Function at 0x44ed10
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x599a48
mov eax, dword fs:[0]
push eax
push ecx
push esi
push edi
mov eax, dword [0x62cf50]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x10], edi
call fcn.0041bd80
mov eax, dword [ebp + 8]
mov dword [edi + 0x10], eax
lea eax, [edi + 0x38]
push eax
mov dword [ebp - 4], 0
mov dword [edi], vtable.acrobat_broker::SandboxClipboardDispatcher.0
mov dword [edi + 0x14], 0
mov dword [edi + 0x34], 0
mov byte [edi + 0x50], 0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov eax, dword [edi + 8]
cmp eax, dword [edi + 0xc]
je 0x44edbf
movups xmm0, xmmword [0x5eba60]
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x5eba70]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [0x5eba80]
movups xmmword [eax + 0x20], xmm0
movups xmm0, xmmword [0x5eba90]
movups xmmword [eax + 0x30], xmm0
movups xmm0, xmmword [0x5ebaa0]
movups xmmword [eax + 0x40], xmm0
movq xmm0, qword [0x5ebab0]
movq qword [eax + 0x50], xmm0
add dword [edi + 8], 0x58
jmp 0x44edcd
push 0x5eba60
push eax
lea ecx, [edi + 4]
call fcn.0041c300
mov eax, dword [edi + 8]
cmp eax, dword [edi + 0xc]
je 0x44ee1e
movups xmm0, xmmword [0x5ebab8]
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x5ebac8]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [0x5ebad8]
movups xmmword [eax + 0x20], xmm0
movups xmm0, xmmword [0x5ebae8]
movups xmmword [eax + 0x30], xmm0
movups xmm0, xmmword [0x5ebaf8]
movups xmmword [eax + 0x40], xmm0
movq xmm0, qword [0x5ebb08]
movq qword [eax + 0x50], xmm0
add dword [edi + 8], 0x58
jmp 0x44ee2c
push 0x5ebab8
push eax
lea ecx, [edi + 4]
call fcn.0041c300
mov eax, dword [edi + 8]
cmp eax, dword [edi + 0xc]
je 0x44ee7d
movups xmm0, xmmword [0x5ebb10]
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x5ebb20]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [0x5ebb30]
movups xmmword [eax + 0x20], xmm0
movups xmm0, xmmword [0x5ebb40]
movups xmmword [eax + 0x30], xmm0
movups xmm0, xmmword [0x5ebb50]
movups xmmword [eax + 0x40], xmm0
movq xmm0, qword [0x5ebb60]
movq qword [eax + 0x50], xmm0
add dword [edi + 8], 0x58
jmp 0x44ee8b
push 0x5ebb10
push eax
lea ecx, [edi + 4]
call fcn.0041c300
mov eax, dword [edi + 8]
cmp eax, dword [edi + 0xc]
je 0x44eedc
movups xmm0, xmmword [0x5ebb68]
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x5ebb78]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [0x5ebb88]
movups xmmword [eax + 0x20], xmm0
movups xmm0, xmmword [0x5ebb98]
movups xmmword [eax + 0x30], xmm0
movups xmm0, xmmword [0x5ebba8]
movups xmmword [eax + 0x40], xmm0
movq xmm0, qword [0x5ebbb8]
movq qword [eax + 0x50], xmm0
add dword [edi + 8], 0x58
jmp 0x44eeea
push 0x5ebb68
push eax
lea ecx, [edi + 4]
call fcn.0041c300
mov eax, dword [edi + 8]
cmp eax, dword [edi + 0xc]
je 0x44ef3b
movups xmm0, xmmword [0x5ebbc0]
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x5ebbd0]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [0x5ebbe0]
movups xmmword [eax + 0x20], xmm0
movups xmm0, xmmword [0x5ebbf0]
movups xmmword [eax + 0x30], xmm0
movups xmm0, xmmword [0x5ebc00]
movups xmmword [eax + 0x40], xmm0
movq xmm0, qword [0x5ebc10]
movq qword [eax + 0x50], xmm0
add dword [edi + 8], 0x58
jmp 0x44ef49
push 0x5ebbc0
push eax
lea ecx, [edi + 4]
call fcn.0041c300
mov eax, dword [edi + 8]
cmp eax, dword [edi + 0xc]
je 0x44ef9a
movups xmm0, xmmword [0x5ebc18]
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x5ebc28]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [0x5ebc38]
movups xmmword [eax + 0x20], xmm0
movups xmm0, xmmword [0x5ebc48]
movups xmmword [eax + 0x30], xmm0
movups xmm0, xmmword [0x5ebc58]
movups xmmword [eax + 0x40], xmm0
movq xmm0, qword [0x5ebc68]
movq qword [eax + 0x50], xmm0
add dword [edi + 8], 0x58
jmp 0x44efa8
push 0x5ebc18
push eax
lea ecx, [edi + 4]
call fcn.0041c300
mov eax, dword [edi + 8]
cmp eax, dword [edi + 0xc]
je 0x44eff9
movups xmm0, xmmword [0x5ebc70]
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x5ebc80]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [0x5ebc90]
movups xmmword [eax + 0x20], xmm0
movups xmm0, xmmword [0x5ebca0]
movups xmmword [eax + 0x30], xmm0
movups xmm0, xmmword [0x5ebcb0]
movups xmmword [eax + 0x40], xmm0
movq xmm0, qword [0x5ebcc0]
movq qword [eax + 0x50], xmm0
add dword [edi + 8], 0x58
jmp 0x44f007
push 0x5ebc70
push eax
lea ecx, [edi + 4]
call fcn.0041c300
mov eax, dword [edi + 8]
cmp eax, dword [edi + 0xc]
je 0x44f058
movups xmm0, xmmword [0x5ebcc8]
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x5ebcd8]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [0x5ebce8]
movups xmmword [eax + 0x20], xmm0
movups xmm0, xmmword [0x5ebcf8]
movups xmmword [eax + 0x30], xmm0
movups xmm0, xmmword [0x5ebd08]
movups xmmword [eax + 0x40], xmm0
movq xmm0, qword [0x5ebd18]
movq qword [eax + 0x50], xmm0
add dword [edi + 8], 0x58
jmp 0x44f066
push 0x5ebcc8
push eax
lea ecx, [edi + 4]
call fcn.0041c300
mov eax, dword [edi + 8]
cmp eax, dword [edi + 0xc]
je 0x44f0b7
movups xmm0, xmmword [0x5ebd20]
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x5ebd30]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [0x5ebd40]
movups xmmword [eax + 0x20], xmm0
movups xmm0, xmmword [0x5ebd50]
movups xmmword [eax + 0x30], xmm0
movups xmm0, xmmword [0x5ebd60]
movups xmmword [eax + 0x40], xmm0
movq xmm0, qword [0x5ebd70]
movq qword [eax + 0x50], xmm0
add dword [edi + 8], 0x58
jmp 0x44f0c5
push 0x5ebd20
push eax
lea ecx, [edi + 4]
call fcn.0041c300
mov eax, dword [edi + 8]
cmp eax, dword [edi + 0xc]
je 0x44f116
movups xmm0, xmmword [0x5ebd78]
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x5ebd88]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [0x5ebd98]
movups xmmword [eax + 0x20], xmm0
movups xmm0, xmmword [0x5ebda8]
movups xmmword [eax + 0x30], xmm0
movups xmm0, xmmword [0x5ebdb8]
movups xmmword [eax + 0x40], xmm0
movq xmm0, qword [0x5ebdc8]
movq qword [eax + 0x50], xmm0
add dword [edi + 8], 0x58
jmp 0x44f124
push 0x5ebd78
push eax
lea ecx, [edi + 4]
call fcn.0041c300
mov eax, dword [edi + 8]
cmp eax, dword [edi + 0xc]
je 0x44f175
movups xmm0, xmmword [0x5ebdd0]
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x5ebde0]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [0x5ebdf0]
movups xmmword [eax + 0x20], xmm0
movups xmm0, xmmword [0x5ebe00]
movups xmmword [eax + 0x30], xmm0
movups xmm0, xmmword [0x5ebe10]
movups xmmword [eax + 0x40], xmm0
movq xmm0, qword [0x5ebe20]
movq qword [eax + 0x50], xmm0
add dword [edi + 8], 0x58
jmp 0x44f183
push 0x5ebdd0
push eax
lea ecx, [edi + 4]
call fcn.0041c300
mov eax, dword [edi + 8]
cmp eax, dword [edi + 0xc]
je 0x44f1d4
movups xmm0, xmmword [0x5ebe28]
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x5ebe38]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [0x5ebe48]
movups xmmword [eax + 0x20], xmm0
movups xmm0, xmmword [0x5ebe58]
movups xmmword [eax + 0x30], xmm0
movups xmm0, xmmword [0x5ebe68]
movups xmmword [eax + 0x40], xmm0
movq xmm0, qword [0x5ebe78]
movq qword [eax + 0x50], xmm0
add dword [edi + 8], 0x58
jmp 0x44f1e2
push 0x5ebe28
push eax
lea ecx, [edi + 4]
call fcn.0041c300
mov eax, dword [edi + 8]
cmp eax, dword [edi + 0xc]
je 0x44f233
movups xmm0, xmmword [0x5ebe80]
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x5ebe90]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [0x5ebea0]
movups xmmword [eax + 0x20], xmm0
movups xmm0, xmmword [0x5ebeb0]
movups xmmword [eax + 0x30], xmm0
movups xmm0, xmmword [0x5ebec0]
movups xmmword [eax + 0x40], xmm0
movq xmm0, qword [0x5ebed0]
movq qword [eax + 0x50], xmm0
add dword [edi + 8], 0x58
jmp 0x44f241
push 0x5ebe80
push eax
lea ecx, [edi + 4]
call fcn.0041c300
mov eax, dword [edi + 8]
cmp eax, dword [edi + 0xc]
je 0x44f292
movups xmm0, xmmword [0x5ebed8]
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x5ebee8]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [0x5ebef8]
movups xmmword [eax + 0x20], xmm0
movups xmm0, xmmword [0x5ebf08]
movups xmmword [eax + 0x30], xmm0
movups xmm0, xmmword [0x5ebf18]
movups xmmword [eax + 0x40], xmm0
movq xmm0, qword [0x5ebf28]
movq qword [eax + 0x50], xmm0
add dword [edi + 8], 0x58
jmp 0x44f2a0
push 0x5ebed8
push eax
lea ecx, [edi + 4]
call fcn.0041c300
mov eax, dword [edi + 8]
cmp eax, dword [edi + 0xc]
je 0x44f2f1
movups xmm0, xmmword [0x5ebf30]
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x5ebf40]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [0x5ebf50]
movups xmmword [eax + 0x20], xmm0
movups xmm0, xmmword [0x5ebf60]
movups xmmword [eax + 0x30], xmm0
movups xmm0, xmmword [0x5ebf70]
movups xmmword [eax + 0x40], xmm0
movq xmm0, qword [0x5ebf80]
movq qword [eax + 0x50], xmm0
add dword [edi + 8], 0x58
jmp 0x44f2ff
push 0x5ebf30
push eax
lea ecx, [edi + 4]
call fcn.0041c300
mov eax, dword [edi + 8]
cmp eax, dword [edi + 0xc]
je 0x44f350
movups xmm0, xmmword [0x5ebf88]
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x5ebf98]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [0x5ebfa8]
movups xmmword [eax + 0x20], xmm0
movups xmm0, xmmword [0x5ebfb8]
movups xmmword [eax + 0x30], xmm0
movups xmm0, xmmword [0x5ebfc8]
movups xmmword [eax + 0x40], xmm0
movq xmm0, qword [0x5ebfd8]
movq qword [eax + 0x50], xmm0
add dword [edi + 8], 0x58
jmp 0x44f35e
push 0x5ebf88
push eax
lea ecx, [edi + 4]
call fcn.0041c300
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
push 0
push 0
push 0
push 0
mov dword [edi + 0x18], eax
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [edi + 0x1c], eax
lea eax, [edi + 0x34]
push eax
push 0
push edi
push 0x4683b0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x5ebfe0
mov dword [edi + 0x14], eax
call dword [sym.imp.USER32.dll_RegisterClipboardFormatW]
push 0x5ebfec
call dword [sym.imp.USER32.dll_RegisterClipboardFormatW]
push 0x5ec010
call dword [sym.imp.USER32.dll_RegisterClipboardFormatW]
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4