Function at 0x2f008
Capabilities:
Print debug messages

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
push rdi
sub rsp, 0x200
and dword [rsp + 0x24], 0
and dword [rax + 0x20], 0
and dword [rsp + 0x20], 0
mov rbx, rcx
lea rcx, [0x0002f510]
mov rsi, rdx
call sub.ntoskrnl.exe_DbgPrint
and dword [rsp + 0x220], 0
and qword [0x0002d430], 0
lea rcx, [0x0002d428]
xor r9d, r9d
mov r8, rsi
mov rdx, rbx
call qword [sym.imp.NDIS.SYS_NdisInitializeWrapper]
mov ebx, 0xf0
lea rcx, [rsp + 0x110]
mov r8, rbx
xor edx, edx
call fcn.0001dc60
mov rcx, qword [0x0002d428]
and qword [rsp + 0x160], 0
and qword [rsp + 0x118], 0
and qword [rsp + 0x168], 0
lea rax, [0x00011008]
mov qword [rsp + 0x140], rax
lea rax, [0x00011580]
lea r9, [0x000266d0]
mov qword [rsp + 0x150], rax
lea rax, [0x00011704]
lea rdx, [rsp + 0x110]
mov qword [rsp + 0x170], rax
lea rax, [0x000119e8]
mov r8d, ebx
mov qword [rsp + 0x178], rax
lea rax, [0x00011a38]
mov byte [rsp + 0x110], 5
mov qword [rsp + 0x130], rax
lea rax, [0x00011b70]
mov byte [rsp + 0x111], 1
mov qword [rsp + 0x1c8], rax
lea rax, [0x00011b84]
mov qword [rsp + 0x1d0], rax
lea rax, [0x00011b84]
mov qword [rsp + 0x1d8], rax
lea rax, [0x00011994]
mov qword [rsp + 0x180], rax
lea rax, [0x00011258]
mov qword [rsp + 0x188], rax
call qword [sym.imp.NDIS.SYS_NdisIMRegisterLayeredMiniport]
lea rcx, [0x0002f540]
mov edx, eax
mov dword [rsp + 0x220], eax
call sub.ntoskrnl.exe_DbgPrint
mov edx, dword [rsp + 0x220]
test edx, edx
jne 0x2f2fc
mov rcx, qword [0x0002d428]
lea rdx, [0x00011e44]
call qword [sym.imp.NDIS.SYS_NdisMRegisterUnloadHandler]
mov ebx, 0xd0
lea rcx, [rsp + 0x40]
mov r8, rbx
xor edx, edx
call fcn.0001dc60
lea rdx, [0x0002f580]
lea rcx, [rsp + 0x28]
mov byte [rsp + 0x40], 5
mov byte [rsp + 0x41], 0
call qword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
movdqu xmm5, xmmword [rsp + 0x28]
lea rax, [0x00012408]
lea r8, [rsp + 0x40]
lea rdx, [0x000266c8]
movdqu xmmword [rsp + 0x98], xmm5
mov qword [rsp + 0x48], rax
lea rax, [0x00012408]
lea rcx, [rsp + 0x220]
mov qword [rsp + 0x50], rax
lea rax, [0x000125d0]
mov r9d, ebx
mov qword [rsp + 0x58], rax
lea rax, [0x00012680]
mov qword [rsp + 0x60], rax
lea rax, [0x00011b84]
mov qword [rsp + 0x68], rax
lea rax, [fcn.0001241c]
mov qword [rsp + 0x70], rax
lea rax, [0x000126a4]
mov qword [rsp + 0x78], rax
lea rax, [0x000128ec]
mov qword [rsp + 0x80], rax
lea rax, [0x00012534]
mov qword [rsp + 0x88], rax
lea rax, [0x0001259c]
mov qword [rsp + 0x90], rax
lea rax, [0x00011ed8]
mov qword [rsp + 0xb0], rax
lea rax, [0x00012284]
mov qword [rsp + 0xb8], rax
lea rax, [fcn.000123d8]
mov qword [rsp + 0xc8], rax
lea rax, [0x00012998]
mov qword [rsp + 0xa8], rax
lea rax, [0x00012ba0]
mov qword [rsp + 0xc0], rax
call qword [sym.imp.NDIS.SYS_NdisRegisterProtocol]
mov edx, dword [rsp + 0x220]
lea rcx, [0x0002f5a0]
call sub.ntoskrnl.exe_DbgPrint
cmp dword [rsp + 0x220], 0
mov rcx, qword [0x000266d0]
je 0x2f2e4
call qword [sym.imp.NDIS.SYS_NdisIMDeregisterLayeredMiniport]
jmp 0x2f2f1
mov rdx, qword [0x000266c8]
call qword [sym.imp.NDIS.SYS_NdisIMAssociateMiniport]
mov edx, dword [rsp + 0x220]
test edx, edx
je 0x2f317
lea rcx, [0x0002f5e0]
call sub.ntoskrnl.exe_DbgPrint
mov rcx, qword [0x0002d428]
xor edx, edx
call qword [sym.imp.NDIS.SYS_NdisTerminateWrapper]
lea r8, [rsp + 0x228]
lea rdx, [0x0002f620]
mov rcx, rsi
call fcn.00011b90
movzx edx, byte [0x000266c2]
mov ebx, dword [rsp + 0x228]
movzx ecx, bl
test eax, eax
mov r8d, ebx
cmove edx, ecx
lea rcx, [0x0002f640]
mov byte [0x000266c2], dl
movzx r9d, dl
mov edx, eax
call sub.ntoskrnl.exe_DbgPrint
lea r8, [rsp + 0x20]
lea rdx, [0x0002f690]
mov rcx, rsi
call fcn.00011b90
mov edx, dword [0x000269dc]
movzx r9d, byte [0x000266c2]
test eax, eax
lea rcx, [0x0002f640]
mov r8d, ebx
cmove edx, dword [rsp + 0x20]
mov dword [0x000269dc], edx
mov edx, eax
call sub.ntoskrnl.exe_DbgPrint
lea r8, [rsp + 0x24]
lea rdx, [0x0002f6b0]
mov rcx, rsi
call fcn.00011b90
movzx edx, byte [0x000266c1]
movzx ecx, byte [rsp + 0x24]
test eax, eax
cmove edx, ecx
lea rcx, [0x0002f6d0]
mov byte [0x000266c1], dl
movzx r8d, dl
mov edx, eax
call sub.ntoskrnl.exe_DbgPrint
lea r11, [0x00014144]
test r11, r11
je 0x2f42e
mov edx, dword [0x0002677c]
cmp edx, 0xa
je 0x2f434
lea r8, [0x00026780]
lea rcx, [rdx + rdx*2]
lea rax, [0x00013b2c]
add rcx, rcx
and qword [r8 + rcx*8 + 0x20], 0
mov qword [r8 + rcx*8 + 8], rax
lea rax, [0x00013f58]
inc edx
mov qword [r8 + rcx*8 + 0x10], rax
mov qword [r8 + rcx*8 + 0x18], r11
mov dword [0x0002677c], edx
jmp 0x2f434
mov edx, dword [0x0002677c]
xor ebx, ebx
test edx, edx
je 0x2f45b
lea rdi, [0x00026788]
mov rax, qword [rdi]
test rax, rax
je 0x2f451
call rax
mov edx, dword [0x0002677c]
inc ebx
add rdi, 0x30
cmp ebx, edx
jb 0x2f441
lea rcx, [0x0002f710]
mov rdx, rsi
call sub.ntoskrnl.exe_DbgPrint
mov eax, dword [rsp + 0x220]
lea r11, [rsp + 0x200]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rsp, r11
pop rdi
ret
sub rsp, 0x28
mov r8, rdx
mov r9, rcx
call fcn.0002f48c
mov rdx, r8
mov rcx, r9
add rsp, 0x28
jmp 0x2f008