.- - -----÷M÷E÷N÷U÷------------------------------------------------------------- --- ---- -------------.
! WALL ! STATS ! GOODIES ! YARA ! FAQ ! RSS ! EMV !
`-------------- - --- ---------- -------- -------- -------- -------- ----------------- - ---- ---- --'
ATM MALWARE NOTICE
e3bf733cc85da7421522a0b1ff788d43bcacd02815a88d19426e80de564174b3
Date...........: 2014-12-29
Family.........: Alice
File name......: unpackattempt0.exe
File size......: 265.50 KB
Type file......: EXE/Windows
Virscan........: VT - HA
Additional note: Unpack attempt of Alice.
Entropy:
Binary Histogram:
=== PEDUMP REPORT ===
=== MZ Header ===
signature: "MZ"
bytes_in_last_block: 144 0x90
blocks_in_file: 3 3
num_relocs: 0 0
header_paragraphs: 4 4
min_extra_paragraphs: 0 0
max_extra_paragraphs: 65535 0xffff
ss: 0 0
sp: 184 0xb8
checksum: 0 0
ip: 0 0
cs: 0 0
reloc_table_offset: 64 0x40
overlay_number: 0 0
reserved0: 0 0
oem_id: 0 0
oem_info: 0 0
reserved2: 0 0
reserved3: 0 0
reserved4: 0 0
reserved5: 0 0
reserved6: 0 0
lfanew: 224 0xe0
=== DOS STUB ===
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno|
00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
=== RICH Header ===
LIB_ID VERSION TIMES_USED
4 4 8447 20ff 2 2
19 13 8078 1f8e 53 35
1 1 0 0 16 10
19 13 9049 2359 3 3
18 12 8444 20fc 1 1
6 6 1735 6c7 1 1
=== PE Header ===
signature: "PE\x00\x00"
# IMAGE_FILE_HEADER:
Machine: 332 0x14c x86
NumberOfSections: 8 8
TimeDateStamp: "2014-10-24 17:26:51"
PointerToSymbolTable: 0 0
NumberOfSymbols: 0 0
SizeOfOptionalHeader: 224 0xe0
Characteristics: 270 0x10e EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED
LOCAL_SYMS_STRIPPED, 32BIT_MACHINE
# IMAGE_OPTIONAL_HEADER32:
Magic: 267 0x10b 32-bit executable
LinkerVersion: 5.12
SizeOfCode: 275456 0x43400
SizeOfInitializedData: 12288 0x3000
SizeOfUninitializedData: 0 0
AddressOfEntryPoint: 4731 0x127b
BaseOfCode: 4096 0x1000
BaseOfData: 16384 0x4000
ImageBase: 4194304 0x400000
SectionAlignment: 4096 0x1000
FileAlignment: 512 0x200
OperatingSystemVersion: 4.0
ImageVersion: 0.0
SubsystemVersion: 4.0
Reserved1: 0 0
SizeOfImage: 19804160 0x12e3000
SizeOfHeaders: 1024 0x400
CheckSum: 0 0
Subsystem: 2 2 WINDOWS_GUI
DllCharacteristics: 0 0
SizeOfStackReserve: 1048576 0x100000
SizeOfStackCommit: 4096 0x1000
SizeOfHeapReserve: 1048576 0x100000
SizeOfHeapCommit: 4096 0x1000
LoaderFlags: 0 0
NumberOfRvaAndSizes: 16 0x10
=== DATA DIRECTORY ===
EXPORT rva:0x 2843d size:0x c50
IMPORT rva:0x 12e2118 size:0x f0
RESOURCE rva:0x 4000 size:0x 2f88
EXCEPTION rva:0x 0 size:0x 0
SECURITY rva:0x 0 size:0x 0
BASERELOC rva:0x 0 size:0x 0
DEBUG rva:0x 0 size:0x 0
ARCHITECTURE rva:0x 0 size:0x 0
GLOBALPTR rva:0x 0 size:0x 0
TLS rva:0x 40b11 size:0x 20
LOAD_CONFIG rva:0x 0 size:0x 0
Bound_IAT rva:0x 0 size:0x 0
IAT rva:0x 0 size:0x 0
Delay_IAT rva:0x 0 size:0x 0
CLR_Header rva:0x 0 size:0x 0
rva:0x 0 size:0x 0
=== SECTIONS ===
NAME RVA VSZ RAW_SZ RAW_PTR nREL REL_PTR nLINE LINE_PTR FLAGS
.text 1000 3000 2400 400 0 0 0 0 e0000020 RWX CODE
.rsrc 4000 3000 3000 2800 0 0 0 0 c0000040 RW- IDATA
.vmp0 7000 1c000 1bc00 5800 0 0 0 0 60000060 R-X CODE IDATA
.tls 23000 1000 200 21400 0 0 0 0 c0000000 RW-
.vmp1 24000 21000 20400 21600 0 0 0 0 e2000020 RWX CODE DISCARDABLE
.reloc 45000 129b000 200 41a00 0 0 0 0 42000040 R-- IDATA DISCARDABLE
IAT_SEC_ 12e0000 2000 200 41c00 0 0 0 0 e00000e0 RWX CODE IDATA UDATA
.SCY 12e2000 1000 800 41e00 0 0 0 0 e0000060 RWX CODE IDATA
=== RESOURCES ===
FILE_OFFSET CP LANG SIZE TYPE NAME
0x29a8 0 0x409 9640 ICON #1
0x5488 0 0x409 380 DIALOG #1000
0x5604 0 0x409 368 DIALOG #2000
0x4f50 0 0x409 20 GROUP_ICON #20
0x4f64 0 0x409 624 VERSION #1
0x51d4 0 0x409 689 MANIFEST #1
=== IMPORTS ===
MODULE_NAME HINT ORD FUNCTION_NAME
msxfs.dll b WFSCleanUp
msxfs.dll 15 WFSOpen
msxfs.dll 12 WFSGetInfo
msxfs.dll 10 WFSExecute
msxfs.dll 1 WFSAsyncClose
msxfs.dll 11 WFSFreeResult
msxfs.dll a WFSCancelBlockingCall
msxfs.dll 18 WFSStartUp
advapi32.dll cb CryptReleaseContext
advapi32.dll c8 CryptHashData
advapi32.dll c4 CryptGetHashParam
advapi32.dll b6 CryptDestroyHash
advapi32.dll b3 CryptCreateHash
advapi32.dll b0 CryptAcquireContextA
comctl32.dll 7a InitCommonControls
kernel32.dll 52 CloseHandle
kernel32.dll 70 CopyFileA
kernel32.dll 88 CreateFileA
kernel32.dll 119 ExitProcess
kernel32.dll 1ee GetFileSize
kernel32.dll 211 GetModuleFileNameA
kernel32.dll 213 GetModuleHandleA
kernel32.dll 2fa IsBadWritePtr
kernel32.dll 344 LocalAlloc
kernel32.dll 348 LocalFree
kernel32.dll 34d LocalSize
kernel32.dll 35d MoveFileA
kernel32.dll 3bf ReadFile
kernel32.dll 452 SetEndOfFile
kernel32.dll 464 SetFilePointer
kernel32.dll 512 WinExec
kernel32.dll 525 WriteFile
kernel32.dll 53e lstrcatA
kernel32.dll 544 lstrcmpiA
kernel32.dll 547 lstrcpyA
kernel32.dll 54d lstrlenA
ntdll.dll 27a RtlCaptureStackBackTrace
kernel32.dll 0 RtlMoveMemory
ntdll.dll 4d4 RtlUnwind
kernel32.dll 0 RtlZeroMemory
kernel32.dll 0 VerSetConditionMask
ntdll.dll 329 RtlFillMemory
shlwapi.dll 2f PathAddBackslashA
shlwapi.dll 8a PathRemoveFileSpecA
shlwapi.dll 44 PathFileExistsA
user32.dll 292 SetFocus
user32.dll 127 GetDlgItem
user32.dll 1db IsWindow
user32.dll ab DialogBoxParamA
user32.dll 7 AnimateWindow
user32.dll 332 wsprintfA
user32.dll 20e MessageBoxA
user32.dll 272 SendDlgItemMessageA
user32.dll da EndDialog
user32.dll 277 SendMessageA
user32.dll 2ca SetWindowTextA
user32.dll 1a1 GetWindowTextLengthA
=== EXPORTS ===
# module ""
# flags=0x0 ts="1970-01-01 00:00:00" version=0.0 ord_base=1
# nFuncs=1 nNames=1
=== VERSION INFO ===
# VS_FIXEDFILEINFO:
FileVersion : 1.0.0.0
ProductVersion : 1.0.0.0
StrucVersion : 0x10000
FileFlagsMask : 0
FileFlags : 0
FileOS : 4
FileType : 1
FileSubtype : 0
# StringTable 040904E3:
FileVersion : "1.0.0.0"
ProductVersion : "1.0.0.0"
CompanyName : "Sanctions Group"
FileDescription : "Project Alice"
InternalName : "Sanctions"
ProductName : "Sanctions"
LegalCopyright : "Sanctions group"
VarFileInfo : [ 0x409, 0x4e3 ]
=== Packer / Compiler ===
MASM/TASM - sig1(h)
File pos Mem pos ID Text
======== ======= == ====
00000000004D 00000040004D 0 !This program cannot be run in DOS mode.
0000000000BF 0000004000BF 0 zRich
0000000001D8 0000004001D8 0 .text
000000000200 000000400200 0 .rsrc
000000000228 000000400228 0 .vmp0
000000000278 000000400278 0 .vmp1
0000000002A0 0000004002A0 0 .reloc
0000000002C7 0000004002C7 0 BIAT_SEC_
000000000537 000000401137 0 s f5
00000000062A 00000040122A 0 CurrencyDispenser1
000000000649 000000401249 0 Project Alice
000000000673 000000401273 0 1010100
000000000894 000000401494 0 Selected cassette is unavailable !
0000000008B7 0000004014B7 0 Can't dispense requested amount. Error %d ocurred !
000000000A63 000000401663 0 t@Wj@
000000000ADD 0000004016DD 0 Bills count
000000000AE9 0000004016E9 0 Bill value
000000000AF4 0000004016F4 0 Currency
000000000AFD 0000004016FD 0 Result
000000000B07 000000401707 0 Total :
000000000B11 000000401711 0 PIN-Code input limit was reached! The program can't work any more!
000000001B2C 00000040272C 0 j!j!h6
000000001B44 000000402744 0 t2j7h
000000001CF3 0000004028F3 0 %08X-%08X
000000002391 000000402F91 0 j![f5
000000002497 000000403097 0 L$Dh>
0000000051D4 0000004069D4 0 <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
00000000520D 000000406A0D 0 <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
000000005258 000000406A58 0 <assemblyIdentity
00000000526B 000000406A6B 0 version="1.0.0.0"
000000005282 000000406A82 0 processorArchitecture="X86"
0000000052A3 000000406AA3 0 name="CompanyName.ProductName.YourApp"
0000000052CF 000000406ACF 0 type="win32"
0000000052E5 000000406AE5 0 <description>Your application description here.</description>
000000005324 000000406B24 0 <dependency>
000000005332 000000406B32 0 <dependentAssembly>
000000005347 000000406B47 0 <assemblyIdentity
000000005362 000000406B62 0 type="win32"
00000000537C 000000406B7C 0 name="Microsoft.Windows.Common-Controls"
0000000053B2 000000406BB2 0 version="6.0.0.0"
0000000053D1 000000406BD1 0 processorArchitecture="X86"
0000000053FA 000000406BFA 0 publicKeyToken="6595b64144ccf1df"
000000005429 000000406C29 0 language="*"
000000005443 000000406C43 0 />
00000000544F 000000406C4F 0 </dependentAssembly>
000000005469 000000406C69 0 </dependency>
000000005478 000000406C78 0 </assembly>
000000005813 000000407013 0 D$ b
000000005D86 000000407586 0 _ShHEA
000000005FB8 0000004077B8 0 \$Dh'
000000006109 000000407909 0 gZD/f
00000000690F 00000040810F 0 h}ahb6
000000006ADC 0000004082DC 0 t$DSQ
000000008C2E 00000040A42E 0 5$AE[V
000000008E43 00000040A643 0 5$AE[
0000000090D6 00000040A8D6 0 hmt'oH
0000000098A1 00000040B0A1 0 5$AE[
000000009B7E 00000040B37E 0 \$4f
000000009F24 00000040B724 0 D$@hU
00000000A891 00000040C091 0 ?v}f9
File pos Mem pos ID Text
======== ======= == ====
00000000B1F1 00000040C9F1 0 hKnod
00000000B9A1 00000040D1A1 0 4$hK!
00000000BB44 00000040D344 0 L$HWh
00000000C1D8 00000040D9D8 0 D$(h>)
00000000C20C 00000040DA0C 0 D$Lh'.
00000000C4F9 00000040DCF9 0 |$,f
00000000C5D1 00000040DDD1 0 L$@ha
00000000C85B 00000040E05B 0 $]l<"
00000000C91D 00000040E11D 0 D$(Rf
00000000D3B3 00000040EBB3 0 h#}:5
00000000E6C3 00000040FEC3 0 hmchr
00000000E6E9 00000040FEE9 0 L$ f)
00000000EF0C 00000041070C 0 hV1?!
00000000F487 000000410C87 0 pH I0
00000000F535 000000410D35 0 |$,f)
00000000F65A 000000410E5A 0 l$4f)
00000001017D 00000041197D 0 t$@QVhIUYU
000000011FF4 0000004137F4 0 L$(h2e
0000000120F4 0000004138F4 0 L$DTW
0000000126D7 000000413ED7 0 l$,Qf
000000012A30 000000414230 0 \$$he
000000013121 000000414921 0 Ph?Yx
000000013A26 000000415226 0 t$8h1
000000013BD2 0000004153D2 0 O4OWf
000000014A5F 00000041625F 0 l$DTf
000000014A7F 00000041627F 0 t$@[f
000000014AB0 0000004162B0 0 2f5(I
000000015161 000000416961 0 L$DUQh95
00000001569B 000000416E9B 0 x _Qf
000000015AC5 0000004172C5 0 h:+ZF
000000015D08 000000417508 0 t$dQS
000000015ECE 0000004176CE 0 aWf!E
0000000161F7 0000004179F7 0 \$,hPI{
000000016436 000000417C36 0 hR6[4
000000016837 000000418037 0 D$,Wht
0000000169AE 0000004181AE 0 l$,Ph
000000016B59 000000418359 0 hK,-d
0000000170BA 0000004188BA 0 |,GC|,G3
0000000170E7 0000004188E7 0 /Gci,Gs
000000017117 000000418917 0 )Gci,G
00000001714F 00000041894F 0 /GC|,Gs
000000017183 000000418983 0 (GC|,G
000000017207 000000418A07 0 /GC|,Gc
000000017236 000000418A36 0 n)Gk@)Gk@)Gk@)Gk@)Gk@)Gk@)Gk@)Gk@)Gk@)Gk@)Gk@)Gk@)Gk@)Gk@)Gk@)Gk@)G
00000001727B 000000418A7B 0 /Gci,GC|,Gs
0000000172DB 000000418ADB 0 )Gsz)G
00000001731F 000000418B1F 0 /Gsz)GK
00000001735B 000000418B5B 0 /GSj,G{
00000001736E 000000418B6E 0 U)Gci,G
00000001738F 000000418B8F 0 /GSj,G+
0000000173CF 000000418BCF 0 )GC|,G
000000017457 000000418C57 0 )GC|,Gs
000000017467 000000418C67 0 )Gci,G{
00000001747F 000000418C7F 0 /GSj,G
000000017678 000000418E78 0 $hTY@
0000000177E5 000000418FE5 0 L$,Qf
000000017A08 000000419208 0 |$0hL
000000018C1C 00000041A41C 0 |$<hb
000000019094 00000041A894 0 D$8h'
000000019B80 00000041B380 0 =43f
File pos Mem pos ID Text
======== ======= == ====
000000019F3B 00000041B73B 0 D$0Nf
00000001A83B 00000041C03B 0 |$@h1l]
00000001ABBF 00000041C3BF 0 $oSmi
00000001AC40 00000041C440 0 h~/W
00000001B10C 00000041C90C 0 5h:J6
00000001B436 00000041CC36 0 D$$>:WP
00000001BA9D 00000041D29D 0 D$<hN
00000001CEDC 00000041E6DC 0 T$0h&
00000001CF4F 00000041E74F 0 4UAOZ
00000001D013 00000041E813 0 l$4f9
00000001D460 00000041EC60 0 t$ph!Y=O
00000001D67B 00000041EE7B 0 t$DhO
00000001DF0A 00000041F70A 0 $\Qj#
00000001DF37 00000041F737 0 $bavR
00000001DF76 00000041F776 0 $d!*]
00000001DFD9 00000041F7D9 0 $a8s]
00000001E07B 00000041F87B 0 $bzpy
00000001E207 00000041FA07 0 2\6A4
00000001E297 00000041FA97 0 2_Z}R
00000001E303 00000041FB03 0 2_T]G
00000001E366 00000041FB66 0 2\-iT
00000001EC80 000000420480 0 j9dd'9
00000001ECB6 0000004204B6 0 j9aW-
00000001ECDA 0000004204DA 0 j9adc
00000001ECEC 0000004204EC 0 j9[Hg
00000001ECF5 0000004204F5 0 j9d g9
00000001ED19 000000420519 0 j9]$H:
00000001ED22 000000420522 0 j9]$o
00000001EDA9 0000004205A9 0 j9a4g
00000001EDE8 0000004205E8 0 j9\+nk
00000001EF08 000000420708 0 j9[v '
00000001EF1A 00000042071A 0 j9c!q
00000001EF7D 00000042077D 0 j9_,a
00000001FCAD 0000004214AD 0 zAd8~
00000001FDE8 0000004215E8 0 z_48!
00000001FEA5 0000004216A5 0 z\0(r
00000001FEC9 0000004216C9 0 zcgq"
00000001FF11 000000421711 0 z\4h0
00000001FF50 000000421750 0 z[iob
00000001FFA1 0000004217A1 0 zcH~o
0000000200A6 0000004218A6 0 zc\YW
0000000201F4 0000004219F4 0 8?2Z-
000000020298 000000421A98 0 o0!dW
0000000205EC 000000421DEC 0 Pv&|#
0000000207AA 000000421FAA 0 p,)mn
000000020A81 000000422281 0 _-ZB~=
000000020BAA 0000004223AA 0 9nUTPd
000000020C33 000000422433 0 ZF.kk
00000002114D 00000042294D 0 5E'6)
000000021155 000000422955 0 "C]4D
00000002115B 00000042295B 0 mS#yg
000000021299 000000422A99 0 3l7Y8
0000000212CD 000000422ACD 0 0V82:/>
000000021303 000000422B03 0 5.5:7
000000021325 000000422B25 0 485i5
00000002135D 000000422B5D 0 0&1=2g5b6-;Y;
000000021379 000000422B79 0 5/6J7
0000000213C1 000000422BC1 0 0@0W2
00000002163E 00000042403E 0 LocalFree
00000002164A 00000042404A 0 WFSOpen
File pos Mem pos ID Text
======== ======= == ====
00000002169A 00000042409A 0 E)&|"2
000000021727 000000424127 0 SetFilePointer
000000021789 000000424189 0 File corrupted!. This program has been manipulated and maybe
0000000217C6 0000004241C6 0 it's infected by a Virus or cracked. This file won't work anymore.
0000000218A5 0000004242A5 0 B&FY9
0000000218EA 0000004242EA 0 MessageBoxA
000000021A2B 00000042442B 0 RtlFillMemory
000000021A4B 00000042444B 0 CreateFileA
000000021A89 000000424489 0 SendMessageA
000000021C70 000000424670 0 d$LhJw
000000021CC5 0000004246C5 0 <0 Fg
000000021CEC 0000004246EC 0 $< hC
000000021DEC 0000004247EC 0 kernel32.dll
000000022090 000000424A90 0 a( r<
000000022138 000000424B38 0 XnbuE
00000002214B 000000424B4B 0 MoveFileA
0000000224BD 000000424EBD 0 3w;?/
000000022503 000000424F03 0 4Dwgs*
0000000226C9 0000004250C9 0 11Y%M
0000000226D6 0000004250D6 0 @DPN>X
0000000226EE 0000004250EE 0 6z,r!
000000022751 000000425151 0 ExitProcess
00000002277F 00000042517F 0 WFSClose
00000002278A 00000042518A 0 PathAddBackslashA
0000000227BC 0000004251BC 0 IsBadWritePtr
000000022894 000000425294 0 GetModuleFileNameA
00000002290B 00000042530B 0 .)H4bV
00000002291E 00000042531E 0 hVypr)A
000000022990 000000425390 0 P0PPt
000000022AEB 0000004254EB 0 InitCommonControls
000000022B9A 00000042559A 0 D$D6EB
000000022C21 000000425621 0 MyeWS
0000000230E7 000000425AE7 0 SendDlgItemMessageA
0000000230FD 000000425AFD 0 GetDlgItem
00000002310A 000000425B0A 0 VirtualProtect
00000002326C 000000425C6C 0 RtlMoveMemory
0000000232E4 000000425CE4 0 lstrcpyA
0000000233AE 000000425DAE 0 sPQ#'
000000023446 000000425E46 0 uY1/o
0000000234D3 000000425ED3 0 qhHL\
0000000235A7 000000425FA7 0 ;N63=
00000002367A 00000042607A 0 CryptCreateHash
00000002370B 00000042610B 0 hKuAJFS
0000000238B3 0000004262B3 0 dfp :
000000023916 000000426316 0 XP,=?
00000002392B 00000042632B 0 W!uL<
0000000239EA 0000004263EA 0 CkcE>
000000023A73 000000426473 0 $4hA$
000000023D4D 00000042674D 0 Y'[ZgX
000000023DA3 0000004267A3 0 9D2qN
000000023F1B 00000042691B 0 )The procedure entry point %s could not be located in the dynamic link library %s
000000023FE2 0000004269E2 0 qke{W
000000023FE8 0000004269E8 0 aZr3j#
00000002401D 000000426A1D 0 'k3}?
0000000240EC 000000426AEC 0 ze!_a
000000024184 000000426B84 0 K\Xyo
0000000242E3 000000426CE3 0 owljf
000000024355 000000426D55 0 rj_Ze
000000024491 000000426E91 0 _MaIiEbA
0000000244C7 000000426EC7 0 'roauZ
File pos Mem pos ID Text
======== ======= == ====
000000024540 000000426F40 0 izzsam
0000000246A4 0000004270A4 0 vi#u%
0000000246C8 0000004270C8 0 5'(YR
0000000246D0 0000004270D0 0 4<2Gp6
000000024704 000000427104 0 ]gMi_
00000002485A 00000042725A 0 lf<o;
00000002493E 00000042733E 0 lr(zSr
000000024984 000000427384 0 e%Ayi
000000024995 000000427395 0 tCK"tyA+
000000024A52 000000427452 0 aE)~tZ
000000024A65 000000427465 0 y[ss3#
000000024B04 000000427504 0 jm~]gc]
000000024B3D 00000042753D 0 f%*hrd
000000024B9F 00000042759F 0 u_y~]
000000024BE9 0000004275E9 0 A!_=d9
000000024C12 000000427612 0 nO+]_
000000024C5C 00000042765C 0 iG!mh
000000024C7F 00000042767F 0 FgvUi
000000024C85 000000427685 0 ,(Kj}Q
000000024CFD 0000004276FD 0 osydT
000000024D75 000000427775 0 k[bym,
000000024E23 000000427823 0 N;jpl
000000024EE5 0000004278E5 0 yrueq
000000024F5C 00000042795C 0 IqWByj
000000024FD6 0000004279D6 0 i#uBX
000000025202 000000427C02 0 f}qarh
000000025241 000000427C41 0 RBO,i*
0000000253F3 000000427DF3 0 ZVRv~b
00000002546F 000000427E6F 0 The ordinal %u could not be located in the dynamic link library %s
0000000254DD 000000427EDD 0 AnimateWindow
00000002559B 000000427F9B 0 WFSCleanUp
0000000255C0 000000427FC0 0 CryptHashData
00000002562D 00000042802D 0 $hfC}
000000025645 000000428045 0 DialogBoxParamA
000000025684 000000428084 0 amfaptg
000000025721 000000428121 0 #MSXFS.dll
0000000257B9 0000004281B9 0 g_.x}
000000025832 000000428232 0 82]c$
000000025849 000000428249 0 rma!S_?A
00000002585F 00000042825F 0 z&r~>
0000000258BC 0000004282BC 0 "Rns=
0000000258C8 0000004282C8 0 )}%}
000000025991 000000428391 0 ((i]e
0000000259BE 0000004283BE 0 $dXft
000000025A28 000000428428 0 GetWindowTextLengthA
000000025AA0 0000004284A0 0 ?"q06
000000025C17 000000428617 0 K,{h{
000000025C8B 00000042868B 0 \I+x2
000000025C9E 00000042869E 0 @YIj%
000000025CFD 0000004286FD 0 r_VR@L
000000025EED 0000004288ED 0 xLAE*
000000026090 000000428A90 0 yELzH
000000026415 000000428E15 0 xim=@
0000000264B0 000000428EB0 0 QI4!]+.
000000026513 000000428F13 0 ;GO1n
000000026778 000000429178 0 !1Ab>k
0000000268F3 0000004292F3 0 GetModuleHandleA
0000000269F0 0000004293F0 0 v>k\c+(~
000000026A28 000000429428 0 =%M%j
000000026C6F 00000042966F 0 WFSLock
File pos Mem pos ID Text
======== ======= == ====
000000026CAE 0000004296AE 0 ,T$?3-["
000000026CE5 0000004296E5 0 Z.X8NQ
000000026D68 000000429768 0 kY%{i
000000026D7B 00000042977B 0 Y%%Ii\
000000026D8D 00000042978D 0 v*'}#3
000000026EAD 0000004298AD 0 CryptGetHashParam
000000026F92 000000429992 0 WFSFreeResult
000000026FA2 0000004299A2 0 LocalSize
00000002713D 000000429B3D 0 t$<hH3g'
00000002723B 000000429C3B 0 CryptReleaseContext
0000000272D7 000000429CD7 0 a)&|"I
00000002732E 000000429D2E 0 qM|O?CY
0000000273A5 000000429DA5 0 Vr5H EY
0000000274B9 000000429EB9 0 EndDialog
0000000275AF 000000429FAF 0 c/TDx;D$
0000000275D7 000000429FD7 0 $Gntdll.dll
0000000275E6 000000429FE6 0 lstrlenA
0000000275F1 000000429FF1 0 IsWindow
000000027654 00000042A054 0 #OngO
0000000276A1 00000042A0A1 0 2pkO,
000000027747 00000042A147 0 CopyFileA
000000027938 00000042A338 0 ReadFile
0000000279CB 00000042A3CB 0 E}9vvB
0000000279DC 00000042A3DC 0 -hD(~
000000027A1F 00000042A41F 0 MYiF8
000000027A80 00000042A480 0 LoadLibraryA
000000027AA9 00000042A4A9 0 XA4T41
000000027C73 00000042A673 0 \iEk[
000000027CAD 00000042A6AD 0 nc]8z
000000027E9A 00000042A89A 0 RtlZeroMemory
000000027EAA 00000042A8AA 0 lstrcatA
000000027EB5 00000042A8B5 0 PathFileExistsA
000000027F22 00000042A922 0 32*e)&|
000000027FC5 00000042A9C5 0 JfRZ>
000000028031 00000042AA31 0 t|UV-
00000002814E 00000042AB4E 0 kG'lH
0000000281A8 00000042ABA8 0 user32.dll
000000028268 00000042AC68 0 RtlCaptureStackBackTrace
000000028303 00000042AD03 0 LocalAlloc
000000028387 00000042AD87 0 wsprintfA
000000028458 00000042AE58 0 25.N!w
000000028571 00000042AF71 0 SetWindowTextA
0000000285C7 00000042AFC7 0 WFSRegister
00000002867E 00000042B07E 0 t$ hl+
000000028B32 00000042B532 0 5'zZ=
000000028B4D 00000042B54D 0 d%gis
000000028B90 00000042B590 0 GetFileSize
000000028BAA 00000042B5AA 0 WFSUnlock
000000028C63 00000042B663 0 >1Q$$
000000028D7C 00000042B77C 0 e 1H7
000000028F17 00000042B917 0 WriteFile
0000000290C0 00000042BAC0 0 'FG+(~
000000029145 00000042BB45 0 Z ]}~
000000029176 00000042BB76 0 9+YBX
00000002919C 00000042BB9C 0 IG-v/
000000029239 00000042BC39 0 4n2'(c
000000029241 00000042BC41 0 9\@_NP7n
00000002928D 00000042BC8D 0 =gQ\2
000000029295 00000042BC95 0 V[AaA
000000029303 00000042BD03 0 l_~XeQab
File pos Mem pos ID Text
======== ======= == ====
00000002934E 00000042BD4E 0 U*Y&h
000000029354 00000042BD54 0 QBg[7
000000029360 00000042BD60 0 +]-~y<#
000000029369 00000042BD69 0 ,[A0}
0000000293A1 00000042BDA1 0 B+Byra
0000000293FB 00000042BDFB 0 gWcv}
0000000294DF 00000042BEDF 0 SQ4 vbL
0000000296B3 00000042C0B3 0 a.cmQ
0000000296DD 00000042C0DD 0 2F:m'
00000002970D 00000042C10D 0 eP+/)?
000000029786 00000042C186 0 Qq;a?m
00000002978E 00000042C18E 0 #v\BP3BS
0000000297EA 00000042C1EA 0 uvcyh
0000000298CE 00000042C2CE 0 Y0O-P.
