Function at 0x46c190
Capabilities:
Access peb ldr_data
Get process heap flags

Disassembly:
push 0xffffffffffffffff
push 0x4c85f9
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push ebp
push esi
push edi
mov eax, dword [0x509354]
xor eax, esp
push eax
lea eax, [esp + 0x20]
mov dword fs:[0], eax
mov edi, ecx
mov dword [esp + 0x14], edi
lea esi, [edi + 4]
xor ebx, ebx
mov dword [esi + 4], ebx
mov dword [esi + 8], ebx
mov dword [esi + 0xc], ebx
mov eax, dword [esp + 0x30]
lea ebp, [edi + 0x18]
mov ecx, ebp
mov dword [esp + 0x28], ebx
mov dword [edi], vtable.acrobat_broker::SandboxCryptDispatcher.0
mov dword [edi + 0x14], eax
call fcn.004628a0
mov dword [ebp + 4], eax
mov byte [eax + 0x15], 1
mov eax, dword [ebp + 4]
mov dword [eax + 4], eax
mov eax, dword [ebp + 4]
mov dword [eax], eax
mov eax, dword [ebp + 4]
mov dword [eax + 8], eax
mov dword [ebp + 8], ebx
lea ebp, [edi + 0x3c]
mov ecx, ebp
mov byte [esp + 0x28], 1
call fcn.00469770
mov dword [ebp + 4], eax
mov byte [eax + 0x11], 1
mov eax, dword [ebp + 4]
mov dword [eax + 4], eax
mov eax, dword [ebp + 4]
mov dword [eax], eax
mov eax, dword [ebp + 4]
mov dword [eax + 8], eax
mov dword [ebp + 8], ebx
lea ebx, [edi + 0x48]
mov ecx, ebx
mov byte [esp + 0x28], 2
call fcn.00407a07
mov dword [ebx + 4], eax
mov byte [eax + 0x15], 1
mov eax, dword [ebx + 4]
mov dword [eax + 4], eax
mov eax, dword [ebx + 4]
mov dword [eax], eax
mov eax, dword [ebx + 4]
mov dword [eax + 8], eax
mov dword [ebx + 8], 0
lea ecx, [edi + 0x24]
push ecx
mov byte [esp + 0x2c], 3
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x4edb70
mov ecx, esi
call fcn.00428dd0
push 0x4edb34
mov ecx, esi
call fcn.00428dd0
push 0x4edaf8
mov ecx, esi
call fcn.00428dd0
push 0x4edabc
mov ecx, esi
call fcn.00428dd0
push 0x4eda80
mov ecx, esi
call fcn.00428dd0
push 0x4eda44
mov ecx, esi
call fcn.00428dd0
push 0x4eda08
mov ecx, esi
call fcn.00428dd0
push 0x4ed9cc
mov ecx, esi
call fcn.00428dd0
push 0x4ed990
mov ecx, esi
call fcn.00428dd0
push 0x4ed954
mov ecx, esi
call fcn.00428dd0
push 0x4ed918
mov ecx, esi
call fcn.00428dd0
push 0x4ed8dc
mov ecx, esi
call fcn.00428dd0
push 0x4ed8a0
mov ecx, esi
call fcn.00428dd0
push 0x4ed864
mov ecx, esi
call fcn.00428dd0
push 0x4ed828
mov ecx, esi
call fcn.00428dd0
push 0x4ed7ec
mov ecx, esi
call fcn.00428dd0
push 0x4ed7b0
mov ecx, esi
call fcn.00428dd0
push 0x4ed774
mov ecx, esi
call fcn.00428dd0
push 0x4ed738
mov ecx, esi
call fcn.00428dd0
push 0x4ed6fc
mov ecx, esi
call fcn.00428dd0
push 0x4ed6c0
mov ecx, esi
call fcn.00428dd0
push 0x4ed684
mov ecx, esi
call fcn.00428dd0
push 0x4ed648
mov ecx, esi
call fcn.00428dd0
push 0x4ed60c
mov ecx, esi
call fcn.00428dd0
push 0x4ed5d0
mov ecx, esi
call fcn.00428dd0
push 0x4ed594
mov ecx, esi
call fcn.00428dd0
push 0x4ed558
mov ecx, esi
call fcn.00428dd0
push 0x4ed51c
mov ecx, esi
call fcn.00428dd0
push 0x4ed4e0
mov ecx, esi
call fcn.00428dd0
push 0x4ed4a4
mov ecx, esi
call fcn.00428dd0
push 0x4ed468
mov ecx, esi
call fcn.00428dd0
push 0x4ed42c
mov ecx, esi
call fcn.00428dd0
push 0x4ed3f0
mov ecx, esi
call fcn.00428dd0
push 0x4ed3b4
mov ecx, esi
call fcn.00428dd0
push 0x4ed378
mov ecx, esi
call fcn.00428dd0
push 0x4ed33c
mov ecx, esi
call fcn.00428dd0
push 0x4ed300
mov ecx, esi
call fcn.00428dd0
push 0x4ed2c4
mov ecx, esi
call fcn.00428dd0
push 0x4ed288
mov ecx, esi
call fcn.00428dd0
lea edx, [esp + 0x30]
push edx
lea eax, [esp + 0x1c]
push eax
mov ecx, ebp
mov dword [esp + 0x38], 1
call fcn.0046a6e0
lea ecx, [esp + 0x30]
push ecx
lea edx, [esp + 0x1c]
push edx
mov ecx, ebp
mov dword [esp + 0x38], 2
call fcn.0046a6e0
mov eax, edi
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x18
ret 4