Function at 0x1132420
Capabilities:
Acquire credentials from windows credential manager

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1147baa
mov eax, dword fs:[0]
push eax
sub esp, 0x158
mov eax, dword [0x115f604]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x158], ecx
xor ebx, ebx
push ebx
push 0x106d124
lea eax, [ebp - 0x120]
push eax
push 0x106d0b8
lea ecx, [ebp - 0x11c]
push 2
push ecx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x120], ebx
call fcn.01075110
add esp, 0x18
mov dword [ebp - 0x138], ebx
mov dword [ebp - 0x134], ebx
mov dword [ebp - 0x138], ebx
mov dword [ebp - 0x13c], 0x1015ad8
mov edx, dword [0x1161d94]
mov eax, dword [edx + 0xc]
mov ecx, 0x1161d94
mov byte [ebp - 4], 2
mov dword [ebp - 0x12c], ebx
call eax
add eax, 0x10
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x154], ebx
mov dword [ebp - 0x150], ebx
mov dword [ebp - 0x14c], ebx
mov dword [ebp - 0x148], ebx
mov dword [ebp - 0x144], 0xa
mov dword [ebp - 0x140], ebx
lea ecx, [ebp + 8]
mov byte [ebp - 4], 4
call fcn.010b6420
push eax
lea ecx, [ebp + 8]
call fcn.0109c210
mov ecx, dword [ebp + 8]
mov eax, dword [ecx - 0xc]
cmp eax, ebx
je 0x1132564
push 0x100f6f8
push ecx
call fcn.01128fcd
add esp, 8
test eax, eax
je 0x1132561
mov ecx, dword [ebp + 8]
push 0x10143b4
push ecx
call fcn.01128fcd
add esp, 8
test eax, eax
je 0x1132561
mov eax, dword [ebp + 8]
cmp dword [eax - 0xc], ebx
jl 0x1132552
push 0x106d098
push eax
call fcn.0112905e
add esp, 8
cmp eax, ebx
je 0x1132552
mov ecx, dword [ebp + 8]
sub eax, ecx
sar eax, 1
je 0x1132564
mov dword [ebp - 0x120], 0x80070057
jmp 0x113293d
mov ecx, dword [ebp + 8]
mov eax, dword [ecx - 0xc]
cmp eax, ebx
jl 0x11325f3
push 0x106d098
push ecx
call fcn.0112905e
add esp, 8
cmp eax, ebx
je 0x11325f3
sub eax, dword [ebp + 8]
sar eax, 1
jne 0x11325f3
push 0x1e
push 0x1033840
lea ecx, [ebp - 0x124]
call fcn.01076ac0
push 0x106d098
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push eax
lea edx, [ebp - 0x128]
push edx
lea ecx, [ebp + 8]
call fcn.010bdde0
mov eax, dword [eax]
mov ecx, dword [eax - 0xc]
push ecx
push eax
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 5
call fcn.0109dbe0
mov eax, dword [ebp - 0x128]
add eax, 0xfffffff0
mov byte [ebp - 4], 4
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1132617
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
jmp 0x1132617
push 0x11
push 0x1033950
lea ecx, [ebp - 0x124]
call fcn.01076ac0
push 1
push 0x100f8d0
lea ecx, [ebp - 0x124]
call fcn.0109dbe0
mov eax, dword [ebp - 0x124]
lea ecx, [ebp - 0x134]
push ecx
lea edx, [ebp - 0x12c]
push edx
push ebx
push eax
call dword [sym.imp.ADVAPI32.dll_CredEnumerateW]
test eax, eax
jne 0x11326c4
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
call esi
cmp eax, 0x490
je 0x1132699
call esi
cmp eax, 5
je 0x1132699
call esi
test eax, eax
jg 0x113265b
call esi
jmp 0x1132667
call esi
and eax, 0xffff
or eax, 0x80070000
mov dword [ebp - 0x120], eax
call fcn.01127f00
test al, al
je 0x113293d
mov ecx, dword [ebp - 0x120]
push ecx
push 0x1016714
push 0x106d028
push ebx
call fcn.01128b70
add esp, 0x10
jmp 0x113293d
mov dword [ebp - 0x120], ebx
call fcn.01127f00
test al, al
je 0x113293d
push 0x10167d0
push 0x106cfb8
push ebx
call fcn.01128b70
add esp, 0xc
jmp 0x113293d
mov esi, dword [ebp - 0x134]
cmp esi, ebx
je 0x113293d
cmp dword [ebp - 0x12c], ebx
je 0x113293d
mov edx, dword [ebp - 0x13c]
mov eax, dword [edx + 4]
lea ecx, [ebp - 0x13c]
call eax
xor edi, edi
cmp dword [ebp - 0x12c], ebx
mov dword [ebp - 0x138], esi
mov dword [ebp - 0x128], edi
jbe 0x1132868
lea esp, [esp]
mov ecx, dword [ebp - 0x134]
mov esi, dword [ecx + edi*4]
