Function at 0x421b40
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x50d4b3
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x553948]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x10], edi
lea ebx, [edi + 4]
xor esi, esi
mov dword [ebx], esi
mov dword [ebx + 4], esi
mov dword [ebx + 8], esi
mov eax, dword [ebp + 8]
mov dword [edi], vtable.acrobat_broker::SandboxMAPIDispatcher.0
mov dword [edi + 0x14], eax
mov dword [edi + 0x18], esi
mov dword [edi + 0x1c], esi
push 0x18
mov dword [ebp - 4], esi
mov dword [edi + 0x48], esi
call fcn.004051ca
add esp, 4
cmp eax, esi
je 0x421e69
mov dword [edi + 0x44], eax
mov dword [eax], eax
mov eax, dword [edi + 0x44]
mov dword [eax + 4], eax
mov eax, dword [edi + 0x44]
mov dword [eax + 8], eax
mov ecx, dword [edi + 0x44]
mov byte [ecx + 0x14], 1
mov edx, dword [edi + 0x44]
mov byte [edx + 0x15], 1
mov dword [edi + 0x3c], esi
lea eax, [edi + 0x50]
push eax
mov byte [ebp - 4], 1
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov eax, dword [ebx + 4]
cmp eax, 0x5356d0
jbe 0x421c0b
mov ecx, dword [ebx]
cmp ecx, 0x5356d0
ja 0x421c0b
mov esi, 0x5356d0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x421bfd
push 1
mov ecx, ebx
call fcn.00414900
mov eax, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test eax, eax
je 0x421c31
jmp 0x421c25
cmp eax, dword [ebx + 8]
jne 0x421c19
push 1
mov ecx, ebx
call fcn.00414900
mov eax, dword [ebx + 4]
cmp eax, esi
je 0x421c31
mov esi, 0x5356d0
mov ecx, 0x10
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0x10]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x535690
jbe 0x421c6c
mov ecx, dword [ebx]
cmp ecx, 0x535690
ja 0x421c6c
mov esi, 0x535690
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x421c5e
push 1
mov ecx, ebx
call fcn.00414900
mov eax, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test eax, eax
je 0x421c92
jmp 0x421c86
cmp eax, dword [ebx + 8]
jne 0x421c7a
push 1
mov ecx, ebx
call fcn.00414900
mov eax, dword [ebx + 4]
test eax, eax
je 0x421c92
mov esi, 0x535690
mov ecx, 0x10
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0x10]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x535650
jbe 0x421ccd
mov ecx, dword [ebx]
cmp ecx, 0x535650
ja 0x421ccd
mov esi, 0x535650
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x421cbf
push 1
mov ecx, ebx
call fcn.00414900
mov eax, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test eax, eax
je 0x421cf3
jmp 0x421ce7
cmp eax, dword [ebx + 8]
jne 0x421cdb
push 1
mov ecx, ebx
call fcn.00414900
mov eax, dword [ebx + 4]
test eax, eax
je 0x421cf3
mov esi, 0x535650
mov ecx, 0x10
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0x10]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x535610
jbe 0x421d2e
mov ecx, dword [ebx]
cmp ecx, 0x535610
ja 0x421d2e
mov esi, 0x535610
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x421d20
push 1
mov ecx, ebx
call fcn.00414900
mov eax, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test eax, eax
je 0x421d54
jmp 0x421d48
cmp eax, dword [ebx + 8]
jne 0x421d3c
push 1
mov ecx, ebx
call fcn.00414900
mov eax, dword [ebx + 4]
test eax, eax
je 0x421d54
mov esi, 0x535610
mov ecx, 0x10
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0x10]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x5355d0
jbe 0x421d8f
mov ecx, dword [ebx]
cmp ecx, 0x5355d0
ja 0x421d8f
mov esi, 0x5355d0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x421d81
push 1
mov ecx, ebx
call fcn.00414900
mov eax, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test eax, eax
je 0x421db5
jmp 0x421da9
cmp eax, dword [ebx + 8]
jne 0x421d9d
push 1
mov ecx, ebx
call fcn.00414900
mov eax, dword [ebx + 4]
test eax, eax
je 0x421db5
mov esi, 0x5355d0
mov ecx, 0x10
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0x10]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x535590
jbe 0x421df0
mov ecx, dword [ebx]
cmp ecx, 0x535590
ja 0x421df0
mov esi, 0x535590
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x421de2
push 1
mov ecx, ebx
call fcn.00414900
mov eax, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test eax, eax
je 0x421e16
jmp 0x421e0a
cmp eax, dword [ebx + 8]
jne 0x421dfe
push 1
mov ecx, ebx
call fcn.00414900
mov eax, dword [ebx + 4]
test eax, eax
je 0x421e16
mov esi, 0x535590
mov ecx, 0x10
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0x10]
mov esi, dword [sym.imp.KERNEL32.dll_CreateEventW]
add dword [ebx + 4], 0x40
push 0
push 0
push 0
push 0
call esi
push 0
push 0
push 0
push 0
mov dword [edi + 0x20], eax
call esi
mov dword [edi + 0x24], eax
lea eax, [edi + 0x1c]
push eax
push 0
push edi
push 0x422920
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [edi + 0x18], eax
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
lea ecx, [ebp + 8]
push ecx
lea ecx, [ebp - 0x1c]
mov dword [ebp + 8], esi
call fcn.004e3c5a
push 0x53fa68
lea edx, [ebp - 0x1c]
push edx
mov dword [ebp - 0x1c], vtable.std::bad_alloc.0
call fcn.004e3d99
int3