.- - -----÷M÷E÷N÷U÷------------------------------------------------------------- --- ----  -------------.
!  WALL ! STATS ! GOODIES ! YARA ! FAQ ! RSS ! EMV                                                      !
`--------------  - ---  ---------- -------- -------- -------- -------- ----------------- -  ---- ---- --'

                                           ATM MALWARE NOTICE 
                    bf20c674a0533e7c0d825de097629a96cb42ae2d4840b07dd1168993d95163e8
 
Date...........: 2016-08-02
Family.........: ATMSpitter
File name......: ATMSpitter Unknown_CNG
File size......: 57.50 KB
Type file......: EXE/Windows
Virscan........: VT - HA
PDB Path found.: C:\Documents and Settings\Administrator\My Documents\Visual Studio 2010\Projects\WincorNixdorf\Release\WN.pdb
Documentation..: https://usa.visa.com/dam/VCOM/global/partner-with-us/documents/visa-technical-analysis-atm-jackpottingmalware.pdf

Entropy:


Binary Histogram:



=== SCREENSHOT === 



=== PEDUMP REPORT === 
=== MZ Header === signature: "MZ" bytes_in_last_block: 144 0x90 blocks_in_file: 3 3 num_relocs: 0 0 header_paragraphs: 4 4 min_extra_paragraphs: 0 0 max_extra_paragraphs: 65535 0xffff ss: 0 0 sp: 184 0xb8 checksum: 0 0 ip: 0 0 cs: 0 0 reloc_table_offset: 64 0x40 overlay_number: 0 0 reserved0: 0 0 oem_id: 0 0 oem_info: 0 0 reserved2: 0 0 reserved3: 0 0 reserved4: 0 0 reserved5: 0 0 reserved6: 0 0 lfanew: 224 0xe0 === DOS STUB === 00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......| === RICH Header === LIB_ID VERSION TIMES_USED 171 ab 30319 766f 23 17 158 9e 30319 766f 17 11 170 aa 30319 766f 87 57 4 4 8447 20ff 2 2 147 93 30729 7809 3 3 1 1 0 0 81 51 174 ae 30319 766f 1 1 157 9d 30319 766f 1 1 === PE Header === signature: "PE\x00\x00" # IMAGE_FILE_HEADER: Machine: 332 0x14c x86 NumberOfSections: 5 5 TimeDateStamp: "2016-11-15 19:52:25" PointerToSymbolTable: 0 0 NumberOfSymbols: 0 0 SizeOfOptionalHeader: 224 0xe0 Characteristics: 258 0x102 EXECUTABLE_IMAGE, 32BIT_MACHINE # IMAGE_OPTIONAL_HEADER32: Magic: 267 0x10b 32-bit executable LinkerVersion: 10.0 SizeOfCode: 35328 0x8a00 SizeOfInitializedData: 22528 0x5800 SizeOfUninitializedData: 0 0 AddressOfEntryPoint: 5499 0x157b BaseOfCode: 4096 0x1000 BaseOfData: 40960 0xa000 ImageBase: 4194304 0x400000 SectionAlignment: 4096 0x1000 FileAlignment: 512 0x200 OperatingSystemVersion: 5.1 ImageVersion: 0.0 SubsystemVersion: 5.1 Reserved1: 0 0 SizeOfImage: 77824 0x13000 SizeOfHeaders: 1024 0x400 CheckSum: 113934 0x1bd0e Subsystem: 3 3 WINDOWS_CUI DllCharacteristics: 33088 0x8140 DYNAMIC_BASE, NX_COMPAT TERMINAL_SERVER_AWARE SizeOfStackReserve: 1048576 0x100000 SizeOfStackCommit: 4096 0x1000 SizeOfHeapReserve: 1048576 0x100000 SizeOfHeapCommit: 4096 0x1000 LoaderFlags: 0 0 NumberOfRvaAndSizes: 16 0x10 === DATA DIRECTORY === EXPORT rva:0x 0 size:0x 0 IMPORT rva:0x d054 size:0x 3c RESOURCE rva:0x 11000 size:0x 1b4 EXCEPTION rva:0x 0 size:0x 0 SECURITY rva:0x 0 size:0x 0 BASERELOC rva:0x 12000 size:0x a08 DEBUG rva:0x a160 size:0x 1c ARCHITECTURE rva:0x 0 size:0x 0 GLOBALPTR rva:0x 0 size:0x 0 TLS rva:0x 0 size:0x 0 LOAD_CONFIG rva:0x cca8 size:0x 40 Bound_IAT rva:0x 0 size:0x 0 IAT rva:0x a000 size:0x 120 Delay_IAT rva:0x 0 size:0x 0 CLR_Header rva:0x 0 size:0x 0 rva:0x 0 size:0x 0 === SECTIONS === NAME RVA VSZ RAW_SZ RAW_PTR nREL REL_PTR nLINE LINE_PTR FLAGS .text 1000 889f 8a00 400 0 0 0 0 60000020 R-X CODE .rdata a000 366a 3800 8e00 0 0 0 0 40000040 R-- IDATA .data e000 2ba4 e00 c600 0 0 0 0 c0000040 RW- IDATA .rsrc 11000 1b4 200 d400 0 0 0 0 40000040 R-- IDATA .reloc 12000 ece 1000 d600 0 0 0 0 42000040 R-- IDATA DISCARDABLE === RESOURCES === FILE_OFFSET CP LANG SIZE TYPE NAME 0xd458 1252 0x409 346 MANIFEST #1 === IMPORTS === MODULE_NAME HINT ORD FUNCTION_NAME KERNEL32.dll 4b2 Sleep KERNEL32.dll 54d lstrlenA KERNEL32.dll 541 lstrcmpA KERNEL32.dll 202 GetLastError KERNEL32.dll 2cf HeapFree KERNEL32.dll 2cb HeapAlloc KERNEL32.dll 186 GetCommandLineA KERNEL32.dll 2d3 HeapSetInformation KERNEL32.dll ca DecodePointer KERNEL32.dll 4d3 UnhandledExceptionFilter KERNEL32.dll 4a5 SetUnhandledExceptionFilter KERNEL32.dll 300 IsDebuggerPresent KERNEL32.dll ea EncodePointer KERNEL32.dll 4c0 TerminateProcess KERNEL32.dll 1c0 GetCurrentProcess KERNEL32.dll 2cd HeapCreate KERNEL32.dll 245 GetProcAddress KERNEL32.dll 218 GetModuleHandleW KERNEL32.dll 119 ExitProcess KERNEL32.dll 525 WriteFile KERNEL32.dll 264 GetStdHandle KERNEL32.dll 214 GetModuleFileNameW KERNEL32.dll ee EnterCriticalSection KERNEL32.dll 339 LeaveCriticalSection KERNEL32.dll 213 GetModuleFileNameA KERNEL32.dll 161 FreeEnvironmentStringsW KERNEL32.dll 511 WideCharToMultiByte KERNEL32.dll 1da GetEnvironmentStringsW KERNEL32.dll 46f SetHandleCount KERNEL32.dll 2e3 InitializeCriticalSectionAndSpinCount KERNEL32.dll 1f3 GetFileType KERNEL32.dll 263 GetStartupInfoW KERNEL32.dll d1 DeleteCriticalSection KERNEL32.dll 4c5 TlsAlloc KERNEL32.dll 4c7 TlsGetValue KERNEL32.dll 4c8 TlsSetValue KERNEL32.dll 4c6 TlsFree KERNEL32.dll 2ef InterlockedIncrement KERNEL32.dll 473 SetLastError KERNEL32.dll 1c5 GetCurrentThreadId KERNEL32.dll 2eb InterlockedDecrement KERNEL32.dll 3a7 QueryPerformanceCounter KERNEL32.dll 293 GetTickCount KERNEL32.dll 1c1 GetCurrentProcessId KERNEL32.dll 279 GetSystemTimeAsFileTime KERNEL32.dll 466 SetFilePointer KERNEL32.dll 19a GetConsoleCP KERNEL32.dll 1ac GetConsoleMode KERNEL32.dll 172 GetCPInfo KERNEL32.dll 168 GetACP KERNEL32.dll 237 GetOEMCP KERNEL32.dll 30a IsValidCodePage KERNEL32.dll 33f LoadLibraryW KERNEL32.dll 418 RtlUnwind KERNEL32.dll 487 SetStdHandle KERNEL32.dll 524 WriteConsoleW KERNEL32.dll 367 MultiByteToWideChar KERNEL32.dll 32d LCMapStringW KERNEL32.dll 269 GetStringTypeW KERNEL32.dll 2d2 HeapReAlloc KERNEL32.dll 304 IsProcessorFeaturePresent KERNEL32.dll 2d4 HeapSize KERNEL32.dll 157 FlushFileBuffers KERNEL32.dll 8f CreateFileW KERNEL32.dll 52 CloseHandle CSCWCNG.dll 15 CSCWCNG.dll 2b CSCWCNG.dll 2d CSCWCNG.dll 16 CSCWCNG.dll 2c === Packer / Compiler === MS Visual C++ v8.0
