.- - -----÷M÷E÷N÷U÷------------------------------------------------------------- --- ----  -------------.
!  WALL ! STATS ! GOODIES ! YARA ! FAQ ! RSS                                                            !
`--------------  - ---  ---------- -------- -------- -------- -------- ----------------- -  ---- ---- --'

                                           ATM MALWARE NOTICE 
                    26b2daa6fbf5ec13599d24e6819202ddb3f770428d732100be15c23be317bd47
 
Date...........: 2018-09-05
Family.........: Atmosphere
File name......: J133288_18074_a.exe
File size......: 168.00 KB
Type file......: EXE/Windows
Virscan........: VT - HA
Documentation..: https://owncloud.group-ib.ru/s/aTugJcPclCLnQPb/download?path=%2F&files=Silence_Group-IB_Eng_Public.pdf
Additional note: drop a6c33d7275c46397593f53ea136ea8669794f4d787044106594631c07a9ee71d

Entropy:


Binary Histogram:


=== PEDUMP REPORT === 
=== MZ Header === signature: "MZ" bytes_in_last_block: 144 0x90 blocks_in_file: 3 3 num_relocs: 0 0 header_paragraphs: 4 4 min_extra_paragraphs: 0 0 max_extra_paragraphs: 65535 0xffff ss: 0 0 sp: 184 0xb8 checksum: 0 0 ip: 0 0 cs: 0 0 reloc_table_offset: 64 0x40 overlay_number: 0 0 reserved0: 0 0 oem_id: 0 0 oem_info: 0 0 reserved2: 0 0 reserved3: 0 0 reserved4: 0 0 reserved5: 0 0 reserved6: 0 0 lfanew: 248 0xf8 === DOS STUB === 00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......| === RICH Header === LIB_ID VERSION TIMES_USED 93 5d 4035 fc3 2 2 12 c 7291 1c7b 1 1 14 e 7299 1c83 25 19 0 0 0 0 4 4 10 a 8168 1fe8 136 88 19 13 8034 1f62 4 4 93 5d 2179 883 3 3 1 1 0 0 109 6d 11 b 8168 1fe8 37 25 6 6 1720 6b8 1 1 === PE Header === signature: "PE\x00\x00" # IMAGE_FILE_HEADER: Machine: 332 0x14c x86 NumberOfSections: 4 4 TimeDateStamp: "2018-04-07 17:08:14" PointerToSymbolTable: 0 0 NumberOfSymbols: 0 0 SizeOfOptionalHeader: 224 0xe0 Characteristics: 271 0x10f RELOCS_STRIPPED, EXECUTABLE_IMAGE LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED 32BIT_MACHINE # IMAGE_OPTIONAL_HEADER32: Magic: 267 0x10b 32-bit executable LinkerVersion: 6.0 SizeOfCode: 57344 0xe000 SizeOfInitializedData: 118784 0x1d000 SizeOfUninitializedData: 0 0 AddressOfEntryPoint: 27887 0x6cef BaseOfCode: 4096 0x1000 BaseOfData: 61440 0xf000 ImageBase: 4194304 0x400000 SectionAlignment: 4096 0x1000 FileAlignment: 4096 0x1000 OperatingSystemVersion: 4.0 ImageVersion: 0.0 SubsystemVersion: 4.0 Reserved1: 0 0 SizeOfImage: 180224 0x2c000 SizeOfHeaders: 4096 0x1000 CheckSum: 0 0 Subsystem: 3 3 WINDOWS_CUI DllCharacteristics: 0 0 SizeOfStackReserve: 1048576 0x100000 SizeOfStackCommit: 4096 0x1000 SizeOfHeapReserve: 1048576 0x100000 SizeOfHeapCommit: 4096 0x1000 LoaderFlags: 0 0 NumberOfRvaAndSizes: 16 0x10 === DATA DIRECTORY === EXPORT rva:0x 0 size:0x 0 IMPORT rva:0x 10b28 size:0x 50 RESOURCE rva:0x 16000 size:0x 15060 EXCEPTION rva:0x 0 size:0x 0 SECURITY rva:0x 0 size:0x 0 BASERELOC rva:0x 0 size:0x 0 DEBUG rva:0x 0 size:0x 0 ARCHITECTURE rva:0x 0 size:0x 0 GLOBALPTR rva:0x 0 size:0x 0 TLS rva:0x 0 size:0x 0 LOAD_CONFIG rva:0x 0 size:0x 0 Bound_IAT rva:0x 0 size:0x 0 IAT rva:0x f000 size:0x 15c Delay_IAT rva:0x 0 size:0x 0 CLR_Header rva:0x 0 size:0x 0 rva:0x 0 size:0x 0 === SECTIONS === NAME RVA VSZ RAW_SZ RAW_PTR nREL REL_PTR nLINE LINE_PTR FLAGS .text 1000 d329 e000 1000 0 0 0 0 60000020 R-X CODE .rdata f000 22d6 3000 f000 0 0 0 0 40000040 R-- IDATA .data 12000 30e4 2000 12000 0 0 0 0 c0000040 RW- IDATA .rsrc 16000 15060 16000 14000 0 0 0 0 40000040 R-- IDATA === RESOURCES === FILE_OFFSET CP LANG SIZE TYPE NAME 0x14060 0 0x409 86016 BIN #101 === IMPORTS === MODULE_NAME HINT ORD FUNCTION_NAME KERNEL32.dll 348 SizeofResource KERNEL32.dll 25b LockResource KERNEL32.dll 24d LoadResource KERNEL32.dll da FindResourceA KERNEL32.dll 177 GetModuleHandleA KERNEL32.dll 1b1 GetStdHandle KERNEL32.dll 169 GetLastError KERNEL32.dll 1d5 GetTickCount KERNEL32.dll 175 GetModuleFileNameA KERNEL32.dll 349 Sleep KERNEL32.dll 2c7 ResumeThread KERNEL32.dll 379 VirtualFreeEx KERNEL32.dll 24e LocalAlloc KERNEL32.dll 248 LoadLibraryA KERNEL32.dll 3a0 WriteProcessMemory KERNEL32.dll 198 GetProcAddress KERNEL32.dll 376 VirtualAllocEx KERNEL32.dll 1cd GetThreadContext KERNEL32.dll 34b SuspendThread KERNEL32.dll 280 OpenThread KERNEL32.dll 355 Thread32Next KERNEL32.dll 354 Thread32First KERNEL32.dll 6c CreateToolhelp32Snapshot KERNEL32.dll 27c OpenProcess KERNEL32.dll 13a GetCurrentProcess KERNEL32.dll 28e Process32Next KERNEL32.dll 28c Process32First KERNEL32.dll 305 SetEndOfFile KERNEL32.dll 252 LocalFree KERNEL32.dll 310 SetFilePointer KERNEL32.dll 397 WriteFile KERNEL32.dll 4d CreateFileA KERNEL32.dll 15b GetFileSize KERNEL32.dll 2ab ReadFile KERNEL32.dll 2e CloseHandle KERNEL32.dll 45 CreateDirectoryA KERNEL32.dll 156 GetFileAttributesA KERNEL32.dll 334 SetThreadContext KERNEL32.dll 18b GetOEMCP KERNEL32.dll f5 GetACP KERNEL32.dll 32c SetStdHandle KERNEL32.dll 226 IsBadCodePtr KERNEL32.dll 229 IsBadReadPtr KERNEL32.dll 26b MultiByteToWideChar KERNEL32.dll 389 WideCharToMultiByte KERNEL32.dll 2cc RtlUnwind KERNEL32.dll 29d RaiseException KERNEL32.dll 210 HeapReAlloc KERNEL32.dll 206 HeapAlloc KERNEL32.dll 20c HeapFree KERNEL32.dll af ExitProcess KERNEL32.dll 351 TerminateProcess KERNEL32.dll 108 GetCommandLineA KERNEL32.dll 1de GetVersion KERNEL32.dll 23a LCMapStringA KERNEL32.dll 23b LCMapStringW KERNEL32.dll fc GetCPInfo KERNEL32.dll 212 HeapSize KERNEL32.dll 33d SetUnhandledExceptionFilter KERNEL32.dll 20a HeapDestroy KERNEL32.dll 208 HeapCreate KERNEL32.dll 378 VirtualFree KERNEL32.dll 375 VirtualAlloc KERNEL32.dll 22c IsBadWritePtr KERNEL32.dll 319 SetHandleCount KERNEL32.dll 15e GetFileType KERNEL32.dll 1af GetStartupInfoA KERNEL32.dll 362 UnhandledExceptionFilter KERNEL32.dll ed FreeEnvironmentStringsA KERNEL32.dll ee FreeEnvironmentStringsW KERNEL32.dll 14d GetEnvironmentStrings KERNEL32.dll 14f GetEnvironmentStringsW KERNEL32.dll e5 FlushFileBuffers KERNEL32.dll 1b2 GetStringTypeA KERNEL32.dll 1b5 GetStringTypeW ADVAPI32.dll 17 AdjustTokenPrivileges ADVAPI32.dll 142 OpenProcessToken ADVAPI32.dll 18 AllocateAndInitializeSid ADVAPI32.dll 197 SetEntriesInAclA ADVAPI32.dll df InitializeSecurityDescriptor ADVAPI32.dll 1a5 SetSecurityDescriptorDacl ADVAPI32.dll 19b SetFileSecurityA ADVAPI32.dll 9d FreeSid SHLWAPI.dll b PathAppendA === Packer / Compiler === MS Visual C++ v6.0
=== Strings ===
File pos Mem pos ID Text ======== ======= == ==== 00000000004D 00000040004D 0 !This program cannot be run in DOS mode. 0000000001F0 0000004001F0 0 .text 000000000218 000000400218 0 .rdata 00000000023F 00000040023F 0 @.data 000000000268 000000400268 0 .rsrc 0000000023D3 0000004023D3 0 PSSSSSSSSj 0000000049E9 0000004049E9 0 t/Ht HH 0000000053DA 0000004053DA 0 VWhST@ 00000000570B 00000040570B 0 QWj P 0000000058BD 0000004058BD 0 QQSVWd 000000005B5F 000000405B5F 0 SVWUj 000000005BC8 000000405BC8 0 t.;t$$t( 000000006656 000000406656 0 uRFGHt 000000006700 000000406700 0 tlHt. 0000000067D8 0000004067D8 0 wDVSU 0000000069C0 0000004069C0 0 VC20XC00U 000000007516 000000407516 0 PPPPPPPP 000000007576 000000407576 0 9= :A 00000000757C 00000040757C 0 uFWWj 0000000075A1 0000004075A1 0 "WWSh| 00000000768D 00000040768D 0 tMWWS 000000007AD0 000000407AD0 0 sO;>|C;~ 000000007FC8 000000407FC8 0 QQSVW 0000000080A9 0000004080A9 0 QQSVW 0000000080FF 0000004080FF 0 QQSVW 000000008645 000000408645 0 HHtpHHtl 0000000088FC 0000004088FC 0 Yt f 000000008EBB 000000408EBB 0 btHHt. 000000009B67 000000409B67 0 DSUVWh 00000000A13D 00000040A13D 0 eYt,F 00000000A756 00000040A756 0 ?