Function at 0x4311d0
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x555bb8
mov eax, dword fs:[0]
push eax
push ecx
push esi
push edi
mov eax, dword [0x5c7cec]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x10], edi
mov dword [edi + 4], 0
mov dword [edi + 8], 0
mov dword [edi + 0xc], 0
mov eax, dword [ebp + 8]
mov dword [edi + 0x10], eax
lea eax, [edi + 0x38]
push eax
mov dword [ebp - 4], 0
mov dword [edi], vtable.acrobat_broker::SandboxClipboardDispatcher.0
mov dword [edi + 0x14], 0
mov dword [edi + 0x34], 0
mov byte [edi + 0x50], 0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov ecx, dword [edi + 8]
cmp dword [edi + 0xc], ecx
je 0x43128c
movups xmm0, xmmword [0x594968]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x594978]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x594988]
movups xmmword [ecx + 0x20], xmm0
movups xmm0, xmmword [0x594998]
movups xmmword [ecx + 0x30], xmm0
movq xmm0, qword [0x5949a8]
movq qword [ecx + 0x40], xmm0
mov eax, dword [0x5949b0]
mov dword [ecx + 0x48], eax
add dword [edi + 8], 0x4c
jmp 0x43129a
push 0x594968
push ecx
lea ecx, [edi + 4]
call fcn.004192e0
mov ecx, dword [edi + 8]
cmp dword [edi + 0xc], ecx
je 0x4312e8
movups xmm0, xmmword [0x5949b8]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x5949c8]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x5949d8]
movups xmmword [ecx + 0x20], xmm0
movups xmm0, xmmword [0x5949e8]
movups xmmword [ecx + 0x30], xmm0
movq xmm0, qword [0x5949f8]
movq qword [ecx + 0x40], xmm0
mov eax, dword [0x594a00]
mov dword [ecx + 0x48], eax
add dword [edi + 8], 0x4c
jmp 0x4312f6
push 0x5949b8
push ecx
lea ecx, [edi + 4]
call fcn.004192e0
mov ecx, dword [edi + 8]
cmp dword [edi + 0xc], ecx
je 0x431344
movups xmm0, xmmword [0x594a08]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x594a18]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x594a28]
movups xmmword [ecx + 0x20], xmm0
movups xmm0, xmmword [0x594a38]
movups xmmword [ecx + 0x30], xmm0
movq xmm0, qword [0x594a48]
movq qword [ecx + 0x40], xmm0
mov eax, dword [0x594a50]
mov dword [ecx + 0x48], eax
add dword [edi + 8], 0x4c
jmp 0x431352
push 0x594a08
push ecx
lea ecx, [edi + 4]
call fcn.004192e0
mov ecx, dword [edi + 8]
cmp dword [edi + 0xc], ecx
je 0x4313a0
movups xmm0, xmmword [0x594a58]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x594a68]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x594a78]
movups xmmword [ecx + 0x20], xmm0
movups xmm0, xmmword [0x594a88]
movups xmmword [ecx + 0x30], xmm0
movq xmm0, qword [0x594a98]
movq qword [ecx + 0x40], xmm0
mov eax, dword [0x594aa0]
mov dword [ecx + 0x48], eax
add dword [edi + 8], 0x4c
jmp 0x4313ae
push 0x594a58
push ecx
lea ecx, [edi + 4]
call fcn.004192e0
mov ecx, dword [edi + 8]
cmp dword [edi + 0xc], ecx
je 0x4313fc
movups xmm0, xmmword [0x594aa8]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x594ab8]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x594ac8]
movups xmmword [ecx + 0x20], xmm0
movups xmm0, xmmword [0x594ad8]
movups xmmword [ecx + 0x30], xmm0
movq xmm0, qword [0x594ae8]
movq qword [ecx + 0x40], xmm0
mov eax, dword [0x594af0]
mov dword [ecx + 0x48], eax
add dword [edi + 8], 0x4c
jmp 0x43140a
push 0x594aa8
push ecx
lea ecx, [edi + 4]
call fcn.004192e0
mov ecx, dword [edi + 8]
cmp dword [edi + 0xc], ecx
je 0x431458
movups xmm0, xmmword [0x594af8]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x594b08]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x594b18]
movups xmmword [ecx + 0x20], xmm0
movups xmm0, xmmword [0x594b28]
movups xmmword [ecx + 0x30], xmm0
movq xmm0, qword [0x594b38]
movq qword [ecx + 0x40], xmm0
mov eax, dword [0x594b40]
mov dword [ecx + 0x48], eax
add dword [edi + 8], 0x4c
jmp 0x431466
push 0x594af8
push ecx
lea ecx, [edi + 4]
call fcn.004192e0
mov ecx, dword [edi + 8]
cmp dword [edi + 0xc], ecx
je 0x4314b4
movups xmm0, xmmword [0x594b48]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x594b58]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x594b68]
movups xmmword [ecx + 0x20], xmm0
movups xmm0, xmmword [0x594b78]
movups xmmword [ecx + 0x30], xmm0
movq xmm0, qword [0x594b88]
movq qword [ecx + 0x40], xmm0
mov eax, dword [0x594b90]
mov dword [ecx + 0x48], eax
add dword [edi + 8], 0x4c
jmp 0x4314c2
push 0x594b48
push ecx
lea ecx, [edi + 4]
call fcn.004192e0
mov ecx, dword [edi + 8]
cmp dword [edi + 0xc], ecx
je 0x431510
movups xmm0, xmmword [0x594b98]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x594ba8]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x594bb8]
movups xmmword [ecx + 0x20], xmm0
movups xmm0, xmmword [0x594bc8]
movups xmmword [ecx + 0x30], xmm0
movq xmm0, qword [0x594bd8]
movq qword [ecx + 0x40], xmm0
mov eax, dword [0x594be0]
mov dword [ecx + 0x48], eax
add dword [edi + 8], 0x4c
jmp 0x43151e
push 0x594b98
push ecx
lea ecx, [edi + 4]
call fcn.004192e0
mov ecx, dword [edi + 8]
cmp dword [edi + 0xc], ecx
je 0x43156c
movups xmm0, xmmword [0x594be8]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x594bf8]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x594c08]
movups xmmword [ecx + 0x20], xmm0
movups xmm0, xmmword [0x594c18]
movups xmmword [ecx + 0x30], xmm0
movq xmm0, qword [0x594c28]
movq qword [ecx + 0x40], xmm0
mov eax, dword [0x594c30]
mov dword [ecx + 0x48], eax
add dword [edi + 8], 0x4c
jmp 0x43157a
push 0x594be8
push ecx
lea ecx, [edi + 4]
call fcn.004192e0
mov ecx, dword [edi + 8]
cmp dword [edi + 0xc], ecx
je 0x4315c8
movups xmm0, xmmword [0x594c38]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x594c48]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x594c58]
movups xmmword [ecx + 0x20], xmm0
movups xmm0, xmmword [0x594c68]
movups xmmword [ecx + 0x30], xmm0
movq xmm0, qword [0x594c78]
movq qword [ecx + 0x40], xmm0
mov eax, dword [0x594c80]
mov dword [ecx + 0x48], eax
add dword [edi + 8], 0x4c
jmp 0x4315d6
push 0x594c38
push ecx
lea ecx, [edi + 4]
call fcn.004192e0
mov ecx, dword [edi + 8]
cmp dword [edi + 0xc], ecx
je 0x431624
movups xmm0, xmmword [0x594c88]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x594c98]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x594ca8]
movups xmmword [ecx + 0x20], xmm0
movups xmm0, xmmword [0x594cb8]
movups xmmword [ecx + 0x30], xmm0
movq xmm0, qword [0x594cc8]
movq qword [ecx + 0x40], xmm0
mov eax, dword [0x594cd0]
mov dword [ecx + 0x48], eax
add dword [edi + 8], 0x4c
jmp 0x431632
push 0x594c88
push ecx
lea ecx, [edi + 4]
call fcn.004192e0
mov ecx, dword [edi + 8]
