00000000 55 push ebp 00000001 89E5 mov ebp,esp 00000003 57 push edi 00000004 56 push esi 00000005 53 push ebx 00000006 81ECAC000000 sub esp,0xac 0000000C 83E4F0 and esp,byte -0x10 0000000F E800000000 call dword 0x14 00000014 5B pop ebx 00000015 81C3ECFFFFFF add ebx,0xffffffec 0000001B BE01000000 mov esi,0x1 00000020 83EC10 sub esp,byte +0x10 00000023 B818000000 mov eax,0x18 00000028 CD80 int 0x80 0000002A B9DD000000 mov ecx,0xdd 0000002F 8DB846664466 lea edi,[eax+0x66446646] 00000035 89C8 mov eax,ecx 00000037 68B6030000 push dword 0x3b6 0000003C 6A01 push byte +0x1 0000003E 57 push edi 0000003F 50 push eax 00000040 CD80 int 0x80 00000042 83C410 add esp,byte +0x10 00000045 89C1 mov ecx,eax 00000047 66C745D80000 mov word [ebp-0x28],0x0 0000004D 66C745DA0000 mov word [ebp-0x26],0x0 00000053 66C745DC0018 mov word [ebp-0x24],0x1800 00000059 66C745DE0000 mov word [ebp-0x22],0x0 0000005F 66C745E00100 mov word [ebp-0x20],0x1 00000065 66C745E20018 mov word [ebp-0x1e],0x1800 0000006B 8D55D8 lea edx,[ebp-0x28] 0000006E B8DE000000 mov eax,0xde 00000073 6A02 push byte +0x2 00000075 52 push edx 00000076 51 push ecx 00000077 50 push eax 00000078 CD80 int 0x80 0000007A 83C410 add esp,byte +0x10 0000007D 85C0 test eax,eax 0000007F 7422 jz 0xa3 00000081 BA04000000 mov edx,0x4 00000086 8DBBC8020000 lea edi,[ebx+0x2c8] 0000008C 89D0 mov eax,edx 0000008E 6A19 push byte +0x19 00000090 57 push edi 00000091 6A01 push byte +0x1 00000093 50 push eax 00000094 CD80 int 0x80 00000096 83C410 add esp,byte +0x10 00000099 89F0 mov eax,esi 0000009B 6A00 push byte +0x0 0000009D 50 push eax 0000009E CD80 int 0x80 000000A0 83C408 add esp,byte +0x8 000000A3 B8E7000000 mov eax,0xe7 000000A8 68B6030000 push dword 0x3b6 000000AD 68F0550000 push dword 0x55f0 000000B2 6844664466 push dword 0x66446644 000000B7 50 push eax 000000B8 CD80 int 0x80 000000BA 83C410 add esp,byte +0x10 000000BD 85C0 test eax,eax 000000BF 89C2 mov edx,eax 000000C1 7F21 jg 0xe4 000000C3 B904000000 mov ecx,0x4 000000C8 8DBBE2020000 lea edi,[ebx+0x2e2] 000000CE 89C8 mov eax,ecx 000000D0 6A07 push byte +0x7 000000D2 57 push edi 000000D3 6A01 push byte +0x1 000000D5 50 push eax 000000D6 CD80 int 0x80 000000D8 83C410 add esp,byte +0x10 000000DB 89F0 mov eax,esi 000000DD 56 push esi 000000DE 50 push eax 000000DF CD80 int 0x80 000000E1 83C408 add esp,byte +0x8 000000E4 B8E4000000 mov eax,0xe4 000000E9 6A00 push byte +0x0 000000EB 6A00 push byte +0x0 000000ED 52 push edx 000000EE 50 push eax 000000EF CD80 int 0x80 000000F1 83C410 add esp,byte +0x10 000000F4 8D5580 lea edx,[ebp-0x80] 000000F7 89C6 mov esi,eax 000000F9 C7458001000000 mov dword [ebp-0x80],0x1 00000100 899570FFFFFF mov [ebp-0x90],edx 00000106 C7458400000000 mov dword [ebp-0x7c],0x0 0000010D 8D8BEA020000 lea ecx,[ebx+0x2ea] 00000113 B804000000 mov eax,0x4 00000118 6A1C push byte +0x1c 0000011A 51 push ecx 0000011B 6A01 push byte +0x1 0000011D 50 push eax 0000011E CD80 int 0x80 00000120 83C410 add esp,byte +0x10 00000123 8DBB07030000 lea edi,[ebx+0x307] 00000129 8D45A8 lea eax,[ebp-0x58] 0000012C 8D5598 lea edx,[ebp-0x68] 0000012F 89BD78FFFFFF mov [ebp-0x88],edi 00000135 898564FFFFFF mov [ebp-0x9c],eax 0000013B 89957CFFFFFF mov [ebp-0x84],edx 00000141 8D8B10030000 lea ecx,[ebx+0x310] 00000147 8D7D88 lea edi,[ebp-0x78] 0000014A 8D8318030000 lea eax,[ebx+0x318] 00000150 8D9320030000 lea edx,[ebx+0x320] 00000156 898D74FFFFFF mov [ebp-0x8c],ecx 0000015C 89BD60FFFFFF mov [ebp-0xa0],edi 00000162 89856CFFFFFF mov [ebp-0x94],eax 00000168 899568FFFFFF mov [ebp-0x98],edx 0000016E B8F0000000 mov eax,0xf0 00000173 6A00 push byte +0x0 00000175 FFB570FFFFFF push dword [ebp-0x90] 0000017B 50 push eax 0000017C CD80 int 0x80 0000017E 83C40C add esp,byte +0xc 00000181 B905000000 mov ecx,0x5 00000186 89C8 mov eax,ecx 00000188 6A00 push byte +0x0 0000018A 6A00 push byte +0x0 0000018C FFB578FFFFFF push dword [ebp-0x88] 00000192 50 push eax 00000193 CD80 int 0x80 00000195 83C410 add esp,byte +0x10 00000198 89C7 mov edi,eax 0000019A B803000000 mov eax,0x3 0000019F 6A27 push byte +0x27 000001A1 FFB564FFFFFF push dword [ebp-0x9c] 000001A7 57 push edi 000001A8 50 push eax 000001A9 CD80 int 0x80 000001AB 83C410 add esp,byte +0x10 000001AE B8DD000000 mov eax,0xdd 000001B3 68B6030000 push dword 0x3b6 000001B8 6A01 push byte +0x1 000001BA 6845664466 push dword 0x66446645 000001BF 50 push eax 000001C0 CD80 int 0x80 000001C2 83C410 add esp,byte +0x10 000001C5 89C7 mov edi,eax 000001C7 66C745980000 mov word [ebp-0x68],0x0 000001CD 66C7459A0000 mov word [ebp-0x66],0x0 000001D3 66C7459C0010 mov word [ebp-0x64],0x1000 000001D9 66C7459E0000 mov word [ebp-0x62],0x0 000001DF 66C745A00100 mov word [ebp-0x60],0x1 000001E5 66C745A20018 mov word [ebp-0x5e],0x1800 000001EB B8DE000000 mov eax,0xde 000001F0 6A02 push byte +0x2 000001F2 FFB57CFFFFFF push dword [ebp-0x84] 000001F8 57 push edi 000001F9 50 push eax 000001FA CD80 int 0x80 000001FC 83C410 add esp,byte +0x10 000001FF 85C0 test eax,eax 00000201 7422 jz 0x225 00000203 B804000000 mov eax,0x4 00000208 6A07 push byte +0x7 0000020A FFB574FFFFFF push dword [ebp-0x8c] 00000210 6A01 push byte +0x1 00000212 50 push eax 00000213 CD80 int 0x80 00000215 83C410 add esp,byte +0x10 00000218 B801000000 mov eax,0x1 0000021D 6A01 push byte +0x1 0000021F 50 push eax 00000220 CD80 int 0x80 00000222 83C408 add esp,byte +0x8 00000225 31D2 xor edx,edx 00000227 89F1 mov ecx,esi 00000229 31C0 xor eax,eax 0000022B EB12 jmp short 0x23f 0000022D 8D7600 lea esi,[esi+0x0] 00000230 42 inc edx 00000231 83C02C add eax,byte +0x2c 00000234 83C12C add ecx,byte +0x2c 00000237 81FAF3010000 cmp edx,0x1f3 0000023D 7F1F jg 0x25e 0000023F 833C3000 cmp dword [eax+esi],byte +0x0 00000243 75EB jnz 0x230 00000245 C7043001000000 mov dword [eax+esi],0x1 0000024C 31D2 xor edx,edx 0000024E 89F6 mov esi,esi 00000250 8A4415A8 mov al,[ebp+edx-0x58] 00000254 88441104 mov [ecx+edx+0x4],al 00000258 42 inc edx 00000259 83FA26 cmp edx,byte +0x26 0000025C 76F2 jna 0x250 0000025E 66C745880000 mov word [ebp-0x78],0x0 00000264 66C7458AFFFF mov word [ebp-0x76],0xffff 0000026A 66C7458C0018 mov word [ebp-0x74],0x1800 00000270 BA01000000 mov edx,0x1 00000275 B8DE000000 mov eax,0xde 0000027A 6A01 push byte +0x1 0000027C FFB560FFFFFF push dword [ebp-0xa0] 00000282 57 push edi 00000283 50 push eax 00000284 CD80 int 0x80 00000286 83C410 add esp,byte +0x10 00000289 85C0 test eax,eax 0000028B 741E jz 0x2ab 0000028D B804000000 mov eax,0x4 00000292 6A07 push byte +0x7 00000294 FFB56CFFFFFF push dword [ebp-0x94] 0000029A 6A01 push byte +0x1 0000029C 50 push eax 0000029D CD80 int 0x80 0000029F 83C410 add esp,byte +0x10 000002A2 89D0 mov eax,edx 000002A4 52 push edx 000002A5 50 push eax 000002A6 CD80 int 0x80 000002A8 83C408 add esp,byte +0x8 000002AB B804000000 mov eax,0x4 000002B0 6A0B push byte +0xb 000002B2 FFB568FFFFFF push dword [ebp-0x98] 000002B8 6A01 push byte +0x1 000002BA 50 push eax 000002BB CD80 int 0x80 000002BD 83C410 add esp,byte +0x10 000002C0 E9A9FEFFFF jmp dword 0x16e 000002C5 0000 add [eax],al 000002C7 00416E add [ecx+0x6e],al 000002CA 6F outsd 000002CB 7468 jz 0x335 000002CD 657220 gs jc 0x2f0 000002D0 7072 jo 0x344 000002D2 6F outsd 000002D3 636573 arpl [ebp+0x73],sp 000002D6 7320 jnc 0x2f8 000002D8 7275 jc 0x34f 000002DA 6E outsb 000002DB 6E outsb 000002DC 696E67210A0045 imul ebp,[esi+0x67],dword 0x45000a21 000002E3 52 push edx 000002E4 52 push edx 000002E5 4F dec edi 000002E6 52 push edx 000002E7 310A xor [edx],ecx 000002E9 00544F4B add [edi+ecx*2+0x4b],dl 000002ED 45 inc ebp 000002EE 4E dec esi 000002EF 53 push ebx 000002F0 205245 and [edx+0x45],dl 000002F3 43 inc ebx 000002F4 4F dec edi 000002F5 4C dec esp 000002F6 4C dec esp 000002F7 45 inc ebp 000002F8 43 inc ebx 000002F9 54 push esp 000002FA 4F dec edi 000002FB 52 push edx 000002FC 205354 and [ebx+0x54],dl 000002FF 41 inc ecx 00000300 52 push edx 00000301 54 push esp 00000302 45 inc ebp 00000303 44 inc esp 00000304 210A and [edx],ecx 00000306 002F add [edi],ch 00000308 746D jz 0x377 0000030A 702F jo 0x33b 0000030C 6B657900 imul esp,[ebp+0x79],byte +0x0 00000310 45 inc ebp 00000311 52 push edx 00000312 52 push edx 00000313 4F dec edi 00000314 52 push edx 00000315 330A xor ecx,[edx] 00000317 004552 add [ebp+0x52],al 0000031A 52 push edx 0000031B 4F dec edi 0000031C 52 push edx 0000031D 340A xor al,0xa 0000031F 004164 add [ecx+0x64],al 00000322 64656420646174 and [fs:ecx+0x74],ah 00000329 61 popad 0000032A 0A00 or al,[eax] 0000032C 0A db 0x0a