Tags: reverse engineering 

Rating: 5.0

Basically FIND + REPLACE helped and then it was a normal VM