Function at 0x10790
Capabilities:
Print debug messages

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x20
mov eax, dword [0x12700]
xor eax, ebp
mov dword [ebp - 0x14], eax
mov byte [ebp - 0x1c], 0xb8
mov byte [ebp - 0x1b], 0x78
mov byte [ebp - 0x1a], 0x56
mov byte [ebp - 0x19], 0x34
mov byte [ebp - 0x18], 0x12
mov byte [ebp - 0x17], 0xff
mov byte [ebp - 0x16], 0xe0
mov eax, dword [ebp + 0xc]
mov dword [ebp - 4], eax
mov dword [ebp - 8], 0
mov dword [ebp - 0x10], 0
mov byte [ebp - 9], 0
mov byte [ebp - 0x1d], 0
cmp dword [ebp + 8], 0
je 0x107e6
cmp dword [ebp + 0xc], 0
jne 0x107ed
xor eax, eax
jmp 0x109aa
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x1b], ecx
cmp dword [ebp - 0x10], 7
jae 0x108d3
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x10]
mov al, byte [edx]
mov byte [ebp - 9], al
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 0x10]
mov dl, byte [ecx + 1]
mov byte [ebp - 0x1d], dl
movzx eax, byte [ebp - 9]
cmp eax, 0xe8
je 0x108a9
movzx ecx, byte [ebp - 9]
cmp ecx, 0xff
jne 0x10838
movzx edx, byte [ebp - 0x1d]
cmp edx, 0x15
je 0x108a9
movzx eax, byte [ebp - 9]
cmp eax, 0xff
jne 0x1084c
movzx ecx, byte [ebp - 0x1d]
cmp ecx, 0x25
je 0x108a9
movzx edx, byte [ebp - 9]
cmp edx, 0xea
je 0x108a9
movzx eax, byte [ebp - 9]
cmp eax, 0xe9
je 0x108a9
movzx ecx, byte [ebp - 9]
cmp ecx, 0xeb
je 0x108a9
movzx edx, byte [ebp - 9]
cmp edx, 0xf
jne 0x10888
movzx eax, byte [ebp - 0x1d]
and eax, 0xf0
cmp eax, 0x80
je 0x108a9
movzx ecx, byte [ebp - 9]
and ecx, 0xf0
cmp ecx, 0x70
je 0x108a9
movzx edx, byte [ebp - 9]
and edx, 0xfc
cmp edx, 0xe0
jne 0x108bd
push 0x11bb0
call sub.ntoskrnl.exe_DbgPrint
add esp, 4
xor eax, eax
jmp 0x109aa
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 0x10]
call fcn.00010490
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
jmp 0x107f3
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp - 0x10]
mov dword [eax], ecx
mov edx, dword [ebp + 0x14]
mov eax, dword [edx]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp + 0x10]
push edx
call sub.ntoskrnl.exe_memcpy
add esp, 0xc
mov dword [ebp - 8], 0
jmp 0x1090c
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
add ecx, 1
mov dword [ebp - 4], ecx
cmp dword [ebp - 8], 0x400
jge 0x10976
mov edx, dword [ebp - 4]
cmp dword [edx], 0x90909090
jne 0x10974
mov eax, dword [ebp - 4]
cmp dword [eax + 4], 0x90909090
jne 0x10974
mov ecx, dword [ebp - 4]
cmp dword [ecx + 8], 0x90909090
jne 0x10974
mov edx, dword [ebp - 4]
cmp dword [edx + 0xc], 0x90909090
jne 0x10974
cli
mov eax, cr0
and eax, 0xfffeffff
mov cr0, eax
mov eax, dword [ebp + 0x14]
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 4]
push eax
call sub.ntoskrnl.exe_memcpy
add esp, 0xc
mov eax, cr0
or eax, 0x10000
mov cr0, eax
sti
jmp 0x10976
jmp 0x108fa
cli
mov eax, cr0
and eax, 0xfffeffff
mov cr0, eax
mov ecx, dword [ebp + 8]
mov edx, dword [ebp - 0x1c]
mov dword [ecx], edx
mov ax, word [ebp - 0x18]
mov word [ecx + 4], ax
mov dl, byte [ebp - 0x16]
mov byte [ecx + 6], dl
mov eax, cr0
or eax, 0x10000
mov cr0, eax
sti
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00011893
mov esp, ebp
pop ebp
ret 0x10