Function at 0x1b9ec
Capabilities:
Print debug messages

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x10], rbp
mov qword [r11 + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
xor r15d, r15d
mov r13, rdx
mov rdi, rcx
mov ebx, 0xc0000001
cmp byte [0x00025742], r15b
je 0x1ba44
mov eax, dword [rcx + 0x20]
mov r9d, dword [rcx + 0x10]
mov r8, qword [rcx + 8]
mov edx, dword [rcx]
mov dword [rsp + 0x28], eax
mov rax, qword [rcx + 0x18]
lea rcx, [0x00021830]
mov qword [r11 - 0x48], rax
call sub.ntoskrnl.exe_DbgPrint
mov eax, 0x80532f3c
cmp dword [rdi], eax
ja 0x1c074
je 0x1c043
mov eax, 0x80532f0c
cmp dword [rdi], eax
ja 0x1bcf5
je 0x1bcb0
cmp dword [rdi], 0x80532eec
je 0x1bca6
cmp dword [rdi], 0x80532ef0
je 0x1c8e0
cmp dword [rdi], 0x80532ef4
je 0x1bc07
cmp dword [rdi], 0x80532ef8
je 0x1bb70
cmp dword [rdi], 0x80532efc
je 0x1bb34
cmp dword [rdi], 0x80532f00
je 0x1bb00
cmp dword [rdi], 0x80532f04
jne 0x1c8e0
mov ebx, dword [rdi + 0x10]
mov rsi, qword [rdi + 8]
shr ebx, 4
cmp byte [0x00025742], r15b
je 0x1badf
lea rcx, [0x00021980]
mov r8d, ebx
mov rdx, rsi
call sub.ntoskrnl.exe_DbgPrint
cmp rsi, r15
je 0x1bc9e
cmp ebx, r15d
jbe 0x1bc9e
mov edx, ebx
mov rcx, rsi
call fcn.000187f0
jmp 0x1bc9e
mov ebx, dword [rdi + 0x10]
mov rsi, qword [rdi + 8]
shr ebx, 4
cmp byte [0x00025742], r15b
je 0x1bb25
lea rcx, [0x00021940]
mov r8d, ebx
mov rdx, rsi
call sub.ntoskrnl.exe_DbgPrint
mov edx, ebx
mov rcx, rsi
call fcn.000186c0
jmp 0x1bc9e
mov rax, qword [rdi + 8]
cmp rax, r15
je 0x1c8e0
cmp dword [rdi + 0x10], 4
jb 0x1c8e0
mov bl, byte [rax]
cmp byte [0x00025742], r15b
je 0x1bb65
lea rcx, [0x000219c0]
movzx edx, bl
call sub.ntoskrnl.exe_DbgPrint
mov byte [0x00024121], bl
jmp 0x1bc9e
mov esi, dword [rdi + 0x10]
mov rbp, qword [rdi + 8]
shr esi, 3
cmp byte [0x00025742], r15b
je 0x1bb95
lea rcx, [0x00021900]
mov r8d, esi
mov rdx, rbp
call sub.ntoskrnl.exe_DbgPrint
mov eax, 0xc8
cmp esi, eax
cmova esi, eax
mov dword [0x00024ee0], esi
cmp rbp, r15
je 0x1bbc5
cmp esi, r15d
jbe 0x1bbc5
mov r8d, esi
lea rcx, [0x00024ee4]
mov rdx, rbp
shl r8d, 3
call fcn.0001cf80
mov r12d, r15d
cmp esi, r15d
jbe 0x1bc9e
mov ebx, 1
cmp byte [0x00025742], r15b
je 0x1bbf6
mov r9d, dword [rbp + 4]
mov r8d, dword [rbp]
lea rcx, [0x0001fef0]
mov edx, r12d
call sub.ntoskrnl.exe_DbgPrint
add r12d, ebx
add rbp, 8
cmp r12d, esi
jb 0x1bbd6
jmp 0x1bc9e
mov rbp, qword [rdi + 8]
cmp rbp, r15
je 0x1c8e0
mov esi, dword [rdi + 0x10]
shr esi, 3
cmp byte [0x00025742], r15b
je 0x1bc35
lea rcx, [0x00021880]
mov r8d, esi
mov rdx, rbp
call sub.ntoskrnl.exe_DbgPrint
mov eax, 0x14
cmp esi, eax
cmova esi, eax
mov dword [0x00025590], esi
cmp rbp, r15
je 0x1bc65
cmp esi, r15d
jbe 0x1bc65
mov r8d, esi
lea rcx, [0x00025594]
mov rdx, rbp
shl r8d, 3
call fcn.0001cf80
mov r12d, r15d
cmp esi, r15d
jbe 0x1bc9e
mov ebx, 1
cmp byte [0x00025742], r15b
je 0x1bc92
mov r9d, dword [rbp + 4]
mov r8d, dword [rbp]
lea rcx, [0x0001fe90]
mov edx, r12d
call sub.ntoskrnl.exe_DbgPrint
add r12d, ebx
add rbp, 8
cmp r12d, esi
jb 0x1bc72
mov ebx, r15d
jmp 0x1c8e0
mov ebx, 0xc00000bb
jmp 0x1c8e0
mov rsi, qword [rdi + 8]
cmp rsi, r15
je 0x1c8e0
cmp dword [rdi + 0x10], 8
jb 0x1c8e0
cmp byte [0x00025742], r15b
je 0x1bce2
mov r8d, dword [rsi + 4]
mov edx, dword [rsi]
lea rcx, [0x00021a00]
call sub.ntoskrnl.exe_DbgPrint
mov eax, dword [rsi]
mov dword [0x00025a18], eax
mov eax, dword [rsi + 4]
mov dword [0x00025a1c], eax
jmp 0x1bc9e
cmp dword [rdi], 0x80532f10
je 0x1bf77
cmp dword [rdi], 0x80532f14
je 0x1bf3a
cmp dword [rdi], 0x80532f18
je 0x1bec6
cmp dword [rdi], 0x80532f1e
je 0x1be5c
cmp dword [rdi], 0x80532f20
je 0x1be2b
cmp dword [rdi], 0x80532f26
je 0x1bdb1
cmp dword [rdi], 0x80532f28
jne 0x1c8e0
cmp byte [0x00025742], r15b
je 0x1bd5a
lea rcx, [0x00021d40]
call sub.ntoskrnl.exe_DbgPrint
lea rcx, [0x00024dc0]
call qword [sym.imp.ntoskrnl.exe_KeAcquireSpinLockRaiseToDpc]
mov rdx, qword [0x00024d08]
mov byte [0x00024dc8], al
cmp rdx, r15
je 0x1bd97
mov rbx, qword [rdx + 8]
lea rcx, [0x00024d40]
call fcn.00014714
mov rdx, rbx
cmp rbx, r15
jne 0x1bd79
mov al, byte [0x00024dc8]
mov dword [0x00024d00], r15d
mov qword [0x00024d08], r15
lea rcx, [0x00024dc0]
jmp 0x1bf2d
mov ecx, dword [rdi + 0x20]
mov rbp, qword [rdi + 0x18]
movabs rax, 0xcccccccccccccccd
mul rcx
mov rsi, rdx
shr rsi, 5
cmp byte [0x00025742], r15b
je 0x1bde7
lea rcx, [0x00021cc0]
mov r8d, esi
mov rdx, rbp
call sub.ntoskrnl.exe_DbgPrint
cmp rbp, r15
je 0x1c8e0
cmp esi, r15d
jbe 0x1c8e0
mov edx, esi
mov rcx, rbp
call fcn.00016528
mov ebx, eax
cmp byte [0x00025742], r15b
je 0x1be20
lea rcx, [0x00021d00]
mov r8d, eax
mov rdx, rbp
call sub.ntoskrnl.exe_DbgPrint
lea eax, [rbx + rbx*4]
shl eax, 3
jmp 0x1c03a
mov rbx, qword [rdi + 8]
mov esi, dword [rdi + 0x10]
cmp byte [0x00025742], r15b
je 0x1be4d
lea rcx, [0x00021bc0]
mov r8d, esi
mov rdx, rbx
call sub.ntoskrnl.exe_DbgPrint
mov edx, esi
mov rcx, rbx
call fcn.000162d0
jmp 0x1bc9e
mov esi, dword [rdi + 0x20]
mov rbp, qword [rdi + 0x18]
shr esi, 5
cmp byte [0x00025742], r15b
je 0x1be81
lea rcx, [0x00021b40]
mov r8d, esi
mov rdx, rbp
call sub.ntoskrnl.exe_DbgPrint
cmp rbp, r15
je 0x1c8e0
cmp esi, r15d
jbe 0x1c8e0
mov edx, esi
mov rcx, rbp
call fcn.00013bf4
mov ebx, eax
cmp byte [0x00025742], r15b
je 0x1beba
lea rcx, [0x00021b80]
mov r8d, eax
mov rdx, rbp
call sub.ntoskrnl.exe_DbgPrint
shl ebx, 5
mov dword [r13], ebx
jmp 0x1bc9e
cmp byte [0x00025742], r15b
je 0x1bedb
lea rcx, [0x00021b00]
call sub.ntoskrnl.exe_DbgPrint
lea rcx, [0x000242c0]
call qword [sym.imp.ntoskrnl.exe_KeAcquireSpinLockRaiseToDpc]
mov rdx, qword [0x00024208]
mov byte [0x000242c8], al
cmp rdx, r15
je 0x1bf18
mov rbx, qword [rdx + 8]
lea rcx, [0x00024240]
call fcn.00014714
mov rdx, rbx
cmp rbx, r15
jne 0x1befa
mov al, byte [0x000242c8]
mov dword [0x00024200], r15d
mov qword [0x00024208], r15
lea rcx, [0x000242c0]
mov dl, al
call qword [sym.imp.ntoskrnl.exe_KeReleaseSpinLock]
jmp 0x1bc9e
mov rsi, qword [rdi + 8]
cmp rsi, r15
je 0x1c8e0
cmp dword [rdi + 0x10], 4
jb 0x1c8e0
cmp byte [0x00025742], r15b
je 0x1bf68
mov edx, dword [rsi]
lea rcx, [0x00021ac0]
call sub.ntoskrnl.exe_DbgPrint
cmp dword [rsi], r15d
setne byte [0x00025a22]
jmp 0x1bc9e
mov esi, dword [rdi + 0x20]
mov rbp, qword [rdi + 0x18]
shr esi, 2
cmp byte [0x00025742], r15b
je 0x1bf9c
lea rcx, [0x00021a40]
mov r8d, esi
mov rdx, rbp
call sub.ntoskrnl.exe_DbgPrint
cmp rbp, r15
je 0x1c8e0
cmp esi, r15d
jbe 0x1c8e0
mov ebx, 1
mov r12d, r15d
lea r14, [0x0002bdc0]
lea eax, [rbx + 0x1f]
cmp byte [0x00025742], r15b
je 0x1bfe0
mov r8d, dword [r14]
lea rcx, [0x0001fe60]
mov edx, r12d
call sub.ntoskrnl.exe_DbgPrint
mov eax, 0x20
add r12d, ebx
add r14, 4
cmp r12d, eax
jb 0x1bfc0
cmp esi, eax
lea rdx, [0x0002bdc0]
mov rcx, rbp
cmova esi, eax
mov ebx, esi
shl rbx, 2
mov r8, rbx
call fcn.0001cf80
lea rcx, [0x0002bdc0]
mov r8, rbx
xor edx, edx
call fcn.0001ce80
cmp byte [0x00025742], r15b
je 0x1c035
lea rcx, [0x00021a80]
mov r8d, esi
mov rdx, rbp
call sub.ntoskrnl.exe_DbgPrint
mov eax, esi
shl eax, 2
mov dword [r13], eax
jmp 0x1bc9e
mov rbx, qword [rdi + 8]
mov esi, dword [rdi + 0x10]
cmp byte [0x00025742], r15b
je 0x1c065
lea rcx, [0x00021c00]
mov r8d, esi
mov rdx, rbx
call sub.ntoskrnl.exe_DbgPrint
mov edx, esi
mov rcx, rbx
call fcn.0001716c
jmp 0x1bc9e
mov eax, 0x80532f90
cmp dword [rdi], eax
ja 0x1c3c6
je 0x1c310
cmp dword [rdi], 0x80532f42
je 0x1c293
cmp dword [rdi], 0x80532f44
je 0x1c227
cmp dword [rdi], 0x80532f64
je 0x1c201
cmp dword [rdi], 0x80532f6a
je 0x1c19d
cmp dword [rdi], 0x80532f6c
je 0x1c135
cmp dword [rdi], 0x80532f70
je 0x1c104
cmp dword [rdi], 0x80532f8c
jne 0x1c8e0
mov rbx, qword [rdi + 8]
mov esi, dword [rdi + 0x10]
cmp byte [0x00025742], r15b
je 0x1c0f5
lea rcx, [0x00021c80]
mov r8d, esi
mov rdx, rbx
call sub.ntoskrnl.exe_DbgPrint
mov edx, esi
mov rcx, rbx
call fcn.00018060
jmp 0x1bc9e
mov rbx, qword [rdi + 8]
mov esi, dword [rdi + 0x10]
cmp byte [0x00025742], r15b
je 0x1c126
lea rcx, [0x00021c40]
mov r8d, esi
mov rdx, rbx
call sub.ntoskrnl.exe_DbgPrint
mov edx, esi
mov rcx, rbx
call fcn.00017b60
jmp 0x1bc9e
cmp byte [0x00025742], r15b
je 0x1c14a
lea rcx, [0x00021ea0]
call sub.ntoskrnl.exe_DbgPrint
lea rcx, [0x00024928]
call qword [sym.imp.ntoskrnl.exe_KeAcquireSpinLockRaiseToDpc]
mov rcx, qword [0x00024920]
mov byte [0x00024930], al
cmp rcx, r15
je 0x1c183
mov rbx, qword [rcx + 8]
xor edx, edx
call qword [sym.imp.ntoskrnl.exe_ExFreePoolWithTag]
mov rcx, rbx
cmp rbx, r15
jne 0x1c169
mov al, byte [0x00024930]
mov dword [0x00024918], r15d
mov qword [0x00024920], r15
lea rcx, [0x00024928]
jmp 0x1bf2d
mov rsi, qword [rdi + 0x18]
mov ebp, dword [rdi + 0x20]
cmp byte [0x00025742], r15b
je 0x1c1bf
lea rcx, [0x00021e20]
mov r8d, ebp
mov rdx, rsi
call sub.ntoskrnl.exe_DbgPrint
cmp rsi, r15
je 0x1c8e0
cmp ebp, r15d
jbe 0x1c8e0
mov edx, ebp
mov rcx, rsi
call fcn.00017eb8
mov ebx, eax
cmp byte [0x00025742], r15b
je 0x1bebd
lea rcx, [0x00021e60]
mov r8d, eax
mov rdx, rsi
call sub.ntoskrnl.exe_DbgPrint
jmp 0x1bebd
cmp byte [0x00025742], r15b
je 0x1bc9e
mov r8d, dword [rdi + 0x10]
mov rdx, qword [rdi + 8]
lea rcx, [0x00021c40]
call sub.ntoskrnl.exe_DbgPrint
jmp 0x1bc9e
cmp byte [0x00025742], r15b
je 0x1c23c
lea rcx, [0x00021df0]
call sub.ntoskrnl.exe_DbgPrint
lea rcx, [0x00024cc0]
call qword [sym.imp.ntoskrnl.exe_KeAcquireSpinLockRaiseToDpc]
mov rdx, qword [0x00024c08]
mov byte [0x00024cc8], al
cmp rdx, r15
je 0x1c279
mov rbx, qword [rdx + 8]
lea rcx, [0x00024c40]
call fcn.00014714
mov rdx, rbx
cmp rbx, r15
jne 0x1c25b
mov al, byte [0x00024cc8]
mov dword [0x00024c00], r15d
mov qword [0x00024c08], r15
lea rcx, [0x00024cc0]
jmp 0x1bf2d
mov esi, dword [rdi + 0x20]
mov rbp, qword [rdi + 0x18]
movabs rax, 0x2492492492492493
mul rsi
sub rsi, rdx
shr rsi, 1
add rsi, rdx
shr rsi, 4
cmp byte [0x00025742], r15b
je 0x1c2cf
lea rcx, [0x00021d70]
mov r8d, esi
mov rdx, rbp
call sub.ntoskrnl.exe_DbgPrint
cmp rbp, r15
je 0x1c8e0
cmp esi, r15d
jbe 0x1c8e0
mov edx, esi
mov rcx, rbp
call fcn.000173f4
mov ebx, eax
cmp byte [0x00025742], r15b
je 0x1c308
lea rcx, [0x00021db0]
mov r8d, eax
mov rdx, rbp
call sub.ntoskrnl.exe_DbgPrint
imul ebx, ebx, 0x1c
jmp 0x1bebd
mov al, byte [0x00025742]
cmp al, r15b
je 0x1c333
mov r8d, dword [rdi + 0x10]
mov rdx, qword [rdi + 8]
lea rcx, [0x00021ed0]
movzx r9d, al
call sub.ntoskrnl.exe_DbgPrint
mov rdx, qword [rdi + 8]
cmp rdx, r15
je 0x1c39f
cmp dword [rdi + 0x10], 4
jne 0x1c39f
mov sil, byte [rdx]
cmp sil, r15b
jne 0x1c36f
mov al, byte [0x00025742]
cmp al, r15b
je 0x1c36f
xor r9d, r9d
movzx eax, al
lea rcx, [0x00021f20]
lea r8d, [r9 + 4]
mov dword [rsp + 0x20], eax
call sub.ntoskrnl.exe_DbgPrint
mov byte [0x00025742], sil
mov ebx, r15d
cmp sil, r15b
je 0x1c913
mov r8d, dword [rdi + 0x10]
mov rdx, qword [rdi + 8]
movzx r9d, sil
lea rcx, [0x00021f70]
mov dword [rsp + 0x20], r9d
call sub.ntoskrnl.exe_DbgPrint
mov al, byte [0x00025742]
cmp al, r15b
je 0x1c913
mov r8d, dword [rdi + 0x10]
mov rdx, qword [rdi + 8]
movzx r9d, al
lea rcx, [0x00021fc0]
jmp 0x1c8db
cmp dword [rdi], 0x80532f94
je 0x1c838
cmp dword [rdi], 0x80532f98
je 0x1c7a8
cmp dword [rdi], 0x80532f9c
je 0x1c6e8
cmp dword [rdi], 0x80532fa0
je 0x1c628
cmp dword [rdi], 0x80532fa4
je 0x1c52c
cmp dword [rdi], 0x80532fa8
je 0x1c4bf
cmp dword [rdi], 0x80532fac
jne 0x1c8e0
mov esi, dword [rdi + 0x10]
mov rbp, qword [rdi + 8]
shr esi, 2
cmp byte [0x00025742], r15b
je 0x1c43f
lea rcx, [0x000218c0]
mov r8d, esi
mov rdx, rbp
call sub.ntoskrnl.exe_DbgPrint
mov eax, 0x14
lea rcx, [0x00025534]
cmp esi, eax
lea r8d, [rax + 0x3c]
cmova esi, eax
xor edx, edx
mov dword [0x00025530], esi
call fcn.0001ce80
cmp rbp, r15
je 0x1c481
cmp esi, r15d
jbe 0x1c481
mov r8d, esi
lea rcx, [0x00025534]
mov rdx, rbp
shl r8d, 2
call fcn.0001cf80
mov r12d, r15d
cmp esi, r15d
jbe 0x1bc9e
mov ebx, 1
cmp byte [0x00025742], r15b
je 0x1c4ae
mov r8d, dword [rbp]
lea rcx, [0x0001fec0]
mov edx, r12d
call sub.ntoskrnl.exe_DbgPrint
add r12d, ebx
add rbp, 4
cmp r12d, esi
jb 0x1c492
jmp 0x1bc9e
cmp byte [0x00025742], r15b
je 0x1c4dc
mov r8d, dword [rdi + 0x10]
mov rdx, qword [rdi + 8]
lea rcx, [0x000224c0]
call sub.ntoskrnl.exe_DbgPrint
mov rsi, qword [rdi + 8]
cmp rsi, r15
je 0x1c513
mov ebx, dword [rdi + 0x10]
shr ebx, 4
cmp byte [0x00025742], r15b
je 0x1c506
lea rcx, [0x00022510]
mov r8d, ebx
mov rdx, rsi
call sub.ntoskrnl.exe_DbgPrint
mov edx, ebx
mov rcx, rsi
call fcn.00015734
mov ebx, r15d
cmp byte [0x00025742], r15b
je 0x1c913
lea rcx, [0x00022550]
jmp 0x1c616
cmp byte [0x00025742], r15b
je 0x1c549
mov r8d, dword [rdi + 0x10]
mov rdx, qword [rdi + 8]
lea rcx, [0x000223e0]
call sub.ntoskrnl.exe_DbgPrint
mov rsi, qword [rdi + 8]
cmp rsi, r15
je 0x1c602
mov ebx, dword [rdi + 0x10]
shr ebx, 3
cmp byte [0x00025742], r15b
je 0x1c577
lea rcx, [0x00022430]
mov r8d, ebx
mov rdx, rsi
call sub.ntoskrnl.exe_DbgPrint
mov eax, 0x1f4
mov ebp, ebx
cmp ebx, eax
cmova ebp, eax
cmp byte [0x00025742], r15b
je 0x1c5a1
lea rcx, [0x0001ea50]
mov r9d, ebp
mov r8d, ebx
mov rdx, rsi
call sub.ntoskrnl.exe_DbgPrint
mov dword [0x00025a30], ebp
cmp rsi, r15
je 0x1c5c7
cmp ebp, r15d
jbe 0x1c5c7
mov r8d, ebp
lea rcx, [0x00025a34]
mov rdx, rsi
shl r8d, 3
call fcn.0001cf80
mov r12d, r15d
cmp ebp, r15d
jbe 0x1c5ff
mov ebx, 1
cmp byte [0x00025742], r15b
je 0x1c5f3
mov r9d, dword [rsi + 4]
mov r8d, dword [rsi]
lea rcx, [0x0001ea90]
mov edx, r12d
call sub.ntoskrnl.exe_DbgPrint
add r12d, ebx
add rsi, 8
cmp r12d, ebp
jb 0x1c5d4
mov ebx, r15d
cmp byte [0x00025742], r15b
je 0x1c913
lea rcx, [0x00022470]
mov rdx, qword [rdi + 8]
mov r8d, dword [rdi + 0x10]
call sub.ntoskrnl.exe_DbgPrint
jmp 0x1c8e0
cmp byte [0x00025742], r15b
je 0x1c64d
movzx r9d, byte [0x00025a20]
mov r8d, dword [rdi + 0x10]
mov rdx, qword [rdi + 8]
lea rcx, [0x000222a0]
call sub.ntoskrnl.exe_DbgPrint
mov rdx, qword [rdi + 8]
cmp rdx, r15
je 0x1c6bf
cmp dword [rdi + 0x10], 4
jne 0x1c6bf
mov sil, byte [rdx]
cmp sil, r15b
jne 0x1c68b
cmp byte [0x00025742], r15b
je 0x1c68b
movzx eax, byte [0x00025a20]
xor r9d, r9d
lea rcx, [0x000222f0]
lea r8d, [r9 + 4]
mov dword [rsp + 0x20], eax
call sub.ntoskrnl.exe_DbgPrint
mov byte [0x00025a20], sil
mov ebx, r15d
cmp byte [0x00025742], r15b
je 0x1c913
mov r8d, dword [rdi + 0x10]
mov rdx, qword [rdi + 8]
movzx r9d, sil
lea rcx, [0x00022340]
mov dword [rsp + 0x20], r9d
call sub.ntoskrnl.exe_DbgPrint
cmp byte [0x00025742], r15b
je 0x1c913
movzx r9d, byte [0x00025a20]
mov r8d, dword [rdi + 0x10]
mov rdx, qword [rdi + 8]
lea rcx, [0x00022390]
jmp 0x1c8db
cmp byte [0x00025742], r15b
je 0x1c70d
movzx r9d, byte [0x00025743]
mov r8d, dword [rdi + 0x10]
mov rdx, qword [rdi + 8]
lea rcx, [0x00022140]
call sub.ntoskrnl.exe_DbgPrint
mov rdx, qword [rdi + 8]
cmp rdx, r15
je 0x1c77f
