Function at 0x1a1d0
Capabilities:
Print debug messages

Disassembly:
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbx
sub rsp, 0x160
call qword [sym.imp.ntoskrnl.exe_PsGetCurrentProcessId]
mov qword [rsp + 0xa0], rax
mov rax, qword [rsp + 0x178]
mov rax, qword [rax + 0x20]
mov qword [rsp + 0xb0], rax
mov rax, qword [rsp + 0x178]
mov rax, qword [rax + 0x20]
mov qword [rsp + 0xa8], rax
cmp dword [0x000327b8], 6
jne 0x1a30d
mov eax, dword [0x00029254]
test eax, eax
je 0x1a30d
mov dword [rsp + 0xc4], 0x1c9
mov dword [rsp + 0xc0], 0x40
mov ecx, dword [rsp + 0xc4]
rdmsr
shl rdx, 0x20
or rax, rdx
mov dword [rsp + 0xbc], eax
mov dword [rsp + 0xb8], 0
mov eax, dword [0x00029258]
cmp dword [rsp + 0xb8], eax
jge 0x1a30d
mov eax, dword [rsp + 0xbc]
mov ecx, dword [rsp + 0xc0]
add ecx, eax
rdmsr
shl rdx, 0x20
or rax, rdx
mov qword [rsp + 0xc8], rax
movsxd rcx, dword [rsp + 0xb8]
mov rax, qword [rsp + 0xc8]
mov qword [rsp + rcx*8 + 0x20], rax
mov eax, dword [rsp + 0xbc]
mov ecx, dword [rsp + 0xc0]
add ecx, eax
xor eax, eax
mov rdx, rax
shr rdx, 0x20
wrmsr
mov eax, dword [rsp + 0xb8]
add eax, 1
mov dword [rsp + 0xb8], eax
mov eax, dword [rsp + 0xbc]
add eax, 1
mov dword [rsp + 0xbc], eax
mov ecx, dword [0x00029258]
mov eax, dword [rsp + 0xbc]
cdq
idiv ecx
mov dword [rsp + 0xbc], edx
jmp 0x1a26b
mov eax, dword [0x00029230]
test eax, eax
je 0x1ab68
mov eax, dword [rsp + 0xa8]
shr eax, 0xd
and eax, 1
test eax, eax
je 0x1ab68
call fcn.00012440
mov dword [rsp + 0xd0], eax
mov rax, qword [rsp + 0x170]
mov rax, qword [rax + 0x10a0]
mov qword [rsp + 0xe8], rax
mov eax, dword [rsp + 0xa8]
and eax, 0xffffdfff
mov dword [rsp + 0xa8], eax
mov rcx, qword [rsp + 0xa8]
call fcn.00018fd0
call fcn.00012440
movsxd rcx, eax
imul rcx, rcx, 0x40
lea rax, [0x00029268]
mov eax, dword [rax + rcx + 0x38]
test eax, eax
je 0x1a3ba
mov rax, qword [rsp + 0x170]
mov ecx, dword [rax + 0x10b0]
or ecx, 0x10000
mov rax, qword [rsp + 0x170]
mov dword [rax + 0x10b0], ecx
mov eax, 2
jmp 0x1b152
mov dword [rsp + 0xe0], 0
jmp 0x1a3d8
mov eax, dword [rsp + 0xe0]
add eax, 1
mov dword [rsp + 0xe0], eax
movsxd rcx, dword [rsp + 0xe0]
mov rax, qword [rsp + 0xe8]
movzx eax, byte [rax + rcx]
cmp eax, 0xf
je 0x1a3f3
jmp 0x1a3c7
mov eax, dword [rsp + 0xe0]
add eax, 2
movsxd rcx, eax
mov rax, qword [rsp + 0xe8]
movzx eax, byte [rax + rcx]
sar eax, 3
and eax, 7
mov dword [rsp + 0xd8], eax
mov eax, dword [rsp + 0xe0]
add eax, 2
movsxd rcx, eax
mov rax, qword [rsp + 0xe8]
movzx eax, byte [rax + rcx]
and eax, 7
mov dword [rsp + 0xdc], eax
mov dword [rsp + 0xd4], 0
jmp 0x1a45a
mov eax, dword [rsp + 0xd4]
add eax, 1
mov dword [rsp + 0xd4], eax
mov eax, dword [rsp + 0xe0]
cmp dword [rsp + 0xd4], eax
jge 0x1a499
movsxd rcx, dword [rsp + 0xd4]
mov rax, qword [rsp + 0xe8]
movzx eax, byte [rax + rcx]
and eax, 0x41
cmp eax, 0x41
jne 0x1a497
mov eax, dword [rsp + 0xdc]
add eax, 8
mov dword [rsp + 0xdc], eax
jmp 0x1a449
mov eax, dword [rsp + 0xe0]
add eax, 1
movsxd rcx, eax
mov rax, qword [rsp + 0xe8]
movzx eax, byte [rax + rcx]
cmp eax, 0x21
jne 0x1a7aa
mov eax, dword [rsp + 0xd8]
mov dword [rsp + 0x150], eax
cmp dword [rsp + 0x150], 7
ja case.default.0x1a4f0
movsxd rax, dword [rsp + 0x150]
lea rcx, [0x00010000]
mov eax, dword [rcx + rax*4 + 0xb15c]
add rax, rcx
jmp rax
call fcn.00012440
movsxd rcx, eax
imul rcx, rcx, 0x40
lea rax, [0x00029268]
mov rax, qword [rax + rcx]
mov qword [rsp + 0xf0], rax
jmp case.default.0x1a4f0
call fcn.00012440
movsxd rcx, eax
imul rcx, rcx, 0x40
lea rax, [0x00029268]
mov rax, qword [rax + rcx + 8]
mov qword [rsp + 0xf0], rax
jmp case.default.0x1a4f0
call fcn.00012440
movsxd rcx, eax
imul rcx, rcx, 0x40
lea rax, [0x00029268]
mov rax, qword [rax + rcx + 0x10]
mov qword [rsp + 0xf0], rax
jmp case.default.0x1a4f0
call fcn.00012440
movsxd rcx, eax
imul rcx, rcx, 0x40
lea rax, [0x00029268]
mov rax, qword [rax + rcx + 0x18]
mov qword [rsp + 0xf0], rax
jmp case.default.0x1a4f0
call fcn.00012440
movsxd rcx, eax
imul rcx, rcx, 0x40
lea rax, [0x00029268]
mov rax, qword [rax + rcx + 0x20]
mov qword [rsp + 0xf0], rax
jmp case.default.0x1a4f0
call fcn.00012440
movsxd rcx, eax
imul rcx, rcx, 0x40
lea rax, [0x00029268]
mov rax, qword [rax + rcx + 0x28]
mov qword [rsp + 0xf0], rax
mov eax, dword [rsp + 0xdc]
mov dword [rsp + 0x154], eax
cmp dword [rsp + 0x154], 0xf
ja case.default.0x1a5f6
movsxd rax, dword [rsp + 0x154]
lea rcx, [0x00010000]
mov eax, dword [rcx + rax*4 + 0xb17c]
add rax, rcx
jmp rax
mov rcx, qword [rsp + 0x170]
mov rax, qword [rsp + 0xf0]
mov qword [rcx], rax
jmp case.default.0x1a5f6
mov rcx, qword [rsp + 0x170]
mov rax, qword [rsp + 0xf0]
mov qword [rcx + 0x10], rax
jmp case.default.0x1a5f6
mov rcx, qword [rsp + 0x170]
mov rax, qword [rsp + 0xf0]
mov qword [rcx + 0x18], rax
jmp case.default.0x1a5f6
mov rcx, qword [rsp + 0x170]
mov rax, qword [rsp + 0xf0]
mov qword [rcx + 8], rax
jmp case.default.0x1a5f6
mov rax, qword [rsp + 0x170]
mov rax, qword [rax + 0x10a8]
and rax, 3
cmp rax, 3
jne 0x1a68d
mov rcx, qword [rsp + 0x170]
mov rax, qword [rsp + 0xf0]
mov qword [rcx + 0x10b8], rax
jmp 0x1a6a1
mov rcx, qword [rsp + 0x170]
mov rax, qword [rsp + 0xf0]
mov qword [rcx + 0x38], rax
jmp case.default.0x1a5f6
mov rcx, qword [rsp + 0x170]
mov rax, qword [rsp + 0xf0]
mov qword [rcx + 0x30], rax
jmp case.default.0x1a5f6
mov rcx, qword [rsp + 0x170]
mov rax, qword [rsp + 0xf0]
mov qword [rcx + 0x20], rax
jmp case.default.0x1a5f6
mov rcx, qword [rsp + 0x170]
mov rax, qword [rsp + 0xf0]
mov qword [rcx + 0x28], rax
jmp case.default.0x1a5f6
mov rcx, qword [rsp + 0x170]
mov rax, qword [rsp + 0xf0]
mov qword [rcx + 0x40], rax
jmp case.default.0x1a5f6
mov rcx, qword [rsp + 0x170]
mov rax, qword [rsp + 0xf0]
mov qword [rcx + 0x48], rax
jmp case.default.0x1a5f6
mov rcx, qword [rsp + 0x170]
mov rax, qword [rsp + 0xf0]
mov qword [rcx + 0x50], rax
jmp case.default.0x1a5f6
mov rcx, qword [rsp + 0x170]
mov rax, qword [rsp + 0xf0]
mov qword [rcx + 0x58], rax
jmp case.default.0x1a5f6
mov rcx, qword [rsp + 0x170]
mov rax, qword [rsp + 0xf0]
mov qword [rcx + 0x60], rax
jmp case.default.0x1a5f6
mov rcx, qword [rsp + 0x170]
mov rax, qword [rsp + 0xf0]
mov qword [rcx + 0x68], rax
jmp case.default.0x1a5f6
mov rcx, qword [rsp + 0x170]
mov rax, qword [rsp + 0xf0]
mov qword [rcx + 0x70], rax
jmp case.default.0x1a5f6
mov rcx, qword [rsp + 0x170]
mov rax, qword [rsp + 0xf0]
mov qword [rcx + 0x78], rax
jmp case.default.0x1a9cf
mov eax, dword [rsp + 0xe0]
add eax, 1
movsxd rcx, eax
mov rax, qword [rsp + 0xe8]
movzx eax, byte [rax + rcx]
cmp eax, 0x23
jne case.default.0x1a9cf
mov eax, dword [rsp + 0xdc]
mov dword [rsp + 0x158], eax
cmp dword [rsp + 0x158], 0xf
ja case.default.0x1a801
movsxd rax, dword [rsp + 0x158]
lea rcx, [0x00010000]
mov eax, dword [rcx + rax*4 + 0xb1bc]
add rax, rcx
jmp rax
mov rax, qword [rsp + 0x170]
mov rax, qword [rax]
mov qword [rsp + 0xf8], rax
jmp case.default.0x1a801
mov rax, qword [rsp + 0x170]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0xf8], rax
jmp case.default.0x1a801
mov rax, qword [rsp + 0x170]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0xf8], rax
jmp case.default.0x1a801
mov rax, qword [rsp + 0x170]
mov rax, qword [rax + 8]
mov qword [rsp + 0xf8], rax
jmp case.default.0x1a801
mov rax, qword [rsp + 0x170]
mov rax, qword [rax + 0x10a8]
and rax, 3
cmp rax, 3
jne 0x1a896
mov rax, qword [rsp + 0x170]
mov rax, qword [rax + 0x10b8]
mov qword [rsp + 0xf8], rax
jmp case.default.0x1a801
mov rax, qword [rsp + 0x170]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0xf8], rax
jmp case.default.0x1a801
mov rax, qword [rsp + 0x170]
mov rax, qword [rax + 0x20]
mov qword [rsp + 0xf8], rax
jmp case.default.0x1a801
mov rax, qword [rsp + 0x170]
mov rax, qword [rax + 0x28]
mov qword [rsp + 0xf8], rax
jmp case.default.0x1a801
mov rax, qword [rsp + 0x170]
mov rax, qword [rax + 0x40]
mov qword [rsp + 0xf8], rax
jmp case.default.0x1a801
mov rax, qword [rsp + 0x170]
mov rax, qword [rax + 0x48]
mov qword [rsp + 0xf8], rax
jmp case.default.0x1a801
mov rax, qword [rsp + 0x170]
mov rax, qword [rax + 0x50]
mov qword [rsp + 0xf8], rax
jmp case.default.0x1a801
mov rax, qword [rsp + 0x170]
mov rax, qword [rax + 0x58]
mov qword [rsp + 0xf8], rax
jmp case.default.0x1a801
mov rax, qword [rsp + 0x170]
mov rax, qword [rax + 0x60]
mov qword [rsp + 0xf8], rax
jmp case.default.0x1a801
mov rax, qword [rsp + 0x170]
mov rax, qword [rax + 0x68]
mov qword [rsp + 0xf8], rax
jmp case.default.0x1a801
mov rax, qword [rsp + 0x170]
mov rax, qword [rax + 0x70]
mov qword [rsp + 0xf8], rax
jmp case.default.0x1a801
mov rax, qword [rsp + 0x170]
mov rax, qword [rax + 0x78]
mov qword [rsp + 0xf8], rax
mov eax, dword [rsp + 0xd8]
mov dword [rsp + 0x15c], eax
cmp dword [rsp + 0x15c], 7
ja case.default.0x1a9cf
movsxd rax, dword [rsp + 0x15c]
lea rcx, [0x00010000]
mov eax, dword [rcx + rax*4 + 0xb1fc]
add rax, rcx
jmp rax
mov rcx, qword [rsp + 0xf8]
call fcn.00018f10
call fcn.00018f30
mov rbx, rax
call fcn.00012440
movsxd rcx, eax
imul rcx, rcx, 0x40
lea rax, [0x00029268]
mov qword [rax + rcx], rbx
jmp case.default.0x1a9cf
mov rcx, qword [rsp + 0xf8]
call fcn.00018f40
call fcn.00018f60
mov rbx, rax
call fcn.00012440
movsxd rcx, eax
imul rcx, rcx, 0x40
lea rax, [0x00029268]
mov qword [rax + rcx + 8], rbx
jmp case.default.0x1a9cf
mov rcx, qword [rsp + 0xf8]
call fcn.00018f70
call fcn.00018f90
mov rbx, rax
call fcn.00012440
movsxd rcx, eax
imul rcx, rcx, 0x40
lea rax, [0x00029268]
mov qword [rax + rcx + 0x10], rbx
jmp case.default.0x1a9cf
mov rcx, qword [rsp + 0xf8]
call fcn.00018fa0
call fcn.00018fc0
mov rbx, rax
call fcn.00012440
movsxd rcx, eax
imul rcx, rcx, 0x40
lea rax, [0x00029268]
mov qword [rax + rcx + 0x18], rbx
jmp case.default.0x1a9cf
mov rcx, qword [rsp + 0xf8]
call fcn.00018fd0
call fcn.00019060
mov rbx, rax
call fcn.00012440
movsxd rcx, eax
imul rcx, rcx, 0x40
lea rax, [0x00029268]
mov qword [rax + rcx + 0x20], rbx
jmp case.default.0x1a9cf
call fcn.00012440
movsxd rcx, eax
imul rcx, rcx, 0x40
lea rax, [0x00029268]
mov eax, dword [rax + rcx + 0x38]
mov rax, qword [rsp + 0xf8]
or rax, 0x400
and rax, 0xffffffffffffdfff
mov qword [rsp + 0xf8], rax
mov qword [rsp + 0xf8], 0xf0401
mov rcx, qword [rsp + 0xf8]
call fcn.00019020
call fcn.00012430
mov rbx, rax
call fcn.00012440
movsxd rcx, eax
imul rcx, rcx, 0x40
lea rax, [0x00029268]
mov qword [rax + rcx + 0x28], rbx
mov eax, dword [rsp + 0xe0]
add eax, 3
movsxd rcx, eax
mov rax, qword [rsp + 0x170]
add rcx, qword [rax + 0x10a0]
mov rax, qword [rsp + 0x170]
mov qword [rax + 0x10a0], rcx
mov eax, 1
jmp 0x1b152
mov eax, dword [0x000291c0]
test eax, eax
je 0x1b150
mov eax, dword [0x000291c8]
mov eax, eax
cmp qword [rsp + 0xa0], rax
jne 0x1af6d
call fcn.00012430
mov qword [rsp + 0x100], rax
mov eax, dword [0x000291c8]
mov eax, eax
cmp qword [rsp + 0xa0], rax
jne 0x1ac9c
mov rax, qword [rsp + 0x170]
mov eax, dword [rax + 0x10b0]
shr eax, 9
and eax, 1
test eax, eax
jne 0x1ac9c
cmp dword [0x000327bc], 0
jne 0x1ac2c
mov rax, qword [rsp + 0x170]
mov ecx, dword [rax + 0x10b0]
and ecx, 0xfffffeff
mov rax, qword [rsp + 0x170]
mov dword [rax + 0x10b0], ecx
mov rax, qword [rsp + 0x170]
mov ecx, dword [rax + 0x10b0]
or ecx, 0x10000
mov rax, qword [rsp + 0x170]
mov dword [rax + 0x10b0], ecx
