Function at 0x879be0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push ebx
push esi
push 0x18
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.0087f670
mov bl, 0x6e
add esp, 0xc
mov byte [ebp - 1], 0
mov byte [ebp - 0x18], 0x53
mov byte [ebp - 0x13], 0x76
mov byte [ebp - 0xe], 0x6d
mov byte [ebp - 0x17], 0x65
mov byte [ebp - 0x12], 0x69
mov byte [ebp - 0xd], 0x65
mov byte [ebp - 0x16], 0x74
mov byte [ebp - 0x11], 0x72
mov byte [ebp - 0xc], bl
mov byte [ebp - 0x15], 0x45
mov byte [ebp - 0x10], 0x6f
mov byte [ebp - 0xb], 0x74
mov byte [ebp - 0x14], bl
mov byte [ebp - 0xf], bl
mov byte [ebp - 0xa], 0x56
mov byte [ebp - 9], 0x61
mov byte [ebp - 6], 0x61
mov byte [ebp - 3], 0x65
mov byte [ebp - 8], 0x72
mov byte [ebp - 5], 0x62
mov byte [ebp - 2], 0x57
mov byte [ebp - 7], 0x69
mov byte [ebp - 4], 0x6c
call fcn.008883f0
test eax, eax
jne 0x879c68
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
jbe 0x879c6d
ja 0x879c6d
mov esp, 0x51e84d8d
lea ecx, [ebp - 0x18]
push ecx
push eax
call fcn.0088f050
push 0x18
lea edx, [ebp - 0x18]
push 0
push edx
mov esi, eax
call fcn.0087f670
add esp, 0xc
jb 0x879c8e
jae 0x879c8e
jne 0x5e921289
test esi, esi
jne 0x879c9c
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 8
push edi
push esi
call fcn.00887ca0
push 0x18
lea eax, [ebp - 0x18]
push 0
push eax
call fcn.0087f670
mov eax, dword [0x86af28]
add esp, 0x10
test eax, eax
mov byte [ebp - 1], 0
mov byte [ebp - 0x18], 0x53
mov byte [ebp - 0x13], 0x76
mov byte [ebp - 0xe], 0x6d
mov byte [ebp - 0x17], 0x65
mov byte [ebp - 0x12], 0x69
mov byte [ebp - 0xd], 0x65
mov byte [ebp - 0x16], 0x74
mov byte [ebp - 0x11], 0x72
mov byte [ebp - 0xc], bl
mov byte [ebp - 0x15], 0x45
mov byte [ebp - 0x10], 0x6f
mov byte [ebp - 0xb], 0x74
mov byte [ebp - 0x14], bl
mov byte [ebp - 0xf], bl
mov byte [ebp - 0xa], 0x56
mov byte [ebp - 9], 0x61
mov byte [ebp - 6], 0x61
mov byte [ebp - 3], 0x65
mov byte [ebp - 8], 0x72
mov byte [ebp - 5], 0x62
mov byte [ebp - 2], 0x41
mov byte [ebp - 7], 0x69
mov byte [ebp - 4], 0x6c
je 0x879d32
jb 0x879d1e
jae 0x879d1e
adc cl, byte [ebx - 0x7950d7eb]
add byte [ebp + 0x5251e84d], cl
mov edx, dword [0x86af28]
lea ecx, [ebp - 0x18]
push ecx
push edx
call fcn.0088f050
mov edi, eax
jmp 0x879d35
mov edi, dword [ebp + 0xc]
jne 0x879d3a
je 0x879d3a
jl 0x879da5
push 0x18
lea eax, [ebp - 0x18]
push 0
sbb byte [ebp + 0x6ae845], cl
push eax
call fcn.0087f670
add esp, 0xc
jb 0x879d4f
jae 0x879d4f
sbb dword [ebp + 0x720e74ff], eax
add esi, dword [ebx + 1]
test edi, edi
je 0x879d61
jb 0x879d58
jae 0x879d58
sbb eax, 0xdf42e857
add byte [eax], al
push edi
call fcn.00887ca0
add esp, 4
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp + 8]
push ecx
push edx
call esi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
mov eax, dword [edi]
test eax, eax
je 0x879dcb
mov ecx, dword [ebp - 4]
push 8
lea esi, [eax + ecx]
push esi
call fcn.00882720
or byte [esi - 0x18], dl
jb 0x879d35
add byte [eax], al
test eax, eax
jne 0x879dcb
jne 0x879db7
je 0x879db7
jg 0x879e20
