samegin
Newbie | Редактировать | Профиль | Сообщение | ICQ | Цитировать | Сообщить модератору
CPU Stack
Address Value Comments
0012E8C8 /00CADAFC ; RETURN from 00CA5468 to 00CADAFC
0012E8CC |00CB6103
0012E8D0 |00CB01C8
0012E8D4 |000D000C
0012E8D8 |11DB2580
0012E8DC |7C91C54C
0012E8E0 |00000000
0012E8E4 |0012EA30
0012E8E8 |00000001
0012E8EC |7C91C348
0012E8F0 |7C90EAB8 ; RETURN from ntdll.7C90EAF8 to ntdll.7C90EAB8
0012E8F4 |7C90EABC ; RETURN to ntdll.7C90EABC
0012E8F8 |0012EA20
0012E8FC |7C90EA21
0012E900 |FFFFFFFF
0012E904 |0012EA20
0012E908 |0012EA30
0012E90C |00000001
0012E910 |11DB25A4
0012E914 |00CB8440
0012E918 |0012E938
0012E91C \7C90118A ; RETURN to ntdll.7C90118A
0012E920 /00CA0000 ; ASCII "MZP"
0012E924 |00000000
0012E928 |00000000
0012E92C |00CB8440
0012E930 |0012E970
0012E934 |11DB2580
0012E938 |0012EA30
0012E93C \7C91E024 ; RETURN from ntdll.7C901176 to ntdll.7C91E024
0012E940 /00CB8440
0012E944 |00CA0000 ; ASCII "MZP"
0012E948 |00000000
0012E94C |00000000
0012E950 |0012EFD0
0012E954 |0012EFB0
0012E958 |00000000
0012E95C |00000014
0012E960 |00000001
0012E964 |00000000
0012E968 |00000000
0012E96C |00000010
0012E970 |7C97B228
0012E974 |00000014
0012E978 |00000001
0012E97C |00000000
0012E980 |00000000
0012E984 |00000010
0012E988 |11DB2C80
0012E98C |11DB2590
0012E990 |11DB25BC
0012E994 |00000014
0012E998 |00000001
0012E99C |00000000
0012E9A0 |00000000
0012E9A4 |00000010
0012E9A8 |00251EA4
0012E9AC |0012E9C4
0012E9B0 |11DB25BC
0012E9B4 |00000001
0012E9B8 |00000000
0012E9BC |00000001
0012E9C0 |11DB25BC
0012E9C4 |7C91C20C ; RETURN from ntdll.7C90E8E6 to ntdll.7C91C20C
0012E9C8 |7C97B2E8 ; ASCII "D!%"
0012E9CC |0012EA04
0012E9D0 |11DB2C78
0012E9D4 |11DB25BC
0012E9D8 |11DB2588
0012E9DC |7C97B228
0012E9E0 |00251EAC
0012E9E4 |7C97B228
0012E9E8 |11DB2BB4 ; PTR to ASCII "D!%"
0012E9EC |00CB8440
0012E9F0 |00CA0000 ; ASCII "MZP"
0012E9F4 |7FFDE000
0012E9F8 |00000000
0012E9FC |7FFDE000
0012EA00 |00000000
0012EA04 |11DB25BC
0012EA08 |11DB25BC
0012EA0C |11DB2580
0012EA10 |11DB25BC
0012EA14 |11DB2580
0012EA18 |0012E950
0012EA1C |0012ECCC
0012EA20 |0012ECCC ; Pointer to next SEH record
0012EA24 |7C90E900 ; SE handler
0012EA28 |7C917530
0012EA2C |00000003
0012EA30 |0012ECDC
0012EA34 \7C93D0CC ; RETURN from ntdll.LdrUnloadDll to ntdll.7C93D0CC
0012EA38 /00CA0000 ; ASCII "MZP"
0012EA3C |C0150008
0012EA40 |00000000
0012EA44 |00000000
0012EA48 |0012EAA0
0012EA4C |11DB2590
0012EA50 |001310A0 ; ASCII "SsHd,"
0012EA54 |0012EAA8
0012EA58 |0012EAA4
0012EA5C |7FFDD000
0012EA60 |11DB2C80
0012EA64 |0012EAB4
0012EA68 |00251EAC
0012EA6C |0012EA98
0012EA70 |0012EFD0
0012EA74 |0012EBD4
0012EA78 |0012EFB0
0012EA7C |00000018
0012EA80 |7FFDDC70
0012EA84 |00000000
0012EA88 |0012EFCC
0012EA8C |00000000
0012EA90 |7FFDDC6A ; UNICODE "plg"
0012EA94 |001544B0
0012EA98 |02160070
0012EA9C |0012EAA8
0012EAA0 |C0000142
0012EAA4 |11DB2580
0012EAA8 |003A0043
0012EAAC |0418005C
0012EAB0 |0441043D
0012EAB4 |04400442
0012EAB8 |043C0443
0012EABC |043D0435
0012EAC0 |044B0442
0012EAC4 |0053005C
0012EAC8 |0066006F
0012EACC |005C0074
0012EAD0 |00530055
0012EAD4 |006F0044
0012EAD8 |006E0077
0012EADC |006F006C
0012EAE0 |00640061
0012EAE4 |00720065
0012EAE8 |00330031
0012EAEC |005C0035
0012EAF0 |006C0070
0012EAF4 |00670075
0012EAF8 |006E0069
0012EAFC |005C0073
0012EB00 |00780032
0012EB04 |00700075
0012EB08 |006F006C
0012EB0C |00640061
0012EB10 |0070002E
0012EB14 |0067006C
0012EB18 |00120000
0012EB1C |7C90E900
0012EB20 |7C916FC8
0012EB24 |0012EB94
0012EB28 |00000000
0012EB2C |00720070
0012EB30 |7FFDDC00
0012EB34 |0012EBB0
0012EB38 |00000000
0012EB3C |0012EB64
0012EB40 |00020000
0012EB44 |0012EB60
0012EB48 |0012EB60
0012EB4C |0012EB60
0012EB50 |00000002
0012EB54 |00000002
0012EB58 |00800070
0012EB5C |00150178
0012EB60 |00000000
0012EB64 |0000BDB4
0012EB68 |0012ECD0
0012EB6C |0012EC08
0012EB70 |0012ECD0
0012EB74 |7C915BD8 ; RETURN from ntdll.RtlFreeAnsiString to ntdll.7C915BD8
0012EB78 |0012EBBC
0012EB7C |0012ED5C
0012EB80 |00000001
0012EB84 |7C915C3D ; RETURN from ntdll.7C90FE57 to ntdll.7C915C3D
0012EB88 |00000002
0012EB8C |7C97B214
0012EB90 |0000000A
0012EB94 |00000000
0012EB98 |0012EFB0
0012EB9C |0012ED54
0012EBA0 |00000000
0012EBA4 |0012ED5C
0012EBA8 |00000000
0012EBAC |0012ED4C
0012EBB0 |00800070
0012EBB4 |0012EC2C
0012EBB8 |00000000
0012EBBC |00000000
0012EBC0 |00000000
0012EBC4 |00720070
0012EBC8 |7FFDDC00
0012EBCC |00000000
0012EBD0 |00000000
0012EBD4 |00000000
0012EBD8 |00000000
0012EBDC |00000000
0012EBE0 |00000000
0012EBE4 |00000000
0012EBE8 |00000000
0012EBEC |00000000
0012EBF0 |00000000
0012EBF4 |00000000
0012EBF8 |00000000
0012EBFC |00000000
0012EC00 |00000000
0012EC04 |00000000
0012EC08 |00200000
0012EC0C |0012ECAC
0012EC10 |0012ECAC
0012EC14 |0012ECAC
0012EC18 |00000020
0012EC1C |00000020
0012EC20 |0012EFFC
0012EC24 |7C901295 ; ntdll.RtlInitUnicodeString
0012EC28 |00000000
0012EC2C |003A0043
0012EC30 |0418005C
0012EC34 |0441043D
0012EC38 |04400442
0012EC3C |043C0443
0012EC40 |043D0435
0012EC44 |044B0442
0012EC48 |0053005C
0012EC4C |0066006F
0012EC50 |005C0074
0012EC54 |00530055
0012EC58 |006F0044
0012EC5C |006E0077
0012EC60 |006F006C
0012EC64 |00640061
0012EC68 |00720065
0012EC6C |00330031
0012EC70 |005C0035
0012EC74 |006C0070
0012EC78 |00670075
0012EC7C |006E0069
0012EC80 |005C0073
0012EC84 |00780032
0012EC88 |00700075
0012EC8C |006F006C
0012EC90 |00640061
0012EC94 |0070002E
0012EC98 |0067006C
0012EC9C |00000000
0012ECA0 |00000000
0012ECA4 |00000000
0012ECA8 |00000000
0012ECAC |7C910000
0012ECB0 |7C912CAE ; RETURN from ntdll.RtlEnterCriticalSection to ntdll.7C912CAE
0012ECB4 |7C912CE4 ; RETURN from ntdll.7C90E8E6 to ntdll.7C912CE4
0012ECB8 |C0150008
0012ECBC |00000001
0012ECC0 |0000BDB4
0012ECC4 |0012EA3C
0012ECC8 |FFFFFFFF
0012ECCC |0012EF74 ; Pointer to next SEH record
0012ECD0 |7C90E900 ; SE handler
0012ECD4 |7C9165B0
0012ECD8 |00000002
0012ECDC |0012EF84
0012ECE0 \7C9164B3 ; RETURN from ntdll.7C916509 to ntdll.7C9164B3
0012ECE4 /00000000
0012ECE8 |001544B0
0012ECEC |0012EFD0
0012ECF0 |0012EFB0
0012ECF4 |0012EFCC
0012ECF8 |00000001
0012ECFC |00000000
0012ED00 |00000000
0012ED04 |00000000
0012ED08 |7C9101BB ; RETURN from ntdll.7C90E8E6 to ntdll.7C9101BB
0012ED0C |00000105
0012ED10 |0012F0B0
0012ED14 |0012ED24
0012ED18 |00000000
0012ED1C |7C910098 ; RETURN from ntdll.7C902AB0 to ntdll.7C910098
0012ED20 |12E5EEC0
0012ED24 |0012EDF0
0012ED28 |7C910021 ; RETURN from ntdll.7C910072 to ntdll.7C910021
0012ED2C |00150778
0012ED30 |7C91003D ; RETURN from ntdll.7C90E8E6 to ntdll.7C91003D
0012ED34 |0012EFD0
0012ED38 |001544B0
0012ED3C |0012EFCC
0012ED40 |00000000
0012ED44 |00000000
0012ED48 |00FC12D2 ; UNICODE "??\C:\WINDOWS\system32\dfsshlex.dll"
0012ED4C |02080000
0012ED50 |0012ED60
0012ED54 |00000000
0012ED58 |00000000
0012ED5C |0012EFB0
0012ED60 |00150000
0012ED64 |0012EE24
0012ED68 |00000000
0012ED6C |0012EDF8
0012ED70 |7C80D0FE ; RETURN from kernel32.7C809792 to kernel32.7C80D0FE
0012ED74 |0012EEF6
0012ED78 |7FFB001C
0012ED7C |00000000
0012ED80 |0012EE04
0012ED84 |00152F00
0012ED88 |00000004
0012ED8C |0012EDB8
0012ED90 |7C80CEC5 ; RETURN from kernel32.7C80CEE3 to kernel32.7C80CEC5
0012ED94 |00152F00
0012ED98 |0012EE04
0012ED9C |00000000
0012EDA0 |0012EE04
0012EDA4 |00000004
0012EDA8 |7FFD2DE6
0012EDAC |00000004
0012EDB0 |00E3564C ; ASCII ".plg"
0012EDB4 |0012EE04
0012EDB8 |0012EDE0
0012EDBC |7E369E80 ; RETURN from kernel32.LCMapStringW to USER32.7E369E80
0012EDC0 |00000419
0012EDC4 |00000010
0012EDC8 |00000004
0012EDCC |00E3564C ; ASCII ".plg"
0012EDD0 |00000004
0012EDD4 |0012F008
0012EDD8 |7E3788CB ; RETURN from ntdll.RtlUnicodeToMultiByteN to USER32.7E3788CB
0012EDDC |00E3564C ; ASCII ".plg"
0012EDE0 |00000004
0012EDE4 |0012EE00
0012EDE8 |0012EE04
0012EDEC |00000008
0012EDF0 |0012F070
0012EDF4 |00E2D81C ; ASCII ".plg"
0012EDF8 |0012EE08
0012EDFC |00000000
0012EE00 |7C910098 ; RETURN from ntdll.7C902AB0 to ntdll.7C910098
0012EE04 |00154370
0012EE08 |0012EED4
0012EE0C |7C910021 ; RETURN from ntdll.7C910072 to ntdll.7C910021
0012EE10 |00150DD8
0012EE14 |7C91003D ; RETURN from ntdll.7C90E8E6 to ntdll.7C91003D
0012EE18 |00154688
0012EE1C |00000000
0012EE20 |00020674
0012EE24 |7C911448
0012EE28 |FFFFFFFF
0012EE2C |7C911440 ; RETURN from ntdll.7C90E8E6 to ntdll.7C911440
0012EE30 |00150000
0012EE34 |E310C43F
0012EE38 |00000B69
0012EE3C |B83C365A
0012EE40 |B05DF2A3
0012EE44 |7C910415 ; RETURN to ntdll.7C910415
0012EE48 |7C91041E ; RETURN from ntdll.7C90E8E6 to ntdll.7C91041E
0012EE4C |00000000
0012EE50 |00000000
0012EE54 |7FFDE000
0012EE58 |C6D750EB
0012EE5C |0000001A
0012EE60 |7FFDE000
0012EE64 |7C901000 ; ntdll.RtlEnterCriticalSection
0012EE68 |00000000
0012EE6C |00010000 ; UNICODE "=::=::\"
0012EE70 |7FFDE000
0012EE74 |00000138
0012EE78 |7C9145E6 ; RETURN from ntdll.RtlEqualUnicodeString to ntdll.7C9145E6
0012EE7C |7C910440 ; RETURN to ntdll.7C910440
0012EE80 |7C97D600
0012EE84 |7C914659 ; RETURN from ntdll.7C90E8E6 to ntdll.7C914659
0012EE88 |7C8855F8
0012EE8C |7C914579 ; ntdll.RtlQueryEnvironmentVariable_U
0012EE90 |00020674
0012EE94 |00000007
0012EE98 |000003E7
0012EE9C |00150000
0012EEA0 |0010001D
0012EEA4 |00000000
0012EEA8 |001544B0
0012EEAC |7FFDE000
0012EEB0 |FFFFFFFF
0012EEB4 |000101E8 ; UNICODE "tem32\cmd.exe"
0012EEB8 |00000027
0012EEBC |0012EE18
0012EEC0 |0012ECB8
0012EEC4 |0012EF3C
0012EEC8 |7C90E900
0012EECC |7C910040
0012EED0 |FFFFFFFF
0012EED4 |7C91003D ; RETURN from ntdll.7C90E8E6 to ntdll.7C91003D
0012EED8 |7C80E48F ; RETURN from ntdll.RtlFreeHeap to kernel32.7C80E48F
0012EEDC |00150000
0012EEE0 |00000000
0012EEE4 |7C80E499 ; RETURN from kernel32.7C80DFDF to kernel32.7C80E499
0012EEE8 |7C80E46C ; RETURN from kernel32.7C802511 to kernel32.7C80E46C
0012EEEC |FFFFFFFF
0012EEF0 |7C80E0C8
0012EEF4 |00000000
0012EEF8 |012C012A
0012EEFC |00154378
0012EF00 |7FFDD000
0012EF04 |00000000
0012EF08 |00E2C92C
0012EF0C |00402128 ; RETURN from USDownloader.00401E7C to USDownloader.00402128
0012EF10 |7FFDD000
0012EF14 |7FFDD000
0012EF18 |00154378
0012EF1C |001544B0
0012EF20 |000206BA ; UNICODE "\USDownloader.exe"
0012EF24 |7C80E0D8
0012EF28 |00000000
0012EF2C |0015468A
0012EF30 |000001DA
0012EF34 |0012EEEC
0012EF38 |0012F0B0
0012EF3C |0012EFDC
0012EF40 |7C839AC0
0012EF44 |7C80E408
0012EF48 |FFFFFFFF
0012EF4C |7C80E46C ; RETURN from kernel32.7C802511 to kernel32.7C80E46C
0012EF50 |7C80E09D ; RETURN from kernel32.7C80E305 to kernel32.7C80E09D
0012EF54 |7C80E0C8
0012EF58 |00020674
0012EF5C |00000000
0012EF60 |00000000
0012EF64 |00000000
0012EF68 |0000BDB4
0012EF6C |0012ECFC
0012EF70 |EDE5ECF3
0012EF74 |0012EFDC ; Pointer to next SEH record
0012EF78 |7C90E900 ; SE handler
0012EF7C |7C9164F8
0012EF80 |00000000
0012EF84 |0012EFEC
0012EF88 \7C801BBD ; RETURN from ntdll.LdrLoadDll to kernel32.7C801BBD
0012EF8C /001544B0
0012EF90 |0012EFD0
0012EF94 |0012EFB0
0012EF98 |0012EFCC
0012EF9C |0012F3F4
0012EFA0 |00000000
0012EFA4 |00000000
0012EFA8 |01DA01D8
0012EFAC |001544B0
0012EFB0 |00720070
0012EFB4 |7FFDDC00
0012EFB8 |00000070
0012EFBC |0012EFE0
0012EFC0 |001544B0
0012EFC4 |00000000
0012EFC8 |00000000
0012EFCC |00000000
0012EFD0 |00000000
0012EFD4 |0012EF9C
0012EFD8 |7C80E13F ; RETURN from ntdll.RtlAnsiStringToUnicodeString to kernel32.7C80E13F
0012EFDC |0012F028 ; Pointer to next SEH record
0012EFE0 |7C839AC0 ; SE handler
0012EFE4 |7C80E0E8
0012EFE8 |00000000
0012EFEC |0012F000
0012EFF0 \7C801D72 ; /RETURN from kernel32.LoadLibraryExW to kernel32.7C801D72
0012EFF4 /7FFDDC00 ; |FileName = "user32.dll"
0012EFF8 |00000000 ; |hFile = NULL
0012EFFC |00000000 ; \Flags = 0
0012F000 |0012F01C
0012F004 \7C801DA8 ; /RETURN from kernel32.LoadLibraryExA to kernel32.7C801DA8
0012F008 /00E2C9B0 ; |FileName = "C:\"
0012F00C |00000000 ; |hFile = NULL
0012F010 |00000000 ; \Flags = 0
0012F014 |00000000
0012F018 |00000000
0012F01C |0012F080
0012F020 \00508260 ; /RETURN from kernel32.LoadLibraryA to USDownloader.00508260
0012F024 /00E2C9B0 ; \FileName = "C:\"
0012F028 |0012F034 ; Pointer to next SEH record
0012F02C |00508632 ; SE handler
0012F030 |0012F080
0012F034 |0012F088 ; Pointer to next SEH record
0012F038 |004034CD ; SE handler
0012F03C |0012F080
0012F040 |00E58C18
0012F044 |0012F3F4
0012F048 |00000000
0012F04C |0040F848
0012F050 |00E2C9E8
0012F054 |00000000
0012F058 |00000000
0012F05C |0012F228
0012F060 |00000000
0012F064 |00403E8C ; RETURN from USDownloader.00402734 to USDownloader.00403E8C
0012F068 |00404177 ; RETURN from USDownloader.00403E4C to USDownloader.00404177
0012F06C |00E2D81C ; ASCII ".plg"
0012F070 |00E3564C ; ASCII ".plg"
0012F074 |00E2C9B0
0012F078 |01520FB2
0012F07C |00E58C18
0012F080 |0012F228
0012F084 \00520FC4 ; RETURN from USDownloader.005080D8 to USDownloader.00520FC4
0012F088 /0012F094 ; Pointer to next SEH record
0012F08C |005211F0 ; SE handler
0012F090 |0012F228
0012F094 |0012F230 ; Pointer to next SEH record
0012F098 |005212F3 ; SE handler
0012F09C |0012F228
0012F0A0 |0012F3F4
0012F0A4 |FFFFFFFF
0012F0A8 |00410B80 ; Entry point
0012F0AC |00000000
0012F0B0 |00E6AFF0 ; ASCII "2xupload.plg"
0012F0B4 |7C91003D ; RETURN from ntdll.7C90E8E6 to ntdll.7C91003D
0012F0B8 |7C91E1B2 ; RETURN from ntdll.RtlFreeHeap to ntdll.7C91E1B2
0012F0BC |00E2C97C
0012F0C0 |00E2C9B0
0012F0C4 |357801F4
0012F0C8 |00007800
0012F0CC |00000020
0012F0D0 |00E2C920 ; ASCII "Zupload.plg"
0012F0D4 |00000000
0012F0D8 |12E835E0
0012F0DC |00000020
0012F0E0 |2F93C47E
0012F0E4 |01CC1206
0012F0E8 |2F93C47E
0012F0EC |01CC1206
0012F0F0 |25347E00
0012F0F4 |01C70F3C
0012F0F8 |00000000
0012F0FC |00007800
0012F100 |00780032
0012F104 |00700075
0012F108 |6C70755A
0012F10C |2E64616F
0012F110 |00676C70
0012F114 |6700676C
0012F118 |00676C00
0012F11C |00000010
0012F120 |00253060
0012F124 |00253228
0012F128 |00253254
0012F12C |00000000
0012F130 |00000000
0012F134 |00000000
0012F138 |00000000
0012F13C |7FFDD000
0012F140 |11DB28A8
0012F144 |00000000
0012F148 |00253254
0012F14C |00000000
0012F150 |00000000
0012F154 |002530F0
0012F158 |00253254
0012F15C |11DB28A0
0012F160 |11DB2BB4 ; PTR to ASCII "D!%"
0012F164 |0012F19C
0012F168 |002530F8
0012F16C |00253254
0012F170 |00253220
0012F174 |7C97B228
0012F178 |11DB28B0
0012F17C |7C97B228
0012F180 |00E28D0C
0012F184 |00E28C80
0012F188 |000003B4
0012F18C |0040244D ; RETURN from USDownloader.00401E7C to USDownloader.0040244D
0012F190 |0012F230
0012F194 |00402476
0012F198 |0040247D ; Entry point
0012F19C |00000001
0012F1A0 |004010B0
0012F1A4 |00E28C7C
0012F1A8 |00000000
0012F1AC |00E28C80
0012F1B0 |00E28B84
0012F1B4 |000004B0
0012F1B8 |0040244D ; RETURN from USDownloader.00401E7C to USDownloader.0040244D
0012F1BC |0012F230
0012F1C0 |00402476
0012F1C4 |0040247D ; Entry point
0012F1C8 |0012F3F4
0012F1CC |00000000
0012F1D0 |00E33B40
0012F1D4 |00E32E20
0012F1D8 |00000D20
0012F1DC |0040244D ; RETURN from USDownloader.00401E7C to USDownloader.0040244D
0012F1E0 |0012F208
0012F1E4 |00402476
0012F1E8 |0040247D ; Entry point
0012F1EC |0012F3F4
0012F1F0 |00000000
0012F1F4 |00E1D568
0012F1F8 |00000000
0012F1FC |0012F220
0012F200 |00402778 ; RETURN from USDownloader.004022E4 to USDownloader.00402778
0012F204 |00411007 ; RETURN from USDownloader.0040274C to USDownloader.00411007
0012F208 |0012F230
0012F20C |50504900
0012F210 |317E5359
0012F214 |474C502E
0012F218 |00E1D500
0012F21C |00000122
0012F220 |00E6AE00
0012F224 |00E1302C ; ASCII "8>Q"
0012F228 |0012F27C
0012F22C \004C9455 ; RETURN from USDownloader.00520D6C to USDownloader.004C9455
0012F230 /0012F23C ; Pointer to next SEH record
0012F234 |004C9471 ; SE handler
0012F238 |0012F27C
0012F23C |0012F5A4 ; Pointer to next SEH record
0012F240 |004C95FD ; SE handler
0012F244 |0012F27C
0012F248 |0012F3F4
0012F24C |0012F3F4
0012F250 |00E6439C
0012F254 |00000000
0012F258 |00000000
0012F25C |00000000
0012F260 |00000000
0012F264 |00000000
0012F268 |00000000
0012F26C |00000000
0012F270 |00000000
0012F274 |00000000
0012F278 |00E5A32C ; ASCII "xXL"
0012F27C |0012F3D8
0012F280 \00432800 ; RETURN to USDownloader.00432800
0012F284 /00E6439C
0012F288 \0042A8F9 ; RETURN from USDownloader.00432794 to USDownloader.0042A8F9
0012F28C /0042A8D8 ; Entry point
0012F290 \0042A9ED ; RETURN from USDownloader.00403380 to USDownloader.0042A9ED
0012F294 /00E6439C
0012F298 \00432668 ; RETURN to USDownloader.00432668
0012F29C /0012F3F4
0012F2A0 |0012F3F4
0012F2A4 |00E6439C
0012F2A8 \00434E73 ; RETURN from USDownloader.00432554 to USDownloader.00434E73
0012F2AC /0012F3F4
0012F2B0 |00E6439C
0012F2B4 |00E6439C
0012F2B8 |0012F350
0012F2BC |773E9430 ; RETURN from USER32.NotifyWinEvent to comctl32.773E9430
0012F2C0 |00000000
0012F2C4 |00010C68
0012F2C8 |00000000
0012F2CC |00000000
0012F2D0 |0012F3B8
0012F2D4 |773E8EB4
0012F2D8 |773E99C0 ; RETURN from comctl32.7744BA93 to comctl32.773E99C0
0012F2DC |00000000
0012F2E0 |E00415D9
0012F2E4 |7E37B415 ; USER32.DrawTextExW
0012F2E8 |00000000
0012F2EC |0A0118E3
0012F2F0 |00000003
0012F2F4 |773E8EB4
0012F2F8 |00000093
0012F2FC |00000000
0012F300 |00010C68
0012F304 |00000000
0012F308 |00000000
0012F30C |0000000D
0012F310 |00006F27
0012F314 |0012F340
0012F318 |7E368734 ; RETURN to USER32.7E368734
0012F31C |00010C68
0012F320 |00000215
0012F324 |00000000
0012F328 |00000000
0012F32C |773E8EB4
0012F330 |DCBAABCD
0012F334 |00000000
0012F338 |0012F37C
0012F33C |773E8EB4
0012F340 |0012F3A8
0012F344 |7E368BD9 ; RETURN from kernel32.InterlockedDecrement to USER32.7E368BD9
0012F348 |7FFDD000
0012F34C |0012F3A8
0012F350 |7E36885A ; RETURN from ntdll.RtlDeactivateActivationContextUnsafeFast to USER32.7E36885A
0012F354 |0012F368
0012F358 |7E36882A ; RETURN from USER32.7E368600 to USER32.7E36882A
0012F35C |00000215
0012F360 |773E8EB4
0012F364 |0012F5AC
0012F368 |00000014
0012F36C |00000001
0012F370 |00000000
0012F374 |00000000
0012F378 |00000010
0012F37C |00000000
0012F380 |7E368BD9 ; RETURN from kernel32.InterlockedDecrement to USER32.7E368BD9
0012F384 |00000001
0012F388 |00000000
0012F38C |00000000
0012F390 |0012F35C
0012F394 |7E36882A ; RETURN from USER32.7E368600 to USER32.7E36882A
0012F398 |0012F57C
0012F39C |7E39048F
0012F3A0 |7E368830
0012F3A4 |FFFFFFFF
0012F3A8 |7E36882A ; RETURN from USER32.7E368600 to USER32.7E36882A
0012F3AC |7E37A013 ; RETURN from USER32.7E36875F to USER32.7E37A013
0012F3B0 |00000000
0012F3B4 |773E8EB4
0012F3B8 |00010C68
0012F3BC |0012F3CC
0012F3C0 |7E37947C ; RETURN from USER32.7E379431 to USER32.7E37947C
0012F3C4 |0000C057
0012F3C8 |0000C057
0012F3CC |0012F3E0
0012F3D0 |7E37941E ; RETURN from USER32.7E379455 to USER32.7E37941E
0012F3D4 |00801CE0
0012F3D8 |0012F404
0012F3DC \0042A86D ; RETURN from USDownloader.00434CC0 to USDownloader.0042A86D
0012F3E0 /00E6439C
0012F3E4 |0012F5D4
0012F3E8 |00E6439C
0012F3EC \00432497 ; RETURN to USDownloader.00432497
0012F3F0 /00000000
0012F3F4 |0000BD11
0012F3F8 |00000C68
0012F3FC |00010C68
0012F400 |00000000
0012F404 |0012F574
0012F408 \00434F70 ; /RETURN from USDownloader.00432470 to USDownloader.00434F70
0012F40C /00010C68 ; \Arg1 = 10C68
0012F410 |0012F64C
0012F414 |00E5A32C ; ASCII "xXL"
0012F418 |0012F5D4
0012F41C \00435474 ; RETURN from USDownloader.00434F48 to USDownloader.00435474
0012F420 /0012F5D4
0012F424 |00E5A32C ; ASCII "xXL"
0012F428 \00449C95 ; RETURN from USDownloader.00435464 to USDownloader.00449C95
0012F42C /0012F5D4
0012F430 |00E5A32C ; ASCII "xXL"
0012F434 \00432668 ; RETURN to USDownloader.00432668
0012F438 /0012F64C
0012F43C |0012F5D4
0012F440 |00E5A32C ; ASCII "xXL"
0012F444 \00434E73 ; RETURN from USDownloader.00432554 to USDownloader.00434E73
0012F448 /0012F64C
0012F44C |0012F5D4
0012F450 |00E5A32C ; ASCII "xXL"
0012F454 |0012F5E8
0012F458 |0012F5E8
0012F45C |00E6439C
0012F460 |00432668 ; RETURN to USDownloader.00432668
0012F464 |0012F5E8
0012F468 |0012F5E8
0012F46C |00E6439C
0012F470 |00434E73 ; RETURN from USDownloader.00432554 to USDownloader.00434E73
0012F474 |0012F5E8
0012F478 |00E6439C
0012F47C |00E6439C
0012F480 |00000135
0012F484 |0A0118E3
0012F488 |00010C68
0012F48C |02101724
0012F490 |0000000F
0012F494 |7E368734 ; RETURN to USER32.7E368734
0012F498 |00010C62
0012F49C |00000135
0012F4A0 |0A0118E3
0012F4A4 |00010C68
0012F4A8 |00000078
0012F4AC |00010C68
0012F4B0 |00010C68
0012F4B4 |FFFFFFF4
0012F4B8 |00000001
0012F4BC |0A0118E3
0012F4C0 |00000000
0012F4C4 |00354EE8 ; ASCII "`O5"
0012F4C8 |00000096
0012F4CC |00000019
0012F4D0 |00350000
0012F4D4 |00000251
0012F4D8 |00350000
0012F4DC |0012F2D4
0012F4E0 |00000003
0012F4E4 |0012F524
0012F4E8 |0001E900
0012F4EC |0000000F
0012F4F0 |0012F44C
0012F4F4 |7C9101BB ; RETURN from ntdll.7C90E8E6 to ntdll.7C9101BB
0012F4F8 |0012F540
0012F4FC |7C90E900
0012F500 |7C910040
0012F504 |FFFFFFFF
0012F508 |7C91003D ; RETURN from ntdll.7C90E8E6 to ntdll.7C91003D
0012F50C |77C1C2DE ; RETURN from ntdll.RtlFreeHeap to msvcrt.77C1C2DE
0012F510 |00350000
0012F514 |00000000
0012F518 |77C1C2E3 ; RETURN from msvcrt.77C2745B to msvcrt.77C1C2E3
0012F51C |00354F08
0012F520 |0B0418E3
0012F524 |00354EE8 ; ASCII "`O5"
0012F528 |77C25C94 ; msvcrt._except_handler3
0012F52C |77C02088
0012F530 |FFFFFFFF
0012F534 |77F1A98E ; RETURN to GDI32.77F1A98E
0012F538 |0012F51C
0012F53C |00000000
0012F540 |0012F7B0
0012F544 |77C25C94 ; msvcrt._except_handler3
0012F548 |77C02070
0012F54C |FFFFFFFF
0012F550 |77C1C2E3 ; RETURN from msvcrt.77C2745B to msvcrt.77C1C2E3
0012F554 |5B2681D2 ; RETURN from msvcrt.??3@YAXPAX@Z to uxtheme.5B2681D2
0012F558 |00354EE8 ; ASCII "`O5"
0012F55C |0012F6C8
0012F560 |00411255 ; RETURN from ntdll.RtlLeaveCriticalSection to USDownloader.00411255
0012F564 |00E10A38
0012F568 |0041DCD1 ; RETURN from USDownloader.0041124C to USDownloader.0041DCD1
0012F56C |0041DCD9 ; Entry point
0012F570 |00F6063C
0012F574 |0012F59C
0012F578 \00447F98 ; RETURN from USDownloader.00434CC0 to USDownloader.00447F98
0012F57C /0012F64C
0012F580 |00F60649
0012F584 |00E5A32C ; ASCII "xXL"
0012F588 |0012F640
0012F58C |00434B50
0012F590 |0012F5A4
0012F594 |0012F624
0012F598 |00E5A32C ; ASCII "xXL"
0012F59C |0012F5CC
0012F5A0 \00434B27 ; RETURN to USDownloader.00434B27
0012F5A4 /0012F5B0 ; Pointer to next SEH record
0012F5A8 |00434B3F ; SE handler
0012F5AC |0012F5CC
0012F5B0 |0012F668 ; Pointer to next SEH record
0012F5B4 |00434B50 ; SE handler
0012F5B8 |0012F5CC
0012F5BC |0012F64C
0012F5C0 |00F60649
0012F5C4 |00000000
0012F5C8 |00E5A32C ; ASCII "xXL"
0012F5CC |0012F5E4
0012F5D0 \004453BE ; RETURN to USDownloader.004453BE
0012F5D4 /00000111
0012F5D8 |00000C68
0012F5DC |00010C68
0012F5E0 |00000000
0012F5E4 |0012F610
0012F5E8 \7E368734 ; RETURN to USER32.7E368734
0012F5EC /00010C62
0012F5F0 |00000111
0012F5F4 |00000C68
0012F5F8 |00010C68
0012F5FC |00F60649
0012F600 |DCBAABCD
0012F604 |00000000
0012F608 |0012F64C
0012F60C |00F60649
0012F610 |0012F678
0012F614 \7E368816 ; RETURN from USER32.7E36870C to USER32.7E368816
0012F618 /00F60649
0012F61C |00010C62
0012F620 |00000111
0012F624 |00000C68
0012F628 |00010C68
0012F62C |00000111
0012F630 |00801370
0012F634 |00801384
0012F638 |00000014
0012F63C |00000001
0012F640 |00000000
0012F644 |00000000
0012F648 |00000010
0012F64C |00000000
0012F650 |7E36882A ; RETURN from USER32.7E368600 to USER32.7E36882A
0012F654 |00000001
0012F658 |00000000
0012F65C |00000000
0012F660 |0012F62C
0012F664 |00000215
0012F668 |0012F824 ; Pointer to next SEH record
0012F66C |7E39048F ; SE handler
0012F670 |7E368830
0012F674 |00000000
0012F678 |0012F6B4
0012F67C \7E37927B ; RETURN from USER32.7E36875F to USER32.7E37927B
0012F680 /00000000
0012F684 |00F60649
0012F688 |00010C62
0012F68C |00000111
0012F690 |00000C68
0012F694 |00010C68
0012F698 |00801384
0012F69C |00000001
0012F6A0 |00010C62
0012F6A4 |00000111
0012F6A8 |00000105
0012F6AC |00010C62
0012F6B0 |00589498
0012F6B4 |0012F6D4
0012F6B8 \7E3792E3 ; RETURN from USER32.7E3791B3 to USER32.7E3792E3
0012F6BC /00801370
0012F6C0 |00801308
0012F6C4 |00000C68
0012F6C8 |00010C68
0012F6CC |00000000
0012F6D0 |12E90D30
0012F6D4 |0012F6F4
0012F6D8 \773E7354 ; /RETURN from USER32.SendMessageW to comctl32.773E7354
0012F6DC /00010C62 ; |hWnd = 00010C62, class = TUpdateForm, text = Обновление программы
0012F6E0 |00000111 ; |Msg = WM_COMMAND
0012F6E4 |00000C68 ; |wParam = NotifyCode = MENU/BN_CLICKED..., ID = 3176.
0012F6E8 |00010C68 ; \lParam = 00010C68, class = TButton, text = Скачать и установить
0012F6EC |00000001
0012F6F0 |12E90D30
0012F6F4 |0012F710
0012F6F8 \773E7436 ; RETURN from comctl32.773E7317 to comctl32.773E7436
0012F6FC /12E90D30
0012F700 |00000000
0012F704 |00080040
0012F708 |12E90D30
0012F70C |00000001
0012F710 |0012F7A0
0012F714 \773E973B ; RETURN from comctl32.773E735F to comctl32.773E973B
0012F718 /12E90D30
0012F71C |00000001
0012F720 |0012F808
0012F724 |773E8EB4
0012F728 |00000000
0012F72C |0012F758
0012F730 |7E368734 ; RETURN to USER32.7E368734
0012F734 |00010C68
0012F738 |00000084
0012F73C |00000000
0012F740 |024D031E
0012F744 |773E8EB4
0012F748 |DCBAABCD
0012F74C |00080040
0012F750 |00010C68
0012F754 |00000000
0012F758 |00000000
0012F75C |7E368BD9 ; RETURN from kernel32.InterlockedDecrement to USER32.7E368BD9
0012F760 |7FFDD000
0012F764 |0012F7C0
0012F768 |7E36885A ; RETURN from ntdll.RtlDeactivateActivationContextUnsafeFast to USER32.7E36885A
0012F76C |0012F780
0012F770 |7E36882A ; RETURN from USER32.7E368600 to USER32.7E36882A
0012F774 |00000084
0012F778 |773E8EB4
0012F77C |0012F9CC
0012F780 |00000014
0012F784 |00000001
0012F788 |00000000
0012F78C |00000000
0012F790 |00000010
0012F794 |00000000
0012F798 |00000000
0012F79C |00006F27
0012F7A0 |0012F7CC
0012F7A4 \7E368734 ; RETURN to USER32.7E368734
0012F7A8 /00010C68
0012F7AC |00000202
0012F7B0 |00000000
0012F7B4 |00080040
0012F7B8 |773E8EB4
0012F7BC |DCBAABCD
0012F7C0 |00000000
0012F7C4 |0012F808
0012F7C8 |773E8EB4
0012F7CC |0012F834
0012F7D0 \7E368816 ; RETURN from USER32.7E36870C to USER32.7E368816
0012F7D4 /773E8EB4
0012F7D8 |00010C68
0012F7DC |00000202
0012F7E0 |00000000
0012F7E4 |00080040
0012F7E8 |00000202
0012F7EC |773E8EB4
0012F7F0 |0012FA60
0012F7F4 |00000014
0012F7F8 |00000001
0012F7FC |00000000
0012F800 |00000000
0012F804 |00000010
0012F808 |00000000
0012F80C |00000001
0012F810 |00000001
0012F814 |00000000
0012F818 |00000000
0012F81C |0012F7E8
0012F820 |00000084
0012F824 |0012FA30 ; Pointer to next SEH record
0012F828 |7E39048F ; SE handler
0012F82C |7E368830
0012F830 |00000000
0012F834 |0012F864
0012F838 \7E37A013 ; RETURN from USER32.7E36875F to USER32.7E37A013
0012F83C /00000000
0012F840 |773E8EB4
0012F844 |00010C68
0012F848 |00000202
0012F84C |00000000
0012F850 |00080040
0012F854 |00000000
0012F858 |00000000
0012F85C |00000202
0012F860 |00E6439C
0012F864 |0012F884
0012F868 \7E37A998 ; RETURN from USER32.7E379FC2 to USER32.7E37A998
|