mov ecx, 0xffff0ff0
call fcn.00018fd0
mov eax, 1
jmp 0x1b152
mov rax, qword [rsp + 0x170]
mov eax, dword [rax + 0x10b0]
shr eax, 9
and eax, 1
test eax, eax
jne 0x1ac9c
mov rax, qword [rsp + 0x170]
mov ecx, dword [rax + 0x10b0]
or ecx, 0x100
mov rax, qword [rsp + 0x170]
mov dword [rax + 0x10b0], ecx
mov rax, qword [rsp + 0x170]
mov ecx, dword [rax + 0x10b0]
or ecx, 0x10000
mov rax, qword [rsp + 0x170]
mov dword [rax + 0x10b0], ecx
mov ecx, 0xffff0ff0
call fcn.00018fd0
mov eax, 1
jmp 0x1b152
mov eax, dword [0x00029230]
test eax, eax
je 0x1ad69
call fcn.00012440
movsxd rcx, eax
imul rcx, rcx, 0x40
lea rax, [0x00029268]
mov rax, qword [rax + rcx]
mov qword [rsp + 0x108], rax
call fcn.00012440
movsxd rcx, eax
imul rcx, rcx, 0x40
lea rax, [0x00029268]
mov rax, qword [rax + rcx + 8]
mov qword [rsp + 0x110], rax
call fcn.00012440
movsxd rcx, eax
imul rcx, rcx, 0x40
lea rax, [0x00029268]
mov rax, qword [rax + rcx + 0x10]
mov qword [rsp + 0x118], rax
call fcn.00012440
movsxd rcx, eax
imul rcx, rcx, 0x40
lea rax, [0x00029268]
mov rax, qword [rax + rcx + 0x18]
mov qword [rsp + 0x120], rax
call fcn.00012440
movsxd rcx, eax
imul rcx, rcx, 0x40
lea rax, [0x00029268]
mov rax, qword [rax + rcx + 0x20]
mov qword [rsp + 0x128], rax
call fcn.00012440
movsxd rcx, eax
imul rcx, rcx, 0x40
lea rax, [0x00029268]
mov rax, qword [rax + rcx + 0x28]
mov qword [rsp + 0x130], rax
mov eax, dword [0x00029230]
test eax, eax
je 0x1ad8a
mov eax, dword [0x000291c4]
test eax, eax
jne 0x1ad88
mov ecx, dword [0x00029230]
call fcn.00018ed0
jmp 0x1adba
mov ecx, 0x400
call fcn.00019020
xor ecx, ecx
call fcn.00018f10
xor ecx, ecx
call fcn.00018f40
xor ecx, ecx
call fcn.00018f70
xor ecx, ecx
call fcn.00018fa0
mov ecx, 0xffff0ff0
call fcn.00018fd0
call fcn.00012570
mov dword [rsp + 0x138], 1
lea r8, [rsp + 0x20]
mov rdx, qword [rsp + 0x178]
mov rcx, qword [rsp + 0x170]
call fcn.00019ef0
mov dword [rsp + 0x138], eax
call fcn.00012580
mov r11d, dword [0x00029230]
test r11d, r11d
je 0x1aec4
call fcn.00012440
movsxd rdx, eax
imul rdx, rdx, 0x40
lea rcx, [0x00029268]
mov rax, qword [rsp + 0x108]
mov qword [rcx + rdx], rax
call fcn.00012440
movsxd rdx, eax
imul rdx, rdx, 0x40
lea rcx, [0x00029268]
mov rax, qword [rsp + 0x110]
mov qword [rcx + rdx + 8], rax
call fcn.00012440
movsxd rdx, eax
imul rdx, rdx, 0x40
lea rcx, [0x00029268]
mov rax, qword [rsp + 0x118]
mov qword [rcx + rdx + 0x10], rax
call fcn.00012440
movsxd rdx, eax
imul rdx, rdx, 0x40
lea rcx, [0x00029268]
mov rax, qword [rsp + 0x120]
mov qword [rcx + rdx + 0x18], rax
call fcn.00012440
movsxd rdx, eax
imul rdx, rdx, 0x40
lea rcx, [0x00029268]
mov rax, qword [rsp + 0x128]
mov qword [rcx + rdx + 0x20], rax
call fcn.00012440
movsxd rdx, eax
imul rdx, rdx, 0x40
lea rcx, [0x00029268]
mov rax, qword [rsp + 0x130]
mov qword [rcx + rdx + 0x28], rax
jmp 0x1af5c
mov rcx, qword [rsp + 0x178]
mov rcx, qword [rcx]
call fcn.00018f10
mov rcx, qword [rsp + 0x178]
mov rcx, qword [rcx + 8]
call fcn.00018f40
mov rcx, qword [rsp + 0x178]
mov rcx, qword [rcx + 0x10]
call fcn.00018f70
mov rcx, qword [rsp + 0x178]
mov rcx, qword [rcx + 0x18]
call fcn.00018fa0
mov rcx, qword [rsp + 0x178]
mov rcx, qword [rcx + 0x20]
call fcn.00018fd0
mov rax, qword [rsp + 0x178]
mov rax, qword [rax + 0x28]
shr rax, 0xd
and rax, 1
test rax, rax
je 0x1af4b
mov rdx, qword [rsp + 0x178]
mov rdx, qword [rdx + 0x28]
lea rcx, [0x00025550]
call sub.ntoskrnl.exe_DbgPrint
jmp 0x1af5c
mov rcx, qword [rsp + 0x178]
mov rcx, qword [rcx + 0x28]
call fcn.00018ff0
mov eax, dword [rsp + 0x138]
jmp 0x1b152
mov eax, dword [0x00029230]
test eax, eax
je 0x1b14a
call fcn.00019070
mov qword [rsp + 0x140], rax
call fcn.00012440
movsxd rcx, eax
imul rcx, rcx, 0x40
lea rax, [0x00029268]
mov rax, qword [rax + rcx + 0x28]
mov qword [rsp + 0x148], rax
mov eax, dword [rsp + 0x140]
and eax, 1
test eax, eax
je 0x1b00d
mov eax, dword [rsp + 0x148]
and eax, 1
test eax, eax
jne 0x1b00d
mov eax, dword [rsp + 0x148]
shr eax, 1
and eax, 1
test eax, eax
jne 0x1b00d
lea rcx, [0x00025580]
call sub.ntoskrnl.exe_DbgPrint
mov r11, qword [rsp + 0x170]
mov ecx, dword [r11 + 0x10b0]
or ecx, 0x10000
mov rax, qword [rsp + 0x170]
mov dword [rax + 0x10b0], ecx
mov eax, 1
jmp 0x1b152
mov eax, dword [rsp + 0x140]
shr eax, 1
and eax, 1
test eax, eax
je 0x1b078
mov eax, dword [rsp + 0x148]
shr eax, 2
and eax, 1
test eax, eax
jne 0x1b078
mov eax, dword [rsp + 0x148]
shr eax, 3
and eax, 1
test eax, eax
jne 0x1b078
lea rcx, [0x000255a0]
call sub.ntoskrnl.exe_DbgPrint
mov r11, qword [rsp + 0x170]
mov ecx, dword [r11 + 0x10b0]
or ecx, 0x10000
mov rax, qword [rsp + 0x170]
mov dword [rax + 0x10b0], ecx
mov eax, 1
jmp 0x1b152
mov eax, dword [rsp + 0x140]
shr eax, 2
and eax, 1
test eax, eax
je 0x1b0e1
mov eax, dword [rsp + 0x148]
shr eax, 4
and eax, 1
test eax, eax
jne 0x1b0e1
mov eax, dword [rsp + 0x148]
shr eax, 5
and eax, 1
test eax, eax
jne 0x1b0e1
lea rcx, [0x000255c0]
call sub.ntoskrnl.exe_DbgPrint
mov r11, qword [rsp + 0x170]
mov ecx, dword [r11 + 0x10b0]
or ecx, 0x10000
mov rax, qword [rsp + 0x170]
mov dword [rax + 0x10b0], ecx
mov eax, 1
jmp 0x1b152
mov eax, dword [rsp + 0x140]
shr eax, 3
and eax, 1
test eax, eax
je 0x1b14a
mov eax, dword [rsp + 0x148]
shr eax, 6
and eax, 1
test eax, eax
jne 0x1b14a
mov eax, dword [rsp + 0x148]
shr eax, 7
and eax, 1
test eax, eax
jne 0x1b14a
lea rcx, reloc.ntoskrnl.exe_IoCreateDevice
call sub.ntoskrnl.exe_DbgPrint
mov r11, qword [rsp + 0x170]
mov ecx, dword [r11 + 0x10b0]
or ecx, 0x10000
mov rax, qword [rsp + 0x170]
mov dword [rax + 0x10b0], ecx
mov eax, 1
jmp 0x1b152
xor eax, eax
jmp 0x1b152
xor eax, eax
add rsp, 0x160
pop rbx
ret