0x140005e2e
mov dword [rsp + 0x40], 0
jmp 0x140005f2a
mov eax, dword [rsp + 0x40]
inc eax
mov dword [rsp + 0x40], eax
mov rax, qword [rsp + 0x88]
mov eax, dword [rax + 0x3c]
cmp dword [rsp + 0x40], eax
jae 0x140005f69
mov eax, dword [rsp + 0x40]
mov rcx, qword [rsp + 0x88]
mov rcx, qword [rcx + 0x40]
mov edx, dword [rsp + 0x80]
inc edx
mov dword [rsp + 0x44], edx
mov rdx, qword [rcx + rax*8]
mov eax, dword [rsp + 0x44]
mov ecx, eax
call fcn.140005f80
jmp 0x140005f20
lea rcx, reloc.Cabinet.dll_FCICreate
call fcn.140013fd0
add rsp, 0x58
pop rdi
pop rsi
pop rbp
pop rbx
ret