.- - -----÷M÷E÷N÷U÷------------------------------------------------------------- --- ----  -------------.
!  WALL ! STATS ! GOODIES ! YARA ! FAQ ! RSS                                                            !
`--------------  - ---  ---------- -------- -------- -------- -------- ----------------- -  ---- ---- --'

                                           ATM MALWARE NOTICE 
                    e267fb3044c31256f06dd712c7aeae97ad148fd3157995a7e536e5473c1a2bc0
 
Date...........: 2014-02-03
Family.........: SkimerWC
File name......: 002084 [1-35318].dll
File size......: 60.00 KB
Type file......: DLL/Windows
Virscan........: VT - HA
Documentation..: https://vms.drweb.com/virus/?i=3763670
Additional note: We did a small dump here, it is runnable.

Entropy:


Binary Histogram:



=== SCREENSHOT === 



=== PEDUMP REPORT === 
=== MZ Header === signature: "MZ" bytes_in_last_block: 80 0x50 blocks_in_file: 2 2 num_relocs: 0 0 header_paragraphs: 4 4 min_extra_paragraphs: 15 0xf max_extra_paragraphs: 65535 0xffff ss: 0 0 sp: 184 0xb8 checksum: 0 0 ip: 0 0 cs: 0 0 reloc_table_offset: 64 0x40 overlay_number: 26 0x1a reserved0: 0 0 oem_id: 0 0 oem_info: 0 0 reserved2: 0 0 reserved3: 0 0 reserved4: 0 0 reserved5: 0 0 reserved6: 0 0 lfanew: 256 0x100 === DOS STUB === 00000000: ba 10 00 0e 1f b4 09 cd 21 b8 01 4c cd 21 90 90 |........!..L.!..| 00000010: 54 68 69 73 20 70 72 6f 67 72 61 6d 20 6d 75 73 |This program mus| 00000020: 74 20 62 65 20 72 75 6e 20 75 6e 64 65 72 20 57 |t be run under W| 00000030: 69 6e 33 32 0d 0a 24 37 00 00 00 00 00 00 00 00 |in32..$7........| 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| === PE Header === signature: "PE\x00\x00" # IMAGE_FILE_HEADER: Machine: 332 0x14c x86 NumberOfSections: 6 6 TimeDateStamp: "1992-06-19 22:22:17" PointerToSymbolTable: 0 0 NumberOfSymbols: 0 0 SizeOfOptionalHeader: 224 0xe0 Characteristics: 41358 0xa18e EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO 32BIT_MACHINE, DLL, BYTES_REVERSED_HI # IMAGE_OPTIONAL_HEADER32: Magic: 267 0x10b 32-bit executable LinkerVersion: 2.25 SizeOfCode: 31232 0x7a00 SizeOfInitializedData: 7680 0x1e00 SizeOfUninitializedData: 0 0 AddressOfEntryPoint: 33250 0x81e2 BaseOfCode: 4096 0x1000 BaseOfData: 36864 0x9000 ImageBase: 50331648 0x3000000 SectionAlignment: 4096 0x1000 FileAlignment: 512 0x200 OperatingSystemVersion: 4.0 ImageVersion: 0.0 SubsystemVersion: 4.0 Reserved1: 0 0 SizeOfImage: 61440 0xf000 SizeOfHeaders: 1024 0x400 CheckSum: 0 0 Subsystem: 2 2 WINDOWS_GUI DllCharacteristics: 1 1 0x01 SizeOfStackReserve: 0 0 SizeOfStackCommit: 0 0 SizeOfHeapReserve: 1048576 0x100000 SizeOfHeapCommit: 4096 0x1000 LoaderFlags: 0 0 NumberOfRvaAndSizes: 16 0x10 === DATA DIRECTORY === EXPORT rva:0x 0 size:0x 0 IMPORT rva:0x c000 size:0x a92 RESOURCE rva:0x e000 size:0x 600 EXCEPTION rva:0x 0 size:0x 0 SECURITY rva:0x 0 size:0x 0 BASERELOC rva:0x d000 size:0x 758 DEBUG rva:0x 0 size:0x 0 ARCHITECTURE rva:0x 0 size:0x 0 GLOBALPTR rva:0x 0 size:0x 0 TLS rva:0x 0 size:0x 0 LOAD_CONFIG rva:0x 0 size:0x 0 Bound_IAT rva:0x 0 size:0x 0 IAT rva:0x 0 size:0x 0 Delay_IAT rva:0x 0 size:0x 0 CLR_Header rva:0x 0 size:0x 0 rva:0x 0 size:0x 0 === SECTIONS === NAME RVA VSZ RAW_SZ RAW_PTR nREL REL_PTR nLINE LINE_PTR FLAGS CODE 1000 7980 7a00 400 0 0 0 0 60000020 R-X CODE DATA 9000 368 400 7e00 0 0 0 0 c0000040 RW- IDATA BSS a000 148d 0 8200 0 0 0 0 c0000000 RW- .idata c000 a92 c00 8200 0 0 0 0 c0000040 RW- IDATA .reloc d000 758 800 8e00 0 0 0 0 50000040 R-- IDATA SHARED .rsrc e000 600 600 9600 0 0 0 0 50000040 R-- IDATA SHARED === RESOURCES === FILE_OFFSET CP LANG SIZE TYPE NAME 0x9750 0 0x419 744 ICON #1 0x9a38 0 0 16 RCDATA DVCLAL 0x9a48 0 0 60 RCDATA PACKAGEINFO 0x9a84 0 0x419 20 GROUP_ICON MAINICON === IMPORTS === MODULE_NAME HINT ORD FUNCTION_NAME kernel32.dll 0 DeleteCriticalSection kernel32.dll 0 LeaveCriticalSection kernel32.dll 0 EnterCriticalSection kernel32.dll 0 InitializeCriticalSection kernel32.dll 0 VirtualFree kernel32.dll 0 VirtualAlloc kernel32.dll 0 LocalFree kernel32.dll 0 LocalAlloc kernel32.dll 0 GetVersion kernel32.dll 0 GetCurrentThreadId kernel32.dll 0 GetThreadLocale kernel32.dll 0 GetStartupInfoA kernel32.dll 0 GetLocaleInfoA kernel32.dll 0 GetCommandLineA kernel32.dll 0 FreeLibrary kernel32.dll 0 ExitProcess kernel32.dll 0 WriteFile kernel32.dll 0 UnhandledExceptionFilter kernel32.dll 0 RtlUnwind kernel32.dll 0 RaiseException kernel32.dll 0 GetStdHandle user32.dll 0 GetKeyboardType user32.dll 0 MessageBoxA advapi32.dll 0 RegQueryValueExA advapi32.dll 0 RegOpenKeyExA advapi32.dll 0 RegCloseKey kernel32.dll 0 TlsSetValue kernel32.dll 0 TlsGetValue kernel32.dll 0 TlsFree kernel32.dll 0 TlsAlloc kernel32.dll 0 LocalFree kernel32.dll 0 LocalAlloc advapi32.dll 0 OpenProcessToken advapi32.dll 0 LookupPrivilegeValueA advapi32.dll 0 InitiateSystemShutdownA advapi32.dll 0 AdjustTokenPrivileges kernel32.dll 0 lstrlenA kernel32.dll 0 lstrcpyA kernel32.dll 0 lstrcmpiW kernel32.dll 0 lstrcmpiA kernel32.dll 0 lstrcmpA kernel32.dll 0 lstrcatA kernel32.dll 0 WriteProcessMemory kernel32.dll 0 WriteFile kernel32.dll 0 WaitForSingleObject kernel32.dll 0 VirtualProtect kernel32.dll 0 VirtualFreeEx kernel32.dll 0 VirtualAllocEx kernel32.dll 0 Sleep kernel32.dll 0 SetFileTime kernel32.dll 0 SetFilePointer kernel32.dll 0 ReadFile kernel32.dll 0 PulseEvent kernel32.dll 0 OpenProcess kernel32.dll 0 MultiByteToWideChar kernel32.dll 0 LocalFree kernel32.dll 0 LocalAlloc kernel32.dll 0 LoadLibraryA kernel32.dll 0 GetWindowsDirectoryA kernel32.dll 0 GetVolumeInformationA kernel32.dll 0 GetSystemTimeAsFileTime kernel32.dll 0 GetProcAddress kernel32.dll 0 GetModuleHandleA kernel32.dll 0 GetModuleFileNameA kernel32.dll 0 GetLastError kernel32.dll 0 GetFileSize kernel32.dll 0 GetExitCodeThread kernel32.dll 0 GetCurrentProcess kernel32.dll 0 FormatMessageA kernel32.dll 0 FileTimeToLocalFileTime kernel32.dll 0 ExitProcess kernel32.dll 0 DeleteFileA kernel32.dll 0 CreateThread kernel32.dll 0 CreateRemoteThread kernel32.dll 0 CreateFileA kernel32.dll 0 CreateEventA kernel32.dll 0 CloseHandle gdi32.dll 0 SelectObject gdi32.dll 0 Rectangle gdi32.dll 0 GetTextMetricsA gdi32.dll 0 GetDeviceCaps gdi32.dll 0 DeleteObject gdi32.dll 0 DeleteDC gdi32.dll 0 CreateSolidBrush gdi32.dll 0 CreateDCA user32.dll 0 CreateWindowExA user32.dll 0 UnregisterClassA user32.dll 0 TranslateMessage user32.dll 0 SetTimer user32.dll 0 SetFocus user32.dll 0 SendMessageA user32.dll 0 RegisterClassA user32.dll 0 PostMessageA user32.dll 0 PeekMessageA user32.dll 0 LoadIconA user32.dll 0 LoadCursorA user32.dll 0 InvalidateRect user32.dll 0 GetWindowTextA user32.dll 0 GetWindowDC user32.dll 0 GetMessageA user32.dll 0 GetDesktopWindow user32.dll 0 GetClientRect user32.dll 0 DrawTextA user32.dll 0 DispatchMessageA user32.dll 0 DestroyWindow user32.dll 0 DefWindowProcA kernel32.dll 0 VirtualProtect user32.dll 0 wsprintfA PSAPI.DLL 0 GetModuleBaseNameA PSAPI.DLL 0 EnumProcesses
=== Strings ===
File pos Mem pos ID Text ======== ======= == ==== 000000000050 000003000050 0 This program must be run under Win32 000000000270 000003000270 0 .idata 000000000298 000003000298 0 .reloc 0000000002BF 0000030002BF 0 P.rsrc 00000000054B 00000300114B 0 'R/<s 0000000006DA 0000030012DA 0 |w;N= 000000000748 000003001348 0 WAYiv 0000000007B1 0000030013B1 0 V o/O 0000000007BD 0000030013BD 0 SW=2/F 0000000007D4 0000030013D4 0 z-{:Z 000000000879 000003001479 0 %nof 0000000008B0 0000030014B0 0 t0A]o 000000000936 000003001536 0 0E ykDe?0V@ 0000000009D2 0000030015D2 0 B.(~ 000000000A4E 00000300164E 0 E yl_ 000000000AA1 0000030016A1 0 @R/OQ( 000000000AAA 0000030016AA 0 Zk Sm 000000000B42 000003001742 0 X|hEB 000000000B56 000003001756 0 {q6#4-z 000000000BA3 0000030017A3 0 BS>J3 000000000C26 000003001826 0 yoz(L&10 000000000CA0 0000030018A0 0 I!HZ< 000000000D4D 00000300194D 0 xhmb, 000000000FE6 000003001BE6 0 +*TA 0000000013B4 000003001FB4 0 t {e& 000000001619 000003002219 0 M@x}a 0000000016E5 0000030022E5 0 :aTR4 00000000175E 00000300235E 0 zJC5& 0000000018AB 0000030024AB 0 O\arm 000000001900 000003002500 0 :#xG2 00000000194C 00000300254C 0 cY(F$W 000000001BFA 0000030027FA 0 &Wt/R 000000001C80 000003002880 0 Aw>CWx 000000001D65 000003002965 0 7d]xn\ 000000001DF8 0000030029F8 0 b wX)4 000000001E06 000003002A06 0 hYlS# 000000001E20 000003002A20 0 8tf[L 000000001F0C 000003002B0C 0 6|5f5G/ 00000000209B 000003002C9B 0 pP"+< 0000000020AD 000003002CAD 0 A5~T@ 0000000021A4 000003002DA4 0 0b.DG 0000000021E8 000003002DE8 0 sfU!Xm 0000000022AE 000003002EAE 0 Wedrh 0000000022FF 000003002EFF 0 0%Cxp 00000000244B 00000300304B 0 :-&da 0000000024E2 0000030030E2 0 ,U6#PE:x- 000000002636 000003003236 0 qmXw 00000000266B 00000300326B 0 WD[HO 000000002687 000003003287 0 wDQV(dg 0000000026FB 0000030032FB 0 87KBd 0000000027BC 0000030033BC 0 _B-3Q 000000002828 000003003428 0 [N 7} 00000000292C 00000300352C 0 / +Nb 00000000296C 00000300356C 0 8v t[r 000000002C2A 00000300382A 0 ]{>y8 000000002C52 000003003852 0 3#]cp 000000002D0C 00000300390C 0 =]Mx* 000000002D7F 00000300397F 0 9nL]"5Fu 000000002E20 000003003A20 0 zZKv= 000000002E79 000003003A79 0 (8~a<OZ File pos Mem pos ID Text ======== ======= == ==== 000000002E94 000003003A94 0 kK@l& 000000002FC7 000003003BC7 0 KqfLb& 000000003102 000003003D02 0 K 'vj[ 00000000311C 000003003D1C 0 6&D*o 00000000317B 000003003D7B 0 QeHkT 0000000031A2 000003003DA2 0 4"4@Sd 0000000031BC 000003003DBC 0 c~MXtqr 00000000322A 000003003E2A 0 "i_kV 00000000337F 000003003F7F 0 xl92:W 0000000033DE 000003003FDE 0 wuL9yd& 000000003772 000003004372 0 UH>FLpB 00000000378E 00000300438E 0 K~T@~~ 00000000379E 00000300439E 0 < sY- 0000000037FB 0000030043FB 0 ji:Y&C 000000003822 000003004422 0 q#D K( 000000003851 000003004451 0 ~*Xhq 0000000038B7 0000030044B7 0 {R&5+,x 000000003913 000003004513 0 y~S@5@ 000000003ACB 0000030046CB 0 YT}n[ 000000003B1B 00000300471B 0 r6+XM7 000000003C06 000003004806 0 EWzof 000000003C6B 00000300486B 0 6uSD? 000000003C79 000003004879 0 ixN&$ 000000003DBC 0000030049BC 0 ;oC]$q 000000003DCA 0000030049CA 0 oT#&5w 000000003DD7 0000030049D7 0 lx[(= 000000003DF2 0000030049F2 0 'DLh]_ 000000003E14 000003004A14 0 9-}}lXK 000000003E57 000003004A57 0 )6ujVKW 000000003EB3 000003004AB3 0 q+RY1 000000003EC3 000003004AC3 0 -:k&jO[ 000000003F1B 000003004B1B 0 EB_,9Ch 000000003F59 000003004B59 0 D02Bk 000000004030 000003004C30 0 ./rTa 00000000419B 000003004D9B 0 iv+\ 000000004275 000003004E75 0 )uC;T 00000000430F 000003004F0F 0 la{*. 0000000044C4 0000030050C4 0 S Qc% 0000000046AA 0000030052AA 0 :}GkH 0000000046FA 0000030052FA 0 &$\Gc 000000004701 000003005301 0 R&4d! 000000004C26 000003005826 0 L#SRU 000000004D01 000003005901 0 2q Anf 000000005043 000003005C43 0 [Nck: 00000000538D 000003005F8D 0 @xL#v 00000000550B 00000300610B 0 b0v(l 0000000055B4 0000030061B4 0 o{zO& 0000000059D3 0000030065D3 0 XjGT_ 0000000059E7 0000030065E7 0 P/: # 000000005D40 000003006940 0 "y]e1 000000005DEA 0000030069EA 0 .,eZob 000000005E78 000003006A78 0 iBQ|} 000000005EE0 000003006AE0 0 ]8E 000000005FD0 000003006BD0 0 WBqlN 000000006113 000003006D13 0 k3J7L 000000006121 000003006D21 0 nLDR?\ 00000000619C 000003006D9C 0 dN?*Uz 000000006229 000003006E29 0 p+FQ+@ 0000000062AF 000003006EAF 0 f=DGY 0000000062D7 000003006ED7 0 c$Q2\ File pos Mem pos ID Text ======== ======= == ==== 000000006344 000003006F44 0 <$VC, 000000006365 000003006F65 0 XwZ%F 0000000063E5 000003006FE5 0 lHA5)E 00000000647B 00000300707B 0 .XvEP 0000000064E0 0000030070E0 0 n$%"5 0000000068EB 0000030074EB 0 5.->= 0000000068FA 0000030074FA 0 '4C"j 000000006950 000003007550 0 3VZG& 000000006A65 000003007665 0 {Zx%+ 000000006A9B 00000300769B 0 d?"QD, 000000006AB5 0000030076B5 0 qyJT5+, 000000006C72 000003007872 0 soDcxM> 000000006C8D 00000300788D 0 !;?m|G? 000000006CB5 0000030078B5 0 BQd,|tD 000000006CD0 0000030078D0 0 $&gzNL\ 000000006CDE 0000030078DE 0 !Q2d{D 000000006F4A 000003007B4A 0 }S2!@ 0000000070C3 000003007CC3 0 Am"[$Z 0000000071CA 000003007DCA 0 nAVF> 00000000720F 000003007E0F 0 urw:H% 000000007221 000003007E21 0 kNqft 000000007344 000003007F44 0 Wy h, 0000000073A2 000003007FA2 0 Vh|e- 0000000075D7 0000030081D7 0 }66#m{ 000000007787 000003008387 0 2$Tev 0000000077F0 0000030083F0 0 :GTn8 000000007800 000003008400 0 ukJX" 0000000079D6 0000030085D6 0 tjmF*[K 0000000079F8 0000030085F8 0 y790/ 000000007A1A 00000300861A 0 k]rA, 000000007A9C 00000300869C 0 1>Y)\Gvb 000000007B7E 00000300877E 0 !L{fk 000000007C75 000003008875 0 qC_(m 000000007CD6 0000030088D6 0 +52,\ 000000007D31 000003008931 0 {k52g 000000007D68 000003008968 0 P2GDlI 000000007D75 000003008975 0 -_Bimx 000000007D82 000003008982 0 rgH=. 000000007D8F 00000300898F 0 xoRA4 000000007D9D 00000300899D 0 wdI># 000000007DB8 0000030089B8 0 p]N;$ 000000007DC5 0000030089C5 0 ziTC. 000000007DE9 0000030089E9 0 0CVi| 000000007DF6 0000030089F6 0 &;Lar 000000007E4C 00000300904C 0 Error 000000007E54 000003009054 0 Runtime error at 00000000 000000007E74 000003009074 0 0123456789ABCDEF 000000007EB0 0000030090B0 0 $1%2&3445566D7E8F9T*U0V#' 000000007ED2 0000030090D2 0 <o:o:_;OPO 000000007EE1 0000030090E1 0 OLONO 000000007EED 0000030090ED 0 O!O%O 000000008020 000003009220 0 <4,$?7/' 000000008066 000003009266 0 !"#$%&'()*+,-./012345678 0000000080B1 0000030092B1 0 (3-!0 0000000080B8 0000030092B8 0 ,1'8"5 0000000084D4 00000300C2D4 0 kernel32.dll 0000000084E4 00000300C2E4 0 DeleteCriticalSection 0000000084FC 00000300C2FC 0 LeaveCriticalSection 000000008514 00000300C314 0 EnterCriticalSection 00000000852C 00000300C32C 0 InitializeCriticalSection File pos Mem pos ID Text ======== ======= == ==== 000000008548 00000300C348 0 VirtualFree 000000008556 00000300C356 0 VirtualAlloc 000000008566 00000300C366 0 LocalFree 000000008572 00000300C372 0 LocalAlloc 000000008580 00000300C380 0 GetVersion 00000000858E 00000300C38E 0 GetCurrentThreadId 0000000085A4 00000300C3A4 0 GetThreadLocale 0000000085B6 00000300C3B6 0 GetStartupInfoA 0000000085C8 00000300C3C8 0 GetLocaleInfoA 0000000085DA 00000300C3DA 0 GetCommandLineA 0000000085EC 00000300C3EC 0 FreeLibrary 0000000085FA 00000300C3FA 0 ExitProcess 000000008608 00000300C408 0 WriteFile 000000008614 00000300C414 0 UnhandledExceptionFilter 000000008630 00000300C430 0 RtlUnwind 00000000863C 00000300C43C 0 RaiseException 00000000864E 00000300C44E 0 GetStdHandle 00000000865C 00000300C45C 0 user32.dll 00000000866A 00000300C46A 0 GetKeyboardType 00000000867C 00000300C47C 0 MessageBoxA 000000008688 00000300C488 0 advapi32.dll 000000008698 00000300C498 0 RegQueryValueExA 0000000086AC 00000300C4AC 0 RegOpenKeyExA 0000000086BC 00000300C4BC 0 RegCloseKey 0000000086C8 00000300C4C8 0 kernel32.dll 0000000086D8 00000300C4D8 0 TlsSetValue 0000000086E6 00000300C4E6 0 TlsGetValue 0000000086F4 00000300C4F4 0 TlsFree 0000000086FE 00000300C4FE 0 TlsAlloc 00000000870A 00000300C50A 0 LocalFree 000000008716 00000300C516 0 LocalAlloc 000000008722 00000300C522 0 advapi32.dll 000000008732 00000300C532 0 OpenProcessToken 000000008746 00000300C546 0 LookupPrivilegeValueA 00000000875E 00000300C55E 0 InitiateSystemShutdownA 000000008778 00000300C578 0 AdjustTokenPrivileges 00000000878E 00000300C58E 0 kernel32.dll 00000000879E 00000300C59E 0 lstrlenA 0000000087AA 00000300C5AA 0 lstrcpyA 0000000087B6 00000300C5B6 0 lstrcmpiW 0000000087C2 00000300C5C2 0 lstrcmpiA 0000000087CE 00000300C5CE 0 lstrcmpA 0000000087DA 00000300C5DA 0 lstrcatA 0000000087E6 00000300C5E6 0 WriteProcessMemory 0000000087FC 00000300C5FC 0 WriteFile 000000008808 00000300C608 0 WaitForSingleObject 00000000881E 00000300C61E 0 VirtualProtect 000000008830 00000300C630 0 VirtualFreeEx 000000008840 00000300C640 0 VirtualAllocEx 000000008852 00000300C652 0 Sleep 00000000885A 00000300C65A 0 SetFileTime 000000008868 00000300C668 0 SetFilePointer 00000000887A 00000300C67A 0 ReadFile 000000008886 00000300C686 0 PulseEvent 000000008894 00000300C694 0 OpenProcess 0000000088A2 00000300C6A2 0 MultiByteToWideChar 0000000088B8 00000300C6B8 0 LocalFree 0000000088C4 00000300C6C4 0 LocalAlloc 0000000088D2 00000300C6D2 0 LoadLibraryA 0000000088E2 00000300C6E2 0 GetWindowsDirectoryA File pos Mem pos ID Text ======== ======= == ==== 0000000088FA 00000300C6FA 0 GetVolumeInformationA 000000008912 00000300C712 0 GetSystemTimeAsFileTime 00000000892C 00000300C72C 0 GetProcAddress 00000000893E 00000300C73E 0 GetModuleHandleA 000000008952 00000300C752 0 GetModuleFileNameA 000000008968 00000300C768 0 GetLastError 000000008978 00000300C778 0 GetFileSize 000000008986 00000300C786 0 GetExitCodeThread 00000000899A 00000300C79A 0 GetCurrentProcess 0000000089AE 00000300C7AE 0 FormatMessageA 0000000089C0 00000300C7C0 0 FileTimeToLocalFileTime 0000000089DA 00000300C7DA 0 ExitProcess 0000000089E8 00000300C7E8 0 DeleteFileA 0000000089F6 00000300C7F6 0 CreateThread 000000008A06 00000300C806 0 CreateRemoteThread 000000008A1C 00000300C81C 0 CreateFileA 000000008A2A 00000300C82A 0 CreateEventA 000000008A3A 00000300C83A 0 CloseHandle 000000008A46 00000300C846 0 gdi32.dll 000000008A52 00000300C852 0 SelectObject 000000008A62 00000300C862 0 Rectangle 000000008A6E 00000300C86E 0 GetTextMetricsA 000000008A80 00000300C880 0 GetDeviceCaps 000000008A90 00000300C890 0 DeleteObject 000000008AA0 00000300C8A0 0 DeleteDC 000000008AAC 00000300C8AC 0 CreateSolidBrush 000000008AC0 00000300C8C0 0 CreateDCA 000000008ACA 00000300C8CA 0 user32.dll 000000008AD8 00000300C8D8 0 CreateWindowExA 000000008AEA 00000300C8EA 0 UnregisterClassA 000000008AFE 00000300C8FE 0 TranslateMessage 000000008B12 00000300C912 0 SetTimer 000000008B1E 00000300C91E 0 SetFocus 000000008B2A 00000300C92A 0 SendMessageA 000000008B3A 00000300C93A 0 RegisterClassA 000000008B4C 00000300C94C 0 PostMessageA 000000008B5C 00000300C95C 0 PeekMessageA 000000008B6C 00000300C96C 0 LoadIconA 000000008B78 00000300C978 0 LoadCursorA 000000008B86 00000300C986 0 InvalidateRect 000000008B98 00000300C998 0 GetWindowTextA 000000008BAA 00000300C9AA 0 GetWindowDC 000000008BB8 00000300C9B8 0 GetMessageA 000000008BC6 00000300C9C6 0 GetDesktopWindow 000000008BDA 00000300C9DA 0 GetClientRect 000000008BEA 00000300C9EA 0 DrawTextA 000000008BF6 00000300C9F6 0 DispatchMessageA 000000008C0A 00000300CA0A 0 DestroyWindow 000000008C1A 00000300CA1A 0 DefWindowProcA 000000008C2A 00000300CA2A 0 kernel32.dll 000000008C3A 00000300CA3A 0 VirtualProtect 000000008C4A 00000300CA4A 0 user32.dll 000000008C58 00000300CA58 0 wsprintfA 000000008C62 00000300CA62 0 PSAPI.DLL 000000008C6E 00000300CA6E 0 GetModuleBaseNameA 000000008C84 00000300CA84 0 EnumProcesses 000000008E0F 00000300D00F 0 0"0*020:0B0J0R0Z0b0j0r0z0 000000008E55 00000300D055 0 5)5D5 000000008E5B 00000300D05B 0 5&7b7 000000008E7D 00000300D07D 0 8$868B8Q8]8e8p8v8 File pos Mem pos ID Text ======== ======= == ==== 000000008EA9 00000300D0A9 0 9*9K9c9 000000008EB9 00000300D0B9 0 9G:g: 000000008ECB 00000300D0CB 0 < <+<4<;<J<Q<s< 000000008EDD 00000300D0DD 0 <Y=w=|= 000000008EED 00000300D0ED 0 >R>[>q> 000000008EFD 00000300D0FD 0 ?"?L?U?e?m?s?|? 000000008F29 00000300D129 0 000<0D0[0j0z0 000000008F47 00000300D147 0 1n1t1|1 000000008F59 00000300D159 0 2e2l2|2 000000008F7D 00000300D17D 0 4?4_4z4 000000008F89 00000300D189 0 4.565 000000008F95 00000300D195 0 7'7E7[7r7 000000008FA9 00000300D1A9 0 8 8.8b8~8 000000008FBD 00000300D1BD 0 9!9S9\9 000000008FCB 00000300D1CB 0 :/:w; 000000008FDB 00000300D1DB 0 <'<S<h< 000000008FE9 00000300D1E9 0 = =&=,=2=7===F=V=[= 000000008FFD 00000300D1FD 0 =e=j=x= 000000009013 00000300D213 0 >4>>>c>m>w> 00000000906F 00000300D26F 0 3"3&3,30363=3A3[3d3m3y3 00000000909B 00000300D29B 0 424\4w4 0000000090B5 00000300D2B5 0 5!5-5;5E5c5h5{5 0000000090E1 00000300D2E1 0 6&6.666>6F6N6V6 0000000090F1 00000300D2F1 0 6f6n6v6~6 000000009121 00000300D321 0 7&7.767>7F7N7V7 000000009131 00000300D331 0 7f7n7v7~7 000000009161 00000300D361 0 8&8>8 00000000916B 00000300D36B 0 9&9.969D9P9Y9a9u9{9 000000009195 00000300D395 0 :%:,:7:>:I:U:c:j:w: 0000000091E3 00000300D3E3 0 <'<,<1<<<A<F<Q<V<[<f<k<p<{< 000000009238 00000300D438 0 y0_1g1 000000009243 00000300D443 0 2V2g2l2 00000000924B 00000300D44B 0 2;3H3X3 00000000925B 00000300D45B 0 6,7C7 00000000927D 00000300D47D 0 ;d<u= 000000009285 00000300D485 0 >t>x? 000000009299 00000300D499 0 091E1|1 0000000092A9 00000300D4A9 0 1K2W2~2 0000000092B1 00000300D4B1 0 2_3p3 0000000092BF 00000300D4BF 0 3<4a4m4 0000000092C7 00000300D4C7 0 4G5N: 0000000092DD 00000300D4DD 0 :(:3:<:B:T: 0000000092F5 00000300D4F5 0 <n<t<}< 00000000930B 00000300D50B 0 =.>4>O>h>u> 000000009325 00000300D525 0 ?(?<?O? 00000000933F 00000300D53F 0 1f1p1z1 00000000935D 00000300D55D 0 1<3A3 000000009375 00000300D575 0 7,7@7T7h7|7 00000000938B 00000300D58B 0 798>8D8>9p9|9 0000000093A3 00000300D5A3 0 :C:S:W: 0000000093BD 00000300D5BD 0 :G;\;q;|; 0000000093DF 00000300D5DF 0 =!=-=2=7=\= 0000000093F3 00000300D5F3 0 ='>/>:>P>U>d>j>w> 000000009411 00000300D611 0 ?#?B?O?_?g?r? 00000000943D 00000300D63D 0 070?0J0 000000009445 00000300D645 0 0c0n0{0 000000009471 00000300D671 0 1%1*1/141>1C1H1M1 000000009493 00000300D693 0 4,444L4[4e4n4y4 0000000094C7 00000300D6C7 0 6 6+6 0000000094D9 00000300D6D9 0 7 7&7,72787C7 File pos Mem pos ID Text ======== ======= == ==== 0000000094FF 00000300D6FF 0 8&81868;8F8T8a8k8z8 000000009539 00000300D739 0 9#9)9/9 000000009548 00000300D748 0 $0(0,0 0000000097CA 00000300E1CA 0 33331 0000000097E9 00000300E1E9 0 33333 00000000980A 00000300E20A 0 33331 00000000982F 00000300E22F 0 Gggfv@ 00000000983F 00000300E23F 0 &vvggd 00000000984F 00000300E24F 0 wwgbvt 00000000985D 00000300E25D 0 1wwwr"gf@ 00000000986D 00000300E26D 0 1wwwr"vv@ 00000000987F 00000300E27F 0 wr""gf@ 00000000988F 00000300E28F 0 wr""&f@ 00000000989F 00000300E29F 0 ww"w""@ 0000000098B0 00000300E2B0 0 wr'""@ 0000000098CE 00000300E2CE 0 1rwr" 000000009949 00000300E349 0 3333; 000000009959 00000300E359 0 33333 000000009A55 00000300E455 0 Pwinstr 000000009A5E 00000300E45E 0 UTypes 000000009A67 00000300E467 0 System 000000009A70 00000300E470 0 SysInit 000000009A79 00000300E479 0 KWindows 000000009C00 000003009C00 0 x/swing/text/html/HTMLDocument; 000000009C21 000003009C21 0 @(Ljavax/swing/JEditorPane;)Ljavax/swing/text/html/HTMLEditorKit; 000000009C64 000003009C64 0 a(Ljavax/swing/text/html/HTMLDocument;ILjavax/swing/text/html/HTML$Tag;)Ljavax/swing/text/Element; 000000009F3D 000003009F3D 0 javax/swing/text/html/HTMLEditorKit$InsertHTMLTextAction.class 000000009F8B 000003009F8B 0 <init> 000000009F9B 000003009F9B 0 HTMLTextAction 000000009FAC 000003009FAC 0 InnerClasses 000000009FBB 000003009FBB 0 InsertHTMLTextAction 000000009FD2 000003009FD2 0 Unable to insert: 000000009FE7 000003009FE7 0 actionPerformed 000000009FF9 000003009FF9 0 addTag 00000000A000 00000300A000 0 2012/10/26 16:51:44.343 >CLoger() Debug mode: [0] 00000000A034 00000300A034 0 2012/10/26 16:51:44.343 CCommunicator started. Current version: [3.3.0.2/20100901] 00000000A089 00000300A089 0 2012/10/26 16:51:44.453 <------------ COMUNICATION --------------------> 00000000A0D3 00000300A0D3 0 2012/10/26 16:51:44.453 1. IP: [10.20.136.167] 00000000A104 00000300A104 0 2012/10/26 16:51:44.453 2. PORT: [20100] 00000000A12F 00000300A12F 0 2012/10/26 16:51:44.453 3. KeepAliveTime: [10000] 00000000A163 00000300A163 0 2012/10/26 16:51:44.453 4. KeepAliveInterval: [1000] 00000000A19A 00000300A19A 0 2012/10/26 16:51:44.453 <----------------------------------------------> 00000000A1E4 00000300A1E4 0 2012/10/26 16:51:46.390 Trying to connect: [10.20.136.167]-[20100]-[A0308927] 00000000A234 00000300A234 0 2012/10/26 16:51:47.015 Need send header: [A0308927] 00000000A26B 00000300A26B 0 2012/10/26 16:51:48.015 >OnConect() Set Agent status - CONNECTED 00000000A2AD 00000300A2AD 0 2012/10/26 16:51:48.015 >IsNeedSendULOG() Read update status.... 00000000A2EF 00000300A2EF 0 2012/10/26 16:51:48.015 Connected!! 00000000A314 00000300A314 0 2012/10/26 16:59:28.640 WARNING: Error disconnect. Status: [2] 00000000A355 00000300A355 0 2012/10/26 16:59:29.640 Error... disconnected! 00000000A385 00000300A385 0 2012/10/26 16:59:29.640 We are disconnected! 00000000A3B3 00000300A3B3 0 2012/10/26 16:59:29.656 Trying to connect: [10.20.136.167]-[20100]-[A0308927] 00000000A403 00000300A403 0 2012/10/26 16:59:30.546 Need send header: [A0308927] 00000000A43A 00000300A43A 0 2012/10/26 16:59:31.546 >OnConect() Set Agent status - CONNECTED 00000000A47C 00000300A47C 0 2012/10/26 16:59:31.546 >IsNeedSendULOG() Read update status.... 00000000A4BE 00000300A4BE 0 2012/10/26 16:59:31.546 Connected!! 00000000A4E3 00000300A4E3 0 2012/10/26 17:07:35.578 >CLoger() Debug mode: [0] 00000000A517 00000300A517 0 2012/10/26 17:07:35.578 CCommunicator started. Current version: [3.3.0.2/20100901] 00000000A56C 00000300A56C 0 2012/10/26 17:07:35.578 <------------ COMUNICATION --------------------> 00000000A5B6 00000300A5B6 0 2012/10/26 17:07:35.578 1. IP: [10.20.136.167] 00000000A5E7 00000300A5E7 0 2012/10/26 17:07:35.578 2. PORT: [20100] File pos Mem pos ID Text ======== ======= == ==== 00000000A612 00000300A612 0 2012/10/26 17:07:35.578 3. KeepAliveTime: [10000] 00000000A646 00000300A646 0 2012/10/26 17:07:35.578 4. KeepAliveInterval: [1000] 00000000A67D 00000300A67D 0 2012/10/26 17:07:35.578 <----------------------------------------------> 00000000A6C7 00000300A6C7 0 2012/10/26 17:07:36.734 Trying to connect: [10.20.136.167]-[20100]-[A0308927] 00000000A717 00000300A717 0 2012/10/26 17:07:37.250 Need send header: [A0308927] 00000000A74E 00000300A74E 0 2012/10/26 17:07:38.250 >OnConect() Set Agent status - CONNECTED 00000000A790 00000300A790 0 2012/10/26 17:07:38.250 >IsNeedSendULOG() Read update status.... 00000000A7D2 00000300A7D2 0 2012/10/26 17:07:38.250 Connected!! 00000000A7F7 00000300A7F7 0 2012/11/08 10:17:06.968 >CLoger() Debug mode: [0] 00000000A82B 00000300A82B 0 2012/11/08 10:17:06.968 CCommunicator started. Current version: [3.3.0.2/20100901] 00000000A880 00000300A880 0 2012/11/08 10:17:06.968 <------------ COMUNICATION --------------------> 00000000A8CA 00000300A8CA 0 2012/11/08 10:17:06.968 1. IP: [10.20.136.167] 00000000A8FB 00000300A8FB 0 2012/11/08 10:17:06.968 2. PORT: [20100] 00000000A926 00000300A926 0 2012/11/08 10:17:06.968 3. KeepAliveTime: [10000] 00000000A95A 00000300A95A 0 2012/11/08 10:17:06.968 4. KeepAliveInterval: [1000] 00000000A991 00000300A991 0 2012/11/08 10:17:06.968 <----------------------------------------------> 00000000A9DB 00000300A9DB 0 2012/11/08 10:17:07.125 Trying to connect: [10.20.136.167]-[20100]-[A0308973] 00000000AA2B 00000300AA2B 0 2012/11/08 10:17:12.203 Can not connect! Trying again... 00000000AA65 00000300AA65 0 2012/11/08 10:31:07.937 >CLoger() Debug mode: [0] 00000000AA99 00000300AA99 0 2012/11/08 10:31:07.937 CCommunicator started. Current version: [3.3.0.2/20100901] 00000000AAEE 00000300AAEE 0 2012/11/08 10:31:07.937 <------------ COMUNICATION --------------------> 00000000AB38 00000300AB38 0 2012/11/08 10:31:07.937 1. IP: [10.20.136.167] 00000000AB69 00000300AB69 0 2012/11/08 10:31:07.937 2. PORT: [20100] 00000000AB94 00000300AB94 0 2012/11/08 10:31:07.937 3. KeepAliveTime: [10000] 00000000ABC8 00000300ABC8 0 2012/11/08 10:31:07.937 4. KeepAliveInterval: [1000] 00000000ABFF 00000300ABFF 0 2012/11/08 10:31:07.937 <----------------------------------------------> 00000000AC49 00000300AC49 0 2012/11/08 10:31:08.781 Trying to connect: [10.20.136.167]-[20100]-[A0308973] 00000000AC99 00000300AC99 0 2012/11/08 10:31:13.875 Can not connect! Trying again... 00000000ACD3 00000300ACD3 0 2012/11/08 10:36:05.750 Need send header: [A0308973] 00000000AD0A 00000300AD0A 0 2012/11/08 10:36:06.750 >OnConect() Set Agent status - CONNECTED 00000000AD4C 00000300AD4C 0 2012/11/08 10:36:06.750 >IsNeedSendULOG() Read update status.... 00000000AD8E 00000300AD8E 0 2012/11/08 10:36:06.750 Connected!! 00000000ADB3 00000300ADB3 0 2012/11/08 11:14:55.796 >CLoger() Debug mode: [0] 00000000ADE7 00000300ADE7 0 2012/11/08 11:14:55.812 CCommunicator started. Current version: [3.3.0.2/20100901] 00000000AE3C 00000300AE3C 0 2012/11/08 11:14:55.812 <------------ COMUNICATION --------------------> 00000000AE86 00000300AE86 0 2012/11/08 11:14:55.812 1. IP: [10.20.136.167] 00000000AEB7 00000300AEB7 0 2012/11/08 11:14:55.812 2. PORT: [20100] 00000000AEE2 00000300AEE2 0 2012/11/08 11:14:55.812 3. KeepAliveTime: [10000] 00000000AF16 00000300AF16 0 2012/11/08 11:14:55.812 4. KeepAliveInterval: [1000] 00000000AF4D 00000300AF4D 0 2012/11/08 11:14:55.812 <----------------------------------------------> 00000000AF97 00000300AF97 0 2012/11/08 11:14:55.859 Trying to connect: [10.20.136.167]-[20100]-[A0308973] 00000000AFE7 00000300AFE7 0 2012/11/08 11:14:55.890 Need send header: [A0308973] 00000000B01E 00000300B01E 0 2012/11/08 11:14:56.890 >OnConect() Set Agent status - CONNECTED 00000000B060 00000300B060 0 2012/11/08 11:14:56.890 >IsNeedSendULOG() Read update status.... 00000000B0A2 00000300B0A2 0 2012/11/08 11:14:56.890 Connected!! 00000000B0C7 00000300B0C7 0 2012/11/08 11:20:33.937 >CLoger() Debug mode: [0] 00000000B0FB 00000300B0FB 0 2012/11/08 11:20:34.000 CCommunicator started. Current version: [3.3.0.2/20100901] 00000000B150 00000300B150 0 2012/11/08 11:20:34.000 <------------ COMUNICATION --------------------> 00000000B19A 00000300B19A 0 2012/11/08 11:20:34.000 1. IP: [10.20.136.167] 00000000B1CB 00000300B1CB 0 2012/11/08 11:20:34.000 2. PORT: [20100] 00000000B1F6 00000300B1F6 0 2012/11/08 11:20:34.000 3. KeepAliveTime: [10000] 00000000B22A 00000300B22A 0 2012/11/08 11:20:34.000 4. KeepAliveInterval: [1000] 00000000B261 00000300B261 0 2012/11/08 11:20:34.000 <----------------------------------------------> 00000000B2AB 00000300B2AB 0 2012/11/08 11:20:34.046 Trying to connect: [10.20.136.167]-[20100]-[A0308973] 00000000B2FB 00000300B2FB 0 2012/11/08 11:20:34.062 Need send header: [A0308973] 00000000B332 00000300B332 0 2012/11/08 11:20:35.062 >OnConect() Set Agent status - CONNECTED 00000000B374 00000300B374 0 2012/11/08 11:20:35.062 >IsNeedSendULOG() Read update status.... 00000000B3B6 00000300B3B6 0 2012/11/08 11:20:35.062 Connected!! 00000000B3DB 00000300B3DB 0 2012/11/08 11:46:54.703 >CLoger() Debug mode: [0] 00000000B40F 00000300B40F 0 2012/11/08 11:46:54.703 CCommunicator started. Current version: [3.3.0.2/20100901] File pos Mem pos ID Text ======== ======= == ==== 00000000B464 00000300B464 0 2012/11/08 11:46:54.703 <------------ COMUNICATION --------------------> 00000000B4AE 00000300B4AE 0 2012/11/08 11:46:54.703 1. IP: [10.20.136.167] 00000000B4DF 00000300B4DF 0 2012/11/08 11:46:54.703 2. PORT: [20100] 00000000B50A 00000300B50A 0 2012/11/08 11:46:54.703 3. KeepAliveTime: [10000] 00000000B53E 00000300B53E 0 2012/11/08 11:46:54.703 4. KeepAliveInterval: [1000] 00000000B575 00000300B575 0 2012/11/08 11:46:54.703 <----------------------------------------------> 00000000B5BF 00000300B5BF 0 2012/11/08 11:46:55.187 Trying to connect: [10.20.136.167]-[20100]-[A0308973] 00000000B60F 00000300B60F 0 2012/11/08 11:46:55.218 Need send header: [A0308973] 00000000B646 00000300B646 0 2012/11/08 11:46:56.218 >OnConect() Set Agent status - CONNECTED 00000000B688 00000300B688 0 2012/11/08 11:46:56.218 >IsNeedSendULOG() Read update status.... 00000000B6CA 00000300B6CA 0 2012/11/08 11:46:56.218 Connected!! 00000000B6EF 00000300B6EF 0 2012/11/08 11:53:06.968 >CLoger() Debug mode: [0] 00000000B723 00000300B723 0 2012/11/08 11:53:06.984 CCommunicator started. Current version: [3.3.0.2/20100901] 00000000B778 00000300B778 0 2012/11/08 11:53:06.984 <------------ COMUNICATION --------------------> 00000000B7C2 00000300B7C2 0 2012/11/08 11:53:06.984 1. IP: [10.20.136.167] 00000000B7F3 00000300B7F3 0 2012/11/08 11:53:06.984 2. PORT: [20100] 00000000B81E 00000300B81E 0 2012/11/08 11:53:06.984 3. KeepAliveTime: [10000] 00000000B852 00000300B852 0 2012/11/08 11:53:06.984 4. KeepAliveInterval: [1000] 00000000B889 00000300B889 0 2012/11/08 11:53:06.984 <----------------------------------------------> 00000000B8D3 00000300B8D3 0 2012/11/08 11:53:07.546 Trying to connect: [10.20.136.167]-[20100]-[A0308973] 00000000B923 00000300B923 0 2012/11/08 11:53:07.562 Need send header: [A0308973] 00000000B95A 00000300B95A 0 2012/11/08 11:53:08.562 >OnConect() Set Agent status - CONNECTED 00000000B99C 00000300B99C 0 2012/11/08 11:53:08.562 >IsNeedSendULOG() Read update status.... 00000000B9DE 00000300B9DE 0 2012/11/08 11:53:08.562 Connected!! 00000000BA03 00000300BA03 0 2012/11/08 12:09:30.062 >CLoger() Debug mode: [0] 00000000BA37 00000300BA37 0 2012/11/08 12:09:30.109 CCommunicator started. Current version: [3.3.0.2/20100901] 00000000BA8C 00000300BA8C 0 2012/11/08 12:09:30.109 <------------ COMUNICATION --------------------> 00000000BAD6 00000300BAD6 0 2012/11/08 12:09:30.109 1. IP: [10.20.136.167] 00000000BB07 00000300BB07 0 2012/11/08 12:09:30.109 2. PORT: [20100] 00000000BB32 00000300BB32 0 2012/11/08 12:09:30.109 3. KeepAliveTime: [10000] 00000000BB66 00000300BB66 0 2012/11/08 12:09:30.109 4. KeepAliveInterval: [1000] 00000000BB9D 00000300BB9D 0 2012/11/08 12:09:30.109 <----------------------------------------------> 00000000BBE7 00000300BBE7 0 2012/11/08 12:09:30.265 Trying to connect: [10.20.136.167]-[20100]-[A0308973] 00000000BC37 00000300BC37 0 2012/11/08 12:09:30.281 Need send header: [A0308973] 00000000BC6E 00000300BC6E 0 2012/11/08 12:09:31.281 >OnConect() Set Agent status - CONNECTED 00000000BCB0 00000300BCB0 0 2012/11/08 12:09:31.281 >IsNeedSendULOG() Read update status.... 00000000BCF2 00000300BCF2 0 2012/11/08 12:09:31.281 Connected!! 00000000BD17 00000300BD17 0 2013/04/16 13:14:16.062 >CLoger() Debug mode: [0] 00000000BD4B 00000300BD4B 0 2013/04/16 13:14:16.062 CCommunicator started. Current version: [3.3.0.2/20100901] 00000000BDA0 00000300BDA0 0 2013/04/16 13:14:16.062 <------------ COMUNICATION --------------------> 00000000BDEA 00000300BDEA 0 2013/04/16 13:14:16.062 1. IP: [10.20.136.167] 00000000BE1B 00000300BE1B 0 2013/04/16 13:14:16.062 2. PORT: [20100] 00000000BE46 00000300BE46 0 2013/04/16 13:14:16.062 3. KeepAliveTime: [10000] 00000000BE7A 00000300BE7A 0 2013/04/16 13:14:16.062 4. KeepAliveInterval: [1000] 00000000BEB1 00000300BEB1 0 2013/04/16 13:14:16.062 <----------------------------------------------> 00000000BEFB 00000300BEFB 0 2013/04/16 13:14:16.109 Trying to connect: [10.20.136.167]-[20100]-[A0308973] 00000000BF4B 00000300BF4B 0 2013/04/16 13:14:42.125 Can not connect! Trying again... 00000000BF85 00000300BF85 0 2013/04/16 13:18:29.031 >CLoger() Debug mode: [0] 00000000BFB9 00000300BFB9 0 2013/04/16 13:18:29.031 CCommunicator started. Current version: [3.3.0.MZ 00000000C04D 00000300C04D 0 !This program cannot be run in DOS mode. 00000000C0A8 00000300C0A8 0 Richh 00000000C1B0 00000300C1B0 0 .text 00000000C1D8 00000300C1D8 0 .rdata 00000000C1FF 00000300C1FF 0 @.data 00000000C228 00000300C228 0 .rsrc 00000000C451 00000300C451 0 u'h0p@ 00000000C45D 00000300C45D 0 j[hLp@ 00000000CAC0 00000300CAC0 0 QSUVW 00000000CF2A 00000300CF2A 0 8"uV@ 00000000D359 00000300D359 0 WSUVj File pos Mem pos ID Text ======== ======= == ==== 00000000D413 00000300D413 0 SUVWj 00000000D942 00000300D942 0 HSUVWh 00000000D9B0 00000300D9B0 0 f9|$F 00000000DBC4 00000300DBC4 0 tBjtj 00000000DC45 00000300DC45 0 @P(q@ 00000000DC7A 00000300DC7A 0 uRjtj 00000000DD65 00000300DD65 0 FP=(q@ 00000000DE33 00000300DE33 0 SVWUj 00000000DE9C 00000300DE9C 0 t.;t$$t( 00000000DF20 00000300DF20 0 VC20XC00U 00000000E04F 00000300E04F 0 SUVW3 00000000E05C 00000300E05C 0 E=xs@ 00000000E103 00000300E103 0 ;h8d@ 00000000E232 00000300E232 0 A=xs@ 00000000E695 00000300E695 0 QVWRP 00000000E6FD 00000300E6FD 0 WUVQh 00000000E752 00000300E752 0 |$$UWQ 00000000E784 00000300E784 0 D$(RP 00000000E7B7 00000300E7B7 0 L$ PPVQj 00000000E7D5 00000300E7D5 0 D$$RVPj 00000000E8E5 00000300E8E5 0 QVWRP 00000000E925 00000300E925 0 VBWRU 00000000E956 00000300E956 0 WSVQj 00000000E9A9 00000300E9A9 0 D$(PWSUQ 00000000E9F4 00000300E9F4 0 VPWSUQ 00000000EA3C 00000300EA3C 0 D$8QVRh 00000000EB50 00000300EB50 0 T$(SSSSWQh 00000000EB98 00000300EB98 0 VUWPh 00000000EC00 00000300EC00 0 T$$WSR 00000000EC9D 00000300EC9D 0 L$ RQP 00000000ECDB 00000300ECDB 0 U@RPS 00000000ED01 00000300ED01 0 VWUQj 00000000ED13 00000300ED13 0 T$$RP 00000000ED19 00000300ED19 0 D$ WP 000000009740 00000300E140 0 MAINICON( 000000000050 000003000050 0 This program must be run under Win32 000000000270 000003000270 0 .idata 000000000298 000003000298 0 .reloc 0000000002BF 0000030002BF 0 P.rsrc 00000000054B 00000300114B 0 'R/<s 0000000006DA 0000030012DA 0 |w;N= 000000000748 000003001348 0 WAYiv 0000000007B1 0000030013B1 0 V o/O 0000000007BD 0000030013BD 0 SW=2/F 0000000007D4 0000030013D4 0 z-{:Z 000000000879 000003001479 0 %nof 0000000008B0 0000030014B0 0 t0A]o 000000000936 000003001536 0 0E ykDe?0V@ 0000000009D2 0000030015D2 0 B.(~ 000000000A4E 00000300164E 0 E yl_ 000000000AA1 0000030016A1 0 @R/OQ( 000000000AAA 0000030016AA 0 Zk Sm 000000000B42 000003001742 0 X|hEB 000000000B56 000003001756 0 {q6#4-z 000000000BA3 0000030017A3 0 BS>J3 000000000C26 000003001826 0 yoz(L&10 000000000CA0 0000030018A0 0 I!HZ< 000000000D4D 00000300194D 0 xhmb, 000000000FE6 000003001BE6 0 +*TA 0000000013B4 000003001FB4 0 t {e& File pos Mem pos ID Text ======== ======= == ==== 000000001619 000003002219 0 M@x}a 0000000016E5 0000030022E5 0 :aTR4 00000000175E 00000300235E 0 zJC5& 0000000018AB 0000030024AB 0 O\arm 000000001900 000003002500 0 :#xG2 00000000194C 00000300254C 0 cY(F$W 000000001BFA 0000030027FA 0 &Wt/R 000000001C80 000003002880 0 Aw>CWx 000000001D65 000003002965 0 7d]xn\ 000000001DF8 0000030029F8 0 b wX)4 000000001E06 000003002A06 0 hYlS# 000000001E20 000003002A20 0 8tf[L 000000001F0C 000003002B0C 0 6|5f5G/ 00000000209B 000003002C9B 0 pP"+< 0000000020AD 000003002CAD 0 A5~T@ 0000000021A4 000003002DA4 0 0b.DG 0000000021E8 000003002DE8 0 sfU!Xm 0000000022AE 000003002EAE 0 Wedrh 0000000022FF 000003002EFF 0 0%Cxp 00000000244B 00000300304B 0 :-&da 0000000024E2 0000030030E2 0 ,U6#PE:x- 000000002636 000003003236 0 qmXw 00000000266B 00000300326B 0 WD[HO 000000002687 000003003287 0 wDQV(dg 0000000026FB 0000030032FB 0 87KBd 0000000027BC 0000030033BC 0 _B-3Q 000000002828 000003003428 0 [N 7} 00000000292C 00000300352C 0 / +Nb 00000000296C 00000300356C 0 8v t[r 000000002C2A 00000300382A 0 ]{>y8 000000002C52 000003003852 0 3#]cp 000000002D0C 00000300390C 0 =]Mx* 000000002D7F 00000300397F 0 9nL]"5Fu 000000002E20 000003003A20 0 zZKv= 000000002E79 000003003A79 0 (8~a<OZ 000000002E94 000003003A94 0 kK@l& 000000002FC7 000003003BC7 0 KqfLb& 000000003102 000003003D02 0 K 'vj[ 00000000311C 000003003D1C 0 6&D*o 00000000317B 000003003D7B 0 QeHkT 0000000031A2 000003003DA2 0 4"4@Sd 0000000031BC 000003003DBC 0 c~MXtqr 00000000322A 000003003E2A 0 "i_kV 00000000337F 000003003F7F 0 xl92:W 0000000033DE 000003003FDE 0 wuL9yd& 000000003772 000003004372 0 UH>FLpB 00000000378E 00000300438E 0 K~T@~~ 00000000379E 00000300439E 0 < sY- 0000000037FB 0000030043FB 0 ji:Y&C 000000003822 000003004422 0 q#D K( 000000003851 000003004451 0 ~*Xhq 0000000038B7 0000030044B7 0 {R&5+,x 000000003913 000003004513 0 y~S@5@ 000000003ACB 0000030046CB 0 YT}n[ 000000003B1B 00000300471B 0 r6+XM7 000000003C06 000003004806 0 EWzof 000000003C6B 00000300486B 0 6uSD? 000000003C79 000003004879 0 ixN&$ 000000003DBC 0000030049BC 0 ;oC]$q 000000003DCA 0000030049CA 0 oT#&5w File pos Mem pos ID Text ======== ======= == ==== 000000003DD7 0000030049D7 0 lx[(= 000000003DF2 0000030049F2 0 'DLh]_ 000000003E14 000003004A14 0 9-}}lXK 000000003E57 000003004A57 0 )6ujVKW 000000003EB3 000003004AB3 0 q+RY1 000000003EC3 000003004AC3 0 -:k&jO[ 000000003F1B 000003004B1B 0 EB_,9Ch 000000003F59 000003004B59 0 D02Bk 000000004030 000003004C30 0 ./rTa 00000000419B 000003004D9B 0 iv+\ 000000004275 000003004E75 0 )uC;T 00000000430F 000003004F0F 0 la{*. 0000000044C4 0000030050C4 0 S Qc% 0000000046AA 0000030052AA 0 :}GkH 0000000046FA 0000030052FA 0 &$\Gc 000000004701 000003005301 0 R&4d! 000000004C26 000003005826 0 L#SRU 000000004D01 000003005901 0 2q Anf 000000005043 000003005C43 0 [Nck: 00000000538D 000003005F8D 0 @xL#v 00000000550B 00000300610B 0 b0v(l 0000000055B4 0000030061B4 0 o{zO& 0000000059D3 0000030065D3 0 XjGT_ 0000000059E7 0000030065E7 0 P/: # 000000005D40 000003006940 0 "y]e1 000000005DEA 0000030069EA 0 .,eZob 000000005E78 000003006A78 0 iBQ|} 000000005EE0 000003006AE0 0 ]8E 000000005FD0 000003006BD0 0 WBqlN 000000006113 000003006D13 0 k3J7L 000000006121 000003006D21 0 nLDR?\ 00000000619C 000003006D9C 0 dN?*Uz 000000006229 000003006E29 0 p+FQ+@ 0000000062AF 000003006EAF 0 f=DGY 0000000062D7 000003006ED7 0 c$Q2\ 000000006344 000003006F44 0 <$VC, 000000006365 000003006F65 0 XwZ%F 0000000063E5 000003006FE5 0 lHA5)E 00000000647B 00000300707B 0 .XvEP 0000000064E0 0000030070E0 0 n$%"5 0000000068EB 0000030074EB 0 5.->= 0000000068FA 0000030074FA 0 '4C"j 000000006950 000003007550 0 3VZG& 000000006A65 000003007665 0 {Zx%+ 000000006A9B 00000300769B 0 d?"QD, 000000006AB5 0000030076B5 0 qyJT5+, 000000006C72 000003007872 0 soDcxM> 000000006C8D 00000300788D 0 !;?m|G? 000000006CB5 0000030078B5 0 BQd,|tD 000000006CD0 0000030078D0 0 $&gzNL\ 000000006CDE 0000030078DE 0 !Q2d{D 000000006F4A 000003007B4A 0 }S2!