.- - -----÷M÷E÷N÷U÷------------------------------------------------------------- --- ----  -------------.
!  WALL ! STATS ! GOODIES ! YARA ! FAQ ! RSS ! EMV                                                      !
`--------------  - ---  ---------- -------- -------- -------- -------- ----------------- -  ---- ---- --'

                                           ATM MALWARE NOTICE 
                    956968e6f4bf611137ea0e747891ba8dc200ca809c252ef249294912fb3dbe3c
 
Date...........: 2018-09-05
Family.........: Atmosphere
File name......: J133301_17975_app4.dat
File size......: 168.00 KB
Type file......: EXE/Windows
Virscan........: VT - HA
Documentation..: https://owncloud.group-ib.ru/s/aTugJcPclCLnQPb/download?path=%2F&files=Silence_Group-IB_Eng_Public.pdf
Additional note: drop eeb8390e885612e1f0b8f8922baa4ebc9ba420224b30370d08b45f3453949937

Entropy:


Binary Histogram:


=== PEDUMP REPORT === 
=== MZ Header === signature: "MZ" bytes_in_last_block: 144 0x90 blocks_in_file: 3 3 num_relocs: 0 0 header_paragraphs: 4 4 min_extra_paragraphs: 0 0 max_extra_paragraphs: 65535 0xffff ss: 0 0 sp: 184 0xb8 checksum: 0 0 ip: 0 0 cs: 0 0 reloc_table_offset: 64 0x40 overlay_number: 0 0 reserved0: 0 0 oem_id: 0 0 oem_info: 0 0 reserved2: 0 0 reserved3: 0 0 reserved4: 0 0 reserved5: 0 0 reserved6: 0 0 lfanew: 248 0xf8 === DOS STUB === 00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......| === RICH Header === LIB_ID VERSION TIMES_USED 93 5d 4035 fc3 2 2 12 c 7291 1c7b 1 1 14 e 7299 1c83 25 19 0 0 0 0 4 4 10 a 8168 1fe8 136 88 19 13 8034 1f62 4 4 93 5d 2179 883 3 3 1 1 0 0 109 6d 11 b 8168 1fe8 37 25 6 6 1720 6b8 1 1 === PE Header === signature: "PE\x00\x00" # IMAGE_FILE_HEADER: Machine: 332 0x14c x86 NumberOfSections: 4 4 TimeDateStamp: "2018-04-07 10:47:36" PointerToSymbolTable: 0 0 NumberOfSymbols: 0 0 SizeOfOptionalHeader: 224 0xe0 Characteristics: 271 0x10f RELOCS_STRIPPED, EXECUTABLE_IMAGE LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED 32BIT_MACHINE # IMAGE_OPTIONAL_HEADER32: Magic: 267 0x10b 32-bit executable LinkerVersion: 6.0 SizeOfCode: 57344 0xe000 SizeOfInitializedData: 118784 0x1d000 SizeOfUninitializedData: 0 0 AddressOfEntryPoint: 27887 0x6cef BaseOfCode: 4096 0x1000 BaseOfData: 61440 0xf000 ImageBase: 4194304 0x400000 SectionAlignment: 4096 0x1000 FileAlignment: 4096 0x1000 OperatingSystemVersion: 4.0 ImageVersion: 0.0 SubsystemVersion: 4.0 Reserved1: 0 0 SizeOfImage: 180224 0x2c000 SizeOfHeaders: 4096 0x1000 CheckSum: 0 0 Subsystem: 3 3 WINDOWS_CUI DllCharacteristics: 0 0 SizeOfStackReserve: 1048576 0x100000 SizeOfStackCommit: 4096 0x1000 SizeOfHeapReserve: 1048576 0x100000 SizeOfHeapCommit: 4096 0x1000 LoaderFlags: 0 0 NumberOfRvaAndSizes: 16 0x10 === DATA DIRECTORY === EXPORT rva:0x 0 size:0x 0 IMPORT rva:0x 10b28 size:0x 50 RESOURCE rva:0x 16000 size:0x 15060 EXCEPTION rva:0x 0 size:0x 0 SECURITY rva:0x 0 size:0x 0 BASERELOC rva:0x 0 size:0x 0 DEBUG rva:0x 0 size:0x 0 ARCHITECTURE rva:0x 0 size:0x 0 GLOBALPTR rva:0x 0 size:0x 0 TLS rva:0x 0 size:0x 0 LOAD_CONFIG rva:0x 0 size:0x 0 Bound_IAT rva:0x 0 size:0x 0 IAT rva:0x f000 size:0x 15c Delay_IAT rva:0x 0 size:0x 0 CLR_Header rva:0x 0 size:0x 0 rva:0x 0 size:0x 0 === SECTIONS === NAME RVA VSZ RAW_SZ RAW_PTR nREL REL_PTR nLINE LINE_PTR FLAGS .text 1000 d329 e000 1000 0 0 0 0 60000020 R-X CODE .rdata f000 22d6 3000 f000 0 0 0 0 40000040 R-- IDATA .data 12000 30e4 2000 12000 0 0 0 0 c0000040 RW- IDATA .rsrc 16000 15060 16000 14000 0 0 0 0 40000040 R-- IDATA === RESOURCES === FILE_OFFSET CP LANG SIZE TYPE NAME 0x14060 0 0x409 86016 BIN #101 === IMPORTS === MODULE_NAME HINT ORD FUNCTION_NAME KERNEL32.dll 348 SizeofResource KERNEL32.dll 25b LockResource KERNEL32.dll 24d LoadResource KERNEL32.dll da FindResourceA KERNEL32.dll 177 GetModuleHandleA KERNEL32.dll 1b1 GetStdHandle KERNEL32.dll 169 GetLastError KERNEL32.dll 1d5 GetTickCount KERNEL32.dll 175 GetModuleFileNameA KERNEL32.dll 349 Sleep KERNEL32.dll 2c7 ResumeThread KERNEL32.dll 379 VirtualFreeEx KERNEL32.dll 24e LocalAlloc KERNEL32.dll 248 LoadLibraryA KERNEL32.dll 3a0 WriteProcessMemory KERNEL32.dll 198 GetProcAddress KERNEL32.dll 376 VirtualAllocEx KERNEL32.dll 1cd GetThreadContext KERNEL32.dll 34b SuspendThread KERNEL32.dll 280 OpenThread KERNEL32.dll 355 Thread32Next KERNEL32.dll 354 Thread32First KERNEL32.dll 6c CreateToolhelp32Snapshot KERNEL32.dll 27c OpenProcess KERNEL32.dll 13a GetCurrentProcess KERNEL32.dll 28e Process32Next KERNEL32.dll 28c Process32First KERNEL32.dll 305 SetEndOfFile KERNEL32.dll 252 LocalFree KERNEL32.dll 310 SetFilePointer KERNEL32.dll 397 WriteFile KERNEL32.dll 4d CreateFileA KERNEL32.dll 15b GetFileSize KERNEL32.dll 2ab ReadFile KERNEL32.dll 2e CloseHandle KERNEL32.dll 45 CreateDirectoryA KERNEL32.dll 156 GetFileAttributesA KERNEL32.dll 334 SetThreadContext KERNEL32.dll 18b GetOEMCP KERNEL32.dll f5 GetACP KERNEL32.dll 32c SetStdHandle KERNEL32.dll 226 IsBadCodePtr KERNEL32.dll 229 IsBadReadPtr KERNEL32.dll 26b MultiByteToWideChar KERNEL32.dll 389 WideCharToMultiByte KERNEL32.dll 2cc RtlUnwind KERNEL32.dll 29d RaiseException KERNEL32.dll 210 HeapReAlloc KERNEL32.dll 206 HeapAlloc KERNEL32.dll 20c HeapFree KERNEL32.dll af ExitProcess KERNEL32.dll 351 TerminateProcess KERNEL32.dll 108 GetCommandLineA KERNEL32.dll 1de GetVersion KERNEL32.dll 23a LCMapStringA KERNEL32.dll 23b LCMapStringW KERNEL32.dll fc GetCPInfo KERNEL32.dll 212 HeapSize KERNEL32.dll 33d SetUnhandledExceptionFilter KERNEL32.dll 20a HeapDestroy KERNEL32.dll 208 HeapCreate KERNEL32.dll 378 VirtualFree KERNEL32.dll 375 VirtualAlloc KERNEL32.dll 22c IsBadWritePtr KERNEL32.dll 319 SetHandleCount KERNEL32.dll 15e GetFileType KERNEL32.dll 1af GetStartupInfoA KERNEL32.dll 362 UnhandledExceptionFilter KERNEL32.dll ed FreeEnvironmentStringsA KERNEL32.dll ee FreeEnvironmentStringsW KERNEL32.dll 14d GetEnvironmentStrings KERNEL32.dll 14f GetEnvironmentStringsW KERNEL32.dll e5 FlushFileBuffers KERNEL32.dll 1b2 GetStringTypeA KERNEL32.dll 1b5 GetStringTypeW ADVAPI32.dll 17 AdjustTokenPrivileges ADVAPI32.dll 142 OpenProcessToken ADVAPI32.dll 18 AllocateAndInitializeSid ADVAPI32.dll 197 SetEntriesInAclA ADVAPI32.dll df InitializeSecurityDescriptor ADVAPI32.dll 1a5 SetSecurityDescriptorDacl ADVAPI32.dll 19b SetFileSecurityA ADVAPI32.dll 9d FreeSid SHLWAPI.dll b PathAppendA === Packer / Compiler === MS Visual C++ v6.0
=== Strings ===
File pos Mem pos ID Text ======== ======= == ==== 00000000004D 00000040004D 0 !This program cannot be run in DOS mode. 0000000001F0 0000004001F0 0 .text 000000000218 000000400218 0 .rdata 00000000023F 00000040023F 0 @.data 000000000268 000000400268 0 .rsrc 0000000023D3 0000004023D3 0 PSSSSSSSSj 0000000049E9 0000004049E9 0 t/Ht HH 0000000053DA 0000004053DA 0 VWhST@ 00000000570B 00000040570B 0 QWj P 0000000058BD 0000004058BD 0 QQSVWd 000000005B5F 000000405B5F 0 SVWUj 000000005BC8 000000405BC8 0 t.;t$$t( 000000006656 000000406656 0 uRFGHt 000000006700 000000406700 0 tlHt. 0000000067D8 0000004067D8 0 wDVSU 0000000069C0 0000004069C0 0 VC20XC00U 000000007516 000000407516 0 PPPPPPPP 000000007576 000000407576 0 9= :A 00000000757C 00000040757C 0 uFWWj 0000000075A1 0000004075A1 0 "WWSh| 00000000768D 00000040768D 0 tMWWS 000000007AD0 000000407AD0 0 sO;>|C;~ 000000007FC8 000000407FC8 0 QQSVW 0000000080A9 0000004080A9 0 QQSVW 0000000080FF 0000004080FF 0 QQSVW 000000008645 000000408645 0 HHtpHHtl 0000000088FC 0000004088FC 0 Yt f 000000008EBB 000000408EBB 0 btHHt. 000000009B67 000000409B67 0 DSUVWh 00000000A13D 00000040A13D 0 eYt,F 00000000A756 00000040A756 0 ?=t"U 00000000A8AA 00000040A8AA 0 8"uF@ 00000000AA78 00000040AA78 0 SS@SSPVSS 00000000AA9A 00000040AA9A 0 t#SSUP 00000000AAA1 00000040AAA1 0 t$$VSS 00000000AB77 00000040AB77 0 A=(.A 00000000B786 00000040B786 0 PPPPPPPP 00000000BB2D 00000040BB2D 0 B=h0A 00000000BD93 00000040BD93 0 t-Ht!Ht 00000000C276 00000040C276 0 SVWj 00000000C39F 00000040C39F 0 SVWj 00000000C7C2 00000040C7C2 0 Y;5T=A 00000000C9C5 00000040C9C5 0 Wj@Y3 00000000CB98 00000040CB98 0 VWuBhT"A 00000000CD48 00000040CD48 0 FGQPS 00000000CFD4 00000040CFD4 0 +ttHHtd 00000000D012 00000040D012 0 j XO 00000000D258 00000040D258 0 HHtYHHtF 00000000F224 00000040F224 0 string too long 00000000F254 00000040F254 0 invalid string position 00000000F3B8 00000040F3B8 0 ios::eofbit set 00000000F3C8 00000040F3C8 0 ios::failbit set 00000000F3DC 00000040F3DC 0 ios::badbit set 00000000F45C 00000040F45C 0 Unknown exception 00000000F4A0 00000040F4A0 0 H:mm:ss 00000000F4A8 00000040F4A8 0 dddd, MMMM dd, yyyy 00000000F4BC 00000040F4BC 0 M/d/yy 00000000F4CC 00000040F4CC 0 December 00000000F4D8 00000040F4D8 0 November 00000000F4E4 00000040F4E4 0 October File pos Mem pos ID Text ======== ======= == ==== 00000000F4EC 00000040F4EC 0 September 00000000F4F8 00000040F4F8 0 August 00000000F510 00000040F510 0 April 00000000F518 00000040F518 0 March 00000000F520 00000040F520 0 February 00000000F52C 00000040F52C 0 January 00000000F564 00000040F564 0 Saturday 00000000F570 00000040F570 0 Friday 00000000F578 00000040F578 0 Thursday 00000000F584 00000040F584 0 Wednesday 00000000F590 00000040F590 0 Tuesday 00000000F598 00000040F598 0 Monday 00000000F5A0 00000040F5A0 0 Sunday 00000000F661 00000040F661 0 (8PX 00000000F669 00000040F669 0 700WP 00000000F681 00000040F681 0 ppxxxx 00000000F6AC 00000040F6AC 0 (null) 00000000F6CE 00000040F6CE 0 GAIsProcessorFeaturePresent 00000000F6EC 00000040F6EC 0 KERNEL32 00000000F6F8 00000040F6F8 0 e+000 00000000F700 00000040F700 0 runtime error 00000000F714 00000040F714 0 TLOSS error 00000000F724 00000040F724 0 SING error 00000000F734 00000040F734 0 DOMAIN error 00000000F744 00000040F744 0 R6028 00000000F74B 00000040F74B 0 - unable to initialize heap 00000000F76C 00000040F76C 0 R6027 00000000F773 00000040F773 0 - not enough space for lowio initialization 00000000F7A4 00000040F7A4 0 R6026 00000000F7AB 00000040F7AB 0 - not enough space for stdio initialization 00000000F7DC 00000040F7DC 0 R6025 00000000F7E3 00000040F7E3 0 - pure virtual function call 00000000F804 00000040F804 0 R6024 00000000F80B 00000040F80B 0 - not enough space for _onexit/atexit table 00000000F83C 00000040F83C 0 R6019 00000000F843 00000040F843 0 - unable to open console device 00000000F868 00000040F868 0 R6018 00000000F86F 00000040F86F 0 - unexpected heap error 00000000F88C 00000040F88C 0 R6017 00000000F893 00000040F893 0 - unexpected multithread lock error 00000000F8BC 00000040F8BC 0 R6016 00000000F8C3 00000040F8C3 0 - not enough space for thread data 00000000F8EA 00000040F8EA 0 abnormal program termination 00000000F90C 00000040F90C 0 R6009 00000000F913 00000040F913 0 - not enough space for environment 00000000F938 00000040F938 0 R6008 00000000F93F 00000040F93F 0 - not enough space for arguments 00000000F964 00000040F964 0 R6002 00000000F96B 00000040F96B 0 - floating point not loaded 00000000F98C 00000040F98C 0 Microsoft Visual C++ Runtime Library 00000000F9B8 00000040F9B8 0 Runtime Error! 00000000F9C8 00000040F9C8 0 Program: 00000000F9D8 00000040F9D8 0 <program name unknown> 00000000F9FC 00000040F9FC 0 SunMonTueWedThuFriSat 00000000FA14 00000040FA14 0 JanFebMarAprMayJunJulAugSepOctNovDec 00000000FA3C 00000040FA3C 0 GetLastActivePopup 00000000FA50 00000040FA50 0 GetActiveWindow 00000000FA60 00000040FA60 0 MessageBoxA 00000000FA6C 00000040FA6C 0 1#QNAN 00000000FA74 00000040FA74 0 1#INF File pos Mem pos ID Text ======== ======= == ==== 00000000FA7C 00000040FA7C 0 1#IND 00000000FA84 00000040FA84 0 1#SNAN 000000010CD6 000000410CD6 0 CreateDirectoryA 000000010CEA 000000410CEA 0 GetFileAttributesA 000000010D00 000000410D00 0 CloseHandle 000000010D0E 000000410D0E 0 ReadFile 000000010D1A 000000410D1A 0 GetFileSize 000000010D28 000000410D28 0 CreateFileA 000000010D36 000000410D36 0 WriteFile 000000010D42 000000410D42 0 SetFilePointer 000000010D54 000000410D54 0 LocalFree 000000010D60 000000410D60 0 LocalAlloc 000000010D6E 000000410D6E 0 SizeofResource 000000010D80 000000410D80 0 LockResource 000000010D90 000000410D90 0 LoadResource 000000010DA0 000000410DA0 0 FindResourceA 000000010DB0 000000410DB0 0 GetModuleHandleA 000000010DC4 000000410DC4 0 GetStdHandle 000000010DD4 000000410DD4 0 GetLastError 000000010DE4 000000410DE4 0 GetTickCount 000000010DF4 000000410DF4 0 GetModuleFileNameA 000000010E0A 000000410E0A 0 Sleep 000000010E12 000000410E12 0 ResumeThread 000000010E22 000000410E22 0 VirtualFreeEx 000000010E32 000000410E32 0 SetThreadContext 000000010E46 000000410E46 0 LoadLibraryA 000000010E56 000000410E56 0 WriteProcessMemory 000000010E6C 000000410E6C 0 GetProcAddress 000000010E7E 000000410E7E 0 VirtualAllocEx 000000010E90 000000410E90 0 GetThreadContext 000000010EA4 000000410EA4 0 SuspendThread 000000010EB4 000000410EB4 0 OpenThread 000000010EC2 000000410EC2 0 Thread32Next 000000010ED2 000000410ED2 0 Thread32First 000000010EE2 000000410EE2 0 CreateToolhelp32Snapshot 000000010EFE 000000410EFE 0 OpenProcess 000000010F0C 000000410F0C 0 GetCurrentProcess 000000010F20 000000410F20 0 Process32Next 000000010F30 000000410F30 0 Process32First 000000010F40 000000410F40 0 KERNEL32.dll 000000010F4E 000000410F4E 0 USER32.dll 000000010F5C 000000410F5C 0 FreeSid 000000010F66 000000410F66 0 SetFileSecurityA 000000010F7A 000000410F7A 0 SetSecurityDescriptorDacl 000000010F96 000000410F96 0 InitializeSecurityDescriptor 000000010FB6 000000410FB6 0 SetEntriesInAclA 000000010FCA 000000410FCA 0 AllocateAndInitializeSid 000000010FE6 000000410FE6 0 AdjustTokenPrivileges 000000010FFE 000000410FFE 0 OpenProcessToken 000000011010 000000411010 0 ADVAPI32.dll 000000011020 000000411020 0 PathAppendA 00000001102C 00000041102C 0 SHLWAPI.dll 000000011038 000000411038 0 PSAPI.DLL 000000011044 000000411044 0 MultiByteToWideChar 00000001105A 00000041105A 0 WideCharToMultiByte 000000011070 000000411070 0 RtlUnwind 00000001107C 00000041107C 0 RaiseException 00000001108E 00000041108E 0 HeapReAlloc 00000001109C 00000041109C 0 HeapAlloc 0000000110A8 0000004110A8 0 HeapFree File pos Mem pos ID Text ======== ======= == ==== 0000000110B4 0000004110B4 0 ExitProcess 0000000110C2 0000004110C2 0 TerminateProcess 0000000110D6 0000004110D6 0 GetCommandLineA 0000000110E8 0000004110E8 0 GetVersion 0000000110F6 0000004110F6 0 LCMapStringA 000000011106 000000411106 0 LCMapStringW 000000011116 000000411116 0 GetCPInfo 000000011122 000000411122 0 HeapSize 00000001112E 00000041112E 0 SetUnhandledExceptionFilter 00000001114C 00000041114C 0 HeapDestroy 00000001115A 00000041115A 0 HeapCreate 000000011168 000000411168 0 VirtualFree 000000011176 000000411176 0 VirtualAlloc 000000011186 000000411186 0 IsBadWritePtr 000000011196 000000411196 0 SetHandleCount 0000000111A8 0000004111A8 0 GetFileType 0000000111B6 0000004111B6 0 GetStartupInfoA 0000000111C8 0000004111C8 0 UnhandledExceptionFilter 0000000111E4 0000004111E4 0 FreeEnvironmentStringsA 0000000111FE 0000004111FE 0 FreeEnvironmentStringsW 000000011218 000000411218 0 GetEnvironmentStrings 000000011230 000000411230 0 GetEnvironmentStringsW 00000001124A 00000041124A 0 FlushFileBuffers 00000001125E 00000041125E 0 GetStringTypeA 000000011270 000000411270 0 GetStringTypeW 000000011282 000000411282 0 IsBadReadPtr 000000011292 000000411292 0 IsBadCodePtr 0000000112A2 0000004112A2 0 SetStdHandle 0000000112B2 0000004112B2 0 GetACP 0000000112BC 0000004112BC 0 GetOEMCP 0000000112C8 0000004112C8 0 SetEndOfFile 0000000120F8 0000004120F8 0 .?AVException@@ 000000012110 000000412110 0 .?AVexception@@ 000000012128 000000412128 0 .?AVArgumentOutOfRangeException@@ 00000001214C 00000041214C 0 no processes found. Exiting. 00000001216C 00000041216C 0 Founded %d precesses. 000000012184 000000412184 0 atmapp.exe 00000001219C 00000041219C 0 c:\atm\1 0000000121A8 0000004121A8 0 lib_%s 0000000121B8 0000004121B8 0 .?AVbad_exception@std@@ 0000000121D0 0000004121D0 0 bad exception 00000001220C 00000041220C 0 LoadLibraryA 00000001221C 00000041221C 0 [-] Error: Couldn't get thread handle 000000012244 000000412244 0 kernel32.dll 000000012254 000000412254 0 user32.dll 000000012268 000000412268 0 .?AVlogic_error@std@@ 000000012288 000000412288 0 .?AVlength_error@std@@ 0000000122A8 0000004122A8 0 .?AVout_of_range@std@@ 0000000122D0 0000004122D0 0 .?AVios_base@std@@ 0000000122F0 0000004122F0 0 .?AV?$basic_ios@DU?$char_traits@D@std@@@std@@ 000000012328 000000412328 0 .?AV?$basic_istream@DU?$char_traits@D@std@@@std@@ 000000012368 000000412368 0 .?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@ 0000000123A8 0000004123A8 0 .?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@ 0000000123E8 0000004123E8 0 .?AV?$basic_filebuf@DU?$char_traits@D@std@@@std@@ 000000012428 000000412428 0 .?AV?$basic_ios@GU?$char_traits@G@std@@@std@@ 000000012460 000000412460 0 .?AV?$basic_istream@GU?$char_traits@G@std@@@std@@ 0000000124A0 0000004124A0 0 .?AV?$basic_ostream@GU?$char_traits@G@std@@@std@@ 0000000124E0 0000004124E0 0 .?AV?$basic_filebuf@GU?$char_traits@G@std@@@std@@ 000000012520 000000412520 0 .?AV?$basic_streambuf@GU?$char_traits@G@std@@@std@@ 000000012560 000000412560 0 .?AVruntime_error@std@@ File pos Mem pos ID Text ======== ======= == ==== 000000012580 000000412580 0 .?AVfailure@ios_base@std@@ 0000000125A8 0000004125A8 0 .?AVfacet@locale@std@@ 0000000125C8 0000004125C8 0 .?AV_Locimp@locale@std@@ 000000012600 000000412600 0 .?AVtype_info@@ 0000000133EE 0000004133EE 0 z?aUY 000000013430 000000413430 0 zc%C1 000000013483 000000413483 0 -64OS 0000000140AD 0000004160AD 0 !This program cannot be run in DOS mode. 000000014250 000000416250 0 .text 000000014278 000000416278 0 .rdata 00000001429F 00000041629F 0 @.data 0000000142C8 0000004162C8 0 .reloc 000000015C19 000000417C19 0 L$(SUV 000000015C20 000000417C20 0 D$8W3 000000015C55 000000417C55 0 D$HPQVU 000000016129 000000418129 0 D$<SUVW 000000016894 000000418894 0 d$hPUQ 000000016CA3 000000418CA3 0 L$(QV 000000016CD6 000000418CD6 0 D$ VP 000000016D92 000000418D92 0 D$$UP 000000016FDB 000000418FDB 0 l$ VW 00000001721B 00000041921B 0 l$,VW 000000017349 000000419349 0 L$$SUV 000000017350 000000419350 0 D$4WPQ 00000001737F 00000041937F 0 D$DPQVS 000000017880 000000419880 0 D$@_][ 000000017AA9 000000419AA9 0 T$(PR 000000017C19 000000419C19 0 D$$SUVW 000000017E96 000000419E96 0 d}9SV 000000017FDC 000000419FDC 0 L$<QR 0000000180A9 00000041A0A9 0 L$<Qj 000000018137 00000041A137 0 VWhd" 0000000184C7 00000041A4C7 0 D$,SP 00000001856A 00000041A56A 0 L$8QR 0000000185D2 00000041A5D2 0 $SUVW 000000018804 00000041A804 0 L$ hP 0000000188C5 00000041A8C5 0 QSUVW 000000018B79 00000041AB79 0 L$$SUV 000000018B80 00000041AB80 0 D$4WPQ 000000018BAF 00000041ABAF 0 D$DPQVS 000000018DA9 00000041ADA9 0 L$$SUV 000000018DB0 00000041ADB0 0 D$4WPQ 000000018DDF 00000041ADDF 0 D$DPQVS 000000018ED9 00000041AED9 0 L$$SUV 000000018EE0 00000041AEE0 0 D$4WPQ 000000018F0F 00000041AF0F 0 D$DPQVS 00000001910C 00000041B10C 0 L$ QW 00000001918F 00000041B18F 0 U4RQU 00000001961C 00000041B61C 0 SUVW3 000000019658 00000041B658 0 L$$Qj 00000001993C 00000041B93C 0 IQhH$ 00000001998B 00000041B98B 0 IQhD$ 0000000199DA 00000041B9DA 0 IQh@$ 000000019A29 00000041BA29 0 IQh<$ 000000019A78 00000041BA78 0 IQh8$ 000000019AC7 00000041BAC7 0 IQh4$ 000000019B16 00000041BB16 0 IQh0$ 000000019B65 00000041BB65 0 IQh,$ 000000019BB1 00000041BBB1 0 IQh($ 000000019C28 00000041BC28 0 SUVW3 File pos Mem pos ID Text ======== ======= == ==== 000000019D59 00000041BD59 0 D$|VW3 000000019D99 00000041BD99 0 D$@hX$ 000000019E7E 00000041BE7E 0 |$(t- 000000019EE9 00000041BEE9 0 D$LSUV3 00000001A152 00000041C152 0 L$$PQ 00000001A249 00000041C249 0 D$8SUV3 00000001A2B8 00000041C2B8 0 \$<QSR 00000001A2D7 00000041C2D7 0 T$$QPR 00000001A429 00000041C429 0 D$8SUV3 00000001A49F 00000041C49F 0 \$<QRV 00000001A4BB 00000041C4BB 0 T$$PSR 00000001A9FB 00000041C9FB 0 SUVW3 00000001AA9C 00000041CA9C 0 L$0RVW 00000001AAC9 00000041CAC9 0 L$PQP 00000001ABCA 00000041CBCA 0 D$PPW 00000001ADA5 00000041CDA5 0 |$ QPW 00000001AE39 00000041CE39 0 D$8UVWj 00000001AED4 00000041CED4 0 L$HQP 00000001B167 00000041D167 0 ,SUVW 00000001B183 00000041D183 0 l$Dt# 00000001B23D 00000041D23D 0 d$(Ph 00000001B517 00000041D517 0 @SUVW 00000001B6C5 00000041D6C5 0 D$X VP 00000001BA0C 00000041DA0C 0 t$hWj 00000001BA9E 00000041DA9E 0 IQhP$ 00000001BB53 00000041DB53 0 D$ PQ 00000001C2BA 00000041E2BA 0 T$$QWVR 00000001C2FC 00000041E2FC 0 L$$PWVQ 00000001C343 00000041E343 0 D$,VP 00000001C9AA 00000041E9AA 0 T$$QWVR 00000001C9EC 00000041E9EC 0 L$$PWVQ 00000001CA33 00000041EA33 0 D$,VP 00000001E067 000000420067 0 0SUVW 00000001E09C 00000042009C 0 D$ h ' 00000001E4D4 0000004204D4 0 d$8Ph8' 00000001E4FD 0000004204FD 0 t$(to 00000001EAC8 000000420AC8 0 SUVW3 00000001EBA1 000000420BA1 0 |$0t1 00000001EBD4 000000420BD4 0 \$$hh! 00000001F1E8 0000004211E8 0 QRh ( 00000001F27D 00000042127D 0 SVh4( 000000021F48 000000423F48 0 t WVS 000000021F75 000000423F75 0 u7WPS 000000021F86 000000423F86 0 u&WVS 000000024D3E 000000426D3E 0 CloseHandle 000000024D4C 000000426D4C 0 ReadFile 000000024D58 000000426D58 0 GetFileSize 000000024D66 000000426D66 0 CreateFileA 000000024D74 000000426D74 0 WriteFile 000000024D80 000000426D80 0 SetFilePointer 000000024D92 000000426D92 0 GetLocalTime 000000024DA2 000000426DA2 0 GetModuleFileNameA 000000024DB8 000000426DB8 0 DeleteFileA 000000024DC6 000000426DC6 0 VirtualQuery 000000024DD6 000000426DD6 0 CreateThread 000000024DE6 000000426DE6 0 TerminateThread 000000024DF8 000000426DF8 0 Sleep 000000024E00 000000426E00 0 SuspendThread 000000024E10 000000426E10 0 ResumeThread 000000024E20 000000426E20 0 GetProcAddress File pos Mem pos ID Text ======== ======= == ==== 000000024E32 000000426E32 0 LoadLibraryA 000000024E42 000000426E42 0 GetModuleHandleA 000000024E56 000000426E56 0 VirtualFree 000000024E64 000000426E64 0 VirtualAlloc 000000024E74 000000426E74 0 FindNextFileA 000000024E84 000000426E84 0 FindFirstFileA 000000024E96 000000426E96 0 WaitForSingleObject 000000024EAC 000000426EAC 0 VirtualProtect 000000024EBC 000000426EBC 0 KERNEL32.dll 000000024ECC 000000426ECC 0 MessageBoxA 000000024ED8 000000426ED8 0 USER32.dll 000000024EE4 000000426EE4 0 ADVAPI32.dll 000000024EF4 000000426EF4 0 ??0Init@ios_base@std@@QAE@XZ 000000024F14 000000426F14 0 ??1Init@ios_base@std@@QAE@XZ 000000024F34 000000426F34 0 ??0_Winit@std@@QAE@XZ 000000024F4C 000000426F4C 0 ??1_Winit@std@@QAE@XZ 000000024F64 000000426F64 0 ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ 000000024FAE 000000426FAE 0 ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z 00000002500A 00000042700A 0 ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB 000000025066 000000427066 0 ?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z 0000000250B8 0000004270B8 0 ?_Xlen@std@@YAXXZ 0000000250CC 0000004270CC 0 ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z 000000025120 000000427120 0 ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB 00000002516A 00000042716A 0 ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z 0000000251BA 0000004271BA 0 ?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z 000000025208 000000427208 0 ?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ 000000025256 000000427256 0 ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z 0000000252AE 0000004272AE 0 ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z 00000002530A 00000042730A 0 ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z 000000025362 000000427362 0 ??0bad_exception@std@@QAE@ABV01@@Z 000000025388 000000427388 0 ??1bad_exception@std@@UAE@XZ 0000000253A8 0000004273A8 0 ??0bad_exception@std@@QAE@PBD@Z 0000000253CA 0000004273CA 0 ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z 000000025426 000000427426 0 ?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z 000000025474 000000427474 0 ?_Xran@std@@YAXXZ 000000025488 000000427488 0 ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z 0000000254DE 0000004274DE 0 ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z 000000025530 000000427530 0 ?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z 000000025584 000000427584 0 ?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z 0000000255E2 0000004275E2 0 ?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z 000000025640 000000427640 0 ?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z 000000025692 000000427692 0 ??1_Lockit@std@@QAE@XZ 0000000256AC 0000004276AC 0 ??0_Lockit@std@@QAE@XZ 0000000256C4 0000004276C4 0 MSVCP60.dll 0000000256D2 0000004276D2 0 PathFileExistsA 0000000256E4 0000004276E4 0 PathAppendA 0000000256F0 0000004276F0 0 SHLWAPI.dll 0000000256FE 0000004276FE 0 __CxxFrameHandler 00000002571A 00000042771A 0 memmove 000000025724 000000427724 0 ??0exception@@QAE@ABV0@@Z 000000025748 000000427748 0 realloc 000000025752 000000427752 0 _CxxThrowException 000000025768 000000427768 0 ?what@exception@@UBEPBDXZ 000000025784 000000427784 0 ??1exception@@UAE@XZ 00000002579C 00000042779C 0 _vsnprintf 0000000257AA 0000004277AA 0 ??2@YAPAXI@Z 0000000257BA 0000004277BA 0 fclose 0000000257C4 0000004277C4 0 vfprintf 0000000257D0 0000004277D0 0 fopen 0000000257D8 0000004277D8 0 ??0exception@@QAE@XZ File pos Mem pos ID Text ======== ======= == ==== 0000000257F0 0000004277F0 0 fputs 0000000257F8 0000004277F8 0 fread 000000025808 000000427808 0 _ftol 000000025810 000000427810 0 memcpy 00000002581A 00000042781A 0 memset 000000025824 000000427824 0 __dllonexit 000000025832 000000427832 0 _onexit 00000002583A 00000042783A 0 MSVCRT.dll 000000025848 000000427848 0 ??1type_info@@UAE@XZ 000000025860 000000427860 0 _initterm 00000002586C 00000042786C 0 malloc 000000025876 000000427876 0 _adjust_fdiv 000000025886 000000427886 0 HeapCreate 000000025894 000000427894 0 InterlockedCompareExchange 0000000258B2 0000004278B2 0 InterlockedExchange 0000000258C8 0000004278C8 0 HeapDestroy 0000000258D6 0000004278D6 0 HeapFree 0000000258E2 0000004278E2 0 OpenThread 0000000258F0 0000004278F0 0 SetThreadContext 000000025904 000000427904 0 GetThreadContext 000000025918 000000427918 0 Thread32Next 000000025928 000000427928 0 HeapReAlloc 000000025936 000000427936 0 HeapAlloc 000000025942 000000427942 0 GetCurrentThreadId 000000025958 000000427958 0 GetCurrentProcessId 00000002596E 00000042796E 0 Thread32First 00000002597E 00000042797E 0 CreateToolhelp32Snapshot 00000002599A 00000042799A 0 FlushInstructionCache 0000000259B2 0000004279B2 0 GetCurrentProcess 000000025A02 000000427A02 0 Library.dll 000000025A0E 000000427A0E 0 iinit 0000000260B0 0000004280B0 0 .?AVexception@@ 0000000260C8 0000004280C8 0 .?AVException@@ 0000000260E0 0000004280E0 0 .?AVArgumentOutOfRangeException@@ 000000026118 000000428118 0 .?AVbad_exception@std@@ 000000026130 000000428130 0 bad exception 000000026150 000000428150 0 .?AVIOException@@ 000000026170 000000428170 0 .?AVFileNotFoundException@@ 000000026190 000000428190 0 Logger is now on new TraceLevel: %s 0000000261B4 0000004281B4 0 UNKNOWN 0000000261C0 0000004281C0 0 TRACE 0000000261C8 0000004281C8 0 NOTICE 0000000261D0 0000004281D0 0 WARNING 0000000261D8 0000004281D8 0 ERROR 0000000261E0 0000004281E0 0 FATAL 0000000261E8 0000004281E8 0 [%s]: %s 000000026200 000000428200 0 .?AVThreadException@@ 000000026218 000000428218 0 Can't resume thread 00000002622C 00000042822C 0 MessageBoxTimeoutA 000000026240 000000428240 0 user32.dll 00000002624C 00000042824C 0 [%04d/%02d/%02d %02d:%02d:%02d.