=t"U 00000000A8AA 00000040A8AA 0 8"uF@ 00000000AA78 00000040AA78 0 SS@SSPVSS 00000000AA9A 00000040AA9A 0 t#SSUP 00000000AAA1 00000040AAA1 0 t$$VSS 00000000AB77 00000040AB77 0 A=(.A 00000000B786 00000040B786 0 PPPPPPPP 00000000BB2D 00000040BB2D 0 B=h0A 00000000BD93 00000040BD93 0 t-Ht!Ht 00000000C276 00000040C276 0 SVWj 00000000C39F 00000040C39F 0 SVWj 00000000C7C2 00000040C7C2 0 Y;5T=A 00000000C9C5 00000040C9C5 0 Wj@Y3 00000000CB98 00000040CB98 0 VWuBhT"A 00000000CD48 00000040CD48 0 FGQPS 00000000CFD4 00000040CFD4 0 +ttHHtd 00000000D012 00000040D012 0 j XO 00000000D258 00000040D258 0 HHtYHHtF 00000000F224 00000040F224 0 string too long 00000000F254 00000040F254 0 invalid string position 00000000F3B8 00000040F3B8 0 ios::eofbit set 00000000F3C8 00000040F3C8 0 ios::failbit set 00000000F3DC 00000040F3DC 0 ios::badbit set 00000000F45C 00000040F45C 0 Unknown exception 00000000F4A0 00000040F4A0 0 H:mm:ss 00000000F4A8 00000040F4A8 0 dddd, MMMM dd, yyyy 00000000F4BC 00000040F4BC 0 M/d/yy 00000000F4CC 00000040F4CC 0 December 00000000F4D8 00000040F4D8 0 November 00000000F4E4 00000040F4E4 0 October File pos Mem pos ID Text ======== ======= == ==== 00000000F4EC 00000040F4EC 0 September 00000000F4F8 00000040F4F8 0 August 00000000F510 00000040F510 0 April 00000000F518 00000040F518 0 March 00000000F520 00000040F520 0 February 00000000F52C 00000040F52C 0 January 00000000F564 00000040F564 0 Saturday 00000000F570 00000040F570 0 Friday 00000000F578 00000040F578 0 Thursday 00000000F584 00000040F584 0 Wednesday 00000000F590 00000040F590 0 Tuesday 00000000F598 00000040F598 0 Monday 00000000F5A0 00000040F5A0 0 Sunday 00000000F661 00000040F661 0 (8PX 00000000F669 00000040F669 0 700WP 00000000F681 00000040F681 0 ppxxxx 00000000F6AC 00000040F6AC 0 (null) 00000000F6CE 00000040F6CE 0 GAIsProcessorFeaturePresent 00000000F6EC 00000040F6EC 0 KERNEL32 00000000F6F8 00000040F6F8 0 e+000 00000000F700 00000040F700 0 runtime error 00000000F714 00000040F714 0 TLOSS error 00000000F724 00000040F724 0 SING error 00000000F734 00000040F734 0 DOMAIN error 00000000F744 00000040F744 0 R6028 00000000F74B 00000040F74B 0 - unable to initialize heap 00000000F76C 00000040F76C 0 R6027 00000000F773 00000040F773 0 - not enough space for lowio initialization 00000000F7A4 00000040F7A4 0 R6026 00000000F7AB 00000040F7AB 0 - not enough space for stdio initialization 00000000F7DC 00000040F7DC 0 R6025 00000000F7E3 00000040F7E3 0 - pure virtual function call 00000000F804 00000040F804 0 R6024 00000000F80B 00000040F80B 0 - not enough space for _onexit/atexit table 00000000F83C 00000040F83C 0 R6019 00000000F843 00000040F843 0 - unable to open console device 00000000F868 00000040F868 0 R6018 00000000F86F 00000040F86F 0 - unexpected heap error 00000000F88C 00000040F88C 0 R6017 00000000F893 00000040F893 0 - unexpected multithread lock error 00000000F8BC 00000040F8BC 0 R6016 00000000F8C3 00000040F8C3 0 - not enough space for thread data 00000000F8EA 00000040F8EA 0 abnormal program termination 00000000F90C 00000040F90C 0 R6009 00000000F913 00000040F913 0 - not enough space for environment 00000000F938 00000040F938 0 R6008 00000000F93F 00000040F93F 0 - not enough space for arguments 00000000F964 00000040F964 0 R6002 00000000F96B 00000040F96B 0 - floating point not loaded 00000000F98C 00000040F98C 0 Microsoft Visual C++ Runtime Library 00000000F9B8 00000040F9B8 0 Runtime Error! 00000000F9C8 00000040F9C8 0 Program: 00000000F9D8 00000040F9D8 0 <program name unknown> 00000000F9FC 00000040F9FC 0 SunMonTueWedThuFriSat 00000000FA14 00000040FA14 0 JanFebMarAprMayJunJulAugSepOctNovDec 00000000FA3C 00000040FA3C 0 GetLastActivePopup 00000000FA50 00000040FA50 0 GetActiveWindow 00000000FA60 00000040FA60 0 MessageBoxA 00000000FA6C 00000040FA6C 0 1#QNAN 00000000FA74 00000040FA74 0 1#INF File pos Mem pos ID Text ======== ======= == ==== 00000000FA7C 00000040FA7C 0 1#IND 00000000FA84 00000040FA84 0 1#SNAN 000000010CD6 000000410CD6 0 CreateDirectoryA 000000010CEA 000000410CEA 0 GetFileAttributesA 000000010D00 000000410D00 0 CloseHandle 000000010D0E 000000410D0E 0 ReadFile 000000010D1A 000000410D1A 0 GetFileSize 000000010D28 000000410D28 0 CreateFileA 000000010D36 000000410D36 0 WriteFile 000000010D42 000000410D42 0 SetFilePointer 000000010D54 000000410D54 0 LocalFree 000000010D60 000000410D60 0 LocalAlloc 000000010D6E 000000410D6E 0 SizeofResource 000000010D80 000000410D80 0 LockResource 000000010D90 000000410D90 0 LoadResource 000000010DA0 000000410DA0 0 FindResourceA 000000010DB0 000000410DB0 0 GetModuleHandleA 000000010DC4 000000410DC4 0 GetStdHandle 000000010DD4 000000410DD4 0 GetLastError 000000010DE4 000000410DE4 0 GetTickCount 000000010DF4 000000410DF4 0 GetModuleFileNameA 000000010E0A 000000410E0A 0 Sleep 000000010E12 000000410E12 0 ResumeThread 000000010E22 000000410E22 0 VirtualFreeEx 000000010E32 000000410E32 0 SetThreadContext 000000010E46 000000410E46 0 LoadLibraryA 000000010E56 000000410E56 0 WriteProcessMemory 000000010E6C 000000410E6C 0 GetProcAddress 000000010E7E 000000410E7E 0 VirtualAllocEx 000000010E90 000000410E90 0 GetThreadContext 000000010EA4 000000410EA4 0 SuspendThread 000000010EB4 000000410EB4 0 OpenThread 000000010EC2 000000410EC2 0 Thread32Next 000000010ED2 000000410ED2 0 Thread32First 000000010EE2 000000410EE2 0 CreateToolhelp32Snapshot 000000010EFE 000000410EFE 0 OpenProcess 000000010F0C 000000410F0C 0 GetCurrentProcess 000000010F20 000000410F20 0 Process32Next 000000010F30 000000410F30 0 Process32First 000000010F40 000000410F40 0 KERNEL32.dll 000000010F4E 000000410F4E 0 USER32.dll 000000010F5C 000000410F5C 0 FreeSid 000000010F66 000000410F66 0 SetFileSecurityA 000000010F7A 000000410F7A 0 SetSecurityDescriptorDacl 000000010F96 000000410F96 0 InitializeSecurityDescriptor 000000010FB6 000000410FB6 0 SetEntriesInAclA 000000010FCA 000000410FCA 0 AllocateAndInitializeSid 000000010FE6 000000410FE6 0 AdjustTokenPrivileges 000000010FFE 000000410FFE 0 OpenProcessToken 000000011010 000000411010 0 ADVAPI32.dll 000000011020 000000411020 0 PathAppendA 00000001102C 00000041102C 0 SHLWAPI.dll 000000011038 000000411038 0 PSAPI.DLL 000000011044 000000411044 0 MultiByteToWideChar 00000001105A 00000041105A 0 WideCharToMultiByte 000000011070 000000411070 0 RtlUnwind 00000001107C 00000041107C 0 RaiseException 00000001108E 00000041108E 0 HeapReAlloc 00000001109C 00000041109C 0 HeapAlloc 0000000110A8 0000004110A8 0 HeapFree File pos Mem pos ID Text ======== ======= == ==== 0000000110B4 0000004110B4 0 ExitProcess 0000000110C2 0000004110C2 0 TerminateProcess 0000000110D6 0000004110D6 0 GetCommandLineA 0000000110E8 0000004110E8 0 GetVersion 0000000110F6 0000004110F6 0 LCMapStringA 000000011106 000000411106 0 LCMapStringW 000000011116 000000411116 0 GetCPInfo 000000011122 000000411122 0 HeapSize 00000001112E 00000041112E 0 SetUnhandledExceptionFilter 00000001114C 00000041114C 0 HeapDestroy 00000001115A 00000041115A 0 HeapCreate 000000011168 000000411168 0 VirtualFree 000000011176 000000411176 0 VirtualAlloc 000000011186 000000411186 0 IsBadWritePtr 000000011196 000000411196 0 SetHandleCount 0000000111A8 0000004111A8 0 GetFileType 0000000111B6 0000004111B6 0 GetStartupInfoA 0000000111C8 0000004111C8 0 UnhandledExceptionFilter 0000000111E4 0000004111E4 0 FreeEnvironmentStringsA 0000000111FE 0000004111FE 0 FreeEnvironmentStringsW 000000011218 000000411218 0 GetEnvironmentStrings 000000011230 000000411230 0 GetEnvironmentStringsW 00000001124A 00000041124A 0 FlushFileBuffers 00000001125E 00000041125E 0 GetStringTypeA 000000011270 000000411270 0 GetStringTypeW 000000011282 000000411282 0 IsBadReadPtr 000000011292 000000411292 0 IsBadCodePtr 0000000112A2 0000004112A2 0 SetStdHandle 0000000112B2 0000004112B2 0 GetACP 0000000112BC 0000004112BC 0 GetOEMCP 0000000112C8 0000004112C8 0 SetEndOfFile 0000000120F8 0000004120F8 0 .?AVException@@ 000000012110 000000412110 0 .?AVexception@@ 000000012128 000000412128 0 .?AVArgumentOutOfRangeException@@ 00000001214C 00000041214C 0 no processes found. Exiting. 00000001216C 00000041216C 0 Founded %d precesses. 000000012184 000000412184 0 atmapp.exe 00000001219C 00000041219C 0 c:\atm\1 0000000121A8 0000004121A8 0 lib_%s 0000000121B8 0000004121B8 0 .?AVbad_exception@std@@ 0000000121D0 0000004121D0 0 bad exception 00000001220C 00000041220C 0 LoadLibraryA 00000001221C 00000041221C 0 [-] Error: Couldn't get thread handle 000000012244 000000412244 0 kernel32.dll 000000012254 000000412254 0 user32.dll 000000012268 000000412268 0 .?AVlogic_error@std@@ 000000012288 000000412288 0 .?AVlength_error@std@@ 0000000122A8 0000004122A8 0 .?AVout_of_range@std@@ 0000000122D0 0000004122D0 0 .?AVios_base@std@@ 0000000122F0 0000004122F0 0 .?AV?$basic_ios@DU?$char_traits@D@std@@@std@@ 000000012328 000000412328 0 .?AV?$basic_istream@DU?$char_traits@D@std@@@std@@ 000000012368 000000412368 0 .?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@ 0000000123A8 0000004123A8 0 .?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@ 0000000123E8 0000004123E8 0 .?AV?$basic_filebuf@DU?$char_traits@D@std@@@std@@ 000000012428 000000412428 0 .?AV?$basic_ios@GU?$char_traits@G@std@@@std@@ 000000012460 000000412460 0 .?AV?$basic_istream@GU?$char_traits@G@std@@@std@@ 0000000124A0 0000004124A0 0 .?AV?$basic_ostream@GU?$char_traits@G@std@@@std@@ 0000000124E0 0000004124E0 0 .?AV?$basic_filebuf@GU?$char_traits@G@std@@@std@@ 000000012520 000000412520 0 .?AV?$basic_streambuf@GU?$char_traits@G@std@@@std@@ 000000012560 000000412560 0 .?AVruntime_error@std@@ File pos Mem pos ID Text ======== ======= == ==== 000000012580 000000412580 0 .?AVfailure@ios_base@std@@ 0000000125A8 0000004125A8 0 .?AVfacet@locale@std@@ 0000000125C8 0000004125C8 0 .?AV_Locimp@locale@std@@ 000000012600 000000412600 0 .?AVtype_info@@ 0000000133EE 0000004133EE 0 z?aUY 000000013430 000000413430 0 zc%C1 000000013483 000000413483 0 -64OS 0000000140AD 0000004160AD 0 !This program cannot be run in DOS mode. 000000014250 000000416250 0 .text 000000014278 000000416278 0 .rdata 00000001429F 00000041629F 0 @.data 0000000142C8 0000004162C8 0 .reloc 000000015C49 000000417C49 0 L$(SUV 000000015C50 000000417C50 0 D$8W3 000000015C85 000000417C85 0 D$HPQVU 0000000160E9 0000004180E9 0 D$<SUVW 000000016854 000000418854 0 d$hPUQ 000000016C13 000000418C13 0 L$(QV 000000016C46 000000418C46 0 D$ VP 000000016D02 000000418D02 0 D$$UP 000000016F4B 000000418F4B 0 l$ VW 00000001717B 00000041917B 0 l$,VW 0000000172A9 0000004192A9 0 L$$SUV 0000000172B0 0000004192B0 0 D$4WPQ 0000000172DF 0000004192DF 0 D$DPQVS 0000000177E0 0000004197E0 0 D$@_][ 000000017A09 000000419A09 0 T$(PR 000000017B79 000000419B79 0 D$$SUVW 000000017F3E 000000419F3E 0 \$dUVW3 000000017FD3 000000419FD3 0 L$,Qj 0000000180FF 00000041A0FF 0 L$(Qj 0000000183BA 00000041A3BA 0 L$<Qj 0000000184D7 00000041A4D7 0 D$,SP 00000001857A 00000041A57A 0 L$8QR 00000001876C 00000041A76C 0 d$DSh 000000018835 00000041A835 0 QSUVW 000000018BB9 00000041ABB9 0 L$$SUV 000000018BC0 00000041ABC0 0 D$4WPQ 000000018BEF 00000041ABEF 0 D$DPQVS 000000018CE9 00000041ACE9 0 L$$SUV 000000018CF0 00000041ACF0 0 D$4WPQ 000000018D1F 00000041AD1F 0 D$DPQVS 000000018F1C 00000041AF1C 0 L$ QW 000000018F9F 00000041AF9F 0 U4RQU 00000001942C 00000041B42C 0 SUVW3 000000019468 00000041B468 0 L$$Qj 000000019A78 00000041BA78 0 SUVW3 000000019BA9 00000041BBA9 0 D$|VW3 000000019D59 00000041BD59 0 D$LSUV3 000000019FC2 00000041BFC2 0 L$$PQ 00000001A0B9 00000041C0B9 0 D$8SUV3 00000001A128 00000041C128 0 \$<QSR 00000001A147 00000041C147 0 T$$QPR 00000001A299 00000041C299 0 D$8SUV3 00000001A30F 00000041C30F 0 \$<QRV 00000001A32B 00000041C32B 0 T$$PSR 00000001A88B 00000041C88B 0 SUVW3 00000001A92C 00000041C92C 0 L$0RVW 00000001A959 00000041C959 0 L$PQP 00000001AA5A 00000041CA5A 0 D$PPW File pos Mem pos ID Text ======== ======= == ==== 00000001AC35 00000041CC35 0 |$ QPW 00000001ACC9 00000041CCC9 0 D$8UVWj 00000001AD64 00000041CD64 0 L$HQP 00000001AFF7 00000041CFF7 0 ,SUVW 00000001B013 00000041D013 0 l$Dt# 00000001B0CD 00000041D0CD 0 d$(Ph$% 00000001B3A7 00000041D3A7 0 @SUVW 00000001B555 00000041D555 0 D$X VP 00000001B689 00000041D689 0 L$$SUV 00000001B690 00000041D690 0 D$4WPQ 00000001B6BF 00000041D6BF 0 D$DPQVS 00000001BA3C 00000041DA3C 0 t$hWj 00000001BB83 00000041DB83 0 D$ PQ 00000001C33A 00000041E33A 0 T$$QWVR 00000001C37C 00000041E37C 0 L$$PWVQ 00000001C3C3 00000041E3C3 0 D$,VP 00000001CA2A 00000041EA2A 0 T$$QWVR 00000001CA6C 00000041EA6C 0 L$$PWVQ 00000001CAB3 00000041EAB3 0 D$,VP 00000001DF26 00000041FF26 0 W*hd& 00000001E0E7 0000004200E7 0 0SUVW 00000001E534 000000420534 0 d$8Ph 00000001E55D 00000042055D 0 t$(to 00000001EB28 000000420B28 0 SUVW3 00000001EC01 000000420C01 0 |$0t1 00000001EC34 000000420C34 0 \$$hh! 000000021FA8 000000423FA8 0 t WVS 000000021FD5 000000423FD5 0 u7WPS 000000021FE6 000000423FE6 0 u&WVS 000000024D6E 000000426D6E 0 CloseHandle 000000024D7C 000000426D7C 0 ReadFile 000000024D88 000000426D88 0 GetFileSize 000000024D96 000000426D96 0 CreateFileA 000000024DA4 000000426DA4 0 WriteFile 000000024DB0 000000426DB0 0 SetFilePointer 000000024DC2 000000426DC2 0 GetLocalTime 000000024DD2 000000426DD2 0 GetModuleFileNameA 000000024DE8 000000426DE8 0 DeleteFileA 000000024DF6 000000426DF6 0 VirtualQuery 000000024E06 000000426E06 0 CreateThread 000000024E16 000000426E16 0 TerminateThread 000000024E28 000000426E28 0 Sleep 000000024E30 000000426E30 0 SuspendThread 000000024E40 000000426E40 0 ResumeThread 000000024E50 000000426E50 0 GetProcAddress 000000024E62 000000426E62 0 LoadLibraryA 000000024E72 000000426E72 0 GetModuleHandleA 000000024E86 000000426E86 0 VirtualFree 000000024E94 000000426E94 0 VirtualAlloc 000000024EA4 000000426EA4 0 FindNextFileA 000000024EB4 000000426EB4 0 FindFirstFileA 000000024EC6 000000426EC6 0 WaitForSingleObject 000000024EDC 000000426EDC 0 VirtualProtect 000000024EEC 000000426EEC 0 KERNEL32.dll 000000024EFC 000000426EFC 0 MessageBoxA 000000024F08 000000426F08 0 USER32.dll 000000024F14 000000426F14 0 ADVAPI32.dll 000000024F24 000000426F24 0 ??0Init@ios_base@std@@QAE@XZ 000000024F44 000000426F44 0 ??1Init@ios_base@std@@QAE@XZ 000000024F64 000000426F64 0 ??0_Winit@std@@QAE@XZ File pos Mem pos ID Text ======== ======= == ==== 000000024F7C 000000426F7C 0 ??1_Winit@std@@QAE@XZ 000000024F94 000000426F94 0 ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ 000000024FDE 000000426FDE 0 ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z 00000002503A 00000042703A 0 ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB 000000025096 000000427096 0 ?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z 0000000250E8 0000004270E8 0 ?_Xlen@std@@YAXXZ 0000000250FC 0000004270FC 0 ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z 000000025150 000000427150 0 ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB 00000002519A 00000042719A 0 ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z 0000000251EA 0000004271EA 0 ?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z 000000025238 000000427238 0 ?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ 000000025286 000000427286 0 ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z 0000000252DE 0000004272DE 0 ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z 00000002533A 00000042733A 0 ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z 000000025392 000000427392 0 ??0bad_exception@std@@QAE@ABV01@@Z 0000000253B8 0000004273B8 0 ??1bad_exception@std@@UAE@XZ 0000000253D8 0000004273D8 0 ??0bad_exception@std@@QAE@PBD@Z 0000000253FA 0000004273FA 0 ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z 000000025456 000000427456 0 ?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z 0000000254A4 0000004274A4 0 ?_Xran@std@@YAXXZ 0000000254B8 0000004274B8 0 ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z 00000002550E 00000042750E 0 ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z 000000025560 000000427560 0 ?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z 0000000255B4 0000004275B4 0 ?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z 000000025612 000000427612 0 ?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z 000000025670 000000427670 0 ?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z 0000000256C2 0000004276C2 0 ??1_Lockit@std@@QAE@XZ 0000000256DC 0000004276DC 0 ??0_Lockit@std@@QAE@XZ 0000000256F4 0000004276F4 0 MSVCP60.dll 000000025702 000000427702 0 PathFileExistsA 000000025714 000000427714 0 PathAppendA 000000025720 000000427720 0 SHLWAPI.dll 00000002572E 00000042772E 0 __CxxFrameHandler 00000002574A 00000042774A 0 memmove 000000025754 000000427754 0 ??0exception@@QAE@ABV0@@Z 000000025778 000000427778 0 realloc 000000025782 000000427782 0 _CxxThrowException 000000025798 000000427798 0 ?what@exception@@UBEPBDXZ 0000000257B4 0000004277B4 0 ??1exception@@UAE@XZ 0000000257CC 0000004277CC 0 _vsnprintf 0000000257DA 0000004277DA 0 ??2@YAPAXI@Z 0000000257EA 0000004277EA 0 fclose 0000000257F4 0000004277F4 0 vfprintf 000000025800 000000427800 0 fopen 000000025808 000000427808 0 ??0exception@@QAE@XZ 000000025820 000000427820 0 fputs 000000025828 000000427828 0 fread 000000025838 000000427838 0 _ftol 000000025840 000000427840 0 malloc 00000002584A 00000042784A 0 memcpy 000000025854 000000427854 0 memset 00000002585E 00000042785E 0 __dllonexit 00000002586C 00000042786C 0 _onexit 000000025874 000000427874 0 MSVCRT.dll 000000025882 000000427882 0 ??1type_info@@UAE@XZ 00000002589A 00000042789A 0 _initterm 0000000258A6 0000004278A6 0 _adjust_fdiv 0000000258B6 0000004278B6 0 HeapCreate 0000000258C4 0000004278C4 0 InterlockedCompareExchange 0000000258E2 0000004278E2 0 InterlockedExchange File pos Mem pos ID Text ======== ======= == ==== 0000000258F8 0000004278F8 0 HeapDestroy 000000025906 000000427906 0 HeapFree 000000025912 000000427912 0 OpenThread 000000025920 000000427920 0 SetThreadContext 000000025934 000000427934 0 GetThreadContext 000000025948 000000427948 0 Thread32Next 000000025958 000000427958 0 HeapReAlloc 000000025966 000000427966 0 HeapAlloc 000000025972 000000427972 0 GetCurrentThreadId 000000025988 000000427988 0 GetCurrentProcessId 00000002599E 00000042799E 0 Thread32First 0000000259AE 0000004279AE 0 CreateToolhelp32Snapshot 0000000259CA 0000004279CA 0 FlushInstructionCache 0000000259E2 0000004279E2 0 GetCurrentProcess 000000025A32 000000427A32 0 Library.dll 000000025A3E 000000427A3E 0 iinit 0000000260B0 0000004280B0 0 .?AVexception@@ 0000000260C8 0000004280C8 0 .?AVException@@ 0000000260E0 0000004280E0 0 .?AVArgumentOutOfRangeException@@ 000000026118 000000428118 0 .?AVbad_exception@std@@ 000000026130 000000428130 0 bad exception 000000026150 000000428150 0 .?AVIOException@@ 000000026170 000000428170 0 .?AVFileNotFoundException@@ 000000026190 000000428190 0 Logger is now on new TraceLevel: %s 0000000261B4 0000004281B4 0 UNKNOWN 0000000261C0 0000004281C0 0 TRACE 0000000261C8 0000004281C8 0 NOTICE 0000000261D0 0000004281D0 0 WARNING 0000000261D8 0000004281D8 0 ERROR 0000000261E0 0000004281E0 0 FATAL 0000000261E8 0000004281E8 0 [%s]: %s 000000026200 000000428200 0 .?AVThreadException@@ 000000026218 000000428218 0 Can't resume thread 00000002622C 00000042822C 0 MessageBoxTimeoutA 000000026240 000000428240 0 user32.dll 00000002624C 00000042824C 0 [%04d/%02d/%02d %02d:%02d:%02d.%03d] %s 000000026280 000000428280 0 .?AVXfsException@@ 0000000262A0 0000004282A0 0 .?AVXfsGetInfoException@@ 0000000262BC 0000004282BC 0 get cu info get info exception %d 0000000262E0 0000004282E0 0 get cu and store result unknown exception 00000002630C 00000042830C 0 get cu info query error 000000026330 000000428330 0 .?AVXfsDispenseException@@ 00000002634C 00000042834C 0 unknown exception 000000026360 000000428360 0 Dispense exception, code %d 00000002637C 00000042837C 0 ca5h units info received 000000026398 000000428398 0 try to set %d 0000000263A8 0000004283A8 0 Xfs::QueryCashUnitsFromAtm4 0000000263C4 0000004283C4 0 Xfs::QueryCashUnitsFromAtm3 0000000263E0 0000004283E0 0 Xfs::QueryCashUnitsFromAtm2 0000000263FC 0000004283FC 0 LFS found info about <%d> ca5h un1t5 000000026424 000000428424 0 XFS-> dispense end SUCCESSFUL DISPENSE 00000002644C 00000042844C 0 WFS_RESULT %d 000000026468 000000428468 0 .?AVHookLibException@@ 000000026480 000000428480 0 WFMFreeBuffer 000000026490 000000428490 0 WFMAllocateMore 0000000264A0 0000004284A0 0 WFMAllocateBuffer 0000000264B4 0000004284B4 0 WFSExecute 0000000264C0 0000004284C0 0 WFSFreeResult 0000000264D0 0000004284D0 0 WFSStartUp 0000000264DC 0000004284DC 0 WFSGetInfo File pos Mem pos ID Text ======== ======= == ==== 0000000264E8 0000004284E8 0 no xf5 module found 0000000264FC 0000004284FC 0 msxfs.dll 000000026538 000000428538 0 |INDEX:%d|CU state:%d|Type:%d|Values:%d|Currency_ID:%s|Money count:%d| 000000026584 000000428584 0 Founded < %d > commands 0000000265A0 0000004285A0 0 Command file deleted successfully 0000000265C4 0000004285C4 0 Reading command from a %s 0000000265E0 0000004285E0 0 %s\%s 0000000265E8 0000004285E8 0 FileCommandProvider::ReadXfsCommandFromFile -> 000000026620 000000428620 0 .?AVArgumentException@@ 000000026638 000000428638 0 exception 000000026648 000000428648 0 CommandProcessor created 000000026664 000000428664 0 DEFAULT command processed 000000026680 000000428680 0 NONE command processed 000000026698 000000428698 0 System error! 0000000266A8 0000004286A8 0 Dispense failed. CODE:%d 0000000266C4 0000004286C4 0 Multi Dispensing start 0000000266DC 0000004286DC 0 Dispense failed. Unknown reason. 000000026700 000000428700 0 Dispense failed. %d 000000026714 000000428714 0 Manual Dispensing 000000026728 000000428728 0 Display Balance -> exception, code:%d 000000026750 000000428750 0 Display Balance 1try -> exception, code:%d 00000002677C 00000042877C 0 CommandProcessor::ProcessCommand -> 0000000267A0 0000004287A0 0 SetMaximumDispenseSize:%d 0000000267BC 0000004287BC 0 NULL command processed 0000000267D4 0000004287D4 0 ICommandProcessor::ProcessCommand -> start method 000000026808 000000428808 0 Processing command #%d 000000026820 000000428820 0 Received 00000002682D 00000042882D 0 commands 000000026838 000000428838 0 exception cauch: %d 00000002684C 00000042884C 0 Exiting 000000026854 000000428854 0 Pausing 00000002685C 00000042885C 0 trying to dispense 000000026870 000000428870 0 R2CommandProcessor::ProcessGetRealBalance()1 0000000268A0 0000004288A0 0 cur disp service is |%d| 0000000268BC 0000004288BC 0 try toi set %d 0000000268CC 0000004288CC 0 ___log.txt 0000000268D8 0000004288D8 0 Deleting resources 0000000268F8 0000004288F8 0 .?AVXfsLoaderException@@ 000000026914 000000428914 0 uncatched 000000026920 000000428920 0 %s:%d 000000026928 000000428928 0 c:\atm\1 000000026934 000000428934 0 void CreateAllResources() 000000026950 000000428950 0 Xfs init error 000000026960 000000428960 0 Critical system error! 000000026978 000000428978 0 resources created 00000002698C 00000042898C 0 MH_UNKNOWN 000000026998 000000428998 0 MH_OK 0000000269A0 0000004289A0 0 MH_ERROR_ALREADY_INITIALIZED 0000000269C0 0000004289C0 0 MH_ERROR_NOT_INITIALIZED 0000000269DC 0000004289DC 0 MH_ERROR_ALREADY_CREATED 0000000269F8 0000004289F8 0 MH_ERROR_NOT_CREATED 000000026A10 000000428A10 0 MH_ERROR_ENABLED 000000026A24 000000428A24 0 MH_ERROR_DISABLED 000000026A38 000000428A38 0 MH_ERROR_NOT_EXECUTABLE 000000026A50 000000428A50 0 MH_ERROR_UNSUPPORTED_FUNCTION 000000026A70 000000428A70 0 MH_ERROR_MEMORY_ALLOC 000000026A88 000000428A88 0 MH_ERROR_MEMORY_PROTECT 000000026AA0 000000428AA0 0 MH_ERROR_MODULE_NOT_FOUND 000000026ABC 000000428ABC 0 MH_ERROR_FUNCTION_NOT_FOUND 000000026AD8 000000428AD8 0 (unknown) File pos Mem pos ID Text ======== ======= == ==== 000000026B32 000000428B32 0 YYYYY 000000026B3E 000000428B3E 0 YYYYYYYYYYYY 000000026B4C 000000428B4C 0 }YPPPPYYYYa 000000026B62 000000428B62 0 YYYYYYYYYYY 000000026C14 000000428C14 0 JJJJKRJJJJOLJJJJJJJJUE@JJJEYMFJ]JJJJJJJJJJJJJJacgNJJkmJJEmJJDEJJ 000000026CF8 000000428CF8 0 .?AVtype_info@@ 00000002706B 00000042906B 0 0!01070Q0W0a0q0w0 000000027081 000000429081 0 1-1K1]1 00000002708D 00000042908D 0 1>2\2 000000027099 000000429099 0 3H3f3r3 0000000270A7 0000004290A7 0 4P4M5 0000000270B5 0000004290B5 0 :$;R; 0000000270BF 0000004290BF 0 ;.<D<c< 0000000270CD 0000004290CD 0 <5=;=r=x= 0000000270DF 0000004290DF 0 >2>j> 0000000270FB 0000004290FB 0 ?!?1?7?G?~? 00000002711D 00000042911D 0 0&0-0;0B0W0s0 00000002712B 00000042912B 0 0.1i1 00000002713F 00000042913F 0 2 3(3z3 00000002714D 00000042914D 0 3-4Q4a4y4 000000027163 000000429163 0 6&6:6 000000027179 000000429179 0 7'7c7 000000027189 000000429189 0 8#9X9}9 0000000271B9 0000004291B9 0 =<>F>d>w> 0000000271CB 0000004291CB 0 ?<?F?m?}? 0000000271E4 0000004291E4 0 30f0m0y0 0000000271F9 0000004291F9 0 0 1(141@1L1X1e1l1{1 000000027227 000000429227 0 4%4,4 00000002723B 00000042923B 0 5'5.545c5 00000002724B 00000042924B 0 6)6o6 000000027253 000000429253 0 7=7U7\7t7 00000002725F 00000042925F 0 7+8h8u8 000000027275 000000429275 0 949:9@9I9P9 00000002728B 00000042928B 0 :!:-:::A:G: 0000000272A1 0000004292A1 0 ;Q<a<r< 0000000272B3 0000004292B3 0 >,>q> 0000000272D1 0000004292D1 0 0+1v1 0000000272D9 0000004292D9 0 162>2 0000000272EF 0000004292EF 0 4-464Z4k4 0000000272FB 0000004292FB 0 4[5m5 00000002730D 00000042930D 0 787A7R7w7 00000002731D 00000042931D 0 7g8q8w8 00000002732F 00000042932F 0 9I:[: 000000027355 000000429355 0 3)5:5@5K5e5n5z5 00000002737F 00000042937F 0 5A6Q6b6p6u6 000000027399 000000429399 0 7/777<7b7g7~7 0000000273B9 0000004293B9 0 8$8)8O8T8k8s8x8 0000000273DB 0000004293DB 0 9<9A9X9 0000000273F5 0000004293F5 0 :R:q: 000000027401 000000429401 0 :3;_; 000000027411 000000429411 0 ;3<8<I<O< 000000027423 000000429423 0 =P>V>h>n> 00000002745D 00000042945D 0 1N1T1e1 00000002746D 00000042946D 0 1#2Q2p2 000000027481 000000429481 0 22383I3l3r3 000000027491 000000429491 0 334f4 0000000274AF 0000004294AF 0 6$626A6_6r6 0000000274ED 0000004294ED 0 :O:m: 0000000274F3 0000004294F3 0 :B;U; 000000027509 000000429509 0 =$=8===Q=_=w= File pos Mem pos ID Text ======== ======= == ==== 000000027543 000000429543 0 0<1r1 000000027553 000000429553 0 2A2I2z2 000000027567 000000429567 0 333v3 000000027577 000000429577 0 5/5V5 000000027595 000000429595 0 6N7U7p7 0000000275A7 0000004295A7 0 8!828@8E8 0000000275C5 0000004295C5 0 9G9L9S9[9j9x9 0000000275D7 0000004295D7 0 :T:Y:q:y: 0000000275FB 0000004295FB 0 ="=2=p=~= 00000002760D 00000042960D 0 =[>s> 000000027621 000000429621 0 ?C?u?z? 00000002763D 00000042963D 0 0-0I0 000000027663 000000429663 0 364L4 00000002766D 00000042966D 0 5)5F5]5 00000002767D 00000042967D 0 627f7 000000027691 000000429691 0 909K9 0000000276A1 0000004296A1 0 :&;<; 0000000276AD 0000004296AD 0 <6<M< 0000000276BB 0000004296BB 0 =">V> 0000000276C1 0000004296C1 0 > ?;?v? 0000000276E9 0000004296E9 0 1"2E2U2 0000000276F3 0000004296F3 0 2"3E3U3 0000000276FD 0000004296FD 0 334T4r4 000000027707 000000429707 0 4=5M5 000000027711 000000429711 0 5;6K6 00000002771F 00000042971F 0 7C7[7m7 00000002772D 00000042972D 0 8.848Q8 000000027747 000000429747 0 9*:8: 00000002775D 00000042975D 0 <C<r< 00000002776B 00000042976B 0 =A=W= 000000027773 000000429773 0 =.><>M> 000000027783 000000429783 0 > ?)?7?@?Q?s? 00000002779C 00000042979C 0 80<0@0D0H0L0P0T0X0\0 0000000277B1 0000004297B1 0 0d0s0 0000000277BB 0000004297BB 0 0!1;1 0000000277F3 0000004297F3 0 666T6g6 000000027803 000000429803 0 6$7D7f7 00000002780D 00000042980D 0 848d8 000000027815 000000429815 0 8W9f9 00000002781D 00000042981D 0 9":U: 000000027827 000000429827 0 :,;7;Y; 00000002782F 00000042982F 0 ;e;w; 000000027851 000000429851 0 =&>U>n> 00000002785B 00000042985B 0 >#??? 000000027870 000000429870 0 40Q0a0v0 00000002787F 00000042987F 0 0I1p1 000000027895 000000429895 0 2+21262F2c2y2 0000000278B1 0000004298B1 0 3F3g3x3 0000000278BB 0000004298BB 0 4<4A4O4_4e4j4 0000000278D3 0000004298D3 0 5=5B5R5r5 0000000278F3 0000004298F3 0 73797M7S7g7u7 00000002790D 00000042990D 0 7A8_8g8 000000027923 000000429923 0 9!9'9?9_9h9o9u9|9 00000002793F 00000042993F 0 9K:X: 000000027947 000000429947 0 ;7;j; 000000027959 000000429959 0 >D>K> 000000027965 000000429965 0 ?#?*?@? 000000027978 000000429978 0 <0J0Q0 00000002799D 00000042999D 0 3,333<3B3J3R3[3w3 0000000279B1 0000004299B1 0 344B4N4\4k4s4y4 File pos Mem pos ID Text ======== ======= == ==== 0000000279D9 0000004299D9 0 646I6{6 000000027A15 000000429A15 0 9!9%9)9-9195999=9A9E9I9M9l9u9 000000027A3F 000000429A3F 0 ;);U; 000000027A4D 000000429A4D 0 0)101"3 000000027A57 000000429A57 0 4S5e5 000000027A67 000000429A67 0 < <$<(<,<0<4< 000000027A8F 000000429A8F 0 >&>2>T>Z> 000000027A99 000000429A99 0 >f>l>z> 000000027ABD 000000429ABD 0 ?0?B? 000000027AE1 000000429AE1 0 0M0i0 000000027AF3 000000429AF3 0 0-1I1e1n1s1 000000027B09 000000429B09 0 2$2D2Y2y2 000000027B1B 000000429B1B 0 393a3y3 000000027B2D 000000429B2D 0 4!4<4U4 000000027B35 000000429B35 0 4g4p4y4 000000027B51 000000429B51 0 555:5m5 000000027B6D 000000429B6D 0 6%6*6U6Z6y6 000000027B7F 000000429B7F 0 717E7V7_7d7 000000027B95 000000429B95 0 8"858b8q8 000000027BB7 000000429BB7 0 9%9*9E9J9e9j9 000000027BD7 000000429BD7 0 :%:*:E:J:l: 000000027BE9 000000429BE9 0 ;);A;a;y; 000000027BF9 000000429BF9 0 <D<U<m< 000000027C4F 000000429C4F 0 2 2$2(2,2024282<2@2D2H2L2P2T2X2\2 000000027C71 000000429C71 0 2d2h2l2p2t2x2|2 000000027CC3 000000429CC3 0 3(3<3L3P3\3p3|3 000000027CEB 000000429CEB 0 4(44484D4L4T4h4t4 000000027D17 000000429D17 0 5$505L5T5\5h5 000000027D39 000000429D39 0 6$606L6T6 000000027D57 000000429D57 0 7,747@7\7d7x7 000000027D79 000000429D79 0 8 8(8<8L8x8 000000027D9F 000000429D9F 0 9$90989T9 000000027DC3 000000429DC3 0 : :<:D:L: 000000027DCD 000000429DCD 0 :l:p:t:x: 000000027DE7 000000429DE7 0 ;,;4;@;\;d;p; 000000027E0D 000000429E0D 0 <$<,<8<T<\<d<p< 000000027E35 000000429E35 0 =$=0=L=T=\=d=p= 000000027E59 000000429E59 0 >,><>P>d>p> 000000027E7B 000000429E7B 0 ?4?<?H?d?l?t?|? 000000027EAF 000000429EAF 0 0$0,040@0\0d0l0 000000027EDF 000000429EDF 0 1H1\1h1p1 000000027EF7 000000429EF7 0 2 2<2D2P2l2t2 000000027F13 000000429F13 0 3 3<3H3d3p3 000000027F2F 000000429F2F 0 4,4P4\4d4t4 000000027F49 000000429F49 0 505D5L5T5\5d5l5t5 000000027F6F 000000429F6F 0 6,646@6H6d6 000000027F8F 000000429F8F 0 7$7@7L7T7 000000027FB5 000000429FB5 0 8 8<8D8P8X8t8 000000027FD5 000000429FD5 0 909<9D9L9T9\9d9t9 000000027FF5 000000429FF5 0 :,:@:T:d:t: 000000028025 00000042A025 0 0 0$0(0H0 00000000F69C 00000040F69C 0 (null) 00000000004D 00000040004D 0 !This program cannot be run in DOS mode. 0000000001F0 0000004001F0 0 .text 000000000218 000000400218 0 .rdata 00000000023F 00000040023F 0 @.data 000000000268 000000400268 0 .rsrc 0000000023D3 0000004023D3 0 PSSSSSSSSj 0000000049E9 0000004049E9 0 t/Ht HH 0000000053DA 0000004053DA 0 VWhST@ File pos Mem pos ID Text ======== ======= == ==== 00000000570B 00000040570B 0 QWj P 0000000058BD 0000004058BD 0 QQSVWd 000000005B5F 000000405B5F 0 SVWUj 000000005BC8 000000405BC8 0 t.;t$$t( 000000006656 000000406656 0 uRFGHt 000000006700 000000406700 0 tlHt. 0000000067D8 0000004067D8 0 wDVSU 0000000069C0 0000004069C0 0 VC20XC00U 000000007516 000000407516 0 PPPPPPPP 000000007576 000000407576 0 9= :A 00000000757C 00000040757C 0 uFWWj 0000000075A1 0000004075A1 0 "WWSh| 00000000768D 00000040768D 0 tMWWS 000000007AD0 000000407AD0 0 sO;>|C;~ 000000007FC8 000000407FC8 0 QQSVW 0000000080A9 0000004080A9 0 QQSVW 0000000080FF 0000004080FF 0 QQSVW 000000008645 000000408645 0 HHtpHHtl 0000000088FC 0000004088FC 0 Yt f 000000008EBB 000000408EBB 0 btHHt. 000000009B67 000000409B67 0 DSUVWh 00000000A13D 00000040A13D 0 eYt,F 00000000A756 00000040A756 0 ?=t"U 00000000A8AA 00000040A8AA 0 8"uF@ 00000000AA78 00000040AA78 0 SS@SSPVSS 00000000AA9A 00000040AA9A 0 t#SSUP 00000000AAA1 00000040AAA1 0 t$$VSS 00000000AB77 00000040AB77 0 A=(.A 00000000B786 00000040B786 0 PPPPPPPP 00000000BB2D 00000040BB2D 0 B=h0A 00000000BD93 00000040BD93 0 t-Ht!Ht 00000000C276 00000040C276 0 SVWj 00000000C39F 00000040C39F 0 SVWj 00000000C7C2 00000040C7C2 0 Y;5T=A 00000000C9C5 00000040C9C5 0 Wj@Y3 00000000CB98 00000040CB98 0 VWuBhT"A 00000000CD48 00000040CD48 0 FGQPS 00000000CFD4 00000040CFD4 0 +ttHHtd 00000000D012 00000040D012 0 j XO 00000000D258 00000040D258 0 HHtYHHtF 00000000F224 00000040F224 0 string too long 00000000F254 00000040F254 0 invalid string position 00000000F3B8 00000040F3B8 0 ios::eofbit set 00000000F3C8 00000040F3C8 0 ios::failbit set 00000000F3DC 00000040F3DC 0 ios::badbit set 00000000F45C 00000040F45C 0 Unknown exception 00000000F4A0 00000040F4A0 0 H:mm:ss 00000000F4A8 00000040F4A8 0 dddd, MMMM dd, yyyy 00000000F4BC 00000040F4BC 0 M/d/yy 00000000F4CC 00000040F4CC 0 December 00000000F4D8 00000040F4D8 0 November 00000000F4E4 00000040F4E4 0 October 00000000F4EC 00000040F4EC 0 September 00000000F4F8 00000040F4F8 0 August 00000000F510 00000040F510 0 April 00000000F518 00000040F518 0 March 00000000F520 00000040F520 0 February 00000000F52C 00000040F52C 0 January 00000000F564 00000040F564 0 Saturday 00000000F570 00000040F570 0 Friday File pos Mem pos ID Text ======== ======= == ==== 00000000F578 00000040F578 0 Thursday 00000000F584 00000040F584 0 Wednesday 00000000F590 00000040F590 0 Tuesday 00000000F598 00000040F598 0 Monday 00000000F5A0 00000040F5A0 0 Sunday 00000000F661 00000040F661 0 (8PX 00000000F669 00000040F669 0 700WP 00000000F681 00000040F681 0 ppxxxx 00000000F6AC 00000040F6AC 0 (null) 00000000F6CE 00000040F6CE 0 GAIsProcessorFeaturePresent 00000000F6EC 00000040F6EC 0 KERNEL32 00000000F6F8 00000040F6F8 0 e+000 00000000F700 00000040F700 0 runtime error 00000000F714 00000040F714 0 TLOSS error 00000000F724 00000040F724 0 SING error 00000000F734 00000040F734 0 DOMAIN error 00000000F744 00000040F744 0 R6028 00000000F74B 00000040F74B 0 - unable to initialize heap 00000000F76C 00000040F76C 0 R6027 00000000F773 00000040F773 0 - not enough space for lowio initialization 00000000F7A4 00000040F7A4 0 R6026 00000000F7AB 00000040F7AB 0 - not enough space for stdio initialization 00000000F7DC 00000040F7DC 0 R6025 00000000F7E3 00000040F7E3 0 - pure virtual function call 00000000F804 00000040F804 0 R6024 00000000F80B 00000040F80B 0 - not enough space for _onexit/atexit table 00000000F83C 00000040F83C 0 R6019 00000000F843 00000040F843 0 - unable to open console device 00000000F868 00000040F868 0 R6018 00000000F86F 00000040F86F 0 - unexpected heap error 00000000F88C 00000040F88C 0 R6017 00000000F893 00000040F893 0 - unexpected multithread lock error 00000000F8BC 00000040F8BC 0 R6016 00000000F8C3 00000040F8C3 0 - not enough space for thread data 00000000F8EA 00000040F8EA 0 abnormal program termination 00000000F90C 00000040F90C 0 R6009 00000000F913 00000040F913 0 - not enough space for environment 00000000F938 00000040F938 0 R6008 00000000F93F 00000040F93F 0 - not enough space for arguments 00000000F964 00000040F964 0 R6002 00000000F96B 00000040F96B 0 - floating point not loaded 00000000F98C 00000040F98C 0 Microsoft Visual C++ Runtime Library 00000000F9B8 00000040F9B8 0 Runtime Error! 00000000F9C8 00000040F9C8 0 Program: 00000000F9D8 00000040F9D8 0 <program name unknown> 00000000F9FC 00000040F9FC 0 SunMonTueWedThuFriSat 00000000FA14 00000040FA14 0 JanFebMarAprMayJunJulAugSepOctNovDec 00000000FA3C 00000040FA3C 0 GetLastActivePopup 00000000FA50 00000040FA50 0 GetActiveWindow 00000000FA60 00000040FA60 0 MessageBoxA 00000000FA6C 00000040FA6C 0 1#QNAN 00000000FA74 00000040FA74 0 1#INF 00000000FA7C 00000040FA7C 0 1#IND 00000000FA84 00000040FA84 0 1#SNAN 000000010CD6 000000410CD6 0 CreateDirectoryA 000000010CEA 000000410CEA 0 GetFileAttributesA 000000010D00 000000410D00 0 CloseHandle 000000010D0E 000000410D0E 0 ReadFile 000000010D1A 000000410D1A 0 GetFileSize 000000010D28 000000410D28 0 CreateFileA File pos Mem pos ID Text ======== ======= == ==== 000000010D36 000000410D36 0 WriteFile 000000010D42 000000410D42 0 SetFilePointer 000000010D54 000000410D54 0 LocalFree 000000010D60 000000410D60 0 LocalAlloc 000000010D6E 000000410D6E 0 SizeofResource 000000010D80 000000410D80 0 LockResource 000000010D90 000000410D90 0 LoadResource 000000010DA0 000000410DA0 0 FindResourceA 000000010DB0 000000410DB0 0 GetModuleHandleA 000000010DC4 000000410DC4 0 GetStdHandle 000000010DD4 000000410DD4 0 GetLastError 000000010DE4 000000410DE4 0 GetTickCount 000000010DF4 000000410DF4 0 GetModuleFileNameA 000000010E0A 000000410E0A 0 Sleep 000000010E12 000000410E12 0 ResumeThread 000000010E22 000000410E22 0 VirtualFreeEx 000000010E32 000000410E32 0 SetThreadContext 000000010E46 000000410E46 0 LoadLibraryA 000000010E56 000000410E56 0 WriteProcessMemory 000000010E6C 000000410E6C 0 GetProcAddress 000000010E7E 000000410E7E 0 VirtualAllocEx 000000010E90 000000410E90 0 GetThreadContext 000000010EA4 000000410EA4 0 SuspendThread 000000010EB4 000000410EB4 0 OpenThread 000000010EC2 000000410EC2 0 Thread32Next 000000010ED2 000000410ED2 0 Thread32First 000000010EE2 000000410EE2 0 CreateToolhelp32Snapshot 000000010EFE 000000410EFE 0 OpenProcess 000000010F0C 000000410F0C 0 GetCurrentProcess 000000010F20 000000410F20 0 Process32Next 000000010F30 000000410F30 0 Process32First 000000010F40 000000410F40 0 KERNEL32.dll 000000010F4E 000000410F4E 0 USER32.dll 000000010F5C 000000410F5C 0 FreeSid 000000010F66 000000410F66 0 SetFileSecurityA 000000010F7A 000000410F7A 0 SetSecurityDescriptorDacl 000000010F96 000000410F96 0 InitializeSecurityDescriptor 000000010FB6 000000410FB6 0 SetEntriesInAclA 000000010FCA 000000410FCA 0 AllocateAndInitializeSid 000000010FE6 000000410FE6 0 AdjustTokenPrivileges 000000010FFE 000000410FFE 0 OpenProcessToken 000000011010 000000411010 0 ADVAPI32.dll 000000011020 000000411020 0 PathAppendA 00000001102C 00000041102C 0 SHLWAPI.dll 000000011038 000000411038 0 PSAPI.DLL 000000011044 000000411044 0 MultiByteToWideChar 00000001105A 00000041105A 0 WideCharToMultiByte 000000011070 000000411070 0 RtlUnwind 00000001107C 00000041107C 0 RaiseException 00000001108E 00000041108E 0 HeapReAlloc 00000001109C 00000041109C 0 HeapAlloc 0000000110A8 0000004110A8 0 HeapFree 0000000110B4 0000004110B4 0 ExitProcess 0000000110C2 0000004110C2 0 TerminateProcess 0000000110D6 0000004110D6 0 GetCommandLineA 0000000110E8 0000004110E8 0 GetVersion 0000000110F6 0000004110F6 0 LCMapStringA 000000011106 000000411106 0 LCMapStringW 000000011116 000000411116 0 GetCPInfo 000000011122 000000411122 0 HeapSize File pos Mem pos ID Text ======== ======= == ==== 00000001112E 00000041112E 0 SetUnhandledExceptionFilter 00000001114C 00000041114C 0 HeapDestroy 00000001115A 00000041115A 0 HeapCreate 000000011168 000000411168 0 VirtualFree 000000011176 000000411176 0 VirtualAlloc 000000011186 000000411186 0 IsBadWritePtr 000000011196 000000411196 0 SetHandleCount 0000000111A8 0000004111A8 0 GetFileType 0000000111B6 0000004111B6 0 GetStartupInfoA 0000000111C8 0000004111C8 0 UnhandledExceptionFilter 0000000111E4 0000004111E4 0 FreeEnvironmentStringsA 0000000111FE 0000004111FE 0 FreeEnvironmentStringsW 000000011218 000000411218 0 GetEnvironmentStrings 000000011230 000000411230 0 GetEnvironmentStringsW 00000001124A 00000041124A 0 FlushFileBuffers 00000001125E 00000041125E 0 GetStringTypeA 000000011270 000000411270 0 GetStringTypeW 000000011282 000000411282 0 IsBadReadPtr 000000011292 000000411292 0 IsBadCodePtr 0000000112A2 0000004112A2 0 SetStdHandle 0000000112B2 0000004112B2 0 GetACP 0000000112BC 0000004112BC 0 GetOEMCP 0000000112C8 0000004112C8 0 SetEndOfFile 0000000120F8 0000004120F8 0 .?AVException@@ 000000012110 000000412110 0 .?AVexception@@ 000000012128 000000412128 0 .?AVArgumentOutOfRangeException@@ 00000001214C 00000041214C 0 no processes found. Exiting. 00000001216C 00000041216C 0 Founded %d precesses. 000000012184 000000412184 0 atmapp.exe 00000001219C 00000041219C 0 c:\atm\1 0000000121A8 0000004121A8 0 lib_%s 0000000121B8 0000004121B8 0 .?AVbad_exception@std@@ 0000000121D0 0000004121D0 0 bad exception 00000001220C 00000041220C 0 LoadLibraryA 00000001221C 00000041221C 0 [-] Error: Couldn't get thread handle 000000012244 000000412244 0 kernel32.dll 000000012254 000000412254 0 user32.dll 000000012268 000000412268 0 .?AVlogic_error@std@@ 000000012288 000000412288 0 .?AVlength_error@std@@ 0000000122A8 0000004122A8 0 .?AVout_of_range@std@@ 0000000122D0 0000004122D0 0 .?AVios_base@std@@ 0000000122F0 0000004122F0 0 .?AV?$basic_ios@DU?$char_traits@D@std@@@std@@ 000000012328 000000412328 0 .?AV?$basic_istream@DU?$char_traits@D@std@@@std@@ 000000012368 000000412368 0 .?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@ 0000000123A8 0000004123A8 0 .?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@ 0000000123E8 0000004123E8 0 .?AV?$basic_filebuf@DU?$char_traits@D@std@@@std@@ 000000012428 000000412428 0 .?AV?$basic_ios@GU?$char_traits@G@std@@@std@@ 000000012460 000000412460 0 .?AV?$basic_istream@GU?$char_traits@G@std@@@std@@ 0000000124A0 0000004124A0 0 .?AV?$basic_ostream@GU?$char_traits@G@std@@@std@@ 0000000124E0 0000004124E0 0 .?AV?$basic_filebuf@GU?$char_traits@G@std@@@std@@ 000000012520 000000412520 0 .?AV?$basic_streambuf@GU?$char_traits@G@std@@@std@@ 000000012560 000000412560 0 .?AVruntime_error@std@@ 000000012580 000000412580 0 .?AVfailure@ios_base@std@@ 0000000125A8 0000004125A8 0 .?AVfacet@locale@std@@ 0000000125C8 0000004125C8 0 .?AV_Locimp@locale@std@@ 000000012600 000000412600 0 .?AVtype_info@@ 0000000133EE 0000004133EE 0 z?aUY 000000013430 000000413430 0 zc%C1 000000013483 000000413483 0 -64OS 0000000140AD 0000004160AD 0 !This program cannot be run in DOS mode. File pos Mem pos ID Text ======== ======= == ==== 000000014250 000000416250 0 .text 000000014278 000000416278 0 .rdata 00000001429F 00000041629F 0 @.data 0000000142C8 0000004162C8 0 .reloc 000000015C49 000000417C49 0 L$(SUV 000000015C50 000000417C50 0 D$8W3 000000015C85 000000417C85 0 D$HPQVU 0000000160E9 0000004180E9 0 D$<SUVW 000000016854 000000418854 0 d$hPUQ 000000016C13 000000418C13 0 L$(QV 000000016C46 000000418C46 0 D$ VP 000000016D02 000000418D02 0 D$$UP 000000016F4B 000000418F4B 0 l$ VW 00000001717B 00000041917B 0 l$,VW 0000000172A9 0000004192A9 0 L$$SUV 0000000172B0 0000004192B0 0 D$4WPQ 0000000172DF 0000004192DF 0 D$DPQVS 0000000177E0 0000004197E0 0 D$@_][ 000000017A09 000000419A09 0 T$(PR 000000017B79 000000419B79 0 D$$SUVW 000000017F3E 000000419F3E 0 \$dUVW3 000000017FD3 000000419FD3 0 L$,Qj 0000000180FF 00000041A0FF 0 L$(Qj 0000000183BA 00000041A3BA 0 L$<Qj 0000000184D7 00000041A4D7 0 D$,SP 00000001857A 00000041A57A 0 L$8QR 00000001876C 00000041A76C 0 d$DSh 000000018835 00000041A835 0 QSUVW 000000018BB9 00000041ABB9 0 L$$SUV 000000018BC0 00000041ABC0 0 D$4WPQ 000000018BEF 00000041ABEF 0 D$DPQVS 000000018CE9 00000041ACE9 0 L$$SUV 000000018CF0 00000041ACF0 0 D$4WPQ 000000018D1F 00000041AD1F 0 D$DPQVS 000000018F1C 00000041AF1C 0 L$ QW 000000018F9F 00000041AF9F 0 U4RQU 00000001942C 00000041B42C 0 SUVW3 000000019468 00000041B468 0 L$$Qj 000000019A78 00000041BA78 0 SUVW3 000000019BA9 00000041BBA9 0 D$|VW3 000000019D59 00000041BD59 0 D$LSUV3 000000019FC2 00000041BFC2 0 L$$PQ 00000001A0B9 00000041C0B9 0 D$8SUV3 00000001A128 00000041C128 0 \$<QSR 00000001A147 00000041C147 0 T$$QPR 00000001A299 00000041C299 0 D$8SUV3 00000001A30F 00000041C30F 0 \$<QRV 00000001A32B 00000041C32B 0 T$$PSR 00000001A88B 00000041C88B 0 SUVW3 00000001A92C 00000041C92C 0 L$0RVW 00000001A959 00000041C959 0 L$PQP 00000001AA5A 00000041CA5A 0 D$PPW 00000001AC35 00000041CC35 0 |$ QPW 00000001ACC9 00000041CCC9 0 D$8UVWj 00000001AD64 00000041CD64 0 L$HQP 00000001AFF7 00000041CFF7 0 ,SUVW 00000001B013 00000041D013 0 l$Dt# 00000001B0CD 00000041D0CD 0 d$(Ph$% 00000001B3A7 00000041D3A7 0 @SUVW 00000001B555 00000041D555 0 D$X VP File pos Mem pos ID Text ======== ======= == ==== 00000001B689 00000041D689 0 L$$SUV 00000001B690 00000041D690 0 D$4WPQ 00000001B6BF 00000041D6BF 0 D$DPQVS 00000001BA3C 00000041DA3C 0 t$hWj 00000001BB83 00000041DB83 0 D$ PQ 00000001C33A 00000041E33A 0 T$$QWVR 00000001C37C 00000041E37C 0 L$$PWVQ 00000001C3C3 00000041E3C3 0 D$,VP 00000001CA2A 00000041EA2A 0 T$$QWVR 00000001CA6C 00000041EA6C 0 L$$PWVQ 00000001CAB3 00000041EAB3 0 D$,VP 00000001DF26 00000041FF26 0 W*hd& 00000001E0E7 0000004200E7 0 0SUVW 00000001E534 000000420534 0 d$8Ph 00000001E55D 00000042055D 0 t$(to 00000001EB28 000000420B28 0 SUVW3 00000001EC01 000000420C01 0 |$0t1 00000001EC34 000000420C34 0 \$$hh! 000000021FA8 000000423FA8 0 t WVS 000000021FD5 000000423FD5 0 u7WPS 000000021FE6 000000423FE6 0 u&WVS 000000024D6E 000000426D6E 0 CloseHandle 000000024D7C 000000426D7C 0 ReadFile 000000024D88 000000426D88 0 GetFileSize 000000024D96 000000426D96 0 CreateFileA 000000024DA4 000000426DA4 0 WriteFile 000000024DB0 000000426DB0 0 SetFilePointer 000000024DC2 000000426DC2 0 GetLocalTime 000000024DD2 000000426DD2 0 GetModuleFileNameA 000000024DE8 000000426DE8 0 DeleteFileA 000000024DF6 000000426DF6 0 VirtualQuery 000000024E06 000000426E06 0 CreateThread 000000024E16 000000426E16 0 TerminateThread 000000024E28 000000426E28 0 Sleep 000000024E30 000000426E30 0 SuspendThread 000000024E40 000000426E40 0 ResumeThread 000000024E50 000000426E50 0 GetProcAddress 000000024E62 000000426E62 0 LoadLibraryA 000000024E72 000000426E72 0 GetModuleHandleA 000000024E86 000000426E86 0 VirtualFree 000000024E94 000000426E94 0 VirtualAlloc 000000024EA4 000000426EA4 0 FindNextFileA 000000024EB4 000000426EB4 0 FindFirstFileA 000000024EC6 000000426EC6 0 WaitForSingleObject 000000024EDC 000000426EDC 0 VirtualProtect 000000024EEC 000000426EEC 0 KERNEL32.dll 000000024EFC 000000426EFC 0 MessageBoxA 000000024F08 000000426F08 0 USER32.dll 000000024F14 000000426F14 0 ADVAPI32.dll 000000024F24 000000426F24 0 ??0Init@ios_base@std@@QAE@XZ 000000024F44 000000426F44 0 ??1Init@ios_base@std@@QAE@XZ 000000024F64 000000426F64 0 ??0_Winit@std@@QAE@XZ 000000024F7C 000000426F7C 0 ??1_Winit@std@@QAE@XZ 000000024F94 000000426F94 0 ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ 000000024FDE 000000426FDE 0 ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z 00000002503A 00000042703A 0 ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB 000000025096 000000427096 0 ?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z 0000000250E8 0000004270E8 0 ?_Xlen@std@@YAXXZ 0000000250FC 0000004270FC 0 ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z 000000025150 000000427150 0 ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB File pos Mem pos ID Text ======== ======= == ==== 00000002519A 00000042719A 0 ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z 0000000251EA 0000004271EA 0 ?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z 000000025238 000000427238 0 ?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ 000000025286 000000427286 0 ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z 0000000252DE 0000004272DE 0 ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z 00000002533A 00000042733A 0 ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z 000000025392 000000427392 0 ??0bad_exception@std@@QAE@ABV01@@Z 0000000253B8 0000004273B8 0 ??1bad_exception@std@@UAE@XZ 0000000253D8 0000004273D8 0 ??0bad_exception@std@@QAE@PBD@Z 0000000253FA 0000004273FA 0 ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z 000000025456 000000427456 0 ?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z 0000000254A4 0000004274A4 0 ?_Xran@std@@YAXXZ 0000000254B8 0000004274B8 0 ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z 00000002550E 00000042750E 0 ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z 000000025560 000000427560 0 ?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z 0000000255B4 0000004275B4 0 ?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z 000000025612 000000427612 0 ?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z 000000025670 000000427670 0 ?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z 0000000256C2 0000004276C2 0 ??1_Lockit@std@@QAE@XZ 0000000256DC 0000004276DC 0 ??0_Lockit@std@@QAE@XZ 0000000256F4 0000004276F4 0 MSVCP60.dll 000000025702 000000427702 0 PathFileExistsA 000000025714 000000427714 0 PathAppendA 000000025720 000000427720 0 SHLWAPI.dll 00000002572E 00000042772E 0 __CxxFrameHandler 00000002574A 00000042774A 0 memmove 000000025754 000000427754 0 ??0exception@@QAE@ABV0@@Z 000000025778 000000427778 0 realloc 000000025782 000000427782 0 _CxxThrowException 000000025798 000000427798 0 ?what@exception@@UBEPBDXZ 0000000257B4 0000004277B4 0 ??1exception@@UAE@XZ 0000000257CC 0000004277CC 0 _vsnprintf 0000000257DA 0000004277DA 0 ??2@YAPAXI@Z 0000000257EA 0000004277EA 0 fclose 0000000257F4 0000004277F4 0 vfprintf 000000025800 000000427800 0 fopen 000000025808 000000427808 0 ??0exception@@QAE@XZ 000000025820 000000427820 0 fputs 000000025828 000000427828 0 fread 000000025838 000000427838 0 _ftol 000000025840 000000427840 0 malloc 00000002584A 00000042784A 0 memcpy 000000025854 000000427854 0 memset 00000002585E 00000042785E 0 __dllonexit 00000002586C 00000042786C 0 _onexit 000000025874 000000427874 0 MSVCRT.dll 000000025882 000000427882 0 ??1type_info@@UAE@XZ 00000002589A 00000042789A 0 _initterm 0000000258A6 0000004278A6 0 _adjust_fdiv 0000000258B6 0000004278B6 0 HeapCreate 0000000258C4 0000004278C4 0 InterlockedCompareExchange 0000000258E2 0000004278E2 0 InterlockedExchange 0000000258F8 0000004278F8 0 HeapDestroy 000000025906 000000427906 0 HeapFree 000000025912 000000427912 0 OpenThread 000000025920 000000427920 0 SetThreadContext 000000025934 000000427934 0 GetThreadContext 000000025948 000000427948 0 Thread32Next 000000025958 000000427958 0 HeapReAlloc 000000025966 000000427966 0 HeapAlloc File pos Mem pos ID Text ======== ======= == ==== 000000025972 000000427972 0 GetCurrentThreadId 000000025988 000000427988 0 GetCurrentProcessId 00000002599E 00000042799E 0 Thread32First 0000000259AE 0000004279AE 0 CreateToolhelp32Snapshot 0000000259CA 0000004279CA 0 FlushInstructionCache 0000000259E2 0000004279E2 0 GetCurrentProcess 000000025A32 000000427A32 0 Library.dll 000000025A3E 000000427A3E 0 iinit 0000000260B0 0000004280B0 0 .?AVexception@@ 0000000260C8 0000004280C8 0 .?AVException@@ 0000000260E0 0000004280E0 0 .?AVArgumentOutOfRangeException@@ 000000026118 000000428118 0 .?AVbad_exception@std@@ 000000026130 000000428130 0 bad exception 000000026150 000000428150 0 .?AVIOException@@ 000000026170 000000428170 0 .?AVFileNotFoundException@@ 000000026190 000000428190 0 Logger is now on new TraceLevel: %s 0000000261B4 0000004281B4 0 UNKNOWN 0000000261C0 0000004281C0 0 TRACE 0000000261C8 0000004281C8 0 NOTICE 0000000261D0 0000004281D0 0 WARNING 0000000261D8 0000004281D8 0 ERROR 0000000261E0 0000004281E0 0 FATAL 0000000261E8 0000004281E8 0 [%s]: %s 000000026200 000000428200 0 .?AVThreadException@@ 000000026218 000000428218 0 Can't resume thread 00000002622C 00000042822C 0 MessageBoxTimeoutA 000000026240 000000428240 0 user32.dll 00000002624C 00000042824C 0 [%04d/%02d/%02d %02d:%02d:%02d.%03d] %s 000000026280 000000428280 0 .?AVXfsException@@ 0000000262A0 0000004282A0 0 .?AVXfsGetInfoException@@ 0000000262BC 0000004282BC 0 get cu info get info exception %d 0000000262E0 0000004282E0 0 get cu and store result unknown exception 00000002630C 00000042830C 0 get cu info query error 000000026330 000000428330 0 .?AVXfsDispenseException@@ 00000002634C 00000042834C 0 unknown exception 000000026360 000000428360 0 Dispense exception, code %d 00000002637C 00000042837C 0 ca5h units info received 000000026398 000000428398 0 try to set %d 0000000263A8 0000004283A8 0 Xfs::QueryCashUnitsFromAtm4 0000000263C4 0000004283C4 0 Xfs::QueryCashUnitsFromAtm3 0000000263E0 0000004283E0 0 Xfs::QueryCashUnitsFromAtm2 0000000263FC 0000004283FC 0 LFS found info about <%d> ca5h un1t5 000000026424 000000428424 0 XFS-> dispense end SUCCESSFUL DISPENSE 00000002644C 00000042844C 0 WFS_RESULT %d 000000026468 000000428468 0 .?AVHookLibException@@ 000000026480 000000428480 0 WFMFreeBuffer 000000026490 000000428490 0 WFMAllocateMore 0000000264A0 0000004284A0 0 WFMAllocateBuffer 0000000264B4 0000004284B4 0 WFSExecute 0000000264C0 0000004284C0 0 WFSFreeResult 0000000264D0 0000004284D0 0 WFSStartUp 0000000264DC 0000004284DC 0 WFSGetInfo 0000000264E8 0000004284E8 0 no xf5 module found 0000000264FC 0000004284FC 0 msxfs.dll 000000026538 000000428538 0 |INDEX:%d|CU state:%d|Type:%d|Values:%d|Currency_ID:%s|Money count:%d| 000000026584 000000428584 0 Founded < %d > commands 0000000265A0 0000004285A0 0 Command file deleted successfully 0000000265C4 0000004285C4 0 Reading command from a %s 0000000265E0 0000004285E0 0 %s\%s 0000000265E8 0000004285E8 0 FileCommandProvider::ReadXfsCommandFromFile -> File pos Mem pos ID Text ======== ======= == ==== 000000026620 000000428620 0 .?AVArgumentException@@ 000000026638 000000428638 0 exception 000000026648 000000428648 0 CommandProcessor created 000000026664 000000428664 0 DEFAULT command processed 000000026680 000000428680 0 NONE command processed 000000026698 000000428698 0 System error! 0000000266A8 0000004286A8 0 Dispense failed. CODE:%d 0000000266C4 0000004286C4 0 Multi Dispensing start 0000000266DC 0000004286DC 0 Dispense failed. Unknown reason. 