.- - -----÷M÷E÷N÷U÷------------------------------------------------------------- --- ---- -------------.
! WALL ! STATS ! GOODIES ! YARA ! FAQ ! RSS ! EMV !
`-------------- - --- ---------- -------- -------- -------- -------- ----------------- - ---- ---- --'
ATM MALWARE NOTICE
a6c33d7275c46397593f53ea136ea8669794f4d787044106594631c07a9ee71d
Date...........: 2018-09-05
Family.........: Atmosphere
File name......: -
File size......: 84.00 KB
Type file......: DLL/Windows
Virscan........: VT - HA
Documentation..: https://owncloud.group-ib.ru/s/aTugJcPclCLnQPb/download?path=%2F&files=Silence_Group-IB_Eng_Public.pdf
Additional note: dropped by 26b2daa6fbf5ec13599d24e6819202ddb3f770428d732100be15c23be317bd47
Entropy:
Binary Histogram:
=== PEDUMP REPORT ===
=== MZ Header ===
signature: "MZ"
bytes_in_last_block: 144 0x90
blocks_in_file: 3 3
num_relocs: 0 0
header_paragraphs: 4 4
min_extra_paragraphs: 0 0
max_extra_paragraphs: 65535 0xffff
ss: 0 0
sp: 184 0xb8
checksum: 0 0
ip: 0 0
cs: 0 0
reloc_table_offset: 64 0x40
overlay_number: 0 0
reserved0: 0 0
oem_id: 0 0
oem_info: 0 0
reserved2: 0 0
reserved3: 0 0
reserved4: 0 0
reserved5: 0 0
reserved6: 0 0
lfanew: 248 0xf8
=== DOS STUB ===
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno|
00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
=== RICH Header ===
LIB_ID VERSION TIMES_USED
12 c 7291 1c7b 1 1
14 e 7299 1c83 1 1
0 0 0 0 4 4
10 a 8168 1fe8 8 8
19 13 8034 1f62 4 4
93 5d 2179 883 3 3
1 1 0 0 119 77
11 b 8168 1fe8 35 23
4 4 8168 1fe8 5 5
=== PE Header ===
signature: "PE\x00\x00"
# IMAGE_FILE_HEADER:
Machine: 332 0x14c x86
NumberOfSections: 4 4
TimeDateStamp: "2018-04-07 17:08:12"
PointerToSymbolTable: 0 0
NumberOfSymbols: 0 0
SizeOfOptionalHeader: 224 0xe0
Characteristics: 8462 0x210e EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED
LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DLL
# IMAGE_OPTIONAL_HEADER32:
Magic: 267 0x10b 32-bit executable
LinkerVersion: 6.0
SizeOfCode: 57344 0xe000
SizeOfInitializedData: 24576 0x6000
SizeOfUninitializedData: 0 0
AddressOfEntryPoint: 57115 0xdf1b
BaseOfCode: 4096 0x1000
BaseOfData: 61440 0xf000
ImageBase: 268435456 0x10000000
SectionAlignment: 4096 0x1000
FileAlignment: 4096 0x1000
OperatingSystemVersion: 4.0
ImageVersion: 45.2
SubsystemVersion: 4.0
Reserved1: 0 0
SizeOfImage: 86016 0x15000
SizeOfHeaders: 4096 0x1000
CheckSum: 0 0
Subsystem: 2 2 WINDOWS_GUI
DllCharacteristics: 0 0
SizeOfStackReserve: 1048576 0x100000
SizeOfStackCommit: 4096 0x1000
SizeOfHeapReserve: 1048576 0x100000
SizeOfHeapCommit: 4096 0x1000
LoaderFlags: 0 0
NumberOfRvaAndSizes: 16 0x10
=== DATA DIRECTORY ===
EXPORT rva:0x 119a0 size:0x 44
IMPORT rva:0x 10ae8 size:0x 78
RESOURCE rva:0x 0 size:0x 0
EXCEPTION rva:0x 0 size:0x 0
SECURITY rva:0x 0 size:0x 0
BASERELOC rva:0x 13000 size:0x fec
DEBUG rva:0x 0 size:0x 0
ARCHITECTURE rva:0x 0 size:0x 0
GLOBALPTR rva:0x 0 size:0x 0
TLS rva:0x 0 size:0x 0
LOAD_CONFIG rva:0x 0 size:0x 0
Bound_IAT rva:0x 0 size:0x 0
IAT rva:0x f000 size:0x 1ac
Delay_IAT rva:0x 0 size:0x 0
CLR_Header rva:0x 0 size:0x 0
rva:0x 0 size:0x 0
=== SECTIONS ===
NAME RVA VSZ RAW_SZ RAW_PTR nREL REL_PTR nLINE LINE_PTR FLAGS
.text 1000 dd24 e000 1000 0 0 0 0 60000020 R-X CODE
.rdata f000 29e4 3000 f000 0 0 0 0 40000040 R-- IDATA
.data 12000 d9c 1000 12000 0 0 0 0 c0000040 RW- IDATA
.reloc 13000 1e8c 2000 13000 0 0 0 0 42000040 R-- IDATA DISCARDABLE
=== IMPORTS ===
MODULE_NAME HINT ORD FUNCTION_NAME
KERNEL32.dll 2e CloseHandle
KERNEL32.dll 2ab ReadFile
KERNEL32.dll 15b GetFileSize
KERNEL32.dll 4d CreateFileA
KERNEL32.dll 397 WriteFile
KERNEL32.dll 310 SetFilePointer
KERNEL32.dll 16b GetLocalTime
KERNEL32.dll 175 GetModuleFileNameA
KERNEL32.dll 7c DeleteFileA
KERNEL32.dll 69 CreateThread
KERNEL32.dll 352 TerminateThread
KERNEL32.dll 349 Sleep
KERNEL32.dll 34b SuspendThread
KERNEL32.dll 2c7 ResumeThread
KERNEL32.dll 198 GetProcAddress
KERNEL32.dll 248 LoadLibraryA
KERNEL32.dll 177 GetModuleHandleA
KERNEL32.dll 378 VirtualFree
KERNEL32.dll 375 VirtualAlloc
KERNEL32.dll d3 FindNextFileA
KERNEL32.dll c9 FindFirstFileA
KERNEL32.dll 385 WaitForSingleObject
KERNEL32.dll 37b VirtualProtect
KERNEL32.dll 13a GetCurrentProcess
KERNEL32.dll e6 FlushInstructionCache
KERNEL32.dll 37d VirtualQuery
KERNEL32.dll 21c InterlockedCompareExchange
KERNEL32.dll 21f InterlockedExchange
KERNEL32.dll 20a HeapDestroy
KERNEL32.dll 20c HeapFree
KERNEL32.dll 280 OpenThread
KERNEL32.dll 208 HeapCreate
KERNEL32.dll 334 SetThreadContext
KERNEL32.dll 1cd GetThreadContext
KERNEL32.dll 355 Thread32Next
KERNEL32.dll 210 HeapReAlloc
KERNEL32.dll 206 HeapAlloc
KERNEL32.dll 13e GetCurrentThreadId
KERNEL32.dll 13b GetCurrentProcessId
KERNEL32.dll 354 Thread32First
KERNEL32.dll 6c CreateToolhelp32Snapshot
USER32.dll 1be MessageBoxA
MSVCP60.dll 3f2 ?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
MSVCP60.dll 411 ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
MSVCP60.dll 40d ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
MSVCP60.dll 420 ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
MSVCP60.dll ac ??0bad_exception@std@@QAE@ABV01@@Z
MSVCP60.dll 111 ??1bad_exception@std@@UAE@XZ
MSVCP60.dll ad ??0bad_exception@std@@QAE@PBD@Z
MSVCP60.dll 49 ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
MSVCP60.dll 338 ?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
MSVCP60.dll 406 ?_Xran@std@@YAXXZ
MSVCP60.dll 7a7 ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
MSVCP60.dll 542 ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
MSVCP60.dll 3e9 ?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
MSVCP60.dll 54c ?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
MSVCP60.dll 55c ?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
MSVCP60.dll 725 ?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
MSVCP60.dll 10b ??1_Lockit@std@@QAE@XZ
MSVCP60.dll a2 ??0_Lockit@std@@QAE@XZ
MSVCP60.dll 34a ?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
MSVCP60.dll 3f8 ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
MSVCP60.dll 661 ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
MSVCP60.dll 529 ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
MSVCP60.dll 405 ?_Xlen@std@@YAXXZ
MSVCP60.dll 392 ?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
MSVCP60.dll 32d ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
MSVCP60.dll e9 ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
MSVCP60.dll 10d ??1_Winit@std@@QAE@XZ
MSVCP60.dll a5 ??0_Winit@std@@QAE@XZ
MSVCP60.dll 109 ??1Init@ios_base@std@@QAE@XZ
MSVCP60.dll 9e ??0Init@ios_base@std@@QAE@XZ
MSVCP60.dll 41c ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
SHLWAPI.dll 1b PathFileExistsA
SHLWAPI.dll b PathAppendA
MSVCRT.dll 1e1 _vsnprintf
MSVCRT.dll f ??2@YAPAXI@Z
MSVCRT.dll 24c fclose
MSVCRT.dll 2d9 vfprintf
MSVCRT.dll 257 fopen
MSVCRT.dll 9 ??0exception@@QAE@XZ
MSVCRT.dll 25a fputs
MSVCRT.dll 25d fread
MSVCRT.dll 2a6 rand
MSVCRT.dll f1 _ftol
MSVCRT.dll 291 malloc
MSVCRT.dll 297 memcpy
MSVCRT.dll 299 memset
MSVCRT.dll 55 __dllonexit
MSVCRT.dll 186 _onexit
MSVCRT.dll e ??1type_info@@UAE@XZ
MSVCRT.dll 10f _initterm
MSVCRT.dll 9d _adjust_fdiv
MSVCRT.dll d ??1exception@@UAE@XZ
MSVCRT.dll 30 ?what@exception@@UBEPBDXZ
MSVCRT.dll 41 _CxxThrowException
MSVCRT.dll 2a7 realloc
MSVCRT.dll 25e free
MSVCRT.dll 8 ??0exception@@QAE@ABV0@@Z
MSVCRT.dll 298 memmove
MSVCRT.dll 23d atoi
MSVCRT.dll 49 __CxxFrameHandler
=== EXPORTS ===
# module "Library.dll"
# flags=0x0 ts="2018-04-07 17:08:12" version=0.0 ord_base=1
# nFuncs=1 nNames=1
ORD ENTRY_VA NAME
1 b000 iinit
=== Packer / Compiler ===
MS Visual C++ 6.0 DLL
File pos Mem pos ID Text
======== ======= == ====
00000000004D 00001000004D 0 !This program cannot be run in DOS mode.
0000000001F0 0000100001F0 0 .text
000000000218 000010000218 0 .rdata
00000000023F 00001000023F 0 @.data
000000000268 000010000268 0 .reloc
000000001BE9 000010001BE9 0 L$(SUV
000000001BF0 000010001BF0 0 D$8W3
000000001C25 000010001C25 0 D$HPQVU
000000002089 000010002089 0 D$<SUVW
0000000027F4 0000100027F4 0 d$hPUQ
000000002BB3 000010002BB3 0 L$(QV
000000002BE6 000010002BE6 0 D$ VP
000000002CA2 000010002CA2 0 D$$UP
000000002EEB 000010002EEB 0 l$ VW
00000000311B 00001000311B 0 l$,VW
000000003249 000010003249 0 L$$SUV
000000003250 000010003250 0 D$4WPQ
00000000327F 00001000327F 0 D$DPQVS
000000003780 000010003780 0 D$@_][
0000000039A9 0000100039A9 0 T$(PR
000000003B19 000010003B19 0 D$$SUVW
000000003EDE 000010003EDE 0 \$dUVW3
000000003F73 000010003F73 0 L$,Qj
00000000409F 00001000409F 0 L$(Qj
00000000435A 00001000435A 0 L$<Qj
000000004477 000010004477 0 D$,SP
00000000451A 00001000451A 0 L$8QR
00000000470C 00001000470C 0 d$DSh
0000000047D5 0000100047D5 0 QSUVW
000000004B59 000010004B59 0 L$$SUV
000000004B60 000010004B60 0 D$4WPQ
000000004B8F 000010004B8F 0 D$DPQVS
000000004C89 000010004C89 0 L$$SUV
000000004C90 000010004C90 0 D$4WPQ
000000004CBF 000010004CBF 0 D$DPQVS
000000004EBC 000010004EBC 0 L$ QW
000000004F3F 000010004F3F 0 U4RQU
0000000053CC 0000100053CC 0 SUVW3
000000005408 000010005408 0 L$$Qj
000000005A18 000010005A18 0 SUVW3
000000005B49 000010005B49 0 D$|VW3
000000005CF9 000010005CF9 0 D$LSUV3
000000005F62 000010005F62 0 L$$PQ
000000006059 000010006059 0 D$8SUV3
0000000060C8 0000100060C8 0 \$<QSR
0000000060E7 0000100060E7 0 T$$QPR
000000006239 000010006239 0 D$8SUV3
0000000062AF 0000100062AF 0 \$<QRV
0000000062CB 0000100062CB 0 T$$PSR
00000000682B 00001000682B 0 SUVW3
0000000068CC 0000100068CC 0 L$0RVW
0000000068F9 0000100068F9 0 L$PQP
0000000069FA 0000100069FA 0 D$PPW
000000006BD5 000010006BD5 0 |$ QPW
000000006C69 000010006C69 0 D$8UVWj
000000006D04 000010006D04 0 L$HQP
000000006F97 000010006F97 0 ,SUVW
000000006FB3 000010006FB3 0 l$Dt#
00000000706D 00001000706D 0 d$(Ph$%
000000007347 000010007347 0 @SUVW
File pos Mem pos ID Text
======== ======= == ====
0000000074F5 0000100074F5 0 D$X VP
000000007629 000010007629 0 L$$SUV
000000007630 000010007630 0 D$4WPQ
00000000765F 00001000765F 0 D$DPQVS
0000000079DC 0000100079DC 0 t$hWj
000000007B23 000010007B23 0 D$ PQ
0000000082DA 0000100082DA 0 T$$QWVR
00000000831C 00001000831C 0 L$$PWVQ
000000008363 000010008363 0 D$,VP
0000000089CA 0000100089CA 0 T$$QWVR
000000008A0C 000010008A0C 0 L$$PWVQ
000000008A53 000010008A53 0 D$,VP
000000009EC6 000010009EC6 0 W*hd&
00000000A087 00001000A087 0 0SUVW
00000000A4D4 00001000A4D4 0 d$8Ph
00000000A4FD 00001000A4FD 0 t$(to
00000000AAC8 00001000AAC8 0 SUVW3
00000000ABA1 00001000ABA1 0 |$0t1
00000000ABD4 00001000ABD4 0 \$$hh!
00000000DF48 00001000DF48 0 t WVS
00000000DF75 00001000DF75 0 u7WPS
00000000DF86 00001000DF86 0 u&WVS
000000010D0E 000010010D0E 0 CloseHandle
000000010D1C 000010010D1C 0 ReadFile
000000010D28 000010010D28 0 GetFileSize
000000010D36 000010010D36 0 CreateFileA
000000010D44 000010010D44 0 WriteFile
000000010D50 000010010D50 0 SetFilePointer
000000010D62 000010010D62 0 GetLocalTime
000000010D72 000010010D72 0 GetModuleFileNameA
000000010D88 000010010D88 0 DeleteFileA
000000010D96 000010010D96 0 VirtualQuery
000000010DA6 000010010DA6 0 CreateThread
000000010DB6 000010010DB6 0 TerminateThread
000000010DC8 000010010DC8 0 Sleep
000000010DD0 000010010DD0 0 SuspendThread
000000010DE0 000010010DE0 0 ResumeThread
000000010DF0 000010010DF0 0 GetProcAddress
000000010E02 000010010E02 0 LoadLibraryA
000000010E12 000010010E12 0 GetModuleHandleA
000000010E26 000010010E26 0 VirtualFree
000000010E34 000010010E34 0 VirtualAlloc
000000010E44 000010010E44 0 FindNextFileA
000000010E54 000010010E54 0 FindFirstFileA
000000010E66 000010010E66 0 WaitForSingleObject
000000010E7C 000010010E7C 0 VirtualProtect
000000010E8C 000010010E8C 0 KERNEL32.dll
000000010E9C 000010010E9C 0 MessageBoxA
000000010EA8 000010010EA8 0 USER32.dll
000000010EB4 000010010EB4 0 ADVAPI32.dll
000000010EC4 000010010EC4 0 ??0Init@ios_base@std@@QAE@XZ
000000010EE4 000010010EE4 0 ??1Init@ios_base@std@@QAE@XZ
000000010F04 000010010F04 0 ??0_Winit@std@@QAE@XZ
000000010F1C 000010010F1C 0 ??1_Winit@std@@QAE@XZ
000000010F34 000010010F34 0 ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
000000010F7E 000010010F7E 0 ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
000000010FDA 000010010FDA 0 ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
000000011036 000010011036 0 ?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
000000011088 000010011088 0 ?_Xlen@std@@YAXXZ
00000001109C 00001001109C 0 ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
File pos Mem pos ID Text
======== ======= == ====
0000000110F0 0000100110F0 0 ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
00000001113A 00001001113A 0 ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
00000001118A 00001001118A 0 ?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
0000000111D8 0000100111D8 0 ?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
000000011226 000010011226 0 ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
00000001127E 00001001127E 0 ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
0000000112DA 0000100112DA 0 ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
000000011332 000010011332 0 ??0bad_exception@std@@QAE@ABV01@@Z
000000011358 000010011358 0 ??1bad_exception@std@@UAE@XZ
000000011378 000010011378 0 ??0bad_exception@std@@QAE@PBD@Z
00000001139A 00001001139A 0 ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
0000000113F6 0000100113F6 0 ?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
000000011444 000010011444 0 ?_Xran@std@@YAXXZ
000000011458 000010011458 0 ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
0000000114AE 0000100114AE 0 ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
000000011500 000010011500 0 ?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
000000011554 000010011554 0 ?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
0000000115B2 0000100115B2 0 ?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
000000011610 000010011610 0 ?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
000000011662 000010011662 0 ??1_Lockit@std@@QAE@XZ
00000001167C 00001001167C 0 ??0_Lockit@std@@QAE@XZ
000000011694 000010011694 0 MSVCP60.dll
0000000116A2 0000100116A2 0 PathFileExistsA
0000000116B4 0000100116B4 0 PathAppendA
0000000116C0 0000100116C0 0 SHLWAPI.dll
0000000116CE 0000100116CE 0 __CxxFrameHandler
0000000116EA 0000100116EA 0 memmove
0000000116F4 0000100116F4 0 ??0exception@@QAE@ABV0@@Z
000000011718 000010011718 0 realloc
000000011722 000010011722 0 _CxxThrowException
000000011738 000010011738 0 ?what@exception@@UBEPBDXZ
000000011754 000010011754 0 ??1exception@@UAE@XZ
00000001176C 00001001176C 0 _vsnprintf
00000001177A 00001001177A 0 ??2@YAPAXI@Z
00000001178A 00001001178A 0 fclose
000000011794 000010011794 0 vfprintf
0000000117A0 0000100117A0 0 fopen
0000000117A8 0000100117A8 0 ??0exception@@QAE@XZ
0000000117C0 0000100117C0 0 fputs
0000000117C8 0000100117C8 0 fread
0000000117D8 0000100117D8 0 _ftol
0000000117E0 0000100117E0 0 malloc
0000000117EA 0000100117EA 0 memcpy
0000000117F4 0000100117F4 0 memset
0000000117FE 0000100117FE 0 __dllonexit
00000001180C 00001001180C 0 _onexit
000000011814 000010011814 0 MSVCRT.dll
000000011822 000010011822 0 ??1type_info@@UAE@XZ
00000001183A 00001001183A 0 _initterm
000000011846 000010011846 0 _adjust_fdiv
000000011856 000010011856 0 HeapCreate
000000011864 000010011864 0 InterlockedCompareExchange
000000011882 000010011882 0 InterlockedExchange
000000011898 000010011898 0 HeapDestroy
0000000118A6 0000100118A6 0 HeapFree
0000000118B2 0000100118B2 0 OpenThread
0000000118C0 0000100118C0 0 SetThreadContext
0000000118D4 0000100118D4 0 GetThreadContext
0000000118E8 0000100118E8 0 Thread32Next
0000000118F8 0000100118F8 0 HeapReAlloc
File pos Mem pos ID Text
======== ======= == ====
000000011906 000010011906 0 HeapAlloc
000000011912 000010011912 0 GetCurrentThreadId
000000011928 000010011928 0 GetCurrentProcessId
00000001193E 00001001193E 0 Thread32First
00000001194E 00001001194E 0 CreateToolhelp32Snapshot
00000001196A 00001001196A 0 FlushInstructionCache
000000011982 000010011982 0 GetCurrentProcess
0000000119D2 0000100119D2 0 Library.dll
0000000119DE 0000100119DE 0 iinit
000000012050 000010012050 0 .?AVexception@@
000000012068 000010012068 0 .?AVException@@
000000012080 000010012080 0 .?AVArgumentOutOfRangeException@@
0000000120B8 0000100120B8 0 .?AVbad_exception@std@@
0000000120D0 0000100120D0 0 bad exception
0000000120F0 0000100120F0 0 .?AVIOException@@
000000012110 000010012110 0 .?AVFileNotFoundException@@
000000012130 000010012130 0 Logger is now on new TraceLevel: %s
000000012154 000010012154 0 UNKNOWN
000000012160 000010012160 0 TRACE
000000012168 000010012168 0 NOTICE
000000012170 000010012170 0 WARNING
000000012178 000010012178 0 ERROR
000000012180 000010012180 0 FATAL
000000012188 000010012188 0 [%s]: %s
0000000121A0 0000100121A0 0 .?AVThreadException@@
0000000121B8 0000100121B8 0 Can't resume thread
0000000121CC 0000100121CC 0 MessageBoxTimeoutA
0000000121E0 0000100121E0 0 user32.dll
0000000121EC 0000100121EC 0 [%04d/%02d/%02d %02d:%02d:%02d.%03d] %s
000000012220 000010012220 0 .?AVXfsException@@
000000012240 000010012240 0 .?AVXfsGetInfoException@@
00000001225C 00001001225C 0 get cu info get info exception %d
000000012280 000010012280 0 get cu and store result unknown exception
0000000122AC 0000100122AC 0 get cu info query error
0000000122D0 0000100122D0 0 .?AVXfsDispenseException@@
0000000122EC 0000100122EC 0 unknown exception
000000012300 000010012300 0 Dispense exception, code %d
00000001231C 00001001231C 0 ca5h units info received
000000012338 000010012338 0 try to set %d
000000012348 000010012348 0 Xfs::QueryCashUnitsFromAtm4
000000012364 000010012364 0 Xfs::QueryCashUnitsFromAtm3
000000012380 000010012380 0 Xfs::QueryCashUnitsFromAtm2
00000001239C 00001001239C 0 LFS found info about <%d> ca5h un1t5
0000000123C4 0000100123C4 0 XFS-> dispense end SUCCESSFUL DISPENSE
0000000123EC 0000100123EC 0 WFS_RESULT %d
000000012408 000010012408 0 .?AVHookLibException@@
000000012420 000010012420 0 WFMFreeBuffer
000000012430 000010012430 0 WFMAllocateMore
000000012440 000010012440 0 WFMAllocateBuffer
000000012454 000010012454 0 WFSExecute
000000012460 000010012460 0 WFSFreeResult
000000012470 000010012470 0 WFSStartUp
00000001247C 00001001247C 0 WFSGetInfo
000000012488 000010012488 0 no xf5 module found
00000001249C 00001001249C 0 msxfs.dll
0000000124D8 0000100124D8 0 |INDEX:%d|CU state:%d|Type:%d|Values:%d|Currency_ID:%s|Money count:%d|
000000012524 000010012524 0 Founded < %d > commands
000000012540 000010012540 0 Command file deleted successfully
000000012564 000010012564 0 Reading command from a %s
000000012580 000010012580 0 %s\%s
File pos Mem pos ID Text
======== ======= == ====
000000012588 000010012588 0 FileCommandProvider::ReadXfsCommandFromFile ->
0000000125C0 0000100125C0 0 .?AVArgumentException@@
0000000125D8 0000100125D8 0 exception
0000000125E8 0000100125E8 0 CommandProcessor created
000000012604 000010012604 0 DEFAULT command processed
000000012620 000010012620 0 NONE command processed
000000012638 000010012638 0 System error!
000000012648 000010012648 0 Dispense failed. CODE:%d
000000012664 000010012664 0 Multi Dispensing start
00000001267C 00001001267C 0 Dispense failed. Unknown reason.
0000000126A0 0000100126A0 0 Dispense failed. %d
0000000126B4 0000100126B4 0 Manual Dispensing
0000000126C8 0000100126C8 0 Display Balance -> exception, code:%d
0000000126F0 0000100126F0 0 Display Balance 1try -> exception, code:%d
00000001271C 00001001271C 0 CommandProcessor::ProcessCommand ->
000000012740 000010012740 0 SetMaximumDispenseSize:%d
00000001275C 00001001275C 0 NULL command processed
000000012774 000010012774 0 ICommandProcessor::ProcessCommand -> start method
0000000127A8 0000100127A8 0 Processing command #%d
0000000127C0 0000100127C0 0 Received
0000000127CD 0000100127CD 0 commands
0000000127D8 0000100127D8 0 exception cauch: %d
0000000127EC 0000100127EC 0 Exiting
0000000127F4 0000100127F4 0 Pausing
0000000127FC 0000100127FC 0 trying to dispense
000000012810 000010012810 0 R2CommandProcessor::ProcessGetRealBalance()1
000000012840 000010012840 0 cur disp service is |%d|
00000001285C 00001001285C 0 try toi set %d
00000001286C 00001001286C 0 ___log.txt
000000012878 000010012878 0 Deleting resources
000000012898 000010012898 0 .?AVXfsLoaderException@@
0000000128B4 0000100128B4 0 uncatched
0000000128C0 0000100128C0 0 %s:%d
0000000128C8 0000100128C8 0 c:\atm\1
0000000128D4 0000100128D4 0 void CreateAllResources()
0000000128F0 0000100128F0 0 Xfs init error
000000012900 000010012900 0 Critical system error!
000000012918 000010012918 0 resources created
00000001292C 00001001292C 0 MH_UNKNOWN
000000012938 000010012938 0 MH_OK
000000012940 000010012940 0 MH_ERROR_ALREADY_INITIALIZED
000000012960 000010012960 0 MH_ERROR_NOT_INITIALIZED
00000001297C 00001001297C 0 MH_ERROR_ALREADY_CREATED
000000012998 000010012998 0 MH_ERROR_NOT_CREATED
0000000129B0 0000100129B0 0 MH_ERROR_ENABLED
0000000129C4 0000100129C4 0 MH_ERROR_DISABLED
0000000129D8 0000100129D8 0 MH_ERROR_NOT_EXECUTABLE
0000000129F0 0000100129F0 0 MH_ERROR_UNSUPPORTED_FUNCTION
000000012A10 000010012A10 0 MH_ERROR_MEMORY_ALLOC
000000012A28 000010012A28 0 MH_ERROR_MEMORY_PROTECT
000000012A40 000010012A40 0 MH_ERROR_MODULE_NOT_FOUND
000000012A5C 000010012A5C 0 MH_ERROR_FUNCTION_NOT_FOUND
000000012A78 000010012A78 0 (unknown)
000000012AD2 000010012AD2 0 YYYYY
000000012ADE 000010012ADE 0 YYYYYYYYYYYY
000000012AEC 000010012AEC 0 }YPPPPYYYYa
000000012B02 000010012B02 0 YYYYYYYYYYY
000000012BB4 000010012BB4 0 JJJJKRJJJJOLJJJJJJJJUE@JJJEYMFJ]JJJJJJJJJJJJJJacgNJJkmJJEmJJDEJJ
000000012C98 000010012C98 0 .?AVtype_info@@
00000001300B 00001001300B 0 0!01070Q0W0a0q0w0
File pos Mem pos ID Text
======== ======= == ====
000000013021 000010013021 0 1-1K1]1
00000001302D 00001001302D 0 1>2\2
000000013039 000010013039 0 3H3f3r3
000000013047 000010013047 0 4P4M5
000000013055 000010013055 0 :$;R;
00000001305F 00001001305F 0 ;.<D<c<
00000001306D 00001001306D 0 <5=;=r=x=
00000001307F 00001001307F 0 >2>j>
00000001309B 00001001309B 0 ?!?1?7?G?~?
0000000130BD 0000100130BD 0 0&0-0;0B0W0s0
0000000130CB 0000100130CB 0 0.1i1
0000000130DF 0000100130DF 0 2 3(3z3
0000000130ED 0000100130ED 0 3-4Q4a4y4
000000013103 000010013103 0 6&6:6
000000013119 000010013119 0 7'7c7
000000013129 000010013129 0 8#9X9}9
000000013159 000010013159 0 =<>F>d>w>
00000001316B 00001001316B 0 ?<?F?m?}?
000000013184 000010013184 0 30f0m0y0
000000013199 000010013199 0 0 1(141@1L1X1e1l1{1
0000000131C7 0000100131C7 0 4%4,4
0000000131DB 0000100131DB 0 5'5.545c5
0000000131EB 0000100131EB 0 6)6o6
0000000131F3 0000100131F3 0 7=7U7\7t7
0000000131FF 0000100131FF 0 7+8h8u8
000000013215 000010013215 0 949:9@9I9P9
00000001322B 00001001322B 0 :!:-:::A:G:
000000013241 000010013241 0 ;Q<a<r<
000000013253 000010013253 0 >,>q>
000000013271 000010013271 0 0+1v1
000000013279 000010013279 0 162>2
00000001328F 00001001328F 0 4-464Z4k4
00000001329B 00001001329B 0 4[5m5
0000000132AD 0000100132AD 0 787A7R7w7
0000000132BD 0000100132BD 0 7g8q8w8
0000000132CF 0000100132CF 0 9I:[:
0000000132F5 0000100132F5 0 3)5:5@5K5e5n5z5
00000001331F 00001001331F 0 5A6Q6b6p6u6
000000013339 000010013339 0 7/777<7b7g7~7
000000013359 000010013359 0 8$8)8O8T8k8s8x8
00000001337B 00001001337B 0 9<9A9X9
000000013395 000010013395 0 :R:q:
0000000133A1 0000100133A1 0 :3;_;
0000000133B1 0000100133B1 0 ;3<8<I<O<
0000000133C3 0000100133C3 0 =P>V>h>n>
0000000133FD 0000100133FD 0 1N1T1e1
00000001340D 00001001340D 0 1#2Q2p2
000000013421 000010013421 0 22383I3l3r3
000000013431 000010013431 0 334f4
00000001344F 00001001344F 0 6$626A6_6r6
00000001348D 00001001348D 0 :O:m:
000000013493 000010013493 0 :B;U;
0000000134A9 0000100134A9 0 =$=8===Q=_=w=
0000000134E3 0000100134E3 0 0<1r1
0000000134F3 0000100134F3 0 2A2I2z2
000000013507 000010013507 0 333v3
000000013517 000010013517 0 5/5V5
000000013535 000010013535 0 6N7U7p7
000000013547 000010013547 0 8!828@8E8
000000013565 000010013565 0 9G9L9S9[9j9x9
File pos Mem pos ID Text
======== ======= == ====
000000013577 000010013577 0 :T:Y:q:y:
00000001359B 00001001359B 0 ="=2=p=~=
0000000135AD 0000100135AD 0 =[>s>
0000000135C1 0000100135C1 0 ?C?u?z?
0000000135DD 0000100135DD 0 0-0I0
000000013603 000010013603 0 364L4
00000001360D 00001001360D 0 5)5F5]5
00000001361D 00001001361D 0 627f7
000000013631 000010013631 0 909K9
000000013641 000010013641 0 :&;<;
00000001364D 00001001364D 0 <6<M<
00000001365B 00001001365B 0 =">V>
000000013661 000010013661 0 > ?;?v?
000000013689 000010013689 0 1"2E2U2
000000013693 000010013693 0 2"3E3U3
00000001369D 00001001369D 0 334T4r4
0000000136A7 0000100136A7 0 4=5M5
0000000136B1 0000100136B1 0 5;6K6
0000000136BF 0000100136BF 0 7C7[7m7
0000000136CD 0000100136CD 0 8.848Q8
0000000136E7 0000100136E7 0 9*:8:
0000000136FD 0000100136FD 0 <C<r<
00000001370B 00001001370B 0 =A=W=
000000013713 000010013713 0 =.><>M>
000000013723 000010013723 0 > ?)?7?@?Q?s?
00000001373C 00001001373C 0 80<0@0D0H0L0P0T0X0\0
000000013751 000010013751 0 0d0s0
00000001375B 00001001375B 0 0!1;1
000000013793 000010013793 0 666T6g6
0000000137A3 0000100137A3 0 6$7D7f7
0000000137AD 0000100137AD 0 848d8
0000000137B5 0000100137B5 0 8W9f9
0000000137BD 0000100137BD 0 9":U:
0000000137C7 0000100137C7 0 :,;7;Y;
0000000137CF 0000100137CF 0 ;e;w;
0000000137F1 0000100137F1 0 =&>U>n>
0000000137FB 0000100137FB 0 >#???
000000013810 000010013810 0 40Q0a0v0
00000001381F 00001001381F 0 0I1p1
000000013835 000010013835 0 2+21262F2c2y2
000000013851 000010013851 0 3F3g3x3
00000001385B 00001001385B 0 4<4A4O4_4e4j4
000000013873 000010013873 0 5=5B5R5r5
000000013893 000010013893 0 73797M7S7g7u7
0000000138AD 0000100138AD 0 7A8_8g8
0000000138C3 0000100138C3 0 9!9'9?9_9h9o9u9|9
0000000138DF 0000100138DF 0 9K:X:
0000000138E7 0000100138E7 0 ;7;j;
0000000138F9 0000100138F9 0 >D>K>
000000013905 000010013905 0 ?#?*?@?
000000013918 000010013918 0 <0J0Q0
00000001393D 00001001393D 0 3,333<3B3J3R3[3w3
000000013951 000010013951 0 344B4N4\4k4s4y4
000000013979 000010013979 0 646I6{6
0000000139B5 0000100139B5 0 9!9%9)9-9195999=9A9E9I9M9l9u9
0000000139DF 0000100139DF 0 ;);U;
0000000139ED 0000100139ED 0 0)101"3
0000000139F7 0000100139F7 0 4S5e5
000000013A07 000010013A07 0 < <$<(<,<0<4<
000000013A2F 000010013A2F 0 >&>2>T>Z>
File pos Mem pos ID Text
======== ======= == ====
000000013A39 000010013A39 0 >f>l>z>
000000013A5D 000010013A5D 0 ?0?B?
000000013A81 000010013A81 0 0M0i0
000000013A93 000010013A93 0 0-1I1e1n1s1
000000013AA9 000010013AA9 0 2$2D2Y2y2
000000013ABB 000010013ABB 0 393a3y3
000000013ACD 000010013ACD 0 4!4<4U4
000000013AD5 000010013AD5 0 4g4p4y4
000000013AF1 000010013AF1 0 555:5m5
000000013B0D 000010013B0D 0 6%6*6U6Z6y6
000000013B1F 000010013B1F 0 717E7V7_7d7
000000013B35 000010013B35 0 8"858b8q8
000000013B57 000010013B57 0 9%9*9E9J9e9j9
000000013B77 000010013B77 0 :%:*:E:J:l:
000000013B89 000010013B89 0 ;);A;a;y;
000000013B99 000010013B99 0 <D<U<m<
000000013BEF 000010013BEF 0 2 2$2(2,2024282<2@2D2H2L2P2T2X2\2
000000013C11 000010013C11 0 2d2h2l2p2t2x2|2
000000013C63 000010013C63 0 3(3<3L3P3\3p3|3
000000013C8B 000010013C8B 0 4(44484D4L4T4h4t4
000000013CB7 000010013CB7 0 5$505L5T5\5h5
000000013CD9 000010013CD9 0 6$606L6T6
000000013CF7 000010013CF7 0 7,747@7\7d7x7
000000013D19 000010013D19 0 8 8(8<8L8x8
000000013D3F 000010013D3F 0 9$90989T9
000000013D63 000010013D63 0 : :<:D:L:
000000013D6D 000010013D6D 0 :l:p:t:x:
000000013D87 000010013D87 0 ;,;4;@;\;d;p;
000000013DAD 000010013DAD 0 <$<,<8<T<\<d<p<
000000013DD5 000010013DD5 0 =$=0=L=T=\=d=p=
000000013DF9 000010013DF9 0 >,><>P>d>p>
000000013E1B 000010013E1B 0 ?4?<?H?d?l?t?|?
000000013E4F 000010013E4F 0 0$0,040@0\0d0l0
000000013E7F 000010013E7F 0 1H1\1h1p1
000000013E97 000010013E97 0 2 2<2D2P2l2t2
000000013EB3 000010013EB3 0 3 3<3H3d3p3
000000013ECF 000010013ECF 0 4,4P4\4d4t4
000000013EE9 000010013EE9 0 505D5L5T5\5d5l5t5
000000013F0F 000010013F0F 0 6,646@6H6d6
000000013F2F 000010013F2F 0 7$7@7L7T7
000000013F55 000010013F55 0 8 8<8D8P8X8t8
000000013F75 000010013F75 0 909<9D9L9T9\9d9t9
000000013F95 000010013F95 0 :,:@:T:d:t:
000000013FC5 000010013FC5 0 0 0$0(0H0
00000000004D 00001000004D 0 !This program cannot be run in DOS mode.
0000000001F0 0000100001F0 0 .text
000000000218 000010000218 0 .rdata
00000000023F 00001000023F 0 @.data
000000000268 000010000268 0 .reloc
000000001BE9 000010001BE9 0 L$(SUV
000000001BF0 000010001BF0 0 D$8W3
000000001C25 000010001C25 0 D$HPQVU
000000002089 000010002089 0 D$<SUVW
0000000027F4 0000100027F4 0 d$hPUQ
000000002BB3 000010002BB3 0 L$(QV
000000002BE6 000010002BE6 0 D$ VP
000000002CA2 000010002CA2 0 D$$UP
000000002EEB 000010002EEB 0 l$ VW
00000000311B 00001000311B 0 l$,VW
000000003249 000010003249 0 L$$SUV
File pos Mem pos ID Text
======== ======= == ====
000000003250 000010003250 0 D$4WPQ
00000000327F 00001000327F 0 D$DPQVS
000000003780 000010003780 0 D$@_][
0000000039A9 0000100039A9 0 T$(PR
000000003B19 000010003B19 0 D$$SUVW
000000003EDE 000010003EDE 0 \$dUVW3
000000003F73 000010003F73 0 L$,Qj
00000000409F 00001000409F 0 L$(Qj
00000000435A 00001000435A 0 L$<Qj
000000004477 000010004477 0 D$,SP
00000000451A 00001000451A 0 L$8QR
00000000470C 00001000470C 0 d$DSh
0000000047D5 0000100047D5 0 QSUVW
000000004B59 000010004B59 0 L$$SUV
000000004B60 000010004B60 0 D$4WPQ
000000004B8F 000010004B8F 0 D$DPQVS
000000004C89 000010004C89 0 L$$SUV
000000004C90 000010004C90 0 D$4WPQ
000000004CBF 000010004CBF 0 D$DPQVS
000000004EBC 000010004EBC 0 L$ QW
000000004F3F 000010004F3F 0 U4RQU
0000000053CC 0000100053CC 0 SUVW3
000000005408 000010005408 0 L$$Qj
000000005A18 000010005A18 0 SUVW3
000000005B49 000010005B49 0 D$|VW3
000000005CF9 000010005CF9 0 D$LSUV3
000000005F62 000010005F62 0 L$$PQ
000000006059 000010006059 0 D$8SUV3
0000000060C8 0000100060C8 0 \$<QSR
0000000060E7 0000100060E7 0 T$$QPR
000000006239 000010006239 0 D$8SUV3
0000000062AF 0000100062AF 0 \$<QRV
0000000062CB 0000100062CB 0 T$$PSR
00000000682B 00001000682B 0 SUVW3
0000000068CC 0000100068CC 0 L$0RVW
0000000068F9 0000100068F9 0 L$PQP
0000000069FA 0000100069FA 0 D$PPW
000000006BD5 000010006BD5 0 |$ QPW
000000006C69 000010006C69 0 D$8UVWj
000000006D04 000010006D04 0 L$HQP
000000006F97 000010006F97 0 ,SUVW
000000006FB3 000010006FB3 0 l$Dt#
00000000706D 00001000706D 0 d$(Ph$%
000000007347 000010007347 0 @SUVW
0000000074F5 0000100074F5 0 D$X VP
000000007629 000010007629 0 L$$SUV
000000007630 000010007630 0 D$4WPQ
00000000765F 00001000765F 0 D$DPQVS
0000000079DC 0000100079DC 0 t$hWj
000000007B23 000010007B23 0 D$ PQ
0000000082DA 0000100082DA 0 T$$QWVR
00000000831C 00001000831C 0 L$$PWVQ
000000008363 000010008363 0 D$,VP
0000000089CA 0000100089CA 0 T$$QWVR
000000008A0C 000010008A0C 0 L$$PWVQ
000000008A53 000010008A53 0 D$,VP
000000009EC6 000010009EC6 0 W*hd&
00000000A087 00001000A087 0 0SUVW
00000000A4D4 00001000A4D4 0 d$8Ph
00000000A4FD 00001000A4FD 0 t$(to
File pos Mem pos ID Text
======== ======= == ====
00000000AAC8 00001000AAC8 0 SUVW3
00000000ABA1 00001000ABA1 0 |$0t1
00000000ABD4 00001000ABD4 0 \$$hh!
00000000DF48 00001000DF48 0 t WVS
00000000DF75 00001000DF75 0 u7WPS
00000000DF86 00001000DF86 0 u&WVS
000000010D0E 000010010D0E 0 CloseHandle
000000010D1C 000010010D1C 0 ReadFile
000000010D28 000010010D28 0 GetFileSize
000000010D36 000010010D36 0 CreateFileA
000000010D44 000010010D44 0 WriteFile
000000010D50 000010010D50 0 SetFilePointer
000000010D62 000010010D62 0 GetLocalTime
000000010D72 000010010D72 0 GetModuleFileNameA
000000010D88 000010010D88 0 DeleteFileA
000000010D96 000010010D96 0 VirtualQuery
000000010DA6 000010010DA6 0 CreateThread
000000010DB6 000010010DB6 0 TerminateThread
000000010DC8 000010010DC8 0 Sleep
000000010DD0 000010010DD0 0 SuspendThread
000000010DE0 000010010DE0 0 ResumeThread
000000010DF0 000010010DF0 0 GetProcAddress
000000010E02 000010010E02 0 LoadLibraryA
000000010E12 000010010E12 0 GetModuleHandleA
000000010E26 000010010E26 0 VirtualFree
000000010E34 000010010E34 0 VirtualAlloc
000000010E44 000010010E44 0 FindNextFileA
000000010E54 000010010E54 0 FindFirstFileA
000000010E66 000010010E66 0 WaitForSingleObject
000000010E7C 000010010E7C 0 VirtualProtect
000000010E8C 000010010E8C 0 KERNEL32.dll
000000010E9C 000010010E9C 0 MessageBoxA
000000010EA8 000010010EA8 0 USER32.dll
000000010EB4 000010010EB4 0 ADVAPI32.dll
000000010EC4 000010010EC4 0 ??0Init@ios_base@std@@QAE@XZ
000000010EE4 000010010EE4 0 ??1Init@ios_base@std@@QAE@XZ
000000010F04 000010010F04 0 ??0_Winit@std@@QAE@XZ
000000010F1C 000010010F1C 0 ??1_Winit@std@@QAE@XZ
000000010F34 000010010F34 0 ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
000000010F7E 000010010F7E 0 ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
000000010FDA 000010010FDA 0 ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
000000011036 000010011036 0 ?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
000000011088 000010011088 0 ?_Xlen@std@@YAXXZ
00000001109C 00001001109C 0 ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
0000000110F0 0000100110F0 0 ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
00000001113A 00001001113A 0 ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
00000001118A 00001001118A 0 ?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
0000000111D8 0000100111D8 0 ?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
000000011226 000010011226 0 ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
00000001127E 00001001127E 0 ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
0000000112DA 0000100112DA 0 ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
000000011332 000010011332 0 ??0bad_exception@std@@QAE@ABV01@@Z
000000011358 000010011358 0 ??1bad_exception@std@@UAE@XZ
000000011378 000010011378 0 ??0bad_exception@std@@QAE@PBD@Z
00000001139A 00001001139A 0 ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
0000000113F6 0000100113F6 0 ?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
000000011444 000010011444 0 ?_Xran@std@@YAXXZ
000000011458 000010011458 0 ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
0000000114AE 0000100114AE 0 ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
000000011500 000010011500 0 ?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
File pos Mem pos ID Text
======== ======= == ====
000000011554 000010011554 0 ?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
0000000115B2 0000100115B2 0 ?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
000000011610 000010011610 0 ?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
000000011662 000010011662 0 ??1_Lockit@std@@QAE@XZ
00000001167C 00001001167C 0 ??0_Lockit@std@@QAE@XZ
000000011694 000010011694 0 MSVCP60.dll
0000000116A2 0000100116A2 0 PathFileExistsA
0000000116B4 0000100116B4 0 PathAppendA
0000000116C0 0000100116C0 0 SHLWAPI.dll
0000000116CE 0000100116CE 0 __CxxFrameHandler
0000000116EA 0000100116EA 0 memmove
0000000116F4 0000100116F4 0 ??0exception@@QAE@ABV0@@Z
000000011718 000010011718 0 realloc
000000011722 000010011722 0 _CxxThrowException
000000011738 000010011738 0 ?what@exception@@UBEPBDXZ
000000011754 000010011754 0 ??1exception@@UAE@XZ
00000001176C 00001001176C 0 _vsnprintf
00000001177A 00001001177A 0 ??2@YAPAXI@Z
00000001178A 00001001178A 0 fclose
000000011794 000010011794 0 vfprintf
0000000117A0 0000100117A0 0 fopen
0000000117A8 0000100117A8 0 ??0exception@@QAE@XZ
0000000117C0 0000100117C0 0 fputs
0000000117C8 0000100117C8 0 fread
0000000117D8 0000100117D8 0 _ftol
0000000117E0 0000100117E0 0 malloc
0000000117EA 0000100117EA 0 memcpy
0000000117F4 0000100117F4 0 memset
0000000117FE 0000100117FE 0 __dllonexit
00000001180C 00001001180C 0 _onexit
000000011814 000010011814 0 MSVCRT.dll
000000011822 000010011822 0 ??1type_info@@UAE@XZ
00000001183A 00001001183A 0 _initterm
000000011846 000010011846 0 _adjust_fdiv
000000011856 000010011856 0 HeapCreate
000000011864 000010011864 0 InterlockedCompareExchange
000000011882 000010011882 0 InterlockedExchange
000000011898 000010011898 0 HeapDestroy
0000000118A6 0000100118A6 0 HeapFree
0000000118B2 0000100118B2 0 OpenThread
0000000118C0 0000100118C0 0 SetThreadContext
0000000118D4 0000100118D4 0 GetThreadContext
0000000118E8 0000100118E8 0 Thread32Next
0000000118F8 0000100118F8 0 HeapReAlloc
000000011906 000010011906 0 HeapAlloc
000000011912 000010011912 0 GetCurrentThreadId
000000011928 000010011928 0 GetCurrentProcessId
00000001193E 00001001193E 0 Thread32First
00000001194E 00001001194E 0 CreateToolhelp32Snapshot
00000001196A 00001001196A 0 FlushInstructionCache
000000011982 000010011982 0 GetCurrentProcess
0000000119D2 0000100119D2 0 Library.dll
0000000119DE 0000100119DE 0 iinit
000000012050 000010012050 0 .?AVexception@@
000000012068 000010012068 0 .?AVException@@
000000012080 000010012080 0 .?AVArgumentOutOfRangeException@@
0000000120B8 0000100120B8 0 .?AVbad_exception@std@@
0000000120D0 0000100120D0 0 bad exception
0000000120F0 0000100120F0 0 .?AVIOException@@
000000012110 000010012110 0 .?AVFileNotFoundException@@
File pos Mem pos ID Text
======== ======= == ====
000000012130 000010012130 0 Logger is now on new TraceLevel: %s
000000012154 000010012154 0 UNKNOWN
000000012160 000010012160 0 TRACE
000000012168 000010012168 0 NOTICE
000000012170 000010012170 0 WARNING
000000012178 000010012178 0 ERROR
000000012180 000010012180 0 FATAL
000000012188 000010012188 0 [%s]: %s
0000000121A0 0000100121A0 0 .?AVThreadException@@
0000000121B8 0000100121B8 0 Can't resume thread
0000000121CC 0000100121CC 0 MessageBoxTimeoutA
0000000121E0 0000100121E0 0 user32.dll
0000000121EC 0000100121EC 0 [%04d/%02d/%02d %02d:%02d:%02d.%03d] %s
000000012220 000010012220 0 .?AVXfsException@@
000000012240 000010012240 0 .?AVXfsGetInfoException@@
00000001225C 00001001225C 0 get cu info get info exception %d
000000012280 000010012280 0 get cu and store result unknown exception
0000000122AC 0000100122AC 0 get cu info query error
0000000122D0 0000100122D0 0 .?AVXfsDispenseException@@
0000000122EC 0000100122EC 0 unknown exception
000000012300 000010012300 0 Dispense exception, code %d
00000001231C 00001001231C 0 ca5h units info received
000000012338 000010012338 0 try to set %d
000000012348 000010012348 0 Xfs::QueryCashUnitsFromAtm4
000000012364 000010012364 0 Xfs::QueryCashUnitsFromAtm3
000000012380 000010012380 0 Xfs::QueryCashUnitsFromAtm2
00000001239C 00001001239C 0 LFS found info about <%d> ca5h un1t5
0000000123C4 0000100123C4 0 XFS-> dispense end SUCCESSFUL DISPENSE
0000000123EC 0000100123EC 0 WFS_RESULT %d
000000012408 000010012408 0 .?AVHookLibException@@
000000012420 000010012420 0 WFMFreeBuffer
000000012430 000010012430 0 WFMAllocateMore
000000012440 000010012440 0 WFMAllocateBuffer
000000012454 000010012454 0 WFSExecute
000000012460 000010012460 0 WFSFreeResult
000000012470 000010012470 0 WFSStartUp
00000001247C 00001001247C 0 WFSGetInfo
000000012488 000010012488 0 no xf5 module found
00000001249C 00001001249C 0 msxfs.dll
0000000124D8 0000100124D8 0 |INDEX:%d|CU state:%d|Type:%d|Values:%d|Currency_ID:%s|Money count:%d|
000000012524 000010012524 0 Founded < %d > commands
000000012540 000010012540 0 Command file deleted successfully
000000012564 000010012564 0 Reading command from a %s
000000012580 000010012580 0 %s\%s
000000012588 000010012588 0 FileCommandProvider::ReadXfsCommandFromFile ->
0000000125C0 0000100125C0 0 .?AVArgumentException@@
0000000125D8 0000100125D8 0 exception
0000000125E8 0000100125E8 0 CommandProcessor created
000000012604 000010012604 0 DEFAULT command processed
000000012620 000010012620 0 NONE command processed
000000012638 000010012638 0 System error!
000000012648 000010012648 0 Dispense failed. CODE:%d
000000012664 000010012664 0 Multi Dispensing start
00000001267C 00001001267C 0 Dispense failed. Unknown reason.
0000000126A0 0000100126A0 0 Dispense failed. %d
0000000126B4 0000100126B4 0 Manual Dispensing
0000000126C8 0000100126C8 0 Display Balance -> exception, code:%d
0000000126F0 0000100126F0 0 Display Balance 1try -> exception, code:%d
00000001271C 00001001271C 0 CommandProcessor::ProcessCommand ->
000000012740 000010012740 0 SetMaximumDispenseSize:%d
File pos Mem pos ID Text
======== ======= == ====
00000001275C 00001001275C 0 NULL command processed
000000012774 000010012774 0 ICommandProcessor::ProcessCommand -> start method
0000000127A8 0000100127A8 0 Processing command #%d
0000000127C0 0000100127C0 0 Received
0000000127CD 0000100127CD 0 commands
0000000127D8 0000100127D8 0 exception cauch: %d
0000000127EC 0000100127EC 0 Exiting
0000000127F4 0000100127F4 0 Pausing
0000000127FC 0000100127FC 0 trying to dispense
000000012810 000010012810 0 R2CommandProcessor::ProcessGetRealBalance()1
000000012840 000010012840 0 cur disp service is |%d|
00000001285C 00001001285C 0 try toi set %d
00000001286C 00001001286C 0 ___log.txt
000000012878 000010012878 0 Deleting resources
000000012898 000010012898 0 .?AVXfsLoaderException@@
0000000128B4 0000100128B4 0 uncatched
0000000128C0 0000100128C0 0 %s:%d
0000000128C8 0000100128C8 0 c:\atm\1
0000000128D4 0000100128D4 0 void CreateAllResources()
0000000128F0 0000100128F0 0 Xfs init error
000000012900 000010012900 0 Critical system error!
000000012918 000010012918 0 resources created
00000001292C 00001001292C 0 MH_UNKNOWN
000000012938 000010012938 0 MH_OK
000000012940 000010012940 0 MH_ERROR_ALREADY_INITIALIZED
000000012960 000010012960 0 MH_ERROR_NOT_INITIALIZED
00000001297C 00001001297C 0 MH_ERROR_ALREADY_CREATED
000000012998 000010012998 0 MH_ERROR_NOT_CREATED
0000000129B0 0000100129B0 0 MH_ERROR_ENABLED
0000000129C4 0000100129C4 0 MH_ERROR_DISABLED
0000000129D8 0000100129D8 0 MH_ERROR_NOT_EXECUTABLE
0000000129F0 0000100129F0 0 MH_ERROR_UNSUPPORTED_FUNCTION
000000012A10 000010012A10 0 MH_ERROR_MEMORY_ALLOC
000000012A28 000010012A28 0 MH_ERROR_MEMORY_PROTECT
000000012A40 000010012A40 0 MH_ERROR_MODULE_NOT_FOUND
000000012A5C 000010012A5C 0 MH_ERROR_FUNCTION_NOT_FOUND
000000012A78 000010012A78 0 (unknown)
000000012AD2 000010012AD2 0 YYYYY
000000012ADE 000010012ADE 0 YYYYYYYYYYYY
000000012AEC 000010012AEC 0 }YPPPPYYYYa
000000012B02 000010012B02 0 YYYYYYYYYYY
000000012BB4 000010012BB4 0 JJJJKRJJJJOLJJJJJJJJUE@JJJEYMFJ]JJJJJJJJJJJJJJacgNJJkmJJEmJJDEJJ
000000012C98 000010012C98 0 .?AVtype_info@@
00000001300B 00001001300B 0 0!01070Q0W0a0q0w0
000000013021 000010013021 0 1-1K1]1
00000001302D 00001001302D 0 1>2\2
000000013039 000010013039 0 3H3f3r3
000000013047 000010013047 0 4P4M5
000000013055 000010013055 0 :$;R;
00000001305F 00001001305F 0 ;.<D<c<
00000001306D 00001001306D 0 <5=;=r=x=
00000001307F 00001001307F 0 >2>j>
00000001309B 00001001309B 0 ?!?1?7?G?~?
0000000130BD 0000100130BD 0 0&0-0;0B0W0s0
0000000130CB 0000100130CB 0 0.1i1
0000000130DF 0000100130DF 0 2 3(3z3
0000000130ED 0000100130ED 0 3-4Q4a4y4
000000013103 000010013103 0 6&6:6
000000013119 000010013119 0 7'7c7
000000013129 000010013129 0 8#9X9}9
File pos Mem pos ID Text
======== ======= == ====
000000013159 000010013159 0 =<>F>d>w>
00000001316B 00001001316B 0 ?<?F?m?}?
000000013184 000010013184 0 30f0m0y0
000000013199 000010013199 0 0 1(141@1L1X1e1l1{1
0000000131C7 0000100131C7 0 4%4,4
0000000131DB 0000100131DB 0 5'5.545c5
0000000131EB 0000100131EB 0 6)6o6
0000000131F3 0000100131F3 0 7=7U7\7t7
0000000131FF 0000100131FF 0 7+8h8u8
000000013215 000010013215 0 949:9@9I9P9
00000001322B 00001001322B 0 :!:-:::A:G:
000000013241 000010013241 0 ;Q<a<r<
000000013253 000010013253 0 >,>q>
000000013271 000010013271 0 0+1v1
000000013279 000010013279 0 162>2
00000001328F 00001001328F 0 4-464Z4k4
00000001329B 00001001329B 0 4[5m5
0000000132AD 0000100132AD 0 787A7R7w7
0000000132BD 0000100132BD 0 7g8q8w8
0000000132CF 0000100132CF 0 9I:[:
0000000132F5 0000100132F5 0 3)5:5@5K5e5n5z5
00000001331F 00001001331F 0 5A6Q6b6p6u6
000000013339 000010013339 0 7/777<7b7g7~7
000000013359 000010013359 0 8$8)8O8T8k8s8x8
00000001337B 00001001337B 0 9<9A9X9
000000013395 000010013395 0 :R:q:
0000000133A1 0000100133A1 0 :3;_;
0000000133B1 0000100133B1 0 ;3<8<I<O<
0000000133C3 0000100133C3 0 =P>V>h>n>
0000000133FD 0000100133FD 0 1N1T1e1
00000001340D 00001001340D 0 1#2Q2p2
000000013421 000010013421 0 22383I3l3r3
000000013431 000010013431 0 334f4
00000001344F 00001001344F 0 6$626A6_6r6
00000001348D 00001001348D 0 :O:m:
000000013493 000010013493 0 :B;U;
0000000134A9 0000100134A9 0 =$=8===Q=_=w=
0000000134E3 0000100134E3 0 0<1r1
0000000134F3 0000100134F3 0 2A2I2z2
000000013507 000010013507 0 333v3
000000013517 000010013517 0 5/5V5
000000013535 000010013535 0 6N7U7p7
000000013547 000010013547 0 8!828@8E8
000000013565 000010013565 0 9G9L9S9[9j9x9
000000013577 000010013577 0 :T:Y:q:y:
00000001359B 00001001359B 0 ="=2=p=~=
0000000135AD 0000100135AD 0 =[>s>
0000000135C1 0000100135C1 0 ?C?u?z?
0000000135DD 0000100135DD 0 0-0I0
000000013603 000010013603 0 364L4
00000001360D 00001001360D 0 5)5F5]5
00000001361D 00001001361D 0 627f7
000000013631 000010013631 0 909K9
000000013641 000010013641 0 :&;<;
00000001364D 00001001364D 0 <6<M<
00000001365B 00001001365B 0 =">V>
000000013661 000010013661 0 > ?;?v?
000000013689 000010013689 0 1"2E2U2
000000013693 000010013693 0 2"3E3U3
00000001369D 00001001369D 0 334T4r4
File pos Mem pos ID Text
======== ======= == ====
0000000136A7 0000100136A7 0 4=5M5
0000000136B1 0000100136B1 0 5;6K6
0000000136BF 0000100136BF 0 7C7[7m7
0000000136CD 0000100136CD 0 8.848Q8
0000000136E7 0000100136E7 0 9*:8:
0000000136FD 0000100136FD 0 <C<r<
00000001370B 00001001370B 0 =A=W=
000000013713 000010013713 0 =.><>M>
000000013723 000010013723 0 > ?)?7?@?Q?s?
00000001373C 00001001373C 0 80<0@0D0H0L0P0T0X0\0
000000013751 000010013751 0 0d0s0
00000001375B 00001001375B 0 0!1;1
000000013793 000010013793 0 666T6g6
0000000137A3 0000100137A3 0 6$7D7f7
0000000137AD 0000100137AD 0 848d8
0000000137B5 0000100137B5 0 8W9f9
0000000137BD 0000100137BD 0 9":U:
0000000137C7 0000100137C7 0 :,;7;Y;
0000000137CF 0000100137CF 0 ;e;w;
0000000137F1 0000100137F1 0 =&>U>n>
0000000137FB 0000100137FB 0 >#???
000000013810 000010013810 0 40Q0a0v0
00000001381F 00001001381F 0 0I1p1
000000013835 000010013835 0 2+21262F2c2y2
000000013851 000010013851 0 3F3g3x3
00000001385B 00001001385B 0 4<4A4O4_4e4j4
000000013873 000010013873 0 5=5B5R5r5
000000013893 000010013893 0 73797M7S7g7u7
0000000138AD 0000100138AD 0 7A8_8g8
0000000138C3 0000100138C3 0 9!9'9?9_9h9o9u9|9
0000000138DF 0000100138DF 0 9K:X:
0000000138E7 0000100138E7 0 ;7;j;
0000000138F9 0000100138F9 0 >D>K>
000000013905 000010013905 0 ?#?*?@?
000000013918 000010013918 0 <0J0Q0
00000001393D 00001001393D 0 3,333<3B3J3R3[3w3
000000013951 000010013951 0 344B4N4\4k4s4y4
000000013979 000010013979 0 646I6{6
0000000139B5 0000100139B5 0 9!9%9)9-9195999=9A9E9I9M9l9u9
0000000139DF 0000100139DF 0 ;);U;
0000000139ED 0000100139ED 0 0)101"3
0000000139F7 0000100139F7 0 4S5e5
000000013A07 000010013A07 0 < <$<(<,<0<4<
000000013A2F 000010013A2F 0 >&>2>T>Z>
000000013A39 000010013A39 0 >f>l>z>
000000013A5D 000010013A5D 0 ?0?B?
000000013A81 000010013A81 0 0M0i0
000000013A93 000010013A93 0 0-1I1e1n1s1
000000013AA9 000010013AA9 0 2$2D2Y2y2
000000013ABB 000010013ABB 0 393a3y3
000000013ACD 000010013ACD 0 4!4<4U4
000000013AD5 000010013AD5 0 4g4p4y4
000000013AF1 000010013AF1 0 555:5m5
000000013B0D 000010013B0D 0 6%6*6U6Z6y6
000000013B1F 000010013B1F 0 717E7V7_7d7
000000013B35 000010013B35 0 8"858b8q8
000000013B57 000010013B57 0 9%9*9E9J9e9j9
000000013B77 000010013B77 0 :%:*:E:J:l:
000000013B89 000010013B89 0 ;);A;a;y;
000000013B99 000010013B99 0 <D<U<m<
File pos Mem pos ID Text
======== ======= == ====
000000013BEF 000010013BEF 0 2 2$2(2,2024282<2@2D2H2L2P2T2X2\2
000000013C11 000010013C11 0 2d2h2l2p2t2x2|2
000000013C63 000010013C63 0 3(3<3L3P3\3p3|3
000000013C8B 000010013C8B 0 4(44484D4L4T4h4t4
000000013CB7 000010013CB7 0 5$505L5T5\5h5
000000013CD9 000010013CD9 0 6$606L6T6
000000013CF7 000010013CF7 0 7,747@7\7d7x7
000000013D19 000010013D19 0 8 8(8<8L8x8
000000013D3F 000010013D3F 0 9$90989T9
000000013D63 000010013D63 0 : :<:D:L:
000000013D6D 000010013D6D 0 :l:p:t:x:
000000013D87 000010013D87 0 ;,;4;@;\;d;p;
000000013DAD 000010013DAD 0 <$<,<8<T<\<d<p<
000000013DD5 000010013DD5 0 =$=0=L=T=\=d=p=
000000013DF9 000010013DF9 0 >,><>P>d>p>
000000013E1B 000010013E1B 0 ?4?<?H?d?l?t?|?
000000013E4F 000010013E4F 0 0$0,040@0\0d0l0
000000013E7F 000010013E7F 0 1H1\1h1p1
000000013E97 000010013E97 0 2 2<2D2P2l2t2
000000013EB3 000010013EB3 0 3 3<3H3d3p3
000000013ECF 000010013ECF 0 4,4P4\4d4t4
000000013EE9 000010013EE9 0 505D5L5T5\5d5l5t5
000000013F0F 000010013F0F 0 6,646@6H6d6
000000013F2F 000010013F2F 0 7$7@7L7T7
000000013F55 000010013F55 0 8 8<8D8P8X8t8
000000013F75 000010013F75 0 909<9D9L9T9\9d9t9
000000013F95 000010013F95 0 :,:@:T:d:t:
000000013FC5 000010013FC5 0 0 0$0(0H0