.- - -----÷M÷E÷N÷U÷------------------------------------------------------------- --- ---- -------------.
! WALL ! STATS ! GOODIES ! YARA ! FAQ ! RSS ! EMV !
`-------------- - --- ---------- -------- -------- -------- -------- ----------------- - ---- ---- --'
ATM MALWARE NOTICE
bf20c674a0533e7c0d825de097629a96cb42ae2d4840b07dd1168993d95163e8
Date...........: 2016-08-02
Family.........: ATMSpitter
File name......: ATMSpitter Unknown_CNG
File size......: 57.50 KB
Type file......: EXE/Windows
Virscan........: VT - HA
PDB Path found.: C:\Documents and Settings\Administrator\My Documents\Visual Studio 2010\Projects\WincorNixdorf\Release\WN.pdb
Documentation..: https://usa.visa.com/dam/VCOM/global/partner-with-us/documents/visa-technical-analysis-atm-jackpottingmalware.pdf
Entropy:
Binary Histogram:
=== SCREENSHOT ===
=== PEDUMP REPORT ===
=== MZ Header ===
signature: "MZ"
bytes_in_last_block: 144 0x90
blocks_in_file: 3 3
num_relocs: 0 0
header_paragraphs: 4 4
min_extra_paragraphs: 0 0
max_extra_paragraphs: 65535 0xffff
ss: 0 0
sp: 184 0xb8
checksum: 0 0
ip: 0 0
cs: 0 0
reloc_table_offset: 64 0x40
overlay_number: 0 0
reserved0: 0 0
oem_id: 0 0
oem_info: 0 0
reserved2: 0 0
reserved3: 0 0
reserved4: 0 0
reserved5: 0 0
reserved6: 0 0
lfanew: 224 0xe0
=== DOS STUB ===
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno|
00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
=== RICH Header ===
LIB_ID VERSION TIMES_USED
171 ab 30319 766f 23 17
158 9e 30319 766f 17 11
170 aa 30319 766f 87 57
4 4 8447 20ff 2 2
147 93 30729 7809 3 3
1 1 0 0 81 51
174 ae 30319 766f 1 1
157 9d 30319 766f 1 1
=== PE Header ===
signature: "PE\x00\x00"
# IMAGE_FILE_HEADER:
Machine: 332 0x14c x86
NumberOfSections: 5 5
TimeDateStamp: "2016-11-15 19:52:25"
PointerToSymbolTable: 0 0
NumberOfSymbols: 0 0
SizeOfOptionalHeader: 224 0xe0
Characteristics: 258 0x102 EXECUTABLE_IMAGE, 32BIT_MACHINE
# IMAGE_OPTIONAL_HEADER32:
Magic: 267 0x10b 32-bit executable
LinkerVersion: 10.0
SizeOfCode: 35328 0x8a00
SizeOfInitializedData: 22528 0x5800
SizeOfUninitializedData: 0 0
AddressOfEntryPoint: 5499 0x157b
BaseOfCode: 4096 0x1000
BaseOfData: 40960 0xa000
ImageBase: 4194304 0x400000
SectionAlignment: 4096 0x1000
FileAlignment: 512 0x200
OperatingSystemVersion: 5.1
ImageVersion: 0.0
SubsystemVersion: 5.1
Reserved1: 0 0
SizeOfImage: 77824 0x13000
SizeOfHeaders: 1024 0x400
CheckSum: 113934 0x1bd0e
Subsystem: 3 3 WINDOWS_CUI
DllCharacteristics: 33088 0x8140 DYNAMIC_BASE, NX_COMPAT
TERMINAL_SERVER_AWARE
SizeOfStackReserve: 1048576 0x100000
SizeOfStackCommit: 4096 0x1000
SizeOfHeapReserve: 1048576 0x100000
SizeOfHeapCommit: 4096 0x1000
LoaderFlags: 0 0
NumberOfRvaAndSizes: 16 0x10
=== DATA DIRECTORY ===
EXPORT rva:0x 0 size:0x 0
IMPORT rva:0x d054 size:0x 3c
RESOURCE rva:0x 11000 size:0x 1b4
EXCEPTION rva:0x 0 size:0x 0
SECURITY rva:0x 0 size:0x 0
BASERELOC rva:0x 12000 size:0x a08
DEBUG rva:0x a160 size:0x 1c
ARCHITECTURE rva:0x 0 size:0x 0
GLOBALPTR rva:0x 0 size:0x 0
TLS rva:0x 0 size:0x 0
LOAD_CONFIG rva:0x cca8 size:0x 40
Bound_IAT rva:0x 0 size:0x 0
IAT rva:0x a000 size:0x 120
Delay_IAT rva:0x 0 size:0x 0
CLR_Header rva:0x 0 size:0x 0
rva:0x 0 size:0x 0
=== SECTIONS ===
NAME RVA VSZ RAW_SZ RAW_PTR nREL REL_PTR nLINE LINE_PTR FLAGS
.text 1000 889f 8a00 400 0 0 0 0 60000020 R-X CODE
.rdata a000 366a 3800 8e00 0 0 0 0 40000040 R-- IDATA
.data e000 2ba4 e00 c600 0 0 0 0 c0000040 RW- IDATA
.rsrc 11000 1b4 200 d400 0 0 0 0 40000040 R-- IDATA
.reloc 12000 ece 1000 d600 0 0 0 0 42000040 R-- IDATA DISCARDABLE
=== RESOURCES ===
FILE_OFFSET CP LANG SIZE TYPE NAME
0xd458 1252 0x409 346 MANIFEST #1
=== IMPORTS ===
MODULE_NAME HINT ORD FUNCTION_NAME
KERNEL32.dll 4b2 Sleep
KERNEL32.dll 54d lstrlenA
KERNEL32.dll 541 lstrcmpA
KERNEL32.dll 202 GetLastError
KERNEL32.dll 2cf HeapFree
KERNEL32.dll 2cb HeapAlloc
KERNEL32.dll 186 GetCommandLineA
KERNEL32.dll 2d3 HeapSetInformation
KERNEL32.dll ca DecodePointer
KERNEL32.dll 4d3 UnhandledExceptionFilter
KERNEL32.dll 4a5 SetUnhandledExceptionFilter
KERNEL32.dll 300 IsDebuggerPresent
KERNEL32.dll ea EncodePointer
KERNEL32.dll 4c0 TerminateProcess
KERNEL32.dll 1c0 GetCurrentProcess
KERNEL32.dll 2cd HeapCreate
KERNEL32.dll 245 GetProcAddress
KERNEL32.dll 218 GetModuleHandleW
KERNEL32.dll 119 ExitProcess
KERNEL32.dll 525 WriteFile
KERNEL32.dll 264 GetStdHandle
KERNEL32.dll 214 GetModuleFileNameW
KERNEL32.dll ee EnterCriticalSection
KERNEL32.dll 339 LeaveCriticalSection
KERNEL32.dll 213 GetModuleFileNameA
KERNEL32.dll 161 FreeEnvironmentStringsW
KERNEL32.dll 511 WideCharToMultiByte
KERNEL32.dll 1da GetEnvironmentStringsW
KERNEL32.dll 46f SetHandleCount
KERNEL32.dll 2e3 InitializeCriticalSectionAndSpinCount
KERNEL32.dll 1f3 GetFileType
KERNEL32.dll 263 GetStartupInfoW
KERNEL32.dll d1 DeleteCriticalSection
KERNEL32.dll 4c5 TlsAlloc
KERNEL32.dll 4c7 TlsGetValue
KERNEL32.dll 4c8 TlsSetValue
KERNEL32.dll 4c6 TlsFree
KERNEL32.dll 2ef InterlockedIncrement
KERNEL32.dll 473 SetLastError
KERNEL32.dll 1c5 GetCurrentThreadId
KERNEL32.dll 2eb InterlockedDecrement
KERNEL32.dll 3a7 QueryPerformanceCounter
KERNEL32.dll 293 GetTickCount
KERNEL32.dll 1c1 GetCurrentProcessId
KERNEL32.dll 279 GetSystemTimeAsFileTime
KERNEL32.dll 466 SetFilePointer
KERNEL32.dll 19a GetConsoleCP
KERNEL32.dll 1ac GetConsoleMode
KERNEL32.dll 172 GetCPInfo
KERNEL32.dll 168 GetACP
KERNEL32.dll 237 GetOEMCP
KERNEL32.dll 30a IsValidCodePage
KERNEL32.dll 33f LoadLibraryW
KERNEL32.dll 418 RtlUnwind
KERNEL32.dll 487 SetStdHandle
KERNEL32.dll 524 WriteConsoleW
KERNEL32.dll 367 MultiByteToWideChar
KERNEL32.dll 32d LCMapStringW
KERNEL32.dll 269 GetStringTypeW
KERNEL32.dll 2d2 HeapReAlloc
KERNEL32.dll 304 IsProcessorFeaturePresent
KERNEL32.dll 2d4 HeapSize
KERNEL32.dll 157 FlushFileBuffers
KERNEL32.dll 8f CreateFileW
KERNEL32.dll 52 CloseHandle
CSCWCNG.dll 15
CSCWCNG.dll 2b
CSCWCNG.dll 2d
CSCWCNG.dll 16
CSCWCNG.dll 2c
=== Packer / Compiler ===
MS Visual C++ v8.0
File pos Mem pos ID Text
======== ======= == ====
00000000004D 00000040004D 0 !This program cannot be run in DOS mode.
0000000000D0 0000004000D0 0 RichU
0000000001D8 0000004001D8 0 .text
000000000200 000000400200 0 .rdata
000000000227 000000400227 0 @.data
000000000250 000000400250 0 .rsrc
000000000277 000000400277 0 @.reloc
000000000DCD 0000004019CD 0 t%HHt
00000000100F 000000401C0F 0 HHtXHHt
0000000010FF 000000401CFF 0 HHty+
000000001565 000000402165 0 ?If90t
00000000194F 00000040254F 0 PPPPP
000000001AF1 0000004026F1 0 uTVWh
000000001DD7 0000004029D7 0 PPPPP
000000001E59 000000402A59 0 SSSSS
0000000028F0 0000004034F0 0 t?VSP
00000000294A 00000040354A 0 PPPPP
000000002A7B 00000040367B 0 < tK< tG
000000002BC5 0000004037C5 0 wf93t
000000002BEA 0000004037EA 0 @PSVV
000000002CBA 0000004038BA 0 SWf9M
000000004A92 000000405692 0 QSWVj
000000004BDB 0000004057DB 0 v N+D$
00000000585A 00000040645A 0 ~,WPV
0000000059DF 0000004065DF 0 URPQQh
000000005FC3 000000406BC3 0 9](SS
000000006109 000000406D09 0 t"SS9] u
0000000061C9 000000406DC9 0 9] SS
00000000668B 00000040728B 0 v4;5\
000000006789 000000407389 0 vL;5t
000000006E86 000000407A86 0 PPPPPPPP
000000006F66 000000407B66 0 PPPPPPPP
000000007163 000000407D63 0 SVWUj
000000007204 000000407E04 0 ;t$,v-
000000007289 000000407E89 0 UQPXY]Y[
0000000076A2 0000004082A2 0 w:t1
0000000076E3 0000004082E3 0 w2t)
00000000775F 00000040835F 0 w9t(-
00000000776B 00000040836B 0 Hu7h(
00000000779F 00000040839F 0 (t%Ht
0000000078D2 0000004084D2 0 ><,t#<;t
00000000796B 00000040856B 0 Mt,Ht
0000000088FE 0000004094FE 0 T$<Wf
000000008B2E 00000040972E 0 D$HPh
000000008F8C 00000040A18C 0 (null)
000000008FB9 00000040A1B9 0 ( 8PX
000000008FC1 00000040A1C1 0 700WP
000000008FD9 00000040A1D9 0 xpxxxx
000000008FF4 00000040A1F4 0 CorExitProcess
000000009ACC 00000040ACCC 0 FlsFree
000000009AD4 00000040ACD4 0 FlsSetValue
000000009AE0 00000040ACE0 0 FlsGetValue
000000009AEC 00000040ACEC 0 FlsAlloc
000000009D1C 00000040AF1C 0 HH:mm:ss
000000009D28 00000040AF28 0 dddd, MMMM dd, yyyy
000000009D3C 00000040AF3C 0 MM/dd/yy
000000009D50 00000040AF50 0 December
000000009D5C 00000040AF5C 0 November
000000009D68 00000040AF68 0 October
000000009D70 00000040AF70 0 September
File pos Mem pos ID Text
======== ======= == ====
000000009D7C 00000040AF7C 0 August
000000009D94 00000040AF94 0 April
000000009D9C 00000040AF9C 0 March
000000009DA4 00000040AFA4 0 February
000000009DB0 00000040AFB0 0 January
000000009DE8 00000040AFE8 0 Saturday
000000009DF4 00000040AFF4 0 Friday
000000009DFC 00000040AFFC 0 Thursday
000000009E08 00000040B008 0 Wednesday
000000009E14 00000040B014 0 Tuesday
000000009E1C 00000040B01C 0 Monday
000000009E24 00000040B024 0 Sunday
000000009E6D 00000040B06D 0 ('8PW
000000009E76 00000040B076 0 700PP
000000009E91 00000040B091 0 xppwpp
000000009EA4 00000040B0A4 0 GetProcessWindowStation
000000009EBC 00000040B0BC 0 GetUserObjectInformationW
000000009ED8 00000040B0D8 0 GetLastActivePopup
000000009EEC 00000040B0EC 0 GetActiveWindow
000000009EFC 00000040B0FC 0 MessageBoxW
000000009F3F 00000040B13F 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]
000000009F80 00000040B180 0 abcdefghijklmnopqrstuvwxyz{|}~
00000000A548 00000040B748 0 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]
00000000A589 00000040B789 0 abcdefghijklmnopqrstuvwxyz{|}~
00000000A6C8 00000040B8C8 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]
00000000A709 00000040B909 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
00000000A7D0 00000040B9D0 0 Safety switch:
00000000A7E8 00000040B9E8 0 Closed
00000000A7F0 00000040B9F0 0 Unknown (%s)
00000000A808 00000040BA08 0 Device lock after money retract:
00000000A83C 00000040BA3C 0 Cassettes can be processed:
00000000A85C 00000040BA5C 0 SHERR
00000000A864 00000040BA64 0 Error at shutter:
00000000A878 00000040BA78 0 Blocked
00000000A884 00000040BA84 0 No error
00000000A898 00000040BA98 0 Shutter status:
00000000A8AC 00000040BAAC 0 Missing
00000000A8B8 00000040BAB8 0 Undefined
00000000A8C4 00000040BAC4 0 Diverter
00000000A8D4 00000040BAD4 0 Banknotes output status:
00000000A8F0 00000040BAF0 0 Banknotes were accessible to the customer
00000000A91C 00000040BB1C 0 Banknotes have been withdrawn
00000000A93C 00000040BB3C 0 Retained
00000000A948 00000040BB48 0 No money was accessible to the customer
00000000A978 00000040BB78 0 Transport error:
00000000A990 00000040BB90 0 Manipulation at the output photo sensor
00000000A9C8 00000040BBC8 0 Transport status:
00000000A9DC 00000040BBDC 0 No banknotes available
00000000A9F4 00000040BBF4 0 Cassette
00000000AA00 00000040BC00 0 Collection tray
00000000AA14 00000040BC14 0 Reject box
00000000AA20 00000040BC20 0 Stop over (cash out)
00000000AA38 00000040BC38 0 Withdrawal position
00000000AA50 00000040BC50 0 Retract box
00000000AA60 00000040BC60 0 Undefined position
00000000AA78 00000040BC78 0 Status of the transport path after the last command:
00000000AAB0 00000040BCB0 0 Transport path was free
00000000AACC 00000040BCCC 0 Transport path was not free
00000000AAF0 00000040BCF0 0 Single reject switch:
00000000AB08 00000040BD08 0 Defective (transport direction collection tray)
File pos Mem pos ID Text
======== ======= == ====
00000000AB3C 00000040BD3C 0 Defective (transport direction reject box)
00000000AB6C 00000040BD6C 0 Device error during dispensing:
00000000AB90 00000040BD90 0 Too many bundle rejects
00000000ABAC 00000040BDAC 0 No separation possible
00000000ABC4 00000040BDC4 0 Too many multiple separations
00000000ABE4 00000040BDE4 0 Too many banknotes outside width tolerance
00000000AC10 00000040BE10 0 Paper jam at additional dispensing
00000000AC38 00000040BE38 0 Cassette supply changed:
00000000AC5C 00000040BE5C 0 Door status:
00000000AC74 00000040BE74 0 Watch door sensor (encryption):
00000000ACA0 00000040BEA0 0 Device type:
00000000ACB0 00000040BEB0 0 Front load
00000000ACBC 00000040BEBC 0 Rear load
00000000ACC8 00000040BEC8 0 Rear load with addit. module
00000000ACE8 00000040BEE8 0 ProCash Compact front load
00000000AD04 00000040BF04 0 ProCash Compact rear load
00000000AD20 00000040BF20 0 Front load SAT 2x00
00000000AD38 00000040BF38 0 Rear load SAT 2x00
00000000AD54 00000040BF54 0 Number of dispensing modules: %c
00000000AD80 00000040BF80 0 SW EDM:
00000000AD8C 00000040BF8C 0 Encryption active
00000000ADA0 00000040BFA0 0 Transport key missing
00000000ADB8 00000040BFB8 0 Line key missing
00000000ADCC 00000040BFCC 0 Initial value must be requested
00000000ADF8 00000040BFF8 0 Clearing status (after RESET/POWER UP):
00000000AE24 00000040C024 0 Transport paths were free
00000000AE40 00000040C040 0 No banknotes were accessible to the customer; transp.->reject successful
00000000AE90 00000040C090 0 Banknotes were accessible to the customer; transp.->retract successful
00000000AED8 00000040C0D8 0 Banknotes were accessible to the customer before power failure/RESET; they have been withdrawn in the meantime.
00000000AF50 00000040C150 0 No banknotes were accessible to the customer before power failure/RESET; an error occurred during clearing (see SRES)
00000000AFC8 00000040C1C8 0 Banknotes were accessible to the customer before power failure/RESET; an error occurred during clearing (see SRES)
00000000B040 00000040C240 0 Banknotes were accessible to the customer; retract was not performed, <RRET>==1
00000000B094 00000040C294 0 Reserved
00000000B0A0 00000040C2A0 0 Retract successful; an error occurred during cleaning of the singe reject switch (see SRES)
00000000B108 00000040C308 0 Status code after RESET or after POWER UP: %c
00000000B13C 00000040C33C 0 Self-test active:
00000000B158 00000040C358 0 Contents of the seven segment display: %s
00000000B188 00000040C388 0 Operator request:
00000000B19C 00000040C39C 0 Warning
00000000B1A8 00000040C3A8 0 C_OUT
00000000B1B0 00000040C3B0 0 Cash-out availability:
00000000B1C8 00000040C3C8 0 Minimum configuration missing (RR-box and/or cash-out cassette missing)
00000000B214 00000040C414 0 Device lock
00000000B224 00000040C424 0 Motor damaged
00000000B234 00000040C434 0 In power-up/initialization sequence
00000000B25C 00000040C45C 0 Security breaker activated
00000000B278 00000040C478 0 Tongs transport damaged
00000000B294 00000040C494 0 Cash-out possible
00000000B2A8 00000040C4A8 0 TRANSPORT
00000000B2B4 00000040C4B4 0 Characteristic of output transport:
00000000B2DC 00000040C4DC 0 In Safe front
00000000B2EC 00000040C4EC 0 In Safe rear
00000000B2FC 00000040C4FC 0 Out Safe rear
00000000B30C 00000040C50C 0 Out Safe front
00000000B324 00000040C524 0 Reject/Retract Cassette:
00000000B340 00000040C540 0 State:
00000000B34C 00000040C54C 0 Ready
00000000B364 00000040C564 0 Rejected Banknotes: %d
00000000B388 00000040C588 0 Retract Counter: %d
00000000B3AC 00000040C5AC 0 Cassette # %d:
File pos Mem pos ID Text
======== ======= == ====
00000000B3BC 00000040C5BC 0 Empty
00000000B3C4 00000040C5C4 0 Unknown Parameters
00000000B3D8 00000040C5D8 0 Defective
00000000B3E4 00000040C5E4 0 Printing Cassette
00000000B3F8 00000040C5F8 0 dis. module incl. cassette swapped
00000000B41C 00000040C61C 0 memory cannot be processed
00000000B438 00000040C638 0 internal magnet cannot be addressed
00000000B460 00000040C660 0 wrong cassette type
00000000B47C 00000040C67C 0 Currency: %s
00000000B494 00000040C694 0 Banknotes Value: %d
00000000B4B4 00000040C6B4 0 Banknotes Count: %d
00000000B4D0 00000040C6D0 0 Total Banknotes: %d
00000000B4E4 00000040C6E4 0 Total Cash: %d k (%d)
00000000B4FA 00000040C6FA 0 Total Dispenses Left (by 40 banknotes): %d
00000000B525 00000040C725 0 Total Dispenses Left (by 60 banknotes): %d
00000000B554 00000040C754 0 StClass =
00000000B564 00000040C764 0 STCLASS_OK
00000000B570 00000040C770 0 STCLASS_ERROR_COMM
00000000B584 00000040C784 0 STCLASS_ERROR_CNG
00000000B598 00000040C798 0 STCLASS_ERROR_EDS
00000000B5AC 00000040C7AC 0 STCLASS_ERROR_INI
00000000B5C0 00000040C7C0 0 STCLASS_ERROR_LDR
00000000B5D8 00000040C7D8 0 StCode =
00000000B5E8 00000040C7E8 0 CSC_INVALID_SPEC
00000000B5FC 00000040C7FC 0 CSC_INVALID_LOGICAL_ID
00000000B614 00000040C814 0 CSC_INVALID_PINDATA
00000000B62C 00000040C82C 0 CSC_INVALID_INLEN
00000000B640 00000040C840 0 CSC_DEVICE_ALREADY_OPENED
00000000B65C 00000040C85C 0 CNG_INVALID_VARIANT
00000000B674 00000040C874 0 CNG_INVALID_RESPONSE
00000000B68C 00000040C88C 0 CNG_INVALID_RECOVERY
00000000B6A4 00000040C8A4 0 CNG_FIRMWARE_INCOMPLETE
00000000B6C0 00000040C8C0 0 CNG_FRM_CONTEXT
00000000B6D4 00000040C8D4 0 CNG_FRM_SYNTAX
00000000B6E4 00000040C8E4 0 StWarn =
00000000B6F4 00000040C8F4 0 CNG_WARN_MONEY_NOT_REMOVED
00000000B710 00000040C910 0 CNG_WARN_MONEY_REMOVED
00000000B728 00000040C928 0 CNG_NO_FIRMWARE
00000000B73C 00000040C93C 0 CNG_NO_ACTUAL_FIRMWARE
00000000B754 00000040C954 0 CNG_WARN_LED
00000000B764 00000040C964 0 CSCCNG
00000000B770 00000040C970 0 Usage: %s <Command>
00000000B784 00000040C984 0 Available Commands: dvi/csi/ret/sht
00000000B7A8 00000040C9A8 0 dvi - device info; csi - cassettes info; ret - retract cash; sht - test shutter
00000000B80C 00000040CA0C 0 Please enter valid command! (dvi/csi/ret/sht)
00000000B83C 00000040CA3C 0 Connecting to the CNG...
00000000B858 00000040CA58 0 CscCngOpen/CscCdmOpen failed with error:
00000000B884 00000040CA84 0 Successfully connected!
00000000B8A0 00000040CAA0 0 Reading cassette status information...
00000000B8C8 00000040CAC8 0 CscCngStatusRead/CscCdmStatusRead failed with error:
00000000B900 00000040CB00 0 Success. Raw Response: %s
00000000B91C 00000040CB1C 0 Reading device status information...
00000000B944 00000040CB44 0 Retracting cash...
00000000B958 00000040CB58 0 CscCngTransport/CscCdmTransport failed with error:
00000000B98C 00000040CB8C 0 Cash successfully retracted!
00000000B9AC 00000040CBAC 0 Opening shutter...
00000000B9C0 00000040CBC0 0 CscCngShutter/CscCdmShutter failed with error:
00000000B9F0 00000040CBF0 0 Shutter successfully opened! Waiting 2 seconds...
00000000BA24 00000040CC24 0 Closing shutter...
00000000BA38 00000040CC38 0 Shutter successfully closed!
File pos Mem pos ID Text
======== ======= == ====
00000000BA58 00000040CC58 0 Disconnecting...
00000000BA6C 00000040CC6C 0 CscCngClose/CscCdmClose failed with error:
00000000BA98 00000040CC98 0 Disconnected.
00000000BB08 00000040CD08 0 C:\Documents and Settings\Administrator\My Documents\Visual Studio 2010\Projects\WincorNixdorf\Release\WN.pdb
00000000BFB2 00000040D1B2 0 lstrcmpA
00000000BFBE 00000040D1BE 0 lstrlenA
00000000BFCA 00000040D1CA 0 Sleep
00000000BFD0 00000040D1D0 0 KERNEL32.dll
00000000BFDE 00000040D1DE 0 CSCWCNG.dll
00000000BFEC 00000040D1EC 0 GetLastError
00000000BFFC 00000040D1FC 0 HeapFree
00000000C008 00000040D208 0 HeapAlloc
00000000C014 00000040D214 0 GetCommandLineA
00000000C026 00000040D226 0 HeapSetInformation
00000000C03C 00000040D23C 0 DecodePointer
00000000C04C 00000040D24C 0 UnhandledExceptionFilter
00000000C068 00000040D268 0 SetUnhandledExceptionFilter
00000000C086 00000040D286 0 IsDebuggerPresent
00000000C09A 00000040D29A 0 EncodePointer
00000000C0AA 00000040D2AA 0 TerminateProcess
00000000C0BE 00000040D2BE 0 GetCurrentProcess
00000000C0D2 00000040D2D2 0 HeapCreate
00000000C0E0 00000040D2E0 0 GetProcAddress
00000000C0F2 00000040D2F2 0 GetModuleHandleW
00000000C106 00000040D306 0 ExitProcess
00000000C114 00000040D314 0 WriteFile
00000000C120 00000040D320 0 GetStdHandle
00000000C130 00000040D330 0 GetModuleFileNameW
00000000C146 00000040D346 0 EnterCriticalSection
00000000C15E 00000040D35E 0 LeaveCriticalSection
00000000C176 00000040D376 0 GetModuleFileNameA
00000000C18C 00000040D38C 0 FreeEnvironmentStringsW
00000000C1A6 00000040D3A6 0 WideCharToMultiByte
00000000C1BC 00000040D3BC 0 GetEnvironmentStringsW
00000000C1D6 00000040D3D6 0 SetHandleCount
00000000C1E8 00000040D3E8 0 InitializeCriticalSectionAndSpinCount
00000000C210 00000040D410 0 GetFileType
00000000C21E 00000040D41E 0 GetStartupInfoW
00000000C230 00000040D430 0 DeleteCriticalSection
00000000C248 00000040D448 0 TlsAlloc
00000000C254 00000040D454 0 TlsGetValue
00000000C262 00000040D462 0 TlsSetValue
00000000C270 00000040D470 0 TlsFree
00000000C27A 00000040D47A 0 InterlockedIncrement
00000000C292 00000040D492 0 SetLastError
00000000C2A2 00000040D4A2 0 GetCurrentThreadId
00000000C2B8 00000040D4B8 0 InterlockedDecrement
00000000C2D0 00000040D4D0 0 QueryPerformanceCounter
00000000C2EA 00000040D4EA 0 GetTickCount
00000000C2FA 00000040D4FA 0 GetCurrentProcessId
00000000C310 00000040D510 0 GetSystemTimeAsFileTime
00000000C32A 00000040D52A 0 SetFilePointer
00000000C33C 00000040D53C 0 GetConsoleCP
00000000C34C 00000040D54C 0 GetConsoleMode
00000000C35E 00000040D55E 0 GetCPInfo
00000000C36A 00000040D56A 0 GetACP
00000000C374 00000040D574 0 GetOEMCP
00000000C380 00000040D580 0 IsValidCodePage
00000000C392 00000040D592 0 LoadLibraryW
00000000C3A2 00000040D5A2 0 RtlUnwind
File pos Mem pos ID Text
======== ======= == ====
00000000C3AE 00000040D5AE 0 SetStdHandle
00000000C3BE 00000040D5BE 0 WriteConsoleW
00000000C3CE 00000040D5CE 0 MultiByteToWideChar
00000000C3E4 00000040D5E4 0 LCMapStringW
00000000C3F4 00000040D5F4 0 GetStringTypeW
00000000C406 00000040D606 0 HeapReAlloc
00000000C414 00000040D614 0 IsProcessorFeaturePresent
00000000C430 00000040D630 0 HeapSize
00000000C43C 00000040D63C 0 FlushFileBuffers
00000000C450 00000040D650 0 CreateFileW
00000000C45E 00000040D65E 0 CloseHandle
00000000CACE 00000040E4CE 0
00000000CBAE 00000040E5AE 0 abcdefghijklmnopqrstuvwxyz
00000000CBCE 00000040E5CE 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ
00000000CCD2 00000040E6D2 0
00000000CDB9 00000040E7B9 0 abcdefghijklmnopqrstuvwxyz
00000000CDD9 00000040E7D9 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ
00000000D458 000000411058 0 <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
00000000D4A3 0000004110A3 0 <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
00000000D4DB 0000004110DB 0 <security>
00000000D4EB 0000004110EB 0 <requestedPrivileges>
00000000D508 000000411108 0 <requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>
00000000D568 000000411168 0 </requestedPrivileges>
00000000D586 000000411186 0 </security>
00000000D597 000000411197 0 </trustInfo>
00000000D5A7 0000004111A7 0 </assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD
00000000D61F 00000041201F 0 4*474C4O4U4g4o4z4
00000000D645 000000412045 0 707;7#8
00000000D651 000000412051 0 8_9n9
00000000D68B 00000041208B 0 5'5-5j5
00000000D6A1 0000004120A1 0 6"6D6
00000000D6B5 0000004120B5 0 7!7+7A7L7f7q7y7
00000000D6D1 0000004120D1 0 8*818\8
00000000D6DB 0000004120DB 0 9#9j9
00000000D6F1 0000004120F1 0 :J:g:
00000000D6FF 0000004120FF 0 ;L>S>e>k>
00000000D71B 00000041211B 0 ?"?0?E?O?u?
00000000D739 000000412139 0 0U0g0
00000000D741 000000412141 0 1b1<2D2\2w2
00000000D74D 00000041214D 0 2"3(3{4
00000000D75D 00000041215D 0 5"535>5
00000000D76B 00000041216B 0 7"7(7
00000000D777 000000412177 0 7*868P8v8|8
00000000D789 000000412189 0 9N9X9
00000000D799 000000412199 0 :M:p:v:
00000000D7B9 0000004121B9 0 ;%;+;3;9;E;K;X;b;h;r;
00000000D7D7 0000004121D7 0 <?<E<K<a<y<
00000000D7E5 0000004121E5 0 =<=F=~=
00000000D801 000000412201 0 > >'>,>4>=>I>N>S>Y>]>c>h>n>s>
00000000D83D 00000041223D 0 ?-?O?r?
00000000D85C 00000041225C 0 %020K0i0
00000000D875 000000412275 0 3b5<6
00000000D87B 00000041227B 0 7=7S7
00000000D899 000000412299 0 <W<d<n<|<
00000000D8B1 0000004122B1 0 =2=i=
00000000D8B9 0000004122B9 0 =!>>>
00000000D8DF 0000004122DF 0 050>0D0M0R0a0
00000000D8F3 0000004122F3 0 0"1q1
00000000D90D 00000041230D 0 4C4L4X4
00000000D939 000000412339 0 9 9"969<9E9X9|9
File pos Mem pos ID Text
======== ======= == ====
00000000D94B 00000041234B 0 :0:::q:w:|:
00000000D965 000000412365 0 :-;2;l;q;x;};
00000000D987 000000412387 0 <-=2=;=J=m=r=w=
00000000D997 000000412397 0 =x>}>
00000000D9A3 0000004123A3 0 >7?Z?e?k?{?
00000000D9D5 0000004123D5 0 0;0U0o0q2x2~2
00000000DA03 000000412403 0 8*8J8
00000000DA0F 00000041240F 0 8'9T9_9
00000000DA27 000000412427 0 ;V<&=
00000000DA3C 00000041243C 0 G2Y2k2}2
00000000DA51 000000412451 0 3!333E3W3i3{3
00000000DA65 000000412465 0 3c4i4u4
00000000DA83 000000412483 0 5"5)50585@5H5T5]5b5h5r5{5
00000000DAB5 0000004124B5 0 7<7T7[7c7h7l7p7
00000000DAD9 0000004124D9 0 8J8P8T8X8\8
00000000DAF3 0000004124F3 0 9G9y9
00000000DB11 000000412511 0 9h:n:
00000000DB27 000000412527 0 =U>o>x>
00000000DB41 000000412541 0 0S0]0u0
00000000DB53 000000412553 0 2"2'262E2T2c2r2
00000000DB79 000000412579 0 3)383?3L3o3~3
00000000DBA1 0000004125A1 0 4 4$4(4,4p4>5N5Z5w5~5
00000000DBC5 0000004125C5 0 616;6Y6
00000000DBCD 0000004125CD 0 6e6w6
00000000DBE5 0000004125E5 0 717>7Q7d7z7
00000000DBFB 0000004125FB 0 8 8$8(8,8084888<8@8h8r8
00000000DC25 000000412625 0 9,9;9B9X9b9|9
00000000DC47 000000412647 0 :&:<:F:b:i:n:}:
00000000DC67 000000412667 0 ; ;*;F;K;Z;i;x;
00000000DC89 000000412689 0 <*<4<T<c<j<q<
00000000DCAB 0000004126AB 0 =*=4=N=]=d=z=
00000000DCCB 0000004126CB 0 >)>3>S>Z>_>n>}>
00000000DCED 0000004126ED 0 ?7?>?C?R?a?p?
00000000DD17 000000412717 0 0"010@0P0f0v0
00000000DD35 000000412735 0 1%141;1B1X1b1
00000000DD59 000000412759 0 2'2G2N2S2l2
00000000DD71 000000412771 0 34383<3@3D3H3
00000000DD7F 00000041277F 0 3d3h3l3p3
00000000DDC3 0000004127C3 0 4 4044484<4@4D4H4L4P4T4X4\4
00000000DDDF 0000004127DF 0 4d4h4l4p4t4
00000000DE01 000000412801 0 5!575W5\5h5t5
00000000DE1B 00000041281B 0 6B6L6o6{6
00000000DE2F 00000041282F 0 737E7Q7p7|7
00000000DE49 000000412849 0 808=8\8h8
00000000DE5C 00000041285C 0 ,1014181<1H1L1
00000000DE89 000000412889 0 ;$;,;4;<;D;L;
00000000DEB9 0000004128B9 0 >$>@>L>h>
00000000DECB 0000004128CB 0 ?$?(?H?h?
00000000DEE9 0000004128E9 0 000P0
00000000DEFF 0000004128FF 0 1x8x9|9
00000000DF55 000000412955 0 : :0:4:8:<:@:D:H:L:P:T:X:\:
00000000DF71 000000412971 0 :d:h:l:p:t:x:|:
00000000DFAD 0000004129AD 0 :8;H;X;h;x;
00000000DFDD 0000004129DD 0 =(=,=0=4=8=<=@=D=H=L=X=\=
00000000DFF7 0000004129F7 0 =d=h=l=p=t=x=|=
000000008F7C 00000040A17C 0 (null)
000000009004 00000040A204 0 mscoree.dll
00000000901C 00000040A21C 0 runtime error
00000000994F 00000040AB4F 0 @Microsoft Visual C++ Runtime Library
0000000099AC 00000040ABAC 0 <program name unknown>
File pos Mem pos ID Text
======== ======= == ====
0000000099FC 00000040ABFC 0 Program:
000000009AB0 00000040ACB0 0 KERNEL32.DLL
000000009AF8 00000040ACF8 0 HH:mm:ss
000000009B0C 00000040AD0C 0 dddd, MMMM dd, yyyy
000000009B34 00000040AD34 0 MM/dd/yy
000000009B58 00000040AD58 0 December
000000009B6C 00000040AD6C 0 November
000000009B80 00000040AD80 0 October
000000009B90 00000040AD90 0 September
000000009BA4 00000040ADA4 0 August
000000009BCC 00000040ADCC 0 April
000000009BD8 00000040ADD8 0 March
000000009BE4 00000040ADE4 0 February
000000009BF8 00000040ADF8 0 January
000000009C68 00000040AE68 0 Saturday
000000009C7C 00000040AE7C 0 Friday
000000009C8C 00000040AE8C 0 Thursday
000000009CA0 00000040AEA0 0 Wednesday
000000009CB4 00000040AEB4 0 Tuesday
000000009CC4 00000040AEC4 0 Monday
000000009CD4 00000040AED4 0 Sunday
000000009F07 00000040B107 0 WUSER32.DLL
00000000A7AF 00000040B9AF 0 @CONOUT$
00000000004D 00000040004D 0 !This program cannot be run in DOS mode.
0000000000D0 0000004000D0 0 RichU
0000000001D8 0000004001D8 0 .text
000000000200 000000400200 0 .rdata
000000000227 000000400227 0 @.data
000000000250 000000400250 0 .rsrc
000000000277 000000400277 0 @.reloc
000000000DCD 0000004019CD 0 t%HHt
00000000100F 000000401C0F 0 HHtXHHt
0000000010FF 000000401CFF 0 HHty+
000000001565 000000402165 0 ?If90t
00000000194F 00000040254F 0 PPPPP
000000001AF1 0000004026F1 0 uTVWh
000000001DD7 0000004029D7 0 PPPPP
000000001E59 000000402A59 0 SSSSS
0000000028F0 0000004034F0 0 t?VSP
00000000294A 00000040354A 0 PPPPP
000000002A7B 00000040367B 0 < tK< tG
000000002BC5 0000004037C5 0 wf93t
000000002BEA 0000004037EA 0 @PSVV
000000002CBA 0000004038BA 0 SWf9M
000000004A92 000000405692 0 QSWVj
000000004BDB 0000004057DB 0 v N+D$
00000000585A 00000040645A 0 ~,WPV
0000000059DF 0000004065DF 0 URPQQh
000000005FC3 000000406BC3 0 9](SS
000000006109 000000406D09 0 t"SS9] u
0000000061C9 000000406DC9 0 9] SS
00000000668B 00000040728B 0 v4;5\
000000006789 000000407389 0 vL;5t
000000006E86 000000407A86 0 PPPPPPPP
000000006F66 000000407B66 0 PPPPPPPP
000000007163 000000407D63 0 SVWUj
000000007204 000000407E04 0 ;t$,v-
000000007289 000000407E89 0 UQPXY]Y[
0000000076A2 0000004082A2 0 w:t1
0000000076E3 0000004082E3 0 w2t)
File pos Mem pos ID Text
======== ======= == ====
00000000775F 00000040835F 0 w9t(-
00000000776B 00000040836B 0 Hu7h(
00000000779F 00000040839F 0 (t%Ht
0000000078D2 0000004084D2 0 ><,t#<;t
00000000796B 00000040856B 0 Mt,Ht
0000000088FE 0000004094FE 0 T$<Wf
000000008B2E 00000040972E 0 D$HPh
000000008F8C 00000040A18C 0 (null)
000000008FB9 00000040A1B9 0 ( 8PX
000000008FC1 00000040A1C1 0 700WP
000000008FD9 00000040A1D9 0 xpxxxx
000000008FF4 00000040A1F4 0 CorExitProcess
000000009ACC 00000040ACCC 0 FlsFree
000000009AD4 00000040ACD4 0 FlsSetValue
000000009AE0 00000040ACE0 0 FlsGetValue
000000009AEC 00000040ACEC 0 FlsAlloc
000000009D1C 00000040AF1C 0 HH:mm:ss
000000009D28 00000040AF28 0 dddd, MMMM dd, yyyy
000000009D3C 00000040AF3C 0 MM/dd/yy
000000009D50 00000040AF50 0 December
000000009D5C 00000040AF5C 0 November
000000009D68 00000040AF68 0 October
000000009D70 00000040AF70 0 September
000000009D7C 00000040AF7C 0 August
000000009D94 00000040AF94 0 April
000000009D9C 00000040AF9C 0 March
000000009DA4 00000040AFA4 0 February
000000009DB0 00000040AFB0 0 January
000000009DE8 00000040AFE8 0 Saturday
000000009DF4 00000040AFF4 0 Friday
000000009DFC 00000040AFFC 0 Thursday
000000009E08 00000040B008 0 Wednesday
000000009E14 00000040B014 0 Tuesday
000000009E1C 00000040B01C 0 Monday
000000009E24 00000040B024 0 Sunday
000000009E6D 00000040B06D 0 ('8PW
000000009E76 00000040B076 0 700PP
000000009E91 00000040B091 0 xppwpp
000000009EA4 00000040B0A4 0 GetProcessWindowStation
000000009EBC 00000040B0BC 0 GetUserObjectInformationW
000000009ED8 00000040B0D8 0 GetLastActivePopup
000000009EEC 00000040B0EC 0 GetActiveWindow
000000009EFC 00000040B0FC 0 MessageBoxW
000000009F3F 00000040B13F 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]
000000009F80 00000040B180 0 abcdefghijklmnopqrstuvwxyz{|}~
00000000A548 00000040B748 0 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]
00000000A589 00000040B789 0 abcdefghijklmnopqrstuvwxyz{|}~
00000000A6C8 00000040B8C8 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]
00000000A709 00000040B909 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
00000000A7D0 00000040B9D0 0 Safety switch:
00000000A7E8 00000040B9E8 0 Closed
00000000A7F0 00000040B9F0 0 Unknown (%s)
00000000A808 00000040BA08 0 Device lock after money retract:
00000000A83C 00000040BA3C 0 Cassettes can be processed:
00000000A85C 00000040BA5C 0 SHERR
00000000A864 00000040BA64 0 Error at shutter:
00000000A878 00000040BA78 0 Blocked
00000000A884 00000040BA84 0 No error
00000000A898 00000040BA98 0 Shutter status:
00000000A8AC 00000040BAAC 0 Missing
File pos Mem pos ID Text
======== ======= == ====
00000000A8B8 00000040BAB8 0 Undefined
00000000A8C4 00000040BAC4 0 Diverter
00000000A8D4 00000040BAD4 0 Banknotes output status:
00000000A8F0 00000040BAF0 0 Banknotes were accessible to the customer
00000000A91C 00000040BB1C 0 Banknotes have been withdrawn
00000000A93C 00000040BB3C 0 Retained
00000000A948 00000040BB48 0 No money was accessible to the customer
00000000A978 00000040BB78 0 Transport error:
00000000A990 00000040BB90 0 Manipulation at the output photo sensor
00000000A9C8 00000040BBC8 0 Transport status:
00000000A9DC 00000040BBDC 0 No banknotes available
00000000A9F4 00000040BBF4 0 Cassette
00000000AA00 00000040BC00 0 Collection tray
00000000AA14 00000040BC14 0 Reject box
00000000AA20 00000040BC20 0 Stop over (cash out)
00000000AA38 00000040BC38 0 Withdrawal position
00000000AA50 00000040BC50 0 Retract box
00000000AA60 00000040BC60 0 Undefined position
00000000AA78 00000040BC78 0 Status of the transport path after the last command:
00000000AAB0 00000040BCB0 0 Transport path was free
00000000AACC 00000040BCCC 0 Transport path was not free
00000000AAF0 00000040BCF0 0 Single reject switch:
00000000AB08 00000040BD08 0 Defective (transport direction collection tray)
00000000AB3C 00000040BD3C 0 Defective (transport direction reject box)
00000000AB6C 00000040BD6C 0 Device error during dispensing:
00000000AB90 00000040BD90 0 Too many bundle rejects
00000000ABAC 00000040BDAC 0 No separation possible
00000000ABC4 00000040BDC4 0 Too many multiple separations
00000000ABE4 00000040BDE4 0 Too many banknotes outside width tolerance
00000000AC10 00000040BE10 0 Paper jam at additional dispensing
00000000AC38 00000040BE38 0 Cassette supply changed:
00000000AC5C 00000040BE5C 0 Door status:
00000000AC74 00000040BE74 0 Watch door sensor (encryption):
00000000ACA0 00000040BEA0 0 Device type:
00000000ACB0 00000040BEB0 0 Front load
00000000ACBC 00000040BEBC 0 Rear load
00000000ACC8 00000040BEC8 0 Rear load with addit. module
00000000ACE8 00000040BEE8 0 ProCash Compact front load
00000000AD04 00000040BF04 0 ProCash Compact rear load
00000000AD20 00000040BF20 0 Front load SAT 2x00
00000000AD38 00000040BF38 0 Rear load SAT 2x00
00000000AD54 00000040BF54 0 Number of dispensing modules: %c
00000000AD80 00000040BF80 0 SW EDM:
00000000AD8C 00000040BF8C 0 Encryption active
00000000ADA0 00000040BFA0 0 Transport key missing
00000000ADB8 00000040BFB8 0 Line key missing
00000000ADCC 00000040BFCC 0 Initial value must be requested
00000000ADF8 00000040BFF8 0 Clearing status (after RESET/POWER UP):
00000000AE24 00000040C024 0 Transport paths were free
00000000AE40 00000040C040 0 No banknotes were accessible to the customer; transp.->reject successful
00000000AE90 00000040C090 0 Banknotes were accessible to the customer; transp.->retract successful
00000000AED8 00000040C0D8 0 Banknotes were accessible to the customer before power failure/RESET; they have been withdrawn in the meantime.
00000000AF50 00000040C150 0 No banknotes were accessible to the customer before power failure/RESET; an error occurred during clearing (see SRES)
00000000AFC8 00000040C1C8 0 Banknotes were accessible to the customer before power failure/RESET; an error occurred during clearing (see SRES)
00000000B040 00000040C240 0 Banknotes were accessible to the customer; retract was not performed, <RRET>==1
00000000B094 00000040C294 0 Reserved
00000000B0A0 00000040C2A0 0 Retract successful; an error occurred during cleaning of the singe reject switch (see SRES)
00000000B108 00000040C308 0 Status code after RESET or after POWER UP: %c
00000000B13C 00000040C33C 0 Self-test active:
00000000B158 00000040C358 0 Contents of the seven segment display: %s
File pos Mem pos ID Text
======== ======= == ====
00000000B188 00000040C388 0 Operator request:
00000000B19C 00000040C39C 0 Warning
00000000B1A8 00000040C3A8 0 C_OUT
00000000B1B0 00000040C3B0 0 Cash-out availability:
00000000B1C8 00000040C3C8 0 Minimum configuration missing (RR-box and/or cash-out cassette missing)
00000000B214 00000040C414 0 Device lock
00000000B224 00000040C424 0 Motor damaged
00000000B234 00000040C434 0 In power-up/initialization sequence
00000000B25C 00000040C45C 0 Security breaker activated
00000000B278 00000040C478 0 Tongs transport damaged
00000000B294 00000040C494 0 Cash-out possible
00000000B2A8 00000040C4A8 0 TRANSPORT
00000000B2B4 00000040C4B4 0 Characteristic of output transport:
00000000B2DC 00000040C4DC 0 In Safe front
00000000B2EC 00000040C4EC 0 In Safe rear
00000000B2FC 00000040C4FC 0 Out Safe rear
00000000B30C 00000040C50C 0 Out Safe front
00000000B324 00000040C524 0 Reject/Retract Cassette:
00000000B340 00000040C540 0 State:
00000000B34C 00000040C54C 0 Ready
00000000B364 00000040C564 0 Rejected Banknotes: %d
00000000B388 00000040C588 0 Retract Counter: %d
00000000B3AC 00000040C5AC 0 Cassette # %d:
00000000B3BC 00000040C5BC 0 Empty
00000000B3C4 00000040C5C4 0 Unknown Parameters
00000000B3D8 00000040C5D8 0 Defective
00000000B3E4 00000040C5E4 0 Printing Cassette
00000000B3F8 00000040C5F8 0 dis. module incl. cassette swapped
00000000B41C 00000040C61C 0 memory cannot be processed
00000000B438 00000040C638 0 internal magnet cannot be addressed
00000000B460 00000040C660 0 wrong cassette type
00000000B47C 00000040C67C 0 Currency: %s
00000000B494 00000040C694 0 Banknotes Value: %d
00000000B4B4 00000040C6B4 0 Banknotes Count: %d
00000000B4D0 00000040C6D0 0 Total Banknotes: %d
00000000B4E4 00000040C6E4 0 Total Cash: %d k (%d)
00000000B4FA 00000040C6FA 0 Total Dispenses Left (by 40 banknotes): %d
00000000B525 00000040C725 0 Total Dispenses Left (by 60 banknotes): %d
00000000B554 00000040C754 0 StClass =
00000000B564 00000040C764 0 STCLASS_OK
00000000B570 00000040C770 0 STCLASS_ERROR_COMM
00000000B584 00000040C784 0 STCLASS_ERROR_CNG
00000000B598 00000040C798 0 STCLASS_ERROR_EDS
00000000B5AC 00000040C7AC 0 STCLASS_ERROR_INI
00000000B5C0 00000040C7C0 0 STCLASS_ERROR_LDR
00000000B5D8 00000040C7D8 0 StCode =
00000000B5E8 00000040C7E8 0 CSC_INVALID_SPEC
00000000B5FC 00000040C7FC 0 CSC_INVALID_LOGICAL_ID
