Function at 0x16df4
Capabilities:
Print debug messages

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
mov ebp, ecx
movzx ecx, word [rsp + 0xb0]
mov word [rax - 0x34], r9w
mov word [rax - 0x38], cx
mov al, byte [0x00025742]
xor ebx, ebx
movzx r12d, r9w
movzx edi, r8w
mov word [rsp + 0xa8], r8w
movzx r13d, dx
cmp al, bl
je 0x16e8f
movzx eax, byte [0x00025743]
movzx r10d, cx
movzx r11d, r9w
mov dword [rsp + 0x38], eax
mov eax, dword [0x0002c468]
movzx r9d, r8w
mov dword [rsp + 0x30], eax
movzx r8d, dx
mov dword [rsp + 0x28], r10d
lea rcx, [0x0001f890]
mov edx, ebp
mov dword [rsp + 0x20], r11d
call sub.ntoskrnl.exe_DbgPrint
mov al, byte [0x00025742]
mov cx, word [rsp + 0xb0]
mov esi, 1
lea edx, [rsi + 2]
cmp byte [0x00025743], bl
je 0x16ecf
cmp r13w, si
je 0x16ecf
cmp r13w, dx
jne 0x16eb8
cmp di, 0x35
je 0x16ecf
cmp r12w, 0x35
je 0x16ecf
cmp al, bl
je 0x16ec8
lea rcx, [0x0001f920]
call sub.ntoskrnl.exe_DbgPrint
mov eax, esi
jmp 0x17105
cmp byte [0x00025a20], bl
je 0x16f3f
cmp cx, si
cmove di, r12w
cmp al, bl
je 0x16ef5
lea rcx, [0x0001f960]
movzx r8d, di
mov edx, ebp
call sub.ntoskrnl.exe_DbgPrint
movzx edi, di
mov ecx, ebp
mov edx, edi
call fcn.000157ec
cmp al, bl
jne 0x16f23
mov edx, edi
mov ecx, ebp
call fcn.00015910
cmp al, bl
jne 0x16f23
cmp byte [0x00025742], bl
je 0x16ec8
lea rcx, [0x0001f9e0]
jmp 0x16ec3
cmp byte [0x00025742], bl
je 0x16f37
lea rcx, [0x0001f9a0]
call sub.ntoskrnl.exe_DbgPrint
mov di, word [rsp + 0xa8]
cmp dword [0x0002c468], ebx
jne 0x16f4e
xor eax, eax
jmp 0x17105
lea rcx, [0x00024b80]
call fcn.000146e0
mov r15, rax
cmp rax, rbx
je 0x16f47
xor edx, edx
mov r8d, 0x19c
mov rcx, rax
call fcn.0001ce80
mov dword [r15], ebp
call fcn.00014698
lea rcx, [0x0002c478]
mov dword [rsp + 0x5c], eax
call qword [sym.imp.ntoskrnl.exe_KeAcquireSpinLockRaiseToDpc]
mov r14d, dword [0x0002c468]
mov rsi, qword [0x0002c470]
mov byte [0x0002c480], al
cmp r14d, ebx
jbe 0x17093
cmp dword [rsi + 0xc], ebx
je 0x16fba
mov eax, dword [rsp + 0x5c]
cmp eax, dword [rsi + 0xc]
jae 0x1705b
mov qword [rsp + 0x40], r15
lea rax, [rsp + 0x50]
movzx r9d, di
mov qword [rsp + 0x38], rax
lea rax, [rsp + 0x54]
movzx r8d, r13w
mov qword [rsp + 0x30], rax
mov ax, word [rsp + 0xb0]
mov edx, ebp
mov word [rsp + 0x28], ax
mov rcx, rsi
mov word [rsp + 0x20], r12w
call fcn.0001668c
mov dil, al
cmp byte [0x00025742], bl
je 0x1701a
mov r9d, dword [rsi + 0x14]
lea rcx, [0x0001fa20]
movzx r8d, al
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
cmp dil, bl
je 0x1705b
mov edi, dword [rsi + 0x14]
and edi, 3
cmp edi, 2
je 0x17033
test dword [rsi + 0x14], 0xff0
je 0x17051
movzx eax, word [rsp + 0x50]
movzx r8d, word [rsp + 0x54]
movzx r9d, r13w
mov edx, ebp
mov rcx, rsi
mov word [rsp + 0x20], ax
call fcn.00017274
cmp edi, 2
je 0x17075
cmp edi, 1
je 0x17075
mov eax, dword [rsi]
dec r14d
add rsi, rax
cmp r14d, ebx
jbe 0x17093
mov di, word [rsp + 0xa8]
jmp 0x16fa8
mov esi, edi
cmp byte [0x00025742], bl
je 0x17095
lea rcx, [0x0001fa60]
mov r8d, edi
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
jmp 0x17095
mov esi, ebx
mov dl, byte [0x0002c480]
lea rcx, [0x0002c478]
call qword [sym.imp.ntoskrnl.exe_KeReleaseSpinLock]
lea rcx, [0x00024b80]
mov rdx, r15
call fcn.00014714
cmp byte [0x00025742], bl
je 0x170fd
mov ecx, dword [0x0002c468]
movzx edx, word [rsp + 0xb0]
movzx r9d, word [rsp + 0xa8]
mov dword [rsp + 0x38], esi
mov dword [rsp + 0x30], ecx
mov dword [rsp + 0x28], edx
movzx r10d, r12w
lea rcx, [0x0001faa0]
movzx r8d, r13w
mov edx, ebp
mov dword [rsp + 0x20], r10d
call sub.ntoskrnl.exe_DbgPrint
cmp esi, 2
sete bl
mov eax, ebx
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret