.- - -----÷M÷E÷N÷U÷------------------------------------------------------------- --- ---- -------------.
! WALL ! STATS ! GOODIES ! YARA ! FAQ ! RSS ! EMV !
`-------------- - --- ---------- -------- -------- -------- -------- ----------------- - ---- ---- --'
ATM MALWARE NOTICE
956968e6f4bf611137ea0e747891ba8dc200ca809c252ef249294912fb3dbe3c
Date...........: 2018-09-05
Family.........: Atmosphere
File name......: J133301_17975_app4.dat
File size......: 168.00 KB
Type file......: EXE/Windows
Virscan........: VT - HA
Documentation..: https://owncloud.group-ib.ru/s/aTugJcPclCLnQPb/download?path=%2F&files=Silence_Group-IB_Eng_Public.pdf
Additional note: drop eeb8390e885612e1f0b8f8922baa4ebc9ba420224b30370d08b45f3453949937
Entropy:
Binary Histogram:
=== PEDUMP REPORT ===
=== MZ Header ===
signature: "MZ"
bytes_in_last_block: 144 0x90
blocks_in_file: 3 3
num_relocs: 0 0
header_paragraphs: 4 4
min_extra_paragraphs: 0 0
max_extra_paragraphs: 65535 0xffff
ss: 0 0
sp: 184 0xb8
checksum: 0 0
ip: 0 0
cs: 0 0
reloc_table_offset: 64 0x40
overlay_number: 0 0
reserved0: 0 0
oem_id: 0 0
oem_info: 0 0
reserved2: 0 0
reserved3: 0 0
reserved4: 0 0
reserved5: 0 0
reserved6: 0 0
lfanew: 248 0xf8
=== DOS STUB ===
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno|
00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
=== RICH Header ===
LIB_ID VERSION TIMES_USED
93 5d 4035 fc3 2 2
12 c 7291 1c7b 1 1
14 e 7299 1c83 25 19
0 0 0 0 4 4
10 a 8168 1fe8 136 88
19 13 8034 1f62 4 4
93 5d 2179 883 3 3
1 1 0 0 109 6d
11 b 8168 1fe8 37 25
6 6 1720 6b8 1 1
=== PE Header ===
signature: "PE\x00\x00"
# IMAGE_FILE_HEADER:
Machine: 332 0x14c x86
NumberOfSections: 4 4
TimeDateStamp: "2018-04-07 10:47:36"
PointerToSymbolTable: 0 0
NumberOfSymbols: 0 0
SizeOfOptionalHeader: 224 0xe0
Characteristics: 271 0x10f RELOCS_STRIPPED, EXECUTABLE_IMAGE
LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED
32BIT_MACHINE
# IMAGE_OPTIONAL_HEADER32:
Magic: 267 0x10b 32-bit executable
LinkerVersion: 6.0
SizeOfCode: 57344 0xe000
SizeOfInitializedData: 118784 0x1d000
SizeOfUninitializedData: 0 0
AddressOfEntryPoint: 27887 0x6cef
BaseOfCode: 4096 0x1000
BaseOfData: 61440 0xf000
ImageBase: 4194304 0x400000
SectionAlignment: 4096 0x1000
FileAlignment: 4096 0x1000
OperatingSystemVersion: 4.0
ImageVersion: 0.0
SubsystemVersion: 4.0
Reserved1: 0 0
SizeOfImage: 180224 0x2c000
SizeOfHeaders: 4096 0x1000
CheckSum: 0 0
Subsystem: 3 3 WINDOWS_CUI
DllCharacteristics: 0 0
SizeOfStackReserve: 1048576 0x100000
SizeOfStackCommit: 4096 0x1000
SizeOfHeapReserve: 1048576 0x100000
SizeOfHeapCommit: 4096 0x1000
LoaderFlags: 0 0
NumberOfRvaAndSizes: 16 0x10
=== DATA DIRECTORY ===
EXPORT rva:0x 0 size:0x 0
IMPORT rva:0x 10b28 size:0x 50
RESOURCE rva:0x 16000 size:0x 15060
EXCEPTION rva:0x 0 size:0x 0
SECURITY rva:0x 0 size:0x 0
BASERELOC rva:0x 0 size:0x 0
DEBUG rva:0x 0 size:0x 0
ARCHITECTURE rva:0x 0 size:0x 0
GLOBALPTR rva:0x 0 size:0x 0
TLS rva:0x 0 size:0x 0
LOAD_CONFIG rva:0x 0 size:0x 0
Bound_IAT rva:0x 0 size:0x 0
IAT rva:0x f000 size:0x 15c
Delay_IAT rva:0x 0 size:0x 0
CLR_Header rva:0x 0 size:0x 0
rva:0x 0 size:0x 0
=== SECTIONS ===
NAME RVA VSZ RAW_SZ RAW_PTR nREL REL_PTR nLINE LINE_PTR FLAGS
.text 1000 d329 e000 1000 0 0 0 0 60000020 R-X CODE
.rdata f000 22d6 3000 f000 0 0 0 0 40000040 R-- IDATA
.data 12000 30e4 2000 12000 0 0 0 0 c0000040 RW- IDATA
.rsrc 16000 15060 16000 14000 0 0 0 0 40000040 R-- IDATA
=== RESOURCES ===
FILE_OFFSET CP LANG SIZE TYPE NAME
0x14060 0 0x409 86016 BIN #101
=== IMPORTS ===
MODULE_NAME HINT ORD FUNCTION_NAME
KERNEL32.dll 348 SizeofResource
KERNEL32.dll 25b LockResource
KERNEL32.dll 24d LoadResource
KERNEL32.dll da FindResourceA
KERNEL32.dll 177 GetModuleHandleA
KERNEL32.dll 1b1 GetStdHandle
KERNEL32.dll 169 GetLastError
KERNEL32.dll 1d5 GetTickCount
KERNEL32.dll 175 GetModuleFileNameA
KERNEL32.dll 349 Sleep
KERNEL32.dll 2c7 ResumeThread
KERNEL32.dll 379 VirtualFreeEx
KERNEL32.dll 24e LocalAlloc
KERNEL32.dll 248 LoadLibraryA
KERNEL32.dll 3a0 WriteProcessMemory
KERNEL32.dll 198 GetProcAddress
KERNEL32.dll 376 VirtualAllocEx
KERNEL32.dll 1cd GetThreadContext
KERNEL32.dll 34b SuspendThread
KERNEL32.dll 280 OpenThread
KERNEL32.dll 355 Thread32Next
KERNEL32.dll 354 Thread32First
KERNEL32.dll 6c CreateToolhelp32Snapshot
KERNEL32.dll 27c OpenProcess
KERNEL32.dll 13a GetCurrentProcess
KERNEL32.dll 28e Process32Next
KERNEL32.dll 28c Process32First
KERNEL32.dll 305 SetEndOfFile
KERNEL32.dll 252 LocalFree
KERNEL32.dll 310 SetFilePointer
KERNEL32.dll 397 WriteFile
KERNEL32.dll 4d CreateFileA
KERNEL32.dll 15b GetFileSize
KERNEL32.dll 2ab ReadFile
KERNEL32.dll 2e CloseHandle
KERNEL32.dll 45 CreateDirectoryA
KERNEL32.dll 156 GetFileAttributesA
KERNEL32.dll 334 SetThreadContext
KERNEL32.dll 18b GetOEMCP
KERNEL32.dll f5 GetACP
KERNEL32.dll 32c SetStdHandle
KERNEL32.dll 226 IsBadCodePtr
KERNEL32.dll 229 IsBadReadPtr
KERNEL32.dll 26b MultiByteToWideChar
KERNEL32.dll 389 WideCharToMultiByte
KERNEL32.dll 2cc RtlUnwind
KERNEL32.dll 29d RaiseException
KERNEL32.dll 210 HeapReAlloc
KERNEL32.dll 206 HeapAlloc
KERNEL32.dll 20c HeapFree
KERNEL32.dll af ExitProcess
KERNEL32.dll 351 TerminateProcess
KERNEL32.dll 108 GetCommandLineA
KERNEL32.dll 1de GetVersion
KERNEL32.dll 23a LCMapStringA
KERNEL32.dll 23b LCMapStringW
KERNEL32.dll fc GetCPInfo
KERNEL32.dll 212 HeapSize
KERNEL32.dll 33d SetUnhandledExceptionFilter
KERNEL32.dll 20a HeapDestroy
KERNEL32.dll 208 HeapCreate
KERNEL32.dll 378 VirtualFree
KERNEL32.dll 375 VirtualAlloc
KERNEL32.dll 22c IsBadWritePtr
KERNEL32.dll 319 SetHandleCount
KERNEL32.dll 15e GetFileType
KERNEL32.dll 1af GetStartupInfoA
KERNEL32.dll 362 UnhandledExceptionFilter
KERNEL32.dll ed FreeEnvironmentStringsA
KERNEL32.dll ee FreeEnvironmentStringsW
KERNEL32.dll 14d GetEnvironmentStrings
KERNEL32.dll 14f GetEnvironmentStringsW
KERNEL32.dll e5 FlushFileBuffers
KERNEL32.dll 1b2 GetStringTypeA
KERNEL32.dll 1b5 GetStringTypeW
ADVAPI32.dll 17 AdjustTokenPrivileges
ADVAPI32.dll 142 OpenProcessToken
ADVAPI32.dll 18 AllocateAndInitializeSid
ADVAPI32.dll 197 SetEntriesInAclA
ADVAPI32.dll df InitializeSecurityDescriptor
ADVAPI32.dll 1a5 SetSecurityDescriptorDacl
ADVAPI32.dll 19b SetFileSecurityA
ADVAPI32.dll 9d FreeSid
SHLWAPI.dll b PathAppendA
=== Packer / Compiler ===
MS Visual C++ v6.0
File pos Mem pos ID Text
======== ======= == ====
00000000004D 00000040004D 0 !This program cannot be run in DOS mode.
0000000001F0 0000004001F0 0 .text
000000000218 000000400218 0 .rdata
00000000023F 00000040023F 0 @.data
000000000268 000000400268 0 .rsrc
0000000023D3 0000004023D3 0 PSSSSSSSSj
0000000049E9 0000004049E9 0 t/Ht HH
0000000053DA 0000004053DA 0 VWhST@
00000000570B 00000040570B 0 QWj P
0000000058BD 0000004058BD 0 QQSVWd
000000005B5F 000000405B5F 0 SVWUj
000000005BC8 000000405BC8 0 t.;t$$t(
000000006656 000000406656 0 uRFGHt
000000006700 000000406700 0 tlHt.
0000000067D8 0000004067D8 0 wDVSU
0000000069C0 0000004069C0 0 VC20XC00U
000000007516 000000407516 0 PPPPPPPP
000000007576 000000407576 0 9= :A
00000000757C 00000040757C 0 uFWWj
0000000075A1 0000004075A1 0 "WWSh|
00000000768D 00000040768D 0 tMWWS
000000007AD0 000000407AD0 0 sO;>|C;~
000000007FC8 000000407FC8 0 QQSVW
0000000080A9 0000004080A9 0 QQSVW
0000000080FF 0000004080FF 0 QQSVW
000000008645 000000408645 0 HHtpHHtl
0000000088FC 0000004088FC 0 Yt f
000000008EBB 000000408EBB 0 btHHt.
000000009B67 000000409B67 0 DSUVWh
00000000A13D 00000040A13D 0 eYt,F
00000000A756 00000040A756 0 ?=t"U
00000000A8AA 00000040A8AA 0 8"uF@
00000000AA78 00000040AA78 0 SS@SSPVSS
00000000AA9A 00000040AA9A 0 t#SSUP
00000000AAA1 00000040AAA1 0 t$$VSS
00000000AB77 00000040AB77 0 A=(.A
00000000B786 00000040B786 0 PPPPPPPP
00000000BB2D 00000040BB2D 0 B=h0A
00000000BD93 00000040BD93 0 t-Ht!Ht
00000000C276 00000040C276 0 SVWj
00000000C39F 00000040C39F 0 SVWj
00000000C7C2 00000040C7C2 0 Y;5T=A
00000000C9C5 00000040C9C5 0 Wj@Y3
00000000CB98 00000040CB98 0 VWuBhT"A
00000000CD48 00000040CD48 0 FGQPS
00000000CFD4 00000040CFD4 0 +ttHHtd
00000000D012 00000040D012 0 j XO
00000000D258 00000040D258 0 HHtYHHtF
00000000F224 00000040F224 0 string too long
00000000F254 00000040F254 0 invalid string position
00000000F3B8 00000040F3B8 0 ios::eofbit set
00000000F3C8 00000040F3C8 0 ios::failbit set
00000000F3DC 00000040F3DC 0 ios::badbit set
00000000F45C 00000040F45C 0 Unknown exception
00000000F4A0 00000040F4A0 0 H:mm:ss
00000000F4A8 00000040F4A8 0 dddd, MMMM dd, yyyy
00000000F4BC 00000040F4BC 0 M/d/yy
00000000F4CC 00000040F4CC 0 December
00000000F4D8 00000040F4D8 0 November
00000000F4E4 00000040F4E4 0 October
File pos Mem pos ID Text
======== ======= == ====
00000000F4EC 00000040F4EC 0 September
00000000F4F8 00000040F4F8 0 August
00000000F510 00000040F510 0 April
00000000F518 00000040F518 0 March
00000000F520 00000040F520 0 February
00000000F52C 00000040F52C 0 January
00000000F564 00000040F564 0 Saturday
00000000F570 00000040F570 0 Friday
00000000F578 00000040F578 0 Thursday
00000000F584 00000040F584 0 Wednesday
00000000F590 00000040F590 0 Tuesday
00000000F598 00000040F598 0 Monday
00000000F5A0 00000040F5A0 0 Sunday
00000000F661 00000040F661 0 (8PX
00000000F669 00000040F669 0 700WP
00000000F681 00000040F681 0 ppxxxx
00000000F6AC 00000040F6AC 0 (null)
00000000F6CE 00000040F6CE 0 GAIsProcessorFeaturePresent
00000000F6EC 00000040F6EC 0 KERNEL32
00000000F6F8 00000040F6F8 0 e+000
00000000F700 00000040F700 0 runtime error
00000000F714 00000040F714 0 TLOSS error
00000000F724 00000040F724 0 SING error
00000000F734 00000040F734 0 DOMAIN error
00000000F744 00000040F744 0 R6028
00000000F74B 00000040F74B 0 - unable to initialize heap
00000000F76C 00000040F76C 0 R6027
00000000F773 00000040F773 0 - not enough space for lowio initialization
00000000F7A4 00000040F7A4 0 R6026
00000000F7AB 00000040F7AB 0 - not enough space for stdio initialization
00000000F7DC 00000040F7DC 0 R6025
00000000F7E3 00000040F7E3 0 - pure virtual function call
00000000F804 00000040F804 0 R6024
00000000F80B 00000040F80B 0 - not enough space for _onexit/atexit table
00000000F83C 00000040F83C 0 R6019
00000000F843 00000040F843 0 - unable to open console device
00000000F868 00000040F868 0 R6018
00000000F86F 00000040F86F 0 - unexpected heap error
00000000F88C 00000040F88C 0 R6017
00000000F893 00000040F893 0 - unexpected multithread lock error
00000000F8BC 00000040F8BC 0 R6016
00000000F8C3 00000040F8C3 0 - not enough space for thread data
00000000F8EA 00000040F8EA 0 abnormal program termination
00000000F90C 00000040F90C 0 R6009
00000000F913 00000040F913 0 - not enough space for environment
00000000F938 00000040F938 0 R6008
00000000F93F 00000040F93F 0 - not enough space for arguments
00000000F964 00000040F964 0 R6002
00000000F96B 00000040F96B 0 - floating point not loaded
00000000F98C 00000040F98C 0 Microsoft Visual C++ Runtime Library
00000000F9B8 00000040F9B8 0 Runtime Error!
00000000F9C8 00000040F9C8 0 Program:
00000000F9D8 00000040F9D8 0 <program name unknown>
00000000F9FC 00000040F9FC 0 SunMonTueWedThuFriSat
00000000FA14 00000040FA14 0 JanFebMarAprMayJunJulAugSepOctNovDec
00000000FA3C 00000040FA3C 0 GetLastActivePopup
00000000FA50 00000040FA50 0 GetActiveWindow
00000000FA60 00000040FA60 0 MessageBoxA
00000000FA6C 00000040FA6C 0 1#QNAN
00000000FA74 00000040FA74 0 1#INF
File pos Mem pos ID Text
======== ======= == ====
00000000FA7C 00000040FA7C 0 1#IND
00000000FA84 00000040FA84 0 1#SNAN
000000010CD6 000000410CD6 0 CreateDirectoryA
000000010CEA 000000410CEA 0 GetFileAttributesA
000000010D00 000000410D00 0 CloseHandle
000000010D0E 000000410D0E 0 ReadFile
000000010D1A 000000410D1A 0 GetFileSize
000000010D28 000000410D28 0 CreateFileA
000000010D36 000000410D36 0 WriteFile
000000010D42 000000410D42 0 SetFilePointer
000000010D54 000000410D54 0 LocalFree
000000010D60 000000410D60 0 LocalAlloc
000000010D6E 000000410D6E 0 SizeofResource
000000010D80 000000410D80 0 LockResource
000000010D90 000000410D90 0 LoadResource
000000010DA0 000000410DA0 0 FindResourceA
000000010DB0 000000410DB0 0 GetModuleHandleA
000000010DC4 000000410DC4 0 GetStdHandle
000000010DD4 000000410DD4 0 GetLastError
000000010DE4 000000410DE4 0 GetTickCount
000000010DF4 000000410DF4 0 GetModuleFileNameA
000000010E0A 000000410E0A 0 Sleep
000000010E12 000000410E12 0 ResumeThread
000000010E22 000000410E22 0 VirtualFreeEx
000000010E32 000000410E32 0 SetThreadContext
000000010E46 000000410E46 0 LoadLibraryA
000000010E56 000000410E56 0 WriteProcessMemory
000000010E6C 000000410E6C 0 GetProcAddress
000000010E7E 000000410E7E 0 VirtualAllocEx
000000010E90 000000410E90 0 GetThreadContext
000000010EA4 000000410EA4 0 SuspendThread
000000010EB4 000000410EB4 0 OpenThread
000000010EC2 000000410EC2 0 Thread32Next
000000010ED2 000000410ED2 0 Thread32First
000000010EE2 000000410EE2 0 CreateToolhelp32Snapshot
000000010EFE 000000410EFE 0 OpenProcess
000000010F0C 000000410F0C 0 GetCurrentProcess
000000010F20 000000410F20 0 Process32Next
000000010F30 000000410F30 0 Process32First
000000010F40 000000410F40 0 KERNEL32.dll
000000010F4E 000000410F4E 0 USER32.dll
000000010F5C 000000410F5C 0 FreeSid
000000010F66 000000410F66 0 SetFileSecurityA
000000010F7A 000000410F7A 0 SetSecurityDescriptorDacl
000000010F96 000000410F96 0 InitializeSecurityDescriptor
000000010FB6 000000410FB6 0 SetEntriesInAclA
000000010FCA 000000410FCA 0 AllocateAndInitializeSid
000000010FE6 000000410FE6 0 AdjustTokenPrivileges
000000010FFE 000000410FFE 0 OpenProcessToken
000000011010 000000411010 0 ADVAPI32.dll
000000011020 000000411020 0 PathAppendA
00000001102C 00000041102C 0 SHLWAPI.dll
000000011038 000000411038 0 PSAPI.DLL
000000011044 000000411044 0 MultiByteToWideChar
00000001105A 00000041105A 0 WideCharToMultiByte
000000011070 000000411070 0 RtlUnwind
00000001107C 00000041107C 0 RaiseException
00000001108E 00000041108E 0 HeapReAlloc
00000001109C 00000041109C 0 HeapAlloc
0000000110A8 0000004110A8 0 HeapFree
File pos Mem pos ID Text
======== ======= == ====
0000000110B4 0000004110B4 0 ExitProcess
0000000110C2 0000004110C2 0 TerminateProcess
0000000110D6 0000004110D6 0 GetCommandLineA
0000000110E8 0000004110E8 0 GetVersion
0000000110F6 0000004110F6 0 LCMapStringA
000000011106 000000411106 0 LCMapStringW
000000011116 000000411116 0 GetCPInfo
000000011122 000000411122 0 HeapSize
00000001112E 00000041112E 0 SetUnhandledExceptionFilter
00000001114C 00000041114C 0 HeapDestroy
00000001115A 00000041115A 0 HeapCreate
000000011168 000000411168 0 VirtualFree
000000011176 000000411176 0 VirtualAlloc
000000011186 000000411186 0 IsBadWritePtr
000000011196 000000411196 0 SetHandleCount
0000000111A8 0000004111A8 0 GetFileType
0000000111B6 0000004111B6 0 GetStartupInfoA
0000000111C8 0000004111C8 0 UnhandledExceptionFilter
0000000111E4 0000004111E4 0 FreeEnvironmentStringsA
0000000111FE 0000004111FE 0 FreeEnvironmentStringsW
000000011218 000000411218 0 GetEnvironmentStrings
000000011230 000000411230 0 GetEnvironmentStringsW
00000001124A 00000041124A 0 FlushFileBuffers
00000001125E 00000041125E 0 GetStringTypeA
000000011270 000000411270 0 GetStringTypeW
000000011282 000000411282 0 IsBadReadPtr
000000011292 000000411292 0 IsBadCodePtr
0000000112A2 0000004112A2 0 SetStdHandle
0000000112B2 0000004112B2 0 GetACP
0000000112BC 0000004112BC 0 GetOEMCP
0000000112C8 0000004112C8 0 SetEndOfFile
0000000120F8 0000004120F8 0 .?AVException@@
000000012110 000000412110 0 .?AVexception@@
000000012128 000000412128 0 .?AVArgumentOutOfRangeException@@
00000001214C 00000041214C 0 no processes found. Exiting.
00000001216C 00000041216C 0 Founded %d precesses.
000000012184 000000412184 0 atmapp.exe
00000001219C 00000041219C 0 c:\atm\1
0000000121A8 0000004121A8 0 lib_%s
0000000121B8 0000004121B8 0 .?AVbad_exception@std@@
0000000121D0 0000004121D0 0 bad exception
00000001220C 00000041220C 0 LoadLibraryA
00000001221C 00000041221C 0 [-] Error: Couldn't get thread handle
000000012244 000000412244 0 kernel32.dll
000000012254 000000412254 0 user32.dll
000000012268 000000412268 0 .?AVlogic_error@std@@
000000012288 000000412288 0 .?AVlength_error@std@@
0000000122A8 0000004122A8 0 .?AVout_of_range@std@@
0000000122D0 0000004122D0 0 .?AVios_base@std@@
0000000122F0 0000004122F0 0 .?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
000000012328 000000412328 0 .?AV?$basic_istream@DU?$char_traits@D@std@@@std@@
000000012368 000000412368 0 .?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@
0000000123A8 0000004123A8 0 .?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
0000000123E8 0000004123E8 0 .?AV?$basic_filebuf@DU?$char_traits@D@std@@@std@@
000000012428 000000412428 0 .?AV?$basic_ios@GU?$char_traits@G@std@@@std@@
000000012460 000000412460 0 .?AV?$basic_istream@GU?$char_traits@G@std@@@std@@
0000000124A0 0000004124A0 0 .?AV?$basic_ostream@GU?$char_traits@G@std@@@std@@
0000000124E0 0000004124E0 0 .?AV?$basic_filebuf@GU?$char_traits@G@std@@@std@@
000000012520 000000412520 0 .?AV?$basic_streambuf@GU?$char_traits@G@std@@@std@@
000000012560 000000412560 0 .?AVruntime_error@std@@
File pos Mem pos ID Text
======== ======= == ====
000000012580 000000412580 0 .?AVfailure@ios_base@std@@
0000000125A8 0000004125A8 0 .?AVfacet@locale@std@@
0000000125C8 0000004125C8 0 .?AV_Locimp@locale@std@@
000000012600 000000412600 0 .?AVtype_info@@
0000000133EE 0000004133EE 0 z?aUY
000000013430 000000413430 0 zc%C1
000000013483 000000413483 0 -64OS
0000000140AD 0000004160AD 0 !This program cannot be run in DOS mode.
000000014250 000000416250 0 .text
000000014278 000000416278 0 .rdata
00000001429F 00000041629F 0 @.data
0000000142C8 0000004162C8 0 .reloc
000000015C19 000000417C19 0 L$(SUV
000000015C20 000000417C20 0 D$8W3
000000015C55 000000417C55 0 D$HPQVU
000000016129 000000418129 0 D$<SUVW
000000016894 000000418894 0 d$hPUQ
000000016CA3 000000418CA3 0 L$(QV
000000016CD6 000000418CD6 0 D$ VP
000000016D92 000000418D92 0 D$$UP
000000016FDB 000000418FDB 0 l$ VW
00000001721B 00000041921B 0 l$,VW
000000017349 000000419349 0 L$$SUV
000000017350 000000419350 0 D$4WPQ
00000001737F 00000041937F 0 D$DPQVS
000000017880 000000419880 0 D$@_][
000000017AA9 000000419AA9 0 T$(PR
000000017C19 000000419C19 0 D$$SUVW
000000017E96 000000419E96 0 d}9SV
000000017FDC 000000419FDC 0 L$<QR
0000000180A9 00000041A0A9 0 L$<Qj
000000018137 00000041A137 0 VWhd"
0000000184C7 00000041A4C7 0 D$,SP
00000001856A 00000041A56A 0 L$8QR
0000000185D2 00000041A5D2 0 $SUVW
000000018804 00000041A804 0 L$ hP
0000000188C5 00000041A8C5 0 QSUVW
000000018B79 00000041AB79 0 L$$SUV
000000018B80 00000041AB80 0 D$4WPQ
000000018BAF 00000041ABAF 0 D$DPQVS
000000018DA9 00000041ADA9 0 L$$SUV
000000018DB0 00000041ADB0 0 D$4WPQ
000000018DDF 00000041ADDF 0 D$DPQVS
000000018ED9 00000041AED9 0 L$$SUV
000000018EE0 00000041AEE0 0 D$4WPQ
000000018F0F 00000041AF0F 0 D$DPQVS
00000001910C 00000041B10C 0 L$ QW
00000001918F 00000041B18F 0 U4RQU
00000001961C 00000041B61C 0 SUVW3
000000019658 00000041B658 0 L$$Qj
00000001993C 00000041B93C 0 IQhH$
00000001998B 00000041B98B 0 IQhD$
0000000199DA 00000041B9DA 0 IQh@$
000000019A29 00000041BA29 0 IQh<$
000000019A78 00000041BA78 0 IQh8$
000000019AC7 00000041BAC7 0 IQh4$
000000019B16 00000041BB16 0 IQh0$
000000019B65 00000041BB65 0 IQh,$
000000019BB1 00000041BBB1 0 IQh($
000000019C28 00000041BC28 0 SUVW3
File pos Mem pos ID Text
======== ======= == ====
000000019D59 00000041BD59 0 D$|VW3
000000019D99 00000041BD99 0 D$@hX$
000000019E7E 00000041BE7E 0 |$(t-
000000019EE9 00000041BEE9 0 D$LSUV3
00000001A152 00000041C152 0 L$$PQ
00000001A249 00000041C249 0 D$8SUV3
00000001A2B8 00000041C2B8 0 \$<QSR
00000001A2D7 00000041C2D7 0 T$$QPR
00000001A429 00000041C429 0 D$8SUV3
00000001A49F 00000041C49F 0 \$<QRV
00000001A4BB 00000041C4BB 0 T$$PSR
00000001A9FB 00000041C9FB 0 SUVW3
00000001AA9C 00000041CA9C 0 L$0RVW
00000001AAC9 00000041CAC9 0 L$PQP
00000001ABCA 00000041CBCA 0 D$PPW
00000001ADA5 00000041CDA5 0 |$ QPW
00000001AE39 00000041CE39 0 D$8UVWj
00000001AED4 00000041CED4 0 L$HQP
00000001B167 00000041D167 0 ,SUVW
00000001B183 00000041D183 0 l$Dt#
00000001B23D 00000041D23D 0 d$(Ph
00000001B517 00000041D517 0 @SUVW
00000001B6C5 00000041D6C5 0 D$X VP
00000001BA0C 00000041DA0C 0 t$hWj
00000001BA9E 00000041DA9E 0 IQhP$
00000001BB53 00000041DB53 0 D$ PQ
00000001C2BA 00000041E2BA 0 T$$QWVR
00000001C2FC 00000041E2FC 0 L$$PWVQ
00000001C343 00000041E343 0 D$,VP
00000001C9AA 00000041E9AA 0 T$$QWVR
00000001C9EC 00000041E9EC 0 L$$PWVQ
00000001CA33 00000041EA33 0 D$,VP
00000001E067 000000420067 0 0SUVW
00000001E09C 00000042009C 0 D$ h '
00000001E4D4 0000004204D4 0 d$8Ph8'
00000001E4FD 0000004204FD 0 t$(to
00000001EAC8 000000420AC8 0 SUVW3
00000001EBA1 000000420BA1 0 |$0t1
00000001EBD4 000000420BD4 0 \$$hh!
00000001F1E8 0000004211E8 0 QRh (
00000001F27D 00000042127D 0 SVh4(
000000021F48 000000423F48 0 t WVS
000000021F75 000000423F75 0 u7WPS
000000021F86 000000423F86 0 u&WVS
000000024D3E 000000426D3E 0 CloseHandle
000000024D4C 000000426D4C 0 ReadFile
000000024D58 000000426D58 0 GetFileSize
000000024D66 000000426D66 0 CreateFileA
000000024D74 000000426D74 0 WriteFile
000000024D80 000000426D80 0 SetFilePointer
000000024D92 000000426D92 0 GetLocalTime
000000024DA2 000000426DA2 0 GetModuleFileNameA
000000024DB8 000000426DB8 0 DeleteFileA
000000024DC6 000000426DC6 0 VirtualQuery
000000024DD6 000000426DD6 0 CreateThread
000000024DE6 000000426DE6 0 TerminateThread
000000024DF8 000000426DF8 0 Sleep
000000024E00 000000426E00 0 SuspendThread
000000024E10 000000426E10 0 ResumeThread
000000024E20 000000426E20 0 GetProcAddress
File pos Mem pos ID Text
======== ======= == ====
000000024E32 000000426E32 0 LoadLibraryA
000000024E42 000000426E42 0 GetModuleHandleA
000000024E56 000000426E56 0 VirtualFree
000000024E64 000000426E64 0 VirtualAlloc
000000024E74 000000426E74 0 FindNextFileA
000000024E84 000000426E84 0 FindFirstFileA
000000024E96 000000426E96 0 WaitForSingleObject
000000024EAC 000000426EAC 0 VirtualProtect
000000024EBC 000000426EBC 0 KERNEL32.dll
000000024ECC 000000426ECC 0 MessageBoxA
000000024ED8 000000426ED8 0 USER32.dll
000000024EE4 000000426EE4 0 ADVAPI32.dll
000000024EF4 000000426EF4 0 ??0Init@ios_base@std@@QAE@XZ
000000024F14 000000426F14 0 ??1Init@ios_base@std@@QAE@XZ
000000024F34 000000426F34 0 ??0_Winit@std@@QAE@XZ
000000024F4C 000000426F4C 0 ??1_Winit@std@@QAE@XZ
000000024F64 000000426F64 0 ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
000000024FAE 000000426FAE 0 ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
00000002500A 00000042700A 0 ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
000000025066 000000427066 0 ?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
0000000250B8 0000004270B8 0 ?_Xlen@std@@YAXXZ
0000000250CC 0000004270CC 0 ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
000000025120 000000427120 0 ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
00000002516A 00000042716A 0 ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
0000000251BA 0000004271BA 0 ?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
000000025208 000000427208 0 ?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
000000025256 000000427256 0 ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
0000000252AE 0000004272AE 0 ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
00000002530A 00000042730A 0 ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
000000025362 000000427362 0 ??0bad_exception@std@@QAE@ABV01@@Z
000000025388 000000427388 0 ??1bad_exception@std@@UAE@XZ
0000000253A8 0000004273A8 0 ??0bad_exception@std@@QAE@PBD@Z
0000000253CA 0000004273CA 0 ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
000000025426 000000427426 0 ?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
000000025474 000000427474 0 ?_Xran@std@@YAXXZ
000000025488 000000427488 0 ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
0000000254DE 0000004274DE 0 ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
000000025530 000000427530 0 ?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
000000025584 000000427584 0 ?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
0000000255E2 0000004275E2 0 ?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
000000025640 000000427640 0 ?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
000000025692 000000427692 0 ??1_Lockit@std@@QAE@XZ
0000000256AC 0000004276AC 0 ??0_Lockit@std@@QAE@XZ
0000000256C4 0000004276C4 0 MSVCP60.dll
0000000256D2 0000004276D2 0 PathFileExistsA
0000000256E4 0000004276E4 0 PathAppendA
0000000256F0 0000004276F0 0 SHLWAPI.dll
0000000256FE 0000004276FE 0 __CxxFrameHandler
00000002571A 00000042771A 0 memmove
000000025724 000000427724 0 ??0exception@@QAE@ABV0@@Z
000000025748 000000427748 0 realloc
000000025752 000000427752 0 _CxxThrowException
000000025768 000000427768 0 ?what@exception@@UBEPBDXZ
000000025784 000000427784 0 ??1exception@@UAE@XZ
00000002579C 00000042779C 0 _vsnprintf
0000000257AA 0000004277AA 0 ??2@YAPAXI@Z
0000000257BA 0000004277BA 0 fclose
0000000257C4 0000004277C4 0 vfprintf
0000000257D0 0000004277D0 0 fopen
0000000257D8 0000004277D8 0 ??0exception@@QAE@XZ
File pos Mem pos ID Text
======== ======= == ====
0000000257F0 0000004277F0 0 fputs
0000000257F8 0000004277F8 0 fread
000000025808 000000427808 0 _ftol
000000025810 000000427810 0 memcpy
00000002581A 00000042781A 0 memset
000000025824 000000427824 0 __dllonexit
000000025832 000000427832 0 _onexit
00000002583A 00000042783A 0 MSVCRT.dll
000000025848 000000427848 0 ??1type_info@@UAE@XZ
000000025860 000000427860 0 _initterm
00000002586C 00000042786C 0 malloc
000000025876 000000427876 0 _adjust_fdiv
000000025886 000000427886 0 HeapCreate
000000025894 000000427894 0 InterlockedCompareExchange
0000000258B2 0000004278B2 0 InterlockedExchange
0000000258C8 0000004278C8 0 HeapDestroy
0000000258D6 0000004278D6 0 HeapFree
0000000258E2 0000004278E2 0 OpenThread
0000000258F0 0000004278F0 0 SetThreadContext
000000025904 000000427904 0 GetThreadContext
000000025918 000000427918 0 Thread32Next
000000025928 000000427928 0 HeapReAlloc
000000025936 000000427936 0 HeapAlloc
000000025942 000000427942 0 GetCurrentThreadId
000000025958 000000427958 0 GetCurrentProcessId
00000002596E 00000042796E 0 Thread32First
00000002597E 00000042797E 0 CreateToolhelp32Snapshot
00000002599A 00000042799A 0 FlushInstructionCache
0000000259B2 0000004279B2 0 GetCurrentProcess
000000025A02 000000427A02 0 Library.dll
000000025A0E 000000427A0E 0 iinit
0000000260B0 0000004280B0 0 .?AVexception@@
0000000260C8 0000004280C8 0 .?AVException@@
0000000260E0 0000004280E0 0 .?AVArgumentOutOfRangeException@@
000000026118 000000428118 0 .?AVbad_exception@std@@
000000026130 000000428130 0 bad exception
000000026150 000000428150 0 .?AVIOException@@
000000026170 000000428170 0 .?AVFileNotFoundException@@
000000026190 000000428190 0 Logger is now on new TraceLevel: %s
0000000261B4 0000004281B4 0 UNKNOWN
0000000261C0 0000004281C0 0 TRACE
0000000261C8 0000004281C8 0 NOTICE
0000000261D0 0000004281D0 0 WARNING
0000000261D8 0000004281D8 0 ERROR
0000000261E0 0000004281E0 0 FATAL
0000000261E8 0000004281E8 0 [%s]: %s
000000026200 000000428200 0 .?AVThreadException@@
000000026218 000000428218 0 Can't resume thread
00000002622C 00000042822C 0 MessageBoxTimeoutA
000000026240 000000428240 0 user32.dll
00000002624C 00000042824C 0 [%04d/%02d/%02d %02d:%02d:%02d.%03d] %s
000000026274 000000428274 0 determining pin pad
000000026290 000000428290 0 .?AVXfsException@@
0000000262A4 0000004282A4 0 Settings cash units info END.
0000000262C4 0000004282C4 0 Settings cash units info.
0000000262E0 0000004282E0 0 ca5h units info received
0000000262FC 0000004282FC 0 try to set %d
00000002630C 00000042830C 0 n0 p1npad
000000026320 000000428320 0 .?AVXfsGetInfoException@@
00000002633C 00000042833C 0 Xfs::QueryCashUnitsFromAtm4
File pos Mem pos ID Text
======== ======= == ====
000000026358 000000428358 0 Xfs::QueryCashUnitsFromAtm3
000000026374 000000428374 0 Xfs::QueryCashUnitsFromAtm2
000000026390 000000428390 0 LFS found info about <%d> ca5h un1t5
0000000263C0 0000004283C0 0 .?AVXfsDispenseException@@
0000000263E8 0000004283E8 0 .?AVHookLibException@@
000000026400 000000428400 0 WFMFreeBuffer
000000026410 000000428410 0 WFMAllocateMore
000000026420 000000428420 0 WFMAllocateBuffer
000000026434 000000428434 0 WFSExecute
000000026440 000000428440 0 WFSFreeResult
000000026450 000000428450 0 WFSStartUp
00000002645C 00000042845C 0 WFSGetInfo
000000026468 000000428468 0 no xf5 module found
00000002647C 00000042847C 0 msxfs.dll
0000000264B8 0000004284B8 0 |INDEX:%d|Values:%d|Money count:%d|
0000000264E0 0000004284E0 0 Founded < %d > commands
0000000264FC 0000004284FC 0 Command file deleted successfully
000000026520 000000428520 0 Reading command from a %s
00000002653C 00000042853C 0 %s\%s
000000026544 000000428544 0 FileCommandProvider::ReadXfsCommandFromFile ->
000000026580 000000428580 0 .?AVArgumentException@@
000000026598 000000428598 0 exception
0000000265A8 0000004285A8 0 CommandProcessor created
0000000265C4 0000004285C4 0 DEFAULT command processed
0000000265E0 0000004285E0 0 NONE command processed
0000000265F8 0000004285F8 0 System error!
000000026608 000000428608 0 Dispense failed. CODE:%d
000000026624 000000428624 0 Multi Dispensing start
00000002663C 00000042863C 0 Dispense failed. Unknown reason.
000000026660 000000428660 0 Dispense failed. %d
000000026674 000000428674 0 Manual Dispensing
000000026688 000000428688 0 Display Balance -> exception, code:%d
0000000266B0 0000004286B0 0 Display Balance 1try -> exception, code:%d
0000000266DC 0000004286DC 0 CommandProcessor::ProcessCommand ->
000000026700 000000428700 0 SetMaximumDispenseSize:%d
00000002671C 00000042871C 0 NULL command processed
000000026734 000000428734 0 ICommandProcessor::ProcessCommand -> start method
000000026768 000000428768 0 Processing command #%d
000000026780 000000428780 0 Received
00000002678D 00000042878D 0 commands
000000026798 000000428798 0 exception cauch: %d
0000000267AC 0000004287AC 0 Exiting
0000000267B4 0000004287B4 0 Pausing
0000000267BC 0000004287BC 0 trying to dispense
0000000267D0 0000004287D0 0 R2CommandProcessor::ProcessGetRealBalance()1
000000026800 000000428800 0 cur disp service is |%d|
00000002681C 00000042881C 0 try toi set %d
00000002682C 00000042882C 0 ___log.txt
000000026838 000000428838 0 Deleting resources
000000026858 000000428858 0 .?AVXfsLoaderException@@
000000026874 000000428874 0 uncatched
000000026880 000000428880 0 %s:%d
000000026888 000000428888 0 c:\atm\1
000000026894 000000428894 0 void CreateAllResources()
0000000268B0 0000004288B0 0 Xfs init error
0000000268C0 0000004288C0 0 Critical system error!
0000000268D8 0000004288D8 0 resources created
0000000268EC 0000004288EC 0 MH_UNKNOWN
0000000268F8 0000004288F8 0 MH_OK
000000026900 000000428900 0 MH_ERROR_ALREADY_INITIALIZED
File pos Mem pos ID Text
======== ======= == ====
000000026920 000000428920 0 MH_ERROR_NOT_INITIALIZED
00000002693C 00000042893C 0 MH_ERROR_ALREADY_CREATED
000000026958 000000428958 0 MH_ERROR_NOT_CREATED
000000026970 000000428970 0 MH_ERROR_ENABLED
000000026984 000000428984 0 MH_ERROR_DISABLED
000000026998 000000428998 0 MH_ERROR_NOT_EXECUTABLE
0000000269B0 0000004289B0 0 MH_ERROR_UNSUPPORTED_FUNCTION
0000000269D0 0000004289D0 0 MH_ERROR_MEMORY_ALLOC
0000000269E8 0000004289E8 0 MH_ERROR_MEMORY_PROTECT
000000026A00 000000428A00 0 MH_ERROR_MODULE_NOT_FOUND
000000026A1C 000000428A1C 0 MH_ERROR_FUNCTION_NOT_FOUND
000000026A38 000000428A38 0 (unknown)
000000026A92 000000428A92 0 YYYYY
000000026A9E 000000428A9E 0 YYYYYYYYYYYY
000000026AAC 000000428AAC 0 }YPPPPYYYYa
000000026AC2 000000428AC2 0 YYYYYYYYYYY
000000026B74 000000428B74 0 JJJJKRJJJJOLJJJJJJJJUE@JJJEYMFJ]JJJJJJJJJJJJJJacgNJJkmJJEmJJDEJJ
000000026C58 000000428C58 0 .?AVtype_info@@
00000002706B 00000042906B 0 0!01070Q0W0a0q0w0
000000027081 000000429081 0 1-1K1]1
00000002708D 00000042908D 0 2,2i2
000000027099 000000429099 0 363B3
0000000270B5 0000004290B5 0 :";V;q;
0000000270D3 0000004290D3 0 =(=1=I=R=u={=
0000000270E7 0000004290E7 0 =">(>Z>r>
0000000270FF 0000004290FF 0 ?!?1?7?Q?W?a?q?w?
000000027127 000000429127 0 0;0M0f0m0{0
000000027149 000000429149 0 3*313I3h3
000000027159 000000429159 0 3#4m4
00000002716D 00000042916D 0 636B6f6z6
000000027183 000000429183 0 7*7V7g7
0000000271A5 0000004291A5 0 9,:::
0000000271BB 0000004291BB 0 >.>3>A>
0000000271C3 0000004291C3 0 >m>s>
0000000271D5 0000004291D5 0 ?+?c?
0000000271EF 0000004291EF 0 0N0_0
0000000271FB 0000004291FB 0 1%111=1J1Q1W1
00000002721F 00000042921F 0 2(3?3b3
000000027229 000000429229 0 4(4_4
00000002723B 00000042923B 0 435T5}5
00000002726B 00000042926B 0 8L8{8
000000027277 000000429277 0 979K9i9r9
00000002728F 00000042928F 0 9":c:
0000000272A5 0000004292A5 0 :3;O;n;
0000000272AD 0000004292AD 0 ;C<V<
0000000272B7 0000004292B7 0 = =%=6=
0000000272C3 0000004292C3 0 >e>m>
0000000272E7 0000004292E7 0 1+2v2
000000027303 000000429303 0 4&4J4[4u4
00000002730D 00000042930D 0 4K5]5
000000027313 000000429313 0 5@7M7
000000027323 000000429323 0 8+8=8S8n8
00000002732D 00000042932D 0 9'91979
000000027341 000000429341 0 ;X;o;
000000027349 000000429349 0 ;9<K<
000000027381 000000429381 0 7*7/777=7D7J7Q7W7
000000027393 000000429393 0 7d7k7q7x7~7
0000000273A5 0000004293A5 0 8 8%898q8y8
0000000273C3 0000004293C3 0 9.969;9a9f9}9
0000000273E3 0000004293E3 0 :#:(:N:S:j:r:w:
File pos Mem pos ID Text
======== ======= == ====
000000027405 000000429405 0 ;8;=;T;\;a;
000000027417 000000429417 0 <!<s<
000000027425 000000429425 0 ===S=f=k=z=
000000027455 000000429455 0 0<0T0
000000027463 000000429463 0 1)1/1@1Y1
00000002746F 00000042946F 0 2 2C2d2j2
000000027487 000000429487 0 3/353B3
000000027493 000000429493 0 4#4(4K4Q4g4m4
0000000274B9 0000004294B9 0 6 606<6
0000000274C9 0000004294C9 0 737F7t7
0000000274DF 0000004294DF 0 8?8D8T8Z8j8
0000000274F7 0000004294F7 0 :/:5:D:W:d:p:
000000027507 000000429507 0 ;';N;q;
000000027521 000000429521 0 >b>o>{>
00000002753B 00000042953B 0 ?#?)?;?
000000027551 000000429551 0 011P1
000000027557 000000429557 0 1#2)2:2?2P2
000000027567 000000429567 0 3$3F3U3y3
00000002757D 00000042957D 0 4/4;4e4v4
00000002758B 00000042958B 0 525}5
00000002759B 00000042959B 0 7%7@7e7p7
0000000275B3 0000004295B3 0 8W8\8c8k8z8
0000000275CD 0000004295CD 0 9#9+9:9H9
0000000275DB 0000004295DB 0 9$:):A:I:
0000000275EF 0000004295EF 0 ;)<V<
000000027603 000000429603 0 =@=N=l=
000000027613 000000429613 0 =%>*>H>P>\>e>k>
00000002762B 00000042962B 0 ? ?,?5?;?i?
000000027645 000000429645 0 0#0F0U0g0
00000002764F 00000042964F 0 0(1C1f1u1
00000002765D 00000042965D 0 2J233_3p3
000000027669 000000429669 0 3[4v4
00000002768B 00000042968B 0 8=8c8
00000002769B 00000042969B 0 9:9#:O:
0000000276A7 0000004296A7 0 :K;f;|;
0000000276B3 0000004296B3 0 ;=<v<
0000000276C9 0000004296C9 0 >-?S?q?z?
0000000276E9 0000004296E9 0 0]1m1
0000000276F3 0000004296F3 0 1[2k2
000000027711 000000429711 0 5%555
00000002771B 00000042971B 0 6%656j6
000000027737 000000429737 0 738K8]8
000000027747 000000429747 0 9$9A9
000000027759 000000429759 0 :A;q;z;
000000027769 000000429769 0 <F<d<
000000027773 000000429773 0 <B=P=
000000027781 000000429781 0 >$>5>I>
0000000277BC 0000004297BC 0 @0Z0w0
0000000277D1 0000004297D1 0 3'4y4(5,5054585<5@5D5H5L5P5T5X5\5
0000000277FF 0000004297FF 0 626V6l6
000000027817 000000429817 0 868T8
00000002781F 00000042981F 0 969f9
000000027827 000000429827 0 9$:S:
000000027839 000000429839 0 ;-;x;};
000000027843 000000429843 0 ;C<x<
00000002784B 00000042984B 0 <"=1=Q=q=
000000027865 000000429865 0 >7?q?
00000002788B 00000042988B 0 1%1V1a1u1
0000000278A9 0000004298A9 0 2 2.2<2]2b2{2
0000000278CF 0000004298CF 0 4'4k4
File pos Mem pos ID Text
======== ======= == ====
0000000278E3 0000004298E3 0 5#5u5
000000027907 000000429907 0 7/7@7T7Z7l7r7
00000002791B 00000042991B 0 828A8F8L8
00000002793B 00000042993B 0 9"9,969@9
000000027953 000000429953 0 ;%;_;><f=u=
000000027984 000000429984 0 A0%222R2[2d2p2w2|2
0000000279C5 0000004299C5 0 4&4.454A4J4Q4a4h4q4
0000000279EF 0000004299EF 0 6 7-7
0000000279F7 0000004299F7 0 7H8M8T8[8b8i8p8w8~8
000000027A3D 000000429A3D 0 9(:3:E:
000000027A5B 000000429A5B 0 294f4
000000027A69 000000429A69 0 697@7
000000027AA7 000000429AA7 0 >">(>3>@>H>V>[>
000000027AB7 000000429AB7 0 >e>p>}>
000000027AC9 000000429AC9 0 >>?Z?
000000027ACF 000000429ACF 0 ?f?l?r?
000000027AEC 000000429AEC 0 0)0E0V0[0u0z0
000000027B05 000000429B05 0 161;1Y1y1
000000027B19 000000429B19 0 292Y2y2
000000027B27 000000429B27 0 2 3%323I3i3
000000027B43 000000429B43 0 4 4)424;4D4M4V4[4u4
000000027B63 000000429B63 0 595U5
000000027B69 000000429B69 0 5o5t5
000000027B95 000000429B95 0 7H7M7
000000027BA9 000000429BA9 0 8#858:8U8Z8u8~8
000000027BCF 000000429BCF 0 959:9U9Z9u9z9
000000027BE9 000000429BE9 0 91:Y:y:
000000027BF7 000000429BF7 0 : ;w;
000000027C07 000000429C07 0 ;+<8<Q<u<z<
000000027C57 000000429C57 0 2 2$2(2,2024282<2@2D2H2L2P2T2X2\2
000000027C79 000000429C79 0 2d2h2l2p2t2x2|2
000000027CCB 000000429CCB 0 3(3<3L3P3\3p3|3
000000027CF3 000000429CF3 0 4(44484D4L4T4h4t4
000000027D1F 000000429D1F 0 5$505L5T5\5h5
000000027D41 000000429D41 0 6$606L6T6
000000027D5F 000000429D5F 0 7,747@7\7d7x7
000000027D81 000000429D81 0 8 8(8D8
000000027D9D 000000429D9D 0 9$9(9,949<9H9P9l9
000000027DC9 000000429DC9 0 :0:<:@:D:H:T:\:h:
000000027DEB 000000429DEB 0 ;,;4;@;\;d;p;
000000027E11 000000429E11 0 <$<,<8<T<\<d<p<
000000027E39 000000429E39 0 =$=0=L=T=\=d=p=
000000027E5D 000000429E5D 0 >,><>P>d>p>
000000027E7F 000000429E7F 0 ?4?<?H?d?l?t?|?
000000027EB3 000000429EB3 0 0$0,040<0P0\0
000000027EC1 000000429EC1 0 0d0l0t0
000000027EDF 000000429EDF 0 1,181@1\1d1
000000027EFB 000000429EFB 0 2 2<2D2P2l2x2
000000027F17 000000429F17 0 343@3\3h3
000000027F2F 000000429F2F 0 3 4,444D4P4X4l4|4
000000027F4D 000000429F4D 0 5$5,545<5D5T5\5d5t5
000000027F75 000000429F75 0 646P6\6d6p6x6
000000027F93 000000429F93 0 7$70787T7p7|7
000000027FB9 000000429FB9 0 8 8(8D8
000000027FDB 000000429FDB 0 9$9,949D9P9l9t9|9
000000027FF7 000000429FF7 0 :$:4:D:P:l:t:|:
000000028025 00000042A025 0 0 0$0(0H0
00000000F69C 00000040F69C 0 (null)
00000000004D 00000040004D 0 !This program cannot be run in DOS mode.
0000000001F0 0000004001F0 0 .text
File pos Mem pos ID Text
======== ======= == ====
000000000218 000000400218 0 .rdata
00000000023F 00000040023F 0 @.data
000000000268 000000400268 0 .rsrc
0000000023D3 0000004023D3 0 PSSSSSSSSj
0000000049E9 0000004049E9 0 t/Ht HH
0000000053DA 0000004053DA 0 VWhST@
00000000570B 00000040570B 0 QWj P
0000000058BD 0000004058BD 0 QQSVWd
000000005B5F 000000405B5F 0 SVWUj
000000005BC8 000000405BC8 0 t.;t$$t(
000000006656 000000406656 0 uRFGHt
000000006700 000000406700 0 tlHt.
0000000067D8 0000004067D8 0 wDVSU
0000000069C0 0000004069C0 0 VC20XC00U
000000007516 000000407516 0 PPPPPPPP
000000007576 000000407576 0 9= :A
00000000757C 00000040757C 0 uFWWj
0000000075A1 0000004075A1 0 "WWSh|
00000000768D 00000040768D 0 tMWWS
000000007AD0 000000407AD0 0 sO;>|C;~
000000007FC8 000000407FC8 0 QQSVW
0000000080A9 0000004080A9 0 QQSVW
0000000080FF 0000004080FF 0 QQSVW
000000008645 000000408645 0 HHtpHHtl
0000000088FC 0000004088FC 0 Yt f
000000008EBB 000000408EBB 0 btHHt.
000000009B67 000000409B67 0 DSUVWh
00000000A13D 00000040A13D 0 eYt,F
00000000A756 00000040A756 0 ?=t"U
00000000A8AA 00000040A8AA 0 8"uF@
00000000AA78 00000040AA78 0 SS@SSPVSS
00000000AA9A 00000040AA9A 0 t#SSUP
00000000AAA1 00000040AAA1 0 t$$VSS
00000000AB77 00000040AB77 0 A=(.A
00000000B786 00000040B786 0 PPPPPPPP
00000000BB2D 00000040BB2D 0 B=h0A
00000000BD93 00000040BD93 0 t-Ht!Ht
00000000C276 00000040C276 0 SVWj
00000000C39F 00000040C39F 0 SVWj
00000000C7C2 00000040C7C2 0 Y;5T=A
00000000C9C5 00000040C9C5 0 Wj@Y3
00000000CB98 00000040CB98 0 VWuBhT"A
00000000CD48 00000040CD48 0 FGQPS
00000000CFD4 00000040CFD4 0 +ttHHtd
00000000D012 00000040D012 0 j XO
00000000D258 00000040D258 0 HHtYHHtF
00000000F224 00000040F224 0 string too long
00000000F254 00000040F254 0 invalid string position
00000000F3B8 00000040F3B8 0 ios::eofbit set
00000000F3C8 00000040F3C8 0 ios::failbit set
00000000F3DC 00000040F3DC 0 ios::badbit set
00000000F45C 00000040F45C 0 Unknown exception
00000000F4A0 00000040F4A0 0 H:mm:ss
00000000F4A8 00000040F4A8 0 dddd, MMMM dd, yyyy
00000000F4BC 00000040F4BC 0 M/d/yy
00000000F4CC 00000040F4CC 0 December
00000000F4D8 00000040F4D8 0 November
00000000F4E4 00000040F4E4 0 October
00000000F4EC 00000040F4EC 0 September
00000000F4F8 00000040F4F8 0 August
File pos Mem pos ID Text
======== ======= == ====
00000000F510 00000040F510 0 April
00000000F518 00000040F518 0 March
00000000F520 00000040F520 0 February
00000000F52C 00000040F52C 0 January
00000000F564 00000040F564 0 Saturday
00000000F570 00000040F570 0 Friday
00000000F578 00000040F578 0 Thursday
00000000F584 00000040F584 0 Wednesday
00000000F590 00000040F590 0 Tuesday
00000000F598 00000040F598 0 Monday
00000000F5A0 00000040F5A0 0 Sunday
00000000F661 00000040F661 0 (8PX
00000000F669 00000040F669 0 700WP
00000000F681 00000040F681 0 ppxxxx
00000000F6AC 00000040F6AC 0 (null)
00000000F6CE 00000040F6CE 0 GAIsProcessorFeaturePresent
00000000F6EC 00000040F6EC 0 KERNEL32
00000000F6F8 00000040F6F8 0 e+000
00000000F700 00000040F700 0 runtime error
00000000F714 00000040F714 0 TLOSS error
00000000F724 00000040F724 0 SING error
00000000F734 00000040F734 0 DOMAIN error
00000000F744 00000040F744 0 R6028
00000000F74B 00000040F74B 0 - unable to initialize heap
00000000F76C 00000040F76C 0 R6027
00000000F773 00000040F773 0 - not enough space for lowio initialization
00000000F7A4 00000040F7A4 0 R6026
00000000F7AB 00000040F7AB 0 - not enough space for stdio initialization
00000000F7DC 00000040F7DC 0 R6025
00000000F7E3 00000040F7E3 0 - pure virtual function call
00000000F804 00000040F804 0 R6024
00000000F80B 00000040F80B 0 - not enough space for _onexit/atexit table
00000000F83C 00000040F83C 0 R6019
00000000F843 00000040F843 0 - unable to open console device
00000000F868 00000040F868 0 R6018
00000000F86F 00000040F86F 0 - unexpected heap error
00000000F88C 00000040F88C 0 R6017
00000000F893 00000040F893 0 - unexpected multithread lock error
00000000F8BC 00000040F8BC 0 R6016
00000000F8C3 00000040F8C3 0 - not enough space for thread data
00000000F8EA 00000040F8EA 0 abnormal program termination
00000000F90C 00000040F90C 0 R6009
00000000F913 00000040F913 0 - not enough space for environment
00000000F938 00000040F938 0 R6008
00000000F93F 00000040F93F 0 - not enough space for arguments
00000000F964 00000040F964 0 R6002
00000000F96B 00000040F96B 0 - floating point not loaded
00000000F98C 00000040F98C 0 Microsoft Visual C++ Runtime Library
00000000F9B8 00000040F9B8 0 Runtime Error!
00000000F9C8 00000040F9C8 0 Program:
00000000F9D8 00000040F9D8 0 <program name unknown>
00000000F9FC 00000040F9FC 0 SunMonTueWedThuFriSat
00000000FA14 00000040FA14 0 JanFebMarAprMayJunJulAugSepOctNovDec
00000000FA3C 00000040FA3C 0 GetLastActivePopup
00000000FA50 00000040FA50 0 GetActiveWindow
00000000FA60 00000040FA60 0 MessageBoxA
00000000FA6C 00000040FA6C 0 1#QNAN
00000000FA74 00000040FA74 0 1#INF
00000000FA7C 00000040FA7C 0 1#IND
00000000FA84 00000040FA84 0 1#SNAN
File pos Mem pos ID Text
======== ======= == ====
000000010CD6 000000410CD6 0 CreateDirectoryA
000000010CEA 000000410CEA 0 GetFileAttributesA
000000010D00 000000410D00 0 CloseHandle
000000010D0E 000000410D0E 0 ReadFile
000000010D1A 000000410D1A 0 GetFileSize
000000010D28 000000410D28 0 CreateFileA
000000010D36 000000410D36 0 WriteFile
000000010D42 000000410D42 0 SetFilePointer
000000010D54 000000410D54 0 LocalFree
000000010D60 000000410D60 0 LocalAlloc
000000010D6E 000000410D6E 0 SizeofResource
000000010D80 000000410D80 0 LockResource
000000010D90 000000410D90 0 LoadResource
000000010DA0 000000410DA0 0 FindResourceA
000000010DB0 000000410DB0 0 GetModuleHandleA
000000010DC4 000000410DC4 0 GetStdHandle
000000010DD4 000000410DD4 0 GetLastError
000000010DE4 000000410DE4 0 GetTickCount
000000010DF4 000000410DF4 0 GetModuleFileNameA
000000010E0A 000000410E0A 0 Sleep
000000010E12 000000410E12 0 ResumeThread
000000010E22 000000410E22 0 VirtualFreeEx
000000010E32 000000410E32 0 SetThreadContext
000000010E46 000000410E46 0 LoadLibraryA
000000010E56 000000410E56 0 WriteProcessMemory
000000010E6C 000000410E6C 0 GetProcAddress
000000010E7E 000000410E7E 0 VirtualAllocEx
000000010E90 000000410E90 0 GetThreadContext
000000010EA4 000000410EA4 0 SuspendThread
000000010EB4 000000410EB4 0 OpenThread
000000010EC2 000000410EC2 0 Thread32Next
000000010ED2 000000410ED2 0 Thread32First
000000010EE2 000000410EE2 0 CreateToolhelp32Snapshot
000000010EFE 000000410EFE 0 OpenProcess
000000010F0C 000000410F0C 0 GetCurrentProcess
000000010F20 000000410F20 0 Process32Next
000000010F30 000000410F30 0 Process32First
000000010F40 000000410F40 0 KERNEL32.dll
000000010F4E 000000410F4E 0 USER32.dll
000000010F5C 000000410F5C 0 FreeSid
000000010F66 000000410F66 0 SetFileSecurityA
000000010F7A 000000410F7A 0 SetSecurityDescriptorDacl
000000010F96 000000410F96 0 InitializeSecurityDescriptor
000000010FB6 000000410FB6 0 SetEntriesInAclA
000000010FCA 000000410FCA 0 AllocateAndInitializeSid
000000010FE6 000000410FE6 0 AdjustTokenPrivileges
000000010FFE 000000410FFE 0 OpenProcessToken
000000011010 000000411010 0 ADVAPI32.dll
000000011020 000000411020 0 PathAppendA
00000001102C 00000041102C 0 SHLWAPI.dll
000000011038 000000411038 0 PSAPI.DLL
000000011044 000000411044 0 MultiByteToWideChar
00000001105A 00000041105A 0 WideCharToMultiByte
000000011070 000000411070 0 RtlUnwind
00000001107C 00000041107C 0 RaiseException
00000001108E 00000041108E 0 HeapReAlloc
00000001109C 00000041109C 0 HeapAlloc
0000000110A8 0000004110A8 0 HeapFree
0000000110B4 0000004110B4 0 ExitProcess
0000000110C2 0000004110C2 0 TerminateProcess
File pos Mem pos ID Text
======== ======= == ====
0000000110D6 0000004110D6 0 GetCommandLineA
0000000110E8 0000004110E8 0 GetVersion
0000000110F6 0000004110F6 0 LCMapStringA
000000011106 000000411106 0 LCMapStringW
000000011116 000000411116 0 GetCPInfo
000000011122 000000411122 0 HeapSize
00000001112E 00000041112E 0 SetUnhandledExceptionFilter
00000001114C 00000041114C 0 HeapDestroy
00000001115A 00000041115A 0 HeapCreate
000000011168 000000411168 0 VirtualFree
000000011176 000000411176 0 VirtualAlloc
000000011186 000000411186 0 IsBadWritePtr
000000011196 000000411196 0 SetHandleCount
0000000111A8 0000004111A8 0 GetFileType
0000000111B6 0000004111B6 0 GetStartupInfoA
0000000111C8 0000004111C8 0 UnhandledExceptionFilter
0000000111E4 0000004111E4 0 FreeEnvironmentStringsA
0000000111FE 0000004111FE 0 FreeEnvironmentStringsW
000000011218 000000411218 0 GetEnvironmentStrings
000000011230 000000411230 0 GetEnvironmentStringsW
00000001124A 00000041124A 0 FlushFileBuffers
00000001125E 00000041125E 0 GetStringTypeA
000000011270 000000411270 0 GetStringTypeW
000000011282 000000411282 0 IsBadReadPtr
000000011292 000000411292 0 IsBadCodePtr
0000000112A2 0000004112A2 0 SetStdHandle
0000000112B2 0000004112B2 0 GetACP
0000000112BC 0000004112BC 0 GetOEMCP
0000000112C8 0000004112C8 0 SetEndOfFile
0000000120F8 0000004120F8 0 .?AVException@@
000000012110 000000412110 0 .?AVexception@@
000000012128 000000412128 0 .?AVArgumentOutOfRangeException@@
00000001214C 00000041214C 0 no processes found. Exiting.
00000001216C 00000041216C 0 Founded %d precesses.
000000012184 000000412184 0 atmapp.exe
00000001219C 00000041219C 0 c:\atm\1
0000000121A8 0000004121A8 0 lib_%s
0000000121B8 0000004121B8 0 .?AVbad_exception@std@@
0000000121D0 0000004121D0 0 bad exception
00000001220C 00000041220C 0 LoadLibraryA
00000001221C 00000041221C 0 [-] Error: Couldn't get thread handle
000000012244 000000412244 0 kernel32.dll
000000012254 000000412254 0 user32.dll
000000012268 000000412268 0 .?AVlogic_error@std@@
000000012288 000000412288 0 .?AVlength_error@std@@
0000000122A8 0000004122A8 0 .?AVout_of_range@std@@
0000000122D0 0000004122D0 0 .?AVios_base@std@@
0000000122F0 0000004122F0 0 .?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
000000012328 000000412328 0 .?AV?$basic_istream@DU?$char_traits@D@std@@@std@@
000000012368 000000412368 0 .?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@
0000000123A8 0000004123A8 0 .?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
0000000123E8 0000004123E8 0 .?AV?$basic_filebuf@DU?$char_traits@D@std@@@std@@
000000012428 000000412428 0 .?AV?$basic_ios@GU?$char_traits@G@std@@@std@@
000000012460 000000412460 0 .?AV?$basic_istream@GU?$char_traits@G@std@@@std@@
0000000124A0 0000004124A0 0 .?AV?$basic_ostream@GU?$char_traits@G@std@@@std@@
0000000124E0 0000004124E0 0 .?AV?$basic_filebuf@GU?$char_traits@G@std@@@std@@
000000012520 000000412520 0 .?AV?$basic_streambuf@GU?$char_traits@G@std@@@std@@
000000012560 000000412560 0 .?AVruntime_error@std@@
000000012580 000000412580 0 .?AVfailure@ios_base@std@@
0000000125A8 0000004125A8 0 .?AVfacet@locale@std@@
File pos Mem pos ID Text
======== ======= == ====
0000000125C8 0000004125C8 0 .?AV_Locimp@locale@std@@
000000012600 000000412600 0 .?AVtype_info@@
0000000133EE 0000004133EE 0 z?aUY
000000013430 000000413430 0 zc%C1
000000013483 000000413483 0 -64OS
0000000140AD 0000004160AD 0 !This program cannot be run in DOS mode.
000000014250 000000416250 0 .text
000000014278 000000416278 0 .rdata
00000001429F 00000041629F 0 @.data
0000000142C8 0000004162C8 0 .reloc
000000015C19 000000417C19 0 L$(SUV
000000015C20 000000417C20 0 D$8W3
000000015C55 000000417C55 0 D$HPQVU
000000016129 000000418129 0 D$<SUVW
000000016894 000000418894 0 d$hPUQ
000000016CA3 000000418CA3 0 L$(QV
000000016CD6 000000418CD6 0 D$ VP
000000016D92 000000418D92 0 D$$UP
000000016FDB 000000418FDB 0 l$ VW
00000001721B 00000041921B 0 l$,VW
000000017349 000000419349 0 L$$SUV
000000017350 000000419350 0 D$4WPQ
00000001737F 00000041937F 0 D$DPQVS
000000017880 000000419880 0 D$@_][
000000017AA9 000000419AA9 0 T$(PR
000000017C19 000000419C19 0 D$$SUVW
000000017E96 000000419E96 0 d}9SV
000000017FDC 000000419FDC 0 L$<QR
0000000180A9 00000041A0A9 0 L$<Qj
000000018137 00000041A137 0 VWhd"
0000000184C7 00000041A4C7 0 D$,SP
00000001856A 00000041A56A 0 L$8QR
0000000185D2 00000041A5D2 0 $SUVW
000000018804 00000041A804 0 L$ hP
0000000188C5 00000041A8C5 0 QSUVW
000000018B79 00000041AB79 0 L$$SUV
000000018B80 00000041AB80 0 D$4WPQ
000000018BAF 00000041ABAF 0 D$DPQVS
000000018DA9 00000041ADA9 0 L$$SUV
000000018DB0 00000041ADB0 0 D$4WPQ
000000018DDF 00000041ADDF 0 D$DPQVS
000000018ED9 00000041AED9 0 L$$SUV
000000018EE0 00000041AEE0 0 D$4WPQ
000000018F0F 00000041AF0F 0 D$DPQVS
00000001910C 00000041B10C 0 L$ QW
00000001918F 00000041B18F 0 U4RQU
00000001961C 00000041B61C 0 SUVW3
000000019658 00000041B658 0 L$$Qj
00000001993C 00000041B93C 0 IQhH$
00000001998B 00000041B98B 0 IQhD$
0000000199DA 00000041B9DA 0 IQh@$
000000019A29 00000041BA29 0 IQh<$
000000019A78 00000041BA78 0 IQh8$
000000019AC7 00000041BAC7 0 IQh4$
000000019B16 00000041BB16 0 IQh0$
000000019B65 00000041BB65 0 IQh,$
000000019BB1 00000041BBB1 0 IQh($
000000019C28 00000041BC28 0 SUVW3
000000019D59 00000041BD59 0 D$|VW3
000000019D99 00000041BD99 0 D$@hX$
File pos Mem pos ID Text
======== ======= == ====
000000019E7E 00000041BE7E 0 |$(t-
000000019EE9 00000041BEE9 0 D$LSUV3
00000001A152 00000041C152 0 L$$PQ
00000001A249 00000041C249 0 D$8SUV3
00000001A2B8 00000041C2B8 0 \$<QSR
00000001A2D7 00000041C2D7 0 T$$QPR
00000001A429 00000041C429 0 D$8SUV3
00000001A49F 00000041C49F 0 \$<QRV
00000001A4BB 00000041C4BB 0 T$$PSR
00000001A9FB 00000041C9FB 0 SUVW3
00000001AA9C 00000041CA9C 0 L$0RVW
00000001AAC9 00000041CAC9 0 L$PQP
00000001ABCA 00000041CBCA 0 D$PPW
00000001ADA5 00000041CDA5 0 |$ QPW
00000001AE39 00000041CE39 0 D$8UVWj
00000001AED4 00000041CED4 0 L$HQP
00000001B167 00000041D167 0 ,SUVW
00000001B183 00000041D183 0 l$Dt#
00000001B23D 00000041D23D 0 d$(Ph
00000001B517 00000041D517 0 @SUVW
00000001B6C5 00000041D6C5 0 D$X VP
00000001BA0C 00000041DA0C 0 t$hWj
00000001BA9E 00000041DA9E 0 IQhP$
00000001BB53 00000041DB53 0 D$ PQ
00000001C2BA 00000041E2BA 0 T$$QWVR
00000001C2FC 00000041E2FC 0 L$$PWVQ
00000001C343 00000041E343 0 D$,VP
00000001C9AA 00000041E9AA 0 T$$QWVR
00000001C9EC 00000041E9EC 0 L$$PWVQ
00000001CA33 00000041EA33 0 D$,VP
00000001E067 000000420067 0 0SUVW
00000001E09C 00000042009C 0 D$ h '
00000001E4D4 0000004204D4 0 d$8Ph8'
00000001E4FD 0000004204FD 0 t$(to
00000001EAC8 000000420AC8 0 SUVW3
00000001EBA1 000000420BA1 0 |$0t1
00000001EBD4 000000420BD4 0 \$$hh!
00000001F1E8 0000004211E8 0 QRh (
00000001F27D 00000042127D 0 SVh4(
000000021F48 000000423F48 0 t WVS
000000021F75 000000423F75 0 u7WPS
000000021F86 000000423F86 0 u&WVS
000000024D3E 000000426D3E 0 CloseHandle
000000024D4C 000000426D4C 0 ReadFile
000000024D58 000000426D58 0 GetFileSize
000000024D66 000000426D66 0 CreateFileA
000000024D74 000000426D74 0 WriteFile
000000024D80 000000426D80 0 SetFilePointer
000000024D92 000000426D92 0 GetLocalTime
000000024DA2 000000426DA2 0 GetModuleFileNameA
000000024DB8 000000426DB8 0 DeleteFileA
000000024DC6 000000426DC6 0 VirtualQuery
000000024DD6 000000426DD6 0 CreateThread
000000024DE6 000000426DE6 0 TerminateThread
000000024DF8 000000426DF8 0 Sleep
000000024E00 000000426E00 0 SuspendThread
000000024E10 000000426E10 0 ResumeThread
000000024E20 000000426E20 0 GetProcAddress
000000024E32 000000426E32 0 LoadLibraryA
000000024E42 000000426E42 0 GetModuleHandleA
File pos Mem pos ID Text
======== ======= == ====
000000024E56 000000426E56 0 VirtualFree
000000024E64 000000426E64 0 VirtualAlloc
000000024E74 000000426E74 0 FindNextFileA
000000024E84 000000426E84 0 FindFirstFileA
000000024E96 000000426E96 0 WaitForSingleObject
000000024EAC 000000426EAC 0 VirtualProtect
000000024EBC 000000426EBC 0 KERNEL32.dll
000000024ECC 000000426ECC 0 MessageBoxA
000000024ED8 000000426ED8 0 USER32.dll
000000024EE4 000000426EE4 0 ADVAPI32.dll
000000024EF4 000000426EF4 0 ??0Init@ios_base@std@@QAE@XZ
000000024F14 000000426F14 0 ??1Init@ios_base@std@@QAE@XZ
000000024F34 000000426F34 0 ??0_Winit@std@@QAE@XZ
000000024F4C 000000426F4C 0 ??1_Winit@std@@QAE@XZ
000000024F64 000000426F64 0 ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
000000024FAE 000000426FAE 0 ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
00000002500A 00000042700A 0 ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
000000025066 000000427066 0 ?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
0000000250B8 0000004270B8 0 ?_Xlen@std@@YAXXZ
0000000250CC 0000004270CC 0 ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
000000025120 000000427120 0 ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
00000002516A 00000042716A 0 ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
0000000251BA 0000004271BA 0 ?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
000000025208 000000427208 0 ?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
000000025256 000000427256 0 ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
0000000252AE 0000004272AE 0 ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
00000002530A 00000042730A 0 ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
000000025362 000000427362 0 ??0bad_exception@std@@QAE@ABV01@@Z
000000025388 000000427388 0 ??1bad_exception@std@@UAE@XZ
0000000253A8 0000004273A8 0 ??0bad_exception@std@@QAE@PBD@Z
0000000253CA 0000004273CA 0 ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
000000025426 000000427426 0 ?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
000000025474 000000427474 0 ?_Xran@std@@YAXXZ
000000025488 000000427488 0 ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
0000000254DE 0000004274DE 0 ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
000000025530 000000427530 0 ?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
000000025584 000000427584 0 ?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
0000000255E2 0000004275E2 0 ?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
000000025640 000000427640 0 ?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
000000025692 000000427692 0 ??1_Lockit@std@@QAE@XZ
0000000256AC 0000004276AC 0 ??0_Lockit@std@@QAE@XZ
0000000256C4 0000004276C4 0 MSVCP60.dll
0000000256D2 0000004276D2 0 PathFileExistsA
0000000256E4 0000004276E4 0 PathAppendA
0000000256F0 0000004276F0 0 SHLWAPI.dll
0000000256FE 0000004276FE 0 __CxxFrameHandler
00000002571A 00000042771A 0 memmove
000000025724 000000427724 0 ??0exception@@QAE@ABV0@@Z
000000025748 000000427748 0 realloc
000000025752 000000427752 0 _CxxThrowException
000000025768 000000427768 0 ?what@exception@@UBEPBDXZ
000000025784 000000427784 0 ??1exception@@UAE@XZ
00000002579C 00000042779C 0 _vsnprintf
0000000257AA 0000004277AA 0 ??2@YAPAXI@Z
0000000257BA 0000004277BA 0 fclose
0000000257C4 0000004277C4 0 vfprintf
0000000257D0 0000004277D0 0 fopen
0000000257D8 0000004277D8 0 ??0exception@@QAE@XZ
0000000257F0 0000004277F0 0 fputs
0000000257F8 0000004277F8 0 fread
File pos Mem pos ID Text
======== ======= == ====
000000025808 000000427808 0 _ftol
000000025810 000000427810 0 memcpy
00000002581A 00000042781A 0 memset
000000025824 000000427824 0 __dllonexit
000000025832 000000427832 0 _onexit
00000002583A 00000042783A 0 MSVCRT.dll
000000025848 000000427848 0 ??1type_info@@UAE@XZ
000000025860 000000427860 0 _initterm
00000002586C 00000042786C 0 malloc
000000025876 000000427876 0 _adjust_fdiv
000000025886 000000427886 0 HeapCreate
000000025894 000000427894 0 InterlockedCompareExchange
0000000258B2 0000004278B2 0 InterlockedExchange
0000000258C8 0000004278C8 0 HeapDestroy
0000000258D6 0000004278D6 0 HeapFree
0000000258E2 0000004278E2 0 OpenThread
0000000258F0 0000004278F0 0 SetThreadContext
000000025904 000000427904 0 GetThreadContext
000000025918 000000427918 0 Thread32Next
000000025928 000000427928 0 HeapReAlloc
000000025936 000000427936 0 HeapAlloc
000000025942 000000427942 0 GetCurrentThreadId
000000025958 000000427958 0 GetCurrentProcessId
00000002596E 00000042796E 0 Thread32First
00000002597E 00000042797E 0 CreateToolhelp32Snapshot
00000002599A 00000042799A 0 FlushInstructionCache
0000000259B2 0000004279B2 0 GetCurrentProcess
000000025A02 000000427A02 0 Library.dll
000000025A0E 000000427A0E 0 iinit
0000000260B0 0000004280B0 0 .?AVexception@@
0000000260C8 0000004280C8 0 .?AVException@@
0000000260E0 0000004280E0 0 .?AVArgumentOutOfRangeException@@
000000026118 000000428118 0 .?AVbad_exception@std@@
000000026130 000000428130 0 bad exception
000000026150 000000428150 0 .?AVIOException@@
000000026170 000000428170 0 .?AVFileNotFoundException@@
000000026190 000000428190 0 Logger is now on new TraceLevel: %s
0000000261B4 0000004281B4 0 UNKNOWN
0000000261C0 0000004281C0 0 TRACE
0000000261C8 0000004281C8 0 NOTICE
0000000261D0 0000004281D0 0 WARNING
0000000261D8 0000004281D8 0 ERROR
0000000261E0 0000004281E0 0 FATAL
0000000261E8 0000004281E8 0 [%s]: %s
000000026200 000000428200 0 .?AVThreadException@@
000000026218 000000428218 0 Can't resume thread
00000002622C 00000042822C 0 MessageBoxTimeoutA
000000026240 000000428240 0 user32.dll
00000002624C 00000042824C 0 [%04d/%02d/%02d %02d:%02d:%02d.%03d] %s
000000026274 000000428274 0 determining pin pad
000000026290 000000428290 0 .?AVXfsException@@
0000000262A4 0000004282A4 0 Settings cash units info END.
0000000262C4 0000004282C4 0 Settings cash units info.
0000000262E0 0000004282E0 0 ca5h units info received
0000000262FC 0000004282FC 0 try to set %d
00000002630C 00000042830C 0 n0 p1npad
000000026320 000000428320 0 .?AVXfsGetInfoException@@
00000002633C 00000042833C 0 Xfs::QueryCashUnitsFromAtm4
000000026358 000000428358 0 Xfs::QueryCashUnitsFromAtm3
000000026374 000000428374 0 Xfs::QueryCashUnitsFromAtm2
File pos Mem pos ID Text
======== ======= == ====
000000026390 000000428390 0 LFS found info about <%d> ca5h un1t5
0000000263C0 0000004283C0 0 .?AVXfsDispenseException@@
0000000263E8 0000004283E8 0 .?AVHookLibException@@
000000026400 000000428400 0 WFMFreeBuffer
000000026410 000000428410 0 WFMAllocateMore
000000026420 000000428420 0 WFMAllocateBuffer
000000026434 000000428434 0 WFSExecute
000000026440 000000428440 0 WFSFreeResult
000000026450 000000428450 0 WFSStartUp
00000002645C 00000042845C 0 WFSGetInfo
000000026468 000000428468 0 no xf5 module found
00000002647C 00000042847C 0 msxfs.dll
0000000264B8 0000004284B8 0 |INDEX:%d|Values:%d|Money count:%d|
0000000264E0 0000004284E0 0 Founded < %d > commands
0000000264FC 0000004284FC 0 Command file deleted successfully
000000026520 000000428520 0 Reading command from a %s
00000002653C 00000042853C 0 %s\%s
000000026544 000000428544 0 FileCommandProvider::ReadXfsCommandFromFile ->
000000026580 000000428580 0 .?AVArgumentException@@
000000026598 000000428598 0 exception
0000000265A8 0000004285A8 0 CommandProcessor created
0000000265C4 0000004285C4 0 DEFAULT command processed
0000000265E0 0000004285E0 0 NONE command processed
0000000265F8 0000004285F8 0 System error!
000000026608 000000428608 0 Dispense failed. CODE:%d
000000026624 000000428624 0 Multi Dispensing start
00000002663C 00000042863C 0 Dispense failed. Unknown reason.
000000026660 000000428660 0 Dispense failed. %d
000000026674 000000428674 0 Manual Dispensing
000000026688 000000428688 0 Display Balance -> exception, code:%d
0000000266B0 0000004286B0 0 Display Balance 1try -> exception, code:%d
0000000266DC 0000004286DC 0 CommandProcessor::ProcessCommand ->
000000026700 000000428700 0 SetMaximumDispenseSize:%d
00000002671C 00000042871C 0 NULL command processed
000000026734 000000428734 0 ICommandProcessor::ProcessCommand -> start method
000000026768 000000428768 0 Processing command #%d
000000026780 000000428780 0 Received
00000002678D 00000042878D 0 commands
000000026798 000000428798 0 exception cauch: %d
0000000267AC 0000004287AC 0 Exiting
0000000267B4 0000004287B4 0 Pausing
0000000267BC 0000004287BC 0 trying to dispense
0000000267D0 0000004287D0 0 R2CommandProcessor::ProcessGetRealBalance()1
000000026800 000000428800 0 cur disp service is |%d|
00000002681C 00000042881C 0 try toi set %d
00000002682C 00000042882C 0 ___log.txt
000000026838 000000428838 0 Deleting resources
000000026858 000000428858 0 .?AVXfsLoaderException@@
000000026874 000000428874 0 uncatched
000000026880 000000428880 0 %s:%d
000000026888 000000428888 0 c:\atm\1
000000026894 000000428894 0 void CreateAllResources()
0000000268B0 0000004288B0 0 Xfs init error
0000000268C0 0000004288C0 0 Critical system error!
0000000268D8 0000004288D8 0 resources created
0000000268EC 0000004288EC 0 MH_UNKNOWN
0000000268F8 0000004288F8 0 MH_OK
000000026900 000000428900 0 MH_ERROR_ALREADY_INITIALIZED
000000026920 000000428920 0 MH_ERROR_NOT_INITIALIZED
00000002693C 00000042893C 0 MH_ERROR_ALREADY_CREATED
File pos Mem pos ID Text
======== ======= == ====
000000026958 000000428958 0 MH_ERROR_NOT_CREATED
000000026970 000000428970 0 MH_ERROR_ENABLED
000000026984 000000428984 0 MH_ERROR_DISABLED
000000026998 000000428998 0 MH_ERROR_NOT_EXECUTABLE
0000000269B0 0000004289B0 0 MH_ERROR_UNSUPPORTED_FUNCTION
0000000269D0 0000004289D0 0 MH_ERROR_MEMORY_ALLOC
0000000269E8 0000004289E8 0 MH_ERROR_MEMORY_PROTECT
000000026A00 000000428A00 0 MH_ERROR_MODULE_NOT_FOUND
000000026A1C 000000428A1C 0 MH_ERROR_FUNCTION_NOT_FOUND
000000026A38 000000428A38 0 (unknown)
000000026A92 000000428A92 0 YYYYY
000000026A9E 000000428A9E 0 YYYYYYYYYYYY
000000026AAC 000000428AAC 0 }YPPPPYYYYa
000000026AC2 000000428AC2 0 YYYYYYYYYYY
000000026B74 000000428B74 0 JJJJKRJJJJOLJJJJJJJJUE@JJJEYMFJ]JJJJJJJJJJJJJJacgNJJkmJJEmJJDEJJ
000000026C58 000000428C58 0 .?AVtype_info@@
00000002706B 00000042906B 0 0!01070Q0W0a0q0w0
000000027081 000000429081 0 1-1K1]1
00000002708D 00000042908D 0 2,2i2
000000027099 000000429099 0 363B3
0000000270B5 0000004290B5 0 :";V;q;
0000000270D3 0000004290D3 0 =(=1=I=R=u={=
0000000270E7 0000004290E7 0 =">(>Z>r>
0000000270FF 0000004290FF 0 ?!?1?7?Q?W?a?q?w?
000000027127 000000429127 0 0;0M0f0m0{0
000000027149 000000429149 0 3*313I3h3
000000027159 000000429159 0 3#4m4
00000002716D 00000042916D 0 636B6f6z6
000000027183 000000429183 0 7*7V7g7
0000000271A5 0000004291A5 0 9,:::
0000000271BB 0000004291BB 0 >.>3>A>
0000000271C3 0000004291C3 0 >m>s>
0000000271D5 0000004291D5 0 ?+?c?
0000000271EF 0000004291EF 0 0N0_0
0000000271FB 0000004291FB 0 1%111=1J1Q1W1
00000002721F 00000042921F 0 2(3?3b3
000000027229 000000429229 0 4(4_4
00000002723B 00000042923B 0 435T5}5
00000002726B 00000042926B 0 8L8{8
000000027277 000000429277 0 979K9i9r9
00000002728F 00000042928F 0 9":c:
0000000272A5 0000004292A5 0 :3;O;n;
0000000272AD 0000004292AD 0 ;C<V<
0000000272B7 0000004292B7 0 = =%=6=
0000000272C3 0000004292C3 0 >e>m>
0000000272E7 0000004292E7 0 1+2v2
000000027303 000000429303 0 4&4J4[4u4
00000002730D 00000042930D 0 4K5]5
000000027313 000000429313 0 5@7M7
000000027323 000000429323 0 8+8=8S8n8
00000002732D 00000042932D 0 9'91979
000000027341 000000429341 0 ;X;o;
000000027349 000000429349 0 ;9<K<
000000027381 000000429381 0 7*7/777=7D7J7Q7W7
000000027393 000000429393 0 7d7k7q7x7~7
0000000273A5 0000004293A5 0 8 8%898q8y8
0000000273C3 0000004293C3 0 9.969;9a9f9}9
0000000273E3 0000004293E3 0 :#:(:N:S:j:r:w:
000000027405 000000429405 0 ;8;=;T;\;a;
000000027417 000000429417 0 <!<s<
File pos Mem pos ID Text
======== ======= == ====
000000027425 000000429425 0 ===S=f=k=z=
000000027455 000000429455 0 0<0T0
000000027463 000000429463 0 1)1/1@1Y1
00000002746F 00000042946F 0 2 2C2d2j2
000000027487 000000429487 0 3/353B3
000000027493 000000429493 0 4#4(4K4Q4g4m4
0000000274B9 0000004294B9 0 6 606<6
0000000274C9 0000004294C9 0 737F7t7
0000000274DF 0000004294DF 0 8?8D8T8Z8j8
0000000274F7 0000004294F7 0 :/:5:D:W:d:p:
000000027507 000000429507 0 ;';N;q;
000000027521 000000429521 0 >b>o>{>
00000002753B 00000042953B 0 ?#?)?;?
000000027551 000000429551 0 011P1
000000027557 000000429557 0 1#2)2:2?2P2
000000027567 000000429567 0 3$3F3U3y3
00000002757D 00000042957D 0 4/4;4e4v4
00000002758B 00000042958B 0 525}5
00000002759B 00000042959B 0 7%7@7e7p7
0000000275B3 0000004295B3 0 8W8\8c8k8z8
0000000275CD 0000004295CD 0 9#9+9:9H9
0000000275DB 0000004295DB 0 9$:):A:I:
0000000275EF 0000004295EF 0 ;)<V<
000000027603 000000429603 0 =@=N=l=
000000027613 000000429613 0 =%>*>H>P>\>e>k>
00000002762B 00000042962B 0 ? ?,?5?;?i?
000000027645 000000429645 0 0#0F0U0g0
00000002764F 00000042964F 0 0(1C1f1u1
00000002765D 00000042965D 0 2J233_3p3
000000027669 000000429669 0 3[4v4
00000002768B 00000042968B 0 8=8c8
00000002769B 00000042969B 0 9:9#:O:
0000000276A7 0000004296A7 0 :K;f;|;
0000000276B3 0000004296B3 0 ;=<v<
0000000276C9 0000004296C9 0 >-?S?q?z?
0000000276E9 0000004296E9 0 0]1m1
0000000276F3 0000004296F3 0 1[2k2
000000027711 000000429711 0 5%555
00000002771B 00000042971B 0 6%656j6
000000027737 000000429737 0 738K8]8
000000027747 000000429747 0 9$9A9
000000027759 000000429759 0 :A;q;z;
000000027769 000000429769 0 <F<d<
000000027773 000000429773 0 <B=P=
000000027781 000000429781 0 >$>5>I>
0000000277BC 0000004297BC 0 @0Z0w0
0000000277D1 0000004297D1 0 3'4y4(5,5054585<5@5D5H5L5P5T5X5\5
0000000277FF 0000004297FF 0 626V6l6
000000027817 000000429817 0 868T8
00000002781F 00000042981F 0 969f9
000000027827 000000429827 0 9$:S:
000000027839 000000429839 0 ;-;x;};
000000027843 000000429843 0 ;C<x<
00000002784B 00000042984B 0 <"=1=Q=q=
000000027865 000000429865 0 >7?q?
00000002788B 00000042988B 0 1%1V1a1u1
0000000278A9 0000004298A9 0 2 2.2<2]2b2{2
0000000278CF 0000004298CF 0 4'4k4
0000000278E3 0000004298E3 0 5#5u5
000000027907 000000429907 0 7/7@7T7Z7l7r7
File pos Mem pos ID Text
======== ======= == ====
00000002791B 00000042991B 0 828A8F8L8
00000002793B 00000042993B 0 9"9,969@9
000000027953 000000429953 0 ;%;_;><f=u=
000000027984 000000429984 0 A0%222R2[2d2p2w2|2
0000000279C5 0000004299C5 0 4&4.454A4J4Q4a4h4q4
0000000279EF 0000004299EF 0 6 7-7
0000000279F7 0000004299F7 0 7H8M8T8[8b8i8p8w8~8
000000027A3D 000000429A3D 0 9(:3:E:
000000027A5B 000000429A5B 0 294f4
000000027A69 000000429A69 0 697@7
000000027AA7 000000429AA7 0 >">(>3>@>H>V>[>
000000027AB7 000000429AB7 0 >e>p>}>
000000027AC9 000000429AC9 0 >>?Z?
000000027ACF 000000429ACF 0 ?f?l?r?
000000027AEC 000000429AEC 0 0)0E0V0[0u0z0
000000027B05 000000429B05 0 161;1Y1y1
000000027B19 000000429B19 0 292Y2y2
000000027B27 000000429B27 0 2 3%323I3i3
000000027B43 000000429B43 0 4 4)424;4D4M4V4[4u4
000000027B63 000000429B63 0 595U5
000000027B69 000000429B69 0 5o5t5
000000027B95 000000429B95 0 7H7M7
000000027BA9 000000429BA9 0 8#858:8U8Z8u8~8
000000027BCF 000000429BCF 0 959:9U9Z9u9z9
000000027BE9 000000429BE9 0 91:Y:y:
000000027BF7 000000429BF7 0 : ;w;
000000027C07 000000429C07 0 ;+<8<Q<u<z<
000000027C57 000000429C57 0 2 2$2(2,2024282<2@2D2H2L2P2T2X2\2
000000027C79 000000429C79 0 2d2h2l2p2t2x2|2
000000027CCB 000000429CCB 0 3(3<3L3P3\3p3|3
000000027CF3 000000429CF3 0 4(44484D4L4T4h4t4
000000027D1F 000000429D1F 0 5$505L5T5\5h5
000000027D41 000000429D41 0 6$606L6T6
000000027D5F 000000429D5F 0 7,747@7\7d7x7
000000027D81 000000429D81 0 8 8(8D8
000000027D9D 000000429D9D 0 9$9(9,949<9H9P9l9
000000027DC9 000000429DC9 0 :0:<:@:D:H:T:\:h:
000000027DEB 000000429DEB 0 ;,;4;@;\;d;p;
000000027E11 000000429E11 0 <$<,<8<T<\<d<p<
000000027E39 000000429E39 0 =$=0=L=T=\=d=p=
000000027E5D 000000429E5D 0 >,><>P>d>p>
000000027E7F 000000429E7F 0 ?4?<?H?d?l?t?|?
000000027EB3 000000429EB3 0 0$0,040<0P0\0
000000027EC1 000000429EC1 0 0d0l0t0
000000027EDF 000000429EDF 0 1,181@1\1d1
000000027EFB 000000429EFB 0 2 2<2D2P2l2x2
000000027F17 000000429F17 0 343@3\3h3
000000027F2F 000000429F2F 0 3 4,444D4P4X4l4|4
000000027F4D 000000429F4D 0 5$5,545<5D5T5\5d5t5
000000027F75 000000429F75 0 646P6\6d6p6x6
000000027F93 000000429F93 0 7$70787T7p7|7
000000027FB9 000000429FB9 0 8 8(8D8
000000027FDB 000000429FDB 0 9$9,949D9P9l9t9|9
000000027FF7 000000429FF7 0 :$:4:D:P:l:t:|:
000000028025 00000042A025 0 0 0$0(0H0
00000000F69C 00000040F69C 0 (null)