Function at 0x426d90
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5039e2
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x556620]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x10], edi
lea ebx, [edi + 4]
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [edi], vtable.acrobat_broker::SandboxPrintDispatcher.0
lea ecx, [edi + 0x10]
mov dword [ebp - 4], 0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
call fcn.00409bb0
mov dword [edi + 0x10], eax
lea ecx, [edi + 0x18]
mov byte [ebp - 4], 1
mov dword [edi + 0x18], 0
mov dword [edi + 0x1c], 0
call fcn.00427120
mov dword [edi + 0x18], eax
mov eax, dword [ebp + 8]
mov byte [edi + 0x20], 0
mov dword [edi + 0x24], eax
mov dword [edi + 0x64], 0
mov dword [edi + 0x68], 0
mov dword [edi + 0x6c], 0
lea ecx, [edi + 0x70]
mov byte [ebp - 4], 3
mov dword [edi + 0x70], 0
mov dword [edi + 0x74], 0
call fcn.00405f90
mov dword [edi + 0x70], eax
mov dword [edi + 0x78], 0
lea ecx, [edi + 0x84]
mov dword [edi + 0x7c], 0
mov dword [edi + 0x80], 0
mov byte [ebp - 4], 4
mov dword [edi + 0x84], 0
mov dword [edi + 0x88], 0
call fcn.00405ee0
mov dword [edi + 0x84], eax
lea eax, [edi + 0x28]
mov byte [ebp - 4], 5
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x533e08
mov ecx, ebx
call fcn.00417230
push 0x533e48
mov ecx, ebx
call fcn.00417230
push 0x533e88
mov ecx, ebx
call fcn.00417230
mov esi, dword [sym.imp.KERNEL32.dll_CreateEventW]
push 0
push 0
push 0
push 0
call esi
push 0
push 0
push 0
push 0
mov dword [edi + 0x44], eax
call esi
mov dword [edi + 0x48], eax
lea eax, [edi + 0x60]
push eax
push 0
push edi
push 0x4272b0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [edi + 0x40], eax
mov eax, dword [0x55b408]
mov dword [ebp + 8], eax
test eax, eax
je 0x426f2b
lea esi, [eax + 4]
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [ebp + 8]
push esi
mov bl, byte [eax + 0x50]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test bl, bl
jne 0x4270ff
lea ebx, [edi + 4]
push 0x533ec8
mov ecx, ebx
call fcn.00417230
push str.u_a_a_a
mov ecx, ebx
call fcn.00417230
push 0x533f48
mov ecx, ebx
call fcn.00417230
push 0x533f88
mov ecx, ebx
call fcn.00417230
push 0x533fc8
mov ecx, ebx
call fcn.00417230
push 0x534008
mov ecx, ebx
call fcn.00417230
push 0x534048
mov ecx, ebx
call fcn.00417230
push 0x534088
mov ecx, ebx
call fcn.00417230
push 0x5340c8
mov ecx, ebx
call fcn.00417230
push 0x534108
mov ecx, ebx
call fcn.00417230
push 0x534148
mov ecx, ebx
call fcn.00417230
push 0x534188
mov ecx, ebx
call fcn.00417230
push 0x5341c8
mov ecx, ebx
call fcn.00417230
push 0x534208
mov ecx, ebx
call fcn.00417230
push 0x534248
mov ecx, ebx
call fcn.00417230
push 0x534288
mov ecx, ebx
call fcn.00417230
push 0x534308
mov ecx, ebx
call fcn.00417230
push 0x5342c8
mov ecx, ebx
call fcn.00417230
push 0x534348
mov ecx, ebx
call fcn.00417230
push 0x534388
mov ecx, ebx
call fcn.00417230
push 0x5343c8
mov ecx, ebx
call fcn.00417230
push 0x534408
mov ecx, ebx
call fcn.00417230
push 0x534448
mov ecx, ebx
call fcn.00417230
push 0x534488
mov ecx, ebx
call fcn.00417230
push 0x5344c8
mov ecx, ebx
call fcn.00417230
push 0x534508
mov ecx, ebx
call fcn.00417230
push 0x534548
mov ecx, ebx
call fcn.00417230
push 0x534588
mov ecx, ebx
call fcn.00417230
push 0x5345c8
mov ecx, ebx
call fcn.00417230
push 0x534608
mov ecx, ebx
call fcn.00417230
push 0x534648
mov ecx, ebx
call fcn.00417230
push 0x534688
mov ecx, ebx
call fcn.00417230
push 0x5346c8
mov ecx, ebx
call fcn.00417230
push 0x534708
mov ecx, ebx
call fcn.00417230
push 0x534748
mov ecx, ebx
call fcn.00417230
push 0x534788
mov ecx, ebx
call fcn.00417230
push 0x5347c8
mov ecx, ebx
call fcn.00417230
push 0x534808
mov ecx, ebx
call fcn.00417230
push 0x534848
mov ecx, ebx
call fcn.00417230
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4