Function at 0x11ee8
Capabilities:
Print debug messages

Disassembly:
mov qword [rsp + 8], rbx
mov byte [rsp + 0x10], dl
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
mov al, byte [0x00025742]
xor r14d, r14d
mov sil, dl
mov rbx, rcx
mov byte [rsp + 0xb0], r14b
cmp al, r14b
je 0x11f3c
mov r8d, dword [0x0002575c]
movzx r9d, dl
mov rdx, rcx
lea rcx, [0x0001d550]
call sub.ntoskrnl.exe_DbgPrint
mov al, byte [0x00025742]
cmp byte [0x00025741], r14b
je 0x11f65
cmp al, r14b
je 0x12ad3
lea rcx, [0x0001d580]
mov edx, dword [0x0002575c]
call sub.ntoskrnl.exe_DbgPrint
jmp 0x12ad3
cmp byte [0x00025740], r14b
je 0x11f80
cmp al, r14b
je 0x12ad3
lea rcx, [0x0001d5c0]
jmp 0x11f55
mov r15d, 1
add dword [0x0002575c], r15d
call fcn.00014698
cmp sil, r14b
je 0x11f9f
mov dword [0x00025744], eax
jmp 0x11fa5
mov dword [0x00025758], eax
mov eax, dword [0x000241a0]
test eax, eax
jne 0x11fd3
mov edx, dword [0x0002575c]
dec edx
mov dword [0x0002575c], edx
cmp byte [0x00025742], r14b
je 0x12ad3
lea rcx, [0x0001d5f0]
jmp 0x11f5b
cmp eax, r15d
jne 0x12003
mov edx, dword [0x0002575c]
dec edx
mov dword [0x0002575c], edx
cmp byte [0x00025742], r14b
je 0x11ffb
lea rcx, [0x0001d620]
call sub.ntoskrnl.exe_DbgPrint
mov eax, r15d
jmp 0x12ad5
test rbx, rbx
jne 0x12027
dec dword [0x0002575c]
cmp byte [0x00025742], r14b
je 0x12ad3
lea rcx, [0x0001d650]
jmp 0x12ace
mov r11b, byte [0x00025742]
mov rdi, qword [rbx + 8]
mov r12d, dword [rbx + 0x10]
mov ebp, dword [rbx + 0x18]
test r11b, r11b
je 0x1205a
lea rcx, [0x0001d670]
mov r9d, ebp
mov r8d, r12d
mov rdx, rdi
call sub.ntoskrnl.exe_DbgPrint
mov r11b, byte [0x00025742]
test byte [0x0002419c], r15b
je 0x12093
mov eax, ebp
test sil, sil
je 0x1207c
lock add dword [0x00025760], r15d
lock xadd dword [0x0002576c], eax
jmp 0x1208c
lock add dword [0x00025764], r15d
lock xadd dword [0x00025774], eax
mov r11b, byte [0x00025742]
test rdi, rdi
je 0x12aa4
test byte [rdi + 0xa], 5
mov r14d, 0x10
je 0x120ae
mov r13, qword [rdi + 0x18]
jmp 0x120d3
xor r9d, r9d
mov r8d, r15d
xor edx, edx
mov rcx, rdi
mov dword [rsp + 0x28], r14d
and dword [rsp + 0x20], 0
call qword [sym.imp.ntoskrnl.exe_MmMapLockedPagesSpecifyCache]
mov r11b, byte [0x00025742]
mov r13, rax
mov esi, dword [rdi + 0x28]
test r13, r13
je 0x12a78
test esi, esi
je 0x12a78
test r11b, r11b
je 0x12105
lea rcx, [0x0001d750]
mov r8d, esi
mov rdx, r13
call sub.ntoskrnl.exe_DbgPrint
mov r11b, byte [0x00025742]
sub esi, r12d
test r11b, r11b
je 0x12122
lea rcx, [0x0001d790]
mov edx, esi
call sub.ntoskrnl.exe_DbgPrint
mov r11b, byte [0x00025742]
cmp esi, 0xe
jae 0x1215a
test r11b, r11b
je 0x1213f
lea rcx, [0x0001d7c0]
call sub.ntoskrnl.exe_DbgPrint
mov r11b, byte [0x00025742]
dec dword [0x0002575c]
test r11b, r11b