00000000B614 00000040C814 0 CSC_INVALID_PINDATA
00000000B62C 00000040C82C 0 CSC_INVALID_INLEN
00000000B640 00000040C840 0 CSC_DEVICE_ALREADY_OPENED
00000000B65C 00000040C85C 0 CNG_INVALID_VARIANT
00000000B674 00000040C874 0 CNG_INVALID_RESPONSE
00000000B68C 00000040C88C 0 CNG_INVALID_RECOVERY
00000000B6A4 00000040C8A4 0 CNG_FIRMWARE_INCOMPLETE
00000000B6C0 00000040C8C0 0 CNG_FRM_CONTEXT
00000000B6D4 00000040C8D4 0 CNG_FRM_SYNTAX
00000000B6E4 00000040C8E4 0 StWarn =
00000000B6F4 00000040C8F4 0 CNG_WARN_MONEY_NOT_REMOVED
00000000B710 00000040C910 0 CNG_WARN_MONEY_REMOVED
File pos Mem pos ID Text
======== ======= == ====
00000000B728 00000040C928 0 CNG_NO_FIRMWARE
00000000B73C 00000040C93C 0 CNG_NO_ACTUAL_FIRMWARE
00000000B754 00000040C954 0 CNG_WARN_LED
00000000B764 00000040C964 0 CSCCNG
00000000B770 00000040C970 0 Usage: %s <Command>
00000000B784 00000040C984 0 Available Commands: dvi/csi/ret/sht
00000000B7A8 00000040C9A8 0 dvi - device info; csi - cassettes info; ret - retract cash; sht - test shutter
00000000B80C 00000040CA0C 0 Please enter valid command! (dvi/csi/ret/sht)
00000000B83C 00000040CA3C 0 Connecting to the CNG...
00000000B858 00000040CA58 0 CscCngOpen/CscCdmOpen failed with error:
00000000B884 00000040CA84 0 Successfully connected!
00000000B8A0 00000040CAA0 0 Reading cassette status information...
00000000B8C8 00000040CAC8 0 CscCngStatusRead/CscCdmStatusRead failed with error:
00000000B900 00000040CB00 0 Success. Raw Response: %s
00000000B91C 00000040CB1C 0 Reading device status information...
00000000B944 00000040CB44 0 Retracting cash...
00000000B958 00000040CB58 0 CscCngTransport/CscCdmTransport failed with error:
00000000B98C 00000040CB8C 0 Cash successfully retracted!
00000000B9AC 00000040CBAC 0 Opening shutter...
00000000B9C0 00000040CBC0 0 CscCngShutter/CscCdmShutter failed with error:
00000000B9F0 00000040CBF0 0 Shutter successfully opened! Waiting 2 seconds...
00000000BA24 00000040CC24 0 Closing shutter...
00000000BA38 00000040CC38 0 Shutter successfully closed!
00000000BA58 00000040CC58 0 Disconnecting...
00000000BA6C 00000040CC6C 0 CscCngClose/CscCdmClose failed with error:
00000000BA98 00000040CC98 0 Disconnected.
00000000BB08 00000040CD08 0 C:\Documents and Settings\Administrator\My Documents\Visual Studio 2010\Projects\WincorNixdorf\Release\WN.pdb
00000000BFB2 00000040D1B2 0 lstrcmpA
00000000BFBE 00000040D1BE 0 lstrlenA
00000000BFCA 00000040D1CA 0 Sleep
00000000BFD0 00000040D1D0 0 KERNEL32.dll
00000000BFDE 00000040D1DE 0 CSCWCNG.dll
00000000BFEC 00000040D1EC 0 GetLastError
00000000BFFC 00000040D1FC 0 HeapFree
00000000C008 00000040D208 0 HeapAlloc
00000000C014 00000040D214 0 GetCommandLineA
00000000C026 00000040D226 0 HeapSetInformation
00000000C03C 00000040D23C 0 DecodePointer
00000000C04C 00000040D24C 0 UnhandledExceptionFilter
00000000C068 00000040D268 0 SetUnhandledExceptionFilter
00000000C086 00000040D286 0 IsDebuggerPresent
00000000C09A 00000040D29A 0 EncodePointer
00000000C0AA 00000040D2AA 0 TerminateProcess
00000000C0BE 00000040D2BE 0 GetCurrentProcess
00000000C0D2 00000040D2D2 0 HeapCreate
00000000C0E0 00000040D2E0 0 GetProcAddress
00000000C0F2 00000040D2F2 0 GetModuleHandleW
00000000C106 00000040D306 0 ExitProcess
00000000C114 00000040D314 0 WriteFile
00000000C120 00000040D320 0 GetStdHandle
00000000C130 00000040D330 0 GetModuleFileNameW
00000000C146 00000040D346 0 EnterCriticalSection
00000000C15E 00000040D35E 0 LeaveCriticalSection
00000000C176 00000040D376 0 GetModuleFileNameA
00000000C18C 00000040D38C 0 FreeEnvironmentStringsW
00000000C1A6 00000040D3A6 0 WideCharToMultiByte
00000000C1BC 00000040D3BC 0 GetEnvironmentStringsW
00000000C1D6 00000040D3D6 0 SetHandleCount
00000000C1E8 00000040D3E8 0 InitializeCriticalSectionAndSpinCount
00000000C210 00000040D410 0 GetFileType
File pos Mem pos ID Text
======== ======= == ====
00000000C21E 00000040D41E 0 GetStartupInfoW
00000000C230 00000040D430 0 DeleteCriticalSection
00000000C248 00000040D448 0 TlsAlloc
00000000C254 00000040D454 0 TlsGetValue
00000000C262 00000040D462 0 TlsSetValue
00000000C270 00000040D470 0 TlsFree
00000000C27A 00000040D47A 0 InterlockedIncrement
00000000C292 00000040D492 0 SetLastError
00000000C2A2 00000040D4A2 0 GetCurrentThreadId
00000000C2B8 00000040D4B8 0 InterlockedDecrement
00000000C2D0 00000040D4D0 0 QueryPerformanceCounter
00000000C2EA 00000040D4EA 0 GetTickCount
00000000C2FA 00000040D4FA 0 GetCurrentProcessId
00000000C310 00000040D510 0 GetSystemTimeAsFileTime
00000000C32A 00000040D52A 0 SetFilePointer
00000000C33C 00000040D53C 0 GetConsoleCP
00000000C34C 00000040D54C 0 GetConsoleMode
00000000C35E 00000040D55E 0 GetCPInfo
00000000C36A 00000040D56A 0 GetACP
00000000C374 00000040D574 0 GetOEMCP
00000000C380 00000040D580 0 IsValidCodePage
00000000C392 00000040D592 0 LoadLibraryW
00000000C3A2 00000040D5A2 0 RtlUnwind
00000000C3AE 00000040D5AE 0 SetStdHandle
00000000C3BE 00000040D5BE 0 WriteConsoleW
00000000C3CE 00000040D5CE 0 MultiByteToWideChar
00000000C3E4 00000040D5E4 0 LCMapStringW
00000000C3F4 00000040D5F4 0 GetStringTypeW
00000000C406 00000040D606 0 HeapReAlloc
00000000C414 00000040D614 0 IsProcessorFeaturePresent
00000000C430 00000040D630 0 HeapSize
00000000C43C 00000040D63C 0 FlushFileBuffers
00000000C450 00000040D650 0 CreateFileW
00000000C45E 00000040D65E 0 CloseHandle
00000000CACE 00000040E4CE 0
00000000CBAE 00000040E5AE 0 abcdefghijklmnopqrstuvwxyz
00000000CBCE 00000040E5CE 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ
00000000CCD2 00000040E6D2 0
00000000CDB9 00000040E7B9 0 abcdefghijklmnopqrstuvwxyz
00000000CDD9 00000040E7D9 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ
00000000D458 000000411058 0 <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
00000000D4A3 0000004110A3 0 <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
00000000D4DB 0000004110DB 0 <security>
00000000D4EB 0000004110EB 0 <requestedPrivileges>
00000000D508 000000411108 0 <requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>
00000000D568 000000411168 0 </requestedPrivileges>
00000000D586 000000411186 0 </security>
00000000D597 000000411197 0 </trustInfo>
00000000D5A7 0000004111A7 0 </assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD
00000000D61F 00000041201F 0 4*474C4O4U4g4o4z4
00000000D645 000000412045 0 707;7#8
00000000D651 000000412051 0 8_9n9
00000000D68B 00000041208B 0 5'5-5j5
00000000D6A1 0000004120A1 0 6"6D6
00000000D6B5 0000004120B5 0 7!7+7A7L7f7q7y7
00000000D6D1 0000004120D1 0 8*818\8
00000000D6DB 0000004120DB 0 9#9j9
00000000D6F1 0000004120F1 0 :J:g:
00000000D6FF 0000004120FF 0 ;L>S>e>k>
00000000D71B 00000041211B 0 ?"?0?E?O?u?
File pos Mem pos ID Text
======== ======= == ====
00000000D739 000000412139 0 0U0g0
00000000D741 000000412141 0 1b1<2D2\2w2
00000000D74D 00000041214D 0 2"3(3{4
00000000D75D 00000041215D 0 5"535>5
00000000D76B 00000041216B 0 7"7(7
00000000D777 000000412177 0 7*868P8v8|8
00000000D789 000000412189 0 9N9X9
00000000D799 000000412199 0 :M:p:v:
00000000D7B9 0000004121B9 0 ;%;+;3;9;E;K;X;b;h;r;
00000000D7D7 0000004121D7 0 <?<E<K<a<y<
00000000D7E5 0000004121E5 0 =<=F=~=
00000000D801 000000412201 0 > >'>,>4>=>I>N>S>Y>]>c>h>n>s>
00000000D83D 00000041223D 0 ?-?O?r?
00000000D85C 00000041225C 0 %020K0i0
00000000D875 000000412275 0 3b5<6
00000000D87B 00000041227B 0 7=7S7
00000000D899 000000412299 0 <W<d<n<|<
00000000D8B1 0000004122B1 0 =2=i=
00000000D8B9 0000004122B9 0 =!>>>
00000000D8DF 0000004122DF 0 050>0D0M0R0a0
00000000D8F3 0000004122F3 0 0"1q1
00000000D90D 00000041230D 0 4C4L4X4
00000000D939 000000412339 0 9 9"969<9E9X9|9
00000000D94B 00000041234B 0 :0:::q:w:|:
00000000D965 000000412365 0 :-;2;l;q;x;};
00000000D987 000000412387 0 <-=2=;=J=m=r=w=
00000000D997 000000412397 0 =x>}>
00000000D9A3 0000004123A3 0 >7?Z?e?k?{?
00000000D9D5 0000004123D5 0 0;0U0o0q2x2~2
00000000DA03 000000412403 0 8*8J8
00000000DA0F 00000041240F 0 8'9T9_9
00000000DA27 000000412427 0 ;V<&=
00000000DA3C 00000041243C 0 G2Y2k2}2
00000000DA51 000000412451 0 3!333E3W3i3{3
00000000DA65 000000412465 0 3c4i4u4
00000000DA83 000000412483 0 5"5)50585@5H5T5]5b5h5r5{5
00000000DAB5 0000004124B5 0 7<7T7[7c7h7l7p7
00000000DAD9 0000004124D9 0 8J8P8T8X8\8
00000000DAF3 0000004124F3 0 9G9y9
00000000DB11 000000412511 0 9h:n:
00000000DB27 000000412527 0 =U>o>x>
00000000DB41 000000412541 0 0S0]0u0
00000000DB53 000000412553 0 2"2'262E2T2c2r2
00000000DB79 000000412579 0 3)383?3L3o3~3
00000000DBA1 0000004125A1 0 4 4$4(4,4p4>5N5Z5w5~5
00000000DBC5 0000004125C5 0 616;6Y6
00000000DBCD 0000004125CD 0 6e6w6
00000000DBE5 0000004125E5 0 717>7Q7d7z7
00000000DBFB 0000004125FB 0 8 8$8(8,8084888<8@8h8r8
00000000DC25 000000412625 0 9,9;9B9X9b9|9
00000000DC47 000000412647 0 :&:<:F:b:i:n:}:
00000000DC67 000000412667 0 ; ;*;F;K;Z;i;x;
00000000DC89 000000412689 0 <*<4<T<c<j<q<
00000000DCAB 0000004126AB 0 =*=4=N=]=d=z=
00000000DCCB 0000004126CB 0 >)>3>S>Z>_>n>}>
00000000DCED 0000004126ED 0 ?7?>?C?R?a?p?
00000000DD17 000000412717 0 0"010@0P0f0v0
00000000DD35 000000412735 0 1%141;1B1X1b1
00000000DD59 000000412759 0 2'2G2N2S2l2
00000000DD71 000000412771 0 34383<3@3D3H3
File pos Mem pos ID Text
======== ======= == ====
00000000DD7F 00000041277F 0 3d3h3l3p3
00000000DDC3 0000004127C3 0 4 4044484<4@4D4H4L4P4T4X4\4
00000000DDDF 0000004127DF 0 4d4h4l4p4t4
00000000DE01 000000412801 0 5!575W5\5h5t5
00000000DE1B 00000041281B 0 6B6L6o6{6
00000000DE2F 00000041282F 0 737E7Q7p7|7
00000000DE49 000000412849 0 808=8\8h8
00000000DE5C 00000041285C 0 ,1014181<1H1L1
00000000DE89 000000412889 0 ;$;,;4;<;D;L;
00000000DEB9 0000004128B9 0 >$>@>L>h>
00000000DECB 0000004128CB 0 ?$?(?H?h?
00000000DEE9 0000004128E9 0 000P0
00000000DEFF 0000004128FF 0 1x8x9|9
00000000DF55 000000412955 0 : :0:4:8:<:@:D:H:L:P:T:X:\:
00000000DF71 000000412971 0 :d:h:l:p:t:x:|:
00000000DFAD 0000004129AD 0 :8;H;X;h;x;
00000000DFDD 0000004129DD 0 =(=,=0=4=8=<=@=D=H=L=X=\=
00000000DFF7 0000004129F7 0 =d=h=l=p=t=x=|=
000000008F7C 00000040A17C 0 (null)
000000009004 00000040A204 0 mscoree.dll
00000000901C 00000040A21C 0 runtime error
00000000994F 00000040AB4F 0 @Microsoft Visual C++ Runtime Library
0000000099AC 00000040ABAC 0 <program name unknown>
0000000099FC 00000040ABFC 0 Program:
000000009AB0 00000040ACB0 0 KERNEL32.DLL
000000009AF8 00000040ACF8 0 HH:mm:ss
000000009B0C 00000040AD0C 0 dddd, MMMM dd, yyyy
000000009B34 00000040AD34 0 MM/dd/yy
000000009B58 00000040AD58 0 December
000000009B6C 00000040AD6C 0 November
000000009B80 00000040AD80 0 October
000000009B90 00000040AD90 0 September
000000009BA4 00000040ADA4 0 August
000000009BCC 00000040ADCC 0 April
000000009BD8 00000040ADD8 0 March
000000009BE4 00000040ADE4 0 February
000000009BF8 00000040ADF8 0 January
000000009C68 00000040AE68 0 Saturday
000000009C7C 00000040AE7C 0 Friday
000000009C8C 00000040AE8C 0 Thursday
000000009CA0 00000040AEA0 0 Wednesday
000000009CB4 00000040AEB4 0 Tuesday
000000009CC4 00000040AEC4 0 Monday
000000009CD4 00000040AED4 0 Sunday
000000009F07 00000040B107 0 WUSER32.DLL
00000000A7AF 00000040B9AF 0 @CONOUT$