.- - -----÷M÷E÷N÷U÷------------------------------------------------------------- --- ---- -------------.
! WALL ! STATS ! GOODIES ! YARA ! FAQ ! RSS ! EMV !
`-------------- - --- ---------- -------- -------- -------- -------- ----------------- - ---- ---- --'
ATM MALWARE NOTICE
20a1490b666f8c75c47b682cf10a48b7b0278068cb260b14d8d0584ee6c006a5
Date...........: 2015-07-20
Family.........: GreenDispenser
File name......: A0001203.exe
File size......: 390.00 KB
Type file......: EXE/Windows
Virscan........: VT - HA
PDB Path found.: c:\src\Misc\sdel\Release\sdelete.pdb
Documentation..: https://www.proofpoint.com/us/threat-insight/post/Meet-GreenDispenser
Entropy:
Binary Histogram:
=== PEDUMP REPORT ===
=== MZ Header ===
signature: "MZ"
bytes_in_last_block: 144 0x90
blocks_in_file: 3 3
num_relocs: 0 0
header_paragraphs: 4 4
min_extra_paragraphs: 0 0
max_extra_paragraphs: 65535 0xffff
ss: 0 0
sp: 184 0xb8
checksum: 0 0
ip: 0 0
cs: 0 0
reloc_table_offset: 64 0x40
overlay_number: 0 0
reserved0: 0 0
oem_id: 0 0
oem_info: 0 0
reserved2: 0 0
reserved3: 0 0
reserved4: 0 0
reserved5: 0 0
reserved6: 0 0
lfanew: 240 0xf0
=== DOS STUB ===
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno|
00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
=== RICH Header ===
LIB_ID VERSION TIMES_USED
4 4 8447 20ff 2 2
205 cd 50929 c6f1 27 1b
207 cf 50929 c6f1 70 46
206 ce 50929 c6f1 195 c3
147 93 30729 7809 13 d
1 1 0 0 174 ae
211 d3 60610 ecc2 21 15
201 c9 60610 ecc2 1 1
204 cc 60610 ecc2 1 1
=== PE Header ===
signature: "PE\x00\x00"
# IMAGE_FILE_HEADER:
Machine: 332 0x14c x86
NumberOfSections: 5 5
TimeDateStamp: "2015-06-18 18:36:26"
PointerToSymbolTable: 0 0
NumberOfSymbols: 0 0
SizeOfOptionalHeader: 224 0xe0
Characteristics: 258 0x102 EXECUTABLE_IMAGE, 32BIT_MACHINE
# IMAGE_OPTIONAL_HEADER32:
Magic: 267 0x10b 32-bit executable
LinkerVersion: 11.0
SizeOfCode: 154112 0x25a00
SizeOfInitializedData: 253440 0x3de00
SizeOfUninitializedData: 0 0
AddressOfEntryPoint: 68236 0x10a8c
BaseOfCode: 4096 0x1000
BaseOfData: 159744 0x27000
ImageBase: 4194304 0x400000
SectionAlignment: 4096 0x1000
FileAlignment: 512 0x200
OperatingSystemVersion: 5.1
ImageVersion: 0.0
SubsystemVersion: 5.1
Reserved1: 0 0
SizeOfImage: 421888 0x67000
SizeOfHeaders: 1024 0x400
CheckSum: 0 0
Subsystem: 2 2 WINDOWS_GUI
DllCharacteristics: 33088 0x8140 DYNAMIC_BASE, NX_COMPAT
TERMINAL_SERVER_AWARE
SizeOfStackReserve: 1048576 0x100000
SizeOfStackCommit: 4096 0x1000
SizeOfHeapReserve: 1048576 0x100000
SizeOfHeapCommit: 4096 0x1000
LoaderFlags: 0 0
NumberOfRvaAndSizes: 16 0x10
=== DATA DIRECTORY ===
EXPORT rva:0x 0 size:0x 0
IMPORT rva:0x 308f4 size:0x a0
RESOURCE rva:0x 5c000 size:0x 1e0
EXCEPTION rva:0x 0 size:0x 0
SECURITY rva:0x 0 size:0x 0
BASERELOC rva:0x 5d000 size:0x 20d4
DEBUG rva:0x 0 size:0x 0
ARCHITECTURE rva:0x 0 size:0x 0
GLOBALPTR rva:0x 0 size:0x 0
TLS rva:0x 0 size:0x 0
LOAD_CONFIG rva:0x 2eb70 size:0x 40
Bound_IAT rva:0x 0 size:0x 0
IAT rva:0x 27000 size:0x 24c
Delay_IAT rva:0x 0 size:0x 0
CLR_Header rva:0x 0 size:0x 0
rva:0x 0 size:0x 0
=== SECTIONS ===
NAME RVA VSZ RAW_SZ RAW_PTR nREL REL_PTR nLINE LINE_PTR FLAGS
.text 1000 2581f 25a00 400 0 0 0 0 60000020 R-X CODE
.rdata 27000 a5ba a600 25e00 0 0 0 0 40000040 R-- IDATA
.data 32000 29f38 27c00 30400 0 0 0 0 c0000040 RW- IDATA
.rsrc 5c000 1e0 200 58000 0 0 0 0 40000040 R-- IDATA
.reloc 5d000 954a 9600 58200 0 0 0 0 42000040 R-- IDATA DISCARDABLE
=== RESOURCES ===
FILE_OFFSET CP LANG SIZE TYPE NAME
0x58060 0 0x409 381 MANIFEST #1
=== IMPORTS ===
MODULE_NAME HINT ORD FUNCTION_NAME
KERNEL32.dll 38a OutputDebugStringW
KERNEL32.dll 2d2 HeapReAlloc
KERNEL32.dll 467 SetFilePointerEx
KERNEL32.dll 3c0 ReadFile
KERNEL32.dll 157 FlushFileBuffers
KERNEL32.dll 161 FreeEnvironmentStringsW
KERNEL32.dll 1da GetEnvironmentStringsW
KERNEL32.dll 279 GetSystemTimeAsFileTime
KERNEL32.dll 3a7 QueryPerformanceCounter
KERNEL32.dll 1f3 GetFileType
KERNEL32.dll 237 GetOEMCP
KERNEL32.dll 168 GetACP
KERNEL32.dll 33f LoadLibraryW
KERNEL32.dll 1ac GetConsoleMode
KERNEL32.dll 19a GetConsoleCP
KERNEL32.dll 24a GetProcessHeap
KERNEL32.dll 525 WriteFile
KERNEL32.dll 264 GetStdHandle
KERNEL32.dll 2d4 HeapSize
KERNEL32.dll 10f EnumSystemLocalesW
KERNEL32.dll 29b GetUserDefaultLCID
KERNEL32.dll 30c IsValidLocale
KERNEL32.dll 206 GetLocaleInfoW
KERNEL32.dll 32d LCMapStringW
KERNEL32.dll 487 SetStdHandle
KERNEL32.dll 524 WriteConsoleW
KERNEL32.dll 3be ReadConsoleW
KERNEL32.dll 8f CreateFileW
KERNEL32.dll 453 SetEndOfFile
KERNEL32.dll b5 CreateThread
KERNEL32.dll 277 GetSystemTime
KERNEL32.dll 473 SetLastError
KERNEL32.dll 37d OpenMutexW
KERNEL32.dll 214 GetModuleFileNameW
KERNEL32.dll 2a7 GetVolumeInformationW
KERNEL32.dll 9e CreateMutexW
KERNEL32.dll 202 GetLastError
KERNEL32.dll 213 GetModuleFileNameA
KERNEL32.dll 1c1 GetCurrentProcessId
KERNEL32.dll 52 CloseHandle
KERNEL32.dll 1c5 GetCurrentThreadId
KERNEL32.dll 4b2 Sleep
KERNEL32.dll 30a IsValidCodePage
KERNEL32.dll 1c0 GetCurrentProcess
KERNEL32.dll 218 GetModuleHandleW
KERNEL32.dll 263 GetStartupInfoW
KERNEL32.dll 4c6 TlsFree
KERNEL32.dll 4c8 TlsSetValue
KERNEL32.dll 4c7 TlsGetValue
KERNEL32.dll 4c5 TlsAlloc
KERNEL32.dll 4c0 TerminateProcess
KERNEL32.dll 4a5 SetUnhandledExceptionFilter
KERNEL32.dll 4d3 UnhandledExceptionFilter
KERNEL32.dll 2e3 InitializeCriticalSectionAndSpinCount
KERNEL32.dll 172 GetCPInfo
KERNEL32.dll 418 RtlUnwind
KERNEL32.dll 511 WideCharToMultiByte
KERNEL32.dll 2ef InterlockedIncrement
KERNEL32.dll 2eb InterlockedDecrement
KERNEL32.dll ea EncodePointer
KERNEL32.dll ca DecodePointer
KERNEL32.dll ee EnterCriticalSection
KERNEL32.dll 339 LeaveCriticalSection
KERNEL32.dll d1 DeleteCriticalSection
KERNEL32.dll 367 MultiByteToWideChar
KERNEL32.dll 269 GetStringTypeW
KERNEL32.dll 300 IsDebuggerPresent
KERNEL32.dll 304 IsProcessorFeaturePresent
KERNEL32.dll 245 GetProcAddress
KERNEL32.dll 33e LoadLibraryExW
KERNEL32.dll 2cf HeapFree
KERNEL32.dll 2cb HeapAlloc
KERNEL32.dll 119 ExitProcess
KERNEL32.dll 217 GetModuleHandleExW
KERNEL32.dll 15 AreFileApisANSI
KERNEL32.dll 186 GetCommandLineA
KERNEL32.dll 3b1 RaiseException
USER32.dll dc EndPaint
USER32.dll a6 DestroyWindow
USER32.dll 237 PostQuitMessage
USER32.dll f6 FillRect
USER32.dll d0 DrawTextW
USER32.dll cd DrawTextA
USER32.dll 1eb LoadCursorW
USER32.dll e BeginPaint
USER32.dll 1ed LoadIconW
USER32.dll 1be InvalidateRect
USER32.dll 196 GetWindowLongW
USER32.dll 265 ReleaseDC
USER32.dll 2c4 SetWindowLongW
USER32.dll 6e CreateWindowExW
USER32.dll 17e GetSystemMetrics
USER32.dll 27c SendMessageW
USER32.dll 9c DefWindowProcW
USER32.dll 15d GetMessageW
USER32.dll 2fc TranslateMessage
USER32.dll af DispatchMessageW
USER32.dll 5e CreateDesktopW
USER32.dll 22a OpenInputDesktop
USER32.dll 4a CloseDesktop
USER32.dll 2e8 SwitchDesktop
USER32.dll 2ba SetThreadDesktop
USER32.dll 2df ShowWindow
USER32.dll 24d RegisterClassExW
GDI32.dll 2a6 SetTextColor
GDI32.dll e3 DeleteDC
GDI32.dll 35 CreateDIBSection
GDI32.dll 27e SetBkColor
GDI32.dll 27f SetBkMode
GDI32.dll e6 DeleteObject
GDI32.dll 277 SelectObject
GDI32.dll 30 CreateCompatibleDC
GDI32.dll 41 CreateFontW
GDI32.dll 288 SetDIBits
GDI32.dll 1fd GetObjectW
GDI32.dll 54 CreateSolidBrush
GDI32.dll 13 BitBlt
ADVAPI32.dll ba CryptEncrypt
ADVAPI32.dll ca CryptImportKey
ADVAPI32.dll c1 CryptGenRandom
ADVAPI32.dll cb CryptReleaseContext
ADVAPI32.dll cd CryptSetKeyParam
ADVAPI32.dll b1 CryptAcquireContextW
ADVAPI32.dll 230 RegCloseKey
ADVAPI32.dll 261 RegOpenKeyExW
ADVAPI32.dll 260 RegOpenKeyExA
ADVAPI32.dll 24e RegEnumKeyExA
ADVAPI32.dll 26d RegQueryValueExA
ADVAPI32.dll b7 CryptDestroyKey
SHELL32.dll 11e ShellExecuteA
MSXFS.dll 19 WFSExecute
MSXFS.dll 1f WFSOpen
MSXFS.dll 1b WFSGetInfo
MSXFS.dll 1a WFSFreeResult
MSXFS.dll 1d WFSIsBlocking
MSXFS.dll 22 WFSStartUp
MSXFS.dll 15 WFSClose
SHLWAPI.dll 48 PathFindFileNameA
SHLWAPI.dll 33 PathAppendA
SHLWAPI.dll 8a PathRemoveFileSpecA
=== Packer / Compiler ===
MS Visual C++ 6.0 - 8.0
=== Strings ===
File pos Mem pos ID Text
======== ======= == ====
00000000004D 00000040004D 0 !This program cannot be run in DOS mode.
0000000001E8 0000004001E8 0 .text
000000000210 000000400210 0 .rdata
000000000237 000000400237 0 @.data
000000000260 000000400260 0 .rsrc
000000000287 000000400287 0 @.reloc
000000002281 000000402E81 0 sC+1W
000000002720 000000403320 0 PQSVW
000000003133 000000403D33 0 D$DPh
0000000059FF 0000004065FF 0 D$@SVW
000000005B4F 00000040674F 0 CD$<P
000000005B59 000000406759 0 D$$RP
000000005C0A 00000040680A 0 D$ j@P
000000005C8A 00000040688A 0 D$ j@P
000000005D0D 00000040690D 0 D$$j@P
000000005D8D 00000040698D 0 D$$j@P
000000005FB7 000000406BB7 0 D$8jlP
0000000061E8 000000406DE8 0 D$8jlP
000000006489 000000407089 0 D$DPS
000000006532 000000407132 0 CD$@P
0000000065AC 0000004071AC 0 D$ ;D$(u
000000006612 000000407212 0 CD$@VW
0000000066E1 0000004072E1 0 CD$\P
000000006708 000000407308 0 CD$DP
000000006755 000000407355 0 CD$DP
00000000678D 00000040738D 0 CD$@+
00000000679F 00000040739F 0 D$$RPW
0000000067C6 0000004073C6 0 \$\QSW
0000000068EF 0000004074EF 0 D$HSVW
000000006B0E 00000040770E 0 CL$DQ
000000006B38 000000407738 0 CD$,P
000000006B85 000000407785 0 CD$,P
000000006BBD 0000004077BD 0 CD$(+
000000006BCF 0000004077CF 0 D$$RPS
000000006BF6 0000004077F6 0 t$HQVS
000000009343 000000409F43 0 QSVWj
0000000094F3 00000040A0F3 0 QSVWj
00000000AE37 00000040BA37 0 9x$u#9H
00000000B18B 00000040BD8B 0 +G$A+
00000000BC6C 00000040C86C 0 wqtfH
00000000BE5E 00000040CA5E 0 ujPPPP
00000000C808 00000040D408 0 D$ PS
00000000C824 00000040D424 0 D$ PS
00000000C89A 00000040D49A 0 D$ PS
00000000D68A 00000040E28A 0 HHuh@
00000000DB4F 00000040E74F 0 s(Rj
00000000FB35 000000410735 0 uPVWh
00000000FD86 000000410986 0 PPPPPPPP
000000010AC2 0000004116C2 0 QQSVWd
000000010D7F 00000041197F 0 PRAQh
000000011298 000000411E98 0 SSSSS
00000001131E 000000411F1E 0 PWSWW
00000001133D 000000411F3D 0 WWWWW
000000011396 000000411F96 0 PPPPP
000000012CD9 0000004138D9 0 ft!9q
000000012E3D 000000413A3D 0 PPPPP
000000012FF0 000000413BF0 0 PP9E u
00000001526F 000000415E6F 0 PPPPP
0000000153DB 000000415FDB 0 jA[jZZ+
000000015530 000000416130 0 Genuu_
File pos Mem pos ID Text
======== ======= == ====
000000015539 000000416139 0 ineIuV
000000015542 000000416142 0 nteluM3
0000000159D2 0000004165D2 0 SSSSS
000000015BA9 0000004167A9 0 VVVVV
000000015DCA 0000004169CA 0 PPPPP
00000001613D 000000416D3D 0 ~pjCXf
000000016A8D 00000041768D 0 tf= $C
0000000170FD 000000417CFD 0 <at-<rt"<wt
00000001716D 000000417D6D 0 tRHtC
0000000171F1 000000417DF1 0 t;Ht+
00000001735F 000000417F5F 0 URPQQh
000000018BDA 0000004197DA 0 j@j _W
000000018C9A 00000041989A 0 } j@W
00000001903D 000000419C3D 0 < t8< t4
000000019117 000000419D17 0 t@VSP
000000019172 000000419D72 0 PPPPP
00000001928F 000000419E8F 0 SPPP+
000000019298 000000419E98 0 FVWPP
0000000192BE 000000419EBE 0 SVWPP
0000000193C5 000000419FC5 0 9E WW
000000019620 00000041A220 0 PPPPP
00000001968E 00000041A28E 0 VVVVV
0000000196C6 00000041A2C6 0 j.Yf;
00000001972F 00000041A32F 0 j.Yf;
000000019735 00000041A335 0 tyPVj@W
00000001974A 00000041A34A 0 _tcPVj@
00000001976B 00000041A36B 0 uCPVj
000000019782 00000041A382 0 u#j,Xf;
0000000197A9 00000041A3A9 0 PPPPP
0000000197B8 00000041A3B8 0 SSSSS
000000019887 00000041A487 0 >Cu/f9F
000000019A64 00000041A664 0 SSSSS
000000019ABB 00000041A6BB 0 @PSjU
000000019AD9 00000041A6D9 0 PPPPP
000000019B18 00000041A718 0 SSSSS
000000019E09 00000041AA09 0 QQQQQ
000000019EC5 00000041AAC5 0 j;Yf9
000000019F3F 00000041AB3F 0 j;Yf9
00000001A090 00000041AC90 0 PPPPP
00000001A428 00000041B028 0 VVVVV
00000001A4C0 00000041B0C0 0 WVSj
00000001A762 00000041B362 0 RVSQSWV
00000001A79D 00000041B39D 0 RVSQj
00000001A8A6 00000041B4A6 0 QVVVj
00000001B4F3 00000041C0F3 0 ,SVWj0X
00000001B627 00000041C227 0 u'j0X
00000001B751 00000041C351 0 Wj0XPV
00000001B7F0 00000041C3F0 0 PjdSQ
00000001B957 00000041C557 0 -jd[;
00000001B9AA 00000041C5AA 0 WWWWW
00000001BEEF 00000041CAEF 0 VVVVV
00000001C33D 00000041CF3D 0 SVWjA_jZ+
00000001C3E5 00000041CFE5 0 uBjAYjZ+
00000001C6F9 00000041D2F9 0 tO95,
00000001C8E2 00000041D4E2 0 t VV9u
00000001CB71 00000041D771 0 PjPW
00000001CB88 00000041D788 0 $PjQW
00000001CBD0 00000041D7D0 0 *PjTW
00000001CBE7 00000041D7E7 0 +PjUW
00000001CBFE 00000041D7FE 0 ,PjVW
File pos Mem pos ID Text
======== ======= == ====
00000001CC18 00000041D818 0 -PjWW
00000001CC2F 00000041D82F 0 .PjRW
00000001CC46 00000041D846 0 /PjSW
00000001CCBC 00000041D8BC 0 HPjPW
00000001CCD6 00000041D8D6 0 LPjQW
00000001CFAD 00000041DBAD 0 <0|o<9
00000001D523 00000041E123 0 G Pj*S
00000001D537 00000041E137 0 G$Pj+S
00000001D54B 00000041E14B 0 G(Pj,S
00000001D55F 00000041E15F 0 G,Pj-S
00000001D576 00000041E176 0 G0Pj.S
00000001D58A 00000041E18A 0 G4Pj/S
00000001D5B2 00000041E1B2 0 G8PjDS
00000001D5C9 00000041E1C9 0 G<PjES
00000001D5DD 00000041E1DD 0 G@PjFS
00000001D5F1 00000041E1F1 0 GDPjGS
00000001D605 00000041E205 0 GHPjHS
00000001D61C 00000041E21C 0 GLPjIS
00000001D630 00000041E230 0 GPPjJS
00000001D644 00000041E244 0 GTPjKS
00000001D658 00000041E258 0 GXPjLS
00000001D66F 00000041E26F 0 G\PjMS
00000001D697 00000041E297 0 GdPjOS
00000001D6AB 00000041E2AB 0 GhPj8S
00000001D6C2 00000041E2C2 0 GlPj9S
00000001D6D6 00000041E2D6 0 GpPj:S
00000001D6EA 00000041E2EA 0 GtPj;S
00000001D6FE 00000041E2FE 0 GxPj<S
00000001D715 00000041E315 0 G|Pj=S
00000001D75C 00000041E35C 0 Pj@Sj
00000001DAA2 00000041E6A2 0 PjOSj
00000001E0B3 00000041ECB3 0 HHtVHHt
00000001E5AA 00000041F1AA 0 >0t-N
00000001E9D2 00000041F5D2 0 QVWSj
00000001EABB 00000041F6BB 0 v N+D$
00000001EE38 00000041FA38 0 r)f;q
00000001EEB2 00000041FAB2 0 r2f;A
00000001EF23 00000041FB23 0 SVWUj
00000001EFC4 00000041FBC4 0 ;t$,v-
00000001F049 00000041FC49 0 UQPXY]Y[
00000001F491 000000420091 0 ~';_t|%3
00000001F4A5 0000004200A5 0 wtVj
00000001F4BA 0000004200BA 0 ;_tr.
00000001F715 000000420315 0 PPPPP
00000001FA23 000000420623 0 WWWWW
00000001FAD4 0000004206D4 0 PPPPP
00000001FC27 000000420827 0 Yu2Vj@h
00000001FD1D 00000042091D 0 tMj_S
00000001FD75 000000420975 0 PPPPP
0000000210D1 000000421CD1 0 SSSSV
00000002115D 000000421D5D 0 SSSSV
000000021306 000000421F06 0 PPPPP
0000000213C6 000000421FC6 0 v N+D$
000000021506 000000422106 0 Ht+Ht$Ht
000000021788 000000422388 0 tHHt*Ht#
000000021CA8 0000004228A8 0 uJSSR
000000021E60 000000422A60 0 SSSSS
00000002225A 000000422E5A 0 SVjA[jZ
00000002231F 000000422F1F 0 jAZjZ
000000023124 000000423D24 0 +t"HHt
File pos Mem pos ID Text
======== ======= == ====
00000002317A 000000423D7A 0 9] t"
000000023FD6 000000424BD6 0 SSSSS
0000000247C8 0000004253C8 0 jxYf;
0000000247D0 0000004253D0 0 jXYf;
0000000247FA 0000004253FA 0 jxYf;
000000024802 000000425402 0 jXYf;
00000002482B 00000042542B 0 uHjAXf;
000000024B0E 00000042570E 0 j0Yf;
0000000265B0 0000004277B0 0 permission denied
0000000265C4 0000004277C4 0 file exists
0000000265D0 0000004277D0 0 no such device
0000000265E0 0000004277E0 0 filename too long
0000000265F4 0000004277F4 0 device or resource busy
00000002660C 00000042780C 0 io error
000000026618 000000427818 0 directory not empty
00000002662C 00000042782C 0 invalid argument
000000026640 000000427840 0 no space on device
000000026654 000000427854 0 no such file or directory
000000026670 000000427870 0 function not supported
000000026688 000000427888 0 no lock available
00000002669C 00000042789C 0 not enough memory
0000000266B0 0000004278B0 0 resource unavailable try again
0000000266D0 0000004278D0 0 cross device link
0000000266E4 0000004278E4 0 operation canceled
0000000266F8 0000004278F8 0 too many files open
00000002670C 00000042790C 0 permission_denied
000000026720 000000427920 0 address_in_use
000000026730 000000427930 0 address_not_available
000000026748 000000427948 0 address_family_not_supported
000000026768 000000427968 0 connection_already_in_progress
000000026788 000000427988 0 bad_file_descriptor
00000002679C 00000042799C 0 connection_aborted
0000000267B0 0000004279B0 0 connection_refused
0000000267C4 0000004279C4 0 connection_reset
0000000267D8 0000004279D8 0 destination_address_required
0000000267F8 0000004279F8 0 bad_address
000000026804 000000427A04 0 host_unreachable
000000026818 000000427A18 0 operation_in_progress
000000026830 000000427A30 0 interrupted
00000002683C 000000427A3C 0 invalid_argument
000000026850 000000427A50 0 already_connected
000000026864 000000427A64 0 too_many_files_open
000000026878 000000427A78 0 message_size
000000026888 000000427A88 0 filename_too_long
00000002689C 000000427A9C 0 network_down
0000000268AC 000000427AAC 0 network_reset
0000000268BC 000000427ABC 0 network_unreachable
0000000268D0 000000427AD0 0 no_buffer_space
0000000268E0 000000427AE0 0 no_protocol_option
0000000268F4 000000427AF4 0 not_connected
000000026904 000000427B04 0 not_a_socket
000000026914 000000427B14 0 operation_not_supported
00000002692C 000000427B2C 0 protocol_not_supported
000000026944 000000427B44 0 wrong_protocol_type
000000026958 000000427B58 0 timed_out
000000026964 000000427B64 0 operation_would_block
00000002697C 000000427B7C 0 address family not supported
00000002699C 000000427B9C 0 address in use
0000000269AC 000000427BAC 0 address not available
0000000269C4 000000427BC4 0 already connected
File pos Mem pos ID Text
======== ======= == ====
0000000269D8 000000427BD8 0 argument list too long
0000000269F0 000000427BF0 0 argument out of domain
000000026A08 000000427C08 0 bad address
000000026A14 000000427C14 0 bad file descriptor
000000026A28 000000427C28 0 bad message
000000026A34 000000427C34 0 broken pipe
000000026A40 000000427C40 0 connection aborted
000000026A54 000000427C54 0 connection already in progress
000000026A74 000000427C74 0 connection refused
000000026A88 000000427C88 0 connection reset
000000026A9C 000000427C9C 0 destination address required
000000026ABC 000000427CBC 0 executable format error
000000026AD4 000000427CD4 0 file too large
000000026AE4 000000427CE4 0 host unreachable
000000026AF8 000000427CF8 0 identifier removed
000000026B0C 000000427D0C 0 illegal byte sequence
000000026B24 000000427D24 0 inappropriate io control operation
000000026B48 000000427D48 0 invalid seek
000000026B58 000000427D58 0 is a directory
000000026B68 000000427D68 0 message size
000000026B78 000000427D78 0 network down
000000026B88 000000427D88 0 network reset
000000026B98 000000427D98 0 network unreachable
000000026BAC 000000427DAC 0 no buffer space
000000026BBC 000000427DBC 0 no child process
000000026BD0 000000427DD0 0 no link
000000026BD8 000000427DD8 0 no message available
000000026BF0 000000427DF0 0 no message
000000026BFC 000000427DFC 0 no protocol option
000000026C10 000000427E10 0 no stream resources
000000026C24 000000427E24 0 no such device or address
000000026C40 000000427E40 0 no such process
000000026C50 000000427E50 0 not a directory
000000026C60 000000427E60 0 not a socket
000000026C70 000000427E70 0 not a stream
000000026C80 000000427E80 0 not connected
000000026C90 000000427E90 0 not supported
000000026CA0 000000427EA0 0 operation in progress
000000026CB8 000000427EB8 0 operation not permitted
000000026CD0 000000427ED0 0 operation not supported
000000026CE8 000000427EE8 0 operation would block
000000026D00 000000427F00 0 owner dead
000000026D0C 000000427F0C 0 protocol error
000000026D1C 000000427F1C 0 protocol not supported
000000026D34 000000427F34 0 read only file system
000000026D4C 000000427F4C 0 resource deadlock would occur
000000026D6C 000000427F6C 0 result out of range
000000026D80 000000427F80 0 state not recoverable
000000026D98 000000427F98 0 stream timeout
000000026DA8 000000427FA8 0 text file busy
000000026DB8 000000427FB8 0 timed out
000000026DC4 000000427FC4 0 too many files open in system
000000026DE4 000000427FE4 0 too many links
000000026DF4 000000427FF4 0 too many symbolic link levels
000000026E14 000000428014 0 value too large
000000026E24 000000428024 0 wrong protocol type
000000026EB4 0000004280B4 0 bad allocation
000000027044 000000428244 0 0123456789abcdefghijklmnopqrstuvwxyz
000000027094 000000428294 0 0123456789abcdefghijklmnopqrstuvwxyz
0000000270C8 0000004282C8 0
File pos Mem pos ID Text
======== ======= == ====
000000027158 000000428358 0 0123456789abcdefABCDEF
000000027244 000000428444 0 Unknown exception
00000002727C 00000042847C 0 CorExitProcess
0000000272BC 0000004284BC 0 bad exception
000000027878 000000428A78 0 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]
0000000278B9 000000428AB9 0 abcdefghijklmnopqrstuvwxyz{|}~
0000000279F8 000000428BF8 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]
000000027A39 000000428C39 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
000000027AF8 000000428CF8 0 FlsAlloc
000000027B04 000000428D04 0 FlsFree
000000027B0C 000000428D0C 0 FlsGetValue
000000027B18 000000428D18 0 FlsSetValue
000000027B24 000000428D24 0 InitializeCriticalSectionEx
000000027B40 000000428D40 0 CreateSemaphoreExW
000000027B54 000000428D54 0 SetThreadStackGuarantee
000000027B6C 000000428D6C 0 CreateThreadpoolTimer
000000027B84 000000428D84 0 SetThreadpoolTimer
000000027B98 000000428D98 0 WaitForThreadpoolTimerCallbacks
000000027BB8 000000428DB8 0 CloseThreadpoolTimer
000000027BD0 000000428DD0 0 CreateThreadpoolWait
000000027BE8 000000428DE8 0 SetThreadpoolWait
000000027BFC 000000428DFC 0 CloseThreadpoolWait
000000027C10 000000428E10 0 FlushProcessWriteBuffers
000000027C2C 000000428E2C 0 FreeLibraryWhenCallbackReturns
000000027C4C 000000428E4C 0 GetCurrentProcessorNumber
000000027C68 000000428E68 0 GetLogicalProcessorInformation
000000027C88 000000428E88 0 CreateSymbolicLinkW
000000027C9C 000000428E9C 0 SetDefaultDllDirectories
000000027CB8 000000428EB8 0 EnumSystemLocalesEx
000000027CCC 000000428ECC 0 CompareStringEx
000000027CDC 000000428EDC 0 GetDateFormatEx
000000027CEC 000000428EEC 0 GetLocaleInfoEx
000000027CFC 000000428EFC 0 GetTimeFormatEx
000000027D0C 000000428F0C 0 GetUserDefaultLocaleName
000000027D28 000000428F28 0 IsValidLocaleName
000000027D3C 000000428F3C 0 LCMapStringEx
000000027D4C 000000428F4C 0 GetCurrentPackageId
00000002A91C 00000042BB1C 0 log10
00000002A954 00000042BB54 0 atan2
00000002A978 00000042BB78 0 floor
00000002A990 00000042BB90 0 ldexp
00000002A998 00000042BB98 0 _cabs
00000002A9A0 00000042BBA0 0 _hypot
00000002A9B0 00000042BBB0 0 frexp
00000002A9C4 00000042BBC4 0 _logb
00000002A9CC 00000042BBCC 0 _nextafter
00000002A9F4 00000042BBF4 0 Sunday
00000002A9FC 00000042BBFC 0 Monday
00000002AA04 00000042BC04 0 Tuesday
00000002AA0C 00000042BC0C 0 Wednesday
00000002AA18 00000042BC18 0 Thursday
00000002AA24 00000042BC24 0 Friday
00000002AA2C 00000042BC2C 0 Saturday
00000002AA68 00000042BC68 0 January
00000002AA70 00000042BC70 0 February
00000002AA7C 00000042BC7C 0 March
00000002AA84 00000042BC84 0 April
00000002AA9C 00000042BC9C 0 August
00000002AAA4 00000042BCA4 0 September
00000002AAB0 00000042BCB0 0 October
File pos Mem pos ID Text
======== ======= == ====
00000002AAB8 00000042BCB8 0 November
00000002AAC4 00000042BCC4 0 December
00000002AAD8 00000042BCD8 0 MM/dd/yy
00000002AAE4 00000042BCE4 0 dddd, MMMM dd, yyyy
00000002AAF8 00000042BCF8 0 HH:mm:ss
00000002AD28 00000042BF28 0 (null)
00000002AD61 00000042BF61 0 ( 8PX
00000002AD69 00000042BF69 0 700WP
00000002AD81 00000042BF81 0 xpxxxx
00000002ADA0 00000042BFA0 0 UTF-8
00000002ADA8 00000042BFA8 0 UTF-16LE
00000002ADB4 00000042BFB4 0 UNICODE
00000002AEB7 00000042C0B7 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]
00000002AEF8 00000042C0F8 0 abcdefghijklmnopqrstuvwxyz{|}~
00000002AF3C 00000042C13C 0 e+000
00000002AFC4 00000042C1C4 0 SunMonTueWedThuFriSat
00000002AFDC 00000042C1DC 0 JanFebMarAprMayJunJulAugSepOctNovDec
00000002B01C 00000042C21C 0 MessageBoxW
00000002B028 00000042C228 0 GetActiveWindow
00000002B038 00000042C238 0 GetLastActivePopup
00000002B04C 00000042C24C 0 GetUserObjectInformationW
00000002B068 00000042C268 0 GetProcessWindowStation
00000002B208 00000042C408 0 __based(
00000002B214 00000042C414 0 __cdecl
00000002B21C 00000042C41C 0 __pascal
00000002B228 00000042C428 0 __stdcall
00000002B234 00000042C434 0 __thiscall
00000002B240 00000042C440 0 __fastcall
00000002B24C 00000042C44C 0 __clrcall
00000002B258 00000042C458 0 __eabi
00000002B260 00000042C460 0 __ptr64
00000002B268 00000042C468 0 __restrict
00000002B274 00000042C474 0 __unaligned
00000002B280 00000042C480 0 restrict(
00000002B294 00000042C494 0 delete
00000002B2B8 00000042C4B8 0 operator
00000002B339 00000042C539 0 vftable'
00000002B345 00000042C545 0 vbtable'
00000002B351 00000042C551 0 vcall'
00000002B359 00000042C559 0 typeof'
00000002B365 00000042C565 0 local static guard'
00000002B37D 00000042C57D 0 string'
00000002B389 00000042C589 0 vbase destructor'
00000002B39D 00000042C59D 0 vector deleting destructor'
00000002B3BD 00000042C5BD 0 default constructor closure'
00000002B3DD 00000042C5DD 0 scalar deleting destructor'
00000002B3FD 00000042C5FD 0 vector constructor iterator'
00000002B41D 00000042C61D 0 vector destructor iterator'
00000002B43D 00000042C63D 0 vector vbase constructor iterator'
00000002B461 00000042C661 0 virtual displacement map'
00000002B47D 00000042C67D 0 eh vector constructor iterator'
00000002B4A1 00000042C6A1 0 eh vector destructor iterator'
00000002B4C1 00000042C6C1 0 eh vector vbase constructor iterator'
00000002B4E9 00000042C6E9 0 copy constructor closure'
00000002B505 00000042C705 0 udt returning'
00000002B521 00000042C721 0 local vftable'
00000002B531 00000042C731 0 local vftable constructor closure'
00000002B554 00000042C754 0 new[]
00000002B55C 00000042C75C 0 delete[]
00000002B569 00000042C769 0 omni callsig'
File pos Mem pos ID Text
======== ======= == ====
00000002B579 00000042C779 0 placement delete closure'
00000002B595 00000042C795 0 placement delete[] closure'
00000002B5B5 00000042C7B5 0 managed vector constructor iterator'
00000002B5DD 00000042C7DD 0 managed vector destructor iterator'
00000002B605 00000042C805 0 eh vector copy constructor iterator'
00000002B62D 00000042C82D 0 eh vector vbase copy constructor iterator'
00000002B659 00000042C859 0 dynamic initializer for '
00000002B675 00000042C875 0 dynamic atexit destructor for '
00000002B699 00000042C899 0 vector copy constructor iterator'
00000002B6BD 00000042C8BD 0 vector vbase copy constructor iterator'
00000002B6E9 00000042C8E9 0 managed vector copy constructor iterator'
00000002B715 00000042C915 0 local static thread guard'
00000002B730 00000042C930 0 Type Descriptor'
00000002B744 00000042C944 0 Base Class Descriptor at (
00000002B760 00000042C960 0 Base Class Array'
00000002B774 00000042C974 0 Class Hierarchy Descriptor'
00000002B794 00000042C994 0 Complete Object Locator'
00000002B7D5 00000042C9D5 0 ('8PW
00000002B7DE 00000042C9DE 0 700PP
00000002B7F9 00000042C9F9 0 xppwpp
00000002C5C0 00000042D7C0 0 CreateFile2
00000002C5DC 00000042D7DC 0 1#SNAN
00000002C5E4 00000042D7E4 0 1#IND
00000002C5EC 00000042D7EC 0 1#INF
00000002C5F4 00000042D7F4 0 1#QNAN
00000002C5FC 00000042D7FC 0 generic
00000002C604 00000042D804 0 unknown error
00000002C614 00000042D814 0 iostream
00000002C620 00000042D820 0 iostream stream error
00000002C638 00000042D838 0 system
00000002C640 00000042D840 0 ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/
00000002C684 00000042D884 0 string too long
00000002C694 00000042D894 0 invalid string position
00000002C6AC 00000042D8AC 0 bad locale name
00000002C6BC 00000042D8BC 0 false
00000002C6CC 00000042D8CC 0 ios_base::badbit set
00000002C6E4 00000042D8E4 0 ios_base::failbit set
00000002C6FC 00000042D8FC 0 ios_base::eofbit set
00000002C758 00000042D958 0 .DEFAULT\XFS\LOGICAL_SERVICES\
00000002C778 00000042D978 0 class
00000002C784 00000042D984 0 vector<T> too long
00000002C798 00000042D998 0 bad cast
00000002C7B4 00000042D9B4 0 Bills left:
00000002C7C4 00000042D9C4 0 time(s)
00000002C7D0 00000042D9D0 0 Wrong key. Tried:
00000002C7EC 00000042D9EC 0 del.exe
00000002C7FC 00000042D9FC 0 " /accepteula -p 3 -q "
00000002C817 00000042DA17 0 shutdown -t 0 -r -f
00000002C82C 00000042DA2C 0 del "%~f0"
00000002C83B 00000042DA3B 0 del "
00000002C846 00000042DA46 0 del "
00000002C84C 00000042DA4C 0 ">NUL
00000002C853 00000042DA53 0 if "%ERRORLEVEL%"=="0" goto start
00000002C878 00000042DA78 0 " 2>NUL | find /I /N "
00000002C890 00000042DA90 0 :start
00000002C898 00000042DA98 0 tasklist /FI "IMAGENAME eq
00000002C8B4 00000042DAB4 0 del.bat
00000002C8C0 00000042DAC0 0 cmd.exe /C "
00000002C8D0 00000042DAD0 0 cmd.exe
00000002C8F0 00000042DAF0 0 ERROR
File pos Mem pos ID Text
======== ======= == ====
00000002D7C0 00000042E9C0 0 Blocking operation in progress
00000002D7E0 00000042E9E0 0 No blocking operation in progress
00000002D804 00000042EA04 0 Device WFS_ERR_OP_IN_PROGRESS
00000002D824 00000042EA24 0 pinpad is busy
00000002D834 00000042EA34 0 pinpad not busy
00000002D860 00000042EA60 0 Pinpad1
00000002D868 00000042EA68 0 Failed to open registry
00000002D953 00000042EB53 0 raB3G
00000002F9E2 000000430BE2 0 GetCurrentProcess
00000002F9F6 000000430BF6 0 Sleep
00000002F9FE 000000430BFE 0 GetCurrentThreadId
00000002FA14 000000430C14 0 CloseHandle
00000002FA22 000000430C22 0 GetCurrentProcessId
00000002FA38 000000430C38 0 GetModuleFileNameA
00000002FA4E 000000430C4E 0 GetLastError
00000002FA5E 000000430C5E 0 GetVolumeInformationW
00000002FA76 000000430C76 0 CreateMutexW
00000002FA86 000000430C86 0 GetModuleFileNameW
00000002FA9C 000000430C9C 0 OpenMutexW
00000002FAAA 000000430CAA 0 SetLastError
00000002FABA 000000430CBA 0 GetSystemTime
00000002FACA 000000430CCA 0 CreateThread
00000002FAD8 000000430CD8 0 KERNEL32.dll
00000002FAE8 000000430CE8 0 ShowWindow
00000002FAF6 000000430CF6 0 SetThreadDesktop
00000002FB0A 000000430D0A 0 SwitchDesktop
00000002FB1A 000000430D1A 0 CloseDesktop
00000002FB2A 000000430D2A 0 OpenInputDesktop
00000002FB3E 000000430D3E 0 CreateDesktopW
00000002FB50 000000430D50 0 DispatchMessageW
00000002FB64 000000430D64 0 TranslateMessage
00000002FB78 000000430D78 0 GetMessageW
00000002FB86 000000430D86 0 DefWindowProcW
00000002FB98 000000430D98 0 SendMessageW
00000002FBA8 000000430DA8 0 GetSystemMetrics
00000002FBBC 000000430DBC 0 CreateWindowExW
00000002FBCE 000000430DCE 0 SetWindowLongW
00000002FBE0 000000430DE0 0 ReleaseDC
00000002FBEC 000000430DEC 0 GetWindowLongW
00000002FBFE 000000430DFE 0 InvalidateRect
00000002FC10 000000430E10 0 LoadIconW
00000002FC1C 000000430E1C 0 RegisterClassExW
00000002FC30 000000430E30 0 BeginPaint
00000002FC3E 000000430E3E 0 LoadCursorW
00000002FC4C 000000430E4C 0 DrawTextA
00000002FC58 000000430E58 0 DrawTextW
00000002FC64 000000430E64 0 FillRect
00000002FC70 000000430E70 0 PostQuitMessage
00000002FC82 000000430E82 0 DestroyWindow
00000002FC92 000000430E92 0 EndPaint
00000002FC9C 000000430E9C 0 USER32.dll
00000002FCAA 000000430EAA 0 CreateSolidBrush
00000002FCBE 000000430EBE 0 GetObjectW
00000002FCCC 000000430ECC 0 SetDIBits
00000002FCD8 000000430ED8 0 CreateFontW
00000002FCE6 000000430EE6 0 CreateCompatibleDC
00000002FCFC 000000430EFC 0 SelectObject
00000002FD0C 000000430F0C 0 DeleteObject
00000002FD1C 000000430F1C 0 SetBkMode
00000002FD28 000000430F28 0 SetBkColor
File pos Mem pos ID Text
======== ======= == ====
00000002FD36 000000430F36 0 CreateDIBSection
00000002FD4A 000000430F4A 0 DeleteDC
00000002FD56 000000430F56 0 SetTextColor
00000002FD66 000000430F66 0 BitBlt
00000002FD6E 000000430F6E 0 GDI32.dll
00000002FD7A 000000430F7A 0 RegQueryValueExA
00000002FD8E 000000430F8E 0 RegEnumKeyExA
00000002FD9E 000000430F9E 0 RegOpenKeyExA
00000002FDAE 000000430FAE 0 RegOpenKeyExW
00000002FDBE 000000430FBE 0 RegCloseKey
00000002FDCC 000000430FCC 0 CryptAcquireContextW
00000002FDE4 000000430FE4 0 CryptSetKeyParam
00000002FDF8 000000430FF8 0 CryptReleaseContext
00000002FE0E 00000043100E 0 CryptGenRandom
00000002FE20 000000431020 0 CryptImportKey
00000002FE32 000000431032 0 CryptEncrypt
00000002FE42 000000431042 0 CryptDestroyKey
00000002FE52 000000431052 0 ADVAPI32.dll
00000002FE62 000000431062 0 ShellExecuteA
00000002FE70 000000431070 0 SHELL32.dll
00000002FE7E 00000043107E 0 WFSGetInfo
00000002FE8C 00000043108C 0 WFSFreeResult
00000002FE9C 00000043109C 0 WFSOpen
00000002FEA6 0000004310A6 0 WFSClose
00000002FEB2 0000004310B2 0 WFSExecute
00000002FEC0 0000004310C0 0 WFSStartUp
00000002FECE 0000004310CE 0 WFSIsBlocking
00000002FEDC 0000004310DC 0 MSXFS.dll
00000002FEE8 0000004310E8 0 PathRemoveFileSpecA
00000002FEFE 0000004310FE 0 PathAppendA
00000002FF0C 00000043110C 0 PathFindFileNameA
00000002FF1E 00000043111E 0 SHLWAPI.dll
00000002FF2C 00000043112C 0 WideCharToMultiByte
00000002FF42 000000431142 0 InterlockedIncrement
00000002FF5A 00000043115A 0 InterlockedDecrement
00000002FF72 000000431172 0 EncodePointer
00000002FF82 000000431182 0 DecodePointer
00000002FF92 000000431192 0 EnterCriticalSection
00000002FFAA 0000004311AA 0 LeaveCriticalSection
00000002FFC2 0000004311C2 0 DeleteCriticalSection
00000002FFDA 0000004311DA 0 MultiByteToWideChar
00000002FFF0 0000004311F0 0 GetStringTypeW
000000030002 000000431202 0 IsDebuggerPresent
000000030016 000000431216 0 IsProcessorFeaturePresent
000000030032 000000431232 0 GetProcAddress
000000030044 000000431244 0 LoadLibraryExW
000000030056 000000431256 0 HeapFree
000000030062 000000431262 0 HeapAlloc
00000003006E 00000043126E 0 ExitProcess
00000003007C 00000043127C 0 GetModuleHandleExW
000000030092 000000431292 0 AreFileApisANSI
0000000300A4 0000004312A4 0 GetCommandLineA
0000000300B6 0000004312B6 0 RaiseException
0000000300C8 0000004312C8 0 RtlUnwind
0000000300D4 0000004312D4 0 GetCPInfo
0000000300E0 0000004312E0 0 InitializeCriticalSectionAndSpinCount
000000030108 000000431308 0 UnhandledExceptionFilter
000000030124 000000431324 0 SetUnhandledExceptionFilter
000000030142 000000431342 0 TerminateProcess
000000030156 000000431356 0 TlsAlloc
File pos Mem pos ID Text
======== ======= == ====
000000030162 000000431362 0 TlsGetValue
000000030170 000000431370 0 TlsSetValue
00000003017E 00000043137E 0 TlsFree
000000030188 000000431388 0 GetStartupInfoW
00000003019A 00000043139A 0 GetModuleHandleW
0000000301AE 0000004313AE 0 LCMapStringW
0000000301BE 0000004313BE 0 GetLocaleInfoW
0000000301D0 0000004313D0 0 IsValidLocale
0000000301E0 0000004313E0 0 GetUserDefaultLCID
0000000301F6 0000004313F6 0 EnumSystemLocalesW
00000003020C 00000043140C 0 HeapSize
000000030218 000000431418 0 GetStdHandle
000000030228 000000431428 0 WriteFile
000000030234 000000431434 0 GetProcessHeap
000000030246 000000431446 0 GetConsoleCP
000000030256 000000431456 0 GetConsoleMode
000000030268 000000431468 0 IsValidCodePage
00000003027A 00000043147A 0 GetACP
000000030284 000000431484 0 GetOEMCP
000000030290 000000431490 0 GetFileType
00000003029E 00000043149E 0 QueryPerformanceCounter
0000000302B8 0000004314B8 0 GetSystemTimeAsFileTime
0000000302D2 0000004314D2 0 GetEnvironmentStringsW
0000000302EC 0000004314EC 0 FreeEnvironmentStringsW
000000030306 000000431506 0 FlushFileBuffers
00000003031A 00000043151A 0 ReadFile
000000030326 000000431526 0 SetFilePointerEx
00000003033A 00000043153A 0 HeapReAlloc
000000030348 000000431548 0 OutputDebugStringW
00000003035E 00000043155E 0 LoadLibraryW
00000003036E 00000043156E 0 SetStdHandle
00000003037E 00000043157E 0 WriteConsoleW
00000003038E 00000043158E 0 ReadConsoleW
00000003039E 00000043159E 0 CreateFileW
0000000303AC 0000004315AC 0 SetEndOfFile
000000030408 000000432008 0 .?AVbad_alloc@std@@
000000030424 000000432024 0 .?AVlogic_error@std@@
000000030444 000000432044 0 .?AVlength_error@std@@
000000030464 000000432064 0 .?AVout_of_range@std@@
000000030484 000000432084 0 .?AV_Locimp@locale@std@@
0000000304A8 0000004320A8 0 .?AVios_base@std@@
0000000304C4 0000004320C4 0 .?AV?$_Iosb@H@std@@
0000000304E0 0000004320E0 0 .?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
000000030518 000000432118 0 .?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
000000030554 000000432154 0 .?AV?$basic_istream@DU?$char_traits@D@std@@@std@@
000000030590 000000432190 0 .?AV?$basic_filebuf@DU?$char_traits@D@std@@@std@@
0000000305CC 0000004321CC 0 .?AVcodecvt_base@std@@
0000000305EC 0000004321EC 0 .?AV?$codecvt@DDH@std@@
000000030610 000000432210 0 .?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@
000000030650 000000432250 0 Copyright (c) 1992-2004 by P.J. Plauger, licensed by Dinkumware, Ltd. ALL RIGHTS RESERVED.
000000030808 000000432408 0 .?AVtype_info@@
000000030D98 000000432998 0 .?AVbad_exception@std@@
0000000312F2 000000432EF2 0
0000000313D9 000000432FD9 0 abcdefghijklmnopqrstuvwxyz
0000000313F9 000000432FF9 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ
000000031512 000000433112 0
0000000315F2 0000004331F2 0 abcdefghijklmnopqrstuvwxyz
000000031612 000000433212 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ
000000031B7E 00000043377E 0 z?aUY
000000031BC0 0000004337C0 0 zc%C1
File pos Mem pos ID Text
======== ======= == ====
000000031C13 000000433813 0 -64OS
000000031C58 000000433858 0 .?AV_Iostream_error_category@std@@
000000031C84 000000433884 0 .?AV_System_error_category@std@@
000000031CB0 0000004338B0 0 .?AVerror_category@std@@
000000031CD4 0000004338D4 0 .?AV_Generic_error_category@std@@
000000031D00 000000433900 0 .?AVsystem_error@std@@
000000031D20 000000433920 0 .?AVbad_cast@std@@
000000031D3C 00000043393C 0 .?AVexception@std@@
000000031D58 000000433958 0 .?AVfailure@ios_base@std@@
000000031D7C 00000043397C 0 .?AVruntime_error@std@@
000000031D9C 00000043399C 0 .?AV?$ctype@D@std@@
000000031DB8 0000004339B8 0 .?AV?$numpunct@D@std@@
000000031DD8 0000004339D8 0 .?AV_Facet_base@std@@
000000031DF8 0000004339F8 0 .?AUctype_base@std@@
000000031E18 000000433A18 0 .?AVfacet@locale@std@@
000000031E7D 000000433A7D 0 !This program cannot be run in DOS mode.
000000031EF7 000000433AF7 0 oRich
000000032010 000000433C10 0 .text
000000032038 000000433C38 0 .rdata
00000003205F 000000433C5F 0 @.data
000000032088 000000433C88 0 .rsrc
0000000322B3 000000433EB3 0 L$hjXQ
0000000322BE 000000433EBE 0 T$hjZR
000000032616 000000434216 0 T$ RV
000000032AB6 0000004346B6 0 9+~W3
000000032EAC 000000434AAC 0 t$895
000000032F30 000000434B30 0 t$,9u
000000032FD2 000000434BD2 0 T$(RWQS
000000032FFA 000000434BFA 0 D$,;E
00000003302D 000000434C2D 0 t$8;5
000000033060 000000434C60 0 D$HPj
000000033085 000000434C85 0 L$ QW
00000003308B 000000434C8B 0 T$TRS
0000000330AD 000000434CAD 0 D$HPQS
000000033114 000000434D14 0 L$ QWRS
000000033130 000000434D30 0 |$$)|$
000000033328 000000434F28 0 L$ QU
00000003338E 000000434F8E 0 L$ Qh
0000000334CD 0000004350CD 0 T$0Rj
0000000334DE 0000004350DE 0 L$8Qj
0000000335BF 0000004351BF 0 L$$QPU
000000033608 000000435208 0 ;D$,r
0000000337C7 0000004353C7 0 T$ RV
000000033821 000000435421 0 T$ Rh
0000000338AE 0000004354AE 0 WhL B
000000033F27 000000435B27 0 \$<t&h
000000034073 000000435C73 0 L$8QV
0000000340B4 000000435CB4 0 T$0;T$ u
0000000340BE 000000435CBE 0 D$4;D$$
000000034168 000000435D68 0 L$PQSSj
000000034171 000000435D71 0 T$XRh@
0000000341F1 000000435DF1 0 L$,QRP
00000003436F 000000435F6F 0 tdWVU
0000000343B7 000000435FB7 0 LtXQh
000000034910 000000436510 0 D$ Ph
0000000352E8 000000436EE8 0 SSSSS
00000003556A 00000043716A 0 VVVVV
0000000355A1 0000004371A1 0 VVVVV
0000000355F9 0000004371F9 0 CCGG
000000035675 000000437275 0 VVVVV
File pos Mem pos ID Text
======== ======= == ====
0000000356BC 0000004372BC 0 GGBB
000000035761 000000437361 0 VVVVV
0000000358EB 0000004374EB 0 VVVVV
000000035ABE 0000004376BE 0 ~,WPV
000000035F9B 000000437B9B 0 VVVVV
000000035FD7 000000437BD7 0 VVVVV
00000003682C 00000043842C 0 VVVVV
000000036873 000000438473 0 VVVVV
0000000374AE 0000004390AE 0 VVVVV
0000000374F2 0000004390F2 0 VVVVV
000000037B80 000000439780 0 VVVVV
000000037BC4 0000004397C4 0 PPPPP
000000037C07 000000439807 0 VVVVV
000000037C2B 00000043982B 0 VVVVV
000000037C50 000000439850 0 VVVVV
000000037DC3 0000004399C3 0 PPPPP
000000037E13 000000439A13 0 PPPPP
000000038D96 00000043A996 0 PPPPP
000000038F89 00000043AB89 0 PPPPP
000000038FB7 00000043ABB7 0 SSSSS
000000039075 00000043AC75 0 VVVVV
00000003913E 00000043AD3E 0 SSSSS
00000003916E 00000043AD6E 0 SSSSS
000000039286 00000043AE86 0 VVVVV
0000000392EB 00000043AEEB 0 VVVVV
00000003932E 00000043AF2E 0 SSSSS
000000039396 00000043AF96 0 @PVhc
000000039413 00000043B013 0 SSSSS
000000039A4F 00000043B64F 0 0A@@Ju
00000003A051 00000043BC51 0 VVVVV
00000003A285 00000043BE85 0 SSSSS
00000003A2E9 00000043BEE9 0 SSSSS
00000003A382 00000043BF82 0 PPPPP
00000003A3E2 00000043BFE2 0 SSSSS
00000003A4AD 00000043C0AD 0 PPPPP
00000003A653 00000043C253 0 VVVVV
00000003A755 00000043C355 0 VVVVV
00000003A7B8 00000043C3B8 0 VVVVV
00000003A8EC 00000043C4EC 0 PPPPP
00000003AC14 00000043C814 0 VVVVV
00000003AC75 00000043C875 0 vSSSh
00000003AE1D 00000043CA1D 0 SSSSS
00000003B7A3 00000043D3A3 0 WWWWW
00000003B9DD 00000043D5DD 0 PPPPP
00000003BAAB 00000043D6AB 0 , <Xw
00000003BB29 00000043D729 0 t%HHt
00000003BD68 00000043D968 0 HHtXHHt
00000003BE58 00000043DA58 0 HHty+
00000003C2C5 00000043DEC5 0 >If90t
00000003C52F 00000043E12F 0 WWWWW
00000003C685 00000043E285 0 VVVVV
00000003C6F0 00000043E2F0 0 VVVVV
00000003CDBA 00000043E9BA 0 WWWWW
00000003CE5B 00000043EA5B 0 VVVVV
00000003CEB9 00000043EAB9 0 SSSSS
00000003D00B 00000043EC0B 0 [j@j
00000003D067 00000043EC67 0 9=dkB
00000003D212 00000043EE12 0 ;54hB
00000003DAE5 00000043F6E5 0 9~\u'
00000003DC8E 00000043F88E 0 PPPPP
File pos Mem pos ID Text
======== ======= == ====
00000003DD28 00000043F928 0 PPPPP
00000003DE89 00000043FA89 0 _VVVVV
00000003DEC4 00000043FAC4 0 _VVVVV
00000003DF02 00000043FB02 0 VVVVV
00000003DF2A 00000043FB2A 0 VhPhB
00000003E07F 00000043FC7F 0 SSSSS
00000003E194 00000043FD94 0 SSSSS
00000003E203 00000043FE03 0 7GG9]
00000003E27C 00000043FE7C 0 u)jAXf;
00000003E41F 00000044001F 0 VVVVV
00000003E53D 00000044013D 0 u)jAXf;
00000003E7EA 0000004403EA 0 >=Yt1j
00000003E7FD 0000004403FD 0 tPVWP
00000003E810 000000440410 0 PPPPP
00000003E9CB 0000004405CB 0 QQSVWh
00000003EEE7 000000440AE7 0 URPQQh8
00000003F1B5 000000440DB5 0 0SSSSS
00000003F23E 000000440E3E 0 0SSSSS
00000003F36C 000000440F6C 0 0SSSSS
00000003F3E5 000000440FE5 0 VVVVV
00000003F4F1 0000004410F1 0 WWWWW
00000003F532 000000441132 0 WWWWW
00000003F62A 00000044122A 0 VVVVV
00000003F80C 00000044140C 0 VVVVV
00000003FCFB 0000004418FB 0 v N+D$
00000003FD89 000000441989 0 ji_jdZf;
00000003FDAE 0000004419AE 0 Xt"f;
00000003FDD0 0000004419D0 0 Xupf;
00000003FF9C 000000441B9C 0 SSSSS
00000004090A 00000044250A 0 VVVVV
000000040F02 000000442B02 0 Kf90t
000000041119 000000442D19 0 It.It+It!It
000000041125 000000442D25 0 It"IIuQ
00000004118A 000000442D8A 0 PPPPP
000000041199 000000442D99 0 SSSSS
00000004130B 000000442F0B 0 PPPPP
000000041EA6 000000443AA6 0 u8SS3
000000041F3E 000000443B3E 0 9]$SS
000000042085 000000443C85 0 t"SS9]
0000000422FE 000000443EFE 0 9] SS
0000000424C7 0000004440C7 0 Pj1Q3
000000042559 000000444159 0 F Pj*
000000042571 000000444171 0 F$Pj+
000000042586 000000444186 0 F(Pj,
00000004259B 00000044419B 0 F,Pj-
0000000425B0 0000004441B0 0 F0Pj.
0000000425C8 0000004441C8 0 F4Pj/
0000000425F2 0000004441F2 0 F8PjD
000000042607 000000444207 0 F<PjE
00000004261F 00000044421F 0 F@PjF
000000042634 000000444234 0 FDPjG
000000042649 000000444249 0 FHPjH
00000004265E 00000044425E 0 FLPjI
000000042676 000000444276 0 FPPjJ
00000004268B 00000044428B 0 FTPjK
0000000426A0 0000004442A0 0 FXPjL
0000000426B5 0000004442B5 0 F\PjM
0000000426E2 0000004442E2 0 FdPjO
0000000426F7 0000004442F7 0 FhPj8
00000004270C 00000044430C 0 FlPj9
File pos Mem pos ID Text
======== ======= == ====
000000042724 000000444324 0 FpPj:
000000042739 000000444339 0 FtPj;
00000004274E 00000044434E 0 FxPj<
000000042763 000000444363 0 F|Pj=
000000042DB4 0000004449B4 0 v$;5\
000000042EC5 000000444AC5 0 C PjPV
000000042ED9 000000444AD9 0 C$PjQV
000000042F18 000000444B18 0 C*PjTV
000000042F2C 000000444B2C 0 C+PjUV
000000042F40 000000444B40 0 C,PjVV
000000042F57 000000444B57 0 C-PjWV
000000042F6B 000000444B6B 0 C.PjRV
000000042F7F 000000444B7F 0 C/PjSV
00000004320A 000000444E0A 0 QW@Ph
00000004357A 00000044517A 0 PPPPP
0000000435B3 0000004451B3 0 PPPPP
000000043689 000000445289 0 PPPPP
0000000436BD 0000004452BD 0 PPPPP
000000043830 000000445430 0 PPPPP
000000043869 000000445469 0 PPPPP
0000000438C9 0000004454C9 0 PPPPP
000000043902 000000445502 0 PPPPP
00000004394A 00000044554A 0 PPPPP
000000043984 000000445584 0 PPPPP
0000000439BE 0000004455BE 0 PPPPP
0000000439F8 0000004455F8 0 PPPPP
000000043A32 000000445632 0 PPPPP
000000043AFA 0000004456FA 0 .;1s(N
000000043B75 000000445775 0 tIHt$
000000043C34 000000445834 0 HHt4HHt
000000043D2B 00000044592B 0 Ht\Ht,
000000043E0A 000000445A0A 0 WWWWW
000000043E51 000000445A51 0 teHtFHt&Hu
0000000443A1 000000445FA1 0 SSSSS
0000000443D4 000000445FD4 0 SSSSS
00000004442A 00000044602A 0 ty<%tA
00000004449D 00000044609D 0 tBF9]
0000000444F4 0000004460F4 0 SSSSS
0000000445A6 0000004461A6 0 PPPPPPPP
00000004470A 00000044630A 0 tNh,0B
00000004471B 00000044631B 0 t=h(0B
000000044CEE 0000004468EE 0 Vj@hP-B
000000044DF9 0000004469F9 0 u%h00B
000000044E11 000000446A11 0 PPPPP
00000004641B 00000044801B 0 0;1t|
000000047B26 000000449726 0 PPPPPPPP
000000047D64 000000449964 0 SSSSS
000000047DE2 0000004499E2 0 SSSSS
000000047E2D 000000449A2D 0 QSWVj
000000048049 000000449C49 0 PPPPP
0000000481AB 000000449DAB 0 t$HHt
0000000483EC 000000449FEC 0 HHtYHHt
0000000484DD 00000044A0DD 0 HHty+
000000048BF6 00000044A7F6 0 tM<it-<ot)<ut%<xt!<Xt
000000048DF8 00000044A9F8 0 WWWWW
000000048F25 00000044AB25 0 , <Xw
000000048F90 00000044AB90 0 8$u%9
0000000490C0 00000044ACC0 0 t%HHt
000000049347 00000044AF47 0 <dty<itu<otq<utm<xti<Xte
000000049D7A 00000044B97A 0 HIf98t
File pos Mem pos ID Text
======== ======= == ====
00000004A13B 00000044BD3B 0 VVVVV
00000004A27F 00000044BE7F 0 VW|[;
00000004A352 00000044BF52 0 VVVVV
00000004A715 00000044C315 0 WWWWW
00000004A876 00000044C476 0 wIVSP
00000004AA3F 00000044C63F 0 SSSSS
00000004AAB3 00000044C6B3 0 WWWWW
00000004AB3C 00000044C73C 0 WWWWW
00000004ABB4 00000044C7B4 0 WWWWW
00000004B421 00000044D021 0 u,VVWV
00000004B4E9 00000044D0E9 0 t VV9u
00000004B773 00000044D373 0 0WWWWW
00000004B79E 00000044D39E 0 AAFFf;
00000004B7DF 00000044D3DF 0 SVWUj
00000004B880 00000044D480 0 ;t$,v-
00000004B905 00000044D505 0 UQPXY]Y[
00000004BC16 00000044D816 0 WWWWV
00000004BC39 00000044D839 0 t+WWVPV
00000004BCD0 00000044D8D0 0 VVVVV
00000004BD09 00000044D909 0 VVVVV
00000004BD42 00000044D942 0 VVVVV
00000004BD9E 00000044D99E 0 SSSSS
00000004BDBE 00000044D9BE 0 SSSSS
00000004BE56 00000044DA56 0 j,hH7B
00000004BE97 00000044DA97 0 SSSSS
00000004BEB2 00000044DAB2 0 SSSSS
00000004BECD 00000044DACD 0 SSSSS
00000004BF75 00000044DB75 0 SSSSS
00000004C0BF 00000044DCBF 0 SSSSS
00000004C10C 00000044DD0C 0 >:u8FV
00000004C16E 00000044DD6E 0 SSSSS
00000004C217 00000044DE17 0 jd_Fj
00000004C33F 00000044DF3F 0 PPPPP
00000004C3AF 00000044DFAF 0 VVVVV
00000004C3E3 00000044DFE3 0 95DkB
00000004C40D 00000044E00D 0 Pf950kB
00000004C433 00000044E033 0 PVVRV
00000004C4CF 00000044E0CF 0 VVVVVQRSSj
00000004C4E3 00000044E0E3 0 VVVVV
00000004C579 00000044E179 0 95LkB
00000004C58C 00000044E18C 0 95LkB
00000004C68C 00000044E28C 0 SSSSS
00000004C6C2 00000044E2C2 0 SSSSS
00000004C75B 00000044E35B 0 VVVVV
00000004C832 00000044E432 0 SSSSS
00000004C871 00000044E471 0 SSSSS
00000004C913 00000044E513 0 VVVVV
00000004C96F 00000044E56F 0 SSSSS
00000004C993 00000044E593 0 SSSSS
00000004CAB8 00000044E6B8 0 0SSSSS
00000004CC78 00000044E878 0 WWWWW
00000004D062 00000044EC62 0 WWWWW
00000004D299 00000044EE99 0 SSSSS
00000004D303 00000044EF03 0 SSSSS
00000004D32D 00000044EF2D 0 WWWWW
00000004D39F 00000044EF9F 0 WWWWW
00000004D3E0 00000044EFE0 0 VVVVV
00000004D46E 00000044F06E 0 0SSSSS
00000004D4E8 00000044F0E8 0 SSSSS
00000004D546 00000044F146 0 8VVVVV
File pos Mem pos ID Text
======== ======= == ====
00000004D5C5 00000044F1C5 0 VVVVV
00000004D776 00000044F376 0 SSSSS
00000004DB1B 00000044F71B 0 SSSSS
00000004DB58 00000044F758 0 SSSSS
00000004DBEE 00000044F7EE 0 QQSV3
00000004DC0A 00000044F80A 0 VVVVj
00000004DD1F 00000044F91F 0 9=PkB
00000004DF16 00000044FB16 0 t{~Bj
00000004E0E7 00000044FCE7 0 SSSSS
00000004E124 00000044FD24 0 SSSSS
00000004E296 00000044FE96 0 SSSSS
00000004E2B7 00000044FEB7 0 tSj=V
00000004E442 000000450042 0 @Y@PW
00000004E453 000000450053 0 SSSSS
00000004E504 000000450104 0 SSSSS
00000004E53E 00000045013E 0 SSSSS
00000004EC90 000000450890 0 \pard\lang1033\b0\fs20\par
00000004ECB0 0000004508B0 0 \b EFFET JURIDIQUE.\b0 Le pr\'e9sent contrat d\'e9crit certains droits juridiques. Vous pourriez avoir d'autres droits pr\'e9vus par les lois de votre pays. Le pr\'e9sent contrat ne modifie pas les droits que vous conf\'e8rent les lois de votre pays si celles-ci ne le permettent pas.\b\par
00000004EDD8 0000004509D8 0 \pard\sb120\sa120 Elle s'applique \'e9galement, m\'eame si Sysinternals connaissait ou devrait conna\'eetre l'\'e9ventualit\'e9 d'un tel dommage. Si votre pays n'autorise pas l'exclusion ou la limitation de responsabilit\'e9 pour les dommages indirects, accessoires ou de quelque nature que ce soit, il se peut que la limitation ou l'exclusion ci-dessus ne s'appliquera pas \'e0 votre \'e9gard.\par
00000004EF68 000000450B68 0 \pard\fi-363\li720\sb120\sa120\tx720\'b7\tab les r\'e9clamations au titre de violation de contrat ou de garantie, ou au titre de responsabilit\'e9 stricte, de n\'e9gligence ou d'une autre faute dans la limite autoris\'e9e par la loi en vigueur.\par
00000004F068 000000450C68 0 \pard\keepn\fi-360\li720\sb120\sa120\tx720\lang1036\'b7\tab tout ce qui est reli\'e9 au logiciel, aux services ou au contenu (y compris le code) figurant sur des sites Internet tiers ou dans des programmes tiers ; et\par
00000004F148 000000450D48 0 \lang1033 Cette limitation concerne :\par
00000004F178 000000450D78 0 \pard\keepn\sb120\sa120\b LIMITATION DES DOMMAGES-INT\'c9R\'caTS ET EXCLUSION DE RESPONSABILIT\'c9 POUR LES DOMMAGES.\b0 Vous pouvez obtenir de Sysinternals et de ses fournisseurs une indemnisation en cas de dommages directs uniquement \'e0 hauteur de 5,00 $ US. Vous ne pouvez pr\'e9tendre \'e0 aucune indemnisation pour les autres dommages, y compris les dommages sp\'e9ciaux, indirects ou accessoires et pertes de b\'e9n\'e9fices.\par
00000004F330 000000450F30 0 \pard\sb120\sa120 EXON\'c9RATION DE GARANTIE.\b0 Le logiciel vis\'e9 par une licence est offert \'ab tel quel \'bb. Toute utilisation de ce logiciel est \'e0 votre seule risque et p\'e9ril. Sysinternals n'accorde aucune autre garantie expresse. Vous pouvez b\'e9n\'e9ficier de droits additionnels en vertu du droit local sur la protection dues consommateurs, que ce contrat ne peut modifier. La ou elles sont permises par le droit locale, les garanties implicites de qualit\'e9 marchande, d'ad\'e9quation \'e0 un usage particulier et d'absence de contrefa\'e7on sont exclues.\par
00000004F578 000000451178 0 \pard\sb240\lang1036 Remarque : Ce logiciel \'e9tant distribu\'e9 au Qu\'e9bec, Canada, certaines des clauses dans ce contrat sont fournies ci-dessous en fran\'e7ais.\par
00000004F628 000000451228 0 \pard\b Please note: As this software is distributed in Quebec, Canada, some of the clauses in this agreement are provided below in French.\par
00000004F6B8 0000004512B8 0 \pard\li360\sb120\sa120 It also applies even if Sysinternals knew or should have known about the possibility of the damages. The above limitation or exclusion may not apply to you because your country may not allow the exclusion or limitation of incidental, consequential or other damages.\par
00000004F7E0 0000004513E0 0 \pard\fi-363\li720\sb120\sa120\'b7\tab claims for breach of contract, breach of warranty, guarantee or condition, strict liability, negligence, or other tort to the extent permitted by applicable law.\par
00000004F8B0 0000004514B0 0 \pard\fi-363\li720\sb120\sa120\tx720\'b7\tab anything related to the software, services, content (including code) on third party Internet sites, or third party programs; and\par
00000004F968 000000451568 0 \pard\li357\sb120\sa120\b0\caps0 This limitation applies to\par
00000004F9A8 0000004515A8 0 \pard\fi-360\li360\sb120\sa120\tx360\fs20 10.\tab\fs19 Limitation on and Exclusion of Remedies and Damages. You can recover from SYSINTERNALS and its suppliers only direct damages up to U.S. $5.00. You cannot recover any other damages, including consequential, lost profits, special, indirect or incidental damages.\par
00000004FAF0 0000004516F0 0 \fs20 9.\tab\fs19 Disclaimer of Warranty.\caps0 \caps The software is licensed \ldblquote as-is.\rdblquote You bear the risk of using it. SYSINTERNALS gives no express warranties, guarantees or conditions. You may have additional consumer rights under your local laws which this agreement cannot change. To the extent permitted under your local laws, SYSINTERNALS excludes the implied warranties of merchantability, fitness for a particular purpose and non-infringement.\par
00000004FCD8 0000004518D8 0 \pard\fi-357\li357\sb120\sa120\tx360\caps\fs20 8.\tab\fs19 Legal Effect.\b0\caps0 This agreement describes certain legal rights. You may have other rights under the laws of your country. You may also have rights with respect to the party from whom you acquired the software. This agreement does not change your rights under the laws of your country if the laws of your country do not permit it to do so.\b\caps\par
00000004FE80 000000451A80 0 \pard\fi-363\li720\sb120\sa120\fs20 b.\tab\fs19 Outside the United States.\b0 If you acquired the software in any other country, the laws of that country apply.\b\par
00000004FF30 000000451B30 0 \pard\fi-363\li720\sb120\sa120\tx720\cf0\fs20 a.\tab\fs19 United States.\b0 If you acquired the software in the United States, Washington state law governs the interpretation of this agreement and applies to claims for breach of it, regardless of conflict of laws principles. The laws of the state where you live govern all other claims, including claims under state consumer protection laws, unfair competition laws, and in tort.\b\par
0000000500E8 000000451CE8 0 \pard\keepn\fi-360\li360\sb120\sa120\tx360\cf2\b\caps\fs20 7.\tab\fs19 Applicable Law\caps0 .\par
000000050150 000000451D50 0 \caps\fs20 6.\tab\fs19 Entire Agreement.\b0\caps0 This agreement, and the terms for supplements, updates, Internet-based services and support services that you use, are the entire agreement for the software and support services.\par
000000050240 000000451E40 0 \caps\fs20 5.\tab\fs19 SUPPORT SERVICES.\caps0 \b0 Because this software is \ldblquote as is,\rdblquote we may not provide support services for it.\b\par
0000000502E0 000000451EE0 0 \caps\fs20 4.\tab\fs19 Export Restrictions\caps0 .\b0 The software is subject to United States export laws and regulations. You must comply with all domestic and international export laws and regulations that apply to the software. These laws include restrictions on destinations, end users and end use. For additional information, see \cf1\ul www.microsoft.com/exporting <http://www.microsoft.com/exporting>\cf0\ulnone .\b\par
000000050498 000000452098 0 \pard\fi-357\li357\sb120\sa120\tx360\b\fs20 3.\tab\fs19 DOCUMENTATION.\b0 Any person that has valid access to your computer or internal network may copy and use the documentation for your internal, reference purposes.\b\par
000000050580 000000452180 0 \'b7\tab use the software for commercial software hosting services.\par
0000000505C8 0000004521C8 0 \'b7\tab transfer the software or this agreement to any third party; or\par
000000050614 000000452214 0 \'b7\tab rent, lease or lend the software;\par
000000050644 000000452244 0 \'b7\tab publish the software for others to copy;\par
000000050680 000000452280 0 \'b7\tab make more copies of the software than specified in this agreement or allowed by applicable law, despite this limitation;\par
000000050708 000000452308 0 \pard\fi-363\li720\sb120\sa120\'b7\tab reverse engineer, decompile or disassemble the binary versions of the software, except and only to the extent that applicable law expressly permits, despite this limitation;\par
0000000507E8 0000004523E8 0 \pard\fi-363\li720\sb120\sa120\tx720\b0\'b7\tab work around any technical limitations in the binary versions of the software;\par
000000050870 000000452470 0 \caps\fs20 2.\tab\fs19 Scope of License\caps0 .\b0 The software is licensed, not sold. This agreement only gives you some rights to use the software. Sysinternals reserves all other rights. Unless applicable law gives you more rights despite this limitation, you may use the software only as expressly permitted in this agreement. In doing so, you must comply with any technical limitations in the software that only allow you to use it in certain ways. You may not\b\par
000000050A50 000000452650 0 \pard\fi-357\li357\sb120\sa120\tx360\fs20 1.\tab\fs19 INSTALLATION AND USE RIGHTS. \b0 You may install and use any number of copies of the software on your devices.\b\par
000000050B00 000000452700 0 \pard\brdrt\brdrs\brdrw10\brsp20 \sb120\sa120 If you comply with these license terms, you have the rights below.\par
000000050B78 000000452778 0 \b BY USING THE SOFTWARE, YOU ACCEPT THESE TERMS. IF YOU DO NOT ACCEPT THEM, DO NOT USE THE SOFTWARE.\par
000000050BE8 0000004527E8 0 \pard\sb120\sa120 for this software, unless other terms accompany those items. If so, those terms apply.\par
000000050C58 000000452858 0 \'b7\tab support services\par
000000050C78 000000452878 0 \'b7\tab Internet-based services, and \par
000000050CA4 0000004528A4 0 \pard\fi-363\li720\sb120\sa120\'b7\tab supplements,\par
000000050CDC 0000004528DC 0 \pard\fi-363\li720\sb120\sa120\tx720\'b7\tab updates,\par
000000050D18 000000452918 0 \pard\sb120\sa120\b0\fs19 These license terms are an agreement between Sysinternals (a wholly owned subsidiary of Microsoft Corporation) and you. Please read them. They apply to the software you are downloading from Systinternals.com, which includes the media on which you received it, if any. The terms also apply to any Sysinternals\par
000000050E70 000000452A70 0 {\*\generator Msftedit 5.41.21.2506;}\viewkind4\uc1\pard\brdrb\brdrs\brdrw10\brsp20 \sb120\sa120\b\f0\fs24 SYSINTERNALS SOFTWARE LICENSE TERMS\fs28\par
000000050F08 000000452B08 0 {\colortbl ;\red0\green0\blue255;\red0\green0\blue0;}
000000050F40 000000452B40 0 {\rtf1\ansi\ansicpg1252\deff0\deflang1033{\fonttbl{\f0\fswiss\fprq2\fcharset0 Tahoma;}}
File pos Mem pos ID Text
======== ======= == ====
0000000511C0 000000452DC0 0 CommandLineToArgvW
00000005130C 000000452F0C 0 Scanning file:
0000000517CC 0000004533CC 0 GetDiskFreeSpaceExW
0000000519D0 0000004535D0 0 RtlNtStatusToDosError
000000051A70 000000453670 0 NtFsControlFile
000000051E81 000000453A81 0 Invalid drive letter: %s
000000051E9A 000000453A9A 0 Argument must be formatted like d:
000000051EC0 000000453AC0 0 SDelete is set for %d pass%s.
000000051F00 000000453B00 0 Wow64EnableWow64FsRedirection
00000005202C 000000453C2C 0 CorExitProcess
000000052054 000000453C54 0 runtime error
000000052068 000000453C68 0 TLOSS error
000000052078 000000453C78 0 SING error
000000052088 000000453C88 0 DOMAIN error
000000052098 000000453C98 0 R6034
00000005209F 000000453C9F 0 An application has made an attempt to load the C runtime library incorrectly.
0000000520ED 000000453CED 0 Please contact the application's support team for more information.
000000052138 000000453D38 0 R6033
00000005213F 000000453D3F 0 - Attempt to use MSIL code from this assembly during native code initialization
00000005218F 000000453D8F 0 This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
000000052230 000000453E30 0 R6032
000000052237 000000453E37 0 - not enough space for locale information
000000052268 000000453E68 0 R6031
00000005226F 000000453E6F 0 - Attempt to initialize the CRT more than once.
00000005229F 000000453E9F 0 This indicates a bug in your application.
0000000522CC 000000453ECC 0 R6030
0000000522D3 000000453ED3 0 - CRT not initialized
0000000522EC 000000453EEC 0 R6028
0000000522F3 000000453EF3 0 - unable to initialize heap
000000052314 000000453F14 0 R6027
00000005231B 000000453F1B 0 - not enough space for lowio initialization
00000005234C 000000453F4C 0 R6026
000000052353 000000453F53 0 - not enough space for stdio initialization
000000052384 000000453F84 0 R6025
00000005238B 000000453F8B 0 - pure virtual function call
0000000523AC 000000453FAC 0 R6024
0000000523B3 000000453FB3 0 - not enough space for _onexit/atexit table
0000000523E4 000000453FE4 0 R6019
0000000523EB 000000453FEB 0 - unable to open console device
000000052410 000000454010 0 R6018
000000052417 000000454017 0 - unexpected heap error
000000052434 000000454034 0 R6017
00000005243B 00000045403B 0 - unexpected multithread lock error
000000052464 000000454064 0 R6016
00000005246B 00000045406B 0 - not enough space for thread data
000000052492 000000454092 0 This application has requested the Runtime to terminate it in an unusual way.
0000000524E0 0000004540E0 0 Please contact the application's support team for more information.
000000052528 000000454128 0 R6009
00000005252F 00000045412F 0 - not enough space for environment
000000052554 000000454154 0 R6008
00000005255B 00000045415B 0 - not enough space for arguments
000000052580 000000454180 0 R6002
000000052587 000000454187 0 - floating point support not loaded
0000000525B0 0000004541B0 0 Microsoft Visual C++ Runtime Library
0000000525E0 0000004541E0 0 <program name unknown>
0000000525F8 0000004541F8 0 Runtime Error!
000000052608 000000454208 0 Program:
00000005261C 00000045421C 0 LC_TIME
000000052624 000000454224 0 LC_NUMERIC
000000052630 000000454230 0 LC_MONETARY
File pos Mem pos ID Text
======== ======= == ====
00000005263C 00000045423C 0 LC_CTYPE
000000052648 000000454248 0 LC_COLLATE
000000052654 000000454254 0 LC_ALL
0000000526C7 0000004542C7 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]
000000052708 000000454308 0 abcdefghijklmnopqrstuvwxyz{|}~
000000052744 000000454344 0 EncodePointer
000000052770 000000454370 0 DecodePointer
000000052780 000000454380 0 FlsFree
000000052788 000000454388 0 FlsSetValue
000000052794 000000454394 0 FlsGetValue
0000000527A0 0000004543A0 0 FlsAlloc
0000000527BC 0000004543BC 0 (null)
0000000527E9 0000004543E9 0 ( 8PX
0000000527F1 0000004543F1 0 700WP
000000052809 000000454409 0 xpxxxx
0000000528A0 0000004544A0 0 SystemFunction036
0000000528B4 0000004544B4 0 ADVAPI32.DLL
0000000528C4 0000004544C4 0 GetProcessWindowStation
0000000528DC 0000004544DC 0 GetUserObjectInformationA
0000000528F8 0000004544F8 0 GetLastActivePopup
00000005290C 00000045450C 0 GetActiveWindow
00000005291C 00000045451C 0 MessageBoxA
000000052928 000000454528 0 USER32.DLL
000000052EE0 000000454AE0 0 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]
000000052F21 000000454B21 0 abcdefghijklmnopqrstuvwxyz{|}~
000000053060 000000454C60 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]
0000000530A1 000000454CA1 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
000000053140 000000454D40 0 HH:mm:ss
00000005314C 000000454D4C 0 dddd, MMMM dd, yyyy
000000053160 000000454D60 0 MM/dd/yy
000000053174 000000454D74 0 December
000000053180 000000454D80 0 November
00000005318C 000000454D8C 0 October
000000053194 000000454D94 0 September
0000000531A0 000000454DA0 0 August
0000000531B8 000000454DB8 0 April
0000000531C0 000000454DC0 0 March
0000000531C8 000000454DC8 0 February
0000000531D4 000000454DD4 0 January
00000005320C 000000454E0C 0 Saturday
000000053218 000000454E18 0 Friday
000000053220 000000454E20 0 Thursday
00000005322C 000000454E2C 0 Wednesday
000000053238 000000454E38 0 Tuesday
000000053240 000000454E40 0 Monday
000000053248 000000454E48 0 Sunday
000000053270 000000454E70 0 am/pm
000000053278 000000454E78 0 united-states
000000053288 000000454E88 0 united-kingdom
000000053298 000000454E98 0 trinidad & tobago
0000000532AC 000000454EAC 0 south-korea
0000000532B8 000000454EB8 0 south-africa
0000000532C8 000000454EC8 0 south korea
0000000532D4 000000454ED4 0 south africa
0000000532E4 000000454EE4 0 slovak
0000000532EC 000000454EEC 0 puerto-rico
0000000532F8 000000454EF8 0 pr-china
000000053304 000000454F04 0 pr china
000000053314 000000454F14 0 new-zealand
000000053320 000000454F20 0 hong-kong
File pos Mem pos ID Text
======== ======= == ====
00000005332C 000000454F2C 0 holland
000000053334 000000454F34 0 great britain
000000053344 000000454F44 0 england
00000005334C 000000454F4C 0 czech
000000053354 000000454F54 0 china
00000005335C 000000454F5C 0 britain
000000053364 000000454F64 0 america
000000053378 000000454F78 0 swiss
000000053380 000000454F80 0 swedish-finland
000000053390 000000454F90 0 spanish-venezuela
0000000533A4 000000454FA4 0 spanish-uruguay
0000000533B4 000000454FB4 0 spanish-puerto rico
0000000533C8 000000454FC8 0 spanish-peru
0000000533D8 000000454FD8 0 spanish-paraguay
0000000533EC 000000454FEC 0 spanish-panama
0000000533FC 000000454FFC 0 spanish-nicaragua
000000053410 000000455010 0 spanish-modern
000000053420 000000455020 0 spanish-mexican
000000053430 000000455030 0 spanish-honduras
000000053444 000000455044 0 spanish-guatemala
000000053458 000000455058 0 spanish-el salvador
00000005346C 00000045506C 0 spanish-ecuador
00000005347C 00000045507C 0 spanish-dominican republic
000000053498 000000455098 0 spanish-costa rica
0000000534AC 0000004550AC 0 spanish-colombia
0000000534C0 0000004550C0 0 spanish-chile
0000000534D0 0000004550D0 0 spanish-bolivia
0000000534E0 0000004550E0 0 spanish-argentina
0000000534F4 0000004550F4 0 portuguese-brazilian
00000005350C 00000045510C 0 norwegian-nynorsk
000000053520 000000455120 0 norwegian-bokmal
000000053534 000000455134 0 norwegian
000000053540 000000455140 0 italian-swiss
000000053550 000000455150 0 irish-english
000000053560 000000455160 0 german-swiss
000000053570 000000455170 0 german-luxembourg
000000053584 000000455184 0 german-lichtenstein
000000053598 000000455198 0 german-austrian
0000000535A8 0000004551A8 0 french-swiss
0000000535B8 0000004551B8 0 french-luxembourg
0000000535CC 0000004551CC 0 french-canadian
0000000535DC 0000004551DC 0 french-belgian
0000000535EC 0000004551EC 0 english-usa
0000000535F8 0000004551F8 0 english-us
000000053604 000000455204 0 english-uk
000000053610 000000455210 0 english-trinidad y tobago
00000005362C 00000045522C 0 english-south africa
000000053644 000000455244 0 english-nz
000000053650 000000455250 0 english-jamaica
000000053660 000000455260 0 english-ire
00000005366C 00000045526C 0 english-caribbean
000000053680 000000455280 0 english-can
00000005368C 00000045528C 0 english-belize
00000005369C 00000045529C 0 english-aus
0000000536A8 0000004552A8 0 english-american
0000000536BC 0000004552BC 0 dutch-belgian
0000000536CC 0000004552CC 0 chinese-traditional
0000000536E0 0000004552E0 0 chinese-singapore
0000000536F4 0000004552F4 0 chinese-simplified
000000053708 000000455308 0 chinese-hongkong
File pos Mem pos ID Text
======== ======= == ====
00000005371C 00000045531C 0 chinese
00000005372C 00000045532C 0 canadian
000000053738 000000455338 0 belgian
000000053740 000000455340 0 australian
00000005374C 00000045534C 0 american-english
000000053760 000000455360 0 american english
000000053774 000000455374 0 american
000000053A60 000000455660 0 Norwegian-Nynorsk
000000053A9D 00000045569D 0 ('8PW
000000053AA6 0000004556A6 0 700PP
000000053AC1 0000004556C1 0 xppwpp
000000053AD4 0000004556D4 0 SunMonTueWedThuFriSat
000000053AEC 0000004556EC 0 JanFebMarAprMayJunJulAugSepOctNovDec
000000053B18 000000455718 0 CONIN$
000000053B20 000000455720 0 CONOUT$
000000053B88 000000455788 0 c:\src\Misc\sdel\Release\sdelete.pdb
0000000544EE 0000004560EE 0 GetModuleHandleW
000000054502 000000456102 0 LocalFree
00000005450E 00000045610E 0 LoadLibraryW
00000005451E 00000045611E 0 LocalAlloc
00000005452C 00000045612C 0 GetCommandLineW
00000005453E 00000045613E 0 GetProcAddress
000000054550 000000456150 0 FormatMessageW
000000054562 000000456162 0 MoveFileW
00000005456E 00000045616E 0 ReadFile
00000005457A 00000045617A 0 WriteFile
000000054586 000000456186 0 VirtualFree
000000054594 000000456194 0 SetFilePointer
0000000545A6 0000004561A6 0 VirtualAlloc
0000000545B6 0000004561B6 0 SetFileAttributesW
0000000545CC 0000004561CC 0 GetFileAttributesW
0000000545E2 0000004561E2 0 DeleteFileW
0000000545F0 0000004561F0 0 CloseHandle
0000000545FE 0000004561FE 0 GetLastError
00000005460E 00000045620E 0 CreateFileW
00000005461C 00000045621C 0 WaitForSingleObject
000000054632 000000456232 0 GetDiskFreeSpaceW
000000054646 000000456246 0 FindClose
000000054652 000000456252 0 FindNextFileW
000000054662 000000456262 0 RemoveDirectoryW
000000054676 000000456276 0 FindFirstFileW
000000054688 000000456288 0 DeviceIoControl
00000005469A 00000045629A 0 ExpandEnvironmentStringsW
0000000546B6 0000004562B6 0 GetVersion
0000000546C4 0000004562C4 0 GetFullPathNameW
0000000546D8 0000004562D8 0 GetCurrentDirectoryW
0000000546EE 0000004562EE 0 KERNEL32.dll
0000000546FE 0000004562FE 0 SendMessageW
00000005470E 00000045630E 0 InflateRect
00000005471C 00000045631C 0 SetCursor
000000054728 000000456328 0 LoadCursorW
000000054736 000000456336 0 SetWindowTextW
000000054748 000000456348 0 EndDialog
000000054754 000000456354 0 GetSysColorBrush
000000054768 000000456368 0 GetDlgItem
000000054776 000000456376 0 DialogBoxIndirectParamW
00000005478E 00000045638E 0 USER32.dll
00000005479C 00000045639C 0 EndDoc
0000000547A6 0000004563A6 0 EndPage
0000000547B0 0000004563B0 0 StartPage
File pos Mem pos ID Text
======== ======= == ====
0000000547BC 0000004563BC 0 StartDocW
0000000547C8 0000004563C8 0 SetMapMode
0000000547D6 0000004563D6 0 GetDeviceCaps
0000000547E4 0000004563E4 0 GDI32.dll
0000000547F0 0000004563F0 0 PrintDlgW
0000000547FA 0000004563FA 0 COMDLG32.dll
00000005480A 00000045640A 0 RegCloseKey
000000054818 000000456418 0 RegSetValueExW
00000005482A 00000045642A 0 RegQueryValueExW
00000005483E 00000045643E 0 RegCreateKeyW
00000005484C 00000045644C 0 ADVAPI32.dll
00000005485C 00000045645C 0 HeapAlloc
000000054868 000000456468 0 HeapFree
000000054874 000000456474 0 GetSystemTimeAsFileTime
00000005488E 00000045648E 0 EnterCriticalSection
0000000548A6 0000004564A6 0 LeaveCriticalSection
0000000548BE 0000004564BE 0 Sleep
0000000548C6 0000004564C6 0 ExitProcess
0000000548D4 0000004564D4 0 DeleteCriticalSection
0000000548EC 0000004564EC 0 FatalAppExitA
0000000548FC 0000004564FC 0 HeapReAlloc
00000005490A 00000045650A 0 HeapCreate
000000054918 000000456518 0 HeapDestroy
000000054926 000000456526 0 GetStdHandle
000000054936 000000456536 0 GetModuleFileNameA
00000005494C 00000045654C 0 TerminateProcess
000000054960 000000456560 0 GetCurrentProcess
000000054974 000000456574 0 UnhandledExceptionFilter
000000054990 000000456590 0 SetUnhandledExceptionFilter
0000000549AE 0000004565AE 0 IsDebuggerPresent
0000000549C2 0000004565C2 0 GetCPInfo
0000000549CE 0000004565CE 0 InterlockedIncrement
0000000549E6 0000004565E6 0 InterlockedDecrement
0000000549FE 0000004565FE 0 GetACP
000000054A08 000000456608 0 GetOEMCP
000000054A14 000000456614 0 IsValidCodePage
000000054A26 000000456626 0 TlsGetValue
000000054A34 000000456634 0 TlsAlloc
000000054A40 000000456640 0 TlsSetValue
000000054A4E 00000045664E 0 TlsFree
000000054A58 000000456658 0 SetLastError
000000054A68 000000456668 0 GetCurrentThreadId
000000054A7E 00000045667E 0 GetCurrentThread
000000054A92 000000456692 0 WideCharToMultiByte
000000054AA8 0000004566A8 0 GetConsoleCP
000000054AB8 0000004566B8 0 GetConsoleMode
000000054ACA 0000004566CA 0 FlushFileBuffers
000000054ADE 0000004566DE 0 SetHandleCount
000000054AF0 0000004566F0 0 GetFileType
000000054AFE 0000004566FE 0 GetStartupInfoA
000000054B10 000000456710 0 SetConsoleCtrlHandler
000000054B28 000000456728 0 FreeLibrary
000000054B36 000000456736 0 InterlockedExchange
000000054B4C 00000045674C 0 LoadLibraryA
000000054B5C 00000045675C 0 InitializeCriticalSectionAndSpinCount
000000054B84 000000456784 0 GetModuleFileNameW
000000054B9A 00000045679A 0 FreeEnvironmentStringsW
000000054BB4 0000004567B4 0 GetEnvironmentStringsW
000000054BCE 0000004567CE 0 QueryPerformanceCounter
000000054BE8 0000004567E8 0 GetTickCount
File pos Mem pos ID Text
======== ======= == ====
000000054BF8 0000004567F8 0 GetCurrentProcessId
000000054C0E 00000045680E 0 RtlUnwind
000000054C1A 00000045681A 0 MultiByteToWideChar
000000054C30 000000456830 0 LCMapStringA
000000054C40 000000456840 0 LCMapStringW
000000054C50 000000456850 0 GetStringTypeA
000000054C62 000000456862 0 GetStringTypeW
000000054C74 000000456874 0 GetTimeFormatA
000000054C86 000000456886 0 GetDateFormatA
000000054C98 000000456898 0 GetUserDefaultLCID
000000054CAE 0000004568AE 0 GetLocaleInfoA
000000054CC0 0000004568C0 0 EnumSystemLocalesA
000000054CD6 0000004568D6 0 IsValidLocale
000000054CE6 0000004568E6 0 WriteConsoleA
000000054CF6 0000004568F6 0 GetConsoleOutputCP
000000054D0C 00000045690C 0 WriteConsoleW
000000054D1C 00000045691C 0 SetStdHandle
000000054D2C 00000045692C 0 HeapSize
000000054D38 000000456938 0 GetLocaleInfoW
000000054D4A 00000045694A 0 GetTimeZoneInformation
000000054D64 000000456964 0 CreateFileA
000000054D72 000000456972 0 CompareStringA
000000054D84 000000456984 0 CompareStringW
000000054D96 000000456996 0 SetEnvironmentVariableA
000000055576 000000457176 0
000000055656 000000457256 0 abcdefghijklmnopqrstuvwxyz
000000055676 000000457276 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ
00000005577A 00000045737A 0
000000055861 000000457461 0 abcdefghijklmnopqrstuvwxyz
000000055881 000000457481 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ
0000000561AC 000000457DAC 0 <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
0000000561F7 000000457DF7 0 <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
00000005622F 000000457E2F 0 <security>
00000005623F 000000457E3F 0 <requestedPrivileges>
00000005625C 000000457E5C 0 <requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>
0000000562BC 000000457EBC 0 </requestedPrivileges>
0000000562DA 000000457EDA 0 </security>
0000000562EB 000000457EEB 0 </trustInfo>
0000000562FB 000000457EFB 0 </assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXX
0000000564FC 0000004580FC 0 Washington1
000000056511 000000458111 0 Redmond1
000000056523 000000458123 0 Microsoft Corporation1#0!
000000056543 000000458143 0 Microsoft Code Signing PCA0
000000056561 000000458161 0 120904214209Z
000000056570 000000458170 0 130304214209Z0
000000056598 000000458198 0 Washington1
0000000565AD 0000004581AD 0 Redmond1
0000000565BF 0000004581BF 0 Microsoft Corporation1
0000000565DF 0000004581DF 0 MOPR1
0000000565EE 0000004581EE 0 Microsoft Corporation0
00000005678E 00000045838E 0 O0M0K
000000056798 000000458398 0 Ehttp://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl0Z
0000000567EB 0000004583EB 0 N0L0J
0000000567FB 0000004583FB 0 >http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt0
000000056928 000000458528 0 V ,:N
000000056990 000000458590 0 Washington1
0000000569A5 0000004585A5 0 Redmond1
0000000569B7 0000004585B7 0 Microsoft Corporation1!0
0000000569D7 0000004585D7 0 Microsoft Time-Stamp PCA0
0000000569F3 0000004585F3 0 120109222559Z
File pos Mem pos ID Text
======== ======= == ====
000000056A02 000000458602 0 130409222559Z0
000000056A2A 00000045862A 0 Washington1
000000056A3F 00000045863F 0 Redmond1
000000056A51 000000458651 0 Microsoft Corporation1
000000056A71 000000458671 0 MOPR1'0%
000000056A80 000000458680 0 nCipher DSE ESN:B8EC-30A4-71441%0#
000000056AA9 0000004586A9 0 Microsoft Time-Stamp Service0
000000056B30 000000458730 0 Vi7:*
000000056B69 000000458769 0 |pEa~
000000056C3B 00000045883B 0 M0K0I
000000056C45 000000458845 0 Chttp://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0X
000000056C96 000000458896 0 L0J0H
000000056CA6 0000004588A6 0 <http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt0
000000056E5C 000000458A5C 0 microsoft1-0+
000000056E70 000000458A70 0 $Microsoft Root Certificate Authority0
000000056E99 000000458A99 0 100831221932Z
000000056EA8 000000458AA8 0 200831222932Z0y1
000000056ECF 000000458ACF 0 Washington1
000000056EE4 000000458AE4 0 Redmond1
000000056EF6 000000458AF6 0 Microsoft Corporation1#0!
000000056F16 000000458B16 0 Microsoft Code Signing PCA0
000000057118 000000458D18 0 I0G0E
000000057122 000000458D22 0 ?http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0T
00000005716F 000000458D6F 0 H0F0D
00000005717F 000000458D7F 0 8http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0
0000000572E3 000000458EE3 0 N=|)H
00000005741C 00000045901C 0 microsoft1-0+
000000057430 000000459030 0 $Microsoft Root Certificate Authority0
000000057459 000000459059 0 070403125309Z
000000057468 000000459068 0 210403130309Z0w1
00000005748F 00000045908F 0 Washington1
0000000574A4 0000004590A4 0 Redmond1
0000000574B6 0000004590B6 0 Microsoft Corporation1!0
0000000574D6 0000004590D6 0 Microsoft Time-Stamp PCA0
0000000576BB 0000004592BB 0 microsoft1-0+
0000000576CF 0000004592CF 0 $Microsoft Root Certificate Authority
00000005770E 00000045930E 0 I0G0E
000000057718 000000459318 0 ?http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0T
000000057765 000000459365 0 H0F0D
000000057775 000000459375 0 8http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0
0000000577EB 0000004593EB 0 .tq[m
000000057871 000000459471 0 1Jv1=+r
00000005792A 00000045952A 0 L&*H$_Z
0000000579FF 0000004595FF 0 Washington1
000000057A14 000000459614 0 Redmond1
000000057A26 000000459626 0 Microsoft Corporation1#0!
000000057A46 000000459646 0 Microsoft Code Signing PCA
000000057B26 000000459726 0 *http://technet.microsoft.com/sysinternals 0
000000057C9F 00000045989F 0 Washington1
000000057CB4 0000004598B4 0 Redmond1
000000057CC6 0000004598C6 0 Microsoft Corporation1!0
000000057CE6 0000004598E6 0 Microsoft Time-Stamp PCA
000000057D42 000000459942 0 130109222603Z0#
000000057E7B 000000459A7B 0 F2YB-i
000000057F38 000000459B38 0 .?AV?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@
000000058060 00000045C060 0 <?xml version='1.0' encoding='UTF-8' standalone='yes'?>
000000058099 00000045C099 0 <assembly xmlns='urn:schemas-microsoft-com:asm.v1' manifestVersion='1.0'>
0000000580E4 00000045C0E4 0 <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
00000005811C 00000045C11C 0 <security>
00000005812C 00000045C12C 0 <requestedPrivileges>
File pos Mem pos ID Text
======== ======= == ====
000000058149 00000045C149 0 <requestedExecutionLevel level='asInvoker' uiAccess='false' />
000000058191 00000045C191 0 </requestedPrivileges>
0000000581AF 00000045C1AF 0 </security>
0000000581C0 00000045C1C0 0 </trustInfo>
0000000581D0 00000045C1D0 0 </assembly>
00000005820D 00000045D00D 0 011h1
000000058215 00000045D015 0 1,282V2h2
00000005821F 00000045D01F 0 2$3/363B4M4T4
000000058239 00000045D039 0 :':F:X:
000000058247 00000045D047 0 <8=B=M=0>L>w>
000000058275 00000045D075 0 1M2i2
000000058285 00000045D085 0 3$3r3
00000005829D 00000045D09D 0 6W7B8M8
0000000582A7 00000045D0A7 0 819:9
0000000582B1 00000045D0B1 0 9 :+:9:>;g;
0000000582C1 00000045D0C1 0 <5<=<o<
0000000582F3 00000045D0F3 0 666E6t6z6
00000005830B 00000045D10B 0 7f7u7
00000005831D 00000045D11D 0 708=8O8
00000005834D 00000045D14D 0 =&>8>
00000005836F 00000045D16F 0 1-2L2
00000005837D 00000045D17D 0 3E3d3
000000058387 00000045D187 0 4*4G4N4
000000058397 00000045D197 0 7N7{7
00000005839D 00000045D19D 0 7/8k8}8
0000000583AB 00000045D1AB 0 8/9L9S9
0000000583BD 00000045D1BD 0 :8;f;x;
0000000583C7 00000045D1C7 0 ;U<]<j<u<
0000000583D1 00000045D1D1 0 <I=]=
0000000583E9 00000045D1E9 0 0Z2g2r2
0000000583FD 00000045D1FD 0 3F6X6
000000058409 00000045D209 0 :$:.:k;u;
000000058443 00000045D243 0 2*2H2S2}2
00000005845F 00000045D25F 0 3&3/363
000000058473 00000045D273 0 434>4G4U4v4
00000005848B 00000045D28B 0 7Z8z8
000000058493 00000045D293 0 8Z9}9
0000000584AD 00000045D2AD 0 =J>b>
0000000584D5 00000045D2D5 0 :4:::P:W:]:b:p:
0000000584E9 00000045D2E9 0 :&;8;x;
000000058509 00000045D309 0 =X=>>M>U>i>
000000058565 00000045D365 0 7D8H8L8P8T8X8\8
00000005857B 00000045D37B 0 8F9v:
00000005858B 00000045D38B 0 ; ;$;
0000000585A1 00000045D3A1 0 > >x>
0000000585C1 00000045D3C1 0 3 4w4
0000000585E1 00000045D3E1 0 9&:X<g<
0000000585FD 00000045D3FD 0 0x142O2v2
000000058619 00000045D419 0 5%5+505C5H5M5T5
000000058633 00000045D433 0 6#6:6A6
000000058647 00000045D447 0 7-7F7U7
000000058653 00000045D453 0 8&8~8
000000058689 00000045D489 0 :';c;
000000058697 00000045D497 0 <D<b<
0000000586A9 00000045D4A9 0 =!=/=?=H=V=_=
0000000586E9 00000045D4E9 0 4+4n4}4
000000058703 00000045D503 0 5P6p6
000000058715 00000045D515 0 878Z8f8
000000058725 00000045D525 0 9F9V9u9|9
00000005873F 00000045D53F 0 :(:.:R:X:
File pos Mem pos ID Text
======== ======= == ====
000000058753 00000045D553 0 :I;S;
000000058761 00000045D561 0 ;D<U<
00000005876D 00000045D56D 0 <R=c=j=r=
0000000587A5 00000045D5A5 0 0/0I0P0l0
0000000587B5 00000045D5B5 0 101C1
0000000587D9 00000045D5D9 0 9\:K<c>k>u>
00000005880D 00000045D60D 0 2(2.2R2e2
000000058829 00000045D629 0 353A3
000000058835 00000045D635 0 4+434c4
00000005883F 00000045D63F 0 4E6c6|6
00000005885F 00000045D65F 0 7 7$7(7r7x7|7
000000058879 00000045D679 0 8 8$8E8o8
0000000588BF 00000045D6BF 0 <D<J<P<V<\<b<i<p<w<~<
0000000588F3 00000045D6F3 0 =I=O=U=[=a=g=n=u=|=
000000058933 00000045D733 0 ?3?w?
000000058947 00000045D747 0 0#0B0a0x0
00000005895B 00000045D75B 0 2h4R5
000000058963 00000045D763 0 6"6N6X6
000000058979 00000045D779 0 7#7(7:7E7J7a7k7
00000005898B 00000045D78B 0 7(8?8L8X8h8n8
0000000589C3 00000045D7C3 0 :8;=;G;
0000000589CD 00000045D7CD 0 ;3<[<i<
0000000589D5 00000045D7D5 0 >3>L>S>[>
0000000589DF 00000045D7DF 0 >d>h>
0000000589F9 00000045D7F9 0 >B?H?L?P?T?
000000058A1D 00000045D81D 0 0?0q0x0|0
000000058A49 00000045D849 0 4L5d5i5
000000058A59 00000045D859 0 8%8E8M8f8M9
000000058A6D 00000045D86D 0 ;!<(<=<G<
000000058A7D 00000045D87D 0 >6>A>_>
000000058A99 00000045D899 0 0k0w0
000000058AB1 00000045D8B1 0 1=1J1S1w1
000000058ACD 00000045D8CD 0 4'4.4
000000058AD3 00000045D8D3 0 4L5S5u5|5!6T7 8s8
000000058AE7 00000045D8E7 0 8:9D:g:
000000058AF7 00000045D8F7 0 ; ;6;?;K;V;{;
000000058B11 00000045D911 0 <-<3<<<
000000058B2D 00000045D92D 0 1@3J3U3
000000058B43 00000045D943 0 :'; <
000000058B53 00000045D953 0 =G=P=
000000058BA7 00000045D9A7 0 2$262O2U2p2
000000058BD9 00000045D9D9 0 3"3'3-353:3@3H3M3S3[3
000000058BEF 00000045D9EF 0 3f3n3s3y3
000000058C2B 00000045DA2B 0 4$4,41474?4D4J4R4W4]4e4j4p4x4}4
000000058C73 00000045DA73 0 5 5)5p5
000000058C9F 00000045DA9F 0 =#='=+=/=3=7=;=?=C=G=K=O=S=W=[=_=c=g=k=o=s=w=
000000058CE9 00000045DAE9 0 ?(?.?@?S?Y?t?~?
000000058D35 00000045DB35 0 4,4k4
000000058D51 00000045DB51 0 5%5/5]5p5
000000058D69 00000045DB69 0 7?8E8g8w8Y9
000000058D81 00000045DB81 0 <H<P<
000000058D91 00000045DB91 0 =.=S=o=
000000058D9F 00000045DB9F 0 >->F>W>
000000058DB0 00000045DBB0 0 >0Y0o0
000000058DD3 00000045DBD3 0 6J7}7
000000058DD9 00000045DBD9 0 7*8r8
000000058DE3 00000045DBE3 0 9':.:
000000058DEF 00000045DBEF 0 ;!<1<\<m<z<
000000058E09 00000045DC09 0 >.?e?q?
000000058E31 00000045DC31 0 4F4O4
File pos Mem pos ID Text
======== ======= == ====
000000058E43 00000045DC43 0 6q7z7f8
000000058E4F 00000045DC4F 0 849H9
000000058E65 00000045DC65 0 ;i;n;
000000058E73 00000045DC73 0 <;<O<U<
000000058E83 00000045DC83 0 =$=K=
000000058E9D 00000045DC9D 0 =$>)>h>m>v>{>
000000058ECF 00000045DCCF 0 040@0J0W0a0q0
000000058EEF 00000045DCEF 0 2 3*3
000000058F01 00000045DD01 0 4"4<4W4
000000058F09 00000045DD09 0 4f4o4t4
000000058F19 00000045DD19 0 5L5_5
000000058F1F 00000045DD1F 0 5,6S6
000000058F29 00000045DD29 0 63797E7
000000058F39 00000045DD39 0 8J8V8
000000058F45 00000045DD45 0 9!9D9J9Q9
000000058F53 00000045DD53 0 9!:::v:
000000058F6F 00000045DD6F 0 <4=@=J=[=f=
000000058F8B 00000045DD8B 0 >%>T>\>k>
000000058FB0 00000045DDB0 0 U0g0x1
000000058FBD 00000045DDBD 0 1U2v2
000000058FD7 00000045DDD7 0 8&818<8D8
000000059013 00000045DE13 0 0+1f1
00000005902F 00000045DE2F 0 6,6Z6
000000059053 00000045DE53 0 :i;+<
000000059079 00000045DE79 0 060$5{5
000000059081 00000045DE81 0 5r718y;
0000000590B3 00000045DEB3 0 2+212@2G2W2]2c2k2q2w2
0000000590E5 00000045DEE5 0 3K3c3|3M4
0000000590EF 00000045DEEF 0 4k5}5
000000059105 00000045DF05 0 616C6
000000059115 00000045DF15 0 :(:::L:
000000059121 00000045DF21 0 ;6<@<H<P<X<
000000059134 00000045DF34 0 60A0O0o8
00000005913F 00000045DF3F 0 8;9X9
000000059149 00000045DF49 0 :@:m=Z>
00000005918B 00000045DF8B 0 </<8<Z<v<
00000005919B 00000045DF9B 0 <)=;=x=
0000000591B9 00000045DFB9 0 >4?E?
0000000591D7 00000045DFD7 0 0-1<1[1
0000000591EB 00000045DFEB 0 7p7{7
0000000591F9 00000045DFF9 0 9P:\:
000000059201 00000045E001 0 :&;2;x;
000000059231 00000045E031 0 0%1y1
000000059239 00000045E039 0 1'2Z2t2
000000059245 00000045E045 0 3T4i4
000000059255 00000045E055 0 5*5I5V5
000000059267 00000045E067 0 6j6~6
00000005926F 00000045E06F 0 6C7]7m7
000000059281 00000045E081 0 8]9i9s9
00000005928F 00000045E08F 0 9;:f:
0000000592C1 00000045E0C1 0 6 6e6
0000000592D1 00000045E0D1 0 :):O:
0000000592DB 00000045E0DB 0 <(<.<3<
0000000592F0 00000045E0F0 0 ?0a1i1
0000000592FB 00000045E0FB 0 3=4C4Q4
00000005931D 00000045E11D 0 9\:s:
000000059367 00000045E167 0 031:1p1
000000059381 00000045E181 0 :-:d:
00000005938D 00000045E18D 0 ;3;j;
0000000593A9 00000045E1A9 0 >2>R>
File pos Mem pos ID Text
======== ======= == ====
0000000593C5 00000045E1C5 0 0 1r1
0000000593D3 00000045E1D3 0 2"3R3
0000000593EB 00000045E1EB 0 4"43484B4S4X4b4q4}4
00000005941D 00000045E21D 0 5)595>5H5[5p5t5~5
000000059443 00000045E243 0 6!62666B6F6R6V6f6p6}6
000000059469 00000045E269 0 7&707=7]7g7q7
0000000594A4 00000045E2A4 0 P2T2X2\2
0000000594AD 00000045E2AD 0 2d2h2l2p2t2x2|2
0000000594ED 00000045E2ED 0 3$3,343<3D3L3T3\3d3l3t3|3
00000005952D 00000045E32D 0 4$4,444<4D4L4T4\4d4l4t4|4
00000005956D 00000045E36D 0 5$5,5<5D5L5T5\5d5l5t5|5
0000000595AB 00000045E3AB 0 6$6,646<6D6L6T6\6d6l6t6|6
0000000595EB 00000045E3EB 0 7$7,747<7D7L7T7\7d7l7t7|7
000000059618 00000045E418 0 80<0@0D0H0L0P0T0X0\0
00000005962D 00000045E42D 0 0d0h0l0p0t0x0|0
00000005967F 00000045E47F 0 1 1$1(1,1014181<1@1D1H1L1P1T1X1\1
0000000596A1 00000045E4A1 0 1d1h1l1p1t1x1|1
0000000596F9 00000045E4F9 0 2 2$2(2,2024282<2@2
000000059725 00000045E525 0 3 3$3(3,3034383<3@3D3H3L3(4,4044484<4@4X4\4
00000005975B 00000045E55B 0 <d?l?t?|?
000000059793 00000045E593 0 0$0,040<0D0L0T0\0d0l0t0|0
0000000597D3 00000045E5D3 0 1$1,141<1D1L1T1\1d1l1t1|1
000000059813 00000045E613 0 2$2,242<2D2L2T2\2d2l2t2|2
000000059853 00000045E653 0 3$3,343<3D3L3T3\3d3l3t3|3
000000059893 00000045E693 0 4$4,444<4D4L4T4\4d4l4t4|4
0000000598D3 00000045E6D3 0 5$5,545<5D5L5T5\5d5l5t5|5
000000059913 00000045E713 0 6$6,646<6D6L6T6\6d6l6t6|6
000000059953 00000045E753 0 7 7(70787@7H7P7X7
000000059965 00000045E765 0 7h7p7x7
000000059993 00000045E793 0 8 8(80888@8H8P8X8
0000000599A5 00000045E7A5 0 8h8p8x8
0000000599D3 00000045E7D3 0 9 9(90989@9H9P9X9
0000000599E5 00000045E7E5 0 9h9p9x9
000000059A13 00000045E813 0 : :(:0:8:@:H:P:X:
000000059A25 00000045E825 0 :h:p:x:
000000059A53 00000045E853 0 ; ;(;0;8;@;H;P;X;
000000059A65 00000045E865 0 ;h;p;x;
000000059A93 00000045E893 0 < <(<0<8<@<H<P<X<
000000059AA5 00000045E8A5 0 <h<p<x<
000000059AD3 00000045E8D3 0 = =(=0=8=@=H=P=X=
000000059AE5 00000045E8E5 0 =h=p=x=
000000059B1D 00000045E91D 0 9$9,949<9D9L9
000000059BAB 00000045E9AB 0 3 3$3(3,3034383<3@3D3H3L3P3T3X3\3
000000059BCD 00000045E9CD 0 3d3h3l3p3t3x3|3
000000059C23 00000045EA23 0 :(:4:@:L:X:d:p:|:
000000059C4D 00000045EA4D 0 ;$;0;<;H;T;
000000059C59 00000045EA59 0 ;l;x;
000000059C77 00000045EA77 0 < <,<8<D<P<\<h<t<
000000059CBB 00000045EABB 0 5 5,585D5P5\5h5t5
000000059CF9 00000045EAF9 0 <$<(<,<4<L<\<
000000059D07 00000045EB07 0 <p<t<x<|<
000000059D2F 00000045EB2F 0 =$=<=L=P=
000000059D39 00000045EB39 0 =d=h=p=
000000059D5B 00000045EB5B 0 >(>8><>L>P>X>p>
000000059D87 00000045EB87 0 ?(?,?<?@?D?L?d?t?x?|?
000000059DC3 00000045EBC3 0 0 0$0(000H0X0\0l0p0x0
000000059DF5 00000045EBF5 0 1$1<1L1P1h1x1|1
000000059E1F 00000045EC1F 0 2 202@2D2H2L2
000000059E2D 00000045EC2D 0 2d2h2l2
000000059E5F 00000045EC5F 0 303@3D3T3d3t3
File pos Mem pos ID Text
======== ======= == ====
000000059E85 00000045EC85 0 4,4<4@4X4\4
000000059E91 00000045EC91 0 4d4x4|4
000000059EB9 00000045ECB9 0 505@5D5
000000059EC1 00000045ECC1 0 6$6,60686L6T6h6p6x6
000000059EF1 00000045ECF1 0 7 7@7L7l7x7
000000059F09 00000045ED09 0 8(8H8T8
000000059F19 00000045ED19 0 9$9(9H9h9
000000059F2D 00000045ED2D 0 :0:P:p:x:|:
000000059F49 00000045ED49 0 ; ;(;T;X;
000000059F53 00000045ED53 0 ;h;p;t;|;
000000059F69 00000045ED69 0 < <@<
000000059F7F 00000045ED7F 0 = =@=
000000059F95 00000045ED95 0 >0>P>p>
000000059FA7 00000045EDA7 0 ?8?@?H?P?d?l?t?|?
000000059FDF 00000045EDDF 0 0 0,040x0
000000059FF5 00000045EDF5 0 0 101<1\1d1l1t1
00000005A011 00000045EE11 0 2$202P2\2|2
00000005A02D 00000045EE2D 0 3<3H3h3p3x3
00000005A051 00000045EE51 0 4$4,444<4D4L4T4\4d4l4t4|4
00000005A08F 00000045EE8F 0 5 5@5L5l5t5|5
00000005A0AD 00000045EEAD 0 6 6(646T6
00000005A0D1 00000045EED1 0 7$7<7D7h7x7
00000005A0ED 00000045EEED 0 8$8,848<8D8L8T8\8h8p8
00000005A11B 00000045EF1B 0 0<0\0|0
00000005A137 00000045EF37 0 4 4$4(4,4044484<4@4D4P4T4X4\4
00000005A155 00000045EF55 0 4d4h4l4
00000005A165 00000045EF65 0 94:<:D:L:T:\:d:l:t:|:
00000005A19F 00000045EF9F 0 ;8;<;@;D;H;L;P;T;X;\;
00000005A1B5 00000045EFB5 0 ;d;h;l;p;t;x;|;
00000005A20F 00000045F00F 0 < <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<
00000005A231 00000045F031 0 <d<h<l<p<t<x<|<
00000005A259 00000045F059 0 =$=0=4=8=<=
00000005A265 00000045F065 0 =d=p=t=x=|=
00000005A28D 00000045F08D 0 3P8|8
00000005A299 00000045F099 0 949P9t9
000000027263 000000428463 0 @mscoree.dll
000000027ADB 000000428CDB 0 Akernel32.dll
000000028BB8 000000429DB8 0 zh-CHS
000000028DB8 000000429FB8 0 ar-SA
000000028DC4 000000429FC4 0 bg-BG
000000028DD0 000000429FD0 0 ca-ES
000000028DDC 000000429FDC 0 zh-TW
000000028DE8 000000429FE8 0 cs-CZ
000000028DF4 000000429FF4 0 da-DK
000000028E00 00000042A000 0 de-DE
000000028E0C 00000042A00C 0 el-GR
000000028E18 00000042A018 0 en-US
000000028E24 00000042A024 0 fi-FI
000000028E30 00000042A030 0 fr-FR
000000028E3C 00000042A03C 0 he-IL
000000028E48 00000042A048 0 hu-HU
000000028E54 00000042A054 0 is-IS
000000028E60 00000042A060 0 it-IT
000000028E6C 00000042A06C 0 ja-JP
000000028E78 00000042A078 0 ko-KR
000000028E84 00000042A084 0 nl-NL
000000028E90 00000042A090 0 nb-NO
000000028E9C 00000042A09C 0 pl-PL
000000028EA8 00000042A0A8 0 pt-BR
000000028EB4 00000042A0B4 0 ro-RO
File pos Mem pos ID Text
======== ======= == ====
000000028EC0 00000042A0C0 0 ru-RU
000000028ECC 00000042A0CC 0 hr-HR
000000028ED8 00000042A0D8 0 sk-SK
000000028EE4 00000042A0E4 0 sq-AL
000000028EF0 00000042A0F0 0 sv-SE
000000028EFC 00000042A0FC 0 th-TH
000000028F08 00000042A108 0 tr-TR
000000028F14 00000042A114 0 ur-PK
000000028F20 00000042A120 0 id-ID
000000028F2C 00000042A12C 0 uk-UA
000000028F38 00000042A138 0 be-BY
000000028F44 00000042A144 0 sl-SI
000000028F50 00000042A150 0 et-EE
000000028F5C 00000042A15C 0 lv-LV
000000028F68 00000042A168 0 lt-LT
000000028F74 00000042A174 0 fa-IR
000000028F80 00000042A180 0 vi-VN
000000028F8C 00000042A18C 0 hy-AM
000000028F98 00000042A198 0 az-AZ-Latn
000000028FB0 00000042A1B0 0 eu-ES
000000028FBC 00000042A1BC 0 mk-MK
000000028FC8 00000042A1C8 0 tn-ZA
000000028FD4 00000042A1D4 0 xh-ZA
000000028FE0 00000042A1E0 0 zu-ZA
000000028FEC 00000042A1EC 0 af-ZA
000000028FF8 00000042A1F8 0 ka-GE
000000029004 00000042A204 0 fo-FO
000000029010 00000042A210 0 hi-IN
00000002901C 00000042A21C 0 mt-MT
000000029028 00000042A228 0 se-NO
000000029034 00000042A234 0 ms-MY
000000029040 00000042A240 0 kk-KZ
00000002904C 00000042A24C 0 ky-KG
000000029058 00000042A258 0 sw-KE
000000029064 00000042A264 0 uz-UZ-Latn
00000002907C 00000042A27C 0 tt-RU
000000029088 00000042A288 0 bn-IN
000000029094 00000042A294 0 pa-IN
0000000290A0 00000042A2A0 0 gu-IN
0000000290AC 00000042A2AC 0 ta-IN
0000000290B8 00000042A2B8 0 te-IN
0000000290C4 00000042A2C4 0 kn-IN
0000000290D0 00000042A2D0 0 ml-IN
0000000290DC 00000042A2DC 0 mr-IN
0000000290E8 00000042A2E8 0 sa-IN
0000000290F4 00000042A2F4 0 mn-MN
000000029100 00000042A300 0 cy-GB
00000002910C 00000042A30C 0 gl-ES
000000029118 00000042A318 0 kok-IN
000000029128 00000042A328 0 syr-SY
000000029138 00000042A338 0 div-MV
000000029148 00000042A348 0 quz-BO
000000029158 00000042A358 0 ns-ZA
000000029164 00000042A364 0 mi-NZ
000000029170 00000042A370 0 ar-IQ
00000002917C 00000042A37C 0 zh-CN
000000029188 00000042A388 0 de-CH
000000029194 00000042A394 0 en-GB
0000000291A0 00000042A3A0 0 es-MX
0000000291AC 00000042A3AC 0 fr-BE
File pos Mem pos ID Text
======== ======= == ====
0000000291B8 00000042A3B8 0 it-CH
0000000291C4 00000042A3C4 0 nl-BE
0000000291D0 00000042A3D0 0 nn-NO
0000000291DC 00000042A3DC 0 pt-PT
0000000291E8 00000042A3E8 0 sr-SP-Latn
000000029200 00000042A400 0 sv-FI
00000002920C 00000042A40C 0 az-AZ-Cyrl
000000029224 00000042A424 0 se-SE
000000029230 00000042A430 0 ms-BN
00000002923C 00000042A43C 0 uz-UZ-Cyrl
000000029254 00000042A454 0 quz-EC
000000029264 00000042A464 0 ar-EG
000000029270 00000042A470 0 zh-HK
00000002927C 00000042A47C 0 de-AT
000000029288 00000042A488 0 en-AU
000000029294 00000042A494 0 es-ES
0000000292A0 00000042A4A0 0 fr-CA
0000000292AC 00000042A4AC 0 sr-SP-Cyrl
0000000292C4 00000042A4C4 0 se-FI
0000000292D0 00000042A4D0 0 quz-PE
0000000292E0 00000042A4E0 0 ar-LY
0000000292EC 00000042A4EC 0 zh-SG
0000000292F8 00000042A4F8 0 de-LU
000000029304 00000042A504 0 en-CA
000000029310 00000042A510 0 es-GT
00000002931C 00000042A51C 0 fr-CH
000000029328 00000042A528 0 hr-BA
000000029334 00000042A534 0 smj-NO
000000029344 00000042A544 0 ar-DZ
000000029350 00000042A550 0 zh-MO
00000002935C 00000042A55C 0 de-LI
000000029368 00000042A568 0 en-NZ
000000029374 00000042A574 0 es-CR
000000029380 00000042A580 0 fr-LU
00000002938C 00000042A58C 0 bs-BA-Latn
0000000293A4 00000042A5A4 0 smj-SE
0000000293B4 00000042A5B4 0 ar-MA
0000000293C0 00000042A5C0 0 en-IE
0000000293CC 00000042A5CC 0 es-PA
0000000293D8 00000042A5D8 0 fr-MC
0000000293E4 00000042A5E4 0 sr-BA-Latn
0000000293FC 00000042A5FC 0 sma-NO
00000002940C 00000042A60C 0 ar-TN
000000029418 00000042A618 0 en-ZA
000000029424 00000042A624 0 es-DO
000000029430 00000042A630 0 sr-BA-Cyrl
000000029448 00000042A648 0 sma-SE
000000029458 00000042A658 0 ar-OM
000000029464 00000042A664 0 en-JM
000000029470 00000042A670 0 es-VE
00000002947C 00000042A67C 0 sms-FI
00000002948C 00000042A68C 0 ar-YE
000000029498 00000042A698 0 en-CB
0000000294A4 00000042A6A4 0 es-CO
0000000294B0 00000042A6B0 0 smn-FI
0000000294C0 00000042A6C0 0 ar-SY
0000000294CC 00000042A6CC 0 en-BZ
0000000294D8 00000042A6D8 0 es-PE
0000000294E4 00000042A6E4 0 ar-JO
0000000294F0 00000042A6F0 0 en-TT
File pos Mem pos ID Text
======== ======= == ====
0000000294FC 00000042A6FC 0 es-AR
000000029508 00000042A708 0 ar-LB
000000029514 00000042A714 0 en-ZW
000000029520 00000042A720 0 es-EC
00000002952C 00000042A72C 0 ar-KW
000000029538 00000042A738 0 en-PH
000000029544 00000042A744 0 es-CL
000000029550 00000042A750 0 ar-AE
00000002955C 00000042A75C 0 es-UY
000000029568 00000042A768 0 ar-BH
000000029574 00000042A774 0 es-PY
000000029580 00000042A780 0 ar-QA
00000002958C 00000042A78C 0 es-BO
000000029598 00000042A798 0 es-SV
0000000295A4 00000042A7A4 0 es-HN
0000000295B0 00000042A7B0 0 es-NI
0000000295BC 00000042A7BC 0 es-PR
0000000295C8 00000042A7C8 0 zh-CHT
0000000295E0 00000042A7E0 0 af-za
0000000295EC 00000042A7EC 0 ar-ae
0000000295F8 00000042A7F8 0 ar-bh
000000029604 00000042A804 0 ar-dz
000000029610 00000042A810 0 ar-eg
00000002961C 00000042A81C 0 ar-iq
000000029628 00000042A828 0 ar-jo
000000029634 00000042A834 0 ar-kw
000000029640 00000042A840 0 ar-lb
00000002964C 00000042A84C 0 ar-ly
000000029658 00000042A858 0 ar-ma
000000029664 00000042A864 0 ar-om
000000029670 00000042A870 0 ar-qa
00000002967C 00000042A87C 0 ar-sa
000000029688 00000042A888 0 ar-sy
000000029694 00000042A894 0 ar-tn
0000000296A0 00000042A8A0 0 ar-ye
0000000296AC 00000042A8AC 0 az-az-cyrl
0000000296C4 00000042A8C4 0 az-az-latn
0000000296DC 00000042A8DC 0 be-by
0000000296E8 00000042A8E8 0 bg-bg
0000000296F4 00000042A8F4 0 bn-in
000000029700 00000042A900 0 bs-ba-latn
000000029718 00000042A918 0 ca-es
000000029724 00000042A924 0 cs-cz
000000029730 00000042A930 0 cy-gb
00000002973C 00000042A93C 0 da-dk
000000029748 00000042A948 0 de-at
000000029754 00000042A954 0 de-ch
000000029760 00000042A960 0 de-de
00000002976C 00000042A96C 0 de-li
000000029778 00000042A978 0 de-lu
000000029784 00000042A984 0 div-mv
000000029794 00000042A994 0 el-gr
0000000297A0 00000042A9A0 0 en-au
0000000297AC 00000042A9AC 0 en-bz
0000000297B8 00000042A9B8 0 en-ca
0000000297C4 00000042A9C4 0 en-cb
0000000297D0 00000042A9D0 0 en-gb
0000000297DC 00000042A9DC 0 en-ie
0000000297E8 00000042A9E8 0 en-jm
0000000297F4 00000042A9F4 0 en-nz
File pos Mem pos ID Text
======== ======= == ====
000000029800 00000042AA00 0 en-ph
00000002980C 00000042AA0C 0 en-tt
000000029818 00000042AA18 0 en-us
000000029824 00000042AA24 0 en-za
000000029830 00000042AA30 0 en-zw
00000002983C 00000042AA3C 0 es-ar
000000029848 00000042AA48 0 es-bo
000000029854 00000042AA54 0 es-cl
000000029860 00000042AA60 0 es-co
00000002986C 00000042AA6C 0 es-cr
000000029878 00000042AA78 0 es-do
000000029884 00000042AA84 0 es-ec
000000029890 00000042AA90 0 es-es
00000002989C 00000042AA9C 0 es-gt
0000000298A8 00000042AAA8 0 es-hn
0000000298B4 00000042AAB4 0 es-mx
0000000298C0 00000042AAC0 0 es-ni
0000000298CC 00000042AACC 0 es-pa
0000000298D8 00000042AAD8 0 es-pe
0000000298E4 00000042AAE4 0 es-pr
0000000298F0 00000042AAF0 0 es-py
0000000298FC 00000042AAFC 0 es-sv
000000029908 00000042AB08 0 es-uy
000000029914 00000042AB14 0 es-ve
000000029920 00000042AB20 0 et-ee
00000002992C 00000042AB2C 0 eu-es
000000029938 00000042AB38 0 fa-ir
000000029944 00000042AB44 0 fi-fi
000000029950 00000042AB50 0 fo-fo
00000002995C 00000042AB5C 0 fr-be
000000029968 00000042AB68 0 fr-ca
000000029974 00000042AB74 0 fr-ch
000000029980 00000042AB80 0 fr-fr
00000002998C 00000042AB8C 0 fr-lu
000000029998 00000042AB98 0 fr-mc
0000000299A4 00000042ABA4 0 gl-es
0000000299B0 00000042ABB0 0 gu-in
0000000299BC 00000042ABBC 0 he-il
0000000299C8 00000042ABC8 0 hi-in
0000000299D4 00000042ABD4 0 hr-ba
0000000299E0 00000042ABE0 0 hr-hr
0000000299EC 00000042ABEC 0 hu-hu
0000000299F8 00000042ABF8 0 hy-am
000000029A04 00000042AC04 0 id-id
000000029A10 00000042AC10 0 is-is
000000029A1C 00000042AC1C 0 it-ch
000000029A28 00000042AC28 0 it-it
000000029A34 00000042AC34 0 ja-jp
000000029A40 00000042AC40 0 ka-ge
000000029A4C 00000042AC4C 0 kk-kz
000000029A58 00000042AC58 0 kn-in
000000029A64 00000042AC64 0 kok-in
000000029A74 00000042AC74 0 ko-kr
000000029A80 00000042AC80 0 ky-kg
000000029A8C 00000042AC8C 0 lt-lt
000000029A98 00000042AC98 0 lv-lv
000000029AA4 00000042ACA4 0 mi-nz
000000029AB0 00000042ACB0 0 mk-mk
000000029ABC 00000042ACBC 0 ml-in
000000029AC8 00000042ACC8 0 mn-mn
File pos Mem pos ID Text
======== ======= == ====
000000029AD4 00000042ACD4 0 mr-in
000000029AE0 00000042ACE0 0 ms-bn
000000029AEC 00000042ACEC 0 ms-my
000000029AF8 00000042ACF8 0 mt-mt
000000029B04 00000042AD04 0 nb-no
000000029B10 00000042AD10 0 nl-be
000000029B1C 00000042AD1C 0 nl-nl
000000029B28 00000042AD28 0 nn-no
000000029B34 00000042AD34 0 ns-za
000000029B40 00000042AD40 0 pa-in
000000029B4C 00000042AD4C 0 pl-pl
000000029B58 00000042AD58 0 pt-br
000000029B64 00000042AD64 0 pt-pt
000000029B70 00000042AD70 0 quz-bo
000000029B80 00000042AD80 0 quz-ec
000000029B90 00000042AD90 0 quz-pe
000000029BA0 00000042ADA0 0 ro-ro
000000029BAC 00000042ADAC 0 ru-ru
000000029BB8 00000042ADB8 0 sa-in
000000029BC4 00000042ADC4 0 se-fi
000000029BD0 00000042ADD0 0 se-no
000000029BDC 00000042ADDC 0 se-se
000000029BE8 00000042ADE8 0 sk-sk
000000029BF4 00000042ADF4 0 sl-si
000000029C00 00000042AE00 0 sma-no
000000029C10 00000042AE10 0 sma-se
000000029C20 00000042AE20 0 smj-no
000000029C30 00000042AE30 0 smj-se
000000029C40 00000042AE40 0 smn-fi
000000029C50 00000042AE50 0 sms-fi
000000029C60 00000042AE60 0 sq-al
000000029C6C 00000042AE6C 0 sr-ba-cyrl
000000029C84 00000042AE84 0 sr-ba-latn
000000029C9C 00000042AE9C 0 sr-sp-cyrl
000000029CB4 00000042AEB4 0 sr-sp-latn
000000029CCC 00000042AECC 0 sv-fi
000000029CD8 00000042AED8 0 sv-se
000000029CE4 00000042AEE4 0 sw-ke
000000029CF0 00000042AEF0 0 syr-sy
000000029D00 00000042AF00 0 ta-in
000000029D0C 00000042AF0C 0 te-in
000000029D18 00000042AF18 0 th-th
000000029D24 00000042AF24 0 tn-za
000000029D30 00000042AF30 0 tr-tr
000000029D3C 00000042AF3C 0 tt-ru
000000029D48 00000042AF48 0 uk-ua
000000029D54 00000042AF54 0 ur-pk
000000029D60 00000042AF60 0 uz-uz-cyrl
000000029D78 00000042AF78 0 uz-uz-latn
000000029D90 00000042AF90 0 vi-vn
000000029D9C 00000042AF9C 0 xh-za
000000029DA8 00000042AFA8 0 zh-chs
000000029DB8 00000042AFB8 0 zh-cht
000000029DC8 00000042AFC8 0 zh-cn
000000029DD4 00000042AFD4 0 zh-hk
000000029DE0 00000042AFE0 0 zh-mo
000000029DEC 00000042AFEC 0 zh-sg
000000029DF8 00000042AFF8 0 zh-tw
000000029E04 00000042B004 0 zu-za
00000002A678 00000042B878 0 runtime error
File pos Mem pos ID Text
======== ======= == ====
00000002A7CC 00000042B9CC 0 Program:
00000002A7E0 00000042B9E0 0 <program name unknown>
00000002A820 00000042BA20 0 Microsoft Visual C++ Runtime Library
00000002AB3C 00000042BD3C 0 Sunday
00000002AB4C 00000042BD4C 0 Monday
00000002AB5C 00000042BD5C 0 Tuesday
00000002AB6C 00000042BD6C 0 Wednesday
00000002AB80 00000042BD80 0 Thursday
00000002AB94 00000042BD94 0 Friday
00000002ABA4 00000042BDA4 0 Saturday
00000002AC18 00000042BE18 0 January
00000002AC28 00000042BE28 0 February
00000002AC3C 00000042BE3C 0 March
00000002AC48 00000042BE48 0 April
00000002AC6C 00000042BE6C 0 August
00000002AC7C 00000042BE7C 0 September
00000002AC90 00000042BE90 0 October
00000002ACA0 00000042BEA0 0 November
00000002ACB4 00000042BEB4 0 December
00000002ACD8 00000042BED8 0 MM/dd/yy
00000002ACEC 00000042BEEC 0 dddd, MMMM dd, yyyy
00000002AD14 00000042BF14 0 HH:mm:ss
00000002AD30 00000042BF30 0 (null)
00000002AE17 00000042C017 0 ALC_ALL
00000002AE28 00000042C028 0 LC_COLLATE
00000002AE40 00000042C040 0 LC_CTYPE
00000002AE54 00000042C054 0 LC_MONETARY
00000002AE6C 00000042C06C 0 LC_NUMERIC
00000002AE84 00000042C084 0 LC_TIME
00000002B004 00000042C204 0 USER32.DLL
00000002BB1C 00000042CD1C 0 american
00000002BB30 00000042CD30 0 american english
00000002BB54 00000042CD54 0 american-english
00000002BB78 00000042CD78 0 australian
00000002BB90 00000042CD90 0 belgian
00000002BBA0 00000042CDA0 0 canadian
00000002BBC4 00000042CDC4 0 chinese
00000002BBD4 00000042CDD4 0 chinese-hongkong
00000002BBF8 00000042CDF8 0 chinese-simplified
00000002BC20 00000042CE20 0 chinese-singapore
00000002BC44 00000042CE44 0 chinese-traditional
00000002BC6C 00000042CE6C 0 dutch-belgian
00000002BC88 00000042CE88 0 english-american
00000002BCAC 00000042CEAC 0 english-aus
00000002BCC4 00000042CEC4 0 english-belize
00000002BCE4 00000042CEE4 0 english-can
00000002BCFC 00000042CEFC 0 english-caribbean
00000002BD20 00000042CF20 0 english-ire
00000002BD38 00000042CF38 0 english-jamaica
00000002BD58 00000042CF58 0 english-nz
00000002BD70 00000042CF70 0 english-south africa
00000002BD9C 00000042CF9C 0 english-trinidad y tobago
00000002BDD0 00000042CFD0 0 english-uk
00000002BDE8 00000042CFE8 0 english-us
00000002BE00 00000042D000 0 english-usa
00000002BE18 00000042D018 0 french-belgian
00000002BE38 00000042D038 0 french-canadian
00000002BE58 00000042D058 0 french-luxembourg
00000002BE7C 00000042D07C 0 french-swiss
00000002BE98 00000042D098 0 german-austrian
File pos Mem pos ID Text
======== ======= == ====
00000002BEB8 00000042D0B8 0 german-lichtenstein
00000002BEE0 00000042D0E0 0 german-luxembourg
00000002BF04 00000042D104 0 german-swiss
00000002BF20 00000042D120 0 irish-english
00000002BF3C 00000042D13C 0 italian-swiss
00000002BF58 00000042D158 0 norwegian
00000002BF6C 00000042D16C 0 norwegian-bokmal
00000002BF90 00000042D190 0 norwegian-nynorsk
00000002BFB4 00000042D1B4 0 portuguese-brazilian
00000002BFE0 00000042D1E0 0 spanish-argentina
00000002C004 00000042D204 0 spanish-bolivia
00000002C024 00000042D224 0 spanish-chile
00000002C040 00000042D240 0 spanish-colombia
00000002C064 00000042D264 0 spanish-costa rica
00000002C08C 00000042D28C 0 spanish-dominican republic
00000002C0C4 00000042D2C4 0 spanish-ecuador
00000002C0E4 00000042D2E4 0 spanish-el salvador
00000002C10C 00000042D30C 0 spanish-guatemala
00000002C130 00000042D330 0 spanish-honduras
00000002C154 00000042D354 0 spanish-mexican
00000002C174 00000042D374 0 spanish-modern
00000002C194 00000042D394 0 spanish-nicaragua
00000002C1B8 00000042D3B8 0 spanish-panama
00000002C1D8 00000042D3D8 0 spanish-paraguay
00000002C1FC 00000042D3FC 0 spanish-peru
00000002C218 00000042D418 0 spanish-puerto rico
00000002C240 00000042D440 0 spanish-uruguay
00000002C260 00000042D460 0 spanish-venezuela
00000002C284 00000042D484 0 swedish-finland
00000002C2A4 00000042D4A4 0 swiss
00000002C3D4 00000042D5D4 0 america
00000002C3E4 00000042D5E4 0 britain
00000002C3F4 00000042D5F4 0 china
00000002C400 00000042D600 0 czech
00000002C40C 00000042D60C 0 england
00000002C41C 00000042D61C 0 great britain
00000002C438 00000042D638 0 holland
00000002C448 00000042D648 0 hong-kong
00000002C45C 00000042D65C 0 new-zealand
00000002C47C 00000042D67C 0 pr china
00000002C490 00000042D690 0 pr-china
00000002C4A4 00000042D6A4 0 puerto-rico
00000002C4BC 00000042D6BC 0 slovak
00000002C4CC 00000042D6CC 0 south africa
00000002C4E8 00000042D6E8 0 south korea
00000002C500 00000042D700 0 south-africa
00000002C51C 00000042D71C 0 south-korea
00000002C534 00000042D734 0 trinidad & tobago
00000002C558 00000042D758 0 united-kingdom
00000002C578 00000042D778 0 united-states
00000002C5CB 00000042D7CB 0 2CONOUT$
00000002C71B 00000042D91B 0 X.DEFAULT\XFS\LOGICAL_SERVICES
00000002C8E0 00000042DAE0 0 dMain
00000002D7A0 00000042E9A0 0 dispenserprogm
00000002D883 00000042EA83 0 NTahoma
00000002D894 00000042EA94 0 dDispW
00000002D8A4 00000042EAA4 0 Dispenser
00000002D8F8 00000042EAF8 0 not out of order
00000002D91C 00000042EB1C 0 Arial Black
000000050F97 000000452B97 0 }Sysinternals License
File pos Mem pos ID Text
======== ======= == ====
000000050FC4 000000452BC4 0 %s License Agreement
000000050FF0 000000452BF0 0 RICHEDIT
000000051004 000000452C04 0 &Print
000000051014 000000452C14 0 &Decline
000000051028 000000452C28 0 &Agree
000000051038 000000452C38 0 You can also use the /accepteula command-line switch to accept the EULA.
0000000510CC 000000452CCC 0 MS Shell Dlg
0000000510E8 000000452CE8 0 License Agreement
00000005110C 000000452D0C 0 Riched32.dll
000000051128 000000452D28 0 EulaAccepted
000000051144 000000452D44 0 Software\Sysinternals\%s
000000051178 000000452D78 0 -accepteula
000000051190 000000452D90 0 /accepteula
0000000511A8 000000452DA8 0 Shell32.dll
000000051272 000000452E72 0 Error deleting %s:
00000005129E 000000452E9E 0 Error overwriting %s:
0000000512CE 000000452ECE 0 Error opening %s for delete:
000000051322 000000452F22 0 Error opening %s for compressed file scan:
00000005137C 000000452F7C 0 %s...
000000051394 000000452F94 0 %s\%s
0000000513A0 000000452FA0 0 %s\*.*
00000005144E 00000045304E 0 Cleaning MFT...%c
00000005147A 00000045307A 0
0000000514F4 0000004530F4 0 %sSDELMFT%06d
000000051510 000000453110 0 %s\SDELMFT%06d
000000051530 000000453130 0 %sSDELTEMP1
000000051548 000000453148 0 %s\SDELTEMP1
00000005156A 00000045316A 0 Cleaning free space on %s: %d%%
0000000515B2 0000004531B2 0 Cleaning free space to securely delete compressed files: %d%%
000000051630 000000453230 0 Could not create free-space cleanup file:
000000051688 000000453288 0 %sSDELTEMP
000000051730 000000453330 0 Could not determine amount of free space:
000000051788 000000453388 0 %s\SDELTEMP
0000000517A0 0000004533A0 0 %TEMP%
0000000517B0 0000004533B0 0 kernel32.dll
0000000517DF 0000004533DF 0 WCould not determine disk cluster size:
000000051830 000000453430 0 Zeroing free space on %s: 0%%
000000051870 000000453470 0 Zeroing free space to securely delete compressed files: 0%%
000000051938 000000453538 0 |/-\|/-\
000000051A5C 00000045365C 0 ntdll.dll
000000051EE4 000000453AE4 0 Kernel32.dll
000000051F20 000000453B20 0 SDelete
00000005203C 000000453C3C 0 mscoree.dll
000000052754 000000454354 0 KERNEL32.DLL
0000000527AC 0000004543AC 0 (null)
000000054EEC 000000456AEC 0 \\.\A:
000000055ED6 000000457AD6 0 VS_VERSION_INFO
000000055F32 000000457B32 0 StringFileInfo
000000055F56 000000457B56 0 040904b0
000000055F6E 000000457B6E 0 CompanyName
000000055F88 000000457B88 0 Sysinternals
000000055FAA 000000457BAA 0 FileDescription
000000055FCC 000000457BCC 0 sdelete
000000055FE2 000000457BE2 0 FileVersion
00000005600E 000000457C0E 0 InternalName
000000056028 000000457C28 0 sdelete
00000005603E 000000457C3E 0 LegalCopyright
000000056072 000000457C72 0 1999-2012 Mark Russinovich
0000000560B2 000000457CB2 0 OriginalFilename
0000000560D4 000000457CD4 0 sdelete.exe
File pos Mem pos ID Text
======== ======= == ====
0000000560F2 000000457CF2 0 ProductName
00000005610C 000000457D0C 0 Sysinternals Sdelete
00000005613E 000000457D3E 0 ProductVersion
00000005616E 000000457D6E 0 VarFileInfo
00000005618E 000000457D8E 0 Translation
00000000004D 00000040004D 0 !This program cannot be run in DOS mode.
0000000001E8 0000004001E8 0 .text
000000000210 000000400210 0 .rdata
000000000237 000000400237 0 @.data
000000000260 000000400260 0 .rsrc
000000000287 000000400287 0 @.reloc
000000002281 000000402E81 0 sC+1W
000000002720 000000403320 0 PQSVW
000000003133 000000403D33 0 D$DPh
0000000059FF 0000004065FF 0 D$@SVW
000000005B4F 00000040674F 0 CD$<P
000000005B59 000000406759 0 D$$RP
000000005C0A 00000040680A 0 D$ j@P
000000005C8A 00000040688A 0 D$ j@P
000000005D0D 00000040690D 0 D$$j@P
000000005D8D 00000040698D 0 D$$j@P
000000005FB7 000000406BB7 0 D$8jlP
0000000061E8 000000406DE8 0 D$8jlP
000000006489 000000407089 0 D$DPS
000000006532 000000407132 0 CD$@P
0000000065AC 0000004071AC 0 D$ ;D$(u
000000006612 000000407212 0 CD$@VW
0000000066E1 0000004072E1 0 CD$\P
000000006708 000000407308 0 CD$DP
000000006755 000000407355 0 CD$DP
00000000678D 00000040738D 0 CD$@+
00000000679F 00000040739F 0 D$$RPW
0000000067C6 0000004073C6 0 \$\QSW
0000000068EF 0000004074EF 0 D$HSVW
000000006B0E 00000040770E 0 CL$DQ
000000006B38 000000407738 0 CD$,P
000000006B85 000000407785 0 CD$,P
000000006BBD 0000004077BD 0 CD$(+
000000006BCF 0000004077CF 0 D$$RPS
000000006BF6 0000004077F6 0 t$HQVS
000000009343 000000409F43 0 QSVWj
0000000094F3 00000040A0F3 0 QSVWj
00000000AE37 00000040BA37 0 9x$u#9H
00000000B18B 00000040BD8B 0 +G$A+
00000000BC6C 00000040C86C 0 wqtfH
00000000BE5E 00000040CA5E 0 ujPPPP
00000000C808 00000040D408 0 D$ PS
00000000C824 00000040D424 0 D$ PS
00000000C89A 00000040D49A 0 D$ PS
00000000D68A 00000040E28A 0 HHuh@
00000000DB4F 00000040E74F 0 s(Rj
00000000FB35 000000410735 0 uPVWh
00000000FD86 000000410986 0 PPPPPPPP
000000010AC2 0000004116C2 0 QQSVWd
000000010D7F 00000041197F 0 PRAQh
000000011298 000000411E98 0 SSSSS
00000001131E 000000411F1E 0 PWSWW
00000001133D 000000411F3D 0 WWWWW
000000011396 000000411F96 0 PPPPP
000000012CD9 0000004138D9 0 ft!9q
File pos Mem pos ID Text
======== ======= == ====
000000012E3D 000000413A3D 0 PPPPP
000000012FF0 000000413BF0 0 PP9E u
00000001526F 000000415E6F 0 PPPPP
0000000153DB 000000415FDB 0 jA[jZZ+
000000015530 000000416130 0 Genuu_
000000015539 000000416139 0 ineIuV
000000015542 000000416142 0 nteluM3
0000000159D2 0000004165D2 0 SSSSS
000000015BA9 0000004167A9 0 VVVVV
000000015DCA 0000004169CA 0 PPPPP
00000001613D 000000416D3D 0 ~pjCXf
000000016A8D 00000041768D 0 tf= $C
0000000170FD 000000417CFD 0 <at-<rt"<wt
00000001716D 000000417D6D 0 tRHtC
0000000171F1 000000417DF1 0 t;Ht+
00000001735F 000000417F5F 0 URPQQh
000000018BDA 0000004197DA 0 j@j _W
000000018C9A 00000041989A 0 } j@W
00000001903D 000000419C3D 0 < t8< t4
000000019117 000000419D17 0 t@VSP
000000019172 000000419D72 0 PPPPP
00000001928F 000000419E8F 0 SPPP+
000000019298 000000419E98 0 FVWPP
0000000192BE 000000419EBE 0 SVWPP
0000000193C5 000000419FC5 0 9E WW
000000019620 00000041A220 0 PPPPP
00000001968E 00000041A28E 0 VVVVV
0000000196C6 00000041A2C6 0 j.Yf;
00000001972F 00000041A32F 0 j.Yf;
000000019735 00000041A335 0 tyPVj@W
00000001974A 00000041A34A 0 _tcPVj@
00000001976B 00000041A36B 0 uCPVj
000000019782 00000041A382 0 u#j,Xf;
0000000197A9 00000041A3A9 0 PPPPP
0000000197B8 00000041A3B8 0 SSSSS
000000019887 00000041A487 0 >Cu/f9F
000000019A64 00000041A664 0 SSSSS
000000019ABB 00000041A6BB 0 @PSjU
000000019AD9 00000041A6D9 0 PPPPP
000000019B18 00000041A718 0 SSSSS
000000019E09 00000041AA09 0 QQQQQ
000000019EC5 00000041AAC5 0 j;Yf9
000000019F3F 00000041AB3F 0 j;Yf9
00000001A090 00000041AC90 0 PPPPP
00000001A428 00000041B028 0 VVVVV
00000001A4C0 00000041B0C0 0 WVSj
00000001A762 00000041B362 0 RVSQSWV
00000001A79D 00000041B39D 0 RVSQj
00000001A8A6 00000041B4A6 0 QVVVj
00000001B4F3 00000041C0F3 0 ,SVWj0X
00000001B627 00000041C227 0 u'j0X
00000001B751 00000041C351 0 Wj0XPV
00000001B7F0 00000041C3F0 0 PjdSQ
00000001B957 00000041C557 0 -jd[;
00000001B9AA 00000041C5AA 0 WWWWW
00000001BEEF 00000041CAEF 0 VVVVV
00000001C33D 00000041CF3D 0 SVWjA_jZ+
00000001C3E5 00000041CFE5 0 uBjAYjZ+
00000001C6F9 00000041D2F9 0 tO95,
00000001C8E2 00000041D4E2 0 t VV9u
File pos Mem pos ID Text
======== ======= == ====
00000001CB71 00000041D771 0 PjPW
00000001CB88 00000041D788 0 $PjQW
00000001CBD0 00000041D7D0 0 *PjTW
00000001CBE7 00000041D7E7 0 +PjUW
00000001CBFE 00000041D7FE 0 ,PjVW
00000001CC18 00000041D818 0 -PjWW
00000001CC2F 00000041D82F 0 .PjRW
00000001CC46 00000041D846 0 /PjSW
00000001CCBC 00000041D8BC 0 HPjPW
00000001CCD6 00000041D8D6 0 LPjQW
00000001CFAD 00000041DBAD 0 <0|o<9
00000001D523 00000041E123 0 G Pj*S
00000001D537 00000041E137 0 G$Pj+S
00000001D54B 00000041E14B 0 G(Pj,S
00000001D55F 00000041E15F 0 G,Pj-S
00000001D576 00000041E176 0 G0Pj.S
00000001D58A 00000041E18A 0 G4Pj/S
00000001D5B2 00000041E1B2 0 G8PjDS
00000001D5C9 00000041E1C9 0 G<PjES
00000001D5DD 00000041E1DD 0 G@PjFS
00000001D5F1 00000041E1F1 0 GDPjGS
00000001D605 00000041E205 0 GHPjHS
00000001D61C 00000041E21C 0 GLPjIS
00000001D630 00000041E230 0 GPPjJS
00000001D644 00000041E244 0 GTPjKS
00000001D658 00000041E258 0 GXPjLS
00000001D66F 00000041E26F 0 G\PjMS
00000001D697 00000041E297 0 GdPjOS
00000001D6AB 00000041E2AB 0 GhPj8S
00000001D6C2 00000041E2C2 0 GlPj9S
00000001D6D6 00000041E2D6 0 GpPj:S
00000001D6EA 00000041E2EA 0 GtPj;S
00000001D6FE 00000041E2FE 0 GxPj<S
00000001D715 00000041E315 0 G|Pj=S
00000001D75C 00000041E35C 0 Pj@Sj
00000001DAA2 00000041E6A2 0 PjOSj
00000001E0B3 00000041ECB3 0 HHtVHHt
00000001E5AA 00000041F1AA 0 >0t-N
00000001E9D2 00000041F5D2 0 QVWSj
00000001EABB 00000041F6BB 0 v N+D$
00000001EE38 00000041FA38 0 r)f;q
00000001EEB2 00000041FAB2 0 r2f;A
00000001EF23 00000041FB23 0 SVWUj
00000001EFC4 00000041FBC4 0 ;t$,v-
00000001F049 00000041FC49 0 UQPXY]Y[
00000001F491 000000420091 0 ~';_t|%3
00000001F4A5 0000004200A5 0 wtVj
00000001F4BA 0000004200BA 0 ;_tr.
00000001F715 000000420315 0 PPPPP
00000001FA23 000000420623 0 WWWWW
00000001FAD4 0000004206D4 0 PPPPP
00000001FC27 000000420827 0 Yu2Vj@h
00000001FD1D 00000042091D 0 tMj_S
00000001FD75 000000420975 0 PPPPP
0000000210D1 000000421CD1 0 SSSSV
00000002115D 000000421D5D 0 SSSSV
000000021306 000000421F06 0 PPPPP
0000000213C6 000000421FC6 0 v N+D$
000000021506 000000422106 0 Ht+Ht$Ht
000000021788 000000422388 0 tHHt*Ht#
File pos Mem pos ID Text
======== ======= == ====
000000021CA8 0000004228A8 0 uJSSR
000000021E60 000000422A60 0 SSSSS
00000002225A 000000422E5A 0 SVjA[jZ
00000002231F 000000422F1F 0 jAZjZ
000000023124 000000423D24 0 +t"HHt
00000002317A 000000423D7A 0 9] t"
000000023FD6 000000424BD6 0 SSSSS
0000000247C8 0000004253C8 0 jxYf;
0000000247D0 0000004253D0 0 jXYf;
0000000247FA 0000004253FA 0 jxYf;
000000024802 000000425402 0 jXYf;
00000002482B 00000042542B 0 uHjAXf;
000000024B0E 00000042570E 0 j0Yf;
0000000265B0 0000004277B0 0 permission denied
0000000265C4 0000004277C4 0 file exists
0000000265D0 0000004277D0 0 no such device
0000000265E0 0000004277E0 0 filename too long
0000000265F4 0000004277F4 0 device or resource busy
00000002660C 00000042780C 0 io error
000000026618 000000427818 0 directory not empty
00000002662C 00000042782C 0 invalid argument
000000026640 000000427840 0 no space on device
000000026654 000000427854 0 no such file or directory
000000026670 000000427870 0 function not supported
000000026688 000000427888 0 no lock available
00000002669C 00000042789C 0 not enough memory
0000000266B0 0000004278B0 0 resource unavailable try again
0000000266D0 0000004278D0 0 cross device link
0000000266E4 0000004278E4 0 operation canceled
0000000266F8 0000004278F8 0 too many files open
00000002670C 00000042790C 0 permission_denied
000000026720 000000427920 0 address_in_use
000000026730 000000427930 0 address_not_available
000000026748 000000427948 0 address_family_not_supported
000000026768 000000427968 0 connection_already_in_progress
000000026788 000000427988 0 bad_file_descriptor
00000002679C 00000042799C 0 connection_aborted
0000000267B0 0000004279B0 0 connection_refused
0000000267C4 0000004279C4 0 connection_reset
0000000267D8 0000004279D8 0 destination_address_required
0000000267F8 0000004279F8 0 bad_address
000000026804 000000427A04 0 host_unreachable
000000026818 000000427A18 0 operation_in_progress
000000026830 000000427A30 0 interrupted
00000002683C 000000427A3C 0 invalid_argument
000000026850 000000427A50 0 already_connected
000000026864 000000427A64 0 too_many_files_open
000000026878 000000427A78 0 message_size
000000026888 000000427A88 0 filename_too_long
00000002689C 000000427A9C 0 network_down
0000000268AC 000000427AAC 0 network_reset
0000000268BC 000000427ABC 0 network_unreachable
0000000268D0 000000427AD0 0 no_buffer_space
0000000268E0 000000427AE0 0 no_protocol_option
0000000268F4 000000427AF4 0 not_connected
000000026904 000000427B04 0 not_a_socket
000000026914 000000427B14 0 operation_not_supported
00000002692C 000000427B2C 0 protocol_not_supported
000000026944 000000427B44 0 wrong_protocol_type
000000026958 000000427B58 0 timed_out
File pos Mem pos ID Text
======== ======= == ====
000000026964 000000427B64 0 operation_would_block
00000002697C 000000427B7C 0 address family not supported
00000002699C 000000427B9C 0 address in use
0000000269AC 000000427BAC 0 address not available
0000000269C4 000000427BC4 0 already connected
0000000269D8 000000427BD8 0 argument list too long
0000000269F0 000000427BF0 0 argument out of domain
000000026A08 000000427C08 0 bad address
000000026A14 000000427C14 0 bad file descriptor
000000026A28 000000427C28 0 bad message
000000026A34 000000427C34 0 broken pipe
000000026A40 000000427C40 0 connection aborted
000000026A54 000000427C54 0 connection already in progress
000000026A74 000000427C74 0 connection refused
000000026A88 000000427C88 0 connection reset
000000026A9C 000000427C9C 0 destination address required
000000026ABC 000000427CBC 0 executable format error
000000026AD4 000000427CD4 0 file too large
000000026AE4 000000427CE4 0 host unreachable
000000026AF8 000000427CF8 0 identifier removed
000000026B0C 000000427D0C 0 illegal byte sequence
000000026B24 000000427D24 0 inappropriate io control operation
000000026B48 000000427D48 0 invalid seek
000000026B58 000000427D58 0 is a directory
000000026B68 000000427D68 0 message size
000000026B78 000000427D78 0 network down
000000026B88 000000427D88 0 network reset
000000026B98 000000427D98 0 network unreachable
000000026BAC 000000427DAC 0 no buffer space
000000026BBC 000000427DBC 0 no child process
000000026BD0 000000427DD0 0 no link
000000026BD8 000000427DD8 0 no message available
000000026BF0 000000427DF0 0 no message
000000026BFC 000000427DFC 0 no protocol option
000000026C10 000000427E10 0 no stream resources
000000026C24 000000427E24 0 no such device or address
000000026C40 000000427E40 0 no such process
000000026C50 000000427E50 0 not a directory
000000026C60 000000427E60 0 not a socket
000000026C70 000000427E70 0 not a stream
000000026C80 000000427E80 0 not connected
000000026C90 000000427E90 0 not supported
000000026CA0 000000427EA0 0 operation in progress
000000026CB8 000000427EB8 0 operation not permitted
000000026CD0 000000427ED0 0 operation not supported
000000026CE8 000000427EE8 0 operation would block
000000026D00 000000427F00 0 owner dead
000000026D0C 000000427F0C 0 protocol error
000000026D1C 000000427F1C 0 protocol not supported
000000026D34 000000427F34 0 read only file system
000000026D4C 000000427F4C 0 resource deadlock would occur
000000026D6C 000000427F6C 0 result out of range
000000026D80 000000427F80 0 state not recoverable
000000026D98 000000427F98 0 stream timeout
000000026DA8 000000427FA8 0 text file busy
000000026DB8 000000427FB8 0 timed out
000000026DC4 000000427FC4 0 too many files open in system
000000026DE4 000000427FE4 0 too many links
000000026DF4 000000427FF4 0 too many symbolic link levels
000000026E14 000000428014 0 value too large
File pos Mem pos ID Text
======== ======= == ====
000000026E24 000000428024 0 wrong protocol type
000000026EB4 0000004280B4 0 bad allocation
000000027044 000000428244 0 0123456789abcdefghijklmnopqrstuvwxyz
000000027094 000000428294 0 0123456789abcdefghijklmnopqrstuvwxyz
0000000270C8 0000004282C8 0
000000027158 000000428358 0 0123456789abcdefABCDEF
000000027244 000000428444 0 Unknown exception
00000002727C 00000042847C 0 CorExitProcess
0000000272BC 0000004284BC 0 bad exception
000000027878 000000428A78 0 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]
0000000278B9 000000428AB9 0 abcdefghijklmnopqrstuvwxyz{|}~
0000000279F8 000000428BF8 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]
000000027A39 000000428C39 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
000000027AF8 000000428CF8 0 FlsAlloc
000000027B04 000000428D04 0 FlsFree
000000027B0C 000000428D0C 0 FlsGetValue
000000027B18 000000428D18 0 FlsSetValue
000000027B24 000000428D24 0 InitializeCriticalSectionEx
000000027B40 000000428D40 0 CreateSemaphoreExW
000000027B54 000000428D54 0 SetThreadStackGuarantee
000000027B6C 000000428D6C 0 CreateThreadpoolTimer
000000027B84 000000428D84 0 SetThreadpoolTimer
000000027B98 000000428D98 0 WaitForThreadpoolTimerCallbacks
000000027BB8 000000428DB8 0 CloseThreadpoolTimer
000000027BD0 000000428DD0 0 CreateThreadpoolWait
000000027BE8 000000428DE8 0 SetThreadpoolWait
000000027BFC 000000428DFC 0 CloseThreadpoolWait
000000027C10 000000428E10 0 FlushProcessWriteBuffers
000000027C2C 000000428E2C 0 FreeLibraryWhenCallbackReturns
000000027C4C 000000428E4C 0 GetCurrentProcessorNumber
000000027C68 000000428E68 0 GetLogicalProcessorInformation
000000027C88 000000428E88 0 CreateSymbolicLinkW
000000027C9C 000000428E9C 0 SetDefaultDllDirectories
000000027CB8 000000428EB8 0 EnumSystemLocalesEx
000000027CCC 000000428ECC 0 CompareStringEx
000000027CDC 000000428EDC 0 GetDateFormatEx
000000027CEC 000000428EEC 0 GetLocaleInfoEx
000000027CFC 000000428EFC 0 GetTimeFormatEx
000000027D0C 000000428F0C 0 GetUserDefaultLocaleName
000000027D28 000000428F28 0 IsValidLocaleName
000000027D3C 000000428F3C 0 LCMapStringEx
000000027D4C 000000428F4C 0 GetCurrentPackageId
00000002A91C 00000042BB1C 0 log10
00000002A954 00000042BB54 0 atan2
00000002A978 00000042BB78 0 floor
00000002A990 00000042BB90 0 ldexp
00000002A998 00000042BB98 0 _cabs
00000002A9A0 00000042BBA0 0 _hypot
00000002A9B0 00000042BBB0 0 frexp
00000002A9C4 00000042BBC4 0 _logb
00000002A9CC 00000042BBCC 0 _nextafter
00000002A9F4 00000042BBF4 0 Sunday
00000002A9FC 00000042BBFC 0 Monday
00000002AA04 00000042BC04 0 Tuesday
00000002AA0C 00000042BC0C 0 Wednesday
00000002AA18 00000042BC18 0 Thursday
00000002AA24 00000042BC24 0 Friday
00000002AA2C 00000042BC2C 0 Saturday
00000002AA68 00000042BC68 0 January
00000002AA70 00000042BC70 0 February
File pos Mem pos ID Text
======== ======= == ====
00000002AA7C 00000042BC7C 0 March
00000002AA84 00000042BC84 0 April
00000002AA9C 00000042BC9C 0 August
00000002AAA4 00000042BCA4 0 September
00000002AAB0 00000042BCB0 0 October
00000002AAB8 00000042BCB8 0 November
00000002AAC4 00000042BCC4 0 December
00000002AAD8 00000042BCD8 0 MM/dd/yy
00000002AAE4 00000042BCE4 0 dddd, MMMM dd, yyyy
00000002AAF8 00000042BCF8 0 HH:mm:ss
00000002AD28 00000042BF28 0 (null)
00000002AD61 00000042BF61 0 ( 8PX
00000002AD69 00000042BF69 0 700WP
00000002AD81 00000042BF81 0 xpxxxx
00000002ADA0 00000042BFA0 0 UTF-8
00000002ADA8 00000042BFA8 0 UTF-16LE
00000002ADB4 00000042BFB4 0 UNICODE
00000002AEB7 00000042C0B7 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]
00000002AEF8 00000042C0F8 0 abcdefghijklmnopqrstuvwxyz{|}~
00000002AF3C 00000042C13C 0 e+000
00000002AFC4 00000042C1C4 0 SunMonTueWedThuFriSat
00000002AFDC 00000042C1DC 0 JanFebMarAprMayJunJulAugSepOctNovDec
00000002B01C 00000042C21C 0 MessageBoxW
00000002B028 00000042C228 0 GetActiveWindow
00000002B038 00000042C238 0 GetLastActivePopup
00000002B04C 00000042C24C 0 GetUserObjectInformationW
00000002B068 00000042C268 0 GetProcessWindowStation
00000002B208 00000042C408 0 __based(
00000002B214 00000042C414 0 __cdecl
00000002B21C 00000042C41C 0 __pascal
00000002B228 00000042C428 0 __stdcall
00000002B234 00000042C434 0 __thiscall
00000002B240 00000042C440 0 __fastcall
00000002B24C 00000042C44C 0 __clrcall
00000002B258 00000042C458 0 __eabi
00000002B260 00000042C460 0 __ptr64
00000002B268 00000042C468 0 __restrict
00000002B274 00000042C474 0 __unaligned
00000002B280 00000042C480 0 restrict(
00000002B294 00000042C494 0 delete
00000002B2B8 00000042C4B8 0 operator
00000002B339 00000042C539 0 vftable'
00000002B345 00000042C545 0 vbtable'
00000002B351 00000042C551 0 vcall'
00000002B359 00000042C559 0 typeof'
00000002B365 00000042C565 0 local static guard'
00000002B37D 00000042C57D 0 string'
00000002B389 00000042C589 0 vbase destructor'
00000002B39D 00000042C59D 0 vector deleting destructor'
00000002B3BD 00000042C5BD 0 default constructor closure'
00000002B3DD 00000042C5DD 0 scalar deleting destructor'
00000002B3FD 00000042C5FD 0 vector constructor iterator'
00000002B41D 00000042C61D 0 vector destructor iterator'
00000002B43D 00000042C63D 0 vector vbase constructor iterator'
00000002B461 00000042C661 0 virtual displacement map'
00000002B47D 00000042C67D 0 eh vector constructor iterator'
00000002B4A1 00000042C6A1 0 eh vector destructor iterator'
00000002B4C1 00000042C6C1 0 eh vector vbase constructor iterator'
00000002B4E9 00000042C6E9 0 copy constructor closure'
00000002B505 00000042C705 0 udt returning'
File pos Mem pos ID Text
======== ======= == ====
00000002B521 00000042C721 0 local vftable'
00000002B531 00000042C731 0 local vftable constructor closure'
00000002B554 00000042C754 0 new[]
00000002B55C 00000042C75C 0 delete[]
00000002B569 00000042C769 0 omni callsig'
00000002B579 00000042C779 0 placement delete closure'
00000002B595 00000042C795 0 placement delete[] closure'
00000002B5B5 00000042C7B5 0 managed vector constructor iterator'
00000002B5DD 00000042C7DD 0 managed vector destructor iterator'
00000002B605 00000042C805 0 eh vector copy constructor iterator'
00000002B62D 00000042C82D 0 eh vector vbase copy constructor iterator'
00000002B659 00000042C859 0 dynamic initializer for '
00000002B675 00000042C875 0 dynamic atexit destructor for '
00000002B699 00000042C899 0 vector copy constructor iterator'
00000002B6BD 00000042C8BD 0 vector vbase copy constructor iterator'
00000002B6E9 00000042C8E9 0 managed vector copy constructor iterator'
00000002B715 00000042C915 0 local static thread guard'
00000002B730 00000042C930 0 Type Descriptor'
00000002B744 00000042C944 0 Base Class Descriptor at (
00000002B760 00000042C960 0 Base Class Array'
00000002B774 00000042C974 0 Class Hierarchy Descriptor'
00000002B794 00000042C994 0 Complete Object Locator'
00000002B7D5 00000042C9D5 0 ('8PW
00000002B7DE 00000042C9DE 0 700PP
00000002B7F9 00000042C9F9 0 xppwpp
00000002C5C0 00000042D7C0 0 CreateFile2
00000002C5DC 00000042D7DC 0 1#SNAN
00000002C5E4 00000042D7E4 0 1#IND
00000002C5EC 00000042D7EC 0 1#INF
00000002C5F4 00000042D7F4 0 1#QNAN
00000002C5FC 00000042D7FC 0 generic
00000002C604 00000042D804 0 unknown error
00000002C614 00000042D814 0 iostream
00000002C620 00000042D820 0 iostream stream error
00000002C638 00000042D838 0 system
00000002C640 00000042D840 0 ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/
00000002C684 00000042D884 0 string too long
00000002C694 00000042D894 0 invalid string position
00000002C6AC 00000042D8AC 0 bad locale name
00000002C6BC 00000042D8BC 0 false
00000002C6CC 00000042D8CC 0 ios_base::badbit set
00000002C6E4 00000042D8E4 0 ios_base::failbit set
00000002C6FC 00000042D8FC 0 ios_base::eofbit set
00000002C758 00000042D958 0 .DEFAULT\XFS\LOGICAL_SERVICES\
00000002C778 00000042D978 0 class
00000002C784 00000042D984 0 vector<T> too long
00000002C798 00000042D998 0 bad cast
00000002C7B4 00000042D9B4 0 Bills left:
00000002C7C4 00000042D9C4 0 time(s)
00000002C7D0 00000042D9D0 0 Wrong key. Tried:
00000002C7EC 00000042D9EC 0 del.exe
00000002C7FC 00000042D9FC 0 " /accepteula -p 3 -q "
00000002C817 00000042DA17 0 shutdown -t 0 -r -f
00000002C82C 00000042DA2C 0 del "%~f0"
00000002C83B 00000042DA3B 0 del "
00000002C846 00000042DA46 0 del "
00000002C84C 00000042DA4C 0 ">NUL
00000002C853 00000042DA53 0 if "%ERRORLEVEL%"=="0" goto start
00000002C878 00000042DA78 0 " 2>NUL | find /I /N "
00000002C890 00000042DA90 0 :start
File pos Mem pos ID Text
======== ======= == ====
00000002C898 00000042DA98 0 tasklist /FI "IMAGENAME eq
00000002C8B4 00000042DAB4 0 del.bat
00000002C8C0 00000042DAC0 0 cmd.exe /C "
00000002C8D0 00000042DAD0 0 cmd.exe
00000002C8F0 00000042DAF0 0 ERROR
00000002D7C0 00000042E9C0 0 Blocking operation in progress
00000002D7E0 00000042E9E0 0 No blocking operation in progress
00000002D804 00000042EA04 0 Device WFS_ERR_OP_IN_PROGRESS
00000002D824 00000042EA24 0 pinpad is busy
00000002D834 00000042EA34 0 pinpad not busy
00000002D860 00000042EA60 0 Pinpad1
00000002D868 00000042EA68 0 Failed to open registry
00000002D953 00000042EB53 0 raB3G
00000002F9E2 000000430BE2 0 GetCurrentProcess
00000002F9F6 000000430BF6 0 Sleep
00000002F9FE 000000430BFE 0 GetCurrentThreadId
00000002FA14 000000430C14 0 CloseHandle
00000002FA22 000000430C22 0 GetCurrentProcessId
00000002FA38 000000430C38 0 GetModuleFileNameA
00000002FA4E 000000430C4E 0 GetLastError
00000002FA5E 000000430C5E 0 GetVolumeInformationW
00000002FA76 000000430C76 0 CreateMutexW
00000002FA86 000000430C86 0 GetModuleFileNameW
00000002FA9C 000000430C9C 0 OpenMutexW
00000002FAAA 000000430CAA 0 SetLastError
00000002FABA 000000430CBA 0 GetSystemTime
00000002FACA 000000430CCA 0 CreateThread
00000002FAD8 000000430CD8 0 KERNEL32.dll
00000002FAE8 000000430CE8 0 ShowWindow
00000002FAF6 000000430CF6 0 SetThreadDesktop
00000002FB0A 000000430D0A 0 SwitchDesktop
00000002FB1A 000000430D1A 0 CloseDesktop
00000002FB2A 000000430D2A 0 OpenInputDesktop
00000002FB3E 000000430D3E 0 CreateDesktopW
00000002FB50 000000430D50 0 DispatchMessageW
00000002FB64 000000430D64 0 TranslateMessage
00000002FB78 000000430D78 0 GetMessageW
00000002FB86 000000430D86 0 DefWindowProcW
00000002FB98 000000430D98 0 SendMessageW
00000002FBA8 000000430DA8 0 GetSystemMetrics
00000002FBBC 000000430DBC 0 CreateWindowExW
00000002FBCE 000000430DCE 0 SetWindowLongW
00000002FBE0 000000430DE0 0 ReleaseDC
00000002FBEC 000000430DEC 0 GetWindowLongW
00000002FBFE 000000430DFE 0 InvalidateRect
00000002FC10 000000430E10 0 LoadIconW
00000002FC1C 000000430E1C 0 RegisterClassExW
00000002FC30 000000430E30 0 BeginPaint
00000002FC3E 000000430E3E 0 LoadCursorW
00000002FC4C 000000430E4C 0 DrawTextA
00000002FC58 000000430E58 0 DrawTextW
00000002FC64 000000430E64 0 FillRect
00000002FC70 000000430E70 0 PostQuitMessage
00000002FC82 000000430E82 0 DestroyWindow
00000002FC92 000000430E92 0 EndPaint
00000002FC9C 000000430E9C 0 USER32.dll
00000002FCAA 000000430EAA 0 CreateSolidBrush
00000002FCBE 000000430EBE 0 GetObjectW
00000002FCCC 000000430ECC 0 SetDIBits
00000002FCD8 000000430ED8 0 CreateFontW
File pos Mem pos ID Text
======== ======= == ====
00000002FCE6 000000430EE6 0 CreateCompatibleDC
00000002FCFC 000000430EFC 0 SelectObject
00000002FD0C 000000430F0C 0 DeleteObject
00000002FD1C 000000430F1C 0 SetBkMode
00000002FD28 000000430F28 0 SetBkColor
00000002FD36 000000430F36 0 CreateDIBSection
00000002FD4A 000000430F4A 0 DeleteDC
00000002FD56 000000430F56 0 SetTextColor
00000002FD66 000000430F66 0 BitBlt
00000002FD6E 000000430F6E 0 GDI32.dll
00000002FD7A 000000430F7A 0 RegQueryValueExA
00000002FD8E 000000430F8E 0 RegEnumKeyExA
00000002FD9E 000000430F9E 0 RegOpenKeyExA
00000002FDAE 000000430FAE 0 RegOpenKeyExW
00000002FDBE 000000430FBE 0 RegCloseKey
00000002FDCC 000000430FCC 0 CryptAcquireContextW
00000002FDE4 000000430FE4 0 CryptSetKeyParam
00000002FDF8 000000430FF8 0 CryptReleaseContext
00000002FE0E 00000043100E 0 CryptGenRandom
00000002FE20 000000431020 0 CryptImportKey
00000002FE32 000000431032 0 CryptEncrypt
00000002FE42 000000431042 0 CryptDestroyKey
00000002FE52 000000431052 0 ADVAPI32.dll
00000002FE62 000000431062 0 ShellExecuteA
00000002FE70 000000431070 0 SHELL32.dll
00000002FE7E 00000043107E 0 WFSGetInfo
00000002FE8C 00000043108C 0 WFSFreeResult
00000002FE9C 00000043109C 0 WFSOpen
00000002FEA6 0000004310A6 0 WFSClose
00000002FEB2 0000004310B2 0 WFSExecute
00000002FEC0 0000004310C0 0 WFSStartUp
00000002FECE 0000004310CE 0 WFSIsBlocking
00000002FEDC 0000004310DC 0 MSXFS.dll
00000002FEE8 0000004310E8 0 PathRemoveFileSpecA
00000002FEFE 0000004310FE 0 PathAppendA
00000002FF0C 00000043110C 0 PathFindFileNameA
00000002FF1E 00000043111E 0 SHLWAPI.dll
00000002FF2C 00000043112C 0 WideCharToMultiByte
00000002FF42 000000431142 0 InterlockedIncrement
00000002FF5A 00000043115A 0 InterlockedDecrement
00000002FF72 000000431172 0 EncodePointer
00000002FF82 000000431182 0 DecodePointer
00000002FF92 000000431192 0 EnterCriticalSection
00000002FFAA 0000004311AA 0 LeaveCriticalSection
00000002FFC2 0000004311C2 0 DeleteCriticalSection
00000002FFDA 0000004311DA 0 MultiByteToWideChar
00000002FFF0 0000004311F0 0 GetStringTypeW
000000030002 000000431202 0 IsDebuggerPresent
000000030016 000000431216 0 IsProcessorFeaturePresent
000000030032 000000431232 0 GetProcAddress
000000030044 000000431244 0 LoadLibraryExW
000000030056 000000431256 0 HeapFree
000000030062 000000431262 0 HeapAlloc
00000003006E 00000043126E 0 ExitProcess
00000003007C 00000043127C 0 GetModuleHandleExW
000000030092 000000431292 0 AreFileApisANSI
0000000300A4 0000004312A4 0 GetCommandLineA
0000000300B6 0000004312B6 0 RaiseException
0000000300C8 0000004312C8 0 RtlUnwind
0000000300D4 0000004312D4 0 GetCPInfo
File pos Mem pos ID Text
======== ======= == ====
0000000300E0 0000004312E0 0 InitializeCriticalSectionAndSpinCount
000000030108 000000431308 0 UnhandledExceptionFilter
000000030124 000000431324 0 SetUnhandledExceptionFilter
000000030142 000000431342 0 TerminateProcess
000000030156 000000431356 0 TlsAlloc
000000030162 000000431362 0 TlsGetValue
000000030170 000000431370 0 TlsSetValue
00000003017E 00000043137E 0 TlsFree
000000030188 000000431388 0 GetStartupInfoW
00000003019A 00000043139A 0 GetModuleHandleW
0000000301AE 0000004313AE 0 LCMapStringW
0000000301BE 0000004313BE 0 GetLocaleInfoW
0000000301D0 0000004313D0 0 IsValidLocale
0000000301E0 0000004313E0 0 GetUserDefaultLCID
0000000301F6 0000004313F6 0 EnumSystemLocalesW
00000003020C 00000043140C 0 HeapSize
000000030218 000000431418 0 GetStdHandle
000000030228 000000431428 0 WriteFile
000000030234 000000431434 0 GetProcessHeap
000000030246 000000431446 0 GetConsoleCP
000000030256 000000431456 0 GetConsoleMode
000000030268 000000431468 0 IsValidCodePage
00000003027A 00000043147A 0 GetACP
000000030284 000000431484 0 GetOEMCP
000000030290 000000431490 0 GetFileType
00000003029E 00000043149E 0 QueryPerformanceCounter
0000000302B8 0000004314B8 0 GetSystemTimeAsFileTime
0000000302D2 0000004314D2 0 GetEnvironmentStringsW
0000000302EC 0000004314EC 0 FreeEnvironmentStringsW
000000030306 000000431506 0 FlushFileBuffers
00000003031A 00000043151A 0 ReadFile
000000030326 000000431526 0 SetFilePointerEx
00000003033A 00000043153A 0 HeapReAlloc
000000030348 000000431548 0 OutputDebugStringW
00000003035E 00000043155E 0 LoadLibraryW
00000003036E 00000043156E 0 SetStdHandle
00000003037E 00000043157E 0 WriteConsoleW
00000003038E 00000043158E 0 ReadConsoleW
00000003039E 00000043159E 0 CreateFileW
0000000303AC 0000004315AC 0 SetEndOfFile
000000030408 000000432008 0 .?AVbad_alloc@std@@
000000030424 000000432024 0 .?AVlogic_error@std@@
000000030444 000000432044 0 .?AVlength_error@std@@
000000030464 000000432064 0 .?AVout_of_range@std@@
000000030484 000000432084 0 .?AV_Locimp@locale@std@@
0000000304A8 0000004320A8 0 .?AVios_base@std@@
0000000304C4 0000004320C4 0 .?AV?$_Iosb@H@std@@
0000000304E0 0000004320E0 0 .?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
000000030518 000000432118 0 .?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
000000030554 000000432154 0 .?AV?$basic_istream@DU?$char_traits@D@std@@@std@@
000000030590 000000432190 0 .?AV?$basic_filebuf@DU?$char_traits@D@std@@@std@@
0000000305CC 0000004321CC 0 .?AVcodecvt_base@std@@
0000000305EC 0000004321EC 0 .?AV?$codecvt@DDH@std@@
000000030610 000000432210 0 .?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@
000000030650 000000432250 0 Copyright (c) 1992-2004 by P.J. Plauger, licensed by Dinkumware, Ltd. ALL RIGHTS RESERVED.
000000030808 000000432408 0 .?AVtype_info@@
000000030D98 000000432998 0 .?AVbad_exception@std@@
0000000312F2 000000432EF2 0
0000000313D9 000000432FD9 0 abcdefghijklmnopqrstuvwxyz
0000000313F9 000000432FF9 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ
File pos Mem pos ID Text
======== ======= == ====
000000031512 000000433112 0
0000000315F2 0000004331F2 0 abcdefghijklmnopqrstuvwxyz
000000031612 000000433212 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ
000000031B7E 00000043377E 0 z?aUY
000000031BC0 0000004337C0 0 zc%C1
000000031C13 000000433813 0 -64OS
000000031C58 000000433858 0 .?AV_Iostream_error_category@std@@
000000031C84 000000433884 0 .?AV_System_error_category@std@@
000000031CB0 0000004338B0 0 .?AVerror_category@std@@
000000031CD4 0000004338D4 0 .?AV_Generic_error_category@std@@
000000031D00 000000433900 0 .?AVsystem_error@std@@
000000031D20 000000433920 0 .?AVbad_cast@std@@
000000031D3C 00000043393C 0 .?AVexception@std@@
000000031D58 000000433958 0 .?AVfailure@ios_base@std@@
000000031D7C 00000043397C 0 .?AVruntime_error@std@@
000000031D9C 00000043399C 0 .?AV?$ctype@D@std@@
000000031DB8 0000004339B8 0 .?AV?$numpunct@D@std@@
000000031DD8 0000004339D8 0 .?AV_Facet_base@std@@
000000031DF8 0000004339F8 0 .?AUctype_base@std@@
000000031E18 000000433A18 0 .?AVfacet@locale@std@@
000000031E7D 000000433A7D 0 !This program cannot be run in DOS mode.
000000031EF7 000000433AF7 0 oRich
000000032010 000000433C10 0 .text
000000032038 000000433C38 0 .rdata
00000003205F 000000433C5F 0 @.data
000000032088 000000433C88 0 .rsrc
0000000322B3 000000433EB3 0 L$hjXQ
0000000322BE 000000433EBE 0 T$hjZR
000000032616 000000434216 0 T$ RV
000000032AB6 0000004346B6 0 9+~W3
000000032EAC 000000434AAC 0 t$895
000000032F30 000000434B30 0 t$,9u
000000032FD2 000000434BD2 0 T$(RWQS
000000032FFA 000000434BFA 0 D$,;E
00000003302D 000000434C2D 0 t$8;5
000000033060 000000434C60 0 D$HPj
000000033085 000000434C85 0 L$ QW
00000003308B 000000434C8B 0 T$TRS
0000000330AD 000000434CAD 0 D$HPQS
000000033114 000000434D14 0 L$ QWRS
000000033130 000000434D30 0 |$$)|$
000000033328 000000434F28 0 L$ QU
00000003338E 000000434F8E 0 L$ Qh
0000000334CD 0000004350CD 0 T$0Rj
0000000334DE 0000004350DE 0 L$8Qj
0000000335BF 0000004351BF 0 L$$QPU
000000033608 000000435208 0 ;D$,r
0000000337C7 0000004353C7 0 T$ RV
000000033821 000000435421 0 T$ Rh
0000000338AE 0000004354AE 0 WhL B
000000033F27 000000435B27 0 \$<t&h
000000034073 000000435C73 0 L$8QV
0000000340B4 000000435CB4 0 T$0;T$ u
0000000340BE 000000435CBE 0 D$4;D$$
000000034168 000000435D68 0 L$PQSSj
000000034171 000000435D71 0 T$XRh@
0000000341F1 000000435DF1 0 L$,QRP
00000003436F 000000435F6F 0 tdWVU
0000000343B7 000000435FB7 0 LtXQh
000000034910 000000436510 0 D$ Ph
File pos Mem pos ID Text
======== ======= == ====
0000000352E8 000000436EE8 0 SSSSS
00000003556A 00000043716A 0 VVVVV
0000000355A1 0000004371A1 0 VVVVV
0000000355F9 0000004371F9 0 CCGG
000000035675 000000437275 0 VVVVV
0000000356BC 0000004372BC 0 GGBB
000000035761 000000437361 0 VVVVV
0000000358EB 0000004374EB 0 VVVVV
000000035ABE 0000004376BE 0 ~,WPV
000000035F9B 000000437B9B 0 VVVVV
000000035FD7 000000437BD7 0 VVVVV
00000003682C 00000043842C 0 VVVVV
000000036873 000000438473 0 VVVVV
0000000374AE 0000004390AE 0 VVVVV
0000000374F2 0000004390F2 0 VVVVV
000000037B80 000000439780 0 VVVVV
000000037BC4 0000004397C4 0 PPPPP
000000037C07 000000439807 0 VVVVV
000000037C2B 00000043982B 0 VVVVV
000000037C50 000000439850 0 VVVVV
000000037DC3 0000004399C3 0 PPPPP
000000037E13 000000439A13 0 PPPPP
000000038D96 00000043A996 0 PPPPP
000000038F89 00000043AB89 0 PPPPP
000000038FB7 00000043ABB7 0 SSSSS
000000039075 00000043AC75 0 VVVVV
00000003913E 00000043AD3E 0 SSSSS
00000003916E 00000043AD6E 0 SSSSS
000000039286 00000043AE86 0 VVVVV
0000000392EB 00000043AEEB 0 VVVVV
00000003932E 00000043AF2E 0 SSSSS
000000039396 00000043AF96 0 @PVhc
000000039413 00000043B013 0 SSSSS
000000039A4F 00000043B64F 0 0A@@Ju
00000003A051 00000043BC51 0 VVVVV
00000003A285 00000043BE85 0 SSSSS
00000003A2E9 00000043BEE9 0 SSSSS
00000003A382 00000043BF82 0 PPPPP
00000003A3E2 00000043BFE2 0 SSSSS
00000003A4AD 00000043C0AD 0 PPPPP
00000003A653 00000043C253 0 VVVVV
00000003A755 00000043C355 0 VVVVV
00000003A7B8 00000043C3B8 0 VVVVV
00000003A8EC 00000043C4EC 0 PPPPP
00000003AC14 00000043C814 0 VVVVV
00000003AC75 00000043C875 0 vSSSh
00000003AE1D 00000043CA1D 0 SSSSS
00000003B7A3 00000043D3A3 0 WWWWW
00000003B9DD 00000043D5DD 0 PPPPP
00000003BAAB 00000043D6AB 0 , <Xw
00000003BB29 00000043D729 0 t%HHt
00000003BD68 00000043D968 0 HHtXHHt
00000003BE58 00000043DA58 0 HHty+
00000003C2C5 00000043DEC5 0 >If90t
00000003C52F 00000043E12F 0 WWWWW
00000003C685 00000043E285 0 VVVVV
00000003C6F0 00000043E2F0 0 VVVVV
00000003CDBA 00000043E9BA 0 WWWWW
00000003CE5B 00000043EA5B 0 VVVVV
00000003CEB9 00000043EAB9 0 SSSSS
File pos Mem pos ID Text
======== ======= == ====
00000003D00B 00000043EC0B 0 [j@j
00000003D067 00000043EC67 0 9=dkB
00000003D212 00000043EE12 0 ;54hB
00000003DAE5 00000043F6E5 0 9~\u'
00000003DC8E 00000043F88E 0 PPPPP
00000003DD28 00000043F928 0 PPPPP
00000003DE89 00000043FA89 0 _VVVVV
00000003DEC4 00000043FAC4 0 _VVVVV
00000003DF02 00000043FB02 0 VVVVV
00000003DF2A 00000043FB2A 0 VhPhB
00000003E07F 00000043FC7F 0 SSSSS
00000003E194 00000043FD94 0 SSSSS
00000003E203 00000043FE03 0 7GG9]
00000003E27C 00000043FE7C 0 u)jAXf;
00000003E41F 00000044001F 0 VVVVV
00000003E53D 00000044013D 0 u)jAXf;
00000003E7EA 0000004403EA 0 >=Yt1j
00000003E7FD 0000004403FD 0 tPVWP
00000003E810 000000440410 0 PPPPP
00000003E9CB 0000004405CB 0 QQSVWh
00000003EEE7 000000440AE7 0 URPQQh8
00000003F1B5 000000440DB5 0 0SSSSS
00000003F23E 000000440E3E 0 0SSSSS
00000003F36C 000000440F6C 0 0SSSSS
00000003F3E5 000000440FE5 0 VVVVV
00000003F4F1 0000004410F1 0 WWWWW
00000003F532 000000441132 0 WWWWW
00000003F62A 00000044122A 0 VVVVV
00000003F80C 00000044140C 0 VVVVV
00000003FCFB 0000004418FB 0 v N+D$
00000003FD89 000000441989 0 ji_jdZf;
00000003FDAE 0000004419AE 0 Xt"f;
00000003FDD0 0000004419D0 0 Xupf;
00000003FF9C 000000441B9C 0 SSSSS
00000004090A 00000044250A 0 VVVVV
000000040F02 000000442B02 0 Kf90t
000000041119 000000442D19 0 It.It+It!It
000000041125 000000442D25 0 It"IIuQ
00000004118A 000000442D8A 0 PPPPP
000000041199 000000442D99 0 SSSSS
00000004130B 000000442F0B 0 PPPPP
000000041EA6 000000443AA6 0 u8SS3
000000041F3E 000000443B3E 0 9]$SS
000000042085 000000443C85 0 t"SS9]
0000000422FE 000000443EFE 0 9] SS
0000000424C7 0000004440C7 0 Pj1Q3
000000042559 000000444159 0 F Pj*
000000042571 000000444171 0 F$Pj+
000000042586 000000444186 0 F(Pj,
00000004259B 00000044419B 0 F,Pj-
0000000425B0 0000004441B0 0 F0Pj.
0000000425C8 0000004441C8 0 F4Pj/
0000000425F2 0000004441F2 0 F8PjD
000000042607 000000444207 0 F<PjE
00000004261F 00000044421F 0 F@PjF
000000042634 000000444234 0 FDPjG
000000042649 000000444249 0 FHPjH
00000004265E 00000044425E 0 FLPjI
000000042676 000000444276 0 FPPjJ
00000004268B 00000044428B 0 FTPjK
File pos Mem pos ID Text
======== ======= == ====
0000000426A0 0000004442A0 0 FXPjL
0000000426B5 0000004442B5 0 F\PjM
0000000426E2 0000004442E2 0 FdPjO
0000000426F7 0000004442F7 0 FhPj8
00000004270C 00000044430C 0 FlPj9
000000042724 000000444324 0 FpPj:
000000042739 000000444339 0 FtPj;
00000004274E 00000044434E 0 FxPj<
000000042763 000000444363 0 F|Pj=
000000042DB4 0000004449B4 0 v$;5\
000000042EC5 000000444AC5 0 C PjPV
000000042ED9 000000444AD9 0 C$PjQV
000000042F18 000000444B18 0 C*PjTV
000000042F2C 000000444B2C 0 C+PjUV
000000042F40 000000444B40 0 C,PjVV
000000042F57 000000444B57 0 C-PjWV
000000042F6B 000000444B6B 0 C.PjRV
000000042F7F 000000444B7F 0 C/PjSV
00000004320A 000000444E0A 0 QW@Ph
00000004357A 00000044517A 0 PPPPP
0000000435B3 0000004451B3 0 PPPPP
000000043689 000000445289 0 PPPPP
0000000436BD 0000004452BD 0 PPPPP
000000043830 000000445430 0 PPPPP
000000043869 000000445469 0 PPPPP
0000000438C9 0000004454C9 0 PPPPP
000000043902 000000445502 0 PPPPP
00000004394A 00000044554A 0 PPPPP
000000043984 000000445584 0 PPPPP
0000000439BE 0000004455BE 0 PPPPP
0000000439F8 0000004455F8 0 PPPPP
000000043A32 000000445632 0 PPPPP
000000043AFA 0000004456FA 0 .;1s(N
000000043B75 000000445775 0 tIHt$
000000043C34 000000445834 0 HHt4HHt
000000043D2B 00000044592B 0 Ht\Ht,
000000043E0A 000000445A0A 0 WWWWW
000000043E51 000000445A51 0 teHtFHt&Hu
0000000443A1 000000445FA1 0 SSSSS
0000000443D4 000000445FD4 0 SSSSS
00000004442A 00000044602A 0 ty<%tA
00000004449D 00000044609D 0 tBF9]
0000000444F4 0000004460F4 0 SSSSS
0000000445A6 0000004461A6 0 PPPPPPPP
00000004470A 00000044630A 0 tNh,0B
00000004471B 00000044631B 0 t=h(0B
000000044CEE 0000004468EE 0 Vj@hP-B
000000044DF9 0000004469F9 0 u%h00B
000000044E11 000000446A11 0 PPPPP
00000004641B 00000044801B 0 0;1t|
000000047B26 000000449726 0 PPPPPPPP
000000047D64 000000449964 0 SSSSS
000000047DE2 0000004499E2 0 SSSSS
000000047E2D 000000449A2D 0 QSWVj
000000048049 000000449C49 0 PPPPP
0000000481AB 000000449DAB 0 t$HHt
0000000483EC 000000449FEC 0 HHtYHHt
0000000484DD 00000044A0DD 0 HHty+
000000048BF6 00000044A7F6 0 tM<it-<ot)<ut%<xt!<Xt
000000048DF8 00000044A9F8 0 WWWWW
File pos Mem pos ID Text
======== ======= == ====
000000048F25 00000044AB25 0 , <Xw
000000048F90 00000044AB90 0 8$u%9
0000000490C0 00000044ACC0 0 t%HHt
000000049347 00000044AF47 0 <dty<itu<otq<utm<xti<Xte
000000049D7A 00000044B97A 0 HIf98t
00000004A13B 00000044BD3B 0 VVVVV
00000004A27F 00000044BE7F 0 VW|[;
00000004A352 00000044BF52 0 VVVVV
00000004A715 00000044C315 0 WWWWW
00000004A876 00000044C476 0 wIVSP
00000004AA3F 00000044C63F 0 SSSSS
00000004AAB3 00000044C6B3 0 WWWWW
00000004AB3C 00000044C73C 0 WWWWW
00000004ABB4 00000044C7B4 0 WWWWW
00000004B421 00000044D021 0 u,VVWV
00000004B4E9 00000044D0E9 0 t VV9u
00000004B773 00000044D373 0 0WWWWW
00000004B79E 00000044D39E 0 AAFFf;
00000004B7DF 00000044D3DF 0 SVWUj
00000004B880 00000044D480 0 ;t$,v-
00000004B905 00000044D505 0 UQPXY]Y[
00000004BC16 00000044D816 0 WWWWV
00000004BC39 00000044D839 0 t+WWVPV
00000004BCD0 00000044D8D0 0 VVVVV
00000004BD09 00000044D909 0 VVVVV
00000004BD42 00000044D942 0 VVVVV
00000004BD9E 00000044D99E 0 SSSSS
00000004BDBE 00000044D9BE 0 SSSSS
00000004BE56 00000044DA56 0 j,hH7B
00000004BE97 00000044DA97 0 SSSSS
00000004BEB2 00000044DAB2 0 SSSSS
00000004BECD 00000044DACD 0 SSSSS
00000004BF75 00000044DB75 0 SSSSS
00000004C0BF 00000044DCBF 0 SSSSS
00000004C10C 00000044DD0C 0 >:u8FV
00000004C16E 00000044DD6E 0 SSSSS
00000004C217 00000044DE17 0 jd_Fj
00000004C33F 00000044DF3F 0 PPPPP
00000004C3AF 00000044DFAF 0 VVVVV
00000004C3E3 00000044DFE3 0 95DkB
00000004C40D 00000044E00D 0 Pf950kB
00000004C433 00000044E033 0 PVVRV
00000004C4CF 00000044E0CF 0 VVVVVQRSSj
00000004C4E3 00000044E0E3 0 VVVVV
00000004C579 00000044E179 0 95LkB
00000004C58C 00000044E18C 0 95LkB
00000004C68C 00000044E28C 0 SSSSS
00000004C6C2 00000044E2C2 0 SSSSS
00000004C75B 00000044E35B 0 VVVVV
00000004C832 00000044E432 0 SSSSS
00000004C871 00000044E471 0 SSSSS
00000004C913 00000044E513 0 VVVVV
00000004C96F 00000044E56F 0 SSSSS
00000004C993 00000044E593 0 SSSSS
00000004CAB8 00000044E6B8 0 0SSSSS
00000004CC78 00000044E878 0 WWWWW
00000004D062 00000044EC62 0 WWWWW
00000004D299 00000044EE99 0 SSSSS
00000004D303 00000044EF03 0 SSSSS
00000004D32D 00000044EF2D 0 WWWWW
File pos Mem pos ID Text
======== ======= == ====
00000004D39F 00000044EF9F 0 WWWWW
00000004D3E0 00000044EFE0 0 VVVVV
00000004D46E 00000044F06E 0 0SSSSS
00000004D4E8 00000044F0E8 0 SSSSS
00000004D546 00000044F146 0 8VVVVV
00000004D5C5 00000044F1C5 0 VVVVV
00000004D776 00000044F376 0 SSSSS
00000004DB1B 00000044F71B 0 SSSSS
00000004DB58 00000044F758 0 SSSSS
00000004DBEE 00000044F7EE 0 QQSV3
00000004DC0A 00000044F80A 0 VVVVj
00000004DD1F 00000044F91F 0 9=PkB
00000004DF16 00000044FB16 0 t{~Bj
00000004E0E7 00000044FCE7 0 SSSSS
00000004E124 00000044FD24 0 SSSSS
00000004E296 00000044FE96 0 SSSSS
00000004E2B7 00000044FEB7 0 tSj=V
00000004E442 000000450042 0 @Y@PW
00000004E453 000000450053 0 SSSSS
00000004E504 000000450104 0 SSSSS
00000004E53E 00000045013E 0 SSSSS
00000004EC90 000000450890 0 \pard\lang1033\b0\fs20\par
00000004ECB0 0000004508B0 0 \b EFFET JURIDIQUE.\b0 Le pr\'e9sent contrat d\'e9crit certains droits juridiques. Vous pourriez avoir d'autres droits pr\'e9vus par les lois de votre pays. Le pr\'e9sent contrat ne modifie pas les droits que vous conf\'e8rent les lois de votre pays si celles-ci ne le permettent pas.\b\par
00000004EDD8 0000004509D8 0 \pard\sb120\sa120 Elle s'applique \'e9galement, m\'eame si Sysinternals connaissait ou devrait conna\'eetre l'\'e9ventualit\'e9 d'un tel dommage. Si votre pays n'autorise pas l'exclusion ou la limitation de responsabilit\'e9 pour les dommages indirects, accessoires ou de quelque nature que ce soit, il se peut que la limitation ou l'exclusion ci-dessus ne s'appliquera pas \'e0 votre \'e9gard.\par
00000004EF68 000000450B68 0 \pard\fi-363\li720\sb120\sa120\tx720\'b7\tab les r\'e9clamations au titre de violation de contrat ou de garantie, ou au titre de responsabilit\'e9 stricte, de n\'e9gligence ou d'une autre faute dans la limite autoris\'e9e par la loi en vigueur.\par
00000004F068 000000450C68 0 \pard\keepn\fi-360\li720\sb120\sa120\tx720\lang1036\'b7\tab tout ce qui est reli\'e9 au logiciel, aux services ou au contenu (y compris le code) figurant sur des sites Internet tiers ou dans des programmes tiers ; et\par
00000004F148 000000450D48 0 \lang1033 Cette limitation concerne :\par
00000004F178 000000450D78 0 \pard\keepn\sb120\sa120\b LIMITATION DES DOMMAGES-INT\'c9R\'caTS ET EXCLUSION DE RESPONSABILIT\'c9 POUR LES DOMMAGES.\b0 Vous pouvez obtenir de Sysinternals et de ses fournisseurs une indemnisation en cas de dommages directs uniquement \'e0 hauteur de 5,00 $ US. Vous ne pouvez pr\'e9tendre \'e0 aucune indemnisation pour les autres dommages, y compris les dommages sp\'e9ciaux, indirects ou accessoires et pertes de b\'e9n\'e9fices.\par
00000004F330 000000450F30 0 \pard\sb120\sa120 EXON\'c9RATION DE GARANTIE.\b0 Le logiciel vis\'e9 par une licence est offert \'ab tel quel \'bb. Toute utilisation de ce logiciel est \'e0 votre seule risque et p\'e9ril. Sysinternals n'accorde aucune autre garantie expresse. Vous pouvez b\'e9n\'e9ficier de droits additionnels en vertu du droit local sur la protection dues consommateurs, que ce contrat ne peut modifier. La ou elles sont permises par le droit locale, les garanties implicites de qualit\'e9 marchande, d'ad\'e9quation \'e0 un usage particulier et d'absence de contrefa\'e7on sont exclues.\par
00000004F578 000000451178 0 \pard\sb240\lang1036 Remarque : Ce logiciel \'e9tant distribu\'e9 au Qu\'e9bec, Canada, certaines des clauses dans ce contrat sont fournies ci-dessous en fran\'e7ais.\par
00000004F628 000000451228 0 \pard\b Please note: As this software is distributed in Quebec, Canada, some of the clauses in this agreement are provided below in French.\par
00000004F6B8 0000004512B8 0 \pard\li360\sb120\sa120 It also applies even if Sysinternals knew or should have known about the possibility of the damages. The above limitation or exclusion may not apply to you because your country may not allow the exclusion or limitation of incidental, consequential or other damages.\par
00000004F7E0 0000004513E0 0 \pard\fi-363\li720\sb120\sa120\'b7\tab claims for breach of contract, breach of warranty, guarantee or condition, strict liability, negligence, or other tort to the extent permitted by applicable law.\par
00000004F8B0 0000004514B0 0 \pard\fi-363\li720\sb120\sa120\tx720\'b7\tab anything related to the software, services, content (including code) on third party Internet sites, or third party programs; and\par
00000004F968 000000451568 0 \pard\li357\sb120\sa120\b0\caps0 This limitation applies to\par
00000004F9A8 0000004515A8 0 \pard\fi-360\li360\sb120\sa120\tx360\fs20 10.\tab\fs19 Limitation on and Exclusion of Remedies and Damages. You can recover from SYSINTERNALS and its suppliers only direct damages up to U.S. $5.00. You cannot recover any other damages, including consequential, lost profits, special, indirect or incidental damages.\par
00000004FAF0 0000004516F0 0 \fs20 9.\tab\fs19 Disclaimer of Warranty.\caps0 \caps The software is licensed \ldblquote as-is.\rdblquote You bear the risk of using it. SYSINTERNALS gives no express warranties, guarantees or conditions. You may have additional consumer rights under your local laws which this agreement cannot change. To the extent permitted under your local laws, SYSINTERNALS excludes the implied warranties of merchantability, fitness for a particular purpose and non-infringement.\par
00000004FCD8 0000004518D8 0 \pard\fi-357\li357\sb120\sa120\tx360\caps\fs20 8.\tab\fs19 Legal Effect.\b0\caps0 This agreement describes certain legal rights. You may have other rights under the laws of your country. You may also have rights with respect to the party from whom you acquired the software. This agreement does not change your rights under the laws of your country if the laws of your country do not permit it to do so.\b\caps\par
00000004FE80 000000451A80 0 \pard\fi-363\li720\sb120\sa120\fs20 b.\tab\fs19 Outside the United States.\b0 If you acquired the software in any other country, the laws of that country apply.\b\par
00000004FF30 000000451B30 0 \pard\fi-363\li720\sb120\sa120\tx720\cf0\fs20 a.\tab\fs19 United States.\b0 If you acquired the software in the United States, Washington state law governs the interpretation of this agreement and applies to claims for breach of it, regardless of conflict of laws principles. The laws of the state where you live govern all other claims, including claims under state consumer protection laws, unfair competition laws, and in tort.\b\par
0000000500E8 000000451CE8 0 \pard\keepn\fi-360\li360\sb120\sa120\tx360\cf2\b\caps\fs20 7.\tab\fs19 Applicable Law\caps0 .\par
000000050150 000000451D50 0 \caps\fs20 6.\tab\fs19 Entire Agreement.\b0\caps0 This agreement, and the terms for supplements, updates, Internet-based services and support services that you use, are the entire agreement for the software and support services.\par
000000050240 000000451E40 0 \caps\fs20 5.\tab\fs19 SUPPORT SERVICES.\caps0 \b0 Because this software is \ldblquote as is,\rdblquote we may not provide support services for it.\b\par
0000000502E0 000000451EE0 0 \caps\fs20 4.\tab\fs19 Export Restrictions\caps0 .\b0 The software is subject to United States export laws and regulations. You must comply with all domestic and international export laws and regulations that apply to the software. These laws include restrictions on destinations, end users and end use. For additional information, see \cf1\ul www.microsoft.com/exporting <http://www.microsoft.com/exporting>\cf0\ulnone .\b\par
000000050498 000000452098 0 \pard\fi-357\li357\sb120\sa120\tx360\b\fs20 3.\tab\fs19 DOCUMENTATION.\b0 Any person that has valid access to your computer or internal network may copy and use the documentation for your internal, reference purposes.\b\par
000000050580 000000452180 0 \'b7\tab use the software for commercial software hosting services.\par
0000000505C8 0000004521C8 0 \'b7\tab transfer the software or this agreement to any third party; or\par
000000050614 000000452214 0 \'b7\tab rent, lease or lend the software;\par
000000050644 000000452244 0 \'b7\tab publish the software for others to copy;\par
000000050680 000000452280 0 \'b7\tab make more copies of the software than specified in this agreement or allowed by applicable law, despite this limitation;\par
000000050708 000000452308 0 \pard\fi-363\li720\sb120\sa120\'b7\tab reverse engineer, decompile or disassemble the binary versions of the software, except and only to the extent that applicable law expressly permits, despite this limitation;\par
0000000507E8 0000004523E8 0 \pard\fi-363\li720\sb120\sa120\tx720\b0\'b7\tab work around any technical limitations in the binary versions of the software;\par
000000050870 000000452470 0 \caps\fs20 2.\tab\fs19 Scope of License\caps0 .\b0 The software is licensed, not sold. This agreement only gives you some rights to use the software. Sysinternals reserves all other rights. Unless applicable law gives you more rights despite this limitation, you may use the software only as expressly permitted in this agreement. In doing so, you must comply with any technical limitations in the software that only allow you to use it in certain ways. You may not\b\par
000000050A50 000000452650 0 \pard\fi-357\li357\sb120\sa120\tx360\fs20 1.\tab\fs19 INSTALLATION AND USE RIGHTS. \b0 You may install and use any number of copies of the software on your devices.\b\par
000000050B00 000000452700 0 \pard\brdrt\brdrs\brdrw10\brsp20 \sb120\sa120 If you comply with these license terms, you have the rights below.\par
000000050B78 000000452778 0 \b BY USING THE SOFTWARE, YOU ACCEPT THESE TERMS. IF YOU DO NOT ACCEPT THEM, DO NOT USE THE SOFTWARE.\par
000000050BE8 0000004527E8 0 \pard\sb120\sa120 for this software, unless other terms accompany those items. If so, those terms apply.\par
000000050C58 000000452858 0 \'b7\tab support services\par
000000050C78 000000452878 0 \'b7\tab Internet-based services, and \par
000000050CA4 0000004528A4 0 \pard\fi-363\li720\sb120\sa120\'b7\tab supplements,\par
File pos Mem pos ID Text
======== ======= == ====
000000050CDC 0000004528DC 0 \pard\fi-363\li720\sb120\sa120\tx720\'b7\tab updates,\par
000000050D18 000000452918 0 \pard\sb120\sa120\b0\fs19 These license terms are an agreement between Sysinternals (a wholly owned subsidiary of Microsoft Corporation) and you. Please read them. They apply to the software you are downloading from Systinternals.com, which includes the media on which you received it, if any. The terms also apply to any Sysinternals\par
000000050E70 000000452A70 0 {\*\generator Msftedit 5.41.21.2506;}\viewkind4\uc1\pard\brdrb\brdrs\brdrw10\brsp20 \sb120\sa120\b\f0\fs24 SYSINTERNALS SOFTWARE LICENSE TERMS\fs28\par
000000050F08 000000452B08 0 {\colortbl ;\red0\green0\blue255;\red0\green0\blue0;}
000000050F40 000000452B40 0 {\rtf1\ansi\ansicpg1252\deff0\deflang1033{\fonttbl{\f0\fswiss\fprq2\fcharset0 Tahoma;}}
0000000511C0 000000452DC0 0 CommandLineToArgvW
00000005130C 000000452F0C 0 Scanning file:
0000000517CC 0000004533CC 0 GetDiskFreeSpaceExW
0000000519D0 0000004535D0 0 RtlNtStatusToDosError
000000051A70 000000453670 0 NtFsControlFile
000000051E81 000000453A81 0 Invalid drive letter: %s
000000051E9A 000000453A9A 0 Argument must be formatted like d:
000000051EC0 000000453AC0 0 SDelete is set for %d pass%s.
000000051F00 000000453B00 0 Wow64EnableWow64FsRedirection
00000005202C 000000453C2C 0 CorExitProcess
000000052054 000000453C54 0 runtime error
000000052068 000000453C68 0 TLOSS error
000000052078 000000453C78 0 SING error
000000052088 000000453C88 0 DOMAIN error
000000052098 000000453C98 0 R6034
00000005209F 000000453C9F 0 An application has made an attempt to load the C runtime library incorrectly.
0000000520ED 000000453CED 0 Please contact the application's support team for more information.
000000052138 000000453D38 0 R6033
00000005213F 000000453D3F 0 - Attempt to use MSIL code from this assembly during native code initialization
00000005218F 000000453D8F 0 This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
000000052230 000000453E30 0 R6032
000000052237 000000453E37 0 - not enough space for locale information
000000052268 000000453E68 0 R6031
00000005226F 000000453E6F 0 - Attempt to initialize the CRT more than once.
00000005229F 000000453E9F 0 This indicates a bug in your application.
0000000522CC 000000453ECC 0 R6030
0000000522D3 000000453ED3 0 - CRT not initialized
0000000522EC 000000453EEC 0 R6028
0000000522F3 000000453EF3 0 - unable to initialize heap
000000052314 000000453F14 0 R6027
00000005231B 000000453F1B 0 - not enough space for lowio initialization
00000005234C 000000453F4C 0 R6026
000000052353 000000453F53 0 - not enough space for stdio initialization
000000052384 000000453F84 0 R6025
00000005238B 000000453F8B 0 - pure virtual function call
0000000523AC 000000453FAC 0 R6024
0000000523B3 000000453FB3 0 - not enough space for _onexit/atexit table
0000000523E4 000000453FE4 0 R6019
0000000523EB 000000453FEB 0 - unable to open console device
000000052410 000000454010 0 R6018
000000052417 000000454017 0 - unexpected heap error
000000052434 000000454034 0 R6017
00000005243B 00000045403B 0 - unexpected multithread lock error
000000052464 000000454064 0 R6016
00000005246B 00000045406B 0 - not enough space for thread data
000000052492 000000454092 0 This application has requested the Runtime to terminate it in an unusual way.
0000000524E0 0000004540E0 0 Please contact the application's support team for more information.
000000052528 000000454128 0 R6009
00000005252F 00000045412F 0 - not enough space for environment
000000052554 000000454154 0 R6008
00000005255B 00000045415B 0 - not enough space for arguments
000000052580 000000454180 0 R6002
000000052587 000000454187 0 - floating point support not loaded
0000000525B0 0000004541B0 0 Microsoft Visual C++ Runtime Library
0000000525E0 0000004541E0 0 <program name unknown>
File pos Mem pos ID Text
======== ======= == ====
0000000525F8 0000004541F8 0 Runtime Error!
000000052608 000000454208 0 Program:
00000005261C 00000045421C 0 LC_TIME
000000052624 000000454224 0 LC_NUMERIC
000000052630 000000454230 0 LC_MONETARY
00000005263C 00000045423C 0 LC_CTYPE
000000052648 000000454248 0 LC_COLLATE
000000052654 000000454254 0 LC_ALL
0000000526C7 0000004542C7 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]
000000052708 000000454308 0 abcdefghijklmnopqrstuvwxyz{|}~
000000052744 000000454344 0 EncodePointer
000000052770 000000454370 0 DecodePointer
000000052780 000000454380 0 FlsFree
000000052788 000000454388 0 FlsSetValue
000000052794 000000454394 0 FlsGetValue
0000000527A0 0000004543A0 0 FlsAlloc
0000000527BC 0000004543BC 0 (null)
0000000527E9 0000004543E9 0 ( 8PX
0000000527F1 0000004543F1 0 700WP
000000052809 000000454409 0 xpxxxx
0000000528A0 0000004544A0 0 SystemFunction036
0000000528B4 0000004544B4 0 ADVAPI32.DLL
0000000528C4 0000004544C4 0 GetProcessWindowStation
0000000528DC 0000004544DC 0 GetUserObjectInformationA
0000000528F8 0000004544F8 0 GetLastActivePopup
00000005290C 00000045450C 0 GetActiveWindow
00000005291C 00000045451C 0 MessageBoxA
000000052928 000000454528 0 USER32.DLL
000000052EE0 000000454AE0 0 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]
000000052F21 000000454B21 0 abcdefghijklmnopqrstuvwxyz{|}~
000000053060 000000454C60 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]
0000000530A1 000000454CA1 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
000000053140 000000454D40 0 HH:mm:ss
00000005314C 000000454D4C 0 dddd, MMMM dd, yyyy
000000053160 000000454D60 0 MM/dd/yy
000000053174 000000454D74 0 December
000000053180 000000454D80 0 November
00000005318C 000000454D8C 0 October
000000053194 000000454D94 0 September
0000000531A0 000000454DA0 0 August
0000000531B8 000000454DB8 0 April
0000000531C0 000000454DC0 0 March
0000000531C8 000000454DC8 0 February
0000000531D4 000000454DD4 0 January
00000005320C 000000454E0C 0 Saturday
000000053218 000000454E18 0 Friday
000000053220 000000454E20 0 Thursday
00000005322C 000000454E2C 0 Wednesday
000000053238 000000454E38 0 Tuesday
000000053240 000000454E40 0 Monday
000000053248 000000454E48 0 Sunday
000000053270 000000454E70 0 am/pm
000000053278 000000454E78 0 united-states
000000053288 000000454E88 0 united-kingdom
000000053298 000000454E98 0 trinidad & tobago
0000000532AC 000000454EAC 0 south-korea
0000000532B8 000000454EB8 0 south-africa
0000000532C8 000000454EC8 0 south korea
0000000532D4 000000454ED4 0 south africa
0000000532E4 000000454EE4 0 slovak
File pos Mem pos ID Text
======== ======= == ====
0000000532EC 000000454EEC 0 puerto-rico
0000000532F8 000000454EF8 0 pr-china
000000053304 000000454F04 0 pr china
000000053314 000000454F14 0 new-zealand
000000053320 000000454F20 0 hong-kong
00000005332C 000000454F2C 0 holland
000000053334 000000454F34 0 great britain
000000053344 000000454F44 0 england
00000005334C 000000454F4C 0 czech
000000053354 000000454F54 0 china
00000005335C 000000454F5C 0 britain
000000053364 000000454F64 0 america
000000053378 000000454F78 0 swiss
000000053380 000000454F80 0 swedish-finland
000000053390 000000454F90 0 spanish-venezuela
0000000533A4 000000454FA4 0 spanish-uruguay
0000000533B4 000000454FB4 0 spanish-puerto rico
0000000533C8 000000454FC8 0 spanish-peru
0000000533D8 000000454FD8 0 spanish-paraguay
0000000533EC 000000454FEC 0 spanish-panama
0000000533FC 000000454FFC 0 spanish-nicaragua
000000053410 000000455010 0 spanish-modern
000000053420 000000455020 0 spanish-mexican
000000053430 000000455030 0 spanish-honduras
000000053444 000000455044 0 spanish-guatemala
000000053458 000000455058 0 spanish-el salvador
00000005346C 00000045506C 0 spanish-ecuador
00000005347C 00000045507C 0 spanish-dominican republic
000000053498 000000455098 0 spanish-costa rica
0000000534AC 0000004550AC 0 spanish-colombia
0000000534C0 0000004550C0 0 spanish-chile
0000000534D0 0000004550D0 0 spanish-bolivia
0000000534E0 0000004550E0 0 spanish-argentina
0000000534F4 0000004550F4 0 portuguese-brazilian
00000005350C 00000045510C 0 norwegian-nynorsk
000000053520 000000455120 0 norwegian-bokmal
000000053534 000000455134 0 norwegian
000000053540 000000455140 0 italian-swiss
000000053550 000000455150 0 irish-english
000000053560 000000455160 0 german-swiss
000000053570 000000455170 0 german-luxembourg
000000053584 000000455184 0 german-lichtenstein
000000053598 000000455198 0 german-austrian
0000000535A8 0000004551A8 0 french-swiss
0000000535B8 0000004551B8 0 french-luxembourg
0000000535CC 0000004551CC 0 french-canadian
0000000535DC 0000004551DC 0 french-belgian
0000000535EC 0000004551EC 0 english-usa
0000000535F8 0000004551F8 0 english-us
000000053604 000000455204 0 english-uk
000000053610 000000455210 0 english-trinidad y tobago
00000005362C 00000045522C 0 english-south africa
000000053644 000000455244 0 english-nz
000000053650 000000455250 0 english-jamaica
000000053660 000000455260 0 english-ire
00000005366C 00000045526C 0 english-caribbean
000000053680 000000455280 0 english-can
00000005368C 00000045528C 0 english-belize
00000005369C 00000045529C 0 english-aus
0000000536A8 0000004552A8 0 english-american
File pos Mem pos ID Text
======== ======= == ====
0000000536BC 0000004552BC 0 dutch-belgian
0000000536CC 0000004552CC 0 chinese-traditional
0000000536E0 0000004552E0 0 chinese-singapore
0000000536F4 0000004552F4 0 chinese-simplified
000000053708 000000455308 0 chinese-hongkong
00000005371C 00000045531C 0 chinese
00000005372C 00000045532C 0 canadian
000000053738 000000455338 0 belgian
000000053740 000000455340 0 australian
00000005374C 00000045534C 0 american-english
000000053760 000000455360 0 american english
000000053774 000000455374 0 american
000000053A60 000000455660 0 Norwegian-Nynorsk
000000053A9D 00000045569D 0 ('8PW
000000053AA6 0000004556A6 0 700PP
000000053AC1 0000004556C1 0 xppwpp
000000053AD4 0000004556D4 0 SunMonTueWedThuFriSat
000000053AEC 0000004556EC 0 JanFebMarAprMayJunJulAugSepOctNovDec
000000053B18 000000455718 0 CONIN$
000000053B20 000000455720 0 CONOUT$
000000053B88 000000455788 0 c:\src\Misc\sdel\Release\sdelete.pdb
0000000544EE 0000004560EE 0 GetModuleHandleW
000000054502 000000456102 0 LocalFree
00000005450E 00000045610E 0 LoadLibraryW
00000005451E 00000045611E 0 LocalAlloc
00000005452C 00000045612C 0 GetCommandLineW
00000005453E 00000045613E 0 GetProcAddress
000000054550 000000456150 0 FormatMessageW
000000054562 000000456162 0 MoveFileW
00000005456E 00000045616E 0 ReadFile
00000005457A 00000045617A 0 WriteFile
000000054586 000000456186 0 VirtualFree
000000054594 000000456194 0 SetFilePointer
0000000545A6 0000004561A6 0 VirtualAlloc
0000000545B6 0000004561B6 0 SetFileAttributesW
0000000545CC 0000004561CC 0 GetFileAttributesW
0000000545E2 0000004561E2 0 DeleteFileW
0000000545F0 0000004561F0 0 CloseHandle
0000000545FE 0000004561FE 0 GetLastError
00000005460E 00000045620E 0 CreateFileW
00000005461C 00000045621C 0 WaitForSingleObject
000000054632 000000456232 0 GetDiskFreeSpaceW
000000054646 000000456246 0 FindClose
000000054652 000000456252 0 FindNextFileW
000000054662 000000456262 0 RemoveDirectoryW
000000054676 000000456276 0 FindFirstFileW
000000054688 000000456288 0 DeviceIoControl
00000005469A 00000045629A 0 ExpandEnvironmentStringsW
0000000546B6 0000004562B6 0 GetVersion
0000000546C4 0000004562C4 0 GetFullPathNameW
0000000546D8 0000004562D8 0 GetCurrentDirectoryW
0000000546EE 0000004562EE 0 KERNEL32.dll
0000000546FE 0000004562FE 0 SendMessageW
00000005470E 00000045630E 0 InflateRect
00000005471C 00000045631C 0 SetCursor
000000054728 000000456328 0 LoadCursorW
000000054736 000000456336 0 SetWindowTextW
000000054748 000000456348 0 EndDialog
000000054754 000000456354 0 GetSysColorBrush
000000054768 000000456368 0 GetDlgItem
File pos Mem pos ID Text
======== ======= == ====
000000054776 000000456376 0 DialogBoxIndirectParamW
00000005478E 00000045638E 0 USER32.dll
00000005479C 00000045639C 0 EndDoc
0000000547A6 0000004563A6 0 EndPage
0000000547B0 0000004563B0 0 StartPage
0000000547BC 0000004563BC 0 StartDocW
0000000547C8 0000004563C8 0 SetMapMode
0000000547D6 0000004563D6 0 GetDeviceCaps
0000000547E4 0000004563E4 0 GDI32.dll
0000000547F0 0000004563F0 0 PrintDlgW
0000000547FA 0000004563FA 0 COMDLG32.dll
00000005480A 00000045640A 0 RegCloseKey
000000054818 000000456418 0 RegSetValueExW
00000005482A 00000045642A 0 RegQueryValueExW
00000005483E 00000045643E 0 RegCreateKeyW
00000005484C 00000045644C 0 ADVAPI32.dll
00000005485C 00000045645C 0 HeapAlloc
000000054868 000000456468 0 HeapFree
000000054874 000000456474 0 GetSystemTimeAsFileTime
00000005488E 00000045648E 0 EnterCriticalSection
0000000548A6 0000004564A6 0 LeaveCriticalSection
0000000548BE 0000004564BE 0 Sleep
0000000548C6 0000004564C6 0 ExitProcess
0000000548D4 0000004564D4 0 DeleteCriticalSection
0000000548EC 0000004564EC 0 FatalAppExitA
0000000548FC 0000004564FC 0 HeapReAlloc
00000005490A 00000045650A 0 HeapCreate
000000054918 000000456518 0 HeapDestroy
000000054926 000000456526 0 GetStdHandle
000000054936 000000456536 0 GetModuleFileNameA
00000005494C 00000045654C 0 TerminateProcess
000000054960 000000456560 0 GetCurrentProcess
000000054974 000000456574 0 UnhandledExceptionFilter
000000054990 000000456590 0 SetUnhandledExceptionFilter
0000000549AE 0000004565AE 0 IsDebuggerPresent
0000000549C2 0000004565C2 0 GetCPInfo
0000000549CE 0000004565CE 0 InterlockedIncrement
0000000549E6 0000004565E6 0 InterlockedDecrement
0000000549FE 0000004565FE 0 GetACP
000000054A08 000000456608 0 GetOEMCP
000000054A14 000000456614 0 IsValidCodePage
000000054A26 000000456626 0 TlsGetValue
000000054A34 000000456634 0 TlsAlloc
000000054A40 000000456640 0 TlsSetValue
000000054A4E 00000045664E 0 TlsFree
000000054A58 000000456658 0 SetLastError
000000054A68 000000456668 0 GetCurrentThreadId
000000054A7E 00000045667E 0 GetCurrentThread
000000054A92 000000456692 0 WideCharToMultiByte
000000054AA8 0000004566A8 0 GetConsoleCP
000000054AB8 0000004566B8 0 GetConsoleMode
000000054ACA 0000004566CA 0 FlushFileBuffers
000000054ADE 0000004566DE 0 SetHandleCount
000000054AF0 0000004566F0 0 GetFileType
000000054AFE 0000004566FE 0 GetStartupInfoA
000000054B10 000000456710 0 SetConsoleCtrlHandler
000000054B28 000000456728 0 FreeLibrary
000000054B36 000000456736 0 InterlockedExchange
000000054B4C 00000045674C 0 LoadLibraryA
000000054B5C 00000045675C 0 InitializeCriticalSectionAndSpinCount
File pos Mem pos ID Text
======== ======= == ====
000000054B84 000000456784 0 GetModuleFileNameW
000000054B9A 00000045679A 0 FreeEnvironmentStringsW
000000054BB4 0000004567B4 0 GetEnvironmentStringsW
000000054BCE 0000004567CE 0 QueryPerformanceCounter
000000054BE8 0000004567E8 0 GetTickCount
000000054BF8 0000004567F8 0 GetCurrentProcessId
000000054C0E 00000045680E 0 RtlUnwind
000000054C1A 00000045681A 0 MultiByteToWideChar
000000054C30 000000456830 0 LCMapStringA
000000054C40 000000456840 0 LCMapStringW
000000054C50 000000456850 0 GetStringTypeA
000000054C62 000000456862 0 GetStringTypeW
000000054C74 000000456874 0 GetTimeFormatA
000000054C86 000000456886 0 GetDateFormatA
000000054C98 000000456898 0 GetUserDefaultLCID
000000054CAE 0000004568AE 0 GetLocaleInfoA
000000054CC0 0000004568C0 0 EnumSystemLocalesA
000000054CD6 0000004568D6 0 IsValidLocale
000000054CE6 0000004568E6 0 WriteConsoleA
000000054CF6 0000004568F6 0 GetConsoleOutputCP
000000054D0C 00000045690C 0 WriteConsoleW
000000054D1C 00000045691C 0 SetStdHandle
000000054D2C 00000045692C 0 HeapSize
000000054D38 000000456938 0 GetLocaleInfoW
000000054D4A 00000045694A 0 GetTimeZoneInformation
000000054D64 000000456964 0 CreateFileA
000000054D72 000000456972 0 CompareStringA
000000054D84 000000456984 0 CompareStringW
000000054D96 000000456996 0 SetEnvironmentVariableA
000000055576 000000457176 0
000000055656 000000457256 0 abcdefghijklmnopqrstuvwxyz
000000055676 000000457276 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ
00000005577A 00000045737A 0
000000055861 000000457461 0 abcdefghijklmnopqrstuvwxyz
000000055881 000000457481 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ
0000000561AC 000000457DAC 0 <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
0000000561F7 000000457DF7 0 <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
00000005622F 000000457E2F 0 <security>
00000005623F 000000457E3F 0 <requestedPrivileges>
00000005625C 000000457E5C 0 <requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>
0000000562BC 000000457EBC 0 </requestedPrivileges>
0000000562DA 000000457EDA 0 </security>
0000000562EB 000000457EEB 0 </trustInfo>
0000000562FB 000000457EFB 0 </assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXX
0000000564FC 0000004580FC 0 Washington1
000000056511 000000458111 0 Redmond1
000000056523 000000458123 0 Microsoft Corporation1#0!
000000056543 000000458143 0 Microsoft Code Signing PCA0
000000056561 000000458161 0 120904214209Z
000000056570 000000458170 0 130304214209Z0
000000056598 000000458198 0 Washington1
0000000565AD 0000004581AD 0 Redmond1
0000000565BF 0000004581BF 0 Microsoft Corporation1
0000000565DF 0000004581DF 0 MOPR1
0000000565EE 0000004581EE 0 Microsoft Corporation0
00000005678E 00000045838E 0 O0M0K
000000056798 000000458398 0 Ehttp://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl0Z
0000000567EB 0000004583EB 0 N0L0J
0000000567FB 0000004583FB 0 >http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt0
000000056928 000000458528 0 V ,:N
File pos Mem pos ID Text
======== ======= == ====
000000056990 000000458590 0 Washington1
0000000569A5 0000004585A5 0 Redmond1
0000000569B7 0000004585B7 0 Microsoft Corporation1!0
0000000569D7 0000004585D7 0 Microsoft Time-Stamp PCA0
0000000569F3 0000004585F3 0 120109222559Z
000000056A02 000000458602 0 130409222559Z0
000000056A2A 00000045862A 0 Washington1
000000056A3F 00000045863F 0 Redmond1
000000056A51 000000458651 0 Microsoft Corporation1
000000056A71 000000458671 0 MOPR1'0%
000000056A80 000000458680 0 nCipher DSE ESN:B8EC-30A4-71441%0#
000000056AA9 0000004586A9 0 Microsoft Time-Stamp Service0
000000056B30 000000458730 0 Vi7:*
000000056B69 000000458769 0 |pEa~
000000056C3B 00000045883B 0 M0K0I
000000056C45 000000458845 0 Chttp://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0X
000000056C96 000000458896 0 L0J0H
000000056CA6 0000004588A6 0 <http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt0
000000056E5C 000000458A5C 0 microsoft1-0+
000000056E70 000000458A70 0 $Microsoft Root Certificate Authority0
000000056E99 000000458A99 0 100831221932Z
000000056EA8 000000458AA8 0 200831222932Z0y1
000000056ECF 000000458ACF 0 Washington1
000000056EE4 000000458AE4 0 Redmond1
000000056EF6 000000458AF6 0 Microsoft Corporation1#0!
000000056F16 000000458B16 0 Microsoft Code Signing PCA0
000000057118 000000458D18 0 I0G0E
000000057122 000000458D22 0 ?http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0T
00000005716F 000000458D6F 0 H0F0D
00000005717F 000000458D7F 0 8http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0
0000000572E3 000000458EE3 0 N=|)H
00000005741C 00000045901C 0 microsoft1-0+
000000057430 000000459030 0 $Microsoft Root Certificate Authority0
000000057459 000000459059 0 070403125309Z
000000057468 000000459068 0 210403130309Z0w1
00000005748F 00000045908F 0 Washington1
0000000574A4 0000004590A4 0 Redmond1
0000000574B6 0000004590B6 0 Microsoft Corporation1!0
0000000574D6 0000004590D6 0 Microsoft Time-Stamp PCA0
0000000576BB 0000004592BB 0 microsoft1-0+
0000000576CF 0000004592CF 0 $Microsoft Root Certificate Authority
00000005770E 00000045930E 0 I0G0E
000000057718 000000459318 0 ?http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0T
000000057765 000000459365 0 H0F0D
000000057775 000000459375 0 8http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0
0000000577EB 0000004593EB 0 .tq[m
000000057871 000000459471 0 1Jv1=+r
00000005792A 00000045952A 0 L&*H$_Z
0000000579FF 0000004595FF 0 Washington1
000000057A14 000000459614 0 Redmond1
000000057A26 000000459626 0 Microsoft Corporation1#0!
000000057A46 000000459646 0 Microsoft Code Signing PCA
000000057B26 000000459726 0 *http://technet.microsoft.com/sysinternals 0
000000057C9F 00000045989F 0 Washington1
000000057CB4 0000004598B4 0 Redmond1
000000057CC6 0000004598C6 0 Microsoft Corporation1!0
000000057CE6 0000004598E6 0 Microsoft Time-Stamp PCA
000000057D42 000000459942 0 130109222603Z0#
000000057E7B 000000459A7B 0 F2YB-i
000000057F38 000000459B38 0 .?AV?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@
File pos Mem pos ID Text
======== ======= == ====
000000058060 00000045C060 0 <?xml version='1.0' encoding='UTF-8' standalone='yes'?>
000000058099 00000045C099 0 <assembly xmlns='urn:schemas-microsoft-com:asm.v1' manifestVersion='1.0'>
0000000580E4 00000045C0E4 0 <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
00000005811C 00000045C11C 0 <security>
00000005812C 00000045C12C 0 <requestedPrivileges>
000000058149 00000045C149 0 <requestedExecutionLevel level='asInvoker' uiAccess='false' />
000000058191 00000045C191 0 </requestedPrivileges>
0000000581AF 00000045C1AF 0 </security>
0000000581C0 00000045C1C0 0 </trustInfo>
0000000581D0 00000045C1D0 0 </assembly>
00000005820D 00000045D00D 0 011h1
000000058215 00000045D015 0 1,282V2h2
00000005821F 00000045D01F 0 2$3/363B4M4T4
000000058239 00000045D039 0 :':F:X:
000000058247 00000045D047 0 <8=B=M=0>L>w>
000000058275 00000045D075 0 1M2i2
000000058285 00000045D085 0 3$3r3
00000005829D 00000045D09D 0 6W7B8M8
0000000582A7 00000045D0A7 0 819:9
0000000582B1 00000045D0B1 0 9 :+:9:>;g;
0000000582C1 00000045D0C1 0 <5<=<o<
0000000582F3 00000045D0F3 0 666E6t6z6
00000005830B 00000045D10B 0 7f7u7
00000005831D 00000045D11D 0 708=8O8
00000005834D 00000045D14D 0 =&>8>
00000005836F 00000045D16F 0 1-2L2
00000005837D 00000045D17D 0 3E3d3
000000058387 00000045D187 0 4*4G4N4
000000058397 00000045D197 0 7N7{7
00000005839D 00000045D19D 0 7/8k8}8
0000000583AB 00000045D1AB 0 8/9L9S9
0000000583BD 00000045D1BD 0 :8;f;x;
0000000583C7 00000045D1C7 0 ;U<]<j<u<
0000000583D1 00000045D1D1 0 <I=]=
0000000583E9 00000045D1E9 0 0Z2g2r2
0000000583FD 00000045D1FD 0 3F6X6
000000058409 00000045D209 0 :$:.:k;u;
000000058443 00000045D243 0 2*2H2S2}2
00000005845F 00000045D25F 0 3&3/363
000000058473 00000045D273 0 434>4G4U4v4
00000005848B 00000045D28B 0 7Z8z8
000000058493 00000045D293 0 8Z9}9
0000000584AD 00000045D2AD 0 =J>b>
0000000584D5 00000045D2D5 0 :4:::P:W:]:b:p:
0000000584E9 00000045D2E9 0 :&;8;x;
000000058509 00000045D309 0 =X=>>M>U>i>
000000058565 00000045D365 0 7D8H8L8P8T8X8\8
00000005857B 00000045D37B 0 8F9v:
00000005858B 00000045D38B 0 ; ;$;
0000000585A1 00000045D3A1 0 > >x>
0000000585C1 00000045D3C1 0 3 4w4
0000000585E1 00000045D3E1 0 9&:X<g<
0000000585FD 00000045D3FD 0 0x142O2v2
000000058619 00000045D419 0 5%5+505C5H5M5T5
000000058633 00000045D433 0 6#6:6A6
000000058647 00000045D447 0 7-7F7U7
000000058653 00000045D453 0 8&8~8
000000058689 00000045D489 0 :';c;
000000058697 00000045D497 0 <D<b<
0000000586A9 00000045D4A9 0 =!=/=?=H=V=_=
File pos Mem pos ID Text
======== ======= == ====
0000000586E9 00000045D4E9 0 4+4n4}4
000000058703 00000045D503 0 5P6p6
000000058715 00000045D515 0 878Z8f8
000000058725 00000045D525 0 9F9V9u9|9
00000005873F 00000045D53F 0 :(:.:R:X:
000000058753 00000045D553 0 :I;S;
000000058761 00000045D561 0 ;D<U<
00000005876D 00000045D56D 0 <R=c=j=r=
0000000587A5 00000045D5A5 0 0/0I0P0l0
0000000587B5 00000045D5B5 0 101C1
0000000587D9 00000045D5D9 0 9\:K<c>k>u>
00000005880D 00000045D60D 0 2(2.2R2e2
000000058829 00000045D629 0 353A3
000000058835 00000045D635 0 4+434c4
00000005883F 00000045D63F 0 4E6c6|6
00000005885F 00000045D65F 0 7 7$7(7r7x7|7
000000058879 00000045D679 0 8 8$8E8o8
0000000588BF 00000045D6BF 0 <D<J<P<V<\<b<i<p<w<~<
0000000588F3 00000045D6F3 0 =I=O=U=[=a=g=n=u=|=
000000058933 00000045D733 0 ?3?w?
000000058947 00000045D747 0 0#0B0a0x0
00000005895B 00000045D75B 0 2h4R5
000000058963 00000045D763 0 6"6N6X6
000000058979 00000045D779 0 7#7(7:7E7J7a7k7
00000005898B 00000045D78B 0 7(8?8L8X8h8n8
0000000589C3 00000045D7C3 0 :8;=;G;
0000000589CD 00000045D7CD 0 ;3<[<i<
0000000589D5 00000045D7D5 0 >3>L>S>[>
0000000589DF 00000045D7DF 0 >d>h>
0000000589F9 00000045D7F9 0 >B?H?L?P?T?
000000058A1D 00000045D81D 0 0?0q0x0|0
000000058A49 00000045D849 0 4L5d5i5
000000058A59 00000045D859 0 8%8E8M8f8M9
000000058A6D 00000045D86D 0 ;!<(<=<G<
000000058A7D 00000045D87D 0 >6>A>_>
000000058A99 00000045D899 0 0k0w0
000000058AB1 00000045D8B1 0 1=1J1S1w1
000000058ACD 00000045D8CD 0 4'4.4
000000058AD3 00000045D8D3 0 4L5S5u5|5!6T7 8s8
000000058AE7 00000045D8E7 0 8:9D:g:
000000058AF7 00000045D8F7 0 ; ;6;?;K;V;{;
000000058B11 00000045D911 0 <-<3<<<
000000058B2D 00000045D92D 0 1@3J3U3
000000058B43 00000045D943 0 :'; <
000000058B53 00000045D953 0 =G=P=
000000058BA7 00000045D9A7 0 2$262O2U2p2
000000058BD9 00000045D9D9 0 3"3'3-353:3@3H3M3S3[3
000000058BEF 00000045D9EF 0 3f3n3s3y3
000000058C2B 00000045DA2B 0 4$4,41474?4D4J4R4W4]4e4j4p4x4}4
000000058C73 00000045DA73 0 5 5)5p5
000000058C9F 00000045DA9F 0 =#='=+=/=3=7=;=?=C=G=K=O=S=W=[=_=c=g=k=o=s=w=
000000058CE9 00000045DAE9 0 ?(?.?@?S?Y?t?~?
000000058D35 00000045DB35 0 4,4k4
000000058D51 00000045DB51 0 5%5/5]5p5
000000058D69 00000045DB69 0 7?8E8g8w8Y9
000000058D81 00000045DB81 0 <H<P<
000000058D91 00000045DB91 0 =.=S=o=
000000058D9F 00000045DB9F 0 >->F>W>
000000058DB0 00000045DBB0 0 >0Y0o0
000000058DD3 00000045DBD3 0 6J7}7
File pos Mem pos ID Text
======== ======= == ====
000000058DD9 00000045DBD9 0 7*8r8
000000058DE3 00000045DBE3 0 9':.:
000000058DEF 00000045DBEF 0 ;!<1<\<m<z<
000000058E09 00000045DC09 0 >.?e?q?
000000058E31 00000045DC31 0 4F4O4
000000058E43 00000045DC43 0 6q7z7f8
000000058E4F 00000045DC4F 0 849H9
000000058E65 00000045DC65 0 ;i;n;
000000058E73 00000045DC73 0 <;<O<U<
000000058E83 00000045DC83 0 =$=K=
000000058E9D 00000045DC9D 0 =$>)>h>m>v>{>
000000058ECF 00000045DCCF 0 040@0J0W0a0q0
000000058EEF 00000045DCEF 0 2 3*3
000000058F01 00000045DD01 0 4"4<4W4
000000058F09 00000045DD09 0 4f4o4t4
000000058F19 00000045DD19 0 5L5_5
000000058F1F 00000045DD1F 0 5,6S6
000000058F29 00000045DD29 0 63797E7
000000058F39 00000045DD39 0 8J8V8
000000058F45 00000045DD45 0 9!9D9J9Q9
000000058F53 00000045DD53 0 9!:::v:
000000058F6F 00000045DD6F 0 <4=@=J=[=f=
000000058F8B 00000045DD8B 0 >%>T>\>k>
000000058FB0 00000045DDB0 0 U0g0x1
000000058FBD 00000045DDBD 0 1U2v2
000000058FD7 00000045DDD7 0 8&818<8D8
000000059013 00000045DE13 0 0+1f1
00000005902F 00000045DE2F 0 6,6Z6
000000059053 00000045DE53 0 :i;+<
000000059079 00000045DE79 0 060$5{5
000000059081 00000045DE81 0 5r718y;
0000000590B3 00000045DEB3 0 2+212@2G2W2]2c2k2q2w2
0000000590E5 00000045DEE5 0 3K3c3|3M4
0000000590EF 00000045DEEF 0 4k5}5
000000059105 00000045DF05 0 616C6
000000059115 00000045DF15 0 :(:::L:
000000059121 00000045DF21 0 ;6<@<H<P<X<
000000059134 00000045DF34 0 60A0O0o8
00000005913F 00000045DF3F 0 8;9X9
000000059149 00000045DF49 0 :@:m=Z>
00000005918B 00000045DF8B 0 </<8<Z<v<
00000005919B 00000045DF9B 0 <)=;=x=
0000000591B9 00000045DFB9 0 >4?E?
0000000591D7 00000045DFD7 0 0-1<1[1
0000000591EB 00000045DFEB 0 7p7{7
0000000591F9 00000045DFF9 0 9P:\:
000000059201 00000045E001 0 :&;2;x;
000000059231 00000045E031 0 0%1y1
000000059239 00000045E039 0 1'2Z2t2
000000059245 00000045E045 0 3T4i4
000000059255 00000045E055 0 5*5I5V5
000000059267 00000045E067 0 6j6~6
00000005926F 00000045E06F 0 6C7]7m7
000000059281 00000045E081 0 8]9i9s9
00000005928F 00000045E08F 0 9;:f:
0000000592C1 00000045E0C1 0 6 6e6
0000000592D1 00000045E0D1 0 :):O:
0000000592DB 00000045E0DB 0 <(<.<3<
0000000592F0 00000045E0F0 0 ?0a1i1
0000000592FB 00000045E0FB 0 3=4C4Q4
File pos Mem pos ID Text
======== ======= == ====
00000005931D 00000045E11D 0 9\:s:
000000059367 00000045E167 0 031:1p1
000000059381 00000045E181 0 :-:d:
00000005938D 00000045E18D 0 ;3;j;
0000000593A9 00000045E1A9 0 >2>R>
0000000593C5 00000045E1C5 0 0 1r1
0000000593D3 00000045E1D3 0 2"3R3
0000000593EB 00000045E1EB 0 4"43484B4S4X4b4q4}4
00000005941D 00000045E21D 0 5)595>5H5[5p5t5~5
000000059443 00000045E243 0 6!62666B6F6R6V6f6p6}6
000000059469 00000045E269 0 7&707=7]7g7q7
0000000594A4 00000045E2A4 0 P2T2X2\2
0000000594AD 00000045E2AD 0 2d2h2l2p2t2x2|2
0000000594ED 00000045E2ED 0 3$3,343<3D3L3T3\3d3l3t3|3
00000005952D 00000045E32D 0 4$4,444<4D4L4T4\4d4l4t4|4
00000005956D 00000045E36D 0 5$5,5<5D5L5T5\5d5l5t5|5
0000000595AB 00000045E3AB 0 6$6,646<6D6L6T6\6d6l6t6|6
0000000595EB 00000045E3EB 0 7$7,747<7D7L7T7\7d7l7t7|7
000000059618 00000045E418 0 80<0@0D0H0L0P0T0X0\0
00000005962D 00000045E42D 0 0d0h0l0p0t0x0|0
00000005967F 00000045E47F 0 1 1$1(1,1014181<1@1D1H1L1P1T1X1\1
0000000596A1 00000045E4A1 0 1d1h1l1p1t1x1|1
0000000596F9 00000045E4F9 0 2 2$2(2,2024282<2@2
000000059725 00000045E525 0 3 3$3(3,3034383<3@3D3H3L3(4,4044484<4@4X4\4
00000005975B 00000045E55B 0 <d?l?t?|?
000000059793 00000045E593 0 0$0,040<0D0L0T0\0d0l0t0|0
0000000597D3 00000045E5D3 0 1$1,141<1D1L1T1\1d1l1t1|1
000000059813 00000045E613 0 2$2,242<2D2L2T2\2d2l2t2|2
000000059853 00000045E653 0 3$3,343<3D3L3T3\3d3l3t3|3
000000059893 00000045E693 0 4$4,444<4D4L4T4\4d4l4t4|4
0000000598D3 00000045E6D3 0 5$5,545<5D5L5T5\5d5l5t5|5
000000059913 00000045E713 0 6$6,646<6D6L6T6\6d6l6t6|6
000000059953 00000045E753 0 7 7(70787@7H7P7X7
000000059965 00000045E765 0 7h7p7x7
000000059993 00000045E793 0 8 8(80888@8H8P8X8
0000000599A5 00000045E7A5 0 8h8p8x8
0000000599D3 00000045E7D3 0 9 9(90989@9H9P9X9
0000000599E5 00000045E7E5 0 9h9p9x9
000000059A13 00000045E813 0 : :(:0:8:@:H:P:X:
000000059A25 00000045E825 0 :h:p:x:
000000059A53 00000045E853 0 ; ;(;0;8;@;H;P;X;
000000059A65 00000045E865 0 ;h;p;x;
000000059A93 00000045E893 0 < <(<0<8<@<H<P<X<
000000059AA5 00000045E8A5 0 <h<p<x<
000000059AD3 00000045E8D3 0 = =(=0=8=@=H=P=X=
000000059AE5 00000045E8E5 0 =h=p=x=
000000059B1D 00000045E91D 0 9$9,949<9D9L9
000000059BAB 00000045E9AB 0 3 3$3(3,3034383<3@3D3H3L3P3T3X3\3
000000059BCD 00000045E9CD 0 3d3h3l3p3t3x3|3
000000059C23 00000045EA23 0 :(:4:@:L:X:d:p:|:
000000059C4D 00000045EA4D 0 ;$;0;<;H;T;
000000059C59 00000045EA59 0 ;l;x;
000000059C77 00000045EA77 0 < <,<8<D<P<\<h<t<
000000059CBB 00000045EABB 0 5 5,585D5P5\5h5t5
000000059CF9 00000045EAF9 0 <$<(<,<4<L<\<
000000059D07 00000045EB07 0 <p<t<x<|<
000000059D2F 00000045EB2F 0 =$=<=L=P=
000000059D39 00000045EB39 0 =d=h=p=
000000059D5B 00000045EB5B 0 >(>8><>L>P>X>p>
000000059D87 00000045EB87 0 ?(?,?<?@?D?L?d?t?x?|?
File pos Mem pos ID Text
======== ======= == ====
000000059DC3 00000045EBC3 0 0 0$0(000H0X0\0l0p0x0
000000059DF5 00000045EBF5 0 1$1<1L1P1h1x1|1
000000059E1F 00000045EC1F 0 2 202@2D2H2L2
000000059E2D 00000045EC2D 0 2d2h2l2
000000059E5F 00000045EC5F 0 303@3D3T3d3t3
000000059E85 00000045EC85 0 4,4<4@4X4\4
000000059E91 00000045EC91 0 4d4x4|4
000000059EB9 00000045ECB9 0 505@5D5
000000059EC1 00000045ECC1 0 6$6,60686L6T6h6p6x6
000000059EF1 00000045ECF1 0 7 7@7L7l7x7
000000059F09 00000045ED09 0 8(8H8T8
000000059F19 00000045ED19 0 9$9(9H9h9
000000059F2D 00000045ED2D 0 :0:P:p:x:|:
000000059F49 00000045ED49 0 ; ;(;T;X;
000000059F53 00000045ED53 0 ;h;p;t;|;
000000059F69 00000045ED69 0 < <@<
000000059F7F 00000045ED7F 0 = =@=
000000059F95 00000045ED95 0 >0>P>p>
000000059FA7 00000045EDA7 0 ?8?@?H?P?d?l?t?|?
000000059FDF 00000045EDDF 0 0 0,040x0
000000059FF5 00000045EDF5 0 0 101<1\1d1l1t1
00000005A011 00000045EE11 0 2$202P2\2|2
00000005A02D 00000045EE2D 0 3<3H3h3p3x3
00000005A051 00000045EE51 0 4$4,444<4D4L4T4\4d4l4t4|4
00000005A08F 00000045EE8F 0 5 5@5L5l5t5|5
00000005A0AD 00000045EEAD 0 6 6(646T6
00000005A0D1 00000045EED1 0 7$7<7D7h7x7
00000005A0ED 00000045EEED 0 8$8,848<8D8L8T8\8h8p8
00000005A11B 00000045EF1B 0 0<0\0|0
00000005A137 00000045EF37 0 4 4$4(4,4044484<4@4D4P4T4X4\4
00000005A155 00000045EF55 0 4d4h4l4
00000005A165 00000045EF65 0 94:<:D:L:T:\:d:l:t:|:
00000005A19F 00000045EF9F 0 ;8;<;@;D;H;L;P;T;X;\;
00000005A1B5 00000045EFB5 0 ;d;h;l;p;t;x;|;
00000005A20F 00000045F00F 0 < <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<
00000005A231 00000045F031 0 <d<h<l<p<t<x<|<
00000005A259 00000045F059 0 =$=0=4=8=<=
00000005A265 00000045F065 0 =d=p=t=x=|=
00000005A28D 00000045F08D 0 3P8|8
00000005A299 00000045F099 0 949P9t9
000000027263 000000428463 0 @mscoree.dll
000000027ADB 000000428CDB 0 Akernel32.dll
000000028BB8 000000429DB8 0 zh-CHS
000000028DB8 000000429FB8 0 ar-SA
000000028DC4 000000429FC4 0 bg-BG
000000028DD0 000000429FD0 0 ca-ES
000000028DDC 000000429FDC 0 zh-TW
000000028DE8 000000429FE8 0 cs-CZ
000000028DF4 000000429FF4 0 da-DK
000000028E00 00000042A000 0 de-DE
000000028E0C 00000042A00C 0 el-GR
000000028E18 00000042A018 0 en-US
000000028E24 00000042A024 0 fi-FI
000000028E30 00000042A030 0 fr-FR
000000028E3C 00000042A03C 0 he-IL
000000028E48 00000042A048 0 hu-HU
000000028E54 00000042A054 0 is-IS
000000028E60 00000042A060 0 it-IT
000000028E6C 00000042A06C 0 ja-JP
000000028E78 00000042A078 0 ko-KR
File pos Mem pos ID Text
======== ======= == ====
000000028E84 00000042A084 0 nl-NL
000000028E90 00000042A090 0 nb-NO
000000028E9C 00000042A09C 0 pl-PL
000000028EA8 00000042A0A8 0 pt-BR
000000028EB4 00000042A0B4 0 ro-RO
000000028EC0 00000042A0C0 0 ru-RU
000000028ECC 00000042A0CC 0 hr-HR
000000028ED8 00000042A0D8 0 sk-SK
000000028EE4 00000042A0E4 0 sq-AL
000000028EF0 00000042A0F0 0 sv-SE
000000028EFC 00000042A0FC 0 th-TH
000000028F08 00000042A108 0 tr-TR
000000028F14 00000042A114 0 ur-PK
000000028F20 00000042A120 0 id-ID
000000028F2C 00000042A12C 0 uk-UA
000000028F38 00000042A138 0 be-BY
000000028F44 00000042A144 0 sl-SI
000000028F50 00000042A150 0 et-EE
000000028F5C 00000042A15C 0 lv-LV
000000028F68 00000042A168 0 lt-LT
000000028F74 00000042A174 0 fa-IR
000000028F80 00000042A180 0 vi-VN
000000028F8C 00000042A18C 0 hy-AM
000000028F98 00000042A198 0 az-AZ-Latn
000000028FB0 00000042A1B0 0 eu-ES
000000028FBC 00000042A1BC 0 mk-MK
000000028FC8 00000042A1C8 0 tn-ZA
000000028FD4 00000042A1D4 0 xh-ZA
000000028FE0 00000042A1E0 0 zu-ZA
000000028FEC 00000042A1EC 0 af-ZA
000000028FF8 00000042A1F8 0 ka-GE
000000029004 00000042A204 0 fo-FO
000000029010 00000042A210 0 hi-IN
00000002901C 00000042A21C 0 mt-MT
000000029028 00000042A228 0 se-NO
000000029034 00000042A234 0 ms-MY
000000029040 00000042A240 0 kk-KZ
00000002904C 00000042A24C 0 ky-KG
000000029058 00000042A258 0 sw-KE
000000029064 00000042A264 0 uz-UZ-Latn
00000002907C 00000042A27C 0 tt-RU
000000029088 00000042A288 0 bn-IN
000000029094 00000042A294 0 pa-IN
0000000290A0 00000042A2A0 0 gu-IN
0000000290AC 00000042A2AC 0 ta-IN
0000000290B8 00000042A2B8 0 te-IN
0000000290C4 00000042A2C4 0 kn-IN
0000000290D0 00000042A2D0 0 ml-IN
0000000290DC 00000042A2DC 0 mr-IN
0000000290E8 00000042A2E8 0 sa-IN
0000000290F4 00000042A2F4 0 mn-MN
000000029100 00000042A300 0 cy-GB
00000002910C 00000042A30C 0 gl-ES
000000029118 00000042A318 0 kok-IN
000000029128 00000042A328 0 syr-SY
000000029138 00000042A338 0 div-MV
000000029148 00000042A348 0 quz-BO
000000029158 00000042A358 0 ns-ZA
000000029164 00000042A364 0 mi-NZ
000000029170 00000042A370 0 ar-IQ
File pos Mem pos ID Text
======== ======= == ====
00000002917C 00000042A37C 0 zh-CN
000000029188 00000042A388 0 de-CH
000000029194 00000042A394 0 en-GB
0000000291A0 00000042A3A0 0 es-MX
0000000291AC 00000042A3AC 0 fr-BE
0000000291B8 00000042A3B8 0 it-CH
0000000291C4 00000042A3C4 0 nl-BE
0000000291D0 00000042A3D0 0 nn-NO
0000000291DC 00000042A3DC 0 pt-PT
0000000291E8 00000042A3E8 0 sr-SP-Latn
000000029200 00000042A400 0 sv-FI
00000002920C 00000042A40C 0 az-AZ-Cyrl
000000029224 00000042A424 0 se-SE
000000029230 00000042A430 0 ms-BN
00000002923C 00000042A43C 0 uz-UZ-Cyrl
000000029254 00000042A454 0 quz-EC
000000029264 00000042A464 0 ar-EG
000000029270 00000042A470 0 zh-HK
00000002927C 00000042A47C 0 de-AT
000000029288 00000042A488 0 en-AU
000000029294 00000042A494 0 es-ES
0000000292A0 00000042A4A0 0 fr-CA
0000000292AC 00000042A4AC 0 sr-SP-Cyrl
0000000292C4 00000042A4C4 0 se-FI
0000000292D0 00000042A4D0 0 quz-PE
0000000292E0 00000042A4E0 0 ar-LY
0000000292EC 00000042A4EC 0 zh-SG
0000000292F8 00000042A4F8 0 de-LU
000000029304 00000042A504 0 en-CA
000000029310 00000042A510 0 es-GT
00000002931C 00000042A51C 0 fr-CH
000000029328 00000042A528 0 hr-BA
000000029334 00000042A534 0 smj-NO
000000029344 00000042A544 0 ar-DZ
000000029350 00000042A550 0 zh-MO
00000002935C 00000042A55C 0 de-LI
000000029368 00000042A568 0 en-NZ
000000029374 00000042A574 0 es-CR
000000029380 00000042A580 0 fr-LU
00000002938C 00000042A58C 0 bs-BA-Latn
0000000293A4 00000042A5A4 0 smj-SE
0000000293B4 00000042A5B4 0 ar-MA
0000000293C0 00000042A5C0 0 en-IE
0000000293CC 00000042A5CC 0 es-PA
0000000293D8 00000042A5D8 0 fr-MC
0000000293E4 00000042A5E4 0 sr-BA-Latn
0000000293FC 00000042A5FC 0 sma-NO
00000002940C 00000042A60C 0 ar-TN
000000029418 00000042A618 0 en-ZA
000000029424 00000042A624 0 es-DO
000000029430 00000042A630 0 sr-BA-Cyrl
000000029448 00000042A648 0 sma-SE
000000029458 00000042A658 0 ar-OM
000000029464 00000042A664 0 en-JM
000000029470 00000042A670 0 es-VE
00000002947C 00000042A67C 0 sms-FI
00000002948C 00000042A68C 0 ar-YE
000000029498 00000042A698 0 en-CB
0000000294A4 00000042A6A4 0 es-CO
0000000294B0 00000042A6B0 0 smn-FI
File pos Mem pos ID Text
======== ======= == ====
0000000294C0 00000042A6C0 0 ar-SY
0000000294CC 00000042A6CC 0 en-BZ
0000000294D8 00000042A6D8 0 es-PE
0000000294E4 00000042A6E4 0 ar-JO
0000000294F0 00000042A6F0 0 en-TT
0000000294FC 00000042A6FC 0 es-AR
000000029508 00000042A708 0 ar-LB
000000029514 00000042A714 0 en-ZW
000000029520 00000042A720 0 es-EC
00000002952C 00000042A72C 0 ar-KW
000000029538 00000042A738 0 en-PH
000000029544 00000042A744 0 es-CL
000000029550 00000042A750 0 ar-AE
00000002955C 00000042A75C 0 es-UY
000000029568 00000042A768 0 ar-BH
000000029574 00000042A774 0 es-PY
000000029580 00000042A780 0 ar-QA
00000002958C 00000042A78C 0 es-BO
000000029598 00000042A798 0 es-SV
0000000295A4 00000042A7A4 0 es-HN
0000000295B0 00000042A7B0 0 es-NI
0000000295BC 00000042A7BC 0 es-PR
0000000295C8 00000042A7C8 0 zh-CHT
0000000295E0 00000042A7E0 0 af-za
0000000295EC 00000042A7EC 0 ar-ae
0000000295F8 00000042A7F8 0 ar-bh
000000029604 00000042A804 0 ar-dz
000000029610 00000042A810 0 ar-eg
00000002961C 00000042A81C 0 ar-iq
000000029628 00000042A828 0 ar-jo
000000029634 00000042A834 0 ar-kw
000000029640 00000042A840 0 ar-lb
00000002964C 00000042A84C 0 ar-ly
000000029658 00000042A858 0 ar-ma
000000029664 00000042A864 0 ar-om
000000029670 00000042A870 0 ar-qa
00000002967C 00000042A87C 0 ar-sa
000000029688 00000042A888 0 ar-sy
000000029694 00000042A894 0 ar-tn
0000000296A0 00000042A8A0 0 ar-ye
0000000296AC 00000042A8AC 0 az-az-cyrl
0000000296C4 00000042A8C4 0 az-az-latn
0000000296DC 00000042A8DC 0 be-by
0000000296E8 00000042A8E8 0 bg-bg
0000000296F4 00000042A8F4 0 bn-in
000000029700 00000042A900 0 bs-ba-latn
000000029718 00000042A918 0 ca-es
000000029724 00000042A924 0 cs-cz
000000029730 00000042A930 0 cy-gb
00000002973C 00000042A93C 0 da-dk
000000029748 00000042A948 0 de-at
000000029754 00000042A954 0 de-ch
000000029760 00000042A960 0 de-de
00000002976C 00000042A96C 0 de-li
000000029778 00000042A978 0 de-lu
000000029784 00000042A984 0 div-mv
000000029794 00000042A994 0 el-gr
0000000297A0 00000042A9A0 0 en-au
0000000297AC 00000042A9AC 0 en-bz
0000000297B8 00000042A9B8 0 en-ca
File pos Mem pos ID Text
======== ======= == ====
0000000297C4 00000042A9C4 0 en-cb
0000000297D0 00000042A9D0 0 en-gb
0000000297DC 00000042A9DC 0 en-ie
0000000297E8 00000042A9E8 0 en-jm
0000000297F4 00000042A9F4 0 en-nz
000000029800 00000042AA00 0 en-ph
00000002980C 00000042AA0C 0 en-tt
000000029818 00000042AA18 0 en-us
000000029824 00000042AA24 0 en-za
000000029830 00000042AA30 0 en-zw
00000002983C 00000042AA3C 0 es-ar
000000029848 00000042AA48 0 es-bo
000000029854 00000042AA54 0 es-cl
000000029860 00000042AA60 0 es-co
00000002986C 00000042AA6C 0 es-cr
000000029878 00000042AA78 0 es-do
000000029884 00000042AA84 0 es-ec
000000029890 00000042AA90 0 es-es
00000002989C 00000042AA9C 0 es-gt
0000000298A8 00000042AAA8 0 es-hn
0000000298B4 00000042AAB4 0 es-mx
0000000298C0 00000042AAC0 0 es-ni
0000000298CC 00000042AACC 0 es-pa
0000000298D8 00000042AAD8 0 es-pe
0000000298E4 00000042AAE4 0 es-pr
0000000298F0 00000042AAF0 0 es-py
0000000298FC 00000042AAFC 0 es-sv
000000029908 00000042AB08 0 es-uy
000000029914 00000042AB14 0 es-ve
000000029920 00000042AB20 0 et-ee
00000002992C 00000042AB2C 0 eu-es
000000029938 00000042AB38 0 fa-ir
000000029944 00000042AB44 0 fi-fi
000000029950 00000042AB50 0 fo-fo
00000002995C 00000042AB5C 0 fr-be
000000029968 00000042AB68 0 fr-ca
000000029974 00000042AB74 0 fr-ch
000000029980 00000042AB80 0 fr-fr
00000002998C 00000042AB8C 0 fr-lu
000000029998 00000042AB98 0 fr-mc
0000000299A4 00000042ABA4 0 gl-es
0000000299B0 00000042ABB0 0 gu-in
0000000299BC 00000042ABBC 0 he-il
0000000299C8 00000042ABC8 0 hi-in
0000000299D4 00000042ABD4 0 hr-ba
0000000299E0 00000042ABE0 0 hr-hr
0000000299EC 00000042ABEC 0 hu-hu
0000000299F8 00000042ABF8 0 hy-am
000000029A04 00000042AC04 0 id-id
000000029A10 00000042AC10 0 is-is
000000029A1C 00000042AC1C 0 it-ch
000000029A28 00000042AC28 0 it-it
000000029A34 00000042AC34 0 ja-jp
000000029A40 00000042AC40 0 ka-ge
000000029A4C 00000042AC4C 0 kk-kz
000000029A58 00000042AC58 0 kn-in
000000029A64 00000042AC64 0 kok-in
000000029A74 00000042AC74 0 ko-kr
000000029A80 00000042AC80 0 ky-kg
000000029A8C 00000042AC8C 0 lt-lt
File pos Mem pos ID Text
======== ======= == ====
000000029A98 00000042AC98 0 lv-lv
000000029AA4 00000042ACA4 0 mi-nz
000000029AB0 00000042ACB0 0 mk-mk
000000029ABC 00000042ACBC 0 ml-in
000000029AC8 00000042ACC8 0 mn-mn
000000029AD4 00000042ACD4 0 mr-in
000000029AE0 00000042ACE0 0 ms-bn
000000029AEC 00000042ACEC 0 ms-my
000000029AF8 00000042ACF8 0 mt-mt
000000029B04 00000042AD04 0 nb-no
000000029B10 00000042AD10 0 nl-be
000000029B1C 00000042AD1C 0 nl-nl
000000029B28 00000042AD28 0 nn-no
000000029B34 00000042AD34 0 ns-za
000000029B40 00000042AD40 0 pa-in
000000029B4C 00000042AD4C 0 pl-pl
000000029B58 00000042AD58 0 pt-br
000000029B64 00000042AD64 0 pt-pt
000000029B70 00000042AD70 0 quz-bo
000000029B80 00000042AD80 0 quz-ec
000000029B90 00000042AD90 0 quz-pe
000000029BA0 00000042ADA0 0 ro-ro
000000029BAC 00000042ADAC 0 ru-ru
000000029BB8 00000042ADB8 0 sa-in
000000029BC4 00000042ADC4 0 se-fi
000000029BD0 00000042ADD0 0 se-no
000000029BDC 00000042ADDC 0 se-se
000000029BE8 00000042ADE8 0 sk-sk
000000029BF4 00000042ADF4 0 sl-si
000000029C00 00000042AE00 0 sma-no
000000029C10 00000042AE10 0 sma-se
000000029C20 00000042AE20 0 smj-no
000000029C30 00000042AE30 0 smj-se
000000029C40 00000042AE40 0 smn-fi
000000029C50 00000042AE50 0 sms-fi
000000029C60 00000042AE60 0 sq-al
000000029C6C 00000042AE6C 0 sr-ba-cyrl
000000029C84 00000042AE84 0 sr-ba-latn
000000029C9C 00000042AE9C 0 sr-sp-cyrl
000000029CB4 00000042AEB4 0 sr-sp-latn
000000029CCC 00000042AECC 0 sv-fi
000000029CD8 00000042AED8 0 sv-se
000000029CE4 00000042AEE4 0 sw-ke
000000029CF0 00000042AEF0 0 syr-sy
000000029D00 00000042AF00 0 ta-in
000000029D0C 00000042AF0C 0 te-in
000000029D18 00000042AF18 0 th-th
000000029D24 00000042AF24 0 tn-za
000000029D30 00000042AF30 0 tr-tr
000000029D3C 00000042AF3C 0 tt-ru
000000029D48 00000042AF48 0 uk-ua
000000029D54 00000042AF54 0 ur-pk
000000029D60 00000042AF60 0 uz-uz-cyrl
000000029D78 00000042AF78 0 uz-uz-latn
000000029D90 00000042AF90 0 vi-vn
000000029D9C 00000042AF9C 0 xh-za
000000029DA8 00000042AFA8 0 zh-chs
000000029DB8 00000042AFB8 0 zh-cht
000000029DC8 00000042AFC8 0 zh-cn
000000029DD4 00000042AFD4 0 zh-hk
File pos Mem pos ID Text
======== ======= == ====
000000029DE0 00000042AFE0 0 zh-mo
000000029DEC 00000042AFEC 0 zh-sg
000000029DF8 00000042AFF8 0 zh-tw
000000029E04 00000042B004 0 zu-za
00000002A678 00000042B878 0 runtime error
00000002A7CC 00000042B9CC 0 Program:
00000002A7E0 00000042B9E0 0 <program name unknown>
00000002A820 00000042BA20 0 Microsoft Visual C++ Runtime Library
00000002AB3C 00000042BD3C 0 Sunday
00000002AB4C 00000042BD4C 0 Monday
00000002AB5C 00000042BD5C 0 Tuesday
00000002AB6C 00000042BD6C 0 Wednesday
00000002AB80 00000042BD80 0 Thursday
00000002AB94 00000042BD94 0 Friday
00000002ABA4 00000042BDA4 0 Saturday
00000002AC18 00000042BE18 0 January
00000002AC28 00000042BE28 0 February
00000002AC3C 00000042BE3C 0 March
00000002AC48 00000042BE48 0 April
00000002AC6C 00000042BE6C 0 August
00000002AC7C 00000042BE7C 0 September
00000002AC90 00000042BE90 0 October
00000002ACA0 00000042BEA0 0 November
00000002ACB4 00000042BEB4 0 December
00000002ACD8 00000042BED8 0 MM/dd/yy
00000002ACEC 00000042BEEC 0 dddd, MMMM dd, yyyy
00000002AD14 00000042BF14 0 HH:mm:ss
00000002AD30 00000042BF30 0 (null)
00000002AE17 00000042C017 0 ALC_ALL
00000002AE28 00000042C028 0 LC_COLLATE
00000002AE40 00000042C040 0 LC_CTYPE
00000002AE54 00000042C054 0 LC_MONETARY
00000002AE6C 00000042C06C 0 LC_NUMERIC
00000002AE84 00000042C084 0 LC_TIME
00000002B004 00000042C204 0 USER32.DLL
00000002BB1C 00000042CD1C 0 american
00000002BB30 00000042CD30 0 american english
00000002BB54 00000042CD54 0 american-english
00000002BB78 00000042CD78 0 australian
00000002BB90 00000042CD90 0 belgian
00000002BBA0 00000042CDA0 0 canadian
00000002BBC4 00000042CDC4 0 chinese
00000002BBD4 00000042CDD4 0 chinese-hongkong
00000002BBF8 00000042CDF8 0 chinese-simplified
00000002BC20 00000042CE20 0 chinese-singapore
00000002BC44 00000042CE44 0 chinese-traditional
00000002BC6C 00000042CE6C 0 dutch-belgian
00000002BC88 00000042CE88 0 english-american
00000002BCAC 00000042CEAC 0 english-aus
00000002BCC4 00000042CEC4 0 english-belize
00000002BCE4 00000042CEE4 0 english-can
00000002BCFC 00000042CEFC 0 english-caribbean
00000002BD20 00000042CF20 0 english-ire
00000002BD38 00000042CF38 0 english-jamaica
00000002BD58 00000042CF58 0 english-nz
00000002BD70 00000042CF70 0 english-south africa
00000002BD9C 00000042CF9C 0 english-trinidad y tobago
00000002BDD0 00000042CFD0 0 english-uk
00000002BDE8 00000042CFE8 0 english-us
00000002BE00 00000042D000 0 english-usa
File pos Mem pos ID Text
======== ======= == ====
00000002BE18 00000042D018 0 french-belgian
00000002BE38 00000042D038 0 french-canadian
00000002BE58 00000042D058 0 french-luxembourg
00000002BE7C 00000042D07C 0 french-swiss
00000002BE98 00000042D098 0 german-austrian
00000002BEB8 00000042D0B8 0 german-lichtenstein
00000002BEE0 00000042D0E0 0 german-luxembourg
00000002BF04 00000042D104 0 german-swiss
00000002BF20 00000042D120 0 irish-english
00000002BF3C 00000042D13C 0 italian-swiss
00000002BF58 00000042D158 0 norwegian
00000002BF6C 00000042D16C 0 norwegian-bokmal
00000002BF90 00000042D190 0 norwegian-nynorsk
00000002BFB4 00000042D1B4 0 portuguese-brazilian
00000002BFE0 00000042D1E0 0 spanish-argentina
00000002C004 00000042D204 0 spanish-bolivia
00000002C024 00000042D224 0 spanish-chile
00000002C040 00000042D240 0 spanish-colombia
00000002C064 00000042D264 0 spanish-costa rica
00000002C08C 00000042D28C 0 spanish-dominican republic
00000002C0C4 00000042D2C4 0 spanish-ecuador
00000002C0E4 00000042D2E4 0 spanish-el salvador
00000002C10C 00000042D30C 0 spanish-guatemala
00000002C130 00000042D330 0 spanish-honduras
00000002C154 00000042D354 0 spanish-mexican
00000002C174 00000042D374 0 spanish-modern
00000002C194 00000042D394 0 spanish-nicaragua
00000002C1B8 00000042D3B8 0 spanish-panama
00000002C1D8 00000042D3D8 0 spanish-paraguay
00000002C1FC 00000042D3FC 0 spanish-peru
00000002C218 00000042D418 0 spanish-puerto rico
00000002C240 00000042D440 0 spanish-uruguay
00000002C260 00000042D460 0 spanish-venezuela
00000002C284 00000042D484 0 swedish-finland
00000002C2A4 00000042D4A4 0 swiss
00000002C3D4 00000042D5D4 0 america
00000002C3E4 00000042D5E4 0 britain
00000002C3F4 00000042D5F4 0 china
00000002C400 00000042D600 0 czech
00000002C40C 00000042D60C 0 england
00000002C41C 00000042D61C 0 great britain
00000002C438 00000042D638 0 holland
00000002C448 00000042D648 0 hong-kong
00000002C45C 00000042D65C 0 new-zealand
00000002C47C 00000042D67C 0 pr china
00000002C490 00000042D690 0 pr-china
00000002C4A4 00000042D6A4 0 puerto-rico
00000002C4BC 00000042D6BC 0 slovak
00000002C4CC 00000042D6CC 0 south africa
00000002C4E8 00000042D6E8 0 south korea
00000002C500 00000042D700 0 south-africa
00000002C51C 00000042D71C 0 south-korea
00000002C534 00000042D734 0 trinidad & tobago
00000002C558 00000042D758 0 united-kingdom
00000002C578 00000042D778 0 united-states
00000002C5CB 00000042D7CB 0 2CONOUT$
00000002C71B 00000042D91B 0 X.DEFAULT\XFS\LOGICAL_SERVICES
00000002C8E0 00000042DAE0 0 dMain
00000002D7A0 00000042E9A0 0 dispenserprogm
00000002D883 00000042EA83 0 NTahoma
File pos Mem pos ID Text
======== ======= == ====
00000002D894 00000042EA94 0 dDispW
00000002D8A4 00000042EAA4 0 Dispenser
00000002D8F8 00000042EAF8 0 not out of order
00000002D91C 00000042EB1C 0 Arial Black
000000050F97 000000452B97 0 }Sysinternals License
000000050FC4 000000452BC4 0 %s License Agreement
000000050FF0 000000452BF0 0 RICHEDIT
000000051004 000000452C04 0 &Print
000000051014 000000452C14 0 &Decline
000000051028 000000452C28 0 &Agree
000000051038 000000452C38 0 You can also use the /accepteula command-line switch to accept the EULA.
0000000510CC 000000452CCC 0 MS Shell Dlg
0000000510E8 000000452CE8 0 License Agreement
00000005110C 000000452D0C 0 Riched32.dll
000000051128 000000452D28 0 EulaAccepted
000000051144 000000452D44 0 Software\Sysinternals\%s
000000051178 000000452D78 0 -accepteula
000000051190 000000452D90 0 /accepteula
0000000511A8 000000452DA8 0 Shell32.dll
000000051272 000000452E72 0 Error deleting %s:
00000005129E 000000452E9E 0 Error overwriting %s:
0000000512CE 000000452ECE 0 Error opening %s for delete:
000000051322 000000452F22 0 Error opening %s for compressed file scan:
00000005137C 000000452F7C 0 %s...
000000051394 000000452F94 0 %s\%s
0000000513A0 000000452FA0 0 %s\*.*
00000005144E 00000045304E 0 Cleaning MFT...%c
00000005147A 00000045307A 0
0000000514F4 0000004530F4 0 %sSDELMFT%06d
000000051510 000000453110 0 %s\SDELMFT%06d
000000051530 000000453130 0 %sSDELTEMP1
000000051548 000000453148 0 %s\SDELTEMP1
00000005156A 00000045316A 0 Cleaning free space on %s: %d%%
0000000515B2 0000004531B2 0 Cleaning free space to securely delete compressed files: %d%%
000000051630 000000453230 0 Could not create free-space cleanup file:
000000051688 000000453288 0 %sSDELTEMP
000000051730 000000453330 0 Could not determine amount of free space:
000000051788 000000453388 0 %s\SDELTEMP
0000000517A0 0000004533A0 0 %TEMP%
0000000517B0 0000004533B0 0 kernel32.dll
0000000517DF 0000004533DF 0 WCould not determine disk cluster size:
000000051830 000000453430 0 Zeroing free space on %s: 0%%
000000051870 000000453470 0 Zeroing free space to securely delete compressed files: 0%%
000000051938 000000453538 0 |/-\|/-\
000000051A5C 00000045365C 0 ntdll.dll
000000051EE4 000000453AE4 0 Kernel32.dll
000000051F20 000000453B20 0 SDelete
00000005203C 000000453C3C 0 mscoree.dll
000000052754 000000454354 0 KERNEL32.DLL
0000000527AC 0000004543AC 0 (null)
000000054EEC 000000456AEC 0 \\.\A:
000000055ED6 000000457AD6 0 VS_VERSION_INFO
000000055F32 000000457B32 0 StringFileInfo
000000055F56 000000457B56 0 040904b0
000000055F6E 000000457B6E 0 CompanyName
000000055F88 000000457B88 0 Sysinternals
000000055FAA 000000457BAA 0 FileDescription
000000055FCC 000000457BCC 0 sdelete
000000055FE2 000000457BE2 0 FileVersion
00000005600E 000000457C0E 0 InternalName
File pos Mem pos ID Text
======== ======= == ====
000000056028 000000457C28 0 sdelete
00000005603E 000000457C3E 0 LegalCopyright
000000056072 000000457C72 0 1999-2012 Mark Russinovich
0000000560B2 000000457CB2 0 OriginalFilename
0000000560D4 000000457CD4 0 sdelete.exe
0000000560F2 000000457CF2 0 ProductName
00000005610C 000000457D0C 0 Sysinternals Sdelete
00000005613E 000000457D3E 0 ProductVersion
00000005616E 000000457D6E 0 VarFileInfo
00000005618E 000000457D8E 0 Translation
=== DOWNLOAD ===
Mirror provided by vx-underground.org, thx!