je 0x12ad3
lea rcx, [0x0001d7f0]
jmp 0x12ace
add r13, r12
mov qword [rsp + 0x58], r13
movzx ecx, word [r13 + 0xc]
mov word [rsp + 0xb8], cx
mov al, byte [rsp + 0xb9]
mov byte [rsp + 0x41], cl
mov byte [rsp + 0x40], al
movzx ebx, word [rsp + 0x40]
test r11b, r11b
je 0x121a5
lea rcx, [0x0001d810]
movzx r8d, bx
mov r9d, esi
mov rdx, r13
call sub.ntoskrnl.exe_DbgPrint
mov r11b, byte [0x00025742]
mov eax, 0x806
cmp bx, ax
je 0x129cd
mov eax, 0x8035
cmp bx, ax
je 0x129cd
mov eax, 0x800
cmp bx, ax
je 0x121e6
dec dword [0x0002575c]
test r11b, r11b
je 0x12ad3
lea rcx, [0x0001d8c0]
jmp 0x12ace
test r11b, r11b
je 0x12200
lea rcx, [0x0001d8e0]
mov edx, esi
call sub.ntoskrnl.exe_DbgPrint
mov r11b, byte [0x00025742]
lea ebx, [rsi - 0xe]
cmp ebx, 0x14
jb 0x1222f
add r13, 0xe
test r11b, r11b
je 0x122a6
lea rcx, [0x0001d910]
mov r8, r13
mov edx, ebx
call sub.ntoskrnl.exe_DbgPrint
mov r11b, byte [0x00025742]
jmp 0x122a6
mov rdi, qword [rdi]
test rdi, rdi
je 0x129a0
test byte [rdi + 0xa], 5
je 0x12247
mov r13, qword [rdi + 0x18]
jmp 0x1226c
xor r9d, r9d
mov r8d, r15d
xor edx, edx
mov rcx, rdi
mov dword [rsp + 0x28], r14d
and dword [rsp + 0x20], 0
call qword [sym.imp.ntoskrnl.exe_MmMapLockedPagesSpecifyCache]
mov r11b, byte [0x00025742]
mov r13, rax
mov ebx, dword [rdi + 0x28]
test r11b, r11b
je 0x12294
lea rcx, [0x0001d950]
mov r9, rdi
mov r8, r13
mov edx, ebx
mov dword [rsp + 0x20], r14d
call sub.ntoskrnl.exe_DbgPrint
mov r11b, byte [0x00025742]
test r13, r13
je 0x1297b
cmp ebx, 0x14
jb 0x1297b
mov al, byte [r13]
and al, 0xf0
cmp al, 0x40
jne 0x1294d
mov al, byte [r13]
and al, 0xf
cmp al, 5
jne 0x1294d
movzx ecx, word [r13 + 2]
movzx r15d, byte [r13]
and r15d, 0xf
mov word [rsp + 0x40], cx
mov al, byte [rsp + 0x41]
mov byte [rsp + 0x51], cl
mov byte [rsp + 0x50], al
shl r15d, 2
movzx r14d, word [rsp + 0x50]
test r14d, r14d
jne 0x1231e
cmp ebp, 0xe
jbe 0x1231e
cmp byte [r13 + 9], 6
jne 0x1231e
lea r14d, [rbp - 0xe]
test r11b, r11b
je 0x12350
lea rcx, [0x0001daa0]
mov r8d, ebp
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
mov r11b, byte [0x00025742]
test r11b, r11b
je 0x12350
lea eax, [rbp - 0xe]
lea rcx, [0x0001dae0]
mov r9d, ebx
mov dword [rsp + 0x30], eax
mov r8d, r15d
mov edx, r14d
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], r15d
call sub.ntoskrnl.exe_DbgPrint
mov r11b, byte [0x00025742]
cmp r14d, r15d
jb 0x12913
cmp ebx, r15d
jb 0x12913
lea eax, [rbp - 0xe]
cmp r14d, eax
ja 0x12913
movzx ecx, byte [r13 + 9]
mov edx, 1
sub ecx, edx
je 0x1260a
sub ecx, 5
je 0x124e5
cmp ecx, 0xb
je 0x123a9
dec dword [0x0002575c]
test r11b, r11b
je 0x12ad3
lea rcx, [0x0001dc90]
jmp 0x12ace
mov sil, byte [rsp + 0xa8]
mov r12d, 8
test byte [0x0002419c], r12b
je 0x123f0
lea eax, [r14 + 0xe]
test sil, sil
je 0x123da
lock add dword [0x00025798], edx
lock xadd dword [0x000257ac], eax
jmp 0x123e9
lock add dword [0x0002579c], edx
lock xadd dword [0x000257b4], eax
mov r11b, byte [0x00025742]
movzx ecx, word [r13 + 6]
mov word [rsp + 0x48], cx
mov al, byte [rsp + 0x49]
mov byte [rsp + 0xb9], cl
mov byte [rsp + 0xb8], al
mov eax, 0x1fff
test word [rsp + 0xb8], ax
je 0x12436
dec dword [0x0002575c]
test r11b, r11b
je 0x12ad3
lea rcx, [0x0001dbf0]
jmp 0x12ace
sub ebx, r15d
cmp ebx, r12d
jb 0x12446
mov ebp, r15d
add rbp, r13
jmp 0x1248f
mov rdi, qword [rdi]
test rdi, rdi
je 0x124ca
test byte [rdi + 0xa], 5
je 0x1245a
mov rbp, qword [rdi + 0x18]
jmp 0x12482
mov r8d, edx
xor r9d, r9d
mov rcx, rdi
xor edx, edx
mov dword [rsp + 0x28], 0x10
and dword [rsp + 0x20], 0
call qword [sym.imp.ntoskrnl.exe_MmMapLockedPagesSpecifyCache]
mov r11b, byte [0x00025742]
mov rbp, rax
mov ebx, dword [rdi + 0x28]
test rbp, rbp
je 0x124af
cmp ebx, r12d
jb 0x124af
cmp dword [0x000257bc], 0
je 0x12698
mov r8b, sil
mov rdx, rbp
mov rcx, r13
call fcn.00011d38
jmp 0x12691
dec dword [0x0002575c]
test r11b, r11b
je 0x12ad3
lea rcx, [0x0001dc30]
jmp 0x12ace
dec dword [0x0002575c]
test r11b, r11b
je 0x12ad3
lea rcx, [0x0001dc10]
jmp 0x12ace
test byte [0x0002419c], 0x10
mov sil, byte [rsp + 0xa8]
je 0x12526
lea eax, [r14 + 0xe]
test sil, sil
je 0x12510
lock add dword [0x00025778], edx
lock xadd dword [0x0002578c], eax
jmp 0x1251f
lock add dword [0x0002577c], edx
lock xadd dword [0x00025794], eax
mov r11b, byte [0x00025742]
sub ebx, r15d
cmp ebx, 0x14
jb 0x12536
mov ebp, r15d
add rbp, r13
jmp 0x12583
mov rdi, qword [rdi]
test rdi, rdi
je 0x125ef
test byte [rdi + 0xa], 5
je 0x1254e
mov rbp, qword [rdi + 0x18]
jmp 0x12576
mov r8d, edx
xor r9d, r9d
mov rcx, rdi
xor edx, edx
mov dword [rsp + 0x28], 0x10
and dword [rsp + 0x20], 0
call qword [sym.imp.ntoskrnl.exe_MmMapLockedPagesSpecifyCache]
mov r11b, byte [0x00025742]
mov rbp, rax
mov ebx, dword [rdi + 0x28]
test rbp, rbp
je 0x125d4
cmp ebx, 0x14
jb 0x125d4
movzx r12d, word [rbp + 0xc]
shr r12d, 4
and r12d, 0xf
shl r12d, 2
cmp ebx, r12d
jae 0x125b4
dec dword [0x0002575c]
test r11b, r11b
je 0x12ad3
lea rcx, [0x0001dbd0]
jmp 0x12ace
cmp dword [0x000257b8], 0
je 0x12698
mov r8b, sil
mov rdx, rbp
mov rcx, r13
call fcn.00011c44
jmp 0x12691
dec dword [0x0002575c]
test r11b, r11b
je 0x12ad3
lea rcx, [0x0001dbb0]
jmp 0x12ace
dec dword [0x0002575c]
test r11b, r11b
je 0x12ad3
lea rcx, [0x0001db90]
jmp 0x12ace
sub ebx, r15d
mov r12d, 8
cmp ebx, r12d
jb 0x12620
mov ebp, r15d
add rbp, r13
jmp 0x12675
mov rdi, qword [rdi]
test rdi, rdi
je 0x128f8
test byte [rdi + 0xa], 5
je 0x12638
mov rbp, qword [rdi + 0x18]
jmp 0x12660
mov r8d, edx
xor r9d, r9d
mov rcx, rdi
xor edx, edx
mov dword [rsp + 0x28], 0x10
and dword [rsp + 0x20], 0
call qword [sym.imp.ntoskrnl.exe_MmMapLockedPagesSpecifyCache]
mov r11b, byte [0x00025742]
mov rbp, rax
mov ebx, dword [rdi + 0x28]
test rbp, rbp
je 0x128dd
cmp ebx, r12d
jb 0x128dd
cmp dword [0x000257c0], 0
je 0x12698
mov r8b, byte [rsp + 0xa8]
mov rdx, rbp
mov rcx, r13
call fcn.00011e2c
mov r11b, byte [0x00025742]
mov eax, r14d
sub eax, r15d
cmp ebx, eax
jb 0x126b0
mov esi, r12d
add rsi, rbp
sub ebx, r12d
jmp 0x127b1
mov rdi, qword [rdi]
and dword [rsp + 0x48], 0
mov ebx, r14d
sub ebx, r12d
xor esi, esi
sub ebx, r15d
test rdi, rdi
je 0x127a5
test byte [rdi + 0xa], 5
je 0x126d8
mov rcx, qword [rdi + 0x18]
jmp 0x126fa
xor r9d, r9d
xor edx, edx
mov rcx, rdi
lea r8d, [r9 + 1]
mov dword [rsp + 0x28], 0x10
and dword [rsp + 0x20], 0
call qword [sym.imp.ntoskrnl.exe_MmMapLockedPagesSpecifyCache]
mov rcx, rax
mov eax, dword [rdi + 0x28]
mov qword [rsp + 0x50], rcx
mov dword [rsp + 0xb8], eax
test rcx, rcx
je 0x12784
test eax, eax
je 0x12784
test rsi, rsi
jne 0x12740
cmp eax, ebx
jae 0x127eb
mov edx, ebx
xor ecx, ecx
call qword [sym.imp.ntoskrnl.exe_ExAllocatePool]
mov rsi, rax
test rax, rax
je 0x12784
mov eax, dword [rsp + 0xb8]
mov byte [rsp + 0xb0], 1
mov edx, dword [rsp + 0x48]
mov ecx, ebx
sub ecx, edx
cmp eax, ecx
cmova eax, ecx
lea rcx, [rsi + rdx]
mov rdx, qword [rsp + 0x50]
mov r8d, eax
mov dword [rsp + 0xb8], eax
call fcn.0001cf80
mov eax, dword [rsp + 0x48]
add eax, dword [rsp + 0xb8]
mov dword [rsp + 0x48], eax
cmp eax, ebx
je 0x127f0
mov rdi, qword [rdi]
test rdi, rdi
jne 0x126cc
cmp byte [rsp + 0xb0], 0
je 0x1279e
test rsi, rsi
je 0x1279e
xor edx, edx
mov rcx, rsi
call qword [sym.imp.ntoskrnl.exe_ExFreePoolWithTag]
mov r11b, byte [0x00025742]
xor esi, esi
mov byte [rsp + 0xb0], 0
xor ebx, ebx
sub r14d, r12d
sub r14d, r15d
cmp ebx, r14d
cmova ebx, r14d
xor r14d, r14d
cmp r11b, r14b
je 0x127f9
movzx r12d, byte [rsp + 0xa8]
mov r8d, dword [r13 + 0xc]
lea rcx, [0x0001dcb0]
mov edx, r12d
call sub.ntoskrnl.exe_DbgPrint
mov r11b, byte [0x00025742]
jmp 0x12801
mov rsi, rcx
mov ebx, eax
mov r11b, byte [0x00025742]
jmp 0x127b1
mov r12b, byte [rsp + 0xa8]
lea rdi, [r13 + 0xc]
cmp rdi, r14
je 0x12870
cmp r11b, r14b
je 0x12829
mov r8d, dword [rdi]
lea rcx, [0x0001dcf0]
movzx edx, r12b
call sub.ntoskrnl.exe_DbgPrint
mov r11b, byte [0x00025742]
cmp r12b, r14b
jne 0x12870
mov ecx, dword [rdi]
call fcn.00018168
cmp al, r14b
je 0x12870
cmp r11b, r14b
je 0x1284b
lea rcx, [0x0001dd30]
call sub.ntoskrnl.exe_DbgPrint
cmp byte [rsp + 0xb0], r14b
je 0x12865
cmp rsi, r14
je 0x12865
xor edx, edx
mov rcx, rsi
call qword [sym.imp.ntoskrnl.exe_ExFreePoolWithTag]
dec dword [0x0002575c]
jmp 0x12ad3
mov rcx, qword [rsp + 0x58]
