Function at 0x10f20
Capabilities:
Link many functions at runtime
Print debug messages

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x20
mov dword [ebp - 8], 0
push 0x11c30
call sub.ntoskrnl.exe_DbgPrint
add esp, 4
push 0x118c0
call fcn.00010500
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x10f7d
mov eax, dword [sym.imp.ntoskrnl.exe_KeServiceDescriptorTable]
mov ecx, dword [eax]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
push edx
push 0x11c00
call sub.ntoskrnl.exe_DbgPrint
add esp, 8
mov eax, dword [ebp - 0xc]
add eax, 0x224
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
push eax
push 0x11bd0
call sub.ntoskrnl.exe_DbgPrint
add esp, 8
mov ecx, dword [ebp - 8]
imul ecx, ecx, 0x2c
mov edx, dword [ebp - 0x18]
mov dword [ecx + 0x11e10], edx
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
push 0x11890
lea ecx, [ebp - 0x14]
push ecx
call dword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
lea edx, [ebp - 0x14]
push edx
call dword [sym.imp.ntoskrnl.exe_MmGetSystemRoutineAddress]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x10ff6
mov eax, dword [sym.imp.ntoskrnl.exe_KeServiceDescriptorTable]
mov ecx, dword [eax]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
push edx
push 0x11c00
call sub.ntoskrnl.exe_DbgPrint
add esp, 8
mov eax, dword [ebp - 0xc]
add eax, 0x2e8
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 8]
imul eax, eax, 0x2c
mov ecx, dword [ebp - 0x18]
mov dword [eax + 0x11e10], ecx
mov edx, dword [ebp - 0x18]
push edx
push 0x11ba0
call sub.ntoskrnl.exe_DbgPrint
add esp, 8
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
push 0x11860
lea ecx, [ebp - 0x14]
push ecx
call dword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
lea edx, [ebp - 0x14]
push edx
call dword [sym.imp.ntoskrnl.exe_MmGetSystemRoutineAddress]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x1106f
mov eax, dword [sym.imp.ntoskrnl.exe_KeServiceDescriptorTable]
mov ecx, dword [eax]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
push edx
push 0x11c00
call sub.ntoskrnl.exe_DbgPrint
add esp, 8
mov eax, dword [ebp - 0xc]
add eax, 0x454
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 8]
imul eax, eax, 0x2c
mov ecx, dword [ebp - 0x18]
mov dword [eax + 0x11e10], ecx
mov edx, dword [ebp - 0x18]
push edx
push 0x11b70
call sub.ntoskrnl.exe_DbgPrint
add esp, 8
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
push 0x115d0
lea ecx, [ebp - 0x14]
push ecx
call dword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
lea edx, [ebp - 0x14]
push edx
call dword [sym.imp.ntoskrnl.exe_MmGetSystemRoutineAddress]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x110c7
push 0x11b40
call sub.ntoskrnl.exe_DbgPrint
add esp, 4
mov eax, dword [ebp - 8]
imul eax, eax, 0x2c
mov ecx, dword [ebp - 0x18]
mov dword [eax + 0x11e10], ecx
mov edx, dword [ebp - 0x18]
push edx
push 0x11b10
call sub.ntoskrnl.exe_DbgPrint
add esp, 8
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
push 0x11620
lea ecx, [ebp - 0x14]
push ecx
call dword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
lea edx, [ebp - 0x14]
push edx
call dword [sym.imp.ntoskrnl.exe_MmGetSystemRoutineAddress]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x1111f
push 0x11ae0
call sub.ntoskrnl.exe_DbgPrint
add esp, 4
mov eax, dword [ebp - 8]
imul eax, eax, 0x2c
mov ecx, dword [ebp - 0x18]
mov dword [eax + 0x11e10], ecx
mov edx, dword [ebp - 0x18]
push edx
push 0x11ab0
call sub.ntoskrnl.exe_DbgPrint
add esp, 8
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
push 0x11840
lea ecx, [ebp - 0x14]
push ecx
call dword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
lea edx, [ebp - 0x14]
push edx
call dword [sym.imp.ntoskrnl.exe_MmGetSystemRoutineAddress]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x11198
mov eax, dword [sym.imp.ntoskrnl.exe_KeServiceDescriptorTable]
mov ecx, dword [eax]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
push edx
push 0x11c00
call sub.ntoskrnl.exe_DbgPrint
add esp, 8
mov eax, dword [ebp - 0xc]
add eax, 0x1e8
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 8]
imul eax, eax, 0x2c
mov ecx, dword [ebp - 0x18]
mov dword [eax + 0x11e10], ecx
mov edx, dword [ebp - 0x18]
push edx
push 0x11a90
call sub.ntoskrnl.exe_DbgPrint
add esp, 8
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
push 0x11820
lea ecx, [ebp - 0x14]
push ecx
call dword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
lea edx, [ebp - 0x14]
push edx
call dword [sym.imp.ntoskrnl.exe_MmGetSystemRoutineAddress]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x11211
mov eax, dword [sym.imp.ntoskrnl.exe_KeServiceDescriptorTable]
mov ecx, dword [eax]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
push edx
push 0x11c00
call sub.ntoskrnl.exe_DbgPrint
add esp, 8
mov eax, dword [ebp - 0xc]
add eax, 0x200
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 8]
imul eax, eax, 0x2c
mov ecx, dword [ebp - 0x18]
mov dword [eax + 0x11e10], ecx
mov edx, dword [ebp - 0x18]
push edx
push 0x11a70
call sub.ntoskrnl.exe_DbgPrint
add esp, 8
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
push 0x11a50
lea ecx, [ebp - 0x14]
push ecx
call dword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
lea edx, [ebp - 0x14]
push edx
call dword [sym.imp.ntoskrnl.exe_MmGetSystemRoutineAddress]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x1128a
mov eax, dword [sym.imp.ntoskrnl.exe_KeServiceDescriptorTable]
mov ecx, dword [eax]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
push edx
push 0x11c00
call sub.ntoskrnl.exe_DbgPrint
add esp, 8
mov eax, dword [ebp - 0xc]
add eax, 0xbc
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 8]
imul eax, eax, 0x2c
mov ecx, dword [ebp - 0x18]
mov dword [eax + 0x11e10], ecx
mov edx, dword [ebp - 0x18]
push edx
push 0x11a20
call sub.ntoskrnl.exe_DbgPrint
add esp, 8
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
push 0x11a00
lea ecx, [ebp - 0x14]
push ecx
call dword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
lea edx, [ebp - 0x14]
push edx
call dword [sym.imp.ntoskrnl.exe_MmGetSystemRoutineAddress]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x11303
mov eax, dword [sym.imp.ntoskrnl.exe_KeServiceDescriptorTable]
mov ecx, dword [eax]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
push edx
push 0x11c00
call sub.ntoskrnl.exe_DbgPrint
add esp, 8
mov eax, dword [ebp - 0xc]
add eax, 0xd4
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
mov edx, dword [ecx]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 8]
imul eax, eax, 0x2c
mov ecx, dword [ebp - 0x18]
mov dword [eax + 0x11e10], ecx
mov edx, dword [ebp - 0x18]
push edx
push 0x119d0
call sub.ntoskrnl.exe_DbgPrint
add esp, 8
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
imul ecx, ecx, 0x2c
add ecx, 0x11e08
mov dword [ebp - 0x1c], ecx
push 0x117c0
mov edx, dword [ebp - 0x1c]
push edx
call dword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
imul ecx, ecx, 0x2c
add ecx, 0x11e08
mov dword [ebp - 0x20], ecx
push 0x11790
mov edx, dword [ebp - 0x20]
push edx
call dword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
mov esp, ebp
pop ebp
ret 4