Function at 0x421250
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x50a0d8
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x54e938]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], ecx
lea ebx, [ecx + 4]
xor esi, esi
mov dword [ebx], esi
mov dword [ebx + 4], esi
mov dword [ebx + 8], esi
mov eax, dword [ebp + 8]
mov dword [ecx], vtable.acrobat_broker::SandboxClipboardDispatcher.0
mov dword [ecx + 0x14], eax
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x38], esi
mov byte [ecx + 0x54], 0
add ecx, 0x3c
push ecx
mov dword [ebp - 4], esi
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov eax, dword [ebx + 4]
cmp eax, 0x530fc8
jbe 0x4212e0
mov ecx, dword [ebx]
cmp ecx, 0x530fc8
ja 0x4212e0
mov esi, 0x530fc8
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x4212d2
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x421301
jmp 0x4212fa
cmp eax, dword [ebx + 8]
jne 0x4212ee
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
cmp edi, esi
je 0x421301
mov esi, 0x530fc8
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x530f88
jbe 0x42133c
mov ecx, dword [ebx]
cmp ecx, 0x530f88
ja 0x42133c
mov esi, 0x530f88
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x42132e
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x42135d
jmp 0x421356
cmp eax, dword [ebx + 8]
jne 0x42134a
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x42135d
mov esi, 0x530f88
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x530f48
jbe 0x421398
mov ecx, dword [ebx]
cmp ecx, 0x530f48
ja 0x421398
mov esi, 0x530f48
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x42138a
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x4213b9
jmp 0x4213b2
cmp eax, dword [ebx + 8]
jne 0x4213a6
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x4213b9
mov esi, 0x530f48
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x530f08
jbe 0x4213f4
mov ecx, dword [ebx]
cmp ecx, 0x530f08
ja 0x4213f4
mov esi, 0x530f08
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x4213e6
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x421415
jmp 0x42140e
cmp eax, dword [ebx + 8]
jne 0x421402
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x421415
mov esi, 0x530f08
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x530ec8
jbe 0x421450
mov ecx, dword [ebx]
cmp ecx, 0x530ec8
ja 0x421450
mov esi, 0x530ec8
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x421442
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x421471
jmp 0x42146a
cmp eax, dword [ebx + 8]
jne 0x42145e
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x421471
mov esi, 0x530ec8
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x530e88
jbe 0x4214ac
mov ecx, dword [ebx]
cmp ecx, 0x530e88
ja 0x4214ac
mov esi, 0x530e88
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x42149e
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x4214cd
jmp 0x4214c6
cmp eax, dword [ebx + 8]
jne 0x4214ba
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x4214cd
mov esi, 0x530e88
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x530e48
jbe 0x421508
mov ecx, dword [ebx]
cmp ecx, 0x530e48
ja 0x421508
mov esi, 0x530e48
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x4214fa
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x421529
jmp 0x421522
cmp eax, dword [ebx + 8]
jne 0x421516
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x421529
mov esi, 0x530e48
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x530e08
jbe 0x421564
mov ecx, dword [ebx]
cmp ecx, 0x530e08
ja 0x421564
mov esi, 0x530e08
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x421556
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x421585
jmp 0x42157e
cmp eax, dword [ebx + 8]
jne 0x421572
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x421585
mov esi, 0x530e08
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x530dc8
jbe 0x4215c0
mov ecx, dword [ebx]
cmp ecx, 0x530dc8
ja 0x4215c0
mov esi, 0x530dc8
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x4215b2
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x4215e1
jmp 0x4215da
cmp eax, dword [ebx + 8]
jne 0x4215ce
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x4215e1
mov esi, 0x530dc8
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x530d88
jbe 0x42161c
mov ecx, dword [ebx]
cmp ecx, 0x530d88
ja 0x42161c
mov esi, 0x530d88
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x42160e
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x42163d
jmp 0x421636
cmp eax, dword [ebx + 8]
jne 0x42162a
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x42163d
mov esi, 0x530d88
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x530d48
jbe 0x421678
mov ecx, dword [ebx]
cmp ecx, 0x530d48
ja 0x421678
mov esi, 0x530d48
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x42166a
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x421699
jmp 0x421692
cmp eax, dword [ebx + 8]
jne 0x421686
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x421699
mov esi, 0x530d48
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x530d08
jbe 0x4216d4
mov ecx, dword [ebx]
cmp ecx, 0x530d08
ja 0x4216d4
mov esi, 0x530d08
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x4216c6
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x4216f5
jmp 0x4216ee
cmp eax, dword [ebx + 8]
jne 0x4216e2
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x4216f5
mov esi, 0x530d08
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x530cc8
jbe 0x421730
mov ecx, dword [ebx]
cmp ecx, 0x530cc8
ja 0x421730
mov esi, 0x530cc8
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x421722
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x421751
jmp 0x42174a
cmp eax, dword [ebx + 8]
jne 0x42173e
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x421751
mov esi, 0x530cc8
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x530c88
jbe 0x42178c
mov ecx, dword [ebx]
cmp ecx, 0x530c88
ja 0x42178c
mov esi, 0x530c88
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x42177e
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x4217ad
jmp 0x4217a6
cmp eax, dword [ebx + 8]
jne 0x42179a
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x4217ad
mov esi, 0x530c88
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x530c48
jbe 0x4217e8
mov ecx, dword [ebx]
cmp ecx, 0x530c48
ja 0x4217e8
mov esi, 0x530c48
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x4217da
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x421809
jmp 0x421802
cmp eax, dword [ebx + 8]
jne 0x4217f6
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x421809
mov esi, 0x530c48
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x530c08
jbe 0x421844
mov ecx, dword [ebx]
cmp ecx, 0x530c08
ja 0x421844
mov esi, 0x530c08
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x421836
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x421865
jmp 0x42185e
cmp eax, dword [ebx + 8]
jne 0x421852
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x421865
mov esi, 0x530c08
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
mov edi, dword [sym.imp.KERNEL32.dll_CreateEventW]
add dword [ebx + 4], 0x40
push 0
push 0
push 0
push 0
call edi
mov esi, dword [ebp - 0x10]
push 0
push 0
push 0
push 0
mov dword [esi + 0x1c], eax
call edi
mov dword [esi + 0x20], eax
lea eax, [esi + 0x38]
push eax
push 0
push esi
push 0x422b00
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esi + 0x18], eax
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4