Function at 0x11e66
Capabilities:
Print debug messages

Disassembly:
push 8
push 0x15190
call fcn.00014d74
xor al, al
mov edx, dword [ebp + 0x28]
mov ecx, dword [edx + 0x28]
xor edi, edi
cmp dword [ecx], edi
jne 0x1224a
mov esi, dword [ebp + 0x24]
mov dword [esi], edi
lea ebx, [esi + 4]
mov dword [ebx], edi
mov eax, dword [ebp + 0x20]
mov ecx, 0x83000034
cmp eax, ecx
ja 0x120f5
je 0x120e0
add ecx, 0xffffffe4
cmp eax, ecx
ja 0x11fc8
je 0x11f9e
cmp eax, 0x83000000
je 0x11f77
cmp eax, 0x83000004
je 0x11f6d
cmp eax, 0x8300000b
je 0x11f1d
cmp eax, 0x83000010
je 0x11f00
cmp eax, 0x83000014
jne 0x121ec
push 4
pop edi
cmp dword [ebp + 0x1c], edi
jb 0x12240
mov eax, dword [ebp + 0x18]
mov dword [eax], 0x1ae
mov dword [ebx], edi
jmp 0x12246
cmp dword [ebp + 0x14], 0x1000
jae 0x12240
push dword [ebp + 0x14]
push dword [ebp + 0x10]
call fcn.0001465c
jmp 0x12246
cmp dword [ebp + 0x1c], 0xfff3
jae 0x11f31
mov dword [esi], 0xc0000023
jmp 0x1204b
mov dword [ebp - 4], edi
push 1
push dword [ebp + 0x1c]
push dword [ebp + 0x18]
call dword [sym.imp.ntoskrnl.exe_ProbeForWrite]
or dword [ebp - 4], 0xffffffff
push ebx
push dword [ebp + 0x18]
call fcn.00013694
jmp 0x12246
call fcn.0001349a
jmp 0x12246
push 4
pop edi
cmp dword [ebp + 0x14], edi
jb 0x12240
cmp dword [ebp + 0x1c], edi
jb 0x12240
push dword [edx + 8]
mov eax, dword [ebp + 0x10]
push dword [eax]
call fcn.00013d90
jmp 0x12155
cmp dword [ebp + 0x14], 4
jb 0x12240
mov eax, dword [ebp + 0x10]
push dword [eax]
push dword [edx + 8]
call fcn.000112fa
test al, al
jne 0x12246
mov dword [esi], 0xc0000001
jmp 0x12246
cmp eax, 0x8300001c
je 0x120c7
cmp eax, 0x83000020
je 0x120a9
cmp eax, 0x83000024
je 0x1209c
cmp eax, 0x8300002c
je 0x12064
cmp eax, 0x83000030
jne 0x121ec
xor eax, eax
inc eax
mov dword [0x160c4], eax
mov dword [0x160c8], edi
mov dword [0x160cc], edi
push edi
push eax
push 0x160d0
call dword [sym.imp.ntoskrnl.exe_KeInitializeEvent]
mov esi, 0x160c4
mov ecx, esi
call dword [sym.imp.HAL.dll_ExAcquireFastMutex]
push 0x206b6444
push 0xfff3
push edi
call dword [sym.imp.ntoskrnl.exe_ExAllocatePoolWithTag]
mov dword [0x160c0], eax
mov ecx, esi
cmp eax, edi
jne 0x12052
call dword [sym.imp.HAL.dll_ExReleaseFastMutex]
xor al, al
jmp 0x1228f
call dword [sym.imp.HAL.dll_ExReleaseFastMutex]
mov byte [0x160e4], 1
jmp 0x12246
mov esi, 0x160c4
mov ecx, esi
call dword [sym.imp.HAL.dll_ExAcquireFastMutex]
mov eax, dword [0x160c0]
cmp eax, edi
je 0x12088
push edi
push eax
call dword [sym.imp.ntoskrnl.exe_ExFreePoolWithTag]
mov dword [0x160c0], edi
mov ecx, esi
call dword [sym.imp.HAL.dll_ExReleaseFastMutex]
mov byte [0x160e4], 0
jmp 0x12246
push dword [ebp + 0x10]
call fcn.00013042
jmp 0x12246
push dword [ebp + 0x10]
call fcn.00012e4a
test al, al
je 0x12246
mov eax, dword [ebp + 0x18]
mov dword [eax], 1
jmp 0x12246
cmp dword [ebp + 0x14], 4
jb 0x12240
mov eax, dword [ebp + 0x10]
push dword [eax]
call fcn.0001146c
jmp 0x12246
push 0x11e14
call sub.ntoskrnl.exe_DbgPrint
pop ecx
call fcn.00012d06
jmp 0x12246
mov ecx, 0x83000054
cmp eax, ecx
ja 0x121c9
je 0x121af
cmp eax, 0x83000038
je 0x1219a
cmp eax, 0x8300003c
je 0x1217d
cmp eax, 0x83000040
je 0x1216e
cmp eax, 0x83000044
je 0x1215f
cmp eax, 0x83000048
jne 0x121ec
push 4
pop edi
cmp dword [ebp + 0x14], edi
jb 0x12240
cmp dword [ebp + 0x1c], edi
jb 0x12240
push dword [edx + 8]
mov eax, dword [ebp + 0x10]
push dword [eax]
call fcn.00013e3e
mov ecx, dword [ebp + 0x18]
mov dword [ecx], eax
jmp 0x11ef9
mov eax, dword [ebp + 0x10]
push dword [eax]
call fcn.00014646
jmp 0x12246
mov eax, dword [ebp + 0x10]
push dword [eax]
call fcn.00014630
jmp 0x12246
cmp dword [ebp + 0x14], 0x1000
jae 0x12240
push dword [ebp + 0x14]
push dword [ebp + 0x10]
call fcn.00014694
jmp 0x12246
push 0x11e3c
call sub.ntoskrnl.exe_DbgPrint
pop ecx
call fcn.00012d2e
jmp 0x12246
cmp dword [ebp + 0x14], 0x1000
jae 0x12240
push dword [ebp + 0x14]
push dword [ebp + 0x10]
call fcn.00014ad2
jmp 0x12246
cmp eax, 0x83000058
je 0x1222a
cmp eax, 0x8300005c
je 0x12221
cmp eax, 0x83000060
je 0x12218
cmp eax, 0x83000064
je 0x12206
cmp eax, 0x83000080
je 0x121f4
mov dword [esi], 0xc0000010
jmp 0x12246
push dword [ebp + 0x10]
call fcn.00012e4a
push dword [ebp + 0x10]
call fcn.00012f70
jmp 0x12246
push dword [ebp + 0x10]
call fcn.00012e4a
push dword [ebp + 0x10]
call fcn.00012fc0
jmp 0x12246
mov byte [0x160e5], 0
jmp 0x12246
mov byte [0x160e5], 1
jmp 0x12246
cmp dword [ebp + 0x14], 0x1000
jae 0x12240
push dword [ebp + 0x14]
push dword [ebp + 0x10]
call fcn.00014b0a
jmp 0x12246
mov dword [esi], 0xc0000023
mov al, 1
jmp 0x1228f
mov edx, dword [ecx + 4]
mov edx, dword [edx + 8]
mov edx, dword [edx + 0x28]
cmp edx, edi
je 0x1228f
mov esi, dword [ecx + 4]
mov esi, dword [esi + 8]
mov esi, dword [esi + 0x28]
cmp dword [esi], 0x28
jbe 0x1228f
cmp dword [edx + 0x28], edi
je 0x1228f
mov ecx, dword [ecx + 4]
mov eax, dword [ecx + 8]
mov eax, dword [eax + 0x28]
push ecx
push dword [ebp + 0x24]
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call dword [eax + 0x28]
call fcn.00014daf
ret 0x24