/ *  
 / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / /  
 sWY\bh  uw? R L P a c k 1 . 9   p r e   H e a v y   W e a p o n  
 A u t h o r   :   h~? uw?  
 E m a i l   :   E m a i l   TV~u  uw?  
 O S   :   1P\Gw? `}V?   X P   S p 2     O L L Y D B G   {ՔE  S h a d o w  
 ^W2hnVv? kVgh 
 D a t e   :   0 1 . 0 6 . 2 0 0 7   8 : 1 6 : 0 7  
 N o t e   :   _q`)hT  ?   gh~u	W?  
 / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / /  
 * /  
  
 v a r   i d  
 v a r   i j  
 v a r   a d  
 v a r   a d 2  
 v a r   I A T  
 v a r   o e p  
 v a r   T r h  
 v a r   z e r  
 v a r   r e d  
 v a r   A d u m p  
 v a r   o r i g o e p  
  
 # l o g  
 m s g   " N_euQX[_8^"  
  
 g p a   " C r e a t e T h r e a d " , " k e r n e l 3 2 . d l l "  
 m o v   [ $ R E S U L T ] , # C 2 1 8 0 0 #  
  
 m o v   o e p , e i p  
 m o v   z e r , o e p  
 a d d   z e r , 4 3 d B  
 a d d   o e p , 1 3 E C  
 m o v   i d , e i p  
 m o v   r e d , i d  
 a d d   r e d , 1 d 2  
 a d d   i d , 1 D 7  
 m o v   i j , i d  
 a d d   i j , 5  
 m o v   a d , e i p  
 a d d     a d , B 5  
 m o v   a d 2 , e i p  
 a d d     a d 2 , 2 A C 9  
 B P H W S   a d 2 , " x "  
 B P H W S   a d , " x "  
  
 r u n  
 / / Nb/fbRvNx 
 / / dke^0RQX[_8^Y    ~ _lxNephKm 
 r e p l   e i p , # 7 4 1 1 # , # E B 1 1 # , 1 0 0  
 e s t o  
 / / bRvNx~_g 
 B P H W C   a d  
 s t i  
 m o v   a d , e i p  
 a d d   a d , 8  
 F I L L   a d , 2 , 9 0  
 a d d   a d , 1 5  
 F I L L   a d , 1 , E B  
 r u n  
 B P H W C   a d 2  
 m o v   a d 2 , e c x  
 a d d   a d 2 , D 2 C 7  
 B P H W S   a d 2 , " x "  
 r u n  
  
 / / Nb/fbRvNx 
 / / dke^0RQX[_8^Y    ~ _lxNephKm 
 r e p l   e i p , # 7 4 1 1 # , # E B 1 1 # , 1 0 0  
 e s t o  
 / / bRvNx~_g 
 B P H W C   a d 2  
  
 m o v   a d 2 , e i p  
 a d d   a d 2 , 8  
 F I L L   a d 2 , 2 , 9 0  
 a d d   a d 2 , 1 5  
 F I L L   a d 2 , 1 , E B  
 B P H W S   r e d , " x "  
 r u n  
 B P H W C   r e d  
 s t i  
 m o v   r e d , e i p  
 a d d   r e d , 7  
 F I L L   r e d , 1 , E B  
 a d d   r e d , 1 7  
 F I L L   r e d , 1 , E B  
 a d d   r e d , 1 7  
 F I L L   r e d , 1 , E B  
 a d d   r e d , 1 7  
 F I L L   r e d , 1 , E B  
 a d d   r e d , 1 7  
 F I L L   r e d , 1 , E B  
 a d d   r e d , 1 7  
 F I L L   r e d , 1 , E B  
 a d d   r e d , 1 7  
 F I L L   r e d , 1 , E B  
 a d d   r e d , 1 9  
 F I L L   r e d , 1 , E B  
  
 B P H W S   i d , " x "  
 r u n  
 B P H W C   i d  
 m o v   A d u m p , e i p  
 a d d   A d u m p , 4 A  
 F I L L   A d u m p , 4 A , 9 0  
 a d d   A d u m p , 4 A  
 B P H W S   A d u m p , " x "  
  
 s t i  
 s t i  
 m o v   i d , e i p  
 B P H W S   i d , " x "  
  
 m o v     [ z e r ] , # E B 1 C #  
 a d d   z e r , 1 0  
 F I L L   z e r , 1 , E B  
 m o v   I A T , e d i  
 m o v   [ I A T ] , e a x  
 B P H W S   i j , " x "  
 r u n  
 B P H W C   i j  
 s t i  
 m o v   i j , e i p  
 a d d   i j , B A  
 B P H W S   i j , " x "  
 r u n  
 s t i  
 m o v   [ e b x ] , I A T  
  
  
  
 l o o p :  
 c m p   e i p , A d u m p  
 j e   l o e p  
  
 r u n  
 c m p   e i p , A d u m p  
 j e   l o e p  
 c m p   e i p , i d  
 j n e   l 3  
 m o v   I A T , e d i  
 m o v   [ I A T ] , e a x  
 r u n  
 c m p   e i p , i j  
 j n e   l 3  
 s t i  
 m o v   [ e b x ] , I A T  
 j m p   l o o p  
  
  
 l 3 :  
 r u n  
 j m p   l o o p  
  
 l o e p :  
 B P H W C   i j  
 B P H W C   i d  
 m o v   o r i g o e p , A d u m p  
 a d d   o r i g o e p , 1 6  
 C M T   o r i g o e p ,   " J m p   s t o l e n   o e p   s t u b "    
 M S G   " J m p   s t o l e n   o e p   s t u b "  
  
  
 / *  
 / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / /  
 0 0 4 6 A 8 A 0           9 0                                               n o p  
 0 0 4 6 A 8 A 1           9 0                                               n o p  
 0 0 4 6 A 8 A 2           9 0                                               n o p  
 0 0 4 6 A 8 A 3           9 0                                               n o p  
 0 0 4 6 A 8 A 4           9 0                                               n o p  
 >b1? frn  rn? sh_  _1V2Gw? 1LV  Љ? n o p = = ЉS1`  _u 
 0 0 4 6 A 8 F 2           9 0                                               n o p  
 0 0 4 6 A 8 F 3           9 0                                               n o p  
 0 0 4 6 A 8 F 4           9 0                                               n o p  
 0 0 4 6 A 8 F 5           9 0                                               n o p  
 0 0 4 6 A 8 F 6           E B   0 F                                         j m p   s h o r t   H e a v y _ W e . 0 0 4 6 A 9 0 7  
  
 / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / /  
 * /  
 B P H W S   o e p , " x "  
 r u n  
 B P H W C   o e p  
  
 M S G   " V M   o e p   s t u b "  
 / *  
 / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / /  
 0 0 4 C F D 0 4           8 B 8 5   9 D 5 3 0 0 0 0                         m o v   e a x , d w o r d   p t r   s s : [ e b p + 5 3 9 D ] < - - a r g u m e n t  
 0 0 4 C F D 0 A           8 B 9 D   A 1 5 3 0 0 0 0                         m o v   e b x , d w o r d   p t r   s s : [ e b p + 5 3 A 1 ] S? ? ? uhl1u?  
 0 0 4 C F D 1 0           8 B 8 D   A 5 5 3 0 0 0 0                         m o v   e c x , d w o r d   p t r   s s : [ e b p + 5 3 A 5 ] _u? Vl>bw? Fo    ?  
 0 0 4 C F D 1 6           8 B 9 5   A 9 5 3 0 0 0 0                         m o v   e d x , d w o r d   p t r   s s : [ e b p + 5 3 A 9 ] CP\? _(w`Y\?   1LV? E?  
 0 0 4 C F D 1 C           8 B B 5   A D 5 3 0 0 0 0                         m o v   e s i , d w o r d   p t r   s s : [ e b p + 5 3 A D ] ? /oq{th  sה
W  ~&gЉ  &`? lus? s?  
 0 0 4 C F D 2 2           8 B B D   B 1 5 3 0 0 0 0                         m o v   e d i , d w o r d   p t r   s s : [ e b p + 5 3 B 1 ] ? E? &`? q? uEHb!  
 0 0 4 C F D 2 8           8 B A 5   B 9 5 3 0 0 0 0                         m o v   e s p , d w o r d   p t r   s s : [ e b p + 5 3 B 9 ] g    s۔  MZ  sghAhqV? sWY\bh 
 0 0 4 C F D 2 E           8 9 A 5   C 1 5 3 0 0 0 0                         m o v   d w o r d   p t r   s s : [ e b p + 5 3 C 1 ] , e s p  |  ? ? dh  1LV?   lAhVT  ?  
 0 0 4 C F D 3 4           8 B A D   B 5 5 3 0 0 0 0                         m o v   e b p , d w o r d   p t r   s s : [ e b p + 5 3 B 5 ]  Ah  s  eun_P\  ? Vl>bwV? ?  
 0 0 4 C F D 3 A           E 8   5 9 2 4 F F F F                             c a l l   H e a v y _ W e . 0 0 4 C 2 1 9 8   < - - - - - - - - -   F u n c k  
 0 0 4 C F D 3 F           5 5                                               p u s h   e b p                                                 uhl1uHb  ?   sH&gw  sn? ? E   
 0 0 4 C F D 4 0           B D   0 0 1 0 4 0 0 0                             m o v   e b p , H e a v y _ W e . 0 0 4 0 1 0 0 0               2cZ  !    
 0 0 4 C F D 4 5           8 9 8 5   9 D 5 3 0 0 0 0                         m o v   d w o r d   p t r   s s : [ e b p + 5 3 9 D ] , e a x   W? ? qMX? sh_P\  ? s t o l e n   o e p   s t u b  
 0 0 4 C F D 4 B           8 9 9 D   A 1 5 3 0 0 0 0                         m o v   d w o r d   p t r   s s : [ e b p + 5 3 A 1 ] , e b x    
 0 0 4 C F D 5 1           8 9 8 D   A 5 5 3 0 0 0 0                         m o v   d w o r d   p t r   s s : [ e b p + 5 3 A 5 ] , e c x  
 0 0 4 C F D 5 7           8 9 9 5   A 9 5 3 0 0 0 0                         m o v   d w o r d   p t r   s s : [ e b p + 5 3 A 9 ] , e d x  
 0 0 4 C F D 5 D           8 9 B 5   A D 5 3 0 0 0 0                         m o v   d w o r d   p t r   s s : [ e b p + 5 3 A D ] , e s i  
 0 0 4 C F D 6 3           8 9 B D   B 1 5 3 0 0 0 0                         m o v   d w o r d   p t r   s s : [ e b p + 5 3 B 1 ] , e d i  
  
 / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / /  
 * /  
 v a r   F  
 v a r   F 2  
 v a r   v o z  
 v a r   F u n c  
 v a r   c h k  
 v a r   j  
 m o v   F u n c , 4 6 E 5 6 C  
 / *  
 / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / /  
 0 0 4 6 E 5 6 4     7 7 D 3 C 6 4 D     u s e r 3 2 . I n f l a t e R e c t  
 0 0 4 6 E 5 6 8     7 7 D 3 8 A 5 8     u s e r 3 2 . G e t W i n d o w T h r e a d P r o c e s s I d  
 0 0 4 6 E 5 6 C     0 0 0 0 0 0 0 0 < - - - - - - - - - - - - - - - - - -   F u n c  
 0 0 4 6 E 5 7 0     0 0 0 0 0 0 0 0                                         #1? ? ? $y  _1V2x 
 0 0 4 6 E 5 7 4     0 0 0 0 0 0 0 0                                         n  y  sh  ? $yo1<^  ?  
 0 0 4 6 E 5 7 8     0 0 0 0 0 0 0 0                                         ? ?  
 0 0 4 6 E 5 7 C     0 0 0 0 0 0 0 0  
 0 0 4 6 E 5 8 0     0 0 0 0 0 0 0 0  
 0 0 4 6 E 5 8 4     0 0 0 0 0 0 0 0  
 0 0 4 6 E 5 8 8     0 0 0 0 0 0 0 0  
 0 0 4 6 E 5 8 C     0 0 0 0 0 0 0 0  
 0 0 4 6 E 5 9 0     0 0 0 0 0 0 0 0  
 0 0 4 6 E 5 9 4     0 0 0 0 0 0 0 0  
 0 0 4 6 E 5 9 8     0 0 0 0 0 0 0 0  
 0 0 4 6 E 5 9 C     0 0 0 0 0 0 0 0  
 0 0 4 6 E 5 A 0     0 0 0 0 0 0 0 0  
 0 0 4 6 E 5 A 4     0 0 0 0 0 0 0 0  
 0 0 4 6 E 5 A 8     0 0 0 0 0 0 0 0  
 0 0 4 6 E 5 A C     0 0 0 0 0 0 0 0  
 0 0 4 6 E 5 B 0     7 7 D 6 E F 6 E     u s e r 3 2 . G e t M e n u S t r i n g A  
 0 0 4 6 E 5 B 4     7 7 D 5 7 4 9 F     u s e r 3 2 . G e t M e n u S t a t e  
 0 0 4 6 E 5 B 8     7 7 D 4 3 8 E C     u s e r 3 2 . G e t M e n u I t e m I n f o A  
 / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / /  
 * /  
  
  
 m o v   j , 4 0 1 0 0 0  
 m o v   e i p , j  
 l o o p 1 :  
 F I N D     e i p , # F F 2 5 ? ? ? ? ? ? 0 1 #  
 c m p   $ R E S U L T ,   0  
 j e   q u i t  
  
 m o v   F , $ R E S U L T  
 m o v   c h k , F  
 a d d   c h k , 2  
 m o v   c h k , [ c h k ]  
 m o v   c h k , [ c h k ]  
 a n d   c h k , F F 0 0 0 0 0  
 c m p   c h k , 1 0 0 0 0 0 0  
 j n e   l s  
 m o v   e i p , F  
 m o v   v o z , e i p  
 a d d   v o z , 6  
 a d d   F , 2  
 s t i  
 s t i  
 s t i  
 s t i  
 s t i  
 m o v   F 2 , e i p  
 a d d   F 2 , 3 3  
 G O     F 2  
 c m p   [ F u n c ] , 0 0 0 0 0 0 0 0  
 j n e   z e r  
 m o v   [ F u n c ] , e a x  
 l o g   F u n c  
 m o v   [ F ] , F u n c  
 a d d   F u n c , 4  
 m o v   e i p , v o z  
 j m p   l o o p 1  
  
 l s :  
 a d d   F , 6  
 j m p   l o o p 1  
  
 z e r :  
 m o v   F u n c , 4 6 E 7 5 8  
 m o v   [ F u n c ] , e a x  
 l o g   F u n c  
 m o v   [ F ] , F u n c  
 a d d   F u n c , 4  
 m o v   e i p , v o z  
 j m p   l o o p 1  
  
 q u i t :  
 m o v   e i p , o e p  
 M S G   " I A T   F i x   d u m p   i t   &   u s e   I m p R e c "  
 r e t 