000000026700 000000428700 0 Dispense failed. %d 000000026714 000000428714 0 Manual Dispensing 000000026728 000000428728 0 Display Balance -> exception, code:%d 000000026750 000000428750 0 Display Balance 1try -> exception, code:%d 00000002677C 00000042877C 0 CommandProcessor::ProcessCommand -> 0000000267A0 0000004287A0 0 SetMaximumDispenseSize:%d 0000000267BC 0000004287BC 0 NULL command processed 0000000267D4 0000004287D4 0 ICommandProcessor::ProcessCommand -> start method 000000026808 000000428808 0 Processing command #%d 000000026820 000000428820 0 Received 00000002682D 00000042882D 0 commands 000000026838 000000428838 0 exception cauch: %d 00000002684C 00000042884C 0 Exiting 000000026854 000000428854 0 Pausing 00000002685C 00000042885C 0 trying to dispense 000000026870 000000428870 0 R2CommandProcessor::ProcessGetRealBalance()1 0000000268A0 0000004288A0 0 cur disp service is |%d| 0000000268BC 0000004288BC 0 try toi set %d 0000000268CC 0000004288CC 0 ___log.txt 0000000268D8 0000004288D8 0 Deleting resources 0000000268F8 0000004288F8 0 .?AVXfsLoaderException@@ 000000026914 000000428914 0 uncatched 000000026920 000000428920 0 %s:%d 000000026928 000000428928 0 c:\atm\1 000000026934 000000428934 0 void CreateAllResources() 000000026950 000000428950 0 Xfs init error 000000026960 000000428960 0 Critical system error! 000000026978 000000428978 0 resources created 00000002698C 00000042898C 0 MH_UNKNOWN 000000026998 000000428998 0 MH_OK 0000000269A0 0000004289A0 0 MH_ERROR_ALREADY_INITIALIZED 0000000269C0 0000004289C0 0 MH_ERROR_NOT_INITIALIZED 0000000269DC 0000004289DC 0 MH_ERROR_ALREADY_CREATED 0000000269F8 0000004289F8 0 MH_ERROR_NOT_CREATED 000000026A10 000000428A10 0 MH_ERROR_ENABLED 000000026A24 000000428A24 0 MH_ERROR_DISABLED 000000026A38 000000428A38 0 MH_ERROR_NOT_EXECUTABLE 000000026A50 000000428A50 0 MH_ERROR_UNSUPPORTED_FUNCTION 000000026A70 000000428A70 0 MH_ERROR_MEMORY_ALLOC 000000026A88 000000428A88 0 MH_ERROR_MEMORY_PROTECT 000000026AA0 000000428AA0 0 MH_ERROR_MODULE_NOT_FOUND 000000026ABC 000000428ABC 0 MH_ERROR_FUNCTION_NOT_FOUND 000000026AD8 000000428AD8 0 (unknown) 000000026B32 000000428B32 0 YYYYY 000000026B3E 000000428B3E 0 YYYYYYYYYYYY 000000026B4C 000000428B4C 0 }YPPPPYYYYa 000000026B62 000000428B62 0 YYYYYYYYYYY 000000026C14 000000428C14 0 JJJJKRJJJJOLJJJJJJJJUE@JJJEYMFJ]JJJJJJJJJJJJJJacgNJJkmJJEmJJDEJJ 000000026CF8 000000428CF8 0 .?AVtype_info@@ 00000002706B 00000042906B 0 0!01070Q0W0a0q0w0 000000027081 000000429081 0 1-1K1]1 File pos Mem pos ID Text ======== ======= == ==== 00000002708D 00000042908D 0 1>2\2 000000027099 000000429099 0 3H3f3r3 0000000270A7 0000004290A7 0 4P4M5 0000000270B5 0000004290B5 0 :$;R; 0000000270BF 0000004290BF 0 ;.<D<c< 0000000270CD 0000004290CD 0 <5=;=r=x= 0000000270DF 0000004290DF 0 >2>j> 0000000270FB 0000004290FB 0 ?!?1?7?G?~? 00000002711D 00000042911D 0 0&0-0;0B0W0s0 00000002712B 00000042912B 0 0.1i1 00000002713F 00000042913F 0 2 3(3z3 00000002714D 00000042914D 0 3-4Q4a4y4 000000027163 000000429163 0 6&6:6 000000027179 000000429179 0 7'7c7 000000027189 000000429189 0 8#9X9}9 0000000271B9 0000004291B9 0 =<>F>d>w> 0000000271CB 0000004291CB 0 ?<?F?m?}? 0000000271E4 0000004291E4 0 30f0m0y0 0000000271F9 0000004291F9 0 0 1(141@1L1X1e1l1{1 000000027227 000000429227 0 4%4,4 00000002723B 00000042923B 0 5'5.545c5 00000002724B 00000042924B 0 6)6o6 000000027253 000000429253 0 7=7U7\7t7 00000002725F 00000042925F 0 7+8h8u8 000000027275 000000429275 0 949:9@9I9P9 00000002728B 00000042928B 0 :!:-:::A:G: 0000000272A1 0000004292A1 0 ;Q<a<r< 0000000272B3 0000004292B3 0 >,>q> 0000000272D1 0000004292D1 0 0+1v1 0000000272D9 0000004292D9 0 162>2 0000000272EF 0000004292EF 0 4-464Z4k4 0000000272FB 0000004292FB 0 4[5m5 00000002730D 00000042930D 0 787A7R7w7 00000002731D 00000042931D 0 7g8q8w8 00000002732F 00000042932F 0 9I:[: 000000027355 000000429355 0 3)5:5@5K5e5n5z5 00000002737F 00000042937F 0 5A6Q6b6p6u6 000000027399 000000429399 0 7/777<7b7g7~7 0000000273B9 0000004293B9 0 8$8)8O8T8k8s8x8 0000000273DB 0000004293DB 0 9<9A9X9 0000000273F5 0000004293F5 0 :R:q: 000000027401 000000429401 0 :3;_; 000000027411 000000429411 0 ;3<8<I<O< 000000027423 000000429423 0 =P>V>h>n> 00000002745D 00000042945D 0 1N1T1e1 00000002746D 00000042946D 0 1#2Q2p2 000000027481 000000429481 0 22383I3l3r3 000000027491 000000429491 0 334f4 0000000274AF 0000004294AF 0 6$626A6_6r6 0000000274ED 0000004294ED 0 :O:m: 0000000274F3 0000004294F3 0 :B;U; 000000027509 000000429509 0 =$=8===Q=_=w= 000000027543 000000429543 0 0<1r1 000000027553 000000429553 0 2A2I2z2 000000027567 000000429567 0 333v3 000000027577 000000429577 0 5/5V5 000000027595 000000429595 0 6N7U7p7 0000000275A7 0000004295A7 0 8!828@8E8 0000000275C5 0000004295C5 0 9G9L9S9[9j9x9 0000000275D7 0000004295D7 0 :T:Y:q:y: File pos Mem pos ID Text ======== ======= == ==== 0000000275FB 0000004295FB 0 ="=2=p=~= 00000002760D 00000042960D 0 =[>s> 000000027621 000000429621 0 ?C?u?z? 00000002763D 00000042963D 0 0-0I0 000000027663 000000429663 0 364L4 00000002766D 00000042966D 0 5)5F5]5 00000002767D 00000042967D 0 627f7 000000027691 000000429691 0 909K9 0000000276A1 0000004296A1 0 :&;<; 0000000276AD 0000004296AD 0 <6<M< 0000000276BB 0000004296BB 0 =">V> 0000000276C1 0000004296C1 0 > ?;?v? 0000000276E9 0000004296E9 0 1"2E2U2 0000000276F3 0000004296F3 0 2"3E3U3 0000000276FD 0000004296FD 0 334T4r4 000000027707 000000429707 0 4=5M5 000000027711 000000429711 0 5;6K6 00000002771F 00000042971F 0 7C7[7m7 00000002772D 00000042972D 0 8.848Q8 000000027747 000000429747 0 9*:8: 00000002775D 00000042975D 0 <C<r< 00000002776B 00000042976B 0 =A=W= 000000027773 000000429773 0 =.><>M> 000000027783 000000429783 0 > ?)?7?@?Q?s? 00000002779C 00000042979C 0 80<0@0D0H0L0P0T0X0\0 0000000277B1 0000004297B1 0 0d0s0 0000000277BB 0000004297BB 0 0!1;1 0000000277F3 0000004297F3 0 666T6g6 000000027803 000000429803 0 6$7D7f7 00000002780D 00000042980D 0 848d8 000000027815 000000429815 0 8W9f9 00000002781D 00000042981D 0 9":U: 000000027827 000000429827 0 :,;7;Y; 00000002782F 00000042982F 0 ;e;w; 000000027851 000000429851 0 =&>U>n> 00000002785B 00000042985B 0 >#??? 000000027870 000000429870 0 40Q0a0v0 00000002787F 00000042987F 0 0I1p1 000000027895 000000429895 0 2+21262F2c2y2 0000000278B1 0000004298B1 0 3F3g3x3 0000000278BB 0000004298BB 0 4<4A4O4_4e4j4 0000000278D3 0000004298D3 0 5=5B5R5r5 0000000278F3 0000004298F3 0 73797M7S7g7u7 00000002790D 00000042990D 0 7A8_8g8 000000027923 000000429923 0 9!9'9?9_9h9o9u9|9 00000002793F 00000042993F 0 9K:X: 000000027947 000000429947 0 ;7;j; 000000027959 000000429959 0 >D>K> 000000027965 000000429965 0 ?#?*?@? 000000027978 000000429978 0 <0J0Q0 00000002799D 00000042999D 0 3,333<3B3J3R3[3w3 0000000279B1 0000004299B1 0 344B4N4\4k4s4y4 0000000279D9 0000004299D9 0 646I6{6 000000027A15 000000429A15 0 9!9%9)9-9195999=9A9E9I9M9l9u9 000000027A3F 000000429A3F 0 ;);U; 000000027A4D 000000429A4D 0 0)101"3 000000027A57 000000429A57 0 4S5e5 000000027A67 000000429A67 0 < <$<(<,<0<4< 000000027A8F 000000429A8F 0 >&>2>T>Z> 000000027A99 000000429A99 0 >f>l>z> File pos Mem pos ID Text ======== ======= == ==== 000000027ABD 000000429ABD 0 ?0?B? 000000027AE1 000000429AE1 0 0M0i0 000000027AF3 000000429AF3 0 0-1I1e1n1s1 000000027B09 000000429B09 0 2$2D2Y2y2 000000027B1B 000000429B1B 0 393a3y3 000000027B2D 000000429B2D 0 4!4<4U4 000000027B35 000000429B35 0 4g4p4y4 000000027B51 000000429B51 0 555:5m5 000000027B6D 000000429B6D 0 6%6*6U6Z6y6 000000027B7F 000000429B7F 0 717E7V7_7d7 000000027B95 000000429B95 0 8"858b8q8 000000027BB7 000000429BB7 0 9%9*9E9J9e9j9 000000027BD7 000000429BD7 0 :%:*:E:J:l: 000000027BE9 000000429BE9 0 ;);A;a;y; 000000027BF9 000000429BF9 0 <D<U<m< 000000027C4F 000000429C4F 0 2 2$2(2,2024282<2@2D2H2L2P2T2X2\2 000000027C71 000000429C71 0 2d2h2l2p2t2x2|2 000000027CC3 000000429CC3 0 3(3<3L3P3\3p3|3 000000027CEB 000000429CEB 0 4(44484D4L4T4h4t4 000000027D17 000000429D17 0 5$505L5T5\5h5 000000027D39 000000429D39 0 6$606L6T6 000000027D57 000000429D57 0 7,747@7\7d7x7 000000027D79 000000429D79 0 8 8(8<8L8x8 000000027D9F 000000429D9F 0 9$90989T9 000000027DC3 000000429DC3 0 : :<:D:L: 000000027DCD 000000429DCD 0 :l:p:t:x: 000000027DE7 000000429DE7 0 ;,;4;@;\;d;p; 000000027E0D 000000429E0D 0 <$<,<8<T<\<d<p< 000000027E35 000000429E35 0 =$=0=L=T=\=d=p= 000000027E59 000000429E59 0 >,><>P>d>p> 000000027E7B 000000429E7B 0 ?4?<?H?d?l?t?|? 000000027EAF 000000429EAF 0 0$0,040@0\0d0l0 000000027EDF 000000429EDF 0 1H1\1h1p1 000000027EF7 000000429EF7 0 2 2<2D2P2l2t2 000000027F13 000000429F13 0 3 3<3H3d3p3 000000027F2F 000000429F2F 0 4,4P4\4d4t4 000000027F49 000000429F49 0 505D5L5T5\5d5l5t5 000000027F6F 000000429F6F 0 6,646@6H6d6 000000027F8F 000000429F8F 0 7$7@7L7T7 000000027FB5 000000429FB5 0 8 8<8D8P8X8t8 000000027FD5 000000429FD5 0 909<9D9L9T9\9d9t9 000000027FF5 000000429FF5 0 :,:@:T:d:t: 000000028025 00000042A025 0 0 0$0(0H0 00000000F69C 00000040F69C 0 (null)
=== DOWNLOAD ===