Function at 0x140019410
Capabilities:
Print debug messages

Disassembly:
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov r15, r8
mov r13, rcx
lea rax, [rcx + 0x1000]
cmp rax, 0x2000
jb 0x14001976d
mov rax, rcx
movabs rcx, 0xffff800000000000
and rax, rcx
movabs rcx, 0x800000000000
add rax, rcx
movabs rcx, 0xffff7fffffffffff
test rcx, rax
jne 0x14001976d
cmp edx, 2
jb 0x14001976d
xor edi, edi
mov dword [rsp + 0x24], edi
mov rax, qword [sym.imp.ntoskrnl.exe_MmSystemRangeStart]
mov r12, qword [rax]
mov qword [rsp + 0x30], r12
cmp qword [0x14002e030], rdi
jne 0x1400196c2
cmp qword [0x14002e0a0], rdi
jne 0x1400196c2
mov r8d, 0x10
cmp edx, r8d
cmovbe r8d, edx
mov dword [rsp + 0x20], r8d
mov ecx, 0xffffffff
mov dword [rsp + 0x98], ecx
mov r14d, ecx
mov dword [rsp + 0x28], ecx
xor ebx, ebx
test r8d, r8d
je 0x14001957c
lea rsi, [r13 + 0x20]
cmp qword [rsi - 8], r12
jb 0x14001956a
cmp dword [rsi], 0x1000
jb 0x14001956a
movzx r12d, word [rsi + 0xe]
cmp ecx, 0xffffffff
jne 0x140019530
lea rdx, str.ntoskrnl.exe
lea rcx, [rsi + 0x10]
add rcx, r12
call sym.VBoxNetFlt.sys_RTStrICmpAscii
test eax, eax
jne 0x140019524
mov ecx, ebx
mov dword [rsp + 0x98], ebx
cmp r14d, 0xffffffff
jmp 0x14001955e
mov ecx, dword [rsp + 0x98]
mov r8d, dword [rsp + 0x20]
cmp r14d, 0xffffffff
jne 0x140019565
lea rdx, str.hal.dll
lea rcx, [rsi + 0x10]
add rcx, r12
call sym.VBoxNetFlt.sys_RTStrICmpAscii
mov ecx, dword [rsp + 0x98]
test eax, eax
jne 0x140019560
mov r14d, ebx
mov dword [rsp + 0x28], ebx
cmp ebx, 0xffffffff
jne 0x14001957c
mov r8d, dword [rsp + 0x20]
mov r12, qword [rsp + 0x30]
inc ebx
add rsi, 0x128
cmp ebx, r8d
jb 0x1400194e2
cmp ecx, 0xffffffff
jne 0x140019595
xor ebx, ebx
lea rdx, [r13 + 0x30]
lea rcx, str.rtR0DbgKrnlNtInit:_ntoskrnl.exe_not_found__picking__s_instead_n
call sub.ntoskrnl.exe_DbgPrint
jmp 0x14001959c
mov ebx, dword [rsp + 0x98]
cmp r14d, 0xffffffff
jne 0x1400195c1
mov r14d, 1
mov dword [rsp + 0x28], r14d
lea rdx, [r13 + 0x158]
lea rcx, str.rtR0DbgKrnlNtInit:_hal.dll_not_found__picking__s_instead_n
call sub.ntoskrnl.exe_DbgPrint
nop
mov eax, ebx
imul rcx, rax, 0x128
mov r8d, dword [rcx + r13 + 0x20]
mov rdx, qword [rcx + r13 + 0x18]
lea rcx, str.ntoskrnl.exe
call fcn.140019000
mov byte [0x14002e040], al
mov r12, qword [rsp + 0x30]
jmp 0x14001961e
mov eax, r14d
imul rdx, rax, 0x128
mov r8d, dword [rdx + r13 + 0x20]
mov rdx, qword [rdx + r13 + 0x18]
lea rcx, str.hal.dll
call fcn.140019000
movzx ecx, al
mov byte [0x14002e0b0], al
jmp 0x14001967c
movzx eax, byte [0x14002e040]
test al, al
je 0x14001968b
test cl, cl
jne 0x140019690
mov edi, 0xfffffd96
test al, al
je 0x1400196bb
cmp qword [0x140030940], 0
jne 0x1400196bb
lea r9, [0x140030940]
xor r8d, r8d
lea rdx, str.MmGetSystemRoutineAddress
lea rcx, str.ntoskrnl.exe
call fcn.140018bc0
mov edx, dword [rsp + 0x88]
test edi, edi
js 0x14001975b
test r15, r15
je 0x14001975b
mov edi, 0xfffffd9e
xor esi, esi
nop word [rax + rax]
cmp esi, edx
jae 0x14001975b
mov eax, esi
imul rbx, rax, 0x128
add rbx, r13
cmp qword [rbx + 0x18], r12
jb 0x140019757
cmp dword [rbx + 0x20], 0x1000
jb 0x140019757
movzx eax, word [rbx + 0x2e]
lea rcx, [rbx + 0x30]
add rcx, rax
cmp qword [r15 + 0x20], 0
jne 0x140019757
mov rdx, r15
call sym.VBoxNetFlt.sys_RTStrICmpAscii
test eax, eax
jne 0x140019750
mov r8d, dword [rbx + 0x20]
mov rdx, qword [rbx + 0x18]
mov rcx, r15
call fcn.140019000
mov byte [r15 + 0x30], al
xor edi, edi
mov dword [rsp + 0x24], edi
jmp 0x14001975b
mov edx, dword [rsp + 0x88]
inc esi
jmp 0x1400196e0
mov eax, edi
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
mov eax, 0xfffffffe
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret