00000000 E89F010000 call 0x1a4
00000005 6800000000 push dword 0x0
0000000A 6800000000 push dword 0x0
0000000F 50 push eax
00000010 6803000000 push dword 0x3
00000015 E807000000 call 0x21
0000001A CD00 int 0x0
0000001C E9FBFFFFFF jmp 0x1c
00000021 8B542410 mov edx,[esp+0x10]
00000025 8B4C240C mov ecx,[esp+0xc]
00000029 8B5C2408 mov ebx,[esp+0x8]
0000002D 8B442404 mov eax,[esp+0x4]
00000031 CD40 int 0x40
00000033 C3 ret
00000034 0000 add [eax],al
00000036 0000 add [eax],al
00000038 0000 add [eax],al
0000003A 0000 add [eax],al
0000003C 0000 add [eax],al
0000003E 0000 add [eax],al
00000040 4C dec esp
00000041 697A6120536865 imul edi,[edx+0x61],0x65685320
00000048 6C insb
00000049 6C insb
0000004A 2020 and [eax],ah
0000004C 56 push esi
0000004D 657220 gs jc 0x70
00000050 302E xor [esi],ch
00000052 302E xor [esi],ch
00000054 3100 xor [eax],eax
00000056 2000 and [eax],al
00000058 57 push edi
00000059 656C gs insb
0000005B 636F6D arpl [edi+0x6d],bp
0000005E 652100 and [gs:eax],eax
00000061 90 nop
00000062 90 nop
00000063 90 nop
00000064 90 nop
00000065 90 nop
00000066 90 nop
00000067 90 nop
00000068 90 nop
00000069 90 nop
0000006A 90 nop
0000006B 90 nop
0000006C 90 nop
0000006D 90 nop
0000006E 90 nop
0000006F 90 nop
00000070 90 nop
00000071 90 nop
00000072 90 nop
00000073 90 nop
00000074 90 nop
00000075 90 nop
00000076 90 nop
00000077 90 nop
00000078 90 nop
00000079 90 nop
0000007A 90 nop
0000007B 90 nop
0000007C 90 nop
0000007D 90 nop
0000007E 90 nop
0000007F 90 nop
00000080 42 inc edx
00000081 6567696E20746F20 imul ebp,[gs:bp+0x20],0x6c206f74
-6C
0000008A 6F outsd
0000008B 61 popa
0000008C 64206669 and [fs:esi+0x69],ah
00000090 6C insb
00000091 65207379 and [gs:ebx+0x79],dh
00000095 7374 jnc 0x10b
00000097 656D gs insd
00000099 2E20506C and [cs:eax+0x6c],dl
0000009D 6561 gs popa
0000009F 7365 jnc 0x106
000000A1 205761 and [edi+0x61],dl
000000A4 69742E2E2E009090 imul esi,[esi+ebp+0x2e],0x9090002e
000000AC 90 nop
000000AD 90 nop
000000AE 90 nop
000000AF 90 nop
000000B0 90 nop
000000B1 90 nop
000000B2 90 nop
000000B3 90 nop
000000B4 90 nop
000000B5 90 nop
000000B6 90 nop
000000B7 90 nop
000000B8 90 nop
000000B9 90 nop
000000BA 90 nop
000000BB 90 nop
000000BC 90 nop
000000BD 90 nop
000000BE 90 nop
000000BF 90 nop
000000C0 46 inc esi
000000C1 696C652073797374 imul ebp,[ebp+0x20],0x74737973
000000C9 656D gs insd
000000CB 206861 and [eax+0x61],ch
000000CE 7320 jnc 0xf0
000000D0 626565 bound esp,[ebp+0x65]
000000D3 6E outsb
000000D4 206573 and [ebp+0x73],ah
000000D7 7461 jz 0x13a
000000D9 626C6973 bound ebp,[ecx+ebp*2+0x73]
000000DD 6865642100 push dword 0x216465
000000E2 2300 and eax,[eax]
000000E4 00636C add [ebx+0x6c],ah
000000E7 7300 jnc 0xe9
000000E9 666F outsw
000000EB 726D jc 0x15a
000000ED 61 popa
000000EE 7400 jz 0xf0
000000F0 6469720063726561 imul esi,[fs:edx+0x0],0x61657263
000000F8 7400 jz 0xfa
000000FA 50 push eax
000000FB 6C insb
000000FC 6561 gs popa
000000FE 7365 jnc 0x165
00000100 20696E and [ecx+0x6e],ch
00000103 7075 jo 0x17a
00000105 7420 jz 0x127
00000107 66696C656E616D imul bp,[ebp+0x6e],0x6d61
0000010E 653A00 cmp al,[gs:eax]
00000111 64656C gs insb
00000114 657465 gs jz 0x17c
00000117 00636F add [ebx+0x6f],ah
0000011A 7079 jo 0x195
0000011C 636F6E arpl [edi+0x6e],bp
0000011F 00636F add [ebx+0x6f],ah
00000122 6E outsb
00000123 7465 jz 0x18a
00000125 6E outsb
00000126 743A jz 0x162
00000128 007072 add [eax+0x72],dh
0000012B 6F outsd
0000012C 6300 arpl [eax],ax
0000012E 7365 jnc 0x195
00000130 7461 jz 0x193
00000132 00506C add [eax+0x6c],dl
00000135 6561 gs popa
00000137 7365 jnc 0x19e
00000139 20696E and [ecx+0x6e],ch
0000013C 7075 jo 0x1b3
0000013E 7420 jz 0x160
00000140 61 popa
00000141 7474 jz 0x1b7
00000143 7228 jc 0x16d
00000145 61 popa
00000146 2F das
00000147 622F bound ebp,[edi]
00000149 65293A sub [gs:edx],edi
0000014C 009090909090 add [eax+0x90909090],dl
00000152 90 nop
00000153 90 nop
00000154 90 nop
00000155 90 nop
00000156 90 nop
00000157 90 nop
00000158 90 nop
00000159 90 nop
0000015A 90 nop
0000015B 90 nop
0000015C 90 nop
0000015D 90 nop
0000015E 90 nop
0000015F 90 nop
00000160 42 inc edx
00000161 61 popa
00000162 64206174 and [fs:ecx+0x74],ah
00000166 7472 jz 0x1da
00000168 2120 and [eax],esp
0000016A 7072 jo 0x1de
0000016C 657373 gs jnc 0x1e2
0000016F 20456E and [ebp+0x6e],al
00000172 7465 jz 0x1d9
00000174 7220 jc 0x196
00000176 746F jz 0x1e7
00000178 20636F and [ebx+0x6f],ah
0000017B 6E outsb
0000017C 7469 jz 0x1e7
0000017E 6E outsb
0000017F 7565 jnz 0x1e6
00000181 2E2E2E007175 add [cs:ecx+0x75],dh
00000187 6974004261642063 imul esi,[eax+eax+0x42],0x63206461
0000018F 6F outsd
00000190 6D insd
00000191 6D insd
00000192 61 popa
00000193 6E outsb
00000194 64206F72 and [fs:edi+0x72],ch
00000198 206669 and [esi+0x69],ah
0000019B 6C insb
0000019C 656E gs outsb
0000019E 61 popa
0000019F 6D insd
000001A0 652100 and [gs:eax],eax
000001A3 90 nop
000001A4 55 push ebp
000001A5 89E5 mov ebp,esp
000001A7 81EC98000000 sub esp,0x98