Function at 0x21df7
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
cld
wait
fninit
call fcn.00022191
mov dword [ebp - 4], eax
mov dword [ebp - 0x10], esp
push dword [ebp - 4]
push str.ZwOpenProcess10:_d
call sub.ntoskrnl.exe_DbgPrint
add esp, 8
cmp dword [ebp - 0x10], esp
je 0x21e46
push 6
call fcn.00026106
add esp, 4
mov dword [ebp - 0x10], esp
push dword [ebp - 4]
push str.ZwOpenProcess16:0x_08X
call sub.ntoskrnl.exe_DbgPrint
add esp, 8
cmp dword [ebp - 0x10], esp
je 0x21e6b
push 6
call fcn.00026106
add esp, 4
call fcn.000224bc
mov dword [ebp - 8], eax
mov dword [ebp - 0x10], esp
push dword [ebp - 8]
push str.KeServiceDescriptorTable.ServiceTableBase10:_d
call sub.ntoskrnl.exe_DbgPrint
add esp, 8
cmp dword [ebp - 0x10], esp
je 0x21e98
push 6
call fcn.00026106
add esp, 4
mov dword [ebp - 0x10], esp
push dword [ebp - 8]
push str.KeServiceDescriptorTable.ServiceTableBase16:0x_08X
call sub.ntoskrnl.exe_DbgPrint
add esp, 8
cmp dword [ebp - 0x10], esp
je 0x21ebd
push 6
call fcn.00026106
add esp, 4
push dword [ebp - 8]
push dword [ebp - 4]
call fcn.0002280c
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov dword [section..data], eax
mov dword [ebp - 0x10], esp
push dword [ebp - 0xc]
push str.Index10:_d
call sub.ntoskrnl.exe_DbgPrint
add esp, 8
cmp dword [ebp - 0x10], esp
je 0x21ef8
push 6
call fcn.00026106
add esp, 4
mov dword [ebp - 0x10], esp
push dword [ebp - 0xc]
push str.Index16:0x_08X
call sub.ntoskrnl.exe_DbgPrint
add esp, 8
cmp dword [ebp - 0x10], esp
je 0x21f1d
push 6
call fcn.00026106
add esp, 4
call fcn.00022834
mov dword [0x28004], eax
mov dword [ebp - 0x10], esp
push dword [0x28004]
push str.OriginalZwOpenProcess10:_d
call sub.ntoskrnl.exe_DbgPrint
add esp, 8
cmp dword [ebp - 0x10], esp
je 0x21f4f
push 6
call fcn.00026106
add esp, 4
mov dword [ebp - 0x10], esp
push dword [0x28004]
push str.OriginalZwOpenProcess16:0x_08X
call sub.ntoskrnl.exe_DbgPrint
add esp, 8
cmp dword [ebp - 0x10], esp
je 0x21f77
push 6
call fcn.00026106
add esp, 4
call fcn.00022b5f
mov dword [0x28008], eax
cmp dword [0x28008], 2
jne 0x21ff7
mov dword [ebp - 0x10], esp
push dword [0x28008]
push str.WinXP:_d
call sub.ntoskrnl.exe_DbgPrint
add esp, 8
cmp dword [ebp - 0x10], esp
je 0x21fb6
push 6
call fcn.00026106
add esp, 4
mov dword [0x2800c], 0x17a
mov dword [0x28010], 0x194
mov dword [0x28014], 0x1e3
mov dword [0x28018], 0x250
mov dword [0x2801c], 0x138
mov dword [0x28020], 0x220
jmp 0x22181
cmp dword [0x28008], 3
je 0x22015
cmp dword [0x28008], 4
je 0x22015
xor eax, eax
jmp 0x2201a
mov eax, 1
test eax, eax
je 0x2208b
mov dword [ebp - 0x10], esp
push dword [0x28008]
push str.WinSvr2003:_d
call sub.ntoskrnl.exe_DbgPrint
add esp, 8
cmp dword [ebp - 0x10], esp
je 0x2204a
push 6
call fcn.00026106
add esp, 4
mov dword [0x2800c], 0x179
mov dword [0x28010], 0x193
mov dword [0x28014], 0x1e1
mov dword [0x28018], 0x24c
mov dword [0x2801c], 0x137
mov dword [0x28020], 0x21c
jmp 0x22181
cmp dword [0x28008], 5
jne 0x22101
mov dword [ebp - 0x10], esp
push dword [0x28008]
push str.WinVista:_d
call sub.ntoskrnl.exe_DbgPrint
add esp, 8
cmp dword [ebp - 0x10], esp
je 0x220c0
push 6
call fcn.00026106
add esp, 4
mov dword [0x2800c], 0x187
mov dword [0x28010], 0x1a2
mov dword [0x28014], 0x1f7
mov dword [0x28018], 0x269
mov dword [0x2801c], 0x142
mov dword [0x28020], 0x236
jmp 0x22181
cmp dword [0x28008], 6
jne 0x22177
mov dword [ebp - 0x10], esp
push dword [0x28008]
push str.Win7:_d
call sub.ntoskrnl.exe_DbgPrint
add esp, 8
cmp dword [ebp - 0x10], esp
je 0x22136
push 6
call fcn.00026106
add esp, 4
mov dword [0x2800c], 0x18c
mov dword [0x28010], 0x1a7
mov dword [0x28014], 0x203
mov dword [0x28018], 0x275
mov dword [0x2801c], 0x143
mov dword [0x28020], 0x242
jmp 0x22181
mov eax, 0
jmp 0x2218b
mov eax, 1
jmp 0x2218b
mov esp, ebp
pop ebp
ret 4