SrTasks.exe

info
MZ
PE
resources
strings
imports
exports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	SrTasks.exe
size	6726144 (0x66a200)
md5	93b6bb09f8beec1bdf3653a9a7e7a80f

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x50
blocks_in_file	2
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0xf
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0x1a
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0x100

DOS stub

00000000: ba 10 00 0e 1f b4 09 cd  21 b8 01 4c cd 21 90 90  |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f  67 72 61 6d 20 6d 75 73  |This program mus|
00000020: 74 20 62 65 20 72 75 6e  20 75 6e 64 65 72 20 57  |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37  00 00 00 00 00 00 00 00  |in32..$7........|
00000040: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  |................|
*
000000c0:

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	0xd
TimeDateStamp	0x53c47db8
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x818e
Magic	0x10b
LinkerVersion	2.25
SizeOfCode	0x16da00
SizeOfInitializedData	0x582c00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x7b142
BaseOfCode	0x1000
BaseOfData	0x170000
ImageBase	0x10000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.0
ImageVersion	0.0
SubsystemVersion	5.0
Reserved1	0
SizeOfImage	0xa53000
SizeOfHeaders	0x600
CheckSum	0
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x4000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

Enigma Protector 1.1X-1.3X (Sukhov Vladimir & Serge N. Markin)

Sections

name	va	vsize	raw size	flags
	0x1000	0x16d000	0x87000	RWX IDATA
	0x16e000	0x2000	0xc00	RWX IDATA
	0x170000	0xc000	0x5200	RWX IDATA
	0x17c000	0x6000	0	RW-
	0x182000	0x4000	0x200	RWX IDATA
	0x186000	0x1000	0x200	RWX IDATA
	0x187000	0x1000	0	RW-
	0x188000	0x1000	0	RWX IDATA
	0x189000	0x1f000	0	RWX IDATA
	0x1a8000	0x555000	0x4b4200	RWX IDATA
.rsrc	0x6fd000	0x18000	0x18000	RWX IDATA
	0x715000	0x258000	0x2b400	RWX IDATA
.data��	0x96d000	0xe6000	0xe5400	RWX IDATA

Data Directory

type	va	size
EXPORT	0x96d048	0xc93
IMPORT	0x96dcdc	0x368
RESOURCE	0x6fd000	0x17f04
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x96d028	0x10
DEBUG	0	0
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0x96d000	0x18
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0	0
Delay_IAT	0	0
CLR_Header	0	0

TLS

raw start	raw end	index	callbks	zero fill	flags
0x197000	0x19704c	0x97d018	0x97d020	0	0

show previews

type	name	size
EXECUTAVEL	WINDOWS	15360
CURSOR	#1	308
CURSOR	#2	308
CURSOR	#3	308
CURSOR	#4	308
CURSOR	#5	308
CURSOR	#6	308
CURSOR	#7	308
ICON	#1	67624
STRING	#4070	1344
STRING	#4071	2888
STRING	#4072	1432
STRING	#4073	980
STRING	#4074	1132
STRING	#4075	800
STRING	#4076	1156
STRING	#4077	908
STRING	#4078	920
STRING	#4079	684
STRING	#4080	1044
STRING	#4081	556
STRING	#4082	200
STRING	#4083	280
STRING	#4084	1072
STRING	#4085	1012
STRING	#4086	872
STRING	#4087	1452
STRING	#4088	900
STRING	#4089	968
STRING	#4090	944
STRING	#4091	204
STRING	#4092	176
STRING	#4093	664
STRING	#4094	1132
STRING	#4095	844
STRING	#4096	692
RCDATA	CHARTABLE	33512
RCDATA	DVCLAL	16
RCDATA	PACKAGEINFO	2184
RCDATA	TEXECUTAVEL	1008
RCDATA	TFORMAGUARDE	1040514
RCDATA	TFORMBANRI	152600
RCDATA	TFORMBB	413070
RCDATA	TFORMBLOQUEIO	791052
RCDATA	TFORMBRA	591754
RCDATA	TFORMBRB	140876
RCDATA	TFORMCEF	188895
RCDATA	TFORMCITI	140623
RCDATA	TFORMHSBC	438779
RCDATA	TFORMITA	476633
RCDATA	TFORMSAN	724126
RCDATA	TFORMSIC	203533
RCDATA	TFORMSICRE	134341
GROUP_CURSOR	#32761	20
GROUP_CURSOR	#32762	20
GROUP_CURSOR	#32763	20
GROUP_CURSOR	#32764	20
GROUP_CURSOR	#32765	20
GROUP_CURSOR	#32766	20
GROUP_CURSOR	#32767	20
GROUP_ICON	MAINICON	20
VERSION	#1	644
MANIFEST	#1	850

id	lang	string
65104	0	Some operation could not be performed because the system is out of resources. Close some windows and try again.
65105	0	Setting bit transparency color is not allowed for png images containing alpha value for each pixel (COLOR_RGBALPHA and COLOR_GRAYSCALEALPHA)
65106	0	This operation is not valid because the current image contains no valid header.
65107	0	The new size provided for image resizing is invalid.
65108	0	The "Portable Network Graphics" could not be created because invalid image type parameters have being provided.
65109	0	OLE error %.8x
65110	0	Method '%s' not supported by automation object
65111	0	Variant does not reference an automation object
65112	0	Dispatch methods do not support more than 64 parameters
65120	0	This "Portable Network Graphics" image is invalid because it has missing image parts.
65121	0	Could not decompress the image because it contains invalid compressed data. Description:
65122	0	The "Portable Network Graphics" image contains an invalid palette.
65123	0	The file being read is not a valid "Portable Network Graphics" image because it contains an invalid header. This file may be corrupted, try obtaining it again
65124	0	This "Portable Network Graphics" image is not supported or it might be invalid. (IHDR chunk is not the first)
65125	0	This "Portable Network Graphics" image is not supported because either it's width or height exceeds the maximum size, which is 65535 pixels length.
65126	0	There is no such palette entry.
65127	0	This "Portable Network Graphics" image contains an unknown critical part which could not be decoded.
65128	0	This "Portable Network Graphics" image is encoded with an unknown compression scheme which could not be decoded.
65129	0	This "Portable Network Graphics" image uses an unknown interlace scheme which could not be decoded.
65130	0	The chunks must be compatible to be assigned.
65131	0	This "Portable Network Graphics" image is invalid because the decoder found an unexpected end of the file.
65132	0	This "Portable Network Graphics" image contains no data.
65133	0	The program tried to add a existent critical chunk to the current image which is not allowed.
65134	0	It's not allowed to add a new chunk because the current image is invalid.
65135	0	The png image could not be loaded from the resource ID.
65136	0	Could not load root certificate.
65137	0	Could not load certificate.
65138	0	Could not load key, check password.
65139	0	Error geting SSL method.
65140	0	Error setting File Descriptor for SSL
65141	0	Error binding data to SSL socket.
65142	0	EOF was observed that violates the protocol
65143	0	Mode has not been set.
65144	0	Could not load SSL library.
65145	0	SSL status: "%s"
65146	0	Unsupported object type. You can assign only one of the following types or their descendants: TStrings, TStream.
65147	0	Protocol field is empty
65148	0	Host field is empty
65149	0	Unsupported operation.
65150	0	This "Portable Network Graphics" image is not valid because it contains invalid pieces of data (crc error)
65151	0	The "Portable Network Graphics" image could not be loaded because one of its main piece of data (ihdr) might be corrupted
65152	0	Reply Code is not valid: %s
65153	0	Reply Code already exists: %s
65154	0	IOHandler value is not valid
65155	0	Extension is empty
65156	0	Mimetype is empty
65157	0	Extension already exits
65158	0	Chunk Started
65159	0	Not Acceptable
65160	0	Unknown Protocol
65161	0	Request method requires HTTP version 1.1
65162	0	This authentication method is already registered with class name %s.
65163	0	Unsupported hash algorithm. This implementation supports only MD5 encoding.
65164	0	Error accepting connection with SSL.
65165	0	Error connecting with SSL.
65166	0	SetCipher failed.
65167	0	Error creating SSL context.
65168	0	Read timed out.
65169	0	Max line read attempts exceeded.
65170	0	Max line length exceeded.
65171	0	Set LargeStream to True to send streams greater than 2GB
65172	0	Data is too large for stream
65173	0	Connect timed out.
65174	0	Cannot call TerminateAndWaitFor on FreeAndTerminate threads
65175	0	Already connected.
65176	0	Maximum number of line allowed exceeded
65177	0	The IOHandler already has a different Intercept assigned
65178	0	Transparent proxy cannot bind.
65179	0	UDP Not supported by this proxy.
65180	0	Buffer terminator must be specified.
65181	0	Buffer start position is invalid.
65182	0	Cannot change a connected IOHandler.
65183	0	No IOHandler of type %s is installed.
65184	0	Authentication error to socks server.
65185	0	General SOCKS server failure.
65186	0	Connection not allowed by ruleset.
65187	0	Network unreachable.
65188	0	Host unreachable.
65189	0	Connection refused.
65190	0	TTL expired.
65191	0	Command not supported.
65192	0	Address type not supported.
65193	0	%d: Circular links are not allowed
65194	0	Not enough data in buffer. (%d/%d)
65195	0	Too much data in buffer.
65196	0	File "%s" not found
65197	0	Not Connected
65198	0	Object type not supported.
65199	0	No data to read.
65200	0	Could not bind socket. Address and port are already in use.
65201	0	Invalid Port Range (%d - %d)
65202	0	%s is not a valid service.
65203	0	IPv6 unavailable
65204	0	%s is not a valid IPv6 address
65205	0	The requested IPVersion / Address family is not supported.
65206	0	Not all bytes sent.
65207	0	Package Size Too Big.
65208	0	Set Size Exceeded.
65209	0	UDP is not support in this SOCKS version.
65210	0	Request rejected or failed.
65211	0	Request rejected because SOCKS server cannot connect.
65212	0	Request rejected because the client program and identd report different user-ids.
65213	0	Unknown socks error.
65214	0	Socks server did not respond.
65215	0	Invalid socks authentication method.
65216	0	Cannot send or receive after socket is closed.
65217	0	Too many references, cannot splice.
65218	0	Connection timed out.
65219	0	Connection refused.
65220	0	Too many levels of symbolic links.
65221	0	File name too long.
65222	0	Host is down.
65223	0	No route to host.
65224	0	Directory not empty
65225	0	Host not found.
65226	0	Stack Class is undefined.
65227	0	Stack already created.
65228	0	Only one TIdAntiFreeze can exist per application.
65229	0	Cannot change IPVersion when connected
65230	0	Can not bind in port range (%d - %d)
65231	0	Connection Closed Gracefully.
65232	0	Bad protocol option.
65233	0	Protocol not supported.
65234	0	Socket type not supported.
65235	0	Operation not supported on socket.
65236	0	Protocol family not supported.
65237	0	Address family not supported by protocol family.
65238	0	Address already in use.
65239	0	Cannot assign requested address.
65240	0	Network is down.
65241	0	Network is unreachable.
65242	0	Net dropped connection or reset.
65243	0	Software caused connection abort.
65244	0	Connection reset by peer.
65245	0	No buffer space available.
65246	0	Socket is already connected.
65247	0	Socket is not connected.
65248	0	Disconnected.
65249	0	%s
65250	0	Socket Error # %d %s
65251	0	Interrupted system call.
65252	0	Bad file number.
65253	0	Access denied.
65254	0	Buffer fault.
65255	0	Invalid argument.
65256	0	Too many open files.
65257	0	Operation would block.
65258	0	Operation now in progress.
65259	0	Operation already in progress.
65260	0	Socket operation on non-socket.
65261	0	Destination address required.
65262	0	Message too long.
65263	0	Protocol wrong type for socket.
65264	0	Menu '%s' is already being used by another form
65265	0	Docked control must have a name
65266	0	Error removing control from dock tree
65267	0	- Dock zone not found
65268	0	- Dock zone has no control
65269	0	Error loading dock zone from the stream. Expecting version %d, but found %d.
65270	0	Cannot change the size of a JPEG image
65271	0	JPEG error #%d
65272	0	JPEG Image File
65273	0	Failed attempting to retrieve time zone information.
65274	0	Error on call to Winsock2 library function %s
65275	0	Error on loading Winsock2 library (%s)
65276	0	Resolving hostname %s.
65277	0	Connecting to %s.
65278	0	Connected.
65279	0	Disconnecting.
65280	0	Up
65281	0	Right
65282	0	Down
65283	0	Ins
65284	0	Del
65285	0	Shift+
65286	0	Ctrl+
65287	0	Alt+
65288	0	Value must be between %d and %d
65289	0	All
65290	0	Invalid clipboard format
65291	0	Clipboard does not support Icons
65292	0	Cannot open clipboard: %s
65293	0	Text exceeds memo capacity
65294	0	Operation not supported on selected printer
65295	0	There is no default printer currently selected
65296	0	&Retry
65297	0	&Ignore
65298	0	&All
65299	0	N&o to All
65300	0	Yes to &All
65301	0	&Close
65302	0	BkSp
65303	0	Tab
65304	0	Esc
65305	0	Enter
65306	0	Space
65307	0	PgUp
65308	0	PgDn
65309	0	End
65310	0	Home
65311	0	Left
65312	0	Cannot drag a form
65313	0	Metafiles
65314	0	Enhanced Metafiles
65315	0	Icons
65316	0	Bitmaps
65317	0	TIFF Images
65318	0	Warning
65319	0	Error
65320	0	Information
65321	0	Confirm
65322	0	&Yes
65323	0	&No
65324	0	OK
65325	0	Cancel
65326	0	&Help
65327	0	&Abort
65328	0	Cannot hide an MDI Child Form
65329	0	Cannot change Visible in OnShow or OnHide
65330	0	Cannot make a visible window modal
65331	0	Menu index out of range
65332	0	Menu inserted twice
65333	0	Sub-menu is not in menu
65334	0	Not enough timers available
65335	0	Printer is not currently printing
65336	0	Printing in progress
65337	0	Printer index out of range
65338	0	Printer selected is not valid
65339	0	%s on %s
65340	0	GroupIndex cannot be less than a previous menu item's GroupIndex
65341	0	Cannot create form. No MDI forms are currently active
65342	0	Can only modify an image if it contains a bitmap
65343	0	A control cannot have itself as its parent
65344	0	Cannot change the size of a WIC Image
65345	0	Unknown picture file extension (.%s)
65346	0	Unsupported clipboard format
65347	0	Out of system resources
65348	0	Canvas does not allow drawing
65349	0	Invalid image size
65350	0	Invalid ImageList
65351	0	Unable to Replace Image
65352	0	Invalid ImageList Index
65353	0	Failed to read ImageList data from stream
65354	0	Failed to write ImageList data to stream
65355	0	Error creating window device context
65356	0	Error creating window class
65357	0	Cannot focus a disabled or invisible window
65358	0	Control '%s' has no parent window
65359	0	Parent given is not a parent of '%s'
65360	0	''%s'' is not a valid integer value
65361	0	Invalid argument to time encode
65362	0	No context-sensitive help installed
65363	0	No help found for context
65364	0	Unable to open Index
65365	0	Unable to open Search
65366	0	Unable to find a Table of Contents
65367	0	No topic-based help system installed
65368	0	No help found for %s
65369	0	Bitmap image is not valid
65370	0	Icon image is not valid
65371	0	Metafile is not valid
65372	0	Invalid pixel format
65373	0	Invalid image
65374	0	Scan line index out of range
65375	0	Cannot change the size of an icon
65376	0	Cannot call Start on a running or suspended thread
65377	0	Parameter %s cannot be a negative value
65378	0	Input buffer exceeded for %s = %d, %s = %d
65379	0	The specified file was not found
65380	0	Windows socket error: %s (%d), on API '%s'
65381	0	Asynchronous socket error %d
65382	0	No address specified
65383	0	Can't listen on an open socket
65384	0	Can't create new socket
65385	0	Socket already open
65386	0	Can't change value while socket is active
65387	0	No help viewer that supports filters
65388	0	String index out of range (%d). Must be >= 1 and <= %d
65389	0	High surrogate char without a following low surrogate char at index: %d. Check that the string is encoded properly
65390	0	Low surrogate char without a preceding high surrogate char at index: %d. Check that the string is encoded properly
65391	0	Invalid Timeout value: %s
65392	0	Error reading %s%s%s: %s
65393	0	Stream read error
65394	0	Property is read-only
65395	0	Failed to create key %s
65396	0	Failed to get data for '%s'
65397	0	Failed to set data for '%s'
65398	0	Resource %s not found
65399	0	%s.Seek not implemented
65400	0	Operation not allowed on sorted list
65401	0	%s not in a class registration group
65402	0	Property %s does not exist
65403	0	Stream write error
65404	0	Thread creation error: %s
65405	0	Thread Error: %s (%d)
65406	0	Cannot terminate an externally created thread
65407	0	Cannot wait for an externally created thread
65408	0	A component named %s already exists
65409	0	String list does not allow duplicates
65410	0	Cannot create file "%s". %s
65411	0	Cannot open file "%s". %s
65412	0	Invalid file name - %s
65413	0	Invalid stream format
65414	0	''%s'' is not a valid component name
65415	0	Invalid property value
65416	0	Invalid property path
65417	0	Invalid property value
65418	0	Invalid data type for '%s'
65419	0	List capacity out of bounds (%d)
65420	0	List count out of bounds (%d)
65421	0	List index out of bounds (%d)
65422	0	Out of memory while expanding memory stream
65423	0	%s has not been registered as a COM class
65424	0	Saturday
65425	0	Invalid source array
65426	0	Invalid destination array
65427	0	Character index out of bounds (%d)
65428	0	Start index out of bounds (%d)
65429	0	Invalid count (%d)
65430	0	Invalid destination index (%d)
65431	0	Invalid code page
65432	0	Ancestor for '%s' not found
65433	0	Cannot assign a %s to a %s
65434	0	Bits index out of range
65435	0	Can't write to a read-only resource stream
65436	0	CheckSynchronize called from thread $%x, which is NOT the main thread
65437	0	Class %s not found
65438	0	A class named %s already exists
65439	0	List does not allow duplicates ($0%x)
65440	0	October
65441	0	November
65442	0	December
65443	0	Sun
65444	0	Mon
65445	0	Tue
65446	0	Wed
65447	0	Thu
65448	0	Fri
65449	0	Sat
65450	0	Sunday
65451	0	Monday
65452	0	Tuesday
65453	0	Wednesday
65454	0	Thursday
65455	0	Friday
65456	0	Jun
65457	0	Jul
65458	0	Aug
65459	0	Sep
65460	0	Oct
65461	0	Nov
65462	0	Dec
65463	0	January
65464	0	February
65465	0	March
65466	0	April
65467	0	May
65468	0	June
65469	0	July
65470	0	August
65471	0	September
65472	0	External exception %x
65473	0	Assertion failed
65474	0	Interface not supported
65475	0	Exception in safecall method
65476	0	Object lock not owned
65477	0	Monitor support function not initialized
65478	0	%s (%s, line %d)
65479	0	Abstract Error
65480	0	Access violation at address %p in module '%s'. %s of address %p
65481	0	System Error. Code: %d. %s
65482	0	A call to an OS function failed
65483	0	Jan
65484	0	Feb
65485	0	Mar
65486	0	Apr
65487	0	May
65488	0	Variant or safe array is locked
65489	0	Invalid variant type conversion
65490	0	Invalid variant operation
65491	0	Invalid NULL variant operation
65492	0	Invalid variant operation (%s%.8x) %s
65493	0	Custom variant type (%s%.4x) is out of range
65494	0	Custom variant type (%s%.4x) already used by %s
65495	0	Custom variant type (%s%.4x) is not usable
65496	0	Too many custom variant types have been registered
65497	0	Could not convert variant of type (%s) into type (%s)
65498	0	Overflow while converting variant of type (%s) into type (%s)
65499	0	Variant overflow
65500	0	Invalid argument
65501	0	Invalid variant type
65502	0	Operation not supported
65503	0	Unexpected variant error
65504	0	Invalid class typecast
65505	0	Access violation at address %p. %s of address %p
65506	0	Access violation
65507	0	Stack overflow
65508	0	Control-C hit
65509	0	Privileged instruction
65510	0	Operation aborted
65511	0	Exception %s in module %s at %p. %s%s
65512	0	Application Error
65513	0	Format '%s' invalid or incompatible with argument
65514	0	No argument for format '%s'
65515	0	Variant method calls not supported
65516	0	Read
65517	0	Write
65518	0	Error creating variant or safe array
65519	0	Variant or safe array index out of bounds
65520	0	Invalid argument to date encode
65521	0	Out of memory
65522	0	I/O error %d
65523	0	Too many open files
65524	0	File access denied
65525	0	Read beyond end of file
65526	0	Disk full
65527	0	Invalid numeric input
65528	0	Division by zero
65529	0	Range check error
65530	0	Integer overflow
65531	0	Invalid floating point operation
65532	0	Floating point division by zero
65533	0	Floating point overflow
65534	0	Floating point underflow
65535	0	Invalid pointer operation

module_name	hint	ord	function_name
kernel32.dll			GetModuleHandleA
kernel32.dll			GetProcAddress
kernel32.dll			ExitProcess
kernel32.dll			LoadLibraryA
user32.dll			MessageBoxA
advapi32.dll			RegCloseKey
oleaut32.dll			SysFreeString
gdi32.dll			CreateFontA
shell32.dll			ShellExecuteA
version.dll			GetFileVersionInfoA
msimg32.dll			AlphaBlend
ole32.dll			OleUninitialize
comctl32.dll			InitializeFlatSB
wininet.dll			InternetCheckConnectionW
winspool.drv			OpenPrinterW
wsock32.dll			WSACleanup
winmm.dll			timeEndPeriod

ord

entry_va

function_name

53 fb 13 e3 c5 f2 28 da  15 42 74 70 41 1f 92 3f  |S.....(..BtpA..?|
e7 60 5e 6e 17 60 b8 d9  ee d1 31 6d 7c aa 0d 88  |.`^n.`....1m|...|
6f 80 80 4a ad f2 26 17  d3 f4 fe cd 25 29 8b 63  |o..J..&.....%).c|
8c 91 bc e5 99 41 de 22  b2 e5 b3 67 cf 45 54 24  |.....A."...g.ET$|
86 0c a7 5e 3d 83 72 34  b8 18 51 f4 78 be 2b 7f  |...^=.r4..Q.x.+.|
7f 9a dd e6 7d 7f 40 97  84 2d b8 82 b9 60 f9 f7  |....}.@..-...`..|
9d 11 ae 3f f2 7d 2a 22  53 e1 57 df f5 e9 84 4d  |...?.}*"S.W....M|
3f 52 d1 22 19 36 42 9c  31 fe d5 0b 8e 07 19 ee  |?R.".6B.1.......|
2b 49 10 b2 80 bf 7d 37  29 4a cd a9 0d 38 3d 69  |+I....}7)J...8=i|
bd d1 fb ee fa 83 61 f6  77 76 74 6f 57 c8 62 d8  |......a.wvtoW.b.|
1c b0 9a 1f ce 29 b2 29  b3 10 4b 94 e0 ba 8f 55  |.....).)..K....U|
61 79 17 45 e3 8b 2a d0  09 72 d1 42 d3 b9 19 67  |ay.E..*..r.B...g|
cf 87 70 8f f5 a0 21 16  5f b4 34 05 49 09 49 76  |..p...!._.4.I.Iv|
03 e9 2c c3 c6 73 41 b8  8f 98 fe 3a 73 72 15 34  |..,..sA....:sr.4|
1c 52 07 b4 46 0e 36 7d  8e 7c c6 83 d1 3b cb 15  |.R..F.6}.|...;..|
f1 0a 9e ac cc 68 5c a0  a3 4e e0 32 5d 0f c3 b8  |.....h\..N.2]...|
47 da 29 e1 42 5e 72 43  94 72 10 bc ba f0 0d 5f  |G.).B^rC.r....._|
ef 05 21 e4 52 98 47 de  d5 be 32 28 6a 2f 22 55  |..!.R.G...2(j/"U|
0d 2c f5 0f 9e 82 6b b0  ba 63 f3 80 f6 4c 96 66  |.,....k..c...L.f|
33 48 bc f5 e8 36 e0 2d  a8 db 7e 40 28 f5 c6 4c  |3H...6.-..~@(..L|
9f 97 df d8 48 6f c9 70  3f e0 2a c5 2f f1 87 1f  |....Ho.p?.*./...|
66 87 cd 0f 55 79 1b aa  92 56 29 bf d8 0c d7 c4  |f...Uy...V).....|
a1 af ab 7c 5c 1f 4a 93  53 3f 3e a2 bd 0c 8f 62  |...|\.J.S?>....b|
a5 b8 03 ff 8e 9c fc d8  01 a7 66 13 70 9d 11 ca  |..........f.p...|
2c 4f 74 df 2e 8c bc 8e  1b 99 8e 56 b1 49 f6 ed  |,Ot........V.I..|
84 16 63 3f c2 dd a2 9e  50 0b 3f c6 9a 5b c3 4c  |..c?....P.?..[.L|
c9 92 a9 8a 44 ba 08 39  af cc 4f 3f cf da 95 63  |....D..9..O?...c|
0a 1e 45 e6 51 81 39 45  d4 7e 91 8e b3 77 d2 1e  |..E.Q.9E.~...w..|
7b d8 0c a6 59 ad 23 cf  1e 7a 87 e3 90 77 da 47  |{...Y.#..z...w.G|
ad 93 56 b4 cf cd 04 7b  d5 c6 0f 42 cd aa b5 f6  |..V....{...B....|
b5 c6 b2 05 5b 6e 1b f2  68 07 13 eb 1d 58 c7 03  |....[n..h....X..|
60 7c 95 09 06 0e 5a 54  8e 6b 3c da ad 31 79 71  |`|....ZT.k<..1yq|
60 45 08 1a 6d 0a 12 a5  82 9d a0 25 57 3c f1 e3  |`E..m......%W<..|
81 24 58 eb f1 90 a6 44  2d b6 73 77 cd ca bc 0d  |.$X....D-.sw....|
d6 80 c9 fc e5 91 3c 51  57 2a b3 7f d0 65 83 1b  |......|
cb ad b1 f2 24 39 86 7a  28 a8 a5 ca d5 6e 8c 21  |....$9.z(....n.!|
fb 6f ab 81 b3 0f 48 6a  d7 3a ef 38 e1 64 ff f3  |.o....Hj.:.8.d..|
dd ef 09 82 54 8b 26 7e  6b 6e 89 29 99 87 cd 38  |....T.&~kn.)...8|
95 f3 db 7e 83 70 6b 99  6e 85 70 41 94 a3 f2 ce  |...~.pk.n.pA....|
20 74 3a 14 43 11 35 b5  d8 eb 80 7b 09 8e 97 65  | t:.C.5....{...e|
80 8e f2 71 47 42 1f 50  45 2a 23 8f f6 17 bc e8  |...qGB.PE*#.....|
f1 73 37 ba 29 47 f8 e0  1b d5 fe 6b 5a f0 e8 f2  |.s7.)G.....kZ...|
15 57 4e 7f 92 c2 72 41  c1 81 a8 9d 59 ac e0 3e  |.WN...rA....Y..>|
24 65 43 2a 73 aa cc 26  d0 a9 4f c8 76 9e 50 10  |$eC*s..&..O.v.P.|
1f aa 99 6f 2b 33 8b 86  3d a8 73 0e be d5 7b b0  |...o+3..=.s...{.|
fd 0a f6 bd c1 bf 20 11  8c a5 8f 85 fa 0a f0 d0  |...... .........|
de 29 d7 ad 0d d6 a1 9a  04 82 cb a5 df 8a 39 05  |.)............9.|
39 62 3e 72 e8 0e 75 8e  d6 cd ae b8 3a 2d 84 2c  |9b>r..u.....:-.,|
08 b6 60 4a 64 f8 04 5e  57 b2 cb 4c 27 42 5c e4  |..`Jd..^W..L'B\.|
03 b7 5a ea f1 1f 64 f1  29 e8 74 9d 39 82 54 fb  |..Z...d.).t.9.T.|
c3 7c dc f6 95 e4 11 16  6c a3 64 0e b3 fc ba dc  |.|......l.d.....|
fd 91 de 6b 19 82 95 f0  f3 83 78 91 b2 0a 42 01  |...k......x...B.|
ab e5 4c 0e 37 eb 3f 6a  6d 83 58 1d 5b 3b bc 5f  |..L.7.?jm.X.[;._|
40 bf b4 de ce ca c9 a4  99 eb 29 18 12 48 c1 dd  |@.........)..H..|
d2 a5 ff 89 13 63 16 66  76 42 3d cd a3 04 63 c0  |.....c.fvB=...c.|
54 54 18 d2 b8 8f d3 8d  71 37 c6 d8 7a 45 da 1a  |TT......q7..zE..|
bb ad 9e 09 28 a4 34 7b  97 96 81 98 c9 df 3d 3a  |....(.4{......=:|
38 a6 99 77 ad 6b 99 8b  c5 3b 67 9c c0 8d 28 20  |8..w.k...;g...( |
5e 38 23 d1 a8 0b 49 7d  d7 f8 62 1a bb de 72 e8  |^8#...I}..b...r.|
5d 50 1c a4 bb fc 17 e6  d7 93 f4 53 6f 2f da 40  |]P.........So/.@|
27 c0 da c9 fb f8 19 a4  2f a7 f2 13 1e 91 ba ce  |'......./.......|
a9 2f d9 d3 23 e8 59 48  d7 a0 2c 10 c2 bf b5 ac  |./..#.YH..,.....|
f6 08 68 7e bc d3 7f 8c  8a a4 1c 68 47 0e 66 d0  |..h~.......hG.f.|
78 67 5e 21 58 d3 84 be  ee 85 9d 09 ad 57 11 7e  |xg^!X........W.~|
21 12 c3 1e b8 03 66 35  cc b3 98 22 45 ee 55 b7  |!.....f5..."E.U.|
97 5e 89 4f 03 6a cf bc  38 29 b0 97 d5 90 d9 ad  |.^.O.j..8)......|
6d 28 34 7c f1 f3 cf 05  c8 5f f6 6e d4 51 fe 31  |m(4|....._.n.Q.1|
48 bf 8f c4 02 5a 85 17  c1 38 9c 3d 93 8c 8d 1d  |H....Z...8.=....|
18 d6 5b 12 a0 18 d0 c1  48 f4 9b 9c 6c d7 6b cd  |..[.....H...l.k.|
41 77 fa 89 63 58 04 09  8e 21 6f 9a f4 ee 42 8c  |Aw..cX...!o...B.|
d1 ed 29 f9 2f e4 91 98  09 85 bd 23 31 a7 39 03  |..)./......#1.9.|
ac ba a5 4d 6d 19 be 31  97 18 0a 76 bb df 9e a5  |...Mm..1...v....|
bd 82 e4 f4 3b d1 50 1a  ba e7 67 98 fe 6c 9a 2a  |....;.P...g..l.*|
28 fd c0 5f 97 59 3c 91  c4 13 23 bc 5e 0b de f2  |(.._.Y<...#.^...|
75 eb 28 65 97 5d 5c 3a  05 b3 79 ba 67 52 55 81  |u.(e.]\:..y.gRU.|
c5 fc d0 b7 90 d7 18 8f  f7 cf 43 7b 05 9f d2 e3  |..........C{....|
03 c7 e2 54 4b 07 1b 51  7e 48 a6 6a ac 0b c3 29  |...TK..Q~H.j...)|
0c b5 ad ef 36 57 ff f5  04 cb c7 e4 8d 53 dd ca  |....6W.......S..|
e7 f5 56 6b 90 54 05 1b  b4 c4 76 ab c5 ce d1 25  |..Vk.T....v....%|
f4 6a 84 44 9e 9d b7 f2  ae 4b e1 50 8a 5d f8 df  |.j.D.....K.P.]..|
19 9b 18 fc d5 cf a7 b7  2a 11 44 a7 5f 56 03 61  |........*.D._V.a|
ee a2 d4 96 12 77 16 19  b3 56 97 39 40 79 ad 3e  |.....w...V.9@y.>|
fb 20 14 fa be 04 a3 ac  52 d4 3f ab d7 de 6d a9  |. ......R.?...m.|
db 27 73 6d 0d b2 05 5e  c1 b6 c0 3c a9 e6 1f e3  |.'sm...^...<....|
6f 31 87 fd 21 83 ad e0  97 7f 6b 28 44 2b b9 ae  |o1..!.....k(D+..|
11 08 89 f2 41 23 84 1c  7c fd 0c 1e 73 6b fd b5  |....A#..|...sk..|
c1 bd 06 41 07 e1 8e a0  56 40 9e b0 6b 80 26 06  |...A....V@..k.&.|
59 96 91 f3 91 9f a5 12  7b 7e fa c4 fe 4d 94 7a  |Y.......{~...M.z|
b7 fb 74 a3 af b9 23 9c  df 0e 85 fe c8 aa 85 2a  |..t...#........*|
f2 6a 5d e1 17 02 91 61  48 4f e1 3a 62 59 bd dc  |.j]....aHO.:bY..|
88 63 0e aa 8e a7 5c e8  78 a1 9e ef 8c f4 3b 76  |.c....\.x.....;v|
8f 5c 10 d3 1f 2a 81 90  63 4d ea ae 67 df e7 6b  |.\...*..cM..g..k|
e1 b0 60 7d 48 4b 3f fd  5a 78 3e 84 9a 34 44 2d  |..`}HK?.Zx>..4D-|
55 8c 23 82 2a fa c5 8a  3f 16 12 73 8b b4 1a 9b  |U.#.*...?..s....|
e2 e3 4f e6 b8 4b e4 b7  b2 d4 8b df 89 bb 2c 73  |..O..K........,s|
dd 5c 62 4b eb 5c be 9b  43 0f 2b 01 fe 2e e8 c1  |.\bK.\..C.+.....|
20 41 0f 58 ee 4f 78 56  a0 bb 80 4c a4 67 16 52  | A.X.OxV...L.g.R|
39 72 ed 30 4e 37 e5 78  c9 5e d8 ef a9 2b 82 1c  |9r.0N7.x.^...+..|
a0 53 2c e2 2c 05 3d 7d  3c f5 ed 36 ec 94 b6 b6  |.S,.,.=}<..6....|
e6 b9 3b d7 6c 7b c4 35  23 ee 96 ff 24 09 a5 c7  |..;.l{.5#...$...|
e1 e3 83 41 e6 1d 85 37  8c 12 76 2e 14 25 58 72  |...A...7..v..%Xr|
de 60 11 8b 97 1d f9 4d  91 72 af 14 bb ac a5 c8  |.`.....M.r......|
d2 05 47 cc cb 4d bc ed  8e 61 91 e7 83 7e d9 3a  |..G..M...a...~.:|
8a d9 8d 38 54 11 39 9f  4d 5a 48 32 72 7e 6b 06  |...8T.9.MZH2r~k.|
d8 0b fe 86 b7 4d 5d 72  35 f7 8b 3e 56 8b ab a8  |.....M]r5..>V...|
c7 da 1f 6f 5c 54 49 6c  7f df 53 86 fc 6a 73 4b  |...o\TIl..S..jsK|
ca 8d 84 12 bd da f9 f8  63 b1 82 2b 5c b9 d4 38  |........c..+\..8|
e8 5e 8b 68 99 e4 04 5a  48 fb 9a 5e c6 df cb 47  |.^.h...ZH..^...G|
f4 6a 05 b6 24 b6 37 1a  f3 2a 69 d1 18 fa ed 4c  |.j..$.7..*i....L|
b4 a3 e9 fb 2f c5 58 74  ba 70 bb 2d ea d2 19 8c  |..../.Xt.p.-....|
17 c0 05 60 65 a6 cc d0  b2 c2 09 76 c2 c5 25 2a  |...`e......v..%*|
63 2c a7 a7 71 fd 4a 29  dd bf 28 88 3d bb 93 94  |c,..q.J)..(.=...|
66 f4 59 9e 31 72 88 7f  61 a2 fb 80 46 14 3d f9  |f.Y.1r..a...F.=.|
a5 be 84 8d e6 98 ef 4a  ad 32 25 2d 42 95 06 b7  |.......J.2%-B...|
8b b0 2c a5 68 e6 4b e7  b4 b1 b1 7e 42 62 8a c8  |..,.h.K....~Bb..|
9b 66 95 72 4e a4 74 0d  17 d1 cc f7 33 e1 d0 37  |.f.rN.t.....3..7|
9f df fc 4c 24 d5 09 34  56 9d 6d 1f 0c b4 f8 89  |...L$..4V.m.....|
db 71 43 c1 97 34 16 0e  fe 6e 0b eb fe a3 e8 35  |.qC..4...n.....5|
36 b3 9d 0f ac 15 cb ef  e2 d8 47 38 a9 90 04 10  |6.........G8....|
70 72 48 88 e6 5f 28 48  3c 9c a1 31 46 63 d4 b9  |prH.._(H<..1Fc..|
51 9e 34 0d 80 7b ae 0b  ea 97 29 c2 d7 fe be 15  |Q.4..{....).....|
d7 3f b6 77 95 41 12 21  9a b3 27 11 5e 2c b0 af  |.?.w.A.!..'.^,..|
69 5b 3a 0b 54 e7 e4 d9  f4 d4 d2 db 05 8e cf 37  |i[:.T..........7|
03 f1 f0 e5 30 f7 4d 5c  d6 cd 03 f9 52 8e 2c e6  |....0.M\....R.,.|
6a e4 80 6f 0d 39 b1 15  79 4c d8 c2 56 50 6f f6  |j..o.9..yL..VPo.|
5a e9 b1 cb 76 a6 69 26  a6 ca 73 7f dd 9e 8b 11  |Z...v.i&..s.....|
b4 7c 27 47 c5 56 6e d7  e4 80 a1 dc a1 db 6c b9  |.|'G.Vn.......l.|
b5 c9 04 c7 5d 74 0a 0b  ae 4f 8a 59 73 f3 a6 c5  |....]t...O.Ys...|
1d a5 a4 41 cd 28 87 a3  99 b6 67 b3 73 4a 28 c8  |...A.(....g.sJ(.|
64 77 49 1c 0d 8b e3 fd  8c c1 2d 60 39 aa e8 81  |dwI.......-`9...|
ea 2a c4 b0 a5 99 7e 5c  eb f7 3c f2 0b 39 99 50  |.*....~\..<..9.P|
28 1e 34 ae e3 1d c4 55  cc 4d 14 93 08 63 53 a2  |(.4....U.M...cS.|
d9 16 a4 8e 06 9e e6 49  24 12 01 6b 5b cb 48 63  |.......I$..k[.Hc|
36 2b cd 07 70 59 88 cb  f4 e2 cc 16 6d 40 77 6c  |6+..pY......m@wl|
1a b8 b7 76 d8 29 6b 18  80 97 6d 12 0e a6 54 f5  |...v.)k...m...T.|
3a 51 72 55 78 79 24 7e  7a 35 b8 2f aa eb 7f 06  |:QrUxy$~z5./....|
51 a8 c2 a7 3c 35 c7 d7  32 db 0e ff 7c f4 6f e0  |Q...<5..2...|.o.|
51 87 d2 6a f4 b7 9d ef  c8 ba 0e 49 b6 8f 26 7a  |Q..j.......I..&z|
95 bc e0 05 83 bc cc fc  5e f9 42 71 b7 63 dd e2  |........^.Bq.c..|
0e 08 f2 ba 11 52 0f 07  3f b0 d4 f1 3a dc ba b9  |.....R..?...:...|
73 11 81 18 35 c2 5f 5f  1c ce 3b c6 83 24 7a 9c  |s...5.__..;..$z.|
76 51 2b 62 2e 8c a8 0d  31 15 ea dc 93 08 22 96  |vQ+b....1.....".|
eb 08 65 0b 0b 4c 78 3c  7b fb 03 85 56 ee b2 91  |..e..Lx<{...V...|
04 26 28 1d df ad ad b0  e5 ab 02 e1 d2 c7 d3 c7  |.&(.............|
72 44 a3 ae f3 60 25 34  7b e6 73 56 5b fa 88 2e  |rD...`%4{.sV[...|
a5 8c e9 4e f0 01 72 05  96 fc 9f f8 be 59 db e8  |...N..r......Y..|
ef ae a5 76 13 0e 86 49  12 b8 3b 05 74 09 92 bc  |...v...I..;.t...|
bc ce c4 f9 5c d5 64 7e  74 53 1c 43 d0 7b d9 79  |....\.d~tS.C.{.y|
be 74 2b 79 be 65 d0 e5  28 5f df 82 33 59 f9 6f  |.t+y.e..(_..3Y.o|
20 7c 61 ca 53 7d 01 f7  a2 be a4 03 36 72 02 dc  | |a.S}......6r..|
b0 06 46 73 82 7b 4c d4  9a 8c b6 e4 df b1 7c 5c  |..Fs.{L.......|\|
19 66 bb 0f 39 4f db b0  36 12 3c 9d d0 07 1b 59  |.f..9O..6.<....Y|
08 17 5c c4 1a 69 57 47  3a b4 eb 63 75 5d 6b 7c  |..\..iWG:..cu]k||
66 a4 25 b6 a8 a7 9a 49  3c e5 b7 9f 36 84 82 1b  |f.%....I<...6...|
7f a0 28 71 7b 4b 61 d0  cd 13 7e 5b a4 29 ad ab  |..(q{Ka...~[.)..|
39 90 40 59 6c e4 f8 c9  b2 94 be b5 af bb 26 31  |9.@Yl.........&1|
40 de b8 20 ca 43 ef 69  0c a2 42 4d d0 67 bd ac  |@.. .C.i..BM.g..|
39 c8 06 30 86 69 c6 9a  8c 3e d0 b4 3b fe 8c 8d  |9..0.i...>..;...|
ec 52 6f 1d 64 76 9c 6e  a4 27 de de 10 ed a7 23  |.Ro.dv.n.'.....#|
7e 31 c3 17 2b 9c e4 8b  b2 c6 3e 91 8a 27 ca 09  |~1..+.....>..'..|
97 bf 04 58 d4 0c 13 9f  36 24 ce d6 30 17 0d 9a  |...X....6$..0...|
99 ed 19 92 c1 e8 4b cd  fd d3 2c 68 03 90 8e 5e  |......K...,h...^|
c9 2f 7f 65 e0 33 14 20  57 e4 61 24 af c0 26 7d  |./.e.3. W.a$..&}|
8a 6a f9 c6 e7 bd 04 f6  3e d2 94 77 bd 1b 17 2d  |.j......>..w...-|
7f ec 40 7b 7e 1b 74 79  90 75 ba d5 c1 4c ba 1f  |..@{~.ty.u...L..|
c7 56 ae 7d 6e 8e 2f 03  37 f1 44 21 89 2a 37 f6  |.V.}n./.7.D!.*7.|
28 8a f8 76 d6 f9 1f 97  5e a8 d0 21 4e a1 2a b4  |(..v....^..!N.*.|
3c a2 d4 25 59 d1 fe 4f  9f 26 dc eb e6 a6 59 25  |<..%Y..O.&....Y%|
a7 da af d6 4a 08 0e c9  34 13 71 5e f1 28 64 56  |....J...4.q^.(dV|
45 85 5c ce e1 02 b9 9d  23 25 d3 83 0c fa 76 02  |E.\.....#%....v.|
56 f7 bf be 6b 83 53 c5  74 0e 39 0b fa ce f0 01  |V...k.S.t.9.....|
b4 7b 88 30 74 9f bb 15  5f 6b 72 b6 e1 19 20 bb  |.{.0t..._kr... .|
01 3d d6 f7 fe ab 14 a3  79 b7 9c c7 6d 08 e8 97  |.=......y...m...|
d1 41 f1 a3 b0 2b 71 3f  e7 38 d5 76 06 73 79 67  |.A...+q?.8.v.syg|
e6 4c f6 ec 01 c5 89 dd  90 ef e3 59 ff c9 f9 dd  |.L.........Y....|
56 d9 86 26 6c 2e 60 0a  45 8e ee da ca 02 3b fa  |V..&l.`.E.....;.|
bc 08 76 ad a0 1b fe 56  f9 5e 29 a7 20 8d 66 7d  |..v....V.^). .f}|
6f 8b 84 59 af 32 1d c8  f0 37 84 1e 36 42 b0 52  |o..Y.2...7..6B.R|
a9 9a 01 ed 3f f8 d5 50  ea 6b 5c bf ec 51 04 04  |....?..P.k\..Q..|
bf e0 81 84 b6 c6 54 31  5a bb 2e 9f ff 32 b8 2c  |......T1Z....2.,|
4b 6e 92 05 73 b0 84 74  8d 44 41 d2 38 96 3d e1  |Kn..s..t.DA.8.=.|
5e a7 65 8f f2 7e c3 5c  e4 6d 5a e1 97 57 c8 2b  |^.e..~.\.mZ..W.+|
b0 36 7f ee 09 96 91 cf  fd db 6d 36 8b 65 0e 6d  |.6........m6.e.m|
d3 f3 6d 08 09 ef 3e ca  e7 5f                    |..m...>.._      |

module_name
flags	0
timestamp	0
version	0.0
ordinal_base	1
nFunctions	1
nNames	1
Names(1)	0x96d07c
Functions(1)	0x96d078
NameOrdinals(1)	0x96d074

StringTable 041604E4

CompanyName	Copyrigth
FileDescription
FileVersion	1.0.0.0
InternalName
LegalCopyright
LegalTrademarks
OriginalFilename
ProductName
ProductVersion	1.0.0.0
Comments

VS_FIXEDFILEINFO

FileVersion	1.0.0.0
ProductVersion	1.0.0.0
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	4
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
15c1	15	HTM		#
15d0	6720560	BIN	overlay data past EOF	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] ignoring invalid PEdump::BITMAPINFOHEADER

[?] can't find file_offset of VA 0x6a9aac

[?] can't find file_offset of VA 0x6db5bc

[?] can't find file_offset of VA 0x6fc284

[?] can't find file_offset of VA 0x6fc298

[?] can't find file_offset of VA 0x6fc2ac

[?] can't find file_offset of VA 0x6fc2c0

[?] can't find file_offset of VA 0x6fc2d4

[?] can't find file_offset of VA 0x6fc2e8

[?] can't find file_offset of VA 0x6fc2fc