Function at 0x140038c78
Capabilities:
Print debug messages

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
push rdi
sub rsp, 0x30
lea rdx, [0x14003a900]
lea rcx, [rax - 0x18]
call qword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
lea rcx, [rsp + 0x20]
call qword [sym.imp.ntoskrnl.exe_MmGetSystemRoutineAddress]
test rax, rax
jne 0x140038e79
call fcn.14001e4f4
mov rbp, rax
test rax, rax
je 0x140038e77
lea rdx, [0x14003a940]
lea rcx, [rsp + 0x20]
call qword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
lea rcx, [rsp + 0x20]
call qword [sym.imp.ntoskrnl.exe_MmGetSystemRoutineAddress]
mov rbx, rax
test rax, rax
je 0x140038e77
mov r8d, dword [0x1400336b4]
mov edi, 0xa
lea esi, [rdi + 0x16]
cmp r8d, 0x4f7c
jb 0x140038da9
mov rdx, rax
lea rcx, [0x14003a970]
call sub.ntoskrnl.exe_DbgPrint
xor edx, edx
mov r8d, edi
add rbx, rdi
mov r9b, byte [rbx]
lea eax, [r9 - 0x44]
test al, 0xf3
jne 0x140038d96
cmp r9b, 0x50
je 0x140038d96
movzx ecx, byte [rbx + 1]
sub ecx, 0x39
je 0x140038d61
cmp ecx, 0x50
jne 0x140038d96
cmp byte [rbx + 2], sil
jae 0x140038d96
test rdx, rdx
je 0x140038d96
movsxd rax, dword [rbx + 3]
lea rcx, [rbx + 7]
add rcx, rax
cmp rdx, rcx
jne 0x140038d96
lea rax, [rdx - 0x20]
jmp 0x140038e79
movsxd rcx, dword [rbx + 3]
cmp r9b, 0x44
jne 0x140038d81
cmp byte [rbx + 2], 0x90
jne 0x140038d81
lea eax, [rcx - 1]
cmp eax, 0x3ffffe
ja 0x140038d96
lea rdx, [rcx + rbp]
jmp 0x140038d8e
cmp byte [rbx + 2], sil
jae 0x140038d96
lea rdx, [rbx + 7]
add rdx, rcx
add r8d, 6
add rbx, 6
inc r8d
inc rbx
cmp r8d, 0x200
jb 0x140038d1e
cmp dword [0x1400336b4], 0x2739
jb 0x140038ea7
lea rdx, [0x14003a940]
lea rcx, [rsp + 0x20]
call qword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
lea rcx, [rsp + 0x20]
call qword [sym.imp.ntoskrnl.exe_MmGetSystemRoutineAddress]
mov r8d, dword [0x1400336b4]
lea rcx, [0x14003a9c0]
mov rdx, rax
lea rbx, [rdi + rax]
call sub.ntoskrnl.exe_DbgPrint
xor edx, edx
mov r8b, byte [rbx]
lea ecx, [r8 - 0x44]
test cl, 0xf3
jne 0x140038e66
cmp r8b, 0x50
je 0x140038e66
movzx ecx, byte [rbx + 1]
sub ecx, 0x89
je 0x140038e4b
cmp ecx, 4
jne 0x140038e66
movsxd rcx, dword [rbx + 3]
cmp r8b, 0x44
jne 0x140038e35
cmp byte [rbx + 2], 0x90
jne 0x140038e35
lea eax, [rcx - 1]
cmp eax, 0x3ffffe
ja 0x140038e66
lea rdx, [rcx + rbp]
jmp 0x140038e42
cmp byte [rbx + 2], sil
jae 0x140038e66
lea rdx, [rbx + 7]
add rdx, rcx
add edi, 6
add rbx, 6
jmp 0x140038e66
cmp byte [rbx + 2], sil
jae 0x140038e66
test rdx, rdx
je 0x140038e66
movsxd rax, dword [rbx + 3]
lea rcx, [rbx + 7]
add rcx, rax
cmp rdx, rcx
je 0x140038e8e
inc edi
inc rbx
cmp edi, 0xa0
jb 0x140038df2
xor eax, eax
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
add rsp, 0x30
pop rdi
ret
cmp dword [0x1400336b4], 0x4512
sbb rax, rax
and eax, 0x40
add rax, 0xffffffffffffffe0
add rax, rdx
jmp 0x140038e79
xor edx, edx
mov al, byte [rbx]
sub al, 0x48
test al, 0xfb
jne 0x140038ec1
movsxd rax, dword [rbx + 3]
lea rcx, [rbx + 7]
add rcx, rax
cmp rcx, rbp
je 0x140038ecc
inc rbx
inc edx
cmp edx, esi
jae 0x140038e77
jmp 0x140038ea9
or r10d, 0xffffffff
xor r8d, r8d
mov ecx, r10d
mov edx, r10d
add rbx, 7
mov al, byte [rbx]
sub al, 0x4a
cmp al, 1
ja 0x140038efb
cmp byte [rbx + 1], 0x83
jne 0x140038efb
cmp byte [rbx + 8], 0
jne 0x140038efb
mov eax, dword [rbx + 4]
cmp ecx, r10d
jne 0x140038f08
mov ecx, eax
inc rbx
inc r8d
cmp r8d, esi
jae 0x140038f0a
jmp 0x140038edd
mov edx, eax
mov r9d, 0x400000
cmp ecx, r9d
jae 0x140038f1a
cmp edx, r9d
jb 0x140038f7b
mov eax, r8d
sub rbx, rax
add rbx, 8
cmp byte [rbx - 8], 0x48
jne 0x140038f5e
mov al, byte [rbx - 7]
cmp al, 0x83
jne 0x140038f4c
cmp byte [rbx - 6], 0xbc
jne 0x140038f5e
cmp byte [rbx - 5], 0x18
jne 0x140038f5e
cmp byte [rbx], 0
jne 0x140038f5e
cmp ecx, r10d
jne 0x140038f5e
mov ecx, dword [rbx - 4]
jmp 0x140038f5e
cmp al, 0x8d
jne 0x140038f5e
cmp byte [rbx - 6], 0x8b
jne 0x140038f5e
cmp edx, r10d
jne 0x140038f5e
mov edx, dword [rbx - 5]
inc rbx
mov eax, ecx
sub rsi, 1
jne 0x140038f24
cmp eax, r9d
jae 0x140038e77
cmp edx, r9d
jae 0x140038e77
mov eax, ecx
add rax, rbp
jmp 0x140038e79