Function at 0x4560d0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x4c7803
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push ebp
push esi
push edi
mov eax, dword [0x509354]
xor eax, esp
push eax
lea eax, [esp + 0x18]
mov dword fs:[0], eax
mov edi, ecx
mov dword [esp + 0x14], edi
lea esi, [edi + 4]
xor ebx, ebx
mov dword [esi + 4], ebx
mov dword [esi + 8], ebx
mov dword [esi + 0xc], ebx
mov eax, dword [esp + 0x28]
lea ebp, [edi + 0x18]
mov ecx, ebp
mov dword [esp + 0x20], ebx
mov dword [edi], vtable.acrobat_broker::SandboxBrokerServerDispatcher.0
mov dword [edi + 0x14], eax
call fcn.00425b80
mov dword [ebp + 4], eax
mov cl, 1
mov byte [eax + 0x29], cl
mov eax, dword [ebp + 4]
mov dword [eax + 4], eax
mov eax, dword [ebp + 4]
mov dword [eax], eax
mov eax, dword [ebp + 4]
mov dword [eax + 8], eax
mov dword [ebp + 8], ebx
mov byte [esp + 0x20], cl
mov byte [edi + 0x24], bl
mov dword [edi + 0x28], ebx
mov dword [edi + 0x2c], ebx
mov dword [edi + 0xcc], ebx
mov dword [edi + 0xd0], ebx
mov byte [edi + 0xd4], bl
mov ecx, edi
mov dword [0x50cd04], ebx
mov dword [0x50cd08], ebx
call fcn.00452b90
push 0x4ea2c8
mov ecx, esi
call fcn.00428dd0
push 0x4ea28c
mov ecx, esi
call fcn.00428dd0
push 0x4ea250
mov ecx, esi
call fcn.00428dd0
push 0x4ea214
mov ecx, esi
call fcn.00428dd0
push 0x4ea1d8
mov ecx, esi
call fcn.00428dd0
push 0x4ea19c
mov ecx, esi
call fcn.00428dd0
push 0x4ea160
mov ecx, esi
call fcn.00428dd0
push 0x4ea124
mov ecx, esi
call fcn.00428dd0
push 0x4ea0e8
mov ecx, esi
call fcn.00428dd0
push 0x4ea0ac
mov ecx, esi
call fcn.00428dd0
push 0x4ea070
mov ecx, esi
call fcn.00428dd0
push 0x4ea034
mov ecx, esi
call fcn.00428dd0
push 0x4e9ff8
mov ecx, esi
call fcn.00428dd0
push 0x4e9fbc
mov ecx, esi
call fcn.00428dd0
push 0x4e9f80
mov ecx, esi
call fcn.00428dd0
push 0x4e9f44
mov ecx, esi
call fcn.00428dd0
push 0x4e9f08
mov ecx, esi
call fcn.00428dd0
push 0x4e9ecc
mov ecx, esi
call fcn.00428dd0
push 0x4e9e90
mov ecx, esi
call fcn.00428dd0
push 0x4e9e54
mov ecx, esi
call fcn.00428dd0
push 0x4e9e18
mov ecx, esi
call fcn.00428dd0
push 0x4e9ddc
mov ecx, esi
call fcn.00428dd0
push 0x4e9da0
mov ecx, esi
call fcn.00428dd0
push 0x4e9d64
mov ecx, esi
call fcn.00428dd0
push 0x4e9d28
mov ecx, esi
call fcn.00428dd0
push 0x4e9cec
mov ecx, esi
call fcn.00428dd0
push 0x4e9cb0
mov ecx, esi
call fcn.00428dd0
push 0x4e9c74
mov ecx, esi
call fcn.00428dd0
push 0x4e9c38
mov ecx, esi
call fcn.00428dd0
push 0x4e9bfc
mov ecx, esi
call fcn.00428dd0
push 0x4e9bc0
mov ecx, esi
call fcn.00428dd0
push 0x4e9b84
mov ecx, esi
call fcn.00428dd0
push 0x4e9b48
mov ecx, esi
call fcn.00428dd0
push 0x4e9b0c
mov ecx, esi
call fcn.00428dd0
push 0x4e9ad0
mov ecx, esi
call fcn.00428dd0
push 0x4e9a94
mov ecx, esi
call fcn.00428dd0
push 0x4e9a58
mov ecx, esi
call fcn.00428dd0
push 0x4e9a1c
mov ecx, esi
call fcn.00428dd0
push 0x4e99e0
mov ecx, esi
call fcn.00428dd0
push 0x4e99a4
mov ecx, esi
call fcn.00428dd0
push 0x4e9968
mov ecx, esi
call fcn.00428dd0
push 0x4e992c
mov ecx, esi
call fcn.00428dd0
push 0x4e98f0
mov ecx, esi
call fcn.00428dd0
push 0x4e98b4
mov ecx, esi
call fcn.00428dd0
push 0x4e9878
mov ecx, esi
call fcn.00428dd0
push 0x4e983c
mov ecx, esi
call fcn.00428dd0
push 0x4e9800
mov ecx, esi
call fcn.00428dd0
push 0x4e97c4
mov ecx, esi
call fcn.00428dd0
push 0x4e9788
mov ecx, esi
call fcn.00428dd0
push 0x4e974c
mov ecx, esi
call fcn.00428dd0
call fcn.00446560
mov ebp, dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
cmp eax, 3
lea edx, [edi + 0x30]
setle cl
push edx
mov byte [edi + 0x24], cl
call ebp
call fcn.00446560
cmp eax, 2
jle 0x456404
mov eax, dword [0x50bcf8]
cmp byte [eax + 0x20], bl
je 0x456404
push 0x4e9710
mov ecx, esi
call fcn.00428dd0
mov ecx, dword [0x50bcf8]
cmp byte [ecx + 0x20], bl
je 0x456427
push 0x4e96d4
mov ecx, esi
call fcn.00428dd0
push 0x4e9698
mov ecx, esi
call fcn.00428dd0
push 0x4e965c
mov ecx, esi
call fcn.00428dd0
lea edx, [edi + 0x48]
push edx
call ebp
lea eax, [edi + 0x60]
push eax
mov dword [edi + 0xc4], ebx
mov dword [edi + 0xc8], ebx
call ebp
lea ecx, [edi + 0x78]
push ecx
call ebp
lea edx, [edi + 0x90]
push edx
call ebp
lea eax, [edi + 0xa8]
push eax
call ebp
mov byte [edi + 0xc0], bl
mov eax, edi
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 4