push 0x86c6e4
in al, 0xc6
xchg byte [eax], al
mov dword [esi], 0x5749454e
mov dword [esi + 4], 0x4d4a4941
call ebx
add edi, 4
cmp edi, 0x86aafc
jl 0x879d9a
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
add esp, 0xc
jl 0x879dfc
jge 0x879dfc
sal dword [eax - 0xbba778f], 1
mov al, 0x71
mov byte [ebp - 0xc], al
cmp dword [esp + 8], 0x17d037c
mov byte [ebp - 8], 0x30
cmp dword [esp + 8], 0x1740375
mov byte [ebp - 7], 0x69
jle 0x879e1e
jg 0x879e1e
loopne 0x879da7
mov byte [ebp - 5], al
inc ebp
sti
cmp dword [esp + 4], 0x1770376
mov byte [ebp - 0xe], 0x77
cmp dword [esp + 8], 0x1740375
and al, 8
jne 0x879e36
je 0x879e36
mov byte [ebp - 0xa], 0x36
inc ebp
div byte [esi]
jl 0x879e3e
jge 0x879e3e
ffree st(6)
inc ebp
cmc
push 0xffffffffffffff81
jl 0x879e69
mov byte [ebp - 0xb], 0x6a
cmp dword [esp + 4], 0x1730372
add al, 0x72
add esi, dword [ebx + 1]
mov byte [ebp - 9], 0x33
cmp dword [esp + 8], 0x1740375
mov byte [ebp - 0x10], 0x5a
cmp dword [esp + 8], 0x1740375
mov byte [ebp - 0xd], 0x63
cmp dword [esp + 8], 0x17d037c
mov byte [ebp - 0xf], 0x76
cmp dword [esp + 8], 0x17d037c
mov byte [ebp - 6], al
cmp dword [esp + 4], 0x1770376
or byte [ebx + eax + 0x7d], bh
add esi, eax
inc ebp
int1
jbe 0x879df4
jl 0x879e99
or byte [ebx + eax + 0x7d], bh
add dword [eax + 0x7c81fa45], ecx
and al, 4
jbe 0x879e86
ja 0x879e86
dec byte [ebp - 9]
cmp dword [esp + 4], 0x1770376
add byte [ebp - 6], 0xfb
dec ebp
test dword [ecx + 0x7604247c], 0x80017703
inc ebp
cli
sti
jle 0x879e99
jg 0x879e99
jmp 0xff7ae41d
add byte [ebp - 0xd], 0xfe
cmp dword [esp + 4], 0x1730372
add byte [ebp - 0x10], 0xfd
jne 0x879eae
je 0x879eae
jno 0x879e2f
add byte [ebp - 7], 0xfb
inc ebp
stc
sti
cmp dword [esp + 4], 0x1730372
dec byte [ebp - 0xc]
cmp dword [esp + 4], 0x1730372
add byte [ebp - 0xf], 0xfe
cmp dword [esp + 4], 0x1730372
dec byte [ebp - 0xb]
cmp dword [esp + 4], 0x1730372
add byte [ebp - 0xe], 0xfc
jl 0x879ee5
jge 0x879ee5
fild dword [eax - 0x7e0107bb]
jl 0x879f10
add byte [ebp - 8], 0xfe
cmp dword [esp + 4], 0x1770376
add al, 0x76
add esi, dword [edi + 1]
add byte [ebp - 5], 0xfb
cmp dword [esp + 4], 0x1770376
mov al, byte [ebp - 0xa]
lea ecx, [ebp - 0x10]
add al, 0xfd
mov byte [ebp - 0xa], al
push ecx
call fcn.008879f0
mov esi, eax
test esi, esi
jne 0x879f3c
lea edx, [ebp - 0x10]
push edx
call fcn.0087b900
mov esi, eax
push 0xd
lea eax, [ebp - 0x10]
push 0
push eax
call fcn.0087f670
add esp, 0xc
test esi, esi
jne 0x879f3c
xor eax, eax
pop esi
mov esp, ebp
pop ebp
ret 0x28
sub byte [eax], al
push 0xd
lea ecx, [ebp - 0x10]
push 0
push ecx
call fcn.0087f670
push 0x10
lea edx, [ebp - 0x20]
push 0
push edx
call fcn.0087f670
add esp, 0x18
les ebx, [eax]
cmp dword [esp + 4], 0x1770376
mov byte [ebp - 0x1d], 0x54
jle 0x879f6a
jg 0x879f6a
jecxz 0x879f31
mov byte [ebp - 0x19], 0x51
inc ebp
out 0x51, eax
jne 0x879f73
je 0x879f73
jge 0x879f3a
mov byte [ebp - 0x1f], 0x56
inc ebp
loope 0x879fcd
jbe 0x879f7c
ja 0x879f7c
rol dh, 0x45
in al, 0x6a
mov byte [ebp - 0x1c], 0x6a
cmp dword [esp + 8], 0x1740375
mov byte [ebp - 0x1b], 0x6f
cmp dword [esp + 4], 0x1770376
mov byte [ebp - 0x1e], 0x57
inc ebp
loop 0x879fef
jb 0x879f9d
jae 0x879f9d
cmp eax, esi
inc ebp
ljmp 0xe201
mov byte [ebp - 0x16], 0x77
jle 0x879fa6
jg 0x879fa6
loop 0x879f57
mov al, 0x68
mov byte [ebp - 0x14], al
cmp dword [esp + 4], 0x1730372
push 0x81ec4588
jl 0x879fd2
add al, 0x72
add esi, dword [ebx + 1]
mov byte [ebp - 0x18], 0x69
jle 0x879fbc
jg 0x879fbc
out 0xc6, al
inc ebp
loopne 0x87a01c
mov byte [ebp - 0x20], 0x5c
cmp dword [esp + 8], 0x1740375
mov byte [ebp - 0x13], al
cmp dword [esp + 4], 0x1730372
and al, 4
jb 0x879fd4
jae 0x879fd4
add esi, eax
mov byte [ebp - 0x15], 0x64
jl 0x879fdc
inc ebp
jmp 0x87a03b
jge 0x879fdc
rol esi, 1
inc ebp
jmp 0x2504215a
mov byte [ebp - 0x17], 0x77
cmp dword [esp + 4], 0x1730372
mov byte [ebp - 0x1a], al
jne 0x879ff0
je 0x879ff0
jne 0x879fb7
mov byte [ebp - 0x12], 0x46
inc ebp
out dx, al
inc esi
cmp dword [esp + 8], 0x17d037c
add byte [ebp - 0x12], 0xfb
cmp dword [esp + 8], 0x17d037c
dec byte [ebp - 0x1b]
jne 0x87a010
je 0x87a010
jnp 0x87a00f
dec byte [ebp - 0x1d]
cmp dword [esp + 4], 0x1730372
dec ebp
jecxz 0x879f95
jl 0x87a03a
add al, 0x72
add esi, dword [ebx + 1]
add byte [ebp - 0x1f], 0xfe
inc ebp
loope 0x87a01d
cmp dword [esp + 8], 0x17d037c
add byte [ebp - 0x18], 0xfc
cmp dword [esp + 4], 0x1770376
add byte [ebp - 0x1a], 0xfc
cmp dword [esp + 8], 0x1740375
or byte [ebp + 3], dh
jne 0x87a040
je 0x87a040
add byte [ebp - 0x13], 0xfd
inc ebp
in eax, dx
std
jl 0x87a048
jge 0x87a048
aad 0x80
inc ebp
in al, 0xfb
add byte [ebp - 0x1c], 0xfb
jne 0x87a051
je 0x87a051
ja 0x879fd2
add byte [ebp - 0x1e], 0xfc
inc ebp
loop 0x87a051
jl 0x87a05a
jge 0x87a05a
fld dword [eax + 0x7efce945]
add edi, dword [edi + 1]
add byte [ebp - 0x17], 0xfc
jle 0x87a063
jg 0x87a063
in al, dx
add byte [ebp - 0x15], 0xfd
cmp dword [esp + 8], 0x1740375
add byte [ebp - 0x20], 0xfb
jbe 0x87a078
ja 0x87a078
mov bh, 0xfe
dec ebp
in al, dx
dec byte [ebp - 0x14]
cmp dword [esp + 4], 0x1770376
add byte [ebp - 0x16], 0xfc
cmp dword [esp + 4], 0x1730372
add byte [ebp - 0x19], 0xfc
cmp dword [esp + 4], 0x1730372
lea eax, [ebp - 0x20]
push eax
push esi
call fcn.0088f050
push 0x10
lea ecx, [ebp - 0x20]
push 0
push ecx
mov esi, eax
call fcn.0087f670
add esp, 0xc
jne 0x87a0bc
je 0x87a0bc
jge 0x87a042
test esi, esi
jne 0x87a0c9
div byte [ebp + 9]
xor eax, eax
pop esi
mov esp, ebp
pop ebp
ret 0x28
cmp dword [esp + 8], 0x1740375
push esi
call fcn.00887ca0
add esp, 4
jbe 0x87a0df
ja 0x87a0df
mov ebx, 0x8b2c558b
inc ebp
sub byte [ebx - 0x74addbb3], cl
push ebp
and byte [eax - 0x75], dl
inc ebp
sbb al, 0x51
mov edx, dword [ebp + 0x2c]
mov eax, dword [ebp + 0x28]
mov ecx, dword [ebp + 0x24]
push edx
mov edx, dword [ebp + 0x20]
push eax
mov eax, dword [ebp + 0x1c]
push ecx
mov ecx, dword [ebp + 0x18]
push edx
mov edx, dword [ebp + 0x14]
push eax
mov eax, dword [ebp + 0x10]
push ecx
mov ecx, dword [ebp + 0xc]
push edx
mov edx, dword [ebp + 8]
push eax
push ecx
push edx
call esi
pop esi
mov esp, ebp
pop ebp
ret 0x28