@ 0000000070C3 000003007CC3 0 Am"[$Z 0000000071CA 000003007DCA 0 nAVF> 00000000720F 000003007E0F 0 urw:H% 000000007221 000003007E21 0 kNqft 000000007344 000003007F44 0 Wy h, 0000000073A2 000003007FA2 0 Vh|e- 0000000075D7 0000030081D7 0 }66#m{ 000000007787 000003008387 0 2$Tev File pos Mem pos ID Text ======== ======= == ==== 0000000077F0 0000030083F0 0 :GTn8 000000007800 000003008400 0 ukJX" 0000000079D6 0000030085D6 0 tjmF*[K 0000000079F8 0000030085F8 0 y790/ 000000007A1A 00000300861A 0 k]rA, 000000007A9C 00000300869C 0 1>Y)\Gvb 000000007B7E 00000300877E 0 !L{fk 000000007C75 000003008875 0 qC_(m 000000007CD6 0000030088D6 0 +52,\ 000000007D31 000003008931 0 {k52g 000000007D68 000003008968 0 P2GDlI 000000007D75 000003008975 0 -_Bimx 000000007D82 000003008982 0 rgH=. 000000007D8F 00000300898F 0 xoRA4 000000007D9D 00000300899D 0 wdI># 000000007DB8 0000030089B8 0 p]N;$ 000000007DC5 0000030089C5 0 ziTC. 000000007DE9 0000030089E9 0 0CVi| 000000007DF6 0000030089F6 0 &;Lar 000000007E4C 00000300904C 0 Error 000000007E54 000003009054 0 Runtime error at 00000000 000000007E74 000003009074 0 0123456789ABCDEF 000000007EB0 0000030090B0 0 $1%2&3445566D7E8F9T*U0V#' 000000007ED2 0000030090D2 0 <o:o:_;OPO 000000007EE1 0000030090E1 0 OLONO 000000007EED 0000030090ED 0 O!O%O 000000008020 000003009220 0 <4,$?7/' 000000008066 000003009266 0 !"#$%&'()*+,-./012345678 0000000080B1 0000030092B1 0 (3-!0 0000000080B8 0000030092B8 0 ,1'8"5 0000000084D4 00000300C2D4 0 kernel32.dll 0000000084E4 00000300C2E4 0 DeleteCriticalSection 0000000084FC 00000300C2FC 0 LeaveCriticalSection 000000008514 00000300C314 0 EnterCriticalSection 00000000852C 00000300C32C 0 InitializeCriticalSection 000000008548 00000300C348 0 VirtualFree 000000008556 00000300C356 0 VirtualAlloc 000000008566 00000300C366 0 LocalFree 000000008572 00000300C372 0 LocalAlloc 000000008580 00000300C380 0 GetVersion 00000000858E 00000300C38E 0 GetCurrentThreadId 0000000085A4 00000300C3A4 0 GetThreadLocale 0000000085B6 00000300C3B6 0 GetStartupInfoA 0000000085C8 00000300C3C8 0 GetLocaleInfoA 0000000085DA 00000300C3DA 0 GetCommandLineA 0000000085EC 00000300C3EC 0 FreeLibrary 0000000085FA 00000300C3FA 0 ExitProcess 000000008608 00000300C408 0 WriteFile 000000008614 00000300C414 0 UnhandledExceptionFilter 000000008630 00000300C430 0 RtlUnwind 00000000863C 00000300C43C 0 RaiseException 00000000864E 00000300C44E 0 GetStdHandle 00000000865C 00000300C45C 0 user32.dll 00000000866A 00000300C46A 0 GetKeyboardType 00000000867C 00000300C47C 0 MessageBoxA 000000008688 00000300C488 0 advapi32.dll 000000008698 00000300C498 0 RegQueryValueExA 0000000086AC 00000300C4AC 0 RegOpenKeyExA 0000000086BC 00000300C4BC 0 RegCloseKey 0000000086C8 00000300C4C8 0 kernel32.dll File pos Mem pos ID Text ======== ======= == ==== 0000000086D8 00000300C4D8 0 TlsSetValue 0000000086E6 00000300C4E6 0 TlsGetValue 0000000086F4 00000300C4F4 0 TlsFree 0000000086FE 00000300C4FE 0 TlsAlloc 00000000870A 00000300C50A 0 LocalFree 000000008716 00000300C516 0 LocalAlloc 000000008722 00000300C522 0 advapi32.dll 000000008732 00000300C532 0 OpenProcessToken 000000008746 00000300C546 0 LookupPrivilegeValueA 00000000875E 00000300C55E 0 InitiateSystemShutdownA 000000008778 00000300C578 0 AdjustTokenPrivileges 00000000878E 00000300C58E 0 kernel32.dll 00000000879E 00000300C59E 0 lstrlenA 0000000087AA 00000300C5AA 0 lstrcpyA 0000000087B6 00000300C5B6 0 lstrcmpiW 0000000087C2 00000300C5C2 0 lstrcmpiA 0000000087CE 00000300C5CE 0 lstrcmpA 0000000087DA 00000300C5DA 0 lstrcatA 0000000087E6 00000300C5E6 0 WriteProcessMemory 0000000087FC 00000300C5FC 0 WriteFile 000000008808 00000300C608 0 WaitForSingleObject 00000000881E 00000300C61E 0 VirtualProtect 000000008830 00000300C630 0 VirtualFreeEx 000000008840 00000300C640 0 VirtualAllocEx 000000008852 00000300C652 0 Sleep 00000000885A 00000300C65A 0 SetFileTime 000000008868 00000300C668 0 SetFilePointer 00000000887A 00000300C67A 0 ReadFile 000000008886 00000300C686 0 PulseEvent 000000008894 00000300C694 0 OpenProcess 0000000088A2 00000300C6A2 0 MultiByteToWideChar 0000000088B8 00000300C6B8 0 LocalFree 0000000088C4 00000300C6C4 0 LocalAlloc 0000000088D2 00000300C6D2 0 LoadLibraryA 0000000088E2 00000300C6E2 0 GetWindowsDirectoryA 0000000088FA 00000300C6FA 0 GetVolumeInformationA 000000008912 00000300C712 0 GetSystemTimeAsFileTime 00000000892C 00000300C72C 0 GetProcAddress 00000000893E 00000300C73E 0 GetModuleHandleA 000000008952 00000300C752 0 GetModuleFileNameA 000000008968 00000300C768 0 GetLastError 000000008978 00000300C778 0 GetFileSize 000000008986 00000300C786 0 GetExitCodeThread 00000000899A 00000300C79A 0 GetCurrentProcess 0000000089AE 00000300C7AE 0 FormatMessageA 0000000089C0 00000300C7C0 0 FileTimeToLocalFileTime 0000000089DA 00000300C7DA 0 ExitProcess 0000000089E8 00000300C7E8 0 DeleteFileA 0000000089F6 00000300C7F6 0 CreateThread 000000008A06 00000300C806 0 CreateRemoteThread 000000008A1C 00000300C81C 0 CreateFileA 000000008A2A 00000300C82A 0 CreateEventA 000000008A3A 00000300C83A 0 CloseHandle 000000008A46 00000300C846 0 gdi32.dll 000000008A52 00000300C852 0 SelectObject 000000008A62 00000300C862 0 Rectangle 000000008A6E 00000300C86E 0 GetTextMetricsA 000000008A80 00000300C880 0 GetDeviceCaps 000000008A90 00000300C890 0 DeleteObject 000000008AA0 00000300C8A0 0 DeleteDC File pos Mem pos ID Text ======== ======= == ==== 000000008AAC 00000300C8AC 0 CreateSolidBrush 000000008AC0 00000300C8C0 0 CreateDCA 000000008ACA 00000300C8CA 0 user32.dll 000000008AD8 00000300C8D8 0 CreateWindowExA 000000008AEA 00000300C8EA 0 UnregisterClassA 000000008AFE 00000300C8FE 0 TranslateMessage 000000008B12 00000300C912 0 SetTimer 000000008B1E 00000300C91E 0 SetFocus 000000008B2A 00000300C92A 0 SendMessageA 000000008B3A 00000300C93A 0 RegisterClassA 000000008B4C 00000300C94C 0 PostMessageA 000000008B5C 00000300C95C 0 PeekMessageA 000000008B6C 00000300C96C 0 LoadIconA 000000008B78 00000300C978 0 LoadCursorA 000000008B86 00000300C986 0 InvalidateRect 000000008B98 00000300C998 0 GetWindowTextA 000000008BAA 00000300C9AA 0 GetWindowDC 000000008BB8 00000300C9B8 0 GetMessageA 000000008BC6 00000300C9C6 0 GetDesktopWindow 000000008BDA 00000300C9DA 0 GetClientRect 000000008BEA 00000300C9EA 0 DrawTextA 000000008BF6 00000300C9F6 0 DispatchMessageA 000000008C0A 00000300CA0A 0 DestroyWindow 000000008C1A 00000300CA1A 0 DefWindowProcA 000000008C2A 00000300CA2A 0 kernel32.dll 000000008C3A 00000300CA3A 0 VirtualProtect 000000008C4A 00000300CA4A 0 user32.dll 000000008C58 00000300CA58 0 wsprintfA 000000008C62 00000300CA62 0 PSAPI.DLL 000000008C6E 00000300CA6E 0 GetModuleBaseNameA 000000008C84 00000300CA84 0 EnumProcesses 000000008E0F 00000300D00F 0 0"0*020:0B0J0R0Z0b0j0r0z0 000000008E55 00000300D055 0 5)5D5 000000008E5B 00000300D05B 0 5&7b7 000000008E7D 00000300D07D 0 8$868B8Q8]8e8p8v8 000000008EA9 00000300D0A9 0 9*9K9c9 000000008EB9 00000300D0B9 0 9G:g: 000000008ECB 00000300D0CB 0 < <+<4<;<J<Q<s< 000000008EDD 00000300D0DD 0 <Y=w=|= 000000008EED 00000300D0ED 0 >R>[>q> 000000008EFD 00000300D0FD 0 ?"?L?U?e?m?s?|? 000000008F29 00000300D129 0 000<0D0[0j0z0 000000008F47 00000300D147 0 1n1t1|1 000000008F59 00000300D159 0 2e2l2|2 000000008F7D 00000300D17D 0 4?4_4z4 000000008F89 00000300D189 0 4.565 000000008F95 00000300D195 0 7'7E7[7r7 000000008FA9 00000300D1A9 0 8 8.8b8~8 000000008FBD 00000300D1BD 0 9!9S9\9 000000008FCB 00000300D1CB 0 :/:w; 000000008FDB 00000300D1DB 0 <'<S<h< 000000008FE9 00000300D1E9 0 = =&=,=2=7===F=V=[= 000000008FFD 00000300D1FD 0 =e=j=x= 000000009013 00000300D213 0 >4>>>c>m>w> 00000000906F 00000300D26F 0 3"3&3,30363=3A3[3d3m3y3 00000000909B 00000300D29B 0 424\4w4 0000000090B5 00000300D2B5 0 5!5-5;5E5c5h5{5 0000000090E1 00000300D2E1 0 6&6.666>6F6N6V6 0000000090F1 00000300D2F1 0 6f6n6v6~6 000000009121 00000300D321 0 7&7.767>7F7N7V7 File pos Mem pos ID Text ======== ======= == ==== 000000009131 00000300D331 0 7f7n7v7~7 000000009161 00000300D361 0 8&8>8 00000000916B 00000300D36B 0 9&9.969D9P9Y9a9u9{9 000000009195 00000300D395 0 :%:,:7:>:I:U:c:j:w: 0000000091E3 00000300D3E3 0 <'<,<1<<<A<F<Q<V<[<f<k<p<{< 000000009238 00000300D438 0 y0_1g1 000000009243 00000300D443 0 2V2g2l2 00000000924B 00000300D44B 0 2;3H3X3 00000000925B 00000300D45B 0 6,7C7 00000000927D 00000300D47D 0 ;d<u= 000000009285 00000300D485 0 >t>x? 000000009299 00000300D499 0 091E1|1 0000000092A9 00000300D4A9 0 1K2W2~2 0000000092B1 00000300D4B1 0 2_3p3 0000000092BF 00000300D4BF 0 3<4a4m4 0000000092C7 00000300D4C7 0 4G5N: 0000000092DD 00000300D4DD 0 :(:3:<:B:T: 0000000092F5 00000300D4F5 0 <n<t<}< 00000000930B 00000300D50B 0 =.>4>O>h>u> 000000009325 00000300D525 0 ?(?<?O? 00000000933F 00000300D53F 0 1f1p1z1 00000000935D 00000300D55D 0 1<3A3 000000009375 00000300D575 0 7,7@7T7h7|7 00000000938B 00000300D58B 0 798>8D8>9p9|9 0000000093A3 00000300D5A3 0 :C:S:W: 0000000093BD 00000300D5BD 0 :G;\;q;|; 0000000093DF 00000300D5DF 0 =!=-=2=7=\= 0000000093F3 00000300D5F3 0 ='>/>:>P>U>d>j>w> 000000009411 00000300D611 0 ?#?B?O?_?g?r? 00000000943D 00000300D63D 0 070?0J0 000000009445 00000300D645 0 0c0n0{0 000000009471 00000300D671 0 1%1*1/141>1C1H1M1 000000009493 00000300D693 0 4,444L4[4e4n4y4 0000000094C7 00000300D6C7 0 6 6+6 0000000094D9 00000300D6D9 0 7 7&7,72787C7 0000000094FF 00000300D6FF 0 8&81868;8F8T8a8k8z8 000000009539 00000300D739 0 9#9)9/9 000000009548 00000300D748 0 $0(0,0 0000000097CA 00000300E1CA 0 33331 0000000097E9 00000300E1E9 0 33333 00000000980A 00000300E20A 0 33331 00000000982F 00000300E22F 0 Gggfv@ 00000000983F 00000300E23F 0 &vvggd 00000000984F 00000300E24F 0 wwgbvt 00000000985D 00000300E25D 0 1wwwr"gf@ 00000000986D 00000300E26D 0 1wwwr"vv@ 00000000987F 00000300E27F 0 wr""gf@ 00000000988F 00000300E28F 0 wr""&f@ 00000000989F 00000300E29F 0 ww"w""@ 0000000098B0 00000300E2B0 0 wr'""@ 0000000098CE 00000300E2CE 0 1rwr" 000000009949 00000300E349 0 3333; 000000009959 00000300E359 0 33333 000000009A55 00000300E455 0 Pwinstr 000000009A5E 00000300E45E 0 UTypes 000000009A67 00000300E467 0 System 000000009A70 00000300E470 0 SysInit 000000009A79 00000300E479 0 KWindows 000000009C00 000003009C00 0 x/swing/text/html/HTMLDocument; 000000009C21 000003009C21 0 @(Ljavax/swing/JEditorPane;)Ljavax/swing/text/html/HTMLEditorKit; File pos Mem pos ID Text ======== ======= == ==== 000000009C64 000003009C64 0 a(Ljavax/swing/text/html/HTMLDocument;ILjavax/swing/text/html/HTML$Tag;)Ljavax/swing/text/Element; 000000009F3D 000003009F3D 0 javax/swing/text/html/HTMLEditorKit$InsertHTMLTextAction.class 000000009F8B 000003009F8B 0 <init> 000000009F9B 000003009F9B 0 HTMLTextAction 000000009FAC 000003009FAC 0 InnerClasses 000000009FBB 000003009FBB 0 InsertHTMLTextAction 000000009FD2 000003009FD2 0 Unable to insert: 000000009FE7 000003009FE7 0 actionPerformed 000000009FF9 000003009FF9 0 addTag 00000000A000 00000300A000 0 2012/10/26 16:51:44.343 >CLoger() Debug mode: [0] 00000000A034 00000300A034 0 2012/10/26 16:51:44.343 CCommunicator started. Current version: [3.3.0.2/20100901] 00000000A089 00000300A089 0 2012/10/26 16:51:44.453 <------------ COMUNICATION --------------------> 00000000A0D3 00000300A0D3 0 2012/10/26 16:51:44.453 1. IP: [10.20.136.167] 00000000A104 00000300A104 0 2012/10/26 16:51:44.453 2. PORT: [20100] 00000000A12F 00000300A12F 0 2012/10/26 16:51:44.453 3. KeepAliveTime: [10000] 00000000A163 00000300A163 0 2012/10/26 16:51:44.453 4. KeepAliveInterval: [1000] 00000000A19A 00000300A19A 0 2012/10/26 16:51:44.453 <----------------------------------------------> 00000000A1E4 00000300A1E4 0 2012/10/26 16:51:46.390 Trying to connect: [10.20.136.167]-[20100]-[A0308927] 00000000A234 00000300A234 0 2012/10/26 16:51:47.015 Need send header: [A0308927] 00000000A26B 00000300A26B 0 2012/10/26 16:51:48.015 >OnConect() Set Agent status - CONNECTED 00000000A2AD 00000300A2AD 0 2012/10/26 16:51:48.015 >IsNeedSendULOG() Read update status.... 00000000A2EF 00000300A2EF 0 2012/10/26 16:51:48.015 Connected!! 00000000A314 00000300A314 0 2012/10/26 16:59:28.640 WARNING: Error disconnect. Status: [2] 00000000A355 00000300A355 0 2012/10/26 16:59:29.640 Error... disconnected! 00000000A385 00000300A385 0 2012/10/26 16:59:29.640 We are disconnected! 00000000A3B3 00000300A3B3 0 2012/10/26 16:59:29.656 Trying to connect: [10.20.136.167]-[20100]-[A0308927] 00000000A403 00000300A403 0 2012/10/26 16:59:30.546 Need send header: [A0308927] 00000000A43A 00000300A43A 0 2012/10/26 16:59:31.546 >OnConect() Set Agent status - CONNECTED 00000000A47C 00000300A47C 0 2012/10/26 16:59:31.546 >IsNeedSendULOG() Read update status.... 00000000A4BE 00000300A4BE 0 2012/10/26 16:59:31.546 Connected!! 00000000A4E3 00000300A4E3 0 2012/10/26 17:07:35.578 >CLoger() Debug mode: [0] 00000000A517 00000300A517 0 2012/10/26 17:07:35.578 CCommunicator started. Current version: [3.3.0.2/20100901] 00000000A56C 00000300A56C 0 2012/10/26 17:07:35.578 <------------ COMUNICATION --------------------> 00000000A5B6 00000300A5B6 0 2012/10/26 17:07:35.578 1. IP: [10.20.136.167] 00000000A5E7 00000300A5E7 0 2012/10/26 17:07:35.578 2. PORT: [20100] 00000000A612 00000300A612 0 2012/10/26 17:07:35.578 3. KeepAliveTime: [10000] 00000000A646 00000300A646 0 2012/10/26 17:07:35.578 4. KeepAliveInterval: [1000] 00000000A67D 00000300A67D 0 2012/10/26 17:07:35.578 <----------------------------------------------> 00000000A6C7 00000300A6C7 0 2012/10/26 17:07:36.734 Trying to connect: [10.20.136.167]-[20100]-[A0308927] 00000000A717 00000300A717 0 2012/10/26 17:07:37.250 Need send header: [A0308927] 00000000A74E 00000300A74E 0 2012/10/26 17:07:38.250 >OnConect() Set Agent status - CONNECTED 00000000A790 00000300A790 0 2012/10/26 17:07:38.250 >IsNeedSendULOG() Read update status.... 00000000A7D2 00000300A7D2 0 2012/10/26 17:07:38.250 Connected!! 00000000A7F7 00000300A7F7 0 2012/11/08 10:17:06.968 >CLoger() Debug mode: [0] 00000000A82B 00000300A82B 0 2012/11/08 10:17:06.968 CCommunicator started. Current version: [3.3.0.2/20100901] 00000000A880 00000300A880 0 2012/11/08 10:17:06.968 <------------ COMUNICATION --------------------> 00000000A8CA 00000300A8CA 0 2012/11/08 10:17:06.968 1. IP: [10.20.136.167] 00000000A8FB 00000300A8FB 0 2012/11/08 10:17:06.968 2. PORT: [20100] 00000000A926 00000300A926 0 2012/11/08 10:17:06.968 3. KeepAliveTime: [10000] 00000000A95A 00000300A95A 0 2012/11/08 10:17:06.968 4. KeepAliveInterval: [1000] 00000000A991 00000300A991 0 2012/11/08 10:17:06.968 <----------------------------------------------> 00000000A9DB 00000300A9DB 0 2012/11/08 10:17:07.125 Trying to connect: [10.20.136.167]-[20100]-[A0308973] 00000000AA2B 00000300AA2B 0 2012/11/08 10:17:12.203 Can not connect! Trying again... 00000000AA65 00000300AA65 0 2012/11/08 10:31:07.937 >CLoger() Debug mode: [0] 00000000AA99 00000300AA99 0 2012/11/08 10:31:07.937 CCommunicator started. Current version: [3.3.0.2/20100901] 00000000AAEE 00000300AAEE 0 2012/11/08 10:31:07.937 <------------ COMUNICATION --------------------> 00000000AB38 00000300AB38 0 2012/11/08 10:31:07.937 1. IP: [10.20.136.167] 00000000AB69 00000300AB69 0 2012/11/08 10:31:07.937 2. PORT: [20100] 00000000AB94 00000300AB94 0 2012/11/08 10:31:07.937 3. KeepAliveTime: [10000] 00000000ABC8 00000300ABC8 0 2012/11/08 10:31:07.937 4. KeepAliveInterval: [1000] File pos Mem pos ID Text ======== ======= == ==== 00000000ABFF 00000300ABFF 0 2012/11/08 10:31:07.937 <----------------------------------------------> 00000000AC49 00000300AC49 0 2012/11/08 10:31:08.781 Trying to connect: [10.20.136.167]-[20100]-[A0308973] 00000000AC99 00000300AC99 0 2012/11/08 10:31:13.875 Can not connect! Trying again... 00000000ACD3 00000300ACD3 0 2012/11/08 10:36:05.750 Need send header: [A0308973] 00000000AD0A 00000300AD0A 0 2012/11/08 10:36:06.750 >OnConect() Set Agent status - CONNECTED 00000000AD4C 00000300AD4C 0 2012/11/08 10:36:06.750 >IsNeedSendULOG() Read update status.... 00000000AD8E 00000300AD8E 0 2012/11/08 10:36:06.750 Connected!! 00000000ADB3 00000300ADB3 0 2012/11/08 11:14:55.796 >CLoger() Debug mode: [0] 00000000ADE7 00000300ADE7 0 2012/11/08 11:14:55.812 CCommunicator started. Current version: [3.3.0.2/20100901] 00000000AE3C 00000300AE3C 0 2012/11/08 11:14:55.812 <------------ COMUNICATION --------------------> 00000000AE86 00000300AE86 0 2012/11/08 11:14:55.812 1. IP: [10.20.136.167] 00000000AEB7 00000300AEB7 0 2012/11/08 11:14:55.812 2. PORT: [20100] 00000000AEE2 00000300AEE2 0 2012/11/08 11:14:55.812 3. KeepAliveTime: [10000] 00000000AF16 00000300AF16 0 2012/11/08 11:14:55.812 4. KeepAliveInterval: [1000] 00000000AF4D 00000300AF4D 0 2012/11/08 11:14:55.812 <----------------------------------------------> 00000000AF97 00000300AF97 0 2012/11/08 11:14:55.859 Trying to connect: [10.20.136.167]-[20100]-[A0308973] 00000000AFE7 00000300AFE7 0 2012/11/08 11:14:55.890 Need send header: [A0308973] 00000000B01E 00000300B01E 0 2012/11/08 11:14:56.890 >OnConect() Set Agent status - CONNECTED 00000000B060 00000300B060 0 2012/11/08 11:14:56.890 >IsNeedSendULOG() Read update status.... 00000000B0A2 00000300B0A2 0 2012/11/08 11:14:56.890 Connected!! 00000000B0C7 00000300B0C7 0 2012/11/08 11:20:33.937 >CLoger() Debug mode: [0] 00000000B0FB 00000300B0FB 0 2012/11/08 11:20:34.000 CCommunicator started. Current version: [3.3.0.2/20100901] 00000000B150 00000300B150 0 2012/11/08 11:20:34.000 <------------ COMUNICATION --------------------> 00000000B19A 00000300B19A 0 2012/11/08 11:20:34.000 1. IP: [10.20.136.167] 00000000B1CB 00000300B1CB 0 2012/11/08 11:20:34.000 2. PORT: [20100] 00000000B1F6 00000300B1F6 0 2012/11/08 11:20:34.000 3. KeepAliveTime: [10000] 00000000B22A 00000300B22A 0 2012/11/08 11:20:34.000 4. KeepAliveInterval: [1000] 00000000B261 00000300B261 0 2012/11/08 11:20:34.000 <----------------------------------------------> 00000000B2AB 00000300B2AB 0 2012/11/08 11:20:34.046 Trying to connect: [10.20.136.167]-[20100]-[A0308973] 00000000B2FB 00000300B2FB 0 2012/11/08 11:20:34.062 Need send header: [A0308973] 00000000B332 00000300B332 0 2012/11/08 11:20:35.062 >OnConect() Set Agent status - CONNECTED 00000000B374 00000300B374 0 2012/11/08 11:20:35.062 >IsNeedSendULOG() Read update status.... 00000000B3B6 00000300B3B6 0 2012/11/08 11:20:35.062 Connected!! 00000000B3DB 00000300B3DB 0 2012/11/08 11:46:54.703 >CLoger() Debug mode: [0] 00000000B40F 00000300B40F 0 2012/11/08 11:46:54.703 CCommunicator started. Current version: [3.3.0.2/20100901] 00000000B464 00000300B464 0 2012/11/08 11:46:54.703 <------------ COMUNICATION --------------------> 00000000B4AE 00000300B4AE 0 2012/11/08 11:46:54.703 1. IP: [10.20.136.167] 00000000B4DF 00000300B4DF 0 2012/11/08 11:46:54.703 2. PORT: [20100] 00000000B50A 00000300B50A 0 2012/11/08 11:46:54.703 3. KeepAliveTime: [10000] 00000000B53E 00000300B53E 0 2012/11/08 11:46:54.703 4. KeepAliveInterval: [1000] 00000000B575 00000300B575 0 2012/11/08 11:46:54.703 <----------------------------------------------> 00000000B5BF 00000300B5BF 0 2012/11/08 11:46:55.187 Trying to connect: [10.20.136.167]-[20100]-[A0308973] 00000000B60F 00000300B60F 0 2012/11/08 11:46:55.218 Need send header: [A0308973] 00000000B646 00000300B646 0 2012/11/08 11:46:56.218 >OnConect() Set Agent status - CONNECTED 00000000B688 00000300B688 0 2012/11/08 11:46:56.218 >IsNeedSendULOG() Read update status.... 00000000B6CA 00000300B6CA 0 2012/11/08 11:46:56.218 Connected!! 00000000B6EF 00000300B6EF 0 2012/11/08 11:53:06.968 >CLoger() Debug mode: [0] 00000000B723 00000300B723 0 2012/11/08 11:53:06.984 CCommunicator started. Current version: [3.3.0.2/20100901] 00000000B778 00000300B778 0 2012/11/08 11:53:06.984 <------------ COMUNICATION --------------------> 00000000B7C2 00000300B7C2 0 2012/11/08 11:53:06.984 1. IP: [10.20.136.167] 00000000B7F3 00000300B7F3 0 2012/11/08 11:53:06.984 2. PORT: [20100] 00000000B81E 00000300B81E 0 2012/11/08 11:53:06.984 3. KeepAliveTime: [10000] 00000000B852 00000300B852 0 2012/11/08 11:53:06.984 4. KeepAliveInterval: [1000] 00000000B889 00000300B889 0 2012/11/08 11:53:06.984 <----------------------------------------------> 00000000B8D3 00000300B8D3 0 2012/11/08 11:53:07.546 Trying to connect: [10.20.136.167]-[20100]-[A0308973] 00000000B923 00000300B923 0 2012/11/08 11:53:07.562 Need send header: [A0308973] 00000000B95A 00000300B95A 0 2012/11/08 11:53:08.562 >OnConect() Set Agent status - CONNECTED 00000000B99C 00000300B99C 0 2012/11/08 11:53:08.562 >IsNeedSendULOG() Read update status.... 00000000B9DE 00000300B9DE 0 2012/11/08 11:53:08.562 Connected!! 00000000BA03 00000300BA03 0 2012/11/08 12:09:30.062 >CLoger() Debug mode: [0] File pos Mem pos ID Text ======== ======= == ==== 00000000BA37 00000300BA37 0 2012/11/08 12:09:30.109 CCommunicator started. Current version: [3.3.0.2/20100901] 00000000BA8C 00000300BA8C 0 2012/11/08 12:09:30.109 <------------ COMUNICATION --------------------> 00000000BAD6 00000300BAD6 0 2012/11/08 12:09:30.109 1. IP: [10.20.136.167] 00000000BB07 00000300BB07 0 2012/11/08 12:09:30.109 2. PORT: [20100] 00000000BB32 00000300BB32 0 2012/11/08 12:09:30.109 3. KeepAliveTime: [10000] 00000000BB66 00000300BB66 0 2012/11/08 12:09:30.109 4. KeepAliveInterval: [1000] 00000000BB9D 00000300BB9D 0 2012/11/08 12:09:30.109 <----------------------------------------------> 00000000BBE7 00000300BBE7 0 2012/11/08 12:09:30.265 Trying to connect: [10.20.136.167]-[20100]-[A0308973] 00000000BC37 00000300BC37 0 2012/11/08 12:09:30.281 Need send header: [A0308973] 00000000BC6E 00000300BC6E 0 2012/11/08 12:09:31.281 >OnConect() Set Agent status - CONNECTED 00000000BCB0 00000300BCB0 0 2012/11/08 12:09:31.281 >IsNeedSendULOG() Read update status.... 00000000BCF2 00000300BCF2 0 2012/11/08 12:09:31.281 Connected!! 00000000BD17 00000300BD17 0 2013/04/16 13:14:16.062 >CLoger() Debug mode: [0] 00000000BD4B 00000300BD4B 0 2013/04/16 13:14:16.062 CCommunicator started. Current version: [3.3.0.2/20100901] 00000000BDA0 00000300BDA0 0 2013/04/16 13:14:16.062 <------------ COMUNICATION --------------------> 00000000BDEA 00000300BDEA 0 2013/04/16 13:14:16.062 1. IP: [10.20.136.167] 00000000BE1B 00000300BE1B 0 2013/04/16 13:14:16.062 2. PORT: [20100] 00000000BE46 00000300BE46 0 2013/04/16 13:14:16.062 3. KeepAliveTime: [10000] 00000000BE7A 00000300BE7A 0 2013/04/16 13:14:16.062 4. KeepAliveInterval: [1000] 00000000BEB1 00000300BEB1 0 2013/04/16 13:14:16.062 <----------------------------------------------> 00000000BEFB 00000300BEFB 0 2013/04/16 13:14:16.109 Trying to connect: [10.20.136.167]-[20100]-[A0308973] 00000000BF4B 00000300BF4B 0 2013/04/16 13:14:42.125 Can not connect! Trying again... 00000000BF85 00000300BF85 0 2013/04/16 13:18:29.031 >CLoger() Debug mode: [0] 00000000BFB9 00000300BFB9 0 2013/04/16 13:18:29.031 CCommunicator started. Current version: [3.3.0.MZ 00000000C04D 00000300C04D 0 !This program cannot be run in DOS mode. 00000000C0A8 00000300C0A8 0 Richh 00000000C1B0 00000300C1B0 0 .text 00000000C1D8 00000300C1D8 0 .rdata 00000000C1FF 00000300C1FF 0 @.data 00000000C228 00000300C228 0 .rsrc 00000000C451 00000300C451 0 u'h0p@ 00000000C45D 00000300C45D 0 j[hLp@ 00000000CAC0 00000300CAC0 0 QSUVW 00000000CF2A 00000300CF2A 0 8"uV@ 00000000D359 00000300D359 0 WSUVj 00000000D413 00000300D413 0 SUVWj 00000000D942 00000300D942 0 HSUVWh 00000000D9B0 00000300D9B0 0 f9|$F 00000000DBC4 00000300DBC4 0 tBjtj 00000000DC45 00000300DC45 0 @P(q@ 00000000DC7A 00000300DC7A 0 uRjtj 00000000DD65 00000300DD65 0 FP=(q@ 00000000DE33 00000300DE33 0 SVWUj 00000000DE9C 00000300DE9C 0 t.;t$$t( 00000000DF20 00000300DF20 0 VC20XC00U 00000000E04F 00000300E04F 0 SUVW3 00000000E05C 00000300E05C 0 E=xs@ 00000000E103 00000300E103 0 ;h8d@ 00000000E232 00000300E232 0 A=xs@ 00000000E695 00000300E695 0 QVWRP 00000000E6FD 00000300E6FD 0 WUVQh 00000000E752 00000300E752 0 |$$UWQ 00000000E784 00000300E784 0 D$(RP 00000000E7B7 00000300E7B7 0 L$ PPVQj 00000000E7D5 00000300E7D5 0 D$$RVPj 00000000E8E5 00000300E8E5 0 QVWRP 00000000E925 00000300E925 0 VBWRU 00000000E956 00000300E956 0 WSVQj 00000000E9A9 00000300E9A9 0 D$(PWSUQ 00000000E9F4 00000300E9F4 0 VPWSUQ File pos Mem pos ID Text ======== ======= == ==== 00000000EA3C 00000300EA3C 0 D$8QVRh 00000000EB50 00000300EB50 0 T$(SSSSWQh 00000000EB98 00000300EB98 0 VUWPh 00000000EC00 00000300EC00 0 T$$WSR 00000000EC9D 00000300EC9D 0 L$ RQP 00000000ECDB 00000300ECDB 0 U@RPS 00000000ED01 00000300ED01 0 VWUQj 00000000ED13 00000300ED13 0 T$$RP 00000000ED19 00000300ED19 0 D$ WP 000000009740 00000300E140 0 MAINICON(
=== DOWNLOAD ===