Detected[H]aaBX Public Hack V1 (MPGH.NET) - Memory Hack - Working

Posts 16–30 of 235 · Page 2 of 16
Detected on win 7 64 bit
Nice! Work in Win7 32 Bits ...
Can you make a hack for zombie (1 hit 1 kill? also anothers no fall damage, fast knife, etc.)
Nice Job....
good job...........
Quote Originally Posted by tettio View Post
Detected on win 7 64 bit
"Hack tool has been detected" is by the Injector guyz^^
Quote Originally Posted by [H]aaBX View Post
"Hack to has been detected" is by the Injector guyz^^
i dont get what you mean by that.
Great Job,Good Luck at ur next release's
dont works for me -.-
Win7 32 bit
if im ingame i dont see peaples throw the wall.. i press F2, nothing.. i press F3, nothing..
what means no world? you can throw walls?
@[H]aaBX good job but i see nothing special on that base xD
Code:
71D01000     68             DB 68                                    ;  CHAR 'h'
71D01001   . D820D071       DD test.71D020D8                         ;  UNICODE "CShell.dll"
71D01005     FF             DB FF
71D01006     15             DB 15
71D01007   . 0020D071       DD <&KERNEL32.GetModuleHandleW>
71D0100B     80             DB 80
71D0100C     3D             DB 3D                                    ;  CHAR '='
71D0100D   . 5533D071       DD test.71D03355
71D01011     00             DB 00
71D01012     0F             DB 0F
71D01013     85             DB 85
71D01014     31             DB 31                                    ;  CHAR '1'
71D01015     03             DB 03
71D01016     00             DB 00
71D01017     00             DB 00
71D01018     D9             DB D9
71D01019     05             DB 05
71D0101A   . 0422D071       DD test.71D02204
71D0101E     C6             DB C6
71D0101F     05             DB 05
71D01020   . 5533D071       DD test.71D03355
71D01024     01             DB 01
71D01025     33             DB 33                                    ;  CHAR '3'
71D01026     C9             DB C9
71D01027     56             DB 56                                    ;  CHAR 'V'
71D01028   > 8B90 D07FC200  MOV EDX,DWORD PTR DS:[EAX+C27FD0]
71D0102E   . 833C11 00      CMP DWORD PTR DS:[ECX+EDX],0
71D01032   . 0F84 F6020000  JE test.71D0132E
71D01038   . BA B40A0000    MOV EDX,0AB4
71D0103D   > 83F9 14        CMP ECX,14
71D01040   . 0F84 C0020000  JE test.71D01306
71D01046   . 81F9 8C000000  CMP ECX,8C
71D0104C   . 0F84 B4020000  JE test.71D01306
71D01052   . 81F9 28010000  CMP ECX,128
71D01058   . 0F84 A8020000  JE test.71D01306
71D0105E   . 81F9 E0010000  CMP ECX,1E0
71D01064   . 0F84 9C020000  JE test.71D01306
71D0106A   . 81F9 10020000  CMP ECX,210
71D01070   . 0F84 90020000  JE test.71D01306
71D01076   . 81F9 C0020000  CMP ECX,2C0
71D0107C   . 0F84 84020000  JE test.71D01306
71D01082   . 81F9 C4020000  CMP ECX,2C4
71D01088   . 0F84 78020000  JE test.71D01306
71D0108E   . 81F9 C8020000  CMP ECX,2C8
71D01094   . 0F84 6C020000  JE test.71D01306
71D0109A   . 81F9 D8020000  CMP ECX,2D8
71D010A0   . 0F84 60020000  JE test.71D01306
71D010A6   . 81F9 F4020000  CMP ECX,2F4
71D010AC   . 0F84 54020000  JE test.71D01306
71D010B2   . 81F9 0C030000  CMP ECX,30C
71D010B8   . 0F84 48020000  JE test.71D01306
71D010BE   . 81F9 10030000  CMP ECX,310
71D010C4   . 0F84 3C020000  JE test.71D01306
71D010CA   . 81F9 14030000  CMP ECX,314
71D010D0   . 0F84 30020000  JE test.71D01306
71D010D6   . 81F9 18030000  CMP ECX,318
71D010DC   . 0F84 24020000  JE test.71D01306
71D010E2   . 81F9 1C030000  CMP ECX,31C
71D010E8   . 0F84 18020000  JE test.71D01306
71D010EE   . 81F9 7C030000  CMP ECX,37C
71D010F4   . 0F84 0C020000  JE test.71D01306
71D010FA   . 81F9 80030000  CMP ECX,380
71D01100   . 0F84 00020000  JE test.71D01306
71D01106   . 81F9 84030000  CMP ECX,384
71D0110C   . 0F84 F4010000  JE test.71D01306
71D01112   . 81F9 88030000  CMP ECX,388
71D01118   . 0F84 E8010000  JE test.71D01306
71D0111E   . 81F9 8C030000  CMP ECX,38C
71D01124   . 0F84 DC010000  JE test.71D01306
71D0112A   . 81F9 90030000  CMP ECX,390
71D01130   . 0F84 D0010000  JE test.71D01306
71D01136   . 81F9 BC030000  CMP ECX,3BC
71D0113C   . 0F84 C4010000  JE test.71D01306
71D01142   . 81F9 D0030000  CMP ECX,3D0
71D01148   . 0F84 B8010000  JE test.71D01306
71D0114E   . 81F9 14040000  CMP ECX,414
71D01154   . 0F84 AC010000  JE test.71D01306
71D0115A   . 81F9 34040000  CMP ECX,434
71D01160   . 0F84 A0010000  JE test.71D01306
71D01166   . 81F9 38040000  CMP ECX,438
71D0116C   . 0F84 94010000  JE test.71D01306
71D01172   . 81F9 3C040000  CMP ECX,43C
71D01178   . 0F84 88010000  JE test.71D01306
71D0117E   . 81F9 B8040000  CMP ECX,4B8
71D01184   . 0F84 7C010000  JE test.71D01306
71D0118A   . 81F9 BC040000  CMP ECX,4BC
71D01190   . 0F84 70010000  JE test.71D01306
71D01196   . 81F9 C0040000  CMP ECX,4C0
71D0119C   . 0F84 64010000  JE test.71D01306
71D011A2   . 81F9 C4040000  CMP ECX,4C4
71D011A8   . 0F84 58010000  JE test.71D01306
71D011AE   . 81F9 C8040000  CMP ECX,4C8
71D011B4   . 0F84 4C010000  JE test.71D01306
71D011BA   . 81F9 CC040000  CMP ECX,4CC
71D011C0   . 0F84 40010000  JE test.71D01306
71D011C6   . 81F9 64050000  CMP ECX,564
71D011CC   . 0F84 34010000  JE test.71D01306
71D011D2   . 81F9 68050000  CMP ECX,568
71D011D8   . 0F84 28010000  JE test.71D01306
71D011DE   . 81F9 D0050000  CMP ECX,5D0
71D011E4   . 0F84 1C010000  JE test.71D01306
71D011EA   . 81F9 E0050000  CMP ECX,5E0
71D011F0   . 0F84 10010000  JE test.71D01306
71D011F6   . 81F9 F4050000  CMP ECX,5F4
71D011FC   . 0F84 04010000  JE test.71D01306
71D01202   . 81F9 50060000  CMP ECX,650
71D01208   . 0F84 F8000000  JE test.71D01306
71D0120E   . 81F9 54060000  CMP ECX,654
71D01214   . 0F84 EC000000  JE test.71D01306
71D0121A   . 81F9 58060000  CMP ECX,658
71D01220   . 0F84 E0000000  JE test.71D01306
71D01226   . 81F9 5C060000  CMP ECX,65C
71D0122C   . 0F84 D4000000  JE test.71D01306
71D01232   . 81F9 60060000  CMP ECX,660
71D01238   . 0F84 C8000000  JE test.71D01306
71D0123E   . 81F9 64060000  CMP ECX,664
71D01244   . 0F84 BC000000  JE test.71D01306
71D0124A   . 81F9 84060000  CMP ECX,684
71D01250   . 0F84 B0000000  JE test.71D01306
71D01256   . 81F9 D4060000  CMP ECX,6D4
71D0125C   . 0F84 A4000000  JE test.71D01306
71D01262   . 81F9 1C070000  CMP ECX,71C
71D01268   . 0F84 98000000  JE test.71D01306
71D0126E   . 81F9 20070000  CMP ECX,720
71D01274   . 0F84 8C000000  JE test.71D01306
71D0127A   . 81F9 24070000  CMP ECX,724
71D01280   . 0F84 80000000  JE test.71D01306
71D01286   . 81F9 A0070000  CMP ECX,7A0
71D0128C   . 74 78          JE SHORT test.71D01306
71D0128E   . 81F9 14080000  CMP ECX,814
71D01294   . 74 70          JE SHORT test.71D01306
71D01296   . 81F9 18080000  CMP ECX,818
71D0129C   . 74 68          JE SHORT test.71D01306
71D0129E   . 81F9 70080000  CMP ECX,870
71D012A4   . 74 60          JE SHORT test.71D01306
71D012A6   . 81F9 74080000  CMP ECX,874
71D012AC   . 74 58          JE SHORT test.71D01306
71D012AE   . 81F9 90080000  CMP ECX,890
71D012B4   . 74 50          JE SHORT test.71D01306
71D012B6   . 81F9 C4080000  CMP ECX,8C4
71D012BC   . 74 48          JE SHORT test.71D01306
71D012BE   . 81F9 00090000  CMP ECX,900
71D012C4   . 74 40          JE SHORT test.71D01306
71D012C6   . 81F9 20090000  CMP ECX,920
71D012CC   . 74 38          JE SHORT test.71D01306
71D012CE   . 81F9 2C090000  CMP ECX,92C
71D012D4   . 74 30          JE SHORT test.71D01306
71D012D6   . 81F9 B0090000  CMP ECX,9B0
71D012DC   . 74 28          JE SHORT test.71D01306
71D012DE   . 81F9 1C0A0000  CMP ECX,0A1C
71D012E4   . 74 20          JE SHORT test.71D01306
71D012E6   . 81F9 D40A0000  CMP ECX,0AD4
71D012EC   . 74 18          JE SHORT test.71D01306
71D012EE   . 81F9 F00A0000  CMP ECX,0AF0
71D012F4   . 74 10          JE SHORT test.71D01306
71D012F6   . 81F9 380B0000  CMP ECX,0B38
71D012FC   . 74 08          JE SHORT test.71D01306
71D012FE   . 81F9 3C0B0000  CMP ECX,0B3C
71D01304   . 75 19          JNZ SHORT test.71D0131F
71D01306   > 8BB0 D07FC200  MOV ESI,DWORD PTR DS:[EAX+C27FD0]
71D0130C   . 8B3431         MOV ESI,DWORD PTR DS:[ECX+ESI]
71D0130F   . D95416 B8      FST DWORD PTR DS:[ESI+EDX-48]
71D01313   . 8BB0 D07FC200  MOV ESI,DWORD PTR DS:[EAX+C27FD0]
71D01319   . 8B3431         MOV ESI,DWORD PTR DS:[ECX+ESI]
71D0131C   . D91432         FST DWORD PTR DS:[EDX+ESI]
71D0131F   > 83C2 04        ADD EDX,4
71D01322   . 81FA D80A0000  CMP EDX,0AD8
71D01328   .^0F8C 0FFDFFFF  JL test.71D0103D
71D0132E   > 83C1 04        ADD ECX,4
71D01331   . 81F9 F00A0000  CMP ECX,0AF0
71D01337   .^0F8C EBFCFFFF  JL test.71D01028
71D0133D   . 5E             POP ESI
71D0133E   . DDD8           FSTP ST
71D01340   . 6A 64          PUSH 64                                  ; /Timeout = 100. ms
71D01342   . FF15 0420D071  CALL DWORD PTR DS:[<&KERNEL32.Sleep>]    ; \Sleep
71D01348   . C3             RETN
71D01349   . 6A 64          PUSH 64                                  ; /Timeout = 100. ms
71D0134B   . C605 5533D071 >MOV BYTE PTR DS:[71D03355],0             ; |
71D01352   . FF15 0420D071  CALL DWORD PTR DS:[<&KERNEL32.Sleep>]    ; \Sleep
71D01358   . C3             RETN
71D01359     CC             INT3
71D0135A     CC             INT3
71D0135B     CC             INT3
71D0135C     CC             INT3
71D0135D     CC             INT3
71D0135E     CC             INT3
71D0135F     CC             INT3
71D01360     68             DB 68                                    ;  CHAR 'h'
71D01361   . D820D071       DD test.71D020D8                         ;  UNICODE "CShell.dll"
71D01365     FF             DB FF
71D01366     15             DB 15
71D01367   . 0020D071       DD <&KERNEL32.GetModuleHandleW>
71D0136B     80             DB 80
71D0136C     3D             DB 3D                                    ;  CHAR '='
71D0136D   . 5633D071       DD test.71D03356
71D01371     00             DB 00
71D01372     0F             DB 0F
71D01373     85             DB 85
71D01374     94             DB 94
71D01375     00             DB 00
71D01376     00             DB 00
71D01377     00             DB 00
71D01378     83             DB 83
71D01379     B8             DB B8
71D0137A     D0             DB D0
71D0137B     7F             DB 7F
71D0137C   . C2 0000        RETN 0
71D0137F     C6             DB C6
71D01380     05             DB 05
71D01381   . 5633D071       DD test.71D03356
71D01385     01             DB 01
71D01386     0F             DB 0F
71D01387     84             DB 84
71D01388     87             DB 87
71D01389     00             DB 00
71D0138A     00             DB 00
71D0138B     00             DB 00
71D0138C     D9             DB D9
71D0138D     EE             DB EE
71D0138E     B9             DB B9
71D0138F     0C             DB 0C
71D01390     00             DB 00
71D01391     00             DB 00
71D01392     00             DB 00
71D01393   > 8B90 D07FC200  MOV EDX,DWORD PTR DS:[EAX+C27FD0]
71D01399   . 8B5411 F4      MOV EDX,DWORD PTR DS:[ECX+EDX-C]
71D0139D   . 85D2           TEST EDX,EDX
71D0139F   . 74 06          JE SHORT test.71D013A7
71D013A1   . D992 803B0000  FST DWORD PTR DS:[EDX+3B80]
71D013A7   > 8B90 D07FC200  MOV EDX,DWORD PTR DS:[EAX+C27FD0]
71D013AD   . 8B5411 F8      MOV EDX,DWORD PTR DS:[ECX+EDX-8]
71D013B1   . 85D2           TEST EDX,EDX
71D013B3   . 74 06          JE SHORT test.71D013BB
71D013B5   . D992 803B0000  FST DWORD PTR DS:[EDX+3B80]
71D013BB   > 8B90 D07FC200  MOV EDX,DWORD PTR DS:[EAX+C27FD0]
71D013C1   . 8B5411 FC      MOV EDX,DWORD PTR DS:[ECX+EDX-4]
71D013C5   . 85D2           TEST EDX,EDX
71D013C7   . 74 06          JE SHORT test.71D013CF
71D013C9   . D992 803B0000  FST DWORD PTR DS:[EDX+3B80]
71D013CF   > 8B90 D07FC200  MOV EDX,DWORD PTR DS:[EAX+C27FD0]
71D013D5   . 8B1411         MOV EDX,DWORD PTR DS:[ECX+EDX]
71D013D8   . 85D2           TEST EDX,EDX
71D013DA   . 74 06          JE SHORT test.71D013E2
71D013DC   . D992 803B0000  FST DWORD PTR DS:[EDX+3B80]
71D013E2   > 8B90 D07FC200  MOV EDX,DWORD PTR DS:[EAX+C27FD0]
71D013E8   . 8B5411 04      MOV EDX,DWORD PTR DS:[ECX+EDX+4]
71D013EC   . 85D2           TEST EDX,EDX
71D013EE   . 74 06          JE SHORT test.71D013F6
71D013F0   . D992 803B0000  FST DWORD PTR DS:[EDX+3B80]
71D013F6   > 83C1 14        ADD ECX,14
71D013F9   . 81F9 00070000  CMP ECX,700
71D013FF   .^7C 92          JL SHORT test.71D01393
71D01401   . 6A 64          PUSH 64                                  ; /Timeout = 100. ms
71D01403   . DDD8           FSTP ST                                  ; |
71D01405   . FF15 0420D071  CALL DWORD PTR DS:[<&KERNEL32.Sleep>]    ; \Sleep
71D0140B   . C3             RETN
71D0140C   . C605 5633D071 >MOV BYTE PTR DS:[71D03356],0
71D01413   . 6A 64          PUSH 64                                  ; /Timeout = 100. ms
71D01415   . FF15 0420D071  CALL DWORD PTR DS:[<&KERNEL32.Sleep>]    ; \Sleep
71D0141B   . C3             RETN
71D0141C     CC             INT3
71D0141D     CC             INT3
71D0141E     CC             INT3
71D0141F     CC             INT3
71D01420     55             DB 55                                    ;  CHAR 'U'
71D01421     8B             DB 8B
71D01422     EC             DB EC
71D01423     83             DB 83
71D01424     EC             DB EC
71D01425     08             DB 08
71D01426     53             DB 53                                    ;  CHAR 'S'
71D01427     56             DB 56                                    ;  CHAR 'V'
71D01428     8B             DB 8B
71D01429     35             DB 35                                    ;  CHAR '5'
71D0142A   . 0020D071       DD <&KERNEL32.GetModuleHandleW>
71D0142E     57             DB 57                                    ;  CHAR 'W'
71D0142F     90             NOP
71D01430     68             DB 68                                    ;  CHAR 'h'
71D01431   . D820D071       DD test.71D020D8                         ;  UNICODE "CShell.dll"
71D01435     FF             DB FF
71D01436     D6             DB D6
71D01437     85             DB 85
71D01438     C0             DB C0
71D01439     74             DB 74                                    ;  CHAR 't'
71D0143A     F5             DB F5
71D0143B     8B             DB 8B
71D0143C     3D             DB 3D                                    ;  CHAR '='
71D0143D   . 9020D071       DD <&USER32.GetAsyncKeyState>
71D01441     B3             DB B3
71D01442     01             DB 01
71D01443     8B             DB 8B
71D01444     0D             DB 0D
71D01445   . 4021D071       DD test.71D02140
71D01449     B8             DB B8
71D0144A     1C             DB 1C
71D0144B   . 4A 6D 00       ASCII "Jm",0
71D0144E     88             DB 88
71D0144F     1D             DB 1D
71D01450   . 1030D071       DD test.71D03010
71D01454     89             DB 89
71D01455     08             DB 08
71D01456     66             DB 66                                    ;  CHAR 'f'
71D01457     8B             DB 8B
71D01458     15             DB 15
71D01459   . 4421D071       DD test.71D02144
71D0145D     6A             DB 6A                                    ;  CHAR 'j'
71D0145E     71             DB 71                                    ;  CHAR 'q'
71D0145F     66             DB 66                                    ;  CHAR 'f'
71D01460     89             DB 89
71D01461     50             DB 50                                    ;  CHAR 'P'
71D01462     04             DB 04
71D01463     FF             DB FF
71D01464     D7             DB D7
71D01465     66             DB 66                                    ;  CHAR 'f'
71D01466     85             DB 85
71D01467     C0             DB C0
71D01468     74             DB 74                                    ;  CHAR 't'
71D01469     05             DB 05
71D0146A     E8             DB E8
71D0146B     91             DB 91
71D0146C     FB             DB FB
71D0146D     FF             DB FF
71D0146E     FF             DB FF
71D0146F     6A             DB 6A                                    ;  CHAR 'j'
71D01470     72             DB 72                                    ;  CHAR 'r'
71D01471     FF             DB FF
71D01472     D7             DB D7
71D01473     66             DB 66                                    ;  CHAR 'f'
71D01474     85             DB 85
71D01475     C0             DB C0
71D01476     74             DB 74                                    ;  CHAR 't'
71D01477     05             DB 05
71D01478     E8             DB E8
71D01479     E3             DB E3
71D0147A     FE             DB FE
71D0147B     FF             DB FF
71D0147C     FF             DB FF
71D0147D     6A             DB 6A                                    ;  CHAR 'j'
71D0147E     73             DB 73                                    ;  CHAR 's'
71D0147F     FF             DB FF
71D01480     D7             DB D7
71D01481     66             DB 66                                    ;  CHAR 'f'
71D01482     85             DB 85
71D01483     C0             DB C0
71D01484     74             DB 74                                    ;  CHAR 't'
71D01485     6F             DB 6F                                    ;  CHAR 'o'
71D01486     80             DB 80
71D01487     3D             DB 3D                                    ;  CHAR '='
71D01488   . 5433D071       DD test.71D03354
71D0148C     00             DB 00
71D0148D     68             DB 68                                    ;  CHAR 'h'
71D0148E   . D820D071       DD test.71D020D8                         ;  UNICODE "CShell.dll"
71D01492     75             DB 75                                    ;  CHAR 'u'
71D01493     2D             DB 2D                                    ;  CHAR '-'
71D01494     88             DB 88
71D01495     1D             DB 1D
71D01496   . 5433D071       DD test.71D03354
71D0149A     C7             DB C7
71D0149B     45             DB 45                                    ;  CHAR 'E'
71D0149C     F8             DB F8
71D0149D   . F020D071       DD test.71D020F0                         ;  ASCII "TextureModels 0"
71D014A1     FF             DB FF
71D014A2     D6             DB D6
71D014A3     85             DB 85
71D014A4     C0             DB C0
71D014A5     74             DB 74                                    ;  CHAR 't'
71D014A6     46             DB 46                                    ;  CHAR 'F'
71D014A7     8B             DB 8B
71D014A8     80             DB 80
71D014A9     A4             DB A4
71D014AA     F4             DB F4
71D014AB     3E             DB 3E                                    ;  CHAR '>'
71D014AC     00             DB 00
71D014AD     8B             DB 8B
71D014AE     88             DB 88
71D014AF     00             DB 00
71D014B0     02             DB 02
71D014B1     00             DB 00
71D014B2     00             DB 00
71D014B3     89             DB 89
71D014B4     4D             DB 4D                                    ;  CHAR 'M'
71D014B5     FC             DB FC
71D014B6     FF             DB FF
71D014B7     75             DB 75                                    ;  CHAR 'u'
71D014B8     F8             DB F8
71D014B9     FF             DB FF
71D014BA     55             DB 55                                    ;  CHAR 'U'
71D014BB     FC             DB FC
71D014BC     83             DB 83
71D014BD     C4             DB C4
71D014BE     04             DB 04
71D014BF     EB             DB EB
71D014C0     2C             DB 2C                                    ;  CHAR ','
71D014C1     C6             DB C6
71D014C2     05             DB 05
71D014C3   . 5433D071       DD test.71D03354
71D014C7     00             DB 00
71D014C8     C7             DB C7
71D014C9     45             DB 45                                    ;  CHAR 'E'
71D014CA     FC             DB FC
71D014CB   . 0021D071       DD test.71D02100                         ;  ASCII "TextureModels 1"
71D014CF     FF             DB FF
71D014D0     D6             DB D6
71D014D1     85             DB 85
71D014D2     C0             DB C0
71D014D3     74             DB 74                                    ;  CHAR 't'
71D014D4     18             DB 18
71D014D5     8B             DB 8B
71D014D6     90             NOP
71D014D7     A4             DB A4
71D014D8     F4             DB F4
71D014D9     3E             DB 3E                                    ;  CHAR '>'
71D014DA     00             DB 00
71D014DB     8B             DB 8B
71D014DC     82             DB 82
71D014DD     00             DB 00
71D014DE     02             DB 02
71D014DF     00             DB 00
71D014E0     00             DB 00
71D014E1     89             DB 89
71D014E2     45             DB 45                                    ;  CHAR 'E'
71D014E3     F8             DB F8
71D014E4     FF             DB FF
71D014E5     75             DB 75                                    ;  CHAR 'u'
71D014E6     FC             DB FC
71D014E7     FF             DB FF
71D014E8     55             DB 55                                    ;  CHAR 'U'
71D014E9     F8             DB F8
71D014EA     83             DB 83
71D014EB     C4             DB C4
71D014EC     04             DB 04
71D014ED     6A             DB 6A                                    ;  CHAR 'j'
71D014EE     64             DB 64                                    ;  CHAR 'd'
71D014EF     FF             DB FF
71D014F0     15             DB 15
71D014F1   . 0420D071       DD <&KERNEL32.Sleep>
71D014F5     6A             DB 6A                                    ;  CHAR 'j'
71D014F6     74             DB 74                                    ;  CHAR 't'
71D014F7     FF             DB FF
71D014F8     D7             DB D7
71D014F9     66             DB 66                                    ;  CHAR 'f'
71D014FA     85             DB 85
71D014FB     C0             DB C0
71D014FC     74             DB 74                                    ;  CHAR 't'
71D014FD     6F             DB 6F                                    ;  CHAR 'o'
71D014FE     80             DB 80
71D014FF     3D             DB 3D                                    ;  CHAR '='
71D01500   . 5733D071       DD test.71D03357
71D01504     00             DB 00
71D01505     68             DB 68                                    ;  CHAR 'h'
71D01506   . D820D071       DD test.71D020D8                         ;  UNICODE "CShell.dll"
71D0150A     75             DB 75                                    ;  CHAR 'u'
71D0150B     2D             DB 2D                                    ;  CHAR '-'
71D0150C     88             DB 88
71D0150D     1D             DB 1D
71D0150E   . 5733D071       DD test.71D03357
71D01512     C7             DB C7
71D01513     45             DB 45                                    ;  CHAR 'E'
71D01514     FC             DB FC
71D01515   . 1021D071       DD test.71D02110                         ;  ASCII "DrawFlat 1"
71D01519     FF             DB FF
71D0151A     D6             DB D6
71D0151B     85             DB 85
71D0151C     C0             DB C0
71D0151D     74             DB 74                                    ;  CHAR 't'
71D0151E     46             DB 46                                    ;  CHAR 'F'
71D0151F     8B             DB 8B
71D01520     88             DB 88
71D01521     A4             DB A4
71D01522     F4             DB F4
71D01523     3E             DB 3E                                    ;  CHAR '>'
71D01524     00             DB 00
71D01525     8B             DB 8B
71D01526     91             DB 91
71D01527     00             DB 00
71D01528     02             DB 02
71D01529     00             DB 00
71D0152A     00             DB 00
71D0152B     89             DB 89
71D0152C     55             DB 55                                    ;  CHAR 'U'
71D0152D     F8             DB F8
71D0152E     FF             DB FF
71D0152F     75             DB 75                                    ;  CHAR 'u'
71D01530     FC             DB FC
71D01531     FF             DB FF
71D01532     55             DB 55                                    ;  CHAR 'U'
71D01533     F8             DB F8
71D01534     83             DB 83
71D01535     C4             DB C4
71D01536     04             DB 04
71D01537     EB             DB EB
71D01538     2C             DB 2C                                    ;  CHAR ','
71D01539     C6             DB C6
71D0153A     05             DB 05
71D0153B   . 5733D071       DD test.71D03357
71D0153F     00             DB 00
71D01540     C7             DB C7
71D01541     45             DB 45                                    ;  CHAR 'E'
71D01542     FC             DB FC
71D01543   . 1C21D071       DD test.71D0211C                         ;  ASCII "DrawFlat 0"
71D01547     FF             DB FF
71D01548     D6             DB D6
71D01549     85             DB 85
71D0154A     C0             DB C0
71D0154B     74             DB 74                                    ;  CHAR 't'
71D0154C     18             DB 18
71D0154D     8B             DB 8B
71D0154E     80             DB 80
71D0154F     A4             DB A4
71D01550     F4             DB F4
71D01551     3E             DB 3E                                    ;  CHAR '>'
71D01552     00             DB 00
71D01553     8B             DB 8B
71D01554     88             DB 88
71D01555     00             DB 00
71D01556     02             DB 02
71D01557     00             DB 00
71D01558     00             DB 00
71D01559     89             DB 89
71D0155A     4D             DB 4D                                    ;  CHAR 'M'
71D0155B     F8             DB F8
71D0155C     FF             DB FF
71D0155D     75             DB 75                                    ;  CHAR 'u'
71D0155E     FC             DB FC
71D0155F     FF             DB FF
71D01560     55             DB 55                                    ;  CHAR 'U'
71D01561     F8             DB F8
71D01562     83             DB 83
71D01563     C4             DB C4
71D01564     04             DB 04
71D01565     6A             DB 6A                                    ;  CHAR 'j'
71D01566     64             DB 64                                    ;  CHAR 'd'
71D01567     FF             DB FF
71D01568     15             DB 15
71D01569   . 0420D071       DD <&KERNEL32.Sleep>
71D0156D     6A             DB 6A                                    ;  CHAR 'j'
71D0156E     75             DB 75                                    ;  CHAR 'u'
71D0156F     FF             DB FF
71D01570     D7             DB D7
71D01571     66             DB 66                                    ;  CHAR 'f'
71D01572     85             DB 85
71D01573     C0             DB C0
71D01574     74             DB 74                                    ;  CHAR 't'
71D01575     6F             DB 6F                                    ;  CHAR 'o'
71D01576     80             DB 80
71D01577     3D             DB 3D                                    ;  CHAR '='
71D01578   . 5833D071       DD test.71D03358
71D0157C     00             DB 00
71D0157D     68             DB 68                                    ;  CHAR 'h'
71D0157E   . D820D071       DD test.71D020D8                         ;  UNICODE "CShell.dll"
71D01582     75             DB 75                                    ;  CHAR 'u'
71D01583     2D             DB 2D                                    ;  CHAR '-'
71D01584     88             DB 88
71D01585     1D             DB 1D
71D01586   . 5833D071       DD test.71D03358
71D0158A     C7             DB C7
71D0158B     45             DB 45                                    ;  CHAR 'E'
71D0158C     FC             DB FC
71D0158D   . 2821D071       DD test.71D02128                         ;  ASCII "DrawWorld 0"
71D01591     FF             DB FF
71D01592     D6             DB D6
71D01593     85             DB 85
71D01594     C0             DB C0
71D01595     74             DB 74                                    ;  CHAR 't'
71D01596     46             DB 46                                    ;  CHAR 'F'
71D01597     8B             DB 8B
71D01598     90             NOP
71D01599     A4             DB A4
71D0159A     F4             DB F4
71D0159B     3E             DB 3E                                    ;  CHAR '>'
71D0159C     00             DB 00
71D0159D     8B             DB 8B
71D0159E     82             DB 82
71D0159F     00             DB 00
71D015A0     02             DB 02
71D015A1     00             DB 00
71D015A2     00             DB 00
71D015A3     89             DB 89
71D015A4     45             DB 45                                    ;  CHAR 'E'
71D015A5     F8             DB F8
71D015A6     FF             DB FF
71D015A7     75             DB 75                                    ;  CHAR 'u'
71D015A8     FC             DB FC
71D015A9     FF             DB FF
71D015AA     55             DB 55                                    ;  CHAR 'U'
71D015AB     F8             DB F8
71D015AC     83             DB 83
71D015AD     C4             DB C4
71D015AE     04             DB 04
71D015AF     EB             DB EB
71D015B0     2C             DB 2C                                    ;  CHAR ','
71D015B1     C6             DB C6
71D015B2     05             DB 05
71D015B3   . 5833D071       DD test.71D03358
71D015B7     00             DB 00
71D015B8     C7             DB C7
71D015B9     45             DB 45                                    ;  CHAR 'E'
71D015BA     FC             DB FC
71D015BB   . 3421D071       DD test.71D02134                         ;  ASCII "DrawWorld 1"
71D015BF     FF             DB FF
71D015C0     D6             DB D6
71D015C1     85             DB 85
71D015C2     C0             DB C0
71D015C3     74             DB 74                                    ;  CHAR 't'
71D015C4     18             DB 18
71D015C5     8B             DB 8B
71D015C6     88             DB 88
71D015C7     A4             DB A4
71D015C8     F4             DB F4
71D015C9     3E             DB 3E                                    ;  CHAR '>'
71D015CA     00             DB 00
71D015CB     8B             DB 8B
71D015CC     91             DB 91
71D015CD     00             DB 00
71D015CE     02             DB 02
71D015CF     00             DB 00
71D015D0     00             DB 00
71D015D1     89             DB 89
71D015D2     55             DB 55                                    ;  CHAR 'U'
71D015D3     F8             DB F8
71D015D4     FF             DB FF
71D015D5     75             DB 75                                    ;  CHAR 'u'
71D015D6     FC             DB FC
71D015D7     FF             DB FF
71D015D8     55             DB 55                                    ;  CHAR 'U'
71D015D9     F8             DB F8
71D015DA     83             DB 83
71D015DB     C4             DB C4
71D015DC     04             DB 04
71D015DD     6A             DB 6A                                    ;  CHAR 'j'
71D015DE     64             DB 64                                    ;  CHAR 'd'
71D015DF     FF             DB FF
71D015E0     15             DB 15
71D015E1   . 0420D071       DD <&KERNEL32.Sleep>
71D015E5     6A             DB 6A                                    ;  CHAR 'j'
71D015E6     64             DB 64                                    ;  CHAR 'd'
71D015E7     FF             DB FF
71D015E8     15             DB 15
71D015E9   . 0420D071       DD <&KERNEL32.Sleep>
71D015ED     E9             DB E9
71D015EE     51             DB 51                                    ;  CHAR 'Q'
71D015EF     FE             DB FE
71D015F0     FF             DB FF
71D015F1     FF             DB FF
71D015F2     CC             INT3
71D015F3     CC             INT3
71D015F4     CC             INT3
71D015F5     CC             INT3
71D015F6     CC             INT3
71D015F7     CC             INT3
71D015F8     CC             INT3
71D015F9     CC             INT3
71D015FA     CC             INT3
71D015FB     CC             INT3
71D015FC     CC             INT3
71D015FD     CC             INT3
71D015FE     CC             INT3
71D015FF     CC             INT3
71D01600  /$ 55             PUSH EBP
71D01601  |. 8BEC           MOV EBP,ESP
71D01603  |. 837D 0C 01     CMP DWORD PTR SS:[EBP+C],1
71D01607  |. 75 41          JNZ SHORT test.71D0164A
71D01609  |. 8B45 08        MOV EAX,DWORD PTR SS:[EBP+8]
71D0160C  |. 50             PUSH EAX                                 ; /hLibModule
71D0160D  |. FF15 0820D071  CALL DWORD PTR DS:[<&KERNEL32.DisableThr>; \DisableThreadLibraryCalls
71D01613  |. 6A 00          PUSH 0                                   ; /Style = MB_OK|MB_APPLMODAL
71D01615  |. 68 4821D071    PUSH test.71D02148                       ; |Title = "[H]aaBX Public Hack V1 (MPGH.NET)"
71D0161A  |. 68 7021D071    PUSH test.71D02170                       ; |Text = "By [H]aaBX
MPGH.net
After pressing okay you'll redirected to the author's profile"
71D0161F  |. 6A 00          PUSH 0                                   ; |hOwner = NULL
71D01621  |. FF15 8C20D071  CALL DWORD PTR DS:[<&USER32.MessageBoxA>>; \MessageBoxA
71D01627  |. 68 C421D071    PUSH test.71D021C4                       ; /command = "start http://www.mpgh.net/forum/members/1402528--h-aabx.html"
71D0162C  |. FF15 8020D071  CALL DWORD PTR DS:[<&MSVCR100.system>]   ; \system
71D01632  |. 6A 00          PUSH 0                                   ; /pID = NULL
71D01634  |. 6A 00          PUSH 0                                   ; |flags = 0
71D01636  |. 6A 00          PUSH 0                                   ; |arg = NULL
71D01638  |. 68 2014D071    PUSH test.71D01420                       ; |start = test.71D01420
71D0163D  |. 6A 00          PUSH 0                                   ; |stksize = 0
71D0163F  |. 6A 00          PUSH 0                                   ; |security = NULL
71D01641  |. FF15 7C20D071  CALL DWORD PTR DS:[<&MSVCR100._beginthre>; \_beginthreadex
71D01647  |. 83C4 1C        ADD ESP,1C
71D0164A  |> B8 01000000    MOV EAX,1
71D0164F  |. 5D             POP EBP
71D01650  \. C2 0C00        RETN 0C
71D01653     3B             DB 3B                                    ;  CHAR ';'
71D01654     0D             DB 0D
71D01655   . 0030D071       DD test.71D03000
71D01659     75             DB 75                                    ;  CHAR 'u'
71D0165A   . 02F3           ADD DH,BL
71D0165C   . C3             RETN
71D0165D     E9             DB E9
71D0165E     91             DB 91
71D0165F     03             DB 03
71D01660     00             DB 00
71D01661     00             DB 00
71D01662     8BFF           MOV EDI,EDI
71D01664   . 56             PUSH ESI
71D01665   . 68 80000000    PUSH 80
71D0166A   . FF15 7820D071  CALL DWORD PTR DS:[<&MSVCR100._malloc_cr>;  MSVCR1_1._malloc_crt
71D01670   . 59             POP ECX
71D01671   . 8BF0           MOV ESI,EAX
71D01673   . 56             PUSH ESI
71D01674   . FF15 3C20D071  CALL DWORD PTR DS:[<&KERNEL32.EncodePoin>;  ntdll.RtlEncodePointer
71D0167A   . A3 6833D071    MOV DWORD PTR DS:[71D03368],EAX
71D0167F   . A3 6433D071    MOV DWORD PTR DS:[71D03364],EAX
71D01684   . 85F6           TEST ESI,ESI
71D01686   . 75 05          JNZ SHORT test.71D0168D
71D01688   . 33C0           XOR EAX,EAX
71D0168A   . 40             INC EAX
71D0168B   . 5E             POP ESI
71D0168C   . C3             RETN
71D0168D   > 8326 00        AND DWORD PTR DS:[ESI],0
71D01690   . E8 28050000    CALL test.71D01BBD
71D01695   . 68 E31BD071    PUSH test.71D01BE3
71D0169A   . E8 07050000    CALL test.71D01BA6
71D0169F   . C70424 F91AD07>MOV DWORD PTR SS:[ESP],test.71D01AF9     ; |
71D016A6   . E8 FB040000    CALL test.71D01BA6                       ; \test.71D01BA6
71D016AB   . 59             POP ECX
71D016AC   . 33C0           XOR EAX,EAX
71D016AE   . 5E             POP ESI
71D016AF   . C3             RETN
71D016B0  /$ 8BFF           MOV EDI,EDI
71D016B2  |. 55             PUSH EBP
71D016B3  |. 8BEC           MOV EBP,ESP
71D016B5  |. 51             PUSH ECX
71D016B6  |. 51             PUSH ECX
71D016B7  |. 53             PUSH EBX
71D016B8  |. 33C0           XOR EAX,EAX
71D016BA  |. 56             PUSH ESI
71D016BB  |. 57             PUSH EDI
71D016BC  |. 3945 0C        CMP DWORD PTR SS:[EBP+C],EAX
71D016BF  |. 75 32          JNZ SHORT test.71D016F3
71D016C1  |. 3905 2030D071  CMP DWORD PTR DS:[71D03020],EAX
71D016C7  |. 7E 23          JLE SHORT test.71D016EC
71D016C9  |. 64:A1 18000000 MOV EAX,DWORD PTR FS:[18]
71D016CF  |. FF0D 2030D071  DEC DWORD PTR DS:[71D03020]
71D016D5  |. 8B58 04        MOV EBX,DWORD PTR DS:[EAX+4]
71D016D8  |. 8365 FC 00     AND DWORD PTR SS:[EBP-4],0
71D016DC  |. 8B35 3020D071  MOV ESI,DWORD PTR DS:[<&KERNEL32.Interlo>;  kernel32.InterlockedCompareExchange
71D016E2  |. BF 6033D071    MOV EDI,test.71D03360
71D016E7  |. E9 EA000000    JMP test.71D017D6
71D016EC  |> 33C0           XOR EAX,EAX
71D016EE  |. E9 C0010000    JMP test.71D018B3
71D016F3  |> 837D 0C 01     CMP DWORD PTR SS:[EBP+C],1
71D016F7  |. 0F85 B3010000  JNZ test.71D018B0
71D016FD  |. 64:8B0D 180000>MOV ECX,DWORD PTR FS:[18]
71D01704  |. 8B59 04        MOV EBX,DWORD PTR DS:[ECX+4]
71D01707  |. 8B35 3020D071  MOV ESI,DWORD PTR DS:[<&KERNEL32.Interlo>;  kernel32.InterlockedCompareExchange
71D0170D  |. 8945 0C        MOV DWORD PTR SS:[EBP+C],EAX
71D01710  |. 50             PUSH EAX
71D01711  |. BF 6033D071    MOV EDI,test.71D03360
71D01716  |. EB 11          JMP SHORT test.71D01729
71D01718  |> 3BC3           /CMP EAX,EBX
71D0171A  |. 74 17          |JE SHORT test.71D01733
71D0171C  |. 68 E8030000    |PUSH 3E8                                ; /Timeout = 1000. ms
71D01721  |. FF15 0420D071  |CALL DWORD PTR DS:[<&KERNEL32.Sleep>]   ; \Sleep
71D01727  |. 6A 00          |PUSH 0
71D01729  |> 53              PUSH EBX
71D0172A  |. 57             |PUSH EDI
71D0172B  |. FFD6           |CALL ESI
71D0172D  |. 85C0           |TEST EAX,EAX
71D0172F  |.^75 E7          \JNZ SHORT test.71D01718
71D01731  |. EB 07          JMP SHORT test.71D0173A
71D01733  |> C745 0C 010000>MOV DWORD PTR SS:[EBP+C],1
71D0173A  |> A1 5C33D071    MOV EAX,DWORD PTR DS:[71D0335C]
71D0173F  |. 6A 02          PUSH 2
71D01741  |. 5E             POP ESI
71D01742  |. 85C0           TEST EAX,EAX
71D01744  |. 74 09          JE SHORT test.71D0174F
71D01746  |. 6A 1F          PUSH 1F
71D01748  |. E8 1B060000    CALL <JMP.&MSVCR100._amsg_exit>
71D0174D  |. EB 39          JMP SHORT test.71D01788
71D0174F  |> 68 A820D071    PUSH test.71D020A8
71D01754  |. 68 A020D071    PUSH test.71D020A0
71D01759  |. C705 5C33D071 >MOV DWORD PTR DS:[71D0335C],1
71D01763  |. E8 FA050000    CALL <JMP.&MSVCR100._initterm_e>
71D01768  |. 59             POP ECX
71D01769  |. 59             POP ECX
71D0176A  |. 85C0           TEST EAX,EAX
71D0176C  |.^0F85 7AFFFFFF  JNZ test.71D016EC
71D01772  |. 68 9C20D071    PUSH test.71D0209C
71D01777  |. 68 9820D071    PUSH test.71D02098
71D0177C  |. E8 DB050000    CALL <JMP.&MSVCR100._initterm>
71D01781  |. 59             POP ECX
71D01782  |. 8935 5C33D071  MOV DWORD PTR DS:[71D0335C],ESI
71D01788  |> 33DB           XOR EBX,EBX
71D0178A  |. 59             POP ECX
71D0178B  |. 395D 0C        CMP DWORD PTR SS:[EBP+C],EBX
71D0178E  |. 75 08          JNZ SHORT test.71D01798
71D01790  |. 53             PUSH EBX                                 ; /NewValue => 0
71D01791  |. 57             PUSH EDI                                 ; |pTarget
71D01792  |. FF15 3420D071  CALL DWORD PTR DS:[<&KERNEL32.Interlocke>; \InterlockedExchange
71D01798  |> 391D 6C33D071  CMP DWORD PTR DS:[71D0336C],EBX
71D0179E  |. 74 1C          JE SHORT test.71D017BC
71D017A0  |. 68 6C33D071    PUSH test.71D0336C
71D017A5  |. E8 F6040000    CALL test.71D01CA0
71D017AA  |. 59             POP ECX
71D017AB  |. 85C0           TEST EAX,EAX
71D017AD  |. 74 0D          JE SHORT test.71D017BC
71D017AF  |. FF75 10        PUSH DWORD PTR SS:[EBP+10]
71D017B2  |. 56             PUSH ESI
71D017B3  |. FF75 08        PUSH DWORD PTR SS:[EBP+8]
71D017B6  |. FF15 6C33D071  CALL DWORD PTR DS:[71D0336C]
71D017BC  |> FF05 2030D071  INC DWORD PTR DS:[71D03020]
71D017C2  |. E9 E9000000    JMP test.71D018B0
71D017C7  |> 3BC3           /CMP EAX,EBX
71D017C9  |. 74 17          |JE SHORT test.71D017E2
71D017CB  |. 68 E8030000    |PUSH 3E8                                ; /Timeout = 1000. ms
71D017D0  |. FF15 0420D071  |CALL DWORD PTR DS:[<&KERNEL32.Sleep>]   ; \Sleep
71D017D6  |> 6A 00           PUSH 0
71D017D8  |. 53             |PUSH EBX
71D017D9  |. 57             |PUSH EDI
71D017DA  |. FFD6           |CALL ESI
71D017DC  |. 85C0           |TEST EAX,EAX
71D017DE  |.^75 E7          \JNZ SHORT test.71D017C7
71D017E0  |. EB 07          JMP SHORT test.71D017E9
71D017E2  |> C745 FC 010000>MOV DWORD PTR SS:[EBP-4],1
71D017E9  |> A1 5C33D071    MOV EAX,DWORD PTR DS:[71D0335C]
71D017EE  |. 83F8 02        CMP EAX,2
71D017F1  |. 74 0D          JE SHORT test.71D01800
71D017F3  |. 6A 1F          PUSH 1F
71D017F5  |. E8 6E050000    CALL <JMP.&MSVCR100._amsg_exit>
71D017FA  |. 59             POP ECX
71D017FB  |. E9 B0000000    JMP test.71D018B0
71D01800  |> FF35 6833D071  PUSH DWORD PTR DS:[71D03368]
71D01806  |. 8B35 3820D071  MOV ESI,DWORD PTR DS:[<&KERNEL32.DecodeP>;  ntdll.RtlDecodePointer
71D0180C  |. FFD6           CALL ESI                                 ;  <&KERNEL32.DecodePointer>
71D0180E  |. 8945 0C        MOV DWORD PTR SS:[EBP+C],EAX
71D01811  |. 85C0           TEST EAX,EAX
71D01813  |. 0F84 83000000  JE test.71D0189C
71D01819  |. FF35 6433D071  PUSH DWORD PTR DS:[71D03364]
71D0181F  |. FFD6           CALL ESI
71D01821  |. 8BD8           MOV EBX,EAX
71D01823  |. 8B45 0C        MOV EAX,DWORD PTR SS:[EBP+C]
71D01826  |. 8945 10        MOV DWORD PTR SS:[EBP+10],EAX
71D01829  |. 895D 08        MOV DWORD PTR SS:[EBP+8],EBX
71D0182C  |> 83EB 04        /SUB EBX,4
71D0182F  |. 3B5D 0C        |CMP EBX,DWORD PTR SS:[EBP+C]
71D01832  |. 72 4E          |JB SHORT test.71D01882
71D01834  |. 833B 00        |CMP DWORD PTR DS:[EBX],0
71D01837  |.^74 F3          |JE SHORT test.71D0182C
71D01839  |. FF15 7020D071  |CALL DWORD PTR DS:[<&MSVCR100._encoded_>;  MSVCR1_1._encoded_null
71D0183F  |. 3903           |CMP DWORD PTR DS:[EBX],EAX
71D01841  |.^74 E9          |JE SHORT test.71D0182C
71D01843  |. FF33           |PUSH DWORD PTR DS:[EBX]
71D01845  |. FFD6           |CALL ESI
71D01847  |. 8945 F8        |MOV DWORD PTR SS:[EBP-8],EAX
71D0184A  |. FF15 7020D071  |CALL DWORD PTR DS:[<&MSVCR100._encoded_>;  MSVCR1_1._encoded_null
71D01850  |. 8903           |MOV DWORD PTR DS:[EBX],EAX
71D01852  |. FF55 F8        |CALL DWORD PTR SS:[EBP-8]
71D01855  |. FF35 6833D071  |PUSH DWORD PTR DS:[71D03368]
71D0185B  |. FFD6           |CALL ESI
71D0185D  |. FF35 6433D071  |PUSH DWORD PTR DS:[71D03364]
71D01863  |. 8945 F8        |MOV DWORD PTR SS:[EBP-8],EAX
71D01866  |. FFD6           |CALL ESI
71D01868  |. 8B4D F8        |MOV ECX,DWORD PTR SS:[EBP-8]
71D0186B  |. 394D 10        |CMP DWORD PTR SS:[EBP+10],ECX
71D0186E  |. 75 05          |JNZ SHORT test.71D01875
71D01870  |. 3945 08        |CMP DWORD PTR SS:[EBP+8],EAX
71D01873  |.^74 B7          |JE SHORT test.71D0182C
71D01875  |> 894D 10        |MOV DWORD PTR SS:[EBP+10],ECX
71D01878  |. 894D 0C        |MOV DWORD PTR SS:[EBP+C],ECX
71D0187B  |. 8945 08        |MOV DWORD PTR SS:[EBP+8],EAX
71D0187E  |. 8BD8           |MOV EBX,EAX
71D01880  |.^EB AA          \JMP SHORT test.71D0182C
71D01882  |> FF75 0C        PUSH DWORD PTR SS:[EBP+C]                ; /block
71D01885  |. FF15 7420D071  CALL DWORD PTR DS:[<&MSVCR100.free>]     ; \free
71D0188B  |. 59             POP ECX
71D0188C  |. FF15 7020D071  CALL DWORD PTR DS:[<&MSVCR100._encoded_n>;  MSVCR1_1._encoded_null
71D01892  |. A3 6433D071    MOV DWORD PTR DS:[71D03364],EAX
71D01897  |. A3 6833D071    MOV DWORD PTR DS:[71D03368],EAX
71D0189C  |> 33C0           XOR EAX,EAX
71D0189E  |. A3 5C33D071    MOV DWORD PTR DS:[71D0335C],EAX
71D018A3  |. 3945 FC        CMP DWORD PTR SS:[EBP-4],EAX
71D018A6  |. 75 08          JNZ SHORT test.71D018B0
71D018A8  |. 50             PUSH EAX                                 ; /NewValue => 0
71D018A9  |. 57             PUSH EDI                                 ; |pTarget
71D018AA  |. FF15 3420D071  CALL DWORD PTR DS:[<&KERNEL32.Interlocke>; \InterlockedExchange
71D018B0  |> 33C0           XOR EAX,EAX
71D018B2  |. 40             INC EAX
71D018B3  |> 5F             POP EDI
71D018B4  |. 5E             POP ESI
71D018B5  |. 5B             POP EBX
71D018B6  |. C9             LEAVE
71D018B7  \. C2 0C00        RETN 0C
71D018BA   $ 6A 10          PUSH 10
71D018BC   . 68 E822D071    PUSH test.71D022E8
71D018C1   . E8 BA040000    CALL test.71D01D80
71D018C6   . 8BF9           MOV EDI,ECX
71D018C8   . 8BF2           MOV ESI,EDX
71D018CA   . 8B5D 08        MOV EBX,DWORD PTR SS:[EBP+8]
71D018CD   . 33C0           XOR EAX,EAX
71D018CF   . 40             INC EAX
71D018D0   . 8945 E4        MOV DWORD PTR SS:[EBP-1C],EAX
71D018D3   . 33C9           XOR ECX,ECX
71D018D5   . 894D FC        MOV DWORD PTR SS:[EBP-4],ECX
71D018D8   . 8935 0830D071  MOV DWORD PTR DS:[71D03008],ESI
71D018DE   . 8945 FC        MOV DWORD PTR SS:[EBP-4],EAX
71D018E1   . 3BF1           CMP ESI,ECX
71D018E3   . 75 10          JNZ SHORT test.71D018F5
71D018E5   . 390D 2030D071  CMP DWORD PTR DS:[71D03020],ECX
71D018EB   . 75 08          JNZ SHORT test.71D018F5
71D018ED   . 894D E4        MOV DWORD PTR SS:[EBP-1C],ECX
71D018F0   . E9 B7000000    JMP test.71D019AC
71D018F5   > 3BF0           CMP ESI,EAX
71D018F7   . 74 05          JE SHORT test.71D018FE
71D018F9   . 83FE 02        CMP ESI,2
71D018FC   . 75 2E          JNZ SHORT test.71D0192C
71D018FE   > A1 CC20D071    MOV EAX,DWORD PTR DS:[71D020CC]
71D01903   . 3BC1           CMP EAX,ECX
71D01905   . 74 08          JE SHORT test.71D0190F
71D01907   . 57             PUSH EDI
71D01908   . 56             PUSH ESI
71D01909   . 53             PUSH EBX
71D0190A   . FFD0           CALL EAX
71D0190C   . 8945 E4        MOV DWORD PTR SS:[EBP-1C],EAX
71D0190F   > 837D E4 00     CMP DWORD PTR SS:[EBP-1C],0
71D01913   . 0F84 93000000  JE test.71D019AC
71D01919   . 57             PUSH EDI
71D0191A   . 56             PUSH ESI
71D0191B   . 53             PUSH EBX
71D0191C   . E8 8FFDFFFF    CALL test.71D016B0
71D01921   . 8945 E4        MOV DWORD PTR SS:[EBP-1C],EAX
71D01924   . 85C0           TEST EAX,EAX
71D01926   . 0F84 80000000  JE test.71D019AC
71D0192C   > 57             PUSH EDI                                 ; /Arg3
71D0192D   . 56             PUSH ESI                                 ; |Arg2
71D0192E   . 53             PUSH EBX                                 ; |Arg1
71D0192F   . E8 CCFCFFFF    CALL test.71D01600                       ; \test.71D01600
71D01934   . 8945 E4        MOV DWORD PTR SS:[EBP-1C],EAX
71D01937   . 83FE 01        CMP ESI,1
71D0193A   . 75 24          JNZ SHORT test.71D01960
71D0193C   . 85C0           TEST EAX,EAX
71D0193E   . 75 20          JNZ SHORT test.71D01960
71D01940   . 57             PUSH EDI                                 ; /Arg3
71D01941   . 50             PUSH EAX                                 ; |Arg2
71D01942   . 53             PUSH EBX                                 ; |Arg1
71D01943   . E8 B8FCFFFF    CALL test.71D01600                       ; \test.71D01600
71D01948   . 57             PUSH EDI
71D01949   . 6A 00          PUSH 0
71D0194B   . 53             PUSH EBX
71D0194C   . E8 5FFDFFFF    CALL test.71D016B0
71D01951   . A1 CC20D071    MOV EAX,DWORD PTR DS:[71D020CC]
71D01956   . 85C0           TEST EAX,EAX
71D01958   . 74 06          JE SHORT test.71D01960
71D0195A   . 57             PUSH EDI
71D0195B   . 6A 00          PUSH 0
71D0195D   . 53             PUSH EBX
71D0195E   . FFD0           CALL EAX
71D01960   > 85F6           TEST ESI,ESI
71D01962   . 74 05          JE SHORT test.71D01969
71D01964   . 83FE 03        CMP ESI,3
71D01967   . 75 43          JNZ SHORT test.71D019AC
71D01969   > 57             PUSH EDI
71D0196A   . 56             PUSH ESI
71D0196B   . 53             PUSH EBX
71D0196C   . E8 3FFDFFFF    CALL test.71D016B0
71D01971   . 85C0           TEST EAX,EAX
71D01973   . 75 03          JNZ SHORT test.71D01978
71D01975   . 2145 E4        AND DWORD PTR SS:[EBP-1C],EAX
71D01978   > 837D E4 00     CMP DWORD PTR SS:[EBP-1C],0
71D0197C   . 74 2E          JE SHORT test.71D019AC
71D0197E   . A1 CC20D071    MOV EAX,DWORD PTR DS:[71D020CC]
71D01983   . 85C0           TEST EAX,EAX
71D01985   . 74 25          JE SHORT test.71D019AC
71D01987   . 57             PUSH EDI
71D01988   . 56             PUSH ESI
71D01989   . 53             PUSH EBX
71D0198A   . FFD0           CALL EAX
71D0198C   . 8945 E4        MOV DWORD PTR SS:[EBP-1C],EAX
71D0198F   . EB 1B          JMP SHORT test.71D019AC
71D01991   . 8B45 EC        MOV EAX,DWORD PTR SS:[EBP-14]
71D01994   . 8B08           MOV ECX,DWORD PTR DS:[EAX]
71D01996   . 8B09           MOV ECX,DWORD PTR DS:[ECX]
71D01998   . 894D E0        MOV DWORD PTR SS:[EBP-20],ECX
71D0199B   . 50             PUSH EAX
71D0199C   . 51             PUSH ECX
71D0199D   . E8 CC030000    CALL <JMP.&MSVCR100.__CppXcptFilter>
71D019A2   . 59             POP ECX
71D019A3   . 59             POP ECX
71D019A4   . C3             RETN
71D019A5   . 8B65 E8        MOV ESP,DWORD PTR SS:[EBP-18]
71D019A8   . 8365 E4 00     AND DWORD PTR SS:[EBP-1C],0
71D019AC   > 8365 FC 00     AND DWORD PTR SS:[EBP-4],0
71D019B0   . C745 FC FEFFFF>MOV DWORD PTR SS:[EBP-4],-2
71D019B7   . E8 09000000    CALL test.71D019C5
71D019BC   . 8B45 E4        MOV EAX,DWORD PTR SS:[EBP-1C]
71D019BF   . E8 01040000    CALL test.71D01DC5
71D019C4   . C3             RETN
71D019C5  /$ C705 0830D071 >MOV DWORD PTR DS:[71D03008],-1
71D019CF  \. C3             RETN
71D019D0 >/$ 8BFF           MOV EDI,EDI
71D019D2  |. 55             PUSH EBP
71D019D3  |. 8BEC           MOV EBP,ESP
71D019D5  |. 837D 0C 01     CMP DWORD PTR SS:[EBP+C],1
71D019D9  |. 75 05          JNZ SHORT test.71D019E0
71D019DB  |. E8 1E040000    CALL test.71D01DFE
71D019E0  |> FF75 08        PUSH DWORD PTR SS:[EBP+8]
71D019E3  |. 8B4D 10        MOV ECX,DWORD PTR SS:[EBP+10]
71D019E6  |. 8B55 0C        MOV EDX,DWORD PTR SS:[EBP+C]
71D019E9  |. E8 CCFEFFFF    CALL test.71D018BA
71D019EE  |. 59             POP ECX
71D019EF  |. 5D             POP EBP
71D019F0  \. C2 0C00        RETN 0C
71D019F3     8BFF           MOV EDI,EDI
71D019F5     55             DB 55                                    ;  CHAR 'U'
71D019F6     8B             DB 8B
71D019F7     EC             DB EC
71D019F8     81             DB 81
71D019F9     EC             DB EC
71D019FA     28             DB 28                                    ;  CHAR '('
71D019FB     03             DB 03
71D019FC     00             DB 00
71D019FD     00             DB 00
71D019FE     A3             DB A3
71D019FF   . 3031D071       DD test.71D03130
71D01A03     89             DB 89
71D01A04     0D             DB 0D
71D01A05   . 2C31D071       DD test.71D0312C
71D01A09     89             DB 89
71D01A0A     15             DB 15
71D01A0B   . 2831D071       DD test.71D03128
71D01A0F     89             DB 89
71D01A10     1D             DB 1D
71D01A11   . 2431D071       DD test.71D03124
71D01A15     89             DB 89
71D01A16     35             DB 35                                    ;  CHAR '5'
71D01A17   . 2031D071       DD test.71D03120
71D01A1B     89             DB 89
71D01A1C     3D             DB 3D                                    ;  CHAR '='
71D01A1D   . 1C31D071       DD test.71D0311C
71D01A21     66             DB 66                                    ;  CHAR 'f'
71D01A22     8C             DB 8C
71D01A23     15             DB 15
71D01A24   . 4831D071       DD test.71D03148
71D01A28   . 66:8C0D 3C31D0>MOV WORD PTR DS:[71D0313C],CS
71D01A2F   . 66:8C1D 1831D0>MOV WORD PTR DS:[71D03118],DS
71D01A36   . 66:8C05 1431D0>MOV WORD PTR DS:[71D03114],ES
71D01A3D   . 66:8C25 1031D0>MOV WORD PTR DS:[71D03110],FS
71D01A44   . 66:8C2D 0C31D0>MOV WORD PTR DS:[71D0310C],GS
71D01A4B   . 9C             PUSHFD
71D01A4C   . 8F05 4031D071  POP DWORD PTR DS:[71D03140]
71D01A52   . 8B45 00        MOV EAX,DWORD PTR SS:[EBP]
71D01A55   . A3 3431D071    MOV DWORD PTR DS:[71D03134],EAX
71D01A5A   . 8B45 04        MOV EAX,DWORD PTR SS:[EBP+4]
71D01A5D   . A3 3831D071    MOV DWORD PTR DS:[71D03138],EAX
71D01A62   . 8D45 08        LEA EAX,DWORD PTR SS:[EBP+8]
71D01A65   . A3 4431D071    MOV DWORD PTR DS:[71D03144],EAX
71D01A6A   . 8B85 E0FCFFFF  MOV EAX,DWORD PTR SS:[EBP-320]
71D01A70   . C705 8030D071 >MOV DWORD PTR DS:[71D03080],10001
71D01A7A   . A1 3831D071    MOV EAX,DWORD PTR DS:[71D03138]
71D01A7F   . A3 3430D071    MOV DWORD PTR DS:[71D03034],EAX
71D01A84   . C705 2830D071 >MOV DWORD PTR DS:[71D03028],C0000409
71D01A8E   . C705 2C30D071 >MOV DWORD PTR DS:[71D0302C],1
71D01A98   . A1 0030D071    MOV EAX,DWORD PTR DS:[71D03000]
71D01A9D   . 8985 D8FCFFFF  MOV DWORD PTR SS:[EBP-328],EAX
71D01AA3   . A1 0430D071    MOV EAX,DWORD PTR DS:[71D03004]
71D01AA8   . 8985 DCFCFFFF  MOV DWORD PTR SS:[EBP-324],EAX
71D01AAE   . FF15 1C20D071  CALL DWORD PTR DS:[<&KERNEL32.IsDebugger>; [IsDebuggerPresent
71D01AB4   . A3 7830D071    MOV DWORD PTR DS:[71D03078],EAX
71D01AB9   . 6A 01          PUSH 1
71D01ABB   . E8 DA030000    CALL <JMP.&MSVCR100._crt_debugger_hook>
71D01AC0   . 59             POP ECX
71D01AC1   . 6A 00          PUSH 0                                   ; /pTopLevelFilter = NULL
71D01AC3   . FF15 2020D071  CALL DWORD PTR DS:[<&KERNEL32.SetUnhandl>; \SetUnhandledExceptionFilter
71D01AC9   . 68 D020D071    PUSH test.71D020D0                       ; /pExceptionInfo = test.71D020D0
71D01ACE   . FF15 2420D071  CALL DWORD PTR DS:[<&KERNEL32.UnhandledE>; \UnhandledExceptionFilter
71D01AD4   . 833D 7830D071 >CMP DWORD PTR DS:[71D03078],0
71D01ADB   . 75 08          JNZ SHORT test.71D01AE5
71D01ADD   . 6A 01          PUSH 1
71D01ADF   . E8 B6030000    CALL <JMP.&MSVCR100._crt_debugger_hook>
71D01AE4   . 59             POP ECX
71D01AE5   > 68 090400C0    PUSH C0000409                            ; /ExitCode = C0000409 (-1073740791.)
71D01AEA   . FF15 2820D071  CALL DWORD PTR DS:[<&KERNEL32.GetCurrent>; |[GetCurrentProcess
71D01AF0   . 50             PUSH EAX                                 ; |hProcess
71D01AF1   . FF15 2C20D071  CALL DWORD PTR DS:[<&KERNEL32.TerminateP>; \TerminateProcess
71D01AF7   . C9             LEAVE
71D01AF8   . C3             RETN
71D01AF9   . 68 4C33D071    PUSH test.71D0334C
71D01AFE   . E8 9D030000    CALL <JMP.&MSVCR100.__clean_type_info_na>
71D01B03   . 59             POP ECX
71D01B04   . C3             RETN
71D01B05  /$ 6A 14          PUSH 14
71D01B07  |. 68 1023D071    PUSH test.71D02310
71D01B0C  |. E8 6F020000    CALL test.71D01D80
71D01B11  |. FF35 6833D071  PUSH DWORD PTR DS:[71D03368]
71D01B17  |. 8B35 3820D071  MOV ESI,DWORD PTR DS:[<&KERNEL32.DecodeP>;  ntdll.RtlDecodePointer
71D01B1D  |. FFD6           CALL ESI                                 ;  <&KERNEL32.DecodePointer>
71D01B1F  |. 8945 E4        MOV DWORD PTR SS:[EBP-1C],EAX
71D01B22  |. 83F8 FF        CMP EAX,-1
71D01B25  |. 75 0C          JNZ SHORT test.71D01B33
71D01B27  |. FF75 08        PUSH DWORD PTR SS:[EBP+8]                ; /func
71D01B2A  |. FF15 5420D071  CALL DWORD PTR DS:[<&MSVCR100._onexit>]  ; \_onexit
71D01B30  |. 59             POP ECX
71D01B31  |. EB 64          JMP SHORT test.71D01B97
71D01B33  |> 6A 08          PUSH 8
71D01B35  |. E8 78030000    CALL <JMP.&MSVCR100._lock>
71D01B3A  |. 59             POP ECX
71D01B3B  |. 8365 FC 00     AND DWORD PTR SS:[EBP-4],0
71D01B3F  |. FF35 6833D071  PUSH DWORD PTR DS:[71D03368]
71D01B45  |. FFD6           CALL ESI
71D01B47  |. 8945 E4        MOV DWORD PTR SS:[EBP-1C],EAX
71D01B4A  |. FF35 6433D071  PUSH DWORD PTR DS:[71D03364]
71D01B50  |. FFD6           CALL ESI
71D01B52  |. 8945 E0        MOV DWORD PTR SS:[EBP-20],EAX
71D01B55  |. 8D45 E0        LEA EAX,DWORD PTR SS:[EBP-20]
71D01B58  |. 50             PUSH EAX
71D01B59  |. 8D45 E4        LEA EAX,DWORD PTR SS:[EBP-1C]
71D01B5C  |. 50             PUSH EAX
71D01B5D  |. FF75 08        PUSH DWORD PTR SS:[EBP+8]
71D01B60  |. 8B35 3C20D071  MOV ESI,DWORD PTR DS:[<&KERNEL32.EncodeP>;  ntdll.RtlEncodePointer
71D01B66  |. FFD6           CALL ESI                                 ;  <&KERNEL32.EncodePointer>
71D01B68  |. 50             PUSH EAX
71D01B69  |. E8 3E030000    CALL <JMP.&MSVCR100.__dllonexit>
71D01B6E  |. 83C4 0C        ADD ESP,0C
71D01B71  |. 8945 DC        MOV DWORD PTR SS:[EBP-24],EAX
71D01B74  |. FF75 E4        PUSH DWORD PTR SS:[EBP-1C]
71D01B77  |. FFD6           CALL ESI
71D01B79  |. A3 6833D071    MOV DWORD PTR DS:[71D03368],EAX
71D01B7E  |. FF75 E0        PUSH DWORD PTR SS:[EBP-20]
71D01B81  |. FFD6           CALL ESI
71D01B83  |. A3 6433D071    MOV DWORD PTR DS:[71D03364],EAX
71D01B88  |. C745 FC FEFFFF>MOV DWORD PTR SS:[EBP-4],-2
71D01B8F  |. E8 09000000    CALL test.71D01B9D
71D01B94  |. 8B45 DC        MOV EAX,DWORD PTR SS:[EBP-24]
71D01B97  |> E8 29020000    CALL test.71D01DC5
71D01B9C  \. C3             RETN
71D01B9D  /$ 6A 08          PUSH 8
71D01B9F  |. E8 02030000    CALL <JMP.&MSVCR100._unlock>
71D01BA4  |. 59             POP ECX
71D01BA5  \. C3             RETN
71D01BA6  /$ 8BFF           MOV EDI,EDI
71D01BA8  |. 55             PUSH EBP
71D01BA9  |. 8BEC           MOV EBP,ESP
71D01BAB  |. FF75 08        PUSH DWORD PTR SS:[EBP+8]
71D01BAE  |. E8 52FFFFFF    CALL test.71D01B05
71D01BB3  |. F7D8           NEG EAX
71D01BB5  |. 1BC0           SBB EAX,EAX
71D01BB7  |. F7D8           NEG EAX
71D01BB9  |. 59             POP ECX
71D01BBA  |. 48             DEC EAX
71D01BBB  |. 5D             POP EBP
71D01BBC  \. C3             RETN
71D01BBD  /$ 8BFF           MOV EDI,EDI
71D01BBF  |. 56             PUSH ESI
71D01BC0  |. B8 D822D071    MOV EAX,test.71D022D8
71D01BC5  |. BE D822D071    MOV ESI,test.71D022D8
71D01BCA  |. 57             PUSH EDI
71D01BCB  |. 8BF8           MOV EDI,EAX
71D01BCD  |. 3BC6           CMP EAX,ESI
71D01BCF  |. 73 0F          JNB SHORT test.71D01BE0
71D01BD1  |> 8B07           /MOV EAX,DWORD PTR DS:[EDI]
71D01BD3  |. 85C0           |TEST EAX,EAX
71D01BD5  |. 74 02          |JE SHORT test.71D01BD9
71D01BD7  |. FFD0           |CALL EAX
71D01BD9  |> 83C7 04        |ADD EDI,4
71D01BDC  |. 3BFE           |CMP EDI,ESI
71D01BDE  |.^72 F1          \JB SHORT test.71D01BD1
71D01BE0  |> 5F             POP EDI
71D01BE1  |. 5E             POP ESI
71D01BE2  \. C3             RETN
71D01BE3     8BFF           MOV EDI,EDI
71D01BE5   . 56             PUSH ESI
71D01BE6   . B8 E022D071    MOV EAX,test.71D022E0
71D01BEB   . BE E022D071    MOV ESI,test.71D022E0
71D01BF0   . 57             PUSH EDI
71D01BF1   . 8BF8           MOV EDI,EAX
71D01BF3   . 3BC6           CMP EAX,ESI
71D01BF5   . 73 0F          JNB SHORT test.71D01C06
71D01BF7   > 8B07           MOV EAX,DWORD PTR DS:[EDI]
71D01BF9   . 85C0           TEST EAX,EAX
71D01BFB   . 74 02          JE SHORT test.71D01BFF
71D01BFD   . FFD0           CALL EAX
71D01BFF   > 83C7 04        ADD EDI,4
71D01C02   . 3BFE           CMP EDI,ESI
71D01C04   .^72 F1          JB SHORT test.71D01BF7
71D01C06   > 5F             POP EDI
71D01C07   . 5E             POP ESI
71D01C08   . C3             RETN
71D01C09     CC             INT3
71D01C0A     CC             INT3
71D01C0B     CC             INT3
71D01C0C     CC             INT3
71D01C0D     CC             INT3
71D01C0E     CC             INT3
71D01C0F     CC             INT3
71D01C10  /$ 8BFF           MOV EDI,EDI
71D01C12  |. 55             PUSH EBP
71D01C13  |. 8BEC           MOV EBP,ESP
71D01C15  |. 8B4D 08        MOV ECX,DWORD PTR SS:[EBP+8]
71D01C18  |. B8 4D5A0000    MOV EAX,5A4D
71D01C1D  |. 66:3901        CMP WORD PTR DS:[ECX],AX
71D01C20  |. 74 04          JE SHORT test.71D01C26
71D01C22  |> 33C0           XOR EAX,EAX
71D01C24  |. 5D             POP EBP
71D01C25  |. C3             RETN
71D01C26  |> 8B41 3C        MOV EAX,DWORD PTR DS:[ECX+3C]
71D01C29  |. 03C1           ADD EAX,ECX
71D01C2B  |. 8138 50450000  CMP DWORD PTR DS:[EAX],4550
71D01C31  |.^75 EF          JNZ SHORT test.71D01C22
71D01C33  |. 33D2           XOR EDX,EDX
71D01C35  |. B9 0B010000    MOV ECX,10B
71D01C3A  |. 66:3948 18     CMP WORD PTR DS:[EAX+18],CX
71D01C3E  |. 0F94C2         SETE DL
71D01C41  |. 8BC2           MOV EAX,EDX
71D01C43  |. 5D             POP EBP
71D01C44  \. C3             RETN
71D01C45     CC             INT3
71D01C46     CC             INT3
71D01C47     CC             INT3
71D01C48     CC             INT3
71D01C49     CC             INT3
71D01C4A     CC             INT3
71D01C4B     CC             INT3
71D01C4C     CC             INT3
71D01C4D     CC             INT3
71D01C4E     CC             INT3
71D01C4F     CC             INT3
71D01C50  /$ 8BFF           MOV EDI,EDI
71D01C52  |. 55             PUSH EBP
71D01C53  |. 8BEC           MOV EBP,ESP
71D01C55  |. 8B45 08        MOV EAX,DWORD PTR SS:[EBP+8]
71D01C58  |. 8B48 3C        MOV ECX,DWORD PTR DS:[EAX+3C]
71D01C5B  |. 03C8           ADD ECX,EAX
71D01C5D  |. 0FB741 14      MOVZX EAX,WORD PTR DS:[ECX+14]
71D01C61  |. 53             PUSH EBX
71D01C62  |. 56             PUSH ESI
71D01C63  |. 0FB771 06      MOVZX ESI,WORD PTR DS:[ECX+6]
71D01C67  |. 33D2           XOR EDX,EDX
71D01C69  |. 57             PUSH EDI
71D01C6A  |. 8D4408 18      LEA EAX,DWORD PTR DS:[EAX+ECX+18]
71D01C6E  |. 85F6           TEST ESI,ESI
71D01C70  |. 74 1B          JE SHORT test.71D01C8D
71D01C72  |. 8B7D 0C        MOV EDI,DWORD PTR SS:[EBP+C]
71D01C75  |> 8B48 0C        /MOV ECX,DWORD PTR DS:[EAX+C]
71D01C78  |. 3BF9           |CMP EDI,ECX
71D01C7A  |. 72 09          |JB SHORT test.71D01C85
71D01C7C  |. 8B58 08        |MOV EBX,DWORD PTR DS:[EAX+8]
71D01C7F  |. 03D9           |ADD EBX,ECX
71D01C81  |. 3BFB           |CMP EDI,EBX
71D01C83  |. 72 0A          |JB SHORT test.71D01C8F
71D01C85  |> 42             |INC EDX
71D01C86  |. 83C0 28        |ADD EAX,28
71D01C89  |. 3BD6           |CMP EDX,ESI
71D01C8B  |.^72 E8          \JB SHORT test.71D01C75
71D01C8D  |> 33C0           XOR EAX,EAX
71D01C8F  |> 5F             POP EDI
71D01C90  |. 5E             POP ESI
71D01C91  |. 5B             POP EBX
71D01C92  |. 5D             POP EBP
71D01C93  \. C3             RETN
71D01C94     CC             INT3
71D01C95     CC             INT3
71D01C96     CC             INT3
71D01C97     CC             INT3
71D01C98     CC             INT3
71D01C99     CC             INT3
71D01C9A     CC             INT3
71D01C9B     CC             INT3
71D01C9C     CC             INT3
71D01C9D     CC             INT3
71D01C9E     CC             INT3
71D01C9F     CC             INT3
71D01CA0   $ 8BFF           MOV EDI,EDI
71D01CA2   . 55             PUSH EBP
71D01CA3   . 8BEC           MOV EBP,ESP
71D01CA5   . 6A FE          PUSH -2
71D01CA7   . 68 3023D071    PUSH test.71D02330
71D01CAC   . 68 D91DD071    PUSH test.71D01DD9
71D01CB1   . 64:A1 00000000 MOV EAX,DWORD PTR FS:[0]
71D01CB7   . 50             PUSH EAX
71D01CB8   . 83EC 08        SUB ESP,8
71D01CBB   . 53             PUSH EBX
71D01CBC   . 56             PUSH ESI
71D01CBD   . 57             PUSH EDI
71D01CBE   . A1 0030D071    MOV EAX,DWORD PTR DS:[71D03000]
71D01CC3   . 3145 F8        XOR DWORD PTR SS:[EBP-8],EAX
71D01CC6   . 33C5           XOR EAX,EBP
71D01CC8   . 50             PUSH EAX
71D01CC9   . 8D45 F0        LEA EAX,DWORD PTR SS:[EBP-10]
71D01CCC   . 64:A3 00000000 MOV DWORD PTR FS:[0],EAX
71D01CD2   . 8965 E8        MOV DWORD PTR SS:[EBP-18],ESP
71D01CD5   . C745 FC 000000>MOV DWORD PTR SS:[EBP-4],0
71D01CDC   . 68 0000D071    PUSH test.71D00000                       ; /Arg1 = 71D00000
71D01CE1   . E8 2AFFFFFF    CALL test.71D01C10                       ; \test.71D01C10
71D01CE6   . 83C4 04        ADD ESP,4
71D01CE9   . 85C0           TEST EAX,EAX
71D01CEB   . 74 54          JE SHORT test.71D01D41
71D01CED   . 8B45 08        MOV EAX,DWORD PTR SS:[EBP+8]
71D01CF0   . 2D 0000D071    SUB EAX,test.71D00000
71D01CF5   . 50             PUSH EAX                                 ; /Arg2
71D01CF6   . 68 0000D071    PUSH test.71D00000                       ; |Arg1 = 71D00000
71D01CFB   . E8 50FFFFFF    CALL test.71D01C50                       ; \test.71D01C50
71D01D00   . 83C4 08        ADD ESP,8
71D01D03   . 85C0           TEST EAX,EAX
71D01D05   . 74 3A          JE SHORT test.71D01D41
71D01D07   . 8B40 24        MOV EAX,DWORD PTR DS:[EAX+24]
71D01D0A   . C1E8 1F        SHR EAX,1F
71D01D0D   . F7D0           NOT EAX
71D01D0F   . 83E0 01        AND EAX,1
71D01D12   . C745 FC FEFFFF>MOV DWORD PTR SS:[EBP-4],-2
71D01D19   . 8B4D F0        MOV ECX,DWORD PTR SS:[EBP-10]
71D01D1C   . 64:890D 000000>MOV DWORD PTR FS:[0],ECX
71D01D23   . 59             POP ECX
71D01D24   . 5F             POP EDI
71D01D25   . 5E             POP ESI
71D01D26   . 5B             POP EBX
71D01D27   . 8BE5           MOV ESP,EBP
71D01D29   . 5D             POP EBP
71D01D2A   . C3             RETN
71D01D2B   . 8B45 EC        MOV EAX,DWORD PTR SS:[EBP-14]
71D01D2E   . 8B08           MOV ECX,DWORD PTR DS:[EAX]
71D01D30   . 33D2           XOR EDX,EDX
71D01D32   . 8139 050000C0  CMP DWORD PTR DS:[ECX],C0000005
71D01D38   . 0F94C2         SETE DL
71D01D3B   . 8BC2           MOV EAX,EDX
71D01D3D   . C3             RETN
71D01D3E   . 8B65 E8        MOV ESP,DWORD PTR SS:[EBP-18]
71D01D41   > C745 FC FEFFFF>MOV DWORD PTR SS:[EBP-4],-2
71D01D48   . 33C0           XOR EAX,EAX
71D01D4A   . 8B4D F0        MOV ECX,DWORD PTR SS:[EBP-10]
71D01D4D   . 64:890D 000000>MOV DWORD PTR FS:[0],ECX
71D01D54   . 59             POP ECX
71D01D55   . 5F             POP EDI
71D01D56   . 5E             POP ESI
71D01D57   . 5B             POP EBX
71D01D58   . 8BE5           MOV ESP,EBP
71D01D5A   . 5D             POP EBP
71D01D5B   . C3             RETN
71D01D5C   $-FF25 6C20D071  JMP DWORD PTR DS:[<&MSVCR100._initterm>] ;  MSVCR1_1._initterm
71D01D62   $-FF25 6820D071  JMP DWORD PTR DS:[<&MSVCR100._initterm_e>;  MSVCR1_1._initterm_e
71D01D68   $-FF25 6420D071  JMP DWORD PTR DS:[<&MSVCR100._amsg_exit>>;  MSVCR1_1._amsg_exit
71D01D6E   $-FF25 6020D071  JMP DWORD PTR DS:[<&MSVCR100.__CppXcptFi>;  MSVCR1_1.__CppXcptFilter
71D01D74     CC             INT3
71D01D75     CC             INT3
71D01D76     CC             INT3
71D01D77     CC             INT3
71D01D78     CC             INT3
71D01D79     CC             INT3
71D01D7A     CC             INT3
71D01D7B     CC             INT3
71D01D7C     CC             INT3
71D01D7D     CC             INT3
71D01D7E     CC             INT3
71D01D7F     CC             INT3
71D01D80  /$ 68 D91DD071    PUSH test.71D01DD9
71D01D85  |. 64:FF35 000000>PUSH DWORD PTR FS:[0]
71D01D8C  |. 8B4424 10      MOV EAX,DWORD PTR SS:[ESP+10]
71D01D90  |. 896C24 10      MOV DWORD PTR SS:[ESP+10],EBP
71D01D94  |. 8D6C24 10      LEA EBP,DWORD PTR SS:[ESP+10]
71D01D98  |. 2BE0           SUB ESP,EAX
71D01D9A  |. 53             PUSH EBX
71D01D9B  |. 56             PUSH ESI
71D01D9C  |. 57             PUSH EDI
71D01D9D  |. A1 0030D071    MOV EAX,DWORD PTR DS:[71D03000]
71D01DA2  |. 3145 FC        XOR DWORD PTR SS:[EBP-4],EAX
71D01DA5  |. 33C5           XOR EAX,EBP
71D01DA7  |. 50             PUSH EAX
71D01DA8  |. 8965 E8        MOV DWORD PTR SS:[EBP-18],ESP
71D01DAB  |. FF75 F8        PUSH DWORD PTR SS:[EBP-8]
71D01DAE  |. 8B45 FC        MOV EAX,DWORD PTR SS:[EBP-4]
71D01DB1  |. C745 FC FEFFFF>MOV DWORD PTR SS:[EBP-4],-2
71D01DB8  |. 8945 F8        MOV DWORD PTR SS:[EBP-8],EAX
71D01DBB  |. 8D45 F0        LEA EAX,DWORD PTR SS:[EBP-10]
71D01DBE  |. 64:A3 00000000 MOV DWORD PTR FS:[0],EAX
71D01DC4  \. C3             RETN
71D01DC5  /$ 8B4D F0        MOV ECX,DWORD PTR SS:[EBP-10]
71D01DC8  |. 64:890D 000000>MOV DWORD PTR FS:[0],ECX
71D01DCF  |. 59             POP ECX
71D01DD0  |. 5F             POP EDI
71D01DD1  |. 5F             POP EDI
71D01DD2  |. 5E             POP ESI
71D01DD3  |. 5B             POP EBX
71D01DD4  |. 8BE5           MOV ESP,EBP
71D01DD6  |. 5D             POP EBP
71D01DD7  |. 51             PUSH ECX
71D01DD8  \. C3             RETN
71D01DD9     8BFF           MOV EDI,EDI
71D01DDB  /. 55             PUSH EBP
71D01DDC  |. 8BEC           MOV EBP,ESP
71D01DDE  |. FF75 14        PUSH DWORD PTR SS:[EBP+14]
71D01DE1  |. FF75 10        PUSH DWORD PTR SS:[EBP+10]
71D01DE4  |. FF75 0C        PUSH DWORD PTR SS:[EBP+C]
71D01DE7  |. FF75 08        PUSH DWORD PTR SS:[EBP+8]
71D01DEA  |. 68 5316D071    PUSH test.71D01653                       ;  ASCII ";
"
71D01DEF  |. 68 0030D071    PUSH test.71D03000
71D01DF4  |. E8 BF000000    CALL <JMP.&MSVCR100._except_handler4_com>
71D01DF9  |. 83C4 18        ADD ESP,18
71D01DFC  |. 5D             POP EBP
71D01DFD  \. C3             RETN
71D01DFE  /$ 8BFF           MOV EDI,EDI
71D01E00  |. 55             PUSH EBP
71D01E01  |. 8BEC           MOV EBP,ESP
71D01E03  |. 83EC 10        SUB ESP,10
71D01E06  |. A1 0030D071    MOV EAX,DWORD PTR DS:[71D03000]
71D01E0B  |. 8365 F8 00     AND DWORD PTR SS:[EBP-8],0
71D01E0F  |. 8365 FC 00     AND DWORD PTR SS:[EBP-4],0
71D01E13  |. 53             PUSH EBX
71D01E14  |. 57             PUSH EDI
71D01E15  |. BF 4EE640BB    MOV EDI,BB40E64E
71D01E1A  |. BB 0000FFFF    MOV EBX,FFFF0000
71D01E1F  |. 3BC7           CMP EAX,EDI
71D01E21  |. 74 0D          JE SHORT test.71D01E30
71D01E23  |. 85C3           TEST EBX,EAX
71D01E25  |. 74 09          JE SHORT test.71D01E30
71D01E27  |. F7D0           NOT EAX
71D01E29  |. A3 0430D071    MOV DWORD PTR DS:[71D03004],EAX
71D01E2E  |. EB 65          JMP SHORT test.71D01E95
71D01E30  |> 56             PUSH ESI
71D01E31  |. 8D45 F8        LEA EAX,DWORD PTR SS:[EBP-8]
71D01E34  |. 50             PUSH EAX                                 ; /pFileTime
71D01E35  |. FF15 4020D071  CALL DWORD PTR DS:[<&KERNEL32.GetSystemT>; \GetSystemTimeAsFileTime
71D01E3B  |. 8B75 FC        MOV ESI,DWORD PTR SS:[EBP-4]
71D01E3E  |. 3375 F8        XOR ESI,DWORD PTR SS:[EBP-8]
71D01E41  |. FF15 0C20D071  CALL DWORD PTR DS:[<&KERNEL32.GetCurrent>; [GetCurrentProcessId
71D01E47  |. 33F0           XOR ESI,EAX
71D01E49  |. FF15 1020D071  CALL DWORD PTR DS:[<&KERNEL32.GetCurrent>; [GetCurrentThreadId
71D01E4F  |. 33F0           XOR ESI,EAX
71D01E51  |. FF15 1420D071  CALL DWORD PTR DS:[<&KERNEL32.GetTickCou>; [GetTickCount
71D01E57  |. 33F0           XOR ESI,EAX
71D01E59  |. 8D45 F0        LEA EAX,DWORD PTR SS:[EBP-10]
71D01E5C  |. 50             PUSH EAX                                 ; /pPerformanceCount
71D01E5D  |. FF15 1820D071  CALL DWORD PTR DS:[<&KERNEL32.QueryPerfo>; \QueryPerformanceCounter
71D01E63  |. 8B45 F4        MOV EAX,DWORD PTR SS:[EBP-C]
71D01E66  |. 3345 F0        XOR EAX,DWORD PTR SS:[EBP-10]
71D01E69  |. 33F0           XOR ESI,EAX
71D01E6B  |. 3BF7           CMP ESI,EDI
71D01E6D  |. 75 07          JNZ SHORT test.71D01E76
71D01E6F  |. BE 4FE640BB    MOV ESI,BB40E64F
71D01E74  |. EB 10          JMP SHORT test.71D01E86
71D01E76  |> 85F3           TEST EBX,ESI
71D01E78  |. 75 0C          JNZ SHORT test.71D01E86
71D01E7A  |. 8BC6           MOV EAX,ESI
71D01E7C  |. 0D 11470000    OR EAX,4711
71D01E81  |. C1E0 10        SHL EAX,10
71D01E84  |. 0BF0           OR ESI,EAX
71D01E86  |> 8935 0030D071  MOV DWORD PTR DS:[71D03000],ESI
71D01E8C  |. F7D6           NOT ESI
71D01E8E  |. 8935 0430D071  MOV DWORD PTR DS:[71D03004],ESI
71D01E94  |. 5E             POP ESI
71D01E95  |> 5F             POP EDI
71D01E96  |. 5B             POP EBX
71D01E97  |. C9             LEAVE
71D01E98  \. C3             RETN
71D01E99     CC             INT3
71D01E9A   $-FF25 5C20D071  JMP DWORD PTR DS:[<&MSVCR100._crt_debugg>;  MSVCR1_1._crt_debugger_hook
71D01EA0   $-FF25 4820D071  JMP DWORD PTR DS:[<&MSVCR100.__clean_typ>;  MSVCR1_1.__clean_type_info_names_internal
71D01EA6   $-FF25 8420D071  JMP DWORD PTR DS:[<&MSVCR100._unlock>]   ;  MSVCR1_1._unlock
71D01EAC   $-FF25 4C20D071  JMP DWORD PTR DS:[<&MSVCR100.__dllonexit>;  MSVCR1_1.__dllonexit
71D01EB2   $-FF25 5020D071  JMP DWORD PTR DS:[<&MSVCR100._lock>]     ;  MSVCR1_1._lock
71D01EB8   $-FF25 5820D071  JMP DWORD PTR DS:[<&MSVCR100._except_han>;  MSVCR1_1._except_handler4_common
Quote Originally Posted by IsReady View Post
@[H]aaBX good job but i see nothing special on that base xD
Code:
71D01000     68             DB 68                                    ;  CHAR 'h'
71D01001   . D820D071       DD test.71D020D8                         ;  UNICODE "CShell.dll"
71D01005     FF             DB FF
71D01006     15             DB 15
71D01007   . 0020D071       DD <&KERNEL32.GetModuleHandleW>
71D0100B     80             DB 80
71D0100C     3D             DB 3D                                    ;  CHAR '='
71D0100D   . 5533D071       DD test.71D03355
71D01011     00             DB 00
71D01012     0F             DB 0F
71D01013     85             DB 85
71D01014     31             DB 31                                    ;  CHAR '1'
71D01015     03             DB 03
71D01016     00             DB 00
71D01017     00             DB 00
71D01018     D9             DB D9
71D01019     05             DB 05
71D0101A   . 0422D071       DD test.71D02204
71D0101E     C6             DB C6
71D0101F     05             DB 05
71D01020   . 5533D071       DD test.71D03355
71D01024     01             DB 01
71D01025     33             DB 33                                    ;  CHAR '3'
71D01026     C9             DB C9
71D01027     56             DB 56                                    ;  CHAR 'V'
71D01028   > 8B90 D07FC200  MOV EDX,DWORD PTR DS:[EAX+C27FD0]
71D0102E   . 833C11 00      CMP DWORD PTR DS:[ECX+EDX],0
71D01032   . 0F84 F6020000  JE test.71D0132E
71D01038   . BA B40A0000    MOV EDX,0AB4
71D0103D   > 83F9 14        CMP ECX,14
71D01040   . 0F84 C0020000  JE test.71D01306
71D01046   . 81F9 8C000000  CMP ECX,8C
71D0104C   . 0F84 B4020000  JE test.71D01306
71D01052   . 81F9 28010000  CMP ECX,128
71D01058   . 0F84 A8020000  JE test.71D01306
71D0105E   . 81F9 E0010000  CMP ECX,1E0
71D01064   . 0F84 9C020000  JE test.71D01306
71D0106A   . 81F9 10020000  CMP ECX,210
71D01070   . 0F84 90020000  JE test.71D01306
71D01076   . 81F9 C0020000  CMP ECX,2C0
71D0107C   . 0F84 84020000  JE test.71D01306
71D01082   . 81F9 C4020000  CMP ECX,2C4
71D01088   . 0F84 78020000  JE test.71D01306
71D0108E   . 81F9 C8020000  CMP ECX,2C8
71D01094   . 0F84 6C020000  JE test.71D01306
71D0109A   . 81F9 D8020000  CMP ECX,2D8
71D010A0   . 0F84 60020000  JE test.71D01306
71D010A6   . 81F9 F4020000  CMP ECX,2F4
71D010AC   . 0F84 54020000  JE test.71D01306
71D010B2   . 81F9 0C030000  CMP ECX,30C
71D010B8   . 0F84 48020000  JE test.71D01306
71D010BE   . 81F9 10030000  CMP ECX,310
71D010C4   . 0F84 3C020000  JE test.71D01306
71D010CA   . 81F9 14030000  CMP ECX,314
71D010D0   . 0F84 30020000  JE test.71D01306
71D010D6   . 81F9 18030000  CMP ECX,318
71D010DC   . 0F84 24020000  JE test.71D01306
71D010E2   . 81F9 1C030000  CMP ECX,31C
71D010E8   . 0F84 18020000  JE test.71D01306
71D010EE   . 81F9 7C030000  CMP ECX,37C
71D010F4   . 0F84 0C020000  JE test.71D01306
71D010FA   . 81F9 80030000  CMP ECX,380
71D01100   . 0F84 00020000  JE test.71D01306
71D01106   . 81F9 84030000  CMP ECX,384
71D0110C   . 0F84 F4010000  JE test.71D01306
71D01112   . 81F9 88030000  CMP ECX,388
71D01118   . 0F84 E8010000  JE test.71D01306
71D0111E   . 81F9 8C030000  CMP ECX,38C
71D01124   . 0F84 DC010000  JE test.71D01306
71D0112A   . 81F9 90030000  CMP ECX,390
71D01130   . 0F84 D0010000  JE test.71D01306
71D01136   . 81F9 BC030000  CMP ECX,3BC
71D0113C   . 0F84 C4010000  JE test.71D01306
71D01142   . 81F9 D0030000  CMP ECX,3D0
71D01148   . 0F84 B8010000  JE test.71D01306
71D0114E   . 81F9 14040000  CMP ECX,414
71D01154   . 0F84 AC010000  JE test.71D01306
71D0115A   . 81F9 34040000  CMP ECX,434
71D01160   . 0F84 A0010000  JE test.71D01306
71D01166   . 81F9 38040000  CMP ECX,438
71D0116C   . 0F84 94010000  JE test.71D01306
71D01172   . 81F9 3C040000  CMP ECX,43C
71D01178   . 0F84 88010000  JE test.71D01306
71D0117E   . 81F9 B8040000  CMP ECX,4B8
71D01184   . 0F84 7C010000  JE test.71D01306
71D0118A   . 81F9 BC040000  CMP ECX,4BC
71D01190   . 0F84 70010000  JE test.71D01306
71D01196   . 81F9 C0040000  CMP ECX,4C0
71D0119C   . 0F84 64010000  JE test.71D01306
71D011A2   . 81F9 C4040000  CMP ECX,4C4
71D011A8   . 0F84 58010000  JE test.71D01306
71D011AE   . 81F9 C8040000  CMP ECX,4C8
71D011B4   . 0F84 4C010000  JE test.71D01306
71D011BA   . 81F9 CC040000  CMP ECX,4CC
71D011C0   . 0F84 40010000  JE test.71D01306
71D011C6   . 81F9 64050000  CMP ECX,564
71D011CC   . 0F84 34010000  JE test.71D01306
71D011D2   . 81F9 68050000  CMP ECX,568
71D011D8   . 0F84 28010000  JE test.71D01306
71D011DE   . 81F9 D0050000  CMP ECX,5D0
71D011E4   . 0F84 1C010000  JE test.71D01306
71D011EA   . 81F9 E0050000  CMP ECX,5E0
71D011F0   . 0F84 10010000  JE test.71D01306
71D011F6   . 81F9 F4050000  CMP ECX,5F4
71D011FC   . 0F84 04010000  JE test.71D01306
71D01202   . 81F9 50060000  CMP ECX,650
71D01208   . 0F84 F8000000  JE test.71D01306
71D0120E   . 81F9 54060000  CMP ECX,654
71D01214   . 0F84 EC000000  JE test.71D01306
71D0121A   . 81F9 58060000  CMP ECX,658
71D01220   . 0F84 E0000000  JE test.71D01306
71D01226   . 81F9 5C060000  CMP ECX,65C
71D0122C   . 0F84 D4000000  JE test.71D01306
71D01232   . 81F9 60060000  CMP ECX,660
71D01238   . 0F84 C8000000  JE test.71D01306
71D0123E   . 81F9 64060000  CMP ECX,664
71D01244   . 0F84 BC000000  JE test.71D01306
71D0124A   . 81F9 84060000  CMP ECX,684
71D01250   . 0F84 B0000000  JE test.71D01306
71D01256   . 81F9 D4060000  CMP ECX,6D4
71D0125C   . 0F84 A4000000  JE test.71D01306
71D01262   . 81F9 1C070000  CMP ECX,71C
71D01268   . 0F84 98000000  JE test.71D01306
71D0126E   . 81F9 20070000  CMP ECX,720
71D01274   . 0F84 8C000000  JE test.71D01306
71D0127A   . 81F9 24070000  CMP ECX,724
71D01280   . 0F84 80000000  JE test.71D01306
71D01286   . 81F9 A0070000  CMP ECX,7A0
71D0128C   . 74 78          JE SHORT test.71D01306
71D0128E   . 81F9 14080000  CMP ECX,814
71D01294   . 74 70          JE SHORT test.71D01306
71D01296   . 81F9 18080000  CMP ECX,818
71D0129C   . 74 68          JE SHORT test.71D01306
71D0129E   . 81F9 70080000  CMP ECX,870
71D012A4   . 74 60          JE SHORT test.71D01306
71D012A6   . 81F9 74080000  CMP ECX,874
71D012AC   . 74 58          JE SHORT test.71D01306
71D012AE   . 81F9 90080000  CMP ECX,890
71D012B4   . 74 50          JE SHORT test.71D01306
71D012B6   . 81F9 C4080000  CMP ECX,8C4
71D012BC   . 74 48          JE SHORT test.71D01306
71D012BE   . 81F9 00090000  CMP ECX,900
71D012C4   . 74 40          JE SHORT test.71D01306
71D012C6   . 81F9 20090000  CMP ECX,920
71D012CC   . 74 38          JE SHORT test.71D01306
71D012CE   . 81F9 2C090000  CMP ECX,92C
71D012D4   . 74 30          JE SHORT test.71D01306
71D012D6   . 81F9 B0090000  CMP ECX,9B0
71D012DC   . 74 28          JE SHORT test.71D01306
71D012DE   . 81F9 1C0A0000  CMP ECX,0A1C
71D012E4   . 74 20          JE SHORT test.71D01306
71D012E6   . 81F9 D40A0000  CMP ECX,0AD4
71D012EC   . 74 18          JE SHORT test.71D01306
71D012EE   . 81F9 F00A0000  CMP ECX,0AF0
71D012F4   . 74 10          JE SHORT test.71D01306
71D012F6   . 81F9 380B0000  CMP ECX,0B38
71D012FC   . 74 08          JE SHORT test.71D01306
71D012FE   . 81F9 3C0B0000  CMP ECX,0B3C
71D01304   . 75 19          JNZ SHORT test.71D0131F
71D01306   > 8BB0 D07FC200  MOV ESI,DWORD PTR DS:[EAX+C27FD0]
71D0130C   . 8B3431         MOV ESI,DWORD PTR DS:[ECX+ESI]
71D0130F   . D95416 B8      FST DWORD PTR DS:[ESI+EDX-48]
71D01313   . 8BB0 D07FC200  MOV ESI,DWORD PTR DS:[EAX+C27FD0]
71D01319   . 8B3431         MOV ESI,DWORD PTR DS:[ECX+ESI]
71D0131C   . D91432         FST DWORD PTR DS:[EDX+ESI]
71D0131F   > 83C2 04        ADD EDX,4
71D01322   . 81FA D80A0000  CMP EDX,0AD8
71D01328   .^0F8C 0FFDFFFF  JL test.71D0103D
71D0132E   > 83C1 04        ADD ECX,4
71D01331   . 81F9 F00A0000  CMP ECX,0AF0
71D01337   .^0F8C EBFCFFFF  JL test.71D01028
71D0133D   . 5E             POP ESI
71D0133E   . DDD8           FSTP ST
71D01340   . 6A 64          PUSH 64                                  ; /Timeout = 100. ms
71D01342   . FF15 0420D071  CALL DWORD PTR DS:[<&KERNEL32.Sleep>]    ; \Sleep
71D01348   . C3             RETN
71D01349   . 6A 64          PUSH 64                                  ; /Timeout = 100. ms
71D0134B   . C605 5533D071 >MOV BYTE PTR DS:[71D03355],0             ; |
71D01352   . FF15 0420D071  CALL DWORD PTR DS:[<&KERNEL32.Sleep>]    ; \Sleep
71D01358   . C3             RETN
71D01359     CC             INT3
71D0135A     CC             INT3
71D0135B     CC             INT3
71D0135C     CC             INT3
71D0135D     CC             INT3
71D0135E     CC             INT3
71D0135F     CC             INT3
71D01360     68             DB 68                                    ;  CHAR 'h'
71D01361   . D820D071       DD test.71D020D8                         ;  UNICODE "CShell.dll"
71D01365     FF             DB FF
71D01366     15             DB 15
71D01367   . 0020D071       DD <&KERNEL32.GetModuleHandleW>
71D0136B     80             DB 80
71D0136C     3D             DB 3D                                    ;  CHAR '='
71D0136D   . 5633D071       DD test.71D03356
71D01371     00             DB 00
71D01372     0F             DB 0F
71D01373     85             DB 85
71D01374     94             DB 94
71D01375     00             DB 00
71D01376     00             DB 00
71D01377     00             DB 00
71D01378     83             DB 83
71D01379     B8             DB B8
71D0137A     D0             DB D0
71D0137B     7F             DB 7F
71D0137C   . C2 0000        RETN 0
71D0137F     C6             DB C6
71D01380     05             DB 05
71D01381   . 5633D071       DD test.71D03356
71D01385     01             DB 01
71D01386     0F             DB 0F
71D01387     84             DB 84
71D01388     87             DB 87
71D01389     00             DB 00
71D0138A     00             DB 00
71D0138B     00             DB 00
71D0138C     D9             DB D9
71D0138D     EE             DB EE
71D0138E     B9             DB B9
71D0138F     0C             DB 0C
71D01390     00             DB 00
71D01391     00             DB 00
71D01392     00             DB 00
71D01393   > 8B90 D07FC200  MOV EDX,DWORD PTR DS:[EAX+C27FD0]
71D01399   . 8B5411 F4      MOV EDX,DWORD PTR DS:[ECX+EDX-C]
71D0139D   . 85D2           TEST EDX,EDX
71D0139F   . 74 06          JE SHORT test.71D013A7
71D013A1   . D992 803B0000  FST DWORD PTR DS:[EDX+3B80]
71D013A7   > 8B90 D07FC200  MOV EDX,DWORD PTR DS:[EAX+C27FD0]
71D013AD   . 8B5411 F8      MOV EDX,DWORD PTR DS:[ECX+EDX-8]
71D013B1   . 85D2           TEST EDX,EDX
71D013B3   . 74 06          JE SHORT test.71D013BB
71D013B5   . D992 803B0000  FST DWORD PTR DS:[EDX+3B80]
71D013BB   > 8B90 D07FC200  MOV EDX,DWORD PTR DS:[EAX+C27FD0]
71D013C1   . 8B5411 FC      MOV EDX,DWORD PTR DS:[ECX+EDX-4]
71D013C5   . 85D2           TEST EDX,EDX
71D013C7   . 74 06          JE SHORT test.71D013CF
71D013C9   . D992 803B0000  FST DWORD PTR DS:[EDX+3B80]
71D013CF   > 8B90 D07FC200  MOV EDX,DWORD PTR DS:[EAX+C27FD0]
71D013D5   . 8B1411         MOV EDX,DWORD PTR DS:[ECX+EDX]
71D013D8   . 85D2           TEST EDX,EDX
71D013DA   . 74 06          JE SHORT test.71D013E2
71D013DC   . D992 803B0000  FST DWORD PTR DS:[EDX+3B80]
71D013E2   > 8B90 D07FC200  MOV EDX,DWORD PTR DS:[EAX+C27FD0]
71D013E8   . 8B5411 04      MOV EDX,DWORD PTR DS:[ECX+EDX+4]
71D013EC   . 85D2           TEST EDX,EDX
71D013EE   . 74 06          JE SHORT test.71D013F6
71D013F0   . D992 803B0000  FST DWORD PTR DS:[EDX+3B80]
71D013F6   > 83C1 14        ADD ECX,14
71D013F9   . 81F9 00070000  CMP ECX,700
71D013FF   .^7C 92          JL SHORT test.71D01393
71D01401   . 6A 64          PUSH 64                                  ; /Timeout = 100. ms
71D01403   . DDD8           FSTP ST                                  ; |
71D01405   . FF15 0420D071  CALL DWORD PTR DS:[<&KERNEL32.Sleep>]    ; \Sleep
71D0140B   . C3             RETN
71D0140C   . C605 5633D071 >MOV BYTE PTR DS:[71D03356],0
71D01413   . 6A 64          PUSH 64                                  ; /Timeout = 100. ms
71D01415   . FF15 0420D071  CALL DWORD PTR DS:[<&KERNEL32.Sleep>]    ; \Sleep
71D0141B   . C3             RETN
71D0141C     CC             INT3
71D0141D     CC             INT3
71D0141E     CC             INT3
71D0141F     CC             INT3
71D01420     55             DB 55                                    ;  CHAR 'U'
71D01421     8B             DB 8B
71D01422     EC             DB EC
71D01423     83             DB 83
71D01424     EC             DB EC
71D01425     08             DB 08
71D01426     53             DB 53                                    ;  CHAR 'S'
71D01427     56             DB 56                                    ;  CHAR 'V'
71D01428     8B             DB 8B
71D01429     35             DB 35                                    ;  CHAR '5'
71D0142A   . 0020D071       DD <&KERNEL32.GetModuleHandleW>
71D0142E     57             DB 57                                    ;  CHAR 'W'
71D0142F     90             NOP
71D01430     68             DB 68                                    ;  CHAR 'h'
71D01431   . D820D071       DD test.71D020D8                         ;  UNICODE "CShell.dll"
71D01435     FF             DB FF
71D01436     D6             DB D6
71D01437     85             DB 85
71D01438     C0             DB C0
71D01439     74             DB 74                                    ;  CHAR 't'
71D0143A     F5             DB F5
71D0143B     8B             DB 8B
71D0143C     3D             DB 3D                                    ;  CHAR '='
71D0143D   . 9020D071       DD <&USER32.GetAsyncKeyState>
71D01441     B3             DB B3
71D01442     01             DB 01
71D01443     8B             DB 8B
71D01444     0D             DB 0D
71D01445   . 4021D071       DD test.71D02140
71D01449     B8             DB B8
71D0144A     1C             DB 1C
71D0144B   . 4A 6D 00       ASCII "Jm",0
71D0144E     88             DB 88
71D0144F     1D             DB 1D
71D01450   . 1030D071       DD test.71D03010
71D01454     89             DB 89
71D01455     08             DB 08
71D01456     66             DB 66                                    ;  CHAR 'f'
71D01457     8B             DB 8B
71D01458     15             DB 15
71D01459   . 4421D071       DD test.71D02144
71D0145D     6A             DB 6A                                    ;  CHAR 'j'
71D0145E     71             DB 71                                    ;  CHAR 'q'
71D0145F     66             DB 66                                    ;  CHAR 'f'
71D01460     89             DB 89
71D01461     50             DB 50                                    ;  CHAR 'P'
71D01462     04             DB 04
71D01463     FF             DB FF
71D01464     D7             DB D7
71D01465     66             DB 66                                    ;  CHAR 'f'
71D01466     85             DB 85
71D01467     C0             DB C0
71D01468     74             DB 74                                    ;  CHAR 't'
71D01469     05             DB 05
71D0146A     E8             DB E8
71D0146B     91             DB 91
71D0146C     FB             DB FB
71D0146D     FF             DB FF
71D0146E     FF             DB FF
71D0146F     6A             DB 6A                                    ;  CHAR 'j'
71D01470     72             DB 72                                    ;  CHAR 'r'
71D01471     FF             DB FF
71D01472     D7             DB D7
71D01473     66             DB 66                                    ;  CHAR 'f'
71D01474     85             DB 85
71D01475     C0             DB C0
71D01476     74             DB 74                                    ;  CHAR 't'
71D01477     05             DB 05
71D01478     E8             DB E8
71D01479     E3             DB E3
71D0147A     FE             DB FE
71D0147B     FF             DB FF
71D0147C     FF             DB FF
71D0147D     6A             DB 6A                                    ;  CHAR 'j'
71D0147E     73             DB 73                                    ;  CHAR 's'
71D0147F     FF             DB FF
71D01480     D7             DB D7
71D01481     66             DB 66                                    ;  CHAR 'f'
71D01482     85             DB 85
71D01483     C0             DB C0
71D01484     74             DB 74                                    ;  CHAR 't'
71D01485     6F             DB 6F                                    ;  CHAR 'o'
71D01486     80             DB 80
71D01487     3D             DB 3D                                    ;  CHAR '='
71D01488   . 5433D071       DD test.71D03354
71D0148C     00             DB 00
71D0148D     68             DB 68                                    ;  CHAR 'h'
71D0148E   . D820D071       DD test.71D020D8                         ;  UNICODE "CShell.dll"
71D01492     75             DB 75                                    ;  CHAR 'u'
71D01493     2D             DB 2D                                    ;  CHAR '-'
71D01494     88             DB 88
71D01495     1D             DB 1D
71D01496   . 5433D071       DD test.71D03354
71D0149A     C7             DB C7
71D0149B     45             DB 45                                    ;  CHAR 'E'
71D0149C     F8             DB F8
71D0149D   . F020D071       DD test.71D020F0                         ;  ASCII "TextureModels 0"
71D014A1     FF             DB FF
71D014A2     D6             DB D6
71D014A3     85             DB 85
71D014A4     C0             DB C0
71D014A5     74             DB 74                                    ;  CHAR 't'
71D014A6     46             DB 46                                    ;  CHAR 'F'
71D014A7     8B             DB 8B
71D014A8     80             DB 80
71D014A9     A4             DB A4
71D014AA     F4             DB F4
71D014AB     3E             DB 3E                                    ;  CHAR '>'
71D014AC     00             DB 00
71D014AD     8B             DB 8B
71D014AE     88             DB 88
71D014AF     00             DB 00
71D014B0     02             DB 02
71D014B1     00             DB 00
71D014B2     00             DB 00
71D014B3     89             DB 89
71D014B4     4D             DB 4D                                    ;  CHAR 'M'
71D014B5     FC             DB FC
71D014B6     FF             DB FF
71D014B7     75             DB 75                                    ;  CHAR 'u'
71D014B8     F8             DB F8
71D014B9     FF             DB FF
71D014BA     55             DB 55                                    ;  CHAR 'U'
71D014BB     FC             DB FC
71D014BC     83             DB 83
71D014BD     C4             DB C4
71D014BE     04             DB 04
71D014BF     EB             DB EB
71D014C0     2C             DB 2C                                    ;  CHAR ','
71D014C1     C6             DB C6
71D014C2     05             DB 05
71D014C3   . 5433D071       DD test.71D03354
71D014C7     00             DB 00
71D014C8     C7             DB C7
71D014C9     45             DB 45                                    ;  CHAR 'E'
71D014CA     FC             DB FC
71D014CB   . 0021D071       DD test.71D02100                         ;  ASCII "TextureModels 1"
71D014CF     FF             DB FF
71D014D0     D6             DB D6
71D014D1     85             DB 85
71D014D2     C0             DB C0
71D014D3     74             DB 74                                    ;  CHAR 't'
71D014D4     18             DB 18
71D014D5     8B             DB 8B
71D014D6     90             NOP
71D014D7     A4             DB A4
71D014D8     F4             DB F4
71D014D9     3E             DB 3E                                    ;  CHAR '>'
71D014DA     00             DB 00
71D014DB     8B             DB 8B
71D014DC     82             DB 82
71D014DD     00             DB 00
71D014DE     02             DB 02
71D014DF     00             DB 00
71D014E0     00             DB 00
71D014E1     89             DB 89
71D014E2     45             DB 45                                    ;  CHAR 'E'
71D014E3     F8             DB F8
71D014E4     FF             DB FF
71D014E5     75             DB 75                                    ;  CHAR 'u'
71D014E6     FC             DB FC
71D014E7     FF             DB FF
71D014E8     55             DB 55                                    ;  CHAR 'U'
71D014E9     F8             DB F8
71D014EA     83             DB 83
71D014EB     C4             DB C4
71D014EC     04             DB 04
71D014ED     6A             DB 6A                                    ;  CHAR 'j'
71D014EE     64             DB 64                                    ;  CHAR 'd'
71D014EF     FF             DB FF
71D014F0     15             DB 15
71D014F1   . 0420D071       DD <&KERNEL32.Sleep>
71D014F5     6A             DB 6A                                    ;  CHAR 'j'
71D014F6     74             DB 74                                    ;  CHAR 't'
71D014F7     FF             DB FF
71D014F8     D7             DB D7
71D014F9     66             DB 66                                    ;  CHAR 'f'
71D014FA     85             DB 85
71D014FB     C0             DB C0
71D014FC     74             DB 74                                    ;  CHAR 't'
71D014FD     6F             DB 6F                                    ;  CHAR 'o'
71D014FE     80             DB 80
71D014FF     3D             DB 3D                                    ;  CHAR '='
71D01500   . 5733D071       DD test.71D03357
71D01504     00             DB 00
71D01505     68             DB 68                                    ;  CHAR 'h'
71D01506   . D820D071       DD test.71D020D8                         ;  UNICODE "CShell.dll"
71D0150A     75             DB 75                                    ;  CHAR 'u'
71D0150B     2D             DB 2D                                    ;  CHAR '-'
71D0150C     88             DB 88
71D0150D     1D             DB 1D
71D0150E   . 5733D071       DD test.71D03357
71D01512     C7             DB C7
71D01513     45             DB 45                                    ;  CHAR 'E'
71D01514     FC             DB FC
71D01515   . 1021D071       DD test.71D02110                         ;  ASCII "DrawFlat 1"
71D01519     FF             DB FF
71D0151A     D6             DB D6
71D0151B     85             DB 85
71D0151C     C0             DB C0
71D0151D     74             DB 74                                    ;  CHAR 't'
71D0151E     46             DB 46                                    ;  CHAR 'F'
71D0151F     8B             DB 8B
71D01520     88             DB 88
71D01521     A4             DB A4
71D01522     F4             DB F4
71D01523     3E             DB 3E                                    ;  CHAR '>'
71D01524     00             DB 00
71D01525     8B             DB 8B
71D01526     91             DB 91
71D01527     00             DB 00
71D01528     02             DB 02
71D01529     00             DB 00
71D0152A     00             DB 00
71D0152B     89             DB 89
71D0152C     55             DB 55                                    ;  CHAR 'U'
71D0152D     F8             DB F8
71D0152E     FF             DB FF
71D0152F     75             DB 75                                    ;  CHAR 'u'
71D01530     FC             DB FC
71D01531     FF             DB FF
71D01532     55             DB 55                                    ;  CHAR 'U'
71D01533     F8             DB F8
71D01534     83             DB 83
71D01535     C4             DB C4
71D01536     04             DB 04
71D01537     EB             DB EB
71D01538     2C             DB 2C                                    ;  CHAR ','
71D01539     C6             DB C6
71D0153A     05             DB 05
71D0153B   . 5733D071       DD test.71D03357
71D0153F     00             DB 00
71D01540     C7             DB C7
71D01541     45             DB 45                                    ;  CHAR 'E'
71D01542     FC             DB FC
71D01543   . 1C21D071       DD test.71D0211C                         ;  ASCII "DrawFlat 0"
71D01547     FF             DB FF
71D01548     D6             DB D6
71D01549     85             DB 85
71D0154A     C0             DB C0
71D0154B     74             DB 74                                    ;  CHAR 't'
71D0154C     18             DB 18
71D0154D     8B             DB 8B
71D0154E     80             DB 80
71D0154F     A4             DB A4
71D01550     F4             DB F4
71D01551     3E             DB 3E                                    ;  CHAR '>'
71D01552     00             DB 00
71D01553     8B             DB 8B
71D01554     88             DB 88
71D01555     00             DB 00
71D01556     02             DB 02
71D01557     00             DB 00
71D01558     00             DB 00
71D01559     89             DB 89
71D0155A     4D             DB 4D                                    ;  CHAR 'M'
71D0155B     F8             DB F8
71D0155C     FF             DB FF
71D0155D     75             DB 75                                    ;  CHAR 'u'
71D0155E     FC             DB FC
71D0155F     FF             DB FF
71D01560     55             DB 55                                    ;  CHAR 'U'
71D01561     F8             DB F8
71D01562     83             DB 83
71D01563     C4             DB C4
71D01564     04             DB 04
71D01565     6A             DB 6A                                    ;  CHAR 'j'
71D01566     64             DB 64                                    ;  CHAR 'd'
71D01567     FF             DB FF
71D01568     15             DB 15
71D01569   . 0420D071       DD <&KERNEL32.Sleep>
71D0156D     6A             DB 6A                                    ;  CHAR 'j'
71D0156E     75             DB 75                                    ;  CHAR 'u'
71D0156F     FF             DB FF
71D01570     D7             DB D7
71D01571     66             DB 66                                    ;  CHAR 'f'
71D01572     85             DB 85
71D01573     C0             DB C0
71D01574     74             DB 74                                    ;  CHAR 't'
71D01575     6F             DB 6F                                    ;  CHAR 'o'
71D01576     80             DB 80
71D01577     3D             DB 3D                                    ;  CHAR '='
71D01578   . 5833D071       DD test.71D03358
71D0157C     00             DB 00
71D0157D     68             DB 68                                    ;  CHAR 'h'
71D0157E   . D820D071       DD test.71D020D8                         ;  UNICODE "CShell.dll"
71D01582     75             DB 75                                    ;  CHAR 'u'
71D01583     2D             DB 2D                                    ;  CHAR '-'
71D01584     88             DB 88
71D01585     1D             DB 1D
71D01586   . 5833D071       DD test.71D03358
71D0158A     C7             DB C7
71D0158B     45             DB 45                                    ;  CHAR 'E'
71D0158C     FC             DB FC
71D0158D   . 2821D071       DD test.71D02128                         ;  ASCII "DrawWorld 0"
71D01591     FF             DB FF
71D01592     D6             DB D6
71D01593     85             DB 85
71D01594     C0             DB C0
71D01595     74             DB 74                                    ;  CHAR 't'
71D01596     46             DB 46                                    ;  CHAR 'F'
71D01597     8B             DB 8B
71D01598     90             NOP
71D01599     A4             DB A4
71D0159A     F4             DB F4
71D0159B     3E             DB 3E                                    ;  CHAR '>'
71D0159C     00             DB 00
71D0159D     8B             DB 8B
71D0159E     82             DB 82
71D0159F     00             DB 00
71D015A0     02             DB 02
71D015A1     00             DB 00
71D015A2     00             DB 00
71D015A3     89             DB 89
71D015A4     45             DB 45                                    ;  CHAR 'E'
71D015A5     F8             DB F8
71D015A6     FF             DB FF
71D015A7     75             DB 75                                    ;  CHAR 'u'
71D015A8     FC             DB FC
71D015A9     FF             DB FF
71D015AA     55             DB 55                                    ;  CHAR 'U'
71D015AB     F8             DB F8
71D015AC     83             DB 83
71D015AD     C4             DB C4
71D015AE     04             DB 04
71D015AF     EB             DB EB
71D015B0     2C             DB 2C                                    ;  CHAR ','
71D015B1     C6             DB C6
71D015B2     05             DB 05
71D015B3   . 5833D071       DD test.71D03358
71D015B7     00             DB 00
71D015B8     C7             DB C7
71D015B9     45             DB 45                                    ;  CHAR 'E'
71D015BA     FC             DB FC
71D015BB   . 3421D071       DD test.71D02134                         ;  ASCII "DrawWorld 1"
71D015BF     FF             DB FF
71D015C0     D6             DB D6
71D015C1     85             DB 85
71D015C2     C0             DB C0
71D015C3     74             DB 74                                    ;  CHAR 't'
71D015C4     18             DB 18
71D015C5     8B             DB 8B
71D015C6     88             DB 88
71D015C7     A4             DB A4
71D015C8     F4             DB F4
71D015C9     3E             DB 3E                                    ;  CHAR '>'
71D015CA     00             DB 00
71D015CB     8B             DB 8B
71D015CC     91             DB 91
71D015CD     00             DB 00
71D015CE     02             DB 02
71D015CF     00             DB 00
71D015D0     00             DB 00
71D015D1     89             DB 89
71D015D2     55             DB 55                                    ;  CHAR 'U'
71D015D3     F8             DB F8
71D015D4     FF             DB FF
71D015D5     75             DB 75                                    ;  CHAR 'u'
71D015D6     FC             DB FC
71D015D7     FF             DB FF
71D015D8     55             DB 55                                    ;  CHAR 'U'
71D015D9     F8             DB F8
71D015DA     83             DB 83
71D015DB     C4             DB C4
71D015DC     04             DB 04
71D015DD     6A             DB 6A                                    ;  CHAR 'j'
71D015DE     64             DB 64                                    ;  CHAR 'd'
71D015DF     FF             DB FF
71D015E0     15             DB 15
71D015E1   . 0420D071       DD <&KERNEL32.Sleep>
71D015E5     6A             DB 6A                                    ;  CHAR 'j'
71D015E6     64             DB 64                                    ;  CHAR 'd'
71D015E7     FF             DB FF
71D015E8     15             DB 15
71D015E9   . 0420D071       DD <&KERNEL32.Sleep>
71D015ED     E9             DB E9
71D015EE     51             DB 51                                    ;  CHAR 'Q'
71D015EF     FE             DB FE
71D015F0     FF             DB FF
71D015F1     FF             DB FF
71D015F2     CC             INT3
71D015F3     CC             INT3
71D015F4     CC             INT3
71D015F5     CC             INT3
71D015F6     CC             INT3
71D015F7     CC             INT3
71D015F8     CC             INT3
71D015F9     CC             INT3
71D015FA     CC             INT3
71D015FB     CC             INT3
71D015FC     CC             INT3
71D015FD     CC             INT3
71D015FE     CC             INT3
71D015FF     CC             INT3
71D01600  /$ 55             PUSH EBP
71D01601  |. 8BEC           MOV EBP,ESP
71D01603  |. 837D 0C 01     CMP DWORD PTR SS:[EBP+C],1
71D01607  |. 75 41          JNZ SHORT test.71D0164A
71D01609  |. 8B45 08        MOV EAX,DWORD PTR SS:[EBP+8]
71D0160C  |. 50             PUSH EAX                                 ; /hLibModule
71D0160D  |. FF15 0820D071  CALL DWORD PTR DS:[<&KERNEL32.DisableThr>; \DisableThreadLibraryCalls
71D01613  |. 6A 00          PUSH 0                                   ; /Style = MB_OK|MB_APPLMODAL
71D01615  |. 68 4821D071    PUSH test.71D02148                       ; |Title = "[H]aaBX Public Hack V1 (MPGH.NET)"
71D0161A  |. 68 7021D071    PUSH test.71D02170                       ; |Text = "By [H]aaBX
MPGH.net
After pressing okay you'll redirected to the author's profile"
71D0161F  |. 6A 00          PUSH 0                                   ; |hOwner = NULL
71D01621  |. FF15 8C20D071  CALL DWORD PTR DS:[<&USER32.MessageBoxA>>; \MessageBoxA
71D01627  |. 68 C421D071    PUSH test.71D021C4                       ; /command = "start http://www.mpgh.net/forum/members/1402528--h-aabx.html"
71D0162C  |. FF15 8020D071  CALL DWORD PTR DS:[<&MSVCR100.system>]   ; \system
71D01632  |. 6A 00          PUSH 0                                   ; /pID = NULL
71D01634  |. 6A 00          PUSH 0                                   ; |flags = 0
71D01636  |. 6A 00          PUSH 0                                   ; |arg = NULL
71D01638  |. 68 2014D071    PUSH test.71D01420                       ; |start = test.71D01420
71D0163D  |. 6A 00          PUSH 0                                   ; |stksize = 0
71D0163F  |. 6A 00          PUSH 0                                   ; |security = NULL
71D01641  |. FF15 7C20D071  CALL DWORD PTR DS:[<&MSVCR100._beginthre>; \_beginthreadex
71D01647  |. 83C4 1C        ADD ESP,1C
71D0164A  |> B8 01000000    MOV EAX,1
71D0164F  |. 5D             POP EBP
71D01650  \. C2 0C00        RETN 0C
71D01653     3B             DB 3B                                    ;  CHAR ';'
71D01654     0D             DB 0D
71D01655   . 0030D071       DD test.71D03000
71D01659     75             DB 75                                    ;  CHAR 'u'
71D0165A   . 02F3           ADD DH,BL
71D0165C   . C3             RETN
71D0165D     E9             DB E9
71D0165E     91             DB 91
71D0165F     03             DB 03
71D01660     00             DB 00
71D01661     00             DB 00
71D01662     8BFF           MOV EDI,EDI
71D01664   . 56             PUSH ESI
71D01665   . 68 80000000    PUSH 80
71D0166A   . FF15 7820D071  CALL DWORD PTR DS:[<&MSVCR100._malloc_cr>;  MSVCR1_1._malloc_crt
71D01670   . 59             POP ECX
71D01671   . 8BF0           MOV ESI,EAX
71D01673   . 56             PUSH ESI
71D01674   . FF15 3C20D071  CALL DWORD PTR DS:[<&KERNEL32.EncodePoin>;  ntdll.RtlEncodePointer
71D0167A   . A3 6833D071    MOV DWORD PTR DS:[71D03368],EAX
71D0167F   . A3 6433D071    MOV DWORD PTR DS:[71D03364],EAX
71D01684   . 85F6           TEST ESI,ESI
71D01686   . 75 05          JNZ SHORT test.71D0168D
71D01688   . 33C0           XOR EAX,EAX
71D0168A   . 40             INC EAX
71D0168B   . 5E             POP ESI
71D0168C   . C3             RETN
71D0168D   > 8326 00        AND DWORD PTR DS:[ESI],0
71D01690   . E8 28050000    CALL test.71D01BBD
71D01695   . 68 E31BD071    PUSH test.71D01BE3
71D0169A   . E8 07050000    CALL test.71D01BA6
71D0169F   . C70424 F91AD07>MOV DWORD PTR SS:[ESP],test.71D01AF9     ; |
71D016A6   . E8 FB040000    CALL test.71D01BA6                       ; \test.71D01BA6
71D016AB   . 59             POP ECX
71D016AC   . 33C0           XOR EAX,EAX
71D016AE   . 5E             POP ESI
71D016AF   . C3             RETN
71D016B0  /$ 8BFF           MOV EDI,EDI
71D016B2  |. 55             PUSH EBP
71D016B3  |. 8BEC           MOV EBP,ESP
71D016B5  |. 51             PUSH ECX
71D016B6  |. 51             PUSH ECX
71D016B7  |. 53             PUSH EBX
71D016B8  |. 33C0           XOR EAX,EAX
71D016BA  |. 56             PUSH ESI
71D016BB  |. 57             PUSH EDI
71D016BC  |. 3945 0C        CMP DWORD PTR SS:[EBP+C],EAX
71D016BF  |. 75 32          JNZ SHORT test.71D016F3
71D016C1  |. 3905 2030D071  CMP DWORD PTR DS:[71D03020],EAX
71D016C7  |. 7E 23          JLE SHORT test.71D016EC
71D016C9  |. 64:A1 18000000 MOV EAX,DWORD PTR FS:[18]
71D016CF  |. FF0D 2030D071  DEC DWORD PTR DS:[71D03020]
71D016D5  |. 8B58 04        MOV EBX,DWORD PTR DS:[EAX+4]
71D016D8  |. 8365 FC 00     AND DWORD PTR SS:[EBP-4],0
71D016DC  |. 8B35 3020D071  MOV ESI,DWORD PTR DS:[<&KERNEL32.Interlo>;  kernel32.InterlockedCompareExchange
71D016E2  |. BF 6033D071    MOV EDI,test.71D03360
71D016E7  |. E9 EA000000    JMP test.71D017D6
71D016EC  |> 33C0           XOR EAX,EAX
71D016EE  |. E9 C0010000    JMP test.71D018B3
71D016F3  |> 837D 0C 01     CMP DWORD PTR SS:[EBP+C],1
71D016F7  |. 0F85 B3010000  JNZ test.71D018B0
71D016FD  |. 64:8B0D 180000>MOV ECX,DWORD PTR FS:[18]
71D01704  |. 8B59 04        MOV EBX,DWORD PTR DS:[ECX+4]
71D01707  |. 8B35 3020D071  MOV ESI,DWORD PTR DS:[<&KERNEL32.Interlo>;  kernel32.InterlockedCompareExchange
71D0170D  |. 8945 0C        MOV DWORD PTR SS:[EBP+C],EAX
71D01710  |. 50             PUSH EAX
71D01711  |. BF 6033D071    MOV EDI,test.71D03360
71D01716  |. EB 11          JMP SHORT test.71D01729
71D01718  |> 3BC3           /CMP EAX,EBX
71D0171A  |. 74 17          |JE SHORT test.71D01733
71D0171C  |. 68 E8030000    |PUSH 3E8                                ; /Timeout = 1000. ms
71D01721  |. FF15 0420D071  |CALL DWORD PTR DS:[<&KERNEL32.Sleep>]   ; \Sleep
71D01727  |. 6A 00          |PUSH 0
71D01729  |> 53              PUSH EBX
71D0172A  |. 57             |PUSH EDI
71D0172B  |. FFD6           |CALL ESI
71D0172D  |. 85C0           |TEST EAX,EAX
71D0172F  |.^75 E7          \JNZ SHORT test.71D01718
71D01731  |. EB 07          JMP SHORT test.71D0173A
71D01733  |> C745 0C 010000>MOV DWORD PTR SS:[EBP+C],1
71D0173A  |> A1 5C33D071    MOV EAX,DWORD PTR DS:[71D0335C]
71D0173F  |. 6A 02          PUSH 2
71D01741  |. 5E             POP ESI
71D01742  |. 85C0           TEST EAX,EAX
71D01744  |. 74 09          JE SHORT test.71D0174F
71D01746  |. 6A 1F          PUSH 1F
71D01748  |. E8 1B060000    CALL <JMP.&MSVCR100._amsg_exit>
71D0174D  |. EB 39          JMP SHORT test.71D01788
71D0174F  |> 68 A820D071    PUSH test.71D020A8
71D01754  |. 68 A020D071    PUSH test.71D020A0
71D01759  |. C705 5C33D071 >MOV DWORD PTR DS:[71D0335C],1
71D01763  |. E8 FA050000    CALL <JMP.&MSVCR100._initterm_e>
71D01768  |. 59             POP ECX
71D01769  |. 59             POP ECX
71D0176A  |. 85C0           TEST EAX,EAX
71D0176C  |.^0F85 7AFFFFFF  JNZ test.71D016EC
71D01772  |. 68 9C20D071    PUSH test.71D0209C
71D01777  |. 68 9820D071    PUSH test.71D02098
71D0177C  |. E8 DB050000    CALL <JMP.&MSVCR100._initterm>
71D01781  |. 59             POP ECX
71D01782  |. 8935 5C33D071  MOV DWORD PTR DS:[71D0335C],ESI
71D01788  |> 33DB           XOR EBX,EBX
71D0178A  |. 59             POP ECX
71D0178B  |. 395D 0C        CMP DWORD PTR SS:[EBP+C],EBX
71D0178E  |. 75 08          JNZ SHORT test.71D01798
71D01790  |. 53             PUSH EBX                                 ; /NewValue => 0
71D01791  |. 57             PUSH EDI                                 ; |pTarget
71D01792  |. FF15 3420D071  CALL DWORD PTR DS:[<&KERNEL32.Interlocke>; \InterlockedExchange
71D01798  |> 391D 6C33D071  CMP DWORD PTR DS:[71D0336C],EBX
71D0179E  |. 74 1C          JE SHORT test.71D017BC
71D017A0  |. 68 6C33D071    PUSH test.71D0336C
71D017A5  |. E8 F6040000    CALL test.71D01CA0
71D017AA  |. 59             POP ECX
71D017AB  |. 85C0           TEST EAX,EAX
71D017AD  |. 74 0D          JE SHORT test.71D017BC
71D017AF  |. FF75 10        PUSH DWORD PTR SS:[EBP+10]
71D017B2  |. 56             PUSH ESI
71D017B3  |. FF75 08        PUSH DWORD PTR SS:[EBP+8]
71D017B6  |. FF15 6C33D071  CALL DWORD PTR DS:[71D0336C]
71D017BC  |> FF05 2030D071  INC DWORD PTR DS:[71D03020]
71D017C2  |. E9 E9000000    JMP test.71D018B0
71D017C7  |> 3BC3           /CMP EAX,EBX
71D017C9  |. 74 17          |JE SHORT test.71D017E2
71D017CB  |. 68 E8030000    |PUSH 3E8                                ; /Timeout = 1000. ms
71D017D0  |. FF15 0420D071  |CALL DWORD PTR DS:[<&KERNEL32.Sleep>]   ; \Sleep
71D017D6  |> 6A 00           PUSH 0
71D017D8  |. 53             |PUSH EBX
71D017D9  |. 57             |PUSH EDI
71D017DA  |. FFD6           |CALL ESI
71D017DC  |. 85C0           |TEST EAX,EAX
71D017DE  |.^75 E7          \JNZ SHORT test.71D017C7
71D017E0  |. EB 07          JMP SHORT test.71D017E9
71D017E2  |> C745 FC 010000>MOV DWORD PTR SS:[EBP-4],1
71D017E9  |> A1 5C33D071    MOV EAX,DWORD PTR DS:[71D0335C]
71D017EE  |. 83F8 02        CMP EAX,2
71D017F1  |. 74 0D          JE SHORT test.71D01800
71D017F3  |. 6A 1F          PUSH 1F
71D017F5  |. E8 6E050000    CALL <JMP.&MSVCR100._amsg_exit>
71D017FA  |. 59             POP ECX
71D017FB  |. E9 B0000000    JMP test.71D018B0
71D01800  |> FF35 6833D071  PUSH DWORD PTR DS:[71D03368]
71D01806  |. 8B35 3820D071  MOV ESI,DWORD PTR DS:[<&KERNEL32.DecodeP>;  ntdll.RtlDecodePointer
71D0180C  |. FFD6           CALL ESI                                 ;  <&KERNEL32.DecodePointer>
71D0180E  |. 8945 0C        MOV DWORD PTR SS:[EBP+C],EAX
71D01811  |. 85C0           TEST EAX,EAX
71D01813  |. 0F84 83000000  JE test.71D0189C
71D01819  |. FF35 6433D071  PUSH DWORD PTR DS:[71D03364]
71D0181F  |. FFD6           CALL ESI
71D01821  |. 8BD8           MOV EBX,EAX
71D01823  |. 8B45 0C        MOV EAX,DWORD PTR SS:[EBP+C]
71D01826  |. 8945 10        MOV DWORD PTR SS:[EBP+10],EAX
71D01829  |. 895D 08        MOV DWORD PTR SS:[EBP+8],EBX
71D0182C  |> 83EB 04        /SUB EBX,4
71D0182F  |. 3B5D 0C        |CMP EBX,DWORD PTR SS:[EBP+C]
71D01832  |. 72 4E          |JB SHORT test.71D01882
71D01834  |. 833B 00        |CMP DWORD PTR DS:[EBX],0
71D01837  |.^74 F3          |JE SHORT test.71D0182C
71D01839  |. FF15 7020D071  |CALL DWORD PTR DS:[<&MSVCR100._encoded_>;  MSVCR1_1._encoded_null
71D0183F  |. 3903           |CMP DWORD PTR DS:[EBX],EAX
71D01841  |.^74 E9          |JE SHORT test.71D0182C
71D01843  |. FF33           |PUSH DWORD PTR DS:[EBX]
71D01845  |. FFD6           |CALL ESI
71D01847  |. 8945 F8        |MOV DWORD PTR SS:[EBP-8],EAX
71D0184A  |. FF15 7020D071  |CALL DWORD PTR DS:[<&MSVCR100._encoded_>;  MSVCR1_1._encoded_null
71D01850  |. 8903           |MOV DWORD PTR DS:[EBX],EAX
71D01852  |. FF55 F8        |CALL DWORD PTR SS:[EBP-8]
71D01855  |. FF35 6833D071  |PUSH DWORD PTR DS:[71D03368]
71D0185B  |. FFD6           |CALL ESI
71D0185D  |. FF35 6433D071  |PUSH DWORD PTR DS:[71D03364]
71D01863  |. 8945 F8        |MOV DWORD PTR SS:[EBP-8],EAX
71D01866  |. FFD6           |CALL ESI
71D01868  |. 8B4D F8        |MOV ECX,DWORD PTR SS:[EBP-8]
71D0186B  |. 394D 10        |CMP DWORD PTR SS:[EBP+10],ECX
71D0186E  |. 75 05          |JNZ SHORT test.71D01875
71D01870  |. 3945 08        |CMP DWORD PTR SS:[EBP+8],EAX
71D01873  |.^74 B7          |JE SHORT test.71D0182C
71D01875  |> 894D 10        |MOV DWORD PTR SS:[EBP+10],ECX
71D01878  |. 894D 0C        |MOV DWORD PTR SS:[EBP+C],ECX
71D0187B  |. 8945 08        |MOV DWORD PTR SS:[EBP+8],EAX
71D0187E  |. 8BD8           |MOV EBX,EAX
71D01880  |.^EB AA          \JMP SHORT test.71D0182C
71D01882  |> FF75 0C        PUSH DWORD PTR SS:[EBP+C]                ; /block
71D01885  |. FF15 7420D071  CALL DWORD PTR DS:[<&MSVCR100.free>]     ; \free
71D0188B  |. 59             POP ECX
71D0188C  |. FF15 7020D071  CALL DWORD PTR DS:[<&MSVCR100._encoded_n>;  MSVCR1_1._encoded_null
71D01892  |. A3 6433D071    MOV DWORD PTR DS:[71D03364],EAX
71D01897  |. A3 6833D071    MOV DWORD PTR DS:[71D03368],EAX
71D0189C  |> 33C0           XOR EAX,EAX
71D0189E  |. A3 5C33D071    MOV DWORD PTR DS:[71D0335C],EAX
71D018A3  |. 3945 FC        CMP DWORD PTR SS:[EBP-4],EAX
71D018A6  |. 75 08          JNZ SHORT test.71D018B0
71D018A8  |. 50             PUSH EAX                                 ; /NewValue => 0
71D018A9  |. 57             PUSH EDI                                 ; |pTarget
71D018AA  |. FF15 3420D071  CALL DWORD PTR DS:[<&KERNEL32.Interlocke>; \InterlockedExchange
71D018B0  |> 33C0           XOR EAX,EAX
71D018B2  |. 40             INC EAX
71D018B3  |> 5F             POP EDI
71D018B4  |. 5E             POP ESI
71D018B5  |. 5B             POP EBX
71D018B6  |. C9             LEAVE
71D018B7  \. C2 0C00        RETN 0C
71D018BA   $ 6A 10          PUSH 10
71D018BC   . 68 E822D071    PUSH test.71D022E8
71D018C1   . E8 BA040000    CALL test.71D01D80
71D018C6   . 8BF9           MOV EDI,ECX
71D018C8   . 8BF2           MOV ESI,EDX
71D018CA   . 8B5D 08        MOV EBX,DWORD PTR SS:[EBP+8]
71D018CD   . 33C0           XOR EAX,EAX
71D018CF   . 40             INC EAX
71D018D0   . 8945 E4        MOV DWORD PTR SS:[EBP-1C],EAX
71D018D3   . 33C9           XOR ECX,ECX
71D018D5   . 894D FC        MOV DWORD PTR SS:[EBP-4],ECX
71D018D8   . 8935 0830D071  MOV DWORD PTR DS:[71D03008],ESI
71D018DE   . 8945 FC        MOV DWORD PTR SS:[EBP-4],EAX
71D018E1   . 3BF1           CMP ESI,ECX
71D018E3   . 75 10          JNZ SHORT test.71D018F5
71D018E5   . 390D 2030D071  CMP DWORD PTR DS:[71D03020],ECX
71D018EB   . 75 08          JNZ SHORT test.71D018F5
71D018ED   . 894D E4        MOV DWORD PTR SS:[EBP-1C],ECX
71D018F0   . E9 B7000000    JMP test.71D019AC
71D018F5   > 3BF0           CMP ESI,EAX
71D018F7   . 74 05          JE SHORT test.71D018FE
71D018F9   . 83FE 02        CMP ESI,2
71D018FC   . 75 2E          JNZ SHORT test.71D0192C
71D018FE   > A1 CC20D071    MOV EAX,DWORD PTR DS:[71D020CC]
71D01903   . 3BC1           CMP EAX,ECX
71D01905   . 74 08          JE SHORT test.71D0190F
71D01907   . 57             PUSH EDI
71D01908   . 56             PUSH ESI
71D01909   . 53             PUSH EBX
71D0190A   . FFD0           CALL EAX
71D0190C   . 8945 E4        MOV DWORD PTR SS:[EBP-1C],EAX
71D0190F   > 837D E4 00     CMP DWORD PTR SS:[EBP-1C],0
71D01913   . 0F84 93000000  JE test.71D019AC
71D01919   . 57             PUSH EDI
71D0191A   . 56             PUSH ESI
71D0191B   . 53             PUSH EBX
71D0191C   . E8 8FFDFFFF    CALL test.71D016B0
71D01921   . 8945 E4        MOV DWORD PTR SS:[EBP-1C],EAX
71D01924   . 85C0           TEST EAX,EAX
71D01926   . 0F84 80000000  JE test.71D019AC
71D0192C   > 57             PUSH EDI                                 ; /Arg3
71D0192D   . 56             PUSH ESI                                 ; |Arg2
71D0192E   . 53             PUSH EBX                                 ; |Arg1
71D0192F   . E8 CCFCFFFF    CALL test.71D01600                       ; \test.71D01600
71D01934   . 8945 E4        MOV DWORD PTR SS:[EBP-1C],EAX
71D01937   . 83FE 01        CMP ESI,1
71D0193A   . 75 24          JNZ SHORT test.71D01960
71D0193C   . 85C0           TEST EAX,EAX
71D0193E   . 75 20          JNZ SHORT test.71D01960
71D01940   . 57             PUSH EDI                                 ; /Arg3
71D01941   . 50             PUSH EAX                                 ; |Arg2
71D01942   . 53             PUSH EBX                                 ; |Arg1
71D01943   . E8 B8FCFFFF    CALL test.71D01600                       ; \test.71D01600
71D01948   . 57             PUSH EDI
71D01949   . 6A 00          PUSH 0
71D0194B   . 53             PUSH EBX
71D0194C   . E8 5FFDFFFF    CALL test.71D016B0
71D01951   . A1 CC20D071    MOV EAX,DWORD PTR DS:[71D020CC]
71D01956   . 85C0           TEST EAX,EAX
71D01958   . 74 06          JE SHORT test.71D01960
71D0195A   . 57             PUSH EDI
71D0195B   . 6A 00          PUSH 0
71D0195D   . 53             PUSH EBX
71D0195E   . FFD0           CALL EAX
71D01960   > 85F6           TEST ESI,ESI
71D01962   . 74 05          JE SHORT test.71D01969
71D01964   . 83FE 03        CMP ESI,3
71D01967   . 75 43          JNZ SHORT test.71D019AC
71D01969   > 57             PUSH EDI
71D0196A   . 56             PUSH ESI
71D0196B   . 53             PUSH EBX
71D0196C   . E8 3FFDFFFF    CALL test.71D016B0
71D01971   . 85C0           TEST EAX,EAX
71D01973   . 75 03          JNZ SHORT test.71D01978
71D01975   . 2145 E4        AND DWORD PTR SS:[EBP-1C],EAX
71D01978   > 837D E4 00     CMP DWORD PTR SS:[EBP-1C],0
71D0197C   . 74 2E          JE SHORT test.71D019AC
71D0197E   . A1 CC20D071    MOV EAX,DWORD PTR DS:[71D020CC]
71D01983   . 85C0           TEST EAX,EAX
71D01985   . 74 25          JE SHORT test.71D019AC
71D01987   . 57             PUSH EDI
71D01988   . 56             PUSH ESI
71D01989   . 53             PUSH EBX
71D0198A   . FFD0           CALL EAX
71D0198C   . 8945 E4        MOV DWORD PTR SS:[EBP-1C],EAX
71D0198F   . EB 1B          JMP SHORT test.71D019AC
71D01991   . 8B45 EC        MOV EAX,DWORD PTR SS:[EBP-14]
71D01994   . 8B08           MOV ECX,DWORD PTR DS:[EAX]
71D01996   . 8B09           MOV ECX,DWORD PTR DS:[ECX]
71D01998   . 894D E0        MOV DWORD PTR SS:[EBP-20],ECX
71D0199B   . 50             PUSH EAX
71D0199C   . 51             PUSH ECX
71D0199D   . E8 CC030000    CALL <JMP.&MSVCR100.__CppXcptFilter>
71D019A2   . 59             POP ECX
71D019A3   . 59             POP ECX
71D019A4   . C3             RETN
71D019A5   . 8B65 E8        MOV ESP,DWORD PTR SS:[EBP-18]
71D019A8   . 8365 E4 00     AND DWORD PTR SS:[EBP-1C],0
71D019AC   > 8365 FC 00     AND DWORD PTR SS:[EBP-4],0
71D019B0   . C745 FC FEFFFF>MOV DWORD PTR SS:[EBP-4],-2
71D019B7   . E8 09000000    CALL test.71D019C5
71D019BC   . 8B45 E4        MOV EAX,DWORD PTR SS:[EBP-1C]
71D019BF   . E8 01040000    CALL test.71D01DC5
71D019C4   . C3             RETN
71D019C5  /$ C705 0830D071 >MOV DWORD PTR DS:[71D03008],-1
71D019CF  \. C3             RETN
71D019D0 >/$ 8BFF           MOV EDI,EDI
71D019D2  |. 55             PUSH EBP
71D019D3  |. 8BEC           MOV EBP,ESP
71D019D5  |. 837D 0C 01     CMP DWORD PTR SS:[EBP+C],1
71D019D9  |. 75 05          JNZ SHORT test.71D019E0
71D019DB  |. E8 1E040000    CALL test.71D01DFE
71D019E0  |> FF75 08        PUSH DWORD PTR SS:[EBP+8]
71D019E3  |. 8B4D 10        MOV ECX,DWORD PTR SS:[EBP+10]
71D019E6  |. 8B55 0C        MOV EDX,DWORD PTR SS:[EBP+C]
71D019E9  |. E8 CCFEFFFF    CALL test.71D018BA
71D019EE  |. 59             POP ECX
71D019EF  |. 5D             POP EBP
71D019F0  \. C2 0C00        RETN 0C
71D019F3     8BFF           MOV EDI,EDI
71D019F5     55             DB 55                                    ;  CHAR 'U'
71D019F6     8B             DB 8B
71D019F7     EC             DB EC
71D019F8     81             DB 81
71D019F9     EC             DB EC
71D019FA     28             DB 28                                    ;  CHAR '('
71D019FB     03             DB 03
71D019FC     00             DB 00
71D019FD     00             DB 00
71D019FE     A3             DB A3
71D019FF   . 3031D071       DD test.71D03130
71D01A03     89             DB 89
71D01A04     0D             DB 0D
71D01A05   . 2C31D071       DD test.71D0312C
71D01A09     89             DB 89
71D01A0A     15             DB 15
71D01A0B   . 2831D071       DD test.71D03128
71D01A0F     89             DB 89
71D01A10     1D             DB 1D
71D01A11   . 2431D071       DD test.71D03124
71D01A15     89             DB 89
71D01A16     35             DB 35                                    ;  CHAR '5'
71D01A17   . 2031D071       DD test.71D03120
71D01A1B     89             DB 89
71D01A1C     3D             DB 3D                                    ;  CHAR '='
71D01A1D   . 1C31D071       DD test.71D0311C
71D01A21     66             DB 66                                    ;  CHAR 'f'
71D01A22     8C             DB 8C
71D01A23     15             DB 15
71D01A24   . 4831D071       DD test.71D03148
71D01A28   . 66:8C0D 3C31D0>MOV WORD PTR DS:[71D0313C],CS
71D01A2F   . 66:8C1D 1831D0>MOV WORD PTR DS:[71D03118],DS
71D01A36   . 66:8C05 1431D0>MOV WORD PTR DS:[71D03114],ES
71D01A3D   . 66:8C25 1031D0>MOV WORD PTR DS:[71D03110],FS
71D01A44   . 66:8C2D 0C31D0>MOV WORD PTR DS:[71D0310C],GS
71D01A4B   . 9C             PUSHFD
71D01A4C   . 8F05 4031D071  POP DWORD PTR DS:[71D03140]
71D01A52   . 8B45 00        MOV EAX,DWORD PTR SS:[EBP]
71D01A55   . A3 3431D071    MOV DWORD PTR DS:[71D03134],EAX
71D01A5A   . 8B45 04        MOV EAX,DWORD PTR SS:[EBP+4]
71D01A5D   . A3 3831D071    MOV DWORD PTR DS:[71D03138],EAX
71D01A62   . 8D45 08        LEA EAX,DWORD PTR SS:[EBP+8]
71D01A65   . A3 4431D071    MOV DWORD PTR DS:[71D03144],EAX
71D01A6A   . 8B85 E0FCFFFF  MOV EAX,DWORD PTR SS:[EBP-320]
71D01A70   . C705 8030D071 >MOV DWORD PTR DS:[71D03080],10001
71D01A7A   . A1 3831D071    MOV EAX,DWORD PTR DS:[71D03138]
71D01A7F   . A3 3430D071    MOV DWORD PTR DS:[71D03034],EAX
71D01A84   . C705 2830D071 >MOV DWORD PTR DS:[71D03028],C0000409
71D01A8E   . C705 2C30D071 >MOV DWORD PTR DS:[71D0302C],1
71D01A98   . A1 0030D071    MOV EAX,DWORD PTR DS:[71D03000]
71D01A9D   . 8985 D8FCFFFF  MOV DWORD PTR SS:[EBP-328],EAX
71D01AA3   . A1 0430D071    MOV EAX,DWORD PTR DS:[71D03004]
71D01AA8   . 8985 DCFCFFFF  MOV DWORD PTR SS:[EBP-324],EAX
71D01AAE   . FF15 1C20D071  CALL DWORD PTR DS:[<&KERNEL32.IsDebugger>; [IsDebuggerPresent
71D01AB4   . A3 7830D071    MOV DWORD PTR DS:[71D03078],EAX
71D01AB9   . 6A 01          PUSH 1
71D01ABB   . E8 DA030000    CALL <JMP.&MSVCR100._crt_debugger_hook>
71D01AC0   . 59             POP ECX
71D01AC1   . 6A 00          PUSH 0                                   ; /pTopLevelFilter = NULL
71D01AC3   . FF15 2020D071  CALL DWORD PTR DS:[<&KERNEL32.SetUnhandl>; \SetUnhandledExceptionFilter
71D01AC9   . 68 D020D071    PUSH test.71D020D0                       ; /pExceptionInfo = test.71D020D0
71D01ACE   . FF15 2420D071  CALL DWORD PTR DS:[<&KERNEL32.UnhandledE>; \UnhandledExceptionFilter
71D01AD4   . 833D 7830D071 >CMP DWORD PTR DS:[71D03078],0
71D01ADB   . 75 08          JNZ SHORT test.71D01AE5
71D01ADD   . 6A 01          PUSH 1
71D01ADF   . E8 B6030000    CALL <JMP.&MSVCR100._crt_debugger_hook>
71D01AE4   . 59             POP ECX
71D01AE5   > 68 090400C0    PUSH C0000409                            ; /ExitCode = C0000409 (-1073740791.)
71D01AEA   . FF15 2820D071  CALL DWORD PTR DS:[<&KERNEL32.GetCurrent>; |[GetCurrentProcess
71D01AF0   . 50             PUSH EAX                                 ; |hProcess
71D01AF1   . FF15 2C20D071  CALL DWORD PTR DS:[<&KERNEL32.TerminateP>; \TerminateProcess
71D01AF7   . C9             LEAVE
71D01AF8   . C3             RETN
71D01AF9   . 68 4C33D071    PUSH test.71D0334C
71D01AFE   . E8 9D030000    CALL <JMP.&MSVCR100.__clean_type_info_na>
71D01B03   . 59             POP ECX
71D01B04   . C3             RETN
71D01B05  /$ 6A 14          PUSH 14
71D01B07  |. 68 1023D071    PUSH test.71D02310
71D01B0C  |. E8 6F020000    CALL test.71D01D80
71D01B11  |. FF35 6833D071  PUSH DWORD PTR DS:[71D03368]
71D01B17  |. 8B35 3820D071  MOV ESI,DWORD PTR DS:[<&KERNEL32.DecodeP>;  ntdll.RtlDecodePointer
71D01B1D  |. FFD6           CALL ESI                                 ;  <&KERNEL32.DecodePointer>
71D01B1F  |. 8945 E4        MOV DWORD PTR SS:[EBP-1C],EAX
71D01B22  |. 83F8 FF        CMP EAX,-1
71D01B25  |. 75 0C          JNZ SHORT test.71D01B33
71D01B27  |. FF75 08        PUSH DWORD PTR SS:[EBP+8]                ; /func
71D01B2A  |. FF15 5420D071  CALL DWORD PTR DS:[<&MSVCR100._onexit>]  ; \_onexit
71D01B30  |. 59             POP ECX
71D01B31  |. EB 64          JMP SHORT test.71D01B97
71D01B33  |> 6A 08          PUSH 8
71D01B35  |. E8 78030000    CALL <JMP.&MSVCR100._lock>
71D01B3A  |. 59             POP ECX
71D01B3B  |. 8365 FC 00     AND DWORD PTR SS:[EBP-4],0
71D01B3F  |. FF35 6833D071  PUSH DWORD PTR DS:[71D03368]
71D01B45  |. FFD6           CALL ESI
71D01B47  |. 8945 E4        MOV DWORD PTR SS:[EBP-1C],EAX
71D01B4A  |. FF35 6433D071  PUSH DWORD PTR DS:[71D03364]
71D01B50  |. FFD6           CALL ESI
71D01B52  |. 8945 E0        MOV DWORD PTR SS:[EBP-20],EAX
71D01B55  |. 8D45 E0        LEA EAX,DWORD PTR SS:[EBP-20]
71D01B58  |. 50             PUSH EAX
71D01B59  |. 8D45 E4        LEA EAX,DWORD PTR SS:[EBP-1C]
71D01B5C  |. 50             PUSH EAX
71D01B5D  |. FF75 08        PUSH DWORD PTR SS:[EBP+8]
71D01B60  |. 8B35 3C20D071  MOV ESI,DWORD PTR DS:[<&KERNEL32.EncodeP>;  ntdll.RtlEncodePointer
71D01B66  |. FFD6           CALL ESI                                 ;  <&KERNEL32.EncodePointer>
71D01B68  |. 50             PUSH EAX
71D01B69  |. E8 3E030000    CALL <JMP.&MSVCR100.__dllonexit>
71D01B6E  |. 83C4 0C        ADD ESP,0C
71D01B71  |. 8945 DC        MOV DWORD PTR SS:[EBP-24],EAX
71D01B74  |. FF75 E4        PUSH DWORD PTR SS:[EBP-1C]
71D01B77  |. FFD6           CALL ESI
71D01B79  |. A3 6833D071    MOV DWORD PTR DS:[71D03368],EAX
71D01B7E  |. FF75 E0        PUSH DWORD PTR SS:[EBP-20]
71D01B81  |. FFD6           CALL ESI
71D01B83  |. A3 6433D071    MOV DWORD PTR DS:[71D03364],EAX
71D01B88  |. C745 FC FEFFFF>MOV DWORD PTR SS:[EBP-4],-2
71D01B8F  |. E8 09000000    CALL test.71D01B9D
71D01B94  |. 8B45 DC        MOV EAX,DWORD PTR SS:[EBP-24]
71D01B97  |> E8 29020000    CALL test.71D01DC5
71D01B9C  \. C3             RETN
71D01B9D  /$ 6A 08          PUSH 8
71D01B9F  |. E8 02030000    CALL <JMP.&MSVCR100._unlock>
71D01BA4  |. 59             POP ECX
71D01BA5  \. C3             RETN
71D01BA6  /$ 8BFF           MOV EDI,EDI
71D01BA8  |. 55             PUSH EBP
71D01BA9  |. 8BEC           MOV EBP,ESP
71D01BAB  |. FF75 08        PUSH DWORD PTR SS:[EBP+8]
71D01BAE  |. E8 52FFFFFF    CALL test.71D01B05
71D01BB3  |. F7D8           NEG EAX
71D01BB5  |. 1BC0           SBB EAX,EAX
71D01BB7  |. F7D8           NEG EAX
71D01BB9  |. 59             POP ECX
71D01BBA  |. 48             DEC EAX
71D01BBB  |. 5D             POP EBP
71D01BBC  \. C3             RETN
71D01BBD  /$ 8BFF           MOV EDI,EDI
71D01BBF  |. 56             PUSH ESI
71D01BC0  |. B8 D822D071    MOV EAX,test.71D022D8
71D01BC5  |. BE D822D071    MOV ESI,test.71D022D8
71D01BCA  |. 57             PUSH EDI
71D01BCB  |. 8BF8           MOV EDI,EAX
71D01BCD  |. 3BC6           CMP EAX,ESI
71D01BCF  |. 73 0F          JNB SHORT test.71D01BE0
71D01BD1  |> 8B07           /MOV EAX,DWORD PTR DS:[EDI]
71D01BD3  |. 85C0           |TEST EAX,EAX
71D01BD5  |. 74 02          |JE SHORT test.71D01BD9
71D01BD7  |. FFD0           |CALL EAX
71D01BD9  |> 83C7 04        |ADD EDI,4
71D01BDC  |. 3BFE           |CMP EDI,ESI
71D01BDE  |.^72 F1          \JB SHORT test.71D01BD1
71D01BE0  |> 5F             POP EDI
71D01BE1  |. 5E             POP ESI
71D01BE2  \. C3             RETN
71D01BE3     8BFF           MOV EDI,EDI
71D01BE5   . 56             PUSH ESI
71D01BE6   . B8 E022D071    MOV EAX,test.71D022E0
71D01BEB   . BE E022D071    MOV ESI,test.71D022E0
71D01BF0   . 57             PUSH EDI
71D01BF1   . 8BF8           MOV EDI,EAX
71D01BF3   . 3BC6           CMP EAX,ESI
71D01BF5   . 73 0F          JNB SHORT test.71D01C06
71D01BF7   > 8B07           MOV EAX,DWORD PTR DS:[EDI]
71D01BF9   . 85C0           TEST EAX,EAX
71D01BFB   . 74 02          JE SHORT test.71D01BFF
71D01BFD   . FFD0           CALL EAX
71D01BFF   > 83C7 04        ADD EDI,4
71D01C02   . 3BFE           CMP EDI,ESI
71D01C04   .^72 F1          JB SHORT test.71D01BF7
71D01C06   > 5F             POP EDI
71D01C07   . 5E             POP ESI
71D01C08   . C3             RETN
71D01C09     CC             INT3
71D01C0A     CC             INT3
71D01C0B     CC             INT3
71D01C0C     CC             INT3
71D01C0D     CC             INT3
71D01C0E     CC             INT3
71D01C0F     CC             INT3
71D01C10  /$ 8BFF           MOV EDI,EDI
71D01C12  |. 55             PUSH EBP
71D01C13  |. 8BEC           MOV EBP,ESP
71D01C15  |. 8B4D 08        MOV ECX,DWORD PTR SS:[EBP+8]
71D01C18  |. B8 4D5A0000    MOV EAX,5A4D
71D01C1D  |. 66:3901        CMP WORD PTR DS:[ECX],AX
71D01C20  |. 74 04          JE SHORT test.71D01C26
71D01C22  |> 33C0           XOR EAX,EAX
71D01C24  |. 5D             POP EBP
71D01C25  |. C3             RETN
71D01C26  |> 8B41 3C        MOV EAX,DWORD PTR DS:[ECX+3C]
71D01C29  |. 03C1           ADD EAX,ECX
71D01C2B  |. 8138 50450000  CMP DWORD PTR DS:[EAX],4550
71D01C31  |.^75 EF          JNZ SHORT test.71D01C22
71D01C33  |. 33D2           XOR EDX,EDX
71D01C35  |. B9 0B010000    MOV ECX,10B
71D01C3A  |. 66:3948 18     CMP WORD PTR DS:[EAX+18],CX
71D01C3E  |. 0F94C2         SETE DL
71D01C41  |. 8BC2           MOV EAX,EDX
71D01C43  |. 5D             POP EBP
71D01C44  \. C3             RETN
71D01C45     CC             INT3
71D01C46     CC             INT3
71D01C47     CC             INT3
71D01C48     CC             INT3
71D01C49     CC             INT3
71D01C4A     CC             INT3
71D01C4B     CC             INT3
71D01C4C     CC             INT3
71D01C4D     CC             INT3
71D01C4E     CC             INT3
71D01C4F     CC             INT3
71D01C50  /$ 8BFF           MOV EDI,EDI
71D01C52  |. 55             PUSH EBP
71D01C53  |. 8BEC           MOV EBP,ESP
71D01C55  |. 8B45 08        MOV EAX,DWORD PTR SS:[EBP+8]
71D01C58  |. 8B48 3C        MOV ECX,DWORD PTR DS:[EAX+3C]
71D01C5B  |. 03C8           ADD ECX,EAX
71D01C5D  |. 0FB741 14      MOVZX EAX,WORD PTR DS:[ECX+14]
71D01C61  |. 53             PUSH EBX
71D01C62  |. 56             PUSH ESI
71D01C63  |. 0FB771 06      MOVZX ESI,WORD PTR DS:[ECX+6]
71D01C67  |. 33D2           XOR EDX,EDX
71D01C69  |. 57             PUSH EDI
71D01C6A  |. 8D4408 18      LEA EAX,DWORD PTR DS:[EAX+ECX+18]
71D01C6E  |. 85F6           TEST ESI,ESI
71D01C70  |. 74 1B          JE SHORT test.71D01C8D
71D01C72  |. 8B7D 0C        MOV EDI,DWORD PTR SS:[EBP+C]
71D01C75  |> 8B48 0C        /MOV ECX,DWORD PTR DS:[EAX+C]
71D01C78  |. 3BF9           |CMP EDI,ECX
71D01C7A  |. 72 09          |JB SHORT test.71D01C85
71D01C7C  |. 8B58 08        |MOV EBX,DWORD PTR DS:[EAX+8]
71D01C7F  |. 03D9           |ADD EBX,ECX
71D01C81  |. 3BFB           |CMP EDI,EBX
71D01C83  |. 72 0A          |JB SHORT test.71D01C8F
71D01C85  |> 42             |INC EDX
71D01C86  |. 83C0 28        |ADD EAX,28
71D01C89  |. 3BD6           |CMP EDX,ESI
71D01C8B  |.^72 E8          \JB SHORT test.71D01C75
71D01C8D  |> 33C0           XOR EAX,EAX
71D01C8F  |> 5F             POP EDI
71D01C90  |. 5E             POP ESI
71D01C91  |. 5B             POP EBX
71D01C92  |. 5D             POP EBP
71D01C93  \. C3             RETN
71D01C94     CC             INT3
71D01C95     CC             INT3
71D01C96     CC             INT3
71D01C97     CC             INT3
71D01C98     CC             INT3
71D01C99     CC             INT3
71D01C9A     CC             INT3
71D01C9B     CC             INT3
71D01C9C     CC             INT3
71D01C9D     CC             INT3
71D01C9E     CC             INT3
71D01C9F     CC             INT3
71D01CA0   $ 8BFF           MOV EDI,EDI
71D01CA2   . 55             PUSH EBP
71D01CA3   . 8BEC           MOV EBP,ESP
71D01CA5   . 6A FE          PUSH -2
71D01CA7   . 68 3023D071    PUSH test.71D02330
71D01CAC   . 68 D91DD071    PUSH test.71D01DD9
71D01CB1   . 64:A1 00000000 MOV EAX,DWORD PTR FS:[0]
71D01CB7   . 50             PUSH EAX
71D01CB8   . 83EC 08        SUB ESP,8
71D01CBB   . 53             PUSH EBX
71D01CBC   . 56             PUSH ESI
71D01CBD   . 57             PUSH EDI
71D01CBE   . A1 0030D071    MOV EAX,DWORD PTR DS:[71D03000]
71D01CC3   . 3145 F8        XOR DWORD PTR SS:[EBP-8],EAX
71D01CC6   . 33C5           XOR EAX,EBP
71D01CC8   . 50             PUSH EAX
71D01CC9   . 8D45 F0        LEA EAX,DWORD PTR SS:[EBP-10]
71D01CCC   . 64:A3 00000000 MOV DWORD PTR FS:[0],EAX
71D01CD2   . 8965 E8        MOV DWORD PTR SS:[EBP-18],ESP
71D01CD5   . C745 FC 000000>MOV DWORD PTR SS:[EBP-4],0
71D01CDC   . 68 0000D071    PUSH test.71D00000                       ; /Arg1 = 71D00000
71D01CE1   . E8 2AFFFFFF    CALL test.71D01C10                       ; \test.71D01C10
71D01CE6   . 83C4 04        ADD ESP,4
71D01CE9   . 85C0           TEST EAX,EAX
71D01CEB   . 74 54          JE SHORT test.71D01D41
71D01CED   . 8B45 08        MOV EAX,DWORD PTR SS:[EBP+8]
71D01CF0   . 2D 0000D071    SUB EAX,test.71D00000
71D01CF5   . 50             PUSH EAX                                 ; /Arg2
71D01CF6   . 68 0000D071    PUSH test.71D00000                       ; |Arg1 = 71D00000
71D01CFB   . E8 50FFFFFF    CALL test.71D01C50                       ; \test.71D01C50
71D01D00   . 83C4 08        ADD ESP,8
71D01D03   . 85C0           TEST EAX,EAX
71D01D05   . 74 3A          JE SHORT test.71D01D41
71D01D07   . 8B40 24        MOV EAX,DWORD PTR DS:[EAX+24]
71D01D0A   . C1E8 1F        SHR EAX,1F
71D01D0D   . F7D0           NOT EAX
71D01D0F   . 83E0 01        AND EAX,1
71D01D12   . C745 FC FEFFFF>MOV DWORD PTR SS:[EBP-4],-2
71D01D19   . 8B4D F0        MOV ECX,DWORD PTR SS:[EBP-10]
71D01D1C   . 64:890D 000000>MOV DWORD PTR FS:[0],ECX
71D01D23   . 59             POP ECX
71D01D24   . 5F             POP EDI
71D01D25   . 5E             POP ESI
71D01D26   . 5B             POP EBX
71D01D27   . 8BE5           MOV ESP,EBP
71D01D29   . 5D             POP EBP
71D01D2A   . C3             RETN
71D01D2B   . 8B45 EC        MOV EAX,DWORD PTR SS:[EBP-14]
71D01D2E   . 8B08           MOV ECX,DWORD PTR DS:[EAX]
71D01D30   . 33D2           XOR EDX,EDX
71D01D32   . 8139 050000C0  CMP DWORD PTR DS:[ECX],C0000005
71D01D38   . 0F94C2         SETE DL
71D01D3B   . 8BC2           MOV EAX,EDX
71D01D3D   . C3             RETN
71D01D3E   . 8B65 E8        MOV ESP,DWORD PTR SS:[EBP-18]
71D01D41   > C745 FC FEFFFF>MOV DWORD PTR SS:[EBP-4],-2
71D01D48   . 33C0           XOR EAX,EAX
71D01D4A   . 8B4D F0        MOV ECX,DWORD PTR SS:[EBP-10]
71D01D4D   . 64:890D 000000>MOV DWORD PTR FS:[0],ECX
71D01D54   . 59             POP ECX
71D01D55   . 5F             POP EDI
71D01D56   . 5E             POP ESI
71D01D57   . 5B             POP EBX
71D01D58   . 8BE5           MOV ESP,EBP
71D01D5A   . 5D             POP EBP
71D01D5B   . C3             RETN
71D01D5C   $-FF25 6C20D071  JMP DWORD PTR DS:[<&MSVCR100._initterm>] ;  MSVCR1_1._initterm
71D01D62   $-FF25 6820D071  JMP DWORD PTR DS:[<&MSVCR100._initterm_e>;  MSVCR1_1._initterm_e
71D01D68   $-FF25 6420D071  JMP DWORD PTR DS:[<&MSVCR100._amsg_exit>>;  MSVCR1_1._amsg_exit
71D01D6E   $-FF25 6020D071  JMP DWORD PTR DS:[<&MSVCR100.__CppXcptFi>;  MSVCR1_1.__CppXcptFilter
71D01D74     CC             INT3
71D01D75     CC             INT3
71D01D76     CC             INT3
71D01D77     CC             INT3
71D01D78     CC             INT3
71D01D79     CC             INT3
71D01D7A     CC             INT3
71D01D7B     CC             INT3
71D01D7C     CC             INT3
71D01D7D     CC             INT3
71D01D7E     CC             INT3
71D01D7F     CC             INT3
71D01D80  /$ 68 D91DD071    PUSH test.71D01DD9
71D01D85  |. 64:FF35 000000>PUSH DWORD PTR FS:[0]
71D01D8C  |. 8B4424 10      MOV EAX,DWORD PTR SS:[ESP+10]
71D01D90  |. 896C24 10      MOV DWORD PTR SS:[ESP+10],EBP
71D01D94  |. 8D6C24 10      LEA EBP,DWORD PTR SS:[ESP+10]
71D01D98  |. 2BE0           SUB ESP,EAX
71D01D9A  |. 53             PUSH EBX
71D01D9B  |. 56             PUSH ESI
71D01D9C  |. 57             PUSH EDI
71D01D9D  |. A1 0030D071    MOV EAX,DWORD PTR DS:[71D03000]
71D01DA2  |. 3145 FC        XOR DWORD PTR SS:[EBP-4],EAX
71D01DA5  |. 33C5           XOR EAX,EBP
71D01DA7  |. 50             PUSH EAX
71D01DA8  |. 8965 E8        MOV DWORD PTR SS:[EBP-18],ESP
71D01DAB  |. FF75 F8        PUSH DWORD PTR SS:[EBP-8]
71D01DAE  |. 8B45 FC        MOV EAX,DWORD PTR SS:[EBP-4]
71D01DB1  |. C745 FC FEFFFF>MOV DWORD PTR SS:[EBP-4],-2
71D01DB8  |. 8945 F8        MOV DWORD PTR SS:[EBP-8],EAX
71D01DBB  |. 8D45 F0        LEA EAX,DWORD PTR SS:[EBP-10]
71D01DBE  |. 64:A3 00000000 MOV DWORD PTR FS:[0],EAX
71D01DC4  \. C3             RETN
71D01DC5  /$ 8B4D F0        MOV ECX,DWORD PTR SS:[EBP-10]
71D01DC8  |. 64:890D 000000>MOV DWORD PTR FS:[0],ECX
71D01DCF  |. 59             POP ECX
71D01DD0  |. 5F             POP EDI
71D01DD1  |. 5F             POP EDI
71D01DD2  |. 5E             POP ESI
71D01DD3  |. 5B             POP EBX
71D01DD4  |. 8BE5           MOV ESP,EBP
71D01DD6  |. 5D             POP EBP
71D01DD7  |. 51             PUSH ECX
71D01DD8  \. C3             RETN
71D01DD9     8BFF           MOV EDI,EDI
71D01DDB  /. 55             PUSH EBP
71D01DDC  |. 8BEC           MOV EBP,ESP
71D01DDE  |. FF75 14        PUSH DWORD PTR SS:[EBP+14]
71D01DE1  |. FF75 10        PUSH DWORD PTR SS:[EBP+10]
71D01DE4  |. FF75 0C        PUSH DWORD PTR SS:[EBP+C]
71D01DE7  |. FF75 08        PUSH DWORD PTR SS:[EBP+8]
71D01DEA  |. 68 5316D071    PUSH test.71D01653                       ;  ASCII ";
"
71D01DEF  |. 68 0030D071    PUSH test.71D03000
71D01DF4  |. E8 BF000000    CALL <JMP.&MSVCR100._except_handler4_com>
71D01DF9  |. 83C4 18        ADD ESP,18
71D01DFC  |. 5D             POP EBP
71D01DFD  \. C3             RETN
71D01DFE  /$ 8BFF           MOV EDI,EDI
71D01E00  |. 55             PUSH EBP
71D01E01  |. 8BEC           MOV EBP,ESP
71D01E03  |. 83EC 10        SUB ESP,10
71D01E06  |. A1 0030D071    MOV EAX,DWORD PTR DS:[71D03000]
71D01E0B  |. 8365 F8 00     AND DWORD PTR SS:[EBP-8],0
71D01E0F  |. 8365 FC 00     AND DWORD PTR SS:[EBP-4],0
71D01E13  |. 53             PUSH EBX
71D01E14  |. 57             PUSH EDI
71D01E15  |. BF 4EE640BB    MOV EDI,BB40E64E
71D01E1A  |. BB 0000FFFF    MOV EBX,FFFF0000
71D01E1F  |. 3BC7           CMP EAX,EDI
71D01E21  |. 74 0D          JE SHORT test.71D01E30
71D01E23  |. 85C3           TEST EBX,EAX
71D01E25  |. 74 09          JE SHORT test.71D01E30
71D01E27  |. F7D0           NOT EAX
71D01E29  |. A3 0430D071    MOV DWORD PTR DS:[71D03004],EAX
71D01E2E  |. EB 65          JMP SHORT test.71D01E95
71D01E30  |> 56             PUSH ESI
71D01E31  |. 8D45 F8        LEA EAX,DWORD PTR SS:[EBP-8]
71D01E34  |. 50             PUSH EAX                                 ; /pFileTime
71D01E35  |. FF15 4020D071  CALL DWORD PTR DS:[<&KERNEL32.GetSystemT>; \GetSystemTimeAsFileTime
71D01E3B  |. 8B75 FC        MOV ESI,DWORD PTR SS:[EBP-4]
71D01E3E  |. 3375 F8        XOR ESI,DWORD PTR SS:[EBP-8]
71D01E41  |. FF15 0C20D071  CALL DWORD PTR DS:[<&KERNEL32.GetCurrent>; [GetCurrentProcessId
71D01E47  |. 33F0           XOR ESI,EAX
71D01E49  |. FF15 1020D071  CALL DWORD PTR DS:[<&KERNEL32.GetCurrent>; [GetCurrentThreadId
71D01E4F  |. 33F0           XOR ESI,EAX
71D01E51  |. FF15 1420D071  CALL DWORD PTR DS:[<&KERNEL32.GetTickCou>; [GetTickCount
71D01E57  |. 33F0           XOR ESI,EAX
71D01E59  |. 8D45 F0        LEA EAX,DWORD PTR SS:[EBP-10]
71D01E5C  |. 50             PUSH EAX                                 ; /pPerformanceCount
71D01E5D  |. FF15 1820D071  CALL DWORD PTR DS:[<&KERNEL32.QueryPerfo>; \QueryPerformanceCounter
71D01E63  |. 8B45 F4        MOV EAX,DWORD PTR SS:[EBP-C]
71D01E66  |. 3345 F0        XOR EAX,DWORD PTR SS:[EBP-10]
71D01E69  |. 33F0           XOR ESI,EAX
71D01E6B  |. 3BF7           CMP ESI,EDI
71D01E6D  |. 75 07          JNZ SHORT test.71D01E76
71D01E6F  |. BE 4FE640BB    MOV ESI,BB40E64F
71D01E74  |. EB 10          JMP SHORT test.71D01E86
71D01E76  |> 85F3           TEST EBX,ESI
71D01E78  |. 75 0C          JNZ SHORT test.71D01E86
71D01E7A  |. 8BC6           MOV EAX,ESI
71D01E7C  |. 0D 11470000    OR EAX,4711
71D01E81  |. C1E0 10        SHL EAX,10
71D01E84  |. 0BF0           OR ESI,EAX
71D01E86  |> 8935 0030D071  MOV DWORD PTR DS:[71D03000],ESI
71D01E8C  |. F7D6           NOT ESI
71D01E8E  |. 8935 0430D071  MOV DWORD PTR DS:[71D03004],ESI
71D01E94  |. 5E             POP ESI
71D01E95  |> 5F             POP EDI
71D01E96  |. 5B             POP EBX
71D01E97  |. C9             LEAVE
71D01E98  \. C3             RETN
71D01E99     CC             INT3
71D01E9A   $-FF25 5C20D071  JMP DWORD PTR DS:[<&MSVCR100._crt_debugg>;  MSVCR1_1._crt_debugger_hook
71D01EA0   $-FF25 4820D071  JMP DWORD PTR DS:[<&MSVCR100.__clean_typ>;  MSVCR1_1.__clean_type_info_names_internal
71D01EA6   $-FF25 8420D071  JMP DWORD PTR DS:[<&MSVCR100._unlock>]   ;  MSVCR1_1._unlock
71D01EAC   $-FF25 4C20D071  JMP DWORD PTR DS:[<&MSVCR100.__dllonexit>;  MSVCR1_1.__dllonexit
71D01EB2   $-FF25 5020D071  JMP DWORD PTR DS:[<&MSVCR100._lock>]     ;  MSVCR1_1._lock
71D01EB8   $-FF25 5820D071  JMP DWORD PTR DS:[<&MSVCR100._except_han>;  MSVCR1_1._except_handler4_common

Gay or what's ur problem^^ :P
Pls remove that
Quote Originally Posted by [H]aaBX View Post

Gay or what's ur problem^^ :P
Pls remove that
i am not gay
Can u tell me a working injector please? Thank u
Posts 16–30 of 235 · Page 2 of 16
This thread is closed for replies.

Similar Threads

Talk with us