Function at 0x10e0d70
Capabilities:
Acquire credentials from windows credential manager

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x113f9ac
mov eax, dword fs:[0]
push eax
sub esp, 0x13c
mov eax, dword [0x115f604]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x18]
mov edx, dword [ebp + 0x1c]
push edi
push esi
push 0x1037008
push 0x1036fcc
mov dword [ebp - 0x13c], eax
lea eax, [ebp - 0x120]
push eax
push 0x1036f48
mov dword [ebp - 0x144], ecx
lea ecx, [ebp - 0x11c]
push 2
xor ebx, ebx
push ecx
mov dword [ebp - 0x140], edx
mov dword [ebp - 0x120], ebx
call fcn.01075110
add esp, 0x20
mov edx, dword [0x1161d94]
mov eax, dword [edx + 0xc]
mov ecx, 0x1161d94
mov dword [ebp - 4], ebx
call eax
add eax, 0x10
mov dword [ebp - 0x148], eax
mov edx, dword [0x1161d94]
mov eax, dword [edx + 0xc]
mov ecx, 0x1161d94
mov byte [ebp - 4], 1
call eax
add eax, 0x10
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x134], ebx
mov dword [ebp - 0x130], ebx
mov dword [ebp - 0x134], ebx
mov dword [ebp - 0x138], 0x1015ad8
cmp esi, ebx
mov byte [ebp - 4], 3
mov dword [ebp - 0x128], ebx
je 0x10e0e58
cmp word [esi], bx
jne 0x10e0e8d
cmp byte [ebp + 0x10], bl
jne 0x10e0e92
mov dword [ebp - 0x120], 0x80048887
call fcn.01127f00
test al, al
je 0x10e1070
push 0x1036ee8
push 0x1036e60
push 3
call fcn.01128b70
add esp, 0xc
jmp 0x10e1070
cmp byte [ebp + 0x10], bl
je 0x10e0ea1
lea ecx, [ebp - 0x124]
push ecx
push edi
call fcn.010dcd30
jmp 0x10e0eae
lea edx, [ebp - 0x124]
push edx
push esi
call fcn.010dce50
mov edx, dword [ebp - 0x124]
lea eax, [ebp - 0x130]
push eax
lea ecx, [ebp - 0x128]
push ecx
push ebx
push edx
call dword [sym.imp.ADVAPI32.dll_CredEnumerateW]
test eax, eax
jne 0x10e0f58
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
cmp eax, 0x490
jne 0x10e0f10
mov dword [ebp - 0x120], 0x80048887
call fcn.01127f00
test al, al
je 0x10e1070
push 0x10167d0
push 0x1036dd8
push ebx
call fcn.01128b70
add esp, 0xc
jmp 0x10e1070
call esi
test eax, eax
jg 0x10e0f1a
call esi
jmp 0x10e0f26
call esi
and eax, 0xffff
or eax, 0x80070000
mov dword [ebp - 0x120], eax
call fcn.01127f00
test al, al
je 0x10e1070
mov eax, dword [ebp - 0x120]
push eax
push 0x1016714
push 0x1036d50
push ebx
call fcn.01128b70
add esp, 0x10
jmp 0x10e1070
mov edi, dword [ebp - 0x130]
cmp edi, ebx
je 0x10e1070
cmp dword [ebp - 0x128], ebx
je 0x10e1070
mov edx, dword [ebp - 0x138]
mov eax, dword [edx + 4]
lea ecx, [ebp - 0x138]
call eax
cmp dword [ebp - 0x128], ebx
mov dword [ebp - 0x134], edi
mov dword [ebp - 0x12c], ebx
jbe 0x10e0ffe
mov ecx, dword [ebp - 0x130]
mov edx, dword [ebp - 0x12c]
mov edi, dword [ecx + edx*4]
cmp edi, ebx
jne 0x10e0fcf
call fcn.01127f00
test al, al
je 0x10e0fe7
mov eax, dword [ebp - 0x12c]
push eax
push 0x1016628
push 0x1036cc8
push ebx
call fcn.01128b70
add esp, 0x10
jmp 0x10e0fe7
cmp esi, ebx
je 0x10e100a
cmp word [esi], bx
je 0x10e100a
mov ecx, dword [edi + 0x30]
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x10e100a
mov eax, dword [ebp - 0x12c]
add eax, 1
cmp eax, dword [ebp - 0x128]
mov dword [ebp - 0x12c], eax
jb 0x10e0f97
mov dword [ebp - 0x120], 0x80048887
jmp 0x10e107c
mov edx, dword [edi + 0x30]
mov ecx, dword [ebp - 0x13c]
push edx
call fcn.0107f660
mov eax, dword [edi + 0x1c]
cmp eax, ebx
je 0x10e1032
mov ecx, dword [edi + 0x18]
shr ecx, 1
push ecx
mov ecx, dword [ebp - 0x144]
push eax
call fcn.01076ac0
mov esi, dword [ebp - 0x140]
push esi
push 0x1033bf0
push edi
call fcn.010d6f20
cmp eax, ebx
mov dword [ebp - 0x120], eax
jl 0x10e107c
call fcn.01127f00
test al, al
je 0x10e1070
call fcn.01127f00
test al, al
je 0x10e1070
mov eax, dword [esi]
push eax
push 0x1036ca0
push ebx
push 3
call fcn.01128ac0
cmp dword [ebp - 0x120], ebx
jge 0x10e112d
mov esi, dword [ebp - 0x13c]
mov eax, dword [esi]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
or eax, ecx
jge 0x10e109e
push ebx
mov ecx, esi
call fcn.010745e0
mov eax, dword [esi]
cmp dword [eax - 8], ebx
jge 0x10e10af
push 0x80070057
call fcn.01071710
mov dword [eax - 0xc], ebx
mov edx, dword [esi]
mov esi, dword [ebp - 0x140]
mov word [edx], bx
mov eax, dword [esi]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
or eax, ecx
jge 0x10e10d9
push ebx
mov ecx, esi
call fcn.010745e0
mov eax, dword [esi]
cmp dword [eax - 8], ebx
jge 0x10e10ea
push 0x80070057
call fcn.01071710
mov dword [eax - 0xc], ebx
mov eax, dword [esi]
mov esi, dword [ebp - 0x144]
mov word [eax], bx
mov eax, dword [esi]
sub eax, 0x10
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov eax, dword [eax + 8]
or eax, ecx
jge 0x10e1114
push ebx
mov ecx, esi
call fcn.010745e0
mov eax, dword [esi]
cmp dword [eax - 8], ebx
jge 0x10e1125
push 0x80070057
call fcn.01071710
mov dword [eax - 0xc], ebx
mov ecx, dword [esi]
mov word [ecx], bx
mov esi, dword [ebp - 0x120]
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 2
call fcn.010b5ef0
mov eax, dword [ebp - 0x124]
add eax, 0xfffffff0
mov byte [ebp - 4], 1
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x10e1168
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x148]
add eax, 0xfffffff0
mov byte [ebp - 4], bl
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10e118d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [ebp - 0x11c]
mov dword [ebp - 4], 0xffffffff
call fcn.01075230
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.010840d6
mov esp, ebp
pop ebp
ret 0x18