.- - -----÷M÷E÷N÷U÷------------------------------------------------------------- --- ---- -------------.
! WALL ! STATS ! GOODIES ! YARA ! FAQ ! RSS ! EMV !
`-------------- - --- ---------- -------- -------- -------- -------- ----------------- - ---- ---- --'
ATM MALWARE NOTICE
7544e7a798b791cb36caaa1860974f33d30bc4659ceab3063d1ab4fd71c8c7e0
Date...........: 2015-09-04
Family.........: GreenDispenser
File name......: wincor.exe
File size......: 390.00 KB
Type file......: EXE/Windows
Virscan........: VT - HA
PDB Path found.: c:\src\Misc\sdel\Release\sdelete.pdb
Documentation..: https://www.proofpoint.com/us/threat-insight/post/Meet-GreenDispenser
Entropy:
Binary Histogram:
=== PEDUMP REPORT ===
=== MZ Header ===
signature: "MZ"
bytes_in_last_block: 144 0x90
blocks_in_file: 3 3
num_relocs: 0 0
header_paragraphs: 4 4
min_extra_paragraphs: 0 0
max_extra_paragraphs: 65535 0xffff
ss: 0 0
sp: 184 0xb8
checksum: 0 0
ip: 0 0
cs: 0 0
reloc_table_offset: 64 0x40
overlay_number: 0 0
reserved0: 0 0
oem_id: 0 0
oem_info: 0 0
reserved2: 0 0
reserved3: 0 0
reserved4: 0 0
reserved5: 0 0
reserved6: 0 0
lfanew: 240 0xf0
=== DOS STUB ===
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno|
00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
=== RICH Header ===
LIB_ID VERSION TIMES_USED
4 4 8447 20ff 2 2
205 cd 50929 c6f1 27 1b
207 cf 50929 c6f1 70 46
206 ce 50929 c6f1 195 c3
147 93 30729 7809 13 d
1 1 0 0 174 ae
211 d3 60610 ecc2 21 15
201 c9 60610 ecc2 1 1
204 cc 60610 ecc2 1 1
=== PE Header ===
signature: "PE\x00\x00"
# IMAGE_FILE_HEADER:
Machine: 332 0x14c x86
NumberOfSections: 5 5
TimeDateStamp: "2015-06-02 22:07:42"
PointerToSymbolTable: 1919896667 0x726f4c5b
NumberOfSymbols: 1564823652 0x5d455064
SizeOfOptionalHeader: 224 0xe0
Characteristics: 258 0x102 EXECUTABLE_IMAGE, 32BIT_MACHINE
# IMAGE_OPTIONAL_HEADER32:
Magic: 267 0x10b 32-bit executable
LinkerVersion: 11.0
SizeOfCode: 153600 0x25800
SizeOfInitializedData: 253952 0x3e000
SizeOfUninitializedData: 0 0
AddressOfEntryPoint: 68204 0x10a6c
BaseOfCode: 4096 0x1000
BaseOfData: 159744 0x27000
ImageBase: 4194304 0x400000
SectionAlignment: 4096 0x1000
FileAlignment: 512 0x200
OperatingSystemVersion: 5.1
ImageVersion: 0.0
SubsystemVersion: 5.1
Reserved1: 0 0
SizeOfImage: 421888 0x67000
SizeOfHeaders: 1024 0x400
CheckSum: 0 0
Subsystem: 2 2 WINDOWS_GUI
DllCharacteristics: 33088 0x8140 DYNAMIC_BASE, NX_COMPAT
TERMINAL_SERVER_AWARE
SizeOfStackReserve: 1048576 0x100000
SizeOfStackCommit: 4096 0x1000
SizeOfHeapReserve: 1048576 0x100000
SizeOfHeapCommit: 4096 0x1000
LoaderFlags: 0 0
NumberOfRvaAndSizes: 16 0x10
=== DATA DIRECTORY ===
EXPORT rva:0x 0 size:0x 0
IMPORT rva:0x 30974 size:0x a0
RESOURCE rva:0x 5c000 size:0x 1e0
EXCEPTION rva:0x 0 size:0x 0
SECURITY rva:0x 0 size:0x 0
BASERELOC rva:0x 5d000 size:0x 20d0
DEBUG rva:0x 0 size:0x 0
ARCHITECTURE rva:0x 0 size:0x 0
GLOBALPTR rva:0x 0 size:0x 0
TLS rva:0x 0 size:0x 0
LOAD_CONFIG rva:0x 2ebf0 size:0x 40
Bound_IAT rva:0x 0 size:0x 0
IAT rva:0x 27000 size:0x 24c
Delay_IAT rva:0x 0 size:0x 0
CLR_Header rva:0x 0 size:0x 0
rva:0x 0 size:0x 0
=== SECTIONS ===
NAME RVA VSZ RAW_SZ RAW_PTR nREL REL_PTR nLINE LINE_PTR FLAGS
.text 1000 257ff 25800 400 0 0 0 0 60000020 R-X CODE
.rdata 27000 a63a a800 25c00 0 0 0 0 40000040 R-- IDATA
.data 32000 29f38 27c00 30400 0 0 0 0 c0000040 RW- IDATA
.rsrc 5c000 1e0 200 58000 0 0 0 0 40000040 R-- IDATA
.reloc 5d000 9544 9600 58200 0 0 0 0 42000040 R-- IDATA DISCARDABLE
=== RESOURCES ===
FILE_OFFSET CP LANG SIZE TYPE NAME
0x58060 0 0x409 381 MANIFEST #1
=== IMPORTS ===
MODULE_NAME HINT ORD FUNCTION_NAME
KERNEL32.dll 38a OutputDebugStringW
KERNEL32.dll 2d2 HeapReAlloc
KERNEL32.dll 467 SetFilePointerEx
KERNEL32.dll 3c0 ReadFile
KERNEL32.dll 157 FlushFileBuffers
KERNEL32.dll 161 FreeEnvironmentStringsW
KERNEL32.dll 1da GetEnvironmentStringsW
KERNEL32.dll 279 GetSystemTimeAsFileTime
KERNEL32.dll 3a7 QueryPerformanceCounter
KERNEL32.dll 1f3 GetFileType
KERNEL32.dll 237 GetOEMCP
KERNEL32.dll 168 GetACP
KERNEL32.dll 33f LoadLibraryW
KERNEL32.dll 1ac GetConsoleMode
KERNEL32.dll 19a GetConsoleCP
KERNEL32.dll 24a GetProcessHeap
KERNEL32.dll 525 WriteFile
KERNEL32.dll 264 GetStdHandle
KERNEL32.dll 2d4 HeapSize
KERNEL32.dll 10f EnumSystemLocalesW
KERNEL32.dll 29b GetUserDefaultLCID
KERNEL32.dll 30c IsValidLocale
KERNEL32.dll 206 GetLocaleInfoW
KERNEL32.dll 32d LCMapStringW
KERNEL32.dll 487 SetStdHandle
KERNEL32.dll 524 WriteConsoleW
KERNEL32.dll 3be ReadConsoleW
KERNEL32.dll 8f CreateFileW
KERNEL32.dll 453 SetEndOfFile
KERNEL32.dll b5 CreateThread
KERNEL32.dll 277 GetSystemTime
KERNEL32.dll 473 SetLastError
KERNEL32.dll 37d OpenMutexW
KERNEL32.dll 214 GetModuleFileNameW
KERNEL32.dll 2a7 GetVolumeInformationW
KERNEL32.dll 9e CreateMutexW
KERNEL32.dll 202 GetLastError
KERNEL32.dll 213 GetModuleFileNameA
KERNEL32.dll 1c1 GetCurrentProcessId
KERNEL32.dll 52 CloseHandle
KERNEL32.dll 1c5 GetCurrentThreadId
KERNEL32.dll 4b2 Sleep
KERNEL32.dll 30a IsValidCodePage
KERNEL32.dll 1c0 GetCurrentProcess
KERNEL32.dll 218 GetModuleHandleW
KERNEL32.dll 263 GetStartupInfoW
KERNEL32.dll 4c6 TlsFree
KERNEL32.dll 4c8 TlsSetValue
KERNEL32.dll 4c7 TlsGetValue
KERNEL32.dll 4c5 TlsAlloc
KERNEL32.dll 4c0 TerminateProcess
KERNEL32.dll 4a5 SetUnhandledExceptionFilter
KERNEL32.dll 4d3 UnhandledExceptionFilter
KERNEL32.dll 2e3 InitializeCriticalSectionAndSpinCount
KERNEL32.dll 172 GetCPInfo
KERNEL32.dll 418 RtlUnwind
KERNEL32.dll 511 WideCharToMultiByte
KERNEL32.dll 2ef InterlockedIncrement
KERNEL32.dll 2eb InterlockedDecrement
KERNEL32.dll ea EncodePointer
KERNEL32.dll ca DecodePointer
KERNEL32.dll ee EnterCriticalSection
KERNEL32.dll 339 LeaveCriticalSection
KERNEL32.dll d1 DeleteCriticalSection
KERNEL32.dll 367 MultiByteToWideChar
KERNEL32.dll 269 GetStringTypeW
KERNEL32.dll 300 IsDebuggerPresent
KERNEL32.dll 304 IsProcessorFeaturePresent
KERNEL32.dll 245 GetProcAddress
KERNEL32.dll 33e LoadLibraryExW
KERNEL32.dll 2cf HeapFree
KERNEL32.dll 2cb HeapAlloc
KERNEL32.dll 119 ExitProcess
KERNEL32.dll 217 GetModuleHandleExW
KERNEL32.dll 15 AreFileApisANSI
KERNEL32.dll 186 GetCommandLineA
KERNEL32.dll 3b1 RaiseException
USER32.dll dc EndPaint
USER32.dll a6 DestroyWindow
USER32.dll 237 PostQuitMessage
USER32.dll f6 FillRect
USER32.dll d0 DrawTextW
USER32.dll cd DrawTextA
USER32.dll 1eb LoadCursorW
USER32.dll e BeginPaint
USER32.dll 1ed LoadIconW
USER32.dll 1be InvalidateRect
USER32.dll 196 GetWindowLongW
USER32.dll 265 ReleaseDC
USER32.dll 2c4 SetWindowLongW
USER32.dll 6e CreateWindowExW
USER32.dll 17e GetSystemMetrics
USER32.dll 27c SendMessageW
USER32.dll 9c DefWindowProcW
USER32.dll 15d GetMessageW
USER32.dll 2fc TranslateMessage
USER32.dll af DispatchMessageW
USER32.dll 5e CreateDesktopW
USER32.dll 22a OpenInputDesktop
USER32.dll 4a CloseDesktop
USER32.dll 2e8 SwitchDesktop
USER32.dll 2ba SetThreadDesktop
USER32.dll 2df ShowWindow
USER32.dll 24d RegisterClassExW
GDI32.dll 2a6 SetTextColor
GDI32.dll e3 DeleteDC
GDI32.dll 35 CreateDIBSection
GDI32.dll 27e SetBkColor
GDI32.dll 27f SetBkMode
GDI32.dll e6 DeleteObject
GDI32.dll 277 SelectObject
GDI32.dll 30 CreateCompatibleDC
GDI32.dll 41 CreateFontW
GDI32.dll 288 SetDIBits
GDI32.dll 1fd GetObjectW
GDI32.dll 54 CreateSolidBrush
GDI32.dll 13 BitBlt
ADVAPI32.dll ba CryptEncrypt
ADVAPI32.dll ca CryptImportKey
ADVAPI32.dll c1 CryptGenRandom
ADVAPI32.dll cb CryptReleaseContext
ADVAPI32.dll cd CryptSetKeyParam
ADVAPI32.dll b1 CryptAcquireContextW
ADVAPI32.dll 230 RegCloseKey
ADVAPI32.dll 261 RegOpenKeyExW
ADVAPI32.dll 260 RegOpenKeyExA
ADVAPI32.dll 24e RegEnumKeyExA
ADVAPI32.dll 26d RegQueryValueExA
ADVAPI32.dll b7 CryptDestroyKey
SHELL32.dll 11e ShellExecuteA
MSXFS.dll 19 WFSExecute
MSXFS.dll 1f WFSOpen
MSXFS.dll 1b WFSGetInfo
MSXFS.dll 1a WFSFreeResult
MSXFS.dll 1d WFSIsBlocking
MSXFS.dll 22 WFSStartUp
MSXFS.dll 15 WFSClose
SHLWAPI.dll 48 PathFindFileNameA
SHLWAPI.dll 33 PathAppendA
SHLWAPI.dll 8a PathRemoveFileSpecA
=== Packer / Compiler ===
MS Visual C++ v8.0
File pos Mem pos ID Text
======== ======= == ====
00000000004D 00000040004D 0 !This program cannot be run in DOS mode.
0000000000F8 0000004000F8 0 .)nU[LordPE]
0000000001E8 0000004001E8 0 .text
000000000210 000000400210 0 .rdata
000000000237 000000400237 0 @.data
000000000260 000000400260 0 .rsrc
000000000287 000000400287 0 @.reloc
000000002281 000000402E81 0 sC+1W
000000002720 000000403320 0 PQSVW
000000003133 000000403D33 0 D$DPh
0000000059CF 0000004065CF 0 D$@SVW
000000005B1F 00000040671F 0 CD$<P
000000005B29 000000406729 0 D$$RP
000000005BDA 0000004067DA 0 D$ j@P
000000005C5A 00000040685A 0 D$ j@P
000000005CDD 0000004068DD 0 D$$j@P
000000005D5D 00000040695D 0 D$$j@P
000000005F87 000000406B87 0 D$8jlP
0000000061B8 000000406DB8 0 D$8jlP
000000006459 000000407059 0 D$DPS
000000006502 000000407102 0 CD$@P
00000000657C 00000040717C 0 D$ ;D$(u
0000000065E2 0000004071E2 0 CD$@VW
0000000066B1 0000004072B1 0 CD$\P
0000000066D8 0000004072D8 0 CD$DP
000000006725 000000407325 0 CD$DP
00000000675D 00000040735D 0 CD$@+
00000000676F 00000040736F 0 D$$RPW
000000006796 000000407396 0 \$\QSW
0000000068BF 0000004074BF 0 D$HSVW
000000006ADE 0000004076DE 0 CL$DQ
000000006B08 000000407708 0 CD$,P
000000006B55 000000407755 0 CD$,P
000000006B8D 00000040778D 0 CD$(+
000000006B9F 00000040779F 0 D$$RPS
000000006BC6 0000004077C6 0 t$HQVS
000000009313 000000409F13 0 QSVWj
0000000094C3 00000040A0C3 0 QSVWj
00000000AE07 00000040BA07 0 9x$u#9H
00000000B15B 00000040BD5B 0 +G$A+
00000000BC3C 00000040C83C 0 wqtfH
00000000BE2E 00000040CA2E 0 ujPPPP
00000000C7D8 00000040D3D8 0 D$ PS
00000000C7F4 00000040D3F4 0 D$ PS
00000000C86A 00000040D46A 0 D$ PS
00000000D65C 00000040E25C 0 HHuh@
00000000DB21 00000040E721 0 s(Rj
00000000FB15 000000410715 0 uPVWhf
00000000FD66 000000410966 0 PPPPPPPP
000000010AA2 0000004116A2 0 QQSVWd
000000010D5F 00000041195F 0 PRAQh
000000011278 000000411E78 0 SSSSS
0000000112FE 000000411EFE 0 PWSWW
00000001131D 000000411F1D 0 WWWWW
000000011376 000000411F76 0 PPPPP
000000012CB9 0000004138B9 0 ft!9q
000000012E1D 000000413A1D 0 PPPPP
000000012FD0 000000413BD0 0 PP9E u
00000001524F 000000415E4F 0 PPPPP
0000000153BB 000000415FBB 0 jA[jZZ+
File pos Mem pos ID Text
======== ======= == ====
000000015510 000000416110 0 Genuu_
000000015519 000000416119 0 ineIuV
000000015522 000000416122 0 nteluM3
0000000159B2 0000004165B2 0 SSSSS
000000015B89 000000416789 0 VVVVV
000000015DAA 0000004169AA 0 PPPPP
00000001611D 000000416D1D 0 ~pjCXf
000000016A6D 00000041766D 0 tf= $C
0000000170DD 000000417CDD 0 <at-<rt"<wt
00000001714D 000000417D4D 0 tRHtC
0000000171D1 000000417DD1 0 t;Ht+
00000001733F 000000417F3F 0 URPQQh
000000018BBA 0000004197BA 0 j@j _W
000000018C7A 00000041987A 0 } j@W
00000001901D 000000419C1D 0 < t8< t4
0000000190F7 000000419CF7 0 t@VSP
000000019152 000000419D52 0 PPPPP
00000001926F 000000419E6F 0 SPPP+
000000019278 000000419E78 0 FVWPP
00000001929E 000000419E9E 0 SVWPP
0000000193A5 000000419FA5 0 9E WW
000000019600 00000041A200 0 PPPPP
00000001966E 00000041A26E 0 VVVVV
0000000196A6 00000041A2A6 0 j.Yf;
00000001970F 00000041A30F 0 j.Yf;
000000019715 00000041A315 0 tyPVj@W
00000001972A 00000041A32A 0 _tcPVj@
00000001974B 00000041A34B 0 uCPVj
000000019762 00000041A362 0 u#j,Xf;
000000019789 00000041A389 0 PPPPP
000000019798 00000041A398 0 SSSSS
000000019867 00000041A467 0 >Cu/f9F
000000019A44 00000041A644 0 SSSSS
000000019A9B 00000041A69B 0 @PSjU
000000019AB9 00000041A6B9 0 PPPPP
000000019AF8 00000041A6F8 0 SSSSS
000000019DE9 00000041A9E9 0 QQQQQ
000000019EA5 00000041AAA5 0 j;Yf9
000000019F1F 00000041AB1F 0 j;Yf9
00000001A070 00000041AC70 0 PPPPP
00000001A408 00000041B008 0 VVVVV
00000001A4A0 00000041B0A0 0 WVSj
00000001A742 00000041B342 0 RVSQSWV
00000001A77D 00000041B37D 0 RVSQj
00000001A886 00000041B486 0 QVVVj
00000001B4D5 00000041C0D5 0 ,SVWj0X
00000001B609 00000041C209 0 u'j0X
00000001B733 00000041C333 0 Wj0XPV
00000001B7D2 00000041C3D2 0 PjdSQ
00000001B939 00000041C539 0 -jd[;
00000001B98C 00000041C58C 0 WWWWW
00000001BED1 00000041CAD1 0 VVVVV
00000001C31D 00000041CF1D 0 SVWjA_jZ+
00000001C3C5 00000041CFC5 0 uBjAYjZ+
00000001C6D9 00000041D2D9 0 tO95,
00000001C8C2 00000041D4C2 0 t VV9u
00000001CB51 00000041D751 0 PjPW
00000001CB68 00000041D768 0 $PjQW
00000001CBB0 00000041D7B0 0 *PjTW
00000001CBC7 00000041D7C7 0 +PjUW
File pos Mem pos ID Text
======== ======= == ====
00000001CBDE 00000041D7DE 0 ,PjVW
00000001CBF8 00000041D7F8 0 -PjWW
00000001CC0F 00000041D80F 0 .PjRW
00000001CC26 00000041D826 0 /PjSW
00000001CC9C 00000041D89C 0 HPjPW
00000001CCB6 00000041D8B6 0 LPjQW
00000001CF8D 00000041DB8D 0 <0|o<9
00000001D503 00000041E103 0 G Pj*S
00000001D517 00000041E117 0 G$Pj+S
00000001D52B 00000041E12B 0 G(Pj,S
00000001D53F 00000041E13F 0 G,Pj-S
00000001D556 00000041E156 0 G0Pj.S
00000001D56A 00000041E16A 0 G4Pj/S
00000001D592 00000041E192 0 G8PjDS
00000001D5A9 00000041E1A9 0 G<PjES
00000001D5BD 00000041E1BD 0 G@PjFS
00000001D5D1 00000041E1D1 0 GDPjGS
00000001D5E5 00000041E1E5 0 GHPjHS
00000001D5FC 00000041E1FC 0 GLPjIS
00000001D610 00000041E210 0 GPPjJS
00000001D624 00000041E224 0 GTPjKS
00000001D638 00000041E238 0 GXPjLS
00000001D64F 00000041E24F 0 G\PjMS
00000001D677 00000041E277 0 GdPjOS
00000001D68B 00000041E28B 0 GhPj8S
00000001D6A2 00000041E2A2 0 GlPj9S
00000001D6B6 00000041E2B6 0 GpPj:S
00000001D6CA 00000041E2CA 0 GtPj;S
00000001D6DE 00000041E2DE 0 GxPj<S
00000001D6F5 00000041E2F5 0 G|Pj=S
00000001D73C 00000041E33C 0 Pj@Sj
00000001DA82 00000041E682 0 PjOSj
00000001E090 00000041EC90 0 HHtVHHt
00000001E587 00000041F187 0 >0t-N
00000001E9AF 00000041F5AF 0 QVWSj
00000001EA9B 00000041F69B 0 v N+D$
00000001EE18 00000041FA18 0 r)f;q
00000001EE92 00000041FA92 0 r2f;A
00000001EF03 00000041FB03 0 SVWUj
00000001EFA4 00000041FBA4 0 ;t$,v-
00000001F029 00000041FC29 0 UQPXY]Y[
00000001F471 000000420071 0 ~';_t|%3
00000001F485 000000420085 0 wtVj
00000001F49A 00000042009A 0 ;_tr.
00000001F6F5 0000004202F5 0 PPPPP
00000001FA03 000000420603 0 WWWWW
00000001FAB4 0000004206B4 0 PPPPP
00000001FC07 000000420807 0 Yu2Vj@h
00000001FCFD 0000004208FD 0 tMj_S
00000001FD55 000000420955 0 PPPPP
0000000210B1 000000421CB1 0 SSSSV
00000002113D 000000421D3D 0 SSSSV
0000000212E6 000000421EE6 0 PPPPP
0000000213A6 000000421FA6 0 v N+D$
0000000214E6 0000004220E6 0 Ht+Ht$Ht
000000021768 000000422368 0 tHHt*Ht#
000000021C88 000000422888 0 uJSSR
000000021E40 000000422A40 0 SSSSS
00000002223A 000000422E3A 0 SVjA[jZ
0000000222FF 000000422EFF 0 jAZjZ
File pos Mem pos ID Text
======== ======= == ====
000000023104 000000423D04 0 +t"HHt
00000002315A 000000423D5A 0 9] t"
000000023FB6 000000424BB6 0 SSSSS
0000000247A8 0000004253A8 0 jxYf;
0000000247B0 0000004253B0 0 jXYf;
0000000247DA 0000004253DA 0 jxYf;
0000000247E2 0000004253E2 0 jXYf;
00000002480B 00000042540B 0 uHjAXf;
000000024AEE 0000004256EE 0 j0Yf;
0000000263B0 0000004277B0 0 permission denied
0000000263C4 0000004277C4 0 file exists
0000000263D0 0000004277D0 0 no such device
0000000263E0 0000004277E0 0 filename too long
0000000263F4 0000004277F4 0 device or resource busy
00000002640C 00000042780C 0 io error
000000026418 000000427818 0 directory not empty
00000002642C 00000042782C 0 invalid argument
000000026440 000000427840 0 no space on device
000000026454 000000427854 0 no such file or directory
000000026470 000000427870 0 function not supported
000000026488 000000427888 0 no lock available
00000002649C 00000042789C 0 not enough memory
0000000264B0 0000004278B0 0 resource unavailable try again
0000000264D0 0000004278D0 0 cross device link
0000000264E4 0000004278E4 0 operation canceled
0000000264F8 0000004278F8 0 too many files open
00000002650C 00000042790C 0 permission_denied
000000026520 000000427920 0 address_in_use
000000026530 000000427930 0 address_not_available
000000026548 000000427948 0 address_family_not_supported
000000026568 000000427968 0 connection_already_in_progress
000000026588 000000427988 0 bad_file_descriptor
00000002659C 00000042799C 0 connection_aborted
0000000265B0 0000004279B0 0 connection_refused
0000000265C4 0000004279C4 0 connection_reset
0000000265D8 0000004279D8 0 destination_address_required
0000000265F8 0000004279F8 0 bad_address
000000026604 000000427A04 0 host_unreachable
000000026618 000000427A18 0 operation_in_progress
000000026630 000000427A30 0 interrupted
00000002663C 000000427A3C 0 invalid_argument
000000026650 000000427A50 0 already_connected
000000026664 000000427A64 0 too_many_files_open
000000026678 000000427A78 0 message_size
000000026688 000000427A88 0 filename_too_long
00000002669C 000000427A9C 0 network_down
0000000266AC 000000427AAC 0 network_reset
0000000266BC 000000427ABC 0 network_unreachable
0000000266D0 000000427AD0 0 no_buffer_space
0000000266E0 000000427AE0 0 no_protocol_option
0000000266F4 000000427AF4 0 not_connected
000000026704 000000427B04 0 not_a_socket
000000026714 000000427B14 0 operation_not_supported
00000002672C 000000427B2C 0 protocol_not_supported
000000026744 000000427B44 0 wrong_protocol_type
000000026758 000000427B58 0 timed_out
000000026764 000000427B64 0 operation_would_block
00000002677C 000000427B7C 0 address family not supported
00000002679C 000000427B9C 0 address in use
0000000267AC 000000427BAC 0 address not available
File pos Mem pos ID Text
======== ======= == ====
0000000267C4 000000427BC4 0 already connected
0000000267D8 000000427BD8 0 argument list too long
0000000267F0 000000427BF0 0 argument out of domain
000000026808 000000427C08 0 bad address
000000026814 000000427C14 0 bad file descriptor
000000026828 000000427C28 0 bad message
000000026834 000000427C34 0 broken pipe
000000026840 000000427C40 0 connection aborted
000000026854 000000427C54 0 connection already in progress
000000026874 000000427C74 0 connection refused
000000026888 000000427C88 0 connection reset
00000002689C 000000427C9C 0 destination address required
0000000268BC 000000427CBC 0 executable format error
0000000268D4 000000427CD4 0 file too large
0000000268E4 000000427CE4 0 host unreachable
0000000268F8 000000427CF8 0 identifier removed
00000002690C 000000427D0C 0 illegal byte sequence
000000026924 000000427D24 0 inappropriate io control operation
000000026948 000000427D48 0 invalid seek
000000026958 000000427D58 0 is a directory
000000026968 000000427D68 0 message size
000000026978 000000427D78 0 network down
000000026988 000000427D88 0 network reset
000000026998 000000427D98 0 network unreachable
0000000269AC 000000427DAC 0 no buffer space
0000000269BC 000000427DBC 0 no child process
0000000269D0 000000427DD0 0 no link
0000000269D8 000000427DD8 0 no message available
0000000269F0 000000427DF0 0 no message
0000000269FC 000000427DFC 0 no protocol option
000000026A10 000000427E10 0 no stream resources
000000026A24 000000427E24 0 no such device or address
000000026A40 000000427E40 0 no such process
000000026A50 000000427E50 0 not a directory
000000026A60 000000427E60 0 not a socket
000000026A70 000000427E70 0 not a stream
000000026A80 000000427E80 0 not connected
000000026A90 000000427E90 0 not supported
000000026AA0 000000427EA0 0 operation in progress
000000026AB8 000000427EB8 0 operation not permitted
000000026AD0 000000427ED0 0 operation not supported
000000026AE8 000000427EE8 0 operation would block
000000026B00 000000427F00 0 owner dead
000000026B0C 000000427F0C 0 protocol error
000000026B1C 000000427F1C 0 protocol not supported
000000026B34 000000427F34 0 read only file system
000000026B4C 000000427F4C 0 resource deadlock would occur
000000026B6C 000000427F6C 0 result out of range
000000026B80 000000427F80 0 state not recoverable
000000026B98 000000427F98 0 stream timeout
000000026BA8 000000427FA8 0 text file busy
000000026BB8 000000427FB8 0 timed out
000000026BC4 000000427FC4 0 too many files open in system
000000026BE4 000000427FE4 0 too many links
000000026BF4 000000427FF4 0 too many symbolic link levels
000000026C14 000000428014 0 value too large
000000026C24 000000428024 0 wrong protocol type
000000026CB4 0000004280B4 0 bad allocation
000000026E44 000000428244 0 0123456789abcdefghijklmnopqrstuvwxyz
000000026E94 000000428294 0 0123456789abcdefghijklmnopqrstuvwxyz
File pos Mem pos ID Text
======== ======= == ====
000000026EC8 0000004282C8 0
000000026F58 000000428358 0 0123456789abcdefABCDEF
000000027044 000000428444 0 Unknown exception
00000002707C 00000042847C 0 CorExitProcess
0000000270BC 0000004284BC 0 bad exception
000000027678 000000428A78 0 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]
0000000276B9 000000428AB9 0 abcdefghijklmnopqrstuvwxyz{|}~
0000000277F8 000000428BF8 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]
000000027839 000000428C39 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
0000000278F8 000000428CF8 0 FlsAlloc
000000027904 000000428D04 0 FlsFree
00000002790C 000000428D0C 0 FlsGetValue
000000027918 000000428D18 0 FlsSetValue
000000027924 000000428D24 0 InitializeCriticalSectionEx
000000027940 000000428D40 0 CreateSemaphoreExW
000000027954 000000428D54 0 SetThreadStackGuarantee
00000002796C 000000428D6C 0 CreateThreadpoolTimer
000000027984 000000428D84 0 SetThreadpoolTimer
000000027998 000000428D98 0 WaitForThreadpoolTimerCallbacks
0000000279B8 000000428DB8 0 CloseThreadpoolTimer
0000000279D0 000000428DD0 0 CreateThreadpoolWait
0000000279E8 000000428DE8 0 SetThreadpoolWait
0000000279FC 000000428DFC 0 CloseThreadpoolWait
000000027A10 000000428E10 0 FlushProcessWriteBuffers
000000027A2C 000000428E2C 0 FreeLibraryWhenCallbackReturns
000000027A4C 000000428E4C 0 GetCurrentProcessorNumber
000000027A68 000000428E68 0 GetLogicalProcessorInformation
000000027A88 000000428E88 0 CreateSymbolicLinkW
000000027A9C 000000428E9C 0 SetDefaultDllDirectories
000000027AB8 000000428EB8 0 EnumSystemLocalesEx
000000027ACC 000000428ECC 0 CompareStringEx
000000027ADC 000000428EDC 0 GetDateFormatEx
000000027AEC 000000428EEC 0 GetLocaleInfoEx
000000027AFC 000000428EFC 0 GetTimeFormatEx
000000027B0C 000000428F0C 0 GetUserDefaultLocaleName
000000027B28 000000428F28 0 IsValidLocaleName
000000027B3C 000000428F3C 0 LCMapStringEx
000000027B4C 000000428F4C 0 GetCurrentPackageId
00000002A71C 00000042BB1C 0 log10
00000002A754 00000042BB54 0 atan2
00000002A778 00000042BB78 0 floor
00000002A790 00000042BB90 0 ldexp
00000002A798 00000042BB98 0 _cabs
00000002A7A0 00000042BBA0 0 _hypot
00000002A7B0 00000042BBB0 0 frexp
00000002A7C4 00000042BBC4 0 _logb
00000002A7CC 00000042BBCC 0 _nextafter
00000002A7F4 00000042BBF4 0 Sunday
00000002A7FC 00000042BBFC 0 Monday
00000002A804 00000042BC04 0 Tuesday
00000002A80C 00000042BC0C 0 Wednesday
00000002A818 00000042BC18 0 Thursday
00000002A824 00000042BC24 0 Friday
00000002A82C 00000042BC2C 0 Saturday
00000002A868 00000042BC68 0 January
00000002A870 00000042BC70 0 February
00000002A87C 00000042BC7C 0 March
00000002A884 00000042BC84 0 April
00000002A89C 00000042BC9C 0 August
00000002A8A4 00000042BCA4 0 September
File pos Mem pos ID Text
======== ======= == ====
00000002A8B0 00000042BCB0 0 October
00000002A8B8 00000042BCB8 0 November
00000002A8C4 00000042BCC4 0 December
00000002A8D8 00000042BCD8 0 MM/dd/yy
00000002A8E4 00000042BCE4 0 dddd, MMMM dd, yyyy
00000002A8F8 00000042BCF8 0 HH:mm:ss
00000002AB28 00000042BF28 0 (null)
00000002AB61 00000042BF61 0 ( 8PX
00000002AB69 00000042BF69 0 700WP
00000002AB81 00000042BF81 0 xpxxxx
00000002ABA0 00000042BFA0 0 UTF-8
00000002ABA8 00000042BFA8 0 UTF-16LE
00000002ABB4 00000042BFB4 0 UNICODE
00000002ACB7 00000042C0B7 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]
00000002ACF8 00000042C0F8 0 abcdefghijklmnopqrstuvwxyz{|}~
00000002AD3C 00000042C13C 0 e+000
00000002ADC4 00000042C1C4 0 SunMonTueWedThuFriSat
00000002ADDC 00000042C1DC 0 JanFebMarAprMayJunJulAugSepOctNovDec
00000002AE1C 00000042C21C 0 MessageBoxW
00000002AE28 00000042C228 0 GetActiveWindow
00000002AE38 00000042C238 0 GetLastActivePopup
00000002AE4C 00000042C24C 0 GetUserObjectInformationW
00000002AE68 00000042C268 0 GetProcessWindowStation
00000002B008 00000042C408 0 __based(
00000002B014 00000042C414 0 __cdecl
00000002B01C 00000042C41C 0 __pascal
00000002B028 00000042C428 0 __stdcall
00000002B034 00000042C434 0 __thiscall
00000002B040 00000042C440 0 __fastcall
00000002B04C 00000042C44C 0 __clrcall
00000002B058 00000042C458 0 __eabi
00000002B060 00000042C460 0 __ptr64
00000002B068 00000042C468 0 __restrict
00000002B074 00000042C474 0 __unaligned
00000002B080 00000042C480 0 restrict(
00000002B094 00000042C494 0 delete
00000002B0B8 00000042C4B8 0 operator
00000002B139 00000042C539 0 vftable'
00000002B145 00000042C545 0 vbtable'
00000002B151 00000042C551 0 vcall'
00000002B159 00000042C559 0 typeof'
00000002B165 00000042C565 0 local static guard'
00000002B17D 00000042C57D 0 string'
00000002B189 00000042C589 0 vbase destructor'
00000002B19D 00000042C59D 0 vector deleting destructor'
00000002B1BD 00000042C5BD 0 default constructor closure'
00000002B1DD 00000042C5DD 0 scalar deleting destructor'
00000002B1FD 00000042C5FD 0 vector constructor iterator'
00000002B21D 00000042C61D 0 vector destructor iterator'
00000002B23D 00000042C63D 0 vector vbase constructor iterator'
00000002B261 00000042C661 0 virtual displacement map'
00000002B27D 00000042C67D 0 eh vector constructor iterator'
00000002B2A1 00000042C6A1 0 eh vector destructor iterator'
00000002B2C1 00000042C6C1 0 eh vector vbase constructor iterator'
00000002B2E9 00000042C6E9 0 copy constructor closure'
00000002B305 00000042C705 0 udt returning'
00000002B321 00000042C721 0 local vftable'
00000002B331 00000042C731 0 local vftable constructor closure'
00000002B354 00000042C754 0 new[]
00000002B35C 00000042C75C 0 delete[]
File pos Mem pos ID Text
======== ======= == ====
00000002B369 00000042C769 0 omni callsig'
00000002B379 00000042C779 0 placement delete closure'
00000002B395 00000042C795 0 placement delete[] closure'
00000002B3B5 00000042C7B5 0 managed vector constructor iterator'
00000002B3DD 00000042C7DD 0 managed vector destructor iterator'
00000002B405 00000042C805 0 eh vector copy constructor iterator'
00000002B42D 00000042C82D 0 eh vector vbase copy constructor iterator'
00000002B459 00000042C859 0 dynamic initializer for '
00000002B475 00000042C875 0 dynamic atexit destructor for '
00000002B499 00000042C899 0 vector copy constructor iterator'
00000002B4BD 00000042C8BD 0 vector vbase copy constructor iterator'
00000002B4E9 00000042C8E9 0 managed vector copy constructor iterator'
00000002B515 00000042C915 0 local static thread guard'
00000002B530 00000042C930 0 Type Descriptor'
00000002B544 00000042C944 0 Base Class Descriptor at (
00000002B560 00000042C960 0 Base Class Array'
00000002B574 00000042C974 0 Class Hierarchy Descriptor'
00000002B594 00000042C994 0 Complete Object Locator'
00000002B5D5 00000042C9D5 0 ('8PW
00000002B5DE 00000042C9DE 0 700PP
00000002B5F9 00000042C9F9 0 xppwpp
00000002C3C0 00000042D7C0 0 CreateFile2
00000002C3DC 00000042D7DC 0 1#SNAN
00000002C3E4 00000042D7E4 0 1#IND
00000002C3EC 00000042D7EC 0 1#INF
00000002C3F4 00000042D7F4 0 1#QNAN
00000002C3FC 00000042D7FC 0 generic
00000002C404 00000042D804 0 unknown error
00000002C414 00000042D814 0 iostream
00000002C420 00000042D820 0 iostream stream error
00000002C438 00000042D838 0 system
00000002C440 00000042D840 0 ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/
00000002C484 00000042D884 0 string too long
00000002C494 00000042D894 0 invalid string position
00000002C4AC 00000042D8AC 0 bad locale name
00000002C4BC 00000042D8BC 0 false
00000002C4CC 00000042D8CC 0 ios_base::badbit set
00000002C4E4 00000042D8E4 0 ios_base::failbit set
00000002C4FC 00000042D8FC 0 ios_base::eofbit set
00000002C558 00000042D958 0 .DEFAULT\XFS\LOGICAL_SERVICES\
00000002C578 00000042D978 0 class
00000002C584 00000042D984 0 vector<T> too long
00000002C598 00000042D998 0 bad cast
00000002C5A8 00000042D9A8 0 Press 1 to dispense money, 8 to permanently delete, 88 to force delete or 9 to pause
00000002C60C 00000042DA0C 0 Bills left:
00000002C61C 00000042DA1C 0 time(s)
00000002C628 00000042DA28 0 Wrong key. Tried:
00000002C63C 00000042DA3C 0 Enter second key. Press 9 to pause, 8 to permanently delete
00000002C680 00000042DA80 0 del.exe
00000002C690 00000042DA90 0 " /accepteula -p 3 -q "
00000002C6AB 00000042DAAB 0 shutdown -t 0 -r -f
00000002C6C0 00000042DAC0 0 del "%~f0"
00000002C6CF 00000042DACF 0 del "
00000002C6DA 00000042DADA 0 del "
00000002C6E0 00000042DAE0 0 ">NUL
00000002C6E7 00000042DAE7 0 if "%ERRORLEVEL%"=="0" goto start
00000002C70C 00000042DB0C 0 " 2>NUL | find /I /N "
00000002C724 00000042DB24 0 :start
00000002C72C 00000042DB2C 0 tasklist /FI "IMAGENAME eq
00000002C748 00000042DB48 0 del.bat
File pos Mem pos ID Text
======== ======= == ====
00000002C754 00000042DB54 0 cmd.exe /C "
00000002C764 00000042DB64 0 cmd.exe
00000002C784 00000042DB84 0 ERROR
00000002D650 00000042EA50 0 Blocking operation in progress
00000002D670 00000042EA70 0 No blocking operation in progress
00000002D694 00000042EA94 0 Device WFS_ERR_OP_IN_PROGRESS
00000002D6B4 00000042EAB4 0 pinpad is busy
00000002D6C4 00000042EAC4 0 pinpad not busy
00000002D6F0 00000042EAF0 0 Pinpad1
00000002D6F8 00000042EAF8 0 Failed to open registry
00000002D7DB 00000042EBDB 0 raB3G
00000002F862 000000430C62 0 GetCurrentProcess
00000002F876 000000430C76 0 Sleep
00000002F87E 000000430C7E 0 GetCurrentThreadId
00000002F894 000000430C94 0 CloseHandle
00000002F8A2 000000430CA2 0 GetCurrentProcessId
00000002F8B8 000000430CB8 0 GetModuleFileNameA
00000002F8CE 000000430CCE 0 GetLastError
00000002F8DE 000000430CDE 0 GetVolumeInformationW
00000002F8F6 000000430CF6 0 CreateMutexW
00000002F906 000000430D06 0 GetModuleFileNameW
00000002F91C 000000430D1C 0 OpenMutexW
00000002F92A 000000430D2A 0 SetLastError
00000002F93A 000000430D3A 0 GetSystemTime
00000002F94A 000000430D4A 0 CreateThread
00000002F958 000000430D58 0 KERNEL32.dll
00000002F968 000000430D68 0 ShowWindow
00000002F976 000000430D76 0 SetThreadDesktop
00000002F98A 000000430D8A 0 SwitchDesktop
00000002F99A 000000430D9A 0 CloseDesktop
00000002F9AA 000000430DAA 0 OpenInputDesktop
00000002F9BE 000000430DBE 0 CreateDesktopW
00000002F9D0 000000430DD0 0 DispatchMessageW
00000002F9E4 000000430DE4 0 TranslateMessage
00000002F9F8 000000430DF8 0 GetMessageW
00000002FA06 000000430E06 0 DefWindowProcW
00000002FA18 000000430E18 0 SendMessageW
00000002FA28 000000430E28 0 GetSystemMetrics
00000002FA3C 000000430E3C 0 CreateWindowExW
00000002FA4E 000000430E4E 0 SetWindowLongW
00000002FA60 000000430E60 0 ReleaseDC
00000002FA6C 000000430E6C 0 GetWindowLongW
00000002FA7E 000000430E7E 0 InvalidateRect
00000002FA90 000000430E90 0 LoadIconW
00000002FA9C 000000430E9C 0 RegisterClassExW
00000002FAB0 000000430EB0 0 BeginPaint
00000002FABE 000000430EBE 0 LoadCursorW
00000002FACC 000000430ECC 0 DrawTextA
00000002FAD8 000000430ED8 0 DrawTextW
00000002FAE4 000000430EE4 0 FillRect
00000002FAF0 000000430EF0 0 PostQuitMessage
00000002FB02 000000430F02 0 DestroyWindow
00000002FB12 000000430F12 0 EndPaint
00000002FB1C 000000430F1C 0 USER32.dll
00000002FB2A 000000430F2A 0 CreateSolidBrush
00000002FB3E 000000430F3E 0 GetObjectW
00000002FB4C 000000430F4C 0 SetDIBits
00000002FB58 000000430F58 0 CreateFontW
00000002FB66 000000430F66 0 CreateCompatibleDC
00000002FB7C 000000430F7C 0 SelectObject
File pos Mem pos ID Text
======== ======= == ====
00000002FB8C 000000430F8C 0 DeleteObject
00000002FB9C 000000430F9C 0 SetBkMode
00000002FBA8 000000430FA8 0 SetBkColor
00000002FBB6 000000430FB6 0 CreateDIBSection
00000002FBCA 000000430FCA 0 DeleteDC
00000002FBD6 000000430FD6 0 SetTextColor
00000002FBE6 000000430FE6 0 BitBlt
00000002FBEE 000000430FEE 0 GDI32.dll
00000002FBFA 000000430FFA 0 RegQueryValueExA
00000002FC0E 00000043100E 0 RegEnumKeyExA
00000002FC1E 00000043101E 0 RegOpenKeyExA
00000002FC2E 00000043102E 0 RegOpenKeyExW
00000002FC3E 00000043103E 0 RegCloseKey
00000002FC4C 00000043104C 0 CryptAcquireContextW
00000002FC64 000000431064 0 CryptSetKeyParam
00000002FC78 000000431078 0 CryptReleaseContext
00000002FC8E 00000043108E 0 CryptGenRandom
00000002FCA0 0000004310A0 0 CryptImportKey
00000002FCB2 0000004310B2 0 CryptEncrypt
00000002FCC2 0000004310C2 0 CryptDestroyKey
00000002FCD2 0000004310D2 0 ADVAPI32.dll
00000002FCE2 0000004310E2 0 ShellExecuteA
00000002FCF0 0000004310F0 0 SHELL32.dll
00000002FCFE 0000004310FE 0 WFSGetInfo
00000002FD0C 00000043110C 0 WFSFreeResult
00000002FD1C 00000043111C 0 WFSOpen
00000002FD26 000000431126 0 WFSClose
00000002FD32 000000431132 0 WFSExecute
00000002FD40 000000431140 0 WFSStartUp
00000002FD4E 00000043114E 0 WFSIsBlocking
00000002FD5C 00000043115C 0 MSXFS.dll
00000002FD68 000000431168 0 PathRemoveFileSpecA
00000002FD7E 00000043117E 0 PathAppendA
00000002FD8C 00000043118C 0 PathFindFileNameA
00000002FD9E 00000043119E 0 SHLWAPI.dll
00000002FDAC 0000004311AC 0 WideCharToMultiByte
00000002FDC2 0000004311C2 0 InterlockedIncrement
00000002FDDA 0000004311DA 0 InterlockedDecrement
00000002FDF2 0000004311F2 0 EncodePointer
00000002FE02 000000431202 0 DecodePointer
00000002FE12 000000431212 0 EnterCriticalSection
00000002FE2A 00000043122A 0 LeaveCriticalSection
00000002FE42 000000431242 0 DeleteCriticalSection
00000002FE5A 00000043125A 0 MultiByteToWideChar
00000002FE70 000000431270 0 GetStringTypeW
00000002FE82 000000431282 0 IsDebuggerPresent
00000002FE96 000000431296 0 IsProcessorFeaturePresent
00000002FEB2 0000004312B2 0 GetProcAddress
00000002FEC4 0000004312C4 0 LoadLibraryExW
00000002FED6 0000004312D6 0 HeapFree
00000002FEE2 0000004312E2 0 HeapAlloc
00000002FEEE 0000004312EE 0 ExitProcess
00000002FEFC 0000004312FC 0 GetModuleHandleExW
00000002FF12 000000431312 0 AreFileApisANSI
00000002FF24 000000431324 0 GetCommandLineA
00000002FF36 000000431336 0 RaiseException
00000002FF48 000000431348 0 RtlUnwind
00000002FF54 000000431354 0 GetCPInfo
00000002FF60 000000431360 0 InitializeCriticalSectionAndSpinCount
00000002FF88 000000431388 0 UnhandledExceptionFilter
File pos Mem pos ID Text
======== ======= == ====
00000002FFA4 0000004313A4 0 SetUnhandledExceptionFilter
00000002FFC2 0000004313C2 0 TerminateProcess
00000002FFD6 0000004313D6 0 TlsAlloc
00000002FFE2 0000004313E2 0 TlsGetValue
00000002FFF0 0000004313F0 0 TlsSetValue
00000002FFFE 0000004313FE 0 TlsFree
000000030008 000000431408 0 GetStartupInfoW
00000003001A 00000043141A 0 GetModuleHandleW
00000003002E 00000043142E 0 LCMapStringW
00000003003E 00000043143E 0 GetLocaleInfoW
000000030050 000000431450 0 IsValidLocale
000000030060 000000431460 0 GetUserDefaultLCID
000000030076 000000431476 0 EnumSystemLocalesW
00000003008C 00000043148C 0 HeapSize
000000030098 000000431498 0 GetStdHandle
0000000300A8 0000004314A8 0 WriteFile
0000000300B4 0000004314B4 0 GetProcessHeap
0000000300C6 0000004314C6 0 GetConsoleCP
0000000300D6 0000004314D6 0 GetConsoleMode
0000000300E8 0000004314E8 0 IsValidCodePage
0000000300FA 0000004314FA 0 GetACP
000000030104 000000431504 0 GetOEMCP
000000030110 000000431510 0 GetFileType
00000003011E 00000043151E 0 QueryPerformanceCounter
000000030138 000000431538 0 GetSystemTimeAsFileTime
000000030152 000000431552 0 GetEnvironmentStringsW
00000003016C 00000043156C 0 FreeEnvironmentStringsW
000000030186 000000431586 0 FlushFileBuffers
00000003019A 00000043159A 0 ReadFile
0000000301A6 0000004315A6 0 SetFilePointerEx
0000000301BA 0000004315BA 0 HeapReAlloc
0000000301C8 0000004315C8 0 OutputDebugStringW
0000000301DE 0000004315DE 0 LoadLibraryW
0000000301EE 0000004315EE 0 SetStdHandle
0000000301FE 0000004315FE 0 WriteConsoleW
00000003020E 00000043160E 0 ReadConsoleW
00000003021E 00000043161E 0 CreateFileW
00000003022C 00000043162C 0 SetEndOfFile
000000030408 000000432008 0 .?AVbad_alloc@std@@
000000030424 000000432024 0 .?AVlogic_error@std@@
000000030444 000000432044 0 .?AVlength_error@std@@
000000030464 000000432064 0 .?AVout_of_range@std@@
000000030484 000000432084 0 .?AV_Locimp@locale@std@@
0000000304A8 0000004320A8 0 .?AVios_base@std@@
0000000304C4 0000004320C4 0 .?AV?$_Iosb@H@std@@
0000000304E0 0000004320E0 0 .?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
000000030518 000000432118 0 .?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
000000030554 000000432154 0 .?AV?$basic_istream@DU?$char_traits@D@std@@@std@@
000000030590 000000432190 0 .?AV?$basic_filebuf@DU?$char_traits@D@std@@@std@@
0000000305CC 0000004321CC 0 .?AVcodecvt_base@std@@
0000000305EC 0000004321EC 0 .?AV?$codecvt@DDH@std@@
000000030610 000000432210 0 .?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@
000000030650 000000432250 0 Copyright (c) 1992-2004 by P.J. Plauger, licensed by Dinkumware, Ltd. ALL RIGHTS RESERVED.
000000030808 000000432408 0 .?AVtype_info@@
000000030D98 000000432998 0 .?AVbad_exception@std@@
0000000312F2 000000432EF2 0
0000000313D9 000000432FD9 0 abcdefghijklmnopqrstuvwxyz
0000000313F9 000000432FF9 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ
000000031512 000000433112 0
0000000315F2 0000004331F2 0 abcdefghijklmnopqrstuvwxyz
File pos Mem pos ID Text
======== ======= == ====
000000031612 000000433212 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ
000000031B7E 00000043377E 0 z?aUY
000000031BC0 0000004337C0 0 zc%C1
000000031C13 000000433813 0 -64OS
000000031C58 000000433858 0 .?AV_Iostream_error_category@std@@
000000031C84 000000433884 0 .?AV_System_error_category@std@@
000000031CB0 0000004338B0 0 .?AVerror_category@std@@
000000031CD4 0000004338D4 0 .?AV_Generic_error_category@std@@
000000031D00 000000433900 0 .?AVsystem_error@std@@
000000031D20 000000433920 0 .?AVbad_cast@std@@
000000031D3C 00000043393C 0 .?AVexception@std@@
000000031D58 000000433958 0 .?AVfailure@ios_base@std@@
000000031D7C 00000043397C 0 .?AVruntime_error@std@@
000000031D9C 00000043399C 0 .?AV?$ctype@D@std@@
000000031DB8 0000004339B8 0 .?AV?$numpunct@D@std@@
000000031DD8 0000004339D8 0 .?AV_Facet_base@std@@
000000031DF8 0000004339F8 0 .?AUctype_base@std@@
000000031E18 000000433A18 0 .?AVfacet@locale@std@@
000000031E7D 000000433A7D 0 !This program cannot be run in DOS mode.
000000031EF7 000000433AF7 0 oRich
000000032010 000000433C10 0 .text
000000032038 000000433C38 0 .rdata
00000003205F 000000433C5F 0 @.data
000000032088 000000433C88 0 .rsrc
0000000322B3 000000433EB3 0 L$hjXQ
0000000322BE 000000433EBE 0 T$hjZR
000000032616 000000434216 0 T$ RV
000000032AB6 0000004346B6 0 9+~W3
000000032EAC 000000434AAC 0 t$895
000000032F30 000000434B30 0 t$,9u
000000032FD2 000000434BD2 0 T$(RWQS
000000032FFA 000000434BFA 0 D$,;E
00000003302D 000000434C2D 0 t$8;5
000000033060 000000434C60 0 D$HPj
000000033085 000000434C85 0 L$ QW
00000003308B 000000434C8B 0 T$TRS
0000000330AD 000000434CAD 0 D$HPQS
000000033114 000000434D14 0 L$ QWRS
000000033130 000000434D30 0 |$$)|$
000000033328 000000434F28 0 L$ QU
00000003338E 000000434F8E 0 L$ Qh
0000000334CD 0000004350CD 0 T$0Rj
0000000334DE 0000004350DE 0 L$8Qj
0000000335BF 0000004351BF 0 L$$QPU
000000033608 000000435208 0 ;D$,r
0000000337C7 0000004353C7 0 T$ RV
000000033821 000000435421 0 T$ Rh
0000000338AE 0000004354AE 0 WhL B
000000033F27 000000435B27 0 \$<t&h
000000034073 000000435C73 0 L$8QV
0000000340B4 000000435CB4 0 T$0;T$ u
0000000340BE 000000435CBE 0 D$4;D$$
000000034168 000000435D68 0 L$PQSSj
000000034171 000000435D71 0 T$XRh@
0000000341F1 000000435DF1 0 L$,QRP
00000003436F 000000435F6F 0 tdWVU
0000000343B7 000000435FB7 0 LtXQh
000000034910 000000436510 0 D$ Ph
0000000352E8 000000436EE8 0 SSSSS
00000003556A 00000043716A 0 VVVVV
File pos Mem pos ID Text
======== ======= == ====
0000000355A1 0000004371A1 0 VVVVV
0000000355F9 0000004371F9 0 CCGG
000000035675 000000437275 0 VVVVV
0000000356BC 0000004372BC 0 GGBB
000000035761 000000437361 0 VVVVV
0000000358EB 0000004374EB 0 VVVVV
000000035ABE 0000004376BE 0 ~,WPV
000000035F9B 000000437B9B 0 VVVVV
000000035FD7 000000437BD7 0 VVVVV
00000003682C 00000043842C 0 VVVVV
000000036873 000000438473 0 VVVVV
0000000374AE 0000004390AE 0 VVVVV
0000000374F2 0000004390F2 0 VVVVV
000000037B80 000000439780 0 VVVVV
000000037BC4 0000004397C4 0 PPPPP
000000037C07 000000439807 0 VVVVV
000000037C2B 00000043982B 0 VVVVV
000000037C50 000000439850 0 VVVVV
000000037DC3 0000004399C3 0 PPPPP
000000037E13 000000439A13 0 PPPPP
000000038D96 00000043A996 0 PPPPP
000000038F89 00000043AB89 0 PPPPP
000000038FB7 00000043ABB7 0 SSSSS
000000039075 00000043AC75 0 VVVVV
00000003913E 00000043AD3E 0 SSSSS
00000003916E 00000043AD6E 0 SSSSS
000000039286 00000043AE86 0 VVVVV
0000000392EB 00000043AEEB 0 VVVVV
00000003932E 00000043AF2E 0 SSSSS
000000039396 00000043AF96 0 @PVhc
000000039413 00000043B013 0 SSSSS
000000039A4F 00000043B64F 0 0A@@Ju
00000003A051 00000043BC51 0 VVVVV
00000003A285 00000043BE85 0 SSSSS
00000003A2E9 00000043BEE9 0 SSSSS
00000003A382 00000043BF82 0 PPPPP
00000003A3E2 00000043BFE2 0 SSSSS
00000003A4AD 00000043C0AD 0 PPPPP
00000003A653 00000043C253 0 VVVVV
00000003A755 00000043C355 0 VVVVV
00000003A7B8 00000043C3B8 0 VVVVV
00000003A8EC 00000043C4EC 0 PPPPP
00000003AC14 00000043C814 0 VVVVV
00000003AC75 00000043C875 0 vSSSh
00000003AE1D 00000043CA1D 0 SSSSS
00000003B7A3 00000043D3A3 0 WWWWW
00000003B9DD 00000043D5DD 0 PPPPP
00000003BAAB 00000043D6AB 0 , <Xw
00000003BB29 00000043D729 0 t%HHt
00000003BD68 00000043D968 0 HHtXHHt
00000003BE58 00000043DA58 0 HHty+
00000003C2C5 00000043DEC5 0 >If90t
00000003C52F 00000043E12F 0 WWWWW
00000003C685 00000043E285 0 VVVVV
00000003C6F0 00000043E2F0 0 VVVVV
00000003CDBA 00000043E9BA 0 WWWWW
00000003CE5B 00000043EA5B 0 VVVVV
00000003CEB9 00000043EAB9 0 SSSSS
00000003D00B 00000043EC0B 0 [j@j
00000003D067 00000043EC67 0 9=dkB
File pos Mem pos ID Text
======== ======= == ====
00000003D212 00000043EE12 0 ;54hB
00000003DAE5 00000043F6E5 0 9~\u'
00000003DC8E 00000043F88E 0 PPPPP
00000003DD28 00000043F928 0 PPPPP
00000003DE89 00000043FA89 0 _VVVVV
00000003DEC4 00000043FAC4 0 _VVVVV
00000003DF02 00000043FB02 0 VVVVV
00000003DF2A 00000043FB2A 0 VhPhB
00000003E07F 00000043FC7F 0 SSSSS
00000003E194 00000043FD94 0 SSSSS
00000003E203 00000043FE03 0 7GG9]
00000003E27C 00000043FE7C 0 u)jAXf;
00000003E41F 00000044001F 0 VVVVV
00000003E53D 00000044013D 0 u)jAXf;
00000003E7EA 0000004403EA 0 >=Yt1j
00000003E7FD 0000004403FD 0 tPVWP
00000003E810 000000440410 0 PPPPP
00000003E9CB 0000004405CB 0 QQSVWh
00000003EEE7 000000440AE7 0 URPQQh8
00000003F1B5 000000440DB5 0 0SSSSS
00000003F23E 000000440E3E 0 0SSSSS
00000003F36C 000000440F6C 0 0SSSSS
00000003F3E5 000000440FE5 0 VVVVV
00000003F4F1 0000004410F1 0 WWWWW
00000003F532 000000441132 0 WWWWW
00000003F62A 00000044122A 0 VVVVV
00000003F80C 00000044140C 0 VVVVV
00000003FCFB 0000004418FB 0 v N+D$
00000003FD89 000000441989 0 ji_jdZf;
00000003FDAE 0000004419AE 0 Xt"f;
00000003FDD0 0000004419D0 0 Xupf;
00000003FF9C 000000441B9C 0 SSSSS
00000004090A 00000044250A 0 VVVVV
000000040F02 000000442B02 0 Kf90t
000000041119 000000442D19 0 It.It+It!It
000000041125 000000442D25 0 It"IIuQ
00000004118A 000000442D8A 0 PPPPP
000000041199 000000442D99 0 SSSSS
00000004130B 000000442F0B 0 PPPPP
000000041EA6 000000443AA6 0 u8SS3
000000041F3E 000000443B3E 0 9]$SS
000000042085 000000443C85 0 t"SS9]
0000000422FE 000000443EFE 0 9] SS
0000000424C7 0000004440C7 0 Pj1Q3
000000042559 000000444159 0 F Pj*
000000042571 000000444171 0 F$Pj+
000000042586 000000444186 0 F(Pj,
00000004259B 00000044419B 0 F,Pj-
0000000425B0 0000004441B0 0 F0Pj.
0000000425C8 0000004441C8 0 F4Pj/
0000000425F2 0000004441F2 0 F8PjD
000000042607 000000444207 0 F<PjE
00000004261F 00000044421F 0 F@PjF
000000042634 000000444234 0 FDPjG
000000042649 000000444249 0 FHPjH
00000004265E 00000044425E 0 FLPjI
000000042676 000000444276 0 FPPjJ
00000004268B 00000044428B 0 FTPjK
0000000426A0 0000004442A0 0 FXPjL
0000000426B5 0000004442B5 0 F\PjM
File pos Mem pos ID Text
======== ======= == ====
0000000426E2 0000004442E2 0 FdPjO
0000000426F7 0000004442F7 0 FhPj8
00000004270C 00000044430C 0 FlPj9
000000042724 000000444324 0 FpPj:
000000042739 000000444339 0 FtPj;
00000004274E 00000044434E 0 FxPj<
000000042763 000000444363 0 F|Pj=
000000042DB4 0000004449B4 0 v$;5\
000000042EC5 000000444AC5 0 C PjPV
000000042ED9 000000444AD9 0 C$PjQV
000000042F18 000000444B18 0 C*PjTV
000000042F2C 000000444B2C 0 C+PjUV
000000042F40 000000444B40 0 C,PjVV
000000042F57 000000444B57 0 C-PjWV
000000042F6B 000000444B6B 0 C.PjRV
000000042F7F 000000444B7F 0 C/PjSV
00000004320A 000000444E0A 0 QW@Ph
00000004357A 00000044517A 0 PPPPP
0000000435B3 0000004451B3 0 PPPPP
000000043689 000000445289 0 PPPPP
0000000436BD 0000004452BD 0 PPPPP
000000043830 000000445430 0 PPPPP
000000043869 000000445469 0 PPPPP
0000000438C9 0000004454C9 0 PPPPP
000000043902 000000445502 0 PPPPP
00000004394A 00000044554A 0 PPPPP
000000043984 000000445584 0 PPPPP
0000000439BE 0000004455BE 0 PPPPP
0000000439F8 0000004455F8 0 PPPPP
000000043A32 000000445632 0 PPPPP
000000043AFA 0000004456FA 0 .;1s(N
000000043B75 000000445775 0 tIHt$
000000043C34 000000445834 0 HHt4HHt
000000043D2B 00000044592B 0 Ht\Ht,
000000043E0A 000000445A0A 0 WWWWW
000000043E51 000000445A51 0 teHtFHt&Hu
0000000443A1 000000445FA1 0 SSSSS
0000000443D4 000000445FD4 0 SSSSS
00000004442A 00000044602A 0 ty<%tA
00000004449D 00000044609D 0 tBF9]
0000000444F4 0000004460F4 0 SSSSS
0000000445A6 0000004461A6 0 PPPPPPPP
00000004470A 00000044630A 0 tNh,0B
00000004471B 00000044631B 0 t=h(0B
000000044CEE 0000004468EE 0 Vj@hP-B
000000044DF9 0000004469F9 0 u%h00B
000000044E11 000000446A11 0 PPPPP
00000004641B 00000044801B 0 0;1t|
000000047B26 000000449726 0 PPPPPPPP
000000047D64 000000449964 0 SSSSS
000000047DE2 0000004499E2 0 SSSSS
000000047E2D 000000449A2D 0 QSWVj
000000048049 000000449C49 0 PPPPP
0000000481AB 000000449DAB 0 t$HHt
0000000483EC 000000449FEC 0 HHtYHHt
0000000484DD 00000044A0DD 0 HHty+
000000048BF6 00000044A7F6 0 tM<it-<ot)<ut%<xt!<Xt
000000048DF8 00000044A9F8 0 WWWWW
000000048F25 00000044AB25 0 , <Xw
000000048F90 00000044AB90 0 8$u%9
File pos Mem pos ID Text
======== ======= == ====
0000000490C0 00000044ACC0 0 t%HHt
000000049347 00000044AF47 0 <dty<itu<otq<utm<xti<Xte
000000049D7A 00000044B97A 0 HIf98t
00000004A13B 00000044BD3B 0 VVVVV
00000004A27F 00000044BE7F 0 VW|[;
00000004A352 00000044BF52 0 VVVVV
00000004A715 00000044C315 0 WWWWW
00000004A876 00000044C476 0 wIVSP
00000004AA3F 00000044C63F 0 SSSSS
00000004AAB3 00000044C6B3 0 WWWWW
00000004AB3C 00000044C73C 0 WWWWW
00000004ABB4 00000044C7B4 0 WWWWW
00000004B421 00000044D021 0 u,VVWV
00000004B4E9 00000044D0E9 0 t VV9u
00000004B773 00000044D373 0 0WWWWW
00000004B79E 00000044D39E 0 AAFFf;
00000004B7DF 00000044D3DF 0 SVWUj
00000004B880 00000044D480 0 ;t$,v-
00000004B905 00000044D505 0 UQPXY]Y[
00000004BC16 00000044D816 0 WWWWV
00000004BC39 00000044D839 0 t+WWVPV
00000004BCD0 00000044D8D0 0 VVVVV
00000004BD09 00000044D909 0 VVVVV
00000004BD42 00000044D942 0 VVVVV
00000004BD9E 00000044D99E 0 SSSSS
00000004BDBE 00000044D9BE 0 SSSSS
00000004BE56 00000044DA56 0 j,hH7B
00000004BE97 00000044DA97 0 SSSSS
00000004BEB2 00000044DAB2 0 SSSSS
00000004BECD 00000044DACD 0 SSSSS
00000004BF75 00000044DB75 0 SSSSS
00000004C0BF 00000044DCBF 0 SSSSS
00000004C10C 00000044DD0C 0 >:u8FV
00000004C16E 00000044DD6E 0 SSSSS
00000004C217 00000044DE17 0 jd_Fj
00000004C33F 00000044DF3F 0 PPPPP
00000004C3AF 00000044DFAF 0 VVVVV
00000004C3E3 00000044DFE3 0 95DkB
00000004C40D 00000044E00D 0 Pf950kB
00000004C433 00000044E033 0 PVVRV
00000004C4CF 00000044E0CF 0 VVVVVQRSSj
00000004C4E3 00000044E0E3 0 VVVVV
00000004C579 00000044E179 0 95LkB
00000004C58C 00000044E18C 0 95LkB
00000004C68C 00000044E28C 0 SSSSS
00000004C6C2 00000044E2C2 0 SSSSS
00000004C75B 00000044E35B 0 VVVVV
00000004C832 00000044E432 0 SSSSS
00000004C871 00000044E471 0 SSSSS
00000004C913 00000044E513 0 VVVVV
00000004C96F 00000044E56F 0 SSSSS
00000004C993 00000044E593 0 SSSSS
00000004CAB8 00000044E6B8 0 0SSSSS
00000004CC78 00000044E878 0 WWWWW
00000004D062 00000044EC62 0 WWWWW
00000004D299 00000044EE99 0 SSSSS
00000004D303 00000044EF03 0 SSSSS
00000004D32D 00000044EF2D 0 WWWWW
00000004D39F 00000044EF9F 0 WWWWW
00000004D3E0 00000044EFE0 0 VVVVV
File pos Mem pos ID Text
======== ======= == ====
00000004D46E 00000044F06E 0 0SSSSS
00000004D4E8 00000044F0E8 0 SSSSS
00000004D546 00000044F146 0 8VVVVV
00000004D5C5 00000044F1C5 0 VVVVV
00000004D776 00000044F376 0 SSSSS
00000004DB1B 00000044F71B 0 SSSSS
00000004DB58 00000044F758 0 SSSSS
00000004DBEE 00000044F7EE 0 QQSV3
00000004DC0A 00000044F80A 0 VVVVj
00000004DD1F 00000044F91F 0 9=PkB
00000004DF16 00000044FB16 0 t{~Bj
00000004E0E7 00000044FCE7 0 SSSSS
00000004E124 00000044FD24 0 SSSSS
00000004E296 00000044FE96 0 SSSSS
00000004E2B7 00000044FEB7 0 tSj=V
00000004E442 000000450042 0 @Y@PW
00000004E453 000000450053 0 SSSSS
00000004E504 000000450104 0 SSSSS
00000004E53E 00000045013E 0 SSSSS
00000004EC90 000000450890 0 \pard\lang1033\b0\fs20\par
00000004ECB0 0000004508B0 0 \b EFFET JURIDIQUE.\b0 Le pr\'e9sent contrat d\'e9crit certains droits juridiques. Vous pourriez avoir d'autres droits pr\'e9vus par les lois de votre pays. Le pr\'e9sent contrat ne modifie pas les droits que vous conf\'e8rent les lois de votre pays si celles-ci ne le permettent pas.\b\par
00000004EDD8 0000004509D8 0 \pard\sb120\sa120 Elle s'applique \'e9galement, m\'eame si Sysinternals connaissait ou devrait conna\'eetre l'\'e9ventualit\'e9 d'un tel dommage. Si votre pays n'autorise pas l'exclusion ou la limitation de responsabilit\'e9 pour les dommages indirects, accessoires ou de quelque nature que ce soit, il se peut que la limitation ou l'exclusion ci-dessus ne s'appliquera pas \'e0 votre \'e9gard.\par
00000004EF68 000000450B68 0 \pard\fi-363\li720\sb120\sa120\tx720\'b7\tab les r\'e9clamations au titre de violation de contrat ou de garantie, ou au titre de responsabilit\'e9 stricte, de n\'e9gligence ou d'une autre faute dans la limite autoris\'e9e par la loi en vigueur.\par
00000004F068 000000450C68 0 \pard\keepn\fi-360\li720\sb120\sa120\tx720\lang1036\'b7\tab tout ce qui est reli\'e9 au logiciel, aux services ou au contenu (y compris le code) figurant sur des sites Internet tiers ou dans des programmes tiers ; et\par
00000004F148 000000450D48 0 \lang1033 Cette limitation concerne :\par
00000004F178 000000450D78 0 \pard\keepn\sb120\sa120\b LIMITATION DES DOMMAGES-INT\'c9R\'caTS ET EXCLUSION DE RESPONSABILIT\'c9 POUR LES DOMMAGES.\b0 Vous pouvez obtenir de Sysinternals et de ses fournisseurs une indemnisation en cas de dommages directs uniquement \'e0 hauteur de 5,00 $ US. Vous ne pouvez pr\'e9tendre \'e0 aucune indemnisation pour les autres dommages, y compris les dommages sp\'e9ciaux, indirects ou accessoires et pertes de b\'e9n\'e9fices.\par
00000004F330 000000450F30 0 \pard\sb120\sa120 EXON\'c9RATION DE GARANTIE.\b0 Le logiciel vis\'e9 par une licence est offert \'ab tel quel \'bb. Toute utilisation de ce logiciel est \'e0 votre seule risque et p\'e9ril. Sysinternals n'accorde aucune autre garantie expresse. Vous pouvez b\'e9n\'e9ficier de droits additionnels en vertu du droit local sur la protection dues consommateurs, que ce contrat ne peut modifier. La ou elles sont permises par le droit locale, les garanties implicites de qualit\'e9 marchande, d'ad\'e9quation \'e0 un usage particulier et d'absence de contrefa\'e7on sont exclues.\par
00000004F578 000000451178 0 \pard\sb240\lang1036 Remarque : Ce logiciel \'e9tant distribu\'e9 au Qu\'e9bec, Canada, certaines des clauses dans ce contrat sont fournies ci-dessous en fran\'e7ais.\par
00000004F628 000000451228 0 \pard\b Please note: As this software is distributed in Quebec, Canada, some of the clauses in this agreement are provided below in French.\par
00000004F6B8 0000004512B8 0 \pard\li360\sb120\sa120 It also applies even if Sysinternals knew or should have known about the possibility of the damages. The above limitation or exclusion may not apply to you because your country may not allow the exclusion or limitation of incidental, consequential or other damages.\par
00000004F7E0 0000004513E0 0 \pard\fi-363\li720\sb120\sa120\'b7\tab claims for breach of contract, breach of warranty, guarantee or condition, strict liability, negligence, or other tort to the extent permitted by applicable law.\par
00000004F8B0 0000004514B0 0 \pard\fi-363\li720\sb120\sa120\tx720\'b7\tab anything related to the software, services, content (including code) on third party Internet sites, or third party programs; and\par
00000004F968 000000451568 0 \pard\li357\sb120\sa120\b0\caps0 This limitation applies to\par
00000004F9A8 0000004515A8 0 \pard\fi-360\li360\sb120\sa120\tx360\fs20 10.\tab\fs19 Limitation on and Exclusion of Remedies and Damages. You can recover from SYSINTERNALS and its suppliers only direct damages up to U.S. $5.00. You cannot recover any other damages, including consequential, lost profits, special, indirect or incidental damages.\par
00000004FAF0 0000004516F0 0 \fs20 9.\tab\fs19 Disclaimer of Warranty.\caps0 \caps The software is licensed \ldblquote as-is.\rdblquote You bear the risk of using it. SYSINTERNALS gives no express warranties, guarantees or conditions. You may have additional consumer rights under your local laws which this agreement cannot change. To the extent permitted under your local laws, SYSINTERNALS excludes the implied warranties of merchantability, fitness for a particular purpose and non-infringement.\par
00000004FCD8 0000004518D8 0 \pard\fi-357\li357\sb120\sa120\tx360\caps\fs20 8.\tab\fs19 Legal Effect.\b0\caps0 This agreement describes certain legal rights. You may have other rights under the laws of your country. You may also have rights with respect to the party from whom you acquired the software. This agreement does not change your rights under the laws of your country if the laws of your country do not permit it to do so.\b\caps\par
00000004FE80 000000451A80 0 \pard\fi-363\li720\sb120\sa120\fs20 b.\tab\fs19 Outside the United States.\b0 If you acquired the software in any other country, the laws of that country apply.\b\par
00000004FF30 000000451B30 0 \pard\fi-363\li720\sb120\sa120\tx720\cf0\fs20 a.\tab\fs19 United States.\b0 If you acquired the software in the United States, Washington state law governs the interpretation of this agreement and applies to claims for breach of it, regardless of conflict of laws principles. The laws of the state where you live govern all other claims, including claims under state consumer protection laws, unfair competition laws, and in tort.\b\par
0000000500E8 000000451CE8 0 \pard\keepn\fi-360\li360\sb120\sa120\tx360\cf2\b\caps\fs20 7.\tab\fs19 Applicable Law\caps0 .\par
000000050150 000000451D50 0 \caps\fs20 6.\tab\fs19 Entire Agreement.\b0\caps0 This agreement, and the terms for supplements, updates, Internet-based services and support services that you use, are the entire agreement for the software and support services.\par
000000050240 000000451E40 0 \caps\fs20 5.\tab\fs19 SUPPORT SERVICES.\caps0 \b0 Because this software is \ldblquote as is,\rdblquote we may not provide support services for it.\b\par
0000000502E0 000000451EE0 0 \caps\fs20 4.\tab\fs19 Export Restrictions\caps0 .\b0 The software is subject to United States export laws and regulations. You must comply with all domestic and international export laws and regulations that apply to the software. These laws include restrictions on destinations, end users and end use. For additional information, see \cf1\ul www.microsoft.com/exporting <http://www.microsoft.com/exporting>\cf0\ulnone .\b\par
000000050498 000000452098 0 \pard\fi-357\li357\sb120\sa120\tx360\b\fs20 3.\tab\fs19 DOCUMENTATION.\b0 Any person that has valid access to your computer or internal network may copy and use the documentation for your internal, reference purposes.\b\par
000000050580 000000452180 0 \'b7\tab use the software for commercial software hosting services.\par
0000000505C8 0000004521C8 0 \'b7\tab transfer the software or this agreement to any third party; or\par
000000050614 000000452214 0 \'b7\tab rent, lease or lend the software;\par
000000050644 000000452244 0 \'b7\tab publish the software for others to copy;\par
000000050680 000000452280 0 \'b7\tab make more copies of the software than specified in this agreement or allowed by applicable law, despite this limitation;\par
000000050708 000000452308 0 \pard\fi-363\li720\sb120\sa120\'b7\tab reverse engineer, decompile or disassemble the binary versions of the software, except and only to the extent that applicable law expressly permits, despite this limitation;\par
0000000507E8 0000004523E8 0 \pard\fi-363\li720\sb120\sa120\tx720\b0\'b7\tab work around any technical limitations in the binary versions of the software;\par
000000050870 000000452470 0 \caps\fs20 2.\tab\fs19 Scope of License\caps0 .\b0 The software is licensed, not sold. This agreement only gives you some rights to use the software. Sysinternals reserves all other rights. Unless applicable law gives you more rights despite this limitation, you may use the software only as expressly permitted in this agreement. In doing so, you must comply with any technical limitations in the software that only allow you to use it in certain ways. You may not\b\par
000000050A50 000000452650 0 \pard\fi-357\li357\sb120\sa120\tx360\fs20 1.\tab\fs19 INSTALLATION AND USE RIGHTS. \b0 You may install and use any number of copies of the software on your devices.\b\par
000000050B00 000000452700 0 \pard\brdrt\brdrs\brdrw10\brsp20 \sb120\sa120 If you comply with these license terms, you have the rights below.\par
000000050B78 000000452778 0 \b BY USING THE SOFTWARE, YOU ACCEPT THESE TERMS. IF YOU DO NOT ACCEPT THEM, DO NOT USE THE SOFTWARE.\par
000000050BE8 0000004527E8 0 \pard\sb120\sa120 for this software, unless other terms accompany those items. If so, those terms apply.\par
000000050C58 000000452858 0 \'b7\tab support services\par
000000050C78 000000452878 0 \'b7\tab Internet-based services, and \par
000000050CA4 0000004528A4 0 \pard\fi-363\li720\sb120\sa120\'b7\tab supplements,\par
000000050CDC 0000004528DC 0 \pard\fi-363\li720\sb120\sa120\tx720\'b7\tab updates,\par
000000050D18 000000452918 0 \pard\sb120\sa120\b0\fs19 These license terms are an agreement between Sysinternals (a wholly owned subsidiary of Microsoft Corporation) and you. Please read them. They apply to the software you are downloading from Systinternals.com, which includes the media on which you received it, if any. The terms also apply to any Sysinternals\par
File pos Mem pos ID Text
======== ======= == ====
000000050E70 000000452A70 0 {\*\generator Msftedit 5.41.21.2506;}\viewkind4\uc1\pard\brdrb\brdrs\brdrw10\brsp20 \sb120\sa120\b\f0\fs24 SYSINTERNALS SOFTWARE LICENSE TERMS\fs28\par
000000050F08 000000452B08 0 {\colortbl ;\red0\green0\blue255;\red0\green0\blue0;}
000000050F40 000000452B40 0 {\rtf1\ansi\ansicpg1252\deff0\deflang1033{\fonttbl{\f0\fswiss\fprq2\fcharset0 Tahoma;}}
0000000511C0 000000452DC0 0 CommandLineToArgvW
00000005130C 000000452F0C 0 Scanning file:
0000000517CC 0000004533CC 0 GetDiskFreeSpaceExW
0000000519D0 0000004535D0 0 RtlNtStatusToDosError
000000051A70 000000453670 0 NtFsControlFile
000000051E81 000000453A81 0 Invalid drive letter: %s
000000051E9A 000000453A9A 0 Argument must be formatted like d:
000000051EC0 000000453AC0 0 SDelete is set for %d pass%s.
