Function at 0x10e1e40
Capabilities:
Acquire credentials from windows credential manager

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x113fc2a
mov eax, dword fs:[0]
push eax
sub esp, 0x1fc
mov eax, dword [0x115f604]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [0x1161d94]
mov edi, dword [ebp + 0xc]
mov edx, dword [eax + 0xc]
mov esi, dword [ebp + 8]
xor ebx, ebx
mov ecx, 0x1161d94
mov dword [ebp - 0x168], edi
mov dword [ebp - 0x120], ebx
call edx
add eax, 0x10
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x150], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x14c], ebx
mov dword [ebp - 0x150], ebx
mov dword [ebp - 0x154], 0x1015ad8
push esi
push 0x1038634
push 0x10385d0
lea eax, [ebp - 0x120]
push eax
push 0x1038548
lea ecx, [ebp - 0x11c]
push 2
push ecx
mov byte [ebp - 4], 1
mov dword [ebp - 0x140], ebx
call fcn.01075110
add esp, 0x1c
cmp esi, ebx
mov byte [ebp - 4], 2
je 0x10e25a2
cmp word [esi], bx
je 0x10e25a2
cmp edi, ebx
jne 0x10e1f2f
call fcn.01127f00
test al, al
je 0x10e1f20
push 0x1038514
push 0x1038490
push ebx
call fcn.01128b70
add esp, 0xc
mov dword [ebp - 0x120], 0x80048105
jmp 0x10e25c8
lea edx, [ebp - 0x148]
push edx
push 0x1009a90
push esi
push 0x1030128
call fcn.010d71f0
mov edx, dword [ebp - 0x148]
lea eax, [ebp - 0x14c]
push eax
lea ecx, [ebp - 0x140]
push ecx
push ebx
push edx
call dword [sym.imp.ADVAPI32.dll_CredEnumerateW]
test eax, eax
jne 0x10e1fe2
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
cmp eax, 0x490
jne 0x10e1f9a
call fcn.01127f00
test al, al
je 0x10e25c8
push 0x10167d0
push 0x1038408
push ebx
call fcn.01128b70
add esp, 0xc
jmp 0x10e25c8
call esi
test eax, eax
jg 0x10e1fa4
call esi
jmp 0x10e1fb0
call esi
and eax, 0xffff
or eax, 0x80070000
mov dword [ebp - 0x120], eax
call fcn.01127f00
test al, al
je 0x10e25c8
mov eax, dword [ebp - 0x120]
push eax
push 0x102f1e4
push 0x1038380
push ebx
call fcn.01128b70
add esp, 0x10
jmp 0x10e25c8
mov edx, dword [ebp - 0x154]
mov eax, dword [edx + 4]
mov esi, dword [ebp - 0x14c]
lea ecx, [ebp - 0x154]
call eax
cmp dword [ebp - 0x140], ebx
mov dword [ebp - 0x150], esi
mov dword [ebp - 0x144], ebx
jbe 0x10e25c8
mov ecx, dword [ebp - 0x14c]
mov edx, dword [ebp - 0x144]
mov esi, dword [ecx + edx*4]
mov eax, dword [0x1161d94]
mov edx, dword [eax + 0xc]
mov ecx, 0x1161d94
call edx
add eax, 0x10
mov dword [ebp - 0x128], eax
mov eax, dword [0x1161d94]
mov edx, dword [eax + 0xc]
mov ecx, 0x1161d94
mov byte [ebp - 4], 3
call edx
add eax, 0x10
mov dword [ebp - 0x124], eax
mov eax, dword [0x1161d94]
mov edx, dword [eax + 0xc]
mov ecx, 0x1161d94
mov byte [ebp - 4], 4
call edx
add eax, 0x10
mov dword [ebp - 0x130], eax
mov eax, dword [0x1161d94]
mov edx, dword [eax + 0xc]
mov ecx, 0x1161d94
mov byte [ebp - 4], 5
call edx
lea edi, [eax + 0x10]
mov dword [ebp - 0x12c], edi
mov dword [ebp - 0x138], ebx
mov dword [ebp - 0x13c], ebx
mov dword [ebp - 0x134], ebx
mov byte [ebp - 4], 7
mov dword [ebp - 0x15c], ebx
mov dword [ebp - 0x158], ebx
call fcn.01127f00
test al, al
je 0x10e20cf
mov eax, dword [esi + 8]
push eax
push 0x1038354
push 0x10382d0
push 3
call fcn.01128b70
add esp, 0x10
lea ecx, [ebp - 0x130]
push ecx
push 0x1037aa0
push esi
call fcn.010d6f20
cmp eax, ebx
mov dword [ebp - 0x120], eax
jl 0x10e2315
mov edi, dword [ebp - 0x130]
lea edx, [ebp - 0x15c]
push edx
lea eax, [ebp - 0x13c]
push eax
lea ecx, [ebp - 0x12c]
push ecx
lea edx, [ebp - 0x164]
push edx
push edi
call fcn.010d7820
cmp eax, ebx
mov dword [ebp - 0x120], eax
jl 0x10e23d3
push 5
lea eax, [ebp - 0x15c]
push eax
call fcn.010e1590
test al, al
je 0x10e2180
call fcn.01127f00
test al, al
je 0x10e2154
push 0x1038278
push 0x10381f0
push 3
call fcn.01128b70
add esp, 0xc
mov ecx, dword [esi + 8]
push ebx
push 1
push ecx
call dword [sym.imp.ADVAPI32.dll_CredDeleteW]
test eax, eax
jne 0x10e22ba
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
test eax, eax
jg 0x10e2479
call esi
jmp 0x10e2485
mov eax, dword [esi + 8]
lea edx, [ebp - 0x128]
push edx
push eax
call fcn.010ddd20
cmp eax, ebx
mov dword [ebp - 0x120], eax
jl 0x10e24ea
mov ecx, dword [ebp - 0x128]
push ecx
lea ecx, [ebp - 0x208]
call fcn.01099260
mov eax, dword [eax]
push eax
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 8
call fcn.01133ee0
lea ecx, [ebp - 0x208]
mov byte [ebp - 4], 7
call fcn.010977c0
push ecx
mov ecx, esp
mov dword [ebp - 0x16c], esp
push 0x100356c
call fcn.0107f6b0
mov edx, dword [ebp - 0x164]
push ebx
push ebx
push edx
lea eax, [ebp - 0x13c]
push eax
lea ecx, [ebp - 0x15c]
push ecx
lea edx, [ebp - 0x184]
push edx
mov byte [ebp - 4], 9
call fcn.01097410
push eax
push ecx
mov ecx, esp
mov dword [ebp - 0x178], esp
push 0x100356c
call fcn.0107f6b0
push ecx
mov ecx, esp
mov dword [ebp - 0x174], esp
push 0x100356c
mov byte [ebp - 4], 0xa
call fcn.0107f6b0
push ecx
mov ecx, esp
mov dword [ebp - 0x170], esp
push 0x10381dc
mov byte [ebp - 4], 0xb
call fcn.0107f6b0
push ecx
lea eax, [ebp - 0x12c]
mov ecx, esp
mov dword [ebp - 0x17c], esp
push eax
mov byte [ebp - 4], 0xc
call fcn.010827d0
push ecx
lea edx, [ebp - 0x124]
mov ecx, esp
mov dword [ebp - 0x160], esp
push edx
mov byte [ebp - 4], 0xd
call fcn.01099170
mov esi, dword [ebp - 0x168]
mov ecx, esi
mov byte [ebp - 4], 7
call fcn.01100c00
cmp eax, ebx
mov dword [ebp - 0x120], eax
jl 0x10e2546
push ecx
lea eax, [ebp - 0x124]
mov ecx, esp
mov dword [ebp - 0x160], esp
push eax
call fcn.01099170
mov ecx, esi
call fcn.010ffa20
lea ecx, [ebp - 0x13c]
call fcn.010975a0
lea ecx, [ebp - 0x12c]
call fcn.0111cdb0
lea ecx, [ebp - 0x130]
call fcn.0111cdb0
lea ecx, [ebp - 0x124]
call fcn.0111cdb0
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 2
call fcn.0111cdb0
mov eax, dword [ebp - 0x144]
add eax, 1
cmp eax, dword [ebp - 0x140]
mov dword [ebp - 0x144], eax
jb 0x10e2011
jmp 0x10e25c8
mov eax, dword [ebp - 0x138]
cmp eax, ebx
je 0x10e232c
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x138], ebx
add edi, 0xfffffff0
mov dword [ebp - 0x13c], ebx
mov dword [ebp - 0x134], ebx
mov byte [ebp - 4], 5
lea ecx, [edi + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10e2358
mov ecx, dword [edi]
mov eax, dword [ecx]
mov edx, dword [eax + 4]
push edi
call edx
mov eax, dword [ebp - 0x130]
add eax, 0xfffffff0
mov byte [ebp - 4], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10e237e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x124]
add eax, 0xfffffff0
mov byte [ebp - 4], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10e23a4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x128]
add eax, 0xfffffff0
mov byte [ebp - 4], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10e25c8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x10e25c8
lea ecx, [ebp - 0x13c]
call fcn.010975a0
mov eax, dword [ebp - 0x12c]
add eax, 0xfffffff0
mov byte [ebp - 4], 5
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10e2404
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea eax, [edi - 0x10]
mov byte [ebp - 4], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10e2424
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x124]
add eax, 0xfffffff0
mov byte [ebp - 4], 3
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10e244a
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp - 0x128]
add eax, 0xfffffff0
mov byte [ebp - 4], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10e25c8
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x10e25c8
call esi
and eax, 0xffff
or eax, 0x80070000
mov dword [ebp - 0x120], eax
call fcn.01127f00
test al, al
je 0x10e24ae
mov ecx, dword [ebp - 0x120]
push ecx
push 0x102f12c
push 0x1038158
push ebx
call fcn.01128b70
add esp, 0x10
lea ecx, [ebp - 0x13c]
call fcn.010975a0
lea ecx, [ebp - 0x12c]
call fcn.0111cdb0
lea ecx, [ebp - 0x130]
call fcn.0111cdb0
lea ecx, [ebp - 0x124]
call fcn.0111cdb0
lea ecx, [ebp - 0x128]
call fcn.0111cdb0
jmp 0x10e25c8
call fcn.01127f00
test al, al
je 0x10e250a
mov edx, dword [esi + 8]
push edx
push 0x1038124
push 0x10380a0
push ebx
call fcn.01128b70
add esp, 0x10
lea ecx, [ebp - 0x13c]
call fcn.010975a0
lea ecx, [ebp - 0x12c]
call fcn.0111cdb0
lea ecx, [ebp - 0x130]
call fcn.0111cdb0
lea ecx, [ebp - 0x124]
call fcn.0111cdb0
lea ecx, [ebp - 0x128]
call fcn.0111cdb0
jmp 0x10e25c8
call fcn.01127f00
test al, al
je 0x10e2569
mov eax, dword [ebp - 0x120]
push eax
push 0x1032b44
push 0x1038018
push ebx
call fcn.01128b70
add esp, 0x10
lea ecx, [ebp - 0x13c]
call fcn.010975a0
lea ecx, [ebp - 0x12c]
call fcn.0111cdb0
lea ecx, [ebp - 0x130]
call fcn.0111cdb0
lea ecx, [ebp - 0x124]
call fcn.0111cdb0
lea ecx, [ebp - 0x128]
call fcn.0111cdb0
jmp 0x10e25c8
call fcn.01127f00
test al, al
je 0x10e25be
push 0x102ef3c
push 0x1037f90
push ebx
call fcn.01128b70
add esp, 0xc
mov dword [ebp - 0x120], 0x80048023
mov esi, dword [ebp - 0x120]
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 1
call fcn.01075230
lea ecx, [ebp - 0x154]
mov byte [ebp - 4], bl
call fcn.010b5ef0
mov eax, dword [ebp - 0x148]
add eax, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x10e2614
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.010840d6
mov esp, ebp
pop ebp
ret 8