.- - -----÷M÷E÷N÷U÷------------------------------------------------------------- --- ----  -------------.
!  WALL ! STATS ! GOODIES ! YARA ! FAQ ! RSS ! EMV                                                      !
`--------------  - ---  ---------- -------- -------- -------- -------- ----------------- -  ---- ---- --'

                                           ATM MALWARE NOTICE 
                    05a00a4b2d07780021bcd1a4abe84dc0ee28531136414f0ee631fa0d9844d479
 
Date...........: 2020-05-15
Family.........: DispCash.10
File name......: xfs_cuinfo.exe
File size......: 89.50 KB
Type file......: EXE/Windows
Virscan........: VT - HA
Documentation..: https://twitter.com/s4tan/status/1262356066203041793
Additional note: Drop 98e7fe52634c9ed9105a1604169e29d797419cb89ae863c2178999f34abd1497.
Seem infected by 'Neshta', see strings.
Similar to: 5f70c76b6771b7c56bc5da34e424eb9a090cedeb807c795795a88c415a2e772c.

Entropy:


Binary Histogram:


=== PEDUMP REPORT === 
=== MZ Header === signature: "MZ" bytes_in_last_block: 80 0x50 blocks_in_file: 2 2 num_relocs: 0 0 header_paragraphs: 4 4 min_extra_paragraphs: 15 0xf max_extra_paragraphs: 65535 0xffff ss: 0 0 sp: 184 0xb8 checksum: 0 0 ip: 0 0 cs: 0 0 reloc_table_offset: 64 0x40 overlay_number: 26 0x1a reserved0: 0 0 oem_id: 0 0 oem_info: 0 0 reserved2: 0 0 reserved3: 0 0 reserved4: 0 0 reserved5: 0 0 reserved6: 0 0 lfanew: 256 0x100 === DOS STUB === 00000000: ba 10 00 0e 1f b4 09 cd 21 b8 01 4c cd 21 90 90 |........!..L.!..| 00000010: 54 68 69 73 20 70 72 6f 67 72 61 6d 20 6d 75 73 |This program mus| 00000020: 74 20 62 65 20 72 75 6e 20 75 6e 64 65 72 20 57 |t be run under W| 00000030: 69 6e 33 32 0d 0a 24 37 00 00 00 00 00 00 00 00 |in32..$7........| 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| === PE Header === signature: "PE\x00\x00" # IMAGE_FILE_HEADER: Machine: 332 0x14c x86 NumberOfSections: 8 8 TimeDateStamp: "1992-06-19 22:22:17" PointerToSymbolTable: 0 0 NumberOfSymbols: 0 0 SizeOfOptionalHeader: 224 0xe0 Characteristics: 33166 0x818e EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO 32BIT_MACHINE, BYTES_REVERSED_HI # IMAGE_OPTIONAL_HEADER32: Magic: 267 0x10b 32-bit executable LinkerVersion: 2.25 SizeOfCode: 29696 0x7400 SizeOfInitializedData: 10752 0x2a00 SizeOfUninitializedData: 0 0 AddressOfEntryPoint: 32996 0x80e4 BaseOfCode: 4096 0x1000 BaseOfData: 36864 0x9000 ImageBase: 4194304 0x400000 SectionAlignment: 4096 0x1000 FileAlignment: 512 0x200 OperatingSystemVersion: 4.0 ImageVersion: 0.0 SubsystemVersion: 4.0 Reserved1: 0 0 SizeOfImage: 110592 0x1b000 SizeOfHeaders: 1024 0x400 CheckSum: 0 0 Subsystem: 2 2 WINDOWS_GUI DllCharacteristics: 0 0 SizeOfStackReserve: 1048576 0x100000 SizeOfStackCommit: 16384 0x4000 SizeOfHeapReserve: 1048576 0x100000 SizeOfHeapCommit: 4096 0x1000 LoaderFlags: 0 0 NumberOfRvaAndSizes: 16 0x10 === DATA DIRECTORY === EXPORT rva:0x 0 size:0x 0 IMPORT rva:0x 15000 size:0x 864 RESOURCE rva:0x 19000 size:0x 1400 EXCEPTION rva:0x 0 size:0x 0 SECURITY rva:0x 0 size:0x 0 BASERELOC rva:0x 18000 size:0x 5cc DEBUG rva:0x 0 size:0x 0 ARCHITECTURE rva:0x 0 size:0x 0 GLOBALPTR rva:0x 0 size:0x 0 TLS rva:0x 17000 size:0x 18 LOAD_CONFIG rva:0x 0 size:0x 0 Bound_IAT rva:0x 0 size:0x 0 IAT rva:0x 0 size:0x 0 Delay_IAT rva:0x 0 size:0x 0 CLR_Header rva:0x 0 size:0x 0 rva:0x 0 size:0x 0 === SECTIONS === NAME RVA VSZ RAW_SZ RAW_PTR nREL REL_PTR nLINE LINE_PTR FLAGS CODE 1000 722c 7400 400 0 0 0 0 60000020 R-X CODE DATA 9000 218 400 7800 0 0 0 0 c0000040 RW- IDATA BSS a000 a899 0 7c00 0 0 0 0 c0000000 RW- .idata 15000 864 a00 7c00 0 0 0 0 c0000040 RW- IDATA .tls 16000 8 0 8600 0 0 0 0 c0000000 RW- .rdata 17000 18 200 8600 0 0 0 0 50000040 R-- IDATA SHARED .reloc 18000 5cc 600 8800 0 0 0 0 50000040 R-- IDATA SHARED .rsrc 19000 1400 1400 8e00 0 0 0 0 50000040 R-- IDATA SHARED === TLS === RAW_START RAW_END INDEX CALLBKS ZEROFILL FLAGS 416000 416008 409090 417010 0 0 [?] ignoring invalid PEdump::BITMAPINFOHEADER === RESOURCES === FILE_OFFSET CP LANG SIZE TYPE NAME 0x8f50 0 0x419 4264 ICON #1 0x9ff8 0 0 16 RCDATA DVCLAL 0xa008 0 0 172 RCDATA PACKAGEINFO 0xa0b4 0 0x419 20 GROUP_ICON MAINICON === IMPORTS === MODULE_NAME HINT ORD FUNCTION_NAME kernel32.dll 0 DeleteCriticalSection kernel32.dll 0 LeaveCriticalSection kernel32.dll 0 EnterCriticalSection kernel32.dll 0 InitializeCriticalSection kernel32.dll 0 VirtualFree kernel32.dll 0 VirtualAlloc kernel32.dll 0 LocalFree kernel32.dll 0 LocalAlloc kernel32.dll 0 GetVersion kernel32.dll 0 GetCurrentThreadId kernel32.dll 0 GetThreadLocale kernel32.dll 0 GetStartupInfoA kernel32.dll 0 GetLocaleInfoA kernel32.dll 0 GetCommandLineA kernel32.dll 0 FreeLibrary kernel32.dll 0 ExitProcess kernel32.dll 0 WriteFile kernel32.dll 0 UnhandledExceptionFilter kernel32.dll 0 RtlUnwind kernel32.dll 0 RaiseException kernel32.dll 0 GetStdHandle user32.dll 0 GetKeyboardType user32.dll 0 MessageBoxA advapi32.dll 0 RegQueryValueExA advapi32.dll 0 RegOpenKeyExA advapi32.dll 0 RegCloseKey oleaut32.dll 0 SysFreeString oleaut32.dll 0 SysReAllocStringLen kernel32.dll 0 TlsSetValue kernel32.dll 0 TlsGetValue kernel32.dll 0 LocalAlloc kernel32.dll 0 GetModuleHandleA advapi32.dll 0 RegSetValueExA advapi32.dll 0 RegOpenKeyExA advapi32.dll 0 RegCloseKey kernel32.dll 0 WriteFile kernel32.dll 0 WinExec kernel32.dll 0 SetFilePointer kernel32.dll 0 SetFileAttributesA kernel32.dll 0 SetEndOfFile kernel32.dll 0 SetCurrentDirectoryA kernel32.dll 0 ReleaseMutex kernel32.dll 0 ReadFile kernel32.dll 0 GetWindowsDirectoryA kernel32.dll 0 GetTempPathA kernel32.dll 0 GetShortPathNameA kernel32.dll 0 GetModuleFileNameA kernel32.dll 0 GetLogicalDriveStringsA kernel32.dll 0 GetLocalTime kernel32.dll 0 GetLastError kernel32.dll 0 GetFileSize kernel32.dll 0 GetFileAttributesA kernel32.dll 0 GetDriveTypeA kernel32.dll 0 GetCommandLineA kernel32.dll 0 FreeLibrary kernel32.dll 0 FindNextFileA kernel32.dll 0 FindFirstFileA kernel32.dll 0 FindClose kernel32.dll 0 DeleteFileA kernel32.dll 0 CreateMutexA kernel32.dll 0 CreateFileA kernel32.dll 0 CreateDirectoryA kernel32.dll 0 CloseHandle gdi32.dll 0 StretchDIBits gdi32.dll 0 SetDIBits gdi32.dll 0 SelectObject gdi32.dll 0 GetObjectA gdi32.dll 0 GetDIBits gdi32.dll 0 DeleteObject gdi32.dll 0 DeleteDC gdi32.dll 0 CreateSolidBrush gdi32.dll 0 CreateDIBSection gdi32.dll 0 CreateCompatibleDC gdi32.dll 0 CreateCompatibleBitmap gdi32.dll 0 BitBlt user32.dll 0 ReleaseDC user32.dll 0 GetSysColor user32.dll 0 GetIconInfo user32.dll 0 GetDC user32.dll 0 FillRect user32.dll 0 DestroyIcon user32.dll 0 CopyImage user32.dll 0 CharLowerBuffA shell32.dll 0 ShellExecuteA shell32.dll 0 ExtractIconA === Packer / Compiler === Borland Delphi v6.0 - v7.0
=== Strings ===
File pos Mem pos ID Text ======== ======= == ==== 000000000050 000000400050 0 This program must be run under Win32 000000000270 000000400270 0 .idata 0000000002C0 0000004002C0 0 .rdata 0000000002E7 0000004002E7 0 P.reloc 00000000030F 00000040030F 0 P.rsrc 00000000059C 00000040119C 0 SVWUQ 0000000007BD 0000004013BD 0 w;;t$ 0000000008C8 0000004014C8 0 SVWUQ 0000000017AD 0000004023AD 0 Uh5$@ 000000001B17 000000402717 0 ~KxI[) 000000001CD0 0000004028D0 0 SOFTWARE\Borland\Delphi\RTL 000000001CEC 0000004028EC 0 FPUMaskValue 000000001D39 000000402939 0 PPRTj 000000001EB3 000000402AB3 0 YZXtp 00000000202A 000000402C2A 0 t=HtN 000000002204 000000402E04 0 Uh2.@ 0000000026CC 0000004032CC 0 SVWRP 0000000028F2 0000004034F2 0 t1SVW 000000003009 000000403C09 0 Uhd<@ 00000000312D 000000403D2D 0 Uhr=@ 00000000335D 000000403F5D 0 Uh}?@ 0000000033CE 000000403FCE 0 HBITMAP 000000003615 000000404215 0 Uh5B@ 00000000365D 00000040425D 0 Uh}B@ 000000003705 000000404305 0 Uh%C@ 00000000373D 00000040433D 0 Uh]C@ 0000000038E0 0000004044E0 0 YXZQRPR 0000000039F0 0000004045F0 0 R;P P| 000000003AB4 0000004046B4 0 IVXLCDMT 000000003C52 000000404852 0 t=8!u 000000003C64 000000404864 0 ,8"t& 000000003EF0 000000404AF0 0 Uh(K@ 00000000400F 000000404C0F 0 UhfL@ 0000000041E5 000000404DE5 0 QQQQS 00000000441E 00000040501E 0 UhrP@ 000000004605 000000405205 0 QQQQS 000000004E35 000000405A35 0 XH;XH~ P 000000004E50 000000405A50 0 9PD}-RP 000000004E83 000000405A83 0 PH9PL~ 000000004E9D 000000405A9D 0 KH+KLQ 000000004EBB 000000405ABB 0 ;CHRQ~ 00000000502A 000000405C2A 0 ;GHv 000000005210 000000405E10 0 @t:HS 00000000523A 000000405E3A 0 Z[XR1 000000005335 000000405F35 0 RP;P ~ 0000000053EB 000000405FEB 0 SPRQj 0000000060E5 000000406CE5 0 Uh/m@ 0000000062A5 000000406EA5 0 Uh"o@ 0000000063E9 000000406FE9 0 QQQQQS 000000006407 000000407007 0 Uhdp@ 0000000064E3 0000004070E3 0 Uh&q@ 0000000068A8 0000004074A8 0 \PROGRA~1\ 0000000068B9 0000004074B9 0 QQQQQQSVW 0000000069A8 0000004075A8 0 Uh\v@ 000000006DA5 0000004079A5 0 QQQQQQS3 000000006ED5 000000407AD5 0 QQQQQQ 0000000070A2 000000407CA2 0 UhJ}@ 0000000071A1 000000407DA1 0 QQQQQQSV 0000000071B6 000000407DB6 0 Uhu~@ 000000007858 000000409058 0 Error File pos Mem pos ID Text ======== ======= == ==== 000000007860 000000409060 0 Runtime error at 00000000 000000007880 000000409080 0 0123456789ABCDEF 000000007E58 000000415258 0 kernel32.dll 000000007E68 000000415268 0 DeleteCriticalSection 000000007E80 000000415280 0 LeaveCriticalSection 000000007E98 000000415298 0 EnterCriticalSection 000000007EB0 0000004152B0 0 InitializeCriticalSection 000000007ECC 0000004152CC 0 VirtualFree 000000007EDA 0000004152DA 0 VirtualAlloc 000000007EEA 0000004152EA 0 LocalFree 000000007EF6 0000004152F6 0 LocalAlloc 000000007F04 000000415304 0 GetVersion 000000007F12 000000415312 0 GetCurrentThreadId 000000007F28 000000415328 0 GetThreadLocale 000000007F3A 00000041533A 0 GetStartupInfoA 000000007F4C 00000041534C 0 GetLocaleInfoA 000000007F5E 00000041535E 0 GetCommandLineA 000000007F70 000000415370 0 FreeLibrary 000000007F7E 00000041537E 0 ExitProcess 000000007F8C 00000041538C 0 WriteFile 000000007F98 000000415398 0 UnhandledExceptionFilter 000000007FB4 0000004153B4 0 RtlUnwind 000000007FC0 0000004153C0 0 RaiseException 000000007FD2 0000004153D2 0 GetStdHandle 000000007FE0 0000004153E0 0 user32.dll 000000007FEE 0000004153EE 0 GetKeyboardType 000000008000 000000415400 0 MessageBoxA 00000000800C 00000041540C 0 advapi32.dll 00000000801C 00000041541C 0 RegQueryValueExA 000000008030 000000415430 0 RegOpenKeyExA 000000008040 000000415440 0 RegCloseKey 00000000804C 00000041544C 0 oleaut32.dll 00000000805C 00000041545C 0 SysFreeString 00000000806C 00000041546C 0 SysReAllocStringLen 000000008080 000000415480 0 kernel32.dll 000000008090 000000415490 0 TlsSetValue 00000000809E 00000041549E 0 TlsGetValue 0000000080AC 0000004154AC 0 LocalAlloc 0000000080BA 0000004154BA 0 GetModuleHandleA 0000000080CC 0000004154CC 0 advapi32.dll 0000000080DC 0000004154DC 0 RegSetValueExA 0000000080EE 0000004154EE 0 RegOpenKeyExA 0000000080FE 0000004154FE 0 RegCloseKey 00000000810A 00000041550A 0 kernel32.dll 00000000811A 00000041551A 0 WriteFile 000000008126 000000415526 0 WinExec 000000008130 000000415530 0 SetFilePointer 000000008142 000000415542 0 SetFileAttributesA 000000008158 000000415558 0 SetEndOfFile 000000008168 000000415568 0 SetCurrentDirectoryA 000000008180 000000415580 0 ReleaseMutex 000000008190 000000415590 0 ReadFile 00000000819C 00000041559C 0 GetWindowsDirectoryA 0000000081B4 0000004155B4 0 GetTempPathA 0000000081C4 0000004155C4 0 GetShortPathNameA 0000000081D8 0000004155D8 0 GetModuleFileNameA 0000000081EE 0000004155EE 0 GetLogicalDriveStringsA 000000008208 000000415608 0 GetLocalTime 000000008218 000000415618 0 GetLastError 000000008228 000000415628 0 GetFileSize File pos Mem pos ID Text ======== ======= == ==== 000000008236 000000415636 0 GetFileAttributesA 00000000824C 00000041564C 0 GetDriveTypeA 00000000825C 00000041565C 0 GetCommandLineA 00000000826E 00000041566E 0 FreeLibrary 00000000827C 00000041567C 0 FindNextFileA 00000000828C 00000041568C 0 FindFirstFileA 00000000829E 00000041569E 0 FindClose 0000000082AA 0000004156AA 0 DeleteFileA 0000000082B8 0000004156B8 0 CreateMutexA 0000000082C8 0000004156C8 0 CreateFileA 0000000082D6 0000004156D6 0 CreateDirectoryA 0000000082EA 0000004156EA 0 CloseHandle 0000000082F6 0000004156F6 0 gdi32.dll 000000008302 000000415702 0 StretchDIBits 000000008312 000000415712 0 SetDIBits 00000000831E 00000041571E 0 SelectObject 00000000832E 00000041572E 0 GetObjectA 00000000833C 00000041573C 0 GetDIBits 000000008348 000000415748 0 DeleteObject 000000008358 000000415758 0 DeleteDC 000000008364 000000415764 0 CreateSolidBrush 000000008378 000000415778 0 CreateDIBSection 00000000838C 00000041578C 0 CreateCompatibleDC 0000000083A2 0000004157A2 0 CreateCompatibleBitmap 0000000083BC 0000004157BC 0 BitBlt 0000000083C4 0000004157C4 0 user32.dll 0000000083D2 0000004157D2 0 ReleaseDC 0000000083DE 0000004157DE 0 GetSysColor 0000000083EC 0000004157EC 0 GetIconInfo 0000000083FA 0000004157FA 0 GetDC 000000008402 000000415802 0 FillRect 00000000840E 00000041580E 0 DestroyIcon 00000000841C 00000041581C 0 CopyImage 000000008428 000000415828 0 CharLowerBuffA 000000008438 000000415838 0 shell32.dll 000000008446 000000415846 0 ShellExecuteA 000000008456 000000415856 0 ExtractIconA 00000000880F 00000041800F 0 0"0*020:0B0J0R0Z0b0j0r0z0 00000000883F 00000041803F 0 0 1(1 000000008857 000000418057 0 4-595T5 00000000885F 00000041805F 0 567r7 00000000887D 00000041807D 0 8&8,848F8R8a8m8u8 0000000088AB 0000004180AB 0 9/9:9[9s9 0000000088BD 0000004180BD 0 :W:w: 0000000088CD 0000004180CD 0 <'<0<;<D<K<Z<a< 0000000088F1 0000004180F1 0 >b>k> 000000008901 000000418101 0 ?2?\?e?u?}? 00000000892B 00000041812B 0 0(0@0L0T0k0z0 000000008945 000000418145 0 0,1P1n1~1 00000000895B 00000041815B 0 2$2u2|2 00000000897D 00000041817D 0 4#4+4O4o4 00000000899B 00000041819B 0 8A8Q8g8 0000000089AD 0000004181AD 0 9*929H9 0000000089C3 0000004181C3 0 9+:X:a: 0000000089D3 0000004181D3 0 :G;o; 0000000089DF 0000004181DF 0 < =T=\=g= 0000000089F1 0000004181F1 0 >N>R>X>\>a>h>n>v> 000000008A11 000000418211 0 ?%?/?7?=?K?f?{? 000000008A38 000000418238 0 N0W0}0 000000008A41 000000418241 0 466?6:7C7 File pos Mem pos ID Text ======== ======= == ==== 000000008A53 000000418253 0 <)<2<><E< 000000008A5F 00000041825F 0 =/=;=B=L=V=m=~= 000000008A89 000000418289 0 >/>@>J>R>Z>b>j> 000000008AA7 0000004182A7 0 ?&?+?0?7?>?H?_?k?x? 000000008ADD 0000004182DD 0 0:0B0J0R0Z0b0j0r0z0 000000008B17 000000418317 0 1"1*121:1B1J1R1Z1b1j1r1z1 000000008B47 000000418347 0 2#202B2J2R2_2k2x2 000000008B6D 00000041836D 0 3 323?3K3X3j3w3 000000008B93 000000418393 0 4$4(4,484<4@4L4P4T4 000000008BA7 0000004183A7 0 4d4h4t4x4|4 000000008C15 000000418415 0 6_8H9 000000008C1B 00000041841B 0 9,;:;A;H;c;o; 000000008C51 000000418451 0 :(;=;c; 000000008C6B 00000041846B 0 =*=:=Z= 000000008C75 000000418475 0 >A>v> 000000008C90 000000418490 0 040R0 000000008CB1 0000004184B1 0 2_3n3 000000008CC5 0000004184C5 0 5 6J6 000000008CD1 0000004184D1 0 7U7w7 000000008CDD 0000004184DD 0 9_9d9w9 000000008CEB 0000004184EB 0 :.:E:c:z: 000000008D07 000000418507 0 <==u= 000000008D0D 00000041850D 0 =.>c> 000000008D29 000000418529 0 030F0X0\0 000000008D33 000000418533 0 0d0h0l0p0t0x0|0 000000008D77 000000418577 0 1%191M1a1 000000008D90 000000418590 0 004080 000000008DAD 0000004185AD 0 1 1$1(1 00000000A023 00000041A223 0 RsZLZ 00000000A096 00000041A296 0 Uag%N 00000000A0E0 00000041A2E0 0 Delphi-the best. Fuck off all the rest. Neshta 1.0 Made in Belarus. 00000000A1A8 00000041A3A8 0 ! Best regards 2 Tommy Salo. [Nov-2005] yours [Dziadulja Apanas] 00000000BAAA 00000040BAAA 0 DeleteCriticalSection 00000000BAC2 00000040BAC2 0 EnterCriticalSection 00000000BADA 00000040BADA 0 ExitProcess 00000000BAE8 00000040BAE8 0 GetCommandLineA 00000000BAFA 00000040BAFA 0 GetLastError 00000000BB0A 00000040BB0A 0 GetModuleHandleA 00000000BB1E 00000040BB1E 0 GetProcAddress 00000000BB30 00000040BB30 0 InitializeCriticalSection 00000000BB4C 00000040BB4C 0 InterlockedExchange 00000000BB62 00000040BB62 0 IsDBCSLeadByteEx 00000000BB76 00000040BB76 0 LeaveCriticalSection 00000000BB8E 00000040BB8E 0 MultiByteToWideChar 00000000BBA4 00000040BBA4 0 SetUnhandledExceptionFilter 00000000BBC2 00000040BBC2 0 Sleep 00000000BBCA 00000040BBCA 0 TlsGetValue 00000000BBD8 00000040BBD8 0 VirtualProtect 00000000BBEA 00000040BBEA 0 VirtualQuery 00000000BBFA 00000040BBFA 0 WideCharToMultiByte 00000000BC10 00000040BC10 0 _strdup 00000000BC1A 00000040BC1A 0 _stricoll 00000000BC26 00000040BC26 0 __getmainargs 00000000BC36 00000040BC36 0 __mb_cur_max 00000000BC46 00000040BC46 0 __p__environ 00000000BC56 00000040BC56 0 __p__fmode 00000000BC64 00000040BC64 0 __set_app_type 00000000BC76 00000040BC76 0 _cexit 00000000BC80 00000040BC80 0 _errno 00000000BC8A 00000040BC8A 0 _findclose File pos Mem pos ID Text ======== ======= == ==== 00000000BC98 00000040BC98 0 _findfirst 00000000BCA6 00000040BCA6 0 _findnext 00000000BCB2 00000040BCB2 0 _fullpath 00000000BCC6 00000040BCC6 0 _onexit 00000000BCD0 00000040BCD0 0 _setmode 00000000BCDC 00000040BCDC 0 abort 00000000BCE4 00000040BCE4 0 atexit 00000000BCF6 00000040BCF6 0 calloc 00000000BD00 00000040BD00 0 fputc 00000000BD10 00000040BD10 0 fwrite 00000000BD1A 00000040BD1A 0 getenv 00000000BD24 00000040BD24 0 isspace 00000000BD2E 00000040BD2E 0 localeconv 00000000BD3C 00000040BD3C 0 malloc 00000000BD46 00000040BD46 0 mbstowcs 00000000BD52 00000040BD52 0 memcpy 00000000BD5C 00000040BD5C 0 realloc 00000000BD66 00000040BD66 0 setlocale 00000000BD72 00000040BD72 0 signal 00000000BD7C 00000040BD7C 0 strchr 00000000BD86 00000040BD86 0 strcoll 00000000BD90 00000040BD90 0 strlen 00000000BD9A 00000040BD9A 0 strncpy 00000000BDA4 00000040BDA4 0 tolower 00000000BDAE 00000040BDAE 0 vfprintf 00000000BDBA 00000040BDBA 0 wcslen 00000000BDC4 00000040BDC4 0 wcstombs 00000000BDCE 00000040BDCE 0 MSXFS.dll 00000000BDDA 00000040BDDA 0 WFSStartUp 00000000BDEE 00000040BDEE 0 WFSOpen 00000000BDFE 00000040BDFE 0 WFSLock 00000000BE0E 00000040BE0E 0 WFSFreeResult 00000000BE22 00000040BE22 0 WFSGetInfo 00000000BE36 00000040BE36 0 WFSCleanUp 00000000BE4A 00000040BE4A 0 WFSClose 00000000BE5A 00000040BE5A 0 WFSUnlock 00000000BEB0 00000040BEB0 0 kernel32.dll 00000000BEC8 00000040BEC8 0 msvcrt.dll 00000000BF6C 00000040BF6C 0 msvcrt.dll 00000000C409 00000040C409 0 "w1N] 00000000C4F2 00000040C4F2 0 Ll8];; 00000000C629 00000040C629 0 1tov] 00000000C6A7 00000040C6A7 0 cS+!t\ 00000000C6B7 00000040C6B7 0 *u(;1 00000000C6E8 00000040C6E8 0 lm\1A 00000000D052 00000040D052 0 SUBKf 00000000D08D 00000040D08D 0 VALUf 00000000D0CA 00000040D0CA 0 EMPTf 00000000D101 00000040D101 0 _LONf 00000000D13A 00000040D13A 0 ITEMf 00000000D171 00000040D171 0 O_LOf 00000000D1A5 00000040D1A5 0 READf 00000000D1D5 00000040D1D5 0 _ERRf 00000000D209 00000040D209 0 _ERRf 00000000D27A 00000040D27A 0 HANDf 00000000D2B3 00000040D2B3 0 BUFFf 00000000D3BC 00000040D3BC 0 VIDEf 00000000D483 00000040D483 0 REQ_f 00000000D4B7 00000040D4B7 0 RESUf 00000000D523 00000040D523 0 TIMEf File pos Mem pos ID Text ======== ======= == ==== 00000000D55A 00000040D55A 0 ELEVf 00000000D585 00000040D585 0 LOCKf 00000000D613 00000040D613 0 THREf 00000000D664 00000040D664 0 LOCKf 00000000D6F3 00000040D6F3 0 STERf 00000000D727 00000040D727 0 OGREf 00000000D75B 00000040D75B 0 EMORf 00000000D792 00000040D792 0 FOUNf 00000000D82A 00000040D82A 0 _HIGf 00000000D8E3 00000040D8E3 0 OMMAf 00000000D925 00000040D925 0 _SRVf 00000000D983 00000040D983 0 _ERRf 00000000D9DE 00000040D9DE 0 _ERRf 00000000DAAF 00000040DAAF 0 ERROf 00000000DB6A 00000040DB6A 0 CYMIf 00000000DBA1 00000040DBA1 0 NSABf 00000000DC0E 00000040DC0E 0 ITIOf 00000000DC7C 00000040DC7C 0 OTOPf 00000000DCEA 00000040DCEA 0 LOSEf 00000000DD81 00000040DD81 0 ACTIf 00000000DE3A 00000040DE3A 0 OITEf 00000000DEAC 00000040DEAC 0 NKNOf 00000000DEE3 00000040DEE3 0 STAKf 00000000DFA8 00000040DFA8 0 SITIf 00000000DFEA 00000040DFEA 0 CTARf 00000000E0AA 00000040E0AA 0 TAKEf 00000000E0DA 00000040E0DA 0 SLEFf 00000000F34E 00000040F34E 0 <\t?</t; 000000011919 000000411919 0 D$p9D$0 0000000125FD 0000004125FD 0 )D$,) 0000000129B9 0000004129B9 0 L$\9L$ 0000000135BE 0000004135BE 0 9l$Xv, 00000001363C 00000041363C 0 9|$Xv7 000000014CB3 000000414CB3 0 r/9D$ 0000000151E1 0000004151E1 0 EMPTf 000000015600 000000415600 0 libgcc_s_dw2-1.dll 000000015613 000000415613 0 __register_frame_info 000000015629 000000415629 0 libgcj-13.dll 000000015637 000000415637 0 _Jv_RegisterClasses 00000001564B 00000041564B 0 __deregister_frame_info 000000015BA8 000000415BA8 0 Please enter service name! 000000015BC8 000000415BC8 0 WFSStartUp failed with error: %s 000000015BEC 000000415BEC 0 WFSVERSION: 000000015BF8 000000415BF8 0 wVersion: 0x%X 000000015C08 000000415C08 0 wLowVersion: 0x%X 000000015C1B 000000415C1B 0 wHighVersion: 0x%X 000000015C2F 000000415C2F 0 szDescription: %s 000000015C42 000000415C42 0 szSystemStatus: %s 000000015C58 000000415C58 0 WFSOpen(%s) failed with error: %s 000000015C7C 000000415C7C 0 WFSLock failed with error: %s 000000015C9C 000000415C9C 0 WFSFreeResult failed with error: %s 000000015CC4 000000415CC4 0 WFSGetInfo (WFS_INF_CDM_CASH_UNIT_INFO) failed with error: %s 000000015D03 000000415D03 0 REJECTCASSETTE 000000015D12 000000415D12 0 BILLCASSETTE 000000015D1F 000000415D1F 0 COINCYLINDER 000000015D2C 000000415D2C 0 COINDISPENSER 000000015D3A 000000415D3A 0 RETRACTCASSETTE 000000015D4A 000000415D4A 0 COUPON 000000015D51 000000415D51 0 DOCUMENT 000000015D5A 000000415D5A 0 REPCONTAINER File pos Mem pos ID Text ======== ======= == ==== 000000015D67 000000415D67 0 RECYCLINGCASSETTE 000000015D79 000000415D79 0 NOTAPPLICABLE 000000015D87 000000415D87 0 NOVALUES 000000015D90 000000415D90 0 NOREFERENCE 000000015D9C 000000415D9C 0 MANIPULATED 000000015DA8 000000415DA8 0 INOPERATIVE 000000015DB4 000000415DB4 0 ---------------------------- 000000015DD4 000000415DD4 0 Cash Unit # %d 000000015DE3 000000415DE3 0 Type: %s 000000015DEC 000000415DEC 0 Status: %s 000000015DF7 000000415DF7 0 Currency ID: %.3s 000000015E09 000000415E09 0 Note Value: %u 000000015E18 000000415E18 0 Notes Count: %u 000000015E28 000000415E28 0 Notes Initial Count: %u 000000015E40 000000415E40 0 Notes Minimum Count: %u 000000015E58 000000415E58 0 Notes Maximum Count: %u 000000015E74 000000415E74 0 WFSUnlock failed with error: %s 000000015E98 000000415E98 0 WFSClose failed with error: %s 000000015EB8 000000415EB8 0 WFSCleanUp failed with error: %s 000000015EDB 000000415EDB 0 Success 000000015F40 000000415F40 0 Mingw runtime failure: 000000015F58 000000415F58 0 VirtualQuery failed for %d bytes at address %p 000000015F8C 000000415F8C 0 Unknown pseudo relocation protocol version %d. 000000015FC0 000000415FC0 0 Unknown pseudo relocation bit size %d. 000000015FEE 000000415FEE 0 glob-1.0-mingw32 00000001601E 00000041601E 0 (null) 000000016025 000000416025 0 PRINTF_EXPONENT_DIGITS 0000000161A8 0000004161A8 0 Infinity 0000000161CF 0000004161CF 0 ?aCoc 0000000161EF 0000004161EF 0 <2ZGU 000000016380 000000416380 0 GCC: (GNU) 4.8.1 000000016394 000000416394 0 GCC: (GNU) 4.8.1 0000000163A8 0000004163A8 0 GCC: (GNU) 4.8.1 0000000163BC 0000004163BC 0 GCC: (GNU) 4.8.1 0000000163D0 0000004163D0 0 GCC: (GNU) 4.8.1 0000000163E4 0000004163E4 0 GCC: (GNU) 4.8.1 0000000163F8 0000004163F8 0 GCC: (GNU) 4.8.1 00000001640C 00000041640C 0 GCC: (GNU) 4.8.1 000000016420 000000416420 0 GCC: (GNU) 4.8.1 000000016434 000000416434 0 GCC: (GNU) 4.8.1 000000016448 000000416448 0 GCC: (GNU) 4.8.1 00000001645C 00000041645C 0 GCC: (GNU) 4.8.1 000000016470 000000416470 0 GCC: (GNU) 4.8.1 000000016484 000000416484 0 GCC: (GNU) 4.8.1 000000016498 000000416498 0 GCC: (GNU) 4.8.1 0000000164AC 0000004164AC 0 GCC: (GNU) 4.8.1 0000000164C0 0000004164C0 0 GCC: (GNU) 4.8.1 0000000164D4 0000004164D4 0 GCC: (GNU) 4.8.1 0000000164E8 0000004164E8 0 GCC: (GNU) 4.8.1 0000000164FC 0000004164FC 0 GCC: (GNU) 4.8.1 000000016510 000000416510 0 GCC: (GNU) 4.8.1 000000016524 000000416524 0 GCC: (GNU) 4.8.1 000000016538 000000416538 0 GCC: (GNU) 4.8.1 00000001654C 00000041654C 0 GCC: (GNU) 4.8.1 000000016560 000000416560 0 GCC: (GNU) 4.8.1 000000016574 000000416574 0 GCC: (GNU) 4.8.1 000000016588 000000416588 0 GCC: (GNU) 4.8.1 00000001659C 00000041659C 0 GCC: (GNU) 4.8.1 0000000165B0 0000004165B0 0 GCC: (GNU) 4.8.1 000000008F40 000000419140 0 MAINICON File pos Mem pos ID Text ======== ======= == ==== 00000001600F 00000041600F 0 f(null) 000000000050 000000400050 0 This program must be run under Win32 000000000270 000000400270 0 .idata 0000000002C0 0000004002C0 0 .rdata 0000000002E7 0000004002E7 0 P.reloc 00000000030F 00000040030F 0 P.rsrc 00000000059C 00000040119C 0 SVWUQ 0000000007BD 0000004013BD 0 w;;t$ 0000000008C8 0000004014C8 0 SVWUQ 0000000017AD 0000004023AD 0 Uh5$@ 000000001B17 000000402717 0 ~KxI[) 000000001CD0 0000004028D0 0 SOFTWARE\Borland\Delphi\RTL 000000001CEC 0000004028EC 0 FPUMaskValue 000000001D39 000000402939 0 PPRTj 000000001EB3 000000402AB3 0 YZXtp 00000000202A 000000402C2A 0 t=HtN 000000002204 000000402E04 0 Uh2.@ 0000000026CC 0000004032CC 0 SVWRP 0000000028F2 0000004034F2 0 t1SVW 000000003009 000000403C09 0 Uhd<@ 00000000312D 000000403D2D 0 Uhr=@ 00000000335D 000000403F5D 0 Uh}?@ 0000000033CE 000000403FCE 0 HBITMAP 000000003615 000000404215 0 Uh5B@ 00000000365D 00000040425D 0 Uh}B@ 000000003705 000000404305 0 Uh%C@ 00000000373D 00000040433D 0 Uh]C@ 0000000038E0 0000004044E0 0 YXZQRPR 0000000039F0 0000004045F0 0 R;P P| 000000003AB4 0000004046B4 0 IVXLCDMT 000000003C52 000000404852 0 t=8!u 000000003C64 000000404864 0 ,8"t& 000000003EF0 000000404AF0 0 Uh(K@ 00000000400F 000000404C0F 0 UhfL@ 0000000041E5 000000404DE5 0 QQQQS 00000000441E 00000040501E 0 UhrP@ 000000004605 000000405205 0 QQQQS 000000004E35 000000405A35 0 XH;XH~ P 000000004E50 000000405A50 0 9PD}-RP 000000004E83 000000405A83 0 PH9PL~ 000000004E9D 000000405A9D 0 KH+KLQ 000000004EBB 000000405ABB 0 ;CHRQ~ 00000000502A 000000405C2A 0 ;GHv 000000005210 000000405E10 0 @t:HS 00000000523A 000000405E3A 0 Z[XR1 000000005335 000000405F35 0 RP;P ~ 0000000053EB 000000405FEB 0 SPRQj 0000000060E5 000000406CE5 0 Uh/m@ 0000000062A5 000000406EA5 0 Uh"o@ 0000000063E9 000000406FE9 0 QQQQQS 000000006407 000000407007 0 Uhdp@ 0000000064E3 0000004070E3 0 Uh&q@ 0000000068A8 0000004074A8 0 \PROGRA~1\ 0000000068B9 