Function at 0x198d0
Capabilities:
Print debug messages

Disassembly:
mov rax, rsp
mov dword [rax + 0x18], r8d
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x58
mov r12, rcx
xor ecx, ecx
mov r15, rdx
mov rbp, qword [r12 + 0x48]
mov qword [rsp + 0x38], rdx
mov rsi, rdx
mov r14d, ecx
mov ebx, r8d
mov dword [rax - 0x68], r8d
lea r13d, [rcx + 1]
cmp rbp, rcx
jne 0x1991c
mov dil, r13b
jmp 0x19926
cmp dword [rbp + 8], ecx
movzx edi, cl
cmovne edi, r13d
cmp byte [0x00025742], cl
je 0x19940
lea rcx, [0x00020010]
movzx r9d, dil
call sub.ntoskrnl.exe_DbgPrint
xor ecx, ecx
cmp dil, cl
je 0x1998d
mov edx, 0x68
xor ecx, ecx
call qword [sym.imp.ntoskrnl.exe_ExAllocatePool]
xor edi, edi
mov rbp, rax
cmp rax, rdi
je 0x19986
lea r8d, [rdi + 0x68]
xor edx, edx
mov rcx, rax
call fcn.0001ce80
mov dword [rbp + 8], edi
mov dword [rbp + 0xc], edi
mov dword [rbp + 0x10], edi
mov dword [rbp + 0x14], edi
mov rax, qword [r12 + 0x48]
mov qword [rbp], rax
mov qword [r12 + 0x48], rbp
jmp 0x1998f
xor eax, eax
jmp 0x1a346
xor edi, edi
mov eax, dword [rsp + 0xb0]
cmp eax, edi
jle 0x1a31e
add r14d, r13d
cmp byte [0x00025742], dil
je 0x199bf
lea rcx, [0x00020060]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
lea r8, [rsp + 0x30]
mov edx, ebx
mov rcx, rsi
call fcn.00019150
mov ebx, dword [rsp + 0x30]
mov rsi, rax
cmp byte [0x00025742], dil
je 0x199f3
lea rcx, [0x000200c0]
mov r9d, ebx
mov r8, rax
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
cmp rsi, rdi
je 0x1a312
sub ebx, 2
mov qword [rsp + 0x38], rsi
add rsi, 2
cmp ebx, 2
mov dword [rsp + 0x30], ebx
jl 0x19a20
cmp byte [rsi], 0xd
jne 0x19a20
cmp byte [rsi + 1], 0xa
je 0x1a2be
cmp ebx, 0xd
jl 0x19d5a
lea rdx, [0x00020180]
mov r8d, 0xd
mov rcx, rsi
call qword [sym.imp.ntoskrnl.exe__strnicmp]
cmp eax, edi
jne 0x19d5a
sub ebx, 0xd
add rsi, 0xd
mov dword [rsp + 0x30], ebx
cmp byte [0x00025742], dil
je 0x19a70
lea rcx, [0x00020190]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
cmp byte [rsi], 0x20
jne 0x19a88
cmp ebx, edi
jle 0x19a84
add rsi, r13
sub ebx, r13d
cmp byte [rsi], 0x20
je 0x19a75
mov dword [rsp + 0x30], ebx
cmp ebx, edi
je 0x1a2f4
cmp ebx, 0xa
mov dword [rbp + 0xc], 5
jl 0x19abc
lea rdx, [0x00020260]
mov r8d, 0xa
mov rcx, rsi
call qword [sym.imp.ntoskrnl.exe__strnicmp]
cmp eax, edi
jne 0x19abc
mov dword [rbp + 0xc], r13d
jmp 0x19ae2
cmp ebx, 9
jl 0x19ae2
lea rdx, [0x00020270]
mov r8d, 9
mov rcx, rsi
call qword [sym.imp.ntoskrnl.exe__strnicmp]
cmp eax, edi
jne 0x19ae2
mov dword [rbp + 0xc], 2
cmp byte [0x00025742], dil
je 0x19b07
mov eax, dword [rbp + 0xc]
lea rcx, [0x00020280]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
mov dword [rsp + 0x20], eax
call sub.ntoskrnl.exe_DbgPrint
mov r15b, dil
lea r8, [0x000202f0]
mov r9d, 0xa
mov edx, ebx
mov rcx, rsi
call fcn.00018954
cmp byte [0x00025742], 0
mov edi, eax
je 0x19b41
lea rcx, [0x00020300]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
cmp edi, 0xffffffff
je 0x19b7c
lea eax, [rdi + 1]
movsxd rcx, eax
or eax, 0xffffffff
sub eax, edi
xor edi, edi
add rsi, rcx
add ebx, eax
mov dword [rsp + 0x30], ebx
cmp byte [0x00025742], dil
je 0x19bd9
lea rcx, [0x00020360]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
jmp 0x19bd9
lea r8, [rsp + 0x30]
mov edx, ebx
mov rcx, rsi
call fcn.00019150
mov ebx, dword [rsp + 0x30]
xor edi, edi
mov rsi, rax
cmp byte [0x00025742], dil
je 0x19bb2
lea rcx, [0x000203d0]
mov r9d, ebx
mov r8, rax
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
cmp rsi, rdi
je 0x19d11
cmp ebx, 3
jl 0x19d11
cmp byte [rsi + 2], 9
jne 0x19ce8
add rsi, 3
sub ebx, 3
mov dword [rsp + 0x30], ebx
cmp ebx, 9
jl 0x19b0a
lea rdx, [0x000204b0]
mov r8d, 9
mov rcx, rsi
call qword [sym.imp.ntoskrnl.exe__strnicmp]
cmp eax, edi
jne 0x19b0a
sub ebx, 9
add rsi, 9
mov dword [rsp + 0xb8], edi
mov dword [rsp + 0x30], ebx
je 0x19c32
lea rdx, [rsp + 0xb8]
mov r8, rsi
mov ecx, ebx
call fcn.00018b10
mov edi, dword [rsp + 0xb8]
mov r12, rax
jmp 0x19c35
xor r12d, r12d
test r12, r12
je 0x19cb4
mov rcx, qword [rsp + 0xa0]
mov rcx, qword [rcx + 0x50]
test rcx, rcx
je 0x19c5f
movsxd r8, edi
add rcx, 8
mov rdx, r12
call qword [sym.imp.ntoskrnl.exe__strnicmp]
test eax, eax
je 0x19cb4
mov edx, 0x58
xor ecx, ecx
call qword [sym.imp.ntoskrnl.exe_ExAllocatePool]
mov r13, rax
test rax, rax
je 0x19cb4
xor edx, edx
mov rcx, rax
lea r8d, [rdx + 0x58]
call fcn.0001ce80
cmp edi, 0x50
mov eax, 0x4f
cmovae edi, eax
lea rcx, [r13 + 8]
mov rdx, r12
mov r8d, edi
call fcn.0001cf80
mov r12, qword [rsp + 0xa0]
mov rdx, qword [r12 + 0x50]
mov qword [r13], rdx
mov qword [r12 + 0x50], r13
jmp 0x19cbc
mov r12, qword [rsp + 0xa0]
bts dword [rbp + 0xc], 0xc
cmp byte [0x00025742], 0
je 0x19b0a
lea rcx, [0x000204c0]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
jmp 0x19b0a
cmp byte [0x00025742], dil
je 0x19d06
lea rcx, [0x00020440]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
mov r13d, 1
mov r15b, r13b
jmp 0x19d17
mov r13d, 1
cmp byte [0x00025742], dil
je 0x19d35
lea rcx, [0x00020530]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
cmp r15b, dil
jne 0x1a2b5
cmp byte [0x00025742], dil
je 0x1a341
mov r9d, ebx
lea rcx, [0x00020590]
jmp 0x1a307
cmp ebx, 0x14
jl 0x1a183
lea rdx, [0x00020600]
mov r8d, 0x14
mov rcx, rsi
call qword [sym.imp.ntoskrnl.exe__strnicmp]
cmp eax, edi
jne 0x1a183
sub ebx, 0x14
add rsi, 0x14
mov dword [rsp + 0x30], ebx
cmp byte [0x00025742], dil
je 0x19daa
lea rcx, [0x00020620]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
cmp byte [rsi], 0x20
jne 0x19dc2
cmp ebx, edi
jle 0x19dbe
add rsi, r13
sub ebx, r13d
cmp byte [rsi], 0x20
je 0x19daf
mov dword [rsp + 0x30], ebx
cmp ebx, edi
je 0x1a312
cmp ebx, 0xa
jl 0x19e1e
lea rdx, [0x00020690]
mov r8d, 0xa
mov rcx, rsi
call qword [sym.imp.ntoskrnl.exe__strnicmp]
cmp eax, edi
jne 0x19e1e
sub ebx, 0xa
add rsi, 0xa
mov dword [rbp + 0xc], 4
mov dword [r12 + 0x3c], r13d
mov dword [rsp + 0x30], ebx
cmp byte [0x00025742], dil
je 0x19e1e
lea rcx, [0x000206a0]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
mov r15b, dil
mov byte [rsp + 0xb8], dil
jmp 0x19e2d
xor edi, edi
cmp byte [0x00025742], dil
je 0x19e4b
lea rcx, [0x00020710]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
cmp ebx, 0xb
jl 0x19e91
lea rdx, [0x00020780]
mov r8d, 0xb
mov rcx, rsi
call qword [sym.imp.ntoskrnl.exe__strnicmp]
cmp eax, edi
jne 0x19e91
cmp byte [0x00025742], dil
je 0x19e88
lea rcx, [0x00020790]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
add rsi, 2
sub ebx, 2
jmp 0x19eed
lea r8, [rsp + 0x30]
mov edx, ebx
mov rcx, rsi
call fcn.00019150
mov ebx, dword [rsp + 0x30]
mov rsi, rax
cmp byte [0x00025742], dil
je 0x19ec5
lea rcx, [0x00020810]
mov r9d, ebx
mov r8, rax
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
cmp rsi, rdi
je 0x1a147
cmp ebx, 3
jl 0x1a147
mov al, byte [rsi + 2]
cmp al, 9
je 0x19ee6
cmp al, 0x20
jne 0x1a124
add rsi, 3
sub ebx, 3
cmp ebx, 9
mov dword [rsp + 0x30], ebx
jl 0x19e2d
lea rdx, [0x00020900]
mov r8d, 9
mov rcx, rsi
call qword [sym.imp.ntoskrnl.exe__strnicmp]
cmp eax, edi
jne 0x19e2d
sub ebx, 9
add rsi, 9
mov r12d, edi
mov dword [rsp + 0x34], edi
mov dword [rsp + 0x30], ebx
cmp rsi, rdi
je 0x19f46
lea rdx, [rsp + 0x34]
mov r8, rsi
mov ecx, ebx
call fcn.00018b10
mov r12d, dword [rsp + 0x34]
mov rdi, rax
cmp byte [0x00025742], 0
je 0x19f69
lea rcx, [0x00020910]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
mov qword [rsp + 0x20], rdi
call sub.ntoskrnl.exe_DbgPrint
test rdi, rdi
je 0x19e2b
and dword [rsp + 0x40], 0
mov edx, r12d
mov rcx, rdi
call fcn.0001919c
lea r15, [rbp + 0x18]
mov r8d, 0x50
mov r13, rax
test rax, rax
jne 0x19fbd
lea eax, [r13 + 0x4f]
cmp r12d, r8d
mov rcx, r15
cmovae r12d, eax
xor edx, edx
call fcn.0001ce80
mov r8d, r12d
mov rdx, rdi
mov rcx, r15
call fcn.0001cf80
or r12, 0xffffffffffffffff
jmp 0x1a002
xor eax, eax
or r12, 0xffffffffffffffff
mov rdi, r13
mov rcx, r12
repne scasb al, byte [rdi]
lea eax, [r12 + 0x50]
not rcx
dec rcx
mov rdi, rcx
cmp ecx, 0x50
mov rcx, r15
cmovae edi, eax
xor edx, edx
call fcn.0001ce80
mov r8d, edi
mov rdx, r13
mov rcx, r15
call fcn.0001cf80
xor edx, edx
mov rcx, r13
call qword [sym.imp.ntoskrnl.exe_ExFreePoolWithTag]
cmp byte [0x00025742], 0
je 0x1a01a
lea rcx, [0x00020990]
mov rdx, r15
call sub.ntoskrnl.exe_DbgPrint
mov rax, qword [rsp + 0xa0]
mov r13d, 1
mov rdi, qword [rax + 0x20]
test rdi, rdi
je 0x1a043
xor eax, eax
mov rcx, r12
repne scasb al, byte [rdi]
not rcx
sub rcx, r13
mov qword [rsp + 0x40], rcx
xor eax, eax
mov rcx, r12
mov rdi, r15
repne scasb al, byte [rdi]
mov rax, qword [rsp + 0x40]
not rcx
sub rcx, r13
lea eax, [rax + rcx + 2]
xor ecx, ecx
mov edx, eax
mov edi, eax
call qword [sym.imp.ntoskrnl.exe_ExAllocatePool]
mov r12, rax
test rax, rax
je 0x19e2b
mov r8, rdi
xor edx, edx
mov rcx, rax
call fcn.0001ce80
mov r8, qword [rsp + 0xa0]
mov rdx, qword [r8 + 0x20]
test rdx, rdx
je 0x1a0d4
mov rcx, r12
mov al, byte [rdx]
add rdx, r13
mov byte [rcx], al
add rcx, r13
test al, al
jne 0x1a095
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, r12
repne scasb al, byte [rdi]
movzx eax, word [0x0001fc00]
xor edx, edx
sub rdi, r13
mov word [rdi], ax
mov rcx, qword [r8 + 0x20]
call qword [sym.imp.ntoskrnl.exe_ExFreePoolWithTag]
mov r8, qword [rsp + 0xa0]
and qword [r8 + 0x20], 0
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, r12
repne scasb al, byte [rdi]
sub rdi, r13
xor ecx, ecx
mov al, byte [r15 + rcx]
mov byte [rdi + rcx], al
add rcx, r13
test al, al
jne 0x1a0e4
xor edi, edi
mov qword [r8 + 0x20], r12
cmp byte [0x00025742], dil
je 0x19e4b
lea rcx, [0x000209b0]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
mov qword [rsp + 0x20], r12
call sub.ntoskrnl.exe_DbgPrint
jmp 0x19e2d
cmp byte [0x00025742], dil
je 0x1a142
lea rcx, [0x00020890]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
mov r15b, r13b
jmp 0x1a14f
mov r15b, byte [rsp + 0xb8]
cmp byte [0x00025742], dil
je 0x1a16d
lea rcx, [0x00020a30]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
cmp r15b, dil
je 0x1a312
mov r12, qword [rsp + 0xa0]
jmp 0x1a2b5
cmp ebx, 0x1a
jl 0x1a2b5
lea rdx, [0x00020aa0]
mov r8d, 0x1a
mov rcx, rsi
call qword [sym.imp.ntoskrnl.exe__strnicmp]
cmp eax, edi
jne 0x1a2b5
sub ebx, 0x1a
add rsi, 0x1a
mov dword [rsp + 0x30], ebx
cmp byte [0x00025742], dil
je 0x1a1d3
lea rcx, [0x00020ac0]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
cmp byte [rsi], 0x20
jne 0x1a1eb
cmp ebx, edi
jle 0x1a1e7
add rsi, r13
sub ebx, r13d
cmp byte [rsi], 0x20
je 0x1a1d8
mov dword [rsp + 0x30], ebx
cmp ebx, edi
je 0x1a312
cmp ebx, 4
mov dword [rbp + 0x14], 5
jle 0x1a242
lea rdx, [0x00020b30]
mov r8d, 4
mov rcx, rsi
call qword [sym.imp.ntoskrnl.exe__strnicmp]
cmp eax, edi
jne 0x1a21f
mov dword [rbp + 0x14], r13d
jmp 0x1a290
lea rdx, [0x00020b40]
mov r8d, 4
mov rcx, rsi
call qword [sym.imp.ntoskrnl.exe__strnicmp]
cmp eax, edi
jne 0x1a242
mov dword [rbp + 0x14], 2
jmp 0x1a290
cmp ebx, 6
jle 0x1a26a
lea rdx, [0x00020b50]
mov r8d, 6
mov rcx, rsi
call qword [sym.imp.ntoskrnl.exe__strnicmp]
cmp eax, edi
jne 0x1a26a
mov dword [rbp + 0x14], 3
jmp 0x1a290
cmp ebx, 0x10
jle 0x1a290
lea rdx, [0x00020b60]
mov r8d, 0x10
mov rcx, rsi
call qword [sym.imp.ntoskrnl.exe__strnicmp]
cmp eax, edi
jne 0x1a290
mov dword [rbp + 0x14], 4
cmp byte [0x00025742], dil
je 0x1a2b5
mov eax, dword [rbp + 0x14]
lea rcx, [0x00020b80]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
mov dword [rsp + 0x20], eax
call sub.ntoskrnl.exe_DbgPrint
cmp ebx, edi
jle 0x1a312
jmp 0x1999e
lea r15, [rsi + 2]
mov dword [rbp + 8], r13d
mov dword [r12 + 0x28], 7
mov qword [rsp + 0x38], r15
cmp byte [0x00025742], dil
je 0x1a341
lea rcx, [0x00020120]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
jmp 0x1a317
cmp byte [0x00025742], dil
je 0x1a341
xor r9d, r9d
lea rcx, [0x000201f0]
mov r8, rsi
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
mov r15, qword [rsp + 0x38]
mov eax, dword [rsp + 0xb0]
cmp byte [0x00025742], dil
je 0x1a341
mov rdx, qword [rsp + 0xa8]
lea rcx, [0x00020c00]
mov r9d, eax
mov r8, r15
call sub.ntoskrnl.exe_DbgPrint
mov rax, qword [rsp + 0x38]
add rsp, 0x58
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret