Function at 0x420f00
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x50a2d3
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x54e938]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x10], edi
lea ebx, [edi + 4]
xor esi, esi
mov dword [ebx], esi
mov dword [ebx + 4], esi
mov dword [ebx + 8], esi
mov eax, dword [ebp + 8]
mov dword [edi], vtable.acrobat_broker::SandboxMAPIDispatcher.0
mov dword [edi + 0x14], eax
mov dword [edi + 0x18], esi
mov dword [edi + 0x1c], esi
push 0x18
mov dword [ebp - 4], esi
mov dword [edi + 0x48], esi
call fcn.004051ca
add esp, 4
cmp eax, esi
je 0x421229
mov dword [edi + 0x44], eax
mov dword [eax], eax
mov eax, dword [edi + 0x44]
mov dword [eax + 4], eax
mov eax, dword [edi + 0x44]
mov dword [eax + 8], eax
mov ecx, dword [edi + 0x44]
mov byte [ecx + 0x14], 1
mov edx, dword [edi + 0x44]
mov byte [edx + 0x15], 1
mov dword [edi + 0x3c], esi
lea eax, [edi + 0x50]
push eax
mov byte [ebp - 4], 1
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov eax, dword [ebx + 4]
cmp eax, 0x531238
jbe 0x420fcb
mov ecx, dword [ebx]
cmp ecx, 0x531238
ja 0x420fcb
mov esi, 0x531238
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x420fbd
push 1
mov ecx, ebx
call fcn.00414760
mov eax, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test eax, eax
je 0x420ff1
jmp 0x420fe5
cmp eax, dword [ebx + 8]
jne 0x420fd9
push 1
mov ecx, ebx
call fcn.00414760
mov eax, dword [ebx + 4]
cmp eax, esi
je 0x420ff1
mov esi, 0x531238
mov ecx, 0x10
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0x10]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x5311f8
jbe 0x42102c
mov ecx, dword [ebx]
cmp ecx, 0x5311f8
ja 0x42102c
mov esi, 0x5311f8
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x42101e
push 1
mov ecx, ebx
call fcn.00414760
mov eax, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test eax, eax
je 0x421052
jmp 0x421046
cmp eax, dword [ebx + 8]
jne 0x42103a
push 1
mov ecx, ebx
call fcn.00414760
mov eax, dword [ebx + 4]
test eax, eax
je 0x421052
mov esi, 0x5311f8
mov ecx, 0x10
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0x10]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x5311b8
jbe 0x42108d
mov ecx, dword [ebx]
cmp ecx, 0x5311b8
ja 0x42108d
mov esi, 0x5311b8
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x42107f
push 1
mov ecx, ebx
call fcn.00414760
mov eax, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test eax, eax
je 0x4210b3
jmp 0x4210a7
cmp eax, dword [ebx + 8]
jne 0x42109b
push 1
mov ecx, ebx
call fcn.00414760
mov eax, dword [ebx + 4]
test eax, eax
je 0x4210b3
mov esi, 0x5311b8
mov ecx, 0x10
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0x10]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x531178
jbe 0x4210ee
mov ecx, dword [ebx]
cmp ecx, 0x531178
ja 0x4210ee
mov esi, 0x531178
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x4210e0
push 1
mov ecx, ebx
call fcn.00414760
mov eax, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test eax, eax
je 0x421114
jmp 0x421108
cmp eax, dword [ebx + 8]
jne 0x4210fc
push 1
mov ecx, ebx
call fcn.00414760
mov eax, dword [ebx + 4]
test eax, eax
je 0x421114
mov esi, 0x531178
mov ecx, 0x10
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0x10]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x531138
jbe 0x42114f
mov ecx, dword [ebx]
cmp ecx, 0x531138
ja 0x42114f
mov esi, 0x531138
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x421141
push 1
mov ecx, ebx
call fcn.00414760
mov eax, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test eax, eax
je 0x421175
jmp 0x421169
cmp eax, dword [ebx + 8]
jne 0x42115d
push 1
mov ecx, ebx
call fcn.00414760
mov eax, dword [ebx + 4]
test eax, eax
je 0x421175
mov esi, 0x531138
mov ecx, 0x10
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0x10]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x5310f8
jbe 0x4211b0
mov ecx, dword [ebx]
cmp ecx, 0x5310f8
ja 0x4211b0
mov esi, 0x5310f8
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x4211a2
push 1
mov ecx, ebx
call fcn.00414760
mov eax, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test eax, eax
je 0x4211d6
jmp 0x4211ca
cmp eax, dword [ebx + 8]
jne 0x4211be
push 1
mov ecx, ebx
call fcn.00414760
mov eax, dword [ebx + 4]
test eax, eax
je 0x4211d6
mov esi, 0x5310f8
mov ecx, 0x10
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0x10]
mov esi, dword [sym.imp.KERNEL32.dll_CreateEventW]
add dword [ebx + 4], 0x40
push 0
push 0
push 0
push 0
call esi
push 0
push 0
push 0
push 0
mov dword [edi + 0x20], eax
call esi
mov dword [edi + 0x24], eax
lea eax, [edi + 0x1c]
push eax
push 0
push edi
push 0x4218c0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [edi + 0x18], eax
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
lea ecx, [ebp + 8]
push ecx
lea ecx, [ebp - 0x1c]
mov dword [ebp + 8], esi
call fcn.004e102a
push 0x53b460
lea edx, [ebp - 0x1c]
push edx
mov dword [ebp - 0x1c], vtable.std::bad_alloc.0
call fcn.004e1169
int3