mov r9, r14
cmp ebx, r14d
mov r8, rbp
mov rdx, r13
cmova r9, rsi
mov byte [rsp + 0x28], r12b
mov dword [rsp + 0x20], ebx
call fcn.00012af4
mov ebx, eax
cmp byte [rsp + 0xb0], r14b
je 0x128af
cmp rsi, r14
je 0x128af
xor edx, edx
mov rcx, rsi
call qword [sym.imp.ntoskrnl.exe_ExFreePoolWithTag]
mov edx, dword [0x0002575c]
dec edx
mov dword [0x0002575c], edx
cmp byte [0x00025742], r14b
je 0x128d6
lea rcx, [0x0001dd60]
movzx r8d, r12b
call sub.ntoskrnl.exe_DbgPrint
mov eax, ebx
jmp 0x12ad5
dec dword [0x0002575c]
test r11b, r11b
je 0x12ad3
lea rcx, [0x0001dc70]
jmp 0x12ace
dec dword [0x0002575c]
test r11b, r11b
je 0x12ad3
lea rcx, [0x0001dc50]
jmp 0x12ace
dec dword [0x0002575c]
test r11b, r11b
je 0x12ad3
lea eax, [rbp - 0xe]
lea rcx, [0x0001db30]
mov r9d, ebx
mov dword [rsp + 0x30], eax
mov r8d, r15d
mov edx, r14d
mov dword [rsp + 0x28], r14d
mov dword [rsp + 0x20], r15d
call sub.ntoskrnl.exe_DbgPrint
jmp 0x12ad3
dec dword [0x0002575c]
test r11b, r11b
je 0x12ad3
movzx r9d, byte [r13]
lea rcx, [0x0001da50]
mov r8, r13
shr r9d, 4
mov edx, ebx
call sub.ntoskrnl.exe_DbgPrint
jmp 0x12ad3
dec dword [0x0002575c]
test r11b, r11b
je 0x12ad3
lea rcx, [0x0001da00]
mov r8, r13
mov edx, ebx
call sub.ntoskrnl.exe_DbgPrint
jmp 0x12ad3
dec dword [0x0002575c]
test r11b, r11b
je 0x12ad3
lea rcx, [0x0001d9a0]
xor r9d, r9d
xor r8d, r8d
mov edx, esi
mov dword [rsp + 0x20], r14d
call sub.ntoskrnl.exe_DbgPrint
jmp 0x12ad3
lea eax, [rsi - 0xe]
cmp eax, 0x1c
jae 0x12a4c
mov rbx, qword [rdi]
test rbx, rbx
je 0x12a31
test byte [rbx + 0xa], 5
je 0x129e9
mov rax, qword [rbx + 0x18]
jmp 0x12a0b
xor r9d, r9d
mov r8d, r15d
xor edx, edx
mov rcx, rbx
mov dword [rsp + 0x28], r14d
and dword [rsp + 0x20], 0
call qword [sym.imp.ntoskrnl.exe_MmMapLockedPagesSpecifyCache]
mov r11b, byte [0x00025742]
test rax, rax
je 0x12a16
cmp dword [rbx + 0x28], 0x1c
jae 0x12a4c
dec dword [0x0002575c]
test r11b, r11b
je 0x12ad3
lea rcx, [0x0001d880]
jmp 0x12ace
dec dword [0x0002575c]
test r11b, r11b
je 0x12ad3
lea rcx, [0x0001d860]
jmp 0x12ace
dec dword [0x0002575c]
test r11b, r11b
je 0x12ad3
lea rcx, [0x0001d8a0]
call sub.ntoskrnl.exe_DbgPrint
xor r14d, r14d
cmp byte [0x00025742], r14b
je 0x12ad3
lea rcx, [0x0001d530]
jmp 0x12ace
test r11b, r11b
je 0x12a90
lea rcx, [0x0001d700]
call sub.ntoskrnl.exe_DbgPrint
mov r11b, byte [0x00025742]
dec dword [0x0002575c]
test r11b, r11b
je 0x12ad3
lea rcx, [0x0001d730]
jmp 0x12ace
test r11b, r11b
je 0x12abc
lea rcx, [0x0001d6c0]
call sub.ntoskrnl.exe_DbgPrint
mov r11b, byte [0x00025742]
dec dword [0x0002575c]
test r11b, r11b
je 0x12ad3
lea rcx, [0x0001d6e0]
call sub.ntoskrnl.exe_DbgPrint
xor eax, eax
mov rbx, qword [rsp + 0xa0]
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret