Function at 0x180059c00
Capabilities:
Acquire credentials from windows credential manager

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0xc8]
sub rsp, 0x1a0
movaps xmmword [rax - 0x38], xmm6
mov rax, qword [0x18008a300]
xor rax, rsp
mov qword [rbp + 0x80], rax
mov eax, r8d
mov dword [rsp + 0x68], eax
mov r9, rdx
mov qword [rbp - 0x48], rdx
mov r8, rcx
mov qword [rsp + 0x48], rcx
mov ecx, eax
mov dword [rsp + 0x3c], eax
imul edx, eax, 0x276
mov dword [rsp + 0x40], edx
cmp eax, edx
ja 0x180059ee2
xor r14d, r14d
lea r15d, [r14 + 0x62]
movabs rdi, 0x7ffffffffffffffe
movzx r13d, byte [rsp + 0x31]
mov r12d, dword [rsp + 0x68]
movzx esi, byte [rsp + 0x3a]
mov r10d, 0x5f
lea r11, [0x180000000]
lea ebx, [r10 + 6]
cmp ecx, 0xa7ae
ja 0x180059deb
je 0x180059de1
cmp ecx, 0x1c63
ja 0x180059d8e
je 0x18005a690
mov eax, ecx
sub eax, 0x52
je 0x18005a665
sub eax, 0x57
je 0x180059d0d
cmp eax, 0x55
jne 0x18005a63b
mov dword [rbp + 0x50], 0x6d
lea r8d, [r10 - 0x5b]
lea rdx, [0x18008026a]
lea rcx, [rbp + 0x50]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncat]
mov eax, dword [0x18008034a]
mov dword [rbp + 0x5a], eax
movzx eax, word [0x18008034e]
mov word [rbp + 0x5e], ax
jmp 0x18005a633
mov rdx, qword [0x18008af78]
test rdx, rdx
je 0x18005a690
mov rax, qword [0x18008a548]
mov rcx, qword [rax + 0x38]
test rcx, rcx
je 0x18005a690
mov ecx, dword [rcx + 0x10]
add ecx, dword [0x18008af74]
cmp dword [r8], ecx
jne 0x18005a690
mov r8d, r14d
cmp dword [0x18008af6c], 0
jle 0x18005a633
mov r9d, dword [r9]
add rdx, 0x88
nop dword [rax]
mov ecx, dword [rdx]
cmp r9d, ecx
jl 0x180059d76
add ecx, dword [0x18008af68]
cmp r9d, ecx
jl 0x18005a65c
inc r8d
add rdx, 0x8c
cmp r8d, dword [0x18008af6c]
jl 0x180059d60
jmp 0x18005a633
cmp ecx, 0x2aaa
je 0x180059dcb
cmp ecx, 0x5456
je 0x180059dbb
cmp ecx, 0x7e02
jne 0x18005a63b
mov dword [rbp + 0x44], 0x320033
mov word [rbp + 0x48], r14w
jmp 0x18005a63b
mov word [rbp + 0x3e], bx
mov dword [rbp + 0x40], 0x790061
jmp 0x18005a63b
mov word [rbp + 0x60], r14w
mov dword [rbp + 0x38], 0x69006c
mov word [rbp + 0x3c], r15w
jmp 0x18005a63b
mov word [rbp + 0x68], r14w
jmp 0x18005a63b
cmp ecx, 0x14e5e
ja 0x180059ec2
je 0x180059e9d
cmp ecx, 0xd15a
je 0x180059e7e
cmp ecx, 0xfb06
je 0x180059e3b
cmp ecx, 0x124b2
jne 0x18005a63b
movups xmm0, xmmword [rbp - 0x40]
movups xmmword [rbp + 0x20], xmm0
movsd xmm1, qword [rbp - 0x30]
movsd qword [rbp + 0x30], xmm1
mov sil, 1
lea rax, [rbp + 0x50]
mov qword [rbp + 0x20], rax
jmp 0x18005a63b
mov dword [rbp + 0x6a], 0x73
lea rcx, [rbp + 0x68]
sub rcx, 2
nop word [rax + rax]
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x180059e50
