Function at 0x1a764
Capabilities:
Print debug messages

Disassembly:
mov rax, rsp
mov dword [rax + 0x18], r8d
mov qword [rax + 0x10], rdx
mov qword [rax + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x58
mov r12, rcx
xor ecx, ecx
mov r15, rdx
mov rbp, qword [r12 + 0x48]
mov qword [rsp + 0x38], rdx
mov rsi, rdx
mov r14d, ecx
mov ebx, r8d
mov dword [rax - 0x68], r8d
lea r13d, [rcx + 1]
cmp rbp, rcx
jne 0x1a7b0
mov dil, r13b
jmp 0x1a7ba
cmp dword [rbp + 8], ecx
movzx edi, cl
cmovne edi, r13d
cmp byte [0x000266c2], cl
je 0x1a7d4
lea rcx, [0x000209b0]
movzx r9d, dil
call sub.ntoskrnl.exe_DbgPrint
xor ecx, ecx
cmp dil, cl
je 0x1a821
mov edx, 0x68
xor ecx, ecx
call qword [sym.imp.ntoskrnl.exe_ExAllocatePool]
xor edi, edi
mov rbp, rax
cmp rax, rdi
je 0x1a81a
lea r8d, [rdi + 0x68]
xor edx, edx
mov rcx, rax
call fcn.0001dc60
mov dword [rbp + 8], edi
mov dword [rbp + 0xc], edi
mov dword [rbp + 0x10], edi
mov dword [rbp + 0x14], edi
mov rax, qword [r12 + 0x48]
mov qword [rbp], rax
mov qword [r12 + 0x48], rbp
jmp 0x1a823
xor eax, eax
jmp 0x1b1da
xor edi, edi
mov eax, dword [rsp + 0xb0]
cmp eax, edi
jle 0x1b1b2
add r14d, r13d
cmp byte [0x000266c2], dil
je 0x1a853
lea rcx, [0x00020a00]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
lea r8, [rsp + 0x30]
mov edx, ebx
mov rcx, rsi
call fcn.0001a00c
mov ebx, dword [rsp + 0x30]
mov rsi, rax
cmp byte [0x000266c2], dil
je 0x1a887
lea rcx, [0x00020a60]
mov r9d, ebx
mov r8, rax
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
cmp rsi, rdi
je 0x1b1a6
sub ebx, 2
mov qword [rsp + 0x38], rsi
add rsi, 2
cmp ebx, 2
mov dword [rsp + 0x30], ebx
jl 0x1a8b4
cmp byte [rsi], 0xd
jne 0x1a8b4
cmp byte [rsi + 1], 0xa
je 0x1b152
cmp ebx, 0xd
jl 0x1abee
lea rdx, [0x00020b20]
mov r8d, 0xd
mov rcx, rsi
call qword [sym.imp.ntoskrnl.exe__strnicmp]
cmp eax, edi
jne 0x1abee
sub ebx, 0xd
add rsi, 0xd
mov dword [rsp + 0x30], ebx
cmp byte [0x000266c2], dil
je 0x1a904
lea rcx, [0x00020b30]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
cmp byte [rsi], 0x20
jne 0x1a91c
cmp ebx, edi
jle 0x1a918
add rsi, r13
sub ebx, r13d
cmp byte [rsi], 0x20
je 0x1a909
mov dword [rsp + 0x30], ebx
cmp ebx, edi
je 0x1b188
cmp ebx, 0xa
mov dword [rbp + 0xc], 5
jl 0x1a950
lea rdx, [0x00020c00]
mov r8d, 0xa
mov rcx, rsi
call qword [sym.imp.ntoskrnl.exe__strnicmp]
cmp eax, edi
jne 0x1a950
mov dword [rbp + 0xc], r13d
jmp 0x1a976
cmp ebx, 9
jl 0x1a976
lea rdx, [0x00020c10]
mov r8d, 9
mov rcx, rsi
call qword [sym.imp.ntoskrnl.exe__strnicmp]
cmp eax, edi
jne 0x1a976
mov dword [rbp + 0xc], 2
cmp byte [0x000266c2], dil
je 0x1a99b
mov eax, dword [rbp + 0xc]
lea rcx, [0x00020c20]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
mov dword [rsp + 0x20], eax
call sub.ntoskrnl.exe_DbgPrint
mov r15b, dil
lea r8, [0x00020c90]
mov r9d, 0xa
mov edx, ebx
mov rcx, rsi
call fcn.00019810
cmp byte [0x000266c2], 0
mov edi, eax
je 0x1a9d5
lea rcx, [0x00020ca0]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
cmp edi, 0xffffffff
je 0x1aa10
lea eax, [rdi + 1]
movsxd rcx, eax
or eax, 0xffffffff
