.- - -----÷M÷E÷N÷U÷------------------------------------------------------------- --- ----  -------------.
!  WALL ! STATS ! GOODIES ! YARA ! FAQ ! RSS ! EMV                                                      !
`--------------  - ---  ---------- -------- -------- -------- -------- ----------------- -  ---- ---- --'

                                           ATM MALWARE NOTICE 
                    e3a6970d66bc4687b21381353826fabd469007c869efc711fdd0e4711aa77ffc
 
Date...........: 2016-08-26
Family.........: ATMripper
File name......: unpacked
File size......: 322.50 KB
Type file......: EXE/Windows
Virscan........: VT - HA
PDB Path found.: W:\ATMRipper\Release\ATMRipper.pdb
Documentation..: https://shasaurabh.blogspot.com/2018/01/analyzing-atm-malwares.html
Additional note: 0x402611: replace JE by JNZ and let magic hapen

Entropy:


Binary Histogram:



=== SCREENSHOT === 



=== PEDUMP REPORT === 
=== MZ Header === signature: "MZ" bytes_in_last_block: 144 0x90 blocks_in_file: 3 3 num_relocs: 0 0 header_paragraphs: 4 4 min_extra_paragraphs: 0 0 max_extra_paragraphs: 65535 0xffff ss: 0 0 sp: 184 0xb8 checksum: 0 0 ip: 0 0 cs: 0 0 reloc_table_offset: 64 0x40 overlay_number: 0 0 reserved0: 0 0 oem_id: 0 0 oem_info: 0 0 reserved2: 0 0 reserved3: 0 0 reserved4: 0 0 reserved5: 0 0 reserved6: 0 0 lfanew: 248 0xf8 === DOS STUB === 00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......| === RICH Header === LIB_ID VERSION TIMES_USED 205 cd 50929 c6f1 31 1f 4 4 8447 20ff 4 4 207 cf 50929 c6f1 67 43 206 ce 50929 c6f1 218 da 131 83 30729 7809 2 2 147 93 30729 7809 17 11 1 1 0 0 189 bd 211 d3 61219 ef23 9 9 204 cc 61030 ee66 1 1 === PE Header === signature: "PE\x00\x00" # IMAGE_FILE_HEADER: Machine: 332 0x14c x86 NumberOfSections: 4 4 TimeDateStamp: "2016-07-10 18:26:51" PointerToSymbolTable: 0 0 NumberOfSymbols: 0 0 SizeOfOptionalHeader: 224 0xe0 Characteristics: 259 0x103 RELOCS_STRIPPED, EXECUTABLE_IMAGE 32BIT_MACHINE # IMAGE_OPTIONAL_HEADER32: Magic: 267 0x10b 32-bit executable LinkerVersion: 11.0 SizeOfCode: 164352 0x28200 SizeOfInitializedData: 185344 0x2d400 SizeOfUninitializedData: 0 0 AddressOfEntryPoint: 76038 0x12906 BaseOfCode: 4096 0x1000 BaseOfData: 172032 0x2a000 ImageBase: 4194304 0x400000 SectionAlignment: 4096 0x1000 FileAlignment: 512 0x200 OperatingSystemVersion: 5.1 ImageVersion: 0.0 SubsystemVersion: 5.1 Reserved1: 0 0 SizeOfImage: 364544 0x59000 SizeOfHeaders: 4096 0x1000 CheckSum: 0 0 Subsystem: 2 2 WINDOWS_GUI DllCharacteristics: 33088 0x8140 DYNAMIC_BASE, NX_COMPAT TERMINAL_SERVER_AWARE SizeOfStackReserve: 1048576 0x100000 SizeOfStackCommit: 4096 0x1000 SizeOfHeapReserve: 1048576 0x100000 SizeOfHeapCommit: 4096 0x1000 LoaderFlags: 0 0 NumberOfRvaAndSizes: 16 0x10 === DATA DIRECTORY === EXPORT rva:0x 0 size:0x 0 IMPORT rva:0x 35890 size:0x dc RESOURCE rva:0x 0 size:0x 0 EXCEPTION rva:0x 0 size:0x 0 SECURITY rva:0x 0 size:0x 0 BASERELOC rva:0x 0 size:0x 0 DEBUG rva:0x 0 size:0x 0 ARCHITECTURE rva:0x 0 size:0x 0 GLOBALPTR rva:0x 0 size:0x 0 TLS rva:0x 0 size:0x 0 LOAD_CONFIG rva:0x 32520 size:0x 40 Bound_IAT rva:0x 0 size:0x 0 IAT rva:0x 0 size:0x 0 Delay_IAT rva:0x 0 size:0x 0 CLR_Header rva:0x 0 size:0x 0 rva:0x 0 size:0x 0 === SECTIONS === NAME RVA VSZ RAW_SZ RAW_PTR nREL REL_PTR nLINE LINE_PTR FLAGS .text 1000 281a2 28200 400 0 0 0 0 60000020 R-X CODE .rdata 2a000 c842 ca00 28600 0 0 0 0 40000040 R-- IDATA .data 37000 171c0 12200 35000 0 0 0 0 c0000040 RW- IDATA .reloc 4f000 96ae 9800 47200 0 0 0 0 42000040 R-- IDATA DISCARDABLE === IMPORTS === MODULE_NAME HINT ORD FUNCTION_NAME KERNEL32.DLL 0 GetTempPathA KERNEL32.DLL 0 lstrcpyW KERNEL32.DLL 0 SetEndOfFile KERNEL32.DLL 0 CreateFileW KERNEL32.DLL 0 LoadLibraryW KERNEL32.DLL 0 OutputDebugStringW KERNEL32.DLL 0 GetShortPathNameW KERNEL32.DLL 0 ReadConsoleW KERNEL32.DLL 0 SetFilePointer KERNEL32.DLL 0 FreeEnvironmentStringsW KERNEL32.DLL 0 GetEnvironmentStringsW KERNEL32.DLL 0 GetCurrentProcessId KERNEL32.DLL 0 QueryPerformanceCounter KERNEL32.DLL 0 SetStdHandle KERNEL32.DLL 0 lstrcatW KERNEL32.DLL 0 CreateToolhelp32Snapshot KERNEL32.DLL 0 Process32NextW KERNEL32.DLL 0 GetModuleFileNameA KERNEL32.DLL 0 Process32FirstW KERNEL32.DLL 0 CopyFileA KERNEL32.DLL 0 GetShortPathNameA KERNEL32.DLL 0 GetEnvironmentVariableA KERNEL32.DLL 0 GetModuleFileNameW KERNEL32.DLL 0 GetWindowsDirectoryA KERNEL32.DLL 0 GetModuleHandleW KERNEL32.DLL 0 GetCurrentProcess KERNEL32.DLL 0 CreateProcessW KERNEL32.DLL 0 GetEnvironmentVariableW KERNEL32.DLL 0 MultiByteToWideChar KERNEL32.DLL 0 CreateThread KERNEL32.DLL 0 CloseHandle KERNEL32.DLL 0 WTSGetActiveConsoleSessionId KERNEL32.DLL 0 CreateEventW KERNEL32.DLL 0 GetLastError KERNEL32.DLL 0 Sleep KERNEL32.DLL 0 SetEvent KERNEL32.DLL 0 WaitForSingleObject KERNEL32.DLL 0 WriteConsoleW KERNEL32.DLL 0 GetComputerNameA KERNEL32.DLL 0 GetOEMCP KERNEL32.DLL 0 GetACP KERNEL32.DLL 0 IsValidCodePage KERNEL32.DLL 0 HeapSize KERNEL32.DLL 0 GetConsoleMode KERNEL32.DLL 0 GetConsoleCP KERNEL32.DLL 0 WriteFile KERNEL32.DLL 0 FlushFileBuffers KERNEL32.DLL 0 SetFilePointerEx KERNEL32.DLL 0 ReadFile KERNEL32.DLL 0 GetProcessHeap KERNEL32.DLL 0 GetFileType KERNEL32.DLL 0 GetStdHandle KERNEL32.DLL 0 IsDebuggerPresent KERNEL32.DLL 0 EnumSystemLocalesW KERNEL32.DLL 0 GetUserDefaultLCID KERNEL32.DLL 0 IsValidLocale KERNEL32.DLL 0 GetLocaleInfoW KERNEL32.DLL 0 LCMapStringW KERNEL32.DLL 0 CompareStringW KERNEL32.DLL 0 GetStartupInfoW KERNEL32.DLL 0 TlsFree KERNEL32.DLL 0 InterlockedIncrement KERNEL32.DLL 0 InterlockedDecrement KERNEL32.DLL 0 EncodePointer KERNEL32.DLL 0 DecodePointer KERNEL32.DLL 0 EnterCriticalSection KERNEL32.DLL 0 LeaveCriticalSection KERNEL32.DLL 0 DeleteCriticalSection KERNEL32.DLL 0 WideCharToMultiByte KERNEL32.DLL 0 GetStringTypeW KERNEL32.DLL 0 HeapFree KERNEL32.DLL 0 GetCurrentThreadId KERNEL32.DLL 0 ExitThread KERNEL32.DLL 0 GetProcAddress KERNEL32.DLL 0 LoadLibraryExW KERNEL32.DLL 0 ExitProcess KERNEL32.DLL 0 GetModuleHandleExW KERNEL32.DLL 0 AreFileApisANSI KERNEL32.DLL 0 GetSystemTimeAsFileTime KERNEL32.DLL 0 HeapReAlloc KERNEL32.DLL 0 GetCommandLineA KERNEL32.DLL 0 RaiseException KERNEL32.DLL 0 RtlUnwind KERNEL32.DLL 0 HeapAlloc KERNEL32.DLL 0 InitializeCriticalSectionAndSpinCount KERNEL32.DLL 0 GetCPInfo KERNEL32.DLL 0 IsProcessorFeaturePresent KERNEL32.DLL 0 UnhandledExceptionFilter KERNEL32.DLL 0 SetUnhandledExceptionFilter KERNEL32.DLL 0 SetLastError KERNEL32.DLL 0 TerminateProcess KERNEL32.DLL 0 TlsAlloc KERNEL32.DLL 0 TlsGetValue KERNEL32.DLL 0 TlsSetValue ADVAPI32.dll 0 RegQueryInfoKeyW ADVAPI32.dll 0 RegSetValueExW ADVAPI32.dll 0 RegCloseKey ADVAPI32.dll 0 AdjustTokenPrivileges ADVAPI32.dll 0 RegOpenKeyExW ADVAPI32.dll 0 RegDeleteValueW ADVAPI32.dll 0 DuplicateTokenEx ADVAPI32.dll 0 RegOpenKeyExA ADVAPI32.dll 0 LookupPrivilegeValueW ADVAPI32.dll 0 RegQueryValueExA ADVAPI32.dll 0 OpenProcessToken ADVAPI32.dll 0 CreateProcessAsUserA ADVAPI32.dll 0 ControlService ADVAPI32.dll 0 RegisterServiceCtrlHandlerW ADVAPI32.dll 0 SetServiceStatus ADVAPI32.dll 0 StartServiceW ADVAPI32.dll 0 OpenServiceW ADVAPI32.dll 0 StartServiceCtrlDispatcherW ADVAPI32.dll 0 OpenSCManagerW ADVAPI32.dll 0 DeleteService ADVAPI32.dll 0 CloseServiceHandle ADVAPI32.dll 0 CreateServiceW ADVAPI32.dll 0 RegEnumKeyExA GDI32.dll 0 GetStockObject MSXFS.dll 0 WFSClose MSXFS.dll 0 WFSAsyncExecute MSXFS.dll 0 WFSFreeResult MSXFS.dll 0 WFSGetInfo MSXFS.dll 0 WFSExecute MSXFS.dll 0 WFSRegister MSXFS.dll 0 WFSOpen MSXFS.dll 0 WFSCancelAsyncRequest MSXFS.dll 0 WFSStartUp MSXFS.dll 0 WFSCleanUp ole32.dll 0 CoTaskMemFree ole32.dll 0 CoInitialize ole32.dll 0 CoUninitialize ole32.dll 0 CoCreateInstance SHELL32.dll 0 ShellExecuteW SHELL32.dll 0 ShellExecuteA USER32.dll 0 SetWindowTextA USER32.dll 0 UpdateWindow USER32.dll 0 EnableWindow USER32.dll 0 DefWindowProcW USER32.dll 0 DispatchMessageW USER32.dll 0 TranslateMessage USER32.dll 0 ShowWindow USER32.dll 0 GetDesktopWindow USER32.dll 0 BroadcastSystemMessageW USER32.dll 0 CreateWindowExA USER32.dll 0 GetWindowLongW USER32.dll 0 RegisterClassExW USER32.dll 0 LoadCursorW USER32.dll 0 CreateWindowExW USER32.dll 0 ExitWindowsEx USER32.dll 0 SetTimer USER32.dll 0 GetWindowRect USER32.dll 0 GetMessageW USER32.dll 0 PostQuitMessage USER32.dll 0 RegisterWindowMessageW USER32.dll 0 KillTimer USER32.dll 0 LoadIconW USERENV.dll 0 DestroyEnvironmentBlock USERENV.dll 0 CreateEnvironmentBlock WTSAPI32.dll 0 WTSQueryUserToken XFS_CONF.dll 0 WFMQueryValue XFS_CONF.dll 0 WFMOpenKey XFS_CONF.dll 0 WFMEnumKey XFS_CONF.dll 0 WFMCloseKey === Packer / Compiler === MS Visual C++ 6.0 - 8.0
=== Strings ===
File pos Mem pos ID Text ======== ======= == ==== 00000000004D 00000040004D 0 !This program cannot be run in DOS mode. 0000000000D7 0000004000D7 0 oRichC 0000000001F0 0000004001F0 0 .text 000000000218 000000400218 0 .rdata 00000000023F 00000040023F 0 @.data 000000000268 000000400268 0 .reloc 000000000535 000000401135 0 ~,9~$t 0000000006DB 0000004012DB 0 tC97u?j 000000000786 000000401386 0 FYY;u 0000000007C9 0000004013C9 0 FYY;u 000000000B00 000000401700 0 D$XSV 000000000B47 000000401747 0 D$ Pj 000000000F61 000000401B61 0 SSSh&%@ 00000000144B 00000040204B 0 WWCSW 0000000014A7 0000004020A7 0 WWWhL!@ 0000000017B9 0000004023B9 0 SSSSS 000000001C47 000000402847 0 jd_;5 0000000024A3 0000004030A3 0 Nt Nu 000000002721 000000403321 0 QQVWj 000000003165 000000403D65 0 D$0SVW 0000000032BF 000000403EBF 0 9D$ u 0000000032CE 000000403ECE 0 |$8 s5Rj 000000003430 000000404030 0 D$0SVW 0000000034DD 0000004040DD 0 L$ Pj 00000000354E 00000040414E 0 CD$(j 000000003596 000000404196 0 9D$$u7 0000000035AA 0000004041AA 0 CL$(+ 0000000035E1 0000004041E1 0 Ct$(+ 000000003BDB 0000004047DB 0 G@9_8u 000000003E88 000000404A88 0 D$(SVW 000000003F2C 000000404B2C 0 t Huk 000000003F9C 000000404B9C 0 HHu @ 000000005463 000000406063 0 t.;:u 0000000054DB 0000004060DB 0 VW=\t 000000005669 000000406269 0 t,;8u 000000005875 000000406475 0 t,;:u 000000005A21 000000406621 0 D$HSVW 000000005A86 000000406686 0 3J(3B,3 000000005AFB 0000004066FB 0 1F(1V,1FP1VTC 000000005E12 000000406A12 0 \$HVW 0000000070B8 000000407CB8 0 CM QPQ 0000000075AB 0000004081AB 0 CM QPQ 0000000075F1 0000004081F1 0 RRRRRRQP 000000007966 000000408566 0 PPPPPPVSW 000000008245 000000408E45 0 t.;:u 000000008327 000000408F27 0 tpNtIN 0000000086B8 0000004092B8 0 OhP C 0000000086C3 0000004092C3 0 YPhP C 0000000086DF 0000004092DF 0 (hT C 0000000086EA 0000004092EA 0 YPhT C 0000000089FF 0000004095FF 0 SSSSSS 000000008A86 000000409686 0 Phx C 000000009070 000000409C70 0 s>9>w:+>j 00000000A5E4 00000040B1E4 0 s6+1S 00000000A79C 00000040B39C 0 2tQHtNH 00000000AA4D 00000040B64D 0 ut9FTtoV 00000000AA7E 00000040B67E 0 9Vh~o 00000000AAE5 00000040B6E5 0 F$;Vh| 00000000ACAD 00000040B8AD 0 t.;:u 00000000ADFE 00000040B9FE 0 \t0HHt File pos Mem pos ID Text ======== ======= == ==== 00000000AE0A 00000040BA0A 0 Ht Hu: 00000000B73F 00000040C33F 0 s6+1S 00000000BF2B 00000040CB2B 0 Php$C 00000000C07C 00000040CC7C 0 D$ OW 00000000C386 00000040CF86 0 QQSVW 00000000C3BB 00000040CFBB 0 GF;:r 00000000CD8E 00000040D98E 0 u ;APu 00000000CDA2 00000040D9A2 0 Php$C 00000000CE16 00000040DA16 0 9Y t5 00000000CF1D 00000040DB1D 0 9wh~TV 00000000CF70 00000040DB70 0 F;wh| 00000000CF90 00000040DB90 0 +WL+OL3 00000000D2E8 00000040DEE8 0 CP tR 00000000D2EE 00000040DEEE 0 {L?uL 00000000D3F2 00000040DFF2 0 ~L}uA 00000000D958 00000040E558 0 9GD|0 00000000D9DA 00000040E5DA 0 ~Hau 00000000DE77 00000040EA77 0 FH<_u\ 00000000DE83 00000040EA83 0 FH<.tP<[tL<\tH<*tD<|t@< 00000000DE9B 00000040EA9B 0 t<<$t8 00000000DEAB 00000040EAAB 0 FH<(t(<)t$<+t <?t 00000000DECF 00000040EACF 0 FH<"t 00000000DF01 00000040EB01 0 ?<fu 00000000DF0E 00000040EB0E 0 2<nu 00000000DF1B 00000040EB1B 0 %<ru 00000000EB01 00000040F701 0 SVjdX 00000001153A 00000041213A 0 uPVWhM 00000001298A 00000041358A 0 QQSVWd 000000012B45 000000413745 0 j hx9C 000000012B81 000000413781 0 SSSSS 000000012C07 000000413807 0 PWSWW 000000012C26 000000413826 0 WWWWW 000000012C7F 00000041387F 0 PPPPP 000000012F15 000000413B15 0 Ph<xC 00000001324A 000000413E4A 0 PPPPP 0000000133E9 000000413FE9 0 PRAQh 000000013809 000000414409 0 PP9E u 000000013A61 000000414661 0 j0h :C 00000001462B 00000041522B 0 ft!9q 000000016136 000000416D36 0 t5QVW 000000016376 000000416F76 0 PPPPPPPP 000000016C48 000000417848 0 PPPPP 000000016DB4 0000004179B4 0 jA[jZZ+ 000000017267 000000417E67 0 PPPPP 00000001748F 00000041808F 0 3=<xC 0000000175A8 0000004181A8 0 t6h<xC 000000017615 000000418215 0 jdh8;C 00000001762E 00000041822E 0 j@j _W 000000017649 000000418249 0 Ph<xC 0000000176EE 0000004182EE 0 } j@W 000000017ACD 0000004186CD 0 Genuu_ 000000017AD6 0000004186D6 0 ineIuV 000000017ADF 0000004186DF 0 nteluM3 000000019107 000000419D07 0 ~pjCXf 000000019383 000000419F83 0 <v5h: 000000019469 00000041A069 0 SSSSS 000000019640 00000041A240 0 VVVVV 00000001AEF2 00000041BAF2 0 < t8< t4 00000001AFCC 00000041BBCC 0 t@VSP 00000001B027 00000041BC27 0 PPPPP File pos Mem pos ID Text ======== ======= == ==== 00000001B144 00000041BD44 0 SPPP+ 00000001B14D 00000041BD4D 0 FVWPP 00000001B173 00000041BD73 0 SVWPP 00000001B307 00000041BF07 0 PPPPP 00000001B375 00000041BF75 0 VVVVV 00000001B3AD 00000041BFAD 0 j.Yf; 00000001B416 00000041C016 0 j.Yf; 00000001B41C 00000041C01C 0 tyPVj@W 00000001B431 00000041C031 0 _tcPVj@ 00000001B452 00000041C052 0 uCPVj 00000001B469 00000041C069 0 u#j,Xf; 00000001B490 00000041C090 0 PPPPP 00000001B49F 00000041C09F 0 SSSSS 00000001B56E 00000041C16E 0 >Cu/f9F 00000001B5E7 00000041C1E7 0 3=<xC 00000001B74B 00000041C34B 0 SSSSS 00000001B7A2 00000041C3A2 0 @PSjU 00000001B7C0 00000041C3C0 0 PPPPP 00000001B7FF 00000041C3FF 0 SSSSS 00000001BAF0 00000041C6F0 0 QQQQQ 00000001BBAC 00000041C7AC 0 j;Yf9 00000001BC26 00000041C826 0 j;Yf9 00000001BD77 00000041C977 0 PPPPP 00000001C10F 00000041CD0F 0 VVVVV 00000001C1A7 00000041CDA7 0 WVSj 00000001C449 00000041D049 0 RVSQSWV 00000001C484 00000041D084 0 RVSQj 00000001C58D 00000041D18D 0 QVVVj 00000001C7DE 00000041D3DE 0 <at-<rt"<wt 00000001C84E 00000041D44E 0 tRHtC 00000001C8D2 00000041D4D2 0 t;Ht+ 00000001CA4F 00000041D64F 0 URPQQh 00000001D1B1 00000041DDB1 0 9E WW 00000001DC07 00000041E807 0 ,SVWj0X 00000001DD3B 00000041E93B 0 u'j0X 00000001DE65 00000041EA65 0 Wj0XPV 00000001DF04 00000041EB04 0 PjdSQ 00000001E06B 00000041EC6B 0 -jd[; 00000001E0BE 00000041ECBE 0 WWWWW 00000001E603 00000041F203 0 VVVVV 00000001E63F 00000041F23F 0 SVWjA_jZ+ 00000001E6E7 00000041F2E7 0 uBjAYjZ+ 00000001F003 00000041FC03 0 HHtVHHt 00000001F4FA 0000004200FA 0 >0t-N 00000001F922 000000420522 0 QVWSj 00000001FA0B 00000042060B 0 v N+D$ 000000020376 000000420F76 0 ~';_t|%3 00000002038A 000000420F8A 0 wtVj 00000002039F 000000420F9F 0 ;_tr. 0000000206B0 0000004212B0 0 tO95d 000000020899 000000421499 0 t VV9u 000000020B31 000000421731 0 PjPW 000000020B48 000000421748 0 $PjQW 000000020B90 000000421790 0 *PjTW 000000020BA7 0000004217A7 0 +PjUW 000000020BBE 0000004217BE 0 ,PjVW 000000020BD8 0000004217D8 0 -PjWW 000000020BEF 0000004217EF 0 .PjRW 000000020C06 000000421806 0 /PjSW 000000020C7C 00000042187C 0 HPjPW File pos Mem pos ID Text ======== ======= == ==== 000000020C96 000000421896 0 LPjQW 000000020F6D 000000421B6D 0 <0|o<9 0000000214E3 0000004220E3 0 G Pj*S 0000000214F7 0000004220F7 0 G$Pj+S 00000002150B 00000042210B 0 G(Pj,S 00000002151F 00000042211F 0 G,Pj-S 000000021536 000000422136 0 G0Pj.S 00000002154A 00000042214A 0 G4Pj/S 000000021572 000000422172 0 G8PjDS 000000021589 000000422189 0 G<PjES 00000002159D 00000042219D 0 G@PjFS 0000000215B1 0000004221B1 0 GDPjGS 0000000215C5 0000004221C5 0 GHPjHS 0000000215DC 0000004221DC 0 GLPjIS 0000000215F0 0000004221F0 0 GPPjJS 000000021604 000000422204 0 GTPjKS 000000021618 000000422218 0 GXPjLS 00000002162F 00000042222F 0 G\PjMS 000000021657 000000422257 0 GdPjOS 00000002166B 00000042226B 0 GhPj8S 000000021682 000000422282 0 GlPj9S 000000021696 000000422296 0 GpPj:S 0000000216AA 0000004222AA 0 GtPj;S 0000000216BE 0000004222BE 0 GxPj<S 0000000216D5 0000004222D5 0 G|Pj=S 00000002171C 00000042231C 0 Pj@Sj 000000021A62 000000422662 0 PjOSj 000000021D10 000000422910 0 tHHt*Ht# 000000022230 000000422E30 0 uJSSR 0000000223E8 000000422FE8 0 SSSSS 0000000224F3 0000004230F3 0 SVWUj 000000022594 000000423194 0 ;t$,v- 000000022619 000000423219 0 UQPXY]Y[ 000000022756 000000423356 0 PPPPP 000000022A64 000000423664 0 WWWWW 000000022B15 000000423715 0 PPPPP 000000022CD4 0000004238D4 0 Yu2Vj@h 000000022DCA 0000004239CA 0 tMj_S 000000022E22 000000423A22 0 PPPPP 000000022EFB 000000423AFB 0 @h-:B 000000023887 000000424487 0 r)f;q 000000023901 000000424501 0 r2f;A 0000000239AA 0000004245AA 0 SVjA[jZ 000000023A6F 00000042466F 0 jAZjZ 000000023D31 000000424931 0 SSSSV 000000023DBD 0000004249BD 0 SSSSV 000000023F66 000000424B66 0 PPPPP 000000024026 000000424C26 0 v N+D$ 000000024166 000000424D66 0 Ht+Ht$Ht 000000025655 000000426255 0 +t"HHt 0000000256AB 0000004262AB 0 9] t" 000000026507 000000427107 0 SSSSS 0000000269E9 0000004275E9 0 jxYf; 0000000269F1 0000004275F1 0 jXYf; 000000026A1B 00000042761B 0 jxYf; 000000026A23 000000427623 0 jXYf; 000000026A4C 00000042764C 0 uHjAXf; 000000026D9A 00000042799A 0 j0Yf; 000000028E68 00000042A868 0 permission denied 000000028E7C 00000042A87C 0 file exists File pos Mem pos ID Text ======== ======= == ==== 000000028E88 00000042A888 0 no such device 000000028E98 00000042A898 0 filename too long 000000028EAC 00000042A8AC 0 device or resource busy 000000028EC4 00000042A8C4 0 io error 000000028ED0 00000042A8D0 0 directory not empty 000000028EE4 00000042A8E4 0 invalid argument 000000028EF8 00000042A8F8 0 no space on device 000000028F0C 00000042A90C 0 no such file or directory 000000028F28 00000042A928 0 function not supported 000000028F40 00000042A940 0 no lock available 000000028F54 00000042A954 0 not enough memory 000000028F68 00000042A968 0 resource unavailable try again 000000028F88 00000042A988 0 cross device link 000000028F9C 00000042A99C 0 operation canceled 000000028FB0 00000042A9B0 0 too many files open 000000028FC4 00000042A9C4 0 permission_denied 000000028FD8 00000042A9D8 0 address_in_use 000000028FE8 00000042A9E8 0 address_not_available 000000029000 00000042AA00 0 address_family_not_supported 000000029020 00000042AA20 0 connection_already_in_progress 000000029040 00000042AA40 0 bad_file_descriptor 000000029054 00000042AA54 0 connection_aborted 000000029068 00000042AA68 0 connection_refused 00000002907C 00000042AA7C 0 connection_reset 000000029090 00000042AA90 0 destination_address_required 0000000290B0 00000042AAB0 0 bad_address 0000000290BC 00000042AABC 0 host_unreachable 0000000290D0 00000042AAD0 0 operation_in_progress 0000000290E8 00000042AAE8 0 interrupted 0000000290F4 00000042AAF4 0 invalid_argument 000000029108 00000042AB08 0 already_connected 00000002911C 00000042AB1C 0 too_many_files_open 000000029130 00000042AB30 0 message_size 000000029140 00000042AB40 0 filename_too_long 000000029154 00000042AB54 0 network_down 000000029164 00000042AB64 0 network_reset 000000029174 00000042AB74 0 network_unreachable 000000029188 00000042AB88 0 no_buffer_space 000000029198 00000042AB98 0 no_protocol_option 0000000291AC 00000042ABAC 0 not_connected 0000000291BC 00000042ABBC 0 not_a_socket 0000000291CC 00000042ABCC 0 operation_not_supported 0000000291E4 00000042ABE4 0 protocol_not_supported 0000000291FC 00000042ABFC 0 wrong_protocol_type 000000029210 00000042AC10 0 timed_out 00000002921C 00000042AC1C 0 operation_would_block 000000029234 00000042AC34 0 address family not supported 000000029254 00000042AC54 0 address in use 000000029264 00000042AC64 0 address not available 00000002927C 00000042AC7C 0 already connected 000000029290 00000042AC90 0 argument list too long 0000000292A8 00000042ACA8 0 argument out of domain 0000000292C0 00000042ACC0 0 bad address 0000000292CC 00000042ACCC 0 bad file descriptor 0000000292E0 00000042ACE0 0 bad message 0000000292EC 00000042ACEC 0 broken pipe 0000000292F8 00000042ACF8 0 connection aborted 00000002930C 00000042AD0C 0 connection already in progress 00000002932C 00000042AD2C 0 connection refused 000000029340 00000042AD40 0 connection reset File pos Mem pos ID Text ======== ======= == ==== 000000029354 00000042AD54 0 destination address required 000000029374 00000042AD74 0 executable format error 00000002938C 00000042AD8C 0 file too large 00000002939C 00000042AD9C 0 host unreachable 0000000293B0 00000042ADB0 0 identifier removed 0000000293C4 00000042ADC4 0 illegal byte sequence 0000000293DC 00000042ADDC 0 inappropriate io control operation 000000029400 00000042AE00 0 invalid seek 000000029410 00000042AE10 0 is a directory 000000029420 00000042AE20 0 message size 000000029430 00000042AE30 0 network down 000000029440 00000042AE40 0 network reset 000000029450 00000042AE50 0 network unreachable 000000029464 00000042AE64 0 no buffer space 000000029474 00000042AE74 0 no child process 000000029488 00000042AE88 0 no link 000000029490 00000042AE90 0 no message available 0000000294A8 00000042AEA8 0 no message 0000000294B4 00000042AEB4 0 no protocol option 0000000294C8 00000042AEC8 0 no stream resources 0000000294DC 00000042AEDC 0 no such device or address 0000000294F8 00000042AEF8 0 no such process 000000029508 00000042AF08 0 not a directory 000000029518 00000042AF18 0 not a socket 000000029528 00000042AF28 0 not a stream 000000029538 00000042AF38 0 not connected 000000029548 00000042AF48 0 not supported 000000029558 00000042AF58 0 operation in progress 000000029570 00000042AF70 0 operation not permitted 000000029588 00000042AF88 0 operation not supported 0000000295A0 00000042AFA0 0 operation would block 0000000295B8 00000042AFB8 0 owner dead 0000000295C4 00000042AFC4 0 protocol error 0000000295D4 00000042AFD4 0 protocol not supported 0000000295EC 00000042AFEC 0 read only file system 000000029604 00000042B004 0 resource deadlock would occur 000000029624 00000042B024 0 result out of range 000000029638 00000042B038 0 state not recoverable 000000029650 00000042B050 0 stream timeout 000000029660 00000042B060 0 text file busy 000000029670 00000042B070 0 timed out 00000002967C 00000042B07C 0 too many files open in system 00000002969C 00000042B09C 0 too many links 0000000296AC 00000042B0AC 0 too many symbolic link levels 0000000296CC 00000042B0CC 0 value too large 0000000296DC 00000042B0DC 0 wrong protocol type 0000000297A0 00000042B1A0 0 bad allocation 0000000297F0 00000042B1F0 0 regex_error(error_collate): The expression contained an invalid collating element name. 000000029848 00000042B248 0 regex_error(error_ctype): The expression contained an invalid character class name. 0000000298A0 00000042B2A0 0 regex_error(error_escape): The expression contained an invalid escaped character, or a trailing escape. 