Function at 0x46ca50
Capabilities:
Access peb ldr_data
Get process heap flags

Disassembly:
push 0xffffffffffffffff
push 0x4c9299
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push ebp
push esi
push edi
mov eax, dword [0x50b384]
xor eax, esp
push eax
lea eax, [esp + 0x20]
mov dword fs:[0], eax
mov edi, ecx
mov dword [esp + 0x14], edi
lea esi, [edi + 4]
xor ebx, ebx
mov dword [esi + 4], ebx
mov dword [esi + 8], ebx
mov dword [esi + 0xc], ebx
mov eax, dword [esp + 0x30]
lea ebp, [edi + 0x18]
mov ecx, ebp
mov dword [esp + 0x28], ebx
mov dword [edi], vtable.acrobat_broker::SandboxCryptDispatcher.0
mov dword [edi + 0x14], eax
call fcn.00469ee0
mov dword [ebp + 4], eax
mov byte [eax + 0x15], 1
mov eax, dword [ebp + 4]
mov dword [eax + 4], eax
mov eax, dword [ebp + 4]
mov dword [eax], eax
mov eax, dword [ebp + 4]
mov dword [eax + 8], eax
mov dword [ebp + 8], ebx
lea ebp, [edi + 0x3c]
mov ecx, ebp
mov byte [esp + 0x28], 1
call fcn.0045c2b0
mov dword [ebp + 4], eax
mov byte [eax + 0x11], 1
mov eax, dword [ebp + 4]
mov dword [eax + 4], eax
mov eax, dword [ebp + 4]
mov dword [eax], eax
mov eax, dword [ebp + 4]
mov dword [eax + 8], eax
mov dword [ebp + 8], ebx
lea ebx, [edi + 0x48]
mov ecx, ebx
mov byte [esp + 0x28], 2
call fcn.004027ca
mov dword [ebx + 4], eax
mov byte [eax + 0x15], 1
mov eax, dword [ebx + 4]
mov dword [eax + 4], eax
mov eax, dword [ebx + 4]
mov dword [eax], eax
mov eax, dword [ebx + 4]
mov dword [eax + 8], eax
mov dword [ebx + 8], 0
lea ecx, [edi + 0x24]
push ecx
mov byte [esp + 0x2c], 3
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x4eed48
mov ecx, esi
call fcn.00429550
push 0x4eed0c
mov ecx, esi
call fcn.00429550
push 0x4eecd0
mov ecx, esi
call fcn.00429550
push 0x4eec94
mov ecx, esi
call fcn.00429550
push 0x4eec58
mov ecx, esi
call fcn.00429550
push 0x4eec1c
mov ecx, esi
call fcn.00429550
push 0x4eebe0
mov ecx, esi
call fcn.00429550
push 0x4eeba4
mov ecx, esi
call fcn.00429550
push 0x4eeb68
mov ecx, esi
call fcn.00429550
push 0x4eeb2c
mov ecx, esi
call fcn.00429550
push 0x4eeaf0
mov ecx, esi
call fcn.00429550
push 0x4eeab4
mov ecx, esi
call fcn.00429550
push 0x4eea78
mov ecx, esi
call fcn.00429550
push 0x4eea3c
mov ecx, esi
call fcn.00429550
push 0x4eea00
mov ecx, esi
call fcn.00429550
push 0x4ee9c4
mov ecx, esi
call fcn.00429550
push 0x4ee988
mov ecx, esi
call fcn.00429550
push 0x4ee94c
mov ecx, esi
call fcn.00429550
push 0x4ee910
mov ecx, esi
call fcn.00429550
push 0x4ee8d4
mov ecx, esi
call fcn.00429550
push 0x4ee898
mov ecx, esi
call fcn.00429550
push 0x4ee85c
mov ecx, esi
call fcn.00429550
push 0x4ee820
mov ecx, esi
call fcn.00429550
push 0x4ee7e4
mov ecx, esi
call fcn.00429550
push 0x4ee7a8
mov ecx, esi
call fcn.00429550
push 0x4ee76c
mov ecx, esi
call fcn.00429550
push 0x4ee730
mov ecx, esi
call fcn.00429550
push 0x4ee6f4
mov ecx, esi
call fcn.00429550
push 0x4ee6b8
mov ecx, esi
call fcn.00429550
push 0x4ee67c
mov ecx, esi
call fcn.00429550
push 0x4ee640
mov ecx, esi
call fcn.00429550
push 0x4ee604
mov ecx, esi
call fcn.00429550
push 0x4ee5c8
mov ecx, esi
call fcn.00429550
push 0x4ee58c
mov ecx, esi
call fcn.00429550
push 0x4ee550
mov ecx, esi
call fcn.00429550
push 0x4ee514
mov ecx, esi
call fcn.00429550
push 0x4ee4d8
mov ecx, esi
call fcn.00429550
push 0x4ee49c
mov ecx, esi
call fcn.00429550
push 0x4ee460
mov ecx, esi
call fcn.00429550
lea edx, [esp + 0x30]
push edx
lea eax, [esp + 0x1c]
push eax
mov ecx, ebp
mov dword [esp + 0x38], 1
call fcn.0045f2c0
lea ecx, [esp + 0x30]
push ecx
lea edx, [esp + 0x1c]
push edx
mov ecx, ebp
mov dword [esp + 0x38], 2
call fcn.0045f2c0
mov eax, edi
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x18
ret 4