Function at 0x68a40
Capabilities:
Print debug messages

Disassembly:
push esi
push edi
jmp 0x6e126
jmp 0x6fed3
nop
push 0
pop edi
mov edi, dword [0x6b064]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea esp, [esp - 0x16]
push word [esp + 3]
pop word [esp]
pop dword [esp]
pop word [esp]
pop dword [esp]
pop dword [esp]
pop word [esp]
pop word [esp]
pop word [esp]
lea esp, [esp + 2]
nop
nop
nop
nop
nop
nop
nop
jmp 0x68a78
pop word [esp]
pop word [esp]
lea esp, [esp + 2]
nop
nop
nop
nop
nop
nop
push word [esp + 0xe]
push dword [esp + 2]
pop word [esp]
pop word [esp]
lea esp, [esp + 2]
nop
nop
nop
nop
nop
nop
nop
pushal
push edi
lea esp, [esp - 9]
jmp 0x6e166
nop
nop
nop
nop
nop
nop
nop
nop
push esi
jmp 0x6e17b
pop word [esp]
pop dword [esp]
pop word [esp]
pop dword [esp]
lea esp, [esp + 0xf]
pop word [esp]
pop word [esp]
lea esp, [esp + 2]
lea esp, [esp + 2]
nop
nop
jmp 0x6e078
lea esp, [esp + 9]
lea esp, [esp + 1]
jmp 0x6e134
push ebp
pop word [esp]
jmp 0x6e0d7
mov ecx, ecx
push dword [edx]
pop ecx
jmp 0x6fe9f
mov dword [esp], eax
push dword [esp + 1]
push ebp
pop ebp
lea esp, [esp + 3]
lea esp, [esp + 1]
call fcn.00068040
mov dword [0x6b074], eax
test eax, eax
jne 0x6fc0a
push 0x6a084
lea esp, [esp - 5]
push ebp
push word [esp]
pop dword [esp]
pop word [esp]
lea esp, [esp + 1]
pop word [esp]
lea esp, [esp + 2]
call sub.ntoskrnl.exe_DbgPrint
add esp, 4
call fcn.000681d0
push 0
pop eax
mov eax, dword [0x6b074]
mov ecx, esi
mov ecx, dword [0x6b064]
cmp dword [ecx + 0x40], 0
lea esp, [esp - 0xa]
lea esp, [esp - 5]
pushal
pop word [esp]
pop dword [esp]
pop dword [esp]
pop dword [esp]
lea esp, [esp + 0x13]
lea esp, [esp]
pop word [esp]
pop dword [esp]
jmp 0x6fcdf
pop word [esp]
lea esp, [esp + 3]
lea esp, [esp + 1]
push dword [edx]
pop ecx
push ebp
pop ebx
mov ebx, dword [0x6b064]
push dword [ebx + 0x144]
pop ebx
lea ecx, [ecx + ecx*2]
push ebx
pop dword [edx + ecx*4 + 8]
jmp 0x6feae
lea esp, [esp]
pop word [esp]
lea esp, [esp + 2]
push 1
pop eax
push ebp
push ebx
push ebx
pop word [esp]
push esi
pop esi
mov ebx, dword [esp + 2]
pop dword [esp]
lea esp, [esp + 2]
pop word [esp]
lea esp, [esp + 2]
pop esi
ret
mov eax, dword [esp + 2]
pop word [esp]
jmp 0x6fc4c
pop word [esp]
pop word [esp]
pop word [esp]
lea esp, [esp + 2]
jne 0x6fd00
add ecx, 0x44
jmp 0x6fd07
push dword [ecx + 0x148]
pop ecx
push ecx
push 0x35841fdf
mov dword [esp], eax
call fcn.00068050
jmp 0x6feba
pop word [esp]
pop dword [esp]
pop word [esp]
lea esp, [esp + 3]
mov edx, dword [0x6b060]
lea ecx, [edi + ebp]
push word [esp + 0xc]
push esi
pop esi
push eax
bswap eax
push eax
pop word [esp]
jmp 0x6fcc8
lea eax, [ecx + ecx]
mov eax, dword [0x6b068]
add dword [0x6b064], 0x150
inc esi
cmp esi, eax
jb 0x6fde7
pop ebx
inc eax
mov dword [0x6b068], eax
imul eax, eax, 0x150
push 0x2aab2961
mov dword [esp], eax
push 0
add edi, 0xfffffeb0
push 0x5aea300d
mov dword [esp], edi
call sub.ntoskrnl.exe_memset
add esp, 0xc
pop edi
lea eax, [ecx + ebx]
push esp
jmp 0x6fc84
pop ebx
lea ecx, [ecx + ecx*2]
push ebx
pop dword [edx + ecx*4 + 4]
push 0
pop edx
push dword [esp + 2]
pop word [esp]
push esp
lea esp, [esp - 0xf]
push esi
not esi
pop esi
pop dword [esp]
pop word [esp]
pop dword [esp]
jmp 0x6fd1e
mov eax, dword [0x6b064]
push esp
jmp 0x6fb9a
lea eax, [eax + ecx]
mov eax, dword [0x6b068]
xor esi, esi
test eax, eax
jbe 0x6fd6f
push 0x480f00b1
mov dword [esp], ebx
jmp 0x6fde7
mov ebx, dword [0x6b064]
push dword [ebx + 0x148]
jmp 0x6fda9
lea ecx, [edx + edi]
push dword [edx]
pop ecx
lea ebx, [esi + ebp]
jmp 0x6fe23
nop
nop
push word [esp + 0xb]
lea esp, [esp + 2]
nop
nop
nop
nop
nop
nop
jmp 0x6fe64
nop
nop
nop
jmp 0x6fdf3
nop
jmp 0x6fe47
mov edx, dword [0x6b060]
jmp 0x6fb8e
lea eax, [ecx + ecx]
mov eax, dword [0x6b060]
inc dword [eax]
jmp 0x6fd53
inc ecx
lea ecx, [ecx + ecx*2]
push eax
pop dword [edx + ecx*4]
jmp 0x6fe8f
mov edx, 0
jmp 0x6fe7d
push edi
pop edx
mov edx, dword [0x6b060]
jmp 0x6fe39
nop
jmp 0x6fe72
nop
jmp 0x6fecd