cmp esi, ebx
jne 0x1132743
call fcn.01127f00
test al, al
je 0x1132853
push edi
push 0x1016628
push 0x106cf48
push ebx
call fcn.01128b70
add esp, 0x10
jmp 0x1132853
push 0xffffffffffffffff
lea ebx, [esi + 0x10]
push ebx
lea ecx, [ebp - 0x160]
call fcn.01131ae0
call fcn.01127f00
test al, al
je 0x11327b9
push 0x106cf18
lea edx, [ebp - 0x130]
push edx
lea ecx, [ebp - 0x160]
call fcn.010a99f0
mov eax, dword [eax]
mov ecx, dword [esi + 0x30]
push eax
push ecx
push 0x106cee0
push 0x106ce70
push 1
mov byte [ebp - 4], 6
call fcn.01128b70
mov eax, dword [ebp - 0x130]
add eax, 0xfffffff0
add esp, 0x14
mov byte [ebp - 4], 4
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x11327b9
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [ebp + 8]
cmp dword [eax - 0xc], 0
je 0x113281f
push 0x100f6f8
push eax
call fcn.01128fcd
add esp, 8
test eax, eax
jne 0x11327de
cmp dword [esi + 0x1c], eax
je 0x11327de
cmp dword [esi + 0x18], eax
jne 0x113281f
mov ecx, dword [ebp + 8]
push 0x10143b4
push ecx
call fcn.01128fcd
add esp, 8
test eax, eax
jne 0x11327fd
cmp dword [esi + 0x1c], eax
jne 0x11327fd
cmp dword [esi + 0x18], eax
je 0x113281f
mov eax, dword [ebp + 8]
cmp dword [eax - 0xc], 0
jl 0x1132851
push 0x106d098
push eax
call fcn.0112905e
add esp, 8
test eax, eax
je 0x1132851
sub eax, dword [ebp + 8]
sar eax, 1
jne 0x1132851
mov edi, dword [esi + 0x30]
test edi, edi
je 0x113284b
mov edx, dword [esi + 0x14]
push 1
push 0
push 0
push edx
call fcn.01090bb0
mov ecx, dword [ebx]
xor esi, esi
add eax, ecx
push edi
adc edx, esi
push edx
push eax
lea ecx, [ebp - 0x154]
call fcn.01132290
mov edi, dword [ebp - 0x128]
xor ebx, ebx
add edi, 1
cmp edi, dword [ebp - 0x12c]
mov dword [ebp - 0x128], edi
jb 0x1132710
mov ecx, dword [ebp - 0x154]
cmp ecx, ebx
mov edx, dword [ebp - 0x140]
je 0x113288e
cmp ecx, edx
je 0x113288e
mov eax, dword [ecx + 0x18]
cmp eax, edx
je 0x1132890
mov ecx, eax
mov eax, dword [ecx + 0x18]
cmp eax, edx
jne 0x1132883
jmp 0x1132890
xor ecx, ecx
cmp ecx, ebx
mov esi, ecx
je 0x113293d
lea ebx, [ebx]
cmp esi, ebx
mov edi, esi
jne 0x11328aa
xor esi, esi
jmp 0x11328f8
mov ecx, dword [esi + 0x14]
cmp ecx, edx
je 0x11328d3
cmp ecx, ebx
je 0x11328cd
mov eax, dword [ecx + 0x18]
cmp eax, edx
je 0x11328cf
lea esp, [esp]
mov ecx, eax
mov eax, dword [ecx + 0x18]
cmp eax, edx
jne 0x11328c0
mov esi, ecx
jmp 0x11328f8
xor ecx, ecx
mov esi, ecx
jmp 0x11328f8
mov eax, dword [esi + 0x1c]
cmp eax, edx
je 0x11328f4
lea ebx, [ebx]
cmp esi, dword [eax + 0x14]
jne 0x11328f0
mov esi, eax
mov eax, dword [eax + 0x1c]
cmp eax, edx
jne 0x11328e0
jmp 0x11328f4
cmp eax, edx
jne 0x11328f6
xor eax, eax
mov esi, eax
cmp edi, ebx
je 0x1132935
mov eax, dword [edi + 8]
mov ecx, dword [ebp - 0x158]
push eax
add ecx, 8
call fcn.010a3bb0
call fcn.01127f00
test al, al
je 0x113292f
mov edx, dword [edi + 8]
push edx
push 0x106ce58
push 0x106cde8
push 1
call fcn.01128b70
add esp, 0x10
mov edx, dword [ebp - 0x140]
cmp esi, ebx
jne 0x11328a0
mov esi, dword [ebp - 0x120]
lea ecx, [ebp - 0x154]
call fcn.01131fe0
mov eax, dword [ebp - 0x140]
cmp eax, ebx
je 0x1132961
push eax
call fcn.01083cad
add esp, 4
mov eax, dword [ebp - 0x124]
add eax, 0xfffffff0
mov byte [ebp - 4], 2
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x1132987
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
lea ecx, [ebp - 0x13c]
mov byte [ebp - 4], 1
call fcn.010b5ef0
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0
call fcn.01075230
mov eax, dword [ebp + 8]
add eax, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x11329cb
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.010840d6
mov esp, ebp
pop ebp
ret 4