.- - -----÷M÷E÷N÷U÷------------------------------------------------------------- --- ---- -------------.
! WALL ! STATS ! GOODIES ! YARA ! FAQ ! RSS ! EMV !
`-------------- - --- ---------- -------- -------- -------- -------- ----------------- - ---- ---- --'
ATM MALWARE NOTICE
6efedf9bde951ad6c3e240ec498767bb693ecc8fa62040e624c5a7fa21c5bdaa
Date...........: 2016-08-21
Family.........: Trojan.ATMDispCash.4
File name......: XFSConsole.exe
File size......: 42.00 KB
Type file......: EXE/Windows
Virscan........: VT - HA
PDB Path found.: C:\Data\Visual Studio 2010\Projects\Batch\Test-2015 - Diebold\Test-Diebold\XFSProject\Release\XFSConsole.pdb
Documentation..: https://securelist.com/atm-malware-from-latin-america-to-the-world/83836/
Entropy:
Binary Histogram:
=== PEDUMP REPORT ===
=== MZ Header ===
signature: "MZ"
bytes_in_last_block: 144 0x90
blocks_in_file: 3 3
num_relocs: 0 0
header_paragraphs: 4 4
min_extra_paragraphs: 0 0
max_extra_paragraphs: 65535 0xffff
ss: 0 0
sp: 184 0xb8
checksum: 0 0
ip: 0 0
cs: 0 0
reloc_table_offset: 64 0x40
overlay_number: 0 0
reserved0: 0 0
oem_id: 0 0
oem_info: 0 0
reserved2: 0 0
reserved3: 0 0
reserved4: 0 0
reserved5: 0 0
reserved6: 0 0
lfanew: 256 0x100
=== DOS STUB ===
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno|
00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
=== RICH Header ===
LIB_ID VERSION TIMES_USED
152 98 20115 4e93 1 1
158 9e 40219 9d1b 1 1
170 aa 40219 9d1b 20 14
156 9c 40219 9d1b 4 4
171 ab 40219 9d1b 6 6
4 4 8447 20ff 2 2
147 93 30729 7809 7 7
1 1 0 0 191 bf
175 af 40219 9d1b 11 b
157 9d 40219 9d1b 1 1
=== PE Header ===
signature: "PE\x00\x00"
# IMAGE_FILE_HEADER:
Machine: 332 0x14c x86
NumberOfSections: 5 5
TimeDateStamp: "2016-08-21 09:06:30"
PointerToSymbolTable: 0 0
NumberOfSymbols: 0 0
SizeOfOptionalHeader: 224 0xe0
Characteristics: 258 0x102 EXECUTABLE_IMAGE, 32BIT_MACHINE
# IMAGE_OPTIONAL_HEADER32:
Magic: 267 0x10b 32-bit executable
LinkerVersion: 10.0
SizeOfCode: 22528 0x5800
SizeOfInitializedData: 19456 0x4c00
SizeOfUninitializedData: 0 0
AddressOfEntryPoint: 23652 0x5c64
BaseOfCode: 4096 0x1000
BaseOfData: 28672 0x7000
ImageBase: 4194304 0x400000
SectionAlignment: 4096 0x1000
FileAlignment: 512 0x200
OperatingSystemVersion: 5.1
ImageVersion: 0.0
SubsystemVersion: 5.1
Reserved1: 0 0
SizeOfImage: 57344 0xe000
SizeOfHeaders: 1024 0x400
CheckSum: 69252 0x10e84
Subsystem: 3 3 WINDOWS_CUI
DllCharacteristics: 33088 0x8140 DYNAMIC_BASE, NX_COMPAT
TERMINAL_SERVER_AWARE
SizeOfStackReserve: 1048576 0x100000
SizeOfStackCommit: 4096 0x1000
SizeOfHeapReserve: 1048576 0x100000
SizeOfHeapCommit: 4096 0x1000
LoaderFlags: 0 0
NumberOfRvaAndSizes: 16 0x10
=== DATA DIRECTORY ===
EXPORT rva:0x 0 size:0x 0
IMPORT rva:0x 9514 size:0x 8c
RESOURCE rva:0x c000 size:0x 1b4
EXCEPTION rva:0x 0 size:0x 0
SECURITY rva:0x 0 size:0x 0
BASERELOC rva:0x d000 size:0x 8e4
DEBUG rva:0x 72a0 size:0x 1c
ARCHITECTURE rva:0x 0 size:0x 0
GLOBALPTR rva:0x 0 size:0x 0
TLS rva:0x 0 size:0x 0
LOAD_CONFIG rva:0x 8b88 size:0x 40
Bound_IAT rva:0x 0 size:0x 0
IAT rva:0x 7000 size:0x 274
Delay_IAT rva:0x 0 size:0x 0
CLR_Header rva:0x 0 size:0x 0
rva:0x 0 size:0x 0
=== SECTIONS ===
NAME RVA VSZ RAW_SZ RAW_PTR nREL REL_PTR nLINE LINE_PTR FLAGS
.text 1000 56c9 5800 400 0 0 0 0 60000020 R-X CODE
.rdata 7000 37d0 3800 5c00 0 0 0 0 40000040 R-- IDATA
.data b000 92c 400 9400 0 0 0 0 c0000040 RW- IDATA
.rsrc c000 1b4 200 9800 0 0 0 0 40000040 R-- IDATA
.reloc d000 d84 e00 9a00 0 0 0 0 42000040 R-- IDATA DISCARDABLE
=== RESOURCES ===
FILE_OFFSET CP LANG SIZE TYPE NAME
0x9858 1252 0x409 346 MANIFEST #1
=== IMPORTS ===
MODULE_NAME HINT ORD FUNCTION_NAME
KERNEL32.dll 4d3 UnhandledExceptionFilter
KERNEL32.dll 1c0 GetCurrentProcess
KERNEL32.dll 4c0 TerminateProcess
KERNEL32.dll 2d3 HeapSetInformation
KERNEL32.dll 4a5 SetUnhandledExceptionFilter
KERNEL32.dll 2ec InterlockedExchange
KERNEL32.dll ca DecodePointer
KERNEL32.dll ea EncodePointer
KERNEL32.dll 4b2 Sleep
KERNEL32.dll 300 IsDebuggerPresent
KERNEL32.dll 3a7 QueryPerformanceCounter
KERNEL32.dll 293 GetTickCount
KERNEL32.dll 1c5 GetCurrentThreadId
KERNEL32.dll 1c1 GetCurrentProcessId
KERNEL32.dll 279 GetSystemTimeAsFileTime
KERNEL32.dll 1b7 GetConsoleWindow
KERNEL32.dll b5 CreateThread
KERNEL32.dll 33f LoadLibraryW
KERNEL32.dll 218 GetModuleHandleW
KERNEL32.dll 2e9 InterlockedCompareExchange
USER32.dll fa FindWindowW
USER32.dll 196 GetWindowLongW
USER32.dll 311 UpdateWindow
USER32.dll 2df ShowWindow
USER32.dll 1ed LoadIconW
USER32.dll 123 GetDesktopWindow
USER32.dll 265 ReleaseDC
USER32.dll f6 FillRect
USER32.dll 121 GetDC
USER32.dll 300 UnhookWindowsHookEx
USER32.dll 2cf SetWindowsHookExW
USER32.dll 1c CallNextHookEx
USER32.dll 107 GetAsyncKeyState
USER32.dll 13c GetKeyNameTextW
USER32.dll af DispatchMessageW
USER32.dll 2fc TranslateMessage
USER32.dll 15d GetMessageW
USER32.dll 6e CreateWindowExW
USER32.dll 9c DefWindowProcW
USER32.dll 24e RegisterClassW
GDI32.dll 277 SelectObject
GDI32.dll 35 CreateDIBSection
GDI32.dll 1cb GetDeviceCaps
GDI32.dll 30 CreateCompatibleDC
GDI32.dll 4b CreatePen
GDI32.dll 13 BitBlt
GDI32.dll e3 DeleteDC
GDI32.dll 20d GetStockObject
GDI32.dll 54 CreateSolidBrush
MSXFS.dll 20 WFSRegister
MSXFS.dll 22 WFSStartUp
MSXFS.dll 15 WFSClose
MSXFS.dll 24 WFSUnlock
MSXFS.dll 19 WFSExecute
MSXFS.dll 1e WFSLock
MSXFS.dll 1b WFSGetInfo
MSXFS.dll 1f WFSOpen
MSVCP100.dll 3ec ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
MSVCP100.dll 615 ?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
MSVCP100.dll 1c ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
MSVCP100.dll 4e6 ?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
MSVCP100.dll 430 ?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
MSVCP100.dll 1f6 ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
MSVCP100.dll 1b0 ?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
MSVCP100.dll 3ff ?id@?$codecvt@DDH@std@@2V0locale@2@A
MSVCP100.dll 13a ??Bid@locale@std@@QAEIXZ
MSVCP100.dll 1f3 ?_Incref@facet@locale@std@@QAEXXZ
MSVCP100.dll 1d2 ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
MSVCP100.dll 291 ?always_noconv@codecvt_base@std@@QBE_NXZ
MSVCP100.dll 1a8 ?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
MSVCP100.dll 28c ?_Xlength_error@std@@YAXPBD@Z
MSVCP100.dll 28e ?_Xout_of_range@std@@YAXPBD@Z
MSVCP100.dll 2a7 ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
MSVCP100.dll 391 ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
MSVCP100.dll 59c ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
MSVCP100.dll 253 ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
MSVCP100.dll 60d ?uncaught_exception@std@@YA_NXZ
MSVCP100.dll 5c5 ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
MSVCP100.dll 5c8 ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
MSVCP100.dll 108 ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
MSVCP100.dll 75 ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
MSVCP100.dll 7e ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
MSVCP100.dll 145 ??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
MSVCP100.dll 81 ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
MSVCP100.dll 19a ?_BADOFF@std@@3_JB
MSVCP100.dll 638 ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
MSVCP100.dll 5ac ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
MSVCP100.dll 635 ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
MSVCP100.dll 26 ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
MSVCP100.dll 3 ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
MSVCP100.dll 591 ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
MSVCP100.dll 299 ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
MSVCP100.dll 19e ?_Decref@facet@locale@std@@QAEPAV123@XZ
MSVCP100.dll 9e ??1_Lockit@std@@QAE@XZ
MSVCP100.dll 60 ??0_Lockit@std@@QAE@H@Z
MSVCR100.dll 15 ??0bad_cast@std@@QAE@PBD@Z
MSVCR100.dll 121 _CxxThrowException
MSVCR100.dll 5d3 memset
MSVCR100.dll 1ef _controlfp_s
MSVCR100.dll 2b8 _invoke_watson
MSVCR100.dll 221 _except_handler4_common
MSVCR100.dll ee ?_type_info_dtor_internal_method@type_info@@QAEXXZ
MSVCR100.dll 102 ?terminate@@YAXXZ
MSVCR100.dll 1fb _crt_debugger_hook
MSVCR100.dll 19f __set_app_type
MSVCR100.dll 245 _fmode
MSVCR100.dll 1eb _commode
MSVCR100.dll 1a2 __setusermatherr
MSVCR100.dll 1ec _configthreadlocale
MSVCR100.dll 2b1 _initterm_e
MSVCR100.dll 2b0 _initterm
MSVCR100.dll 65 ??3@YAXPAX@Z
MSVCR100.dll 24 ??0exception@std@@QAE@ABV01@@Z
MSVCR100.dll 10d ?what@exception@std@@UBEPBDXZ
MSVCR100.dll 5d ??1exception@std@@UAE@XZ
MSVCR100.dll 22 ??0exception@std@@QAE@ABQBD@Z
MSVCR100.dll 63 ??2@YAPAXI@Z
MSVCR100.dll 5d1 memmove
MSVCR100.dll 5ef sprintf
MSVCR100.dll 566 atoi
MSVCR100.dll 471 _time64
MSVCR100.dll 322 _localtime64_s
MSVCR100.dll 321 _localtime64
MSVCR100.dll 324 _lock_file
MSVCR100.dll 48e _unlock_file
MSVCR100.dll 585 fputc
MSVCR100.dll 596 fwrite
MSVCR100.dll 61f ungetc
MSVCR100.dll 57a fgetc
MSVCR100.dll 5d0 memcpy_s
MSVCR100.dll 259 _fseeki64
MSVCR100.dll 57b fgetpos
MSVCR100.dll 592 fsetpos
MSVCR100.dll 5eb setvbuf
MSVCR100.dll 579 fflush
MSVCR100.dll 576 fclose
MSVCR100.dll 14 ??0bad_cast@std@@QAE@ABV01@@Z
MSVCR100.dll 59 ??1bad_cast@std@@UAE@XZ
MSVCR100.dll 5cf memcpy
MSVCR100.dll 13a __CxxFrameHandler3
MSVCR100.dll 48d _unlock
MSVCR100.dll 15b __dllonexit
MSVCR100.dll 323 _lock
MSVCR100.dll 3c9 _onexit
MSVCR100.dll 1c5 _amsg_exit
MSVCR100.dll 1b6 __wgetmainargs
MSVCR100.dll 1dc _cexit
MSVCR100.dll 22a _exit
MSVCR100.dll 12d _XcptFilter
MSVCR100.dll 573 exit
MSVCR100.dll 1b7 __winitenv
=== Packer / Compiler ===
MS Visual C++ v8.0
File pos Mem pos ID Text
======== ======= == ====
00000000004D 00000040004D 0 !This program cannot be run in DOS mode.
