Function at 0x42a140
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x51e092
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x579630]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x10], edi
lea ebx, [edi + 4]
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [edi], vtable.acrobat_broker::SandboxPrintDispatcher.0
lea ecx, [edi + 0x10]
mov dword [ebp - 4], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
call fcn.0040ba80
mov dword [edi + 0x10], eax
lea ecx, [edi + 0x18]
mov byte [ebp - 4], 1
mov dword [edi + 0x18], 0
mov dword [edi + 0x1c], 0
call fcn.00429600
mov dword [edi + 0x18], eax
mov eax, dword [ebp + 8]
mov byte [edi + 0x20], 0
mov dword [edi + 0x24], eax
mov dword [edi + 0x64], 0
mov dword [edi + 0x68], 0
mov dword [edi + 0x6c], 0
lea ecx, [edi + 0x70]
mov byte [ebp - 4], 3
mov dword [edi + 0x70], 0
mov dword [edi + 0x74], 0
call fcn.00405fb0
mov dword [edi + 0x70], eax
mov dword [edi + 0x78], 0
lea ecx, [edi + 0x8c]
mov dword [edi + 0x7c], 0
mov dword [edi + 0x80], 0
mov dword [edi + 0x84], 0
mov dword [edi + 0x88], 0
mov byte [ebp - 4], 4
mov dword [edi + 0x8c], 0
mov dword [edi + 0x90], 0
call fcn.00405f00
mov dword [edi + 0x8c], eax
lea eax, [edi + 0x28]
mov byte [ebp - 4], 5
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x5537e8
mov ecx, ebx
call fcn.00416560
push 0x553838
mov ecx, ebx
call fcn.00416560
push 0x553888
mov ecx, ebx
call fcn.00416560
mov esi, dword [sym.imp.KERNEL32.dll_CreateEventW]
push 0
push 0
push 0
push 0
call esi
push 0
push 0
push 0
push 0
mov dword [edi + 0x44], eax
call esi
mov dword [edi + 0x48], eax
lea eax, [edi + 0x60]
push eax
push 0
push edi
push 0x42a660
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [edi + 0x40], eax
mov eax, dword [0x57f480]
mov dword [ebp + 8], eax
test eax, eax
je 0x42a2ef
lea esi, [eax + 4]
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [ebp + 8]
push esi
mov bl, byte [eax + 0x50]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test bl, bl
jne 0x42a4db
lea ebx, [edi + 4]
push 0x5538d8
mov ecx, ebx
call fcn.00416560
push str.v_a_a_a
mov ecx, ebx
call fcn.00416560
push 0x553978
mov ecx, ebx
call fcn.00416560
push 0x5539c8
mov ecx, ebx
call fcn.00416560
push 0x553a18
mov ecx, ebx
call fcn.00416560
push 0x553a68
mov ecx, ebx
call fcn.00416560
push 0x553ab8
mov ecx, ebx
call fcn.00416560
push 0x553b08
mov ecx, ebx
call fcn.00416560
push 0x553b58
mov ecx, ebx
call fcn.00416560
push 0x553ba8
mov ecx, ebx
call fcn.00416560
push 0x553bf8
mov ecx, ebx
call fcn.00416560
push 0x553c48
mov ecx, ebx
call fcn.00416560
push 0x553c98
mov ecx, ebx
call fcn.00416560
push 0x553ce8
mov ecx, ebx
call fcn.00416560
push 0x553d38
mov ecx, ebx
call fcn.00416560
push 0x553d88
mov ecx, ebx
call fcn.00416560
push 0x553dd8
mov ecx, ebx
call fcn.00416560
push 0x553e78
mov ecx, ebx
call fcn.00416560
push 0x553e28
mov ecx, ebx
call fcn.00416560
push 0x553ec8
mov ecx, ebx
call fcn.00416560
push 0x553f18
mov ecx, ebx
call fcn.00416560
push 0x553f68
mov ecx, ebx
call fcn.00416560
push 0x553fb8
mov ecx, ebx
call fcn.00416560
push 0x554008
mov ecx, ebx
call fcn.00416560
push 0x554058
mov ecx, ebx
call fcn.00416560
push 0x5540a8
mov ecx, ebx
call fcn.00416560
push 0x5540f8
mov ecx, ebx
call fcn.00416560
push 0x554148
mov ecx, ebx
call fcn.00416560
push 0x554198
mov ecx, ebx
call fcn.00416560
push 0x5541e8
mov ecx, ebx
call fcn.00416560
push 0x554238
mov ecx, ebx
call fcn.00416560
push 0x554288
mov ecx, ebx
call fcn.00416560
push 0x5542d8
mov ecx, ebx
call fcn.00416560
push 0x554328
mov ecx, ebx
call fcn.00416560
push 0x554378
mov ecx, ebx
call fcn.00416560
push 0x5543c8
mov ecx, ebx
call fcn.00416560
push 0x554418
mov ecx, ebx
call fcn.00416560
push 0x554468
mov ecx, ebx
call fcn.00416560
push 0x5544b8
mov ecx, ebx
call fcn.00416560
push 0x554508
mov ecx, ebx
call fcn.00416560
push 0x554558
mov ecx, ebx
call fcn.00416560
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4