Function at 0x135ac
Capabilities:
Print debug messages

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
sub rsp, 0x198
mov rax, qword [0x00023100]
xor rax, rsp
mov qword [rsp + 0x188], rax
mov r8d, 0x20
xor edx, edx
lea rcx, [rsp + 0x50]
call fcn.0001b210
mov qword [rsp + 0x160], 0x28
mov r8d, 0x4d6d4366
mov edx, 0x3d4
xor ecx, ecx
call qword [sym.imp.ntoskrnl.exe_ExAllocatePoolWithTag]
mov qword [rsp + 0xa8], rax
mov dword [rsp + 0x128], 0xffffffff
xor edx, edx
lea rcx, [rsp + 0x128]
call qword [sym.imp.ntoskrnl.exe_IoCheckDesiredAccess]
mov dword [rsp + 0x16c], eax
lea rcx, [rsp + 0x80]
call qword [sym.imp.ntoskrnl.exe_InitializeSListHead]
mov rax, qword [0x00023598]
add rax, 0x14a4
mov qword [rsp + 0x130], rax
xor eax, eax
mov word [rsp + 0x168], ax
jmp 0x13671
movzx eax, word [rsp + 0x168]
add eax, 4
mov word [rsp + 0x168], ax
movzx eax, word [rsp + 0x168]
cmp eax, 0x2a0
jge 0x136d9
mov rax, qword [rsp + 0x1a0]
mov al, byte [rax]
mov byte [0x000235a4], al
movzx ecx, byte [0x000235a4]
mov eax, dword [rsp + 0x16c]
xor eax, 0xc00000a1
add ecx, eax
mov rax, qword [rsp + 0x130]
mov byte [rax], cl
mov rax, qword [rsp + 0x130]
add rax, 1
mov qword [rsp + 0x130], rax
mov rax, qword [rsp + 0x1a0]
add rax, 1
mov qword [rsp + 0x1a0], rax
jmp 0x1365e
mov rax, qword [0x00023598]
add rax, 0x154c
mov qword [rsp + 0xa0], rax
xor eax, eax
mov word [rsp + 0x168], ax
jmp 0x1370d
movzx eax, word [rsp + 0x168]
add eax, 4
mov word [rsp + 0x168], ax
movzx eax, word [rsp + 0x168]
cmp eax, 0x1f8
jge 0x1385d
mov rax, qword [0x00023220]
mov al, byte [rax]
mov byte [0x000235a4], al
mov dword [rsp + 0x20], 0
mov r9d, 0xfa
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x50]
call qword [sym.imp.ntoskrnl.exe_IoAcquireRemoveLockEx]
cmp dword [rsp + 0x16c], 0xc0000022
jne 0x13767
mov dword [rsp + 0x170], 0x22
jmp 0x13772
mov dword [rsp + 0x170], 0x4f0e
movzx ecx, byte [0x000235a4]
add ecx, dword [rsp + 0x170]
mov rax, qword [rsp + 0xa0]
mov byte [rax], cl
mov rax, qword [rsp + 0xa0]
add rax, 1
mov qword [rsp + 0xa0], rax
mov rax, qword [sym.imp.ntoskrnl.exe_KeNumberProcessors]
mov al, byte [rax]
movsx eax, al
mov dword [rsp + 0x174], eax
cmp dword [rsp + 0x174], 1
je 0x137ee
cmp dword [rsp + 0x174], 2
je 0x137fc
cmp dword [rsp + 0x174], 0x1000
je 0x1380f
cmp dword [rsp + 0x174], 0x2000
je 0x1381c
cmp dword [rsp + 0x174], 0x4004
je 0x1382a
jmp 0x13846
mov eax, dword [sym.imp.ntoskrnl.exe_NtGlobalFlag]
mov dword [0x000235a8], eax
jmp 0x13846
mov rax, qword [sym.imp.ntoskrnl.exe_MmUserProbeAddress]
mov eax, dword [rax]
mov dword [0x000235a8], eax
jmp 0x13846
mov ecx, 5
call qword [sym.imp.ntoskrnl.exe_DbgBreakPointWithStatus]
jmp 0x13846
lea rcx, [0x000210f0]
call sub.ntoskrnl.exe_DbgPrint
jmp 0x13846
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0x7e
call qword [sym.imp.ntoskrnl.exe_KeBugCheckEx]
mov rax, qword [0x00023220]
add rax, 1
mov qword [0x00023220], rax
jmp 0x136fa
mov rax, qword [0x00023598]
add rax, 0x15ca
mov qword [rsp + 0x98], rax
mov rcx, qword [rsp + 0x160]
call qword [sym.imp.ntoskrnl.exe_RtlFindLeastSignificantBit]
mov byte [rsp + 0x30], al
xor eax, eax
mov word [rsp + 0x168], ax
jmp 0x138a3
movzx eax, word [rsp + 0x168]
add eax, 4
mov word [rsp + 0x168], ax
movzx eax, word [rsp + 0x168]
cmp eax, 0x240
jge 0x1391a
lea rcx, [rsp + 0x150]
call qword [sym.imp.ntoskrnl.exe_InitializeSListHead]
mov r11, qword [0x00023228]
mov al, byte [r11]
mov byte [0x000235a4], al
movzx ecx, byte [0x000235a4]
mov eax, dword [rsp + 0x16c]
xor eax, 0xc00000a3
add ecx, eax
mov rax, qword [rsp + 0x98]
mov byte [rax], cl
mov rax, qword [rsp + 0x98]
add rax, 1
mov qword [rsp + 0x98], rax
mov rax, qword [0x00023228]
add rax, 1
mov qword [0x00023228], rax
jmp 0x13890
mov rax, qword [0x00023598]
add rax, 0x165a
mov qword [rsp + 0x38], rax
xor eax, eax
mov word [rsp + 0x168], ax
jmp 0x1394b
movzx eax, word [rsp + 0x168]
add eax, 4
mov word [rsp + 0x168], ax
movzx eax, word [rsp + 0x168]
cmp eax, 0x2ac
jge 0x139c8
mov rax, qword [0x00023230]
mov al, byte [rax]
mov byte [0x000235a4], al
cmp dword [rsp + 0x16c], 0xc0000022
jne 0x13983
mov dword [rsp + 0x178], 0x4f
jmp 0x1398e
mov dword [rsp + 0x178], 0x5aa
movzx ecx, byte [0x000235a4]
add ecx, dword [rsp + 0x178]
mov rax, qword [rsp + 0x38]
mov byte [rax], cl
mov rax, qword [rsp + 0x38]
add rax, 1
mov qword [rsp + 0x38], rax
mov rax, qword [0x00023230]
add rax, 1
mov qword [0x00023230], rax
jmp 0x13938
mov rax, qword [0x00023598]
add rax, 0x1705
mov qword [rsp + 0x70], rax
xor eax, eax
mov word [rsp + 0x168], ax
jmp 0x139f9
movzx eax, word [rsp + 0x168]
add eax, 4
mov word [rsp + 0x168], ax
movzx eax, word [rsp + 0x168]
cmp eax, 0x270
jge 0x13b12
mov rax, qword [sym.imp.ntoskrnl.exe_KeNumberProcessors]
mov al, byte [rax]
movsx eax, al
mov dword [rsp + 0x17c], eax
cmp dword [rsp + 0x17c], 1
je 0x13a5c
cmp dword [rsp + 0x17c], 2
je 0x13a6a
cmp dword [rsp + 0x17c], 0x1000
je 0x13a7d
cmp dword [rsp + 0x17c], 0x2000
je 0x13a8a
cmp dword [rsp + 0x17c], 0x4004
je 0x13a98
jmp 0x13ab4