cmp dword [rdi + 0x10], 4
jne 0x1c77f
mov sil, byte [rdx]
cmp sil, r15b
jne 0x1c74b
cmp byte [0x00025742], r15b
je 0x1c74b
movzx eax, byte [0x00025743]
xor r9d, r9d
lea rcx, [0x00022190]
lea r8d, [r9 + 4]
mov dword [rsp + 0x20], eax
call sub.ntoskrnl.exe_DbgPrint
mov byte [0x00025743], sil
mov ebx, r15d
cmp byte [0x00025742], r15b
je 0x1c913
mov r8d, dword [rdi + 0x10]
mov rdx, qword [rdi + 8]
movzx r9d, sil
lea rcx, [0x000221f0]
mov dword [rsp + 0x20], r9d
call sub.ntoskrnl.exe_DbgPrint
cmp byte [0x00025742], r15b
je 0x1c913
movzx r9d, byte [0x00025743]
mov r8d, dword [rdi + 0x10]
mov rdx, qword [rdi + 8]
lea rcx, [0x00022250]
jmp 0x1c8db
mov esi, dword [rdi + 0x10]
mov rbp, qword [rdi + 8]
shr esi, 1
cmp byte [0x00025742], r15b
je 0x1c7cc
lea rcx, [0x00022100]
mov r8d, esi
mov rdx, rbp
call sub.ntoskrnl.exe_DbgPrint
mov eax, 0x1f4
cmp esi, eax
cmova esi, eax
mov dword [0x00024500], esi
cmp rbp, r15
je 0x1c7f9
cmp esi, r15d
jbe 0x1c7f9
lea r8d, [rsi + rsi]
lea rcx, [0x00024504]
mov rdx, rbp
call fcn.0001cf80
mov r12d, r15d
cmp esi, r15d
jbe 0x1bc9e
mov ebx, 1
cmp byte [0x00025742], r15b
je 0x1c827
movzx r8d, word [rbp]
lea rcx, [0x0001e910]
mov edx, r12d
call sub.ntoskrnl.exe_DbgPrint
add r12d, ebx
add rbp, 2
cmp r12d, esi
jb 0x1c80a
jmp 0x1bc9e
cmp byte [0x00025742], r15b
je 0x1c85d
movzx r9d, byte [0x00025a21]
mov r8d, dword [rdi + 0x20]
mov rdx, qword [rdi + 0x18]
lea rcx, [0x00022010]
call sub.ntoskrnl.exe_DbgPrint
mov rdx, qword [rdi + 0x18]
cmp rdx, r15
je 0x1c8bb
cmp dword [rdi + 0x20], 4
jne 0x1c8bb
mov eax, dword [0x00025a24]
mov cl, byte [0x00025a21]
mov ebx, 1
cmp eax, ebx
je 0x1c88f
mov ebx, r15d
cmp eax, 2
je 0x1c88f
cmp cl, r15b
setne bl
mov dword [rdx], ebx
mov dword [r13], 4
mov ebx, r15d
cmp byte [0x00025742], r15b
je 0x1c913
movzx r9d, cl
lea rcx, [0x00022060]
mov r8d, 4
call sub.ntoskrnl.exe_DbgPrint
cmp byte [0x00025742], r15b
je 0x1c913
movzx r9d, byte [0x00025a21]
mov r8d, dword [rdi + 0x20]
mov rdx, qword [rdi + 0x18]
lea rcx, [0x000220b0]
call sub.ntoskrnl.exe_DbgPrint
cmp byte [0x00025742], r15b
je 0x1c913
mov ecx, dword [rdi + 0x20]
mov r9d, dword [rdi + 0x10]
mov r8, qword [rdi + 8]
mov edx, dword [rdi]
mov dword [rsp + 0x30], ebx
mov dword [rsp + 0x28], ecx
mov rcx, qword [rdi + 0x18]
mov qword [rsp + 0x20], rcx
lea rcx, [0x000225a0]
call sub.ntoskrnl.exe_DbgPrint
lea r11, [rsp + 0x40]
mov eax, ebx
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret