Function at 0x4220e0
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x50a8e8
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x553948]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], ecx
lea ebx, [ecx + 4]
xor esi, esi
mov dword [ebx], esi
mov dword [ebx + 4], esi
mov dword [ebx + 8], esi
mov eax, dword [ebp + 8]
mov dword [ecx], vtable.acrobat_broker::SandboxClipboardDispatcher.0
mov dword [ecx + 0x14], eax
mov dword [ecx + 0x18], esi
mov dword [ecx + 0x38], esi
mov byte [ecx + 0x54], 0
add ecx, 0x3c
push ecx
mov dword [ebp - 4], esi
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov eax, dword [ebx + 4]
cmp eax, 0x535460
jbe 0x422170
mov ecx, dword [ebx]
cmp ecx, 0x535460
ja 0x422170
mov esi, 0x535460
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x422162
push 1
mov ecx, ebx
call fcn.00414900
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x422191
jmp 0x42218a
cmp eax, dword [ebx + 8]
jne 0x42217e
push 1
mov ecx, ebx
call fcn.00414900
mov edi, dword [ebx + 4]
cmp edi, esi
je 0x422191
mov esi, 0x535460
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x535420
jbe 0x4221cc
mov ecx, dword [ebx]
cmp ecx, 0x535420
ja 0x4221cc
mov esi, 0x535420
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x4221be
push 1
mov ecx, ebx
call fcn.00414900
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x4221ed
jmp 0x4221e6
cmp eax, dword [ebx + 8]
jne 0x4221da
push 1
mov ecx, ebx
call fcn.00414900
mov edi, dword [ebx + 4]
test edi, edi
je 0x4221ed
mov esi, 0x535420
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x5353e0
jbe 0x422228
mov ecx, dword [ebx]
cmp ecx, 0x5353e0
ja 0x422228
mov esi, 0x5353e0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x42221a
push 1
mov ecx, ebx
call fcn.00414900
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x422249
jmp 0x422242
cmp eax, dword [ebx + 8]
jne 0x422236
push 1
mov ecx, ebx
call fcn.00414900
mov edi, dword [ebx + 4]
test edi, edi
je 0x422249
mov esi, 0x5353e0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x5353a0
jbe 0x422284
mov ecx, dword [ebx]
cmp ecx, 0x5353a0
ja 0x422284
mov esi, 0x5353a0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x422276
push 1
mov ecx, ebx
call fcn.00414900
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x4222a5
jmp 0x42229e
cmp eax, dword [ebx + 8]
jne 0x422292
push 1
mov ecx, ebx
call fcn.00414900
mov edi, dword [ebx + 4]
test edi, edi
je 0x4222a5
mov esi, 0x5353a0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x535360
jbe 0x4222e0
mov ecx, dword [ebx]
cmp ecx, 0x535360
ja 0x4222e0
mov esi, 0x535360
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x4222d2
push 1
mov ecx, ebx
call fcn.00414900
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x422301
jmp 0x4222fa
cmp eax, dword [ebx + 8]
jne 0x4222ee
push 1
mov ecx, ebx
call fcn.00414900
mov edi, dword [ebx + 4]
test edi, edi
je 0x422301
mov esi, 0x535360
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x535320
jbe 0x42233c
mov ecx, dword [ebx]
cmp ecx, 0x535320
ja 0x42233c
mov esi, 0x535320
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x42232e
push 1
mov ecx, ebx
call fcn.00414900
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x42235d
jmp 0x422356
cmp eax, dword [ebx + 8]
jne 0x42234a
push 1
mov ecx, ebx
call fcn.00414900
mov edi, dword [ebx + 4]
test edi, edi
je 0x42235d
mov esi, 0x535320
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x5352e0
jbe 0x422398
mov ecx, dword [ebx]
cmp ecx, 0x5352e0
ja 0x422398
mov esi, 0x5352e0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x42238a
push 1
mov ecx, ebx
call fcn.00414900
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x4223b9
jmp 0x4223b2
cmp eax, dword [ebx + 8]
jne 0x4223a6
push 1
mov ecx, ebx
call fcn.00414900
mov edi, dword [ebx + 4]
test edi, edi
je 0x4223b9
mov esi, 0x5352e0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x5352a0
jbe 0x4223f4
mov ecx, dword [ebx]
cmp ecx, 0x5352a0
ja 0x4223f4
mov esi, 0x5352a0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x4223e6
push 1
mov ecx, ebx
call fcn.00414900
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x422415
jmp 0x42240e
cmp eax, dword [ebx + 8]
jne 0x422402
push 1
mov ecx, ebx
call fcn.00414900
mov edi, dword [ebx + 4]
test edi, edi
je 0x422415
mov esi, 0x5352a0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x535260
jbe 0x422450
mov ecx, dword [ebx]
cmp ecx, 0x535260
ja 0x422450
mov esi, 0x535260
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x422442
push 1
mov ecx, ebx
call fcn.00414900
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x422471
jmp 0x42246a
cmp eax, dword [ebx + 8]
jne 0x42245e
push 1
mov ecx, ebx
call fcn.00414900
mov edi, dword [ebx + 4]
test edi, edi
je 0x422471
mov esi, 0x535260
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x535220
jbe 0x4224ac
mov ecx, dword [ebx]
cmp ecx, 0x535220
ja 0x4224ac
mov esi, 0x535220
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x42249e
push 1
mov ecx, ebx
call fcn.00414900
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x4224cd
jmp 0x4224c6
cmp eax, dword [ebx + 8]
jne 0x4224ba
push 1
mov ecx, ebx
call fcn.00414900
mov edi, dword [ebx + 4]
test edi, edi
je 0x4224cd
mov esi, 0x535220
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x5351e0
jbe 0x422508
mov ecx, dword [ebx]
cmp ecx, 0x5351e0
ja 0x422508
mov esi, 0x5351e0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x4224fa
push 1
mov ecx, ebx
call fcn.00414900
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x422529
jmp 0x422522
cmp eax, dword [ebx + 8]
jne 0x422516
push 1
mov ecx, ebx
call fcn.00414900
mov edi, dword [ebx + 4]
test edi, edi
je 0x422529
mov esi, 0x5351e0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x5351a0
jbe 0x422564
mov ecx, dword [ebx]
cmp ecx, 0x5351a0
ja 0x422564
mov esi, 0x5351a0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x422556
push 1
mov ecx, ebx
call fcn.00414900
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x422585
jmp 0x42257e
cmp eax, dword [ebx + 8]
jne 0x422572
push 1
mov ecx, ebx
call fcn.00414900
mov edi, dword [ebx + 4]
test edi, edi
je 0x422585
mov esi, 0x5351a0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x535160
jbe 0x4225c0
mov ecx, dword [ebx]
cmp ecx, 0x535160
ja 0x4225c0
mov esi, 0x535160
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x4225b2
push 1
mov ecx, ebx
call fcn.00414900
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x4225e1
jmp 0x4225da
cmp eax, dword [ebx + 8]
jne 0x4225ce
push 1
mov ecx, ebx
call fcn.00414900
mov edi, dword [ebx + 4]
test edi, edi
je 0x4225e1
mov esi, 0x535160
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x535120
jbe 0x42261c
mov ecx, dword [ebx]
cmp ecx, 0x535120
ja 0x42261c
mov esi, 0x535120
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x42260e
push 1
mov ecx, ebx
call fcn.00414900
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x42263d
jmp 0x422636
cmp eax, dword [ebx + 8]
jne 0x42262a
push 1
mov ecx, ebx
call fcn.00414900
mov edi, dword [ebx + 4]
test edi, edi
je 0x42263d
mov esi, 0x535120
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x5350e0
jbe 0x422678
mov ecx, dword [ebx]
cmp ecx, 0x5350e0
ja 0x422678
mov esi, 0x5350e0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x42266a
push 1
mov ecx, ebx
call fcn.00414900
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x422699
jmp 0x422692
cmp eax, dword [ebx + 8]
jne 0x422686
push 1
mov ecx, ebx
call fcn.00414900
mov edi, dword [ebx + 4]
test edi, edi
je 0x422699
mov esi, 0x5350e0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
add dword [ebx + 4], 0x40
mov eax, dword [ebx + 4]
cmp eax, 0x5350a0
jbe 0x4226d4
mov ecx, dword [ebx]
cmp ecx, 0x5350a0
ja 0x4226d4
mov esi, 0x5350a0
sub esi, ecx
cmp eax, dword [ebx + 8]
jne 0x4226c6
push 1
mov ecx, ebx
call fcn.00414900
mov edi, dword [ebx + 4]
and esi, 0xffffffc0
add esi, dword [ebx]
test edi, edi
je 0x4226f5
jmp 0x4226ee
cmp eax, dword [ebx + 8]
jne 0x4226e2
push 1
mov ecx, ebx
call fcn.00414900
mov edi, dword [ebx + 4]
test edi, edi
je 0x4226f5
mov esi, 0x5350a0
mov ecx, 0x10
rep movsd dword es:[edi], dword [esi]
mov edi, dword [sym.imp.KERNEL32.dll_CreateEventW]
add dword [ebx + 4], 0x40
push 0
push 0
push 0
push 0
call edi
mov esi, dword [ebp - 0x10]
push 0
push 0
push 0
push 0
mov dword [esi + 0x1c], eax
call edi
mov dword [esi + 0x20], eax
lea eax, [esi + 0x38]
push eax
push 0
push esi
push 0x423d90
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esi + 0x18], eax
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4