Function at 0x4209fc
Capabilities:
Get memory capacity
Terminate process
Terminate thread

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1640
call fcn.004357e0
push ebx
push esi
push edi
xor edi, edi
push 0x1000
lea eax, [ebp - 0x1640]
push edi
mov ebx, ecx
push eax
mov dword [ebp - 0x14], edi
mov dword [ebp - 0xc], edi
call sub.MSVCRT.dll_memset
add esp, 0xc
xor esi, esi
cmp dword [ebx + 0xd8], edi
jle 0x420a57
mov eax, dword [ebx + 0xcc]
mov ecx, dword [eax + esi*4]
cmp ecx, edi
je 0x420a4e
call fcn.0041d362
mov dword [ebp + esi*4 - 0x1640], eax
inc esi
cmp esi, dword [ebx + 0xd8]
jl 0x420a35
mov esi, 0x3e8
lea eax, [ebp - 0x1640]
push esi
push edi
push eax
mov ecx, ebx
push dword [ebx + 0xd8]
call fcn.0042068b
cmp eax, 0xffffffff
mov dword [ebp - 4], eax
jne 0x420a86
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x420e99
cmp eax, 0x102
jne 0x420de3
mov ecx, ebx
call fcn.00420900
fstp qword [ebp - 0x20]
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
push edi
call dword [sym.imp.MSVCRT.dll_time]
cmp dword [ebx + 0xd8], edi
pop ecx
mov dword [ebp - 4], eax
mov dword [ebp - 8], edi
jle 0x420c5d
mov dword [ebp - 0x18], edi
mov eax, dword [0x454704]
mov ecx, 0xba
lea edi, [ebp - 0x328]
mov esi, dword [eax + 0x18]
add esi, dword [ebp - 0x18]
mov dword [ebp - 0x10], esi
rep movsd dword es:[edi], dword [esi]
cmp byte [ebp - 0x290], 0
je 0x420c3f
cmp dword [ebp - 0x284], 1
jl 0x420c3f
lea eax, [ebp - 0x640]
push eax
lea eax, [ebp - 0x290]
push eax
call fcn.0042d695
pop ecx
test eax, eax
pop ecx
jl 0x420c42
xor edi, edi
cmp dword [ebp - 0x4b4], edi
jl 0x420c42
push dword [ebp - 0x284]
push dword [ebp - 4]
call dword [sym.imp.MSVCRT.dll_difftime]
pop ecx
pop ecx
call sub.MSVCRT.dll__ftol
mov ecx, dword [0x454704]
mov ecx, dword [ecx + 0x20]
cmp eax, dword [ecx + 0x98]
jle 0x420b4c
inc dword [ebp - 0xc]
cmp eax, dword [ebp - 0x4b4]
jle 0x420c42
push dword [ebp - 0x278]
lea eax, [ebp - 0x2ab]
mov esi, dword [ebp - 8]
push dword [ebp - 0x27c]
push eax
lea eax, [ebp - 0x318]
push eax
lea eax, [ebp - 0x290]
push dword [ebp - 0x31c]
push eax
push esi
push str.KCBP_AS__d_timeout__ServiceName_s__QueueId_d__MsgId_s__Serial_s__Process_d__Thread_d
push dword [ecx + 0x9c]
push edi
call fcn.00426a9a
add esp, 0x28
cmp byte [0x4546aa], 0
je 0x420c1a
mov eax, dword [ebx + 0xcc]
cmp byte [0x454780], 0
push 0xffffffffffffffff
mov ecx, dword [eax + esi*4]
je 0x420bc2
call fcn.0041d362
push eax
call dword [sym.imp.KERNEL32.dll_TerminateThread]
jmp 0x420bce
call fcn.0041d362
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov esi, dword [ebp - 0x10]
push 0x1b
push edi
lea eax, [esi + 0x7d]
push eax
call sub.MSVCRT.dll_memset
push 9
lea eax, [esi + 0x98]
push edi
push eax
call sub.MSVCRT.dll_memset
push 0x200
add esi, 0xe8
push edi
push esi
call sub.MSVCRT.dll_memset
add esp, 0x24
push dword [ebp - 8]
push str.KCBP_AS__d_reset
push edi
push str.KCBP_AS
push edi
call fcn.00426c36
add esp, 0x14
jmp 0x420c42
lea eax, [ebp - 0x240]
push eax
mov eax, dword [0x454704]
push str.LUW:_dump_s
mov eax, dword [eax + 0x20]
push dword [eax + 0x9c]
push edi
