Function at 0x424430
Capabilities:
Create thread
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x509315
mov eax, dword fs:[0]
push eax
sub esp, 0x24
push ebx
push esi
push edi
mov eax, dword [0x54e938]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x10], esi
lea ebx, [esi + 4]
xor edi, edi
mov dword [ebx], edi
mov dword [ebx + 4], edi
mov dword [ebx + 8], edi
mov dword [esi], vtable.acrobat_broker::SandboxPrintDispatcher.0
push 0x4c
mov dword [ebp - 4], edi
mov dword [esi + 0x1c], edi
call fcn.004051ca
add esp, 4
cmp eax, edi
je 0x425565
mov dword [esi + 0x18], eax
mov dword [eax], eax
mov eax, dword [esi + 0x18]
mov dword [eax + 4], eax
mov eax, dword [esi + 0x18]
mov dword [eax + 8], eax
mov eax, dword [esi + 0x18]
mov byte [eax + 0x48], 1
mov ecx, dword [esi + 0x18]
mov byte [ecx + 0x49], 1
push 0x1c
mov byte [ebp - 4], 1
mov dword [esi + 0x2c], edi
call fcn.004051ca
add esp, 4
cmp eax, edi
je 0x425541
mov dword [esi + 0x28], eax
mov dword [eax], eax
mov eax, dword [esi + 0x28]
mov dword [eax + 4], eax
mov eax, dword [esi + 0x28]
mov dword [eax + 8], eax
mov edx, dword [esi + 0x28]
mov byte [edx + 0x18], 1
mov eax, dword [esi + 0x28]
mov byte [eax + 0x19], 1
mov ecx, dword [ebp + 8]
mov byte [esi + 0x34], 0
mov dword [esi + 0x38], ecx
mov dword [esi + 0x78], edi
mov dword [esi + 0x7c], edi
mov dword [esi + 0x80], edi
push 0x18
mov byte [ebp - 4], 3
mov dword [esi + 0x90], edi
call fcn.004051ca
add esp, 4
cmp eax, edi
je 0x42551d
mov dword [esi + 0x8c], eax
mov dword [eax], eax
mov eax, dword [esi + 0x8c]
mov dword [eax + 4], eax
mov eax, dword [esi + 0x8c]
mov dword [eax + 8], eax
mov edx, dword [esi + 0x8c]
mov byte [edx + 0x14], 1
mov eax, dword [esi + 0x8c]
mov byte [eax + 0x15], 1
mov dword [esi + 0x98], edi
mov dword [esi + 0x9c], edi
mov dword [esi + 0xa0], edi
push 0x30
mov byte [ebp - 4], 4
mov dword [esi + 0xac], edi
call fcn.004051ca
add esp, 4
cmp eax, edi
je 0x4254f9
mov dword [esi + 0xa8], eax
mov dword [eax], eax
mov eax, dword [esi + 0xa8]
mov dword [eax + 4], eax
mov eax, dword [esi + 0xa8]
mov dword [eax + 8], eax
mov ecx, dword [esi + 0xa8]
mov byte [ecx + 0x2c], 1
mov edx, dword [esi + 0xa8]
mov byte [edx + 0x2d], 1
add esi, 0x3c
push esi
mov byte [ebp - 4], 5
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov eax, dword [ebx + 4]
cmp eax, 0x52e7a0
jbe 0x4245e0
mov ecx, dword [ebx]
cmp ecx, 0x52e7a0
ja 0x4245e0
mov esi, 0x52e7a0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x4245d2
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424603
jmp 0x4245fc
cmp eax, dword [ebx + 8]
jne 0x4245ee
push 1
mov ecx, ebx
call fcn.00414760
mov eax, dword [ebx + 4]
cmp eax, edi
je 0x424603
mov esi, 0x52e7a0
mov edi, eax
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e760
jbe 0x42463e
mov ecx, dword [ebx]
cmp ecx, 0x52e760
ja 0x42463e
mov esi, 0x52e760
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424630
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x42465f
jmp 0x424658
cmp eax, dword [ebx + 8]
jne 0x42464c
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x42465f
mov esi, 0x52e760
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e720
jbe 0x42469a
mov ecx, dword [ebx]
cmp ecx, 0x52e720
ja 0x42469a
mov esi, 0x52e720
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x42468c
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x4246bb
jmp 0x4246b4
cmp eax, dword [ebx + 8]
jne 0x4246a8
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x4246bb
mov esi, 0x52e720
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
mov esi, dword [sym.imp.KERNEL32.dll_CreateEventW]
add dword [ebx + 4], 0x40
push 0
push 0
push 0
push 0
call esi
mov edi, dword [ebp - 0x10]
push 0
push 0
push 0
push 0
mov dword [edi + 0x58], eax
call esi
mov dword [edi + 0x5c], eax
lea eax, [edi + 0x74]
push eax
push 0
push edi
push 0x425570
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [edi + 0x54], eax
mov esi, dword [0x5513c0]
test esi, esi
je 0x42472c
mov dword [ebp + 8], esi
add esi, 4
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [ebp + 8]
mov dl, byte [ecx + 0x58]
push esi
mov byte [ebp + 0xb], dl
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp byte [ebp + 0xb], 0
jne 0x4254e3
mov eax, dword [ebx + 4]
cmp eax, 0x52e6e0
jbe 0x424763
mov ecx, dword [ebx]
cmp ecx, 0x52e6e0
ja 0x424763
mov esi, 0x52e6e0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424755
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424784
jmp 0x42477d
cmp eax, dword [ebx + 8]
jne 0x424771
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424784
mov esi, 0x52e6e0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, str.r_a_a_a
jbe 0x4247bf
mov ecx, dword [ebx]
cmp ecx, str.r_a_a_a
ja 0x4247bf
mov esi, str.r_a_a_a
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x4247b1
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x4247e0
jmp 0x4247d9
cmp eax, dword [ebx + 8]
jne 0x4247cd
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x4247e0
mov esi, str.r_a_a_a
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e660
jbe 0x42481b
mov ecx, dword [ebx]
cmp ecx, 0x52e660
ja 0x42481b
mov esi, 0x52e660
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x42480d
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x42483c
jmp 0x424835
cmp eax, dword [ebx + 8]
jne 0x424829
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x42483c
mov esi, 0x52e660
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e620
jbe 0x424877
mov ecx, dword [ebx]
cmp ecx, 0x52e620
ja 0x424877
mov esi, 0x52e620
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424869
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424898
jmp 0x424891
cmp eax, dword [ebx + 8]
jne 0x424885
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424898
mov esi, 0x52e620
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e5e0
jbe 0x4248d3
mov ecx, dword [ebx]
cmp ecx, 0x52e5e0
ja 0x4248d3
mov esi, 0x52e5e0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x4248c5
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x4248f4
jmp 0x4248ed
cmp eax, dword [ebx + 8]
jne 0x4248e1
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x4248f4
mov esi, 0x52e5e0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e5a0
jbe 0x42492f
mov ecx, dword [ebx]
cmp ecx, 0x52e5a0
ja 0x42492f
mov esi, 0x52e5a0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424921
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424950
jmp 0x424949
cmp eax, dword [ebx + 8]
jne 0x42493d
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424950
mov esi, 0x52e5a0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e560
jbe 0x42498b
mov ecx, dword [ebx]
cmp ecx, 0x52e560
ja 0x42498b
mov esi, 0x52e560
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x42497d
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x4249ac
jmp 0x4249a5
cmp eax, dword [ebx + 8]
jne 0x424999
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x4249ac
mov esi, 0x52e560
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e520
jbe 0x4249e7
mov ecx, dword [ebx]
cmp ecx, 0x52e520
ja 0x4249e7
mov esi, 0x52e520
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x4249d9
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424a08
jmp 0x424a01
cmp eax, dword [ebx + 8]
jne 0x4249f5
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424a08
mov esi, 0x52e520
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e4e0
jbe 0x424a43
mov ecx, dword [ebx]
cmp ecx, 0x52e4e0
ja 0x424a43
mov esi, 0x52e4e0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424a35
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424a64
jmp 0x424a5d
cmp eax, dword [ebx + 8]
jne 0x424a51
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424a64
mov esi, 0x52e4e0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e4a0
jbe 0x424a9f
mov ecx, dword [ebx]
cmp ecx, 0x52e4a0
ja 0x424a9f
mov esi, 0x52e4a0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424a91
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424ac0
jmp 0x424ab9
cmp eax, dword [ebx + 8]
jne 0x424aad
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424ac0
mov esi, 0x52e4a0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e460
jbe 0x424afb
mov ecx, dword [ebx]
cmp ecx, 0x52e460
ja 0x424afb
mov esi, 0x52e460
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424aed
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424b1c
jmp 0x424b15
cmp eax, dword [ebx + 8]
jne 0x424b09
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424b1c
mov esi, 0x52e460
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e420
jbe 0x424b57
mov ecx, dword [ebx]
cmp ecx, 0x52e420
ja 0x424b57
mov esi, 0x52e420
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424b49
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424b78
jmp 0x424b71
cmp eax, dword [ebx + 8]
jne 0x424b65
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424b78
mov esi, 0x52e420
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e3e0
jbe 0x424bb3
mov ecx, dword [ebx]
cmp ecx, 0x52e3e0
ja 0x424bb3
mov esi, 0x52e3e0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424ba5
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424bd4
jmp 0x424bcd
cmp eax, dword [ebx + 8]
jne 0x424bc1
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424bd4
mov esi, 0x52e3e0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e3a0
jbe 0x424c0f
mov ecx, dword [ebx]
cmp ecx, 0x52e3a0
ja 0x424c0f
mov esi, 0x52e3a0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424c01
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424c30
jmp 0x424c29
cmp eax, dword [ebx + 8]
jne 0x424c1d
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424c30
mov esi, 0x52e3a0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e360
jbe 0x424c6b
mov ecx, dword [ebx]
cmp ecx, 0x52e360
ja 0x424c6b
mov esi, 0x52e360
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424c5d
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424c8c
jmp 0x424c85
cmp eax, dword [ebx + 8]
jne 0x424c79
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424c8c
mov esi, 0x52e360
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e320
jbe 0x424cc7
mov ecx, dword [ebx]
cmp ecx, 0x52e320
ja 0x424cc7
mov esi, 0x52e320
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424cb9
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424ce8
jmp 0x424ce1
cmp eax, dword [ebx + 8]
jne 0x424cd5
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424ce8
mov esi, 0x52e320
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e2e0
jbe 0x424d23
mov ecx, dword [ebx]
cmp ecx, 0x52e2e0
ja 0x424d23
mov esi, 0x52e2e0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424d15
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424d44
jmp 0x424d3d
cmp eax, dword [ebx + 8]
jne 0x424d31
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424d44
mov esi, 0x52e2e0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e2a0
jbe 0x424d7f
mov ecx, dword [ebx]
cmp ecx, 0x52e2a0
ja 0x424d7f
mov esi, 0x52e2a0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424d71
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x424da0
jmp 0x424d99
cmp eax, dword [ebx + 8]
jne 0x424d8d
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424da0
mov esi, 0x52e2a0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x52e260
jbe 0x424ddb
mov ecx, dword [ebx]
cmp ecx, 0x52e260
ja 0x424ddb
mov esi, 0x52e260
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x424dcd
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
cmp eax, dword [ebx + 8]
jne 0x424de9
push 1
mov ecx, ebx
call fcn.00414760
mov edi, dword [ebx + 4]
test edi, edi
je 0x424dfc
mov esi, 0x52e260
mov dword [ebp - 0x14], edi
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x24]
call fcn.004e102a
push 0x53b460
lea ecx, [ebp - 0x24]
push ecx
mov dword [ebp - 0x24], vtable.std::bad_alloc.0
call fcn.004e1169
lea edx, [ebp + 8]
push edx
lea ecx, [ebp - 0x30]
mov dword [ebp + 8], edi
call fcn.004e102a
push 0x53b460
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x30], vtable.std::bad_alloc.0
call fcn.004e1169
lea ecx, [ebp - 0x14]
push ecx
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x14], edi
call fcn.004e102a
push 0x53b460
lea edx, [ebp - 0x30]
push edx
mov dword [ebp - 0x30], vtable.std::bad_alloc.0
call fcn.004e1169
mov dword [ebp - 0x18], edi
lea eax, [ebp - 0x18]
jmp 0x4254ff