1 EBFE jmp short 0x0 2 FFD0 call eax 3 FFD0 call eax 4 FF520F call dword near [edx+0xf] 5 648B0503000000 mov eax,[dword fs:0x3] 6 648B1504000000 mov edx,[dword fs:0x4] 7 8D db 0x8D 8 C08D0578563412 ror byte [ebp+0x34567805],0x12 9 8D8378563412 lea eax,[ebx+0x12345678] 10 8D844B78563412 lea eax,[ebx+ecx*2+0x12345678] 11 8D840978563412 lea eax,[ecx+ecx+0x12345678] 12 8D0400 lea eax,[eax+eax] 13 8D041B lea eax,[ebx+ebx] 14 8D6C2D01 lea ebp,[ebp+ebp+0x1] 15 AC lodsb 16 AD lodsd 17 89C8 mov eax,ecx 18 89E6 mov esi,esp 19 8B442420 mov eax,[esp+0x20] 20 8B4508 mov eax,[ebp+0x8] 21 BC01000000 mov esp,0x1 22 B878563412 mov eax,0x12345678 23 5B pop ebx 24 8FC3 pop ebx 25 8F03 pop dword [ebx] 26 8F430C pop dword [ebx+0xc] 27 53 push ebx 28 FFF3 push ebx 29 FF33 push dword [ebx] 30 FF77FC push dword [edi-0x4] 31 FF77F8 push dword [edi-0x8] 32 6A12 push byte +0x12 33 6834120000 push 0x1234 34 FF730C push dword [ebx+0xc] 35 FFB42434120000 push dword [esp+0x1234] 36 C3 ret 37 C3 ret 38 C20C00 ret 0xc 39 AA stosb 40 AB stosd 41 0F34 sysenter 42 50 push eax 43 50 push eax 44 0F014C2402 sidt [esp+0x2] 45 58 pop eax 46 58 pop eax 47 64A124000000 mov eax,[fs:0x24] 48 90 nop 49 93 xchg eax,ebx 50 93 xchg eax,ebx 51 87CC xchg ecx,esp 52 87CC xchg ecx,esp 53 874C2405 xchg ecx,[esp+0x5] 54 874A04 xchg ecx,[edx+0x4] 55