call fcn.00426a9a
add esp, 0x10
jmp 0x420c42
inc dword [ebp - 0x14]
inc dword [ebp - 8]
add dword [ebp - 0x18], 0x2e8
mov eax, dword [ebp - 8]
cmp eax, dword [ebx + 0xd8]
jl 0x420ac2
xor edi, edi
mov eax, dword [0x454704]
push 0x64
pop esi
mov ecx, dword [eax + 0x20]
mov eax, dword [ecx + 0x94]
imul eax, dword [ebx + 0xd8]
cdq
idiv esi
cmp dword [ebp - 0xc], eax
jl 0x420d4e
push dword [ecx + 0x98]
push dword [ebp - 0xc]
push str.KCBPs_busy___d_process_were_hold_over__d_seconds
push dword [ecx + 0x9c]
push edi
call fcn.00426a9a
add esp, 0x14
test byte [0x454688], 1
je 0x420d4e
mov esi, dword [ebx + 0xd8]
cmp esi, dword [ebx + 0xdc]
jge 0x420d4e
fld qword [0x438608]
fsub qword [ebp - 0x20]
mov eax, dword [0x454704]
fadd qword [0x437a40]
mov edi, dword [eax + 0x20]
call sub.MSVCRT.dll__ftol
cmp eax, dword [edi + 0xa0]
jge 0x420d4e
mov eax, dword [ebp - 0x3c]
cmp eax, dword [edi + 0xa4]
jae 0x420d4e
lea eax, [esi + 1]
mov ecx, ebx
push eax
push esi
call fcn.0041f780
test al, al
jne 0x420d18
push dword [ebx + 0xd8]
push str.Create_worker_thread_index_d_failed
push 0x7d1
push 0
call fcn.00426a9a
add esp, 0x10
jmp 0x420d4e
mov eax, dword [ebx + 0xd8]
lea ecx, [eax + 1]
push ecx
push eax
mov ecx, ebx
call fcn.0041fa24
test al, al
jne 0x420d48
push dword [ebx + 0xd8]
push str.Start_worker_thread_index_d_failed
push 0x7d1
push 0
call fcn.00426a9a
add esp, 0x10
inc dword [ebx + 0xd8]
mov eax, dword [ebx + 0xd8]
mov ecx, dword [ebx + 0xd4]
mov edx, eax
sub edx, ecx
cmp dword [ebp - 0x14], edx
jge 0x420d6c
mov edx, dword [ebp - 4]
mov dword [ebx + 0x120], edx
cmp eax, ecx
jle 0x420e99
mov eax, dword [0x454704]
push dword [ebx + 0x120]
mov eax, dword [eax + 0x20]
push dword [ebp - 4]
mov eax, dword [eax + 0xa8]
mov dword [ebp - 0x10], eax
call dword [sym.imp.MSVCRT.dll_difftime]
fild dword [ebp - 0x10]
pop ecx
pop ecx
fcompp
fnstsw ax
sahf
jae 0x420e99
push dword [ebx + 0xd8]
mov ecx, ebx
push dword [ebx + 0xd4]
call fcn.0041fb9a
test al, al
je 0x420e99
push dword [ebx + 0xd8]
mov ecx, ebx
push dword [ebx + 0xd4]
call fcn.0041f946
mov eax, dword [ebx + 0xd4]
mov dword [ebx + 0xd8], eax
jmp 0x420e99
cmp eax, edi
jl 0x420e99
cmp eax, dword [ebx + 0xd8]
jge 0x420e99
mov ecx, dword [0x454704]
mov edx, dword [ecx + 0x20]
cmp byte [edx + 1], 0
jne 0x420e99
mov esi, eax
imul esi, esi, 0x2e8
add esi, dword [ecx + 0x18]
je 0x420e8d
push eax
mov edi, 0x7d1
push str.KCBP_AS__d_abnormally_terminated
push edi
push 0
call fcn.00426a9a
add esp, 0x10
lea eax, [esi + 0x98]
push dword [esi + 0xb0]
push dword [esi + 0xac]
push eax
lea eax, [esi + 0x7d]
push eax
lea eax, [esi + 0x10]
push eax
push dword [esi + 0xc]
push str.LUW:_QueueId_d__MsgId_s__Serial_s__ServiceName_s__Process_d__Thread_d
push edi
push 0
call fcn.00426a9a
add esp, 0x24
add esi, 0xe8
push esi
push str.LUW:_dump_s
xor esi, esi
push edi
push esi
call fcn.00426a9a
add esp, 0x10
push dword [ebp - 4]
push str.KCBP_AS__d_broken
push esi
push str.KCBP_AS
push esi
call fcn.00426c36
mov eax, dword [ebp - 4]
add esp, 0x14
lea ecx, [eax + 1]
push ecx
push eax
mov ecx, ebx
call fcn.0041fa24
pop edi
pop esi
pop ebx
leave
ret