Function at 0x140086cd0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x18], rbp
push rsi
push rdi
push r12
sub rsp, 0x60
lea rax, [r11 - 0x38]
mov rdi, rcx
mov rdx, rcx
mov qword [r11 - 0x48], rax
lea rax, [0x140140240]
lea rcx, [r11 - 0x48]
mov r8d, Ordinal_36
mov qword [r11 - 0x40], rax
call fcn.14000b6d8
xor ebp, ebp
cmp eax, ebp
je 0x140087201
mov rax, qword [rsp + 0x50]
mov qword [rdi], rax
cmp rax, rbp
je 0x140087201
lea rax, [rsp + 0x20]
lea r8d, [rbp + 0xc]
lea rcx, [rsp + 0x30]
mov rdx, rdi
mov qword [rsp + 0x30], rax
call fcn.14000b6d8
cmp eax, ebp
je 0x140087201
mov edx, dword [rsp + 0x20]
lea ecx, [rbp + 0x40]
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov rbx, rax
cmp rax, rbp
je 0x140087201
mov r8d, dword [rsp + 0x20]
lea rcx, [rsp + 0x30]
mov rdx, rdi
mov qword [rsp + 0x30], rax
call fcn.14000b6d8
cmp eax, ebp
je 0x1400871f8
movzx esi, word [rsp + 0x28]
lea rcx, str._nAlgId_____:
call fcn.14000c030
mov r8d, dword [rsp + 0x28]
lea r12d, [rbp + 1]
mov eax, r8d
shr eax, 0x10
sub eax, r12d
je 0x140086ff2
cmp eax, 2
je 0x140086dc3
lea rcx, str.ERROR_kuhl_m_crypto_extractor_bcrypt64___Unsupported_interface_alg__0x_x__n
mov edx, r8d
call fcn.14000c030
jmp 0x1400871f8
movzx eax, si
cmp eax, ebp
je 0x140086de2
cmp eax, 0xb
ja 0x140086de2
lea rsi, [0x140000000]
dec eax
mov rdx, qword [rsi + rax*8 + 0xe0530]
jmp 0x140086de5
mov rdx, rbp
lea rcx, str._s__0x_x__n
call fcn.14000c030
cmp dword [rsp + 0x24], 0x4d534b59
je 0x1400871f8
cmp dword [rsp + 0x24], 0x4d53524b
je 0x140086e1f
lea rdx, [rsp + 0x24]
lea rcx, str.ERROR_kuhl_m_crypto_extractor_bcrypt64___Tag__.4S_not_supported_n
call fcn.14000c030
jmp 0x1400871f8
mov eax, dword [0x14014084c]
cmp eax, 0x24b8
jae 0x140086e91
mov rdx, qword [rbx + 0x40]
mov rcx, qword [rdi + 8]
lea r9, str.PubExp
mov r8d, 8
call fcn.140086c2c
mov r8d, dword [rbx + 0x28]
mov rdx, qword [rbx + 0x50]
mov rcx, qword [rdi + 8]
lea r9, str.Modulus
shl r8d, 3
call fcn.140086c2c
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0xb0]
mov rcx, qword [rdi + 8]
lea r9, str.Prime1
shl r8d, 3
call fcn.140086c2c
mov r8d, dword [rbx + 0xe8]
mov rdx, qword [rbx + 0x120]
jmp 0x140086efb
cmp eax, 0x3ad7
jae 0x140086f14
mov rdx, qword [rbx + 0x40]
mov rcx, qword [rdi + 8]
lea r9, str.PubExp
mov r8d, 8
call fcn.140086c2c
mov r8d, dword [rbx + 0x28]
mov rdx, qword [rbx + 0x50]
mov rcx, qword [rdi + 8]
lea r9, str.Modulus
shl r8d, 3
call fcn.140086c2c
mov r8d, dword [rbx + 0x78]
mov rdx, qword [rbx + 0xb0]
mov rcx, qword [rdi + 8]
lea r9, str.Prime1
shl r8d, 3
call fcn.140086c2c
mov r8d, dword [rbx + 0xf8]
mov rdx, qword [rbx + reloc.WLDAP32.dll_Ordinal_304]
mov rcx, qword [rdi + 8]
lea r9, str.Prime2
shl r8d, 3
call fcn.140086c2c
jmp 0x1400871f8
mov rax, qword [rbx + 0x20]
mov qword [rdi], rax
cmp rax, rbp
je 0x1400871f8
lea rax, [rsp + 0x88]
lea rcx, [rsp + 0x30]
mov r8d, 4
mov rdx, rdi
mov qword [rsp + 0x30], rax
call fcn.14000b6d8
cmp eax, ebp
je 0x1400871f8
mov edx, dword [rsp + 0x88]
mov ecx, 0x40
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov rsi, rax
cmp rax, rbp
je 0x1400871f8
mov r8d, dword [rsp + 0x88]
lea rcx, [rsp + 0x30]
mov rdx, rdi
mov qword [rsp + 0x30], rax
call fcn.14000b6d8
cmp eax, ebp
je 0x140086fe4
mov r8, qword [rsi + 0x58]
mov rdx, qword [rbx + 0x20]
lea r9, str.PubExp
mov rcx, rsi
call fcn.140086be8
mov r8, qword [rsi + 0x78]
mov rdx, qword [rbx + 0x20]
lea r9, str.Modulus
mov rcx, rsi
call fcn.140086be8
mov r8, qword [rsi + 0x38]
mov rdx, qword [rbx + 0x20]
lea r9, str.Prime1
mov rcx, rsi
call fcn.140086be8
mov r8, qword [rsi + 0x40]
mov rdx, qword [rbx + 0x20]
lea r9, str.Prime2
mov rcx, rsi
call fcn.140086be8
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x1400871f8
movzx eax, si
lea rsi, [0x140000000]
cmp eax, ebp
je 0x140087011
cmp eax, 8
ja 0x140087011
dec eax
mov rdx, qword [rsi + rax*8 + 0xe04f0]
jmp 0x140087014
mov rdx, rbp
lea rcx, str._s__0x_x__n
call fcn.14000c030
mov r11d, dword [0x14014084c]
mov r8d, dword [rbx + 0xc]
cmp r11d, 0x1f40
jae 0x1400870d7
cmp r8d, 6
jae 0x140087048
mov rdx, qword [rsi + r8*8 + 0xe0588]
jmp 0x14008704b
mov rdx, rbp
lea rcx, str.Mode______:__s__0x_x__n
call fcn.14000c030
movzx r9d, bp
mov r8b, bpl
movzx eax, r9w
cmp eax, dword [rbx + 0x10]
jae 0x140087086
mov eax, dword [rbx + 0x10]
mov ecx, dword [rsp + 0x20]
movzx edx, r9w
sub rdx, rax
add r9w, r12w
lea rax, [rbx + rdx]
or r8b, byte [rcx + rax]
cmp r8b, bpl
je 0x14008705e
cmp r8b, bpl
je 0x1400870bc
lea rcx, str.IV________:
call fcn.14000c030
mov r11d, dword [rbx + 0x10]
mov ecx, dword [rsp + 0x20]
sub rcx, r11
xor r8d, r8d
mov edx, r11d
add rcx, rbx
call fcn.140012f68
lea rcx, reloc.Cabinet.dll_FCICreate
call fcn.14000c030
mov edx, dword [rbx + 0x18]
lea rcx, str.Key___3u__:
call fcn.14000c030
mov edx, dword [rbx + 0x18]
lea rcx, [rbx + 0x1c]
jmp 0x1400871e4
cmp r11d, 0x24b8
jae 0x140087165
cmp r8d, 6
jae 0x1400870f4
mov rdx, qword [rsi + r8*8 + 0xe0588]
jmp 0x1400870f7
mov rdx, rbp
lea rcx, str.Mode______:__s__0x_x__n
call fcn.14000c030
movzx edx, bp
mov cl, bpl
movzx eax, dx
cmp eax, dword [rbx + 0x10]
jae 0x140087121
movzx eax, dx
add dx, r12w
or cl, byte [rax + rbx + 0x6c]
cmp cl, bpl
je 0x140087109
cmp cl, bpl
je 0x14008714d
lea rcx, str.IV________:
call fcn.14000c030
mov edx, dword [rbx + 0x10]
lea rcx, [rbx + 0x6c]
xor r8d, r8d
call fcn.140012f68
lea rcx, reloc.Cabinet.dll_FCICreate
call fcn.14000c030
mov edx, dword [rbx + 0x28]
lea rcx, str.Key___3u__:
call fcn.14000c030
mov edx, dword [rbx + 0x28]
lea rcx, [rbx + 0x2c]
jmp 0x1400871e4
cmp r8d, 6
jae 0x140087175
mov rdx, qword [rsi + r8*8 + 0xe0588]
jmp 0x140087178
mov rdx, rbp
lea rcx, str.Mode______:__s__0x_x__n
call fcn.14000c030
movzx edx, bp
mov cl, bpl
movzx eax, dx
cmp eax, dword [rbx + 0x10]
jae 0x1400871a2
movzx eax, dx
add dx, r12w
or cl, byte [rax + rbx + 0x28]
cmp cl, bpl
je 0x14008718a
cmp cl, bpl
je 0x1400871ce
lea rcx, str.IV________:
call fcn.14000c030
mov edx, dword [rbx + 0x10]
lea rcx, [rbx + 0x28]
xor r8d, r8d
call fcn.140012f68
lea rcx, reloc.Cabinet.dll_FCICreate
call fcn.14000c030
mov edx, dword [rbx + 0x38]
lea rcx, str.Key___3u__:
call fcn.14000c030
mov edx, dword [rbx + 0x38]
lea rcx, [rbx + 0x3c]
xor r8d, r8d
call fcn.140012f68
lea rcx, reloc.Cabinet.dll_FCICreate
call fcn.14000c030
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LocalFree]
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r12
pop rdi
pop rsi
ret