.- - -----÷M÷E÷N÷U÷------------------------------------------------------------- --- ---- -------------.
! WALL ! STATS ! GOODIES ! YARA ! FAQ ! RSS ! EMV !
`-------------- - --- ---------- -------- -------- -------- -------- ----------------- - ---- ---- --'
ATM MALWARE NOTICE
4b13c835e07ae4318d936e70451b49677c7063691749913c08efbea66959cf8c
Date...........: 2019-11-18
Family.........: HelloWorld
File name......: rtkdrv2.exe
File size......: 170.00 KB
Type file......: EXE/Windows
Virscan........: VT - HA
Additional note: Dropped from adf43c6957fd11e45ffa4f2a71eb0ef565da9c4a9bc9cd101d2ac485b5358c46,
executed by fead0633975c6c08f5509a7bd5c34d29bfdcacd3da47562efbf33121726f77b0
Entropy:
Binary Histogram:
=== PEDUMP REPORT ===
=== MZ Header ===
signature: "MZ"
bytes_in_last_block: 144 0x90
blocks_in_file: 3 3
num_relocs: 0 0
header_paragraphs: 4 4
min_extra_paragraphs: 0 0
max_extra_paragraphs: 65535 0xffff
ss: 0 0
sp: 184 0xb8
checksum: 0 0
ip: 0 0
cs: 0 0
reloc_table_offset: 64 0x40
overlay_number: 0 0
reserved0: 0 0
oem_id: 0 0
oem_info: 0 0
reserved2: 0 0
reserved3: 0 0
reserved4: 0 0
reserved5: 0 0
reserved6: 0 0
lfanew: 232 0xe8
=== DOS STUB ===
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno|
00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
=== RICH Header ===
LIB_ID VERSION TIMES_USED
199 c7 41118 a09e 1 1
225 e1 21005 520d 41 29
223 df 21005 520d 24 18
224 e0 21005 520d 172 ac
203 cb 65501 ffdd 11 b
1 1 0 0 134 86
228 e4 30501 7725 41 29
219 db 21005 520d 1 1
222 de 30501 7725 1 1
=== PE Header ===
signature: "PE\x00\x00"
# IMAGE_FILE_HEADER:
Machine: 332 0x14c x86
NumberOfSections: 5 5
TimeDateStamp: "2019-09-16 21:53:34"
PointerToSymbolTable: 0 0
NumberOfSymbols: 0 0
SizeOfOptionalHeader: 224 0xe0
Characteristics: 258 0x102 EXECUTABLE_IMAGE, 32BIT_MACHINE
# IMAGE_OPTIONAL_HEADER32:
Magic: 267 0x10b 32-bit executable
LinkerVersion: 12.0
SizeOfCode: 134656 0x20e00
SizeOfInitializedData: 46592 0xb600
SizeOfUninitializedData: 0 0
AddressOfEntryPoint: 64133 0xfa85
BaseOfCode: 4096 0x1000
BaseOfData: 139264 0x22000
ImageBase: 4194304 0x400000
SectionAlignment: 4096 0x1000
FileAlignment: 512 0x200
OperatingSystemVersion: 5.1
ImageVersion: 0.0
SubsystemVersion: 5.1
Reserved1: 0 0
SizeOfImage: 196608 0x30000
SizeOfHeaders: 1024 0x400
CheckSum: 0 0
Subsystem: 2 2 WINDOWS_GUI
DllCharacteristics: 33088 0x8140 DYNAMIC_BASE, NX_COMPAT
TERMINAL_SERVER_AWARE
SizeOfStackReserve: 1048576 0x100000
SizeOfStackCommit: 4096 0x1000
SizeOfHeapReserve: 1048576 0x100000
SizeOfHeapCommit: 4096 0x1000
LoaderFlags: 0 0
NumberOfRvaAndSizes: 16 0x10
=== DATA DIRECTORY ===
EXPORT rva:0x 0 size:0x 0
IMPORT rva:0x 2795c size:0x 78
RESOURCE rva:0x 2d000 size:0x 440
EXCEPTION rva:0x 0 size:0x 0
SECURITY rva:0x 0 size:0x 0
BASERELOC rva:0x 2e000 size:0x 1760
DEBUG rva:0x 0 size:0x 0
ARCHITECTURE rva:0x 0 size:0x 0
GLOBALPTR rva:0x 0 size:0x 0
TLS rva:0x 0 size:0x 0
LOAD_CONFIG rva:0x 27410 size:0x 40
Bound_IAT rva:0x 0 size:0x 0
IAT rva:0x 22000 size:0x 1ec
Delay_IAT rva:0x 0 size:0x 0
CLR_Header rva:0x 0 size:0x 0
rva:0x 0 size:0x 0
=== SECTIONS ===
NAME RVA VSZ RAW_SZ RAW_PTR nREL REL_PTR nLINE LINE_PTR FLAGS
.text 1000 20d80 20e00 400 0 0 0 0 60000020 R-X CODE
.rdata 22000 6326 6400 21200 0 0 0 0 40000040 R-- IDATA
.data 29000 32bc 1400 27600 0 0 0 0 c0000040 RW- IDATA
.rsrc 2d000 440 600 28a00 0 0 0 0 40000040 R-- IDATA
.reloc 2e000 1760 1800 29000 0 0 0 0 42000040 R-- IDATA DISCARDABLE
=== RESOURCES ===
FILE_OFFSET CP LANG SIZE TYPE NAME
0x28a60 0 0x409 991 MANIFEST #1
=== IMPORTS ===
MODULE_NAME HINT ORD FUNCTION_NAME
WS2_32.dll 15
WS2_32.dll 14
WS2_32.dll 6f
WS2_32.dll a
WS2_32.dll 4
WS2_32.dll 73
WS2_32.dll b
WS2_32.dll 2
WS2_32.dll 17
WS2_32.dll 3
WS2_32.dll 34
WS2_32.dll 13
WS2_32.dll c
WS2_32.dll 11
WS2_32.dll 12
WS2_32.dll f
WS2_32.dll 10
WS2_32.dll 97
WS2_32.dll 7
WS2_32.dll 59 WSAStringToAddressA
WS2_32.dll 8
WS2_32.dll 9
WS2_32.dll 39
DNSAPI.dll 56 DnsQueryConfig
NETAPI32.dll f6 NetUserGetLocalGroups
NETAPI32.dll ad NetQueryDisplayInformation
NETAPI32.dll 59 NetApiBufferFree
NETAPI32.dll e5 NetShareEnum
NETAPI32.dll d0 NetServerEnum
KERNEL32.dll 237 GetFileInformationByHandle
KERNEL32.dll 15c FileTimeToLocalFileTime
KERNEL32.dll 192 FlushFileBuffers
KERNEL32.dll 5de WriteConsoleW
KERNEL32.dll 520 SetStdHandle
KERNEL32.dll c2 CreateFileW
KERNEL32.dll 4ec SetEnvironmentVariableA
KERNEL32.dll 4fc SetFilePointerEx
KERNEL32.dll 2c5 GetStringTypeW
KERNEL32.dll 249 GetFullPathNameW
KERNEL32.dll 396 LCMapStringW
KERNEL32.dll 93 CompareStringW
KERNEL32.dll 3fa OutputDebugStringW
KERNEL32.dll 19d FreeEnvironmentStringsW
KERNEL32.dll 227 GetEnvironmentStringsW
KERNEL32.dll 42d QueryPerformanceCounter
KERNEL32.dll 262 GetModuleFileNameA
KERNEL32.dll 203 GetCurrentDirectoryW
KERNEL32.dll 23e GetFileType
KERNEL32.dll 15d FileTimeToSystemTime
KERNEL32.dll 55c SystemTimeToTzSpecificLocalTime
KERNEL32.dll 2d6 GetSystemTimeAsFileTime
KERNEL32.dll 2f2 GetTickCount
KERNEL32.dll 550 Sleep
KERNEL32.dll 29d GetProcAddress
KERNEL32.dll 3a5 LoadLibraryA
KERNEL32.dll 4ee SetErrorMode
KERNEL32.dll 263 GetModuleFileNameW
KERNEL32.dll 5df WriteFile
KERNEL32.dll d7 CreateProcessA
KERNEL32.dll 55f TerminateProcess
KERNEL32.dll d4 CreatePipe
KERNEL32.dll 7f CloseHandle
KERNEL32.dll 507 SetHandleInformation
KERNEL32.dll 44f ReadFile
KERNEL32.dll 3d1 MultiByteToWideChar
KERNEL32.dll 20a GetCurrentProcessId
KERNEL32.dll 55a SwitchToThread
KERNEL32.dll 403 PeekNamedPipe
KERNEL32.dll 2c0 GetStdHandle
KERNEL32.dll 250 GetLastError
KERNEL32.dll e8 CreateThread
KERNEL32.dll 199 FormatMessageA
KERNEL32.dll 4e9 SetEndOfFile
KERNEL32.dll 2f9 GetTimeZoneInformation
KERNEL32.dll 2a2 GetProcessHeap
KERNEL32.dll 125 EnterCriticalSection
KERNEL32.dll 121 EncodePointer
KERNEL32.dll fe DecodePointer
KERNEL32.dll 151 ExitProcess
KERNEL32.dll 266 GetModuleHandleExW
KERNEL32.dll 1b AreFileApisANSI
KERNEL32.dll 5cb WideCharToMultiByte
KERNEL32.dll 367 IsDebuggerPresent
KERNEL32.dll 36d IsProcessorFeaturePresent
KERNEL32.dll 3a2 LeaveCriticalSection
KERNEL32.dll 333 HeapFree
KERNEL32.dll 32f HeapAlloc
KERNEL32.dll 336 HeapReAlloc
KERNEL32.dll 1c8 GetCommandLineA
KERNEL32.dll 50a SetLastError
KERNEL32.dll 20e GetCurrentThreadId
KERNEL32.dll 105 DeleteCriticalSection
KERNEL32.dll 580 UnhandledExceptionFilter
KERNEL32.dll 541 SetUnhandledExceptionFilter
KERNEL32.dll 348 InitializeCriticalSectionAndSpinCount
KERNEL32.dll 209 GetCurrentProcess
KERNEL32.dll 571 TlsAlloc
KERNEL32.dll 573 TlsGetValue
KERNEL32.dll 574 TlsSetValue
KERNEL32.dll 572 TlsFree
KERNEL32.dll 2be GetStartupInfoW
KERNEL32.dll 267 GetModuleHandleW
KERNEL32.dll 3a7 LoadLibraryExW
KERNEL32.dll 372 IsValidCodePage
KERNEL32.dll 1a4 GetACP
KERNEL32.dll 286 GetOEMCP
KERNEL32.dll 1b3 GetCPInfo
KERNEL32.dll 338 HeapSize
KERNEL32.dll 4ac RtlUnwind
KERNEL32.dll 1ee GetConsoleMode
KERNEL32.dll 44d ReadConsoleW
KERNEL32.dll 1dc GetConsoleCP
KERNEL32.dll 168 FindClose
KERNEL32.dll 16e FindFirstFileExW
KERNEL32.dll 21f GetDriveTypeW
ADVAPI32.dll c0 CryptAcquireContextA
ADVAPI32.dll db CryptReleaseContext
ADVAPI32.dll d1 CryptGenRandom
=== Packer / Compiler ===
MS Visual C++ 6.0 - 8.0
File pos Mem pos ID Text
======== ======= == ====
00000000004D 00000040004D 0 !This program cannot be run in DOS mode.
0000000000D8 0000004000D8 0 Rich)
0000000001E0 0000004001E0 0 .text
000000000208 000000400208 0 .rdata
00000000022F 00000040022F 0 @.data
000000000258 000000400258 0 .rsrc
00000000027F 00000040027F 0 @.reloc
000000000487 000000401087 0 /WQQj
00000000058D 00000040118D 0 HtWHtHHt
0000000005C2 0000004011C2 0 Humj
000000000740 000000401340 0 u7VPh
0000000007ED 0000004013ED 0 tsHtJHt
0000000009D5 0000004015D5 0 9{,t3W
000000000CB0 0000004018B0 0 9_8t8
000000000ED3 000000401AD3 0 YY9s,t%
0000000012D4 000000401ED4 0 uEh,jB
0000000012E8 000000401EE8 0 Ph@jB
00000000131E 000000401F1E 0 uih,jB
000000001334 000000401F34 0 Sh@jB
000000001391 000000401F91 0 lhPjB
00000000145F 00000040205F 0 uHh,jB
000000001473 000000402073 0 Ph@jB
0000000014D6 0000004020D6 0 Ph@jB
000000001879 000000402479 0 Ph@kB
0000000018BD 0000004024BD 0 PhxkB
000000001D03 000000402903 0 Ph0lB
000000001D72 000000402972 0 PhhlB
000000001F01 000000402B01 0 @f;C.
000000001F89 000000402B89 0 Vf
000000002427 000000403027 0 PhhlB
000000002565 000000403165 0 Ph$mB
0000000025B3 0000004031B3 0 @f;C.
000000002667 000000403267 0 Sf
00000000281F 00000040341F 0 QQSVW
000000002A02 000000403602 0 YWSVh
000000002ACA 0000004036CA 0 HtmHtcHtWH
00000000321D 000000403E1D 0 QSVWQ
000000003605 000000404205 0 Ph pB
0000000036AF 0000004042AF 0 PhHpB
0000000036E2 0000004042E2 0 GWWhhpB
000000003723 000000404323 0 QSVWQj
000000003784 000000404384 0 QSVWQj
000000003D15 000000404915 0 t|Ht"-
000000003E8C 000000404A8C 0 Nt Nt
000000003EB0 000000404AB0 0 t?Ht2Ht%Ht
000000003F2A 000000404B2A 0 t<Ht!Ht
000000003F89 000000404B89 0 tdHtJHt9Ht
000000004007 000000404C07 0 FYY;u
000000004025 000000404C25 0 tPHt5Ht
0000000041CB 000000404DCB 0 lSVWj
00000000454C 00000040514C 0 QQSV3
0000000046A2 0000004052A2 0 \$ Pj
0000000046AD 0000004052AD 0 \$,PjeS
000000004979 000000405579 0 lSVWQ3
0000000049FD 0000004055FD 0 PSSSj
000000004A73 000000405673 0 VWQRj
000000004EC6 000000405AC6 0 Vh<rB
000000004EFB 000000405AFB 0 PhDrB
000000004FA4 000000405BA4 0 VRhTrB
000000005068 000000405C68 0 RPhprB
File pos Mem pos ID Text
======== ======= == ====
000000005070 000000405C70 0 D$LjdP
000000005199 000000405D99 0 HW9D$
000000005378 000000405F78 0 L$0@WV
000000005393 000000405F93 0 HW9D$
0000000055C7 0000004061C7 0 QQSVW
00000000584B 00000040644B 0 QQSV3
000000005925 000000406525 0 QQSVW
000000005D69 000000406969 0 u$jeS
000000006264 000000406E64 0 j@XQSP
000000006A96 000000407696 0 T$$Wj
000000006B0C 00000040770C 0 L$ j
00000000716E 000000407D6E 0 D$ ;D$0
000000007727 000000408327 0 YYNOu
0000000077C2 0000004083C2 0 WhDfB
0000000077E8 0000004083E8 0 WhDfB
000000007C46 000000408846 0 SVWPP
000000008316 000000408F16 0 QQSVW
0000000089D1 0000004095D1 0 QQSVW
000000008FA8 000000409BA8 0 expa3
000000008FBF 000000409BBF 0 te k_
0000000090F7 000000409CF7 0 3J(3B,3
0000000091E7 000000409DE7 0 1B 1J$1BH1JLC
0000000097FC 00000040A3FC 0 B 1A
000000009802 00000040A402 0 B$1A$
000000009808 00000040A408 0 B(1A(
00000000980E 00000040A40E 0 B,1A,
000000009814 00000040A414 0 B01A0
00000000981A 00000040A41A 0 B41A4
000000009820 00000040A420 0 B81A8
000000009826 00000040A426 0 B<1A<
00000000982C 00000040A42C 0 B@1A@
000000009832 00000040A432 0 BD1AD
000000009842 00000040A442 0 BH1AH
000000009848 00000040A448 0 BL1AL
00000000984E 00000040A44E 0 BP1AP
000000009854 00000040A454 0 BT1AT
00000000985A 00000040A45A 0 BX1AX
000000009860 00000040A460 0 B\1A\
00000000986C 00000040A46C 0 Bd1Ad
000000009878 00000040A478 0 Bh1Ah
00000000987E 00000040A47E 0 Bl1Al
000000009884 00000040A484 0 Bp1Ap
00000000988A 00000040A48A 0 Bt1At
000000009890 00000040A490 0 Bx1Ax
000000009896 00000040A496 0 B|1A|
000000009A3E 00000040A63E 0 QQSVW
000000009CBD 00000040A8BD 0 SVWQQR
00000000A98B 00000040B58B 0 QQSV3
00000000A9B8 00000040B5B8 0 PVSSSj
00000000A9DF 00000040B5DF 0 PVSSSj
00000000AA1E 00000040B61E 0 PhdsB
00000000AA5B 00000040B65B 0 QQSVWj
00000000AACB 00000040B6CB 0 tEHtBHt5Ht
00000000ADF5 00000040B9F5 0 t;9X(t
00000000B108 00000040BD08 0 H$9H,
00000000B2F3 00000040BEF3 0 WQPSV
00000000B980 00000040C580 0 QWPWh
00000000BAC9 00000040C6C9 0 QQSVWQ
00000000BFD7 00000040CBD7 0 QQSVWj
00000000C3F1 00000040CFF1 0 Ph0"B
File pos Mem pos ID Text
======== ======= == ====
00000000C683 00000040D283 0 YYh("B
00000000F165 00000040FD65 0 PPPPP
00000000F452 000000410052 0 t/HHt
00000000F69E 00000041029E 0 HHtVHHt
00000000FB95 000000410795 0 >0t-N
000000010241 000000410E41 0 ~pjCXf
000000010B15 000000411715 0 SSSSS
000000010E55 000000411A55 0 j$hpvB
0000000118FB 0000004124FB 0 5ntel
00000001190B 00000041250B 0 5Genu
000000011D8D 00000041298D 0 bWWWWj
000000011EE1 000000412AE1 0 PRPQh
000000012149 000000412D49 0 tRHtC
0000000121CD 000000412DCD 0 t;Ht+
000000012250 000000412E50 0 Vh\0B
00000001235F 000000412F5F 0 URPQQh
00000001265A 00000041325A 0 t/HHt
00000001269D 00000041329D 0 j*Xf;
0000000126FB 0000004132FB 0 j*Xf;
000000012752 000000413352 0 htHjlZ;
000000012895 000000413495 0 HHtXHHt
000000012AD2 0000004136D2 0 nt'joZ;
000000012B72 000000413772 0 jgXf;
000000012C49 000000413849 0 YYjgXf9
000000012DFF 0000004139FF 0 >0t<NAj0X
000000012EE0 000000413AE0 0 Wj0XP
000000012FEC 000000413BEC 0 Wj XP
0000000131A6 000000413DA6 0 <at-<rt"<wt
000000013216 000000413E16 0 tRHtC
00000001329A 000000413E9A 0 t;Ht+
0000000151F0 000000415DF0 0 j/_j\[f;
000000015431 000000416031 0 @WPPh
000000015757 000000416357 0 jdhxwB
000000015770 000000416370 0 j@j _W
000000015830 000000416430 0 } j@W
000000015BAA 0000004167AA 0 Vh~oA
0000000160C8 000000416CC8 0 PWWWWV
000000016163 000000416D63 0 PSSSSV
00000001628B 000000416E8B 0 v N+D$
000000016567 000000417167 0 t/HHt
0000000167B3 0000004173B3 0 HHtVHHt
000000016CAA 0000004178AA 0 >0t-N
0000000171AF 000000417DAF 0 PP9E u
0000000175D0 0000004181D0 0 < t8< t4
0000000176AA 0000004182AA 0 t@VSP
000000017705 000000418305 0 PPPPP
000000017824 000000418424 0 SPPP+
00000001782D 00000041842D 0 FVWPP
000000017853 000000418453 0 SVWPP
000000017A01 000000418601 0 QVWSj
000000017C5F 00000041885F 0 VhH;B
000000017C80 000000418880 0 VVhH;B
00000001800E 000000418C0E 0 jA[jZZ+
000000018381 000000418F81 0 t\j=S
0000000183CC 000000418FCC 0 t&9=8
000000018591 000000419191 0 PPPPP
0000000186DC 0000004192DC 0 PRPQh
000000018949 000000419549 0 t7QVW
000000018A10 000000419610 0 tWh@\B
000000018BC2 0000004197C2 0 tHHt*Ht#
File pos Mem pos ID Text
======== ======= == ====
0000000190E4 000000419CE4 0 uJSSR
00000001929C 000000419E9C 0 SSSSS
00000001933F 000000419F3F 0 SVjA[jZ
000000019408 00000041A008 0 jAZjZ
0000000194B3 00000041A0B3 0 SVWUj
000000019554 00000041A154 0 ;t$,v-
0000000195D9 00000041A1D9 0 UQPXY]Y[
0000000197E3 00000041A3E3 0 ~';_t|%3
0000000197F7 00000041A3F7 0 wtVj
00000001980C 00000041A40C 0 ;_tr.
