Function at 0x66981f90
Capabilities:
Acquire credentials from windows credential manager
Hide graphical window
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push edi
mov edi, eax
push esi
push ebx
mov ebx, edx
sub esp, 0x44c
mov dword [ebp - 0x430], eax
mov dword [esp + 4], 0x65
mov dword [esp], eax
call sub.user32.dll_GetDlgItem
sub esp, 8
mov dword [ebp - 0x434], eax
mov dword [esp + 4], 0x66
mov dword [esp], edi
call sub.user32.dll_GetDlgItem
sub esp, 8
mov dword [ebp - 0x42c], eax
mov dword [esp + 8], ebx
mov dword [esp + 4], 8
mov dword [esp], edi
call sub.user32.dll_SetWindowLongW
mov esi, dword [ebx + 0xc]
sub esp, 0xc
test esi, esi
je 0x66982028
mov dword [esp + 4], 0xc8
mov dword [esp], edi
call sub.user32.dll_GetDlgItem
sub esp, 8
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0
mov dword [esp + 4], 0x172
mov dword [esp], eax
call sub.user32.dll_SendMessageW
sub esp, 0x10
mov eax, dword [ebx + 4]
test eax, eax
je 0x669823b0
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x430]
mov dword [esp + 4], 0x67
mov dword [esp], eax
call sub.user32.dll_SetDlgItemTextW
lea eax, [ebp - 0x418]
mov dword [ebp - 0x43c], eax
sub esp, 0xc
mov eax, dword [ebx + 0x10]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x434]
mov dword [esp], eax
call sub.user32.dll_SetWindowTextW
mov eax, dword [ebx + 0x18]
sub esp, 8
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x42c]
mov dword [esp], eax
call sub.user32.dll_SetWindowTextW
mov eax, dword [ebp - 0x43c]
sub esp, 8
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x428]
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], 0
call sub.advapi32.dll_CredEnumerateW
sub esp, 0x10
test eax, eax
je 0x669821e9
mov esi, dword [ebp - 0x428]
mov eax, dword [ebp - 0x418]
xor edi, edi
test esi, esi
je 0x669821de
mov dword [ebp - 0x440], ebx
jmp 0x669820ff
cmp dword [ebp - 0x438], 1
je 0x66982130
mov dword [ecx + 0x30], 0
add edi, 1
cmp edi, dword [ebp - 0x428]
jae 0x669821d8
lea esi, [edi*4]
lea edx, [eax + esi]
mov ecx, dword [edx]
mov ebx, dword [ecx + 0x30]
test ebx, ebx
je 0x669820f0
mov ebx, dword [ecx + 4]
mov dword [ebp - 0x438], ebx
mov ebx, dword [ebp - 0x440]
test byte [ebx + 0x26], 4
jne 0x669820e0
cmp dword [ebp - 0x438], 1
je 0x669820e9
xor ebx, ebx
test edi, edi
je 0x66982172
lea esi, [esi]
lea esi, [esi]
mov ecx, dword [eax + ebx*4]
mov ecx, dword [ecx + 0x30]
test ecx, ecx
je 0x6698216b
mov dword [esp + 4], ecx
mov eax, dword [edx]
mov eax, dword [eax + 0x30]
mov dword [esp], eax
call sub.kernel32.dll_lstrcmpW
sub esp, 8
test eax, eax
mov eax, dword [ebp - 0x418]
je 0x669820f0
lea edx, [eax + esi]
add ebx, 1
cmp ebx, edi
jne 0x66982140
mov dword [ebp - 0x218], 1
add edi, 1
mov dword [ebp - 0x214], 0xffffffff
mov eax, dword [edx]
mov eax, dword [eax + 0x30]
mov dword [esp + 8], 0
mov dword [esp + 4], 0x40b
mov dword [ebp - 0x210], eax
lea eax, [ebp - 0x218]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x434]
mov dword [esp], eax
call sub.user32.dll_SendMessageW
mov eax, dword [ebp - 0x418]
sub esp, 0x10
cmp edi, dword [ebp - 0x428]
jb 0x669820ff
lea esi, [esi]
mov ebx, dword [ebp - 0x440]
mov dword [esp], eax
call sub.advapi32.dll_CredFree
sub esp, 4
mov eax, dword [ebx + 0x10]
cmp word [eax], 0
jne 0x669822a0
mov eax, dword [ebp - 0x434]
mov dword [esp], eax
call sub.user32.dll_SetFocus
mov eax, dword [ebx + 8]
sub esp, 4
test eax, eax
je 0x669822ca
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x430]
mov dword [esp], eax
call sub.user32.dll_SetWindowTextW
mov eax, dword [ebx + 0x24]
sub esp, 8
test ah, 0x10
jne 0x66982338
and eax, 0x42
cmp eax, 2
je 0x66982338
mov edx, dword [ebx + 0x20]
test edx, edx
jne 0x66982490
mov eax, dword [ebp - 0x42c]
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 1
mov dword [esp + 4], 0x66981800
mov dword [esp], eax
call sub.comctl32.dll_SetWindowSubclass
sub esp, 0x10
test byte [ebx + 0x24], 1
je 0x66982370
mov eax, dword [ebx + 0x10]
cmp word [eax], 0
je 0x6698228d
mov eax, dword [ebx + 0x2c]
test eax, eax
je 0x66982428
lea esp, [ebp - 0xc]
xor eax, eax
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [ebp - 0x42c]
mov dword [ebx + 0x2c], 1
mov dword [esp], eax
call sub.user32.dll_SetFocus
mov eax, dword [ebx + 8]
mov dword [ebx + 0x2c], 0
sub esp, 4
test eax, eax
jne 0x66982212
mov edi, dword [ebp - 0x43c]
mov eax, dword [section..bss]
mov dword [esp + 0xc], 0x100
lea esi, [ebp - 0x218]
mov dword [esp + 4], 0x12c
mov dword [esp + 8], edi
mov dword [esp], eax
call sub.user32.dll_LoadStringW
mov eax, dword [ebx]
sub esp, 0x10
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
mov dword [esp + 4], 0x100
mov dword [esp], esi
call fcn.66981f40
mov eax, dword [ebp - 0x430]
mov dword [esp + 4], esi
mov dword [esp], eax
call sub.user32.dll_SetWindowTextW
mov eax, dword [ebx + 0x24]
sub esp, 8
test ah, 0x10
je 0x66982233
lea esi, [esi]
mov eax, dword [ebp - 0x430]
mov dword [esp + 4], 0x68
mov dword [esp], eax
call sub.user32.dll_GetDlgItem
sub esp, 8
mov dword [esp + 4], 0
mov dword [esp], eax
call sub.user32.dll_ShowWindow
sub esp, 8
jmp 0x6698224a
call sub.user32.dll_GetFocus
cmp dword [ebp - 0x42c], eax
jne 0x6698228d
mov dword [esp], 0x14
call sub.user32.dll_GetKeyState
sub esp, 4
test al, 1
je 0x6698228d
mov eax, dword [ebp - 0x430]
mov edx, ebx
call fcn.66981620
jmp 0x6698228d
mov eax, dword [section..bss]
lea edi, [ebp - 0x418]
mov dword [esp + 0xc], 0x100
lea esi, [ebp - 0x218]
mov dword [esp + 8], edi
mov dword [esp + 4], 0x12d
mov dword [esp], eax
mov dword [ebp - 0x43c], edi
call sub.user32.dll_LoadStringW
mov eax, dword [ebx]
sub esp, 0x10
mov dword [esp + 0xc], eax
mov dword [esp + 8], edi
mov dword [esp + 4], 0x100
mov dword [esp], esi
call fcn.66981f40
mov eax, dword [ebp - 0x430]
mov dword [esp + 8], esi
mov dword [esp + 4], 0x67
mov dword [esp], eax
call sub.user32.dll_SetDlgItemTextW
sub esp, 0xc
jmp 0x6698205c
mov eax, dword [section..bss]
lea esi, [ebp - 0x218]
mov dword [esp + 0xc], 0x100
mov dword [esp + 8], esi
mov dword [esp + 4], 0x12e
mov dword [esp], eax
call sub.user32.dll_LoadStringW
sub esp, 0x10
test eax, eax
jne 0x669824c0
test byte [0x66986060], 2
je 0x6698228d
mov dword [esp + 0xc], str.failed_to_load_IDS_INCORRECTPASSWORDTITLE_n
mov dword [esp + 8], str.CredDialogShowIncorrectPasswordBalloon
mov dword [esp + 4], 0x66986060
mov dword [esp], 1
call fcn.66981330
jmp 0x6698228d
mov eax, dword [ebp - 0x430]
mov dword [esp + 8], 1
mov dword [esp + 4], 0x68
mov dword [esp], eax
call sub.user32.dll_CheckDlgButton
sub esp, 0xc
jmp 0x6698224a
mov eax, dword [ebp - 0x430]
lea edx, [ebx + 0x28]
call fcn.669813c0
lea edx, [ebp - 0x414]
xor eax, eax
mov ecx, 0xb
mov edi, edx
rep stosd dword es:[edi], eax
mov dword [esp + 0xc], esi
mov edi, dword [ebp - 0x430]
mov dword [esp + 8], 3
mov dword [esp + 4], 0x421
mov eax, dword [ebx + 0x28]
mov dword [ebp - 0x418], 0x30
mov dword [esp], eax
mov dword [ebp - 0x410], edi
mov dword [ebp - 0x40c], 1
call sub.user32.dll_SendMessageW
sub esp, 0x10
mov dword [esp + 4], 0x66
mov dword [esp], edi
call sub.user32.dll_GetDlgItem
lea ecx, [ebp - 0x428]
sub esp, 8
mov dword [esp + 4], ecx
mov dword [esp], eax
call sub.user32.dll_GetWindowRect
mov eax, dword [ebp - 0x41c]
add eax, dword [ebp - 0x424]
mov ecx, dword [ebp - 0x420]
mov edx, eax
shr eax, 0x1f
sub esp, 8
add eax, edx
mov dword [esp + 8], 0
lea edx, [ecx - 0xc]
sar eax, 1
mov dword [esp + 4], 0x412
movzx edx, dx
shl eax, 0x10
or eax, edx
mov dword [esp + 0xc], eax
mov eax, dword [ebx + 0x28]
mov dword [esp], eax
call sub.user32.dll_SendMessageW
mov eax, dword [ebp - 0x43c]
sub esp, 0x10
mov dword [esp + 0xc], eax
mov dword [esp + 8], 1
mov dword [esp + 4], 0x411
mov eax, dword [ebx + 0x28]
mov dword [esp], eax
call sub.user32.dll_SendMessageW
mov dword [ebx + 0x2c], 1
sub esp, 0x10
jmp 0x6698228d