Function at 0x42311a
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb0
xor eax, eax
mov al, byte [0x4e4c98]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jle 0x423223
mov dword [ebp - 0x10], 0
jmp 0x423149
mov ecx, dword [ebp - 0x10]
add ecx, 1
mov dword [ebp - 0x10], ecx
xor edx, edx
mov dl, byte [0x4e3874]
cmp dword [ebp - 0x10], edx
jge 0x42321e
mov eax, dword [ebp - 0x10]
imul eax, eax, 0x28
xor ecx, ecx
mov cl, byte [eax + 0x4e3888]
cmp ecx, 1
jne 0x423219
mov edx, dword [ebp - 0x10]
imul edx, edx, 0x28
xor eax, eax
mov al, byte [edx + 0x4e38a6]
cmp eax, dword [0x4e36f0]
jne 0x423219
mov ecx, dword [ebp - 0x10]
imul ecx, ecx, 0x28
xor edx, edx
mov dl, byte [ecx + 0x4e38a4]
mov dword [0x4e36f8], edx
mov eax, dword [ebp - 0x10]
imul eax, eax, 0x28
xor ecx, ecx
mov cl, byte [eax + 0x4e38a7]
mov dword [0x4e370c], ecx
mov edx, dword [ebp - 0x10]
imul edx, edx, 0x28
mov eax, dword [edx + 0x4e38a8]
mov dword [0x4e3724], eax
mov ecx, dword [ebp - 0x10]
imul ecx, ecx, 0x28
xor edx, edx
mov dl, byte [ecx + 0x4e38ac]
mov dword [0x4e3710], edx
push 3
mov eax, dword [ebp - 0x10]
imul eax, eax, 0x28
add eax, 0x4e3890
push eax
push 0x4e3706
call fcn.0043e4c0
add esp, 0xc
push 0x10
mov ecx, dword [ebp - 0x10]
imul ecx, ecx, 0x28
add ecx, 0x4e3894
push ecx
push 0x4e3714
call fcn.0043e4c0
add esp, 0xc
mov dword [0x4e37b4], 0
jmp 0x423140
jmp 0x423338
cmp dword [ebp - 0xc], 0
jne 0x423338
mov dword [0x524d6c], 0xffffffff
mov edx, dword [0x524d6c]
mov dword [0x524d68], edx
mov dword [ebp - 0x14], 0
mov dword [ebp - 8], 0
jmp 0x42325c
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
xor ecx, ecx
mov cl, byte [0x4e3874]
cmp dword [ebp - 8], ecx
jge 0x423324
push 0x524d73
mov edx, dword [ebp - 8]
imul edx, edx, 0x28
add edx, 0x4e3894
push edx
call fcn.0043e430
add esp, 8
test eax, eax
jne 0x42331f
cmp dword [0x524d68], 0xffffffff
jne 0x4232a0
mov eax, dword [ebp - 8]
mov dword [0x524d68], eax
cmp dword [0x524d6c], 0xffffffff
jne 0x4232b2
mov ecx, dword [ebp - 8]
mov dword [0x524d6c], ecx
mov edx, dword [0x524d68]
cmp edx, dword [ebp - 8]
jle 0x4232c5
mov eax, dword [ebp - 8]
mov dword [0x524d68], eax
mov ecx, dword [0x524d6c]
cmp ecx, dword [ebp - 8]
jge 0x4232d9
mov edx, dword [ebp - 8]
mov dword [0x524d6c], edx
cmp dword [ebp - 0x14], 0
je 0x4232fc
push 3
mov eax, dword [ebp - 8]
imul eax, eax, 0x28
add eax, 0x4e3890
push eax
push 0x4e3709
call fcn.0043e4c0
add esp, 0xc
jmp 0x42331f
mov dword [ebp - 0x14], 1
push 3
mov ecx, dword [ebp - 8]
imul ecx, ecx, 0x28
add ecx, 0x4e3890
push ecx
push 0x4e3706
call fcn.0043e4c0
add esp, 0xc
jmp 0x423253
mov dword [0x4e36f0], 0
mov dword [0x4e36f4], 0xffffffff
mov byte [ebp - 4], 0
xor edx, edx
mov dl, byte [0x4e4c98]
test edx, edx
je 0x42342b
mov dword [ebp - 8], 0
jmp 0x42335e
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
xor ecx, ecx
mov cl, byte [0x4e4d33]
cmp dword [ebp - 8], ecx
jge 0x42342b
mov edx, dword [ebp - 8]
mov al, byte [edx + 0x4e4d3c]
mov byte [ebp - 0x18], al
push 3
mov ecx, dword [ebp - 0x18]
and ecx, 0xff
imul ecx, ecx, 0x28
add ecx, 0x4e3890
push ecx
push 0x4e3706
call fcn.0043efc0
add esp, 0xc
test eax, eax
jne 0x423426
mov edx, dword [ebp - 0x18]
and edx, 0xff
imul edx, edx, 0x28
xor eax, eax
mov al, byte [edx + 0x4e38a6]
cmp dword [0x4e36f0], eax
je 0x423426
mov ecx, dword [ebp - 0x18]
and ecx, 0xff
imul ecx, ecx, 0x28
xor edx, edx
mov dl, byte [ecx + 0x4e38a6]
mov dword [0x4e36f4], edx
push 3
mov eax, dword [ebp - 0x18]
and eax, 0xff
imul eax, eax, 0x28
add eax, 0x4e3890
push eax
push 0x4e3709
call fcn.0043e4c0
add esp, 0xc
push 0x10
mov ecx, dword [ebp - 0x18]
and ecx, 0xff
imul ecx, ecx, 0x28
add ecx, 0x4e3894
push ecx
push 0x524d83
call fcn.0043e4c0
add esp, 0xc
mov dl, byte [ebp - 4]
add dl, 1
mov byte [ebp - 4], dl
jmp 0x423355
mov eax, dword [ebp - 4]
and eax, 0xff
test eax, eax
jne 0x423443
mov dword [0x4e36f4], 0xffffffff
jmp 0x4234aa
mov ecx, dword [ebp - 4]
and ecx, 0xff
cmp ecx, 2
jl 0x4234aa
xor edx, edx
mov dl, byte [0x4e3706]
push edx
xor eax, eax
mov al, byte [0x4e3707]
push eax
xor ecx, ecx
mov cl, byte [0x4e3708]
push ecx
mov edx, dword [ebp - 4]
and edx, 0xff
add edx, 1
push edx
push str.Found__d_links_to_DPC__d._d._d___It_should_less_than_3_links_to_same_DPC.
lea eax, [ebp - 0xb0]
push eax
call fcn.0043f09f
add esp, 0x18
push 0
push str.DPC_Error
lea ecx, [ebp - 0xb0]
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov al, 1
mov esp, ebp
pop ebp
ret