000000029A23 00000042C423 0 y}[a!_O
000000029A7E 00000042C47E 0 ;YP S,
000000029AED 00000042C4ED 0 vY'Aue
000000029B67 00000042C567 0 S}Agn
000000029C6C 00000042C66C 0 t]B6g&
000000029C8E 00000042C68E 0 ;eO)H._
000000029E97 00000042C897 0 |JHbd
000000029EBF 00000042C8BF 0 !7c+Q
00000002A0F5 00000042CAF5 0 ~i-JdA~Hr
00000002A229 00000042CC29 0 Wr*A1mLB
00000002A307 00000042CD07 0 d,xiG
00000002A31A 00000042CD1A 0 S]9zk%|I'
00000002A441 00000042CE41 0 mQN>sB
00000002A4AD 00000042CEAD 0 )JRrV
00000002A4D3 00000042CED3 0 z w~F
00000002A670 00000042D070 0 XlI;pI
00000002A755 00000042D155 0 !<aJV
00000002A848 00000042D248 0 a]m@g
00000002A87B 00000042D27B 0 #z+az9z
00000002A88E 00000042D28E 0 ke]mCc
00000002A983 00000042D383 0 kMk1k%e
00000002AA1F 00000042D41F 0 \fO)+
00000002AA29 00000042D429 0 ,1,>x
00000002AAE3 00000042D4E3 0 o!.iY
00000002AB0A 00000042D50A 0 ;ilN,9
00000002AB3D 00000042D53D 0 .Hsi3b_
00000002AB70 00000042D570 0 0pi,B
00000002ABF4 00000042D5F4 0 Q!}v}
00000002AC0D 00000042D60D 0 y ~sA
00000002AC4B 00000042D64B 0 BpfpA
00000002ACA4 00000042D6A4 0 [>ZBls
00000002ACCB 00000042D6CB 0 Y71Ay
00000002AD61 00000042D761 0 B\_O6
00000002AD67 00000042D767 0 *fT(s
00000002AD81 00000042D781 0 Q]4yU
00000002AF37 00000042D937 0 g4})c
00000002AF4D 00000042D94D 0 Q,Ao'
00000002AF6C 00000042D96C 0 1l#B-
00000002B006 00000042DA06 0 yhUNBT
00000002B03C 00000042DA3C 0 AI/+C
00000002B0E2 00000042DAE2 0 Dj4Lx
00000002B173 00000042DB73 0 Cg<p)'iK
00000002B1BA 00000042DBBA 0 )+7W''
00000002B493 00000042DE93 0 }ui=m
00000002B4A8 00000042DEA8 0 }u#e|!zI
00000002B600 00000042E000 0 8Kd9 We
File pos Mem pos ID Text
======== ======= == ====
00000002B688 00000042E088 0 &gzO6
00000002B699 00000042E099 0 Wd?lg
00000002B6D3 00000042E0D3 0 4-zDm
00000002B754 00000042E154 0 Y%EQh
00000002B7AF 00000042E1AF 0 ]%~HQj
00000002B9BF 00000042E3BF 0 VzND,A
00000002BA63 00000042E463 0 Gz+EN"_
00000002BA78 00000042E478 0 ~C|KGZ
00000002BBA2 00000042E5A2 0 QZ-bjF
00000002BCAA 00000042E6AA 0 G/;}w
00000002BDD3 00000042E7D3 0 yyVlW
00000002BE45 00000042E845 0 YlrA+RW
00000002BE52 00000042E852 0 ae,["e
00000002BE94 00000042E894 0 <L0C{
00000002BEE1 00000042E8E1 0 jq,Ik
00000002BFF8 00000042E9F8 0 NnQA0
00000002C01F 00000042EA1F 0 L|G</(
00000002C062 00000042EA62 0 #[A8S
00000002C0D0 00000042EAD0 0 YE/W!
00000002C22C 00000042EC2C 0 {$qPN
00000002C29E 00000042EC9E 0 x8l(B
00000002C2C9 00000042ECC9 0 @*,FU
00000002C34B 00000042ED4B 0 jNQ!A
00000002C40D 00000042EE0D 0 W!g$E*'\
00000002C448 00000042EE48 0 gztu{
00000002C484 00000042EE84 0 xj~2?
00000002C497 00000042EE97 0 q:O~
00000002C4E8 00000042EEE8 0 a?Y+S
00000002C53E 00000042EF3E 0 K!dE|
00000002C56D 00000042EF6D 0 xd=ye+
00000002C57A 00000042EF7A 0 <4i{e
00000002C6B8 00000042F0B8 0 =HR|>
00000002C777 00000042F177 0 3hB /{
00000002C79C 00000042F19C 0 V3-~+/
00000002C8C9 00000042F2C9 0 qafx[
00000002C9D6 00000042F3D6 0 _bej-
00000002CBD2 00000042F5D2 0 >yibo
00000002CC24 00000042F624 0 C17fb0
00000002CC55 00000042F655 0 yp+]-y
00000002CC68 00000042F668 0 NR;<k
00000002CCB7 00000042F6B7 0 e;W#oK
00000002CE40 00000042F840 0 \['P7,O
00000002CF22 00000042F922 0 }!R;iWd
00000002CF46 00000042F946 0 <N2F]S
00000002D099 00000042FA99 0 +'S&k
00000002D0A2 00000042FAA2 0 6VlkBr}
00000002D0FA 00000042FAFA 0 xJ~)7
00000002D19A 00000042FB9A 0 #kfqQ)
00000002D1B7 00000042FBB7 0 "J.hp
00000002D3CE 00000042FDCE 0 0kuUE
00000002D51D 00000042FF1D 0 p73r2:
00000002D55C 00000042FF5C 0 i#|QV
00000002D633 000000430033 0 S;C{h"
00000002D652 000000430052 0 &A"P7
00000002D664 000000430064 0 > @!Bv
00000002D690 000000430090 0 UVTB<
00000002D6C6 0000004300C6 0 tmA.V
00000002D6D8 0000004300D8 0 A>1-"k
00000002D71D 00000043011D 0 TwLA\
00000002D800 000000430200 0 CiN36
File pos Mem pos ID Text
======== ======= == ====
00000002D84F 00000043024F 0 c]A=>g
00000002D959 000000430359 0 }c=y<
00000002D9F0 0000004303F0 0 iGKlR
00000002D9FB 0000004303FB 0 &y:<\
00000002DA15 000000430415 0 % I|maT
00000002DA26 000000430426 0 L~6cQ
00000002DA2C 00000043042C 0 G9EIh
00000002DA6A 00000043046A 0 dA0UH
00000002DAD7 0000004304D7 0 ztbSNy
00000002DB20 000000430520 0 d] Bu
00000002DB90 000000430590 0 U0bQh
00000002DBAF 0000004305AF 0 Co+ .
00000002DBBA 0000004305BA 0 't*d/
00000002DC43 000000430643 0 k7lWv
00000002DC56 000000430656 0 TR7,Z
00000002DC9E 00000043069E 0 nes}cX
00000002DF23 000000430923 0 8d%+m
00000002E03D 000000430A3D 0 _<OAGW
00000002E076 000000430A76 0 duAfj
00000002E0DC 000000430ADC 0 JlkC6
00000002E24B 000000430C4B 0 A)1:'
00000002E346 000000430D46 0 '5/.Y
00000002E450 000000430E50 0 T.nvtd
00000002E4B6 000000430EB6 0 lAofUa
00000002E50C 000000430F0C 0 L)Ch'8{
00000002E5DC 000000430FDC 0 sX{Hi#
00000002E6C1 0000004310C1 0 db_>y
00000002E730 000000431130 0 -|)bq
00000002E88C 00000043128C 0 n)HuyO/
00000002E9CF 0000004313CF 0 rJ]JW
00000002E9DD 0000004313DD 0 mEYA{O
00000002EA0B 00000043140B 0 )*~VRf
00000002EA58 000000431458 0 %,zxO
00000002EB46 000000431546 0 (.SCpt
00000002EB66 000000431566 0 Z>i,
00000002EB86 000000431586 0 aN2Ab
00000002ECAA 0000004316AA 0 V ZRL
00000002ECFC 0000004316FC 0 %,LWb
00000002ED07 000000431707 0 3.A#,Kl
00000002ED43 000000431743 0 gkN}u
00000002ED8A 00000043178A 0 cnB=AJ[
00000002EF52 000000431952 0 Ra)IL
00000002EFA6 0000004319A6 0 P3~U!
00000002F0A1 000000431AA1 0 EdainJ
00000002F24E 000000431C4E 0 d1AT>
00000002F269 000000431C69 0 +objOd
00000002F340 000000431D40 0 fBNws
00000002F439 000000431E39 0 UbZpLd
00000002F455 000000431E55 0 8".Y~Q
00000002F4D7 000000431ED7 0 8pj."
00000002F54E 000000431F4E 0 i)yQ~.
00000002F6F1 0000004320F1 0 +"bJA
00000002F73F 00000043213F 0 C[jqF4_&v
00000002F751 000000432151 0 B<+R:
00000002F7CC 0000004321CC 0 0UvQA
00000002F975 000000432375 0 <wLBM
00000002F994 000000432394 0 gd}Bj
00000002FBB0 0000004325B0 0 Y9&qb
00000002FBFB 0000004325FB 0 "ce]!
00000002FCAD 0000004326AD 0 l;UQ/
File pos Mem pos ID Text
======== ======= == ====
00000002FD1C 00000043271C 0 8iPIA
00000002FE77 000000432877 0 yo)Bn
00000002FF26 000000432926 0 j9/xR
00000002FF3D 00000043293D 0 Bt{gOc
0000000300D0 000000432AD0 0 _jtaYB
000000030108 000000432B08 0 _k6bN
0000000301ED 000000432BED 0 F)_A{i
0000000301F6 000000432BF6 0 n}Xb|
000000030250 000000432C50 0 yBy$m~L
00000003030E 000000432D0E 0 ]B)l5
00000003040D 000000432E0D 0 z;7Y1
000000030471 000000432E71 0 _O3bW'
0000000304D0 000000432ED0 0 jbAoVM}
0000000304F3 000000432EF3 0 eH3 \
000000030598 000000432F98 0 OAR=J
000000030669 000000433069 0 xZ5~~
000000030712 000000433112 0 -ouzWK
0000000307C3 0000004331C3 0 Ucl1Se
000000030869 000000433269 0 k9kVR
0000000309A1 0000004333A1 0 ImB##*
0000000309BB 0000004333BB 0 x:cdW#
000000030C14 000000433614 0 +d(b.
000000030C3D 00000043363D 0 =?kP0AC
000000030C86 000000433686 0 :zy]A
000000030E23 000000433823 0 PqV=b
000000030FCF 0000004339CF 0 OnAqFW
000000031067 000000433A67 0 D$G.)b
00000003118D 000000433B8D 0 hV$;Q_b
0000000311B6 000000433BB6 0 +U8dW/}
0000000311BF 000000433BBF 0 :Q\iN=6
000000031240 000000433C40 0 v;U6<D~
000000031251 000000433C51 0 xbZ/!iNA
000000031272 000000433C72 0 ~);rF
000000031301 000000433D01 0 |"cW\U
000000031380 000000433D80 0 ur0ir5A
0000000314A9 000000433EA9 0 e6O5Zi
0000000314C3 000000433EC3 0 cAB,4
0000000314EB 000000433EEB 0 ipjeA
0000000314FD 000000433EFD 0 ~;0%Bi
000000031507 000000433F07 0 ~zIMD
000000031591 000000433F91 0 {|]m%/
000000031783 000000434183 0 }}ty=v
0000000317EE 0000004341EE 0 q!U}9!Azu
000000031A8B 00000043448B 0 ]I+RH
000000031BCB 0000004345CB 0 A4f-z
000000031C13 000000434613 0 U_+]!1
000000031C54 000000434654 0 MN,TN
000000031CB1 0000004346B1 0 iT2%RM
000000031D35 000000434735 0 d*tB.
000000031D73 000000434773 0 Jz.]Q
000000031EEF 0000004348EF 0 ,"X&.+.
000000031F36 000000434936 0 !)RBB
0000000320E7 000000434AE7 0 bOvL&
000000032104 000000434B04 0 Pl<Fk
00000003210C 000000434B0C 0 x]Xjh
00000003214E 000000434B4E 0 a3<B.
0000000321F5 000000434BF5 0 ] @_&
000000032201 000000434C01 0 _A+/;Pk(
00000003232A 000000434D2A 0 d4Tbh
0000000323BA 000000434DBA 0 R~kD(boWO
File pos Mem pos ID Text
======== ======= == ====
0000000323E2 000000434DE2 0 ]%tyaTCF
000000032423 000000434E23 0 Z1+Am
000000032455 000000434E55 0 ]s+UeN3@
000000032854 000000435254 0 IsAMv=
0000000328A3 0000004352A3 0 ?n}Rp
0000000328C7 0000004352C7 0 ~ldT<
000000032988 000000435388 0 a\Dk+S
000000032A50 000000435450 0 57+.N
000000032AF3 0000004354F3 0 #|<I\
000000032B26 000000435526 0 cxuAx}
000000032B63 000000435563 0 eCZW'L
000000032B9B 00000043559B 0 LS~dEJW
000000032C79 000000435679 0 +P$Pi
000000032D25 000000435725 0 i-[]N
000000032EE2 0000004358E2 0 0\P7
000000032EF9 0000004358F9 0 'tJzL[8
000000032FB9 0000004359B9 0 %dY+7QA
000000032FCE 0000004359CE 0 &]qB
000000032FF4 0000004359F4 0 b#kj@
000000033078 000000435A78 0 7>3+d
000000033083 000000435A83 0 RSpB3=
000000033096 000000435A96 0 UN!:ktcO#
0000000330B0 000000435AB0 0 6[HP]
000000033157 000000435B57 0 /eR@n{S
0000000331A0 000000435BA0 0 #Zk<l
0000000332FF 000000435CFF 0 C,sI.
00000003337E 000000435D7E 0 k1DdSZ
00000003338F 000000435D8F 0 0we/A)q.
000000033446 000000435E46 0 pXSJ8
0000000334B8 000000435EB8 0 ~Q-(v
0000000334BE 000000435EBE 0 eO1g)
00000003350D 000000435F0D 0 !h~wO2
000000033515 000000435F15 0 )Xou<
000000033563 000000435F63 0 % leB7
0000000335DC 000000435FDC 0 )*oNW!
00000003379D 00000043619D 0 ?d.e1X
0000000337FF 0000004361FF 0 #7kCL
000000033953 000000436353 0 gy]J\
000000033997 000000436397 0 iq{pa;
000000033A77 000000436477 0 z cw5]M|g
000000033AB8 0000004364B8 0 Qr9nM
000000033AC7 0000004364C7 0 .U3!lm
000000033B5E 00000043655E 0 )/l#X
000000033BAE 0000004365AE 0 ?le+#U
000000033D19 000000436719 0 B!aH<
000000033D40 000000436740 0 6;-qm
000000033DBB 0000004367BB 0 Ok*"NB
000000033DD5 0000004367D5 0 ?G}RQp
000000033E06 000000436806 0 A+k:>
000000033E2F 00000043682F 0 2/k}s
000000033E4C 00000043684C 0 L).dWk z
000000033F7A 00000043697A 0 ykARZ
000000033F95 000000436995 0 XLx#F
000000033FB4 0000004369B4 0 zL>ly
000000033FE3 0000004369E3 0 =H/ad
0000000341EF 000000436BEF 0 P+:d MA~
000000034336 000000436D36 0 ]yQCK
00000003436D 000000436D6D 0 sR${vj1
0000000344BA 000000436EBA 0 Yy4e6
000000034503 000000436F03 0 xlBs)
File pos Mem pos ID Text
======== ======= == ====
000000034590 000000436F90 0 DLq]>
0000000345B5 000000436FB5 0 =[A9>N
00000003474F 00000043714F 0 ZR]O1+"
00000003485A 00000043725A 0 2QB97
000000034912 000000437312 0 ]@8Kb
000000034982 000000437382 0 A}/G?
000000034A1A 00000043741A 0 mAsx0R
000000034A27 000000437427 0 R>anG
000000034AE0 0000004374E0 0 -H~y;(
000000034B80 000000437580 0 P}uBKh
000000034BED 0000004375ED 0 Y +?)A"i#P|
000000034C07 000000437607 0 l]fNh
000000034CA2 0000004376A2 0 ]]IdD
000000034EC6 0000004378C6 0 +J!YA
000000035068 000000437A68 0 +b3.d
0000000350F9 000000437AF9 0 pV/nn
000000035134 000000437B34 0 ?mBvPR+
000000035244 000000437C44 0 v?eRqVA=
0000000353ED 000000437DED 0 "]aA5TU
00000003542F 000000437E2F 0 a{ic-x
00000003545D 000000437E5D 0 l>o7I
0000000354C4 000000437EC4 0 @6K:/n
0000000355F9 000000437FF9 0 =QC'-3
00000003566E 00000043806E 0 fi/+%
0000000357C7 0000004381C7 0 mg,'U
000000035887 000000438287 0 Bd_E=
0000000358A8 0000004382A8 0 byBD
0000000358E5 0000004382E5 0 8n"<a=<
0000000359E2 0000004383E2 0 NO.+J
000000035C5C 00000043865C 0 gP+O/
000000035EBA 0000004388BA 0 {|HCY
000000035F09 000000438909 0 elz)9
00000003601A 000000438A1A 0 [k!b{
0000000360FE 000000438AFE 0 v@+0_LA
0000000361E1 000000438BE1 0 bZ1N=
000000036300 000000438D00 0 IzKQO
000000036313 000000438D13 0 9hE5/
00000003638A 000000438D8A 0 :O)Z2
00000003656D 000000438F6D 0 7B:Bu6
00000003666B 00000043906B 0 rE:6]
000000036678 000000439078 0 =svh(V- f
0000000366F3 0000004390F3 0 .i3BJ
000000036724 000000439124 0 Rg1$Gj
000000036732 000000439132 0 8dj]]@v
00000003681A 00000043921A 0 THec&+
00000003684D 00000043924D 0 hE,*9
000000036879 000000439279 0 *>"pR
0000000369C5 0000004393C5 0 lqkiR
000000036D0A 00000043970A 0 Uaw#+O
000000036E5B 00000043985B 0 Ep,7g
000000036E68 000000439868 0 B"hQ_
000000036EFD 0000004398FD 0 dB!8?rb
000000036F0B 00000043990B 0 j!/gZ
000000036F57 000000439957 0 k&s~
000000036F5E 00000043995E 0 'pKmb
0000000370E6 000000439AE6 0 jQ=_,
00000003718B 000000439B8B 0 ?fp3/
00000003719F 000000439B9F 0 w7b7v8
0000000372CE 000000439CCE 0 5gbAG
00000003739A 000000439D9A 0 [4H\
File pos Mem pos ID Text
======== ======= == ====
0000000373C0 000000439DC0 0 EvnbL
0000000373F6 000000439DF6 0 v)P+[!B
00000003749E 000000439E9E 0 ry)j#Z
0000000375AD 000000439FAD 0 -}i"aYi
000000037654 00000043A054 0 &abi]
000000037728 00000043A128 0 [D!PYQ
00000003784B 00000043A24B 0 *~,QXb
000000037875 00000043A275 0 yu?-,
000000037957 00000043A357 0 CZAqV
000000037995 00000043A395 0 nl(I!%
000000037A04 00000043A404 0 yRj_ro
000000037A4E 00000043A44E 0 B.Li,@J
000000037A81 00000043A481 0 NKJ[KP
000000037ACA 00000043A4CA 0 g5=}
000000037C10 00000043A610 0 8UdGW
000000037C3E 00000043A63E 0 Q#.Or
000000037C5D 00000043A65D 0 TonW%
000000037C67 00000043A667 0 Z6w %lEo
000000037F20 00000043A920 0 8f %?zT
000000037FBF 00000043A9BF 0 |'.hHQNR
00000003808F 00000043AA8F 0 7o+hv]~
000000038292 00000043AC92 0 qbW'k&gSi
00000003837F 00000043AD7F 0 IlnAh
0000000383A1 00000043ADA1 0 +NSW<
0000000384A1 00000043AEA1 0 h;TM+@y
0000000384F5 00000043AEF5 0 b"NP*P
000000038579 00000043AF79 0 2!Fi&
000000038598 00000043AF98 0 b4A[gJ
000000038604 00000043B004 0 :\6AVe
000000038676 00000043B076 0 aE!7)
0000000387E7 00000043B1E7 0 3)LqB
0000000387F9 00000043B1F9 0 qtT$pmB
000000038855 00000043B255 0 nJZN}>
0000000388E7 00000043B2E7 0 32bPB
000000038A52 00000043B452 0 e+w#A
000000038AC2 00000043B4C2 0 lWj+u
000000038ADA 00000043B4DA 0 5>"SI}q
000000038B86 00000043B586 0 163\IQ
000000038CD9 00000043B6D9 0 3f\yb#
000000038CE9 00000043B6E9 0 aY@I\
000000038D73 00000043B773 0 r8+JB
000000038E73 00000043B873 0 N6p,A
000000038E92 00000043B892 0 lb"L:I+A
000000038EF8 00000043B8F8 0 y}"+p1
000000038FB2 00000043B9B2 0 Em)1!=i
00000003903A 00000043BA3A 0 %GZQR
00000003906C 00000043BA6C 0 SehN]
000000039091 00000043BA91 0 kYd@](
000000039105 00000043BB05 0 B(FSK
000000039128 00000043BB28 0 OkNY\?
0000000391B4 00000043BBB4 0 _eBg)&EH
000000039260 00000043BC60 0 EQpUq
000000039374 00000043BD74 0 anJAc
00000003937A 00000043BD7A 0 YW!}zyI
00000003938B 00000043BD8B 0 [C)Lg
0000000393BC 00000043BDBC 0 #[Aw0:
0000000393C8 00000043BDC8 0 "dKZ2ie
0000000393DA 00000043BDDA 0 L,WY)i+
00000003942D 00000043BE2D 0 nUG.q
000000039453 00000043BE53 0 >R#099
File pos Mem pos ID Text
======== ======= == ====
000000039486 00000043BE86 0 mRAkA
00000003950F 00000043BF0F 0 -HX" C
0000000395C3 00000043BFC3 0 >iOi}
000000039645 00000043C045 0 ~UP}Ifi~
00000003965A 00000043C05A 0 Nai{e<Z:
000000039663 00000043C063 0 #aLiz
0000000398DE 00000043C2DE 0 E:A~C
00000003994C 00000043C34C 0 9$)PS
000000039A21 00000043C421 0 A<zYi
000000039C2B 00000043C62B 0 ]BaA;
000000039CE3 00000043C6E3 0 CeB0@t
000000039D46 00000043C746 0 h09ZAC
000000039D5C 00000043C75C 0 ]ARVs@
000000039DE1 00000043C7E1 0 Hr;,6
000000039E71 00000043C871 0 lU8G"
000000039E9C 00000043C89C 0 T*nZ_
000000039F73 00000043C973 0 {"fA4
000000039F83 00000043C983 0 >[BV;
000000039FE5 00000043C9E5 0 G;q~,
00000003A07B 00000043CA7B 0 ?OqSB
00000003A1A6 00000043CBA6 0 <kA2)
00000003A1DC 00000043CBDC 0 SLCE\
00000003A218 00000043CC18 0 N]SV8]
00000003A26C 00000043CC6C 0 gaPc
00000003A286 00000043CC86 0 YoBC!
00000003A306 00000043CD06 0 >teSl
00000003A34B 00000043CD4B 0 NcbBb.rnK>
00000003A420 00000043CE20 0 $QYlj
00000003A449 00000043CE49 0 Z9UtX
00000003A48E 00000043CE8E 0 M9ibyRjhSU
00000003A4AA 00000043CEAA 0 qiQolj)I
00000003A4F9 00000043CEF9 0 -S#ycI,
00000003A580 00000043CF80 0 CleyDa
00000003A5A7 00000043CFA7 0 Yb92$N
00000003A6E4 00000043D0E4 0 _5I"M
00000003A6EE 00000043D0EE 0 -uQ*y
00000003A739 00000043D139 0 \]1qU
00000003A74A 00000043D14A 0 ojVK9Y
00000003A7A0 00000043D1A0 0 <:ON'
00000003A86E 00000043D26E 0 \4~HT
00000003A8D5 00000043D2D5 0 rYtmEjoW
00000003A991 00000043D391 0 n"J%LZ
00000003A9E3 00000043D3E3 0 pakJ6cY
00000003AA31 00000043D431 0 aZR<g
00000003AA5D 00000043D45D 0 SK6eY
00000003AA80 00000043D480 0 bZZ+|XV[Y
00000003AA9A 00000043D49A 0 $wsQ7
00000003AAF7 00000043D4F7 0 ]9+ERt
00000003AB71 00000043D571 0 _B(Wnl
00000003AC3F 00000043D63F 0 c\(N#bZ
00000003AC52 00000043D652 0 |HA#Py
00000003ADB0 00000043D7B0 0 \Yk@C
00000003ADD3 00000043D7D3 0 0{Q!Z
00000003AF2C 00000043D92C 0 Q%ixc
00000003AF3A 00000043D93A 0 j7Ohw
00000003AFA5 00000043D9A5 0 cL!l[
00000003AFD9 00000043D9D9 0 _0?To
00000003B05F 00000043DA5F 0 R:qXs
00000003B0A5 00000043DAA5 0 a#qXI
00000003B119 00000043DB19 0 9neAR
File pos Mem pos ID Text
======== ======= == ====
00000003B14E 00000043DB4E 0 5?shR
00000003B1A1 00000043DBA1 0 RrH\u$
00000003B26C 00000043DC6C 0 :Kda4
00000003B36C 00000043DD6C 0 W~ceu
00000003B381 00000043DD81 0 U R\
00000003B596 00000043DF96 0 <jCOA
00000003B5E6 00000043DFE6 0 e4Q\8
00000003B621 00000043E021 0 qZ|Iy[5
00000003B678 00000043E078 0 fvO{1
00000003B6A5 00000043E0A5 0 g:8 Oe"
00000003B6F3 00000043E0F3 0 a[sQ
00000003B794 00000043E194 0 MviU;
00000003B811 00000043E211 0 ({M,l
00000003B8D0 00000043E2D0 0 B{R:\
00000003B904 00000043E304 0 b[7XRO
00000003B936 00000043E336 0 hLklZ
00000003B962 00000043E362 0 e_"0U
00000003B970 00000043E370 0 lEK]S
00000003BA4B 00000043E44B 0 l7_U7MrlZ
00000003BACE 00000043E4CE 0 9P]a,_
00000003BB77 00000043E577 0 +$qNX
00000003BC9A 00000043E69A 0 w]%1O
00000003BD21 00000043E721 0 Oj0TKZ
00000003BD57 00000043E757 0 h*]HVR
00000003BEE9 00000043E8E9 0 Q ={J
00000003C082 00000043EA82 0 58{Tl[
00000003C161 00000043EB61 0 jM7{m
00000003C1B7 00000043EBB7 0 H$|Yl
00000003C29F 00000043EC9F 0 cjkOpY
00000003C386 00000043ED86 0 ~!t[X
00000003C3A5 00000043EDA5 0 MkkD)
00000003C40C 00000043EE0C 0 1S_&Y
00000003C461 00000043EE61 0 i!Ox(
00000003C50D 00000043EF0D 0 uMKjJ
00000003C55D 00000043EF5D 0 qPjSl"
00000003C5DF 00000043EFDF 0 ~%)jKLP\
00000003C651 00000043F051 0 b)MMTv
00000003C706 00000043F106 0 [i6IX
00000003C728 00000043F128 0 jO$lU
00000003C766 00000043F166 0 K:<14
00000003C874 00000043F274 0 \L,Ix
00000003C8A6 00000043F2A6 0 yf!%F
00000003C8E2 00000043F2E2 0 iq|\Z
00000003C9CD 00000043F3CD 0 YG 7+T\l0
00000003CAD5 00000043F4D5 0 m['}YK
00000003CAFF 00000043F4FF 0 (!YcvF+
00000003CCDA 00000043F6DA 0 _CoSY8
00000003CD16 00000043F716 0 2VO\,
00000003CD58 00000043F758 0 -QDZYD
00000003CDAB 00000043F7AB 0 DToYK0
00000003CE15 00000043F815 0 |3rn>
00000003CF04 00000043F904 0 sG2Y+w
00000003CFFB 00000043F9FB 0 -LgY;
00000003D131 00000043FB31 0 s_}Y93
00000003D170 00000043FB70 0 WYM S
00000003D181 00000043FB81 0 k~YnR
00000003D1FA 00000043FBFA 0 Y+j#zm
00000003D252 00000043FC52 0 7#/Yk
00000003D274 00000043FC74 0 x6(U]GZ2
00000003D29C 00000043FC9C 0 1XRJ-
File pos Mem pos ID Text
======== ======= == ====
00000003D444 00000043FE44 0 @=XYk
00000003D4D5 00000043FED5 0 fF5jdY
00000003D51F 00000043FF1F 0 ad-Mm
00000003D539 00000043FF39 0 cw.a$
00000003D60D 00000044000D 0 'SW7[
00000003D660 000000440060 0 =!%Y=
00000003D6C8 0000004400C8 0 lh,1XM
00000003D776 000000440176 0 ?ohu-
00000003D7F8 0000004401F8 0 bB"gx
00000003D8A1 0000004402A1 0 nvmqD
00000003D8CC 0000004402CC 0 +Z1 Z.
00000003DB7B 00000044057B 0 CryptAcquireContextA
00000003DC13 000000440613 0 y]~ZO
00000003DD46 000000440746 0 WFSStartUp
00000003DE2D 00000044082D 0 ;EsN-V
00000003E025 000000440A25 0 B2Zmu
00000003E062 000000440A62 0 ,.YpH
00000003E0D7 000000440AD7 0 o6PhP!
00000003E19D 000000440B9D 0 CloseHandle
00000003E281 000000440C81 0 SetFocus
00000003E2D8 000000440CD8 0 WFSGetInfo
00000003E371 000000440D71 0 comctl32.dll
00000003E3C2 000000440DC2 0 @\oGD
00000003E472 000000440E72 0 WFSExecute
00000003E609 000000441009 0 A debugger has been found running in your system.
00000003E63B 00000044103B 0 Please, unload it from memory and restart your program.
00000003E673 000000441073 0 advapi32.dll
00000003E6F7 0000004410F7 0 PathRemoveFileSpecA
00000003E74B 00000044114B 0 uxm@F
00000003E7CF 0000004411CF 0 SetEndOfFile
00000003E85E 00000044125E 0 WinExec
00000003E870 000000441270 0 shlwapi.dll
00000003E87E 00000044127E 0 lstrcmpiA
00000003EA0C 00000044140C 0 CryptDestroyHash
00000003EADE 0000004414DE 0 RtlUnwind
00000003EB47 000000441547 0 EWD4?
00000003EC37 000000441637 0 (lD4~
00000003EC73 000000441673 0 +SD4
00000003ECD5 0000004416D5 0 VerSetConditionMask
00000003ED57 000000441757 0 U |r%
00000003ED95 000000441795 0 ZDx |$t
00000003EE06 000000441806 0 h~/W
00000003F2D2 000000441CD2 0 5h:J6
00000003F5FC 000000441FFC 0 D$$>:WP
00000003FC63 000000442663 0 D$<hN
0000000410A2 000000443AA2 0 T$0h&
000000041115 000000443B15 0 4UAOZ
0000000411D9 000000443BD9 0 l$4f9
000000041626 000000444026 0 t$ph!Y=O
000000041841 000000444241 0 t$DhO
000000041A35 000000445035 0 0\2i2M8
000000041A47 000000445047 0 ;W=_=
000000041A81 000000445081 0 8Q;%?
000000041A97 000000445097 0 8o9n<0>
000000041AAF 0000004450AF 0 6z6R8
000000042008 0000016E2208 0 msxfs.dll
000000042014 0000016E2214 0 WFSCleanUp
000000042021 0000016E2221 0 WFSOpen
00000004202B 0000016E222B 0 WFSGetInfo
000000042038 0000016E2238 0 WFSExecute
File pos Mem pos ID Text
======== ======= == ====
000000042045 0000016E2245 0 WFSAsyncClose
000000042055 0000016E2255 0 WFSAsyncClose
000000042065 0000016E2265 0 WFSFreeResult
000000042075 0000016E2275 0 WFSCancelBlockingCall
00000004208D 0000016E228D 0 WFSCancelBlockingCall
0000000420A5 0000016E22A5 0 WFSStartUp
0000000420B0 0000016E22B0 0 advapi32.dll
0000000420BF 0000016E22BF 0 CryptReleaseContext
0000000420D5 0000016E22D5 0 CryptHashData
0000000420E5 0000016E22E5 0 CryptGetHashParam
0000000420F9 0000016E22F9 0 CryptDestroyHash
00000004210C 0000016E230C 0 CryptCreateHash
00000004211E 0000016E231E 0 CryptAcquireContextA
000000042133 0000016E2333 0 comctl32.dll
000000042142 0000016E2342 0 InitCommonControls
000000042155 0000016E2355 0 kernel32.dll
000000042164 0000016E2364 0 CloseHandle
000000042172 0000016E2372 0 CopyFileA
00000004217E 0000016E237E 0 CreateFileA
00000004218C 0000016E238C 0 ExitProcess
00000004219A 0000016E239A 0 GetFileSize
0000000421A8 0000016E23A8 0 GetModuleFileNameA
0000000421BD 0000016E23BD 0 GetModuleHandleA
0000000421D0 0000016E23D0 0 IsBadWritePtr
0000000421E0 0000016E23E0 0 LocalAlloc
0000000421ED 0000016E23ED 0 LocalFree
0000000421F9 0000016E23F9 0 LocalSize
000000042205 0000016E2405 0 MoveFileA
000000042211 0000016E2411 0 ReadFile
00000004221C 0000016E241C 0 SetEndOfFile
00000004222B 0000016E242B 0 SetFilePointer
00000004223C 0000016E243C 0 WinExec
000000042246 0000016E2446 0 WriteFile
000000042252 0000016E2452 0 lstrcatA
00000004225D 0000016E245D 0 lstrcmpiA
000000042269 0000016E2469 0 lstrcpyA
000000042274 0000016E2474 0 lstrlenA
00000004227D 0000016E247D 0 ntdll.dll
000000042289 0000016E2489 0 RtlCaptureStackBackTrace
0000000422A2 0000016E24A2 0 kernel32.dll
0000000422B1 0000016E24B1 0 RtlMoveMemory
0000000422BF 0000016E24BF 0 ntdll.dll
0000000422CB 0000016E24CB 0 RtlUnwind
0000000422D5 0000016E24D5 0 kernel32.dll
0000000422E4 0000016E24E4 0 RtlZeroMemory
0000000422F4 0000016E24F4 0 VerSetConditionMask
000000042308 0000016E2508 0 ntdll.dll
000000042314 0000016E2514 0 RtlFillMemory
000000042322 0000016E2522 0 shlwapi.dll
000000042330 0000016E2530 0 PathAddBackslashA
000000042344 0000016E2544 0 PathRemoveFileSpecA
00000004235A 0000016E255A 0 PathFileExistsA
00000004236A 0000016E256A 0 user32.dll
000000042377 0000016E2577 0 SetFocus
000000042382 0000016E2582 0 GetDlgItem
00000004238F 0000016E258F 0 IsWindow
00000004239A 0000016E259A 0 DialogBoxParamA
0000000423AC 0000016E25AC 0 AnimateWindow
0000000423BC 0000016E25BC 0 wsprintfA
0000000423C8 0000016E25C8 0 MessageBoxA
File pos Mem pos ID Text
======== ======= == ====
0000000423D6 0000016E25D6 0 SendDlgItemMessageA
0000000423EC 0000016E25EC 0 EndDialog
0000000423F8 0000016E25F8 0 SendMessageA
000000042407 0000016E2607 0 SetWindowTextA
000000042418 0000016E2618 0 GetWindowTextLengthA
000000004F6A 00000040676A 0 VS_VERSION_INFO
000000004FC6 0000004067C6 0 StringFileInfo
000000004FEA 0000004067EA 0 040904E3
000000005002 000000406802 0 FileVersion
00000000501C 00000040681C 0 1.0.0.0
000000005032 000000406832 0 ProductVersion
000000005050 000000406850 0 1.0.0.0
000000005066 000000406866 0 CompanyName
000000005080 000000406880 0 Sanctions Group
0000000050A6 0000004068A6 0 FileDescription
0000000050C8 0000004068C8 0 Project Alice
0000000050EA 0000004068EA 0 InternalName
000000005104 000000406904 0 Sanctions
00000000511E 00000040691E 0 ProductName
000000005138 000000406938 0 Sanctions
000000005152 000000406952 0 LegalCopyright
000000005170 000000406970 0 Sanctions group
000000005196 000000406996 0 VarFileInfo
0000000051B6 0000004069B6 0 Translation
0000000054A6 000000406CA6 0 Operator panel
0000000054CB 000000406CCB 0 Times New Roman
000000005508 000000406D08 0 Dispenser
000000005538 000000406D38 0 SysListView32
000000005594 000000406D94 0 Dispense panel
0000000055D0 000000406DD0 0 Input cassette ID here :
000000005622 000000406E22 0 Input PIN-code for access !
000000005661 000000406E61 0 MS Sans Serif
000000005698 000000406E98 0 Authorize yourself
0000000056DC 000000406EDC 0 Terminal ID
000000005734 000000406F34 0 Your pin-code
000000005774 000000406F74 0 lation
00000000004D 00000040004D 0 !This program cannot be run in DOS mode.
0000000000BF 0000004000BF 0 zRich
0000000001D8 0000004001D8 0 .text
000000000200 000000400200 0 .rsrc
000000000228 000000400228 0 .vmp0
000000000278 000000400278 0 .vmp1
0000000002A0 0000004002A0 0 .reloc
0000000002C7 0000004002C7 0 BIAT_SEC_
000000000537 000000401137 0 s f5
00000000062A 00000040122A 0 CurrencyDispenser1
000000000649 000000401249 0 Project Alice
000000000673 000000401273 0 1010100
000000000894 000000401494 0 Selected cassette is unavailable !
0000000008B7 0000004014B7 0 Can't dispense requested amount. Error %d ocurred !
000000000A63 000000401663 0 t@Wj@
000000000ADD 0000004016DD 0 Bills count
000000000AE9 0000004016E9 0 Bill value
000000000AF4 0000004016F4 0 Currency
000000000AFD 0000004016FD 0 Result
000000000B07 000000401707 0 Total :
000000000B11 000000401711 0 PIN-Code input limit was reached! The program can't work any more!
000000001B2C 00000040272C 0 j!j!h6
000000001B44 000000402744 0 t2j7h
000000001CF3 0000004028F3 0 %08X-%08X
File pos Mem pos ID Text
======== ======= == ====
000000002391 000000402F91 0 j![f5
000000002497 000000403097 0 L$Dh>
0000000051D4 0000004069D4 0 <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
00000000520D 000000406A0D 0 <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
000000005258 000000406A58 0 <assemblyIdentity
00000000526B 000000406A6B 0 version="1.0.0.0"
000000005282 000000406A82 0 processorArchitecture="X86"
0000000052A3 000000406AA3 0 name="CompanyName.ProductName.YourApp"
0000000052CF 000000406ACF 0 type="win32"
0000000052E5 000000406AE5 0 <description>Your application description here.</description>
000000005324 000000406B24 0 <dependency>
000000005332 000000406B32 0 <dependentAssembly>
000000005347 000000406B47 0 <assemblyIdentity
000000005362 000000406B62 0 type="win32"
00000000537C 000000406B7C 0 name="Microsoft.Windows.Common-Controls"
0000000053B2 000000406BB2 0 version="6.0.0.0"
0000000053D1 000000406BD1 0 processorArchitecture="X86"
0000000053FA 000000406BFA 0 publicKeyToken="6595b64144ccf1df"
000000005429 000000406C29 0 language="*"
000000005443 000000406C43 0 />
00000000544F 000000406C4F 0 </dependentAssembly>
000000005469 000000406C69 0 </dependency>
000000005478 000000406C78 0 </assembly>
000000005813 000000407013 0 D$ b
000000005D86 000000407586 0 _ShHEA
000000005FB8 0000004077B8 0 \$Dh'
000000006109 000000407909 0 gZD/f
00000000690F 00000040810F 0 h}ahb6
000000006ADC 0000004082DC 0 t$DSQ
000000008C2E 00000040A42E 0 5$AE[V
000000008E43 00000040A643 0 5$AE[
0000000090D6 00000040A8D6 0 hmt'oH
0000000098A1 00000040B0A1 0 5$AE[
000000009B7E 00000040B37E 0 \$4f
000000009F24 00000040B724 0 D$@hU
00000000A891 00000040C091 0 ?v}f9
00000000B1F1 00000040C9F1 0 hKnod
00000000B9A1 00000040D1A1 0 4$hK!
00000000BB44 00000040D344 0 L$HWh
00000000C1D8 00000040D9D8 0 D$(h>)
00000000C20C 00000040DA0C 0 D$Lh'.
00000000C4F9 00000040DCF9 0 |$,f
00000000C5D1 00000040DDD1 0 L$@ha
00000000C85B 00000040E05B 0 $]l<"
00000000C91D 00000040E11D 0 D$(Rf
00000000D3B3 00000040EBB3 0 h#}:5
00000000E6C3 00000040FEC3 0 hmchr
00000000E6E9 00000040FEE9 0 L$ f)
00000000EF0C 00000041070C 0 hV1?!
00000000F487 000000410C87 0 pH I0
00000000F535 000000410D35 0 |$,f)
00000000F65A 000000410E5A 0 l$4f)
00000001017D 00000041197D 0 t$@QVhIUYU
000000011FF4 0000004137F4 0 L$(h2e
0000000120F4 0000004138F4 0 L$DTW
0000000126D7 000000413ED7 0 l$,Qf
000000012A30 000000414230 0 \$$he
000000013121 000000414921 0 Ph?Yx
000000013A26 000000415226 0 t$8h1
000000013BD2 0000004153D2 0 O4OWf
File pos Mem pos ID Text
======== ======= == ====
000000014A5F 00000041625F 0 l$DTf
000000014A7F 00000041627F 0 t$@[f
000000014AB0 0000004162B0 0 2f5(I
000000015161 000000416961 0 L$DUQh95
00000001569B 000000416E9B 0 x _Qf
000000015AC5 0000004172C5 0 h:+ZF
000000015D08 000000417508 0 t$dQS
000000015ECE 0000004176CE 0 aWf!E
0000000161F7 0000004179F7 0 \$,hPI{
000000016436 000000417C36 0 hR6[4
000000016837 000000418037 0 D$,Wht
0000000169AE 0000004181AE 0 l$,Ph
000000016B59 000000418359 0 hK,-d
0000000170BA 0000004188BA 0 |,GC|,G3
0000000170E7 0000004188E7 0 /Gci,Gs
000000017117 000000418917 0 )Gci,G
00000001714F 00000041894F 0 /GC|,Gs
000000017183 000000418983 0 (GC|,G
000000017207 000000418A07 0 /GC|,Gc
000000017236 000000418A36 0 n)Gk@)Gk@)Gk@)Gk@)Gk@)Gk@)Gk@)Gk@)Gk@)Gk@)Gk@)Gk@)Gk@)Gk@)Gk@)Gk@)G
00000001727B 000000418A7B 0 /Gci,GC|,Gs
0000000172DB 000000418ADB 0 )Gsz)G
00000001731F 000000418B1F 0 /Gsz)GK
00000001735B 000000418B5B 0 /GSj,G{
00000001736E 000000418B6E 0 U)Gci,G
00000001738F 000000418B8F 0 /GSj,G+
0000000173CF 000000418BCF 0 )GC|,G
000000017457 000000418C57 0 )GC|,Gs
000000017467 000000418C67 0 )Gci,G{
00000001747F 000000418C7F 0 /GSj,G
000000017678 000000418E78 0 $hTY@
0000000177E5 000000418FE5 0 L$,Qf
000000017A08 000000419208 0 |$0hL
000000018C1C 00000041A41C 0 |$<hb
000000019094 00000041A894 0 D$8h'
000000019B80 00000041B380 0 =43f
000000019F3B 00000041B73B 0 D$0Nf
00000001A83B 00000041C03B 0 |$@h1l]
00000001ABBF 00000041C3BF 0 $oSmi
00000001AC40 00000041C440 0 h~/W
00000001B10C 00000041C90C 0 5h:J6
00000001B436 00000041CC36 0 D$$>:WP
00000001BA9D 00000041D29D 0 D$<hN
00000001CEDC 00000041E6DC 0 T$0h&
00000001CF4F 00000041E74F 0 4UAOZ
00000001D013 00000041E813 0 l$4f9
00000001D460 00000041EC60 0 t$ph!Y=O
00000001D67B 00000041EE7B 0 t$DhO
00000001DF0A 00000041F70A 0 $\Qj#
00000001DF37 00000041F737 0 $bavR
00000001DF76 00000041F776 0 $d!*]
00000001DFD9 00000041F7D9 0 $a8s]
00000001E07B 00000041F87B 0 $bzpy
00000001E207 00000041FA07 0 2\6A4
00000001E297 00000041FA97 0 2_Z}R
00000001E303 00000041FB03 0 2_T]G
00000001E366 00000041FB66 0 2\-iT
00000001EC80 000000420480 0 j9dd'9
00000001ECB6 0000004204B6 0 j9aW-
00000001ECDA 0000004204DA 0 j9adc
File pos Mem pos ID Text
======== ======= == ====
00000001ECEC 0000004204EC 0 j9[Hg
00000001ECF5 0000004204F5 0 j9d g9
00000001ED19 000000420519 0 j9]$H:
00000001ED22 000000420522 0 j9]$o
00000001EDA9 0000004205A9 0 j9a4g
00000001EDE8 0000004205E8 0 j9\+nk
00000001EF08 000000420708 0 j9[v '
00000001EF1A 00000042071A 0 j9c!q
00000001EF7D 00000042077D 0 j9_,a
00000001FCAD 0000004214AD 0 zAd8~
00000001FDE8 0000004215E8 0 z_48!
00000001FEA5 0000004216A5 0 z\0(r
00000001FEC9 0000004216C9 0 zcgq"
00000001FF11 000000421711 0 z\4h0
00000001FF50 000000421750 0 z[iob
00000001FFA1 0000004217A1 0 zcH~o
0000000200A6 0000004218A6 0 zc\YW
0000000201F4 0000004219F4 0 8?2Z-
000000020298 000000421A98 0 o0!dW
0000000205EC 000000421DEC 0 Pv&|#
0000000207AA 000000421FAA 0 p,)mn
000000020A81 000000422281 0 _-ZB~=
000000020BAA 0000004223AA 0 9nUTPd
000000020C33 000000422433 0 ZF.kk
00000002114D 00000042294D 0 5E'6)
000000021155 000000422955 0 "C]4D
00000002115B 00000042295B 0 mS#yg
000000021299 000000422A99 0 3l7Y8
0000000212CD 000000422ACD 0 0V82:/>
000000021303 000000422B03 0 5.5:7
000000021325 000000422B25 0 485i5
00000002135D 000000422B5D 0 0&1=2g5b6-;Y;
000000021379 000000422B79 0 5/6J7
0000000213C1 000000422BC1 0 0@0W2
00000002163E 00000042403E 0 LocalFree
00000002164A 00000042404A 0 WFSOpen
00000002169A 00000042409A 0 E)&|"2
000000021727 000000424127 0 SetFilePointer
000000021789 000000424189 0 File corrupted!. This program has been manipulated and maybe
0000000217C6 0000004241C6 0 it's infected by a Virus or cracked. This file won't work anymore.
0000000218A5 0000004242A5 0 B&FY9
0000000218EA 0000004242EA 0 MessageBoxA
000000021A2B 00000042442B 0 RtlFillMemory
000000021A4B 00000042444B 0 CreateFileA
000000021A89 000000424489 0 SendMessageA
000000021C70 000000424670 0 d$LhJw
000000021CC5 0000004246C5 0 <0 Fg
000000021CEC 0000004246EC 0 $< hC
000000021DEC 0000004247EC 0 kernel32.dll
000000022090 000000424A90 0 a( r<
000000022138 000000424B38 0 XnbuE
00000002214B 000000424B4B 0 MoveFileA
0000000224BD 000000424EBD 0 3w;?/
000000022503 000000424F03 0 4Dwgs*
0000000226C9 0000004250C9 0 11Y%M
0000000226D6 0000004250D6 0 @DPN>X
0000000226EE 0000004250EE 0 6z,r!
000000022751 000000425151 0 ExitProcess
00000002277F 00000042517F 0 WFSClose
00000002278A 00000042518A 0 PathAddBackslashA
File pos Mem pos ID Text
======== ======= == ====
0000000227BC 0000004251BC 0 IsBadWritePtr
000000022894 000000425294 0 GetModuleFileNameA
00000002290B 00000042530B 0 .)H4bV
00000002291E 00000042531E 0 hVypr)A
000000022990 000000425390 0 P0PPt
000000022AEB 0000004254EB 0 InitCommonControls
000000022B9A 00000042559A 0 D$D6EB
000000022C21 000000425621 0 MyeWS
0000000230E7 000000425AE7 0 SendDlgItemMessageA
0000000230FD 000000425AFD 0 GetDlgItem
00000002310A 000000425B0A 0 VirtualProtect
00000002326C 000000425C6C 0 RtlMoveMemory
0000000232E4 000000425CE4 0 lstrcpyA
0000000233AE 000000425DAE 0 sPQ#'
000000023446 000000425E46 0 uY1/o
0000000234D3 000000425ED3 0 qhHL\
0000000235A7 000000425FA7 0 ;N63=
00000002367A 00000042607A 0 CryptCreateHash
00000002370B 00000042610B 0 hKuAJFS
0000000238B3 0000004262B3 0 dfp :
000000023916 000000426316 0 XP,=?
00000002392B 00000042632B 0 W!uL<
0000000239EA 0000004263EA 0 CkcE>
000000023A73 000000426473 0 $4hA$
000000023D4D 00000042674D 0 Y'[ZgX
000000023DA3 0000004267A3 0 9D2qN
000000023F1B 00000042691B 0 )The procedure entry point %s could not be located in the dynamic link library %s
000000023FE2 0000004269E2 0 qke{W
000000023FE8 0000004269E8 0 aZr3j#
00000002401D 000000426A1D 0 'k3}?
0000000240EC 000000426AEC 0 ze!_a
000000024184 000000426B84 0 K\Xyo
0000000242E3 000000426CE3 0 owljf
000000024355 000000426D55 0 rj_Ze
000000024491 000000426E91 0 _MaIiEbA
0000000244C7 000000426EC7 0 'roauZ
000000024540 000000426F40 0 izzsam
0000000246A4 0000004270A4 0 vi#u%
0000000246C8 0000004270C8 0 5'(YR
0000000246D0 0000004270D0 0 4<2Gp6
000000024704 000000427104 0 ]gMi_
00000002485A 00000042725A 0 lf<o;
00000002493E 00000042733E 0 lr(zSr
000000024984 000000427384 0 e%Ayi
000000024995 000000427395 0 tCK"tyA+
000000024A52 000000427452 0 aE)~tZ
000000024A65 000000427465 0 y[ss3#
000000024B04 000000427504 0 jm~]gc]
000000024B3D 00000042753D 0 f%*hrd
000000024B9F 00000042759F 0 u_y~]
000000024BE9 0000004275E9 0 A!_=d9
000000024C12 000000427612 0 nO+]_
000000024C5C 00000042765C 0 iG!mh
000000024C7F 00000042767F 0 FgvUi
000000024C85 000000427685 0 ,(Kj}Q
000000024CFD 0000004276FD 0 osydT
000000024D75 000000427775 0 k[bym,
000000024E23 000000427823 0 N;jpl
000000024EE5 0000004278E5 0 yrueq
000000024F5C 00000042795C 0 IqWByj
File pos Mem pos ID Text
======== ======= == ====
000000024FD6 0000004279D6 0 i#uBX
000000025202 000000427C02 0 f}qarh
000000025241 000000427C41 0 RBO,i*
0000000253F3 000000427DF3 0 ZVRv~b
00000002546F 000000427E6F 0 The ordinal %u could not be located in the dynamic link library %s
0000000254DD 000000427EDD 0 AnimateWindow
00000002559B 000000427F9B 0 WFSCleanUp
0000000255C0 000000427FC0 0 CryptHashData
00000002562D 00000042802D 0 $hfC}
000000025645 000000428045 0 DialogBoxParamA
000000025684 000000428084 0 amfaptg
000000025721 000000428121 0 #MSXFS.dll
0000000257B9 0000004281B9 0 g_.x}
000000025832 000000428232 0 82]c$
000000025849 000000428249 0 rma!S_?A
00000002585F 00000042825F 0 z&r~>
0000000258BC 0000004282BC 0 "Rns=
0000000258C8 0000004282C8 0 )}%}
000000025991 000000428391 0 ((i]e
0000000259BE 0000004283BE 0 $dXft
000000025A28 000000428428 0 GetWindowTextLengthA
000000025AA0 0000004284A0 0 ?"q06
000000025C17 000000428617 0 K,{h{
000000025C8B 00000042868B 0 \I+x2
000000025C9E 00000042869E 0 @YIj%
000000025CFD 0000004286FD 0 r_VR@L
000000025EED 0000004288ED 0 xLAE*
000000026090 000000428A90 0 yELzH
000000026415 000000428E15 0 xim=@
0000000264B0 000000428EB0 0 QI4!]+.
000000026513 000000428F13 0 ;GO1n
000000026778 000000429178 0 !1Ab>k
0000000268F3 0000004292F3 0 GetModuleHandleA
0000000269F0 0000004293F0 0 v>k\c+(~
000000026A28 000000429428 0 =%M%j
000000026C6F 00000042966F 0 WFSLock
000000026CAE 0000004296AE 0 ,T$?3-["
000000026CE5 0000004296E5 0 Z.X8NQ
000000026D68 000000429768 0 kY%{i
000000026D7B 00000042977B 0 Y%%Ii\
000000026D8D 00000042978D 0 v*'}#3
000000026EAD 0000004298AD 0 CryptGetHashParam
000000026F92 000000429992 0 WFSFreeResult
000000026FA2 0000004299A2 0 LocalSize
00000002713D 000000429B3D 0 t$<hH3g'
00000002723B 000000429C3B 0 CryptReleaseContext
0000000272D7 000000429CD7 0 a)&|"I
00000002732E 000000429D2E 0 qM|O?CY
0000000273A5 000000429DA5 0 Vr5H EY
0000000274B9 000000429EB9 0 EndDialog
0000000275AF 000000429FAF 0 c/TDx;D$
0000000275D7 000000429FD7 0 $Gntdll.dll
0000000275E6 000000429FE6 0 lstrlenA
0000000275F1 000000429FF1 0 IsWindow
000000027654 00000042A054 0 #OngO
0000000276A1 00000042A0A1 0 2pkO,
000000027747 00000042A147 0 CopyFileA
000000027938 00000042A338 0 ReadFile
0000000279CB 00000042A3CB 0 E}9vvB
0000000279DC 00000042A3DC 0 -hD(~
File pos Mem pos ID Text
======== ======= == ====
000000027A1F 00000042A41F 0 MYiF8
000000027A80 00000042A480 0 LoadLibraryA
000000027AA9 00000042A4A9 0 XA4T41
000000027C73 00000042A673 0 \iEk[
000000027CAD 00000042A6AD 0 nc]8z
000000027E9A 00000042A89A 0 RtlZeroMemory
000000027EAA 00000042A8AA 0 lstrcatA
000000027EB5 00000042A8B5 0 PathFileExistsA
000000027F22 00000042A922 0 32*e)&|
000000027FC5 00000042A9C5 0 JfRZ>
000000028031 00000042AA31 0 t|UV-
00000002814E 00000042AB4E 0 kG'lH
0000000281A8 00000042ABA8 0 user32.dll
000000028268 00000042AC68 0 RtlCaptureStackBackTrace
000000028303 00000042AD03 0 LocalAlloc
000000028387 00000042AD87 0 wsprintfA
000000028458 00000042AE58 0 25.N!w
000000028571 00000042AF71 0 SetWindowTextA
0000000285C7 00000042AFC7 0 WFSRegister
00000002867E 00000042B07E 0 t$ hl+
000000028B32 00000042B532 0 5'zZ=
000000028B4D 00000042B54D 0 d%gis
000000028B90 00000042B590 0 GetFileSize
000000028BAA 00000042B5AA 0 WFSUnlock
000000028C63 00000042B663 0 >1Q$$
000000028D7C 00000042B77C 0 e 1H7
000000028F17 00000042B917 0 WriteFile
0000000290C0 00000042BAC0 0 'FG+(~
000000029145 00000042BB45 0 Z ]}~
000000029176 00000042BB76 0 9+YBX
00000002919C 00000042BB9C 0 IG-v/
000000029239 00000042BC39 0 4n2'(c
000000029241 00000042BC41 0 9\@_NP7n
00000002928D 00000042BC8D 0 =gQ\2
000000029295 00000042BC95 0 V[AaA
000000029303 00000042BD03 0 l_~XeQab
00000002934E 00000042BD4E 0 U*Y&h
000000029354 00000042BD54 0 QBg[7
000000029360 00000042BD60 0 +]-~y<#
000000029369 00000042BD69 0 ,[A0}
0000000293A1 00000042BDA1 0 B+Byra
0000000293FB 00000042BDFB 0 gWcv}
0000000294DF 00000042BEDF 0 SQ4 vbL
0000000296B3 00000042C0B3 0 a.cmQ
0000000296DD 00000042C0DD 0 2F:m'
00000002970D 00000042C10D 0 eP+/)?
000000029786 00000042C186 0 Qq;a?m
00000002978E 00000042C18E 0 #v\BP3BS
0000000297EA 00000042C1EA 0 uvcyh
0000000298CE 00000042C2CE 0 Y0O-P.
000000029A23 00000042C423 0 y}[a!_O
000000029A7E 00000042C47E 0 ;YP S,
000000029AED 00000042C4ED 0 vY'Aue
000000029B67 00000042C567 0 S}Agn
000000029C6C 00000042C66C 0 t]B6g&
000000029C8E 00000042C68E 0 ;eO)H._
000000029E97 00000042C897 0 |JHbd
000000029EBF 00000042C8BF 0 !7c+Q
00000002A0F5 00000042CAF5 0 ~i-JdA~Hr
00000002A229 00000042CC29 0 Wr*A1mLB
File pos Mem pos ID Text
======== ======= == ====
00000002A307 00000042CD07 0 d,xiG
00000002A31A 00000042CD1A 0 S]9zk%|I'
00000002A441 00000042CE41 0 mQN>sB
00000002A4AD 00000042CEAD 0 )JRrV
00000002A4D3 00000042CED3 0 z w~F
00000002A670 00000042D070 0 XlI;pI
00000002A755 00000042D155 0 !<aJV
00000002A848 00000042D248 0 a]m@g
00000002A87B 00000042D27B 0 #z+az9z
00000002A88E 00000042D28E 0 ke]mCc
00000002A983 00000042D383 0 kMk1k%e
00000002AA1F 00000042D41F 0 \fO)+
00000002AA29 00000042D429 0 ,1,>x
00000002AAE3 00000042D4E3 0 o!.iY
00000002AB0A 00000042D50A 0 ;ilN,9
00000002AB3D 00000042D53D 0 .Hsi3b_
00000002AB70 00000042D570 0 0pi,B
00000002ABF4 00000042D5F4 0 Q!}v}
00000002AC0D 00000042D60D 0 y ~sA
00000002AC4B 00000042D64B 0 BpfpA
00000002ACA4 00000042D6A4 0 [>ZBls
00000002ACCB 00000042D6CB 0 Y71Ay
00000002AD61 00000042D761 0 B\_O6
00000002AD67 00000042D767 0 *fT(s
00000002AD81 00000042D781 0 Q]4yU
00000002AF37 00000042D937 0 g4})c
00000002AF4D 00000042D94D 0 Q,Ao'
00000002AF6C 00000042D96C 0 1l#B-
00000002B006 00000042DA06 0 yhUNBT
00000002B03C 00000042DA3C 0 AI/+C
00000002B0E2 00000042DAE2 0 Dj4Lx
00000002B173 00000042DB73 0 Cg<p)'iK
00000002B1BA 00000042DBBA 0 )+7W''
00000002B493 00000042DE93 0 }ui=m
00000002B4A8 00000042DEA8 0 }u#e|!zI
00000002B600 00000042E000 0 8Kd9 We
00000002B688 00000042E088 0 &gzO6
00000002B699 00000042E099 0 Wd?lg
00000002B6D3 00000042E0D3 0 4-zDm
00000002B754 00000042E154 0 Y%EQh
00000002B7AF 00000042E1AF 0 ]%~HQj
00000002B9BF 00000042E3BF 0 VzND,A
00000002BA63 00000042E463 0 Gz+EN"_
00000002BA78 00000042E478 0 ~C|KGZ
00000002BBA2 00000042E5A2 0 QZ-bjF
00000002BCAA 00000042E6AA 0 G/;}w
00000002BDD3 00000042E7D3 0 yyVlW
00000002BE45 00000042E845 0 YlrA+RW
00000002BE52 00000042E852 0 ae,["e
00000002BE94 00000042E894 0 <L0C{
00000002BEE1 00000042E8E1 0 jq,Ik
00000002BFF8 00000042E9F8 0 NnQA0
00000002C01F 00000042EA1F 0 L|G</(
00000002C062 00000042EA62 0 #[A8S
00000002C0D0 00000042EAD0 0 YE/W!
00000002C22C 00000042EC2C 0 {$qPN
00000002C29E 00000042EC9E 0 x8l(B
00000002C2C9 00000042ECC9 0 @*,FU
00000002C34B 00000042ED4B 0 jNQ!A
00000002C40D 00000042EE0D 0 W!g$E*'\
File pos Mem pos ID Text
======== ======= == ====
00000002C448 00000042EE48 0 gztu{
00000002C484 00000042EE84 0 xj~2?
00000002C497 00000042EE97 0 q:O~
00000002C4E8 00000042EEE8 0 a?Y+S
00000002C53E 00000042EF3E 0 K!dE|
00000002C56D 00000042EF6D 0 xd=ye+
00000002C57A 00000042EF7A 0 <4i{e
00000002C6B8 00000042F0B8 0 =HR|>
00000002C777 00000042F177 0 3hB /{
00000002C79C 00000042F19C 0 V3-~+/
00000002C8C9 00000042F2C9 0 qafx[
00000002C9D6 00000042F3D6 0 _bej-
00000002CBD2 00000042F5D2 0 >yibo
00000002CC24 00000042F624 0 C17fb0
00000002CC55 00000042F655 0 yp+]-y
00000002CC68 00000042F668 0 NR;<k
00000002CCB7 00000042F6B7 0 e;W#oK
00000002CE40 00000042F840 0 \['P7,O
00000002CF22 00000042F922 0 }!R;iWd
00000002CF46 00000042F946 0 <N2F]S
00000002D099 00000042FA99 0 +'S&k
00000002D0A2 00000042FAA2 0 6VlkBr}
00000002D0FA 00000042FAFA 0 xJ~)7
00000002D19A 00000042FB9A 0 #kfqQ)
00000002D1B7 00000042FBB7 0 "J.hp
00000002D3CE 00000042FDCE 0 0kuUE
00000002D51D 00000042FF1D 0 p73r2:
00000002D55C 00000042FF5C 0 i#|QV
00000002D633 000000430033 0 S;C{h"
00000002D652 000000430052 0 &A"P7
00000002D664 000000430064 0 > @!Bv
00000002D690 000000430090 0 UVTB<
00000002D6C6 0000004300C6 0 tmA.V
00000002D6D8 0000004300D8 0 A>1-"k
00000002D71D 00000043011D 0 TwLA\
00000002D800 000000430200 0 CiN36
00000002D84F 00000043024F 0 c]A=>g
00000002D959 000000430359 0 }c=y<
00000002D9F0 0000004303F0 0 iGKlR
00000002D9FB 0000004303FB 0 &y:<\
00000002DA15 000000430415 0 % I|maT
00000002DA26 000000430426 0 L~6cQ
00000002DA2C 00000043042C 0 G9EIh
00000002DA6A 00000043046A 0 dA0UH
00000002DAD7 0000004304D7 0 ztbSNy
00000002DB20 000000430520 0 d] Bu
00000002DB90 000000430590 0 U0bQh
00000002DBAF 0000004305AF 0 Co+ .
00000002DBBA 0000004305BA 0 't*d/
00000002DC43 000000430643 0 k7lWv
00000002DC56 000000430656 0 TR7,Z
00000002DC9E 00000043069E 0 nes}cX
00000002DF23 000000430923 0 8d%+m
00000002E03D 000000430A3D 0 _<OAGW
00000002E076 000000430A76 0 duAfj
00000002E0DC 000000430ADC 0 JlkC6
00000002E24B 000000430C4B 0 A)1:'
00000002E346 000000430D46 0 '5/.Y
00000002E450 000000430E50 0 T.nvtd
00000002E4B6 000000430EB6 0 lAofUa
File pos Mem pos ID Text
======== ======= == ====
00000002E50C 000000430F0C 0 L)Ch'8{
00000002E5DC 000000430FDC 0 sX{Hi#
00000002E6C1 0000004310C1 0 db_>y
00000002E730 000000431130 0 -|)bq
00000002E88C 00000043128C 0 n)HuyO/
00000002E9CF 0000004313CF 0 rJ]JW
00000002E9DD 0000004313DD 0 mEYA{O
00000002EA0B 00000043140B 0 )*~VRf
00000002EA58 000000431458 0 %,zxO
00000002EB46 000000431546 0 (.SCpt
00000002EB66 000000431566 0 Z>i,
00000002EB86 000000431586 0 aN2Ab
00000002ECAA 0000004316AA 0 V ZRL
00000002ECFC 0000004316FC 0 %,LWb
00000002ED07 000000431707 0 3.A#,Kl
00000002ED43 000000431743 0 gkN}u
00000002ED8A 00000043178A 0 cnB=AJ[
00000002EF52 000000431952 0 Ra)IL
00000002EFA6 0000004319A6 0 P3~U!
00000002F0A1 000000431AA1 0 EdainJ
00000002F24E 000000431C4E 0 d1AT>
00000002F269 000000431C69 0 +objOd
00000002F340 000000431D40 0 fBNws
00000002F439 000000431E39 0 UbZpLd
00000002F455 000000431E55 0 8".Y~Q
00000002F4D7 000000431ED7 0 8pj."
00000002F54E 000000431F4E 0 i)yQ~.
00000002F6F1 0000004320F1 0 +"bJA
00000002F73F 00000043213F 0 C[jqF4_&v
00000002F751 000000432151 0 B<+R:
00000002F7CC 0000004321CC 0 0UvQA
00000002F975 000000432375 0 <wLBM
00000002F994 000000432394 0 gd}Bj
00000002FBB0 0000004325B0 0 Y9&qb
00000002FBFB 0000004325FB 0 "ce]!
00000002FCAD 0000004326AD 0 l;UQ/
00000002FD1C 00000043271C 0 8iPIA
00000002FE77 000000432877 0 yo)Bn
00000002FF26 000000432926 0 j9/xR
00000002FF3D 00000043293D 0 Bt{gOc
0000000300D0 000000432AD0 0 _jtaYB
000000030108 000000432B08 0 _k6bN
0000000301ED 000000432BED 0 F)_A{i
0000000301F6 000000432BF6 0 n}Xb|
000000030250 000000432C50 0 yBy$m~L
00000003030E 000000432D0E 0 ]B)l5
00000003040D 000000432E0D 0 z;7Y1
000000030471 000000432E71 0 _O3bW'
0000000304D0 000000432ED0 0 jbAoVM}
0000000304F3 000000432EF3 0 eH3 \
000000030598 000000432F98 0 OAR=J
000000030669 000000433069 0 xZ5~~
000000030712 000000433112 0 -ouzWK
0000000307C3 0000004331C3 0 Ucl1Se
000000030869 000000433269 0 k9kVR
0000000309A1 0000004333A1 0 ImB##*
0000000309BB 0000004333BB 0 x:cdW#
000000030C14 000000433614 0 +d(b.
000000030C3D 00000043363D 0 =?kP0AC
000000030C86 000000433686 0 :zy]A
File pos Mem pos ID Text
======== ======= == ====
000000030E23 000000433823 0 PqV=b
000000030FCF 0000004339CF 0 OnAqFW
000000031067 000000433A67 0 D$G.)b
00000003118D 000000433B8D 0 hV$;Q_b
0000000311B6 000000433BB6 0 +U8dW/}
0000000311BF 000000433BBF 0 :Q\iN=6
000000031240 000000433C40 0 v;U6<D~
000000031251 000000433C51 0 xbZ/!iNA
000000031272 000000433C72 0 ~);rF
000000031301 000000433D01 0 |"cW\U
000000031380 000000433D80 0 ur0ir5A
0000000314A9 000000433EA9 0 e6O5Zi
0000000314C3 000000433EC3 0 cAB,4
0000000314EB 000000433EEB 0 ipjeA
0000000314FD 000000433EFD 0 ~;0%Bi
000000031507 000000433F07 0 ~zIMD
000000031591 000000433F91 0 {|]m%/
000000031783 000000434183 0 }}ty=v
0000000317EE 0000004341EE 0 q!U}9!Azu
000000031A8B 00000043448B 0 ]I+RH
000000031BCB 0000004345CB 0 A4f-z
000000031C13 000000434613 0 U_+]!1
000000031C54 000000434654 0 MN,TN
000000031CB1 0000004346B1 0 iT2%RM
000000031D35 000000434735 0 d*tB.
000000031D73 000000434773 0 Jz.]Q
000000031EEF 0000004348EF 0 ,"X&.+.
000000031F36 000000434936 0 !)RBB
0000000320E7 000000434AE7 0 bOvL&
000000032104 000000434B04 0 Pl<Fk
00000003210C 000000434B0C 0 x]Xjh
00000003214E 000000434B4E 0 a3<B.
0000000321F5 000000434BF5 0 ] @_&
000000032201 000000434C01 0 _A+/;Pk(
00000003232A 000000434D2A 0 d4Tbh
0000000323BA 000000434DBA 0 R~kD(boWO
0000000323E2 000000434DE2 0 ]%tyaTCF
000000032423 000000434E23 0 Z1+Am
000000032455 000000434E55 0 ]s+UeN3@
000000032854 000000435254 0 IsAMv=
0000000328A3 0000004352A3 0 ?n}Rp
0000000328C7 0000004352C7 0 ~ldT<
000000032988 000000435388 0 a\Dk+S
000000032A50 000000435450 0 57+.N
000000032AF3 0000004354F3 0 #|<I\
000000032B26 000000435526 0 cxuAx}
000000032B63 000000435563 0 eCZW'L
000000032B9B 00000043559B 0 LS~dEJW
000000032C79 000000435679 0 +P$Pi
000000032D25 000000435725 0 i-[]N
000000032EE2 0000004358E2 0 0\P7
000000032EF9 0000004358F9 0 'tJzL[8
000000032FB9 0000004359B9 0 %dY+7QA
000000032FCE 0000004359CE 0 &]qB
000000032FF4 0000004359F4 0 b#kj@
000000033078 000000435A78 0 7>3+d
000000033083 000000435A83 0 RSpB3=
000000033096 000000435A96 0 UN!:ktcO#
0000000330B0 000000435AB0 0 6[HP]
000000033157 000000435B57 0 /eR@n{S
File pos Mem pos ID Text
======== ======= == ====
0000000331A0 000000435BA0 0 #Zk<l
0000000332FF 000000435CFF 0 C,sI.
00000003337E 000000435D7E 0 k1DdSZ
00000003338F 000000435D8F 0 0we/A)q.
000000033446 000000435E46 0 pXSJ8
0000000334B8 000000435EB8 0 ~Q-(v
0000000334BE 000000435EBE 0 eO1g)
00000003350D 000000435F0D 0 !h~wO2
000000033515 000000435F15 0 )Xou<
000000033563 000000435F63 0 % leB7
0000000335DC 000000435FDC 0 )*oNW!
00000003379D 00000043619D 0 ?d.e1X
0000000337FF 0000004361FF 0 #7kCL
000000033953 000000436353 0 gy]J\
000000033997 000000436397 0 iq{pa;
000000033A77 000000436477 0 z cw5]M|g
000000033AB8 0000004364B8 0 Qr9nM
000000033AC7 0000004364C7 0 .U3!lm
000000033B5E 00000043655E 0 )/l#X
000000033BAE 0000004365AE 0 ?le+#U
000000033D19 000000436719 0 B!aH<
000000033D40 000000436740 0 6;-qm
000000033DBB 0000004367BB 0 Ok*"NB
000000033DD5 0000004367D5 0 ?G}RQp
000000033E06 000000436806 0 A+k:>
000000033E2F 00000043682F 0 2/k}s
000000033E4C 00000043684C 0 L).dWk z
000000033F7A 00000043697A 0 ykARZ
000000033F95 000000436995 0 XLx#F
000000033FB4 0000004369B4 0 zL>ly
000000033FE3 0000004369E3 0 =H/ad
0000000341EF 000000436BEF 0 P+:d MA~
000000034336 000000436D36 0 ]yQCK
00000003436D 000000436D6D 0 sR${vj1
0000000344BA 000000436EBA 0 Yy4e6
000000034503 000000436F03 0 xlBs)
000000034590 000000436F90 0 DLq]>
0000000345B5 000000436FB5 0 =[A9>N
00000003474F 00000043714F 0 ZR]O1+"
00000003485A 00000043725A 0 2QB97
000000034912 000000437312 0 ]@8Kb
000000034982 000000437382 0 A}/G?
000000034A1A 00000043741A 0 mAsx0R
000000034A27 000000437427 0 R>anG
000000034AE0 0000004374E0 0 -H~y;(
000000034B80 000000437580 0 P}uBKh
000000034BED 0000004375ED 0 Y +?)A"i#P|
000000034C07 000000437607 0 l]fNh
000000034CA2 0000004376A2 0 ]]IdD
000000034EC6 0000004378C6 0 +J!YA
000000035068 000000437A68 0 +b3.d
0000000350F9 000000437AF9 0 pV/nn
000000035134 000000437B34 0 ?mBvPR+
000000035244 000000437C44 0 v?eRqVA=
0000000353ED 000000437DED 0 "]aA5TU
00000003542F 000000437E2F 0 a{ic-x
00000003545D 000000437E5D 0 l>o7I
0000000354C4 000000437EC4 0 @6K:/n
0000000355F9 000000437FF9 0 =QC'-3
00000003566E 00000043806E 0 fi/+%
File pos Mem pos ID Text
======== ======= == ====
0000000357C7 0000004381C7 0 mg,'U
000000035887 000000438287 0 Bd_E=
0000000358A8 0000004382A8 0 byBD
0000000358E5 0000004382E5 0 8n"<a=<
0000000359E2 0000004383E2 0 NO.+J
000000035C5C 00000043865C 0 gP+O/
000000035EBA 0000004388BA 0 {|HCY
000000035F09 000000438909 0 elz)9
00000003601A 000000438A1A 0 [k!b{
0000000360FE 000000438AFE 0 v@+0_LA
0000000361E1 000000438BE1 0 bZ1N=
000000036300 000000438D00 0 IzKQO
000000036313 000000438D13 0 9hE5/
00000003638A 000000438D8A 0 :O)Z2
00000003656D 000000438F6D 0 7B:Bu6
00000003666B 00000043906B 0 rE:6]
000000036678 000000439078 0 =svh(V- f
0000000366F3 0000004390F3 0 .i3BJ
000000036724 000000439124 0 Rg1$Gj
000000036732 000000439132 0 8dj]]@v
00000003681A 00000043921A 0 THec&+
00000003684D 00000043924D 0 hE,*9
000000036879 000000439279 0 *>"pR
0000000369C5 0000004393C5 0 lqkiR
000000036D0A 00000043970A 0 Uaw#+O
000000036E5B 00000043985B 0 Ep,7g
000000036E68 000000439868 0 B"hQ_
000000036EFD 0000004398FD 0 dB!8?rb
000000036F0B 00000043990B 0 j!/gZ
000000036F57 000000439957 0 k&s~
000000036F5E 00000043995E 0 'pKmb
0000000370E6 000000439AE6 0 jQ=_,
00000003718B 000000439B8B 0 ?fp3/
00000003719F 000000439B9F 0 w7b7v8
0000000372CE 000000439CCE 0 5gbAG
00000003739A 000000439D9A 0 [4H\
0000000373C0 000000439DC0 0 EvnbL
0000000373F6 000000439DF6 0 v)P+[!B
00000003749E 000000439E9E 0 ry)j#Z
0000000375AD 000000439FAD 0 -}i"aYi
000000037654 00000043A054 0 &abi]
000000037728 00000043A128 0 [D!PYQ
00000003784B 00000043A24B 0 *~,QXb
000000037875 00000043A275 0 yu?-,
000000037957 00000043A357 0 CZAqV
000000037995 00000043A395 0 nl(I!%
000000037A04 00000043A404 0 yRj_ro
000000037A4E 00000043A44E 0 B.Li,@J
000000037A81 00000043A481 0 NKJ[KP
000000037ACA 00000043A4CA 0 g5=}
000000037C10 00000043A610 0 8UdGW
000000037C3E 00000043A63E 0 Q#.Or
000000037C5D 00000043A65D 0 TonW%
000000037C67 00000043A667 0 Z6w %lEo
000000037F20 00000043A920 0 8f %?zT
000000037FBF 00000043A9BF 0 |'.hHQNR
00000003808F 00000043AA8F 0 7o+hv]~
000000038292 00000043AC92 0 qbW'k&gSi
00000003837F 00000043AD7F 0 IlnAh
0000000383A1 00000043ADA1 0 +NSW<
File pos Mem pos ID Text
======== ======= == ====
0000000384A1 00000043AEA1 0 h;TM+@y
0000000384F5 00000043AEF5 0 b"NP*P
000000038579 00000043AF79 0 2!Fi&
000000038598 00000043AF98 0 b4A[gJ
000000038604 00000043B004 0 :\6AVe
000000038676 00000043B076 0 aE!7)
0000000387E7 00000043B1E7 0 3)LqB
0000000387F9 00000043B1F9 0 qtT$pmB
000000038855 00000043B255 0 nJZN}>
0000000388E7 00000043B2E7 0 32bPB
000000038A52 00000043B452 0 e+w#A
000000038AC2 00000043B4C2 0 lWj+u
000000038ADA 00000043B4DA 0 5>"SI}q
000000038B86 00000043B586 0 163\IQ
000000038CD9 00000043B6D9 0 3f\yb#
000000038CE9 00000043B6E9 0 aY@I\
000000038D73 00000043B773 0 r8+JB
000000038E73 00000043B873 0 N6p,A
000000038E92 00000043B892 0 lb"L:I+A
000000038EF8 00000043B8F8 0 y}"+p1
000000038FB2 00000043B9B2 0 Em)1!=i
00000003903A 00000043BA3A 0 %GZQR
00000003906C 00000043BA6C 0 SehN]
000000039091 00000043BA91 0 kYd@](
000000039105 00000043BB05 0 B(FSK
000000039128 00000043BB28 0 OkNY\?
0000000391B4 00000043BBB4 0 _eBg)&EH
000000039260 00000043BC60 0 EQpUq
000000039374 00000043BD74 0 anJAc
00000003937A 00000043BD7A 0 YW!}zyI
00000003938B 00000043BD8B 0 [C)Lg
0000000393BC 00000043BDBC 0 #[Aw0:
0000000393C8 00000043BDC8 0 "dKZ2ie
0000000393DA 00000043BDDA 0 L,WY)i+
00000003942D 00000043BE2D 0 nUG.q
000000039453 00000043BE53 0 >R#099
000000039486 00000043BE86 0 mRAkA
00000003950F 00000043BF0F 0 -HX" C
0000000395C3 00000043BFC3 0 >iOi}
000000039645 00000043C045 0 ~UP}Ifi~
00000003965A 00000043C05A 0 Nai{e<Z:
000000039663 00000043C063 0 #aLiz
0000000398DE 00000043C2DE 0 E:A~C
00000003994C 00000043C34C 0 9$)PS
000000039A21 00000043C421 0 A<zYi
000000039C2B 00000043C62B 0 ]BaA;
000000039CE3 00000043C6E3 0 CeB0@t
000000039D46 00000043C746 0 h09ZAC
000000039D5C 00000043C75C 0 ]ARVs@
000000039DE1 00000043C7E1 0 Hr;,6
000000039E71 00000043C871 0 lU8G"
000000039E9C 00000043C89C 0 T*nZ_
000000039F73 00000043C973 0 {"fA4
000000039F83 00000043C983 0 >[BV;
000000039FE5 00000043C9E5 0 G;q~,
00000003A07B 00000043CA7B 0 ?OqSB
00000003A1A6 00000043CBA6 0 <kA2)
00000003A1DC 00000043CBDC 0 SLCE\
00000003A218 00000043CC18 0 N]SV8]
00000003A26C 00000043CC6C 0 gaPc
File pos Mem pos ID Text
======== ======= == ====
00000003A286 00000043CC86 0 YoBC!
00000003A306 00000043CD06 0 >teSl
00000003A34B 00000043CD4B 0 NcbBb.rnK>
00000003A420 00000043CE20 0 $QYlj
00000003A449 00000043CE49 0 Z9UtX
00000003A48E 00000043CE8E 0 M9ibyRjhSU
00000003A4AA 00000043CEAA 0 qiQolj)I
00000003A4F9 00000043CEF9 0 -S#ycI,
00000003A580 00000043CF80 0 CleyDa
00000003A5A7 00000043CFA7 0 Yb92$N
00000003A6E4 00000043D0E4 0 _5I"M
00000003A6EE 00000043D0EE 0 -uQ*y
00000003A739 00000043D139 0 \]1qU
00000003A74A 00000043D14A 0 ojVK9Y
00000003A7A0 00000043D1A0 0 <:ON'
00000003A86E 00000043D26E 0 \4~HT
00000003A8D5 00000043D2D5 0 rYtmEjoW
00000003A991 00000043D391 0 n"J%LZ
00000003A9E3 00000043D3E3 0 pakJ6cY
00000003AA31 00000043D431 0 aZR<g
00000003AA5D 00000043D45D 0 SK6eY
00000003AA80 00000043D480 0 bZZ+|XV[Y
00000003AA9A 00000043D49A 0 $wsQ7
00000003AAF7 00000043D4F7 0 ]9+ERt
00000003AB71 00000043D571 0 _B(Wnl
00000003AC3F 00000043D63F 0 c\(N#bZ
00000003AC52 00000043D652 0 |HA#Py
00000003ADB0 00000043D7B0 0 \Yk@C
00000003ADD3 00000043D7D3 0 0{Q!Z
00000003AF2C 00000043D92C 0 Q%ixc
00000003AF3A 00000043D93A 0 j7Ohw
00000003AFA5 00000043D9A5 0 cL!l[
00000003AFD9 00000043D9D9 0 _0?To
00000003B05F 00000043DA5F 0 R:qXs
00000003B0A5 00000043DAA5 0 a#qXI
00000003B119 00000043DB19 0 9neAR
00000003B14E 00000043DB4E 0 5?shR
00000003B1A1 00000043DBA1 0 RrH\u$
00000003B26C 00000043DC6C 0 :Kda4
00000003B36C 00000043DD6C 0 W~ceu
00000003B381 00000043DD81 0 U R\
00000003B596 00000043DF96 0 <jCOA
00000003B5E6 00000043DFE6 0 e4Q\8
00000003B621 00000043E021 0 qZ|Iy[5
00000003B678 00000043E078 0 fvO{1
00000003B6A5 00000043E0A5 0 g:8 Oe"
00000003B6F3 00000043E0F3 0 a[sQ
00000003B794 00000043E194 0 MviU;
00000003B811 00000043E211 0 ({M,l
00000003B8D0 00000043E2D0 0 B{R:\
00000003B904 00000043E304 0 b[7XRO
00000003B936 00000043E336 0 hLklZ
00000003B962 00000043E362 0 e_"0U
00000003B970 00000043E370 0 lEK]S
00000003BA4B 00000043E44B 0 l7_U7MrlZ
00000003BACE 00000043E4CE 0 9P]a,_
00000003BB77 00000043E577 0 +$qNX
00000003BC9A 00000043E69A 0 w]%1O
00000003BD21 00000043E721 0 Oj0TKZ
00000003BD57 00000043E757 0 h*]HVR
File pos Mem pos ID Text
======== ======= == ====
00000003BEE9 00000043E8E9 0 Q ={J
00000003C082 00000043EA82 0 58{Tl[
00000003C161 00000043EB61 0 jM7{m
00000003C1B7 00000043EBB7 0 H$|Yl
00000003C29F 00000043EC9F 0 cjkOpY
00000003C386 00000043ED86 0 ~!t[X
00000003C3A5 00000043EDA5 0 MkkD)
00000003C40C 00000043EE0C 0 1S_&Y
00000003C461 00000043EE61 0 i!Ox(
00000003C50D 00000043EF0D 0 uMKjJ
00000003C55D 00000043EF5D 0 qPjSl"
00000003C5DF 00000043EFDF 0 ~%)jKLP\
00000003C651 00000043F051 0 b)MMTv
00000003C706 00000043F106 0 [i6IX
00000003C728 00000043F128 0 jO$lU
00000003C766 00000043F166 0 K:<14
00000003C874 00000043F274 0 \L,Ix
00000003C8A6 00000043F2A6 0 yf!%F
00000003C8E2 00000043F2E2 0 iq|\Z
00000003C9CD 00000043F3CD 0 YG 7+T\l0
00000003CAD5 00000043F4D5 0 m['}YK
00000003CAFF 00000043F4FF 0 (!YcvF+
00000003CCDA 00000043F6DA 0 _CoSY8
00000003CD16 00000043F716 0 2VO\,
00000003CD58 00000043F758 0 -QDZYD
00000003CDAB 00000043F7AB 0 DToYK0
00000003CE15 00000043F815 0 |3rn>
00000003CF04 00000043F904 0 sG2Y+w
00000003CFFB 00000043F9FB 0 -LgY;
00000003D131 00000043FB31 0 s_}Y93
00000003D170 00000043FB70 0 WYM S
00000003D181 00000043FB81 0 k~YnR
00000003D1FA 00000043FBFA 0 Y+j#zm
00000003D252 00000043FC52 0 7#/Yk
00000003D274 00000043FC74 0 x6(U]GZ2
00000003D29C 00000043FC9C 0 1XRJ-
00000003D444 00000043FE44 0 @=XYk
00000003D4D5 00000043FED5 0 fF5jdY
00000003D51F 00000043FF1F 0 ad-Mm
00000003D539 00000043FF39 0 cw.a$
00000003D60D 00000044000D 0 'SW7[
00000003D660 000000440060 0 =!%Y=
00000003D6C8 0000004400C8 0 lh,1XM
00000003D776 000000440176 0 ?ohu-
00000003D7F8 0000004401F8 0 bB"gx
00000003D8A1 0000004402A1 0 nvmqD
00000003D8CC 0000004402CC 0 +Z1 Z.
00000003DB7B 00000044057B 0 CryptAcquireContextA
00000003DC13 000000440613 0 y]~ZO
00000003DD46 000000440746 0 WFSStartUp
00000003DE2D 00000044082D 0 ;EsN-V
00000003E025 000000440A25 0 B2Zmu
00000003E062 000000440A62 0 ,.YpH
00000003E0D7 000000440AD7 0 o6PhP!
00000003E19D 000000440B9D 0 CloseHandle
00000003E281 000000440C81 0 SetFocus
00000003E2D8 000000440CD8 0 WFSGetInfo
00000003E371 000000440D71 0 comctl32.dll
00000003E3C2 000000440DC2 0 @\oGD
00000003E472 000000440E72 0 WFSExecute
File pos Mem pos ID Text
======== ======= == ====
00000003E609 000000441009 0 A debugger has been found running in your system.
00000003E63B 00000044103B 0 Please, unload it from memory and restart your program.
00000003E673 000000441073 0 advapi32.dll
00000003E6F7 0000004410F7 0 PathRemoveFileSpecA
00000003E74B 00000044114B 0 uxm@F
00000003E7CF 0000004411CF 0 SetEndOfFile
00000003E85E 00000044125E 0 WinExec
00000003E870 000000441270 0 shlwapi.dll
00000003E87E 00000044127E 0 lstrcmpiA
00000003EA0C 00000044140C 0 CryptDestroyHash
00000003EADE 0000004414DE 0 RtlUnwind
00000003EB47 000000441547 0 EWD4?
00000003EC37 000000441637 0 (lD4~
00000003EC73 000000441673 0 +SD4
00000003ECD5 0000004416D5 0 VerSetConditionMask
00000003ED57 000000441757 0 U |r%
00000003ED95 000000441795 0 ZDx |$t
00000003EE06 000000441806 0 h~/W
00000003F2D2 000000441CD2 0 5h:J6
00000003F5FC 000000441FFC 0 D$$>:WP
00000003FC63 000000442663 0 D$<hN
0000000410A2 000000443AA2 0 T$0h&
000000041115 000000443B15 0 4UAOZ
0000000411D9 000000443BD9 0 l$4f9
000000041626 000000444026 0 t$ph!Y=O
000000041841 000000444241 0 t$DhO
000000041A35 000000445035 0 0\2i2M8
000000041A47 000000445047 0 ;W=_=
000000041A81 000000445081 0 8Q;%?
000000041A97 000000445097 0 8o9n<0>
000000041AAF 0000004450AF 0 6z6R8
000000042008 0000016E2208 0 msxfs.dll
000000042014 0000016E2214 0 WFSCleanUp
000000042021 0000016E2221 0 WFSOpen
00000004202B 0000016E222B 0 WFSGetInfo
000000042038 0000016E2238 0 WFSExecute
000000042045 0000016E2245 0 WFSAsyncClose
000000042055 0000016E2255 0 WFSAsyncClose
000000042065 0000016E2265 0 WFSFreeResult
000000042075 0000016E2275 0 WFSCancelBlockingCall
00000004208D 0000016E228D 0 WFSCancelBlockingCall
0000000420A5 0000016E22A5 0 WFSStartUp
0000000420B0 0000016E22B0 0 advapi32.dll
0000000420BF 0000016E22BF 0 CryptReleaseContext
0000000420D5 0000016E22D5 0 CryptHashData
0000000420E5 0000016E22E5 0 CryptGetHashParam
0000000420F9 0000016E22F9 0 CryptDestroyHash
00000004210C 0000016E230C 0 CryptCreateHash
00000004211E 0000016E231E 0 CryptAcquireContextA
000000042133 0000016E2333 0 comctl32.dll
000000042142 0000016E2342 0 InitCommonControls
000000042155 0000016E2355 0 kernel32.dll
000000042164 0000016E2364 0 CloseHandle
000000042172 0000016E2372 0 CopyFileA
00000004217E 0000016E237E 0 CreateFileA
00000004218C 0000016E238C 0 ExitProcess
00000004219A 0000016E239A 0 GetFileSize
0000000421A8 0000016E23A8 0 GetModuleFileNameA
0000000421BD 0000016E23BD 0 GetModuleHandleA
0000000421D0 0000016E23D0 0 IsBadWritePtr
File pos Mem pos ID Text
======== ======= == ====
0000000421E0 0000016E23E0 0 LocalAlloc
0000000421ED 0000016E23ED 0 LocalFree
0000000421F9 0000016E23F9 0 LocalSize
000000042205 0000016E2405 0 MoveFileA
000000042211 0000016E2411 0 ReadFile
00000004221C 0000016E241C 0 SetEndOfFile
00000004222B 0000016E242B 0 SetFilePointer
00000004223C 0000016E243C 0 WinExec
000000042246 0000016E2446 0 WriteFile
000000042252 0000016E2452 0 lstrcatA
00000004225D 0000016E245D 0 lstrcmpiA
000000042269 0000016E2469 0 lstrcpyA
000000042274 0000016E2474 0 lstrlenA
00000004227D 0000016E247D 0 ntdll.dll
000000042289 0000016E2489 0 RtlCaptureStackBackTrace
0000000422A2 0000016E24A2 0 kernel32.dll
0000000422B1 0000016E24B1 0 RtlMoveMemory
0000000422BF 0000016E24BF 0 ntdll.dll
0000000422CB 0000016E24CB 0 RtlUnwind
0000000422D5 0000016E24D5 0 kernel32.dll
0000000422E4 0000016E24E4 0 RtlZeroMemory
0000000422F4 0000016E24F4 0 VerSetConditionMask
000000042308 0000016E2508 0 ntdll.dll
000000042314 0000016E2514 0 RtlFillMemory
000000042322 0000016E2522 0 shlwapi.dll
000000042330 0000016E2530 0 PathAddBackslashA
000000042344 0000016E2544 0 PathRemoveFileSpecA
00000004235A 0000016E255A 0 PathFileExistsA
00000004236A 0000016E256A 0 user32.dll
000000042377 0000016E2577 0 SetFocus
000000042382 0000016E2582 0 GetDlgItem
00000004238F 0000016E258F 0 IsWindow
00000004239A 0000016E259A 0 DialogBoxParamA
0000000423AC 0000016E25AC 0 AnimateWindow
0000000423BC 0000016E25BC 0 wsprintfA
0000000423C8 0000016E25C8 0 MessageBoxA
0000000423D6 0000016E25D6 0 SendDlgItemMessageA
0000000423EC 0000016E25EC 0 EndDialog
0000000423F8 0000016E25F8 0 SendMessageA
000000042407 0000016E2607 0 SetWindowTextA
000000042418 0000016E2618 0 GetWindowTextLengthA
000000004F6A 00000040676A 0 VS_VERSION_INFO
000000004FC6 0000004067C6 0 StringFileInfo
000000004FEA 0000004067EA 0 040904E3
000000005002 000000406802 0 FileVersion
00000000501C 00000040681C 0 1.0.0.0
000000005032 000000406832 0 ProductVersion
000000005050 000000406850 0 1.0.0.0
000000005066 000000406866 0 CompanyName
000000005080 000000406880 0 Sanctions Group
0000000050A6 0000004068A6 0 FileDescription
0000000050C8 0000004068C8 0 Project Alice
0000000050EA 0000004068EA 0 InternalName
000000005104 000000406904 0 Sanctions
00000000511E 00000040691E 0 ProductName
000000005138 000000406938 0 Sanctions
000000005152 000000406952 0 LegalCopyright
000000005170 000000406970 0 Sanctions group
000000005196 000000406996 0 VarFileInfo
0000000051B6 0000004069B6 0 Translation
File pos Mem pos ID Text
======== ======= == ====
0000000054A6 000000406CA6 0 Operator panel
0000000054CB 000000406CCB 0 Times New Roman
000000005508 000000406D08 0 Dispenser
000000005538 000000406D38 0 SysListView32
000000005594 000000406D94 0 Dispense panel
0000000055D0 000000406DD0 0 Input cassette ID here :
000000005622 000000406E22 0 Input PIN-code for access !
000000005661 000000406E61 0 MS Sans Serif
000000005698 000000406E98 0 Authorize yourself
0000000056DC 000000406EDC 0 Terminal ID
000000005734 000000406F34 0 Your pin-code
000000005774 000000406F74 0 lation