Function at 0x42dc98
Capabilities:
Acquire credentials from windows credential manager

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x66d387
mov eax, dword fs:[0]
push eax
mov eax, 0xcf58
call fcn.00612c90
mov eax, dword [0x6ffe74]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xcf60], ecx
mov eax, dword [ebp + 8]
xor ebx, ebx
xor esi, esi
mov dword [ebp - 0xcf48], ebx
xor edi, edi
mov dword [ebp - 0xcf54], esi
mov dword [ebp - 0xcf50], edi
mov dword [ebp - 0xcf4c], ebx
and dword [ebp - 4], ebx
and dword [ebp - 0xcf40], ebx
push 0x6c63d0
push eax
lea eax, [ebp - 0xcf40]
push eax
call fcn.00649a00
add esp, 0xc
test eax, eax
jne 0x42e04a
cmp dword [ebp - 0xcf40], eax
je 0x42e04a
push dword [ebp - 0xcf40]
lea eax, [ebp - 0x59ec]
push 0x2710
push eax
call fcn.006494dd
add esp, 0xc
test eax, eax
je 0x42ded2
lea eax, [ebp - 0x59ec]
push eax
call fcn.00643470
pop ecx
test eax, eax
je 0x42dd77
lea eax, [ebp - 0x59ec]
push eax
call fcn.00643470
dec eax
pop ecx
cmp eax, 0x2710
jae 0x42e26c
mov byte [ebp + eax - 0x59ec], 0
lea eax, [ebp - 0x59ec]
push eax
lea eax, [ebp - 0x32dc]
push 0x2710
push eax
call fcn.006494f3
add esp, 0xc
lea eax, [ebp - 0x32dc]
push eax
call fcn.00643470
pop ecx
inc eax
push eax
lea eax, [ebp - 0x32dc]
push eax
call fcn.0064ffd4
lea ecx, [ebp - 0x32dc]
call fcn.004046b4
lea eax, [ebp - 0x32dc]
push 0x7b
push eax
call fcn.006393d0
add esp, 0x10
test eax, eax
jne 0x42de9c
lea eax, [ebp - 0x32dc]
push 0x7d
push eax
call fcn.006393d0
pop ecx
pop ecx
test eax, eax
je 0x42df1d
lea eax, [ebp - 0x7e4]
push eax
call fcn.00643470
pop ecx
test eax, eax
je 0x42de9c
lea eax, [ebp - 0x3fc]
push eax
call fcn.00643470
pop ecx
test eax, eax
je 0x42de9c
lea eax, [ebp - 0x3fc]
push eax
lea eax, [ebp - 0x7e4]
push eax
push 0x6cb950
lea eax, [ebp - 0xbcc]
push 0x3e8
push eax
call fcn.00402e0a
add esp, 0x14
lea eax, [ebp - 0xbcc]
lea ecx, [ebp - 0xcf34]
push eax
call fcn.0044441f
mov byte [ebp - 4], 1
lea eax, [ebp - 0xcf34]
push eax
cmp edi, ebx
je 0x42de6f
mov ecx, edi
call fcn.004443f8
push 0x18
pop eax
add edi, eax
mov dword [ebp - 0xcf50], edi
jmp 0x42de8d
push edi
lea ecx, [ebp - 0xcf54]
call fcn.004460a2
mov ebx, dword [ebp - 0xcf4c]
mov edi, dword [ebp - 0xcf50]
mov dword [ebp - 0xcf48], ebx
lea ecx, [ebp - 0xcf34]
mov byte [ebp - 4], 0
call fcn.00444e51
mov byte [ebp - 0x3fc], 0
mov byte [ebp - 0x7e4], 0
push dword [ebp - 0xcf40]
lea eax, [ebp - 0x59ec]
push 0x2710
push eax
call fcn.006494dd
add esp, 0xc
test eax, eax
jne 0x42dd45
mov esi, dword [ebp - 0xcf54]
push dword [ebp - 0xcf40]
call fcn.00649273
pop ecx
mov eax, edi
sub eax, esi
push 0x18
cdq
pop ecx
idiv ecx
mov dword [ebp - 0xcf5c], eax
cmp eax, 1
jae 0x42dfee
test esi, esi
je 0x42e04a
mov ebx, esi
cmp ebx, edi
je 0x42e033
push ecx
pop esi
mov ecx, ebx
call fcn.00444e51
add ebx, esi
cmp ebx, edi
jne 0x42df0b
jmp 0x42e02a
lea eax, [ebp - 0x32dc]
push str.server:
push eax
call fcn.00639500
mov dword [ebp - 0xcf38], eax
pop ecx
pop ecx
test eax, eax
je 0x42df89
push str.server:
call fcn.00643470
pop ecx
mov esi, eax
lea eax, [ebp - 0x32dc]
add esi, dword [ebp - 0xcf38]
push 0x2c
push eax
call fcn.00639770
pop ecx
pop ecx
test eax, eax
je 0x42df64
mov byte [eax], 0
push esi
lea eax, [ebp - 0x7e4]
push 0x3e8
push eax
call fcn.006494f3
lea ecx, [ebp - 0x7e4]
add esp, 0xc
call fcn.004047e7
jmp 0x42deaa
lea eax, [ebp - 0x32dc]
push str.username:
push eax
call fcn.00639500
mov dword [ebp - 0xcf38], eax
pop ecx
pop ecx
test eax, eax
je 0x42deaa
push str.username:
call fcn.00643470
pop ecx
mov esi, eax
lea eax, [ebp - 0x32dc]
add esi, dword [ebp - 0xcf38]
push 0x2c
push eax
call fcn.00639770
pop ecx
pop ecx
test eax, eax
je 0x42dfd4
mov byte [eax], 0
push esi
lea eax, [ebp - 0x3fc]
push 0x3e8
push eax
call fcn.006494f3
lea ecx, [ebp - 0x3fc]
jmp 0x42df7c
lea eax, [ebp - 0xcf44]
push eax
lea eax, [ebp - 0xcf58]
push eax
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_CredEnumerateA]
test eax, eax
jne 0x42e068
call dword [sym.imp.KERNEL32.dll_GetLastError]
test esi, esi
je 0x42e04a
mov ebx, esi
cmp ebx, edi
je 0x42e030
push 0x18
pop esi
mov ecx, ebx
call fcn.00444e51
add ebx, esi
cmp ebx, edi
jne 0x42e01d
mov esi, dword [ebp - 0xcf54]
push 0x18
pop ecx
mov eax, dword [ebp - 0xcf48]
sub eax, esi
cdq
idiv ecx
imul eax, eax, 0x18
push eax
push esi
call fcn.00445c64
pop ecx
pop ecx
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.006122f0
leave
ret 4
xor ecx, ecx
mov dword [ebp - 0xcf3c], ecx
cmp dword [ebp - 0xcf58], ecx
jbe 0x42e21e
mov eax, dword [ebp - 0xcf44]
mov eax, dword [eax + ecx*4]
cmp dword [eax + 0x1c], 0
je 0x42e20b
cmp dword [eax + 0x18], 1
jb 0x42e20b
and dword [ebp - 0xcf38], 0
mov ebx, esi
mov esi, dword [ebp - 0xcf3c]
mov edi, dword [ebp - 0xcf5c]
cmp dword [ebx + 0x14], 0x10
mov ecx, ebx
jb 0x42e0b8
mov ecx, dword [ebx]
mov eax, dword [ebp - 0xcf44]
mov eax, dword [eax + esi*4]
push dword [eax + 8]
push ecx
call fcn.0064fd85
pop ecx
test eax, eax
mov eax, dword [ebp - 0xcf38]
pop ecx
je 0x42e0e6
push 0x18
inc eax
pop ecx
add ebx, ecx
mov dword [ebp - 0xcf38], eax
cmp eax, edi
jb 0x42e0ae
mov esi, dword [ebp - 0xcf54]
cmp eax, edi
mov edi, dword [ebp - 0xcf50]
mov ecx, dword [ebp - 0xcf3c]
je 0x42e20b
mov eax, dword [ebp - 0xcf44]
mov eax, dword [eax + ecx*4]
cmp dword [eax + 0x30], 0
mov ecx, dword [eax + 0x1c]
mov ebx, dword [eax + 0x18]
mov dword [ebp - 0xcf38], ecx
je 0x42e138
push dword [eax + 0x30]
lea eax, [ebp - 0xcf1c]
push 0x2710
push eax
call fcn.006494f3
mov ecx, dword [ebp - 0xcf38]
add esp, 0xc
cmp ebx, 2
jb 0x42e161
cmp byte [ecx + 1], 0
jne 0x42e161
xor edx, edx
shr ebx, 1
push edx
push edx
push 0x2710
lea eax, [ebp - 0x80fc]
push eax
push ebx
push ecx
push edx
push edx
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
jmp 0x42e177
push ebx
push ecx
lea eax, [ebp - 0x80fc]
push 0x2710
push eax
call fcn.00650b7d
add esp, 0x10
cmp ebx, 0x2710
jae 0x42e26c
lea eax, [ebp - 0x80fc]
mov byte [ebp + ebx - 0x80fc], 0
push eax
call fcn.00643470
mov eax, dword [ebp - 0xcf44]
pop ecx
mov ecx, dword [ebp - 0xcf3c]
mov eax, dword [eax + ecx*4]
push dword [eax + 8]
lea eax, [ebp - 0xa80c]
push 0x2710
push eax
call fcn.006494f3
add esp, 0xc
lea eax, [ebp - 0xa80c]
push 0x2f
push eax
call fcn.006393d0
pop ecx
pop ecx
test eax, eax
je 0x42e1d5
mov byte [eax], 0
mov ecx, dword [ebp - 0xcf60]
lea eax, [ebp - 0x80fc]
push 0xffffffffffffffff
mov ebx, 0x6c5bb9
push ebx
push eax
lea eax, [ebp - 0xcf1c]
push eax
lea eax, [ebp - 0xa80c]
push eax
push ebx
push 0x14b
push 4
call fcn.0043ee6b
mov ecx, dword [ebp - 0xcf3c]
inc ecx
mov dword [ebp - 0xcf3c], ecx
cmp ecx, dword [ebp - 0xcf58]
jb 0x42e07c
push dword [ebp - 0xcf44]
call dword [sym.imp.ADVAPI32.dll_CredFree]
test esi, esi
je 0x42e264
mov ebx, esi
cmp ebx, edi
je 0x42e24a
push 0x18
pop esi
mov ecx, ebx
call fcn.00444e51
add ebx, esi
cmp ebx, edi
jne 0x42e237
mov esi, dword [ebp - 0xcf54]
mov eax, dword [ebp - 0xcf48]
sub eax, esi
push 0x18
pop ecx
cdq
idiv ecx
imul ecx, eax, 0x18
push ecx
push esi
call fcn.00445c64
pop ecx
pop ecx
xor eax, eax
inc eax
jmp 0x42e04c
call fcn.00612782
int3