Function at 0x652840
Capabilities:
Packed with generic packer

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6cf14d
mov eax, dword fs:[0]
push eax
sub esp, 0x7f8
mov eax, dword [0x6f68a0]
xor eax, ebp
mov dword [ebp - 0x18], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov byte [ebp - 0xd], 1
call fcn.00694c00
mov eax, dword [0x6f4064]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
add ecx, 1
mov dword [ebp - 0x14], ecx
mov edx, dword [0x6f438c]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x14]
add eax, 1
mov dword [ebp - 0x14], eax
mov ecx, dword [0x6f4390]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
add edx, 1
mov dword [ebp - 0x14], edx
push 0x653540
call fcn.006a3fce
add esp, 4
mov eax, dword [0x70c5cc]
mov ecx, dword [0x70c5cc]
mov edx, dword [eax + 0x34]
xor edx, dword [ecx + 0x8c]
push edx
call dword [0x6f4074]
push eax
push 0x6f8ee8
push 0x104
lea eax, [ebp - 0x124]
push eax
call fcn.006a3a3c
add esp, 0x14
lea ecx, [ebp - 0x124]
push ecx
push 0
push 0x1f0001
call dword [0x6f40ac]
test eax, eax
je 0x652907
mov byte [ebp - 0xd], 0
movzx edx, byte [ebp - 0xd]
test edx, edx
je 0x652ad6
mov eax, dword [0x70c5cc]
mov ecx, dword [0x70c5cc]
mov edx, dword [eax + 0x88]
xor edx, dword [ecx + 0x58]
mov eax, dword [0x70c5cc]
xor edx, dword [eax + 0x1c]
and edx, 0x20
je 0x652ad6
mov ecx, dword [0x70c5cc]
mov edx, dword [0x70c5cc]
mov eax, dword [ecx + 0x38]
xor eax, dword [edx + 0x48]
mov ecx, dword [0x70c5cc]
xor eax, dword [ecx + 0x34]
push eax
push 0x6f8ee0
push 0x104
lea edx, [ebp - 0x124]
push edx
call fcn.006a3a3c
add esp, 0x10
lea eax, [ebp - 0x124]
push eax
push 0
push 0
call dword [0x6f4034]
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
je 0x652ad6
call dword [0x6f402c]
cmp eax, 0xb7
jne 0x652ad6
push 0x7530
mov ecx, dword [ebp - 0x12c]
push ecx
call dword [0x6f40a8]
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
je 0x6529d3
cmp dword [ebp - 0x130], 0x80
jne 0x652acc
mov edx, dword [0x70c5cc]
mov eax, dword [0x70c5cc]
mov ecx, dword [edx + 0x38]
xor ecx, dword [eax + 0x48]
mov edx, dword [0x70c5cc]
xor ecx, dword [edx + 0x34]
push ecx
push 0x6f8ed8
push 0x104
lea eax, [ebp - 0x124]
push eax
call fcn.006a3a3c
add esp, 0x10
mov dword [ebp - 0x138], 0
jmp 0x652a22
mov ecx, dword [ebp - 0x138]
add ecx, 1
mov dword [ebp - 0x138], ecx
cmp dword [ebp - 0x138], 0x12c
jge 0x652a5b
lea edx, [ebp - 0x124]
push edx
push 0x6f8ecc
call dword [0x6f4394]
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0
je 0x652a51
jmp 0x652a5b
push 0x64
call dword [0x6f4238]
jmp 0x652a13
cmp dword [ebp - 0x134], 0
je 0x652abf
mov eax, dword [0x70c5cc]
mov ecx, dword [0x70c5cc]
mov edx, dword [eax + 0x38]
xor edx, dword [ecx + 0x48]
mov eax, dword [0x70c5cc]
xor edx, dword [eax + 0x34]
mov dword [ebp - 0x144], edx
mov ecx, dword [0x70c370]
push ecx
call fcn.0069eee0
add esp, 4
add eax, 1
mov dword [ebp - 0x140], eax
mov edx, dword [0x70c370]
mov dword [ebp - 0x13c], edx
lea eax, [ebp - 0x144]
push eax
push 0
push 0x4a
mov ecx, dword [ebp - 0x134]
push ecx
call dword [0x6f43a8]
mov edx, dword [ebp - 0x12c]
push edx
call dword [0x6f40a4]
mov eax, 1
jmp 0x653181
push 1
call fcn.006531a0
add esp, 4
movzx eax, byte [ebp - 0xd]
test eax, eax
je 0x652e62
mov ecx, dword [0x70c5cc]
mov edx, dword [0x70c5cc]
mov eax, dword [ecx + 0x88]
xor eax, dword [edx + 0x58]
mov ecx, dword [0x70c5cc]
xor eax, dword [ecx + 0x1c]
and eax, 0x40
jne 0x652e62
push 0x200
lea edx, [ebp - 0x344]
push edx
push 0x6f8ec4
call dword [0x6f4094]
test eax, eax
jne 0x652e62
push 0xc8
push 0x23
lea eax, [ebp - 0x344]
push eax
call fcn.006a0110
add esp, 0xc
mov byte [ebp - 0x27c], 0
mov dword [ebp - 0x448], 1
jmp 0x652b6a
mov ecx, dword [ebp - 0x448]
add ecx, 1
mov dword [ebp - 0x448], ecx
cmp dword [ebp - 0x448], 0x40
jg 0x652ba9
mov edx, dword [ebp - 0x448]
push edx
push 0x6f8ebc
push 0x100
lea eax, [ebp - 0x444]
push eax
call fcn.006a3a3c
add esp, 0x10
lea ecx, [ebp - 0x344]
push ecx
lea edx, [ebp - 0x444]
push edx
call dword [0x6f4070]
jmp 0x652b5b
mov eax, dword [0x70c5cc]
mov ecx, dword [0x70c5cc]
mov edx, dword [eax + 0x88]
xor edx, dword [ecx + 0x58]
mov eax, dword [0x70c5cc]
xor edx, dword [eax + 0x1c]
and edx, 0x10
jne 0x652e62
lea ecx, [ebp - 0x624]
push ecx
call fcn.0067ff30
add esp, 4
mov dword [ebp - 4], 0
lea edx, [ebp - 0x708]
push edx
call fcn.00639cb0
add esp, 4
mov dword [ebp - 0x7f8], eax
mov eax, dword [ebp - 0x7f8]
mov dword [ebp - 0x7fc], eax
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x7fc]
push ecx
lea ecx, [ebp - 0x4ac]
call fcn.0067a160
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x708]
call fcn.006401f0
cmp dword [0x70c368], 1
jne 0x652c5f
cmp dword [ebp - 0x618], 0
jne 0x652c5f
lea ecx, [ebp - 0x4ac]
call fcn.0067ae20
movzx edx, al
test edx, edx
jne 0x652c5f
lea ecx, [ebp - 0x4ac]
call fcn.0067a9c0
mov dword [ebp - 0x618], eax
push 0
lea eax, [ebp - 0x644]
push eax
call fcn.0067f810
add esp, 8
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x644]
call fcn.00640280
movzx ecx, al
test ecx, ecx
je 0x652ccb
mov dword [ebp - 0x70c], 0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x644]
call fcn.006401f0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4ac]
call fcn.0063a650
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x624]
call fcn.0063fc80
mov eax, dword [ebp - 0x70c]
jmp 0x653181
lea edx, [ebp - 0x78c]
push edx
call fcn.00680150
add esp, 4
mov dword [ebp - 0x800], eax
mov eax, dword [ebp - 0x800]
mov dword [ebp - 0x804], eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x804]
push ecx
lea ecx, [ebp - 0x770]
call fcn.0063a5d0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x644]
call fcn.00640240
push eax
lea ecx, [ebp - 0x7ec]
call fcn.0063a5d0
mov byte [ebp - 4], 7
lea edx, [ebp - 0x4bc]
push edx
lea eax, [ebp - 0x624]
push eax
push 0x70d328
push 0x70d328
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x770]
push ecx
lea edx, [ebp - 0x7ec]
push edx
call fcn.0067fa30
add esp, 0x28
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x70d], al
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x7ec]
call fcn.0063a650
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x770]
call fcn.0063a650
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x78c]
call fcn.0064af80
movzx eax, byte [ebp - 0x70d]
test eax, eax
je 0x652e0b
mov dword [0x70c4a8], 6
call dword [0x6f402c]
push eax
push 0x6f8e9c
push 0x100
push 0x70c4b0
call fcn.006a3a3c
add esp, 0x10
mov dword [ebp - 0x7f0], 0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x644]
call fcn.006401f0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4ac]
call fcn.0063a650
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x624]
call fcn.0063fc80
mov eax, dword [ebp - 0x7f0]
jmp 0x653181
push 0x2710
mov ecx, dword [ebp - 0x4bc]
push ecx
call dword [0x6f43b8]
mov dword [ebp - 0x7f4], 1
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x644]
call fcn.006401f0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x4ac]
call fcn.0063a650
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x624]
call fcn.0063fc80
mov eax, dword [ebp - 0x7f4]
jmp 0x653181
mov edx, dword [0x70c5cc]
mov eax, dword [0x70c5cc]
mov ecx, dword [edx + 0x88]
xor ecx, dword [eax + 0x58]
mov edx, dword [0x70c5cc]
xor ecx, dword [edx + 0x1c]
and ecx, 0x10
je 0x6530e3
mov eax, dword [0x70c5cc]
mov ecx, dword [0x70c5cc]
mov edx, dword [eax + 0x34]
xor edx, dword [ecx + 0x8c]
push edx
call dword [0x6f4074]
push eax
push 0x6f8ee8
push 0x104
lea eax, [ebp - 0x124]
push eax
call fcn.006a3a3c
add esp, 0x14
lea ecx, [ebp - 0x124]
push ecx
push 0
push 0x1f0001
call dword [0x6f40ac]
test eax, eax
jne 0x6530e1
push 1
call dword [0x6f4230]
push eax
call dword [0x6f4234]
mov byte [ebp - 0x645], 0
push 0x6f890c
call dword [0x6f4090]
mov dword [ebp - 0x64c], eax
cmp dword [ebp - 0x64c], 0
je 0x652f3b
push 0x6f8e88
mov edx, dword [ebp - 0x64c]
push edx
call dword [0x6f408c]
mov dword [ebp - 0x6e8], eax
cmp dword [ebp - 0x6e8], 0
je 0x652f3b
call dword [ebp - 0x6e8]
test eax, eax
je 0x652f3b
mov byte [ebp - 0x645], 1
mov dword [ebp - 0x6e4], 0x94
lea eax, [ebp - 0x6e4]
push eax
call dword [0x6f4088]
cmp dword [ebp - 0x6d4], 2
jne 0x652fbc
push ecx
bswap ecx
not ecx
push eax
not eax
mov eax, 0x6c65696d
xchg ecx, eax
mov ecx, 0xdeadc0de
xchg ecx, eax
not eax
pop eax
not ecx
pop ecx
pushfd
pushal
xor ebx, ebx
je 0x652f7e
add ebp, ebx
and ch, bl
jmp 0x652f9f
xor ebx, ebx
je 0x652f82
jmp 0x652f91
mov ecx, 0x34f9c987
nop
stc
je 0x652f95
jmp 0x652fc5
xor eax, eax
je 0x652f87
mov eax, 0x4840c987
test eax, eax
jne 0x652f7b
jmp 0x92cbcd04
popal
popfd
xchg dx, ax
xchg dx, ax
mov eax, eax
mov eax, dword fs:[0x30]
movzx eax, byte [eax + 2]
or al, al
jne 0x652fd3
jmp 0x653044
jo 0x652fc5
jl 0x652fc3
jmp 0x652fc7
je 0x652fc0
jmp 0x652fc0
mov eax, dword fs:[0x20]
or eax, eax
jne 0x652fd3
jmp 0x653044
pushal
xor eax, eax
jne 0x652fda
jmp 0x652fef
jmp 0x65300f
xor eax, eax
jne 0x652ff7
jp 0x652fed
jo 0x652ff1
jmp 0x652ff2
jb 0x652ff6
jns 0x652fdb
call dword [0x74097900]
invalid
jns 0x652ff8
je 0x652fe1
jmp 0x652f7a
xchg ebx, ebx
jp 0x652fe6
mov al, byte [0x5c66133]
xchg esp, eax
ret
xor esp, dword [ecx - 0x3a]
add eax, 0x70c394
add dword [eax - 9], edx
ror byte [edi], 1
enter 0x7358, 0
popal
mov byte [0x70c394], 1
push eax
not eax
bswap eax
pop eax
jae 0x653008
pushfd
pushal
jmp 0x653037
sub edx, edx
jo 0x65301d
jmp 0x65302e
xor ecx, ecx
je 0x653015
jmp 0x653027
stc
xor ecx, 3
je 0x652fad
jmp 0x653024
jmp 0x653032
jae 0x653020
sbb bl, bl
sbb bl, bl
xor ebx, ebx
jmp 0x653017
jmp 0x653011
sbb al, 0xdb
jmp 0x65303a
jmp 0x65300b
popal
popfd
bswap eax
not ecx
bswap eax
not ecx
movzx ecx, byte [ebp - 0x645]
test ecx, ecx
je 0x653082
call dword [0x6f4074]
push eax
push 0x6f8e80
push 0x104
lea edx, [ebp - 0x124]
push edx
call fcn.006a3a3c
add esp, 0x10
lea eax, [ebp - 0x124]
push eax
push 0
push 0
call dword [0x6f4034]
jmp 0x6530e1
cmp dword [0x70c368], 0
sete cl
push ecx
call fcn.0063ead0
add esp, 4
movzx edx, al
test edx, edx
jne 0x6530cd
mov dword [0x70c4a8], 6
call dword [0x6f402c]
push eax
push 0x6f8e70
push 0x100
push 0x70c4b0
call fcn.006a3a3c
add esp, 0x10
xor eax, eax
jmp 0x653181
push 0
call fcn.006531a0
add esp, 4
mov eax, 1
jmp 0x653181
jmp 0x653109
mov eax, dword [0x70c5cc]
mov ecx, dword [0x70c5cc]
mov edx, dword [eax + 0x90]
xor edx, dword [ecx + 0x58]
mov eax, dword [0x70c5cc]
xor edx, dword [eax + 0x1c]
and edx, 2
je 0x653109
call fcn.00672900
call fcn.00651570
mov dword [ebp - 0x128], eax
push 0
call fcn.006531a0
add esp, 4
push 0
call fcn.006a3fce
add esp, 4
cmp dword [ebp - 0x128], 1
jne 0x653145
push 0x70c368
call dword [0x70c390]
add esp, 4
mov dword [ebp - 0x128], eax
push 0x653540
call fcn.006a3fce
add esp, 4
cmp dword [0x70c38c], 0
je 0x653161
call dword [0x70c38c]
cmp dword [0x70c4a0], 0
je 0x65317b
push 0
push 0
mov ecx, dword [0x70c49c]
push ecx
call dword [0x70c4a0]
mov eax, dword [ebp - 0x128]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x18]
xor ecx, ebp
call fcn.0069f512
mov esp, ebp
pop ebp
ret