cmp dword [edi + 0xc], ecx
je 0x431680
movups xmm0, xmmword [0x594cd8]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x594ce8]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x594cf8]
movups xmmword [ecx + 0x20], xmm0
movups xmm0, xmmword [0x594d08]
movups xmmword [ecx + 0x30], xmm0
movq xmm0, qword [0x594d18]
movq qword [ecx + 0x40], xmm0
mov eax, dword [0x594d20]
mov dword [ecx + 0x48], eax
add dword [edi + 8], 0x4c
jmp 0x43168e
push 0x594cd8
push ecx
lea ecx, [edi + 4]
call fcn.004192e0
mov ecx, dword [edi + 8]
cmp dword [edi + 0xc], ecx
je 0x4316dc
movups xmm0, xmmword [0x594d28]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x594d38]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x594d48]
movups xmmword [ecx + 0x20], xmm0
movups xmm0, xmmword [0x594d58]
movups xmmword [ecx + 0x30], xmm0
movq xmm0, qword [0x594d68]
movq qword [ecx + 0x40], xmm0
mov eax, dword [0x594d70]
mov dword [ecx + 0x48], eax
add dword [edi + 8], 0x4c
jmp 0x4316ea
push 0x594d28
push ecx
lea ecx, [edi + 4]
call fcn.004192e0
mov ecx, dword [edi + 8]
cmp dword [edi + 0xc], ecx
je 0x431738
movups xmm0, xmmword [0x594d78]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x594d88]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x594d98]
movups xmmword [ecx + 0x20], xmm0
movups xmm0, xmmword [0x594da8]
movups xmmword [ecx + 0x30], xmm0
movq xmm0, qword [0x594db8]
movq qword [ecx + 0x40], xmm0
mov eax, dword [0x594dc0]
mov dword [ecx + 0x48], eax
add dword [edi + 8], 0x4c
jmp 0x431746
push 0x594d78
push ecx
lea ecx, [edi + 4]
call fcn.004192e0
mov ecx, dword [edi + 8]
cmp dword [edi + 0xc], ecx
je 0x431794
movups xmm0, xmmword [0x594dc8]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x594dd8]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x594de8]
movups xmmword [ecx + 0x20], xmm0
movups xmm0, xmmword [0x594df8]
movups xmmword [ecx + 0x30], xmm0
movq xmm0, qword [0x594e08]
movq qword [ecx + 0x40], xmm0
mov eax, dword [0x594e10]
mov dword [ecx + 0x48], eax
add dword [edi + 8], 0x4c
jmp 0x4317a2
push 0x594dc8
push ecx
lea ecx, [edi + 4]
call fcn.004192e0
mov ecx, dword [edi + 8]
cmp dword [edi + 0xc], ecx
je 0x4317f0
movups xmm0, xmmword [0x594e18]
movups xmmword [ecx], xmm0
movups xmm0, xmmword [0x594e28]
movups xmmword [ecx + 0x10], xmm0
movups xmm0, xmmword [0x594e38]
movups xmmword [ecx + 0x20], xmm0
movups xmm0, xmmword [0x594e48]
movups xmmword [ecx + 0x30], xmm0
movq xmm0, qword [0x594e58]
movq qword [ecx + 0x40], xmm0
mov eax, dword [0x594e60]
mov dword [ecx + 0x48], eax
add dword [edi + 8], 0x4c
jmp 0x4317fe
push 0x594e18
push ecx
lea ecx, [edi + 4]
call fcn.004192e0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
push 0
push 0
push 0
push 0
mov dword [edi + 0x18], eax
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [edi + 0x1c], eax
lea eax, [edi + 0x34]
push eax
push 0
push edi
push 0x453400
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x594e64
mov dword [edi + 0x14], eax
call dword [sym.imp.USER32.dll_RegisterClipboardFormatW]
push 0x594e70
call dword [sym.imp.USER32.dll_RegisterClipboardFormatW]
push 0x594e94
call dword [sym.imp.USER32.dll_RegisterClipboardFormatW]
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4