Function at 0x4a0ca0
Capabilities:
Terminate process

Disassembly:
sub esp, 0x14
push ebx
push ebp
mov ebp, dword [esp + 0x24]
push esi
push edi
mov ebx, dword [ebp]
mov edx, dword [ebx + 0x14]
test edx, edx
jne 0x4a0cbb
mov dword [esp + 0x2c], edx
jmp 0x4a0cd1
lea eax, [edx + 0x324]
test edx, edx
mov ecx, 4
cmovne ecx, eax
mov eax, dword [ecx]
mov dword [esp + 0x2c], eax
mov ecx, dword [ebx]
test ecx, ecx
je 0x4a100b
lea edx, [ebp + 4]
call fcn.00414170
mov edi, dword [ebx]
or edx, 0xffffffff
mov ecx, edi
call fcn.00411150
mov esi, eax
mov ecx, edi
push 0
push bind
mov edx, esi
call fcn.004245d0
mov edx, esi
mov ecx, edi
call fcn.00411a80
push ebp
call fcn.0058c812
mov edi, dword [ebx]
add esp, 0xc
or esi, 0xffffffff
test edi, edi
je case.0x4a0d6f.2
push 0x622308
or edx, esi
mov ecx, edi
call fcn.00410720
add esp, 4
test eax, eax
je case.0x4a0d6f.2
push 0x622308
or edx, esi
mov ecx, edi
call fcn.0040fe40
add esp, 4
or edx, esi
mov ecx, edi
call fcn.00412c40
mov ecx, edi
mov esi, eax
call fcn.00415510
cmp esi, 0x80
ja case.0x4a0d6f.2
movzx ecx, byte [esi + 0x4a106c]
jmp dword [ecx*4 + 0x4a1054]
movups xmm0, xmmword [0x622310]
mov al, byte [0x622320]
push 0x15
movups xmmword [esp + 0x14], xmm0
mov byte [esp + 0x24], al
call fcn.0058db11
mov esi, eax
add esp, 4
test esi, esi
je 0x4a1013
mov eax, dword [esp + 0x2c]
lea ecx, [esi + 4]
xorps xmm0, xmm0
mov edx, 0x11
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov byte [esi + 0x14], 0
mov dword [esi], eax
lea eax, [esp + 0x10]
push 0x11
push eax
call fcn.00401000
mov ecx, dword [ebx + 0x14]
add esp, 8
call fcn.004b5130
push esi
test eax, eax
jne 0x4a0dfa
mov ecx, dword [ebx + 0x14]
mov edx, fcn.004a1320
push 1
call fcn.004af160
mov ecx, dword [ebx]
add esp, 8
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x14
jmp fcn.00415510
push dword [ebx + 0x14]
call fcn.004a1320
mov ecx, dword [ebx]
add esp, 8
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x14
jmp fcn.00415510
mov edx, dword [ebx + 4]
mov ecx, dword [ebx]
mov edx, dword [edx + 4]
call fcn.00415060
mov ecx, dword [ebx]
or edx, 0xffffffff
push 0x622324
call fcn.0040fe40
mov ecx, dword [ebx]
add esp, 4
mov edx, 0xfffffffe
call fcn.00411550
mov ecx, dword [ebx]
mov edx, 0x62232c
call fcn.00414170
mov ecx, dword [ebx]
mov edx, 1
push 0
call fcn.0040e880
add esp, 4
test eax, eax
je 0x4a0e6e
push str.Error_Dispatching_ready_event_to_Master_Script_Container
push dword [ebx]
call fcn.00471950
add esp, 8
mov ecx, dword [ebx]
call fcn.00415510
mov ecx, dword [ebx]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x14
jmp fcn.00415510
mov edx, dword [ebx + 4]
mov ecx, dword [ebx]
mov edx, dword [edx + 4]
call fcn.00415060
mov ecx, dword [ebx]
or edx, 0xffffffff
push 0x622370
call fcn.0040fe40
mov ecx, dword [ebx]
add esp, 4
mov edx, 0xfffffffe
call fcn.00411550
mov ecx, dword [ebx]
mov edx, 0x622378
call fcn.00414170
mov ecx, dword [ebx]
mov edx, 0xfffffffc
push 0x622380
call fcn.0040fe40
mov ecx, dword [ebx]
add esp, 4
mov edx, 2
push 0
call fcn.0040e880
add esp, 4
test eax, eax
je 0x4a0e6e
push str.Error_Emitting_ScriptContainer_Error_Message:
jmp 0x4a0e64
mov edx, dword [ebx + 4]
mov ecx, dword [ebx]
mov edx, dword [edx + 4]
call fcn.00415060
mov ecx, dword [ebx]
or edx, 0xffffffff
push 0x6223b8
call fcn.0040fe40
mov ecx, dword [ebx]
add esp, 4
mov edx, 0xfffffffe
call fcn.00411550
mov ecx, dword [ebx]
mov edx, 0x6223c0
call fcn.00414170
mov ecx, dword [ebx]
mov edx, 0xfffffffc
push str.exitCode
call fcn.0040fe40
mov ecx, dword [ebx]
add esp, 4
mov edx, 2
push 0
call fcn.0040e880
add esp, 4
test eax, eax
je 0x4a0f5c
push str.Error_Emitting_ScriptContainer_Exit:
push dword [ebx]
call fcn.00471950
add esp, 8
mov ecx, dword [ebx]
call fcn.00415510
mov ecx, dword [ebx]
mov dword [ebx + 0x14], 0
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x14
jmp fcn.00415510
mov edx, dword [ebx + 4]
mov ecx, dword [ebx]
mov edx, dword [edx + 4]
call fcn.00415060
mov ecx, dword [ebx]
or edx, 0xffffffff
push 0x6223fc
call fcn.0040fe40
mov ecx, dword [ebx]
add esp, 4
mov edx, 0xfffffffe
call fcn.00411550
mov ecx, dword [ebx]
mov edx, 0x622404
call fcn.00414170
mov ecx, dword [ebx]
mov edx, 0xfffffffc
push 0x62240c
call fcn.0040fe40
mov ecx, dword [ebx]
add esp, 4
call fcn.0040f2b0
mov ecx, dword [ebx]
mov edx, 2
push 0
call fcn.0040e880
add esp, 4
test eax, eax
je 0x4a0e6e
push str.Error_Emitting_ScriptContainer_Data:
jmp 0x4a0e64
push esi
push str.Unknown_Command___d__Received_from_Slave_Container
push dword [ebx]
call fcn.00471950
mov ecx, dword [ebx]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x14
jmp fcn.00415510
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x14
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0xfe
push 0x4c4
mov edx, 0x624148
xor ecx, ecx
call fcn.004b4f80
add esp, 0xc
push 0x4c4
push 0x624164
push 0x624180
call fcn.004010e0
add esp, 0xc
push 0xfe
call fcn.005885bd
jbe 0x4a1063
dec edx
add byte [ebx], dl
push cs
dec edx
add byte [eax + 0xf], bh
dec edx
add byte [ebx - 0x12ffb5f2], al
add ch, ch
push cs
dec edx
add ch, ch
cmovp eax, dword [eax]
add byte [ecx], al
add eax, 84215045
add eax, 84215045
add eax, 33883397
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84214533
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, -858993660
push ebx
push ebp
push esi
mov esi, dword [esp + 0x10]
mov ecx, esi
push edi
mov eax, dword [esi + 0x44]
cmp eax, dword [esi + 0x38]
jae 0x4a1296
mov edx, 0x8004080
call fcn.00432960
mov ecx, dword [esi + 0x44]
