Function at 0x1913c
Capabilities:
Print debug messages

Disassembly:
sub rsp, 0x668
mov rax, qword [0x00023100]
xor rax, rsp
mov qword [rsp + 0x650], rax
mov r8d, 0x100
mov edx, 0xff
lea rcx, [rsp + 0x40]
call fcn.0001b210
mov dword [rsp + 0x1c8], 0xcf8
mov r8d, 0x28
mov edx, 0xff
lea rcx, [rsp + 0x208]
call fcn.0001b210
mov dword [rsp + 0x1e8], 0xffffffff
xor edx, edx
lea rcx, [rsp + 0x1e8]
call qword [sym.imp.ntoskrnl.exe_IoCheckDesiredAccess]
mov dword [rsp + 0x1cc], eax
call fcn.00017e70
mov rax, qword [0x00023598]
add rax, 0x32f3
mov qword [rsp + 0x1c0], rax
xor eax, eax
mov word [rsp + 0x630], ax
jmp 0x191e8
movzx eax, word [rsp + 0x630]
add eax, 4
mov word [rsp + 0x630], ax
movzx eax, word [rsp + 0x630]
cmp eax, 0x29c
jge 0x1928e
xor edx, edx
lea rcx, [rsp + 0x40]
call qword [sym.imp.ntoskrnl.exe_MmProtectMdlSystemAddress]
mov r11, qword [0x000234b0]
mov al, byte [r11]
mov byte [0x000235a4], al
lea rcx, [rsp + 0x150]
call qword [sym.imp.ntoskrnl.exe_RtlIsGenericTableEmptyAvl]
cmp dword [rsp + 0x1cc], 0xc0000022
jne 0x19240
mov dword [rsp + 0x634], 5
jmp 0x1924b
mov dword [rsp + 0x634], 0x3a68
movzx ecx, byte [0x000235a4]
add ecx, dword [rsp + 0x634]
mov rax, qword [rsp + 0x1c0]
mov byte [rax], cl
mov rax, qword [rsp + 0x1c0]
add rax, 1
mov qword [rsp + 0x1c0], rax
mov rax, qword [0x000234b0]
add rax, 1
mov qword [0x000234b0], rax
jmp 0x191d5
mov rax, qword [0x00023598]
add rax, 0x3429
mov qword [rsp + 0x1e0], rax
xor eax, eax
mov word [rsp + 0x630], ax
jmp 0x192c2
movzx eax, word [rsp + 0x630]
add eax, 4
mov word [rsp + 0x630], ax
movzx eax, word [rsp + 0x630]
cmp eax, 0x1b8
jge 0x19348
mov rax, qword [0x000234b8]
mov al, byte [rax]
mov byte [0x000235a4], al
cmp dword [rsp + 0x1cc], 0xc0000022
jne 0x192fa
mov dword [rsp + 0x638], 0xa0
jmp 0x19305
mov dword [rsp + 0x638], 0x802a
movzx ecx, byte [0x000235a4]
add ecx, dword [rsp + 0x638]
mov rax, qword [rsp + 0x1e0]
mov byte [rax], cl
mov rax, qword [rsp + 0x1e0]
add rax, 1
mov qword [rsp + 0x1e0], rax
mov rax, qword [0x000234b8]
add rax, 1
mov qword [0x000234b8], rax
jmp 0x192af
lea rcx, [rsp + 0x1c8]
call fcn.00011008
lea rcx, [rsp + 0x230]
call qword [sym.imp.ntoskrnl.exe_KeQueryPriorityThread]
mov rax, qword [0x00023598]
add rax, 0x35af
mov qword [rsp + 0x1d8], rax
xor eax, eax
mov word [rsp + 0x630], ax
jmp 0x19397
movzx eax, word [rsp + 0x630]
add eax, 4
mov word [rsp + 0x630], ax
movzx eax, word [rsp + 0x630]
cmp eax, 0x1d0
jge 0x194c4
mov rax, qword [sym.imp.ntoskrnl.exe_KeNumberProcessors]
mov al, byte [rax]
movsx eax, al
mov dword [rsp + 0x63c], eax
cmp dword [rsp + 0x63c], 1
je 0x193fa
cmp dword [rsp + 0x63c], 2
je 0x19408
cmp dword [rsp + 0x63c], 0x1000
je 0x1941b
cmp dword [rsp + 0x63c], 0x2000
je 0x19428
cmp dword [rsp + 0x63c], 0x4004
je 0x19436
jmp 0x19452
mov eax, dword [sym.imp.ntoskrnl.exe_NtGlobalFlag]
mov dword [0x000235a8], eax
jmp 0x19452
mov rax, qword [sym.imp.ntoskrnl.exe_MmUserProbeAddress]
mov eax, dword [rax]
mov dword [0x000235a8], eax
jmp 0x19452
mov ecx, 5
call qword [sym.imp.ntoskrnl.exe_DbgBreakPointWithStatus]
jmp 0x19452
lea rcx, [0x000211f0]
call sub.ntoskrnl.exe_DbgPrint
jmp 0x19452
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0x7e
call qword [sym.imp.ntoskrnl.exe_KeBugCheckEx]
mov rax, qword [0x000234c0]
mov al, byte [rax]
mov byte [0x000235a4], al
xor r8d, r8d
lea rdx, [rsp + 0x1f8]
lea rcx, [rsp + 0x208]
