Function at 0x140039ccc
Capabilities:
Print debug messages

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
push rdi
sub rsp, 0x30
lea rdx, [0x14003b990]
lea rcx, [rax - 0x18]
call qword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
lea rcx, [rsp + 0x20]
call qword [sym.imp.ntoskrnl.exe_MmGetSystemRoutineAddress]
test rax, rax
jne 0x140039ecd
call fcn.14001ed54
mov rbp, rax
test rax, rax
je 0x140039ecb
lea rdx, [0x14003b9d0]
lea rcx, [rsp + 0x20]
call qword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
lea rcx, [rsp + 0x20]
call qword [sym.imp.ntoskrnl.exe_MmGetSystemRoutineAddress]
mov rbx, rax
test rax, rax
je 0x140039ecb
mov r8d, dword [0x1400346b4]
mov edi, 0xa
lea esi, [rdi + 0x16]
cmp r8d, 0x4f7c
jb 0x140039dfd
mov rdx, rax
lea rcx, [0x14003ba00]
call fcn.1400272a8
xor edx, edx
mov r8d, edi
add rbx, rdi
mov r9b, byte [rbx]
lea eax, [r9 - 0x44]
test al, 0xf3
jne 0x140039dea
cmp r9b, 0x50
je 0x140039dea
movzx ecx, byte [rbx + 1]
sub ecx, 0x39
je 0x140039db5
cmp ecx, 0x50
jne 0x140039dea
cmp byte [rbx + 2], sil
jae 0x140039dea
test rdx, rdx
je 0x140039dea
movsxd rax, dword [rbx + 3]
lea rcx, [rbx + 7]
add rcx, rax
cmp rdx, rcx
jne 0x140039dea
lea rax, [rdx - 0x20]
jmp 0x140039ecd
movsxd rcx, dword [rbx + 3]
cmp r9b, 0x44
jne 0x140039dd5
cmp byte [rbx + 2], 0x90
jne 0x140039dd5
lea eax, [rcx - 1]
cmp eax, 0x3ffffe
ja 0x140039dea
lea rdx, [rcx + rbp]
jmp 0x140039de2
cmp byte [rbx + 2], sil
jae 0x140039dea
lea rdx, [rbx + 7]
add rdx, rcx
add r8d, 6
add rbx, 6
inc r8d
inc rbx
cmp r8d, 0x200
jb 0x140039d72
cmp dword [0x1400346b4], 0x2739
jb 0x140039efb
lea rdx, [0x14003b9d0]
lea rcx, [rsp + 0x20]
call qword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
lea rcx, [rsp + 0x20]
call qword [sym.imp.ntoskrnl.exe_MmGetSystemRoutineAddress]
mov r8d, dword [0x1400346b4]
lea rcx, [0x14003ba50]
mov rdx, rax
lea rbx, [rdi + rax]
call fcn.1400272a8
xor edx, edx
mov r8b, byte [rbx]
lea ecx, [r8 - 0x44]
test cl, 0xf3
jne 0x140039eba
cmp r8b, 0x50
je 0x140039eba
movzx ecx, byte [rbx + 1]
sub ecx, 0x89
je 0x140039e9f
cmp ecx, 4
jne 0x140039eba
movsxd rcx, dword [rbx + 3]
cmp r8b, 0x44
jne 0x140039e89
cmp byte [rbx + 2], 0x90
jne 0x140039e89
lea eax, [rcx - 1]
cmp eax, 0x3ffffe
ja 0x140039eba
lea rdx, [rcx + rbp]
jmp 0x140039e96
cmp byte [rbx + 2], sil
jae 0x140039eba
lea rdx, [rbx + 7]
add rdx, rcx
add edi, 6
add rbx, 6
jmp 0x140039eba
cmp byte [rbx + 2], sil
jae 0x140039eba
test rdx, rdx
je 0x140039eba
movsxd rax, dword [rbx + 3]
lea rcx, [rbx + 7]
add rcx, rax
cmp rdx, rcx
je 0x140039ee2
inc edi
inc rbx
cmp edi, 0xa0
jb 0x140039e46
xor eax, eax
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
add rsp, 0x30
pop rdi
ret
cmp dword [0x1400346b4], 0x4512
sbb rax, rax
and eax, 0x40
add rax, 0xffffffffffffffe0
add rax, rdx
jmp 0x140039ecd
xor edx, edx
mov al, byte [rbx]
sub al, 0x48
test al, 0xfb
jne 0x140039f15
movsxd rax, dword [rbx + 3]
lea rcx, [rbx + 7]
add rcx, rax
cmp rcx, rbp
je 0x140039f20
inc rbx
inc edx
cmp edx, esi
jae 0x140039ecb
jmp 0x140039efd
or r10d, 0xffffffff
xor r8d, r8d
mov ecx, r10d
mov edx, r10d
add rbx, 7
mov al, byte [rbx]
sub al, 0x4a
cmp al, 1
ja 0x140039f4f
cmp byte [rbx + 1], 0x83
jne 0x140039f4f
cmp byte [rbx + 8], 0
jne 0x140039f4f
mov eax, dword [rbx + 4]
cmp ecx, r10d
jne 0x140039f5c
mov ecx, eax
inc rbx
inc r8d
cmp r8d, esi
jae 0x140039f5e
jmp 0x140039f31
mov edx, eax
mov r9d, 0x400000
cmp ecx, r9d
jae 0x140039f6e
cmp edx, r9d
jb 0x140039fcf
mov eax, r8d
sub rbx, rax
add rbx, 8
cmp byte [rbx - 8], 0x48
jne 0x140039fb2
mov al, byte [rbx - 7]
cmp al, 0x83
jne 0x140039fa0
cmp byte [rbx - 6], 0xbc
jne 0x140039fb2
cmp byte [rbx - 5], 0x18
jne 0x140039fb2
cmp byte [rbx], 0
jne 0x140039fb2
cmp ecx, r10d
jne 0x140039fb2
mov ecx, dword [rbx - 4]
jmp 0x140039fb2
cmp al, 0x8d
jne 0x140039fb2
cmp byte [rbx - 6], 0x8b
jne 0x140039fb2
cmp edx, r10d
jne 0x140039fb2
mov edx, dword [rbx - 5]
inc rbx
mov eax, ecx
sub rsi, 1
jne 0x140039f78
cmp eax, r9d
jae 0x140039ecb
cmp edx, r9d
jae 0x140039ecb
mov eax, ecx
add rax, rbp
jmp 0x140039ecd