Function at 0x27556330
Capabilities:
Acquire credentials from windows credential manager

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x275a812c
mov eax, dword fs:[0]
push eax
sub esp, 0x134
mov eax, dword [0x275ba2ec]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
push esi
push eax
push 0x275153b8
push 0x27515680
mov dword [ebp - 0x140], eax
lea eax, [ebp - 0x120]
push eax
push 0x27515610
lea ecx, [ebp - 0x11c]
push 2
xor ebx, ebx
push ecx
mov dword [ebp - 0x120], ebx
call fcn.2753a320
add esp, 0x20
mov edx, dword [0x275bc8c4]
mov eax, dword [edx + 0xc]
mov ecx, 0x275bc8c4
mov dword [ebp - 4], ebx
call eax
add eax, 0x10
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x134], ebx
mov dword [ebp - 0x130], ebx
mov dword [ebp - 0x134], ebx
mov dword [ebp - 0x138], 0x2750bb88
lea ecx, [ebp - 0x128]
push ecx
push esi
mov byte [ebp - 4], 2
mov dword [ebp - 0x124], ebx
mov dword [ebp - 0x13c], ebx
call fcn.275544e0
mov ecx, dword [ebp - 0x128]
lea edx, [ebp - 0x130]
push edx
lea eax, [ebp - 0x124]
push eax
push ebx
push ecx
call dword [sym.imp.ADVAPI32.dll_CredEnumerateW]
test eax, eax
jne 0x2755649a
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
cmp eax, 0x490
jne 0x27556452
mov dword [ebp - 0x120], 0x80048887
call fcn.27595010
test al, al
je 0x27556602
push 0x275152b0
push 0x275155a0
push ebx
call fcn.27595fd0
add esp, 0xc
jmp 0x27556602
call esi
test eax, eax
jg 0x2755645c
call esi
jmp 0x27556468
call esi
and eax, 0xffff
or eax, 0x80070000
mov dword [ebp - 0x120], eax
call fcn.27595010
test al, al
je 0x27556602
mov edx, dword [ebp - 0x120]
push edx
push 0x275147c8
push 0x27515530
push ebx
call fcn.27595fd0
add esp, 0x10
jmp 0x27556602
mov esi, dword [ebp - 0x130]
cmp esi, ebx
je 0x27556602
cmp dword [ebp - 0x124], ebx
je 0x27556602
mov eax, dword [ebp - 0x138]
mov edx, dword [eax + 4]
lea ecx, [ebp - 0x138]
call edx
xor edi, edi
cmp dword [ebp - 0x124], ebx
mov dword [ebp - 0x134], esi
jbe 0x27556602
lea esp, [esp]
mov ecx, dword [ebp - 0x140]
mov eax, dword [ebp - 0x130]
mov esi, dword [eax + edi*4]
push ecx
lea ecx, [ebp - 0x12c]
call fcn.275391c0
cmp esi, ebx
mov byte [ebp - 4], 3
jne 0x2755653f
call fcn.27595010
test al, al
je 0x27556520
push edi
push 0x27515160
push 0x275154c0
push ebx
call fcn.27595fd0
add esp, 0x10
mov eax, dword [ebp - 0x12c]
add eax, 0xfffffff0
mov byte [ebp - 4], 2
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jmp 0x275565df
mov ecx, dword [ebp - 0x12c]
cmp dword [ecx - 0xc], ebx
je 0x2755655b
mov eax, dword [esi + 0x30]
push eax
push ecx
call fcn.27580de3
add esp, 8
test eax, eax
jne 0x275565c5
mov ecx, dword [esi + 8]
push ebx
push 1
push ecx
call dword [sym.imp.ADVAPI32.dll_CredDeleteW]
test eax, eax
jne 0x275565bb
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jg 0x2755657e
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x2755658e
call dword [sym.imp.KERNEL32.dll_GetLastError]
and eax, 0xffff
or eax, 0x80070000
mov dword [ebp - 0x120], eax
call fcn.27595010
test al, al
je 0x275565bb
mov edx, dword [ebp - 0x120]
mov eax, dword [esi + 8]
push edx
push eax
push 0x27515478
push 0x27515408
push ebx
call fcn.27595fd0
add esp, 0x14
mov dword [ebp - 0x13c], 1
mov eax, dword [ebp - 0x12c]
add eax, 0xfffffff0
mov byte [ebp - 4], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x275565eb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
add edi, 1
cmp edi, dword [ebp - 0x124]
jb 0x275564e0
cmp dword [ebp - 0x13c], ebx
jne 0x27556614
cmp dword [ebp - 0x120], ebx
jne 0x27556614
mov dword [ebp - 0x120], 0x80048887
mov esi, dword [ebp - 0x120]
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 1
call fcn.27548ba0
mov eax, dword [ebp - 0x128]
add eax, 0xfffffff0
mov byte [ebp - 4], bl
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x2755664e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [ebp - 0x11c]
mov dword [ebp - 4], 0xffffffff
call fcn.2753a430
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.2757f388
mov esp, ebp
pop ebp
ret 8