sub eax, edi
xor edi, edi
add rsi, rcx
add ebx, eax
mov dword [rsp + 0x30], ebx
cmp byte [0x000266c2], dil
je 0x1aa6d
lea rcx, [0x00020d00]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
jmp 0x1aa6d
lea r8, [rsp + 0x30]
mov edx, ebx
mov rcx, rsi
call fcn.0001a00c
mov ebx, dword [rsp + 0x30]
xor edi, edi
mov rsi, rax
cmp byte [0x000266c2], dil
je 0x1aa46
lea rcx, [0x00020d70]
mov r9d, ebx
mov r8, rax
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
cmp rsi, rdi
je 0x1aba5
cmp ebx, 3
jl 0x1aba5
cmp byte [rsi + 2], 9
jne 0x1ab7c
add rsi, 3
sub ebx, 3
mov dword [rsp + 0x30], ebx
cmp ebx, 9
jl 0x1a99e
lea rdx, [0x00020e50]
mov r8d, 9
mov rcx, rsi
call qword [sym.imp.ntoskrnl.exe__strnicmp]
cmp eax, edi
jne 0x1a99e
sub ebx, 9
add rsi, 9
mov dword [rsp + 0xb8], edi
mov dword [rsp + 0x30], ebx
je 0x1aac6
lea rdx, [rsp + 0xb8]
mov r8, rsi
mov ecx, ebx
call fcn.000199cc
mov edi, dword [rsp + 0xb8]
mov r12, rax
jmp 0x1aac9
xor r12d, r12d
test r12, r12
je 0x1ab48
mov rcx, qword [rsp + 0xa0]
mov rcx, qword [rcx + 0x50]
test rcx, rcx
je 0x1aaf3
movsxd r8, edi
add rcx, 8
mov rdx, r12
call qword [sym.imp.ntoskrnl.exe__strnicmp]
test eax, eax
je 0x1ab48
mov edx, 0x58
xor ecx, ecx
call qword [sym.imp.ntoskrnl.exe_ExAllocatePool]
mov r13, rax
test rax, rax
je 0x1ab48
xor edx, edx
mov rcx, rax
lea r8d, [rdx + 0x58]
call fcn.0001dc60
cmp edi, 0x50
mov eax, 0x4f
cmovae edi, eax
lea rcx, [r13 + 8]
mov rdx, r12
mov r8d, edi
call fcn.0001dd60
mov r12, qword [rsp + 0xa0]
mov rdx, qword [r12 + 0x50]
mov qword [r13], rdx
mov qword [r12 + 0x50], r13
jmp 0x1ab50
mov r12, qword [rsp + 0xa0]
bts dword [rbp + 0xc], 0xc
cmp byte [0x000266c2], 0
je 0x1a99e
lea rcx, [0x00020e60]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
jmp 0x1a99e
cmp byte [0x000266c2], dil
je 0x1ab9a
lea rcx, [0x00020de0]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
mov r13d, 1
mov r15b, r13b
jmp 0x1abab
mov r13d, 1
cmp byte [0x000266c2], dil
je 0x1abc9
lea rcx, [0x00020ed0]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
cmp r15b, dil
jne 0x1b149
cmp byte [0x000266c2], dil
je 0x1b1d5
mov r9d, ebx
lea rcx, [0x00020f30]
jmp 0x1b19b
cmp ebx, 0x14
jl 0x1b017
lea rdx, [0x00020fa0]
mov r8d, 0x14
mov rcx, rsi
call qword [sym.imp.ntoskrnl.exe__strnicmp]
cmp eax, edi
jne 0x1b017
sub ebx, 0x14
add rsi, 0x14
mov dword [rsp + 0x30], ebx
cmp byte [0x000266c2], dil
je 0x1ac3e
lea rcx, [0x00020fc0]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
cmp byte [rsi], 0x20
jne 0x1ac56
cmp ebx, edi
jle 0x1ac52
add rsi, r13
sub ebx, r13d
cmp byte [rsi], 0x20
je 0x1ac43
mov dword [rsp + 0x30], ebx
cmp ebx, edi
je 0x1b1a6
cmp ebx, 0xa
jl 0x1acb2
lea rdx, [0x00021030]
mov r8d, 0xa
mov rcx, rsi
call qword [sym.imp.ntoskrnl.exe__strnicmp]
cmp eax, edi
jne 0x1acb2
sub ebx, 0xa
add rsi, 0xa
mov dword [rbp + 0xc], 4
mov dword [r12 + 0x3c], r13d
mov dword [rsp + 0x30], ebx
cmp byte [0x000266c2], dil
je 0x1acb2
lea rcx, [0x00021040]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
mov r15b, dil
mov byte [rsp + 0xb8], dil
jmp 0x1acc1
xor edi, edi
cmp byte [0x000266c2], dil
je 0x1acdf
lea rcx, [0x000210b0]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
cmp ebx, 0xb
jl 0x1ad25
lea rdx, [0x00021120]
mov r8d, 0xb
mov rcx, rsi
call qword [sym.imp.ntoskrnl.exe__strnicmp]
cmp eax, edi
jne 0x1ad25
cmp byte [0x000266c2], dil
je 0x1ad1c
lea rcx, [0x00021130]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
add rsi, 2
sub ebx, 2
jmp 0x1ad81
lea r8, [rsp + 0x30]
mov edx, ebx
mov rcx, rsi
call fcn.0001a00c
mov ebx, dword [rsp + 0x30]
mov rsi, rax
cmp byte [0x000266c2], dil
je 0x1ad59
lea rcx, [0x000211b0]
mov r9d, ebx
mov r8, rax
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
cmp rsi, rdi
je 0x1afdb
cmp ebx, 3
jl 0x1afdb
mov al, byte [rsi + 2]
cmp al, 9
je 0x1ad7a
cmp al, 0x20
jne 0x1afb8
add rsi, 3
sub ebx, 3
cmp ebx, 9
mov dword [rsp + 0x30], ebx
jl 0x1acc1
lea rdx, [0x000212a0]
mov r8d, 9
mov rcx, rsi
call qword [sym.imp.ntoskrnl.exe__strnicmp]
cmp eax, edi
jne 0x1acc1
sub ebx, 9
add rsi, 9
mov r12d, edi
mov dword [rsp + 0x34], edi
mov dword [rsp + 0x30], ebx
cmp rsi, rdi
je 0x1adda
lea rdx, [rsp + 0x34]
mov r8, rsi
mov ecx, ebx
call fcn.000199cc
mov r12d, dword [rsp + 0x34]
mov rdi, rax
cmp byte [0x000266c2], 0
je 0x1adfd
lea rcx, [0x000212b0]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
mov qword [rsp + 0x20], rdi
call sub.ntoskrnl.exe_DbgPrint
test rdi, rdi
je 0x1acbf
and dword [rsp + 0x40], 0
mov edx, r12d
mov rcx, rdi
call fcn.0001a058
lea r15, [rbp + 0x18]
mov r8d, 0x50
mov r13, rax
test rax, rax
jne 0x1ae51
lea eax, [r13 + 0x4f]
cmp r12d, r8d
mov rcx, r15
cmovae r12d, eax
xor edx, edx
call fcn.0001dc60
mov r8d, r12d
mov rdx, rdi
mov rcx, r15
call fcn.0001dd60
or r12, 0xffffffffffffffff
jmp 0x1ae96
xor eax, eax
or r12, 0xffffffffffffffff
mov rdi, r13
mov rcx, r12
repne scasb al, byte [rdi]
lea eax, [r12 + 0x50]
not rcx
dec rcx
mov rdi, rcx
cmp ecx, 0x50
mov rcx, r15
cmovae edi, eax
xor edx, edx
call fcn.0001dc60
mov r8d, edi
mov rdx, r13
mov rcx, r15
call fcn.0001dd60
xor edx, edx
mov rcx, r13
call qword [sym.imp.ntoskrnl.exe_ExFreePoolWithTag]
cmp byte [0x000266c2], 0
je 0x1aeae
lea rcx, [0x00021330]
mov rdx, r15
call sub.ntoskrnl.exe_DbgPrint
mov rax, qword [rsp + 0xa0]
mov r13d, 1
mov rdi, qword [rax + 0x20]
test rdi, rdi
je 0x1aed7
xor eax, eax
mov rcx, r12
repne scasb al, byte [rdi]
not rcx
sub rcx, r13
mov qword [rsp + 0x40], rcx
xor eax, eax
mov rcx, r12
mov rdi, r15
repne scasb al, byte [rdi]
mov rax, qword [rsp + 0x40]
not rcx
sub rcx, r13
lea eax, [rax + rcx + 2]
xor ecx, ecx
mov edx, eax
mov edi, eax
call qword [sym.imp.ntoskrnl.exe_ExAllocatePool]
mov r12, rax
test rax, rax
je 0x1acbf
mov r8, rdi
xor edx, edx
mov rcx, rax
call fcn.0001dc60
mov r8, qword [rsp + 0xa0]
mov rdx, qword [r8 + 0x20]
test rdx, rdx
je 0x1af68
mov rcx, r12
mov al, byte [rdx]
add rdx, r13
mov byte [rcx], al
add rcx, r13
test al, al
jne 0x1af29
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, r12
repne scasb al, byte [rdi]
movzx eax, word [0x000205e0]
xor edx, edx
sub rdi, r13
mov word [rdi], ax
mov rcx, qword [r8 + 0x20]
call qword [sym.imp.ntoskrnl.exe_ExFreePoolWithTag]
mov r8, qword [rsp + 0xa0]
and qword [r8 + 0x20], 0
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, r12
repne scasb al, byte [rdi]
sub rdi, r13
xor ecx, ecx
mov al, byte [r15 + rcx]
mov byte [rdi + rcx], al
add rcx, r13
test al, al
jne 0x1af78
xor edi, edi
mov qword [r8 + 0x20], r12
cmp byte [0x000266c2], dil
je 0x1acdf
lea rcx, [0x00021350]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
mov qword [rsp + 0x20], r12
call sub.ntoskrnl.exe_DbgPrint
jmp 0x1acc1
cmp byte [0x000266c2], dil
je 0x1afd6
lea rcx, [0x00021230]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
mov r15b, r13b
jmp 0x1afe3
mov r15b, byte [rsp + 0xb8]
cmp byte [0x000266c2], dil
je 0x1b001
lea rcx, [0x000213d0]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
cmp r15b, dil
je 0x1b1a6
mov r12, qword [rsp + 0xa0]
jmp 0x1b149
cmp ebx, 0x1a
jl 0x1b149
lea rdx, [0x00021440]
mov r8d, 0x1a
mov rcx, rsi
call qword [sym.imp.ntoskrnl.exe__strnicmp]
cmp eax, edi
jne 0x1b149
sub ebx, 0x1a
add rsi, 0x1a
mov dword [rsp + 0x30], ebx
cmp byte [0x000266c2], dil
je 0x1b067
lea rcx, [0x00021460]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
cmp byte [rsi], 0x20
jne 0x1b07f
cmp ebx, edi
jle 0x1b07b
add rsi, r13
sub ebx, r13d
cmp byte [rsi], 0x20
je 0x1b06c
mov dword [rsp + 0x30], ebx
cmp ebx, edi
je 0x1b1a6
cmp ebx, 4
mov dword [rbp + 0x14], 5
jle 0x1b0d6
lea rdx, [0x000214d0]
mov r8d, 4
mov rcx, rsi
call qword [sym.imp.ntoskrnl.exe__strnicmp]
cmp eax, edi
jne 0x1b0b3
mov dword [rbp + 0x14], r13d
jmp 0x1b124
lea rdx, [0x000214e0]
mov r8d, 4
mov rcx, rsi
call qword [sym.imp.ntoskrnl.exe__strnicmp]
cmp eax, edi
jne 0x1b0d6
mov dword [rbp + 0x14], 2
jmp 0x1b124
cmp ebx, 6
jle 0x1b0fe
lea rdx, [0x000214f0]
mov r8d, 6
mov rcx, rsi
call qword [sym.imp.ntoskrnl.exe__strnicmp]
cmp eax, edi
jne 0x1b0fe
mov dword [rbp + 0x14], 3
jmp 0x1b124
cmp ebx, 0x10
jle 0x1b124
lea rdx, [0x00021500]
mov r8d, 0x10
mov rcx, rsi
call qword [sym.imp.ntoskrnl.exe__strnicmp]
cmp eax, edi
jne 0x1b124
mov dword [rbp + 0x14], 4
cmp byte [0x000266c2], dil
je 0x1b149
mov eax, dword [rbp + 0x14]
lea rcx, [0x00021520]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
mov dword [rsp + 0x20], eax
call sub.ntoskrnl.exe_DbgPrint
cmp ebx, edi
jle 0x1b1a6
jmp 0x1a832
lea r15, [rsi + 2]
mov dword [rbp + 8], r13d
mov dword [r12 + 0x28], 7
mov qword [rsp + 0x38], r15
cmp byte [0x000266c2], dil
je 0x1b1d5
lea rcx, [0x00020ac0]
mov r9d, ebx
mov r8, rsi
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
jmp 0x1b1ab
cmp byte [0x000266c2], dil
je 0x1b1d5
xor r9d, r9d
lea rcx, [0x00020b90]
mov r8, rsi
mov edx, r14d
call sub.ntoskrnl.exe_DbgPrint
mov r15, qword [rsp + 0x38]
mov eax, dword [rsp + 0xb0]
cmp byte [0x000266c2], dil
je 0x1b1d5
mov rdx, qword [rsp + 0xa8]
lea rcx, [0x000215a0]
mov r9d, eax
mov r8, r15
call sub.ntoskrnl.exe_DbgPrint
mov rax, qword [rsp + 0x38]
add rsp, 0x58
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret