viceroy56, on 11 ianuarie 2021 - 13:13, said:
E important Project-ul, dar este in arhiva PAROLATA.
Posibil sa se poata extrage numai el fara parola, daca asa s-a setat "arhivarea".
Posibil in foarte mica masura. Si este foarte posibil ca o data extras sa faca alte magarii prin PC.
Sau mai este posibil, daca "cersetorul" a facut treaba buna, ca fisierele personale sa fie prima data criptate si apoi arhivate
Io unu' asa procedam, sa foloseasca patitul brute force, sa gaseasca parola si la final sa vada ca fisierele sunt neutilizabile.
Fisierul respectiv nu este in arhiva. Nu ma pricep la reverse engineering dar am reusit sa-l dezasamblez cu un programel free. Problema e ca nu reusesc sa pun textul aici. Probabil e prea mare. Cam asa arata:
Spoiler
Disassembly of File: Project1.exe
Code Offset = 00000400, Code Size = 00057000
Data Offset = 00057400, Data Size = 00001A00
Number of Objects = 0008 (dec), Imagebase = 00400000h
Object01: CODE RVA: 00001000 Offset: 00000400 Size: 00057000 Flags: 60000020
Object02: DATA RVA: 00058000 Offset: 00057400 Size: 00001A00 Flags: C0000040
Object03: BSS RVA: 0005A000 Offset: 00058E00 Size: 00000000 Flags: C0000000
Object04: .idata RVA: 0005B000 Offset: 00058E00 Size: 00002200 Flags: C0000040
Object05: .tls RVA: 0005E000 Offset: 0005B000 Size: 00000000 Flags: C0000000
Object06: .rdata RVA: 0005F000 Offset: 0005B000 Size: 00000200 Flags: 50000040
Object07: .reloc RVA: 00060000 Offset: 0005B200 Size: 00006800 Flags: 50000040
Object08: .rsrc RVA: 00067000 Offset: 00061A00 Size: 00004E00 Flags: 50000040
+++++++++++++++++++ MENU INFORMATION ++++++++++++++++++
There Are No Menu Resources in This Application
+++++++++++++++++ DIALOG INFORMATION ++++++++++++++++++
There Are No Dialog Resources in This Application
+++++++++++++++++++ IMPORTED FUNCTIONS ++++++++++++++++++
Number of Imported Modules = 14 (decimal)
Import Module 001: kernel32.dll
Import Module 002: user32.dll
Import Module 003: advapi32.dll
Import Module 004: oleaut32.dll
Import Module 005: kernel32.dll
Import Module 006: advapi32.dll
Import Module 007: kernel32.dll
Import Module 008: version.dll
Import Module 009: gdi32.dll
Import Module 010: user32.dll
Import Module 011: kernel32.dll
Import Module 012: oleaut32.dll
Import Module 013: comctl32.dll
Import Module 014: shell32.dll
+++++++++++++++++++ IMPORT MODULE DETAILS +++++++++++++++
Import Module 001: kernel32.dll
Addr:0005B752 hint(0000) Name: DeleteCriticalSection
Addr:0005B76A hint(0000) Name: LeaveCriticalSection
Addr:0005B782 hint(0000) Name: EnterCriticalSection
Addr:0005B79A hint(0000) Name: InitializeCriticalSection
Addr:0005B7B6 hint(0000) Name: VirtualFree
Addr:0005B7C4 hint(0000) Name: VirtualAlloc
Addr:0005B7D4 hint(0000) Name: LocalFree
Addr:0005B7E0 hint(0000) Name: LocalAlloc
Addr:0005B7EE hint(0000) Name: GetVersion
Addr:0005B7FC hint(0000) Name: GetCurrentThreadId
Addr:0005B812 hint(0000) Name: InterlockedDecrement
Addr:0005B82A hint(0000) Name: InterlockedIncrement
Addr:0005B842 hint(0000) Name: VirtualQuery
Addr:0005B852 hint(0000) Name: WideCharToMultiByte
Addr:0005B868 hint(0000) Name: MultiByteToWideChar
Addr:0005B87E hint(0000) Name: lstrlenA
Addr:0005B88A hint(0000) Name: lstrcpynA
Addr:0005B896 hint(0000) Name: LoadLibraryExA
Addr:0005B8A8 hint(0000) Name: GetThreadLocale
Addr:0005B8BA hint(0000) Name: GetStartupInfoA
Addr:0005B8CC hint(0000) Name: GetProcAddress
Addr:0005B8DE hint(0000) Name: GetModuleHandleA
Addr:0005B8F2 hint(0000) Name: GetModuleFileNameA
Addr:0005B908 hint(0000) Name: GetLocaleInfoA
Addr:0005B91A hint(0000) Name: GetLastError
Addr:0005B92A hint(0000) Name: GetCommandLineA
Addr:0005B93C hint(0000) Name: FreeLibrary
Addr:0005B94A hint(0000) Name: FindFirstFileA
Addr:0005B95C hint(0000) Name: FindClose
Addr:0005B968 hint(0000) Name: ExitProcess
Addr:0005B976 hint(0000) Name: WriteFile
Addr:0005B982 hint(0000) Name: UnhandledExceptionFilter
Addr:0005B99E hint(0000) Name: SetFilePointer
Addr:0005B9B0 hint(0000) Name: SetEndOfFile
Addr:0005B9C0 hint(0000) Name: RtlUnwind
Addr:0005B9CC hint(0000) Name: ReadFile
Addr:0005B9D8 hint(0000) Name: RaiseException
Addr:0005B9EA hint(0000) Name: GetStdHandle
Addr:0005B9FA hint(0000) Name: GetFileSize
Addr:0005BA08 hint(0000) Name: GetFileType
Addr:0005BA16 hint(0000) Name: CreateFileA
Addr:0005BA24 hint(0000) Name: CloseHandle
Import Module 002: user32.dll
Addr:0005BA3E hint(0000) Name: GetKeyboardType
Addr:0005BA50 hint(0000) Name: LoadStringA
Addr:0005BA5E hint(0000) Name: MessageBoxA
Addr:0005BA6C hint(0000) Name: CharNextA
Import Module 003: advapi32.dll
Addr:0005BA86 hint(0000) Name: RegQueryValueExA
Addr:0005BA9A hint(0000) Name: RegOpenKeyExA
Addr:0005BAAA hint(0000) Name: RegCloseKey
Import Module 004: oleaut32.dll
Addr:0005BAC6 hint(0000) Name: SysFreeString
Addr:0005BAD6 hint(0000) Name: SysReAllocStringLen
Addr:0005BAEC hint(0000) Name: SysAllocStringLen
Import Module 005: kernel32.dll
Addr:0005BB0E hint(0000) Name: TlsSetValue
Addr:0005BB1C hint(0000) Name: TlsGetValue
Addr:0005BB2A hint(0000) Name: LocalAlloc
Addr:0005BB38 hint(0000) Name: GetModuleHandleA
Import Module 006: advapi32.dll
Addr:0005BB5A hint(0000) Name: RegQueryValueExA
Addr:0005BB6E hint(0000) Name: RegOpenKeyExA
Addr:0005BB7E hint(0000) Name: RegCloseKey
Import Module 007: kernel32.dll
Addr:0005BB9A hint(0000) Name: lstrcpyA
Addr:0005BBA6 hint(0000) Name: WriteFile
Addr:0005BBB2 hint(0000) Name: WinExec
Addr:0005BBBC hint(0000) Name: WaitForSingleObject
Addr:0005BBD2 hint(0000) Name: VirtualQuery
Addr:0005BBE2 hint(0000) Name: VirtualAlloc
Addr:0005BBF2 hint(0000) Name: Sleep
Addr:0005BBFA hint(0000) Name: SizeofResource
Addr:0005BC0C hint(0000) Name: SetThreadLocale
Addr:0005BC1E hint(0000) Name: SetFilePointer
Addr:0005BC30 hint(0000) Name: SetEvent
Addr:0005BC3C hint(0000) Name: SetErrorMode
Addr:0005BC4C hint(0000) Name: SetEndOfFile
Addr:0005BC5C hint(0000) Name: ResetEvent
Addr:0005BC6A hint(0000) Name: ReadFile
Addr:0005BC76 hint(0000) Name: MulDiv
Addr:0005BC80 hint(0000) Name: LockResource
Addr:0005BC90 hint(0000) Name: LoadResource
Addr:0005BCA0 hint(0000) Name: LoadLibraryA
Addr:0005BCB0 hint(0000) Name: LeaveCriticalSection
Addr:0005BCC8 hint(0000) Name: InitializeCriticalSection
Addr:0005BCE4 hint(0000) Name: GlobalUnlock
Addr:0005BCF4 hint(0000) Name: GlobalReAlloc
Addr:0005BD04 hint(0000) Name: GlobalHandle
Addr:0005BD14 hint(0000) Name: GlobalLock
Addr:0005BD22 hint(0000) Name: GlobalFree
Addr:0005BD30 hint(0000) Name: GlobalFindAtomA
Addr:0005BD42 hint(0000) Name: GlobalDeleteAtom
Addr:0005BD56 hint(0000) Name: GlobalAlloc
Addr:0005BD64 hint(0000) Name: GlobalAddAtomA
Addr:0005BD76 hint(0000) Name: GetVersionExA
Addr:0005BD86 hint(0000) Name: GetVersion
Addr:0005BD94 hint(0000) Name: GetTickCount
Addr:0005BDA4 hint(0000) Name: GetThreadLocale
Addr:0005BDB6 hint(0000) Name: GetTempPathA
Addr:0005BDC6 hint(0000) Name: GetSystemInfo
Addr:0005BDD6 hint(0000) Name: GetStringTypeExA
Addr:0005BDEA hint(0000) Name: GetStdHandle
Addr:0005BDFA hint(0000) Name: GetProcAddress
Addr:0005BE0C hint(0000) Name: GetModuleHandleA
Addr:0005BE20 hint(0000) Name: GetModuleFileNameA
Addr:0005BE36 hint(0000) Name: GetLocaleInfoA
Addr:0005BE48 hint(0000) Name: GetLocalTime
Addr:0005BE58 hint(0000) Name: GetLastError
Addr:0005BE68 hint(0000) Name: GetFullPathNameA
Addr:0005BE7C hint(0000) Name: GetFileSize
Addr:0005BE8A hint(0000) Name: GetDiskFreeSpaceA
Addr:0005BE9E hint(0000) Name: GetDateFormatA
Addr:0005BEB0 hint(0000) Name: GetCurrentThreadId
Addr:0005BEC6 hint(0000) Name: GetCurrentProcessId
Addr:0005BEDC hint(0000) Name: GetCPInfo
Addr:0005BEE8 hint(0000) Name: GetACP
Addr:0005BEF2 hint(0000) Name: FreeResource
Addr:0005BF02 hint(0000) Name: InterlockedExchange
Addr:0005BF18 hint(0000) Name: FreeLibrary
Addr:0005BF26 hint(0000) Name: FormatMessageA
Addr:0005BF38 hint(0000) Name: FindResourceA
Addr:0005BF48 hint(0000) Name: FindNextFileA
Addr:0005BF58 hint(0000) Name: FindFirstFileA
Addr:0005BF6A hint(0000) Name: FindClose
Addr:0005BF76 hint(0000) Name: FileTimeToLocalFileTime
Addr:0005BF90 hint(0000) Name: FileTimeToDosDateTime
Addr:0005BFA8 hint(0000) Name: EnumCalendarInfoA
Addr:0005BFBC hint(0000) Name: EnterCriticalSection
Addr:0005BFD4 hint(0000) Name: DeleteFileA
Addr:0005BFE2 hint(0000) Name: DeleteCriticalSection
Addr:0005BFFA hint(0000) Name: CreateThread
Addr:0005C00A hint(0000) Name: CreateFileA
Addr:0005C018 hint(0000) Name: CreateEventA
Addr:0005C028 hint(0000) Name: CompareStringA
Addr:0005C03A hint(0000) Name: CloseHandle
Import Module 008: version.dll
Addr:0005C054 hint(0000) Name: VerQueryValueA
Addr:0005C066 hint(0000) Name: GetFileVersionInfoSizeA
Addr:0005C080 hint(0000) Name: GetFileVersionInfoA
Import Module 009: gdi32.dll
Addr:0005C0A0 hint(0000) Name: UnrealizeObject
Addr:0005C0B2 hint(0000) Name: StretchBlt
Addr:0005C0C0 hint(0000) Name: SetWindowOrgEx
Addr:0005C0D2 hint(0000) Name: SetViewportOrgEx
Addr:0005C0E6 hint(0000) Name: SetTextColor
Addr:0005C0F6 hint(0000) Name: SetStretchBltMode
Addr:0005C10A hint(0000) Name: SetROP2
Addr:0005C114 hint(0000) Name: SetPixel
Addr:0005C120 hint(0000) Name: SetDIBColorTable
Addr:0005C134 hint(0000) Name: SetBrushOrgEx
Addr:0005C144 hint(0000) Name: SetBkMode
Addr:0005C150 hint(0000) Name: SetBkColor
Addr:0005C15E hint(0000) Name: SelectPalette
Addr:0005C16E hint(0000) Name: SelectObject
Addr:0005C17E hint(0000) Name: SaveDC
Addr:0005C188 hint(0000) Name: RestoreDC
Addr:0005C194 hint(0000) Name: RectVisible
Addr:0005C1A2 hint(0000) Name: RealizePalette
Addr:0005C1B4 hint(0000) Name: PatBlt
Addr:0005C1BE hint(0000) Name: MoveToEx
Addr:0005C1CA hint(0000) Name: MaskBlt
Addr:0005C1D4 hint(0000) Name: LineTo
Addr:0005C1DE hint(0000) Name: IntersectClipRect
Addr:0005C1F2 hint(0000) Name: GetWindowOrgEx
Addr:0005C204 hint(0000) Name: GetTextMetricsA
Addr:0005C216 hint(0000) Name: GetTextExtentPoint32A
Addr:0005C22E hint(0000) Name: GetSystemPaletteEntries
Addr:0005C248 hint(0000) Name: GetStockObject
Addr:0005C25A hint(0000) Name: GetPixel
Addr:0005C266 hint(0000) Name: GetPaletteEntries
Addr:0005C27A hint(0000) Name: GetObjectA
Addr:0005C288 hint(0000) Name: GetDeviceCaps
Addr:0005C298 hint(0000) Name: GetDIBits
Addr:0005C2A4 hint(0000) Name: GetDIBColorTable
Addr:0005C2B8 hint(0000) Name: GetDCOrgEx
Addr:0005C2C6 hint(0000) Name: GetCurrentPositionEx
Addr:0005C2DE hint(0000) Name: GetClipBox
Addr:0005C2EC hint(0000) Name: GetBrushOrgEx
Addr:0005C2FC hint(0000) Name: GetBitmapBits
Addr:0005C30C hint(0000) Name: ExcludeClipRect
Addr:0005C31E hint(0000) Name: DeleteObject
Addr:0005C32E hint(0000) Name: DeleteDC
Addr:0005C33A hint(0000) Name: CreateSolidBrush
Addr:0005C34E hint(0000) Name: CreatePenIndirect
Addr:0005C362 hint(0000) Name: CreatePalette
Addr:0005C372 hint(0000) Name: CreateHalftonePalette
Addr:0005C38A hint(0000) Name: CreateFontIndirectA
Addr:0005C3A0 hint(0000) Name: CreateDIBitmap
Addr:0005C3B2 hint(0000) Name: CreateDIBSection
Addr:0005C3C6 hint(0000) Name: CreateCompatibleDC
Addr:0005C3DC hint(0000) Name: CreateCompatibleBitmap
Addr:0005C3F6 hint(0000) Name: CreateBrushIndirect
Addr:0005C40C hint(0000) Name: CreateBitmap
Addr:0005C41C hint(0000) Name: BitBlt
Import Module 010: user32.dll
Addr:0005C432 hint(0000) Name: CreateWindowExA
Addr:0005C444 hint(0000) Name: WindowFromPoint
Addr:0005C456 hint(0000) Name: WinHelpA
Addr:0005C462 hint(0000) Name: WaitMessage
Addr:0005C470 hint(0000) Name: UpdateWindow
Addr:0005C480 hint(0000) Name: UnregisterClassA
Addr:0005C494 hint(0000) Name: UnhookWindowsHookEx
Addr:0005C4AA hint(0000) Name: TranslateMessage
Addr:0005C4BE hint(0000) Name: TranslateMDISysAccel
Addr:0005C4D6 hint(0000) Name: TrackPopupMenu
Addr:0005C4E8 hint(0000) Name: SystemParametersInfoA
Addr:0005C500 hint(0000) Name: ShowWindow
Addr:0005C50E hint(0000) Name: ShowScrollBar
Addr:0005C51E hint(0000) Name: ShowOwnedPopups
Addr:0005C530 hint(0000) Name: ShowCursor
Addr:0005C53E hint(0000) Name: SetWindowsHookExA
Addr:0005C552 hint(0000) Name: SetWindowPos
Addr:0005C562 hint(0000) Name: SetWindowPlacement
Addr:0005C578 hint(0000) Name: SetWindowLongA
Addr:0005C58A hint(0000) Name: SetTimer
Addr:0005C596 hint(0000) Name: SetScrollRange
Addr:0005C5A8 hint(0000) Name: SetScrollPos
Addr:0005C5B8 hint(0000) Name: SetScrollInfo
Addr:0005C5C8 hint(0000) Name: SetRect
Addr:0005C5D2 hint(0000) Name: SetPropA
Addr:0005C5DE hint(0000) Name: SetParent
Addr:0005C5EA hint(0000) Name: SetMenuItemInfoA
Addr:0005C5FE hint(0000) Name: SetMenu
Addr:0005C608 hint(0000) Name: SetForegroundWindow
Addr:0005C61E hint(0000) Name: SetFocus
Addr:0005C62A hint(0000) Name: SetCursor
Addr:0005C636 hint(0000) Name: SetClassLongA
Addr:0005C646 hint(0000) Name: SetCapture
Addr:0005C654 hint(0000) Name: SetActiveWindow
Addr:0005C666 hint(0000) Name: SendMessageA
Addr:0005C676 hint(0000) Name: ScrollWindow
Addr:0005C686 hint(0000) Name: ScreenToClient
Addr:0005C698 hint(0000) Name: RemovePropA
Addr:0005C6A6 hint(0000) Name: RemoveMenu
Addr:0005C6B4 hint(0000) Name: ReleaseDC
Addr:0005C6C0 hint(0000) Name: ReleaseCapture
Addr:0005C6D2 hint(0000) Name: RegisterWindowMessageA
Addr:0005C6EC hint(0000) Name: RegisterClipboardFormatA
Addr:0005C708 hint(0000) Name: RegisterClassA
Addr:0005C71A hint(0000) Name: RedrawWindow
Addr:0005C72A hint(0000) Name: PtInRect
Addr:0005C736 hint(0000) Name: PostQuitMessage
Addr:0005C748 hint(0000) Name: PostMessageA
Addr:0005C758 hint(0000) Name: PeekMessageA
Addr:0005C768 hint(0000) Name: OffsetRect
Addr:0005C776 hint(0000) Name: OemToCharA
Addr:0005C784 hint(0000) Name: MessageBoxA
Addr:0005C792 hint(0000) Name: MapWindowPoints
Addr:0005C7A4 hint(0000) Name: MapVirtualKeyA
Addr:0005C7B6 hint(0000) Name: LoadStringA
Addr:0005C7C4 hint(0000) Name: LoadKeyboardLayoutA
Addr:0005C7DA hint(0000) Name: LoadIconA
Addr:0005C7E6 hint(0000) Name: LoadCursorA
Addr:0005C7F4 hint(0000) Name: LoadBitmapA
Addr:0005C802 hint(0000) Name: KillTimer
Addr:0005C80E hint(0000) Name: IsZoomed
Addr:0005C81A hint(0000) Name: IsWindowVisible
Addr:0005C82C hint(0000) Name: IsWindowEnabled
Addr:0005C83E hint(0000) Name: IsWindow
Addr:0005C84A hint(0000) Name: IsRectEmpty
Addr:0005C858 hint(0000) Name: IsIconic
Addr:0005C864 hint(0000) Name: IsDialogMessageA
Addr:0005C878 hint(0000) Name: IsChild
Addr:0005C882 hint(0000) Name: InvalidateRect
Addr:0005C894 hint(0000) Name: IntersectRect
Addr:0005C8A4 hint(0000) Name: InsertMenuItemA
Addr:0005C8B6 hint(0000) Name: InsertMenuA
Addr:0005C8C4 hint(0000) Name: InflateRect
Addr:0005C8D2 hint(0000) Name: GetWindowThreadProcessId
Addr:0005C8EE hint(0000) Name: GetWindowTextA
Addr:0005C900 hint(0000) Name: GetWindowRect
Addr:0005C910 hint(0000) Name: GetWindowPlacement
Addr:0005C926 hint(0000) Name: GetWindowLongA
Addr:0005C938 hint(0000) Name: GetWindowDC
Addr:0005C946 hint(0000) Name: GetTopWindow
Addr:0005C956 hint(0000) Name: GetSystemMetrics
Addr:0005C96A hint(0000) Name: GetSystemMenu
Addr:0005C97A hint(0000) Name: GetSysColorBrush
Addr:0005C98E hint(0000) Name: GetSysColor
Addr:0005C99C hint(0000) Name: GetSubMenu
Addr:0005C9AA hint(0000) Name: GetScrollRange
Addr:0005C9BC hint(0000) Name: GetScrollPos
Addr:0005C9CC hint(0000) Name: GetScrollInfo
Addr:0005C9DC hint(0000) Name: GetPropA
Addr:0005C9E8 hint(0000) Name: GetParent
Addr:0005C9F4 hint(0000) Name: GetWindow
Addr:0005CA00 hint(0000) Name: GetMenuStringA
Addr:0005CA12 hint(0000) Name: GetMenuState
Addr:0005CA22 hint(0000) Name: GetMenuItemInfoA
Addr:0005CA36 hint(0000) Name: GetMenuItemID
Addr:0005CA46 hint(0000) Name: GetMenuItemCount
Addr:0005CA5A hint(0000) Name: GetMenu
Addr:0005CA64 hint(0000) Name: GetLastActivePopup
Addr:0005CA7A hint(0000) Name: GetKeyboardState
Addr:0005CA8E hint(0000) Name: GetKeyboardLayoutList
Addr:0005CAA6 hint(0000) Name: GetKeyboardLayout
Addr:0005CABA hint(0000) Name: GetKeyState
Addr:0005CAC8 hint(0000) Name: GetKeyNameTextA
Addr:0005CADA hint(0000) Name: GetIconInfo
Addr:0005CAE8 hint(0000) Name: GetForegroundWindow
Addr:0005CAFE hint(0000) Name: GetFocus
Addr:0005CB0A hint(0000) Name: GetDesktopWindow
Addr:0005CB1E hint(0000) Name: GetDCEx
Addr:0005CB28 hint(0000) Name: GetDC
Addr:0005CB30 hint(0000) Name: GetCursorPos
Addr:0005CB40 hint(0000) Name: GetCursor
Addr:0005CB4C hint(0000) Name: GetClientRect
Addr:0005CB5C hint(0000) Name: GetClassNameA
Addr:0005CB6C hint(0000) Name: GetClassInfoA
Addr:0005CB7C hint(0000) Name: GetCapture
Addr:0005CB8A hint(0000) Name: GetActiveWindow
Addr:0005CB9C hint(0000) Name: FrameRect
Addr:0005CBA8 hint(0000) Name: FindWindowA
Addr:0005CBB6 hint(0000) Name: FillRect
Addr:0005CBC2 hint(0000) Name: EqualRect
Addr:0005CBCE hint(0000) Name: EnumWindows
Addr:0005CBDC hint(0000) Name: EnumThreadWindows
Addr:0005CBF0 hint(0000) Name: EndPaint
Addr:0005CBFC hint(0000) Name: EnableWindow
Addr:0005CC0C hint(0000) Name: EnableScrollBar
Addr:0005CC1E hint(0000) Name: EnableMenuItem
Addr:0005CC30 hint(0000) Name: DrawTextA
Addr:0005CC3C hint(0000) Name: DrawMenuBar
Addr:0005CC4A hint(0000) Name: DrawIconEx
Addr:0005CC58 hint(0000) Name: DrawIcon
Addr:0005CC64 hint(0000) Name: DrawFrameControl
Addr:0005CC78 hint(0000) Name: DrawFocusRect
Addr:0005CC88 hint(0000) Name: DrawEdge
Addr:0005CC94 hint(0000) Name: DispatchMessageA
Addr:0005CCA8 hint(0000) Name: DestroyWindow
Addr:0005CCB8 hint(0000) Name: DestroyMenu
Addr:0005CCC6 hint(0000) Name: DestroyIcon
Addr:0005CCD4 hint(0000) Name: DestroyCursor
Addr:0005CCE4 hint(0000) Name: DeleteMenu
Addr:0005CCF2 hint(0000) Name: DefWindowProcA
Addr:0005CD04 hint(0000) Name: DefMDIChildProcA
Addr:0005CD18 hint(0000) Name: DefFrameProcA
Addr:0005CD28 hint(0000) Name: CreatePopupMenu
Addr:0005CD3A hint(0000) Name: CreateMenu
Addr:0005CD48 hint(0000) Name: CreateIcon
Addr:0005CD56 hint(0000) Name: ClientToScreen
Addr:0005CD68 hint(0000) Name: CheckMenuItem
Addr:0005CD78 hint(0000) Name: CallWindowProcA
Addr:0005CD8A hint(0000) Name: CallNextHookEx
Addr:0005CD9C hint(0000) Name: BeginPaint
Addr:0005CDAA hint(0000) Name: CharNextA
Addr:0005CDB6 hint(0000) Name: CharLowerA
Addr:0005CDC4 hint(0000) Name: CharUpperBuffA
Addr:0005CDD6 hint(0000) Name: CharToOemA
Addr:0005CDE4 hint(0000) Name: AdjustWindowRectEx
Addr:0005CDFA hint(0000) Name: ActivateKeyboardLayout
Import Module 011: kernel32.dll
Addr:0005CE22 hint(0000) Name: Sleep
Import Module 012: oleaut32.dll
Addr:0005CE38 hint(0000) Name: SafeArrayPtrOfIndex
Addr:0005CE4E hint(0000) Name: SafeArrayGetUBound
Addr:0005CE64 hint(0000) Name: SafeArrayGetLBound
Addr:0005CE7A hint(0000) Name: SafeArrayCreate
Addr:0005CE8C hint(0000) Name: VariantChangeType
Addr:0005CEA0 hint(0000) Name: VariantCopy
Addr:0005CEAE hint(0000) Name: VariantClear
Addr:0005CEBE hint(0000) Name: VariantInit
Import Module 013: comctl32.dll
Addr:0005CEDA hint(0000) Name: ImageList_SetIconSize
Addr:0005CEF2 hint(0000) Name: ImageList_GetIconSize
Addr:0005CF0A hint(0000) Name: ImageList_Write
Addr:0005CF1C hint(0000) Name: ImageList_Read
Addr:0005CF2E hint(0000) Name: ImageList_GetDragImage
Addr:0005CF48 hint(0000) Name: ImageList_DragShowNolock
Addr:0005CF64 hint(0000) Name: ImageList_SetDragCursorImage
Addr:0005CF84 hint(0000) Name: ImageList_DragMove
Addr:0005CF9A hint(0000) Name: ImageList_DragLeave
Addr:0005CFB0 hint(0000) Name: ImageList_DragEnter
Addr:0005CFC6 hint(0000) Name: ImageList_EndDrag
Addr:0005CFDA hint(0000) Name: ImageList_BeginDrag
Addr:0005CFF0 hint(0000) Name: ImageList_Remove
Addr:0005D004 hint(0000) Name: ImageList_DrawEx
Addr:0005D018 hint(0000) Name: ImageList_Draw
Addr:0005D02A hint(0000) Name: ImageList_GetBkColor
Addr:0005D042 hint(0000) Name: ImageList_SetBkColor
Addr:0005D05A hint(0000) Name: ImageList_ReplaceIcon
Addr:0005D072 hint(0000) Name: ImageList_Add
Addr:0005D082 hint(0000) Name: ImageList_SetImageCount
Addr:0005D09C hint(0000) Name: ImageList_GetImageCount
Addr:0005D0B6 hint(0000) Name: ImageList_Destroy
Addr:0005D0CA hint(0000) Name: ImageList_Create
Import Module 014: shell32.dll
Addr:0005D0EA hint(0000) Name: ShellExecuteA
+++++++++++++++++++ EXPORTED FUNCTIONS ++++++++++++++++++
Number of Exported Functions = 0000 (decimal)
+++++++++++++++++++ ASSEMBLY CODE LISTING ++++++++++++++++++
//********************** Start of Code in Object CODE **************
Program Entry Point = 00457FAC (Project1.exe File Offset:000AF3AC)
:00401000 0410 add al, 10
:00401002 40 inc eax
:00401003 0003 add byte ptr [ebx], al
:00401005 07 pop es
:00401006 42 inc edx
:00401007 6F outsd
:00401008 6F outsd
:00401009 6C insb
:0040100A 65 BYTE 065h
:0040100B 61 popad
:0040100C 6E outsb
:0040100D 0100 add dword ptr [eax], eax
:0040100F 000000 BYTE 3 DUP(0)
:00401012 0100 add dword ptr [eax], eax
:00401014 000000 BYTE 3 DUP(0)
:00401017 104000 adc byte ptr [eax+00], al
:0040101A 0546616C73 add eax, 736C6146
:0040101F 65 BYTE 065h
:00401020 0454 add al, 54
:00401022 7275 jb 00401099
:00401024 658D4000 DWORD 00408D65
:00401028 2C104000 DWORD 0040102C
:0040102C 020443 add al, byte ptr [ebx+2*eax]
:0040102F 6861720100 push 00017261
:00401034 000000 BYTE 3 DUP(0)
:00401037 FF00 inc dword ptr [eax]
:00401039 0000 add byte ptr [eax], al
:0040103B 90 nop
:0040103C 40 inc eax
:0040103D 104000 adc byte ptr [eax+00], al
:00401040 0107 add dword ptr [edi], eax
:00401042 49 dec ecx
:00401043 6E outsb
:00401044 7465 je 004010AB
:00401046 67 BYTE 067h
:00401047 65 BYTE 065h
:00401048 7204 jb 0040104E
:0040104A 000000 BYTE 3 DUP(0)
:0040104D 80FFFF cmp bh, FF
:00401050 FF BYTE 0ffh
:00401051 7F8B jg 00400FDE
:00401053 C0581040 rcr byte ptr [eax+10], 40
:00401057 0001 add byte ptr [ecx], al
:00401059 0442 add al, 42
:0040105B 7974 jns 004010D1
:0040105D 650100 add dword ptr gs:[eax], eax
:00401060 000000 BYTE 3 DUP(0)
:00401063 FF00 inc dword ptr [eax]
:00401065 0000 add byte ptr [eax], al
:00401067 90 nop
:00401068 6C insb
:00401069 104000 adc byte ptr [eax+00], al
:0040106C 010457 add dword ptr [edi+2*edx], eax
:0040106F 6F outsd
:00401070 7264 jb 004010D6
:00401072 0300 add eax, dword ptr [eax]
:00401074 000000 BYTE 3 DUP(0)
:00401077 FFFF BYTE 2 DUP(0ffh)
:00401079 0000 add byte ptr [eax], al
:0040107B 90 nop
:0040107C 801040 adc byte ptr [eax], 40
:0040107F 0001 add byte ptr [ecx], al
:00401081 084361 or byte ptr [ebx+61], al
:00401084 7264 jb 004010EA
:00401086 696E616C050000 imul ebp, dword ptr [esi+61], 0000056C
:0040108D 0000 add byte ptr [eax], al
:0040108F FFFFFFFF BYTE 4 DUP(0ffh)
:00401093 90 nop
:00401094 98 cwde
:00401095 104000 adc byte ptr [eax+00], al
:00401098 0A06 or al, byte ptr [esi]
:0040109A 53 push ebx
:0040109B 7472 je 0040110F
:0040109D 696E67EC104000 imul ebp, dword ptr [esi+67], 004010EC
:004010A4 00000000000000000000 BYTE 10 DUP(0)
:004010AE 00000000000000000000 BYTE 10 DUP(0)
:004010B8 0000000000000000 BYTE 8 DUP(0)
:004010C0 EC in al, dx
:004010C1 104000 adc byte ptr [eax+00], al
:004010C4 0400 add al, 00
:004010C6 000000000000 BYTE 6 DUP(0)
:004010CC 803D4000 DWORD 00403D80
:004010D0 8C3D4000 DWORD 00403D8C
:004010D4 903D4000 DWORD 00403D90
:004010D8 943D4000 DWORD 00403D94
:004010DC 883D4000 DWORD 00403D88
:004010E0 D43A4000 DWORD 00403AD4
:004010E4 F03A4000 DWORD 00403AF0
:004010E8 2C3B4000 DWORD 00403B2C
:004010EC 07 pop es
:004010ED 54 push esp
:004010EE 4F dec edi
:004010EF 626A65 bound ebp, dword ptr [edx+65]
:004010F2 6374F810 arpl dword ptr [eax+8*edi+10], esi
:004010F6 40 inc eax
:004010F7 0007 add byte ptr [edi], al
:004010F9 07 pop es
:004010FA 54 push esp
:004010FB 4F dec edi
:004010FC 626A65 bound ebp, dword ptr [edx+65]
:004010FF 6374EC10 arpl dword ptr [esp+8*ebp+10], esi
:00401103 40 inc eax
:00401104 00000000000000 BYTE 7 DUP(0)
:0040110B 06 push es
:0040110C 53 push ebx
:0040110D 7973 jns 00401182
* Referenced by a (U)nconditional or ©onditional Jump at Address:
|:0040109B©
|
:0040110F 7465 je 00401176
:00401111 6D insd
:00401112 0000 add byte ptr [eax], al
:00401114 1811 sbb byte ptr [ecx], dl
:00401116 40 inc eax
:00401117 000F add byte ptr [edi], cl
:00401119 0A4949 or cl, byte ptr [ecx+49]
:0040111C 6E outsb
:0040111D 7465 je 00401184
:0040111F 7266 jb 00401187
:00401121 61 popad
:00401122 636500 arpl dword ptr [ebp+00], esp
:00401125 000000 BYTE 3 DUP(0)
:00401128 0100 add dword ptr [eax], eax
:0040112A 00000000000000 BYTE 7 DUP(0)
:00401131 C00000 rol byte ptr [eax], 00
:00401134 00000000 BYTE 4 DUP(0)
:00401138 46 inc esi
:00401139 06 push es
:0040113A 53 push ebx
:0040113B 7973 jns 004011B0
:0040113D 7465 je 004011A4
:0040113F 6D insd
:00401140 0300 add eax, dword ptr [eax]
:00401142 FFFF BYTE 2 DUP(0ffh)
:00401144 CC int 03
:00401145 83442404F8 add dword ptr [esp+04], FFFFFFF8
:0040114A E975510000 jmp 004062C4
:0040114F 83442404F8 add dword ptr [esp+04], FFFFFFF8
:00401154 E993510000 jmp 004062EC
:00401159 83442404F8 add dword ptr [esp+04], FFFFFFF8
:0040115E E99D510000 jmp 00406300
:00401163 CC int 03
:00401164 CC int 03
:00401165 45114000 DWORD 00401145
:00401169 4F114000 DWORD 0040114F
:0040116D 59114000 DWORD 00401159
:00401171 0100 add dword ptr [eax], eax
:00401173 00000000000000000000 BYTE 10 DUP(0)
:0040117D C00000 rol byte ptr [eax], 00
:00401180 00000000 BYTE 4 DUP(0)
Edited by MhG_51, 11 January 2021 - 21:04.
pus in spoiler.