.- - -----÷M÷E÷N÷U÷------------------------------------------------------------- --- ---- -------------.
! WALL ! STATS ! GOODIES ! YARA ! FAQ ! RSS ! EMV !
`-------------- - --- ---------- -------- -------- -------- -------- ----------------- - ---- ---- --'
ATM MALWARE NOTICE
e267fb3044c31256f06dd712c7aeae97ad148fd3157995a7e536e5473c1a2bc0
Date...........: 2014-02-03
Family.........: SkimerWC
File name......: 002084 [1-35318].dll
File size......: 60.00 KB
Type file......: DLL/Windows
Virscan........: VT - HA
Documentation..: https://vms.drweb.com/virus/?i=3763670
Additional note: We did a small dump here, it is runnable.
Entropy:
Binary Histogram:
=== SCREENSHOT ===
=== PEDUMP REPORT ===
=== MZ Header ===
signature: "MZ"
bytes_in_last_block: 80 0x50
blocks_in_file: 2 2
num_relocs: 0 0
header_paragraphs: 4 4
min_extra_paragraphs: 15 0xf
max_extra_paragraphs: 65535 0xffff
ss: 0 0
sp: 184 0xb8
checksum: 0 0
ip: 0 0
cs: 0 0
reloc_table_offset: 64 0x40
overlay_number: 26 0x1a
reserved0: 0 0
oem_id: 0 0
oem_info: 0 0
reserved2: 0 0
reserved3: 0 0
reserved4: 0 0
reserved5: 0 0
reserved6: 0 0
lfanew: 256 0x100
=== DOS STUB ===
00000000: ba 10 00 0e 1f b4 09 cd 21 b8 01 4c cd 21 90 90 |........!..L.!..|
00000010: 54 68 69 73 20 70 72 6f 67 72 61 6d 20 6d 75 73 |This program mus|
00000020: 74 20 62 65 20 72 75 6e 20 75 6e 64 65 72 20 57 |t be run under W|
00000030: 69 6e 33 32 0d 0a 24 37 00 00 00 00 00 00 00 00 |in32..$7........|
00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
=== PE Header ===
signature: "PE\x00\x00"
# IMAGE_FILE_HEADER:
Machine: 332 0x14c x86
NumberOfSections: 6 6
TimeDateStamp: "1992-06-19 22:22:17"
PointerToSymbolTable: 0 0
NumberOfSymbols: 0 0
SizeOfOptionalHeader: 224 0xe0
Characteristics: 41358 0xa18e EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED
LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO
32BIT_MACHINE, DLL, BYTES_REVERSED_HI
# IMAGE_OPTIONAL_HEADER32:
Magic: 267 0x10b 32-bit executable
LinkerVersion: 2.25
SizeOfCode: 31232 0x7a00
SizeOfInitializedData: 7680 0x1e00
SizeOfUninitializedData: 0 0
AddressOfEntryPoint: 33250 0x81e2
BaseOfCode: 4096 0x1000
BaseOfData: 36864 0x9000
ImageBase: 50331648 0x3000000
SectionAlignment: 4096 0x1000
FileAlignment: 512 0x200
OperatingSystemVersion: 4.0
ImageVersion: 0.0
SubsystemVersion: 4.0
Reserved1: 0 0
SizeOfImage: 61440 0xf000
SizeOfHeaders: 1024 0x400
CheckSum: 0 0
Subsystem: 2 2 WINDOWS_GUI
DllCharacteristics: 1 1 0x01
SizeOfStackReserve: 0 0
SizeOfStackCommit: 0 0
SizeOfHeapReserve: 1048576 0x100000
SizeOfHeapCommit: 4096 0x1000
LoaderFlags: 0 0
NumberOfRvaAndSizes: 16 0x10
=== DATA DIRECTORY ===
EXPORT rva:0x 0 size:0x 0
IMPORT rva:0x c000 size:0x a92
RESOURCE rva:0x e000 size:0x 600
EXCEPTION rva:0x 0 size:0x 0
SECURITY rva:0x 0 size:0x 0
BASERELOC rva:0x d000 size:0x 758
DEBUG rva:0x 0 size:0x 0
ARCHITECTURE rva:0x 0 size:0x 0
GLOBALPTR rva:0x 0 size:0x 0
TLS rva:0x 0 size:0x 0
LOAD_CONFIG rva:0x 0 size:0x 0
Bound_IAT rva:0x 0 size:0x 0
IAT rva:0x 0 size:0x 0
Delay_IAT rva:0x 0 size:0x 0
CLR_Header rva:0x 0 size:0x 0
rva:0x 0 size:0x 0
=== SECTIONS ===
NAME RVA VSZ RAW_SZ RAW_PTR nREL REL_PTR nLINE LINE_PTR FLAGS
CODE 1000 7980 7a00 400 0 0 0 0 60000020 R-X CODE
DATA 9000 368 400 7e00 0 0 0 0 c0000040 RW- IDATA
BSS a000 148d 0 8200 0 0 0 0 c0000000 RW-
.idata c000 a92 c00 8200 0 0 0 0 c0000040 RW- IDATA
.reloc d000 758 800 8e00 0 0 0 0 50000040 R-- IDATA SHARED
.rsrc e000 600 600 9600 0 0 0 0 50000040 R-- IDATA SHARED
=== RESOURCES ===
FILE_OFFSET CP LANG SIZE TYPE NAME
0x9750 0 0x419 744 ICON #1
0x9a38 0 0 16 RCDATA DVCLAL
0x9a48 0 0 60 RCDATA PACKAGEINFO
0x9a84 0 0x419 20 GROUP_ICON MAINICON
=== IMPORTS ===
MODULE_NAME HINT ORD FUNCTION_NAME
kernel32.dll 0 DeleteCriticalSection
kernel32.dll 0 LeaveCriticalSection
kernel32.dll 0 EnterCriticalSection
kernel32.dll 0 InitializeCriticalSection
kernel32.dll 0 VirtualFree
kernel32.dll 0 VirtualAlloc
kernel32.dll 0 LocalFree
kernel32.dll 0 LocalAlloc
kernel32.dll 0 GetVersion
kernel32.dll 0 GetCurrentThreadId
kernel32.dll 0 GetThreadLocale
kernel32.dll 0 GetStartupInfoA
kernel32.dll 0 GetLocaleInfoA
kernel32.dll 0 GetCommandLineA
kernel32.dll 0 FreeLibrary
kernel32.dll 0 ExitProcess
kernel32.dll 0 WriteFile
kernel32.dll 0 UnhandledExceptionFilter
kernel32.dll 0 RtlUnwind
kernel32.dll 0 RaiseException
kernel32.dll 0 GetStdHandle
user32.dll 0 GetKeyboardType
user32.dll 0 MessageBoxA
advapi32.dll 0 RegQueryValueExA
advapi32.dll 0 RegOpenKeyExA
advapi32.dll 0 RegCloseKey
kernel32.dll 0 TlsSetValue
kernel32.dll 0 TlsGetValue
kernel32.dll 0 TlsFree
kernel32.dll 0 TlsAlloc
kernel32.dll 0 LocalFree
kernel32.dll 0 LocalAlloc
advapi32.dll 0 OpenProcessToken
advapi32.dll 0 LookupPrivilegeValueA
advapi32.dll 0 InitiateSystemShutdownA
advapi32.dll 0 AdjustTokenPrivileges
kernel32.dll 0 lstrlenA
kernel32.dll 0 lstrcpyA
kernel32.dll 0 lstrcmpiW
kernel32.dll 0 lstrcmpiA
kernel32.dll 0 lstrcmpA
kernel32.dll 0 lstrcatA
kernel32.dll 0 WriteProcessMemory
kernel32.dll 0 WriteFile
kernel32.dll 0 WaitForSingleObject
kernel32.dll 0 VirtualProtect
kernel32.dll 0 VirtualFreeEx
kernel32.dll 0 VirtualAllocEx
kernel32.dll 0 Sleep
kernel32.dll 0 SetFileTime
kernel32.dll 0 SetFilePointer
kernel32.dll 0 ReadFile
kernel32.dll 0 PulseEvent
kernel32.dll 0 OpenProcess
kernel32.dll 0 MultiByteToWideChar
kernel32.dll 0 LocalFree
kernel32.dll 0 LocalAlloc
kernel32.dll 0 LoadLibraryA
kernel32.dll 0 GetWindowsDirectoryA
kernel32.dll 0 GetVolumeInformationA
kernel32.dll 0 GetSystemTimeAsFileTime
kernel32.dll 0 GetProcAddress
kernel32.dll 0 GetModuleHandleA
kernel32.dll 0 GetModuleFileNameA
kernel32.dll 0 GetLastError
kernel32.dll 0 GetFileSize
kernel32.dll 0 GetExitCodeThread
kernel32.dll 0 GetCurrentProcess
kernel32.dll 0 FormatMessageA
kernel32.dll 0 FileTimeToLocalFileTime
kernel32.dll 0 ExitProcess
kernel32.dll 0 DeleteFileA
kernel32.dll 0 CreateThread
kernel32.dll 0 CreateRemoteThread
kernel32.dll 0 CreateFileA
kernel32.dll 0 CreateEventA
kernel32.dll 0 CloseHandle
gdi32.dll 0 SelectObject
gdi32.dll 0 Rectangle
gdi32.dll 0 GetTextMetricsA
gdi32.dll 0 GetDeviceCaps
gdi32.dll 0 DeleteObject
gdi32.dll 0 DeleteDC
gdi32.dll 0 CreateSolidBrush
gdi32.dll 0 CreateDCA
user32.dll 0 CreateWindowExA
user32.dll 0 UnregisterClassA
user32.dll 0 TranslateMessage
user32.dll 0 SetTimer
user32.dll 0 SetFocus
user32.dll 0 SendMessageA
user32.dll 0 RegisterClassA
user32.dll 0 PostMessageA
user32.dll 0 PeekMessageA
user32.dll 0 LoadIconA
user32.dll 0 LoadCursorA
user32.dll 0 InvalidateRect
user32.dll 0 GetWindowTextA
user32.dll 0 GetWindowDC
user32.dll 0 GetMessageA
user32.dll 0 GetDesktopWindow
user32.dll 0 GetClientRect
user32.dll 0 DrawTextA
user32.dll 0 DispatchMessageA
user32.dll 0 DestroyWindow
user32.dll 0 DefWindowProcA
kernel32.dll 0 VirtualProtect
user32.dll 0 wsprintfA
PSAPI.DLL 0 GetModuleBaseNameA
PSAPI.DLL 0 EnumProcesses
File pos Mem pos ID Text
======== ======= == ====
000000000050 000003000050 0 This program must be run under Win32
000000000270 000003000270 0 .idata
000000000298 000003000298 0 .reloc
0000000002BF 0000030002BF 0 P.rsrc
00000000054B 00000300114B 0 'R/<s
0000000006DA 0000030012DA 0 |w;N=
000000000748 000003001348 0 WAYiv
0000000007B1 0000030013B1 0 V o/O
0000000007BD 0000030013BD 0 SW=2/F
0000000007D4 0000030013D4 0 z-{:Z
000000000879 000003001479 0 %nof
0000000008B0 0000030014B0 0 t0A]o
000000000936 000003001536 0 0E ykDe?0V@
0000000009D2 0000030015D2 0 B.(~
000000000A4E 00000300164E 0 E yl_
000000000AA1 0000030016A1 0 @R/OQ(
000000000AAA 0000030016AA 0 Zk Sm
000000000B42 000003001742 0 X|hEB
000000000B56 000003001756 0 {q6#4-z
000000000BA3 0000030017A3 0 BS>J3
000000000C26 000003001826 0 yoz(L&10
000000000CA0 0000030018A0 0 I!HZ<
000000000D4D 00000300194D 0 xhmb,
000000000FE6 000003001BE6 0 +*TA
0000000013B4 000003001FB4 0 t {e&
000000001619 000003002219 0 M@x}a
0000000016E5 0000030022E5 0 :aTR4
00000000175E 00000300235E 0 zJC5&
0000000018AB 0000030024AB 0 O\arm
000000001900 000003002500 0 :#xG2
00000000194C 00000300254C 0 cY(F$W
000000001BFA 0000030027FA 0 &Wt/R
000000001C80 000003002880 0 Aw>CWx
000000001D65 000003002965 0 7d]xn\
000000001DF8 0000030029F8 0 b wX)4
000000001E06 000003002A06 0 hYlS#
000000001E20 000003002A20 0 8tf[L
000000001F0C 000003002B0C 0 6|5f5G/
00000000209B 000003002C9B 0 pP"+<
0000000020AD 000003002CAD 0 A5~T@
0000000021A4 000003002DA4 0 0b.DG
0000000021E8 000003002DE8 0 sfU!Xm
0000000022AE 000003002EAE 0 Wedrh
0000000022FF 000003002EFF 0 0%Cxp
00000000244B 00000300304B 0 :-&da
0000000024E2 0000030030E2 0 ,U6#PE:x-
000000002636 000003003236 0 qmXw
00000000266B 00000300326B 0 WD[HO
000000002687 000003003287 0 wDQV(dg
0000000026FB 0000030032FB 0 87KBd
0000000027BC 0000030033BC 0 _B-3Q
000000002828 000003003428 0 [N 7}
00000000292C 00000300352C 0 / +Nb
00000000296C 00000300356C 0 8v t[r
000000002C2A 00000300382A 0 ]{>y8
000000002C52 000003003852 0 3#]cp
000000002D0C 00000300390C 0 =]Mx*
000000002D7F 00000300397F 0 9nL]"5Fu
000000002E20 000003003A20 0 zZKv=
000000002E79 000003003A79 0 (8~a<OZ
File pos Mem pos ID Text
======== ======= == ====
000000002E94 000003003A94 0 kK@l&
000000002FC7 000003003BC7 0 KqfLb&
000000003102 000003003D02 0 K 'vj[
00000000311C 000003003D1C 0 6&D*o
00000000317B 000003003D7B 0 QeHkT
0000000031A2 000003003DA2 0 4"4@Sd
0000000031BC 000003003DBC 0 c~MXtqr
00000000322A 000003003E2A 0 "i_kV
00000000337F 000003003F7F 0 xl92:W
0000000033DE 000003003FDE 0 wuL9yd&
000000003772 000003004372 0 UH>FLpB
00000000378E 00000300438E 0 K~T@~~
00000000379E 00000300439E 0 < sY-
0000000037FB 0000030043FB 0 ji:Y&C
000000003822 000003004422 0 q#D K(
000000003851 000003004451 0 ~*Xhq
0000000038B7 0000030044B7 0 {R&5+,x
000000003913 000003004513 0 y~S@5@
000000003ACB 0000030046CB 0 YT}n[
000000003B1B 00000300471B 0 r6+XM7
000000003C06 000003004806 0 EWzof
000000003C6B 00000300486B 0 6uSD?
000000003C79 000003004879 0 ixN&$
000000003DBC 0000030049BC 0 ;oC]$q
000000003DCA 0000030049CA 0 oT#&5w
000000003DD7 0000030049D7 0 lx[(=
000000003DF2 0000030049F2 0 'DLh]_
000000003E14 000003004A14 0 9-}}lXK
000000003E57 000003004A57 0 )6ujVKW
000000003EB3 000003004AB3 0 q+RY1
000000003EC3 000003004AC3 0 -:k&jO[
000000003F1B 000003004B1B 0 EB_,9Ch
000000003F59 000003004B59 0 D02Bk
000000004030 000003004C30 0 ./rTa
00000000419B 000003004D9B 0 iv+\
000000004275 000003004E75 0 )uC;T
00000000430F 000003004F0F 0 la{*.
0000000044C4 0000030050C4 0 S Qc%
0000000046AA 0000030052AA 0 :}GkH
0000000046FA 0000030052FA 0 &$\Gc
000000004701 000003005301 0 R&4d!
000000004C26 000003005826 0 L#SRU
000000004D01 000003005901 0 2q Anf
000000005043 000003005C43 0 [Nck:
00000000538D 000003005F8D 0 @xL#v
00000000550B 00000300610B 0 b0v(l
0000000055B4 0000030061B4 0 o{zO&
0000000059D3 0000030065D3 0 XjGT_
0000000059E7 0000030065E7 0 P/: #
000000005D40 000003006940 0 "y]e1
000000005DEA 0000030069EA 0 .,eZob
000000005E78 000003006A78 0 iBQ|}
000000005EE0 000003006AE0 0 ]8E
000000005FD0 000003006BD0 0 WBqlN
000000006113 000003006D13 0 k3J7L
000000006121 000003006D21 0 nLDR?\
00000000619C 000003006D9C 0 dN?*Uz
000000006229 000003006E29 0 p+FQ+@
0000000062AF 000003006EAF 0 f=DGY
0000000062D7 000003006ED7 0 c$Q2\
File pos Mem pos ID Text
======== ======= == ====
000000006344 000003006F44 0 <$VC,
000000006365 000003006F65 0 XwZ%F
0000000063E5 000003006FE5 0 lHA5)E
00000000647B 00000300707B 0 .XvEP
0000000064E0 0000030070E0 0 n$%"5
0000000068EB 0000030074EB 0 5.->=
0000000068FA 0000030074FA 0 '4C"j
000000006950 000003007550 0 3VZG&
000000006A65 000003007665 0 {Zx%+
000000006A9B 00000300769B 0 d?"QD,
000000006AB5 0000030076B5 0 qyJT5+,
000000006C72 000003007872 0 soDcxM>
000000006C8D 00000300788D 0 !;?m|G?
000000006CB5 0000030078B5 0 BQd,|tD
000000006CD0 0000030078D0 0 $&gzNL\
000000006CDE 0000030078DE 0 !Q2d{D
000000006F4A 000003007B4A 0 }S2!@
0000000070C3 000003007CC3 0 Am"[$Z
0000000071CA 000003007DCA 0 nAVF>
00000000720F 000003007E0F 0 urw:H%
000000007221 000003007E21 0 kNqft
000000007344 000003007F44 0 Wy h,
0000000073A2 000003007FA2 0 Vh|e-
0000000075D7 0000030081D7 0 }66#m{
000000007787 000003008387 0 2$Tev
0000000077F0 0000030083F0 0 :GTn8
000000007800 000003008400 0 ukJX"
0000000079D6 0000030085D6 0 tjmF*[K
0000000079F8 0000030085F8 0 y790/
000000007A1A 00000300861A 0 k]rA,
000000007A9C 00000300869C 0 1>Y)\Gvb
000000007B7E 00000300877E 0 !L{fk
000000007C75 000003008875 0 qC_(m
000000007CD6 0000030088D6 0 +52,\
000000007D31 000003008931 0 {k52g
000000007D68 000003008968 0 P2GDlI
000000007D75 000003008975 0 -_Bimx
000000007D82 000003008982 0 rgH=.
000000007D8F 00000300898F 0 xoRA4
000000007D9D 00000300899D 0 wdI>#
000000007DB8 0000030089B8 0 p]N;$
000000007DC5 0000030089C5 0 ziTC.
000000007DE9 0000030089E9 0 0CVi|
000000007DF6 0000030089F6 0 &;Lar
000000007E4C 00000300904C 0 Error
000000007E54 000003009054 0 Runtime error at 00000000
000000007E74 000003009074 0 0123456789ABCDEF
000000007EB0 0000030090B0 0 $1%2&3445566D7E8F9T*U0V#'
000000007ED2 0000030090D2 0 <o:o:_;OPO
000000007EE1 0000030090E1 0 OLONO
000000007EED 0000030090ED 0 O!O%O
000000008020 000003009220 0 <4,$?7/'
000000008066 000003009266 0 !"#$%&'()*+,-./012345678
0000000080B1 0000030092B1 0 (3-!0
0000000080B8 0000030092B8 0 ,1'8"5
0000000084D4 00000300C2D4 0 kernel32.dll
0000000084E4 00000300C2E4 0 DeleteCriticalSection
0000000084FC 00000300C2FC 0 LeaveCriticalSection
000000008514 00000300C314 0 EnterCriticalSection
00000000852C 00000300C32C 0 InitializeCriticalSection
File pos Mem pos ID Text
======== ======= == ====
000000008548 00000300C348 0 VirtualFree
000000008556 00000300C356 0 VirtualAlloc
000000008566 00000300C366 0 LocalFree
000000008572 00000300C372 0 LocalAlloc
000000008580 00000300C380 0 GetVersion
00000000858E 00000300C38E 0 GetCurrentThreadId
0000000085A4 00000300C3A4 0 GetThreadLocale
0000000085B6 00000300C3B6 0 GetStartupInfoA
0000000085C8 00000300C3C8 0 GetLocaleInfoA
0000000085DA 00000300C3DA 0 GetCommandLineA
0000000085EC 00000300C3EC 0 FreeLibrary
0000000085FA 00000300C3FA 0 ExitProcess
000000008608 00000300C408 0 WriteFile
000000008614 00000300C414 0 UnhandledExceptionFilter
000000008630 00000300C430 0 RtlUnwind
00000000863C 00000300C43C 0 RaiseException
00000000864E 00000300C44E 0 GetStdHandle
00000000865C 00000300C45C 0 user32.dll
00000000866A 00000300C46A 0 GetKeyboardType
00000000867C 00000300C47C 0 MessageBoxA
000000008688 00000300C488 0 advapi32.dll
000000008698 00000300C498 0 RegQueryValueExA
0000000086AC 00000300C4AC 0 RegOpenKeyExA
0000000086BC 00000300C4BC 0 RegCloseKey
0000000086C8 00000300C4C8 0 kernel32.dll
0000000086D8 00000300C4D8 0 TlsSetValue
0000000086E6 00000300C4E6 0 TlsGetValue
0000000086F4 00000300C4F4 0 TlsFree
0000000086FE 00000300C4FE 0 TlsAlloc
00000000870A 00000300C50A 0 LocalFree
000000008716 00000300C516 0 LocalAlloc
000000008722 00000300C522 0 advapi32.dll
000000008732 00000300C532 0 OpenProcessToken
000000008746 00000300C546 0 LookupPrivilegeValueA
00000000875E 00000300C55E 0 InitiateSystemShutdownA
000000008778 00000300C578 0 AdjustTokenPrivileges
00000000878E 00000300C58E 0 kernel32.dll
00000000879E 00000300C59E 0 lstrlenA
0000000087AA 00000300C5AA 0 lstrcpyA
0000000087B6 00000300C5B6 0 lstrcmpiW
0000000087C2 00000300C5C2 0 lstrcmpiA
0000000087CE 00000300C5CE 0 lstrcmpA
0000000087DA 00000300C5DA 0 lstrcatA
0000000087E6 00000300C5E6 0 WriteProcessMemory
0000000087FC 00000300C5FC 0 WriteFile
000000008808 00000300C608 0 WaitForSingleObject
00000000881E 00000300C61E 0 VirtualProtect
000000008830 00000300C630 0 VirtualFreeEx
000000008840 00000300C640 0 VirtualAllocEx
000000008852 00000300C652 0 Sleep
00000000885A 00000300C65A 0 SetFileTime
000000008868 00000300C668 0 SetFilePointer
00000000887A 00000300C67A 0 ReadFile
000000008886 00000300C686 0 PulseEvent
000000008894 00000300C694 0 OpenProcess
0000000088A2 00000300C6A2 0 MultiByteToWideChar
0000000088B8 00000300C6B8 0 LocalFree
0000000088C4 00000300C6C4 0 LocalAlloc
0000000088D2 00000300C6D2 0 LoadLibraryA
0000000088E2 00000300C6E2 0 GetWindowsDirectoryA
File pos Mem pos ID Text
======== ======= == ====
0000000088FA 00000300C6FA 0 GetVolumeInformationA
000000008912 00000300C712 0 GetSystemTimeAsFileTime
00000000892C 00000300C72C 0 GetProcAddress
00000000893E 00000300C73E 0 GetModuleHandleA
000000008952 00000300C752 0 GetModuleFileNameA
000000008968 00000300C768 0 GetLastError
000000008978 00000300C778 0 GetFileSize
000000008986 00000300C786 0 GetExitCodeThread
00000000899A 00000300C79A 0 GetCurrentProcess
0000000089AE 00000300C7AE 0 FormatMessageA
0000000089C0 00000300C7C0 0 FileTimeToLocalFileTime
0000000089DA 00000300C7DA 0 ExitProcess
0000000089E8 00000300C7E8 0 DeleteFileA
0000000089F6 00000300C7F6 0 CreateThread
000000008A06 00000300C806 0 CreateRemoteThread
000000008A1C 00000300C81C 0 CreateFileA
000000008A2A 00000300C82A 0 CreateEventA
000000008A3A 00000300C83A 0 CloseHandle
000000008A46 00000300C846 0 gdi32.dll
000000008A52 00000300C852 0 SelectObject
000000008A62 00000300C862 0 Rectangle
000000008A6E 00000300C86E 0 GetTextMetricsA
000000008A80 00000300C880 0 GetDeviceCaps
000000008A90 00000300C890 0 DeleteObject
000000008AA0 00000300C8A0 0 DeleteDC
000000008AAC 00000300C8AC 0 CreateSolidBrush
000000008AC0 00000300C8C0 0 CreateDCA
000000008ACA 00000300C8CA 0 user32.dll
000000008AD8 00000300C8D8 0 CreateWindowExA
000000008AEA 00000300C8EA 0 UnregisterClassA
000000008AFE 00000300C8FE 0 TranslateMessage
000000008B12 00000300C912 0 SetTimer
000000008B1E 00000300C91E 0 SetFocus
000000008B2A 00000300C92A 0 SendMessageA
000000008B3A 00000300C93A 0 RegisterClassA
000000008B4C 00000300C94C 0 PostMessageA
000000008B5C 00000300C95C 0 PeekMessageA
000000008B6C 00000300C96C 0 LoadIconA
000000008B78 00000300C978 0 LoadCursorA
000000008B86 00000300C986 0 InvalidateRect
000000008B98 00000300C998 0 GetWindowTextA
000000008BAA 00000300C9AA 0 GetWindowDC
000000008BB8 00000300C9B8 0 GetMessageA
000000008BC6 00000300C9C6 0 GetDesktopWindow
000000008BDA 00000300C9DA 0 GetClientRect
000000008BEA 00000300C9EA 0 DrawTextA
000000008BF6 00000300C9F6 0 DispatchMessageA
000000008C0A 00000300CA0A 0 DestroyWindow
000000008C1A 00000300CA1A 0 DefWindowProcA
000000008C2A 00000300CA2A 0 kernel32.dll
000000008C3A 00000300CA3A 0 VirtualProtect
000000008C4A 00000300CA4A 0 user32.dll
000000008C58 00000300CA58 0 wsprintfA
000000008C62 00000300CA62 0 PSAPI.DLL
000000008C6E 00000300CA6E 0 GetModuleBaseNameA
000000008C84 00000300CA84 0 EnumProcesses
000000008E0F 00000300D00F 0 0"0*020:0B0J0R0Z0b0j0r0z0
000000008E55 00000300D055 0 5)5D5
000000008E5B 00000300D05B 0 5&7b7
000000008E7D 00000300D07D 0 8$868B8Q8]8e8p8v8
File pos Mem pos ID Text
======== ======= == ====
000000008EA9 00000300D0A9 0 9*9K9c9
000000008EB9 00000300D0B9 0 9G:g:
000000008ECB 00000300D0CB 0 < <+<4<;<J<Q<s<
000000008EDD 00000300D0DD 0 <Y=w=|=
000000008EED 00000300D0ED 0 >R>[>q>
000000008EFD 00000300D0FD 0 ?"?L?U?e?m?s?|?
000000008F29 00000300D129 0 000<0D0[0j0z0
000000008F47 00000300D147 0 1n1t1|1
000000008F59 00000300D159 0 2e2l2|2
000000008F7D 00000300D17D 0 4?4_4z4
000000008F89 00000300D189 0 4.565
000000008F95 00000300D195 0 7'7E7[7r7
000000008FA9 00000300D1A9 0 8 8.8b8~8
000000008FBD 00000300D1BD 0 9!9S9\9
000000008FCB 00000300D1CB 0 :/:w;
000000008FDB 00000300D1DB 0 <'<S<h<
000000008FE9 00000300D1E9 0 = =&=,=2=7===F=V=[=
000000008FFD 00000300D1FD 0 =e=j=x=
000000009013 00000300D213 0 >4>>>c>m>w>
00000000906F 00000300D26F 0 3"3&3,30363=3A3[3d3m3y3
00000000909B 00000300D29B 0 424\4w4
0000000090B5 00000300D2B5 0 5!5-5;5E5c5h5{5
0000000090E1 00000300D2E1 0 6&6.666>6F6N6V6
0000000090F1 00000300D2F1 0 6f6n6v6~6
000000009121 00000300D321 0 7&7.767>7F7N7V7
000000009131 00000300D331 0 7f7n7v7~7
000000009161 00000300D361 0 8&8>8
00000000916B 00000300D36B 0 9&9.969D9P9Y9a9u9{9
000000009195 00000300D395 0 :%:,:7:>:I:U:c:j:w:
0000000091E3 00000300D3E3 0 <'<,<1<<<A<F<Q<V<[<f<k<p<{<
000000009238 00000300D438 0 y0_1g1
000000009243 00000300D443 0 2V2g2l2
00000000924B 00000300D44B 0 2;3H3X3
00000000925B 00000300D45B 0 6,7C7
00000000927D 00000300D47D 0 ;d<u=
000000009285 00000300D485 0 >t>x?
000000009299 00000300D499 0 091E1|1
0000000092A9 00000300D4A9 0 1K2W2~2
0000000092B1 00000300D4B1 0 2_3p3
0000000092BF 00000300D4BF 0 3<4a4m4
0000000092C7 00000300D4C7 0 4G5N:
0000000092DD 00000300D4DD 0 :(:3:<:B:T:
0000000092F5 00000300D4F5 0 <n<t<}<
00000000930B 00000300D50B 0 =.>4>O>h>u>
000000009325 00000300D525 0 ?(?<?O?
00000000933F 00000300D53F 0 1f1p1z1
00000000935D 00000300D55D 0 1<3A3
000000009375 00000300D575 0 7,7@7T7h7|7
00000000938B 00000300D58B 0 798>8D8>9p9|9
0000000093A3 00000300D5A3 0 :C:S:W:
0000000093BD 00000300D5BD 0 :G;\;q;|;
0000000093DF 00000300D5DF 0 =!=-=2=7=\=
0000000093F3 00000300D5F3 0 ='>/>:>P>U>d>j>w>
000000009411 00000300D611 0 ?#?B?O?_?g?r?
00000000943D 00000300D63D 0 070?0J0
000000009445 00000300D645 0 0c0n0{0
000000009471 00000300D671 0 1%1*1/141>1C1H1M1
000000009493 00000300D693 0 4,444L4[4e4n4y4
0000000094C7 00000300D6C7 0 6 6+6
0000000094D9 00000300D6D9 0 7 7&7,72787C7
File pos Mem pos ID Text
======== ======= == ====
0000000094FF 00000300D6FF 0 8&81868;8F8T8a8k8z8
000000009539 00000300D739 0 9#9)9/9
000000009548 00000300D748 0 $0(0,0
0000000097CA 00000300E1CA 0 33331
0000000097E9 00000300E1E9 0 33333
00000000980A 00000300E20A 0 33331
00000000982F 00000300E22F 0 Gggfv@
00000000983F 00000300E23F 0 &vvggd
00000000984F 00000300E24F 0 wwgbvt
00000000985D 00000300E25D 0 1wwwr"gf@
00000000986D 00000300E26D 0 1wwwr"vv@
00000000987F 00000300E27F 0 wr""gf@
00000000988F 00000300E28F 0 wr""&f@
00000000989F 00000300E29F 0 ww"w""@
0000000098B0 00000300E2B0 0 wr'""@
0000000098CE 00000300E2CE 0 1rwr"
000000009949 00000300E349 0 3333;
000000009959 00000300E359 0 33333
000000009A55 00000300E455 0 Pwinstr
000000009A5E 00000300E45E 0 UTypes
000000009A67 00000300E467 0 System
000000009A70 00000300E470 0 SysInit
000000009A79 00000300E479 0 KWindows
000000009C00 000003009C00 0 x/swing/text/html/HTMLDocument;
000000009C21 000003009C21 0 @(Ljavax/swing/JEditorPane;)Ljavax/swing/text/html/HTMLEditorKit;
000000009C64 000003009C64 0 a(Ljavax/swing/text/html/HTMLDocument;ILjavax/swing/text/html/HTML$Tag;)Ljavax/swing/text/Element;
000000009F3D 000003009F3D 0 javax/swing/text/html/HTMLEditorKit$InsertHTMLTextAction.class
000000009F8B 000003009F8B 0 <init>
000000009F9B 000003009F9B 0 HTMLTextAction
000000009FAC 000003009FAC 0 InnerClasses
000000009FBB 000003009FBB 0 InsertHTMLTextAction
000000009FD2 000003009FD2 0 Unable to insert:
000000009FE7 000003009FE7 0 actionPerformed
000000009FF9 000003009FF9 0 addTag
00000000A000 00000300A000 0 2012/10/26 16:51:44.343 >CLoger() Debug mode: [0]
00000000A034 00000300A034 0 2012/10/26 16:51:44.343 CCommunicator started. Current version: [3.3.0.2/20100901]
00000000A089 00000300A089 0 2012/10/26 16:51:44.453 <------------ COMUNICATION -------------------->
00000000A0D3 00000300A0D3 0 2012/10/26 16:51:44.453 1. IP: [10.20.136.167]
00000000A104 00000300A104 0 2012/10/26 16:51:44.453 2. PORT: [20100]
00000000A12F 00000300A12F 0 2012/10/26 16:51:44.453 3. KeepAliveTime: [10000]
00000000A163 00000300A163 0 2012/10/26 16:51:44.453 4. KeepAliveInterval: [1000]
00000000A19A 00000300A19A 0 2012/10/26 16:51:44.453 <---------------------------------------------->
00000000A1E4 00000300A1E4 0 2012/10/26 16:51:46.390 Trying to connect: [10.20.136.167]-[20100]-[A0308927]
00000000A234 00000300A234 0 2012/10/26 16:51:47.015 Need send header: [A0308927]
00000000A26B 00000300A26B 0 2012/10/26 16:51:48.015 >OnConect() Set Agent status - CONNECTED
00000000A2AD 00000300A2AD 0 2012/10/26 16:51:48.015 >IsNeedSendULOG() Read update status....
00000000A2EF 00000300A2EF 0 2012/10/26 16:51:48.015 Connected!!
00000000A314 00000300A314 0 2012/10/26 16:59:28.640 WARNING: Error disconnect. Status: [2]
00000000A355 00000300A355 0 2012/10/26 16:59:29.640 Error... disconnected!
00000000A385 00000300A385 0 2012/10/26 16:59:29.640 We are disconnected!
00000000A3B3 00000300A3B3 0 2012/10/26 16:59:29.656 Trying to connect: [10.20.136.167]-[20100]-[A0308927]
00000000A403 00000300A403 0 2012/10/26 16:59:30.546 Need send header: [A0308927]
00000000A43A 00000300A43A 0 2012/10/26 16:59:31.546 >OnConect() Set Agent status - CONNECTED
00000000A47C 00000300A47C 0 2012/10/26 16:59:31.546 >IsNeedSendULOG() Read update status....
00000000A4BE 00000300A4BE 0 2012/10/26 16:59:31.546 Connected!!
00000000A4E3 00000300A4E3 0 2012/10/26 17:07:35.578 >CLoger() Debug mode: [0]
00000000A517 00000300A517 0 2012/10/26 17:07:35.578 CCommunicator started. Current version: [3.3.0.2/20100901]
00000000A56C 00000300A56C 0 2012/10/26 17:07:35.578 <------------ COMUNICATION -------------------->
00000000A5B6 00000300A5B6 0 2012/10/26 17:07:35.578 1. IP: [10.20.136.167]
00000000A5E7 00000300A5E7 0 2012/10/26 17:07:35.578 2. PORT: [20100]
File pos Mem pos ID Text
======== ======= == ====
00000000A612 00000300A612 0 2012/10/26 17:07:35.578 3. KeepAliveTime: [10000]
00000000A646 00000300A646 0 2012/10/26 17:07:35.578 4. KeepAliveInterval: [1000]
00000000A67D 00000300A67D 0 2012/10/26 17:07:35.578 <---------------------------------------------->
00000000A6C7 00000300A6C7 0 2012/10/26 17:07:36.734 Trying to connect: [10.20.136.167]-[20100]-[A0308927]
00000000A717 00000300A717 0 2012/10/26 17:07:37.250 Need send header: [A0308927]
00000000A74E 00000300A74E 0 2012/10/26 17:07:38.250 >OnConect() Set Agent status - CONNECTED
00000000A790 00000300A790 0 2012/10/26 17:07:38.250 >IsNeedSendULOG() Read update status....
00000000A7D2 00000300A7D2 0 2012/10/26 17:07:38.250 Connected!!
00000000A7F7 00000300A7F7 0 2012/11/08 10:17:06.968 >CLoger() Debug mode: [0]
00000000A82B 00000300A82B 0 2012/11/08 10:17:06.968 CCommunicator started. Current version: [3.3.0.2/20100901]
00000000A880 00000300A880 0 2012/11/08 10:17:06.968 <------------ COMUNICATION -------------------->
00000000A8CA 00000300A8CA 0 2012/11/08 10:17:06.968 1. IP: [10.20.136.167]
00000000A8FB 00000300A8FB 0 2012/11/08 10:17:06.968 2. PORT: [20100]
00000000A926 00000300A926 0 2012/11/08 10:17:06.968 3. KeepAliveTime: [10000]
00000000A95A 00000300A95A 0 2012/11/08 10:17:06.968 4. KeepAliveInterval: [1000]
00000000A991 00000300A991 0 2012/11/08 10:17:06.968 <---------------------------------------------->
00000000A9DB 00000300A9DB 0 2012/11/08 10:17:07.125 Trying to connect: [10.20.136.167]-[20100]-[A0308973]
00000000AA2B 00000300AA2B 0 2012/11/08 10:17:12.203 Can not connect! Trying again...
00000000AA65 00000300AA65 0 2012/11/08 10:31:07.937 >CLoger() Debug mode: [0]
00000000AA99 00000300AA99 0 2012/11/08 10:31:07.937 CCommunicator started. Current version: [3.3.0.2/20100901]
00000000AAEE 00000300AAEE 0 2012/11/08 10:31:07.937 <------------ COMUNICATION -------------------->
00000000AB38 00000300AB38 0 2012/11/08 10:31:07.937 1. IP: [10.20.136.167]
00000000AB69 00000300AB69 0 2012/11/08 10:31:07.937 2. PORT: [20100]
00000000AB94 00000300AB94 0 2012/11/08 10:31:07.937 3. KeepAliveTime: [10000]
00000000ABC8 00000300ABC8 0 2012/11/08 10:31:07.937 4. KeepAliveInterval: [1000]
00000000ABFF 00000300ABFF 0 2012/11/08 10:31:07.937 <---------------------------------------------->
00000000AC49 00000300AC49 0 2012/11/08 10:31:08.781 Trying to connect: [10.20.136.167]-[20100]-[A0308973]
00000000AC99 00000300AC99 0 2012/11/08 10:31:13.875 Can not connect! Trying again...
00000000ACD3 00000300ACD3 0 2012/11/08 10:36:05.750 Need send header: [A0308973]
00000000AD0A 00000300AD0A 0 2012/11/08 10:36:06.750 >OnConect() Set Agent status - CONNECTED
00000000AD4C 00000300AD4C 0 2012/11/08 10:36:06.750 >IsNeedSendULOG() Read update status....
00000000AD8E 00000300AD8E 0 2012/11/08 10:36:06.750 Connected!!
00000000ADB3 00000300ADB3 0 2012/11/08 11:14:55.796 >CLoger() Debug mode: [0]
00000000ADE7 00000300ADE7 0 2012/11/08 11:14:55.812 CCommunicator started. Current version: [3.3.0.2/20100901]
00000000AE3C 00000300AE3C 0 2012/11/08 11:14:55.812 <------------ COMUNICATION -------------------->
00000000AE86 00000300AE86 0 2012/11/08 11:14:55.812 1. IP: [10.20.136.167]
00000000AEB7 00000300AEB7 0 2012/11/08 11:14:55.812 2. PORT: [20100]
00000000AEE2 00000300AEE2 0 2012/11/08 11:14:55.812 3. KeepAliveTime: [10000]
00000000AF16 00000300AF16 0 2012/11/08 11:14:55.812 4. KeepAliveInterval: [1000]
00000000AF4D 00000300AF4D 0 2012/11/08 11:14:55.812 <---------------------------------------------->
00000000AF97 00000300AF97 0 2012/11/08 11:14:55.859 Trying to connect: [10.20.136.167]-[20100]-[A0308973]
00000000AFE7 00000300AFE7 0 2012/11/08 11:14:55.890 Need send header: [A0308973]
00000000B01E 00000300B01E 0 2012/11/08 11:14:56.890 >OnConect() Set Agent status - CONNECTED
00000000B060 00000300B060 0 2012/11/08 11:14:56.890 >IsNeedSendULOG() Read update status....
00000000B0A2 00000300B0A2 0 2012/11/08 11:14:56.890 Connected!!
00000000B0C7 00000300B0C7 0 2012/11/08 11:20:33.937 >CLoger() Debug mode: [0]
00000000B0FB 00000300B0FB 0 2012/11/08 11:20:34.000 CCommunicator started. Current version: [3.3.0.2/20100901]
00000000B150 00000300B150 0 2012/11/08 11:20:34.000 <------------ COMUNICATION -------------------->
00000000B19A 00000300B19A 0 2012/11/08 11:20:34.000 1. IP: [10.20.136.167]
00000000B1CB 00000300B1CB 0 2012/11/08 11:20:34.000 2. PORT: [20100]
00000000B1F6 00000300B1F6 0 2012/11/08 11:20:34.000 3. KeepAliveTime: [10000]
00000000B22A 00000300B22A 0 2012/11/08 11:20:34.000 4. KeepAliveInterval: [1000]
00000000B261 00000300B261 0 2012/11/08 11:20:34.000 <---------------------------------------------->
00000000B2AB 00000300B2AB 0 2012/11/08 11:20:34.046 Trying to connect: [10.20.136.167]-[20100]-[A0308973]
00000000B2FB 00000300B2FB 0 2012/11/08 11:20:34.062 Need send header: [A0308973]
00000000B332 00000300B332 0 2012/11/08 11:20:35.062 >OnConect() Set Agent status - CONNECTED
00000000B374 00000300B374 0 2012/11/08 11:20:35.062 >IsNeedSendULOG() Read update status....
00000000B3B6 00000300B3B6 0 2012/11/08 11:20:35.062 Connected!!
00000000B3DB 00000300B3DB 0 2012/11/08 11:46:54.703 >CLoger() Debug mode: [0]
00000000B40F 00000300B40F 0 2012/11/08 11:46:54.703 CCommunicator started. Current version: [3.3.0.2/20100901]
File pos Mem pos ID Text
======== ======= == ====
00000000B464 00000300B464 0 2012/11/08 11:46:54.703 <------------ COMUNICATION -------------------->
00000000B4AE 00000300B4AE 0 2012/11/08 11:46:54.703 1. IP: [10.20.136.167]
00000000B4DF 00000300B4DF 0 2012/11/08 11:46:54.703 2. PORT: [20100]
00000000B50A 00000300B50A 0 2012/11/08 11:46:54.703 3. KeepAliveTime: [10000]
00000000B53E 00000300B53E 0 2012/11/08 11:46:54.703 4. KeepAliveInterval: [1000]
00000000B575 00000300B575 0 2012/11/08 11:46:54.703 <---------------------------------------------->
00000000B5BF 00000300B5BF 0 2012/11/08 11:46:55.187 Trying to connect: [10.20.136.167]-[20100]-[A0308973]
00000000B60F 00000300B60F 0 2012/11/08 11:46:55.218 Need send header: [A0308973]
00000000B646 00000300B646 0 2012/11/08 11:46:56.218 >OnConect() Set Agent status - CONNECTED
00000000B688 00000300B688 0 2012/11/08 11:46:56.218 >IsNeedSendULOG() Read update status....
00000000B6CA 00000300B6CA 0 2012/11/08 11:46:56.218 Connected!!
00000000B6EF 00000300B6EF 0 2012/11/08 11:53:06.968 >CLoger() Debug mode: [0]
00000000B723 00000300B723 0 2012/11/08 11:53:06.984 CCommunicator started. Current version: [3.3.0.2/20100901]
00000000B778 00000300B778 0 2012/11/08 11:53:06.984 <------------ COMUNICATION -------------------->
00000000B7C2 00000300B7C2 0 2012/11/08 11:53:06.984 1. IP: [10.20.136.167]
00000000B7F3 00000300B7F3 0 2012/11/08 11:53:06.984 2. PORT: [20100]
00000000B81E 00000300B81E 0 2012/11/08 11:53:06.984 3. KeepAliveTime: [10000]
00000000B852 00000300B852 0 2012/11/08 11:53:06.984 4. KeepAliveInterval: [1000]
00000000B889 00000300B889 0 2012/11/08 11:53:06.984 <---------------------------------------------->
00000000B8D3 00000300B8D3 0 2012/11/08 11:53:07.546 Trying to connect: [10.20.136.167]-[20100]-[A0308973]
00000000B923 00000300B923 0 2012/11/08 11:53:07.562 Need send header: [A0308973]
00000000B95A 00000300B95A 0 2012/11/08 11:53:08.562 >OnConect() Set Agent status - CONNECTED
00000000B99C 00000300B99C 0 2012/11/08 11:53:08.562 >IsNeedSendULOG() Read update status....
00000000B9DE 00000300B9DE 0 2012/11/08 11:53:08.562 Connected!!
00000000BA03 00000300BA03 0 2012/11/08 12:09:30.062 >CLoger() Debug mode: [0]
00000000BA37 00000300BA37 0 2012/11/08 12:09:30.109 CCommunicator started. Current version: [3.3.0.2/20100901]
00000000BA8C 00000300BA8C 0 2012/11/08 12:09:30.109 <------------ COMUNICATION -------------------->
00000000BAD6 00000300BAD6 0 2012/11/08 12:09:30.109 1. IP: [10.20.136.167]
00000000BB07 00000300BB07 0 2012/11/08 12:09:30.109 2. PORT: [20100]
00000000BB32 00000300BB32 0 2012/11/08 12:09:30.109 3. KeepAliveTime: [10000]
00000000BB66 00000300BB66 0 2012/11/08 12:09:30.109 4. KeepAliveInterval: [1000]
00000000BB9D 00000300BB9D 0 2012/11/08 12:09:30.109 <---------------------------------------------->
00000000BBE7 00000300BBE7 0 2012/11/08 12:09:30.265 Trying to connect: [10.20.136.167]-[20100]-[A0308973]
00000000BC37 00000300BC37 0 2012/11/08 12:09:30.281 Need send header: [A0308973]
00000000BC6E 00000300BC6E 0 2012/11/08 12:09:31.281 >OnConect() Set Agent status - CONNECTED
00000000BCB0 00000300BCB0 0 2012/11/08 12:09:31.281 >IsNeedSendULOG() Read update status....
00000000BCF2 00000300BCF2 0 2012/11/08 12:09:31.281 Connected!!
00000000BD17 00000300BD17 0 2013/04/16 13:14:16.062 >CLoger() Debug mode: [0]
00000000BD4B 00000300BD4B 0 2013/04/16 13:14:16.062 CCommunicator started. Current version: [3.3.0.2/20100901]
00000000BDA0 00000300BDA0 0 2013/04/16 13:14:16.062 <------------ COMUNICATION -------------------->
00000000BDEA 00000300BDEA 0 2013/04/16 13:14:16.062 1. IP: [10.20.136.167]
00000000BE1B 00000300BE1B 0 2013/04/16 13:14:16.062 2. PORT: [20100]
00000000BE46 00000300BE46 0 2013/04/16 13:14:16.062 3. KeepAliveTime: [10000]
00000000BE7A 00000300BE7A 0 2013/04/16 13:14:16.062 4. KeepAliveInterval: [1000]
00000000BEB1 00000300BEB1 0 2013/04/16 13:14:16.062 <---------------------------------------------->
00000000BEFB 00000300BEFB 0 2013/04/16 13:14:16.109 Trying to connect: [10.20.136.167]-[20100]-[A0308973]
00000000BF4B 00000300BF4B 0 2013/04/16 13:14:42.125 Can not connect! Trying again...
00000000BF85 00000300BF85 0 2013/04/16 13:18:29.031 >CLoger() Debug mode: [0]
00000000BFB9 00000300BFB9 0 2013/04/16 13:18:29.031 CCommunicator started. Current version: [3.3.0.MZ
00000000C04D 00000300C04D 0 !This program cannot be run in DOS mode.
00000000C0A8 00000300C0A8 0 Richh
00000000C1B0 00000300C1B0 0 .text
00000000C1D8 00000300C1D8 0 .rdata
00000000C1FF 00000300C1FF 0 @.data
00000000C228 00000300C228 0 .rsrc
00000000C451 00000300C451 0 u'h0p@
00000000C45D 00000300C45D 0 j[hLp@
00000000CAC0 00000300CAC0 0 QSUVW
00000000CF2A 00000300CF2A 0 8"uV@
00000000D359 00000300D359 0 WSUVj
File pos Mem pos ID Text
======== ======= == ====
00000000D413 00000300D413 0 SUVWj
00000000D942 00000300D942 0 HSUVWh
00000000D9B0 00000300D9B0 0 f9|$F
00000000DBC4 00000300DBC4 0 tBjtj
00000000DC45 00000300DC45 0 @P(q@
00000000DC7A 00000300DC7A 0 uRjtj
00000000DD65 00000300DD65 0 FP=(q@
00000000DE33 00000300DE33 0 SVWUj
00000000DE9C 00000300DE9C 0 t.;t$$t(
00000000DF20 00000300DF20 0 VC20XC00U
00000000E04F 00000300E04F 0 SUVW3
00000000E05C 00000300E05C 0 E=xs@
00000000E103 00000300E103 0 ;h8d@
00000000E232 00000300E232 0 A=xs@
00000000E695 00000300E695 0 QVWRP
00000000E6FD 00000300E6FD 0 WUVQh
00000000E752 00000300E752 0 |$$UWQ
00000000E784 00000300E784 0 D$(RP
00000000E7B7 00000300E7B7 0 L$ PPVQj
00000000E7D5 00000300E7D5 0 D$$RVPj
00000000E8E5 00000300E8E5 0 QVWRP
00000000E925 00000300E925 0 VBWRU
00000000E956 00000300E956 0 WSVQj
00000000E9A9 00000300E9A9 0 D$(PWSUQ
00000000E9F4 00000300E9F4 0 VPWSUQ
00000000EA3C 00000300EA3C 0 D$8QVRh
00000000EB50 00000300EB50 0 T$(SSSSWQh
00000000EB98 00000300EB98 0 VUWPh
00000000EC00 00000300EC00 0 T$$WSR
00000000EC9D 00000300EC9D 0 L$ RQP
00000000ECDB 00000300ECDB 0 U@RPS
00000000ED01 00000300ED01 0 VWUQj
00000000ED13 00000300ED13 0 T$$RP
00000000ED19 00000300ED19 0 D$ WP
000000009740 00000300E140 0 MAINICON(
000000000050 000003000050 0 This program must be run under Win32
000000000270 000003000270 0 .idata
000000000298 000003000298 0 .reloc
0000000002BF 0000030002BF 0 P.rsrc
00000000054B 00000300114B 0 'R/<s
0000000006DA 0000030012DA 0 |w;N=
000000000748 000003001348 0 WAYiv
0000000007B1 0000030013B1 0 V o/O
0000000007BD 0000030013BD 0 SW=2/F
0000000007D4 0000030013D4 0 z-{:Z
000000000879 000003001479 0 %nof
0000000008B0 0000030014B0 0 t0A]o
000000000936 000003001536 0 0E ykDe?0V@
0000000009D2 0000030015D2 0 B.(~
000000000A4E 00000300164E 0 E yl_
000000000AA1 0000030016A1 0 @R/OQ(
000000000AAA 0000030016AA 0 Zk Sm
000000000B42 000003001742 0 X|hEB
000000000B56 000003001756 0 {q6#4-z
000000000BA3 0000030017A3 0 BS>J3
000000000C26 000003001826 0 yoz(L&10
000000000CA0 0000030018A0 0 I!HZ<
000000000D4D 00000300194D 0 xhmb,
000000000FE6 000003001BE6 0 +*TA
0000000013B4 000003001FB4 0 t {e&
File pos Mem pos ID Text
======== ======= == ====
000000001619 000003002219 0 M@x}a
0000000016E5 0000030022E5 0 :aTR4
00000000175E 00000300235E 0 zJC5&
0000000018AB 0000030024AB 0 O\arm
000000001900 000003002500 0 :#xG2
00000000194C 00000300254C 0 cY(F$W
000000001BFA 0000030027FA 0 &Wt/R
000000001C80 000003002880 0 Aw>CWx
000000001D65 000003002965 0 7d]xn\
000000001DF8 0000030029F8 0 b wX)4
000000001E06 000003002A06 0 hYlS#
000000001E20 000003002A20 0 8tf[L
000000001F0C 000003002B0C 0 6|5f5G/
00000000209B 000003002C9B 0 pP"+<
0000000020AD 000003002CAD 0 A5~T@
0000000021A4 000003002DA4 0 0b.DG
0000000021E8 000003002DE8 0 sfU!Xm
0000000022AE 000003002EAE 0 Wedrh
0000000022FF 000003002EFF 0 0%Cxp
00000000244B 00000300304B 0 :-&da
0000000024E2 0000030030E2 0 ,U6#PE:x-
000000002636 000003003236 0 qmXw
00000000266B 00000300326B 0 WD[HO
000000002687 000003003287 0 wDQV(dg
0000000026FB 0000030032FB 0 87KBd
0000000027BC 0000030033BC 0 _B-3Q
000000002828 000003003428 0 [N 7}
00000000292C 00000300352C 0 / +Nb
00000000296C 00000300356C 0 8v t[r
000000002C2A 00000300382A 0 ]{>y8
000000002C52 000003003852 0 3#]cp
000000002D0C 00000300390C 0 =]Mx*
000000002D7F 00000300397F 0 9nL]"5Fu
000000002E20 000003003A20 0 zZKv=
000000002E79 000003003A79 0 (8~a<OZ
000000002E94 000003003A94 0 kK@l&
000000002FC7 000003003BC7 0 KqfLb&
000000003102 000003003D02 0 K 'vj[
00000000311C 000003003D1C 0 6&D*o
00000000317B 000003003D7B 0 QeHkT
0000000031A2 000003003DA2 0 4"4@Sd
0000000031BC 000003003DBC 0 c~MXtqr
00000000322A 000003003E2A 0 "i_kV
00000000337F 000003003F7F 0 xl92:W
0000000033DE 000003003FDE 0 wuL9yd&
000000003772 000003004372 0 UH>FLpB
00000000378E 00000300438E 0 K~T@~~
00000000379E 00000300439E 0 < sY-
0000000037FB 0000030043FB 0 ji:Y&C
000000003822 000003004422 0 q#D K(
000000003851 000003004451 0 ~*Xhq
0000000038B7 0000030044B7 0 {R&5+,x
000000003913 000003004513 0 y~S@5@
000000003ACB 0000030046CB 0 YT}n[
000000003B1B 00000300471B 0 r6+XM7
000000003C06 000003004806 0 EWzof
000000003C6B 00000300486B 0 6uSD?
000000003C79 000003004879 0 ixN&$
000000003DBC 0000030049BC 0 ;oC]$q
000000003DCA 0000030049CA 0 oT#&5w
File pos Mem pos ID Text
======== ======= == ====
000000003DD7 0000030049D7 0 lx[(=
000000003DF2 0000030049F2 0 'DLh]_
000000003E14 000003004A14 0 9-}}lXK
000000003E57 000003004A57 0 )6ujVKW
000000003EB3 000003004AB3 0 q+RY1
000000003EC3 000003004AC3 0 -:k&jO[
000000003F1B 000003004B1B 0 EB_,9Ch
000000003F59 000003004B59 0 D02Bk
000000004030 000003004C30 0 ./rTa
00000000419B 000003004D9B 0 iv+\
000000004275 000003004E75 0 )uC;T
00000000430F 000003004F0F 0 la{*.
0000000044C4 0000030050C4 0 S Qc%
0000000046AA 0000030052AA 0 :}GkH
0000000046FA 0000030052FA 0 &$\Gc
000000004701 000003005301 0 R&4d!
000000004C26 000003005826 0 L#SRU
000000004D01 000003005901 0 2q Anf
000000005043 000003005C43 0 [Nck:
00000000538D 000003005F8D 0 @xL#v
00000000550B 00000300610B 0 b0v(l
0000000055B4 0000030061B4 0 o{zO&
0000000059D3 0000030065D3 0 XjGT_
0000000059E7 0000030065E7 0 P/: #
000000005D40 000003006940 0 "y]e1
000000005DEA 0000030069EA 0 .,eZob
000000005E78 000003006A78 0 iBQ|}
000000005EE0 000003006AE0 0 ]8E
000000005FD0 000003006BD0 0 WBqlN
000000006113 000003006D13 0 k3J7L
000000006121 000003006D21 0 nLDR?\
00000000619C 000003006D9C 0 dN?*Uz
000000006229 000003006E29 0 p+FQ+@
0000000062AF 000003006EAF 0 f=DGY
0000000062D7 000003006ED7 0 c$Q2\
000000006344 000003006F44 0 <$VC,
000000006365 000003006F65 0 XwZ%F
0000000063E5 000003006FE5 0 lHA5)E
00000000647B 00000300707B 0 .XvEP
0000000064E0 0000030070E0 0 n$%"5
0000000068EB 0000030074EB 0 5.->=
0000000068FA 0000030074FA 0 '4C"j
000000006950 000003007550 0 3VZG&
000000006A65 000003007665 0 {Zx%+
000000006A9B 00000300769B 0 d?"QD,
000000006AB5 0000030076B5 0 qyJT5+,
000000006C72 000003007872 0 soDcxM>
000000006C8D 00000300788D 0 !;?m|G?
000000006CB5 0000030078B5 0 BQd,|tD
000000006CD0 0000030078D0 0 $&gzNL\
000000006CDE 0000030078DE 0 !Q2d{D
000000006F4A 000003007B4A 0 }S2!@
0000000070C3 000003007CC3 0 Am"[$Z
0000000071CA 000003007DCA 0 nAVF>
00000000720F 000003007E0F 0 urw:H%
000000007221 000003007E21 0 kNqft
000000007344 000003007F44 0 Wy h,
0000000073A2 000003007FA2 0 Vh|e-
0000000075D7 0000030081D7 0 }66#m{
000000007787 000003008387 0 2$Tev
File pos Mem pos ID Text
======== ======= == ====
0000000077F0 0000030083F0 0 :GTn8
000000007800 000003008400 0 ukJX"
0000000079D6 0000030085D6 0 tjmF*[K
0000000079F8 0000030085F8 0 y790/
000000007A1A 00000300861A 0 k]rA,
000000007A9C 00000300869C 0 1>Y)\Gvb
000000007B7E 00000300877E 0 !L{fk
000000007C75 000003008875 0 qC_(m
000000007CD6 0000030088D6 0 +52,\
000000007D31 000003008931 0 {k52g
000000007D68 000003008968 0 P2GDlI
000000007D75 000003008975 0 -_Bimx
000000007D82 000003008982 0 rgH=.
000000007D8F 00000300898F 0 xoRA4
000000007D9D 00000300899D 0 wdI>#
000000007DB8 0000030089B8 0 p]N;$
000000007DC5 0000030089C5 0 ziTC.
000000007DE9 0000030089E9 0 0CVi|
000000007DF6 0000030089F6 0 &;Lar
000000007E4C 00000300904C 0 Error
000000007E54 000003009054 0 Runtime error at 00000000
000000007E74 000003009074 0 0123456789ABCDEF
000000007EB0 0000030090B0 0 $1%2&3445566D7E8F9T*U0V#'
000000007ED2 0000030090D2 0 <o:o:_;OPO
000000007EE1 0000030090E1 0 OLONO
000000007EED 0000030090ED 0 O!O%O
000000008020 000003009220 0 <4,$?7/'
000000008066 000003009266 0 !"#$%&'()*+,-./012345678
0000000080B1 0000030092B1 0 (3-!0
0000000080B8 0000030092B8 0 ,1'8"5
0000000084D4 00000300C2D4 0 kernel32.dll
0000000084E4 00000300C2E4 0 DeleteCriticalSection
0000000084FC 00000300C2FC 0 LeaveCriticalSection
000000008514 00000300C314 0 EnterCriticalSection
00000000852C 00000300C32C 0 InitializeCriticalSection
000000008548 00000300C348 0 VirtualFree
000000008556 00000300C356 0 VirtualAlloc
000000008566 00000300C366 0 LocalFree
000000008572 00000300C372 0 LocalAlloc
000000008580 00000300C380 0 GetVersion
00000000858E 00000300C38E 0 GetCurrentThreadId
0000000085A4 00000300C3A4 0 GetThreadLocale
0000000085B6 00000300C3B6 0 GetStartupInfoA
0000000085C8 00000300C3C8 0 GetLocaleInfoA
0000000085DA 00000300C3DA 0 GetCommandLineA
0000000085EC 00000300C3EC 0 FreeLibrary
0000000085FA 00000300C3FA 0 ExitProcess
000000008608 00000300C408 0 WriteFile
000000008614 00000300C414 0 UnhandledExceptionFilter
000000008630 00000300C430 0 RtlUnwind
00000000863C 00000300C43C 0 RaiseException
00000000864E 00000300C44E 0 GetStdHandle
00000000865C 00000300C45C 0 user32.dll
00000000866A 00000300C46A 0 GetKeyboardType
00000000867C 00000300C47C 0 MessageBoxA
000000008688 00000300C488 0 advapi32.dll
000000008698 00000300C498 0 RegQueryValueExA
0000000086AC 00000300C4AC 0 RegOpenKeyExA
0000000086BC 00000300C4BC 0 RegCloseKey
0000000086C8 00000300C4C8 0 kernel32.dll
File pos Mem pos ID Text
======== ======= == ====
0000000086D8 00000300C4D8 0 TlsSetValue
0000000086E6 00000300C4E6 0 TlsGetValue
0000000086F4 00000300C4F4 0 TlsFree
0000000086FE 00000300C4FE 0 TlsAlloc
00000000870A 00000300C50A 0 LocalFree
000000008716 00000300C516 0 LocalAlloc
000000008722 00000300C522 0 advapi32.dll
000000008732 00000300C532 0 OpenProcessToken
000000008746 00000300C546 0 LookupPrivilegeValueA
00000000875E 00000300C55E 0 InitiateSystemShutdownA
000000008778 00000300C578 0 AdjustTokenPrivileges
00000000878E 00000300C58E 0 kernel32.dll
00000000879E 00000300C59E 0 lstrlenA
0000000087AA 00000300C5AA 0 lstrcpyA
0000000087B6 00000300C5B6 0 lstrcmpiW
0000000087C2 00000300C5C2 0 lstrcmpiA
0000000087CE 00000300C5CE 0 lstrcmpA
0000000087DA 00000300C5DA 0 lstrcatA
0000000087E6 00000300C5E6 0 WriteProcessMemory
0000000087FC 00000300C5FC 0 WriteFile
000000008808 00000300C608 0 WaitForSingleObject
00000000881E 00000300C61E 0 VirtualProtect
000000008830 00000300C630 0 VirtualFreeEx
000000008840 00000300C640 0 VirtualAllocEx
000000008852 00000300C652 0 Sleep
00000000885A 00000300C65A 0 SetFileTime
000000008868 00000300C668 0 SetFilePointer
00000000887A 00000300C67A 0 ReadFile
000000008886 00000300C686 0 PulseEvent
000000008894 00000300C694 0 OpenProcess
0000000088A2 00000300C6A2 0 MultiByteToWideChar
0000000088B8 00000300C6B8 0 LocalFree
0000000088C4 00000300C6C4 0 LocalAlloc
0000000088D2 00000300C6D2 0 LoadLibraryA
0000000088E2 00000300C6E2 0 GetWindowsDirectoryA
0000000088FA 00000300C6FA 0 GetVolumeInformationA
000000008912 00000300C712 0 GetSystemTimeAsFileTime
00000000892C 00000300C72C 0 GetProcAddress
00000000893E 00000300C73E 0 GetModuleHandleA
000000008952 00000300C752 0 GetModuleFileNameA
000000008968 00000300C768 0 GetLastError
000000008978 00000300C778 0 GetFileSize
000000008986 00000300C786 0 GetExitCodeThread
00000000899A 00000300C79A 0 GetCurrentProcess
0000000089AE 00000300C7AE 0 FormatMessageA
0000000089C0 00000300C7C0 0 FileTimeToLocalFileTime
0000000089DA 00000300C7DA 0 ExitProcess
0000000089E8 00000300C7E8 0 DeleteFileA
0000000089F6 00000300C7F6 0 CreateThread
000000008A06 00000300C806 0 CreateRemoteThread
000000008A1C 00000300C81C 0 CreateFileA
000000008A2A 00000300C82A 0 CreateEventA
000000008A3A 00000300C83A 0 CloseHandle
000000008A46 00000300C846 0 gdi32.dll
000000008A52 00000300C852 0 SelectObject
000000008A62 00000300C862 0 Rectangle
000000008A6E 00000300C86E 0 GetTextMetricsA
000000008A80 00000300C880 0 GetDeviceCaps
000000008A90 00000300C890 0 DeleteObject
000000008AA0 00000300C8A0 0 DeleteDC
File pos Mem pos ID Text
======== ======= == ====
000000008AAC 00000300C8AC 0 CreateSolidBrush
000000008AC0 00000300C8C0 0 CreateDCA
000000008ACA 00000300C8CA 0 user32.dll
000000008AD8 00000300C8D8 0 CreateWindowExA
000000008AEA 00000300C8EA 0 UnregisterClassA
000000008AFE 00000300C8FE 0 TranslateMessage
000000008B12 00000300C912 0 SetTimer
000000008B1E 00000300C91E 0 SetFocus
000000008B2A 00000300C92A 0 SendMessageA
000000008B3A 00000300C93A 0 RegisterClassA
000000008B4C 00000300C94C 0 PostMessageA
000000008B5C 00000300C95C 0 PeekMessageA
000000008B6C 00000300C96C 0 LoadIconA
000000008B78 00000300C978 0 LoadCursorA
000000008B86 00000300C986 0 InvalidateRect
000000008B98 00000300C998 0 GetWindowTextA
000000008BAA 00000300C9AA 0 GetWindowDC
000000008BB8 00000300C9B8 0 GetMessageA
000000008BC6 00000300C9C6 0 GetDesktopWindow
000000008BDA 00000300C9DA 0 GetClientRect
000000008BEA 00000300C9EA 0 DrawTextA
000000008BF6 00000300C9F6 0 DispatchMessageA
000000008C0A 00000300CA0A 0 DestroyWindow
000000008C1A 00000300CA1A 0 DefWindowProcA
000000008C2A 00000300CA2A 0 kernel32.dll
000000008C3A 00000300CA3A 0 VirtualProtect
000000008C4A 00000300CA4A 0 user32.dll
000000008C58 00000300CA58 0 wsprintfA
000000008C62 00000300CA62 0 PSAPI.DLL
000000008C6E 00000300CA6E 0 GetModuleBaseNameA
000000008C84 00000300CA84 0 EnumProcesses
000000008E0F 00000300D00F 0 0"0*020:0B0J0R0Z0b0j0r0z0
000000008E55 00000300D055 0 5)5D5
000000008E5B 00000300D05B 0 5&7b7
000000008E7D 00000300D07D 0 8$868B8Q8]8e8p8v8
000000008EA9 00000300D0A9 0 9*9K9c9
000000008EB9 00000300D0B9 0 9G:g:
000000008ECB 00000300D0CB 0 < <+<4<;<J<Q<s<
000000008EDD 00000300D0DD 0 <Y=w=|=
000000008EED 00000300D0ED 0 >R>[>q>
000000008EFD 00000300D0FD 0 ?"?L?U?e?m?s?|?
000000008F29 00000300D129 0 000<0D0[0j0z0
000000008F47 00000300D147 0 1n1t1|1
000000008F59 00000300D159 0 2e2l2|2
000000008F7D 00000300D17D 0 4?4_4z4
000000008F89 00000300D189 0 4.565
000000008F95 00000300D195 0 7'7E7[7r7
000000008FA9 00000300D1A9 0 8 8.8b8~8
000000008FBD 00000300D1BD 0 9!9S9\9
000000008FCB 00000300D1CB 0 :/:w;
000000008FDB 00000300D1DB 0 <'<S<h<
000000008FE9 00000300D1E9 0 = =&=,=2=7===F=V=[=
000000008FFD 00000300D1FD 0 =e=j=x=
000000009013 00000300D213 0 >4>>>c>m>w>
00000000906F 00000300D26F 0 3"3&3,30363=3A3[3d3m3y3
00000000909B 00000300D29B 0 424\4w4
0000000090B5 00000300D2B5 0 5!5-5;5E5c5h5{5
0000000090E1 00000300D2E1 0 6&6.666>6F6N6V6
0000000090F1 00000300D2F1 0 6f6n6v6~6
000000009121 00000300D321 0 7&7.767>7F7N7V7
File pos Mem pos ID Text
======== ======= == ====
000000009131 00000300D331 0 7f7n7v7~7
000000009161 00000300D361 0 8&8>8
00000000916B 00000300D36B 0 9&9.969D9P9Y9a9u9{9
000000009195 00000300D395 0 :%:,:7:>:I:U:c:j:w:
0000000091E3 00000300D3E3 0 <'<,<1<<<A<F<Q<V<[<f<k<p<{<
000000009238 00000300D438 0 y0_1g1
000000009243 00000300D443 0 2V2g2l2
00000000924B 00000300D44B 0 2;3H3X3
00000000925B 00000300D45B 0 6,7C7
00000000927D 00000300D47D 0 ;d<u=
000000009285 00000300D485 0 >t>x?
000000009299 00000300D499 0 091E1|1
0000000092A9 00000300D4A9 0 1K2W2~2
0000000092B1 00000300D4B1 0 2_3p3
0000000092BF 00000300D4BF 0 3<4a4m4
0000000092C7 00000300D4C7 0 4G5N:
0000000092DD 00000300D4DD 0 :(:3:<:B:T:
0000000092F5 00000300D4F5 0 <n<t<}<
00000000930B 00000300D50B 0 =.>4>O>h>u>
000000009325 00000300D525 0 ?(?<?O?
00000000933F 00000300D53F 0 1f1p1z1
00000000935D 00000300D55D 0 1<3A3
000000009375 00000300D575 0 7,7@7T7h7|7
00000000938B 00000300D58B 0 798>8D8>9p9|9
0000000093A3 00000300D5A3 0 :C:S:W:
0000000093BD 00000300D5BD 0 :G;\;q;|;
0000000093DF 00000300D5DF 0 =!=-=2=7=\=
0000000093F3 00000300D5F3 0 ='>/>:>P>U>d>j>w>
000000009411 00000300D611 0 ?#?B?O?_?g?r?
00000000943D 00000300D63D 0 070?0J0
000000009445 00000300D645 0 0c0n0{0
000000009471 00000300D671 0 1%1*1/141>1C1H1M1
000000009493 00000300D693 0 4,444L4[4e4n4y4
0000000094C7 00000300D6C7 0 6 6+6
0000000094D9 00000300D6D9 0 7 7&7,72787C7
0000000094FF 00000300D6FF 0 8&81868;8F8T8a8k8z8
000000009539 00000300D739 0 9#9)9/9
000000009548 00000300D748 0 $0(0,0
0000000097CA 00000300E1CA 0 33331
0000000097E9 00000300E1E9 0 33333
00000000980A 00000300E20A 0 33331
00000000982F 00000300E22F 0 Gggfv@
00000000983F 00000300E23F 0 &vvggd
00000000984F 00000300E24F 0 wwgbvt
00000000985D 00000300E25D 0 1wwwr"gf@
00000000986D 00000300E26D 0 1wwwr"vv@
00000000987F 00000300E27F 0 wr""gf@
00000000988F 00000300E28F 0 wr""&f@
00000000989F 00000300E29F 0 ww"w""@
0000000098B0 00000300E2B0 0 wr'""@
0000000098CE 00000300E2CE 0 1rwr"
000000009949 00000300E349 0 3333;
000000009959 00000300E359 0 33333
000000009A55 00000300E455 0 Pwinstr
000000009A5E 00000300E45E 0 UTypes
000000009A67 00000300E467 0 System
000000009A70 00000300E470 0 SysInit
000000009A79 00000300E479 0 KWindows
000000009C00 000003009C00 0 x/swing/text/html/HTMLDocument;
000000009C21 000003009C21 0 @(Ljavax/swing/JEditorPane;)Ljavax/swing/text/html/HTMLEditorKit;
File pos Mem pos ID Text
======== ======= == ====
000000009C64 000003009C64 0 a(Ljavax/swing/text/html/HTMLDocument;ILjavax/swing/text/html/HTML$Tag;)Ljavax/swing/text/Element;
000000009F3D 000003009F3D 0 javax/swing/text/html/HTMLEditorKit$InsertHTMLTextAction.class
000000009F8B 000003009F8B 0 <init>
000000009F9B 000003009F9B 0 HTMLTextAction
000000009FAC 000003009FAC 0 InnerClasses
000000009FBB 000003009FBB 0 InsertHTMLTextAction
000000009FD2 000003009FD2 0 Unable to insert:
000000009FE7 000003009FE7 0 actionPerformed
000000009FF9 000003009FF9 0 addTag
00000000A000 00000300A000 0 2012/10/26 16:51:44.343 >CLoger() Debug mode: [0]
00000000A034 00000300A034 0 2012/10/26 16:51:44.343 CCommunicator started. Current version: [3.3.0.2/20100901]
00000000A089 00000300A089 0 2012/10/26 16:51:44.453 <------------ COMUNICATION -------------------->
00000000A0D3 00000300A0D3 0 2012/10/26 16:51:44.453 1. IP: [10.20.136.167]
00000000A104 00000300A104 0 2012/10/26 16:51:44.453 2. PORT: [20100]
00000000A12F 00000300A12F 0 2012/10/26 16:51:44.453 3. KeepAliveTime: [10000]
00000000A163 00000300A163 0 2012/10/26 16:51:44.453 4. KeepAliveInterval: [1000]
00000000A19A 00000300A19A 0 2012/10/26 16:51:44.453 <---------------------------------------------->
00000000A1E4 00000300A1E4 0 2012/10/26 16:51:46.390 Trying to connect: [10.20.136.167]-[20100]-[A0308927]
00000000A234 00000300A234 0 2012/10/26 16:51:47.015 Need send header: [A0308927]
00000000A26B 00000300A26B 0 2012/10/26 16:51:48.015 >OnConect() Set Agent status - CONNECTED
00000000A2AD 00000300A2AD 0 2012/10/26 16:51:48.015 >IsNeedSendULOG() Read update status....
00000000A2EF 00000300A2EF 0 2012/10/26 16:51:48.015 Connected!!
00000000A314 00000300A314 0 2012/10/26 16:59:28.640 WARNING: Error disconnect. Status: [2]
00000000A355 00000300A355 0 2012/10/26 16:59:29.640 Error... disconnected!
00000000A385 00000300A385 0 2012/10/26 16:59:29.640 We are disconnected!
00000000A3B3 00000300A3B3 0 2012/10/26 16:59:29.656 Trying to connect: [10.20.136.167]-[20100]-[A0308927]
00000000A403 00000300A403 0 2012/10/26 16:59:30.546 Need send header: [A0308927]
00000000A43A 00000300A43A 0 2012/10/26 16:59:31.546 >OnConect() Set Agent status - CONNECTED
00000000A47C 00000300A47C 0 2012/10/26 16:59:31.546 >IsNeedSendULOG() Read update status....
00000000A4BE 00000300A4BE 0 2012/10/26 16:59:31.546 Connected!!
00000000A4E3 00000300A4E3 0 2012/10/26 17:07:35.578 >CLoger() Debug mode: [0]
00000000A517 00000300A517 0 2012/10/26 17:07:35.578 CCommunicator started. Current version: [3.3.0.2/20100901]
00000000A56C 00000300A56C 0 2012/10/26 17:07:35.578 <------------ COMUNICATION -------------------->
00000000A5B6 00000300A5B6 0 2012/10/26 17:07:35.578 1. IP: [10.20.136.167]
00000000A5E7 00000300A5E7 0 2012/10/26 17:07:35.578 2. PORT: [20100]
00000000A612 00000300A612 0 2012/10/26 17:07:35.578 3. KeepAliveTime: [10000]
00000000A646 00000300A646 0 2012/10/26 17:07:35.578 4. KeepAliveInterval: [1000]
00000000A67D 00000300A67D 0 2012/10/26 17:07:35.578 <---------------------------------------------->
00000000A6C7 00000300A6C7 0 2012/10/26 17:07:36.734 Trying to connect: [10.20.136.167]-[20100]-[A0308927]
00000000A717 00000300A717 0 2012/10/26 17:07:37.250 Need send header: [A0308927]
00000000A74E 00000300A74E 0 2012/10/26 17:07:38.250 >OnConect() Set Agent status - CONNECTED
00000000A790 00000300A790 0 2012/10/26 17:07:38.250 >IsNeedSendULOG() Read update status....
00000000A7D2 00000300A7D2 0 2012/10/26 17:07:38.250 Connected!!
00000000A7F7 00000300A7F7 0 2012/11/08 10:17:06.968 >CLoger() Debug mode: [0]
00000000A82B 00000300A82B 0 2012/11/08 10:17:06.968 CCommunicator started. Current version: [3.3.0.2/20100901]
00000000A880 00000300A880 0 2012/11/08 10:17:06.968 <------------ COMUNICATION -------------------->
00000000A8CA 00000300A8CA 0 2012/11/08 10:17:06.968 1. IP: [10.20.136.167]
00000000A8FB 00000300A8FB 0 2012/11/08 10:17:06.968 2. PORT: [20100]
00000000A926 00000300A926 0 2012/11/08 10:17:06.968 3. KeepAliveTime: [10000]
00000000A95A 00000300A95A 0 2012/11/08 10:17:06.968 4. KeepAliveInterval: [1000]
00000000A991 00000300A991 0 2012/11/08 10:17:06.968 <---------------------------------------------->
00000000A9DB 00000300A9DB 0 2012/11/08 10:17:07.125 Trying to connect: [10.20.136.167]-[20100]-[A0308973]
00000000AA2B 00000300AA2B 0 2012/11/08 10:17:12.203 Can not connect! Trying again...
00000000AA65 00000300AA65 0 2012/11/08 10:31:07.937 >CLoger() Debug mode: [0]
00000000AA99 00000300AA99 0 2012/11/08 10:31:07.937 CCommunicator started. Current version: [3.3.0.2/20100901]
00000000AAEE 00000300AAEE 0 2012/11/08 10:31:07.937 <------------ COMUNICATION -------------------->
00000000AB38 00000300AB38 0 2012/11/08 10:31:07.937 1. IP: [10.20.136.167]
00000000AB69 00000300AB69 0 2012/11/08 10:31:07.937 2. PORT: [20100]
00000000AB94 00000300AB94 0 2012/11/08 10:31:07.937 3. KeepAliveTime: [10000]
00000000ABC8 00000300ABC8 0 2012/11/08 10:31:07.937 4. KeepAliveInterval: [1000]
File pos Mem pos ID Text
======== ======= == ====
00000000ABFF 00000300ABFF 0 2012/11/08 10:31:07.937 <---------------------------------------------->
00000000AC49 00000300AC49 0 2012/11/08 10:31:08.781 Trying to connect: [10.20.136.167]-[20100]-[A0308973]
00000000AC99 00000300AC99 0 2012/11/08 10:31:13.875 Can not connect! Trying again...
00000000ACD3 00000300ACD3 0 2012/11/08 10:36:05.750 Need send header: [A0308973]
00000000AD0A 00000300AD0A 0 2012/11/08 10:36:06.750 >OnConect() Set Agent status - CONNECTED
00000000AD4C 00000300AD4C 0 2012/11/08 10:36:06.750 >IsNeedSendULOG() Read update status....
00000000AD8E 00000300AD8E 0 2012/11/08 10:36:06.750 Connected!!
00000000ADB3 00000300ADB3 0 2012/11/08 11:14:55.796 >CLoger() Debug mode: [0]
00000000ADE7 00000300ADE7 0 2012/11/08 11:14:55.812 CCommunicator started. Current version: [3.3.0.2/20100901]
00000000AE3C 00000300AE3C 0 2012/11/08 11:14:55.812 <------------ COMUNICATION -------------------->
00000000AE86 00000300AE86 0 2012/11/08 11:14:55.812 1. IP: [10.20.136.167]
00000000AEB7 00000300AEB7 0 2012/11/08 11:14:55.812 2. PORT: [20100]
00000000AEE2 00000300AEE2 0 2012/11/08 11:14:55.812 3. KeepAliveTime: [10000]
00000000AF16 00000300AF16 0 2012/11/08 11:14:55.812 4. KeepAliveInterval: [1000]
00000000AF4D 00000300AF4D 0 2012/11/08 11:14:55.812 <---------------------------------------------->
00000000AF97 00000300AF97 0 2012/11/08 11:14:55.859 Trying to connect: [10.20.136.167]-[20100]-[A0308973]
00000000AFE7 00000300AFE7 0 2012/11/08 11:14:55.890 Need send header: [A0308973]
00000000B01E 00000300B01E 0 2012/11/08 11:14:56.890 >OnConect() Set Agent status - CONNECTED
00000000B060 00000300B060 0 2012/11/08 11:14:56.890 >IsNeedSendULOG() Read update status....
00000000B0A2 00000300B0A2 0 2012/11/08 11:14:56.890 Connected!!
00000000B0C7 00000300B0C7 0 2012/11/08 11:20:33.937 >CLoger() Debug mode: [0]
00000000B0FB 00000300B0FB 0 2012/11/08 11:20:34.000 CCommunicator started. Current version: [3.3.0.2/20100901]
00000000B150 00000300B150 0 2012/11/08 11:20:34.000 <------------ COMUNICATION -------------------->
00000000B19A 00000300B19A 0 2012/11/08 11:20:34.000 1. IP: [10.20.136.167]
00000000B1CB 00000300B1CB 0 2012/11/08 11:20:34.000 2. PORT: [20100]
00000000B1F6 00000300B1F6 0 2012/11/08 11:20:34.000 3. KeepAliveTime: [10000]
00000000B22A 00000300B22A 0 2012/11/08 11:20:34.000 4. KeepAliveInterval: [1000]
00000000B261 00000300B261 0 2012/11/08 11:20:34.000 <---------------------------------------------->
00000000B2AB 00000300B2AB 0 2012/11/08 11:20:34.046 Trying to connect: [10.20.136.167]-[20100]-[A0308973]
00000000B2FB 00000300B2FB 0 2012/11/08 11:20:34.062 Need send header: [A0308973]
00000000B332 00000300B332 0 2012/11/08 11:20:35.062 >OnConect() Set Agent status - CONNECTED
00000000B374 00000300B374 0 2012/11/08 11:20:35.062 >IsNeedSendULOG() Read update status....
00000000B3B6 00000300B3B6 0 2012/11/08 11:20:35.062 Connected!!
00000000B3DB 00000300B3DB 0 2012/11/08 11:46:54.703 >CLoger() Debug mode: [0]
00000000B40F 00000300B40F 0 2012/11/08 11:46:54.703 CCommunicator started. Current version: [3.3.0.2/20100901]
00000000B464 00000300B464 0 2012/11/08 11:46:54.703 <------------ COMUNICATION -------------------->
00000000B4AE 00000300B4AE 0 2012/11/08 11:46:54.703 1. IP: [10.20.136.167]
00000000B4DF 00000300B4DF 0 2012/11/08 11:46:54.703 2. PORT: [20100]
00000000B50A 00000300B50A 0 2012/11/08 11:46:54.703 3. KeepAliveTime: [10000]
00000000B53E 00000300B53E 0 2012/11/08 11:46:54.703 4. KeepAliveInterval: [1000]
00000000B575 00000300B575 0 2012/11/08 11:46:54.703 <---------------------------------------------->
00000000B5BF 00000300B5BF 0 2012/11/08 11:46:55.187 Trying to connect: [10.20.136.167]-[20100]-[A0308973]
00000000B60F 00000300B60F 0 2012/11/08 11:46:55.218 Need send header: [A0308973]
00000000B646 00000300B646 0 2012/11/08 11:46:56.218 >OnConect() Set Agent status - CONNECTED
00000000B688 00000300B688 0 2012/11/08 11:46:56.218 >IsNeedSendULOG() Read update status....
00000000B6CA 00000300B6CA 0 2012/11/08 11:46:56.218 Connected!!
00000000B6EF 00000300B6EF 0 2012/11/08 11:53:06.968 >CLoger() Debug mode: [0]
00000000B723 00000300B723 0 2012/11/08 11:53:06.984 CCommunicator started. Current version: [3.3.0.2/20100901]
00000000B778 00000300B778 0 2012/11/08 11:53:06.984 <------------ COMUNICATION -------------------->
00000000B7C2 00000300B7C2 0 2012/11/08 11:53:06.984 1. IP: [10.20.136.167]
00000000B7F3 00000300B7F3 0 2012/11/08 11:53:06.984 2. PORT: [20100]
00000000B81E 00000300B81E 0 2012/11/08 11:53:06.984 3. KeepAliveTime: [10000]
00000000B852 00000300B852 0 2012/11/08 11:53:06.984 4. KeepAliveInterval: [1000]
00000000B889 00000300B889 0 2012/11/08 11:53:06.984 <---------------------------------------------->
00000000B8D3 00000300B8D3 0 2012/11/08 11:53:07.546 Trying to connect: [10.20.136.167]-[20100]-[A0308973]
00000000B923 00000300B923 0 2012/11/08 11:53:07.562 Need send header: [A0308973]
00000000B95A 00000300B95A 0 2012/11/08 11:53:08.562 >OnConect() Set Agent status - CONNECTED
00000000B99C 00000300B99C 0 2012/11/08 11:53:08.562 >IsNeedSendULOG() Read update status....
00000000B9DE 00000300B9DE 0 2012/11/08 11:53:08.562 Connected!!
00000000BA03 00000300BA03 0 2012/11/08 12:09:30.062 >CLoger() Debug mode: [0]
File pos Mem pos ID Text
======== ======= == ====
00000000BA37 00000300BA37 0 2012/11/08 12:09:30.109 CCommunicator started. Current version: [3.3.0.2/20100901]
00000000BA8C 00000300BA8C 0 2012/11/08 12:09:30.109 <------------ COMUNICATION -------------------->
00000000BAD6 00000300BAD6 0 2012/11/08 12:09:30.109 1. IP: [10.20.136.167]
00000000BB07 00000300BB07 0 2012/11/08 12:09:30.109 2. PORT: [20100]
00000000BB32 00000300BB32 0 2012/11/08 12:09:30.109 3. KeepAliveTime: [10000]
00000000BB66 00000300BB66 0 2012/11/08 12:09:30.109 4. KeepAliveInterval: [1000]
00000000BB9D 00000300BB9D 0 2012/11/08 12:09:30.109 <---------------------------------------------->
00000000BBE7 00000300BBE7 0 2012/11/08 12:09:30.265 Trying to connect: [10.20.136.167]-[20100]-[A0308973]
00000000BC37 00000300BC37 0 2012/11/08 12:09:30.281 Need send header: [A0308973]
00000000BC6E 00000300BC6E 0 2012/11/08 12:09:31.281 >OnConect() Set Agent status - CONNECTED
00000000BCB0 00000300BCB0 0 2012/11/08 12:09:31.281 >IsNeedSendULOG() Read update status....
00000000BCF2 00000300BCF2 0 2012/11/08 12:09:31.281 Connected!!
00000000BD17 00000300BD17 0 2013/04/16 13:14:16.062 >CLoger() Debug mode: [0]
00000000BD4B 00000300BD4B 0 2013/04/16 13:14:16.062 CCommunicator started. Current version: [3.3.0.2/20100901]
00000000BDA0 00000300BDA0 0 2013/04/16 13:14:16.062 <------------ COMUNICATION -------------------->
00000000BDEA 00000300BDEA 0 2013/04/16 13:14:16.062 1. IP: [10.20.136.167]
00000000BE1B 00000300BE1B 0 2013/04/16 13:14:16.062 2. PORT: [20100]
00000000BE46 00000300BE46 0 2013/04/16 13:14:16.062 3. KeepAliveTime: [10000]
00000000BE7A 00000300BE7A 0 2013/04/16 13:14:16.062 4. KeepAliveInterval: [1000]
00000000BEB1 00000300BEB1 0 2013/04/16 13:14:16.062 <---------------------------------------------->
00000000BEFB 00000300BEFB 0 2013/04/16 13:14:16.109 Trying to connect: [10.20.136.167]-[20100]-[A0308973]
00000000BF4B 00000300BF4B 0 2013/04/16 13:14:42.125 Can not connect! Trying again...
00000000BF85 00000300BF85 0 2013/04/16 13:18:29.031 >CLoger() Debug mode: [0]
00000000BFB9 00000300BFB9 0 2013/04/16 13:18:29.031 CCommunicator started. Current version: [3.3.0.MZ
00000000C04D 00000300C04D 0 !This program cannot be run in DOS mode.
00000000C0A8 00000300C0A8 0 Richh
00000000C1B0 00000300C1B0 0 .text
00000000C1D8 00000300C1D8 0 .rdata
00000000C1FF 00000300C1FF 0 @.data
00000000C228 00000300C228 0 .rsrc
00000000C451 00000300C451 0 u'h0p@
00000000C45D 00000300C45D 0 j[hLp@
00000000CAC0 00000300CAC0 0 QSUVW
00000000CF2A 00000300CF2A 0 8"uV@
00000000D359 00000300D359 0 WSUVj
00000000D413 00000300D413 0 SUVWj
00000000D942 00000300D942 0 HSUVWh
00000000D9B0 00000300D9B0 0 f9|$F
00000000DBC4 00000300DBC4 0 tBjtj
00000000DC45 00000300DC45 0 @P(q@
00000000DC7A 00000300DC7A 0 uRjtj
00000000DD65 00000300DD65 0 FP=(q@
00000000DE33 00000300DE33 0 SVWUj
00000000DE9C 00000300DE9C 0 t.;t$$t(
00000000DF20 00000300DF20 0 VC20XC00U
00000000E04F 00000300E04F 0 SUVW3
00000000E05C 00000300E05C 0 E=xs@
00000000E103 00000300E103 0 ;h8d@
00000000E232 00000300E232 0 A=xs@
00000000E695 00000300E695 0 QVWRP
00000000E6FD 00000300E6FD 0 WUVQh
00000000E752 00000300E752 0 |$$UWQ
00000000E784 00000300E784 0 D$(RP
00000000E7B7 00000300E7B7 0 L$ PPVQj
00000000E7D5 00000300E7D5 0 D$$RVPj
00000000E8E5 00000300E8E5 0 QVWRP
00000000E925 00000300E925 0 VBWRU
00000000E956 00000300E956 0 WSVQj
00000000E9A9 00000300E9A9 0 D$(PWSUQ
00000000E9F4 00000300E9F4 0 VPWSUQ
File pos Mem pos ID Text
======== ======= == ====
00000000EA3C 00000300EA3C 0 D$8QVRh
00000000EB50 00000300EB50 0 T$(SSSSWQh
00000000EB98 00000300EB98 0 VUWPh
00000000EC00 00000300EC00 0 T$$WSR
00000000EC9D 00000300EC9D 0 L$ RQP
00000000ECDB 00000300ECDB 0 U@RPS
00000000ED01 00000300ED01 0 VWUQj
00000000ED13 00000300ED13 0 T$$RP
00000000ED19 00000300ED19 0 D$ WP
000000009740 00000300E140 0 MAINICON(