xor edx, edx
or edx, 0xfff90000
mov dword [ecx], eax
mov dword [ecx + 4], edx
inc dword [eax + 4]
add dword [esi + 0x44], 8
mov ecx, dword [esi + 0x70]
mov dword [eax + 0x14], ecx
test ecx, ecx
je 0x4a1134
inc dword [ecx + 4]
mov ecx, dword [esi + 0x44]
cmp ecx, dword [esi + 0x38]
jae 0x4a12aa
movsd xmm0, qword [0x5f1f08]
lea eax, [ecx + 8]
mov dword [esi + 0x44], eax
mov edx, 0xfffffffe
movsd qword [ecx], xmm0
mov ecx, esi
push 0x622470
call fcn.00410110
mov edx, dword [esp + 0x1c]
add esp, 4
test edx, edx
je 0x4a1189
mov ecx, edx
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4a1173
sub ecx, edi
push ecx
mov ecx, esi
call fcn.004140e0
add esp, 4
jmp 0x4a11a4
mov ecx, dword [esi + 0x44]
cmp ecx, dword [esi + 0x38]
jae 0x4a12c0
lea eax, [ecx + 8]
mov dword [esi + 0x44], eax
mov eax, 0xfff4
mov word [ecx + 6], ax
push 0x622478
mov edx, 0xfffffffe
mov ecx, esi
call fcn.00410110
add esp, 4
or edx, 0xffffffff
mov ecx, esi
call fcn.0040f230
mov eax, dword [esi + 0x44]
mov ecx, dword [esi + 0x40]
sub eax, ecx
sar eax, 3
lea edx, [eax - 1]
cmp edx, eax
jae 0x4a11db
lea eax, [ecx + edx*8]
test eax, eax
jne 0x4a11e0
mov eax, 0x5ee574
mov ecx, 0xfff8
cmp word [eax + 6], cx
jne 0x4a11fd
mov eax, dword [eax]
test eax, eax
je 0x4a11fd
mov ebx, dword [eax + 0x14]
add eax, 0x1c
mov dword [esp + 0x14], eax
jmp 0x4a1203
xor ebx, ebx
mov dword [esp + 0x14], ebx
lea ebp, [ebx + 5]
push ebp
call fcn.0058db11
mov edi, eax
add esp, 4
test edi, edi
je 0x4a12d6
push ebp
push 0
push edi
call fcn.00587250
add esp, 0xc
mov ecx, esi
call fcn.00471c10
test eax, eax
je 0x4a1235
add eax, 0x320
mov eax, dword [eax]
lea edx, [ebx + 1]
push edx
push dword [esp + 0x18]
lea ecx, [edi + 4]
mov dword [edi], eax
call fcn.00401000
add esp, 8
mov ecx, esi
call fcn.00415510
mov eax, dword [edi]
mov esi, dword [eax + 0xc]
cmp dword [esi + 8], 0
je 0x4a1283
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp dword [esi + 8], eax
je 0x4a1283
mov ecx, dword [edi]
mov edx, fcn.004a0ca0
push edi
push 1
mov ecx, dword [ecx + 0xc]
call fcn.004af160
add esp, 8
pop edi
pop esi
pop ebp
pop ebx
ret
mov eax, dword [edi]
push edi
push dword [eax + 0xc]
call fcn.004a0ca0
add esp, 8
pop edi
pop esi
pop ebp
pop ebx
ret
push str.cannot_push_beyond_allocated_stack
push 0x30011fc
mov edx, 0x605af8
call fcn.0040d970
push str.cannot_push_beyond_allocated_stack
push 0x3001094
mov edx, 0x605a20
mov ecx, esi
call fcn.0040d970
push str.cannot_push_beyond_allocated_stack
push 0x300104f
mov edx, 0x6059d0
mov ecx, esi
call fcn.0040d970
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0xfe
push 0x4c4
mov edx, 0x624148
xor ecx, ecx
call fcn.004b4f80
add esp, 0xc
push 0x4c4
push 0x624164
push 0x624180
call fcn.004010e0
add esp, 0xc
push 0xfe
call fcn.005885bd
int3