%03d] %s 000000026274 000000428274 0 determining pin pad 000000026290 000000428290 0 .?AVXfsException@@ 0000000262A4 0000004282A4 0 Settings cash units info END. 0000000262C4 0000004282C4 0 Settings cash units info. 0000000262E0 0000004282E0 0 ca5h units info received 0000000262FC 0000004282FC 0 try to set %d 00000002630C 00000042830C 0 n0 p1npad 000000026320 000000428320 0 .?AVXfsGetInfoException@@ 00000002633C 00000042833C 0 Xfs::QueryCashUnitsFromAtm4 File pos Mem pos ID Text ======== ======= == ==== 000000026358 000000428358 0 Xfs::QueryCashUnitsFromAtm3 000000026374 000000428374 0 Xfs::QueryCashUnitsFromAtm2 000000026390 000000428390 0 LFS found info about <%d> ca5h un1t5 0000000263C0 0000004283C0 0 .?AVXfsDispenseException@@ 0000000263E8 0000004283E8 0 .?AVHookLibException@@ 000000026400 000000428400 0 WFMFreeBuffer 000000026410 000000428410 0 WFMAllocateMore 000000026420 000000428420 0 WFMAllocateBuffer 000000026434 000000428434 0 WFSExecute 000000026440 000000428440 0 WFSFreeResult 000000026450 000000428450 0 WFSStartUp 00000002645C 00000042845C 0 WFSGetInfo 000000026468 000000428468 0 no xf5 module found 00000002647C 00000042847C 0 msxfs.dll 0000000264B8 0000004284B8 0 |INDEX:%d|Values:%d|Money count:%d| 0000000264E0 0000004284E0 0 Founded < %d > commands 0000000264FC 0000004284FC 0 Command file deleted successfully 000000026520 000000428520 0 Reading command from a %s 00000002653C 00000042853C 0 %s\%s 000000026544 000000428544 0 FileCommandProvider::ReadXfsCommandFromFile -> 000000026580 000000428580 0 .?AVArgumentException@@ 000000026598 000000428598 0 exception 0000000265A8 0000004285A8 0 CommandProcessor created 0000000265C4 0000004285C4 0 DEFAULT command processed 0000000265E0 0000004285E0 0 NONE command processed 0000000265F8 0000004285F8 0 System error! 000000026608 000000428608 0 Dispense failed. CODE:%d 000000026624 000000428624 0 Multi Dispensing start 00000002663C 00000042863C 0 Dispense failed. Unknown reason. 000000026660 000000428660 0 Dispense failed. %d 000000026674 000000428674 0 Manual Dispensing 000000026688 000000428688 0 Display Balance -> exception, code:%d 0000000266B0 0000004286B0 0 Display Balance 1try -> exception, code:%d 0000000266DC 0000004286DC 0 CommandProcessor::ProcessCommand -> 000000026700 000000428700 0 SetMaximumDispenseSize:%d 00000002671C 00000042871C 0 NULL command processed 000000026734 000000428734 0 ICommandProcessor::ProcessCommand -> start method 000000026768 000000428768 0 Processing command #%d 000000026780 000000428780 0 Received 00000002678D 00000042878D 0 commands 000000026798 000000428798 0 exception cauch: %d 0000000267AC 0000004287AC 0 Exiting 0000000267B4 0000004287B4 0 Pausing 0000000267BC 0000004287BC 0 trying to dispense 0000000267D0 0000004287D0 0 R2CommandProcessor::ProcessGetRealBalance()1 000000026800 000000428800 0 cur disp service is |%d| 00000002681C 00000042881C 0 try toi set %d 00000002682C 00000042882C 0 ___log.txt 000000026838 000000428838 0 Deleting resources 000000026858 000000428858 0 .?AVXfsLoaderException@@ 000000026874 000000428874 0 uncatched 000000026880 000000428880 0 %s:%d 000000026888 000000428888 0 c:\atm\1 000000026894 000000428894 0 void CreateAllResources() 0000000268B0 0000004288B0 0 Xfs init error 0000000268C0 0000004288C0 0 Critical system error! 0000000268D8 0000004288D8 0 resources created 0000000268EC 0000004288EC 0 MH_UNKNOWN 0000000268F8 0000004288F8 0 MH_OK 000000026900 000000428900 0 MH_ERROR_ALREADY_INITIALIZED File pos Mem pos ID Text ======== ======= == ==== 000000026920 000000428920 0 MH_ERROR_NOT_INITIALIZED 00000002693C 00000042893C 0 MH_ERROR_ALREADY_CREATED 000000026958 000000428958 0 MH_ERROR_NOT_CREATED 000000026970 000000428970 0 MH_ERROR_ENABLED 000000026984 000000428984 0 MH_ERROR_DISABLED 000000026998 000000428998 0 MH_ERROR_NOT_EXECUTABLE 0000000269B0 0000004289B0 0 MH_ERROR_UNSUPPORTED_FUNCTION 0000000269D0 0000004289D0 0 MH_ERROR_MEMORY_ALLOC 0000000269E8 0000004289E8 0 MH_ERROR_MEMORY_PROTECT 000000026A00 000000428A00 0 MH_ERROR_MODULE_NOT_FOUND 000000026A1C 000000428A1C 0 MH_ERROR_FUNCTION_NOT_FOUND 000000026A38 000000428A38 0 (unknown) 000000026A92 000000428A92 0 YYYYY 000000026A9E 000000428A9E 0 YYYYYYYYYYYY 000000026AAC 000000428AAC 0 }YPPPPYYYYa 000000026AC2 000000428AC2 0 YYYYYYYYYYY 000000026B74 000000428B74 0 JJJJKRJJJJOLJJJJJJJJUE@JJJEYMFJ]JJJJJJJJJJJJJJacgNJJkmJJEmJJDEJJ 000000026C58 000000428C58 0 .?AVtype_info@@ 00000002706B 00000042906B 0 0!01070Q0W0a0q0w0 000000027081 000000429081 0 1-1K1]1 00000002708D 00000042908D 0 2,2i2 000000027099 000000429099 0 363B3 0000000270B5 0000004290B5 0 :";V;q; 0000000270D3 0000004290D3 0 =(=1=I=R=u={= 0000000270E7 0000004290E7 0 =">(>Z>r> 0000000270FF 0000004290FF 0 ?!?1?7?Q?W?a?q?w? 000000027127 000000429127 0 0;0M0f0m0{0 000000027149 000000429149 0 3*313I3h3 000000027159 000000429159 0 3#4m4 00000002716D 00000042916D 0 636B6f6z6 000000027183 000000429183 0 7*7V7g7 0000000271A5 0000004291A5 0 9,::: 0000000271BB 0000004291BB 0 >.>3>A> 0000000271C3 0000004291C3 0 >m>s> 0000000271D5 0000004291D5 0 ?+?c? 0000000271EF 0000004291EF 0 0N0_0 0000000271FB 0000004291FB 0 1%111=1J1Q1W1 00000002721F 00000042921F 0 2(3?3b3 000000027229 000000429229 0 4(4_4 00000002723B 00000042923B 0 435T5}5 00000002726B 00000042926B 0 8L8{8 000000027277 000000429277 0 979K9i9r9 00000002728F 00000042928F 0 9":c: 0000000272A5 0000004292A5 0 :3;O;n; 0000000272AD 0000004292AD 0 ;C<V< 0000000272B7 0000004292B7 0 = =%=6= 0000000272C3 0000004292C3 0 >e>m> 0000000272E7 0000004292E7 0 1+2v2 000000027303 000000429303 0 4&4J4[4u4 00000002730D 00000042930D 0 4K5]5 000000027313 000000429313 0 5@7M7 000000027323 000000429323 0 8+8=8S8n8 00000002732D 00000042932D 0 9'91979 000000027341 000000429341 0 ;X;o; 000000027349 000000429349 0 ;9<K< 000000027381 000000429381 0 7*7/777=7D7J7Q7W7 000000027393 000000429393 0 7d7k7q7x7~7 0000000273A5 0000004293A5 0 8 8%898q8y8 0000000273C3 0000004293C3 0 9.969;9a9f9}9 0000000273E3 0000004293E3 0 :#:(:N:S:j:r:w: File pos Mem pos ID Text ======== ======= == ==== 000000027405 000000429405 0 ;8;=;T;\;a; 000000027417 000000429417 0 <!<s< 000000027425 000000429425 0 ===S=f=k=z= 000000027455 000000429455 0 0<0T0 000000027463 000000429463 0 1)1/1@1Y1 00000002746F 00000042946F 0 2 2C2d2j2 000000027487 000000429487 0 3/353B3 000000027493 000000429493 0 4#4(4K4Q4g4m4 0000000274B9 0000004294B9 0 6 606<6 0000000274C9 0000004294C9 0 737F7t7 0000000274DF 0000004294DF 0 8?8D8T8Z8j8 0000000274F7 0000004294F7 0 :/:5:D:W:d:p: 000000027507 000000429507 0 ;';N;q; 000000027521 000000429521 0 >b>o>{> 00000002753B 00000042953B 0 ?#?)?;? 000000027551 000000429551 0 011P1 000000027557 000000429557 0 1#2)2:2?2P2 000000027567 000000429567 0 3$3F3U3y3 00000002757D 00000042957D 0 4/4;4e4v4 00000002758B 00000042958B 0 525}5 00000002759B 00000042959B 0 7%7@7e7p7 0000000275B3 0000004295B3 0 8W8\8c8k8z8 0000000275CD 0000004295CD 0 9#9+9:9H9 0000000275DB 0000004295DB 0 9$:):A:I: 0000000275EF 0000004295EF 0 ;)<V< 000000027603 000000429603 0 =@=N=l= 000000027613 000000429613 0 =%>*>H>P>\>e>k> 00000002762B 00000042962B 0 ? ?,?5?;?i? 000000027645 000000429645 0 0#0F0U0g0 00000002764F 00000042964F 0 0(1C1f1u1 00000002765D 00000042965D 0 2J233_3p3 000000027669 000000429669 0 3[4v4 00000002768B 00000042968B 0 8=8c8 00000002769B 00000042969B 0 9:9#:O: 0000000276A7 0000004296A7 0 :K;f;|; 0000000276B3 0000004296B3 0 ;=<v< 0000000276C9 0000004296C9 0 >-?S?q?z? 0000000276E9 0000004296E9 0 0]1m1 0000000276F3 0000004296F3 0 1[2k2 000000027711 000000429711 0 5%555 00000002771B 00000042971B 0 6%656j6 000000027737 000000429737 0 738K8]8 000000027747 000000429747 0 9$9A9 000000027759 000000429759 0 :A;q;z; 000000027769 000000429769 0 <F<d< 000000027773 000000429773 0 <B=P= 000000027781 000000429781 0 >$>5>I> 0000000277BC 0000004297BC 0 @0Z0w0 0000000277D1 0000004297D1 0 3'4y4(5,5054585<5@5D5H5L5P5T5X5\5 0000000277FF 0000004297FF 0 626V6l6 000000027817 000000429817 0 868T8 00000002781F 00000042981F 0 969f9 000000027827 000000429827 0 9$:S: 000000027839 000000429839 0 ;-;x;}; 000000027843 000000429843 0 ;C<x< 00000002784B 00000042984B 0 <"=1=Q=q= 000000027865 000000429865 0 >7?q? 00000002788B 00000042988B 0 1%1V1a1u1 0000000278A9 0000004298A9 0 2 2.2<2]2b2{2 0000000278CF 0000004298CF 0 4'4k4 File pos Mem pos ID Text ======== ======= == ==== 0000000278E3 0000004298E3 0 5#5u5 000000027907 000000429907 0 7/7@7T7Z7l7r7 00000002791B 00000042991B 0 828A8F8L8 00000002793B 00000042993B 0 9"9,969@9 000000027953 000000429953 0 ;%;_;><f=u= 000000027984 000000429984 0 A0%222R2[2d2p2w2|2 0000000279C5 0000004299C5 0 4&4.454A4J4Q4a4h4q4 0000000279EF 0000004299EF 0 6 7-7 0000000279F7 0000004299F7 0 7H8M8T8[8b8i8p8w8~8 000000027A3D 000000429A3D 0 9(:3:E: 000000027A5B 000000429A5B 0 294f4 000000027A69 000000429A69 0 697@7 000000027AA7 000000429AA7 0 >">(>3>@>H>V>[> 000000027AB7 000000429AB7 0 >e>p>}> 000000027AC9 000000429AC9 0 >>?Z? 000000027ACF 000000429ACF 0 ?f?l?r? 000000027AEC 000000429AEC 0 0)0E0V0[0u0z0 000000027B05 000000429B05 0 161;1Y1y1 000000027B19 000000429B19 0 292Y2y2 000000027B27 000000429B27 0 2 3%323I3i3 000000027B43 000000429B43 0 4 4)424;4D4M4V4[4u4 000000027B63 000000429B63 0 595U5 000000027B69 000000429B69 0 5o5t5 000000027B95 000000429B95 0 7H7M7 000000027BA9 000000429BA9 0 8#858:8U8Z8u8~8 000000027BCF 000000429BCF 0 959:9U9Z9u9z9 000000027BE9 000000429BE9 0 91:Y:y: 000000027BF7 000000429BF7 0 : ;w; 000000027C07 000000429C07 0 ;+<8<Q<u<z< 000000027C57 000000429C57 0 2 2$2(2,2024282<2@2D2H2L2P2T2X2\2 000000027C79 000000429C79 0 2d2h2l2p2t2x2|2 000000027CCB 000000429CCB 0 3(3<3L3P3\3p3|3 000000027CF3 000000429CF3 0 4(44484D4L4T4h4t4 000000027D1F 000000429D1F 0 5$505L5T5\5h5 000000027D41 000000429D41 0 6$606L6T6 000000027D5F 000000429D5F 0 7,747@7\7d7x7 000000027D81 000000429D81 0 8 8(8D8 000000027D9D 000000429D9D 0 9$9(9,949<9H9P9l9 000000027DC9 000000429DC9 0 :0:<:@:D:H:T:\:h: 000000027DEB 000000429DEB 0 ;,;4;@;\;d;p; 000000027E11 000000429E11 0 <$<,<8<T<\<d<p< 000000027E39 000000429E39 0 =$=0=L=T=\=d=p= 000000027E5D 000000429E5D 0 >,><>P>d>p> 000000027E7F 000000429E7F 0 ?4?<?H?d?l?t?|? 000000027EB3 000000429EB3 0 0$0,040<0P0\0 000000027EC1 000000429EC1 0 0d0l0t0 000000027EDF 000000429EDF 0 1,181@1\1d1 000000027EFB 000000429EFB 0 2 2<2D2P2l2x2 000000027F17 000000429F17 0 343@3\3h3 000000027F2F 000000429F2F 0 3 4,444D4P4X4l4|4 000000027F4D 000000429F4D 0 5$5,545<5D5T5\5d5t5 000000027F75 000000429F75 0 646P6\6d6p6x6 000000027F93 000000429F93 0 7$70787T7p7|7 000000027FB9 000000429FB9 0 8 8(8D8 000000027FDB 000000429FDB 0 9$9,949D9P9l9t9|9 000000027FF7 000000429FF7 0 :$:4:D:P:l:t:|: 000000028025 00000042A025 0 0 0$0(0H0 00000000F69C 00000040F69C 0 (null) 00000000004D 00000040004D 0 !This program cannot be run in DOS mode. 0000000001F0 0000004001F0 0 .text File pos Mem pos ID Text ======== ======= == ==== 000000000218 000000400218 0 .rdata 00000000023F 00000040023F 0 @.data 000000000268 000000400268 0 .rsrc 0000000023D3 0000004023D3 0 PSSSSSSSSj 0000000049E9 0000004049E9 0 t/Ht HH 0000000053DA 0000004053DA 0 VWhST@ 00000000570B 00000040570B 0 QWj P 0000000058BD 0000004058BD 0 QQSVWd 000000005B5F 000000405B5F 0 SVWUj 000000005BC8 000000405BC8 0 t.;t$$t( 000000006656 000000406656 0 uRFGHt 000000006700 000000406700 0 tlHt. 0000000067D8 0000004067D8 0 wDVSU 0000000069C0 0000004069C0 0 VC20XC00U 000000007516 000000407516 0 PPPPPPPP 000000007576 000000407576 0 9= :A 00000000757C 00000040757C 0 uFWWj 0000000075A1 0000004075A1 0 "WWSh| 00000000768D 00000040768D 0 tMWWS 000000007AD0 000000407AD0 0 sO;>|C;~ 000000007FC8 000000407FC8 0 QQSVW 0000000080A9 0000004080A9 0 QQSVW 0000000080FF 0000004080FF 0 QQSVW 000000008645 000000408645 0 HHtpHHtl 0000000088FC 0000004088FC 0 Yt f 000000008EBB 000000408EBB 0 btHHt. 000000009B67 000000409B67 0 DSUVWh 00000000A13D 00000040A13D 0 eYt,F 00000000A756 00000040A756 0 ?=t"U 00000000A8AA 00000040A8AA 0 8"uF@ 00000000AA78 00000040AA78 0 SS@SSPVSS 00000000AA9A 00000040AA9A 0 t#SSUP 00000000AAA1 00000040AAA1 0 t$$VSS 00000000AB77 00000040AB77 0 A=(.A 00000000B786 00000040B786 0 PPPPPPPP 00000000BB2D 00000040BB2D 0 B=h0A 00000000BD93 00000040BD93 0 t-Ht!Ht 00000000C276 00000040C276 0 SVWj 00000000C39F 00000040C39F 0 SVWj 00000000C7C2 00000040C7C2 0 Y;5T=A 00000000C9C5 00000040C9C5 0 Wj@Y3 00000000CB98 00000040CB98 0 VWuBhT"A 00000000CD48 00000040CD48 0 FGQPS 00000000CFD4 00000040CFD4 0 +ttHHtd 00000000D012 00000040D012 0 j XO 00000000D258 00000040D258 0 HHtYHHtF 00000000F224 00000040F224 0 string too long 00000000F254 00000040F254 0 invalid string position 00000000F3B8 00000040F3B8 0 ios::eofbit set 00000000F3C8 00000040F3C8 0 ios::failbit set 00000000F3DC 00000040F3DC 0 ios::badbit set 00000000F45C 00000040F45C 0 Unknown exception 00000000F4A0 00000040F4A0 0 H:mm:ss 00000000F4A8 00000040F4A8 0 dddd, MMMM dd, yyyy 00000000F4BC 00000040F4BC 0 M/d/yy 00000000F4CC 00000040F4CC 0 December 00000000F4D8 00000040F4D8 0 November 00000000F4E4 00000040F4E4 0 October 00000000F4EC 00000040F4EC 0 September 00000000F4F8 00000040F4F8 0 August File pos Mem pos ID Text ======== ======= == ==== 00000000F510 00000040F510 0 April 00000000F518 00000040F518 0 March 00000000F520 00000040F520 0 February 00000000F52C 00000040F52C 0 January 00000000F564 00000040F564 0 Saturday 00000000F570 00000040F570 0 Friday 00000000F578 00000040F578 0 Thursday 00000000F584 00000040F584 0 Wednesday 00000000F590 00000040F590 0 Tuesday 00000000F598 00000040F598 0 Monday 00000000F5A0 00000040F5A0 0 Sunday 00000000F661 00000040F661 0 (8PX 00000000F669 00000040F669 0 700WP 00000000F681 00000040F681 0 ppxxxx 00000000F6AC 00000040F6AC 0 (null) 00000000F6CE 00000040F6CE 0 GAIsProcessorFeaturePresent 00000000F6EC 00000040F6EC 0 KERNEL32 00000000F6F8 00000040F6F8 0 e+000 00000000F700 00000040F700 0 runtime error 00000000F714 00000040F714 0 TLOSS error 00000000F724 00000040F724 0 SING error 00000000F734 00000040F734 0 DOMAIN error 00000000F744 00000040F744 0 R6028 00000000F74B 00000040F74B 0 - unable to initialize heap 00000000F76C 00000040F76C 0 R6027 00000000F773 00000040F773 0 - not enough space for lowio initialization 00000000F7A4 00000040F7A4 0 R6026 00000000F7AB 00000040F7AB 0 - not enough space for stdio initialization 00000000F7DC 00000040F7DC 0 R6025 00000000F7E3 00000040F7E3 0 - pure virtual function call 00000000F804 00000040F804 0 R6024 00000000F80B 00000040F80B 0 - not enough space for _onexit/atexit table 00000000F83C 00000040F83C 0 R6019 00000000F843 00000040F843 0 - unable to open console device 00000000F868 00000040F868 0 R6018 00000000F86F 00000040F86F 0 - unexpected heap error 00000000F88C 00000040F88C 0 R6017 00000000F893 00000040F893 0 - unexpected multithread lock error 00000000F8BC 00000040F8BC 0 R6016 00000000F8C3 00000040F8C3 0 - not enough space for thread data 00000000F8EA 00000040F8EA 0 abnormal program termination 00000000F90C 00000040F90C 0 R6009 00000000F913 00000040F913 0 - not enough space for environment 00000000F938 00000040F938 0 R6008 00000000F93F 00000040F93F 0 - not enough space for arguments 00000000F964 00000040F964 0 R6002 00000000F96B 00000040F96B 0 - floating point not loaded 00000000F98C 00000040F98C 0 Microsoft Visual C++ Runtime Library 00000000F9B8 00000040F9B8 0 Runtime Error! 00000000F9C8 00000040F9C8 0 Program: 00000000F9D8 00000040F9D8 0 <program name unknown> 00000000F9FC 00000040F9FC 0 SunMonTueWedThuFriSat 00000000FA14 00000040FA14 0 JanFebMarAprMayJunJulAugSepOctNovDec 00000000FA3C 00000040FA3C 0 GetLastActivePopup 00000000FA50 00000040FA50 0 GetActiveWindow 00000000FA60 00000040FA60 0 MessageBoxA 00000000FA6C 00000040FA6C 0 1#QNAN 00000000FA74 00000040FA74 0 1#INF 00000000FA7C 00000040FA7C 0 1#IND 00000000FA84 00000040FA84 0 1#SNAN File pos Mem pos ID Text ======== ======= == ==== 000000010CD6 000000410CD6 0 CreateDirectoryA 000000010CEA 000000410CEA 0 GetFileAttributesA 000000010D00 000000410D00 0 CloseHandle 000000010D0E 000000410D0E 0 ReadFile 000000010D1A 000000410D1A 0 GetFileSize 000000010D28 000000410D28 0 CreateFileA 000000010D36 000000410D36 0 WriteFile 000000010D42 000000410D42 0 SetFilePointer 000000010D54 000000410D54 0 LocalFree 000000010D60 000000410D60 0 LocalAlloc 000000010D6E 000000410D6E 0 SizeofResource 000000010D80 000000410D80 0 LockResource 000000010D90 000000410D90 0 LoadResource 000000010DA0 000000410DA0 0 FindResourceA 000000010DB0 000000410DB0 0 GetModuleHandleA 000000010DC4 000000410DC4 0 GetStdHandle 000000010DD4 000000410DD4 0 GetLastError 000000010DE4 000000410DE4 0 GetTickCount 000000010DF4 000000410DF4 0 GetModuleFileNameA 000000010E0A 000000410E0A 0 Sleep 000000010E12 000000410E12 0 ResumeThread 000000010E22 000000410E22 0 VirtualFreeEx 000000010E32 000000410E32 0 SetThreadContext 000000010E46 000000410E46 0 LoadLibraryA 000000010E56 000000410E56 0 WriteProcessMemory 000000010E6C 000000410E6C 0 GetProcAddress 000000010E7E 000000410E7E 0 VirtualAllocEx 000000010E90 000000410E90 0 GetThreadContext 000000010EA4 000000410EA4 0 SuspendThread 000000010EB4 000000410EB4 0 OpenThread 000000010EC2 000000410EC2 0 Thread32Next 000000010ED2 000000410ED2 0 Thread32First 000000010EE2 000000410EE2 0 CreateToolhelp32Snapshot 000000010EFE 000000410EFE 0 OpenProcess 000000010F0C 000000410F0C 0 GetCurrentProcess 000000010F20 000000410F20 0 Process32Next 000000010F30 000000410F30 0 Process32First 000000010F40 000000410F40 0 KERNEL32.dll 000000010F4E 000000410F4E 0 USER32.dll 000000010F5C 000000410F5C 0 FreeSid 000000010F66 000000410F66 0 SetFileSecurityA 000000010F7A 000000410F7A 0 SetSecurityDescriptorDacl 000000010F96 000000410F96 0 InitializeSecurityDescriptor 000000010FB6 000000410FB6 0 SetEntriesInAclA 000000010FCA 000000410FCA 0 AllocateAndInitializeSid 000000010FE6 000000410FE6 0 AdjustTokenPrivileges 000000010FFE 000000410FFE 0 OpenProcessToken 000000011010 000000411010 0 ADVAPI32.dll 000000011020 000000411020 0 PathAppendA 00000001102C 00000041102C 0 SHLWAPI.dll 000000011038 000000411038 0 PSAPI.DLL 000000011044 000000411044 0 MultiByteToWideChar 00000001105A 00000041105A 0 WideCharToMultiByte 000000011070 000000411070 0 RtlUnwind 00000001107C 00000041107C 0 RaiseException 00000001108E 00000041108E 0 HeapReAlloc 00000001109C 00000041109C 0 HeapAlloc 0000000110A8 0000004110A8 0 HeapFree 0000000110B4 0000004110B4 0 ExitProcess 0000000110C2 0000004110C2 0 TerminateProcess File pos Mem pos ID Text ======== ======= == ==== 0000000110D6 0000004110D6 0 GetCommandLineA 0000000110E8 0000004110E8 0 GetVersion 0000000110F6 0000004110F6 0 LCMapStringA 000000011106 000000411106 0 LCMapStringW 000000011116 000000411116 0 GetCPInfo 000000011122 000000411122 0 HeapSize 00000001112E 00000041112E 0 SetUnhandledExceptionFilter 00000001114C 00000041114C 0 HeapDestroy 00000001115A 00000041115A 0 HeapCreate 000000011168 000000411168 0 VirtualFree 000000011176 000000411176 0 VirtualAlloc 000000011186 000000411186 0 IsBadWritePtr 000000011196 000000411196 0 SetHandleCount 0000000111A8 0000004111A8 0 GetFileType 0000000111B6 0000004111B6 0 GetStartupInfoA 0000000111C8 0000004111C8 0 UnhandledExceptionFilter 0000000111E4 0000004111E4 0 FreeEnvironmentStringsA 0000000111FE 0000004111FE 0 FreeEnvironmentStringsW 000000011218 000000411218 0 GetEnvironmentStrings 000000011230 000000411230 0 GetEnvironmentStringsW 00000001124A 00000041124A 0 FlushFileBuffers 00000001125E 00000041125E 0 GetStringTypeA 000000011270 000000411270 0 GetStringTypeW 000000011282 000000411282 0 IsBadReadPtr 000000011292 000000411292 0 IsBadCodePtr 0000000112A2 0000004112A2 0 SetStdHandle 0000000112B2 0000004112B2 0 GetACP 0000000112BC 0000004112BC 0 GetOEMCP 0000000112C8 0000004112C8 0 SetEndOfFile 0000000120F8 0000004120F8 0 .?AVException@@ 000000012110 000000412110 0 .?AVexception@@ 000000012128 000000412128 0 .?AVArgumentOutOfRangeException@@ 00000001214C 00000041214C 0 no processes found. Exiting. 00000001216C 00000041216C 0 Founded %d precesses. 000000012184 000000412184 0 atmapp.exe 00000001219C 00000041219C 0 c:\atm\1 0000000121A8 0000004121A8 0 lib_%s 0000000121B8 0000004121B8 0 .?AVbad_exception@std@@ 0000000121D0 0000004121D0 0 bad exception 00000001220C 00000041220C 0 LoadLibraryA 00000001221C 00000041221C 0 [-] Error: Couldn't get thread handle 000000012244 000000412244 0 kernel32.dll 000000012254 000000412254 0 user32.dll 000000012268 000000412268 0 .?AVlogic_error@std@@ 000000012288 000000412288 0 .?AVlength_error@std@@ 0000000122A8 0000004122A8 0 .?AVout_of_range@std@@ 0000000122D0 0000004122D0 0 .?AVios_base@std@@ 0000000122F0 0000004122F0 0 .?AV?$basic_ios@DU?$char_traits@D@std@@@std@@ 000000012328 000000412328 0 .?AV?$basic_istream@DU?$char_traits@D@std@@@std@@ 000000012368 000000412368 0 .?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@ 0000000123A8 0000004123A8 0 .?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@ 0000000123E8 0000004123E8 0 .?AV?$basic_filebuf@DU?$char_traits@D@std@@@std@@ 000000012428 000000412428 0 .?AV?$basic_ios@GU?$char_traits@G@std@@@std@@ 000000012460 000000412460 0 .?AV?$basic_istream@GU?$char_traits@G@std@@@std@@ 0000000124A0 0000004124A0 0 .?AV?$basic_ostream@GU?$char_traits@G@std@@@std@@ 0000000124E0 0000004124E0 0 .?AV?$basic_filebuf@GU?$char_traits@G@std@@@std@@ 000000012520 000000412520 0 .?AV?$basic_streambuf@GU?$char_traits@G@std@@@std@@ 000000012560 000000412560 0 .?AVruntime_error@std@@ 000000012580 000000412580 0 .?AVfailure@ios_base@std@@ 0000000125A8 0000004125A8 0 .?AVfacet@locale@std@@ File pos Mem pos ID Text ======== ======= == ==== 0000000125C8 0000004125C8 0 .?AV_Locimp@locale@std@@ 000000012600 000000412600 0 .?AVtype_info@@ 0000000133EE 0000004133EE 0 z?aUY 000000013430 000000413430 0 zc%C1 000000013483 000000413483 0 -64OS 0000000140AD 0000004160AD 0 !This program cannot be run in DOS mode. 000000014250 000000416250 0 .text 000000014278 000000416278 0 .rdata 00000001429F 00000041629F 0 @.data 0000000142C8 0000004162C8 0 .reloc 000000015C19 000000417C19 0 L$(SUV 000000015C20 000000417C20 0 D$8W3 000000015C55 000000417C55 0 D$HPQVU 000000016129 000000418129 0 D$<SUVW 000000016894 000000418894 0 d$hPUQ 000000016CA3 000000418CA3 0 L$(QV 000000016CD6 000000418CD6 0 D$ VP 000000016D92 000000418D92 0 D$$UP 000000016FDB 000000418FDB 0 l$ VW 00000001721B 00000041921B 0 l$,VW 000000017349 000000419349 0 L$$SUV 000000017350 000000419350 0 D$4WPQ 00000001737F 00000041937F 0 D$DPQVS 000000017880 000000419880 0 D$@_][ 000000017AA9 000000419AA9 0 T$(PR 000000017C19 000000419C19 0 D$$SUVW 000000017E96 000000419E96 0 d}9SV 000000017FDC 000000419FDC 0 L$<QR 0000000180A9 00000041A0A9 0 L$<Qj 000000018137 00000041A137 0 VWhd" 0000000184C7 00000041A4C7 0 D$,SP 00000001856A 00000041A56A 0 L$8QR 0000000185D2 00000041A5D2 0 $SUVW 000000018804 00000041A804 0 L$ hP 0000000188C5 00000041A8C5 0 QSUVW 000000018B79 00000041AB79 0 L$$SUV 000000018B80 00000041AB80 0 D$4WPQ 000000018BAF 00000041ABAF 0 D$DPQVS 000000018DA9 00000041ADA9 0 L$$SUV 000000018DB0 00000041ADB0 0 D$4WPQ 000000018DDF 00000041ADDF 0 D$DPQVS 000000018ED9 00000041AED9 0 L$$SUV 000000018EE0 00000041AEE0 0 D$4WPQ 000000018F0F 00000041AF0F 0 D$DPQVS 00000001910C 00000041B10C 0 L$ QW 00000001918F 00000041B18F 0 U4RQU 00000001961C 00000041B61C 0 SUVW3 000000019658 00000041B658 0 L$$Qj 00000001993C 00000041B93C 0 IQhH$ 00000001998B 00000041B98B 0 IQhD$ 0000000199DA 00000041B9DA 0 IQh@$ 000000019A29 00000041BA29 0 IQh<$ 000000019A78 00000041BA78 0 IQh8$ 000000019AC7 00000041BAC7 0 IQh4$ 000000019B16 00000041BB16 0 IQh0$ 000000019B65 00000041BB65 0 IQh,$ 000000019BB1 00000041BBB1 0 IQh($ 000000019C28 00000041BC28 0 SUVW3 000000019D59 00000041BD59 0 D$|VW3 000000019D99 00000041BD99 0 D$@hX$ File pos Mem pos ID Text ======== ======= == ==== 000000019E7E 00000041BE7E 0 |$(t- 000000019EE9 00000041BEE9 0 D$LSUV3 00000001A152 00000041C152 0 L$$PQ 00000001A249 00000041C249 0 D$8SUV3 00000001A2B8 00000041C2B8 0 \$<QSR 00000001A2D7 00000041C2D7 0 T$$QPR 00000001A429 00000041C429 0 D$8SUV3 00000001A49F 00000041C49F 0 \$<QRV 00000001A4BB 00000041C4BB 0 T$$PSR 00000001A9FB 00000041C9FB 0 SUVW3 00000001AA9C 00000041CA9C 0 L$0RVW 00000001AAC9 00000041CAC9 0 L$PQP 00000001ABCA 00000041CBCA 0 D$PPW 00000001ADA5 00000041CDA5 0 |$ QPW 00000001AE39 00000041CE39 0 D$8UVWj 00000001AED4 00000041CED4 0 L$HQP 00000001B167 00000041D167 0 ,SUVW 00000001B183 00000041D183 0 l$Dt# 00000001B23D 00000041D23D 0 d$(Ph 00000001B517 00000041D517 0 @SUVW 00000001B6C5 00000041D6C5 0 D$X VP 00000001BA0C 00000041DA0C 0 t$hWj 00000001BA9E 00000041DA9E 0 IQhP$ 00000001BB53 00000041DB53 0 D$ PQ 00000001C2BA 00000041E2BA 0 T$$QWVR 00000001C2FC 00000041E2FC 0 L$$PWVQ 00000001C343 00000041E343 0 D$,VP 00000001C9AA 00000041E9AA 0 T$$QWVR 00000001C9EC 00000041E9EC 0 L$$PWVQ 00000001CA33 00000041EA33 0 D$,VP 00000001E067 000000420067 0 0SUVW 00000001E09C 00000042009C 0 D$ h ' 00000001E4D4 0000004204D4 0 d$8Ph8' 00000001E4FD 0000004204FD 0 t$(to 00000001EAC8 000000420AC8 0 SUVW3 00000001EBA1 000000420BA1 0 |$0t1 00000001EBD4 000000420BD4 0 \$$hh! 00000001F1E8 0000004211E8 0 QRh ( 00000001F27D 00000042127D 0 SVh4( 000000021F48 000000423F48 0 t WVS 000000021F75 000000423F75 0 u7WPS 000000021F86 000000423F86 0 u&WVS 000000024D3E 000000426D3E 0 CloseHandle 000000024D4C 000000426D4C 0 ReadFile 000000024D58 000000426D58 0 GetFileSize 000000024D66 000000426D66 0 CreateFileA 000000024D74 000000426D74 0 WriteFile 000000024D80 000000426D80 0 SetFilePointer 000000024D92 000000426D92 0 GetLocalTime 000000024DA2 000000426DA2 0 GetModuleFileNameA 000000024DB8 000000426DB8 0 DeleteFileA 000000024DC6 000000426DC6 0 VirtualQuery 000000024DD6 000000426DD6 0 CreateThread 000000024DE6 000000426DE6 0 TerminateThread 000000024DF8 000000426DF8 0 Sleep 000000024E00 000000426E00 0 SuspendThread 000000024E10 000000426E10 0 ResumeThread 000000024E20 000000426E20 0 GetProcAddress 000000024E32 000000426E32 0 LoadLibraryA 000000024E42 000000426E42 0 GetModuleHandleA File pos Mem pos ID Text ======== ======= == ==== 000000024E56 000000426E56 0 VirtualFree 000000024E64 000000426E64 0 VirtualAlloc 000000024E74 000000426E74 0 FindNextFileA 000000024E84 000000426E84 0 FindFirstFileA 000000024E96 000000426E96 0 WaitForSingleObject 000000024EAC 000000426EAC 0 VirtualProtect 000000024EBC 000000426EBC 0 KERNEL32.dll 000000024ECC 000000426ECC 0 MessageBoxA 000000024ED8 000000426ED8 0 USER32.dll 000000024EE4 000000426EE4 0 ADVAPI32.dll 000000024EF4 000000426EF4 0 ??0Init@ios_base@std@@QAE@XZ 000000024F14 000000426F14 0 ??1Init@ios_base@std@@QAE@XZ 000000024F34 000000426F34 0 ??0_Winit@std@@QAE@XZ 000000024F4C 000000426F4C 0 ??1_Winit@std@@QAE@XZ 000000024F64 000000426F64 0 ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ 000000024FAE 000000426FAE 0 ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z 00000002500A 00000042700A 0 ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB 000000025066 000000427066 0 ?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z 0000000250B8 0000004270B8 0 ?_Xlen@std@@YAXXZ 0000000250CC 0000004270CC 0 ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z 000000025120 000000427120 0 ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB 00000002516A 00000042716A 0 ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z 0000000251BA 0000004271BA 0 ?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z 000000025208 000000427208 0 ?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ 000000025256 000000427256 0 ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z 0000000252AE 0000004272AE 0 ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z 00000002530A 00000042730A 0 ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z 000000025362 000000427362 0 ??0bad_exception@std@@QAE@ABV01@@Z 000000025388 000000427388 0 ??1bad_exception@std@@UAE@XZ 0000000253A8 0000004273A8 0 ??0bad_exception@std@@QAE@PBD@Z 0000000253CA 0000004273CA 0 ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z 000000025426 000000427426 0 ?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z 000000025474 000000427474 0 ?_Xran@std@@YAXXZ 000000025488 000000427488 0 ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z 0000000254DE 0000004274DE 0 ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z 000000025530 000000427530 0 ?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z 000000025584 000000427584 0 ?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z 0000000255E2 0000004275E2 0 ?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z 000000025640 000000427640 0 ?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z 000000025692 000000427692 0 ??1_Lockit@std@@QAE@XZ 0000000256AC 0000004276AC 0 ??0_Lockit@std@@QAE@XZ 0000000256C4 0000004276C4 0 MSVCP60.dll 0000000256D2 0000004276D2 0 PathFileExistsA 0000000256E4 0000004276E4 0 PathAppendA 0000000256F0 0000004276F0 0 SHLWAPI.dll 0000000256FE 0000004276FE 0 __CxxFrameHandler 00000002571A 00000042771A 0 memmove 000000025724 000000427724 0 ??0exception@@QAE@ABV0@@Z 000000025748 000000427748 0 realloc 000000025752 000000427752 0 _CxxThrowException 000000025768 000000427768 0 ?what@exception@@UBEPBDXZ 000000025784 000000427784 0 ??1exception@@UAE@XZ 00000002579C 00000042779C 0 _vsnprintf 0000000257AA 0000004277AA 0 ??2@YAPAXI@Z 0000000257BA 0000004277BA 0 fclose 0000000257C4 0000004277C4 0 vfprintf 0000000257D0 0000004277D0 0 fopen 0000000257D8 0000004277D8 0 ??0exception@@QAE@XZ 0000000257F0 0000004277F0 0 fputs 0000000257F8 0000004277F8 0 fread File pos Mem pos ID Text ======== ======= == ==== 000000025808 000000427808 0 _ftol 000000025810 000000427810 0 memcpy 00000002581A 00000042781A 0 memset 000000025824 000000427824 0 __dllonexit 000000025832 000000427832 0 _onexit 00000002583A 00000042783A 0 MSVCRT.dll 000000025848 000000427848 0 ??1type_info@@UAE@XZ 000000025860 000000427860 0 _initterm 00000002586C 00000042786C 0 malloc 000000025876 000000427876 0 _adjust_fdiv 000000025886 000000427886 0 HeapCreate 000000025894 000000427894 0 InterlockedCompareExchange 0000000258B2 0000004278B2 0 InterlockedExchange 0000000258C8 0000004278C8 0 HeapDestroy 0000000258D6 0000004278D6 0 HeapFree 0000000258E2 0000004278E2 0 OpenThread 0000000258F0 0000004278F0 0 SetThreadContext 000000025904 000000427904 0 GetThreadContext 000000025918 000000427918 0 Thread32Next 000000025928 000000427928 0 HeapReAlloc 000000025936 000000427936 0 HeapAlloc 000000025942 000000427942 0 GetCurrentThreadId 000000025958 000000427958 0 GetCurrentProcessId 00000002596E 00000042796E 0 Thread32First 00000002597E 00000042797E 0 CreateToolhelp32Snapshot 00000002599A 00000042799A 0 FlushInstructionCache 0000000259B2 0000004279B2 0 GetCurrentProcess 000000025A02 000000427A02 0 Library.dll 000000025A0E 000000427A0E 0 iinit 0000000260B0 0000004280B0 0 .?AVexception@@ 0000000260C8 0000004280C8 0 .?AVException@@ 0000000260E0 0000004280E0 0 .?AVArgumentOutOfRangeException@@ 000000026118 000000428118 0 .?AVbad_exception@std@@ 000000026130 000000428130 0 bad exception 000000026150 000000428150 0 .?AVIOException@@ 000000026170 000000428170 0 .?AVFileNotFoundException@@ 000000026190 000000428190 0 Logger is now on new TraceLevel: %s 0000000261B4 0000004281B4 0 UNKNOWN 0000000261C0 0000004281C0 0 TRACE 0000000261C8 0000004281C8 0 NOTICE 0000000261D0 0000004281D0 0 WARNING 0000000261D8 0000004281D8 0 ERROR 0000000261E0 0000004281E0 0 FATAL 0000000261E8 0000004281E8 0 [%s]: %s 000000026200 000000428200 0 .?AVThreadException@@ 000000026218 000000428218 0 Can't resume thread 00000002622C 00000042822C 0 MessageBoxTimeoutA 000000026240 000000428240 0 user32.dll 00000002624C 00000042824C 0 [%04d/%02d/%02d %02d:%02d:%02d.%03d] %s 000000026274 000000428274 0 determining pin pad 000000026290 000000428290 0 .?AVXfsException@@ 0000000262A4 0000004282A4 0 Settings cash units info END. 0000000262C4 0000004282C4 0 Settings cash units info. 0000000262E0 0000004282E0 0 ca5h units info received 0000000262FC 0000004282FC 0 try to set %d 00000002630C 00000042830C 0 n0 p1npad 000000026320 000000428320 0 .?AVXfsGetInfoException@@ 00000002633C 00000042833C 0 Xfs::QueryCashUnitsFromAtm4 000000026358 000000428358 0 Xfs::QueryCashUnitsFromAtm3 000000026374 000000428374 0 Xfs::QueryCashUnitsFromAtm2 File pos Mem pos ID Text ======== ======= == ==== 000000026390 000000428390 0 LFS found info about <%d> ca5h un1t5 0000000263C0 0000004283C0 0 .?AVXfsDispenseException@@ 0000000263E8 0000004283E8 0 .?AVHookLibException@@ 000000026400 000000428400 0 WFMFreeBuffer 000000026410 000000428410 0 WFMAllocateMore 000000026420 000000428420 0 WFMAllocateBuffer 000000026434 000000428434 0 WFSExecute 000000026440 000000428440 0 WFSFreeResult 000000026450 000000428450 0 WFSStartUp 00000002645C 00000042845C 0 WFSGetInfo 000000026468 000000428468 0 no xf5 module found 00000002647C 00000042847C 0 msxfs.dll 0000000264B8 0000004284B8 0 |INDEX:%d|Values:%d|Money count:%d| 0000000264E0 0000004284E0 0 Founded < %d > commands 0000000264FC 0000004284FC 0 Command file deleted successfully 000000026520 000000428520 0 Reading command from a %s 00000002653C 00000042853C 0 %s\%s 000000026544 000000428544 0 FileCommandProvider::ReadXfsCommandFromFile -> 000000026580 000000428580 0 .?AVArgumentException@@ 000000026598 000000428598 0 exception 0000000265A8 0000004285A8 0 CommandProcessor created 0000000265C4 0000004285C4 0 DEFAULT command processed 0000000265E0 0000004285E0 0 NONE command processed 0000000265F8 0000004285F8 0 System error! 000000026608 000000428608 0 Dispense failed. CODE:%d 000000026624 000000428624 0 Multi Dispensing start 00000002663C 00000042863C 0 Dispense failed. Unknown reason. 000000026660 000000428660 0 Dispense failed. %d 000000026674 000000428674 0 Manual Dispensing 000000026688 000000428688 0 Display Balance -> exception, code:%d 0000000266B0 0000004286B0 0 Display Balance 1try -> exception, code:%d 0000000266DC 0000004286DC 0 CommandProcessor::ProcessCommand -> 000000026700 000000428700 0 SetMaximumDispenseSize:%d 00000002671C 00000042871C 0 NULL command processed 000000026734 000000428734 0 ICommandProcessor::ProcessCommand -> start method 000000026768 000000428768 0 Processing command #%d 000000026780 000000428780 0 Received 00000002678D 00000042878D 0 commands 000000026798 000000428798 0 exception cauch: %d 0000000267AC 0000004287AC 0 Exiting 0000000267B4 0000004287B4 0 Pausing 0000000267BC 0000004287BC 0 trying to dispense 0000000267D0 0000004287D0 0 R2CommandProcessor::ProcessGetRealBalance()1 000000026800 000000428800 0 cur disp service is |%d| 00000002681C 00000042881C 0 try toi set %d 00000002682C 00000042882C 0 ___log.txt 000000026838 000000428838 0 Deleting resources 000000026858 000000428858 0 .?AVXfsLoaderException@@ 000000026874 000000428874 0 uncatched 000000026880 000000428880 0 %s:%d 000000026888 000000428888 0 c:\atm\1 000000026894 000000428894 0 void CreateAllResources() 0000000268B0 0000004288B0 0 Xfs init error 0000000268C0 0000004288C0 0 Critical system error! 0000000268D8 0000004288D8 0 resources created 0000000268EC 0000004288EC 0 MH_UNKNOWN 0000000268F8 0000004288F8 0 MH_OK 000000026900 000000428900 0 MH_ERROR_ALREADY_INITIALIZED 000000026920 000000428920 0 MH_ERROR_NOT_INITIALIZED 00000002693C 00000042893C 0 MH_ERROR_ALREADY_CREATED File pos Mem pos ID Text ======== ======= == ==== 000000026958 000000428958 0 MH_ERROR_NOT_CREATED 000000026970 000000428970 0 MH_ERROR_ENABLED 000000026984 000000428984 0 MH_ERROR_DISABLED 000000026998 000000428998 0 MH_ERROR_NOT_EXECUTABLE 0000000269B0 0000004289B0 0 MH_ERROR_UNSUPPORTED_FUNCTION 0000000269D0 0000004289D0 0 MH_ERROR_MEMORY_ALLOC 0000000269E8 0000004289E8 0 MH_ERROR_MEMORY_PROTECT 000000026A00 000000428A00 0 MH_ERROR_MODULE_NOT_FOUND 000000026A1C 000000428A1C 0 MH_ERROR_FUNCTION_NOT_FOUND 000000026A38 000000428A38 0 (unknown) 000000026A92 000000428A92 0 YYYYY 000000026A9E 000000428A9E 0 YYYYYYYYYYYY 000000026AAC 000000428AAC 0 }YPPPPYYYYa 000000026AC2 000000428AC2 0 YYYYYYYYYYY 000000026B74 000000428B74 0 JJJJKRJJJJOLJJJJJJJJUE@JJJEYMFJ]JJJJJJJJJJJJJJacgNJJkmJJEmJJDEJJ 000000026C58 000000428C58 0 .?AVtype_info@@ 00000002706B 00000042906B 0 0!01070Q0W0a0q0w0 000000027081 000000429081 0 1-1K1]1 00000002708D 00000042908D 0 2,2i2 000000027099 000000429099 0 363B3 0000000270B5 0000004290B5 0 :";V;q; 0000000270D3 0000004290D3 0 =(=1=I=R=u={= 0000000270E7 0000004290E7 0 =">(>Z>r> 0000000270FF 0000004290FF 0 ?!?1?7?Q?W?a?q?w? 000000027127 000000429127 0 0;0M0f0m0{0 000000027149 000000429149 0 3*313I3h3 000000027159 000000429159 0 3#4m4 00000002716D 00000042916D 0 636B6f6z6 000000027183 000000429183 0 7*7V7g7 0000000271A5 0000004291A5 0 9,::: 0000000271BB 0000004291BB 0 >.>3>A> 0000000271C3 0000004291C3 0 >m>s> 0000000271D5 0000004291D5 0 ?+?c? 0000000271EF 0000004291EF 0 0N0_0 0000000271FB 0000004291FB 0 1%111=1J1Q1W1 00000002721F 00000042921F 0 2(3?3b3 000000027229 000000429229 0 4(4_4 00000002723B 00000042923B 0 435T5}5 00000002726B 00000042926B 0 8L8{8 000000027277 000000429277 0 979K9i9r9 00000002728F 00000042928F 0 9":c: 0000000272A5 0000004292A5 0 :3;O;n; 0000000272AD 0000004292AD 0 ;C<V< 0000000272B7 0000004292B7 0 = =%=6= 0000000272C3 0000004292C3 0 >e>m> 0000000272E7 0000004292E7 0 1+2v2 000000027303 000000429303 0 4&4J4[4u4 00000002730D 00000042930D 0 4K5]5 000000027313 000000429313 0 5@7M7 000000027323 000000429323 0 8+8=8S8n8 00000002732D 00000042932D 0 9'91979 000000027341 000000429341 0 ;X;o; 000000027349 000000429349 0 ;9<K< 000000027381 000000429381 0 7*7/777=7D7J7Q7W7 000000027393 000000429393 0 7d7k7q7x7~7 0000000273A5 0000004293A5 0 8 8%898q8y8 0000000273C3 0000004293C3 0 9.969;9a9f9}9 0000000273E3 0000004293E3 0 :#:(:N:S:j:r:w: 000000027405 000000429405 0 ;8;=;T;\;a; 000000027417 000000429417 0 <!<s< File pos Mem pos ID Text ======== ======= == ==== 000000027425 000000429425 0 ===S=f=k=z= 000000027455 000000429455 0 0<0T0 000000027463 000000429463 0 1)1/1@1Y1 00000002746F 00000042946F 0 2 2C2d2j2 000000027487 000000429487 0 3/353B3 000000027493 000000429493 0 4#4(4K4Q4g4m4 0000000274B9 0000004294B9 0 6 606<6 0000000274C9 0000004294C9 0 737F7t7 0000000274DF 0000004294DF 0 8?8D8T8Z8j8 0000000274F7 0000004294F7 0 :/:5:D:W:d:p: 000000027507 000000429507 0 ;';N;q; 000000027521 000000429521 0 >b>o>{> 00000002753B 00000042953B 0 ?#?)?;? 000000027551 000000429551 0 011P1 000000027557 000000429557 0 1#2)2:2?2P2 000000027567 000000429567 0 3$3F3U3y3 00000002757D 00000042957D 0 4/4;4e4v4 00000002758B 00000042958B 0 525}5 00000002759B 00000042959B 0 7%7@7e7p7 0000000275B3 0000004295B3 0 8W8\8c8k8z8 0000000275CD 0000004295CD 0 9#9+9:9H9 0000000275DB 0000004295DB 0 9$:):A:I: 0000000275EF 0000004295EF 0 ;)<V< 000000027603 000000429603 0 =@=N=l= 000000027613 000000429613 0 =%>*>H>P>\>e>k> 00000002762B 00000042962B 0 ? ?,?5?;?i? 000000027645 000000429645 0 0#0F0U0g0 00000002764F 00000042964F 0 0(1C1f1u1 00000002765D 00000042965D 0 2J233_3p3 000000027669 000000429669 0 3[4v4 00000002768B 00000042968B 0 8=8c8 00000002769B 00000042969B 0 9:9#:O: 0000000276A7 0000004296A7 0 :K;f;|; 0000000276B3 0000004296B3 0 ;=<v< 0000000276C9 0000004296C9 0 >-?S?q?z? 0000000276E9 0000004296E9 0 0]1m1 0000000276F3 0000004296F3 0 1[2k2 000000027711 000000429711 0 5%555 00000002771B 00000042971B 0 6%656j6 000000027737 000000429737 0 738K8]8 000000027747 000000429747 0 9$9A9 000000027759 000000429759 0 :A;q;z; 000000027769 000000429769 0 <F<d< 000000027773 000000429773 0 <B=P= 000000027781 000000429781 0 >$>5>I> 0000000277BC 0000004297BC 0 @0Z0w0 0000000277D1 0000004297D1 0 3'4y4(5,5054585<5@5D5H5L5P5T5X5\5 0000000277FF 0000004297FF 0 626V6l6 000000027817 000000429817 0 868T8 00000002781F 00000042981F 0 969f9 000000027827 000000429827 0 9$:S: 000000027839 000000429839 0 ;-;x;}; 000000027843 000000429843 0 ;C<x< 00000002784B 00000042984B 0 <"=1=Q=q= 000000027865 000000429865 0 >7?q? 00000002788B 00000042988B 0 1%1V1a1u1 0000000278A9 0000004298A9 0 2 2.2<2]2b2{2 0000000278CF 0000004298CF 0 4'4k4 0000000278E3 0000004298E3 0 5#5u5 000000027907 000000429907 0 7/7@7T7Z7l7r7 File pos Mem pos ID Text ======== ======= == ==== 00000002791B 00000042991B 0 828A8F8L8 00000002793B 00000042993B 0 9"9,969@9 000000027953 000000429953 0 ;%;_;><f=u= 000000027984 000000429984 0 A0%222R2[2d2p2w2|2 0000000279C5 0000004299C5 0 4&4.454A4J4Q4a4h4q4 0000000279EF 0000004299EF 0 6 7-7 0000000279F7 0000004299F7 0 7H8M8T8[8b8i8p8w8~8 000000027A3D 000000429A3D 0 9(:3:E: 000000027A5B 000000429A5B 0 294f4 000000027A69 000000429A69 0 697@7 000000027AA7 000000429AA7 0 >">(>3>@>H>V>[> 000000027AB7 000000429AB7 0 >e>p>}> 000000027AC9 000000429AC9 0 >>?Z? 000000027ACF 000000429ACF 0 ?f?l?r? 000000027AEC 000000429AEC 0 0)0E0V0[0u0z0 000000027B05 000000429B05 0 161;1Y1y1 000000027B19 000000429B19 0 292Y2y2 000000027B27 000000429B27 0 2 3%323I3i3 000000027B43 000000429B43 0 4 4)424;4D4M4V4[4u4 000000027B63 000000429B63 0 595U5 000000027B69 000000429B69 0 5o5t5 000000027B95 000000429B95 0 7H7M7 000000027BA9 000000429BA9 0 8#858:8U8Z8u8~8 000000027BCF 000000429BCF 0 959:9U9Z9u9z9 000000027BE9 000000429BE9 0 91:Y:y: 000000027BF7 000000429BF7 0 : ;w; 000000027C07 000000429C07 0 ;+<8<Q<u<z< 000000027C57 000000429C57 0 2 2$2(2,2024282<2@2D2H2L2P2T2X2\2 000000027C79 000000429C79 0 2d2h2l2p2t2x2|2 000000027CCB 000000429CCB 0 3(3<3L3P3\3p3|3 000000027CF3 000000429CF3 0 4(44484D4L4T4h4t4 000000027D1F 000000429D1F 0 5$505L5T5\5h5 000000027D41 000000429D41 0 6$606L6T6 000000027D5F 000000429D5F 0 7,747@7\7d7x7 000000027D81 000000429D81 0 8 8(8D8 000000027D9D 000000429D9D 0 9$9(9,949<9H9P9l9 000000027DC9 000000429DC9 0 :0:<:@:D:H:T:\:h: 000000027DEB 000000429DEB 0 ;,;4;@;\;d;p; 000000027E11 000000429E11 0 <$<,<8<T<\<d<p< 000000027E39 000000429E39 0 =$=0=L=T=\=d=p= 000000027E5D 000000429E5D 0 >,><>P>d>p> 000000027E7F 000000429E7F 0 ?4?<?H?d?l?t?|? 000000027EB3 000000429EB3 0 0$0,040<0P0\0 000000027EC1 000000429EC1 0 0d0l0t0 000000027EDF 000000429EDF 0 1,181@1\1d1 000000027EFB 000000429EFB 0 2 2<2D2P2l2x2 000000027F17 000000429F17 0 343@3\3h3 000000027F2F 000000429F2F 0 3 4,444D4P4X4l4|4 000000027F4D 000000429F4D 0 5$5,545<5D5T5\5d5t5 000000027F75 000000429F75 0 646P6\6d6p6x6 000000027F93 000000429F93 0 7$70787T7p7|7 000000027FB9 000000429FB9 0 8 8(8D8 000000027FDB 000000429FDB 0 9$9,949D9P9l9t9|9 000000027FF7 000000429FF7 0 :$:4:D:P:l:t:|: 000000028025 00000042A025 0 0 0$0(0H0 00000000F69C 00000040F69C 0 (null)
=== DOWNLOAD === Mirror provided by vx-underground.org, thx!