.- - -----÷M÷E÷N÷U÷------------------------------------------------------------- --- ----  -------------.
!  WALL ! STATS ! GOODIES ! YARA ! FAQ ! RSS ! EMV                                                      !
`--------------  - ---  ---------- -------- -------- -------- -------- ----------------- -  ---- ---- --'

                                           ATM MALWARE NOTICE 
                    a6c33d7275c46397593f53ea136ea8669794f4d787044106594631c07a9ee71d
 
Date...........: 2018-09-05
Family.........: Atmosphere
File name......: -
File size......: 84.00 KB
Type file......: DLL/Windows
Virscan........: VT - HA
Documentation..: https://owncloud.group-ib.ru/s/aTugJcPclCLnQPb/download?path=%2F&files=Silence_Group-IB_Eng_Public.pdf
Additional note: dropped by 26b2daa6fbf5ec13599d24e6819202ddb3f770428d732100be15c23be317bd47

Entropy:


Binary Histogram:


=== PEDUMP REPORT === 
=== MZ Header === signature: "MZ" bytes_in_last_block: 144 0x90 blocks_in_file: 3 3 num_relocs: 0 0 header_paragraphs: 4 4 min_extra_paragraphs: 0 0 max_extra_paragraphs: 65535 0xffff ss: 0 0 sp: 184 0xb8 checksum: 0 0 ip: 0 0 cs: 0 0 reloc_table_offset: 64 0x40 overlay_number: 0 0 reserved0: 0 0 oem_id: 0 0 oem_info: 0 0 reserved2: 0 0 reserved3: 0 0 reserved4: 0 0 reserved5: 0 0 reserved6: 0 0 lfanew: 248 0xf8 === DOS STUB === 00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......| === RICH Header === LIB_ID VERSION TIMES_USED 12 c 7291 1c7b 1 1 14 e 7299 1c83 1 1 0 0 0 0 4 4 10 a 8168 1fe8 8 8 19 13 8034 1f62 4 4 93 5d 2179 883 3 3 1 1 0 0 119 77 11 b 8168 1fe8 35 23 4 4 8168 1fe8 5 5 === PE Header === signature: "PE\x00\x00" # IMAGE_FILE_HEADER: Machine: 332 0x14c x86 NumberOfSections: 4 4 TimeDateStamp: "2018-04-07 17:08:12" PointerToSymbolTable: 0 0 NumberOfSymbols: 0 0 SizeOfOptionalHeader: 224 0xe0 Characteristics: 8462 0x210e EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED LOCAL_SYMS_STRIPPED, 32BIT_MACHINE, DLL # IMAGE_OPTIONAL_HEADER32: Magic: 267 0x10b 32-bit executable LinkerVersion: 6.0 SizeOfCode: 57344 0xe000 SizeOfInitializedData: 24576 0x6000 SizeOfUninitializedData: 0 0 AddressOfEntryPoint: 57115 0xdf1b BaseOfCode: 4096 0x1000 BaseOfData: 61440 0xf000 ImageBase: 268435456 0x10000000 SectionAlignment: 4096 0x1000 FileAlignment: 4096 0x1000 OperatingSystemVersion: 4.0 ImageVersion: 45.2 SubsystemVersion: 4.0 Reserved1: 0 0 SizeOfImage: 86016 0x15000 SizeOfHeaders: 4096 0x1000 CheckSum: 0 0 Subsystem: 2 2 WINDOWS_GUI DllCharacteristics: 0 0 SizeOfStackReserve: 1048576 0x100000 SizeOfStackCommit: 4096 0x1000 SizeOfHeapReserve: 1048576 0x100000 SizeOfHeapCommit: 4096 0x1000 LoaderFlags: 0 0 NumberOfRvaAndSizes: 16 0x10 === DATA DIRECTORY === EXPORT rva:0x 119a0 size:0x 44 IMPORT rva:0x 10ae8 size:0x 78 RESOURCE rva:0x 0 size:0x 0 EXCEPTION rva:0x 0 size:0x 0 SECURITY rva:0x 0 size:0x 0 BASERELOC rva:0x 13000 size:0x fec DEBUG rva:0x 0 size:0x 0 ARCHITECTURE rva:0x 0 size:0x 0 GLOBALPTR rva:0x 0 size:0x 0 TLS rva:0x 0 size:0x 0 LOAD_CONFIG rva:0x 0 size:0x 0 Bound_IAT rva:0x 0 size:0x 0 IAT rva:0x f000 size:0x 1ac Delay_IAT rva:0x 0 size:0x 0 CLR_Header rva:0x 0 size:0x 0 rva:0x 0 size:0x 0 === SECTIONS === NAME RVA VSZ RAW_SZ RAW_PTR nREL REL_PTR nLINE LINE_PTR FLAGS .text 1000 dd24 e000 1000 0 0 0 0 60000020 R-X CODE .rdata f000 29e4 3000 f000 0 0 0 0 40000040 R-- IDATA .data 12000 d9c 1000 12000 0 0 0 0 c0000040 RW- IDATA .reloc 13000 1e8c 2000 13000 0 0 0 0 42000040 R-- IDATA DISCARDABLE === IMPORTS === MODULE_NAME HINT ORD FUNCTION_NAME KERNEL32.dll 2e CloseHandle KERNEL32.dll 2ab ReadFile KERNEL32.dll 15b GetFileSize KERNEL32.dll 4d CreateFileA KERNEL32.dll 397 WriteFile KERNEL32.dll 310 SetFilePointer KERNEL32.dll 16b GetLocalTime KERNEL32.dll 175 GetModuleFileNameA KERNEL32.dll 7c DeleteFileA KERNEL32.dll 69 CreateThread KERNEL32.dll 352 TerminateThread KERNEL32.dll 349 Sleep KERNEL32.dll 34b SuspendThread KERNEL32.dll 2c7 ResumeThread KERNEL32.dll 198 GetProcAddress KERNEL32.dll 248 LoadLibraryA KERNEL32.dll 177 GetModuleHandleA KERNEL32.dll 378 VirtualFree KERNEL32.dll 375 VirtualAlloc KERNEL32.dll d3 FindNextFileA KERNEL32.dll c9 FindFirstFileA KERNEL32.dll 385 WaitForSingleObject KERNEL32.dll 37b VirtualProtect KERNEL32.dll 13a GetCurrentProcess KERNEL32.dll e6 FlushInstructionCache KERNEL32.dll 37d VirtualQuery KERNEL32.dll 21c InterlockedCompareExchange KERNEL32.dll 21f InterlockedExchange KERNEL32.dll 20a HeapDestroy KERNEL32.dll 20c HeapFree KERNEL32.dll 280 OpenThread KERNEL32.dll 208 HeapCreate KERNEL32.dll 334 SetThreadContext KERNEL32.dll 1cd GetThreadContext KERNEL32.dll 355 Thread32Next KERNEL32.dll 210 HeapReAlloc KERNEL32.dll 206 HeapAlloc KERNEL32.dll 13e GetCurrentThreadId KERNEL32.dll 13b GetCurrentProcessId KERNEL32.dll 354 Thread32First KERNEL32.dll 6c CreateToolhelp32Snapshot USER32.dll 1be MessageBoxA MSVCP60.dll 3f2 ?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ MSVCP60.dll 411 ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z MSVCP60.dll 40d ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z MSVCP60.dll 420 ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z MSVCP60.dll ac ??0bad_exception@std@@QAE@ABV01@@Z MSVCP60.dll 111 ??1bad_exception@std@@UAE@XZ MSVCP60.dll ad ??0bad_exception@std@@QAE@PBD@Z MSVCP60.dll 49 ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z MSVCP60.dll 338 ?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z MSVCP60.dll 406 ?_Xran@std@@YAXXZ MSVCP60.dll 7a7 ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z MSVCP60.dll 542 ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z MSVCP60.dll 3e9 ?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z MSVCP60.dll 54c ?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z MSVCP60.dll 55c ?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z MSVCP60.dll 725 ?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z MSVCP60.dll 10b ??1_Lockit@std@@QAE@XZ MSVCP60.dll a2 ??0_Lockit@std@@QAE@XZ MSVCP60.dll 34a ?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z MSVCP60.dll 3f8 ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z MSVCP60.dll 661 ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB MSVCP60.dll 529 ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z MSVCP60.dll 405 ?_Xlen@std@@YAXXZ MSVCP60.dll 392 ?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z MSVCP60.dll 32d ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB MSVCP60.dll e9 ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ MSVCP60.dll 10d ??1_Winit@std@@QAE@XZ MSVCP60.dll a5 ??0_Winit@std@@QAE@XZ MSVCP60.dll 109 ??1Init@ios_base@std@@QAE@XZ MSVCP60.dll 9e ??0Init@ios_base@std@@QAE@XZ MSVCP60.dll 41c ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z SHLWAPI.dll 1b PathFileExistsA SHLWAPI.dll b PathAppendA MSVCRT.dll 1e1 _vsnprintf MSVCRT.dll f ??2@YAPAXI@Z MSVCRT.dll 24c fclose MSVCRT.dll 2d9 vfprintf MSVCRT.dll 257 fopen MSVCRT.dll 9 ??0exception@@QAE@XZ MSVCRT.dll 25a fputs MSVCRT.dll 25d fread MSVCRT.dll 2a6 rand MSVCRT.dll f1 _ftol MSVCRT.dll 291 malloc MSVCRT.dll 297 memcpy MSVCRT.dll 299 memset MSVCRT.dll 55 __dllonexit MSVCRT.dll 186 _onexit MSVCRT.dll e ??1type_info@@UAE@XZ MSVCRT.dll 10f _initterm MSVCRT.dll 9d _adjust_fdiv MSVCRT.dll d ??1exception@@UAE@XZ MSVCRT.dll 30 ?what@exception@@UBEPBDXZ MSVCRT.dll 41 _CxxThrowException MSVCRT.dll 2a7 realloc MSVCRT.dll 25e free MSVCRT.dll 8 ??0exception@@QAE@ABV0@@Z MSVCRT.dll 298 memmove MSVCRT.dll 23d atoi MSVCRT.dll 49 __CxxFrameHandler === EXPORTS === # module "Library.dll" # flags=0x0 ts="2018-04-07 17:08:12" version=0.0 ord_base=1 # nFuncs=1 nNames=1 ORD ENTRY_VA NAME 1 b000 iinit === Packer / Compiler === MS Visual C++ 6.0 DLL
=== Strings ===
File pos Mem pos ID Text ======== ======= == ==== 00000000004D 00001000004D 0 !This program cannot be run in DOS mode. 0000000001F0 0000100001F0 0 .text 000000000218 000010000218 0 .rdata 00000000023F 00001000023F 0 @.data 000000000268 000010000268 0 .reloc 000000001BE9 000010001BE9 0 L$(SUV 000000001BF0 000010001BF0 0 D$8W3 000000001C25 000010001C25 0 D$HPQVU 000000002089 000010002089 0 D$<SUVW 0000000027F4 0000100027F4 0 d$hPUQ 000000002BB3 000010002BB3 0 L$(QV 000000002BE6 000010002BE6 0 D$ VP 000000002CA2 000010002CA2 0 D$$UP 000000002EEB 000010002EEB 0 l$ VW 00000000311B 00001000311B 0 l$,VW 000000003249 000010003249 0 L$$SUV 000000003250 000010003250 0 D$4WPQ 00000000327F 00001000327F 0 D$DPQVS 000000003780 000010003780 0 D$@_][ 0000000039A9 0000100039A9 0 T$(PR 000000003B19 000010003B19 0 D$$SUVW 000000003EDE 000010003EDE 0 \$dUVW3 000000003F73 000010003F73 0 L$,Qj 00000000409F 00001000409F 0 L$(Qj 00000000435A 00001000435A 0 L$<Qj 000000004477 000010004477 0 D$,SP 00000000451A 00001000451A 0 L$8QR 00000000470C 00001000470C 0 d$DSh 0000000047D5 0000100047D5 0 QSUVW 000000004B59 000010004B59 0 L$$SUV 000000004B60 000010004B60 0 D$4WPQ 000000004B8F 000010004B8F 0 D$DPQVS 000000004C89 000010004C89 0 L$$SUV 000000004C90 000010004C90 0 D$4WPQ 000000004CBF 000010004CBF 0 D$DPQVS 000000004EBC 000010004EBC 0 L$ QW 000000004F3F 000010004F3F 0 U4RQU 0000000053CC 0000100053CC 0 SUVW3 000000005408 000010005408 0 L$$Qj 000000005A18 000010005A18 0 SUVW3 000000005B49 000010005B49 0 D$|VW3 000000005CF9 000010005CF9 0 D$LSUV3 000000005F62 000010005F62 0 L$$PQ 000000006059 000010006059 0 D$8SUV3 0000000060C8 0000100060C8 0 \$<QSR 0000000060E7 0000100060E7 0 T$$QPR 000000006239 000010006239 0 D$8SUV3 0000000062AF 0000100062AF 0 \$<QRV 0000000062CB 0000100062CB 0 T$$PSR 00000000682B 00001000682B 0 SUVW3 0000000068CC 0000100068CC 0 L$0RVW 0000000068F9 0000100068F9 0 L$PQP 0000000069FA 0000100069FA 0 D$PPW 000000006BD5 000010006BD5 0 |$ QPW 000000006C69 000010006C69 0 D$8UVWj 000000006D04 000010006D04 0 L$HQP 000000006F97 000010006F97 0 ,SUVW 000000006FB3 000010006FB3 0 l$Dt# 00000000706D 00001000706D 0 d$(Ph$% 000000007347 000010007347 0 @SUVW File pos Mem pos ID Text ======== ======= == ==== 0000000074F5 0000100074F5 0 D$X VP 000000007629 000010007629 0 L$$SUV 000000007630 000010007630 0 D$4WPQ 00000000765F 00001000765F 0 D$DPQVS 0000000079DC 0000100079DC 0 t$hWj 000000007B23 000010007B23 0 D$ PQ 0000000082DA 0000100082DA 0 T$$QWVR 00000000831C 00001000831C 0 L$$PWVQ 000000008363 000010008363 0 D$,VP 0000000089CA 0000100089CA 0 T$$QWVR 000000008A0C 000010008A0C 0 L$$PWVQ 000000008A53 000010008A53 0 D$,VP 000000009EC6 000010009EC6 0 W*hd& 00000000A087 00001000A087 0 0SUVW 00000000A4D4 00001000A4D4 0 d$8Ph 00000000A4FD 00001000A4FD 0 t$(to 00000000AAC8 00001000AAC8 0 SUVW3 00000000ABA1 00001000ABA1 0 |$0t1 00000000ABD4 00001000ABD4 0 \$$hh! 00000000DF48 00001000DF48 0 t WVS 00000000DF75 00001000DF75 0 u7WPS 00000000DF86 00001000DF86 0 u&WVS 000000010D0E 000010010D0E 0 CloseHandle 000000010D1C 000010010D1C 0 ReadFile 000000010D28 000010010D28 0 GetFileSize 000000010D36 000010010D36 0 CreateFileA 000000010D44 000010010D44 0 WriteFile 000000010D50 000010010D50 0 SetFilePointer 000000010D62 000010010D62 0 GetLocalTime 000000010D72 000010010D72 0 GetModuleFileNameA 000000010D88 000010010D88 0 DeleteFileA 000000010D96 000010010D96 0 VirtualQuery 000000010DA6 000010010DA6 0 CreateThread 000000010DB6 000010010DB6 0 TerminateThread 000000010DC8 000010010DC8 0 Sleep 000000010DD0 000010010DD0 0 SuspendThread 000000010DE0 000010010DE0 0 ResumeThread 000000010DF0 000010010DF0 0 GetProcAddress 000000010E02 000010010E02 0 LoadLibraryA 000000010E12 000010010E12 0 GetModuleHandleA 000000010E26 000010010E26 0 VirtualFree 000000010E34 000010010E34 0 VirtualAlloc 000000010E44 000010010E44 0 FindNextFileA 000000010E54 000010010E54 0 FindFirstFileA 000000010E66 000010010E66 0 WaitForSingleObject 000000010E7C 000010010E7C 0 VirtualProtect 000000010E8C 000010010E8C 0 KERNEL32.dll 000000010E9C 000010010E9C 0 MessageBoxA 000000010EA8 000010010EA8 0 USER32.dll 000000010EB4 000010010EB4 0 ADVAPI32.dll 000000010EC4 000010010EC4 0 ??0Init@ios_base@std@@QAE@XZ 000000010EE4 000010010EE4 0 ??1Init@ios_base@std@@QAE@XZ 000000010F04 000010010F04 0 ??0_Winit@std@@QAE@XZ 000000010F1C 000010010F1C 0 ??1_Winit@std@@QAE@XZ 000000010F34 000010010F34 0 ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ 000000010F7E 000010010F7E 0 ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z 000000010FDA 000010010FDA 0 ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB 000000011036 000010011036 0 ?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z 000000011088 000010011088 0 ?_Xlen@std@@YAXXZ 00000001109C 00001001109C 0 ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z File pos Mem pos ID Text ======== ======= == ==== 0000000110F0 0000100110F0 0 ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB 00000001113A 00001001113A 0 ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z 00000001118A 00001001118A 0 ?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z 0000000111D8 0000100111D8 0 ?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ 000000011226 000010011226 0 ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z 00000001127E 00001001127E 0 ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z 0000000112DA 0000100112DA 0 ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z 000000011332 000010011332 0 ??0bad_exception@std@@QAE@ABV01@@Z 000000011358 000010011358 0 ??1bad_exception@std@@UAE@XZ 000000011378 000010011378 0 ??0bad_exception@std@@QAE@PBD@Z 00000001139A 00001001139A 0 ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z 0000000113F6 0000100113F6 0 ?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z 000000011444 000010011444 0 ?_Xran@std@@YAXXZ 000000011458 000010011458 0 ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z 0000000114AE 0000100114AE 0 ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z 000000011500 000010011500 0 ?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z 000000011554 000010011554 0 ?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z 0000000115B2 0000100115B2 0 ?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z 000000011610 000010011610 0 ?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z 000000011662 000010011662 0 ??1_Lockit@std@@QAE@XZ 00000001167C 00001001167C 0 ??0_Lockit@std@@QAE@XZ 000000011694 000010011694 0 MSVCP60.dll 0000000116A2 0000100116A2 0 PathFileExistsA 0000000116B4 0000100116B4 0 PathAppendA 0000000116C0 0000100116C0 0 SHLWAPI.dll 0000000116CE 0000100116CE 0 __CxxFrameHandler 0000000116EA 0000100116EA 0 memmove 0000000116F4 0000100116F4 0 ??0exception@@QAE@ABV0@@Z 000000011718 000010011718 0 realloc 000000011722 000010011722 0 _CxxThrowException 000000011738 000010011738 0 ?what@exception@@UBEPBDXZ 000000011754 000010011754 0 ??1exception@@UAE@XZ 00000001176C 00001001176C 0 _vsnprintf 00000001177A 00001001177A 0 ??2@YAPAXI@Z 00000001178A 00001001178A 0 fclose 000000011794 000010011794 0 vfprintf 0000000117A0 0000100117A0 0 fopen 0000000117A8 0000100117A8 0 ??0exception@@QAE@XZ 0000000117C0 0000100117C0 0 fputs 0000000117C8 0000100117C8 0 fread 0000000117D8 0000100117D8 0 _ftol 0000000117E0 0000100117E0 0 malloc 0000000117EA 0000100117EA 0 memcpy 0000000117F4 0000100117F4 0 memset 0000000117FE 0000100117FE 0 __dllonexit 00000001180C 00001001180C 0 _onexit 000000011814 000010011814 0 MSVCRT.dll 000000011822 000010011822 0 ??1type_info@@UAE@XZ 00000001183A 00001001183A 0 _initterm 000000011846 000010011846 0 _adjust_fdiv 000000011856 000010011856 0 HeapCreate 000000011864 000010011864 0 InterlockedCompareExchange 000000011882 000010011882 0 InterlockedExchange 000000011898 000010011898 0 HeapDestroy 0000000118A6 0000100118A6 0 HeapFree 0000000118B2 0000100118B2 0 OpenThread 0000000118C0 0000100118C0 0 SetThreadContext 0000000118D4 0000100118D4 0 GetThreadContext 0000000118E8 0000100118E8 0 Thread32Next 0000000118F8 0000100118F8 0 HeapReAlloc File pos Mem pos ID Text ======== ======= == ==== 000000011906 000010011906 0 HeapAlloc 000000011912 000010011912 0 GetCurrentThreadId 000000011928 000010011928 0 GetCurrentProcessId 00000001193E 00001001193E 0 Thread32First 00000001194E 00001001194E 0 CreateToolhelp32Snapshot 00000001196A 00001001196A 0 FlushInstructionCache 000000011982 000010011982 0 GetCurrentProcess 0000000119D2 0000100119D2 0 Library.dll 0000000119DE 0000100119DE 0 iinit 000000012050 000010012050 0 .?AVexception@@ 000000012068 000010012068 0 .?AVException@@ 000000012080 000010012080 0 .?AVArgumentOutOfRangeException@@ 0000000120B8 0000100120B8 0 .?AVbad_exception@std@@ 0000000120D0 0000100120D0 0 bad exception 0000000120F0 0000100120F0 0 .?AVIOException@@ 000000012110 000010012110 0 .?AVFileNotFoundException@@ 000000012130 000010012130 0 Logger is now on new TraceLevel: %s 000000012154 000010012154 0 UNKNOWN 000000012160 000010012160 0 TRACE 000000012168 000010012168 0 NOTICE 000000012170 000010012170 0 WARNING 000000012178 000010012178 0 ERROR 000000012180 000010012180 0 FATAL 000000012188 000010012188 0 [%s]: %s 0000000121A0 0000100121A0 0 .?AVThreadException@@ 0000000121B8 0000100121B8 0 Can't resume thread 0000000121CC 0000100121CC 0 MessageBoxTimeoutA 0000000121E0 0000100121E0 0 user32.dll 0000000121EC 0000100121EC 0 [%04d/%02d/%02d %02d:%02d:%02d.%03d] %s 000000012220 000010012220 0 .?AVXfsException@@ 000000012240 000010012240 0 .?AVXfsGetInfoException@@ 00000001225C 00001001225C 0 get cu info get info exception %d 000000012280 000010012280 0 get cu and store result unknown exception 0000000122AC 0000100122AC 0 get cu info query error 0000000122D0 0000100122D0 0 .?AVXfsDispenseException@@ 0000000122EC 0000100122EC 0 unknown exception 000000012300 000010012300 0 Dispense exception, code %d 00000001231C 00001001231C 0 ca5h units info received 000000012338 000010012338 0 try to set %d 000000012348 000010012348 0 Xfs::QueryCashUnitsFromAtm4 000000012364 000010012364 0 Xfs::QueryCashUnitsFromAtm3 000000012380 000010012380 0 Xfs::QueryCashUnitsFromAtm2 00000001239C 00001001239C 0 LFS found info about <%d> ca5h un1t5 0000000123C4 0000100123C4 0 XFS-> dispense end SUCCESSFUL DISPENSE 0000000123EC 0000100123EC 0 WFS_RESULT %d 000000012408 000010012408 0 .?AVHookLibException@@ 000000012420 000010012420 0 WFMFreeBuffer 000000012430 000010012430 0 WFMAllocateMore 000000012440 000010012440 0 WFMAllocateBuffer 000000012454 000010012454 0 WFSExecute 000000012460 000010012460 0 WFSFreeResult 000000012470 000010012470 0 WFSStartUp 00000001247C 00001001247C 0 WFSGetInfo 000000012488 000010012488 0 no xf5 module found 00000001249C 00001001249C 0 msxfs.dll 0000000124D8 0000100124D8 0 |INDEX:%d|CU state:%d|Type:%d|Values:%d|Currency_ID:%s|Money count:%d| 000000012524 000010012524 0 Founded < %d > commands 000000012540 000010012540 0 Command file deleted successfully 000000012564 000010012564 0 Reading command from a %s 000000012580 000010012580 0 %s\%s File pos Mem pos ID Text ======== ======= == ==== 000000012588 000010012588 0 FileCommandProvider::ReadXfsCommandFromFile -> 0000000125C0 0000100125C0 0 .?AVArgumentException@@ 0000000125D8 0000100125D8 0 exception 0000000125E8 0000100125E8 0 CommandProcessor created 000000012604 000010012604 0 DEFAULT command processed 000000012620 000010012620 0 NONE command processed 000000012638 000010012638 0 System error! 000000012648 000010012648 0 Dispense failed. CODE:%d 000000012664 000010012664 0 Multi Dispensing start 00000001267C 00001001267C 0 Dispense failed. Unknown reason. 0000000126A0 0000100126A0 0 Dispense failed. %d 0000000126B4 0000100126B4 0 Manual Dispensing 0000000126C8 0000100126C8 0 Display Balance -> exception, code:%d 0000000126F0 0000100126F0 0 Display Balance 1try -> exception, code:%d 00000001271C 00001001271C 0 CommandProcessor::ProcessCommand -> 000000012740 000010012740 0 SetMaximumDispenseSize:%d 00000001275C 00001001275C 0 NULL command processed 000000012774 000010012774 0 ICommandProcessor::ProcessCommand -> start method 0000000127A8 0000100127A8 0 Processing command #%d 0000000127C0 0000100127C0 0 Received 0000000127CD 0000100127CD 0 commands 0000000127D8 0000100127D8 0 exception cauch: %d 0000000127EC 0000100127EC 0 Exiting 0000000127F4 0000100127F4 0 Pausing 0000000127FC 0000100127FC 0 trying to dispense 000000012810 000010012810 0 R2CommandProcessor::ProcessGetRealBalance()1 000000012840 000010012840 0 cur disp service is |%d| 00000001285C 00001001285C 0 try toi set %d 00000001286C 00001001286C 0 ___log.txt 000000012878 000010012878 0 Deleting resources 000000012898 000010012898 0 .?AVXfsLoaderException@@ 0000000128B4 0000100128B4 0 uncatched 0000000128C0 0000100128C0 0 %s:%d 0000000128C8 0000100128C8 0 c:\atm\1 0000000128D4 0000100128D4 0 void CreateAllResources() 0000000128F0 0000100128F0 0 Xfs init error 000000012900 000010012900 0 Critical system error! 000000012918 000010012918 0 resources created 00000001292C 00001001292C 0 MH_UNKNOWN 000000012938 000010012938 0 MH_OK 000000012940 000010012940 0 MH_ERROR_ALREADY_INITIALIZED 000000012960 000010012960 0 MH_ERROR_NOT_INITIALIZED 00000001297C 00001001297C 0 MH_ERROR_ALREADY_CREATED 000000012998 000010012998 0 MH_ERROR_NOT_CREATED 0000000129B0 0000100129B0 0 MH_ERROR_ENABLED 0000000129C4 0000100129C4 0 MH_ERROR_DISABLED 0000000129D8 0000100129D8 0 MH_ERROR_NOT_EXECUTABLE 0000000129F0 0000100129F0 0 MH_ERROR_UNSUPPORTED_FUNCTION 000000012A10 000010012A10 0 MH_ERROR_MEMORY_ALLOC 000000012A28 000010012A28 0 MH_ERROR_MEMORY_PROTECT 000000012A40 000010012A40 0 MH_ERROR_MODULE_NOT_FOUND 000000012A5C 000010012A5C 0 MH_ERROR_FUNCTION_NOT_FOUND 000000012A78 000010012A78 0 (unknown) 000000012AD2 000010012AD2 0 YYYYY 000000012ADE 000010012ADE 0 YYYYYYYYYYYY 000000012AEC 000010012AEC 0 }YPPPPYYYYa 000000012B02 000010012B02 0 YYYYYYYYYYY 000000012BB4 000010012BB4 0 JJJJKRJJJJOLJJJJJJJJUE@JJJEYMFJ]JJJJJJJJJJJJJJacgNJJkmJJEmJJDEJJ 000000012C98 000010012C98 0 .?AVtype_info@@ 00000001300B 00001001300B 0 0!01070Q0W0a0q0w0 File pos Mem pos ID Text ======== ======= == ==== 000000013021 000010013021 0 1-1K1]1 00000001302D 00001001302D 0 1>2\2 000000013039 000010013039 0 3H3f3r3 000000013047 000010013047 0 4P4M5 000000013055 000010013055 0 :$;R; 00000001305F 00001001305F 0 ;.<D<c< 00000001306D 00001001306D 0 <5=;=r=x= 00000001307F 00001001307F 0 >2>j> 00000001309B 00001001309B 0 ?!?1?7?G?~? 0000000130BD 0000100130BD 0 0&0-0;0B0W0s0 0000000130CB 0000100130CB 0 0.1i1 0000000130DF 0000100130DF 0 2 3(3z3 0000000130ED 0000100130ED 0 3-4Q4a4y4 000000013103 000010013103 0 6&6:6 000000013119 000010013119 0 7'7c7 000000013129 000010013129 0 8#9X9}9 000000013159 000010013159 0 =<>F>d>w> 00000001316B 00001001316B 0 ?<?F?m?}? 000000013184 000010013184 0 30f0m0y0 000000013199 000010013199 0 0 1(141@1L1X1e1l1{1 0000000131C7 0000100131C7 0 4%4,4 0000000131DB 0000100131DB 0 5'5.545c5 0000000131EB 0000100131EB 0 6)6o6 0000000131F3 0000100131F3 0 7=7U7\7t7 0000000131FF 0000100131FF 0 7+8h8u8 000000013215 000010013215 0 949:9@9I9P9 00000001322B 00001001322B 0 :!:-:::A:G: 000000013241 000010013241 0 ;Q<a<r< 000000013253 000010013253 0 >,>q> 000000013271 000010013271 0 0+1v1 000000013279 000010013279 0 162>2 00000001328F 00001001328F 0 4-464Z4k4 00000001329B 00001001329B 0 4[5m5 0000000132AD 0000100132AD 0 787A7R7w7 0000000132BD 0000100132BD 0 7g8q8w8 0000000132CF 0000100132CF 0 9I:[: 0000000132F5 0000100132F5 0 3)5:5@5K5e5n5z5 00000001331F 00001001331F 0 5A6Q6b6p6u6 000000013339 000010013339 0 7/777<7b7g7~7 000000013359 000010013359 0 8$8)8O8T8k8s8x8 00000001337B 00001001337B 0 9<9A9X9 000000013395 000010013395 0 :R:q: 0000000133A1 0000100133A1 0 :3;_; 0000000133B1 0000100133B1 0 ;3<8<I<O< 0000000133C3 0000100133C3 0 =P>V>h>n> 0000000133FD 0000100133FD 0 1N1T1e1 00000001340D 00001001340D 0 1#2Q2p2 000000013421 000010013421 0 22383I3l3r3 000000013431 000010013431 0 334f4 00000001344F 00001001344F 0 6$626A6_6r6 00000001348D 00001001348D 0 :O:m: 000000013493 000010013493 0 :B;U; 0000000134A9 0000100134A9 0 =$=8===Q=_=w= 0000000134E3 0000100134E3 0 0<1r1 0000000134F3 0000100134F3 0 2A2I2z2 000000013507 000010013507 0 333v3 000000013517 000010013517 0 5/5V5 000000013535 000010013535 0 6N7U7p7 000000013547 000010013547 0 8!828@8E8 000000013565 000010013565 0 9G9L9S9[9j9x9 File pos Mem pos ID Text ======== ======= == ==== 000000013577 000010013577 0 :T:Y:q:y: 00000001359B 00001001359B 0 ="=2=p=~= 0000000135AD 0000100135AD 0 =[>s> 0000000135C1 0000100135C1 0 ?C?u?z? 0000000135DD 0000100135DD 0 0-0I0 000000013603 000010013603 0 364L4 00000001360D 00001001360D 0 5)5F5]5 00000001361D 00001001361D 0 627f7 000000013631 000010013631 0 909K9 000000013641 000010013641 0 :&;<; 00000001364D 00001001364D 0 <6<M< 00000001365B 00001001365B 0 =">V> 000000013661 000010013661 0 > ?;?v? 000000013689 000010013689 0 1"2E2U2 000000013693 000010013693 0 2"3E3U3 00000001369D 00001001369D 0 334T4r4 0000000136A7 0000100136A7 0 4=5M5 0000000136B1 0000100136B1 0 5;6K6 0000000136BF 0000100136BF 0 7C7[7m7 0000000136CD 0000100136CD 0 8.848Q8 0000000136E7 0000100136E7 0 9*:8: 0000000136FD 0000100136FD 0 <C<r< 00000001370B 00001001370B 0 =A=W= 000000013713 000010013713 0 =.><>M> 000000013723 000010013723 0 > ?)?7?@?Q?s? 00000001373C 00001001373C 0 80<0@0D0H0L0P0T0X0\0 000000013751 000010013751 0 0d0s0 00000001375B 00001001375B 0 0!1;1 000000013793 000010013793 0 666T6g6 0000000137A3 0000100137A3 0 6$7D7f7 0000000137AD 0000100137AD 0 848d8 0000000137B5 0000100137B5 0 8W9f9 0000000137BD 0000100137BD 0 9":U: 0000000137C7 0000100137C7 0 :,;7;Y; 0000000137CF 0000100137CF 0 ;e;w; 0000000137F1 0000100137F1 0 =&>U>n> 0000000137FB 0000100137FB 0 >#??? 000000013810 000010013810 0 40Q0a0v0 00000001381F 00001001381F 0 0I1p1 000000013835 000010013835 0 2+21262F2c2y2 000000013851 000010013851 0 3F3g3x3 00000001385B 00001001385B 0 4<4A4O4_4e4j4 000000013873 000010013873 0 5=5B5R5r5 000000013893 000010013893 0 73797M7S7g7u7 0000000138AD 0000100138AD 0 7A8_8g8 0000000138C3 0000100138C3 0 9!9'9?9_9h9o9u9|9 0000000138DF 0000100138DF 0 9K:X: 0000000138E7 0000100138E7 0 ;7;j; 0000000138F9 0000100138F9 0 >D>K> 000000013905 000010013905 0 ?#?*?@? 000000013918 000010013918 0 <0J0Q0 00000001393D 00001001393D 0 3,333<3B3J3R3[3w3 000000013951 000010013951 0 344B4N4\4k4s4y4 000000013979 000010013979 0 646I6{6 0000000139B5 0000100139B5 0 9!9%9)9-9195999=9A9E9I9M9l9u9 0000000139DF 0000100139DF 0 ;);U; 0000000139ED 0000100139ED 0 0)101"3 0000000139F7 0000100139F7 0 4S5e5 000000013A07 000010013A07 0 < <$<(<,<0<4< 000000013A2F 000010013A2F 0 >&>2>T>Z> File pos Mem pos ID Text ======== ======= == ==== 000000013A39 000010013A39 0 >f>l>z> 000000013A5D 000010013A5D 0 ?0?B? 000000013A81 000010013A81 0 0M0i0 000000013A93 000010013A93 0 0-1I1e1n1s1 000000013AA9 000010013AA9 0 2$2D2Y2y2 000000013ABB 000010013ABB 0 393a3y3 000000013ACD 000010013ACD 0 4!4<4U4 000000013AD5 000010013AD5 0 4g4p4y4 000000013AF1 000010013AF1 0 555:5m5 000000013B0D 000010013B0D 0 6%6*6U6Z6y6 000000013B1F 000010013B1F 0 717E7V7_7d7 000000013B35 000010013B35 0 8"858b8q8 000000013B57 000010013B57 0 9%9*9E9J9e9j9 000000013B77 000010013B77 0 :%:*:E:J:l: 000000013B89 000010013B89 0 ;);A;a;y; 000000013B99 000010013B99 0 <D<U<m< 000000013BEF 000010013BEF 0 2 2$2(2,2024282<2@2D2H2L2P2T2X2\2 000000013C11 000010013C11 0 2d2h2l2p2t2x2|2 000000013C63 000010013C63 0 3(3<3L3P3\3p3|3 000000013C8B 000010013C8B 0 4(44484D4L4T4h4t4 000000013CB7 000010013CB7 0 5$505L5T5\5h5 000000013CD9 000010013CD9 0 6$606L6T6 000000013CF7 000010013CF7 0 7,747@7\7d7x7 000000013D19 000010013D19 0 8 8(8<8L8x8 000000013D3F 000010013D3F 0 9$90989T9 000000013D63 000010013D63 0 : :<:D:L: 000000013D6D 000010013D6D 0 :l:p:t:x: 000000013D87 000010013D87 0 ;,;4;@;\;d;p; 000000013DAD 000010013DAD 0 <$<,<8<T<\<d<p< 000000013DD5 000010013DD5 0 =$=0=L=T=\=d=p= 000000013DF9 000010013DF9 0 >,><>P>d>p> 000000013E1B 000010013E1B 0 ?4?<?H?d?l?t?|? 000000013E4F 000010013E4F 0 0$0,040@0\0d0l0 000000013E7F 000010013E7F 0 1H1\1h1p1 000000013E97 000010013E97 0 2 2<2D2P2l2t2 000000013EB3 000010013EB3 0 3 3<3H3d3p3 000000013ECF 000010013ECF 0 4,4P4\4d4t4 000000013EE9 000010013EE9 0 505D5L5T5\5d5l5t5 000000013F0F 000010013F0F 0 6,646@6H6d6 000000013F2F 000010013F2F 0 7$7@7L7T7 000000013F55 000010013F55 0 8 8<8D8P8X8t8 000000013F75 000010013F75 0 909<9D9L9T9\9d9t9 000000013F95 000010013F95 0 :,:@:T:d:t: 000000013FC5 000010013FC5 0 0 0$0(0H0 00000000004D 00001000004D 0 !This program cannot be run in DOS mode. 0000000001F0 0000100001F0 0 .text 000000000218 000010000218 0 .rdata 00000000023F 00001000023F 0 @.data 000000000268 000010000268 0 .reloc 000000001BE9 000010001BE9 0 L$(SUV 000000001BF0 000010001BF0 0 D$8W3 000000001C25 000010001C25 0 D$HPQVU 000000002089 000010002089 0 D$<SUVW 0000000027F4 0000100027F4 0 d$hPUQ 000000002BB3 000010002BB3 0 L$(QV 000000002BE6 000010002BE6 0 D$ VP 000000002CA2 000010002CA2 0 D$$UP 000000002EEB 000010002EEB 0 l$ VW 00000000311B 00001000311B 0 l$,VW 000000003249 000010003249 0 L$$SUV File pos Mem pos ID Text ======== ======= == ==== 000000003250 000010003250 0 D$4WPQ 00000000327F 00001000327F 0 D$DPQVS 000000003780 000010003780 0 D$@_][ 0000000039A9 0000100039A9 0 T$(PR 000000003B19 000010003B19 0 D$$SUVW 000000003EDE 000010003EDE 0 \$dUVW3 000000003F73 000010003F73 0 L$,Qj 00000000409F 00001000409F 0 L$(Qj 00000000435A 00001000435A 0 L$<Qj 000000004477 000010004477 0 D$,SP 00000000451A 00001000451A 0 L$8QR 00000000470C 00001000470C 0 d$DSh 0000000047D5 0000100047D5 0 QSUVW 000000004B59 000010004B59 0 L$$SUV 000000004B60 000010004B60 0 D$4WPQ 000000004B8F 000010004B8F 0 D$DPQVS 000000004C89 000010004C89 0 L$$SUV 000000004C90 000010004C90 0 D$4WPQ 000000004CBF 000010004CBF 0 D$DPQVS 000000004EBC 000010004EBC 0 L$ QW 000000004F3F 000010004F3F 0 U4RQU 0000000053CC 0000100053CC 0 SUVW3 000000005408 000010005408 0 L$$Qj 000000005A18 000010005A18 0 SUVW3 000000005B49 000010005B49 0 D$|VW3 000000005CF9 000010005CF9 0 D$LSUV3 000000005F62 000010005F62 0 L$$PQ 000000006059 000010006059 0 D$8SUV3 0000000060C8 0000100060C8 0 \$<QSR 0000000060E7 0000100060E7 0 T$$QPR 000000006239 000010006239 0 D$8SUV3 0000000062AF 0000100062AF 0 \$<QRV 0000000062CB 0000100062CB 0 T$$PSR 00000000682B 00001000682B 0 SUVW3 0000000068CC 0000100068CC 0 L$0RVW 0000000068F9 0000100068F9 0 L$PQP 0000000069FA 0000100069FA 0 D$PPW 000000006BD5 000010006BD5 0 |$ QPW 000000006C69 000010006C69 0 D$8UVWj 000000006D04 000010006D04 0 L$HQP 000000006F97 000010006F97 0 ,SUVW 000000006FB3 000010006FB3 0 l$Dt# 00000000706D 00001000706D 0 d$(Ph$% 000000007347 000010007347 0 @SUVW 0000000074F5 0000100074F5 0 D$X VP 000000007629 000010007629 0 L$$SUV 000000007630 000010007630 0 D$4WPQ 00000000765F 00001000765F 0 D$DPQVS 0000000079DC 0000100079DC 0 t$hWj 000000007B23 000010007B23 0 D$ PQ 0000000082DA 0000100082DA 0 T$$QWVR 00000000831C 00001000831C 0 L$$PWVQ 000000008363 000010008363 0 D$,VP 0000000089CA 0000100089CA 0 T$$QWVR 000000008A0C 000010008A0C 0 L$$PWVQ 000000008A53 000010008A53 0 D$,VP 000000009EC6 000010009EC6 0 W*hd& 00000000A087 00001000A087 0 0SUVW 00000000A4D4 00001000A4D4 0 d$8Ph 00000000A4FD 00001000A4FD 0 t$(to File pos Mem pos ID Text ======== ======= == ==== 00000000AAC8 00001000AAC8 0 SUVW3 00000000ABA1 00001000ABA1 0 |$0t1 00000000ABD4 00001000ABD4 0 \$$hh! 00000000DF48 00001000DF48 0 t WVS 00000000DF75 00001000DF75 0 u7WPS 00000000DF86 00001000DF86 0 u&WVS 000000010D0E 000010010D0E 0 CloseHandle 000000010D1C 000010010D1C 0 ReadFile 000000010D28 000010010D28 0 GetFileSize 000000010D36 000010010D36 0 CreateFileA 000000010D44 000010010D44 0 WriteFile 000000010D50 000010010D50 0 SetFilePointer 000000010D62 000010010D62 0 GetLocalTime 000000010D72 000010010D72 0 GetModuleFileNameA 000000010D88 000010010D88 0 DeleteFileA 000000010D96 000010010D96 0 VirtualQuery 000000010DA6 000010010DA6 0 CreateThread 000000010DB6 000010010DB6 0 TerminateThread 000000010DC8 000010010DC8 0 Sleep 000000010DD0 000010010DD0 0 SuspendThread 000000010DE0 000010010DE0 0 ResumeThread 000000010DF0 000010010DF0 0 GetProcAddress 000000010E02 000010010E02 0 LoadLibraryA 000000010E12 000010010E12 0 GetModuleHandleA 000000010E26 000010010E26 0 VirtualFree 000000010E34 000010010E34 0 VirtualAlloc 000000010E44 000010010E44 0 FindNextFileA 000000010E54 000010010E54 0 FindFirstFileA 000000010E66 000010010E66 0 WaitForSingleObject 000000010E7C 000010010E7C 0 VirtualProtect 000000010E8C 000010010E8C 0 KERNEL32.dll 000000010E9C 000010010E9C 0 MessageBoxA 000000010EA8 000010010EA8 0 USER32.dll 000000010EB4 000010010EB4 0 ADVAPI32.dll 000000010EC4 000010010EC4 0 ??0Init@ios_base@std@@QAE@XZ 000000010EE4 000010010EE4 0 ??1Init@ios_base@std@@QAE@XZ 000000010F04 000010010F04 0 ??0_Winit@std@@QAE@XZ 000000010F1C 000010010F1C 0 ??1_Winit@std@@QAE@XZ 000000010F34 000010010F34 0 ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ 000000010F7E 000010010F7E 0 ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z 000000010FDA 000010010FDA 0 ?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB 000000011036 000010011036 0 ?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z 000000011088 000010011088 0 ?_Xlen@std@@YAXXZ 00000001109C 00001001109C 0 ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z 0000000110F0 0000100110F0 0 ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB 00000001113A 00001001113A 0 ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z 00000001118A 00001001118A 0 ?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z 0000000111D8 0000100111D8 0 ?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ 000000011226 000010011226 0 ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z 00000001127E 00001001127E 0 ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z 0000000112DA 0000100112DA 0 ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z 000000011332 000010011332 0 ??0bad_exception@std@@QAE@ABV01@@Z 000000011358 000010011358 0 ??1bad_exception@std@@UAE@XZ 000000011378 000010011378 0 ??0bad_exception@std@@QAE@PBD@Z 00000001139A 00001001139A 0 ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z 0000000113F6 0000100113F6 0 ?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z 000000011444 000010011444 0 ?_Xran@std@@YAXXZ 000000011458 000010011458 0 ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z 0000000114AE 0000100114AE 0 ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z 000000011500 000010011500 0 ?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z File pos Mem pos ID Text ======== ======= == ==== 000000011554 000010011554 0 ?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z 0000000115B2 0000100115B2 0 ?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z 000000011610 000010011610 0 ?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z 000000011662 000010011662 0 ??1_Lockit@std@@QAE@XZ 00000001167C 00001001167C 0 ??0_Lockit@std@@QAE@XZ 000000011694 000010011694 0 MSVCP60.dll 0000000116A2 0000100116A2 0 PathFileExistsA 0000000116B4 0000100116B4 0 PathAppendA 0000000116C0 0000100116C0 0 SHLWAPI.dll 0000000116CE 0000100116CE 0 __CxxFrameHandler 0000000116EA 0000100116EA 0 memmove 0000000116F4 0000100116F4 0 ??0exception@@QAE@ABV0@@Z 000000011718 000010011718 0 realloc 000000011722 000010011722 0 _CxxThrowException 000000011738 000010011738 0 ?what@exception@@UBEPBDXZ 000000011754 000010011754 0 ??1exception@@UAE@XZ 00000001176C 00001001176C 0 _vsnprintf 00000001177A 00001001177A 0 ??2@YAPAXI@Z 00000001178A 00001001178A 0 fclose 000000011794 000010011794 0 vfprintf 0000000117A0 0000100117A0 0 fopen 0000000117A8 0000100117A8 0 ??0exception@@QAE@XZ 0000000117C0 0000100117C0 0 fputs 0000000117C8 0000100117C8 0 fread 0000000117D8 0000100117D8 0 _ftol 0000000117E0 0000100117E0 0 malloc 0000000117EA 0000100117EA 0 memcpy 0000000117F4 0000100117F4 0 memset 0000000117FE 0000100117FE 0 __dllonexit 00000001180C 00001001180C 0 _onexit 000000011814 000010011814 0 MSVCRT.dll 000000011822 000010011822 0 ??1type_info@@UAE@XZ 00000001183A 00001001183A 0 _initterm 000000011846 000010011846 0 _adjust_fdiv 000000011856 000010011856 0 HeapCreate 000000011864 000010011864 0 InterlockedCompareExchange 000000011882 000010011882 0 InterlockedExchange 000000011898 000010011898 0 HeapDestroy 0000000118A6 0000100118A6 0 HeapFree 0000000118B2 0000100118B2 0 OpenThread 0000000118C0 0000100118C0 0 SetThreadContext 0000000118D4 0000100118D4 0 GetThreadContext 0000000118E8 0000100118E8 0 Thread32Next 0000000118F8 0000100118F8 0 HeapReAlloc 000000011906 000010011906 0 HeapAlloc 000000011912 000010011912 0 GetCurrentThreadId 000000011928 000010011928 0 GetCurrentProcessId 00000001193E 00001001193E 0 Thread32First 00000001194E 00001001194E 0 CreateToolhelp32Snapshot 00000001196A 00001001196A 0 FlushInstructionCache 000000011982 000010011982 0 GetCurrentProcess 0000000119D2 0000100119D2 0 Library.dll 0000000119DE 0000100119DE 0 iinit 000000012050 000010012050 0 .?AVexception@@ 000000012068 000010012068 0 .?AVException@@ 000000012080 000010012080 0 .?AVArgumentOutOfRangeException@@ 0000000120B8 0000100120B8 0 .?AVbad_exception@std@@ 0000000120D0 0000100120D0 0 bad exception 0000000120F0 0000100120F0 0 .?AVIOException@@ 000000012110 000010012110 0 .?AVFileNotFoundException@@ File pos Mem pos ID Text ======== ======= == ==== 000000012130 000010012130 0 Logger is now on new TraceLevel: %s 000000012154 000010012154 0 UNKNOWN 000000012160 000010012160 0 TRACE 000000012168 000010012168 0 NOTICE 000000012170 000010012170 0 WARNING 000000012178 000010012178 0 ERROR 000000012180 000010012180 0 FATAL 000000012188 000010012188 0 [%s]: %s 0000000121A0 0000100121A0 0 .?AVThreadException@@ 0000000121B8 0000100121B8 0 Can't resume thread 0000000121CC 0000100121CC 0 MessageBoxTimeoutA 0000000121E0 0000100121E0 0 user32.dll 0000000121EC 0000100121EC 0 [%04d/%02d/%02d %02d:%02d:%02d.%03d] %s 000000012220 000010012220 0 .?AVXfsException@@ 000000012240 000010012240 0 .?AVXfsGetInfoException@@ 00000001225C 00001001225C 0 get cu info get info exception %d 000000012280 000010012280 0 get cu and store result unknown exception 0000000122AC 0000100122AC 0 get cu info query error 0000000122D0 0000100122D0 0 .?AVXfsDispenseException@@ 0000000122EC 0000100122EC 0 unknown exception 000000012300 000010012300 0 Dispense exception, code %d 00000001231C 00001001231C 0 ca5h units info received 000000012338 000010012338 0 try to set %d 000000012348 000010012348 0 Xfs::QueryCashUnitsFromAtm4 000000012364 000010012364 0 Xfs::QueryCashUnitsFromAtm3 000000012380 000010012380 0 Xfs::QueryCashUnitsFromAtm2 00000001239C 00001001239C 0 LFS found info about <%d> ca5h un1t5 0000000123C4 0000100123C4 0 XFS-> dispense end SUCCESSFUL DISPENSE 0000000123EC 0000100123EC 0 WFS_RESULT %d 000000012408 000010012408 0 .?AVHookLibException@@ 000000012420 000010012420 0 WFMFreeBuffer 000000012430 000010012430 0 WFMAllocateMore 000000012440 000010012440 0 WFMAllocateBuffer 000000012454 000010012454 0 WFSExecute 000000012460 000010012460 0 WFSFreeResult 000000012470 000010012470 0 WFSStartUp 00000001247C 00001001247C 0 WFSGetInfo 000000012488 000010012488 0 no xf5 module found 00000001249C 00001001249C 0 msxfs.dll 0000000124D8 0000100124D8 0 |INDEX:%d|CU state:%d|Type:%d|Values:%d|Currency_ID:%s|Money count:%d| 000000012524 000010012524 0 Founded < %d > commands 000000012540 000010012540 0 Command file deleted successfully 000000012564 000010012564 0 Reading command from a %s 000000012580 000010012580 0 %s\%s 000000012588 000010012588 0 FileCommandProvider::ReadXfsCommandFromFile -> 0000000125C0 0000100125C0 0 .?AVArgumentException@@ 0000000125D8 0000100125D8 0 exception 0000000125E8 0000100125E8 0 CommandProcessor created 000000012604 000010012604 0 DEFAULT command processed 000000012620 000010012620 0 NONE command processed 000000012638 000010012638 0 System error! 000000012648 000010012648 0 Dispense failed. CODE:%d 000000012664 000010012664 0 Multi Dispensing start 00000001267C 00001001267C 0 Dispense failed. Unknown reason. 0000000126A0 0000100126A0 0 Dispense failed. %d 0000000126B4 0000100126B4 0 Manual Dispensing 0000000126C8 0000100126C8 0 Display Balance -> exception, code:%d 0000000126F0 0000100126F0 0 Display Balance 1try -> exception, code:%d 00000001271C 00001001271C 0 CommandProcessor::ProcessCommand -> 000000012740 000010012740 0 SetMaximumDispenseSize:%d File pos Mem pos ID Text ======== ======= == ==== 00000001275C 00001001275C 0 NULL command processed 000000012774 000010012774 0 ICommandProcessor::ProcessCommand -> start method 0000000127A8 0000100127A8 0 Processing command #%d 0000000127C0 0000100127C0 0 Received 0000000127CD 0000100127CD 0 commands 0000000127D8 0000100127D8 0 exception cauch: %d 0000000127EC 0000100127EC 0 Exiting 0000000127F4 0000100127F4 0 Pausing 0000000127FC 0000100127FC 0 trying to dispense 000000012810 000010012810 0 R2CommandProcessor::ProcessGetRealBalance()1 000000012840 000010012840 0 cur disp service is |%d| 00000001285C 00001001285C 0 try toi set %d 00000001286C 00001001286C 0 ___log.txt 000000012878 000010012878 0 Deleting resources 000000012898 000010012898 0 .?AVXfsLoaderException@@ 0000000128B4 0000100128B4 0 uncatched 0000000128C0 0000100128C0 0 %s:%d 0000000128C8 0000100128C8 0 c:\atm\1 0000000128D4 0000100128D4 0 void CreateAllResources() 0000000128F0 0000100128F0 0 Xfs init error 000000012900 000010012900 0 Critical system error! 000000012918 000010012918 0 resources created 00000001292C 00001001292C 0 MH_UNKNOWN 000000012938 000010012938 0 MH_OK 000000012940 000010012940 0 MH_ERROR_ALREADY_INITIALIZED 000000012960 000010012960 0 MH_ERROR_NOT_INITIALIZED 00000001297C 00001001297C 0 MH_ERROR_ALREADY_CREATED 000000012998 000010012998 0 MH_ERROR_NOT_CREATED 0000000129B0 0000100129B0 0 MH_ERROR_ENABLED 0000000129C4 0000100129C4 0 MH_ERROR_DISABLED 0000000129D8 0000100129D8 0 MH_ERROR_NOT_EXECUTABLE 0000000129F0 0000100129F0 0 MH_ERROR_UNSUPPORTED_FUNCTION 000000012A10 000010012A10 0 MH_ERROR_MEMORY_ALLOC 000000012A28 000010012A28 0 MH_ERROR_MEMORY_PROTECT 000000012A40 000010012A40 0 MH_ERROR_MODULE_NOT_FOUND 000000012A5C 000010012A5C 0 MH_ERROR_FUNCTION_NOT_FOUND 000000012A78 000010012A78 0 (unknown) 000000012AD2 000010012AD2 0 YYYYY 000000012ADE 000010012ADE 0 YYYYYYYYYYYY 000000012AEC 000010012AEC 0 }YPPPPYYYYa 000000012B02 000010012B02 0 YYYYYYYYYYY 000000012BB4 000010012BB4 0 JJJJKRJJJJOLJJJJJJJJUE@JJJEYMFJ]JJJJJJJJJJJJJJacgNJJkmJJEmJJDEJJ 000000012C98 000010012C98 0 .?AVtype_info@@ 00000001300B 00001001300B 0 0!01070Q0W0a0q0w0 000000013021 000010013021 0 1-1K1]1 00000001302D 00001001302D 0 1>2\2 000000013039 000010013039 0 3H3f3r3 000000013047 000010013047 0 4P4M5 000000013055 000010013055 0 :$;R; 00000001305F 00001001305F 0 ;.<D<c< 00000001306D 00001001306D 0 <5=;=r=x= 00000001307F 00001001307F 0 >2>j> 00000001309B 00001001309B 0 ?!?1?7?G?~? 0000000130BD 0000100130BD 0 0&0-0;0B0W0s0 0000000130CB 0000100130CB 0 0.1i1 0000000130DF 0000100130DF 0 2 3(3z3 0000000130ED 0000100130ED 0 3-4Q4a4y4 000000013103 000010013103 0 6&6:6 000000013119 000010013119 0 7'7c7 000000013129 000010013129 0 8#9X9}9 File pos Mem pos ID Text ======== ======= == ==== 000000013159 000010013159 0 =<>F>d>w> 00000001316B 00001001316B 0 ?<?F?m?}? 000000013184 000010013184 0 30f0m0y0 000000013199 000010013199 0 0 1(141@1L1X1e1l1{1 0000000131C7 0000100131C7 0 4%4,4 0000000131DB 0000100131DB 0 5'5.545c5 0000000131EB 0000100131EB 0 6)6o6 0000000131F3 0000100131F3 0 7=7U7\7t7 0000000131FF 0000100131FF 0 7+8h8u8 000000013215 000010013215 0 949:9@9I9P9 00000001322B 00001001322B 0 :!:-:::A:G: 000000013241 000010013241 0 ;Q<a<r< 000000013253 000010013253 0 >,>q> 000000013271 000010013271 0 0+1v1 000000013279 000010013279 0 162>2 00000001328F 00001001328F 0 4-464Z4k4 00000001329B 00001001329B 0 4[5m5 0000000132AD 0000100132AD 0 787A7R7w7 0000000132BD 0000100132BD 0 7g8q8w8 0000000132CF 0000100132CF 0 9I:[: 0000000132F5 0000100132F5 0 3)5:5@5K5e5n5z5 00000001331F 00001001331F 0 5A6Q6b6p6u6 000000013339 000010013339 0 7/777<7b7g7~7 000000013359 000010013359 0 8$8)8O8T8k8s8x8 00000001337B 00001001337B 0 9<9A9X9 000000013395 000010013395 0 :R:q: 0000000133A1 0000100133A1 0 :3;_; 0000000133B1 0000100133B1 0 ;3<8<I<O< 0000000133C3 0000100133C3 0 =P>V>h>n> 0000000133FD 0000100133FD 0 1N1T1e1 00000001340D 00001001340D 0 1#2Q2p2 000000013421 000010013421 0 22383I3l3r3 000000013431 000010013431 0 334f4 00000001344F 00001001344F 0 6$626A6_6r6 00000001348D 00001001348D 0 :O:m: 000000013493 000010013493 0 :B;U; 0000000134A9 0000100134A9 0 =$=8===Q=_=w= 0000000134E3 0000100134E3 0 0<1r1 0000000134F3 0000100134F3 0 2A2I2z2 000000013507 000010013507 0 333v3 000000013517 000010013517 0 5/5V5 000000013535 000010013535 0 6N7U7p7 000000013547 000010013547 0 8!828@8E8 000000013565 000010013565 0 9G9L9S9[9j9x9 000000013577 000010013577 0 :T:Y:q:y: 00000001359B 00001001359B 0 ="=2=p=~= 0000000135AD 0000100135AD 0 =[>s> 0000000135C1 0000100135C1 0 ?C?u?z? 0000000135DD 0000100135DD 0 0-0I0 000000013603 000010013603 0 364L4 00000001360D 00001001360D 0 5)5F5]5 00000001361D 00001001361D 0 627f7 000000013631 000010013631 0 909K9 000000013641 000010013641 0 :&;<; 00000001364D 00001001364D 0 <6<M< 00000001365B 00001001365B 0 =">V> 000000013661 000010013661 0 > ?;?v? 000000013689 000010013689 0 1"2E2U2 000000013693 000010013693 0 2"3E3U3 00000001369D 00001001369D 0 334T4r4 File pos Mem pos ID Text ======== ======= == ==== 0000000136A7 0000100136A7 0 4=5M5 0000000136B1 0000100136B1 0 5;6K6 0000000136BF 0000100136BF 0 7C7[7m7 0000000136CD 0000100136CD 0 8.848Q8 0000000136E7 0000100136E7 0 9*:8: 0000000136FD 0000100136FD 0 <C<r< 00000001370B 00001001370B 0 =A=W= 000000013713 000010013713 0 =.><>M> 000000013723 000010013723 0 > ?)?7?@?Q?s? 00000001373C 00001001373C 0 80<0@0D0H0L0P0T0X0\0 000000013751 000010013751 0 0d0s0 00000001375B 00001001375B 0 0!1;1 000000013793 000010013793 0 666T6g6 0000000137A3 0000100137A3 0 6$7D7f7 0000000137AD 0000100137AD 0 848d8 0000000137B5 0000100137B5 0 8W9f9 0000000137BD 0000100137BD 0 9":U: 0000000137C7 0000100137C7 0 :,;7;Y; 0000000137CF 0000100137CF 0 ;e;w; 0000000137F1 0000100137F1 0 =&>U>n> 0000000137FB 0000100137FB 0 >#??? 000000013810 000010013810 0 40Q0a0v0 00000001381F 00001001381F 0 0I1p1 000000013835 000010013835 0 2+21262F2c2y2 000000013851 000010013851 0 3F3g3x3 00000001385B 00001001385B 0 4<4A4O4_4e4j4 000000013873 000010013873 0 5=5B5R5r5 000000013893 000010013893 0 73797M7S7g7u7 0000000138AD 0000100138AD 0 7A8_8g8 0000000138C3 0000100138C3 0 9!9'9?9_9h9o9u9|9 0000000138DF 0000100138DF 0 9K:X: 0000000138E7 0000100138E7 0 ;7;j; 0000000138F9 0000100138F9 0 >D>K> 000000013905 000010013905 0 ?#?*?@? 000000013918 000010013918 0 <0J0Q0 00000001393D 00001001393D 0 3,333<3B3J3R3[3w3 000000013951 000010013951 0 344B4N4\4k4s4y4 000000013979 000010013979 0 646I6{6 0000000139B5 0000100139B5 0 9!9%9)9-9195999=9A9E9I9M9l9u9 0000000139DF 0000100139DF 0 ;);U; 0000000139ED 0000100139ED 0 0)101"3 0000000139F7 0000100139F7 0 4S5e5 000000013A07 000010013A07 0 < <$<(<,<0<4< 000000013A2F 000010013A2F 0 >&>2>T>Z> 000000013A39 000010013A39 0 >f>l>z> 000000013A5D 000010013A5D 0 ?0?B? 000000013A81 000010013A81 0 0M0i0 000000013A93 000010013A93 0 0-1I1e1n1s1 000000013AA9 000010013AA9 0 2$2D2Y2y2 000000013ABB 000010013ABB 0 393a3y3 000000013ACD 000010013ACD 0 4!4<4U4 000000013AD5 000010013AD5 0 4g4p4y4 000000013AF1 000010013AF1 0 555:5m5 000000013B0D 000010013B0D 0 6%6*6U6Z6y6 000000013B1F 000010013B1F 0 717E7V7_7d7 000000013B35 000010013B35 0 8"858b8q8 000000013B57 000010013B57 0 9%9*9E9J9e9j9 000000013B77 000010013B77 0 :%:*:E:J:l: 000000013B89 000010013B89 0 ;);A;a;y; 000000013B99 000010013B99 0 <D<U<m< File pos Mem pos ID Text ======== ======= == ==== 000000013BEF 000010013BEF 0 2 2$2(2,2024282<2@2D2H2L2P2T2X2\2 000000013C11 000010013C11 0 2d2h2l2p2t2x2|2 000000013C63 000010013C63 0 3(3<3L3P3\3p3|3 000000013C8B 000010013C8B 0 4(44484D4L4T4h4t4 000000013CB7 000010013CB7 0 5$505L5T5\5h5 000000013CD9 000010013CD9 0 6$606L6T6 000000013CF7 000010013CF7 0 7,747@7\7d7x7 000000013D19 000010013D19 0 8 8(8<8L8x8 000000013D3F 000010013D3F 0 9$90989T9 000000013D63 000010013D63 0 : :<:D:L: 000000013D6D 000010013D6D 0 :l:p:t:x: 000000013D87 000010013D87 0 ;,;4;@;\;d;p; 000000013DAD 000010013DAD 0 <$<,<8<T<\<d<p< 000000013DD5 000010013DD5 0 =$=0=L=T=\=d=p= 000000013DF9 000010013DF9 0 >,><>P>d>p> 000000013E1B 000010013E1B 0 ?4?<?H?d?l?t?|? 000000013E4F 000010013E4F 0 0$0,040@0\0d0l0 000000013E7F 000010013E7F 0 1H1\1h1p1 000000013E97 000010013E97 0 2 2<2D2P2l2t2 000000013EB3 000010013EB3 0 3 3<3H3d3p3 000000013ECF 000010013ECF 0 4,4P4\4d4t4 000000013EE9 000010013EE9 0 505D5L5T5\5d5l5t5 000000013F0F 000010013F0F 0 6,646@6H6d6 000000013F2F 000010013F2F 0 7$7@7L7T7 000000013F55 000010013F55 0 8 8<8D8P8X8t8 000000013F75 000010013F75 0 909<9D9L9T9\9d9t9 000000013F95 000010013F95 0 :,:@:T:d:t: 000000013FC5 000010013FC5 0 0 0$0(0H0
=== DOWNLOAD === Mirror provided by vx-underground.org, thx!