call qword [sym.imp.ntoskrnl.exe_RtlGetGroupSecurityDescriptor]
movzx ecx, byte [0x000235a4]
mov eax, dword [rsp + 0x1cc]
xor eax, 0xc000006f
add ecx, eax
mov rax, qword [rsp + 0x1d8]
mov byte [rax], cl
mov rax, qword [rsp + 0x1d8]
add rax, 1
mov qword [rsp + 0x1d8], rax
mov rax, qword [0x000234c0]
add rax, 1
mov qword [0x000234c0], rax
jmp 0x19384
call fcn.000185bc
mov ecx, 0x89
call fcn.00018bf4
mov rax, qword [0x00023598]
add rax, 0x339a
mov qword [rsp + 0x1f0], rax
lea rdx, [rsp + 0x1d0]
xor ecx, ecx
call qword [sym.imp.ntoskrnl.exe_ExQueryPoolBlockSize]
xor eax, eax
mov word [rsp + 0x630], ax
jmp 0x19517
movzx eax, word [rsp + 0x630]
add eax, 4
mov word [rsp + 0x630], ax
movzx eax, word [rsp + 0x630]
cmp eax, 0x23c
jge 0x1959d
mov rax, qword [0x000234c8]
mov al, byte [rax]
mov byte [0x000235a4], al
cmp dword [rsp + 0x1cc], 0xc0000022
jne 0x1954f
mov dword [rsp + 0x640], 0x24
jmp 0x1955a
mov dword [rsp + 0x640], 0xa29f
movzx ecx, byte [0x000235a4]
add ecx, dword [rsp + 0x640]
mov rax, qword [rsp + 0x1f0]
mov byte [rax], cl
mov rax, qword [rsp + 0x1f0]
add rax, 1
mov qword [rsp + 0x1f0], rax
mov rax, qword [0x000234c8]
add rax, 1
mov qword [0x000234c8], rax
jmp 0x19504
mov rax, qword [0x00023598]
add rax, 0x3497
mov qword [rsp + 0x30], rax
xor eax, eax
mov word [rsp + 0x630], ax
jmp 0x195ce
movzx eax, word [rsp + 0x630]
add eax, 4
mov word [rsp + 0x630], ax
movzx eax, word [rsp + 0x630]
cmp eax, 0x1f0
jge 0x196f7
mov rax, qword [0x000234d0]
mov al, byte [rax]
mov byte [0x000235a4], al
cmp dword [rsp + 0x1cc], 0xc0000022
jne 0x1960a
mov dword [rsp + 0x644], 6
jmp 0x19615
mov dword [rsp + 0x644], 0x6439
movzx ecx, byte [0x000235a4]
add ecx, dword [rsp + 0x644]
mov rax, qword [rsp + 0x30]
mov byte [rax], cl
mov rax, qword [rsp + 0x30]
add rax, 1
mov qword [rsp + 0x30], rax
mov rax, qword [sym.imp.ntoskrnl.exe_KeNumberProcessors]
mov al, byte [rax]
movsx eax, al
mov dword [rsp + 0x648], eax
cmp dword [rsp + 0x648], 1
je 0x19688
cmp dword [rsp + 0x648], 2
je 0x19696
cmp dword [rsp + 0x648], 0x1000
je 0x196a9
cmp dword [rsp + 0x648], 0x2000
je 0x196b6
cmp dword [rsp + 0x648], 0x4004
je 0x196c4
jmp 0x196e0
mov eax, dword [sym.imp.ntoskrnl.exe_NtGlobalFlag]
mov dword [0x000235a8], eax
jmp 0x196e0
mov rax, qword [sym.imp.ntoskrnl.exe_MmUserProbeAddress]
mov eax, dword [rax]
mov dword [0x000235a8], eax
jmp 0x196e0
mov ecx, 5
call qword [sym.imp.ntoskrnl.exe_DbgBreakPointWithStatus]
jmp 0x196e0
lea rcx, [0x00021210]
call sub.ntoskrnl.exe_DbgPrint
jmp 0x196e0
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0x7e
call qword [sym.imp.ntoskrnl.exe_KeBugCheckEx]
mov rax, qword [0x000234d0]
add rax, 1
mov qword [0x000234d0], rax
jmp 0x195bb
mov rax, qword [0x00023598]
add rax, 0x3513
mov qword [rsp + 0x200], rax
xor eax, eax
mov word [rsp + 0x630], ax
jmp 0x1972b
movzx eax, word [rsp + 0x630]
add eax, 4
mov word [rsp + 0x630], ax
movzx eax, word [rsp + 0x630]
cmp eax, 0x270
jge 0x19790
mov rax, qword [0x000234d8]
mov al, byte [rax]
mov byte [0x000235a4], al
movzx ecx, byte [0x000235a4]
mov eax, dword [rsp + 0x1cc]
xor eax, 0xc00000f7
add ecx, eax
mov rax, qword [rsp + 0x200]
mov byte [rax], cl
mov rax, qword [rsp + 0x200]
add rax, 1
mov qword [rsp + 0x200], rax
mov rax, qword [0x000234d8]
add rax, 1
mov qword [0x000234d8], rax
jmp 0x19718
mov rcx, qword [rsp + 0x650]
xor rcx, rsp
call fcn.0001ae60
add rsp, 0x668
ret