=== Strings ===
File pos Mem pos ID Text ======== ======= == ==== 00000000004D 00000040004D 0 !This program cannot be run in DOS mode. 0000000000D0 0000004000D0 0 RichU 0000000001D8 0000004001D8 0 .text 000000000200 000000400200 0 .rdata 000000000227 000000400227 0 @.data 000000000250 000000400250 0 .rsrc 000000000277 000000400277 0 @.reloc 000000000DCD 0000004019CD 0 t%HHt 00000000100F 000000401C0F 0 HHtXHHt 0000000010FF 000000401CFF 0 HHty+ 000000001565 000000402165 0 ?If90t 00000000194F 00000040254F 0 PPPPP 000000001AF1 0000004026F1 0 uTVWh 000000001DD7 0000004029D7 0 PPPPP 000000001E59 000000402A59 0 SSSSS 0000000028F0 0000004034F0 0 t?VSP 00000000294A 00000040354A 0 PPPPP 000000002A7B 00000040367B 0 < tK< tG 000000002BC5 0000004037C5 0 wf93t 000000002BEA 0000004037EA 0 @PSVV 000000002CBA 0000004038BA 0 SWf9M 000000004A92 000000405692 0 QSWVj 000000004BDB 0000004057DB 0 v N+D$ 00000000585A 00000040645A 0 ~,WPV 0000000059DF 0000004065DF 0 URPQQh 000000005FC3 000000406BC3 0 9](SS 000000006109 000000406D09 0 t"SS9] u 0000000061C9 000000406DC9 0 9] SS 00000000668B 00000040728B 0 v4;5\ 000000006789 000000407389 0 vL;5t 000000006E86 000000407A86 0 PPPPPPPP 000000006F66 000000407B66 0 PPPPPPPP 000000007163 000000407D63 0 SVWUj 000000007204 000000407E04 0 ;t$,v- 000000007289 000000407E89 0 UQPXY]Y[ 0000000076A2 0000004082A2 0 w:t1 0000000076E3 0000004082E3 0 w2t) 00000000775F 00000040835F 0 w9t(- 00000000776B 00000040836B 0 Hu7h( 00000000779F 00000040839F 0 (t%Ht 0000000078D2 0000004084D2 0 ><,t#<;t 00000000796B 00000040856B 0 Mt,Ht 0000000088FE 0000004094FE 0 T$<Wf 000000008B2E 00000040972E 0 D$HPh 000000008F8C 00000040A18C 0 (null) 000000008FB9 00000040A1B9 0 ( 8PX 000000008FC1 00000040A1C1 0 700WP 000000008FD9 00000040A1D9 0 xpxxxx 000000008FF4 00000040A1F4 0 CorExitProcess 000000009ACC 00000040ACCC 0 FlsFree 000000009AD4 00000040ACD4 0 FlsSetValue 000000009AE0 00000040ACE0 0 FlsGetValue 000000009AEC 00000040ACEC 0 FlsAlloc 000000009D1C 00000040AF1C 0 HH:mm:ss 000000009D28 00000040AF28 0 dddd, MMMM dd, yyyy 000000009D3C 00000040AF3C 0 MM/dd/yy 000000009D50 00000040AF50 0 December 000000009D5C 00000040AF5C 0 November 000000009D68 00000040AF68 0 October 000000009D70 00000040AF70 0 September File pos Mem pos ID Text ======== ======= == ==== 000000009D7C 00000040AF7C 0 August 000000009D94 00000040AF94 0 April 000000009D9C 00000040AF9C 0 March 000000009DA4 00000040AFA4 0 February 000000009DB0 00000040AFB0 0 January 000000009DE8 00000040AFE8 0 Saturday 000000009DF4 00000040AFF4 0 Friday 000000009DFC 00000040AFFC 0 Thursday 000000009E08 00000040B008 0 Wednesday 000000009E14 00000040B014 0 Tuesday 000000009E1C 00000040B01C 0 Monday 000000009E24 00000040B024 0 Sunday 000000009E6D 00000040B06D 0 ('8PW 000000009E76 00000040B076 0 700PP 000000009E91 00000040B091 0 xppwpp 000000009EA4 00000040B0A4 0 GetProcessWindowStation 000000009EBC 00000040B0BC 0 GetUserObjectInformationW 000000009ED8 00000040B0D8 0 GetLastActivePopup 000000009EEC 00000040B0EC 0 GetActiveWindow 000000009EFC 00000040B0FC 0 MessageBoxW 000000009F3F 00000040B13F 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\] 000000009F80 00000040B180 0 abcdefghijklmnopqrstuvwxyz{|}~ 00000000A548 00000040B748 0 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\] 00000000A589 00000040B789 0 abcdefghijklmnopqrstuvwxyz{|}~ 00000000A6C8 00000040B8C8 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\] 00000000A709 00000040B909 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~ 00000000A7D0 00000040B9D0 0 Safety switch: 00000000A7E8 00000040B9E8 0 Closed 00000000A7F0 00000040B9F0 0 Unknown (%s) 00000000A808 00000040BA08 0 Device lock after money retract: 00000000A83C 00000040BA3C 0 Cassettes can be processed: 00000000A85C 00000040BA5C 0 SHERR 00000000A864 00000040BA64 0 Error at shutter: 00000000A878 00000040BA78 0 Blocked 00000000A884 00000040BA84 0 No error 00000000A898 00000040BA98 0 Shutter status: 00000000A8AC 00000040BAAC 0 Missing 00000000A8B8 00000040BAB8 0 Undefined 00000000A8C4 00000040BAC4 0 Diverter 00000000A8D4 00000040BAD4 0 Banknotes output status: 00000000A8F0 00000040BAF0 0 Banknotes were accessible to the customer 00000000A91C 00000040BB1C 0 Banknotes have been withdrawn 00000000A93C 00000040BB3C 0 Retained 00000000A948 00000040BB48 0 No money was accessible to the customer 00000000A978 00000040BB78 0 Transport error: 00000000A990 00000040BB90 0 Manipulation at the output photo sensor 00000000A9C8 00000040BBC8 0 Transport status: 00000000A9DC 00000040BBDC 0 No banknotes available 00000000A9F4 00000040BBF4 0 Cassette 00000000AA00 00000040BC00 0 Collection tray 00000000AA14 00000040BC14 0 Reject box 00000000AA20 00000040BC20 0 Stop over (cash out) 00000000AA38 00000040BC38 0 Withdrawal position 00000000AA50 00000040BC50 0 Retract box 00000000AA60 00000040BC60 0 Undefined position 00000000AA78 00000040BC78 0 Status of the transport path after the last command: 00000000AAB0 00000040BCB0 0 Transport path was free 00000000AACC 00000040BCCC 0 Transport path was not free 00000000AAF0 00000040BCF0 0 Single reject switch: 00000000AB08 00000040BD08 0 Defective (transport direction collection tray) File pos Mem pos ID Text ======== ======= == ==== 00000000AB3C 00000040BD3C 0 Defective (transport direction reject box) 00000000AB6C 00000040BD6C 0 Device error during dispensing: 00000000AB90 00000040BD90 0 Too many bundle rejects 00000000ABAC 00000040BDAC 0 No separation possible 00000000ABC4 00000040BDC4 0 Too many multiple separations 00000000ABE4 00000040BDE4 0 Too many banknotes outside width tolerance 00000000AC10 00000040BE10 0 Paper jam at additional dispensing 00000000AC38 00000040BE38 0 Cassette supply changed: 00000000AC5C 00000040BE5C 0 Door status: 00000000AC74 00000040BE74 0 Watch door sensor (encryption): 00000000ACA0 00000040BEA0 0 Device type: 00000000ACB0 00000040BEB0 0 Front load 00000000ACBC 00000040BEBC 0 Rear load 00000000ACC8 00000040BEC8 0 Rear load with addit. module 00000000ACE8 00000040BEE8 0 ProCash Compact front load 00000000AD04 00000040BF04 0 ProCash Compact rear load 00000000AD20 00000040BF20 0 Front load SAT 2x00 00000000AD38 00000040BF38 0 Rear load SAT 2x00 00000000AD54 00000040BF54 0 Number of dispensing modules: %c 00000000AD80 00000040BF80 0 SW EDM: 00000000AD8C 00000040BF8C 0 Encryption active 00000000ADA0 00000040BFA0 0 Transport key missing 00000000ADB8 00000040BFB8 0 Line key missing 00000000ADCC 00000040BFCC 0 Initial value must be requested 00000000ADF8 00000040BFF8 0 Clearing status (after RESET/POWER UP): 00000000AE24 00000040C024 0 Transport paths were free 00000000AE40 00000040C040 0 No banknotes were accessible to the customer; transp.->reject successful 00000000AE90 00000040C090 0 Banknotes were accessible to the customer; transp.->retract successful 00000000AED8 00000040C0D8 0 Banknotes were accessible to the customer before power failure/RESET; they have been withdrawn in the meantime. 00000000AF50 00000040C150 0 No banknotes were accessible to the customer before power failure/RESET; an error occurred during clearing (see SRES) 00000000AFC8 00000040C1C8 0 Banknotes were accessible to the customer before power failure/RESET; an error occurred during clearing (see SRES) 00000000B040 00000040C240 0 Banknotes were accessible to the customer; retract was not performed, <RRET>==1 00000000B094 00000040C294 0 Reserved 00000000B0A0 00000040C2A0 0 Retract successful; an error occurred during cleaning of the singe reject switch (see SRES) 00000000B108 00000040C308 0 Status code after RESET or after POWER UP: %c 00000000B13C 00000040C33C 0 Self-test active: 00000000B158 00000040C358 0 Contents of the seven segment display: %s 00000000B188 00000040C388 0 Operator request: 00000000B19C 00000040C39C 0 Warning 00000000B1A8 00000040C3A8 0 C_OUT 00000000B1B0 00000040C3B0 0 Cash-out availability: 00000000B1C8 00000040C3C8 0 Minimum configuration missing (RR-box and/or cash-out cassette missing) 00000000B214 00000040C414 0 Device lock 00000000B224 00000040C424 0 Motor damaged 00000000B234 00000040C434 0 In power-up/initialization sequence 00000000B25C 00000040C45C 0 Security breaker activated 00000000B278 00000040C478 0 Tongs transport damaged 00000000B294 00000040C494 0 Cash-out possible 00000000B2A8 00000040C4A8 0 TRANSPORT 00000000B2B4 00000040C4B4 0 Characteristic of output transport: 00000000B2DC 00000040C4DC 0 In Safe front 00000000B2EC 00000040C4EC 0 In Safe rear 00000000B2FC 00000040C4FC 0 Out Safe rear 00000000B30C 00000040C50C 0 Out Safe front 00000000B324 00000040C524 0 Reject/Retract Cassette: 00000000B340 00000040C540 0 State: 00000000B34C 00000040C54C 0 Ready 00000000B364 00000040C564 0 Rejected Banknotes: %d 00000000B388 00000040C588 0 Retract Counter: %d 00000000B3AC 00000040C5AC 0 Cassette # %d: File pos Mem pos ID Text ======== ======= == ==== 00000000B3BC 00000040C5BC 0 Empty 00000000B3C4 00000040C5C4 0 Unknown Parameters 00000000B3D8 00000040C5D8 0 Defective 00000000B3E4 00000040C5E4 0 Printing Cassette 00000000B3F8 00000040C5F8 0 dis. module incl. cassette swapped 00000000B41C 00000040C61C 0 memory cannot be processed 00000000B438 00000040C638 0 internal magnet cannot be addressed 00000000B460 00000040C660 0 wrong cassette type 00000000B47C 00000040C67C 0 Currency: %s 00000000B494 00000040C694 0 Banknotes Value: %d 00000000B4B4 00000040C6B4 0 Banknotes Count: %d 00000000B4D0 00000040C6D0 0 Total Banknotes: %d 00000000B4E4 00000040C6E4 0 Total Cash: %d k (%d) 00000000B4FA 00000040C6FA 0 Total Dispenses Left (by 40 banknotes): %d 00000000B525 00000040C725 0 Total Dispenses Left (by 60 banknotes): %d 00000000B554 00000040C754 0 StClass = 00000000B564 00000040C764 0 STCLASS_OK 00000000B570 00000040C770 0 STCLASS_ERROR_COMM 00000000B584 00000040C784 0 STCLASS_ERROR_CNG 00000000B598 00000040C798 0 STCLASS_ERROR_EDS 00000000B5AC 00000040C7AC 0 STCLASS_ERROR_INI 00000000B5C0 00000040C7C0 0 STCLASS_ERROR_LDR 00000000B5D8 00000040C7D8 0 StCode = 00000000B5E8 00000040C7E8 0 CSC_INVALID_SPEC 00000000B5FC 00000040C7FC 0 CSC_INVALID_LOGICAL_ID 00000000B614 00000040C814 0 CSC_INVALID_PINDATA 00000000B62C 00000040C82C 0 CSC_INVALID_INLEN 00000000B640 00000040C840 0 CSC_DEVICE_ALREADY_OPENED 00000000B65C 00000040C85C 0 CNG_INVALID_VARIANT 00000000B674 00000040C874 0 CNG_INVALID_RESPONSE 00000000B68C 00000040C88C 0 CNG_INVALID_RECOVERY 00000000B6A4 00000040C8A4 0 CNG_FIRMWARE_INCOMPLETE 00000000B6C0 00000040C8C0 0 CNG_FRM_CONTEXT 00000000B6D4 00000040C8D4 0 CNG_FRM_SYNTAX 00000000B6E4 00000040C8E4 0 StWarn = 00000000B6F4 00000040C8F4 0 CNG_WARN_MONEY_NOT_REMOVED 00000000B710 00000040C910 0 CNG_WARN_MONEY_REMOVED 00000000B728 00000040C928 0 CNG_NO_FIRMWARE 00000000B73C 00000040C93C 0 CNG_NO_ACTUAL_FIRMWARE 00000000B754 00000040C954 0 CNG_WARN_LED 00000000B764 00000040C964 0 CSCCNG 00000000B770 00000040C970 0 Usage: %s <Command> 00000000B784 00000040C984 0 Available Commands: dvi/csi/ret/sht 00000000B7A8 00000040C9A8 0 dvi - device info; csi - cassettes info; ret - retract cash; sht - test shutter 00000000B80C 00000040CA0C 0 Please enter valid command! (dvi/csi/ret/sht) 00000000B83C 00000040CA3C 0 Connecting to the CNG... 00000000B858 00000040CA58 0 CscCngOpen/CscCdmOpen failed with error: 00000000B884 00000040CA84 0 Successfully connected! 00000000B8A0 00000040CAA0 0 Reading cassette status information... 00000000B8C8 00000040CAC8 0 CscCngStatusRead/CscCdmStatusRead failed with error: 00000000B900 00000040CB00 0 Success. Raw Response: %s 00000000B91C 00000040CB1C 0 Reading device status information... 00000000B944 00000040CB44 0 Retracting cash... 00000000B958 00000040CB58 0 CscCngTransport/CscCdmTransport failed with error: 00000000B98C 00000040CB8C 0 Cash successfully retracted! 00000000B9AC 00000040CBAC 0 Opening shutter... 00000000B9C0 00000040CBC0 0 CscCngShutter/CscCdmShutter failed with error: 00000000B9F0 00000040CBF0 0 Shutter successfully opened! Waiting 2 seconds... 00000000BA24 00000040CC24 0 Closing shutter... 00000000BA38 00000040CC38 0 Shutter successfully closed! File pos Mem pos ID Text ======== ======= == ==== 00000000BA58 00000040CC58 0 Disconnecting... 00000000BA6C 00000040CC6C 0 CscCngClose/CscCdmClose failed with error: 00000000BA98 00000040CC98 0 Disconnected. 00000000BB08 00000040CD08 0 C:\Documents and Settings\Administrator\My Documents\Visual Studio 2010\Projects\WincorNixdorf\Release\WN.pdb 00000000BFB2 00000040D1B2 0 lstrcmpA 00000000BFBE 00000040D1BE 0 lstrlenA 00000000BFCA 00000040D1CA 0 Sleep 00000000BFD0 00000040D1D0 0 KERNEL32.dll 00000000BFDE 00000040D1DE 0 CSCWCNG.dll 00000000BFEC 00000040D1EC 0 GetLastError 00000000BFFC 00000040D1FC 0 HeapFree 00000000C008 00000040D208 0 HeapAlloc 00000000C014 00000040D214 0 GetCommandLineA 00000000C026 00000040D226 0 HeapSetInformation 00000000C03C 00000040D23C 0 DecodePointer 00000000C04C 00000040D24C 0 UnhandledExceptionFilter 00000000C068 00000040D268 0 SetUnhandledExceptionFilter 00000000C086 00000040D286 0 IsDebuggerPresent 00000000C09A 00000040D29A 0 EncodePointer 00000000C0AA 00000040D2AA 0 TerminateProcess 00000000C0BE 00000040D2BE 0 GetCurrentProcess 00000000C0D2 00000040D2D2 0 HeapCreate 00000000C0E0 00000040D2E0 0 GetProcAddress 00000000C0F2 00000040D2F2 0 GetModuleHandleW 00000000C106 00000040D306 0 ExitProcess 00000000C114 00000040D314 0 WriteFile 00000000C120 00000040D320 0 GetStdHandle 00000000C130 00000040D330 0 GetModuleFileNameW 00000000C146 00000040D346 0 EnterCriticalSection 00000000C15E 00000040D35E 0 LeaveCriticalSection 00000000C176 00000040D376 0 GetModuleFileNameA 00000000C18C 00000040D38C 0 FreeEnvironmentStringsW 00000000C1A6 00000040D3A6 0 WideCharToMultiByte 00000000C1BC 00000040D3BC 0 GetEnvironmentStringsW 00000000C1D6 00000040D3D6 0 SetHandleCount 00000000C1E8 00000040D3E8 0 InitializeCriticalSectionAndSpinCount 00000000C210 00000040D410 0 GetFileType 00000000C21E 00000040D41E 0 GetStartupInfoW 00000000C230 00000040D430 0 DeleteCriticalSection 00000000C248 00000040D448 0 TlsAlloc 00000000C254 00000040D454 0 TlsGetValue 00000000C262 00000040D462 0 TlsSetValue 00000000C270 00000040D470 0 TlsFree 00000000C27A 00000040D47A 0 InterlockedIncrement 00000000C292 00000040D492 0 SetLastError 00000000C2A2 00000040D4A2 0 GetCurrentThreadId 00000000C2B8 00000040D4B8 0 InterlockedDecrement 00000000C2D0 00000040D4D0 0 QueryPerformanceCounter 00000000C2EA 00000040D4EA 0 GetTickCount 00000000C2FA 00000040D4FA 0 GetCurrentProcessId 00000000C310 00000040D510 0 GetSystemTimeAsFileTime 00000000C32A 00000040D52A 0 SetFilePointer 00000000C33C 00000040D53C 0 GetConsoleCP 00000000C34C 00000040D54C 0 GetConsoleMode 00000000C35E 00000040D55E 0 GetCPInfo 00000000C36A 00000040D56A 0 GetACP 00000000C374 00000040D574 0 GetOEMCP 00000000C380 00000040D580 0 IsValidCodePage 00000000C392 00000040D592 0 LoadLibraryW 00000000C3A2 00000040D5A2 0 RtlUnwind File pos Mem pos ID Text ======== ======= == ==== 00000000C3AE 00000040D5AE 0 SetStdHandle 00000000C3BE 00000040D5BE 0 WriteConsoleW 00000000C3CE 00000040D5CE 0 MultiByteToWideChar 00000000C3E4 00000040D5E4 0 LCMapStringW 00000000C3F4 00000040D5F4 0 GetStringTypeW 00000000C406 00000040D606 0 HeapReAlloc 00000000C414 00000040D614 0 IsProcessorFeaturePresent 00000000C430 00000040D630 0 HeapSize 00000000C43C 00000040D63C 0 FlushFileBuffers 00000000C450 00000040D650 0 CreateFileW 00000000C45E 00000040D65E 0 CloseHandle 00000000CACE 00000040E4CE 0 00000000CBAE 00000040E5AE 0 abcdefghijklmnopqrstuvwxyz 00000000CBCE 00000040E5CE 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ 00000000CCD2 00000040E6D2 0 00000000CDB9 00000040E7B9 0 abcdefghijklmnopqrstuvwxyz 00000000CDD9 00000040E7D9 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ 00000000D458 000000411058 0 <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> 00000000D4A3 0000004110A3 0 <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"> 00000000D4DB 0000004110DB 0 <security> 00000000D4EB 0000004110EB 0 <requestedPrivileges> 00000000D508 000000411108 0 <requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel> 00000000D568 000000411168 0 </requestedPrivileges> 00000000D586 000000411186 0 </security> 00000000D597 000000411197 0 </trustInfo> 00000000D5A7 0000004111A7 0 </assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD 00000000D61F 00000041201F 0 4*474C4O4U4g4o4z4 00000000D645 000000412045 0 707;7#8 00000000D651 000000412051 0 8_9n9 00000000D68B 00000041208B 0 5'5-5j5 00000000D6A1 0000004120A1 0 6"6D6 00000000D6B5 0000004120B5 0 7!7+7A7L7f7q7y7 00000000D6D1 0000004120D1 0 8*818\8 00000000D6DB 0000004120DB 0 9#9j9 00000000D6F1 0000004120F1 0 :J:g: 00000000D6FF 0000004120FF 0 ;L>S>e>k> 00000000D71B 00000041211B 0 ?"?0?E?O?u? 00000000D739 000000412139 0 0U0g0 00000000D741 000000412141 0 1b1<2D2\2w2 00000000D74D 00000041214D 0 2"3(3{4 00000000D75D 00000041215D 0 5"535>5 00000000D76B 00000041216B 0 7"7(7 00000000D777 000000412177 0 7*868P8v8|8 00000000D789 000000412189 0 9N9X9 00000000D799 000000412199 0 :M:p:v: 00000000D7B9 0000004121B9 0 ;%;+;3;9;E;K;X;b;h;r; 00000000D7D7 0000004121D7 0 <?<E<K<a<y< 00000000D7E5 0000004121E5 0 =<=F=~= 00000000D801 000000412201 0 > >'>,>4>=>I>N>S>Y>]>c>h>n>s> 00000000D83D 00000041223D 0 ?-?O?r? 00000000D85C 00000041225C 0 %020K0i0 00000000D875 000000412275 0 3b5<6 00000000D87B 00000041227B 0 7=7S7 00000000D899 000000412299 0 <W<d<n<|< 00000000D8B1 0000004122B1 0 =2=i= 00000000D8B9 0000004122B9 0 =!>>> 00000000D8DF 0000004122DF 0 050>0D0M0R0a0 00000000D8F3 0000004122F3 0 0"1q1 00000000D90D 00000041230D 0 4C4L4X4 00000000D939 000000412339 0 9 9"969<9E9X9|9 File pos Mem pos ID Text ======== ======= == ==== 00000000D94B 00000041234B 0 :0:::q:w:|: 00000000D965 000000412365 0 :-;2;l;q;x;}; 00000000D987 000000412387 0 <-=2=;=J=m=r=w= 00000000D997 000000412397 0 =x>}> 00000000D9A3 0000004123A3 0 >7?Z?e?k?{? 00000000D9D5 0000004123D5 0 0;0U0o0q2x2~2 00000000DA03 000000412403 0 8*8J8 00000000DA0F 00000041240F 0 8'9T9_9 00000000DA27 000000412427 0 ;V<&= 00000000DA3C 00000041243C 0 G2Y2k2}2 00000000DA51 000000412451 0 3!333E3W3i3{3 00000000DA65 000000412465 0 3c4i4u4 00000000DA83 000000412483 0 5"5)50585@5H5T5]5b5h5r5{5 00000000DAB5 0000004124B5 0 7<7T7[7c7h7l7p7 00000000DAD9 0000004124D9 0 8J8P8T8X8\8 00000000DAF3 0000004124F3 0 9G9y9 00000000DB11 000000412511 0 9h:n: 00000000DB27 000000412527 0 =U>o>x> 00000000DB41 000000412541 0 0S0]0u0 00000000DB53 000000412553 0 2"2'262E2T2c2r2 00000000DB79 000000412579 0 3)383?3L3o3~3 00000000DBA1 0000004125A1 0 4 4$4(4,4p4>5N5Z5w5~5 00000000DBC5 0000004125C5 0 616;6Y6 00000000DBCD 0000004125CD 0 6e6w6 00000000DBE5 0000004125E5 0 717>7Q7d7z7 00000000DBFB 0000004125FB 0 8 8$8(8,8084888<8@8h8r8 00000000DC25 000000412625 0 9,9;9B9X9b9|9 00000000DC47 000000412647 0 :&:<:F:b:i:n:}: 00000000DC67 000000412667 0 ; ;*;F;K;Z;i;x; 00000000DC89 000000412689 0 <*<4<T<c<j<q< 00000000DCAB 0000004126AB 0 =*=4=N=]=d=z= 00000000DCCB 0000004126CB 0 >)>3>S>Z>_>n>}> 00000000DCED 0000004126ED 0 ?7?>?C?R?a?p? 00000000DD17 000000412717 0 0"010@0P0f0v0 00000000DD35 000000412735 0 1%141;1B1X1b1 00000000DD59 000000412759 0 2'2G2N2S2l2 00000000DD71 000000412771 0 34383<3@3D3H3 00000000DD7F 00000041277F 0 3d3h3l3p3 00000000DDC3 0000004127C3 0 4 4044484<4@4D4H4L4P4T4X4\4 00000000DDDF 0000004127DF 0 4d4h4l4p4t4 00000000DE01 000000412801 0 5!575W5\5h5t5 00000000DE1B 00000041281B 0 6B6L6o6{6 00000000DE2F 00000041282F 0 737E7Q7p7|7 00000000DE49 000000412849 0 808=8\8h8 00000000DE5C 00000041285C 0 ,1014181<1H1L1 00000000DE89 000000412889 0 ;$;,;4;<;D;L; 00000000DEB9 0000004128B9 0 >$>@>L>h> 00000000DECB 0000004128CB 0 ?$?(?H?h? 00000000DEE9 0000004128E9 0 000P0 00000000DEFF 0000004128FF 0 1x8x9|9 00000000DF55 000000412955 0 : :0:4:8:<:@:D:H:L:P:T:X:\: 00000000DF71 000000412971 0 :d:h:l:p:t:x:|: 00000000DFAD 0000004129AD 0 :8;H;X;h;x; 00000000DFDD 0000004129DD 0 =(=,=0=4=8=<=@=D=H=L=X=\= 00000000DFF7 0000004129F7 0 =d=h=l=p=t=x=|= 000000008F7C 00000040A17C 0 (null) 000000009004 00000040A204 0 mscoree.dll 00000000901C 00000040A21C 0 runtime error 00000000994F 00000040AB4F 0 @Microsoft Visual C++ Runtime Library 0000000099AC 00000040ABAC 0 <program name unknown> File pos Mem pos ID Text ======== ======= == ==== 0000000099FC 00000040ABFC 0 Program: 000000009AB0 00000040ACB0 0 KERNEL32.DLL 000000009AF8 00000040ACF8 0 HH:mm:ss 000000009B0C 00000040AD0C 0 dddd, MMMM dd, yyyy 000000009B34 00000040AD34 0 MM/dd/yy 000000009B58 00000040AD58 0 December 000000009B6C 00000040AD6C 0 November 000000009B80 00000040AD80 0 October 000000009B90 00000040AD90 0 September 000000009BA4 00000040ADA4 0 August 000000009BCC 00000040ADCC 0 April 000000009BD8 00000040ADD8 0 March 000000009BE4 00000040ADE4 0 February 000000009BF8 00000040ADF8 0 January 000000009C68 00000040AE68 0 Saturday 000000009C7C 00000040AE7C 0 Friday 000000009C8C 00000040AE8C 0 Thursday 000000009CA0 00000040AEA0 0 Wednesday 000000009CB4 00000040AEB4 0 Tuesday 000000009CC4 00000040AEC4 0 Monday 000000009CD4 00000040AED4 0 Sunday 000000009F07 00000040B107 0 WUSER32.DLL 00000000A7AF 00000040B9AF 0 @CONOUT$ 00000000004D 00000040004D 0 !This program cannot be run in DOS mode. 0000000000D0 0000004000D0 0 RichU 0000000001D8 0000004001D8 0 .text 000000000200 000000400200 0 .rdata 000000000227 000000400227 0 @.data 000000000250 000000400250 0 .rsrc 000000000277 000000400277 0 @.reloc 000000000DCD 0000004019CD 0 t%HHt 00000000100F 000000401C0F 0 HHtXHHt 0000000010FF 000000401CFF 0 HHty+ 000000001565 000000402165 0 ?If90t 00000000194F 00000040254F 0 PPPPP 000000001AF1 0000004026F1 0 uTVWh 000000001DD7 0000004029D7 0 PPPPP 000000001E59 000000402A59 0 SSSSS 0000000028F0 0000004034F0 0 t?VSP 00000000294A 00000040354A 0 PPPPP 000000002A7B 00000040367B 0 < tK< tG 000000002BC5 0000004037C5 0 wf93t 000000002BEA 0000004037EA 0 @PSVV 000000002CBA 0000004038BA 0 SWf9M 000000004A92 000000405692 0 QSWVj 000000004BDB 0000004057DB 0 v N+D$ 00000000585A 00000040645A 0 ~,WPV 0000000059DF 0000004065DF 0 URPQQh 000000005FC3 000000406BC3 0 9](SS 000000006109 000000406D09 0 t"SS9] u 0000000061C9 000000406DC9 0 9] SS 00000000668B 00000040728B 0 v4;5\ 000000006789 000000407389 0 vL;5t 000000006E86 000000407A86 0 PPPPPPPP 000000006F66 000000407B66 0 PPPPPPPP 000000007163 000000407D63 0 SVWUj 000000007204 000000407E04 0 ;t$,v- 000000007289 000000407E89 0 UQPXY]Y[ 0000000076A2 0000004082A2 0 w:t1 0000000076E3 0000004082E3 0 w2t) File pos Mem pos ID Text ======== ======= == ==== 00000000775F 00000040835F 0 w9t(- 00000000776B 00000040836B 0 Hu7h( 00000000779F 00000040839F 0 (t%Ht 0000000078D2 0000004084D2 0 ><,t#<;t 00000000796B 00000040856B 0 Mt,Ht 0000000088FE 0000004094FE 0 T$<Wf 000000008B2E 00000040972E 0 D$HPh 000000008F8C 00000040A18C 0 (null) 000000008FB9 00000040A1B9 0 ( 8PX 000000008FC1 00000040A1C1 0 700WP 000000008FD9 00000040A1D9 0 xpxxxx 000000008FF4 00000040A1F4 0 CorExitProcess 000000009ACC 00000040ACCC 0 FlsFree 000000009AD4 00000040ACD4 0 FlsSetValue 000000009AE0 00000040ACE0 0 FlsGetValue 000000009AEC 00000040ACEC 0 FlsAlloc 000000009D1C 00000040AF1C 0 HH:mm:ss 000000009D28 00000040AF28 0 dddd, MMMM dd, yyyy 000000009D3C 00000040AF3C 0 MM/dd/yy 000000009D50 00000040AF50 0 December 000000009D5C 00000040AF5C 0 November 000000009D68 00000040AF68 0 October 000000009D70 00000040AF70 0 September 000000009D7C 00000040AF7C 0 August 000000009D94 00000040AF94 0 April 000000009D9C 00000040AF9C 0 March 000000009DA4 00000040AFA4 0 February 000000009DB0 00000040AFB0 0 January 000000009DE8 00000040AFE8 0 Saturday 000000009DF4 00000040AFF4 0 Friday 000000009DFC 00000040AFFC 0 Thursday 000000009E08 00000040B008 0 Wednesday 000000009E14 00000040B014 0 Tuesday 000000009E1C 00000040B01C 0 Monday 000000009E24 00000040B024 0 Sunday 000000009E6D 00000040B06D 0 ('8PW 000000009E76 00000040B076 0 700PP 000000009E91 00000040B091 0 xppwpp 000000009EA4 00000040B0A4 0 GetProcessWindowStation 000000009EBC 00000040B0BC 0 GetUserObjectInformationW 000000009ED8 00000040B0D8 0 GetLastActivePopup 000000009EEC 00000040B0EC 0 GetActiveWindow 000000009EFC 00000040B0FC 0 MessageBoxW 000000009F3F 00000040B13F 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\] 000000009F80 00000040B180 0 abcdefghijklmnopqrstuvwxyz{|}~ 00000000A548 00000040B748 0 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\] 00000000A589 00000040B789 0 abcdefghijklmnopqrstuvwxyz{|}~ 00000000A6C8 00000040B8C8 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\] 00000000A709 00000040B909 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~ 00000000A7D0 00000040B9D0 0 Safety switch: 00000000A7E8 00000040B9E8 0 Closed 00000000A7F0 00000040B9F0 0 Unknown (%s) 00000000A808 00000040BA08 0 Device lock after money retract: 00000000A83C 00000040BA3C 0 Cassettes can be processed: 00000000A85C 00000040BA5C 0 SHERR 00000000A864 00000040BA64 0 Error at shutter: 00000000A878 00000040BA78 0 Blocked 00000000A884 00000040BA84 0 No error 00000000A898 00000040BA98 0 Shutter status: 00000000A8AC 00000040BAAC 0 Missing File pos Mem pos ID Text ======== ======= == ==== 00000000A8B8 00000040BAB8 0 Undefined 00000000A8C4 00000040BAC4 0 Diverter 00000000A8D4 00000040BAD4 0 Banknotes output status: 00000000A8F0 00000040BAF0 0 Banknotes were accessible to the customer 00000000A91C 00000040BB1C 0 Banknotes have been withdrawn 00000000A93C 00000040BB3C 0 Retained 00000000A948 00000040BB48 0 No money was accessible to the customer 00000000A978 00000040BB78 0 Transport error: 00000000A990 00000040BB90 0 Manipulation at the output photo sensor 00000000A9C8 00000040BBC8 0 Transport status: 00000000A9DC 00000040BBDC 0 No banknotes available 00000000A9F4 00000040BBF4 0 Cassette 00000000AA00 00000040BC00 0 Collection tray 00000000AA14 00000040BC14 0 Reject box 00000000AA20 00000040BC20 0 Stop over (cash out) 00000000AA38 00000040BC38 0 Withdrawal position 00000000AA50 00000040BC50 0 Retract box 00000000AA60 00000040BC60 0 Undefined position 00000000AA78 00000040BC78 0 Status of the transport path after the last command: 00000000AAB0 00000040BCB0 0 Transport path was free 00000000AACC 00000040BCCC 0 Transport path was not free 00000000AAF0 00000040BCF0 0 Single reject switch: 00000000AB08 00000040BD08 0 Defective (transport direction collection tray) 00000000AB3C 00000040BD3C 0 Defective (transport direction reject box) 00000000AB6C 00000040BD6C 0 Device error during dispensing: 00000000AB90 00000040BD90 0 Too many bundle rejects 00000000ABAC 00000040BDAC 0 No separation possible 00000000ABC4 00000040BDC4 0 Too many multiple separations 00000000ABE4 00000040BDE4 0 Too many banknotes outside width tolerance 00000000AC10 00000040BE10 0 Paper jam at additional dispensing 00000000AC38 00000040BE38 0 Cassette supply changed: 00000000AC5C 00000040BE5C 0 Door status: 00000000AC74 00000040BE74 0 Watch door sensor (encryption): 00000000ACA0 00000040BEA0 0 Device type: 00000000ACB0 00000040BEB0 0 Front load 00000000ACBC 00000040BEBC 0 Rear load 00000000ACC8 00000040BEC8 0 Rear load with addit. module 00000000ACE8 00000040BEE8 0 ProCash Compact front load 00000000AD04 00000040BF04 0 ProCash Compact rear load 00000000AD20 00000040BF20 0 Front load SAT 2x00 00000000AD38 00000040BF38 0 Rear load SAT 2x00 00000000AD54 00000040BF54 0 Number of dispensing modules: %c 00000000AD80 00000040BF80 0 SW EDM: 00000000AD8C 00000040BF8C 0 Encryption active 00000000ADA0 00000040BFA0 0 Transport key missing 00000000ADB8 00000040BFB8 0 Line key missing 00000000ADCC 00000040BFCC 0 Initial value must be requested 00000000ADF8 00000040BFF8 0 Clearing status (after RESET/POWER UP): 00000000AE24 00000040C024 0 Transport paths were free 00000000AE40 00000040C040 0 No banknotes were accessible to the customer; transp.->reject successful 00000000AE90 00000040C090 0 Banknotes were accessible to the customer; transp.->retract successful 00000000AED8 00000040C0D8 0 Banknotes were accessible to the customer before power failure/RESET; they have been withdrawn in the meantime. 00000000AF50 00000040C150 0 No banknotes were accessible to the customer before power failure/RESET; an error occurred during clearing (see SRES) 00000000AFC8 00000040C1C8 0 Banknotes were accessible to the customer before power failure/RESET; an error occurred during clearing (see SRES) 00000000B040 00000040C240 0 Banknotes were accessible to the customer; retract was not performed, <RRET>==1 00000000B094 00000040C294 0 Reserved 00000000B0A0 00000040C2A0 0 Retract successful; an error occurred during cleaning of the singe reject switch (see SRES) 00000000B108 00000040C308 0 Status code after RESET or after POWER UP: %c 00000000B13C 00000040C33C 0 Self-test active: 00000000B158 00000040C358 0 Contents of the seven segment display: %s File pos Mem pos ID Text ======== ======= == ==== 00000000B188 00000040C388 0 Operator request: 00000000B19C 00000040C39C 0 Warning 00000000B1A8 00000040C3A8 0 C_OUT 00000000B1B0 00000040C3B0 0 Cash-out availability: 00000000B1C8 00000040C3C8 0 Minimum configuration missing (RR-box and/or cash-out cassette missing) 00000000B214 00000040C414 0 Device lock 00000000B224 00000040C424 0 Motor damaged 00000000B234 00000040C434 0 In power-up/initialization sequence 00000000B25C 00000040C45C 0 Security breaker activated 00000000B278 00000040C478 0 Tongs transport damaged 00000000B294 00000040C494 0 Cash-out possible 00000000B2A8 00000040C4A8 0 TRANSPORT 00000000B2B4 00000040C4B4 0 Characteristic of output transport: 00000000B2DC 00000040C4DC 0 In Safe front 00000000B2EC 00000040C4EC 0 In Safe rear 00000000B2FC 00000040C4FC 0 Out Safe rear 00000000B30C 00000040C50C 0 Out Safe front 00000000B324 00000040C524 0 Reject/Retract Cassette: 00000000B340 00000040C540 0 State: 00000000B34C 00000040C54C 0 Ready 00000000B364 00000040C564 0 Rejected Banknotes: %d 00000000B388 00000040C588 0 Retract Counter: %d 00000000B3AC 00000040C5AC 0 Cassette # %d: 00000000B3BC 00000040C5BC 0 Empty 00000000B3C4 00000040C5C4 0 Unknown Parameters 00000000B3D8 00000040C5D8 0 Defective 00000000B3E4 00000040C5E4 0 Printing Cassette 00000000B3F8 00000040C5F8 0 dis. module incl. cassette swapped 00000000B41C 00000040C61C 0 memory cannot be processed 00000000B438 00000040C638 0 internal magnet cannot be addressed 00000000B460 00000040C660 0 wrong cassette type 00000000B47C 00000040C67C 0 Currency: %s 00000000B494 00000040C694 0 Banknotes Value: %d 00000000B4B4 00000040C6B4 0 Banknotes Count: %d 00000000B4D0 00000040C6D0 0 Total Banknotes: %d 00000000B4E4 00000040C6E4 0 Total Cash: %d k (%d) 00000000B4FA 00000040C6FA 0 Total Dispenses Left (by 40 banknotes): %d 00000000B525 00000040C725 0 Total Dispenses Left (by 60 banknotes): %d 00000000B554 00000040C754 0 StClass = 00000000B564 00000040C764 0 STCLASS_OK 00000000B570 00000040C770 0 STCLASS_ERROR_COMM 00000000B584 00000040C784 0 STCLASS_ERROR_CNG 00000000B598 00000040C798 0 STCLASS_ERROR_EDS 00000000B5AC 00000040C7AC 0 STCLASS_ERROR_INI 00000000B5C0 00000040C7C0 0 STCLASS_ERROR_LDR 00000000B5D8 00000040C7D8 0 StCode = 00000000B5E8 00000040C7E8 0 CSC_INVALID_SPEC 00000000B5FC 00000040C7FC 0 CSC_INVALID_LOGICAL_ID 00000000B614 00000040C814 0 CSC_INVALID_PINDATA 00000000B62C 00000040C82C 0 CSC_INVALID_INLEN 00000000B640 00000040C840 0 CSC_DEVICE_ALREADY_OPENED 00000000B65C 00000040C85C 0 CNG_INVALID_VARIANT 00000000B674 00000040C874 0 CNG_INVALID_RESPONSE 00000000B68C 00000040C88C 0 CNG_INVALID_RECOVERY 00000000B6A4 00000040C8A4 0 CNG_FIRMWARE_INCOMPLETE 00000000B6C0 00000040C8C0 0 CNG_FRM_CONTEXT 00000000B6D4 00000040C8D4 0 CNG_FRM_SYNTAX 00000000B6E4 00000040C8E4 0 StWarn = 00000000B6F4 00000040C8F4 0 CNG_WARN_MONEY_NOT_REMOVED 00000000B710 00000040C910 0 CNG_WARN_MONEY_REMOVED File pos Mem pos ID Text ======== ======= == ==== 00000000B728 00000040C928 0 CNG_NO_FIRMWARE 00000000B73C 00000040C93C 0 CNG_NO_ACTUAL_FIRMWARE 00000000B754 00000040C954 0 CNG_WARN_LED 00000000B764 00000040C964 0 CSCCNG 00000000B770 00000040C970 0 Usage: %s <Command> 00000000B784 00000040C984 0 Available Commands: dvi/csi/ret/sht 00000000B7A8 00000040C9A8 0 dvi - device info; csi - cassettes info; ret - retract cash; sht - test shutter 00000000B80C 00000040CA0C 0 Please enter valid command! (dvi/csi/ret/sht) 00000000B83C 00000040CA3C 0 Connecting to the CNG... 00000000B858 00000040CA58 0 CscCngOpen/CscCdmOpen failed with error: 00000000B884 00000040CA84 0 Successfully connected! 00000000B8A0 00000040CAA0 0 Reading cassette status information... 00000000B8C8 00000040CAC8 0 CscCngStatusRead/CscCdmStatusRead failed with error: 00000000B900 00000040CB00 0 Success. Raw Response: %s 00000000B91C 00000040CB1C 0 Reading device status information... 00000000B944 00000040CB44 0 Retracting cash... 00000000B958 00000040CB58 0 CscCngTransport/CscCdmTransport failed with error: 00000000B98C 00000040CB8C 0 Cash successfully retracted! 00000000B9AC 00000040CBAC 0 Opening shutter... 00000000B9C0 00000040CBC0 0 CscCngShutter/CscCdmShutter failed with error: 00000000B9F0 00000040CBF0 0 Shutter successfully opened! Waiting 2 seconds... 00000000BA24 00000040CC24 0 Closing shutter... 00000000BA38 00000040CC38 0 Shutter successfully closed! 00000000BA58 00000040CC58 0 Disconnecting... 00000000BA6C 00000040CC6C 0 CscCngClose/CscCdmClose failed with error: 00000000BA98 00000040CC98 0 Disconnected. 00000000BB08 00000040CD08 0 C:\Documents and Settings\Administrator\My Documents\Visual Studio 2010\Projects\WincorNixdorf\Release\WN.pdb 00000000BFB2 00000040D1B2 0 lstrcmpA 00000000BFBE 00000040D1BE 0 lstrlenA 00000000BFCA 00000040D1CA 0 Sleep 00000000BFD0 00000040D1D0 0 KERNEL32.dll 00000000BFDE 00000040D1DE 0 CSCWCNG.dll 00000000BFEC 00000040D1EC 0 GetLastError 00000000BFFC 00000040D1FC 0 HeapFree 00000000C008 00000040D208 0 HeapAlloc 00000000C014 00000040D214 0 GetCommandLineA 00000000C026 00000040D226 0 HeapSetInformation 00000000C03C 00000040D23C 0 DecodePointer 00000000C04C 00000040D24C 0 UnhandledExceptionFilter 00000000C068 00000040D268 0 SetUnhandledExceptionFilter 00000000C086 00000040D286 0 IsDebuggerPresent 00000000C09A 00000040D29A 0 EncodePointer 00000000C0AA 00000040D2AA 0 TerminateProcess 00000000C0BE 00000040D2BE 0 GetCurrentProcess 00000000C0D2 00000040D2D2 0 HeapCreate 00000000C0E0 00000040D2E0 0 GetProcAddress 00000000C0F2 00000040D2F2 0 GetModuleHandleW 00000000C106 00000040D306 0 ExitProcess 00000000C114 00000040D314 0 WriteFile 00000000C120 00000040D320 0 GetStdHandle 00000000C130 00000040D330 0 GetModuleFileNameW 00000000C146 00000040D346 0 EnterCriticalSection 00000000C15E 00000040D35E 0 LeaveCriticalSection 00000000C176 00000040D376 0 GetModuleFileNameA 00000000C18C 00000040D38C 0 FreeEnvironmentStringsW 00000000C1A6 00000040D3A6 0 WideCharToMultiByte 00000000C1BC 00000040D3BC 0 GetEnvironmentStringsW 00000000C1D6 00000040D3D6 0 SetHandleCount 00000000C1E8 00000040D3E8 0 InitializeCriticalSectionAndSpinCount 00000000C210 00000040D410 0 GetFileType File pos Mem pos ID Text ======== ======= == ==== 00000000C21E 00000040D41E 0 GetStartupInfoW 00000000C230 00000040D430 0 DeleteCriticalSection 00000000C248 00000040D448 0 TlsAlloc 00000000C254 00000040D454 0 TlsGetValue 00000000C262 00000040D462 0 TlsSetValue 00000000C270 00000040D470 0 TlsFree 00000000C27A 00000040D47A 0 InterlockedIncrement 00000000C292 00000040D492 0 SetLastError 00000000C2A2 00000040D4A2 0 GetCurrentThreadId 00000000C2B8 00000040D4B8 0 InterlockedDecrement 00000000C2D0 00000040D4D0 0 QueryPerformanceCounter 00000000C2EA 00000040D4EA 0 GetTickCount 00000000C2FA 00000040D4FA 0 GetCurrentProcessId 00000000C310 00000040D510 0 GetSystemTimeAsFileTime 00000000C32A 00000040D52A 0 SetFilePointer 00000000C33C 00000040D53C 0 GetConsoleCP 00000000C34C 00000040D54C 0 GetConsoleMode 00000000C35E 00000040D55E 0 GetCPInfo 00000000C36A 00000040D56A 0 GetACP 00000000C374 00000040D574 0 GetOEMCP 00000000C380 00000040D580 0 IsValidCodePage 00000000C392 00000040D592 0 LoadLibraryW 00000000C3A2 00000040D5A2 0 RtlUnwind 00000000C3AE 00000040D5AE 0 SetStdHandle 00000000C3BE 00000040D5BE 0 WriteConsoleW 00000000C3CE 00000040D5CE 0 MultiByteToWideChar 00000000C3E4 00000040D5E4 0 LCMapStringW 00000000C3F4 00000040D5F4 0 GetStringTypeW 00000000C406 00000040D606 0 HeapReAlloc 00000000C414 00000040D614 0 IsProcessorFeaturePresent 00000000C430 00000040D630 0 HeapSize 00000000C43C 00000040D63C 0 FlushFileBuffers 00000000C450 00000040D650 0 CreateFileW 00000000C45E 00000040D65E 0 CloseHandle 00000000CACE 00000040E4CE 0 00000000CBAE 00000040E5AE 0 abcdefghijklmnopqrstuvwxyz 00000000CBCE 00000040E5CE 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ 00000000CCD2 00000040E6D2 0 00000000CDB9 00000040E7B9 0 abcdefghijklmnopqrstuvwxyz 00000000CDD9 00000040E7D9 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ 00000000D458 000000411058 0 <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> 00000000D4A3 0000004110A3 0 <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"> 00000000D4DB 0000004110DB 0 <security> 00000000D4EB 0000004110EB 0 <requestedPrivileges> 00000000D508 000000411108 0 <requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel> 00000000D568 000000411168 0 </requestedPrivileges> 00000000D586 000000411186 0 </security> 00000000D597 000000411197 0 </trustInfo> 00000000D5A7 0000004111A7 0 </assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD 00000000D61F 00000041201F 0 4*474C4O4U4g4o4z4 00000000D645 000000412045 0 707;7#8 00000000D651 000000412051 0 8_9n9 00000000D68B 00000041208B 0 5'5-5j5 00000000D6A1 0000004120A1 0 6"6D6 00000000D6B5 0000004120B5 0 7!7+7A7L7f7q7y7 00000000D6D1 0000004120D1 0 8*818\8 00000000D6DB 0000004120DB 0 9#9j9 00000000D6F1 0000004120F1 0 :J:g: 00000000D6FF 0000004120FF 0 ;L>S>e>k> 00000000D71B 00000041211B 0 ?"?0?E?O?u? File pos Mem pos ID Text ======== ======= == ==== 00000000D739 000000412139 0 0U0g0 00000000D741 000000412141 0 1b1<2D2\2w2 00000000D74D 00000041214D 0 2"3(3{4 00000000D75D 00000041215D 0 5"535>5 00000000D76B 00000041216B 0 7"7(7 00000000D777 000000412177 0 7*868P8v8|8 00000000D789 000000412189 0 9N9X9 00000000D799 000000412199 0 :M:p:v: 00000000D7B9 0000004121B9 0 ;%;+;3;9;E;K;X;b;h;r; 00000000D7D7 0000004121D7 0 <?<E<K<a<y< 00000000D7E5 0000004121E5 0 =<=F=~= 00000000D801 000000412201 0 > >'>,>4>=>I>N>S>Y>]>c>h>n>s> 00000000D83D 00000041223D 0 ?-?O?r? 00000000D85C 00000041225C 0 %020K0i0 00000000D875 000000412275 0 3b5<6 00000000D87B 00000041227B 0 7=7S7 00000000D899 000000412299 0 <W<d<n<|< 00000000D8B1 0000004122B1 0 =2=i= 00000000D8B9 0000004122B9 0 =!>>> 00000000D8DF 0000004122DF 0 050>0D0M0R0a0 00000000D8F3 0000004122F3 0 0"1q1 00000000D90D 00000041230D 0 4C4L4X4 00000000D939 000000412339 0 9 9"969<9E9X9|9 00000000D94B 00000041234B 0 :0:::q:w:|: 00000000D965 000000412365 0 :-;2;l;q;x;}; 00000000D987 000000412387 0 <-=2=;=J=m=r=w= 00000000D997 000000412397 0 =x>}> 00000000D9A3 0000004123A3 0 >7?Z?e?k?{? 00000000D9D5 0000004123D5 0 0;0U0o0q2x2~2 00000000DA03 000000412403 0 8*8J8 00000000DA0F 00000041240F 0 8'9T9_9 00000000DA27 000000412427 0 ;V<&= 00000000DA3C 00000041243C 0 G2Y2k2}2 00000000DA51 000000412451 0 3!333E3W3i3{3 00000000DA65 000000412465 0 3c4i4u4 00000000DA83 000000412483 0 5"5)50585@5H5T5]5b5h5r5{5 00000000DAB5 0000004124B5 0 7<7T7[7c7h7l7p7 00000000DAD9 0000004124D9 0 8J8P8T8X8\8 00000000DAF3 0000004124F3 0 9G9y9 00000000DB11 000000412511 0 9h:n: 00000000DB27 000000412527 0 =U>o>x> 00000000DB41 000000412541 0 0S0]0u0 00000000DB53 000000412553 0 2"2'262E2T2c2r2 00000000DB79 000000412579 0 3)383?3L3o3~3 00000000DBA1 0000004125A1 0 4 4$4(4,4p4>5N5Z5w5~5 00000000DBC5 0000004125C5 0 616;6Y6 00000000DBCD 0000004125CD 0 6e6w6 00000000DBE5 0000004125E5 0 717>7Q7d7z7 00000000DBFB 0000004125FB 0 8 8$8(8,8084888<8@8h8r8 00000000DC25 000000412625 0 9,9;9B9X9b9|9 00000000DC47 000000412647 0 :&:<:F:b:i:n:}: 00000000DC67 000000412667 0 ; ;*;F;K;Z;i;x; 00000000DC89 000000412689 0 <*<4<T<c<j<q< 00000000DCAB 0000004126AB 0 =*=4=N=]=d=z= 00000000DCCB 0000004126CB 0 >)>3>S>Z>_>n>}> 00000000DCED 0000004126ED 0 ?7?>?C?R?a?p? 00000000DD17 000000412717 0 0"010@0P0f0v0 00000000DD35 000000412735 0 1%141;1B1X1b1 00000000DD59 000000412759 0 2'2G2N2S2l2 00000000DD71 000000412771 0 34383<3@3D3H3 File pos Mem pos ID Text ======== ======= == ==== 00000000DD7F 00000041277F 0 3d3h3l3p3 00000000DDC3 0000004127C3 0 4 4044484<4@4D4H4L4P4T4X4\4 00000000DDDF 0000004127DF 0 4d4h4l4p4t4 00000000DE01 000000412801 0 5!575W5\5h5t5 00000000DE1B 00000041281B 0 6B6L6o6{6 00000000DE2F 00000041282F 0 737E7Q7p7|7 00000000DE49 000000412849 0 808=8\8h8 00000000DE5C 00000041285C 0 ,1014181<1H1L1 00000000DE89 000000412889 0 ;$;,;4;<;D;L; 00000000DEB9 0000004128B9 0 >$>@>L>h> 00000000DECB 0000004128CB 0 ?$?(?H?h? 00000000DEE9 0000004128E9 0 000P0 00000000DEFF 0000004128FF 0 1x8x9|9 00000000DF55 000000412955 0 : :0:4:8:<:@:D:H:L:P:T:X:\: 00000000DF71 000000412971 0 :d:h:l:p:t:x:|: 00000000DFAD 0000004129AD 0 :8;H;X;h;x; 00000000DFDD 0000004129DD 0 =(=,=0=4=8=<=@=D=H=L=X=\= 00000000DFF7 0000004129F7 0 =d=h=l=p=t=x=|= 000000008F7C 00000040A17C 0 (null) 000000009004 00000040A204 0 mscoree.dll 00000000901C 00000040A21C 0 runtime error 00000000994F 00000040AB4F 0 @Microsoft Visual C++ Runtime Library 0000000099AC 00000040ABAC 0 <program name unknown> 0000000099FC 00000040ABFC 0 Program: 000000009AB0 00000040ACB0 0 KERNEL32.DLL 000000009AF8 00000040ACF8 0 HH:mm:ss 000000009B0C 00000040AD0C 0 dddd, MMMM dd, yyyy 000000009B34 00000040AD34 0 MM/dd/yy 000000009B58 00000040AD58 0 December 000000009B6C 00000040AD6C 0 November 000000009B80 00000040AD80 0 October 000000009B90 00000040AD90 0 September 000000009BA4 00000040ADA4 0 August 000000009BCC 00000040ADCC 0 April 000000009BD8 00000040ADD8 0 March 000000009BE4 00000040ADE4 0 February 000000009BF8 00000040ADF8 0 January 000000009C68 00000040AE68 0 Saturday 000000009C7C 00000040AE7C 0 Friday 000000009C8C 00000040AE8C 0 Thursday 000000009CA0 00000040AEA0 0 Wednesday 000000009CB4 00000040AEB4 0 Tuesday 000000009CC4 00000040AEC4 0 Monday 000000009CD4 00000040AED4 0 Sunday 000000009F07 00000040B107 0 WUSER32.DLL 00000000A7AF 00000040B9AF 0 @CONOUT$
=== DOWNLOAD === Mirror provided by vx-underground.org, thx!