0000004074B9 0 QQQQQQSVW 0000000069A8 0000004075A8 0 Uh\v@ 000000006DA5 0000004079A5 0 QQQQQQS3 000000006ED5 000000407AD5 0 QQQQQQ 0000000070A2 000000407CA2 0 UhJ}@ 0000000071A1 000000407DA1 0 QQQQQQSV 0000000071B6 000000407DB6 0 Uhu~@ File pos Mem pos ID Text ======== ======= == ==== 000000007858 000000409058 0 Error 000000007860 000000409060 0 Runtime error at 00000000 000000007880 000000409080 0 0123456789ABCDEF 000000007E58 000000415258 0 kernel32.dll 000000007E68 000000415268 0 DeleteCriticalSection 000000007E80 000000415280 0 LeaveCriticalSection 000000007E98 000000415298 0 EnterCriticalSection 000000007EB0 0000004152B0 0 InitializeCriticalSection 000000007ECC 0000004152CC 0 VirtualFree 000000007EDA 0000004152DA 0 VirtualAlloc 000000007EEA 0000004152EA 0 LocalFree 000000007EF6 0000004152F6 0 LocalAlloc 000000007F04 000000415304 0 GetVersion 000000007F12 000000415312 0 GetCurrentThreadId 000000007F28 000000415328 0 GetThreadLocale 000000007F3A 00000041533A 0 GetStartupInfoA 000000007F4C 00000041534C 0 GetLocaleInfoA 000000007F5E 00000041535E 0 GetCommandLineA 000000007F70 000000415370 0 FreeLibrary 000000007F7E 00000041537E 0 ExitProcess 000000007F8C 00000041538C 0 WriteFile 000000007F98 000000415398 0 UnhandledExceptionFilter 000000007FB4 0000004153B4 0 RtlUnwind 000000007FC0 0000004153C0 0 RaiseException 000000007FD2 0000004153D2 0 GetStdHandle 000000007FE0 0000004153E0 0 user32.dll 000000007FEE 0000004153EE 0 GetKeyboardType 000000008000 000000415400 0 MessageBoxA 00000000800C 00000041540C 0 advapi32.dll 00000000801C 00000041541C 0 RegQueryValueExA 000000008030 000000415430 0 RegOpenKeyExA 000000008040 000000415440 0 RegCloseKey 00000000804C 00000041544C 0 oleaut32.dll 00000000805C 00000041545C 0 SysFreeString 00000000806C 00000041546C 0 SysReAllocStringLen 000000008080 000000415480 0 kernel32.dll 000000008090 000000415490 0 TlsSetValue 00000000809E 00000041549E 0 TlsGetValue 0000000080AC 0000004154AC 0 LocalAlloc 0000000080BA 0000004154BA 0 GetModuleHandleA 0000000080CC 0000004154CC 0 advapi32.dll 0000000080DC 0000004154DC 0 RegSetValueExA 0000000080EE 0000004154EE 0 RegOpenKeyExA 0000000080FE 0000004154FE 0 RegCloseKey 00000000810A 00000041550A 0 kernel32.dll 00000000811A 00000041551A 0 WriteFile 000000008126 000000415526 0 WinExec 000000008130 000000415530 0 SetFilePointer 000000008142 000000415542 0 SetFileAttributesA 000000008158 000000415558 0 SetEndOfFile 000000008168 000000415568 0 SetCurrentDirectoryA 000000008180 000000415580 0 ReleaseMutex 000000008190 000000415590 0 ReadFile 00000000819C 00000041559C 0 GetWindowsDirectoryA 0000000081B4 0000004155B4 0 GetTempPathA 0000000081C4 0000004155C4 0 GetShortPathNameA 0000000081D8 0000004155D8 0 GetModuleFileNameA 0000000081EE 0000004155EE 0 GetLogicalDriveStringsA 000000008208 000000415608 0 GetLocalTime 000000008218 000000415618 0 GetLastError File pos Mem pos ID Text ======== ======= == ==== 000000008228 000000415628 0 GetFileSize 000000008236 000000415636 0 GetFileAttributesA 00000000824C 00000041564C 0 GetDriveTypeA 00000000825C 00000041565C 0 GetCommandLineA 00000000826E 00000041566E 0 FreeLibrary 00000000827C 00000041567C 0 FindNextFileA 00000000828C 00000041568C 0 FindFirstFileA 00000000829E 00000041569E 0 FindClose 0000000082AA 0000004156AA 0 DeleteFileA 0000000082B8 0000004156B8 0 CreateMutexA 0000000082C8 0000004156C8 0 CreateFileA 0000000082D6 0000004156D6 0 CreateDirectoryA 0000000082EA 0000004156EA 0 CloseHandle 0000000082F6 0000004156F6 0 gdi32.dll 000000008302 000000415702 0 StretchDIBits 000000008312 000000415712 0 SetDIBits 00000000831E 00000041571E 0 SelectObject 00000000832E 00000041572E 0 GetObjectA 00000000833C 00000041573C 0 GetDIBits 000000008348 000000415748 0 DeleteObject 000000008358 000000415758 0 DeleteDC 000000008364 000000415764 0 CreateSolidBrush 000000008378 000000415778 0 CreateDIBSection 00000000838C 00000041578C 0 CreateCompatibleDC 0000000083A2 0000004157A2 0 CreateCompatibleBitmap 0000000083BC 0000004157BC 0 BitBlt 0000000083C4 0000004157C4 0 user32.dll 0000000083D2 0000004157D2 0 ReleaseDC 0000000083DE 0000004157DE 0 GetSysColor 0000000083EC 0000004157EC 0 GetIconInfo 0000000083FA 0000004157FA 0 GetDC 000000008402 000000415802 0 FillRect 00000000840E 00000041580E 0 DestroyIcon 00000000841C 00000041581C 0 CopyImage 000000008428 000000415828 0 CharLowerBuffA 000000008438 000000415838 0 shell32.dll 000000008446 000000415846 0 ShellExecuteA 000000008456 000000415856 0 ExtractIconA 00000000880F 00000041800F 0 0"0*020:0B0J0R0Z0b0j0r0z0 00000000883F 00000041803F 0 0 1(1 000000008857 000000418057 0 4-595T5 00000000885F 00000041805F 0 567r7 00000000887D 00000041807D 0 8&8,848F8R8a8m8u8 0000000088AB 0000004180AB 0 9/9:9[9s9 0000000088BD 0000004180BD 0 :W:w: 0000000088CD 0000004180CD 0 <'<0<;<D<K<Z<a< 0000000088F1 0000004180F1 0 >b>k> 000000008901 000000418101 0 ?2?\?e?u?}? 00000000892B 00000041812B 0 0(0@0L0T0k0z0 000000008945 000000418145 0 0,1P1n1~1 00000000895B 00000041815B 0 2$2u2|2 00000000897D 00000041817D 0 4#4+4O4o4 00000000899B 00000041819B 0 8A8Q8g8 0000000089AD 0000004181AD 0 9*929H9 0000000089C3 0000004181C3 0 9+:X:a: 0000000089D3 0000004181D3 0 :G;o; 0000000089DF 0000004181DF 0 < =T=\=g= 0000000089F1 0000004181F1 0 >N>R>X>\>a>h>n>v> 000000008A11 000000418211 0 ?%?/?7?=?K?f?{? 000000008A38 000000418238 0 N0W0}0 File pos Mem pos ID Text ======== ======= == ==== 000000008A41 000000418241 0 466?6:7C7 000000008A53 000000418253 0 <)<2<><E< 000000008A5F 00000041825F 0 =/=;=B=L=V=m=~= 000000008A89 000000418289 0 >/>@>J>R>Z>b>j> 000000008AA7 0000004182A7 0 ?&?+?0?7?>?H?_?k?x? 000000008ADD 0000004182DD 0 0:0B0J0R0Z0b0j0r0z0 000000008B17 000000418317 0 1"1*121:1B1J1R1Z1b1j1r1z1 000000008B47 000000418347 0 2#202B2J2R2_2k2x2 000000008B6D 00000041836D 0 3 323?3K3X3j3w3 000000008B93 000000418393 0 4$4(4,484<4@4L4P4T4 000000008BA7 0000004183A7 0 4d4h4t4x4|4 000000008C15 000000418415 0 6_8H9 000000008C1B 00000041841B 0 9,;:;A;H;c;o; 000000008C51 000000418451 0 :(;=;c; 000000008C6B 00000041846B 0 =*=:=Z= 000000008C75 000000418475 0 >A>v> 000000008C90 000000418490 0 040R0 000000008CB1 0000004184B1 0 2_3n3 000000008CC5 0000004184C5 0 5 6J6 000000008CD1 0000004184D1 0 7U7w7 000000008CDD 0000004184DD 0 9_9d9w9 000000008CEB 0000004184EB 0 :.:E:c:z: 000000008D07 000000418507 0 <==u= 000000008D0D 00000041850D 0 =.>c> 000000008D29 000000418529 0 030F0X0\0 000000008D33 000000418533 0 0d0h0l0p0t0x0|0 000000008D77 000000418577 0 1%191M1a1 000000008D90 000000418590 0 004080 000000008DAD 0000004185AD 0 1 1$1(1 00000000A023 00000041A223 0 RsZLZ 00000000A096 00000041A296 0 Uag%N 00000000A0E0 00000041A2E0 0 Delphi-the best. Fuck off all the rest. Neshta 1.0 Made in Belarus. 00000000A1A8 00000041A3A8 0 ! Best regards 2 Tommy Salo. [Nov-2005] yours [Dziadulja Apanas] 00000000BAAA 00000040BAAA 0 DeleteCriticalSection 00000000BAC2 00000040BAC2 0 EnterCriticalSection 00000000BADA 00000040BADA 0 ExitProcess 00000000BAE8 00000040BAE8 0 GetCommandLineA 00000000BAFA 00000040BAFA 0 GetLastError 00000000BB0A 00000040BB0A 0 GetModuleHandleA 00000000BB1E 00000040BB1E 0 GetProcAddress 00000000BB30 00000040BB30 0 InitializeCriticalSection 00000000BB4C 00000040BB4C 0 InterlockedExchange 00000000BB62 00000040BB62 0 IsDBCSLeadByteEx 00000000BB76 00000040BB76 0 LeaveCriticalSection 00000000BB8E 00000040BB8E 0 MultiByteToWideChar 00000000BBA4 00000040BBA4 0 SetUnhandledExceptionFilter 00000000BBC2 00000040BBC2 0 Sleep 00000000BBCA 00000040BBCA 0 TlsGetValue 00000000BBD8 00000040BBD8 0 VirtualProtect 00000000BBEA 00000040BBEA 0 VirtualQuery 00000000BBFA 00000040BBFA 0 WideCharToMultiByte 00000000BC10 00000040BC10 0 _strdup 00000000BC1A 00000040BC1A 0 _stricoll 00000000BC26 00000040BC26 0 __getmainargs 00000000BC36 00000040BC36 0 __mb_cur_max 00000000BC46 00000040BC46 0 __p__environ 00000000BC56 00000040BC56 0 __p__fmode 00000000BC64 00000040BC64 0 __set_app_type 00000000BC76 00000040BC76 0 _cexit 00000000BC80 00000040BC80 0 _errno File pos Mem pos ID Text ======== ======= == ==== 00000000BC8A 00000040BC8A 0 _findclose 00000000BC98 00000040BC98 0 _findfirst 00000000BCA6 00000040BCA6 0 _findnext 00000000BCB2 00000040BCB2 0 _fullpath 00000000BCC6 00000040BCC6 0 _onexit 00000000BCD0 00000040BCD0 0 _setmode 00000000BCDC 00000040BCDC 0 abort 00000000BCE4 00000040BCE4 0 atexit 00000000BCF6 00000040BCF6 0 calloc 00000000BD00 00000040BD00 0 fputc 00000000BD10 00000040BD10 0 fwrite 00000000BD1A 00000040BD1A 0 getenv 00000000BD24 00000040BD24 0 isspace 00000000BD2E 00000040BD2E 0 localeconv 00000000BD3C 00000040BD3C 0 malloc 00000000BD46 00000040BD46 0 mbstowcs 00000000BD52 00000040BD52 0 memcpy 00000000BD5C 00000040BD5C 0 realloc 00000000BD66 00000040BD66 0 setlocale 00000000BD72 00000040BD72 0 signal 00000000BD7C 00000040BD7C 0 strchr 00000000BD86 00000040BD86 0 strcoll 00000000BD90 00000040BD90 0 strlen 00000000BD9A 00000040BD9A 0 strncpy 00000000BDA4 00000040BDA4 0 tolower 00000000BDAE 00000040BDAE 0 vfprintf 00000000BDBA 00000040BDBA 0 wcslen 00000000BDC4 00000040BDC4 0 wcstombs 00000000BDCE 00000040BDCE 0 MSXFS.dll 00000000BDDA 00000040BDDA 0 WFSStartUp 00000000BDEE 00000040BDEE 0 WFSOpen 00000000BDFE 00000040BDFE 0 WFSLock 00000000BE0E 00000040BE0E 0 WFSFreeResult 00000000BE22 00000040BE22 0 WFSGetInfo 00000000BE36 00000040BE36 0 WFSCleanUp 00000000BE4A 00000040BE4A 0 WFSClose 00000000BE5A 00000040BE5A 0 WFSUnlock 00000000BEB0 00000040BEB0 0 kernel32.dll 00000000BEC8 00000040BEC8 0 msvcrt.dll 00000000BF6C 00000040BF6C 0 msvcrt.dll 00000000C409 00000040C409 0 "w1N] 00000000C4F2 00000040C4F2 0 Ll8];; 00000000C629 00000040C629 0 1tov] 00000000C6A7 00000040C6A7 0 cS+!t\ 00000000C6B7 00000040C6B7 0 *u(;1 00000000C6E8 00000040C6E8 0 lm\1A 00000000D052 00000040D052 0 SUBKf 00000000D08D 00000040D08D 0 VALUf 00000000D0CA 00000040D0CA 0 EMPTf 00000000D101 00000040D101 0 _LONf 00000000D13A 00000040D13A 0 ITEMf 00000000D171 00000040D171 0 O_LOf 00000000D1A5 00000040D1A5 0 READf 00000000D1D5 00000040D1D5 0 _ERRf 00000000D209 00000040D209 0 _ERRf 00000000D27A 00000040D27A 0 HANDf 00000000D2B3 00000040D2B3 0 BUFFf 00000000D3BC 00000040D3BC 0 VIDEf 00000000D483 00000040D483 0 REQ_f 00000000D4B7 00000040D4B7 0 RESUf File pos Mem pos ID Text ======== ======= == ==== 00000000D523 00000040D523 0 TIMEf 00000000D55A 00000040D55A 0 ELEVf 00000000D585 00000040D585 0 LOCKf 00000000D613 00000040D613 0 THREf 00000000D664 00000040D664 0 LOCKf 00000000D6F3 00000040D6F3 0 STERf 00000000D727 00000040D727 0 OGREf 00000000D75B 00000040D75B 0 EMORf 00000000D792 00000040D792 0 FOUNf 00000000D82A 00000040D82A 0 _HIGf 00000000D8E3 00000040D8E3 0 OMMAf 00000000D925 00000040D925 0 _SRVf 00000000D983 00000040D983 0 _ERRf 00000000D9DE 00000040D9DE 0 _ERRf 00000000DAAF 00000040DAAF 0 ERROf 00000000DB6A 00000040DB6A 0 CYMIf 00000000DBA1 00000040DBA1 0 NSABf 00000000DC0E 00000040DC0E 0 ITIOf 00000000DC7C 00000040DC7C 0 OTOPf 00000000DCEA 00000040DCEA 0 LOSEf 00000000DD81 00000040DD81 0 ACTIf 00000000DE3A 00000040DE3A 0 OITEf 00000000DEAC 00000040DEAC 0 NKNOf 00000000DEE3 00000040DEE3 0 STAKf 00000000DFA8 00000040DFA8 0 SITIf 00000000DFEA 00000040DFEA 0 CTARf 00000000E0AA 00000040E0AA 0 TAKEf 00000000E0DA 00000040E0DA 0 SLEFf 00000000F34E 00000040F34E 0 <\t?</t; 000000011919 000000411919 0 D$p9D$0 0000000125FD 0000004125FD 0 )D$,) 0000000129B9 0000004129B9 0 L$\9L$ 0000000135BE 0000004135BE 0 9l$Xv, 00000001363C 00000041363C 0 9|$Xv7 000000014CB3 000000414CB3 0 r/9D$ 0000000151E1 0000004151E1 0 EMPTf 000000015600 000000415600 0 libgcc_s_dw2-1.dll 000000015613 000000415613 0 __register_frame_info 000000015629 000000415629 0 libgcj-13.dll 000000015637 000000415637 0 _Jv_RegisterClasses 00000001564B 00000041564B 0 __deregister_frame_info 000000015BA8 000000415BA8 0 Please enter service name! 000000015BC8 000000415BC8 0 WFSStartUp failed with error: %s 000000015BEC 000000415BEC 0 WFSVERSION: 000000015BF8 000000415BF8 0 wVersion: 0x%X 000000015C08 000000415C08 0 wLowVersion: 0x%X 000000015C1B 000000415C1B 0 wHighVersion: 0x%X 000000015C2F 000000415C2F 0 szDescription: %s 000000015C42 000000415C42 0 szSystemStatus: %s 000000015C58 000000415C58 0 WFSOpen(%s) failed with error: %s 000000015C7C 000000415C7C 0 WFSLock failed with error: %s 000000015C9C 000000415C9C 0 WFSFreeResult failed with error: %s 000000015CC4 000000415CC4 0 WFSGetInfo (WFS_INF_CDM_CASH_UNIT_INFO) failed with error: %s 000000015D03 000000415D03 0 REJECTCASSETTE 000000015D12 000000415D12 0 BILLCASSETTE 000000015D1F 000000415D1F 0 COINCYLINDER 000000015D2C 000000415D2C 0 COINDISPENSER 000000015D3A 000000415D3A 0 RETRACTCASSETTE 000000015D4A 000000415D4A 0 COUPON 000000015D51 000000415D51 0 DOCUMENT File pos Mem pos ID Text ======== ======= == ==== 000000015D5A 000000415D5A 0 REPCONTAINER 000000015D67 000000415D67 0 RECYCLINGCASSETTE 000000015D79 000000415D79 0 NOTAPPLICABLE 000000015D87 000000415D87 0 NOVALUES 000000015D90 000000415D90 0 NOREFERENCE 000000015D9C 000000415D9C 0 MANIPULATED 000000015DA8 000000415DA8 0 INOPERATIVE 000000015DB4 000000415DB4 0 ---------------------------- 000000015DD4 000000415DD4 0 Cash Unit # %d 000000015DE3 000000415DE3 0 Type: %s 000000015DEC 000000415DEC 0 Status: %s 000000015DF7 000000415DF7 0 Currency ID: %.3s 000000015E09 000000415E09 0 Note Value: %u 000000015E18 000000415E18 0 Notes Count: %u 000000015E28 000000415E28 0 Notes Initial Count: %u 000000015E40 000000415E40 0 Notes Minimum Count: %u 000000015E58 000000415E58 0 Notes Maximum Count: %u 000000015E74 000000415E74 0 WFSUnlock failed with error: %s 000000015E98 000000415E98 0 WFSClose failed with error: %s 000000015EB8 000000415EB8 0 WFSCleanUp failed with error: %s 000000015EDB 000000415EDB 0 Success 000000015F40 000000415F40 0 Mingw runtime failure: 000000015F58 000000415F58 0 VirtualQuery failed for %d bytes at address %p 000000015F8C 000000415F8C 0 Unknown pseudo relocation protocol version %d. 000000015FC0 000000415FC0 0 Unknown pseudo relocation bit size %d. 000000015FEE 000000415FEE 0 glob-1.0-mingw32 00000001601E 00000041601E 0 (null) 000000016025 000000416025 0 PRINTF_EXPONENT_DIGITS 0000000161A8 0000004161A8 0 Infinity 0000000161CF 0000004161CF 0 ?aCoc 0000000161EF 0000004161EF 0 <2ZGU 000000016380 000000416380 0 GCC: (GNU) 4.8.1 000000016394 000000416394 0 GCC: (GNU) 4.8.1 0000000163A8 0000004163A8 0 GCC: (GNU) 4.8.1 0000000163BC 0000004163BC 0 GCC: (GNU) 4.8.1 0000000163D0 0000004163D0 0 GCC: (GNU) 4.8.1 0000000163E4 0000004163E4 0 GCC: (GNU) 4.8.1 0000000163F8 0000004163F8 0 GCC: (GNU) 4.8.1 00000001640C 00000041640C 0 GCC: (GNU) 4.8.1 000000016420 000000416420 0 GCC: (GNU) 4.8.1 000000016434 000000416434 0 GCC: (GNU) 4.8.1 000000016448 000000416448 0 GCC: (GNU) 4.8.1 00000001645C 00000041645C 0 GCC: (GNU) 4.8.1 000000016470 000000416470 0 GCC: (GNU) 4.8.1 000000016484 000000416484 0 GCC: (GNU) 4.8.1 000000016498 000000416498 0 GCC: (GNU) 4.8.1 0000000164AC 0000004164AC 0 GCC: (GNU) 4.8.1 0000000164C0 0000004164C0 0 GCC: (GNU) 4.8.1 0000000164D4 0000004164D4 0 GCC: (GNU) 4.8.1 0000000164E8 0000004164E8 0 GCC: (GNU) 4.8.1 0000000164FC 0000004164FC 0 GCC: (GNU) 4.8.1 000000016510 000000416510 0 GCC: (GNU) 4.8.1 000000016524 000000416524 0 GCC: (GNU) 4.8.1 000000016538 000000416538 0 GCC: (GNU) 4.8.1 00000001654C 00000041654C 0 GCC: (GNU) 4.8.1 000000016560 000000416560 0 GCC: (GNU) 4.8.1 000000016574 000000416574 0 GCC: (GNU) 4.8.1 000000016588 000000416588 0 GCC: (GNU) 4.8.1 00000001659C 00000041659C 0 GCC: (GNU) 4.8.1 0000000165B0 0000004165B0 0 GCC: (GNU) 4.8.1 File pos Mem pos ID Text ======== ======= == ==== 000000008F40 000000419140 0 MAINICON 00000001600F 00000041600F 0 f(null)
=== DOWNLOAD === Mirror provided by vx-underground.org, thx!