Function at 0x1c93c
Capabilities:
Print debug messages

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x40
cmp byte [0x00025742], 0
mov rsi, rdx
mov rbx, rcx
mov edi, 0xc0000001
je 0x1c985
mov eax, dword [rcx + 0x20]
mov r9d, dword [rcx + 0x10]
mov r8, qword [rcx + 8]
mov edx, dword [rcx]
mov dword [rsp + 0x28], eax
mov rax, qword [rcx + 0x18]
lea rcx, [0x00022600]
mov qword [rsp + 0x20], rax
call sub.ntoskrnl.exe_DbgPrint
mov eax, 0x80532f20
cmp dword [rbx], eax
ja 0x1cb91
je 0x1cc33
mov eax, 0x80532ef4
cmp dword [rbx], eax
ja 0x1cb26
je 0x1cc33
cmp dword [rbx], 0x805326ec
je 0x1cada
cmp dword [rbx], 0x805326f0
je 0x1ca9f
cmp dword [rbx], 0x805326f4
je 0x1ca98
cmp dword [rbx], 0x80532aec
je 0x1ca73
cmp dword [rbx], 0x80532af0
je 0x1ca4f
cmp dword [rbx], 0x80532af4
je 0x1ca1e
cmp dword [rbx], 0x80532af8
je 0x1ca0a
cmp dword [rbx], 0x80532eec
je 0x1cc33
cmp dword [rbx], 0x80532ef0
jmp 0x1cc2a
xor edx, edx
lea rcx, [0x00025760]
lea r8d, [rdx + 0x58]
call fcn.0001ce80
jmp 0x1ca98
mov rcx, qword [rbx + 0x18]
test rcx, rcx
je 0x1cc40
cmp dword [rbx + 0x20], 0x58
jb 0x1cc40
lea rdx, [0x00025760]
mov r8d, 0x58
call fcn.0001cf80
mov dword [rsi], 0x58
jmp 0x1ca98
mov rax, qword [rbx + 8]
test rax, rax
je 0x1cc40
cmp dword [rbx + 0x10], 4
jb 0x1cc40
mov eax, dword [rax]
and dword [rsi], 0
mov dword [0x0002419c], eax
jmp 0x1ca98
mov rcx, qword [rbx + 0x18]
test rcx, rcx
je 0x1cc40
cmp dword [rbx + 0x20], 4
jb 0x1cc40
mov eax, dword [0x0002419c]
mov dword [rsi], 4
mov dword [rcx], eax
xor edi, edi
jmp 0x1cc40
mov rax, qword [rbx + 8]
test rax, rax
je 0x1cc40
cmp dword [rbx + 0x10], 8
jb 0x1cc40
cmp dword [rax], 0
mov ecx, dword [rax + 4]
jne 0x1cc40
cmp ecx, 2
ja 0x1cc40
xor edi, edi
mov dword [0x000241a0], ecx
and dword [rsi], edi
jmp 0x1cc40
mov rax, qword [rbx + 8]
test rax, rax
je 0x1cc40
cmp dword [rbx + 0x10], 4
jb 0x1cc40
mov rcx, qword [rbx + 0x18]
test rcx, rcx
je 0x1cc40
cmp dword [rbx + 0x20], 4
jb 0x1cc40
cmp dword [rax], 0
jne 0x1cc40
mov eax, dword [0x000241a0]
xor edi, edi
mov dword [rsi], 4
mov dword [rcx], eax
jmp 0x1cc40
cmp dword [rbx], 0x80532ef8
je 0x1cc33
cmp dword [rbx], 0x80532efc
je 0x1cc33
cmp dword [rbx], 0x80532f00
je 0x1cc33
cmp dword [rbx], 0x80532f04
je 0x1cc33
cmp dword [rbx], 0x80532f0c
je 0x1cc33
cmp dword [rbx], 0x80532f10
je 0x1cc33
cmp dword [rbx], 0x80532f14
je 0x1cc33
cmp dword [rbx], 0x80532f18
je 0x1cc33
cmp dword [rbx], 0x80532f1e
jmp 0x1cc2a
mov eax, 0x80532f8c
cmp dword [rbx], eax
ja 0x1cbec
je 0x1cc33
cmp dword [rbx], 0x80532f26
je 0x1cc33
cmp dword [rbx], 0x80532f28
je 0x1cc33
cmp dword [rbx], 0x80532f3c
je 0x1cc33
cmp dword [rbx], 0x80532f42
je 0x1cc33
cmp dword [rbx], 0x80532f44
je 0x1cc33
cmp dword [rbx], 0x80532f64
je 0x1cc33
cmp dword [rbx], 0x80532f6a
je 0x1cc33
cmp dword [rbx], 0x80532f6c
je 0x1cc33
cmp dword [rbx], 0x80532f70
jmp 0x1cc2a
cmp dword [rbx], 0x80532f90
je 0x1cc33
cmp dword [rbx], 0x80532f94
je 0x1cc33
cmp dword [rbx], 0x80532f98
je 0x1cc33
cmp dword [rbx], 0x80532f9c
je 0x1cc33
cmp dword [rbx], 0x80532fa0
je 0x1cc33
cmp dword [rbx], 0x80532fa4
je 0x1cc33
cmp dword [rbx], 0x80532fa8
je 0x1cc33
cmp dword [rbx], 0x80532fac
je 0x1cc33
mov edi, 0xc00000bb
jmp 0x1cc40
mov rdx, rsi
mov rcx, rbx
call fcn.0001b9ec
mov edi, eax
cmp byte [0x00025742], 0
je 0x1cc73
mov ecx, dword [rbx + 0x20]
mov r9d, dword [rbx + 0x10]
mov r8, qword [rbx + 8]
mov edx, dword [rbx]
mov dword [rsp + 0x30], edi
mov dword [rsp + 0x28], ecx
mov rcx, qword [rbx + 0x18]
mov qword [rsp + 0x20], rcx
lea rcx, [0x00022650]
call sub.ntoskrnl.exe_DbgPrint
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
mov eax, edi
add rsp, 0x40
pop rdi
ret