.- - -----÷M÷E÷N÷U÷------------------------------------------------------------- --- ---- -------------.
! WALL ! STATS ! GOODIES ! YARA ! FAQ ! RSS ! EMV !
`-------------- - --- ---------- -------- -------- -------- -------- ----------------- - ---- ---- --'
ATM MALWARE NOTICE
e3a6970d66bc4687b21381353826fabd469007c869efc711fdd0e4711aa77ffc
Date...........: 2016-08-26
Family.........: ATMripper
File name......: unpacked
File size......: 322.50 KB
Type file......: EXE/Windows
Virscan........: VT - HA
PDB Path found.: W:\ATMRipper\Release\ATMRipper.pdb
Documentation..: https://shasaurabh.blogspot.com/2018/01/analyzing-atm-malwares.html
Additional note: 0x402611: replace JE by JNZ and let magic hapen
Entropy:
Binary Histogram:
=== SCREENSHOT ===
=== PEDUMP REPORT ===
=== MZ Header ===
signature: "MZ"
bytes_in_last_block: 144 0x90
blocks_in_file: 3 3
num_relocs: 0 0
header_paragraphs: 4 4
min_extra_paragraphs: 0 0
max_extra_paragraphs: 65535 0xffff
ss: 0 0
sp: 184 0xb8
checksum: 0 0
ip: 0 0
cs: 0 0
reloc_table_offset: 64 0x40
overlay_number: 0 0
reserved0: 0 0
oem_id: 0 0
oem_info: 0 0
reserved2: 0 0
reserved3: 0 0
reserved4: 0 0
reserved5: 0 0
reserved6: 0 0
lfanew: 248 0xf8
=== DOS STUB ===
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno|
00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
=== RICH Header ===
LIB_ID VERSION TIMES_USED
205 cd 50929 c6f1 31 1f
4 4 8447 20ff 4 4
207 cf 50929 c6f1 67 43
206 ce 50929 c6f1 218 da
131 83 30729 7809 2 2
147 93 30729 7809 17 11
1 1 0 0 189 bd
211 d3 61219 ef23 9 9
204 cc 61030 ee66 1 1
=== PE Header ===
signature: "PE\x00\x00"
# IMAGE_FILE_HEADER:
Machine: 332 0x14c x86
NumberOfSections: 4 4
TimeDateStamp: "2016-07-10 18:26:51"
PointerToSymbolTable: 0 0
NumberOfSymbols: 0 0
SizeOfOptionalHeader: 224 0xe0
Characteristics: 259 0x103 RELOCS_STRIPPED, EXECUTABLE_IMAGE
32BIT_MACHINE
# IMAGE_OPTIONAL_HEADER32:
Magic: 267 0x10b 32-bit executable
LinkerVersion: 11.0
SizeOfCode: 164352 0x28200
SizeOfInitializedData: 185344 0x2d400
SizeOfUninitializedData: 0 0
AddressOfEntryPoint: 76038 0x12906
BaseOfCode: 4096 0x1000
BaseOfData: 172032 0x2a000
ImageBase: 4194304 0x400000
SectionAlignment: 4096 0x1000
FileAlignment: 512 0x200
OperatingSystemVersion: 5.1
ImageVersion: 0.0
SubsystemVersion: 5.1
Reserved1: 0 0
SizeOfImage: 364544 0x59000
SizeOfHeaders: 4096 0x1000
CheckSum: 0 0
Subsystem: 2 2 WINDOWS_GUI
DllCharacteristics: 33088 0x8140 DYNAMIC_BASE, NX_COMPAT
TERMINAL_SERVER_AWARE
SizeOfStackReserve: 1048576 0x100000
SizeOfStackCommit: 4096 0x1000
SizeOfHeapReserve: 1048576 0x100000
SizeOfHeapCommit: 4096 0x1000
LoaderFlags: 0 0
NumberOfRvaAndSizes: 16 0x10
=== DATA DIRECTORY ===
EXPORT rva:0x 0 size:0x 0
IMPORT rva:0x 35890 size:0x dc
RESOURCE rva:0x 0 size:0x 0
EXCEPTION rva:0x 0 size:0x 0
SECURITY rva:0x 0 size:0x 0
BASERELOC rva:0x 0 size:0x 0
DEBUG rva:0x 0 size:0x 0
ARCHITECTURE rva:0x 0 size:0x 0
GLOBALPTR rva:0x 0 size:0x 0
TLS rva:0x 0 size:0x 0
LOAD_CONFIG rva:0x 32520 size:0x 40
Bound_IAT rva:0x 0 size:0x 0
IAT rva:0x 0 size:0x 0
Delay_IAT rva:0x 0 size:0x 0
CLR_Header rva:0x 0 size:0x 0
rva:0x 0 size:0x 0
=== SECTIONS ===
NAME RVA VSZ RAW_SZ RAW_PTR nREL REL_PTR nLINE LINE_PTR FLAGS
.text 1000 281a2 28200 400 0 0 0 0 60000020 R-X CODE
.rdata 2a000 c842 ca00 28600 0 0 0 0 40000040 R-- IDATA
.data 37000 171c0 12200 35000 0 0 0 0 c0000040 RW- IDATA
.reloc 4f000 96ae 9800 47200 0 0 0 0 42000040 R-- IDATA DISCARDABLE
=== IMPORTS ===
MODULE_NAME HINT ORD FUNCTION_NAME
KERNEL32.DLL 0 GetTempPathA
KERNEL32.DLL 0 lstrcpyW
KERNEL32.DLL 0 SetEndOfFile
KERNEL32.DLL 0 CreateFileW
KERNEL32.DLL 0 LoadLibraryW
KERNEL32.DLL 0 OutputDebugStringW
KERNEL32.DLL 0 GetShortPathNameW
KERNEL32.DLL 0 ReadConsoleW
KERNEL32.DLL 0 SetFilePointer
KERNEL32.DLL 0 FreeEnvironmentStringsW
KERNEL32.DLL 0 GetEnvironmentStringsW
KERNEL32.DLL 0 GetCurrentProcessId
KERNEL32.DLL 0 QueryPerformanceCounter
KERNEL32.DLL 0 SetStdHandle
KERNEL32.DLL 0 lstrcatW
KERNEL32.DLL 0 CreateToolhelp32Snapshot
KERNEL32.DLL 0 Process32NextW
KERNEL32.DLL 0 GetModuleFileNameA
KERNEL32.DLL 0 Process32FirstW
KERNEL32.DLL 0 CopyFileA
KERNEL32.DLL 0 GetShortPathNameA
KERNEL32.DLL 0 GetEnvironmentVariableA
KERNEL32.DLL 0 GetModuleFileNameW
KERNEL32.DLL 0 GetWindowsDirectoryA
KERNEL32.DLL 0 GetModuleHandleW
KERNEL32.DLL 0 GetCurrentProcess
KERNEL32.DLL 0 CreateProcessW
KERNEL32.DLL 0 GetEnvironmentVariableW
KERNEL32.DLL 0 MultiByteToWideChar
KERNEL32.DLL 0 CreateThread
KERNEL32.DLL 0 CloseHandle
KERNEL32.DLL 0 WTSGetActiveConsoleSessionId
KERNEL32.DLL 0 CreateEventW
KERNEL32.DLL 0 GetLastError
KERNEL32.DLL 0 Sleep
KERNEL32.DLL 0 SetEvent
KERNEL32.DLL 0 WaitForSingleObject
KERNEL32.DLL 0 WriteConsoleW
KERNEL32.DLL 0 GetComputerNameA
KERNEL32.DLL 0 GetOEMCP
KERNEL32.DLL 0 GetACP
KERNEL32.DLL 0 IsValidCodePage
KERNEL32.DLL 0 HeapSize
KERNEL32.DLL 0 GetConsoleMode
KERNEL32.DLL 0 GetConsoleCP
KERNEL32.DLL 0 WriteFile
KERNEL32.DLL 0 FlushFileBuffers
KERNEL32.DLL 0 SetFilePointerEx
KERNEL32.DLL 0 ReadFile
KERNEL32.DLL 0 GetProcessHeap
KERNEL32.DLL 0 GetFileType
KERNEL32.DLL 0 GetStdHandle
KERNEL32.DLL 0 IsDebuggerPresent
KERNEL32.DLL 0 EnumSystemLocalesW
KERNEL32.DLL 0 GetUserDefaultLCID
KERNEL32.DLL 0 IsValidLocale
KERNEL32.DLL 0 GetLocaleInfoW
KERNEL32.DLL 0 LCMapStringW
KERNEL32.DLL 0 CompareStringW
KERNEL32.DLL 0 GetStartupInfoW
KERNEL32.DLL 0 TlsFree
KERNEL32.DLL 0 InterlockedIncrement
KERNEL32.DLL 0 InterlockedDecrement
KERNEL32.DLL 0 EncodePointer
KERNEL32.DLL 0 DecodePointer
KERNEL32.DLL 0 EnterCriticalSection
KERNEL32.DLL 0 LeaveCriticalSection
KERNEL32.DLL 0 DeleteCriticalSection
KERNEL32.DLL 0 WideCharToMultiByte
KERNEL32.DLL 0 GetStringTypeW
KERNEL32.DLL 0 HeapFree
KERNEL32.DLL 0 GetCurrentThreadId
KERNEL32.DLL 0 ExitThread
KERNEL32.DLL 0 GetProcAddress
KERNEL32.DLL 0 LoadLibraryExW
KERNEL32.DLL 0 ExitProcess
KERNEL32.DLL 0 GetModuleHandleExW
KERNEL32.DLL 0 AreFileApisANSI
KERNEL32.DLL 0 GetSystemTimeAsFileTime
KERNEL32.DLL 0 HeapReAlloc
KERNEL32.DLL 0 GetCommandLineA
KERNEL32.DLL 0 RaiseException
KERNEL32.DLL 0 RtlUnwind
KERNEL32.DLL 0 HeapAlloc
KERNEL32.DLL 0 InitializeCriticalSectionAndSpinCount
KERNEL32.DLL 0 GetCPInfo
KERNEL32.DLL 0 IsProcessorFeaturePresent
KERNEL32.DLL 0 UnhandledExceptionFilter
KERNEL32.DLL 0 SetUnhandledExceptionFilter
KERNEL32.DLL 0 SetLastError
KERNEL32.DLL 0 TerminateProcess
KERNEL32.DLL 0 TlsAlloc
KERNEL32.DLL 0 TlsGetValue
KERNEL32.DLL 0 TlsSetValue
ADVAPI32.dll 0 RegQueryInfoKeyW
ADVAPI32.dll 0 RegSetValueExW
ADVAPI32.dll 0 RegCloseKey
ADVAPI32.dll 0 AdjustTokenPrivileges
ADVAPI32.dll 0 RegOpenKeyExW
ADVAPI32.dll 0 RegDeleteValueW
ADVAPI32.dll 0 DuplicateTokenEx
ADVAPI32.dll 0 RegOpenKeyExA
ADVAPI32.dll 0 LookupPrivilegeValueW
ADVAPI32.dll 0 RegQueryValueExA
ADVAPI32.dll 0 OpenProcessToken
ADVAPI32.dll 0 CreateProcessAsUserA
ADVAPI32.dll 0 ControlService
ADVAPI32.dll 0 RegisterServiceCtrlHandlerW
ADVAPI32.dll 0 SetServiceStatus
ADVAPI32.dll 0 StartServiceW
ADVAPI32.dll 0 OpenServiceW
ADVAPI32.dll 0 StartServiceCtrlDispatcherW
ADVAPI32.dll 0 OpenSCManagerW
ADVAPI32.dll 0 DeleteService
ADVAPI32.dll 0 CloseServiceHandle
ADVAPI32.dll 0 CreateServiceW
ADVAPI32.dll 0 RegEnumKeyExA
GDI32.dll 0 GetStockObject
MSXFS.dll 0 WFSClose
MSXFS.dll 0 WFSAsyncExecute
MSXFS.dll 0 WFSFreeResult
MSXFS.dll 0 WFSGetInfo
MSXFS.dll 0 WFSExecute
MSXFS.dll 0 WFSRegister
MSXFS.dll 0 WFSOpen
MSXFS.dll 0 WFSCancelAsyncRequest
MSXFS.dll 0 WFSStartUp
MSXFS.dll 0 WFSCleanUp
ole32.dll 0 CoTaskMemFree
ole32.dll 0 CoInitialize
ole32.dll 0 CoUninitialize
ole32.dll 0 CoCreateInstance
SHELL32.dll 0 ShellExecuteW
SHELL32.dll 0 ShellExecuteA
USER32.dll 0 SetWindowTextA
USER32.dll 0 UpdateWindow
USER32.dll 0 EnableWindow
USER32.dll 0 DefWindowProcW
USER32.dll 0 DispatchMessageW
USER32.dll 0 TranslateMessage
USER32.dll 0 ShowWindow
USER32.dll 0 GetDesktopWindow
USER32.dll 0 BroadcastSystemMessageW
USER32.dll 0 CreateWindowExA
USER32.dll 0 GetWindowLongW
USER32.dll 0 RegisterClassExW
USER32.dll 0 LoadCursorW
USER32.dll 0 CreateWindowExW
USER32.dll 0 ExitWindowsEx
USER32.dll 0 SetTimer
USER32.dll 0 GetWindowRect
USER32.dll 0 GetMessageW
USER32.dll 0 PostQuitMessage
USER32.dll 0 RegisterWindowMessageW
USER32.dll 0 KillTimer
USER32.dll 0 LoadIconW
USERENV.dll 0 DestroyEnvironmentBlock
USERENV.dll 0 CreateEnvironmentBlock
WTSAPI32.dll 0 WTSQueryUserToken
XFS_CONF.dll 0 WFMQueryValue
XFS_CONF.dll 0 WFMOpenKey
XFS_CONF.dll 0 WFMEnumKey
XFS_CONF.dll 0 WFMCloseKey
=== Packer / Compiler ===
MS Visual C++ 6.0 - 8.0
File pos Mem pos ID Text
======== ======= == ====
00000000004D 00000040004D 0 !This program cannot be run in DOS mode.
0000000000D7 0000004000D7 0 oRichC
0000000001F0 0000004001F0 0 .text
000000000218 000000400218 0 .rdata
00000000023F 00000040023F 0 @.data
000000000268 000000400268 0 .reloc
000000000535 000000401135 0 ~,9~$t
0000000006DB 0000004012DB 0 tC97u?j
000000000786 000000401386 0 FYY;u
0000000007C9 0000004013C9 0 FYY;u
000000000B00 000000401700 0 D$XSV
000000000B47 000000401747 0 D$ Pj
000000000F61 000000401B61 0 SSSh&%@
00000000144B 00000040204B 0 WWCSW
0000000014A7 0000004020A7 0 WWWhL!@
0000000017B9 0000004023B9 0 SSSSS
000000001C47 000000402847 0 jd_;5
0000000024A3 0000004030A3 0 Nt Nu
000000002721 000000403321 0 QQVWj
000000003165 000000403D65 0 D$0SVW
0000000032BF 000000403EBF 0 9D$ u
0000000032CE 000000403ECE 0 |$8 s5Rj
000000003430 000000404030 0 D$0SVW
0000000034DD 0000004040DD 0 L$ Pj
00000000354E 00000040414E 0 CD$(j
000000003596 000000404196 0 9D$$u7
0000000035AA 0000004041AA 0 CL$(+
0000000035E1 0000004041E1 0 Ct$(+
000000003BDB 0000004047DB 0 G@9_8u
000000003E88 000000404A88 0 D$(SVW
000000003F2C 000000404B2C 0 t Huk
000000003F9C 000000404B9C 0 HHu @
000000005463 000000406063 0 t.;:u
0000000054DB 0000004060DB 0 VW=\t
000000005669 000000406269 0 t,;8u
000000005875 000000406475 0 t,;:u
000000005A21 000000406621 0 D$HSVW
000000005A86 000000406686 0 3J(3B,3
000000005AFB 0000004066FB 0 1F(1V,1FP1VTC
000000005E12 000000406A12 0 \$HVW
0000000070B8 000000407CB8 0 CM QPQ
0000000075AB 0000004081AB 0 CM QPQ
0000000075F1 0000004081F1 0 RRRRRRQP
000000007966 000000408566 0 PPPPPPVSW
000000008245 000000408E45 0 t.;:u
000000008327 000000408F27 0 tpNtIN
0000000086B8 0000004092B8 0 OhP C
0000000086C3 0000004092C3 0 YPhP C
0000000086DF 0000004092DF 0 (hT C
0000000086EA 0000004092EA 0 YPhT C
0000000089FF 0000004095FF 0 SSSSSS
000000008A86 000000409686 0 Phx C
000000009070 000000409C70 0 s>9>w:+>j
00000000A5E4 00000040B1E4 0 s6+1S
00000000A79C 00000040B39C 0 2tQHtNH
00000000AA4D 00000040B64D 0 ut9FTtoV
00000000AA7E 00000040B67E 0 9Vh~o
00000000AAE5 00000040B6E5 0 F$;Vh|
00000000ACAD 00000040B8AD 0 t.;:u
00000000ADFE 00000040B9FE 0 \t0HHt
File pos Mem pos ID Text
======== ======= == ====
00000000AE0A 00000040BA0A 0 Ht Hu:
00000000B73F 00000040C33F 0 s6+1S
00000000BF2B 00000040CB2B 0 Php$C
00000000C07C 00000040CC7C 0 D$ OW
00000000C386 00000040CF86 0 QQSVW
00000000C3BB 00000040CFBB 0 GF;:r
00000000CD8E 00000040D98E 0 u ;APu
00000000CDA2 00000040D9A2 0 Php$C
00000000CE16 00000040DA16 0 9Y t5
00000000CF1D 00000040DB1D 0 9wh~TV
00000000CF70 00000040DB70 0 F;wh|
00000000CF90 00000040DB90 0 +WL+OL3
00000000D2E8 00000040DEE8 0 CP tR
00000000D2EE 00000040DEEE 0 {L?uL
00000000D3F2 00000040DFF2 0 ~L}uA
00000000D958 00000040E558 0 9GD|0
00000000D9DA 00000040E5DA 0 ~Hau
00000000DE77 00000040EA77 0 FH<_u\
00000000DE83 00000040EA83 0 FH<.tP<[tL<\tH<*tD<|t@<
00000000DE9B 00000040EA9B 0 t<<$t8
00000000DEAB 00000040EAAB 0 FH<(t(<)t$<+t <?t
00000000DECF 00000040EACF 0 FH<"t
00000000DF01 00000040EB01 0 ?<fu
00000000DF0E 00000040EB0E 0 2<nu
00000000DF1B 00000040EB1B 0 %<ru
00000000EB01 00000040F701 0 SVjdX
00000001153A 00000041213A 0 uPVWhM
00000001298A 00000041358A 0 QQSVWd
000000012B45 000000413745 0 j hx9C
000000012B81 000000413781 0 SSSSS
000000012C07 000000413807 0 PWSWW
000000012C26 000000413826 0 WWWWW
000000012C7F 00000041387F 0 PPPPP
000000012F15 000000413B15 0 Ph<xC
00000001324A 000000413E4A 0 PPPPP
0000000133E9 000000413FE9 0 PRAQh
000000013809 000000414409 0 PP9E u
000000013A61 000000414661 0 j0h :C
00000001462B 00000041522B 0 ft!9q
000000016136 000000416D36 0 t5QVW
000000016376 000000416F76 0 PPPPPPPP
000000016C48 000000417848 0 PPPPP
000000016DB4 0000004179B4 0 jA[jZZ+
000000017267 000000417E67 0 PPPPP
00000001748F 00000041808F 0 3=<xC
0000000175A8 0000004181A8 0 t6h<xC
000000017615 000000418215 0 jdh8;C
00000001762E 00000041822E 0 j@j _W
000000017649 000000418249 0 Ph<xC
0000000176EE 0000004182EE 0 } j@W
000000017ACD 0000004186CD 0 Genuu_
000000017AD6 0000004186D6 0 ineIuV
000000017ADF 0000004186DF 0 nteluM3
000000019107 000000419D07 0 ~pjCXf
000000019383 000000419F83 0 <v5h:
000000019469 00000041A069 0 SSSSS
000000019640 00000041A240 0 VVVVV
00000001AEF2 00000041BAF2 0 < t8< t4
00000001AFCC 00000041BBCC 0 t@VSP
00000001B027 00000041BC27 0 PPPPP
File pos Mem pos ID Text
======== ======= == ====
00000001B144 00000041BD44 0 SPPP+
00000001B14D 00000041BD4D 0 FVWPP
00000001B173 00000041BD73 0 SVWPP
00000001B307 00000041BF07 0 PPPPP
00000001B375 00000041BF75 0 VVVVV
00000001B3AD 00000041BFAD 0 j.Yf;
00000001B416 00000041C016 0 j.Yf;
00000001B41C 00000041C01C 0 tyPVj@W
00000001B431 00000041C031 0 _tcPVj@
00000001B452 00000041C052 0 uCPVj
00000001B469 00000041C069 0 u#j,Xf;
00000001B490 00000041C090 0 PPPPP
00000001B49F 00000041C09F 0 SSSSS
00000001B56E 00000041C16E 0 >Cu/f9F
00000001B5E7 00000041C1E7 0 3=<xC
00000001B74B 00000041C34B 0 SSSSS
00000001B7A2 00000041C3A2 0 @PSjU
00000001B7C0 00000041C3C0 0 PPPPP
00000001B7FF 00000041C3FF 0 SSSSS
00000001BAF0 00000041C6F0 0 QQQQQ
00000001BBAC 00000041C7AC 0 j;Yf9
00000001BC26 00000041C826 0 j;Yf9
00000001BD77 00000041C977 0 PPPPP
00000001C10F 00000041CD0F 0 VVVVV
00000001C1A7 00000041CDA7 0 WVSj
00000001C449 00000041D049 0 RVSQSWV
00000001C484 00000041D084 0 RVSQj
00000001C58D 00000041D18D 0 QVVVj
00000001C7DE 00000041D3DE 0 <at-<rt"<wt
00000001C84E 00000041D44E 0 tRHtC
00000001C8D2 00000041D4D2 0 t;Ht+
00000001CA4F 00000041D64F 0 URPQQh
00000001D1B1 00000041DDB1 0 9E WW
00000001DC07 00000041E807 0 ,SVWj0X
00000001DD3B 00000041E93B 0 u'j0X
00000001DE65 00000041EA65 0 Wj0XPV
00000001DF04 00000041EB04 0 PjdSQ
00000001E06B 00000041EC6B 0 -jd[;
00000001E0BE 00000041ECBE 0 WWWWW
00000001E603 00000041F203 0 VVVVV
00000001E63F 00000041F23F 0 SVWjA_jZ+
00000001E6E7 00000041F2E7 0 uBjAYjZ+
00000001F003 00000041FC03 0 HHtVHHt
00000001F4FA 0000004200FA 0 >0t-N
00000001F922 000000420522 0 QVWSj
00000001FA0B 00000042060B 0 v N+D$
000000020376 000000420F76 0 ~';_t|%3
00000002038A 000000420F8A 0 wtVj
00000002039F 000000420F9F 0 ;_tr.
0000000206B0 0000004212B0 0 tO95d
000000020899 000000421499 0 t VV9u
000000020B31 000000421731 0 PjPW
000000020B48 000000421748 0 $PjQW
000000020B90 000000421790 0 *PjTW
000000020BA7 0000004217A7 0 +PjUW
000000020BBE 0000004217BE 0 ,PjVW
000000020BD8 0000004217D8 0 -PjWW
000000020BEF 0000004217EF 0 .PjRW
000000020C06 000000421806 0 /PjSW
000000020C7C 00000042187C 0 HPjPW
File pos Mem pos ID Text
======== ======= == ====
000000020C96 000000421896 0 LPjQW
000000020F6D 000000421B6D 0 <0|o<9
0000000214E3 0000004220E3 0 G Pj*S
0000000214F7 0000004220F7 0 G$Pj+S
00000002150B 00000042210B 0 G(Pj,S
00000002151F 00000042211F 0 G,Pj-S
000000021536 000000422136 0 G0Pj.S
00000002154A 00000042214A 0 G4Pj/S
000000021572 000000422172 0 G8PjDS
000000021589 000000422189 0 G<PjES
00000002159D 00000042219D 0 G@PjFS
0000000215B1 0000004221B1 0 GDPjGS
0000000215C5 0000004221C5 0 GHPjHS
0000000215DC 0000004221DC 0 GLPjIS
0000000215F0 0000004221F0 0 GPPjJS
000000021604 000000422204 0 GTPjKS
000000021618 000000422218 0 GXPjLS
00000002162F 00000042222F 0 G\PjMS
000000021657 000000422257 0 GdPjOS
00000002166B 00000042226B 0 GhPj8S
000000021682 000000422282 0 GlPj9S
000000021696 000000422296 0 GpPj:S
0000000216AA 0000004222AA 0 GtPj;S
0000000216BE 0000004222BE 0 GxPj<S
0000000216D5 0000004222D5 0 G|Pj=S
00000002171C 00000042231C 0 Pj@Sj
000000021A62 000000422662 0 PjOSj
000000021D10 000000422910 0 tHHt*Ht#
000000022230 000000422E30 0 uJSSR
0000000223E8 000000422FE8 0 SSSSS
0000000224F3 0000004230F3 0 SVWUj
000000022594 000000423194 0 ;t$,v-
000000022619 000000423219 0 UQPXY]Y[
000000022756 000000423356 0 PPPPP
000000022A64 000000423664 0 WWWWW
000000022B15 000000423715 0 PPPPP
000000022CD4 0000004238D4 0 Yu2Vj@h
000000022DCA 0000004239CA 0 tMj_S
000000022E22 000000423A22 0 PPPPP
000000022EFB 000000423AFB 0 @h-:B
000000023887 000000424487 0 r)f;q
000000023901 000000424501 0 r2f;A
0000000239AA 0000004245AA 0 SVjA[jZ
000000023A6F 00000042466F 0 jAZjZ
000000023D31 000000424931 0 SSSSV
000000023DBD 0000004249BD 0 SSSSV
000000023F66 000000424B66 0 PPPPP
000000024026 000000424C26 0 v N+D$
000000024166 000000424D66 0 Ht+Ht$Ht
000000025655 000000426255 0 +t"HHt
0000000256AB 0000004262AB 0 9] t"
000000026507 000000427107 0 SSSSS
0000000269E9 0000004275E9 0 jxYf;
0000000269F1 0000004275F1 0 jXYf;
000000026A1B 00000042761B 0 jxYf;
000000026A23 000000427623 0 jXYf;
000000026A4C 00000042764C 0 uHjAXf;
000000026D9A 00000042799A 0 j0Yf;
000000028E68 00000042A868 0 permission denied
000000028E7C 00000042A87C 0 file exists
File pos Mem pos ID Text
======== ======= == ====
000000028E88 00000042A888 0 no such device
000000028E98 00000042A898 0 filename too long
000000028EAC 00000042A8AC 0 device or resource busy
000000028EC4 00000042A8C4 0 io error
000000028ED0 00000042A8D0 0 directory not empty
000000028EE4 00000042A8E4 0 invalid argument
000000028EF8 00000042A8F8 0 no space on device
000000028F0C 00000042A90C 0 no such file or directory
000000028F28 00000042A928 0 function not supported
000000028F40 00000042A940 0 no lock available
000000028F54 00000042A954 0 not enough memory
000000028F68 00000042A968 0 resource unavailable try again
000000028F88 00000042A988 0 cross device link
000000028F9C 00000042A99C 0 operation canceled
000000028FB0 00000042A9B0 0 too many files open
000000028FC4 00000042A9C4 0 permission_denied
000000028FD8 00000042A9D8 0 address_in_use
000000028FE8 00000042A9E8 0 address_not_available
000000029000 00000042AA00 0 address_family_not_supported
000000029020 00000042AA20 0 connection_already_in_progress
000000029040 00000042AA40 0 bad_file_descriptor
000000029054 00000042AA54 0 connection_aborted
000000029068 00000042AA68 0 connection_refused
00000002907C 00000042AA7C 0 connection_reset
000000029090 00000042AA90 0 destination_address_required
0000000290B0 00000042AAB0 0 bad_address
0000000290BC 00000042AABC 0 host_unreachable
0000000290D0 00000042AAD0 0 operation_in_progress
0000000290E8 00000042AAE8 0 interrupted
0000000290F4 00000042AAF4 0 invalid_argument
000000029108 00000042AB08 0 already_connected
00000002911C 00000042AB1C 0 too_many_files_open
000000029130 00000042AB30 0 message_size
000000029140 00000042AB40 0 filename_too_long
000000029154 00000042AB54 0 network_down
000000029164 00000042AB64 0 network_reset
000000029174 00000042AB74 0 network_unreachable
000000029188 00000042AB88 0 no_buffer_space
000000029198 00000042AB98 0 no_protocol_option
0000000291AC 00000042ABAC 0 not_connected
0000000291BC 00000042ABBC 0 not_a_socket
0000000291CC 00000042ABCC 0 operation_not_supported
0000000291E4 00000042ABE4 0 protocol_not_supported
0000000291FC 00000042ABFC 0 wrong_protocol_type
000000029210 00000042AC10 0 timed_out
00000002921C 00000042AC1C 0 operation_would_block
000000029234 00000042AC34 0 address family not supported
000000029254 00000042AC54 0 address in use
000000029264 00000042AC64 0 address not available
00000002927C 00000042AC7C 0 already connected
000000029290 00000042AC90 0 argument list too long
0000000292A8 00000042ACA8 0 argument out of domain
0000000292C0 00000042ACC0 0 bad address
0000000292CC 00000042ACCC 0 bad file descriptor
0000000292E0 00000042ACE0 0 bad message
0000000292EC 00000042ACEC 0 broken pipe
0000000292F8 00000042ACF8 0 connection aborted
00000002930C 00000042AD0C 0 connection already in progress
00000002932C 00000042AD2C 0 connection refused
000000029340 00000042AD40 0 connection reset
File pos Mem pos ID Text
======== ======= == ====
000000029354 00000042AD54 0 destination address required
000000029374 00000042AD74 0 executable format error
00000002938C 00000042AD8C 0 file too large
00000002939C 00000042AD9C 0 host unreachable
0000000293B0 00000042ADB0 0 identifier removed
0000000293C4 00000042ADC4 0 illegal byte sequence
0000000293DC 00000042ADDC 0 inappropriate io control operation
000000029400 00000042AE00 0 invalid seek
000000029410 00000042AE10 0 is a directory
000000029420 00000042AE20 0 message size
000000029430 00000042AE30 0 network down
000000029440 00000042AE40 0 network reset
000000029450 00000042AE50 0 network unreachable
000000029464 00000042AE64 0 no buffer space
000000029474 00000042AE74 0 no child process
000000029488 00000042AE88 0 no link
000000029490 00000042AE90 0 no message available
0000000294A8 00000042AEA8 0 no message
0000000294B4 00000042AEB4 0 no protocol option
0000000294C8 00000042AEC8 0 no stream resources
0000000294DC 00000042AEDC 0 no such device or address
0000000294F8 00000042AEF8 0 no such process
000000029508 00000042AF08 0 not a directory
000000029518 00000042AF18 0 not a socket
000000029528 00000042AF28 0 not a stream
000000029538 00000042AF38 0 not connected
000000029548 00000042AF48 0 not supported
000000029558 00000042AF58 0 operation in progress
000000029570 00000042AF70 0 operation not permitted
000000029588 00000042AF88 0 operation not supported
0000000295A0 00000042AFA0 0 operation would block
0000000295B8 00000042AFB8 0 owner dead
0000000295C4 00000042AFC4 0 protocol error
0000000295D4 00000042AFD4 0 protocol not supported
0000000295EC 00000042AFEC 0 read only file system
000000029604 00000042B004 0 resource deadlock would occur
000000029624 00000042B024 0 result out of range
000000029638 00000042B038 0 state not recoverable
000000029650 00000042B050 0 stream timeout
000000029660 00000042B060 0 text file busy
000000029670 00000042B070 0 timed out
00000002967C 00000042B07C 0 too many files open in system
00000002969C 00000042B09C 0 too many links
0000000296AC 00000042B0AC 0 too many symbolic link levels
0000000296CC 00000042B0CC 0 value too large
0000000296DC 00000042B0DC 0 wrong protocol type
0000000297A0 00000042B1A0 0 bad allocation
0000000297F0 00000042B1F0 0 regex_error(error_collate): The expression contained an invalid collating element name.
000000029848 00000042B248 0 regex_error(error_ctype): The expression contained an invalid character class name.
0000000298A0 00000042B2A0 0 regex_error(error_escape): The expression contained an invalid escaped character, or a trailing escape.
000000029908 00000042B308 0 regex_error(error_backref): The expression contained an invalid back reference.
000000029958 00000042B358 0 regex_error(error_brack): The expression contained mismatched [ and ].
0000000299A0 00000042B3A0 0 regex_error(error_paren): The expression contained mismatched ( and ).
0000000299E8 00000042B3E8 0 regex_error(error_brace): The expression contained mismatched { and }.
000000029A30 00000042B430 0 regex_error(error_badbrace): The expression contained an invalid range in a { expression }.
000000029A90 00000042B490 0 regex_error(error_range): The expression contained an invalid character range, such as [b-a] in most encodings.
000000029B00 00000042B500 0 regex_error(error_space): There was insufficient memory to convert the expression into a finite state machine.
000000029B70 00000042B570 0 regex_error(error_badrepeat): One of *?+{ was not preceded by a valid regular expression.
000000029BD0 00000042B5D0 0 regex_error(error_complexity): The complexity of an attempted match against a regular expression exceeded a pre-set level.
000000029C50 00000042B650 0 regex_error(error_stack): There was insufficient memory to determine whether the regular expression could match the specified character sequence.
File pos Mem pos ID Text
======== ======= == ====
000000029CE4 00000042B6E4 0 regex_error(error_parse)
000000029D00 00000042B700 0 regex_error(error_syntax)
000000029D1C 00000042B71C 0 regex_error
000000029E4C 00000042B84C 0 0123456789abcdefghijklmnopqrstuvwxyz
000000029E80 00000042B880 0
000000029E9C 00000042B89C 0 0123456789abcdefghijklmnopqrstuvwxyz
000000029EEC 00000042B8EC 0 0123456789abcdefABCDEF
000000029FBC 00000042B9BC 0 Unknown exception
000000029FDC 00000042B9DC 0 RoInitialize
00000002A004 00000042BA04 0 RoUninitialize
00000002A034 00000042BA34 0 CorExitProcess
00000002A610 00000042C010 0 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]
00000002A651 00000042C051 0 abcdefghijklmnopqrstuvwxyz{|}~
00000002A790 00000042C190 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]
00000002A7D1 00000042C1D1 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
00000002A880 00000042C280 0 bad exception
00000002A8B0 00000042C2B0 0 FlsAlloc
00000002A8BC 00000042C2BC 0 FlsFree
00000002A8C4 00000042C2C4 0 FlsGetValue
00000002A8D0 00000042C2D0 0 FlsSetValue
00000002A8DC 00000042C2DC 0 InitializeCriticalSectionEx
00000002A8F8 00000042C2F8 0 CreateSemaphoreExW
00000002A90C 00000042C30C 0 SetThreadStackGuarantee
00000002A924 00000042C324 0 CreateThreadpoolTimer
00000002A93C 00000042C33C 0 SetThreadpoolTimer
00000002A950 00000042C350 0 WaitForThreadpoolTimerCallbacks
00000002A970 00000042C370 0 CloseThreadpoolTimer
00000002A988 00000042C388 0 CreateThreadpoolWait
00000002A9A0 00000042C3A0 0 SetThreadpoolWait
00000002A9B4 00000042C3B4 0 CloseThreadpoolWait
00000002A9C8 00000042C3C8 0 FlushProcessWriteBuffers
00000002A9E4 00000042C3E4 0 FreeLibraryWhenCallbackReturns
00000002AA04 00000042C404 0 GetCurrentProcessorNumber
00000002AA20 00000042C420 0 GetLogicalProcessorInformation
00000002AA40 00000042C440 0 CreateSymbolicLinkW
00000002AA54 00000042C454 0 SetDefaultDllDirectories
00000002AA70 00000042C470 0 EnumSystemLocalesEx
00000002AA84 00000042C484 0 CompareStringEx
00000002AA94 00000042C494 0 GetDateFormatEx
00000002AAA4 00000042C4A4 0 GetLocaleInfoEx
00000002AAB4 00000042C4B4 0 GetTimeFormatEx
00000002AAC4 00000042C4C4 0 GetUserDefaultLocaleName
00000002AAE0 00000042C4E0 0 IsValidLocaleName
00000002AAF4 00000042C4F4 0 LCMapStringEx
00000002AB04 00000042C504 0 GetCurrentPackageId
00000002CBD0 00000042E5D0 0 (null)
00000002CC09 00000042E609 0 ( 8PX
00000002CC11 00000042E611 0 700WP
00000002CC29 00000042E629 0 xpxxxx
00000002D754 00000042F154 0 SunMonTueWedThuFriSat
00000002D76C 00000042F16C 0 JanFebMarAprMayJunJulAugSepOctNovDec
00000002D7B0 00000042F1B0 0 Sunday
00000002D7B8 00000042F1B8 0 Monday
00000002D7C0 00000042F1C0 0 Tuesday
00000002D7C8 00000042F1C8 0 Wednesday
00000002D7D4 00000042F1D4 0 Thursday
00000002D7E0 00000042F1E0 0 Friday
00000002D7E8 00000042F1E8 0 Saturday
00000002D824 00000042F224 0 January
00000002D82C 00000042F22C 0 February
File pos Mem pos ID Text
======== ======= == ====
00000002D838 00000042F238 0 March
00000002D840 00000042F240 0 April
00000002D858 00000042F258 0 August
00000002D860 00000042F260 0 September
00000002D86C 00000042F26C 0 October
00000002D874 00000042F274 0 November
00000002D880 00000042F280 0 December
00000002D894 00000042F294 0 MM/dd/yy
00000002D8A0 00000042F2A0 0 dddd, MMMM dd, yyyy
00000002D8B4 00000042F2B4 0 HH:mm:ss
00000002DBCF 00000042F5CF 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]
00000002DC10 00000042F610 0 abcdefghijklmnopqrstuvwxyz{|}~
00000002DC58 00000042F658 0 UTF-8
00000002DC60 00000042F660 0 UTF-16LE
00000002DC6C 00000042F66C 0 UNICODE
00000002DCB8 00000042F6B8 0 log10
00000002DCF0 00000042F6F0 0 atan2
00000002DD14 00000042F714 0 floor
00000002DD2C 00000042F72C 0 ldexp
00000002DD34 00000042F734 0 _cabs
00000002DD3C 00000042F73C 0 _hypot
00000002DD4C 00000042F74C 0 frexp
00000002DD60 00000042F760 0 _logb
00000002DD68 00000042F768 0 _nextafter
00000002DD74 00000042F774 0 e+000
00000002DE1D 00000042F81D 0 ('8PW
00000002DE26 00000042F826 0 700PP
00000002DE41 00000042F841 0 xppwpp
00000002DE6C 00000042F86C 0 MessageBoxW
00000002DE78 00000042F878 0 GetActiveWindow
00000002DE88 00000042F888 0 GetLastActivePopup
00000002DE9C 00000042F89C 0 GetUserObjectInformationW
00000002DEB8 00000042F8B8 0 GetProcessWindowStation
00000002E058 00000042FA58 0 __based(
00000002E064 00000042FA64 0 __cdecl
00000002E06C 00000042FA6C 0 __pascal
00000002E078 00000042FA78 0 __stdcall
00000002E084 00000042FA84 0 __thiscall
00000002E090 00000042FA90 0 __fastcall
00000002E09C 00000042FA9C 0 __clrcall
00000002E0A8 00000042FAA8 0 __eabi
00000002E0B0 00000042FAB0 0 __ptr64
00000002E0B8 00000042FAB8 0 __restrict
00000002E0C4 00000042FAC4 0 __unaligned
00000002E0D0 00000042FAD0 0 restrict(
00000002E0E4 00000042FAE4 0 delete
00000002E108 00000042FB08 0 operator
00000002E189 00000042FB89 0 vftable'
00000002E195 00000042FB95 0 vbtable'
00000002E1A1 00000042FBA1 0 vcall'
00000002E1A9 00000042FBA9 0 typeof'
00000002E1B5 00000042FBB5 0 local static guard'
00000002E1CD 00000042FBCD 0 string'
00000002E1D9 00000042FBD9 0 vbase destructor'
00000002E1ED 00000042FBED 0 vector deleting destructor'
00000002E20D 00000042FC0D 0 default constructor closure'
00000002E22D 00000042FC2D 0 scalar deleting destructor'
00000002E24D 00000042FC4D 0 vector constructor iterator'
00000002E26D 00000042FC6D 0 vector destructor iterator'
00000002E28D 00000042FC8D 0 vector vbase constructor iterator'
File pos Mem pos ID Text
======== ======= == ====
00000002E2B1 00000042FCB1 0 virtual displacement map'
00000002E2CD 00000042FCCD 0 eh vector constructor iterator'
00000002E2F1 00000042FCF1 0 eh vector destructor iterator'
00000002E311 00000042FD11 0 eh vector vbase constructor iterator'
00000002E339 00000042FD39 0 copy constructor closure'
00000002E355 00000042FD55 0 udt returning'
00000002E371 00000042FD71 0 local vftable'
00000002E381 00000042FD81 0 local vftable constructor closure'
00000002E3A4 00000042FDA4 0 new[]
00000002E3AC 00000042FDAC 0 delete[]
00000002E3B9 00000042FDB9 0 omni callsig'
00000002E3C9 00000042FDC9 0 placement delete closure'
00000002E3E5 00000042FDE5 0 placement delete[] closure'
00000002E405 00000042FE05 0 managed vector constructor iterator'
00000002E42D 00000042FE2D 0 managed vector destructor iterator'
00000002E455 00000042FE55 0 eh vector copy constructor iterator'
00000002E47D 00000042FE7D 0 eh vector vbase copy constructor iterator'
00000002E4A9 00000042FEA9 0 dynamic initializer for '
00000002E4C5 00000042FEC5 0 dynamic atexit destructor for '
00000002E4E9 00000042FEE9 0 vector copy constructor iterator'
00000002E50D 00000042FF0D 0 vector vbase copy constructor iterator'
00000002E539 00000042FF39 0 managed vector copy constructor iterator'
00000002E565 00000042FF65 0 local static thread guard'
00000002E580 00000042FF80 0 Type Descriptor'
00000002E594 00000042FF94 0 Base Class Descriptor at (
00000002E5B0 00000042FFB0 0 Base Class Array'
00000002E5C4 00000042FFC4 0 Class Hierarchy Descriptor'
00000002E5E4 00000042FFE4 0 Complete Object Locator'
00000002E600 000000430000 0 CreateFile2
00000002F3D0 000000430DD0 0 1#SNAN
00000002F3D8 000000430DD8 0 1#IND
00000002F3E0 000000430DE0 0 1#INF
00000002F3E8 000000430DE8 0 1#QNAN
00000002F3F0 000000430DF0 0 bad locale name
00000002F404 000000430E04 0 generic
00000002F40C 000000430E0C 0 unknown error
00000002F41C 000000430E1C 0 iostream
00000002F428 000000430E28 0 iostream stream error
00000002F440 000000430E40 0 system
00000002F448 000000430E48 0 ios_base::badbit set
00000002F460 000000430E60 0 ios_base::failbit set
00000002F478 000000430E78 0 ios_base::eofbit set
00000002F490 000000430E90 0 alnum
00000002F498 000000430E98 0 alpha
00000002F4A0 000000430EA0 0 blank
00000002F4A8 000000430EA8 0 cntrl
00000002F4B4 000000430EB4 0 digit
00000002F4BC 000000430EBC 0 graph
00000002F4C4 000000430EC4 0 lower
00000002F4CC 000000430ECC 0 print
00000002F4D4 000000430ED4 0 punct
00000002F4DC 000000430EDC 0 space
00000002F4E8 000000430EE8 0 upper
00000002F4F4 000000430EF4 0 xdigit
00000002F59C 000000430F9C 0 Developed by kernyv@jabbim.com
00000002F5D4 000000430FD4 0 /autorun
00000002F5E0 000000430FE0 0 be59a724feae790b3f315edf71a8450888c021f113e3c2b471e174130c201852
00000002F624 000000431024 0 Developed by kernyv@jabbim.com
00000002F644 000000431044 0 service
00000002F64C 00000043104C 0 /uninstall
File pos Mem pos ID Text
======== ======= == ====
00000002F658 000000431058 0 f26a57da928d6f3e3480dfc7d03761161191bdb170e10ca15c7ac5de6912945c
00000002F6BC 0000004310BC 0 /install
00000002F6C8 0000004310C8 0 692cdaf6e42ab3a4f307e5d047249f7b30ceddd6bc88f22ca032412419bd62b7
00000002F70C 00000043110C 0 install
00000002F714 000000431114 0 /cleanup
00000002F720 000000431120 0 0679c7c0c9b0d6919c12cbc087e942d7bf48d3a78cd3ec80321fbfd1b33a1904
00000002F764 000000431164 0 remove
00000002F76C 00000043116C 0 start
00000002F77C 00000043117C 0 /stop
00000002F784 000000431184 0 CDM: %s
00000002F790 000000431190 0 CDM: Unknown
00000002F7A4 0000004311A4 0 IDC: %s
00000002F7B0 0000004311B0 0 IDC: Unknown
00000002F7C4 0000004311C4 0 PIN: %s
00000002F7D0 0000004311D0 0 PIN: Unknown
00000002F7E4 0000004311E4 0 hostname
00000002F7F0 0000004311F0 0 \temp\clnup.dat
00000002F820 000000431220 0 \temp\clnup.dat
00000002F830 000000431230 0 /autorun
00000002F83C 00000043123C 0 taskkill /IM dbackup.exe /T /F
00000002F85C 00000043125C 0 \System32\dbackup.exe
00000002F874 000000431274 0 /service
00000002F920 000000431320 0 BUTTON
00000002F928 000000431328 0 hostname
00000002F934 000000431334 0 HOSTNAME: Unknown
00000002F94C 00000043134C 0 CDM: Unknown
00000002F960 000000431360 0 PIN: Unknown
00000002F974 000000431374 0 IDC: Unknown
00000002F994 000000431394 0 static
00000002F99C 00000043139C 0 HOSTNAME: Unknown
00000002F9B4 0000004313B4 0 Dispensing %d items from cash unit #%d
00000002F9E4 0000004313E4 0 CleanUp
00000002F9F4 0000004313F4 0 /cleanup
00000002FA04 000000431404 0 Uninstall
00000002FA18 000000431418 0 Uninstall Service
00000002FA34 000000431434 0 Network Disable
00000002FA4C 00000043144C 0 Network Enable
00000002FA64 000000431464 0 DISPENSE
00000002FA70 000000431470 0 SETTINGS
00000002FA84 000000431484 0 REBOOT
00000002FA8C 00000043148C 0 %s:%d (%d) = %d
00000002FA9D 00000043149D 0 INIT:%d = %d, %d%%
00000002FAC0 0000004314C0 0 1.Ignore cassete balance
00000002FADC 0000004314DC 0 2.CLEAN LOGS
00000002FAEC 0000004314EC 0 3.HIDE
00000002FAF4 0000004314F4 0 4.BACK
00000002FAFC 0000004314FC 0 5.UNINSTALL
00000002FB08 000000431508 0 6.UNINSTALL SERVICE
00000002FB1C 00000043151C 0 7.NETWORK: ENABLE
00000002FB30 000000431530 0 0.NETWORK: DISABLE
00000002FB44 000000431544 0 [%Y.%m.%d %H:%M:%S]
00000002FC1C 00000043161C 0 WFS_PIN_FK_0
00000002FC2C 00000043162C 0 WFS_PIN_FK_1
00000002FC3C 00000043163C 0 WFS_PIN_FK_2
00000002FC4C 00000043164C 0 WFS_PIN_FK_3
00000002FC5C 00000043165C 0 WFS_PIN_FK_4
00000002FC6C 00000043166C 0 WFS_PIN_FK_5
00000002FC7C 00000043167C 0 WFS_PIN_FK_6
00000002FC8C 00000043168C 0 WFS_PIN_FK_7
00000002FC9C 00000043169C 0 WFS_PIN_FK_8
File pos Mem pos ID Text
======== ======= == ====
00000002FCAC 0000004316AC 0 WFS_PIN_FK_9
00000002FCBC 0000004316BC 0 WFS_PIN_FK_ENTER
00000002FCD0 0000004316D0 0 WFS_PIN_FK_CANCEL
00000002FCE4 0000004316E4 0 WFS_PIN_FK_CLEAR
00000002FCF8 0000004316F8 0 WFS_PIN_FK_BACKSPACE
00000002FD10 000000431710 0 WFS_PIN_FK_HELP
00000002FD20 000000431720 0 WFS_PIN_FK_DECPOINT
00000002FD34 000000431734 0 WFS_PIN_FK_00
00000002FD44 000000431744 0 WFS_PIN_FK_000
00000002FD54 000000431754 0 WFS_PIN_FK_RES1
00000002FD64 000000431764 0 WFS_PIN_FK_RES2
00000002FD74 000000431774 0 WFS_PIN_FK_RES3
00000002FD84 000000431784 0 WFS_PIN_FK_RES4
00000002FD94 000000431794 0 WFS_PIN_FK_RES5
00000002FDA4 0000004317A4 0 WFS_PIN_FK_RES6
00000002FDB4 0000004317B4 0 WFS_PIN_FK_RES7
00000002FDC4 0000004317C4 0 WFS_PIN_FK_RES8
00000002FDD4 0000004317D4 0 WFS_PIN_FK_OEM1
00000002FDE4 0000004317E4 0 WFS_PIN_FK_OEM2
00000002FDF4 0000004317F4 0 WFS_PIN_FK_OEM3
00000002FE04 000000431804 0 WFS_PIN_FK_OEM4
00000002FE14 000000431814 0 WFS_PIN_FK_OEM5
00000002FE24 000000431824 0 WFS_PIN_FK_OEM6
00000002FE34 000000431834 0 WFS_UNKNOWN_KEY
00000002FE44 000000431844 0 \sd.exe
00000002FE4C 00000043184C 0 taskkill /IM aptra* /T /F
00000002FE68 000000431868 0 taskkill /IM ncr* /T /F
00000002FE80 000000431880 0 taskkill /IM java.exe /T /F
00000002FE9C 00000043189C 0 taskkill /IM wrapper.exe /T /F
00000002FEBC 0000004318BC 0 taskkill /IM aiw.exe /T /F
00000002FED8 0000004318D8 0 taskkill /IM *came* /T /F
00000002FEF4 0000004318F4 0 taskkill /IM snmp.exe /T /F
00000002FF10 000000431910 0 taskkill /IM *gbr* /T /F
00000002FF2C 00000043192C 0 taskkill /IM ul*.exe /T /F
00000002FF48 000000431948 0 -accepteula -p 8 -a -q -s d:\*
00000002FF68 000000431968 0 -accepteula -p 8 -a -q -s e:\*
00000002FF88 000000431988 0 -accepteula -p 8 -a -q -s f:\*
00000002FFA8 0000004319A8 0 -accepteula -p 8 -a -q -s g:\*
00000002FFC8 0000004319C8 0 -accepteula -p 8 -a -q -s h:\*
00000002FFE8 0000004319E8 0 -accepteula -p 8 -a -q -s c:\*.log
00000003000C 000000431A0C 0 -accepteula -p 8 -a -q -s c:\*.jrn
000000030030 000000431A30 0 -accepteula -p 8 -a -q -s c:\*.trc
000000030054 000000431A54 0 -accepteula -p 8 -a -q -s c:\*.xml
000000030078 000000431A78 0 -accepteula -p 8 -a -q -s c:\*.zip
00000003009C 000000431A9C 0 -accepteula -p 8 -a -q -s c:\*.bak
0000000300C0 000000431AC0 0 -accepteula -p 8 -a -q -s c:\*.err
0000000300E4 000000431AE4 0 -accepteula -p 8 -a -q -s c:\*.idb
000000030108 000000431B08 0 -accepteula -p 8 -a -q -s c:\*.idx
00000003012C 000000431B2C 0 -accepteula -p 8 -a -q -s c:\*.dat
000000030150 000000431B50 0 -accepteula -p 8 -a -q -s c:\*.gsb
000000030174 000000431B74 0 -accepteula -p 8 -a -q -s c:\*.txc
000000030198 000000431B98 0 -accepteula -p 8 -a -q -s c:\*
0000000301B8 000000431BB8 0 APTRA
0000000301C0 000000431BC0 0 C:\Program Files\NCR Aptra\bin\NCRPRS.exe
0000000301EC 000000431BEC 0 NCRPRS
0000000301F4 000000431BF4 0 Agilis
0000000301FC 000000431BFC 0 C:\Program Files\Diebold\Agilis Startup\DBackup.exe
000000030230 000000431C30 0 DBackup
000000030238 000000431C38 0 FwLoadPm.exe
000000030248 000000431C48 0 C:\Probase\cscw32\bin\FwLoadPm.exe
File pos Mem pos ID Text
======== ======= == ====
00000003026C 000000431C6C 0 FwLoadPm
00000003043C 000000431E3C 0 SOFTWARE\Microsoft\Windows\CurrentVersion
0000000304E4 000000431EE4 0 ProductId
0000000305D0 000000431FD0 0 ComSpec
000000030610 000000432010 0 Logical cash unit with ID:%d, contains %d physical cash units
000000030658 000000432058 0 .DEFAULT\XFS\LOGICAL_SERVICES
000000030678 000000432078 0 %s\%s
000000030680 000000432080 0 class
000000030688 000000432088 0 LOGICAL_SERVICES
00000003069C 00000043209C 0 class
0000000306B0 0000004320B0 0 alnum
0000000306B8 0000004320B8 0 alpha
0000000306C0 0000004320C0 0 blank
0000000306C8 0000004320C8 0 cntrl
0000000306D4 0000004320D4 0 digit
0000000306DC 0000004320DC 0 graph
0000000306E4 0000004320E4 0 lower
0000000306EC 0000004320EC 0 print
0000000306F4 0000004320F4 0 punct
0000000306FC 0000004320FC 0 space
000000030708 000000432108 0 upper
000000030714 000000432114 0 xdigit
0000000307C8 0000004321C8 0 \D*(\d{13,19})=
0000000307DC 0000004321DC 0 .*+?[]|\-{},:=!
0000000307F4 0000004321F4 0 string too long
000000030804 000000432204 0 invalid string position
00000003081C 00000043221C 0 vector<T> too long
000000030830 000000432230 0 bad cast
00000003083C 00000043223C 0 map/set<T> too long
0000000309F0 0000004323F0 0 0123456789abcdef
000000030A04 000000432404 0 invalid map<K, T> key
000000030A54 000000432454 0 vector<bool> too long
000000030A70 000000432470 0 abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789_
000000030B80 000000432580 0 W:\ATMRipper\Release\ATMRipper.pdb
000000034220 000000435C20 0 KERNEL32.DLL
00000003422D 000000435C2D 0 ADVAPI32.dll
00000003423A 000000435C3A 0 GDI32.dll
000000034244 000000435C44 0 MSXFS.dll
00000003424E 000000435C4E 0 ole32.dll
000000034258 000000435C58 0 SHELL32.dll
000000034264 000000435C64 0 USER32.dll
00000003426F 000000435C6F 0 USERENV.dll
00000003427B 000000435C7B 0 WTSAPI32.dll
000000034288 000000435C88 0 XFS_CONF.dll
000000034298 000000435C98 0 GetTempPathA
0000000342A6 000000435CA6 0 lstrcpyW
0000000342B0 000000435CB0 0 SetEndOfFile
0000000342BE 000000435CBE 0 CreateFileW
0000000342CC 000000435CCC 0 LoadLibraryW
0000000342DA 000000435CDA 0 OutputDebugStringW
0000000342EE 000000435CEE 0 GetShortPathNameW
000000034302 000000435D02 0 ReadConsoleW
000000034310 000000435D10 0 SetFilePointer
000000034320 000000435D20 0 FreeEnvironmentStringsW
00000003433A 000000435D3A 0 GetEnvironmentStringsW
000000034352 000000435D52 0 GetCurrentProcessId
000000034368 000000435D68 0 QueryPerformanceCounter
000000034382 000000435D82 0 SetStdHandle
000000034390 000000435D90 0 lstrcatW
00000003439A 000000435D9A 0 CreateToolhelp32Snapshot
File pos Mem pos ID Text
======== ======= == ====
0000000343B4 000000435DB4 0 Process32NextW
0000000343C4 000000435DC4 0 GetModuleFileNameA
0000000343D8 000000435DD8 0 Process32FirstW
0000000343EA 000000435DEA 0 CopyFileA
0000000343F6 000000435DF6 0 GetShortPathNameA
00000003440A 000000435E0A 0 GetEnvironmentVariableA
000000034424 000000435E24 0 GetModuleFileNameW
000000034438 000000435E38 0 GetWindowsDirectoryA
00000003444E 000000435E4E 0 GetModuleHandleW
000000034460 000000435E60 0 GetCurrentProcess
000000034474 000000435E74 0 CreateProcessW
000000034484 000000435E84 0 GetEnvironmentVariableW
00000003449E 000000435E9E 0 MultiByteToWideChar
0000000344B4 000000435EB4 0 CreateThread
0000000344C2 000000435EC2 0 CloseHandle
0000000344D0 000000435ED0 0 WTSGetActiveConsoleSessionId
0000000344EE 000000435EEE 0 CreateEventW
0000000344FC 000000435EFC 0 GetLastError
00000003450A 000000435F0A 0 Sleep
000000034512 000000435F12 0 SetEvent
00000003451C 000000435F1C 0 WaitForSingleObject
000000034532 000000435F32 0 WriteConsoleW
000000034542 000000435F42 0 GetComputerNameA
000000034554 000000435F54 0 GetOEMCP
00000003455E 000000435F5E 0 GetACP
000000034566 000000435F66 0 IsValidCodePage
000000034578 000000435F78 0 HeapSize
000000034582 000000435F82 0 GetConsoleMode
000000034592 000000435F92 0 GetConsoleCP
0000000345A0 000000435FA0 0 WriteFile
0000000345AC 000000435FAC 0 FlushFileBuffers
0000000345BE 000000435FBE 0 SetFilePointerEx
0000000345D0 000000435FD0 0 ReadFile
0000000345DA 000000435FDA 0 GetProcessHeap
0000000345EA 000000435FEA 0 GetFileType
0000000345F8 000000435FF8 0 GetStdHandle
000000034606 000000436006 0 IsDebuggerPresent
00000003461A 00000043601A 0 EnumSystemLocalesW
00000003462E 00000043602E 0 GetUserDefaultLCID
000000034642 000000436042 0 IsValidLocale
000000034652 000000436052 0 GetLocaleInfoW
000000034662 000000436062 0 LCMapStringW
000000034670 000000436070 0 CompareStringW
000000034680 000000436080 0 GetStartupInfoW
000000034692 000000436092 0 TlsFree
00000003469C 00000043609C 0 InterlockedIncrement
0000000346B2 0000004360B2 0 InterlockedDecrement
0000000346C8 0000004360C8 0 EncodePointer
0000000346D8 0000004360D8 0 DecodePointer
0000000346E8 0000004360E8 0 EnterCriticalSection
0000000346FE 0000004360FE 0 LeaveCriticalSection
000000034714 000000436114 0 DeleteCriticalSection
00000003472C 00000043612C 0 WideCharToMultiByte
000000034742 000000436142 0 GetStringTypeW
000000034752 000000436152 0 HeapFree
00000003475C 00000043615C 0 GetCurrentThreadId
000000034770 000000436170 0 ExitThread
00000003477C 00000043617C 0 GetProcAddress
00000003478C 00000043618C 0 LoadLibraryExW
00000003479C 00000043619C 0 ExitProcess
File pos Mem pos ID Text
======== ======= == ====
0000000347AA 0000004361AA 0 GetModuleHandleExW
0000000347BE 0000004361BE 0 AreFileApisANSI
0000000347D0 0000004361D0 0 GetSystemTimeAsFileTime
0000000347EA 0000004361EA 0 HeapReAlloc
0000000347F8 0000004361F8 0 GetCommandLineA
00000003480A 00000043620A 0 RaiseException
00000003481A 00000043621A 0 RtlUnwind
000000034826 000000436226 0 HeapAlloc
000000034832 000000436232 0 InitializeCriticalSectionAndSpinCount
00000003485A 00000043625A 0 GetCPInfo
000000034866 000000436266 0 IsProcessorFeaturePresent
000000034882 000000436282 0 UnhandledExceptionFilter
00000003489C 00000043629C 0 SetUnhandledExceptionFilter
0000000348BA 0000004362BA 0 SetLastError
0000000348C8 0000004362C8 0 TerminateProcess
0000000348DA 0000004362DA 0 TlsAlloc
0000000348E4 0000004362E4 0 TlsGetValue
0000000348F2 0000004362F2 0 TlsSetValue
000000034900 000000436300 0 RegQueryInfoKeyW
000000034912 000000436312 0 RegSetValueExW
000000034922 000000436322 0 RegCloseKey
000000034930 000000436330 0 AdjustTokenPrivileges
000000034948 000000436348 0 RegOpenKeyExW
000000034958 000000436358 0 RegDeleteValueW
00000003496A 00000043636A 0 DuplicateTokenEx
00000003497C 00000043637C 0 RegOpenKeyExA
00000003498C 00000043638C 0 LookupPrivilegeValueW
0000000349A4 0000004363A4 0 RegQueryValueExA
0000000349B6 0000004363B6 0 OpenProcessToken
0000000349C8 0000004363C8 0 CreateProcessAsUserA
0000000349DE 0000004363DE 0 ControlService
0000000349EE 0000004363EE 0 RegisterServiceCtrlHandlerW
000000034A0C 00000043640C 0 SetServiceStatus
000000034A1E 00000043641E 0 StartServiceW
000000034A2E 00000043642E 0 OpenServiceW
000000034A3C 00000043643C 0 StartServiceCtrlDispatcherW
000000034A5A 00000043645A 0 OpenSCManagerW
000000034A6A 00000043646A 0 DeleteService
000000034A7A 00000043647A 0 CloseServiceHandle
000000034A8E 00000043648E 0 CreateServiceW
000000034A9E 00000043649E 0 RegEnumKeyExA
000000034AAE 0000004364AE 0 GetStockObject
000000034ABE 0000004364BE 0 WFSClose
000000034AC8 0000004364C8 0 WFSAsyncExecute
000000034ADA 0000004364DA 0 WFSFreeResult
000000034AEA 0000004364EA 0 WFSGetInfo
000000034AF6 0000004364F6 0 WFSExecute
000000034B02 000000436502 0 WFSRegister
000000034B10 000000436510 0 WFSOpen
000000034B1A 00000043651A 0 WFSCancelAsyncRequest
000000034B32 000000436532 0 WFSStartUp
000000034B3E 00000043653E 0 WFSCleanUp
000000034B4A 00000043654A 0 CoTaskMemFree
000000034B5A 00000043655A 0 CoInitialize
000000034B68 000000436568 0 CoUninitialize
000000034B78 000000436578 0 CoCreateInstance
000000034B8A 00000043658A 0 ShellExecuteW
000000034B9A 00000043659A 0 ShellExecuteA
000000034BAA 0000004365AA 0 SetWindowTextA
000000034BBA 0000004365BA 0 UpdateWindow
File pos Mem pos ID Text
======== ======= == ====
000000034BC8 0000004365C8 0 EnableWindow
000000034BD6 0000004365D6 0 DefWindowProcW
000000034BE6 0000004365E6 0 DispatchMessageW
000000034BF8 0000004365F8 0 TranslateMessage
000000034C0A 00000043660A 0 ShowWindow
000000034C16 000000436616 0 GetDesktopWindow
000000034C28 000000436628 0 BroadcastSystemMessageW
000000034C42 000000436642 0 CreateWindowExA
000000034C54 000000436654 0 GetWindowLongW
000000034C64 000000436664 0 RegisterClassExW
000000034C76 000000436676 0 LoadCursorW
000000034C84 000000436684 0 CreateWindowExW
000000034C96 000000436696 0 ExitWindowsEx
000000034CA6 0000004366A6 0 SetTimer
000000034CB0 0000004366B0 0 GetWindowRect
000000034CC0 0000004366C0 0 GetMessageW
000000034CCE 0000004366CE 0 PostQuitMessage
000000034CE0 0000004366E0 0 RegisterWindowMessageW
000000034CF8 0000004366F8 0 KillTimer
000000034D04 000000436704 0 LoadIconW
000000034D10 000000436710 0 DestroyEnvironmentBlock
000000034D2A 00000043672A 0 CreateEnvironmentBlock
000000034D42 000000436742 0 WTSQueryUserToken
000000034D56 000000436756 0 WFMQueryValue
000000034D66 000000436766 0 WFMOpenKey
000000034D72 000000436772 0 WFMEnumKey
000000034D7E 00000043677E 0 WFMCloseKey
000000035008 000000437008 0 .?AV_Locimp@locale@std@@
00000003502C 00000043702C 0 .?AVbad_alloc@std@@
000000035048 000000437048 0 .?AVlogic_error@std@@
000000035068 000000437068 0 .?AVlength_error@std@@
000000035088 000000437088 0 .?AVout_of_range@std@@
0000000350A8 0000004370A8 0 .?AVregex_error@std@@
0000000350D0 0000004370D0 0 Copyright (c) 1992-2004 by P.J. Plauger, licensed by Dinkumware, Ltd. ALL RIGHTS RESERVED.
000000035508 000000437508 0 .?AVtype_info@@
000000035650 000000437650 0 .?AVbad_exception@std@@
000000035A32 000000437A32 0
000000035B19 000000437B19 0 abcdefghijklmnopqrstuvwxyz
000000035B39 000000437B39 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ
000000035C52 000000437C52 0
000000035D32 000000437D32 0 abcdefghijklmnopqrstuvwxyz
000000035D52 000000437D52 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ
0000000365DE 0000004385DE 0 z?aUY
000000036620 000000438620 0 zc%C1
000000036673 000000438673 0 -64OS
0000000366B4 0000004386B4 0 .?AVsystem_error@std@@
0000000366D4 0000004386D4 0 .?AV?$codecvt@DDH@std@@
000000036765 000000438765 0 !This program cannot be run in DOS mode.
0000000367DF 0000004387DF 0 oRich
000000036948 000000438948 0 .rsrc
000000036BA5 000000438BA5 0 b]gp _
000000036C21 000000438C21 0 AQMlR
000000036D21 000000438D21 0 VRP,~
000000036D8B 000000438D8B 0 lF4.9
00000003704D 00000043904D 0 9+~WB
00000003710D 00000043910D 0 P3YKO
00000003713D 00000043913D 0 u62h!
000000037154 000000439154 0 ph!d/
000000037189 000000439189 0 EAJDT
000000037193 000000439193 0 8B9o?
File pos Mem pos ID Text
======== ======= == ====
00000003734F 00000043934F 0 D;E{kw ;u
000000037387 000000439387 0 :yHHSuT
00000003745A 00000043945A 0 ?t@Vg
00000003771C 00000043971C 0 H|Eh7u[f
000000037767 000000439767 0 u?\!7
0000000377AA 0000004397AA 0 DPuib
000000037822 000000439822 0 uhk /c
000000037857 000000439857 0 PSZK|
0000000378F9 0000004398F9 0 Q {*Tp
000000037902 000000439902 0 7IpSE
00000003790C 00000043990C 0 %Z2)-
000000037931 000000439931 0 0d+>XO
000000037958 000000439958 0 ldPt3'
0000000379D3 0000004399D3 0 tpI18
0000000379DD 0000004399DD 0 uZG*8F
0000000379EA 0000004399EA 0 Ef2b1
000000037A02 000000439A02 0 7%pP:
000000037AD1 000000439AD1 0 IO<$#V
000000037B29 000000439B29 0 I@#PhX
000000037B73 000000439B73 0 SSEo|
000000037B96 000000439B96 0 ScvX@
000000037BF6 000000439BF6 0 ;Ut/c/cGd
000000037D33 000000439D33 0 sh45+J
000000037D55 000000439D55 0 j[?|h
000000037D5F 000000439D5F 0 !_+T
000000038004 00000043A004 0 q#stv
000000038022 00000043A022 0 T!c=O
0000000380D6 00000043A0D6 0 Ey;4w8/
000000038143 00000043A143 0 ddddl8<@ddddDHLPddddTX\
00000003815B 00000043A15B 0 dddddh
000000038689 00000043A689 0 CCGGp
000000038881 00000043A881 0 ;u Qm)
0000000389C3 00000043A9C3 0 "WHU;=
0000000389EA 00000043A9EA 0 _e|VA
000000038CB5 00000043ACB5 0 :C9Il9E
000000038EE3 00000043AEE3 0 QKihv
000000038F29 00000043AF29 0 a[_5<
000000039031 00000043B031 0 /u,$W
0000000390BF 00000043B0BF 0 "cs{;
0000000390F4 00000043B0F4 0 nt'r[
000000039196 00000043B196 0 ]iS[+
0000000394B3 00000043B4B3 0 ; zlm
000000039529 00000043B529 0 YKYYW
00000003957E 00000043B57E 0 )YN!K6\3
0000000395BC 00000043B5BC 0 %mowlw
0000000395FE 00000043B5FE 0 H2 VN
0000000396D1 00000043B6D1 0 H*~1(
00000003971A 00000043B71A 0 P7n5@
0000000398EF 00000043B8EF 0 wS(;#
000000039992 00000043B992 0 XTj _
000000039A06 00000043BA06 0 eYyJz
000000039A91 00000043BA91 0 hpf4d[S
000000039C0A 00000043BC0A 0 ~3A}R
000000039D3B 00000043BD3B 0 A;VxO
000000039E55 00000043BE55 0 0AOW_
000000039E66 00000043BE66 0 i6j~pUgow
000000039F8B 00000043BF8B 0 W*DkKK
00000003A052 00000043C052 0 GS+mt
00000003A09E 00000043C09E 0 tM8wH
00000003A189 00000043C189 0 WN/2 g
File pos Mem pos ID Text
======== ======= == ====
00000003A1F0 00000043C1F0 0 htFlt
00000003A498 00000043C498 0 MRV/T
00000003A4E5 00000043C4E5 0 )jj0Xf]i
00000003A547 00000043C547 0 lKlu;
00000003A5B4 00000043C5B4 0 90tNhF
00000003A8C8 00000043C8C8 0 3hWhc
00000003A94D 00000043C94D 0 ,yhhGH})c
00000003AAD2 00000043CAD2 0 mPy(ml
00000003ABFB 00000043CBFB 0 tEs o
00000003AD22 00000043CD22 0 0A@@Ju
00000003AD41 00000043CD41 0 7A4YC
00000003AD8B 00000043CD8B 0 P,DT3Q
00000003ADCE 00000043CDCE 0 Bg-k8
00000003ADE0 00000043CDE0 0 $mkh_
00000003AF03 00000043CF03 0 ])>Ew=x
00000003AFD8 00000043CFD8 0 !z(a:
00000003B005 00000043D005 0 0pz?}
00000003B0C4 00000043D0C4 0 BdBnB
00000003B15F 00000043D15F 0 <.u4O8
00000003B1D8 00000043D1D8 0 ,uR$b
00000003B1E8 00000043D1E8 0 *g'j.
00000003B25F 00000043D25F 0 B_t?<X
00000003B2AE 00000043D2AE 0 lu|-
00000003B2E5 00000043D2E5 0 N7X8_l
00000003B2ED 00000043D2ED 0 P=2Y
00000003B341 00000043D341 0 X)h'1
00000003B495 00000043D495 0 6@d&"
00000003B52F 00000043D52F 0 D;2uhR4\"
00000003B5A8 00000043D5A8 0 Yh[=LF
00000003B5BD 00000043D5BD 0 N)W<7
00000003B5D0 00000043D5D0 0 cLlY5
00000003B5E5 00000043D5E5 0 *C2 2
00000003B980 00000043D980 0 t:V)o
00000003BA15 00000043DA15 0 tK&\I
00000003BA55 00000043DA55 0 whd'#
00000003BAB4 00000043DAB4 0 g$ ($
00000003BC89 00000043DC89 0 xs%'Q*
00000003BCE2 00000043DCE2 0 85Fyr
00000003BD66 00000043DD66 0 , <Xw
00000003BD9D 00000043DD9D 0 [grHH
00000003BDFD 00000043DDFD 0 htDmwC>
00000003BE3C 00000043DE3C 0 'b d$
00000003C03C 00000043E03C 0 FCxSD
00000003C180 00000043E180 0 7FPFeu(9
00000003C343 00000043E343 0 @S)Lp
00000003C37A 00000043E37A 0 g+lJ<V
00000003C3D5 00000043E3D5 0 u!>3)
00000003C464 00000043E464 0 EH);s9
00000003C55C 00000043E55C 0 5n5@z<
00000003C59B 00000043E59B 0 l8ulu@&N
00000003C5DB 00000043E5DB 0 80_[H
00000003C767 00000043E767 0 w9=?|
00000003C7AC 00000043E7AC 0 PSmC(W
00000003C7C9 00000043E7C9 0 A5G/q
00000003C923 00000043E923 0 |(&Te
00000003CA02 00000043EA02 0 gPmQq/
00000003CA5C 00000043EA5C 0 H1vk\
00000003CAB2 00000043EAB2 0 *n/ 4
00000003CADC 00000043EADC 0 PojcDMd
00000003CAF9 00000043EAF9 0 5i@xm
File pos Mem pos ID Text
======== ======= == ====
00000003CD28 00000043ED28 0 WPsv\>
00000003CDC4 00000043EDC4 0 @>H,dH
00000003CE4C 00000043EE4C 0 t<+Ht
00000003CF61 00000043EF61 0 I\ JW
00000003CF6E 00000043EF6E 0 h#*]Q|
00000003D005 00000043F005 0 *boOu!9
00000003D0F6 00000043F0F6 0 +u)Ku3(
00000003D13E 00000043F13E 0 -})jAXf
00000003D2B7 00000043F2B7 0 m;RrC.9
00000003D2D2 00000043F2D2 0 v(9:
00000003D32C 00000043F32C 0 L=h7u
00000003D3CC 00000043F3CC 0 GW[*hL
00000003D3E7 00000043F3E7 0 GG>=Yt1
00000003D40F 00000043F40F 0 QI,EKo%
00000003D7B4 00000043F7B4 0 elRSt;
00000003D7FA 00000043F7FA 0 A@F|b
00000003D848 00000043F848 0 fgo*V
00000003D8B9 00000043F8B9 0 Yk&"F"
00000003D903 00000043F903 0 mKrM7
00000003D912 00000043F912 0 31LjP
00000003DAEA 00000043FAEA 0 UuoYe
00000003DBF6 00000043FBF6 0 ~%N|
00000003DC06 00000043FC06 0 QVj PJ
00000003DC18 00000043FC18 0 ;2r 8
00000003DCF9 00000043FCF9 0 (F9dY
00000003DD14 00000043FD14 0 \)T#C
00000003DD25 00000043FD25 0 ;+v N+
00000003DD86 00000043FD86 0 ji_jdZf
00000003DD95 00000043FD95 0 :?ot4
00000003E12F 00000044012F 0 XG!aI<
00000003E158 000000440158 0 A0D-3
00000003E1B5 0000004401B5 0 L"*t2
00000003E316 000000440316 0 rm|2d
00000003E470 000000440470 0 ?9X$b
00000003E53A 00000044053A 0 Pek>/Y
00000003E868 000000440868 0 @"I0+
00000003E87F 00000044087F 0 2u8SS
00000003E919 000000440919 0 _r7y?
00000003EA72 000000440A72 0 Mp>*uh/
00000003EB0D 000000440B0D 0 tiX#L
00000003EB2C 000000440B2C 0 ;-Q%1
00000003EBA7 000000440BA7 0 U%LUE
00000003EBBF 000000440BBF 0 Pj1QC
00000003EBCF 000000440BCF 0 sY)Z2Y
00000003EC08 000000440C08 0 ,-0V.
00000003EC17 000000440C17 0 d08Dd9@
00000003EC2D 000000440C2D 0 eJLIPJ
00000003EC34 000000440C34 0 )YJTKd
00000003EC3C 000000440C3C 0 eXL\MeJ
00000003EC53 000000440C53 0 Y9p:Y
00000003EC69 000000440C69 0 m/>#S2
00000003ECE7 000000440CE7 0 A,04j
00000003EE4B 000000440E4B 0 np D{>
00000003EF97 000000440F97 0 RP$Q
00000003EFC1 000000440FC1 0 ->W.R/-d9/Sb
00000003F1C1 0000004411C1 0 ( 9&~
00000003F31E 00000044131E 0 $0EPx
00000003F3F9 0000004413F9 0 #{s6<
00000003F501 000000441501 0 .;1s(mV
00000003F7B6 0000004417B6 0 )SoU
File pos Mem pos ID Text
======== ======= == ====
00000003F831 000000441831 0 %(WMjnl
00000003F859 000000441859 0 ,[Du;(
00000003F972 000000441972 0 HRrYy
00000003FA7E 000000441A7E 0 Bk,_7BF
00000003FB2B 000000441B2B 0 .4&:a
00000003FB8A 000000441B8A 0 @d|F@
00000003FBF3 000000441BF3 0 Nh,YVp$
00000003FCCA 000000441CCA 0 !aV2&3
00000003FD2E 000000441D2E 0 sSHxW
00000003FE28 000000441E28 0 Zvd@h
00000003FE40 000000441E40 0 R2--k
00000003FEA3 000000441EA3 0 w@MT#
00000003FED9 000000441ED9 0 >9P-?L
00000003FEE8 000000441EE8 0 4?P |
00000003FF22 000000441F22 0 $'9XN
00000003FF5F 000000441F5F 0 %h0H/
000000040008 000000442008 0 @@3T;+[
0000000404BB 0000004424BB 0 H|L].
0000000404CE 0000004424CE 0 \vGfG>
00000004058E 00000044258E 0 I iN&
0000000406DE 0000004426DE 0 }#SHw
0000000408C2 0000004428C2 0 JNaM,
0000000409F1 0000004429F1 0 4MPlEs4+
000000040A83 000000442A83 0 Wq[}_
000000040B66 000000442B66 0 xE7]*Q
000000040C83 000000442C83 0 4&9*8
000000040C8D 000000442C8D 0 y52w,}
000000040CB3 000000442CB3 0 QSWV=
0000000412A9 0000004432A9 0 5_pd
0000000412BE 0000004432BE 0 lFF dty
0000000412CA 0000004432CA 0 uqmie!
00000004134A 00000044334A 0 pHCXp
000000041497 000000443497 0 91cC~@
0000000414EF 0000004434EF 0 !F)P5
000000041596 000000443596 0 DW'K$
00000004159C 00000044359C 0 V2|7S
0000000415C7 0000004435C7 0 A.@6;
000000041607 000000443607 0 %:*4f-
000000041777 000000443777 0 P zgE
000000041A44 000000443A44 0 *G4o-"C
000000041A62 000000443A62 0 9T8Dq
000000041AC2 000000443AC2 0 X\;(nT
000000041B1D 000000443B1D 0 uaVw'
000000041B93 000000443B93 0 sDpRE
000000041BD3 000000443BD3 0 @h0Y<S
000000041C37 000000443C37 0 h4*bC
000000041D4E 000000443D4E 0 MVtQX
000000041D7D 000000443D7D 0 EjPUd
000000041F94 000000443F94 0 </OrY
000000041FD1 000000443FD1 0 Ig@.y
000000042052 000000444052 0 AAFF
0000000420C8 0000004440C8 0 (p3t:
0000000420D5 0000004440D5 0 ;tv-P
0000000420EF 0000004440EF 0 >,BA\
000000042157 000000444157 0 k.%]T
0000000422AD 0000004442AD 0 =t<VN
00000004233F 00000044433F 0 &0_Ej[
0000000423DE 0000004443DE 0 H+J!P)
0000000423F1 0000004443F1 0 8aV_P
000000042404 000000444404 0 Y@ukf
File pos Mem pos ID Text
======== ======= == ====
0000000424FE 0000004444FE 0 ;:u84
0000000426B2 0000004446B2 0 #5/7w0
0000000426E0 0000004446E0 0 VVRV2S
000000042715 000000444715 0 $\D-}
000000042782 000000444782 0 Zzb}J
00000004283B 00000044483B 0 5g@T(6E
000000042941 000000444941 0 @@m-
0000000429DC 0000004449DC 0 s&:)&X6,
000000042B2E 000000444B2E 0 9s*(0(TO
000000042DC4 000000444DC4 0 P##CcX
000000042E40 000000444E40 0 6i(,8@
000000042EE9 000000444EE9 0 f8,s8
000000042F4E 000000444F4E 0 K\ PU
000000042F99 000000444F99 0 T=ISU
000000043063 000000445063 0 r33I]*/v,*;
000000043111 000000445111 0 It'Y#
000000043273 000000445273 0 Pkq~&
0000000432CE 0000004452CE 0 }wUC/XL
000000043393 000000445393 0 }t{~B
0000000433CB 0000004453CB 0 \G%}r
00000004341B 00000044541B 0 4;W5>
0000000435BB 0000004455BB 0 {63=7R!sEn+
00000004381F 00000044581F 0 d\lang1033\b0\fs20$\b
000000043838 000000445838 0 EFFET JURIDIQUE.
000000043853 000000445853 0 r\'e9sent co
00000004386B 00000044586B 0 iertains
00000004387F 00000044587F 0 diques. Vou
000000043893 000000445893 0 ez av r&'auBe/
0000000438C0 0000004458C0 0 momfi'
0000000438D3 0000004458D3 0 *f78r
0000000438E3 0000004458E3 0 -ciSl
0000000438EF 0000004458EF 0 ett4Y
0000000438FA 0000004458FA 0 'sb1<
000000043950 000000445950 0 un telommage
000000043964 000000445964 0 n_orZ
00000004396E 00000044596E 0 4xcluyXg
0000000439CC 0000004459CC 0 y-dZu
000000043A22 000000445A22 0 ie,3@
000000043AA1 000000445AA1 0 (ymp\
000000043ACA 000000445ACA 0 ?k1l;s
000000043AE7 000000445AE7 0 |M:+o a%
000000043AF9 000000445AF9 0 ITATION DES
000000043B05 000000445B05 0 OMMAG
000000043B1C 000000445B1C 0 EXCLU
000000043B25 000000445B25 0 S( R"P SABI@
000000043B79 000000445B79 0 hFuk5,\
000000043BAE 000000445BAE 0 ci$,(
000000043BFD 000000445BFD 0 bb#To
000000043C2A 000000445C2A 0 WKcLB
000000043C32 000000445C32 0 -9xpLs.2
000000043C5A 000000445C5A 0 cvn+L
000000043C84 000000445C84 0 ZR% M\
000000043CFF 000000445CFF 0 7,nmC
000000043D66 000000445D66 0 B/K .
000000043D6C 000000445D6C 0 [hndE? w$F
000000043D97 000000445D97 0 knew
000000043DC9 000000445DC9 0 ,\P&)y$
000000043DE6 000000445DE6 0 wYy)l
000000043DFC 000000445DFC 0 7,,1e-
000000043E20 000000445E20 0 ,eal-
File pos Mem pos ID Text
======== ======= == ====
000000043E44 000000445E44 0 ,j)mY
000000043E67 000000445E67 0 BhI7G
000000043E71 000000445E71 0 yX\0aWd1
000000043EB3 000000445EB3 0 capsTZ2
000000043ED7 000000445ED7 0 1$L=n
000000043F24 000000445F24 0 {,+q$5.
000000043F5B 000000445F5B 0 #9"Dw
000000044008 000000446008 0 !ImGpi
000000044024 000000446024 0 t/pv/
00000004404C 00000044604C 0 #%Lx9l
000000044067 000000446067 0 ?9wi5
000000044099 000000446099 0 kVT&)
000000044105 000000446105 0 >N!iY4
000000044126 000000446126 0 -biF
00000004414A 00000044614A 0 zDkY%k
000000044155 000000446155 0 [7%f-r
0000000441D4 0000004461D4 0 5SUPPORT
000000044273 000000446273 0 HFFFT
000000044282 000000446282 0 1U"1\
00000004429C 00000044629C 0 <Btp://#4
0000000442B9 0000004462B9 0 3OCUMEN
0000000442CF 0000004462CF 0 ?h\v 0!
000000044302 000000446302 0 ,{H<D
00000004432B 00000044632B 0 @,UssKX
00000004434D 00000044634D 0 !V;m%
00000004446A 00000044646A 0 @Za8G=5
000000044494 000000446494 0 LLAAND
0000000444A0 0000004464A0 0 IGHT:k-
000000044509 000000446509 0 FTWARE;YOU
000000044529 000000446529 0 NOT"M0
0000000445AE 0000004465AE 0 M$ C/
0000000445EE 0000004465EE 0 Wkov8
0000000445FB 0000004465FB 0 4|2fz
00000004460E 00000044660E 0 W{\*\k;
000000044629 000000446629 0 506;}\
000000044687 000000446687 0 pg1252\f
000000044696 000000446696 0 (fa_{
0000000446A8 0000004466A8 0 q+f|Tt[[
000000044751 000000446751 0 t!hGUn[
00000004478D 00000044678D 0 s]76d
0000000447BA 0000004467BA 0 ToArgvW
0000000447F8 0000004467F8 0 9+.7F
00000004482D 00000044682D 0 MvdyeoS
000000044843 000000446843 0 pUs&M
000000044849 000000446849 0 cgdQs-
000000044863 000000446863 0 -{/Y*3
00000004488E 00000044688E 0 Cm!M&
000000044905 000000446905 0 e[=pa
00000004497D 00000044697D 0 ;qXB]
0000000449ED 0000004469ED 0 CT3L
0000000449FA 0000004469FA 0 RtlNt
000000044A2C 000000446A2C 0 sCWmFeX
000000044A40 000000446A40 0 (AoC7 t
000000044ABF 000000446ABF 0 ] QeK(qM
000000044B60 000000446B60 0 G-{c<+pQd%'
000000044B81 000000446B81 0 "l<r{
000000044BA1 000000446BA1 0 BSDe3j
000000044BBF 000000446BBF 0 KWow64En
000000044BD5 000000446BD5 0 }wDsuWH0
000000044BF0 000000446BF0 0 Op-[F
File pos Mem pos ID Text
======== ======= == ====
000000044C3D 000000446C3D 0 rRitP
000000044C52 000000446C52 0 r>ioe
000000044C5E 000000446C5E 0 PTLOSS
000000044C76 000000446C76 0 R6034u
000000044C9A 000000446C9A 0 C {2brX
000000044CB5 000000446CB5 0 1]'sF):
000000044D30 000000446D30 0 '(/clr
000000044D4E 000000446D4E 0 DIMai
000000044D76 000000446D76 0 SMxRTo
000000044DAE 000000446DAE 0 6std5
000000044DC5 000000446DC5 0 (_4_k
000000044DF7 000000446DF7 0 o#7mvY
000000044E45 000000446E45 0 -+8l0
000000044EA2 000000446EA2 0 LC_TIME
000000044EB4 000000446EB4 0 MONETARYCTYPEoT
000000044F1F 000000446F1F 0 !"#$%&'()*+,-./
000000044F32 000000446F32 0 lp2>56789:;<=>?@ABCDEb
000000044F4B 000000446F4B 0 FGHIJKLMNOP#T
000000044F5C 000000446F5C 0 1XYZ[\]
000000044F6E 000000446F6E 0 ijklm#pqrS
000000044F7B 000000446F7B 0 muvwxyz{|}~
000000044FB5 000000446FB5 0 e+Fls
000000044FCB 000000446FCB 0 AlP;(
000000044FF9 000000446FF9 0 8PX?
000000045025 000000447025 0 B2H3X
000000045051 000000447051 0 ADVAPI
00000004505B 00000044705B 0 q.De,
000000045079 000000447079 0 A3LaZAV
00000004508D 00000044708D 0 fFkQ?
000000045096 000000447096 0 Box1ZRq
0000000451A5 0000004471A5 0 HH:mn6C
0000000451B0 0000004471B0 0 d, M[
000000045211 000000447211 0 SKGC7yC
00000004521B 00000044721B 0 {?;3#v
000000045239 000000447239 0 :;Tu MN
000000045248 000000447248 0 C;7/'
000000045298 000000447298 0 ?vakp
0000000452A8 0000004472A8 0 -7bw'
0000000452DA 0000004472DA 0 engc4
0000000452FD 0000004472FD 0 f'C'n
00000004536C 00000044736C 0 bpBc?D
000000045385 000000447385 0 2GM#b
000000045398 000000447398 0 XIQ[+
0000000453D6 0000004473D6 0 l#LOlux
0000000454D3 0000004474D3 0 =x,_l,\
0000000455A8 0000004475A8 0 'OxD)/@)<
0000000455B6 0000004475B6 0 4WU,OGB$w
000000045607 000000447607 0 d|hTTO
000000045667 000000447667 0 ('8PW#
0000000456BD 0000004476BD 0 Q[IN$
0000000456EC 0000004476EC 0 k:\s[
0000000456FD 0000004476FD 0 [\\Re
000000045709 000000447709 0 .pdbkpf8
00000004586F 00000044786F 0 tHYvf
000000045AEC 000000447AEC 0 8(40,4M
000000045B27 000000447B27 0 xpd\i
000000045B2E 000000447B2E 0 iPD@<0a
000000045B94 000000447B94 0 0Nm3M
000000045BCE 000000447BCE 0 AtRU{R
000000045BF3 000000447BF3 0 f"@'WaiI
File pos Mem pos ID Text
======== ======= == ====
000000045C17 000000447C17 0 N#AZ(j
000000045C72 000000447C72 0 ABTiLa
000000045C97 000000447C97 0 SWTKC
000000045CA3 000000447CA3 0 OutpuP,
000000045CAB 000000447CAB 0 na"qVZT
000000045CDF 000000447CDF 0 Addr/U{
000000045D2D 000000447D2D 0 S4ep2+
000000045D8B 000000447D8B 0 P\Zwp
000000045DAF 000000447DAF 0 EM [V
000000045DE3 000000447DE3 0 rToMsBym0,{
000000045DF8 000000447DF8 0 ushlBuff_x
000000045E18 000000447E18 0 p!A-]
000000045E4F 000000447E4F 0 j[aQgsP
000000045E65 000000447E65 0 kdspm
000000045E6B 000000447E6B 0 ACLwH
000000045EA0 000000447EA0 0 faz[ID
000000045EB9 000000447EB9 0 SAWU9Va
000000045F1A 000000447F1A 0 D/ogf
000000045FCA 000000447FCA 0 .t6!{
00000004619C 00000044819C 0 XPTPSW
00000004669C 00000044869C 0 <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
0000000466E7 0000004486E7 0 <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
00000004671F 00000044871F 0 <security>
00000004672F 00000044872F 0 <requestedPrivileges>
00000004674C 00000044874C 0 <requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>
0000000467AC 0000004487AC 0 </requestedPrivileges>
0000000467CA 0000004487CA 0 </security>
0000000467DB 0000004487DB 0 </trustInfo>
0000000467EB 0000004487EB 0 </assembly>PA
0000000468AC 0000004488AC 0 KERNEL32.DLL
0000000468B9 0000004488B9 0 ADVAPI32.dll
0000000468C6 0000004488C6 0 COMDLG32.dll
0000000468D3 0000004488D3 0 GDI32.dll
0000000468DD 0000004488DD 0 USER32.dll
0000000468EA 0000004488EA 0 LoadLibraryA
0000000468F8 0000004488F8 0 GetProcAddress
000000046908 000000448908 0 VirtualProtect
000000046918 000000448918 0 VirtualAlloc
000000046926 000000448926 0 VirtualFree
000000046934 000000448934 0 ExitProcess
000000046942 000000448942 0 RegCloseKey
000000046950 000000448950 0 PrintDlgW
00000004695C 00000044895C 0 EndDoc
000000046964 000000448964 0 EndDialog
000000046B80 000000448B80 0 .?AVbad_cast@std@@
000000046B9C 000000448B9C 0 .?AVexception@std@@
000000046BB8 000000448BB8 0 .?AVcodecvt_base@std@@
000000046BD8 000000448BD8 0 .?AVios_base@std@@
000000046BF4 000000448BF4 0 .?AV_Iostream_error_category@std@@
000000046C20 000000448C20 0 .?AVfailure@ios_base@std@@
000000046C44 000000448C44 0 .?AVruntime_error@std@@
000000046C64 000000448C64 0 .?AV?$ctype@D@std@@
000000046C80 000000448C80 0 .?AV_System_error_category@std@@
000000046CAC 000000448CAC 0 .?AV?$basic_filebuf@DU?$char_traits@D@std@@@std@@
000000046CE8 000000448CE8 0 .?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
000000046D20 000000448D20 0 .?AV?$_Iosb@H@std@@
000000046D3C 000000448D3C 0 .?AVerror_category@std@@
000000046D60 000000448D60 0 .?AV_Generic_error_category@std@@
000000046D8C 000000448D8C 0 .?AV_Facet_base@std@@
000000046DAC 000000448DAC 0 .?AUctype_base@std@@
File pos Mem pos ID Text
======== ======= == ====
000000046DCC 000000448DCC 0 .?AV?$basic_ofstream@DU?$char_traits@D@std@@@std@@
000000046E08 000000448E08 0 .?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@
000000046E44 000000448E44 0 .?AVfacet@locale@std@@
000000046E64 000000448E64 0 .?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
000000046EA0 000000448EA0 0 .?AV?$basic_istream@DU?$char_traits@D@std@@@std@@
000000046EDC 000000448EDC 0 .?AV?$basic_ifstream@DU?$char_traits@D@std@@@std@@
000000046F18 000000448F18 0 .?AVXFSService@@
000000046F34 000000448F34 0 .?AVXCDM@@
000000046F48 000000448F48 0 .?AV?$_Node_str@D@std@@
000000046F68 000000448F68 0 .?AV_Node_capture@std@@
000000046F88 000000448F88 0 .?AV?$_Node_class@DV?$regex_traits@D@std@@@std@@
000000046FC4 000000448FC4 0 .?AV_Node_endif@std@@
000000046FE4 000000448FE4 0 .?AV_Node_assert@std@@
000000047004 000000449004 0 .?AV_Node_rep@std@@
000000047020 000000449020 0 .?AVXIDC@@
000000047034 000000449034 0 .?AV_Node_back@std@@
000000047054 000000449054 0 .?AV_Node_end_rep@std@@
000000047074 000000449074 0 .?AV_Node_end_group@std@@
000000047098 000000449098 0 .?AV_Node_base@std@@
0000000470B8 0000004490B8 0 .?AV_Node_if@std@@
0000000470D4 0000004490D4 0 .?AV?$collate@D@std@@
0000000470F4 0000004490F4 0 .?AV_Root_node@std@@
000000047114 000000449114 0 .?AVXPIN@@
000000029FEC 00000042B9EC 0 combase.dll
00000002A01B 00000042BA1B 0 Amscoree.dll
00000002A893 00000042C293 0 Akernel32.dll
00000002B970 00000042D370 0 zh-CHS
00000002BB70 00000042D570 0 ar-SA
00000002BB7C 00000042D57C 0 bg-BG
00000002BB88 00000042D588 0 ca-ES
00000002BB94 00000042D594 0 zh-TW
00000002BBA0 00000042D5A0 0 cs-CZ
00000002BBAC 00000042D5AC 0 da-DK
00000002BBB8 00000042D5B8 0 de-DE
00000002BBC4 00000042D5C4 0 el-GR
00000002BBD0 00000042D5D0 0 en-US
00000002BBDC 00000042D5DC 0 fi-FI
00000002BBE8 00000042D5E8 0 fr-FR
00000002BBF4 00000042D5F4 0 he-IL
00000002BC00 00000042D600 0 hu-HU
00000002BC0C 00000042D60C 0 is-IS
00000002BC18 00000042D618 0 it-IT
00000002BC24 00000042D624 0 ja-JP
00000002BC30 00000042D630 0 ko-KR
00000002BC3C 00000042D63C 0 nl-NL
00000002BC48 00000042D648 0 nb-NO
00000002BC54 00000042D654 0 pl-PL
00000002BC60 00000042D660 0 pt-BR
00000002BC6C 00000042D66C 0 ro-RO
00000002BC78 00000042D678 0 ru-RU
00000002BC84 00000042D684 0 hr-HR
00000002BC90 00000042D690 0 sk-SK
00000002BC9C 00000042D69C 0 sq-AL
00000002BCA8 00000042D6A8 0 sv-SE
00000002BCB4 00000042D6B4 0 th-TH
00000002BCC0 00000042D6C0 0 tr-TR
00000002BCCC 00000042D6CC 0 ur-PK
00000002BCD8 00000042D6D8 0 id-ID
00000002BCE4 00000042D6E4 0 uk-UA
00000002BCF0 00000042D6F0 0 be-BY
File pos Mem pos ID Text
======== ======= == ====
00000002BCFC 00000042D6FC 0 sl-SI
00000002BD08 00000042D708 0 et-EE
00000002BD14 00000042D714 0 lv-LV
00000002BD20 00000042D720 0 lt-LT
00000002BD2C 00000042D72C 0 fa-IR
00000002BD38 00000042D738 0 vi-VN
00000002BD44 00000042D744 0 hy-AM
00000002BD50 00000042D750 0 az-AZ-Latn
00000002BD68 00000042D768 0 eu-ES
00000002BD74 00000042D774 0 mk-MK
00000002BD80 00000042D780 0 tn-ZA
00000002BD8C 00000042D78C 0 xh-ZA
00000002BD98 00000042D798 0 zu-ZA
00000002BDA4 00000042D7A4 0 af-ZA
00000002BDB0 00000042D7B0 0 ka-GE
00000002BDBC 00000042D7BC 0 fo-FO
00000002BDC8 00000042D7C8 0 hi-IN
00000002BDD4 00000042D7D4 0 mt-MT
00000002BDE0 00000042D7E0 0 se-NO
00000002BDEC 00000042D7EC 0 ms-MY
00000002BDF8 00000042D7F8 0 kk-KZ
00000002BE04 00000042D804 0 ky-KG
00000002BE10 00000042D810 0 sw-KE
00000002BE1C 00000042D81C 0 uz-UZ-Latn
00000002BE34 00000042D834 0 tt-RU
00000002BE40 00000042D840 0 bn-IN
00000002BE4C 00000042D84C 0 pa-IN
00000002BE58 00000042D858 0 gu-IN
00000002BE64 00000042D864 0 ta-IN
00000002BE70 00000042D870 0 te-IN
00000002BE7C 00000042D87C 0 kn-IN
00000002BE88 00000042D888 0 ml-IN
00000002BE94 00000042D894 0 mr-IN
00000002BEA0 00000042D8A0 0 sa-IN
00000002BEAC 00000042D8AC 0 mn-MN
00000002BEB8 00000042D8B8 0 cy-GB
00000002BEC4 00000042D8C4 0 gl-ES
00000002BED0 00000042D8D0 0 kok-IN
00000002BEE0 00000042D8E0 0 syr-SY
00000002BEF0 00000042D8F0 0 div-MV
00000002BF00 00000042D900 0 quz-BO
00000002BF10 00000042D910 0 ns-ZA
00000002BF1C 00000042D91C 0 mi-NZ
00000002BF28 00000042D928 0 ar-IQ
00000002BF34 00000042D934 0 zh-CN
00000002BF40 00000042D940 0 de-CH
00000002BF4C 00000042D94C 0 en-GB
00000002BF58 00000042D958 0 es-MX
00000002BF64 00000042D964 0 fr-BE
00000002BF70 00000042D970 0 it-CH
00000002BF7C 00000042D97C 0 nl-BE
00000002BF88 00000042D988 0 nn-NO
00000002BF94 00000042D994 0 pt-PT
00000002BFA0 00000042D9A0 0 sr-SP-Latn
00000002BFB8 00000042D9B8 0 sv-FI
00000002BFC4 00000042D9C4 0 az-AZ-Cyrl
00000002BFDC 00000042D9DC 0 se-SE
00000002BFE8 00000042D9E8 0 ms-BN
00000002BFF4 00000042D9F4 0 uz-UZ-Cyrl
00000002C00C 00000042DA0C 0 quz-EC
File pos Mem pos ID Text
======== ======= == ====
00000002C01C 00000042DA1C 0 ar-EG
00000002C028 00000042DA28 0 zh-HK
00000002C034 00000042DA34 0 de-AT
00000002C040 00000042DA40 0 en-AU
00000002C04C 00000042DA4C 0 es-ES
00000002C058 00000042DA58 0 fr-CA
00000002C064 00000042DA64 0 sr-SP-Cyrl
00000002C07C 00000042DA7C 0 se-FI
00000002C088 00000042DA88 0 quz-PE
00000002C098 00000042DA98 0 ar-LY
00000002C0A4 00000042DAA4 0 zh-SG
00000002C0B0 00000042DAB0 0 de-LU
00000002C0BC 00000042DABC 0 en-CA
00000002C0C8 00000042DAC8 0 es-GT
00000002C0D4 00000042DAD4 0 fr-CH
00000002C0E0 00000042DAE0 0 hr-BA
00000002C0EC 00000042DAEC 0 smj-NO
00000002C0FC 00000042DAFC 0 ar-DZ
00000002C108 00000042DB08 0 zh-MO
00000002C114 00000042DB14 0 de-LI
00000002C120 00000042DB20 0 en-NZ
00000002C12C 00000042DB2C 0 es-CR
00000002C138 00000042DB38 0 fr-LU
00000002C144 00000042DB44 0 bs-BA-Latn
00000002C15C 00000042DB5C 0 smj-SE
00000002C16C 00000042DB6C 0 ar-MA
00000002C178 00000042DB78 0 en-IE
00000002C184 00000042DB84 0 es-PA
00000002C190 00000042DB90 0 fr-MC
00000002C19C 00000042DB9C 0 sr-BA-Latn
00000002C1B4 00000042DBB4 0 sma-NO
00000002C1C4 00000042DBC4 0 ar-TN
00000002C1D0 00000042DBD0 0 en-ZA
00000002C1DC 00000042DBDC 0 es-DO
00000002C1E8 00000042DBE8 0 sr-BA-Cyrl
00000002C200 00000042DC00 0 sma-SE
00000002C210 00000042DC10 0 ar-OM
00000002C21C 00000042DC1C 0 en-JM
00000002C228 00000042DC28 0 es-VE
00000002C234 00000042DC34 0 sms-FI
00000002C244 00000042DC44 0 ar-YE
00000002C250 00000042DC50 0 en-CB
00000002C25C 00000042DC5C 0 es-CO
00000002C268 00000042DC68 0 smn-FI
00000002C278 00000042DC78 0 ar-SY
00000002C284 00000042DC84 0 en-BZ
00000002C290 00000042DC90 0 es-PE
00000002C29C 00000042DC9C 0 ar-JO
00000002C2A8 00000042DCA8 0 en-TT
00000002C2B4 00000042DCB4 0 es-AR
00000002C2C0 00000042DCC0 0 ar-LB
00000002C2CC 00000042DCCC 0 en-ZW
00000002C2D8 00000042DCD8 0 es-EC
00000002C2E4 00000042DCE4 0 ar-KW
00000002C2F0 00000042DCF0 0 en-PH
00000002C2FC 00000042DCFC 0 es-CL
00000002C308 00000042DD08 0 ar-AE
00000002C314 00000042DD14 0 es-UY
00000002C320 00000042DD20 0 ar-BH
00000002C32C 00000042DD2C 0 es-PY
File pos Mem pos ID Text
======== ======= == ====
00000002C338 00000042DD38 0 ar-QA
00000002C344 00000042DD44 0 es-BO
00000002C350 00000042DD50 0 es-SV
00000002C35C 00000042DD5C 0 es-HN
00000002C368 00000042DD68 0 es-NI
00000002C374 00000042DD74 0 es-PR
00000002C380 00000042DD80 0 zh-CHT
00000002C398 00000042DD98 0 af-za
00000002C3A4 00000042DDA4 0 ar-ae
00000002C3B0 00000042DDB0 0 ar-bh
00000002C3BC 00000042DDBC 0 ar-dz
00000002C3C8 00000042DDC8 0 ar-eg
00000002C3D4 00000042DDD4 0 ar-iq
00000002C3E0 00000042DDE0 0 ar-jo
00000002C3EC 00000042DDEC 0 ar-kw
00000002C3F8 00000042DDF8 0 ar-lb
00000002C404 00000042DE04 0 ar-ly
00000002C410 00000042DE10 0 ar-ma
00000002C41C 00000042DE1C 0 ar-om
00000002C428 00000042DE28 0 ar-qa
00000002C434 00000042DE34 0 ar-sa
00000002C440 00000042DE40 0 ar-sy
00000002C44C 00000042DE4C 0 ar-tn
00000002C458 00000042DE58 0 ar-ye
00000002C464 00000042DE64 0 az-az-cyrl
00000002C47C 00000042DE7C 0 az-az-latn
00000002C494 00000042DE94 0 be-by
00000002C4A0 00000042DEA0 0 bg-bg
00000002C4AC 00000042DEAC 0 bn-in
00000002C4B8 00000042DEB8 0 bs-ba-latn
00000002C4D0 00000042DED0 0 ca-es
00000002C4DC 00000042DEDC 0 cs-cz
00000002C4E8 00000042DEE8 0 cy-gb
00000002C4F4 00000042DEF4 0 da-dk
00000002C500 00000042DF00 0 de-at
00000002C50C 00000042DF0C 0 de-ch
00000002C518 00000042DF18 0 de-de
00000002C524 00000042DF24 0 de-li
00000002C530 00000042DF30 0 de-lu
00000002C53C 00000042DF3C 0 div-mv
00000002C54C 00000042DF4C 0 el-gr
00000002C558 00000042DF58 0 en-au
00000002C564 00000042DF64 0 en-bz
00000002C570 00000042DF70 0 en-ca
00000002C57C 00000042DF7C 0 en-cb
00000002C588 00000042DF88 0 en-gb
00000002C594 00000042DF94 0 en-ie
00000002C5A0 00000042DFA0 0 en-jm
00000002C5AC 00000042DFAC 0 en-nz
00000002C5B8 00000042DFB8 0 en-ph
00000002C5C4 00000042DFC4 0 en-tt
00000002C5D0 00000042DFD0 0 en-us
00000002C5DC 00000042DFDC 0 en-za
00000002C5E8 00000042DFE8 0 en-zw
00000002C5F4 00000042DFF4 0 es-ar
00000002C600 00000042E000 0 es-bo
00000002C60C 00000042E00C 0 es-cl
00000002C618 00000042E018 0 es-co
00000002C624 00000042E024 0 es-cr
00000002C630 00000042E030 0 es-do
File pos Mem pos ID Text
======== ======= == ====
00000002C63C 00000042E03C 0 es-ec
00000002C648 00000042E048 0 es-es
00000002C654 00000042E054 0 es-gt
00000002C660 00000042E060 0 es-hn
00000002C66C 00000042E06C 0 es-mx
00000002C678 00000042E078 0 es-ni
00000002C684 00000042E084 0 es-pa
00000002C690 00000042E090 0 es-pe
00000002C69C 00000042E09C 0 es-pr
00000002C6A8 00000042E0A8 0 es-py
00000002C6B4 00000042E0B4 0 es-sv
00000002C6C0 00000042E0C0 0 es-uy
00000002C6CC 00000042E0CC 0 es-ve
00000002C6D8 00000042E0D8 0 et-ee
00000002C6E4 00000042E0E4 0 eu-es
00000002C6F0 00000042E0F0 0 fa-ir
00000002C6FC 00000042E0FC 0 fi-fi
00000002C708 00000042E108 0 fo-fo
00000002C714 00000042E114 0 fr-be
00000002C720 00000042E120 0 fr-ca
00000002C72C 00000042E12C 0 fr-ch
00000002C738 00000042E138 0 fr-fr
00000002C744 00000042E144 0 fr-lu
00000002C750 00000042E150 0 fr-mc
00000002C75C 00000042E15C 0 gl-es
00000002C768 00000042E168 0 gu-in
00000002C774 00000042E174 0 he-il
00000002C780 00000042E180 0 hi-in
00000002C78C 00000042E18C 0 hr-ba
00000002C798 00000042E198 0 hr-hr
00000002C7A4 00000042E1A4 0 hu-hu
00000002C7B0 00000042E1B0 0 hy-am
00000002C7BC 00000042E1BC 0 id-id
00000002C7C8 00000042E1C8 0 is-is
00000002C7D4 00000042E1D4 0 it-ch
00000002C7E0 00000042E1E0 0 it-it
00000002C7EC 00000042E1EC 0 ja-jp
00000002C7F8 00000042E1F8 0 ka-ge
00000002C804 00000042E204 0 kk-kz
00000002C810 00000042E210 0 kn-in
00000002C81C 00000042E21C 0 kok-in
00000002C82C 00000042E22C 0 ko-kr
00000002C838 00000042E238 0 ky-kg
00000002C844 00000042E244 0 lt-lt
00000002C850 00000042E250 0 lv-lv
00000002C85C 00000042E25C 0 mi-nz
00000002C868 00000042E268 0 mk-mk
00000002C874 00000042E274 0 ml-in
00000002C880 00000042E280 0 mn-mn
00000002C88C 00000042E28C 0 mr-in
00000002C898 00000042E298 0 ms-bn
00000002C8A4 00000042E2A4 0 ms-my
00000002C8B0 00000042E2B0 0 mt-mt
00000002C8BC 00000042E2BC 0 nb-no
00000002C8C8 00000042E2C8 0 nl-be
00000002C8D4 00000042E2D4 0 nl-nl
00000002C8E0 00000042E2E0 0 nn-no
00000002C8EC 00000042E2EC 0 ns-za
00000002C8F8 00000042E2F8 0 pa-in
00000002C904 00000042E304 0 pl-pl
File pos Mem pos ID Text
======== ======= == ====
00000002C910 00000042E310 0 pt-br
00000002C91C 00000042E31C 0 pt-pt
00000002C928 00000042E328 0 quz-bo
00000002C938 00000042E338 0 quz-ec
00000002C948 00000042E348 0 quz-pe
00000002C958 00000042E358 0 ro-ro
00000002C964 00000042E364 0 ru-ru
00000002C970 00000042E370 0 sa-in
00000002C97C 00000042E37C 0 se-fi
00000002C988 00000042E388 0 se-no
00000002C994 00000042E394 0 se-se
00000002C9A0 00000042E3A0 0 sk-sk
00000002C9AC 00000042E3AC 0 sl-si
00000002C9B8 00000042E3B8 0 sma-no
00000002C9C8 00000042E3C8 0 sma-se
00000002C9D8 00000042E3D8 0 smj-no
00000002C9E8 00000042E3E8 0 smj-se
00000002C9F8 00000042E3F8 0 smn-fi
00000002CA08 00000042E408 0 sms-fi
00000002CA18 00000042E418 0 sq-al
00000002CA24 00000042E424 0 sr-ba-cyrl
00000002CA3C 00000042E43C 0 sr-ba-latn
00000002CA54 00000042E454 0 sr-sp-cyrl
00000002CA6C 00000042E46C 0 sr-sp-latn
00000002CA84 00000042E484 0 sv-fi
00000002CA90 00000042E490 0 sv-se
00000002CA9C 00000042E49C 0 sw-ke
00000002CAA8 00000042E4A8 0 syr-sy
00000002CAB8 00000042E4B8 0 ta-in
00000002CAC4 00000042E4C4 0 te-in
00000002CAD0 00000042E4D0 0 th-th
00000002CADC 00000042E4DC 0 tn-za
00000002CAE8 00000042E4E8 0 tr-tr
00000002CAF4 00000042E4F4 0 tt-ru
00000002CB00 00000042E500 0 uk-ua
00000002CB0C 00000042E50C 0 ur-pk
00000002CB18 00000042E518 0 uz-uz-cyrl
00000002CB30 00000042E530 0 uz-uz-latn
00000002CB48 00000042E548 0 vi-vn
00000002CB54 00000042E554 0 xh-za
00000002CB60 00000042E560 0 zh-chs
00000002CB70 00000042E570 0 zh-cht
00000002CB80 00000042E580 0 zh-cn
00000002CB8C 00000042E58C 0 zh-hk
00000002CB98 00000042E598 0 zh-mo
00000002CBA4 00000042E5A4 0 zh-sg
00000002CBB0 00000042E5B0 0 zh-tw
00000002CBBC 00000042E5BC 0 zu-za
00000002CBD8 00000042E5D8 0 (null)
00000002D550 00000042EF50 0 runtime error
00000002D6A4 00000042F0A4 0 Program:
00000002D6B8 00000042F0B8 0 <program name unknown>
00000002D6F8 00000042F0F8 0 Microsoft Visual C++ Runtime Library
00000002D8F8 00000042F2F8 0 Sunday
00000002D908 00000042F308 0 Monday
00000002D918 00000042F318 0 Tuesday
00000002D928 00000042F328 0 Wednesday
00000002D93C 00000042F33C 0 Thursday
00000002D950 00000042F350 0 Friday
00000002D960 00000042F360 0 Saturday
File pos Mem pos ID Text
======== ======= == ====
00000002D9D4 00000042F3D4 0 January
00000002D9E4 00000042F3E4 0 February
00000002D9F8 00000042F3F8 0 March
00000002DA04 00000042F404 0 April
00000002DA28 00000042F428 0 August
00000002DA38 00000042F438 0 September
00000002DA4C 00000042F44C 0 October
00000002DA5C 00000042F45C 0 November
00000002DA70 00000042F470 0 December
00000002DA94 00000042F494 0 MM/dd/yy
00000002DAA8 00000042F4A8 0 dddd, MMMM dd, yyyy
00000002DAD0 00000042F4D0 0 HH:mm:ss
00000002DB2F 00000042F52F 0 BLC_ALL
00000002DB40 00000042F540 0 LC_COLLATE
00000002DB58 00000042F558 0 LC_CTYPE
00000002DB6C 00000042F56C 0 LC_MONETARY
00000002DB84 00000042F584 0 LC_NUMERIC
00000002DB9C 00000042F59C 0 LC_TIME
00000002DC7C 00000042F67C 0 UTF-8
00000002DC88 00000042F688 0 UTF-16LE
00000002DC9C 00000042F69C 0 UNICODE
00000002DE54 00000042F854 0 USER32.DLL
00000002E91C 00000043031C 0 american
00000002E930 000000430330 0 american english
00000002E954 000000430354 0 american-english
00000002E978 000000430378 0 australian
00000002E990 000000430390 0 belgian
00000002E9A0 0000004303A0 0 canadian
00000002E9C4 0000004303C4 0 chinese
00000002E9D4 0000004303D4 0 chinese-hongkong
00000002E9F8 0000004303F8 0 chinese-simplified
00000002EA20 000000430420 0 chinese-singapore
00000002EA44 000000430444 0 chinese-traditional
00000002EA6C 00000043046C 0 dutch-belgian
00000002EA88 000000430488 0 english-american
00000002EAAC 0000004304AC 0 english-aus
00000002EAC4 0000004304C4 0 english-belize
00000002EAE4 0000004304E4 0 english-can
00000002EAFC 0000004304FC 0 english-caribbean
00000002EB20 000000430520 0 english-ire
00000002EB38 000000430538 0 english-jamaica
00000002EB58 000000430558 0 english-nz
00000002EB70 000000430570 0 english-south africa
00000002EB9C 00000043059C 0 english-trinidad y tobago
00000002EBD0 0000004305D0 0 english-uk
00000002EBE8 0000004305E8 0 english-us
00000002EC00 000000430600 0 english-usa
00000002EC18 000000430618 0 french-belgian
00000002EC38 000000430638 0 french-canadian
00000002EC58 000000430658 0 french-luxembourg
00000002EC7C 00000043067C 0 french-swiss
00000002EC98 000000430698 0 german-austrian
00000002ECB8 0000004306B8 0 german-lichtenstein
00000002ECE0 0000004306E0 0 german-luxembourg
00000002ED04 000000430704 0 german-swiss
00000002ED20 000000430720 0 irish-english
00000002ED3C 00000043073C 0 italian-swiss
00000002ED58 000000430758 0 norwegian
00000002ED6C 00000043076C 0 norwegian-bokmal
00000002ED90 000000430790 0 norwegian-nynorsk
File pos Mem pos ID Text
======== ======= == ====
00000002EDB4 0000004307B4 0 portuguese-brazilian
00000002EDE0 0000004307E0 0 spanish-argentina
00000002EE04 000000430804 0 spanish-bolivia
00000002EE24 000000430824 0 spanish-chile
00000002EE40 000000430840 0 spanish-colombia
00000002EE64 000000430864 0 spanish-costa rica
00000002EE8C 00000043088C 0 spanish-dominican republic
00000002EEC4 0000004308C4 0 spanish-ecuador
00000002EEE4 0000004308E4 0 spanish-el salvador
00000002EF0C 00000043090C 0 spanish-guatemala
00000002EF30 000000430930 0 spanish-honduras
00000002EF54 000000430954 0 spanish-mexican
00000002EF74 000000430974 0 spanish-modern
00000002EF94 000000430994 0 spanish-nicaragua
00000002EFB8 0000004309B8 0 spanish-panama
00000002EFD8 0000004309D8 0 spanish-paraguay
00000002EFFC 0000004309FC 0 spanish-peru
00000002F018 000000430A18 0 spanish-puerto rico
00000002F040 000000430A40 0 spanish-uruguay
00000002F060 000000430A60 0 spanish-venezuela
00000002F084 000000430A84 0 swedish-finland
00000002F0A4 000000430AA4 0 swiss
00000002F1D4 000000430BD4 0 america
00000002F1E4 000000430BE4 0 britain
00000002F1F4 000000430BF4 0 china
00000002F200 000000430C00 0 czech
00000002F20C 000000430C0C 0 england
00000002F21C 000000430C1C 0 great britain
00000002F238 000000430C38 0 holland
00000002F248 000000430C48 0 hong-kong
00000002F25C 000000430C5C 0 new-zealand
00000002F27C 000000430C7C 0 pr china
00000002F290 000000430C90 0 pr-china
00000002F2A4 000000430CA4 0 puerto-rico
00000002F2BC 000000430CBC 0 slovak
00000002F2CC 000000430CCC 0 south africa
00000002F2E8 000000430CE8 0 south korea
00000002F300 000000430D00 0 south-africa
00000002F31C 000000430D1C 0 south-korea
00000002F334 000000430D34 0 trinidad & tobago
00000002F358 000000430D58 0 united-kingdom
00000002F378 000000430D78 0 united-states
00000002F3C1 000000430DC1 0 CONOUT$
00000002F4FC 000000430EFC 0 alnum
00000002F508 000000430F08 0 alpha
00000002F514 000000430F14 0 blank
00000002F520 000000430F20 0 cntrl
00000002F530 000000430F30 0 digit
00000002F53C 000000430F3C 0 graph
00000002F548 000000430F48 0 lower
00000002F554 000000430F54 0 print
00000002F560 000000430F60 0 punct
00000002F56C 000000430F6C 0 space
00000002F57C 000000430F7C 0 upper
00000002F58C 000000430F8C 0 xdigit
00000002F5BC 000000430FBC 0 WM_XFS_STOP
00000002F69C 00000043109C 0 DBackup Service
00000002F7FF 0000004311FF 0 tDBackup Service
00000002F880 000000431280 0 DBackup Service
00000002F8A0 0000004312A0 0 DBackup Service
File pos Mem pos ID Text
======== ======= == ====
00000002F8C0 0000004312C0 0 DBackup Service
00000002F8E0 0000004312E0 0 DBackup Service
00000002F900 000000431300 0 DBackup Service
000000030278 000000431C78 0 /autorun
00000003028C 000000431C8C 0 FwLoadPm
0000000302A0 000000431CA0 0 SOFTWARE\Microsoft\Windows\CurrentVersion\Run
0000000302FC 000000431CFC 0 FwLoadPm
000000030310 000000431D10 0 SOFTWARE\Microsoft\Windows\CurrentVersion\Run
00000003036F 000000431D6F 0 SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
0000000303D8 000000431DD8 0 SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
000000030468 000000431E68 0 SOFTWARE\Microsoft\Windows\CurrentVersion\Run
0000000304C4 000000431EC4 0 NCRPRS
0000000304D4 000000431ED4 0 DBackup
0000000304F0 000000431EF0 0 SOFTWARE\Microsoft\Windows\CurrentVersion\Run
00000003054C 000000431F4C 0 NCRPRS
00000003055C 000000431F5C 0 DBackup
000000030570 000000431F70 0 /c ping 127.0.0.1 -n 20 && del
0000000305B0 000000431FB0 0 >> NUL
0000000305C0 000000431FC0 0 ComSpec
0000000305D7 000000431FD7 0 cSeShutdownPrivilege
00000003071C 00000043211C 0 alnum
000000030728 000000432128 0 alpha
000000030734 000000432134 0 blank
000000030740 000000432140 0 cntrl
000000030750 000000432150 0 digit
00000003075C 00000043215C 0 graph
000000030768 000000432168 0 lower
000000030774 000000432174 0 print
000000030780 000000432180 0 punct
00000003078C 00000043218C 0 space
00000003079C 00000043219C 0 upper
0000000307AC 0000004321AC 0 xdigit
0000000366F4 0000004386F4 0 DBackup
000000036709 000000438709 0 DBackup
0000000463C2 0000004483C2 0 VS_VERSION_INFO
00000004641E 00000044841E 0 StringFileInfo
000000046442 000000448442 0 040904b0
00000004645A 00000044845A 0 CompanyName
000000046474 000000448474 0 Sysinternals
000000046496 000000448496 0 FileDescription
0000000464B8 0000004484B8 0 sdelete
0000000464CE 0000004484CE 0 FileVersion
0000000464FA 0000004484FA 0 InternalName
000000046514 000000448514 0 sdelete
00000004652A 00000044852A 0 LegalCopyright
00000004655E 00000044855E 0 1999-2012 Mark Russinovich
00000004659E 00000044859E 0 OriginalFilename
0000000465C0 0000004485C0 0 sdelete.exe
0000000465DE 0000004485DE 0 ProductName
0000000465F8 0000004485F8 0 Sysinternals Sdelete
00000004662A 00000044862A 0 ProductVersion
00000004665A 00000044865A 0 VarFileInfo
00000004667A 00000044867A 0 Translation
00000000004D 00000040004D 0 !This program cannot be run in DOS mode.
0000000000D7 0000004000D7 0 oRichC
0000000001F0 0000004001F0 0 .text
000000000218 000000400218 0 .rdata
00000000023F 00000040023F 0 @.data
000000000268 000000400268 0 .reloc
000000000535 000000401135 0 ~,9~$t
File pos Mem pos ID Text
======== ======= == ====
0000000006DB 0000004012DB 0 tC97u?j
000000000786 000000401386 0 FYY;u
0000000007C9 0000004013C9 0 FYY;u
000000000B00 000000401700 0 D$XSV
000000000B47 000000401747 0 D$ Pj
000000000F61 000000401B61 0 SSSh&%@
00000000144B 00000040204B 0 WWCSW
0000000014A7 0000004020A7 0 WWWhL!@
0000000017B9 0000004023B9 0 SSSSS
000000001C47 000000402847 0 jd_;5
0000000024A3 0000004030A3 0 Nt Nu
000000002721 000000403321 0 QQVWj
000000003165 000000403D65 0 D$0SVW
0000000032BF 000000403EBF 0 9D$ u
0000000032CE 000000403ECE 0 |$8 s5Rj
000000003430 000000404030 0 D$0SVW
0000000034DD 0000004040DD 0 L$ Pj
00000000354E 00000040414E 0 CD$(j
000000003596 000000404196 0 9D$$u7
0000000035AA 0000004041AA 0 CL$(+
0000000035E1 0000004041E1 0 Ct$(+
000000003BDB 0000004047DB 0 G@9_8u
000000003E88 000000404A88 0 D$(SVW
000000003F2C 000000404B2C 0 t Huk
000000003F9C 000000404B9C 0 HHu @
000000005463 000000406063 0 t.;:u
0000000054DB 0000004060DB 0 VW=\t
000000005669 000000406269 0 t,;8u
000000005875 000000406475 0 t,;:u
000000005A21 000000406621 0 D$HSVW
000000005A86 000000406686 0 3J(3B,3
000000005AFB 0000004066FB 0 1F(1V,1FP1VTC
000000005E12 000000406A12 0 \$HVW
0000000070B8 000000407CB8 0 CM QPQ
0000000075AB 0000004081AB 0 CM QPQ
0000000075F1 0000004081F1 0 RRRRRRQP
000000007966 000000408566 0 PPPPPPVSW
000000008245 000000408E45 0 t.;:u
000000008327 000000408F27 0 tpNtIN
0000000086B8 0000004092B8 0 OhP C
0000000086C3 0000004092C3 0 YPhP C
0000000086DF 0000004092DF 0 (hT C
0000000086EA 0000004092EA 0 YPhT C
0000000089FF 0000004095FF 0 SSSSSS
000000008A86 000000409686 0 Phx C
000000009070 000000409C70 0 s>9>w:+>j
00000000A5E4 00000040B1E4 0 s6+1S
00000000A79C 00000040B39C 0 2tQHtNH
00000000AA4D 00000040B64D 0 ut9FTtoV
00000000AA7E 00000040B67E 0 9Vh~o
00000000AAE5 00000040B6E5 0 F$;Vh|
00000000ACAD 00000040B8AD 0 t.;:u
00000000ADFE 00000040B9FE 0 \t0HHt
00000000AE0A 00000040BA0A 0 Ht Hu:
00000000B73F 00000040C33F 0 s6+1S
00000000BF2B 00000040CB2B 0 Php$C
00000000C07C 00000040CC7C 0 D$ OW
00000000C386 00000040CF86 0 QQSVW
00000000C3BB 00000040CFBB 0 GF;:r
00000000CD8E 00000040D98E 0 u ;APu
File pos Mem pos ID Text
======== ======= == ====
00000000CDA2 00000040D9A2 0 Php$C
00000000CE16 00000040DA16 0 9Y t5
00000000CF1D 00000040DB1D 0 9wh~TV
00000000CF70 00000040DB70 0 F;wh|
00000000CF90 00000040DB90 0 +WL+OL3
00000000D2E8 00000040DEE8 0 CP tR
00000000D2EE 00000040DEEE 0 {L?uL
00000000D3F2 00000040DFF2 0 ~L}uA
00000000D958 00000040E558 0 9GD|0
00000000D9DA 00000040E5DA 0 ~Hau
00000000DE77 00000040EA77 0 FH<_u\
00000000DE83 00000040EA83 0 FH<.tP<[tL<\tH<*tD<|t@<
00000000DE9B 00000040EA9B 0 t<<$t8
00000000DEAB 00000040EAAB 0 FH<(t(<)t$<+t <?t
00000000DECF 00000040EACF 0 FH<"t
00000000DF01 00000040EB01 0 ?<fu
00000000DF0E 00000040EB0E 0 2<nu
00000000DF1B 00000040EB1B 0 %<ru
00000000EB01 00000040F701 0 SVjdX
00000001153A 00000041213A 0 uPVWhM
00000001298A 00000041358A 0 QQSVWd
000000012B45 000000413745 0 j hx9C
000000012B81 000000413781 0 SSSSS
000000012C07 000000413807 0 PWSWW
000000012C26 000000413826 0 WWWWW
000000012C7F 00000041387F 0 PPPPP
000000012F15 000000413B15 0 Ph<xC
00000001324A 000000413E4A 0 PPPPP
0000000133E9 000000413FE9 0 PRAQh
000000013809 000000414409 0 PP9E u
000000013A61 000000414661 0 j0h :C
00000001462B 00000041522B 0 ft!9q
000000016136 000000416D36 0 t5QVW
000000016376 000000416F76 0 PPPPPPPP
000000016C48 000000417848 0 PPPPP
000000016DB4 0000004179B4 0 jA[jZZ+
000000017267 000000417E67 0 PPPPP
00000001748F 00000041808F 0 3=<xC
0000000175A8 0000004181A8 0 t6h<xC
000000017615 000000418215 0 jdh8;C
00000001762E 00000041822E 0 j@j _W
000000017649 000000418249 0 Ph<xC
0000000176EE 0000004182EE 0 } j@W
000000017ACD 0000004186CD 0 Genuu_
000000017AD6 0000004186D6 0 ineIuV
000000017ADF 0000004186DF 0 nteluM3
000000019107 000000419D07 0 ~pjCXf
000000019383 000000419F83 0 <v5h:
000000019469 00000041A069 0 SSSSS
000000019640 00000041A240 0 VVVVV
00000001AEF2 00000041BAF2 0 < t8< t4
00000001AFCC 00000041BBCC 0 t@VSP
00000001B027 00000041BC27 0 PPPPP
00000001B144 00000041BD44 0 SPPP+
00000001B14D 00000041BD4D 0 FVWPP
00000001B173 00000041BD73 0 SVWPP
00000001B307 00000041BF07 0 PPPPP
00000001B375 00000041BF75 0 VVVVV
00000001B3AD 00000041BFAD 0 j.Yf;
00000001B416 00000041C016 0 j.Yf;
File pos Mem pos ID Text
======== ======= == ====
00000001B41C 00000041C01C 0 tyPVj@W
00000001B431 00000041C031 0 _tcPVj@
00000001B452 00000041C052 0 uCPVj
00000001B469 00000041C069 0 u#j,Xf;
00000001B490 00000041C090 0 PPPPP
00000001B49F 00000041C09F 0 SSSSS
00000001B56E 00000041C16E 0 >Cu/f9F
00000001B5E7 00000041C1E7 0 3=<xC
00000001B74B 00000041C34B 0 SSSSS
00000001B7A2 00000041C3A2 0 @PSjU
00000001B7C0 00000041C3C0 0 PPPPP
00000001B7FF 00000041C3FF 0 SSSSS
00000001BAF0 00000041C6F0 0 QQQQQ
00000001BBAC 00000041C7AC 0 j;Yf9
00000001BC26 00000041C826 0 j;Yf9
00000001BD77 00000041C977 0 PPPPP
00000001C10F 00000041CD0F 0 VVVVV
00000001C1A7 00000041CDA7 0 WVSj
00000001C449 00000041D049 0 RVSQSWV
00000001C484 00000041D084 0 RVSQj
00000001C58D 00000041D18D 0 QVVVj
00000001C7DE 00000041D3DE 0 <at-<rt"<wt
00000001C84E 00000041D44E 0 tRHtC
00000001C8D2 00000041D4D2 0 t;Ht+
00000001CA4F 00000041D64F 0 URPQQh
00000001D1B1 00000041DDB1 0 9E WW
00000001DC07 00000041E807 0 ,SVWj0X
00000001DD3B 00000041E93B 0 u'j0X
00000001DE65 00000041EA65 0 Wj0XPV
00000001DF04 00000041EB04 0 PjdSQ
00000001E06B 00000041EC6B 0 -jd[;
00000001E0BE 00000041ECBE 0 WWWWW
00000001E603 00000041F203 0 VVVVV
00000001E63F 00000041F23F 0 SVWjA_jZ+
00000001E6E7 00000041F2E7 0 uBjAYjZ+
00000001F003 00000041FC03 0 HHtVHHt
00000001F4FA 0000004200FA 0 >0t-N
00000001F922 000000420522 0 QVWSj
00000001FA0B 00000042060B 0 v N+D$
000000020376 000000420F76 0 ~';_t|%3
00000002038A 000000420F8A 0 wtVj
00000002039F 000000420F9F 0 ;_tr.
0000000206B0 0000004212B0 0 tO95d
000000020899 000000421499 0 t VV9u
000000020B31 000000421731 0 PjPW
000000020B48 000000421748 0 $PjQW
000000020B90 000000421790 0 *PjTW
000000020BA7 0000004217A7 0 +PjUW
000000020BBE 0000004217BE 0 ,PjVW
000000020BD8 0000004217D8 0 -PjWW
000000020BEF 0000004217EF 0 .PjRW
000000020C06 000000421806 0 /PjSW
000000020C7C 00000042187C 0 HPjPW
000000020C96 000000421896 0 LPjQW
000000020F6D 000000421B6D 0 <0|o<9
0000000214E3 0000004220E3 0 G Pj*S
0000000214F7 0000004220F7 0 G$Pj+S
00000002150B 00000042210B 0 G(Pj,S
00000002151F 00000042211F 0 G,Pj-S
000000021536 000000422136 0 G0Pj.S
File pos Mem pos ID Text
======== ======= == ====
00000002154A 00000042214A 0 G4Pj/S
000000021572 000000422172 0 G8PjDS
000000021589 000000422189 0 G<PjES
00000002159D 00000042219D 0 G@PjFS
0000000215B1 0000004221B1 0 GDPjGS
0000000215C5 0000004221C5 0 GHPjHS
0000000215DC 0000004221DC 0 GLPjIS
0000000215F0 0000004221F0 0 GPPjJS
000000021604 000000422204 0 GTPjKS
000000021618 000000422218 0 GXPjLS
00000002162F 00000042222F 0 G\PjMS
000000021657 000000422257 0 GdPjOS
00000002166B 00000042226B 0 GhPj8S
000000021682 000000422282 0 GlPj9S
000000021696 000000422296 0 GpPj:S
0000000216AA 0000004222AA 0 GtPj;S
0000000216BE 0000004222BE 0 GxPj<S
0000000216D5 0000004222D5 0 G|Pj=S
00000002171C 00000042231C 0 Pj@Sj
000000021A62 000000422662 0 PjOSj
000000021D10 000000422910 0 tHHt*Ht#
000000022230 000000422E30 0 uJSSR
0000000223E8 000000422FE8 0 SSSSS
0000000224F3 0000004230F3 0 SVWUj
000000022594 000000423194 0 ;t$,v-
000000022619 000000423219 0 UQPXY]Y[
000000022756 000000423356 0 PPPPP
000000022A64 000000423664 0 WWWWW
000000022B15 000000423715 0 PPPPP
000000022CD4 0000004238D4 0 Yu2Vj@h
000000022DCA 0000004239CA 0 tMj_S
000000022E22 000000423A22 0 PPPPP
000000022EFB 000000423AFB 0 @h-:B
000000023887 000000424487 0 r)f;q
000000023901 000000424501 0 r2f;A
0000000239AA 0000004245AA 0 SVjA[jZ
000000023A6F 00000042466F 0 jAZjZ
000000023D31 000000424931 0 SSSSV
000000023DBD 0000004249BD 0 SSSSV
000000023F66 000000424B66 0 PPPPP
000000024026 000000424C26 0 v N+D$
000000024166 000000424D66 0 Ht+Ht$Ht
000000025655 000000426255 0 +t"HHt
0000000256AB 0000004262AB 0 9] t"
000000026507 000000427107 0 SSSSS
0000000269E9 0000004275E9 0 jxYf;
0000000269F1 0000004275F1 0 jXYf;
000000026A1B 00000042761B 0 jxYf;
000000026A23 000000427623 0 jXYf;
000000026A4C 00000042764C 0 uHjAXf;
000000026D9A 00000042799A 0 j0Yf;
000000028E68 00000042A868 0 permission denied
000000028E7C 00000042A87C 0 file exists
000000028E88 00000042A888 0 no such device
000000028E98 00000042A898 0 filename too long
000000028EAC 00000042A8AC 0 device or resource busy
000000028EC4 00000042A8C4 0 io error
000000028ED0 00000042A8D0 0 directory not empty
000000028EE4 00000042A8E4 0 invalid argument
000000028EF8 00000042A8F8 0 no space on device
File pos Mem pos ID Text
======== ======= == ====
000000028F0C 00000042A90C 0 no such file or directory
000000028F28 00000042A928 0 function not supported
000000028F40 00000042A940 0 no lock available
000000028F54 00000042A954 0 not enough memory
000000028F68 00000042A968 0 resource unavailable try again
000000028F88 00000042A988 0 cross device link
000000028F9C 00000042A99C 0 operation canceled
000000028FB0 00000042A9B0 0 too many files open
000000028FC4 00000042A9C4 0 permission_denied
000000028FD8 00000042A9D8 0 address_in_use
000000028FE8 00000042A9E8 0 address_not_available
000000029000 00000042AA00 0 address_family_not_supported
000000029020 00000042AA20 0 connection_already_in_progress
000000029040 00000042AA40 0 bad_file_descriptor
000000029054 00000042AA54 0 connection_aborted
000000029068 00000042AA68 0 connection_refused
00000002907C 00000042AA7C 0 connection_reset
000000029090 00000042AA90 0 destination_address_required
0000000290B0 00000042AAB0 0 bad_address
0000000290BC 00000042AABC 0 host_unreachable
0000000290D0 00000042AAD0 0 operation_in_progress
0000000290E8 00000042AAE8 0 interrupted
0000000290F4 00000042AAF4 0 invalid_argument
000000029108 00000042AB08 0 already_connected
00000002911C 00000042AB1C 0 too_many_files_open
000000029130 00000042AB30 0 message_size
000000029140 00000042AB40 0 filename_too_long
000000029154 00000042AB54 0 network_down
000000029164 00000042AB64 0 network_reset
000000029174 00000042AB74 0 network_unreachable
000000029188 00000042AB88 0 no_buffer_space
000000029198 00000042AB98 0 no_protocol_option
0000000291AC 00000042ABAC 0 not_connected
0000000291BC 00000042ABBC 0 not_a_socket
0000000291CC 00000042ABCC 0 operation_not_supported
0000000291E4 00000042ABE4 0 protocol_not_supported
0000000291FC 00000042ABFC 0 wrong_protocol_type
000000029210 00000042AC10 0 timed_out
00000002921C 00000042AC1C 0 operation_would_block
000000029234 00000042AC34 0 address family not supported
000000029254 00000042AC54 0 address in use
000000029264 00000042AC64 0 address not available
00000002927C 00000042AC7C 0 already connected
000000029290 00000042AC90 0 argument list too long
0000000292A8 00000042ACA8 0 argument out of domain
0000000292C0 00000042ACC0 0 bad address
0000000292CC 00000042ACCC 0 bad file descriptor
0000000292E0 00000042ACE0 0 bad message
0000000292EC 00000042ACEC 0 broken pipe
0000000292F8 00000042ACF8 0 connection aborted
00000002930C 00000042AD0C 0 connection already in progress
00000002932C 00000042AD2C 0 connection refused
000000029340 00000042AD40 0 connection reset
000000029354 00000042AD54 0 destination address required
000000029374 00000042AD74 0 executable format error
00000002938C 00000042AD8C 0 file too large
00000002939C 00000042AD9C 0 host unreachable
0000000293B0 00000042ADB0 0 identifier removed
0000000293C4 00000042ADC4 0 illegal byte sequence
0000000293DC 00000042ADDC 0 inappropriate io control operation
File pos Mem pos ID Text
======== ======= == ====
000000029400 00000042AE00 0 invalid seek
000000029410 00000042AE10 0 is a directory
000000029420 00000042AE20 0 message size
000000029430 00000042AE30 0 network down
000000029440 00000042AE40 0 network reset
000000029450 00000042AE50 0 network unreachable
000000029464 00000042AE64 0 no buffer space
000000029474 00000042AE74 0 no child process
000000029488 00000042AE88 0 no link
000000029490 00000042AE90 0 no message available
0000000294A8 00000042AEA8 0 no message
0000000294B4 00000042AEB4 0 no protocol option
0000000294C8 00000042AEC8 0 no stream resources
0000000294DC 00000042AEDC 0 no such device or address
0000000294F8 00000042AEF8 0 no such process
000000029508 00000042AF08 0 not a directory
000000029518 00000042AF18 0 not a socket
000000029528 00000042AF28 0 not a stream
000000029538 00000042AF38 0 not connected
000000029548 00000042AF48 0 not supported
000000029558 00000042AF58 0 operation in progress
000000029570 00000042AF70 0 operation not permitted
000000029588 00000042AF88 0 operation not supported
0000000295A0 00000042AFA0 0 operation would block
0000000295B8 00000042AFB8 0 owner dead
0000000295C4 00000042AFC4 0 protocol error
0000000295D4 00000042AFD4 0 protocol not supported
0000000295EC 00000042AFEC 0 read only file system
000000029604 00000042B004 0 resource deadlock would occur
000000029624 00000042B024 0 result out of range
000000029638 00000042B038 0 state not recoverable
000000029650 00000042B050 0 stream timeout
000000029660 00000042B060 0 text file busy
000000029670 00000042B070 0 timed out
00000002967C 00000042B07C 0 too many files open in system
00000002969C 00000042B09C 0 too many links
0000000296AC 00000042B0AC 0 too many symbolic link levels
0000000296CC 00000042B0CC 0 value too large
0000000296DC 00000042B0DC 0 wrong protocol type
0000000297A0 00000042B1A0 0 bad allocation
0000000297F0 00000042B1F0 0 regex_error(error_collate): The expression contained an invalid collating element name.
000000029848 00000042B248 0 regex_error(error_ctype): The expression contained an invalid character class name.
0000000298A0 00000042B2A0 0 regex_error(error_escape): The expression contained an invalid escaped character, or a trailing escape.
000000029908 00000042B308 0 regex_error(error_backref): The expression contained an invalid back reference.
000000029958 00000042B358 0 regex_error(error_brack): The expression contained mismatched [ and ].
0000000299A0 00000042B3A0 0 regex_error(error_paren): The expression contained mismatched ( and ).
0000000299E8 00000042B3E8 0 regex_error(error_brace): The expression contained mismatched { and }.
000000029A30 00000042B430 0 regex_error(error_badbrace): The expression contained an invalid range in a { expression }.
000000029A90 00000042B490 0 regex_error(error_range): The expression contained an invalid character range, such as [b-a] in most encodings.
000000029B00 00000042B500 0 regex_error(error_space): There was insufficient memory to convert the expression into a finite state machine.
000000029B70 00000042B570 0 regex_error(error_badrepeat): One of *?+{ was not preceded by a valid regular expression.
000000029BD0 00000042B5D0 0 regex_error(error_complexity): The complexity of an attempted match against a regular expression exceeded a pre-set level.
000000029C50 00000042B650 0 regex_error(error_stack): There was insufficient memory to determine whether the regular expression could match the specified character sequence.
000000029CE4 00000042B6E4 0 regex_error(error_parse)
000000029D00 00000042B700 0 regex_error(error_syntax)
000000029D1C 00000042B71C 0 regex_error
000000029E4C 00000042B84C 0 0123456789abcdefghijklmnopqrstuvwxyz
000000029E80 00000042B880 0
000000029E9C 00000042B89C 0 0123456789abcdefghijklmnopqrstuvwxyz
000000029EEC 00000042B8EC 0 0123456789abcdefABCDEF
File pos Mem pos ID Text
======== ======= == ====
000000029FBC 00000042B9BC 0 Unknown exception
000000029FDC 00000042B9DC 0 RoInitialize
00000002A004 00000042BA04 0 RoUninitialize
00000002A034 00000042BA34 0 CorExitProcess
00000002A610 00000042C010 0 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]
00000002A651 00000042C051 0 abcdefghijklmnopqrstuvwxyz{|}~
00000002A790 00000042C190 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]
00000002A7D1 00000042C1D1 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
00000002A880 00000042C280 0 bad exception
00000002A8B0 00000042C2B0 0 FlsAlloc
00000002A8BC 00000042C2BC 0 FlsFree
00000002A8C4 00000042C2C4 0 FlsGetValue
00000002A8D0 00000042C2D0 0 FlsSetValue
00000002A8DC 00000042C2DC 0 InitializeCriticalSectionEx
00000002A8F8 00000042C2F8 0 CreateSemaphoreExW
00000002A90C 00000042C30C 0 SetThreadStackGuarantee
00000002A924 00000042C324 0 CreateThreadpoolTimer
00000002A93C 00000042C33C 0 SetThreadpoolTimer
00000002A950 00000042C350 0 WaitForThreadpoolTimerCallbacks
00000002A970 00000042C370 0 CloseThreadpoolTimer
00000002A988 00000042C388 0 CreateThreadpoolWait
00000002A9A0 00000042C3A0 0 SetThreadpoolWait
00000002A9B4 00000042C3B4 0 CloseThreadpoolWait
00000002A9C8 00000042C3C8 0 FlushProcessWriteBuffers
00000002A9E4 00000042C3E4 0 FreeLibraryWhenCallbackReturns
00000002AA04 00000042C404 0 GetCurrentProcessorNumber
00000002AA20 00000042C420 0 GetLogicalProcessorInformation
00000002AA40 00000042C440 0 CreateSymbolicLinkW
00000002AA54 00000042C454 0 SetDefaultDllDirectories
00000002AA70 00000042C470 0 EnumSystemLocalesEx
00000002AA84 00000042C484 0 CompareStringEx
00000002AA94 00000042C494 0 GetDateFormatEx
00000002AAA4 00000042C4A4 0 GetLocaleInfoEx
00000002AAB4 00000042C4B4 0 GetTimeFormatEx
00000002AAC4 00000042C4C4 0 GetUserDefaultLocaleName
00000002AAE0 00000042C4E0 0 IsValidLocaleName
00000002AAF4 00000042C4F4 0 LCMapStringEx
00000002AB04 00000042C504 0 GetCurrentPackageId
00000002CBD0 00000042E5D0 0 (null)
00000002CC09 00000042E609 0 ( 8PX
00000002CC11 00000042E611 0 700WP
00000002CC29 00000042E629 0 xpxxxx
00000002D754 00000042F154 0 SunMonTueWedThuFriSat
00000002D76C 00000042F16C 0 JanFebMarAprMayJunJulAugSepOctNovDec
00000002D7B0 00000042F1B0 0 Sunday
00000002D7B8 00000042F1B8 0 Monday
00000002D7C0 00000042F1C0 0 Tuesday
00000002D7C8 00000042F1C8 0 Wednesday
00000002D7D4 00000042F1D4 0 Thursday
00000002D7E0 00000042F1E0 0 Friday
00000002D7E8 00000042F1E8 0 Saturday
00000002D824 00000042F224 0 January
00000002D82C 00000042F22C 0 February
00000002D838 00000042F238 0 March
00000002D840 00000042F240 0 April
00000002D858 00000042F258 0 August
00000002D860 00000042F260 0 September
00000002D86C 00000042F26C 0 October
00000002D874 00000042F274 0 November
00000002D880 00000042F280 0 December
File pos Mem pos ID Text
======== ======= == ====
00000002D894 00000042F294 0 MM/dd/yy
00000002D8A0 00000042F2A0 0 dddd, MMMM dd, yyyy
00000002D8B4 00000042F2B4 0 HH:mm:ss
00000002DBCF 00000042F5CF 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]
00000002DC10 00000042F610 0 abcdefghijklmnopqrstuvwxyz{|}~
00000002DC58 00000042F658 0 UTF-8
00000002DC60 00000042F660 0 UTF-16LE
00000002DC6C 00000042F66C 0 UNICODE
00000002DCB8 00000042F6B8 0 log10
00000002DCF0 00000042F6F0 0 atan2
00000002DD14 00000042F714 0 floor
00000002DD2C 00000042F72C 0 ldexp
00000002DD34 00000042F734 0 _cabs
00000002DD3C 00000042F73C 0 _hypot
00000002DD4C 00000042F74C 0 frexp
00000002DD60 00000042F760 0 _logb
00000002DD68 00000042F768 0 _nextafter
00000002DD74 00000042F774 0 e+000
00000002DE1D 00000042F81D 0 ('8PW
00000002DE26 00000042F826 0 700PP
00000002DE41 00000042F841 0 xppwpp
00000002DE6C 00000042F86C 0 MessageBoxW
00000002DE78 00000042F878 0 GetActiveWindow
00000002DE88 00000042F888 0 GetLastActivePopup
00000002DE9C 00000042F89C 0 GetUserObjectInformationW
00000002DEB8 00000042F8B8 0 GetProcessWindowStation
00000002E058 00000042FA58 0 __based(
00000002E064 00000042FA64 0 __cdecl
00000002E06C 00000042FA6C 0 __pascal
00000002E078 00000042FA78 0 __stdcall
00000002E084 00000042FA84 0 __thiscall
00000002E090 00000042FA90 0 __fastcall
00000002E09C 00000042FA9C 0 __clrcall
00000002E0A8 00000042FAA8 0 __eabi
00000002E0B0 00000042FAB0 0 __ptr64
00000002E0B8 00000042FAB8 0 __restrict
00000002E0C4 00000042FAC4 0 __unaligned
00000002E0D0 00000042FAD0 0 restrict(
00000002E0E4 00000042FAE4 0 delete
00000002E108 00000042FB08 0 operator
00000002E189 00000042FB89 0 vftable'
00000002E195 00000042FB95 0 vbtable'
00000002E1A1 00000042FBA1 0 vcall'
00000002E1A9 00000042FBA9 0 typeof'
00000002E1B5 00000042FBB5 0 local static guard'
00000002E1CD 00000042FBCD 0 string'
00000002E1D9 00000042FBD9 0 vbase destructor'
00000002E1ED 00000042FBED 0 vector deleting destructor'
00000002E20D 00000042FC0D 0 default constructor closure'
00000002E22D 00000042FC2D 0 scalar deleting destructor'
00000002E24D 00000042FC4D 0 vector constructor iterator'
00000002E26D 00000042FC6D 0 vector destructor iterator'
00000002E28D 00000042FC8D 0 vector vbase constructor iterator'
00000002E2B1 00000042FCB1 0 virtual displacement map'
00000002E2CD 00000042FCCD 0 eh vector constructor iterator'
00000002E2F1 00000042FCF1 0 eh vector destructor iterator'
00000002E311 00000042FD11 0 eh vector vbase constructor iterator'
00000002E339 00000042FD39 0 copy constructor closure'
00000002E355 00000042FD55 0 udt returning'
00000002E371 00000042FD71 0 local vftable'
File pos Mem pos ID Text
======== ======= == ====
00000002E381 00000042FD81 0 local vftable constructor closure'
00000002E3A4 00000042FDA4 0 new[]
00000002E3AC 00000042FDAC 0 delete[]
00000002E3B9 00000042FDB9 0 omni callsig'
00000002E3C9 00000042FDC9 0 placement delete closure'
00000002E3E5 00000042FDE5 0 placement delete[] closure'
00000002E405 00000042FE05 0 managed vector constructor iterator'
00000002E42D 00000042FE2D 0 managed vector destructor iterator'
00000002E455 00000042FE55 0 eh vector copy constructor iterator'
00000002E47D 00000042FE7D 0 eh vector vbase copy constructor iterator'
00000002E4A9 00000042FEA9 0 dynamic initializer for '
00000002E4C5 00000042FEC5 0 dynamic atexit destructor for '
00000002E4E9 00000042FEE9 0 vector copy constructor iterator'
00000002E50D 00000042FF0D 0 vector vbase copy constructor iterator'
00000002E539 00000042FF39 0 managed vector copy constructor iterator'
00000002E565 00000042FF65 0 local static thread guard'
00000002E580 00000042FF80 0 Type Descriptor'
00000002E594 00000042FF94 0 Base Class Descriptor at (
00000002E5B0 00000042FFB0 0 Base Class Array'
00000002E5C4 00000042FFC4 0 Class Hierarchy Descriptor'
00000002E5E4 00000042FFE4 0 Complete Object Locator'
00000002E600 000000430000 0 CreateFile2
00000002F3D0 000000430DD0 0 1#SNAN
00000002F3D8 000000430DD8 0 1#IND
00000002F3E0 000000430DE0 0 1#INF
00000002F3E8 000000430DE8 0 1#QNAN
00000002F3F0 000000430DF0 0 bad locale name
00000002F404 000000430E04 0 generic
00000002F40C 000000430E0C 0 unknown error
00000002F41C 000000430E1C 0 iostream
00000002F428 000000430E28 0 iostream stream error
00000002F440 000000430E40 0 system
00000002F448 000000430E48 0 ios_base::badbit set
00000002F460 000000430E60 0 ios_base::failbit set
00000002F478 000000430E78 0 ios_base::eofbit set
00000002F490 000000430E90 0 alnum
00000002F498 000000430E98 0 alpha
00000002F4A0 000000430EA0 0 blank
00000002F4A8 000000430EA8 0 cntrl
00000002F4B4 000000430EB4 0 digit
00000002F4BC 000000430EBC 0 graph
00000002F4C4 000000430EC4 0 lower
00000002F4CC 000000430ECC 0 print
00000002F4D4 000000430ED4 0 punct
00000002F4DC 000000430EDC 0 space
00000002F4E8 000000430EE8 0 upper
00000002F4F4 000000430EF4 0 xdigit
00000002F59C 000000430F9C 0 Developed by kernyv@jabbim.com
00000002F5D4 000000430FD4 0 /autorun
00000002F5E0 000000430FE0 0 be59a724feae790b3f315edf71a8450888c021f113e3c2b471e174130c201852
00000002F624 000000431024 0 Developed by kernyv@jabbim.com
00000002F644 000000431044 0 service
00000002F64C 00000043104C 0 /uninstall
00000002F658 000000431058 0 f26a57da928d6f3e3480dfc7d03761161191bdb170e10ca15c7ac5de6912945c
00000002F6BC 0000004310BC 0 /install
00000002F6C8 0000004310C8 0 692cdaf6e42ab3a4f307e5d047249f7b30ceddd6bc88f22ca032412419bd62b7
00000002F70C 00000043110C 0 install
00000002F714 000000431114 0 /cleanup
00000002F720 000000431120 0 0679c7c0c9b0d6919c12cbc087e942d7bf48d3a78cd3ec80321fbfd1b33a1904
00000002F764 000000431164 0 remove
File pos Mem pos ID Text
======== ======= == ====
00000002F76C 00000043116C 0 start
00000002F77C 00000043117C 0 /stop
00000002F784 000000431184 0 CDM: %s
00000002F790 000000431190 0 CDM: Unknown
00000002F7A4 0000004311A4 0 IDC: %s
00000002F7B0 0000004311B0 0 IDC: Unknown
00000002F7C4 0000004311C4 0 PIN: %s
00000002F7D0 0000004311D0 0 PIN: Unknown
00000002F7E4 0000004311E4 0 hostname
00000002F7F0 0000004311F0 0 \temp\clnup.dat
00000002F820 000000431220 0 \temp\clnup.dat
00000002F830 000000431230 0 /autorun
00000002F83C 00000043123C 0 taskkill /IM dbackup.exe /T /F
00000002F85C 00000043125C 0 \System32\dbackup.exe
00000002F874 000000431274 0 /service
00000002F920 000000431320 0 BUTTON
00000002F928 000000431328 0 hostname
00000002F934 000000431334 0 HOSTNAME: Unknown
00000002F94C 00000043134C 0 CDM: Unknown
00000002F960 000000431360 0 PIN: Unknown
00000002F974 000000431374 0 IDC: Unknown
00000002F994 000000431394 0 static
00000002F99C 00000043139C 0 HOSTNAME: Unknown
00000002F9B4 0000004313B4 0 Dispensing %d items from cash unit #%d
00000002F9E4 0000004313E4 0 CleanUp
00000002F9F4 0000004313F4 0 /cleanup
00000002FA04 000000431404 0 Uninstall
00000002FA18 000000431418 0 Uninstall Service
00000002FA34 000000431434 0 Network Disable
00000002FA4C 00000043144C 0 Network Enable
00000002FA64 000000431464 0 DISPENSE
00000002FA70 000000431470 0 SETTINGS
00000002FA84 000000431484 0 REBOOT
00000002FA8C 00000043148C 0 %s:%d (%d) = %d
00000002FA9D 00000043149D 0 INIT:%d = %d, %d%%
00000002FAC0 0000004314C0 0 1.Ignore cassete balance
00000002FADC 0000004314DC 0 2.CLEAN LOGS
00000002FAEC 0000004314EC 0 3.HIDE
00000002FAF4 0000004314F4 0 4.BACK
00000002FAFC 0000004314FC 0 5.UNINSTALL
00000002FB08 000000431508 0 6.UNINSTALL SERVICE
00000002FB1C 00000043151C 0 7.NETWORK: ENABLE
00000002FB30 000000431530 0 0.NETWORK: DISABLE
00000002FB44 000000431544 0 [%Y.%m.%d %H:%M:%S]
00000002FC1C 00000043161C 0 WFS_PIN_FK_0
00000002FC2C 00000043162C 0 WFS_PIN_FK_1
00000002FC3C 00000043163C 0 WFS_PIN_FK_2
00000002FC4C 00000043164C 0 WFS_PIN_FK_3
00000002FC5C 00000043165C 0 WFS_PIN_FK_4
00000002FC6C 00000043166C 0 WFS_PIN_FK_5
00000002FC7C 00000043167C 0 WFS_PIN_FK_6
00000002FC8C 00000043168C 0 WFS_PIN_FK_7
00000002FC9C 00000043169C 0 WFS_PIN_FK_8
00000002FCAC 0000004316AC 0 WFS_PIN_FK_9
00000002FCBC 0000004316BC 0 WFS_PIN_FK_ENTER
00000002FCD0 0000004316D0 0 WFS_PIN_FK_CANCEL
00000002FCE4 0000004316E4 0 WFS_PIN_FK_CLEAR
00000002FCF8 0000004316F8 0 WFS_PIN_FK_BACKSPACE
00000002FD10 000000431710 0 WFS_PIN_FK_HELP
00000002FD20 000000431720 0 WFS_PIN_FK_DECPOINT
File pos Mem pos ID Text
======== ======= == ====
00000002FD34 000000431734 0 WFS_PIN_FK_00
00000002FD44 000000431744 0 WFS_PIN_FK_000
00000002FD54 000000431754 0 WFS_PIN_FK_RES1
00000002FD64 000000431764 0 WFS_PIN_FK_RES2
00000002FD74 000000431774 0 WFS_PIN_FK_RES3
00000002FD84 000000431784 0 WFS_PIN_FK_RES4
00000002FD94 000000431794 0 WFS_PIN_FK_RES5
00000002FDA4 0000004317A4 0 WFS_PIN_FK_RES6
00000002FDB4 0000004317B4 0 WFS_PIN_FK_RES7
00000002FDC4 0000004317C4 0 WFS_PIN_FK_RES8
00000002FDD4 0000004317D4 0 WFS_PIN_FK_OEM1
00000002FDE4 0000004317E4 0 WFS_PIN_FK_OEM2
00000002FDF4 0000004317F4 0 WFS_PIN_FK_OEM3
00000002FE04 000000431804 0 WFS_PIN_FK_OEM4
00000002FE14 000000431814 0 WFS_PIN_FK_OEM5
00000002FE24 000000431824 0 WFS_PIN_FK_OEM6
00000002FE34 000000431834 0 WFS_UNKNOWN_KEY
00000002FE44 000000431844 0 \sd.exe
00000002FE4C 00000043184C 0 taskkill /IM aptra* /T /F
00000002FE68 000000431868 0 taskkill /IM ncr* /T /F
00000002FE80 000000431880 0 taskkill /IM java.exe /T /F
00000002FE9C 00000043189C 0 taskkill /IM wrapper.exe /T /F
00000002FEBC 0000004318BC 0 taskkill /IM aiw.exe /T /F
00000002FED8 0000004318D8 0 taskkill /IM *came* /T /F
00000002FEF4 0000004318F4 0 taskkill /IM snmp.exe /T /F
00000002FF10 000000431910 0 taskkill /IM *gbr* /T /F
00000002FF2C 00000043192C 0 taskkill /IM ul*.exe /T /F
00000002FF48 000000431948 0 -accepteula -p 8 -a -q -s d:\*
00000002FF68 000000431968 0 -accepteula -p 8 -a -q -s e:\*
00000002FF88 000000431988 0 -accepteula -p 8 -a -q -s f:\*
00000002FFA8 0000004319A8 0 -accepteula -p 8 -a -q -s g:\*
00000002FFC8 0000004319C8 0 -accepteula -p 8 -a -q -s h:\*
00000002FFE8 0000004319E8 0 -accepteula -p 8 -a -q -s c:\*.log
00000003000C 000000431A0C 0 -accepteula -p 8 -a -q -s c:\*.jrn
000000030030 000000431A30 0 -accepteula -p 8 -a -q -s c:\*.trc
000000030054 000000431A54 0 -accepteula -p 8 -a -q -s c:\*.xml
000000030078 000000431A78 0 -accepteula -p 8 -a -q -s c:\*.zip
00000003009C 000000431A9C 0 -accepteula -p 8 -a -q -s c:\*.bak
0000000300C0 000000431AC0 0 -accepteula -p 8 -a -q -s c:\*.err
0000000300E4 000000431AE4 0 -accepteula -p 8 -a -q -s c:\*.idb
000000030108 000000431B08 0 -accepteula -p 8 -a -q -s c:\*.idx
00000003012C 000000431B2C 0 -accepteula -p 8 -a -q -s c:\*.dat
000000030150 000000431B50 0 -accepteula -p 8 -a -q -s c:\*.gsb
000000030174 000000431B74 0 -accepteula -p 8 -a -q -s c:\*.txc
000000030198 000000431B98 0 -accepteula -p 8 -a -q -s c:\*
0000000301B8 000000431BB8 0 APTRA
0000000301C0 000000431BC0 0 C:\Program Files\NCR Aptra\bin\NCRPRS.exe
0000000301EC 000000431BEC 0 NCRPRS
0000000301F4 000000431BF4 0 Agilis
0000000301FC 000000431BFC 0 C:\Program Files\Diebold\Agilis Startup\DBackup.exe
000000030230 000000431C30 0 DBackup
000000030238 000000431C38 0 FwLoadPm.exe
000000030248 000000431C48 0 C:\Probase\cscw32\bin\FwLoadPm.exe
00000003026C 000000431C6C 0 FwLoadPm
00000003043C 000000431E3C 0 SOFTWARE\Microsoft\Windows\CurrentVersion
0000000304E4 000000431EE4 0 ProductId
0000000305D0 000000431FD0 0 ComSpec
000000030610 000000432010 0 Logical cash unit with ID:%d, contains %d physical cash units
000000030658 000000432058 0 .DEFAULT\XFS\LOGICAL_SERVICES
000000030678 000000432078 0 %s\%s
File pos Mem pos ID Text
======== ======= == ====
000000030680 000000432080 0 class
000000030688 000000432088 0 LOGICAL_SERVICES
00000003069C 00000043209C 0 class
0000000306B0 0000004320B0 0 alnum
0000000306B8 0000004320B8 0 alpha
0000000306C0 0000004320C0 0 blank
0000000306C8 0000004320C8 0 cntrl
0000000306D4 0000004320D4 0 digit
0000000306DC 0000004320DC 0 graph
0000000306E4 0000004320E4 0 lower
0000000306EC 0000004320EC 0 print
0000000306F4 0000004320F4 0 punct
0000000306FC 0000004320FC 0 space
000000030708 000000432108 0 upper
000000030714 000000432114 0 xdigit
0000000307C8 0000004321C8 0 \D*(\d{13,19})=
0000000307DC 0000004321DC 0 .*+?[]|\-{},:=!
0000000307F4 0000004321F4 0 string too long
000000030804 000000432204 0 invalid string position
00000003081C 00000043221C 0 vector<T> too long
000000030830 000000432230 0 bad cast
00000003083C 00000043223C 0 map/set<T> too long
0000000309F0 0000004323F0 0 0123456789abcdef
000000030A04 000000432404 0 invalid map<K, T> key
000000030A54 000000432454 0 vector<bool> too long
000000030A70 000000432470 0 abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789_
000000030B80 000000432580 0 W:\ATMRipper\Release\ATMRipper.pdb
000000034220 000000435C20 0 KERNEL32.DLL
00000003422D 000000435C2D 0 ADVAPI32.dll
00000003423A 000000435C3A 0 GDI32.dll
000000034244 000000435C44 0 MSXFS.dll
00000003424E 000000435C4E 0 ole32.dll
000000034258 000000435C58 0 SHELL32.dll
000000034264 000000435C64 0 USER32.dll
00000003426F 000000435C6F 0 USERENV.dll
00000003427B 000000435C7B 0 WTSAPI32.dll
000000034288 000000435C88 0 XFS_CONF.dll
000000034298 000000435C98 0 GetTempPathA
0000000342A6 000000435CA6 0 lstrcpyW
0000000342B0 000000435CB0 0 SetEndOfFile
0000000342BE 000000435CBE 0 CreateFileW
0000000342CC 000000435CCC 0 LoadLibraryW
0000000342DA 000000435CDA 0 OutputDebugStringW
0000000342EE 000000435CEE 0 GetShortPathNameW
000000034302 000000435D02 0 ReadConsoleW
000000034310 000000435D10 0 SetFilePointer
000000034320 000000435D20 0 FreeEnvironmentStringsW
00000003433A 000000435D3A 0 GetEnvironmentStringsW
000000034352 000000435D52 0 GetCurrentProcessId
000000034368 000000435D68 0 QueryPerformanceCounter
000000034382 000000435D82 0 SetStdHandle
000000034390 000000435D90 0 lstrcatW
00000003439A 000000435D9A 0 CreateToolhelp32Snapshot
0000000343B4 000000435DB4 0 Process32NextW
0000000343C4 000000435DC4 0 GetModuleFileNameA
0000000343D8 000000435DD8 0 Process32FirstW
0000000343EA 000000435DEA 0 CopyFileA
0000000343F6 000000435DF6 0 GetShortPathNameA
00000003440A 000000435E0A 0 GetEnvironmentVariableA
000000034424 000000435E24 0 GetModuleFileNameW
File pos Mem pos ID Text
======== ======= == ====
000000034438 000000435E38 0 GetWindowsDirectoryA
00000003444E 000000435E4E 0 GetModuleHandleW
000000034460 000000435E60 0 GetCurrentProcess
000000034474 000000435E74 0 CreateProcessW
000000034484 000000435E84 0 GetEnvironmentVariableW
00000003449E 000000435E9E 0 MultiByteToWideChar
0000000344B4 000000435EB4 0 CreateThread
0000000344C2 000000435EC2 0 CloseHandle
0000000344D0 000000435ED0 0 WTSGetActiveConsoleSessionId
0000000344EE 000000435EEE 0 CreateEventW
0000000344FC 000000435EFC 0 GetLastError
00000003450A 000000435F0A 0 Sleep
000000034512 000000435F12 0 SetEvent
00000003451C 000000435F1C 0 WaitForSingleObject
000000034532 000000435F32 0 WriteConsoleW
000000034542 000000435F42 0 GetComputerNameA
000000034554 000000435F54 0 GetOEMCP
00000003455E 000000435F5E 0 GetACP
000000034566 000000435F66 0 IsValidCodePage
000000034578 000000435F78 0 HeapSize
000000034582 000000435F82 0 GetConsoleMode
000000034592 000000435F92 0 GetConsoleCP
0000000345A0 000000435FA0 0 WriteFile
0000000345AC 000000435FAC 0 FlushFileBuffers
0000000345BE 000000435FBE 0 SetFilePointerEx
0000000345D0 000000435FD0 0 ReadFile
0000000345DA 000000435FDA 0 GetProcessHeap
0000000345EA 000000435FEA 0 GetFileType
0000000345F8 000000435FF8 0 GetStdHandle
000000034606 000000436006 0 IsDebuggerPresent
00000003461A 00000043601A 0 EnumSystemLocalesW
00000003462E 00000043602E 0 GetUserDefaultLCID
000000034642 000000436042 0 IsValidLocale
000000034652 000000436052 0 GetLocaleInfoW
000000034662 000000436062 0 LCMapStringW
000000034670 000000436070 0 CompareStringW
000000034680 000000436080 0 GetStartupInfoW
000000034692 000000436092 0 TlsFree
00000003469C 00000043609C 0 InterlockedIncrement
0000000346B2 0000004360B2 0 InterlockedDecrement
0000000346C8 0000004360C8 0 EncodePointer
0000000346D8 0000004360D8 0 DecodePointer
0000000346E8 0000004360E8 0 EnterCriticalSection
0000000346FE 0000004360FE 0 LeaveCriticalSection
000000034714 000000436114 0 DeleteCriticalSection
00000003472C 00000043612C 0 WideCharToMultiByte
000000034742 000000436142 0 GetStringTypeW
000000034752 000000436152 0 HeapFree
00000003475C 00000043615C 0 GetCurrentThreadId
000000034770 000000436170 0 ExitThread
00000003477C 00000043617C 0 GetProcAddress
00000003478C 00000043618C 0 LoadLibraryExW
00000003479C 00000043619C 0 ExitProcess
0000000347AA 0000004361AA 0 GetModuleHandleExW
0000000347BE 0000004361BE 0 AreFileApisANSI
0000000347D0 0000004361D0 0 GetSystemTimeAsFileTime
0000000347EA 0000004361EA 0 HeapReAlloc
0000000347F8 0000004361F8 0 GetCommandLineA
00000003480A 00000043620A 0 RaiseException
00000003481A 00000043621A 0 RtlUnwind
File pos Mem pos ID Text
======== ======= == ====
000000034826 000000436226 0 HeapAlloc
000000034832 000000436232 0 InitializeCriticalSectionAndSpinCount
00000003485A 00000043625A 0 GetCPInfo
000000034866 000000436266 0 IsProcessorFeaturePresent
000000034882 000000436282 0 UnhandledExceptionFilter
00000003489C 00000043629C 0 SetUnhandledExceptionFilter
0000000348BA 0000004362BA 0 SetLastError
0000000348C8 0000004362C8 0 TerminateProcess
0000000348DA 0000004362DA 0 TlsAlloc
0000000348E4 0000004362E4 0 TlsGetValue
0000000348F2 0000004362F2 0 TlsSetValue
000000034900 000000436300 0 RegQueryInfoKeyW
000000034912 000000436312 0 RegSetValueExW
000000034922 000000436322 0 RegCloseKey
000000034930 000000436330 0 AdjustTokenPrivileges
000000034948 000000436348 0 RegOpenKeyExW
000000034958 000000436358 0 RegDeleteValueW
00000003496A 00000043636A 0 DuplicateTokenEx
00000003497C 00000043637C 0 RegOpenKeyExA
00000003498C 00000043638C 0 LookupPrivilegeValueW
0000000349A4 0000004363A4 0 RegQueryValueExA
0000000349B6 0000004363B6 0 OpenProcessToken
0000000349C8 0000004363C8 0 CreateProcessAsUserA
0000000349DE 0000004363DE 0 ControlService
0000000349EE 0000004363EE 0 RegisterServiceCtrlHandlerW
000000034A0C 00000043640C 0 SetServiceStatus
000000034A1E 00000043641E 0 StartServiceW
000000034A2E 00000043642E 0 OpenServiceW
000000034A3C 00000043643C 0 StartServiceCtrlDispatcherW
000000034A5A 00000043645A 0 OpenSCManagerW
000000034A6A 00000043646A 0 DeleteService
000000034A7A 00000043647A 0 CloseServiceHandle
000000034A8E 00000043648E 0 CreateServiceW
000000034A9E 00000043649E 0 RegEnumKeyExA
000000034AAE 0000004364AE 0 GetStockObject
000000034ABE 0000004364BE 0 WFSClose
000000034AC8 0000004364C8 0 WFSAsyncExecute
000000034ADA 0000004364DA 0 WFSFreeResult
000000034AEA 0000004364EA 0 WFSGetInfo
000000034AF6 0000004364F6 0 WFSExecute
000000034B02 000000436502 0 WFSRegister
000000034B10 000000436510 0 WFSOpen
000000034B1A 00000043651A 0 WFSCancelAsyncRequest
000000034B32 000000436532 0 WFSStartUp
000000034B3E 00000043653E 0 WFSCleanUp
000000034B4A 00000043654A 0 CoTaskMemFree
000000034B5A 00000043655A 0 CoInitialize
000000034B68 000000436568 0 CoUninitialize
000000034B78 000000436578 0 CoCreateInstance
000000034B8A 00000043658A 0 ShellExecuteW
000000034B9A 00000043659A 0 ShellExecuteA
000000034BAA 0000004365AA 0 SetWindowTextA
000000034BBA 0000004365BA 0 UpdateWindow
000000034BC8 0000004365C8 0 EnableWindow
000000034BD6 0000004365D6 0 DefWindowProcW
000000034BE6 0000004365E6 0 DispatchMessageW
000000034BF8 0000004365F8 0 TranslateMessage
000000034C0A 00000043660A 0 ShowWindow
000000034C16 000000436616 0 GetDesktopWindow
000000034C28 000000436628 0 BroadcastSystemMessageW
File pos Mem pos ID Text
======== ======= == ====
000000034C42 000000436642 0 CreateWindowExA
000000034C54 000000436654 0 GetWindowLongW
000000034C64 000000436664 0 RegisterClassExW
000000034C76 000000436676 0 LoadCursorW
000000034C84 000000436684 0 CreateWindowExW
000000034C96 000000436696 0 ExitWindowsEx
000000034CA6 0000004366A6 0 SetTimer
000000034CB0 0000004366B0 0 GetWindowRect
000000034CC0 0000004366C0 0 GetMessageW
000000034CCE 0000004366CE 0 PostQuitMessage
000000034CE0 0000004366E0 0 RegisterWindowMessageW
000000034CF8 0000004366F8 0 KillTimer
000000034D04 000000436704 0 LoadIconW
000000034D10 000000436710 0 DestroyEnvironmentBlock
000000034D2A 00000043672A 0 CreateEnvironmentBlock
000000034D42 000000436742 0 WTSQueryUserToken
000000034D56 000000436756 0 WFMQueryValue
000000034D66 000000436766 0 WFMOpenKey
000000034D72 000000436772 0 WFMEnumKey
000000034D7E 00000043677E 0 WFMCloseKey
000000035008 000000437008 0 .?AV_Locimp@locale@std@@
00000003502C 00000043702C 0 .?AVbad_alloc@std@@
000000035048 000000437048 0 .?AVlogic_error@std@@
000000035068 000000437068 0 .?AVlength_error@std@@
000000035088 000000437088 0 .?AVout_of_range@std@@
0000000350A8 0000004370A8 0 .?AVregex_error@std@@
0000000350D0 0000004370D0 0 Copyright (c) 1992-2004 by P.J. Plauger, licensed by Dinkumware, Ltd. ALL RIGHTS RESERVED.
000000035508 000000437508 0 .?AVtype_info@@
000000035650 000000437650 0 .?AVbad_exception@std@@
000000035A32 000000437A32 0
000000035B19 000000437B19 0 abcdefghijklmnopqrstuvwxyz
000000035B39 000000437B39 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ
000000035C52 000000437C52 0
000000035D32 000000437D32 0 abcdefghijklmnopqrstuvwxyz
000000035D52 000000437D52 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ
0000000365DE 0000004385DE 0 z?aUY
000000036620 000000438620 0 zc%C1
000000036673 000000438673 0 -64OS
0000000366B4 0000004386B4 0 .?AVsystem_error@std@@
0000000366D4 0000004386D4 0 .?AV?$codecvt@DDH@std@@
000000036765 000000438765 0 !This program cannot be run in DOS mode.
0000000367DF 0000004387DF 0 oRich
000000036948 000000438948 0 .rsrc
000000036BA5 000000438BA5 0 b]gp _
000000036C21 000000438C21 0 AQMlR
000000036D21 000000438D21 0 VRP,~
000000036D8B 000000438D8B 0 lF4.9
00000003704D 00000043904D 0 9+~WB
00000003710D 00000043910D 0 P3YKO
00000003713D 00000043913D 0 u62h!
000000037154 000000439154 0 ph!d/
000000037189 000000439189 0 EAJDT
000000037193 000000439193 0 8B9o?
00000003734F 00000043934F 0 D;E{kw ;u
000000037387 000000439387 0 :yHHSuT
00000003745A 00000043945A 0 ?t@Vg
00000003771C 00000043971C 0 H|Eh7u[f
000000037767 000000439767 0 u?\!7
0000000377AA 0000004397AA 0 DPuib
000000037822 000000439822 0 uhk /c
File pos Mem pos ID Text
======== ======= == ====
000000037857 000000439857 0 PSZK|
0000000378F9 0000004398F9 0 Q {*Tp
000000037902 000000439902 0 7IpSE
00000003790C 00000043990C 0 %Z2)-
000000037931 000000439931 0 0d+>XO
000000037958 000000439958 0 ldPt3'
0000000379D3 0000004399D3 0 tpI18
0000000379DD 0000004399DD 0 uZG*8F
0000000379EA 0000004399EA 0 Ef2b1
000000037A02 000000439A02 0 7%pP:
000000037AD1 000000439AD1 0 IO<$#V
000000037B29 000000439B29 0 I@#PhX
000000037B73 000000439B73 0 SSEo|
000000037B96 000000439B96 0 ScvX@
000000037BF6 000000439BF6 0 ;Ut/c/cGd
000000037D33 000000439D33 0 sh45+J
000000037D55 000000439D55 0 j[?|h
000000037D5F 000000439D5F 0 !_+T
000000038004 00000043A004 0 q#stv
000000038022 00000043A022 0 T!c=O
0000000380D6 00000043A0D6 0 Ey;4w8/
000000038143 00000043A143 0 ddddl8<@ddddDHLPddddTX\
00000003815B 00000043A15B 0 dddddh
000000038689 00000043A689 0 CCGGp
000000038881 00000043A881 0 ;u Qm)
0000000389C3 00000043A9C3 0 "WHU;=
0000000389EA 00000043A9EA 0 _e|VA
000000038CB5 00000043ACB5 0 :C9Il9E
000000038EE3 00000043AEE3 0 QKihv
000000038F29 00000043AF29 0 a[_5<
000000039031 00000043B031 0 /u,$W
0000000390BF 00000043B0BF 0 "cs{;
0000000390F4 00000043B0F4 0 nt'r[
000000039196 00000043B196 0 ]iS[+
0000000394B3 00000043B4B3 0 ; zlm
000000039529 00000043B529 0 YKYYW
00000003957E 00000043B57E 0 )YN!K6\3
0000000395BC 00000043B5BC 0 %mowlw
0000000395FE 00000043B5FE 0 H2 VN
0000000396D1 00000043B6D1 0 H*~1(
00000003971A 00000043B71A 0 P7n5@
0000000398EF 00000043B8EF 0 wS(;#
000000039992 00000043B992 0 XTj _
000000039A06 00000043BA06 0 eYyJz
000000039A91 00000043BA91 0 hpf4d[S
000000039C0A 00000043BC0A 0 ~3A}R
000000039D3B 00000043BD3B 0 A;VxO
000000039E55 00000043BE55 0 0AOW_
000000039E66 00000043BE66 0 i6j~pUgow
000000039F8B 00000043BF8B 0 W*DkKK
00000003A052 00000043C052 0 GS+mt
00000003A09E 00000043C09E 0 tM8wH
00000003A189 00000043C189 0 WN/2 g
00000003A1F0 00000043C1F0 0 htFlt
00000003A498 00000043C498 0 MRV/T
00000003A4E5 00000043C4E5 0 )jj0Xf]i
00000003A547 00000043C547 0 lKlu;
00000003A5B4 00000043C5B4 0 90tNhF
00000003A8C8 00000043C8C8 0 3hWhc
00000003A94D 00000043C94D 0 ,yhhGH})c
File pos Mem pos ID Text
======== ======= == ====
00000003AAD2 00000043CAD2 0 mPy(ml
00000003ABFB 00000043CBFB 0 tEs o
00000003AD22 00000043CD22 0 0A@@Ju
00000003AD41 00000043CD41 0 7A4YC
00000003AD8B 00000043CD8B 0 P,DT3Q
00000003ADCE 00000043CDCE 0 Bg-k8
00000003ADE0 00000043CDE0 0 $mkh_
00000003AF03 00000043CF03 0 ])>Ew=x
00000003AFD8 00000043CFD8 0 !z(a:
00000003B005 00000043D005 0 0pz?}
00000003B0C4 00000043D0C4 0 BdBnB
00000003B15F 00000043D15F 0 <.u4O8
00000003B1D8 00000043D1D8 0 ,uR$b
00000003B1E8 00000043D1E8 0 *g'j.
00000003B25F 00000043D25F 0 B_t?<X
00000003B2AE 00000043D2AE 0 lu|-
00000003B2E5 00000043D2E5 0 N7X8_l
00000003B2ED 00000043D2ED 0 P=2Y
00000003B341 00000043D341 0 X)h'1
00000003B495 00000043D495 0 6@d&"
00000003B52F 00000043D52F 0 D;2uhR4\"
00000003B5A8 00000043D5A8 0 Yh[=LF
00000003B5BD 00000043D5BD 0 N)W<7
00000003B5D0 00000043D5D0 0 cLlY5
00000003B5E5 00000043D5E5 0 *C2 2
00000003B980 00000043D980 0 t:V)o
00000003BA15 00000043DA15 0 tK&\I
00000003BA55 00000043DA55 0 whd'#
00000003BAB4 00000043DAB4 0 g$ ($
00000003BC89 00000043DC89 0 xs%'Q*
00000003BCE2 00000043DCE2 0 85Fyr
00000003BD66 00000043DD66 0 , <Xw
00000003BD9D 00000043DD9D 0 [grHH
00000003BDFD 00000043DDFD 0 htDmwC>
00000003BE3C 00000043DE3C 0 'b d$
00000003C03C 00000043E03C 0 FCxSD
00000003C180 00000043E180 0 7FPFeu(9
00000003C343 00000043E343 0 @S)Lp
00000003C37A 00000043E37A 0 g+lJ<V
00000003C3D5 00000043E3D5 0 u!>3)
00000003C464 00000043E464 0 EH);s9
00000003C55C 00000043E55C 0 5n5@z<
00000003C59B 00000043E59B 0 l8ulu@&N
00000003C5DB 00000043E5DB 0 80_[H
00000003C767 00000043E767 0 w9=?|
00000003C7AC 00000043E7AC 0 PSmC(W
00000003C7C9 00000043E7C9 0 A5G/q
00000003C923 00000043E923 0 |(&Te
00000003CA02 00000043EA02 0 gPmQq/
00000003CA5C 00000043EA5C 0 H1vk\
00000003CAB2 00000043EAB2 0 *n/ 4
00000003CADC 00000043EADC 0 PojcDMd
00000003CAF9 00000043EAF9 0 5i@xm
00000003CD28 00000043ED28 0 WPsv\>
00000003CDC4 00000043EDC4 0 @>H,dH
00000003CE4C 00000043EE4C 0 t<+Ht
00000003CF61 00000043EF61 0 I\ JW
00000003CF6E 00000043EF6E 0 h#*]Q|
00000003D005 00000043F005 0 *boOu!9
00000003D0F6 00000043F0F6 0 +u)Ku3(
File pos Mem pos ID Text
======== ======= == ====
00000003D13E 00000043F13E 0 -})jAXf
00000003D2B7 00000043F2B7 0 m;RrC.9
00000003D2D2 00000043F2D2 0 v(9:
00000003D32C 00000043F32C 0 L=h7u
00000003D3CC 00000043F3CC 0 GW[*hL
00000003D3E7 00000043F3E7 0 GG>=Yt1
00000003D40F 00000043F40F 0 QI,EKo%
00000003D7B4 00000043F7B4 0 elRSt;
00000003D7FA 00000043F7FA 0 A@F|b
00000003D848 00000043F848 0 fgo*V
00000003D8B9 00000043F8B9 0 Yk&"F"
00000003D903 00000043F903 0 mKrM7
00000003D912 00000043F912 0 31LjP
00000003DAEA 00000043FAEA 0 UuoYe
00000003DBF6 00000043FBF6 0 ~%N|
00000003DC06 00000043FC06 0 QVj PJ
00000003DC18 00000043FC18 0 ;2r 8
00000003DCF9 00000043FCF9 0 (F9dY
00000003DD14 00000043FD14 0 \)T#C
00000003DD25 00000043FD25 0 ;+v N+
00000003DD86 00000043FD86 0 ji_jdZf
00000003DD95 00000043FD95 0 :?ot4
00000003E12F 00000044012F 0 XG!aI<
00000003E158 000000440158 0 A0D-3
00000003E1B5 0000004401B5 0 L"*t2
00000003E316 000000440316 0 rm|2d
00000003E470 000000440470 0 ?9X$b
00000003E53A 00000044053A 0 Pek>/Y
00000003E868 000000440868 0 @"I0+
00000003E87F 00000044087F 0 2u8SS
00000003E919 000000440919 0 _r7y?
00000003EA72 000000440A72 0 Mp>*uh/
00000003EB0D 000000440B0D 0 tiX#L
00000003EB2C 000000440B2C 0 ;-Q%1
00000003EBA7 000000440BA7 0 U%LUE
00000003EBBF 000000440BBF 0 Pj1QC
00000003EBCF 000000440BCF 0 sY)Z2Y
00000003EC08 000000440C08 0 ,-0V.
00000003EC17 000000440C17 0 d08Dd9@
00000003EC2D 000000440C2D 0 eJLIPJ
00000003EC34 000000440C34 0 )YJTKd
00000003EC3C 000000440C3C 0 eXL\MeJ
00000003EC53 000000440C53 0 Y9p:Y
00000003EC69 000000440C69 0 m/>#S2
00000003ECE7 000000440CE7 0 A,04j
00000003EE4B 000000440E4B 0 np D{>
00000003EF97 000000440F97 0 RP$Q
00000003EFC1 000000440FC1 0 ->W.R/-d9/Sb
00000003F1C1 0000004411C1 0 ( 9&~
00000003F31E 00000044131E 0 $0EPx
00000003F3F9 0000004413F9 0 #{s6<
00000003F501 000000441501 0 .;1s(mV
00000003F7B6 0000004417B6 0 )SoU
00000003F831 000000441831 0 %(WMjnl
00000003F859 000000441859 0 ,[Du;(
00000003F972 000000441972 0 HRrYy
00000003FA7E 000000441A7E 0 Bk,_7BF
00000003FB2B 000000441B2B 0 .4&:a
00000003FB8A 000000441B8A 0 @d|F@
00000003FBF3 000000441BF3 0 Nh,YVp$
File pos Mem pos ID Text
======== ======= == ====
00000003FCCA 000000441CCA 0 !aV2&3
00000003FD2E 000000441D2E 0 sSHxW
00000003FE28 000000441E28 0 Zvd@h
00000003FE40 000000441E40 0 R2--k
00000003FEA3 000000441EA3 0 w@MT#
00000003FED9 000000441ED9 0 >9P-?L
00000003FEE8 000000441EE8 0 4?P |
00000003FF22 000000441F22 0 $'9XN
00000003FF5F 000000441F5F 0 %h0H/
000000040008 000000442008 0 @@3T;+[
0000000404BB 0000004424BB 0 H|L].
0000000404CE 0000004424CE 0 \vGfG>
00000004058E 00000044258E 0 I iN&
0000000406DE 0000004426DE 0 }#SHw
0000000408C2 0000004428C2 0 JNaM,
0000000409F1 0000004429F1 0 4MPlEs4+
000000040A83 000000442A83 0 Wq[}_
000000040B66 000000442B66 0 xE7]*Q
000000040C83 000000442C83 0 4&9*8
000000040C8D 000000442C8D 0 y52w,}
000000040CB3 000000442CB3 0 QSWV=
0000000412A9 0000004432A9 0 5_pd
0000000412BE 0000004432BE 0 lFF dty
0000000412CA 0000004432CA 0 uqmie!
00000004134A 00000044334A 0 pHCXp
000000041497 000000443497 0 91cC~@
0000000414EF 0000004434EF 0 !F)P5
000000041596 000000443596 0 DW'K$
00000004159C 00000044359C 0 V2|7S
0000000415C7 0000004435C7 0 A.@6;
000000041607 000000443607 0 %:*4f-
000000041777 000000443777 0 P zgE
000000041A44 000000443A44 0 *G4o-"C
000000041A62 000000443A62 0 9T8Dq
000000041AC2 000000443AC2 0 X\;(nT
000000041B1D 000000443B1D 0 uaVw'
000000041B93 000000443B93 0 sDpRE
000000041BD3 000000443BD3 0 @h0Y<S
000000041C37 000000443C37 0 h4*bC
000000041D4E 000000443D4E 0 MVtQX
000000041D7D 000000443D7D 0 EjPUd
000000041F94 000000443F94 0 </OrY
000000041FD1 000000443FD1 0 Ig@.y
000000042052 000000444052 0 AAFF
0000000420C8 0000004440C8 0 (p3t:
0000000420D5 0000004440D5 0 ;tv-P
0000000420EF 0000004440EF 0 >,BA\
000000042157 000000444157 0 k.%]T
0000000422AD 0000004442AD 0 =t<VN
00000004233F 00000044433F 0 &0_Ej[
0000000423DE 0000004443DE 0 H+J!P)
0000000423F1 0000004443F1 0 8aV_P
000000042404 000000444404 0 Y@ukf
0000000424FE 0000004444FE 0 ;:u84
0000000426B2 0000004446B2 0 #5/7w0
0000000426E0 0000004446E0 0 VVRV2S
000000042715 000000444715 0 $\D-}
000000042782 000000444782 0 Zzb}J
00000004283B 00000044483B 0 5g@T(6E
000000042941 000000444941 0 @@m-
File pos Mem pos ID Text
======== ======= == ====
0000000429DC 0000004449DC 0 s&:)&X6,
000000042B2E 000000444B2E 0 9s*(0(TO
000000042DC4 000000444DC4 0 P##CcX
000000042E40 000000444E40 0 6i(,8@
000000042EE9 000000444EE9 0 f8,s8
000000042F4E 000000444F4E 0 K\ PU
000000042F99 000000444F99 0 T=ISU
000000043063 000000445063 0 r33I]*/v,*;
000000043111 000000445111 0 It'Y#
000000043273 000000445273 0 Pkq~&
0000000432CE 0000004452CE 0 }wUC/XL
000000043393 000000445393 0 }t{~B
0000000433CB 0000004453CB 0 \G%}r
00000004341B 00000044541B 0 4;W5>
0000000435BB 0000004455BB 0 {63=7R!sEn+
00000004381F 00000044581F 0 d\lang1033\b0\fs20$\b
000000043838 000000445838 0 EFFET JURIDIQUE.
000000043853 000000445853 0 r\'e9sent co
00000004386B 00000044586B 0 iertains
00000004387F 00000044587F 0 diques. Vou
000000043893 000000445893 0 ez av r&'auBe/
0000000438C0 0000004458C0 0 momfi'
0000000438D3 0000004458D3 0 *f78r
0000000438E3 0000004458E3 0 -ciSl
0000000438EF 0000004458EF 0 ett4Y
0000000438FA 0000004458FA 0 'sb1<
000000043950 000000445950 0 un telommage
000000043964 000000445964 0 n_orZ
00000004396E 00000044596E 0 4xcluyXg
0000000439CC 0000004459CC 0 y-dZu
000000043A22 000000445A22 0 ie,3@
000000043AA1 000000445AA1 0 (ymp\
000000043ACA 000000445ACA 0 ?k1l;s
000000043AE7 000000445AE7 0 |M:+o a%
000000043AF9 000000445AF9 0 ITATION DES
000000043B05 000000445B05 0 OMMAG
000000043B1C 000000445B1C 0 EXCLU
000000043B25 000000445B25 0 S( R"P SABI@
000000043B79 000000445B79 0 hFuk5,\
000000043BAE 000000445BAE 0 ci$,(
000000043BFD 000000445BFD 0 bb#To
000000043C2A 000000445C2A 0 WKcLB
000000043C32 000000445C32 0 -9xpLs.2
000000043C5A 000000445C5A 0 cvn+L
000000043C84 000000445C84 0 ZR% M\
000000043CFF 000000445CFF 0 7,nmC
000000043D66 000000445D66 0 B/K .
000000043D6C 000000445D6C 0 [hndE? w$F
000000043D97 000000445D97 0 knew
000000043DC9 000000445DC9 0 ,\P&)y$
000000043DE6 000000445DE6 0 wYy)l
000000043DFC 000000445DFC 0 7,,1e-
000000043E20 000000445E20 0 ,eal-
000000043E44 000000445E44 0 ,j)mY
000000043E67 000000445E67 0 BhI7G
000000043E71 000000445E71 0 yX\0aWd1
000000043EB3 000000445EB3 0 capsTZ2
000000043ED7 000000445ED7 0 1$L=n
000000043F24 000000445F24 0 {,+q$5.
000000043F5B 000000445F5B 0 #9"Dw
File pos Mem pos ID Text
======== ======= == ====
000000044008 000000446008 0 !ImGpi
000000044024 000000446024 0 t/pv/
00000004404C 00000044604C 0 #%Lx9l
000000044067 000000446067 0 ?9wi5
000000044099 000000446099 0 kVT&)
000000044105 000000446105 0 >N!iY4
000000044126 000000446126 0 -biF
00000004414A 00000044614A 0 zDkY%k
000000044155 000000446155 0 [7%f-r
0000000441D4 0000004461D4 0 5SUPPORT
000000044273 000000446273 0 HFFFT
000000044282 000000446282 0 1U"1\
00000004429C 00000044629C 0 <Btp://#4
0000000442B9 0000004462B9 0 3OCUMEN
0000000442CF 0000004462CF 0 ?h\v 0!
000000044302 000000446302 0 ,{H<D
00000004432B 00000044632B 0 @,UssKX
00000004434D 00000044634D 0 !V;m%
00000004446A 00000044646A 0 @Za8G=5
000000044494 000000446494 0 LLAAND
0000000444A0 0000004464A0 0 IGHT:k-
000000044509 000000446509 0 FTWARE;YOU
000000044529 000000446529 0 NOT"M0
0000000445AE 0000004465AE 0 M$ C/
0000000445EE 0000004465EE 0 Wkov8
0000000445FB 0000004465FB 0 4|2fz
00000004460E 00000044660E 0 W{\*\k;
000000044629 000000446629 0 506;}\
000000044687 000000446687 0 pg1252\f
000000044696 000000446696 0 (fa_{
0000000446A8 0000004466A8 0 q+f|Tt[[
000000044751 000000446751 0 t!hGUn[
00000004478D 00000044678D 0 s]76d
0000000447BA 0000004467BA 0 ToArgvW
0000000447F8 0000004467F8 0 9+.7F
00000004482D 00000044682D 0 MvdyeoS
000000044843 000000446843 0 pUs&M
000000044849 000000446849 0 cgdQs-
000000044863 000000446863 0 -{/Y*3
00000004488E 00000044688E 0 Cm!M&
000000044905 000000446905 0 e[=pa
00000004497D 00000044697D 0 ;qXB]
0000000449ED 0000004469ED 0 CT3L
0000000449FA 0000004469FA 0 RtlNt
000000044A2C 000000446A2C 0 sCWmFeX
000000044A40 000000446A40 0 (AoC7 t
000000044ABF 000000446ABF 0 ] QeK(qM
000000044B60 000000446B60 0 G-{c<+pQd%'
000000044B81 000000446B81 0 "l<r{
000000044BA1 000000446BA1 0 BSDe3j
000000044BBF 000000446BBF 0 KWow64En
000000044BD5 000000446BD5 0 }wDsuWH0
000000044BF0 000000446BF0 0 Op-[F
000000044C3D 000000446C3D 0 rRitP
000000044C52 000000446C52 0 r>ioe
000000044C5E 000000446C5E 0 PTLOSS
000000044C76 000000446C76 0 R6034u
000000044C9A 000000446C9A 0 C {2brX
000000044CB5 000000446CB5 0 1]'sF):
000000044D30 000000446D30 0 '(/clr
File pos Mem pos ID Text
======== ======= == ====
000000044D4E 000000446D4E 0 DIMai
000000044D76 000000446D76 0 SMxRTo
000000044DAE 000000446DAE 0 6std5
000000044DC5 000000446DC5 0 (_4_k
000000044DF7 000000446DF7 0 o#7mvY
000000044E45 000000446E45 0 -+8l0
000000044EA2 000000446EA2 0 LC_TIME
000000044EB4 000000446EB4 0 MONETARYCTYPEoT
000000044F1F 000000446F1F 0 !"#$%&'()*+,-./
000000044F32 000000446F32 0 lp2>56789:;<=>?@ABCDEb
000000044F4B 000000446F4B 0 FGHIJKLMNOP#T
000000044F5C 000000446F5C 0 1XYZ[\]
000000044F6E 000000446F6E 0 ijklm#pqrS
000000044F7B 000000446F7B 0 muvwxyz{|}~
000000044FB5 000000446FB5 0 e+Fls
000000044FCB 000000446FCB 0 AlP;(
000000044FF9 000000446FF9 0 8PX?
000000045025 000000447025 0 B2H3X
000000045051 000000447051 0 ADVAPI
00000004505B 00000044705B 0 q.De,
000000045079 000000447079 0 A3LaZAV
00000004508D 00000044708D 0 fFkQ?
000000045096 000000447096 0 Box1ZRq
0000000451A5 0000004471A5 0 HH:mn6C
0000000451B0 0000004471B0 0 d, M[
000000045211 000000447211 0 SKGC7yC
00000004521B 00000044721B 0 {?;3#v
000000045239 000000447239 0 :;Tu MN
000000045248 000000447248 0 C;7/'
000000045298 000000447298 0 ?vakp
0000000452A8 0000004472A8 0 -7bw'
0000000452DA 0000004472DA 0 engc4
0000000452FD 0000004472FD 0 f'C'n
00000004536C 00000044736C 0 bpBc?D
000000045385 000000447385 0 2GM#b
000000045398 000000447398 0 XIQ[+
0000000453D6 0000004473D6 0 l#LOlux
0000000454D3 0000004474D3 0 =x,_l,\
0000000455A8 0000004475A8 0 'OxD)/@)<
0000000455B6 0000004475B6 0 4WU,OGB$w
000000045607 000000447607 0 d|hTTO
000000045667 000000447667 0 ('8PW#
0000000456BD 0000004476BD 0 Q[IN$
0000000456EC 0000004476EC 0 k:\s[
0000000456FD 0000004476FD 0 [\\Re
000000045709 000000447709 0 .pdbkpf8
00000004586F 00000044786F 0 tHYvf
000000045AEC 000000447AEC 0 8(40,4M
000000045B27 000000447B27 0 xpd\i
000000045B2E 000000447B2E 0 iPD@<0a
000000045B94 000000447B94 0 0Nm3M
000000045BCE 000000447BCE 0 AtRU{R
000000045BF3 000000447BF3 0 f"@'WaiI
000000045C17 000000447C17 0 N#AZ(j
000000045C72 000000447C72 0 ABTiLa
000000045C97 000000447C97 0 SWTKC
000000045CA3 000000447CA3 0 OutpuP,
000000045CAB 000000447CAB 0 na"qVZT
000000045CDF 000000447CDF 0 Addr/U{
000000045D2D 000000447D2D 0 S4ep2+
File pos Mem pos ID Text
======== ======= == ====
000000045D8B 000000447D8B 0 P\Zwp
000000045DAF 000000447DAF 0 EM [V
000000045DE3 000000447DE3 0 rToMsBym0,{
000000045DF8 000000447DF8 0 ushlBuff_x
000000045E18 000000447E18 0 p!A-]
000000045E4F 000000447E4F 0 j[aQgsP
000000045E65 000000447E65 0 kdspm
000000045E6B 000000447E6B 0 ACLwH
000000045EA0 000000447EA0 0 faz[ID
000000045EB9 000000447EB9 0 SAWU9Va
000000045F1A 000000447F1A 0 D/ogf
000000045FCA 000000447FCA 0 .t6!{
00000004619C 00000044819C 0 XPTPSW
00000004669C 00000044869C 0 <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
0000000466E7 0000004486E7 0 <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
00000004671F 00000044871F 0 <security>
00000004672F 00000044872F 0 <requestedPrivileges>
00000004674C 00000044874C 0 <requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>
0000000467AC 0000004487AC 0 </requestedPrivileges>
0000000467CA 0000004487CA 0 </security>
0000000467DB 0000004487DB 0 </trustInfo>
0000000467EB 0000004487EB 0 </assembly>PA
0000000468AC 0000004488AC 0 KERNEL32.DLL
0000000468B9 0000004488B9 0 ADVAPI32.dll
0000000468C6 0000004488C6 0 COMDLG32.dll
0000000468D3 0000004488D3 0 GDI32.dll
0000000468DD 0000004488DD 0 USER32.dll
0000000468EA 0000004488EA 0 LoadLibraryA
0000000468F8 0000004488F8 0 GetProcAddress
000000046908 000000448908 0 VirtualProtect
000000046918 000000448918 0 VirtualAlloc
000000046926 000000448926 0 VirtualFree
000000046934 000000448934 0 ExitProcess
000000046942 000000448942 0 RegCloseKey
000000046950 000000448950 0 PrintDlgW
00000004695C 00000044895C 0 EndDoc
000000046964 000000448964 0 EndDialog
000000046B80 000000448B80 0 .?AVbad_cast@std@@
000000046B9C 000000448B9C 0 .?AVexception@std@@
000000046BB8 000000448BB8 0 .?AVcodecvt_base@std@@
000000046BD8 000000448BD8 0 .?AVios_base@std@@
000000046BF4 000000448BF4 0 .?AV_Iostream_error_category@std@@
000000046C20 000000448C20 0 .?AVfailure@ios_base@std@@
000000046C44 000000448C44 0 .?AVruntime_error@std@@
000000046C64 000000448C64 0 .?AV?$ctype@D@std@@
000000046C80 000000448C80 0 .?AV_System_error_category@std@@
000000046CAC 000000448CAC 0 .?AV?$basic_filebuf@DU?$char_traits@D@std@@@std@@
000000046CE8 000000448CE8 0 .?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
000000046D20 000000448D20 0 .?AV?$_Iosb@H@std@@
000000046D3C 000000448D3C 0 .?AVerror_category@std@@
000000046D60 000000448D60 0 .?AV_Generic_error_category@std@@
000000046D8C 000000448D8C 0 .?AV_Facet_base@std@@
000000046DAC 000000448DAC 0 .?AUctype_base@std@@
000000046DCC 000000448DCC 0 .?AV?$basic_ofstream@DU?$char_traits@D@std@@@std@@
000000046E08 000000448E08 0 .?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@
000000046E44 000000448E44 0 .?AVfacet@locale@std@@
000000046E64 000000448E64 0 .?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
000000046EA0 000000448EA0 0 .?AV?$basic_istream@DU?$char_traits@D@std@@@std@@
000000046EDC 000000448EDC 0 .?AV?$basic_ifstream@DU?$char_traits@D@std@@@std@@
000000046F18 000000448F18 0 .?AVXFSService@@
File pos Mem pos ID Text
======== ======= == ====
000000046F34 000000448F34 0 .?AVXCDM@@
000000046F48 000000448F48 0 .?AV?$_Node_str@D@std@@
000000046F68 000000448F68 0 .?AV_Node_capture@std@@
000000046F88 000000448F88 0 .?AV?$_Node_class@DV?$regex_traits@D@std@@@std@@
000000046FC4 000000448FC4 0 .?AV_Node_endif@std@@
000000046FE4 000000448FE4 0 .?AV_Node_assert@std@@
000000047004 000000449004 0 .?AV_Node_rep@std@@
000000047020 000000449020 0 .?AVXIDC@@
000000047034 000000449034 0 .?AV_Node_back@std@@
000000047054 000000449054 0 .?AV_Node_end_rep@std@@
000000047074 000000449074 0 .?AV_Node_end_group@std@@
000000047098 000000449098 0 .?AV_Node_base@std@@
0000000470B8 0000004490B8 0 .?AV_Node_if@std@@
0000000470D4 0000004490D4 0 .?AV?$collate@D@std@@
0000000470F4 0000004490F4 0 .?AV_Root_node@std@@
000000047114 000000449114 0 .?AVXPIN@@
000000029FEC 00000042B9EC 0 combase.dll
00000002A01B 00000042BA1B 0 Amscoree.dll
00000002A893 00000042C293 0 Akernel32.dll
00000002B970 00000042D370 0 zh-CHS
00000002BB70 00000042D570 0 ar-SA
00000002BB7C 00000042D57C 0 bg-BG
00000002BB88 00000042D588 0 ca-ES
00000002BB94 00000042D594 0 zh-TW
00000002BBA0 00000042D5A0 0 cs-CZ
00000002BBAC 00000042D5AC 0 da-DK
00000002BBB8 00000042D5B8 0 de-DE
00000002BBC4 00000042D5C4 0 el-GR
00000002BBD0 00000042D5D0 0 en-US
00000002BBDC 00000042D5DC 0 fi-FI
00000002BBE8 00000042D5E8 0 fr-FR
00000002BBF4 00000042D5F4 0 he-IL
00000002BC00 00000042D600 0 hu-HU
00000002BC0C 00000042D60C 0 is-IS
00000002BC18 00000042D618 0 it-IT
00000002BC24 00000042D624 0 ja-JP
00000002BC30 00000042D630 0 ko-KR
00000002BC3C 00000042D63C 0 nl-NL
00000002BC48 00000042D648 0 nb-NO
00000002BC54 00000042D654 0 pl-PL
00000002BC60 00000042D660 0 pt-BR
00000002BC6C 00000042D66C 0 ro-RO
00000002BC78 00000042D678 0 ru-RU
00000002BC84 00000042D684 0 hr-HR
00000002BC90 00000042D690 0 sk-SK
00000002BC9C 00000042D69C 0 sq-AL
00000002BCA8 00000042D6A8 0 sv-SE
00000002BCB4 00000042D6B4 0 th-TH
00000002BCC0 00000042D6C0 0 tr-TR
00000002BCCC 00000042D6CC 0 ur-PK
00000002BCD8 00000042D6D8 0 id-ID
00000002BCE4 00000042D6E4 0 uk-UA
00000002BCF0 00000042D6F0 0 be-BY
00000002BCFC 00000042D6FC 0 sl-SI
00000002BD08 00000042D708 0 et-EE
00000002BD14 00000042D714 0 lv-LV
00000002BD20 00000042D720 0 lt-LT
00000002BD2C 00000042D72C 0 fa-IR
00000002BD38 00000042D738 0 vi-VN
00000002BD44 00000042D744 0 hy-AM
File pos Mem pos ID Text
======== ======= == ====
00000002BD50 00000042D750 0 az-AZ-Latn
00000002BD68 00000042D768 0 eu-ES
00000002BD74 00000042D774 0 mk-MK
00000002BD80 00000042D780 0 tn-ZA
00000002BD8C 00000042D78C 0 xh-ZA
00000002BD98 00000042D798 0 zu-ZA
00000002BDA4 00000042D7A4 0 af-ZA
00000002BDB0 00000042D7B0 0 ka-GE
00000002BDBC 00000042D7BC 0 fo-FO
00000002BDC8 00000042D7C8 0 hi-IN
00000002BDD4 00000042D7D4 0 mt-MT
00000002BDE0 00000042D7E0 0 se-NO
00000002BDEC 00000042D7EC 0 ms-MY
00000002BDF8 00000042D7F8 0 kk-KZ
00000002BE04 00000042D804 0 ky-KG
00000002BE10 00000042D810 0 sw-KE
00000002BE1C 00000042D81C 0 uz-UZ-Latn
00000002BE34 00000042D834 0 tt-RU
00000002BE40 00000042D840 0 bn-IN
00000002BE4C 00000042D84C 0 pa-IN
00000002BE58 00000042D858 0 gu-IN
00000002BE64 00000042D864 0 ta-IN
00000002BE70 00000042D870 0 te-IN
00000002BE7C 00000042D87C 0 kn-IN
00000002BE88 00000042D888 0 ml-IN
00000002BE94 00000042D894 0 mr-IN
00000002BEA0 00000042D8A0 0 sa-IN
00000002BEAC 00000042D8AC 0 mn-MN
00000002BEB8 00000042D8B8 0 cy-GB
00000002BEC4 00000042D8C4 0 gl-ES
00000002BED0 00000042D8D0 0 kok-IN
00000002BEE0 00000042D8E0 0 syr-SY
00000002BEF0 00000042D8F0 0 div-MV
00000002BF00 00000042D900 0 quz-BO
00000002BF10 00000042D910 0 ns-ZA
00000002BF1C 00000042D91C 0 mi-NZ
00000002BF28 00000042D928 0 ar-IQ
00000002BF34 00000042D934 0 zh-CN
00000002BF40 00000042D940 0 de-CH
00000002BF4C 00000042D94C 0 en-GB
00000002BF58 00000042D958 0 es-MX
00000002BF64 00000042D964 0 fr-BE
00000002BF70 00000042D970 0 it-CH
00000002BF7C 00000042D97C 0 nl-BE
00000002BF88 00000042D988 0 nn-NO
00000002BF94 00000042D994 0 pt-PT
00000002BFA0 00000042D9A0 0 sr-SP-Latn
00000002BFB8 00000042D9B8 0 sv-FI
00000002BFC4 00000042D9C4 0 az-AZ-Cyrl
00000002BFDC 00000042D9DC 0 se-SE
00000002BFE8 00000042D9E8 0 ms-BN
00000002BFF4 00000042D9F4 0 uz-UZ-Cyrl
00000002C00C 00000042DA0C 0 quz-EC
00000002C01C 00000042DA1C 0 ar-EG
00000002C028 00000042DA28 0 zh-HK
00000002C034 00000042DA34 0 de-AT
00000002C040 00000042DA40 0 en-AU
00000002C04C 00000042DA4C 0 es-ES
00000002C058 00000042DA58 0 fr-CA
00000002C064 00000042DA64 0 sr-SP-Cyrl
File pos Mem pos ID Text
======== ======= == ====
00000002C07C 00000042DA7C 0 se-FI
00000002C088 00000042DA88 0 quz-PE
00000002C098 00000042DA98 0 ar-LY
00000002C0A4 00000042DAA4 0 zh-SG
00000002C0B0 00000042DAB0 0 de-LU
00000002C0BC 00000042DABC 0 en-CA
00000002C0C8 00000042DAC8 0 es-GT
00000002C0D4 00000042DAD4 0 fr-CH
00000002C0E0 00000042DAE0 0 hr-BA
00000002C0EC 00000042DAEC 0 smj-NO
00000002C0FC 00000042DAFC 0 ar-DZ
00000002C108 00000042DB08 0 zh-MO
00000002C114 00000042DB14 0 de-LI
00000002C120 00000042DB20 0 en-NZ
00000002C12C 00000042DB2C 0 es-CR
00000002C138 00000042DB38 0 fr-LU
00000002C144 00000042DB44 0 bs-BA-Latn
00000002C15C 00000042DB5C 0 smj-SE
00000002C16C 00000042DB6C 0 ar-MA
00000002C178 00000042DB78 0 en-IE
00000002C184 00000042DB84 0 es-PA
00000002C190 00000042DB90 0 fr-MC
00000002C19C 00000042DB9C 0 sr-BA-Latn
00000002C1B4 00000042DBB4 0 sma-NO
00000002C1C4 00000042DBC4 0 ar-TN
00000002C1D0 00000042DBD0 0 en-ZA
00000002C1DC 00000042DBDC 0 es-DO
00000002C1E8 00000042DBE8 0 sr-BA-Cyrl
00000002C200 00000042DC00 0 sma-SE
00000002C210 00000042DC10 0 ar-OM
00000002C21C 00000042DC1C 0 en-JM
00000002C228 00000042DC28 0 es-VE
00000002C234 00000042DC34 0 sms-FI
00000002C244 00000042DC44 0 ar-YE
00000002C250 00000042DC50 0 en-CB
00000002C25C 00000042DC5C 0 es-CO
00000002C268 00000042DC68 0 smn-FI
00000002C278 00000042DC78 0 ar-SY
00000002C284 00000042DC84 0 en-BZ
00000002C290 00000042DC90 0 es-PE
00000002C29C 00000042DC9C 0 ar-JO
00000002C2A8 00000042DCA8 0 en-TT
00000002C2B4 00000042DCB4 0 es-AR
00000002C2C0 00000042DCC0 0 ar-LB
00000002C2CC 00000042DCCC 0 en-ZW
00000002C2D8 00000042DCD8 0 es-EC
00000002C2E4 00000042DCE4 0 ar-KW
00000002C2F0 00000042DCF0 0 en-PH
00000002C2FC 00000042DCFC 0 es-CL
00000002C308 00000042DD08 0 ar-AE
00000002C314 00000042DD14 0 es-UY
00000002C320 00000042DD20 0 ar-BH
00000002C32C 00000042DD2C 0 es-PY
00000002C338 00000042DD38 0 ar-QA
00000002C344 00000042DD44 0 es-BO
00000002C350 00000042DD50 0 es-SV
00000002C35C 00000042DD5C 0 es-HN
00000002C368 00000042DD68 0 es-NI
00000002C374 00000042DD74 0 es-PR
00000002C380 00000042DD80 0 zh-CHT
File pos Mem pos ID Text
======== ======= == ====
00000002C398 00000042DD98 0 af-za
00000002C3A4 00000042DDA4 0 ar-ae
00000002C3B0 00000042DDB0 0 ar-bh
00000002C3BC 00000042DDBC 0 ar-dz
00000002C3C8 00000042DDC8 0 ar-eg
00000002C3D4 00000042DDD4 0 ar-iq
00000002C3E0 00000042DDE0 0 ar-jo
00000002C3EC 00000042DDEC 0 ar-kw
00000002C3F8 00000042DDF8 0 ar-lb
00000002C404 00000042DE04 0 ar-ly
00000002C410 00000042DE10 0 ar-ma
00000002C41C 00000042DE1C 0 ar-om
00000002C428 00000042DE28 0 ar-qa
00000002C434 00000042DE34 0 ar-sa
00000002C440 00000042DE40 0 ar-sy
00000002C44C 00000042DE4C 0 ar-tn
00000002C458 00000042DE58 0 ar-ye
00000002C464 00000042DE64 0 az-az-cyrl
00000002C47C 00000042DE7C 0 az-az-latn
00000002C494 00000042DE94 0 be-by
00000002C4A0 00000042DEA0 0 bg-bg
00000002C4AC 00000042DEAC 0 bn-in
00000002C4B8 00000042DEB8 0 bs-ba-latn
00000002C4D0 00000042DED0 0 ca-es
00000002C4DC 00000042DEDC 0 cs-cz
00000002C4E8 00000042DEE8 0 cy-gb
00000002C4F4 00000042DEF4 0 da-dk
00000002C500 00000042DF00 0 de-at
00000002C50C 00000042DF0C 0 de-ch
00000002C518 00000042DF18 0 de-de
00000002C524 00000042DF24 0 de-li
00000002C530 00000042DF30 0 de-lu
00000002C53C 00000042DF3C 0 div-mv
00000002C54C 00000042DF4C 0 el-gr
00000002C558 00000042DF58 0 en-au
00000002C564 00000042DF64 0 en-bz
00000002C570 00000042DF70 0 en-ca
00000002C57C 00000042DF7C 0 en-cb
00000002C588 00000042DF88 0 en-gb
00000002C594 00000042DF94 0 en-ie
00000002C5A0 00000042DFA0 0 en-jm
00000002C5AC 00000042DFAC 0 en-nz
00000002C5B8 00000042DFB8 0 en-ph
00000002C5C4 00000042DFC4 0 en-tt
00000002C5D0 00000042DFD0 0 en-us
00000002C5DC 00000042DFDC 0 en-za
00000002C5E8 00000042DFE8 0 en-zw
00000002C5F4 00000042DFF4 0 es-ar
00000002C600 00000042E000 0 es-bo
00000002C60C 00000042E00C 0 es-cl
00000002C618 00000042E018 0 es-co
00000002C624 00000042E024 0 es-cr
00000002C630 00000042E030 0 es-do
00000002C63C 00000042E03C 0 es-ec
00000002C648 00000042E048 0 es-es
00000002C654 00000042E054 0 es-gt
00000002C660 00000042E060 0 es-hn
00000002C66C 00000042E06C 0 es-mx
00000002C678 00000042E078 0 es-ni
00000002C684 00000042E084 0 es-pa
File pos Mem pos ID Text
======== ======= == ====
00000002C690 00000042E090 0 es-pe
00000002C69C 00000042E09C 0 es-pr
00000002C6A8 00000042E0A8 0 es-py
00000002C6B4 00000042E0B4 0 es-sv
00000002C6C0 00000042E0C0 0 es-uy
00000002C6CC 00000042E0CC 0 es-ve
00000002C6D8 00000042E0D8 0 et-ee
00000002C6E4 00000042E0E4 0 eu-es
00000002C6F0 00000042E0F0 0 fa-ir
00000002C6FC 00000042E0FC 0 fi-fi
00000002C708 00000042E108 0 fo-fo
00000002C714 00000042E114 0 fr-be
00000002C720 00000042E120 0 fr-ca
00000002C72C 00000042E12C 0 fr-ch
00000002C738 00000042E138 0 fr-fr
00000002C744 00000042E144 0 fr-lu
00000002C750 00000042E150 0 fr-mc
00000002C75C 00000042E15C 0 gl-es
00000002C768 00000042E168 0 gu-in
00000002C774 00000042E174 0 he-il
00000002C780 00000042E180 0 hi-in
00000002C78C 00000042E18C 0 hr-ba
00000002C798 00000042E198 0 hr-hr
00000002C7A4 00000042E1A4 0 hu-hu
00000002C7B0 00000042E1B0 0 hy-am
00000002C7BC 00000042E1BC 0 id-id
00000002C7C8 00000042E1C8 0 is-is
00000002C7D4 00000042E1D4 0 it-ch
00000002C7E0 00000042E1E0 0 it-it
00000002C7EC 00000042E1EC 0 ja-jp
00000002C7F8 00000042E1F8 0 ka-ge
00000002C804 00000042E204 0 kk-kz
00000002C810 00000042E210 0 kn-in
00000002C81C 00000042E21C 0 kok-in
00000002C82C 00000042E22C 0 ko-kr
00000002C838 00000042E238 0 ky-kg
00000002C844 00000042E244 0 lt-lt
00000002C850 00000042E250 0 lv-lv
00000002C85C 00000042E25C 0 mi-nz
00000002C868 00000042E268 0 mk-mk
00000002C874 00000042E274 0 ml-in
00000002C880 00000042E280 0 mn-mn
00000002C88C 00000042E28C 0 mr-in
00000002C898 00000042E298 0 ms-bn
00000002C8A4 00000042E2A4 0 ms-my
00000002C8B0 00000042E2B0 0 mt-mt
00000002C8BC 00000042E2BC 0 nb-no
00000002C8C8 00000042E2C8 0 nl-be
00000002C8D4 00000042E2D4 0 nl-nl
00000002C8E0 00000042E2E0 0 nn-no
00000002C8EC 00000042E2EC 0 ns-za
00000002C8F8 00000042E2F8 0 pa-in
00000002C904 00000042E304 0 pl-pl
00000002C910 00000042E310 0 pt-br
00000002C91C 00000042E31C 0 pt-pt
00000002C928 00000042E328 0 quz-bo
00000002C938 00000042E338 0 quz-ec
00000002C948 00000042E348 0 quz-pe
00000002C958 00000042E358 0 ro-ro
00000002C964 00000042E364 0 ru-ru
File pos Mem pos ID Text
======== ======= == ====
00000002C970 00000042E370 0 sa-in
00000002C97C 00000042E37C 0 se-fi
00000002C988 00000042E388 0 se-no
00000002C994 00000042E394 0 se-se
00000002C9A0 00000042E3A0 0 sk-sk
00000002C9AC 00000042E3AC 0 sl-si
00000002C9B8 00000042E3B8 0 sma-no
00000002C9C8 00000042E3C8 0 sma-se
00000002C9D8 00000042E3D8 0 smj-no
00000002C9E8 00000042E3E8 0 smj-se
00000002C9F8 00000042E3F8 0 smn-fi
00000002CA08 00000042E408 0 sms-fi
00000002CA18 00000042E418 0 sq-al
00000002CA24 00000042E424 0 sr-ba-cyrl
00000002CA3C 00000042E43C 0 sr-ba-latn
00000002CA54 00000042E454 0 sr-sp-cyrl
00000002CA6C 00000042E46C 0 sr-sp-latn
00000002CA84 00000042E484 0 sv-fi
00000002CA90 00000042E490 0 sv-se
00000002CA9C 00000042E49C 0 sw-ke
00000002CAA8 00000042E4A8 0 syr-sy
00000002CAB8 00000042E4B8 0 ta-in
00000002CAC4 00000042E4C4 0 te-in
00000002CAD0 00000042E4D0 0 th-th
00000002CADC 00000042E4DC 0 tn-za
00000002CAE8 00000042E4E8 0 tr-tr
00000002CAF4 00000042E4F4 0 tt-ru
00000002CB00 00000042E500 0 uk-ua
00000002CB0C 00000042E50C 0 ur-pk
00000002CB18 00000042E518 0 uz-uz-cyrl
00000002CB30 00000042E530 0 uz-uz-latn
00000002CB48 00000042E548 0 vi-vn
00000002CB54 00000042E554 0 xh-za
00000002CB60 00000042E560 0 zh-chs
00000002CB70 00000042E570 0 zh-cht
00000002CB80 00000042E580 0 zh-cn
00000002CB8C 00000042E58C 0 zh-hk
00000002CB98 00000042E598 0 zh-mo
00000002CBA4 00000042E5A4 0 zh-sg
00000002CBB0 00000042E5B0 0 zh-tw
00000002CBBC 00000042E5BC 0 zu-za
00000002CBD8 00000042E5D8 0 (null)
00000002D550 00000042EF50 0 runtime error
00000002D6A4 00000042F0A4 0 Program:
00000002D6B8 00000042F0B8 0 <program name unknown>
00000002D6F8 00000042F0F8 0 Microsoft Visual C++ Runtime Library
00000002D8F8 00000042F2F8 0 Sunday
00000002D908 00000042F308 0 Monday
00000002D918 00000042F318 0 Tuesday
00000002D928 00000042F328 0 Wednesday
00000002D93C 00000042F33C 0 Thursday
00000002D950 00000042F350 0 Friday
00000002D960 00000042F360 0 Saturday
00000002D9D4 00000042F3D4 0 January
00000002D9E4 00000042F3E4 0 February
00000002D9F8 00000042F3F8 0 March
00000002DA04 00000042F404 0 April
00000002DA28 00000042F428 0 August
00000002DA38 00000042F438 0 September
00000002DA4C 00000042F44C 0 October
File pos Mem pos ID Text
======== ======= == ====
00000002DA5C 00000042F45C 0 November
00000002DA70 00000042F470 0 December
00000002DA94 00000042F494 0 MM/dd/yy
00000002DAA8 00000042F4A8 0 dddd, MMMM dd, yyyy
00000002DAD0 00000042F4D0 0 HH:mm:ss
00000002DB2F 00000042F52F 0 BLC_ALL
00000002DB40 00000042F540 0 LC_COLLATE
00000002DB58 00000042F558 0 LC_CTYPE
00000002DB6C 00000042F56C 0 LC_MONETARY
00000002DB84 00000042F584 0 LC_NUMERIC
00000002DB9C 00000042F59C 0 LC_TIME
00000002DC7C 00000042F67C 0 UTF-8
00000002DC88 00000042F688 0 UTF-16LE
00000002DC9C 00000042F69C 0 UNICODE
00000002DE54 00000042F854 0 USER32.DLL
00000002E91C 00000043031C 0 american
00000002E930 000000430330 0 american english
00000002E954 000000430354 0 american-english
00000002E978 000000430378 0 australian
00000002E990 000000430390 0 belgian
00000002E9A0 0000004303A0 0 canadian
00000002E9C4 0000004303C4 0 chinese
00000002E9D4 0000004303D4 0 chinese-hongkong
00000002E9F8 0000004303F8 0 chinese-simplified
00000002EA20 000000430420 0 chinese-singapore
00000002EA44 000000430444 0 chinese-traditional
00000002EA6C 00000043046C 0 dutch-belgian
00000002EA88 000000430488 0 english-american
00000002EAAC 0000004304AC 0 english-aus
00000002EAC4 0000004304C4 0 english-belize
00000002EAE4 0000004304E4 0 english-can
00000002EAFC 0000004304FC 0 english-caribbean
00000002EB20 000000430520 0 english-ire
00000002EB38 000000430538 0 english-jamaica
00000002EB58 000000430558 0 english-nz
00000002EB70 000000430570 0 english-south africa
00000002EB9C 00000043059C 0 english-trinidad y tobago
00000002EBD0 0000004305D0 0 english-uk
00000002EBE8 0000004305E8 0 english-us
00000002EC00 000000430600 0 english-usa
00000002EC18 000000430618 0 french-belgian
00000002EC38 000000430638 0 french-canadian
00000002EC58 000000430658 0 french-luxembourg
00000002EC7C 00000043067C 0 french-swiss
00000002EC98 000000430698 0 german-austrian
00000002ECB8 0000004306B8 0 german-lichtenstein
00000002ECE0 0000004306E0 0 german-luxembourg
00000002ED04 000000430704 0 german-swiss
00000002ED20 000000430720 0 irish-english
00000002ED3C 00000043073C 0 italian-swiss
00000002ED58 000000430758 0 norwegian
00000002ED6C 00000043076C 0 norwegian-bokmal
00000002ED90 000000430790 0 norwegian-nynorsk
00000002EDB4 0000004307B4 0 portuguese-brazilian
00000002EDE0 0000004307E0 0 spanish-argentina
00000002EE04 000000430804 0 spanish-bolivia
00000002EE24 000000430824 0 spanish-chile
00000002EE40 000000430840 0 spanish-colombia
00000002EE64 000000430864 0 spanish-costa rica
00000002EE8C 00000043088C 0 spanish-dominican republic
File pos Mem pos ID Text
======== ======= == ====
00000002EEC4 0000004308C4 0 spanish-ecuador
00000002EEE4 0000004308E4 0 spanish-el salvador
00000002EF0C 00000043090C 0 spanish-guatemala
00000002EF30 000000430930 0 spanish-honduras
00000002EF54 000000430954 0 spanish-mexican
00000002EF74 000000430974 0 spanish-modern
00000002EF94 000000430994 0 spanish-nicaragua
00000002EFB8 0000004309B8 0 spanish-panama
00000002EFD8 0000004309D8 0 spanish-paraguay
00000002EFFC 0000004309FC 0 spanish-peru
00000002F018 000000430A18 0 spanish-puerto rico
00000002F040 000000430A40 0 spanish-uruguay
00000002F060 000000430A60 0 spanish-venezuela
00000002F084 000000430A84 0 swedish-finland
00000002F0A4 000000430AA4 0 swiss
00000002F1D4 000000430BD4 0 america
00000002F1E4 000000430BE4 0 britain
00000002F1F4 000000430BF4 0 china
00000002F200 000000430C00 0 czech
00000002F20C 000000430C0C 0 england
00000002F21C 000000430C1C 0 great britain
00000002F238 000000430C38 0 holland
00000002F248 000000430C48 0 hong-kong
00000002F25C 000000430C5C 0 new-zealand
00000002F27C 000000430C7C 0 pr china
00000002F290 000000430C90 0 pr-china
00000002F2A4 000000430CA4 0 puerto-rico
00000002F2BC 000000430CBC 0 slovak
00000002F2CC 000000430CCC 0 south africa
00000002F2E8 000000430CE8 0 south korea
00000002F300 000000430D00 0 south-africa
00000002F31C 000000430D1C 0 south-korea
00000002F334 000000430D34 0 trinidad & tobago
00000002F358 000000430D58 0 united-kingdom
00000002F378 000000430D78 0 united-states
00000002F3C1 000000430DC1 0 CONOUT$
00000002F4FC 000000430EFC 0 alnum
00000002F508 000000430F08 0 alpha
00000002F514 000000430F14 0 blank
00000002F520 000000430F20 0 cntrl
00000002F530 000000430F30 0 digit
00000002F53C 000000430F3C 0 graph
00000002F548 000000430F48 0 lower
00000002F554 000000430F54 0 print
00000002F560 000000430F60 0 punct
00000002F56C 000000430F6C 0 space
00000002F57C 000000430F7C 0 upper
00000002F58C 000000430F8C 0 xdigit
00000002F5BC 000000430FBC 0 WM_XFS_STOP
00000002F69C 00000043109C 0 DBackup Service
00000002F7FF 0000004311FF 0 tDBackup Service
00000002F880 000000431280 0 DBackup Service
00000002F8A0 0000004312A0 0 DBackup Service
00000002F8C0 0000004312C0 0 DBackup Service
00000002F8E0 0000004312E0 0 DBackup Service
00000002F900 000000431300 0 DBackup Service
000000030278 000000431C78 0 /autorun
00000003028C 000000431C8C 0 FwLoadPm
0000000302A0 000000431CA0 0 SOFTWARE\Microsoft\Windows\CurrentVersion\Run
0000000302FC 000000431CFC 0 FwLoadPm
File pos Mem pos ID Text
======== ======= == ====
000000030310 000000431D10 0 SOFTWARE\Microsoft\Windows\CurrentVersion\Run
00000003036F 000000431D6F 0 SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
0000000303D8 000000431DD8 0 SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
000000030468 000000431E68 0 SOFTWARE\Microsoft\Windows\CurrentVersion\Run
0000000304C4 000000431EC4 0 NCRPRS
0000000304D4 000000431ED4 0 DBackup
0000000304F0 000000431EF0 0 SOFTWARE\Microsoft\Windows\CurrentVersion\Run
00000003054C 000000431F4C 0 NCRPRS
00000003055C 000000431F5C 0 DBackup
000000030570 000000431F70 0 /c ping 127.0.0.1 -n 20 && del
0000000305B0 000000431FB0 0 >> NUL
0000000305C0 000000431FC0 0 ComSpec
0000000305D7 000000431FD7 0 cSeShutdownPrivilege
00000003071C 00000043211C 0 alnum
000000030728 000000432128 0 alpha
000000030734 000000432134 0 blank
000000030740 000000432140 0 cntrl
000000030750 000000432150 0 digit
00000003075C 00000043215C 0 graph
000000030768 000000432168 0 lower
000000030774 000000432174 0 print
000000030780 000000432180 0 punct
00000003078C 00000043218C 0 space
00000003079C 00000043219C 0 upper
0000000307AC 0000004321AC 0 xdigit
0000000366F4 0000004386F4 0 DBackup
000000036709 000000438709 0 DBackup
0000000463C2 0000004483C2 0 VS_VERSION_INFO
00000004641E 00000044841E 0 StringFileInfo
000000046442 000000448442 0 040904b0
00000004645A 00000044845A 0 CompanyName
000000046474 000000448474 0 Sysinternals
000000046496 000000448496 0 FileDescription
0000000464B8 0000004484B8 0 sdelete
0000000464CE 0000004484CE 0 FileVersion
0000000464FA 0000004484FA 0 InternalName
000000046514 000000448514 0 sdelete
00000004652A 00000044852A 0 LegalCopyright
00000004655E 00000044855E 0 1999-2012 Mark Russinovich
00000004659E 00000044859E 0 OriginalFilename
0000000465C0 0000004485C0 0 sdelete.exe
0000000465DE 0000004485DE 0 ProductName
0000000465F8 0000004485F8 0 Sysinternals Sdelete
00000004662A 00000044862A 0 ProductVersion
00000004665A 00000044865A 0 VarFileInfo
00000004667A 00000044867A 0 Translation