PESCAN.IO - Analysis Report Basic |
|||||||
| File Structure |
|
PE Chart Code
Executable header (light blue)
Executable sections (pink)
Non-executable sections (black)
External injected code (red)
File Structure in red = malformed or corrupted header
Chart Code For Other Files
Printable characters (blue)
Non-printable characters (black)
| Information |
Icon: Size: 4,89 MBSHA-256 Hash: 7ED26F8096D598DDF3E798E026A622368B94F082111DD751D3ADF4CF3F806229 SHA-1 Hash: FE6B928B3C7C33FC6F8C9D25CCB1FE487ECA1959 MD5 Hash: DFA3F66736E07EC6E2D52798AB432EDA Imphash: D567E09B94806277F26A56A1A955CDCC MajorOSVersion: 6 MinorOSVersion: 0 CheckSum: 004EBC38 EntryPoint (rva): 11ABF70 SizeOfHeaders: 400 SizeOfImage: 11AF000 ImageBase: 400000 Architecture: x86 ExportTable: EC4030 ImportTable: EC4D54 Characteristics: 123 TimeDateStamp: 6903404F Date: 30/10/2025 10:39:11 File Type: EXE Number Of Sections: 8 ASLR: Disabled Section Names (Optional Header): *unnamed*, *unnamed*, *unnamed*, *unnamed*, *unnamed*, .rsrc, *unnamed*, .data Number Of Executable Sections: 1 Subsystem: Windows GUI UAC Execution Level Manifest: asInvoker [Incomplete Binary or Compressor Packer - 12,79 MB Missing] |
| Sections Info |
| Section Name | Flags | ROffset | RSize | VOffset | VSize | Entropy | Chi2 |
|---|---|---|---|---|---|---|---|
| *unnamed* | E0000040 (Initialized Data, Executable, Readable, Writeable) | 400 | 153800 | 1000 | 316000 | 7,9999 | 256,59 |
| *unnamed* | E0000040 (Initialized Data, Executable, Readable, Writeable) | 153C00 | 36C00 | 317000 | BD000 | 7,9990 | 318,88 |
| *unnamed* | E0000040 (Initialized Data, Executable, Readable, Writeable) | 18A800 | 3600 | 3D4000 | 26000 | 7,9557 | 1521,85 |
| *unnamed* | E0000040 (Initialized Data, Executable, Readable, Writeable) | 18DE00 | 0 | 3FA000 | 1000 | N/A | N/A |
| *unnamed* | E0000040 (Initialized Data, Executable, Readable, Writeable) | 18DE00 | 4A00 | 3FB000 | 3E000 | 7,9759 | 899,73 |
| .rsrc | 40000040 (Initialized Data, Readable) | 192800 | 2D800 | 439000 | 2E000 | 4,3633 | 12264891,42 |
| *unnamed* | E0000040 (Initialized Data, Executable, Readable, Writeable) | 1C0000 | 33E00 | 467000 | A5A000 | 7,9988 | 359,75 |
| .data | E0000040 (Initialized Data, Executable, Readable, Writeable) | 1F3E00 | 2EDC00 | EC1000 | 2EE000 | 7,9805 | 90406,87 |
| Description |
| OriginalFilename: gPhotoShowFree.scr CompanyName: Gianpaolo Bottin LegalCopyright: Copyright 1999-2025 ProductName: gPhotoShow Free FileVersion: 2.0.0.1625 FileDescription: gPhotoShow Free ProductVersion: 2.0.0.1625 Comments: gPhotoShow Free Slideshow Screen Saver developed by Gianpaolo Bottin Language: English (United States) (ID=0x409) CodePage: Unicode (UTF-16 LE) (0x4B0) Language: German (Germany) (ID=0x410) CodePage: Unicode (UTF-16 LE) (0x4B0) |
| Entry Point |
| The section number (8) - (.data) have the Entry Point Information -> EntryPoint (calculated) - 4DED70 Code -> EB08003E1F000000000060E8000000005D81ED1000000081ED70BF1A01E9040000000EA37097B870BF1A0103C581C04C0000 • JMP 0X100A • ADD BYTE PTR [ESI], BH • POP DS • ADD BYTE PTR [EAX], AL • ADD BYTE PTR [EAX], AL • ADD BYTE PTR [EAX - 0X18], AH • ADD BYTE PTR [EAX], AL • ADD BYTE PTR [EAX], AL • POP EBP • SUB EBP, 0X10 • SUB EBP, 0X11ABF70 • JMP 0X1026 • PUSH CS • MOV DWORD PTR [0X70B89770], EAX • MOV EDI, 0XC503011A EP changed to another address -> (Address Of EntryPoint > Base Of Data) |
| Signatures |
| Rich Signature Analyzer: Code -> F79AE3B9B3FB8DEAB3FB8DEAB3FB8DEACA7A8EEB93FB8DEACA7A8AEBB2FB8DEA6A8688EBB7FB8DEA347270EAB2FB8DEA24A588EBB1FB8DEACA7A89EB95FB8DEACA7A88EB6DFB8DEACA7A8BEBB2FB8DEA34728EEBA8FB8DEA347289EBA5FB8DEACA7A8CEB96FB8DEAB3FB8CEACDF88DEA347288EBCBFA8DEA24A589EB80FB8DEA207289EBB4FB8DEA207288EBD0FB8DEA207272EAB2FB8DEAB3FB1AEAB2FB8DEA20728FEBB2FB8DEA52696368 Footprint md5 Hash -> 5A9B24EA2CC19C6E3112062F25102280 • Unusual or modified Rich structure: () Certificate - Digital Signature: • The file is signed and the signature is correct |
| Duplicate Sections |
| Section *unnamed* duplicate 6 times |
| Packer/Compiler |
| Detect It Easy (die) • PE: linker: Microsoft Linker(14.44**)[-] • PE: Sign tool: Windows Authenticode(2.0)[PKCS 7] • Entropy: 7.95948 |
| Suspicious Functions |
| Library | Function | Description |
|---|---|---|
| KERNEL32.DLL | GetModuleHandleA | Retrieves a handle to the specified module. |
| KERNEL32.DLL | LoadLibraryA | Loads the specified module into the address space of the calling process. |
| KERNEL32.DLL | GetProcAddress | Retrieves the address of an exported function or variable from the specified dynamic-link library (DLL). |
| SHELL32.DLL | ShellExecuteA | Performs a run operation on a specific file. |
| File Access |
| IMM32.dll OLEACC.dll WININET.dll oledlg.dll ole32.dll UxTheme.dll SHLWAPI.dll COMCTL32.dll COMDLG32.dll WINMM.dll version.dll shell32.dll gdi32.dll oleaut32.dll advapi32.dll user32.dll kernel32.dll .dat |
| File Access (UNICODE) |
| \program files\my editor\editor.exe exe)|*.exe gPhotoShowFree.scr scr)|*.scr Temp |
| Interest's Words |
| exec ping |
| Interest's Words (UNICODE) |
| Encrypt PassWord exec attrib start pause |
| URLs |
| http://schemas.microsoft.com/SMI/2005/WindowsSettings http://subca.repository.certum.pl/ctsca2021.cer http://subca.ocsp-certum.com http://subca.crl.certum.pl/ctsca2021.crl http://crl.certum.pl/ctnca2.crl http://repository.certum.pl/ctnca2.cer http://www.cer http://crl.certum.pl/ctnca.crl http://repository.certum.pl/ctnca.cer http://pki-crl.symauth.com/ca_732b6ec148d290c0a071efd1dac8e288/LatestCRL.crl http://pki-ocsp.symauth.com http://pki-crl.symauth.com/offlineca/TheInstituteofElectricalandElectronicsEngineersIncIEEERootCA.crl http://ccsca2021.crl.certum.pl/ccsca2021.crl http://ccsca2021.ocsp-certum.com http://repository.certum.pl/ccsca2021.cer https://www.cer |
| Strings/Hex Code Found With The File Rules |
| Rule Type | Encoding | Matched (Word) |
|---|---|---|
| Text | Unicode | WinAPI Sockets (connect) |
| Text | Unicode | WinAPI Sockets (send) |
| Text | Ascii | Execution (ShellExecute) |
| Text | Unicode | Keyboard Key (Scroll) |
| Entry Point | Hex Pattern | ASPack 1.02b or 1.08.03 |
| Resources |
| Path | DataRVA | Size | FileOffset | Code | Text |
|---|---|---|---|---|---|
| \AFX_DIALOG_LAYOUT\101\1033 | 424028 | 2 | 1B6E28 | 6500 | e. |
| \AFX_DIALOG_LAYOUT\131\1033 | 424000 | 2 | 1B6E00 | 6E00 | n. |
| \AFX_DIALOG_LAYOUT\132\1033 | 423FD8 | 2 | 1B6DD8 | 6500 | e. |
| \AFX_DIALOG_LAYOUT\136\1033 | 423FF8 | 2 | 1B6DF8 | 6500 | e. |
| \AFX_DIALOG_LAYOUT\142\1033 | 424018 | 2 | 1B6E18 | 6E00 | n. |
| \AFX_DIALOG_LAYOUT\147\1033 | 423FE0 | 2 | 1B6DE0 | 6500 | e. |
| \AFX_DIALOG_LAYOUT\150\1033 | 424020 | 2 | 1B6E20 | 6100 | a. |
| \AFX_DIALOG_LAYOUT\194\1033 | 423FF0 | 2 | 1B6DF0 | 6600 | f. |
| \AFX_DIALOG_LAYOUT\210\1033 | 424008 | 2 | 1B6E08 | 7300 | s. |
| \AFX_DIALOG_LAYOUT\2003\1033 | 423FD0 | 2 | 1B6DD0 | 2000 | . |
| \AFX_DIALOG_LAYOUT\2004\1033 | 423FE8 | 2 | 1B6DE8 | 6D00 | m. |
| \AFX_DIALOG_LAYOUT\2011\1033 | 424010 | 2 | 1B6E10 | 6C00 | l. |
| \CURSOR\51\0 | 4153C0 | 134 | 1A81C0 | 0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 | .................................................. |
| \CURSOR\52\0 | 4243D8 | 134 | 1B71D8 | 65002000740068006500200069006D00610067006500050054006F006F006C0073003400410072006500200079006F007500 | e. .t.h.e. .i.m.a.g.e...T.o.o.l.s.4.A.r.e. .y.o.u. |
| \CURSOR\53\0 | 424510 | B4 | 1B7310 | 22002500730022002E00200050006C006500610073006500200063006800650063006B002000740068006500200066006F00 | ".%.s."... .P.l.e.a.s.e. .c.h.e.c.k. .t.h.e. .f.o. |
| \CURSOR\54\0 | 4245F0 | 134 | 1B73F0 | 650072006500200074006F00200063006F006E0066006900670075007200650020007400680065002000730065006C006500 | e.r.e. .t.o. .c.o.n.f.i.g.u.r.e. .t.h.e. .s.e.l.e. |
| \CURSOR\55\0 | 424740 | 134 | 1B7540 | 6C006C00200062006500200061006400640065006400200074006F0020004500780069006600200044006100740065003A00 | l.l. .b.e. .a.d.d.e.d. .t.o. .E.x.i.f. .D.a.t.e.:. |
| \CURSOR\56\0 | 424890 | 134 | 1B7690 | 69006D0061007200790020006600720065006500410043006C00690063006B0020006800650072006500200074006F002000 | i.m.a.r.y. .f.r.e.e.A.C.l.i.c.k. .h.e.r.e. .t.o. . |
| \CURSOR\57\0 | 4249E0 | 134 | 1B77E0 | 61007900650072002E002000530065007000610072006100740065002000660069006C006500200074007900700065007300 | a.y.e.r... .S.e.p.a.r.a.t.e. .f.i.l.e. .t.y.p.e.s. |
| \CURSOR\58\0 | 424B30 | 134 | 1B7930 | 6F006C006400650072003C00530065006C006500630074002000740068006900730020006F007000740069006F006E002000 | o.l.d.e.r.<.S.e.l.e.c.t. .t.h.i.s. .o.p.t.i.o.n. . |
| \CURSOR\59\0 | 424C80 | 134 | 1B7A80 | 20006E0061006D0065002E00200059006F0075002000630061006E002000750073006500200062006F007400680020006100 | .n.a.m.e... .Y.o.u. .c.a.n. .u.s.e. .b.o.t.h. .a. |
| \CURSOR\60\0 | 424DD0 | 134 | 1B7BD0 | 200066006F006C00640065007200640049006600200065006E00610062006C006500640020006700500068006F0074006F00 | .f.o.l.d.e.r.d.I.f. .e.n.a.b.l.e.d. .g.P.h.o.t.o. |
| \CURSOR\61\0 | 424F20 | 134 | 1B7D20 | 6600200069006D00610067006500200061006E0064002000730063007200650065006E002000640069006600660065007200 | f. .i.m.a.g.e. .a.n.d. .s.c.r.e.e.n. .d.i.f.f.e.r. |
| \CURSOR\62\0 | 425070 | 134 | 1B7E70 | 73002E006C00490066002000730065006C0065006300740065006400200061006E0064002000690066002000740068006500 | s...l.I.f. .s.e.l.e.c.t.e.d. .a.n.d. .i.f. .t.h.e. |
| \CURSOR\63\0 | 4251C0 | 134 | 1B7FC0 | 69006300200069006D006100670065007300200061006E0064002000770069006C006C00200064006900730070006C006100 | i.c. .i.m.a.g.e.s. .a.n.d. .w.i.l.l. .d.i.s.p.l.a. |
| \CURSOR\64\0 | 425310 | 134 | 1B8110 | 610067006500730020006D0075007300740020006200650020006C0061007200670065007200200069006E0020006F007200 | a.g.e.s. .m.u.s.t. .b.e. .l.a.r.g.e.r. .i.n. .o.r. |
| \CURSOR\65\0 | 425460 | 134 | 1B8260 | 7500720069006E0067002000730074007200650074006300680020006F007200200061002000620069006700670065007200 | u.r.i.n.g. .s.t.r.e.t.c.h. .o.r. .a. .b.i.g.g.e.r. |
| \CURSOR\66\0 | 4255B0 | 134 | 1B83B0 | 7400680065002000730063007200650065006E002E0020004C0061007200670065007200200069006D006100670065007300 | t.h.e. .s.c.r.e.e.n... .L.a.r.g.e.r. .i.m.a.g.e.s. |
| \CURSOR\67\0 | 425700 | 134 | 1B8500 | 640069006F002000660072006F006D0020004100760069002C0020004D00700065006700200061006E00640020006D006F00 | d.i.o. .f.r.o.m. .A.v.i.,. .M.p.e.g. .a.n.d. .m.o. |
| \BITMAP\130\0 | 415510 | 1260 | 1A8310 | 0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 | .................................................. |
| \BITMAP\164\0 | 416770 | 628 | 1A9570 | 0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 | .................................................. |
| \BITMAP\166\0 | 416D98 | B28 | 1A9B98 | 0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 | .................................................. |
| \BITMAP\203\0 | 4178C0 | 728 | 1AA6C0 | 0000002200000005000000000000000000000000BD9898A8FAFFFFFFFFFFFFFFF6FDFCFFE3E9E9FFD8C7C7FFD9B1B1FFD69F | ...".............................................. |
| \BITMAP\323\0 | 417FE8 | 48C | 1AADE8 | 9ECDD600ACCAC500B4CFCC00ABD1D400BCD7D900CCD7CC00CCD9D200D5D9D300E8CEC100E7DAC800FDDEC000EEDED200CFE0 | .................................................. |
| \BITMAP\30994\0 | 425970 | B8 | 1B8770 | 73006E00270074002000650078006900730074002E00200054006800690073002000660069006C0065002000690073002000 | s.n.'.t. .e.x.i.s.t... .T.h.i.s. .f.i.l.e. .i.s. . |
| \BITMAP\30996\0 | 425A28 | 144 | 1B8828 | 200065006E00610062006C00650064004700560069007300740061002000770069006C006C002000610073006B0020007900 | .e.n.a.b.l.e.d.G.V.i.s.t.a. .w.i.l.l. .a.s.k. .y. |
| \ICON\1\0 | 43BFD4 | 2E8 | 1957D4 | 2800000020000000400000000100040000000000000200000000000000000000000000000000000000000000000080000080 | (... ...@......................................... |
| \ICON\2\0 | 43C2BC | 128 | 195ABC | 2800000010000000200000000100040000000000800000000000000000000000000000000000000000000000000080000080 | (....... ......................................... |
| \ICON\3\0 | 43C3E4 | 8A8 | 195BE4 | 2800000020000000400000000100080000000000000400000000000000000000000100000001000000000000800080008000 | (... ...@......................................... |
| \ICON\4\0 | 43CC8C | 568 | 19648C | 2800000010000000200000000100080000000000000100000000000000000000000100000001000000000000B4585800A42B | (....... ....................................XX..+ |
| \ICON\5\0 | 43D1F4 | 4228 | 1969F4 | 2800000040000000800000000100200000000000004200000000000000000000000000000000000000000000000000000000 | (...@......... ......B............................ |
| \ICON\6\0 | 44141C | 25A8 | 19AC1C | 2800000030000000600000000100200000000000802500000000000000000000000000000000000000000000000000000000 | (...0........ ......%............................ |
| \ICON\7\0 | 4439C4 | 10A8 | 19D1C4 | 2800000020000000400000000100200000000000801000000000000000000000000000000000000000000000000000000000 | (... ...@..... ................................... |
| \ICON\8\0 | 444A6C | 468 | 19E26C | 2800000010000000200000000100200000000000400400000000000000000000000000000000000000000000000000000000 | (....... ..... .....@............................. |
| \ICON\9\0 | 444ED4 | 6C8 | 19E6D4 | 2800000018000000300000000100080000000000400200000000000000000000000100000001000000000000037A1D00037F | (.......0...........@........................z.... |
| \ICON\10\0 | 44559C | 6C8 | 19ED9C | 2800000018000000300000000100080000000000A00200000000000000000000000100000000000000000000800080008000 | (.......0......................................... |
| \ICON\11\0 | 445C64 | 6C8 | 19F464 | 2800000018000000300000000100080000000000A00200000000000000000000000100000000000000000000800080008000 | (.......0......................................... |
| \ICON\12\0 | 44632C | 6C8 | 19FB2C | 2800000018000000300000000100080000000000A00200000000000000000000000100000000000000000000FFFFFF000000 | (.......0......................................... |
| \ICON\13\0 | 4469F4 | 6C8 | 1A01F4 | 2800000018000000300000000100080000000000A00200000000000000000000000100000000000000000000FFFFFF000000 | (.......0......................................... |
| \ICON\14\0 | 4470BC | 6C8 | 1A08BC | 2800000018000000300000000100080000000000A00200000000000000000000000100000000000000000000800080008000 | (.......0......................................... |
| \ICON\15\0 | 447784 | 6C8 | 1A0F84 | 2800000018000000300000000100080000000000A00200000000000000000000000000000000000000000000087B0800088C | (.......0....................................{.... |
| \ICON\16\0 | 447E4C | 6C8 | 1A164C | 2800000018000000300000000100080000000000A00200000000000000000000000100000000000000000000800080008000 | (.......0......................................... |
| \ICON\17\0 | 448514 | 6C8 | 1A1D14 | 2800000018000000300000000100080000000000A0020000000000000000000000000000000000002900DF002B05D6002C06 | (.......0...............................)...+...,. |
| \ICON\18\0 | 448BDC | 6C8 | 1A23DC | 2800000018000000300000000100080000000000A00200000000000000000000000000000000000000000000800080008000 | (.......0......................................... |
| \ICON\19\0 | 4492A4 | 128 | 1A2AA4 | 2800000010000000200000000100040000000000000000000000000000000000000000000000000000000000000080000080 | (....... ......................................... |
| \ICON\20\0 | 4493CC | 568 | 1A2BCC | 2800000010000000200000000100080000000000000000000000000000000000000000000000000000000000FFFFFF000000 | (....... ......................................... |
| \ICON\21\0 | 449934 | 468 | 1A3134 | 2800000010000000200000000100200000000000000000000000000000000000000000000000000000000000000000000000 | (....... ..... ................................... |
| \ICON\22\0 | 449D9C | 568 | 1A359C | 2800000010000000200000000100080000000000400100000000000000000000000000000000000018181800212122002626 | (....... ...........@.......................!!".&& |
| \ICON\23\0 | 44A304 | 468 | 1A3B04 | 2800000010000000200000000100200000000000400400000000000000000000000000000000000000000000000000000000 | (....... ..... .....@............................. |
| \ICON\24\0 | 44A76C | 568 | 1A3F6C | 28000000100000002000000001000800000000004001000000000000000000000000000000000000C05A000043342D005641 | (....... ...........@....................Z..C4-.VA |
| \ICON\25\0 | 44ACD4 | 468 | 1A44D4 | 28000000100000002000000001002000000000004004000000000000000000000000000000000000000000003322220C3C2B | (....... ..... .....@.......................3"".<+ |
| \ICON\26\0 | 44B13C | 568 | 1A493C | 2800000010000000200000000100080000000000400100000000000000000000000000000000000000000000FFFFFF000000 | (....... ...........@............................. |
| \ICON\27\0 | 44B6A4 | 468 | 1A4EA4 | 280000001000000020000000010020000000000040040000000000000000000000000000000000000000000B0000003B0000 | (....... ..... .....@..........................;.. |
| \ICON\28\0 | 44BB0C | 568 | 1A530C | 2800000010000000200000000100080000000000400100000000000000000000000000000000000000000000000000001E10 | (....... ...........@............................. |
| \ICON\29\0 | 44C074 | 468 | 1A5874 | 2800000010000000200000000100200000000000400400000000000000000000000000000000000000000000000000020000 | (....... ..... .....@............................. |
| \ICON\30\0 | 44C4DC | 568 | 1A5CDC | 2800000010000000200000000100080000000000400100000000000000000000000000000000000000000000624144007900 | (....... ...........@.......................bAD.y. |
| \ICON\31\0 | 44CA44 | 568 | 1A6244 | 280000001000000020000000010008000000000040010000000000000000000000000000000000000000000026262600BEBE | (....... ...........@.......................&&&... |
| \ICON\32\0 | 44CFAC | 468 | 1A67AC | 2800000010000000200000000100200000000000400400000000000000000000000000000000000000000000000000000000 | (....... ..... .....@............................. |
| \ICON\33\0 | 44D414 | 568 | 1A6C14 | 2800000010000000200000000100080000000000400100000000000000000000000000000000000000000000D9ACAC00E6B9 | (....... ...........@............................. |
| \ICON\34\0 | 44D97C | 468 | 1A717C | 2800000010000000200000000100200000000000400400000000000000000000000000000000000000000000000000000000 | (....... ..... .....@............................. |
| \ICON\35\0 | 44DDE4 | 568 | 1A75E4 | 2800000010000000200000000100080000000000400100000000000000000000000000000000000000000000FFFFFF000000 | (....... ...........@............................. |
| \ICON\36\0 | 44E34C | 468 | 1A7B4C | 280000001000000020000000010020000000000040040000000000000000000000000000000000000000000A000000380000 | (....... ..... .....@..........................8.. |
| \ICON\37\0 | 44E7B4 | 568 | 1A7FB4 | 2800000010000000200000000100080000000000400100000000000000000000000000000000000000000000FFFFFF00AA5F | (....... ...........@............................_ |
| \ICON\38\0 | 44ED1C | 568 | 1A851C | 2800000010000000200000000100080000000000400100000000000000000000000000000000000000000000C4B1B4005655 | (....... ...........@...........................VU |
| \ICON\39\0 | 44F284 | 468 | 1A8A84 | 2800000010000000200000000100200000000000400400000000000000000000000000000000000000000000000000000000 | (....... ..... .....@............................. |
| \ICON\40\0 | 44F6EC | 568 | 1A8EEC | 2800000010000000200000000100080000000000400100000000000000000000000000000000000000000000B5B5B5009C9C | (....... ...........@............................. |
| \ICON\41\0 | 44FC54 | 568 | 1A9454 | 2800000010000000200000000100080000000000400100000000000000000000000000000000000000000000108A21000065 | (....... ...........@.........................!..e |
| \ICON\42\0 | 4501BC | 6C8 | 1A99BC | 2800000018000000300000000100080000000000A00200000000000000000000000000000000000000000000D6ACAC00CC99 | (.......0......................................... |
| \ICON\43\0 | 450884 | 568 | 1AA084 | 28000000100000002000000001000800000000004001000000000000000000000000000000000000E9E1F100BDB6C200D5D3 | (....... ...........@............................. |
| \ICON\44\0 | 450DEC | 468 | 1AA5EC | 2800000010000000200000000100200000000000400400000000000000000000000000000000000000000000000000100000 | (....... ..... .....@............................. |
| \ICON\45\0 | 451254 | 568 | 1AAA54 | 2800000010000000200000000100080000000000400100000000000000000000000000000000000000000000333333000000 | (....... ...........@.......................333... |
| \ICON\46\0 | 4517BC | 468 | 1AAFBC | 2800000010000000200000000100200000000000400400000000000000000000000000000000000000000009000000340000 | (....... ..... .....@..........................4.. |
| \ICON\47\0 | 451C24 | 568 | 1AB424 | 2800000010000000200000000100080000000000400100000000000000000000000000000000000000000000FFFFFF007B70 | (....... ...........@...........................{p |
| \ICON\48\0 | 45218C | 468 | 1AB98C | 2800000010000000200000000100200000000000400400000000000000000000000000000000000000000000000000000000 | (....... ..... .....@............................. |
| \ICON\49\0 | 4525F4 | 568 | 1ABDF4 | 2800000010000000200000000100080000000000400100000000000000000000000000000000000000000000800080008000 | (....... ...........@............................. |
| \ICON\50\0 | 452B5C | 468 | 1AC35C | 2800000010000000200000000100200000000000400400000000000000000000000000000000000000000000000000000000 | (....... ..... .....@............................. |
| \MENU\130\1033 | 4220B0 | 236 | 1B4EB0 | 680061006E006700650020006600720061006D006500200063006F006C006F0072008800490066002000730065006C006500 | h.a.n.g.e. .f.r.a.m.e. .c.o.l.o.r...I.f. .s.e.l.e. |
| \MENU\134\1033 | 4222E8 | 236 | 1B50E8 | 2000620065006C006F007700200074006F002000730065006C00650063007400200077006800690063006800200066007200 | .b.e.l.o.w. .t.o. .s.e.l.e.c.t. .w.h.i.c.h. .f.r. |
| \MENU\146\1033 | 421ED8 | B2 | 1B4CD8 | 6500630074006500640020006700500068006F0074006F00530068006F0077002000770069006C006C002000640069007300 | e.c.t.e.d. .g.P.h.o.t.o.S.h.o.w. .w.i.l.l. .d.i.s. |
| \MENU\197\1033 | 421F90 | 11E | 1B4D90 | 7400690065007300220049006E0073006500720074002000680065007200650020007400680065002000730069007A006500 | t.i.e.s.".I.n.s.e.r.t. .h.e.r.e. .t.h.e. .s.i.z.e. |
| \MENU\226\1033 | 422520 | BEC | 1B5320 | 6C006C00200062006500200064006900730070006C0061007900650064004300490066002000730065006C00650063007400 | l.l. .b.e. .d.i.s.p.l.a.y.e.d.C.I.f. .s.e.l.e.c.t. |
| \MENU\227\1033 | 423110 | BEC | 1B5F10 | 730065006400200074006F00200063007200650061007400650020007400680065002000730065007400750070002E005400 | s.e.d. .t.o. .c.r.e.a.t.e. .t.h.e. .s.e.t.u.p...T. |
| \MENU\228\1033 | 423D00 | 162 | 1B6B00 | 2000730063007200650065006E002000660072006F006D002000740068006500200062006F00740074006F006D0020007300 | .s.c.r.e.e.n. .f.r.o.m. .t.h.e. .b.o.t.t.o.m. .s. |
| \MENU\229\1033 | 423E68 | 162 | 1B6C68 | 61006C006C002000660069006C0065007300200061006E006400200066006F006C0064006500720073002000770069006C00 | a.l.l. .f.i.l.e.s. .a.n.d. .f.o.l.d.e.r.s. .w.i.l. |
| \DIALOG\101\1033 | 418B00 | 5CE | 1AB900 | 7B7D8A665E5B534B48090000002306817A7B02455F5B504A2F1C00000000002F0D7F0540594F1A080000000000000000000B | {}.f[SKH......z{.E_[PJ/....../...@YO............ |
| \DIALOG\131\1033 | 419678 | 524 | 1AC478 | 0000003C0000000C0000000000000000000000000000000000000000000000000000000000000024F4D7A5FFFFFAD1FFE294 | ...<...................................$.......... |
| \DIALOG\132\1033 | 419BA0 | 5AA | 1AC9A0 | 200063006F006E00740069006E007500650020003F005B0046006F006C00640065007200730020006C006900730074002000 | .c.o.n.t.i.n.u.e. .?.[.F.o.l.d.e.r.s. .l.i.s.t. . |
| \DIALOG\133\1033 | 4217E0 | 92 | 1B45E0 | 73007400200069006E0020007400680065002000700072006500730063007200690062006500640020006400690072006500 | s.t. .i.n. .t.h.e. .p.r.e.s.c.r.i.b.e.d. .d.i.r.e. |
| \DIALOG\136\1033 | 41A828 | 66C | 1AD628 | 460069006C006500730043006F0075006E0074003D002500640019004D004300490020004500720072006F0072003A002000 | F.i.l.e.s.C.o.u.n.t.=.%.d...M.C.I. .E.r.r.o.r.:. . |
| \DIALOG\137\1033 | 41AE98 | 20E | 1ADC98 | 65006E00200069006D0061006700650073002E007E00490066002000730065006C0065006300740065006400200074006800 | e.n. .i.m.a.g.e.s...~.I.f. .s.e.l.e.c.t.e.d. .t.h. |
| \DIALOG\142\1033 | 41B0A8 | 2E8 | 1ADEA8 | 6C002000700061007400680020006F0072002000610020007000610072007400690061006C00200070006100740068004600 | l. .p.a.t.h. .o.r. .a. .p.a.r.t.i.a.l. .p.a.t.h.F. |
| \DIALOG\147\1033 | 41B390 | 6DA | 1AE190 | 730063007200650065006E0020007000610072007400730020006E006F007400200075007300650064002000620079002000 | s.c.r.e.e.n. .p.a.r.t.s. .n.o.t. .u.s.e.d. .b.y. . |
| \DIALOG\150\1033 | 41BA70 | 62E | 1AE870 | 650020006D006F00750073006500200062007500740074006F006E007300200074006F00200070006500720066006F007200 | e. .m.o.u.s.e. .b.u.t.t.o.n.s. .t.o. .p.e.r.f.o.r. |
| \DIALOG\153\1033 | 41C260 | 54A | 1AF060 | 660069006C0065007300200066006F0075006E006400200061006E0064002000770069006C006C002000730068006F007700 | f.i.l.e.s. .f.o.u.n.d. .a.n.d. .w.i.l.l. .s.h.o.w. |
| \DIALOG\171\1033 | 41C8C8 | 66E | 1AF6C8 | 64002E00200059006F00750020006D0075007300740020006800610076006500200069006E007300740061006C006C006500 | d... .Y.o.u. .m.u.s.t. .h.a.v.e. .i.n.s.t.a.l.l.e. |
| \DIALOG\174\1033 | 41D588 | 45C | 1B0388 | 740068006500200066006F006C00640065007200730020006C006900730074002A00520065006D006F007600650073002000 | t.h.e. .f.o.l.d.e.r.s. .l.i.s.t.*.R.e.m.o.v.e.s. . |
| \DIALOG\189\1033 | 41E0C8 | 18A | 1B0EC8 | 2000660069006C006500200064006100740065002F00740069006D0065002D00490066002000730065006C00650063007400 | .f.i.l.e. .d.a.t.e./.t.i.m.e.-.I.f. .s.e.l.e.c.t. |
| \DIALOG\191\1033 | 41E258 | 5D4 | 1B1058 | 61007200740069006E00670020007400680065002000730068006F0077002000660072006F006D0020007400680065002000 | a.r.t.i.n.g. .t.h.e. .s.h.o.w. .f.r.o.m. .t.h.e. . |
| \DIALOG\194\1033 | 41E830 | 372 | 1B1630 | 2000740065006D0070006F007200610072007900200065007800740065006E006400200079006F0075007200200064006500 | .t.e.m.p.o.r.a.r.y. .e.x.t.e.n.d. .y.o.u.r. .d.e. |
| \DIALOG\195\1033 | 41EBA8 | 2A8 | 1B19A8 | 7C0041006C006C002000460069006C0065007300200028002A002E002A0029007C002A002E002A007C007C00130053006C00 | |.A.l.l. .F.i.l.e.s. .(.*...*.).|.*...*.|.|...S.l. |
| \DIALOG\208\1033 | 41C820 | A6 | 1AF620 | 6F00530068006F0077009600490066002000730065006C006500630074006500640020006700500068006F0074006F005300 | o.S.h.o.w...I.f. .s.e.l.e.c.t.e.d. .g.P.h.o.t.o.S. |
| \DIALOG\209\1033 | 41C7B0 | 6A | 1AF5B0 | 640065007300690072006500640020006300610072006500660075006C006C007900200063006800650063006B0020007400 | d.e.s.i.r.e.d. .c.a.r.e.f.u.l.l.y. .c.h.e.c.k. .t. |
| \DIALOG\210\1033 | 41EFC8 | 276 | 1B1DC8 | 7000740069006F006E00200069006E0020007400680065002000660069006C00650020004400450053004300520049005000 | p.t.i.o.n. .i.n. .t.h.e. .f.i.l.e. .D.E.S.C.R.I.P. |
| \DIALOG\215\1033 | 41FB78 | 45E | 1B2978 | 67006500200062006F007200640065007200250053006500740020006800650072006500200074006800650020006D006100 | g.e. .b.o.r.d.e.r.%.S.e.t. .h.e.r.e. .t.h.e. .m.a. |
| \DIALOG\220\1033 | 41FFD8 | 26A | 1B2DD8 | 6F006E002000770069006C006C002000620065002000730074006F0072006500640020007700690074006800200061006C00 | o.n. .w.i.l.l. .b.e. .s.t.o.r.e.d. .w.i.t.h. .a.l. |
| \DIALOG\223\1033 | 4205F8 | 5CA | 1B33F8 | 53006C00690064006500530068006F0077001E00450064006900740020006700500068006F0074006F00530068006F007700 | S.l.i.d.e.S.h.o.w...E.d.i.t. .g.P.h.o.t.o.S.h.o.w. |
| \DIALOG\235\1033 | 420BC8 | 13E | 1B39C8 | 6700750072006100740069006F006E0020006D007500730074002000620065002000730061007600650064002E0020004100 | g.u.r.a.t.i.o.n. .m.u.s.t. .b.e. .s.a.v.e.d... .A. |
| \DIALOG\236\1033 | 420D08 | 542 | 1B3B08 | 12004300720065006100740069006E006700200053006C00690064006500530068006F007700270043006C00690063006B00 | ..C.r.e.a.t.i.n.g. .S.l.i.d.e.S.h.o.w.'.C.l.i.c.k. |
| \DIALOG\324\1033 | 41CF38 | 152 | 1AFD38 | 2E003700310029002E00200059006F0075002000630061006E00200069006E007300740061006C006C002000740068006500 | ..7.1.)... .Y.o.u. .c.a.n. .i.n.s.t.a.l.l. .t.h.e. |
| \DIALOG\2003\1033 | 4184B0 | 64C | 1AB2B0 | FFFFFFFFFFFFFFFFFFFFFEFFD4EAECFFC3E5E8FFF0B68AFF462911E7000000720000001C0000000100000000000000000000 | ........................F).....r.................. |
| \DIALOG\2004\1033 | 4190D0 | 5A8 | 1ABED0 | 14B8FF0023AAFF0029A9FF001CB2FF00153ACF000000FF000015C8000013C500000096000000730000005000E3D4FF00C7B1 | .......)........:....................s...P....... |
| \DIALOG\2005\1033 | 41A150 | 6D6 | 1ACF50 | 6400650072007300200077006800650072006500200074006F0020006700650074002000740068006500200069006D006100 | d.e.r.s. .w.h.e.r.e. .t.o. .g.e.t. .t.h.e. .i.m.a. |
| \DIALOG\2006\1033 | 41C0A0 | 1C0 | 1AEEA0 | 6E0064009900490066002000730065006C006500630074006500640020006700500068006F0074006F00530068006F007700 | n.d...I.f. .s.e.l.e.c.t.e.d. .g.P.h.o.t.o.S.h.o.w. |
| \DIALOG\2007\1033 | 41D090 | 4F2 | 1AFE90 | 7200690061006C002000640061007900730020006C00650066007400220055006E0072006500670069007300740065007200 | r.i.a.l. .d.a.y.s. .l.e.f.t.".U.n.r.e.g.i.s.t.e.r. |
| \DIALOG\2008\1033 | 41D9E8 | 6DA | 1B07E8 | 2000730068006F0077006E0020006F006E0020007300650063006F006E00640061007200790020006D006F006E0069007400 | .s.h.o.w.n. .o.n. .s.e.c.o.n.d.a.r.y. .m.o.n.i.t. |
| \DIALOG\2009\1033 | 41EE50 | 174 | 1B1C50 | 200069006D00610067006500730020006100630063006F007200640069006E006700200074006F0020004500780069006600 | .i.m.a.g.e.s. .a.c.c.o.r.d.i.n.g. .t.o. .E.x.i.f. |
| \DIALOG\2010\1033 | 41F240 | 934 | 1B2040 | 6C006C002000660069006C006C0020007400680065002000730063007200650065006E0020006500760065006E0020006900 | l.l. .f.i.l.l. .t.h.e. .s.c.r.e.e.n. .e.v.e.n. .i. |
| \DIALOG\2011\1033 | 420248 | 3AC | 1B3048 | 72006100740069006F006E002C002000740068006900730020006D00650061006E002000690074002000630061006E002000 | r.a.t.i.o.n.,. .t.h.i.s. .m.e.a.n. .i.t. .c.a.n. . |
| \DIALOG\2012\1033 | 421250 | 58A | 1B4050 | 700072006F006700720061006D002000660072006F006D0020007400680065002000730063007200650065006E0020007300 | p.r.o.g.r.a.m. .f.r.o.m. .t.h.e. .s.c.r.e.e.n. .s. |
| \DIALOG\30721\0 | 425850 | E8 | 1B8650 | 730020006E0065006500640065006400200074006F00200070006C0061007900200073006F006D00650020006F0066002000 | s. .n.e.e.d.e.d. .t.o. .p.l.a.y. .s.o.m.e. .o.f. . |
| \DIALOG\30734\0 | 425938 | 34 | 1B8738 | 61007600650072007B00460069006C00650020006700500068006F0074006F00530068006F0077002E006C006F00670020006400 | a.v.e.r.{.F.i.l.e. .g.P.h.o.t.o.S.h.o.w...l.o.g. .d. |
| \STRING\1\0 | 452FC4 | C0 | 1AC7C4 | 000011006700500068006F0074006F00530068006F00770020004600720065006500200032000E006700500068006F007400 | ....g.P.h.o.t.o.S.h.o.w. .F.r.e.e. .2...g.P.h.o.t. |
| \STRING\1\1033 | 453084 | 88 | 1AC884 | 000026006700500068006F0074006F00530068006F00770020004600720065006500200053006C0069006400650053006800 | ..&.g.P.h.o.t.o.S.h.o.w. .F.r.e.e. .S.l.i.d.e.S.h. |
| \STRING\7\1033 | 45310C | 3AE | 1AC90C | 00000000000000000000000019002600410062006F007500740020006700500068006F0074006F00530068006F0077002000 | ..............&.A.b.o.u.t. .g.P.h.o.t.o.S.h.o.w. . |
| \STRING\8\1033 | 4534BC | 8DA | 1ACCBC | 5100540072007900200068006F0076006500720069006E006700200074006800650020006D006F0075007300650020006F00 | Q.T.r.y. .h.o.v.e.r.i.n.g. .t.h.e. .m.o.u.s.e. .o. |
| \STRING\9\1033 | 453D98 | B7C | 1AD598 | 2A00490066002000730065006C006500630074006500640020006700500068006F0074006F00530068006F00770020006C00 | *.I.f. .s.e.l.e.c.t.e.d. .g.P.h.o.t.o.S.h.o.w. .l. |
| \STRING\10\1033 | 454914 | 8B4 | 1AE114 | 5D0043006F006E0066006900670075007200650020006200610063006B00670072006F0075006E006400200063006F006C00 | ].C.o.n.f.i.g.u.r.e. .b.a.c.k.g.r.o.u.n.d. .c.o.l. |
| \STRING\11\1033 | 4551C8 | E84 | 1AE9C8 | 480043006C00690063006B0020006800650072006500200066006F007200200069006E0066006F0072006D00610074006900 | H.C.l.i.c.k. .h.e.r.e. .f.o.r. .i.n.f.o.r.m.a.t.i. |
| \STRING\12\1033 | 45604C | 90A | 1AF84C | 4E00490066002000730065006C006500630074006500640020006700500068006F0074006F00530068006F00770020007700 | N.I.f. .s.e.l.e.c.t.e.d. .g.P.h.o.t.o.S.h.o.w. .w. |
| \STRING\13\1033 | 456958 | 946 | 1B0158 | 630043006C00690063006B0020004800650072006500200074006F00200063006F006E006600690067007500720065002000 | c.C.l.i.c.k. .H.e.r.e. .t.o. .c.o.n.f.i.g.u.r.e. . |
| \STRING\14\1033 | 4572A0 | 97C | 1B0AA0 | 3700490066002000730065006C006500630074006500640020006700500068006F0074006F00530068006F00770020007700 | 7.I.f. .s.e.l.e.c.t.e.d. .g.P.h.o.t.o.S.h.o.w. .w. |
| \STRING\15\1033 | 457C1C | 5E0 | 1B141C | 0D0046006100730074002000420069006C0069006E006500610072000400450078006900740033006700500068006F007400 | ..F.a.s.t. .B.i.l.i.n.e.a.r...E.x.i.t.3.g.P.h.o.t. |
| \STRING\16\1033 | 4581FC | 366 | 1B19FC | 4100490066002000730065006C0065006300740065006400200073006C006900640065002000730068006F00770020006500 | A.I.f. .s.e.l.e.c.t.e.d. .s.l.i.d.e. .s.h.o.w. .e. |
| \STRING\17\1033 | 458564 | 976 | 1B1D64 | 7600490066002000730065006C006500630074006500640020006700500068006F0074006F00530068006F00770020007700 | v.I.f. .s.e.l.e.c.t.e.d. .g.P.h.o.t.o.S.h.o.w. .w. |
| \STRING\18\1033 | 458EDC | 7A2 | 1B26DC | 150053006500740020006800650072006500200073006800610064006F007700200063006F006C006F0072001F0053006500 | ..S.e.t. .h.e.r.e. .s.h.a.d.o.w. .c.o.l.o.r...S.e. |
| \STRING\19\1033 | 459680 | 7EA | 1B2E80 | 3A0049006600200065006E00610062006C006500640020007400680069007300200070006900630074007500720065002000 | :.I.f. .e.n.a.b.l.e.d. .t.h.i.s. .p.i.c.t.u.r.e. . |
| \STRING\20\1033 | 459E6C | A48 | 1B366C | 1A004500720072006F0072002000720065006100640069006E0067002000660072006F006D002000660069006C0065002000 | ..E.r.r.o.r. .r.e.a.d.i.n.g. .f.r.o.m. .f.i.l.e. . |
| \STRING\21\1033 | 45A8B4 | 950 | 1B40B4 | 650055006E00610062006C006500200074006F002000660069006E00640020004D006100630072006F006D00650064006900 | e.U.n.a.b.l.e. .t.o. .f.i.n.d. .M.a.c.r.o.m.e.d.i. |
| \STRING\22\1033 | 45B204 | 8BE | 1B4A04 | 07005700610072006E0069006E006700040044006F006E0065002E00560061006C007500650020006F006600200073006500 | ..W.a.r.n.i.n.g...D.o.n.e...V.a.l.u.e. .o.f. .s.e. |
| \STRING\23\1033 | 45BAC4 | DAA | 1B52C4 | 3C00490066002000730065006C0065006300740065006400200061002000700072006500760069006500770020006F006600 | <.I.f. .s.e.l.e.c.t.e.d. .a. .p.r.e.v.i.e.w. .o.f. |
| \STRING\24\1033 | 45C870 | C44 | 1B6070 | 440049006E0073006500720074002000680065007200650020006100200063006F0070007900720069006700680074002000 | D.I.n.s.e.r.t. .h.e.r.e. .a. .c.o.p.y.r.i.g.h.t. . |
| \STRING\25\1033 | 45D4B4 | 80E | 1B6CB4 | 860049006E007300650072007400200068006500720065002000740068006500200074006500780074002000750073006500 | ..I.n.s.e.r.t. .h.e.r.e. .t.h.e. .t.e.x.t. .u.s.e. |
| \STRING\26\1033 | 45DCC4 | A8A | 1B74C4 | 2400410072006500200079006F00750020007300750072006500200079006F00750020007700690073006800200074006F00 | $.A.r.e. .y.o.u. .s.u.r.e. .y.o.u. .w.i.s.h. .t.o. |
| \STRING\27\1033 | 45E750 | ABA | 1B7F50 | 8D0049006600200065006E00610062006C006500640020006700500068006F0074006F00530068006F007700200077006900 | ..I.f. .e.n.a.b.l.e.d. .g.P.h.o.t.o.S.h.o.w. .w.i. |
| \STRING\28\1033 | 45F20C | 5E4 | 1B8A0C | 240025006400200064006100790073002000720065006D00610069006E0069006E00670020006200650066006F0072006500 | $.%.d. .d.a.y.s. .r.e.m.a.i.n.i.n.g. .b.e.f.o.r.e. |
| \STRING\29\1033 | 45F7F0 | AEE | 1B8FF0 | 0E004C0061006E0064007300630061007000650020004D006F0064006500380049006D006100670065002000500072006F00 | ..L.a.n.d.s.c.a.p.e. .M.o.d.e.8.I.m.a.g.e. .P.r.o. |
| \STRING\30\1033 | 4602E0 | B58 | 1B9AE0 | 5C0043006C00690063006B0020006800650072006500200074006F00200069006E007300650072007400200069006E007400 | \.C.l.i.c.k. .h.e.r.e. .t.o. .i.n.s.e.r.t. .i.n.t. |
| \STRING\31\1033 | 460E38 | B7E | 1BA638 | 8800490066002000730065006C006500630074006500640020006700500068006F0074006F00530068006F00770020007700 | ..I.f. .s.e.l.e.c.t.e.d. .g.P.h.o.t.o.S.h.o.w. .w. |
| \STRING\32\1033 | 4619B8 | 3BC | 1BB1B8 | 820054006800650020006B0065007900200079006F007500200065006E007400650072006500640020006900730020006E00 | ..T.h.e. .k.e.y. .y.o.u. .e.n.t.e.r.e.d. .i.s. .n. |
| \STRING\33\1033 | 461D74 | 1F2 | 1BB574 | 0B0042006F00780020004500780070006C006F00640065000B0042006F007800200049006D0070006C006F00640065001700 | ..B.o.x. .E.x.p.l.o.d.e...B.o.x. .I.m.p.l.o.d.e... |
| \STRING\34\1033 | 461F68 | 61E | 1BB768 | 150048006F00720069007A006F006E00740061006C0020004200610072007300200053006C006900640065000F0048006F00 | ..H.o.r.i.z.o.n.t.a.l. .B.a.r.s. .S.l.i.d.e...H.o. |
| \STRING\35\1033 | 462588 | 91A | 1BBD88 | 2F00560061006C007500650020006F0066002000730065006C006500630074006500640020006600690065006C0064002000 | /.V.a.l.u.e. .o.f. .s.e.l.e.c.t.e.d. .f.i.e.l.d. . |
| \STRING\36\1033 | 462EA4 | 204 | 1BC6A4 | 000000000000000000000000000000000000000000000000000000008800430075007200720065006E007400200073006500 | ..............................C.u.r.r.e.n.t. .s.e. |
| \STRING\44\1033 | 4630A8 | 134 | 1BC8A8 | 000000004B0055006E00610062006C006500200074006F00200063006F006E006E00650063007400200074006F0020007700 | ....K.U.n.a.b.l.e. .t.o. .c.o.n.n.e.c.t. .t.o. .w. |
| \STRING\46\1033 | 4631DC | 2E | 1BC9DC | 00000000000000000000000000000000000000000000000007005000720065007600690065007700000000000000 | ..........................P.r.e.v.i.e.w....... |
| \STRING\47\1033 | 46320C | 7A | 1BCA0C | 00000000000000000000000000000000000000000000000000002D0050006C00650061007300650020007700610069007400 | ..........................-.P.l.e.a.s.e. .w.a.i.t. |
| \STRING\52\1033 | 463288 | 32C | 1BCA88 | 100141006E00200075006E007200650063006F00760065007200610062006C00650020006500720072006F00720020006300 | ..A.n. .u.n.r.e.c.o.v.e.r.a.b.l.e. .e.r.r.o.r. .c. |
| \STRING\57\1033 | 4635B4 | 76 | 1BCDB4 | 0000000000000000000000000000000000002B004500720072006F0072002000250064002000280025006400290020007700 | ..................+.E.r.r.o.r. .%.d. .(.%.d.). .w. |
| \STRING\58\1033 | 46362C | 5C | 1BCE2C | 000000000000000000000000000000000000000000000000000000000600430072006500610074006500180054007200790020006700500068006F0074006F00530068006F0077002000500072006F0020004E006F00770020002100 | ..............................C.r.e.a.t.e...T.r.y. .g.P.h.o.t.o.S.h.o.w. .P.r.o. .N.o.w. .!. |
| \STRING\59\1033 | 463688 | 5DE | 1BCE88 | 3E006700500068006F0074006F00530068006F0077002000500072006F002000690073002000740068006500200067007200 | >.g.P.h.o.t.o.S.h.o.w. .P.r.o. .i.s. .t.h.e. .g.r. |
| \STRING\60\1033 | 463C68 | 18A | 1BD468 | 2E0054006800650020005000650072006600650063007400200073006F00660074007700610072006500200066006F007200 | ..T.h.e. .P.e.r.f.e.c.t. .s.o.f.t.w.a.r.e. .f.o.r. |
| \STRING\3585\1033 | 463DF4 | 3E | 1BD5F4 | 0F006700500068006F0074006F00530068006F00770020004600720065006500000000000000000000000000000000000000000000000000000000000000 | ..g.P.h.o.t.o.S.h.o.w. .F.r.e.e............................... |
| \STRING\3602\1033 | 463E34 | 44 | 1BD634 | 12004F00700065006E0020007400680069007300200064006F00630075006D0065006E007400000000000000000000000000000000000000000000000000000000000000 | ..O.p.e.n. .t.h.i.s. .d.o.c.u.m.e.n.t............................... |
| \STRING\3841\0 | 463E78 | 82 | 1BD678 | 04004F00700065006E00070053006100760065002000410073000F0041006C006C002000460069006C006500730020002800 | ..O.p.e.n...S.a.v.e. .A.s...A.l.l. .F.i.l.e.s. .(. |
| \STRING\3842\0 | 463EFC | 2A | 1BD6FC | 000005002600480069006400650000000000000000000000000000000000000000000000000000000000 | ....&.H.i.d.e............................. |
| \STRING\3843\0 | 463F28 | 184 | 1BD728 | 1E004E006F0020006500720072006F00720020006D0065007300730061006700650020006900730020006100760061006900 | ..N.o. .e.r.r.o.r. .m.e.s.s.a.g.e. .i.s. .a.v.a.i. |
| \STRING\3857\0 | 4640AC | 4EE | 1BD8AC | 130049006E0063006F00720072006500630074002000660069006C0065006E0061006D0065002E0018004600610069006C00 | ..I.n.c.o.r.r.e.c.t. .f.i.l.e.n.a.m.e.....F.a.i.l. |
| \STRING\3858\0 | 46459C | 264 | 1BDD9C | 110045006E00740065007200200061006E00200069006E00740065006700650072002E000F0045006E007400650072002000 | ..E.n.t.e.r. .a.n. .i.n.t.e.g.e.r.....E.n.t.e.r. . |
| \STRING\3859\0 | 464800 | 2DA | 1BE000 | 170055006E00650078007000650063007400650064002000660069006C006500200066006F0072006D00610074002E004F00 | ..U.n.e.x.p.e.c.t.e.d. .f.i.l.e. .f.o.r.m.a.t...O. |
| \STRING\3860\0 | 464ADC | 8A | 1BE2DC | 1F00250031003A002000250032000A0043006F006E00740069006E00750065002000720075006E006E0069006E0067002000 | ..%.1.:. .%.2...C.o.n.t.i.n.u.e. .r.u.n.n.i.n.g. . |
| \STRING\3865\0 | 464B68 | AC | 1BE368 | 000000000000000000000000000000000000000000000000230055006E00610062006C006500200074006F00200072006500 | .........................U.n.a.b.l.e. .t.o. .r.e. |
| \STRING\3866\0 | 464C14 | DE | 1BE414 | 230055006E00610062006C006500200074006F0020006C006F006100640020006D00610069006C0020007300790073007400 | .U.n.a.b.l.e. .t.o. .l.o.a.d. .m.a.i.l. .s.y.s.t. |
| \STRING\3867\0 | 464CF4 | 4A8 | 1BE4F4 | 12004E006F0020006500720072006F00720020006F0063006300750072007200650064002E002D0041006E00200075006E00 | ..N.o. .e.r.r.o.r. .o.c.c.u.r.r.e.d...-.A.n. .u.n. |
| \STRING\3868\0 | 46519C | 228 | 1BE99C | 12004E006F0020006500720072006F00720020006F0063006300750072007200650064002E002D0041006E00200075006E00 | ..N.o. .e.r.r.o.r. .o.c.c.u.r.r.e.d...-.A.n. .u.n. |
| \STRING\3869\0 | 4653C4 | 2C | 1BEBC4 | 060070006900780065006C007300000000000000000000000000000000000000000000000000000000000000 | ..p.i.x.e.l.s............................... |
| \STRING\3887\0 | 4653F0 | 53E | 1BEBF0 | 0000070055006E0063006800650063006B00050043006800650063006B0005004D0069007800650064002C004F006E006500 | ....U.n.c.h.e.c.k...C.h.e.c.k...M.i.x.e.d.,.O.n.e. |
| \GROUP_CURSOR\129\0 | 4154F8 | 14 | 1A82F8 | 0000000000000000000000000000000000000000 | .................... |
| \GROUP_CURSOR\30977\0 | 4245C8 | 22 | 1B73C8 | 7300200028004500720072006F00720020002500640029002B0043006C0069006300 | s. .(.E.r.r.o.r. .%.d.).+.C.l.i.c. |
| \GROUP_CURSOR\30998\0 | 424DB8 | 14 | 1B7BB8 | 2000640065007300740069006E00610074006900 | .d.e.s.t.i.n.a.t.i. |
| \GROUP_CURSOR\30999\0 | 424728 | 14 | 1B7528 | 45007800690066002000540069006D0065002000 | E.x.i.f. .T.i.m.e. . |
| \GROUP_CURSOR\31000\0 | 424C68 | 14 | 1B7A68 | 6C0064006500720020006F007200200066006900 | l.d.e.r. .o.r. .f.i. |
| \GROUP_CURSOR\31001\0 | 424B18 | 14 | 1B7918 | 65007300740069006E006100740069006F006E00 | e.s.t.i.n.a.t.i.o.n. |
| \GROUP_CURSOR\31002\0 | 425448 | 14 | 1B8248 | 650066006F0072006D006100740069006F006E00 | e.f.o.r.m.a.t.i.o.n. |
| \GROUP_CURSOR\31003\0 | 4249C8 | 14 | 1B77C8 | 6F007700730020006D0065006400690061002000 | o.w.s. .m.e.d.i.a. . |
| \GROUP_CURSOR\31004\0 | 425058 | 14 | 1B7E58 | 7000200066006F00720020006400650074006100 | p. .f.o.r. .d.e.t.a. |
| \GROUP_CURSOR\31005\0 | 424878 | 14 | 1B7678 | 6100760069006E00670020007400680065002000 | a.v.i.n.g. .t.h.e. . |
| \GROUP_CURSOR\31006\0 | 424F08 | 14 | 1B7D08 | 7000650063007400200072006100740069006F00 | p.e.c.t. .r.a.t.i.o. |
| \GROUP_CURSOR\31007\0 | 4251A8 | 14 | 1B7FA8 | 74006500630074002000700061006E006F007200 | t.e.c.t. .p.a.n.o.r. |
| \GROUP_CURSOR\31008\0 | 4252F8 | 14 | 1B80F8 | 6900730020006800690067006800650072002000 | i.s. .h.i.g.h.e.r. . |
| \GROUP_CURSOR\31009\0 | 425598 | 14 | 1B8398 | 61006D0065002000730069007A00650020006100 | a.m.e. .s.i.z.e. .a. |
| \GROUP_CURSOR\31010\0 | 4256E8 | 14 | 1B84E8 | 20006E006F007400200070006C00610079002000 | .n.o.t. .p.l.a.y. . |
| \GROUP_CURSOR\31011\0 | 425838 | 14 | 1B8638 | 200063006F006D0070006F006E0065006E007400 | .c.o.m.p.o.n.e.n.t. |
| \GROUP_ICON\100\0 | 465930 | 76 | 1BF130 | 0000010008002020100001000400E8020000010010101000010004002801000002002020000001000800A808000003001010 | ...... ....................(..... .............. |
| \GROUP_ICON\155\0 | 4659A8 | 14 | 1BF1A8 | 0000010001001818000001000800C80600000A00 | .................... |
| \GROUP_ICON\156\0 | 4659BC | 14 | 1BF1BC | 0000010001001818000001000800C80600000B00 | .................... |
| \GROUP_ICON\157\0 | 4659D0 | 14 | 1BF1D0 | 0000010001001818000001000800C80600000C00 | .................... |
| \GROUP_ICON\158\0 | 4659E4 | 14 | 1BF1E4 | 0000010001001818000001000800C80600000D00 | .................... |
| \GROUP_ICON\159\0 | 4659F8 | 14 | 1BF1F8 | 0000010001001818000001000800C80600000E00 | .................... |
| \GROUP_ICON\160\0 | 465A0C | 14 | 1BF20C | 0000010001001818000001000800C80600000F00 | .................... |
| \GROUP_ICON\161\0 | 465A20 | 14 | 1BF220 | 0000010001001818000001000800C80600001000 | .................... |
| \GROUP_ICON\168\0 | 465A34 | 14 | 1BF234 | 0000010001001818000001000800C80600001100 | .................... |
| \GROUP_ICON\169\0 | 465A48 | 14 | 1BF248 | 0000010001001818000001000800C80600001200 | .................... |
| \GROUP_ICON\176\0 | 465A5C | 30 | 1BF25C | 000001000300101010000100040028010000130010100000010008006805000014001010000001002000680400001500 | ..............(.............h........... .h..... |
| \GROUP_ICON\177\0 | 465A8C | 22 | 1BF28C | 00000100020010100000010008006805000016001010000001002000680400001700 | ..............h........... .h..... |
| \GROUP_ICON\178\0 | 465AB0 | 22 | 1BF2B0 | 00000100020010100000010008006805000018001010000001002000680400001900 | ..............h........... .h..... |
| \GROUP_ICON\179\0 | 465AD4 | 22 | 1BF2D4 | 0000010002001010000001000800680500001A001010000001002000680400001B00 | ..............h........... .h..... |
| \GROUP_ICON\181\0 | 465AF8 | 22 | 1BF2F8 | 0000010002001010000001000800680500001C001010000001002000680400001D00 | ..............h........... .h..... |
| \GROUP_ICON\182\0 | 465B1C | 14 | 1BF31C | 0000010001001010000001000800680500001E00 | ..............h..... |
| \GROUP_ICON\183\0 | 465B30 | 22 | 1BF330 | 0000010002001010000001000800680500001F001010000001002000680400002000 | ..............h........... .h... . |
| \GROUP_ICON\184\0 | 465B54 | 22 | 1BF354 | 00000100020010100000010008006805000021001010000001002000680400002200 | ..............h...!....... .h...". |
| \GROUP_ICON\185\0 | 465B78 | 22 | 1BF378 | 00000100020010100000010008006805000023001010000001002000680400002400 | ..............h.......... .h...$. |
| \GROUP_ICON\188\0 | 465B9C | 14 | 1BF39C | 0000010001001010000001000800680500002500 | ..............h...%. |
| \GROUP_ICON\190\0 | 465BB0 | 22 | 1BF3B0 | 00000100020010100000010008006805000026001010000001002000680400002700 | ..............h...&....... .h...'. |
| \GROUP_ICON\193\0 | 465BD4 | 14 | 1BF3D4 | 0000010001001010000001000800680500002800 | ..............h...(. |
| \GROUP_ICON\196\0 | 465BE8 | 14 | 1BF3E8 | 0000010001001010000001000800680500002900 | ..............h...). |
| \GROUP_ICON\202\0 | 465BFC | 14 | 1BF3FC | 0000010001001818000001000800C80600002A00 | ..................*. |
| \GROUP_ICON\211\0 | 465C10 | 22 | 1BF410 | 0000010002001010000001000800680500002B001010000001002000680400002C00 | ..............h...+....... .h...,. |
| \GROUP_ICON\213\0 | 465C34 | 22 | 1BF434 | 0000010002001010000001000800680500002D001010000001002000680400002E00 | ..............h...-....... .h..... |
| \GROUP_ICON\214\0 | 465C58 | 22 | 1BF458 | 0000010002001010000001000800680500002F001010000001002000680400003000 | ..............h.../....... .h...0. |
| \GROUP_ICON\225\0 | 465C7C | 22 | 1BF47C | 00000100020010100000010008006805000031001010000001002000680400003200 | ..............h...1....... .h...2. |
| \GROUP_ICON\255\0 | 465CA0 | 14 | 1BF4A0 | 0000010001001818000001000800C80600000900 | .................... |
| \VERSION\1\0 | 465CB4 | 3A4 | 1BF4B4 | A40334000000560053005F00560045005200530049004F004E005F0049004E0046004F0000000000BD04EFFE000001000000 | ..4...V.S._.V.E.R.S.I.O.N._.I.N.F.O............... |
| \24\1\1033 | 466058 | 5B2 | 1BF858 | EFBBBF3C3F786D6C2076657273696F6E3D22312E302220656E636F64696E673D225554462D3822207374616E64616C6F6E65 | ...<?xml version="1.0" encoding="UTF-8" standalone |
| \240\131\1033 | 421950 | 6A | 1B4750 | 650064002E007900490066002000730065006C006500630074006500640020006700500068006F0074006F00530068006F00 | e.d...y.I.f. .s.e.l.e.c.t.e.d. .g.P.h.o.t.o.S.h.o. |
| \240\136\1033 | 421E50 | 82 | 1B4C50 | 74006500640020006700500068006F0074006F00530068006F0077002000770069006C006C0020006100750074006F006D00 | t.e.d. .g.P.h.o.t.o.S.h.o.w. .w.i.l.l. .a.u.t.o.m. |
| \240\142\1033 | 421878 | A4 | 1B4678 | 6500640020006700500068006F0074006F00530068006F0077002000770069006C006C00200069006E0063006C0075006400 | e.d. .g.P.h.o.t.o.S.h.o.w. .w.i.l.l. .i.n.c.l.u.d. |
| \240\150\1033 | 4219C0 | 56 | 1B47C0 | 7700200061006C006C00200074006800650020004D005000450047002000660069006C0065007300200066006F0075006E0064002E0020004D006900630072006F0073006F006600740020004D006500640069006100 | w. .a.l.l. .t.h.e. .M.P.E.G. .f.i.l.e.s. .f.o.u.n.d... .M.i.c.r.o.s.o.f.t. .M.e.d.i.a. |
| \240\153\1033 | 421A18 | F2 | 1B4818 | 50006C00610079006500720020006D00750073007400200062006500200069006E007300740061006C006C00650064002E00 | P.l.a.y.e.r. .m.u.s.t. .b.e. .i.n.s.t.a.l.l.e.d... |
| \240\174\1033 | 421B10 | 98 | 1B4910 | 7400690076006500580020006D00750073007400200062006500200069006E007300740061006C006C00650064002E004700 | t.i.v.e.X. .m.u.s.t. .b.e. .i.n.s.t.a.l.l.e.d...G. |
| \240\210\1033 | 421C40 | 6A | 1B4A40 | 640020006600690065006C00640020006D007500730074002000620065002000670072006500610074006500720020007400 | d. .f.i.e.l.d. .m.u.s.t. .b.e. .g.r.e.a.t.e.r. .t. |
| \240\215\1033 | 421CB0 | 39 | 1B4AB0 | 75007300740020006200650020006200650074007700650065006E00200025006400200061006E0064002000250064003600560061006C0075 | u.s.t. .b.e. .b.e.t.w.e.e.n. .%.d. .a.n.d. .%.d.6.V.a.l.u |
| \240\223\1033 | 421D70 | DC | 1B4B70 | 6E002000730065006C00650063007400650064002E00200050006C0065006100730065002000730065006C00650063007400 | n. .s.e.l.e.c.t.e.d... .P.l.e.a.s.e. .s.e.l.e.c.t. |
| \240\2004\1033 | 421920 | 2B | 1B4720 | 6500200050006C00610079006500720020006D00750073007400200062006500200069006E007300740061 | e. .P.l.a.y.e.r. .m.u.s.t. .b.e. .i.n.s.t.a |
| \240\2008\1033 | 421BA8 | 91 | 1B49A8 | 660069006C00650073002000610074002000660075006C006C002000730063007200650065006E001900570072006F006E00 | f.i.l.e.s. .a.t. .f.u.l.l. .s.c.r.e.e.n...W.r.o.n. |
| \240\2011\1033 | 421CF0 | 79 | 1B4AF0 | 66002000730065006C006500630074006500640020006600690065006C00640020006D007500730074002000620065002000 | f. .s.e.l.e.c.t.e.d. .f.i.e.l.d. .m.u.s.t. .b.e. . |
| \241\164\0 | 418478 | C | 1AB278 | FFF9ECFFA8D3DCFFCCE2E0FF | ............ |
| \241\166\0 | 418488 | 14 | 1AB288 | 492915EA000000740000001D77593B1C121F9264 | I).....t....wY;....d |
| \241\203\0 | 4184A0 | E | 1AB2A0 | 00000007896748C8CF7E47FFFAF8 | .....gH..~G... |
| Intelligent String |
| • Key is valid but there is a problem with your system clock, for a solution please contact us using the form on www.gphotoshow.com and report this error messageVLC - Version %s %s - NOT COMPATIBLE -VLC - Not InstallediUnable to find VLC Media Player, please verify it is installed correctly. • gPhotoShowFree.scr • 3HZB |
| Flow Anomalies |
| Offset | RVA | Section | Description |
|---|---|---|---|
| 76B4 | 4184A0 | *unnamed* | JMP [static] | Indirect jump to absolute memory address |
| 8042 | 4184A0 | *unnamed* | CALL [static] | Indirect call to absolute memory address |
| AC7C | 52FA8073 | *unnamed* | CALL [static] | Indirect call to absolute memory address |
| 2B187 | 6BCCF475 | *unnamed* | CALL [static] | Indirect call to absolute memory address |
| 330AE | EBA7ED3 | *unnamed* | JMP [static] | Indirect jump to absolute memory address |
| 3C693 | 2691078E | *unnamed* | CALL [static] | Indirect call to absolute memory address |
| 5C862 | 1B6E6FF1 | *unnamed* | JMP [static] | Indirect jump to absolute memory address |
| 72ECB | 1B6E6FF1 | *unnamed* | CALL [static] | Indirect call to absolute memory address |
| 764B0 | 7C1D143A | *unnamed* | CALL [static] | Indirect call to absolute memory address |
| 8AEDC | 7C1D143A | *unnamed* | JMP [static] | Indirect jump to absolute memory address |
| 8BEA2 | 7C1D143A | *unnamed* | CALL [static] | Indirect call to absolute memory address |
| 8D757 | 5EF11B38 | *unnamed* | JMP [static] | Indirect jump to absolute memory address |
| 90E17 | A0C0DE3 | *unnamed* | JMP [static] | Indirect jump to absolute memory address |
| 955F4 | 6F1B42F7 | *unnamed* | JMP [static] | Indirect jump to absolute memory address |
| 9FFE2 | 6F1B42F7 | *unnamed* | JMP [static] | Indirect jump to absolute memory address |
| ACB8E | 55A4BAC5 | *unnamed* | JMP [static] | Indirect jump to absolute memory address |
| B4342 | 55A4BAC5 | *unnamed* | JMP [static] | Indirect jump to absolute memory address |
| BA4A0 | E3E7ADD | *unnamed* | CALL [static] | Indirect call to absolute memory address |
| CA2F9 | E3E7ADD | *unnamed* | JMP [static] | Indirect jump to absolute memory address |
| CEB48 | E3E7ADD | *unnamed* | CALL [static] | Indirect call to absolute memory address |
| DD192 | E3E7ADD | *unnamed* | CALL [static] | Indirect call to absolute memory address |
| DEBEB | E3E7ADD | *unnamed* | CALL [static] | Indirect call to absolute memory address |
| EFADF | 1E948351 | *unnamed* | CALL [static] | Indirect call to absolute memory address |
| 1058D7 | 4ABC40DC | *unnamed* | JMP [static] | Indirect jump to absolute memory address |
| 1096F6 | 4ABC40DC | *unnamed* | JMP [static] | Indirect jump to absolute memory address |
| 10F4AC | 4ABC40DC | *unnamed* | CALL [static] | Indirect call to absolute memory address |
| 110C2A | 4ABC40DC | *unnamed* | CALL [static] | Indirect call to absolute memory address |
| 117B11 | 2C982F0F | *unnamed* | JMP [static] | Indirect jump to absolute memory address |
| 11E353 | 1F528B62 | *unnamed* | JMP [static] | Indirect jump to absolute memory address |
| 1213C9 | 501BAB0A | *unnamed* | JMP [static] | Indirect jump to absolute memory address |
| 140A58 | 6F89AF9B | *unnamed* | JMP [static] | Indirect jump to absolute memory address |
| 149EFF | 5A974516 | *unnamed* | CALL [static] | Indirect call to absolute memory address |
| 14F86B | 16E18AC1 | *unnamed* | CALL [static] | Indirect call to absolute memory address |
| 15CC5B | 6B40ABF9 | *unnamed* | JMP [static] | Indirect jump to absolute memory address |
| 15E3B1 | 273E456 | *unnamed* | JMP [static] | Indirect jump to absolute memory address |
| 15ECA3 | 49373F60 | *unnamed* | CALL [static] | Indirect call to absolute memory address |
| 161656 | 5904D5D9 | *unnamed* | JMP [static] | Indirect jump to absolute memory address |
| 16C3D6 | 5904D5D9 | *unnamed* | CALL [static] | Indirect call to absolute memory address |
| 16DC88 | 5904D5D9 | *unnamed* | CALL [static] | Indirect call to absolute memory address |
| 183247 | 60E1100D | *unnamed* | JMP [static] | Indirect jump to absolute memory address |
| 196608 | FF00FF | .rsrc | JMP [static] | Indirect jump to absolute memory address |
| 196729 | FFFF00 | .rsrc | JMP [static] | Indirect jump to absolute memory address |
| 196759 | FFAA00 | .rsrc | JMP [static] | Indirect jump to absolute memory address |
| 196789 | FF5500 | .rsrc | JMP [static] | Indirect jump to absolute memory address |
| 1967B9 | FF0000 | .rsrc | JMP [static] | Indirect jump to absolute memory address |
| 199846 | 4CE9E9F9 | .rsrc | JMP [static] | Indirect jump to absolute memory address |
| 1A2558 | FF00FF | .rsrc | JMP [static] | Indirect jump to absolute memory address |
| 1A2588 | FF00AA | .rsrc | JMP [static] | Indirect jump to absolute memory address |
| 1A25B8 | FF0057 | .rsrc | JMP [static] | Indirect jump to absolute memory address |
| 1A25E8 | FF0025 | .rsrc | JMP [static] | Indirect jump to absolute memory address |
| 1A2679 | FFFF00 | .rsrc | JMP [static] | Indirect jump to absolute memory address |
| 1A26A9 | FFAA00 | .rsrc | JMP [static] | Indirect jump to absolute memory address |
| 1A26D9 | FF5500 | .rsrc | JMP [static] | Indirect jump to absolute memory address |
| 1A2709 | FF0000 | .rsrc | JMP [static] | Indirect jump to absolute memory address |
| 1A5A33 | FF0000 | .rsrc | JMP [static] | Indirect jump to absolute memory address |
| 1A7BC3 | 12FFAE7B | .rsrc | CALL [static] | Indirect call to absolute memory address |
| 1ABF70 | FF00FF | .rsrc | JMP [static] | Indirect jump to absolute memory address |
| 1ABFA0 | FF00AA | .rsrc | JMP [static] | Indirect jump to absolute memory address |
| 1ABFD0 | FF0057 | .rsrc | JMP [static] | Indirect jump to absolute memory address |
| 1AC000 | FF0025 | .rsrc | JMP [static] | Indirect jump to absolute memory address |
| 1AC091 | FFFF00 | .rsrc | JMP [static] | Indirect jump to absolute memory address |
| 1AC0C1 | FFAA00 | .rsrc | JMP [static] | Indirect jump to absolute memory address |
| 1AC0F1 | FF5500 | .rsrc | JMP [static] | Indirect jump to absolute memory address |
| 1AC121 | FF0000 | .rsrc | JMP [static] | Indirect jump to absolute memory address |
| 1AC5FB | FFCF3A | .rsrc | CALL [static] | Indirect call to absolute memory address |
| 1CC82A | FFCF3A | *unnamed* | JMP [static] | Indirect jump to absolute memory address |
| 1CC959 | 2A708BA9 | *unnamed* | JMP [static] | Indirect jump to absolute memory address |
| 1CE746 | 18DEF8ED | *unnamed* | JMP [static] | Indirect jump to absolute memory address |
| 1DDBA0 | 1E708F2 | *unnamed* | JMP [static] | Indirect jump to absolute memory address |
| 1E693C | 1E708F2 | *unnamed* | JMP [static] | Indirect jump to absolute memory address |
| 1FD305 | 1E708F2 | .data | CALL [static] | Indirect call to absolute memory address |
| 2098DC | 2B482C2B | .data | CALL [static] | Indirect call to absolute memory address |
| 219087 | 52553C42 | .data | JMP [static] | Indirect jump to absolute memory address |
| 21C1EC | 748E159B | .data | JMP [static] | Indirect jump to absolute memory address |
| 22FC2A | 3909FBF2 | .data | JMP [static] | Indirect jump to absolute memory address |
| 23302B | 3909FBF2 | .data | CALL [static] | Indirect call to absolute memory address |
| 241C4A | 3909FBF2 | .data | JMP [static] | Indirect jump to absolute memory address |
| 2426C6 | 3909FBF2 | .data | JMP [static] | Indirect jump to absolute memory address |
| 24A2B2 | 3909FBF2 | .data | JMP [static] | Indirect jump to absolute memory address |
| 2560D4 | 3909FBF2 | .data | JMP [static] | Indirect jump to absolute memory address |
| 25DE0E | 3909FBF2 | .data | CALL [static] | Indirect call to absolute memory address |
| 26BCB9 | 3909FBF2 | .data | CALL [static] | Indirect call to absolute memory address |
| 26C3FB | 3909FBF2 | .data | JMP [static] | Indirect jump to absolute memory address |
| 28E574 | 76738CBF | .data | CALL [static] | Indirect call to absolute memory address |
| 29A6CD | 76738CBF | .data | CALL [static] | Indirect call to absolute memory address |
| 2A6E97 | 732BA589 | .data | CALL [static] | Indirect call to absolute memory address |
| 2B0537 | 732BA589 | .data | CALL [static] | Indirect call to absolute memory address |
| 2B2EE1 | 6FBC1473 | .data | JMP [static] | Indirect jump to absolute memory address |
| 2B4B0B | 594353C5 | .data | CALL [static] | Indirect call to absolute memory address |
| 2B776B | 64CFA188 | .data | CALL [static] | Indirect call to absolute memory address |
| 2B8158 | 1220BBA9 | .data | JMP [static] | Indirect jump to absolute memory address |
| 2BAE87 | 1220BBA9 | .data | JMP [static] | Indirect jump to absolute memory address |
| 2BD04E | 1220BBA9 | .data | CALL [static] | Indirect call to absolute memory address |
| 2BE15F | 20A39D18 | .data | CALL [static] | Indirect call to absolute memory address |
| 2C97DF | 3C4A4921 | .data | JMP [static] | Indirect jump to absolute memory address |
| 2CA5B0 | 2074AFDB | .data | JMP [static] | Indirect jump to absolute memory address |
| 2CF86B | 4A1FCCC6 | .data | JMP [static] | Indirect jump to absolute memory address |
| 2DAE7D | 4483B74 | .data | CALL [static] | Indirect call to absolute memory address |
| 2E3FE3 | 53474782 | .data | JMP [static] | Indirect jump to absolute memory address |
| 2F4ACF | 53474782 | .data | JMP [static] | Indirect jump to absolute memory address |
| 474DEE-474DFE | N/A | .data | Potential obfuscated jump sequence detected, count: 7 |
| 400-153BFF | 1000 | *unnamed* | Executable section anomaly, first bytes: 8C75DBA50A8F4695 |
| 1F3E00-4E19FF | EC1000 | .data | Executable section anomaly, first bytes: 5441474700300000 |
| 4E1A00 | N/A | *Overlay* | 90280000000202003082288306092A864886F70D | .(......0.(...*.H...) |
| Extra Analysis |
| Metric | Value | Percentage |
|---|---|---|
| Ascii Code | 3457044 | 67,4039% |
| Null Byte Code | 118519 | 2,3108% |
© 2026 All rights reserved.