Function at 0x162d0
Capabilities:
Print debug messages

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push r12
sub rsp, 0x20
mov rdi, rcx
lea rcx, [0x00024e18]
mov ebx, edx
call qword [sym.imp.ntoskrnl.exe_KeAcquireSpinLockRaiseToDpc]
xor ebp, ebp
mov byte [0x00024e20], al
lea r12d, [rbp + 1]
cmp rdi, rbp
je case.default.0x16401
cmp ebx, ebp
je case.default.0x16401
cmp dword [0x00024e00], ebx
jae 0x16352
lea esi, [rbx + 0xfff]
and esi, 0xfffff000
call fcn.00016290
mov edx, esi
xor ecx, ecx
call qword [sym.imp.ntoskrnl.exe_ExAllocatePool]
mov r11, rax
mov qword [0x00024e10], rax
cmp rax, rbp
je 0x163c9
mov dword [0x00024e00], esi
jmp 0x16359
mov r11, qword [0x00024e10]
mov r8, rbx
mov rdx, rdi
mov rcx, r11
call fcn.0001cf80
mov dword [0x00024e04], ebx
mov ecx, ebp
jmp 0x1637f
cmp dword [rdi], ebx
ja 0x16384
mov eax, dword [rdi]
sub ebx, dword [rdi]
add ecx, r12d
add rdi, rax
cmp ebx, 0x78
jae 0x16371
mov r11, qword [0x00024e10]
mov dword [0x00024e08], ecx
mov rdx, r11
jmp 0x163a2
cmp dword [rdx + 4], ebp
jne 0x163a8
mov eax, dword [rdx]
dec ecx
add rdx, rax
cmp ecx, ebp
ja 0x16396
jmp 0x163c9
cmp byte [0x00025742], bpl
je case.default.0x16401
lea rcx, [0x0001f250]
call sub.ntoskrnl.exe_DbgPrint
call fcn.00016290
mov r11, qword [0x00024e10]
mov dl, byte [0x00024e20]
movzx eax, bpl
cmp r11, rbp
cmovne eax, r12d
lea rcx, [0x00024e18]
mov byte [0x00025a23], al
mov rbx, qword [rsp + 0x30]
mov rbp, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x48]
add rsp, 0x20
pop r12
jmp qword [sym.imp.ntoskrnl.exe_KeReleaseSpinLock]
jb KeDelayExecutionThread
outsd dx, dword [rsi]
jb 0x1ea7a
sub byte [rcx], ch
and byte [rbx + 0x69], bl
and byte [0x5d660f31], bh
and byte [rbx + 0x25], bl
xor byte [rax], bh
js 0x1ea75
and byte [rbx + 0x40], bl
pop rbp
pop rbp
add byte [rax + rsi*2 + 0x61], dl
invalid
je DbgPrint
cmp ah, byte [rax]
jae 0x1ea80
jb 0x1eaa6
jb RtlInitUnicodeString
push rax
outsd dx, dword [rsi]
jb 0x1eaaa
sub byte [rcx], ch
and byte [rbx + 0x25], bl
xor byte [rax], bh
js 0x1ea9c
and byte [rbx + 0x72], bl
je KeAcquireSpinLockRaiseToDpc
cmp ah, byte [rax]
and eax, 0xcc005d64
add ah, cl
add ah, cl
int3
invalid
je ZwClose
push 0x49657469
push rax
push rax
outsd dx, dword [rsi]
jb KeAcquireSpinLockRaiseToDpc
jae 0x1ea92
sub dword [rax], esp
pop rbx
sub eax, 0x5d2d2d2d
and byte [rbx + 0x25], bl
xor byte [rax], bh
js 0x1ea99
and eax, 0x20783830
xor byte [rax], bh
js 0x1ea9e
and eax, 0x5d783830
cmp byte [rax + 0x5d], bh
add ah, cl
int3
int3
invalid
and byte [rbx + 0x65], dl
je ExFreePoolWithTag
push 0x49657469
push rax
push rax
outsd dx, dword [rsi]
jb 0x1eb1c
jae 0x1ead2
sub dword [rax], esp
pop rbx
outsb dx, byte [rsi]
and byte [0x5d660fd4], bh
and byte [rbx + 0x25], bl
xor byte [rax], bh
js 0x1eadb
pop rbx
and eax, 0x20783830
and eax, 0x5d783830
add ah, cl
int3
invalid
je ExInitializeNPagedLookasideList
je ExInitializeNPagedLookasideList
push 0x49657469
push rax
push rax
outsd dx, dword [rsi]
jb 0x1eb5c
push rdx
invalid
pop rbp
and byte [rbx + 0x25], bl
xor byte [rax], bh
js KeQueryTimeIncrement
and eax, 0x20783830
and eax, 0x5d783830
add ah, cl
int3
je ExpInterlockedPushEntrySList
push rdi
push KeQueryTimeIncrement
push rax
push rax
outsd dx, dword [rsi]
jb 0x1eb9c
push rdx
invalid
and eax, 0x5b205d64
and eax, 0x20783830
and eax, 0x20783830
and eax, 0x20783830
and eax, 0x5d783830
add ah, cl
push rsp
jo 0x1ebb4
invalid
push rdi
push 0x49657469
push rax
push rax
outsd dx, dword [rsi]
jb 0x1ebdb
sub byte [rcx], ch
and byte [rbx + 0x2d], bl
sub eax, 0x205d2d2d
pop rbx
and eax, 0x20783830
js ExpInterlockedPushEntrySList
and eax, 0x5d783830
and byte [rbx + 0x25], bl
xor byte [rax], bh
js 0x1ebe0
add ah, cl
int3
jbe KeBugCheckEx
and byte [rcx + 0x73], cl
push rdi
push 0x49657469
push rax
push rax
outsd dx, dword [rsi]
jb 0x1ec1b
sub byte [rcx], ch
and byte [rbx + 0x6e], bl
and byte [0x5d6610d2], bh
and byte [rbx + 0x25], bl
xor byte [rax], bh
js 0x1ebd9
and eax, 0x20783830
and eax, 0x5d783830
and byte [rbx + 0x25], bl
xor byte [rax], bh
js 0x1ebe5
and eax, 0x5d783830
add ah, cl
int3
invalid
and byte [rcx + 0x73], cl
push rdi
jae 0x1ec34
push 0x49657469
push rax
push r8
push rax
outsd dx, dword [rsi]
jb 0x1ec5b
sub byte [rcx], ch
and byte [rbx + 0x3d], bl
cmp eax, 0x205d3d3d
cmp eax, 0x405b205d
pop rbp
cmp eax, 0x405b205d
pop rbp
and byte [rbx + 0x25], bl
xor byte [rax], bh
js 0x1ec1e
and eax, 0x5d783830
and byte [rbx + 0x25], bl
xor byte [rax], bh
js 0x1ec67
add ah, cl
int3
jae 0x1ec74
push 0x49657469
push rax
push rax
outsd dx, dword [rsi]
jb 0x1ec9b
imul esi, dword [rbp + riz*2 + 0x49], 0x726f5050
je 0x1ec50
sub byte [rcx], ch
and byte [rbx + 0x3d], bl
cmp eax, 0x205d3d3d
pop rbx
and dword [rcx], esp
sub dword [rax], esp
pop rbx
cmp eax, 0x5d3d3d3d
and byte [rbx + 0x21], bl
and dword [rcx], esp
and dword [rbp + 0x20], ebx
pop rbx
and eax, 0x20783830
and dword [rcx], esp
pop rbp
and byte [rbx + 0x25], bl
xor byte [rax], bh
js 0x1ec5e
and eax, 0x5d783830
and byte [rbx + 0x25], bl
xor byte [rax], bh
js 0x1eca7
add ah, cl
int3
push rsp
jo 0x1ecb4
invalid
jae 0x1ecb4
push 0x49657469
push rax
push rax
outsd dx, dword [rsi]
jb 0x1ecdb
imul esi, dword [rbp + riz*2 + 0x49], 0x726f5050
je reloc.NDIS.SYS_NdisCloseConfiguration
push rdx
invalid
and byte [rbx + 0x25], bl
xor byte [rax], bh
js 0x1ec9b
and eax, 0x5d783830
and byte [rbx + 0x25], bl
xor byte [rax], bh
js 0x1ece4
add ah, cl
int3
jae 0x1ecf4
push NdisOpenConfigurationEx
push rax
push rax
outsd dx, dword [rsi]
jb NdisFreeCloneOidRequest
sub byte [rcx], ch
and byte [rbx + 0x6e], bl
and byte [0x5d6611d2], bh
and byte [rbx + 0x25], bl
xor byte [rax], bh
js 0x1ecd9
and eax, 0x20783830
and eax, 0x5d783830
xor byte [rax], bh
js NdisFreeCloneOidRequest
and byte [rbx + 0x25], bl
xor byte [rax], bh
js 0x1ece5
and eax, 0x20783830
and eax, 0x20783830
and eax, 0x5d783830
add ah, cl
int3
int3
int3
imul esp, dword [rbp + 0x74], 0x76
je 0x1ed5e
cmp ah, byte [rax]
jae 0x1ed44
push 0x49657469
push rax
push rax
outsd dx, dword [rsi]
jb 0x1ed6b
push rdx
invalid
cmp byte [rax + 0x5d], bh
add ah, cl
push rsp
jo 0x1ed84
invalid
and byte [rbx + 0x21], bl
and dword [rcx], esp
and dword [rbp + 0x20], ebx
pop rbx
and eax, 0x20783830
and eax, 0x5d783830
and byte [rbx + 0x25], bl
xor byte [rax], bh
js 0x1edbb
add ah, cl
jae 0x1edb0
invalid
imul sp, word [rbx + 0x49], 0x5050
outsd dx, dword [rsi]
jb 0x1ede8
cmp ah, byte [rax]
xor dword [rax], esp
or al, byte [rax]
int3
je 0x1ede9
push 0x66617254
imul sp, word [rbx + 0x49], 0x5050
outsd dx, dword [rsi]
jb 0x1ee08
cmp ah, byte [rax]
xor ah, byte [rax]
or al, byte [rax]
int3
push rax
outsd dx, dword [rsi]
jb 0x1ee28
cmp ah, byte [rax]
xor esp, dword [rax]
sub byte [0x0a2b632a], ah
add ah, cl
jae 0x1ee10
jne 0x1ede6
or al, byte [rax]
int3
invalid
sub al, 0x20
and eax, 0x202c756c
and eax, 0xa29756c
insb byte [rdi], dx
jne 0x1ee18
and byte [0x0a2b635e], ah
add ah, cl
int3
jb 0x1ee6b
imul sp, word [rbx + 0x49], 0x5050
push rax
outsd dx, dword [rsi]
jb 0x1ee88
cmp ah, byte [rax]
xor al, 0x20
or al, byte [rax]
int3
jb 0x1ee8b
imul sp, word [rbx + 0x52], 0x6c75
cmp ah, byte gs:[rax]
xor dword [rax], esp
or al, byte [rax]
int3
imul sp, word [rbx + 0x52], 0x6c75
cmp ah, byte gs:[rax]
xor esp, dword [rax]
or al, byte [rax]
int3
jb 0x1eeeb
imul sp, word [rbx + 0x52], 0x6c75
imul sp, word [rbx + 0x52], 0x6c75
cmp ah, byte gs:[rax]
xor al, 0x20
or al, byte [rax]
int3
invalid