Function at 0x18007c62c
Capabilities:
Create thread

Disassembly:
mov rax, rsp
push rbp
lea rbp, [rax - 0x638]
sub rsp, 0x730
mov qword [rsp + 0x30], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r14
mov rbx, rdx
mov rdi, rcx
lea rax, vtable.ProtocolFilters::AutoLock.0
mov qword [rsp + 0x38], rax
lea r14, [rcx + 0x2d8]
mov qword [rsp + 0x40], r14
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_EnterCriticalSection]
nop
cmp byte [rdi + 0x20], 0
je 0x18007c68d
mov sil, 1
jmp 0x18007c90c
xor edx, edx
xor ecx, ecx
call fcn.1800a13f0
xor edx, edx
xor ecx, ecx
call fcn.1800a13f0
xor edx, edx
mov ecx, 0x200002
call fcn.1800a13f0
xor edx, edx
lea ecx, [rdx + 2]
call fcn.1800e57e0
mov r8d, 0xec
lea rdx, str.c:users_administratordesktopqudao012gh_filterapi_x64_exe_ssldataprovider.cpp
mov ecx, 8
call fcn.1800e5340
mov qword [0x1802c7e18], rax
test rax, rax
je 0x18007c6f2
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
mov rcx, rax
mov rax, qword [0x1802c7e18]
mov qword [rax], rcx
mov esi, 0x190
mov r8d, esi
xor edx, edx
lea rcx, [rbp - 0x10]
call fcn.1801c27d0
mov r8d, esi
xor edx, edx
lea rcx, [rbp + 0x180]
call fcn.1801c27d0
mov r8d, esi
xor edx, edx
lea rcx, [rbp + 0x310]
call fcn.1801c27d0
mov r8d, esi
xor edx, edx
lea rcx, [rbp + 0x4a0]
call fcn.1801c27d0
lea rdx, [rbp - 0x10]
call fcn.18007cb64
lea rdx, [rbp + 0x180]
call fcn.18007cb64
lea rdx, [rbp + 0x310]
call fcn.18007cb64
lea rdx, [rbp + 0x4a0]
call fcn.18007cb64
mov rdx, rbx
mov rcx, rdi
call fcn.18005d18c
lea rcx, [rdi + 0x28]
lea rdx, str.NetBrowser
call fcn.18005a838
lea rcx, [rdi + 0x2c0]
xor edx, edx
lea r8d, [rdx + 0x18]
call fcn.1801c27d0
lea r8, [rbp - 0x10]
mov rdx, rdi
lea rcx, [rbp - 0x38]
call fcn.18005d660
nop
lea r8, [rbp - 0x10]
mov rdx, rdi
lea rcx, [rsp + 0x48]
call fcn.18005d660
nop
lea rcx, [rdi + 0x160]
mov rdx, rax
call fcn.18007ac14
test al, al
sete bl
lea rcx, [rsp + 0x48]
call fcn.18005e40c
mov sil, 1
test bl, bl
jne 0x18007c8c3
lea r8, [rbp + 0x180]
mov rdx, rdi
lea rcx, [rsp + 0x68]
call fcn.18005d660
nop
lea rcx, [rdi + 0x1a8]
mov rdx, rax
call fcn.18007badc
mov bl, al
lea rcx, [rsp + 0x68]
call fcn.18005e40c
test bl, bl
je 0x18007c8c3
lea r8, [rbp + 0x310]
mov rdx, rdi
lea rcx, [rbp - 0x78]
call fcn.18005d660
nop
lea rcx, [rdi + 0x200]
mov rdx, rax
call fcn.18007badc
mov bl, al
lea rcx, [rbp - 0x78]
call fcn.18005e40c
test bl, bl
je 0x18007c8c3
lea r8, [rbp + 0x4a0]
mov rdx, rdi
lea rcx, [rbp - 0x58]
call fcn.18005d660
nop
lea rcx, [rdi + 0x258]
mov rdx, rax
call fcn.18007badc
mov bl, al
lea rcx, [rbp - 0x58]
call fcn.18005e40c
test bl, bl
je 0x18007c8c3
mov rcx, rdi
call fcn.18007f8b0
cmp qword [rdi + 0xa8], 0
jne 0x18007c8bf
and qword [rsp + 0x28], 0
and dword [rsp + 0x20], 0
mov r9, rdi
lea r8, [0x18007fcc4]
xor edx, edx
xor ecx, ecx
call fcn.1801d1e40
mov qword [rdi + 0xa8], rax
cmp rax, 0xffffffffffffffff
jne 0x18007c8bf
and qword [rdi + 0xa8], 0
mov byte [rdi + 0x20], sil
cmp byte [rdi + 0x20], 0
jne 0x18007c902
mov rcx, qword [0x1802c7e18]
test rcx, rcx
je 0x18007c8ff
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r8d, 0x106
lea rdx, str.c:users_administratordesktopqudao012gh_filterapi_x64_exe_ssldataprovider.cpp
mov rcx, qword [0x1802c7e18]
call fcn.1800e5390
and qword [0x1802c7e18], 0
xor sil, sil
lea rcx, [rbp - 0x38]
call fcn.18005e40c
nop
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov al, sil
lea r11, [rsp + 0x730]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret