Leo's heart stopped. INT 3 was the debug interrupt. If he stepped over it, the packer would know. If he ignored it, the packer would never unpack the final payload. He searched memory. Found nothing. Searched the stack. Found a single pointer: 0x7FFE0000 —the user-shared data page in Windows.