.- - -----÷M÷E÷N÷U÷------------------------------------------------------------- --- ----  -------------.
!  WALL ! STATS ! GOODIES ! YARA ! FAQ ! RSS                                                            !
`--------------  - ---  ---------- -------- -------- -------- -------- ----------------- -  ---- ---- --'

                                           ATM MALWARE NOTICE 
                    4b13c835e07ae4318d936e70451b49677c7063691749913c08efbea66959cf8c
 
Date...........: 2019-11-18
Family.........: HelloWorld
File name......: rtkdrv2.exe
File size......: 170.00 KB
Type file......: EXE/Windows
Virscan........: VT - HA
Additional note: Dropped from adf43c6957fd11e45ffa4f2a71eb0ef565da9c4a9bc9cd101d2ac485b5358c46, 
executed by fead0633975c6c08f5509a7bd5c34d29bfdcacd3da47562efbf33121726f77b0 Entropy: Binary Histogram: === PEDUMP REPORT ===
=== MZ Header === signature: "MZ" bytes_in_last_block: 144 0x90 blocks_in_file: 3 3 num_relocs: 0 0 header_paragraphs: 4 4 min_extra_paragraphs: 0 0 max_extra_paragraphs: 65535 0xffff ss: 0 0 sp: 184 0xb8 checksum: 0 0 ip: 0 0 cs: 0 0 reloc_table_offset: 64 0x40 overlay_number: 0 0 reserved0: 0 0 oem_id: 0 0 oem_info: 0 0 reserved2: 0 0 reserved3: 0 0 reserved4: 0 0 reserved5: 0 0 reserved6: 0 0 lfanew: 232 0xe8 === DOS STUB === 00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......| === RICH Header === LIB_ID VERSION TIMES_USED 199 c7 41118 a09e 1 1 225 e1 21005 520d 41 29 223 df 21005 520d 24 18 224 e0 21005 520d 172 ac 203 cb 65501 ffdd 11 b 1 1 0 0 134 86 228 e4 30501 7725 41 29 219 db 21005 520d 1 1 222 de 30501 7725 1 1 === PE Header === signature: "PE\x00\x00" # IMAGE_FILE_HEADER: Machine: 332 0x14c x86 NumberOfSections: 5 5 TimeDateStamp: "2019-09-16 21:53:34" PointerToSymbolTable: 0 0 NumberOfSymbols: 0 0 SizeOfOptionalHeader: 224 0xe0 Characteristics: 258 0x102 EXECUTABLE_IMAGE, 32BIT_MACHINE # IMAGE_OPTIONAL_HEADER32: Magic: 267 0x10b 32-bit executable LinkerVersion: 12.0 SizeOfCode: 134656 0x20e00 SizeOfInitializedData: 46592 0xb600 SizeOfUninitializedData: 0 0 AddressOfEntryPoint: 64133 0xfa85 BaseOfCode: 4096 0x1000 BaseOfData: 139264 0x22000 ImageBase: 4194304 0x400000 SectionAlignment: 4096 0x1000 FileAlignment: 512 0x200 OperatingSystemVersion: 5.1 ImageVersion: 0.0 SubsystemVersion: 5.1 Reserved1: 0 0 SizeOfImage: 196608 0x30000 SizeOfHeaders: 1024 0x400 CheckSum: 0 0 Subsystem: 2 2 WINDOWS_GUI DllCharacteristics: 33088 0x8140 DYNAMIC_BASE, NX_COMPAT TERMINAL_SERVER_AWARE SizeOfStackReserve: 1048576 0x100000 SizeOfStackCommit: 4096 0x1000 SizeOfHeapReserve: 1048576 0x100000 SizeOfHeapCommit: 4096 0x1000 LoaderFlags: 0 0 NumberOfRvaAndSizes: 16 0x10 === DATA DIRECTORY === EXPORT rva:0x 0 size:0x 0 IMPORT rva:0x 2795c size:0x 78 RESOURCE rva:0x 2d000 size:0x 440 EXCEPTION rva:0x 0 size:0x 0 SECURITY rva:0x 0 size:0x 0 BASERELOC rva:0x 2e000 size:0x 1760 DEBUG rva:0x 0 size:0x 0 ARCHITECTURE rva:0x 0 size:0x 0 GLOBALPTR rva:0x 0 size:0x 0 TLS rva:0x 0 size:0x 0 LOAD_CONFIG rva:0x 27410 size:0x 40 Bound_IAT rva:0x 0 size:0x 0 IAT rva:0x 22000 size:0x 1ec Delay_IAT rva:0x 0 size:0x 0 CLR_Header rva:0x 0 size:0x 0 rva:0x 0 size:0x 0 === SECTIONS === NAME RVA VSZ RAW_SZ RAW_PTR nREL REL_PTR nLINE LINE_PTR FLAGS .text 1000 20d80 20e00 400 0 0 0 0 60000020 R-X CODE .rdata 22000 6326 6400 21200 0 0 0 0 40000040 R-- IDATA .data 29000 32bc 1400 27600 0 0 0 0 c0000040 RW- IDATA .rsrc 2d000 440 600 28a00 0 0 0 0 40000040 R-- IDATA .reloc 2e000 1760 1800 29000 0 0 0 0 42000040 R-- IDATA DISCARDABLE === RESOURCES === FILE_OFFSET CP LANG SIZE TYPE NAME 0x28a60 0 0x409 991 MANIFEST #1 === IMPORTS === MODULE_NAME HINT ORD FUNCTION_NAME WS2_32.dll 15 WS2_32.dll 14 WS2_32.dll 6f WS2_32.dll a WS2_32.dll 4 WS2_32.dll 73 WS2_32.dll b WS2_32.dll 2 WS2_32.dll 17 WS2_32.dll 3 WS2_32.dll 34 WS2_32.dll 13 WS2_32.dll c WS2_32.dll 11 WS2_32.dll 12 WS2_32.dll f WS2_32.dll 10 WS2_32.dll 97 WS2_32.dll 7 WS2_32.dll 59 WSAStringToAddressA WS2_32.dll 8 WS2_32.dll 9 WS2_32.dll 39 DNSAPI.dll 56 DnsQueryConfig NETAPI32.dll f6 NetUserGetLocalGroups NETAPI32.dll ad NetQueryDisplayInformation NETAPI32.dll 59 NetApiBufferFree NETAPI32.dll e5 NetShareEnum NETAPI32.dll d0 NetServerEnum KERNEL32.dll 237 GetFileInformationByHandle KERNEL32.dll 15c FileTimeToLocalFileTime KERNEL32.dll 192 FlushFileBuffers KERNEL32.dll 5de WriteConsoleW KERNEL32.dll 520 SetStdHandle KERNEL32.dll c2 CreateFileW KERNEL32.dll 4ec SetEnvironmentVariableA KERNEL32.dll 4fc SetFilePointerEx KERNEL32.dll 2c5 GetStringTypeW KERNEL32.dll 249 GetFullPathNameW KERNEL32.dll 396 LCMapStringW KERNEL32.dll 93 CompareStringW KERNEL32.dll 3fa OutputDebugStringW KERNEL32.dll 19d FreeEnvironmentStringsW KERNEL32.dll 227 GetEnvironmentStringsW KERNEL32.dll 42d QueryPerformanceCounter KERNEL32.dll 262 GetModuleFileNameA KERNEL32.dll 203 GetCurrentDirectoryW KERNEL32.dll 23e GetFileType KERNEL32.dll 15d FileTimeToSystemTime KERNEL32.dll 55c SystemTimeToTzSpecificLocalTime KERNEL32.dll 2d6 GetSystemTimeAsFileTime KERNEL32.dll 2f2 GetTickCount KERNEL32.dll 550 Sleep KERNEL32.dll 29d GetProcAddress KERNEL32.dll 3a5 LoadLibraryA KERNEL32.dll 4ee SetErrorMode KERNEL32.dll 263 GetModuleFileNameW KERNEL32.dll 5df WriteFile KERNEL32.dll d7 CreateProcessA KERNEL32.dll 55f TerminateProcess KERNEL32.dll d4 CreatePipe KERNEL32.dll 7f CloseHandle KERNEL32.dll 507 SetHandleInformation KERNEL32.dll 44f ReadFile KERNEL32.dll 3d1 MultiByteToWideChar KERNEL32.dll 20a GetCurrentProcessId KERNEL32.dll 55a SwitchToThread KERNEL32.dll 403 PeekNamedPipe KERNEL32.dll 2c0 GetStdHandle KERNEL32.dll 250 GetLastError KERNEL32.dll e8 CreateThread KERNEL32.dll 199 FormatMessageA KERNEL32.dll 4e9 SetEndOfFile KERNEL32.dll 2f9 GetTimeZoneInformation KERNEL32.dll 2a2 GetProcessHeap KERNEL32.dll 125 EnterCriticalSection KERNEL32.dll 121 EncodePointer KERNEL32.dll fe DecodePointer KERNEL32.dll 151 ExitProcess KERNEL32.dll 266 GetModuleHandleExW KERNEL32.dll 1b AreFileApisANSI KERNEL32.dll 5cb WideCharToMultiByte KERNEL32.dll 367 IsDebuggerPresent KERNEL32.dll 36d IsProcessorFeaturePresent KERNEL32.dll 3a2 LeaveCriticalSection KERNEL32.dll 333 HeapFree KERNEL32.dll 32f HeapAlloc KERNEL32.dll 336 HeapReAlloc KERNEL32.dll 1c8 GetCommandLineA KERNEL32.dll 50a SetLastError KERNEL32.dll 20e GetCurrentThreadId KERNEL32.dll 105 DeleteCriticalSection KERNEL32.dll 580 UnhandledExceptionFilter KERNEL32.dll 541 SetUnhandledExceptionFilter KERNEL32.dll 348 InitializeCriticalSectionAndSpinCount KERNEL32.dll 209 GetCurrentProcess KERNEL32.dll 571 TlsAlloc KERNEL32.dll 573 TlsGetValue KERNEL32.dll 574 TlsSetValue KERNEL32.dll 572 TlsFree KERNEL32.dll 2be GetStartupInfoW KERNEL32.dll 267 GetModuleHandleW KERNEL32.dll 3a7 LoadLibraryExW KERNEL32.dll 372 IsValidCodePage KERNEL32.dll 1a4 GetACP KERNEL32.dll 286 GetOEMCP KERNEL32.dll 1b3 GetCPInfo KERNEL32.dll 338 HeapSize KERNEL32.dll 4ac RtlUnwind KERNEL32.dll 1ee GetConsoleMode KERNEL32.dll 44d ReadConsoleW KERNEL32.dll 1dc GetConsoleCP KERNEL32.dll 168 FindClose KERNEL32.dll 16e FindFirstFileExW KERNEL32.dll 21f GetDriveTypeW ADVAPI32.dll c0 CryptAcquireContextA ADVAPI32.dll db CryptReleaseContext ADVAPI32.dll d1 CryptGenRandom === Packer / Compiler === MS Visual C++ 6.0 - 8.0
=== Strings ===
File pos Mem pos ID Text ======== ======= == ==== 00000000004D 00000040004D 0 !This program cannot be run in DOS mode. 0000000000D8 0000004000D8 0 Rich) 0000000001E0 0000004001E0 0 .text 000000000208 000000400208 0 .rdata 00000000022F 00000040022F 0 @.data 000000000258 000000400258 0 .rsrc 00000000027F 00000040027F 0 @.reloc 000000000487 000000401087 0 /WQQj 00000000058D 00000040118D 0 HtWHtHHt 0000000005C2 0000004011C2 0 Humj 000000000740 000000401340 0 u7VPh 0000000007ED 0000004013ED 0 tsHtJHt 0000000009D5 0000004015D5 0 9{,t3W 000000000CB0 0000004018B0 0 9_8t8 000000000ED3 000000401AD3 0 YY9s,t% 0000000012D4 000000401ED4 0 uEh,jB 0000000012E8 000000401EE8 0 Ph@jB 00000000131E 000000401F1E 0 uih,jB 000000001334 000000401F34 0 Sh@jB 000000001391 000000401F91 0 lhPjB 00000000145F 00000040205F 0 uHh,jB 000000001473 000000402073 0 Ph@jB 0000000014D6 0000004020D6 0 Ph@jB 000000001879 000000402479 0 Ph@kB 0000000018BD 0000004024BD 0 PhxkB 000000001D03 000000402903 0 Ph0lB 000000001D72 000000402972 0 PhhlB 000000001F01 000000402B01 0 @f;C. 000000001F89 000000402B89 0 Vf 000000002427 000000403027 0 PhhlB 000000002565 000000403165 0 Ph$mB 0000000025B3 0000004031B3 0 @f;C. 000000002667 000000403267 0 Sf 00000000281F 00000040341F 0 QQSVW 000000002A02 000000403602 0 YWSVh 000000002ACA 0000004036CA 0 HtmHtcHtWH 00000000321D 000000403E1D 0 QSVWQ 000000003605 000000404205 0 Ph pB 0000000036AF 0000004042AF 0 PhHpB 0000000036E2 0000004042E2 0 GWWhhpB 000000003723 000000404323 0 QSVWQj 000000003784 000000404384 0 QSVWQj 000000003D15 000000404915 0 t|Ht"- 000000003E8C 000000404A8C 0 Nt Nt 000000003EB0 000000404AB0 0 t?Ht2Ht%Ht 000000003F2A 000000404B2A 0 t<Ht!Ht 000000003F89 000000404B89 0 tdHtJHt9Ht 000000004007 000000404C07 0 FYY;u 000000004025 000000404C25 0 tPHt5Ht 0000000041CB 000000404DCB 0 lSVWj 00000000454C 00000040514C 0 QQSV3 0000000046A2 0000004052A2 0 \$ Pj 0000000046AD 0000004052AD 0 \$,PjeS 000000004979 000000405579 0 lSVWQ3 0000000049FD 0000004055FD 0 PSSSj 000000004A73 000000405673 0 VWQRj 000000004EC6 000000405AC6 0 Vh<rB 000000004EFB 000000405AFB 0 PhDrB 000000004FA4 000000405BA4 0 VRhTrB 000000005068 000000405C68 0 RPhprB File pos Mem pos ID Text ======== ======= == ==== 000000005070 000000405C70 0 D$LjdP 000000005199 000000405D99 0 HW9D$ 000000005378 000000405F78 0 L$0@WV 000000005393 000000405F93 0 HW9D$ 0000000055C7 0000004061C7 0 QQSVW 00000000584B 00000040644B 0 QQSV3 000000005925 000000406525 0 QQSVW 000000005D69 000000406969 0 u$jeS 000000006264 000000406E64 0 j@XQSP 000000006A96 000000407696 0 T$$Wj 000000006B0C 00000040770C 0 L$ j 00000000716E 000000407D6E 0 D$ ;D$0 000000007727 000000408327 0 YYNOu 0000000077C2 0000004083C2 0 WhDfB 0000000077E8 0000004083E8 0 WhDfB 000000007C46 000000408846 0 SVWPP 000000008316 000000408F16 0 QQSVW 0000000089D1 0000004095D1 0 QQSVW 000000008FA8 000000409BA8 0 expa3 000000008FBF 000000409BBF 0 te k_ 0000000090F7 000000409CF7 0 3J(3B,3 0000000091E7 000000409DE7 0 1B 1J$1BH1JLC 0000000097FC 00000040A3FC 0 B 1A 000000009802 00000040A402 0 B$1A$ 000000009808 00000040A408 0 B(1A( 00000000980E 00000040A40E 0 B,1A, 000000009814 00000040A414 0 B01A0 00000000981A 00000040A41A 0 B41A4 000000009820 00000040A420 0 B81A8 000000009826 00000040A426 0 B<1A< 00000000982C 00000040A42C 0 B@1A@ 000000009832 00000040A432 0 BD1AD 000000009842 00000040A442 0 BH1AH 000000009848 00000040A448 0 BL1AL 00000000984E 00000040A44E 0 BP1AP 000000009854 00000040A454 0 BT1AT 00000000985A 00000040A45A 0 BX1AX 000000009860 00000040A460 0 B\1A\ 00000000986C 00000040A46C 0 Bd1Ad 000000009878 00000040A478 0 Bh1Ah 00000000987E 00000040A47E 0 Bl1Al 000000009884 00000040A484 0 Bp1Ap 00000000988A 00000040A48A 0 Bt1At 000000009890 00000040A490 0 Bx1Ax 000000009896 00000040A496 0 B|1A| 000000009A3E 00000040A63E 0 QQSVW 000000009CBD 00000040A8BD 0 SVWQQR 00000000A98B 00000040B58B 0 QQSV3 00000000A9B8 00000040B5B8 0 PVSSSj 00000000A9DF 00000040B5DF 0 PVSSSj 00000000AA1E 00000040B61E 0 PhdsB 00000000AA5B 00000040B65B 0 QQSVWj 00000000AACB 00000040B6CB 0 tEHtBHt5Ht 00000000ADF5 00000040B9F5 0 t;9X(t 00000000B108 00000040BD08 0 H$9H, 00000000B2F3 00000040BEF3 0 WQPSV 00000000B980 00000040C580 0 QWPWh 00000000BAC9 00000040C6C9 0 QQSVWQ 00000000BFD7 00000040CBD7 0 QQSVWj 00000000C3F1 00000040CFF1 0 Ph0"B File pos Mem pos ID Text ======== ======= == ==== 00000000C683 00000040D283 0 YYh("B 00000000F165 00000040FD65 0 PPPPP 00000000F452 000000410052 0 t/HHt 00000000F69E 00000041029E 0 HHtVHHt 00000000FB95 000000410795 0 >0t-N 000000010241 000000410E41 0 ~pjCXf 000000010B15 000000411715 0 SSSSS 000000010E55 000000411A55 0 j$hpvB 0000000118FB 0000004124FB 0 5ntel 00000001190B 00000041250B 0 5Genu 000000011D8D 00000041298D 0 bWWWWj 000000011EE1 000000412AE1 0 PRPQh 000000012149 000000412D49 0 tRHtC 0000000121CD 000000412DCD 0 t;Ht+ 000000012250 000000412E50 0 Vh\0B 00000001235F 000000412F5F 0 URPQQh 00000001265A 00000041325A 0 t/HHt 00000001269D 00000041329D 0 j*Xf; 0000000126FB 0000004132FB 0 j*Xf; 000000012752 000000413352 0 htHjlZ; 000000012895 000000413495 0 HHtXHHt 000000012AD2 0000004136D2 0 nt'joZ; 000000012B72 000000413772 0 jgXf; 000000012C49 000000413849 0 YYjgXf9 000000012DFF 0000004139FF 0 >0t<NAj0X 000000012EE0 000000413AE0 0 Wj0XP 000000012FEC 000000413BEC 0 Wj XP 0000000131A6 000000413DA6 0 <at-<rt"<wt 000000013216 000000413E16 0 tRHtC 00000001329A 000000413E9A 0 t;Ht+ 0000000151F0 000000415DF0 0 j/_j\[f; 000000015431 000000416031 0 @WPPh 000000015757 000000416357 0 jdhxwB 000000015770 000000416370 0 j@j _W 000000015830 000000416430 0 } j@W 000000015BAA 0000004167AA 0 Vh~oA 0000000160C8 000000416CC8 0 PWWWWV 000000016163 000000416D63 0 PSSSSV 00000001628B 000000416E8B 0 v N+D$ 000000016567 000000417167 0 t/HHt 0000000167B3 0000004173B3 0 HHtVHHt 000000016CAA 0000004178AA 0 >0t-N 0000000171AF 000000417DAF 0 PP9E u 0000000175D0 0000004181D0 0 < t8< t4 0000000176AA 0000004182AA 0 t@VSP 000000017705 000000418305 0 PPPPP 000000017824 000000418424 0 SPPP+ 00000001782D 00000041842D 0 FVWPP 000000017853 000000418453 0 SVWPP 000000017A01 000000418601 0 QVWSj 000000017C5F 00000041885F 0 VhH;B 000000017C80 000000418880 0 VVhH;B 00000001800E 000000418C0E 0 jA[jZZ+ 000000018381 000000418F81 0 t\j=S 0000000183CC 000000418FCC 0 t&9=8 000000018591 000000419191 0 PPPPP 0000000186DC 0000004192DC 0 PRPQh 000000018949 000000419549 0 t7QVW 000000018A10 000000419610 0 tWh@\B 000000018BC2 0000004197C2 0 tHHt*Ht# File pos Mem pos ID Text ======== ======= == ==== 0000000190E4 000000419CE4 0 uJSSR 00000001929C 000000419E9C 0 SSSSS 00000001933F 000000419F3F 0 SVjA[jZ 000000019408 00000041A008 0 jAZjZ 0000000194B3 00000041A0B3 0 SVWUj 000000019554 00000041A154 0 ;t$,v- 0000000195D9 00000041A1D9 0 UQPXY]Y[ 0000000197E3 00000041A3E3 0 ~';_t|%3 0000000197F7 00000041A3F7 0 wtVj 00000001980C 00000041A40C 0 ;_tr. 00000001982D 00000041A42D 0 GWVj 000000019BD0 00000041A7D0 0 r)f;q 000000019C4A 00000041A84A 0 r2f;A 00000001A808 00000041B408 0 @jd_u 00000001A979 00000041B579 0 PPPPP 00000001A9A3 00000041B5A3 0 uaPPPS 00000001ABAB 00000041B7AB 0 tGhL\B 00000001ABBC 00000041B7BC 0 t3hX\B 00000001ABCD 00000041B7CD 0 t"hd\B 00000001BE5C 00000041CA5C 0 +t"HHt 00000001BEB2 00000041CAB2 0 9] t" 00000001DBE4 00000041E7E4 0 ,SVWj0X 00000001DD18 00000041E918 0 u'j0X 00000001DE42 00000041EA42 0 Wj0XPV 00000001DEE1 00000041EAE1 0 PjdSQ 00000001E04A 00000041EC4A 0 -jd[; 00000001E09F 00000041EC9F 0 WWWWW 00000001E5F2 00000041F1F2 0 VVVVV 00000001E741 00000041F341 0 PPPPP 00000001EFBB 00000041FBBB 0 SSPQSW 00000001F0EF 00000041FCEF 0 SSSSS 00000001F0FA 00000041FCFA 0 j0h yB 00000001F204 00000041FE04 0 SSSSS 00000001F394 00000041FF94 0 ?:uBGW 00000001F56D 00000042016D 0 } kE$< 00000001F6A2 0000004202A2 0 C@j:f 00000001F839 000000420439 0 SVWjA_jZ+ 00000001F8E1 0000004204E1 0 uBjAYjZ+ 000000020002 000000420C02 0 PPPPP 0000000200B6 000000420CB6 0 v N+D$ 000000020CB1 0000004218B1 0 SSSSS 000000021448 000000422248 0 CorExitProcess 000000021460 000000422260 0 (null) 000000021499 000000422299 0 ( 8PX 0000000214A1 0000004222A1 0 700WP 0000000214B9 0000004222B9 0 xpxxxx 0000000214F0 0000004222F0 0 FlsAlloc 0000000214FC 0000004222FC 0 FlsFree 000000021504 000000422304 0 FlsGetValue 000000021510 000000422310 0 FlsSetValue 00000002151C 00000042231C 0 InitializeCriticalSectionEx 000000021538 000000422338 0 CreateEventExW 000000021548 000000422348 0 CreateSemaphoreExW 00000002155C 00000042235C 0 SetThreadStackGuarantee 000000021574 000000422374 0 CreateThreadpoolTimer 00000002158C 00000042238C 0 SetThreadpoolTimer 0000000215A0 0000004223A0 0 WaitForThreadpoolTimerCallbacks 0000000215C0 0000004223C0 0 CloseThreadpoolTimer 0000000215D8 0000004223D8 0 CreateThreadpoolWait 0000000215F0 0000004223F0 0 SetThreadpoolWait File pos Mem pos ID Text ======== ======= == ==== 000000021604 000000422404 0 CloseThreadpoolWait 000000021618 000000422418 0 FlushProcessWriteBuffers 000000021634 000000422434 0 FreeLibraryWhenCallbackReturns 000000021654 000000422454 0 GetCurrentProcessorNumber 000000021670 000000422470 0 GetLogicalProcessorInformation 000000021690 000000422490 0 CreateSymbolicLinkW 0000000216A4 0000004224A4 0 SetDefaultDllDirectories 0000000216C0 0000004224C0 0 EnumSystemLocalesEx 0000000216D4 0000004224D4 0 CompareStringEx 0000000216E4 0000004224E4 0 GetDateFormatEx 0000000216F4 0000004224F4 0 GetLocaleInfoEx 000000021704 000000422504 0 GetTimeFormatEx 000000021714 000000422514 0 GetUserDefaultLocaleName 000000021730 000000422530 0 IsValidLocaleName 000000021744 000000422544 0 LCMapStringEx 000000021754 000000422554 0 GetCurrentPackageId 000000021768 000000422568 0 GetTickCount64 000000021778 000000422578 0 GetFileInformationByHandleExW 000000021798 000000422598 0 SetFileInformationByHandleW 000000022298 000000423098 0 UTF-8 0000000222A0 0000004230A0 0 UTF-16LE 0000000222AC 0000004230AC 0 UNICODE 000000022378 000000423178 0 No error 000000022384 000000423184 0 Operation not permitted 00000002239C 00000042319C 0 No such file or directory 0000000223B8 0000004231B8 0 No such process 0000000223C8 0000004231C8 0 Interrupted function call 0000000223E4 0000004231E4 0 Input/output error 0000000223F8 0000004231F8 0 No such device or address 000000022414 000000423214 0 Arg list too long 000000022428 000000423228 0 Exec format error 00000002243C 00000042323C 0 Bad file descriptor 000000022450 000000423250 0 No child processes 000000022464 000000423264 0 Resource temporarily unavailable 000000022488 000000423288 0 Not enough space 00000002249C 00000042329C 0 Permission denied 0000000224B0 0000004232B0 0 Bad address 0000000224BC 0000004232BC 0 Unknown error 0000000224CC 0000004232CC 0 Resource device 0000000224DC 0000004232DC 0 File exists 0000000224E8 0000004232E8 0 Improper link 0000000224F8 0000004232F8 0 No such device 000000022508 000000423308 0 Not a directory 000000022518 000000423318 0 Is a directory 000000022528 000000423328 0 Invalid argument 00000002253C 00000042333C 0 Too many open files in system 00000002255C 00000042335C 0 Too many open files 000000022570 000000423370 0 Inappropriate I/O control operation 000000022594 000000423394 0 File too large 0000000225A4 0000004233A4 0 No space left on device 0000000225BC 0000004233BC 0 Invalid seek 0000000225CC 0000004233CC 0 Read-only file system 0000000225E4 0000004233E4 0 Too many links 0000000225F4 0000004233F4 0 Broken pipe 000000022600 000000423400 0 Domain error 000000022610 000000423410 0 Result too large 000000022624 000000423424 0 Resource deadlock avoided 000000022640 000000423440 0 Filename too long 000000022654 000000423454 0 No locks available 000000022668 000000423468 0 Function not implemented File pos Mem pos ID Text ======== ======= == ==== 000000022684 000000423484 0 Directory not empty 000000022698 000000423498 0 Illegal byte sequence 0000000226CC 0000004234CC 0 Sunday 0000000226D4 0000004234D4 0 Monday 0000000226DC 0000004234DC 0 Tuesday 0000000226E4 0000004234E4 0 Wednesday 0000000226F0 0000004234F0 0 Thursday 0000000226FC 0000004234FC 0 Friday 000000022704 000000423504 0 Saturday 000000022740 000000423540 0 January 000000022748 000000423548 0 February 000000022754 000000423554 0 March 00000002275C 00000042355C 0 April 000000022774 000000423574 0 August 00000002277C 00000042357C 0 September 000000022788 000000423588 0 October 000000022790 000000423590 0 November 00000002279C 00000042359C 0 December 0000000227B0 0000004235B0 0 MM/dd/yy 0000000227BC 0000004235BC 0 dddd, MMMM dd, yyyy 0000000227D0 0000004235D0 0 HH:mm:ss 000000022A2F 00000042382F 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\] 000000022A70 000000423870 0 abcdefghijklmnopqrstuvwxyz{|}~ 000000022C6D 000000423A6D 0 ('8PW 000000022C76 000000423A76 0 700PP 000000022C91 000000423A91 0 xppwpp 000000022D60 000000423B60 0 MessageBoxW 000000022D6C 000000423B6C 0 GetActiveWindow 000000022D7C 000000423B7C 0 GetLastActivePopup 000000022D90 000000423B90 0 GetUserObjectInformationW 000000022DAC 000000423BAC 0 GetProcessWindowStation 000000024E40 000000425C40 0 CreateFile2 000000025428 000000426228 0 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\] 000000025469 000000426269 0 abcdefghijklmnopqrstuvwxyz{|}~ 0000000255A8 0000004263A8 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\] 0000000255E9 0000004263E9 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~ 000000025690 000000426490 0 e+000 0000000256A8 0000004264A8 0 SunMonTueWedThuFriSat 0000000256C0 0000004264C0 0 JanFebMarAprMayJunJulAugSepOctNovDec 0000000256EC 0000004264EC 0 1#SNAN 0000000256F4 0000004264F4 0 1#IND 0000000256FC 0000004264FC 0 1#INF 000000025704 000000426504 0 1#QNAN 00000002571C 00000042651C 0 000000025768 000000426568 0 {[siIbfFOon 00000002588D 00000042668D 0 idF(s 000000025AA4 0000004268A4 0 =*\\E) 000000025B12 000000426912 0 DPV2A 000000025C10 000000426A10 0 Stream closed 000000025C2C 000000426A2C 0 Getting billcount. 000000025C40 000000426A40 0 maxbill = %d 000000025C50 000000426A50 0 GettingCDMStatus. 000000025C64 000000426A64 0 Getting CashUnitStatus. 000000025C7C 000000426A7C 0 User left, cleaning up. 000000025C94 000000426A94 0 Error locking XFS 000000025CA8 000000426AA8 0 Resetting CDM. 000000025CB8 000000426AB8 0 %d:[%d] 000000025CC8 000000426AC8 0 Error dispensing 0x%08X 000000025CE0 000000426AE0 0 No denominations found 000000025CF8 000000426AF8 0 No msxfs installed... File pos Mem pos ID Text ======== ======= == ==== 000000025D10 000000426B10 0 Starting WFSManager... 000000025D28 000000426B28 0 Connecting... 000000025D38 000000426B38 0 shoah 000000025D40 000000426B40 0 Connected. Version: wfs:%d.%d, srvc:%d.%d, spi:%d.%d 000000025D78 000000426B78 0 Unknown version %d 000000025D8C 000000426B8C 0 Disconnecting... 000000025DA0 000000426BA0 0 Error connecting: %p 000000025DB8 000000426BB8 0 Error starting WFS: %p 000000025DD0 000000426BD0 0 Error getting maxbill: %p 000000025DEC 000000426BEC 0 chosen %d | %d 000000025DFC 000000426BFC 0 state=%d, safedoor=%d, dispenser=%d, stacker=%d 000000025E30 000000426C30 0 pos=%d, OutputPosition=%d, shutter=%d, transport=%d 000000025E68 000000426C68 0 Error getting cdm status: 0x%p. 000000025E88 000000426C88 0 Id:%s(nr=%d)(l=%d,h=%d), %d|%d|%d of %d [%s][%d][%d],[%d][%d] 000000025EC8 000000426CC8 0 Error getting bill status: 0x%p. 000000025EEC 000000426CEC 0 pos=%d, status=%d, shutter=%d, transport=%d, status=%d 000000025F24 000000426D24 0 Id:%s(nr=%d)(l=%d,h=%d), %d|%d|%d of %d [%s][%d][%d],[%d] 000000025F60 000000426D60 0 msxfs.dll 000000025F6C 000000426D6C 0 WFSExecute 000000025F78 000000426D78 0 WFSGetInfo 000000025F84 000000426D84 0 WFSOpen 000000025F8C 000000426D8C 0 WFSClose 000000025F98 000000426D98 0 WFSFreeResult 000000025FA8 000000426DA8 0 WFSStartUp 000000025FB4 000000426DB4 0 WFSCleanUp 000000025FC0 000000426DC0 0 WFSLock 000000025FC8 000000426DC8 0 WFSUnlock 000000025FD4 000000426DD4 0 Trying Nautilus. 000000025FE8 000000426DE8 0 CashDispenser 000000025FF8 000000426DF8 0 Connected Nautilus. 00000002600C 000000426E0C 0 Failed: 0x%08X 00000002601C 000000426E1C 0 Trying Nautilus2. 000000026030 000000426E30 0 NXCdm 000000026038 000000426E38 0 Connected Nautilus2. 000000026050 000000426E50 0 Trying Diabold. 000000026060 000000426E60 0 DBD_AdvFuncDisp 000000026070 000000426E70 0 Connected Diabold. 000000026084 000000426E84 0 Trying NCR. 000000026090 000000426E90 0 CurrencyDispenser1 0000000260A4 000000426EA4 0 Connected NCR. 0000000260B4 000000426EB4 0 Trying WINCOR. 0000000260C4 000000426EC4 0 CDM30 0000000260CC 000000426ECC 0 Connected WINCOR. 0000000260E0 000000426EE0 0 Trying WINCOR GEN. 0000000260F8 000000426EF8 0 Connected WINCOR GEN. 000000026110 000000426F10 0 Trying GENERIC. 000000026124 000000426F24 0 Connected GENERIC. 000000026138 000000426F38 0 console 000000026140 000000426F40 0 command 000000026158 000000426F58 0 0.0.0.0 000000026160 000000426F60 0 CNAME 00000002616C 000000426F6C 0 domain 00000002618C 000000426F8C 0 server 000000026194 000000426F94 0 domain=losharik.com 0000000261AC 000000426FAC 0 cmd.exe 0000000261B4 000000426FB4 0 Error opening file for reading 0000000261D8 000000426FD8 0 There was an error reading the file 000000026200 000000427000 0 Error opening file for writing 00000002626C 00000042706C 0 Server closed the connection 00000002628C 00000042708C 0 Connection error File pos Mem pos ID Text ======== ======= == ==== 0000000262A0 0000004270A0 0 The client couldn't connect to the remote host! 0000000262D0 0000004270D0 0 Not implemented yet! 0000000262E8 0000004270E8 0 %I64u 0000000262F0 0000004270F0 0 shi1_netname 000000026300 000000427100 0 shi1_type 00000002630C 00000042710C 0 shi1_remark 000000026320 000000427120 0 sv101_platform_id 000000026334 000000427134 0 sv101_name 000000026340 000000427140 0 sv101_version_major 000000026360 000000427160 0 sv101_version_minor 000000026374 000000427174 0 sv101_type 000000026380 000000427180 0 sv101_comment 000000026390 000000427190 0 share_array 0000000263A4 0000004271A4 0 lgrui0_name 0000000263B0 0000004271B0 0 group_array 0000000263BC 0000004271BC 0 systeminfo 0000000263C8 0000004271C8 0 fsutil fsinfo drives 0000000263E0 0000004271E0 0 drives 0000000263E8 0000004271E8 0 arp -a 0000000263F0 0000004271F0 0 arpcache 000000026400 000000427200 0 users 000000026408 000000427208 0 <INFO_END> 00000002643C 00000042723C 0 \u%04X 000000026444 000000427244 0 \u%04X\u%04X 000000026468 000000427268 0 false 000000026470 000000427270 0 %I64d 000000026494 000000427294 0 ..\jansson\memory_jansson.c 0000000264B0 0000004272B0 0 object 0000000264B8 0000004272B8 0 array 0000000264C0 0000004272C0 0 string 0000000264C8 0000004272C8 0 integer 0000000264D8 0000004272D8 0 Out of memory 0000000264F4 0000004272F4 0 Overflow. 000000026500 000000427300 0 client_write_key 000000026514 000000427314 0 client_mac_key 000000026524 000000427324 0 server_write_key 000000026538 000000427338 0 server_mac_key 000000026548 000000427348 0 client 000000026550 000000427350 0 NOT IMPLEMENTED! 000000026564 000000427364 0 %d.%d.%d.%d 000000026570 000000427370 0 We forgot to handle a linked-list type! 0000000265A4 0000004273A4 0 WARNING 0000000265AC 0000004273AC 0 ERROR 0000000265B4 0000004273B4 0 FATAL 0000000265BE 0000004273BE 0 Unrecoverable error at %s:%d: %s 0000000265E4 0000004273E4 0 dnscat 0000000265F0 0000004273F0 0 TXT, CNAME, MX, A 000000026DC2 000000427BC2 0 WSAStringToAddressA 000000026DD6 000000427BD6 0 WS2_32.dll 000000026DE4 000000427BE4 0 DnsQueryConfig 000000026DF4 000000427BF4 0 DNSAPI.dll 000000026E02 000000427C02 0 NetServerEnum 000000026E12 000000427C12 0 NetShareEnum 000000026E22 000000427C22 0 NetApiBufferFree 000000026E36 000000427C36 0 NetQueryDisplayInformation 000000026E54 000000427C54 0 NetUserGetLocalGroups 000000026E6A 000000427C6A 0 NETAPI32.dll 000000026E7A 000000427C7A 0 GetSystemTimeAsFileTime 000000026E94 000000427C94 0 GetTickCount 000000026EA4 000000427CA4 0 Sleep File pos Mem pos ID Text ======== ======= == ==== 000000026EAC 000000427CAC 0 GetProcAddress 000000026EBE 000000427CBE 0 LoadLibraryA 000000026ECE 000000427CCE 0 SetErrorMode 000000026EDE 000000427CDE 0 GetModuleFileNameW 000000026EF4 000000427CF4 0 WriteFile 000000026F00 000000427D00 0 CreateProcessA 000000026F12 000000427D12 0 TerminateProcess 000000026F26 000000427D26 0 CreatePipe 000000026F34 000000427D34 0 CloseHandle 000000026F42 000000427D42 0 SetHandleInformation 000000026F5A 000000427D5A 0 ReadFile 000000026F66 000000427D66 0 MultiByteToWideChar 000000026F7C 000000427D7C 0 GetCurrentProcessId 000000026F92 000000427D92 0 SwitchToThread 000000026FA4 000000427DA4 0 PeekNamedPipe 000000026FB4 000000427DB4 0 GetStdHandle 000000026FC4 000000427DC4 0 GetLastError 000000026FD4 000000427DD4 0 CreateThread 000000026FE4 000000427DE4 0 FormatMessageA 000000026FF4 000000427DF4 0 KERNEL32.dll 000000027004 000000427E04 0 CryptReleaseContext 00000002701A 000000427E1A 0 CryptAcquireContextA 000000027032 000000427E32 0 CryptGenRandom 000000027042 000000427E42 0 ADVAPI32.dll 000000027052 000000427E52 0 EncodePointer 000000027062 000000427E62 0 DecodePointer 000000027072 000000427E72 0 ExitProcess 000000027080 000000427E80 0 GetModuleHandleExW 000000027096 000000427E96 0 AreFileApisANSI 0000000270A8 000000427EA8 0 WideCharToMultiByte 0000000270BE 000000427EBE 0 IsDebuggerPresent 0000000270D2 000000427ED2 0 IsProcessorFeaturePresent 0000000270EE 000000427EEE 0 EnterCriticalSection 000000027106 000000427F06 0 LeaveCriticalSection 00000002711E 000000427F1E 0 HeapFree 00000002712A 000000427F2A 0 HeapAlloc 000000027136 000000427F36 0 HeapReAlloc 000000027144 000000427F44 0 GetCommandLineA 000000027156 000000427F56 0 SetLastError 000000027166 000000427F66 0 GetCurrentThreadId 00000002717C 000000427F7C 0 DeleteCriticalSection 000000027194 000000427F94 0 UnhandledExceptionFilter 0000000271B0 000000427FB0 0 SetUnhandledExceptionFilter 0000000271CE 000000427FCE 0 InitializeCriticalSectionAndSpinCount 0000000271F6 000000427FF6 0 GetCurrentProcess 00000002720A 00000042800A 0 TlsAlloc 000000027216 000000428016 0 TlsGetValue 000000027224 000000428024 0 TlsSetValue 000000027232 000000428032 0 TlsFree 00000002723C 00000042803C 0 GetStartupInfoW 00000002724E 00000042804E 0 GetModuleHandleW 000000027262 000000428062 0 LoadLibraryExW 000000027274 000000428074 0 IsValidCodePage 000000027286 000000428086 0 GetACP 000000027290 000000428090 0 GetOEMCP 00000002729C 00000042809C 0 GetCPInfo 0000000272A8 0000004280A8 0 HeapSize 0000000272B4 0000004280B4 0 RtlUnwind 0000000272C0 0000004280C0 0 GetConsoleMode 0000000272D2 0000004280D2 0 ReadConsoleW File pos Mem pos ID Text ======== ======= == ==== 0000000272E2 0000004280E2 0 GetConsoleCP 0000000272F2 0000004280F2 0 FindClose 0000000272FE 0000004280FE 0 FindFirstFileExW 000000027312 000000428112 0 GetDriveTypeW 000000027322 000000428122 0 SystemTimeToTzSpecificLocalTime 000000027344 000000428144 0 FileTimeToSystemTime 00000002735C 00000042815C 0 GetFileType 00000002736A 00000042816A 0 GetProcessHeap 00000002737C 00000042817C 0 GetModuleFileNameA 000000027392 000000428192 0 QueryPerformanceCounter 0000000273AC 0000004281AC 0 GetEnvironmentStringsW 0000000273C6 0000004281C6 0 FreeEnvironmentStringsW 0000000273E0 0000004281E0 0 OutputDebugStringW 0000000273F6 0000004281F6 0 CompareStringW 000000027408 000000428208 0 LCMapStringW 000000027418 000000428218 0 GetStringTypeW 00000002742A 00000042822A 0 SetFilePointerEx 00000002743E 00000042823E 0 SetEnvironmentVariableA 000000027458 000000428258 0 CreateFileW 000000027466 000000428266 0 SetStdHandle 000000027476 000000428276 0 WriteConsoleW 000000027486 000000428286 0 FlushFileBuffers 00000002749A 00000042829A 0 FileTimeToLocalFileTime 0000000274B4 0000004282B4 0 GetFileInformationByHandle 0000000274D2 0000004282D2 0 GetFullPathNameW 0000000274E6 0000004282E6 0 GetCurrentDirectoryW 0000000274FE 0000004282FE 0 SetEndOfFile 00000002750E 00000042830E 0 GetTimeZoneInformation 000000027BDA 0000004295DA 0 000000027CC1 0000004296C1 0 abcdefghijklmnopqrstuvwxyz 000000027CE1 0000004296E1 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ 000000027DFA 0000004297FA 0 000000027EDA 0000004298DA 0 abcdefghijklmnopqrstuvwxyz 000000027EFA 0000004298FA 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ 0000000287F6 00000042A1F6 0 z?aUY 000000028838 00000042A238 0 zc%C1 00000002888B 00000042A28B 0 -64OS 000000028A63 00000042D063 0 <?xml version="1.0" encoding="UTF-8" standalone="yes"?> 000000028A9C 00000042D09C 0 <assembly manifestVersion="1.0" xmlns="urn:schemas-microsoft-com:asm.v1" xmlns:asmv3="urn:schemas-microsoft-com:asm.v3"><assemblyIdentity type="win32" name="consoletest" version="1.0.0.0"></assemblyIdentity><description> my exe </description><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS></application></compatibility></assembly> 00000002900B 00000042E00B 0 0(0/050A0[0 00000002901D 00000042E01D 0 1'1P2 000000029027 00000042E027 0 3:3E3Y3t3{3 00000002904D 00000042E04D 0 ;#;0;C;J;Q; 00000002905B 00000042E05B 0 <3<I< 000000029063 00000042E063 0 <F=K=X= 00000002906D 00000042E06D 0 =<>G>h>|> 000000029085 00000042E085 0 ?!?6?C? 0000000290A1 00000042E0A1 0 0L0Y0b0u0 0000000290BF 00000042E0BF 0 2!232 0000000290C7 00000042E0C7 0 3M3d3 0000000290ED 00000042E0ED 0 565O5W5 000000029109 00000042E109 0 9l9t9 000000029113 00000042E113 0 :E;M;o; 000000029140 00000042E140 0 !0)0R0 00000002914D 00000042E14D 0 1>2M2 000000029159 00000042E159 0 3 3%34393A3G3L3S3Y3 00000002916D 00000042E16D 0 3e3k3p3w3}3 0000000291A1 00000042E1A1 0 4&4+4J4T4s4z4 0000000291C7 00000042E1C7 0 565=5C5Q5[5w5~5 0000000291ED 00000042E1ED 0 6 6/6H6V6]6d6k6r6{6 File pos Mem pos ID Text ======== ======= == ==== 000000029205 00000042E205 0 6?7X7]7r7 000000029215 00000042E215 0 7&83898C8Q8b8 000000029241 00000042E241 0 9):6:A:O:o: 00000002924D 00000042E24D 0 :I<M<Q<U<Y<]<a<e<i<m<q< 000000029288 00000042E288 0 &0*0.02060:0>0B0F0J0N0Y0 0000000292A9 00000042E2A9 0 1I1h1 0000000292CD 00000042E2CD 0 3<4V4d4 0000000292DB 00000042E2DB 0 5 52585 0000000292FF 00000042E2FF 0 8.9}9 000000029317 00000042E317 0 : :s:[; 000000029327 00000042E327 0 =/=<=u= 00000002933B 00000042E33B 0 ?<?U? 000000029351 00000042E351 0 2'292G2s2 000000029363 00000042E363 0 3,3;3e3 00000002936F 00000042E36F 0 3%4L4p4 000000029389 00000042E389 0 6e7r7y7 000000029399 00000042E399 0 7,8z8 0000000293A7 00000042E3A7 0 9@9S9o9 0000000293BF 00000042E3BF 0 ;%;S; 0000000293C9 00000042E3C9 0 ;:<B<Q<[<k< 0000000293DD 00000042E3DD 0 >G>|> 00000002941F 00000042E41F 0 3Y657 000000029437 00000042E437 0 8;9*;#>R> 00000002945F 00000042E45F 0 4P5d5 00000002946F 00000042E46F 0 6'6K6 000000029475 00000042E475 0 7E8f9M: 0000000294A1 00000042E4A1 0 4=5c5v5 0000000294B1 00000042E4B1 0 5!686H6c6w6 0000000294F7 00000042E4F7 0 1b3X6 000000029521 00000042E521 0 8,8m8 00000002952F 00000042E52F 0 :/;1<V< 000000029553 00000042E553 0 5 6B6c6"7 000000029561 00000042E561 0 8#8(8r8 000000029579 00000042E579 0 ;:<r< 000000029595 00000042E595 0 1'1r1 0000000295AB 00000042E5AB 0 3!484r4 0000000295BB 00000042E5BB 0 4 5>5 0000000295C1 00000042E5C1 0 5h5p5 0000000295D5 00000042E5D5 0 7*8_9 0000000295EB 00000042E5EB 0 <0<J<g<{< 0000000295F7 00000042E5F7 0 =K=R=g= 000000029609 00000042E609 0 >(>6>E>P>[>m? 00000002962F 00000042E62F 0 0/0s0{0 000000029657 00000042E657 0 2!272A2G2R2u2z2 000000029671 00000042E671 0 3B3H3N3T3Z3 00000002967D 00000042E67D 0 3g3n3u3|3 0000000296A5 00000042E6A5 0 4I4O4U4[4a4g4n4u4|4 0000000296DD 00000042E6DD 0 7C8J8R8 000000029711 00000042E711 0 3m3t3 00000002971B 00000042E71B 0 4!4.4=4G4Y4h4o4 00000002973B 00000042E73B 0 5%5I5v5 000000029779 00000042E779 0 0%0,0004080<0@0D0H0 000000029799 00000042E799 0 10171<1@1D1e1 0000000297B9 00000042E7B9 0 1.24282<2@2 0000000297CD 00000042E7CD 0 4-4<4 0000000297DD 00000042E7DD 0 5\92:=:]:h: 0000000297F5 00000042E7F5 0 :1;6;@; 000000029803 00000042E803 0 <2===C= 00000002980D 00000042E80D 0 >4>S> 000000029813 00000042E813 0 >*?1?W? File pos Mem pos ID Text ======== ======= == ==== 000000029829 00000042E829 0 0X3E4 000000029861 00000042E861 0 =L=T= 00000002986F 00000042E86F 0 >#>2>W> 00000002987D 00000042E87D 0 ?1?J?[?i?n? 0000000298A3 00000042E8A3 0 0%010<0c0 0000000298B9 00000042E8B9 0 1)1/1?1G1M1\1f1l1{1 0000000298DF 00000042E8DF 0 2$272=2C2J2S2X2 0000000298EF 00000042E8EF 0 2f2k2q2y2~2 00000002992B 00000042E92B 0 3$3)3/373<3B3J3O3U3]3b3g3p3u3{3 00000002997B 00000042E97B 0 4 4&4.43494A4F4L4T4Y4_4g4l4r4z4 0000000299B9 00000042E9B9 0 5!5J5]5m5 0000000299D1 00000042E9D1 0 6 616=6D6K6f6p6 0000000299E5 00000042E9E5 0 7v7{7 0000000299FB 00000042E9FB 0 9&9_9t9 000000029A15 00000042EA15 0 :&:.:4:@:E:J:O:X: 000000029A41 00000042EA41 0 <Q<Y<j< 000000029A8F 00000042EA8F 0 181c1 000000029AA1 00000042EAA1 0 3I3@4G4 000000029AB1 00000042EAB1 0 5g5p5x5 000000029AC7 00000042EAC7 0 6B8U8 000000029ADF 00000042EADF 0 ;(<:<N<[< 000000029AF3 00000042EAF3 0 >$?e?q? 000000029B15 00000042EB15 0 8=8C8e8k8 000000029B33 00000042EB33 0 ?H?g? 000000029B63 00000042EB63 0 5+5N5b5 000000029B7F 00000042EB7F 0 647{7 000000029B8D 00000042EB8D 0 7;8X8 000000029BA5 00000042EBA5 0 :#;K;Y; 000000029BAD 00000042EBAD 0 =#=<=C=K=P=T=X= 000000029BD1 00000042EBD1 0 =2>8><>@>D> 000000029BEB 00000042EBEB 0 ?/?a?h?l?p?t?x?|? 000000029C1F 00000042EC1F 0 253s3|3 000000029C2F 00000042EC2F 0 5g5p5M6X6k6 000000029C3B 00000042EC3B 0 6A7J7V8_8K9 000000029C4B 00000042EC4B 0 9 :W:N;t; 000000029C59 00000042EC59 0 ;2<i< 000000029C63 00000042EC63 0 =\=f= 000000029C8B 00000042EC8B 0 3"3,3?3Z3 000000029C9D 00000042EC9D 0 3,4K4 000000029CAB 00000042ECAB 0 4B5z5 000000029CB5 00000042ECB5 0 6/666]6j6o6}6 000000029CCF 00000042ECCF 0 ;3;l; 000000029CE5 00000042ECE5 0 ?%?)?.?4?8?>?B?H?L?Q?W?[?a?e?k?o?u?y? 000000029D21 00000042ED21 0 1m4Z5 000000029D5F 00000042ED5F 0 0&0,02080 000000029D6B 00000042ED6B 0 012@2w2 000000029D7F 00000042ED7F 0 333;3@3l3 000000029D97 00000042ED97 0 444Z4n4y4 000000029DAF 00000042EDAF 0 8-8P8a8g8s8 000000029DDF 00000042EDDF 0 969<9E9K9U9 000000029DF9 00000042EDF9 0 ;.;;;A;}; 000000029E0D 00000042EE0D 0 <*=<= 000000029E37 00000042EE37 0 0!0/0 000000029E45 00000042EE45 0 2;2N2#3 000000029E69 00000042EE69 0 :':?:J:\: 000000029E7B 00000042EE7B 0 =">N>h> 000000029E91 00000042EE91 0 0!1-1 000000029EA7 00000042EEA7 0 474}415|9 000000029EB7 00000042EEB7 0 :M:_: 000000029EC1 00000042EEC1 0 :.;4;<;v; File pos Mem pos ID Text ======== ======= == ==== 000000029ED3 00000042EED3 0 <\<p< 000000029EE1 00000042EEE1 0 <6=?=J=Y=x= 000000029EF1 00000042EEF1 0 >)>>>H> 000000029EFB 00000042EEFB 0 ?2?V? 000000029F0F 00000042EF0F 0 0G0S0 000000029F39 00000042EF39 0 7 828D8V8h8z8 000000029F55 00000042EF55 0 9)9;9M9_9 000000029F75 00000042EF75 0 0k1s1 000000029F7F 00000042EF7F 0 212h2 000000029F8B 00000042EF8B 0 5C6O6 000000029FA3 00000042EFA3 0 ;K?O?S?W?[?_?c?g?k?o?s?w? 00000002A019 00000042F019 0 <k>,? 00000002A031 00000042F031 0 5.656k6 00000002A03D 00000042F03D 0 7_7{7 00000002A047 00000042F047 0 8*9;9O9U9Z9a9~9 00000002A05F 00000042F05F 0 :H:r: 00000002A06D 00000042F06D 0 :H;P;\;i;q;y; 00000002A0A5 00000042F0A5 0 <p=v=}= 00000002A0B7 00000042F0B7 0 > >%>+>=>C>N>W>d>l>y> 00000002A0E3 00000042F0E3 0 1\1h1 00000002A101 00000042F101 0 2D3j3 00000002A12F 00000042F12F 0 =N=v=|= 00000002A14F 00000042F14F 0 2X2\2 00000002A16D 00000042F16D 0 6$6,646<6D6L6T6\6d6l6 00000002A18D 00000042F18D 0 0 0$0(0 00000002A1BF 00000042F1BF 0 1 1$1(1,1014181<1@1D1H1L1P1T1X1\1 00000002A1E1 00000042F1E1 0 1d1h1l1p1t1 00000002A203 00000042F203 0 <$<,<4<<<D<L<T<\<d<l<t<|< 00000002A243 00000042F243 0 =$=,=4=<=D=L=T=\=d=l=t=|= 00000002A283 00000042F283 0 >$>,>4><>D>L>T>\>d>l>t>|> 00000002A2C3 00000042F2C3 0 ?$?,?4?<?D?L?T?\?d?l?t?|? 00000002A30B 00000042F30B 0 0$0,040<0D0L0T0\0d0l0t0|0 00000002A34B 00000042F34B 0 1$1,141<1D1L1T1\1d1l1t1|1 00000002A38B 00000042F38B 0 2$2,242<2D2L2T2\2d2l2t2|2 00000002A3CB 00000042F3CB 0 3 3(30383@3H3P3X3 00000002A3DD 00000042F3DD 0 3h3p3x3 00000002A40B 00000042F40B 0 4 4(40484@4H4P4X4 00000002A41D 00000042F41D 0 4h4p4x4 00000002A44B 00000042F44B 0 5 5(50585@5H5P5X5 00000002A45D 00000042F45D 0 5h5p5x5 00000002A48B 00000042F48B 0 6 6(60686@6H6P6X6 00000002A49D 00000042F49D 0 6h6p6x6 00000002A4CB 00000042F4CB 0 7 7(70787@7H7P7X7 00000002A4DD 00000042F4DD 0 7h7p7x7 00000002A50B 00000042F50B 0 8 8(80888@8H8P8X8 00000002A51D 00000042F51D 0 8h8p8x8 00000002A54B 00000042F54B 0 9 9(90989@9H9P9X9 00000002A55D 00000042F55D 0 9h9p9x9 00000002A590 00000042F590 0 @5D5H5L5P5T5X5\5 00000002A5A1 00000042F5A1 0 5d5t5$6(6,606 00000002A5BD 00000042F5BD 0 7d8h8l8p8$9(9,909 00000002A5ED 00000042F5ED 0 585X5x5 00000002A601 00000042F601 0 6(6D6H6d6h6 00000002A615 00000042F615 0 7(7H7T7p7 00000002A627 00000042F627 0 808P8p8|8 00000002A639 00000042F639 0 989T9X9 00000002A64F 00000042F64F 0 4L5P5T5X5\5 00000002A65B 00000042F65B 0 5d5h5l5p5 00000002A679 00000042F679 0 < <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\< 00000002A69B 00000042F69B 0 <d<h<l<p<t<x<|< File pos Mem pos ID Text ======== ======= == ==== 00000002A6F5 00000042F6F5 0 = =$=(=,=0=4=8=<=@=D=H=L=P=T=X=\= 00000002A72D 00000042F72D 0 >$>@>H>L>P>T>X>\> 00000002A73F 00000042F73F 0 >d>h>l>x>|> 000000021430 000000422230 0 mscoree.dll 000000021468 000000422268 0 (null) 0000000214D4 0000004222D4 0 kernel32.dll 000000022138 000000422F38 0 runtime error 000000022178 000000422F78 0 Program: 00000002218C 000000422F8C 0 <program name unknown> 0000000221D0 000000422FD0 0 Microsoft Visual C++ Runtime Library 00000002222B 00000042302B 0 Bja-JP 000000022238 000000423038 0 zh-CN 000000022244 000000423044 0 ko-KR 000000022250 000000423050 0 zh-TW 000000022264 000000423064 0 UTF-8 000000022270 000000423070 0 UTF-16LE 000000022284 000000423084 0 UNICODE 000000022814 000000423614 0 Sunday 000000022824 000000423624 0 Monday 000000022834 000000423634 0 Tuesday 000000022844 000000423644 0 Wednesday 000000022858 000000423658 0 Thursday 00000002286C 00000042366C 0 Friday 00000002287C 00000042367C 0 Saturday 0000000228F0 0000004236F0 0 January 000000022900 000000423700 0 February 000000022914 000000423714 0 March 000000022920 000000423720 0 April 000000022944 000000423744 0 August 000000022954 000000423754 0 September 000000022968 000000423768 0 October 000000022978 000000423778 0 November 00000002298C 00000042378C 0 December 0000000229B0 0000004237B0 0 MM/dd/yy 0000000229C4 0000004237C4 0 dddd, MMMM dd, yyyy 0000000229EC 0000004237EC 0 HH:mm:ss 000000022A00 000000423800 0 en-US 000000022D48 000000423B48 0 USER32.DLL 000000023C20 000000424A20 0 zh-CHS 000000023E24 000000424C24 0 ar-SA 000000023E30 000000424C30 0 bg-BG 000000023E3C 000000424C3C 0 ca-ES 000000023E48 000000424C48 0 cs-CZ 000000023E54 000000424C54 0 da-DK 000000023E60 000000424C60 0 de-DE 000000023E6C 000000424C6C 0 el-GR 000000023E78 000000424C78 0 fi-FI 000000023E84 000000424C84 0 fr-FR 000000023E90 000000424C90 0 he-IL 000000023E9C 000000424C9C 0 hu-HU 000000023EA8 000000424CA8 0 is-IS 000000023EB4 000000424CB4 0 it-IT 000000023EC0 000000424CC0 0 nl-NL 000000023ECC 000000424CCC 0 nb-NO 000000023ED8 000000424CD8 0 pl-PL 000000023EE4 000000424CE4 0 pt-BR 000000023EF0 000000424CF0 0 ro-RO 000000023EFC 000000424CFC 0 ru-RU 000000023F08 000000424D08 0 hr-HR 000000023F14 000000424D14 0 sk-SK File pos Mem pos ID Text ======== ======= == ==== 000000023F20 000000424D20 0 sq-AL 000000023F2C 000000424D2C 0 sv-SE 000000023F38 000000424D38 0 th-TH 000000023F44 000000424D44 0 tr-TR 000000023F50 000000424D50 0 ur-PK 000000023F5C 000000424D5C 0 id-ID 000000023F68 000000424D68 0 uk-UA 000000023F74 000000424D74 0 be-BY 000000023F80 000000424D80 0 sl-SI 000000023F8C 000000424D8C 0 et-EE 000000023F98 000000424D98 0 lv-LV 000000023FA4 000000424DA4 0 lt-LT 000000023FB0 000000424DB0 0 fa-IR 000000023FBC 000000424DBC 0 vi-VN 000000023FC8 000000424DC8 0 hy-AM 000000023FD4 000000424DD4 0 az-AZ-Latn 000000023FEC 000000424DEC 0 eu-ES 000000023FF8 000000424DF8 0 mk-MK 000000024004 000000424E04 0 tn-ZA 000000024010 000000424E10 0 xh-ZA 00000002401C 000000424E1C 0 zu-ZA 000000024028 000000424E28 0 af-ZA 000000024034 000000424E34 0 ka-GE 000000024040 000000424E40 0 fo-FO 00000002404C 000000424E4C 0 hi-IN 000000024058 000000424E58 0 mt-MT 000000024064 000000424E64 0 se-NO 000000024070 000000424E70 0 ms-MY 00000002407C 000000424E7C 0 kk-KZ 000000024088 000000424E88 0 ky-KG 000000024094 000000424E94 0 sw-KE 0000000240A0 000000424EA0 0 uz-UZ-Latn 0000000240B8 000000424EB8 0 tt-RU 0000000240C4 000000424EC4 0 bn-IN 0000000240D0 000000424ED0 0 pa-IN 0000000240DC 000000424EDC 0 gu-IN 0000000240E8 000000424EE8 0 ta-IN 0000000240F4 000000424EF4 0 te-IN 000000024100 000000424F00 0 kn-IN 00000002410C 000000424F0C 0 ml-IN 000000024118 000000424F18 0 mr-IN 000000024124 000000424F24 0 sa-IN 000000024130 000000424F30 0 mn-MN 00000002413C 000000424F3C 0 cy-GB 000000024148 000000424F48 0 gl-ES 000000024154 000000424F54 0 kok-IN 000000024164 000000424F64 0 syr-SY 000000024174 000000424F74 0 div-MV 000000024184 000000424F84 0 quz-BO 000000024194 000000424F94 0 ns-ZA 0000000241A0 000000424FA0 0 mi-NZ 0000000241AC 000000424FAC 0 ar-IQ 0000000241B8 000000424FB8 0 de-CH 0000000241C4 000000424FC4 0 en-GB 0000000241D0 000000424FD0 0 es-MX 0000000241DC 000000424FDC 0 fr-BE 0000000241E8 000000424FE8 0 it-CH 0000000241F4 000000424FF4 0 nl-BE 000000024200 000000425000 0 nn-NO 00000002420C 00000042500C 0 pt-PT File pos Mem pos ID Text ======== ======= == ==== 000000024218 000000425018 0 sr-SP-Latn 000000024230 000000425030 0 sv-FI 00000002423C 00000042503C 0 az-AZ-Cyrl 000000024254 000000425054 0 se-SE 000000024260 000000425060 0 ms-BN 00000002426C 00000042506C 0 uz-UZ-Cyrl 000000024284 000000425084 0 quz-EC 000000024294 000000425094 0 ar-EG 0000000242A0 0000004250A0 0 zh-HK 0000000242AC 0000004250AC 0 de-AT 0000000242B8 0000004250B8 0 en-AU 0000000242C4 0000004250C4 0 es-ES 0000000242D0 0000004250D0 0 fr-CA 0000000242DC 0000004250DC 0 sr-SP-Cyrl 0000000242F4 0000004250F4 0 se-FI 000000024300 000000425100 0 quz-PE 000000024310 000000425110 0 ar-LY 00000002431C 00000042511C 0 zh-SG 000000024328 000000425128 0 de-LU 000000024334 000000425134 0 en-CA 000000024340 000000425140 0 es-GT 00000002434C 00000042514C 0 fr-CH 000000024358 000000425158 0 hr-BA 000000024364 000000425164 0 smj-NO 000000024374 000000425174 0 ar-DZ 000000024380 000000425180 0 zh-MO 00000002438C 00000042518C 0 de-LI 000000024398 000000425198 0 en-NZ 0000000243A4 0000004251A4 0 es-CR 0000000243B0 0000004251B0 0 fr-LU 0000000243BC 0000004251BC 0 bs-BA-Latn 0000000243D4 0000004251D4 0 smj-SE 0000000243E4 0000004251E4 0 ar-MA 0000000243F0 0000004251F0 0 en-IE 0000000243FC 0000004251FC 0 es-PA 000000024408 000000425208 0 fr-MC 000000024414 000000425214 0 sr-BA-Latn 00000002442C 00000042522C 0 sma-NO 00000002443C 00000042523C 0 ar-TN 000000024448 000000425248 0 en-ZA 000000024454 000000425254 0 es-DO 000000024460 000000425260 0 sr-BA-Cyrl 000000024478 000000425278 0 sma-SE 000000024488 000000425288 0 ar-OM 000000024494 000000425294 0 en-JM 0000000244A0 0000004252A0 0 es-VE 0000000244AC 0000004252AC 0 sms-FI 0000000244BC 0000004252BC 0 ar-YE 0000000244C8 0000004252C8 0 en-CB 0000000244D4 0000004252D4 0 es-CO 0000000244E0 0000004252E0 0 smn-FI 0000000244F0 0000004252F0 0 ar-SY 0000000244FC 0000004252FC 0 en-BZ 000000024508 000000425308 0 es-PE 000000024514 000000425314 0 ar-JO 000000024520 000000425320 0 en-TT 00000002452C 00000042532C 0 es-AR 000000024538 000000425338 0 ar-LB 000000024544 000000425344 0 en-ZW 000000024550 000000425350 0 es-EC File pos Mem pos ID Text ======== ======= == ==== 00000002455C 00000042535C 0 ar-KW 000000024568 000000425368 0 en-PH 000000024574 000000425374 0 es-CL 000000024580 000000425380 0 ar-AE 00000002458C 00000042538C 0 es-UY 000000024598 000000425398 0 ar-BH 0000000245A4 0000004253A4 0 es-PY 0000000245B0 0000004253B0 0 ar-QA 0000000245BC 0000004253BC 0 es-BO 0000000245C8 0000004253C8 0 es-SV 0000000245D4 0000004253D4 0 es-HN 0000000245E0 0000004253E0 0 es-NI 0000000245EC 0000004253EC 0 es-PR 0000000245F8 0000004253F8 0 zh-CHT 000000024610 000000425410 0 af-za 00000002461C 00000042541C 0 ar-ae 000000024628 000000425428 0 ar-bh 000000024634 000000425434 0 ar-dz 000000024640 000000425440 0 ar-eg 00000002464C 00000042544C 0 ar-iq 000000024658 000000425458 0 ar-jo 000000024664 000000425464 0 ar-kw 000000024670 000000425470 0 ar-lb 00000002467C 00000042547C 0 ar-ly 000000024688 000000425488 0 ar-ma 000000024694 000000425494 0 ar-om 0000000246A0 0000004254A0 0 ar-qa 0000000246AC 0000004254AC 0 ar-sa 0000000246B8 0000004254B8 0 ar-sy 0000000246C4 0000004254C4 0 ar-tn 0000000246D0 0000004254D0 0 ar-ye 0000000246DC 0000004254DC 0 az-az-cyrl 0000000246F4 0000004254F4 0 az-az-latn 00000002470C 00000042550C 0 be-by 000000024718 000000425518 0 bg-bg 000000024724 000000425524 0 bn-in 000000024730 000000425530 0 bs-ba-latn 000000024748 000000425548 0 ca-es 000000024754 000000425554 0 cs-cz 000000024760 000000425560 0 cy-gb 00000002476C 00000042556C 0 da-dk 000000024778 000000425578 0 de-at 000000024784 000000425584 0 de-ch 000000024790 000000425590 0 de-de 00000002479C 00000042559C 0 de-li 0000000247A8 0000004255A8 0 de-lu 0000000247B4 0000004255B4 0 div-mv 0000000247C4 0000004255C4 0 el-gr 0000000247D0 0000004255D0 0 en-au 0000000247DC 0000004255DC 0 en-bz 0000000247E8 0000004255E8 0 en-ca 0000000247F4 0000004255F4 0 en-cb 000000024800 000000425600 0 en-gb 00000002480C 00000042560C 0 en-ie 000000024818 000000425618 0 en-jm 000000024824 000000425624 0 en-nz 000000024830 000000425630 0 en-ph 00000002483C 00000042563C 0 en-tt 000000024848 000000425648 0 en-us 000000024854 000000425654 0 en-za File pos Mem pos ID Text ======== ======= == ==== 000000024860 000000425660 0 en-zw 00000002486C 00000042566C 0 es-ar 000000024878 000000425678 0 es-bo 000000024884 000000425684 0 es-cl 000000024890 000000425690 0 es-co 00000002489C 00000042569C 0 es-cr 0000000248A8 0000004256A8 0 es-do 0000000248B4 0000004256B4 0 es-ec 0000000248C0 0000004256C0 0 es-es 0000000248CC 0000004256CC 0 es-gt 0000000248D8 0000004256D8 0 es-hn 0000000248E4 0000004256E4 0 es-mx 0000000248F0 0000004256F0 0 es-ni 0000000248FC 0000004256FC 0 es-pa 000000024908 000000425708 0 es-pe 000000024914 000000425714 0 es-pr 000000024920 000000425720 0 es-py 00000002492C 00000042572C 0 es-sv 000000024938 000000425738 0 es-uy 000000024944 000000425744 0 es-ve 000000024950 000000425750 0 et-ee 00000002495C 00000042575C 0 eu-es 000000024968 000000425768 0 fa-ir 000000024974 000000425774 0 fi-fi 000000024980 000000425780 0 fo-fo 00000002498C 00000042578C 0 fr-be 000000024998 000000425798 0 fr-ca 0000000249A4 0000004257A4 0 fr-ch 0000000249B0 0000004257B0 0 fr-fr 0000000249BC 0000004257BC 0 fr-lu 0000000249C8 0000004257C8 0 fr-mc 0000000249D4 0000004257D4 0 gl-es 0000000249E0 0000004257E0 0 gu-in 0000000249EC 0000004257EC 0 he-il 0000000249F8 0000004257F8 0 hi-in 000000024A04 000000425804 0 hr-ba 000000024A10 000000425810 0 hr-hr 000000024A1C 00000042581C 0 hu-hu 000000024A28 000000425828 0 hy-am 000000024A34 000000425834 0 id-id 000000024A40 000000425840 0 is-is 000000024A4C 00000042584C 0 it-ch 000000024A58 000000425858 0 it-it 000000024A64 000000425864 0 ja-jp 000000024A70 000000425870 0 ka-ge 000000024A7C 00000042587C 0 kk-kz 000000024A88 000000425888 0 kn-in 000000024A94 000000425894 0 kok-in 000000024AA4 0000004258A4 0 ko-kr 000000024AB0 0000004258B0 0 ky-kg 000000024ABC 0000004258BC 0 lt-lt 000000024AC8 0000004258C8 0 lv-lv 000000024AD4 0000004258D4 0 mi-nz 000000024AE0 0000004258E0 0 mk-mk 000000024AEC 0000004258EC 0 ml-in 000000024AF8 0000004258F8 0 mn-mn 000000024B04 000000425904 0 mr-in 000000024B10 000000425910 0 ms-bn 000000024B1C 00000042591C 0 ms-my 000000024B28 000000425928 0 mt-mt File pos Mem pos ID Text ======== ======= == ==== 000000024B34 000000425934 0 nb-no 000000024B40 000000425940 0 nl-be 000000024B4C 00000042594C 0 nl-nl 000000024B58 000000425958 0 nn-no 000000024B64 000000425964 0 ns-za 000000024B70 000000425970 0 pa-in 000000024B7C 00000042597C 0 pl-pl 000000024B88 000000425988 0 pt-br 000000024B94 000000425994 0 pt-pt 000000024BA0 0000004259A0 0 quz-bo 000000024BB0 0000004259B0 0 quz-ec 000000024BC0 0000004259C0 0 quz-pe 000000024BD0 0000004259D0 0 ro-ro 000000024BDC 0000004259DC 0 ru-ru 000000024BE8 0000004259E8 0 sa-in 000000024BF4 0000004259F4 0 se-fi 000000024C00 000000425A00 0 se-no 000000024C0C 000000425A0C 0 se-se 000000024C18 000000425A18 0 sk-sk 000000024C24 000000425A24 0 sl-si 000000024C30 000000425A30 0 sma-no 000000024C40 000000425A40 0 sma-se 000000024C50 000000425A50 0 smj-no 000000024C60 000000425A60 0 smj-se 000000024C70 000000425A70 0 smn-fi 000000024C80 000000425A80 0 sms-fi 000000024C90 000000425A90 0 sq-al 000000024C9C 000000425A9C 0 sr-ba-cyrl 000000024CB4 000000425AB4 0 sr-ba-latn 000000024CCC 000000425ACC 0 sr-sp-cyrl 000000024CE4 000000425AE4 0 sr-sp-latn 000000024CFC 000000425AFC 0 sv-fi 000000024D08 000000425B08 0 sv-se 000000024D14 000000425B14 0 sw-ke 000000024D20 000000425B20 0 syr-sy 000000024D30 000000425B30 0 ta-in 000000024D3C 000000425B3C 0 te-in 000000024D48 000000425B48 0 th-th 000000024D54 000000425B54 0 tn-za 000000024D60 000000425B60 0 tr-tr 000000024D6C 000000425B6C 0 tt-ru 000000024D78 000000425B78 0 uk-ua 000000024D84 000000425B84 0 ur-pk 000000024D90 000000425B90 0 uz-uz-cyrl 000000024DA8 000000425BA8 0 uz-uz-latn 000000024DC0 000000425BC0 0 vi-vn 000000024DCC 000000425BCC 0 xh-za 000000024DD8 000000425BD8 0 zh-chs 000000024DE8 000000425BE8 0 zh-cht 000000024DF8 000000425BF8 0 zh-cn 000000024E04 000000425C04 0 zh-hk 000000024E10 000000425C10 0 zh-mo 000000024E1C 000000425C1C 0 zh-sg 000000024E28 000000425C28 0 zh-tw 000000024E34 000000425C34 0 zu-za 000000024E4B 000000425C4B 0 2.exe 000000025698 000000426498 0 CONOUT$ 000000026220 000000427020 0 %s\updatea.bin 000000026248 000000427048 0 %s\updatea2.bin 00000000004D 00000040004D 0 !This program cannot be run in DOS mode. File pos Mem pos ID Text ======== ======= == ==== 0000000000D8 0000004000D8 0 Rich) 0000000001E0 0000004001E0 0 .text 000000000208 000000400208 0 .rdata 00000000022F 00000040022F 0 @.data 000000000258 000000400258 0 .rsrc 00000000027F 00000040027F 0 @.reloc 000000000487 000000401087 0 /WQQj 00000000058D 00000040118D 0 HtWHtHHt 0000000005C2 0000004011C2 0 Humj 000000000740 000000401340 0 u7VPh 0000000007ED 0000004013ED 0 tsHtJHt 0000000009D5 0000004015D5 0 9{,t3W 000000000CB0 0000004018B0 0 9_8t8 000000000ED3 000000401AD3 0 YY9s,t% 0000000012D4 000000401ED4 0 uEh,jB 0000000012E8 000000401EE8 0 Ph@jB 00000000131E 000000401F1E 0 uih,jB 000000001334 000000401F34 0 Sh@jB 000000001391 000000401F91 0 lhPjB 00000000145F 00000040205F 0 uHh,jB 000000001473 000000402073 0 Ph@jB 0000000014D6 0000004020D6 0 Ph@jB 000000001879 000000402479 0 Ph@kB 0000000018BD 0000004024BD 0 PhxkB 000000001D03 000000402903 0 Ph0lB 000000001D72 000000402972 0 PhhlB 000000001F01 000000402B01 0 @f;C. 000000001F89 000000402B89 0 Vf 000000002427 000000403027 0 PhhlB 000000002565 000000403165 0 Ph$mB 0000000025B3 0000004031B3 0 @f;C. 000000002667 000000403267 0 Sf 00000000281F 00000040341F 0 QQSVW 000000002A02 000000403602 0 YWSVh 000000002ACA 0000004036CA 0 HtmHtcHtWH 00000000321D 000000403E1D 0 QSVWQ 000000003605 000000404205 0 Ph pB 0000000036AF 0000004042AF 0 PhHpB 0000000036E2 0000004042E2 0 GWWhhpB 000000003723 000000404323 0 QSVWQj 000000003784 000000404384 0 QSVWQj 000000003D15 000000404915 0 t|Ht"- 000000003E8C 000000404A8C 0 Nt Nt 000000003EB0 000000404AB0 0 t?Ht2Ht%Ht 000000003F2A 000000404B2A 0 t<Ht!Ht 000000003F89 000000404B89 0 tdHtJHt9Ht 000000004007 000000404C07 0 FYY;u 000000004025 000000404C25 0 tPHt5Ht 0000000041CB 000000404DCB 0 lSVWj 00000000454C 00000040514C 0 QQSV3 0000000046A2 0000004052A2 0 \$ Pj 0000000046AD 0000004052AD 0 \$,PjeS 000000004979 000000405579 0 lSVWQ3 0000000049FD 0000004055FD 0 PSSSj 000000004A73 000000405673 0 VWQRj 000000004EC6 000000405AC6 0 Vh<rB 000000004EFB 000000405AFB 0 PhDrB 000000004FA4 000000405BA4 0 VRhTrB 000000005068 000000405C68 0 RPhprB 000000005070 000000405C70 0 D$LjdP File pos Mem pos ID Text ======== ======= == ==== 000000005199 000000405D99 0 HW9D$ 000000005378 000000405F78 0 L$0@WV 000000005393 000000405F93 0 HW9D$ 0000000055C7 0000004061C7 0 QQSVW 00000000584B 00000040644B 0 QQSV3 000000005925 000000406525 0 QQSVW 000000005D69 000000406969 0 u$jeS 000000006264 000000406E64 0 j@XQSP 000000006A96 000000407696 0 T$$Wj 000000006B0C 00000040770C 0 L$ j 00000000716E 000000407D6E 0 D$ ;D$0 000000007727 000000408327 0 YYNOu 0000000077C2 0000004083C2 0 WhDfB 0000000077E8 0000004083E8 0 WhDfB 000000007C46 000000408846 0 SVWPP 000000008316 000000408F16 0 QQSVW 0000000089D1 0000004095D1 0 QQSVW 000000008FA8 000000409BA8 0 expa3 000000008FBF 000000409BBF 0 te k_ 0000000090F7 000000409CF7 0 3J(3B,3 0000000091E7 000000409DE7 0 1B 1J$1BH1JLC 0000000097FC 00000040A3FC 0 B 1A 000000009802 00000040A402 0 B$1A$ 000000009808 00000040A408 0 B(1A( 00000000980E 00000040A40E 0 B,1A, 000000009814 00000040A414 0 B01A0 00000000981A 00000040A41A 0 B41A4 000000009820 00000040A420 0 B81A8 000000009826 00000040A426 0 B<1A< 00000000982C 00000040A42C 0 B@1A@ 000000009832 00000040A432 0 BD1AD 000000009842 00000040A442 0 BH1AH 000000009848 00000040A448 0 BL1AL 00000000984E 00000040A44E 0 BP1AP 000000009854 00000040A454 0 BT1AT 00000000985A 00000040A45A 0 BX1AX 000000009860 00000040A460 0 B\1A\ 00000000986C 00000040A46C 0 Bd1Ad 000000009878 00000040A478 0 Bh1Ah 00000000987E 00000040A47E 0 Bl1Al 000000009884 00000040A484 0 Bp1Ap 00000000988A 00000040A48A 0 Bt1At 000000009890 00000040A490 0 Bx1Ax 000000009896 00000040A496 0 B|1A| 000000009A3E 00000040A63E 0 QQSVW 000000009CBD 00000040A8BD 0 SVWQQR 00000000A98B 00000040B58B 0 QQSV3 00000000A9B8 00000040B5B8 0 PVSSSj 00000000A9DF 00000040B5DF 0 PVSSSj 00000000AA1E 00000040B61E 0 PhdsB 00000000AA5B 00000040B65B 0 QQSVWj 00000000AACB 00000040B6CB 0 tEHtBHt5Ht 00000000ADF5 00000040B9F5 0 t;9X(t 00000000B108 00000040BD08 0 H$9H, 00000000B2F3 00000040BEF3 0 WQPSV 00000000B980 00000040C580 0 QWPWh 00000000BAC9 00000040C6C9 0 QQSVWQ 00000000BFD7 00000040CBD7 0 QQSVWj 00000000C3F1 00000040CFF1 0 Ph0"B 00000000C683 00000040D283 0 YYh("B File pos Mem pos ID Text ======== ======= == ==== 00000000F165 00000040FD65 0 PPPPP 00000000F452 000000410052 0 t/HHt 00000000F69E 00000041029E 0 HHtVHHt 00000000FB95 000000410795 0 >0t-N 000000010241 000000410E41 0 ~pjCXf 000000010B15 000000411715 0 SSSSS 000000010E55 000000411A55 0 j$hpvB 0000000118FB 0000004124FB 0 5ntel 00000001190B 00000041250B 0 5Genu 000000011D8D 00000041298D 0 bWWWWj 000000011EE1 000000412AE1 0 PRPQh 000000012149 000000412D49 0 tRHtC 0000000121CD 000000412DCD 0 t;Ht+ 000000012250 000000412E50 0 Vh\0B 00000001235F 000000412F5F 0 URPQQh 00000001265A 00000041325A 0 t/HHt 00000001269D 00000041329D 0 j*Xf; 0000000126FB 0000004132FB 0 j*Xf; 000000012752 000000413352 0 htHjlZ; 000000012895 000000413495 0 HHtXHHt 000000012AD2 0000004136D2 0 nt'joZ; 000000012B72 000000413772 0 jgXf; 000000012C49 000000413849 0 YYjgXf9 000000012DFF 0000004139FF 0 >0t<NAj0X 000000012EE0 000000413AE0 0 Wj0XP 000000012FEC 000000413BEC 0 Wj XP 0000000131A6 000000413DA6 0 <at-<rt"<wt 000000013216 000000413E16 0 tRHtC 00000001329A 000000413E9A 0 t;Ht+ 0000000151F0 000000415DF0 0 j/_j\[f; 000000015431 000000416031 0 @WPPh 000000015757 000000416357 0 jdhxwB 000000015770 000000416370 0 j@j _W 000000015830 000000416430 0 } j@W 000000015BAA 0000004167AA 0 Vh~oA 0000000160C8 000000416CC8 0 PWWWWV 000000016163 000000416D63 0 PSSSSV 00000001628B 000000416E8B 0 v N+D$ 000000016567 000000417167 0 t/HHt 0000000167B3 0000004173B3 0 HHtVHHt 000000016CAA 0000004178AA 0 >0t-N 0000000171AF 000000417DAF 0 PP9E u 0000000175D0 0000004181D0 0 < t8< t4 0000000176AA 0000004182AA 0 t@VSP 000000017705 000000418305 0 PPPPP 000000017824 000000418424 0 SPPP+ 00000001782D 00000041842D 0 FVWPP 000000017853 000000418453 0 SVWPP 000000017A01 000000418601 0 QVWSj 000000017C5F 00000041885F 0 VhH;B 000000017C80 000000418880 0 VVhH;B 00000001800E 000000418C0E 0 jA[jZZ+ 000000018381 000000418F81 0 t\j=S 0000000183CC 000000418FCC 0 t&9=8 000000018591 000000419191 0 PPPPP 0000000186DC 0000004192DC 0 PRPQh 000000018949 000000419549 0 t7QVW 000000018A10 000000419610 0 tWh@\B 000000018BC2 0000004197C2 0 tHHt*Ht# 0000000190E4 000000419CE4 0 uJSSR File pos Mem pos ID Text ======== ======= == ==== 00000001929C 000000419E9C 0 SSSSS 00000001933F 000000419F3F 0 SVjA[jZ 000000019408 00000041A008 0 jAZjZ 0000000194B3 00000041A0B3 0 SVWUj 000000019554 00000041A154 0 ;t$,v- 0000000195D9 00000041A1D9 0 UQPXY]Y[ 0000000197E3 00000041A3E3 0 ~';_t|%3 0000000197F7 00000041A3F7 0 wtVj 00000001980C 00000041A40C 0 ;_tr. 00000001982D 00000041A42D 0 GWVj 000000019BD0 00000041A7D0 0 r)f;q 000000019C4A 00000041A84A 0 r2f;A 00000001A808 00000041B408 0 @jd_u 00000001A979 00000041B579 0 PPPPP 00000001A9A3 00000041B5A3 0 uaPPPS 00000001ABAB 00000041B7AB 0 tGhL\B 00000001ABBC 00000041B7BC 0 t3hX\B 00000001ABCD 00000041B7CD 0 t"hd\B 00000001BE5C 00000041CA5C 0 +t"HHt 00000001BEB2 00000041CAB2 0 9] t" 00000001DBE4 00000041E7E4 0 ,SVWj0X 00000001DD18 00000041E918 0 u'j0X 00000001DE42 00000041EA42 0 Wj0XPV 00000001DEE1 00000041EAE1 0 PjdSQ 00000001E04A 00000041EC4A 0 -jd[; 00000001E09F 00000041EC9F 0 WWWWW 00000001E5F2 00000041F1F2 0 VVVVV 00000001E741 00000041F341 0 PPPPP 00000001EFBB 00000041FBBB 0 SSPQSW 00000001F0EF 00000041FCEF 0 SSSSS 00000001F0FA 00000041FCFA 0 j0h yB 00000001F204 00000041FE04 0 SSSSS 00000001F394 00000041FF94 0 ?:uBGW 00000001F56D 00000042016D 0 } kE$< 00000001F6A2 0000004202A2 0 C@j:f 00000001F839 000000420439 0 SVWjA_jZ+ 00000001F8E1 0000004204E1 0 uBjAYjZ+ 000000020002 000000420C02 0 PPPPP 0000000200B6 000000420CB6 0 v N+D$ 000000020CB1 0000004218B1 0 SSSSS 000000021448 000000422248 0 CorExitProcess 000000021460 000000422260 0 (null) 000000021499 000000422299 0 ( 8PX 0000000214A1 0000004222A1 0 700WP 0000000214B9 0000004222B9 0 xpxxxx 0000000214F0 0000004222F0 0 FlsAlloc 0000000214FC 0000004222FC 0 FlsFree 000000021504 000000422304 0 FlsGetValue 000000021510 000000422310 0 FlsSetValue 00000002151C 00000042231C 0 InitializeCriticalSectionEx 000000021538 000000422338 0 CreateEventExW 000000021548 000000422348 0 CreateSemaphoreExW 00000002155C 00000042235C 0 SetThreadStackGuarantee 000000021574 000000422374 0 CreateThreadpoolTimer 00000002158C 00000042238C 0 SetThreadpoolTimer 0000000215A0 0000004223A0 0 WaitForThreadpoolTimerCallbacks 0000000215C0 0000004223C0 0 CloseThreadpoolTimer 0000000215D8 0000004223D8 0 CreateThreadpoolWait 0000000215F0 0000004223F0 0 SetThreadpoolWait 000000021604 000000422404 0 CloseThreadpoolWait File pos Mem pos ID Text ======== ======= == ==== 000000021618 000000422418 0 FlushProcessWriteBuffers 000000021634 000000422434 0 FreeLibraryWhenCallbackReturns 000000021654 000000422454 0 GetCurrentProcessorNumber 000000021670 000000422470 0 GetLogicalProcessorInformation 000000021690 000000422490 0 CreateSymbolicLinkW 0000000216A4 0000004224A4 0 SetDefaultDllDirectories 0000000216C0 0000004224C0 0 EnumSystemLocalesEx 0000000216D4 0000004224D4 0 CompareStringEx 0000000216E4 0000004224E4 0 GetDateFormatEx 0000000216F4 0000004224F4 0 GetLocaleInfoEx 000000021704 000000422504 0 GetTimeFormatEx 000000021714 000000422514 0 GetUserDefaultLocaleName 000000021730 000000422530 0 IsValidLocaleName 000000021744 000000422544 0 LCMapStringEx 000000021754 000000422554 0 GetCurrentPackageId 000000021768 000000422568 0 GetTickCount64 000000021778 000000422578 0 GetFileInformationByHandleExW 000000021798 000000422598 0 SetFileInformationByHandleW 000000022298 000000423098 0 UTF-8 0000000222A0 0000004230A0 0 UTF-16LE 0000000222AC 0000004230AC 0 UNICODE 000000022378 000000423178 0 No error 000000022384 000000423184 0 Operation not permitted 00000002239C 00000042319C 0 No such file or directory 0000000223B8 0000004231B8 0 No such process 0000000223C8 0000004231C8 0 Interrupted function call 0000000223E4 0000004231E4 0 Input/output error 0000000223F8 0000004231F8 0 No such device or address 000000022414 000000423214 0 Arg list too long 000000022428 000000423228 0 Exec format error 00000002243C 00000042323C 0 Bad file descriptor 000000022450 000000423250 0 No child processes 000000022464 000000423264 0 Resource temporarily unavailable 000000022488 000000423288 0 Not enough space 00000002249C 00000042329C 0 Permission denied 0000000224B0 0000004232B0 0 Bad address 0000000224BC 0000004232BC 0 Unknown error 0000000224CC 0000004232CC 0 Resource device 0000000224DC 0000004232DC 0 File exists 0000000224E8 0000004232E8 0 Improper link 0000000224F8 0000004232F8 0 No such device 000000022508 000000423308 0 Not a directory 000000022518 000000423318 0 Is a directory 000000022528 000000423328 0 Invalid argument 00000002253C 00000042333C 0 Too many open files in system 00000002255C 00000042335C 0 Too many open files 000000022570 000000423370 0 Inappropriate I/O control operation 000000022594 000000423394 0 File too large 0000000225A4 0000004233A4 0 No space left on device 0000000225BC 0000004233BC 0 Invalid seek 0000000225CC 0000004233CC 0 Read-only file system 0000000225E4 0000004233E4 0 Too many links 0000000225F4 0000004233F4 0 Broken pipe 000000022600 000000423400 0 Domain error 000000022610 000000423410 0 Result too large 000000022624 000000423424 0 Resource deadlock avoided 000000022640 000000423440 0 Filename too long 000000022654 000000423454 0 No locks available 000000022668 000000423468 0 Function not implemented 000000022684 000000423484 0 Directory not empty File pos Mem pos ID Text ======== ======= == ==== 000000022698 000000423498 0 Illegal byte sequence 0000000226CC 0000004234CC 0 Sunday 0000000226D4 0000004234D4 0 Monday 0000000226DC 0000004234DC 0 Tuesday 0000000226E4 0000004234E4 0 Wednesday 0000000226F0 0000004234F0 0 Thursday 0000000226FC 0000004234FC 0 Friday 000000022704 000000423504 0 Saturday 000000022740 000000423540 0 January 000000022748 000000423548 0 February 000000022754 000000423554 0 March 00000002275C 00000042355C 0 April 000000022774 000000423574 0 August 00000002277C 00000042357C 0 September 000000022788 000000423588 0 October 000000022790 000000423590 0 November 00000002279C 00000042359C 0 December 0000000227B0 0000004235B0 0 MM/dd/yy 0000000227BC 0000004235BC 0 dddd, MMMM dd, yyyy 0000000227D0 0000004235D0 0 HH:mm:ss 000000022A2F 00000042382F 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\] 000000022A70 000000423870 0 abcdefghijklmnopqrstuvwxyz{|}~ 000000022C6D 000000423A6D 0 ('8PW 000000022C76 000000423A76 0 700PP 000000022C91 000000423A91 0 xppwpp 000000022D60 000000423B60 0 MessageBoxW 000000022D6C 000000423B6C 0 GetActiveWindow 000000022D7C 000000423B7C 0 GetLastActivePopup 000000022D90 000000423B90 0 GetUserObjectInformationW 000000022DAC 000000423BAC 0 GetProcessWindowStation 000000024E40 000000425C40 0 CreateFile2 000000025428 000000426228 0 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\] 000000025469 000000426269 0 abcdefghijklmnopqrstuvwxyz{|}~ 0000000255A8 0000004263A8 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\] 0000000255E9 0000004263E9 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~ 000000025690 000000426490 0 e+000 0000000256A8 0000004264A8 0 SunMonTueWedThuFriSat 0000000256C0 0000004264C0 0 JanFebMarAprMayJunJulAugSepOctNovDec 0000000256EC 0000004264EC 0 1#SNAN 0000000256F4 0000004264F4 0 1#IND 0000000256FC 0000004264FC 0 1#INF 000000025704 000000426504 0 1#QNAN 00000002571C 00000042651C 0 000000025768 000000426568 0 {[siIbfFOon 00000002588D 00000042668D 0 idF(s 000000025AA4 0000004268A4 0 =*\\E) 000000025B12 000000426912 0 DPV2A 000000025C10 000000426A10 0 Stream closed 000000025C2C 000000426A2C 0 Getting billcount. 000000025C40 000000426A40 0 maxbill = %d 000000025C50 000000426A50 0 GettingCDMStatus. 000000025C64 000000426A64 0 Getting CashUnitStatus. 000000025C7C 000000426A7C 0 User left, cleaning up. 000000025C94 000000426A94 0 Error locking XFS 000000025CA8 000000426AA8 0 Resetting CDM. 000000025CB8 000000426AB8 0 %d:[%d] 000000025CC8 000000426AC8 0 Error dispensing 0x%08X 000000025CE0 000000426AE0 0 No denominations found 000000025CF8 000000426AF8 0 No msxfs installed... 000000025D10 000000426B10 0 Starting WFSManager... File pos Mem pos ID Text ======== ======= == ==== 000000025D28 000000426B28 0 Connecting... 000000025D38 000000426B38 0 shoah 000000025D40 000000426B40 0 Connected. Version: wfs:%d.%d, srvc:%d.%d, spi:%d.%d 000000025D78 000000426B78 0 Unknown version %d 000000025D8C 000000426B8C 0 Disconnecting... 000000025DA0 000000426BA0 0 Error connecting: %p 000000025DB8 000000426BB8 0 Error starting WFS: %p 000000025DD0 000000426BD0 0 Error getting maxbill: %p 000000025DEC 000000426BEC 0 chosen %d | %d 000000025DFC 000000426BFC 0 state=%d, safedoor=%d, dispenser=%d, stacker=%d 000000025E30 000000426C30 0 pos=%d, OutputPosition=%d, shutter=%d, transport=%d 000000025E68 000000426C68 0 Error getting cdm status: 0x%p. 000000025E88 000000426C88 0 Id:%s(nr=%d)(l=%d,h=%d), %d|%d|%d of %d [%s][%d][%d],[%d][%d] 000000025EC8 000000426CC8 0 Error getting bill status: 0x%p. 000000025EEC 000000426CEC 0 pos=%d, status=%d, shutter=%d, transport=%d, status=%d 000000025F24 000000426D24 0 Id:%s(nr=%d)(l=%d,h=%d), %d|%d|%d of %d [%s][%d][%d],[%d] 000000025F60 000000426D60 0 msxfs.dll 000000025F6C 000000426D6C 0 WFSExecute 000000025F78 000000426D78 0 WFSGetInfo 000000025F84 000000426D84 0 WFSOpen 000000025F8C 000000426D8C 0 WFSClose 000000025F98 000000426D98 0 WFSFreeResult 000000025FA8 000000426DA8 0 WFSStartUp 000000025FB4 000000426DB4 0 WFSCleanUp 000000025FC0 000000426DC0 0 WFSLock 000000025FC8 000000426DC8 0 WFSUnlock 000000025FD4 000000426DD4 0 Trying Nautilus. 000000025FE8 000000426DE8 0 CashDispenser 000000025FF8 000000426DF8 0 Connected Nautilus. 00000002600C 000000426E0C 0 Failed: 0x%08X 00000002601C 000000426E1C 0 Trying Nautilus2. 000000026030 000000426E30 0 NXCdm 000000026038 000000426E38 0 Connected Nautilus2. 000000026050 000000426E50 0 Trying Diabold. 000000026060 000000426E60 0 DBD_AdvFuncDisp 000000026070 000000426E70 0 Connected Diabold. 000000026084 000000426E84 0 Trying NCR. 000000026090 000000426E90 0 CurrencyDispenser1 0000000260A4 000000426EA4 0 Connected NCR. 0000000260B4 000000426EB4 0 Trying WINCOR. 0000000260C4 000000426EC4 0 CDM30 0000000260CC 000000426ECC 0 Connected WINCOR. 0000000260E0 000000426EE0 0 Trying WINCOR GEN. 0000000260F8 000000426EF8 0 Connected WINCOR GEN. 000000026110 000000426F10 0 Trying GENERIC. 000000026124 000000426F24 0 Connected GENERIC. 000000026138 000000426F38 0 console 000000026140 000000426F40 0 command 000000026158 000000426F58 0 0.0.0.0 000000026160 000000426F60 0 CNAME 00000002616C 000000426F6C 0 domain 00000002618C 000000426F8C 0 server 000000026194 000000426F94 0 domain=losharik.com 0000000261AC 000000426FAC 0 cmd.exe 0000000261B4 000000426FB4 0 Error opening file for reading 0000000261D8 000000426FD8 0 There was an error reading the file 000000026200 000000427000 0 Error opening file for writing 00000002626C 00000042706C 0 Server closed the connection 00000002628C 00000042708C 0 Connection error 0000000262A0 0000004270A0 0 The client couldn't connect to the remote host! File pos Mem pos ID Text ======== ======= == ==== 0000000262D0 0000004270D0 0 Not implemented yet! 0000000262E8 0000004270E8 0 %I64u 0000000262F0 0000004270F0 0 shi1_netname 000000026300 000000427100 0 shi1_type 00000002630C 00000042710C 0 shi1_remark 000000026320 000000427120 0 sv101_platform_id 000000026334 000000427134 0 sv101_name 000000026340 000000427140 0 sv101_version_major 000000026360 000000427160 0 sv101_version_minor 000000026374 000000427174 0 sv101_type 000000026380 000000427180 0 sv101_comment 000000026390 000000427190 0 share_array 0000000263A4 0000004271A4 0 lgrui0_name 0000000263B0 0000004271B0 0 group_array 0000000263BC 0000004271BC 0 systeminfo 0000000263C8 0000004271C8 0 fsutil fsinfo drives 0000000263E0 0000004271E0 0 drives 0000000263E8 0000004271E8 0 arp -a 0000000263F0 0000004271F0 0 arpcache 000000026400 000000427200 0 users 000000026408 000000427208 0 <INFO_END> 00000002643C 00000042723C 0 \u%04X 000000026444 000000427244 0 \u%04X\u%04X 000000026468 000000427268 0 false 000000026470 000000427270 0 %I64d 000000026494 000000427294 0 ..\jansson\memory_jansson.c 0000000264B0 0000004272B0 0 object 0000000264B8 0000004272B8 0 array 0000000264C0 0000004272C0 0 string 0000000264C8 0000004272C8 0 integer 0000000264D8 0000004272D8 0 Out of memory 0000000264F4 0000004272F4 0 Overflow. 000000026500 000000427300 0 client_write_key 000000026514 000000427314 0 client_mac_key 000000026524 000000427324 0 server_write_key 000000026538 000000427338 0 server_mac_key 000000026548 000000427348 0 client 000000026550 000000427350 0 NOT IMPLEMENTED! 000000026564 000000427364 0 %d.%d.%d.%d 000000026570 000000427370 0 We forgot to handle a linked-list type! 0000000265A4 0000004273A4 0 WARNING 0000000265AC 0000004273AC 0 ERROR 0000000265B4 0000004273B4 0 FATAL 0000000265BE 0000004273BE 0 Unrecoverable error at %s:%d: %s 0000000265E4 0000004273E4 0 dnscat 0000000265F0 0000004273F0 0 TXT, CNAME, MX, A 000000026DC2 000000427BC2 0 WSAStringToAddressA 000000026DD6 000000427BD6 0 WS2_32.dll 000000026DE4 000000427BE4 0 DnsQueryConfig 000000026DF4 000000427BF4 0 DNSAPI.dll 000000026E02 000000427C02 0 NetServerEnum 000000026E12 000000427C12 0 NetShareEnum 000000026E22 000000427C22 0 NetApiBufferFree 000000026E36 000000427C36 0 NetQueryDisplayInformation 000000026E54 000000427C54 0 NetUserGetLocalGroups 000000026E6A 000000427C6A 0 NETAPI32.dll 000000026E7A 000000427C7A 0 GetSystemTimeAsFileTime 000000026E94 000000427C94 0 GetTickCount 000000026EA4 000000427CA4 0 Sleep 000000026EAC 000000427CAC 0 GetProcAddress File pos Mem pos ID Text ======== ======= == ==== 000000026EBE 000000427CBE 0 LoadLibraryA 000000026ECE 000000427CCE 0 SetErrorMode 000000026EDE 000000427CDE 0 GetModuleFileNameW 000000026EF4 000000427CF4 0 WriteFile 000000026F00 000000427D00 0 CreateProcessA 000000026F12 000000427D12 0 TerminateProcess 000000026F26 000000427D26 0 CreatePipe 000000026F34 000000427D34 0 CloseHandle 000000026F42 000000427D42 0 SetHandleInformation 000000026F5A 000000427D5A 0 ReadFile 000000026F66 000000427D66 0 MultiByteToWideChar 000000026F7C 000000427D7C 0 GetCurrentProcessId 000000026F92 000000427D92 0 SwitchToThread 000000026FA4 000000427DA4 0 PeekNamedPipe 000000026FB4 000000427DB4 0 GetStdHandle 000000026FC4 000000427DC4 0 GetLastError 000000026FD4 000000427DD4 0 CreateThread 000000026FE4 000000427DE4 0 FormatMessageA 000000026FF4 000000427DF4 0 KERNEL32.dll 000000027004 000000427E04 0 CryptReleaseContext 00000002701A 000000427E1A 0 CryptAcquireContextA 000000027032 000000427E32 0 CryptGenRandom 000000027042 000000427E42 0 ADVAPI32.dll 000000027052 000000427E52 0 EncodePointer 000000027062 000000427E62 0 DecodePointer 000000027072 000000427E72 0 ExitProcess 000000027080 000000427E80 0 GetModuleHandleExW 000000027096 000000427E96 0 AreFileApisANSI 0000000270A8 000000427EA8 0 WideCharToMultiByte 0000000270BE 000000427EBE 0 IsDebuggerPresent 0000000270D2 000000427ED2 0 IsProcessorFeaturePresent 0000000270EE 000000427EEE 0 EnterCriticalSection 000000027106 000000427F06 0 LeaveCriticalSection 00000002711E 000000427F1E 0 HeapFree 00000002712A 000000427F2A 0 HeapAlloc 000000027136 000000427F36 0 HeapReAlloc 000000027144 000000427F44 0 GetCommandLineA 000000027156 000000427F56 0 SetLastError 000000027166 000000427F66 0 GetCurrentThreadId 00000002717C 000000427F7C 0 DeleteCriticalSection 000000027194 000000427F94 0 UnhandledExceptionFilter 0000000271B0 000000427FB0 0 SetUnhandledExceptionFilter 0000000271CE 000000427FCE 0 InitializeCriticalSectionAndSpinCount 0000000271F6 000000427FF6 0 GetCurrentProcess 00000002720A 00000042800A 0 TlsAlloc 000000027216 000000428016 0 TlsGetValue 000000027224 000000428024 0 TlsSetValue 000000027232 000000428032 0 TlsFree 00000002723C 00000042803C 0 GetStartupInfoW 00000002724E 00000042804E 0 GetModuleHandleW 000000027262 000000428062 0 LoadLibraryExW 000000027274 000000428074 0 IsValidCodePage 000000027286 000000428086 0 GetACP 000000027290 000000428090 0 GetOEMCP 00000002729C 00000042809C 0 GetCPInfo 0000000272A8 0000004280A8 0 HeapSize 0000000272B4 0000004280B4 0 RtlUnwind 0000000272C0 0000004280C0 0 GetConsoleMode 0000000272D2 0000004280D2 0 ReadConsoleW 0000000272E2 0000004280E2 0 GetConsoleCP File pos Mem pos ID Text ======== ======= == ==== 0000000272F2 0000004280F2 0 FindClose 0000000272FE 0000004280FE 0 FindFirstFileExW 000000027312 000000428112 0 GetDriveTypeW 000000027322 000000428122 0 SystemTimeToTzSpecificLocalTime 000000027344 000000428144 0 FileTimeToSystemTime 00000002735C 00000042815C 0 GetFileType 00000002736A 00000042816A 0 GetProcessHeap 00000002737C 00000042817C 0 GetModuleFileNameA 000000027392 000000428192 0 QueryPerformanceCounter 0000000273AC 0000004281AC 0 GetEnvironmentStringsW 0000000273C6 0000004281C6 0 FreeEnvironmentStringsW 0000000273E0 0000004281E0 0 OutputDebugStringW 0000000273F6 0000004281F6 0 CompareStringW 000000027408 000000428208 0 LCMapStringW 000000027418 000000428218 0 GetStringTypeW 00000002742A 00000042822A 0 SetFilePointerEx 00000002743E 00000042823E 0 SetEnvironmentVariableA 000000027458 000000428258 0 CreateFileW 000000027466 000000428266 0 SetStdHandle 000000027476 000000428276 0 WriteConsoleW 000000027486 000000428286 0 FlushFileBuffers 00000002749A 00000042829A 0 FileTimeToLocalFileTime 0000000274B4 0000004282B4 0 GetFileInformationByHandle 0000000274D2 0000004282D2 0 GetFullPathNameW 0000000274E6 0000004282E6 0 GetCurrentDirectoryW 0000000274FE 0000004282FE 0 SetEndOfFile 00000002750E 00000042830E 0 GetTimeZoneInformation 000000027BDA 0000004295DA 0 000000027CC1 0000004296C1 0 abcdefghijklmnopqrstuvwxyz 000000027CE1 0000004296E1 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ 000000027DFA 0000004297FA 0 000000027EDA 0000004298DA 0 abcdefghijklmnopqrstuvwxyz 000000027EFA 0000004298FA 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ 0000000287F6 00000042A1F6 0 z?aUY 000000028838 00000042A238 0 zc%C1 00000002888B 00000042A28B 0 -64OS 000000028A63 00000042D063 0 <?xml version="1.0" encoding="UTF-8" standalone="yes"?> 000000028A9C 00000042D09C 0 <assembly manifestVersion="1.0" xmlns="urn:schemas-microsoft-com:asm.v1" xmlns:asmv3="urn:schemas-microsoft-com:asm.v3"><assemblyIdentity type="win32" name="consoletest" version="1.0.0.0"></assemblyIdentity><description> my exe </description><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS></application></compatibility></assembly> 00000002900B 00000042E00B 0 0(0/050A0[0 00000002901D 00000042E01D 0 1'1P2 000000029027 00000042E027 0 3:3E3Y3t3{3 00000002904D 00000042E04D 0 ;#;0;C;J;Q; 00000002905B 00000042E05B 0 <3<I< 000000029063 00000042E063 0 <F=K=X= 00000002906D 00000042E06D 0 =<>G>h>|> 000000029085 00000042E085 0 ?!?6?C? 0000000290A1 00000042E0A1 0 0L0Y0b0u0 0000000290BF 00000042E0BF 0 2!232 0000000290C7 00000042E0C7 0 3M3d3 0000000290ED 00000042E0ED 0 565O5W5 000000029109 00000042E109 0 9l9t9 000000029113 00000042E113 0 :E;M;o; 000000029140 00000042E140 0 !0)0R0 00000002914D 00000042E14D 0 1>2M2 000000029159 00000042E159 0 3 3%34393A3G3L3S3Y3 00000002916D 00000042E16D 0 3e3k3p3w3}3 0000000291A1 00000042E1A1 0 4&4+4J4T4s4z4 0000000291C7 00000042E1C7 0 565=5C5Q5[5w5~5 0000000291ED 00000042E1ED 0 6 6/6H6V6]6d6k6r6{6 000000029205 00000042E205 0 6?7X7]7r7 File pos Mem pos ID Text ======== ======= == ==== 000000029215 00000042E215 0 7&83898C8Q8b8 000000029241 00000042E241 0 9):6:A:O:o: 00000002924D 00000042E24D 0 :I<M<Q<U<Y<]<a<e<i<m<q< 000000029288 00000042E288 0 &0*0.02060:0>0B0F0J0N0Y0 0000000292A9 00000042E2A9 0 1I1h1 0000000292CD 00000042E2CD 0 3<4V4d4 0000000292DB 00000042E2DB 0 5 52585 0000000292FF 00000042E2FF 0 8.9}9 000000029317 00000042E317 0 : :s:[; 000000029327 00000042E327 0 =/=<=u= 00000002933B 00000042E33B 0 ?<?U? 000000029351 00000042E351 0 2'292G2s2 000000029363 00000042E363 0 3,3;3e3 00000002936F 00000042E36F 0 3%4L4p4 000000029389 00000042E389 0 6e7r7y7 000000029399 00000042E399 0 7,8z8 0000000293A7 00000042E3A7 0 9@9S9o9 0000000293BF 00000042E3BF 0 ;%;S; 0000000293C9 00000042E3C9 0 ;:<B<Q<[<k< 0000000293DD 00000042E3DD 0 >G>|> 00000002941F 00000042E41F 0 3Y657 000000029437 00000042E437 0 8;9*;#>R> 00000002945F 00000042E45F 0 4P5d5 00000002946F 00000042E46F 0 6'6K6 000000029475 00000042E475 0 7E8f9M: 0000000294A1 00000042E4A1 0 4=5c5v5 0000000294B1 00000042E4B1 0 5!686H6c6w6 0000000294F7 00000042E4F7 0 1b3X6 000000029521 00000042E521 0 8,8m8 00000002952F 00000042E52F 0 :/;1<V< 000000029553 00000042E553 0 5 6B6c6"7 000000029561 00000042E561 0 8#8(8r8 000000029579 00000042E579 0 ;:<r< 000000029595 00000042E595 0 1'1r1 0000000295AB 00000042E5AB 0 3!484r4 0000000295BB 00000042E5BB 0 4 5>5 0000000295C1 00000042E5C1 0 5h5p5 0000000295D5 00000042E5D5 0 7*8_9 0000000295EB 00000042E5EB 0 <0<J<g<{< 0000000295F7 00000042E5F7 0 =K=R=g= 000000029609 00000042E609 0 >(>6>E>P>[>m? 00000002962F 00000042E62F 0 0/0s0{0 000000029657 00000042E657 0 2!272A2G2R2u2z2 000000029671 00000042E671 0 3B3H3N3T3Z3 00000002967D 00000042E67D 0 3g3n3u3|3 0000000296A5 00000042E6A5 0 4I4O4U4[4a4g4n4u4|4 0000000296DD 00000042E6DD 0 7C8J8R8 000000029711 00000042E711 0 3m3t3 00000002971B 00000042E71B 0 4!4.4=4G4Y4h4o4 00000002973B 00000042E73B 0 5%5I5v5 000000029779 00000042E779 0 0%0,0004080<0@0D0H0 000000029799 00000042E799 0 10171<1@1D1e1 0000000297B9 00000042E7B9 0 1.24282<2@2 0000000297CD 00000042E7CD 0 4-4<4 0000000297DD 00000042E7DD 0 5\92:=:]:h: 0000000297F5 00000042E7F5 0 :1;6;@; 000000029803 00000042E803 0 <2===C= 00000002980D 00000042E80D 0 >4>S> 000000029813 00000042E813 0 >*?1?W? 000000029829 00000042E829 0 0X3E4 File pos Mem pos ID Text ======== ======= == ==== 000000029861 00000042E861 0 =L=T= 00000002986F 00000042E86F 0 >#>2>W> 00000002987D 00000042E87D 0 ?1?J?[?i?n? 0000000298A3 00000042E8A3 0 0%010<0c0 0000000298B9 00000042E8B9 0 1)1/1?1G1M1\1f1l1{1 0000000298DF 00000042E8DF 0 2$272=2C2J2S2X2 0000000298EF 00000042E8EF 0 2f2k2q2y2~2 00000002992B 00000042E92B 0 3$3)3/373<3B3J3O3U3]3b3g3p3u3{3 00000002997B 00000042E97B 0 4 4&4.43494A4F4L4T4Y4_4g4l4r4z4 0000000299B9 00000042E9B9 0 5!5J5]5m5 0000000299D1 00000042E9D1 0 6 616=6D6K6f6p6 0000000299E5 00000042E9E5 0 7v7{7 0000000299FB 00000042E9FB 0 9&9_9t9 000000029A15 00000042EA15 0 :&:.:4:@:E:J:O:X: 000000029A41 00000042EA41 0 <Q<Y<j< 000000029A8F 00000042EA8F 0 181c1 000000029AA1 00000042EAA1 0 3I3@4G4 000000029AB1 00000042EAB1 0 5g5p5x5 000000029AC7 00000042EAC7 0 6B8U8 000000029ADF 00000042EADF 0 ;(<:<N<[< 000000029AF3 00000042EAF3 0 >$?e?q? 000000029B15 00000042EB15 0 8=8C8e8k8 000000029B33 00000042EB33 0 ?H?g? 000000029B63 00000042EB63 0 5+5N5b5 000000029B7F 00000042EB7F 0 647{7 000000029B8D 00000042EB8D 0 7;8X8 000000029BA5 00000042EBA5 0 :#;K;Y; 000000029BAD 00000042EBAD 0 =#=<=C=K=P=T=X= 000000029BD1 00000042EBD1 0 =2>8><>@>D> 000000029BEB 00000042EBEB 0 ?/?a?h?l?p?t?x?|? 000000029C1F 00000042EC1F 0 253s3|3 000000029C2F 00000042EC2F 0 5g5p5M6X6k6 000000029C3B 00000042EC3B 0 6A7J7V8_8K9 000000029C4B 00000042EC4B 0 9 :W:N;t; 000000029C59 00000042EC59 0 ;2<i< 000000029C63 00000042EC63 0 =\=f= 000000029C8B 00000042EC8B 0 3"3,3?3Z3 000000029C9D 00000042EC9D 0 3,4K4 000000029CAB 00000042ECAB 0 4B5z5 000000029CB5 00000042ECB5 0 6/666]6j6o6}6 000000029CCF 00000042ECCF 0 ;3;l; 000000029CE5 00000042ECE5 0 ?%?)?.?4?8?>?B?H?L?Q?W?[?a?e?k?o?u?y? 000000029D21 00000042ED21 0 1m4Z5 000000029D5F 00000042ED5F 0 0&0,02080 000000029D6B 00000042ED6B 0 012@2w2 000000029D7F 00000042ED7F 0 333;3@3l3 000000029D97 00000042ED97 0 444Z4n4y4 000000029DAF 00000042EDAF 0 8-8P8a8g8s8 000000029DDF 00000042EDDF 0 969<9E9K9U9 000000029DF9 00000042EDF9 0 ;.;;;A;}; 000000029E0D 00000042EE0D 0 <*=<= 000000029E37 00000042EE37 0 0!0/0 000000029E45 00000042EE45 0 2;2N2#3 000000029E69 00000042EE69 0 :':?:J:\: 000000029E7B 00000042EE7B 0 =">N>h> 000000029E91 00000042EE91 0 0!1-1 000000029EA7 00000042EEA7 0 474}415|9 000000029EB7 00000042EEB7 0 :M:_: 000000029EC1 00000042EEC1 0 :.;4;<;v; 000000029ED3 00000042EED3 0 <\<p< File pos Mem pos ID Text ======== ======= == ==== 000000029EE1 00000042EEE1 0 <6=?=J=Y=x= 000000029EF1 00000042EEF1 0 >)>>>H> 000000029EFB 00000042EEFB 0 ?2?V? 000000029F0F 00000042EF0F 0 0G0S0 000000029F39 00000042EF39 0 7 828D8V8h8z8 000000029F55 00000042EF55 0 9)9;9M9_9 000000029F75 00000042EF75 0 0k1s1 000000029F7F 00000042EF7F 0 212h2 000000029F8B 00000042EF8B 0 5C6O6 000000029FA3 00000042EFA3 0 ;K?O?S?W?[?_?c?g?k?o?s?w? 00000002A019 00000042F019 0 <k>,? 00000002A031 00000042F031 0 5.656k6 00000002A03D 00000042F03D 0 7_7{7 00000002A047 00000042F047 0 8*9;9O9U9Z9a9~9 00000002A05F 00000042F05F 0 :H:r: 00000002A06D 00000042F06D 0 :H;P;\;i;q;y; 00000002A0A5 00000042F0A5 0 <p=v=}= 00000002A0B7 00000042F0B7 0 > >%>+>=>C>N>W>d>l>y> 00000002A0E3 00000042F0E3 0 1\1h1 00000002A101 00000042F101 0 2D3j3 00000002A12F 00000042F12F 0 =N=v=|= 00000002A14F 00000042F14F 0 2X2\2 00000002A16D 00000042F16D 0 6$6,646<6D6L6T6\6d6l6 00000002A18D 00000042F18D 0 0 0$0(0 00000002A1BF 00000042F1BF 0 1 1$1(1,1014181<1@1D1H1L1P1T1X1\1 00000002A1E1 00000042F1E1 0 1d1h1l1p1t1 00000002A203 00000042F203 0 <$<,<4<<<D<L<T<\<d<l<t<|< 00000002A243 00000042F243 0 =$=,=4=<=D=L=T=\=d=l=t=|= 00000002A283 00000042F283 0 >$>,>4><>D>L>T>\>d>l>t>|> 00000002A2C3 00000042F2C3 0 ?$?,?4?<?D?L?T?\?d?l?t?|? 00000002A30B 00000042F30B 0 0$0,040<0D0L0T0\0d0l0t0|0 00000002A34B 00000042F34B 0 1$1,141<1D1L1T1\1d1l1t1|1 00000002A38B 00000042F38B 0 2$2,242<2D2L2T2\2d2l2t2|2 00000002A3CB 00000042F3CB 0 3 3(30383@3H3P3X3 00000002A3DD 00000042F3DD 0 3h3p3x3 00000002A40B 00000042F40B 0 4 4(40484@4H4P4X4 00000002A41D 00000042F41D 0 4h4p4x4 00000002A44B 00000042F44B 0 5 5(50585@5H5P5X5 00000002A45D 00000042F45D 0 5h5p5x5 00000002A48B 00000042F48B 0 6 6(60686@6H6P6X6 00000002A49D 00000042F49D 0 6h6p6x6 00000002A4CB 00000042F4CB 0 7 7(70787@7H7P7X7 00000002A4DD 00000042F4DD 0 7h7p7x7 00000002A50B 00000042F50B 0 8 8(80888@8H8P8X8 00000002A51D 00000042F51D 0 8h8p8x8 00000002A54B 00000042F54B 0 9 9(90989@9H9P9X9 00000002A55D 00000042F55D 0 9h9p9x9 00000002A590 00000042F590 0 @5D5H5L5P5T5X5\5 00000002A5A1 00000042F5A1 0 5d5t5$6(6,606 00000002A5BD 00000042F5BD 0 7d8h8l8p8$9(9,909 00000002A5ED 00000042F5ED 0 585X5x5 00000002A601 00000042F601 0 6(6D6H6d6h6 00000002A615 00000042F615 0 7(7H7T7p7 00000002A627 00000042F627 0 808P8p8|8 00000002A639 00000042F639 0 989T9X9 00000002A64F 00000042F64F 0 4L5P5T5X5\5 00000002A65B 00000042F65B 0 5d5h5l5p5 00000002A679 00000042F679 0 < <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\< 00000002A69B 00000042F69B 0 <d<h<l<p<t<x<|< 00000002A6F5 00000042F6F5 0 = =$=(=,=0=4=8=<=@=D=H=L=P=T=X=\= File pos Mem pos ID Text ======== ======= == ==== 00000002A72D 00000042F72D 0 >$>@>H>L>P>T>X>\> 00000002A73F 00000042F73F 0 >d>h>l>x>|> 000000021430 000000422230 0 mscoree.dll 000000021468 000000422268 0 (null) 0000000214D4 0000004222D4 0 kernel32.dll 000000022138 000000422F38 0 runtime error 000000022178 000000422F78 0 Program: 00000002218C 000000422F8C 0 <program name unknown> 0000000221D0 000000422FD0 0 Microsoft Visual C++ Runtime Library 00000002222B 00000042302B 0 Bja-JP 000000022238 000000423038 0 zh-CN 000000022244 000000423044 0 ko-KR 000000022250 000000423050 0 zh-TW 000000022264 000000423064 0 UTF-8 000000022270 000000423070 0 UTF-16LE 000000022284 000000423084 0 UNICODE 000000022814 000000423614 0 Sunday 000000022824 000000423624 0 Monday 000000022834 000000423634 0 Tuesday 000000022844 000000423644 0 Wednesday 000000022858 000000423658 0 Thursday 00000002286C 00000042366C 0 Friday 00000002287C 00000042367C 0 Saturday 0000000228F0 0000004236F0 0 January 000000022900 000000423700 0 February 000000022914 000000423714 0 March 000000022920 000000423720 0 April 000000022944 000000423744 0 August 000000022954 000000423754 0 September 000000022968 000000423768 0 October 000000022978 000000423778 0 November 00000002298C 00000042378C 0 December 0000000229B0 0000004237B0 0 MM/dd/yy 0000000229C4 0000004237C4 0 dddd, MMMM dd, yyyy 0000000229EC 0000004237EC 0 HH:mm:ss 000000022A00 000000423800 0 en-US 000000022D48 000000423B48 0 USER32.DLL 000000023C20 000000424A20 0 zh-CHS 000000023E24 000000424C24 0 ar-SA 000000023E30 000000424C30 0 bg-BG 000000023E3C 000000424C3C 0 ca-ES 000000023E48 000000424C48 0 cs-CZ 000000023E54 000000424C54 0 da-DK 000000023E60 000000424C60 0 de-DE 000000023E6C 000000424C6C 0 el-GR 000000023E78 000000424C78 0 fi-FI 000000023E84 000000424C84 0 fr-FR 000000023E90 000000424C90 0 he-IL 000000023E9C 000000424C9C 0 hu-HU 000000023EA8 000000424CA8 0 is-IS 000000023EB4 000000424CB4 0 it-IT 000000023EC0 000000424CC0 0 nl-NL 000000023ECC 000000424CCC 0 nb-NO 000000023ED8 000000424CD8 0 pl-PL 000000023EE4 000000424CE4 0 pt-BR 000000023EF0 000000424CF0 0 ro-RO 000000023EFC 000000424CFC 0 ru-RU 000000023F08 000000424D08 0 hr-HR 000000023F14 000000424D14 0 sk-SK 000000023F20 000000424D20 0 sq-AL File pos Mem pos ID Text ======== ======= == ==== 000000023F2C 000000424D2C 0 sv-SE 000000023F38 000000424D38 0 th-TH 000000023F44 000000424D44 0 tr-TR 000000023F50 000000424D50 0 ur-PK 000000023F5C 000000424D5C 0 id-ID 000000023F68 000000424D68 0 uk-UA 000000023F74 000000424D74 0 be-BY 000000023F80 000000424D80 0 sl-SI 000000023F8C 000000424D8C 0 et-EE 000000023F98 000000424D98 0 lv-LV 000000023FA4 000000424DA4 0 lt-LT 000000023FB0 000000424DB0 0 fa-IR 000000023FBC 000000424DBC 0 vi-VN 000000023FC8 000000424DC8 0 hy-AM 000000023FD4 000000424DD4 0 az-AZ-Latn 000000023FEC 000000424DEC 0 eu-ES 000000023FF8 000000424DF8 0 mk-MK 000000024004 000000424E04 0 tn-ZA 000000024010 000000424E10 0 xh-ZA 00000002401C 000000424E1C 0 zu-ZA 000000024028 000000424E28 0 af-ZA 000000024034 000000424E34 0 ka-GE 000000024040 000000424E40 0 fo-FO 00000002404C 000000424E4C 0 hi-IN 000000024058 000000424E58 0 mt-MT 000000024064 000000424E64 0 se-NO 000000024070 000000424E70 0 ms-MY 00000002407C 000000424E7C 0 kk-KZ 000000024088 000000424E88 0 ky-KG 000000024094 000000424E94 0 sw-KE 0000000240A0 000000424EA0 0 uz-UZ-Latn 0000000240B8 000000424EB8 0 tt-RU 0000000240C4 000000424EC4 0 bn-IN 0000000240D0 000000424ED0 0 pa-IN 0000000240DC 000000424EDC 0 gu-IN 0000000240E8 000000424EE8 0 ta-IN 0000000240F4 000000424EF4 0 te-IN 000000024100 000000424F00 0 kn-IN 00000002410C 000000424F0C 0 ml-IN 000000024118 000000424F18 0 mr-IN 000000024124 000000424F24 0 sa-IN 000000024130 000000424F30 0 mn-MN 00000002413C 000000424F3C 0 cy-GB 000000024148 000000424F48 0 gl-ES 000000024154 000000424F54 0 kok-IN 000000024164 000000424F64 0 syr-SY 000000024174 000000424F74 0 div-MV 000000024184 000000424F84 0 quz-BO 000000024194 000000424F94 0 ns-ZA 0000000241A0 000000424FA0 0 mi-NZ 0000000241AC 000000424FAC 0 ar-IQ 0000000241B8 000000424FB8 0 de-CH 0000000241C4 000000424FC4 0 en-GB 0000000241D0 000000424FD0 0 es-MX 0000000241DC 000000424FDC 0 fr-BE 0000000241E8 000000424FE8 0 it-CH 0000000241F4 000000424FF4 0 nl-BE 000000024200 000000425000 0 nn-NO 00000002420C 00000042500C 0 pt-PT 000000024218 000000425018 0 sr-SP-Latn File pos Mem pos ID Text ======== ======= == ==== 000000024230 000000425030 0 sv-FI 00000002423C 00000042503C 0 az-AZ-Cyrl 000000024254 000000425054 0 se-SE 000000024260 000000425060 0 ms-BN 00000002426C 00000042506C 0 uz-UZ-Cyrl 000000024284 000000425084 0 quz-EC 000000024294 000000425094 0 ar-EG 0000000242A0 0000004250A0 0 zh-HK 0000000242AC 0000004250AC 0 de-AT 0000000242B8 0000004250B8 0 en-AU 0000000242C4 0000004250C4 0 es-ES 0000000242D0 0000004250D0 0 fr-CA 0000000242DC 0000004250DC 0 sr-SP-Cyrl 0000000242F4 0000004250F4 0 se-FI 000000024300 000000425100 0 quz-PE 000000024310 000000425110 0 ar-LY 00000002431C 00000042511C 0 zh-SG 000000024328 000000425128 0 de-LU 000000024334 000000425134 0 en-CA 000000024340 000000425140 0 es-GT 00000002434C 00000042514C 0 fr-CH 000000024358 000000425158 0 hr-BA 000000024364 000000425164 0 smj-NO 000000024374 000000425174 0 ar-DZ 000000024380 000000425180 0 zh-MO 00000002438C 00000042518C 0 de-LI 000000024398 000000425198 0 en-NZ 0000000243A4 0000004251A4 0 es-CR 0000000243B0 0000004251B0 0 fr-LU 0000000243BC 0000004251BC 0 bs-BA-Latn 0000000243D4 0000004251D4 0 smj-SE 0000000243E4 0000004251E4 0 ar-MA 0000000243F0 0000004251F0 0 en-IE 0000000243FC 0000004251FC 0 es-PA 000000024408 000000425208 0 fr-MC 000000024414 000000425214 0 sr-BA-Latn 00000002442C 00000042522C 0 sma-NO 00000002443C 00000042523C 0 ar-TN 000000024448 000000425248 0 en-ZA 000000024454 000000425254 0 es-DO 000000024460 000000425260 0 sr-BA-Cyrl 000000024478 000000425278 0 sma-SE 000000024488 000000425288 0 ar-OM 000000024494 000000425294 0 en-JM 0000000244A0 0000004252A0 0 es-VE 0000000244AC 0000004252AC 0 sms-FI 0000000244BC 0000004252BC 0 ar-YE 0000000244C8 0000004252C8 0 en-CB 0000000244D4 0000004252D4 0 es-CO 0000000244E0 0000004252E0 0 smn-FI 0000000244F0 0000004252F0 0 ar-SY 0000000244FC 0000004252FC 0 en-BZ 000000024508 000000425308 0 es-PE 000000024514 000000425314 0 ar-JO 000000024520 000000425320 0 en-TT 00000002452C 00000042532C 0 es-AR 000000024538 000000425338 0 ar-LB 000000024544 000000425344 0 en-ZW 000000024550 000000425350 0 es-EC 00000002455C 00000042535C 0 ar-KW File pos Mem pos ID Text ======== ======= == ==== 000000024568 000000425368 0 en-PH 000000024574 000000425374 0 es-CL 000000024580 000000425380 0 ar-AE 00000002458C 00000042538C 0 es-UY 000000024598 000000425398 0 ar-BH 0000000245A4 0000004253A4 0 es-PY 0000000245B0 0000004253B0 0 ar-QA 0000000245BC 0000004253BC 0 es-BO 0000000245C8 0000004253C8 0 es-SV 0000000245D4 0000004253D4 0 es-HN 0000000245E0 0000004253E0 0 es-NI 0000000245EC 0000004253EC 0 es-PR 0000000245F8 0000004253F8 0 zh-CHT 000000024610 000000425410 0 af-za 00000002461C 00000042541C 0 ar-ae 000000024628 000000425428 0 ar-bh 000000024634 000000425434 0 ar-dz 000000024640 000000425440 0 ar-eg 00000002464C 00000042544C 0 ar-iq 000000024658 000000425458 0 ar-jo 000000024664 000000425464 0 ar-kw 000000024670 000000425470 0 ar-lb 00000002467C 00000042547C 0 ar-ly 000000024688 000000425488 0 ar-ma 000000024694 000000425494 0 ar-om 0000000246A0 0000004254A0 0 ar-qa 0000000246AC 0000004254AC 0 ar-sa 0000000246B8 0000004254B8 0 ar-sy 0000000246C4 0000004254C4 0 ar-tn 0000000246D0 0000004254D0 0 ar-ye 0000000246DC 0000004254DC 0 az-az-cyrl 0000000246F4 0000004254F4 0 az-az-latn 00000002470C 00000042550C 0 be-by 000000024718 000000425518 0 bg-bg 000000024724 000000425524 0 bn-in 000000024730 000000425530 0 bs-ba-latn 000000024748 000000425548 0 ca-es 000000024754 000000425554 0 cs-cz 000000024760 000000425560 0 cy-gb 00000002476C 00000042556C 0 da-dk 000000024778 000000425578 0 de-at 000000024784 000000425584 0 de-ch 000000024790 000000425590 0 de-de 00000002479C 00000042559C 0 de-li 0000000247A8 0000004255A8 0 de-lu 0000000247B4 0000004255B4 0 div-mv 0000000247C4 0000004255C4 0 el-gr 0000000247D0 0000004255D0 0 en-au 0000000247DC 0000004255DC 0 en-bz 0000000247E8 0000004255E8 0 en-ca 0000000247F4 0000004255F4 0 en-cb 000000024800 000000425600 0 en-gb 00000002480C 00000042560C 0 en-ie 000000024818 000000425618 0 en-jm 000000024824 000000425624 0 en-nz 000000024830 000000425630 0 en-ph 00000002483C 00000042563C 0 en-tt 000000024848 000000425648 0 en-us 000000024854 000000425654 0 en-za 000000024860 000000425660 0 en-zw File pos Mem pos ID Text ======== ======= == ==== 00000002486C 00000042566C 0 es-ar 000000024878 000000425678 0 es-bo 000000024884 000000425684 0 es-cl 000000024890 000000425690 0 es-co 00000002489C 00000042569C 0 es-cr 0000000248A8 0000004256A8 0 es-do 0000000248B4 0000004256B4 0 es-ec 0000000248C0 0000004256C0 0 es-es 0000000248CC 0000004256CC 0 es-gt 0000000248D8 0000004256D8 0 es-hn 0000000248E4 0000004256E4 0 es-mx 0000000248F0 0000004256F0 0 es-ni 0000000248FC 0000004256FC 0 es-pa 000000024908 000000425708 0 es-pe 000000024914 000000425714 0 es-pr 000000024920 000000425720 0 es-py 00000002492C 00000042572C 0 es-sv 000000024938 000000425738 0 es-uy 000000024944 000000425744 0 es-ve 000000024950 000000425750 0 et-ee 00000002495C 00000042575C 0 eu-es 000000024968 000000425768 0 fa-ir 000000024974 000000425774 0 fi-fi 000000024980 000000425780 0 fo-fo 00000002498C 00000042578C 0 fr-be 000000024998 000000425798 0 fr-ca 0000000249A4 0000004257A4 0 fr-ch 0000000249B0 0000004257B0 0 fr-fr 0000000249BC 0000004257BC 0 fr-lu 0000000249C8 0000004257C8 0 fr-mc 0000000249D4 0000004257D4 0 gl-es 0000000249E0 0000004257E0 0 gu-in 0000000249EC 0000004257EC 0 he-il 0000000249F8 0000004257F8 0 hi-in 000000024A04 000000425804 0 hr-ba 000000024A10 000000425810 0 hr-hr 000000024A1C 00000042581C 0 hu-hu 000000024A28 000000425828 0 hy-am 000000024A34 000000425834 0 id-id 000000024A40 000000425840 0 is-is 000000024A4C 00000042584C 0 it-ch 000000024A58 000000425858 0 it-it 000000024A64 000000425864 0 ja-jp 000000024A70 000000425870 0 ka-ge 000000024A7C 00000042587C 0 kk-kz 000000024A88 000000425888 0 kn-in 000000024A94 000000425894 0 kok-in 000000024AA4 0000004258A4 0 ko-kr 000000024AB0 0000004258B0 0 ky-kg 000000024ABC 0000004258BC 0 lt-lt 000000024AC8 0000004258C8 0 lv-lv 000000024AD4 0000004258D4 0 mi-nz 000000024AE0 0000004258E0 0 mk-mk 000000024AEC 0000004258EC 0 ml-in 000000024AF8 0000004258F8 0 mn-mn 000000024B04 000000425904 0 mr-in 000000024B10 000000425910 0 ms-bn 000000024B1C 00000042591C 0 ms-my 000000024B28 000000425928 0 mt-mt 000000024B34 000000425934 0 nb-no File pos Mem pos ID Text ======== ======= == ==== 000000024B40 000000425940 0 nl-be 000000024B4C 00000042594C 0 nl-nl 000000024B58 000000425958 0 nn-no 000000024B64 000000425964 0 ns-za 000000024B70 000000425970 0 pa-in 000000024B7C 00000042597C 0 pl-pl 000000024B88 000000425988 0 pt-br 000000024B94 000000425994 0 pt-pt 000000024BA0 0000004259A0 0 quz-bo 000000024BB0 0000004259B0 0 quz-ec 000000024BC0 0000004259C0 0 quz-pe 000000024BD0 0000004259D0 0 ro-ro 000000024BDC 0000004259DC 0 ru-ru 000000024BE8 0000004259E8 0 sa-in 000000024BF4 0000004259F4 0 se-fi 000000024C00 000000425A00 0 se-no 000000024C0C 000000425A0C 0 se-se 000000024C18 000000425A18 0 sk-sk 000000024C24 000000425A24 0 sl-si 000000024C30 000000425A30 0 sma-no 000000024C40 000000425A40 0 sma-se 000000024C50 000000425A50 0 smj-no 000000024C60 000000425A60 0 smj-se 000000024C70 000000425A70 0 smn-fi 000000024C80 000000425A80 0 sms-fi 000000024C90 000000425A90 0 sq-al 000000024C9C 000000425A9C 0 sr-ba-cyrl 000000024CB4 000000425AB4 0 sr-ba-latn 000000024CCC 000000425ACC 0 sr-sp-cyrl 000000024CE4 000000425AE4 0 sr-sp-latn 000000024CFC 000000425AFC 0 sv-fi 000000024D08 000000425B08 0 sv-se 000000024D14 000000425B14 0 sw-ke 000000024D20 000000425B20 0 syr-sy 000000024D30 000000425B30 0 ta-in 000000024D3C 000000425B3C 0 te-in 000000024D48 000000425B48 0 th-th 000000024D54 000000425B54 0 tn-za 000000024D60 000000425B60 0 tr-tr 000000024D6C 000000425B6C 0 tt-ru 000000024D78 000000425B78 0 uk-ua 000000024D84 000000425B84 0 ur-pk 000000024D90 000000425B90 0 uz-uz-cyrl 000000024DA8 000000425BA8 0 uz-uz-latn 000000024DC0 000000425BC0 0 vi-vn 000000024DCC 000000425BCC 0 xh-za 000000024DD8 000000425BD8 0 zh-chs 000000024DE8 000000425BE8 0 zh-cht 000000024DF8 000000425BF8 0 zh-cn 000000024E04 000000425C04 0 zh-hk 000000024E10 000000425C10 0 zh-mo 000000024E1C 000000425C1C 0 zh-sg 000000024E28 000000425C28 0 zh-tw 000000024E34 000000425C34 0 zu-za 000000024E4B 000000425C4B 0 2.exe 000000025698 000000426498 0 CONOUT$ 000000026220 000000427020 0 %s\updatea.bin 000000026248 000000427048 0 %s\updatea2.bin
=== DOWNLOAD ===