000000029908 00000042B308 0 regex_error(error_backref): The expression contained an invalid back reference. 000000029958 00000042B358 0 regex_error(error_brack): The expression contained mismatched [ and ]. 0000000299A0 00000042B3A0 0 regex_error(error_paren): The expression contained mismatched ( and ). 0000000299E8 00000042B3E8 0 regex_error(error_brace): The expression contained mismatched { and }. 000000029A30 00000042B430 0 regex_error(error_badbrace): The expression contained an invalid range in a { expression }. 000000029A90 00000042B490 0 regex_error(error_range): The expression contained an invalid character range, such as [b-a] in most encodings. 000000029B00 00000042B500 0 regex_error(error_space): There was insufficient memory to convert the expression into a finite state machine. 000000029B70 00000042B570 0 regex_error(error_badrepeat): One of *?+{ was not preceded by a valid regular expression. 000000029BD0 00000042B5D0 0 regex_error(error_complexity): The complexity of an attempted match against a regular expression exceeded a pre-set level. 000000029C50 00000042B650 0 regex_error(error_stack): There was insufficient memory to determine whether the regular expression could match the specified character sequence. File pos Mem pos ID Text ======== ======= == ==== 000000029CE4 00000042B6E4 0 regex_error(error_parse) 000000029D00 00000042B700 0 regex_error(error_syntax) 000000029D1C 00000042B71C 0 regex_error 000000029E4C 00000042B84C 0 0123456789abcdefghijklmnopqrstuvwxyz 000000029E80 00000042B880 0 000000029E9C 00000042B89C 0 0123456789abcdefghijklmnopqrstuvwxyz 000000029EEC 00000042B8EC 0 0123456789abcdefABCDEF 000000029FBC 00000042B9BC 0 Unknown exception 000000029FDC 00000042B9DC 0 RoInitialize 00000002A004 00000042BA04 0 RoUninitialize 00000002A034 00000042BA34 0 CorExitProcess 00000002A610 00000042C010 0 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\] 00000002A651 00000042C051 0 abcdefghijklmnopqrstuvwxyz{|}~ 00000002A790 00000042C190 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\] 00000002A7D1 00000042C1D1 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~ 00000002A880 00000042C280 0 bad exception 00000002A8B0 00000042C2B0 0 FlsAlloc 00000002A8BC 00000042C2BC 0 FlsFree 00000002A8C4 00000042C2C4 0 FlsGetValue 00000002A8D0 00000042C2D0 0 FlsSetValue 00000002A8DC 00000042C2DC 0 InitializeCriticalSectionEx 00000002A8F8 00000042C2F8 0 CreateSemaphoreExW 00000002A90C 00000042C30C 0 SetThreadStackGuarantee 00000002A924 00000042C324 0 CreateThreadpoolTimer 00000002A93C 00000042C33C 0 SetThreadpoolTimer 00000002A950 00000042C350 0 WaitForThreadpoolTimerCallbacks 00000002A970 00000042C370 0 CloseThreadpoolTimer 00000002A988 00000042C388 0 CreateThreadpoolWait 00000002A9A0 00000042C3A0 0 SetThreadpoolWait 00000002A9B4 00000042C3B4 0 CloseThreadpoolWait 00000002A9C8 00000042C3C8 0 FlushProcessWriteBuffers 00000002A9E4 00000042C3E4 0 FreeLibraryWhenCallbackReturns 00000002AA04 00000042C404 0 GetCurrentProcessorNumber 00000002AA20 00000042C420 0 GetLogicalProcessorInformation 00000002AA40 00000042C440 0 CreateSymbolicLinkW 00000002AA54 00000042C454 0 SetDefaultDllDirectories 00000002AA70 00000042C470 0 EnumSystemLocalesEx 00000002AA84 00000042C484 0 CompareStringEx 00000002AA94 00000042C494 0 GetDateFormatEx 00000002AAA4 00000042C4A4 0 GetLocaleInfoEx 00000002AAB4 00000042C4B4 0 GetTimeFormatEx 00000002AAC4 00000042C4C4 0 GetUserDefaultLocaleName 00000002AAE0 00000042C4E0 0 IsValidLocaleName 00000002AAF4 00000042C4F4 0 LCMapStringEx 00000002AB04 00000042C504 0 GetCurrentPackageId 00000002CBD0 00000042E5D0 0 (null) 00000002CC09 00000042E609 0 ( 8PX 00000002CC11 00000042E611 0 700WP 00000002CC29 00000042E629 0 xpxxxx 00000002D754 00000042F154 0 SunMonTueWedThuFriSat 00000002D76C 00000042F16C 0 JanFebMarAprMayJunJulAugSepOctNovDec 00000002D7B0 00000042F1B0 0 Sunday 00000002D7B8 00000042F1B8 0 Monday 00000002D7C0 00000042F1C0 0 Tuesday 00000002D7C8 00000042F1C8 0 Wednesday 00000002D7D4 00000042F1D4 0 Thursday 00000002D7E0 00000042F1E0 0 Friday 00000002D7E8 00000042F1E8 0 Saturday 00000002D824 00000042F224 0 January 00000002D82C 00000042F22C 0 February File pos Mem pos ID Text ======== ======= == ==== 00000002D838 00000042F238 0 March 00000002D840 00000042F240 0 April 00000002D858 00000042F258 0 August 00000002D860 00000042F260 0 September 00000002D86C 00000042F26C 0 October 00000002D874 00000042F274 0 November 00000002D880 00000042F280 0 December 00000002D894 00000042F294 0 MM/dd/yy 00000002D8A0 00000042F2A0 0 dddd, MMMM dd, yyyy 00000002D8B4 00000042F2B4 0 HH:mm:ss 00000002DBCF 00000042F5CF 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\] 00000002DC10 00000042F610 0 abcdefghijklmnopqrstuvwxyz{|}~ 00000002DC58 00000042F658 0 UTF-8 00000002DC60 00000042F660 0 UTF-16LE 00000002DC6C 00000042F66C 0 UNICODE 00000002DCB8 00000042F6B8 0 log10 00000002DCF0 00000042F6F0 0 atan2 00000002DD14 00000042F714 0 floor 00000002DD2C 00000042F72C 0 ldexp 00000002DD34 00000042F734 0 _cabs 00000002DD3C 00000042F73C 0 _hypot 00000002DD4C 00000042F74C 0 frexp 00000002DD60 00000042F760 0 _logb 00000002DD68 00000042F768 0 _nextafter 00000002DD74 00000042F774 0 e+000 00000002DE1D 00000042F81D 0 ('8PW 00000002DE26 00000042F826 0 700PP 00000002DE41 00000042F841 0 xppwpp 00000002DE6C 00000042F86C 0 MessageBoxW 00000002DE78 00000042F878 0 GetActiveWindow 00000002DE88 00000042F888 0 GetLastActivePopup 00000002DE9C 00000042F89C 0 GetUserObjectInformationW 00000002DEB8 00000042F8B8 0 GetProcessWindowStation 00000002E058 00000042FA58 0 __based( 00000002E064 00000042FA64 0 __cdecl 00000002E06C 00000042FA6C 0 __pascal 00000002E078 00000042FA78 0 __stdcall 00000002E084 00000042FA84 0 __thiscall 00000002E090 00000042FA90 0 __fastcall 00000002E09C 00000042FA9C 0 __clrcall 00000002E0A8 00000042FAA8 0 __eabi 00000002E0B0 00000042FAB0 0 __ptr64 00000002E0B8 00000042FAB8 0 __restrict 00000002E0C4 00000042FAC4 0 __unaligned 00000002E0D0 00000042FAD0 0 restrict( 00000002E0E4 00000042FAE4 0 delete 00000002E108 00000042FB08 0 operator 00000002E189 00000042FB89 0 vftable' 00000002E195 00000042FB95 0 vbtable' 00000002E1A1 00000042FBA1 0 vcall' 00000002E1A9 00000042FBA9 0 typeof' 00000002E1B5 00000042FBB5 0 local static guard' 00000002E1CD 00000042FBCD 0 string' 00000002E1D9 00000042FBD9 0 vbase destructor' 00000002E1ED 00000042FBED 0 vector deleting destructor' 00000002E20D 00000042FC0D 0 default constructor closure' 00000002E22D 00000042FC2D 0 scalar deleting destructor' 00000002E24D 00000042FC4D 0 vector constructor iterator' 00000002E26D 00000042FC6D 0 vector destructor iterator' 00000002E28D 00000042FC8D 0 vector vbase constructor iterator' File pos Mem pos ID Text ======== ======= == ==== 00000002E2B1 00000042FCB1 0 virtual displacement map' 00000002E2CD 00000042FCCD 0 eh vector constructor iterator' 00000002E2F1 00000042FCF1 0 eh vector destructor iterator' 00000002E311 00000042FD11 0 eh vector vbase constructor iterator' 00000002E339 00000042FD39 0 copy constructor closure' 00000002E355 00000042FD55 0 udt returning' 00000002E371 00000042FD71 0 local vftable' 00000002E381 00000042FD81 0 local vftable constructor closure' 00000002E3A4 00000042FDA4 0 new[] 00000002E3AC 00000042FDAC 0 delete[] 00000002E3B9 00000042FDB9 0 omni callsig' 00000002E3C9 00000042FDC9 0 placement delete closure' 00000002E3E5 00000042FDE5 0 placement delete[] closure' 00000002E405 00000042FE05 0 managed vector constructor iterator' 00000002E42D 00000042FE2D 0 managed vector destructor iterator' 00000002E455 00000042FE55 0 eh vector copy constructor iterator' 00000002E47D 00000042FE7D 0 eh vector vbase copy constructor iterator' 00000002E4A9 00000042FEA9 0 dynamic initializer for ' 00000002E4C5 00000042FEC5 0 dynamic atexit destructor for ' 00000002E4E9 00000042FEE9 0 vector copy constructor iterator' 00000002E50D 00000042FF0D 0 vector vbase copy constructor iterator' 00000002E539 00000042FF39 0 managed vector copy constructor iterator' 00000002E565 00000042FF65 0 local static thread guard' 00000002E580 00000042FF80 0 Type Descriptor' 00000002E594 00000042FF94 0 Base Class Descriptor at ( 00000002E5B0 00000042FFB0 0 Base Class Array' 00000002E5C4 00000042FFC4 0 Class Hierarchy Descriptor' 00000002E5E4 00000042FFE4 0 Complete Object Locator' 00000002E600 000000430000 0 CreateFile2 00000002F3D0 000000430DD0 0 1#SNAN 00000002F3D8 000000430DD8 0 1#IND 00000002F3E0 000000430DE0 0 1#INF 00000002F3E8 000000430DE8 0 1#QNAN 00000002F3F0 000000430DF0 0 bad locale name 00000002F404 000000430E04 0 generic 00000002F40C 000000430E0C 0 unknown error 00000002F41C 000000430E1C 0 iostream 00000002F428 000000430E28 0 iostream stream error 00000002F440 000000430E40 0 system 00000002F448 000000430E48 0 ios_base::badbit set 00000002F460 000000430E60 0 ios_base::failbit set 00000002F478 000000430E78 0 ios_base::eofbit set 00000002F490 000000430E90 0 alnum 00000002F498 000000430E98 0 alpha 00000002F4A0 000000430EA0 0 blank 00000002F4A8 000000430EA8 0 cntrl 00000002F4B4 000000430EB4 0 digit 00000002F4BC 000000430EBC 0 graph 00000002F4C4 000000430EC4 0 lower 00000002F4CC 000000430ECC 0 print 00000002F4D4 000000430ED4 0 punct 00000002F4DC 000000430EDC 0 space 00000002F4E8 000000430EE8 0 upper 00000002F4F4 000000430EF4 0 xdigit 00000002F59C 000000430F9C 0 Developed by kernyv@jabbim.com 00000002F5D4 000000430FD4 0 /autorun 00000002F5E0 000000430FE0 0 be59a724feae790b3f315edf71a8450888c021f113e3c2b471e174130c201852 00000002F624 000000431024 0 Developed by kernyv@jabbim.com 00000002F644 000000431044 0 service 00000002F64C 00000043104C 0 /uninstall File pos Mem pos ID Text ======== ======= == ==== 00000002F658 000000431058 0 f26a57da928d6f3e3480dfc7d03761161191bdb170e10ca15c7ac5de6912945c 00000002F6BC 0000004310BC 0 /install 00000002F6C8 0000004310C8 0 692cdaf6e42ab3a4f307e5d047249f7b30ceddd6bc88f22ca032412419bd62b7 00000002F70C 00000043110C 0 install 00000002F714 000000431114 0 /cleanup 00000002F720 000000431120 0 0679c7c0c9b0d6919c12cbc087e942d7bf48d3a78cd3ec80321fbfd1b33a1904 00000002F764 000000431164 0 remove 00000002F76C 00000043116C 0 start 00000002F77C 00000043117C 0 /stop 00000002F784 000000431184 0 CDM: %s 00000002F790 000000431190 0 CDM: Unknown 00000002F7A4 0000004311A4 0 IDC: %s 00000002F7B0 0000004311B0 0 IDC: Unknown 00000002F7C4 0000004311C4 0 PIN: %s 00000002F7D0 0000004311D0 0 PIN: Unknown 00000002F7E4 0000004311E4 0 hostname 00000002F7F0 0000004311F0 0 \temp\clnup.dat 00000002F820 000000431220 0 \temp\clnup.dat 00000002F830 000000431230 0 /autorun 00000002F83C 00000043123C 0 taskkill /IM dbackup.exe /T /F 00000002F85C 00000043125C 0 \System32\dbackup.exe 00000002F874 000000431274 0 /service 00000002F920 000000431320 0 BUTTON 00000002F928 000000431328 0 hostname 00000002F934 000000431334 0 HOSTNAME: Unknown 00000002F94C 00000043134C 0 CDM: Unknown 00000002F960 000000431360 0 PIN: Unknown 00000002F974 000000431374 0 IDC: Unknown 00000002F994 000000431394 0 static 00000002F99C 00000043139C 0 HOSTNAME: Unknown 00000002F9B4 0000004313B4 0 Dispensing %d items from cash unit #%d 00000002F9E4 0000004313E4 0 CleanUp 00000002F9F4 0000004313F4 0 /cleanup 00000002FA04 000000431404 0 Uninstall 00000002FA18 000000431418 0 Uninstall Service 00000002FA34 000000431434 0 Network Disable 00000002FA4C 00000043144C 0 Network Enable 00000002FA64 000000431464 0 DISPENSE 00000002FA70 000000431470 0 SETTINGS 00000002FA84 000000431484 0 REBOOT 00000002FA8C 00000043148C 0 %s:%d (%d) = %d 00000002FA9D 00000043149D 0 INIT:%d = %d, %d%% 00000002FAC0 0000004314C0 0 1.Ignore cassete balance 00000002FADC 0000004314DC 0 2.CLEAN LOGS 00000002FAEC 0000004314EC 0 3.HIDE 00000002FAF4 0000004314F4 0 4.BACK 00000002FAFC 0000004314FC 0 5.UNINSTALL 00000002FB08 000000431508 0 6.UNINSTALL SERVICE 00000002FB1C 00000043151C 0 7.NETWORK: ENABLE 00000002FB30 000000431530 0 0.NETWORK: DISABLE 00000002FB44 000000431544 0 [%Y.%m.%d %H:%M:%S] 00000002FC1C 00000043161C 0 WFS_PIN_FK_0 00000002FC2C 00000043162C 0 WFS_PIN_FK_1 00000002FC3C 00000043163C 0 WFS_PIN_FK_2 00000002FC4C 00000043164C 0 WFS_PIN_FK_3 00000002FC5C 00000043165C 0 WFS_PIN_FK_4 00000002FC6C 00000043166C 0 WFS_PIN_FK_5 00000002FC7C 00000043167C 0 WFS_PIN_FK_6 00000002FC8C 00000043168C 0 WFS_PIN_FK_7 00000002FC9C 00000043169C 0 WFS_PIN_FK_8 File pos Mem pos ID Text ======== ======= == ==== 00000002FCAC 0000004316AC 0 WFS_PIN_FK_9 00000002FCBC 0000004316BC 0 WFS_PIN_FK_ENTER 00000002FCD0 0000004316D0 0 WFS_PIN_FK_CANCEL 00000002FCE4 0000004316E4 0 WFS_PIN_FK_CLEAR 00000002FCF8 0000004316F8 0 WFS_PIN_FK_BACKSPACE 00000002FD10 000000431710 0 WFS_PIN_FK_HELP 00000002FD20 000000431720 0 WFS_PIN_FK_DECPOINT 00000002FD34 000000431734 0 WFS_PIN_FK_00 00000002FD44 000000431744 0 WFS_PIN_FK_000 00000002FD54 000000431754 0 WFS_PIN_FK_RES1 00000002FD64 000000431764 0 WFS_PIN_FK_RES2 00000002FD74 000000431774 0 WFS_PIN_FK_RES3 00000002FD84 000000431784 0 WFS_PIN_FK_RES4 00000002FD94 000000431794 0 WFS_PIN_FK_RES5 00000002FDA4 0000004317A4 0 WFS_PIN_FK_RES6 00000002FDB4 0000004317B4 0 WFS_PIN_FK_RES7 00000002FDC4 0000004317C4 0 WFS_PIN_FK_RES8 00000002FDD4 0000004317D4 0 WFS_PIN_FK_OEM1 00000002FDE4 0000004317E4 0 WFS_PIN_FK_OEM2 00000002FDF4 0000004317F4 0 WFS_PIN_FK_OEM3 00000002FE04 000000431804 0 WFS_PIN_FK_OEM4 00000002FE14 000000431814 0 WFS_PIN_FK_OEM5 00000002FE24 000000431824 0 WFS_PIN_FK_OEM6 00000002FE34 000000431834 0 WFS_UNKNOWN_KEY 00000002FE44 000000431844 0 \sd.exe 00000002FE4C 00000043184C 0 taskkill /IM aptra* /T /F 00000002FE68 000000431868 0 taskkill /IM ncr* /T /F 00000002FE80 000000431880 0 taskkill /IM java.exe /T /F 00000002FE9C 00000043189C 0 taskkill /IM wrapper.exe /T /F 00000002FEBC 0000004318BC 0 taskkill /IM aiw.exe /T /F 00000002FED8 0000004318D8 0 taskkill /IM *came* /T /F 00000002FEF4 0000004318F4 0 taskkill /IM snmp.exe /T /F 00000002FF10 000000431910 0 taskkill /IM *gbr* /T /F 00000002FF2C 00000043192C 0 taskkill /IM ul*.exe /T /F 00000002FF48 000000431948 0 -accepteula -p 8 -a -q -s d:\* 00000002FF68 000000431968 0 -accepteula -p 8 -a -q -s e:\* 00000002FF88 000000431988 0 -accepteula -p 8 -a -q -s f:\* 00000002FFA8 0000004319A8 0 -accepteula -p 8 -a -q -s g:\* 00000002FFC8 0000004319C8 0 -accepteula -p 8 -a -q -s h:\* 00000002FFE8 0000004319E8 0 -accepteula -p 8 -a -q -s c:\*.log 00000003000C 000000431A0C 0 -accepteula -p 8 -a -q -s c:\*.jrn 000000030030 000000431A30 0 -accepteula -p 8 -a -q -s c:\*.trc 000000030054 000000431A54 0 -accepteula -p 8 -a -q -s c:\*.xml 000000030078 000000431A78 0 -accepteula -p 8 -a -q -s c:\*.zip 00000003009C 000000431A9C 0 -accepteula -p 8 -a -q -s c:\*.bak 0000000300C0 000000431AC0 0 -accepteula -p 8 -a -q -s c:\*.err 0000000300E4 000000431AE4 0 -accepteula -p 8 -a -q -s c:\*.idb 000000030108 000000431B08 0 -accepteula -p 8 -a -q -s c:\*.idx 00000003012C 000000431B2C 0 -accepteula -p 8 -a -q -s c:\*.dat 000000030150 000000431B50 0 -accepteula -p 8 -a -q -s c:\*.gsb 000000030174 000000431B74 0 -accepteula -p 8 -a -q -s c:\*.txc 000000030198 000000431B98 0 -accepteula -p 8 -a -q -s c:\* 0000000301B8 000000431BB8 0 APTRA 0000000301C0 000000431BC0 0 C:\Program Files\NCR Aptra\bin\NCRPRS.exe 0000000301EC 000000431BEC 0 NCRPRS 0000000301F4 000000431BF4 0 Agilis 0000000301FC 000000431BFC 0 C:\Program Files\Diebold\Agilis Startup\DBackup.exe 000000030230 000000431C30 0 DBackup 000000030238 000000431C38 0 FwLoadPm.exe 000000030248 000000431C48 0 C:\Probase\cscw32\bin\FwLoadPm.exe File pos Mem pos ID Text ======== ======= == ==== 00000003026C 000000431C6C 0 FwLoadPm 00000003043C 000000431E3C 0 SOFTWARE\Microsoft\Windows\CurrentVersion 0000000304E4 000000431EE4 0 ProductId 0000000305D0 000000431FD0 0 ComSpec 000000030610 000000432010 0 Logical cash unit with ID:%d, contains %d physical cash units 000000030658 000000432058 0 .DEFAULT\XFS\LOGICAL_SERVICES 000000030678 000000432078 0 %s\%s 000000030680 000000432080 0 class 000000030688 000000432088 0 LOGICAL_SERVICES 00000003069C 00000043209C 0 class 0000000306B0 0000004320B0 0 alnum 0000000306B8 0000004320B8 0 alpha 0000000306C0 0000004320C0 0 blank 0000000306C8 0000004320C8 0 cntrl 0000000306D4 0000004320D4 0 digit 0000000306DC 0000004320DC 0 graph 0000000306E4 0000004320E4 0 lower 0000000306EC 0000004320EC 0 print 0000000306F4 0000004320F4 0 punct 0000000306FC 0000004320FC 0 space 000000030708 000000432108 0 upper 000000030714 000000432114 0 xdigit 0000000307C8 0000004321C8 0 \D*(\d{13,19})= 0000000307DC 0000004321DC 0 .*+?[]|\-{},:=! 