Function at 0x452320
Capabilities:
Access peb ldr_data
Get kernel32 base address
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x48
mov dword [ebp - 0x1c], esp
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x14], 0x535050
mov esi, ecx
lea eax, [ebp - 0x18]
mov ecx, dword fs:[0]
mov dword [ebp - 0x18], ecx
mov ecx, esi
mov dword fs:[0], eax
call fcn.00414860
mov dword [esi], vtable.acrobat_broker::ExecProcessDispatcher.0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x10], 4
push 0x2c
call fcn.005d0220
add esp, 4
mov edx, dword [ebp - 0x20]
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
lea ecx, [edx + 0x10]
mov dword [edx + 0x10], eax
mov dword [edx + 0x30], 0
mov dword [ebp - 0x10], 5
mov dword [ebp - 0x54], ecx
call fcn.005d6e90
mov byte [ebp - 0x2c], al
mov eax, dword [ebp - 0x20]
lea ecx, [eax + 0x38]
mov dword [ebp - 0x50], ecx
push 0
call fcn.004117c0
mov esi, dword [ebp - 0x20]
mov al, byte [ebp - 0x2c]
mov dword [esi + 0x40], 0xffffffff
mov dword [esi + 0x58], 7
mov dword [esi + 0x54], 0
mov word [esi + 0x41c], 0
mov byte [esi + 0x41e], 0
mov dword [esi + 0x420], 0x4914c0
mov dword [esi + 0x424], 0x497500
mov dword [esi + 0x428], 0x4985c0
mov dword [esi + 0x42c], 0
mov dword [esi + 0x430], 0
mov dword [esi + 0x434], 0
mov byte [esi + 0x438], al
mov byte [esi + 0x439], 0
mov dword [esi + 0x43c], 5
mov word [esi + 0x44], 0
lea eax, [esi + 0x5c]
push 0x3c0
push 0
push eax
call fcn.0061e8c0
add esp, 0xc
lea ecx, [esi + 0x440]
mov byte [ebp - 0x21], 1
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x10], 9
mov dword [ebp - 0x4c], ecx
push 0
call fcn.004117c0
mov esi, dword [ebp - 0x20]
mov dword [esi + 0x448], 0xffffffff
mov dword [esi + 0x460], 7
mov dword [esi + 0x45c], 0
mov word [esi + 0x824], 0
mov byte [esi + 0x826], 1
mov dword [esi + 0x828], 0x520450
mov dword [esi + 0x82c], 0
mov dword [esi + 0x830], 0x44c400
mov dword [esi + 0x838], 0
mov dword [esi + 0x834], 0
mov dword [esi + 0x83d], 0
mov dword [esi + 0x839], 0
mov byte [esi + 0x841], 1
mov dword [esi + 0x844], 0
mov word [esi + 0x44c], 0
lea eax, [esi + 0x464]
push 0x3c0
push 0
push eax
call fcn.0061e8c0
add esp, 0xc
lea ecx, [esi + 0x848]
mov byte [ebp - 0x21], 0
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x48], ecx
push 0
call fcn.004117c0
mov esi, dword [ebp - 0x20]
mov dword [esi + 0x850], 0xffffffff
mov dword [esi + 0x868], 7
mov dword [esi + 0x864], 0
mov word [esi + 0xc2c], 0
mov byte [esi + 0xc2e], 1
mov dword [esi + 0xc30], 0x520450
mov dword [esi + 0xc34], 0
mov dword [esi + 0xc38], 0x44c400
mov dword [esi + 0xc40], 0
mov dword [esi + 0xc3c], 0
mov dword [esi + 0xc45], 0
mov dword [esi + 0xc41], 0
mov byte [esi + 0xc49], 1
mov dword [esi + 0xc4c], 1
mov word [esi + 0x854], 0
lea eax, [esi + 0x86c]
push 0x3c0
push 0
push eax
call fcn.0061e8c0
add esp, 0xc
lea ecx, [esi + 0xc50]
mov byte [ebp - 0x21], 0
mov dword [ebp - 0x30], 2
mov dword [ebp - 0x44], ecx
push 0
call fcn.004117c0
mov esi, dword [ebp - 0x20]
mov dword [esi + 0xc58], 0xffffffff
mov dword [esi + 0xc70], 7
mov dword [esi + 0xc6c], 0
mov word [esi + 0x1034], 0
mov byte [esi + 0x1036], 1
mov dword [esi + 0x1038], 0x520450
mov dword [esi + 0x103c], 0
mov dword [esi + 0x1040], 0x44c400
mov dword [esi + 0x1048], 0
mov dword [esi + 0x1044], 0
mov dword [esi + 0x104d], 0
mov dword [esi + 0x1049], 0
mov byte [esi + 0x1051], 1
mov dword [esi + 0x1054], 2
mov word [esi + 0xc5c], 0
lea eax, [esi + 0xc74]
push 0x3c0
push 0
push eax
call fcn.0061e8c0
add esp, 0xc
lea ecx, [esi + 0x1058]
mov byte [ebp - 0x21], 0
mov dword [ebp - 0x30], 3
mov dword [ebp - 0x40], ecx
push 0
call fcn.004117c0
mov esi, dword [ebp - 0x20]
mov dword [esi + 0x1060], 0xffffffff
mov dword [esi + 0x1078], 7
mov dword [esi + 0x1074], 0
mov word [esi + 0x143c], 0
mov byte [esi + 0x143e], 1
mov dword [esi + 0x1440], 0x520450
mov dword [esi + 0x1444], 0
mov dword [esi + 0x1448], 0x44c400
mov dword [esi + 0x1450], 0
mov dword [esi + 0x144c], 0
mov dword [esi + 0x1455], 0
mov dword [esi + 0x1451], 0
mov byte [esi + 0x1459], 1
mov dword [esi + 0x145c], 3
mov word [esi + 0x1064], 0
lea eax, [esi + 0x107c]
push 0x3c0
push 0
push eax
call fcn.0061e8c0
add esp, 0xc
lea ecx, [esi + 0x1460]
mov byte [ebp - 0x21], 0
mov dword [ebp - 0x30], 4
mov dword [ebp - 0x3c], ecx
push 0
call fcn.004117c0
mov edi, dword [ebp - 0x20]
mov esi, dword [ebp + 8]
mov dword [edi + 0x1468], 0xffffffff
mov dword [edi + 0x1480], 7
mov dword [edi + 0x147c], 0
mov word [edi + 0x1844], 0
mov byte [edi + 0x1846], 1
mov dword [edi + 0x1848], 0x520450
mov dword [edi + 0x184c], 0
mov dword [edi + 0x1850], 0x44c400
mov dword [edi + 0x1858], 0
mov dword [edi + 0x1854], 0
mov dword [edi + 0x185d], 0
mov dword [edi + 0x1859], 0
mov byte [edi + 0x1861], 1
mov dword [edi + 0x1864], 4
mov word [edi + 0x146c], 0
lea eax, [edi + 0x1484]
push 0x3c0
push 0
push eax
call fcn.0061e8c0
add esp, 0xc
lea ecx, [edi + 0x1888]
lea eax, [edi + 0x186c]
mov dword [edi + 0x1868], esi
mov dword [edi + 0x187c], 0
mov byte [edi + 0x1880], 0
mov dword [edi + 0x1870], 0
mov dword [edi + 0x186c], 0
mov dword [edi + 0x1876], 0
mov dword [edi + 0x1872], 0
mov dword [edi + 0x1884], 0x6811b4
mov dword [edi + 0x18a4], 0
mov dword [edi + 0x18a0], 0
mov dword [edi + 0x18ac], 0
mov dword [edi + 0x18a8], 0
mov dword [edi + 0x18b0], 0
mov dword [ebp - 0x10], 7
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], ecx
push ecx
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], 8
add eax, 0x18
push eax
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov eax, dword [0x6ceda0]
mov dword [ebp - 0x10], 1
mov dword [ebp - 0x2c], eax
push dword [ebp - 0x34]
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x2c]
mov dword [eax + 0x18ac], ecx
mov dword [ebp - 0x10], 0
push dword [ebp - 0x34]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [0x6d1ebc]
mov dword [ebp - 0x10], 8
mov dword [ebp - 0x28], eax
add eax, 8
mov dword [ebp - 0x2c], eax
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [ebp - 0x28]
mov al, byte [eax + 0x65]
mov dword [ebp - 0x10], 2
mov byte [ebp - 0x28], al
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp byte [ebp - 0x28], 0
je 0x452985
mov eax, dword [0x6d1ebc]
mov dword [ebp - 0x10], 8
mov dword [ebp - 0x28], eax
add eax, 8
mov dword [ebp - 0x2c], eax
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [ebp - 0x28]
mov al, byte [eax + 0x41]
mov dword [ebp - 0x10], 3
mov byte [ebp - 0x28], al
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp byte [ebp - 0x28], 0
setne al
jmp 0x452987
xor eax, eax
mov esi, dword [ebp - 0x20]
mov byte [esi + 0x1878], al
lea ebx, [esi + 4]
lea edi, [esi + 8]
mov eax, dword [esi + 8]
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x28], ebx
cmp eax, dword [esi + 0xc]
je 0x452b60
push 0x58
push 0x680120
push eax
call fcn.0061e340
add esp, 0xc
mov eax, dword [edi]
add eax, 0x58
mov dword [edi], eax
cmp eax, dword [esi + 0xc]
je 0x452b88
push 0x58
push 0x680178
push eax
call fcn.0061e340
add esp, 0xc
mov eax, dword [edi]
add eax, 0x58
mov dword [edi], eax
cmp eax, dword [esi + 0xc]
je 0x452bb0
push 0x58
push 0x6801d0
push eax
call fcn.0061e340
add esp, 0xc
mov eax, dword [edi]
add eax, 0x58
mov dword [edi], eax
cmp eax, dword [esi + 0xc]
je 0x452bd8
push 0x58
push 0x680228
push eax
call fcn.0061e340
add esp, 0xc
mov eax, dword [edi]
add eax, 0x58
mov dword [edi], eax
cmp eax, dword [esi + 0xc]
je 0x452c00
push 0x58
push 0x680280
push eax
call fcn.0061e340
add esp, 0xc
mov eax, dword [edi]
add eax, 0x58
mov dword [edi], eax
cmp eax, dword [esi + 0xc]
je 0x452c28
push 0x58
push 0x6802d8
push eax
call fcn.0061e340
add esp, 0xc
mov eax, dword [edi]
add eax, 0x58
mov dword [edi], eax
cmp eax, dword [esi + 0xc]
je 0x452c50
push 0x58
push 0x680330
push eax
call fcn.0061e340
add esp, 0xc
mov eax, dword [edi]
add eax, 0x58
mov dword [edi], eax
cmp eax, dword [esi + 0xc]
je 0x452c78
push 0x58
push 0x680388
push eax
call fcn.0061e340
add esp, 0xc
mov eax, dword [edi]
add eax, 0x58
mov dword [edi], eax
cmp eax, dword [esi + 0xc]
je 0x452ca0
push 0x58
push 0x6803e0
push eax
call fcn.0061e340
add esp, 0xc
mov eax, dword [edi]
add eax, 0x58
mov dword [edi], eax
cmp eax, dword [esi + 0xc]
je 0x452cc8
push 0x58
push 0x680438
push eax
call fcn.0061e340
add esp, 0xc
mov eax, dword [edi]
add eax, 0x58
mov dword [edi], eax
cmp eax, dword [esi + 0xc]
je 0x452cf0
push 0x58
push 0x680490
push eax
call fcn.0061e340
add esp, 0xc
mov eax, dword [edi]
add eax, 0x58
mov dword [edi], eax
cmp eax, dword [esi + 0xc]
je 0x452d18
push 0x58
push 0x6804e8
push eax
call fcn.0061e340
add esp, 0xc
mov eax, dword [edi]
add eax, 0x58
mov dword [edi], eax
cmp eax, dword [esi + 0xc]
je 0x452d40
push 0x58
push 0x680540
push eax
call fcn.0061e340
add esp, 0xc
mov eax, dword [edi]
add eax, 0x58
mov dword [edi], eax
cmp eax, dword [esi + 0xc]
je 0x452d68
push 0x58
push 0x680598
push eax
call fcn.0061e340
add esp, 0xc
add dword [edi], 0x58
jmp 0x452d7c
mov dword [ebp - 0x10], 8
mov ecx, ebx
push 0x680120
push eax
call fcn.00414cc0
mov edi, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x28]
mov eax, dword [edi]
cmp eax, dword [esi + 0xc]
jne 0x4529c8
mov dword [ebp - 0x10], 8
mov ecx, ebx
push 0x680178
push eax
call fcn.00414cc0
mov edi, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x28]
mov eax, dword [edi]
cmp eax, dword [esi + 0xc]
jne 0x4529e8
mov dword [ebp - 0x10], 8
mov ecx, ebx
push 0x6801d0
push eax
call fcn.00414cc0
mov edi, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x28]
mov eax, dword [edi]
cmp eax, dword [esi + 0xc]
jne 0x452a08
mov dword [ebp - 0x10], 8
mov ecx, ebx
push 0x680228
push eax
call fcn.00414cc0
mov edi, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x28]
mov eax, dword [edi]
cmp eax, dword [esi + 0xc]
jne 0x452a28
mov dword [ebp - 0x10], 8
mov ecx, ebx
push 0x680280
push eax
call fcn.00414cc0
mov edi, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x28]
mov eax, dword [edi]
cmp eax, dword [esi + 0xc]
jne 0x452a48
mov dword [ebp - 0x10], 8
mov ecx, ebx
push 0x6802d8
push eax
call fcn.00414cc0
mov edi, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x28]
mov eax, dword [edi]
cmp eax, dword [esi + 0xc]
jne 0x452a68
mov dword [ebp - 0x10], 8
mov ecx, ebx
push 0x680330
push eax
call fcn.00414cc0
mov edi, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x28]
mov eax, dword [edi]
cmp eax, dword [esi + 0xc]
jne 0x452a88
mov dword [ebp - 0x10], 8
mov ecx, ebx
push 0x680388
push eax
call fcn.00414cc0
mov edi, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x28]
mov eax, dword [edi]
cmp eax, dword [esi + 0xc]
jne 0x452aa8
mov dword [ebp - 0x10], 8
mov ecx, ebx
push 0x6803e0
push eax
call fcn.00414cc0
mov edi, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x28]
mov eax, dword [edi]
cmp eax, dword [esi + 0xc]
jne 0x452ac8
mov dword [ebp - 0x10], 8
mov ecx, ebx
push 0x680438
push eax
call fcn.00414cc0
mov edi, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x28]
mov eax, dword [edi]
cmp eax, dword [esi + 0xc]
jne 0x452ae8
mov dword [ebp - 0x10], 8
mov ecx, ebx
push 0x680490
push eax
call fcn.00414cc0
mov edi, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x28]
mov eax, dword [edi]
cmp eax, dword [esi + 0xc]
jne 0x452b08
mov dword [ebp - 0x10], 8
mov ecx, ebx
push 0x6804e8
push eax
call fcn.00414cc0
mov edi, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x28]
mov eax, dword [edi]
cmp eax, dword [esi + 0xc]
jne 0x452b28
mov dword [ebp - 0x10], 8
mov ecx, ebx
push 0x680540
push eax
call fcn.00414cc0
mov edi, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x28]
mov eax, dword [edi]
cmp eax, dword [esi + 0xc]
jne 0x452b48
mov dword [ebp - 0x10], 8
mov ecx, ebx
push 0x680598
push eax
call fcn.00414cc0
mov eax, dword [ebp - 0x18]
mov dword fs:[0], eax
mov eax, dword [ebp - 0x20]
add esp, 0x48
pop esi
pop edi
pop ebx
pop ebp
ret 4