00000001982D 00000041A42D 0 GWVj
000000019BD0 00000041A7D0 0 r)f;q
000000019C4A 00000041A84A 0 r2f;A
00000001A808 00000041B408 0 @jd_u
00000001A979 00000041B579 0 PPPPP
00000001A9A3 00000041B5A3 0 uaPPPS
00000001ABAB 00000041B7AB 0 tGhL\B
00000001ABBC 00000041B7BC 0 t3hX\B
00000001ABCD 00000041B7CD 0 t"hd\B
00000001BE5C 00000041CA5C 0 +t"HHt
00000001BEB2 00000041CAB2 0 9] t"
00000001DBE4 00000041E7E4 0 ,SVWj0X
00000001DD18 00000041E918 0 u'j0X
00000001DE42 00000041EA42 0 Wj0XPV
00000001DEE1 00000041EAE1 0 PjdSQ
00000001E04A 00000041EC4A 0 -jd[;
00000001E09F 00000041EC9F 0 WWWWW
00000001E5F2 00000041F1F2 0 VVVVV
00000001E741 00000041F341 0 PPPPP
00000001EFBB 00000041FBBB 0 SSPQSW
00000001F0EF 00000041FCEF 0 SSSSS
00000001F0FA 00000041FCFA 0 j0h yB
00000001F204 00000041FE04 0 SSSSS
00000001F394 00000041FF94 0 ?:uBGW
00000001F56D 00000042016D 0 } kE$<
00000001F6A2 0000004202A2 0 C@j:f
00000001F839 000000420439 0 SVWjA_jZ+
00000001F8E1 0000004204E1 0 uBjAYjZ+
000000020002 000000420C02 0 PPPPP
0000000200B6 000000420CB6 0 v N+D$
000000020CB1 0000004218B1 0 SSSSS
000000021448 000000422248 0 CorExitProcess
000000021460 000000422260 0 (null)
000000021499 000000422299 0 ( 8PX
0000000214A1 0000004222A1 0 700WP
0000000214B9 0000004222B9 0 xpxxxx
0000000214F0 0000004222F0 0 FlsAlloc
0000000214FC 0000004222FC 0 FlsFree
000000021504 000000422304 0 FlsGetValue
000000021510 000000422310 0 FlsSetValue
00000002151C 00000042231C 0 InitializeCriticalSectionEx
000000021538 000000422338 0 CreateEventExW
000000021548 000000422348 0 CreateSemaphoreExW
00000002155C 00000042235C 0 SetThreadStackGuarantee
000000021574 000000422374 0 CreateThreadpoolTimer
00000002158C 00000042238C 0 SetThreadpoolTimer
0000000215A0 0000004223A0 0 WaitForThreadpoolTimerCallbacks
0000000215C0 0000004223C0 0 CloseThreadpoolTimer
0000000215D8 0000004223D8 0 CreateThreadpoolWait
0000000215F0 0000004223F0 0 SetThreadpoolWait
File pos Mem pos ID Text
======== ======= == ====
000000021604 000000422404 0 CloseThreadpoolWait
000000021618 000000422418 0 FlushProcessWriteBuffers
000000021634 000000422434 0 FreeLibraryWhenCallbackReturns
000000021654 000000422454 0 GetCurrentProcessorNumber
000000021670 000000422470 0 GetLogicalProcessorInformation
000000021690 000000422490 0 CreateSymbolicLinkW
0000000216A4 0000004224A4 0 SetDefaultDllDirectories
0000000216C0 0000004224C0 0 EnumSystemLocalesEx
0000000216D4 0000004224D4 0 CompareStringEx
0000000216E4 0000004224E4 0 GetDateFormatEx
0000000216F4 0000004224F4 0 GetLocaleInfoEx
000000021704 000000422504 0 GetTimeFormatEx
000000021714 000000422514 0 GetUserDefaultLocaleName
000000021730 000000422530 0 IsValidLocaleName
000000021744 000000422544 0 LCMapStringEx
000000021754 000000422554 0 GetCurrentPackageId
000000021768 000000422568 0 GetTickCount64
000000021778 000000422578 0 GetFileInformationByHandleExW
000000021798 000000422598 0 SetFileInformationByHandleW
000000022298 000000423098 0 UTF-8
0000000222A0 0000004230A0 0 UTF-16LE
0000000222AC 0000004230AC 0 UNICODE
000000022378 000000423178 0 No error
000000022384 000000423184 0 Operation not permitted
00000002239C 00000042319C 0 No such file or directory
0000000223B8 0000004231B8 0 No such process
0000000223C8 0000004231C8 0 Interrupted function call
0000000223E4 0000004231E4 0 Input/output error
0000000223F8 0000004231F8 0 No such device or address
000000022414 000000423214 0 Arg list too long
000000022428 000000423228 0 Exec format error
00000002243C 00000042323C 0 Bad file descriptor
000000022450 000000423250 0 No child processes
000000022464 000000423264 0 Resource temporarily unavailable
000000022488 000000423288 0 Not enough space
00000002249C 00000042329C 0 Permission denied
0000000224B0 0000004232B0 0 Bad address
0000000224BC 0000004232BC 0 Unknown error
0000000224CC 0000004232CC 0 Resource device
0000000224DC 0000004232DC 0 File exists
0000000224E8 0000004232E8 0 Improper link
0000000224F8 0000004232F8 0 No such device
000000022508 000000423308 0 Not a directory
000000022518 000000423318 0 Is a directory
000000022528 000000423328 0 Invalid argument
00000002253C 00000042333C 0 Too many open files in system
00000002255C 00000042335C 0 Too many open files
000000022570 000000423370 0 Inappropriate I/O control operation
000000022594 000000423394 0 File too large
0000000225A4 0000004233A4 0 No space left on device
0000000225BC 0000004233BC 0 Invalid seek
0000000225CC 0000004233CC 0 Read-only file system
0000000225E4 0000004233E4 0 Too many links
0000000225F4 0000004233F4 0 Broken pipe
000000022600 000000423400 0 Domain error
000000022610 000000423410 0 Result too large
000000022624 000000423424 0 Resource deadlock avoided
000000022640 000000423440 0 Filename too long
000000022654 000000423454 0 No locks available
000000022668 000000423468 0 Function not implemented
File pos Mem pos ID Text
======== ======= == ====
000000022684 000000423484 0 Directory not empty
000000022698 000000423498 0 Illegal byte sequence
0000000226CC 0000004234CC 0 Sunday
0000000226D4 0000004234D4 0 Monday
0000000226DC 0000004234DC 0 Tuesday
0000000226E4 0000004234E4 0 Wednesday
0000000226F0 0000004234F0 0 Thursday
0000000226FC 0000004234FC 0 Friday
000000022704 000000423504 0 Saturday
000000022740 000000423540 0 January
000000022748 000000423548 0 February
000000022754 000000423554 0 March
00000002275C 00000042355C 0 April
000000022774 000000423574 0 August
00000002277C 00000042357C 0 September
000000022788 000000423588 0 October
000000022790 000000423590 0 November
00000002279C 00000042359C 0 December
0000000227B0 0000004235B0 0 MM/dd/yy
0000000227BC 0000004235BC 0 dddd, MMMM dd, yyyy
0000000227D0 0000004235D0 0 HH:mm:ss
000000022A2F 00000042382F 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]
000000022A70 000000423870 0 abcdefghijklmnopqrstuvwxyz{|}~
000000022C6D 000000423A6D 0 ('8PW
000000022C76 000000423A76 0 700PP
000000022C91 000000423A91 0 xppwpp
000000022D60 000000423B60 0 MessageBoxW
000000022D6C 000000423B6C 0 GetActiveWindow
000000022D7C 000000423B7C 0 GetLastActivePopup
000000022D90 000000423B90 0 GetUserObjectInformationW
000000022DAC 000000423BAC 0 GetProcessWindowStation
000000024E40 000000425C40 0 CreateFile2
000000025428 000000426228 0 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]
000000025469 000000426269 0 abcdefghijklmnopqrstuvwxyz{|}~
0000000255A8 0000004263A8 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]
0000000255E9 0000004263E9 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
000000025690 000000426490 0 e+000
0000000256A8 0000004264A8 0 SunMonTueWedThuFriSat
0000000256C0 0000004264C0 0 JanFebMarAprMayJunJulAugSepOctNovDec
0000000256EC 0000004264EC 0 1#SNAN
0000000256F4 0000004264F4 0 1#IND
0000000256FC 0000004264FC 0 1#INF
000000025704 000000426504 0 1#QNAN
00000002571C 00000042651C 0
000000025768 000000426568 0 {[siIbfFOon
00000002588D 00000042668D 0 idF(s
000000025AA4 0000004268A4 0 =*\\E)
000000025B12 000000426912 0 DPV2A
000000025C10 000000426A10 0 Stream closed
000000025C2C 000000426A2C 0 Getting billcount.
000000025C40 000000426A40 0 maxbill = %d
000000025C50 000000426A50 0 GettingCDMStatus.
000000025C64 000000426A64 0 Getting CashUnitStatus.
000000025C7C 000000426A7C 0 User left, cleaning up.
000000025C94 000000426A94 0 Error locking XFS
000000025CA8 000000426AA8 0 Resetting CDM.
000000025CB8 000000426AB8 0 %d:[%d]
000000025CC8 000000426AC8 0 Error dispensing 0x%08X
000000025CE0 000000426AE0 0 No denominations found
000000025CF8 000000426AF8 0 No msxfs installed...
File pos Mem pos ID Text
======== ======= == ====
000000025D10 000000426B10 0 Starting WFSManager...
000000025D28 000000426B28 0 Connecting...
000000025D38 000000426B38 0 shoah
000000025D40 000000426B40 0 Connected. Version: wfs:%d.%d, srvc:%d.%d, spi:%d.%d
000000025D78 000000426B78 0 Unknown version %d
000000025D8C 000000426B8C 0 Disconnecting...
000000025DA0 000000426BA0 0 Error connecting: %p
000000025DB8 000000426BB8 0 Error starting WFS: %p
000000025DD0 000000426BD0 0 Error getting maxbill: %p
000000025DEC 000000426BEC 0 chosen %d | %d
000000025DFC 000000426BFC 0 state=%d, safedoor=%d, dispenser=%d, stacker=%d
000000025E30 000000426C30 0 pos=%d, OutputPosition=%d, shutter=%d, transport=%d
000000025E68 000000426C68 0 Error getting cdm status: 0x%p.
000000025E88 000000426C88 0 Id:%s(nr=%d)(l=%d,h=%d), %d|%d|%d of %d [%s][%d][%d],[%d][%d]
000000025EC8 000000426CC8 0 Error getting bill status: 0x%p.
000000025EEC 000000426CEC 0 pos=%d, status=%d, shutter=%d, transport=%d, status=%d
000000025F24 000000426D24 0 Id:%s(nr=%d)(l=%d,h=%d), %d|%d|%d of %d [%s][%d][%d],[%d]
000000025F60 000000426D60 0 msxfs.dll
000000025F6C 000000426D6C 0 WFSExecute
000000025F78 000000426D78 0 WFSGetInfo
000000025F84 000000426D84 0 WFSOpen
000000025F8C 000000426D8C 0 WFSClose
000000025F98 000000426D98 0 WFSFreeResult
000000025FA8 000000426DA8 0 WFSStartUp
000000025FB4 000000426DB4 0 WFSCleanUp
000000025FC0 000000426DC0 0 WFSLock
000000025FC8 000000426DC8 0 WFSUnlock
000000025FD4 000000426DD4 0 Trying Nautilus.
000000025FE8 000000426DE8 0 CashDispenser
000000025FF8 000000426DF8 0 Connected Nautilus.
00000002600C 000000426E0C 0 Failed: 0x%08X
00000002601C 000000426E1C 0 Trying Nautilus2.
000000026030 000000426E30 0 NXCdm
000000026038 000000426E38 0 Connected Nautilus2.
000000026050 000000426E50 0 Trying Diabold.
000000026060 000000426E60 0 DBD_AdvFuncDisp
000000026070 000000426E70 0 Connected Diabold.
000000026084 000000426E84 0 Trying NCR.
000000026090 000000426E90 0 CurrencyDispenser1
0000000260A4 000000426EA4 0 Connected NCR.
0000000260B4 000000426EB4 0 Trying WINCOR.
0000000260C4 000000426EC4 0 CDM30
0000000260CC 000000426ECC 0 Connected WINCOR.
0000000260E0 000000426EE0 0 Trying WINCOR GEN.
0000000260F8 000000426EF8 0 Connected WINCOR GEN.
000000026110 000000426F10 0 Trying GENERIC.
000000026124 000000426F24 0 Connected GENERIC.
000000026138 000000426F38 0 console
000000026140 000000426F40 0 command
000000026158 000000426F58 0 0.0.0.0
000000026160 000000426F60 0 CNAME
00000002616C 000000426F6C 0 domain
00000002618C 000000426F8C 0 server
000000026194 000000426F94 0 domain=losharik.com
0000000261AC 000000426FAC 0 cmd.exe
0000000261B4 000000426FB4 0 Error opening file for reading
0000000261D8 000000426FD8 0 There was an error reading the file
000000026200 000000427000 0 Error opening file for writing
00000002626C 00000042706C 0 Server closed the connection
00000002628C 00000042708C 0 Connection error
File pos Mem pos ID Text
======== ======= == ====
0000000262A0 0000004270A0 0 The client couldn't connect to the remote host!
0000000262D0 0000004270D0 0 Not implemented yet!
0000000262E8 0000004270E8 0 %I64u
0000000262F0 0000004270F0 0 shi1_netname
000000026300 000000427100 0 shi1_type
00000002630C 00000042710C 0 shi1_remark
000000026320 000000427120 0 sv101_platform_id
000000026334 000000427134 0 sv101_name
000000026340 000000427140 0 sv101_version_major
000000026360 000000427160 0 sv101_version_minor
000000026374 000000427174 0 sv101_type
000000026380 000000427180 0 sv101_comment
000000026390 000000427190 0 share_array
0000000263A4 0000004271A4 0 lgrui0_name
0000000263B0 0000004271B0 0 group_array
0000000263BC 0000004271BC 0 systeminfo
0000000263C8 0000004271C8 0 fsutil fsinfo drives
0000000263E0 0000004271E0 0 drives
0000000263E8 0000004271E8 0 arp -a
0000000263F0 0000004271F0 0 arpcache
000000026400 000000427200 0 users
000000026408 000000427208 0 <INFO_END>
00000002643C 00000042723C 0 \u%04X
000000026444 000000427244 0 \u%04X\u%04X
000000026468 000000427268 0 false
000000026470 000000427270 0 %I64d
000000026494 000000427294 0 ..\jansson\memory_jansson.c
0000000264B0 0000004272B0 0 object
0000000264B8 0000004272B8 0 array
0000000264C0 0000004272C0 0 string
0000000264C8 0000004272C8 0 integer
0000000264D8 0000004272D8 0 Out of memory
0000000264F4 0000004272F4 0 Overflow.
000000026500 000000427300 0 client_write_key
000000026514 000000427314 0 client_mac_key
000000026524 000000427324 0 server_write_key
000000026538 000000427338 0 server_mac_key
000000026548 000000427348 0 client
000000026550 000000427350 0 NOT IMPLEMENTED!
000000026564 000000427364 0 %d.%d.%d.%d
000000026570 000000427370 0 We forgot to handle a linked-list type!
0000000265A4 0000004273A4 0 WARNING
0000000265AC 0000004273AC 0 ERROR
0000000265B4 0000004273B4 0 FATAL
0000000265BE 0000004273BE 0 Unrecoverable error at %s:%d: %s
0000000265E4 0000004273E4 0 dnscat
0000000265F0 0000004273F0 0 TXT, CNAME, MX, A
000000026DC2 000000427BC2 0 WSAStringToAddressA
000000026DD6 000000427BD6 0 WS2_32.dll
000000026DE4 000000427BE4 0 DnsQueryConfig
000000026DF4 000000427BF4 0 DNSAPI.dll
000000026E02 000000427C02 0 NetServerEnum
000000026E12 000000427C12 0 NetShareEnum
000000026E22 000000427C22 0 NetApiBufferFree
000000026E36 000000427C36 0 NetQueryDisplayInformation
000000026E54 000000427C54 0 NetUserGetLocalGroups
000000026E6A 000000427C6A 0 NETAPI32.dll
000000026E7A 000000427C7A 0 GetSystemTimeAsFileTime
000000026E94 000000427C94 0 GetTickCount
000000026EA4 000000427CA4 0 Sleep
File pos Mem pos ID Text
======== ======= == ====
000000026EAC 000000427CAC 0 GetProcAddress
000000026EBE 000000427CBE 0 LoadLibraryA
000000026ECE 000000427CCE 0 SetErrorMode
000000026EDE 000000427CDE 0 GetModuleFileNameW
000000026EF4 000000427CF4 0 WriteFile
000000026F00 000000427D00 0 CreateProcessA
000000026F12 000000427D12 0 TerminateProcess
000000026F26 000000427D26 0 CreatePipe
000000026F34 000000427D34 0 CloseHandle
000000026F42 000000427D42 0 SetHandleInformation
000000026F5A 000000427D5A 0 ReadFile
000000026F66 000000427D66 0 MultiByteToWideChar
000000026F7C 000000427D7C 0 GetCurrentProcessId
000000026F92 000000427D92 0 SwitchToThread
000000026FA4 000000427DA4 0 PeekNamedPipe
000000026FB4 000000427DB4 0 GetStdHandle
000000026FC4 000000427DC4 0 GetLastError
000000026FD4 000000427DD4 0 CreateThread
000000026FE4 000000427DE4 0 FormatMessageA
000000026FF4 000000427DF4 0 KERNEL32.dll
000000027004 000000427E04 0 CryptReleaseContext
00000002701A 000000427E1A 0 CryptAcquireContextA
000000027032 000000427E32 0 CryptGenRandom
000000027042 000000427E42 0 ADVAPI32.dll
000000027052 000000427E52 0 EncodePointer
000000027062 000000427E62 0 DecodePointer
000000027072 000000427E72 0 ExitProcess
000000027080 000000427E80 0 GetModuleHandleExW
000000027096 000000427E96 0 AreFileApisANSI
0000000270A8 000000427EA8 0 WideCharToMultiByte
0000000270BE 000000427EBE 0 IsDebuggerPresent
0000000270D2 000000427ED2 0 IsProcessorFeaturePresent
0000000270EE 000000427EEE 0 EnterCriticalSection
000000027106 000000427F06 0 LeaveCriticalSection
00000002711E 000000427F1E 0 HeapFree
00000002712A 000000427F2A 0 HeapAlloc
000000027136 000000427F36 0 HeapReAlloc
000000027144 000000427F44 0 GetCommandLineA
000000027156 000000427F56 0 SetLastError
000000027166 000000427F66 0 GetCurrentThreadId
00000002717C 000000427F7C 0 DeleteCriticalSection
000000027194 000000427F94 0 UnhandledExceptionFilter
0000000271B0 000000427FB0 0 SetUnhandledExceptionFilter
0000000271CE 000000427FCE 0 InitializeCriticalSectionAndSpinCount
0000000271F6 000000427FF6 0 GetCurrentProcess
00000002720A 00000042800A 0 TlsAlloc
000000027216 000000428016 0 TlsGetValue
000000027224 000000428024 0 TlsSetValue
000000027232 000000428032 0 TlsFree
00000002723C 00000042803C 0 GetStartupInfoW
00000002724E 00000042804E 0 GetModuleHandleW
000000027262 000000428062 0 LoadLibraryExW
000000027274 000000428074 0 IsValidCodePage
000000027286 000000428086 0 GetACP
000000027290 000000428090 0 GetOEMCP
00000002729C 00000042809C 0 GetCPInfo
0000000272A8 0000004280A8 0 HeapSize
0000000272B4 0000004280B4 0 RtlUnwind
0000000272C0 0000004280C0 0 GetConsoleMode
0000000272D2 0000004280D2 0 ReadConsoleW
File pos Mem pos ID Text
======== ======= == ====
0000000272E2 0000004280E2 0 GetConsoleCP
0000000272F2 0000004280F2 0 FindClose
0000000272FE 0000004280FE 0 FindFirstFileExW
000000027312 000000428112 0 GetDriveTypeW
000000027322 000000428122 0 SystemTimeToTzSpecificLocalTime
000000027344 000000428144 0 FileTimeToSystemTime
00000002735C 00000042815C 0 GetFileType
00000002736A 00000042816A 0 GetProcessHeap
00000002737C 00000042817C 0 GetModuleFileNameA
000000027392 000000428192 0 QueryPerformanceCounter
0000000273AC 0000004281AC 0 GetEnvironmentStringsW
0000000273C6 0000004281C6 0 FreeEnvironmentStringsW
0000000273E0 0000004281E0 0 OutputDebugStringW
0000000273F6 0000004281F6 0 CompareStringW
000000027408 000000428208 0 LCMapStringW
000000027418 000000428218 0 GetStringTypeW
00000002742A 00000042822A 0 SetFilePointerEx
00000002743E 00000042823E 0 SetEnvironmentVariableA
000000027458 000000428258 0 CreateFileW
000000027466 000000428266 0 SetStdHandle
000000027476 000000428276 0 WriteConsoleW
000000027486 000000428286 0 FlushFileBuffers
00000002749A 00000042829A 0 FileTimeToLocalFileTime
0000000274B4 0000004282B4 0 GetFileInformationByHandle
0000000274D2 0000004282D2 0 GetFullPathNameW
0000000274E6 0000004282E6 0 GetCurrentDirectoryW
0000000274FE 0000004282FE 0 SetEndOfFile
00000002750E 00000042830E 0 GetTimeZoneInformation
000000027BDA 0000004295DA 0
000000027CC1 0000004296C1 0 abcdefghijklmnopqrstuvwxyz
000000027CE1 0000004296E1 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ
000000027DFA 0000004297FA 0
000000027EDA 0000004298DA 0 abcdefghijklmnopqrstuvwxyz
000000027EFA 0000004298FA 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ
0000000287F6 00000042A1F6 0 z?aUY
000000028838 00000042A238 0 zc%C1
00000002888B 00000042A28B 0 -64OS
000000028A63 00000042D063 0 <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
000000028A9C 00000042D09C 0 <assembly manifestVersion="1.0" xmlns="urn:schemas-microsoft-com:asm.v1" xmlns:asmv3="urn:schemas-microsoft-com:asm.v3"><assemblyIdentity type="win32" name="consoletest" version="1.0.0.0"></assemblyIdentity><description> my exe </description><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS></application></compatibility></assembly>
00000002900B 00000042E00B 0 0(0/050A0[0
00000002901D 00000042E01D 0 1'1P2
000000029027 00000042E027 0 3:3E3Y3t3{3
00000002904D 00000042E04D 0 ;#;0;C;J;Q;
00000002905B 00000042E05B 0 <3<I<
000000029063 00000042E063 0 <F=K=X=
00000002906D 00000042E06D 0 =<>G>h>|>
000000029085 00000042E085 0 ?!?6?C?
0000000290A1 00000042E0A1 0 0L0Y0b0u0
0000000290BF 00000042E0BF 0 2!232
0000000290C7 00000042E0C7 0 3M3d3
0000000290ED 00000042E0ED 0 565O5W5
000000029109 00000042E109 0 9l9t9
000000029113 00000042E113 0 :E;M;o;
000000029140 00000042E140 0 !0)0R0
00000002914D 00000042E14D 0 1>2M2
000000029159 00000042E159 0 3 3%34393A3G3L3S3Y3
00000002916D 00000042E16D 0 3e3k3p3w3}3
0000000291A1 00000042E1A1 0 4&4+4J4T4s4z4
0000000291C7 00000042E1C7 0 565=5C5Q5[5w5~5
0000000291ED 00000042E1ED 0 6 6/6H6V6]6d6k6r6{6
File pos Mem pos ID Text
======== ======= == ====
000000029205 00000042E205 0 6?7X7]7r7
000000029215 00000042E215 0 7&83898C8Q8b8
000000029241 00000042E241 0 9):6:A:O:o:
00000002924D 00000042E24D 0 :I<M<Q<U<Y<]<a<e<i<m<q<
000000029288 00000042E288 0 &0*0.02060:0>0B0F0J0N0Y0
0000000292A9 00000042E2A9 0 1I1h1
0000000292CD 00000042E2CD 0 3<4V4d4
0000000292DB 00000042E2DB 0 5 52585
0000000292FF 00000042E2FF 0 8.9}9
000000029317 00000042E317 0 : :s:[;
000000029327 00000042E327 0 =/=<=u=
00000002933B 00000042E33B 0 ?<?U?
000000029351 00000042E351 0 2'292G2s2
000000029363 00000042E363 0 3,3;3e3
00000002936F 00000042E36F 0 3%4L4p4
000000029389 00000042E389 0 6e7r7y7
000000029399 00000042E399 0 7,8z8
0000000293A7 00000042E3A7 0 9@9S9o9
0000000293BF 00000042E3BF 0 ;%;S;
0000000293C9 00000042E3C9 0 ;:<B<Q<[<k<
0000000293DD 00000042E3DD 0 >G>|>
00000002941F 00000042E41F 0 3Y657
000000029437 00000042E437 0 8;9*;#>R>
00000002945F 00000042E45F 0 4P5d5
00000002946F 00000042E46F 0 6'6K6
000000029475 00000042E475 0 7E8f9M:
0000000294A1 00000042E4A1 0 4=5c5v5
0000000294B1 00000042E4B1 0 5!686H6c6w6
0000000294F7 00000042E4F7 0 1b3X6
000000029521 00000042E521 0 8,8m8
00000002952F 00000042E52F 0 :/;1<V<
000000029553 00000042E553 0 5 6B6c6"7
000000029561 00000042E561 0 8#8(8r8
000000029579 00000042E579 0 ;:<r<
000000029595 00000042E595 0 1'1r1
0000000295AB 00000042E5AB 0 3!484r4
0000000295BB 00000042E5BB 0 4 5>5
0000000295C1 00000042E5C1 0 5h5p5
0000000295D5 00000042E5D5 0 7*8_9
0000000295EB 00000042E5EB 0 <0<J<g<{<
0000000295F7 00000042E5F7 0 =K=R=g=
000000029609 00000042E609 0 >(>6>E>P>[>m?
00000002962F 00000042E62F 0 0/0s0{0
000000029657 00000042E657 0 2!272A2G2R2u2z2
000000029671 00000042E671 0 3B3H3N3T3Z3
00000002967D 00000042E67D 0 3g3n3u3|3
0000000296A5 00000042E6A5 0 4I4O4U4[4a4g4n4u4|4
0000000296DD 00000042E6DD 0 7C8J8R8
000000029711 00000042E711 0 3m3t3
00000002971B 00000042E71B 0 4!4.4=4G4Y4h4o4
00000002973B 00000042E73B 0 5%5I5v5
000000029779 00000042E779 0 0%0,0004080<0@0D0H0
000000029799 00000042E799 0 10171<1@1D1e1
0000000297B9 00000042E7B9 0 1.24282<2@2
0000000297CD 00000042E7CD 0 4-4<4
0000000297DD 00000042E7DD 0 5\92:=:]:h:
0000000297F5 00000042E7F5 0 :1;6;@;
000000029803 00000042E803 0 <2===C=
00000002980D 00000042E80D 0 >4>S>
000000029813 00000042E813 0 >*?1?W?
File pos Mem pos ID Text
======== ======= == ====
000000029829 00000042E829 0 0X3E4
000000029861 00000042E861 0 =L=T=
00000002986F 00000042E86F 0 >#>2>W>
00000002987D 00000042E87D 0 ?1?J?[?i?n?
0000000298A3 00000042E8A3 0 0%010<0c0
0000000298B9 00000042E8B9 0 1)1/1?1G1M1\1f1l1{1
0000000298DF 00000042E8DF 0 2$272=2C2J2S2X2
0000000298EF 00000042E8EF 0 2f2k2q2y2~2
00000002992B 00000042E92B 0 3$3)3/373<3B3J3O3U3]3b3g3p3u3{3
00000002997B 00000042E97B 0 4 4&4.43494A4F4L4T4Y4_4g4l4r4z4
0000000299B9 00000042E9B9 0 5!5J5]5m5
0000000299D1 00000042E9D1 0 6 616=6D6K6f6p6
0000000299E5 00000042E9E5 0 7v7{7
0000000299FB 00000042E9FB 0 9&9_9t9
000000029A15 00000042EA15 0 :&:.:4:@:E:J:O:X:
000000029A41 00000042EA41 0 <Q<Y<j<
000000029A8F 00000042EA8F 0 181c1
000000029AA1 00000042EAA1 0 3I3@4G4
000000029AB1 00000042EAB1 0 5g5p5x5
000000029AC7 00000042EAC7 0 6B8U8
000000029ADF 00000042EADF 0 ;(<:<N<[<
000000029AF3 00000042EAF3 0 >$?e?q?
000000029B15 00000042EB15 0 8=8C8e8k8
000000029B33 00000042EB33 0 ?H?g?
000000029B63 00000042EB63 0 5+5N5b5
000000029B7F 00000042EB7F 0 647{7
000000029B8D 00000042EB8D 0 7;8X8
000000029BA5 00000042EBA5 0 :#;K;Y;
000000029BAD 00000042EBAD 0 =#=<=C=K=P=T=X=
000000029BD1 00000042EBD1 0 =2>8><>@>D>
000000029BEB 00000042EBEB 0 ?/?a?h?l?p?t?x?|?
000000029C1F 00000042EC1F 0 253s3|3
000000029C2F 00000042EC2F 0 5g5p5M6X6k6
000000029C3B 00000042EC3B 0 6A7J7V8_8K9
000000029C4B 00000042EC4B 0 9 :W:N;t;
000000029C59 00000042EC59 0 ;2<i<
000000029C63 00000042EC63 0 =\=f=
000000029C8B 00000042EC8B 0 3"3,3?3Z3
000000029C9D 00000042EC9D 0 3,4K4
000000029CAB 00000042ECAB 0 4B5z5
000000029CB5 00000042ECB5 0 6/666]6j6o6}6
000000029CCF 00000042ECCF 0 ;3;l;
000000029CE5 00000042ECE5 0 ?%?)?.?4?8?>?B?H?L?Q?W?[?a?e?k?o?u?y?
000000029D21 00000042ED21 0 1m4Z5
000000029D5F 00000042ED5F 0 0&0,02080
000000029D6B 00000042ED6B 0 012@2w2
000000029D7F 00000042ED7F 0 333;3@3l3
000000029D97 00000042ED97 0 444Z4n4y4
000000029DAF 00000042EDAF 0 8-8P8a8g8s8
000000029DDF 00000042EDDF 0 969<9E9K9U9
000000029DF9 00000042EDF9 0 ;.;;;A;};
000000029E0D 00000042EE0D 0 <*=<=
000000029E37 00000042EE37 0 0!0/0
000000029E45 00000042EE45 0 2;2N2#3
000000029E69 00000042EE69 0 :':?:J:\:
000000029E7B 00000042EE7B 0 =">N>h>
000000029E91 00000042EE91 0 0!1-1
000000029EA7 00000042EEA7 0 474}415|9
000000029EB7 00000042EEB7 0 :M:_:
000000029EC1 00000042EEC1 0 :.;4;<;v;
File pos Mem pos ID Text
======== ======= == ====
000000029ED3 00000042EED3 0 <\<p<
000000029EE1 00000042EEE1 0 <6=?=J=Y=x=
000000029EF1 00000042EEF1 0 >)>>>H>
000000029EFB 00000042EEFB 0 ?2?V?
000000029F0F 00000042EF0F 0 0G0S0
000000029F39 00000042EF39 0 7 828D8V8h8z8
000000029F55 00000042EF55 0 9)9;9M9_9
000000029F75 00000042EF75 0 0k1s1
000000029F7F 00000042EF7F 0 212h2
000000029F8B 00000042EF8B 0 5C6O6
000000029FA3 00000042EFA3 0 ;K?O?S?W?[?_?c?g?k?o?s?w?
00000002A019 00000042F019 0 <k>,?
00000002A031 00000042F031 0 5.656k6
00000002A03D 00000042F03D 0 7_7{7
00000002A047 00000042F047 0 8*9;9O9U9Z9a9~9
00000002A05F 00000042F05F 0 :H:r:
00000002A06D 00000042F06D 0 :H;P;\;i;q;y;
00000002A0A5 00000042F0A5 0 <p=v=}=
00000002A0B7 00000042F0B7 0 > >%>+>=>C>N>W>d>l>y>
00000002A0E3 00000042F0E3 0 1\1h1
00000002A101 00000042F101 0 2D3j3
00000002A12F 00000042F12F 0 =N=v=|=
00000002A14F 00000042F14F 0 2X2\2
00000002A16D 00000042F16D 0 6$6,646<6D6L6T6\6d6l6
00000002A18D 00000042F18D 0 0 0$0(0
00000002A1BF 00000042F1BF 0 1 1$1(1,1014181<1@1D1H1L1P1T1X1\1
00000002A1E1 00000042F1E1 0 1d1h1l1p1t1
00000002A203 00000042F203 0 <$<,<4<<<D<L<T<\<d<l<t<|<
00000002A243 00000042F243 0 =$=,=4=<=D=L=T=\=d=l=t=|=
00000002A283 00000042F283 0 >$>,>4><>D>L>T>\>d>l>t>|>
00000002A2C3 00000042F2C3 0 ?$?,?4?<?D?L?T?\?d?l?t?|?
00000002A30B 00000042F30B 0 0$0,040<0D0L0T0\0d0l0t0|0
00000002A34B 00000042F34B 0 1$1,141<1D1L1T1\1d1l1t1|1
00000002A38B 00000042F38B 0 2$2,242<2D2L2T2\2d2l2t2|2
00000002A3CB 00000042F3CB 0 3 3(30383@3H3P3X3
00000002A3DD 00000042F3DD 0 3h3p3x3
00000002A40B 00000042F40B 0 4 4(40484@4H4P4X4
00000002A41D 00000042F41D 0 4h4p4x4
00000002A44B 00000042F44B 0 5 5(50585@5H5P5X5
00000002A45D 00000042F45D 0 5h5p5x5
00000002A48B 00000042F48B 0 6 6(60686@6H6P6X6
00000002A49D 00000042F49D 0 6h6p6x6
00000002A4CB 00000042F4CB 0 7 7(70787@7H7P7X7
00000002A4DD 00000042F4DD 0 7h7p7x7
00000002A50B 00000042F50B 0 8 8(80888@8H8P8X8
00000002A51D 00000042F51D 0 8h8p8x8
00000002A54B 00000042F54B 0 9 9(90989@9H9P9X9
00000002A55D 00000042F55D 0 9h9p9x9
00000002A590 00000042F590 0 @5D5H5L5P5T5X5\5
00000002A5A1 00000042F5A1 0 5d5t5$6(6,606
00000002A5BD 00000042F5BD 0 7d8h8l8p8$9(9,909
00000002A5ED 00000042F5ED 0 585X5x5
00000002A601 00000042F601 0 6(6D6H6d6h6
00000002A615 00000042F615 0 7(7H7T7p7
00000002A627 00000042F627 0 808P8p8|8
00000002A639 00000042F639 0 989T9X9
00000002A64F 00000042F64F 0 4L5P5T5X5\5
00000002A65B 00000042F65B 0 5d5h5l5p5
00000002A679 00000042F679 0 < <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<
00000002A69B 00000042F69B 0 <d<h<l<p<t<x<|<
File pos Mem pos ID Text
======== ======= == ====
00000002A6F5 00000042F6F5 0 = =$=(=,=0=4=8=<=@=D=H=L=P=T=X=\=
00000002A72D 00000042F72D 0 >$>@>H>L>P>T>X>\>
00000002A73F 00000042F73F 0 >d>h>l>x>|>
000000021430 000000422230 0 mscoree.dll
000000021468 000000422268 0 (null)
0000000214D4 0000004222D4 0 kernel32.dll
000000022138 000000422F38 0 runtime error
000000022178 000000422F78 0 Program:
00000002218C 000000422F8C 0 <program name unknown>
0000000221D0 000000422FD0 0 Microsoft Visual C++ Runtime Library
00000002222B 00000042302B 0 Bja-JP
000000022238 000000423038 0 zh-CN
000000022244 000000423044 0 ko-KR
000000022250 000000423050 0 zh-TW
000000022264 000000423064 0 UTF-8
000000022270 000000423070 0 UTF-16LE
000000022284 000000423084 0 UNICODE
000000022814 000000423614 0 Sunday
000000022824 000000423624 0 Monday
000000022834 000000423634 0 Tuesday
000000022844 000000423644 0 Wednesday
000000022858 000000423658 0 Thursday
00000002286C 00000042366C 0 Friday
00000002287C 00000042367C 0 Saturday
0000000228F0 0000004236F0 0 January
000000022900 000000423700 0 February
000000022914 000000423714 0 March
000000022920 000000423720 0 April
000000022944 000000423744 0 August
000000022954 000000423754 0 September
000000022968 000000423768 0 October
000000022978 000000423778 0 November
00000002298C 00000042378C 0 December
0000000229B0 0000004237B0 0 MM/dd/yy
0000000229C4 0000004237C4 0 dddd, MMMM dd, yyyy
0000000229EC 0000004237EC 0 HH:mm:ss
000000022A00 000000423800 0 en-US
000000022D48 000000423B48 0 USER32.DLL
000000023C20 000000424A20 0 zh-CHS
000000023E24 000000424C24 0 ar-SA
000000023E30 000000424C30 0 bg-BG
000000023E3C 000000424C3C 0 ca-ES
000000023E48 000000424C48 0 cs-CZ
000000023E54 000000424C54 0 da-DK
000000023E60 000000424C60 0 de-DE
000000023E6C 000000424C6C 0 el-GR
000000023E78 000000424C78 0 fi-FI
000000023E84 000000424C84 0 fr-FR
000000023E90 000000424C90 0 he-IL
000000023E9C 000000424C9C 0 hu-HU
000000023EA8 000000424CA8 0 is-IS
000000023EB4 000000424CB4 0 it-IT
000000023EC0 000000424CC0 0 nl-NL
000000023ECC 000000424CCC 0 nb-NO
000000023ED8 000000424CD8 0 pl-PL
000000023EE4 000000424CE4 0 pt-BR
000000023EF0 000000424CF0 0 ro-RO
000000023EFC 000000424CFC 0 ru-RU
000000023F08 000000424D08 0 hr-HR
000000023F14 000000424D14 0 sk-SK
File pos Mem pos ID Text
======== ======= == ====
000000023F20 000000424D20 0 sq-AL
000000023F2C 000000424D2C 0 sv-SE
000000023F38 000000424D38 0 th-TH
000000023F44 000000424D44 0 tr-TR
000000023F50 000000424D50 0 ur-PK
000000023F5C 000000424D5C 0 id-ID
000000023F68 000000424D68 0 uk-UA
000000023F74 000000424D74 0 be-BY
000000023F80 000000424D80 0 sl-SI
000000023F8C 000000424D8C 0 et-EE
000000023F98 000000424D98 0 lv-LV
000000023FA4 000000424DA4 0 lt-LT
000000023FB0 000000424DB0 0 fa-IR
000000023FBC 000000424DBC 0 vi-VN
000000023FC8 000000424DC8 0 hy-AM
000000023FD4 000000424DD4 0 az-AZ-Latn
000000023FEC 000000424DEC 0 eu-ES
000000023FF8 000000424DF8 0 mk-MK
000000024004 000000424E04 0 tn-ZA
000000024010 000000424E10 0 xh-ZA
00000002401C 000000424E1C 0 zu-ZA
000000024028 000000424E28 0 af-ZA
000000024034 000000424E34 0 ka-GE
000000024040 000000424E40 0 fo-FO
00000002404C 000000424E4C 0 hi-IN
000000024058 000000424E58 0 mt-MT
000000024064 000000424E64 0 se-NO
000000024070 000000424E70 0 ms-MY
00000002407C 000000424E7C 0 kk-KZ
000000024088 000000424E88 0 ky-KG
000000024094 000000424E94 0 sw-KE
0000000240A0 000000424EA0 0 uz-UZ-Latn
0000000240B8 000000424EB8 0 tt-RU
0000000240C4 000000424EC4 0 bn-IN
0000000240D0 000000424ED0 0 pa-IN
0000000240DC 000000424EDC 0 gu-IN
0000000240E8 000000424EE8 0 ta-IN
0000000240F4 000000424EF4 0 te-IN
000000024100 000000424F00 0 kn-IN
00000002410C 000000424F0C 0 ml-IN
000000024118 000000424F18 0 mr-IN
000000024124 000000424F24 0 sa-IN
000000024130 000000424F30 0 mn-MN
00000002413C 000000424F3C 0 cy-GB
000000024148 000000424F48 0 gl-ES
000000024154 000000424F54 0 kok-IN
000000024164 000000424F64 0 syr-SY
000000024174 000000424F74 0 div-MV
000000024184 000000424F84 0 quz-BO
000000024194 000000424F94 0 ns-ZA
0000000241A0 000000424FA0 0 mi-NZ
0000000241AC 000000424FAC 0 ar-IQ
0000000241B8 000000424FB8 0 de-CH
0000000241C4 000000424FC4 0 en-GB
0000000241D0 000000424FD0 0 es-MX
0000000241DC 000000424FDC 0 fr-BE
0000000241E8 000000424FE8 0 it-CH
0000000241F4 000000424FF4 0 nl-BE
000000024200 000000425000 0 nn-NO
00000002420C 00000042500C 0 pt-PT
File pos Mem pos ID Text
======== ======= == ====
000000024218 000000425018 0 sr-SP-Latn
000000024230 000000425030 0 sv-FI
00000002423C 00000042503C 0 az-AZ-Cyrl
000000024254 000000425054 0 se-SE
000000024260 000000425060 0 ms-BN
00000002426C 00000042506C 0 uz-UZ-Cyrl
000000024284 000000425084 0 quz-EC
000000024294 000000425094 0 ar-EG
0000000242A0 0000004250A0 0 zh-HK
0000000242AC 0000004250AC 0 de-AT
0000000242B8 0000004250B8 0 en-AU
0000000242C4 0000004250C4 0 es-ES
0000000242D0 0000004250D0 0 fr-CA
0000000242DC 0000004250DC 0 sr-SP-Cyrl
0000000242F4 0000004250F4 0 se-FI
000000024300 000000425100 0 quz-PE
000000024310 000000425110 0 ar-LY
00000002431C 00000042511C 0 zh-SG
000000024328 000000425128 0 de-LU
000000024334 000000425134 0 en-CA
000000024340 000000425140 0 es-GT
00000002434C 00000042514C 0 fr-CH
000000024358 000000425158 0 hr-BA
000000024364 000000425164 0 smj-NO
000000024374 000000425174 0 ar-DZ
000000024380 000000425180 0 zh-MO
00000002438C 00000042518C 0 de-LI
000000024398 000000425198 0 en-NZ
0000000243A4 0000004251A4 0 es-CR
0000000243B0 0000004251B0 0 fr-LU
0000000243BC 0000004251BC 0 bs-BA-Latn
0000000243D4 0000004251D4 0 smj-SE
0000000243E4 0000004251E4 0 ar-MA
0000000243F0 0000004251F0 0 en-IE
0000000243FC 0000004251FC 0 es-PA
000000024408 000000425208 0 fr-MC
000000024414 000000425214 0 sr-BA-Latn
00000002442C 00000042522C 0 sma-NO
00000002443C 00000042523C 0 ar-TN
000000024448 000000425248 0 en-ZA
000000024454 000000425254 0 es-DO
000000024460 000000425260 0 sr-BA-Cyrl
000000024478 000000425278 0 sma-SE
000000024488 000000425288 0 ar-OM
000000024494 000000425294 0 en-JM
0000000244A0 0000004252A0 0 es-VE
0000000244AC 0000004252AC 0 sms-FI
0000000244BC 0000004252BC 0 ar-YE
0000000244C8 0000004252C8 0 en-CB
0000000244D4 0000004252D4 0 es-CO
0000000244E0 0000004252E0 0 smn-FI
0000000244F0 0000004252F0 0 ar-SY
0000000244FC 0000004252FC 0 en-BZ
000000024508 000000425308 0 es-PE
000000024514 000000425314 0 ar-JO
000000024520 000000425320 0 en-TT
00000002452C 00000042532C 0 es-AR
000000024538 000000425338 0 ar-LB
000000024544 000000425344 0 en-ZW
000000024550 000000425350 0 es-EC
File pos Mem pos ID Text
======== ======= == ====
00000002455C 00000042535C 0 ar-KW
000000024568 000000425368 0 en-PH
000000024574 000000425374 0 es-CL
000000024580 000000425380 0 ar-AE
00000002458C 00000042538C 0 es-UY
000000024598 000000425398 0 ar-BH
0000000245A4 0000004253A4 0 es-PY
0000000245B0 0000004253B0 0 ar-QA
0000000245BC 0000004253BC 0 es-BO
0000000245C8 0000004253C8 0 es-SV
0000000245D4 0000004253D4 0 es-HN
0000000245E0 0000004253E0 0 es-NI
0000000245EC 0000004253EC 0 es-PR
0000000245F8 0000004253F8 0 zh-CHT
000000024610 000000425410 0 af-za
00000002461C 00000042541C 0 ar-ae
000000024628 000000425428 0 ar-bh
000000024634 000000425434 0 ar-dz
000000024640 000000425440 0 ar-eg
00000002464C 00000042544C 0 ar-iq
000000024658 000000425458 0 ar-jo
000000024664 000000425464 0 ar-kw
000000024670 000000425470 0 ar-lb
00000002467C 00000042547C 0 ar-ly
000000024688 000000425488 0 ar-ma
000000024694 000000425494 0 ar-om
0000000246A0 0000004254A0 0 ar-qa
0000000246AC 0000004254AC 0 ar-sa
0000000246B8 0000004254B8 0 ar-sy
0000000246C4 0000004254C4 0 ar-tn
0000000246D0 0000004254D0 0 ar-ye
0000000246DC 0000004254DC 0 az-az-cyrl
0000000246F4 0000004254F4 0 az-az-latn
00000002470C 00000042550C 0 be-by
000000024718 000000425518 0 bg-bg
000000024724 000000425524 0 bn-in
000000024730 000000425530 0 bs-ba-latn
000000024748 000000425548 0 ca-es
000000024754 000000425554 0 cs-cz
000000024760 000000425560 0 cy-gb
00000002476C 00000042556C 0 da-dk
000000024778 000000425578 0 de-at
000000024784 000000425584 0 de-ch
000000024790 000000425590 0 de-de
00000002479C 00000042559C 0 de-li
0000000247A8 0000004255A8 0 de-lu
0000000247B4 0000004255B4 0 div-mv
0000000247C4 0000004255C4 0 el-gr
0000000247D0 0000004255D0 0 en-au
0000000247DC 0000004255DC 0 en-bz
0000000247E8 0000004255E8 0 en-ca
0000000247F4 0000004255F4 0 en-cb
000000024800 000000425600 0 en-gb
00000002480C 00000042560C 0 en-ie
000000024818 000000425618 0 en-jm
000000024824 000000425624 0 en-nz
000000024830 000000425630 0 en-ph
00000002483C 00000042563C 0 en-tt
000000024848 000000425648 0 en-us
000000024854 000000425654 0 en-za
File pos Mem pos ID Text
======== ======= == ====
000000024860 000000425660 0 en-zw
00000002486C 00000042566C 0 es-ar
000000024878 000000425678 0 es-bo
000000024884 000000425684 0 es-cl
000000024890 000000425690 0 es-co
00000002489C 00000042569C 0 es-cr
0000000248A8 0000004256A8 0 es-do
0000000248B4 0000004256B4 0 es-ec
0000000248C0 0000004256C0 0 es-es
0000000248CC 0000004256CC 0 es-gt
0000000248D8 0000004256D8 0 es-hn
0000000248E4 0000004256E4 0 es-mx
0000000248F0 0000004256F0 0 es-ni
0000000248FC 0000004256FC 0 es-pa
000000024908 000000425708 0 es-pe
000000024914 000000425714 0 es-pr
000000024920 000000425720 0 es-py
00000002492C 00000042572C 0 es-sv
000000024938 000000425738 0 es-uy
000000024944 000000425744 0 es-ve
000000024950 000000425750 0 et-ee
00000002495C 00000042575C 0 eu-es
000000024968 000000425768 0 fa-ir
000000024974 000000425774 0 fi-fi
000000024980 000000425780 0 fo-fo
00000002498C 00000042578C 0 fr-be
000000024998 000000425798 0 fr-ca
0000000249A4 0000004257A4 0 fr-ch
0000000249B0 0000004257B0 0 fr-fr
0000000249BC 0000004257BC 0 fr-lu
0000000249C8 0000004257C8 0 fr-mc
0000000249D4 0000004257D4 0 gl-es
0000000249E0 0000004257E0 0 gu-in
0000000249EC 0000004257EC 0 he-il
0000000249F8 0000004257F8 0 hi-in
000000024A04 000000425804 0 hr-ba
000000024A10 000000425810 0 hr-hr
000000024A1C 00000042581C 0 hu-hu
000000024A28 000000425828 0 hy-am
000000024A34 000000425834 0 id-id
000000024A40 000000425840 0 is-is
000000024A4C 00000042584C 0 it-ch
000000024A58 000000425858 0 it-it
000000024A64 000000425864 0 ja-jp
000000024A70 000000425870 0 ka-ge
000000024A7C 00000042587C 0 kk-kz
000000024A88 000000425888 0 kn-in
000000024A94 000000425894 0 kok-in
000000024AA4 0000004258A4 0 ko-kr
000000024AB0 0000004258B0 0 ky-kg
000000024ABC 0000004258BC 0 lt-lt
000000024AC8 0000004258C8 0 lv-lv
000000024AD4 0000004258D4 0 mi-nz
000000024AE0 0000004258E0 0 mk-mk
000000024AEC 0000004258EC 0 ml-in
000000024AF8 0000004258F8 0 mn-mn
000000024B04 000000425904 0 mr-in
000000024B10 000000425910 0 ms-bn
000000024B1C 00000042591C 0 ms-my
000000024B28 000000425928 0 mt-mt
File pos Mem pos ID Text
======== ======= == ====
000000024B34 000000425934 0 nb-no
000000024B40 000000425940 0 nl-be
000000024B4C 00000042594C 0 nl-nl
000000024B58 000000425958 0 nn-no
000000024B64 000000425964 0 ns-za
000000024B70 000000425970 0 pa-in
000000024B7C 00000042597C 0 pl-pl
000000024B88 000000425988 0 pt-br
000000024B94 000000425994 0 pt-pt
000000024BA0 0000004259A0 0 quz-bo
000000024BB0 0000004259B0 0 quz-ec
000000024BC0 0000004259C0 0 quz-pe
000000024BD0 0000004259D0 0 ro-ro
000000024BDC 0000004259DC 0 ru-ru
000000024BE8 0000004259E8 0 sa-in
000000024BF4 0000004259F4 0 se-fi
000000024C00 000000425A00 0 se-no
000000024C0C 000000425A0C 0 se-se
000000024C18 000000425A18 0 sk-sk
000000024C24 000000425A24 0 sl-si
000000024C30 000000425A30 0 sma-no
000000024C40 000000425A40 0 sma-se
000000024C50 000000425A50 0 smj-no
000000024C60 000000425A60 0 smj-se
000000024C70 000000425A70 0 smn-fi
000000024C80 000000425A80 0 sms-fi
000000024C90 000000425A90 0 sq-al
000000024C9C 000000425A9C 0 sr-ba-cyrl
000000024CB4 000000425AB4 0 sr-ba-latn
000000024CCC 000000425ACC 0 sr-sp-cyrl
000000024CE4 000000425AE4 0 sr-sp-latn
000000024CFC 000000425AFC 0 sv-fi
000000024D08 000000425B08 0 sv-se
000000024D14 000000425B14 0 sw-ke
000000024D20 000000425B20 0 syr-sy
000000024D30 000000425B30 0 ta-in
000000024D3C 000000425B3C 0 te-in
000000024D48 000000425B48 0 th-th
000000024D54 000000425B54 0 tn-za
000000024D60 000000425B60 0 tr-tr
000000024D6C 000000425B6C 0 tt-ru
000000024D78 000000425B78 0 uk-ua
000000024D84 000000425B84 0 ur-pk
000000024D90 000000425B90 0 uz-uz-cyrl
000000024DA8 000000425BA8 0 uz-uz-latn
000000024DC0 000000425BC0 0 vi-vn
000000024DCC 000000425BCC 0 xh-za
000000024DD8 000000425BD8 0 zh-chs
000000024DE8 000000425BE8 0 zh-cht
000000024DF8 000000425BF8 0 zh-cn
000000024E04 000000425C04 0 zh-hk
000000024E10 000000425C10 0 zh-mo
000000024E1C 000000425C1C 0 zh-sg
000000024E28 000000425C28 0 zh-tw
000000024E34 000000425C34 0 zu-za
000000024E4B 000000425C4B 0 2.exe
000000025698 000000426498 0 CONOUT$
000000026220 000000427020 0 %s\updatea.bin
000000026248 000000427048 0 %s\updatea2.bin
00000000004D 00000040004D 0 !This program cannot be run in DOS mode.
File pos Mem pos ID Text
======== ======= == ====
0000000000D8 0000004000D8 0 Rich)
0000000001E0 0000004001E0 0 .text
000000000208 000000400208 0 .rdata
00000000022F 00000040022F 0 @.data
000000000258 000000400258 0 .rsrc
00000000027F 00000040027F 0 @.reloc
000000000487 000000401087 0 /WQQj
00000000058D 00000040118D 0 HtWHtHHt
0000000005C2 0000004011C2 0 Humj
000000000740 000000401340 0 u7VPh
0000000007ED 0000004013ED 0 tsHtJHt
0000000009D5 0000004015D5 0 9{,t3W
000000000CB0 0000004018B0 0 9_8t8
000000000ED3 000000401AD3 0 YY9s,t%
0000000012D4 000000401ED4 0 uEh,jB
0000000012E8 000000401EE8 0 Ph@jB
00000000131E 000000401F1E 0 uih,jB
000000001334 000000401F34 0 Sh@jB
000000001391 000000401F91 0 lhPjB
00000000145F 00000040205F 0 uHh,jB
000000001473 000000402073 0 Ph@jB
0000000014D6 0000004020D6 0 Ph@jB
000000001879 000000402479 0 Ph@kB
0000000018BD 0000004024BD 0 PhxkB
000000001D03 000000402903 0 Ph0lB
000000001D72 000000402972 0 PhhlB
000000001F01 000000402B01 0 @f;C.
000000001F89 000000402B89 0 Vf
000000002427 000000403027 0 PhhlB
000000002565 000000403165 0 Ph$mB
0000000025B3 0000004031B3 0 @f;C.
000000002667 000000403267 0 Sf
00000000281F 00000040341F 0 QQSVW
000000002A02 000000403602 0 YWSVh
000000002ACA 0000004036CA 0 HtmHtcHtWH
00000000321D 000000403E1D 0 QSVWQ
000000003605 000000404205 0 Ph pB
0000000036AF 0000004042AF 0 PhHpB
0000000036E2 0000004042E2 0 GWWhhpB
000000003723 000000404323 0 QSVWQj
000000003784 000000404384 0 QSVWQj
000000003D15 000000404915 0 t|Ht"-
000000003E8C 000000404A8C 0 Nt Nt
000000003EB0 000000404AB0 0 t?Ht2Ht%Ht
000000003F2A 000000404B2A 0 t<Ht!Ht
000000003F89 000000404B89 0 tdHtJHt9Ht
000000004007 000000404C07 0 FYY;u
000000004025 000000404C25 0 tPHt5Ht
0000000041CB 000000404DCB 0 lSVWj
00000000454C 00000040514C 0 QQSV3
0000000046A2 0000004052A2 0 \$ Pj
0000000046AD 0000004052AD 0 \$,PjeS
000000004979 000000405579 0 lSVWQ3
0000000049FD 0000004055FD 0 PSSSj
000000004A73 000000405673 0 VWQRj
000000004EC6 000000405AC6 0 Vh<rB
000000004EFB 000000405AFB 0 PhDrB
000000004FA4 000000405BA4 0 VRhTrB
000000005068 000000405C68 0 RPhprB
000000005070 000000405C70 0 D$LjdP
File pos Mem pos ID Text
======== ======= == ====
000000005199 000000405D99 0 HW9D$
000000005378 000000405F78 0 L$0@WV
000000005393 000000405F93 0 HW9D$
0000000055C7 0000004061C7 0 QQSVW
00000000584B 00000040644B 0 QQSV3
000000005925 000000406525 0 QQSVW
000000005D69 000000406969 0 u$jeS
000000006264 000000406E64 0 j@XQSP
000000006A96 000000407696 0 T$$Wj
000000006B0C 00000040770C 0 L$ j
00000000716E 000000407D6E 0 D$ ;D$0
000000007727 000000408327 0 YYNOu
0000000077C2 0000004083C2 0 WhDfB
0000000077E8 0000004083E8 0 WhDfB
000000007C46 000000408846 0 SVWPP
000000008316 000000408F16 0 QQSVW
0000000089D1 0000004095D1 0 QQSVW
000000008FA8 000000409BA8 0 expa3
000000008FBF 000000409BBF 0 te k_
0000000090F7 000000409CF7 0 3J(3B,3
0000000091E7 000000409DE7 0 1B 1J$1BH1JLC
0000000097FC 00000040A3FC 0 B 1A
000000009802 00000040A402 0 B$1A$
000000009808 00000040A408 0 B(1A(
00000000980E 00000040A40E 0 B,1A,
000000009814 00000040A414 0 B01A0
00000000981A 00000040A41A 0 B41A4
000000009820 00000040A420 0 B81A8
000000009826 00000040A426 0 B<1A<
00000000982C 00000040A42C 0 B@1A@
000000009832 00000040A432 0 BD1AD
000000009842 00000040A442 0 BH1AH
000000009848 00000040A448 0 BL1AL
00000000984E 00000040A44E 0 BP1AP
000000009854 00000040A454 0 BT1AT
00000000985A 00000040A45A 0 BX1AX
000000009860 00000040A460 0 B\1A\
00000000986C 00000040A46C 0 Bd1Ad
000000009878 00000040A478 0 Bh1Ah
00000000987E 00000040A47E 0 Bl1Al
000000009884 00000040A484 0 Bp1Ap
00000000988A 00000040A48A 0 Bt1At
000000009890 00000040A490 0 Bx1Ax
000000009896 00000040A496 0 B|1A|
000000009A3E 00000040A63E 0 QQSVW
000000009CBD 00000040A8BD 0 SVWQQR
00000000A98B 00000040B58B 0 QQSV3
00000000A9B8 00000040B5B8 0 PVSSSj
00000000A9DF 00000040B5DF 0 PVSSSj
00000000AA1E 00000040B61E 0 PhdsB
00000000AA5B 00000040B65B 0 QQSVWj
00000000AACB 00000040B6CB 0 tEHtBHt5Ht
00000000ADF5 00000040B9F5 0 t;9X(t
00000000B108 00000040BD08 0 H$9H,
00000000B2F3 00000040BEF3 0 WQPSV
00000000B980 00000040C580 0 QWPWh
00000000BAC9 00000040C6C9 0 QQSVWQ
00000000BFD7 00000040CBD7 0 QQSVWj
00000000C3F1 00000040CFF1 0 Ph0"B
00000000C683 00000040D283 0 YYh("B
File pos Mem pos ID Text
======== ======= == ====
00000000F165 00000040FD65 0 PPPPP
00000000F452 000000410052 0 t/HHt
00000000F69E 00000041029E 0 HHtVHHt
00000000FB95 000000410795 0 >0t-N
000000010241 000000410E41 0 ~pjCXf
000000010B15 000000411715 0 SSSSS
000000010E55 000000411A55 0 j$hpvB
0000000118FB 0000004124FB 0 5ntel
00000001190B 00000041250B 0 5Genu
000000011D8D 00000041298D 0 bWWWWj
000000011EE1 000000412AE1 0 PRPQh
000000012149 000000412D49 0 tRHtC
0000000121CD 000000412DCD 0 t;Ht+
000000012250 000000412E50 0 Vh\0B
00000001235F 000000412F5F 0 URPQQh
00000001265A 00000041325A 0 t/HHt
00000001269D 00000041329D 0 j*Xf;
0000000126FB 0000004132FB 0 j*Xf;
000000012752 000000413352 0 htHjlZ;
000000012895 000000413495 0 HHtXHHt
000000012AD2 0000004136D2 0 nt'joZ;
000000012B72 000000413772 0 jgXf;
000000012C49 000000413849 0 YYjgXf9
000000012DFF 0000004139FF 0 >0t<NAj0X
000000012EE0 000000413AE0 0 Wj0XP
000000012FEC 000000413BEC 0 Wj XP
0000000131A6 000000413DA6 0 <at-<rt"<wt
000000013216 000000413E16 0 tRHtC
00000001329A 000000413E9A 0 t;Ht+
0000000151F0 000000415DF0 0 j/_j\[f;
000000015431 000000416031 0 @WPPh
000000015757 000000416357 0 jdhxwB
000000015770 000000416370 0 j@j _W
000000015830 000000416430 0 } j@W
000000015BAA 0000004167AA 0 Vh~oA
0000000160C8 000000416CC8 0 PWWWWV
000000016163 000000416D63 0 PSSSSV
00000001628B 000000416E8B 0 v N+D$
000000016567 000000417167 0 t/HHt
0000000167B3 0000004173B3 0 HHtVHHt
000000016CAA 0000004178AA 0 >0t-N
0000000171AF 000000417DAF 0 PP9E u
0000000175D0 0000004181D0 0 < t8< t4
0000000176AA 0000004182AA 0 t@VSP
000000017705 000000418305 0 PPPPP
000000017824 000000418424 0 SPPP+
00000001782D 00000041842D 0 FVWPP
000000017853 000000418453 0 SVWPP
000000017A01 000000418601 0 QVWSj
000000017C5F 00000041885F 0 VhH;B
000000017C80 000000418880 0 VVhH;B
00000001800E 000000418C0E 0 jA[jZZ+
000000018381 000000418F81 0 t\j=S
0000000183CC 000000418FCC 0 t&9=8
000000018591 000000419191 0 PPPPP
0000000186DC 0000004192DC 0 PRPQh
000000018949 000000419549 0 t7QVW
000000018A10 000000419610 0 tWh@\B
000000018BC2 0000004197C2 0 tHHt*Ht#
0000000190E4 000000419CE4 0 uJSSR
File pos Mem pos ID Text
======== ======= == ====
00000001929C 000000419E9C 0 SSSSS
00000001933F 000000419F3F 0 SVjA[jZ
000000019408 00000041A008 0 jAZjZ
0000000194B3 00000041A0B3 0 SVWUj
000000019554 00000041A154 0 ;t$,v-
0000000195D9 00000041A1D9 0 UQPXY]Y[
0000000197E3 00000041A3E3 0 ~';_t|%3
0000000197F7 00000041A3F7 0 wtVj
00000001980C 00000041A40C 0 ;_tr.
00000001982D 00000041A42D 0 GWVj
000000019BD0 00000041A7D0 0 r)f;q
000000019C4A 00000041A84A 0 r2f;A
00000001A808 00000041B408 0 @jd_u
00000001A979 00000041B579 0 PPPPP
00000001A9A3 00000041B5A3 0 uaPPPS
00000001ABAB 00000041B7AB 0 tGhL\B
00000001ABBC 00000041B7BC 0 t3hX\B
00000001ABCD 00000041B7CD 0 t"hd\B
00000001BE5C 00000041CA5C 0 +t"HHt
00000001BEB2 00000041CAB2 0 9] t"
00000001DBE4 00000041E7E4 0 ,SVWj0X
00000001DD18 00000041E918 0 u'j0X
00000001DE42 00000041EA42 0 Wj0XPV
00000001DEE1 00000041EAE1 0 PjdSQ
00000001E04A 00000041EC4A 0 -jd[;
00000001E09F 00000041EC9F 0 WWWWW
00000001E5F2 00000041F1F2 0 VVVVV
00000001E741 00000041F341 0 PPPPP
00000001EFBB 00000041FBBB 0 SSPQSW
00000001F0EF 00000041FCEF 0 SSSSS
00000001F0FA 00000041FCFA 0 j0h yB
00000001F204 00000041FE04 0 SSSSS
00000001F394 00000041FF94 0 ?:uBGW
00000001F56D 00000042016D 0 } kE$<
00000001F6A2 0000004202A2 0 C@j:f
00000001F839 000000420439 0 SVWjA_jZ+
00000001F8E1 0000004204E1 0 uBjAYjZ+
000000020002 000000420C02 0 PPPPP
0000000200B6 000000420CB6 0 v N+D$
000000020CB1 0000004218B1 0 SSSSS
000000021448 000000422248 0 CorExitProcess
000000021460 000000422260 0 (null)
000000021499 000000422299 0 ( 8PX
0000000214A1 0000004222A1 0 700WP
0000000214B9 0000004222B9 0 xpxxxx
0000000214F0 0000004222F0 0 FlsAlloc
0000000214FC 0000004222FC 0 FlsFree
000000021504 000000422304 0 FlsGetValue
000000021510 000000422310 0 FlsSetValue
00000002151C 00000042231C 0 InitializeCriticalSectionEx
000000021538 000000422338 0 CreateEventExW
000000021548 000000422348 0 CreateSemaphoreExW
00000002155C 00000042235C 0 SetThreadStackGuarantee
000000021574 000000422374 0 CreateThreadpoolTimer
00000002158C 00000042238C 0 SetThreadpoolTimer
0000000215A0 0000004223A0 0 WaitForThreadpoolTimerCallbacks
0000000215C0 0000004223C0 0 CloseThreadpoolTimer
0000000215D8 0000004223D8 0 CreateThreadpoolWait
0000000215F0 0000004223F0 0 SetThreadpoolWait
000000021604 000000422404 0 CloseThreadpoolWait
File pos Mem pos ID Text
======== ======= == ====
000000021618 000000422418 0 FlushProcessWriteBuffers
000000021634 000000422434 0 FreeLibraryWhenCallbackReturns
000000021654 000000422454 0 GetCurrentProcessorNumber
000000021670 000000422470 0 GetLogicalProcessorInformation
000000021690 000000422490 0 CreateSymbolicLinkW
0000000216A4 0000004224A4 0 SetDefaultDllDirectories
0000000216C0 0000004224C0 0 EnumSystemLocalesEx
0000000216D4 0000004224D4 0 CompareStringEx
0000000216E4 0000004224E4 0 GetDateFormatEx
0000000216F4 0000004224F4 0 GetLocaleInfoEx
000000021704 000000422504 0 GetTimeFormatEx
000000021714 000000422514 0 GetUserDefaultLocaleName
000000021730 000000422530 0 IsValidLocaleName
000000021744 000000422544 0 LCMapStringEx
000000021754 000000422554 0 GetCurrentPackageId
000000021768 000000422568 0 GetTickCount64
000000021778 000000422578 0 GetFileInformationByHandleExW
000000021798 000000422598 0 SetFileInformationByHandleW
000000022298 000000423098 0 UTF-8
0000000222A0 0000004230A0 0 UTF-16LE
0000000222AC 0000004230AC 0 UNICODE
000000022378 000000423178 0 No error
000000022384 000000423184 0 Operation not permitted
00000002239C 00000042319C 0 No such file or directory
0000000223B8 0000004231B8 0 No such process
0000000223C8 0000004231C8 0 Interrupted function call
0000000223E4 0000004231E4 0 Input/output error
0000000223F8 0000004231F8 0 No such device or address
000000022414 000000423214 0 Arg list too long
000000022428 000000423228 0 Exec format error
00000002243C 00000042323C 0 Bad file descriptor
000000022450 000000423250 0 No child processes
000000022464 000000423264 0 Resource temporarily unavailable
000000022488 000000423288 0 Not enough space
00000002249C 00000042329C 0 Permission denied
0000000224B0 0000004232B0 0 Bad address
0000000224BC 0000004232BC 0 Unknown error
0000000224CC 0000004232CC 0 Resource device
0000000224DC 0000004232DC 0 File exists
0000000224E8 0000004232E8 0 Improper link
0000000224F8 0000004232F8 0 No such device
000000022508 000000423308 0 Not a directory
000000022518 000000423318 0 Is a directory
000000022528 000000423328 0 Invalid argument
00000002253C 00000042333C 0 Too many open files in system
00000002255C 00000042335C 0 Too many open files
000000022570 000000423370 0 Inappropriate I/O control operation
000000022594 000000423394 0 File too large
0000000225A4 0000004233A4 0 No space left on device
0000000225BC 0000004233BC 0 Invalid seek
0000000225CC 0000004233CC 0 Read-only file system
0000000225E4 0000004233E4 0 Too many links
0000000225F4 0000004233F4 0 Broken pipe
000000022600 000000423400 0 Domain error
000000022610 000000423410 0 Result too large
000000022624 000000423424 0 Resource deadlock avoided
000000022640 000000423440 0 Filename too long
000000022654 000000423454 0 No locks available
000000022668 000000423468 0 Function not implemented
000000022684 000000423484 0 Directory not empty
File pos Mem pos ID Text
======== ======= == ====
000000022698 000000423498 0 Illegal byte sequence
0000000226CC 0000004234CC 0 Sunday
0000000226D4 0000004234D4 0 Monday
0000000226DC 0000004234DC 0 Tuesday
0000000226E4 0000004234E4 0 Wednesday
0000000226F0 0000004234F0 0 Thursday
0000000226FC 0000004234FC 0 Friday
000000022704 000000423504 0 Saturday
000000022740 000000423540 0 January
000000022748 000000423548 0 February
000000022754 000000423554 0 March
00000002275C 00000042355C 0 April
000000022774 000000423574 0 August
00000002277C 00000042357C 0 September
000000022788 000000423588 0 October
000000022790 000000423590 0 November
00000002279C 00000042359C 0 December
0000000227B0 0000004235B0 0 MM/dd/yy
0000000227BC 0000004235BC 0 dddd, MMMM dd, yyyy
0000000227D0 0000004235D0 0 HH:mm:ss
000000022A2F 00000042382F 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]
000000022A70 000000423870 0 abcdefghijklmnopqrstuvwxyz{|}~
000000022C6D 000000423A6D 0 ('8PW
000000022C76 000000423A76 0 700PP
000000022C91 000000423A91 0 xppwpp
000000022D60 000000423B60 0 MessageBoxW
000000022D6C 000000423B6C 0 GetActiveWindow
000000022D7C 000000423B7C 0 GetLastActivePopup
000000022D90 000000423B90 0 GetUserObjectInformationW
000000022DAC 000000423BAC 0 GetProcessWindowStation
000000024E40 000000425C40 0 CreateFile2
000000025428 000000426228 0 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]
000000025469 000000426269 0 abcdefghijklmnopqrstuvwxyz{|}~
0000000255A8 0000004263A8 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]
0000000255E9 0000004263E9 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
000000025690 000000426490 0 e+000
0000000256A8 0000004264A8 0 SunMonTueWedThuFriSat
0000000256C0 0000004264C0 0 JanFebMarAprMayJunJulAugSepOctNovDec
0000000256EC 0000004264EC 0 1#SNAN
0000000256F4 0000004264F4 0 1#IND
0000000256FC 0000004264FC 0 1#INF
000000025704 000000426504 0 1#QNAN
00000002571C 00000042651C 0
000000025768 000000426568 0 {[siIbfFOon
00000002588D 00000042668D 0 idF(s
000000025AA4 0000004268A4 0 =*\\E)
000000025B12 000000426912 0 DPV2A
000000025C10 000000426A10 0 Stream closed
000000025C2C 000000426A2C 0 Getting billcount.
000000025C40 000000426A40 0 maxbill = %d
000000025C50 000000426A50 0 GettingCDMStatus.
000000025C64 000000426A64 0 Getting CashUnitStatus.
000000025C7C 000000426A7C 0 User left, cleaning up.
000000025C94 000000426A94 0 Error locking XFS
000000025CA8 000000426AA8 0 Resetting CDM.
000000025CB8 000000426AB8 0 %d:[%d]
000000025CC8 000000426AC8 0 Error dispensing 0x%08X
000000025CE0 000000426AE0 0 No denominations found
000000025CF8 000000426AF8 0 No msxfs installed...
000000025D10 000000426B10 0 Starting WFSManager...
File pos Mem pos ID Text
======== ======= == ====
000000025D28 000000426B28 0 Connecting...
000000025D38 000000426B38 0 shoah
000000025D40 000000426B40 0 Connected. Version: wfs:%d.%d, srvc:%d.%d, spi:%d.%d
000000025D78 000000426B78 0 Unknown version %d
000000025D8C 000000426B8C 0 Disconnecting...
000000025DA0 000000426BA0 0 Error connecting: %p
000000025DB8 000000426BB8 0 Error starting WFS: %p
000000025DD0 000000426BD0 0 Error getting maxbill: %p
000000025DEC 000000426BEC 0 chosen %d | %d
000000025DFC 000000426BFC 0 state=%d, safedoor=%d, dispenser=%d, stacker=%d
000000025E30 000000426C30 0 pos=%d, OutputPosition=%d, shutter=%d, transport=%d
000000025E68 000000426C68 0 Error getting cdm status: 0x%p.
000000025E88 000000426C88 0 Id:%s(nr=%d)(l=%d,h=%d), %d|%d|%d of %d [%s][%d][%d],[%d][%d]
000000025EC8 000000426CC8 0 Error getting bill status: 0x%p.
000000025EEC 000000426CEC 0 pos=%d, status=%d, shutter=%d, transport=%d, status=%d
000000025F24 000000426D24 0 Id:%s(nr=%d)(l=%d,h=%d), %d|%d|%d of %d [%s][%d][%d],[%d]
000000025F60 000000426D60 0 msxfs.dll
000000025F6C 000000426D6C 0 WFSExecute
000000025F78 000000426D78 0 WFSGetInfo
000000025F84 000000426D84 0 WFSOpen
000000025F8C 000000426D8C 0 WFSClose
000000025F98 000000426D98 0 WFSFreeResult
000000025FA8 000000426DA8 0 WFSStartUp
000000025FB4 000000426DB4 0 WFSCleanUp
000000025FC0 000000426DC0 0 WFSLock
000000025FC8 000000426DC8 0 WFSUnlock
000000025FD4 000000426DD4 0 Trying Nautilus.
000000025FE8 000000426DE8 0 CashDispenser
000000025FF8 000000426DF8 0 Connected Nautilus.
00000002600C 000000426E0C 0 Failed: 0x%08X
00000002601C 000000426E1C 0 Trying Nautilus2.
000000026030 000000426E30 0 NXCdm
000000026038 000000426E38 0 Connected Nautilus2.
000000026050 000000426E50 0 Trying Diabold.
000000026060 000000426E60 0 DBD_AdvFuncDisp
000000026070 000000426E70 0 Connected Diabold.
000000026084 000000426E84 0 Trying NCR.
000000026090 000000426E90 0 CurrencyDispenser1
0000000260A4 000000426EA4 0 Connected NCR.
0000000260B4 000000426EB4 0 Trying WINCOR.
0000000260C4 000000426EC4 0 CDM30
0000000260CC 000000426ECC 0 Connected WINCOR.
0000000260E0 000000426EE0 0 Trying WINCOR GEN.
0000000260F8 000000426EF8 0 Connected WINCOR GEN.
000000026110 000000426F10 0 Trying GENERIC.
000000026124 000000426F24 0 Connected GENERIC.
000000026138 000000426F38 0 console
000000026140 000000426F40 0 command
000000026158 000000426F58 0 0.0.0.0
000000026160 000000426F60 0 CNAME
00000002616C 000000426F6C 0 domain
00000002618C 000000426F8C 0 server
000000026194 000000426F94 0 domain=losharik.com
0000000261AC 000000426FAC 0 cmd.exe
0000000261B4 000000426FB4 0 Error opening file for reading
0000000261D8 000000426FD8 0 There was an error reading the file
000000026200 000000427000 0 Error opening file for writing
00000002626C 00000042706C 0 Server closed the connection
00000002628C 00000042708C 0 Connection error
0000000262A0 0000004270A0 0 The client couldn't connect to the remote host!
File pos Mem pos ID Text
======== ======= == ====
0000000262D0 0000004270D0 0 Not implemented yet!
0000000262E8 0000004270E8 0 %I64u
0000000262F0 0000004270F0 0 shi1_netname
000000026300 000000427100 0 shi1_type
00000002630C 00000042710C 0 shi1_remark
000000026320 000000427120 0 sv101_platform_id
000000026334 000000427134 0 sv101_name
000000026340 000000427140 0 sv101_version_major
000000026360 000000427160 0 sv101_version_minor
000000026374 000000427174 0 sv101_type
000000026380 000000427180 0 sv101_comment
000000026390 000000427190 0 share_array
0000000263A4 0000004271A4 0 lgrui0_name
0000000263B0 0000004271B0 0 group_array
0000000263BC 0000004271BC 0 systeminfo
0000000263C8 0000004271C8 0 fsutil fsinfo drives
0000000263E0 0000004271E0 0 drives
0000000263E8 0000004271E8 0 arp -a
0000000263F0 0000004271F0 0 arpcache
000000026400 000000427200 0 users
000000026408 000000427208 0 <INFO_END>
00000002643C 00000042723C 0 \u%04X
000000026444 000000427244 0 \u%04X\u%04X
000000026468 000000427268 0 false
000000026470 000000427270 0 %I64d
000000026494 000000427294 0 ..\jansson\memory_jansson.c
0000000264B0 0000004272B0 0 object
0000000264B8 0000004272B8 0 array
0000000264C0 0000004272C0 0 string
0000000264C8 0000004272C8 0 integer
0000000264D8 0000004272D8 0 Out of memory
0000000264F4 0000004272F4 0 Overflow.
000000026500 000000427300 0 client_write_key
000000026514 000000427314 0 client_mac_key
000000026524 000000427324 0 server_write_key
000000026538 000000427338 0 server_mac_key
000000026548 000000427348 0 client
000000026550 000000427350 0 NOT IMPLEMENTED!
000000026564 000000427364 0 %d.%d.%d.%d
000000026570 000000427370 0 We forgot to handle a linked-list type!
0000000265A4 0000004273A4 0 WARNING
0000000265AC 0000004273AC 0 ERROR
0000000265B4 0000004273B4 0 FATAL
0000000265BE 0000004273BE 0 Unrecoverable error at %s:%d: %s
0000000265E4 0000004273E4 0 dnscat
0000000265F0 0000004273F0 0 TXT, CNAME, MX, A
000000026DC2 000000427BC2 0 WSAStringToAddressA
000000026DD6 000000427BD6 0 WS2_32.dll
000000026DE4 000000427BE4 0 DnsQueryConfig
000000026DF4 000000427BF4 0 DNSAPI.dll
000000026E02 000000427C02 0 NetServerEnum
000000026E12 000000427C12 0 NetShareEnum
000000026E22 000000427C22 0 NetApiBufferFree
000000026E36 000000427C36 0 NetQueryDisplayInformation
000000026E54 000000427C54 0 NetUserGetLocalGroups
000000026E6A 000000427C6A 0 NETAPI32.dll
000000026E7A 000000427C7A 0 GetSystemTimeAsFileTime
000000026E94 000000427C94 0 GetTickCount
000000026EA4 000000427CA4 0 Sleep
000000026EAC 000000427CAC 0 GetProcAddress
File pos Mem pos ID Text
======== ======= == ====
000000026EBE 000000427CBE 0 LoadLibraryA
000000026ECE 000000427CCE 0 SetErrorMode
000000026EDE 000000427CDE 0 GetModuleFileNameW
000000026EF4 000000427CF4 0 WriteFile
000000026F00 000000427D00 0 CreateProcessA
000000026F12 000000427D12 0 TerminateProcess
000000026F26 000000427D26 0 CreatePipe
000000026F34 000000427D34 0 CloseHandle
000000026F42 000000427D42 0 SetHandleInformation
000000026F5A 000000427D5A 0 ReadFile
000000026F66 000000427D66 0 MultiByteToWideChar
000000026F7C 000000427D7C 0 GetCurrentProcessId
000000026F92 000000427D92 0 SwitchToThread
000000026FA4 000000427DA4 0 PeekNamedPipe
000000026FB4 000000427DB4 0 GetStdHandle
000000026FC4 000000427DC4 0 GetLastError
000000026FD4 000000427DD4 0 CreateThread
000000026FE4 000000427DE4 0 FormatMessageA
000000026FF4 000000427DF4 0 KERNEL32.dll
000000027004 000000427E04 0 CryptReleaseContext
00000002701A 000000427E1A 0 CryptAcquireContextA
000000027032 000000427E32 0 CryptGenRandom
000000027042 000000427E42 0 ADVAPI32.dll
000000027052 000000427E52 0 EncodePointer
000000027062 000000427E62 0 DecodePointer
000000027072 000000427E72 0 ExitProcess
000000027080 000000427E80 0 GetModuleHandleExW
000000027096 000000427E96 0 AreFileApisANSI
0000000270A8 000000427EA8 0 WideCharToMultiByte
0000000270BE 000000427EBE 0 IsDebuggerPresent
0000000270D2 000000427ED2 0 IsProcessorFeaturePresent
0000000270EE 000000427EEE 0 EnterCriticalSection
000000027106 000000427F06 0 LeaveCriticalSection
00000002711E 000000427F1E 0 HeapFree
00000002712A 000000427F2A 0 HeapAlloc
000000027136 000000427F36 0 HeapReAlloc
000000027144 000000427F44 0 GetCommandLineA
000000027156 000000427F56 0 SetLastError
000000027166 000000427F66 0 GetCurrentThreadId
00000002717C 000000427F7C 0 DeleteCriticalSection
000000027194 000000427F94 0 UnhandledExceptionFilter
0000000271B0 000000427FB0 0 SetUnhandledExceptionFilter
0000000271CE 000000427FCE 0 InitializeCriticalSectionAndSpinCount
0000000271F6 000000427FF6 0 GetCurrentProcess
00000002720A 00000042800A 0 TlsAlloc
000000027216 000000428016 0 TlsGetValue
000000027224 000000428024 0 TlsSetValue
000000027232 000000428032 0 TlsFree
00000002723C 00000042803C 0 GetStartupInfoW
00000002724E 00000042804E 0 GetModuleHandleW
000000027262 000000428062 0 LoadLibraryExW
000000027274 000000428074 0 IsValidCodePage
000000027286 000000428086 0 GetACP
000000027290 000000428090 0 GetOEMCP
00000002729C 00000042809C 0 GetCPInfo
0000000272A8 0000004280A8 0 HeapSize
0000000272B4 0000004280B4 0 RtlUnwind
0000000272C0 0000004280C0 0 GetConsoleMode
0000000272D2 0000004280D2 0 ReadConsoleW
0000000272E2 0000004280E2 0 GetConsoleCP
File pos Mem pos ID Text
======== ======= == ====
0000000272F2 0000004280F2 0 FindClose
0000000272FE 0000004280FE 0 FindFirstFileExW
000000027312 000000428112 0 GetDriveTypeW
000000027322 000000428122 0 SystemTimeToTzSpecificLocalTime
000000027344 000000428144 0 FileTimeToSystemTime
00000002735C 00000042815C 0 GetFileType
00000002736A 00000042816A 0 GetProcessHeap
00000002737C 00000042817C 0 GetModuleFileNameA
000000027392 000000428192 0 QueryPerformanceCounter
0000000273AC 0000004281AC 0 GetEnvironmentStringsW
0000000273C6 0000004281C6 0 FreeEnvironmentStringsW
0000000273E0 0000004281E0 0 OutputDebugStringW
0000000273F6 0000004281F6 0 CompareStringW
000000027408 000000428208 0 LCMapStringW
000000027418 000000428218 0 GetStringTypeW
00000002742A 00000042822A 0 SetFilePointerEx
00000002743E 00000042823E 0 SetEnvironmentVariableA
000000027458 000000428258 0 CreateFileW
000000027466 000000428266 0 SetStdHandle
000000027476 000000428276 0 WriteConsoleW
000000027486 000000428286 0 FlushFileBuffers
00000002749A 00000042829A 0 FileTimeToLocalFileTime
0000000274B4 0000004282B4 0 GetFileInformationByHandle
0000000274D2 0000004282D2 0 GetFullPathNameW
0000000274E6 0000004282E6 0 GetCurrentDirectoryW
0000000274FE 0000004282FE 0 SetEndOfFile
00000002750E 00000042830E 0 GetTimeZoneInformation
000000027BDA 0000004295DA 0
000000027CC1 0000004296C1 0 abcdefghijklmnopqrstuvwxyz
000000027CE1 0000004296E1 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ
000000027DFA 0000004297FA 0
000000027EDA 0000004298DA 0 abcdefghijklmnopqrstuvwxyz
000000027EFA 0000004298FA 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ
0000000287F6 00000042A1F6 0 z?aUY
000000028838 00000042A238 0 zc%C1
00000002888B 00000042A28B 0 -64OS
000000028A63 00000042D063 0 <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
000000028A9C 00000042D09C 0 <assembly manifestVersion="1.0" xmlns="urn:schemas-microsoft-com:asm.v1" xmlns:asmv3="urn:schemas-microsoft-com:asm.v3"><assemblyIdentity type="win32" name="consoletest" version="1.0.0.0"></assemblyIdentity><description> my exe </description><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS></application></compatibility></assembly>
00000002900B 00000042E00B 0 0(0/050A0[0
00000002901D 00000042E01D 0 1'1P2
000000029027 00000042E027 0 3:3E3Y3t3{3
00000002904D 00000042E04D 0 ;#;0;C;J;Q;
00000002905B 00000042E05B 0 <3<I<
000000029063 00000042E063 0 <F=K=X=
00000002906D 00000042E06D 0 =<>G>h>|>
000000029085 00000042E085 0 ?!?6?C?
0000000290A1 00000042E0A1 0 0L0Y0b0u0
0000000290BF 00000042E0BF 0 2!232
0000000290C7 00000042E0C7 0 3M3d3
0000000290ED 00000042E0ED 0 565O5W5
000000029109 00000042E109 0 9l9t9
000000029113 00000042E113 0 :E;M;o;
000000029140 00000042E140 0 !0)0R0
00000002914D 00000042E14D 0 1>2M2
000000029159 00000042E159 0 3 3%34393A3G3L3S3Y3
00000002916D 00000042E16D 0 3e3k3p3w3}3
0000000291A1 00000042E1A1 0 4&4+4J4T4s4z4
0000000291C7 00000042E1C7 0 565=5C5Q5[5w5~5
0000000291ED 00000042E1ED 0 6 6/6H6V6]6d6k6r6{6
000000029205 00000042E205 0 6?7X7]7r7
File pos Mem pos ID Text
======== ======= == ====
000000029215 00000042E215 0 7&83898C8Q8b8
000000029241 00000042E241 0 9):6:A:O:o:
00000002924D 00000042E24D 0 :I<M<Q<U<Y<]<a<e<i<m<q<
000000029288 00000042E288 0 &0*0.02060:0>0B0F0J0N0Y0
0000000292A9 00000042E2A9 0 1I1h1
0000000292CD 00000042E2CD 0 3<4V4d4
0000000292DB 00000042E2DB 0 5 52585
0000000292FF 00000042E2FF 0 8.9}9
000000029317 00000042E317 0 : :s:[;
000000029327 00000042E327 0 =/=<=u=
00000002933B 00000042E33B 0 ?<?U?
000000029351 00000042E351 0 2'292G2s2
000000029363 00000042E363 0 3,3;3e3
00000002936F 00000042E36F 0 3%4L4p4
000000029389 00000042E389 0 6e7r7y7
000000029399 00000042E399 0 7,8z8
0000000293A7 00000042E3A7 0 9@9S9o9
0000000293BF 00000042E3BF 0 ;%;S;
0000000293C9 00000042E3C9 0 ;:<B<Q<[<k<
0000000293DD 00000042E3DD 0 >G>|>
00000002941F 00000042E41F 0 3Y657
000000029437 00000042E437 0 8;9*;#>R>
00000002945F 00000042E45F 0 4P5d5
00000002946F 00000042E46F 0 6'6K6
000000029475 00000042E475 0 7E8f9M:
0000000294A1 00000042E4A1 0 4=5c5v5
0000000294B1 00000042E4B1 0 5!686H6c6w6
0000000294F7 00000042E4F7 0 1b3X6
000000029521 00000042E521 0 8,8m8
00000002952F 00000042E52F 0 :/;1<V<
000000029553 00000042E553 0 5 6B6c6"7
000000029561 00000042E561 0 8#8(8r8
000000029579 00000042E579 0 ;:<r<
000000029595 00000042E595 0 1'1r1
0000000295AB 00000042E5AB 0 3!484r4
0000000295BB 00000042E5BB 0 4 5>5
0000000295C1 00000042E5C1 0 5h5p5
0000000295D5 00000042E5D5 0 7*8_9
0000000295EB 00000042E5EB 0 <0<J<g<{<
0000000295F7 00000042E5F7 0 =K=R=g=
000000029609 00000042E609 0 >(>6>E>P>[>m?
00000002962F 00000042E62F 0 0/0s0{0
000000029657 00000042E657 0 2!272A2G2R2u2z2
000000029671 00000042E671 0 3B3H3N3T3Z3
00000002967D 00000042E67D 0 3g3n3u3|3
0000000296A5 00000042E6A5 0 4I4O4U4[4a4g4n4u4|4
0000000296DD 00000042E6DD 0 7C8J8R8
000000029711 00000042E711 0 3m3t3
00000002971B 00000042E71B 0 4!4.4=4G4Y4h4o4
00000002973B 00000042E73B 0 5%5I5v5
000000029779 00000042E779 0 0%0,0004080<0@0D0H0
000000029799 00000042E799 0 10171<1@1D1e1
0000000297B9 00000042E7B9 0 1.24282<2@2
0000000297CD 00000042E7CD 0 4-4<4
0000000297DD 00000042E7DD 0 5\92:=:]:h:
0000000297F5 00000042E7F5 0 :1;6;@;
000000029803 00000042E803 0 <2===C=
00000002980D 00000042E80D 0 >4>S>
000000029813 00000042E813 0 >*?1?W?
000000029829 00000042E829 0 0X3E4
File pos Mem pos ID Text
======== ======= == ====
000000029861 00000042E861 0 =L=T=
00000002986F 00000042E86F 0 >#>2>W>
00000002987D 00000042E87D 0 ?1?J?[?i?n?
0000000298A3 00000042E8A3 0 0%010<0c0
0000000298B9 00000042E8B9 0 1)1/1?1G1M1\1f1l1{1
0000000298DF 00000042E8DF 0 2$272=2C2J2S2X2
0000000298EF 00000042E8EF 0 2f2k2q2y2~2
00000002992B 00000042E92B 0 3$3)3/373<3B3J3O3U3]3b3g3p3u3{3
00000002997B 00000042E97B 0 4 4&4.43494A4F4L4T4Y4_4g4l4r4z4
0000000299B9 00000042E9B9 0 5!5J5]5m5
0000000299D1 00000042E9D1 0 6 616=6D6K6f6p6
0000000299E5 00000042E9E5 0 7v7{7
0000000299FB 00000042E9FB 0 9&9_9t9
000000029A15 00000042EA15 0 :&:.:4:@:E:J:O:X:
000000029A41 00000042EA41 0 <Q<Y<j<
000000029A8F 00000042EA8F 0 181c1
000000029AA1 00000042EAA1 0 3I3@4G4
000000029AB1 00000042EAB1 0 5g5p5x5
000000029AC7 00000042EAC7 0 6B8U8
000000029ADF 00000042EADF 0 ;(<:<N<[<
000000029AF3 00000042EAF3 0 >$?e?q?
000000029B15 00000042EB15 0 8=8C8e8k8
000000029B33 00000042EB33 0 ?H?g?
000000029B63 00000042EB63 0 5+5N5b5
000000029B7F 00000042EB7F 0 647{7
000000029B8D 00000042EB8D 0 7;8X8
000000029BA5 00000042EBA5 0 :#;K;Y;
000000029BAD 00000042EBAD 0 =#=<=C=K=P=T=X=
000000029BD1 00000042EBD1 0 =2>8><>@>D>
000000029BEB 00000042EBEB 0 ?/?a?h?l?p?t?x?|?
000000029C1F 00000042EC1F 0 253s3|3
000000029C2F 00000042EC2F 0 5g5p5M6X6k6
000000029C3B 00000042EC3B 0 6A7J7V8_8K9
000000029C4B 00000042EC4B 0 9 :W:N;t;
000000029C59 00000042EC59 0 ;2<i<
000000029C63 00000042EC63 0 =\=f=
000000029C8B 00000042EC8B 0 3"3,3?3Z3
000000029C9D 00000042EC9D 0 3,4K4
000000029CAB 00000042ECAB 0 4B5z5
000000029CB5 00000042ECB5 0 6/666]6j6o6}6
000000029CCF 00000042ECCF 0 ;3;l;
000000029CE5 00000042ECE5 0 ?%?)?.?4?8?>?B?H?L?Q?W?[?a?e?k?o?u?y?
000000029D21 00000042ED21 0 1m4Z5
000000029D5F 00000042ED5F 0 0&0,02080
000000029D6B 00000042ED6B 0 012@2w2
000000029D7F 00000042ED7F 0 333;3@3l3
000000029D97 00000042ED97 0 444Z4n4y4
000000029DAF 00000042EDAF 0 8-8P8a8g8s8
000000029DDF 00000042EDDF 0 969<9E9K9U9
000000029DF9 00000042EDF9 0 ;.;;;A;};
000000029E0D 00000042EE0D 0 <*=<=
000000029E37 00000042EE37 0 0!0/0
000000029E45 00000042EE45 0 2;2N2#3
000000029E69 00000042EE69 0 :':?:J:\:
000000029E7B 00000042EE7B 0 =">N>h>
000000029E91 00000042EE91 0 0!1-1
000000029EA7 00000042EEA7 0 474}415|9
000000029EB7 00000042EEB7 0 :M:_:
000000029EC1 00000042EEC1 0 :.;4;<;v;
000000029ED3 00000042EED3 0 <\<p<
File pos Mem pos ID Text
======== ======= == ====
000000029EE1 00000042EEE1 0 <6=?=J=Y=x=
000000029EF1 00000042EEF1 0 >)>>>H>
000000029EFB 00000042EEFB 0 ?2?V?
000000029F0F 00000042EF0F 0 0G0S0
000000029F39 00000042EF39 0 7 828D8V8h8z8
000000029F55 00000042EF55 0 9)9;9M9_9
000000029F75 00000042EF75 0 0k1s1
000000029F7F 00000042EF7F 0 212h2
000000029F8B 00000042EF8B 0 5C6O6
000000029FA3 00000042EFA3 0 ;K?O?S?W?[?_?c?g?k?o?s?w?
00000002A019 00000042F019 0 <k>,?
00000002A031 00000042F031 0 5.656k6
00000002A03D 00000042F03D 0 7_7{7
00000002A047 00000042F047 0 8*9;9O9U9Z9a9~9
00000002A05F 00000042F05F 0 :H:r:
00000002A06D 00000042F06D 0 :H;P;\;i;q;y;
00000002A0A5 00000042F0A5 0 <p=v=}=
00000002A0B7 00000042F0B7 0 > >%>+>=>C>N>W>d>l>y>
00000002A0E3 00000042F0E3 0 1\1h1
00000002A101 00000042F101 0 2D3j3
00000002A12F 00000042F12F 0 =N=v=|=
00000002A14F 00000042F14F 0 2X2\2
00000002A16D 00000042F16D 0 6$6,646<6D6L6T6\6d6l6
00000002A18D 00000042F18D 0 0 0$0(0
00000002A1BF 00000042F1BF 0 1 1$1(1,1014181<1@1D1H1L1P1T1X1\1
00000002A1E1 00000042F1E1 0 1d1h1l1p1t1
00000002A203 00000042F203 0 <$<,<4<<<D<L<T<\<d<l<t<|<
00000002A243 00000042F243 0 =$=,=4=<=D=L=T=\=d=l=t=|=
00000002A283 00000042F283 0 >$>,>4><>D>L>T>\>d>l>t>|>
00000002A2C3 00000042F2C3 0 ?$?,?4?<?D?L?T?\?d?l?t?|?
00000002A30B 00000042F30B 0 0$0,040<0D0L0T0\0d0l0t0|0
00000002A34B 00000042F34B 0 1$1,141<1D1L1T1\1d1l1t1|1
00000002A38B 00000042F38B 0 2$2,242<2D2L2T2\2d2l2t2|2
00000002A3CB 00000042F3CB 0 3 3(30383@3H3P3X3
00000002A3DD 00000042F3DD 0 3h3p3x3
00000002A40B 00000042F40B 0 4 4(40484@4H4P4X4
00000002A41D 00000042F41D 0 4h4p4x4
00000002A44B 00000042F44B 0 5 5(50585@5H5P5X5
00000002A45D 00000042F45D 0 5h5p5x5
00000002A48B 00000042F48B 0 6 6(60686@6H6P6X6
00000002A49D 00000042F49D 0 6h6p6x6
00000002A4CB 00000042F4CB 0 7 7(70787@7H7P7X7
00000002A4DD 00000042F4DD 0 7h7p7x7
00000002A50B 00000042F50B 0 8 8(80888@8H8P8X8
00000002A51D 00000042F51D 0 8h8p8x8
00000002A54B 00000042F54B 0 9 9(90989@9H9P9X9
00000002A55D 00000042F55D 0 9h9p9x9
00000002A590 00000042F590 0 @5D5H5L5P5T5X5\5
00000002A5A1 00000042F5A1 0 5d5t5$6(6,606
00000002A5BD 00000042F5BD 0 7d8h8l8p8$9(9,909
00000002A5ED 00000042F5ED 0 585X5x5
00000002A601 00000042F601 0 6(6D6H6d6h6
00000002A615 00000042F615 0 7(7H7T7p7
00000002A627 00000042F627 0 808P8p8|8
00000002A639 00000042F639 0 989T9X9
00000002A64F 00000042F64F 0 4L5P5T5X5\5
00000002A65B 00000042F65B 0 5d5h5l5p5
00000002A679 00000042F679 0 < <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<
00000002A69B 00000042F69B 0 <d<h<l<p<t<x<|<
00000002A6F5 00000042F6F5 0 = =$=(=,=0=4=8=<=@=D=H=L=P=T=X=\=
File pos Mem pos ID Text
======== ======= == ====
00000002A72D 00000042F72D 0 >$>@>H>L>P>T>X>\>
00000002A73F 00000042F73F 0 >d>h>l>x>|>
000000021430 000000422230 0 mscoree.dll
000000021468 000000422268 0 (null)
0000000214D4 0000004222D4 0 kernel32.dll
000000022138 000000422F38 0 runtime error
000000022178 000000422F78 0 Program:
00000002218C 000000422F8C 0 <program name unknown>
0000000221D0 000000422FD0 0 Microsoft Visual C++ Runtime Library
00000002222B 00000042302B 0 Bja-JP
000000022238 000000423038 0 zh-CN
000000022244 000000423044 0 ko-KR
000000022250 000000423050 0 zh-TW
000000022264 000000423064 0 UTF-8
000000022270 000000423070 0 UTF-16LE
000000022284 000000423084 0 UNICODE
000000022814 000000423614 0 Sunday
000000022824 000000423624 0 Monday
000000022834 000000423634 0 Tuesday
000000022844 000000423644 0 Wednesday
000000022858 000000423658 0 Thursday
00000002286C 00000042366C 0 Friday
00000002287C 00000042367C 0 Saturday
0000000228F0 0000004236F0 0 January
000000022900 000000423700 0 February
000000022914 000000423714 0 March
000000022920 000000423720 0 April
000000022944 000000423744 0 August
000000022954 000000423754 0 September
000000022968 000000423768 0 October
000000022978 000000423778 0 November
00000002298C 00000042378C 0 December
0000000229B0 0000004237B0 0 MM/dd/yy
0000000229C4 0000004237C4 0 dddd, MMMM dd, yyyy
0000000229EC 0000004237EC 0 HH:mm:ss
000000022A00 000000423800 0 en-US
000000022D48 000000423B48 0 USER32.DLL
000000023C20 000000424A20 0 zh-CHS
000000023E24 000000424C24 0 ar-SA
000000023E30 000000424C30 0 bg-BG
000000023E3C 000000424C3C 0 ca-ES
000000023E48 000000424C48 0 cs-CZ
000000023E54 000000424C54 0 da-DK
000000023E60 000000424C60 0 de-DE
000000023E6C 000000424C6C 0 el-GR
000000023E78 000000424C78 0 fi-FI
000000023E84 000000424C84 0 fr-FR
000000023E90 000000424C90 0 he-IL
000000023E9C 000000424C9C 0 hu-HU
000000023EA8 000000424CA8 0 is-IS
000000023EB4 000000424CB4 0 it-IT
000000023EC0 000000424CC0 0 nl-NL
000000023ECC 000000424CCC 0 nb-NO
000000023ED8 000000424CD8 0 pl-PL
000000023EE4 000000424CE4 0 pt-BR
000000023EF0 000000424CF0 0 ro-RO
000000023EFC 000000424CFC 0 ru-RU
000000023F08 000000424D08 0 hr-HR
000000023F14 000000424D14 0 sk-SK
000000023F20 000000424D20 0 sq-AL
File pos Mem pos ID Text
======== ======= == ====
000000023F2C 000000424D2C 0 sv-SE
000000023F38 000000424D38 0 th-TH
000000023F44 000000424D44 0 tr-TR
000000023F50 000000424D50 0 ur-PK
000000023F5C 000000424D5C 0 id-ID
000000023F68 000000424D68 0 uk-UA
000000023F74 000000424D74 0 be-BY
000000023F80 000000424D80 0 sl-SI
000000023F8C 000000424D8C 0 et-EE
000000023F98 000000424D98 0 lv-LV
000000023FA4 000000424DA4 0 lt-LT
000000023FB0 000000424DB0 0 fa-IR
000000023FBC 000000424DBC 0 vi-VN
000000023FC8 000000424DC8 0 hy-AM
000000023FD4 000000424DD4 0 az-AZ-Latn
000000023FEC 000000424DEC 0 eu-ES
000000023FF8 000000424DF8 0 mk-MK
000000024004 000000424E04 0 tn-ZA
000000024010 000000424E10 0 xh-ZA
00000002401C 000000424E1C 0 zu-ZA
000000024028 000000424E28 0 af-ZA
000000024034 000000424E34 0 ka-GE
000000024040 000000424E40 0 fo-FO
00000002404C 000000424E4C 0 hi-IN
000000024058 000000424E58 0 mt-MT
000000024064 000000424E64 0 se-NO
000000024070 000000424E70 0 ms-MY
00000002407C 000000424E7C 0 kk-KZ
000000024088 000000424E88 0 ky-KG
000000024094 000000424E94 0 sw-KE
0000000240A0 000000424EA0 0 uz-UZ-Latn
0000000240B8 000000424EB8 0 tt-RU
0000000240C4 000000424EC4 0 bn-IN
0000000240D0 000000424ED0 0 pa-IN
0000000240DC 000000424EDC 0 gu-IN
0000000240E8 000000424EE8 0 ta-IN
0000000240F4 000000424EF4 0 te-IN
000000024100 000000424F00 0 kn-IN
00000002410C 000000424F0C 0 ml-IN
000000024118 000000424F18 0 mr-IN
000000024124 000000424F24 0 sa-IN
000000024130 000000424F30 0 mn-MN
00000002413C 000000424F3C 0 cy-GB
000000024148 000000424F48 0 gl-ES
000000024154 000000424F54 0 kok-IN
000000024164 000000424F64 0 syr-SY
000000024174 000000424F74 0 div-MV
000000024184 000000424F84 0 quz-BO
000000024194 000000424F94 0 ns-ZA
0000000241A0 000000424FA0 0 mi-NZ
0000000241AC 000000424FAC 0 ar-IQ
0000000241B8 000000424FB8 0 de-CH
0000000241C4 000000424FC4 0 en-GB
0000000241D0 000000424FD0 0 es-MX
0000000241DC 000000424FDC 0 fr-BE
0000000241E8 000000424FE8 0 it-CH
0000000241F4 000000424FF4 0 nl-BE
000000024200 000000425000 0 nn-NO
00000002420C 00000042500C 0 pt-PT
000000024218 000000425018 0 sr-SP-Latn
File pos Mem pos ID Text
======== ======= == ====
000000024230 000000425030 0 sv-FI
00000002423C 00000042503C 0 az-AZ-Cyrl
000000024254 000000425054 0 se-SE
000000024260 000000425060 0 ms-BN
00000002426C 00000042506C 0 uz-UZ-Cyrl
000000024284 000000425084 0 quz-EC
000000024294 000000425094 0 ar-EG
0000000242A0 0000004250A0 0 zh-HK
0000000242AC 0000004250AC 0 de-AT
0000000242B8 0000004250B8 0 en-AU
0000000242C4 0000004250C4 0 es-ES
0000000242D0 0000004250D0 0 fr-CA
0000000242DC 0000004250DC 0 sr-SP-Cyrl
0000000242F4 0000004250F4 0 se-FI
000000024300 000000425100 0 quz-PE
000000024310 000000425110 0 ar-LY
00000002431C 00000042511C 0 zh-SG
000000024328 000000425128 0 de-LU
000000024334 000000425134 0 en-CA
000000024340 000000425140 0 es-GT
00000002434C 00000042514C 0 fr-CH
000000024358 000000425158 0 hr-BA
000000024364 000000425164 0 smj-NO
000000024374 000000425174 0 ar-DZ
000000024380 000000425180 0 zh-MO
00000002438C 00000042518C 0 de-LI
000000024398 000000425198 0 en-NZ
0000000243A4 0000004251A4 0 es-CR
0000000243B0 0000004251B0 0 fr-LU
0000000243BC 0000004251BC 0 bs-BA-Latn
0000000243D4 0000004251D4 0 smj-SE
0000000243E4 0000004251E4 0 ar-MA
0000000243F0 0000004251F0 0 en-IE
0000000243FC 0000004251FC 0 es-PA
000000024408 000000425208 0 fr-MC
000000024414 000000425214 0 sr-BA-Latn
00000002442C 00000042522C 0 sma-NO
00000002443C 00000042523C 0 ar-TN
000000024448 000000425248 0 en-ZA
000000024454 000000425254 0 es-DO
000000024460 000000425260 0 sr-BA-Cyrl
000000024478 000000425278 0 sma-SE
000000024488 000000425288 0 ar-OM
000000024494 000000425294 0 en-JM
0000000244A0 0000004252A0 0 es-VE
0000000244AC 0000004252AC 0 sms-FI
0000000244BC 0000004252BC 0 ar-YE
0000000244C8 0000004252C8 0 en-CB
0000000244D4 0000004252D4 0 es-CO
0000000244E0 0000004252E0 0 smn-FI
0000000244F0 0000004252F0 0 ar-SY
0000000244FC 0000004252FC 0 en-BZ
000000024508 000000425308 0 es-PE
000000024514 000000425314 0 ar-JO
000000024520 000000425320 0 en-TT
00000002452C 00000042532C 0 es-AR
000000024538 000000425338 0 ar-LB
000000024544 000000425344 0 en-ZW
000000024550 000000425350 0 es-EC
00000002455C 00000042535C 0 ar-KW
File pos Mem pos ID Text
======== ======= == ====
000000024568 000000425368 0 en-PH
000000024574 000000425374 0 es-CL
000000024580 000000425380 0 ar-AE
00000002458C 00000042538C 0 es-UY
000000024598 000000425398 0 ar-BH
0000000245A4 0000004253A4 0 es-PY
0000000245B0 0000004253B0 0 ar-QA
0000000245BC 0000004253BC 0 es-BO
0000000245C8 0000004253C8 0 es-SV
0000000245D4 0000004253D4 0 es-HN
0000000245E0 0000004253E0 0 es-NI
0000000245EC 0000004253EC 0 es-PR
0000000245F8 0000004253F8 0 zh-CHT
000000024610 000000425410 0 af-za
00000002461C 00000042541C 0 ar-ae
000000024628 000000425428 0 ar-bh
000000024634 000000425434 0 ar-dz
000000024640 000000425440 0 ar-eg
00000002464C 00000042544C 0 ar-iq
000000024658 000000425458 0 ar-jo
000000024664 000000425464 0 ar-kw
000000024670 000000425470 0 ar-lb
00000002467C 00000042547C 0 ar-ly
000000024688 000000425488 0 ar-ma
000000024694 000000425494 0 ar-om
0000000246A0 0000004254A0 0 ar-qa
0000000246AC 0000004254AC 0 ar-sa
0000000246B8 0000004254B8 0 ar-sy
0000000246C4 0000004254C4 0 ar-tn
0000000246D0 0000004254D0 0 ar-ye
0000000246DC 0000004254DC 0 az-az-cyrl
0000000246F4 0000004254F4 0 az-az-latn
00000002470C 00000042550C 0 be-by
000000024718 000000425518 0 bg-bg
000000024724 000000425524 0 bn-in
000000024730 000000425530 0 bs-ba-latn
000000024748 000000425548 0 ca-es
000000024754 000000425554 0 cs-cz
000000024760 000000425560 0 cy-gb
00000002476C 00000042556C 0 da-dk
000000024778 000000425578 0 de-at
000000024784 000000425584 0 de-ch
000000024790 000000425590 0 de-de
00000002479C 00000042559C 0 de-li
0000000247A8 0000004255A8 0 de-lu
0000000247B4 0000004255B4 0 div-mv
0000000247C4 0000004255C4 0 el-gr
0000000247D0 0000004255D0 0 en-au
0000000247DC 0000004255DC 0 en-bz
0000000247E8 0000004255E8 0 en-ca
0000000247F4 0000004255F4 0 en-cb
000000024800 000000425600 0 en-gb
00000002480C 00000042560C 0 en-ie
000000024818 000000425618 0 en-jm
000000024824 000000425624 0 en-nz
000000024830 000000425630 0 en-ph
00000002483C 00000042563C 0 en-tt
000000024848 000000425648 0 en-us
000000024854 000000425654 0 en-za
000000024860 000000425660 0 en-zw
File pos Mem pos ID Text
======== ======= == ====
00000002486C 00000042566C 0 es-ar
000000024878 000000425678 0 es-bo
000000024884 000000425684 0 es-cl
000000024890 000000425690 0 es-co
00000002489C 00000042569C 0 es-cr
0000000248A8 0000004256A8 0 es-do
0000000248B4 0000004256B4 0 es-ec
0000000248C0 0000004256C0 0 es-es
0000000248CC 0000004256CC 0 es-gt
0000000248D8 0000004256D8 0 es-hn
0000000248E4 0000004256E4 0 es-mx
0000000248F0 0000004256F0 0 es-ni
0000000248FC 0000004256FC 0 es-pa
000000024908 000000425708 0 es-pe
000000024914 000000425714 0 es-pr
000000024920 000000425720 0 es-py
00000002492C 00000042572C 0 es-sv
000000024938 000000425738 0 es-uy
000000024944 000000425744 0 es-ve
000000024950 000000425750 0 et-ee
00000002495C 00000042575C 0 eu-es
000000024968 000000425768 0 fa-ir
000000024974 000000425774 0 fi-fi
000000024980 000000425780 0 fo-fo
00000002498C 00000042578C 0 fr-be
000000024998 000000425798 0 fr-ca
0000000249A4 0000004257A4 0 fr-ch
0000000249B0 0000004257B0 0 fr-fr
0000000249BC 0000004257BC 0 fr-lu
0000000249C8 0000004257C8 0 fr-mc
0000000249D4 0000004257D4 0 gl-es
0000000249E0 0000004257E0 0 gu-in
0000000249EC 0000004257EC 0 he-il
0000000249F8 0000004257F8 0 hi-in
000000024A04 000000425804 0 hr-ba
000000024A10 000000425810 0 hr-hr
000000024A1C 00000042581C 0 hu-hu
000000024A28 000000425828 0 hy-am
000000024A34 000000425834 0 id-id
000000024A40 000000425840 0 is-is
000000024A4C 00000042584C 0 it-ch
000000024A58 000000425858 0 it-it
000000024A64 000000425864 0 ja-jp
000000024A70 000000425870 0 ka-ge
000000024A7C 00000042587C 0 kk-kz
000000024A88 000000425888 0 kn-in
000000024A94 000000425894 0 kok-in
000000024AA4 0000004258A4 0 ko-kr
000000024AB0 0000004258B0 0 ky-kg
000000024ABC 0000004258BC 0 lt-lt
000000024AC8 0000004258C8 0 lv-lv
000000024AD4 0000004258D4 0 mi-nz
000000024AE0 0000004258E0 0 mk-mk
000000024AEC 0000004258EC 0 ml-in
000000024AF8 0000004258F8 0 mn-mn
000000024B04 000000425904 0 mr-in
000000024B10 000000425910 0 ms-bn
000000024B1C 00000042591C 0 ms-my
000000024B28 000000425928 0 mt-mt
000000024B34 000000425934 0 nb-no
File pos Mem pos ID Text
======== ======= == ====
000000024B40 000000425940 0 nl-be
000000024B4C 00000042594C 0 nl-nl
000000024B58 000000425958 0 nn-no
000000024B64 000000425964 0 ns-za
000000024B70 000000425970 0 pa-in
000000024B7C 00000042597C 0 pl-pl
000000024B88 000000425988 0 pt-br
000000024B94 000000425994 0 pt-pt
000000024BA0 0000004259A0 0 quz-bo
000000024BB0 0000004259B0 0 quz-ec
000000024BC0 0000004259C0 0 quz-pe
000000024BD0 0000004259D0 0 ro-ro
000000024BDC 0000004259DC 0 ru-ru
000000024BE8 0000004259E8 0 sa-in
000000024BF4 0000004259F4 0 se-fi
000000024C00 000000425A00 0 se-no
000000024C0C 000000425A0C 0 se-se
000000024C18 000000425A18 0 sk-sk
000000024C24 000000425A24 0 sl-si
000000024C30 000000425A30 0 sma-no
000000024C40 000000425A40 0 sma-se
000000024C50 000000425A50 0 smj-no
000000024C60 000000425A60 0 smj-se
000000024C70 000000425A70 0 smn-fi
000000024C80 000000425A80 0 sms-fi
000000024C90 000000425A90 0 sq-al
000000024C9C 000000425A9C 0 sr-ba-cyrl
000000024CB4 000000425AB4 0 sr-ba-latn
000000024CCC 000000425ACC 0 sr-sp-cyrl
000000024CE4 000000425AE4 0 sr-sp-latn
000000024CFC 000000425AFC 0 sv-fi
000000024D08 000000425B08 0 sv-se
000000024D14 000000425B14 0 sw-ke
000000024D20 000000425B20 0 syr-sy
000000024D30 000000425B30 0 ta-in
000000024D3C 000000425B3C 0 te-in
000000024D48 000000425B48 0 th-th
000000024D54 000000425B54 0 tn-za
000000024D60 000000425B60 0 tr-tr
000000024D6C 000000425B6C 0 tt-ru
000000024D78 000000425B78 0 uk-ua
000000024D84 000000425B84 0 ur-pk
000000024D90 000000425B90 0 uz-uz-cyrl
000000024DA8 000000425BA8 0 uz-uz-latn
000000024DC0 000000425BC0 0 vi-vn
000000024DCC 000000425BCC 0 xh-za
000000024DD8 000000425BD8 0 zh-chs
000000024DE8 000000425BE8 0 zh-cht
000000024DF8 000000425BF8 0 zh-cn
000000024E04 000000425C04 0 zh-hk
000000024E10 000000425C10 0 zh-mo
000000024E1C 000000425C1C 0 zh-sg
000000024E28 000000425C28 0 zh-tw
000000024E34 000000425C34 0 zu-za
000000024E4B 000000425C4B 0 2.exe
000000025698 000000426498 0 CONOUT$
000000026220 000000427020 0 %s\updatea.bin
000000026248 000000427048 0 %s\updatea2.bin