Function at 0x17cb0
Capabilities:
Print debug messages

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
mov ebp, ecx
movzx ecx, word [rsp + 0xb0]
mov word [rax - 0x34], r9w
mov word [rax - 0x38], cx
mov al, byte [0x000266c2]
xor ebx, ebx
movzx r12d, r9w
movzx edi, r8w
mov word [rsp + 0xa8], r8w
movzx r13d, dx
cmp al, bl
je 0x17d4b
movzx eax, byte [0x000266c3]
movzx r10d, cx
movzx r11d, r9w
mov dword [rsp + 0x38], eax
mov eax, dword [0x0002d408]
movzx r9d, r8w
mov dword [rsp + 0x30], eax
movzx r8d, dx
mov dword [rsp + 0x28], r10d
lea rcx, [0x00020270]
mov edx, ebp
mov dword [rsp + 0x20], r11d
call sub.ntoskrnl.exe_DbgPrint
mov al, byte [0x000266c2]
mov cx, word [rsp + 0xb0]
mov esi, 1
lea edx, [rsi + 2]
cmp byte [0x000266c3], bl
je 0x17d8b
cmp r13w, si
je 0x17d8b
cmp r13w, dx
jne 0x17d74
cmp di, 0x35
je 0x17d8b
cmp r12w, 0x35
je 0x17d8b
cmp al, bl
je 0x17d84
lea rcx, [0x00020300]
call sub.ntoskrnl.exe_DbgPrint
mov eax, esi
jmp 0x17fc1
cmp byte [0x000269d8], bl
je 0x17dfb
cmp cx, si
cmove di, r12w
cmp al, bl
je 0x17db1
lea rcx, [0x00020340]
movzx r8d, di
mov edx, ebp
call sub.ntoskrnl.exe_DbgPrint
movzx edi, di
mov ecx, ebp
mov edx, edi
call fcn.000166a8
cmp al, bl
jne 0x17ddf
mov edx, edi
mov ecx, ebp
call fcn.000167cc
cmp al, bl
jne 0x17ddf
cmp byte [0x000266c2], bl
je 0x17d84
lea rcx, [0x000203c0]
jmp 0x17d7f
cmp byte [0x000266c2], bl
je 0x17df3
lea rcx, [0x00020380]
call sub.ntoskrnl.exe_DbgPrint
mov di, word [rsp + 0xa8]
cmp dword [0x0002d408], ebx
jne 0x17e0a
xor eax, eax
jmp 0x17fc1
lea rcx, [0x00025b40]
call fcn.0001559c
mov r15, rax
cmp rax, rbx
je 0x17e03
xor edx, edx
mov r8d, 0x19c
mov rcx, rax
call fcn.0001dc60
mov dword [r15], ebp
call fcn.00015554
lea rcx, [0x0002d418]
mov dword [rsp + 0x5c], eax
call qword [sym.imp.ntoskrnl.exe_KeAcquireSpinLockRaiseToDpc]
mov r14d, dword [0x0002d408]
mov rsi, qword [0x0002d410]
mov byte [0x0002d420], al
cmp r14d, ebx
jbe 0x17f4f
cmp dword [rsi + 0xc], ebx
je 0x17e76
mov eax, dword [rsp + 0x5c]
cmp eax, dword [rsi + 0xc]
jae 0x17f17
mov qword [rsp + 0x40], r15
lea rax, [rsp + 0x50]
movzx r9d, di
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x54]
movzx r8d, r13w
mov qword [rsp + 0x30], rax
mov ax, word [rsp + 0xb0]
mov edx, ebp
mov word [rsp + 0x28], ax
mov rcx, rsi
mov word [rsp + 0x20], r12w
call fcn.00017548
mov dil, al
cmp byte [0x000266c2], bl
je 0x17ed6
mov r9d, dword [rsi + 0x14]
lea rcx, [0x00020400]
movzx r8d, al
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
cmp dil, bl
je 0x17f17
mov edi, dword [rsi + 0x14]
and edi, 3
cmp edi, 2
je 0x17eef
test dword [rsi + 0x14], 0xff0
je 0x17f0d
movzx eax, word [rsp + 0x50]
movzx r8d, word [rsp + 0x54]
movzx r9d, r13w
mov edx, ebp
mov rcx, rsi
mov word [rsp + 0x20], ax
call fcn.00018130
cmp edi, 2
je 0x17f31
cmp edi, 1
je 0x17f31
mov eax, dword [rsi]
dec r14d
add rsi, rax
cmp r14d, ebx
jbe 0x17f4f
mov di, word [rsp + 0xa8]
jmp 0x17e64
mov esi, edi
cmp byte [0x000266c2], bl
je 0x17f51
lea rcx, [0x00020440]
mov r8d, edi
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
jmp 0x17f51
mov esi, ebx
mov dl, byte [0x0002d420]
lea rcx, [0x0002d418]
call qword [sym.imp.ntoskrnl.exe_KeReleaseSpinLock]
lea rcx, [0x00025b40]
mov rdx, r15
call fcn.000155d0
cmp byte [0x000266c2], bl
je 0x17fb9
mov ecx, dword [0x0002d408]
movzx edx, word [rsp + 0xb0]
movzx r9d, word [rsp + 0xa8]
mov dword [rsp + 0x38], esi
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], edx
movzx r10d, r12w
lea rcx, [0x00020480]
movzx r8d, r13w
mov edx, ebp
mov dword [rsp + 0x20], r10d
call sub.ntoskrnl.exe_DbgPrint
cmp esi, 2
sete bl
mov eax, ebx
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret