Function at 0x140002020
Capabilities:
Acquire credentials from windows credential manager

Disassembly:
mov r11, rsp
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xd0
mov qword [rsp + 0x90], 0xfffffffffffffffe
mov qword [r11 + 0x20], rbx
mov rax, qword [0x1401423c0]
xor rax, rsp
mov qword [rsp + 0xc8], rax
mov qword [rsp + 0x38], r8
mov qword [rsp + 0x30], rdx
mov rbx, rcx
mov qword [r11 - 0x48], rcx
xor dil, dil
xor ebp, ebp
mov dword [rsp + 0x20], ebp
mov qword [rsp + 0x28], rbp
lea r9, [rsp + 0x28]
lea r8, [rsp + 0x20]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.ADVAPI32.dll_CredEnumerateA]
test eax, eax
je 0x140002278
mov esi, ebp
cmp dword [rsp + 0x20], ebp
jbe 0x140002268
mov r14, rbp
mov rax, qword [rsp + 0x28]
mov r15, qword [r14 + rax]
mov rdx, qword [r15 + 8]
mov qword [rsp + 0xb8], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0xb0], rbp
mov byte [rsp + 0xa0], 0
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rdx
repne scasb al, byte [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rsp + 0x98]
call fcn.140004650
nop
mov rdi, qword [rbx + 0x18]
cmp qword [rbx + 0x20], 0x10
jb 0x1400020fb
mov rdx, qword [rbx + 8]
jmp 0x1400020ff
lea rdx, [rbx + 8]
lea rcx, [rsp + 0xa0]
mov r13, qword [rsp + 0xa0]
mov r12, qword [rsp + 0xb8]
cmp r12, 0x10
cmovae rcx, r13
mov r8, rdi
mov rbp, qword [rsp + 0xb0]
cmp rbp, rdi
cmovb r8, rbp
call fcn.1400e72f0
movsxd rcx, eax
test eax, eax
jne 0x14000214a
cmp rbp, rdi
jb 0x140002185
cmp rbp, rdi
setne al
mov ecx, eax
test ecx, ecx
jne 0x140002185
mov rdx, qword [r15 + 0x48]
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rdx
repne scasb al, byte [rdi]
not rcx
lea r8, [rcx - 1]
mov rcx, qword [rsp + 0x30]
call fcn.140004650
cmp qword [r15 + 0x28], 0
jne 0x1400021aa
mov r12, qword [rsp + 0xb8]
mov r13, qword [rsp + 0xa0]
cmp r12, 0x10
jb 0x140002193
mov rcx, r13
call fcn.1400cfe04
inc esi
add r14, 8
cmp esi, dword [rsp + 0x20]
jae 0x140002263
xor ebp, ebp
jmp 0x1400020a1
mov rdx, qword [r15 + 0x28]
mov qword [rsp + 0x60], 7
xor ebp, ebp
mov qword [rsp + 0x58], rbp
mov word [rsp + 0x48], bp
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rsp + 0x40]
call fcn.140004ab0
nop
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x68]
call fcn.1400ccec0
nop
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rax
mov rcx, qword [rsp + 0x38]
call fcn.140003df0
nop
cmp qword [rsp + 0x88], 0x10
jb 0x14000221b
mov rcx, qword [rsp + 0x70]
call fcn.1400cfe04
mov qword [rsp + 0x88], reloc.WS2_32.dll_ntohs
mov qword [rsp + 0x80], rbp
mov byte [rsp + 0x70], 0
cmp qword [rsp + 0x60], 8
jb 0x140002246
mov rcx, qword [rsp + 0x48]
call fcn.1400cfe04
mov dil, 1
cmp qword [rsp + 0xb8], 0x10
jb 0x140002268
mov rcx, qword [rsp + 0xa0]
call fcn.1400cfe04
jmp 0x140002268
xor dil, dil
xor ebp, ebp
mov rcx, qword [rsp + 0x28]
call qword [sym.imp.ADVAPI32.dll_CredFree]
mov qword [rsp + 0x28], rbp
cmp qword [rbx + 0x20], 0x10
jb 0x140002288
mov rcx, qword [rbx + 8]
call fcn.1400cfe04
mov qword [rbx + 0x20], reloc.WS2_32.dll_ntohs
mov qword [rbx + 0x18], rbp
mov byte [rbx + 8], 0
mov al, dil
mov rcx, qword [rsp + 0xc8]
xor rcx, rsp
call fcn.1400e2890
mov rbx, qword [rsp + 0x128]
add rsp, 0xd0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret