0] compile with compile.bat 1] open elevator.exe with an hex editor (010), copy the text section to another file 2] find within elevator.exe the chunk starting with 0xdeadbeef and ending with 0xf001f001, append such chunk to the new file 3] append the font after 0xf001f001 4] append 0x10 zeros at the end (needed by the flash payload) 5] find the entrypoint within the new file (call, pop eax)