.- - -----÷M÷E÷N÷U÷------------------------------------------------------------- --- ---- -------------.
! WALL ! STATS ! GOODIES ! YARA ! FAQ ! RSS ! EMV !
`-------------- - --- ---------- -------- -------- -------- -------- ----------------- - ---- ---- --'
ATM MALWARE NOTICE
26b2daa6fbf5ec13599d24e6819202ddb3f770428d732100be15c23be317bd47
Date...........: 2018-09-05
Family.........: Atmosphere
File name......: J133288_18074_a.exe
File size......: 168.00 KB
Type file......: EXE/Windows
Virscan........: VT - HA
Documentation..: https://owncloud.group-ib.ru/s/aTugJcPclCLnQPb/download?path=%2F&files=Silence_Group-IB_Eng_Public.pdf
Additional note: drop a6c33d7275c46397593f53ea136ea8669794f4d787044106594631c07a9ee71d
Entropy:
Binary Histogram:
=== PEDUMP REPORT ===
=== MZ Header ===
signature: "MZ"
bytes_in_last_block: 144 0x90
blocks_in_file: 3 3
num_relocs: 0 0
header_paragraphs: 4 4
min_extra_paragraphs: 0 0
max_extra_paragraphs: 65535 0xffff
ss: 0 0
sp: 184 0xb8
checksum: 0 0
ip: 0 0
cs: 0 0
reloc_table_offset: 64 0x40
overlay_number: 0 0
reserved0: 0 0
oem_id: 0 0
oem_info: 0 0
reserved2: 0 0
reserved3: 0 0
reserved4: 0 0
reserved5: 0 0
reserved6: 0 0
lfanew: 248 0xf8
=== DOS STUB ===
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno|
00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
=== RICH Header ===
LIB_ID VERSION TIMES_USED
93 5d 4035 fc3 2 2
12 c 7291 1c7b 1 1
14 e 7299 1c83 25 19
0 0 0 0 4 4
10 a 8168 1fe8 136 88
19 13 8034 1f62 4 4
93 5d 2179 883 3 3
1 1 0 0 109 6d
11 b 8168 1fe8 37 25
6 6 1720 6b8 1 1
=== PE Header ===
signature: "PE\x00\x00"
# IMAGE_FILE_HEADER:
Machine: 332 0x14c x86
NumberOfSections: 4 4
TimeDateStamp: "2018-04-07 17:08:14"
PointerToSymbolTable: 0 0
NumberOfSymbols: 0 0
SizeOfOptionalHeader: 224 0xe0
Characteristics: 271 0x10f RELOCS_STRIPPED, EXECUTABLE_IMAGE
LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED
32BIT_MACHINE
# IMAGE_OPTIONAL_HEADER32:
Magic: 267 0x10b 32-bit executable
LinkerVersion: 6.0
SizeOfCode: 57344 0xe000
SizeOfInitializedData: 118784 0x1d000
SizeOfUninitializedData: 0 0
AddressOfEntryPoint: 27887 0x6cef
BaseOfCode: 4096 0x1000
BaseOfData: 61440 0xf000
ImageBase: 4194304 0x400000
SectionAlignment: 4096 0x1000
FileAlignment: 4096 0x1000
OperatingSystemVersion: 4.0
ImageVersion: 0.0
SubsystemVersion: 4.0
Reserved1: 0 0
SizeOfImage: 180224 0x2c000
SizeOfHeaders: 4096 0x1000
CheckSum: 0 0
Subsystem: 3 3 WINDOWS_CUI
DllCharacteristics: 0 0
SizeOfStackReserve: 1048576 0x100000
SizeOfStackCommit: 4096 0x1000
SizeOfHeapReserve: 1048576 0x100000
SizeOfHeapCommit: 4096 0x1000
LoaderFlags: 0 0
NumberOfRvaAndSizes: 16 0x10
=== DATA DIRECTORY ===
EXPORT rva:0x 0 size:0x 0
IMPORT rva:0x 10b28 size:0x 50
RESOURCE rva:0x 16000 size:0x 15060
EXCEPTION rva:0x 0 size:0x 0
SECURITY rva:0x 0 size:0x 0
BASERELOC rva:0x 0 size:0x 0
DEBUG rva:0x 0 size:0x 0
ARCHITECTURE rva:0x 0 size:0x 0
GLOBALPTR rva:0x 0 size:0x 0
TLS rva:0x 0 size:0x 0
LOAD_CONFIG rva:0x 0 size:0x 0
Bound_IAT rva:0x 0 size:0x 0
IAT rva:0x f000 size:0x 15c
Delay_IAT rva:0x 0 size:0x 0
CLR_Header rva:0x 0 size:0x 0
rva:0x 0 size:0x 0
=== SECTIONS ===
NAME RVA VSZ RAW_SZ RAW_PTR nREL REL_PTR nLINE LINE_PTR FLAGS
.text 1000 d329 e000 1000 0 0 0 0 60000020 R-X CODE
.rdata f000 22d6 3000 f000 0 0 0 0 40000040 R-- IDATA
.data 12000 30e4 2000 12000 0 0 0 0 c0000040 RW- IDATA
.rsrc 16000 15060 16000 14000 0 0 0 0 40000040 R-- IDATA
=== RESOURCES ===
FILE_OFFSET CP LANG SIZE TYPE NAME
0x14060 0 0x409 86016 BIN #101
=== IMPORTS ===
MODULE_NAME HINT ORD FUNCTION_NAME
KERNEL32.dll 348 SizeofResource
KERNEL32.dll 25b LockResource
KERNEL32.dll 24d LoadResource
KERNEL32.dll da FindResourceA
KERNEL32.dll 177 GetModuleHandleA
KERNEL32.dll 1b1 GetStdHandle
KERNEL32.dll 169 GetLastError
KERNEL32.dll 1d5 GetTickCount
KERNEL32.dll 175 GetModuleFileNameA
KERNEL32.dll 349 Sleep
KERNEL32.dll 2c7 ResumeThread
KERNEL32.dll 379 VirtualFreeEx
KERNEL32.dll 24e LocalAlloc
KERNEL32.dll 248 LoadLibraryA
KERNEL32.dll 3a0 WriteProcessMemory
KERNEL32.dll 198 GetProcAddress
KERNEL32.dll 376 VirtualAllocEx
KERNEL32.dll 1cd GetThreadContext
KERNEL32.dll 34b SuspendThread
KERNEL32.dll 280 OpenThread
KERNEL32.dll 355 Thread32Next
KERNEL32.dll 354 Thread32First
KERNEL32.dll 6c CreateToolhelp32Snapshot
KERNEL32.dll 27c OpenProcess
KERNEL32.dll 13a GetCurrentProcess
KERNEL32.dll 28e Process32Next
KERNEL32.dll 28c Process32First
KERNEL32.dll 305 SetEndOfFile
KERNEL32.dll 252 LocalFree
KERNEL32.dll 310 SetFilePointer
KERNEL32.dll 397 WriteFile
KERNEL32.dll 4d CreateFileA
KERNEL32.dll 15b GetFileSize
KERNEL32.dll 2ab ReadFile
KERNEL32.dll 2e CloseHandle
KERNEL32.dll 45 CreateDirectoryA
KERNEL32.dll 156 GetFileAttributesA
KERNEL32.dll 334 SetThreadContext
KERNEL32.dll 18b GetOEMCP
KERNEL32.dll f5 GetACP
KERNEL32.dll 32c SetStdHandle
KERNEL32.dll 226 IsBadCodePtr
KERNEL32.dll 229 IsBadReadPtr
KERNEL32.dll 26b MultiByteToWideChar
KERNEL32.dll 389 WideCharToMultiByte
KERNEL32.dll 2cc RtlUnwind
KERNEL32.dll 29d RaiseException
KERNEL32.dll 210 HeapReAlloc
KERNEL32.dll 206 HeapAlloc
KERNEL32.dll 20c HeapFree
KERNEL32.dll af ExitProcess
KERNEL32.dll 351 TerminateProcess
KERNEL32.dll 108 GetCommandLineA
KERNEL32.dll 1de GetVersion
KERNEL32.dll 23a LCMapStringA
KERNEL32.dll 23b LCMapStringW
KERNEL32.dll fc GetCPInfo
KERNEL32.dll 212 HeapSize
KERNEL32.dll 33d SetUnhandledExceptionFilter
KERNEL32.dll 20a HeapDestroy
KERNEL32.dll 208 HeapCreate
KERNEL32.dll 378 VirtualFree
KERNEL32.dll 375 VirtualAlloc
KERNEL32.dll 22c IsBadWritePtr
KERNEL32.dll 319 SetHandleCount
KERNEL32.dll 15e GetFileType
KERNEL32.dll 1af GetStartupInfoA
KERNEL32.dll 362 UnhandledExceptionFilter
KERNEL32.dll ed FreeEnvironmentStringsA
KERNEL32.dll ee FreeEnvironmentStringsW
KERNEL32.dll 14d GetEnvironmentStrings
KERNEL32.dll 14f GetEnvironmentStringsW
KERNEL32.dll e5 FlushFileBuffers
KERNEL32.dll 1b2 GetStringTypeA
KERNEL32.dll 1b5 GetStringTypeW
ADVAPI32.dll 17 AdjustTokenPrivileges
ADVAPI32.dll 142 OpenProcessToken
ADVAPI32.dll 18 AllocateAndInitializeSid
ADVAPI32.dll 197 SetEntriesInAclA
ADVAPI32.dll df InitializeSecurityDescriptor
ADVAPI32.dll 1a5 SetSecurityDescriptorDacl
ADVAPI32.dll 19b SetFileSecurityA
ADVAPI32.dll 9d FreeSid
SHLWAPI.dll b PathAppendA
=== Packer / Compiler ===
MS Visual C++ v6.0
File pos Mem pos ID Text
======== ======= == ====
00000000004D 00000040004D 0 !This program cannot be run in DOS mode.
0000000001F0 0000004001F0 0 .text
000000000218 000000400218 0 .rdata
00000000023F 00000040023F 0 @.data
000000000268 000000400268 0 .rsrc
0000000023D3 0000004023D3 0 PSSSSSSSSj
0000000049E9 0000004049E9 0 t/Ht HH
0000000053DA 0000004053DA 0 VWhST@
00000000570B 00000040570B 0 QWj P
0000000058BD 0000004058BD 0 QQSVWd
000000005B5F 000000405B5F 0 SVWUj
000000005BC8 000000405BC8 0 t.;t$$t(
000000006656 000000406656 0 uRFGHt
000000006700 000000406700 0 tlHt.
0000000067D8 0000004067D8 0 wDVSU
0000000069C0 0000004069C0 0 VC20XC00U
000000007516 000000407516 0 PPPPPPPP
000000007576 000000407576 0 9= :A
00000000757C 00000040757C 0 uFWWj
0000000075A1 0000004075A1 0 "WWSh|
00000000768D 00000040768D 0 tMWWS
000000007AD0 000000407AD0 0 sO;>|C;~
000000007FC8 000000407FC8 0 QQSVW
0000000080A9 0000004080A9 0 QQSVW
0000000080FF 0000004080FF 0 QQSVW
000000008645 000000408645 0 HHtpHHtl
0000000088FC 0000004088FC 0 Yt f
000000008EBB 000000408EBB 0 btHHt.
000000009B67 000000409B67 0 DSUVWh
00000000A13D 00000040A13D 0 eYt,F
00000000A756 00000040A756 0 ?=t"U
00000000A8AA 00000040A8AA 0 8"uF@
00000000AA78 00000040AA78 0 SS@SSPVSS
00000000AA9A 00000040AA9A 0 t#SSUP
00000000AAA1 00000040AAA1 0 t$$VSS
00000000AB77 00000040AB77 0 A=(.A
00000000B786 00000040B786 0 PPPPPPPP
00000000BB2D 00000040BB2D 0 B=h0A
00000000BD93 00000040BD93 0 t-Ht!Ht
00000000C276 00000040C276 0 SVWj
00000000C39F 00000040C39F 0 SVWj
00000000C7C2 00000040C7C2 0 Y;5T=A
00000000C9C5 00000040C9C5 0 Wj@Y3
00000000CB98 00000040CB98 0 VWuBhT"A
00000000CD48 00000040CD48 0 FGQPS
00000000CFD4 00000040CFD4 0 +ttHHtd
00000000D012 00000040D012 0 j XO
00000000D258 00000040D258 0 HHtYHHtF
00000000F224 00000040F224 0 string too long
00000000F254 00000040F254 0 invalid string position
00000000F3B8 00000040F3B8 0 ios::eofbit set
00000000F3C8 00000040F3C8 0 ios::failbit set
00000000F3DC 00000040F3DC 0 ios::badbit set
00000000F45C 00000040F45C 0 Unknown exception
00000000F4A0 00000040F4A0 0 H:mm:ss
00000000F4A8 00000040F4A8 0 dddd, MMMM dd, yyyy
00000000F4BC 00000040F4BC 0 M/d/yy
00000000F4CC 00000040F4CC 0 December
00000000F4D8 00000040F4D8 0 November
00000000F4E4 00000040F4E4 0 October
File pos Mem pos ID Text
======== ======= == ====
00000000F4EC 00000040F4EC 0 September
00000000F4F8 00000040F4F8 0 August
00000000F510 00000040F510 0 April
00000000F518 00000040F518 0 March
00000000F520 00000040F520 0 February
00000000F52C 00000040F52C 0 January
00000000F564 00000040F564 0 Saturday
00000000F570 00000040F570 0 Friday
00000000F578 00000040F578 0 Thursday
00000000F584 00000040F584 0 Wednesday
00000000F590 00000040F590 0 Tuesday
00000000F598 00000040F598 0 Monday
00000000F5A0 00000040F5A0 0 Sunday
00000000F661 00000040F661 0 (8PX
00000000F669 00000040F669 0 700WP
00000000F681 00000040F681 0 ppxxxx
00000000F6AC 00000040F6AC 0 (null)
00000000F6CE 00000040F6CE 0 GAIsProcessorFeaturePresent
00000000F6EC 00000040F6EC 0 KERNEL32
00000000F6F8 00000040F6F8 0 e+000
00000000F700 00000040F700 0 runtime error
00000000F714 00000040F714 0 TLOSS error
00000000F724 00000040F724 0 SING error
00000000F734 00000040F734 0 DOMAIN error
00000000F744 00000040F744 0 R6028
00000000F74B 00000040F74B 0 - unable to initialize heap
00000000F76C 00000040F76C 0 R6027
00000000F773 00000040F773 0 - not enough space for lowio initialization
00000000F7A4 00000040F7A4 0 R6026
00000000F7AB 00000040F7AB 0 - not enough space for stdio initialization
00000000F7DC 00000040F7DC 0 R6025
00000000F7E3 00000040F7E3 0 - pure virtual function call
00000000F804 00000040F804 0 R6024
00000000F80B 00000040F80B 0 - not enough space for _onexit/atexit table
00000000F83C 00000040F83C 0 R6019
00000000F843 00000040F843 0 - unable to open console device
00000000F868 00000040F868 0 R6018
00000000F86F 00000040F86F 0 - unexpected heap error
00000000F88C 00000040F88C 0 R6017
00000000F893 00000040F893 0 - unexpected multithread lock error
00000000F8BC 00000040F8BC 0 R6016
00000000F8C3 00000040F8C3 0 - not enough space for thread data
00000000F8EA 00000040F8EA 0 abnormal program termination
00000000F90C 00000040F90C 0 R6009
00000000F913 00000040F913 0 - not enough space for environment
00000000F938 00000040F938 0 R6008
00000000F93F 00000040F93F 0 - not enough space for arguments
00000000F964 00000040F964 0 R6002
00000000F96B 00000040F96B 0 - floating point not loaded
00000000F98C 00000040F98C 0 Microsoft Visual C++ Runtime Library
00000000F9B8 00000040F9B8 0 Runtime Error!
00000000F9C8 00000040F9C8 0 Program:
00000000F9D8 00000040F9D8 0 <program name unknown>
00000000F9FC 00000040F9FC 0 SunMonTueWedThuFriSat
00000000FA14 00000040FA14 0 JanFebMarAprMayJunJulAugSepOctNovDec
00000000FA3C 00000040FA3C 0 GetLastActivePopup
00000000FA50 00000040FA50 0 GetActiveWindow
00000000FA60 00000040FA60 0 MessageBoxA
00000000FA6C 00000040FA6C 0 1#QNAN
00000000FA74 00000040FA74 0 1#INF
File pos Mem pos ID Text
======== ======= == ====
00000000FA7C 00000040FA7C 0 1#IND
00000000FA84 00000040FA84 0 1#SNAN
000000010CD6 000000410CD6 0 CreateDirectoryA
000000010CEA 000000410CEA 0 GetFileAttributesA
000000010D00 000000410D00 0 CloseHandle
000000010D0E 000000410D0E 0 ReadFile
000000010D1A 000000410D1A 0 GetFileSize
000000010D28 000000410D28 0 CreateFileA
000000010D36 000000410D36 0 WriteFile
000000010D42 000000410D42 0 SetFilePointer
000000010D54 000000410D54 0 LocalFree
000000010D60 000000410D60 0 LocalAlloc
000000010D6E 000000410D6E 0 SizeofResource
000000010D80 000000410D80 0 LockResource
000000010D90 000000410D90 0 LoadResource
000000010DA0 000000410DA0 0 FindResourceA
000000010DB0 000000410DB0 0 GetModuleHandleA
000000010DC4 000000410DC4 0 GetStdHandle
000000010DD4 000000410DD4 0 GetLastError
000000010DE4 000000410DE4 0 GetTickCount
000000010DF4 000000410DF4 0 GetModuleFileNameA
000000010E0A 000000410E0A 0 Sleep
000000010E12 000000410E12 0 ResumeThread
000000010E22 000000410E22 0 VirtualFreeEx
000000010E32 000000410E32 0 SetThreadContext
000000010E46 000000410E46 0 LoadLibraryA
000000010E56 000000410E56 0 WriteProcessMemory
000000010E6C 000000410E6C 0 GetProcAddress
000000010E7E 000000410E7E 0 VirtualAllocEx
000000010E90 000000410E90 0 GetThreadContext
000000010EA4 000000410EA4 0 SuspendThread
000000010EB4 000000410EB4 0 OpenThread
000000010EC2 000000410EC2 0 Thread32Next
000000010ED2 000000410ED2 0 Thread32First
000000010EE2 000000410EE2 0 CreateToolhelp32Snapshot
000000010EFE 000000410EFE 0 OpenProcess
000000010F0C 000000410F0C 0 GetCurrentProcess
000000010F20 000000410F20 0 Process32Next
000000010F30 000000410F30 0 Process32First
000000010F40 000000410F40 0 KERNEL32.dll
000000010F4E 000000410F4E 0 USER32.dll
000000010F5C 000000410F5C 0 FreeSid
000000010F66 000000410F66 0 SetFileSecurityA
000000010F7A 000000410F7A 0 SetSecurityDescriptorDacl
000000010F96 000000410F96 0 InitializeSecurityDescriptor
000000010FB6 000000410FB6 0 SetEntriesInAclA
000000010FCA 000000410FCA 0 AllocateAndInitializeSid
000000010FE6 000000410FE6 0 AdjustTokenPrivileges
000000010FFE 000000410FFE 0 OpenProcessToken
000000011010 000000411010 0 ADVAPI32.dll
000000011020 000000411020 0 PathAppendA
00000001102C 00000041102C 0 SHLWAPI.dll
000000011038 000000411038 0 PSAPI.DLL
000000011044 000000411044 0 MultiByteToWideChar
00000001105A 00000041105A 0 WideCharToMultiByte
000000011070 000000411070 0 RtlUnwind
00000001107C 00000041107C 0 RaiseException
00000001108E 00000041108E 0 HeapReAlloc
00000001109C 00000041109C 0 HeapAlloc
0000000110A8 0000004110A8 0 HeapFree
File pos Mem pos ID Text
======== ======= == ====
0000000110B4 0000004110B4 0 ExitProcess
0000000110C2 0000004110C2 0 TerminateProcess
0000000110D6 0000004110D6 0 GetCommandLineA
0000000110E8 0000004110E8 0 GetVersion
0000000110F6 0000004110F6 0 LCMapStringA
000000011106 000000411106 0 LCMapStringW
000000011116 000000411116 0 GetCPInfo
000000011122 000000411122 0 HeapSize
00000001112E 00000041112E 0 SetUnhandledExceptionFilter
00000001114C 00000041114C 0 HeapDestroy
00000001115A 00000041115A 0 HeapCreate
000000011168 000000411168 0 VirtualFree
000000011176 000000411176 0 VirtualAlloc
000000011186 000000411186 0 IsBadWritePtr
000000011196 000000411196 0 SetHandleCount
0000000111A8 0000004111A8 0 GetFileType
0000000111B6 0000004111B6 0 GetStartupInfoA
0000000111C8 0000004111C8 0 UnhandledExceptionFilter
0000000111E4 0000004111E4 0 FreeEnvironmentStringsA
0000000111FE 0000004111FE 0 FreeEnvironmentStringsW
000000011218 000000411218 0 GetEnvironmentStrings
000000011230 000000411230 0 GetEnvironmentStringsW
00000001124A 00000041124A 0 FlushFileBuffers
00000001125E 00000041125E 0 GetStringTypeA
000000011270 000000411270 0 GetStringTypeW
000000011282 000000411282 0 IsBadReadPtr
000000011292 000000411292 0 IsBadCodePtr
0000000112A2 0000004112A2 0 SetStdHandle
0000000112B2 0000004112B2 0 GetACP
0000000112BC 0000004112BC 0 GetOEMCP
0000000112C8 0000004112C8 0 SetEndOfFile
0000000120F8 0000004120F8 0 .?AVException@@
000000012110 000000412110 0 .?AVexception@@
000000012128 000000412128 0 .?AVArgumentOutOfRangeException@@
00000001214C 00000041214C 0 no processes found. Exiting.
00000001216C 00000041216C 0 Founded %d precesses.
000000012184 000000412184 0 atmapp.exe
00000001219C 00000041219C 0 c:\atm\1
0000000121A8 0000004121A8 0 lib_%s
0000000121B8 0000004121B8 0 .?AVbad_exception@std@@
0000000121D0 0000004121D0 0 bad exception
00000001220C 00000041220C 0 LoadLibraryA
00000001221C 00000041221C 0 [-] Error: Couldn't get thread handle
000000012244 000000412244 0 kernel32.dll
000000012254 000000412254 0 user32.dll
000000012268 000000412268 0 .?AVlogic_error@std@@
000000012288 000000412288 0 .?AVlength_error@std@@
0000000122A8 0000004122A8 0 .?AVout_of_range@std@@
0000000122D0 0000004122D0 0 .?AVios_base@std@@
0000000122F0 0000004122F0 0 .?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
000000012328 000000412328 0 .?AV?$basic_istream@DU?$char_traits@D@std@@@std@@
000000012368 000000412368 0 .?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@
0000000123A8 0000004123A8 0 .?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
0000000123E8 0000004123E8 0 .?AV?$basic_filebuf@DU?$char_traits@D@std@@@std@@
000000012428 000000412428 0 .?AV?$basic_ios@GU?$char_traits@G@std@@@std@@
000000012460 000000412460 0 .?AV?$basic_istream@GU?$char_traits@G@std@@@std@@
0000000124A0 0000004124A0 0 .?AV?$basic_ostream@GU?$char_traits@G@std@@@std@@
0000000124E0 0000004124E0 0 .?AV?$basic_filebuf@GU?$char_traits@G@std@@@std@@
000000012520 000000412520 0 .?AV?$basic_streambuf@GU?$char_traits@G@std@@@std@@
000000012560 000000412560 0 .?AVruntime_error@std@@
File pos Mem pos ID Text
======== ======= == ====
000000012580 000000412580 0 .?AVfailure@ios_base@std@@
0000000125A8 0000004125A8 0 .?AVfacet@locale@std@@
0000000125C8 0000004125C8 0 .?AV_Locimp@locale@std@@
000000012600 000000412600 0 .?AVtype_info@@
0000000133EE 0000004133EE 0 z?aUY
000000013430 000000413430 0 zc%C1
000000013483 000000413483 0 -64OS
0000000140AD 0000004160AD 0 !This program cannot be run in DOS mode.
000000014250 000000416250 0 .text
000000014278 000000416278 0 .rdata
00000001429F 00000041629F 0 @.data
0000000142C8 0000004162C8 0 .reloc
000000015C49 000000417C49 0 L$(SUV
000000015C50 000000417C50 0 D$8W3
000000015C85 000000417C85 0 D$HPQVU
0000000160E9 0000004180E9 0 D$<SUVW
000000016854 000000418854 0 d$hPUQ
000000016C13 000000418C13 0 L$(QV
000000016C46 000000418C46 0 D$ VP
000000016D02 000000418D02 0 D$$UP
000000016F4B 000000418F4B 0 l$ VW
00000001717B 00000041917B 0 l$,VW
0000000172A9 0000004192A9 0 L$$SUV
0000000172B0 0000004192B0 0 D$4WPQ
0000000172DF 0000004192DF 0 D$DPQVS
0000000177E0 0000004197E0 0 D$@_][
000000017A09 000000419A09 0 T$(PR
000000017B79 000000419B79 0 D$$SUVW
000000017F3E 000000419F3E 0 \$dUVW3
000000017FD3 000000419FD3 0 L$,Qj
0000000180FF 00000041A0FF 0 L$(Qj
0000000183BA 00000041A3BA 0 L$<Qj
0000000184D7 00000041A4D7 0 D$,SP
00000001857A 00000041A57A 0 L$8QR
00000001876C 00000041A76C 0 d$DSh
000000018835 00000041A835 0 QSUVW
000000018BB9 00000041ABB9 0 L$$SUV
000000018BC0 00000041ABC0 0 D$4WPQ
000000018BEF 00000041ABEF 0 D$DPQVS
000000018CE9 00000041ACE9 0 L$$SUV
000000018CF0 00000041ACF0 0 D$4WPQ
000000018D1F 00000041AD1F 0 D$DPQVS
000000018F1C 00000041AF1C 0 L$ QW
000000018F9F 00000041AF9F 0 U4RQU
00000001942C 00000041B42C 0 SUVW3
000000019468 00000041B468 0 L$$Qj
000000019A78 00000041BA78 0 SUVW3
000000019BA9 00000041BBA9 0 D$|VW3
000000019D59 00000041BD59 0 D$LSUV3
000000019FC2 00000041BFC2 0 L$$PQ
00000001A0B9 00000041C0B9 0 D$8SUV3
00000001A128 00000041C128 0 \$<QSR
00000001A147 00000041C147 0 T$$QPR
00000001A299 00000041C299 0 D$8SUV3
00000001A30F 00000041C30F 0 \$<QRV
00000001A32B 00000041C32B 0 T$$PSR
00000001A88B 00000041C88B 0 SUVW3
00000001A92C 00000041C92C 0 L$0RVW
00000001A959 00000041C959 0 L$PQP
00000001AA5A 00000041CA5A 0 D$PPW
File pos Mem pos ID Text
======== ======= == ====
00000001AC35 00000041CC35 0 |$ QPW
00000001ACC9 00000041CCC9 0 D$8UVWj
00000001AD64 00000041CD64 0 L$HQP
00000001AFF7 00000041CFF7 0 ,SUVW
00000001B013 00000041D013 0 l$Dt#
00000001B0CD 00000041D0CD 0 d$(Ph$%
00000001B3A7 00000041D3A7 0 @SUVW
00000001B555 00000041D555 0 D$X VP
00000001B689 00000041D689 0 L$$SUV
00000001B690 00000041D690 0 D$4WPQ
00000001B6BF 00000041D6BF 0 D$DPQVS
00000001BA3C 00000041DA3C 0 t$hWj
00000001BB83 00000041DB83 0 D$ PQ
00000001C33A 00000041E33A 0 T$$QWVR
00000001C37C 00000041E37C 0 L$$PWVQ
00000001C3C3 00000041E3C3 0 D$,VP
00000001CA2A 00000041EA2A 0 T$$QWVR
00000001CA6C 00000041EA6C 0 L$$PWVQ
00000001CAB3 00000041EAB3 0 D$,VP
00000001DF26 00000041FF26 0 W*hd&
00000001E0E7 0000004200E7 0 0SUVW
00000001E534 000000420534 0 d$8Ph
00000001E55D 00000042055D 0 t$(to
00000001EB28 000000420B28 0 SUVW3
00000001EC01 000000420C01 0 |$0t1
00000001EC34 000000420C34 0 \$$hh!
000000021FA8 000000423FA8 0 t WVS
000000021FD5 000000423FD5 0 u7WPS
000000021FE6 000000423FE6 0 u&WVS
000000024D6E 000000426D6E 0 CloseHandle
000000024D7C 000000426D7C 0 ReadFile
000000024D88 000000426D88 0 GetFileSize
000000024D96 000000426D96 0 CreateFileA
000000024DA4 000000426DA4 0 WriteFile
000000024DB0 000000426DB0 0 SetFilePointer
000000024DC2 000000426DC2 0 GetLocalTime
000000024DD2 000000426DD2 0 GetModuleFileNameA
000000024DE8 000000426DE8 0 DeleteFileA
000000024DF6 000000426DF6 0 VirtualQuery
000000024E06 000000426E06 0 CreateThread
000000024E16 000000426E16 0 TerminateThread
000000024E28 000000426E28 0 Sleep
000000024E30 000000426E30 0 SuspendThread
000000024E40 000000426E40 0 ResumeThread
000000024E50 000000426E50 0 GetProcAddress
000000024E62 000000426E62 0 LoadLibraryA
000000024E72 000000426E72 0 GetModuleHandleA
000000024E86 000000426E86 0 VirtualFree
000000024E94 000000426E94 0 VirtualAlloc
000000024EA4 000000426EA4 0 FindNextFileA
000000024EB4 000000426EB4 0 FindFirstFileA
000000024EC6 000000426EC6 0 WaitForSingleObject
000000024EDC 000000426EDC 0 VirtualProtect
000000024EEC 000000426EEC 0 KERNEL32.dll
000000024EFC 000000426EFC 0 MessageBoxA
000000024F08 000000426F08 0 USER32.dll
000000024F14 000000426F14 0 ADVAPI32.dll
000000024F24 000000426F24 0 ??0Init@ios_base@std@@QAE@XZ
000000024F44 000000426F44 0 ??1Init@ios_base@std@@QAE@XZ
000000024F64 000000426F64 0 ??0_Winit@std@@QAE@XZ
File pos Mem pos ID Text
======== ======= == ====
000000024F7C 000000426F7C 0 ??1_Winit@std@@QAE@XZ
000000024F94 000000426F94 0 ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
000000024FDE 000000426FDE 0 ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
00000002503A 00000042703A 0 ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
000000025096 000000427096 0 ?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
0000000250E8 0000004270E8 0 ?_Xlen@std@@YAXXZ
0000000250FC 0000004270FC 0 ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
000000025150 000000427150 0 ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
00000002519A 00000042719A 0 ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
0000000251EA 0000004271EA 0 ?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
000000025238 000000427238 0 ?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
000000025286 000000427286 0 ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
0000000252DE 0000004272DE 0 ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
00000002533A 00000042733A 0 ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
000000025392 000000427392 0 ??0bad_exception@std@@QAE@ABV01@@Z
0000000253B8 0000004273B8 0 ??1bad_exception@std@@UAE@XZ
0000000253D8 0000004273D8 0 ??0bad_exception@std@@QAE@PBD@Z
0000000253FA 0000004273FA 0 ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
000000025456 000000427456 0 ?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
0000000254A4 0000004274A4 0 ?_Xran@std@@YAXXZ
0000000254B8 0000004274B8 0 ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
00000002550E 00000042750E 0 ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
000000025560 000000427560 0 ?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
0000000255B4 0000004275B4 0 ?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
000000025612 000000427612 0 ?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
000000025670 000000427670 0 ?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
0000000256C2 0000004276C2 0 ??1_Lockit@std@@QAE@XZ
0000000256DC 0000004276DC 0 ??0_Lockit@std@@QAE@XZ
0000000256F4 0000004276F4 0 MSVCP60.dll
000000025702 000000427702 0 PathFileExistsA
000000025714 000000427714 0 PathAppendA
000000025720 000000427720 0 SHLWAPI.dll
00000002572E 00000042772E 0 __CxxFrameHandler
00000002574A 00000042774A 0 memmove
000000025754 000000427754 0 ??0exception@@QAE@ABV0@@Z
000000025778 000000427778 0 realloc
000000025782 000000427782 0 _CxxThrowException
000000025798 000000427798 0 ?what@exception@@UBEPBDXZ
0000000257B4 0000004277B4 0 ??1exception@@UAE@XZ
0000000257CC 0000004277CC 0 _vsnprintf
0000000257DA 0000004277DA 0 ??2@YAPAXI@Z
0000000257EA 0000004277EA 0 fclose
0000000257F4 0000004277F4 0 vfprintf
000000025800 000000427800 0 fopen
000000025808 000000427808 0 ??0exception@@QAE@XZ
000000025820 000000427820 0 fputs
000000025828 000000427828 0 fread
000000025838 000000427838 0 _ftol
000000025840 000000427840 0 malloc
00000002584A 00000042784A 0 memcpy
000000025854 000000427854 0 memset
00000002585E 00000042785E 0 __dllonexit
00000002586C 00000042786C 0 _onexit
000000025874 000000427874 0 MSVCRT.dll
000000025882 000000427882 0 ??1type_info@@UAE@XZ
00000002589A 00000042789A 0 _initterm
0000000258A6 0000004278A6 0 _adjust_fdiv
0000000258B6 0000004278B6 0 HeapCreate
0000000258C4 0000004278C4 0 InterlockedCompareExchange
0000000258E2 0000004278E2 0 InterlockedExchange
File pos Mem pos ID Text
======== ======= == ====
0000000258F8 0000004278F8 0 HeapDestroy
000000025906 000000427906 0 HeapFree
000000025912 000000427912 0 OpenThread
000000025920 000000427920 0 SetThreadContext
000000025934 000000427934 0 GetThreadContext
000000025948 000000427948 0 Thread32Next
000000025958 000000427958 0 HeapReAlloc
000000025966 000000427966 0 HeapAlloc
000000025972 000000427972 0 GetCurrentThreadId
000000025988 000000427988 0 GetCurrentProcessId
00000002599E 00000042799E 0 Thread32First
0000000259AE 0000004279AE 0 CreateToolhelp32Snapshot
0000000259CA 0000004279CA 0 FlushInstructionCache
0000000259E2 0000004279E2 0 GetCurrentProcess
000000025A32 000000427A32 0 Library.dll
000000025A3E 000000427A3E 0 iinit
0000000260B0 0000004280B0 0 .?AVexception@@
0000000260C8 0000004280C8 0 .?AVException@@
0000000260E0 0000004280E0 0 .?AVArgumentOutOfRangeException@@
000000026118 000000428118 0 .?AVbad_exception@std@@
000000026130 000000428130 0 bad exception
000000026150 000000428150 0 .?AVIOException@@
000000026170 000000428170 0 .?AVFileNotFoundException@@
000000026190 000000428190 0 Logger is now on new TraceLevel: %s
0000000261B4 0000004281B4 0 UNKNOWN
0000000261C0 0000004281C0 0 TRACE
0000000261C8 0000004281C8 0 NOTICE
0000000261D0 0000004281D0 0 WARNING
0000000261D8 0000004281D8 0 ERROR
0000000261E0 0000004281E0 0 FATAL
0000000261E8 0000004281E8 0 [%s]: %s
000000026200 000000428200 0 .?AVThreadException@@
000000026218 000000428218 0 Can't resume thread
00000002622C 00000042822C 0 MessageBoxTimeoutA
000000026240 000000428240 0 user32.dll
00000002624C 00000042824C 0 [%04d/%02d/%02d %02d:%02d:%02d.%03d] %s
000000026280 000000428280 0 .?AVXfsException@@
0000000262A0 0000004282A0 0 .?AVXfsGetInfoException@@
0000000262BC 0000004282BC 0 get cu info get info exception %d
0000000262E0 0000004282E0 0 get cu and store result unknown exception
00000002630C 00000042830C 0 get cu info query error
000000026330 000000428330 0 .?AVXfsDispenseException@@
00000002634C 00000042834C 0 unknown exception
000000026360 000000428360 0 Dispense exception, code %d
00000002637C 00000042837C 0 ca5h units info received
000000026398 000000428398 0 try to set %d
0000000263A8 0000004283A8 0 Xfs::QueryCashUnitsFromAtm4
0000000263C4 0000004283C4 0 Xfs::QueryCashUnitsFromAtm3
0000000263E0 0000004283E0 0 Xfs::QueryCashUnitsFromAtm2
0000000263FC 0000004283FC 0 LFS found info about <%d> ca5h un1t5
000000026424 000000428424 0 XFS-> dispense end SUCCESSFUL DISPENSE
00000002644C 00000042844C 0 WFS_RESULT %d
000000026468 000000428468 0 .?AVHookLibException@@
000000026480 000000428480 0 WFMFreeBuffer
000000026490 000000428490 0 WFMAllocateMore
0000000264A0 0000004284A0 0 WFMAllocateBuffer
0000000264B4 0000004284B4 0 WFSExecute
0000000264C0 0000004284C0 0 WFSFreeResult
0000000264D0 0000004284D0 0 WFSStartUp
0000000264DC 0000004284DC 0 WFSGetInfo
File pos Mem pos ID Text
======== ======= == ====
0000000264E8 0000004284E8 0 no xf5 module found
0000000264FC 0000004284FC 0 msxfs.dll
000000026538 000000428538 0 |INDEX:%d|CU state:%d|Type:%d|Values:%d|Currency_ID:%s|Money count:%d|
000000026584 000000428584 0 Founded < %d > commands
0000000265A0 0000004285A0 0 Command file deleted successfully
0000000265C4 0000004285C4 0 Reading command from a %s
0000000265E0 0000004285E0 0 %s\%s
0000000265E8 0000004285E8 0 FileCommandProvider::ReadXfsCommandFromFile ->
000000026620 000000428620 0 .?AVArgumentException@@
000000026638 000000428638 0 exception
000000026648 000000428648 0 CommandProcessor created
000000026664 000000428664 0 DEFAULT command processed
000000026680 000000428680 0 NONE command processed
000000026698 000000428698 0 System error!
0000000266A8 0000004286A8 0 Dispense failed. CODE:%d
0000000266C4 0000004286C4 0 Multi Dispensing start
0000000266DC 0000004286DC 0 Dispense failed. Unknown reason.
000000026700 000000428700 0 Dispense failed. %d
000000026714 000000428714 0 Manual Dispensing
000000026728 000000428728 0 Display Balance -> exception, code:%d
000000026750 000000428750 0 Display Balance 1try -> exception, code:%d
00000002677C 00000042877C 0 CommandProcessor::ProcessCommand ->
0000000267A0 0000004287A0 0 SetMaximumDispenseSize:%d
0000000267BC 0000004287BC 0 NULL command processed
0000000267D4 0000004287D4 0 ICommandProcessor::ProcessCommand -> start method
000000026808 000000428808 0 Processing command #%d
000000026820 000000428820 0 Received
00000002682D 00000042882D 0 commands
000000026838 000000428838 0 exception cauch: %d
00000002684C 00000042884C 0 Exiting
000000026854 000000428854 0 Pausing
00000002685C 00000042885C 0 trying to dispense
000000026870 000000428870 0 R2CommandProcessor::ProcessGetRealBalance()1
0000000268A0 0000004288A0 0 cur disp service is |%d|
0000000268BC 0000004288BC 0 try toi set %d
0000000268CC 0000004288CC 0 ___log.txt
0000000268D8 0000004288D8 0 Deleting resources
0000000268F8 0000004288F8 0 .?AVXfsLoaderException@@
000000026914 000000428914 0 uncatched
000000026920 000000428920 0 %s:%d
000000026928 000000428928 0 c:\atm\1
000000026934 000000428934 0 void CreateAllResources()
000000026950 000000428950 0 Xfs init error
000000026960 000000428960 0 Critical system error!
000000026978 000000428978 0 resources created
00000002698C 00000042898C 0 MH_UNKNOWN
000000026998 000000428998 0 MH_OK
0000000269A0 0000004289A0 0 MH_ERROR_ALREADY_INITIALIZED
0000000269C0 0000004289C0 0 MH_ERROR_NOT_INITIALIZED
0000000269DC 0000004289DC 0 MH_ERROR_ALREADY_CREATED
0000000269F8 0000004289F8 0 MH_ERROR_NOT_CREATED
000000026A10 000000428A10 0 MH_ERROR_ENABLED
000000026A24 000000428A24 0 MH_ERROR_DISABLED
000000026A38 000000428A38 0 MH_ERROR_NOT_EXECUTABLE
000000026A50 000000428A50 0 MH_ERROR_UNSUPPORTED_FUNCTION
000000026A70 000000428A70 0 MH_ERROR_MEMORY_ALLOC
000000026A88 000000428A88 0 MH_ERROR_MEMORY_PROTECT
000000026AA0 000000428AA0 0 MH_ERROR_MODULE_NOT_FOUND
000000026ABC 000000428ABC 0 MH_ERROR_FUNCTION_NOT_FOUND
000000026AD8 000000428AD8 0 (unknown)
File pos Mem pos ID Text
======== ======= == ====
000000026B32 000000428B32 0 YYYYY
000000026B3E 000000428B3E 0 YYYYYYYYYYYY
000000026B4C 000000428B4C 0 }YPPPPYYYYa
000000026B62 000000428B62 0 YYYYYYYYYYY
000000026C14 000000428C14 0 JJJJKRJJJJOLJJJJJJJJUE@JJJEYMFJ]JJJJJJJJJJJJJJacgNJJkmJJEmJJDEJJ
000000026CF8 000000428CF8 0 .?AVtype_info@@
00000002706B 00000042906B 0 0!01070Q0W0a0q0w0
000000027081 000000429081 0 1-1K1]1
00000002708D 00000042908D 0 1>2\2
000000027099 000000429099 0 3H3f3r3
0000000270A7 0000004290A7 0 4P4M5
0000000270B5 0000004290B5 0 :$;R;
0000000270BF 0000004290BF 0 ;.<D<c<
0000000270CD 0000004290CD 0 <5=;=r=x=
0000000270DF 0000004290DF 0 >2>j>
0000000270FB 0000004290FB 0 ?!?1?7?G?~?
00000002711D 00000042911D 0 0&0-0;0B0W0s0
00000002712B 00000042912B 0 0.1i1
00000002713F 00000042913F 0 2 3(3z3
00000002714D 00000042914D 0 3-4Q4a4y4
000000027163 000000429163 0 6&6:6
000000027179 000000429179 0 7'7c7
000000027189 000000429189 0 8#9X9}9
0000000271B9 0000004291B9 0 =<>F>d>w>
0000000271CB 0000004291CB 0 ?<?F?m?}?
0000000271E4 0000004291E4 0 30f0m0y0
0000000271F9 0000004291F9 0 0 1(141@1L1X1e1l1{1
000000027227 000000429227 0 4%4,4
00000002723B 00000042923B 0 5'5.545c5
00000002724B 00000042924B 0 6)6o6
000000027253 000000429253 0 7=7U7\7t7
00000002725F 00000042925F 0 7+8h8u8
000000027275 000000429275 0 949:9@9I9P9
00000002728B 00000042928B 0 :!:-:::A:G:
0000000272A1 0000004292A1 0 ;Q<a<r<
0000000272B3 0000004292B3 0 >,>q>
0000000272D1 0000004292D1 0 0+1v1
0000000272D9 0000004292D9 0 162>2
0000000272EF 0000004292EF 0 4-464Z4k4
0000000272FB 0000004292FB 0 4[5m5
00000002730D 00000042930D 0 787A7R7w7
00000002731D 00000042931D 0 7g8q8w8
00000002732F 00000042932F 0 9I:[:
000000027355 000000429355 0 3)5:5@5K5e5n5z5
00000002737F 00000042937F 0 5A6Q6b6p6u6
000000027399 000000429399 0 7/777<7b7g7~7
0000000273B9 0000004293B9 0 8$8)8O8T8k8s8x8
0000000273DB 0000004293DB 0 9<9A9X9
0000000273F5 0000004293F5 0 :R:q:
000000027401 000000429401 0 :3;_;
000000027411 000000429411 0 ;3<8<I<O<
000000027423 000000429423 0 =P>V>h>n>
00000002745D 00000042945D 0 1N1T1e1
00000002746D 00000042946D 0 1#2Q2p2
000000027481 000000429481 0 22383I3l3r3
000000027491 000000429491 0 334f4
0000000274AF 0000004294AF 0 6$626A6_6r6
0000000274ED 0000004294ED 0 :O:m:
0000000274F3 0000004294F3 0 :B;U;
000000027509 000000429509 0 =$=8===Q=_=w=
File pos Mem pos ID Text
======== ======= == ====
000000027543 000000429543 0 0<1r1
000000027553 000000429553 0 2A2I2z2
000000027567 000000429567 0 333v3
000000027577 000000429577 0 5/5V5
000000027595 000000429595 0 6N7U7p7
0000000275A7 0000004295A7 0 8!828@8E8
0000000275C5 0000004295C5 0 9G9L9S9[9j9x9
0000000275D7 0000004295D7 0 :T:Y:q:y:
0000000275FB 0000004295FB 0 ="=2=p=~=
00000002760D 00000042960D 0 =[>s>
000000027621 000000429621 0 ?C?u?z?
00000002763D 00000042963D 0 0-0I0
000000027663 000000429663 0 364L4
00000002766D 00000042966D 0 5)5F5]5
00000002767D 00000042967D 0 627f7
000000027691 000000429691 0 909K9
0000000276A1 0000004296A1 0 :&;<;
0000000276AD 0000004296AD 0 <6<M<
0000000276BB 0000004296BB 0 =">V>
0000000276C1 0000004296C1 0 > ?;?v?
0000000276E9 0000004296E9 0 1"2E2U2
0000000276F3 0000004296F3 0 2"3E3U3
0000000276FD 0000004296FD 0 334T4r4
000000027707 000000429707 0 4=5M5
000000027711 000000429711 0 5;6K6
00000002771F 00000042971F 0 7C7[7m7
00000002772D 00000042972D 0 8.848Q8
000000027747 000000429747 0 9*:8:
00000002775D 00000042975D 0 <C<r<
00000002776B 00000042976B 0 =A=W=
000000027773 000000429773 0 =.><>M>
000000027783 000000429783 0 > ?)?7?@?Q?s?
00000002779C 00000042979C 0 80<0@0D0H0L0P0T0X0\0
0000000277B1 0000004297B1 0 0d0s0
0000000277BB 0000004297BB 0 0!1;1
0000000277F3 0000004297F3 0 666T6g6
000000027803 000000429803 0 6$7D7f7
00000002780D 00000042980D 0 848d8
000000027815 000000429815 0 8W9f9
00000002781D 00000042981D 0 9":U:
000000027827 000000429827 0 :,;7;Y;
00000002782F 00000042982F 0 ;e;w;
000000027851 000000429851 0 =&>U>n>
00000002785B 00000042985B 0 >#???
000000027870 000000429870 0 40Q0a0v0
00000002787F 00000042987F 0 0I1p1
000000027895 000000429895 0 2+21262F2c2y2
0000000278B1 0000004298B1 0 3F3g3x3
0000000278BB 0000004298BB 0 4<4A4O4_4e4j4
0000000278D3 0000004298D3 0 5=5B5R5r5
0000000278F3 0000004298F3 0 73797M7S7g7u7
00000002790D 00000042990D 0 7A8_8g8
000000027923 000000429923 0 9!9'9?9_9h9o9u9|9
00000002793F 00000042993F 0 9K:X:
000000027947 000000429947 0 ;7;j;
000000027959 000000429959 0 >D>K>
000000027965 000000429965 0 ?#?*?@?
000000027978 000000429978 0 <0J0Q0
00000002799D 00000042999D 0 3,333<3B3J3R3[3w3
0000000279B1 0000004299B1 0 344B4N4\4k4s4y4
File pos Mem pos ID Text
======== ======= == ====
0000000279D9 0000004299D9 0 646I6{6
000000027A15 000000429A15 0 9!9%9)9-9195999=9A9E9I9M9l9u9
000000027A3F 000000429A3F 0 ;);U;
000000027A4D 000000429A4D 0 0)101"3
000000027A57 000000429A57 0 4S5e5
000000027A67 000000429A67 0 < <$<(<,<0<4<
000000027A8F 000000429A8F 0 >&>2>T>Z>
000000027A99 000000429A99 0 >f>l>z>
000000027ABD 000000429ABD 0 ?0?B?
000000027AE1 000000429AE1 0 0M0i0
000000027AF3 000000429AF3 0 0-1I1e1n1s1
000000027B09 000000429B09 0 2$2D2Y2y2
000000027B1B 000000429B1B 0 393a3y3
000000027B2D 000000429B2D 0 4!4<4U4
000000027B35 000000429B35 0 4g4p4y4
000000027B51 000000429B51 0 555:5m5
000000027B6D 000000429B6D 0 6%6*6U6Z6y6
000000027B7F 000000429B7F 0 717E7V7_7d7
000000027B95 000000429B95 0 8"858b8q8
000000027BB7 000000429BB7 0 9%9*9E9J9e9j9
000000027BD7 000000429BD7 0 :%:*:E:J:l:
000000027BE9 000000429BE9 0 ;);A;a;y;
000000027BF9 000000429BF9 0 <D<U<m<
000000027C4F 000000429C4F 0 2 2$2(2,2024282<2@2D2H2L2P2T2X2\2
000000027C71 000000429C71 0 2d2h2l2p2t2x2|2
000000027CC3 000000429CC3 0 3(3<3L3P3\3p3|3
000000027CEB 000000429CEB 0 4(44484D4L4T4h4t4
000000027D17 000000429D17 0 5$505L5T5\5h5
000000027D39 000000429D39 0 6$606L6T6
000000027D57 000000429D57 0 7,747@7\7d7x7
000000027D79 000000429D79 0 8 8(8<8L8x8
000000027D9F 000000429D9F 0 9$90989T9
000000027DC3 000000429DC3 0 : :<:D:L:
000000027DCD 000000429DCD 0 :l:p:t:x:
000000027DE7 000000429DE7 0 ;,;4;@;\;d;p;
000000027E0D 000000429E0D 0 <$<,<8<T<\<d<p<
000000027E35 000000429E35 0 =$=0=L=T=\=d=p=
000000027E59 000000429E59 0 >,><>P>d>p>
000000027E7B 000000429E7B 0 ?4?<?H?d?l?t?|?
000000027EAF 000000429EAF 0 0$0,040@0\0d0l0
000000027EDF 000000429EDF 0 1H1\1h1p1
000000027EF7 000000429EF7 0 2 2<2D2P2l2t2
000000027F13 000000429F13 0 3 3<3H3d3p3
000000027F2F 000000429F2F 0 4,4P4\4d4t4
000000027F49 000000429F49 0 505D5L5T5\5d5l5t5
000000027F6F 000000429F6F 0 6,646@6H6d6
000000027F8F 000000429F8F 0 7$7@7L7T7
000000027FB5 000000429FB5 0 8 8<8D8P8X8t8
000000027FD5 000000429FD5 0 909<9D9L9T9\9d9t9
000000027FF5 000000429FF5 0 :,:@:T:d:t:
000000028025 00000042A025 0 0 0$0(0H0
00000000F69C 00000040F69C 0 (null)
00000000004D 00000040004D 0 !This program cannot be run in DOS mode.
0000000001F0 0000004001F0 0 .text
000000000218 000000400218 0 .rdata
00000000023F 00000040023F 0 @.data
000000000268 000000400268 0 .rsrc
0000000023D3 0000004023D3 0 PSSSSSSSSj
0000000049E9 0000004049E9 0 t/Ht HH
0000000053DA 0000004053DA 0 VWhST@
File pos Mem pos ID Text
======== ======= == ====
00000000570B 00000040570B 0 QWj P
0000000058BD 0000004058BD 0 QQSVWd
000000005B5F 000000405B5F 0 SVWUj
000000005BC8 000000405BC8 0 t.;t$$t(
000000006656 000000406656 0 uRFGHt
000000006700 000000406700 0 tlHt.
0000000067D8 0000004067D8 0 wDVSU
0000000069C0 0000004069C0 0 VC20XC00U
000000007516 000000407516 0 PPPPPPPP
000000007576 000000407576 0 9= :A
00000000757C 00000040757C 0 uFWWj
0000000075A1 0000004075A1 0 "WWSh|
00000000768D 00000040768D 0 tMWWS
000000007AD0 000000407AD0 0 sO;>|C;~
000000007FC8 000000407FC8 0 QQSVW
0000000080A9 0000004080A9 0 QQSVW
0000000080FF 0000004080FF 0 QQSVW
000000008645 000000408645 0 HHtpHHtl
0000000088FC 0000004088FC 0 Yt f
000000008EBB 000000408EBB 0 btHHt.
000000009B67 000000409B67 0 DSUVWh
00000000A13D 00000040A13D 0 eYt,F
00000000A756 00000040A756 0 ?=t"U
00000000A8AA 00000040A8AA 0 8"uF@
00000000AA78 00000040AA78 0 SS@SSPVSS
00000000AA9A 00000040AA9A 0 t#SSUP
00000000AAA1 00000040AAA1 0 t$$VSS
00000000AB77 00000040AB77 0 A=(.A
00000000B786 00000040B786 0 PPPPPPPP
00000000BB2D 00000040BB2D 0 B=h0A
00000000BD93 00000040BD93 0 t-Ht!Ht
00000000C276 00000040C276 0 SVWj
00000000C39F 00000040C39F 0 SVWj
00000000C7C2 00000040C7C2 0 Y;5T=A
00000000C9C5 00000040C9C5 0 Wj@Y3
00000000CB98 00000040CB98 0 VWuBhT"A
00000000CD48 00000040CD48 0 FGQPS
00000000CFD4 00000040CFD4 0 +ttHHtd
00000000D012 00000040D012 0 j XO
00000000D258 00000040D258 0 HHtYHHtF
00000000F224 00000040F224 0 string too long
00000000F254 00000040F254 0 invalid string position
00000000F3B8 00000040F3B8 0 ios::eofbit set
00000000F3C8 00000040F3C8 0 ios::failbit set
00000000F3DC 00000040F3DC 0 ios::badbit set
00000000F45C 00000040F45C 0 Unknown exception
00000000F4A0 00000040F4A0 0 H:mm:ss
00000000F4A8 00000040F4A8 0 dddd, MMMM dd, yyyy
00000000F4BC 00000040F4BC 0 M/d/yy
00000000F4CC 00000040F4CC 0 December
00000000F4D8 00000040F4D8 0 November
00000000F4E4 00000040F4E4 0 October
00000000F4EC 00000040F4EC 0 September
00000000F4F8 00000040F4F8 0 August
00000000F510 00000040F510 0 April
00000000F518 00000040F518 0 March
00000000F520 00000040F520 0 February
00000000F52C 00000040F52C 0 January
00000000F564 00000040F564 0 Saturday
00000000F570 00000040F570 0 Friday
File pos Mem pos ID Text
======== ======= == ====
00000000F578 00000040F578 0 Thursday
00000000F584 00000040F584 0 Wednesday
00000000F590 00000040F590 0 Tuesday
00000000F598 00000040F598 0 Monday
00000000F5A0 00000040F5A0 0 Sunday
00000000F661 00000040F661 0 (8PX
00000000F669 00000040F669 0 700WP
00000000F681 00000040F681 0 ppxxxx
00000000F6AC 00000040F6AC 0 (null)
00000000F6CE 00000040F6CE 0 GAIsProcessorFeaturePresent
00000000F6EC 00000040F6EC 0 KERNEL32
00000000F6F8 00000040F6F8 0 e+000
00000000F700 00000040F700 0 runtime error
00000000F714 00000040F714 0 TLOSS error
00000000F724 00000040F724 0 SING error
00000000F734 00000040F734 0 DOMAIN error
00000000F744 00000040F744 0 R6028
00000000F74B 00000040F74B 0 - unable to initialize heap
00000000F76C 00000040F76C 0 R6027
00000000F773 00000040F773 0 - not enough space for lowio initialization
00000000F7A4 00000040F7A4 0 R6026
00000000F7AB 00000040F7AB 0 - not enough space for stdio initialization
00000000F7DC 00000040F7DC 0 R6025
00000000F7E3 00000040F7E3 0 - pure virtual function call
00000000F804 00000040F804 0 R6024
00000000F80B 00000040F80B 0 - not enough space for _onexit/atexit table
00000000F83C 00000040F83C 0 R6019
00000000F843 00000040F843 0 - unable to open console device
00000000F868 00000040F868 0 R6018
00000000F86F 00000040F86F 0 - unexpected heap error
00000000F88C 00000040F88C 0 R6017
00000000F893 00000040F893 0 - unexpected multithread lock error
00000000F8BC 00000040F8BC 0 R6016
00000000F8C3 00000040F8C3 0 - not enough space for thread data
00000000F8EA 00000040F8EA 0 abnormal program termination
00000000F90C 00000040F90C 0 R6009
00000000F913 00000040F913 0 - not enough space for environment
00000000F938 00000040F938 0 R6008
00000000F93F 00000040F93F 0 - not enough space for arguments
00000000F964 00000040F964 0 R6002
00000000F96B 00000040F96B 0 - floating point not loaded
00000000F98C 00000040F98C 0 Microsoft Visual C++ Runtime Library
00000000F9B8 00000040F9B8 0 Runtime Error!
00000000F9C8 00000040F9C8 0 Program:
00000000F9D8 00000040F9D8 0 <program name unknown>
00000000F9FC 00000040F9FC 0 SunMonTueWedThuFriSat
00000000FA14 00000040FA14 0 JanFebMarAprMayJunJulAugSepOctNovDec
00000000FA3C 00000040FA3C 0 GetLastActivePopup
00000000FA50 00000040FA50 0 GetActiveWindow
00000000FA60 00000040FA60 0 MessageBoxA
00000000FA6C 00000040FA6C 0 1#QNAN
00000000FA74 00000040FA74 0 1#INF
00000000FA7C 00000040FA7C 0 1#IND
00000000FA84 00000040FA84 0 1#SNAN
000000010CD6 000000410CD6 0 CreateDirectoryA
000000010CEA 000000410CEA 0 GetFileAttributesA
000000010D00 000000410D00 0 CloseHandle
000000010D0E 000000410D0E 0 ReadFile
000000010D1A 000000410D1A 0 GetFileSize
000000010D28 000000410D28 0 CreateFileA
File pos Mem pos ID Text
======== ======= == ====
000000010D36 000000410D36 0 WriteFile
000000010D42 000000410D42 0 SetFilePointer
000000010D54 000000410D54 0 LocalFree
000000010D60 000000410D60 0 LocalAlloc
000000010D6E 000000410D6E 0 SizeofResource
000000010D80 000000410D80 0 LockResource
000000010D90 000000410D90 0 LoadResource
000000010DA0 000000410DA0 0 FindResourceA
000000010DB0 000000410DB0 0 GetModuleHandleA
000000010DC4 000000410DC4 0 GetStdHandle
000000010DD4 000000410DD4 0 GetLastError
000000010DE4 000000410DE4 0 GetTickCount
000000010DF4 000000410DF4 0 GetModuleFileNameA
000000010E0A 000000410E0A 0 Sleep
000000010E12 000000410E12 0 ResumeThread
000000010E22 000000410E22 0 VirtualFreeEx
000000010E32 000000410E32 0 SetThreadContext
000000010E46 000000410E46 0 LoadLibraryA
000000010E56 000000410E56 0 WriteProcessMemory
000000010E6C 000000410E6C 0 GetProcAddress
000000010E7E 000000410E7E 0 VirtualAllocEx
000000010E90 000000410E90 0 GetThreadContext
000000010EA4 000000410EA4 0 SuspendThread
000000010EB4 000000410EB4 0 OpenThread
000000010EC2 000000410EC2 0 Thread32Next
000000010ED2 000000410ED2 0 Thread32First
000000010EE2 000000410EE2 0 CreateToolhelp32Snapshot
000000010EFE 000000410EFE 0 OpenProcess
000000010F0C 000000410F0C 0 GetCurrentProcess
000000010F20 000000410F20 0 Process32Next
000000010F30 000000410F30 0 Process32First
000000010F40 000000410F40 0 KERNEL32.dll
000000010F4E 000000410F4E 0 USER32.dll
000000010F5C 000000410F5C 0 FreeSid
000000010F66 000000410F66 0 SetFileSecurityA
000000010F7A 000000410F7A 0 SetSecurityDescriptorDacl
000000010F96 000000410F96 0 InitializeSecurityDescriptor
000000010FB6 000000410FB6 0 SetEntriesInAclA
000000010FCA 000000410FCA 0 AllocateAndInitializeSid
000000010FE6 000000410FE6 0 AdjustTokenPrivileges
000000010FFE 000000410FFE 0 OpenProcessToken
000000011010 000000411010 0 ADVAPI32.dll
000000011020 000000411020 0 PathAppendA
00000001102C 00000041102C 0 SHLWAPI.dll
000000011038 000000411038 0 PSAPI.DLL
000000011044 000000411044 0 MultiByteToWideChar
00000001105A 00000041105A 0 WideCharToMultiByte
000000011070 000000411070 0 RtlUnwind
00000001107C 00000041107C 0 RaiseException
00000001108E 00000041108E 0 HeapReAlloc
00000001109C 00000041109C 0 HeapAlloc
0000000110A8 0000004110A8 0 HeapFree
0000000110B4 0000004110B4 0 ExitProcess
0000000110C2 0000004110C2 0 TerminateProcess
0000000110D6 0000004110D6 0 GetCommandLineA
0000000110E8 0000004110E8 0 GetVersion
0000000110F6 0000004110F6 0 LCMapStringA
000000011106 000000411106 0 LCMapStringW
000000011116 000000411116 0 GetCPInfo
000000011122 000000411122 0 HeapSize
File pos Mem pos ID Text
======== ======= == ====
00000001112E 00000041112E 0 SetUnhandledExceptionFilter
00000001114C 00000041114C 0 HeapDestroy
00000001115A 00000041115A 0 HeapCreate
000000011168 000000411168 0 VirtualFree
000000011176 000000411176 0 VirtualAlloc
000000011186 000000411186 0 IsBadWritePtr
000000011196 000000411196 0 SetHandleCount
0000000111A8 0000004111A8 0 GetFileType
0000000111B6 0000004111B6 0 GetStartupInfoA
0000000111C8 0000004111C8 0 UnhandledExceptionFilter
0000000111E4 0000004111E4 0 FreeEnvironmentStringsA
0000000111FE 0000004111FE 0 FreeEnvironmentStringsW
000000011218 000000411218 0 GetEnvironmentStrings
000000011230 000000411230 0 GetEnvironmentStringsW
00000001124A 00000041124A 0 FlushFileBuffers
00000001125E 00000041125E 0 GetStringTypeA
000000011270 000000411270 0 GetStringTypeW
000000011282 000000411282 0 IsBadReadPtr
000000011292 000000411292 0 IsBadCodePtr
0000000112A2 0000004112A2 0 SetStdHandle
0000000112B2 0000004112B2 0 GetACP
0000000112BC 0000004112BC 0 GetOEMCP
0000000112C8 0000004112C8 0 SetEndOfFile
0000000120F8 0000004120F8 0 .?AVException@@
000000012110 000000412110 0 .?AVexception@@
000000012128 000000412128 0 .?AVArgumentOutOfRangeException@@
00000001214C 00000041214C 0 no processes found. Exiting.
00000001216C 00000041216C 0 Founded %d precesses.
000000012184 000000412184 0 atmapp.exe
00000001219C 00000041219C 0 c:\atm\1
0000000121A8 0000004121A8 0 lib_%s
0000000121B8 0000004121B8 0 .?AVbad_exception@std@@
0000000121D0 0000004121D0 0 bad exception
00000001220C 00000041220C 0 LoadLibraryA
00000001221C 00000041221C 0 [-] Error: Couldn't get thread handle
000000012244 000000412244 0 kernel32.dll
000000012254 000000412254 0 user32.dll
000000012268 000000412268 0 .?AVlogic_error@std@@
000000012288 000000412288 0 .?AVlength_error@std@@
0000000122A8 0000004122A8 0 .?AVout_of_range@std@@
0000000122D0 0000004122D0 0 .?AVios_base@std@@
0000000122F0 0000004122F0 0 .?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
000000012328 000000412328 0 .?AV?$basic_istream@DU?$char_traits@D@std@@@std@@
000000012368 000000412368 0 .?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@
0000000123A8 0000004123A8 0 .?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
0000000123E8 0000004123E8 0 .?AV?$basic_filebuf@DU?$char_traits@D@std@@@std@@
000000012428 000000412428 0 .?AV?$basic_ios@GU?$char_traits@G@std@@@std@@
000000012460 000000412460 0 .?AV?$basic_istream@GU?$char_traits@G@std@@@std@@
0000000124A0 0000004124A0 0 .?AV?$basic_ostream@GU?$char_traits@G@std@@@std@@
0000000124E0 0000004124E0 0 .?AV?$basic_filebuf@GU?$char_traits@G@std@@@std@@
000000012520 000000412520 0 .?AV?$basic_streambuf@GU?$char_traits@G@std@@@std@@
000000012560 000000412560 0 .?AVruntime_error@std@@
000000012580 000000412580 0 .?AVfailure@ios_base@std@@
0000000125A8 0000004125A8 0 .?AVfacet@locale@std@@
0000000125C8 0000004125C8 0 .?AV_Locimp@locale@std@@
000000012600 000000412600 0 .?AVtype_info@@
0000000133EE 0000004133EE 0 z?aUY
000000013430 000000413430 0 zc%C1
000000013483 000000413483 0 -64OS
0000000140AD 0000004160AD 0 !This program cannot be run in DOS mode.
File pos Mem pos ID Text
======== ======= == ====
000000014250 000000416250 0 .text
000000014278 000000416278 0 .rdata
00000001429F 00000041629F 0 @.data
0000000142C8 0000004162C8 0 .reloc
000000015C49 000000417C49 0 L$(SUV
000000015C50 000000417C50 0 D$8W3
000000015C85 000000417C85 0 D$HPQVU
0000000160E9 0000004180E9 0 D$<SUVW
000000016854 000000418854 0 d$hPUQ
000000016C13 000000418C13 0 L$(QV
000000016C46 000000418C46 0 D$ VP
000000016D02 000000418D02 0 D$$UP
000000016F4B 000000418F4B 0 l$ VW
00000001717B 00000041917B 0 l$,VW
0000000172A9 0000004192A9 0 L$$SUV
0000000172B0 0000004192B0 0 D$4WPQ
0000000172DF 0000004192DF 0 D$DPQVS
0000000177E0 0000004197E0 0 D$@_][
000000017A09 000000419A09 0 T$(PR
000000017B79 000000419B79 0 D$$SUVW
000000017F3E 000000419F3E 0 \$dUVW3
000000017FD3 000000419FD3 0 L$,Qj
0000000180FF 00000041A0FF 0 L$(Qj
0000000183BA 00000041A3BA 0 L$<Qj
0000000184D7 00000041A4D7 0 D$,SP
00000001857A 00000041A57A 0 L$8QR
00000001876C 00000041A76C 0 d$DSh
000000018835 00000041A835 0 QSUVW
000000018BB9 00000041ABB9 0 L$$SUV
000000018BC0 00000041ABC0 0 D$4WPQ
000000018BEF 00000041ABEF 0 D$DPQVS
000000018CE9 00000041ACE9 0 L$$SUV
000000018CF0 00000041ACF0 0 D$4WPQ
000000018D1F 00000041AD1F 0 D$DPQVS
000000018F1C 00000041AF1C 0 L$ QW
000000018F9F 00000041AF9F 0 U4RQU
00000001942C 00000041B42C 0 SUVW3
000000019468 00000041B468 0 L$$Qj
000000019A78 00000041BA78 0 SUVW3
000000019BA9 00000041BBA9 0 D$|VW3
000000019D59 00000041BD59 0 D$LSUV3
000000019FC2 00000041BFC2 0 L$$PQ
00000001A0B9 00000041C0B9 0 D$8SUV3
00000001A128 00000041C128 0 \$<QSR
00000001A147 00000041C147 0 T$$QPR
00000001A299 00000041C299 0 D$8SUV3
00000001A30F 00000041C30F 0 \$<QRV
00000001A32B 00000041C32B 0 T$$PSR
00000001A88B 00000041C88B 0 SUVW3
00000001A92C 00000041C92C 0 L$0RVW
00000001A959 00000041C959 0 L$PQP
00000001AA5A 00000041CA5A 0 D$PPW
00000001AC35 00000041CC35 0 |$ QPW
00000001ACC9 00000041CCC9 0 D$8UVWj
00000001AD64 00000041CD64 0 L$HQP
00000001AFF7 00000041CFF7 0 ,SUVW
00000001B013 00000041D013 0 l$Dt#
00000001B0CD 00000041D0CD 0 d$(Ph$%
00000001B3A7 00000041D3A7 0 @SUVW
00000001B555 00000041D555 0 D$X VP
File pos Mem pos ID Text
======== ======= == ====
00000001B689 00000041D689 0 L$$SUV
00000001B690 00000041D690 0 D$4WPQ
00000001B6BF 00000041D6BF 0 D$DPQVS
00000001BA3C 00000041DA3C 0 t$hWj
00000001BB83 00000041DB83 0 D$ PQ
00000001C33A 00000041E33A 0 T$$QWVR
00000001C37C 00000041E37C 0 L$$PWVQ
00000001C3C3 00000041E3C3 0 D$,VP
00000001CA2A 00000041EA2A 0 T$$QWVR
00000001CA6C 00000041EA6C 0 L$$PWVQ
00000001CAB3 00000041EAB3 0 D$,VP
00000001DF26 00000041FF26 0 W*hd&
00000001E0E7 0000004200E7 0 0SUVW
00000001E534 000000420534 0 d$8Ph
00000001E55D 00000042055D 0 t$(to
00000001EB28 000000420B28 0 SUVW3
00000001EC01 000000420C01 0 |$0t1
00000001EC34 000000420C34 0 \$$hh!
000000021FA8 000000423FA8 0 t WVS
000000021FD5 000000423FD5 0 u7WPS
000000021FE6 000000423FE6 0 u&WVS
000000024D6E 000000426D6E 0 CloseHandle
000000024D7C 000000426D7C 0 ReadFile
000000024D88 000000426D88 0 GetFileSize
000000024D96 000000426D96 0 CreateFileA
000000024DA4 000000426DA4 0 WriteFile
000000024DB0 000000426DB0 0 SetFilePointer
000000024DC2 000000426DC2 0 GetLocalTime
000000024DD2 000000426DD2 0 GetModuleFileNameA
000000024DE8 000000426DE8 0 DeleteFileA
000000024DF6 000000426DF6 0 VirtualQuery
000000024E06 000000426E06 0 CreateThread
000000024E16 000000426E16 0 TerminateThread
000000024E28 000000426E28 0 Sleep
000000024E30 000000426E30 0 SuspendThread
000000024E40 000000426E40 0 ResumeThread
000000024E50 000000426E50 0 GetProcAddress
000000024E62 000000426E62 0 LoadLibraryA
000000024E72 000000426E72 0 GetModuleHandleA
000000024E86 000000426E86 0 VirtualFree
000000024E94 000000426E94 0 VirtualAlloc
000000024EA4 000000426EA4 0 FindNextFileA
000000024EB4 000000426EB4 0 FindFirstFileA
000000024EC6 000000426EC6 0 WaitForSingleObject
000000024EDC 000000426EDC 0 VirtualProtect
000000024EEC 000000426EEC 0 KERNEL32.dll
000000024EFC 000000426EFC 0 MessageBoxA
000000024F08 000000426F08 0 USER32.dll
000000024F14 000000426F14 0 ADVAPI32.dll
000000024F24 000000426F24 0 ??0Init@ios_base@std@@QAE@XZ
000000024F44 000000426F44 0 ??1Init@ios_base@std@@QAE@XZ
000000024F64 000000426F64 0 ??0_Winit@std@@QAE@XZ
000000024F7C 000000426F7C 0 ??1_Winit@std@@QAE@XZ
000000024F94 000000426F94 0 ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
000000024FDE 000000426FDE 0 ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
00000002503A 00000042703A 0 ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
000000025096 000000427096 0 ?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
0000000250E8 0000004270E8 0 ?_Xlen@std@@YAXXZ
0000000250FC 0000004270FC 0 ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
000000025150 000000427150 0 ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
File pos Mem pos ID Text
======== ======= == ====
00000002519A 00000042719A 0 ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
0000000251EA 0000004271EA 0 ?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
000000025238 000000427238 0 ?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
000000025286 000000427286 0 ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
0000000252DE 0000004272DE 0 ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
00000002533A 00000042733A 0 ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
000000025392 000000427392 0 ??0bad_exception@std@@QAE@ABV01@@Z
0000000253B8 0000004273B8 0 ??1bad_exception@std@@UAE@XZ
0000000253D8 0000004273D8 0 ??0bad_exception@std@@QAE@PBD@Z
0000000253FA 0000004273FA 0 ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
000000025456 000000427456 0 ?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
0000000254A4 0000004274A4 0 ?_Xran@std@@YAXXZ
0000000254B8 0000004274B8 0 ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
00000002550E 00000042750E 0 ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
000000025560 000000427560 0 ?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
0000000255B4 0000004275B4 0 ?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
000000025612 000000427612 0 ?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
000000025670 000000427670 0 ?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
0000000256C2 0000004276C2 0 ??1_Lockit@std@@QAE@XZ
0000000256DC 0000004276DC 0 ??0_Lockit@std@@QAE@XZ
0000000256F4 0000004276F4 0 MSVCP60.dll
000000025702 000000427702 0 PathFileExistsA
000000025714 000000427714 0 PathAppendA
000000025720 000000427720 0 SHLWAPI.dll
00000002572E 00000042772E 0 __CxxFrameHandler
00000002574A 00000042774A 0 memmove
000000025754 000000427754 0 ??0exception@@QAE@ABV0@@Z
000000025778 000000427778 0 realloc
000000025782 000000427782 0 _CxxThrowException
000000025798 000000427798 0 ?what@exception@@UBEPBDXZ
0000000257B4 0000004277B4 0 ??1exception@@UAE@XZ
0000000257CC 0000004277CC 0 _vsnprintf
0000000257DA 0000004277DA 0 ??2@YAPAXI@Z
0000000257EA 0000004277EA 0 fclose
0000000257F4 0000004277F4 0 vfprintf
000000025800 000000427800 0 fopen
000000025808 000000427808 0 ??0exception@@QAE@XZ
000000025820 000000427820 0 fputs
000000025828 000000427828 0 fread
000000025838 000000427838 0 _ftol
000000025840 000000427840 0 malloc
00000002584A 00000042784A 0 memcpy
000000025854 000000427854 0 memset
00000002585E 00000042785E 0 __dllonexit
00000002586C 00000042786C 0 _onexit
000000025874 000000427874 0 MSVCRT.dll
000000025882 000000427882 0 ??1type_info@@UAE@XZ
00000002589A 00000042789A 0 _initterm
0000000258A6 0000004278A6 0 _adjust_fdiv
0000000258B6 0000004278B6 0 HeapCreate
0000000258C4 0000004278C4 0 InterlockedCompareExchange
0000000258E2 0000004278E2 0 InterlockedExchange
0000000258F8 0000004278F8 0 HeapDestroy
000000025906 000000427906 0 HeapFree
000000025912 000000427912 0 OpenThread
000000025920 000000427920 0 SetThreadContext
000000025934 000000427934 0 GetThreadContext
000000025948 000000427948 0 Thread32Next
000000025958 000000427958 0 HeapReAlloc
000000025966 000000427966 0 HeapAlloc
File pos Mem pos ID Text
======== ======= == ====
000000025972 000000427972 0 GetCurrentThreadId
000000025988 000000427988 0 GetCurrentProcessId
00000002599E 00000042799E 0 Thread32First
0000000259AE 0000004279AE 0 CreateToolhelp32Snapshot
0000000259CA 0000004279CA 0 FlushInstructionCache
0000000259E2 0000004279E2 0 GetCurrentProcess
000000025A32 000000427A32 0 Library.dll
000000025A3E 000000427A3E 0 iinit
0000000260B0 0000004280B0 0 .?AVexception@@
0000000260C8 0000004280C8 0 .?AVException@@
0000000260E0 0000004280E0 0 .?AVArgumentOutOfRangeException@@
000000026118 000000428118 0 .?AVbad_exception@std@@
000000026130 000000428130 0 bad exception
000000026150 000000428150 0 .?AVIOException@@
000000026170 000000428170 0 .?AVFileNotFoundException@@
000000026190 000000428190 0 Logger is now on new TraceLevel: %s
0000000261B4 0000004281B4 0 UNKNOWN
0000000261C0 0000004281C0 0 TRACE
0000000261C8 0000004281C8 0 NOTICE
0000000261D0 0000004281D0 0 WARNING
0000000261D8 0000004281D8 0 ERROR
0000000261E0 0000004281E0 0 FATAL
0000000261E8 0000004281E8 0 [%s]: %s
000000026200 000000428200 0 .?AVThreadException@@
000000026218 000000428218 0 Can't resume thread
00000002622C 00000042822C 0 MessageBoxTimeoutA
000000026240 000000428240 0 user32.dll
00000002624C 00000042824C 0 [%04d/%02d/%02d %02d:%02d:%02d.%03d] %s
000000026280 000000428280 0 .?AVXfsException@@
0000000262A0 0000004282A0 0 .?AVXfsGetInfoException@@
0000000262BC 0000004282BC 0 get cu info get info exception %d
0000000262E0 0000004282E0 0 get cu and store result unknown exception
00000002630C 00000042830C 0 get cu info query error
000000026330 000000428330 0 .?AVXfsDispenseException@@
00000002634C 00000042834C 0 unknown exception
000000026360 000000428360 0 Dispense exception, code %d
00000002637C 00000042837C 0 ca5h units info received
000000026398 000000428398 0 try to set %d
0000000263A8 0000004283A8 0 Xfs::QueryCashUnitsFromAtm4
0000000263C4 0000004283C4 0 Xfs::QueryCashUnitsFromAtm3
0000000263E0 0000004283E0 0 Xfs::QueryCashUnitsFromAtm2
0000000263FC 0000004283FC 0 LFS found info about <%d> ca5h un1t5
000000026424 000000428424 0 XFS-> dispense end SUCCESSFUL DISPENSE
00000002644C 00000042844C 0 WFS_RESULT %d
000000026468 000000428468 0 .?AVHookLibException@@
000000026480 000000428480 0 WFMFreeBuffer
000000026490 000000428490 0 WFMAllocateMore
0000000264A0 0000004284A0 0 WFMAllocateBuffer
0000000264B4 0000004284B4 0 WFSExecute
0000000264C0 0000004284C0 0 WFSFreeResult
0000000264D0 0000004284D0 0 WFSStartUp
0000000264DC 0000004284DC 0 WFSGetInfo
0000000264E8 0000004284E8 0 no xf5 module found
0000000264FC 0000004284FC 0 msxfs.dll
000000026538 000000428538 0 |INDEX:%d|CU state:%d|Type:%d|Values:%d|Currency_ID:%s|Money count:%d|
000000026584 000000428584 0 Founded < %d > commands
0000000265A0 0000004285A0 0 Command file deleted successfully
0000000265C4 0000004285C4 0 Reading command from a %s
0000000265E0 0000004285E0 0 %s\%s
0000000265E8 0000004285E8 0 FileCommandProvider::ReadXfsCommandFromFile ->
File pos Mem pos ID Text
======== ======= == ====
000000026620 000000428620 0 .?AVArgumentException@@
000000026638 000000428638 0 exception
000000026648 000000428648 0 CommandProcessor created
000000026664 000000428664 0 DEFAULT command processed
000000026680 000000428680 0 NONE command processed
000000026698 000000428698 0 System error!
0000000266A8 0000004286A8 0 Dispense failed. CODE:%d
0000000266C4 0000004286C4 0 Multi Dispensing start
0000000266DC 0000004286DC 0 Dispense failed. Unknown reason.
000000026700 000000428700 0 Dispense failed. %d
000000026714 000000428714 0 Manual Dispensing
000000026728 000000428728 0 Display Balance -> exception, code:%d
000000026750 000000428750 0 Display Balance 1try -> exception, code:%d
00000002677C 00000042877C 0 CommandProcessor::ProcessCommand ->
0000000267A0 0000004287A0 0 SetMaximumDispenseSize:%d
0000000267BC 0000004287BC 0 NULL command processed
0000000267D4 0000004287D4 0 ICommandProcessor::ProcessCommand -> start method
000000026808 000000428808 0 Processing command #%d
000000026820 000000428820 0 Received
00000002682D 00000042882D 0 commands
000000026838 000000428838 0 exception cauch: %d
00000002684C 00000042884C 0 Exiting
000000026854 000000428854 0 Pausing
00000002685C 00000042885C 0 trying to dispense
000000026870 000000428870 0 R2CommandProcessor::ProcessGetRealBalance()1
0000000268A0 0000004288A0 0 cur disp service is |%d|
0000000268BC 0000004288BC 0 try toi set %d
0000000268CC 0000004288CC 0 ___log.txt
0000000268D8 0000004288D8 0 Deleting resources
0000000268F8 0000004288F8 0 .?AVXfsLoaderException@@
000000026914 000000428914 0 uncatched
000000026920 000000428920 0 %s:%d
000000026928 000000428928 0 c:\atm\1
000000026934 000000428934 0 void CreateAllResources()
000000026950 000000428950 0 Xfs init error
000000026960 000000428960 0 Critical system error!
000000026978 000000428978 0 resources created
00000002698C 00000042898C 0 MH_UNKNOWN
000000026998 000000428998 0 MH_OK
0000000269A0 0000004289A0 0 MH_ERROR_ALREADY_INITIALIZED
0000000269C0 0000004289C0 0 MH_ERROR_NOT_INITIALIZED
0000000269DC 0000004289DC 0 MH_ERROR_ALREADY_CREATED
0000000269F8 0000004289F8 0 MH_ERROR_NOT_CREATED
000000026A10 000000428A10 0 MH_ERROR_ENABLED
000000026A24 000000428A24 0 MH_ERROR_DISABLED
000000026A38 000000428A38 0 MH_ERROR_NOT_EXECUTABLE
000000026A50 000000428A50 0 MH_ERROR_UNSUPPORTED_FUNCTION
000000026A70 000000428A70 0 MH_ERROR_MEMORY_ALLOC
000000026A88 000000428A88 0 MH_ERROR_MEMORY_PROTECT
000000026AA0 000000428AA0 0 MH_ERROR_MODULE_NOT_FOUND
000000026ABC 000000428ABC 0 MH_ERROR_FUNCTION_NOT_FOUND
000000026AD8 000000428AD8 0 (unknown)
000000026B32 000000428B32 0 YYYYY
000000026B3E 000000428B3E 0 YYYYYYYYYYYY
000000026B4C 000000428B4C 0 }YPPPPYYYYa
000000026B62 000000428B62 0 YYYYYYYYYYY
000000026C14 000000428C14 0 JJJJKRJJJJOLJJJJJJJJUE@JJJEYMFJ]JJJJJJJJJJJJJJacgNJJkmJJEmJJDEJJ
000000026CF8 000000428CF8 0 .?AVtype_info@@
00000002706B 00000042906B 0 0!01070Q0W0a0q0w0
000000027081 000000429081 0 1-1K1]1
File pos Mem pos ID Text
======== ======= == ====
00000002708D 00000042908D 0 1>2\2
000000027099 000000429099 0 3H3f3r3
0000000270A7 0000004290A7 0 4P4M5
0000000270B5 0000004290B5 0 :$;R;
0000000270BF 0000004290BF 0 ;.<D<c<
0000000270CD 0000004290CD 0 <5=;=r=x=
0000000270DF 0000004290DF 0 >2>j>
0000000270FB 0000004290FB 0 ?!?1?7?G?~?
00000002711D 00000042911D 0 0&0-0;0B0W0s0
00000002712B 00000042912B 0 0.1i1
00000002713F 00000042913F 0 2 3(3z3
00000002714D 00000042914D 0 3-4Q4a4y4
000000027163 000000429163 0 6&6:6
000000027179 000000429179 0 7'7c7
000000027189 000000429189 0 8#9X9}9
0000000271B9 0000004291B9 0 =<>F>d>w>
0000000271CB 0000004291CB 0 ?<?F?m?}?
0000000271E4 0000004291E4 0 30f0m0y0
0000000271F9 0000004291F9 0 0 1(141@1L1X1e1l1{1
000000027227 000000429227 0 4%4,4
00000002723B 00000042923B 0 5'5.545c5
00000002724B 00000042924B 0 6)6o6
000000027253 000000429253 0 7=7U7\7t7
00000002725F 00000042925F 0 7+8h8u8
000000027275 000000429275 0 949:9@9I9P9
00000002728B 00000042928B 0 :!:-:::A:G:
0000000272A1 0000004292A1 0 ;Q<a<r<
0000000272B3 0000004292B3 0 >,>q>
0000000272D1 0000004292D1 0 0+1v1
0000000272D9 0000004292D9 0 162>2
0000000272EF 0000004292EF 0 4-464Z4k4
0000000272FB 0000004292FB 0 4[5m5
00000002730D 00000042930D 0 787A7R7w7
00000002731D 00000042931D 0 7g8q8w8
00000002732F 00000042932F 0 9I:[:
000000027355 000000429355 0 3)5:5@5K5e5n5z5
00000002737F 00000042937F 0 5A6Q6b6p6u6
000000027399 000000429399 0 7/777<7b7g7~7
0000000273B9 0000004293B9 0 8$8)8O8T8k8s8x8
0000000273DB 0000004293DB 0 9<9A9X9
0000000273F5 0000004293F5 0 :R:q:
000000027401 000000429401 0 :3;_;
000000027411 000000429411 0 ;3<8<I<O<
000000027423 000000429423 0 =P>V>h>n>
00000002745D 00000042945D 0 1N1T1e1
00000002746D 00000042946D 0 1#2Q2p2
000000027481 000000429481 0 22383I3l3r3
000000027491 000000429491 0 334f4
0000000274AF 0000004294AF 0 6$626A6_6r6
0000000274ED 0000004294ED 0 :O:m:
0000000274F3 0000004294F3 0 :B;U;
000000027509 000000429509 0 =$=8===Q=_=w=
000000027543 000000429543 0 0<1r1
000000027553 000000429553 0 2A2I2z2
000000027567 000000429567 0 333v3
000000027577 000000429577 0 5/5V5
000000027595 000000429595 0 6N7U7p7
0000000275A7 0000004295A7 0 8!828@8E8
0000000275C5 0000004295C5 0 9G9L9S9[9j9x9
0000000275D7 0000004295D7 0 :T:Y:q:y:
File pos Mem pos ID Text
======== ======= == ====
0000000275FB 0000004295FB 0 ="=2=p=~=
00000002760D 00000042960D 0 =[>s>
000000027621 000000429621 0 ?C?u?z?
00000002763D 00000042963D 0 0-0I0
000000027663 000000429663 0 364L4
00000002766D 00000042966D 0 5)5F5]5
00000002767D 00000042967D 0 627f7
000000027691 000000429691 0 909K9
0000000276A1 0000004296A1 0 :&;<;
0000000276AD 0000004296AD 0 <6<M<
0000000276BB 0000004296BB 0 =">V>
0000000276C1 0000004296C1 0 > ?;?v?
0000000276E9 0000004296E9 0 1"2E2U2
0000000276F3 0000004296F3 0 2"3E3U3
0000000276FD 0000004296FD 0 334T4r4
000000027707 000000429707 0 4=5M5
000000027711 000000429711 0 5;6K6
00000002771F 00000042971F 0 7C7[7m7
00000002772D 00000042972D 0 8.848Q8
000000027747 000000429747 0 9*:8:
00000002775D 00000042975D 0 <C<r<
00000002776B 00000042976B 0 =A=W=
000000027773 000000429773 0 =.><>M>
000000027783 000000429783 0 > ?)?7?@?Q?s?
00000002779C 00000042979C 0 80<0@0D0H0L0P0T0X0\0
0000000277B1 0000004297B1 0 0d0s0
0000000277BB 0000004297BB 0 0!1;1
0000000277F3 0000004297F3 0 666T6g6
000000027803 000000429803 0 6$7D7f7
00000002780D 00000042980D 0 848d8
000000027815 000000429815 0 8W9f9
00000002781D 00000042981D 0 9":U:
000000027827 000000429827 0 :,;7;Y;
00000002782F 00000042982F 0 ;e;w;
000000027851 000000429851 0 =&>U>n>
00000002785B 00000042985B 0 >#???
000000027870 000000429870 0 40Q0a0v0
00000002787F 00000042987F 0 0I1p1
000000027895 000000429895 0 2+21262F2c2y2
0000000278B1 0000004298B1 0 3F3g3x3
0000000278BB 0000004298BB 0 4<4A4O4_4e4j4
0000000278D3 0000004298D3 0 5=5B5R5r5
0000000278F3 0000004298F3 0 73797M7S7g7u7
00000002790D 00000042990D 0 7A8_8g8
000000027923 000000429923 0 9!9'9?9_9h9o9u9|9
00000002793F 00000042993F 0 9K:X:
000000027947 000000429947 0 ;7;j;
000000027959 000000429959 0 >D>K>
000000027965 000000429965 0 ?#?*?@?
000000027978 000000429978 0 <0J0Q0
00000002799D 00000042999D 0 3,333<3B3J3R3[3w3
0000000279B1 0000004299B1 0 344B4N4\4k4s4y4
0000000279D9 0000004299D9 0 646I6{6
000000027A15 000000429A15 0 9!9%9)9-9195999=9A9E9I9M9l9u9
000000027A3F 000000429A3F 0 ;);U;
000000027A4D 000000429A4D 0 0)101"3
000000027A57 000000429A57 0 4S5e5
000000027A67 000000429A67 0 < <$<(<,<0<4<
000000027A8F 000000429A8F 0 >&>2>T>Z>
000000027A99 000000429A99 0 >f>l>z>
File pos Mem pos ID Text
======== ======= == ====
000000027ABD 000000429ABD 0 ?0?B?
000000027AE1 000000429AE1 0 0M0i0
000000027AF3 000000429AF3 0 0-1I1e1n1s1
000000027B09 000000429B09 0 2$2D2Y2y2
000000027B1B 000000429B1B 0 393a3y3
000000027B2D 000000429B2D 0 4!4<4U4
000000027B35 000000429B35 0 4g4p4y4
000000027B51 000000429B51 0 555:5m5
000000027B6D 000000429B6D 0 6%6*6U6Z6y6
000000027B7F 000000429B7F 0 717E7V7_7d7
000000027B95 000000429B95 0 8"858b8q8
000000027BB7 000000429BB7 0 9%9*9E9J9e9j9
000000027BD7 000000429BD7 0 :%:*:E:J:l:
000000027BE9 000000429BE9 0 ;);A;a;y;
000000027BF9 000000429BF9 0 <D<U<m<
000000027C4F 000000429C4F 0 2 2$2(2,2024282<2@2D2H2L2P2T2X2\2
000000027C71 000000429C71 0 2d2h2l2p2t2x2|2
000000027CC3 000000429CC3 0 3(3<3L3P3\3p3|3
000000027CEB 000000429CEB 0 4(44484D4L4T4h4t4
000000027D17 000000429D17 0 5$505L5T5\5h5
000000027D39 000000429D39 0 6$606L6T6
000000027D57 000000429D57 0 7,747@7\7d7x7
000000027D79 000000429D79 0 8 8(8<8L8x8
000000027D9F 000000429D9F 0 9$90989T9
000000027DC3 000000429DC3 0 : :<:D:L:
000000027DCD 000000429DCD 0 :l:p:t:x:
000000027DE7 000000429DE7 0 ;,;4;@;\;d;p;
000000027E0D 000000429E0D 0 <$<,<8<T<\<d<p<
000000027E35 000000429E35 0 =$=0=L=T=\=d=p=
000000027E59 000000429E59 0 >,><>P>d>p>
000000027E7B 000000429E7B 0 ?4?<?H?d?l?t?|?
000000027EAF 000000429EAF 0 0$0,040@0\0d0l0
000000027EDF 000000429EDF 0 1H1\1h1p1
000000027EF7 000000429EF7 0 2 2<2D2P2l2t2
000000027F13 000000429F13 0 3 3<3H3d3p3
000000027F2F 000000429F2F 0 4,4P4\4d4t4
000000027F49 000000429F49 0 505D5L5T5\5d5l5t5
000000027F6F 000000429F6F 0 6,646@6H6d6
000000027F8F 000000429F8F 0 7$7@7L7T7
000000027FB5 000000429FB5 0 8 8<8D8P8X8t8
000000027FD5 000000429FD5 0 909<9D9L9T9\9d9t9
000000027FF5 000000429FF5 0 :,:@:T:d:t:
000000028025 00000042A025 0 0 0$0(0H0
00000000F69C 00000040F69C 0 (null)