mov eax, dword [sym.imp.ntoskrnl.exe_NtGlobalFlag]
mov dword [0x000235a8], eax
jmp 0x13ab4
mov rax, qword [sym.imp.ntoskrnl.exe_MmUserProbeAddress]
mov eax, dword [rax]
mov dword [0x000235a8], eax
jmp 0x13ab4
mov ecx, 5
call qword [sym.imp.ntoskrnl.exe_DbgBreakPointWithStatus]
jmp 0x13ab4
lea rcx, [0x00021100]
call sub.ntoskrnl.exe_DbgPrint
jmp 0x13ab4
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0x7e
call qword [sym.imp.ntoskrnl.exe_KeBugCheckEx]
mov rax, qword [0x00023238]
mov al, byte [rax]
mov byte [0x000235a4], al
movzx ecx, byte [0x000235a4]
mov eax, dword [rsp + 0x16c]
xor eax, 0xc000004e
add ecx, eax
mov rax, qword [rsp + 0x70]
mov byte [rax], cl
mov rax, qword [rsp + 0x70]
add rax, 1
mov qword [rsp + 0x70], rax
lea rcx, [rsp + 0x138]
call qword [sym.imp.ntoskrnl.exe_PfxInitialize]
mov rax, qword [0x00023238]
add rax, 1
mov qword [0x00023238], rax
jmp 0x139e6
mov rax, qword [0x00023598]
add rax, 0x17a1
mov qword [rsp + 0x120], rax
lea rcx, [rsp + 0xb0]
call qword [sym.imp.ntoskrnl.exe_RtlIsGenericTableEmptyAvl]
xor eax, eax
mov word [rsp + 0x168], ax
jmp 0x13b54
movzx eax, word [rsp + 0x168]
add eax, 4
mov word [rsp + 0x168], ax
movzx eax, word [rsp + 0x168]
cmp eax, 0x238
jge 0x13bbc
mov rax, qword [rsp + 0x1a8]
mov al, byte [rax]
mov byte [0x000235a4], al
movzx ecx, byte [0x000235a4]
mov eax, dword [rsp + 0x16c]
xor eax, 0xc0000022
add ecx, eax
mov rax, qword [rsp + 0x120]
mov byte [rax], cl
mov rax, qword [rsp + 0x120]
add rax, 1
mov qword [rsp + 0x120], rax
mov rax, qword [rsp + 0x1a8]
add rax, 1
mov qword [rsp + 0x1a8], rax
jmp 0x13b41
mov rax, qword [0x00023598]
add rax, 0x182f
mov qword [rsp + 0x90], rax
xor eax, eax
mov word [rsp + 0x168], ax
jmp 0x13bf0
movzx eax, word [rsp + 0x168]
add eax, 4
mov word [rsp + 0x168], ax
movzx eax, word [rsp + 0x168]
cmp eax, 0x29c
jge 0x13c79
mov rax, qword [rsp + 0x1b0]
mov al, byte [rax]
mov byte [0x000235a4], al
cmp dword [rsp + 0x16c], 0xc0000022
jne 0x13c29
mov dword [rsp + 0x180], 0x1d
jmp 0x13c34
mov dword [rsp + 0x180], 0x103d
movzx ecx, byte [0x000235a4]
add ecx, dword [rsp + 0x180]
mov rax, qword [rsp + 0x90]
mov byte [rax], cl
mov rax, qword [rsp + 0x90]
add rax, 1
mov qword [rsp + 0x90], rax
mov rax, qword [rsp + 0x1b0]
add rax, 1
mov qword [rsp + 0x1b0], rax
jmp 0x13bdd
cmp qword [rsp + 0xa8], 0
je 0x13c97
mov edx, 0x4d6d4366
mov rcx, qword [rsp + 0xa8]
call qword [sym.imp.ntoskrnl.exe_ExFreePoolWithTag]
mov rcx, qword [rsp + 0x188]
xor rcx, rsp
call fcn.0001ae60
add rsp, 0x198
ret