Function at 0x42defe
Capabilities:
Acquire credentials from windows credential manager

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x9c4c
call fcn.005fec20
mov eax, dword [0x708c34]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
lea eax, [ebp - 0x9c48]
xor ebx, ebx
push eax
lea eax, [ebp - 0x9c4c]
push eax
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_CredEnumerateA]
test eax, eax
jne 0x42df52
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.RecoverIEAuthPasswordsFromCredentialManager
push str._n__s_:_CredEnumerate_failed_with_error_0x_.8x
call fcn.00449974
add esp, 0xc
xor eax, eax
jmp 0x42e150
push esi
push edi
push dword [ebp - 0x9c4c]
mov edi, str.RecoverIEAuthPasswordsFromCredentialManager
push edi
push str._n__s_:_CredEnumerate_found__d_credentials
call fcn.00449974
add esp, 0xc
mov esi, ebx
cmp dword [ebp - 0x9c4c], ebx
jbe 0x42e137
mov eax, dword [ebp - 0x9c48]
mov byte [ebp - 0x4e24], bl
mov byte [ebp - 0x2714], bl
mov eax, dword [eax + esi*4]
cmp dword [eax + 4], 1
jne 0x42e12a
push str.Microsoft_WinInet_
call fcn.00631510
push eax
mov eax, dword [ebp - 0x9c48]
push str.Microsoft_WinInet_
mov eax, dword [eax + esi*4]
push dword [eax + 8]
call fcn.006317d8
add esp, 0x10
test eax, eax
jne 0x42e12a
mov eax, dword [ebp - 0x9c48]
mov eax, dword [eax + esi*4]
cmp dword [eax + 0x1c], ebx
je 0x42e119
cmp dword [eax + 0x18], ebx
je 0x42e119
push dword [eax + 8]
push edi
push str._n__s_:_Found_IE_http_auth_credential__s
call fcn.00449974
mov eax, dword [ebp - 0x9c48]
mov eax, dword [eax + esi*4]
push dword [eax + 8]
lea eax, [ebp - 0x7534]
push 0x2710
push eax
call fcn.006311ec
mov eax, dword [ebp - 0x9c48]
push 0x2f
mov eax, dword [eax + esi*4]
push dword [eax + 8]
call fcn.006270b0
add esp, 0x20
test eax, eax
je 0x42e028
mov byte [eax], bl
mov eax, dword [ebp - 0x9c48]
push str.:443
mov eax, dword [eax + esi*4]
push dword [eax + 8]
call fcn.00627320
mov edi, str.https:___s
pop ecx
pop ecx
push str.Microsoft_WinInet_
test eax, eax
jne 0x42e053
mov edi, str.http:___s
call fcn.00631510
pop ecx
mov ecx, eax
mov eax, dword [ebp - 0x9c48]
mov eax, dword [eax + esi*4]
add ecx, dword [eax + 8]
lea eax, [ebp - 0x9c44]
push ecx
push edi
push 0x2710
push eax
call fcn.00445d6d
mov eax, dword [ebp - 0x9c48]
lea ecx, [ebp - 0x4e24]
push ecx
lea ecx, [ebp - 0x2714]
push ecx
mov eax, dword [eax + esi*4]
push dword [eax + 0x18]
push dword [eax + 0x1c]
call fcn.0040901f
add esp, 0x20
mov edi, str.RecoverIEAuthPasswordsFromCredentialManager
test eax, eax
je 0x42e0d9
lea eax, [ebp - 0x4e24]
push eax
lea eax, [ebp - 0x2714]
push eax
lea eax, [ebp - 0x9c44]
push eax
push edi
push str._s_Successfully_decrypted_IE_http_auth_credential__url_s__user_s__pass_s
call fcn.00449974
add esp, 0x14
lea eax, [ebp - 0x2714]
lea ecx, [ebp - 0x4e24]
jmp 0x42e0f5
lea eax, [ebp - 0x7534]
push eax
push edi
push str._s_Failed_to_decrypt_IE_http_auth_credential_for_target__s
call fcn.00449974
mov ecx, str._Password_cannot_be_recovered_
add esp, 0xc
mov eax, ecx
push 3
lea edx, [ebp - 0x7534]
push edx
push ecx
push eax
lea eax, [ebp - 0x9c44]
push eax
push 0x66ae5d
push ebx
push 1
call fcn.00412c85
add esp, 0x20
jmp 0x42e12a
push dword [eax + 8]
push edi
push str._s_:__Ignoring_empty_passwords_for_target___s
call fcn.00449974
add esp, 0xc
inc esi
cmp esi, dword [ebp - 0x9c4c]
jb 0x42df7b
pop edi
pop esi
cmp dword [ebp - 0x9c48], ebx
je 0x42e14d
push dword [ebp - 0x9c48]
call dword [sym.imp.ADVAPI32.dll_CredFree]
xor eax, eax
inc eax
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop ebx
call fcn.005fe955
leave
ret