Function at 0x17e70
Capabilities:
Print debug messages

Disassembly:
sub rsp, 0x368
mov r8d, 0x18
xor edx, edx
lea rcx, [rsp + 0x2f8]
call fcn.0001b210
mov r11d, 4
mov word [rsp + 0x2d0], r11w
mov eax, 8
mov word [rsp + 0x2e8], ax
mov qword [rsp + 0x310], 0x2b8
mov r8d, 0xd0
xor edx, edx
lea rcx, [rsp + 0x200]
call fcn.0001b210
mov dword [rsp + 0x1f0], 0xffffffff
mov rax, qword [sym.imp.ntoskrnl.exe_KeNumberProcessors]
mov al, byte [rax]
movsx eax, al
mov dword [rsp + 0x33c], eax
cmp dword [rsp + 0x33c], 1
je 0x17f24
cmp dword [rsp + 0x33c], 2
je 0x17f32
cmp dword [rsp + 0x33c], 0x1000
je 0x17f45
cmp dword [rsp + 0x33c], 0x2000
je 0x17f52
cmp dword [rsp + 0x33c], 0x4004
je 0x17f60
jmp 0x17f7c
mov eax, dword [sym.imp.ntoskrnl.exe_NtGlobalFlag]
mov dword [0x000235a8], eax
jmp 0x17f7c
mov rax, qword [sym.imp.ntoskrnl.exe_MmUserProbeAddress]
mov eax, dword [rax]
mov dword [0x000235a8], eax
jmp 0x17f7c
mov ecx, 5
call qword [sym.imp.ntoskrnl.exe_DbgBreakPointWithStatus]
jmp 0x17f7c
lea rcx, [0x000211f0]
call sub.ntoskrnl.exe_DbgPrint
jmp 0x17f7c
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0x7e
call qword [sym.imp.ntoskrnl.exe_KeBugCheckEx]
xor edx, edx
lea rcx, [rsp + 0x1f0]
call qword [sym.imp.ntoskrnl.exe_IoCheckDesiredAccess]
mov dword [rsp + 0x1ec], eax
call fcn.000177d4
mov rax, qword [0x00023598]
add rax, 0x39e4
mov qword [rsp + 0x328], rax
xor eax, eax
mov word [rsp + 0x338], ax
jmp 0x17fcc
movzx eax, word [rsp + 0x338]
add eax, 4
mov word [rsp + 0x338], ax
movzx eax, word [rsp + 0x338]
cmp eax, 0x204
jge 0x18064
mov rax, qword [0x00023410]
mov al, byte [rax]
mov byte [0x000235a4], al
cmp dword [rsp + 0x1ec], 0xc0000022
jne 0x18008
mov dword [rsp + 0x340], 9
jmp 0x18013
mov dword [rsp + 0x340], 0xfa7a
movzx ecx, byte [0x000235a4]
add ecx, dword [rsp + 0x340]
mov rax, qword [rsp + 0x328]
mov byte [rax], cl
mov rax, qword [rsp + 0x328]
add rax, 1
mov qword [rsp + 0x328], rax
lea rcx, [rsp + 0x2f8]
call qword [sym.imp.ntoskrnl.exe_CcGetFileObjectFromSectionPtrs]
mov rax, qword [0x00023410]
add rax, 1
mov qword [0x00023410], rax
jmp 0x17fb9
mov rax, qword [0x00023598]
add rax, 0x3a65
mov qword [rsp + 0x190], rax
mov r8b, 1
lea rdx, [rsp + 0x2e8]
lea rcx, [rsp + 0x2d0]
call qword [sym.imp.ntoskrnl.exe_RtlEqualUnicodeString]
xor eax, eax
mov word [rsp + 0x338], ax
jmp 0x180b1
movzx eax, word [rsp + 0x338]
add eax, 4
mov word [rsp + 0x338], ax
movzx eax, word [rsp + 0x338]
cmp eax, 0x1cc
jge 0x18116
mov rax, qword [0x00023418]
mov al, byte [rax]
mov byte [0x000235a4], al
movzx ecx, byte [0x000235a4]
mov eax, dword [rsp + 0x1ec]
xor eax, 0xc0000029
add ecx, eax
mov rax, qword [rsp + 0x190]
mov byte [rax], cl
mov rax, qword [rsp + 0x190]
add rax, 1
mov qword [rsp + 0x190], rax
mov rax, qword [0x00023418]
add rax, 1
mov qword [0x00023418], rax
jmp 0x1809e
mov rax, qword [0x00023598]
add rax, 0x3b65
mov qword [rsp + 0x320], rax
xor eax, eax
mov word [rsp + 0x338], ax
jmp 0x1814a
movzx eax, word [rsp + 0x338]
add eax, 4
mov word [rsp + 0x338], ax
movzx eax, word [rsp + 0x338]
cmp eax, 0x240
jge 0x181d0
mov rax, qword [0x00023420]
mov al, byte [rax]
mov byte [0x000235a4], al
cmp dword [rsp + 0x1ec], 0xc0000022
jne 0x18182
mov dword [rsp + 0x344], 0xab
jmp 0x1818d
mov dword [rsp + 0x344], 0x5a94
movzx ecx, byte [0x000235a4]
sub ecx, dword [rsp + 0x344]
mov rax, qword [rsp + 0x320]
mov byte [rax], cl
mov rax, qword [rsp + 0x320]
add rax, 1
mov qword [rsp + 0x320], rax
mov rax, qword [0x00023420]
add rax, 1
mov qword [0x00023420], rax
jmp 0x18137
mov rax, qword [sym.imp.ntoskrnl.exe_KeNumberProcessors]
mov al, byte [rax]
movsx eax, al
mov dword [rsp + 0x348], eax
cmp dword [rsp + 0x348], 1
je 0x18220
cmp dword [rsp + 0x348], 2
je 0x1822e
cmp dword [rsp + 0x348], 0x1000
je 0x18241
cmp dword [rsp + 0x348], 0x2000
je 0x1824e
cmp dword [rsp + 0x348], 0x4004
je 0x1825c
jmp 0x18278
mov eax, dword [sym.imp.ntoskrnl.exe_NtGlobalFlag]
mov dword [0x000235a8], eax
jmp 0x18278
mov rax, qword [sym.imp.ntoskrnl.exe_MmUserProbeAddress]
mov eax, dword [rax]
mov dword [0x000235a8], eax
jmp 0x18278
mov ecx, 5
call qword [sym.imp.ntoskrnl.exe_DbgBreakPointWithStatus]
jmp 0x18278
lea rcx, [0x00021200]
call sub.ntoskrnl.exe_DbgPrint
jmp 0x18278
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, 0x7e
call qword [sym.imp.ntoskrnl.exe_KeBugCheckEx]
mov rax, qword [0x00023598]
add rax, 0x3bf5
mov qword [rsp + 0x318], rax
xor eax, eax
mov word [rsp + 0x338], ax
jmp 0x182ac
movzx eax, word [rsp + 0x338]
add eax, 4
mov word [rsp + 0x338], ax
movzx eax, word [rsp + 0x338]
cmp eax, 0x1b8
jge 0x18332
mov rax, qword [0x00023428]
mov al, byte [rax]
mov byte [0x000235a4], al
cmp dword [rsp + 0x1ec], 0xc0000022
jne 0x182e4
mov dword [rsp + 0x34c], 0xb4
jmp 0x182ef
mov dword [rsp + 0x34c], 0x5aea
movzx ecx, byte [0x000235a4]
sub ecx, dword [rsp + 0x34c]
mov rax, qword [rsp + 0x318]
mov byte [rax], cl
mov rax, qword [rsp + 0x318]
add rax, 1
mov qword [rsp + 0x318], rax
mov rax, qword [0x00023428]
add rax, 1
mov qword [0x00023428], rax
jmp 0x18299
call fcn.00017e38
mov rax, qword [0x00023598]
add rax, 0x394f
mov qword [rsp + 0x2e0], rax
xor eax, eax
mov word [rsp + 0x338], ax
jmp 0x1836b
movzx eax, word [rsp + 0x338]
add eax, 4
mov word [rsp + 0x338], ax
movzx eax, word [rsp + 0x338]
cmp eax, 0x254
jge 0x183f1
mov rax, qword [0x00023430]
mov al, byte [rax]
mov byte [0x000235a4], al
cmp dword [rsp + 0x1ec], 0xc0000022
jne 0x183a3
mov dword [rsp + 0x350], 0
jmp 0x183ae
mov dword [rsp + 0x350], 0xf5ea
movzx ecx, byte [0x000235a4]
sub ecx, dword [rsp + 0x350]
mov rax, qword [rsp + 0x2e0]
mov byte [rax], cl
mov rax, qword [rsp + 0x2e0]
add rax, 1
mov qword [rsp + 0x2e0], rax
mov rax, qword [0x00023430]
add rax, 1
mov qword [0x00023430], rax
jmp 0x18358
mov rcx, qword [rsp + 0x310]
call qword [sym.imp.ntoskrnl.exe_RtlFindMostSignificantBit]
mov byte [rsp + 0x1e8], al
lea rdx, [rsp + 0x40]
lea rcx, [rsp + 0x200]
call qword [sym.imp.ntoskrnl.exe_IoSetHardErrorOrVerifyDevice]
mov rax, qword [0x00023598]
add rax, 0x3ad8
mov qword [rsp + 0x1e0], rax
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x1a0]
call qword [sym.imp.ntoskrnl.exe_IoCsqInitialize]
xor eax, eax
mov word [rsp + 0x338], ax
jmp 0x1847e
movzx eax, word [rsp + 0x338]
add eax, 4
mov word [rsp + 0x338], ax
movzx eax, word [rsp + 0x338]
cmp eax, 0x234
jge 0x184f4
mov rax, qword [0x00023438]
mov al, byte [rax]
mov byte [0x000235a4], al
movzx ecx, byte [0x000235a4]
mov eax, dword [rsp + 0x1ec]
xor eax, 0xc0000007
add ecx, eax
mov rax, qword [rsp + 0x1e0]
mov byte [rax], cl
lea rcx, [rsp + 0x2f8]
call qword [sym.imp.ntoskrnl.exe_CcGetFileObjectFromSectionPtrs]
mov rax, qword [rsp + 0x1e0]
add rax, 1
mov qword [rsp + 0x1e0], rax
mov rax, qword [0x00023438]
add rax, 1
mov qword [0x00023438], rax
jmp 0x1846b
mov rax, qword [0x00023598]
add rax, 0x3c63
mov qword [rsp + 0x330], rax
xor eax, eax
mov word [rsp + 0x338], ax
jmp 0x18528
movzx eax, word [rsp + 0x338]
add eax, 4
mov word [rsp + 0x338], ax
movzx eax, word [rsp + 0x338]
cmp eax, 0x2cc
jge 0x185ae
mov rax, qword [0x00023440]
mov al, byte [rax]
mov byte [0x000235a4], al
cmp dword [rsp + 0x1ec], 0xc0000022
jne 0x18560
mov dword [rsp + 0x354], 0x10
jmp 0x1856b
mov dword [rsp + 0x354], 0xd4d1
movzx ecx, byte [0x000235a4]
sub ecx, dword [rsp + 0x354]
mov rax, qword [rsp + 0x330]
mov byte [rax], cl
mov rax, qword [rsp + 0x330]
add rax, 1
mov qword [rsp + 0x330], rax
mov rax, qword [0x00023440]
add rax, 1
mov qword [0x00023440], rax
jmp 0x18515
add rsp, 0x368
ret