000000051F00 000000453B00 0 Wow64EnableWow64FsRedirection
00000005202C 000000453C2C 0 CorExitProcess
000000052054 000000453C54 0 runtime error
000000052068 000000453C68 0 TLOSS error
000000052078 000000453C78 0 SING error
000000052088 000000453C88 0 DOMAIN error
000000052098 000000453C98 0 R6034
00000005209F 000000453C9F 0 An application has made an attempt to load the C runtime library incorrectly.
0000000520ED 000000453CED 0 Please contact the application's support team for more information.
000000052138 000000453D38 0 R6033
00000005213F 000000453D3F 0 - Attempt to use MSIL code from this assembly during native code initialization
00000005218F 000000453D8F 0 This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
000000052230 000000453E30 0 R6032
000000052237 000000453E37 0 - not enough space for locale information
000000052268 000000453E68 0 R6031
00000005226F 000000453E6F 0 - Attempt to initialize the CRT more than once.
00000005229F 000000453E9F 0 This indicates a bug in your application.
0000000522CC 000000453ECC 0 R6030
0000000522D3 000000453ED3 0 - CRT not initialized
0000000522EC 000000453EEC 0 R6028
0000000522F3 000000453EF3 0 - unable to initialize heap
000000052314 000000453F14 0 R6027
00000005231B 000000453F1B 0 - not enough space for lowio initialization
00000005234C 000000453F4C 0 R6026
000000052353 000000453F53 0 - not enough space for stdio initialization
000000052384 000000453F84 0 R6025
00000005238B 000000453F8B 0 - pure virtual function call
0000000523AC 000000453FAC 0 R6024
0000000523B3 000000453FB3 0 - not enough space for _onexit/atexit table
0000000523E4 000000453FE4 0 R6019
0000000523EB 000000453FEB 0 - unable to open console device
000000052410 000000454010 0 R6018
000000052417 000000454017 0 - unexpected heap error
000000052434 000000454034 0 R6017
00000005243B 00000045403B 0 - unexpected multithread lock error
000000052464 000000454064 0 R6016
00000005246B 00000045406B 0 - not enough space for thread data
000000052492 000000454092 0 This application has requested the Runtime to terminate it in an unusual way.
0000000524E0 0000004540E0 0 Please contact the application's support team for more information.
000000052528 000000454128 0 R6009
00000005252F 00000045412F 0 - not enough space for environment
000000052554 000000454154 0 R6008
00000005255B 00000045415B 0 - not enough space for arguments
000000052580 000000454180 0 R6002
000000052587 000000454187 0 - floating point support not loaded
0000000525B0 0000004541B0 0 Microsoft Visual C++ Runtime Library
0000000525E0 0000004541E0 0 <program name unknown>
0000000525F8 0000004541F8 0 Runtime Error!
000000052608 000000454208 0 Program:
File pos Mem pos ID Text
======== ======= == ====
00000005261C 00000045421C 0 LC_TIME
000000052624 000000454224 0 LC_NUMERIC
000000052630 000000454230 0 LC_MONETARY
00000005263C 00000045423C 0 LC_CTYPE
000000052648 000000454248 0 LC_COLLATE
000000052654 000000454254 0 LC_ALL
0000000526C7 0000004542C7 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]
000000052708 000000454308 0 abcdefghijklmnopqrstuvwxyz{|}~
000000052744 000000454344 0 EncodePointer
000000052770 000000454370 0 DecodePointer
000000052780 000000454380 0 FlsFree
000000052788 000000454388 0 FlsSetValue
000000052794 000000454394 0 FlsGetValue
0000000527A0 0000004543A0 0 FlsAlloc
0000000527BC 0000004543BC 0 (null)
0000000527E9 0000004543E9 0 ( 8PX
0000000527F1 0000004543F1 0 700WP
000000052809 000000454409 0 xpxxxx
0000000528A0 0000004544A0 0 SystemFunction036
0000000528B4 0000004544B4 0 ADVAPI32.DLL
0000000528C4 0000004544C4 0 GetProcessWindowStation
0000000528DC 0000004544DC 0 GetUserObjectInformationA
0000000528F8 0000004544F8 0 GetLastActivePopup
00000005290C 00000045450C 0 GetActiveWindow
00000005291C 00000045451C 0 MessageBoxA
000000052928 000000454528 0 USER32.DLL
000000052EE0 000000454AE0 0 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]
000000052F21 000000454B21 0 abcdefghijklmnopqrstuvwxyz{|}~
000000053060 000000454C60 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]
0000000530A1 000000454CA1 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
000000053140 000000454D40 0 HH:mm:ss
00000005314C 000000454D4C 0 dddd, MMMM dd, yyyy
000000053160 000000454D60 0 MM/dd/yy
000000053174 000000454D74 0 December
000000053180 000000454D80 0 November
00000005318C 000000454D8C 0 October
000000053194 000000454D94 0 September
0000000531A0 000000454DA0 0 August
0000000531B8 000000454DB8 0 April
0000000531C0 000000454DC0 0 March
0000000531C8 000000454DC8 0 February
0000000531D4 000000454DD4 0 January
00000005320C 000000454E0C 0 Saturday
000000053218 000000454E18 0 Friday
000000053220 000000454E20 0 Thursday
00000005322C 000000454E2C 0 Wednesday
000000053238 000000454E38 0 Tuesday
000000053240 000000454E40 0 Monday
000000053248 000000454E48 0 Sunday
000000053270 000000454E70 0 am/pm
000000053278 000000454E78 0 united-states
000000053288 000000454E88 0 united-kingdom
000000053298 000000454E98 0 trinidad & tobago
0000000532AC 000000454EAC 0 south-korea
0000000532B8 000000454EB8 0 south-africa
0000000532C8 000000454EC8 0 south korea
0000000532D4 000000454ED4 0 south africa
0000000532E4 000000454EE4 0 slovak
0000000532EC 000000454EEC 0 puerto-rico
0000000532F8 000000454EF8 0 pr-china
File pos Mem pos ID Text
======== ======= == ====
000000053304 000000454F04 0 pr china
000000053314 000000454F14 0 new-zealand
000000053320 000000454F20 0 hong-kong
00000005332C 000000454F2C 0 holland
000000053334 000000454F34 0 great britain
000000053344 000000454F44 0 england
00000005334C 000000454F4C 0 czech
000000053354 000000454F54 0 china
00000005335C 000000454F5C 0 britain
000000053364 000000454F64 0 america
000000053378 000000454F78 0 swiss
000000053380 000000454F80 0 swedish-finland
000000053390 000000454F90 0 spanish-venezuela
0000000533A4 000000454FA4 0 spanish-uruguay
0000000533B4 000000454FB4 0 spanish-puerto rico
0000000533C8 000000454FC8 0 spanish-peru
0000000533D8 000000454FD8 0 spanish-paraguay
0000000533EC 000000454FEC 0 spanish-panama
0000000533FC 000000454FFC 0 spanish-nicaragua
000000053410 000000455010 0 spanish-modern
000000053420 000000455020 0 spanish-mexican
000000053430 000000455030 0 spanish-honduras
000000053444 000000455044 0 spanish-guatemala
000000053458 000000455058 0 spanish-el salvador
00000005346C 00000045506C 0 spanish-ecuador
00000005347C 00000045507C 0 spanish-dominican republic
000000053498 000000455098 0 spanish-costa rica
0000000534AC 0000004550AC 0 spanish-colombia
0000000534C0 0000004550C0 0 spanish-chile
0000000534D0 0000004550D0 0 spanish-bolivia
0000000534E0 0000004550E0 0 spanish-argentina
0000000534F4 0000004550F4 0 portuguese-brazilian
00000005350C 00000045510C 0 norwegian-nynorsk
000000053520 000000455120 0 norwegian-bokmal
000000053534 000000455134 0 norwegian
000000053540 000000455140 0 italian-swiss
000000053550 000000455150 0 irish-english
000000053560 000000455160 0 german-swiss
000000053570 000000455170 0 german-luxembourg
000000053584 000000455184 0 german-lichtenstein
000000053598 000000455198 0 german-austrian
0000000535A8 0000004551A8 0 french-swiss
0000000535B8 0000004551B8 0 french-luxembourg
0000000535CC 0000004551CC 0 french-canadian
0000000535DC 0000004551DC 0 french-belgian
0000000535EC 0000004551EC 0 english-usa
0000000535F8 0000004551F8 0 english-us
000000053604 000000455204 0 english-uk
000000053610 000000455210 0 english-trinidad y tobago
00000005362C 00000045522C 0 english-south africa
000000053644 000000455244 0 english-nz
000000053650 000000455250 0 english-jamaica
000000053660 000000455260 0 english-ire
00000005366C 00000045526C 0 english-caribbean
000000053680 000000455280 0 english-can
00000005368C 00000045528C 0 english-belize
00000005369C 00000045529C 0 english-aus
0000000536A8 0000004552A8 0 english-american
0000000536BC 0000004552BC 0 dutch-belgian
0000000536CC 0000004552CC 0 chinese-traditional
File pos Mem pos ID Text
======== ======= == ====
0000000536E0 0000004552E0 0 chinese-singapore
0000000536F4 0000004552F4 0 chinese-simplified
000000053708 000000455308 0 chinese-hongkong
00000005371C 00000045531C 0 chinese
00000005372C 00000045532C 0 canadian
000000053738 000000455338 0 belgian
000000053740 000000455340 0 australian
00000005374C 00000045534C 0 american-english
000000053760 000000455360 0 american english
000000053774 000000455374 0 american
000000053A60 000000455660 0 Norwegian-Nynorsk
000000053A9D 00000045569D 0 ('8PW
000000053AA6 0000004556A6 0 700PP
000000053AC1 0000004556C1 0 xppwpp
000000053AD4 0000004556D4 0 SunMonTueWedThuFriSat
000000053AEC 0000004556EC 0 JanFebMarAprMayJunJulAugSepOctNovDec
000000053B18 000000455718 0 CONIN$
000000053B20 000000455720 0 CONOUT$
000000053B88 000000455788 0 c:\src\Misc\sdel\Release\sdelete.pdb
0000000544EE 0000004560EE 0 GetModuleHandleW
000000054502 000000456102 0 LocalFree
00000005450E 00000045610E 0 LoadLibraryW
00000005451E 00000045611E 0 LocalAlloc
00000005452C 00000045612C 0 GetCommandLineW
00000005453E 00000045613E 0 GetProcAddress
000000054550 000000456150 0 FormatMessageW
000000054562 000000456162 0 MoveFileW
00000005456E 00000045616E 0 ReadFile
00000005457A 00000045617A 0 WriteFile
000000054586 000000456186 0 VirtualFree
000000054594 000000456194 0 SetFilePointer
0000000545A6 0000004561A6 0 VirtualAlloc
0000000545B6 0000004561B6 0 SetFileAttributesW
0000000545CC 0000004561CC 0 GetFileAttributesW
0000000545E2 0000004561E2 0 DeleteFileW
0000000545F0 0000004561F0 0 CloseHandle
0000000545FE 0000004561FE 0 GetLastError
00000005460E 00000045620E 0 CreateFileW
00000005461C 00000045621C 0 WaitForSingleObject
000000054632 000000456232 0 GetDiskFreeSpaceW
000000054646 000000456246 0 FindClose
000000054652 000000456252 0 FindNextFileW
000000054662 000000456262 0 RemoveDirectoryW
000000054676 000000456276 0 FindFirstFileW
000000054688 000000456288 0 DeviceIoControl
00000005469A 00000045629A 0 ExpandEnvironmentStringsW
0000000546B6 0000004562B6 0 GetVersion
0000000546C4 0000004562C4 0 GetFullPathNameW
0000000546D8 0000004562D8 0 GetCurrentDirectoryW
0000000546EE 0000004562EE 0 KERNEL32.dll
0000000546FE 0000004562FE 0 SendMessageW
00000005470E 00000045630E 0 InflateRect
00000005471C 00000045631C 0 SetCursor
000000054728 000000456328 0 LoadCursorW
000000054736 000000456336 0 SetWindowTextW
000000054748 000000456348 0 EndDialog
000000054754 000000456354 0 GetSysColorBrush
000000054768 000000456368 0 GetDlgItem
000000054776 000000456376 0 DialogBoxIndirectParamW
00000005478E 00000045638E 0 USER32.dll
File pos Mem pos ID Text
======== ======= == ====
00000005479C 00000045639C 0 EndDoc
0000000547A6 0000004563A6 0 EndPage
0000000547B0 0000004563B0 0 StartPage
0000000547BC 0000004563BC 0 StartDocW
0000000547C8 0000004563C8 0 SetMapMode
0000000547D6 0000004563D6 0 GetDeviceCaps
0000000547E4 0000004563E4 0 GDI32.dll
0000000547F0 0000004563F0 0 PrintDlgW
0000000547FA 0000004563FA 0 COMDLG32.dll
00000005480A 00000045640A 0 RegCloseKey
000000054818 000000456418 0 RegSetValueExW
00000005482A 00000045642A 0 RegQueryValueExW
00000005483E 00000045643E 0 RegCreateKeyW
00000005484C 00000045644C 0 ADVAPI32.dll
00000005485C 00000045645C 0 HeapAlloc
000000054868 000000456468 0 HeapFree
000000054874 000000456474 0 GetSystemTimeAsFileTime
00000005488E 00000045648E 0 EnterCriticalSection
0000000548A6 0000004564A6 0 LeaveCriticalSection
0000000548BE 0000004564BE 0 Sleep
0000000548C6 0000004564C6 0 ExitProcess
0000000548D4 0000004564D4 0 DeleteCriticalSection
0000000548EC 0000004564EC 0 FatalAppExitA
0000000548FC 0000004564FC 0 HeapReAlloc
00000005490A 00000045650A 0 HeapCreate
000000054918 000000456518 0 HeapDestroy
000000054926 000000456526 0 GetStdHandle
000000054936 000000456536 0 GetModuleFileNameA
00000005494C 00000045654C 0 TerminateProcess
000000054960 000000456560 0 GetCurrentProcess
000000054974 000000456574 0 UnhandledExceptionFilter
000000054990 000000456590 0 SetUnhandledExceptionFilter
0000000549AE 0000004565AE 0 IsDebuggerPresent
0000000549C2 0000004565C2 0 GetCPInfo
0000000549CE 0000004565CE 0 InterlockedIncrement
0000000549E6 0000004565E6 0 InterlockedDecrement
0000000549FE 0000004565FE 0 GetACP
000000054A08 000000456608 0 GetOEMCP
000000054A14 000000456614 0 IsValidCodePage
000000054A26 000000456626 0 TlsGetValue
000000054A34 000000456634 0 TlsAlloc
000000054A40 000000456640 0 TlsSetValue
000000054A4E 00000045664E 0 TlsFree
000000054A58 000000456658 0 SetLastError
000000054A68 000000456668 0 GetCurrentThreadId
000000054A7E 00000045667E 0 GetCurrentThread
000000054A92 000000456692 0 WideCharToMultiByte
000000054AA8 0000004566A8 0 GetConsoleCP
000000054AB8 0000004566B8 0 GetConsoleMode
000000054ACA 0000004566CA 0 FlushFileBuffers
000000054ADE 0000004566DE 0 SetHandleCount
000000054AF0 0000004566F0 0 GetFileType
000000054AFE 0000004566FE 0 GetStartupInfoA
000000054B10 000000456710 0 SetConsoleCtrlHandler
000000054B28 000000456728 0 FreeLibrary
000000054B36 000000456736 0 InterlockedExchange
000000054B4C 00000045674C 0 LoadLibraryA
000000054B5C 00000045675C 0 InitializeCriticalSectionAndSpinCount
000000054B84 000000456784 0 GetModuleFileNameW
000000054B9A 00000045679A 0 FreeEnvironmentStringsW
File pos Mem pos ID Text
======== ======= == ====
000000054BB4 0000004567B4 0 GetEnvironmentStringsW
000000054BCE 0000004567CE 0 QueryPerformanceCounter
000000054BE8 0000004567E8 0 GetTickCount
000000054BF8 0000004567F8 0 GetCurrentProcessId
000000054C0E 00000045680E 0 RtlUnwind
000000054C1A 00000045681A 0 MultiByteToWideChar
000000054C30 000000456830 0 LCMapStringA
000000054C40 000000456840 0 LCMapStringW
000000054C50 000000456850 0 GetStringTypeA
000000054C62 000000456862 0 GetStringTypeW
000000054C74 000000456874 0 GetTimeFormatA
000000054C86 000000456886 0 GetDateFormatA
000000054C98 000000456898 0 GetUserDefaultLCID
000000054CAE 0000004568AE 0 GetLocaleInfoA
000000054CC0 0000004568C0 0 EnumSystemLocalesA
000000054CD6 0000004568D6 0 IsValidLocale
000000054CE6 0000004568E6 0 WriteConsoleA
000000054CF6 0000004568F6 0 GetConsoleOutputCP
000000054D0C 00000045690C 0 WriteConsoleW
000000054D1C 00000045691C 0 SetStdHandle
000000054D2C 00000045692C 0 HeapSize
000000054D38 000000456938 0 GetLocaleInfoW
000000054D4A 00000045694A 0 GetTimeZoneInformation
000000054D64 000000456964 0 CreateFileA
000000054D72 000000456972 0 CompareStringA
000000054D84 000000456984 0 CompareStringW
000000054D96 000000456996 0 SetEnvironmentVariableA
000000055576 000000457176 0
000000055656 000000457256 0 abcdefghijklmnopqrstuvwxyz
000000055676 000000457276 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ
00000005577A 00000045737A 0
000000055861 000000457461 0 abcdefghijklmnopqrstuvwxyz
000000055881 000000457481 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ
0000000561AC 000000457DAC 0 <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
0000000561F7 000000457DF7 0 <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
00000005622F 000000457E2F 0 <security>
00000005623F 000000457E3F 0 <requestedPrivileges>
00000005625C 000000457E5C 0 <requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>
0000000562BC 000000457EBC 0 </requestedPrivileges>
0000000562DA 000000457EDA 0 </security>
0000000562EB 000000457EEB 0 </trustInfo>
0000000562FB 000000457EFB 0 </assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXX
0000000564FC 0000004580FC 0 Washington1
000000056511 000000458111 0 Redmond1
000000056523 000000458123 0 Microsoft Corporation1#0!
000000056543 000000458143 0 Microsoft Code Signing PCA0
000000056561 000000458161 0 120904214209Z
000000056570 000000458170 0 130304214209Z0
000000056598 000000458198 0 Washington1
0000000565AD 0000004581AD 0 Redmond1
0000000565BF 0000004581BF 0 Microsoft Corporation1
0000000565DF 0000004581DF 0 MOPR1
0000000565EE 0000004581EE 0 Microsoft Corporation0
00000005678E 00000045838E 0 O0M0K
000000056798 000000458398 0 Ehttp://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl0Z
0000000567EB 0000004583EB 0 N0L0J
0000000567FB 0000004583FB 0 >http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt0
000000056928 000000458528 0 V ,:N
000000056990 000000458590 0 Washington1
0000000569A5 0000004585A5 0 Redmond1
File pos Mem pos ID Text
======== ======= == ====
0000000569B7 0000004585B7 0 Microsoft Corporation1!0
0000000569D7 0000004585D7 0 Microsoft Time-Stamp PCA0
0000000569F3 0000004585F3 0 120109222559Z
000000056A02 000000458602 0 130409222559Z0
000000056A2A 00000045862A 0 Washington1
000000056A3F 00000045863F 0 Redmond1
000000056A51 000000458651 0 Microsoft Corporation1
000000056A71 000000458671 0 MOPR1'0%
000000056A80 000000458680 0 nCipher DSE ESN:B8EC-30A4-71441%0#
000000056AA9 0000004586A9 0 Microsoft Time-Stamp Service0
000000056B30 000000458730 0 Vi7:*
000000056B69 000000458769 0 |pEa~
000000056C3B 00000045883B 0 M0K0I
000000056C45 000000458845 0 Chttp://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0X
000000056C96 000000458896 0 L0J0H
000000056CA6 0000004588A6 0 <http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt0
000000056E5C 000000458A5C 0 microsoft1-0+
000000056E70 000000458A70 0 $Microsoft Root Certificate Authority0
000000056E99 000000458A99 0 100831221932Z
000000056EA8 000000458AA8 0 200831222932Z0y1
000000056ECF 000000458ACF 0 Washington1
000000056EE4 000000458AE4 0 Redmond1
000000056EF6 000000458AF6 0 Microsoft Corporation1#0!
000000056F16 000000458B16 0 Microsoft Code Signing PCA0
000000057118 000000458D18 0 I0G0E
000000057122 000000458D22 0 ?http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0T
00000005716F 000000458D6F 0 H0F0D
00000005717F 000000458D7F 0 8http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0
0000000572E3 000000458EE3 0 N=|)H
00000005741C 00000045901C 0 microsoft1-0+
000000057430 000000459030 0 $Microsoft Root Certificate Authority0
000000057459 000000459059 0 070403125309Z
000000057468 000000459068 0 210403130309Z0w1
00000005748F 00000045908F 0 Washington1
0000000574A4 0000004590A4 0 Redmond1
0000000574B6 0000004590B6 0 Microsoft Corporation1!0
0000000574D6 0000004590D6 0 Microsoft Time-Stamp PCA0
0000000576BB 0000004592BB 0 microsoft1-0+
0000000576CF 0000004592CF 0 $Microsoft Root Certificate Authority
00000005770E 00000045930E 0 I0G0E
000000057718 000000459318 0 ?http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0T
000000057765 000000459365 0 H0F0D
000000057775 000000459375 0 8http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0
0000000577EB 0000004593EB 0 .tq[m
000000057871 000000459471 0 1Jv1=+r
00000005792A 00000045952A 0 L&*H$_Z
0000000579FF 0000004595FF 0 Washington1
000000057A14 000000459614 0 Redmond1
000000057A26 000000459626 0 Microsoft Corporation1#0!
000000057A46 000000459646 0 Microsoft Code Signing PCA
000000057B26 000000459726 0 *http://technet.microsoft.com/sysinternals 0
000000057C9F 00000045989F 0 Washington1
000000057CB4 0000004598B4 0 Redmond1
000000057CC6 0000004598C6 0 Microsoft Corporation1!0
000000057CE6 0000004598E6 0 Microsoft Time-Stamp PCA
000000057D42 000000459942 0 130109222603Z0#
000000057E7B 000000459A7B 0 F2YB-i
000000057F38 000000459B38 0 .?AV?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@
000000058060 00000045C060 0 <?xml version='1.0' encoding='UTF-8' standalone='yes'?>
000000058099 00000045C099 0 <assembly xmlns='urn:schemas-microsoft-com:asm.v1' manifestVersion='1.0'>
File pos Mem pos ID Text
======== ======= == ====
0000000580E4 00000045C0E4 0 <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
00000005811C 00000045C11C 0 <security>
00000005812C 00000045C12C 0 <requestedPrivileges>
000000058149 00000045C149 0 <requestedExecutionLevel level='asInvoker' uiAccess='false' />
000000058191 00000045C191 0 </requestedPrivileges>
0000000581AF 00000045C1AF 0 </security>
0000000581C0 00000045C1C0 0 </trustInfo>
0000000581D0 00000045C1D0 0 </assembly>
00000005820D 00000045D00D 0 011h1
000000058215 00000045D015 0 1,282V2h2
00000005821F 00000045D01F 0 2$3/363B4M4T4
000000058239 00000045D039 0 :':F:X:
000000058247 00000045D047 0 <8=B=M=0>L>w>
000000058275 00000045D075 0 1M2i2
000000058285 00000045D085 0 3$3r3
00000005829D 00000045D09D 0 6W7B8M8
0000000582A7 00000045D0A7 0 819:9
0000000582B1 00000045D0B1 0 9 :+:9:>;g;
0000000582C1 00000045D0C1 0 <5<=<o<
0000000582F3 00000045D0F3 0 666E6t6z6
00000005830B 00000045D10B 0 7f7u7
00000005831D 00000045D11D 0 708=8O8
00000005834D 00000045D14D 0 =&>8>
00000005837D 00000045D17D 0 343b3
000000058397 00000045D197 0 7K7X7
00000005839D 00000045D19D 0 7;8M8s8
0000000583AD 00000045D1AD 0 9#9\9v9
0000000583BD 00000045D1BD 0 ;6;H;
0000000583C5 00000045D1C5 0 ;%<-<:<E<a<
0000000583D1 00000045D1D1 0 =-=[=&?T?
0000000583E8 00000045D1E8 0 *272B2
0000000583F1 00000045D1F1 0 2e3j3r3
00000005840B 00000045D20B 0 9;;E;
000000058443 00000045D243 0 2#2M2Z2e2
000000058461 00000045D261 0 3[3h3
000000058475 00000045D275 0 4%4F4X405
000000058487 00000045D287 0 7*8J8
00000005848F 00000045D28F 0 8*9M9
000000058495 00000045D295 0 9?:U:o:{:
0000000584AB 00000045D2AB 0 >2>k?u?
0000000584D5 00000045D2D5 0 : :':-:2:@:
0000000584E9 00000045D2E9 0 ;H;o;>?
0000000584FF 00000045D2FF 0 82<f<
00000005850B 00000045D30B 0 >%>9>
000000058531 00000045D331 0 =7>P>
00000005854B 00000045D34B 0 6X6\6
000000058551 00000045D351 0 6d6h6l6p6t6
000000058567 00000045D367 0 8 8$8(8,808N8{8
00000005859F 00000045D39F 0 =H>O>d>
0000000585C5 00000045D3C5 0 4#5\5
0000000585D7 00000045D3D7 0 9m9u9
0000000585DF 00000045D3DF 0 9(<7<
0000000585FF 00000045D3FF 0 2F2\2
000000058635 00000045D435 0 6W6e6j6s6
000000058647 00000045D447 0 7%7|7
000000058651 00000045D451 0 7N8U8Z8l8{8
00000005866B 00000045D46B 0 9l9p9t9x9|9
00000005867F 00000045D47F 0 9b:w:
000000058695 00000045D495 0 <2<V<h<
0000000586AD 00000045D4AD 0 =&=/=U=
File pos Mem pos ID Text
======== ======= == ====
0000000586D9 00000045D4D9 0 2.373W3z3
0000000586E7 00000045D4E7 0 3>4M4q4
0000000586FF 00000045D4FF 0 5 6@6j6
000000058713 00000045D513 0 8*868e8m8t8
000000058723 00000045D523 0 9&9E9L9U9
00000005872D 00000045D52D 0 9j9o9
00000005873F 00000045D53F 0 9":(:W:r:
000000058751 00000045D551 0 ;#;.;Q;\;
00000005875F 00000045D55F 0 <%<W<i<y<
000000058769 00000045D569 0 <"=3=:=B=W=t=
00000005877D 00000045D57D 0 ='>O>
00000005878D 00000045D58D 0 >f?{?
