Function at 0x10006f41
Capabilities:
Check mutex on windows
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x224
mov eax, dword [0x10015820]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 8]
push 1
mov dword [ebp - 0xc8], eax
call fcn.1000bd3f
pop ecx
test eax, eax
je 0x10006f77
mov eax, 0x80004005
jmp 0x1000743f
push ebx
xor ebx, ebx
push edi
mov dword [ebp - 0xc0], 0x80004005
cmp esi, ebx
je 0x10006f94
lea edi, [esi - 0x10]
mov dword [ebp - 0xc4], edi
jmp 0x10006f9c
mov dword [ebp - 0xc4], ebx
mov edi, ebx
cmp byte [edi + 0x54], bl
je 0x10006fab
mov eax, 0x800704df
jmp 0x1000743d
mov eax, dword [0x10015908]
cmp eax, ebx
jne 0x10006fc2
push ebx
push ebx
push ebx
call dword [sym.imp.kernel32.dll_CreateMutexW]
mov dword [0x10015908], eax
push 0xffffffffffffffff
push eax
call dword [sym.imp.kernel32.dll_WaitForSingleObject]
push edi
call fcn.100092bd
pop ecx
test eax, eax
jns 0x10006fe7
push dword [0x10015908]
call dword [sym.imp.kernel32.dll_ReleaseMutex]
jmp 0x100071bb
cmp byte [0x10015900], bl
je 0x100073d0
mov ecx, dword [0x100158f8]
cmp ecx, ebx
je 0x10007002
call fcn.10009f94
push dword [0x10015908]
call dword [sym.imp.kernel32.dll_ReleaseMutex]
call fcn.1000bd3f
test al, al
jne 0x1000701e
mov byte [0x10015901], 1
mov dword [ebp - 0xcc], ebx
cmp dword [0x100158f4], ebx
je 0x10007037
call fcn.1000962b
mov dword [ebp - 0xcc], eax
cmp byte [0x10015901], bl
je 0x100073c8
push str.GlobalAcroSharedMemory_
lea ecx, [ebp - 0x20]
call fcn.1000bd3f
push 1
push 3
lea ecx, [ebp - 0x17c]
call fcn.1000648f
mov eax, dword [ebp - 0x17c]
mov ecx, dword [eax + 4]
push ebx
push ebx
lea ecx, [ebp + ecx - 0x17c]
call dword [sym.imp.MSVCP100.dll_public:_void___thiscall_std::basic_ios_unsigned_short_int__struct_std::char_traits_unsigned_short_int__::clear_int__bool_]
cmp dword [0x100158f4], ebx
je 0x10007091
call fcn.1000962b
push eax
lea ecx, [ebp - 0x16c]
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_unsigned_short_int__struct_std::char_traits_unsigned_short_int______thiscall_std::basic_ostream_unsigned_short_int__struct_std::char_traits_unsigned_short_int__::operator___int_]
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x17c]
call fcn.1000bd3f
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x20]
call fcn.1000bd3f
push ebx
push 1
lea ecx, [ebp - 0x74]
call fcn.1000bd3f
mov eax, dword [ebp - 0xc8]
mov ecx, dword [eax]
push ebx
lea edx, [ebp - 0xbc]
push edx
push eax
call dword [ecx + 0x30]
push 4
lea eax, [ebp - 0xb4]
push eax
push 0x19d
call fcn.1000bd3f
add esp, 0xc
test eax, eax
js 0x1000718a
cmp dword [ebp - 0xc], 8
mov eax, dword [ebp - 0x20]
jae 0x100070f5
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0xb4]
push ebx
push 4
push ebx
push 0xffffffffffffffff
call dword [sym.imp.kernel32.dll_CreateFileMappingW]
mov esi, eax
cmp esi, ebx
je 0x100071e0
push dword [ebp - 0xb4]
push ebx
push ebx
push 0xf001f
push esi
call dword [sym.imp.kernel32.dll_MapViewOfFile]
mov edi, eax
cmp edi, ebx
je 0x100071d3
mov eax, dword [ebp - 0xc8]
mov ecx, dword [eax]
push ebx
push dword [ebp - 0xb4]
push edi
push eax
call dword [ecx + 0xc]
test eax, eax
js 0x100071cc
cmp dword [ebp - 0xc], 8
mov eax, dword [ebp - 0x20]
jae 0x10007158
lea eax, [ebp - 0x20]
mov ecx, dword [ebp - 0x10]
add ecx, ecx
push ecx
push eax
push 0x19c
call fcn.1000bd3f
add esp, 0xc
test eax, eax
js 0x1000718a
push ebx
push ebx
lea eax, [ebp - 0xcc]
push eax
push 0x10006dd4
push ebx
push ebx
call dword [sym.imp.kernel32.dll_CreateThread]
cmp eax, ebx
jne 0x100071c5
mov ecx, dword [0x100158f8]
cmp ecx, ebx
je 0x10007199
call fcn.10009f70
lea ecx, [ebp - 0x11c]
call fcn.10005328
lea ecx, [ebp - 0x11c]
call dword [sym.imp.MSVCP100.dll_public_virtual:_void___thiscall_std::basic_ios_unsigned_short_int__struct_std::char_traits_unsigned_short_int__::destructor_void_]
push ebx
push 1
lea ecx, [ebp - 0x20]
call fcn.1000bd3f
mov eax, 0x80004005
jmp 0x1000743d
push eax
call dword [sym.imp.kernel32.dll_CloseHandle]
push edi
call dword [sym.imp.kernel32.dll_UnmapViewOfFile]
push esi
call dword [sym.imp.kernel32.dll_CloseHandle]
mov edi, dword [ebp - 0xc4]
push str.PDFPrev_Event_Success
lea ecx, [ebp - 0x58]
call fcn.1000bd3f
push str.PDFPrev_Event_Failure
lea ecx, [ebp - 0x3c]
call fcn.1000bd3f
xor esi, esi
inc esi
push esi
push 3
lea ecx, [ebp - 0x224]
call fcn.1000648f
push dword [ebp - 0xcc]
lea ecx, [ebp - 0x214]
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_unsigned_short_int__struct_std::char_traits_unsigned_short_int______thiscall_std::basic_ostream_unsigned_short_int__struct_std::char_traits_unsigned_short_int__::operator___int_]
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x224]
call fcn.1000bd3f
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x58]
call fcn.1000bd3f
push ebx
push esi
lea ecx, [ebp - 0x74]
call fcn.1000bd3f
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x224]
call fcn.1000bd3f
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x3c]
call fcn.1000bd3f
push ebx
push esi
lea ecx, [ebp - 0x74]
call fcn.1000bd3f
cmp dword [ebp - 0x44], 8
mov eax, dword [ebp - 0x58]
jae 0x10007273
lea eax, [ebp - 0x58]
push eax
push ebx
push esi
mov esi, dword [sym.imp.kernel32.dll_CreateEventW]
push ebx
call esi
cmp dword [ebp - 0x28], 8
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0x3c]
jae 0x10007291
lea eax, [ebp - 0x3c]
push eax
push ebx
push 1
push ebx
call esi
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd4], ebx
je 0x100072e5
cmp eax, ebx
je 0x100072e5
push 2
lea eax, [ebp - 0xd4]
push eax
mov ecx, edi
call fcn.1000bd3f
mov dword [ebp - 0xc0], eax
xor edi, edi
lea esi, [ebp + edi*4 - 0xd4]
push dword [esi]
call dword [sym.imp.kernel32.dll_ResetEvent]
push dword [esi]
call dword [sym.imp.kernel32.dll_CloseHandle]
inc edi
cmp edi, 2
jl 0x100072c2
mov edi, dword [ebp - 0xc4]
mov ecx, dword [0x100158f4]
xor esi, esi
cmp ecx, ebx
je 0x1000732c
push 0xffffffffffffffff
push ebx
push ebx
push 0x1a1
call fcn.100096b1
mov esi, eax
cmp esi, ebx
je 0x1000732c
push dword [esi + 8]
lea eax, [esi + 0xc]
push eax
add edi, 0x1c
push edi
call sub.MSVCR100.dll_memcpy
mov eax, dword [edi]
push esi
mov dword [ebp - 0xc0], eax
call sub.MSVCR100.dll_void___cdecl_operator_delete_void__
mov edi, dword [ebp - 0xc4]
add esp, 0x10
cmp dword [ebp - 0xc0], ebx
jl 0x10007377
mov ecx, dword [0x100158f4]
cmp ecx, ebx
je 0x1000734e
push 0xffffffffffffffff
push ebx
push ebx
push 0x19e
call fcn.100096b1
mov esi, eax
cmp esi, ebx
je 0x1000736d
push dword [esi + 8]
lea eax, [esi + 0xc]
push eax
lea eax, [edi + 0x58]
push eax
call sub.MSVCR100.dll_memcpy
push esi
call sub.MSVCR100.dll_void___cdecl_operator_delete_void__
add esp, 0x10
jmp 0x10007377
mov dword [ebp - 0xc0], 0x80004005
lea ecx, [ebp - 0x1c4]
call fcn.10005328
lea ecx, [ebp - 0x1c4]
call dword [sym.imp.MSVCP100.dll_public_virtual:_void___thiscall_std::basic_ios_unsigned_short_int__struct_std::char_traits_unsigned_short_int__::destructor_void_]
push ebx
push 1
lea ecx, [ebp - 0x3c]
call fcn.1000bd3f
push ebx
push 1
lea ecx, [ebp - 0x58]
call fcn.1000bd3f
lea ecx, [ebp - 0x11c]
call fcn.10005328
lea ecx, [ebp - 0x11c]
call dword [sym.imp.MSVCP100.dll_public_virtual:_void___thiscall_std::basic_ios_unsigned_short_int__struct_std::char_traits_unsigned_short_int__::destructor_void_]
push ebx
push 1
lea ecx, [ebp - 0x20]
call fcn.1000bd3f
jmp 0x100073f7
mov dword [ebp - 0xc0], ebx
jmp 0x100073f7
push dword [0x10015908]
call dword [sym.imp.kernel32.dll_ReleaseMutex]
mov eax, dword [0x1001590c]
mov ecx, dword [eax]
lea edx, [edi + 0x58]
push edx
push dword [ebp - 0xc8]
push eax
call dword [ecx + 0xc]
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], ebx
setge al
mov byte [edi + 0x54], al
cmp dword [ebp - 0xc0], ebx
jl 0x10007425
mov ecx, dword [ebp - 0xc8]
lea eax, [edi + 0x24]
cmp dword [eax], ecx
je 0x1000741f
push ecx
push eax
call fcn.1000bd3f
mov byte [edi + 0x54], 1
jmp 0x10007437
mov ecx, dword [0x100158f8]
cmp ecx, ebx
je 0x10007434
call fcn.10009f70
mov byte [edi + 0x54], bl
mov eax, dword [ebp - 0xc0]
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.1000b904
leave
ret 0xc