0000000000DF 0000004000DF 0 YRichMI
0000000001F8 0000004001F8 0 .text
000000000220 000000400220 0 .rdata
000000000247 000000400247 0 @.data
000000000270 000000400270 0 .rsrc
000000000297 000000400297 0 @.reloc
00000000041F 00000040101F 0 D$8SVW
0000000005B5 0000004011B5 0 QSSh/
0000000006CE 0000004012CE 0 T$$hP
000000000AEE 0000004016EE 0 s'PWV
0000000022FD 000000402EFD 0 u PPPh
000000003B7F 00000040477F 0 S<PPR
000000003C31 000000404831 0 KTQVj
000000003EC7 000000404AC7 0 W<PPR
000000004065 000000404C65 0 _hPt@
000000004100 000000404D00 0 CHVW9
00000000414F 000000404D4F 0 KTPVWQ
00000000467F 00000040527F 0 STRVj
000000004A2D 00000040562D 0 PWWWWWh
000000004AA8 0000004056A8 0 $SVW3
000000005544 000000406144 0 VVVVV
000000005ECC 0000004072CC 0 CDMInit
000000005ED4 0000004072D4 0 DBD_AdvFuncDisp
000000005EE4 0000004072E4 0 CDM-WFSOpen
000000005EF0 0000004072F0 0 CDM-WFS_INF_CDM_STATUS
000000005F08 000000407308 0 CDM-WFS_INF_CDM_STATUS:
000000005F20 000000407320 0 WFS_INF_CDM_CASH_UNIT_INFO
000000005F3C 00000040733C 0 CDM-WFSLock
000000005F48 000000407348 0 WFS_CMD_CDM_START_EXCHANGE
000000005F64 000000407364 0 WFS_CMD_CDM_END_EXCHANGE
000000005F80 000000407380 0 CDM-WFSUnlock
000000005F90 000000407390 0 CDM-WFSClose
000000005FA0 0000004073A0 0 CDM-WFS_INF_CDM_CASH_UNIT_INFO
000000005FC0 0000004073C0 0 CDM-WFS_CMD_CDM_DISPENSE
000000005FDC 0000004073DC 0 No Cassette Selected
00000000601C 00000040741C 0 Command:
000000006028 000000407428 0 WFS_PIN_FK_FDK07
00000000603C 00000040743C 0 WFS_PIN_FK_FDK08
000000006050 000000407450 0 string too long
000000006060 000000407460 0 invalid string position
000000006088 000000407488 0 WFS_SUCCESS
000000006094 000000407494 0 WFS_ERR_ALREADY_STARTED
0000000060AC 0000004074AC 0 WFS_ERR_API_VER_TOO_HIGH
0000000060C8 0000004074C8 0 WFS_ERR_API_VER_TOO_LOW
0000000060E0 0000004074E0 0 WFS_ERR_CANCELED
0000000060F4 0000004074F4 0 WFS_ERR_CFG_INVALID_HKEY
000000006110 000000407510 0 WFS_ERR_CFG_INVALID_NAME
00000000612C 00000040752C 0 WFS_ERR_CFG_INVALID_SUBKEY
000000006148 000000407548 0 WFS_ERR_CFG_INVALID_VALUE
000000006164 000000407564 0 WFS_ERR_CFG_KEY_NOT_EMPTY
000000006180 000000407580 0 WFS_ERR_CFG_NAME_TOO_LONG
00000000619C 00000040759C 0 WFS_ERR_CFG_NO_MORE_ITEMS
0000000061B8 0000004075B8 0 WFS_ERR_CFG_VALUE_TOO_LONG
0000000061D4 0000004075D4 0 WFS_ERR_DEV_NOT_READY
0000000061EC 0000004075EC 0 WFS_ERR_HARDWARE_ERROR
000000006204 000000407604 0 WFS_ERR_INTERNAL_ERROR
00000000621C 00000040761C 0 WFS_ERR_INVALID_ADDRESS
000000006234 000000407634 0 WFS_ERR_INVALID_APP_HANDLE
000000006250 000000407650 0 WFS_ERR_INVALID_BUFFER
File pos Mem pos ID Text
======== ======= == ====
000000006268 000000407668 0 WFS_ERR_INVALID_CATEGORY
000000006284 000000407684 0 WFS_ERR_INVALID_COMMAND
00000000629C 00000040769C 0 WFS_ERR_INVALID_EVENT_CLASS
0000000062B8 0000004076B8 0 WFS_ERR_INVALID_HSERVICE
0000000062D4 0000004076D4 0 WFS_ERR_INVALID_HPROVIDER
0000000062F0 0000004076F0 0 WFS_ERR_INVALID_HWND
000000006308 000000407708 0 WFS_ERR_INVALID_HWNDREG
000000006320 000000407720 0 WFS_ERR_INVALID_POINTER
000000006338 000000407738 0 WFS_ERR_INVALID_REQ_ID
000000006350 000000407750 0 WFS_ERR_INVALID_RESULT
000000006368 000000407768 0 WFS_ERR_INVALID_SERVPROV
000000006384 000000407784 0 WFS_ERR_INVALID_TIMER
00000000639C 00000040779C 0 WFS_ERR_INVALID_TRACELEVEL
0000000063B8 0000004077B8 0 WFS_ERR_LOCKED
0000000063C8 0000004077C8 0 WFS_ERR_NO_BLOCKING_CALL
0000000063E4 0000004077E4 0 WFS_ERR_NO_SERVPROV
0000000063F8 0000004077F8 0 WFS_ERR_NO_SUCH_THREAD
000000006410 000000407810 0 WFS_ERR_NO_TIMER
000000006424 000000407824 0 WFS_ERR_NOT_LOCKED
000000006438 000000407838 0 WFS_ERR_NOT_OK_TO_UNLOAD
000000006454 000000407854 0 WFS_ERR_NOT_STARTED
000000006468 000000407868 0 WFS_ERR_NOT_REGISTERED
000000006480 000000407880 0 WFS_ERR_OP_IN_PROGRESS
000000006498 000000407898 0 WFS_ERR_OUT_OF_MEMORY
0000000064B0 0000004078B0 0 WFS_ERR_SERVICE_NOT_FOUND
0000000064CC 0000004078CC 0 WFS_ERR_SPI_VER_TOO_HIGH
0000000064E8 0000004078E8 0 WFS_ERR_SPI_VER_TOO_LOW
000000006500 000000407900 0 WFS_ERR_SRVC_VER_TOO_HIGH
00000000651C 00000040791C 0 WFS_ERR_SRVC_VER_TOO_LOW
000000006538 000000407938 0 WFS_ERR_TIMEOUT
000000006548 000000407948 0 WFS_ERR_UNSUPP_CATEGORY
000000006560 000000407960 0 WFS_ERR_UNSUPP_COMMAND
000000006578 000000407978 0 WFS_ERR_VERSION_ERROR_IN_SRVC
000000006598 000000407998 0 WFS_ERR_INVALID_DATA
0000000065B0 0000004079B0 0 WFS_ERR_SOFTWARE_ERROR
0000000065C8 0000004079C8 0 WFS_ERR_CONNECTION_LOST
0000000065E0 0000004079E0 0 WFS_ERR_USER_ERROR
0000000065F4 0000004079F4 0 WFS_ERR_UNSUPP_DATA
000000006608 000000407A08 0 WFS_ERR_FRAUD_ATTEMPT
000000006620 000000407A20 0 WFS_ERR_SEQUENCE_ERROR
000000006638 000000407A38 0 WFS_ERR_PIN_KEYNOTFOUND
000000006650 000000407A50 0 WFS_ERR_PIN_MODENOTSUPPORTED
000000006670 000000407A70 0 WFS_ERR_PIN_ACCESSDENIED
00000000668C 000000407A8C 0 WFS_ERR_PIN_INVALIDID
0000000066A4 000000407AA4 0 WFS_ERR_PIN_DUPLICATEKEY
0000000066C0 000000407AC0 0 WFS_ERR_PIN_KEYNOVALUE
0000000066D8 000000407AD8 0 WFS_ERR_PIN_USEVIOLATION
0000000066F4 000000407AF4 0 WFS_ERR_PIN_NOPIN
000000006708 000000407B08 0 WFS_ERR_PIN_INVALIDKEYLENGTH
000000006728 000000407B28 0 WFS_ERR_PIN_KEYINVALID
000000006740 000000407B40 0 WFS_ERR_PIN_KEYNOTSUPPORTED
00000000675C 000000407B5C 0 WFS_ERR_PIN_NOACTIVEKEYS
000000006778 000000407B78 0 WFS_ERR_PIN_NOTERMINATEKEYS
000000006794 000000407B94 0 WFS_ERR_PIN_MINIMUMLENGTH
0000000067B0 000000407BB0 0 WFS_ERR_PIN_PROTOCOLNOTSUPP
0000000067CC 000000407BCC 0 WFS_ERR_PIN_INVALIDDATA
0000000067E4 000000407BE4 0 WFS_ERR_PIN_NOTALLOWED
0000000067FC 000000407BFC 0 WFS_ERR_PIN_NOKEYRAM
000000006814 000000407C14 0 WFS_ERR_PIN_NOCHIPTRANSACTIVE
000000006834 000000407C34 0 WFS_ERR_PIN_ALGORITHMNOTSUPP
File pos Mem pos ID Text
======== ======= == ====
000000006854 000000407C54 0 WFS_ERR_PIN_FORMATNOTSUPP
000000006870 000000407C70 0 WFS_ERR_PIN_HSMSTATEINVALID
00000000688C 000000407C8C 0 WFS_ERR_PIN_MACINVALID
0000000068A4 000000407CA4 0 WFS_ERR_PIN_PROTINVALID
0000000068BC 000000407CBC 0 WFS_ERR_PIN_FORMATINVALID
0000000068D8 000000407CD8 0 WFS_ERR_PIN_CONTENTINVALID
0000000068F4 000000407CF4 0 WFS_ERR_PIN_SIG_NOT_SUPP
000000006910 000000407D10 0 WFS_ERR_PIN_INVALID_MOD_LEN
00000000692C 000000407D2C 0 WFS_ERR_PIN_INVALIDCERTSTATE
00000000694C 000000407D4C 0 WFS_ERR_PIN_KEY_GENERATION_ERROR
000000006970 000000407D70 0 WFS_ERR_PIN_EMV_VERIFY_FAILED
000000006990 000000407D90 0 WFS_ERR_PIN_RANDOMINVALID
0000000069AC 000000407DAC 0 WFS_ERR_PIN_SIGNATUREINVALID
0000000069CC 000000407DCC 0 WFS_ERR_PIN_SNSCDINVALID
0000000069E8 000000407DE8 0 WFS_ERR_PIN_NORSAKEYPAIR
000000006A04 000000407E04 0 WFS_ERR_PIN_INVALID_PORT
000000006A20 000000407E20 0 WFS_ERR_PIN_POWERSAVETOOSHORT
000000006A40 000000407E40 0 WFS_ERR_CDM_INVALIDCURRENCY
000000006A5C 000000407E5C 0 WFS_ERR_CDM_INVALIDTELLERID
000000006A78 000000407E78 0 WFS_ERR_CDM_CASHUNITERROR
000000006A94 000000407E94 0 WFS_ERR_CDM_INVALIDDENOMINATION
000000006AB4 000000407EB4 0 WFS_ERR_CDM_INVALIDMIXNUMBER
000000006AD4 000000407ED4 0 WFS_ERR_CDM_NOCURRENCYMIX
000000006AF0 000000407EF0 0 WFS_ERR_CDM_NOTDISPENSABLE
000000006B0C 000000407F0C 0 WFS_ERR_CDM_TOOMANYITEMS
000000006B28 000000407F28 0 WFS_ERR_CDM_UNSUPPOSITION
000000006B44 000000407F44 0 WFS_ERR_CDM_SAFEDOOROPEN
000000006B60 000000407F60 0 WFS_ERR_CDM_SHUTTERNOTOPEN
000000006B7C 000000407F7C 0 WFS_ERR_CDM_SHUTTEROPEN
000000006B94 000000407F94 0 WFS_ERR_CDM_SHUTTERCLOSED
000000006BB0 000000407FB0 0 WFS_ERR_CDM_INVALIDCASHUNIT
000000006BCC 000000407FCC 0 WFS_ERR_CDM_NOITEMS
000000006BE0 000000407FE0 0 WFS_ERR_CDM_EXCHANGEACTIVE
000000006BFC 000000407FFC 0 WFS_ERR_CDM_NOEXCHANGEACTIVE
000000006C1C 00000040801C 0 WFS_ERR_CDM_SHUTTERNOTCLOSED
000000006C3C 00000040803C 0 WFS_ERR_CDM_PRERRORNOITEMS
000000006C58 000000408058 0 WFS_ERR_CDM_PRERRORITEMS
000000006C74 000000408074 0 WFS_ERR_CDM_PRERRORUNKNOWN
000000006C90 000000408090 0 WFS_ERR_CDM_ITEMSTAKEN
000000006CA8 0000004080A8 0 WFS_ERR_CDM_INVALIDMIXTABLE
000000006CC4 0000004080C4 0 WFS_ERR_CDM_OUTPUTPOS_NOT_EMPTY
000000006CE4 0000004080E4 0 WFS_ERR_CDM_INVALIDRETRACTPOSITION
000000006D08 000000408108 0 WFS_ERR_CDM_NOTRETRACTAREA
000000006D24 000000408124 0 WFS_ERR_CDM_NOCASHBOXPRESENT
000000006D44 000000408144 0 WFS_ERR_CDM_AMOUNTNOTINMIXTABLE
000000006D64 000000408164 0 WFS_ERR_CDM_ITEMSNOTTAKEN
000000006D80 000000408180 0 WFS_ERR_CDM_ITEMSLEFT
000000006D98 000000408198 0 WFS_ERR_CDM_INVALID_PORT
000000006DB4 0000004081B4 0 WFS_ERR_CDM_POWERSAVETOOSHORT
000000006DD4 0000004081D4 0 WFS_ERR_CDM_POWERSAVEMEDIAPRESENT
000000006DFC 0000004081FC 0 WFS_OPEN_COMPLETE
000000006E10 000000408210 0 WFS_CLOSE_COMPLETE
000000006E24 000000408224 0 WFS_LOCK_COMPLETE
000000006E38 000000408238 0 WFS_UNLOCK_COMPLETE
000000006E4C 00000040824C 0 WFS_REGISTER_COMPLETE
000000006E64 000000408264 0 WFS_DEREGISTER_COMPLETE
000000006E7C 00000040827C 0 WFS_GETINFO_COMPLETE
000000006E94 000000408294 0 WFS_EXECUTE_COMPLETE
000000006EAC 0000004082AC 0 WFS_EXECUTE_EVENT
000000006EC0 0000004082C0 0 WFS_SERVICE_EVENT
File pos Mem pos ID Text
======== ======= == ====
000000006ED4 0000004082D4 0 WFS_USER_EVENT
000000006EE4 0000004082E4 0 WFS_SYSTEM_EVENT
000000006EF8 0000004082F8 0 WFS_TIMER_EVENT
000000006F08 000000408308 0 WFS_EXEE_PIN_KEY
000000006F1C 00000040831C 0 WFS_SRVE_PIN_INITIALIZED
000000006F38 000000408338 0 WFS_SRVE_PIN_OPT_REQUIRED
000000006F54 000000408354 0 WFS_SRVE_PIN_HSM_TDATA_CHANGED
000000006F74 000000408374 0 WFS_SRVE_PIN_CERTIFICATE_CHANGE
000000006F94 000000408394 0 WFS_SRVE_PIN_HSM_CHANGED
000000006FB0 0000004083B0 0 WFS_EXEE_PIN_ENTERDATA
000000006FC8 0000004083C8 0 WFS_SRVE_PIN_DEVICEPOSITION
000000006FE4 0000004083E4 0 WFS_SRVE_PIN_POWER_SAVE_CHANGE
000000007004 000000408404 0 WFS_SRVE_CDM_SAFEDOOROPEN
000000007020 000000408420 0 WFS_SRVE_CDM_SAFEDOORCLOSED
00000000703C 00000040843C 0 WFS_USRE_CDM_CASHUNITTHRESHOLD
00000000705C 00000040845C 0 WFS_SRVE_CDM_CASHUNITINFOCHANGED
000000007080 000000408480 0 WFS_SRVE_CDM_TELLERINFOCHANGED
0000000070A0 0000004084A0 0 WFS_EXEE_CDM_DELAYEDDISPENSE
0000000070C0 0000004084C0 0 WFS_EXEE_CDM_STARTDISPENSE
0000000070DC 0000004084DC 0 WFS_EXEE_CDM_CASHUNITERROR
0000000070F8 0000004084F8 0 WFS_SRVE_CDM_ITEMSTAKEN
000000007110 000000408510 0 WFS_EXEE_CDM_PARTIALDISPENSE
000000007130 000000408530 0 WFS_EXEE_CDM_SUBDISPENSEOK
00000000714C 00000040854C 0 WFS_SRVE_CDM_ITEMSPRESENTED
000000007168 000000408568 0 WFS_SRVE_CDM_COUNTS_CHANGED
000000007184 000000408584 0 WFS_EXEE_CDM_INCOMPLETEDISPENSE
0000000071A4 0000004085A4 0 WFS_SRVE_CDM_MEDIADETECTED
0000000071C0 0000004085C0 0 WFS_EXEE_CDM_NOTEERROR
0000000071D8 0000004085D8 0 WFS_EXEE_CDM_INPUT_P6
0000000071F0 0000004085F0 0 WFS_SRVE_CDM_DEVICEPOSITION
00000000720C 00000040860C 0 WFS_SRVE_CDM_POWER_SAVE_CHANGE
00000000722C 00000040862C 0 WFS_CDM_DEVONLINE
000000007240 000000408640 0 WFS_CDM_DEVOFFLINE
000000007254 000000408654 0 WFS_CDM_DEVPOWEROFF
000000007268 000000408668 0 WFS_CDM_DEVNODEVICE
00000000727C 00000040867C 0 WFS_CDM_DEVHWERROR
000000007290 000000408690 0 WFS_CDM_DEVUSERERROR
0000000072A8 0000004086A8 0 WFS_CDM_DEVBUSY
0000000072B8 0000004086B8 0 WFS_CDM_DEVFRAUDATTEMPT
0000000072DC 0000004086DC 0 Event:
0000000072F4 0000004086F4 0 Selected Cassete: 1
000000007310 000000408710 0 Selected Cassete: 2
00000000732C 00000040872C 0 Selected Cassete: 3
000000007348 000000408748 0 Selected Cassete: 4
000000007364 000000408764 0 Selected Cassete: 5
000000007380 000000408780 0 Selected Cassete: 6
00000000739C 00000040879C 0 Selected Cassete: 7
0000000073B8 0000004087B8 0 Selected Cassete: 8
0000000073D4 0000004087D4 0 Selected Cassete: 9
0000000073F0 0000004087F0 0 Selected Cassete: 10
000000007410 000000408810 0 Selected Cassete: 11
000000007430 000000408830 0 Selected Cassete: 12
000000007450 000000408850 0 Selected Cassete: 13
000000007470 000000408870 0 Selected Cassete: 14
000000007490 000000408890 0 Selected Cassete: 15
0000000074B0 0000004088B0 0 Selected Cassete: 16
0000000074D0 0000004088D0 0 Selected Cassete: 17
0000000074F0 0000004088F0 0 Selected Cassete: 18
000000007508 000000408908 0 Start Dispence
000000007518 000000408918 0 SERVICE_EVENTS:
File pos Mem pos ID Text
======== ======= == ====
000000007528 000000408928 0 USER_EVENTS:
000000007538 000000408938 0 SYSTEM_EVENTS:
000000007548 000000408948 0 EXECUTE_EVENTS:
000000007558 000000408958 0 WFS_SERVICE_EVENT:
00000000756C 00000040896C 0 WFS_USER_EVENT:
00000000757C 00000040897C 0 WFS_SYSTEM_EVENT:
000000007590 000000408990 0 WFS_EXECUTE_EVENT:
0000000075A4 0000004089A4 0 WFS_OPEN_COMPLETE:
0000000075B8 0000004089B8 0 WFS_CLOSE_COMPLETE:
0000000075CC 0000004089CC 0 WFS_LOCK_COMPLETE:
0000000075E0 0000004089E0 0 WFS_UNLOCK_COMPLETE:
0000000075F8 0000004089F8 0 WFS_REGISTER_COMPLETE:
000000007610 000000408A10 0 WFS_DEREGISTER_COMPLETE:
00000000762C 000000408A2C 0 WFS_GETINFO_COMPLETE:
000000007644 000000408A44 0 WFS_EXECUTE_COMPLETE:
00000000765C 000000408A5C 0 UNGROWN_EVENTS:
00000000766C 000000408A6C 0 Log.txt
0000000076C8 000000408AC8 0 bad cast
0000000076EC 000000408AEC 0 Unable to Register Class
000000007718 000000408B18 0 Unable to create the main window
00000000773C 000000408B3C 0 WFSStartUp
000000007748 000000408B48 0 WFSRegister
0000000077E8 000000408BE8 0 C:\Data\Visual Studio 2010\Projects\Batch\Test-2015 - Diebold\Test-Diebold\XFSProject\Release\XFSConsole.pdb
000000008416 000000409816 0 Sleep
00000000841E 00000040981E 0 GetModuleHandleW
000000008432 000000409832 0 LoadLibraryW
000000008442 000000409842 0 CreateThread
000000008452 000000409852 0 GetConsoleWindow
000000008464 000000409864 0 KERNEL32.dll
000000008474 000000409874 0 GetMessageW
000000008482 000000409882 0 TranslateMessage
000000008496 000000409896 0 DispatchMessageW
0000000084AA 0000004098AA 0 GetKeyNameTextW
0000000084BC 0000004098BC 0 GetAsyncKeyState
0000000084D0 0000004098D0 0 CallNextHookEx
0000000084E2 0000004098E2 0 SetWindowsHookExW
0000000084F6 0000004098F6 0 UnhookWindowsHookEx
00000000850C 00000040990C 0 GetDC
000000008514 000000409914 0 FillRect
000000008520 000000409920 0 ReleaseDC
00000000852C 00000040992C 0 DefWindowProcW
00000000853E 00000040993E 0 LoadIconW
00000000854A 00000040994A 0 RegisterClassW
00000000855C 00000040995C 0 CreateWindowExW
00000000856E 00000040996E 0 GetDesktopWindow
000000008582 000000409982 0 ShowWindow
000000008590 000000409990 0 UpdateWindow
0000000085A0 0000004099A0 0 GetWindowLongW
0000000085B2 0000004099B2 0 FindWindowW
0000000085BE 0000004099BE 0 USER32.dll
0000000085CC 0000004099CC 0 CreateCompatibleDC
0000000085E2 0000004099E2 0 GetDeviceCaps
0000000085F2 0000004099F2 0 CreateDIBSection
000000008606 000000409A06 0 SelectObject
000000008616 000000409A16 0 CreateSolidBrush
00000000862A 000000409A2A 0 CreatePen
000000008636 000000409A36 0 BitBlt
000000008640 000000409A40 0 DeleteDC
00000000864C 000000409A4C 0 GetStockObject
00000000865C 000000409A5C 0 GDI32.dll
File pos Mem pos ID Text
======== ======= == ====
000000008668 000000409A68 0 WFSOpen
000000008672 000000409A72 0 WFSGetInfo
000000008680 000000409A80 0 WFSLock
00000000868A 000000409A8A 0 WFSExecute
000000008698 000000409A98 0 WFSUnlock
0000000086A4 000000409AA4 0 WFSClose
0000000086B0 000000409AB0 0 WFSRegister
0000000086BE 000000409ABE 0 WFSStartUp
0000000086CA 000000409ACA 0 MSXFS.dll
0000000086D6 000000409AD6 0 ?_Xlength_error@std@@YAXPBD@Z
0000000086F6 000000409AF6 0 ?_Xout_of_range@std@@YAXPBD@Z
000000008716 000000409B16 0 ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
000000008752 000000409B52 0 ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
000000008794 000000409B94 0 ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
0000000087D4 000000409BD4 0 ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
000000008812 000000409C12 0 ?uncaught_exception@std@@YA_NXZ
000000008834 000000409C34 0 ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
000000008874 000000409C74 0 ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
0000000088BA 000000409CBA 0 ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
0000000088FA 000000409CFA 0 ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
000000008930 000000409D30 0 ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
00000000896A 000000409D6A 0 ??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
0000000089A2 000000409DA2 0 ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
0000000089DE 000000409DDE 0 ?_BADOFF@std@@3_JB
0000000089F4 000000409DF4 0 ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
000000008A3A 000000409E3A 0 ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
000000008A7E 000000409E7E 0 ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
000000008AC4 000000409EC4 0 ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
000000008B00 000000409F00 0 ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
000000008B36 000000409F36 0 ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
000000008B7A 000000409F7A 0 ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
000000008BB6 000000409FB6 0 ?_Decref@facet@locale@std@@QAEPAV123@XZ
000000008BE0 000000409FE0 0 ??1_Lockit@std@@QAE@XZ
000000008BFA 000000409FFA 0 ??0_Lockit@std@@QAE@H@Z
000000008C14 00000040A014 0 ?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
000000008C3A 00000040A03A 0 ?always_noconv@codecvt_base@std@@QBE_NXZ
000000008C66 00000040A066 0 ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
000000008C9A 00000040A09A 0 ?_Incref@facet@locale@std@@QAEXXZ
000000008CBE 00000040A0BE 0 ??Bid@locale@std@@QAEIXZ
000000008CDA 00000040A0DA 0 ?id@?$codecvt@DDH@std@@2V0locale@2@A
000000008D02 00000040A102 0 ?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
000000008D40 00000040A140 0 ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
000000008D80 00000040A180 0 ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
000000008DCC 00000040A1CC 0 ?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
000000008DFE 00000040A1FE 0 ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
000000008E68 00000040A268 0 ?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
000000008E9E 00000040A29E 0 ?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
000000008ED2 00000040A2D2 0 MSVCP100.dll
000000008EE2 00000040A2E2 0 ??3@YAXPAX@Z
000000008EF2 00000040A2F2 0 ??0exception@std@@QAE@ABV01@@Z
000000008F14 00000040A314 0 ?what@exception@std@@UBEPBDXZ
000000008F34 00000040A334 0 ??1exception@std@@UAE@XZ
000000008F50 00000040A350 0 ??0exception@std@@QAE@ABQBD@Z
000000008F70 00000040A370 0 ??2@YAPAXI@Z
000000008F80 00000040A380 0 memmove
000000008F8A 00000040A38A 0 sprintf
000000008F9C 00000040A39C 0 _time64
000000008FA6 00000040A3A6 0 _localtime64_s
000000008FB8 00000040A3B8 0 _localtime64
000000008FC8 00000040A3C8 0 _lock_file
File pos Mem pos ID Text
======== ======= == ====
000000008FD6 00000040A3D6 0 _unlock_file
000000008FE6 00000040A3E6 0 fputc
000000008FEE 00000040A3EE 0 fwrite
000000008FF8 00000040A3F8 0 ungetc
000000009002 00000040A402 0 fgetc
00000000900A 00000040A40A 0 memcpy_s
000000009016 00000040A416 0 _fseeki64
000000009022 00000040A422 0 fgetpos
00000000902C 00000040A42C 0 fsetpos
000000009036 00000040A436 0 setvbuf
000000009040 00000040A440 0 fflush
00000000904A 00000040A44A 0 fclose
000000009054 00000040A454 0 ??0bad_cast@std@@QAE@ABV01@@Z
000000009074 00000040A474 0 ??1bad_cast@std@@UAE@XZ
00000000908E 00000040A48E 0 ??0bad_cast@std@@QAE@PBD@Z
0000000090AC 00000040A4AC 0 __CxxFrameHandler3
0000000090C0 00000040A4C0 0 MSVCR100.dll
0000000090D0 00000040A4D0 0 _unlock
0000000090DA 00000040A4DA 0 __dllonexit
0000000090E8 00000040A4E8 0 _lock
0000000090F0 00000040A4F0 0 _onexit
0000000090FA 00000040A4FA 0 _amsg_exit
000000009108 00000040A508 0 __wgetmainargs
00000000911A 00000040A51A 0 _cexit
000000009124 00000040A524 0 _exit
00000000912C 00000040A52C 0 _XcptFilter
000000009142 00000040A542 0 __winitenv
000000009150 00000040A550 0 _initterm
00000000915C 00000040A55C 0 _initterm_e
00000000916A 00000040A56A 0 _configthreadlocale
000000009180 00000040A580 0 __setusermatherr
000000009194 00000040A594 0 _commode
0000000091A0 00000040A5A0 0 _fmode
0000000091AA 00000040A5AA 0 __set_app_type
0000000091BC 00000040A5BC 0 _crt_debugger_hook
0000000091D2 00000040A5D2 0 ?terminate@@YAXXZ
0000000091E6 00000040A5E6 0 ?_type_info_dtor_internal_method@type_info@@QAEXXZ
00000000921C 00000040A61C 0 _except_handler4_common
000000009236 00000040A636 0 _invoke_watson
000000009248 00000040A648 0 _controlfp_s
000000009258 00000040A658 0 EncodePointer
000000009268 00000040A668 0 DecodePointer
000000009278 00000040A678 0 InterlockedExchange
00000000928E 00000040A68E 0 InterlockedCompareExchange
0000000092AC 00000040A6AC 0 HeapSetInformation
0000000092C2 00000040A6C2 0 TerminateProcess
0000000092D6 00000040A6D6 0 GetCurrentProcess
0000000092EA 00000040A6EA 0 UnhandledExceptionFilter
000000009306 00000040A706 0 SetUnhandledExceptionFilter
000000009324 00000040A724 0 IsDebuggerPresent
000000009338 00000040A738 0 QueryPerformanceCounter
000000009352 00000040A752 0 GetTickCount
000000009362 00000040A762 0 GetCurrentThreadId
000000009378 00000040A778 0 GetCurrentProcessId
00000000938E 00000040A78E 0 GetSystemTimeAsFileTime
0000000093A8 00000040A7A8 0 memset
0000000093B2 00000040A7B2 0 _CxxThrowException
0000000093C8 00000040A7C8 0 memcpy
000000009408 00000040B008 0 .?AVtype_info@@
000000009438 00000040B038 0 .?AVexception@std@@
File pos Mem pos ID Text
======== ======= == ====
000000009454 00000040B054 0 .?AVbad_alloc@std@@
0000000094C8 00000040B0C8 0 .?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@
000000009504 00000040B104 0 .?AV?$_Iosb@H@std@@
000000009520 00000040B120 0 .?AVios_base@std@@
00000000953C 00000040B13C 0 .?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
000000009574 00000040B174 0 .?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
0000000095B0 00000040B1B0 0 .?AV?$basic_ofstream@DU?$char_traits@D@std@@@std@@
0000000095EC 00000040B1EC 0 .?AV?$basic_filebuf@DU?$char_traits@D@std@@@std@@
000000009628 00000040B228 0 .?AVbad_cast@std@@
000000009858 00000040C058 0 <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
0000000098A3 00000040C0A3 0 <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
0000000098DB 00000040C0DB 0 <security>
0000000098EB 00000040C0EB 0 <requestedPrivileges>
000000009908 00000040C108 0 <requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>
000000009968 00000040C168 0 </requestedPrivileges>
000000009986 00000040C186 0 </security>
000000009997 00000040C197 0 </trustInfo>
0000000099A7 00000040C1A7 0 </assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD
000000009A0B 00000040D00B 0 0&0W0
000000009A23 00000040D023 0 2>2_2
000000009A2B 00000040D02B 0 3E3j3
000000009A39 00000040D039 0 3G4T4t4
000000009A67 00000040D067 0 9b9h9
000000009A6F 00000040D06F 0 92:8:H:N:[:|:
000000009A89 00000040D089 0 :Z;z;
000000009AA3 00000040D0A3 0 > >+>6>A>L>W>b>m>x>
000000009AD3 00000040D0D3 0 ?(?3?>?I?T?_?j?u?
000000009B09 00000040D109 0 0%000;0F0Q0\0g0r0}0
000000009B33 00000040D133 0 1-1;1I1W1e1s1
000000009B57 00000040D157 0 2)272E2S2a2o2}2
000000009B7B 00000040D17B 0 3%333A3O3]3k3y3
000000009B9F 00000040D19F 0 4!4/4=4K4Y4g4{4
000000009BC3 00000040D1C3 0 5%535A5O5]5k5y5
000000009BE7 00000040D1E7 0 6!6/6=6K6Y6g6u6
000000009C0D 00000040D20D 0 7!7,777B7V7]7y7
000000009C21 00000040D221 0 7V8\8n8
000000009C43 00000040D243 0 92979K9P9d9i9}9
000000009C5F 00000040D25F 0 :(:9:?:}:
000000009C77 00000040D277 0 ;";';2;9;V;h;
000000009CAD 00000040D2AD 0 ?1?O?W?a?i?
000000009CCD 00000040D2CD 0 0+080B0G0z0
000000009CE7 00000040D2E7 0 1!1T1r1
000000009CFD 00000040D2FD 0 1.2L2Y2c2h2
000000009D13 00000040D313 0 3&333=3B3u3
000000009D2F 00000040D32F 0 4O4m4z4
000000009D43 00000040D343 0 4)5G5O5Y5a5
000000009D5B 00000040D35B 0 6&60656h6
000000009D73 00000040D373 0 777N7
000000009D99 00000040D399 0 :,:Q:v:
000000009DA7 00000040D3A7 0 ;D;h;l;p;t;x;|;
000000009DD9 00000040D3D9 0 <<<H<i<q<
000000009DEF 00000040D3EF 0 <&=8=
000000009E01 00000040D401 0 ?5?A?V?j?{?
000000009E1C 00000040D41C 0 :0W0]0
000000009E2F 00000040D42F 0 131R1a1
000000009E3F 00000040D43F 0 1&2?2D2}2
000000009E51 00000040D451 0 343D3T3v3
000000009E63 00000040D463 0 4/444m4
000000009E73 00000040D473 0 5$545D5f5x5
000000009E8D 00000040D48D 0 5&656L6
File pos Mem pos ID Text
======== ======= == ====
000000009EAD 00000040D4AD 0 879=9
000000009EB3 00000040D4B3 0 9V:e:
000000009EC1 00000040D4C1 0 ;J<g<m<
000000009ECB 00000040D4CB 0 <W=m=
000000009ED1 00000040D4D1 0 =5>P>f>
000000009EDB 00000040D4DB 0 ?'?I?
000000009EF1 00000040D4F1 0 0'0F0U0b0
000000009F05 00000040D505 0 1!191M1a1u1
000000009F23 00000040D523 0 4"4+4J4s4
000000009F49 00000040D549 0 6)64696@6E6b6w6
000000009F71 00000040D571 0 6$717L7k7p7z7
000000009F8F 00000040D58F 0 878H8Q8a8r8
000000009FAB 00000040D5AB 0 9 9&999N9Y9o9
000000009FD3 00000040D5D3 0 :$:1:>:R:[:v:
000000009FFB 00000040D5FB 0 ; ;&;.;4;:;G;M;V;u;};
00000000A033 00000040D633 0 <%<7<?<E<Q<\<p<
00000000A05F 00000040D65F 0 =&=.=:=C=H=N=X=a=l=x=}=
00000000A093 00000040D693 0 ?a?g?p?x?}?
00000000A0B9 00000040D6B9 0 1$1\1
00000000A0DD 00000040D6DD 0 2 252K2e2{2
00000000A0F9 00000040D6F9 0 484E4N4d4x4
00000000A10D 00000040D70D 0 5;5w5
00000000A11F 00000040D71F 0 6$626:6A6L6U6Z6b6j6q6|6
00000000A19B 00000040D79B 0 ;d<h<x<|<
00000000A1BD 00000040D7BD 0 =,=0=4=8=<=D=\=
00000000A1CD 00000040D7CD 0 =x=|=
00000000A1EB 00000040D7EB 0 >$>4>8>@>X>\>t>x>
00000000A219 00000040D819 0 ?$?(?,?4?L?
00000000A237 00000040D837 0 04080X0t0x0
00000000A261 00000040D861 0 181D1d1p1
00000000A27B 00000040D87B 0 2 202D2P2X2
00000000A295 00000040D895 0 3(343T3
00000000A2B1 00000040D8B1 0 4$404P4\4|4
00000000A2CD 00000040D8CD 0 000L0
00000000A2D7 00000040D8D7 0 141l1
0000000076D4 000000408AD4 0 XFS_CONSOLE
000000007708 000000408B08 0 XFSApp
000000007753 000000408B53 0 rDevice_Manager_Class_Name
00000000004D 00000040004D 0 !This program cannot be run in DOS mode.
0000000000DF 0000004000DF 0 YRichMI
0000000001F8 0000004001F8 0 .text
000000000220 000000400220 0 .rdata
000000000247 000000400247 0 @.data
000000000270 000000400270 0 .rsrc
000000000297 000000400297 0 @.reloc
00000000041F 00000040101F 0 D$8SVW
0000000005B5 0000004011B5 0 QSSh/
0000000006CE 0000004012CE 0 T$$hP
000000000AEE 0000004016EE 0 s'PWV
0000000022FD 000000402EFD 0 u PPPh
000000003B7F 00000040477F 0 S<PPR
000000003C31 000000404831 0 KTQVj
000000003EC7 000000404AC7 0 W<PPR
000000004065 000000404C65 0 _hPt@
000000004100 000000404D00 0 CHVW9
00000000414F 000000404D4F 0 KTPVWQ
00000000467F 00000040527F 0 STRVj
000000004A2D 00000040562D 0 PWWWWWh
000000004AA8 0000004056A8 0 $SVW3
000000005544 000000406144 0 VVVVV
File pos Mem pos ID Text
======== ======= == ====
000000005ECC 0000004072CC 0 CDMInit
000000005ED4 0000004072D4 0 DBD_AdvFuncDisp
000000005EE4 0000004072E4 0 CDM-WFSOpen
000000005EF0 0000004072F0 0 CDM-WFS_INF_CDM_STATUS
000000005F08 000000407308 0 CDM-WFS_INF_CDM_STATUS:
000000005F20 000000407320 0 WFS_INF_CDM_CASH_UNIT_INFO
000000005F3C 00000040733C 0 CDM-WFSLock
000000005F48 000000407348 0 WFS_CMD_CDM_START_EXCHANGE
000000005F64 000000407364 0 WFS_CMD_CDM_END_EXCHANGE
000000005F80 000000407380 0 CDM-WFSUnlock
000000005F90 000000407390 0 CDM-WFSClose
000000005FA0 0000004073A0 0 CDM-WFS_INF_CDM_CASH_UNIT_INFO
000000005FC0 0000004073C0 0 CDM-WFS_CMD_CDM_DISPENSE
000000005FDC 0000004073DC 0 No Cassette Selected
00000000601C 00000040741C 0 Command:
000000006028 000000407428 0 WFS_PIN_FK_FDK07
00000000603C 00000040743C 0 WFS_PIN_FK_FDK08
000000006050 000000407450 0 string too long
000000006060 000000407460 0 invalid string position
000000006088 000000407488 0 WFS_SUCCESS
000000006094 000000407494 0 WFS_ERR_ALREADY_STARTED
0000000060AC 0000004074AC 0 WFS_ERR_API_VER_TOO_HIGH
0000000060C8 0000004074C8 0 WFS_ERR_API_VER_TOO_LOW
0000000060E0 0000004074E0 0 WFS_ERR_CANCELED
0000000060F4 0000004074F4 0 WFS_ERR_CFG_INVALID_HKEY
000000006110 000000407510 0 WFS_ERR_CFG_INVALID_NAME
00000000612C 00000040752C 0 WFS_ERR_CFG_INVALID_SUBKEY
000000006148 000000407548 0 WFS_ERR_CFG_INVALID_VALUE
000000006164 000000407564 0 WFS_ERR_CFG_KEY_NOT_EMPTY
000000006180 000000407580 0 WFS_ERR_CFG_NAME_TOO_LONG
00000000619C 00000040759C 0 WFS_ERR_CFG_NO_MORE_ITEMS
0000000061B8 0000004075B8 0 WFS_ERR_CFG_VALUE_TOO_LONG
0000000061D4 0000004075D4 0 WFS_ERR_DEV_NOT_READY
0000000061EC 0000004075EC 0 WFS_ERR_HARDWARE_ERROR
000000006204 000000407604 0 WFS_ERR_INTERNAL_ERROR
00000000621C 00000040761C 0 WFS_ERR_INVALID_ADDRESS
000000006234 000000407634 0 WFS_ERR_INVALID_APP_HANDLE
000000006250 000000407650 0 WFS_ERR_INVALID_BUFFER
000000006268 000000407668 0 WFS_ERR_INVALID_CATEGORY
000000006284 000000407684 0 WFS_ERR_INVALID_COMMAND
00000000629C 00000040769C 0 WFS_ERR_INVALID_EVENT_CLASS
0000000062B8 0000004076B8 0 WFS_ERR_INVALID_HSERVICE
0000000062D4 0000004076D4 0 WFS_ERR_INVALID_HPROVIDER
0000000062F0 0000004076F0 0 WFS_ERR_INVALID_HWND
000000006308 000000407708 0 WFS_ERR_INVALID_HWNDREG
000000006320 000000407720 0 WFS_ERR_INVALID_POINTER
000000006338 000000407738 0 WFS_ERR_INVALID_REQ_ID
000000006350 000000407750 0 WFS_ERR_INVALID_RESULT
000000006368 000000407768 0 WFS_ERR_INVALID_SERVPROV
000000006384 000000407784 0 WFS_ERR_INVALID_TIMER
00000000639C 00000040779C 0 WFS_ERR_INVALID_TRACELEVEL
0000000063B8 0000004077B8 0 WFS_ERR_LOCKED
0000000063C8 0000004077C8 0 WFS_ERR_NO_BLOCKING_CALL
0000000063E4 0000004077E4 0 WFS_ERR_NO_SERVPROV
0000000063F8 0000004077F8 0 WFS_ERR_NO_SUCH_THREAD
000000006410 000000407810 0 WFS_ERR_NO_TIMER
000000006424 000000407824 0 WFS_ERR_NOT_LOCKED
000000006438 000000407838 0 WFS_ERR_NOT_OK_TO_UNLOAD
000000006454 000000407854 0 WFS_ERR_NOT_STARTED
000000006468 000000407868 0 WFS_ERR_NOT_REGISTERED
File pos Mem pos ID Text
======== ======= == ====
000000006480 000000407880 0 WFS_ERR_OP_IN_PROGRESS
000000006498 000000407898 0 WFS_ERR_OUT_OF_MEMORY
0000000064B0 0000004078B0 0 WFS_ERR_SERVICE_NOT_FOUND
0000000064CC 0000004078CC 0 WFS_ERR_SPI_VER_TOO_HIGH
0000000064E8 0000004078E8 0 WFS_ERR_SPI_VER_TOO_LOW
000000006500 000000407900 0 WFS_ERR_SRVC_VER_TOO_HIGH
00000000651C 00000040791C 0 WFS_ERR_SRVC_VER_TOO_LOW
000000006538 000000407938 0 WFS_ERR_TIMEOUT
000000006548 000000407948 0 WFS_ERR_UNSUPP_CATEGORY
000000006560 000000407960 0 WFS_ERR_UNSUPP_COMMAND
000000006578 000000407978 0 WFS_ERR_VERSION_ERROR_IN_SRVC
000000006598 000000407998 0 WFS_ERR_INVALID_DATA
0000000065B0 0000004079B0 0 WFS_ERR_SOFTWARE_ERROR
0000000065C8 0000004079C8 0 WFS_ERR_CONNECTION_LOST
0000000065E0 0000004079E0 0 WFS_ERR_USER_ERROR
0000000065F4 0000004079F4 0 WFS_ERR_UNSUPP_DATA
000000006608 000000407A08 0 WFS_ERR_FRAUD_ATTEMPT
000000006620 000000407A20 0 WFS_ERR_SEQUENCE_ERROR
000000006638 000000407A38 0 WFS_ERR_PIN_KEYNOTFOUND
000000006650 000000407A50 0 WFS_ERR_PIN_MODENOTSUPPORTED
000000006670 000000407A70 0 WFS_ERR_PIN_ACCESSDENIED
00000000668C 000000407A8C 0 WFS_ERR_PIN_INVALIDID
0000000066A4 000000407AA4 0 WFS_ERR_PIN_DUPLICATEKEY
0000000066C0 000000407AC0 0 WFS_ERR_PIN_KEYNOVALUE
0000000066D8 000000407AD8 0 WFS_ERR_PIN_USEVIOLATION
0000000066F4 000000407AF4 0 WFS_ERR_PIN_NOPIN
000000006708 000000407B08 0 WFS_ERR_PIN_INVALIDKEYLENGTH
000000006728 000000407B28 0 WFS_ERR_PIN_KEYINVALID
000000006740 000000407B40 0 WFS_ERR_PIN_KEYNOTSUPPORTED
00000000675C 000000407B5C 0 WFS_ERR_PIN_NOACTIVEKEYS
000000006778 000000407B78 0 WFS_ERR_PIN_NOTERMINATEKEYS
000000006794 000000407B94 0 WFS_ERR_PIN_MINIMUMLENGTH
0000000067B0 000000407BB0 0 WFS_ERR_PIN_PROTOCOLNOTSUPP
0000000067CC 000000407BCC 0 WFS_ERR_PIN_INVALIDDATA
0000000067E4 000000407BE4 0 WFS_ERR_PIN_NOTALLOWED
0000000067FC 000000407BFC 0 WFS_ERR_PIN_NOKEYRAM
000000006814 000000407C14 0 WFS_ERR_PIN_NOCHIPTRANSACTIVE
000000006834 000000407C34 0 WFS_ERR_PIN_ALGORITHMNOTSUPP
000000006854 000000407C54 0 WFS_ERR_PIN_FORMATNOTSUPP
000000006870 000000407C70 0 WFS_ERR_PIN_HSMSTATEINVALID
00000000688C 000000407C8C 0 WFS_ERR_PIN_MACINVALID
0000000068A4 000000407CA4 0 WFS_ERR_PIN_PROTINVALID
0000000068BC 000000407CBC 0 WFS_ERR_PIN_FORMATINVALID
0000000068D8 000000407CD8 0 WFS_ERR_PIN_CONTENTINVALID
0000000068F4 000000407CF4 0 WFS_ERR_PIN_SIG_NOT_SUPP
000000006910 000000407D10 0 WFS_ERR_PIN_INVALID_MOD_LEN
00000000692C 000000407D2C 0 WFS_ERR_PIN_INVALIDCERTSTATE
00000000694C 000000407D4C 0 WFS_ERR_PIN_KEY_GENERATION_ERROR
000000006970 000000407D70 0 WFS_ERR_PIN_EMV_VERIFY_FAILED
000000006990 000000407D90 0 WFS_ERR_PIN_RANDOMINVALID
0000000069AC 000000407DAC 0 WFS_ERR_PIN_SIGNATUREINVALID
0000000069CC 000000407DCC 0 WFS_ERR_PIN_SNSCDINVALID
0000000069E8 000000407DE8 0 WFS_ERR_PIN_NORSAKEYPAIR
000000006A04 000000407E04 0 WFS_ERR_PIN_INVALID_PORT
000000006A20 000000407E20 0 WFS_ERR_PIN_POWERSAVETOOSHORT
000000006A40 000000407E40 0 WFS_ERR_CDM_INVALIDCURRENCY
000000006A5C 000000407E5C 0 WFS_ERR_CDM_INVALIDTELLERID
000000006A78 000000407E78 0 WFS_ERR_CDM_CASHUNITERROR
000000006A94 000000407E94 0 WFS_ERR_CDM_INVALIDDENOMINATION
000000006AB4 000000407EB4 0 WFS_ERR_CDM_INVALIDMIXNUMBER
File pos Mem pos ID Text
======== ======= == ====
000000006AD4 000000407ED4 0 WFS_ERR_CDM_NOCURRENCYMIX
000000006AF0 000000407EF0 0 WFS_ERR_CDM_NOTDISPENSABLE
000000006B0C 000000407F0C 0 WFS_ERR_CDM_TOOMANYITEMS
000000006B28 000000407F28 0 WFS_ERR_CDM_UNSUPPOSITION
000000006B44 000000407F44 0 WFS_ERR_CDM_SAFEDOOROPEN
000000006B60 000000407F60 0 WFS_ERR_CDM_SHUTTERNOTOPEN
000000006B7C 000000407F7C 0 WFS_ERR_CDM_SHUTTEROPEN
000000006B94 000000407F94 0 WFS_ERR_CDM_SHUTTERCLOSED
000000006BB0 000000407FB0 0 WFS_ERR_CDM_INVALIDCASHUNIT
000000006BCC 000000407FCC 0 WFS_ERR_CDM_NOITEMS
000000006BE0 000000407FE0 0 WFS_ERR_CDM_EXCHANGEACTIVE
000000006BFC 000000407FFC 0 WFS_ERR_CDM_NOEXCHANGEACTIVE
000000006C1C 00000040801C 0 WFS_ERR_CDM_SHUTTERNOTCLOSED
000000006C3C 00000040803C 0 WFS_ERR_CDM_PRERRORNOITEMS
000000006C58 000000408058 0 WFS_ERR_CDM_PRERRORITEMS
000000006C74 000000408074 0 WFS_ERR_CDM_PRERRORUNKNOWN
000000006C90 000000408090 0 WFS_ERR_CDM_ITEMSTAKEN
000000006CA8 0000004080A8 0 WFS_ERR_CDM_INVALIDMIXTABLE
000000006CC4 0000004080C4 0 WFS_ERR_CDM_OUTPUTPOS_NOT_EMPTY
000000006CE4 0000004080E4 0 WFS_ERR_CDM_INVALIDRETRACTPOSITION
000000006D08 000000408108 0 WFS_ERR_CDM_NOTRETRACTAREA
000000006D24 000000408124 0 WFS_ERR_CDM_NOCASHBOXPRESENT
000000006D44 000000408144 0 WFS_ERR_CDM_AMOUNTNOTINMIXTABLE
000000006D64 000000408164 0 WFS_ERR_CDM_ITEMSNOTTAKEN
000000006D80 000000408180 0 WFS_ERR_CDM_ITEMSLEFT
000000006D98 000000408198 0 WFS_ERR_CDM_INVALID_PORT
000000006DB4 0000004081B4 0 WFS_ERR_CDM_POWERSAVETOOSHORT
000000006DD4 0000004081D4 0 WFS_ERR_CDM_POWERSAVEMEDIAPRESENT
000000006DFC 0000004081FC 0 WFS_OPEN_COMPLETE
000000006E10 000000408210 0 WFS_CLOSE_COMPLETE
000000006E24 000000408224 0 WFS_LOCK_COMPLETE
000000006E38 000000408238 0 WFS_UNLOCK_COMPLETE
000000006E4C 00000040824C 0 WFS_REGISTER_COMPLETE
000000006E64 000000408264 0 WFS_DEREGISTER_COMPLETE
000000006E7C 00000040827C 0 WFS_GETINFO_COMPLETE
000000006E94 000000408294 0 WFS_EXECUTE_COMPLETE
000000006EAC 0000004082AC 0 WFS_EXECUTE_EVENT
000000006EC0 0000004082C0 0 WFS_SERVICE_EVENT
000000006ED4 0000004082D4 0 WFS_USER_EVENT
000000006EE4 0000004082E4 0 WFS_SYSTEM_EVENT
000000006EF8 0000004082F8 0 WFS_TIMER_EVENT
000000006F08 000000408308 0 WFS_EXEE_PIN_KEY
000000006F1C 00000040831C 0 WFS_SRVE_PIN_INITIALIZED
000000006F38 000000408338 0 WFS_SRVE_PIN_OPT_REQUIRED
000000006F54 000000408354 0 WFS_SRVE_PIN_HSM_TDATA_CHANGED
000000006F74 000000408374 0 WFS_SRVE_PIN_CERTIFICATE_CHANGE
000000006F94 000000408394 0 WFS_SRVE_PIN_HSM_CHANGED
000000006FB0 0000004083B0 0 WFS_EXEE_PIN_ENTERDATA
000000006FC8 0000004083C8 0 WFS_SRVE_PIN_DEVICEPOSITION
000000006FE4 0000004083E4 0 WFS_SRVE_PIN_POWER_SAVE_CHANGE
000000007004 000000408404 0 WFS_SRVE_CDM_SAFEDOOROPEN
000000007020 000000408420 0 WFS_SRVE_CDM_SAFEDOORCLOSED
00000000703C 00000040843C 0 WFS_USRE_CDM_CASHUNITTHRESHOLD
00000000705C 00000040845C 0 WFS_SRVE_CDM_CASHUNITINFOCHANGED
000000007080 000000408480 0 WFS_SRVE_CDM_TELLERINFOCHANGED
0000000070A0 0000004084A0 0 WFS_EXEE_CDM_DELAYEDDISPENSE
0000000070C0 0000004084C0 0 WFS_EXEE_CDM_STARTDISPENSE
0000000070DC 0000004084DC 0 WFS_EXEE_CDM_CASHUNITERROR
0000000070F8 0000004084F8 0 WFS_SRVE_CDM_ITEMSTAKEN
000000007110 000000408510 0 WFS_EXEE_CDM_PARTIALDISPENSE
File pos Mem pos ID Text
======== ======= == ====
000000007130 000000408530 0 WFS_EXEE_CDM_SUBDISPENSEOK
00000000714C 00000040854C 0 WFS_SRVE_CDM_ITEMSPRESENTED
000000007168 000000408568 0 WFS_SRVE_CDM_COUNTS_CHANGED
000000007184 000000408584 0 WFS_EXEE_CDM_INCOMPLETEDISPENSE
0000000071A4 0000004085A4 0 WFS_SRVE_CDM_MEDIADETECTED
0000000071C0 0000004085C0 0 WFS_EXEE_CDM_NOTEERROR
0000000071D8 0000004085D8 0 WFS_EXEE_CDM_INPUT_P6
0000000071F0 0000004085F0 0 WFS_SRVE_CDM_DEVICEPOSITION
00000000720C 00000040860C 0 WFS_SRVE_CDM_POWER_SAVE_CHANGE
00000000722C 00000040862C 0 WFS_CDM_DEVONLINE
000000007240 000000408640 0 WFS_CDM_DEVOFFLINE
000000007254 000000408654 0 WFS_CDM_DEVPOWEROFF
000000007268 000000408668 0 WFS_CDM_DEVNODEVICE
00000000727C 00000040867C 0 WFS_CDM_DEVHWERROR
000000007290 000000408690 0 WFS_CDM_DEVUSERERROR
0000000072A8 0000004086A8 0 WFS_CDM_DEVBUSY
0000000072B8 0000004086B8 0 WFS_CDM_DEVFRAUDATTEMPT
0000000072DC 0000004086DC 0 Event:
0000000072F4 0000004086F4 0 Selected Cassete: 1
000000007310 000000408710 0 Selected Cassete: 2
00000000732C 00000040872C 0 Selected Cassete: 3
000000007348 000000408748 0 Selected Cassete: 4
000000007364 000000408764 0 Selected Cassete: 5
000000007380 000000408780 0 Selected Cassete: 6
00000000739C 00000040879C 0 Selected Cassete: 7
0000000073B8 0000004087B8 0 Selected Cassete: 8
0000000073D4 0000004087D4 0 Selected Cassete: 9
0000000073F0 0000004087F0 0 Selected Cassete: 10
000000007410 000000408810 0 Selected Cassete: 11
000000007430 000000408830 0 Selected Cassete: 12
000000007450 000000408850 0 Selected Cassete: 13
000000007470 000000408870 0 Selected Cassete: 14
000000007490 000000408890 0 Selected Cassete: 15
0000000074B0 0000004088B0 0 Selected Cassete: 16
0000000074D0 0000004088D0 0 Selected Cassete: 17
0000000074F0 0000004088F0 0 Selected Cassete: 18
000000007508 000000408908 0 Start Dispence
000000007518 000000408918 0 SERVICE_EVENTS:
000000007528 000000408928 0 USER_EVENTS:
000000007538 000000408938 0 SYSTEM_EVENTS:
000000007548 000000408948 0 EXECUTE_EVENTS:
000000007558 000000408958 0 WFS_SERVICE_EVENT:
00000000756C 00000040896C 0 WFS_USER_EVENT:
00000000757C 00000040897C 0 WFS_SYSTEM_EVENT:
000000007590 000000408990 0 WFS_EXECUTE_EVENT:
0000000075A4 0000004089A4 0 WFS_OPEN_COMPLETE:
0000000075B8 0000004089B8 0 WFS_CLOSE_COMPLETE:
0000000075CC 0000004089CC 0 WFS_LOCK_COMPLETE:
0000000075E0 0000004089E0 0 WFS_UNLOCK_COMPLETE:
0000000075F8 0000004089F8 0 WFS_REGISTER_COMPLETE:
000000007610 000000408A10 0 WFS_DEREGISTER_COMPLETE:
00000000762C 000000408A2C 0 WFS_GETINFO_COMPLETE:
000000007644 000000408A44 0 WFS_EXECUTE_COMPLETE:
00000000765C 000000408A5C 0 UNGROWN_EVENTS:
00000000766C 000000408A6C 0 Log.txt
0000000076C8 000000408AC8 0 bad cast
0000000076EC 000000408AEC 0 Unable to Register Class
000000007718 000000408B18 0 Unable to create the main window
00000000773C 000000408B3C 0 WFSStartUp
000000007748 000000408B48 0 WFSRegister
File pos Mem pos ID Text
======== ======= == ====
0000000077E8 000000408BE8 0 C:\Data\Visual Studio 2010\Projects\Batch\Test-2015 - Diebold\Test-Diebold\XFSProject\Release\XFSConsole.pdb
000000008416 000000409816 0 Sleep
00000000841E 00000040981E 0 GetModuleHandleW
000000008432 000000409832 0 LoadLibraryW
000000008442 000000409842 0 CreateThread
000000008452 000000409852 0 GetConsoleWindow
000000008464 000000409864 0 KERNEL32.dll
000000008474 000000409874 0 GetMessageW
000000008482 000000409882 0 TranslateMessage
000000008496 000000409896 0 DispatchMessageW
0000000084AA 0000004098AA 0 GetKeyNameTextW
0000000084BC 0000004098BC 0 GetAsyncKeyState
0000000084D0 0000004098D0 0 CallNextHookEx
0000000084E2 0000004098E2 0 SetWindowsHookExW
0000000084F6 0000004098F6 0 UnhookWindowsHookEx
00000000850C 00000040990C 0 GetDC
000000008514 000000409914 0 FillRect
000000008520 000000409920 0 ReleaseDC
00000000852C 00000040992C 0 DefWindowProcW
00000000853E 00000040993E 0 LoadIconW
00000000854A 00000040994A 0 RegisterClassW
00000000855C 00000040995C 0 CreateWindowExW
00000000856E 00000040996E 0 GetDesktopWindow
000000008582 000000409982 0 ShowWindow
000000008590 000000409990 0 UpdateWindow
0000000085A0 0000004099A0 0 GetWindowLongW
0000000085B2 0000004099B2 0 FindWindowW
0000000085BE 0000004099BE 0 USER32.dll
0000000085CC 0000004099CC 0 CreateCompatibleDC
0000000085E2 0000004099E2 0 GetDeviceCaps
0000000085F2 0000004099F2 0 CreateDIBSection
000000008606 000000409A06 0 SelectObject
000000008616 000000409A16 0 CreateSolidBrush
00000000862A 000000409A2A 0 CreatePen
000000008636 000000409A36 0 BitBlt
000000008640 000000409A40 0 DeleteDC
00000000864C 000000409A4C 0 GetStockObject
00000000865C 000000409A5C 0 GDI32.dll
000000008668 000000409A68 0 WFSOpen
000000008672 000000409A72 0 WFSGetInfo
000000008680 000000409A80 0 WFSLock
00000000868A 000000409A8A 0 WFSExecute
000000008698 000000409A98 0 WFSUnlock
0000000086A4 000000409AA4 0 WFSClose
0000000086B0 000000409AB0 0 WFSRegister
0000000086BE 000000409ABE 0 WFSStartUp
0000000086CA 000000409ACA 0 MSXFS.dll
0000000086D6 000000409AD6 0 ?_Xlength_error@std@@YAXPBD@Z
0000000086F6 000000409AF6 0 ?_Xout_of_range@std@@YAXPBD@Z
000000008716 000000409B16 0 ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
000000008752 000000409B52 0 ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
000000008794 000000409B94 0 ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
0000000087D4 000000409BD4 0 ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
000000008812 000000409C12 0 ?uncaught_exception@std@@YA_NXZ
000000008834 000000409C34 0 ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
000000008874 000000409C74 0 ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
0000000088BA 000000409CBA 0 ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
0000000088FA 000000409CFA 0 ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
000000008930 000000409D30 0 ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
00000000896A 000000409D6A 0 ??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
File pos Mem pos ID Text
======== ======= == ====
0000000089A2 000000409DA2 0 ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
0000000089DE 000000409DDE 0 ?_BADOFF@std@@3_JB
0000000089F4 000000409DF4 0 ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
000000008A3A 000000409E3A 0 ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
000000008A7E 000000409E7E 0 ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
000000008AC4 000000409EC4 0 ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
000000008B00 000000409F00 0 ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
000000008B36 000000409F36 0 ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
000000008B7A 000000409F7A 0 ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
000000008BB6 000000409FB6 0 ?_Decref@facet@locale@std@@QAEPAV123@XZ
000000008BE0 000000409FE0 0 ??1_Lockit@std@@QAE@XZ
000000008BFA 000000409FFA 0 ??0_Lockit@std@@QAE@H@Z
000000008C14 00000040A014 0 ?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
000000008C3A 00000040A03A 0 ?always_noconv@codecvt_base@std@@QBE_NXZ
000000008C66 00000040A066 0 ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
000000008C9A 00000040A09A 0 ?_Incref@facet@locale@std@@QAEXXZ
000000008CBE 00000040A0BE 0 ??Bid@locale@std@@QAEIXZ
000000008CDA 00000040A0DA 0 ?id@?$codecvt@DDH@std@@2V0locale@2@A
000000008D02 00000040A102 0 ?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
000000008D40 00000040A140 0 ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
000000008D80 00000040A180 0 ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
000000008DCC 00000040A1CC 0 ?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
000000008DFE 00000040A1FE 0 ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
000000008E68 00000040A268 0 ?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
000000008E9E 00000040A29E 0 ?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
000000008ED2 00000040A2D2 0 MSVCP100.dll
000000008EE2 00000040A2E2 0 ??3@YAXPAX@Z
000000008EF2 00000040A2F2 0 ??0exception@std@@QAE@ABV01@@Z
000000008F14 00000040A314 0 ?what@exception@std@@UBEPBDXZ
000000008F34 00000040A334 0 ??1exception@std@@UAE@XZ
000000008F50 00000040A350 0 ??0exception@std@@QAE@ABQBD@Z
000000008F70 00000040A370 0 ??2@YAPAXI@Z
000000008F80 00000040A380 0 memmove
000000008F8A 00000040A38A 0 sprintf
000000008F9C 00000040A39C 0 _time64
000000008FA6 00000040A3A6 0 _localtime64_s
000000008FB8 00000040A3B8 0 _localtime64
000000008FC8 00000040A3C8 0 _lock_file
000000008FD6 00000040A3D6 0 _unlock_file
000000008FE6 00000040A3E6 0 fputc
000000008FEE 00000040A3EE 0 fwrite
000000008FF8 00000040A3F8 0 ungetc
000000009002 00000040A402 0 fgetc
00000000900A 00000040A40A 0 memcpy_s
000000009016 00000040A416 0 _fseeki64
000000009022 00000040A422 0 fgetpos
00000000902C 00000040A42C 0 fsetpos
000000009036 00000040A436 0 setvbuf
000000009040 00000040A440 0 fflush
00000000904A 00000040A44A 0 fclose
000000009054 00000040A454 0 ??0bad_cast@std@@QAE@ABV01@@Z
000000009074 00000040A474 0 ??1bad_cast@std@@UAE@XZ
00000000908E 00000040A48E 0 ??0bad_cast@std@@QAE@PBD@Z
0000000090AC 00000040A4AC 0 __CxxFrameHandler3
0000000090C0 00000040A4C0 0 MSVCR100.dll
0000000090D0 00000040A4D0 0 _unlock
0000000090DA 00000040A4DA 0 __dllonexit
0000000090E8 00000040A4E8 0 _lock
0000000090F0 00000040A4F0 0 _onexit
0000000090FA 00000040A4FA 0 _amsg_exit
File pos Mem pos ID Text
======== ======= == ====
000000009108 00000040A508 0 __wgetmainargs
00000000911A 00000040A51A 0 _cexit
000000009124 00000040A524 0 _exit
00000000912C 00000040A52C 0 _XcptFilter
000000009142 00000040A542 0 __winitenv
000000009150 00000040A550 0 _initterm
00000000915C 00000040A55C 0 _initterm_e
00000000916A 00000040A56A 0 _configthreadlocale
000000009180 00000040A580 0 __setusermatherr
000000009194 00000040A594 0 _commode
0000000091A0 00000040A5A0 0 _fmode
0000000091AA 00000040A5AA 0 __set_app_type
0000000091BC 00000040A5BC 0 _crt_debugger_hook
0000000091D2 00000040A5D2 0 ?terminate@@YAXXZ
0000000091E6 00000040A5E6 0 ?_type_info_dtor_internal_method@type_info@@QAEXXZ
00000000921C 00000040A61C 0 _except_handler4_common
000000009236 00000040A636 0 _invoke_watson
000000009248 00000040A648 0 _controlfp_s
000000009258 00000040A658 0 EncodePointer
000000009268 00000040A668 0 DecodePointer
000000009278 00000040A678 0 InterlockedExchange
00000000928E 00000040A68E 0 InterlockedCompareExchange
0000000092AC 00000040A6AC 0 HeapSetInformation
0000000092C2 00000040A6C2 0 TerminateProcess
0000000092D6 00000040A6D6 0 GetCurrentProcess
0000000092EA 00000040A6EA 0 UnhandledExceptionFilter
000000009306 00000040A706 0 SetUnhandledExceptionFilter
000000009324 00000040A724 0 IsDebuggerPresent
000000009338 00000040A738 0 QueryPerformanceCounter
000000009352 00000040A752 0 GetTickCount
000000009362 00000040A762 0 GetCurrentThreadId
000000009378 00000040A778 0 GetCurrentProcessId
00000000938E 00000040A78E 0 GetSystemTimeAsFileTime
0000000093A8 00000040A7A8 0 memset
0000000093B2 00000040A7B2 0 _CxxThrowException
0000000093C8 00000040A7C8 0 memcpy
000000009408 00000040B008 0 .?AVtype_info@@
000000009438 00000040B038 0 .?AVexception@std@@
000000009454 00000040B054 0 .?AVbad_alloc@std@@
0000000094C8 00000040B0C8 0 .?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@
000000009504 00000040B104 0 .?AV?$_Iosb@H@std@@
000000009520 00000040B120 0 .?AVios_base@std@@
00000000953C 00000040B13C 0 .?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
000000009574 00000040B174 0 .?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
0000000095B0 00000040B1B0 0 .?AV?$basic_ofstream@DU?$char_traits@D@std@@@std@@
0000000095EC 00000040B1EC 0 .?AV?$basic_filebuf@DU?$char_traits@D@std@@@std@@
000000009628 00000040B228 0 .?AVbad_cast@std@@
000000009858 00000040C058 0 <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
0000000098A3 00000040C0A3 0 <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
0000000098DB 00000040C0DB 0 <security>
0000000098EB 00000040C0EB 0 <requestedPrivileges>
000000009908 00000040C108 0 <requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>
000000009968 00000040C168 0 </requestedPrivileges>
000000009986 00000040C186 0 </security>
000000009997 00000040C197 0 </trustInfo>
0000000099A7 00000040C1A7 0 </assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD
000000009A0B 00000040D00B 0 0&0W0
000000009A23 00000040D023 0 2>2_2
000000009A2B 00000040D02B 0 3E3j3
000000009A39 00000040D039 0 3G4T4t4
File pos Mem pos ID Text
======== ======= == ====
000000009A67 00000040D067 0 9b9h9
000000009A6F 00000040D06F 0 92:8:H:N:[:|:
000000009A89 00000040D089 0 :Z;z;
000000009AA3 00000040D0A3 0 > >+>6>A>L>W>b>m>x>
000000009AD3 00000040D0D3 0 ?(?3?>?I?T?_?j?u?
000000009B09 00000040D109 0 0%000;0F0Q0\0g0r0}0
000000009B33 00000040D133 0 1-1;1I1W1e1s1
000000009B57 00000040D157 0 2)272E2S2a2o2}2
000000009B7B 00000040D17B 0 3%333A3O3]3k3y3
000000009B9F 00000040D19F 0 4!4/4=4K4Y4g4{4
000000009BC3 00000040D1C3 0 5%535A5O5]5k5y5
000000009BE7 00000040D1E7 0 6!6/6=6K6Y6g6u6
000000009C0D 00000040D20D 0 7!7,777B7V7]7y7
000000009C21 00000040D221 0 7V8\8n8
000000009C43 00000040D243 0 92979K9P9d9i9}9
000000009C5F 00000040D25F 0 :(:9:?:}:
000000009C77 00000040D277 0 ;";';2;9;V;h;
000000009CAD 00000040D2AD 0 ?1?O?W?a?i?
000000009CCD 00000040D2CD 0 0+080B0G0z0
000000009CE7 00000040D2E7 0 1!1T1r1
000000009CFD 00000040D2FD 0 1.2L2Y2c2h2
000000009D13 00000040D313 0 3&333=3B3u3
000000009D2F 00000040D32F 0 4O4m4z4
000000009D43 00000040D343 0 4)5G5O5Y5a5
000000009D5B 00000040D35B 0 6&60656h6
000000009D73 00000040D373 0 777N7
000000009D99 00000040D399 0 :,:Q:v:
000000009DA7 00000040D3A7 0 ;D;h;l;p;t;x;|;
000000009DD9 00000040D3D9 0 <<<H<i<q<
000000009DEF 00000040D3EF 0 <&=8=
000000009E01 00000040D401 0 ?5?A?V?j?{?
000000009E1C 00000040D41C 0 :0W0]0
000000009E2F 00000040D42F 0 131R1a1
000000009E3F 00000040D43F 0 1&2?2D2}2
000000009E51 00000040D451 0 343D3T3v3
000000009E63 00000040D463 0 4/444m4
000000009E73 00000040D473 0 5$545D5f5x5
000000009E8D 00000040D48D 0 5&656L6
000000009EAD 00000040D4AD 0 879=9
000000009EB3 00000040D4B3 0 9V:e:
000000009EC1 00000040D4C1 0 ;J<g<m<
000000009ECB 00000040D4CB 0 <W=m=
000000009ED1 00000040D4D1 0 =5>P>f>
000000009EDB 00000040D4DB 0 ?'?I?
000000009EF1 00000040D4F1 0 0'0F0U0b0
000000009F05 00000040D505 0 1!191M1a1u1
000000009F23 00000040D523 0 4"4+4J4s4
000000009F49 00000040D549 0 6)64696@6E6b6w6
000000009F71 00000040D571 0 6$717L7k7p7z7
000000009F8F 00000040D58F 0 878H8Q8a8r8
000000009FAB 00000040D5AB 0 9 9&999N9Y9o9
000000009FD3 00000040D5D3 0 :$:1:>:R:[:v:
000000009FFB 00000040D5FB 0 ; ;&;.;4;:;G;M;V;u;};
00000000A033 00000040D633 0 <%<7<?<E<Q<\<p<
00000000A05F 00000040D65F 0 =&=.=:=C=H=N=X=a=l=x=}=
00000000A093 00000040D693 0 ?a?g?p?x?}?
00000000A0B9 00000040D6B9 0 1$1\1
00000000A0DD 00000040D6DD 0 2 252K2e2{2
00000000A0F9 00000040D6F9 0 484E4N4d4x4
00000000A10D 00000040D70D 0 5;5w5
File pos Mem pos ID Text
======== ======= == ====
00000000A11F 00000040D71F 0 6$626:6A6L6U6Z6b6j6q6|6
00000000A19B 00000040D79B 0 ;d<h<x<|<
00000000A1BD 00000040D7BD 0 =,=0=4=8=<=D=\=
00000000A1CD 00000040D7CD 0 =x=|=
00000000A1EB 00000040D7EB 0 >$>4>8>@>X>\>t>x>
00000000A219 00000040D819 0 ?$?(?,?4?L?
00000000A237 00000040D837 0 04080X0t0x0
00000000A261 00000040D861 0 181D1d1p1
00000000A27B 00000040D87B 0 2 202D2P2X2
00000000A295 00000040D895 0 3(343T3
00000000A2B1 00000040D8B1 0 4$404P4\4|4
00000000A2CD 00000040D8CD 0 000L0
00000000A2D7 00000040D8D7 0 141l1
0000000076D4 000000408AD4 0 XFS_CONSOLE
000000007708 000000408B08 0 XFSApp
000000007753 000000408B53 0 rDevice_Manager_Class_Name