0000000587A7 00000045D5A7 0 0!0=0q0
0000000587DB 00000045D5DB 0 <5>=>G>W>
0000000587F8 00000045D5F8 0 Y1s1z1
00000005880D 00000045D60D 0 2$272y2
000000058829 00000045D629 0 3R3X3
000000058835 00000045D635 0 4C4k4y4%6C6\6c6k6p6t6x6
000000058861 00000045D661 0 7R7X7\7
000000058879 00000045D679 0 8%8O8
000000058899 00000045D699 0 9u:z:
0000000588A7 00000045D6A7 0 :Z;_;h;t;y;
0000000588BB 00000045D6BB 0 ;$<*<0<6<<<B<I<P<W<
0000000588CF 00000045D6CF 0 <e<l<s<{<
0000000588EF 00000045D6EF 0 <)=/=5=;=A=G=N=U=\=c=j=q=x=
00000005891F 00000045D71F 0 =X>b>m>
000000058945 00000045D745 0 0"0A0X0g0
000000058957 00000045D757 0 2H425
000000058961 00000045D761 0 6.686_6g6p6y6
00000005897B 00000045D77B 0 7%7*7A7K7a7
00000005898B 00000045D78B 0 8,888H8N8_8~8
0000000589AF 00000045D7AF 0 9(:y:
0000000589C3 00000045D7C3 0 ;';j;
0000000589CB 00000045D7CB 0 <;<I<
0000000589D3 00000045D7D3 0 >,>3>;>@>D>H>q>
0000000589F5 00000045D7F5 0 >"?(?,?0?4?
000000058A19 00000045D819 0 0Q0X0\0
000000058A21 00000045D821 0 0d0h0l0p0t0
000000058A43 00000045D843 0 4,5D5I5
000000058A55 00000045D855 0 8%8-8F8-9
000000058A79 00000045D879 0 >!>?>
000000058A8D 00000045D88D 0 0/0>0K0W0g0v0}0
000000058AAB 00000045D8AB 0 1*131W1
000000058ABD 00000045D8BD 0 2;3y3
000000058ACB 00000045D8CB 0 4,535U5\5
000000058AD9 00000045D8D9 0 7S8n8
000000058AE1 00000045D8E1 0 9$:G:
000000058AF5 00000045D8F5 0 ;+;6;[;
000000058B25 00000045D925 0 0 3*353
000000058B4B 00000045D94B 0 <'=0=>=j=o=u=y=
000000058BA3 00000045D9A3 0 2/252P2
000000058BAB 00000045D9AB 0 2i2q2
000000058BDB 00000045D9DB 0 3 3(3-333;3@3F3N3S3Y3a3f3l3t3y3
000000058C2D 00000045DA2D 0 4$4*42474=4E4J4P4X4]4c4k4p4v4~4
000000058C6D 00000045DA6D 0 5 5P5b5
000000058CA7 00000045DAA7 0 =#='=+=/=3=7=;=?=C=G=K=O=S=W=t=
000000058CE5 00000045DAE5 0 ? ?3?9?T?
000000058CFC 00000045DAFC 0 H0V0o0x0
000000058D2F 00000045DB2F 0 4K4c4m4
000000058D4D 00000045DB4D 0 5=5P5
File pos Mem pos ID Text
======== ======= == ====
000000058D63 00000045DB63 0 8%8G8W899w9
000000058D79 00000045DB79 0 ;(<0<
000000058D8B 00000045DB8B 0 =3=O=u=
000000058D99 00000045DB99 0 >&>7>
000000058DA9 00000045DBA9 0 090O0e0m0
000000058DC9 00000045DBC9 0 6p6*7]7
000000058DD3 00000045DBD3 0 8R8d8
000000058DEB 00000045DBEB 0 <<<M<Z<_<l<q<
000000058E03 00000045DC03 0 ?E?Q?
000000058E29 00000045DC29 0 3&4/4
000000058E31 00000045DC31 0 4b5n5
000000058E37 00000045DC37 0 5V6_6Q7Z7F8
000000058E49 00000045DC49 0 9(9o9
000000058E5D 00000045DC5D 0 :I;N;i;n;
000000058E6D 00000045DC6D 0 </<5<
000000058E7D 00000045DC7D 0 =+=p=v={=
000000058E97 00000045DC97 0 > >H>M>V>[>d>i>v>
000000058EC9 00000045DCC9 0 0 0*070A0Q0
000000058ED9 00000045DCD9 0 0e2w2
000000058EFD 00000045DCFD 0 474@4F4O4T4c4j4
000000058F11 00000045DD11 0 4,5?5
000000058F19 00000045DD19 0 636~6
000000058F31 00000045DD31 0 7*868v8
000000058F3F 00000045DD3F 0 9$9*919
000000058F4F 00000045DD4F 0 :V:k:u:{:
000000058F69 00000045DD69 0 = =*=;=F=d=
000000058F85 00000045DD85 0 >4><>K>
000000058FA8 00000045DDA8 0 50G0X1b1h1|1
000000058FB5 00000045DDB5 0 152V2
000000058FE1 00000045DDE1 0 9>9U9q9
00000005900D 00000045DE0D 0 1F1s2N3
000000059029 00000045DE29 0 6:6e6
0000000590AF 00000045DEAF 0 2 2'272=2C2K2Q2W2_2e2k2s2|2
0000000590DD 00000045DEDD 0 2+3C3\3-4
0000000590E7 00000045DEE7 0 4K5]5o5
000000059111 00000045DF11 0 :,:f:
00000005911B 00000045DF1B 0 < <(<0<8<
00000005912D 00000045DF2D 0 0!0/0O8
000000059139 00000045DF39 0 959a9
000000059143 00000045DF43 0 :J=7>
00000005917D 00000045DF7D 0 ;q;};
000000059187 00000045DF87 0 <:<V<}<
000000059197 00000045DF97 0 =X=u=
0000000591A5 00000045DFA5 0 =.>v>
0000000591B3 00000045DFB3 0 ?%?c?s?
0000000591E3 00000045DFE3 0 6P7[7
0000000591EB 00000045DFEB 0 8~8j9
0000000591F1 00000045DFF1 0 90:<:
00000005922D 00000045E02D 0 1Y1l1
000000059235 00000045E035 0 2:2T2
00000005923B 00000045E03B 0 2N3b344I4u4
000000059251 00000045E051 0 5)565@5g5z5
00000005925D 00000045E05D 0 566@6J6
000000059269 00000045E069 0 6#7=7M7t7
00000005927B 00000045E07B 0 8=9I9S9o9
0000000592C3 00000045E0C3 0 6F9j9
0000000592CD 00000045E0CD 0 9 :/:
0000000592ED 00000045E0ED 0 0A1I1
0000000592F9 00000045E0F9 0 4#414@4
000000059319 00000045E119 0 9<:S:
File pos Mem pos ID Text
======== ======= == ====
000000059321 00000045E121 0 ;f>x>
00000005937F 00000045E17F 0 :D:q:
00000005938B 00000045E18B 0 ;J;e;
00000005939D 00000045E19D 0 <5=j=
0000000593A7 00000045E1A7 0 >2>g>
0000000593D1 00000045E1D1 0 323b3
0000000593ED 00000045E1ED 0 4"43484B4Q4]4i4y4~4
00000005941F 00000045E21F 0 5(5;5P5T5
000000059429 00000045E229 0 5l5v5
000000059445 00000045E245 0 6"6&62666F6P6]6}6
00000005946B 00000045E26B 0 7=7G7Q7b7h7n7t7z7
0000000594A0 00000045E2A0 0 P2T2X2\2
0000000594A9 00000045E2A9 0 2d2h2l2p2t2x2|2
0000000594E9 00000045E2E9 0 3$3,343<3D3L3T3\3d3l3t3|3
000000059529 00000045E329 0 4$4,444<4D4L4T4\4d4l4t4|4
000000059569 00000045E369 0 5$5,5<5D5L5T5\5d5l5t5|5
0000000595A7 00000045E3A7 0 6$6,646<6D6L6T6\6d6l6t6|6
0000000595E7 00000045E3E7 0 7$7,747<7D7L7T7\7d7l7t7|7
000000059614 00000045E414 0 80<0@0D0H0L0P0T0X0\0
000000059629 00000045E429 0 0d0h0l0p0t0x0|0
00000005967B 00000045E47B 0 1 1$1(1,1014181<1@1D1H1L1P1T1X1\1
00000005969D 00000045E49D 0 1d1h1l1p1t1x1|1
0000000596F5 00000045E4F5 0 2 2$2(2,2024282<2@2
000000059721 00000045E521 0 3 3$3(3,3034383<3@3D3H3L3(4,4044484<4@4X4\4
000000059757 00000045E557 0 <d?l?t?|?
00000005978F 00000045E58F 0 0$0,040<0D0L0T0\0d0l0t0|0
0000000597CF 00000045E5CF 0 1$1,141<1D1L1T1\1d1l1t1|1
00000005980F 00000045E60F 0 2$2,242<2D2L2T2\2d2l2t2|2
00000005984F 00000045E64F 0 3$3,343<3D3L3T3\3d3l3t3|3
00000005988F 00000045E68F 0 4$4,444<4D4L4T4\4d4l4t4|4
0000000598CF 00000045E6CF 0 5$5,545<5D5L5T5\5d5l5t5|5
00000005990F 00000045E70F 0 6$6,646<6D6L6T6\6d6l6t6|6
00000005994F 00000045E74F 0 7 7(70787@7H7P7X7
000000059961 00000045E761 0 7h7p7x7
00000005998F 00000045E78F 0 8 8(80888@8H8P8X8
0000000599A1 00000045E7A1 0 8h8p8x8
0000000599CF 00000045E7CF 0 9 9(90989@9H9P9X9
0000000599E1 00000045E7E1 0 9h9p9x9
000000059A0F 00000045E80F 0 : :(:0:8:@:H:P:X:
000000059A21 00000045E821 0 :h:p:x:
000000059A4F 00000045E84F 0 ; ;(;0;8;@;H;P;X;
000000059A61 00000045E861 0 ;h;p;x;
000000059A8F 00000045E88F 0 < <(<0<8<@<H<P<X<
000000059AA1 00000045E8A1 0 <h<p<x<
000000059ACF 00000045E8CF 0 = =(=0=8=@=H=P=X=
000000059AE1 00000045E8E1 0 =h=p=x=
000000059B19 00000045E919 0 9$9,949<9D9L9
000000059BA7 00000045E9A7 0 3 3$3(3,3034383<3@3D3H3L3P3T3X3\3
000000059BC9 00000045E9C9 0 3d3h3l3p3t3x3|3
000000059C1F 00000045EA1F 0 :(:4:@:L:X:d:p:|:
000000059C49 00000045EA49 0 ;$;0;<;H;T;
000000059C55 00000045EA55 0 ;l;x;
000000059C73 00000045EA73 0 < <,<8<D<P<\<h<t<
000000059CB7 00000045EAB7 0 5 5,585D5P5\5h5t5
000000059CE0 00000045EAE0 0 ,<0<D<H<X<\<
000000059D0F 00000045EB0F 0 =,=0=@=D=H=L=T=l=|=
000000059D3F 00000045EB3F 0 >$>4>8>@>X>h>l>|>
000000059D6F 00000045EB6F 0 ? ?$?,?D?H?
000000059D7B 00000045EB7B 0 ?d?|?
000000059DA3 00000045EBA3 0 0 00040D0H0L0P0T0\0t0
File pos Mem pos ID Text
======== ======= == ====
000000059DD5 00000045EBD5 0 1 1$14181H1L1P1X1p1
000000059E07 00000045EC07 0 2 282<2T2d2h2x2|2
000000059E37 00000045EC37 0 3 383<3@3D3L3P3X3\3
000000059E4B 00000045EC4B 0 3d3x3|3
000000059E6F 00000045EC6F 0 4,4<4@4X4\4t4x4
000000059E9D 00000045EC9D 0 5,5<5L5\5
000000059EA7 00000045ECA7 0 5p5t5x5
000000059ED7 00000045ECD7 0 7$7,747<7@7D7L7
000000059EE7 00000045ECE7 0 7h7t7
000000059EF9 00000045ECF9 0 8$8D8P8p8|8
000000059F0D 00000045ED0D 0 9(9H9h9
000000059F21 00000045ED21 0 :0:P:p:
000000059F35 00000045ED35 0 ; ;$;<;@;\;
000000059F59 00000045ED59 0 <0<P<\<x<
000000059F6D 00000045ED6D 0 = =<=@=\=
000000059F85 00000045ED85 0 > >(>X>x>
000000059F99 00000045ED99 0 ?0?P?p?|?
000000059FC1 00000045EDC1 0 0$080@0T0\0p0x0
000000059FE7 00000045EDE7 0 1,181X1d1l1
00000005A001 00000045EE01 0 2 2,242h2x2
00000005A019 00000045EE19 0 3(343T3\3d3p3
00000005A03B 00000045EE3B 0 4$4D4P4t4|4
00000005A06D 00000045EE6D 0 5$5,545<5D5L5T5\5d5l5t5|5
00000005A09B 00000045EE9B 0 60686@6H6T6t6
00000005A0BB 00000045EEBB 0 7$7D7L7T7\7h7
00000005A0DB 00000045EEDB 0 8$8,848X8h8x8
00000005A101 00000045EF01 0 949D9P9p9
00000005A117 00000045EF17 0 0<0\0|0
00000005A133 00000045EF33 0 4 4$4(4,4044484<4@4D4P4T4X4\4
00000005A151 00000045EF51 0 4d4h4l4
00000005A161 00000045EF61 0 94:<:D:L:T:\:d:l:t:|:
00000005A19B 00000045EF9B 0 ;8;<;@;D;H;L;P;T;X;\;
00000005A1B1 00000045EFB1 0 ;d;h;l;p;t;x;|;
00000005A20B 00000045F00B 0 < <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<
00000005A22D 00000045F02D 0 <d<h<l<p<t<x<|<
00000005A255 00000045F055 0 =$=0=4=8=<=
00000005A261 00000045F061 0 =d=p=t=x=|=
00000005A289 00000045F089 0 3P8|8
00000005A295 00000045F095 0 949P9t9
000000000422 000000401022 0 l.dll
000000027063 000000428463 0 @mscoree.dll
0000000278DB 000000428CDB 0 Akernel32.dll
0000000289B8 000000429DB8 0 zh-CHS
000000028BB8 000000429FB8 0 ar-SA
000000028BC4 000000429FC4 0 bg-BG
000000028BD0 000000429FD0 0 ca-ES
000000028BDC 000000429FDC 0 zh-TW
000000028BE8 000000429FE8 0 cs-CZ
000000028BF4 000000429FF4 0 da-DK
000000028C00 00000042A000 0 de-DE
000000028C0C 00000042A00C 0 el-GR
000000028C18 00000042A018 0 en-US
000000028C24 00000042A024 0 fi-FI
000000028C30 00000042A030 0 fr-FR
000000028C3C 00000042A03C 0 he-IL
000000028C48 00000042A048 0 hu-HU
000000028C54 00000042A054 0 is-IS
000000028C60 00000042A060 0 it-IT
000000028C6C 00000042A06C 0 ja-JP
000000028C78 00000042A078 0 ko-KR
File pos Mem pos ID Text
======== ======= == ====
000000028C84 00000042A084 0 nl-NL
000000028C90 00000042A090 0 nb-NO
000000028C9C 00000042A09C 0 pl-PL
000000028CA8 00000042A0A8 0 pt-BR
000000028CB4 00000042A0B4 0 ro-RO
000000028CC0 00000042A0C0 0 ru-RU
000000028CCC 00000042A0CC 0 hr-HR
000000028CD8 00000042A0D8 0 sk-SK
000000028CE4 00000042A0E4 0 sq-AL
000000028CF0 00000042A0F0 0 sv-SE
000000028CFC 00000042A0FC 0 th-TH
000000028D08 00000042A108 0 tr-TR
000000028D14 00000042A114 0 ur-PK
000000028D20 00000042A120 0 id-ID
000000028D2C 00000042A12C 0 uk-UA
000000028D38 00000042A138 0 be-BY
000000028D44 00000042A144 0 sl-SI
000000028D50 00000042A150 0 et-EE
000000028D5C 00000042A15C 0 lv-LV
000000028D68 00000042A168 0 lt-LT
000000028D74 00000042A174 0 fa-IR
000000028D80 00000042A180 0 vi-VN
000000028D8C 00000042A18C 0 hy-AM
000000028D98 00000042A198 0 az-AZ-Latn
000000028DB0 00000042A1B0 0 eu-ES
000000028DBC 00000042A1BC 0 mk-MK
000000028DC8 00000042A1C8 0 tn-ZA
000000028DD4 00000042A1D4 0 xh-ZA
000000028DE0 00000042A1E0 0 zu-ZA
000000028DEC 00000042A1EC 0 af-ZA
000000028DF8 00000042A1F8 0 ka-GE
000000028E04 00000042A204 0 fo-FO
000000028E10 00000042A210 0 hi-IN
000000028E1C 00000042A21C 0 mt-MT
000000028E28 00000042A228 0 se-NO
000000028E34 00000042A234 0 ms-MY
000000028E40 00000042A240 0 kk-KZ
000000028E4C 00000042A24C 0 ky-KG
000000028E58 00000042A258 0 sw-KE
000000028E64 00000042A264 0 uz-UZ-Latn
000000028E7C 00000042A27C 0 tt-RU
000000028E88 00000042A288 0 bn-IN
000000028E94 00000042A294 0 pa-IN
000000028EA0 00000042A2A0 0 gu-IN
000000028EAC 00000042A2AC 0 ta-IN
000000028EB8 00000042A2B8 0 te-IN
000000028EC4 00000042A2C4 0 kn-IN
000000028ED0 00000042A2D0 0 ml-IN
000000028EDC 00000042A2DC 0 mr-IN
000000028EE8 00000042A2E8 0 sa-IN
000000028EF4 00000042A2F4 0 mn-MN
000000028F00 00000042A300 0 cy-GB
000000028F0C 00000042A30C 0 gl-ES
000000028F18 00000042A318 0 kok-IN
000000028F28 00000042A328 0 syr-SY
000000028F38 00000042A338 0 div-MV
000000028F48 00000042A348 0 quz-BO
000000028F58 00000042A358 0 ns-ZA
000000028F64 00000042A364 0 mi-NZ
000000028F70 00000042A370 0 ar-IQ
File pos Mem pos ID Text
======== ======= == ====
000000028F7C 00000042A37C 0 zh-CN
000000028F88 00000042A388 0 de-CH
000000028F94 00000042A394 0 en-GB
000000028FA0 00000042A3A0 0 es-MX
000000028FAC 00000042A3AC 0 fr-BE
000000028FB8 00000042A3B8 0 it-CH
000000028FC4 00000042A3C4 0 nl-BE
000000028FD0 00000042A3D0 0 nn-NO
000000028FDC 00000042A3DC 0 pt-PT
000000028FE8 00000042A3E8 0 sr-SP-Latn
000000029000 00000042A400 0 sv-FI
00000002900C 00000042A40C 0 az-AZ-Cyrl
000000029024 00000042A424 0 se-SE
000000029030 00000042A430 0 ms-BN
00000002903C 00000042A43C 0 uz-UZ-Cyrl
000000029054 00000042A454 0 quz-EC
000000029064 00000042A464 0 ar-EG
000000029070 00000042A470 0 zh-HK
00000002907C 00000042A47C 0 de-AT
000000029088 00000042A488 0 en-AU
000000029094 00000042A494 0 es-ES
0000000290A0 00000042A4A0 0 fr-CA
0000000290AC 00000042A4AC 0 sr-SP-Cyrl
0000000290C4 00000042A4C4 0 se-FI
0000000290D0 00000042A4D0 0 quz-PE
0000000290E0 00000042A4E0 0 ar-LY
0000000290EC 00000042A4EC 0 zh-SG
0000000290F8 00000042A4F8 0 de-LU
000000029104 00000042A504 0 en-CA
000000029110 00000042A510 0 es-GT
00000002911C 00000042A51C 0 fr-CH
000000029128 00000042A528 0 hr-BA
000000029134 00000042A534 0 smj-NO
000000029144 00000042A544 0 ar-DZ
000000029150 00000042A550 0 zh-MO
00000002915C 00000042A55C 0 de-LI
000000029168 00000042A568 0 en-NZ
000000029174 00000042A574 0 es-CR
000000029180 00000042A580 0 fr-LU
00000002918C 00000042A58C 0 bs-BA-Latn
0000000291A4 00000042A5A4 0 smj-SE
0000000291B4 00000042A5B4 0 ar-MA
0000000291C0 00000042A5C0 0 en-IE
0000000291CC 00000042A5CC 0 es-PA
0000000291D8 00000042A5D8 0 fr-MC
0000000291E4 00000042A5E4 0 sr-BA-Latn
0000000291FC 00000042A5FC 0 sma-NO
00000002920C 00000042A60C 0 ar-TN
000000029218 00000042A618 0 en-ZA
000000029224 00000042A624 0 es-DO
000000029230 00000042A630 0 sr-BA-Cyrl
000000029248 00000042A648 0 sma-SE
000000029258 00000042A658 0 ar-OM
000000029264 00000042A664 0 en-JM
000000029270 00000042A670 0 es-VE
00000002927C 00000042A67C 0 sms-FI
00000002928C 00000042A68C 0 ar-YE
000000029298 00000042A698 0 en-CB
0000000292A4 00000042A6A4 0 es-CO
0000000292B0 00000042A6B0 0 smn-FI
File pos Mem pos ID Text
======== ======= == ====
0000000292C0 00000042A6C0 0 ar-SY
0000000292CC 00000042A6CC 0 en-BZ
0000000292D8 00000042A6D8 0 es-PE
0000000292E4 00000042A6E4 0 ar-JO
0000000292F0 00000042A6F0 0 en-TT
0000000292FC 00000042A6FC 0 es-AR
000000029308 00000042A708 0 ar-LB
000000029314 00000042A714 0 en-ZW
000000029320 00000042A720 0 es-EC
00000002932C 00000042A72C 0 ar-KW
000000029338 00000042A738 0 en-PH
000000029344 00000042A744 0 es-CL
000000029350 00000042A750 0 ar-AE
00000002935C 00000042A75C 0 es-UY
000000029368 00000042A768 0 ar-BH
000000029374 00000042A774 0 es-PY
000000029380 00000042A780 0 ar-QA
00000002938C 00000042A78C 0 es-BO
000000029398 00000042A798 0 es-SV
0000000293A4 00000042A7A4 0 es-HN
0000000293B0 00000042A7B0 0 es-NI
0000000293BC 00000042A7BC 0 es-PR
0000000293C8 00000042A7C8 0 zh-CHT
0000000293E0 00000042A7E0 0 af-za
0000000293EC 00000042A7EC 0 ar-ae
0000000293F8 00000042A7F8 0 ar-bh
000000029404 00000042A804 0 ar-dz
000000029410 00000042A810 0 ar-eg
00000002941C 00000042A81C 0 ar-iq
000000029428 00000042A828 0 ar-jo
000000029434 00000042A834 0 ar-kw
000000029440 00000042A840 0 ar-lb
00000002944C 00000042A84C 0 ar-ly
000000029458 00000042A858 0 ar-ma
000000029464 00000042A864 0 ar-om
000000029470 00000042A870 0 ar-qa
00000002947C 00000042A87C 0 ar-sa
000000029488 00000042A888 0 ar-sy
000000029494 00000042A894 0 ar-tn
0000000294A0 00000042A8A0 0 ar-ye
0000000294AC 00000042A8AC 0 az-az-cyrl
0000000294C4 00000042A8C4 0 az-az-latn
0000000294DC 00000042A8DC 0 be-by
0000000294E8 00000042A8E8 0 bg-bg
0000000294F4 00000042A8F4 0 bn-in
000000029500 00000042A900 0 bs-ba-latn
000000029518 00000042A918 0 ca-es
000000029524 00000042A924 0 cs-cz
000000029530 00000042A930 0 cy-gb
00000002953C 00000042A93C 0 da-dk
000000029548 00000042A948 0 de-at
000000029554 00000042A954 0 de-ch
000000029560 00000042A960 0 de-de
00000002956C 00000042A96C 0 de-li
000000029578 00000042A978 0 de-lu
000000029584 00000042A984 0 div-mv
000000029594 00000042A994 0 el-gr
0000000295A0 00000042A9A0 0 en-au
0000000295AC 00000042A9AC 0 en-bz
0000000295B8 00000042A9B8 0 en-ca
File pos Mem pos ID Text
======== ======= == ====
0000000295C4 00000042A9C4 0 en-cb
0000000295D0 00000042A9D0 0 en-gb
0000000295DC 00000042A9DC 0 en-ie
0000000295E8 00000042A9E8 0 en-jm
0000000295F4 00000042A9F4 0 en-nz
000000029600 00000042AA00 0 en-ph
00000002960C 00000042AA0C 0 en-tt
000000029618 00000042AA18 0 en-us
000000029624 00000042AA24 0 en-za
000000029630 00000042AA30 0 en-zw
00000002963C 00000042AA3C 0 es-ar
000000029648 00000042AA48 0 es-bo
000000029654 00000042AA54 0 es-cl
000000029660 00000042AA60 0 es-co
00000002966C 00000042AA6C 0 es-cr
000000029678 00000042AA78 0 es-do
000000029684 00000042AA84 0 es-ec
000000029690 00000042AA90 0 es-es
00000002969C 00000042AA9C 0 es-gt
0000000296A8 00000042AAA8 0 es-hn
0000000296B4 00000042AAB4 0 es-mx
0000000296C0 00000042AAC0 0 es-ni
0000000296CC 00000042AACC 0 es-pa
0000000296D8 00000042AAD8 0 es-pe
0000000296E4 00000042AAE4 0 es-pr
0000000296F0 00000042AAF0 0 es-py
0000000296FC 00000042AAFC 0 es-sv
000000029708 00000042AB08 0 es-uy
000000029714 00000042AB14 0 es-ve
000000029720 00000042AB20 0 et-ee
00000002972C 00000042AB2C 0 eu-es
000000029738 00000042AB38 0 fa-ir
000000029744 00000042AB44 0 fi-fi
000000029750 00000042AB50 0 fo-fo
00000002975C 00000042AB5C 0 fr-be
000000029768 00000042AB68 0 fr-ca
000000029774 00000042AB74 0 fr-ch
000000029780 00000042AB80 0 fr-fr
00000002978C 00000042AB8C 0 fr-lu
000000029798 00000042AB98 0 fr-mc
0000000297A4 00000042ABA4 0 gl-es
0000000297B0 00000042ABB0 0 gu-in
0000000297BC 00000042ABBC 0 he-il
0000000297C8 00000042ABC8 0 hi-in
0000000297D4 00000042ABD4 0 hr-ba
0000000297E0 00000042ABE0 0 hr-hr
0000000297EC 00000042ABEC 0 hu-hu
0000000297F8 00000042ABF8 0 hy-am
000000029804 00000042AC04 0 id-id
000000029810 00000042AC10 0 is-is
00000002981C 00000042AC1C 0 it-ch
000000029828 00000042AC28 0 it-it
000000029834 00000042AC34 0 ja-jp
000000029840 00000042AC40 0 ka-ge
00000002984C 00000042AC4C 0 kk-kz
000000029858 00000042AC58 0 kn-in
000000029864 00000042AC64 0 kok-in
000000029874 00000042AC74 0 ko-kr
000000029880 00000042AC80 0 ky-kg
00000002988C 00000042AC8C 0 lt-lt
File pos Mem pos ID Text
======== ======= == ====
000000029898 00000042AC98 0 lv-lv
0000000298A4 00000042ACA4 0 mi-nz
0000000298B0 00000042ACB0 0 mk-mk
0000000298BC 00000042ACBC 0 ml-in
0000000298C8 00000042ACC8 0 mn-mn
0000000298D4 00000042ACD4 0 mr-in
0000000298E0 00000042ACE0 0 ms-bn
0000000298EC 00000042ACEC 0 ms-my
0000000298F8 00000042ACF8 0 mt-mt
000000029904 00000042AD04 0 nb-no
000000029910 00000042AD10 0 nl-be
00000002991C 00000042AD1C 0 nl-nl
000000029928 00000042AD28 0 nn-no
000000029934 00000042AD34 0 ns-za
000000029940 00000042AD40 0 pa-in
00000002994C 00000042AD4C 0 pl-pl
000000029958 00000042AD58 0 pt-br
000000029964 00000042AD64 0 pt-pt
000000029970 00000042AD70 0 quz-bo
000000029980 00000042AD80 0 quz-ec
000000029990 00000042AD90 0 quz-pe
0000000299A0 00000042ADA0 0 ro-ro
0000000299AC 00000042ADAC 0 ru-ru
0000000299B8 00000042ADB8 0 sa-in
0000000299C4 00000042ADC4 0 se-fi
0000000299D0 00000042ADD0 0 se-no
0000000299DC 00000042ADDC 0 se-se
0000000299E8 00000042ADE8 0 sk-sk
0000000299F4 00000042ADF4 0 sl-si
000000029A00 00000042AE00 0 sma-no
000000029A10 00000042AE10 0 sma-se
000000029A20 00000042AE20 0 smj-no
000000029A30 00000042AE30 0 smj-se
000000029A40 00000042AE40 0 smn-fi
000000029A50 00000042AE50 0 sms-fi
000000029A60 00000042AE60 0 sq-al
000000029A6C 00000042AE6C 0 sr-ba-cyrl
000000029A84 00000042AE84 0 sr-ba-latn
000000029A9C 00000042AE9C 0 sr-sp-cyrl
000000029AB4 00000042AEB4 0 sr-sp-latn
000000029ACC 00000042AECC 0 sv-fi
000000029AD8 00000042AED8 0 sv-se
000000029AE4 00000042AEE4 0 sw-ke
000000029AF0 00000042AEF0 0 syr-sy
000000029B00 00000042AF00 0 ta-in
000000029B0C 00000042AF0C 0 te-in
000000029B18 00000042AF18 0 th-th
000000029B24 00000042AF24 0 tn-za
000000029B30 00000042AF30 0 tr-tr
000000029B3C 00000042AF3C 0 tt-ru
000000029B48 00000042AF48 0 uk-ua
000000029B54 00000042AF54 0 ur-pk
000000029B60 00000042AF60 0 uz-uz-cyrl
000000029B78 00000042AF78 0 uz-uz-latn
000000029B90 00000042AF90 0 vi-vn
000000029B9C 00000042AF9C 0 xh-za
000000029BA8 00000042AFA8 0 zh-chs
000000029BB8 00000042AFB8 0 zh-cht
000000029BC8 00000042AFC8 0 zh-cn
000000029BD4 00000042AFD4 0 zh-hk
File pos Mem pos ID Text
======== ======= == ====
000000029BE0 00000042AFE0 0 zh-mo
000000029BEC 00000042AFEC 0 zh-sg
000000029BF8 00000042AFF8 0 zh-tw
000000029C04 00000042B004 0 zu-za
00000002A478 00000042B878 0 runtime error
00000002A5CC 00000042B9CC 0 Program:
00000002A5E0 00000042B9E0 0 <program name unknown>
00000002A620 00000042BA20 0 Microsoft Visual C++ Runtime Library
00000002A93C 00000042BD3C 0 Sunday
00000002A94C 00000042BD4C 0 Monday
00000002A95C 00000042BD5C 0 Tuesday
00000002A96C 00000042BD6C 0 Wednesday
00000002A980 00000042BD80 0 Thursday
00000002A994 00000042BD94 0 Friday
00000002A9A4 00000042BDA4 0 Saturday
00000002AA18 00000042BE18 0 January
00000002AA28 00000042BE28 0 February
00000002AA3C 00000042BE3C 0 March
00000002AA48 00000042BE48 0 April
00000002AA6C 00000042BE6C 0 August
00000002AA7C 00000042BE7C 0 September
00000002AA90 00000042BE90 0 October
00000002AAA0 00000042BEA0 0 November
00000002AAB4 00000042BEB4 0 December
00000002AAD8 00000042BED8 0 MM/dd/yy
00000002AAEC 00000042BEEC 0 dddd, MMMM dd, yyyy
00000002AB14 00000042BF14 0 HH:mm:ss
00000002AB30 00000042BF30 0 (null)
00000002AC17 00000042C017 0 ALC_ALL
00000002AC28 00000042C028 0 LC_COLLATE
00000002AC40 00000042C040 0 LC_CTYPE
00000002AC54 00000042C054 0 LC_MONETARY
00000002AC6C 00000042C06C 0 LC_NUMERIC
00000002AC84 00000042C084 0 LC_TIME
00000002AE04 00000042C204 0 USER32.DLL
00000002B91C 00000042CD1C 0 american
00000002B930 00000042CD30 0 american english
00000002B954 00000042CD54 0 american-english
00000002B978 00000042CD78 0 australian
00000002B990 00000042CD90 0 belgian
00000002B9A0 00000042CDA0 0 canadian
00000002B9C4 00000042CDC4 0 chinese
00000002B9D4 00000042CDD4 0 chinese-hongkong
00000002B9F8 00000042CDF8 0 chinese-simplified
00000002BA20 00000042CE20 0 chinese-singapore
00000002BA44 00000042CE44 0 chinese-traditional
00000002BA6C 00000042CE6C 0 dutch-belgian
00000002BA88 00000042CE88 0 english-american
00000002BAAC 00000042CEAC 0 english-aus
00000002BAC4 00000042CEC4 0 english-belize
00000002BAE4 00000042CEE4 0 english-can
00000002BAFC 00000042CEFC 0 english-caribbean
00000002BB20 00000042CF20 0 english-ire
00000002BB38 00000042CF38 0 english-jamaica
00000002BB58 00000042CF58 0 english-nz
00000002BB70 00000042CF70 0 english-south africa
00000002BB9C 00000042CF9C 0 english-trinidad y tobago
00000002BBD0 00000042CFD0 0 english-uk
00000002BBE8 00000042CFE8 0 english-us
00000002BC00 00000042D000 0 english-usa
File pos Mem pos ID Text
======== ======= == ====
00000002BC18 00000042D018 0 french-belgian
00000002BC38 00000042D038 0 french-canadian
00000002BC58 00000042D058 0 french-luxembourg
00000002BC7C 00000042D07C 0 french-swiss
00000002BC98 00000042D098 0 german-austrian
00000002BCB8 00000042D0B8 0 german-lichtenstein
00000002BCE0 00000042D0E0 0 german-luxembourg
00000002BD04 00000042D104 0 german-swiss
00000002BD20 00000042D120 0 irish-english
00000002BD3C 00000042D13C 0 italian-swiss
00000002BD58 00000042D158 0 norwegian
00000002BD6C 00000042D16C 0 norwegian-bokmal
00000002BD90 00000042D190 0 norwegian-nynorsk
00000002BDB4 00000042D1B4 0 portuguese-brazilian
00000002BDE0 00000042D1E0 0 spanish-argentina
00000002BE04 00000042D204 0 spanish-bolivia
00000002BE24 00000042D224 0 spanish-chile
00000002BE40 00000042D240 0 spanish-colombia
00000002BE64 00000042D264 0 spanish-costa rica
00000002BE8C 00000042D28C 0 spanish-dominican republic
00000002BEC4 00000042D2C4 0 spanish-ecuador
00000002BEE4 00000042D2E4 0 spanish-el salvador
00000002BF0C 00000042D30C 0 spanish-guatemala
00000002BF30 00000042D330 0 spanish-honduras
00000002BF54 00000042D354 0 spanish-mexican
00000002BF74 00000042D374 0 spanish-modern
00000002BF94 00000042D394 0 spanish-nicaragua
00000002BFB8 00000042D3B8 0 spanish-panama
00000002BFD8 00000042D3D8 0 spanish-paraguay
00000002BFFC 00000042D3FC 0 spanish-peru
00000002C018 00000042D418 0 spanish-puerto rico
00000002C040 00000042D440 0 spanish-uruguay
00000002C060 00000042D460 0 spanish-venezuela
00000002C084 00000042D484 0 swedish-finland
00000002C0A4 00000042D4A4 0 swiss
00000002C1D4 00000042D5D4 0 america
00000002C1E4 00000042D5E4 0 britain
00000002C1F4 00000042D5F4 0 china
00000002C200 00000042D600 0 czech
00000002C20C 00000042D60C 0 england
00000002C21C 00000042D61C 0 great britain
00000002C238 00000042D638 0 holland
00000002C248 00000042D648 0 hong-kong
00000002C25C 00000042D65C 0 new-zealand
00000002C27C 00000042D67C 0 pr china
00000002C290 00000042D690 0 pr-china
00000002C2A4 00000042D6A4 0 puerto-rico
00000002C2BC 00000042D6BC 0 slovak
00000002C2CC 00000042D6CC 0 south africa
00000002C2E8 00000042D6E8 0 south korea
00000002C300 00000042D700 0 south-africa
00000002C31C 00000042D71C 0 south-korea
00000002C334 00000042D734 0 trinidad & tobago
00000002C358 00000042D758 0 united-kingdom
00000002C378 00000042D778 0 united-states
00000002C3CB 00000042D7CB 0 2CONOUT$
00000002C51B 00000042D91B 0 X.DEFAULT\XFS\LOGICAL_SERVICES
00000002C774 00000042DB74 0 dMain
00000002D630 00000042EA30 0 dispenserprogm
00000002D713 00000042EB13 0 NTahoma
File pos Mem pos ID Text
======== ======= == ====
00000002D724 00000042EB24 0 dDispW
00000002D734 00000042EB34 0 Dispenser
00000002D788 00000042EB88 0 out of service
00000002D7A8 00000042EBA8 0 Arial Black
000000050F97 000000452B97 0 }Sysinternals License
000000050FC4 000000452BC4 0 %s License Agreement
000000050FF0 000000452BF0 0 RICHEDIT
000000051004 000000452C04 0 &Print
000000051014 000000452C14 0 &Decline
000000051028 000000452C28 0 &Agree
000000051038 000000452C38 0 You can also use the /accepteula command-line switch to accept the EULA.
0000000510CC 000000452CCC 0 MS Shell Dlg
0000000510E8 000000452CE8 0 License Agreement
00000005110C 000000452D0C 0 Riched32.dll
000000051128 000000452D28 0 EulaAccepted
000000051144 000000452D44 0 Software\Sysinternals\%s
000000051178 000000452D78 0 -accepteula
000000051190 000000452D90 0 /accepteula
0000000511A8 000000452DA8 0 Shell32.dll
000000051272 000000452E72 0 Error deleting %s:
00000005129E 000000452E9E 0 Error overwriting %s:
0000000512CE 000000452ECE 0 Error opening %s for delete:
000000051322 000000452F22 0 Error opening %s for compressed file scan:
00000005137C 000000452F7C 0 %s...
000000051394 000000452F94 0 %s\%s
0000000513A0 000000452FA0 0 %s\*.*
00000005144E 00000045304E 0 Cleaning MFT...%c
00000005147A 00000045307A 0
0000000514F4 0000004530F4 0 %sSDELMFT%06d
000000051510 000000453110 0 %s\SDELMFT%06d
000000051530 000000453130 0 %sSDELTEMP1
000000051548 000000453148 0 %s\SDELTEMP1
00000005156A 00000045316A 0 Cleaning free space on %s: %d%%
0000000515B2 0000004531B2 0 Cleaning free space to securely delete compressed files: %d%%
000000051630 000000453230 0 Could not create free-space cleanup file:
000000051688 000000453288 0 %sSDELTEMP
000000051730 000000453330 0 Could not determine amount of free space:
000000051788 000000453388 0 %s\SDELTEMP
0000000517A0 0000004533A0 0 %TEMP%
0000000517B0 0000004533B0 0 kernel32.dll
0000000517DF 0000004533DF 0 WCould not determine disk cluster size:
000000051830 000000453430 0 Zeroing free space on %s: 0%%
000000051870 000000453470 0 Zeroing free space to securely delete compressed files: 0%%
000000051938 000000453538 0 |/-\|/-\
000000051A5C 00000045365C 0 ntdll.dll
000000051EE4 000000453AE4 0 Kernel32.dll
000000051F20 000000453B20 0 SDelete
00000005203C 000000453C3C 0 mscoree.dll
000000052754 000000454354 0 KERNEL32.DLL
0000000527AC 0000004543AC 0 (null)
000000054EEC 000000456AEC 0 \\.\A:
000000055ED6 000000457AD6 0 VS_VERSION_INFO
000000055F32 000000457B32 0 StringFileInfo
000000055F56 000000457B56 0 040904b0
000000055F6E 000000457B6E 0 CompanyName
000000055F88 000000457B88 0 Sysinternals
000000055FAA 000000457BAA 0 FileDescription
000000055FCC 000000457BCC 0 sdelete
000000055FE2 000000457BE2 0 FileVersion
00000005600E 000000457C0E 0 InternalName
File pos Mem pos ID Text
======== ======= == ====
000000056028 000000457C28 0 sdelete
00000005603E 000000457C3E 0 LegalCopyright
000000056072 000000457C72 0 1999-2012 Mark Russinovich
0000000560B2 000000457CB2 0 OriginalFilename
0000000560D4 000000457CD4 0 sdelete.exe
0000000560F2 000000457CF2 0 ProductName
00000005610C 000000457D0C 0 Sysinternals Sdelete
00000005613E 000000457D3E 0 ProductVersion
00000005616E 000000457D6E 0 VarFileInfo
00000005618E 000000457D8E 0 Translation
00000000004D 00000040004D 0 !This program cannot be run in DOS mode.
0000000000F8 0000004000F8 0 .)nU[LordPE]
0000000001E8 0000004001E8 0 .text
000000000210 000000400210 0 .rdata
000000000237 000000400237 0 @.data
000000000260 000000400260 0 .rsrc
000000000287 000000400287 0 @.reloc
000000002281 000000402E81 0 sC+1W
000000002720 000000403320 0 PQSVW
000000003133 000000403D33 0 D$DPh
0000000059CF 0000004065CF 0 D$@SVW
000000005B1F 00000040671F 0 CD$<P
000000005B29 000000406729 0 D$$RP
000000005BDA 0000004067DA 0 D$ j@P
000000005C5A 00000040685A 0 D$ j@P
000000005CDD 0000004068DD 0 D$$j@P
000000005D5D 00000040695D 0 D$$j@P
000000005F87 000000406B87 0 D$8jlP
0000000061B8 000000406DB8 0 D$8jlP
000000006459 000000407059 0 D$DPS
000000006502 000000407102 0 CD$@P
00000000657C 00000040717C 0 D$ ;D$(u
0000000065E2 0000004071E2 0 CD$@VW
0000000066B1 0000004072B1 0 CD$\P
0000000066D8 0000004072D8 0 CD$DP
000000006725 000000407325 0 CD$DP
00000000675D 00000040735D 0 CD$@+
00000000676F 00000040736F 0 D$$RPW
000000006796 000000407396 0 \$\QSW
0000000068BF 0000004074BF 0 D$HSVW
000000006ADE 0000004076DE 0 CL$DQ
000000006B08 000000407708 0 CD$,P
000000006B55 000000407755 0 CD$,P
000000006B8D 00000040778D 0 CD$(+
000000006B9F 00000040779F 0 D$$RPS
000000006BC6 0000004077C6 0 t$HQVS
000000009313 000000409F13 0 QSVWj
0000000094C3 00000040A0C3 0 QSVWj
00000000AE07 00000040BA07 0 9x$u#9H
00000000B15B 00000040BD5B 0 +G$A+
00000000BC3C 00000040C83C 0 wqtfH
00000000BE2E 00000040CA2E 0 ujPPPP
00000000C7D8 00000040D3D8 0 D$ PS
00000000C7F4 00000040D3F4 0 D$ PS
00000000C86A 00000040D46A 0 D$ PS
00000000D65C 00000040E25C 0 HHuh@
00000000DB21 00000040E721 0 s(Rj
00000000FB15 000000410715 0 uPVWhf
00000000FD66 000000410966 0 PPPPPPPP
000000010AA2 0000004116A2 0 QQSVWd
File pos Mem pos ID Text
======== ======= == ====
000000010D5F 00000041195F 0 PRAQh
000000011278 000000411E78 0 SSSSS
0000000112FE 000000411EFE 0 PWSWW
00000001131D 000000411F1D 0 WWWWW
000000011376 000000411F76 0 PPPPP
000000012CB9 0000004138B9 0 ft!9q
000000012E1D 000000413A1D 0 PPPPP
000000012FD0 000000413BD0 0 PP9E u
00000001524F 000000415E4F 0 PPPPP
0000000153BB 000000415FBB 0 jA[jZZ+
000000015510 000000416110 0 Genuu_
000000015519 000000416119 0 ineIuV
000000015522 000000416122 0 nteluM3
0000000159B2 0000004165B2 0 SSSSS
000000015B89 000000416789 0 VVVVV
000000015DAA 0000004169AA 0 PPPPP
00000001611D 000000416D1D 0 ~pjCXf
000000016A6D 00000041766D 0 tf= $C
0000000170DD 000000417CDD 0 <at-<rt"<wt
00000001714D 000000417D4D 0 tRHtC
0000000171D1 000000417DD1 0 t;Ht+
00000001733F 000000417F3F 0 URPQQh
000000018BBA 0000004197BA 0 j@j _W
000000018C7A 00000041987A 0 } j@W
00000001901D 000000419C1D 0 < t8< t4
0000000190F7 000000419CF7 0 t@VSP
000000019152 000000419D52 0 PPPPP
00000001926F 000000419E6F 0 SPPP+
000000019278 000000419E78 0 FVWPP
00000001929E 000000419E9E 0 SVWPP
0000000193A5 000000419FA5 0 9E WW
000000019600 00000041A200 0 PPPPP
00000001966E 00000041A26E 0 VVVVV
0000000196A6 00000041A2A6 0 j.Yf;
00000001970F 00000041A30F 0 j.Yf;
000000019715 00000041A315 0 tyPVj@W
00000001972A 00000041A32A 0 _tcPVj@
00000001974B 00000041A34B 0 uCPVj
000000019762 00000041A362 0 u#j,Xf;
000000019789 00000041A389 0 PPPPP
000000019798 00000041A398 0 SSSSS
000000019867 00000041A467 0 >Cu/f9F
000000019A44 00000041A644 0 SSSSS
000000019A9B 00000041A69B 0 @PSjU
000000019AB9 00000041A6B9 0 PPPPP
000000019AF8 00000041A6F8 0 SSSSS
000000019DE9 00000041A9E9 0 QQQQQ
000000019EA5 00000041AAA5 0 j;Yf9
000000019F1F 00000041AB1F 0 j;Yf9
00000001A070 00000041AC70 0 PPPPP
00000001A408 00000041B008 0 VVVVV
00000001A4A0 00000041B0A0 0 WVSj
00000001A742 00000041B342 0 RVSQSWV
00000001A77D 00000041B37D 0 RVSQj
00000001A886 00000041B486 0 QVVVj
00000001B4D5 00000041C0D5 0 ,SVWj0X
00000001B609 00000041C209 0 u'j0X
00000001B733 00000041C333 0 Wj0XPV
00000001B7D2 00000041C3D2 0 PjdSQ
00000001B939 00000041C539 0 -jd[;
File pos Mem pos ID Text
======== ======= == ====
00000001B98C 00000041C58C 0 WWWWW
00000001BED1 00000041CAD1 0 VVVVV
00000001C31D 00000041CF1D 0 SVWjA_jZ+
00000001C3C5 00000041CFC5 0 uBjAYjZ+
00000001C6D9 00000041D2D9 0 tO95,
00000001C8C2 00000041D4C2 0 t VV9u
00000001CB51 00000041D751 0 PjPW
00000001CB68 00000041D768 0 $PjQW
00000001CBB0 00000041D7B0 0 *PjTW
00000001CBC7 00000041D7C7 0 +PjUW
00000001CBDE 00000041D7DE 0 ,PjVW
00000001CBF8 00000041D7F8 0 -PjWW
00000001CC0F 00000041D80F 0 .PjRW
00000001CC26 00000041D826 0 /PjSW
00000001CC9C 00000041D89C 0 HPjPW
00000001CCB6 00000041D8B6 0 LPjQW
00000001CF8D 00000041DB8D 0 <0|o<9
00000001D503 00000041E103 0 G Pj*S
00000001D517 00000041E117 0 G$Pj+S
00000001D52B 00000041E12B 0 G(Pj,S
00000001D53F 00000041E13F 0 G,Pj-S
00000001D556 00000041E156 0 G0Pj.S
00000001D56A 00000041E16A 0 G4Pj/S
00000001D592 00000041E192 0 G8PjDS
00000001D5A9 00000041E1A9 0 G<PjES
00000001D5BD 00000041E1BD 0 G@PjFS
00000001D5D1 00000041E1D1 0 GDPjGS
00000001D5E5 00000041E1E5 0 GHPjHS
00000001D5FC 00000041E1FC 0 GLPjIS
00000001D610 00000041E210 0 GPPjJS
00000001D624 00000041E224 0 GTPjKS
00000001D638 00000041E238 0 GXPjLS
00000001D64F 00000041E24F 0 G\PjMS
00000001D677 00000041E277 0 GdPjOS
00000001D68B 00000041E28B 0 GhPj8S
00000001D6A2 00000041E2A2 0 GlPj9S
00000001D6B6 00000041E2B6 0 GpPj:S
00000001D6CA 00000041E2CA 0 GtPj;S
00000001D6DE 00000041E2DE 0 GxPj<S
00000001D6F5 00000041E2F5 0 G|Pj=S
00000001D73C 00000041E33C 0 Pj@Sj
00000001DA82 00000041E682 0 PjOSj
00000001E090 00000041EC90 0 HHtVHHt
00000001E587 00000041F187 0 >0t-N
00000001E9AF 00000041F5AF 0 QVWSj
00000001EA9B 00000041F69B 0 v N+D$
00000001EE18 00000041FA18 0 r)f;q
00000001EE92 00000041FA92 0 r2f;A
00000001EF03 00000041FB03 0 SVWUj
00000001EFA4 00000041FBA4 0 ;t$,v-
00000001F029 00000041FC29 0 UQPXY]Y[
00000001F471 000000420071 0 ~';_t|%3
00000001F485 000000420085 0 wtVj
00000001F49A 00000042009A 0 ;_tr.
00000001F6F5 0000004202F5 0 PPPPP
00000001FA03 000000420603 0 WWWWW
00000001FAB4 0000004206B4 0 PPPPP
00000001FC07 000000420807 0 Yu2Vj@h
00000001FCFD 0000004208FD 0 tMj_S
00000001FD55 000000420955 0 PPPPP
File pos Mem pos ID Text
======== ======= == ====
0000000210B1 000000421CB1 0 SSSSV
00000002113D 000000421D3D 0 SSSSV
0000000212E6 000000421EE6 0 PPPPP
0000000213A6 000000421FA6 0 v N+D$
0000000214E6 0000004220E6 0 Ht+Ht$Ht
000000021768 000000422368 0 tHHt*Ht#
000000021C88 000000422888 0 uJSSR
000000021E40 000000422A40 0 SSSSS
00000002223A 000000422E3A 0 SVjA[jZ
0000000222FF 000000422EFF 0 jAZjZ
000000023104 000000423D04 0 +t"HHt
00000002315A 000000423D5A 0 9] t"
000000023FB6 000000424BB6 0 SSSSS
0000000247A8 0000004253A8 0 jxYf;
0000000247B0 0000004253B0 0 jXYf;
0000000247DA 0000004253DA 0 jxYf;
0000000247E2 0000004253E2 0 jXYf;
00000002480B 00000042540B 0 uHjAXf;
000000024AEE 0000004256EE 0 j0Yf;
0000000263B0 0000004277B0 0 permission denied
0000000263C4 0000004277C4 0 file exists
0000000263D0 0000004277D0 0 no such device
0000000263E0 0000004277E0 0 filename too long
0000000263F4 0000004277F4 0 device or resource busy
00000002640C 00000042780C 0 io error
000000026418 000000427818 0 directory not empty
00000002642C 00000042782C 0 invalid argument
000000026440 000000427840 0 no space on device
000000026454 000000427854 0 no such file or directory
000000026470 000000427870 0 function not supported
000000026488 000000427888 0 no lock available
00000002649C 00000042789C 0 not enough memory
0000000264B0 0000004278B0 0 resource unavailable try again
0000000264D0 0000004278D0 0 cross device link
0000000264E4 0000004278E4 0 operation canceled
0000000264F8 0000004278F8 0 too many files open
00000002650C 00000042790C 0 permission_denied
000000026520 000000427920 0 address_in_use
000000026530 000000427930 0 address_not_available
000000026548 000000427948 0 address_family_not_supported
000000026568 000000427968 0 connection_already_in_progress
000000026588 000000427988 0 bad_file_descriptor
00000002659C 00000042799C 0 connection_aborted
0000000265B0 0000004279B0 0 connection_refused
0000000265C4 0000004279C4 0 connection_reset
0000000265D8 0000004279D8 0 destination_address_required
0000000265F8 0000004279F8 0 bad_address
000000026604 000000427A04 0 host_unreachable
000000026618 000000427A18 0 operation_in_progress
000000026630 000000427A30 0 interrupted
00000002663C 000000427A3C 0 invalid_argument
000000026650 000000427A50 0 already_connected
000000026664 000000427A64 0 too_many_files_open
000000026678 000000427A78 0 message_size
000000026688 000000427A88 0 filename_too_long
00000002669C 000000427A9C 0 network_down
0000000266AC 000000427AAC 0 network_reset
0000000266BC 000000427ABC 0 network_unreachable
0000000266D0 000000427AD0 0 no_buffer_space
0000000266E0 000000427AE0 0 no_protocol_option
File pos Mem pos ID Text
======== ======= == ====
0000000266F4 000000427AF4 0 not_connected
000000026704 000000427B04 0 not_a_socket
000000026714 000000427B14 0 operation_not_supported
00000002672C 000000427B2C 0 protocol_not_supported
000000026744 000000427B44 0 wrong_protocol_type
000000026758 000000427B58 0 timed_out
000000026764 000000427B64 0 operation_would_block
00000002677C 000000427B7C 0 address family not supported
00000002679C 000000427B9C 0 address in use
0000000267AC 000000427BAC 0 address not available
0000000267C4 000000427BC4 0 already connected
0000000267D8 000000427BD8 0 argument list too long
0000000267F0 000000427BF0 0 argument out of domain
000000026808 000000427C08 0 bad address
000000026814 000000427C14 0 bad file descriptor
000000026828 000000427C28 0 bad message
000000026834 000000427C34 0 broken pipe
000000026840 000000427C40 0 connection aborted
000000026854 000000427C54 0 connection already in progress
000000026874 000000427C74 0 connection refused
000000026888 000000427C88 0 connection reset
00000002689C 000000427C9C 0 destination address required
0000000268BC 000000427CBC 0 executable format error
0000000268D4 000000427CD4 0 file too large
0000000268E4 000000427CE4 0 host unreachable
0000000268F8 000000427CF8 0 identifier removed
00000002690C 000000427D0C 0 illegal byte sequence
000000026924 000000427D24 0 inappropriate io control operation
000000026948 000000427D48 0 invalid seek
000000026958 000000427D58 0 is a directory
000000026968 000000427D68 0 message size
000000026978 000000427D78 0 network down
000000026988 000000427D88 0 network reset
000000026998 000000427D98 0 network unreachable
0000000269AC 000000427DAC 0 no buffer space
0000000269BC 000000427DBC 0 no child process
0000000269D0 000000427DD0 0 no link
0000000269D8 000000427DD8 0 no message available
0000000269F0 000000427DF0 0 no message
0000000269FC 000000427DFC 0 no protocol option
000000026A10 000000427E10 0 no stream resources
000000026A24 000000427E24 0 no such device or address
000000026A40 000000427E40 0 no such process
000000026A50 000000427E50 0 not a directory
000000026A60 000000427E60 0 not a socket
000000026A70 000000427E70 0 not a stream
000000026A80 000000427E80 0 not connected
000000026A90 000000427E90 0 not supported
000000026AA0 000000427EA0 0 operation in progress
000000026AB8 000000427EB8 0 operation not permitted
000000026AD0 000000427ED0 0 operation not supported
000000026AE8 000000427EE8 0 operation would block
000000026B00 000000427F00 0 owner dead
000000026B0C 000000427F0C 0 protocol error
000000026B1C 000000427F1C 0 protocol not supported
000000026B34 000000427F34 0 read only file system
000000026B4C 000000427F4C 0 resource deadlock would occur
000000026B6C 000000427F6C 0 result out of range
000000026B80 000000427F80 0 state not recoverable
000000026B98 000000427F98 0 stream timeout
File pos Mem pos ID Text
======== ======= == ====
000000026BA8 000000427FA8 0 text file busy
000000026BB8 000000427FB8 0 timed out
000000026BC4 000000427FC4 0 too many files open in system
000000026BE4 000000427FE4 0 too many links
000000026BF4 000000427FF4 0 too many symbolic link levels
000000026C14 000000428014 0 value too large
000000026C24 000000428024 0 wrong protocol type
000000026CB4 0000004280B4 0 bad allocation
000000026E44 000000428244 0 0123456789abcdefghijklmnopqrstuvwxyz
000000026E94 000000428294 0 0123456789abcdefghijklmnopqrstuvwxyz
000000026EC8 0000004282C8 0
000000026F58 000000428358 0 0123456789abcdefABCDEF
000000027044 000000428444 0 Unknown exception
00000002707C 00000042847C 0 CorExitProcess
0000000270BC 0000004284BC 0 bad exception
000000027678 000000428A78 0 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]
0000000276B9 000000428AB9 0 abcdefghijklmnopqrstuvwxyz{|}~
0000000277F8 000000428BF8 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]
000000027839 000000428C39 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
0000000278F8 000000428CF8 0 FlsAlloc
000000027904 000000428D04 0 FlsFree
00000002790C 000000428D0C 0 FlsGetValue
000000027918 000000428D18 0 FlsSetValue
000000027924 000000428D24 0 InitializeCriticalSectionEx
000000027940 000000428D40 0 CreateSemaphoreExW
000000027954 000000428D54 0 SetThreadStackGuarantee
00000002796C 000000428D6C 0 CreateThreadpoolTimer
000000027984 000000428D84 0 SetThreadpoolTimer
000000027998 000000428D98 0 WaitForThreadpoolTimerCallbacks
0000000279B8 000000428DB8 0 CloseThreadpoolTimer
0000000279D0 000000428DD0 0 CreateThreadpoolWait
0000000279E8 000000428DE8 0 SetThreadpoolWait
0000000279FC 000000428DFC 0 CloseThreadpoolWait
000000027A10 000000428E10 0 FlushProcessWriteBuffers
000000027A2C 000000428E2C 0 FreeLibraryWhenCallbackReturns
000000027A4C 000000428E4C 0 GetCurrentProcessorNumber
000000027A68 000000428E68 0 GetLogicalProcessorInformation
000000027A88 000000428E88 0 CreateSymbolicLinkW
000000027A9C 000000428E9C 0 SetDefaultDllDirectories
000000027AB8 000000428EB8 0 EnumSystemLocalesEx
000000027ACC 000000428ECC 0 CompareStringEx
000000027ADC 000000428EDC 0 GetDateFormatEx
000000027AEC 000000428EEC 0 GetLocaleInfoEx
000000027AFC 000000428EFC 0 GetTimeFormatEx
000000027B0C 000000428F0C 0 GetUserDefaultLocaleName
000000027B28 000000428F28 0 IsValidLocaleName
000000027B3C 000000428F3C 0 LCMapStringEx
000000027B4C 000000428F4C 0 GetCurrentPackageId
00000002A71C 00000042BB1C 0 log10
00000002A754 00000042BB54 0 atan2
00000002A778 00000042BB78 0 floor
00000002A790 00000042BB90 0 ldexp
00000002A798 00000042BB98 0 _cabs
00000002A7A0 00000042BBA0 0 _hypot
00000002A7B0 00000042BBB0 0 frexp
00000002A7C4 00000042BBC4 0 _logb
00000002A7CC 00000042BBCC 0 _nextafter
00000002A7F4 00000042BBF4 0 Sunday
00000002A7FC 00000042BBFC 0 Monday
00000002A804 00000042BC04 0 Tuesday
File pos Mem pos ID Text
======== ======= == ====
00000002A80C 00000042BC0C 0 Wednesday
00000002A818 00000042BC18 0 Thursday
00000002A824 00000042BC24 0 Friday
00000002A82C 00000042BC2C 0 Saturday
00000002A868 00000042BC68 0 January
00000002A870 00000042BC70 0 February
00000002A87C 00000042BC7C 0 March
00000002A884 00000042BC84 0 April
00000002A89C 00000042BC9C 0 August
00000002A8A4 00000042BCA4 0 September
00000002A8B0 00000042BCB0 0 October
00000002A8B8 00000042BCB8 0 November
00000002A8C4 00000042BCC4 0 December
00000002A8D8 00000042BCD8 0 MM/dd/yy
00000002A8E4 00000042BCE4 0 dddd, MMMM dd, yyyy
00000002A8F8 00000042BCF8 0 HH:mm:ss
00000002AB28 00000042BF28 0 (null)
00000002AB61 00000042BF61 0 ( 8PX
00000002AB69 00000042BF69 0 700WP
00000002AB81 00000042BF81 0 xpxxxx
00000002ABA0 00000042BFA0 0 UTF-8
00000002ABA8 00000042BFA8 0 UTF-16LE
00000002ABB4 00000042BFB4 0 UNICODE
00000002ACB7 00000042C0B7 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]
00000002ACF8 00000042C0F8 0 abcdefghijklmnopqrstuvwxyz{|}~
00000002AD3C 00000042C13C 0 e+000
00000002ADC4 00000042C1C4 0 SunMonTueWedThuFriSat
00000002ADDC 00000042C1DC 0 JanFebMarAprMayJunJulAugSepOctNovDec
00000002AE1C 00000042C21C 0 MessageBoxW
00000002AE28 00000042C228 0 GetActiveWindow
00000002AE38 00000042C238 0 GetLastActivePopup
00000002AE4C 00000042C24C 0 GetUserObjectInformationW
00000002AE68 00000042C268 0 GetProcessWindowStation
00000002B008 00000042C408 0 __based(
00000002B014 00000042C414 0 __cdecl
00000002B01C 00000042C41C 0 __pascal
00000002B028 00000042C428 0 __stdcall
00000002B034 00000042C434 0 __thiscall
00000002B040 00000042C440 0 __fastcall
00000002B04C 00000042C44C 0 __clrcall
00000002B058 00000042C458 0 __eabi
00000002B060 00000042C460 0 __ptr64
00000002B068 00000042C468 0 __restrict
00000002B074 00000042C474 0 __unaligned
00000002B080 00000042C480 0 restrict(
00000002B094 00000042C494 0 delete
00000002B0B8 00000042C4B8 0 operator
00000002B139 00000042C539 0 vftable'
00000002B145 00000042C545 0 vbtable'
00000002B151 00000042C551 0 vcall'
00000002B159 00000042C559 0 typeof'
00000002B165 00000042C565 0 local static guard'
00000002B17D 00000042C57D 0 string'
00000002B189 00000042C589 0 vbase destructor'
00000002B19D 00000042C59D 0 vector deleting destructor'
00000002B1BD 00000042C5BD 0 default constructor closure'
00000002B1DD 00000042C5DD 0 scalar deleting destructor'
00000002B1FD 00000042C5FD 0 vector constructor iterator'
00000002B21D 00000042C61D 0 vector destructor iterator'
00000002B23D 00000042C63D 0 vector vbase constructor iterator'
File pos Mem pos ID Text
======== ======= == ====
00000002B261 00000042C661 0 virtual displacement map'
00000002B27D 00000042C67D 0 eh vector constructor iterator'
00000002B2A1 00000042C6A1 0 eh vector destructor iterator'
00000002B2C1 00000042C6C1 0 eh vector vbase constructor iterator'
00000002B2E9 00000042C6E9 0 copy constructor closure'
00000002B305 00000042C705 0 udt returning'
00000002B321 00000042C721 0 local vftable'
00000002B331 00000042C731 0 local vftable constructor closure'
00000002B354 00000042C754 0 new[]
00000002B35C 00000042C75C 0 delete[]
00000002B369 00000042C769 0 omni callsig'
00000002B379 00000042C779 0 placement delete closure'
00000002B395 00000042C795 0 placement delete[] closure'
00000002B3B5 00000042C7B5 0 managed vector constructor iterator'
00000002B3DD 00000042C7DD 0 managed vector destructor iterator'
00000002B405 00000042C805 0 eh vector copy constructor iterator'
00000002B42D 00000042C82D 0 eh vector vbase copy constructor iterator'
00000002B459 00000042C859 0 dynamic initializer for '
00000002B475 00000042C875 0 dynamic atexit destructor for '
00000002B499 00000042C899 0 vector copy constructor iterator'
00000002B4BD 00000042C8BD 0 vector vbase copy constructor iterator'
00000002B4E9 00000042C8E9 0 managed vector copy constructor iterator'
00000002B515 00000042C915 0 local static thread guard'
00000002B530 00000042C930 0 Type Descriptor'
00000002B544 00000042C944 0 Base Class Descriptor at (
00000002B560 00000042C960 0 Base Class Array'
00000002B574 00000042C974 0 Class Hierarchy Descriptor'
00000002B594 00000042C994 0 Complete Object Locator'
00000002B5D5 00000042C9D5 0 ('8PW
00000002B5DE 00000042C9DE 0 700PP
00000002B5F9 00000042C9F9 0 xppwpp
00000002C3C0 00000042D7C0 0 CreateFile2
00000002C3DC 00000042D7DC 0 1#SNAN
00000002C3E4 00000042D7E4 0 1#IND
00000002C3EC 00000042D7EC 0 1#INF
00000002C3F4 00000042D7F4 0 1#QNAN
00000002C3FC 00000042D7FC 0 generic
00000002C404 00000042D804 0 unknown error
00000002C414 00000042D814 0 iostream
00000002C420 00000042D820 0 iostream stream error
00000002C438 00000042D838 0 system
00000002C440 00000042D840 0 ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/
00000002C484 00000042D884 0 string too long
00000002C494 00000042D894 0 invalid string position
00000002C4AC 00000042D8AC 0 bad locale name
00000002C4BC 00000042D8BC 0 false
00000002C4CC 00000042D8CC 0 ios_base::badbit set
00000002C4E4 00000042D8E4 0 ios_base::failbit set
00000002C4FC 00000042D8FC 0 ios_base::eofbit set
00000002C558 00000042D958 0 .DEFAULT\XFS\LOGICAL_SERVICES\
00000002C578 00000042D978 0 class
00000002C584 00000042D984 0 vector<T> too long
00000002C598 00000042D998 0 bad cast
00000002C5A8 00000042D9A8 0 Press 1 to dispense money, 8 to permanently delete, 88 to force delete or 9 to pause
00000002C60C 00000042DA0C 0 Bills left:
00000002C61C 00000042DA1C 0 time(s)
00000002C628 00000042DA28 0 Wrong key. Tried:
00000002C63C 00000042DA3C 0 Enter second key. Press 9 to pause, 8 to permanently delete
00000002C680 00000042DA80 0 del.exe
00000002C690 00000042DA90 0 " /accepteula -p 3 -q "
File pos Mem pos ID Text
======== ======= == ====
00000002C6AB 00000042DAAB 0 shutdown -t 0 -r -f
00000002C6C0 00000042DAC0 0 del "%~f0"
00000002C6CF 00000042DACF 0 del "
00000002C6DA 00000042DADA 0 del "
00000002C6E0 00000042DAE0 0 ">NUL
00000002C6E7 00000042DAE7 0 if "%ERRORLEVEL%"=="0" goto start
00000002C70C 00000042DB0C 0 " 2>NUL | find /I /N "
00000002C724 00000042DB24 0 :start
00000002C72C 00000042DB2C 0 tasklist /FI "IMAGENAME eq
00000002C748 00000042DB48 0 del.bat
00000002C754 00000042DB54 0 cmd.exe /C "
00000002C764 00000042DB64 0 cmd.exe
00000002C784 00000042DB84 0 ERROR
00000002D650 00000042EA50 0 Blocking operation in progress
00000002D670 00000042EA70 0 No blocking operation in progress
00000002D694 00000042EA94 0 Device WFS_ERR_OP_IN_PROGRESS
00000002D6B4 00000042EAB4 0 pinpad is busy
00000002D6C4 00000042EAC4 0 pinpad not busy
00000002D6F0 00000042EAF0 0 Pinpad1
00000002D6F8 00000042EAF8 0 Failed to open registry
00000002D7DB 00000042EBDB 0 raB3G
00000002F862 000000430C62 0 GetCurrentProcess
00000002F876 000000430C76 0 Sleep
00000002F87E 000000430C7E 0 GetCurrentThreadId
00000002F894 000000430C94 0 CloseHandle
00000002F8A2 000000430CA2 0 GetCurrentProcessId
00000002F8B8 000000430CB8 0 GetModuleFileNameA
00000002F8CE 000000430CCE 0 GetLastError
00000002F8DE 000000430CDE 0 GetVolumeInformationW
00000002F8F6 000000430CF6 0 CreateMutexW
00000002F906 000000430D06 0 GetModuleFileNameW
00000002F91C 000000430D1C 0 OpenMutexW
00000002F92A 000000430D2A 0 SetLastError
00000002F93A 000000430D3A 0 GetSystemTime
00000002F94A 000000430D4A 0 CreateThread
00000002F958 000000430D58 0 KERNEL32.dll
00000002F968 000000430D68 0 ShowWindow
00000002F976 000000430D76 0 SetThreadDesktop
00000002F98A 000000430D8A 0 SwitchDesktop
00000002F99A 000000430D9A 0 CloseDesktop
00000002F9AA 000000430DAA 0 OpenInputDesktop
00000002F9BE 000000430DBE 0 CreateDesktopW
00000002F9D0 000000430DD0 0 DispatchMessageW
00000002F9E4 000000430DE4 0 TranslateMessage
00000002F9F8 000000430DF8 0 GetMessageW
00000002FA06 000000430E06 0 DefWindowProcW
00000002FA18 000000430E18 0 SendMessageW
00000002FA28 000000430E28 0 GetSystemMetrics
00000002FA3C 000000430E3C 0 CreateWindowExW
00000002FA4E 000000430E4E 0 SetWindowLongW
00000002FA60 000000430E60 0 ReleaseDC
00000002FA6C 000000430E6C 0 GetWindowLongW
00000002FA7E 000000430E7E 0 InvalidateRect
00000002FA90 000000430E90 0 LoadIconW
00000002FA9C 000000430E9C 0 RegisterClassExW
00000002FAB0 000000430EB0 0 BeginPaint
00000002FABE 000000430EBE 0 LoadCursorW
00000002FACC 000000430ECC 0 DrawTextA
00000002FAD8 000000430ED8 0 DrawTextW
00000002FAE4 000000430EE4 0 FillRect
File pos Mem pos ID Text
======== ======= == ====
00000002FAF0 000000430EF0 0 PostQuitMessage
00000002FB02 000000430F02 0 DestroyWindow
00000002FB12 000000430F12 0 EndPaint
00000002FB1C 000000430F1C 0 USER32.dll
00000002FB2A 000000430F2A 0 CreateSolidBrush
00000002FB3E 000000430F3E 0 GetObjectW
00000002FB4C 000000430F4C 0 SetDIBits
00000002FB58 000000430F58 0 CreateFontW
00000002FB66 000000430F66 0 CreateCompatibleDC
00000002FB7C 000000430F7C 0 SelectObject
00000002FB8C 000000430F8C 0 DeleteObject
00000002FB9C 000000430F9C 0 SetBkMode
00000002FBA8 000000430FA8 0 SetBkColor
00000002FBB6 000000430FB6 0 CreateDIBSection
00000002FBCA 000000430FCA 0 DeleteDC
00000002FBD6 000000430FD6 0 SetTextColor
00000002FBE6 000000430FE6 0 BitBlt
00000002FBEE 000000430FEE 0 GDI32.dll
00000002FBFA 000000430FFA 0 RegQueryValueExA
00000002FC0E 00000043100E 0 RegEnumKeyExA
00000002FC1E 00000043101E 0 RegOpenKeyExA
00000002FC2E 00000043102E 0 RegOpenKeyExW
00000002FC3E 00000043103E 0 RegCloseKey
00000002FC4C 00000043104C 0 CryptAcquireContextW
00000002FC64 000000431064 0 CryptSetKeyParam
00000002FC78 000000431078 0 CryptReleaseContext
00000002FC8E 00000043108E 0 CryptGenRandom
00000002FCA0 0000004310A0 0 CryptImportKey
00000002FCB2 0000004310B2 0 CryptEncrypt
00000002FCC2 0000004310C2 0 CryptDestroyKey
00000002FCD2 0000004310D2 0 ADVAPI32.dll
00000002FCE2 0000004310E2 0 ShellExecuteA
00000002FCF0 0000004310F0 0 SHELL32.dll
00000002FCFE 0000004310FE 0 WFSGetInfo
00000002FD0C 00000043110C 0 WFSFreeResult
00000002FD1C 00000043111C 0 WFSOpen
00000002FD26 000000431126 0 WFSClose
00000002FD32 000000431132 0 WFSExecute
00000002FD40 000000431140 0 WFSStartUp
00000002FD4E 00000043114E 0 WFSIsBlocking
00000002FD5C 00000043115C 0 MSXFS.dll
00000002FD68 000000431168 0 PathRemoveFileSpecA
00000002FD7E 00000043117E 0 PathAppendA
00000002FD8C 00000043118C 0 PathFindFileNameA
00000002FD9E 00000043119E 0 SHLWAPI.dll
00000002FDAC 0000004311AC 0 WideCharToMultiByte
00000002FDC2 0000004311C2 0 InterlockedIncrement
00000002FDDA 0000004311DA 0 InterlockedDecrement
00000002FDF2 0000004311F2 0 EncodePointer
00000002FE02 000000431202 0 DecodePointer
00000002FE12 000000431212 0 EnterCriticalSection
00000002FE2A 00000043122A 0 LeaveCriticalSection
00000002FE42 000000431242 0 DeleteCriticalSection
00000002FE5A 00000043125A 0 MultiByteToWideChar
00000002FE70 000000431270 0 GetStringTypeW
00000002FE82 000000431282 0 IsDebuggerPresent
00000002FE96 000000431296 0 IsProcessorFeaturePresent
00000002FEB2 0000004312B2 0 GetProcAddress
00000002FEC4 0000004312C4 0 LoadLibraryExW
00000002FED6 0000004312D6 0 HeapFree
File pos Mem pos ID Text
======== ======= == ====
00000002FEE2 0000004312E2 0 HeapAlloc
00000002FEEE 0000004312EE 0 ExitProcess
00000002FEFC 0000004312FC 0 GetModuleHandleExW
00000002FF12 000000431312 0 AreFileApisANSI
00000002FF24 000000431324 0 GetCommandLineA
00000002FF36 000000431336 0 RaiseException
00000002FF48 000000431348 0 RtlUnwind
00000002FF54 000000431354 0 GetCPInfo
00000002FF60 000000431360 0 InitializeCriticalSectionAndSpinCount
00000002FF88 000000431388 0 UnhandledExceptionFilter
00000002FFA4 0000004313A4 0 SetUnhandledExceptionFilter
00000002FFC2 0000004313C2 0 TerminateProcess
00000002FFD6 0000004313D6 0 TlsAlloc
00000002FFE2 0000004313E2 0 TlsGetValue
00000002FFF0 0000004313F0 0 TlsSetValue
00000002FFFE 0000004313FE 0 TlsFree
000000030008 000000431408 0 GetStartupInfoW
00000003001A 00000043141A 0 GetModuleHandleW
00000003002E 00000043142E 0 LCMapStringW
00000003003E 00000043143E 0 GetLocaleInfoW
000000030050 000000431450 0 IsValidLocale
000000030060 000000431460 0 GetUserDefaultLCID
000000030076 000000431476 0 EnumSystemLocalesW
00000003008C 00000043148C 0 HeapSize
000000030098 000000431498 0 GetStdHandle
0000000300A8 0000004314A8 0 WriteFile
0000000300B4 0000004314B4 0 GetProcessHeap
0000000300C6 0000004314C6 0 GetConsoleCP
0000000300D6 0000004314D6 0 GetConsoleMode
0000000300E8 0000004314E8 0 IsValidCodePage
0000000300FA 0000004314FA 0 GetACP
000000030104 000000431504 0 GetOEMCP
000000030110 000000431510 0 GetFileType
00000003011E 00000043151E 0 QueryPerformanceCounter
000000030138 000000431538 0 GetSystemTimeAsFileTime
000000030152 000000431552 0 GetEnvironmentStringsW
00000003016C 00000043156C 0 FreeEnvironmentStringsW
000000030186 000000431586 0 FlushFileBuffers
00000003019A 00000043159A 0 ReadFile
0000000301A6 0000004315A6 0 SetFilePointerEx
0000000301BA 0000004315BA 0 HeapReAlloc
0000000301C8 0000004315C8 0 OutputDebugStringW
0000000301DE 0000004315DE 0 LoadLibraryW
0000000301EE 0000004315EE 0 SetStdHandle
0000000301FE 0000004315FE 0 WriteConsoleW
00000003020E 00000043160E 0 ReadConsoleW
00000003021E 00000043161E 0 CreateFileW
00000003022C 00000043162C 0 SetEndOfFile
000000030408 000000432008 0 .?AVbad_alloc@std@@
000000030424 000000432024 0 .?AVlogic_error@std@@
000000030444 000000432044 0 .?AVlength_error@std@@
000000030464 000000432064 0 .?AVout_of_range@std@@
000000030484 000000432084 0 .?AV_Locimp@locale@std@@
0000000304A8 0000004320A8 0 .?AVios_base@std@@
0000000304C4 0000004320C4 0 .?AV?$_Iosb@H@std@@
0000000304E0 0000004320E0 0 .?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
000000030518 000000432118 0 .?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
000000030554 000000432154 0 .?AV?$basic_istream@DU?$char_traits@D@std@@@std@@
000000030590 000000432190 0 .?AV?$basic_filebuf@DU?$char_traits@D@std@@@std@@
0000000305CC 0000004321CC 0 .?AVcodecvt_base@std@@
File pos Mem pos ID Text
======== ======= == ====
0000000305EC 0000004321EC 0 .?AV?$codecvt@DDH@std@@
000000030610 000000432210 0 .?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@
000000030650 000000432250 0 Copyright (c) 1992-2004 by P.J. Plauger, licensed by Dinkumware, Ltd. ALL RIGHTS RESERVED.
