.- - -----÷M÷E÷N÷U÷------------------------------------------------------------- --- ---- -------------.
! WALL ! STATS ! GOODIES ! YARA ! FAQ ! RSS ! EMV !
`-------------- - --- ---------- -------- -------- -------- -------- ----------------- - ---- ---- --'
ATM MALWARE NOTICE
b8063f1323a4ae8846163cc6e84a3b8a80463b25b9ff35d70a1c497509d48539
Date...........: 2014-11-25
Family.........: Alice
File name......: taskmgr.exe
File size......: 142.50 KB
Type file......: EXE/Windows
Virscan........: VT - HA
Documentation..: https://blog.trendmicro.com/trendlabs-security-intelligence/alice-lightweight-compact-no-nonsense-atm-malware/
Entropy:
Binary Histogram:
=== SCREENSHOT ===
=== PEDUMP REPORT ===
=== MZ Header ===
signature: "MZ"
bytes_in_last_block: 144 0x90
blocks_in_file: 3 3
num_relocs: 0 0
header_paragraphs: 4 4
min_extra_paragraphs: 0 0
max_extra_paragraphs: 65535 0xffff
ss: 0 0
sp: 184 0xb8
checksum: 0 0
ip: 0 0
cs: 0 0
reloc_table_offset: 64 0x40
overlay_number: 0 0
reserved0: 0 0
oem_id: 0 0
oem_info: 0 0
reserved2: 0 0
reserved3: 0 0
reserved4: 0 0
reserved5: 0 0
reserved6: 0 0
lfanew: 224 0xe0
=== DOS STUB ===
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno|
00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
=== RICH Header ===
LIB_ID VERSION TIMES_USED
4 4 8447 20ff 2 2
19 13 8078 1f8e 53 35
1 1 0 0 16 10
19 13 9049 2359 3 3
18 12 8444 20fc 1 1
6 6 1735 6c7 1 1
=== PE Header ===
signature: "PE\x00\x00"
# IMAGE_FILE_HEADER:
Machine: 332 0x14c x86
NumberOfSections: 6 6
TimeDateStamp: "2014-10-24 17:26:51"
PointerToSymbolTable: 0 0
NumberOfSymbols: 0 0
SizeOfOptionalHeader: 224 0xe0
Characteristics: 270 0x10e EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED
LOCAL_SYMS_STRIPPED, 32BIT_MACHINE
# IMAGE_OPTIONAL_HEADER32:
Magic: 267 0x10b 32-bit executable
LinkerVersion: 5.12
SizeOfCode: 275456 0x43400
SizeOfInitializedData: 12288 0x3000
SizeOfUninitializedData: 0 0
AddressOfEntryPoint: 168105 0x290a9
BaseOfCode: 4096 0x1000
BaseOfData: 16384 0x4000
ImageBase: 4194304 0x400000
SectionAlignment: 4096 0x1000
FileAlignment: 512 0x200
OperatingSystemVersion: 4.0
ImageVersion: 0.0
SubsystemVersion: 4.0
Reserved1: 0 0
SizeOfImage: 286720 0x46000
SizeOfHeaders: 1024 0x400
CheckSum: 0 0
Subsystem: 2 2 WINDOWS_GUI
DllCharacteristics: 0 0
SizeOfStackReserve: 1048576 0x100000
SizeOfStackCommit: 4096 0x1000
SizeOfHeapReserve: 1048576 0x100000
SizeOfHeapCommit: 4096 0x1000
LoaderFlags: 0 0
NumberOfRvaAndSizes: 16 0x10
=== DATA DIRECTORY ===
EXPORT rva:0x 2843d size:0x c50
IMPORT rva:0x 29562 size:0x c8
RESOURCE rva:0x 4000 size:0x 2f88
EXCEPTION rva:0x 0 size:0x 0
SECURITY rva:0x 0 size:0x 0
BASERELOC rva:0x 45000 size:0x d0
DEBUG rva:0x 0 size:0x 0
ARCHITECTURE rva:0x 0 size:0x 0
GLOBALPTR rva:0x 0 size:0x 0
TLS rva:0x 40b11 size:0x 20
LOAD_CONFIG rva:0x 0 size:0x 0
Bound_IAT rva:0x 0 size:0x 0
IAT rva:0x 257e2 size:0x 124
Delay_IAT rva:0x 0 size:0x 0
CLR_Header rva:0x 0 size:0x 0
rva:0x 0 size:0x 0
=== SECTIONS ===
NAME RVA VSZ RAW_SZ RAW_PTR nREL REL_PTR nLINE LINE_PTR FLAGS
.text 1000 228a 0 0 0 0 0 0 e0000020 RWX CODE
.rsrc 4000 2f88 2e00 400 0 0 0 0 c0000040 RW- IDATA
.vmp0 7000 1bbdc 0 0 0 0 0 0 60000060 R-X CODE IDATA
.tls 23000 18 200 3200 0 0 0 0 c0000000 RW-
.vmp1 24000 203e9 20400 3400 0 0 0 0 e2000020 RWX CODE DISCARDABLE
.reloc 45000 d0 200 23800 0 0 0 0 42000040 R-- IDATA DISCARDABLE
=== TLS ===
RAW_START RAW_END INDEX CALLBKS ZEROFILL FLAGS
423000 423014 423018 440b29 0 0
[?] can't find file_offset of VA 0x6e04
=== RESOURCES ===
FILE_OFFSET CP LANG SIZE TYPE NAME
0x5a8 0 0x409 9640 ICON #1
0x3088 0 0x409 380 DIALOG #1000
0 0x409 368 DIALOG #2000
0x2b50 0 0x409 20 GROUP_ICON #20
0x2b64 0 0x409 624 VERSION #1
0x2dd4 0 0x409 689 MANIFEST #1
=== IMPORTS ===
MODULE_NAME HINT ORD FUNCTION_NAME
ntdll.dll 0 RtlCaptureStackBackTrace
ntdll.dll 0 RtlMoveMemory
ntdll.dll 0 RtlUnwind
ntdll.dll 0 RtlZeroMemory
ntdll.dll 0 VerSetConditionMask
ntdll.dll 0 RtlFillMemory
user32.dll 0 SetFocus
user32.dll 0 GetDlgItem
user32.dll 0 IsWindow
user32.dll 0 DialogBoxParamA
user32.dll 0 AnimateWindow
user32.dll 0 wsprintfA
user32.dll 0 MessageBoxA
user32.dll 0 SendDlgItemMessageA
user32.dll 0 EndDialog
user32.dll 0 SendMessageA
user32.dll 0 SetWindowTextA
user32.dll 0 GetWindowTextLengthA
kernel32.dll 0 CloseHandle
kernel32.dll 0 CopyFileA
kernel32.dll 0 CreateFileA
kernel32.dll 0 ExitProcess
kernel32.dll 0 GetFileSize
kernel32.dll 0 GetModuleFileNameA
kernel32.dll 0 GetModuleHandleA
kernel32.dll 0 IsBadWritePtr
kernel32.dll 0 LocalAlloc
kernel32.dll 0 LocalFree
kernel32.dll 0 LocalSize
kernel32.dll 0 MoveFileA
kernel32.dll 0 ReadFile
kernel32.dll 0 SetEndOfFile
kernel32.dll 0 SetFilePointer
kernel32.dll 0 WinExec
kernel32.dll 0 WriteFile
kernel32.dll 0 lstrcatA
kernel32.dll 0 lstrcmpiA
kernel32.dll 0 lstrcpyA
kernel32.dll 0 lstrlenA
comctl32.dll 0 InitCommonControls
shlwapi.dll 0 PathAddBackslashA
shlwapi.dll 0 PathRemoveFileSpecA
shlwapi.dll 0 PathFileExistsA
advapi32.dll 0 CryptReleaseContext
advapi32.dll 0 CryptHashData
advapi32.dll 0 CryptGetHashParam
advapi32.dll 0 CryptDestroyHash
advapi32.dll 0 CryptCreateHash
advapi32.dll 0 CryptAcquireContextA
MSXFS.dll 0 WFSCleanUp
MSXFS.dll 0 WFSOpen
MSXFS.dll 0 WFSGetInfo
MSXFS.dll 0 WFSExecute
MSXFS.dll 0 WFSLock
MSXFS.dll 0 WFSRegister
MSXFS.dll 0 WFSFreeResult
MSXFS.dll 0 WFSUnlock
MSXFS.dll 0 WFSClose
MSXFS.dll 0 WFSStartUp
kernel32.dll 0 LoadLibraryA
kernel32.dll 0 VirtualProtect
kernel32.dll 0 GetModuleFileNameA
kernel32.dll 0 ExitProcess
user32.dll 0 MessageBoxA
=== EXPORTS ===
# module ""
# flags=0x0 ts="1970-01-01 00:00:00" version=0.0 ord_base=1
# nFuncs=1 nNames=1
ORD ENTRY_VA NAME
=== VERSION INFO ===
# VS_FIXEDFILEINFO:
FileVersion : 1.0.0.0
ProductVersion : 1.0.0.0
StrucVersion : 0x10000
FileFlagsMask : 0
FileFlags : 0
FileOS : 4
FileType : 1
FileSubtype : 0
# StringTable 040904E3:
FileVersion : "1.0.0.0"
ProductVersion : "1.0.0.0"
CompanyName : "Sanctions Group"
FileDescription : "Project Alice"
InternalName : "Sanctions"
ProductName : "Sanctions"
LegalCopyright : "Sanctions group"
VarFileInfo : [ 0x409, 0x4e3 ]
File pos Mem pos ID Text
======== ======= == ====
00000000004D 00000040004D 0 !This program cannot be run in DOS mode.
0000000000BF 0000004000BF 0 zRich
0000000001D8 0000004001D8 0 .text
000000000200 000000400200 0 .rsrc
000000000228 000000400228 0 .vmp0
000000000278 000000400278 0 .vmp1
0000000002A0 0000004002A0 0 .reloc
000000002DD4 0000004069D4 0 <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
000000002E0D 000000406A0D 0 <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
000000002E58 000000406A58 0 <assemblyIdentity
000000002E6B 000000406A6B 0 version="1.0.0.0"
000000002E82 000000406A82 0 processorArchitecture="X86"
000000002EA3 000000406AA3 0 name="CompanyName.ProductName.YourApp"
000000002ECF 000000406ACF 0 type="win32"
000000002EE5 000000406AE5 0 <description>Your application description here.</description>
000000002F24 000000406B24 0 <dependency>
000000002F32 000000406B32 0 <dependentAssembly>
000000002F47 000000406B47 0 <assemblyIdentity
000000002F62 000000406B62 0 type="win32"
000000002F7C 000000406B7C 0 name="Microsoft.Windows.Common-Controls"
000000002FB2 000000406BB2 0 version="6.0.0.0"
000000002FD1 000000406BD1 0 processorArchitecture="X86"
000000002FFA 000000406BFA 0 publicKeyToken="6595b64144ccf1df"
000000003029 000000406C29 0 language="*"
000000003043 000000406C43 0 />
00000000304F 000000406C4F 0 </dependentAssembly>
000000003069 000000406C69 0 </dependency>
000000003078 000000406C78 0 </assembly>
00000000343E 00000042403E 0 LocalFree
00000000344A 00000042404A 0 WFSOpen
00000000349A 00000042409A 0 E)&|"2
000000003527 000000424127 0 SetFilePointer
000000003589 000000424189 0 File corrupted!. This program has been manipulated and maybe
0000000035C6 0000004241C6 0 it's infected by a Virus or cracked. This file won't work anymore.
0000000036A5 0000004242A5 0 B&FY9
0000000036EA 0000004242EA 0 MessageBoxA
00000000382B 00000042442B 0 RtlFillMemory
00000000384B 00000042444B 0 CreateFileA
000000003889 000000424489 0 SendMessageA
000000003A70 000000424670 0 d$LhJw
000000003AC5 0000004246C5 0 <0 Fg
000000003AEC 0000004246EC 0 $< hC
000000003BEC 0000004247EC 0 kernel32.dll
000000003E90 000000424A90 0 a( r<
000000003F38 000000424B38 0 XnbuE
000000003F4B 000000424B4B 0 MoveFileA
0000000042BD 000000424EBD 0 3w;?/
000000004303 000000424F03 0 4Dwgs*
0000000044C9 0000004250C9 0 11Y%M
0000000044D6 0000004250D6 0 @DPN>X
0000000044EE 0000004250EE 0 6z,r!
000000004551 000000425151 0 ExitProcess
00000000457F 00000042517F 0 WFSClose
00000000458A 00000042518A 0 PathAddBackslashA
0000000045BC 0000004251BC 0 IsBadWritePtr
000000004694 000000425294 0 GetModuleFileNameA
00000000470B 00000042530B 0 .)H4bV
00000000471E 00000042531E 0 hVypr)A
000000004790 000000425390 0 P0PPt
0000000048EB 0000004254EB 0 InitCommonControls
File pos Mem pos ID Text
======== ======= == ====
00000000499A 00000042559A 0 D$D6EB
000000004A21 000000425621 0 MyeWS
000000004EE7 000000425AE7 0 SendDlgItemMessageA
000000004EFD 000000425AFD 0 GetDlgItem
000000004F0A 000000425B0A 0 VirtualProtect
00000000506C 000000425C6C 0 RtlMoveMemory
0000000050E4 000000425CE4 0 lstrcpyA
0000000051AE 000000425DAE 0 sPQ#'
000000005246 000000425E46 0 uY1/o
0000000052D3 000000425ED3 0 qhHL\
0000000053A7 000000425FA7 0 ;N63=
00000000547A 00000042607A 0 CryptCreateHash
00000000550B 00000042610B 0 hKuAJFS
0000000056B3 0000004262B3 0 dfp :
000000005716 000000426316 0 XP,=?
00000000572B 00000042632B 0 W!uL<
0000000057EA 0000004263EA 0 CkcE>
000000005873 000000426473 0 $4hA$
000000005B4D 00000042674D 0 Y'[ZgX
000000005BA3 0000004267A3 0 9D2qN
000000005D1B 00000042691B 0 )The procedure entry point %s could not be located in the dynamic link library %s
000000005DE2 0000004269E2 0 qke{W
000000005DE8 0000004269E8 0 aZr3j#
000000005E1D 000000426A1D 0 'k3}?
000000005EEC 000000426AEC 0 ze!_a
000000005F84 000000426B84 0 K\Xyo
0000000060E3 000000426CE3 0 owljf
000000006155 000000426D55 0 rj_Ze
000000006291 000000426E91 0 _MaIiEbA
0000000062C7 000000426EC7 0 'roauZ
000000006340 000000426F40 0 izzsam
0000000064A4 0000004270A4 0 vi#u%
0000000064C8 0000004270C8 0 5'(YR
0000000064D0 0000004270D0 0 4<2Gp6
000000006504 000000427104 0 ]gMi_
00000000665A 00000042725A 0 lf<o;
00000000673E 00000042733E 0 lr(zSr
000000006784 000000427384 0 e%Ayi
000000006795 000000427395 0 tCK"tyA+
000000006852 000000427452 0 aE)~tZ
000000006865 000000427465 0 y[ss3#
000000006904 000000427504 0 jm~]gc]
00000000693D 00000042753D 0 f%*hrd
00000000699F 00000042759F 0 u_y~]
0000000069E9 0000004275E9 0 A!_=d9
000000006A12 000000427612 0 nO+]_
000000006A5C 00000042765C 0 iG!mh
000000006A7F 00000042767F 0 FgvUi
000000006A85 000000427685 0 ,(Kj}Q
000000006AFD 0000004276FD 0 osydT
000000006B75 000000427775 0 k[bym,
000000006C23 000000427823 0 N;jpl
000000006CE5 0000004278E5 0 yrueq
000000006D5C 00000042795C 0 IqWByj
000000006DD6 0000004279D6 0 i#uBX
000000007002 000000427C02 0 f}qarh
000000007041 000000427C41 0 RBO,i*
0000000071F3 000000427DF3 0 ZVRv~b
00000000726F 000000427E6F 0 The ordinal %u could not be located in the dynamic link library %s
0000000072DD 000000427EDD 0 AnimateWindow
File pos Mem pos ID Text
======== ======= == ====
00000000739B 000000427F9B 0 WFSCleanUp
0000000073C0 000000427FC0 0 CryptHashData
00000000742D 00000042802D 0 $hfC}
000000007445 000000428045 0 DialogBoxParamA
000000007484 000000428084 0 amfaptg
000000007521 000000428121 0 #MSXFS.dll
0000000075B9 0000004281B9 0 g_.x}
000000007632 000000428232 0 82]c$
000000007649 000000428249 0 rma!S_?A
00000000765F 00000042825F 0 z&r~>
0000000076BC 0000004282BC 0 "Rns=
0000000076C8 0000004282C8 0 )}%}
000000007791 000000428391 0 ((i]e
0000000077BE 0000004283BE 0 $dXft
000000007828 000000428428 0 GetWindowTextLengthA
0000000078A0 0000004284A0 0 ?"q06
000000007A17 000000428617 0 K,{h{
000000007A8B 00000042868B 0 \I+x2
000000007A9E 00000042869E 0 @YIj%
000000007AFD 0000004286FD 0 r_VR@L
000000007CED 0000004288ED 0 xLAE*
000000007E90 000000428A90 0 yELzH
000000008215 000000428E15 0 xim=@
0000000082B0 000000428EB0 0 QI4!]+.
000000008313 000000428F13 0 ;GO1n
000000008578 000000429178 0 !1Ab>k
0000000086F3 0000004292F3 0 GetModuleHandleA
0000000087F0 0000004293F0 0 v>k\c+(~
000000008828 000000429428 0 =%M%j
000000008A6F 00000042966F 0 WFSLock
000000008AAE 0000004296AE 0 ,T$?3-["
000000008AE5 0000004296E5 0 Z.X8NQ
000000008B68 000000429768 0 kY%{i
000000008B7B 00000042977B 0 Y%%Ii\
000000008B8D 00000042978D 0 v*'}#3
000000008CAD 0000004298AD 0 CryptGetHashParam
000000008D92 000000429992 0 WFSFreeResult
000000008DA2 0000004299A2 0 LocalSize
000000008F3D 000000429B3D 0 t$<hH3g'
00000000903B 000000429C3B 0 CryptReleaseContext
0000000090D7 000000429CD7 0 a)&|"I
00000000912E 000000429D2E 0 qM|O?CY
0000000091A5 000000429DA5 0 Vr5H EY
0000000092B9 000000429EB9 0 EndDialog
0000000093AF 000000429FAF 0 c/TDx;D$
0000000093D7 000000429FD7 0 $Gntdll.dll
0000000093E6 000000429FE6 0 lstrlenA
0000000093F1 000000429FF1 0 IsWindow
000000009454 00000042A054 0 #OngO
0000000094A1 00000042A0A1 0 2pkO,
000000009547 00000042A147 0 CopyFileA
000000009738 00000042A338 0 ReadFile
0000000097CB 00000042A3CB 0 E}9vvB
0000000097DC 00000042A3DC 0 -hD(~
00000000981F 00000042A41F 0 MYiF8
000000009880 00000042A480 0 LoadLibraryA
0000000098A9 00000042A4A9 0 XA4T41
000000009A73 00000042A673 0 \iEk[
000000009AAD 00000042A6AD 0 nc]8z
000000009C9A 00000042A89A 0 RtlZeroMemory
File pos Mem pos ID Text
======== ======= == ====
000000009CAA 00000042A8AA 0 lstrcatA
000000009CB5 00000042A8B5 0 PathFileExistsA
000000009D22 00000042A922 0 32*e)&|
000000009DC5 00000042A9C5 0 JfRZ>
000000009E31 00000042AA31 0 t|UV-
000000009F4E 00000042AB4E 0 kG'lH
000000009FA8 00000042ABA8 0 user32.dll
00000000A068 00000042AC68 0 RtlCaptureStackBackTrace
00000000A103 00000042AD03 0 LocalAlloc
00000000A187 00000042AD87 0 wsprintfA
00000000A258 00000042AE58 0 25.N!w
00000000A371 00000042AF71 0 SetWindowTextA
00000000A3C7 00000042AFC7 0 WFSRegister
00000000A47E 00000042B07E 0 t$ hl+
00000000A932 00000042B532 0 5'zZ=
00000000A94D 00000042B54D 0 d%gis
00000000A990 00000042B590 0 GetFileSize
00000000A9AA 00000042B5AA 0 WFSUnlock
00000000AA63 00000042B663 0 >1Q$$
00000000AB7C 00000042B77C 0 e 1H7
00000000AD17 00000042B917 0 WriteFile
00000000AEC0 00000042BAC0 0 'FG+(~
00000000AF45 00000042BB45 0 Z ]}~
00000000AF76 00000042BB76 0 9+YBX
00000000AF9C 00000042BB9C 0 IG-v/
00000000B039 00000042BC39 0 4n2'(c
00000000B041 00000042BC41 0 9\@_NP7n
00000000B08D 00000042BC8D 0 =gQ\2
00000000B095 00000042BC95 0 V[AaA
00000000B103 00000042BD03 0 l_~XeQab
00000000B14E 00000042BD4E 0 U*Y&h
00000000B154 00000042BD54 0 QBg[7
00000000B160 00000042BD60 0 +]-~y<#
00000000B169 00000042BD69 0 ,[A0}
00000000B1A1 00000042BDA1 0 B+Byra
00000000B1FB 00000042BDFB 0 gWcv}
00000000B2DF 00000042BEDF 0 SQ4 vbL
00000000B4B3 00000042C0B3 0 a.cmQ
00000000B4DD 00000042C0DD 0 2F:m'
00000000B50D 00000042C10D 0 eP+/)?
00000000B586 00000042C186 0 Qq;a?m
00000000B58E 00000042C18E 0 #v\BP3BS
00000000B5EA 00000042C1EA 0 uvcyh
00000000B6CE 00000042C2CE 0 Y0O-P.
00000000B823 00000042C423 0 y}[a!_O
00000000B87E 00000042C47E 0 ;YP S,
00000000B8ED 00000042C4ED 0 vY'Aue
00000000B967 00000042C567 0 S}Agn
00000000BA6C 00000042C66C 0 t]B6g&
00000000BA8E 00000042C68E 0 ;eO)H._
00000000BC97 00000042C897 0 |JHbd
00000000BCBF 00000042C8BF 0 !7c+Q
00000000BEF5 00000042CAF5 0 ~i-JdA~Hr
00000000C029 00000042CC29 0 Wr*A1mLB
00000000C107 00000042CD07 0 d,xiG
00000000C11A 00000042CD1A 0 S]9zk%|I'
00000000C241 00000042CE41 0 mQN>sB
00000000C2AD 00000042CEAD 0 )JRrV
00000000C2D3 00000042CED3 0 z w~F
00000000C470 00000042D070 0 XlI;pI
File pos Mem pos ID Text
======== ======= == ====
00000000C555 00000042D155 0 !<aJV
00000000C648 00000042D248 0 a]m@g
00000000C67B 00000042D27B 0 #z+az9z
00000000C68E 00000042D28E 0 ke]mCc
00000000C783 00000042D383 0 kMk1k%e
00000000C81F 00000042D41F 0 \fO)+
00000000C829 00000042D429 0 ,1,>x
00000000C8E3 00000042D4E3 0 o!.iY
00000000C90A 00000042D50A 0 ;ilN,9
00000000C93D 00000042D53D 0 .Hsi3b_
00000000C970 00000042D570 0 0pi,B
00000000C9F4 00000042D5F4 0 Q!}v}
00000000CA0D 00000042D60D 0 y ~sA
00000000CA4B 00000042D64B 0 BpfpA
00000000CAA4 00000042D6A4 0 [>ZBls
00000000CACB 00000042D6CB 0 Y71Ay
00000000CB61 00000042D761 0 B\_O6
00000000CB67 00000042D767 0 *fT(s
00000000CB81 00000042D781 0 Q]4yU
00000000CD37 00000042D937 0 g4})c
00000000CD4D 00000042D94D 0 Q,Ao'
00000000CD6C 00000042D96C 0 1l#B-
00000000CE06 00000042DA06 0 yhUNBT
00000000CE3C 00000042DA3C 0 AI/+C
00000000CEE2 00000042DAE2 0 Dj4Lx
00000000CF73 00000042DB73 0 Cg<p)'iK
00000000CFBA 00000042DBBA 0 )+7W''
00000000D293 00000042DE93 0 }ui=m
00000000D2A8 00000042DEA8 0 }u#e|!zI
00000000D400 00000042E000 0 8Kd9 We
00000000D488 00000042E088 0 &gzO6
00000000D499 00000042E099 0 Wd?lg
00000000D4D3 00000042E0D3 0 4-zDm
00000000D554 00000042E154 0 Y%EQh
00000000D5AF 00000042E1AF 0 ]%~HQj
00000000D7BF 00000042E3BF 0 VzND,A
00000000D863 00000042E463 0 Gz+EN"_
00000000D878 00000042E478 0 ~C|KGZ
00000000D9A2 00000042E5A2 0 QZ-bjF
00000000DAAA 00000042E6AA 0 G/;}w
00000000DBD3 00000042E7D3 0 yyVlW
00000000DC45 00000042E845 0 YlrA+RW
00000000DC52 00000042E852 0 ae,["e
00000000DC94 00000042E894 0 <L0C{
00000000DCE1 00000042E8E1 0 jq,Ik
00000000DDF8 00000042E9F8 0 NnQA0
00000000DE1F 00000042EA1F 0 L|G</(
00000000DE62 00000042EA62 0 #[A8S
00000000DED0 00000042EAD0 0 YE/W!
00000000E02C 00000042EC2C 0 {$qPN
00000000E09E 00000042EC9E 0 x8l(B
00000000E0C9 00000042ECC9 0 @*,FU
00000000E14B 00000042ED4B 0 jNQ!A
00000000E20D 00000042EE0D 0 W!g$E*'\
00000000E248 00000042EE48 0 gztu{
00000000E284 00000042EE84 0 xj~2?
00000000E297 00000042EE97 0 q:O~
00000000E2E8 00000042EEE8 0 a?Y+S
00000000E33E 00000042EF3E 0 K!dE|
00000000E36D 00000042EF6D 0 xd=ye+
File pos Mem pos ID Text
======== ======= == ====
00000000E37A 00000042EF7A 0 <4i{e
00000000E4B8 00000042F0B8 0 =HR|>
00000000E577 00000042F177 0 3hB /{
00000000E59C 00000042F19C 0 V3-~+/
00000000E6C9 00000042F2C9 0 qafx[
00000000E7D6 00000042F3D6 0 _bej-
00000000E9D2 00000042F5D2 0 >yibo
00000000EA24 00000042F624 0 C17fb0
00000000EA55 00000042F655 0 yp+]-y
00000000EA68 00000042F668 0 NR;<k
00000000EAB7 00000042F6B7 0 e;W#oK
00000000EC40 00000042F840 0 \['P7,O
00000000ED22 00000042F922 0 }!R;iWd
00000000ED46 00000042F946 0 <N2F]S
00000000EE99 00000042FA99 0 +'S&k
00000000EEA2 00000042FAA2 0 6VlkBr}
00000000EEFA 00000042FAFA 0 xJ~)7
00000000EF9A 00000042FB9A 0 #kfqQ)
00000000EFB7 00000042FBB7 0 "J.hp
00000000F1CE 00000042FDCE 0 0kuUE
00000000F31D 00000042FF1D 0 p73r2:
00000000F35C 00000042FF5C 0 i#|QV
00000000F433 000000430033 0 S;C{h"
00000000F452 000000430052 0 &A"P7
00000000F464 000000430064 0 > @!Bv
00000000F490 000000430090 0 UVTB<
00000000F4C6 0000004300C6 0 tmA.V
00000000F4D8 0000004300D8 0 A>1-"k
00000000F51D 00000043011D 0 TwLA\
00000000F600 000000430200 0 CiN36
00000000F64F 00000043024F 0 c]A=>g
00000000F759 000000430359 0 }c=y<
00000000F7F0 0000004303F0 0 iGKlR
00000000F7FB 0000004303FB 0 &y:<\
00000000F815 000000430415 0 % I|maT
00000000F826 000000430426 0 L~6cQ
00000000F82C 00000043042C 0 G9EIh
00000000F86A 00000043046A 0 dA0UH
00000000F8D7 0000004304D7 0 ztbSNy
00000000F920 000000430520 0 d] Bu
00000000F990 000000430590 0 U0bQh
00000000F9AF 0000004305AF 0 Co+ .
00000000F9BA 0000004305BA 0 't*d/
00000000FA43 000000430643 0 k7lWv
00000000FA56 000000430656 0 TR7,Z
00000000FA9E 00000043069E 0 nes}cX
00000000FD23 000000430923 0 8d%+m
00000000FE3D 000000430A3D 0 _<OAGW
00000000FE76 000000430A76 0 duAfj
00000000FEDC 000000430ADC 0 JlkC6
00000001004B 000000430C4B 0 A)1:'
000000010146 000000430D46 0 '5/.Y
000000010250 000000430E50 0 T.nvtd
0000000102B6 000000430EB6 0 lAofUa
00000001030C 000000430F0C 0 L)Ch'8{
0000000103DC 000000430FDC 0 sX{Hi#
0000000104C1 0000004310C1 0 db_>y
000000010530 000000431130 0 -|)bq
00000001068C 00000043128C 0 n)HuyO/
0000000107CF 0000004313CF 0 rJ]JW
File pos Mem pos ID Text
======== ======= == ====
0000000107DD 0000004313DD 0 mEYA{O
00000001080B 00000043140B 0 )*~VRf
000000010858 000000431458 0 %,zxO
000000010946 000000431546 0 (.SCpt
000000010966 000000431566 0 Z>i,
000000010986 000000431586 0 aN2Ab
000000010AAA 0000004316AA 0 V ZRL
000000010AFC 0000004316FC 0 %,LWb
000000010B07 000000431707 0 3.A#,Kl
000000010B43 000000431743 0 gkN}u
000000010B8A 00000043178A 0 cnB=AJ[
000000010D52 000000431952 0 Ra)IL
000000010DA6 0000004319A6 0 P3~U!
000000010EA1 000000431AA1 0 EdainJ
00000001104E 000000431C4E 0 d1AT>
000000011069 000000431C69 0 +objOd
000000011140 000000431D40 0 fBNws
000000011239 000000431E39 0 UbZpLd
000000011255 000000431E55 0 8".Y~Q
0000000112D7 000000431ED7 0 8pj."
00000001134E 000000431F4E 0 i)yQ~.
0000000114F1 0000004320F1 0 +"bJA
00000001153F 00000043213F 0 C[jqF4_&v
000000011551 000000432151 0 B<+R:
0000000115CC 0000004321CC 0 0UvQA
000000011775 000000432375 0 <wLBM
000000011794 000000432394 0 gd}Bj
0000000119B0 0000004325B0 0 Y9&qb
0000000119FB 0000004325FB 0 "ce]!
000000011AAD 0000004326AD 0 l;UQ/
000000011B1C 00000043271C 0 8iPIA
000000011C77 000000432877 0 yo)Bn
000000011D26 000000432926 0 j9/xR
000000011D3D 00000043293D 0 Bt{gOc
000000011ED0 000000432AD0 0 _jtaYB
000000011F08 000000432B08 0 _k6bN
000000011FED 000000432BED 0 F)_A{i
000000011FF6 000000432BF6 0 n}Xb|
000000012050 000000432C50 0 yBy$m~L
00000001210E 000000432D0E 0 ]B)l5
00000001220D 000000432E0D 0 z;7Y1
000000012271 000000432E71 0 _O3bW'
0000000122D0 000000432ED0 0 jbAoVM}
0000000122F3 000000432EF3 0 eH3 \
000000012398 000000432F98 0 OAR=J
000000012469 000000433069 0 xZ5~~
000000012512 000000433112 0 -ouzWK
0000000125C3 0000004331C3 0 Ucl1Se
000000012669 000000433269 0 k9kVR
0000000127A1 0000004333A1 0 ImB##*
0000000127BB 0000004333BB 0 x:cdW#
000000012A14 000000433614 0 +d(b.
000000012A3D 00000043363D 0 =?kP0AC
000000012A86 000000433686 0 :zy]A
000000012C23 000000433823 0 PqV=b
000000012DCF 0000004339CF 0 OnAqFW
000000012E67 000000433A67 0 D$G.)b
000000012F8D 000000433B8D 0 hV$;Q_b
000000012FB6 000000433BB6 0 +U8dW/}
000000012FBF 000000433BBF 0 :Q\iN=6
File pos Mem pos ID Text
======== ======= == ====
000000013040 000000433C40 0 v;U6<D~
000000013051 000000433C51 0 xbZ/!iNA
000000013072 000000433C72 0 ~);rF
000000013101 000000433D01 0 |"cW\U
000000013180 000000433D80 0 ur0ir5A
0000000132A9 000000433EA9 0 e6O5Zi
0000000132C3 000000433EC3 0 cAB,4
0000000132EB 000000433EEB 0 ipjeA
0000000132FD 000000433EFD 0 ~;0%Bi
000000013307 000000433F07 0 ~zIMD
000000013391 000000433F91 0 {|]m%/
000000013583 000000434183 0 }}ty=v
0000000135EE 0000004341EE 0 q!U}9!Azu
00000001388B 00000043448B 0 ]I+RH
0000000139CB 0000004345CB 0 A4f-z
000000013A13 000000434613 0 U_+]!1
000000013A54 000000434654 0 MN,TN
000000013AB1 0000004346B1 0 iT2%RM
000000013B35 000000434735 0 d*tB.
000000013B73 000000434773 0 Jz.]Q
000000013CEF 0000004348EF 0 ,"X&.+.
000000013D36 000000434936 0 !)RBB
000000013EE7 000000434AE7 0 bOvL&
000000013F04 000000434B04 0 Pl<Fk
000000013F0C 000000434B0C 0 x]Xjh
000000013F4E 000000434B4E 0 a3<B.
000000013FF5 000000434BF5 0 ] @_&
000000014001 000000434C01 0 _A+/;Pk(
00000001412A 000000434D2A 0 d4Tbh
0000000141BA 000000434DBA 0 R~kD(boWO
0000000141E2 000000434DE2 0 ]%tyaTCF
000000014223 000000434E23 0 Z1+Am
000000014255 000000434E55 0 ]s+UeN3@
000000014654 000000435254 0 IsAMv=
0000000146A3 0000004352A3 0 ?n}Rp
0000000146C7 0000004352C7 0 ~ldT<
000000014788 000000435388 0 a\Dk+S
000000014850 000000435450 0 57+.N
0000000148F3 0000004354F3 0 #|<I\
000000014926 000000435526 0 cxuAx}
000000014963 000000435563 0 eCZW'L
00000001499B 00000043559B 0 LS~dEJW
000000014A79 000000435679 0 +P$Pi
000000014B25 000000435725 0 i-[]N
000000014CE2 0000004358E2 0 0\P7
000000014CF9 0000004358F9 0 'tJzL[8
000000014DB9 0000004359B9 0 %dY+7QA
000000014DCE 0000004359CE 0 &]qB
000000014DF4 0000004359F4 0 b#kj@
000000014E78 000000435A78 0 7>3+d
000000014E83 000000435A83 0 RSpB3=
000000014E96 000000435A96 0 UN!:ktcO#
000000014EB0 000000435AB0 0 6[HP]
000000014F57 000000435B57 0 /eR@n{S
000000014FA0 000000435BA0 0 #Zk<l
0000000150FF 000000435CFF 0 C,sI.
00000001517E 000000435D7E 0 k1DdSZ
00000001518F 000000435D8F 0 0we/A)q.
000000015246 000000435E46 0 pXSJ8
0000000152B8 000000435EB8 0 ~Q-(v
File pos Mem pos ID Text
======== ======= == ====
0000000152BE 000000435EBE 0 eO1g)
00000001530D 000000435F0D 0 !h~wO2
000000015315 000000435F15 0 )Xou<
000000015363 000000435F63 0 % leB7
0000000153DC 000000435FDC 0 )*oNW!
00000001559D 00000043619D 0 ?d.e1X
0000000155FF 0000004361FF 0 #7kCL
000000015753 000000436353 0 gy]J\
000000015797 000000436397 0 iq{pa;
000000015877 000000436477 0 z cw5]M|g
0000000158B8 0000004364B8 0 Qr9nM
0000000158C7 0000004364C7 0 .U3!lm
00000001595E 00000043655E 0 )/l#X
0000000159AE 0000004365AE 0 ?le+#U
000000015B19 000000436719 0 B!aH<
000000015B40 000000436740 0 6;-qm
000000015BBB 0000004367BB 0 Ok*"NB
000000015BD5 0000004367D5 0 ?G}RQp
000000015C06 000000436806 0 A+k:>
000000015C2F 00000043682F 0 2/k}s
000000015C4C 00000043684C 0 L).dWk z
000000015D7A 00000043697A 0 ykARZ
000000015D95 000000436995 0 XLx#F
000000015DB4 0000004369B4 0 zL>ly
000000015DE3 0000004369E3 0 =H/ad
000000015FEF 000000436BEF 0 P+:d MA~
000000016136 000000436D36 0 ]yQCK
00000001616D 000000436D6D 0 sR${vj1
0000000162BA 000000436EBA 0 Yy4e6
000000016303 000000436F03 0 xlBs)
000000016390 000000436F90 0 DLq]>
0000000163B5 000000436FB5 0 =[A9>N
00000001654F 00000043714F 0 ZR]O1+"
00000001665A 00000043725A 0 2QB97
000000016712 000000437312 0 ]@8Kb
000000016782 000000437382 0 A}/G?
00000001681A 00000043741A 0 mAsx0R
000000016827 000000437427 0 R>anG
0000000168E0 0000004374E0 0 -H~y;(
000000016980 000000437580 0 P}uBKh
0000000169ED 0000004375ED 0 Y +?)A"i#P|
000000016A07 000000437607 0 l]fNh
000000016AA2 0000004376A2 0 ]]IdD
000000016CC6 0000004378C6 0 +J!YA
000000016E68 000000437A68 0 +b3.d
000000016EF9 000000437AF9 0 pV/nn
000000016F34 000000437B34 0 ?mBvPR+
000000017044 000000437C44 0 v?eRqVA=
0000000171ED 000000437DED 0 "]aA5TU
00000001722F 000000437E2F 0 a{ic-x
00000001725D 000000437E5D 0 l>o7I
0000000172C4 000000437EC4 0 @6K:/n
0000000173F9 000000437FF9 0 =QC'-3
00000001746E 00000043806E 0 fi/+%
0000000175C7 0000004381C7 0 mg,'U
000000017687 000000438287 0 Bd_E=
0000000176A8 0000004382A8 0 byBD
0000000176E5 0000004382E5 0 8n"<a=<
0000000177E2 0000004383E2 0 NO.+J
000000017A5C 00000043865C 0 gP+O/
File pos Mem pos ID Text
======== ======= == ====
000000017CBA 0000004388BA 0 {|HCY
000000017D09 000000438909 0 elz)9
000000017E1A 000000438A1A 0 [k!b{
000000017EFE 000000438AFE 0 v@+0_LA
000000017FE1 000000438BE1 0 bZ1N=
000000018100 000000438D00 0 IzKQO
000000018113 000000438D13 0 9hE5/
00000001818A 000000438D8A 0 :O)Z2
00000001836D 000000438F6D 0 7B:Bu6
00000001846B 00000043906B 0 rE:6]
000000018478 000000439078 0 =svh(V- f
0000000184F3 0000004390F3 0 .i3BJ
000000018524 000000439124 0 Rg1$Gj
000000018532 000000439132 0 8dj]]@v
00000001861A 00000043921A 0 THec&+
00000001864D 00000043924D 0 hE,*9
000000018679 000000439279 0 *>"pR
0000000187C5 0000004393C5 0 lqkiR
000000018B0A 00000043970A 0 Uaw#+O
000000018C5B 00000043985B 0 Ep,7g
000000018C68 000000439868 0 B"hQ_
000000018CFD 0000004398FD 0 dB!8?rb
000000018D0B 00000043990B 0 j!/gZ
000000018D57 000000439957 0 k&s~
000000018D5E 00000043995E 0 'pKmb
000000018EE6 000000439AE6 0 jQ=_,
000000018F8B 000000439B8B 0 ?fp3/
000000018F9F 000000439B9F 0 w7b7v8
0000000190CE 000000439CCE 0 5gbAG
00000001919A 000000439D9A 0 [4H\
0000000191C0 000000439DC0 0 EvnbL
0000000191F6 000000439DF6 0 v)P+[!B
00000001929E 000000439E9E 0 ry)j#Z
0000000193AD 000000439FAD 0 -}i"aYi
000000019454 00000043A054 0 &abi]
000000019528 00000043A128 0 [D!PYQ
00000001964B 00000043A24B 0 *~,QXb
000000019675 00000043A275 0 yu?-,
000000019757 00000043A357 0 CZAqV
000000019795 00000043A395 0 nl(I!%
000000019804 00000043A404 0 yRj_ro
00000001984E 00000043A44E 0 B.Li,@J
000000019881 00000043A481 0 NKJ[KP
0000000198CA 00000043A4CA 0 g5=}
000000019A10 00000043A610 0 8UdGW
000000019A3E 00000043A63E 0 Q#.Or
000000019A5D 00000043A65D 0 TonW%
000000019A67 00000043A667 0 Z6w %lEo
000000019D20 00000043A920 0 8f %?zT
000000019DBF 00000043A9BF 0 |'.hHQNR
000000019E8F 00000043AA8F 0 7o+hv]~
00000001A092 00000043AC92 0 qbW'k&gSi
00000001A17F 00000043AD7F 0 IlnAh
00000001A1A1 00000043ADA1 0 +NSW<
00000001A2A1 00000043AEA1 0 h;TM+@y
00000001A2F5 00000043AEF5 0 b"NP*P
00000001A379 00000043AF79 0 2!Fi&
00000001A398 00000043AF98 0 b4A[gJ
00000001A404 00000043B004 0 :\6AVe
00000001A476 00000043B076 0 aE!7)
File pos Mem pos ID Text
======== ======= == ====
00000001A5E7 00000043B1E7 0 3)LqB
00000001A5F9 00000043B1F9 0 qtT$pmB
00000001A655 00000043B255 0 nJZN}>
00000001A6E7 00000043B2E7 0 32bPB
00000001A852 00000043B452 0 e+w#A
00000001A8C2 00000043B4C2 0 lWj+u
00000001A8DA 00000043B4DA 0 5>"SI}q
00000001A986 00000043B586 0 163\IQ
00000001AAD9 00000043B6D9 0 3f\yb#
00000001AAE9 00000043B6E9 0 aY@I\
00000001AB73 00000043B773 0 r8+JB
00000001AC73 00000043B873 0 N6p,A
00000001AC92 00000043B892 0 lb"L:I+A
00000001ACF8 00000043B8F8 0 y}"+p1
00000001ADB2 00000043B9B2 0 Em)1!=i
00000001AE3A 00000043BA3A 0 %GZQR
00000001AE6C 00000043BA6C 0 SehN]
00000001AE91 00000043BA91 0 kYd@](
00000001AF05 00000043BB05 0 B(FSK
00000001AF28 00000043BB28 0 OkNY\?
00000001AFB4 00000043BBB4 0 _eBg)&EH
00000001B060 00000043BC60 0 EQpUq
00000001B174 00000043BD74 0 anJAc
00000001B17A 00000043BD7A 0 YW!}zyI
00000001B18B 00000043BD8B 0 [C)Lg
00000001B1BC 00000043BDBC 0 #[Aw0:
00000001B1C8 00000043BDC8 0 "dKZ2ie
00000001B1DA 00000043BDDA 0 L,WY)i+
00000001B22D 00000043BE2D 0 nUG.q
00000001B253 00000043BE53 0 >R#099
00000001B286 00000043BE86 0 mRAkA
00000001B30F 00000043BF0F 0 -HX" C
00000001B3C3 00000043BFC3 0 >iOi}
00000001B445 00000043C045 0 ~UP}Ifi~
00000001B45A 00000043C05A 0 Nai{e<Z:
00000001B463 00000043C063 0 #aLiz
00000001B6DE 00000043C2DE 0 E:A~C
00000001B74C 00000043C34C 0 9$)PS
00000001B821 00000043C421 0 A<zYi
00000001BA2B 00000043C62B 0 ]BaA;
00000001BAE3 00000043C6E3 0 CeB0@t
00000001BB46 00000043C746 0 h09ZAC
00000001BB5C 00000043C75C 0 ]ARVs@
00000001BBE1 00000043C7E1 0 Hr;,6
00000001BC71 00000043C871 0 lU8G"
00000001BC9C 00000043C89C 0 T*nZ_
00000001BD73 00000043C973 0 {"fA4
00000001BD83 00000043C983 0 >[BV;
00000001BDE5 00000043C9E5 0 G;q~,
00000001BE7B 00000043CA7B 0 ?OqSB
00000001BFA6 00000043CBA6 0 <kA2)
00000001BFDC 00000043CBDC 0 SLCE\
00000001C018 00000043CC18 0 N]SV8]
00000001C06C 00000043CC6C 0 gaPc
00000001C086 00000043CC86 0 YoBC!
00000001C106 00000043CD06 0 >teSl
00000001C14B 00000043CD4B 0 NcbBb.rnK>
00000001C220 00000043CE20 0 $QYlj
00000001C249 00000043CE49 0 Z9UtX
00000001C28E 00000043CE8E 0 M9ibyRjhSU
File pos Mem pos ID Text
======== ======= == ====
00000001C2AA 00000043CEAA 0 qiQolj)I
00000001C2F9 00000043CEF9 0 -S#ycI,
00000001C380 00000043CF80 0 CleyDa
00000001C3A7 00000043CFA7 0 Yb92$N
00000001C4E4 00000043D0E4 0 _5I"M
00000001C4EE 00000043D0EE 0 -uQ*y
00000001C539 00000043D139 0 \]1qU
00000001C54A 00000043D14A 0 ojVK9Y
00000001C5A0 00000043D1A0 0 <:ON'
00000001C66E 00000043D26E 0 \4~HT
00000001C6D5 00000043D2D5 0 rYtmEjoW
00000001C791 00000043D391 0 n"J%LZ
00000001C7E3 00000043D3E3 0 pakJ6cY
00000001C831 00000043D431 0 aZR<g
00000001C85D 00000043D45D 0 SK6eY
00000001C880 00000043D480 0 bZZ+|XV[Y
00000001C89A 00000043D49A 0 $wsQ7
00000001C8F7 00000043D4F7 0 ]9+ERt
00000001C971 00000043D571 0 _B(Wnl
00000001CA3F 00000043D63F 0 c\(N#bZ
00000001CA52 00000043D652 0 |HA#Py
00000001CBB0 00000043D7B0 0 \Yk@C
00000001CBD3 00000043D7D3 0 0{Q!Z
00000001CD2C 00000043D92C 0 Q%ixc
00000001CD3A 00000043D93A 0 j7Ohw
00000001CDA5 00000043D9A5 0 cL!l[
00000001CDD9 00000043D9D9 0 _0?To
00000001CE5F 00000043DA5F 0 R:qXs
00000001CEA5 00000043DAA5 0 a#qXI
00000001CF19 00000043DB19 0 9neAR
00000001CF4E 00000043DB4E 0 5?shR
00000001CFA1 00000043DBA1 0 RrH\u$
00000001D06C 00000043DC6C 0 :Kda4
00000001D16C 00000043DD6C 0 W~ceu
00000001D181 00000043DD81 0 U R\
00000001D396 00000043DF96 0 <jCOA
00000001D3E6 00000043DFE6 0 e4Q\8
00000001D421 00000043E021 0 qZ|Iy[5
00000001D478 00000043E078 0 fvO{1
00000001D4A5 00000043E0A5 0 g:8 Oe"
00000001D4F3 00000043E0F3 0 a[sQ
00000001D594 00000043E194 0 MviU;
00000001D611 00000043E211 0 ({M,l
00000001D6D0 00000043E2D0 0 B{R:\
00000001D704 00000043E304 0 b[7XRO
00000001D736 00000043E336 0 hLklZ
00000001D762 00000043E362 0 e_"0U
00000001D770 00000043E370 0 lEK]S
00000001D84B 00000043E44B 0 l7_U7MrlZ
00000001D8CE 00000043E4CE 0 9P]a,_
00000001D977 00000043E577 0 +$qNX
00000001DA9A 00000043E69A 0 w]%1O
00000001DB21 00000043E721 0 Oj0TKZ
00000001DB57 00000043E757 0 h*]HVR
00000001DCE9 00000043E8E9 0 Q ={J
00000001DE82 00000043EA82 0 58{Tl[
00000001DF61 00000043EB61 0 jM7{m
00000001DFB7 00000043EBB7 0 H$|Yl
00000001E09F 00000043EC9F 0 cjkOpY
00000001E186 00000043ED86 0 ~!t[X
File pos Mem pos ID Text
======== ======= == ====
00000001E1A5 00000043EDA5 0 MkkD)
00000001E20C 00000043EE0C 0 1S_&Y
00000001E261 00000043EE61 0 i!Ox(
00000001E30D 00000043EF0D 0 uMKjJ
00000001E35D 00000043EF5D 0 qPjSl"
00000001E3DF 00000043EFDF 0 ~%)jKLP\
00000001E451 00000043F051 0 b)MMTv
00000001E506 00000043F106 0 [i6IX
00000001E528 00000043F128 0 jO$lU
00000001E566 00000043F166 0 K:<14
00000001E674 00000043F274 0 \L,Ix
00000001E6A6 00000043F2A6 0 yf!%F
00000001E6E2 00000043F2E2 0 iq|\Z
00000001E7CD 00000043F3CD 0 YG 7+T\l0
00000001E8D5 00000043F4D5 0 m['}YK
00000001E8FF 00000043F4FF 0 (!YcvF+
00000001EADA 00000043F6DA 0 _CoSY8
00000001EB16 00000043F716 0 2VO\,
00000001EB58 00000043F758 0 -QDZYD
00000001EBAB 00000043F7AB 0 DToYK0
00000001EC15 00000043F815 0 |3rn>
00000001ED04 00000043F904 0 sG2Y+w
00000001EDFB 00000043F9FB 0 -LgY;
00000001EF31 00000043FB31 0 s_}Y93
00000001EF70 00000043FB70 0 WYM S
00000001EF81 00000043FB81 0 k~YnR
00000001EFFA 00000043FBFA 0 Y+j#zm
00000001F052 00000043FC52 0 7#/Yk
00000001F074 00000043FC74 0 x6(U]GZ2
00000001F09C 00000043FC9C 0 1XRJ-
00000001F244 00000043FE44 0 @=XYk
00000001F2D5 00000043FED5 0 fF5jdY
00000001F31F 00000043FF1F 0 ad-Mm
00000001F339 00000043FF39 0 cw.a$
00000001F40D 00000044000D 0 'SW7[
00000001F460 000000440060 0 =!%Y=
00000001F4C8 0000004400C8 0 lh,1XM
00000001F576 000000440176 0 ?ohu-
00000001F5F8 0000004401F8 0 bB"gx
00000001F6A1 0000004402A1 0 nvmqD
00000001F6CC 0000004402CC 0 +Z1 Z.
00000001F97B 00000044057B 0 CryptAcquireContextA
00000001FA13 000000440613 0 y]~ZO
00000001FB46 000000440746 0 WFSStartUp
00000001FC2D 00000044082D 0 ;EsN-V
00000001FE25 000000440A25 0 B2Zmu
00000001FE62 000000440A62 0 ,.YpH
00000001FED7 000000440AD7 0 o6PhP!
00000001FF9D 000000440B9D 0 CloseHandle
000000020081 000000440C81 0 SetFocus
0000000200D8 000000440CD8 0 WFSGetInfo
000000020171 000000440D71 0 comctl32.dll
0000000201C2 000000440DC2 0 @\oGD
000000020272 000000440E72 0 WFSExecute
000000020409 000000441009 0 A debugger has been found running in your system.
00000002043B 00000044103B 0 Please, unload it from memory and restart your program.
000000020473 000000441073 0 advapi32.dll
0000000204F7 0000004410F7 0 PathRemoveFileSpecA
00000002054B 00000044114B 0 uxm@F
0000000205CF 0000004411CF 0 SetEndOfFile
File pos Mem pos ID Text
======== ======= == ====
00000002065E 00000044125E 0 WinExec
000000020670 000000441270 0 shlwapi.dll
00000002067E 00000044127E 0 lstrcmpiA
00000002080C 00000044140C 0 CryptDestroyHash
0000000208DE 0000004414DE 0 RtlUnwind
000000020947 000000441547 0 EWD4?
000000020A37 000000441637 0 (lD4~
000000020A73 000000441673 0 +SD4
000000020AD5 0000004416D5 0 VerSetConditionMask
000000020B57 000000441757 0 U |r%
000000020B95 000000441795 0 ZDx |$t
000000020C06 000000441806 0 h~/W
0000000210D2 000000441CD2 0 5h:J6
0000000213FC 000000441FFC 0 D$$>:WP
000000021A63 000000442663 0 D$<hN
000000022EA2 000000443AA2 0 T$0h&
000000022F15 000000443B15 0 4UAOZ
000000022FD9 000000443BD9 0 l$4f9
000000023426 000000444026 0 t$ph!Y=O
000000023641 000000444241 0 t$DhO
000000023835 000000445035 0 0\2i2M8
000000023847 000000445047 0 ;W=_=
000000023881 000000445081 0 8Q;%?
000000023897 000000445097 0 8o9n<0>
0000000238AF 0000004450AF 0 6z6R8
000000002B6A 00000040676A 0 VS_VERSION_INFO
000000002BC6 0000004067C6 0 StringFileInfo
000000002BEA 0000004067EA 0 040904E3
000000002C02 000000406802 0 FileVersion
000000002C1C 00000040681C 0 1.0.0.0
000000002C32 000000406832 0 ProductVersion
000000002C50 000000406850 0 1.0.0.0
000000002C66 000000406866 0 CompanyName
000000002C80 000000406880 0 Sanctions Group
000000002CA6 0000004068A6 0 FileDescription
000000002CC8 0000004068C8 0 Project Alice
000000002CEA 0000004068EA 0 InternalName
000000002D04 000000406904 0 Sanctions
000000002D1E 00000040691E 0 ProductName
000000002D38 000000406938 0 Sanctions
000000002D52 000000406952 0 LegalCopyright
000000002D70 000000406970 0 Sanctions group
000000002D96 000000406996 0 VarFileInfo
000000002DB6 0000004069B6 0 Translation
00000000004D 00000040004D 0 !This program cannot be run in DOS mode.
0000000000BF 0000004000BF 0 zRich
0000000001D8 0000004001D8 0 .text
000000000200 000000400200 0 .rsrc
000000000228 000000400228 0 .vmp0
000000000278 000000400278 0 .vmp1
0000000002A0 0000004002A0 0 .reloc
000000002DD4 0000004069D4 0 <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
000000002E0D 000000406A0D 0 <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
000000002E58 000000406A58 0 <assemblyIdentity
000000002E6B 000000406A6B 0 version="1.0.0.0"
000000002E82 000000406A82 0 processorArchitecture="X86"
000000002EA3 000000406AA3 0 name="CompanyName.ProductName.YourApp"
000000002ECF 000000406ACF 0 type="win32"
000000002EE5 000000406AE5 0 <description>Your application description here.</description>
000000002F24 000000406B24 0 <dependency>
File pos Mem pos ID Text
======== ======= == ====
000000002F32 000000406B32 0 <dependentAssembly>
000000002F47 000000406B47 0 <assemblyIdentity
000000002F62 000000406B62 0 type="win32"
000000002F7C 000000406B7C 0 name="Microsoft.Windows.Common-Controls"
000000002FB2 000000406BB2 0 version="6.0.0.0"
000000002FD1 000000406BD1 0 processorArchitecture="X86"
000000002FFA 000000406BFA 0 publicKeyToken="6595b64144ccf1df"
000000003029 000000406C29 0 language="*"
000000003043 000000406C43 0 />
00000000304F 000000406C4F 0 </dependentAssembly>
000000003069 000000406C69 0 </dependency>
000000003078 000000406C78 0 </assembly>
00000000343E 00000042403E 0 LocalFree
00000000344A 00000042404A 0 WFSOpen
00000000349A 00000042409A 0 E)&|"2
000000003527 000000424127 0 SetFilePointer
000000003589 000000424189 0 File corrupted!. This program has been manipulated and maybe
0000000035C6 0000004241C6 0 it's infected by a Virus or cracked. This file won't work anymore.
0000000036A5 0000004242A5 0 B&FY9
0000000036EA 0000004242EA 0 MessageBoxA
00000000382B 00000042442B 0 RtlFillMemory
00000000384B 00000042444B 0 CreateFileA
000000003889 000000424489 0 SendMessageA
000000003A70 000000424670 0 d$LhJw
000000003AC5 0000004246C5 0 <0 Fg
000000003AEC 0000004246EC 0 $< hC
000000003BEC 0000004247EC 0 kernel32.dll
000000003E90 000000424A90 0 a( r<
000000003F38 000000424B38 0 XnbuE
000000003F4B 000000424B4B 0 MoveFileA
0000000042BD 000000424EBD 0 3w;?/
000000004303 000000424F03 0 4Dwgs*
0000000044C9 0000004250C9 0 11Y%M
0000000044D6 0000004250D6 0 @DPN>X
0000000044EE 0000004250EE 0 6z,r!
000000004551 000000425151 0 ExitProcess
00000000457F 00000042517F 0 WFSClose
00000000458A 00000042518A 0 PathAddBackslashA
0000000045BC 0000004251BC 0 IsBadWritePtr
000000004694 000000425294 0 GetModuleFileNameA
00000000470B 00000042530B 0 .)H4bV
00000000471E 00000042531E 0 hVypr)A
000000004790 000000425390 0 P0PPt
0000000048EB 0000004254EB 0 InitCommonControls
00000000499A 00000042559A 0 D$D6EB
000000004A21 000000425621 0 MyeWS
000000004EE7 000000425AE7 0 SendDlgItemMessageA
000000004EFD 000000425AFD 0 GetDlgItem
000000004F0A 000000425B0A 0 VirtualProtect
00000000506C 000000425C6C 0 RtlMoveMemory
0000000050E4 000000425CE4 0 lstrcpyA
0000000051AE 000000425DAE 0 sPQ#'
000000005246 000000425E46 0 uY1/o
0000000052D3 000000425ED3 0 qhHL\
0000000053A7 000000425FA7 0 ;N63=
00000000547A 00000042607A 0 CryptCreateHash
00000000550B 00000042610B 0 hKuAJFS
0000000056B3 0000004262B3 0 dfp :
000000005716 000000426316 0 XP,=?
00000000572B 00000042632B 0 W!uL<
File pos Mem pos ID Text
======== ======= == ====
0000000057EA 0000004263EA 0 CkcE>
000000005873 000000426473 0 $4hA$
000000005B4D 00000042674D 0 Y'[ZgX
000000005BA3 0000004267A3 0 9D2qN
000000005D1B 00000042691B 0 )The procedure entry point %s could not be located in the dynamic link library %s
000000005DE2 0000004269E2 0 qke{W
000000005DE8 0000004269E8 0 aZr3j#
000000005E1D 000000426A1D 0 'k3}?
000000005EEC 000000426AEC 0 ze!_a
000000005F84 000000426B84 0 K\Xyo
0000000060E3 000000426CE3 0 owljf
000000006155 000000426D55 0 rj_Ze
000000006291 000000426E91 0 _MaIiEbA
0000000062C7 000000426EC7 0 'roauZ
000000006340 000000426F40 0 izzsam
0000000064A4 0000004270A4 0 vi#u%
0000000064C8 0000004270C8 0 5'(YR
0000000064D0 0000004270D0 0 4<2Gp6
000000006504 000000427104 0 ]gMi_
00000000665A 00000042725A 0 lf<o;
00000000673E 00000042733E 0 lr(zSr
000000006784 000000427384 0 e%Ayi
000000006795 000000427395 0 tCK"tyA+
000000006852 000000427452 0 aE)~tZ
000000006865 000000427465 0 y[ss3#
000000006904 000000427504 0 jm~]gc]
00000000693D 00000042753D 0 f%*hrd
00000000699F 00000042759F 0 u_y~]
0000000069E9 0000004275E9 0 A!_=d9
000000006A12 000000427612 0 nO+]_
000000006A5C 00000042765C 0 iG!mh
000000006A7F 00000042767F 0 FgvUi
000000006A85 000000427685 0 ,(Kj}Q
000000006AFD 0000004276FD 0 osydT
000000006B75 000000427775 0 k[bym,
000000006C23 000000427823 0 N;jpl
000000006CE5 0000004278E5 0 yrueq
000000006D5C 00000042795C 0 IqWByj
000000006DD6 0000004279D6 0 i#uBX
000000007002 000000427C02 0 f}qarh
000000007041 000000427C41 0 RBO,i*
0000000071F3 000000427DF3 0 ZVRv~b
00000000726F 000000427E6F 0 The ordinal %u could not be located in the dynamic link library %s
0000000072DD 000000427EDD 0 AnimateWindow
00000000739B 000000427F9B 0 WFSCleanUp
0000000073C0 000000427FC0 0 CryptHashData
00000000742D 00000042802D 0 $hfC}
000000007445 000000428045 0 DialogBoxParamA
000000007484 000000428084 0 amfaptg
000000007521 000000428121 0 #MSXFS.dll
0000000075B9 0000004281B9 0 g_.x}
000000007632 000000428232 0 82]c$
000000007649 000000428249 0 rma!S_?A
00000000765F 00000042825F 0 z&r~>
0000000076BC 0000004282BC 0 "Rns=
0000000076C8 0000004282C8 0 )}%}
000000007791 000000428391 0 ((i]e
0000000077BE 0000004283BE 0 $dXft
000000007828 000000428428 0 GetWindowTextLengthA
0000000078A0 0000004284A0 0 ?"q06
File pos Mem pos ID Text
======== ======= == ====
000000007A17 000000428617 0 K,{h{
000000007A8B 00000042868B 0 \I+x2
000000007A9E 00000042869E 0 @YIj%
000000007AFD 0000004286FD 0 r_VR@L
000000007CED 0000004288ED 0 xLAE*
000000007E90 000000428A90 0 yELzH
000000008215 000000428E15 0 xim=@
0000000082B0 000000428EB0 0 QI4!]+.
000000008313 000000428F13 0 ;GO1n
000000008578 000000429178 0 !1Ab>k
0000000086F3 0000004292F3 0 GetModuleHandleA
0000000087F0 0000004293F0 0 v>k\c+(~
000000008828 000000429428 0 =%M%j
000000008A6F 00000042966F 0 WFSLock
000000008AAE 0000004296AE 0 ,T$?3-["
000000008AE5 0000004296E5 0 Z.X8NQ
000000008B68 000000429768 0 kY%{i
000000008B7B 00000042977B 0 Y%%Ii\
000000008B8D 00000042978D 0 v*'}#3
000000008CAD 0000004298AD 0 CryptGetHashParam
000000008D92 000000429992 0 WFSFreeResult
000000008DA2 0000004299A2 0 LocalSize
000000008F3D 000000429B3D 0 t$<hH3g'
00000000903B 000000429C3B 0 CryptReleaseContext
0000000090D7 000000429CD7 0 a)&|"I
00000000912E 000000429D2E 0 qM|O?CY
0000000091A5 000000429DA5 0 Vr5H EY
0000000092B9 000000429EB9 0 EndDialog
0000000093AF 000000429FAF 0 c/TDx;D$
0000000093D7 000000429FD7 0 $Gntdll.dll
0000000093E6 000000429FE6 0 lstrlenA
0000000093F1 000000429FF1 0 IsWindow
000000009454 00000042A054 0 #OngO
0000000094A1 00000042A0A1 0 2pkO,
000000009547 00000042A147 0 CopyFileA
000000009738 00000042A338 0 ReadFile
0000000097CB 00000042A3CB 0 E}9vvB
0000000097DC 00000042A3DC 0 -hD(~
00000000981F 00000042A41F 0 MYiF8
000000009880 00000042A480 0 LoadLibraryA
0000000098A9 00000042A4A9 0 XA4T41
000000009A73 00000042A673 0 \iEk[
000000009AAD 00000042A6AD 0 nc]8z
000000009C9A 00000042A89A 0 RtlZeroMemory
000000009CAA 00000042A8AA 0 lstrcatA
000000009CB5 00000042A8B5 0 PathFileExistsA
000000009D22 00000042A922 0 32*e)&|
000000009DC5 00000042A9C5 0 JfRZ>
000000009E31 00000042AA31 0 t|UV-
000000009F4E 00000042AB4E 0 kG'lH
000000009FA8 00000042ABA8 0 user32.dll
00000000A068 00000042AC68 0 RtlCaptureStackBackTrace
00000000A103 00000042AD03 0 LocalAlloc
00000000A187 00000042AD87 0 wsprintfA
00000000A258 00000042AE58 0 25.N!w
00000000A371 00000042AF71 0 SetWindowTextA
00000000A3C7 00000042AFC7 0 WFSRegister
00000000A47E 00000042B07E 0 t$ hl+
00000000A932 00000042B532 0 5'zZ=
00000000A94D 00000042B54D 0 d%gis
File pos Mem pos ID Text
======== ======= == ====
00000000A990 00000042B590 0 GetFileSize
00000000A9AA 00000042B5AA 0 WFSUnlock
00000000AA63 00000042B663 0 >1Q$$
00000000AB7C 00000042B77C 0 e 1H7
00000000AD17 00000042B917 0 WriteFile
00000000AEC0 00000042BAC0 0 'FG+(~
00000000AF45 00000042BB45 0 Z ]}~
00000000AF76 00000042BB76 0 9+YBX
00000000AF9C 00000042BB9C 0 IG-v/
00000000B039 00000042BC39 0 4n2'(c
00000000B041 00000042BC41 0 9\@_NP7n
00000000B08D 00000042BC8D 0 =gQ\2
00000000B095 00000042BC95 0 V[AaA
00000000B103 00000042BD03 0 l_~XeQab
00000000B14E 00000042BD4E 0 U*Y&h
00000000B154 00000042BD54 0 QBg[7
00000000B160 00000042BD60 0 +]-~y<#
00000000B169 00000042BD69 0 ,[A0}
00000000B1A1 00000042BDA1 0 B+Byra
00000000B1FB 00000042BDFB 0 gWcv}
00000000B2DF 00000042BEDF 0 SQ4 vbL
00000000B4B3 00000042C0B3 0 a.cmQ
00000000B4DD 00000042C0DD 0 2F:m'
00000000B50D 00000042C10D 0 eP+/)?
00000000B586 00000042C186 0 Qq;a?m
00000000B58E 00000042C18E 0 #v\BP3BS
00000000B5EA 00000042C1EA 0 uvcyh
00000000B6CE 00000042C2CE 0 Y0O-P.
00000000B823 00000042C423 0 y}[a!_O
00000000B87E 00000042C47E 0 ;YP S,
00000000B8ED 00000042C4ED 0 vY'Aue
00000000B967 00000042C567 0 S}Agn
00000000BA6C 00000042C66C 0 t]B6g&
00000000BA8E 00000042C68E 0 ;eO)H._
00000000BC97 00000042C897 0 |JHbd
00000000BCBF 00000042C8BF 0 !7c+Q
00000000BEF5 00000042CAF5 0 ~i-JdA~Hr
00000000C029 00000042CC29 0 Wr*A1mLB
00000000C107 00000042CD07 0 d,xiG
00000000C11A 00000042CD1A 0 S]9zk%|I'
00000000C241 00000042CE41 0 mQN>sB
00000000C2AD 00000042CEAD 0 )JRrV
00000000C2D3 00000042CED3 0 z w~F
00000000C470 00000042D070 0 XlI;pI
00000000C555 00000042D155 0 !<aJV
00000000C648 00000042D248 0 a]m@g
00000000C67B 00000042D27B 0 #z+az9z
00000000C68E 00000042D28E 0 ke]mCc
00000000C783 00000042D383 0 kMk1k%e
00000000C81F 00000042D41F 0 \fO)+
00000000C829 00000042D429 0 ,1,>x
00000000C8E3 00000042D4E3 0 o!.iY
00000000C90A 00000042D50A 0 ;ilN,9
00000000C93D 00000042D53D 0 .Hsi3b_
00000000C970 00000042D570 0 0pi,B
00000000C9F4 00000042D5F4 0 Q!}v}
00000000CA0D 00000042D60D 0 y ~sA
00000000CA4B 00000042D64B 0 BpfpA
00000000CAA4 00000042D6A4 0 [>ZBls
00000000CACB 00000042D6CB 0 Y71Ay
File pos Mem pos ID Text
======== ======= == ====
00000000CB61 00000042D761 0 B\_O6
00000000CB67 00000042D767 0 *fT(s
00000000CB81 00000042D781 0 Q]4yU
00000000CD37 00000042D937 0 g4})c
00000000CD4D 00000042D94D 0 Q,Ao'
00000000CD6C 00000042D96C 0 1l#B-
00000000CE06 00000042DA06 0 yhUNBT
00000000CE3C 00000042DA3C 0 AI/+C
00000000CEE2 00000042DAE2 0 Dj4Lx
00000000CF73 00000042DB73 0 Cg<p)'iK
00000000CFBA 00000042DBBA 0 )+7W''
00000000D293 00000042DE93 0 }ui=m
00000000D2A8 00000042DEA8 0 }u#e|!zI
00000000D400 00000042E000 0 8Kd9 We
00000000D488 00000042E088 0 &gzO6
00000000D499 00000042E099 0 Wd?lg
00000000D4D3 00000042E0D3 0 4-zDm
00000000D554 00000042E154 0 Y%EQh
00000000D5AF 00000042E1AF 0 ]%~HQj
00000000D7BF 00000042E3BF 0 VzND,A
00000000D863 00000042E463 0 Gz+EN"_
00000000D878 00000042E478 0 ~C|KGZ
00000000D9A2 00000042E5A2 0 QZ-bjF
00000000DAAA 00000042E6AA 0 G/;}w
00000000DBD3 00000042E7D3 0 yyVlW
00000000DC45 00000042E845 0 YlrA+RW
00000000DC52 00000042E852 0 ae,["e
00000000DC94 00000042E894 0 <L0C{
00000000DCE1 00000042E8E1 0 jq,Ik
00000000DDF8 00000042E9F8 0 NnQA0
00000000DE1F 00000042EA1F 0 L|G</(
00000000DE62 00000042EA62 0 #[A8S
00000000DED0 00000042EAD0 0 YE/W!
00000000E02C 00000042EC2C 0 {$qPN
00000000E09E 00000042EC9E 0 x8l(B
00000000E0C9 00000042ECC9 0 @*,FU
00000000E14B 00000042ED4B 0 jNQ!A
00000000E20D 00000042EE0D 0 W!g$E*'\
00000000E248 00000042EE48 0 gztu{
00000000E284 00000042EE84 0 xj~2?
00000000E297 00000042EE97 0 q:O~
00000000E2E8 00000042EEE8 0 a?Y+S
00000000E33E 00000042EF3E 0 K!dE|
00000000E36D 00000042EF6D 0 xd=ye+
00000000E37A 00000042EF7A 0 <4i{e
00000000E4B8 00000042F0B8 0 =HR|>
00000000E577 00000042F177 0 3hB /{
00000000E59C 00000042F19C 0 V3-~+/
00000000E6C9 00000042F2C9 0 qafx[
00000000E7D6 00000042F3D6 0 _bej-
00000000E9D2 00000042F5D2 0 >yibo
00000000EA24 00000042F624 0 C17fb0
00000000EA55 00000042F655 0 yp+]-y
00000000EA68 00000042F668 0 NR;<k
00000000EAB7 00000042F6B7 0 e;W#oK
00000000EC40 00000042F840 0 \['P7,O
00000000ED22 00000042F922 0 }!R;iWd
00000000ED46 00000042F946 0 <N2F]S
00000000EE99 00000042FA99 0 +'S&k
00000000EEA2 00000042FAA2 0 6VlkBr}
File pos Mem pos ID Text
======== ======= == ====
00000000EEFA 00000042FAFA 0 xJ~)7
00000000EF9A 00000042FB9A 0 #kfqQ)
00000000EFB7 00000042FBB7 0 "J.hp
00000000F1CE 00000042FDCE 0 0kuUE
00000000F31D 00000042FF1D 0 p73r2:
00000000F35C 00000042FF5C 0 i#|QV
00000000F433 000000430033 0 S;C{h"
00000000F452 000000430052 0 &A"P7
00000000F464 000000430064 0 > @!Bv
00000000F490 000000430090 0 UVTB<
00000000F4C6 0000004300C6 0 tmA.V
00000000F4D8 0000004300D8 0 A>1-"k
00000000F51D 00000043011D 0 TwLA\
00000000F600 000000430200 0 CiN36
00000000F64F 00000043024F 0 c]A=>g
00000000F759 000000430359 0 }c=y<
00000000F7F0 0000004303F0 0 iGKlR
00000000F7FB 0000004303FB 0 &y:<\
00000000F815 000000430415 0 % I|maT
00000000F826 000000430426 0 L~6cQ
00000000F82C 00000043042C 0 G9EIh
00000000F86A 00000043046A 0 dA0UH
00000000F8D7 0000004304D7 0 ztbSNy
00000000F920 000000430520 0 d] Bu
00000000F990 000000430590 0 U0bQh
00000000F9AF 0000004305AF 0 Co+ .
00000000F9BA 0000004305BA 0 't*d/
00000000FA43 000000430643 0 k7lWv
00000000FA56 000000430656 0 TR7,Z
00000000FA9E 00000043069E 0 nes}cX
00000000FD23 000000430923 0 8d%+m
00000000FE3D 000000430A3D 0 _<OAGW
00000000FE76 000000430A76 0 duAfj
00000000FEDC 000000430ADC 0 JlkC6
00000001004B 000000430C4B 0 A)1:'
000000010146 000000430D46 0 '5/.Y
000000010250 000000430E50 0 T.nvtd
0000000102B6 000000430EB6 0 lAofUa
00000001030C 000000430F0C 0 L)Ch'8{
0000000103DC 000000430FDC 0 sX{Hi#
0000000104C1 0000004310C1 0 db_>y
000000010530 000000431130 0 -|)bq
00000001068C 00000043128C 0 n)HuyO/
0000000107CF 0000004313CF 0 rJ]JW
0000000107DD 0000004313DD 0 mEYA{O
00000001080B 00000043140B 0 )*~VRf
000000010858 000000431458 0 %,zxO
000000010946 000000431546 0 (.SCpt
000000010966 000000431566 0 Z>i,
000000010986 000000431586 0 aN2Ab
000000010AAA 0000004316AA 0 V ZRL
000000010AFC 0000004316FC 0 %,LWb
000000010B07 000000431707 0 3.A#,Kl
000000010B43 000000431743 0 gkN}u
000000010B8A 00000043178A 0 cnB=AJ[
000000010D52 000000431952 0 Ra)IL
000000010DA6 0000004319A6 0 P3~U!
000000010EA1 000000431AA1 0 EdainJ
00000001104E 000000431C4E 0 d1AT>
000000011069 000000431C69 0 +objOd
File pos Mem pos ID Text
======== ======= == ====
000000011140 000000431D40 0 fBNws
000000011239 000000431E39 0 UbZpLd
000000011255 000000431E55 0 8".Y~Q
0000000112D7 000000431ED7 0 8pj."
00000001134E 000000431F4E 0 i)yQ~.
0000000114F1 0000004320F1 0 +"bJA
00000001153F 00000043213F 0 C[jqF4_&v
000000011551 000000432151 0 B<+R:
0000000115CC 0000004321CC 0 0UvQA
000000011775 000000432375 0 <wLBM
000000011794 000000432394 0 gd}Bj
0000000119B0 0000004325B0 0 Y9&qb
0000000119FB 0000004325FB 0 "ce]!
000000011AAD 0000004326AD 0 l;UQ/
000000011B1C 00000043271C 0 8iPIA
000000011C77 000000432877 0 yo)Bn
000000011D26 000000432926 0 j9/xR
000000011D3D 00000043293D 0 Bt{gOc
000000011ED0 000000432AD0 0 _jtaYB
000000011F08 000000432B08 0 _k6bN
000000011FED 000000432BED 0 F)_A{i
000000011FF6 000000432BF6 0 n}Xb|
000000012050 000000432C50 0 yBy$m~L
00000001210E 000000432D0E 0 ]B)l5
00000001220D 000000432E0D 0 z;7Y1
000000012271 000000432E71 0 _O3bW'
0000000122D0 000000432ED0 0 jbAoVM}
0000000122F3 000000432EF3 0 eH3 \
000000012398 000000432F98 0 OAR=J
000000012469 000000433069 0 xZ5~~
000000012512 000000433112 0 -ouzWK
0000000125C3 0000004331C3 0 Ucl1Se
000000012669 000000433269 0 k9kVR
0000000127A1 0000004333A1 0 ImB##*
0000000127BB 0000004333BB 0 x:cdW#
000000012A14 000000433614 0 +d(b.
000000012A3D 00000043363D 0 =?kP0AC
000000012A86 000000433686 0 :zy]A
000000012C23 000000433823 0 PqV=b
000000012DCF 0000004339CF 0 OnAqFW
000000012E67 000000433A67 0 D$G.)b
000000012F8D 000000433B8D 0 hV$;Q_b
000000012FB6 000000433BB6 0 +U8dW/}
000000012FBF 000000433BBF 0 :Q\iN=6
000000013040 000000433C40 0 v;U6<D~
000000013051 000000433C51 0 xbZ/!iNA
000000013072 000000433C72 0 ~);rF
000000013101 000000433D01 0 |"cW\U
000000013180 000000433D80 0 ur0ir5A
0000000132A9 000000433EA9 0 e6O5Zi
0000000132C3 000000433EC3 0 cAB,4
0000000132EB 000000433EEB 0 ipjeA
0000000132FD 000000433EFD 0 ~;0%Bi
000000013307 000000433F07 0 ~zIMD
000000013391 000000433F91 0 {|]m%/
000000013583 000000434183 0 }}ty=v
0000000135EE 0000004341EE 0 q!U}9!Azu
00000001388B 00000043448B 0 ]I+RH
0000000139CB 0000004345CB 0 A4f-z
000000013A13 000000434613 0 U_+]!1
File pos Mem pos ID Text
======== ======= == ====
000000013A54 000000434654 0 MN,TN
000000013AB1 0000004346B1 0 iT2%RM
000000013B35 000000434735 0 d*tB.
000000013B73 000000434773 0 Jz.]Q
000000013CEF 0000004348EF 0 ,"X&.+.
000000013D36 000000434936 0 !)RBB
000000013EE7 000000434AE7 0 bOvL&
000000013F04 000000434B04 0 Pl<Fk
000000013F0C 000000434B0C 0 x]Xjh
000000013F4E 000000434B4E 0 a3<B.
000000013FF5 000000434BF5 0 ] @_&
000000014001 000000434C01 0 _A+/;Pk(
00000001412A 000000434D2A 0 d4Tbh
0000000141BA 000000434DBA 0 R~kD(boWO
0000000141E2 000000434DE2 0 ]%tyaTCF
000000014223 000000434E23 0 Z1+Am
000000014255 000000434E55 0 ]s+UeN3@
000000014654 000000435254 0 IsAMv=
0000000146A3 0000004352A3 0 ?n}Rp
0000000146C7 0000004352C7 0 ~ldT<
000000014788 000000435388 0 a\Dk+S
000000014850 000000435450 0 57+.N
0000000148F3 0000004354F3 0 #|<I\
000000014926 000000435526 0 cxuAx}
000000014963 000000435563 0 eCZW'L
00000001499B 00000043559B 0 LS~dEJW
000000014A79 000000435679 0 +P$Pi
000000014B25 000000435725 0 i-[]N
000000014CE2 0000004358E2 0 0\P7
000000014CF9 0000004358F9 0 'tJzL[8
000000014DB9 0000004359B9 0 %dY+7QA
000000014DCE 0000004359CE 0 &]qB
000000014DF4 0000004359F4 0 b#kj@
000000014E78 000000435A78 0 7>3+d
000000014E83 000000435A83 0 RSpB3=
000000014E96 000000435A96 0 UN!:ktcO#
000000014EB0 000000435AB0 0 6[HP]
000000014F57 000000435B57 0 /eR@n{S
000000014FA0 000000435BA0 0 #Zk<l
0000000150FF 000000435CFF 0 C,sI.
00000001517E 000000435D7E 0 k1DdSZ
00000001518F 000000435D8F 0 0we/A)q.
000000015246 000000435E46 0 pXSJ8
0000000152B8 000000435EB8 0 ~Q-(v
0000000152BE 000000435EBE 0 eO1g)
00000001530D 000000435F0D 0 !h~wO2
000000015315 000000435F15 0 )Xou<
000000015363 000000435F63 0 % leB7
0000000153DC 000000435FDC 0 )*oNW!
00000001559D 00000043619D 0 ?d.e1X
0000000155FF 0000004361FF 0 #7kCL
000000015753 000000436353 0 gy]J\
000000015797 000000436397 0 iq{pa;
000000015877 000000436477 0 z cw5]M|g
0000000158B8 0000004364B8 0 Qr9nM
0000000158C7 0000004364C7 0 .U3!lm
00000001595E 00000043655E 0 )/l#X
0000000159AE 0000004365AE 0 ?le+#U
000000015B19 000000436719 0 B!aH<
000000015B40 000000436740 0 6;-qm
File pos Mem pos ID Text
======== ======= == ====
000000015BBB 0000004367BB 0 Ok*"NB
000000015BD5 0000004367D5 0 ?G}RQp
000000015C06 000000436806 0 A+k:>
000000015C2F 00000043682F 0 2/k}s
000000015C4C 00000043684C 0 L).dWk z
000000015D7A 00000043697A 0 ykARZ
000000015D95 000000436995 0 XLx#F
000000015DB4 0000004369B4 0 zL>ly
000000015DE3 0000004369E3 0 =H/ad
000000015FEF 000000436BEF 0 P+:d MA~
000000016136 000000436D36 0 ]yQCK
00000001616D 000000436D6D 0 sR${vj1
0000000162BA 000000436EBA 0 Yy4e6
000000016303 000000436F03 0 xlBs)
000000016390 000000436F90 0 DLq]>
0000000163B5 000000436FB5 0 =[A9>N
00000001654F 00000043714F 0 ZR]O1+"
00000001665A 00000043725A 0 2QB97
000000016712 000000437312 0 ]@8Kb
000000016782 000000437382 0 A}/G?
00000001681A 00000043741A 0 mAsx0R
000000016827 000000437427 0 R>anG
0000000168E0 0000004374E0 0 -H~y;(
000000016980 000000437580 0 P}uBKh
0000000169ED 0000004375ED 0 Y +?)A"i#P|
000000016A07 000000437607 0 l]fNh
000000016AA2 0000004376A2 0 ]]IdD
000000016CC6 0000004378C6 0 +J!YA
000000016E68 000000437A68 0 +b3.d
000000016EF9 000000437AF9 0 pV/nn
000000016F34 000000437B34 0 ?mBvPR+
000000017044 000000437C44 0 v?eRqVA=
0000000171ED 000000437DED 0 "]aA5TU
00000001722F 000000437E2F 0 a{ic-x
00000001725D 000000437E5D 0 l>o7I
0000000172C4 000000437EC4 0 @6K:/n
0000000173F9 000000437FF9 0 =QC'-3
00000001746E 00000043806E 0 fi/+%
0000000175C7 0000004381C7 0 mg,'U
000000017687 000000438287 0 Bd_E=
0000000176A8 0000004382A8 0 byBD
0000000176E5 0000004382E5 0 8n"<a=<
0000000177E2 0000004383E2 0 NO.+J
000000017A5C 00000043865C 0 gP+O/
000000017CBA 0000004388BA 0 {|HCY
000000017D09 000000438909 0 elz)9
000000017E1A 000000438A1A 0 [k!b{
000000017EFE 000000438AFE 0 v@+0_LA
000000017FE1 000000438BE1 0 bZ1N=
000000018100 000000438D00 0 IzKQO
000000018113 000000438D13 0 9hE5/
00000001818A 000000438D8A 0 :O)Z2
00000001836D 000000438F6D 0 7B:Bu6
00000001846B 00000043906B 0 rE:6]
000000018478 000000439078 0 =svh(V- f
0000000184F3 0000004390F3 0 .i3BJ
000000018524 000000439124 0 Rg1$Gj
000000018532 000000439132 0 8dj]]@v
00000001861A 00000043921A 0 THec&+
00000001864D 00000043924D 0 hE,*9
File pos Mem pos ID Text
======== ======= == ====
000000018679 000000439279 0 *>"pR
0000000187C5 0000004393C5 0 lqkiR
000000018B0A 00000043970A 0 Uaw#+O
000000018C5B 00000043985B 0 Ep,7g
000000018C68 000000439868 0 B"hQ_
000000018CFD 0000004398FD 0 dB!8?rb
000000018D0B 00000043990B 0 j!/gZ
000000018D57 000000439957 0 k&s~
000000018D5E 00000043995E 0 'pKmb
000000018EE6 000000439AE6 0 jQ=_,
000000018F8B 000000439B8B 0 ?fp3/
000000018F9F 000000439B9F 0 w7b7v8
0000000190CE 000000439CCE 0 5gbAG
00000001919A 000000439D9A 0 [4H\
0000000191C0 000000439DC0 0 EvnbL
0000000191F6 000000439DF6 0 v)P+[!B
00000001929E 000000439E9E 0 ry)j#Z
0000000193AD 000000439FAD 0 -}i"aYi
000000019454 00000043A054 0 &abi]
000000019528 00000043A128 0 [D!PYQ
00000001964B 00000043A24B 0 *~,QXb
000000019675 00000043A275 0 yu?-,
000000019757 00000043A357 0 CZAqV
000000019795 00000043A395 0 nl(I!%
000000019804 00000043A404 0 yRj_ro
00000001984E 00000043A44E 0 B.Li,@J
000000019881 00000043A481 0 NKJ[KP
0000000198CA 00000043A4CA 0 g5=}
000000019A10 00000043A610 0 8UdGW
000000019A3E 00000043A63E 0 Q#.Or
000000019A5D 00000043A65D 0 TonW%
000000019A67 00000043A667 0 Z6w %lEo
000000019D20 00000043A920 0 8f %?zT
000000019DBF 00000043A9BF 0 |'.hHQNR
000000019E8F 00000043AA8F 0 7o+hv]~
00000001A092 00000043AC92 0 qbW'k&gSi
00000001A17F 00000043AD7F 0 IlnAh
00000001A1A1 00000043ADA1 0 +NSW<
00000001A2A1 00000043AEA1 0 h;TM+@y
00000001A2F5 00000043AEF5 0 b"NP*P
00000001A379 00000043AF79 0 2!Fi&
00000001A398 00000043AF98 0 b4A[gJ
00000001A404 00000043B004 0 :\6AVe
00000001A476 00000043B076 0 aE!7)
00000001A5E7 00000043B1E7 0 3)LqB
00000001A5F9 00000043B1F9 0 qtT$pmB
00000001A655 00000043B255 0 nJZN}>
00000001A6E7 00000043B2E7 0 32bPB
00000001A852 00000043B452 0 e+w#A
00000001A8C2 00000043B4C2 0 lWj+u
00000001A8DA 00000043B4DA 0 5>"SI}q
00000001A986 00000043B586 0 163\IQ
00000001AAD9 00000043B6D9 0 3f\yb#
00000001AAE9 00000043B6E9 0 aY@I\
00000001AB73 00000043B773 0 r8+JB
00000001AC73 00000043B873 0 N6p,A
00000001AC92 00000043B892 0 lb"L:I+A
00000001ACF8 00000043B8F8 0 y}"+p1
00000001ADB2 00000043B9B2 0 Em)1!=i
00000001AE3A 00000043BA3A 0 %GZQR
File pos Mem pos ID Text
======== ======= == ====
00000001AE6C 00000043BA6C 0 SehN]
00000001AE91 00000043BA91 0 kYd@](
00000001AF05 00000043BB05 0 B(FSK
00000001AF28 00000043BB28 0 OkNY\?
00000001AFB4 00000043BBB4 0 _eBg)&EH
00000001B060 00000043BC60 0 EQpUq
00000001B174 00000043BD74 0 anJAc
00000001B17A 00000043BD7A 0 YW!}zyI
00000001B18B 00000043BD8B 0 [C)Lg
00000001B1BC 00000043BDBC 0 #[Aw0:
00000001B1C8 00000043BDC8 0 "dKZ2ie
00000001B1DA 00000043BDDA 0 L,WY)i+
00000001B22D 00000043BE2D 0 nUG.q
00000001B253 00000043BE53 0 >R#099
00000001B286 00000043BE86 0 mRAkA
00000001B30F 00000043BF0F 0 -HX" C
00000001B3C3 00000043BFC3 0 >iOi}
00000001B445 00000043C045 0 ~UP}Ifi~
00000001B45A 00000043C05A 0 Nai{e<Z:
00000001B463 00000043C063 0 #aLiz
00000001B6DE 00000043C2DE 0 E:A~C
00000001B74C 00000043C34C 0 9$)PS
00000001B821 00000043C421 0 A<zYi
00000001BA2B 00000043C62B 0 ]BaA;
00000001BAE3 00000043C6E3 0 CeB0@t
00000001BB46 00000043C746 0 h09ZAC
00000001BB5C 00000043C75C 0 ]ARVs@
00000001BBE1 00000043C7E1 0 Hr;,6
00000001BC71 00000043C871 0 lU8G"
00000001BC9C 00000043C89C 0 T*nZ_
00000001BD73 00000043C973 0 {"fA4
00000001BD83 00000043C983 0 >[BV;
00000001BDE5 00000043C9E5 0 G;q~,
00000001BE7B 00000043CA7B 0 ?OqSB
00000001BFA6 00000043CBA6 0 <kA2)
00000001BFDC 00000043CBDC 0 SLCE\
00000001C018 00000043CC18 0 N]SV8]
00000001C06C 00000043CC6C 0 gaPc
00000001C086 00000043CC86 0 YoBC!
00000001C106 00000043CD06 0 >teSl
00000001C14B 00000043CD4B 0 NcbBb.rnK>
00000001C220 00000043CE20 0 $QYlj
00000001C249 00000043CE49 0 Z9UtX
00000001C28E 00000043CE8E 0 M9ibyRjhSU
00000001C2AA 00000043CEAA 0 qiQolj)I
00000001C2F9 00000043CEF9 0 -S#ycI,
00000001C380 00000043CF80 0 CleyDa
00000001C3A7 00000043CFA7 0 Yb92$N
00000001C4E4 00000043D0E4 0 _5I"M
00000001C4EE 00000043D0EE 0 -uQ*y
00000001C539 00000043D139 0 \]1qU
00000001C54A 00000043D14A 0 ojVK9Y
00000001C5A0 00000043D1A0 0 <:ON'
00000001C66E 00000043D26E 0 \4~HT
00000001C6D5 00000043D2D5 0 rYtmEjoW
00000001C791 00000043D391 0 n"J%LZ
00000001C7E3 00000043D3E3 0 pakJ6cY
00000001C831 00000043D431 0 aZR<g
00000001C85D 00000043D45D 0 SK6eY
00000001C880 00000043D480 0 bZZ+|XV[Y
File pos Mem pos ID Text
======== ======= == ====
00000001C89A 00000043D49A 0 $wsQ7
00000001C8F7 00000043D4F7 0 ]9+ERt
00000001C971 00000043D571 0 _B(Wnl
00000001CA3F 00000043D63F 0 c\(N#bZ
00000001CA52 00000043D652 0 |HA#Py
00000001CBB0 00000043D7B0 0 \Yk@C
00000001CBD3 00000043D7D3 0 0{Q!Z
00000001CD2C 00000043D92C 0 Q%ixc
00000001CD3A 00000043D93A 0 j7Ohw
00000001CDA5 00000043D9A5 0 cL!l[
00000001CDD9 00000043D9D9 0 _0?To
00000001CE5F 00000043DA5F 0 R:qXs
00000001CEA5 00000043DAA5 0 a#qXI
00000001CF19 00000043DB19 0 9neAR
00000001CF4E 00000043DB4E 0 5?shR
00000001CFA1 00000043DBA1 0 RrH\u$
00000001D06C 00000043DC6C 0 :Kda4
00000001D16C 00000043DD6C 0 W~ceu
00000001D181 00000043DD81 0 U R\
00000001D396 00000043DF96 0 <jCOA
00000001D3E6 00000043DFE6 0 e4Q\8
00000001D421 00000043E021 0 qZ|Iy[5
00000001D478 00000043E078 0 fvO{1
00000001D4A5 00000043E0A5 0 g:8 Oe"
00000001D4F3 00000043E0F3 0 a[sQ
00000001D594 00000043E194 0 MviU;
00000001D611 00000043E211 0 ({M,l
00000001D6D0 00000043E2D0 0 B{R:\
00000001D704 00000043E304 0 b[7XRO
00000001D736 00000043E336 0 hLklZ
00000001D762 00000043E362 0 e_"0U
00000001D770 00000043E370 0 lEK]S
00000001D84B 00000043E44B 0 l7_U7MrlZ
00000001D8CE 00000043E4CE 0 9P]a,_
00000001D977 00000043E577 0 +$qNX
00000001DA9A 00000043E69A 0 w]%1O
00000001DB21 00000043E721 0 Oj0TKZ
00000001DB57 00000043E757 0 h*]HVR
00000001DCE9 00000043E8E9 0 Q ={J
00000001DE82 00000043EA82 0 58{Tl[
00000001DF61 00000043EB61 0 jM7{m
00000001DFB7 00000043EBB7 0 H$|Yl
00000001E09F 00000043EC9F 0 cjkOpY
00000001E186 00000043ED86 0 ~!t[X
00000001E1A5 00000043EDA5 0 MkkD)
00000001E20C 00000043EE0C 0 1S_&Y
00000001E261 00000043EE61 0 i!Ox(
00000001E30D 00000043EF0D 0 uMKjJ
00000001E35D 00000043EF5D 0 qPjSl"
00000001E3DF 00000043EFDF 0 ~%)jKLP\
00000001E451 00000043F051 0 b)MMTv
00000001E506 00000043F106 0 [i6IX
00000001E528 00000043F128 0 jO$lU
00000001E566 00000043F166 0 K:<14
00000001E674 00000043F274 0 \L,Ix
00000001E6A6 00000043F2A6 0 yf!%F
00000001E6E2 00000043F2E2 0 iq|\Z
00000001E7CD 00000043F3CD 0 YG 7+T\l0
00000001E8D5 00000043F4D5 0 m['}YK
00000001E8FF 00000043F4FF 0 (!YcvF+
File pos Mem pos ID Text
======== ======= == ====
00000001EADA 00000043F6DA 0 _CoSY8
00000001EB16 00000043F716 0 2VO\,
00000001EB58 00000043F758 0 -QDZYD
00000001EBAB 00000043F7AB 0 DToYK0
00000001EC15 00000043F815 0 |3rn>
00000001ED04 00000043F904 0 sG2Y+w
00000001EDFB 00000043F9FB 0 -LgY;
00000001EF31 00000043FB31 0 s_}Y93
00000001EF70 00000043FB70 0 WYM S
00000001EF81 00000043FB81 0 k~YnR
00000001EFFA 00000043FBFA 0 Y+j#zm
00000001F052 00000043FC52 0 7#/Yk
00000001F074 00000043FC74 0 x6(U]GZ2
00000001F09C 00000043FC9C 0 1XRJ-
00000001F244 00000043FE44 0 @=XYk
00000001F2D5 00000043FED5 0 fF5jdY
00000001F31F 00000043FF1F 0 ad-Mm
00000001F339 00000043FF39 0 cw.a$
00000001F40D 00000044000D 0 'SW7[
00000001F460 000000440060 0 =!%Y=
00000001F4C8 0000004400C8 0 lh,1XM
00000001F576 000000440176 0 ?ohu-
00000001F5F8 0000004401F8 0 bB"gx
00000001F6A1 0000004402A1 0 nvmqD
00000001F6CC 0000004402CC 0 +Z1 Z.
00000001F97B 00000044057B 0 CryptAcquireContextA
00000001FA13 000000440613 0 y]~ZO
00000001FB46 000000440746 0 WFSStartUp
00000001FC2D 00000044082D 0 ;EsN-V
00000001FE25 000000440A25 0 B2Zmu
00000001FE62 000000440A62 0 ,.YpH
00000001FED7 000000440AD7 0 o6PhP!
00000001FF9D 000000440B9D 0 CloseHandle
000000020081 000000440C81 0 SetFocus
0000000200D8 000000440CD8 0 WFSGetInfo
000000020171 000000440D71 0 comctl32.dll
0000000201C2 000000440DC2 0 @\oGD
000000020272 000000440E72 0 WFSExecute
000000020409 000000441009 0 A debugger has been found running in your system.
00000002043B 00000044103B 0 Please, unload it from memory and restart your program.
000000020473 000000441073 0 advapi32.dll
0000000204F7 0000004410F7 0 PathRemoveFileSpecA
00000002054B 00000044114B 0 uxm@F
0000000205CF 0000004411CF 0 SetEndOfFile
00000002065E 00000044125E 0 WinExec
000000020670 000000441270 0 shlwapi.dll
00000002067E 00000044127E 0 lstrcmpiA
00000002080C 00000044140C 0 CryptDestroyHash
0000000208DE 0000004414DE 0 RtlUnwind
000000020947 000000441547 0 EWD4?
000000020A37 000000441637 0 (lD4~
000000020A73 000000441673 0 +SD4
000000020AD5 0000004416D5 0 VerSetConditionMask
000000020B57 000000441757 0 U |r%
000000020B95 000000441795 0 ZDx |$t
000000020C06 000000441806 0 h~/W
0000000210D2 000000441CD2 0 5h:J6
0000000213FC 000000441FFC 0 D$$>:WP
000000021A63 000000442663 0 D$<hN
000000022EA2 000000443AA2 0 T$0h&
File pos Mem pos ID Text
======== ======= == ====
000000022F15 000000443B15 0 4UAOZ
000000022FD9 000000443BD9 0 l$4f9
000000023426 000000444026 0 t$ph!Y=O
000000023641 000000444241 0 t$DhO
000000023835 000000445035 0 0\2i2M8
000000023847 000000445047 0 ;W=_=
000000023881 000000445081 0 8Q;%?
000000023897 000000445097 0 8o9n<0>
0000000238AF 0000004450AF 0 6z6R8
000000002B6A 00000040676A 0 VS_VERSION_INFO
000000002BC6 0000004067C6 0 StringFileInfo
000000002BEA 0000004067EA 0 040904E3
000000002C02 000000406802 0 FileVersion
000000002C1C 00000040681C 0 1.0.0.0
000000002C32 000000406832 0 ProductVersion
000000002C50 000000406850 0 1.0.0.0
000000002C66 000000406866 0 CompanyName
000000002C80 000000406880 0 Sanctions Group
000000002CA6 0000004068A6 0 FileDescription
000000002CC8 0000004068C8 0 Project Alice
000000002CEA 0000004068EA 0 InternalName
000000002D04 000000406904 0 Sanctions
000000002D1E 00000040691E 0 ProductName
000000002D38 000000406938 0 Sanctions
000000002D52 000000406952 0 LegalCopyright
000000002D70 000000406970 0 Sanctions group
000000002D96 000000406996 0 VarFileInfo
000000002DB6 0000004069B6 0 Translation