Function at 0x3327c
Capabilities:
Print debug messages

Disassembly:
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov rax, qword [0x000a7100]
xor rax, rsp
mov qword [rsp + 0x30], rax
xor r14d, r14d
mov r12, r8
mov rbp, rdx
lea r15d, [r14 + 1]
mov rdi, rcx
mov sil, r14b
mov rbx, r14
cmp rcx, r14
je 0x33518
cmp rdx, r14
je 0x33518
add dword [0x000b3694], r15d
lea rcx, [0x000b3680]
call qword [sym.imp.ntoskrnl.exe_ExpInterlockedPopEntrySList]
mov rbx, rax
cmp rax, r14
jne 0x33306
mov edx, dword [0x000b36ac]
mov r8d, dword [0x000b36a8]
mov ecx, dword [0x000b36a4]
add dword [0x000b3698], r15d
call qword [0x000b36b0]
mov rbx, rax
cmp rbx, r14
je 0x33518
xor edx, edx
mov r8d, 0x1380
mov rcx, rbx
call fcn.00091d10
mov r11, qword [0x000b5100]
mov rcx, rdi
cmp byte [r11 + 0x862c4], r14b
je 0x3335d
mov eax, edi
and eax, 0xfff
mov r8d, eax
add r8, r8
imul rax, rax, 0x68
xor r9d, r9d
lea r8, [r11 + r8*8 + 0x68de8]
lea rdx, [rax + r11 + 0xde8]
mov qword [rsp + 0x20], rdx
jmp 0x33370
lea r9, [r11 + 0xdcc]
lea r8, [r11 + 0xdd4]
mov qword [rsp + 0x20], r14
mov rdx, rbx
call fcn.0003141c
cmp al, r14b
je 0x33518
mov rcx, qword [0x000b5100]
add rcx, 0x841a8
call qword [sym.imp.ntoskrnl.exe_KeAcquireSpinLockRaiseToDpc]
mov rcx, qword [0x000b5100]
add rcx, 0x84198
mov r13b, al
mov rdi, qword [rcx]
cmp rdi, rcx
je 0x33501
movzx ecx, word [rdi + 0x10]
cmp ecx, 6
jg 0x33439
je 0x33430
cmp ecx, r14d
je 0x3340f
sub ecx, r15d
je 0x33409
sub ecx, r15d
je 0x33400
sub ecx, r15d
je 0x333f4
sub ecx, r15d
je 0x333e8
cmp ecx, r15d
jne 0x3349c
lea rdx, [rbx + 0xbcc]
jmp 0x3341a
lea rcx, [rbx + 0x788]
jmp 0x3348b
lea rcx, [rbx + 0x6c8]
jmp 0x3348b
lea rdx, [rbx + 0x344]
jmp 0x3341a
lea rdx, [rbx + 0x38]
jmp 0x3341a
mov eax, dword [rbx + 0x137c]
lea rdx, [rbx + rax*2 + 0x38]
mov rcx, qword [rdi + 0x14]
call fcn.00090bd8
movzx esi, r14b
cmp eax, r14d
cmovne esi, r15d
jmp 0x3349c
lea rdx, [rbx + 0xccc]
jmp 0x3341a
sub ecx, 7
je 0x33484
sub ecx, r15d
je 0x3347b
sub ecx, r15d
je 0x33472
sub ecx, r15d
je 0x33469
sub ecx, 2
je 0x33460
cmp ecx, r15d
jne 0x3349c
lea rdx, [rbx + 0x12fc]
jmp 0x3341a
lea rdx, [rbx + 0x127c]
jmp 0x3341a
lea rdx, [rbx + 0x1024]
jmp 0x3341a
lea rdx, [rbx + 0xd4c]
jmp 0x3341a
lea rdx, [rbx + 0xc4c]
jmp 0x3341a
lea rcx, [rbx + 0xdcc]
mov rdx, qword [rdi + 0x14]
call qword [sym.imp.ntoskrnl.exe__wcsicmp]
cmp eax, r14d
sete sil
cmp sil, r15b
jne 0x334c0
mov rcx, qword [rdi + 0x1c]
mov rdx, rbp
call fcn.00090b08
movzx ecx, r14b
cmp eax, r14d
cmovne ecx, r15d
mov sil, cl
cmp cl, r15b
je 0x334d8
mov rax, qword [0x000b5100]
mov rdi, qword [rdi]
add rax, 0x84198
cmp rdi, rax
jmp 0x333ac
cmp r12, r14
je 0x334ee
mov rcx, r12
mov rdx, rdi
mov r8d, 0x3c
call fcn.00091720
mov r8, qword [rdi + 0x1c]
lea rcx, [0x00095af0]
mov rdx, rbp
call sub.ntoskrnl.exe_DbgPrint
mov rcx, qword [0x000b5100]
mov dl, r13b
add rcx, 0x841a8
call qword [sym.imp.ntoskrnl.exe_KeReleaseSpinLock]
cmp sil, r14b
setne dil
cmp rbx, r14
je 0x33563
add dword [0x000b369c], r15d
lea rcx, [0x000b3680]
call qword [sym.imp.ntoskrnl.exe_ExQueryDepthSList]
cmp ax, word [0x000b3690]
jb 0x33553
add dword [0x000b36a0], r15d
mov rcx, rbx
call qword [0x000b36b8]
jmp 0x33563
lea rcx, [0x000b3680]
mov rdx, rbx
call qword [sym.imp.ntoskrnl.exe_ExpInterlockedPushEntrySList]
mov al, dil
mov rcx, qword [rsp + 0x30]
xor rcx, rsp
call fcn.000916b0
mov rbx, qword [rsp + 0x98]
add rsp, 0x40
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret