Function at 0x111c0
Capabilities:
Print debug messages

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x40
mov dword [ebp - 0x30], 0xc0000001
mov dword [ebp - 8], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x38], 0
push 0x12d40
call sub.ntoskrnl.exe_DbgPrint
add esp, 4
push 0x12d20
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
lea ecx, [ebp - 0x18]
push ecx
push 0
push 0
mov edx, dword [sym.imp.ntoskrnl.exe_IoDriverObjectType]
push edx
push 0
push 0
push 0x40
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.ntoskrnl.exe_ObReferenceObjectByName]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jge 0x1126f
push 0x12cf0
call sub.ntoskrnl.exe_DbgPrint
add esp, 4
jmp 0x11285
mov ecx, dword [ebp - 0x18]
call dword [sym.imp.ntoskrnl.exe_ObfDereferenceObject]
push 0x12cd0
call sub.ntoskrnl.exe_DbgPrint
add esp, 4
push 0x12ca0
lea ecx, [ebp - 0x14]
push ecx
call dword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
lea edx, [ebp - 0x2c]
push edx
push 0
push 0
mov eax, dword [sym.imp.ntoskrnl.exe_IoDriverObjectType]
push eax
push 0
push 0
push 0x40
lea ecx, [ebp - 0x14]
push ecx
call dword [sym.imp.ntoskrnl.exe_ObReferenceObjectByName]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jge 0x112ca
push 0x12c70
call sub.ntoskrnl.exe_DbgPrint
add esp, 4
jmp 0x112e0
mov ecx, dword [ebp - 0x2c]
call dword [sym.imp.ntoskrnl.exe_ObfDereferenceObject]
push 0x12c50
call sub.ntoskrnl.exe_DbgPrint
add esp, 4
cmp dword [ebp - 0x2c], 0
je 0x112f9
cmp dword [ebp - 0x18], 0
je 0x112f9
push 0x12c30
call sub.ntoskrnl.exe_DbgPrint
add esp, 4
cmp dword [ebp - 0x2c], 0
jne 0x1131c
cmp dword [ebp - 0x18], 0
jne 0x1131c
push 0x12c20
call sub.ntoskrnl.exe_DbgPrint
add esp, 4
mov eax, 0xc0000001
jmp 0x114cd
cmp dword [ebp - 0x2c], 0
je 0x1132a
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x40], edx
jmp 0x11330
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x34]
mov eax, dword [edx + 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx + 0x28]
mov dword [ebp - 0x28], edx
push 0x12bf0
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
lea ecx, [ebp - 0x24]
push ecx
push 0
push 0
mov edx, dword [sym.imp.ntoskrnl.exe_IoDriverObjectType]
push edx
push 0
push 0
push 0x40
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.ntoskrnl.exe_ObReferenceObjectByName]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jge 0x11398
push 0x12bc0
call sub.ntoskrnl.exe_DbgPrint
add esp, 4
mov eax, 0xc0000001
jmp 0x114cd
mov ecx, dword [ebp - 0x24]
call dword [sym.imp.ntoskrnl.exe_ObfDereferenceObject]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0xc], ecx
push 0x12b90
call sub.ntoskrnl.exe_DbgPrint
add esp, 4
mov edx, dword [ebp - 0x24]
mov eax, dword [edx + 4]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x114ca
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0x38], ecx
jmp 0x113ed
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x38]
add eax, 4
mov dword [ebp - 0x38], eax
cmp dword [ebp - 8], 0x1000
jge 0x114bc
mov ecx, dword [ebp - 0x38]
push ecx
call dword [sym.imp.ntoskrnl.exe_MmIsAddressValid]
movzx edx, al
test edx, edx
jne 0x11410
jmp 0x114bc
cmp dword [0x131b4], 0
je 0x1142e
cmp dword [0x131b8], 0
je 0x1142e
mov dword [ebp - 0x30], 0
jmp 0x114bc
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x3c]
cmp edx, dword [ebp - 0x20]
jne 0x11459
mov eax, dword [ebp - 0x3c]
mov dword [0x131b4], eax
mov ecx, dword [ebp - 0x3c]
push ecx
push 0x12b70
call sub.ntoskrnl.exe_DbgPrint
add esp, 8
jmp 0x113db
mov edx, dword [ebp - 0x3c]
cmp edx, dword [ebp - 0x1c]
jbe 0x114b7
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0xc]
cmp dword [ebp - 0x3c], eax
jae 0x114b7
mov ecx, dword [ebp - 0x3c]
push ecx
call dword [sym.imp.ntoskrnl.exe_MmIsAddressValid]
movzx edx, al
test edx, edx
je 0x114b7
mov eax, dword [ebp - 0x3c]
mov dword [0x131b8], eax
mov ecx, dword [ebp - 0x38]
mov dword [0x131bc], ecx
mov edx, dword [0x131bc]
push edx
mov eax, dword [ebp - 0x3c]
push eax
push 0x12b40
call sub.ntoskrnl.exe_DbgPrint
add esp, 0xc
mov dword [section..data], 0
mov eax, dword [section..data]
jmp 0x114cd
jmp 0x113db
mov ecx, dword [ebp - 0x20]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x20], edx
jmp 0x113c9
mov eax, dword [ebp - 0x30]
mov esp, ebp
pop ebp
ret 4