mov eax, dword [0x180079d8c]
mov dword [rcx], eax
mov r8d, 6
lea rdx, str.eay32
lea rcx, [rbp + 0x6e]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
jmp 0x18005a633
lea rcx, [rbp + 0x68]
sub rcx, 2
lea rcx, [rcx + 2]
cmp word [rcx], 0
jne 0x180059e86
mov eax, dword [0x18007c02c]
mov dword [rcx], eax
jmp 0x18005a637
mov qword [rbp - 0x80], r14
lea rax, [rbp + 0x38]
mov qword [rbp + 0x28], rax
lea r9, [rbp - 0x80]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call sub.RPCRT4.dll_MesEncodeIncrementalHandleCreate
mov dword [rsp + 0x5c], eax
jmp 0x18005a633
cmp ecx, 0x1780a
je 0x18005a01c
cmp ecx, 0x1a1b6
je 0x180059f1b
cmp ecx, 0x1cb62
jne 0x18005a63b
mov eax, dword [rsp + 0x64]
mov rcx, qword [rbp + 0x80]
xor rcx, rsp
call fcn.18006b180
lea r11, [rsp + 0x1a0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
test sil, sil
je 0x18005a012
mov edi, 0xfb
movzx r13d, byte [rsp + 0x38]
nop
mov eax, edi
sub eax, 0xfb
je 0x180059fe4
sub eax, 1
je 0x180059fda
sub eax, 1
je 0x180059fa0
cmp eax, 1
jne 0x180059fe7
test r13b, r13b
je 0x180059f90
mov qword [rsp + 0x50], r14
lea r8, [rsp + 0x50]
xor edx, edx
xor ecx, ecx
call sub.RPCRT4.dll_MesDecodeIncrementalHandleCreate
mov rcx, qword [rbp - 0x70]
test rcx, rcx
je 0x180059f7a
call sub.RPCRT4.dll_MesHandleFree
mov rcx, qword [rsp + 0x50]
test rcx, rcx
je 0x180059f90
call sub.RPCRT4.dll_MesHandleFree
nop dword [rax]
mov rcx, qword [rbp - 0x78]
test rcx, rcx
je 0x180059fe7
call sub.RPCRT4.dll_MesHandleFree
jmp 0x180059fe7
lea r8, [rbp - 0x78]
xor edx, edx
xor ecx, ecx
call sub.RPCRT4.dll_MesDecodeIncrementalHandleCreate
mov dword [rsp + 0x5c], eax
lea r9, [rbp - 0x70]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call sub.RPCRT4.dll_MesEncodeIncrementalHandleCreate
mov ebx, eax
mov rcx, qword [rbp - 0x80]
test rcx, rcx
je 0x180059fd1
call sub.RPCRT4.dll_MesHandleFree
test ebx, ebx
je 0x180059fe7
xor r13b, r13b
jmp 0x180059fe7
mov qword [rbp - 0x78], r14
mov qword [rbp - 0x70], r14
jmp 0x180059fe7
mov r13b, 1
inc edi
cmp edi, 0xff
jb 0x180059f30
mov byte [rsp + 0x38], r13b
movzx r13d, byte [rsp + 0x31]
mov ecx, dword [rsp + 0x3c]
mov edx, dword [rsp + 0x40]
movabs rdi, 0x7ffffffffffffffe
mov byte [rsp + 0x64], 1
jmp 0x18005a63b
lea rax, [rbp + 0x68]
mov qword [rbp + 0x30], rax
mov ecx, r14d
movzx eax, sil
cmp dword [rsp + 0x5c], 0
cmove ecx, eax
mov byte [rsp + 0x3a], cl
mov dword [rsp + 0x60], r14d
lea rbx, [rbp + 0x20]
mov qword [rsp + 0x50], rbx
nop word [rax + rax]
mov qword [rbp - 0x30], r14
mov qword [rbp - 0x28], 7
mov word [rbp - 0x40], r14w
mov dword [rsp + 0x34], 0x58
mov r15d, 5
mov dword [rsp + 0x58], r15d
mov eax, dword [rsp + 0x34]
nop dword [rax + rax]
cmp r15d, 5
ja case.default.0x18005a098
mov eax, r15d
mov ecx, dword [r11 + rax*4 + 0x5a700]
add rcx, r11
jmp rcx
lea rcx, [rbp - 0x40]
cmp qword [rbp - 0x28], 8
cmovae rcx, qword [rbp - 0x40]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov qword [rbp - 0x58], rax
jmp 0x18005a58f
lea r9, [rsp + 0x78]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call sub.RPCRT4.dll_MesEncodeIncrementalHandleCreate
mov ebx, eax
mov r8d, 3
lea rdx, [0x18007a9a0]
lea rcx, [rbp - 0x40]
call fcn.18001ea70
mov eax, dword [rsp + 0x34]
mov r8, qword [rsp + 0x48]
test ebx, ebx
mov rbx, qword [rsp + 0x50]
je case.default.0x18005a098
mov byte [rsp + 0x39], 0
jmp case.default.0x18005a098
cmp byte [rsp + 0x39], 0
je 0x18005a594
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rsp + 0x78]
call sub.RPCRT4.dll_MesIncrementalHandleReset
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x18005a58f
call sub.RPCRT4.dll_MesHandleFree
jmp 0x18005a58f
mov rdi, qword [r8 + 0x10]
mov rbx, r8
cmp qword [r8 + 0x18], 8
jb 0x18005a155
mov rbx, qword [r8]
cmp rdi, 8
jae 0x18005a16e
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x20], xmm0
mov r14d, 7
mov r15, qword [rbp - 0x20]
jmp 0x18005a1ad
mov r14, rdi
or r14, 7
movabs rax, 0x7ffffffffffffffe
cmp r14, rax
cmova r14, rax
lea rdx, [r14 + 1]
lea rcx, [rbp - 0x20]
call fcn.18001e970
mov r15, rax
mov qword [rbp - 0x20], rax
lea r8, [rdi*2 + 2]
mov rdx, rbx
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp - 8], r14
mov qword [rbp - 0x10], rdi
lea rsi, [rbp - 0x20]
cmp r14, 8
cmovae rsi, r15
cmp rdi, 8
jae 0x18005a1d4
movups xmm6, xmmword [rsi]
mov qword [rbp + 0x18], 7
jmp 0x18005a218
mov rbx, rdi
or rbx, 7
movabs rax, 0x7ffffffffffffffe
cmp rbx, rax
cmova rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rbp]
call fcn.18001e970
mov qword [rbp], rax
lea r8, [rdi*2 + 2]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
mov qword [rbp + 0x18], rbx
movups xmm6, xmmword [rbp]
mov qword [rbp + 0x10], rdi
mov rax, qword [rbp - 0x28]
cmp rax, 8
jb 0x18005a25c
lea rdx, [rax*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18005a257
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005a698
call fcn.18006a9d8
movups xmmword [rbp - 0x40], xmm6
movups xmm0, xmmword [rbp + 0x10]
movups xmmword [rbp - 0x30], xmm0
cmp r14, 8
jb 0x18005a2a3
lea rdx, [r14*2 + 2]
mov rax, r15
cmp rdx, 0x1000
jb 0x18005a29b
add rdx, 0x27
mov r15, qword [r15 - 8]
sub rax, r15
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005a6eb
mov rcx, r15
call fcn.18006a9d8
mov byte [rsp + 0x39], 1
jmp 0x18005a578
cmp qword [rbp - 0x58], 0
jne 0x18005a594
mov edi, 0xa
nop dword [rax]
cmp edi, 0xa
ja case.default.0x18005a2d6
mov eax, edi
mov ecx, dword [r11 + rax*4 + 0x5a718]
add rcx, r11
jmp rcx
mov eax, 0x6e
mov word [rbp - 0xa], ax
jmp case.default.0x18005a2d6
mov word [rbp - 8], r10w
jmp case.default.0x18005a2d6
mov r13b, 1
mov byte [rsp + 0x31], r13b
mov qword [rbp - 0x60], r14
mov dword [rsp + 0x70], r14d
lea r9, [rbp - 0x60]
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call sub.RPCRT4.dll_MesEncodeIncrementalHandleCreate
mov r12d, eax
mov r10d, 0x5f
lea r11, [0x180000000]
jmp case.default.0x18005a2d6
mov eax, 0x64
mov word [rbp - 0x14], ax
mov dword [rbp - 0x12], 0x33005f
mov dword [rbp - 0xe], 0x780032
jmp case.default.0x18005a2d6
mov dword [rbp - 6], 0x380075
mov word [rbp - 2], r14w
mov byte [rsp + 0x30], 1
jmp case.default.0x18005a2d6
mov word [rbp - 0x1a], r10w
mov dword [rbp - 0x18], 0x610073
jmp case.default.0x18005a2d6
test r13b, r13b
je 0x18005a3b4
mov ebx, 0xc1
mov eax, ebx
sub eax, 0xc1
je 0x18005a387
cmp eax, 0x2c
jne 0x18005a3a9
mov rcx, qword [rbp - 0x68]
jmp 0x18005a39f
mov qword [rbp - 0x68], r14
lea r8, [rbp - 0x68]
xor edx, edx
xor ecx, ecx
call sub.RPCRT4.dll_MesDecodeIncrementalHandleCreate
mov r12d, eax
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x18005a3a9
call sub.RPCRT4.dll_MesHandleFree
add ebx, 0x2c
cmp ebx, 0x119
jb 0x18005a373
mov ecx, r14d
movzx eax, byte [rsp + 0x30]
cmp dword [rsp + 0x74], 0
cmovne ecx, eax
mov byte [rsp + 0x30], cl
cmp cl, 0
je 0x18005a3d7
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.ADVAPI32.dll_CredFree]
mov r10d, 0x5f
lea r11, [0x180000000]
jmp case.default.0x18005a2d6
mov dword [rsp + 0x6c], r14d
lea r9, [rbp - 0x50]
lea r8, [rsp + 0x6c]
mov edx, dword [rsp + 0x70]
lea rcx, [rbp - 0x20]
call qword [sym.imp.ADVAPI32.dll_CredEnumerateW]
mov dword [rsp + 0x74], eax
mov ecx, r14d
movzx eax, r13b
test r12d, r12d
cmove ecx, eax
movzx r13d, cl
mov byte [rsp + 0x31], cl
mov r10d, 0x5f
lea r11, [0x180000000]
jmp case.default.0x18005a2d6
mov byte [rsp + 0x64], 0
jmp case.default.0x18005a2d6
mov eax, 0x6f
mov word [rbp - 0x20], ax
mov dword [rbp - 0x1e], 0x630072
dec edi
lea eax, [rdi + 0xa1]
cmp eax, 0xa0
ja 0x18005a2c0
jmp 0x18005a580
mov rdx, qword [rbx]
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], 0
jne 0x18005a463
lea rcx, [rbp - 0x40]
call fcn.18001ea70
mov qword [rsp + 0x78], r14
mov rsi, qword [rbp - 0x30]
mov r14, qword [rbp - 0x28]
cmp rsi, r14
jae 0x18005a4ad
lea rax, [rsi + 1]
mov qword [rbp - 0x30], rax
lea rax, [rbp - 0x40]
cmp r14, 8
cmovae rax, qword [rbp - 0x40]
mov dword [rax + rsi*2], 0x2e
xor r14d, r14d
jmp 0x18005a58f
mov rax, rdi
sub rax, rsi
cmp rax, 1
jb 0x18005a6f9
lea r15, [rsi + 1]
mov rbx, r15
or rbx, 7
cmp rbx, rdi
jbe 0x18005a4d2
mov rbx, rdi
jmp 0x18005a4f3
mov rcx, r14
shr rcx, 1
mov rax, rdi
sub rax, rcx
cmp r14, rax
jbe 0x18005a4e8
mov rbx, rdi
jmp 0x18005a4f3
lea rax, [r14 + rcx]
cmp rbx, rax
cmovb rbx, rax
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x40]
call fcn.18001e970
mov rdi, rax
mov qword [rbp - 0x30], r15
mov qword [rbp - 0x28], rbx
add rsi, rsi
mov r8, rsi
mov rcx, rax
cmp r14, 8
jb 0x18005a564
mov rbx, qword [rbp - 0x40]
mov rdx, rbx
call sub.VCRUNTIME140.dll_memcpy
mov dword [rsi + rdi], 0x2e
lea rdx, [r14*2 + 2]
cmp rdx, 0x1000
jb 0x18005a55a
add rdx, 0x27
mov rcx, qword [rbx - 8]
sub rbx, rcx
lea rax, [rbx - 8]
cmp rax, 0x1f
ja 0x18005a6eb
mov rbx, rcx
mov rcx, rbx
call fcn.18006a9d8
jmp 0x18005a574
lea rdx, [rbp - 0x40]
call sub.VCRUNTIME140.dll_memcpy
mov dword [rsi + rdi], 0x2e
mov qword [rbp - 0x40], rdi
mov r15d, dword [rsp + 0x58]
xor r14d, r14d
mov rbx, qword [rsp + 0x50]
movabs rdi, 0x7ffffffffffffffe
mov r8, qword [rsp + 0x48]
mov eax, dword [rsp + 0x34]
dec eax
mov dword [rsp + 0x34], eax
dec r15d
mov dword [rsp + 0x58], r15d
cmp eax, 0x52
mov r10d, 0x5f
lea r11, [0x180000000]
ja 0x18005a080
mov rax, qword [rbp - 0x28]
cmp rax, 8
jb 0x18005a5fc
lea rdx, [rax*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18005a5f7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18005a6f2
call fcn.18006a9d8
mov eax, dword [rsp + 0x60]
inc eax
mov dword [rsp + 0x60], eax
add rbx, 8
mov qword [rsp + 0x50], rbx
cmp eax, 3
mov r8, qword [rsp + 0x48]
mov r10d, 0x5f
lea r11, [0x180000000]
jb 0x18005a050
movzx esi, byte [rsp + 0x3a]
lea r15d, [r10 + 3]
mov edx, dword [rsp + 0x40]
mov ecx, dword [rsp + 0x3c]
imul eax, dword [rsp + 0x68], 0x2a
add ecx, eax
mov dword [rsp + 0x3c], ecx
cmp ecx, edx
ja 0x180059ee2
mov r8, qword [rsp + 0x48]
mov r9, qword [rbp - 0x48]
jmp 0x180059c8a
lea eax, [r8 + 1]
jmp 0x180059ee6
movss xmm1, dword [r9]
movaps xmm0, xmm1
andps xmm0, xmmword [0x180082c90]
comiss xmm0, dword [0x1800821d0]
jbe 0x18005a687
mov eax, 0xffffffff
jmp 0x180059ee6
cvtps2pd xmm0, xmm1
movsd qword [r8 + 0x50], xmm0
mov eax, r14d
jmp 0x180059ee6
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
mov rdx, qword [rbp - 0x28]
cmp rdx, 8
jb 0x180059ee2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18005a6e1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x18005a6e1
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.18006a9d8
jmp 0x180059ee2
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.180019af0
int3