000000030808 000000432408 0 .?AVtype_info@@
000000030D98 000000432998 0 .?AVbad_exception@std@@
0000000312F2 000000432EF2 0
0000000313D9 000000432FD9 0 abcdefghijklmnopqrstuvwxyz
0000000313F9 000000432FF9 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ
000000031512 000000433112 0
0000000315F2 0000004331F2 0 abcdefghijklmnopqrstuvwxyz
000000031612 000000433212 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ
000000031B7E 00000043377E 0 z?aUY
000000031BC0 0000004337C0 0 zc%C1
000000031C13 000000433813 0 -64OS
000000031C58 000000433858 0 .?AV_Iostream_error_category@std@@
000000031C84 000000433884 0 .?AV_System_error_category@std@@
000000031CB0 0000004338B0 0 .?AVerror_category@std@@
000000031CD4 0000004338D4 0 .?AV_Generic_error_category@std@@
000000031D00 000000433900 0 .?AVsystem_error@std@@
000000031D20 000000433920 0 .?AVbad_cast@std@@
000000031D3C 00000043393C 0 .?AVexception@std@@
000000031D58 000000433958 0 .?AVfailure@ios_base@std@@
000000031D7C 00000043397C 0 .?AVruntime_error@std@@
000000031D9C 00000043399C 0 .?AV?$ctype@D@std@@
000000031DB8 0000004339B8 0 .?AV?$numpunct@D@std@@
000000031DD8 0000004339D8 0 .?AV_Facet_base@std@@
000000031DF8 0000004339F8 0 .?AUctype_base@std@@
000000031E18 000000433A18 0 .?AVfacet@locale@std@@
000000031E7D 000000433A7D 0 !This program cannot be run in DOS mode.
000000031EF7 000000433AF7 0 oRich
000000032010 000000433C10 0 .text
000000032038 000000433C38 0 .rdata
00000003205F 000000433C5F 0 @.data
000000032088 000000433C88 0 .rsrc
0000000322B3 000000433EB3 0 L$hjXQ
0000000322BE 000000433EBE 0 T$hjZR
000000032616 000000434216 0 T$ RV
000000032AB6 0000004346B6 0 9+~W3
000000032EAC 000000434AAC 0 t$895
000000032F30 000000434B30 0 t$,9u
000000032FD2 000000434BD2 0 T$(RWQS
000000032FFA 000000434BFA 0 D$,;E
00000003302D 000000434C2D 0 t$8;5
000000033060 000000434C60 0 D$HPj
000000033085 000000434C85 0 L$ QW
00000003308B 000000434C8B 0 T$TRS
0000000330AD 000000434CAD 0 D$HPQS
000000033114 000000434D14 0 L$ QWRS
000000033130 000000434D30 0 |$$)|$
000000033328 000000434F28 0 L$ QU
00000003338E 000000434F8E 0 L$ Qh
0000000334CD 0000004350CD 0 T$0Rj
0000000334DE 0000004350DE 0 L$8Qj
0000000335BF 0000004351BF 0 L$$QPU
000000033608 000000435208 0 ;D$,r
0000000337C7 0000004353C7 0 T$ RV
000000033821 000000435421 0 T$ Rh
0000000338AE 0000004354AE 0 WhL B
000000033F27 000000435B27 0 \$<t&h
000000034073 000000435C73 0 L$8QV
File pos Mem pos ID Text
======== ======= == ====
0000000340B4 000000435CB4 0 T$0;T$ u
0000000340BE 000000435CBE 0 D$4;D$$
000000034168 000000435D68 0 L$PQSSj
000000034171 000000435D71 0 T$XRh@
0000000341F1 000000435DF1 0 L$,QRP
00000003436F 000000435F6F 0 tdWVU
0000000343B7 000000435FB7 0 LtXQh
000000034910 000000436510 0 D$ Ph
0000000352E8 000000436EE8 0 SSSSS
00000003556A 00000043716A 0 VVVVV
0000000355A1 0000004371A1 0 VVVVV
0000000355F9 0000004371F9 0 CCGG
000000035675 000000437275 0 VVVVV
0000000356BC 0000004372BC 0 GGBB
000000035761 000000437361 0 VVVVV
0000000358EB 0000004374EB 0 VVVVV
000000035ABE 0000004376BE 0 ~,WPV
000000035F9B 000000437B9B 0 VVVVV
000000035FD7 000000437BD7 0 VVVVV
00000003682C 00000043842C 0 VVVVV
000000036873 000000438473 0 VVVVV
0000000374AE 0000004390AE 0 VVVVV
0000000374F2 0000004390F2 0 VVVVV
000000037B80 000000439780 0 VVVVV
000000037BC4 0000004397C4 0 PPPPP
000000037C07 000000439807 0 VVVVV
000000037C2B 00000043982B 0 VVVVV
000000037C50 000000439850 0 VVVVV
000000037DC3 0000004399C3 0 PPPPP
000000037E13 000000439A13 0 PPPPP
000000038D96 00000043A996 0 PPPPP
000000038F89 00000043AB89 0 PPPPP
000000038FB7 00000043ABB7 0 SSSSS
000000039075 00000043AC75 0 VVVVV
00000003913E 00000043AD3E 0 SSSSS
00000003916E 00000043AD6E 0 SSSSS
000000039286 00000043AE86 0 VVVVV
0000000392EB 00000043AEEB 0 VVVVV
00000003932E 00000043AF2E 0 SSSSS
000000039396 00000043AF96 0 @PVhc
000000039413 00000043B013 0 SSSSS
000000039A4F 00000043B64F 0 0A@@Ju
00000003A051 00000043BC51 0 VVVVV
00000003A285 00000043BE85 0 SSSSS
00000003A2E9 00000043BEE9 0 SSSSS
00000003A382 00000043BF82 0 PPPPP
00000003A3E2 00000043BFE2 0 SSSSS
00000003A4AD 00000043C0AD 0 PPPPP
00000003A653 00000043C253 0 VVVVV
00000003A755 00000043C355 0 VVVVV
00000003A7B8 00000043C3B8 0 VVVVV
00000003A8EC 00000043C4EC 0 PPPPP
00000003AC14 00000043C814 0 VVVVV
00000003AC75 00000043C875 0 vSSSh
00000003AE1D 00000043CA1D 0 SSSSS
00000003B7A3 00000043D3A3 0 WWWWW
00000003B9DD 00000043D5DD 0 PPPPP
00000003BAAB 00000043D6AB 0 , <Xw
00000003BB29 00000043D729 0 t%HHt
00000003BD68 00000043D968 0 HHtXHHt
File pos Mem pos ID Text
======== ======= == ====
00000003BE58 00000043DA58 0 HHty+
00000003C2C5 00000043DEC5 0 >If90t
00000003C52F 00000043E12F 0 WWWWW
00000003C685 00000043E285 0 VVVVV
00000003C6F0 00000043E2F0 0 VVVVV
00000003CDBA 00000043E9BA 0 WWWWW
00000003CE5B 00000043EA5B 0 VVVVV
00000003CEB9 00000043EAB9 0 SSSSS
00000003D00B 00000043EC0B 0 [j@j
00000003D067 00000043EC67 0 9=dkB
00000003D212 00000043EE12 0 ;54hB
00000003DAE5 00000043F6E5 0 9~\u'
00000003DC8E 00000043F88E 0 PPPPP
00000003DD28 00000043F928 0 PPPPP
00000003DE89 00000043FA89 0 _VVVVV
00000003DEC4 00000043FAC4 0 _VVVVV
00000003DF02 00000043FB02 0 VVVVV
00000003DF2A 00000043FB2A 0 VhPhB
00000003E07F 00000043FC7F 0 SSSSS
00000003E194 00000043FD94 0 SSSSS
00000003E203 00000043FE03 0 7GG9]
00000003E27C 00000043FE7C 0 u)jAXf;
00000003E41F 00000044001F 0 VVVVV
00000003E53D 00000044013D 0 u)jAXf;
00000003E7EA 0000004403EA 0 >=Yt1j
00000003E7FD 0000004403FD 0 tPVWP
00000003E810 000000440410 0 PPPPP
00000003E9CB 0000004405CB 0 QQSVWh
00000003EEE7 000000440AE7 0 URPQQh8
00000003F1B5 000000440DB5 0 0SSSSS
00000003F23E 000000440E3E 0 0SSSSS
00000003F36C 000000440F6C 0 0SSSSS
00000003F3E5 000000440FE5 0 VVVVV
00000003F4F1 0000004410F1 0 WWWWW
00000003F532 000000441132 0 WWWWW
00000003F62A 00000044122A 0 VVVVV
00000003F80C 00000044140C 0 VVVVV
00000003FCFB 0000004418FB 0 v N+D$
00000003FD89 000000441989 0 ji_jdZf;
00000003FDAE 0000004419AE 0 Xt"f;
00000003FDD0 0000004419D0 0 Xupf;
00000003FF9C 000000441B9C 0 SSSSS
00000004090A 00000044250A 0 VVVVV
000000040F02 000000442B02 0 Kf90t
000000041119 000000442D19 0 It.It+It!It
000000041125 000000442D25 0 It"IIuQ
00000004118A 000000442D8A 0 PPPPP
000000041199 000000442D99 0 SSSSS
00000004130B 000000442F0B 0 PPPPP
000000041EA6 000000443AA6 0 u8SS3
000000041F3E 000000443B3E 0 9]$SS
000000042085 000000443C85 0 t"SS9]
0000000422FE 000000443EFE 0 9] SS
0000000424C7 0000004440C7 0 Pj1Q3
000000042559 000000444159 0 F Pj*
000000042571 000000444171 0 F$Pj+
000000042586 000000444186 0 F(Pj,
00000004259B 00000044419B 0 F,Pj-
0000000425B0 0000004441B0 0 F0Pj.
0000000425C8 0000004441C8 0 F4Pj/
File pos Mem pos ID Text
======== ======= == ====
0000000425F2 0000004441F2 0 F8PjD
000000042607 000000444207 0 F<PjE
00000004261F 00000044421F 0 F@PjF
000000042634 000000444234 0 FDPjG
000000042649 000000444249 0 FHPjH
00000004265E 00000044425E 0 FLPjI
000000042676 000000444276 0 FPPjJ
00000004268B 00000044428B 0 FTPjK
0000000426A0 0000004442A0 0 FXPjL
0000000426B5 0000004442B5 0 F\PjM
0000000426E2 0000004442E2 0 FdPjO
0000000426F7 0000004442F7 0 FhPj8
00000004270C 00000044430C 0 FlPj9
000000042724 000000444324 0 FpPj:
000000042739 000000444339 0 FtPj;
00000004274E 00000044434E 0 FxPj<
000000042763 000000444363 0 F|Pj=
000000042DB4 0000004449B4 0 v$;5\
000000042EC5 000000444AC5 0 C PjPV
000000042ED9 000000444AD9 0 C$PjQV
000000042F18 000000444B18 0 C*PjTV
000000042F2C 000000444B2C 0 C+PjUV
000000042F40 000000444B40 0 C,PjVV
000000042F57 000000444B57 0 C-PjWV
000000042F6B 000000444B6B 0 C.PjRV
000000042F7F 000000444B7F 0 C/PjSV
00000004320A 000000444E0A 0 QW@Ph
00000004357A 00000044517A 0 PPPPP
0000000435B3 0000004451B3 0 PPPPP
000000043689 000000445289 0 PPPPP
0000000436BD 0000004452BD 0 PPPPP
000000043830 000000445430 0 PPPPP
000000043869 000000445469 0 PPPPP
0000000438C9 0000004454C9 0 PPPPP
000000043902 000000445502 0 PPPPP
00000004394A 00000044554A 0 PPPPP
000000043984 000000445584 0 PPPPP
0000000439BE 0000004455BE 0 PPPPP
0000000439F8 0000004455F8 0 PPPPP
000000043A32 000000445632 0 PPPPP
000000043AFA 0000004456FA 0 .;1s(N
000000043B75 000000445775 0 tIHt$
000000043C34 000000445834 0 HHt4HHt
000000043D2B 00000044592B 0 Ht\Ht,
000000043E0A 000000445A0A 0 WWWWW
000000043E51 000000445A51 0 teHtFHt&Hu
0000000443A1 000000445FA1 0 SSSSS
0000000443D4 000000445FD4 0 SSSSS
00000004442A 00000044602A 0 ty<%tA
00000004449D 00000044609D 0 tBF9]
0000000444F4 0000004460F4 0 SSSSS
0000000445A6 0000004461A6 0 PPPPPPPP
00000004470A 00000044630A 0 tNh,0B
00000004471B 00000044631B 0 t=h(0B
000000044CEE 0000004468EE 0 Vj@hP-B
000000044DF9 0000004469F9 0 u%h00B
000000044E11 000000446A11 0 PPPPP
00000004641B 00000044801B 0 0;1t|
000000047B26 000000449726 0 PPPPPPPP
000000047D64 000000449964 0 SSSSS
File pos Mem pos ID Text
======== ======= == ====
000000047DE2 0000004499E2 0 SSSSS
000000047E2D 000000449A2D 0 QSWVj
000000048049 000000449C49 0 PPPPP
0000000481AB 000000449DAB 0 t$HHt
0000000483EC 000000449FEC 0 HHtYHHt
0000000484DD 00000044A0DD 0 HHty+
000000048BF6 00000044A7F6 0 tM<it-<ot)<ut%<xt!<Xt
000000048DF8 00000044A9F8 0 WWWWW
000000048F25 00000044AB25 0 , <Xw
000000048F90 00000044AB90 0 8$u%9
0000000490C0 00000044ACC0 0 t%HHt
000000049347 00000044AF47 0 <dty<itu<otq<utm<xti<Xte
000000049D7A 00000044B97A 0 HIf98t
00000004A13B 00000044BD3B 0 VVVVV
00000004A27F 00000044BE7F 0 VW|[;
00000004A352 00000044BF52 0 VVVVV
00000004A715 00000044C315 0 WWWWW
00000004A876 00000044C476 0 wIVSP
00000004AA3F 00000044C63F 0 SSSSS
00000004AAB3 00000044C6B3 0 WWWWW
00000004AB3C 00000044C73C 0 WWWWW
00000004ABB4 00000044C7B4 0 WWWWW
00000004B421 00000044D021 0 u,VVWV
00000004B4E9 00000044D0E9 0 t VV9u
00000004B773 00000044D373 0 0WWWWW
00000004B79E 00000044D39E 0 AAFFf;
00000004B7DF 00000044D3DF 0 SVWUj
00000004B880 00000044D480 0 ;t$,v-
00000004B905 00000044D505 0 UQPXY]Y[
00000004BC16 00000044D816 0 WWWWV
00000004BC39 00000044D839 0 t+WWVPV
00000004BCD0 00000044D8D0 0 VVVVV
00000004BD09 00000044D909 0 VVVVV
00000004BD42 00000044D942 0 VVVVV
00000004BD9E 00000044D99E 0 SSSSS
00000004BDBE 00000044D9BE 0 SSSSS
00000004BE56 00000044DA56 0 j,hH7B
00000004BE97 00000044DA97 0 SSSSS
00000004BEB2 00000044DAB2 0 SSSSS
00000004BECD 00000044DACD 0 SSSSS
00000004BF75 00000044DB75 0 SSSSS
00000004C0BF 00000044DCBF 0 SSSSS
00000004C10C 00000044DD0C 0 >:u8FV
00000004C16E 00000044DD6E 0 SSSSS
00000004C217 00000044DE17 0 jd_Fj
00000004C33F 00000044DF3F 0 PPPPP
00000004C3AF 00000044DFAF 0 VVVVV
00000004C3E3 00000044DFE3 0 95DkB
00000004C40D 00000044E00D 0 Pf950kB
00000004C433 00000044E033 0 PVVRV
00000004C4CF 00000044E0CF 0 VVVVVQRSSj
00000004C4E3 00000044E0E3 0 VVVVV
00000004C579 00000044E179 0 95LkB
00000004C58C 00000044E18C 0 95LkB
00000004C68C 00000044E28C 0 SSSSS
00000004C6C2 00000044E2C2 0 SSSSS
00000004C75B 00000044E35B 0 VVVVV
00000004C832 00000044E432 0 SSSSS
00000004C871 00000044E471 0 SSSSS
00000004C913 00000044E513 0 VVVVV
File pos Mem pos ID Text
======== ======= == ====
00000004C96F 00000044E56F 0 SSSSS
00000004C993 00000044E593 0 SSSSS
00000004CAB8 00000044E6B8 0 0SSSSS
00000004CC78 00000044E878 0 WWWWW
00000004D062 00000044EC62 0 WWWWW
00000004D299 00000044EE99 0 SSSSS
00000004D303 00000044EF03 0 SSSSS
00000004D32D 00000044EF2D 0 WWWWW
00000004D39F 00000044EF9F 0 WWWWW
00000004D3E0 00000044EFE0 0 VVVVV
00000004D46E 00000044F06E 0 0SSSSS
00000004D4E8 00000044F0E8 0 SSSSS
00000004D546 00000044F146 0 8VVVVV
00000004D5C5 00000044F1C5 0 VVVVV
00000004D776 00000044F376 0 SSSSS
00000004DB1B 00000044F71B 0 SSSSS
00000004DB58 00000044F758 0 SSSSS
00000004DBEE 00000044F7EE 0 QQSV3
00000004DC0A 00000044F80A 0 VVVVj
00000004DD1F 00000044F91F 0 9=PkB
00000004DF16 00000044FB16 0 t{~Bj
00000004E0E7 00000044FCE7 0 SSSSS
00000004E124 00000044FD24 0 SSSSS
00000004E296 00000044FE96 0 SSSSS
00000004E2B7 00000044FEB7 0 tSj=V
00000004E442 000000450042 0 @Y@PW
00000004E453 000000450053 0 SSSSS
00000004E504 000000450104 0 SSSSS
00000004E53E 00000045013E 0 SSSSS
00000004EC90 000000450890 0 \pard\lang1033\b0\fs20\par
00000004ECB0 0000004508B0 0 \b EFFET JURIDIQUE.\b0 Le pr\'e9sent contrat d\'e9crit certains droits juridiques. Vous pourriez avoir d'autres droits pr\'e9vus par les lois de votre pays. Le pr\'e9sent contrat ne modifie pas les droits que vous conf\'e8rent les lois de votre pays si celles-ci ne le permettent pas.\b\par
00000004EDD8 0000004509D8 0 \pard\sb120\sa120 Elle s'applique \'e9galement, m\'eame si Sysinternals connaissait ou devrait conna\'eetre l'\'e9ventualit\'e9 d'un tel dommage. Si votre pays n'autorise pas l'exclusion ou la limitation de responsabilit\'e9 pour les dommages indirects, accessoires ou de quelque nature que ce soit, il se peut que la limitation ou l'exclusion ci-dessus ne s'appliquera pas \'e0 votre \'e9gard.\par
00000004EF68 000000450B68 0 \pard\fi-363\li720\sb120\sa120\tx720\'b7\tab les r\'e9clamations au titre de violation de contrat ou de garantie, ou au titre de responsabilit\'e9 stricte, de n\'e9gligence ou d'une autre faute dans la limite autoris\'e9e par la loi en vigueur.\par
00000004F068 000000450C68 0 \pard\keepn\fi-360\li720\sb120\sa120\tx720\lang1036\'b7\tab tout ce qui est reli\'e9 au logiciel, aux services ou au contenu (y compris le code) figurant sur des sites Internet tiers ou dans des programmes tiers ; et\par
00000004F148 000000450D48 0 \lang1033 Cette limitation concerne :\par
00000004F178 000000450D78 0 \pard\keepn\sb120\sa120\b LIMITATION DES DOMMAGES-INT\'c9R\'caTS ET EXCLUSION DE RESPONSABILIT\'c9 POUR LES DOMMAGES.\b0 Vous pouvez obtenir de Sysinternals et de ses fournisseurs une indemnisation en cas de dommages directs uniquement \'e0 hauteur de 5,00 $ US. Vous ne pouvez pr\'e9tendre \'e0 aucune indemnisation pour les autres dommages, y compris les dommages sp\'e9ciaux, indirects ou accessoires et pertes de b\'e9n\'e9fices.\par
00000004F330 000000450F30 0 \pard\sb120\sa120 EXON\'c9RATION DE GARANTIE.\b0 Le logiciel vis\'e9 par une licence est offert \'ab tel quel \'bb. Toute utilisation de ce logiciel est \'e0 votre seule risque et p\'e9ril. Sysinternals n'accorde aucune autre garantie expresse. Vous pouvez b\'e9n\'e9ficier de droits additionnels en vertu du droit local sur la protection dues consommateurs, que ce contrat ne peut modifier. La ou elles sont permises par le droit locale, les garanties implicites de qualit\'e9 marchande, d'ad\'e9quation \'e0 un usage particulier et d'absence de contrefa\'e7on sont exclues.\par
00000004F578 000000451178 0 \pard\sb240\lang1036 Remarque : Ce logiciel \'e9tant distribu\'e9 au Qu\'e9bec, Canada, certaines des clauses dans ce contrat sont fournies ci-dessous en fran\'e7ais.\par
00000004F628 000000451228 0 \pard\b Please note: As this software is distributed in Quebec, Canada, some of the clauses in this agreement are provided below in French.\par
00000004F6B8 0000004512B8 0 \pard\li360\sb120\sa120 It also applies even if Sysinternals knew or should have known about the possibility of the damages. The above limitation or exclusion may not apply to you because your country may not allow the exclusion or limitation of incidental, consequential or other damages.\par
00000004F7E0 0000004513E0 0 \pard\fi-363\li720\sb120\sa120\'b7\tab claims for breach of contract, breach of warranty, guarantee or condition, strict liability, negligence, or other tort to the extent permitted by applicable law.\par
00000004F8B0 0000004514B0 0 \pard\fi-363\li720\sb120\sa120\tx720\'b7\tab anything related to the software, services, content (including code) on third party Internet sites, or third party programs; and\par
00000004F968 000000451568 0 \pard\li357\sb120\sa120\b0\caps0 This limitation applies to\par
00000004F9A8 0000004515A8 0 \pard\fi-360\li360\sb120\sa120\tx360\fs20 10.\tab\fs19 Limitation on and Exclusion of Remedies and Damages. You can recover from SYSINTERNALS and its suppliers only direct damages up to U.S. $5.00. You cannot recover any other damages, including consequential, lost profits, special, indirect or incidental damages.\par
00000004FAF0 0000004516F0 0 \fs20 9.\tab\fs19 Disclaimer of Warranty.\caps0 \caps The software is licensed \ldblquote as-is.\rdblquote You bear the risk of using it. SYSINTERNALS gives no express warranties, guarantees or conditions. You may have additional consumer rights under your local laws which this agreement cannot change. To the extent permitted under your local laws, SYSINTERNALS excludes the implied warranties of merchantability, fitness for a particular purpose and non-infringement.\par
00000004FCD8 0000004518D8 0 \pard\fi-357\li357\sb120\sa120\tx360\caps\fs20 8.\tab\fs19 Legal Effect.\b0\caps0 This agreement describes certain legal rights. You may have other rights under the laws of your country. You may also have rights with respect to the party from whom you acquired the software. This agreement does not change your rights under the laws of your country if the laws of your country do not permit it to do so.\b\caps\par
00000004FE80 000000451A80 0 \pard\fi-363\li720\sb120\sa120\fs20 b.\tab\fs19 Outside the United States.\b0 If you acquired the software in any other country, the laws of that country apply.\b\par
00000004FF30 000000451B30 0 \pard\fi-363\li720\sb120\sa120\tx720\cf0\fs20 a.\tab\fs19 United States.\b0 If you acquired the software in the United States, Washington state law governs the interpretation of this agreement and applies to claims for breach of it, regardless of conflict of laws principles. The laws of the state where you live govern all other claims, including claims under state consumer protection laws, unfair competition laws, and in tort.\b\par
0000000500E8 000000451CE8 0 \pard\keepn\fi-360\li360\sb120\sa120\tx360\cf2\b\caps\fs20 7.\tab\fs19 Applicable Law\caps0 .\par
000000050150 000000451D50 0 \caps\fs20 6.\tab\fs19 Entire Agreement.\b0\caps0 This agreement, and the terms for supplements, updates, Internet-based services and support services that you use, are the entire agreement for the software and support services.\par
000000050240 000000451E40 0 \caps\fs20 5.\tab\fs19 SUPPORT SERVICES.\caps0 \b0 Because this software is \ldblquote as is,\rdblquote we may not provide support services for it.\b\par
0000000502E0 000000451EE0 0 \caps\fs20 4.\tab\fs19 Export Restrictions\caps0 .\b0 The software is subject to United States export laws and regulations. You must comply with all domestic and international export laws and regulations that apply to the software. These laws include restrictions on destinations, end users and end use. For additional information, see \cf1\ul www.microsoft.com/exporting <http://www.microsoft.com/exporting>\cf0\ulnone .\b\par
000000050498 000000452098 0 \pard\fi-357\li357\sb120\sa120\tx360\b\fs20 3.\tab\fs19 DOCUMENTATION.\b0 Any person that has valid access to your computer or internal network may copy and use the documentation for your internal, reference purposes.\b\par
000000050580 000000452180 0 \'b7\tab use the software for commercial software hosting services.\par
0000000505C8 0000004521C8 0 \'b7\tab transfer the software or this agreement to any third party; or\par
000000050614 000000452214 0 \'b7\tab rent, lease or lend the software;\par
000000050644 000000452244 0 \'b7\tab publish the software for others to copy;\par
000000050680 000000452280 0 \'b7\tab make more copies of the software than specified in this agreement or allowed by applicable law, despite this limitation;\par
000000050708 000000452308 0 \pard\fi-363\li720\sb120\sa120\'b7\tab reverse engineer, decompile or disassemble the binary versions of the software, except and only to the extent that applicable law expressly permits, despite this limitation;\par
0000000507E8 0000004523E8 0 \pard\fi-363\li720\sb120\sa120\tx720\b0\'b7\tab work around any technical limitations in the binary versions of the software;\par
File pos Mem pos ID Text
======== ======= == ====
000000050870 000000452470 0 \caps\fs20 2.\tab\fs19 Scope of License\caps0 .\b0 The software is licensed, not sold. This agreement only gives you some rights to use the software. Sysinternals reserves all other rights. Unless applicable law gives you more rights despite this limitation, you may use the software only as expressly permitted in this agreement. In doing so, you must comply with any technical limitations in the software that only allow you to use it in certain ways. You may not\b\par
000000050A50 000000452650 0 \pard\fi-357\li357\sb120\sa120\tx360\fs20 1.\tab\fs19 INSTALLATION AND USE RIGHTS. \b0 You may install and use any number of copies of the software on your devices.\b\par
000000050B00 000000452700 0 \pard\brdrt\brdrs\brdrw10\brsp20 \sb120\sa120 If you comply with these license terms, you have the rights below.\par
000000050B78 000000452778 0 \b BY USING THE SOFTWARE, YOU ACCEPT THESE TERMS. IF YOU DO NOT ACCEPT THEM, DO NOT USE THE SOFTWARE.\par
000000050BE8 0000004527E8 0 \pard\sb120\sa120 for this software, unless other terms accompany those items. If so, those terms apply.\par
000000050C58 000000452858 0 \'b7\tab support services\par
000000050C78 000000452878 0 \'b7\tab Internet-based services, and \par
000000050CA4 0000004528A4 0 \pard\fi-363\li720\sb120\sa120\'b7\tab supplements,\par
000000050CDC 0000004528DC 0 \pard\fi-363\li720\sb120\sa120\tx720\'b7\tab updates,\par
000000050D18 000000452918 0 \pard\sb120\sa120\b0\fs19 These license terms are an agreement between Sysinternals (a wholly owned subsidiary of Microsoft Corporation) and you. Please read them. They apply to the software you are downloading from Systinternals.com, which includes the media on which you received it, if any. The terms also apply to any Sysinternals\par
000000050E70 000000452A70 0 {\*\generator Msftedit 5.41.21.2506;}\viewkind4\uc1\pard\brdrb\brdrs\brdrw10\brsp20 \sb120\sa120\b\f0\fs24 SYSINTERNALS SOFTWARE LICENSE TERMS\fs28\par
000000050F08 000000452B08 0 {\colortbl ;\red0\green0\blue255;\red0\green0\blue0;}
000000050F40 000000452B40 0 {\rtf1\ansi\ansicpg1252\deff0\deflang1033{\fonttbl{\f0\fswiss\fprq2\fcharset0 Tahoma;}}
0000000511C0 000000452DC0 0 CommandLineToArgvW
00000005130C 000000452F0C 0 Scanning file:
0000000517CC 0000004533CC 0 GetDiskFreeSpaceExW
0000000519D0 0000004535D0 0 RtlNtStatusToDosError
000000051A70 000000453670 0 NtFsControlFile
000000051E81 000000453A81 0 Invalid drive letter: %s
000000051E9A 000000453A9A 0 Argument must be formatted like d:
000000051EC0 000000453AC0 0 SDelete is set for %d pass%s.
000000051F00 000000453B00 0 Wow64EnableWow64FsRedirection
00000005202C 000000453C2C 0 CorExitProcess
000000052054 000000453C54 0 runtime error
000000052068 000000453C68 0 TLOSS error
000000052078 000000453C78 0 SING error
000000052088 000000453C88 0 DOMAIN error
000000052098 000000453C98 0 R6034
00000005209F 000000453C9F 0 An application has made an attempt to load the C runtime library incorrectly.
0000000520ED 000000453CED 0 Please contact the application's support team for more information.
000000052138 000000453D38 0 R6033
00000005213F 000000453D3F 0 - Attempt to use MSIL code from this assembly during native code initialization
00000005218F 000000453D8F 0 This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
000000052230 000000453E30 0 R6032
000000052237 000000453E37 0 - not enough space for locale information
000000052268 000000453E68 0 R6031
00000005226F 000000453E6F 0 - Attempt to initialize the CRT more than once.
00000005229F 000000453E9F 0 This indicates a bug in your application.
0000000522CC 000000453ECC 0 R6030
0000000522D3 000000453ED3 0 - CRT not initialized
0000000522EC 000000453EEC 0 R6028
0000000522F3 000000453EF3 0 - unable to initialize heap
000000052314 000000453F14 0 R6027
00000005231B 000000453F1B 0 - not enough space for lowio initialization
00000005234C 000000453F4C 0 R6026
000000052353 000000453F53 0 - not enough space for stdio initialization
000000052384 000000453F84 0 R6025
00000005238B 000000453F8B 0 - pure virtual function call
0000000523AC 000000453FAC 0 R6024
0000000523B3 000000453FB3 0 - not enough space for _onexit/atexit table
0000000523E4 000000453FE4 0 R6019
0000000523EB 000000453FEB 0 - unable to open console device
000000052410 000000454010 0 R6018
000000052417 000000454017 0 - unexpected heap error
000000052434 000000454034 0 R6017
00000005243B 00000045403B 0 - unexpected multithread lock error
000000052464 000000454064 0 R6016
00000005246B 00000045406B 0 - not enough space for thread data
000000052492 000000454092 0 This application has requested the Runtime to terminate it in an unusual way.
0000000524E0 0000004540E0 0 Please contact the application's support team for more information.
File pos Mem pos ID Text
======== ======= == ====
000000052528 000000454128 0 R6009
00000005252F 00000045412F 0 - not enough space for environment
000000052554 000000454154 0 R6008
00000005255B 00000045415B 0 - not enough space for arguments
000000052580 000000454180 0 R6002
000000052587 000000454187 0 - floating point support not loaded
0000000525B0 0000004541B0 0 Microsoft Visual C++ Runtime Library
0000000525E0 0000004541E0 0 <program name unknown>
0000000525F8 0000004541F8 0 Runtime Error!
000000052608 000000454208 0 Program:
00000005261C 00000045421C 0 LC_TIME
000000052624 000000454224 0 LC_NUMERIC
000000052630 000000454230 0 LC_MONETARY
00000005263C 00000045423C 0 LC_CTYPE
000000052648 000000454248 0 LC_COLLATE
000000052654 000000454254 0 LC_ALL
0000000526C7 0000004542C7 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]
000000052708 000000454308 0 abcdefghijklmnopqrstuvwxyz{|}~
000000052744 000000454344 0 EncodePointer
000000052770 000000454370 0 DecodePointer
000000052780 000000454380 0 FlsFree
000000052788 000000454388 0 FlsSetValue
000000052794 000000454394 0 FlsGetValue
0000000527A0 0000004543A0 0 FlsAlloc
0000000527BC 0000004543BC 0 (null)
0000000527E9 0000004543E9 0 ( 8PX
0000000527F1 0000004543F1 0 700WP
000000052809 000000454409 0 xpxxxx
0000000528A0 0000004544A0 0 SystemFunction036
0000000528B4 0000004544B4 0 ADVAPI32.DLL
0000000528C4 0000004544C4 0 GetProcessWindowStation
0000000528DC 0000004544DC 0 GetUserObjectInformationA
0000000528F8 0000004544F8 0 GetLastActivePopup
00000005290C 00000045450C 0 GetActiveWindow
00000005291C 00000045451C 0 MessageBoxA
000000052928 000000454528 0 USER32.DLL
000000052EE0 000000454AE0 0 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]
000000052F21 000000454B21 0 abcdefghijklmnopqrstuvwxyz{|}~
000000053060 000000454C60 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]
0000000530A1 000000454CA1 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
000000053140 000000454D40 0 HH:mm:ss
00000005314C 000000454D4C 0 dddd, MMMM dd, yyyy
000000053160 000000454D60 0 MM/dd/yy
000000053174 000000454D74 0 December
000000053180 000000454D80 0 November
00000005318C 000000454D8C 0 October
000000053194 000000454D94 0 September
0000000531A0 000000454DA0 0 August
0000000531B8 000000454DB8 0 April
0000000531C0 000000454DC0 0 March
0000000531C8 000000454DC8 0 February
0000000531D4 000000454DD4 0 January
00000005320C 000000454E0C 0 Saturday
000000053218 000000454E18 0 Friday
000000053220 000000454E20 0 Thursday
00000005322C 000000454E2C 0 Wednesday
000000053238 000000454E38 0 Tuesday
000000053240 000000454E40 0 Monday
000000053248 000000454E48 0 Sunday
000000053270 000000454E70 0 am/pm
File pos Mem pos ID Text
======== ======= == ====
000000053278 000000454E78 0 united-states
000000053288 000000454E88 0 united-kingdom
000000053298 000000454E98 0 trinidad & tobago
0000000532AC 000000454EAC 0 south-korea
0000000532B8 000000454EB8 0 south-africa
0000000532C8 000000454EC8 0 south korea
0000000532D4 000000454ED4 0 south africa
0000000532E4 000000454EE4 0 slovak
0000000532EC 000000454EEC 0 puerto-rico
0000000532F8 000000454EF8 0 pr-china
000000053304 000000454F04 0 pr china
000000053314 000000454F14 0 new-zealand
000000053320 000000454F20 0 hong-kong
00000005332C 000000454F2C 0 holland
000000053334 000000454F34 0 great britain
000000053344 000000454F44 0 england
00000005334C 000000454F4C 0 czech
000000053354 000000454F54 0 china
00000005335C 000000454F5C 0 britain
000000053364 000000454F64 0 america
000000053378 000000454F78 0 swiss
000000053380 000000454F80 0 swedish-finland
000000053390 000000454F90 0 spanish-venezuela
0000000533A4 000000454FA4 0 spanish-uruguay
0000000533B4 000000454FB4 0 spanish-puerto rico
0000000533C8 000000454FC8 0 spanish-peru
0000000533D8 000000454FD8 0 spanish-paraguay
0000000533EC 000000454FEC 0 spanish-panama
0000000533FC 000000454FFC 0 spanish-nicaragua
000000053410 000000455010 0 spanish-modern
000000053420 000000455020 0 spanish-mexican
000000053430 000000455030 0 spanish-honduras
000000053444 000000455044 0 spanish-guatemala
000000053458 000000455058 0 spanish-el salvador
00000005346C 00000045506C 0 spanish-ecuador
00000005347C 00000045507C 0 spanish-dominican republic
000000053498 000000455098 0 spanish-costa rica
0000000534AC 0000004550AC 0 spanish-colombia
0000000534C0 0000004550C0 0 spanish-chile
0000000534D0 0000004550D0 0 spanish-bolivia
0000000534E0 0000004550E0 0 spanish-argentina
0000000534F4 0000004550F4 0 portuguese-brazilian
00000005350C 00000045510C 0 norwegian-nynorsk
000000053520 000000455120 0 norwegian-bokmal
000000053534 000000455134 0 norwegian
000000053540 000000455140 0 italian-swiss
000000053550 000000455150 0 irish-english
000000053560 000000455160 0 german-swiss
000000053570 000000455170 0 german-luxembourg
000000053584 000000455184 0 german-lichtenstein
000000053598 000000455198 0 german-austrian
0000000535A8 0000004551A8 0 french-swiss
0000000535B8 0000004551B8 0 french-luxembourg
0000000535CC 0000004551CC 0 french-canadian
0000000535DC 0000004551DC 0 french-belgian
0000000535EC 0000004551EC 0 english-usa
0000000535F8 0000004551F8 0 english-us
000000053604 000000455204 0 english-uk
000000053610 000000455210 0 english-trinidad y tobago
00000005362C 00000045522C 0 english-south africa
File pos Mem pos ID Text
======== ======= == ====
000000053644 000000455244 0 english-nz
000000053650 000000455250 0 english-jamaica
000000053660 000000455260 0 english-ire
00000005366C 00000045526C 0 english-caribbean
000000053680 000000455280 0 english-can
00000005368C 00000045528C 0 english-belize
00000005369C 00000045529C 0 english-aus
0000000536A8 0000004552A8 0 english-american
0000000536BC 0000004552BC 0 dutch-belgian
0000000536CC 0000004552CC 0 chinese-traditional
0000000536E0 0000004552E0 0 chinese-singapore
0000000536F4 0000004552F4 0 chinese-simplified
000000053708 000000455308 0 chinese-hongkong
00000005371C 00000045531C 0 chinese
00000005372C 00000045532C 0 canadian
000000053738 000000455338 0 belgian
000000053740 000000455340 0 australian
00000005374C 00000045534C 0 american-english
000000053760 000000455360 0 american english
000000053774 000000455374 0 american
000000053A60 000000455660 0 Norwegian-Nynorsk
000000053A9D 00000045569D 0 ('8PW
000000053AA6 0000004556A6 0 700PP
000000053AC1 0000004556C1 0 xppwpp
000000053AD4 0000004556D4 0 SunMonTueWedThuFriSat
000000053AEC 0000004556EC 0 JanFebMarAprMayJunJulAugSepOctNovDec
000000053B18 000000455718 0 CONIN$
000000053B20 000000455720 0 CONOUT$
000000053B88 000000455788 0 c:\src\Misc\sdel\Release\sdelete.pdb
0000000544EE 0000004560EE 0 GetModuleHandleW
000000054502 000000456102 0 LocalFree
00000005450E 00000045610E 0 LoadLibraryW
00000005451E 00000045611E 0 LocalAlloc
00000005452C 00000045612C 0 GetCommandLineW
00000005453E 00000045613E 0 GetProcAddress
000000054550 000000456150 0 FormatMessageW
000000054562 000000456162 0 MoveFileW
00000005456E 00000045616E 0 ReadFile
00000005457A 00000045617A 0 WriteFile
000000054586 000000456186 0 VirtualFree
000000054594 000000456194 0 SetFilePointer
0000000545A6 0000004561A6 0 VirtualAlloc
0000000545B6 0000004561B6 0 SetFileAttributesW
0000000545CC 0000004561CC 0 GetFileAttributesW
0000000545E2 0000004561E2 0 DeleteFileW
0000000545F0 0000004561F0 0 CloseHandle
0000000545FE 0000004561FE 0 GetLastError
00000005460E 00000045620E 0 CreateFileW
00000005461C 00000045621C 0 WaitForSingleObject
000000054632 000000456232 0 GetDiskFreeSpaceW
000000054646 000000456246 0 FindClose
000000054652 000000456252 0 FindNextFileW
000000054662 000000456262 0 RemoveDirectoryW
000000054676 000000456276 0 FindFirstFileW
000000054688 000000456288 0 DeviceIoControl
00000005469A 00000045629A 0 ExpandEnvironmentStringsW
0000000546B6 0000004562B6 0 GetVersion
0000000546C4 0000004562C4 0 GetFullPathNameW
0000000546D8 0000004562D8 0 GetCurrentDirectoryW
0000000546EE 0000004562EE 0 KERNEL32.dll
File pos Mem pos ID Text
======== ======= == ====
0000000546FE 0000004562FE 0 SendMessageW
00000005470E 00000045630E 0 InflateRect
00000005471C 00000045631C 0 SetCursor
000000054728 000000456328 0 LoadCursorW
000000054736 000000456336 0 SetWindowTextW
000000054748 000000456348 0 EndDialog
000000054754 000000456354 0 GetSysColorBrush
000000054768 000000456368 0 GetDlgItem
000000054776 000000456376 0 DialogBoxIndirectParamW
00000005478E 00000045638E 0 USER32.dll
00000005479C 00000045639C 0 EndDoc
0000000547A6 0000004563A6 0 EndPage
0000000547B0 0000004563B0 0 StartPage
0000000547BC 0000004563BC 0 StartDocW
0000000547C8 0000004563C8 0 SetMapMode
0000000547D6 0000004563D6 0 GetDeviceCaps
0000000547E4 0000004563E4 0 GDI32.dll
0000000547F0 0000004563F0 0 PrintDlgW
0000000547FA 0000004563FA 0 COMDLG32.dll
00000005480A 00000045640A 0 RegCloseKey
000000054818 000000456418 0 RegSetValueExW
00000005482A 00000045642A 0 RegQueryValueExW
00000005483E 00000045643E 0 RegCreateKeyW
00000005484C 00000045644C 0 ADVAPI32.dll
00000005485C 00000045645C 0 HeapAlloc
000000054868 000000456468 0 HeapFree
000000054874 000000456474 0 GetSystemTimeAsFileTime
00000005488E 00000045648E 0 EnterCriticalSection
0000000548A6 0000004564A6 0 LeaveCriticalSection
0000000548BE 0000004564BE 0 Sleep
0000000548C6 0000004564C6 0 ExitProcess
0000000548D4 0000004564D4 0 DeleteCriticalSection
0000000548EC 0000004564EC 0 FatalAppExitA
0000000548FC 0000004564FC 0 HeapReAlloc
00000005490A 00000045650A 0 HeapCreate
000000054918 000000456518 0 HeapDestroy
000000054926 000000456526 0 GetStdHandle
000000054936 000000456536 0 GetModuleFileNameA
00000005494C 00000045654C 0 TerminateProcess
000000054960 000000456560 0 GetCurrentProcess
000000054974 000000456574 0 UnhandledExceptionFilter
000000054990 000000456590 0 SetUnhandledExceptionFilter
0000000549AE 0000004565AE 0 IsDebuggerPresent
0000000549C2 0000004565C2 0 GetCPInfo
0000000549CE 0000004565CE 0 InterlockedIncrement
0000000549E6 0000004565E6 0 InterlockedDecrement
0000000549FE 0000004565FE 0 GetACP
000000054A08 000000456608 0 GetOEMCP
000000054A14 000000456614 0 IsValidCodePage
000000054A26 000000456626 0 TlsGetValue
000000054A34 000000456634 0 TlsAlloc
000000054A40 000000456640 0 TlsSetValue
000000054A4E 00000045664E 0 TlsFree
000000054A58 000000456658 0 SetLastError
000000054A68 000000456668 0 GetCurrentThreadId
000000054A7E 00000045667E 0 GetCurrentThread
000000054A92 000000456692 0 WideCharToMultiByte
000000054AA8 0000004566A8 0 GetConsoleCP
000000054AB8 0000004566B8 0 GetConsoleMode
000000054ACA 0000004566CA 0 FlushFileBuffers
File pos Mem pos ID Text
======== ======= == ====
000000054ADE 0000004566DE 0 SetHandleCount
000000054AF0 0000004566F0 0 GetFileType
000000054AFE 0000004566FE 0 GetStartupInfoA
000000054B10 000000456710 0 SetConsoleCtrlHandler
000000054B28 000000456728 0 FreeLibrary
000000054B36 000000456736 0 InterlockedExchange
000000054B4C 00000045674C 0 LoadLibraryA
000000054B5C 00000045675C 0 InitializeCriticalSectionAndSpinCount
000000054B84 000000456784 0 GetModuleFileNameW
000000054B9A 00000045679A 0 FreeEnvironmentStringsW
000000054BB4 0000004567B4 0 GetEnvironmentStringsW
000000054BCE 0000004567CE 0 QueryPerformanceCounter
000000054BE8 0000004567E8 0 GetTickCount
000000054BF8 0000004567F8 0 GetCurrentProcessId
000000054C0E 00000045680E 0 RtlUnwind
000000054C1A 00000045681A 0 MultiByteToWideChar
000000054C30 000000456830 0 LCMapStringA
000000054C40 000000456840 0 LCMapStringW
000000054C50 000000456850 0 GetStringTypeA
000000054C62 000000456862 0 GetStringTypeW
000000054C74 000000456874 0 GetTimeFormatA
000000054C86 000000456886 0 GetDateFormatA
000000054C98 000000456898 0 GetUserDefaultLCID
000000054CAE 0000004568AE 0 GetLocaleInfoA
000000054CC0 0000004568C0 0 EnumSystemLocalesA
000000054CD6 0000004568D6 0 IsValidLocale
000000054CE6 0000004568E6 0 WriteConsoleA
000000054CF6 0000004568F6 0 GetConsoleOutputCP
000000054D0C 00000045690C 0 WriteConsoleW
000000054D1C 00000045691C 0 SetStdHandle
000000054D2C 00000045692C 0 HeapSize
000000054D38 000000456938 0 GetLocaleInfoW
000000054D4A 00000045694A 0 GetTimeZoneInformation
000000054D64 000000456964 0 CreateFileA
000000054D72 000000456972 0 CompareStringA
000000054D84 000000456984 0 CompareStringW
000000054D96 000000456996 0 SetEnvironmentVariableA
000000055576 000000457176 0
000000055656 000000457256 0 abcdefghijklmnopqrstuvwxyz
000000055676 000000457276 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ
00000005577A 00000045737A 0
000000055861 000000457461 0 abcdefghijklmnopqrstuvwxyz
000000055881 000000457481 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ
0000000561AC 000000457DAC 0 <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
0000000561F7 000000457DF7 0 <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
00000005622F 000000457E2F 0 <security>
00000005623F 000000457E3F 0 <requestedPrivileges>
00000005625C 000000457E5C 0 <requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>
0000000562BC 000000457EBC 0 </requestedPrivileges>
0000000562DA 000000457EDA 0 </security>
0000000562EB 000000457EEB 0 </trustInfo>
0000000562FB 000000457EFB 0 </assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXX
0000000564FC 0000004580FC 0 Washington1
000000056511 000000458111 0 Redmond1
000000056523 000000458123 0 Microsoft Corporation1#0!
000000056543 000000458143 0 Microsoft Code Signing PCA0
000000056561 000000458161 0 120904214209Z
000000056570 000000458170 0 130304214209Z0
000000056598 000000458198 0 Washington1
0000000565AD 0000004581AD 0 Redmond1
File pos Mem pos ID Text
======== ======= == ====
0000000565BF 0000004581BF 0 Microsoft Corporation1
0000000565DF 0000004581DF 0 MOPR1
0000000565EE 0000004581EE 0 Microsoft Corporation0
00000005678E 00000045838E 0 O0M0K
000000056798 000000458398 0 Ehttp://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl0Z
0000000567EB 0000004583EB 0 N0L0J
0000000567FB 0000004583FB 0 >http://www.microsoft.com/pki/certs/MicCodSigPCA_08-31-2010.crt0
000000056928 000000458528 0 V ,:N
000000056990 000000458590 0 Washington1
0000000569A5 0000004585A5 0 Redmond1
0000000569B7 0000004585B7 0 Microsoft Corporation1!0
0000000569D7 0000004585D7 0 Microsoft Time-Stamp PCA0
0000000569F3 0000004585F3 0 120109222559Z
000000056A02 000000458602 0 130409222559Z0
000000056A2A 00000045862A 0 Washington1
000000056A3F 00000045863F 0 Redmond1
000000056A51 000000458651 0 Microsoft Corporation1
000000056A71 000000458671 0 MOPR1'0%
000000056A80 000000458680 0 nCipher DSE ESN:B8EC-30A4-71441%0#
000000056AA9 0000004586A9 0 Microsoft Time-Stamp Service0
000000056B30 000000458730 0 Vi7:*
000000056B69 000000458769 0 |pEa~
000000056C3B 00000045883B 0 M0K0I
000000056C45 000000458845 0 Chttp://crl.microsoft.com/pki/crl/products/MicrosoftTimeStampPCA.crl0X
000000056C96 000000458896 0 L0J0H
000000056CA6 0000004588A6 0 <http://www.microsoft.com/pki/certs/MicrosoftTimeStampPCA.crt0
000000056E5C 000000458A5C 0 microsoft1-0+
000000056E70 000000458A70 0 $Microsoft Root Certificate Authority0
000000056E99 000000458A99 0 100831221932Z
000000056EA8 000000458AA8 0 200831222932Z0y1
000000056ECF 000000458ACF 0 Washington1
000000056EE4 000000458AE4 0 Redmond1
000000056EF6 000000458AF6 0 Microsoft Corporation1#0!
000000056F16 000000458B16 0 Microsoft Code Signing PCA0
000000057118 000000458D18 0 I0G0E
000000057122 000000458D22 0 ?http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0T
00000005716F 000000458D6F 0 H0F0D
00000005717F 000000458D7F 0 8http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0
0000000572E3 000000458EE3 0 N=|)H
00000005741C 00000045901C 0 microsoft1-0+
000000057430 000000459030 0 $Microsoft Root Certificate Authority0
000000057459 000000459059 0 070403125309Z
000000057468 000000459068 0 210403130309Z0w1
00000005748F 00000045908F 0 Washington1
0000000574A4 0000004590A4 0 Redmond1
0000000574B6 0000004590B6 0 Microsoft Corporation1!0
0000000574D6 0000004590D6 0 Microsoft Time-Stamp PCA0
0000000576BB 0000004592BB 0 microsoft1-0+
0000000576CF 0000004592CF 0 $Microsoft Root Certificate Authority
00000005770E 00000045930E 0 I0G0E
000000057718 000000459318 0 ?http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl0T
000000057765 000000459365 0 H0F0D
000000057775 000000459375 0 8http://www.microsoft.com/pki/certs/MicrosoftRootCert.crt0
0000000577EB 0000004593EB 0 .tq[m
000000057871 000000459471 0 1Jv1=+r
00000005792A 00000045952A 0 L&*H$_Z
0000000579FF 0000004595FF 0 Washington1
000000057A14 000000459614 0 Redmond1
000000057A26 000000459626 0 Microsoft Corporation1#0!
000000057A46 000000459646 0 Microsoft Code Signing PCA
File pos Mem pos ID Text
======== ======= == ====
000000057B26 000000459726 0 *http://technet.microsoft.com/sysinternals 0
000000057C9F 00000045989F 0 Washington1
000000057CB4 0000004598B4 0 Redmond1
000000057CC6 0000004598C6 0 Microsoft Corporation1!0
000000057CE6 0000004598E6 0 Microsoft Time-Stamp PCA
000000057D42 000000459942 0 130109222603Z0#
000000057E7B 000000459A7B 0 F2YB-i
000000057F38 000000459B38 0 .?AV?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@
000000058060 00000045C060 0 <?xml version='1.0' encoding='UTF-8' standalone='yes'?>
000000058099 00000045C099 0 <assembly xmlns='urn:schemas-microsoft-com:asm.v1' manifestVersion='1.0'>
0000000580E4 00000045C0E4 0 <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
00000005811C 00000045C11C 0 <security>
00000005812C 00000045C12C 0 <requestedPrivileges>
000000058149 00000045C149 0 <requestedExecutionLevel level='asInvoker' uiAccess='false' />
000000058191 00000045C191 0 </requestedPrivileges>
0000000581AF 00000045C1AF 0 </security>
0000000581C0 00000045C1C0 0 </trustInfo>
0000000581D0 00000045C1D0 0 </assembly>
00000005820D 00000045D00D 0 011h1
000000058215 00000045D015 0 1,282V2h2
00000005821F 00000045D01F 0 2$3/363B4M4T4
000000058239 00000045D039 0 :':F:X:
000000058247 00000045D047 0 <8=B=M=0>L>w>
000000058275 00000045D075 0 1M2i2
000000058285 00000045D085 0 3$3r3
00000005829D 00000045D09D 0 6W7B8M8
0000000582A7 00000045D0A7 0 819:9
0000000582B1 00000045D0B1 0 9 :+:9:>;g;
0000000582C1 00000045D0C1 0 <5<=<o<
0000000582F3 00000045D0F3 0 666E6t6z6
00000005830B 00000045D10B 0 7f7u7
00000005831D 00000045D11D 0 708=8O8
00000005834D 00000045D14D 0 =&>8>
00000005837D 00000045D17D 0 343b3
000000058397 00000045D197 0 7K7X7
00000005839D 00000045D19D 0 7;8M8s8
0000000583AD 00000045D1AD 0 9#9\9v9
0000000583BD 00000045D1BD 0 ;6;H;
0000000583C5 00000045D1C5 0 ;%<-<:<E<a<
0000000583D1 00000045D1D1 0 =-=[=&?T?
0000000583E8 00000045D1E8 0 *272B2
0000000583F1 00000045D1F1 0 2e3j3r3
00000005840B 00000045D20B 0 9;;E;
000000058443 00000045D243 0 2#2M2Z2e2
000000058461 00000045D261 0 3[3h3
000000058475 00000045D275 0 4%4F4X405
000000058487 00000045D287 0 7*8J8
00000005848F 00000045D28F 0 8*9M9
000000058495 00000045D295 0 9?:U:o:{:
0000000584AB 00000045D2AB 0 >2>k?u?
0000000584D5 00000045D2D5 0 : :':-:2:@:
0000000584E9 00000045D2E9 0 ;H;o;>?
0000000584FF 00000045D2FF 0 82<f<
00000005850B 00000045D30B 0 >%>9>
000000058531 00000045D331 0 =7>P>
00000005854B 00000045D34B 0 6X6\6
000000058551 00000045D351 0 6d6h6l6p6t6
000000058567 00000045D367 0 8 8$8(8,808N8{8
00000005859F 00000045D39F 0 =H>O>d>
0000000585C5 00000045D3C5 0 4#5\5
File pos Mem pos ID Text
======== ======= == ====
0000000585D7 00000045D3D7 0 9m9u9
0000000585DF 00000045D3DF 0 9(<7<
0000000585FF 00000045D3FF 0 2F2\2
000000058635 00000045D435 0 6W6e6j6s6
000000058647 00000045D447 0 7%7|7
000000058651 00000045D451 0 7N8U8Z8l8{8
00000005866B 00000045D46B 0 9l9p9t9x9|9
00000005867F 00000045D47F 0 9b:w:
000000058695 00000045D495 0 <2<V<h<
0000000586AD 00000045D4AD 0 =&=/=U=
0000000586D9 00000045D4D9 0 2.373W3z3
0000000586E7 00000045D4E7 0 3>4M4q4
0000000586FF 00000045D4FF 0 5 6@6j6
000000058713 00000045D513 0 8*868e8m8t8
000000058723 00000045D523 0 9&9E9L9U9
00000005872D 00000045D52D 0 9j9o9
00000005873F 00000045D53F 0 9":(:W:r:
000000058751 00000045D551 0 ;#;.;Q;\;
00000005875F 00000045D55F 0 <%<W<i<y<
000000058769 00000045D569 0 <"=3=:=B=W=t=
00000005877D 00000045D57D 0 ='>O>
00000005878D 00000045D58D 0 >f?{?
0000000587A7 00000045D5A7 0 0!0=0q0
0000000587DB 00000045D5DB 0 <5>=>G>W>
0000000587F8 00000045D5F8 0 Y1s1z1
00000005880D 00000045D60D 0 2$272y2
000000058829 00000045D629 0 3R3X3
000000058835 00000045D635 0 4C4k4y4%6C6\6c6k6p6t6x6
000000058861 00000045D661 0 7R7X7\7
000000058879 00000045D679 0 8%8O8
000000058899 00000045D699 0 9u:z:
0000000588A7 00000045D6A7 0 :Z;_;h;t;y;
0000000588BB 00000045D6BB 0 ;$<*<0<6<<<B<I<P<W<
0000000588CF 00000045D6CF 0 <e<l<s<{<
0000000588EF 00000045D6EF 0 <)=/=5=;=A=G=N=U=\=c=j=q=x=
00000005891F 00000045D71F 0 =X>b>m>
000000058945 00000045D745 0 0"0A0X0g0
000000058957 00000045D757 0 2H425
000000058961 00000045D761 0 6.686_6g6p6y6
00000005897B 00000045D77B 0 7%7*7A7K7a7
00000005898B 00000045D78B 0 8,888H8N8_8~8
0000000589AF 00000045D7AF 0 9(:y:
0000000589C3 00000045D7C3 0 ;';j;
0000000589CB 00000045D7CB 0 <;<I<
0000000589D3 00000045D7D3 0 >,>3>;>@>D>H>q>
0000000589F5 00000045D7F5 0 >"?(?,?0?4?
000000058A19 00000045D819 0 0Q0X0\0
000000058A21 00000045D821 0 0d0h0l0p0t0
000000058A43 00000045D843 0 4,5D5I5
000000058A55 00000045D855 0 8%8-8F8-9
000000058A79 00000045D879 0 >!>?>
000000058A8D 00000045D88D 0 0/0>0K0W0g0v0}0
000000058AAB 00000045D8AB 0 1*131W1
000000058ABD 00000045D8BD 0 2;3y3
000000058ACB 00000045D8CB 0 4,535U5\5
000000058AD9 00000045D8D9 0 7S8n8
000000058AE1 00000045D8E1 0 9$:G:
000000058AF5 00000045D8F5 0 ;+;6;[;
000000058B25 00000045D925 0 0 3*353
000000058B4B 00000045D94B 0 <'=0=>=j=o=u=y=
File pos Mem pos ID Text
======== ======= == ====
000000058BA3 00000045D9A3 0 2/252P2
000000058BAB 00000045D9AB 0 2i2q2
000000058BDB 00000045D9DB 0 3 3(3-333;3@3F3N3S3Y3a3f3l3t3y3
000000058C2D 00000045DA2D 0 4$4*42474=4E4J4P4X4]4c4k4p4v4~4
000000058C6D 00000045DA6D 0 5 5P5b5
000000058CA7 00000045DAA7 0 =#='=+=/=3=7=;=?=C=G=K=O=S=W=t=
000000058CE5 00000045DAE5 0 ? ?3?9?T?
000000058CFC 00000045DAFC 0 H0V0o0x0
000000058D2F 00000045DB2F 0 4K4c4m4
000000058D4D 00000045DB4D 0 5=5P5
000000058D63 00000045DB63 0 8%8G8W899w9
000000058D79 00000045DB79 0 ;(<0<
000000058D8B 00000045DB8B 0 =3=O=u=
000000058D99 00000045DB99 0 >&>7>
000000058DA9 00000045DBA9 0 090O0e0m0
000000058DC9 00000045DBC9 0 6p6*7]7
000000058DD3 00000045DBD3 0 8R8d8
000000058DEB 00000045DBEB 0 <<<M<Z<_<l<q<
000000058E03 00000045DC03 0 ?E?Q?
000000058E29 00000045DC29 0 3&4/4
000000058E31 00000045DC31 0 4b5n5
000000058E37 00000045DC37 0 5V6_6Q7Z7F8
000000058E49 00000045DC49 0 9(9o9
000000058E5D 00000045DC5D 0 :I;N;i;n;
000000058E6D 00000045DC6D 0 </<5<
000000058E7D 00000045DC7D 0 =+=p=v={=
000000058E97 00000045DC97 0 > >H>M>V>[>d>i>v>
000000058EC9 00000045DCC9 0 0 0*070A0Q0
000000058ED9 00000045DCD9 0 0e2w2
000000058EFD 00000045DCFD 0 474@4F4O4T4c4j4
000000058F11 00000045DD11 0 4,5?5
000000058F19 00000045DD19 0 636~6
000000058F31 00000045DD31 0 7*868v8
000000058F3F 00000045DD3F 0 9$9*919
000000058F4F 00000045DD4F 0 :V:k:u:{:
000000058F69 00000045DD69 0 = =*=;=F=d=
000000058F85 00000045DD85 0 >4><>K>
000000058FA8 00000045DDA8 0 50G0X1b1h1|1
000000058FB5 00000045DDB5 0 152V2
000000058FE1 00000045DDE1 0 9>9U9q9
00000005900D 00000045DE0D 0 1F1s2N3
000000059029 00000045DE29 0 6:6e6
0000000590AF 00000045DEAF 0 2 2'272=2C2K2Q2W2_2e2k2s2|2
0000000590DD 00000045DEDD 0 2+3C3\3-4
0000000590E7 00000045DEE7 0 4K5]5o5
000000059111 00000045DF11 0 :,:f:
00000005911B 00000045DF1B 0 < <(<0<8<
00000005912D 00000045DF2D 0 0!0/0O8
000000059139 00000045DF39 0 959a9
000000059143 00000045DF43 0 :J=7>
00000005917D 00000045DF7D 0 ;q;};
000000059187 00000045DF87 0 <:<V<}<
000000059197 00000045DF97 0 =X=u=
0000000591A5 00000045DFA5 0 =.>v>
0000000591B3 00000045DFB3 0 ?%?c?s?
0000000591E3 00000045DFE3 0 6P7[7
0000000591EB 00000045DFEB 0 8~8j9
0000000591F1 00000045DFF1 0 90:<:
00000005922D 00000045E02D 0 1Y1l1
000000059235 00000045E035 0 2:2T2
File pos Mem pos ID Text
======== ======= == ====
00000005923B 00000045E03B 0 2N3b344I4u4
000000059251 00000045E051 0 5)565@5g5z5
00000005925D 00000045E05D 0 566@6J6
000000059269 00000045E069 0 6#7=7M7t7
00000005927B 00000045E07B 0 8=9I9S9o9
0000000592C3 00000045E0C3 0 6F9j9
0000000592CD 00000045E0CD 0 9 :/:
0000000592ED 00000045E0ED 0 0A1I1
0000000592F9 00000045E0F9 0 4#414@4
000000059319 00000045E119 0 9<:S:
000000059321 00000045E121 0 ;f>x>
00000005937F 00000045E17F 0 :D:q:
00000005938B 00000045E18B 0 ;J;e;
00000005939D 00000045E19D 0 <5=j=
0000000593A7 00000045E1A7 0 >2>g>
0000000593D1 00000045E1D1 0 323b3
0000000593ED 00000045E1ED 0 4"43484B4Q4]4i4y4~4
00000005941F 00000045E21F 0 5(5;5P5T5
000000059429 00000045E229 0 5l5v5
000000059445 00000045E245 0 6"6&62666F6P6]6}6
00000005946B 00000045E26B 0 7=7G7Q7b7h7n7t7z7
0000000594A0 00000045E2A0 0 P2T2X2\2
0000000594A9 00000045E2A9 0 2d2h2l2p2t2x2|2
0000000594E9 00000045E2E9 0 3$3,343<3D3L3T3\3d3l3t3|3
000000059529 00000045E329 0 4$4,444<4D4L4T4\4d4l4t4|4
000000059569 00000045E369 0 5$5,5<5D5L5T5\5d5l5t5|5
0000000595A7 00000045E3A7 0 6$6,646<6D6L6T6\6d6l6t6|6
0000000595E7 00000045E3E7 0 7$7,747<7D7L7T7\7d7l7t7|7
000000059614 00000045E414 0 80<0@0D0H0L0P0T0X0\0
000000059629 00000045E429 0 0d0h0l0p0t0x0|0
00000005967B 00000045E47B 0 1 1$1(1,1014181<1@1D1H1L1P1T1X1\1
00000005969D 00000045E49D 0 1d1h1l1p1t1x1|1
0000000596F5 00000045E4F5 0 2 2$2(2,2024282<2@2
000000059721 00000045E521 0 3 3$3(3,3034383<3@3D3H3L3(4,4044484<4@4X4\4
000000059757 00000045E557 0 <d?l?t?|?
00000005978F 00000045E58F 0 0$0,040<0D0L0T0\0d0l0t0|0
0000000597CF 00000045E5CF 0 1$1,141<1D1L1T1\1d1l1t1|1
00000005980F 00000045E60F 0 2$2,242<2D2L2T2\2d2l2t2|2
00000005984F 00000045E64F 0 3$3,343<3D3L3T3\3d3l3t3|3
00000005988F 00000045E68F 0 4$4,444<4D4L4T4\4d4l4t4|4
0000000598CF 00000045E6CF 0 5$5,545<5D5L5T5\5d5l5t5|5
00000005990F 00000045E70F 0 6$6,646<6D6L6T6\6d6l6t6|6
00000005994F 00000045E74F 0 7 7(70787@7H7P7X7
000000059961 00000045E761 0 7h7p7x7
00000005998F 00000045E78F 0 8 8(80888@8H8P8X8
0000000599A1 00000045E7A1 0 8h8p8x8
0000000599CF 00000045E7CF 0 9 9(90989@9H9P9X9
0000000599E1 00000045E7E1 0 9h9p9x9
000000059A0F 00000045E80F 0 : :(:0:8:@:H:P:X:
000000059A21 00000045E821 0 :h:p:x:
000000059A4F 00000045E84F 0 ; ;(;0;8;@;H;P;X;
000000059A61 00000045E861 0 ;h;p;x;
000000059A8F 00000045E88F 0 < <(<0<8<@<H<P<X<
000000059AA1 00000045E8A1 0 <h<p<x<
000000059ACF 00000045E8CF 0 = =(=0=8=@=H=P=X=
000000059AE1 00000045E8E1 0 =h=p=x=
000000059B19 00000045E919 0 9$9,949<9D9L9
000000059BA7 00000045E9A7 0 3 3$3(3,3034383<3@3D3H3L3P3T3X3\3
000000059BC9 00000045E9C9 0 3d3h3l3p3t3x3|3
000000059C1F 00000045EA1F 0 :(:4:@:L:X:d:p:|:
File pos Mem pos ID Text
======== ======= == ====
000000059C49 00000045EA49 0 ;$;0;<;H;T;
000000059C55 00000045EA55 0 ;l;x;
000000059C73 00000045EA73 0 < <,<8<D<P<\<h<t<
000000059CB7 00000045EAB7 0 5 5,585D5P5\5h5t5
000000059CE0 00000045EAE0 0 ,<0<D<H<X<\<
000000059D0F 00000045EB0F 0 =,=0=@=D=H=L=T=l=|=
000000059D3F 00000045EB3F 0 >$>4>8>@>X>h>l>|>
000000059D6F 00000045EB6F 0 ? ?$?,?D?H?
000000059D7B 00000045EB7B 0 ?d?|?
000000059DA3 00000045EBA3 0 0 00040D0H0L0P0T0\0t0
000000059DD5 00000045EBD5 0 1 1$14181H1L1P1X1p1
000000059E07 00000045EC07 0 2 282<2T2d2h2x2|2
000000059E37 00000045EC37 0 3 383<3@3D3L3P3X3\3
000000059E4B 00000045EC4B 0 3d3x3|3
000000059E6F 00000045EC6F 0 4,4<4@4X4\4t4x4
000000059E9D 00000045EC9D 0 5,5<5L5\5
000000059EA7 00000045ECA7 0 5p5t5x5
000000059ED7 00000045ECD7 0 7$7,747<7@7D7L7
000000059EE7 00000045ECE7 0 7h7t7
000000059EF9 00000045ECF9 0 8$8D8P8p8|8
000000059F0D 00000045ED0D 0 9(9H9h9
000000059F21 00000045ED21 0 :0:P:p:
000000059F35 00000045ED35 0 ; ;$;<;@;\;
000000059F59 00000045ED59 0 <0<P<\<x<
000000059F6D 00000045ED6D 0 = =<=@=\=
000000059F85 00000045ED85 0 > >(>X>x>
000000059F99 00000045ED99 0 ?0?P?p?|?
000000059FC1 00000045EDC1 0 0$080@0T0\0p0x0
000000059FE7 00000045EDE7 0 1,181X1d1l1
00000005A001 00000045EE01 0 2 2,242h2x2
00000005A019 00000045EE19 0 3(343T3\3d3p3
00000005A03B 00000045EE3B 0 4$4D4P4t4|4
00000005A06D 00000045EE6D 0 5$5,545<5D5L5T5\5d5l5t5|5
00000005A09B 00000045EE9B 0 60686@6H6T6t6
00000005A0BB 00000045EEBB 0 7$7D7L7T7\7h7
00000005A0DB 00000045EEDB 0 8$8,848X8h8x8
00000005A101 00000045EF01 0 949D9P9p9
00000005A117 00000045EF17 0 0<0\0|0
00000005A133 00000045EF33 0 4 4$4(4,4044484<4@4D4P4T4X4\4
00000005A151 00000045EF51 0 4d4h4l4
00000005A161 00000045EF61 0 94:<:D:L:T:\:d:l:t:|:
00000005A19B 00000045EF9B 0 ;8;<;@;D;H;L;P;T;X;\;
00000005A1B1 00000045EFB1 0 ;d;h;l;p;t;x;|;
00000005A20B 00000045F00B 0 < <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<
00000005A22D 00000045F02D 0 <d<h<l<p<t<x<|<
00000005A255 00000045F055 0 =$=0=4=8=<=
00000005A261 00000045F061 0 =d=p=t=x=|=
00000005A289 00000045F089 0 3P8|8
00000005A295 00000045F095 0 949P9t9
000000000422 000000401022 0 l.dll
000000027063 000000428463 0 @mscoree.dll
0000000278DB 000000428CDB 0 Akernel32.dll
0000000289B8 000000429DB8 0 zh-CHS
000000028BB8 000000429FB8 0 ar-SA
000000028BC4 000000429FC4 0 bg-BG
000000028BD0 000000429FD0 0 ca-ES
000000028BDC 000000429FDC 0 zh-TW
000000028BE8 000000429FE8 0 cs-CZ
000000028BF4 000000429FF4 0 da-DK
000000028C00 00000042A000 0 de-DE
File pos Mem pos ID Text
======== ======= == ====
000000028C0C 00000042A00C 0 el-GR
000000028C18 00000042A018 0 en-US
000000028C24 00000042A024 0 fi-FI
000000028C30 00000042A030 0 fr-FR
000000028C3C 00000042A03C 0 he-IL
000000028C48 00000042A048 0 hu-HU
000000028C54 00000042A054 0 is-IS
000000028C60 00000042A060 0 it-IT
000000028C6C 00000042A06C 0 ja-JP
000000028C78 00000042A078 0 ko-KR
000000028C84 00000042A084 0 nl-NL
000000028C90 00000042A090 0 nb-NO
000000028C9C 00000042A09C 0 pl-PL
000000028CA8 00000042A0A8 0 pt-BR
000000028CB4 00000042A0B4 0 ro-RO
000000028CC0 00000042A0C0 0 ru-RU
000000028CCC 00000042A0CC 0 hr-HR
000000028CD8 00000042A0D8 0 sk-SK
000000028CE4 00000042A0E4 0 sq-AL
000000028CF0 00000042A0F0 0 sv-SE
000000028CFC 00000042A0FC 0 th-TH
000000028D08 00000042A108 0 tr-TR
000000028D14 00000042A114 0 ur-PK
000000028D20 00000042A120 0 id-ID
000000028D2C 00000042A12C 0 uk-UA
000000028D38 00000042A138 0 be-BY
000000028D44 00000042A144 0 sl-SI
000000028D50 00000042A150 0 et-EE
000000028D5C 00000042A15C 0 lv-LV
000000028D68 00000042A168 0 lt-LT
000000028D74 00000042A174 0 fa-IR
000000028D80 00000042A180 0 vi-VN
000000028D8C 00000042A18C 0 hy-AM
000000028D98 00000042A198 0 az-AZ-Latn
000000028DB0 00000042A1B0 0 eu-ES
000000028DBC 00000042A1BC 0 mk-MK
000000028DC8 00000042A1C8 0 tn-ZA
000000028DD4 00000042A1D4 0 xh-ZA
000000028DE0 00000042A1E0 0 zu-ZA
000000028DEC 00000042A1EC 0 af-ZA
000000028DF8 00000042A1F8 0 ka-GE
000000028E04 00000042A204 0 fo-FO
000000028E10 00000042A210 0 hi-IN
000000028E1C 00000042A21C 0 mt-MT
000000028E28 00000042A228 0 se-NO
000000028E34 00000042A234 0 ms-MY
000000028E40 00000042A240 0 kk-KZ
000000028E4C 00000042A24C 0 ky-KG
000000028E58 00000042A258 0 sw-KE
000000028E64 00000042A264 0 uz-UZ-Latn
000000028E7C 00000042A27C 0 tt-RU
000000028E88 00000042A288 0 bn-IN
000000028E94 00000042A294 0 pa-IN
000000028EA0 00000042A2A0 0 gu-IN
000000028EAC 00000042A2AC 0 ta-IN
000000028EB8 00000042A2B8 0 te-IN
000000028EC4 00000042A2C4 0 kn-IN
000000028ED0 00000042A2D0 0 ml-IN
000000028EDC 00000042A2DC 0 mr-IN
000000028EE8 00000042A2E8 0 sa-IN
File pos Mem pos ID Text
======== ======= == ====
000000028EF4 00000042A2F4 0 mn-MN
000000028F00 00000042A300 0 cy-GB
000000028F0C 00000042A30C 0 gl-ES
000000028F18 00000042A318 0 kok-IN
000000028F28 00000042A328 0 syr-SY
000000028F38 00000042A338 0 div-MV
000000028F48 00000042A348 0 quz-BO
000000028F58 00000042A358 0 ns-ZA
000000028F64 00000042A364 0 mi-NZ
000000028F70 00000042A370 0 ar-IQ
000000028F7C 00000042A37C 0 zh-CN
000000028F88 00000042A388 0 de-CH
000000028F94 00000042A394 0 en-GB
000000028FA0 00000042A3A0 0 es-MX
000000028FAC 00000042A3AC 0 fr-BE
000000028FB8 00000042A3B8 0 it-CH
000000028FC4 00000042A3C4 0 nl-BE
000000028FD0 00000042A3D0 0 nn-NO
000000028FDC 00000042A3DC 0 pt-PT
000000028FE8 00000042A3E8 0 sr-SP-Latn
000000029000 00000042A400 0 sv-FI
00000002900C 00000042A40C 0 az-AZ-Cyrl
000000029024 00000042A424 0 se-SE
000000029030 00000042A430 0 ms-BN
00000002903C 00000042A43C 0 uz-UZ-Cyrl
000000029054 00000042A454 0 quz-EC
000000029064 00000042A464 0 ar-EG
000000029070 00000042A470 0 zh-HK
00000002907C 00000042A47C 0 de-AT
000000029088 00000042A488 0 en-AU
000000029094 00000042A494 0 es-ES
0000000290A0 00000042A4A0 0 fr-CA
0000000290AC 00000042A4AC 0 sr-SP-Cyrl
0000000290C4 00000042A4C4 0 se-FI
0000000290D0 00000042A4D0 0 quz-PE
0000000290E0 00000042A4E0 0 ar-LY
0000000290EC 00000042A4EC 0 zh-SG
0000000290F8 00000042A4F8 0 de-LU
000000029104 00000042A504 0 en-CA
000000029110 00000042A510 0 es-GT
00000002911C 00000042A51C 0 fr-CH
000000029128 00000042A528 0 hr-BA
000000029134 00000042A534 0 smj-NO
000000029144 00000042A544 0 ar-DZ
000000029150 00000042A550 0 zh-MO
00000002915C 00000042A55C 0 de-LI
000000029168 00000042A568 0 en-NZ
000000029174 00000042A574 0 es-CR
000000029180 00000042A580 0 fr-LU
00000002918C 00000042A58C 0 bs-BA-Latn
0000000291A4 00000042A5A4 0 smj-SE
0000000291B4 00000042A5B4 0 ar-MA
0000000291C0 00000042A5C0 0 en-IE
0000000291CC 00000042A5CC 0 es-PA
0000000291D8 00000042A5D8 0 fr-MC
0000000291E4 00000042A5E4 0 sr-BA-Latn
0000000291FC 00000042A5FC 0 sma-NO
00000002920C 00000042A60C 0 ar-TN
000000029218 00000042A618 0 en-ZA
000000029224 00000042A624 0 es-DO
File pos Mem pos ID Text
======== ======= == ====
000000029230 00000042A630 0 sr-BA-Cyrl
000000029248 00000042A648 0 sma-SE
000000029258 00000042A658 0 ar-OM
000000029264 00000042A664 0 en-JM
000000029270 00000042A670 0 es-VE
00000002927C 00000042A67C 0 sms-FI
00000002928C 00000042A68C 0 ar-YE
000000029298 00000042A698 0 en-CB
0000000292A4 00000042A6A4 0 es-CO
0000000292B0 00000042A6B0 0 smn-FI
0000000292C0 00000042A6C0 0 ar-SY
0000000292CC 00000042A6CC 0 en-BZ
0000000292D8 00000042A6D8 0 es-PE
0000000292E4 00000042A6E4 0 ar-JO
0000000292F0 00000042A6F0 0 en-TT
0000000292FC 00000042A6FC 0 es-AR
000000029308 00000042A708 0 ar-LB
000000029314 00000042A714 0 en-ZW
000000029320 00000042A720 0 es-EC
00000002932C 00000042A72C 0 ar-KW
000000029338 00000042A738 0 en-PH
000000029344 00000042A744 0 es-CL
000000029350 00000042A750 0 ar-AE
00000002935C 00000042A75C 0 es-UY
000000029368 00000042A768 0 ar-BH
000000029374 00000042A774 0 es-PY
000000029380 00000042A780 0 ar-QA
00000002938C 00000042A78C 0 es-BO
000000029398 00000042A798 0 es-SV
0000000293A4 00000042A7A4 0 es-HN
0000000293B0 00000042A7B0 0 es-NI
0000000293BC 00000042A7BC 0 es-PR
0000000293C8 00000042A7C8 0 zh-CHT
0000000293E0 00000042A7E0 0 af-za
0000000293EC 00000042A7EC 0 ar-ae
0000000293F8 00000042A7F8 0 ar-bh
000000029404 00000042A804 0 ar-dz
000000029410 00000042A810 0 ar-eg
00000002941C 00000042A81C 0 ar-iq
000000029428 00000042A828 0 ar-jo
000000029434 00000042A834 0 ar-kw
000000029440 00000042A840 0 ar-lb
00000002944C 00000042A84C 0 ar-ly
000000029458 00000042A858 0 ar-ma
000000029464 00000042A864 0 ar-om
000000029470 00000042A870 0 ar-qa
00000002947C 00000042A87C 0 ar-sa
000000029488 00000042A888 0 ar-sy
000000029494 00000042A894 0 ar-tn
0000000294A0 00000042A8A0 0 ar-ye
0000000294AC 00000042A8AC 0 az-az-cyrl
0000000294C4 00000042A8C4 0 az-az-latn
0000000294DC 00000042A8DC 0 be-by
0000000294E8 00000042A8E8 0 bg-bg
0000000294F4 00000042A8F4 0 bn-in
000000029500 00000042A900 0 bs-ba-latn
000000029518 00000042A918 0 ca-es
000000029524 00000042A924 0 cs-cz
000000029530 00000042A930 0 cy-gb
00000002953C 00000042A93C 0 da-dk
File pos Mem pos ID Text
======== ======= == ====
000000029548 00000042A948 0 de-at
000000029554 00000042A954 0 de-ch
000000029560 00000042A960 0 de-de
00000002956C 00000042A96C 0 de-li
000000029578 00000042A978 0 de-lu
000000029584 00000042A984 0 div-mv
000000029594 00000042A994 0 el-gr
0000000295A0 00000042A9A0 0 en-au
0000000295AC 00000042A9AC 0 en-bz
0000000295B8 00000042A9B8 0 en-ca
0000000295C4 00000042A9C4 0 en-cb
0000000295D0 00000042A9D0 0 en-gb
0000000295DC 00000042A9DC 0 en-ie
0000000295E8 00000042A9E8 0 en-jm
0000000295F4 00000042A9F4 0 en-nz
000000029600 00000042AA00 0 en-ph
00000002960C 00000042AA0C 0 en-tt
000000029618 00000042AA18 0 en-us
000000029624 00000042AA24 0 en-za
000000029630 00000042AA30 0 en-zw
00000002963C 00000042AA3C 0 es-ar
000000029648 00000042AA48 0 es-bo
000000029654 00000042AA54 0 es-cl
000000029660 00000042AA60 0 es-co
00000002966C 00000042AA6C 0 es-cr
000000029678 00000042AA78 0 es-do
000000029684 00000042AA84 0 es-ec
000000029690 00000042AA90 0 es-es
00000002969C 00000042AA9C 0 es-gt
0000000296A8 00000042AAA8 0 es-hn
0000000296B4 00000042AAB4 0 es-mx
0000000296C0 00000042AAC0 0 es-ni
0000000296CC 00000042AACC 0 es-pa
0000000296D8 00000042AAD8 0 es-pe
0000000296E4 00000042AAE4 0 es-pr
0000000296F0 00000042AAF0 0 es-py
0000000296FC 00000042AAFC 0 es-sv
000000029708 00000042AB08 0 es-uy
000000029714 00000042AB14 0 es-ve
000000029720 00000042AB20 0 et-ee
00000002972C 00000042AB2C 0 eu-es
000000029738 00000042AB38 0 fa-ir
000000029744 00000042AB44 0 fi-fi
000000029750 00000042AB50 0 fo-fo
00000002975C 00000042AB5C 0 fr-be
000000029768 00000042AB68 0 fr-ca
000000029774 00000042AB74 0 fr-ch
000000029780 00000042AB80 0 fr-fr
00000002978C 00000042AB8C 0 fr-lu
000000029798 00000042AB98 0 fr-mc
0000000297A4 00000042ABA4 0 gl-es
0000000297B0 00000042ABB0 0 gu-in
0000000297BC 00000042ABBC 0 he-il
0000000297C8 00000042ABC8 0 hi-in
0000000297D4 00000042ABD4 0 hr-ba
0000000297E0 00000042ABE0 0 hr-hr
0000000297EC 00000042ABEC 0 hu-hu
0000000297F8 00000042ABF8 0 hy-am
000000029804 00000042AC04 0 id-id
000000029810 00000042AC10 0 is-is
File pos Mem pos ID Text
======== ======= == ====
00000002981C 00000042AC1C 0 it-ch
000000029828 00000042AC28 0 it-it
000000029834 00000042AC34 0 ja-jp
000000029840 00000042AC40 0 ka-ge
00000002984C 00000042AC4C 0 kk-kz
000000029858 00000042AC58 0 kn-in
000000029864 00000042AC64 0 kok-in
000000029874 00000042AC74 0 ko-kr
000000029880 00000042AC80 0 ky-kg
00000002988C 00000042AC8C 0 lt-lt
000000029898 00000042AC98 0 lv-lv
0000000298A4 00000042ACA4 0 mi-nz
0000000298B0 00000042ACB0 0 mk-mk
0000000298BC 00000042ACBC 0 ml-in
0000000298C8 00000042ACC8 0 mn-mn
0000000298D4 00000042ACD4 0 mr-in
0000000298E0 00000042ACE0 0 ms-bn
0000000298EC 00000042ACEC 0 ms-my
0000000298F8 00000042ACF8 0 mt-mt
000000029904 00000042AD04 0 nb-no
000000029910 00000042AD10 0 nl-be
00000002991C 00000042AD1C 0 nl-nl
000000029928 00000042AD28 0 nn-no
000000029934 00000042AD34 0 ns-za
000000029940 00000042AD40 0 pa-in
00000002994C 00000042AD4C 0 pl-pl
000000029958 00000042AD58 0 pt-br
000000029964 00000042AD64 0 pt-pt
000000029970 00000042AD70 0 quz-bo
000000029980 00000042AD80 0 quz-ec
000000029990 00000042AD90 0 quz-pe
0000000299A0 00000042ADA0 0 ro-ro
0000000299AC 00000042ADAC 0 ru-ru
0000000299B8 00000042ADB8 0 sa-in
0000000299C4 00000042ADC4 0 se-fi
0000000299D0 00000042ADD0 0 se-no
0000000299DC 00000042ADDC 0 se-se
0000000299E8 00000042ADE8 0 sk-sk
0000000299F4 00000042ADF4 0 sl-si
000000029A00 00000042AE00 0 sma-no
000000029A10 00000042AE10 0 sma-se
000000029A20 00000042AE20 0 smj-no
000000029A30 00000042AE30 0 smj-se
000000029A40 00000042AE40 0 smn-fi
000000029A50 00000042AE50 0 sms-fi
000000029A60 00000042AE60 0 sq-al
000000029A6C 00000042AE6C 0 sr-ba-cyrl
000000029A84 00000042AE84 0 sr-ba-latn
000000029A9C 00000042AE9C 0 sr-sp-cyrl
000000029AB4 00000042AEB4 0 sr-sp-latn
000000029ACC 00000042AECC 0 sv-fi
000000029AD8 00000042AED8 0 sv-se
000000029AE4 00000042AEE4 0 sw-ke
000000029AF0 00000042AEF0 0 syr-sy
000000029B00 00000042AF00 0 ta-in
000000029B0C 00000042AF0C 0 te-in
000000029B18 00000042AF18 0 th-th
000000029B24 00000042AF24 0 tn-za
000000029B30 00000042AF30 0 tr-tr
000000029B3C 00000042AF3C 0 tt-ru
File pos Mem pos ID Text
======== ======= == ====
000000029B48 00000042AF48 0 uk-ua
000000029B54 00000042AF54 0 ur-pk
000000029B60 00000042AF60 0 uz-uz-cyrl
000000029B78 00000042AF78 0 uz-uz-latn
000000029B90 00000042AF90 0 vi-vn
000000029B9C 00000042AF9C 0 xh-za
000000029BA8 00000042AFA8 0 zh-chs
000000029BB8 00000042AFB8 0 zh-cht
000000029BC8 00000042AFC8 0 zh-cn
000000029BD4 00000042AFD4 0 zh-hk
000000029BE0 00000042AFE0 0 zh-mo
000000029BEC 00000042AFEC 0 zh-sg
000000029BF8 00000042AFF8 0 zh-tw
000000029C04 00000042B004 0 zu-za
00000002A478 00000042B878 0 runtime error
00000002A5CC 00000042B9CC 0 Program:
00000002A5E0 00000042B9E0 0 <program name unknown>
00000002A620 00000042BA20 0 Microsoft Visual C++ Runtime Library
00000002A93C 00000042BD3C 0 Sunday
00000002A94C 00000042BD4C 0 Monday
00000002A95C 00000042BD5C 0 Tuesday
00000002A96C 00000042BD6C 0 Wednesday
00000002A980 00000042BD80 0 Thursday
00000002A994 00000042BD94 0 Friday
00000002A9A4 00000042BDA4 0 Saturday
00000002AA18 00000042BE18 0 January
00000002AA28 00000042BE28 0 February
00000002AA3C 00000042BE3C 0 March
00000002AA48 00000042BE48 0 April
00000002AA6C 00000042BE6C 0 August
00000002AA7C 00000042BE7C 0 September
00000002AA90 00000042BE90 0 October
00000002AAA0 00000042BEA0 0 November
00000002AAB4 00000042BEB4 0 December
00000002AAD8 00000042BED8 0 MM/dd/yy
00000002AAEC 00000042BEEC 0 dddd, MMMM dd, yyyy
00000002AB14 00000042BF14 0 HH:mm:ss
00000002AB30 00000042BF30 0 (null)
00000002AC17 00000042C017 0 ALC_ALL
00000002AC28 00000042C028 0 LC_COLLATE
00000002AC40 00000042C040 0 LC_CTYPE
00000002AC54 00000042C054 0 LC_MONETARY
00000002AC6C 00000042C06C 0 LC_NUMERIC
00000002AC84 00000042C084 0 LC_TIME
00000002AE04 00000042C204 0 USER32.DLL
00000002B91C 00000042CD1C 0 american
00000002B930 00000042CD30 0 american english
00000002B954 00000042CD54 0 american-english
00000002B978 00000042CD78 0 australian
00000002B990 00000042CD90 0 belgian
00000002B9A0 00000042CDA0 0 canadian
00000002B9C4 00000042CDC4 0 chinese
00000002B9D4 00000042CDD4 0 chinese-hongkong
00000002B9F8 00000042CDF8 0 chinese-simplified
00000002BA20 00000042CE20 0 chinese-singapore
00000002BA44 00000042CE44 0 chinese-traditional
00000002BA6C 00000042CE6C 0 dutch-belgian
00000002BA88 00000042CE88 0 english-american
00000002BAAC 00000042CEAC 0 english-aus
00000002BAC4 00000042CEC4 0 english-belize
File pos Mem pos ID Text
======== ======= == ====
00000002BAE4 00000042CEE4 0 english-can
00000002BAFC 00000042CEFC 0 english-caribbean
00000002BB20 00000042CF20 0 english-ire
00000002BB38 00000042CF38 0 english-jamaica
00000002BB58 00000042CF58 0 english-nz
00000002BB70 00000042CF70 0 english-south africa
00000002BB9C 00000042CF9C 0 english-trinidad y tobago
00000002BBD0 00000042CFD0 0 english-uk
00000002BBE8 00000042CFE8 0 english-us
00000002BC00 00000042D000 0 english-usa
00000002BC18 00000042D018 0 french-belgian
00000002BC38 00000042D038 0 french-canadian
00000002BC58 00000042D058 0 french-luxembourg
00000002BC7C 00000042D07C 0 french-swiss
00000002BC98 00000042D098 0 german-austrian
00000002BCB8 00000042D0B8 0 german-lichtenstein
00000002BCE0 00000042D0E0 0 german-luxembourg
00000002BD04 00000042D104 0 german-swiss
00000002BD20 00000042D120 0 irish-english
00000002BD3C 00000042D13C 0 italian-swiss
00000002BD58 00000042D158 0 norwegian
00000002BD6C 00000042D16C 0 norwegian-bokmal
00000002BD90 00000042D190 0 norwegian-nynorsk
00000002BDB4 00000042D1B4 0 portuguese-brazilian
00000002BDE0 00000042D1E0 0 spanish-argentina
00000002BE04 00000042D204 0 spanish-bolivia
00000002BE24 00000042D224 0 spanish-chile
00000002BE40 00000042D240 0 spanish-colombia
00000002BE64 00000042D264 0 spanish-costa rica
00000002BE8C 00000042D28C 0 spanish-dominican republic
00000002BEC4 00000042D2C4 0 spanish-ecuador
00000002BEE4 00000042D2E4 0 spanish-el salvador
00000002BF0C 00000042D30C 0 spanish-guatemala
00000002BF30 00000042D330 0 spanish-honduras
00000002BF54 00000042D354 0 spanish-mexican
00000002BF74 00000042D374 0 spanish-modern
00000002BF94 00000042D394 0 spanish-nicaragua
00000002BFB8 00000042D3B8 0 spanish-panama
00000002BFD8 00000042D3D8 0 spanish-paraguay
00000002BFFC 00000042D3FC 0 spanish-peru
00000002C018 00000042D418 0 spanish-puerto rico
00000002C040 00000042D440 0 spanish-uruguay
00000002C060 00000042D460 0 spanish-venezuela
00000002C084 00000042D484 0 swedish-finland
00000002C0A4 00000042D4A4 0 swiss
00000002C1D4 00000042D5D4 0 america
00000002C1E4 00000042D5E4 0 britain
00000002C1F4 00000042D5F4 0 china
00000002C200 00000042D600 0 czech
00000002C20C 00000042D60C 0 england
00000002C21C 00000042D61C 0 great britain
00000002C238 00000042D638 0 holland
00000002C248 00000042D648 0 hong-kong
00000002C25C 00000042D65C 0 new-zealand
00000002C27C 00000042D67C 0 pr china
00000002C290 00000042D690 0 pr-china
00000002C2A4 00000042D6A4 0 puerto-rico
00000002C2BC 00000042D6BC 0 slovak
00000002C2CC 00000042D6CC 0 south africa
00000002C2E8 00000042D6E8 0 south korea
File pos Mem pos ID Text
======== ======= == ====
00000002C300 00000042D700 0 south-africa
00000002C31C 00000042D71C 0 south-korea
00000002C334 00000042D734 0 trinidad & tobago
00000002C358 00000042D758 0 united-kingdom
00000002C378 00000042D778 0 united-states
00000002C3CB 00000042D7CB 0 2CONOUT$
00000002C51B 00000042D91B 0 X.DEFAULT\XFS\LOGICAL_SERVICES
00000002C774 00000042DB74 0 dMain
00000002D630 00000042EA30 0 dispenserprogm
00000002D713 00000042EB13 0 NTahoma
00000002D724 00000042EB24 0 dDispW
00000002D734 00000042EB34 0 Dispenser
00000002D788 00000042EB88 0 out of service
00000002D7A8 00000042EBA8 0 Arial Black
000000050F97 000000452B97 0 }Sysinternals License
000000050FC4 000000452BC4 0 %s License Agreement
000000050FF0 000000452BF0 0 RICHEDIT
000000051004 000000452C04 0 &Print
000000051014 000000452C14 0 &Decline
000000051028 000000452C28 0 &Agree
000000051038 000000452C38 0 You can also use the /accepteula command-line switch to accept the EULA.
0000000510CC 000000452CCC 0 MS Shell Dlg
0000000510E8 000000452CE8 0 License Agreement
00000005110C 000000452D0C 0 Riched32.dll
000000051128 000000452D28 0 EulaAccepted
000000051144 000000452D44 0 Software\Sysinternals\%s
000000051178 000000452D78 0 -accepteula
000000051190 000000452D90 0 /accepteula
0000000511A8 000000452DA8 0 Shell32.dll
000000051272 000000452E72 0 Error deleting %s:
00000005129E 000000452E9E 0 Error overwriting %s:
0000000512CE 000000452ECE 0 Error opening %s for delete:
000000051322 000000452F22 0 Error opening %s for compressed file scan:
00000005137C 000000452F7C 0 %s...
000000051394 000000452F94 0 %s\%s
0000000513A0 000000452FA0 0 %s\*.*
00000005144E 00000045304E 0 Cleaning MFT...%c
00000005147A 00000045307A 0
0000000514F4 0000004530F4 0 %sSDELMFT%06d
000000051510 000000453110 0 %s\SDELMFT%06d
000000051530 000000453130 0 %sSDELTEMP1
000000051548 000000453148 0 %s\SDELTEMP1
00000005156A 00000045316A 0 Cleaning free space on %s: %d%%
0000000515B2 0000004531B2 0 Cleaning free space to securely delete compressed files: %d%%
000000051630 000000453230 0 Could not create free-space cleanup file:
000000051688 000000453288 0 %sSDELTEMP
000000051730 000000453330 0 Could not determine amount of free space:
000000051788 000000453388 0 %s\SDELTEMP
0000000517A0 0000004533A0 0 %TEMP%
0000000517B0 0000004533B0 0 kernel32.dll
0000000517DF 0000004533DF 0 WCould not determine disk cluster size:
000000051830 000000453430 0 Zeroing free space on %s: 0%%
000000051870 000000453470 0 Zeroing free space to securely delete compressed files: 0%%
000000051938 000000453538 0 |/-\|/-\
000000051A5C 00000045365C 0 ntdll.dll
000000051EE4 000000453AE4 0 Kernel32.dll
000000051F20 000000453B20 0 SDelete
00000005203C 000000453C3C 0 mscoree.dll
000000052754 000000454354 0 KERNEL32.DLL
0000000527AC 0000004543AC 0 (null)
File pos Mem pos ID Text
======== ======= == ====
000000054EEC 000000456AEC 0 \\.\A:
000000055ED6 000000457AD6 0 VS_VERSION_INFO
000000055F32 000000457B32 0 StringFileInfo
000000055F56 000000457B56 0 040904b0
000000055F6E 000000457B6E 0 CompanyName
000000055F88 000000457B88 0 Sysinternals
000000055FAA 000000457BAA 0 FileDescription
000000055FCC 000000457BCC 0 sdelete
000000055FE2 000000457BE2 0 FileVersion
00000005600E 000000457C0E 0 InternalName
000000056028 000000457C28 0 sdelete
00000005603E 000000457C3E 0 LegalCopyright
000000056072 000000457C72 0 1999-2012 Mark Russinovich
0000000560B2 000000457CB2 0 OriginalFilename
0000000560D4 000000457CD4 0 sdelete.exe
0000000560F2 000000457CF2 0 ProductName
00000005610C 000000457D0C 0 Sysinternals Sdelete
00000005613E 000000457D3E 0 ProductVersion
00000005616E 000000457D6E 0 VarFileInfo
00000005618E 000000457D8E 0 Translation