Function at 0x901dc
Capabilities:
Disable driver code integrity
Print debug messages

Disassembly:
mov r11, rsp
mov qword [r11 + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
xor r12d, r12d
xor eax, eax
lea rdx, [r11 - 0x48]
lea rcx, [0x0009e160]
mov qword [r11 + 8], r12
mov rdi, r12
mov qword [r11 + 0x10], r12
mov qword [r11 - 0x48], r12
mov qword [r11 - 0x40], rax
call fcn.0003a74c
mov ebp, 0xc0000000
mov edx, eax
and eax, ebp
cmp eax, ebp
jne 0x90238
lea rcx, [0x0009e170]
call sub.ntoskrnl.exe_DbgPrint
jmp 0x9058c
mov rbx, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x40]
lea rcx, [0x0009e1b0]
mov r8, rbx
mov rdx, rsi
call sub.ntoskrnl.exe_DbgPrint
lea r8, [0x0009e1e0]
lea rdx, [rsp + 0x48]
mov rcx, rsi
call fcn.0003a928
mov r13, rax
cmp rax, r12
jne 0x9027c
lea rcx, [0x0009e1f0]
jmp 0x90587
lea rcx, [0x0009e230]
mov rdx, rax
call sub.ntoskrnl.exe_DbgPrint
mov r11d, esi
mov r9d, 0x64
lea rax, [rsp + 0x90]
sub r11d, r13d
lea rcx, [0x000a7111]
mov qword [rsp + 0x30], rax
add r11d, ebx
lea r8d, [r9 - 0x63]
mov dword [rsp + 0x28], r11d
mov dl, 0xcc
mov qword [rsp + 0x20], r13
call fcn.0003ab50
and eax, ebp
cmp eax, ebp
je 0x90580
mov rbp, qword [rsp + 0x90]
cmp rbp, r12
je 0x90580
mov rcx, rbp
call qword [sym.imp.ntoskrnl.exe_MmIsAddressValid]
cmp al, r12b
je 0x90580
cmp rbp, rsi
jb 0x90580
lea r12, [rbx + rsi]
cmp rbp, r12
ja 0x90580
lea r14, [rbp + 1]
lea rax, [rsp + 0x90]
mov r15d, esi
mov qword [rsp + 0x30], rax
sub r13d, ebp
sub r15d, r14d
lea rcx, [0x000a7110]
add r15d, ebx
lea r9d, [r13 + 0x64]
mov r8d, 1
mov dl, 0xcc
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r14
call fcn.0003ab50
mov ecx, 0xc0000000
and eax, ecx
cmp eax, ecx
je 0x9037f
mov rbp, qword [rsp + 0x90]
test rbp, rbp
je 0x9037f
mov rcx, rbp
call qword [sym.imp.ntoskrnl.exe_MmIsAddressValid]
test al, al
je 0x9037f
cmp rbp, rsi
jb 0x9037f
cmp rbp, r12
ja 0x9037f
mov r13d, 0xc0000000
jmp 0x90400
lea rcx, [0x0009e260]
call sub.ntoskrnl.exe_DbgPrint
lea r11, [rsp + 0x90]
lea r9d, [r13 + 0x64]
mov qword [rsp + 0x30], r11
lea rcx, [0x000a7111]
mov r8d, 1
mov dl, 0xcc
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x20], r14
call fcn.0003ab50
mov r13d, 0xc0000000
and eax, r13d
cmp eax, r13d
je 0x90580
mov rbp, qword [rsp + 0x90]
test rbp, rbp
je 0x90580
mov rcx, rbp
call qword [sym.imp.ntoskrnl.exe_MmIsAddressValid]
test al, al
je 0x90580
cmp rbp, rsi
jb 0x90580
cmp rbp, r12
ja 0x90580
movsxd rax, dword [rbp + 1]
lea rbp, [rax + rbp + 5]
test rbp, rbp
je 0x90577
mov rcx, rbp
call qword [sym.imp.ntoskrnl.exe_MmIsAddressValid]
test al, al
je 0x90577
lea rcx, [rbp + 0x64]
call qword [sym.imp.ntoskrnl.exe_MmIsAddressValid]
test al, al
je 0x90577
cmp rbp, rsi
jb 0x90577
cmp rbp, r12
ja 0x90577
mov r14d, 0x64
lea rax, [rsp + 0x98]
mov edi, esi
mov qword [rsp + 0x30], rax
sub edi, ebp
lea rcx, [0x000a7128]
lea r8d, [r14 - 0x5e]
add edi, ebx
mov r9d, r14d
mov dl, 0xcc
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rbp
call fcn.0003ab50
and eax, r13d
cmp eax, r13d
je 0x904c7
mov rbx, qword [rsp + 0x98]
test rbx, rbx
je 0x904c7
mov rcx, rbx
call qword [sym.imp.ntoskrnl.exe_MmIsAddressValid]
test al, al
je 0x904c7
cmp rbx, rsi
jb 0x904c7
cmp rbx, r12
ja 0x904c7
movsxd r8, dword [rbx + 2]
lea rcx, [0x0009e390]
mov rdx, rbx
lea rdi, [r8 + rbx + 6]
mov r9, rdi
call sub.ntoskrnl.exe_DbgPrint
jmp 0x90542
lea rcx, [0x0009e2c0]
call sub.ntoskrnl.exe_DbgPrint
lea r11, [rsp + 0x98]
lea rcx, [0x000a7120]
mov qword [rsp + 0x30], r11
mov r9d, r14d
mov r8d, 7
mov dl, 0xcc
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rbp
call fcn.0003ab50
and eax, r13d
cmp eax, r13d
je 0x90567
mov rbx, qword [rsp + 0x98]
test rbx, rbx
je 0x90567
mov rcx, rbx
call qword [sym.imp.ntoskrnl.exe_MmIsAddressValid]
test al, al
je 0x90567
cmp rbx, rsi
jb 0x90567
cmp rbx, r12
ja 0x90567
movsxd rdi, dword [rbx + 1]
lea rcx, [0x0009e350]
mov rdx, rbx
mov r8, rdi
call sub.ntoskrnl.exe_DbgPrint
test rdi, rdi
je 0x9055e
mov rcx, rdi
call qword [sym.imp.ntoskrnl.exe_MmIsAddressValid]
test al, al
je 0x9055e
cmp rdi, rsi
jb 0x9055e
cmp rdi, r12
jbe 0x9058c
lea rcx, [0x0009e3e0]
jmp 0x9056e
lea rcx, [0x0009e310]
call sub.ntoskrnl.exe_DbgPrint
xor edi, edi
jmp 0x9058c
lea rcx, [0x0009e2a0]
jmp 0x90587
lea rcx, [0x0009e400]
call sub.ntoskrnl.exe_DbgPrint
mov rax, rdi
mov rbx, qword [rsp + 0xa0]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret