Detected on win 7 64 bit
Detected[H]aaBX Public Hack V1 (MPGH.NET) - Memory Hack - Working
Nice! Work in Win7 32 Bits ...
Can you make a hack for zombie (1 hit 1 kill? also anothers no fall damage, fast knife, etc.)
Nice Job....
good job...........
Great Job,Good Luck at ur next release's 

Work on CFEU?
dont works for me -.-
Win7 32 bit
if im ingame i dont see peaples throw the wall.. i press F2, nothing.. i press F3, nothing..
Win7 32 bit
if im ingame i dont see peaples throw the wall.. i press F2, nothing.. i press F3, nothing..
what means no world? you can throw walls?
@[H]aaBX good job
but i see nothing special on that base xD
but i see nothing special on that base xDCode:
71D01000 68 DB 68 ; CHAR 'h'
71D01001 . D820D071 DD test.71D020D8 ; UNICODE "CShell.dll"
71D01005 FF DB FF
71D01006 15 DB 15
71D01007 . 0020D071 DD <&KERNEL32.GetModuleHandleW>
71D0100B 80 DB 80
71D0100C 3D DB 3D ; CHAR '='
71D0100D . 5533D071 DD test.71D03355
71D01011 00 DB 00
71D01012 0F DB 0F
71D01013 85 DB 85
71D01014 31 DB 31 ; CHAR '1'
71D01015 03 DB 03
71D01016 00 DB 00
71D01017 00 DB 00
71D01018 D9 DB D9
71D01019 05 DB 05
71D0101A . 0422D071 DD test.71D02204
71D0101E C6 DB C6
71D0101F 05 DB 05
71D01020 . 5533D071 DD test.71D03355
71D01024 01 DB 01
71D01025 33 DB 33 ; CHAR '3'
71D01026 C9 DB C9
71D01027 56 DB 56 ; CHAR 'V'
71D01028 > 8B90 D07FC200 MOV EDX,DWORD PTR DS:[EAX+C27FD0]
71D0102E . 833C11 00 CMP DWORD PTR DS:[ECX+EDX],0
71D01032 . 0F84 F6020000 JE test.71D0132E
71D01038 . BA B40A0000 MOV EDX,0AB4
71D0103D > 83F9 14 CMP ECX,14
71D01040 . 0F84 C0020000 JE test.71D01306
71D01046 . 81F9 8C000000 CMP ECX,8C
71D0104C . 0F84 B4020000 JE test.71D01306
71D01052 . 81F9 28010000 CMP ECX,128
71D01058 . 0F84 A8020000 JE test.71D01306
71D0105E . 81F9 E0010000 CMP ECX,1E0
71D01064 . 0F84 9C020000 JE test.71D01306
71D0106A . 81F9 10020000 CMP ECX,210
71D01070 . 0F84 90020000 JE test.71D01306
71D01076 . 81F9 C0020000 CMP ECX,2C0
71D0107C . 0F84 84020000 JE test.71D01306
71D01082 . 81F9 C4020000 CMP ECX,2C4
71D01088 . 0F84 78020000 JE test.71D01306
71D0108E . 81F9 C8020000 CMP ECX,2C8
71D01094 . 0F84 6C020000 JE test.71D01306
71D0109A . 81F9 D8020000 CMP ECX,2D8
71D010A0 . 0F84 60020000 JE test.71D01306
71D010A6 . 81F9 F4020000 CMP ECX,2F4
71D010AC . 0F84 54020000 JE test.71D01306
71D010B2 . 81F9 0C030000 CMP ECX,30C
71D010B8 . 0F84 48020000 JE test.71D01306
71D010BE . 81F9 10030000 CMP ECX,310
71D010C4 . 0F84 3C020000 JE test.71D01306
71D010CA . 81F9 14030000 CMP ECX,314
71D010D0 . 0F84 30020000 JE test.71D01306
71D010D6 . 81F9 18030000 CMP ECX,318
71D010DC . 0F84 24020000 JE test.71D01306
71D010E2 . 81F9 1C030000 CMP ECX,31C
71D010E8 . 0F84 18020000 JE test.71D01306
71D010EE . 81F9 7C030000 CMP ECX,37C
71D010F4 . 0F84 0C020000 JE test.71D01306
71D010FA . 81F9 80030000 CMP ECX,380
71D01100 . 0F84 00020000 JE test.71D01306
71D01106 . 81F9 84030000 CMP ECX,384
71D0110C . 0F84 F4010000 JE test.71D01306
71D01112 . 81F9 88030000 CMP ECX,388
71D01118 . 0F84 E8010000 JE test.71D01306
71D0111E . 81F9 8C030000 CMP ECX,38C
71D01124 . 0F84 DC010000 JE test.71D01306
71D0112A . 81F9 90030000 CMP ECX,390
71D01130 . 0F84 D0010000 JE test.71D01306
71D01136 . 81F9 BC030000 CMP ECX,3BC
71D0113C . 0F84 C4010000 JE test.71D01306
71D01142 . 81F9 D0030000 CMP ECX,3D0
71D01148 . 0F84 B8010000 JE test.71D01306
71D0114E . 81F9 14040000 CMP ECX,414
71D01154 . 0F84 AC010000 JE test.71D01306
71D0115A . 81F9 34040000 CMP ECX,434
71D01160 . 0F84 A0010000 JE test.71D01306
71D01166 . 81F9 38040000 CMP ECX,438
71D0116C . 0F84 94010000 JE test.71D01306
71D01172 . 81F9 3C040000 CMP ECX,43C
71D01178 . 0F84 88010000 JE test.71D01306
71D0117E . 81F9 B8040000 CMP ECX,4B8
71D01184 . 0F84 7C010000 JE test.71D01306
71D0118A . 81F9 BC040000 CMP ECX,4BC
71D01190 . 0F84 70010000 JE test.71D01306
71D01196 . 81F9 C0040000 CMP ECX,4C0
71D0119C . 0F84 64010000 JE test.71D01306
71D011A2 . 81F9 C4040000 CMP ECX,4C4
71D011A8 . 0F84 58010000 JE test.71D01306
71D011AE . 81F9 C8040000 CMP ECX,4C8
71D011B4 . 0F84 4C010000 JE test.71D01306
71D011BA . 81F9 CC040000 CMP ECX,4CC
71D011C0 . 0F84 40010000 JE test.71D01306
71D011C6 . 81F9 64050000 CMP ECX,564
71D011CC . 0F84 34010000 JE test.71D01306
71D011D2 . 81F9 68050000 CMP ECX,568
71D011D8 . 0F84 28010000 JE test.71D01306
71D011DE . 81F9 D0050000 CMP ECX,5D0
71D011E4 . 0F84 1C010000 JE test.71D01306
71D011EA . 81F9 E0050000 CMP ECX,5E0
71D011F0 . 0F84 10010000 JE test.71D01306
71D011F6 . 81F9 F4050000 CMP ECX,5F4
71D011FC . 0F84 04010000 JE test.71D01306
71D01202 . 81F9 50060000 CMP ECX,650
71D01208 . 0F84 F8000000 JE test.71D01306
71D0120E . 81F9 54060000 CMP ECX,654
71D01214 . 0F84 EC000000 JE test.71D01306
71D0121A . 81F9 58060000 CMP ECX,658
71D01220 . 0F84 E0000000 JE test.71D01306
71D01226 . 81F9 5C060000 CMP ECX,65C
71D0122C . 0F84 D4000000 JE test.71D01306
71D01232 . 81F9 60060000 CMP ECX,660
71D01238 . 0F84 C8000000 JE test.71D01306
71D0123E . 81F9 64060000 CMP ECX,664
71D01244 . 0F84 BC000000 JE test.71D01306
71D0124A . 81F9 84060000 CMP ECX,684
71D01250 . 0F84 B0000000 JE test.71D01306
71D01256 . 81F9 D4060000 CMP ECX,6D4
71D0125C . 0F84 A4000000 JE test.71D01306
71D01262 . 81F9 1C070000 CMP ECX,71C
71D01268 . 0F84 98000000 JE test.71D01306
71D0126E . 81F9 20070000 CMP ECX,720
71D01274 . 0F84 8C000000 JE test.71D01306
71D0127A . 81F9 24070000 CMP ECX,724
71D01280 . 0F84 80000000 JE test.71D01306
71D01286 . 81F9 A0070000 CMP ECX,7A0
71D0128C . 74 78 JE SHORT test.71D01306
71D0128E . 81F9 14080000 CMP ECX,814
71D01294 . 74 70 JE SHORT test.71D01306
71D01296 . 81F9 18080000 CMP ECX,818
71D0129C . 74 68 JE SHORT test.71D01306
71D0129E . 81F9 70080000 CMP ECX,870
71D012A4 . 74 60 JE SHORT test.71D01306
71D012A6 . 81F9 74080000 CMP ECX,874
71D012AC . 74 58 JE SHORT test.71D01306
71D012AE . 81F9 90080000 CMP ECX,890
71D012B4 . 74 50 JE SHORT test.71D01306
71D012B6 . 81F9 C4080000 CMP ECX,8C4
71D012BC . 74 48 JE SHORT test.71D01306
71D012BE . 81F9 00090000 CMP ECX,900
71D012C4 . 74 40 JE SHORT test.71D01306
71D012C6 . 81F9 20090000 CMP ECX,920
71D012CC . 74 38 JE SHORT test.71D01306
71D012CE . 81F9 2C090000 CMP ECX,92C
71D012D4 . 74 30 JE SHORT test.71D01306
71D012D6 . 81F9 B0090000 CMP ECX,9B0
71D012DC . 74 28 JE SHORT test.71D01306
71D012DE . 81F9 1C0A0000 CMP ECX,0A1C
71D012E4 . 74 20 JE SHORT test.71D01306
71D012E6 . 81F9 D40A0000 CMP ECX,0AD4
71D012EC . 74 18 JE SHORT test.71D01306
71D012EE . 81F9 F00A0000 CMP ECX,0AF0
71D012F4 . 74 10 JE SHORT test.71D01306
71D012F6 . 81F9 380B0000 CMP ECX,0B38
71D012FC . 74 08 JE SHORT test.71D01306
71D012FE . 81F9 3C0B0000 CMP ECX,0B3C
71D01304 . 75 19 JNZ SHORT test.71D0131F
71D01306 > 8BB0 D07FC200 MOV ESI,DWORD PTR DS:[EAX+C27FD0]
71D0130C . 8B3431 MOV ESI,DWORD PTR DS:[ECX+ESI]
71D0130F . D95416 B8 FST DWORD PTR DS:[ESI+EDX-48]
71D01313 . 8BB0 D07FC200 MOV ESI,DWORD PTR DS:[EAX+C27FD0]
71D01319 . 8B3431 MOV ESI,DWORD PTR DS:[ECX+ESI]
71D0131C . D91432 FST DWORD PTR DS:[EDX+ESI]
71D0131F > 83C2 04 ADD EDX,4
71D01322 . 81FA D80A0000 CMP EDX,0AD8
71D01328 .^0F8C 0FFDFFFF JL test.71D0103D
71D0132E > 83C1 04 ADD ECX,4
71D01331 . 81F9 F00A0000 CMP ECX,0AF0
71D01337 .^0F8C EBFCFFFF JL test.71D01028
71D0133D . 5E POP ESI
71D0133E . DDD8 FSTP ST
71D01340 . 6A 64 PUSH 64 ; /Timeout = 100. ms
71D01342 . FF15 0420D071 CALL DWORD PTR DS:[<&KERNEL32.Sleep>] ; \Sleep
71D01348 . C3 RETN
71D01349 . 6A 64 PUSH 64 ; /Timeout = 100. ms
71D0134B . C605 5533D071 >MOV BYTE PTR DS:[71D03355],0 ; |
71D01352 . FF15 0420D071 CALL DWORD PTR DS:[<&KERNEL32.Sleep>] ; \Sleep
71D01358 . C3 RETN
71D01359 CC INT3
71D0135A CC INT3
71D0135B CC INT3
71D0135C CC INT3
71D0135D CC INT3
71D0135E CC INT3
71D0135F CC INT3
71D01360 68 DB 68 ; CHAR 'h'
71D01361 . D820D071 DD test.71D020D8 ; UNICODE "CShell.dll"
71D01365 FF DB FF
71D01366 15 DB 15
71D01367 . 0020D071 DD <&KERNEL32.GetModuleHandleW>
71D0136B 80 DB 80
71D0136C 3D DB 3D ; CHAR '='
71D0136D . 5633D071 DD test.71D03356
71D01371 00 DB 00
71D01372 0F DB 0F
71D01373 85 DB 85
71D01374 94 DB 94
71D01375 00 DB 00
71D01376 00 DB 00
71D01377 00 DB 00
71D01378 83 DB 83
71D01379 B8 DB B8
71D0137A D0 DB D0
71D0137B 7F DB 7F
71D0137C . C2 0000 RETN 0
71D0137F C6 DB C6
71D01380 05 DB 05
71D01381 . 5633D071 DD test.71D03356
71D01385 01 DB 01
71D01386 0F DB 0F
71D01387 84 DB 84
71D01388 87 DB 87
71D01389 00 DB 00
71D0138A 00 DB 00
71D0138B 00 DB 00
71D0138C D9 DB D9
71D0138D EE DB EE
71D0138E B9 DB B9
71D0138F 0C DB 0C
71D01390 00 DB 00
71D01391 00 DB 00
71D01392 00 DB 00
71D01393 > 8B90 D07FC200 MOV EDX,DWORD PTR DS:[EAX+C27FD0]
71D01399 . 8B5411 F4 MOV EDX,DWORD PTR DS:[ECX+EDX-C]
71D0139D . 85D2 TEST EDX,EDX
71D0139F . 74 06 JE SHORT test.71D013A7
71D013A1 . D992 803B0000 FST DWORD PTR DS:[EDX+3B80]
71D013A7 > 8B90 D07FC200 MOV EDX,DWORD PTR DS:[EAX+C27FD0]
71D013AD . 8B5411 F8 MOV EDX,DWORD PTR DS:[ECX+EDX-8]
71D013B1 . 85D2 TEST EDX,EDX
71D013B3 . 74 06 JE SHORT test.71D013BB
71D013B5 . D992 803B0000 FST DWORD PTR DS:[EDX+3B80]
71D013BB > 8B90 D07FC200 MOV EDX,DWORD PTR DS:[EAX+C27FD0]
71D013C1 . 8B5411 FC MOV EDX,DWORD PTR DS:[ECX+EDX-4]
71D013C5 . 85D2 TEST EDX,EDX
71D013C7 . 74 06 JE SHORT test.71D013CF
71D013C9 . D992 803B0000 FST DWORD PTR DS:[EDX+3B80]
71D013CF > 8B90 D07FC200 MOV EDX,DWORD PTR DS:[EAX+C27FD0]
71D013D5 . 8B1411 MOV EDX,DWORD PTR DS:[ECX+EDX]
71D013D8 . 85D2 TEST EDX,EDX
71D013DA . 74 06 JE SHORT test.71D013E2
71D013DC . D992 803B0000 FST DWORD PTR DS:[EDX+3B80]
71D013E2 > 8B90 D07FC200 MOV EDX,DWORD PTR DS:[EAX+C27FD0]
71D013E8 . 8B5411 04 MOV EDX,DWORD PTR DS:[ECX+EDX+4]
71D013EC . 85D2 TEST EDX,EDX
71D013EE . 74 06 JE SHORT test.71D013F6
71D013F0 . D992 803B0000 FST DWORD PTR DS:[EDX+3B80]
71D013F6 > 83C1 14 ADD ECX,14
71D013F9 . 81F9 00070000 CMP ECX,700
71D013FF .^7C 92 JL SHORT test.71D01393
71D01401 . 6A 64 PUSH 64 ; /Timeout = 100. ms
71D01403 . DDD8 FSTP ST ; |
71D01405 . FF15 0420D071 CALL DWORD PTR DS:[<&KERNEL32.Sleep>] ; \Sleep
71D0140B . C3 RETN
71D0140C . C605 5633D071 >MOV BYTE PTR DS:[71D03356],0
71D01413 . 6A 64 PUSH 64 ; /Timeout = 100. ms
71D01415 . FF15 0420D071 CALL DWORD PTR DS:[<&KERNEL32.Sleep>] ; \Sleep
71D0141B . C3 RETN
71D0141C CC INT3
71D0141D CC INT3
71D0141E CC INT3
71D0141F CC INT3
71D01420 55 DB 55 ; CHAR 'U'
71D01421 8B DB 8B
71D01422 EC DB EC
71D01423 83 DB 83
71D01424 EC DB EC
71D01425 08 DB 08
71D01426 53 DB 53 ; CHAR 'S'
71D01427 56 DB 56 ; CHAR 'V'
71D01428 8B DB 8B
71D01429 35 DB 35 ; CHAR '5'
71D0142A . 0020D071 DD <&KERNEL32.GetModuleHandleW>
71D0142E 57 DB 57 ; CHAR 'W'
71D0142F 90 NOP
71D01430 68 DB 68 ; CHAR 'h'
71D01431 . D820D071 DD test.71D020D8 ; UNICODE "CShell.dll"
71D01435 FF DB FF
71D01436 D6 DB D6
71D01437 85 DB 85
71D01438 C0 DB C0
71D01439 74 DB 74 ; CHAR 't'
71D0143A F5 DB F5
71D0143B 8B DB 8B
71D0143C 3D DB 3D ; CHAR '='
71D0143D . 9020D071 DD <&USER32.GetAsyncKeyState>
71D01441 B3 DB B3
71D01442 01 DB 01
71D01443 8B DB 8B
71D01444 0D DB 0D
71D01445 . 4021D071 DD test.71D02140
71D01449 B8 DB B8
71D0144A 1C DB 1C
71D0144B . 4A 6D 00 ASCII "Jm",0
71D0144E 88 DB 88
71D0144F 1D DB 1D
71D01450 . 1030D071 DD test.71D03010
71D01454 89 DB 89
71D01455 08 DB 08
71D01456 66 DB 66 ; CHAR 'f'
71D01457 8B DB 8B
71D01458 15 DB 15
71D01459 . 4421D071 DD test.71D02144
71D0145D 6A DB 6A ; CHAR 'j'
71D0145E 71 DB 71 ; CHAR 'q'
71D0145F 66 DB 66 ; CHAR 'f'
71D01460 89 DB 89
71D01461 50 DB 50 ; CHAR 'P'
71D01462 04 DB 04
71D01463 FF DB FF
71D01464 D7 DB D7
71D01465 66 DB 66 ; CHAR 'f'
71D01466 85 DB 85
71D01467 C0 DB C0
71D01468 74 DB 74 ; CHAR 't'
71D01469 05 DB 05
71D0146A E8 DB E8
71D0146B 91 DB 91
71D0146C FB DB FB
71D0146D FF DB FF
71D0146E FF DB FF
71D0146F 6A DB 6A ; CHAR 'j'
71D01470 72 DB 72 ; CHAR 'r'
71D01471 FF DB FF
71D01472 D7 DB D7
71D01473 66 DB 66 ; CHAR 'f'
71D01474 85 DB 85
71D01475 C0 DB C0
71D01476 74 DB 74 ; CHAR 't'
71D01477 05 DB 05
71D01478 E8 DB E8
71D01479 E3 DB E3
71D0147A FE DB FE
71D0147B FF DB FF
71D0147C FF DB FF
71D0147D 6A DB 6A ; CHAR 'j'
71D0147E 73 DB 73 ; CHAR 's'
71D0147F FF DB FF
71D01480 D7 DB D7
71D01481 66 DB 66 ; CHAR 'f'
71D01482 85 DB 85
71D01483 C0 DB C0
71D01484 74 DB 74 ; CHAR 't'
71D01485 6F DB 6F ; CHAR 'o'
71D01486 80 DB 80
71D01487 3D DB 3D ; CHAR '='
71D01488 . 5433D071 DD test.71D03354
71D0148C 00 DB 00
71D0148D 68 DB 68 ; CHAR 'h'
71D0148E . D820D071 DD test.71D020D8 ; UNICODE "CShell.dll"
71D01492 75 DB 75 ; CHAR 'u'
71D01493 2D DB 2D ; CHAR '-'
71D01494 88 DB 88
71D01495 1D DB 1D
71D01496 . 5433D071 DD test.71D03354
71D0149A C7 DB C7
71D0149B 45 DB 45 ; CHAR 'E'
71D0149C F8 DB F8
71D0149D . F020D071 DD test.71D020F0 ; ASCII "TextureModels 0"
71D014A1 FF DB FF
71D014A2 D6 DB D6
71D014A3 85 DB 85
71D014A4 C0 DB C0
71D014A5 74 DB 74 ; CHAR 't'
71D014A6 46 DB 46 ; CHAR 'F'
71D014A7 8B DB 8B
71D014A8 80 DB 80
71D014A9 A4 DB A4
71D014AA F4 DB F4
71D014AB 3E DB 3E ; CHAR '>'
71D014AC 00 DB 00
71D014AD 8B DB 8B
71D014AE 88 DB 88
71D014AF 00 DB 00
71D014B0 02 DB 02
71D014B1 00 DB 00
71D014B2 00 DB 00
71D014B3 89 DB 89
71D014B4 4D DB 4D ; CHAR 'M'
71D014B5 FC DB FC
71D014B6 FF DB FF
71D014B7 75 DB 75 ; CHAR 'u'
71D014B8 F8 DB F8
71D014B9 FF DB FF
71D014BA 55 DB 55 ; CHAR 'U'
71D014BB FC DB FC
71D014BC 83 DB 83
71D014BD C4 DB C4
71D014BE 04 DB 04
71D014BF EB DB EB
71D014C0 2C DB 2C ; CHAR ','
71D014C1 C6 DB C6
71D014C2 05 DB 05
71D014C3 . 5433D071 DD test.71D03354
71D014C7 00 DB 00
71D014C8 C7 DB C7
71D014C9 45 DB 45 ; CHAR 'E'
71D014CA FC DB FC
71D014CB . 0021D071 DD test.71D02100 ; ASCII "TextureModels 1"
71D014CF FF DB FF
71D014D0 D6 DB D6
71D014D1 85 DB 85
71D014D2 C0 DB C0
71D014D3 74 DB 74 ; CHAR 't'
71D014D4 18 DB 18
71D014D5 8B DB 8B
71D014D6 90 NOP
71D014D7 A4 DB A4
71D014D8 F4 DB F4
71D014D9 3E DB 3E ; CHAR '>'
71D014DA 00 DB 00
71D014DB 8B DB 8B
71D014DC 82 DB 82
71D014DD 00 DB 00
71D014DE 02 DB 02
71D014DF 00 DB 00
71D014E0 00 DB 00
71D014E1 89 DB 89
71D014E2 45 DB 45 ; CHAR 'E'
71D014E3 F8 DB F8
71D014E4 FF DB FF
71D014E5 75 DB 75 ; CHAR 'u'
71D014E6 FC DB FC
71D014E7 FF DB FF
71D014E8 55 DB 55 ; CHAR 'U'
71D014E9 F8 DB F8
71D014EA 83 DB 83
71D014EB C4 DB C4
71D014EC 04 DB 04
71D014ED 6A DB 6A ; CHAR 'j'
71D014EE 64 DB 64 ; CHAR 'd'
71D014EF FF DB FF
71D014F0 15 DB 15
71D014F1 . 0420D071 DD <&KERNEL32.Sleep>
71D014F5 6A DB 6A ; CHAR 'j'
71D014F6 74 DB 74 ; CHAR 't'
71D014F7 FF DB FF
71D014F8 D7 DB D7
71D014F9 66 DB 66 ; CHAR 'f'
71D014FA 85 DB 85
71D014FB C0 DB C0
71D014FC 74 DB 74 ; CHAR 't'
71D014FD 6F DB 6F ; CHAR 'o'
71D014FE 80 DB 80
71D014FF 3D DB 3D ; CHAR '='
71D01500 . 5733D071 DD test.71D03357
71D01504 00 DB 00
71D01505 68 DB 68 ; CHAR 'h'
71D01506 . D820D071 DD test.71D020D8 ; UNICODE "CShell.dll"
71D0150A 75 DB 75 ; CHAR 'u'
71D0150B 2D DB 2D ; CHAR '-'
71D0150C 88 DB 88
71D0150D 1D DB 1D
71D0150E . 5733D071 DD test.71D03357
71D01512 C7 DB C7
71D01513 45 DB 45 ; CHAR 'E'
71D01514 FC DB FC
71D01515 . 1021D071 DD test.71D02110 ; ASCII "DrawFlat 1"
71D01519 FF DB FF
71D0151A D6 DB D6
71D0151B 85 DB 85
71D0151C C0 DB C0
71D0151D 74 DB 74 ; CHAR 't'
71D0151E 46 DB 46 ; CHAR 'F'
71D0151F 8B DB 8B
71D01520 88 DB 88
71D01521 A4 DB A4
71D01522 F4 DB F4
71D01523 3E DB 3E ; CHAR '>'
71D01524 00 DB 00
71D01525 8B DB 8B
71D01526 91 DB 91
71D01527 00 DB 00
71D01528 02 DB 02
71D01529 00 DB 00
71D0152A 00 DB 00
71D0152B 89 DB 89
71D0152C 55 DB 55 ; CHAR 'U'
71D0152D F8 DB F8
71D0152E FF DB FF
71D0152F 75 DB 75 ; CHAR 'u'
71D01530 FC DB FC
71D01531 FF DB FF
71D01532 55 DB 55 ; CHAR 'U'
71D01533 F8 DB F8
71D01534 83 DB 83
71D01535 C4 DB C4
71D01536 04 DB 04
71D01537 EB DB EB
71D01538 2C DB 2C ; CHAR ','
71D01539 C6 DB C6
71D0153A 05 DB 05
71D0153B . 5733D071 DD test.71D03357
71D0153F 00 DB 00
71D01540 C7 DB C7
71D01541 45 DB 45 ; CHAR 'E'
71D01542 FC DB FC
71D01543 . 1C21D071 DD test.71D0211C ; ASCII "DrawFlat 0"
71D01547 FF DB FF
71D01548 D6 DB D6
71D01549 85 DB 85
71D0154A C0 DB C0
71D0154B 74 DB 74 ; CHAR 't'
71D0154C 18 DB 18
71D0154D 8B DB 8B
71D0154E 80 DB 80
71D0154F A4 DB A4
71D01550 F4 DB F4
71D01551 3E DB 3E ; CHAR '>'
71D01552 00 DB 00
71D01553 8B DB 8B
71D01554 88 DB 88
71D01555 00 DB 00
71D01556 02 DB 02
71D01557 00 DB 00
71D01558 00 DB 00
71D01559 89 DB 89
71D0155A 4D DB 4D ; CHAR 'M'
71D0155B F8 DB F8
71D0155C FF DB FF
71D0155D 75 DB 75 ; CHAR 'u'
71D0155E FC DB FC
71D0155F FF DB FF
71D01560 55 DB 55 ; CHAR 'U'
71D01561 F8 DB F8
71D01562 83 DB 83
71D01563 C4 DB C4
71D01564 04 DB 04
71D01565 6A DB 6A ; CHAR 'j'
71D01566 64 DB 64 ; CHAR 'd'
71D01567 FF DB FF
71D01568 15 DB 15
71D01569 . 0420D071 DD <&KERNEL32.Sleep>
71D0156D 6A DB 6A ; CHAR 'j'
71D0156E 75 DB 75 ; CHAR 'u'
71D0156F FF DB FF
71D01570 D7 DB D7
71D01571 66 DB 66 ; CHAR 'f'
71D01572 85 DB 85
71D01573 C0 DB C0
71D01574 74 DB 74 ; CHAR 't'
71D01575 6F DB 6F ; CHAR 'o'
71D01576 80 DB 80
71D01577 3D DB 3D ; CHAR '='
71D01578 . 5833D071 DD test.71D03358
71D0157C 00 DB 00
71D0157D 68 DB 68 ; CHAR 'h'
71D0157E . D820D071 DD test.71D020D8 ; UNICODE "CShell.dll"
71D01582 75 DB 75 ; CHAR 'u'
71D01583 2D DB 2D ; CHAR '-'
71D01584 88 DB 88
71D01585 1D DB 1D
71D01586 . 5833D071 DD test.71D03358
71D0158A C7 DB C7
71D0158B 45 DB 45 ; CHAR 'E'
71D0158C FC DB FC
71D0158D . 2821D071 DD test.71D02128 ; ASCII "DrawWorld 0"
71D01591 FF DB FF
71D01592 D6 DB D6
71D01593 85 DB 85
71D01594 C0 DB C0
71D01595 74 DB 74 ; CHAR 't'
71D01596 46 DB 46 ; CHAR 'F'
71D01597 8B DB 8B
71D01598 90 NOP
71D01599 A4 DB A4
71D0159A F4 DB F4
71D0159B 3E DB 3E ; CHAR '>'
71D0159C 00 DB 00
71D0159D 8B DB 8B
71D0159E 82 DB 82
71D0159F 00 DB 00
71D015A0 02 DB 02
71D015A1 00 DB 00
71D015A2 00 DB 00
71D015A3 89 DB 89
71D015A4 45 DB 45 ; CHAR 'E'
71D015A5 F8 DB F8
71D015A6 FF DB FF
71D015A7 75 DB 75 ; CHAR 'u'
71D015A8 FC DB FC
71D015A9 FF DB FF
71D015AA 55 DB 55 ; CHAR 'U'
71D015AB F8 DB F8
71D015AC 83 DB 83
71D015AD C4 DB C4
71D015AE 04 DB 04
71D015AF EB DB EB
71D015B0 2C DB 2C ; CHAR ','
71D015B1 C6 DB C6
71D015B2 05 DB 05
71D015B3 . 5833D071 DD test.71D03358
71D015B7 00 DB 00
71D015B8 C7 DB C7
71D015B9 45 DB 45 ; CHAR 'E'
71D015BA FC DB FC
71D015BB . 3421D071 DD test.71D02134 ; ASCII "DrawWorld 1"
71D015BF FF DB FF
71D015C0 D6 DB D6
71D015C1 85 DB 85
71D015C2 C0 DB C0
71D015C3 74 DB 74 ; CHAR 't'
71D015C4 18 DB 18
71D015C5 8B DB 8B
71D015C6 88 DB 88
71D015C7 A4 DB A4
71D015C8 F4 DB F4
71D015C9 3E DB 3E ; CHAR '>'
71D015CA 00 DB 00
71D015CB 8B DB 8B
71D015CC 91 DB 91
71D015CD 00 DB 00
71D015CE 02 DB 02
71D015CF 00 DB 00
71D015D0 00 DB 00
71D015D1 89 DB 89
71D015D2 55 DB 55 ; CHAR 'U'
71D015D3 F8 DB F8
71D015D4 FF DB FF
71D015D5 75 DB 75 ; CHAR 'u'
71D015D6 FC DB FC
71D015D7 FF DB FF
71D015D8 55 DB 55 ; CHAR 'U'
71D015D9 F8 DB F8
71D015DA 83 DB 83
71D015DB C4 DB C4
71D015DC 04 DB 04
71D015DD 6A DB 6A ; CHAR 'j'
71D015DE 64 DB 64 ; CHAR 'd'
71D015DF FF DB FF
71D015E0 15 DB 15
71D015E1 . 0420D071 DD <&KERNEL32.Sleep>
71D015E5 6A DB 6A ; CHAR 'j'
71D015E6 64 DB 64 ; CHAR 'd'
71D015E7 FF DB FF
71D015E8 15 DB 15
71D015E9 . 0420D071 DD <&KERNEL32.Sleep>
71D015ED E9 DB E9
71D015EE 51 DB 51 ; CHAR 'Q'
71D015EF FE DB FE
71D015F0 FF DB FF
71D015F1 FF DB FF
71D015F2 CC INT3
71D015F3 CC INT3
71D015F4 CC INT3
71D015F5 CC INT3
71D015F6 CC INT3
71D015F7 CC INT3
71D015F8 CC INT3
71D015F9 CC INT3
71D015FA CC INT3
71D015FB CC INT3
71D015FC CC INT3
71D015FD CC INT3
71D015FE CC INT3
71D015FF CC INT3
71D01600 /$ 55 PUSH EBP
71D01601 |. 8BEC MOV EBP,ESP
71D01603 |. 837D 0C 01 CMP DWORD PTR SS:[EBP+C],1
71D01607 |. 75 41 JNZ SHORT test.71D0164A
71D01609 |. 8B45 08 MOV EAX,DWORD PTR SS:[EBP+8]
71D0160C |. 50 PUSH EAX ; /hLibModule
71D0160D |. FF15 0820D071 CALL DWORD PTR DS:[<&KERNEL32.DisableThr>; \DisableThreadLibraryCalls
71D01613 |. 6A 00 PUSH 0 ; /Style = MB_OK|MB_APPLMODAL
71D01615 |. 68 4821D071 PUSH test.71D02148 ; |Title = "[H]aaBX Public Hack V1 (MPGH.NET)"
71D0161A |. 68 7021D071 PUSH test.71D02170 ; |Text = "By [H]aaBX
MPGH.net
After pressing okay you'll redirected to the author's profile"
71D0161F |. 6A 00 PUSH 0 ; |hOwner = NULL
71D01621 |. FF15 8C20D071 CALL DWORD PTR DS:[<&USER32.MessageBoxA>>; \MessageBoxA
71D01627 |. 68 C421D071 PUSH test.71D021C4 ; /command = "start http://www.mpgh.net/forum/members/1402528--h-aabx.html"
71D0162C |. FF15 8020D071 CALL DWORD PTR DS:[<&MSVCR100.system>] ; \system
71D01632 |. 6A 00 PUSH 0 ; /pID = NULL
71D01634 |. 6A 00 PUSH 0 ; |flags = 0
71D01636 |. 6A 00 PUSH 0 ; |arg = NULL
71D01638 |. 68 2014D071 PUSH test.71D01420 ; |start = test.71D01420
71D0163D |. 6A 00 PUSH 0 ; |stksize = 0
71D0163F |. 6A 00 PUSH 0 ; |security = NULL
71D01641 |. FF15 7C20D071 CALL DWORD PTR DS:[<&MSVCR100._beginthre>; \_beginthreadex
71D01647 |. 83C4 1C ADD ESP,1C
71D0164A |> B8 01000000 MOV EAX,1
71D0164F |. 5D POP EBP
71D01650 \. C2 0C00 RETN 0C
71D01653 3B DB 3B ; CHAR ';'
71D01654 0D DB 0D
71D01655 . 0030D071 DD test.71D03000
71D01659 75 DB 75 ; CHAR 'u'
71D0165A . 02F3 ADD DH,BL
71D0165C . C3 RETN
71D0165D E9 DB E9
71D0165E 91 DB 91
71D0165F 03 DB 03
71D01660 00 DB 00
71D01661 00 DB 00
71D01662 8BFF MOV EDI,EDI
71D01664 . 56 PUSH ESI
71D01665 . 68 80000000 PUSH 80
71D0166A . FF15 7820D071 CALL DWORD PTR DS:[<&MSVCR100._malloc_cr>; MSVCR1_1._malloc_crt
71D01670 . 59 POP ECX
71D01671 . 8BF0 MOV ESI,EAX
71D01673 . 56 PUSH ESI
71D01674 . FF15 3C20D071 CALL DWORD PTR DS:[<&KERNEL32.EncodePoin>; ntdll.RtlEncodePointer
71D0167A . A3 6833D071 MOV DWORD PTR DS:[71D03368],EAX
71D0167F . A3 6433D071 MOV DWORD PTR DS:[71D03364],EAX
71D01684 . 85F6 TEST ESI,ESI
71D01686 . 75 05 JNZ SHORT test.71D0168D
71D01688 . 33C0 XOR EAX,EAX
71D0168A . 40 INC EAX
71D0168B . 5E POP ESI
71D0168C . C3 RETN
71D0168D > 8326 00 AND DWORD PTR DS:[ESI],0
71D01690 . E8 28050000 CALL test.71D01BBD
71D01695 . 68 E31BD071 PUSH test.71D01BE3
71D0169A . E8 07050000 CALL test.71D01BA6
71D0169F . C70424 F91AD07>MOV DWORD PTR SS:[ESP],test.71D01AF9 ; |
71D016A6 . E8 FB040000 CALL test.71D01BA6 ; \test.71D01BA6
71D016AB . 59 POP ECX
71D016AC . 33C0 XOR EAX,EAX
71D016AE . 5E POP ESI
71D016AF . C3 RETN
71D016B0 /$ 8BFF MOV EDI,EDI
71D016B2 |. 55 PUSH EBP
71D016B3 |. 8BEC MOV EBP,ESP
71D016B5 |. 51 PUSH ECX
71D016B6 |. 51 PUSH ECX
71D016B7 |. 53 PUSH EBX
71D016B8 |. 33C0 XOR EAX,EAX
71D016BA |. 56 PUSH ESI
71D016BB |. 57 PUSH EDI
71D016BC |. 3945 0C CMP DWORD PTR SS:[EBP+C],EAX
71D016BF |. 75 32 JNZ SHORT test.71D016F3
71D016C1 |. 3905 2030D071 CMP DWORD PTR DS:[71D03020],EAX
71D016C7 |. 7E 23 JLE SHORT test.71D016EC
71D016C9 |. 64:A1 18000000 MOV EAX,DWORD PTR FS:[18]
71D016CF |. FF0D 2030D071 DEC DWORD PTR DS:[71D03020]
71D016D5 |. 8B58 04 MOV EBX,DWORD PTR DS:[EAX+4]
71D016D8 |. 8365 FC 00 AND DWORD PTR SS:[EBP-4],0
71D016DC |. 8B35 3020D071 MOV ESI,DWORD PTR DS:[<&KERNEL32.Interlo>; kernel32.InterlockedCompareExchange
71D016E2 |. BF 6033D071 MOV EDI,test.71D03360
71D016E7 |. E9 EA000000 JMP test.71D017D6
71D016EC |> 33C0 XOR EAX,EAX
71D016EE |. E9 C0010000 JMP test.71D018B3
71D016F3 |> 837D 0C 01 CMP DWORD PTR SS:[EBP+C],1
71D016F7 |. 0F85 B3010000 JNZ test.71D018B0
71D016FD |. 64:8B0D 180000>MOV ECX,DWORD PTR FS:[18]
71D01704 |. 8B59 04 MOV EBX,DWORD PTR DS:[ECX+4]
71D01707 |. 8B35 3020D071 MOV ESI,DWORD PTR DS:[<&KERNEL32.Interlo>; kernel32.InterlockedCompareExchange
71D0170D |. 8945 0C MOV DWORD PTR SS:[EBP+C],EAX
71D01710 |. 50 PUSH EAX
71D01711 |. BF 6033D071 MOV EDI,test.71D03360
71D01716 |. EB 11 JMP SHORT test.71D01729
71D01718 |> 3BC3 /CMP EAX,EBX
71D0171A |. 74 17 |JE SHORT test.71D01733
71D0171C |. 68 E8030000 |PUSH 3E8 ; /Timeout = 1000. ms
71D01721 |. FF15 0420D071 |CALL DWORD PTR DS:[<&KERNEL32.Sleep>] ; \Sleep
71D01727 |. 6A 00 |PUSH 0
71D01729 |> 53 PUSH EBX
71D0172A |. 57 |PUSH EDI
71D0172B |. FFD6 |CALL ESI
71D0172D |. 85C0 |TEST EAX,EAX
71D0172F |.^75 E7 \JNZ SHORT test.71D01718
71D01731 |. EB 07 JMP SHORT test.71D0173A
71D01733 |> C745 0C 010000>MOV DWORD PTR SS:[EBP+C],1
71D0173A |> A1 5C33D071 MOV EAX,DWORD PTR DS:[71D0335C]
71D0173F |. 6A 02 PUSH 2
71D01741 |. 5E POP ESI
71D01742 |. 85C0 TEST EAX,EAX
71D01744 |. 74 09 JE SHORT test.71D0174F
71D01746 |. 6A 1F PUSH 1F
71D01748 |. E8 1B060000 CALL <JMP.&MSVCR100._amsg_exit>
71D0174D |. EB 39 JMP SHORT test.71D01788
71D0174F |> 68 A820D071 PUSH test.71D020A8
71D01754 |. 68 A020D071 PUSH test.71D020A0
71D01759 |. C705 5C33D071 >MOV DWORD PTR DS:[71D0335C],1
71D01763 |. E8 FA050000 CALL <JMP.&MSVCR100._initterm_e>
71D01768 |. 59 POP ECX
71D01769 |. 59 POP ECX
71D0176A |. 85C0 TEST EAX,EAX
71D0176C |.^0F85 7AFFFFFF JNZ test.71D016EC
71D01772 |. 68 9C20D071 PUSH test.71D0209C
71D01777 |. 68 9820D071 PUSH test.71D02098
71D0177C |. E8 DB050000 CALL <JMP.&MSVCR100._initterm>
71D01781 |. 59 POP ECX
71D01782 |. 8935 5C33D071 MOV DWORD PTR DS:[71D0335C],ESI
71D01788 |> 33DB XOR EBX,EBX
71D0178A |. 59 POP ECX
71D0178B |. 395D 0C CMP DWORD PTR SS:[EBP+C],EBX
71D0178E |. 75 08 JNZ SHORT test.71D01798
71D01790 |. 53 PUSH EBX ; /NewValue => 0
71D01791 |. 57 PUSH EDI ; |pTarget
71D01792 |. FF15 3420D071 CALL DWORD PTR DS:[<&KERNEL32.Interlocke>; \InterlockedExchange
71D01798 |> 391D 6C33D071 CMP DWORD PTR DS:[71D0336C],EBX
71D0179E |. 74 1C JE SHORT test.71D017BC
71D017A0 |. 68 6C33D071 PUSH test.71D0336C
71D017A5 |. E8 F6040000 CALL test.71D01CA0
71D017AA |. 59 POP ECX
71D017AB |. 85C0 TEST EAX,EAX
71D017AD |. 74 0D JE SHORT test.71D017BC
71D017AF |. FF75 10 PUSH DWORD PTR SS:[EBP+10]
71D017B2 |. 56 PUSH ESI
71D017B3 |. FF75 08 PUSH DWORD PTR SS:[EBP+8]
71D017B6 |. FF15 6C33D071 CALL DWORD PTR DS:[71D0336C]
71D017BC |> FF05 2030D071 INC DWORD PTR DS:[71D03020]
71D017C2 |. E9 E9000000 JMP test.71D018B0
71D017C7 |> 3BC3 /CMP EAX,EBX
71D017C9 |. 74 17 |JE SHORT test.71D017E2
71D017CB |. 68 E8030000 |PUSH 3E8 ; /Timeout = 1000. ms
71D017D0 |. FF15 0420D071 |CALL DWORD PTR DS:[<&KERNEL32.Sleep>] ; \Sleep
71D017D6 |> 6A 00 PUSH 0
71D017D8 |. 53 |PUSH EBX
71D017D9 |. 57 |PUSH EDI
71D017DA |. FFD6 |CALL ESI
71D017DC |. 85C0 |TEST EAX,EAX
71D017DE |.^75 E7 \JNZ SHORT test.71D017C7
71D017E0 |. EB 07 JMP SHORT test.71D017E9
71D017E2 |> C745 FC 010000>MOV DWORD PTR SS:[EBP-4],1
71D017E9 |> A1 5C33D071 MOV EAX,DWORD PTR DS:[71D0335C]
71D017EE |. 83F8 02 CMP EAX,2
71D017F1 |. 74 0D JE SHORT test.71D01800
71D017F3 |. 6A 1F PUSH 1F
71D017F5 |. E8 6E050000 CALL <JMP.&MSVCR100._amsg_exit>
71D017FA |. 59 POP ECX
71D017FB |. E9 B0000000 JMP test.71D018B0
71D01800 |> FF35 6833D071 PUSH DWORD PTR DS:[71D03368]
71D01806 |. 8B35 3820D071 MOV ESI,DWORD PTR DS:[<&KERNEL32.DecodeP>; ntdll.RtlDecodePointer
71D0180C |. FFD6 CALL ESI ; <&KERNEL32.DecodePointer>
71D0180E |. 8945 0C MOV DWORD PTR SS:[EBP+C],EAX
71D01811 |. 85C0 TEST EAX,EAX
71D01813 |. 0F84 83000000 JE test.71D0189C
71D01819 |. FF35 6433D071 PUSH DWORD PTR DS:[71D03364]
71D0181F |. FFD6 CALL ESI
71D01821 |. 8BD8 MOV EBX,EAX
71D01823 |. 8B45 0C MOV EAX,DWORD PTR SS:[EBP+C]
71D01826 |. 8945 10 MOV DWORD PTR SS:[EBP+10],EAX
71D01829 |. 895D 08 MOV DWORD PTR SS:[EBP+8],EBX
71D0182C |> 83EB 04 /SUB EBX,4
71D0182F |. 3B5D 0C |CMP EBX,DWORD PTR SS:[EBP+C]
71D01832 |. 72 4E |JB SHORT test.71D01882
71D01834 |. 833B 00 |CMP DWORD PTR DS:[EBX],0
71D01837 |.^74 F3 |JE SHORT test.71D0182C
71D01839 |. FF15 7020D071 |CALL DWORD PTR DS:[<&MSVCR100._encoded_>; MSVCR1_1._encoded_null
71D0183F |. 3903 |CMP DWORD PTR DS:[EBX],EAX
71D01841 |.^74 E9 |JE SHORT test.71D0182C
71D01843 |. FF33 |PUSH DWORD PTR DS:[EBX]
71D01845 |. FFD6 |CALL ESI
71D01847 |. 8945 F8 |MOV DWORD PTR SS:[EBP-8],EAX
71D0184A |. FF15 7020D071 |CALL DWORD PTR DS:[<&MSVCR100._encoded_>; MSVCR1_1._encoded_null
71D01850 |. 8903 |MOV DWORD PTR DS:[EBX],EAX
71D01852 |. FF55 F8 |CALL DWORD PTR SS:[EBP-8]
71D01855 |. FF35 6833D071 |PUSH DWORD PTR DS:[71D03368]
71D0185B |. FFD6 |CALL ESI
71D0185D |. FF35 6433D071 |PUSH DWORD PTR DS:[71D03364]
71D01863 |. 8945 F8 |MOV DWORD PTR SS:[EBP-8],EAX
71D01866 |. FFD6 |CALL ESI
71D01868 |. 8B4D F8 |MOV ECX,DWORD PTR SS:[EBP-8]
71D0186B |. 394D 10 |CMP DWORD PTR SS:[EBP+10],ECX
71D0186E |. 75 05 |JNZ SHORT test.71D01875
71D01870 |. 3945 08 |CMP DWORD PTR SS:[EBP+8],EAX
71D01873 |.^74 B7 |JE SHORT test.71D0182C
71D01875 |> 894D 10 |MOV DWORD PTR SS:[EBP+10],ECX
71D01878 |. 894D 0C |MOV DWORD PTR SS:[EBP+C],ECX
71D0187B |. 8945 08 |MOV DWORD PTR SS:[EBP+8],EAX
71D0187E |. 8BD8 |MOV EBX,EAX
71D01880 |.^EB AA \JMP SHORT test.71D0182C
71D01882 |> FF75 0C PUSH DWORD PTR SS:[EBP+C] ; /block
71D01885 |. FF15 7420D071 CALL DWORD PTR DS:[<&MSVCR100.free>] ; \free
71D0188B |. 59 POP ECX
71D0188C |. FF15 7020D071 CALL DWORD PTR DS:[<&MSVCR100._encoded_n>; MSVCR1_1._encoded_null
71D01892 |. A3 6433D071 MOV DWORD PTR DS:[71D03364],EAX
71D01897 |. A3 6833D071 MOV DWORD PTR DS:[71D03368],EAX
71D0189C |> 33C0 XOR EAX,EAX
71D0189E |. A3 5C33D071 MOV DWORD PTR DS:[71D0335C],EAX
71D018A3 |. 3945 FC CMP DWORD PTR SS:[EBP-4],EAX
71D018A6 |. 75 08 JNZ SHORT test.71D018B0
71D018A8 |. 50 PUSH EAX ; /NewValue => 0
71D018A9 |. 57 PUSH EDI ; |pTarget
71D018AA |. FF15 3420D071 CALL DWORD PTR DS:[<&KERNEL32.Interlocke>; \InterlockedExchange
71D018B0 |> 33C0 XOR EAX,EAX
71D018B2 |. 40 INC EAX
71D018B3 |> 5F POP EDI
71D018B4 |. 5E POP ESI
71D018B5 |. 5B POP EBX
71D018B6 |. C9 LEAVE
71D018B7 \. C2 0C00 RETN 0C
71D018BA $ 6A 10 PUSH 10
71D018BC . 68 E822D071 PUSH test.71D022E8
71D018C1 . E8 BA040000 CALL test.71D01D80
71D018C6 . 8BF9 MOV EDI,ECX
71D018C8 . 8BF2 MOV ESI,EDX
71D018CA . 8B5D 08 MOV EBX,DWORD PTR SS:[EBP+8]
71D018CD . 33C0 XOR EAX,EAX
71D018CF . 40 INC EAX
71D018D0 . 8945 E4 MOV DWORD PTR SS:[EBP-1C],EAX
71D018D3 . 33C9 XOR ECX,ECX
71D018D5 . 894D FC MOV DWORD PTR SS:[EBP-4],ECX
71D018D8 . 8935 0830D071 MOV DWORD PTR DS:[71D03008],ESI
71D018DE . 8945 FC MOV DWORD PTR SS:[EBP-4],EAX
71D018E1 . 3BF1 CMP ESI,ECX
71D018E3 . 75 10 JNZ SHORT test.71D018F5
71D018E5 . 390D 2030D071 CMP DWORD PTR DS:[71D03020],ECX
71D018EB . 75 08 JNZ SHORT test.71D018F5
71D018ED . 894D E4 MOV DWORD PTR SS:[EBP-1C],ECX
71D018F0 . E9 B7000000 JMP test.71D019AC
71D018F5 > 3BF0 CMP ESI,EAX
71D018F7 . 74 05 JE SHORT test.71D018FE
71D018F9 . 83FE 02 CMP ESI,2
71D018FC . 75 2E JNZ SHORT test.71D0192C
71D018FE > A1 CC20D071 MOV EAX,DWORD PTR DS:[71D020CC]
71D01903 . 3BC1 CMP EAX,ECX
71D01905 . 74 08 JE SHORT test.71D0190F
71D01907 . 57 PUSH EDI
71D01908 . 56 PUSH ESI
71D01909 . 53 PUSH EBX
71D0190A . FFD0 CALL EAX
71D0190C . 8945 E4 MOV DWORD PTR SS:[EBP-1C],EAX
71D0190F > 837D E4 00 CMP DWORD PTR SS:[EBP-1C],0
71D01913 . 0F84 93000000 JE test.71D019AC
71D01919 . 57 PUSH EDI
71D0191A . 56 PUSH ESI
71D0191B . 53 PUSH EBX
71D0191C . E8 8FFDFFFF CALL test.71D016B0
71D01921 . 8945 E4 MOV DWORD PTR SS:[EBP-1C],EAX
71D01924 . 85C0 TEST EAX,EAX
71D01926 . 0F84 80000000 JE test.71D019AC
71D0192C > 57 PUSH EDI ; /Arg3
71D0192D . 56 PUSH ESI ; |Arg2
71D0192E . 53 PUSH EBX ; |Arg1
71D0192F . E8 CCFCFFFF CALL test.71D01600 ; \test.71D01600
71D01934 . 8945 E4 MOV DWORD PTR SS:[EBP-1C],EAX
71D01937 . 83FE 01 CMP ESI,1
71D0193A . 75 24 JNZ SHORT test.71D01960
71D0193C . 85C0 TEST EAX,EAX
71D0193E . 75 20 JNZ SHORT test.71D01960
71D01940 . 57 PUSH EDI ; /Arg3
71D01941 . 50 PUSH EAX ; |Arg2
71D01942 . 53 PUSH EBX ; |Arg1
71D01943 . E8 B8FCFFFF CALL test.71D01600 ; \test.71D01600
71D01948 . 57 PUSH EDI
71D01949 . 6A 00 PUSH 0
71D0194B . 53 PUSH EBX
71D0194C . E8 5FFDFFFF CALL test.71D016B0
71D01951 . A1 CC20D071 MOV EAX,DWORD PTR DS:[71D020CC]
71D01956 . 85C0 TEST EAX,EAX
71D01958 . 74 06 JE SHORT test.71D01960
71D0195A . 57 PUSH EDI
71D0195B . 6A 00 PUSH 0
71D0195D . 53 PUSH EBX
71D0195E . FFD0 CALL EAX
71D01960 > 85F6 TEST ESI,ESI
71D01962 . 74 05 JE SHORT test.71D01969
71D01964 . 83FE 03 CMP ESI,3
71D01967 . 75 43 JNZ SHORT test.71D019AC
71D01969 > 57 PUSH EDI
71D0196A . 56 PUSH ESI
71D0196B . 53 PUSH EBX
71D0196C . E8 3FFDFFFF CALL test.71D016B0
71D01971 . 85C0 TEST EAX,EAX
71D01973 . 75 03 JNZ SHORT test.71D01978
71D01975 . 2145 E4 AND DWORD PTR SS:[EBP-1C],EAX
71D01978 > 837D E4 00 CMP DWORD PTR SS:[EBP-1C],0
71D0197C . 74 2E JE SHORT test.71D019AC
71D0197E . A1 CC20D071 MOV EAX,DWORD PTR DS:[71D020CC]
71D01983 . 85C0 TEST EAX,EAX
71D01985 . 74 25 JE SHORT test.71D019AC
71D01987 . 57 PUSH EDI
71D01988 . 56 PUSH ESI
71D01989 . 53 PUSH EBX
71D0198A . FFD0 CALL EAX
71D0198C . 8945 E4 MOV DWORD PTR SS:[EBP-1C],EAX
71D0198F . EB 1B JMP SHORT test.71D019AC
71D01991 . 8B45 EC MOV EAX,DWORD PTR SS:[EBP-14]
71D01994 . 8B08 MOV ECX,DWORD PTR DS:[EAX]
71D01996 . 8B09 MOV ECX,DWORD PTR DS:[ECX]
71D01998 . 894D E0 MOV DWORD PTR SS:[EBP-20],ECX
71D0199B . 50 PUSH EAX
71D0199C . 51 PUSH ECX
71D0199D . E8 CC030000 CALL <JMP.&MSVCR100.__CppXcptFilter>
71D019A2 . 59 POP ECX
71D019A3 . 59 POP ECX
71D019A4 . C3 RETN
71D019A5 . 8B65 E8 MOV ESP,DWORD PTR SS:[EBP-18]
71D019A8 . 8365 E4 00 AND DWORD PTR SS:[EBP-1C],0
71D019AC > 8365 FC 00 AND DWORD PTR SS:[EBP-4],0
71D019B0 . C745 FC FEFFFF>MOV DWORD PTR SS:[EBP-4],-2
71D019B7 . E8 09000000 CALL test.71D019C5
71D019BC . 8B45 E4 MOV EAX,DWORD PTR SS:[EBP-1C]
71D019BF . E8 01040000 CALL test.71D01DC5
71D019C4 . C3 RETN
71D019C5 /$ C705 0830D071 >MOV DWORD PTR DS:[71D03008],-1
71D019CF \. C3 RETN
71D019D0 >/$ 8BFF MOV EDI,EDI
71D019D2 |. 55 PUSH EBP
71D019D3 |. 8BEC MOV EBP,ESP
71D019D5 |. 837D 0C 01 CMP DWORD PTR SS:[EBP+C],1
71D019D9 |. 75 05 JNZ SHORT test.71D019E0
71D019DB |. E8 1E040000 CALL test.71D01DFE
71D019E0 |> FF75 08 PUSH DWORD PTR SS:[EBP+8]
71D019E3 |. 8B4D 10 MOV ECX,DWORD PTR SS:[EBP+10]
71D019E6 |. 8B55 0C MOV EDX,DWORD PTR SS:[EBP+C]
71D019E9 |. E8 CCFEFFFF CALL test.71D018BA
71D019EE |. 59 POP ECX
71D019EF |. 5D POP EBP
71D019F0 \. C2 0C00 RETN 0C
71D019F3 8BFF MOV EDI,EDI
71D019F5 55 DB 55 ; CHAR 'U'
71D019F6 8B DB 8B
71D019F7 EC DB EC
71D019F8 81 DB 81
71D019F9 EC DB EC
71D019FA 28 DB 28 ; CHAR '('
71D019FB 03 DB 03
71D019FC 00 DB 00
71D019FD 00 DB 00
71D019FE A3 DB A3
71D019FF . 3031D071 DD test.71D03130
71D01A03 89 DB 89
71D01A04 0D DB 0D
71D01A05 . 2C31D071 DD test.71D0312C
71D01A09 89 DB 89
71D01A0A 15 DB 15
71D01A0B . 2831D071 DD test.71D03128
71D01A0F 89 DB 89
71D01A10 1D DB 1D
71D01A11 . 2431D071 DD test.71D03124
71D01A15 89 DB 89
71D01A16 35 DB 35 ; CHAR '5'
71D01A17 . 2031D071 DD test.71D03120
71D01A1B 89 DB 89
71D01A1C 3D DB 3D ; CHAR '='
71D01A1D . 1C31D071 DD test.71D0311C
71D01A21 66 DB 66 ; CHAR 'f'
71D01A22 8C DB 8C
71D01A23 15 DB 15
71D01A24 . 4831D071 DD test.71D03148
71D01A28 . 66:8C0D 3C31D0>MOV WORD PTR DS:[71D0313C],CS
71D01A2F . 66:8C1D 1831D0>MOV WORD PTR DS:[71D03118],DS
71D01A36 . 66:8C05 1431D0>MOV WORD PTR DS:[71D03114],ES
71D01A3D . 66:8C25 1031D0>MOV WORD PTR DS:[71D03110],FS
71D01A44 . 66:8C2D 0C31D0>MOV WORD PTR DS:[71D0310C],GS
71D01A4B . 9C PUSHFD
71D01A4C . 8F05 4031D071 POP DWORD PTR DS:[71D03140]
71D01A52 . 8B45 00 MOV EAX,DWORD PTR SS:[EBP]
71D01A55 . A3 3431D071 MOV DWORD PTR DS:[71D03134],EAX
71D01A5A . 8B45 04 MOV EAX,DWORD PTR SS:[EBP+4]
71D01A5D . A3 3831D071 MOV DWORD PTR DS:[71D03138],EAX
71D01A62 . 8D45 08 LEA EAX,DWORD PTR SS:[EBP+8]
71D01A65 . A3 4431D071 MOV DWORD PTR DS:[71D03144],EAX
71D01A6A . 8B85 E0FCFFFF MOV EAX,DWORD PTR SS:[EBP-320]
71D01A70 . C705 8030D071 >MOV DWORD PTR DS:[71D03080],10001
71D01A7A . A1 3831D071 MOV EAX,DWORD PTR DS:[71D03138]
71D01A7F . A3 3430D071 MOV DWORD PTR DS:[71D03034],EAX
71D01A84 . C705 2830D071 >MOV DWORD PTR DS:[71D03028],C0000409
71D01A8E . C705 2C30D071 >MOV DWORD PTR DS:[71D0302C],1
71D01A98 . A1 0030D071 MOV EAX,DWORD PTR DS:[71D03000]
71D01A9D . 8985 D8FCFFFF MOV DWORD PTR SS:[EBP-328],EAX
71D01AA3 . A1 0430D071 MOV EAX,DWORD PTR DS:[71D03004]
71D01AA8 . 8985 DCFCFFFF MOV DWORD PTR SS:[EBP-324],EAX
71D01AAE . FF15 1C20D071 CALL DWORD PTR DS:[<&KERNEL32.IsDebugger>; [IsDebuggerPresent
71D01AB4 . A3 7830D071 MOV DWORD PTR DS:[71D03078],EAX
71D01AB9 . 6A 01 PUSH 1
71D01ABB . E8 DA030000 CALL <JMP.&MSVCR100._crt_debugger_hook>
71D01AC0 . 59 POP ECX
71D01AC1 . 6A 00 PUSH 0 ; /pTopLevelFilter = NULL
71D01AC3 . FF15 2020D071 CALL DWORD PTR DS:[<&KERNEL32.SetUnhandl>; \SetUnhandledExceptionFilter
71D01AC9 . 68 D020D071 PUSH test.71D020D0 ; /pExceptionInfo = test.71D020D0
71D01ACE . FF15 2420D071 CALL DWORD PTR DS:[<&KERNEL32.UnhandledE>; \UnhandledExceptionFilter
71D01AD4 . 833D 7830D071 >CMP DWORD PTR DS:[71D03078],0
71D01ADB . 75 08 JNZ SHORT test.71D01AE5
71D01ADD . 6A 01 PUSH 1
71D01ADF . E8 B6030000 CALL <JMP.&MSVCR100._crt_debugger_hook>
71D01AE4 . 59 POP ECX
71D01AE5 > 68 090400C0 PUSH C0000409 ; /ExitCode = C0000409 (-1073740791.)
71D01AEA . FF15 2820D071 CALL DWORD PTR DS:[<&KERNEL32.GetCurrent>; |[GetCurrentProcess
71D01AF0 . 50 PUSH EAX ; |hProcess
71D01AF1 . FF15 2C20D071 CALL DWORD PTR DS:[<&KERNEL32.TerminateP>; \TerminateProcess
71D01AF7 . C9 LEAVE
71D01AF8 . C3 RETN
71D01AF9 . 68 4C33D071 PUSH test.71D0334C
71D01AFE . E8 9D030000 CALL <JMP.&MSVCR100.__clean_type_info_na>
71D01B03 . 59 POP ECX
71D01B04 . C3 RETN
71D01B05 /$ 6A 14 PUSH 14
71D01B07 |. 68 1023D071 PUSH test.71D02310
71D01B0C |. E8 6F020000 CALL test.71D01D80
71D01B11 |. FF35 6833D071 PUSH DWORD PTR DS:[71D03368]
71D01B17 |. 8B35 3820D071 MOV ESI,DWORD PTR DS:[<&KERNEL32.DecodeP>; ntdll.RtlDecodePointer
71D01B1D |. FFD6 CALL ESI ; <&KERNEL32.DecodePointer>
71D01B1F |. 8945 E4 MOV DWORD PTR SS:[EBP-1C],EAX
71D01B22 |. 83F8 FF CMP EAX,-1
71D01B25 |. 75 0C JNZ SHORT test.71D01B33
71D01B27 |. FF75 08 PUSH DWORD PTR SS:[EBP+8] ; /func
71D01B2A |. FF15 5420D071 CALL DWORD PTR DS:[<&MSVCR100._onexit>] ; \_onexit
71D01B30 |. 59 POP ECX
71D01B31 |. EB 64 JMP SHORT test.71D01B97
71D01B33 |> 6A 08 PUSH 8
71D01B35 |. E8 78030000 CALL <JMP.&MSVCR100._lock>
71D01B3A |. 59 POP ECX
71D01B3B |. 8365 FC 00 AND DWORD PTR SS:[EBP-4],0
71D01B3F |. FF35 6833D071 PUSH DWORD PTR DS:[71D03368]
71D01B45 |. FFD6 CALL ESI
71D01B47 |. 8945 E4 MOV DWORD PTR SS:[EBP-1C],EAX
71D01B4A |. FF35 6433D071 PUSH DWORD PTR DS:[71D03364]
71D01B50 |. FFD6 CALL ESI
71D01B52 |. 8945 E0 MOV DWORD PTR SS:[EBP-20],EAX
71D01B55 |. 8D45 E0 LEA EAX,DWORD PTR SS:[EBP-20]
71D01B58 |. 50 PUSH EAX
71D01B59 |. 8D45 E4 LEA EAX,DWORD PTR SS:[EBP-1C]
71D01B5C |. 50 PUSH EAX
71D01B5D |. FF75 08 PUSH DWORD PTR SS:[EBP+8]
71D01B60 |. 8B35 3C20D071 MOV ESI,DWORD PTR DS:[<&KERNEL32.EncodeP>; ntdll.RtlEncodePointer
71D01B66 |. FFD6 CALL ESI ; <&KERNEL32.EncodePointer>
71D01B68 |. 50 PUSH EAX
71D01B69 |. E8 3E030000 CALL <JMP.&MSVCR100.__dllonexit>
71D01B6E |. 83C4 0C ADD ESP,0C
71D01B71 |. 8945 DC MOV DWORD PTR SS:[EBP-24],EAX
71D01B74 |. FF75 E4 PUSH DWORD PTR SS:[EBP-1C]
71D01B77 |. FFD6 CALL ESI
71D01B79 |. A3 6833D071 MOV DWORD PTR DS:[71D03368],EAX
71D01B7E |. FF75 E0 PUSH DWORD PTR SS:[EBP-20]
71D01B81 |. FFD6 CALL ESI
71D01B83 |. A3 6433D071 MOV DWORD PTR DS:[71D03364],EAX
71D01B88 |. C745 FC FEFFFF>MOV DWORD PTR SS:[EBP-4],-2
71D01B8F |. E8 09000000 CALL test.71D01B9D
71D01B94 |. 8B45 DC MOV EAX,DWORD PTR SS:[EBP-24]
71D01B97 |> E8 29020000 CALL test.71D01DC5
71D01B9C \. C3 RETN
71D01B9D /$ 6A 08 PUSH 8
71D01B9F |. E8 02030000 CALL <JMP.&MSVCR100._unlock>
71D01BA4 |. 59 POP ECX
71D01BA5 \. C3 RETN
71D01BA6 /$ 8BFF MOV EDI,EDI
71D01BA8 |. 55 PUSH EBP
71D01BA9 |. 8BEC MOV EBP,ESP
71D01BAB |. FF75 08 PUSH DWORD PTR SS:[EBP+8]
71D01BAE |. E8 52FFFFFF CALL test.71D01B05
71D01BB3 |. F7D8 NEG EAX
71D01BB5 |. 1BC0 SBB EAX,EAX
71D01BB7 |. F7D8 NEG EAX
71D01BB9 |. 59 POP ECX
71D01BBA |. 48 DEC EAX
71D01BBB |. 5D POP EBP
71D01BBC \. C3 RETN
71D01BBD /$ 8BFF MOV EDI,EDI
71D01BBF |. 56 PUSH ESI
71D01BC0 |. B8 D822D071 MOV EAX,test.71D022D8
71D01BC5 |. BE D822D071 MOV ESI,test.71D022D8
71D01BCA |. 57 PUSH EDI
71D01BCB |. 8BF8 MOV EDI,EAX
71D01BCD |. 3BC6 CMP EAX,ESI
71D01BCF |. 73 0F JNB SHORT test.71D01BE0
71D01BD1 |> 8B07 /MOV EAX,DWORD PTR DS:[EDI]
71D01BD3 |. 85C0 |TEST EAX,EAX
71D01BD5 |. 74 02 |JE SHORT test.71D01BD9
71D01BD7 |. FFD0 |CALL EAX
71D01BD9 |> 83C7 04 |ADD EDI,4
71D01BDC |. 3BFE |CMP EDI,ESI
71D01BDE |.^72 F1 \JB SHORT test.71D01BD1
71D01BE0 |> 5F POP EDI
71D01BE1 |. 5E POP ESI
71D01BE2 \. C3 RETN
71D01BE3 8BFF MOV EDI,EDI
71D01BE5 . 56 PUSH ESI
71D01BE6 . B8 E022D071 MOV EAX,test.71D022E0
71D01BEB . BE E022D071 MOV ESI,test.71D022E0
71D01BF0 . 57 PUSH EDI
71D01BF1 . 8BF8 MOV EDI,EAX
71D01BF3 . 3BC6 CMP EAX,ESI
71D01BF5 . 73 0F JNB SHORT test.71D01C06
71D01BF7 > 8B07 MOV EAX,DWORD PTR DS:[EDI]
71D01BF9 . 85C0 TEST EAX,EAX
71D01BFB . 74 02 JE SHORT test.71D01BFF
71D01BFD . FFD0 CALL EAX
71D01BFF > 83C7 04 ADD EDI,4
71D01C02 . 3BFE CMP EDI,ESI
71D01C04 .^72 F1 JB SHORT test.71D01BF7
71D01C06 > 5F POP EDI
71D01C07 . 5E POP ESI
71D01C08 . C3 RETN
71D01C09 CC INT3
71D01C0A CC INT3
71D01C0B CC INT3
71D01C0C CC INT3
71D01C0D CC INT3
71D01C0E CC INT3
71D01C0F CC INT3
71D01C10 /$ 8BFF MOV EDI,EDI
71D01C12 |. 55 PUSH EBP
71D01C13 |. 8BEC MOV EBP,ESP
71D01C15 |. 8B4D 08 MOV ECX,DWORD PTR SS:[EBP+8]
71D01C18 |. B8 4D5A0000 MOV EAX,5A4D
71D01C1D |. 66:3901 CMP WORD PTR DS:[ECX],AX
71D01C20 |. 74 04 JE SHORT test.71D01C26
71D01C22 |> 33C0 XOR EAX,EAX
71D01C24 |. 5D POP EBP
71D01C25 |. C3 RETN
71D01C26 |> 8B41 3C MOV EAX,DWORD PTR DS:[ECX+3C]
71D01C29 |. 03C1 ADD EAX,ECX
71D01C2B |. 8138 50450000 CMP DWORD PTR DS:[EAX],4550
71D01C31 |.^75 EF JNZ SHORT test.71D01C22
71D01C33 |. 33D2 XOR EDX,EDX
71D01C35 |. B9 0B010000 MOV ECX,10B
71D01C3A |. 66:3948 18 CMP WORD PTR DS:[EAX+18],CX
71D01C3E |. 0F94C2 SETE DL
71D01C41 |. 8BC2 MOV EAX,EDX
71D01C43 |. 5D POP EBP
71D01C44 \. C3 RETN
71D01C45 CC INT3
71D01C46 CC INT3
71D01C47 CC INT3
71D01C48 CC INT3
71D01C49 CC INT3
71D01C4A CC INT3
71D01C4B CC INT3
71D01C4C CC INT3
71D01C4D CC INT3
71D01C4E CC INT3
71D01C4F CC INT3
71D01C50 /$ 8BFF MOV EDI,EDI
71D01C52 |. 55 PUSH EBP
71D01C53 |. 8BEC MOV EBP,ESP
71D01C55 |. 8B45 08 MOV EAX,DWORD PTR SS:[EBP+8]
71D01C58 |. 8B48 3C MOV ECX,DWORD PTR DS:[EAX+3C]
71D01C5B |. 03C8 ADD ECX,EAX
71D01C5D |. 0FB741 14 MOVZX EAX,WORD PTR DS:[ECX+14]
71D01C61 |. 53 PUSH EBX
71D01C62 |. 56 PUSH ESI
71D01C63 |. 0FB771 06 MOVZX ESI,WORD PTR DS:[ECX+6]
71D01C67 |. 33D2 XOR EDX,EDX
71D01C69 |. 57 PUSH EDI
71D01C6A |. 8D4408 18 LEA EAX,DWORD PTR DS:[EAX+ECX+18]
71D01C6E |. 85F6 TEST ESI,ESI
71D01C70 |. 74 1B JE SHORT test.71D01C8D
71D01C72 |. 8B7D 0C MOV EDI,DWORD PTR SS:[EBP+C]
71D01C75 |> 8B48 0C /MOV ECX,DWORD PTR DS:[EAX+C]
71D01C78 |. 3BF9 |CMP EDI,ECX
71D01C7A |. 72 09 |JB SHORT test.71D01C85
71D01C7C |. 8B58 08 |MOV EBX,DWORD PTR DS:[EAX+8]
71D01C7F |. 03D9 |ADD EBX,ECX
71D01C81 |. 3BFB |CMP EDI,EBX
71D01C83 |. 72 0A |JB SHORT test.71D01C8F
71D01C85 |> 42 |INC EDX
71D01C86 |. 83C0 28 |ADD EAX,28
71D01C89 |. 3BD6 |CMP EDX,ESI
71D01C8B |.^72 E8 \JB SHORT test.71D01C75
71D01C8D |> 33C0 XOR EAX,EAX
71D01C8F |> 5F POP EDI
71D01C90 |. 5E POP ESI
71D01C91 |. 5B POP EBX
71D01C92 |. 5D POP EBP
71D01C93 \. C3 RETN
71D01C94 CC INT3
71D01C95 CC INT3
71D01C96 CC INT3
71D01C97 CC INT3
71D01C98 CC INT3
71D01C99 CC INT3
71D01C9A CC INT3
71D01C9B CC INT3
71D01C9C CC INT3
71D01C9D CC INT3
71D01C9E CC INT3
71D01C9F CC INT3
71D01CA0 $ 8BFF MOV EDI,EDI
71D01CA2 . 55 PUSH EBP
71D01CA3 . 8BEC MOV EBP,ESP
71D01CA5 . 6A FE PUSH -2
71D01CA7 . 68 3023D071 PUSH test.71D02330
71D01CAC . 68 D91DD071 PUSH test.71D01DD9
71D01CB1 . 64:A1 00000000 MOV EAX,DWORD PTR FS:[0]
71D01CB7 . 50 PUSH EAX
71D01CB8 . 83EC 08 SUB ESP,8
71D01CBB . 53 PUSH EBX
71D01CBC . 56 PUSH ESI
71D01CBD . 57 PUSH EDI
71D01CBE . A1 0030D071 MOV EAX,DWORD PTR DS:[71D03000]
71D01CC3 . 3145 F8 XOR DWORD PTR SS:[EBP-8],EAX
71D01CC6 . 33C5 XOR EAX,EBP
71D01CC8 . 50 PUSH EAX
71D01CC9 . 8D45 F0 LEA EAX,DWORD PTR SS:[EBP-10]
71D01CCC . 64:A3 00000000 MOV DWORD PTR FS:[0],EAX
71D01CD2 . 8965 E8 MOV DWORD PTR SS:[EBP-18],ESP
71D01CD5 . C745 FC 000000>MOV DWORD PTR SS:[EBP-4],0
71D01CDC . 68 0000D071 PUSH test.71D00000 ; /Arg1 = 71D00000
71D01CE1 . E8 2AFFFFFF CALL test.71D01C10 ; \test.71D01C10
71D01CE6 . 83C4 04 ADD ESP,4
71D01CE9 . 85C0 TEST EAX,EAX
71D01CEB . 74 54 JE SHORT test.71D01D41
71D01CED . 8B45 08 MOV EAX,DWORD PTR SS:[EBP+8]
71D01CF0 . 2D 0000D071 SUB EAX,test.71D00000
71D01CF5 . 50 PUSH EAX ; /Arg2
71D01CF6 . 68 0000D071 PUSH test.71D00000 ; |Arg1 = 71D00000
71D01CFB . E8 50FFFFFF CALL test.71D01C50 ; \test.71D01C50
71D01D00 . 83C4 08 ADD ESP,8
71D01D03 . 85C0 TEST EAX,EAX
71D01D05 . 74 3A JE SHORT test.71D01D41
71D01D07 . 8B40 24 MOV EAX,DWORD PTR DS:[EAX+24]
71D01D0A . C1E8 1F SHR EAX,1F
71D01D0D . F7D0 NOT EAX
71D01D0F . 83E0 01 AND EAX,1
71D01D12 . C745 FC FEFFFF>MOV DWORD PTR SS:[EBP-4],-2
71D01D19 . 8B4D F0 MOV ECX,DWORD PTR SS:[EBP-10]
71D01D1C . 64:890D 000000>MOV DWORD PTR FS:[0],ECX
71D01D23 . 59 POP ECX
71D01D24 . 5F POP EDI
71D01D25 . 5E POP ESI
71D01D26 . 5B POP EBX
71D01D27 . 8BE5 MOV ESP,EBP
71D01D29 . 5D POP EBP
71D01D2A . C3 RETN
71D01D2B . 8B45 EC MOV EAX,DWORD PTR SS:[EBP-14]
71D01D2E . 8B08 MOV ECX,DWORD PTR DS:[EAX]
71D01D30 . 33D2 XOR EDX,EDX
71D01D32 . 8139 050000C0 CMP DWORD PTR DS:[ECX],C0000005
71D01D38 . 0F94C2 SETE DL
71D01D3B . 8BC2 MOV EAX,EDX
71D01D3D . C3 RETN
71D01D3E . 8B65 E8 MOV ESP,DWORD PTR SS:[EBP-18]
71D01D41 > C745 FC FEFFFF>MOV DWORD PTR SS:[EBP-4],-2
71D01D48 . 33C0 XOR EAX,EAX
71D01D4A . 8B4D F0 MOV ECX,DWORD PTR SS:[EBP-10]
71D01D4D . 64:890D 000000>MOV DWORD PTR FS:[0],ECX
71D01D54 . 59 POP ECX
71D01D55 . 5F POP EDI
71D01D56 . 5E POP ESI
71D01D57 . 5B POP EBX
71D01D58 . 8BE5 MOV ESP,EBP
71D01D5A . 5D POP EBP
71D01D5B . C3 RETN
71D01D5C $-FF25 6C20D071 JMP DWORD PTR DS:[<&MSVCR100._initterm>] ; MSVCR1_1._initterm
71D01D62 $-FF25 6820D071 JMP DWORD PTR DS:[<&MSVCR100._initterm_e>; MSVCR1_1._initterm_e
71D01D68 $-FF25 6420D071 JMP DWORD PTR DS:[<&MSVCR100._amsg_exit>>; MSVCR1_1._amsg_exit
71D01D6E $-FF25 6020D071 JMP DWORD PTR DS:[<&MSVCR100.__CppXcptFi>; MSVCR1_1.__CppXcptFilter
71D01D74 CC INT3
71D01D75 CC INT3
71D01D76 CC INT3
71D01D77 CC INT3
71D01D78 CC INT3
71D01D79 CC INT3
71D01D7A CC INT3
71D01D7B CC INT3
71D01D7C CC INT3
71D01D7D CC INT3
71D01D7E CC INT3
71D01D7F CC INT3
71D01D80 /$ 68 D91DD071 PUSH test.71D01DD9
71D01D85 |. 64:FF35 000000>PUSH DWORD PTR FS:[0]
71D01D8C |. 8B4424 10 MOV EAX,DWORD PTR SS:[ESP+10]
71D01D90 |. 896C24 10 MOV DWORD PTR SS:[ESP+10],EBP
71D01D94 |. 8D6C24 10 LEA EBP,DWORD PTR SS:[ESP+10]
71D01D98 |. 2BE0 SUB ESP,EAX
71D01D9A |. 53 PUSH EBX
71D01D9B |. 56 PUSH ESI
71D01D9C |. 57 PUSH EDI
71D01D9D |. A1 0030D071 MOV EAX,DWORD PTR DS:[71D03000]
71D01DA2 |. 3145 FC XOR DWORD PTR SS:[EBP-4],EAX
71D01DA5 |. 33C5 XOR EAX,EBP
71D01DA7 |. 50 PUSH EAX
71D01DA8 |. 8965 E8 MOV DWORD PTR SS:[EBP-18],ESP
71D01DAB |. FF75 F8 PUSH DWORD PTR SS:[EBP-8]
71D01DAE |. 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
71D01DB1 |. C745 FC FEFFFF>MOV DWORD PTR SS:[EBP-4],-2
71D01DB8 |. 8945 F8 MOV DWORD PTR SS:[EBP-8],EAX
71D01DBB |. 8D45 F0 LEA EAX,DWORD PTR SS:[EBP-10]
71D01DBE |. 64:A3 00000000 MOV DWORD PTR FS:[0],EAX
71D01DC4 \. C3 RETN
71D01DC5 /$ 8B4D F0 MOV ECX,DWORD PTR SS:[EBP-10]
71D01DC8 |. 64:890D 000000>MOV DWORD PTR FS:[0],ECX
71D01DCF |. 59 POP ECX
71D01DD0 |. 5F POP EDI
71D01DD1 |. 5F POP EDI
71D01DD2 |. 5E POP ESI
71D01DD3 |. 5B POP EBX
71D01DD4 |. 8BE5 MOV ESP,EBP
71D01DD6 |. 5D POP EBP
71D01DD7 |. 51 PUSH ECX
71D01DD8 \. C3 RETN
71D01DD9 8BFF MOV EDI,EDI
71D01DDB /. 55 PUSH EBP
71D01DDC |. 8BEC MOV EBP,ESP
71D01DDE |. FF75 14 PUSH DWORD PTR SS:[EBP+14]
71D01DE1 |. FF75 10 PUSH DWORD PTR SS:[EBP+10]
71D01DE4 |. FF75 0C PUSH DWORD PTR SS:[EBP+C]
71D01DE7 |. FF75 08 PUSH DWORD PTR SS:[EBP+8]
71D01DEA |. 68 5316D071 PUSH test.71D01653 ; ASCII ";
"
71D01DEF |. 68 0030D071 PUSH test.71D03000
71D01DF4 |. E8 BF000000 CALL <JMP.&MSVCR100._except_handler4_com>
71D01DF9 |. 83C4 18 ADD ESP,18
71D01DFC |. 5D POP EBP
71D01DFD \. C3 RETN
71D01DFE /$ 8BFF MOV EDI,EDI
71D01E00 |. 55 PUSH EBP
71D01E01 |. 8BEC MOV EBP,ESP
71D01E03 |. 83EC 10 SUB ESP,10
71D01E06 |. A1 0030D071 MOV EAX,DWORD PTR DS:[71D03000]
71D01E0B |. 8365 F8 00 AND DWORD PTR SS:[EBP-8],0
71D01E0F |. 8365 FC 00 AND DWORD PTR SS:[EBP-4],0
71D01E13 |. 53 PUSH EBX
71D01E14 |. 57 PUSH EDI
71D01E15 |. BF 4EE640BB MOV EDI,BB40E64E
71D01E1A |. BB 0000FFFF MOV EBX,FFFF0000
71D01E1F |. 3BC7 CMP EAX,EDI
71D01E21 |. 74 0D JE SHORT test.71D01E30
71D01E23 |. 85C3 TEST EBX,EAX
71D01E25 |. 74 09 JE SHORT test.71D01E30
71D01E27 |. F7D0 NOT EAX
71D01E29 |. A3 0430D071 MOV DWORD PTR DS:[71D03004],EAX
71D01E2E |. EB 65 JMP SHORT test.71D01E95
71D01E30 |> 56 PUSH ESI
71D01E31 |. 8D45 F8 LEA EAX,DWORD PTR SS:[EBP-8]
71D01E34 |. 50 PUSH EAX ; /pFileTime
71D01E35 |. FF15 4020D071 CALL DWORD PTR DS:[<&KERNEL32.GetSystemT>; \GetSystemTimeAsFileTime
71D01E3B |. 8B75 FC MOV ESI,DWORD PTR SS:[EBP-4]
71D01E3E |. 3375 F8 XOR ESI,DWORD PTR SS:[EBP-8]
71D01E41 |. FF15 0C20D071 CALL DWORD PTR DS:[<&KERNEL32.GetCurrent>; [GetCurrentProcessId
71D01E47 |. 33F0 XOR ESI,EAX
71D01E49 |. FF15 1020D071 CALL DWORD PTR DS:[<&KERNEL32.GetCurrent>; [GetCurrentThreadId
71D01E4F |. 33F0 XOR ESI,EAX
71D01E51 |. FF15 1420D071 CALL DWORD PTR DS:[<&KERNEL32.GetTickCou>; [GetTickCount
71D01E57 |. 33F0 XOR ESI,EAX
71D01E59 |. 8D45 F0 LEA EAX,DWORD PTR SS:[EBP-10]
71D01E5C |. 50 PUSH EAX ; /pPerformanceCount
71D01E5D |. FF15 1820D071 CALL DWORD PTR DS:[<&KERNEL32.QueryPerfo>; \QueryPerformanceCounter
71D01E63 |. 8B45 F4 MOV EAX,DWORD PTR SS:[EBP-C]
71D01E66 |. 3345 F0 XOR EAX,DWORD PTR SS:[EBP-10]
71D01E69 |. 33F0 XOR ESI,EAX
71D01E6B |. 3BF7 CMP ESI,EDI
71D01E6D |. 75 07 JNZ SHORT test.71D01E76
71D01E6F |. BE 4FE640BB MOV ESI,BB40E64F
71D01E74 |. EB 10 JMP SHORT test.71D01E86
71D01E76 |> 85F3 TEST EBX,ESI
71D01E78 |. 75 0C JNZ SHORT test.71D01E86
71D01E7A |. 8BC6 MOV EAX,ESI
71D01E7C |. 0D 11470000 OR EAX,4711
71D01E81 |. C1E0 10 SHL EAX,10
71D01E84 |. 0BF0 OR ESI,EAX
71D01E86 |> 8935 0030D071 MOV DWORD PTR DS:[71D03000],ESI
71D01E8C |. F7D6 NOT ESI
71D01E8E |. 8935 0430D071 MOV DWORD PTR DS:[71D03004],ESI
71D01E94 |. 5E POP ESI
71D01E95 |> 5F POP EDI
71D01E96 |. 5B POP EBX
71D01E97 |. C9 LEAVE
71D01E98 \. C3 RETN
71D01E99 CC INT3
71D01E9A $-FF25 5C20D071 JMP DWORD PTR DS:[<&MSVCR100._crt_debugg>; MSVCR1_1._crt_debugger_hook
71D01EA0 $-FF25 4820D071 JMP DWORD PTR DS:[<&MSVCR100.__clean_typ>; MSVCR1_1.__clean_type_info_names_internal
71D01EA6 $-FF25 8420D071 JMP DWORD PTR DS:[<&MSVCR100._unlock>] ; MSVCR1_1._unlock
71D01EAC $-FF25 4C20D071 JMP DWORD PTR DS:[<&MSVCR100.__dllonexit>; MSVCR1_1.__dllonexit
71D01EB2 $-FF25 5020D071 JMP DWORD PTR DS:[<&MSVCR100._lock>] ; MSVCR1_1._lock
71D01EB8 $-FF25 5820D071 JMP DWORD PTR DS:[<&MSVCR100._except_han>; MSVCR1_1._except_handler4_common
Can u tell me a working injector please? Thank u 

This thread is closed for replies.



