Function at 0x10018810
Capabilities:
Get client handle via schannel
Get outbound credentials handle via credssp

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x114
mov eax, dword [0x10052550]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [ebp + 8]
mov dword [ebp - 0xd8], esi
test esi, esi
je 0x10018a90
mov eax, dword [esi + 4]
mov dword [ebp - 0xd4], eax
test eax, eax
je 0x10018a90
push ebx
mov ebx, dword [esi + 8]
push edi
mov edi, dword [eax + 0x28]
push esi
mov dword [ebp - 0xdc], ebx
mov dword [ebp - 0xd0], edi
call fcn.10018c30
add esp, 4
test eax, eax
jne 0x100189d8
push 0x38
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.100290c0
add esp, 0xc
cmp dword [edi + 0x348], 0
je 0x10018911
mov ebx, dword [ebp - 0xd0]
xor edi, edi
xor esi, esi
push dword [esi + 0x100514b8]
push dword [ebx + 0x348]
call fcn.10029200
add esp, 8
test eax, eax
jne 0x100188b2
or edi, dword [esi + 0x100514bc]
add esi, 8
cmp esi, 0x20
jb 0x10018894
push 0xc8
lea eax, [ebp - 0xcc]
push 0
push eax
call fcn.100290c0
push 0x32
lea eax, [ebp - 0xcc]
push eax
push edi
push dword [ebx + 0x348]
call fcn.10018eb0
mov ebx, dword [ebp - 0xdc]
add esp, 0x1c
mov dword [ebp - 0xfc], eax
test eax, eax
je 0x100189bd
lea eax, [ebp - 0xcc]
mov dword [ebp - 0xf8], eax
mov edi, dword [ebp - 0xd0]
mov esi, dword [ebp - 0xd8]
lea eax, [ebx + 4]
mov dword [ebp - 0x114], 4
mov dword [ebp - 0xe4], 0x1c
cmp dword [eax], 0
je 0x1001893d
mov dword [ebp - 0x110], 1
mov dword [ebp - 0x10c], eax
mov eax, dword [edi + 0x37c]
test eax, eax
je 0x10018a16
mov eax, dword [eax + 0x74]
test eax, eax
je 0x10018a16
push str.TLSv1.0
push eax
call fcn.10028870
add esp, 8
test eax, eax
je 0x10018972
or dword [ebp - 0xf4], 0x80
mov eax, dword [edi + 0x37c]
push str.TLSv1.1
push dword [eax + 0x74]
call fcn.10028870
add esp, 8
test eax, eax
je 0x10018996
or dword [ebp - 0xf4], 0x200
mov eax, dword [edi + 0x37c]
push str.TLSv1.2
push dword [eax + 0x74]
call fcn.10028870
add esp, 8
test eax, eax
je 0x10018a16
mov eax, dword [ebp - 0xf4]
or eax, 0x800
jmp 0x10018a1c
test edi, edi
jne 0x10018905
push 0x80090331
push dword [ebp - 0xd4]
call fcn.1001c620
add esp, 8
cmp dword [ebx + 0x18], 0
je 0x100189e7
push dword [ebx + 0x14]
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [ebx + 4]
mov dword [ebx + 0x18], 0
test eax, eax
je 0x100189fc
push eax
call dword [sym.imp.CRYPT32.dll_CertFreeCertificateContext]
pop edi
mov dword [ebx + 4], 0
pop ebx
mov al, 1
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100290a4
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0xf4]
test eax, eax
push 0
mov ecx, 0x280
cmove eax, ecx
mov dword [ebp - 0xf4], eax
lea eax, [ebx + 8]
push eax
push 0
push 0
lea eax, [ebp - 0x114]
push eax
push 0
push 2
push str.Microsoft_Unified_Security_Protocol_Provider
push 0
call sub.Secur32.dll_AcquireCredentialsHandleA
test eax, eax
je 0x10018a57
push eax
jmp 0x100189ca
push esi
mov byte [ebx + 0x10], 1
call fcn.1001bba0
add esp, 4
test eax, eax
jne 0x100189d8
push esi
call fcn.1001c980
add esp, 4
test al, al
je 0x100189d8
pop edi
pop ebx
xor al, al
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.100290a4
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
xor ecx, ebp
mov al, 1
pop esi
call fcn.100290a4
mov esp, ebp
pop ebp
ret