0000000307F4 0000004321F4 0 string too long 000000030804 000000432204 0 invalid string position 00000003081C 00000043221C 0 vector<T> too long 000000030830 000000432230 0 bad cast 00000003083C 00000043223C 0 map/set<T> too long 0000000309F0 0000004323F0 0 0123456789abcdef 000000030A04 000000432404 0 invalid map<K, T> key 000000030A54 000000432454 0 vector<bool> too long 000000030A70 000000432470 0 abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789_ 000000030B80 000000432580 0 W:\ATMRipper\Release\ATMRipper.pdb 000000034220 000000435C20 0 KERNEL32.DLL 00000003422D 000000435C2D 0 ADVAPI32.dll 00000003423A 000000435C3A 0 GDI32.dll 000000034244 000000435C44 0 MSXFS.dll 00000003424E 000000435C4E 0 ole32.dll 000000034258 000000435C58 0 SHELL32.dll 000000034264 000000435C64 0 USER32.dll 00000003426F 000000435C6F 0 USERENV.dll 00000003427B 000000435C7B 0 WTSAPI32.dll 000000034288 000000435C88 0 XFS_CONF.dll 000000034298 000000435C98 0 GetTempPathA 0000000342A6 000000435CA6 0 lstrcpyW 0000000342B0 000000435CB0 0 SetEndOfFile 0000000342BE 000000435CBE 0 CreateFileW 0000000342CC 000000435CCC 0 LoadLibraryW 0000000342DA 000000435CDA 0 OutputDebugStringW 0000000342EE 000000435CEE 0 GetShortPathNameW 000000034302 000000435D02 0 ReadConsoleW 000000034310 000000435D10 0 SetFilePointer 000000034320 000000435D20 0 FreeEnvironmentStringsW 00000003433A 000000435D3A 0 GetEnvironmentStringsW 000000034352 000000435D52 0 GetCurrentProcessId 000000034368 000000435D68 0 QueryPerformanceCounter 000000034382 000000435D82 0 SetStdHandle 000000034390 000000435D90 0 lstrcatW 00000003439A 000000435D9A 0 CreateToolhelp32Snapshot File pos Mem pos ID Text ======== ======= == ==== 0000000343B4 000000435DB4 0 Process32NextW 0000000343C4 000000435DC4 0 GetModuleFileNameA 0000000343D8 000000435DD8 0 Process32FirstW 0000000343EA 000000435DEA 0 CopyFileA 0000000343F6 000000435DF6 0 GetShortPathNameA 00000003440A 000000435E0A 0 GetEnvironmentVariableA 000000034424 000000435E24 0 GetModuleFileNameW 000000034438 000000435E38 0 GetWindowsDirectoryA 00000003444E 000000435E4E 0 GetModuleHandleW 000000034460 000000435E60 0 GetCurrentProcess 000000034474 000000435E74 0 CreateProcessW 000000034484 000000435E84 0 GetEnvironmentVariableW 00000003449E 000000435E9E 0 MultiByteToWideChar 0000000344B4 000000435EB4 0 CreateThread 0000000344C2 000000435EC2 0 CloseHandle 0000000344D0 000000435ED0 0 WTSGetActiveConsoleSessionId 0000000344EE 000000435EEE 0 CreateEventW 0000000344FC 000000435EFC 0 GetLastError 00000003450A 000000435F0A 0 Sleep 000000034512 000000435F12 0 SetEvent 00000003451C 000000435F1C 0 WaitForSingleObject 000000034532 000000435F32 0 WriteConsoleW 000000034542 000000435F42 0 GetComputerNameA 000000034554 000000435F54 0 GetOEMCP 00000003455E 000000435F5E 0 GetACP 000000034566 000000435F66 0 IsValidCodePage 000000034578 000000435F78 0 HeapSize 000000034582 000000435F82 0 GetConsoleMode 000000034592 000000435F92 0 GetConsoleCP 0000000345A0 000000435FA0 0 WriteFile 0000000345AC 000000435FAC 0 FlushFileBuffers 0000000345BE 000000435FBE 0 SetFilePointerEx 0000000345D0 000000435FD0 0 ReadFile 0000000345DA 000000435FDA 0 GetProcessHeap 0000000345EA 000000435FEA 0 GetFileType 0000000345F8 000000435FF8 0 GetStdHandle 000000034606 000000436006 0 IsDebuggerPresent 00000003461A 00000043601A 0 EnumSystemLocalesW 00000003462E 00000043602E 0 GetUserDefaultLCID 000000034642 000000436042 0 IsValidLocale 000000034652 000000436052 0 GetLocaleInfoW 000000034662 000000436062 0 LCMapStringW 000000034670 000000436070 0 CompareStringW 000000034680 000000436080 0 GetStartupInfoW 000000034692 000000436092 0 TlsFree 00000003469C 00000043609C 0 InterlockedIncrement 0000000346B2 0000004360B2 0 InterlockedDecrement 0000000346C8 0000004360C8 0 EncodePointer 0000000346D8 0000004360D8 0 DecodePointer 0000000346E8 0000004360E8 0 EnterCriticalSection 0000000346FE 0000004360FE 0 LeaveCriticalSection 000000034714 000000436114 0 DeleteCriticalSection 00000003472C 00000043612C 0 WideCharToMultiByte 000000034742 000000436142 0 GetStringTypeW 000000034752 000000436152 0 HeapFree 00000003475C 00000043615C 0 GetCurrentThreadId 000000034770 000000436170 0 ExitThread 00000003477C 00000043617C 0 GetProcAddress 00000003478C 00000043618C 0 LoadLibraryExW 00000003479C 00000043619C 0 ExitProcess File pos Mem pos ID Text ======== ======= == ==== 0000000347AA 0000004361AA 0 GetModuleHandleExW 0000000347BE 0000004361BE 0 AreFileApisANSI 0000000347D0 0000004361D0 0 GetSystemTimeAsFileTime 0000000347EA 0000004361EA 0 HeapReAlloc 0000000347F8 0000004361F8 0 GetCommandLineA 00000003480A 00000043620A 0 RaiseException 00000003481A 00000043621A 0 RtlUnwind 000000034826 000000436226 0 HeapAlloc 000000034832 000000436232 0 InitializeCriticalSectionAndSpinCount 00000003485A 00000043625A 0 GetCPInfo 000000034866 000000436266 0 IsProcessorFeaturePresent 000000034882 000000436282 0 UnhandledExceptionFilter 00000003489C 00000043629C 0 SetUnhandledExceptionFilter 0000000348BA 0000004362BA 0 SetLastError 0000000348C8 0000004362C8 0 TerminateProcess 0000000348DA 0000004362DA 0 TlsAlloc 0000000348E4 0000004362E4 0 TlsGetValue 0000000348F2 0000004362F2 0 TlsSetValue 000000034900 000000436300 0 RegQueryInfoKeyW 000000034912 000000436312 0 RegSetValueExW 000000034922 000000436322 0 RegCloseKey 000000034930 000000436330 0 AdjustTokenPrivileges 000000034948 000000436348 0 RegOpenKeyExW 000000034958 000000436358 0 RegDeleteValueW 00000003496A 00000043636A 0 DuplicateTokenEx 00000003497C 00000043637C 0 RegOpenKeyExA 00000003498C 00000043638C 0 LookupPrivilegeValueW 0000000349A4 0000004363A4 0 RegQueryValueExA 0000000349B6 0000004363B6 0 OpenProcessToken 0000000349C8 0000004363C8 0 CreateProcessAsUserA 0000000349DE 0000004363DE 0 ControlService 0000000349EE 0000004363EE 0 RegisterServiceCtrlHandlerW 000000034A0C 00000043640C 0 SetServiceStatus 000000034A1E 00000043641E 0 StartServiceW 000000034A2E 00000043642E 0 OpenServiceW 000000034A3C 00000043643C 0 StartServiceCtrlDispatcherW 000000034A5A 00000043645A 0 OpenSCManagerW 000000034A6A 00000043646A 0 DeleteService 000000034A7A 00000043647A 0 CloseServiceHandle 000000034A8E 00000043648E 0 CreateServiceW 000000034A9E 00000043649E 0 RegEnumKeyExA 000000034AAE 0000004364AE 0 GetStockObject 000000034ABE 0000004364BE 0 WFSClose 000000034AC8 0000004364C8 0 WFSAsyncExecute 000000034ADA 0000004364DA 0 WFSFreeResult 000000034AEA 0000004364EA 0 WFSGetInfo 000000034AF6 0000004364F6 0 WFSExecute 000000034B02 000000436502 0 WFSRegister 000000034B10 000000436510 0 WFSOpen 000000034B1A 00000043651A 0 WFSCancelAsyncRequest 000000034B32 000000436532 0 WFSStartUp 000000034B3E 00000043653E 0 WFSCleanUp 000000034B4A 00000043654A 0 CoTaskMemFree 000000034B5A 00000043655A 0 CoInitialize 000000034B68 000000436568 0 CoUninitialize 000000034B78 000000436578 0 CoCreateInstance 000000034B8A 00000043658A 0 ShellExecuteW 000000034B9A 00000043659A 0 ShellExecuteA 000000034BAA 0000004365AA 0 SetWindowTextA 000000034BBA 0000004365BA 0 UpdateWindow File pos Mem pos ID Text ======== ======= == ==== 000000034BC8 0000004365C8 0 EnableWindow 000000034BD6 0000004365D6 0 DefWindowProcW 000000034BE6 0000004365E6 0 DispatchMessageW 000000034BF8 0000004365F8 0 TranslateMessage 000000034C0A 00000043660A 0 ShowWindow 000000034C16 000000436616 0 GetDesktopWindow 000000034C28 000000436628 0 BroadcastSystemMessageW 000000034C42 000000436642 0 CreateWindowExA 000000034C54 000000436654 0 GetWindowLongW 000000034C64 000000436664 0 RegisterClassExW 000000034C76 000000436676 0 LoadCursorW 000000034C84 000000436684 0 CreateWindowExW 000000034C96 000000436696 0 ExitWindowsEx 000000034CA6 0000004366A6 0 SetTimer 000000034CB0 0000004366B0 0 GetWindowRect 000000034CC0 0000004366C0 0 GetMessageW 000000034CCE 0000004366CE 0 PostQuitMessage 000000034CE0 0000004366E0 0 RegisterWindowMessageW 000000034CF8 0000004366F8 0 KillTimer 000000034D04 000000436704 0 LoadIconW 000000034D10 000000436710 0 DestroyEnvironmentBlock 000000034D2A 00000043672A 0 CreateEnvironmentBlock 000000034D42 000000436742 0 WTSQueryUserToken 000000034D56 000000436756 0 WFMQueryValue 000000034D66 000000436766 0 WFMOpenKey 000000034D72 000000436772 0 WFMEnumKey 000000034D7E 00000043677E 0 WFMCloseKey 000000035008 000000437008 0 .?AV_Locimp@locale@std@@ 00000003502C 00000043702C 0 .?AVbad_alloc@std@@ 000000035048 000000437048 0 .?AVlogic_error@std@@ 000000035068 000000437068 0 .?AVlength_error@std@@ 000000035088 000000437088 0 .?AVout_of_range@std@@ 0000000350A8 0000004370A8 0 .?AVregex_error@std@@ 0000000350D0 0000004370D0 0 Copyright (c) 1992-2004 by P.J. Plauger, licensed by Dinkumware, Ltd. ALL RIGHTS RESERVED. 000000035508 000000437508 0 .?AVtype_info@@ 000000035650 000000437650 0 .?AVbad_exception@std@@ 000000035A32 000000437A32 0 000000035B19 000000437B19 0 abcdefghijklmnopqrstuvwxyz 000000035B39 000000437B39 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ 000000035C52 000000437C52 0 000000035D32 000000437D32 0 abcdefghijklmnopqrstuvwxyz 000000035D52 000000437D52 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ 0000000365DE 0000004385DE 0 z?aUY 000000036620 000000438620 0 zc%C1 000000036673 000000438673 0 -64OS 0000000366B4 0000004386B4 0 .?AVsystem_error@std@@ 0000000366D4 0000004386D4 0 .?AV?$codecvt@DDH@std@@ 000000036765 000000438765 0 !This program cannot be run in DOS mode. 0000000367DF 0000004387DF 0 oRich 000000036948 000000438948 0 .rsrc 000000036BA5 000000438BA5 0 b]gp _ 000000036C21 000000438C21 0 AQMlR 000000036D21 000000438D21 0 VRP,~ 000000036D8B 000000438D8B 0 lF4.9 00000003704D 00000043904D 0 9+~WB 00000003710D 00000043910D 0 P3YKO 00000003713D 00000043913D 0 u62h! 000000037154 000000439154 0 ph!d/ 000000037189 000000439189 0 EAJDT 000000037193 000000439193 0 8B9o? File pos Mem pos ID Text ======== ======= == ==== 00000003734F 00000043934F 0 D;E{kw ;u 000000037387 000000439387 0 :yHHSuT 00000003745A 00000043945A 0 ?t@Vg 00000003771C 00000043971C 0 H|Eh7u[f 000000037767 000000439767 0 u?\!7 0000000377AA 0000004397AA 0 DPuib 000000037822 000000439822 0 uhk /c 000000037857 000000439857 0 PSZK| 0000000378F9 0000004398F9 0 Q {*Tp 000000037902 000000439902 0 7IpSE 00000003790C 00000043990C 0 %Z2)- 000000037931 000000439931 0 0d+>XO 000000037958 000000439958 0 ldPt3' 0000000379D3 0000004399D3 0 tpI18 0000000379DD 0000004399DD 0 uZG*8F 0000000379EA 0000004399EA 0 Ef2b1 000000037A02 000000439A02 0 7%pP: 000000037AD1 000000439AD1 0 IO<$#V 000000037B29 000000439B29 0 I@#PhX 000000037B73 000000439B73 0 SSEo| 000000037B96 000000439B96 0 ScvX@ 000000037BF6 000000439BF6 0 ;Ut/c/cGd 000000037D33 000000439D33 0 sh45+J 000000037D55 000000439D55 0 j[?|h 000000037D5F 000000439D5F 0 !_+T 000000038004 00000043A004 0 q#stv 000000038022 00000043A022 0 T!c=O 0000000380D6 00000043A0D6 0 Ey;4w8/ 000000038143 00000043A143 0 ddddl8<@ddddDHLPddddTX\ 00000003815B 00000043A15B 0 dddddh 000000038689 00000043A689 0 CCGGp 000000038881 00000043A881 0 ;u Qm) 0000000389C3 00000043A9C3 0 "WHU;= 0000000389EA 00000043A9EA 0 _e|VA 000000038CB5 00000043ACB5 0 :C9Il9E 000000038EE3 00000043AEE3 0 QKihv 000000038F29 00000043AF29 0 a[_5< 000000039031 00000043B031 0 /u,$W 0000000390BF 00000043B0BF 0 "cs{; 0000000390F4 00000043B0F4 0 nt'r[ 000000039196 00000043B196 0 ]iS[+ 0000000394B3 00000043B4B3 0 ; zlm 000000039529 00000043B529 0 YKYYW 00000003957E 00000043B57E 0 )YN!K6\3 0000000395BC 00000043B5BC 0 %mowlw 0000000395FE 00000043B5FE 0 H2 VN 0000000396D1 00000043B6D1 0 H*~1( 00000003971A 00000043B71A 0 P7n5@ 0000000398EF 00000043B8EF 0 wS(;# 000000039992 00000043B992 0 XTj _ 000000039A06 00000043BA06 0 eYyJz 000000039A91 00000043BA91 0 hpf4d[S 000000039C0A 00000043BC0A 0 ~3A}R 000000039D3B 00000043BD3B 0 A;VxO 000000039E55 00000043BE55 0 0AOW_ 000000039E66 00000043BE66 0 i6j~pUgow 000000039F8B 00000043BF8B 0 W*DkKK 00000003A052 00000043C052 0 GS+mt 00000003A09E 00000043C09E 0 tM8wH 00000003A189 00000043C189 0 WN/2 g File pos Mem pos ID Text ======== ======= == ==== 00000003A1F0 00000043C1F0 0 htFlt 00000003A498 00000043C498 0 MRV/T 00000003A4E5 00000043C4E5 0 )jj0Xf]i 00000003A547 00000043C547 0 lKlu; 00000003A5B4 00000043C5B4 0 90tNhF 00000003A8C8 00000043C8C8 0 3hWhc 00000003A94D 00000043C94D 0 ,yhhGH})c 00000003AAD2 00000043CAD2 0 mPy(ml 00000003ABFB 00000043CBFB 0 tEs o 00000003AD22 00000043CD22 0 0A@@Ju 00000003AD41 00000043CD41 0 7A4YC 00000003AD8B 00000043CD8B 0 P,DT3Q 00000003ADCE 00000043CDCE 0 Bg-k8 00000003ADE0 00000043CDE0 0 $mkh_ 00000003AF03 00000043CF03 0 ])>Ew=x 00000003AFD8 00000043CFD8 0 !z(a: 00000003B005 00000043D005 0 0pz?} 00000003B0C4 00000043D0C4 0 BdBnB 00000003B15F 00000043D15F 0 <.u4O8 00000003B1D8 00000043D1D8 0 ,uR$b 00000003B1E8 00000043D1E8 0 *g'j. 00000003B25F 00000043D25F 0 B_t?<X 00000003B2AE 00000043D2AE 0 lu|- 00000003B2E5 00000043D2E5 0 N7X8_l 00000003B2ED 00000043D2ED 0 P=2Y 00000003B341 00000043D341 0 X)h'1 00000003B495 00000043D495 0 6@d&" 00000003B52F 00000043D52F 0 D;2uhR4\" 00000003B5A8 00000043D5A8 0 Yh[=LF 00000003B5BD 00000043D5BD 0 N)W<7 00000003B5D0 00000043D5D0 0 cLlY5 00000003B5E5 00000043D5E5 0 *C2 2 00000003B980 00000043D980 0 t:V)o 00000003BA15 00000043DA15 0 tK&\I 00000003BA55 00000043DA55 0 whd'# 00000003BAB4 00000043DAB4 0 g$ ($ 00000003BC89 00000043DC89 0 xs%'Q* 00000003BCE2 00000043DCE2 0 85Fyr 00000003BD66 00000043DD66 0 , <Xw 00000003BD9D 00000043DD9D 0 [grHH 00000003BDFD 00000043DDFD 0 htDmwC> 00000003BE3C 00000043DE3C 0 'b d$ 00000003C03C 00000043E03C 0 FCxSD 00000003C180 00000043E180 0 7FPFeu(9 00000003C343 00000043E343 0 @S)Lp 00000003C37A 00000043E37A 0 g+lJ<V 00000003C3D5 00000043E3D5 0 u!>3) 00000003C464 00000043E464 0 EH);s9 00000003C55C 00000043E55C 0 5n5@z< 00000003C59B 00000043E59B 0 l8ulu@&N 00000003C5DB 00000043E5DB 0 80_[H 00000003C767 00000043E767 0 w9=?| 00000003C7AC 00000043E7AC 0 PSmC(W 00000003C7C9 00000043E7C9 0 A5G/q 00000003C923 00000043E923 0 |(&Te 00000003CA02 00000043EA02 0 gPmQq/ 00000003CA5C 00000043EA5C 0 H1vk\ 00000003CAB2 00000043EAB2 0 *n/ 4 00000003CADC 00000043EADC 0 PojcDMd 00000003CAF9 00000043EAF9 0 5i@xm File pos Mem pos ID Text ======== ======= == ==== 00000003CD28 00000043ED28 0 WPsv\> 00000003CDC4 00000043EDC4 0 @>H,dH 00000003CE4C 00000043EE4C 0 t<+Ht 00000003CF61 00000043EF61 0 I\ JW 00000003CF6E 00000043EF6E 0 h#*]Q| 00000003D005 00000043F005 0 *boOu!9 00000003D0F6 00000043F0F6 0 +u)Ku3( 00000003D13E 00000043F13E 0 -})jAXf 00000003D2B7 00000043F2B7 0 m;RrC.9 00000003D2D2 00000043F2D2 0 v(9: 00000003D32C 00000043F32C 0 L=h7u 00000003D3CC 00000043F3CC 0 GW[*hL 00000003D3E7 00000043F3E7 0 GG>=Yt1 00000003D40F 00000043F40F 0 QI,EKo% 00000003D7B4 00000043F7B4 0 elRSt; 00000003D7FA 00000043F7FA 0 A@F|b 00000003D848 00000043F848 0 fgo*V 00000003D8B9 00000043F8B9 0 Yk&"F" 00000003D903 00000043F903 0 mKrM7 00000003D912 00000043F912 0 31LjP 00000003DAEA 00000043FAEA 0 UuoYe 00000003DBF6 00000043FBF6 0 ~%N| 00000003DC06 00000043FC06 0 QVj PJ 00000003DC18 00000043FC18 0 ;2r 8 00000003DCF9 00000043FCF9 0 (F9dY 00000003DD14 00000043FD14 0 \)T#C 00000003DD25 00000043FD25 0 ;+v N+ 00000003DD86 00000043FD86 0 ji_jdZf 00000003DD95 00000043FD95 0 :?ot4 00000003E12F 00000044012F 0 XG!aI< 00000003E158 000000440158 0 A0D-3 00000003E1B5 0000004401B5 0 L"*t2 00000003E316 000000440316 0 rm|2d 00000003E470 000000440470 0 ?9X$b 00000003E53A 00000044053A 0 Pek>/Y 00000003E868 000000440868 0 @"I0+ 00000003E87F 00000044087F 0 2u8SS 00000003E919 000000440919 0 _r7y? 00000003EA72 000000440A72 0 Mp>*uh/ 00000003EB0D 000000440B0D 0 tiX#L 00000003EB2C 000000440B2C 0 ;-Q%1 00000003EBA7 000000440BA7 0 U%LUE 00000003EBBF 000000440BBF 0 Pj1QC 00000003EBCF 000000440BCF 0 sY)Z2Y 00000003EC08 000000440C08 0 ,-0V. 00000003EC17 000000440C17 0 d08Dd9@ 00000003EC2D 000000440C2D 0 eJLIPJ 00000003EC34 000000440C34 0 )YJTKd 00000003EC3C 000000440C3C 0 eXL\MeJ 00000003EC53 000000440C53 0 Y9p:Y 00000003EC69 000000440C69 0 m/>#S2 00000003ECE7 000000440CE7 0 A,04j 00000003EE4B 000000440E4B 0 np D{> 00000003EF97 000000440F97 0 RP$Q 00000003EFC1 000000440FC1 0 ->W.R/-d9/Sb 00000003F1C1 0000004411C1 0 ( 9&~ 00000003F31E 00000044131E 0 $0EPx 00000003F3F9 0000004413F9 0 #{s6< 00000003F501 000000441501 0 .;1s(mV 00000003F7B6 0000004417B6 0 )SoU File pos Mem pos ID Text ======== ======= == ==== 00000003F831 000000441831 0 %(WMjnl 00000003F859 000000441859 0 ,[Du;( 00000003F972 000000441972 0 HRrYy 00000003FA7E 000000441A7E 0 Bk,_7BF 00000003FB2B 000000441B2B 0 .4&:a 00000003FB8A 000000441B8A 0 @d|F@ 00000003FBF3 000000441BF3 0 Nh,YVp$ 00000003FCCA 000000441CCA 0 !aV2&3 00000003FD2E 000000441D2E 0 sSHxW 00000003FE28 000000441E28 0 Zvd@h 00000003FE40 000000441E40 0 R2--k 00000003FEA3 000000441EA3 0 w@MT# 00000003FED9 000000441ED9 0 >9P-?L 00000003FEE8 000000441EE8 0 4?P | 00000003FF22 000000441F22 0 $'9XN 00000003FF5F 000000441F5F 0 %h0H/ 000000040008 000000442008 0 @@3T;+[ 0000000404BB 0000004424BB 0 H|L]. 0000000404CE 0000004424CE 0 \vGfG> 00000004058E 00000044258E 0 I iN& 0000000406DE 0000004426DE 0 }#SHw 0000000408C2 0000004428C2 0 JNaM, 0000000409F1 0000004429F1 0 4MPlEs4+ 000000040A83 000000442A83 0 Wq[}_ 000000040B66 000000442B66 0 xE7]*Q 000000040C83 000000442C83 0 4&9*8 000000040C8D 000000442C8D 0 y52w,} 000000040CB3 000000442CB3 0 QSWV= 0000000412A9 0000004432A9 0 5_pd 0000000412BE 0000004432BE 0 lFF dty 0000000412CA 0000004432CA 0 uqmie! 00000004134A 00000044334A 0 pHCXp 000000041497 000000443497 0 91cC~@ 0000000414EF 0000004434EF 0 !F)P5 000000041596 000000443596 0 DW'K$ 00000004159C 00000044359C 0 V2|7S 0000000415C7 0000004435C7 0 A.@6; 000000041607 000000443607 0 %:*4f- 000000041777 000000443777 0 P zgE 000000041A44 000000443A44 0 *G4o-"C 000000041A62 000000443A62 0 9T8Dq 000000041AC2 000000443AC2 0 X\;(nT 000000041B1D 000000443B1D 0 uaVw' 000000041B93 000000443B93 0 sDpRE 000000041BD3 000000443BD3 0 @h0Y<S 000000041C37 000000443C37 0 h4*bC 000000041D4E 000000443D4E 0 MVtQX 000000041D7D 000000443D7D 0 EjPUd 000000041F94 000000443F94 0 </OrY 000000041FD1 000000443FD1 0 Ig@.y 000000042052 000000444052 0 AAFF 0000000420C8 0000004440C8 0 (p3t: 0000000420D5 0000004440D5 0 ;tv-P 0000000420EF 0000004440EF 0 >,BA\ 000000042157 000000444157 0 k.%]T 0000000422AD 0000004442AD 0 =t<VN 00000004233F 00000044433F 0 &0_Ej[ 0000000423DE 0000004443DE 0 H+J!P) 0000000423F1 0000004443F1 0 8aV_P 000000042404 000000444404 0 Y@ukf File pos Mem pos ID Text ======== ======= == ==== 0000000424FE 0000004444FE 0 ;:u84 0000000426B2 0000004446B2 0 #5/7w0 0000000426E0 0000004446E0 0 VVRV2S 000000042715 000000444715 0 $\D-} 000000042782 000000444782 0 Zzb}J 00000004283B 00000044483B 0 5g@T(6E 000000042941 000000444941 0 @@m- 0000000429DC 0000004449DC 0 s&:)&X6, 000000042B2E 000000444B2E 0 9s*(0(TO 000000042DC4 000000444DC4 0 P##CcX 000000042E40 000000444E40 0 6i(,8@ 000000042EE9 000000444EE9 0 f8,s8 000000042F4E 000000444F4E 0 K\ PU 000000042F99 000000444F99 0 T=ISU 000000043063 000000445063 0 r33I]*/v,*; 000000043111 000000445111 0 It'Y# 000000043273 000000445273 0 Pkq~& 0000000432CE 0000004452CE 0 }wUC/XL 000000043393 000000445393 0 }t{~B 0000000433CB 0000004453CB 0 \G%}r 00000004341B 00000044541B 0 4;W5> 0000000435BB 0000004455BB 0 {63=7R!sEn+ 00000004381F 00000044581F 0 d\lang1033\b0\fs20$\b 000000043838 000000445838 0 EFFET JURIDIQUE. 000000043853 000000445853 0 r\'e9sent co 00000004386B 00000044586B 0 iertains 00000004387F 00000044587F 0 diques. Vou 000000043893 000000445893 0 ez av r&'auBe/ 0000000438C0 0000004458C0 0 momfi' 0000000438D3 0000004458D3 0 *f78r 0000000438E3 0000004458E3 0 -ciSl 0000000438EF 0000004458EF 0 ett4Y 0000000438FA 0000004458FA 0 'sb1< 000000043950 000000445950 0 un telommage 000000043964 000000445964 0 n_orZ 00000004396E 00000044596E 0 4xcluyXg 0000000439CC 0000004459CC 0 y-dZu 000000043A22 000000445A22 0 ie,3@ 000000043AA1 000000445AA1 0 (ymp\ 000000043ACA 000000445ACA 0 ?k1l;s 000000043AE7 000000445AE7 0 |M:+o a% 000000043AF9 000000445AF9 0 ITATION DES 000000043B05 000000445B05 0 OMMAG 000000043B1C 000000445B1C 0 EXCLU 000000043B25 000000445B25 0 S( R"P SABI@ 000000043B79 000000445B79 0 hFuk5,\ 000000043BAE 000000445BAE 0 ci$,( 000000043BFD 000000445BFD 0 bb#To 000000043C2A 000000445C2A 0 WKcLB 000000043C32 000000445C32 0 -9xpLs.2 000000043C5A 000000445C5A 0 cvn+L 000000043C84 000000445C84 0 ZR% M\ 000000043CFF 000000445CFF 0 7,nmC 000000043D66 000000445D66 0 B/K . 000000043D6C 000000445D6C 0 [hndE? w$F 000000043D97 000000445D97 0 knew 000000043DC9 000000445DC9 0 ,\P&)y$ 000000043DE6 000000445DE6 0 wYy)l 000000043DFC 000000445DFC 0 7,,1e- 000000043E20 000000445E20 0 ,eal- File pos Mem pos ID Text ======== ======= == ==== 000000043E44 000000445E44 0 ,j)mY 000000043E67 000000445E67 0 BhI7G 000000043E71 000000445E71 0 yX\0aWd1 000000043EB3 000000445EB3 0 capsTZ2 000000043ED7 000000445ED7 0 1$L=n 000000043F24 000000445F24 0 {,+q$5. 000000043F5B 000000445F5B 0 #9"Dw 000000044008 000000446008 0 !ImGpi 000000044024 000000446024 0 t/pv/ 00000004404C 00000044604C 0 #%Lx9l 000000044067 000000446067 0 ?9wi5 000000044099 000000446099 0 kVT&) 000000044105 000000446105 0 >N!iY4 000000044126 000000446126 0 -biF 00000004414A 00000044614A 0 zDkY%k 000000044155 000000446155 0 [7%f-r 0000000441D4 0000004461D4 0 5SUPPORT 000000044273 000000446273 0 HFFFT 000000044282 000000446282 0 1U"1\ 00000004429C 00000044629C 0 <Btp://#4 0000000442B9 0000004462B9 0 3OCUMEN 0000000442CF 0000004462CF 0 ?h\v 0! 000000044302 000000446302 0 ,{H<D 00000004432B 00000044632B 0 @,UssKX 00000004434D 00000044634D 0 !V;m% 00000004446A 00000044646A 0 @Za8G=5 000000044494 000000446494 0 LLAAND 0000000444A0 0000004464A0 0 IGHT:k- 000000044509 000000446509 0 FTWARE;YOU 000000044529 000000446529 0 NOT"M0 0000000445AE 0000004465AE 0 M$ C/ 0000000445EE 0000004465EE 0 Wkov8 0000000445FB 0000004465FB 0 4|2fz 00000004460E 00000044660E 0 W{\*\k; 000000044629 000000446629 0 506;}\ 000000044687 000000446687 0 pg1252\f 000000044696 000000446696 0 (fa_{ 0000000446A8 0000004466A8 0 q+f|Tt[[ 000000044751 000000446751 0 t!hGUn[ 00000004478D 00000044678D 0 s]76d 0000000447BA 0000004467BA 0 ToArgvW 0000000447F8 0000004467F8 0 9+.7F 00000004482D 00000044682D 0 MvdyeoS 000000044843 000000446843 0 pUs&M 000000044849 000000446849 0 cgdQs- 000000044863 000000446863 0 -{/Y*3 00000004488E 00000044688E 0 Cm!M& 000000044905 000000446905 0 e[=pa 00000004497D 00000044697D 0 ;qXB] 0000000449ED 0000004469ED 0 CT3L 0000000449FA 0000004469FA 0 RtlNt 000000044A2C 000000446A2C 0 sCWmFeX 000000044A40 000000446A40 0 (AoC7 t 000000044ABF 000000446ABF 0 ] QeK(qM 000000044B60 000000446B60 0 G-{c<+pQd%' 000000044B81 000000446B81 0 "l<r{ 000000044BA1 000000446BA1 0 BSDe3j 000000044BBF 000000446BBF 0 KWow64En 000000044BD5 000000446BD5 0 }wDsuWH0 000000044BF0 000000446BF0 0 Op-[F File pos Mem pos ID Text ======== ======= == ==== 000000044C3D 000000446C3D 0 rRitP 000000044C52 000000446C52 0 r>ioe 000000044C5E 000000446C5E 0 PTLOSS 000000044C76 000000446C76 0 R6034u 000000044C9A 000000446C9A 0 C {2brX 000000044CB5 000000446CB5 0 1]'sF): 000000044D30 000000446D30 0 '(/clr 000000044D4E 000000446D4E 0 DIMai 000000044D76 000000446D76 0 SMxRTo 000000044DAE 000000446DAE 0 6std5 000000044DC5 000000446DC5 0 (_4_k 000000044DF7 000000446DF7 0 o#7mvY 000000044E45 000000446E45 0 -+8l0 000000044EA2 000000446EA2 0 LC_TIME 000000044EB4 000000446EB4 0 MONETARYCTYPEoT 000000044F1F 000000446F1F 0 !"#$%&'()*+,-./ 000000044F32 000000446F32 0 lp2>56789:;<=>?@ABCDEb 000000044F4B 000000446F4B 0 FGHIJKLMNOP#T 000000044F5C 000000446F5C 0 1XYZ[\] 000000044F6E 000000446F6E 0 ijklm#pqrS 000000044F7B 000000446F7B 0 muvwxyz{|}~ 000000044FB5 000000446FB5 0 e+Fls 000000044FCB 000000446FCB 0 AlP;( 000000044FF9 000000446FF9 0 8PX? 000000045025 000000447025 0 B2H3X 000000045051 000000447051 0 ADVAPI 00000004505B 00000044705B 0 q.De, 000000045079 000000447079 0 A3LaZAV 00000004508D 00000044708D 0 fFkQ? 000000045096 000000447096 0 Box1ZRq 0000000451A5 0000004471A5 0 HH:mn6C 0000000451B0 0000004471B0 0 d, M[ 000000045211 000000447211 0 SKGC7yC 00000004521B 00000044721B 0 {?;3#v 000000045239 000000447239 0 :;Tu MN 000000045248 000000447248 0 C;7/' 000000045298 000000447298 0 ?vakp 0000000452A8 0000004472A8 0 -7bw' 0000000452DA 0000004472DA 0 engc4 0000000452FD 0000004472FD 0 f'C'n 00000004536C 00000044736C 0 bpBc?D 000000045385 000000447385 0 2GM#b 000000045398 000000447398 0 XIQ[+ 0000000453D6 0000004473D6 0 l#LOlux 0000000454D3 0000004474D3 0 =x,_l,\ 0000000455A8 0000004475A8 0 'OxD)/@)< 0000000455B6 0000004475B6 0 4WU,OGB$w 000000045607 000000447607 0 d|hTTO 000000045667 000000447667 0 ('8PW# 0000000456BD 0000004476BD 0 Q[IN$ 0000000456EC 0000004476EC 0 k:\s[ 0000000456FD 0000004476FD 0 [\\Re 000000045709 000000447709 0 .pdbkpf8 00000004586F 00000044786F 0 tHYvf 000000045AEC 000000447AEC 0 8(40,4M 000000045B27 000000447B27 0 xpd\i 000000045B2E 000000447B2E 0 iPD@<0a 000000045B94 000000447B94 0 0Nm3M 000000045BCE 000000447BCE 0 AtRU{R 000000045BF3 000000447BF3 0 f"@'WaiI File pos Mem pos ID Text ======== ======= == ==== 000000045C17 000000447C17 0 N#AZ(j 000000045C72 000000447C72 0 ABTiLa 000000045C97 000000447C97 0 SWTKC 000000045CA3 000000447CA3 0 OutpuP, 000000045CAB 000000447CAB 0 na"qVZT 000000045CDF 000000447CDF 0 Addr/U{ 000000045D2D 000000447D2D 0 S4ep2+ 000000045D8B 000000447D8B 0 P\Zwp 000000045DAF 000000447DAF 0 EM [V 000000045DE3 000000447DE3 0 rToMsBym0,{ 000000045DF8 000000447DF8 0 ushlBuff_x 000000045E18 000000447E18 0 p!A-] 000000045E4F 000000447E4F 0 j[aQgsP 000000045E65 000000447E65 0 kdspm 000000045E6B 000000447E6B 0 ACLwH 000000045EA0 000000447EA0 0 faz[ID 000000045EB9 000000447EB9 0 SAWU9Va 000000045F1A 000000447F1A 0 D/ogf 000000045FCA 000000447FCA 0 .t6!{ 00000004619C 00000044819C 0 XPTPSW 00000004669C 00000044869C 0 <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> 0000000466E7 0000004486E7 0 <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"> 00000004671F 00000044871F 0 <security> 00000004672F 00000044872F 0 <requestedPrivileges> 00000004674C 00000044874C 0 <requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel> 0000000467AC 0000004487AC 0 </requestedPrivileges> 0000000467CA 0000004487CA 0 </security> 0000000467DB 0000004487DB 0 </trustInfo> 0000000467EB 0000004487EB 0 </assembly>PA 0000000468AC 0000004488AC 0 KERNEL32.DLL 0000000468B9 0000004488B9 0 ADVAPI32.dll 0000000468C6 0000004488C6 0 COMDLG32.dll 0000000468D3 0000004488D3 0 GDI32.dll 0000000468DD 0000004488DD 0 USER32.dll 0000000468EA 0000004488EA 0 LoadLibraryA 0000000468F8 0000004488F8 0 GetProcAddress 000000046908 000000448908 0 VirtualProtect 000000046918 000000448918 0 VirtualAlloc 000000046926 000000448926 0 VirtualFree 000000046934 000000448934 0 ExitProcess 000000046942 000000448942 0 RegCloseKey 000000046950 000000448950 0 PrintDlgW 00000004695C 00000044895C 0 EndDoc 000000046964 000000448964 0 EndDialog 000000046B80 000000448B80 0 .?AVbad_cast@std@@ 000000046B9C 000000448B9C 0 .?AVexception@std@@ 000000046BB8 000000448BB8 0 .?AVcodecvt_base@std@@ 000000046BD8 000000448BD8 0 .?AVios_base@std@@ 000000046BF4 000000448BF4 0 .?AV_Iostream_error_category@std@@ 000000046C20 000000448C20 0 .?AVfailure@ios_base@std@@ 000000046C44 000000448C44 0 .?AVruntime_error@std@@ 000000046C64 000000448C64 0 .?AV?$ctype@D@std@@ 000000046C80 000000448C80 0 .?AV_System_error_category@std@@ 000000046CAC 000000448CAC 0 .?AV?$basic_filebuf@DU?$char_traits@D@std@@@std@@ 000000046CE8 000000448CE8 0 .?AV?$basic_ios@DU?$char_traits@D@std@@@std@@ 000000046D20 000000448D20 0 .?AV?$_Iosb@H@std@@ 000000046D3C 000000448D3C 0 .?AVerror_category@std@@ 000000046D60 000000448D60 0 .?AV_Generic_error_category@std@@ 000000046D8C 000000448D8C 0 .?AV_Facet_base@std@@ 000000046DAC 000000448DAC 0 .?AUctype_base@std@@ File pos Mem pos ID Text ======== ======= == ==== 000000046DCC 000000448DCC 0 .?AV?$basic_ofstream@DU?$char_traits@D@std@@@std@@ 000000046E08 000000448E08 0 .?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@ 000000046E44 000000448E44 0 .?AVfacet@locale@std@@ 000000046E64 000000448E64 0 .?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@ 000000046EA0 000000448EA0 0 .?AV?$basic_istream@DU?$char_traits@D@std@@@std@@ 000000046EDC 000000448EDC 0 .?AV?$basic_ifstream@DU?$char_traits@D@std@@@std@@ 000000046F18 000000448F18 0 .?AVXFSService@@ 000000046F34 000000448F34 0 .?AVXCDM@@ 000000046F48 000000448F48 0 .?AV?$_Node_str@D@std@@ 000000046F68 000000448F68 0 .?AV_Node_capture@std@@ 000000046F88 000000448F88 0 .?AV?$_Node_class@DV?$regex_traits@D@std@@@std@@ 000000046FC4 000000448FC4 0 .?AV_Node_endif@std@@ 000000046FE4 000000448FE4 0 .?AV_Node_assert@std@@ 000000047004 000000449004 0 .?AV_Node_rep@std@@ 000000047020 000000449020 0 .?AVXIDC@@ 000000047034 000000449034 0 .?AV_Node_back@std@@ 000000047054 000000449054 0 .?AV_Node_end_rep@std@@ 000000047074 000000449074 0 .?AV_Node_end_group@std@@ 000000047098 000000449098 0 .?AV_Node_base@std@@ 0000000470B8 0000004490B8 0 .?AV_Node_if@std@@ 0000000470D4 0000004490D4 0 .?AV?$collate@D@std@@ 0000000470F4 0000004490F4 0 .?AV_Root_node@std@@ 000000047114 000000449114 0 .?AVXPIN@@ 000000029FEC 00000042B9EC 0 combase.dll 00000002A01B 00000042BA1B 0 Amscoree.dll 00000002A893 00000042C293 0 Akernel32.dll 00000002B970 00000042D370 0 zh-CHS 00000002BB70 00000042D570 0 ar-SA 00000002BB7C 00000042D57C 0 bg-BG 00000002BB88 00000042D588 0 ca-ES 00000002BB94 00000042D594 0 zh-TW 00000002BBA0 00000042D5A0 0 cs-CZ 00000002BBAC 00000042D5AC 0 da-DK 00000002BBB8 00000042D5B8 0 de-DE 00000002BBC4 00000042D5C4 0 el-GR 00000002BBD0 00000042D5D0 0 en-US 00000002BBDC 00000042D5DC 0 fi-FI 00000002BBE8 00000042D5E8 0 fr-FR 00000002BBF4 00000042D5F4 0 he-IL 00000002BC00 00000042D600 0 hu-HU 00000002BC0C 00000042D60C 0 is-IS 00000002BC18 00000042D618 0 it-IT 00000002BC24 00000042D624 0 ja-JP 00000002BC30 00000042D630 0 ko-KR 00000002BC3C 00000042D63C 0 nl-NL 00000002BC48 00000042D648 0 nb-NO 00000002BC54 00000042D654 0 pl-PL 00000002BC60 00000042D660 0 pt-BR 00000002BC6C 00000042D66C 0 ro-RO 00000002BC78 00000042D678 0 ru-RU 00000002BC84 00000042D684 0 hr-HR 00000002BC90 00000042D690 0 sk-SK 00000002BC9C 00000042D69C 0 sq-AL 00000002BCA8 00000042D6A8 0 sv-SE 00000002BCB4 00000042D6B4 0 th-TH 00000002BCC0 00000042D6C0 0 tr-TR 00000002BCCC 00000042D6CC 0 ur-PK 00000002BCD8 00000042D6D8 0 id-ID 00000002BCE4 00000042D6E4 0 uk-UA 00000002BCF0 00000042D6F0 0 be-BY File pos Mem pos ID Text ======== ======= == ==== 00000002BCFC 00000042D6FC 0 sl-SI 00000002BD08 00000042D708 0 et-EE 00000002BD14 00000042D714 0 lv-LV 00000002BD20 00000042D720 0 lt-LT 00000002BD2C 00000042D72C 0 fa-IR 00000002BD38 00000042D738 0 vi-VN 00000002BD44 00000042D744 0 hy-AM 00000002BD50 00000042D750 0 az-AZ-Latn 00000002BD68 00000042D768 0 eu-ES 00000002BD74 00000042D774 0 mk-MK 00000002BD80 00000042D780 0 tn-ZA 00000002BD8C 00000042D78C 0 xh-ZA 00000002BD98 00000042D798 0 zu-ZA 00000002BDA4 00000042D7A4 0 af-ZA 00000002BDB0 00000042D7B0 0 ka-GE 00000002BDBC 00000042D7BC 0 fo-FO 00000002BDC8 00000042D7C8 0 hi-IN 00000002BDD4 00000042D7D4 0 mt-MT 00000002BDE0 00000042D7E0 0 se-NO 00000002BDEC 00000042D7EC 0 ms-MY 00000002BDF8 00000042D7F8 0 kk-KZ 00000002BE04 00000042D804 0 ky-KG 00000002BE10 00000042D810 0 sw-KE 00000002BE1C 00000042D81C 0 uz-UZ-Latn 00000002BE34 00000042D834 0 tt-RU 00000002BE40 00000042D840 0 bn-IN 00000002BE4C 00000042D84C 0 pa-IN 00000002BE58 00000042D858 0 gu-IN 00000002BE64 00000042D864 0 ta-IN 00000002BE70 00000042D870 0 te-IN 00000002BE7C 00000042D87C 0 kn-IN 00000002BE88 00000042D888 0 ml-IN 00000002BE94 00000042D894 0 mr-IN 00000002BEA0 00000042D8A0 0 sa-IN 00000002BEAC 00000042D8AC 0 mn-MN 00000002BEB8 00000042D8B8 0 cy-GB 00000002BEC4 00000042D8C4 0 gl-ES 00000002BED0 00000042D8D0 0 kok-IN 00000002BEE0 00000042D8E0 0 syr-SY 00000002BEF0 00000042D8F0 0 div-MV 00000002BF00 00000042D900 0 quz-BO 00000002BF10 00000042D910 0 ns-ZA 00000002BF1C 00000042D91C 0 mi-NZ 00000002BF28 00000042D928 0 ar-IQ 00000002BF34 00000042D934 0 zh-CN 00000002BF40 00000042D940 0 de-CH 00000002BF4C 00000042D94C 0 en-GB 00000002BF58 00000042D958 0 es-MX 00000002BF64 00000042D964 0 fr-BE 00000002BF70 00000042D970 0 it-CH 00000002BF7C 00000042D97C 0 nl-BE 00000002BF88 00000042D988 0 nn-NO 00000002BF94 00000042D994 0 pt-PT 00000002BFA0 00000042D9A0 0 sr-SP-Latn 00000002BFB8 00000042D9B8 0 sv-FI 00000002BFC4 00000042D9C4 0 az-AZ-Cyrl 00000002BFDC 00000042D9DC 0 se-SE 00000002BFE8 00000042D9E8 0 ms-BN 00000002BFF4 00000042D9F4 0 uz-UZ-Cyrl 00000002C00C 00000042DA0C 0 quz-EC File pos Mem pos ID Text ======== ======= == ==== 00000002C01C 00000042DA1C 0 ar-EG 00000002C028 00000042DA28 0 zh-HK 00000002C034 00000042DA34 0 de-AT 00000002C040 00000042DA40 0 en-AU 00000002C04C 00000042DA4C 0 es-ES 00000002C058 00000042DA58 0 fr-CA 00000002C064 00000042DA64 0 sr-SP-Cyrl 00000002C07C 00000042DA7C 0 se-FI 00000002C088 00000042DA88 0 quz-PE 00000002C098 00000042DA98 0 ar-LY 00000002C0A4 00000042DAA4 0 zh-SG 00000002C0B0 00000042DAB0 0 de-LU 00000002C0BC 00000042DABC 0 en-CA 00000002C0C8 00000042DAC8 0 es-GT 00000002C0D4 00000042DAD4 0 fr-CH 00000002C0E0 00000042DAE0 0 hr-BA 00000002C0EC 00000042DAEC 0 smj-NO 00000002C0FC 00000042DAFC 0 ar-DZ 00000002C108 00000042DB08 0 zh-MO 00000002C114 00000042DB14 0 de-LI 00000002C120 00000042DB20 0 en-NZ 00000002C12C 00000042DB2C 0 es-CR 00000002C138 00000042DB38 0 fr-LU 00000002C144 00000042DB44 0 bs-BA-Latn 00000002C15C 00000042DB5C 0 smj-SE 00000002C16C 00000042DB6C 0 ar-MA 00000002C178 00000042DB78 0 en-IE 00000002C184 00000042DB84 0 es-PA 00000002C190 00000042DB90 0 fr-MC 00000002C19C 00000042DB9C 0 sr-BA-Latn 00000002C1B4 00000042DBB4 0 sma-NO 00000002C1C4 00000042DBC4 0 ar-TN 00000002C1D0 00000042DBD0 0 en-ZA 00000002C1DC 00000042DBDC 0 es-DO 00000002C1E8 00000042DBE8 0 sr-BA-Cyrl 00000002C200 00000042DC00 0 sma-SE 00000002C210 00000042DC10 0 ar-OM 00000002C21C 00000042DC1C 0 en-JM 00000002C228 00000042DC28 0 es-VE 00000002C234 00000042DC34 0 sms-FI 00000002C244 00000042DC44 0 ar-YE 00000002C250 00000042DC50 0 en-CB 00000002C25C 00000042DC5C 0 es-CO 00000002C268 00000042DC68 0 smn-FI 00000002C278 00000042DC78 0 ar-SY 00000002C284 00000042DC84 0 en-BZ 00000002C290 00000042DC90 0 es-PE 00000002C29C 00000042DC9C 0 ar-JO 00000002C2A8 00000042DCA8 0 en-TT 00000002C2B4 00000042DCB4 0 es-AR 00000002C2C0 00000042DCC0 0 ar-LB 00000002C2CC 00000042DCCC 0 en-ZW 00000002C2D8 00000042DCD8 0 es-EC 00000002C2E4 00000042DCE4 0 ar-KW 00000002C2F0 00000042DCF0 0 en-PH 00000002C2FC 00000042DCFC 0 es-CL 00000002C308 00000042DD08 0 ar-AE 00000002C314 00000042DD14 0 es-UY 00000002C320 00000042DD20 0 ar-BH 00000002C32C 00000042DD2C 0 es-PY File pos Mem pos ID Text ======== ======= == ==== 00000002C338 00000042DD38 0 ar-QA 00000002C344 00000042DD44 0 es-BO 00000002C350 00000042DD50 0 es-SV 00000002C35C 00000042DD5C 0 es-HN 00000002C368 00000042DD68 0 es-NI 00000002C374 00000042DD74 0 es-PR 00000002C380 00000042DD80 0 zh-CHT 00000002C398 00000042DD98 0 af-za 00000002C3A4 00000042DDA4 0 ar-ae 00000002C3B0 00000042DDB0 0 ar-bh 00000002C3BC 00000042DDBC 0 ar-dz 00000002C3C8 00000042DDC8 0 ar-eg 00000002C3D4 00000042DDD4 0 ar-iq 00000002C3E0 00000042DDE0 0 ar-jo 00000002C3EC 00000042DDEC 0 ar-kw 00000002C3F8 00000042DDF8 0 ar-lb 00000002C404 00000042DE04 0 ar-ly 00000002C410 00000042DE10 0 ar-ma 00000002C41C 00000042DE1C 0 ar-om 00000002C428 00000042DE28 0 ar-qa 00000002C434 00000042DE34 0 ar-sa 00000002C440 00000042DE40 0 ar-sy 00000002C44C 00000042DE4C 0 ar-tn 00000002C458 00000042DE58 0 ar-ye 00000002C464 00000042DE64 0 az-az-cyrl 00000002C47C 00000042DE7C 0 az-az-latn 00000002C494 00000042DE94 0 be-by 00000002C4A0 00000042DEA0 0 bg-bg 00000002C4AC 00000042DEAC 0 bn-in 00000002C4B8 00000042DEB8 0 bs-ba-latn 00000002C4D0 00000042DED0 0 ca-es 00000002C4DC 00000042DEDC 0 cs-cz 00000002C4E8 00000042DEE8 0 cy-gb 00000002C4F4 00000042DEF4 0 da-dk 00000002C500 00000042DF00 0 de-at 00000002C50C 00000042DF0C 0 de-ch 00000002C518 00000042DF18 0 de-de 00000002C524 00000042DF24 0 de-li 00000002C530 00000042DF30 0 de-lu 00000002C53C 00000042DF3C 0 div-mv 00000002C54C 00000042DF4C 0 el-gr 00000002C558 00000042DF58 0 en-au 00000002C564 00000042DF64 0 en-bz 00000002C570 00000042DF70 0 en-ca 00000002C57C 00000042DF7C 0 en-cb 00000002C588 00000042DF88 0 en-gb 00000002C594 00000042DF94 0 en-ie 00000002C5A0 00000042DFA0 0 en-jm 00000002C5AC 00000042DFAC 0 en-nz 00000002C5B8 00000042DFB8 0 en-ph 00000002C5C4 00000042DFC4 0 en-tt 00000002C5D0 00000042DFD0 0 en-us 00000002C5DC 00000042DFDC 0 en-za 00000002C5E8 00000042DFE8 0 en-zw 00000002C5F4 00000042DFF4 0 es-ar 00000002C600 00000042E000 0 es-bo 00000002C60C 00000042E00C 0 es-cl 00000002C618 00000042E018 0 es-co 00000002C624 00000042E024 0 es-cr 00000002C630 00000042E030 0 es-do File pos Mem pos ID Text ======== ======= == ==== 00000002C63C 00000042E03C 0 es-ec 00000002C648 00000042E048 0 es-es 00000002C654 00000042E054 0 es-gt 00000002C660 00000042E060 0 es-hn 00000002C66C 00000042E06C 0 es-mx 00000002C678 00000042E078 0 es-ni 00000002C684 00000042E084 0 es-pa 00000002C690 00000042E090 0 es-pe 00000002C69C 00000042E09C 0 es-pr 00000002C6A8 00000042E0A8 0 es-py 00000002C6B4 00000042E0B4 0 es-sv 00000002C6C0 00000042E0C0 0 es-uy 00000002C6CC 00000042E0CC 0 es-ve 00000002C6D8 00000042E0D8 0 et-ee 00000002C6E4 00000042E0E4 0 eu-es 00000002C6F0 00000042E0F0 0 fa-ir 00000002C6FC 00000042E0FC 0 fi-fi 00000002C708 00000042E108 0 fo-fo 00000002C714 00000042E114 0 fr-be 00000002C720 00000042E120 0 fr-ca 00000002C72C 00000042E12C 0 fr-ch 00000002C738 00000042E138 0 fr-fr 00000002C744 00000042E144 0 fr-lu 00000002C750 00000042E150 0 fr-mc 00000002C75C 00000042E15C 0 gl-es 00000002C768 00000042E168 0 gu-in 00000002C774 00000042E174 0 he-il 00000002C780 00000042E180 0 hi-in 00000002C78C 00000042E18C 0 hr-ba 00000002C798 00000042E198 0 hr-hr 00000002C7A4 00000042E1A4 0 hu-hu 00000002C7B0 00000042E1B0 0 hy-am 00000002C7BC 00000042E1BC 0 id-id 00000002C7C8 00000042E1C8 0 is-is 00000002C7D4 00000042E1D4 0 it-ch 00000002C7E0 00000042E1E0 0 it-it 00000002C7EC 00000042E1EC 0 ja-jp 00000002C7F8 00000042E1F8 0 ka-ge 00000002C804 00000042E204 0 kk-kz 00000002C810 00000042E210 0 kn-in 00000002C81C 00000042E21C 0 kok-in 00000002C82C 00000042E22C 0 ko-kr 00000002C838 00000042E238 0 ky-kg 00000002C844 00000042E244 0 lt-lt 00000002C850 00000042E250 0 lv-lv 00000002C85C 00000042E25C 0 mi-nz 00000002C868 00000042E268 0 mk-mk 00000002C874 00000042E274 0 ml-in 00000002C880 00000042E280 0 mn-mn 00000002C88C 00000042E28C 0 mr-in 00000002C898 00000042E298 0 ms-bn 00000002C8A4 00000042E2A4 0 ms-my 00000002C8B0 00000042E2B0 0 mt-mt 00000002C8BC 00000042E2BC 0 nb-no 00000002C8C8 00000042E2C8 0 nl-be 00000002C8D4 00000042E2D4 0 nl-nl 00000002C8E0 00000042E2E0 0 nn-no 00000002C8EC 00000042E2EC 0 ns-za 00000002C8F8 00000042E2F8 0 pa-in 00000002C904 00000042E304 0 pl-pl File pos Mem pos ID Text ======== ======= == ==== 00000002C910 00000042E310 0 pt-br 00000002C91C 00000042E31C 0 pt-pt 00000002C928 00000042E328 0 quz-bo 00000002C938 00000042E338 0 quz-ec 00000002C948 00000042E348 0 quz-pe 00000002C958 00000042E358 0 ro-ro 00000002C964 00000042E364 0 ru-ru 00000002C970 00000042E370 0 sa-in 00000002C97C 00000042E37C 0 se-fi 00000002C988 00000042E388 0 se-no 00000002C994 00000042E394 0 se-se 00000002C9A0 00000042E3A0 0 sk-sk 00000002C9AC 00000042E3AC 0 sl-si 00000002C9B8 00000042E3B8 0 sma-no 00000002C9C8 00000042E3C8 0 sma-se 00000002C9D8 00000042E3D8 0 smj-no 00000002C9E8 00000042E3E8 0 smj-se 00000002C9F8 00000042E3F8 0 smn-fi 00000002CA08 00000042E408 0 sms-fi 00000002CA18 00000042E418 0 sq-al 00000002CA24 00000042E424 0 sr-ba-cyrl 00000002CA3C 00000042E43C 0 sr-ba-latn 00000002CA54 00000042E454 0 sr-sp-cyrl 00000002CA6C 00000042E46C 0 sr-sp-latn 00000002CA84 00000042E484 0 sv-fi 00000002CA90 00000042E490 0 sv-se 00000002CA9C 00000042E49C 0 sw-ke 00000002CAA8 00000042E4A8 0 syr-sy 00000002CAB8 00000042E4B8 0 ta-in 00000002CAC4 00000042E4C4 0 te-in 00000002CAD0 00000042E4D0 0 th-th 00000002CADC 00000042E4DC 0 tn-za 00000002CAE8 00000042E4E8 0 tr-tr 00000002CAF4 00000042E4F4 0 tt-ru 00000002CB00 00000042E500 0 uk-ua 00000002CB0C 00000042E50C 0 ur-pk 00000002CB18 00000042E518 0 uz-uz-cyrl 00000002CB30 00000042E530 0 uz-uz-latn 00000002CB48 00000042E548 0 vi-vn 00000002CB54 00000042E554 0 xh-za 00000002CB60 00000042E560 0 zh-chs 00000002CB70 00000042E570 0 zh-cht 00000002CB80 00000042E580 0 zh-cn 00000002CB8C 00000042E58C 0 zh-hk 00000002CB98 00000042E598 0 zh-mo 00000002CBA4 00000042E5A4 0 zh-sg 00000002CBB0 00000042E5B0 0 zh-tw 00000002CBBC 00000042E5BC 0 zu-za 00000002CBD8 00000042E5D8 0 (null) 00000002D550 00000042EF50 0 runtime error 00000002D6A4 00000042F0A4 0 Program: 00000002D6B8 00000042F0B8 0 <program name unknown> 00000002D6F8 00000042F0F8 0 Microsoft Visual C++ Runtime Library 00000002D8F8 00000042F2F8 0 Sunday 00000002D908 00000042F308 0 Monday 00000002D918 00000042F318 0 Tuesday 00000002D928 00000042F328 0 Wednesday 00000002D93C 00000042F33C 0 Thursday 00000002D950 00000042F350 0 Friday 00000002D960 00000042F360 0 Saturday File pos Mem pos ID Text ======== ======= == ==== 00000002D9D4 00000042F3D4 0 January 00000002D9E4 00000042F3E4 0 February 00000002D9F8 00000042F3F8 0 March 00000002DA04 00000042F404 0 April 00000002DA28 00000042F428 0 August 00000002DA38 00000042F438 0 September 00000002DA4C 00000042F44C 0 October 00000002DA5C 00000042F45C 0 November 00000002DA70 00000042F470 0 December 00000002DA94 00000042F494 0 MM/dd/yy 00000002DAA8 00000042F4A8 0 dddd, MMMM dd, yyyy 00000002DAD0 00000042F4D0 0 HH:mm:ss 00000002DB2F 00000042F52F 0 BLC_ALL 00000002DB40 00000042F540 0 LC_COLLATE 00000002DB58 00000042F558 0 LC_CTYPE 00000002DB6C 00000042F56C 0 LC_MONETARY 00000002DB84 00000042F584 0 LC_NUMERIC 00000002DB9C 00000042F59C 0 LC_TIME 00000002DC7C 00000042F67C 0 UTF-8 00000002DC88 00000042F688 0 UTF-16LE 00000002DC9C 00000042F69C 0 UNICODE 00000002DE54 00000042F854 0 USER32.DLL 00000002E91C 00000043031C 0 american 00000002E930 000000430330 0 american english 00000002E954 000000430354 0 american-english 00000002E978 000000430378 0 australian 00000002E990 000000430390 0 belgian 00000002E9A0 0000004303A0 0 canadian 00000002E9C4 0000004303C4 0 chinese 00000002E9D4 0000004303D4 0 chinese-hongkong 00000002E9F8 0000004303F8 0 chinese-simplified 00000002EA20 000000430420 0 chinese-singapore 00000002EA44 000000430444 0 chinese-traditional 00000002EA6C 00000043046C 0 dutch-belgian 00000002EA88 000000430488 0 english-american 00000002EAAC 0000004304AC 0 english-aus 00000002EAC4 0000004304C4 0 english-belize 00000002EAE4 0000004304E4 0 english-can 00000002EAFC 0000004304FC 0 english-caribbean 00000002EB20 000000430520 0 english-ire 00000002EB38 000000430538 0 english-jamaica 00000002EB58 000000430558 0 english-nz 00000002EB70 000000430570 0 english-south africa 00000002EB9C 00000043059C 0 english-trinidad y tobago 00000002EBD0 0000004305D0 0 english-uk 00000002EBE8 0000004305E8 0 english-us 00000002EC00 000000430600 0 english-usa 00000002EC18 000000430618 0 french-belgian 00000002EC38 000000430638 0 french-canadian 00000002EC58 000000430658 0 french-luxembourg 00000002EC7C 00000043067C 0 french-swiss 00000002EC98 000000430698 0 german-austrian 00000002ECB8 0000004306B8 0 german-lichtenstein 00000002ECE0 0000004306E0 0 german-luxembourg 00000002ED04 000000430704 0 german-swiss 00000002ED20 000000430720 0 irish-english 00000002ED3C 00000043073C 0 italian-swiss 00000002ED58 000000430758 0 norwegian 00000002ED6C 00000043076C 0 norwegian-bokmal 00000002ED90 000000430790 0 norwegian-nynorsk File pos Mem pos ID Text ======== ======= == ==== 00000002EDB4 0000004307B4 0 portuguese-brazilian 00000002EDE0 0000004307E0 0 spanish-argentina 00000002EE04 000000430804 0 spanish-bolivia 00000002EE24 000000430824 0 spanish-chile 00000002EE40 000000430840 0 spanish-colombia 00000002EE64 000000430864 0 spanish-costa rica 00000002EE8C 00000043088C 0 spanish-dominican republic 00000002EEC4 0000004308C4 0 spanish-ecuador 00000002EEE4 0000004308E4 0 spanish-el salvador 00000002EF0C 00000043090C 0 spanish-guatemala 00000002EF30 000000430930 0 spanish-honduras 00000002EF54 000000430954 0 spanish-mexican 00000002EF74 000000430974 0 spanish-modern 00000002EF94 000000430994 0 spanish-nicaragua 00000002EFB8 0000004309B8 0 spanish-panama 00000002EFD8 0000004309D8 0 spanish-paraguay 00000002EFFC 0000004309FC 0 spanish-peru 00000002F018 000000430A18 0 spanish-puerto rico 00000002F040 000000430A40 0 spanish-uruguay 00000002F060 000000430A60 0 spanish-venezuela 00000002F084 000000430A84 0 swedish-finland 00000002F0A4 000000430AA4 0 swiss 00000002F1D4 000000430BD4 0 america 00000002F1E4 000000430BE4 0 britain 00000002F1F4 000000430BF4 0 china 00000002F200 000000430C00 0 czech 00000002F20C 000000430C0C 0 england 00000002F21C 000000430C1C 0 great britain 00000002F238 000000430C38 0 holland 00000002F248 000000430C48 0 hong-kong 00000002F25C 000000430C5C 0 new-zealand 00000002F27C 000000430C7C 0 pr china 00000002F290 000000430C90 0 pr-china 00000002F2A4 000000430CA4 0 puerto-rico 00000002F2BC 000000430CBC 0 slovak 00000002F2CC 000000430CCC 0 south africa 00000002F2E8 000000430CE8 0 south korea 00000002F300 000000430D00 0 south-africa 00000002F31C 000000430D1C 0 south-korea 00000002F334 000000430D34 0 trinidad & tobago 00000002F358 000000430D58 0 united-kingdom 00000002F378 000000430D78 0 united-states 00000002F3C1 000000430DC1 0 CONOUT$ 00000002F4FC 000000430EFC 0 alnum 00000002F508 000000430F08 0 alpha 00000002F514 000000430F14 0 blank 00000002F520 000000430F20 0 cntrl 00000002F530 000000430F30 0 digit 00000002F53C 000000430F3C 0 graph 00000002F548 000000430F48 0 lower 00000002F554 000000430F54 0 print 00000002F560 000000430F60 0 punct 00000002F56C 000000430F6C 0 space 00000002F57C 000000430F7C 0 upper 00000002F58C 000000430F8C 0 xdigit 00000002F5BC 000000430FBC 0 WM_XFS_STOP 00000002F69C 00000043109C 0 DBackup Service 00000002F7FF 0000004311FF 0 tDBackup Service 00000002F880 000000431280 0 DBackup Service 00000002F8A0 0000004312A0 0 DBackup Service File pos Mem pos ID Text ======== ======= == ==== 00000002F8C0 0000004312C0 0 DBackup Service 00000002F8E0 0000004312E0 0 DBackup Service 00000002F900 000000431300 0 DBackup Service 000000030278 000000431C78 0 /autorun 00000003028C 000000431C8C 0 FwLoadPm 0000000302A0 000000431CA0 0 SOFTWARE\Microsoft\Windows\CurrentVersion\Run 0000000302FC 000000431CFC 0 FwLoadPm 000000030310 000000431D10 0 SOFTWARE\Microsoft\Windows\CurrentVersion\Run 00000003036F 000000431D6F 0 SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce 0000000303D8 000000431DD8 0 SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce 000000030468 000000431E68 0 SOFTWARE\Microsoft\Windows\CurrentVersion\Run 0000000304C4 000000431EC4 0 NCRPRS 0000000304D4 000000431ED4 0 DBackup 0000000304F0 000000431EF0 0 SOFTWARE\Microsoft\Windows\CurrentVersion\Run 00000003054C 000000431F4C 0 NCRPRS 00000003055C 000000431F5C 0 DBackup 000000030570 000000431F70 0 /c ping 127.0.0.1 -n 20 && del 0000000305B0 000000431FB0 0 >> NUL 0000000305C0 000000431FC0 0 ComSpec 0000000305D7 000000431FD7 0 cSeShutdownPrivilege 00000003071C 00000043211C 0 alnum 000000030728 000000432128 0 alpha 000000030734 000000432134 0 blank 000000030740 000000432140 0 cntrl 000000030750 000000432150 0 digit 00000003075C 00000043215C 0 graph 000000030768 000000432168 0 lower 000000030774 000000432174 0 print 000000030780 000000432180 0 punct 00000003078C 00000043218C 0 space 00000003079C 00000043219C 0 upper 0000000307AC 0000004321AC 0 xdigit 0000000366F4 0000004386F4 0 DBackup 000000036709 000000438709 0 DBackup 0000000463C2 0000004483C2 0 VS_VERSION_INFO 00000004641E 00000044841E 0 StringFileInfo 000000046442 000000448442 0 040904b0 00000004645A 00000044845A 0 CompanyName 000000046474 000000448474 0 Sysinternals 000000046496 000000448496 0 FileDescription 0000000464B8 0000004484B8 0 sdelete 0000000464CE 0000004484CE 0 FileVersion 0000000464FA 0000004484FA 0 InternalName 000000046514 000000448514 0 sdelete 00000004652A 00000044852A 0 LegalCopyright 00000004655E 00000044855E 0 1999-2012 Mark Russinovich 00000004659E 00000044859E 0 OriginalFilename 0000000465C0 0000004485C0 0 sdelete.exe 0000000465DE 0000004485DE 0 ProductName 0000000465F8 0000004485F8 0 Sysinternals Sdelete 00000004662A 00000044862A 0 ProductVersion 00000004665A 00000044865A 0 VarFileInfo 00000004667A 00000044867A 0 Translation 00000000004D 00000040004D 0 !This program cannot be run in DOS mode. 0000000000D7 0000004000D7 0 oRichC 0000000001F0 0000004001F0 0 .text 000000000218 000000400218 0 .rdata 00000000023F 00000040023F 0 @.data 000000000268 000000400268 0 .reloc 000000000535 000000401135 0 ~,9~$t File pos Mem pos ID Text ======== ======= == ==== 0000000006DB 0000004012DB 0 tC97u?j 000000000786 000000401386 0 FYY;u 0000000007C9 0000004013C9 0 FYY;u 000000000B00 000000401700 0 D$XSV 000000000B47 000000401747 0 D$ Pj 000000000F61 000000401B61 0 SSSh&%@ 00000000144B 00000040204B 0 WWCSW 0000000014A7 0000004020A7 0 WWWhL!@ 0000000017B9 0000004023B9 0 SSSSS 000000001C47 000000402847 0 jd_;5 0000000024A3 0000004030A3 0 Nt Nu 000000002721 000000403321 0 QQVWj 000000003165 000000403D65 0 D$0SVW 0000000032BF 000000403EBF 0 9D$ u 0000000032CE 000000403ECE 0 |$8 s5Rj 000000003430 000000404030 0 D$0SVW 0000000034DD 0000004040DD 0 L$ Pj 00000000354E 00000040414E 0 CD$(j 000000003596 000000404196 0 9D$$u7 0000000035AA 0000004041AA 0 CL$(+ 0000000035E1 0000004041E1 0 Ct$(+ 000000003BDB 0000004047DB 0 G@9_8u 000000003E88 000000404A88 0 D$(SVW 000000003F2C 000000404B2C 0 t Huk 000000003F9C 000000404B9C 0 HHu @ 000000005463 000000406063 0 t.;:u 0000000054DB 0000004060DB 0 VW=\t 000000005669 000000406269 0 t,;8u 000000005875 000000406475 0 t,;:u 000000005A21 000000406621 0 D$HSVW 000000005A86 000000406686 0 3J(3B,3 000000005AFB 0000004066FB 0 1F(1V,1FP1VTC 000000005E12 000000406A12 0 \$HVW 0000000070B8 000000407CB8 0 CM QPQ 0000000075AB 0000004081AB 0 CM QPQ 0000000075F1 0000004081F1 0 RRRRRRQP 000000007966 000000408566 0 PPPPPPVSW 000000008245 000000408E45 0 t.;:u 000000008327 000000408F27 0 tpNtIN 0000000086B8 0000004092B8 0 OhP C 0000000086C3 0000004092C3 0 YPhP C 0000000086DF 0000004092DF 0 (hT C 0000000086EA 0000004092EA 0 YPhT C 0000000089FF 0000004095FF 0 SSSSSS 000000008A86 000000409686 0 Phx C 000000009070 000000409C70 0 s>9>w:+>j 00000000A5E4 00000040B1E4 0 s6+1S 00000000A79C 00000040B39C 0 2tQHtNH 00000000AA4D 00000040B64D 0 ut9FTtoV 00000000AA7E 00000040B67E 0 9Vh~o 00000000AAE5 00000040B6E5 0 F$;Vh| 00000000ACAD 00000040B8AD 0 t.;:u 00000000ADFE 00000040B9FE 0 \t0HHt 00000000AE0A 00000040BA0A 0 Ht Hu: 00000000B73F 00000040C33F 0 s6+1S 00000000BF2B 00000040CB2B 0 Php$C 00000000C07C 00000040CC7C 0 D$ OW 00000000C386 00000040CF86 0 QQSVW 00000000C3BB 00000040CFBB 0 GF;:r 00000000CD8E 00000040D98E 0 u ;APu File pos Mem pos ID Text ======== ======= == ==== 00000000CDA2 00000040D9A2 0 Php$C 00000000CE16 00000040DA16 0 9Y t5 00000000CF1D 00000040DB1D 0 9wh~TV 00000000CF70 00000040DB70 0 F;wh| 00000000CF90 00000040DB90 0 +WL+OL3 00000000D2E8 00000040DEE8 0 CP tR 00000000D2EE 00000040DEEE 0 {L?uL 00000000D3F2 00000040DFF2 0 ~L}uA 00000000D958 00000040E558 0 9GD|0 00000000D9DA 00000040E5DA 0 ~Hau 00000000DE77 00000040EA77 0 FH<_u\ 00000000DE83 00000040EA83 0 FH<.tP<[tL<\tH<*tD<|t@< 00000000DE9B 00000040EA9B 0 t<<$t8 00000000DEAB 00000040EAAB 0 FH<(t(<)t$<+t <?t 00000000DECF 00000040EACF 0 FH<"t 00000000DF01 00000040EB01 0 ?<fu 00000000DF0E 00000040EB0E 0 2<nu 00000000DF1B 00000040EB1B 0 %<ru 00000000EB01 00000040F701 0 SVjdX 00000001153A 00000041213A 0 uPVWhM 00000001298A 00000041358A 0 QQSVWd 000000012B45 000000413745 0 j hx9C 000000012B81 000000413781 0 SSSSS 000000012C07 000000413807 0 PWSWW 000000012C26 000000413826 0 WWWWW 000000012C7F 00000041387F 0 PPPPP 000000012F15 000000413B15 0 Ph<xC 00000001324A 000000413E4A 0 PPPPP 0000000133E9 000000413FE9 0 PRAQh 000000013809 000000414409 0 PP9E u 000000013A61 000000414661 0 j0h :C 00000001462B 00000041522B 0 ft!9q 000000016136 000000416D36 0 t5QVW 000000016376 000000416F76 0 PPPPPPPP 000000016C48 000000417848 0 PPPPP 000000016DB4 0000004179B4 0 jA[jZZ+ 000000017267 000000417E67 0 PPPPP 00000001748F 00000041808F 0 3=<xC 0000000175A8 0000004181A8 0 t6h<xC 000000017615 000000418215 0 jdh8;C 00000001762E 00000041822E 0 j@j _W 000000017649 000000418249 0 Ph<xC 0000000176EE 0000004182EE 0 } j@W 000000017ACD 0000004186CD 0 Genuu_ 000000017AD6 0000004186D6 0 ineIuV 000000017ADF 0000004186DF 0 nteluM3 000000019107 000000419D07 0 ~pjCXf 000000019383 000000419F83 0 <v5h: 000000019469 00000041A069 0 SSSSS 000000019640 00000041A240 0 VVVVV 00000001AEF2 00000041BAF2 0 < t8< t4 00000001AFCC 00000041BBCC 0 t@VSP 00000001B027 00000041BC27 0 PPPPP 00000001B144 00000041BD44 0 SPPP+ 00000001B14D 00000041BD4D 0 FVWPP 00000001B173 00000041BD73 0 SVWPP 00000001B307 00000041BF07 0 PPPPP 00000001B375 00000041BF75 0 VVVVV 00000001B3AD 00000041BFAD 0 j.Yf; 00000001B416 00000041C016 0 j.Yf; File pos Mem pos ID Text ======== ======= == ==== 00000001B41C 00000041C01C 0 tyPVj@W 00000001B431 00000041C031 0 _tcPVj@ 00000001B452 00000041C052 0 uCPVj 00000001B469 00000041C069 0 u#j,Xf; 00000001B490 00000041C090 0 PPPPP 00000001B49F 00000041C09F 0 SSSSS 00000001B56E 00000041C16E 0 >Cu/f9F 00000001B5E7 00000041C1E7 0 3=<xC 00000001B74B 00000041C34B 0 SSSSS 00000001B7A2 00000041C3A2 0 @PSjU 00000001B7C0 00000041C3C0 0 PPPPP 00000001B7FF 00000041C3FF 0 SSSSS 00000001BAF0 00000041C6F0 0 QQQQQ 00000001BBAC 00000041C7AC 0 j;Yf9 00000001BC26 00000041C826 0 j;Yf9 00000001BD77 00000041C977 0 PPPPP 00000001C10F 00000041CD0F 0 VVVVV 00000001C1A7 00000041CDA7 0 WVSj 00000001C449 00000041D049 0 RVSQSWV 00000001C484 00000041D084 0 RVSQj 00000001C58D 00000041D18D 0 QVVVj 00000001C7DE 00000041D3DE 0 <at-<rt"<wt 00000001C84E 00000041D44E 0 tRHtC 00000001C8D2 00000041D4D2 0 t;Ht+ 00000001CA4F 00000041D64F 0 URPQQh 00000001D1B1 00000041DDB1 0 9E WW 00000001DC07 00000041E807 0 ,SVWj0X 00000001DD3B 00000041E93B 0 u'j0X 00000001DE65 00000041EA65 0 Wj0XPV 00000001DF04 00000041EB04 0 PjdSQ 00000001E06B 00000041EC6B 0 -jd[; 00000001E0BE 00000041ECBE 0 WWWWW 00000001E603 00000041F203 0 VVVVV 00000001E63F 00000041F23F 0 SVWjA_jZ+ 00000001E6E7 00000041F2E7 0 uBjAYjZ+ 00000001F003 00000041FC03 0 HHtVHHt 00000001F4FA 0000004200FA 0 >0t-N 00000001F922 000000420522 0 QVWSj 00000001FA0B 00000042060B 0 v N+D$ 000000020376 000000420F76 0 ~';_t|%3 00000002038A 000000420F8A 0 wtVj 00000002039F 000000420F9F 0 ;_tr. 0000000206B0 0000004212B0 0 tO95d 000000020899 000000421499 0 t VV9u 000000020B31 000000421731 0 PjPW 000000020B48 000000421748 0 $PjQW 000000020B90 000000421790 0 *PjTW 000000020BA7 0000004217A7 0 +PjUW 000000020BBE 0000004217BE 0 ,PjVW 000000020BD8 0000004217D8 0 -PjWW 000000020BEF 0000004217EF 0 .PjRW 000000020C06 000000421806 0 /PjSW 000000020C7C 00000042187C 0 HPjPW 000000020C96 000000421896 0 LPjQW 000000020F6D 000000421B6D 0 <0|o<9 0000000214E3 0000004220E3 0 G Pj*S 0000000214F7 0000004220F7 0 G$Pj+S 00000002150B 00000042210B 0 G(Pj,S 00000002151F 00000042211F 0 G,Pj-S 000000021536 000000422136 0 G0Pj.S File pos Mem pos ID Text ======== ======= == ==== 00000002154A 00000042214A 0 G4Pj/S 000000021572 000000422172 0 G8PjDS 000000021589 000000422189 0 G<PjES 00000002159D 00000042219D 0 G@PjFS 0000000215B1 0000004221B1 0 GDPjGS 0000000215C5 0000004221C5 0 GHPjHS 0000000215DC 0000004221DC 0 GLPjIS 0000000215F0 0000004221F0 0 GPPjJS 000000021604 000000422204 0 GTPjKS 000000021618 000000422218 0 GXPjLS 00000002162F 00000042222F 0 G\PjMS 000000021657 000000422257 0 GdPjOS 00000002166B 00000042226B 0 GhPj8S 000000021682 000000422282 0 GlPj9S 000000021696 000000422296 0 GpPj:S 0000000216AA 0000004222AA 0 GtPj;S 0000000216BE 0000004222BE 0 GxPj<S 0000000216D5 0000004222D5 0 G|Pj=S 00000002171C 00000042231C 0 Pj@Sj 000000021A62 000000422662 0 PjOSj 000000021D10 000000422910 0 tHHt*Ht# 000000022230 000000422E30 0 uJSSR 0000000223E8 000000422FE8 0 SSSSS 0000000224F3 0000004230F3 0 SVWUj 000000022594 000000423194 0 ;t$,v- 000000022619 000000423219 0 UQPXY]Y[ 000000022756 000000423356 0 PPPPP 000000022A64 000000423664 0 WWWWW 000000022B15 000000423715 0 PPPPP 000000022CD4 0000004238D4 0 Yu2Vj@h 000000022DCA 0000004239CA 0 tMj_S 000000022E22 000000423A22 0 PPPPP 000000022EFB 000000423AFB 0 @h-:B 000000023887 000000424487 0 r)f;q 000000023901 000000424501 0 r2f;A 0000000239AA 0000004245AA 0 SVjA[jZ 000000023A6F 00000042466F 0 jAZjZ 000000023D31 000000424931 0 SSSSV 000000023DBD 0000004249BD 0 SSSSV 000000023F66 000000424B66 0 PPPPP 000000024026 000000424C26 0 v N+D$ 000000024166 000000424D66 0 Ht+Ht$Ht 000000025655 000000426255 0 +t"HHt 0000000256AB 0000004262AB 0 9] t" 000000026507 000000427107 0 SSSSS 0000000269E9 0000004275E9 0 jxYf; 0000000269F1 0000004275F1 0 jXYf; 000000026A1B 00000042761B 0 jxYf; 000000026A23 000000427623 0 jXYf; 000000026A4C 00000042764C 0 uHjAXf; 000000026D9A 00000042799A 0 j0Yf; 000000028E68 00000042A868 0 permission denied 000000028E7C 00000042A87C 0 file exists 000000028E88 00000042A888 0 no such device 000000028E98 00000042A898 0 filename too long 000000028EAC 00000042A8AC 0 device or resource busy 000000028EC4 00000042A8C4 0 io error 000000028ED0 00000042A8D0 0 directory not empty 000000028EE4 00000042A8E4 0 invalid argument 000000028EF8 00000042A8F8 0 no space on device File pos Mem pos ID Text ======== ======= == ==== 000000028F0C 00000042A90C 0 no such file or directory 000000028F28 00000042A928 0 function not supported 000000028F40 00000042A940 0 no lock available 000000028F54 00000042A954 0 not enough memory 000000028F68 00000042A968 0 resource unavailable try again 000000028F88 00000042A988 0 cross device link 000000028F9C 00000042A99C 0 operation canceled 000000028FB0 00000042A9B0 0 too many files open 000000028FC4 00000042A9C4 0 permission_denied 000000028FD8 00000042A9D8 0 address_in_use 000000028FE8 00000042A9E8 0 address_not_available 000000029000 00000042AA00 0 address_family_not_supported 000000029020 00000042AA20 0 connection_already_in_progress 000000029040 00000042AA40 0 bad_file_descriptor 000000029054 00000042AA54 0 connection_aborted 000000029068 00000042AA68 0 connection_refused 00000002907C 00000042AA7C 0 connection_reset 000000029090 00000042AA90 0 destination_address_required 0000000290B0 00000042AAB0 0 bad_address 0000000290BC 00000042AABC 0 host_unreachable 0000000290D0 00000042AAD0 0 operation_in_progress 0000000290E8 00000042AAE8 0 interrupted 0000000290F4 00000042AAF4 0 invalid_argument 000000029108 00000042AB08 0 already_connected 00000002911C 00000042AB1C 0 too_many_files_open 000000029130 00000042AB30 0 message_size 000000029140 00000042AB40 0 filename_too_long 000000029154 00000042AB54 0 network_down 000000029164 00000042AB64 0 network_reset 000000029174 00000042AB74 0 network_unreachable 000000029188 00000042AB88 0 no_buffer_space 000000029198 00000042AB98 0 no_protocol_option 0000000291AC 00000042ABAC 0 not_connected 0000000291BC 00000042ABBC 0 not_a_socket 0000000291CC 00000042ABCC 0 operation_not_supported 0000000291E4 00000042ABE4 0 protocol_not_supported 0000000291FC 00000042ABFC 0 wrong_protocol_type 000000029210 00000042AC10 0 timed_out 00000002921C 00000042AC1C 0 operation_would_block 000000029234 00000042AC34 0 address family not supported 000000029254 00000042AC54 0 address in use 000000029264 00000042AC64 0 address not available 00000002927C 00000042AC7C 0 already connected 000000029290 00000042AC90 0 argument list too long 0000000292A8 00000042ACA8 0 argument out of domain 0000000292C0 00000042ACC0 0 bad address 0000000292CC 00000042ACCC 0 bad file descriptor 0000000292E0 00000042ACE0 0 bad message 0000000292EC 00000042ACEC 0 broken pipe 0000000292F8 00000042ACF8 0 connection aborted 00000002930C 00000042AD0C 0 connection already in progress 00000002932C 00000042AD2C 0 connection refused 000000029340 00000042AD40 0 connection reset 000000029354 00000042AD54 0 destination address required 000000029374 00000042AD74 0 executable format error 00000002938C 00000042AD8C 0 file too large 00000002939C 00000042AD9C 0 host unreachable 0000000293B0 00000042ADB0 0 identifier removed 0000000293C4 00000042ADC4 0 illegal byte sequence 0000000293DC 00000042ADDC 0 inappropriate io control operation File pos Mem pos ID Text ======== ======= == ==== 000000029400 00000042AE00 0 invalid seek 000000029410 00000042AE10 0 is a directory 000000029420 00000042AE20 0 message size 000000029430 00000042AE30 0 network down 000000029440 00000042AE40 0 network reset 000000029450 00000042AE50 0 network unreachable 000000029464 00000042AE64 0 no buffer space 000000029474 00000042AE74 0 no child process 000000029488 00000042AE88 0 no link 000000029490 00000042AE90 0 no message available 0000000294A8 00000042AEA8 0 no message 0000000294B4 00000042AEB4 0 no protocol option 0000000294C8 00000042AEC8 0 no stream resources 0000000294DC 00000042AEDC 0 no such device or address 0000000294F8 00000042AEF8 0 no such process 000000029508 00000042AF08 0 not a directory 000000029518 00000042AF18 0 not a socket 000000029528 00000042AF28 0 not a stream 000000029538 00000042AF38 0 not connected 000000029548 00000042AF48 0 not supported 000000029558 00000042AF58 0 operation in progress 000000029570 00000042AF70 0 operation not permitted 000000029588 00000042AF88 0 operation not supported 0000000295A0 00000042AFA0 0 operation would block 0000000295B8 00000042AFB8 0 owner dead 0000000295C4 00000042AFC4 0 protocol error 0000000295D4 00000042AFD4 0 protocol not supported 0000000295EC 00000042AFEC 0 read only file system 000000029604 00000042B004 0 resource deadlock would occur 000000029624 00000042B024 0 result out of range 000000029638 00000042B038 0 state not recoverable 000000029650 00000042B050 0 stream timeout 000000029660 00000042B060 0 text file busy 000000029670 00000042B070 0 timed out 00000002967C 00000042B07C 0 too many files open in system 00000002969C 00000042B09C 0 too many links 0000000296AC 00000042B0AC 0 too many symbolic link levels 0000000296CC 00000042B0CC 0 value too large 0000000296DC 00000042B0DC 0 wrong protocol type 0000000297A0 00000042B1A0 0 bad allocation 0000000297F0 00000042B1F0 0 regex_error(error_collate): The expression contained an invalid collating element name. 000000029848 00000042B248 0 regex_error(error_ctype): The expression contained an invalid character class name. 0000000298A0 00000042B2A0 0 regex_error(error_escape): The expression contained an invalid escaped character, or a trailing escape. 000000029908 00000042B308 0 regex_error(error_backref): The expression contained an invalid back reference. 000000029958 00000042B358 0 regex_error(error_brack): The expression contained mismatched [ and ]. 0000000299A0 00000042B3A0 0 regex_error(error_paren): The expression contained mismatched ( and ). 0000000299E8 00000042B3E8 0 regex_error(error_brace): The expression contained mismatched { and }. 000000029A30 00000042B430 0 regex_error(error_badbrace): The expression contained an invalid range in a { expression }. 000000029A90 00000042B490 0 regex_error(error_range): The expression contained an invalid character range, such as [b-a] in most encodings. 000000029B00 00000042B500 0 regex_error(error_space): There was insufficient memory to convert the expression into a finite state machine. 000000029B70 00000042B570 0 regex_error(error_badrepeat): One of *?+{ was not preceded by a valid regular expression. 000000029BD0 00000042B5D0 0 regex_error(error_complexity): The complexity of an attempted match against a regular expression exceeded a pre-set level. 000000029C50 00000042B650 0 regex_error(error_stack): There was insufficient memory to determine whether the regular expression could match the specified character sequence. 000000029CE4 00000042B6E4 0 regex_error(error_parse) 000000029D00 00000042B700 0 regex_error(error_syntax) 000000029D1C 00000042B71C 0 regex_error 000000029E4C 00000042B84C 0 0123456789abcdefghijklmnopqrstuvwxyz 000000029E80 00000042B880 0 000000029E9C 00000042B89C 0 0123456789abcdefghijklmnopqrstuvwxyz 000000029EEC 00000042B8EC 0 0123456789abcdefABCDEF File pos Mem pos ID Text ======== ======= == ==== 000000029FBC 00000042B9BC 0 Unknown exception 000000029FDC 00000042B9DC 0 RoInitialize 00000002A004 00000042BA04 0 RoUninitialize 00000002A034 00000042BA34 0 CorExitProcess 00000002A610 00000042C010 0 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\] 00000002A651 00000042C051 0 abcdefghijklmnopqrstuvwxyz{|}~ 00000002A790 00000042C190 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\] 00000002A7D1 00000042C1D1 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~ 00000002A880 00000042C280 0 bad exception 00000002A8B0 00000042C2B0 0 FlsAlloc 00000002A8BC 00000042C2BC 0 FlsFree 00000002A8C4 00000042C2C4 0 FlsGetValue 00000002A8D0 00000042C2D0 0 FlsSetValue 00000002A8DC 00000042C2DC 0 InitializeCriticalSectionEx 00000002A8F8 00000042C2F8 0 CreateSemaphoreExW 00000002A90C 00000042C30C 0 SetThreadStackGuarantee 00000002A924 00000042C324 0 CreateThreadpoolTimer 00000002A93C 00000042C33C 0 SetThreadpoolTimer 00000002A950 00000042C350 0 WaitForThreadpoolTimerCallbacks 00000002A970 00000042C370 0 CloseThreadpoolTimer 00000002A988 00000042C388 0 CreateThreadpoolWait 00000002A9A0 00000042C3A0 0 SetThreadpoolWait 00000002A9B4 00000042C3B4 0 CloseThreadpoolWait 00000002A9C8 00000042C3C8 0 FlushProcessWriteBuffers 00000002A9E4 00000042C3E4 0 FreeLibraryWhenCallbackReturns 00000002AA04 00000042C404 0 GetCurrentProcessorNumber 00000002AA20 00000042C420 0 GetLogicalProcessorInformation 00000002AA40 00000042C440 0 CreateSymbolicLinkW 00000002AA54 00000042C454 0 SetDefaultDllDirectories 00000002AA70 00000042C470 0 EnumSystemLocalesEx 00000002AA84 00000042C484 0 CompareStringEx 00000002AA94 00000042C494 0 GetDateFormatEx 00000002AAA4 00000042C4A4 0 GetLocaleInfoEx 00000002AAB4 00000042C4B4 0 GetTimeFormatEx 00000002AAC4 00000042C4C4 0 GetUserDefaultLocaleName 00000002AAE0 00000042C4E0 0 IsValidLocaleName 00000002AAF4 00000042C4F4 0 LCMapStringEx 00000002AB04 00000042C504 0 GetCurrentPackageId 00000002CBD0 00000042E5D0 0 (null) 00000002CC09 00000042E609 0 ( 8PX 00000002CC11 00000042E611 0 700WP 00000002CC29 00000042E629 0 xpxxxx 00000002D754 00000042F154 0 SunMonTueWedThuFriSat 00000002D76C 00000042F16C 0 JanFebMarAprMayJunJulAugSepOctNovDec 00000002D7B0 00000042F1B0 0 Sunday 00000002D7B8 00000042F1B8 0 Monday 00000002D7C0 00000042F1C0 0 Tuesday 00000002D7C8 00000042F1C8 0 Wednesday 00000002D7D4 00000042F1D4 0 Thursday 00000002D7E0 00000042F1E0 0 Friday 00000002D7E8 00000042F1E8 0 Saturday 00000002D824 00000042F224 0 January 00000002D82C 00000042F22C 0 February 00000002D838 00000042F238 0 March 00000002D840 00000042F240 0 April 00000002D858 00000042F258 0 August 00000002D860 00000042F260 0 September 00000002D86C 00000042F26C 0 October 00000002D874 00000042F274 0 November 00000002D880 00000042F280 0 December File pos Mem pos ID Text ======== ======= == ==== 00000002D894 00000042F294 0 MM/dd/yy 00000002D8A0 00000042F2A0 0 dddd, MMMM dd, yyyy 00000002D8B4 00000042F2B4 0 HH:mm:ss 00000002DBCF 00000042F5CF 0 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\] 00000002DC10 00000042F610 0 abcdefghijklmnopqrstuvwxyz{|}~ 00000002DC58 00000042F658 0 UTF-8 00000002DC60 00000042F660 0 UTF-16LE 00000002DC6C 00000042F66C 0 UNICODE 00000002DCB8 00000042F6B8 0 log10 00000002DCF0 00000042F6F0 0 atan2 00000002DD14 00000042F714 0 floor 00000002DD2C 00000042F72C 0 ldexp 00000002DD34 00000042F734 0 _cabs 00000002DD3C 00000042F73C 0 _hypot 00000002DD4C 00000042F74C 0 frexp 00000002DD60 00000042F760 0 _logb 00000002DD68 00000042F768 0 _nextafter 00000002DD74 00000042F774 0 e+000 00000002DE1D 00000042F81D 0 ('8PW 00000002DE26 00000042F826 0 700PP 00000002DE41 00000042F841 0 xppwpp 00000002DE6C 00000042F86C 0 MessageBoxW 00000002DE78 00000042F878 0 GetActiveWindow 00000002DE88 00000042F888 0 GetLastActivePopup 00000002DE9C 00000042F89C 0 GetUserObjectInformationW 00000002DEB8 00000042F8B8 0 GetProcessWindowStation 00000002E058 00000042FA58 0 __based( 00000002E064 00000042FA64 0 __cdecl 00000002E06C 00000042FA6C 0 __pascal 00000002E078 00000042FA78 0 __stdcall 00000002E084 00000042FA84 0 __thiscall 00000002E090 00000042FA90 0 __fastcall 00000002E09C 00000042FA9C 0 __clrcall 00000002E0A8 00000042FAA8 0 __eabi 00000002E0B0 00000042FAB0 0 __ptr64 00000002E0B8 00000042FAB8 0 __restrict 00000002E0C4 00000042FAC4 0 __unaligned 00000002E0D0 00000042FAD0 0 restrict( 00000002E0E4 00000042FAE4 0 delete 00000002E108 00000042FB08 0 operator 00000002E189 00000042FB89 0 vftable' 00000002E195 00000042FB95 0 vbtable' 00000002E1A1 00000042FBA1 0 vcall' 00000002E1A9 00000042FBA9 0 typeof' 00000002E1B5 00000042FBB5 0 local static guard' 00000002E1CD 00000042FBCD 0 string' 00000002E1D9 00000042FBD9 0 vbase destructor' 00000002E1ED 00000042FBED 0 vector deleting destructor' 00000002E20D 00000042FC0D 0 default constructor closure' 00000002E22D 00000042FC2D 0 scalar deleting destructor' 00000002E24D 00000042FC4D 0 vector constructor iterator' 00000002E26D 00000042FC6D 0 vector destructor iterator' 00000002E28D 00000042FC8D 0 vector vbase constructor iterator' 00000002E2B1 00000042FCB1 0 virtual displacement map' 00000002E2CD 00000042FCCD 0 eh vector constructor iterator' 00000002E2F1 00000042FCF1 0 eh vector destructor iterator' 00000002E311 00000042FD11 0 eh vector vbase constructor iterator' 00000002E339 00000042FD39 0 copy constructor closure' 00000002E355 00000042FD55 0 udt returning' 00000002E371 00000042FD71 0 local vftable' File pos Mem pos ID Text ======== ======= == ==== 00000002E381 00000042FD81 0 local vftable constructor closure' 00000002E3A4 00000042FDA4 0 new[] 00000002E3AC 00000042FDAC 0 delete[] 00000002E3B9 00000042FDB9 0 omni callsig' 00000002E3C9 00000042FDC9 0 placement delete closure' 00000002E3E5 00000042FDE5 0 placement delete[] closure' 00000002E405 00000042FE05 0 managed vector constructor iterator' 00000002E42D 00000042FE2D 0 managed vector destructor iterator' 00000002E455 00000042FE55 0 eh vector copy constructor iterator' 00000002E47D 00000042FE7D 0 eh vector vbase copy constructor iterator' 00000002E4A9 00000042FEA9 0 dynamic initializer for ' 00000002E4C5 00000042FEC5 0 dynamic atexit destructor for ' 00000002E4E9 00000042FEE9 0 vector copy constructor iterator' 00000002E50D 00000042FF0D 0 vector vbase copy constructor iterator' 00000002E539 00000042FF39 0 managed vector copy constructor iterator' 00000002E565 00000042FF65 0 local static thread guard' 00000002E580 00000042FF80 0 Type Descriptor' 00000002E594 00000042FF94 0 Base Class Descriptor at ( 00000002E5B0 00000042FFB0 0 Base Class Array' 00000002E5C4 00000042FFC4 0 Class Hierarchy Descriptor' 00000002E5E4 00000042FFE4 0 Complete Object Locator' 00000002E600 000000430000 0 CreateFile2 00000002F3D0 000000430DD0 0 1#SNAN 00000002F3D8 000000430DD8 0 1#IND 00000002F3E0 000000430DE0 0 1#INF 00000002F3E8 000000430DE8 0 1#QNAN 00000002F3F0 000000430DF0 0 bad locale name 00000002F404 000000430E04 0 generic 00000002F40C 000000430E0C 0 unknown error 00000002F41C 000000430E1C 0 iostream 00000002F428 000000430E28 0 iostream stream error 00000002F440 000000430E40 0 system 00000002F448 000000430E48 0 ios_base::badbit set 00000002F460 000000430E60 0 ios_base::failbit set 00000002F478 000000430E78 0 ios_base::eofbit set 00000002F490 000000430E90 0 alnum 00000002F498 000000430E98 0 alpha 00000002F4A0 000000430EA0 0 blank 00000002F4A8 000000430EA8 0 cntrl 00000002F4B4 000000430EB4 0 digit 00000002F4BC 000000430EBC 0 graph 00000002F4C4 000000430EC4 0 lower 00000002F4CC 000000430ECC 0 print 00000002F4D4 000000430ED4 0 punct 00000002F4DC 000000430EDC 0 space 00000002F4E8 000000430EE8 0 upper 00000002F4F4 000000430EF4 0 xdigit 00000002F59C 000000430F9C 0 Developed by kernyv@jabbim.com 00000002F5D4 000000430FD4 0 /autorun 00000002F5E0 000000430FE0 0 be59a724feae790b3f315edf71a8450888c021f113e3c2b471e174130c201852 00000002F624 000000431024 0 Developed by kernyv@jabbim.com 00000002F644 000000431044 0 service 00000002F64C 00000043104C 0 /uninstall 00000002F658 000000431058 0 f26a57da928d6f3e3480dfc7d03761161191bdb170e10ca15c7ac5de6912945c 00000002F6BC 0000004310BC 0 /install 00000002F6C8 0000004310C8 0 692cdaf6e42ab3a4f307e5d047249f7b30ceddd6bc88f22ca032412419bd62b7 00000002F70C 00000043110C 0 install 00000002F714 000000431114 0 /cleanup 00000002F720 000000431120 0 0679c7c0c9b0d6919c12cbc087e942d7bf48d3a78cd3ec80321fbfd1b33a1904 00000002F764 000000431164 0 remove File pos Mem pos ID Text ======== ======= == ==== 00000002F76C 00000043116C 0 start 00000002F77C 00000043117C 0 /stop 00000002F784 000000431184 0 CDM: %s 00000002F790 000000431190 0 CDM: Unknown 00000002F7A4 0000004311A4 0 IDC: %s 00000002F7B0 0000004311B0 0 IDC: Unknown 00000002F7C4 0000004311C4 0 PIN: %s 00000002F7D0 0000004311D0 0 PIN: Unknown 00000002F7E4 0000004311E4 0 hostname 00000002F7F0 0000004311F0 0 \temp\clnup.dat 00000002F820 000000431220 0 \temp\clnup.dat 00000002F830 000000431230 0 /autorun 00000002F83C 00000043123C 0 taskkill /IM dbackup.exe /T /F 00000002F85C 00000043125C 0 \System32\dbackup.exe 00000002F874 000000431274 0 /service 00000002F920 000000431320 0 BUTTON 00000002F928 000000431328 0 hostname 00000002F934 000000431334 0 HOSTNAME: Unknown 00000002F94C 00000043134C 0 CDM: Unknown 00000002F960 000000431360 0 PIN: Unknown 00000002F974 000000431374 0 IDC: Unknown 00000002F994 000000431394 0 static 00000002F99C 00000043139C 0 HOSTNAME: Unknown 00000002F9B4 0000004313B4 0 Dispensing %d items from cash unit #%d 00000002F9E4 0000004313E4 0 CleanUp 00000002F9F4 0000004313F4 0 /cleanup 00000002FA04 000000431404 0 Uninstall 00000002FA18 000000431418 0 Uninstall Service 00000002FA34 000000431434 0 Network Disable 00000002FA4C 00000043144C 0 Network Enable 00000002FA64 000000431464 0 DISPENSE 00000002FA70 000000431470 0 SETTINGS 00000002FA84 000000431484 0 REBOOT 00000002FA8C 00000043148C 0 %s:%d (%d) = %d 00000002FA9D 00000043149D 0 INIT:%d = %d, %d%% 00000002FAC0 0000004314C0 0 1.Ignore cassete balance 00000002FADC 0000004314DC 0 2.CLEAN LOGS 00000002FAEC 0000004314EC 0 3.HIDE 00000002FAF4 0000004314F4 0 4.BACK 00000002FAFC 0000004314FC 0 5.UNINSTALL 00000002FB08 000000431508 0 6.UNINSTALL SERVICE 00000002FB1C 00000043151C 0 7.NETWORK: ENABLE 00000002FB30 000000431530 0 0.NETWORK: DISABLE 00000002FB44 000000431544 0 [%Y.%m.%d %H:%M:%S] 00000002FC1C 00000043161C 0 WFS_PIN_FK_0 00000002FC2C 00000043162C 0 WFS_PIN_FK_1 00000002FC3C 00000043163C 0 WFS_PIN_FK_2 00000002FC4C 00000043164C 0 WFS_PIN_FK_3 00000002FC5C 00000043165C 0 WFS_PIN_FK_4 00000002FC6C 00000043166C 0 WFS_PIN_FK_5 00000002FC7C 00000043167C 0 WFS_PIN_FK_6 00000002FC8C 00000043168C 0 WFS_PIN_FK_7 00000002FC9C 00000043169C 0 WFS_PIN_FK_8 00000002FCAC 0000004316AC 0 WFS_PIN_FK_9 00000002FCBC 0000004316BC 0 WFS_PIN_FK_ENTER 00000002FCD0 0000004316D0 0 WFS_PIN_FK_CANCEL 00000002FCE4 0000004316E4 0 WFS_PIN_FK_CLEAR 00000002FCF8 0000004316F8 0 WFS_PIN_FK_BACKSPACE 00000002FD10 000000431710 0 WFS_PIN_FK_HELP 00000002FD20 000000431720 0 WFS_PIN_FK_DECPOINT File pos Mem pos ID Text ======== ======= == ==== 00000002FD34 000000431734 0 WFS_PIN_FK_00 00000002FD44 000000431744 0 WFS_PIN_FK_000 00000002FD54 000000431754 0 WFS_PIN_FK_RES1 00000002FD64 000000431764 0 WFS_PIN_FK_RES2 00000002FD74 000000431774 0 WFS_PIN_FK_RES3 00000002FD84 000000431784 0 WFS_PIN_FK_RES4 00000002FD94 000000431794 0 WFS_PIN_FK_RES5 00000002FDA4 0000004317A4 0 WFS_PIN_FK_RES6 00000002FDB4 0000004317B4 0 WFS_PIN_FK_RES7 00000002FDC4 0000004317C4 0 WFS_PIN_FK_RES8 00000002FDD4 0000004317D4 0 WFS_PIN_FK_OEM1 00000002FDE4 0000004317E4 0 WFS_PIN_FK_OEM2 00000002FDF4 0000004317F4 0 WFS_PIN_FK_OEM3 00000002FE04 000000431804 0 WFS_PIN_FK_OEM4 00000002FE14 000000431814 0 WFS_PIN_FK_OEM5 00000002FE24 000000431824 0 WFS_PIN_FK_OEM6 00000002FE34 000000431834 0 WFS_UNKNOWN_KEY 00000002FE44 000000431844 0 \sd.exe 00000002FE4C 00000043184C 0 taskkill /IM aptra* /T /F 00000002FE68 000000431868 0 taskkill /IM ncr* /T /F 00000002FE80 000000431880 0 taskkill /IM java.exe /T /F 00000002FE9C 00000043189C 0 taskkill /IM wrapper.exe /T /F 00000002FEBC 0000004318BC 0 taskkill /IM aiw.exe /T /F 00000002FED8 0000004318D8 0 taskkill /IM *came* /T /F 00000002FEF4 0000004318F4 0 taskkill /IM snmp.exe /T /F 00000002FF10 000000431910 0 taskkill /IM *gbr* /T /F 00000002FF2C 00000043192C 0 taskkill /IM ul*.exe /T /F 00000002FF48 000000431948 0 -accepteula -p 8 -a -q -s d:\* 00000002FF68 000000431968 0 -accepteula -p 8 -a -q -s e:\* 00000002FF88 000000431988 0 -accepteula -p 8 -a -q -s f:\* 00000002FFA8 0000004319A8 0 -accepteula -p 8 -a -q -s g:\* 00000002FFC8 0000004319C8 0 -accepteula -p 8 -a -q -s h:\* 00000002FFE8 0000004319E8 0 -accepteula -p 8 -a -q -s c:\*.log 00000003000C 000000431A0C 0 -accepteula -p 8 -a -q -s c:\*.jrn 000000030030 000000431A30 0 -accepteula -p 8 -a -q -s c:\*.trc 000000030054 000000431A54 0 -accepteula -p 8 -a -q -s c:\*.xml 000000030078 000000431A78 0 -accepteula -p 8 -a -q -s c:\*.zip 00000003009C 000000431A9C 0 -accepteula -p 8 -a -q -s c:\*.bak 0000000300C0 000000431AC0 0 -accepteula -p 8 -a -q -s c:\*.err 0000000300E4 000000431AE4 0 -accepteula -p 8 -a -q -s c:\*.idb 000000030108 000000431B08 0 -accepteula -p 8 -a -q -s c:\*.idx 00000003012C 000000431B2C 0 -accepteula -p 8 -a -q -s c:\*.dat 000000030150 000000431B50 0 -accepteula -p 8 -a -q -s c:\*.gsb 000000030174 000000431B74 0 -accepteula -p 8 -a -q -s c:\*.txc 000000030198 000000431B98 0 -accepteula -p 8 -a -q -s c:\* 0000000301B8 000000431BB8 0 APTRA 0000000301C0 000000431BC0 0 C:\Program Files\NCR Aptra\bin\NCRPRS.exe 0000000301EC 000000431BEC 0 NCRPRS 0000000301F4 000000431BF4 0 Agilis 0000000301FC 000000431BFC 0 C:\Program Files\Diebold\Agilis Startup\DBackup.exe 000000030230 000000431C30 0 DBackup 000000030238 000000431C38 0 FwLoadPm.exe 000000030248 000000431C48 0 C:\Probase\cscw32\bin\FwLoadPm.exe 00000003026C 000000431C6C 0 FwLoadPm 00000003043C 000000431E3C 0 SOFTWARE\Microsoft\Windows\CurrentVersion 0000000304E4 000000431EE4 0 ProductId 0000000305D0 000000431FD0 0 ComSpec 000000030610 000000432010 0 Logical cash unit with ID:%d, contains %d physical cash units 000000030658 000000432058 0 .DEFAULT\XFS\LOGICAL_SERVICES 000000030678 000000432078 0 %s\%s File pos Mem pos ID Text ======== ======= == ==== 000000030680 000000432080 0 class 000000030688 000000432088 0 LOGICAL_SERVICES 00000003069C 00000043209C 0 class 0000000306B0 0000004320B0 0 alnum 0000000306B8 0000004320B8 0 alpha 0000000306C0 0000004320C0 0 blank 0000000306C8 0000004320C8 0 cntrl 0000000306D4 0000004320D4 0 digit 0000000306DC 0000004320DC 0 graph 0000000306E4 0000004320E4 0 lower 0000000306EC 0000004320EC 0 print 0000000306F4 0000004320F4 0 punct 0000000306FC 0000004320FC 0 space 000000030708 000000432108 0 upper 000000030714 000000432114 0 xdigit 0000000307C8 0000004321C8 0 \D*(\d{13,19})= 0000000307DC 0000004321DC 0 .*+?[]|\-{},:=! 0000000307F4 0000004321F4 0 string too long 000000030804 000000432204 0 invalid string position 00000003081C 00000043221C 0 vector<T> too long 000000030830 000000432230 0 bad cast 00000003083C 00000043223C 0 map/set<T> too long 0000000309F0 0000004323F0 0 0123456789abcdef 000000030A04 000000432404 0 invalid map<K, T> key 000000030A54 000000432454 0 vector<bool> too long 000000030A70 000000432470 0 abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789_ 000000030B80 000000432580 0 W:\ATMRipper\Release\ATMRipper.pdb 000000034220 000000435C20 0 KERNEL32.DLL 00000003422D 000000435C2D 0 ADVAPI32.dll 00000003423A 000000435C3A 0 GDI32.dll 000000034244 000000435C44 0 MSXFS.dll 00000003424E 000000435C4E 0 ole32.dll 000000034258 000000435C58 0 SHELL32.dll 000000034264 000000435C64 0 USER32.dll 00000003426F 000000435C6F 0 USERENV.dll 00000003427B 000000435C7B 0 WTSAPI32.dll 000000034288 000000435C88 0 XFS_CONF.dll 000000034298 000000435C98 0 GetTempPathA 0000000342A6 000000435CA6 0 lstrcpyW 0000000342B0 000000435CB0 0 SetEndOfFile 0000000342BE 000000435CBE 0 CreateFileW 0000000342CC 000000435CCC 0 LoadLibraryW 0000000342DA 000000435CDA 0 OutputDebugStringW 0000000342EE 000000435CEE 0 GetShortPathNameW 000000034302 000000435D02 0 ReadConsoleW 000000034310 000000435D10 0 SetFilePointer 000000034320 000000435D20 0 FreeEnvironmentStringsW 00000003433A 000000435D3A 0 GetEnvironmentStringsW 000000034352 000000435D52 0 GetCurrentProcessId 000000034368 000000435D68 0 QueryPerformanceCounter 000000034382 000000435D82 0 SetStdHandle 000000034390 000000435D90 0 lstrcatW 00000003439A 000000435D9A 0 CreateToolhelp32Snapshot 0000000343B4 000000435DB4 0 Process32NextW 0000000343C4 000000435DC4 0 GetModuleFileNameA 0000000343D8 000000435DD8 0 Process32FirstW 0000000343EA 000000435DEA 0 CopyFileA 0000000343F6 000000435DF6 0 GetShortPathNameA 00000003440A 000000435E0A 0 GetEnvironmentVariableA 000000034424 000000435E24 0 GetModuleFileNameW File pos Mem pos ID Text ======== ======= == ==== 000000034438 000000435E38 0 GetWindowsDirectoryA 00000003444E 000000435E4E 0 GetModuleHandleW 000000034460 000000435E60 0 GetCurrentProcess 000000034474 000000435E74 0 CreateProcessW 000000034484 000000435E84 0 GetEnvironmentVariableW 00000003449E 000000435E9E 0 MultiByteToWideChar 0000000344B4 000000435EB4 0 CreateThread 0000000344C2 000000435EC2 0 CloseHandle 0000000344D0 000000435ED0 0 WTSGetActiveConsoleSessionId 0000000344EE 000000435EEE 0 CreateEventW 0000000344FC 000000435EFC 0 GetLastError 00000003450A 000000435F0A 0 Sleep 000000034512 000000435F12 0 SetEvent 00000003451C 000000435F1C 0 WaitForSingleObject 000000034532 000000435F32 0 WriteConsoleW 000000034542 000000435F42 0 GetComputerNameA 000000034554 000000435F54 0 GetOEMCP 00000003455E 000000435F5E 0 GetACP 000000034566 000000435F66 0 IsValidCodePage 000000034578 000000435F78 0 HeapSize 000000034582 000000435F82 0 GetConsoleMode 000000034592 000000435F92 0 GetConsoleCP 0000000345A0 000000435FA0 0 WriteFile 0000000345AC 000000435FAC 0 FlushFileBuffers 0000000345BE 000000435FBE 0 SetFilePointerEx 0000000345D0 000000435FD0 0 ReadFile 0000000345DA 000000435FDA 0 GetProcessHeap 0000000345EA 000000435FEA 0 GetFileType 0000000345F8 000000435FF8 0 GetStdHandle 000000034606 000000436006 0 IsDebuggerPresent 00000003461A 00000043601A 0 EnumSystemLocalesW 00000003462E 00000043602E 0 GetUserDefaultLCID 000000034642 000000436042 0 IsValidLocale 000000034652 000000436052 0 GetLocaleInfoW 000000034662 000000436062 0 LCMapStringW 000000034670 000000436070 0 CompareStringW 000000034680 000000436080 0 GetStartupInfoW 000000034692 000000436092 0 TlsFree 00000003469C 00000043609C 0 InterlockedIncrement 0000000346B2 0000004360B2 0 InterlockedDecrement 0000000346C8 0000004360C8 0 EncodePointer 0000000346D8 0000004360D8 0 DecodePointer 0000000346E8 0000004360E8 0 EnterCriticalSection 0000000346FE 0000004360FE 0 LeaveCriticalSection 000000034714 000000436114 0 DeleteCriticalSection 00000003472C 00000043612C 0 WideCharToMultiByte 000000034742 000000436142 0 GetStringTypeW 000000034752 000000436152 0 HeapFree 00000003475C 00000043615C 0 GetCurrentThreadId 000000034770 000000436170 0 ExitThread 00000003477C 00000043617C 0 GetProcAddress 00000003478C 00000043618C 0 LoadLibraryExW 00000003479C 00000043619C 0 ExitProcess 0000000347AA 0000004361AA 0 GetModuleHandleExW 0000000347BE 0000004361BE 0 AreFileApisANSI 0000000347D0 0000004361D0 0 GetSystemTimeAsFileTime 0000000347EA 0000004361EA 0 HeapReAlloc 0000000347F8 0000004361F8 0 GetCommandLineA 00000003480A 00000043620A 0 RaiseException 00000003481A 00000043621A 0 RtlUnwind File pos Mem pos ID Text ======== ======= == ==== 000000034826 000000436226 0 HeapAlloc 000000034832 000000436232 0 InitializeCriticalSectionAndSpinCount 00000003485A 00000043625A 0 GetCPInfo 000000034866 000000436266 0 IsProcessorFeaturePresent 000000034882 000000436282 0 UnhandledExceptionFilter 00000003489C 00000043629C 0 SetUnhandledExceptionFilter 0000000348BA 0000004362BA 0 SetLastError 0000000348C8 0000004362C8 0 TerminateProcess 0000000348DA 0000004362DA 0 TlsAlloc 0000000348E4 0000004362E4 0 TlsGetValue 0000000348F2 0000004362F2 0 TlsSetValue 000000034900 000000436300 0 RegQueryInfoKeyW 000000034912 000000436312 0 RegSetValueExW 000000034922 000000436322 0 RegCloseKey 000000034930 000000436330 0 AdjustTokenPrivileges 000000034948 000000436348 0 RegOpenKeyExW 000000034958 000000436358 0 RegDeleteValueW 00000003496A 00000043636A 0 DuplicateTokenEx 00000003497C 00000043637C 0 RegOpenKeyExA 00000003498C 00000043638C 0 LookupPrivilegeValueW 0000000349A4 0000004363A4 0 RegQueryValueExA 0000000349B6 0000004363B6 0 OpenProcessToken 0000000349C8 0000004363C8 0 CreateProcessAsUserA 0000000349DE 0000004363DE 0 ControlService 0000000349EE 0000004363EE 0 RegisterServiceCtrlHandlerW 000000034A0C 00000043640C 0 SetServiceStatus 000000034A1E 00000043641E 0 StartServiceW 000000034A2E 00000043642E 0 OpenServiceW 000000034A3C 00000043643C 0 StartServiceCtrlDispatcherW 000000034A5A 00000043645A 0 OpenSCManagerW 000000034A6A 00000043646A 0 DeleteService 000000034A7A 00000043647A 0 CloseServiceHandle 000000034A8E 00000043648E 0 CreateServiceW 000000034A9E 00000043649E 0 RegEnumKeyExA 000000034AAE 0000004364AE 0 GetStockObject 000000034ABE 0000004364BE 0 WFSClose 000000034AC8 0000004364C8 0 WFSAsyncExecute 000000034ADA 0000004364DA 0 WFSFreeResult 000000034AEA 0000004364EA 0 WFSGetInfo 000000034AF6 0000004364F6 0 WFSExecute 000000034B02 000000436502 0 WFSRegister 000000034B10 000000436510 0 WFSOpen 000000034B1A 00000043651A 0 WFSCancelAsyncRequest 000000034B32 000000436532 0 WFSStartUp 000000034B3E 00000043653E 0 WFSCleanUp 000000034B4A 00000043654A 0 CoTaskMemFree 000000034B5A 00000043655A 0 CoInitialize 000000034B68 000000436568 0 CoUninitialize 000000034B78 000000436578 0 CoCreateInstance 000000034B8A 00000043658A 0 ShellExecuteW 000000034B9A 00000043659A 0 ShellExecuteA 000000034BAA 0000004365AA 0 SetWindowTextA 000000034BBA 0000004365BA 0 UpdateWindow 000000034BC8 0000004365C8 0 EnableWindow 000000034BD6 0000004365D6 0 DefWindowProcW 000000034BE6 0000004365E6 0 DispatchMessageW 000000034BF8 0000004365F8 0 TranslateMessage 000000034C0A 00000043660A 0 ShowWindow 000000034C16 000000436616 0 GetDesktopWindow 000000034C28 000000436628 0 BroadcastSystemMessageW File pos Mem pos ID Text ======== ======= == ==== 000000034C42 000000436642 0 CreateWindowExA 000000034C54 000000436654 0 GetWindowLongW 000000034C64 000000436664 0 RegisterClassExW 000000034C76 000000436676 0 LoadCursorW 000000034C84 000000436684 0 CreateWindowExW 000000034C96 000000436696 0 ExitWindowsEx 000000034CA6 0000004366A6 0 SetTimer 000000034CB0 0000004366B0 0 GetWindowRect 000000034CC0 0000004366C0 0 GetMessageW 000000034CCE 0000004366CE 0 PostQuitMessage 000000034CE0 0000004366E0 0 RegisterWindowMessageW 000000034CF8 0000004366F8 0 KillTimer 000000034D04 000000436704 0 LoadIconW 000000034D10 000000436710 0 DestroyEnvironmentBlock 000000034D2A 00000043672A 0 CreateEnvironmentBlock 000000034D42 000000436742 0 WTSQueryUserToken 000000034D56 000000436756 0 WFMQueryValue 000000034D66 000000436766 0 WFMOpenKey 000000034D72 000000436772 0 WFMEnumKey 000000034D7E 00000043677E 0 WFMCloseKey 000000035008 000000437008 0 .?AV_Locimp@locale@std@@ 00000003502C 00000043702C 0 .?AVbad_alloc@std@@ 000000035048 000000437048 0 .?AVlogic_error@std@@ 000000035068 000000437068 0 .?AVlength_error@std@@ 000000035088 000000437088 0 .?AVout_of_range@std@@ 0000000350A8 0000004370A8 0 .?AVregex_error@std@@ 0000000350D0 0000004370D0 0 Copyright (c) 1992-2004 by P.J. Plauger, licensed by Dinkumware, Ltd. ALL RIGHTS RESERVED. 000000035508 000000437508 0 .?AVtype_info@@ 000000035650 000000437650 0 .?AVbad_exception@std@@ 000000035A32 000000437A32 0 000000035B19 000000437B19 0 abcdefghijklmnopqrstuvwxyz 000000035B39 000000437B39 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ 000000035C52 000000437C52 0 000000035D32 000000437D32 0 abcdefghijklmnopqrstuvwxyz 000000035D52 000000437D52 0 ABCDEFGHIJKLMNOPQRSTUVWXYZ 0000000365DE 0000004385DE 0 z?aUY 000000036620 000000438620 0 zc%C1 000000036673 000000438673 0 -64OS 0000000366B4 0000004386B4 0 .?AVsystem_error@std@@ 0000000366D4 0000004386D4 0 .?AV?$codecvt@DDH@std@@ 000000036765 000000438765 0 !This program cannot be run in DOS mode. 0000000367DF 0000004387DF 0 oRich 000000036948 000000438948 0 .rsrc 000000036BA5 000000438BA5 0 b]gp _ 000000036C21 000000438C21 0 AQMlR 000000036D21 000000438D21 0 VRP,~ 000000036D8B 000000438D8B 0 lF4.9 00000003704D 00000043904D 0 9+~WB 00000003710D 00000043910D 0 P3YKO 00000003713D 00000043913D 0 u62h! 000000037154 000000439154 0 ph!d/ 000000037189 000000439189 0 EAJDT 000000037193 000000439193 0 8B9o? 00000003734F 00000043934F 0 D;E{kw ;u 000000037387 000000439387 0 :yHHSuT 00000003745A 00000043945A 0 ?t@Vg 00000003771C 00000043971C 0 H|Eh7u[f 000000037767 000000439767 0 u?\!7 0000000377AA 0000004397AA 0 DPuib 000000037822 000000439822 0 uhk /c File pos Mem pos ID Text ======== ======= == ==== 000000037857 000000439857 0 PSZK| 0000000378F9 0000004398F9 0 Q {*Tp 000000037902 000000439902 0 7IpSE 00000003790C 00000043990C 0 %Z2)- 000000037931 000000439931 0 0d+>XO 000000037958 000000439958 0 ldPt3' 0000000379D3 0000004399D3 0 tpI18 0000000379DD 0000004399DD 0 uZG*8F 0000000379EA 0000004399EA 0 Ef2b1 000000037A02 000000439A02 0 7%pP: 000000037AD1 000000439AD1 0 IO<$#V 000000037B29 000000439B29 0 I@#PhX 000000037B73 000000439B73 0 SSEo| 000000037B96 000000439B96 0 ScvX@ 000000037BF6 000000439BF6 0 ;Ut/c/cGd 000000037D33 000000439D33 0 sh45+J 000000037D55 000000439D55 0 j[?|h 000000037D5F 000000439D5F 0 !_+T 000000038004 00000043A004 0 q#stv 000000038022 00000043A022 0 T!c=O 0000000380D6 00000043A0D6 0 Ey;4w8/ 000000038143 00000043A143 0 ddddl8<@ddddDHLPddddTX\ 00000003815B 00000043A15B 0 dddddh 000000038689 00000043A689 0 CCGGp 000000038881 00000043A881 0 ;u Qm) 0000000389C3 00000043A9C3 0 "WHU;= 0000000389EA 00000043A9EA 0 _e|VA 000000038CB5 00000043ACB5 0 :C9Il9E 000000038EE3 00000043AEE3 0 QKihv 000000038F29 00000043AF29 0 a[_5< 000000039031 00000043B031 0 /u,$W 0000000390BF 00000043B0BF 0 "cs{; 0000000390F4 00000043B0F4 0 nt'r[ 000000039196 00000043B196 0 ]iS[+ 0000000394B3 00000043B4B3 0 ; zlm 000000039529 00000043B529 0 YKYYW 00000003957E 00000043B57E 0 )YN!K6\3 0000000395BC 00000043B5BC 0 %mowlw 0000000395FE 00000043B5FE 0 H2 VN 0000000396D1 00000043B6D1 0 H*~1( 00000003971A 00000043B71A 0 P7n5@ 0000000398EF 00000043B8EF 0 wS(;# 000000039992 00000043B992 0 XTj _ 000000039A06 00000043BA06 0 eYyJz 000000039A91 00000043BA91 0 hpf4d[S 000000039C0A 00000043BC0A 0 ~3A}R 000000039D3B 00000043BD3B 0 A;VxO 000000039E55 00000043BE55 0 0AOW_ 000000039E66 00000043BE66 0 i6j~pUgow 000000039F8B 00000043BF8B 0 W*DkKK 00000003A052 00000043C052 0 GS+mt 00000003A09E 00000043C09E 0 tM8wH 00000003A189 00000043C189 0 WN/2 g 00000003A1F0 00000043C1F0 0 htFlt 00000003A498 00000043C498 0 MRV/T 00000003A4E5 00000043C4E5 0 )jj0Xf]i 00000003A547 00000043C547 0 lKlu; 00000003A5B4 00000043C5B4 0 90tNhF 00000003A8C8 00000043C8C8 0 3hWhc 00000003A94D 00000043C94D 0 ,yhhGH})c File pos Mem pos ID Text ======== ======= == ==== 00000003AAD2 00000043CAD2 0 mPy(ml 00000003ABFB 00000043CBFB 0 tEs o 00000003AD22 00000043CD22 0 0A@@Ju 00000003AD41 00000043CD41 0 7A4YC 00000003AD8B 00000043CD8B 0 P,DT3Q 00000003ADCE 00000043CDCE 0 Bg-k8 00000003ADE0 00000043CDE0 0 $mkh_ 00000003AF03 00000043CF03 0 ])>Ew=x 00000003AFD8 00000043CFD8 0 !z(a: 00000003B005 00000043D005 0 0pz?} 00000003B0C4 00000043D0C4 0 BdBnB 00000003B15F 00000043D15F 0 <.u4O8 00000003B1D8 00000043D1D8 0 ,uR$b 00000003B1E8 00000043D1E8 0 *g'j. 00000003B25F 00000043D25F 0 B_t?<X 00000003B2AE 00000043D2AE 0 lu|- 00000003B2E5 00000043D2E5 0 N7X8_l 00000003B2ED 00000043D2ED 0 P=2Y 00000003B341 00000043D341 0 X)h'1 00000003B495 00000043D495 0 6@d&" 00000003B52F 00000043D52F 0 D;2uhR4\" 00000003B5A8 00000043D5A8 0 Yh[=LF 00000003B5BD 00000043D5BD 0 N)W<7 00000003B5D0 00000043D5D0 0 cLlY5 00000003B5E5 00000043D5E5 0 *C2 2 00000003B980 00000043D980 0 t:V)o 00000003BA15 00000043DA15 0 tK&\I 00000003BA55 00000043DA55 0 whd'# 00000003BAB4 00000043DAB4 0 g$ ($ 00000003BC89 00000043DC89 0 xs%'Q* 00000003BCE2 00000043DCE2 0 85Fyr 00000003BD66 00000043DD66 0 , <Xw 00000003BD9D 00000043DD9D 0 [grHH 00000003BDFD 00000043DDFD 0 htDmwC> 00000003BE3C 00000043DE3C 0 'b d$ 00000003C03C 00000043E03C 0 FCxSD 00000003C180 00000043E180 0 7FPFeu(9 00000003C343 00000043E343 0 @S)Lp 00000003C37A 00000043E37A 0 g+lJ<V 00000003C3D5 00000043E3D5 0 u!>3) 00000003C464 00000043E464 0 EH);s9 00000003C55C 00000043E55C 0 5n5@z< 00000003C59B 00000043E59B 0 l8ulu@&N 00000003C5DB 00000043E5DB 0 80_[H 00000003C767 00000043E767 0 w9=?| 00000003C7AC 00000043E7AC 0 PSmC(W 00000003C7C9 00000043E7C9 0 A5G/q 00000003C923 00000043E923 0 |(&Te 00000003CA02 00000043EA02 0 gPmQq/ 00000003CA5C 00000043EA5C 0 H1vk\ 00000003CAB2 00000043EAB2 0 *n/ 4 00000003CADC 00000043EADC 0 PojcDMd 00000003CAF9 00000043EAF9 0 5i@xm 00000003CD28 00000043ED28 0 WPsv\> 00000003CDC4 00000043EDC4 0 @>H,dH 00000003CE4C 00000043EE4C 0 t<+Ht 00000003CF61 00000043EF61 0 I\ JW 00000003CF6E 00000043EF6E 0 h#*]Q| 00000003D005 00000043F005 0 *boOu!9 00000003D0F6 00000043F0F6 0 +u)Ku3( File pos Mem pos ID Text ======== ======= == ==== 00000003D13E 00000043F13E 0 -})jAXf 00000003D2B7 00000043F2B7 0 m;RrC.9 00000003D2D2 00000043F2D2 0 v(9: 00000003D32C 00000043F32C 0 L=h7u 00000003D3CC 00000043F3CC 0 GW[*hL 00000003D3E7 00000043F3E7 0 GG>=Yt1 00000003D40F 00000043F40F 0 QI,EKo% 00000003D7B4 00000043F7B4 0 elRSt; 00000003D7FA 00000043F7FA 0 A@F|b 00000003D848 00000043F848 0 fgo*V 00000003D8B9 00000043F8B9 0 Yk&"F" 00000003D903 00000043F903 0 mKrM7 00000003D912 00000043F912 0 31LjP 00000003DAEA 00000043FAEA 0 UuoYe 00000003DBF6 00000043FBF6 0 ~%N| 00000003DC06 00000043FC06 0 QVj PJ 00000003DC18 00000043FC18 0 ;2r 8 00000003DCF9 00000043FCF9 0 (F9dY 00000003DD14 00000043FD14 0 \)T#C 00000003DD25 00000043FD25 0 ;+v N+ 00000003DD86 00000043FD86 0 ji_jdZf 00000003DD95 00000043FD95 0 :?ot4 00000003E12F 00000044012F 0 XG!aI< 00000003E158 000000440158 0 A0D-3 00000003E1B5 0000004401B5 0 L"*t2 00000003E316 000000440316 0 rm|2d 00000003E470 000000440470 0 ?9X$b 00000003E53A 00000044053A 0 Pek>/Y 00000003E868 000000440868 0 @"I0+ 00000003E87F 00000044087F 0 2u8SS 00000003E919 000000440919 0 _r7y? 00000003EA72 000000440A72 0 Mp>*uh/ 00000003EB0D 000000440B0D 0 tiX#L 00000003EB2C 000000440B2C 0 ;-Q%1 00000003EBA7 000000440BA7 0 U%LUE 00000003EBBF 000000440BBF 0 Pj1QC 00000003EBCF 000000440BCF 0 sY)Z2Y 00000003EC08 000000440C08 0 ,-0V. 00000003EC17 000000440C17 0 d08Dd9@ 00000003EC2D 000000440C2D 0 eJLIPJ 00000003EC34 000000440C34 0 )YJTKd 00000003EC3C 000000440C3C 0 eXL\MeJ 00000003EC53 000000440C53 0 Y9p:Y 00000003EC69 000000440C69 0 m/>#S2 00000003ECE7 000000440CE7 0 A,04j 00000003EE4B 000000440E4B 0 np D{> 00000003EF97 000000440F97 0 RP$Q 00000003EFC1 000000440FC1 0 ->W.R/-d9/Sb 00000003F1C1 0000004411C1 0 ( 9&~ 00000003F31E 00000044131E 0 $0EPx 00000003F3F9 0000004413F9 0 #{s6< 00000003F501 000000441501 0 .;1s(mV 00000003F7B6 0000004417B6 0 )SoU 00000003F831 000000441831 0 %(WMjnl 00000003F859 000000441859 0 ,[Du;( 00000003F972 000000441972 0 HRrYy 00000003FA7E 000000441A7E 0 Bk,_7BF 00000003FB2B 000000441B2B 0 .4&:a 00000003FB8A 000000441B8A 0 @d|F@ 00000003FBF3 000000441BF3 0 Nh,YVp$ File pos Mem pos ID Text ======== ======= == ==== 00000003FCCA 000000441CCA 0 !aV2&3 00000003FD2E 000000441D2E 0 sSHxW 00000003FE28 000000441E28 0 Zvd@h 00000003FE40 000000441E40 0 R2--k 00000003FEA3 000000441EA3 0 w@MT# 00000003FED9 000000441ED9 0 >9P-?L 00000003FEE8 000000441EE8 0 4?P | 00000003FF22 000000441F22 0 $'9XN 00000003FF5F 000000441F5F 0 %h0H/ 000000040008 000000442008 0 @@3T;+[ 0000000404BB 0000004424BB 0 H|L]. 0000000404CE 0000004424CE 0 \vGfG> 00000004058E 00000044258E 0 I iN& 0000000406DE 0000004426DE 0 }#SHw 0000000408C2 0000004428C2 0 JNaM, 0000000409F1 0000004429F1 0 4MPlEs4+ 000000040A83 000000442A83 0 Wq[}_ 000000040B66 000000442B66 0 xE7]*Q 000000040C83 000000442C83 0 4&9*8 000000040C8D 000000442C8D 0 y52w,} 000000040CB3 000000442CB3 0 QSWV= 0000000412A9 0000004432A9 0 5_pd 0000000412BE 0000004432BE 0 lFF dty 0000000412CA 0000004432CA 0 uqmie! 00000004134A 00000044334A 0 pHCXp 000000041497 000000443497 0 91cC~@ 0000000414EF 0000004434EF 0 !F)P5 000000041596 000000443596 0 DW'K$ 00000004159C 00000044359C 0 V2|7S 0000000415C7 0000004435C7 0 A.@6; 000000041607 000000443607 0 %:*4f- 000000041777 000000443777 0 P zgE 000000041A44 000000443A44 0 *G4o-"C 000000041A62 000000443A62 0 9T8Dq 000000041AC2 000000443AC2 0 X\;(nT 000000041B1D 000000443B1D 0 uaVw' 000000041B93 000000443B93 0 sDpRE 000000041BD3 000000443BD3 0 @h0Y<S 000000041C37 000000443C37 0 h4*bC 000000041D4E 000000443D4E 0 MVtQX 000000041D7D 000000443D7D 0 EjPUd 000000041F94 000000443F94 0 </OrY 000000041FD1 000000443FD1 0 Ig@.y 000000042052 000000444052 0 AAFF 0000000420C8 0000004440C8 0 (p3t: 0000000420D5 0000004440D5 0 ;tv-P 0000000420EF 0000004440EF 0 >,BA\ 000000042157 000000444157 0 k.%]T 0000000422AD 0000004442AD 0 =t<VN 00000004233F 00000044433F 0 &0_Ej[ 0000000423DE 0000004443DE 0 H+J!P) 0000000423F1 0000004443F1 0 8aV_P 000000042404 000000444404 0 Y@ukf 0000000424FE 0000004444FE 0 ;:u84 0000000426B2 0000004446B2 0 #5/7w0 0000000426E0 0000004446E0 0 VVRV2S 000000042715 000000444715 0 $\D-} 000000042782 000000444782 0 Zzb}J 00000004283B 00000044483B 0 5g@T(6E 000000042941 000000444941 0 @@m- File pos Mem pos ID Text ======== ======= == ==== 0000000429DC 0000004449DC 0 s&:)&X6, 000000042B2E 000000444B2E 0 9s*(0(TO 000000042DC4 000000444DC4 0 P##CcX 000000042E40 000000444E40 0 6i(,8@ 000000042EE9 000000444EE9 0 f8,s8 000000042F4E 000000444F4E 0 K\ PU 000000042F99 000000444F99 0 T=ISU 000000043063 000000445063 0 r33I]*/v,*; 000000043111 000000445111 0 It'Y# 000000043273 000000445273 0 Pkq~& 0000000432CE 0000004452CE 0 }wUC/XL 000000043393 000000445393 0 }t{~B 0000000433CB 0000004453CB 0 \G%}r 00000004341B 00000044541B 0 4;W5> 0000000435BB 0000004455BB 0 {63=7R!sEn+ 00000004381F 00000044581F 0 d\lang1033\b0\fs20$\b 000000043838 000000445838 0 EFFET JURIDIQUE. 000000043853 000000445853 0 r\'e9sent co 00000004386B 00000044586B 0 iertains 00000004387F 00000044587F 0 diques. Vou 000000043893 000000445893 0 ez av r&'auBe/ 0000000438C0 0000004458C0 0 momfi' 0000000438D3 0000004458D3 0 *f78r 0000000438E3 0000004458E3 0 -ciSl 0000000438EF 0000004458EF 0 ett4Y 0000000438FA 0000004458FA 0 'sb1< 000000043950 000000445950 0 un telommage 000000043964 000000445964 0 n_orZ 00000004396E 00000044596E 0 4xcluyXg 0000000439CC 0000004459CC 0 y-dZu 000000043A22 000000445A22 0 ie,3@ 000000043AA1 000000445AA1 0 (ymp\ 000000043ACA 000000445ACA 0 ?k1l;s 000000043AE7 000000445AE7 0 |M:+o a% 000000043AF9 000000445AF9 0 ITATION DES 000000043B05 000000445B05 0 OMMAG 000000043B1C 000000445B1C 0 EXCLU 000000043B25 000000445B25 0 S( R"P SABI@ 000000043B79 000000445B79 0 hFuk5,\ 000000043BAE 000000445BAE 0 ci$,( 000000043BFD 000000445BFD 0 bb#To 000000043C2A 000000445C2A 0 WKcLB 000000043C32 000000445C32 0 -9xpLs.2 000000043C5A 000000445C5A 0 cvn+L 000000043C84 000000445C84 0 ZR% M\ 000000043CFF 000000445CFF 0 7,nmC 000000043D66 000000445D66 0 B/K . 000000043D6C 000000445D6C 0 [hndE? w$F 000000043D97 000000445D97 0 knew 000000043DC9 000000445DC9 0 ,\P&)y$ 000000043DE6 000000445DE6 0 wYy)l 000000043DFC 000000445DFC 0 7,,1e- 000000043E20 000000445E20 0 ,eal- 000000043E44 000000445E44 0 ,j)mY 000000043E67 000000445E67 0 BhI7G 000000043E71 000000445E71 0 yX\0aWd1 000000043EB3 000000445EB3 0 capsTZ2 000000043ED7 000000445ED7 0 1$L=n 000000043F24 000000445F24 0 {,+q$5. 000000043F5B 000000445F5B 0 #9"Dw File pos Mem pos ID Text ======== ======= == ==== 000000044008 000000446008 0 !ImGpi 000000044024 000000446024 0 t/pv/ 00000004404C 00000044604C 0 #%Lx9l 000000044067 000000446067 0 ?9wi5 000000044099 000000446099 0 kVT&) 000000044105 000000446105 0 >N!iY4 000000044126 000000446126 0 -biF 00000004414A 00000044614A 0 zDkY%k 000000044155 000000446155 0 [7%f-r 0000000441D4 0000004461D4 0 5SUPPORT 000000044273 000000446273 0 HFFFT 000000044282 000000446282 0 1U"1\ 00000004429C 00000044629C 0 <Btp://#4 0000000442B9 0000004462B9 0 3OCUMEN 0000000442CF 0000004462CF 0 ?h\v 0! 000000044302 000000446302 0 ,{H<D 00000004432B 00000044632B 0 @,UssKX 00000004434D 00000044634D 0 !V;m% 00000004446A 00000044646A 0 @Za8G=5 000000044494 000000446494 0 LLAAND 0000000444A0 0000004464A0 0 IGHT:k- 000000044509 000000446509 0 FTWARE;YOU 000000044529 000000446529 0 NOT"M0 0000000445AE 0000004465AE 0 M$ C/ 0000000445EE 0000004465EE 0 Wkov8 0000000445FB 0000004465FB 0 4|2fz 00000004460E 00000044660E 0 W{\*\k; 000000044629 000000446629 0 506;}\ 000000044687 000000446687 0 pg1252\f 000000044696 000000446696 0 (fa_{ 0000000446A8 0000004466A8 0 q+f|Tt[[ 000000044751 000000446751 0 t!hGUn[ 00000004478D 00000044678D 0 s]76d 0000000447BA 0000004467BA 0 ToArgvW 0000000447F8 0000004467F8 0 9+.7F 00000004482D 00000044682D 0 MvdyeoS 000000044843 000000446843 0 pUs&M 000000044849 000000446849 0 cgdQs- 000000044863 000000446863 0 -{/Y*3 00000004488E 00000044688E 0 Cm!M& 000000044905 000000446905 0 e[=pa 00000004497D 00000044697D 0 ;qXB] 0000000449ED 0000004469ED 0 CT3L 0000000449FA 0000004469FA 0 RtlNt 000000044A2C 000000446A2C 0 sCWmFeX 000000044A40 000000446A40 0 (AoC7 t 000000044ABF 000000446ABF 0 ] QeK(qM 000000044B60 000000446B60 0 G-{c<+pQd%' 000000044B81 000000446B81 0 "l<r{ 000000044BA1 000000446BA1 0 BSDe3j 000000044BBF 000000446BBF 0 KWow64En 000000044BD5 000000446BD5 0 }wDsuWH0 000000044BF0 000000446BF0 0 Op-[F 000000044C3D 000000446C3D 0 rRitP 000000044C52 000000446C52 0 r>ioe 000000044C5E 000000446C5E 0 PTLOSS 000000044C76 000000446C76 0 R6034u 000000044C9A 000000446C9A 0 C {2brX 000000044CB5 000000446CB5 0 1]'sF): 000000044D30 000000446D30 0 '(/clr File pos Mem pos ID Text ======== ======= == ==== 000000044D4E 000000446D4E 0 DIMai 000000044D76 000000446D76 0 SMxRTo 000000044DAE 000000446DAE 0 6std5 000000044DC5 000000446DC5 0 (_4_k 000000044DF7 000000446DF7 0 o#7mvY 000000044E45 000000446E45 0 -+8l0 000000044EA2 000000446EA2 0 LC_TIME 000000044EB4 000000446EB4 0 MONETARYCTYPEoT 000000044F1F 000000446F1F 0 !"#$%&'()*+,-./ 000000044F32 000000446F32 0 lp2>56789:;<=>?@ABCDEb 000000044F4B 000000446F4B 0 FGHIJKLMNOP#T 000000044F5C 000000446F5C 0 1XYZ[\] 000000044F6E 000000446F6E 0 ijklm#pqrS 000000044F7B 000000446F7B 0 muvwxyz{|}~ 000000044FB5 000000446FB5 0 e+Fls 000000044FCB 000000446FCB 0 AlP;( 000000044FF9 000000446FF9 0 8PX? 000000045025 000000447025 0 B2H3X 000000045051 000000447051 0 ADVAPI 00000004505B 00000044705B 0 q.De, 000000045079 000000447079 0 A3LaZAV 00000004508D 00000044708D 0 fFkQ? 000000045096 000000447096 0 Box1ZRq 0000000451A5 0000004471A5 0 HH:mn6C 0000000451B0 0000004471B0 0 d, M[ 000000045211 000000447211 0 SKGC7yC 00000004521B 00000044721B 0 {?;3#v 000000045239 000000447239 0 :;Tu MN 000000045248 000000447248 0 C;7/' 000000045298 000000447298 0 ?vakp 0000000452A8 0000004472A8 0 -7bw' 0000000452DA 0000004472DA 0 engc4 0000000452FD 0000004472FD 0 f'C'n 00000004536C 00000044736C 0 bpBc?D 000000045385 000000447385 0 2GM#b 000000045398 000000447398 0 XIQ[+ 0000000453D6 0000004473D6 0 l#LOlux 0000000454D3 0000004474D3 0 =x,_l,\ 0000000455A8 0000004475A8 0 'OxD)/@)< 0000000455B6 0000004475B6 0 4WU,OGB$w 000000045607 000000447607 0 d|hTTO 000000045667 000000447667 0 ('8PW# 0000000456BD 0000004476BD 0 Q[IN$ 0000000456EC 0000004476EC 0 k:\s[ 0000000456FD 0000004476FD 0 [\\Re 000000045709 000000447709 0 .pdbkpf8 00000004586F 00000044786F 0 tHYvf 000000045AEC 000000447AEC 0 8(40,4M 000000045B27 000000447B27 0 xpd\i 000000045B2E 000000447B2E 0 iPD@<0a 000000045B94 000000447B94 0 0Nm3M 000000045BCE 000000447BCE 0 AtRU{R 000000045BF3 000000447BF3 0 f"@'WaiI 000000045C17 000000447C17 0 N#AZ(j 000000045C72 000000447C72 0 ABTiLa 000000045C97 000000447C97 0 SWTKC 000000045CA3 000000447CA3 0 OutpuP, 000000045CAB 000000447CAB 0 na"qVZT 000000045CDF 000000447CDF 0 Addr/U{ 000000045D2D 000000447D2D 0 S4ep2+ File pos Mem pos ID Text ======== ======= == ==== 000000045D8B 000000447D8B 0 P\Zwp 000000045DAF 000000447DAF 0 EM [V 000000045DE3 000000447DE3 0 rToMsBym0,{ 000000045DF8 000000447DF8 0 ushlBuff_x 000000045E18 000000447E18 0 p!A-] 000000045E4F 000000447E4F 0 j[aQgsP 000000045E65 000000447E65 0 kdspm 000000045E6B 000000447E6B 0 ACLwH 000000045EA0 000000447EA0 0 faz[ID 000000045EB9 000000447EB9 0 SAWU9Va 000000045F1A 000000447F1A 0 D/ogf 000000045FCA 000000447FCA 0 .t6!{ 00000004619C 00000044819C 0 XPTPSW 00000004669C 00000044869C 0 <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"> 0000000466E7 0000004486E7 0 <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"> 00000004671F 00000044871F 0 <security> 00000004672F 00000044872F 0 <requestedPrivileges> 00000004674C 00000044874C 0 <requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel> 0000000467AC 0000004487AC 0 </requestedPrivileges> 0000000467CA 0000004487CA 0 </security> 0000000467DB 0000004487DB 0 </trustInfo> 0000000467EB 0000004487EB 0 </assembly>PA 0000000468AC 0000004488AC 0 KERNEL32.DLL 0000000468B9 0000004488B9 0 ADVAPI32.dll 0000000468C6 0000004488C6 0 COMDLG32.dll 0000000468D3 0000004488D3 0 GDI32.dll 0000000468DD 0000004488DD 0 USER32.dll 0000000468EA 0000004488EA 0 LoadLibraryA 0000000468F8 0000004488F8 0 GetProcAddress 000000046908 000000448908 0 VirtualProtect 000000046918 000000448918 0 VirtualAlloc 000000046926 000000448926 0 VirtualFree 000000046934 000000448934 0 ExitProcess 000000046942 000000448942 0 RegCloseKey 000000046950 000000448950 0 PrintDlgW 00000004695C 00000044895C 0 EndDoc 000000046964 000000448964 0 EndDialog 000000046B80 000000448B80 0 .?AVbad_cast@std@@ 000000046B9C 000000448B9C 0 .?AVexception@std@@ 000000046BB8 000000448BB8 0 .?AVcodecvt_base@std@@ 000000046BD8 000000448BD8 0 .?AVios_base@std@@ 000000046BF4 000000448BF4 0 .?AV_Iostream_error_category@std@@ 000000046C20 000000448C20 0 .?AVfailure@ios_base@std@@ 000000046C44 000000448C44 0 .?AVruntime_error@std@@ 000000046C64 000000448C64 0 .?AV?$ctype@D@std@@ 000000046C80 000000448C80 0 .?AV_System_error_category@std@@ 000000046CAC 000000448CAC 0 .?AV?$basic_filebuf@DU?$char_traits@D@std@@@std@@ 000000046CE8 000000448CE8 0 .?AV?$basic_ios@DU?$char_traits@D@std@@@std@@ 000000046D20 000000448D20 0 .?AV?$_Iosb@H@std@@ 000000046D3C 000000448D3C 0 .?AVerror_category@std@@ 000000046D60 000000448D60 0 .?AV_Generic_error_category@std@@ 000000046D8C 000000448D8C 0 .?AV_Facet_base@std@@ 000000046DAC 000000448DAC 0 .?AUctype_base@std@@ 000000046DCC 000000448DCC 0 .?AV?$basic_ofstream@DU?$char_traits@D@std@@@std@@ 000000046E08 000000448E08 0 .?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@ 000000046E44 000000448E44 0 .?AVfacet@locale@std@@ 000000046E64 000000448E64 0 .?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@ 000000046EA0 000000448EA0 0 .?AV?$basic_istream@DU?$char_traits@D@std@@@std@@ 000000046EDC 000000448EDC 0 .?AV?$basic_ifstream@DU?$char_traits@D@std@@@std@@ 000000046F18 000000448F18 0 .?AVXFSService@@ File pos Mem pos ID Text ======== ======= == ==== 000000046F34 000000448F34 0 .?AVXCDM@@ 000000046F48 000000448F48 0 .?AV?$_Node_str@D@std@@ 000000046F68 000000448F68 0 .?AV_Node_capture@std@@ 000000046F88 000000448F88 0 .?AV?$_Node_class@DV?$regex_traits@D@std@@@std@@ 000000046FC4 000000448FC4 0 .?AV_Node_endif@std@@ 000000046FE4 000000448FE4 0 .?AV_Node_assert@std@@ 000000047004 000000449004 0 .?AV_Node_rep@std@@ 000000047020 000000449020 0 .?AVXIDC@@ 000000047034 000000449034 0 .?AV_Node_back@std@@ 000000047054 000000449054 0 .?AV_Node_end_rep@std@@ 000000047074 000000449074 0 .?AV_Node_end_group@std@@ 000000047098 000000449098 0 .?AV_Node_base@std@@ 0000000470B8 0000004490B8 0 .?AV_Node_if@std@@ 0000000470D4 0000004490D4 0 .?AV?$collate@D@std@@ 0000000470F4 0000004490F4 0 .?AV_Root_node@std@@ 000000047114 000000449114 0 .?AVXPIN@@ 000000029FEC 00000042B9EC 0 combase.dll 00000002A01B 00000042BA1B 0 Amscoree.dll 00000002A893 00000042C293 0 Akernel32.dll 00000002B970 00000042D370 0 zh-CHS 00000002BB70 00000042D570 0 ar-SA 00000002BB7C 00000042D57C 0 bg-BG 00000002BB88 00000042D588 0 ca-ES 00000002BB94 00000042D594 0 zh-TW 00000002BBA0 00000042D5A0 0 cs-CZ 00000002BBAC 00000042D5AC 0 da-DK 00000002BBB8 00000042D5B8 0 de-DE 00000002BBC4 00000042D5C4 0 el-GR 00000002BBD0 00000042D5D0 0 en-US 00000002BBDC 00000042D5DC 0 fi-FI 00000002BBE8 00000042D5E8 0 fr-FR 00000002BBF4 00000042D5F4 0 he-IL 00000002BC00 00000042D600 0 hu-HU 00000002BC0C 00000042D60C 0 is-IS 00000002BC18 00000042D618 0 it-IT 00000002BC24 00000042D624 0 ja-JP 00000002BC30 00000042D630 0 ko-KR 00000002BC3C 00000042D63C 0 nl-NL 00000002BC48 00000042D648 0 nb-NO 00000002BC54 00000042D654 0 pl-PL 00000002BC60 00000042D660 0 pt-BR 00000002BC6C 00000042D66C 0 ro-RO 00000002BC78 00000042D678 0 ru-RU 00000002BC84 00000042D684 0 hr-HR 00000002BC90 00000042D690 0 sk-SK 00000002BC9C 00000042D69C 0 sq-AL 00000002BCA8 00000042D6A8 0 sv-SE 00000002BCB4 00000042D6B4 0 th-TH 00000002BCC0 00000042D6C0 0 tr-TR 00000002BCCC 00000042D6CC 0 ur-PK 00000002BCD8 00000042D6D8 0 id-ID 00000002BCE4 00000042D6E4 0 uk-UA 00000002BCF0 00000042D6F0 0 be-BY 00000002BCFC 00000042D6FC 0 sl-SI 00000002BD08 00000042D708 0 et-EE 00000002BD14 00000042D714 0 lv-LV 00000002BD20 00000042D720 0 lt-LT 00000002BD2C 00000042D72C 0 fa-IR 00000002BD38 00000042D738 0 vi-VN 00000002BD44 00000042D744 0 hy-AM File pos Mem pos ID Text ======== ======= == ==== 00000002BD50 00000042D750 0 az-AZ-Latn 00000002BD68 00000042D768 0 eu-ES 00000002BD74 00000042D774 0 mk-MK 00000002BD80 00000042D780 0 tn-ZA 00000002BD8C 00000042D78C 0 xh-ZA 00000002BD98 00000042D798 0 zu-ZA 00000002BDA4 00000042D7A4 0 af-ZA 00000002BDB0 00000042D7B0 0 ka-GE 00000002BDBC 00000042D7BC 0 fo-FO 00000002BDC8 00000042D7C8 0 hi-IN 00000002BDD4 00000042D7D4 0 mt-MT 00000002BDE0 00000042D7E0 0 se-NO 00000002BDEC 00000042D7EC 0 ms-MY 00000002BDF8 00000042D7F8 0 kk-KZ 00000002BE04 00000042D804 0 ky-KG 00000002BE10 00000042D810 0 sw-KE 00000002BE1C 00000042D81C 0 uz-UZ-Latn 00000002BE34 00000042D834 0 tt-RU 00000002BE40 00000042D840 0 bn-IN 00000002BE4C 00000042D84C 0 pa-IN 00000002BE58 00000042D858 0 gu-IN 00000002BE64 00000042D864 0 ta-IN 00000002BE70 00000042D870 0 te-IN 00000002BE7C 00000042D87C 0 kn-IN 00000002BE88 00000042D888 0 ml-IN 00000002BE94 00000042D894 0 mr-IN 00000002BEA0 00000042D8A0 0 sa-IN 00000002BEAC 00000042D8AC 0 mn-MN 00000002BEB8 00000042D8B8 0 cy-GB 00000002BEC4 00000042D8C4 0 gl-ES 00000002BED0 00000042D8D0 0 kok-IN 00000002BEE0 00000042D8E0 0 syr-SY 00000002BEF0 00000042D8F0 0 div-MV 00000002BF00 00000042D900 0 quz-BO 00000002BF10 00000042D910 0 ns-ZA 00000002BF1C 00000042D91C 0 mi-NZ 00000002BF28 00000042D928 0 ar-IQ 00000002BF34 00000042D934 0 zh-CN 00000002BF40 00000042D940 0 de-CH 00000002BF4C 00000042D94C 0 en-GB 00000002BF58 00000042D958 0 es-MX 00000002BF64 00000042D964 0 fr-BE 00000002BF70 00000042D970 0 it-CH 00000002BF7C 00000042D97C 0 nl-BE 00000002BF88 00000042D988 0 nn-NO 00000002BF94 00000042D994 0 pt-PT 00000002BFA0 00000042D9A0 0 sr-SP-Latn 00000002BFB8 00000042D9B8 0 sv-FI 00000002BFC4 00000042D9C4 0 az-AZ-Cyrl 00000002BFDC 00000042D9DC 0 se-SE 00000002BFE8 00000042D9E8 0 ms-BN 00000002BFF4 00000042D9F4 0 uz-UZ-Cyrl 00000002C00C 00000042DA0C 0 quz-EC 00000002C01C 00000042DA1C 0 ar-EG 00000002C028 00000042DA28 0 zh-HK 00000002C034 00000042DA34 0 de-AT 00000002C040 00000042DA40 0 en-AU 00000002C04C 00000042DA4C 0 es-ES 00000002C058 00000042DA58 0 fr-CA 00000002C064 00000042DA64 0 sr-SP-Cyrl File pos Mem pos ID Text ======== ======= == ==== 00000002C07C 00000042DA7C 0 se-FI 00000002C088 00000042DA88 0 quz-PE 00000002C098 00000042DA98 0 ar-LY 00000002C0A4 00000042DAA4 0 zh-SG 00000002C0B0 00000042DAB0 0 de-LU 00000002C0BC 00000042DABC 0 en-CA 00000002C0C8 00000042DAC8 0 es-GT 00000002C0D4 00000042DAD4 0 fr-CH 00000002C0E0 00000042DAE0 0 hr-BA 00000002C0EC 00000042DAEC 0 smj-NO 00000002C0FC 00000042DAFC 0 ar-DZ 00000002C108 00000042DB08 0 zh-MO 00000002C114 00000042DB14 0 de-LI 00000002C120 00000042DB20 0 en-NZ 00000002C12C 00000042DB2C 0 es-CR 00000002C138 00000042DB38 0 fr-LU 00000002C144 00000042DB44 0 bs-BA-Latn 00000002C15C 00000042DB5C 0 smj-SE 00000002C16C 00000042DB6C 0 ar-MA 00000002C178 00000042DB78 0 en-IE 00000002C184 00000042DB84 0 es-PA 00000002C190 00000042DB90 0 fr-MC 00000002C19C 00000042DB9C 0 sr-BA-Latn 00000002C1B4 00000042DBB4 0 sma-NO 00000002C1C4 00000042DBC4 0 ar-TN 00000002C1D0 00000042DBD0 0 en-ZA 00000002C1DC 00000042DBDC 0 es-DO 00000002C1E8 00000042DBE8 0 sr-BA-Cyrl 00000002C200 00000042DC00 0 sma-SE 00000002C210 00000042DC10 0 ar-OM 00000002C21C 00000042DC1C 0 en-JM 00000002C228 00000042DC28 0 es-VE 00000002C234 00000042DC34 0 sms-FI 00000002C244 00000042DC44 0 ar-YE 00000002C250 00000042DC50 0 en-CB 00000002C25C 00000042DC5C 0 es-CO 00000002C268 00000042DC68 0 smn-FI 00000002C278 00000042DC78 0 ar-SY 00000002C284 00000042DC84 0 en-BZ 00000002C290 00000042DC90 0 es-PE 00000002C29C 00000042DC9C 0 ar-JO 00000002C2A8 00000042DCA8 0 en-TT 00000002C2B4 00000042DCB4 0 es-AR 00000002C2C0 00000042DCC0 0 ar-LB 00000002C2CC 00000042DCCC 0 en-ZW 00000002C2D8 00000042DCD8 0 es-EC 00000002C2E4 00000042DCE4 0 ar-KW 00000002C2F0 00000042DCF0 0 en-PH 00000002C2FC 00000042DCFC 0 es-CL 00000002C308 00000042DD08 0 ar-AE 00000002C314 00000042DD14 0 es-UY 00000002C320 00000042DD20 0 ar-BH 00000002C32C 00000042DD2C 0 es-PY 00000002C338 00000042DD38 0 ar-QA 00000002C344 00000042DD44 0 es-BO 00000002C350 00000042DD50 0 es-SV 00000002C35C 00000042DD5C 0 es-HN 00000002C368 00000042DD68 0 es-NI 00000002C374 00000042DD74 0 es-PR 00000002C380 00000042DD80 0 zh-CHT File pos Mem pos ID Text ======== ======= == ==== 00000002C398 00000042DD98 0 af-za 00000002C3A4 00000042DDA4 0 ar-ae 00000002C3B0 00000042DDB0 0 ar-bh 00000002C3BC 00000042DDBC 0 ar-dz 00000002C3C8 00000042DDC8 0 ar-eg 00000002C3D4 00000042DDD4 0 ar-iq 00000002C3E0 00000042DDE0 0 ar-jo 00000002C3EC 00000042DDEC 0 ar-kw 00000002C3F8 00000042DDF8 0 ar-lb 00000002C404 00000042DE04 0 ar-ly 00000002C410 00000042DE10 0 ar-ma 00000002C41C 00000042DE1C 0 ar-om 00000002C428 00000042DE28 0 ar-qa 00000002C434 00000042DE34 0 ar-sa 00000002C440 00000042DE40 0 ar-sy 00000002C44C 00000042DE4C 0 ar-tn 00000002C458 00000042DE58 0 ar-ye 00000002C464 00000042DE64 0 az-az-cyrl 00000002C47C 00000042DE7C 0 az-az-latn 00000002C494 00000042DE94 0 be-by 00000002C4A0 00000042DEA0 0 bg-bg 00000002C4AC 00000042DEAC 0 bn-in 00000002C4B8 00000042DEB8 0 bs-ba-latn 00000002C4D0 00000042DED0 0 ca-es 00000002C4DC 00000042DEDC 0 cs-cz 00000002C4E8 00000042DEE8 0 cy-gb 00000002C4F4 00000042DEF4 0 da-dk 00000002C500 00000042DF00 0 de-at 00000002C50C 00000042DF0C 0 de-ch 00000002C518 00000042DF18 0 de-de 00000002C524 00000042DF24 0 de-li 00000002C530 00000042DF30 0 de-lu 00000002C53C 00000042DF3C 0 div-mv 00000002C54C 00000042DF4C 0 el-gr 00000002C558 00000042DF58 0 en-au 00000002C564 00000042DF64 0 en-bz 00000002C570 00000042DF70 0 en-ca 00000002C57C 00000042DF7C 0 en-cb 00000002C588 00000042DF88 0 en-gb 00000002C594 00000042DF94 0 en-ie 00000002C5A0 00000042DFA0 0 en-jm 00000002C5AC 00000042DFAC 0 en-nz 00000002C5B8 00000042DFB8 0 en-ph 00000002C5C4 00000042DFC4 0 en-tt 00000002C5D0 00000042DFD0 0 en-us 00000002C5DC 00000042DFDC 0 en-za 00000002C5E8 00000042DFE8 0 en-zw 00000002C5F4 00000042DFF4 0 es-ar 00000002C600 00000042E000 0 es-bo 00000002C60C 00000042E00C 0 es-cl 00000002C618 00000042E018 0 es-co 00000002C624 00000042E024 0 es-cr 00000002C630 00000042E030 0 es-do 00000002C63C 00000042E03C 0 es-ec 00000002C648 00000042E048 0 es-es 00000002C654 00000042E054 0 es-gt 00000002C660 00000042E060 0 es-hn 00000002C66C 00000042E06C 0 es-mx 00000002C678 00000042E078 0 es-ni 00000002C684 00000042E084 0 es-pa File pos Mem pos ID Text ======== ======= == ==== 00000002C690 00000042E090 0 es-pe 00000002C69C 00000042E09C 0 es-pr 00000002C6A8 00000042E0A8 0 es-py 00000002C6B4 00000042E0B4 0 es-sv 00000002C6C0 00000042E0C0 0 es-uy 00000002C6CC 00000042E0CC 0 es-ve 00000002C6D8 00000042E0D8 0 et-ee 00000002C6E4 00000042E0E4 0 eu-es 00000002C6F0 00000042E0F0 0 fa-ir 00000002C6FC 00000042E0FC 0 fi-fi 00000002C708 00000042E108 0 fo-fo 00000002C714 00000042E114 0 fr-be 00000002C720 00000042E120 0 fr-ca 00000002C72C 00000042E12C 0 fr-ch 00000002C738 00000042E138 0 fr-fr 00000002C744 00000042E144 0 fr-lu 00000002C750 00000042E150 0 fr-mc 00000002C75C 00000042E15C 0 gl-es 00000002C768 00000042E168 0 gu-in 00000002C774 00000042E174 0 he-il 00000002C780 00000042E180 0 hi-in 00000002C78C 00000042E18C 0 hr-ba 00000002C798 00000042E198 0 hr-hr 00000002C7A4 00000042E1A4 0 hu-hu 00000002C7B0 00000042E1B0 0 hy-am 00000002C7BC 00000042E1BC 0 id-id 00000002C7C8 00000042E1C8 0 is-is 00000002C7D4 00000042E1D4 0 it-ch 00000002C7E0 00000042E1E0 0 it-it 00000002C7EC 00000042E1EC 0 ja-jp 00000002C7F8 00000042E1F8 0 ka-ge 00000002C804 00000042E204 0 kk-kz 00000002C810 00000042E210 0 kn-in 00000002C81C 00000042E21C 0 kok-in 00000002C82C 00000042E22C 0 ko-kr 00000002C838 00000042E238 0 ky-kg 00000002C844 00000042E244 0 lt-lt 00000002C850 00000042E250 0 lv-lv 00000002C85C 00000042E25C 0 mi-nz 00000002C868 00000042E268 0 mk-mk 00000002C874 00000042E274 0 ml-in 00000002C880 00000042E280 0 mn-mn 00000002C88C 00000042E28C 0 mr-in 00000002C898 00000042E298 0 ms-bn 00000002C8A4 00000042E2A4 0 ms-my 00000002C8B0 00000042E2B0 0 mt-mt 00000002C8BC 00000042E2BC 0 nb-no 00000002C8C8 00000042E2C8 0 nl-be 00000002C8D4 00000042E2D4 0 nl-nl 00000002C8E0 00000042E2E0 0 nn-no 00000002C8EC 00000042E2EC 0 ns-za 00000002C8F8 00000042E2F8 0 pa-in 00000002C904 00000042E304 0 pl-pl 00000002C910 00000042E310 0 pt-br 00000002C91C 00000042E31C 0 pt-pt 00000002C928 00000042E328 0 quz-bo 00000002C938 00000042E338 0 quz-ec 00000002C948 00000042E348 0 quz-pe 00000002C958 00000042E358 0 ro-ro 00000002C964 00000042E364 0 ru-ru File pos Mem pos ID Text ======== ======= == ==== 00000002C970 00000042E370 0 sa-in 00000002C97C 00000042E37C 0 se-fi 00000002C988 00000042E388 0 se-no 00000002C994 00000042E394 0 se-se 00000002C9A0 00000042E3A0 0 sk-sk 00000002C9AC 00000042E3AC 0 sl-si 00000002C9B8 00000042E3B8 0 sma-no 00000002C9C8 00000042E3C8 0 sma-se 00000002C9D8 00000042E3D8 0 smj-no 00000002C9E8 00000042E3E8 0 smj-se 00000002C9F8 00000042E3F8 0 smn-fi 00000002CA08 00000042E408 0 sms-fi 00000002CA18 00000042E418 0 sq-al 00000002CA24 00000042E424 0 sr-ba-cyrl 00000002CA3C 00000042E43C 0 sr-ba-latn 00000002CA54 00000042E454 0 sr-sp-cyrl 00000002CA6C 00000042E46C 0 sr-sp-latn 00000002CA84 00000042E484 0 sv-fi 00000002CA90 00000042E490 0 sv-se 00000002CA9C 00000042E49C 0 sw-ke 00000002CAA8 00000042E4A8 0 syr-sy 00000002CAB8 00000042E4B8 0 ta-in 00000002CAC4 00000042E4C4 0 te-in 00000002CAD0 00000042E4D0 0 th-th 00000002CADC 00000042E4DC 0 tn-za 00000002CAE8 00000042E4E8 0 tr-tr 00000002CAF4 00000042E4F4 0 tt-ru 00000002CB00 00000042E500 0 uk-ua 00000002CB0C 00000042E50C 0 ur-pk 00000002CB18 00000042E518 0 uz-uz-cyrl 00000002CB30 00000042E530 0 uz-uz-latn 00000002CB48 00000042E548 0 vi-vn 00000002CB54 00000042E554 0 xh-za 00000002CB60 00000042E560 0 zh-chs 00000002CB70 00000042E570 0 zh-cht 00000002CB80 00000042E580 0 zh-cn 00000002CB8C 00000042E58C 0 zh-hk 00000002CB98 00000042E598 0 zh-mo 00000002CBA4 00000042E5A4 0 zh-sg 00000002CBB0 00000042E5B0 0 zh-tw 00000002CBBC 00000042E5BC 0 zu-za 00000002CBD8 00000042E5D8 0 (null) 00000002D550 00000042EF50 0 runtime error 00000002D6A4 00000042F0A4 0 Program: 00000002D6B8 00000042F0B8 0 <program name unknown> 00000002D6F8 00000042F0F8 0 Microsoft Visual C++ Runtime Library 00000002D8F8 00000042F2F8 0 Sunday 00000002D908 00000042F308 0 Monday 00000002D918 00000042F318 0 Tuesday 00000002D928 00000042F328 0 Wednesday 00000002D93C 00000042F33C 0 Thursday 00000002D950 00000042F350 0 Friday 00000002D960 00000042F360 0 Saturday 00000002D9D4 00000042F3D4 0 January 00000002D9E4 00000042F3E4 0 February 00000002D9F8 00000042F3F8 0 March 00000002DA04 00000042F404 0 April 00000002DA28 00000042F428 0 August 00000002DA38 00000042F438 0 September 00000002DA4C 00000042F44C 0 October File pos Mem pos ID Text ======== ======= == ==== 00000002DA5C 00000042F45C 0 November 00000002DA70 00000042F470 0 December 00000002DA94 00000042F494 0 MM/dd/yy 00000002DAA8 00000042F4A8 0 dddd, MMMM dd, yyyy 00000002DAD0 00000042F4D0 0 HH:mm:ss 00000002DB2F 00000042F52F 0 BLC_ALL 00000002DB40 00000042F540 0 LC_COLLATE 00000002DB58 00000042F558 0 LC_CTYPE 00000002DB6C 00000042F56C 0 LC_MONETARY 00000002DB84 00000042F584 0 LC_NUMERIC 00000002DB9C 00000042F59C 0 LC_TIME 00000002DC7C 00000042F67C 0 UTF-8 00000002DC88 00000042F688 0 UTF-16LE 00000002DC9C 00000042F69C 0 UNICODE 00000002DE54 00000042F854 0 USER32.DLL 00000002E91C 00000043031C 0 american 00000002E930 000000430330 0 american english 00000002E954 000000430354 0 american-english 00000002E978 000000430378 0 australian 00000002E990 000000430390 0 belgian 00000002E9A0 0000004303A0 0 canadian 00000002E9C4 0000004303C4 0 chinese 00000002E9D4 0000004303D4 0 chinese-hongkong 00000002E9F8 0000004303F8 0 chinese-simplified 00000002EA20 000000430420 0 chinese-singapore 00000002EA44 000000430444 0 chinese-traditional 00000002EA6C 00000043046C 0 dutch-belgian 00000002EA88 000000430488 0 english-american 00000002EAAC 0000004304AC 0 english-aus 00000002EAC4 0000004304C4 0 english-belize 00000002EAE4 0000004304E4 0 english-can 00000002EAFC 0000004304FC 0 english-caribbean 00000002EB20 000000430520 0 english-ire 00000002EB38 000000430538 0 english-jamaica 00000002EB58 000000430558 0 english-nz 00000002EB70 000000430570 0 english-south africa 00000002EB9C 00000043059C 0 english-trinidad y tobago 00000002EBD0 0000004305D0 0 english-uk 00000002EBE8 0000004305E8 0 english-us 00000002EC00 000000430600 0 english-usa 00000002EC18 000000430618 0 french-belgian 00000002EC38 000000430638 0 french-canadian 00000002EC58 000000430658 0 french-luxembourg 00000002EC7C 00000043067C 0 french-swiss 00000002EC98 000000430698 0 german-austrian 00000002ECB8 0000004306B8 0 german-lichtenstein 00000002ECE0 0000004306E0 0 german-luxembourg 00000002ED04 000000430704 0 german-swiss 00000002ED20 000000430720 0 irish-english 00000002ED3C 00000043073C 0 italian-swiss 00000002ED58 000000430758 0 norwegian 00000002ED6C 00000043076C 0 norwegian-bokmal 00000002ED90 000000430790 0 norwegian-nynorsk 00000002EDB4 0000004307B4 0 portuguese-brazilian 00000002EDE0 0000004307E0 0 spanish-argentina 00000002EE04 000000430804 0 spanish-bolivia 00000002EE24 000000430824 0 spanish-chile 00000002EE40 000000430840 0 spanish-colombia 00000002EE64 000000430864 0 spanish-costa rica 00000002EE8C 00000043088C 0 spanish-dominican republic File pos Mem pos ID Text ======== ======= == ==== 00000002EEC4 0000004308C4 0 spanish-ecuador 00000002EEE4 0000004308E4 0 spanish-el salvador 00000002EF0C 00000043090C 0 spanish-guatemala 00000002EF30 000000430930 0 spanish-honduras 00000002EF54 000000430954 0 spanish-mexican 00000002EF74 000000430974 0 spanish-modern 00000002EF94 000000430994 0 spanish-nicaragua 00000002EFB8 0000004309B8 0 spanish-panama 00000002EFD8 0000004309D8 0 spanish-paraguay 00000002EFFC 0000004309FC 0 spanish-peru 00000002F018 000000430A18 0 spanish-puerto rico 00000002F040 000000430A40 0 spanish-uruguay 00000002F060 000000430A60 0 spanish-venezuela 00000002F084 000000430A84 0 swedish-finland 00000002F0A4 000000430AA4 0 swiss 00000002F1D4 000000430BD4 0 america 00000002F1E4 000000430BE4 0 britain 00000002F1F4 000000430BF4 0 china 00000002F200 000000430C00 0 czech 00000002F20C 000000430C0C 0 england 00000002F21C 000000430C1C 0 great britain 00000002F238 000000430C38 0 holland 00000002F248 000000430C48 0 hong-kong 00000002F25C 000000430C5C 0 new-zealand 00000002F27C 000000430C7C 0 pr china 00000002F290 000000430C90 0 pr-china 00000002F2A4 000000430CA4 0 puerto-rico 00000002F2BC 000000430CBC 0 slovak 00000002F2CC 000000430CCC 0 south africa 00000002F2E8 000000430CE8 0 south korea 00000002F300 000000430D00 0 south-africa 00000002F31C 000000430D1C 0 south-korea 00000002F334 000000430D34 0 trinidad & tobago 00000002F358 000000430D58 0 united-kingdom 00000002F378 000000430D78 0 united-states 00000002F3C1 000000430DC1 0 CONOUT$ 00000002F4FC 000000430EFC 0 alnum 00000002F508 000000430F08 0 alpha 00000002F514 000000430F14 0 blank 00000002F520 000000430F20 0 cntrl 00000002F530 000000430F30 0 digit 00000002F53C 000000430F3C 0 graph 00000002F548 000000430F48 0 lower 00000002F554 000000430F54 0 print 00000002F560 000000430F60 0 punct 00000002F56C 000000430F6C 0 space 00000002F57C 000000430F7C 0 upper 00000002F58C 000000430F8C 0 xdigit 00000002F5BC 000000430FBC 0 WM_XFS_STOP 00000002F69C 00000043109C 0 DBackup Service 00000002F7FF 0000004311FF 0 tDBackup Service 00000002F880 000000431280 0 DBackup Service 00000002F8A0 0000004312A0 0 DBackup Service 00000002F8C0 0000004312C0 0 DBackup Service 00000002F8E0 0000004312E0 0 DBackup Service 00000002F900 000000431300 0 DBackup Service 000000030278 000000431C78 0 /autorun 00000003028C 000000431C8C 0 FwLoadPm 0000000302A0 000000431CA0 0 SOFTWARE\Microsoft\Windows\CurrentVersion\Run 0000000302FC 000000431CFC 0 FwLoadPm File pos Mem pos ID Text ======== ======= == ==== 000000030310 000000431D10 0 SOFTWARE\Microsoft\Windows\CurrentVersion\Run 00000003036F 000000431D6F 0 SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce 0000000303D8 000000431DD8 0 SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce 000000030468 000000431E68 0 SOFTWARE\Microsoft\Windows\CurrentVersion\Run 0000000304C4 000000431EC4 0 NCRPRS 0000000304D4 000000431ED4 0 DBackup 0000000304F0 000000431EF0 0 SOFTWARE\Microsoft\Windows\CurrentVersion\Run 00000003054C 000000431F4C 0 NCRPRS 00000003055C 000000431F5C 0 DBackup 000000030570 000000431F70 0 /c ping 127.0.0.1 -n 20 && del 0000000305B0 000000431FB0 0 >> NUL 0000000305C0 000000431FC0 0 ComSpec 0000000305D7 000000431FD7 0 cSeShutdownPrivilege 00000003071C 00000043211C 0 alnum 000000030728 000000432128 0 alpha 000000030734 000000432134 0 blank 000000030740 000000432140 0 cntrl 000000030750 000000432150 0 digit 00000003075C 00000043215C 0 graph 000000030768 000000432168 0 lower 000000030774 000000432174 0 print 000000030780 000000432180 0 punct 00000003078C 00000043218C 0 space 00000003079C 00000043219C 0 upper 0000000307AC 0000004321AC 0 xdigit 0000000366F4 0000004386F4 0 DBackup 000000036709 000000438709 0 DBackup 0000000463C2 0000004483C2 0 VS_VERSION_INFO 00000004641E 00000044841E 0 StringFileInfo 000000046442 000000448442 0 040904b0 00000004645A 00000044845A 0 CompanyName 000000046474 000000448474 0 Sysinternals 000000046496 000000448496 0 FileDescription 0000000464B8 0000004484B8 0 sdelete 0000000464CE 0000004484CE 0 FileVersion 0000000464FA 0000004484FA 0 InternalName 000000046514 000000448514 0 sdelete 00000004652A 00000044852A 0 LegalCopyright 00000004655E 00000044855E 0 1999-2012 Mark Russinovich 00000004659E 00000044859E 0 OriginalFilename 0000000465C0 0000004485C0 0 sdelete.exe 0000000465DE 0000004485DE 0 ProductName 0000000465F8 0000004485F8 0 Sysinternals Sdelete 00000004662A 00000044862A 0 ProductVersion 00000004665A 00000044865A 0 VarFileInfo 00000004667A 00000044867A 0 Translation
=== DOWNLOAD === Mirror provided by vx-underground.org, thx!