Function at 0x456250
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push 0xffffffffffffffff
push 0x4c84c3
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push ebp
push esi
push edi
mov eax, dword [0x50b384]
xor eax, esp
push eax
lea eax, [esp + 0x18]
mov dword fs:[0], eax
mov edi, ecx
mov dword [esp + 0x14], edi
lea esi, [edi + 4]
xor ebx, ebx
mov dword [esi + 4], ebx
mov dword [esi + 8], ebx
mov dword [esi + 0xc], ebx
mov eax, dword [esp + 0x28]
lea ebp, [edi + 0x18]
mov ecx, ebp
mov dword [esp + 0x20], ebx
mov dword [edi], vtable.acrobat_broker::SandboxBrokerServerDispatcher.0
mov dword [edi + 0x14], eax
call fcn.00426160
mov dword [ebp + 4], eax
mov cl, 1
mov byte [eax + 0x29], cl
mov eax, dword [ebp + 4]
mov dword [eax + 4], eax
mov eax, dword [ebp + 4]
mov dword [eax], eax
mov eax, dword [ebp + 4]
mov dword [eax + 8], eax
mov dword [ebp + 8], ebx
mov byte [esp + 0x20], cl
mov byte [edi + 0x24], bl
mov dword [edi + 0x28], ebx
mov dword [edi + 0x2c], ebx
mov dword [edi + 0xcc], ebx
mov dword [edi + 0xd0], ebx
mov byte [edi + 0xd4], bl
mov ecx, edi
mov dword [0x50ed2c], ebx
call fcn.00452d10
push 0x4eb214
mov ecx, esi
call fcn.00429550
push 0x4eb1d8
mov ecx, esi
call fcn.00429550
push 0x4eb19c
mov ecx, esi
call fcn.00429550
push 0x4eb160
mov ecx, esi
call fcn.00429550
push 0x4eb124
mov ecx, esi
call fcn.00429550
push 0x4eb0e8
mov ecx, esi
call fcn.00429550
push 0x4eb0ac
mov ecx, esi
call fcn.00429550
push 0x4eb070
mov ecx, esi
call fcn.00429550
push 0x4eb034
mov ecx, esi
call fcn.00429550
push 0x4eaff8
mov ecx, esi
call fcn.00429550
push 0x4eafbc
mov ecx, esi
call fcn.00429550
push 0x4eaf80
mov ecx, esi
call fcn.00429550
push 0x4eaf44
mov ecx, esi
call fcn.00429550
push 0x4eaf08
mov ecx, esi
call fcn.00429550
push 0x4eaecc
mov ecx, esi
call fcn.00429550
push 0x4eae90
mov ecx, esi
call fcn.00429550
push 0x4eae54
mov ecx, esi
call fcn.00429550
push 0x4eae18
mov ecx, esi
call fcn.00429550
push 0x4eaddc
mov ecx, esi
call fcn.00429550
push 0x4eada0
mov ecx, esi
call fcn.00429550
push 0x4ead64
mov ecx, esi
call fcn.00429550
push 0x4ead28
mov ecx, esi
call fcn.00429550
push 0x4eacec
mov ecx, esi
call fcn.00429550
push 0x4eacb0
mov ecx, esi
call fcn.00429550
push 0x4eac74
mov ecx, esi
call fcn.00429550
push 0x4eac38
mov ecx, esi
call fcn.00429550
push 0x4eabfc
mov ecx, esi
call fcn.00429550
push 0x4eabc0
mov ecx, esi
call fcn.00429550
push 0x4eab84
mov ecx, esi
call fcn.00429550
push 0x4eab48
mov ecx, esi
call fcn.00429550
push 0x4eab0c
mov ecx, esi
call fcn.00429550
push 0x4eaad0
mov ecx, esi
call fcn.00429550
push 0x4eaa94
mov ecx, esi
call fcn.00429550
push 0x4eaa58
mov ecx, esi
call fcn.00429550
push 0x4eaa1c
mov ecx, esi
call fcn.00429550
push 0x4ea9e0
mov ecx, esi
call fcn.00429550
push 0x4ea9a4
mov ecx, esi
call fcn.00429550
push 0x4ea968
mov ecx, esi
call fcn.00429550
push 0x4ea92c
mov ecx, esi
call fcn.00429550
push 0x4ea8f0
mov ecx, esi
call fcn.00429550
push 0x4ea8b4
mov ecx, esi
call fcn.00429550
push 0x4ea878
mov ecx, esi
call fcn.00429550
push 0x4ea83c
mov ecx, esi
call fcn.00429550
push 0x4ea800
mov ecx, esi
call fcn.00429550
push 0x4ea7c4
mov ecx, esi
call fcn.00429550
push 0x4ea788
mov ecx, esi
call fcn.00429550
push 0x4ea74c
mov ecx, esi
call fcn.00429550
push 0x4ea710
mov ecx, esi
call fcn.00429550
push 0x4ea6d4
mov ecx, esi
call fcn.00429550
call fcn.00446db0
mov ebp, dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
cmp eax, 3
lea edx, [edi + 0x30]
setle cl
push edx
mov byte [edi + 0x24], cl
call ebp
call fcn.00446db0
cmp eax, 2
jle 0x456572
mov eax, dword [0x50dd18]
cmp byte [eax + 0x20], bl
je 0x456572
push 0x4ea698
mov ecx, esi
call fcn.00429550
mov ecx, dword [0x50dd18]
cmp byte [ecx + 0x20], bl
je 0x456595
push 0x4ea65c
mov ecx, esi
call fcn.00429550
push 0x4ea620
mov ecx, esi
call fcn.00429550
push 0x4ea5e4
mov ecx, esi
call fcn.00429550
lea edx, [edi + 0x48]
push edx
call ebp
lea eax, [edi + 0x60]
push eax
mov dword [edi + 0xc4], ebx
mov dword [edi + 0xc8], ebx
call ebp
lea ecx, [edi + 0x78]
push ecx
call ebp
lea edx, [edi + 0x90]
push edx
call ebp
lea eax, [edi + 0xa8]
push eax
call ebp
mov byte [edi + 0xc0], bl
mov eax, edi
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret 4