Function at 0x402f1e
Capabilities:
Print debug messages

Disassembly:
push ecx
mov ecx, dword [eax + 0x28]
push ebx
push ebp
mov ebp, dword [esp + 0x14]
push edi
xor edi, edi
cmp dword [0x410048], 1
mov dword [esp + 0x18], edi
mov dword [esp + 0xc], ecx
jg 0x402d4b
push str.Enter_the_SYSOp_QuerySystemInformation__._n
call sub.ntoskrnl.exe_DbgPrint
add esp, 4
mov ebx, dword [sym.imp.ntoskrnl.exe_RtlAssert]
cmp esi, edi
jne 0x402d65
push 0
push 0x54
push str..SystemOperator.cpp
push str.Buffer___NULL
call ebx
test ebp, ebp
ja 0x402d79
push 0
push 0x55
push str..SystemOperator.cpp
push str.uInputBuffer___0
call ebx
mov edx, dword [esp + 0x14]
cmp dword [edx + 8], 1
je 0x402d93
push 0
push 0x57
push str..SystemOperator.cpp
push str.QueryInforObject___Common._QueryType__QuerySystemInformationType
call ebx
mov eax, dword [esp + 0x14]
cmp dword [eax + 4], ebp
je 0x402dac
push 0
push 0x58
push str..SystemOperator.cpp
push str.QueryInforObject___Common._TaskCommonHeader._TotalSize__uInputBuffer
call ebx
mov ecx, dword [esp + 0x14]
mov eax, dword [ecx + 8]
mov ebp, dword [esp + 0x1c]
mov dword [ebp], edi
cmp eax, 1
jne 0x402f3e
mov eax, dword [esi + 8]
dec eax
cmp eax, 3
ja case.default.0x402dcc
jmp dword [eax*4 + 0x402f60]
mov eax, dword [esi + 0xc]
test eax, eax
jbe 0x402e71
imul eax, eax, 0x210
add eax, 0x10
cmp dword [esi + 4], eax
je 0x402dfc
push 0
push 0x77
push str..SystemOperator.cpp
push str.TaskFileObject___Common._TaskCommonHeader._TotalSize__sizeof_TASK_QUERY_HANDLE_INFORMATION_PARAMETER___TaskFileObject___EntryCnts__sizeof_TASK_QUERY_HANDLE_INFORMATION_ENTRY_
call ebx
mov eax, dword [esi + 0xc]
mov ecx, dword [esi + 4]
mov edx, eax
imul edx, edx, 0x210
add edx, 0x10
cmp ecx, edx
jne 0x402e52
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xc]
lea eax, [esp + 0x18]
push eax
push esi
push ecx
push edx
call fcn.00403c40
mov edi, eax
test edi, edi
jl 0x402e33
mov eax, dword [esp + 0x18]
mov dword [ebp], eax
cmp dword [0x410048], 1
jg 0x402e49
push str.Leave_the_SYSOp_QuerySystemInformation__._n
call sub.ntoskrnl.exe_DbgPrint
add esp, 4
mov eax, edi
pop edi
pop ebp
pop ebx
pop ecx
ret 0xc
cmp dword [0x410048], 4
jg 0x402e6a
push ecx
push eax
push str.Give_the_ERROR_size_object__input_Object_Cnts____d._give_the_total_size__d._n
call sub.ntoskrnl.exe_DbgPrint
add esp, 0xc
mov edi, 0x80000005
jmp 0x402e33
je 0x402e96
cmp eax, 0xffffffff
je 0x402e96
cmp dword [0x410048], 4
jg 0x402e8f
push eax
push str.Give_the_error_entry_counts__input_parameter___d__but_the_correct_entry_counts___0._n
call sub.ntoskrnl.exe_DbgPrint
add esp, 8
mov edi, 0xc000000d
jmp 0x402e33
cmp dword [esi + 4], 0x10
je 0x402eaf
push 0
push 0x8d
push str..SystemOperator.cpp
push str.TaskFileObject___Common._TaskCommonHeader._TotalSize__sizeof_TASK_QUERY_HANDLE_INFORMATION_PARAMETER_
call ebx
mov eax, dword [esi + 4]
cmp eax, 0x10
jne 0x402edd
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0xc]
push esi
push eax
push ecx
call fcn.00403930
mov edi, eax
test edi, edi
jl 0x402e33
mov edx, dword [esi + 4]
mov dword [esp + 0x18], edx
jmp 0x402e28
cmp dword [0x410048], 4
jg 0x402ef4
push eax
push str.the_EntryCnts__0__but_give_the_error_TaskFileObject_size__give_the_size___d._n
call sub.ntoskrnl.exe_DbgPrint
add esp, 8
mov edi, 0x80000005
jmp 0x402e33
cmp dword [0x410048], 4
jg 0x402f14
push str.Unsupport_Query_the_thread_information._n
call sub.ntoskrnl.exe_DbgPrint
add esp, 4
mov edi, 0xc00000bb
jmp 0x402e33
cmp dword [0x410048], 4
jg 0x402f14
push str.Unsupport_Query_the_process_information._n
call sub.ntoskrnl.exe_DbgPrint
add esp, 4
mov edi, 0xc00000bb
jmp 0x402e33
cmp dword [0x410048], 4
jg case.default.0x402dcc
push eax
push 1
push str.Give_the_ERROR_Task_Type__We_need_the__d_type__but_give_the__d_type._n
call sub.ntoskrnl.exe_DbgPrint
add esp, 0xc
jmp case.default.0x402dcc