Does Sunlot really intend to pay out before the police investigation is completed, even at the risk of giving the legitimate creditors' money to the people who have already robbed them?
I think this is obvious. The press relase says: "Sunlot would immediately distribute Mt. Gox assets on a proportional basis determined by an independent audit"
The audit should reveal any mismatches between balances due to deposits, withdrawals and trading, and balances which are inflated due to manipulation of the database, double withdrawals due to malleability, etc. Finding the people would be up to the police. I assume Sunlot will verify the identity of people who want to withdraw their assets.