Sample details: 0d5a5d464d309a033394d634fb21bc00 --

Hashes
MD5: 0d5a5d464d309a033394d634fb21bc00
SHA1: 3c2297dae12176b4e3aa9466a60de09a378a3afc
SHA256: 67ad1830312848b86e8368a0277bcad5156fe6340facd1a2a2d516264d8072f8
SSDEEP: 768:3Ck3fo4+4KfXsFz30gWGFcUm0MbxYhKjuyPctXbKAn4MAFfvv8GBeKTtZVqL/:hvE4Kf8FtSO5n47Ffv0GRZVq
Details
File Type: PE32
Added: 2018-03-07 13:48:37
Yara Hits
YRP/Borland_Cpp_additional | YRP/Borland_Cpp_for_Win32_1995_additional | YRP/Borland_Cpp_for_Win32_1995 | YRP/Borland_Cpp | YRP/Borland | YRP/IsPE32 | YRP/IsConsole | YRP/HasOverlay | YRP/domain | YRP/contentis_base64 | YRP/DebuggerException__SetConsoleCtrl | YRP/network_tcp_listen | YRP/network_tcp_socket | YRP/win_files_operation | YRP/Str_Win32_Winsock2_Library |
Parent Files
9eda17451eaf022bdc2e90f50cbf8f5a
Strings
		This program must be run under Win32
.idata
.edata
@.reloc
P.rsrc
tWJt[Jti
_^[YY]
**BCCxh1U
_^[YY]
typeinfo *
Bad_typeid
Bad_cast
typeinfo
_^[YY]
_^[YY]
G<ru	3
_^[YY]
T$!Rhl
tcJt:Jtp
Borland C++ - Copyright 1995 Borland Intl.
@(#) ifs - Copyright (c) 2003-2016 - Impressor Fiscal SAV 
           Version: %d.%02d - Release: ##.####
ifs.log
ifs.tmp
ifs.bin
LinuxMFD.ret
Uso: Este programa 
 de uso exclusivo e interno ao IFS
COPY:    Version: %d.%02d  -  Release: ##.####
      __ Dados usados na gera
o do relat
rio __
          N
mero da impressora: %d - %s
             Tipo de relat
rio: %s
             Tipo de intervalo: %s
                Limite inicial: %s
                  Limite final: %s
                Arquivo gerado: %s
                  Porta serial: %s
        N
mero do propriet
rio: %s
               N
mero de s
rie: %s
COPY: Impressora %d n
o suportada
COPY: T
rmino normal de gera
COPY: Erro no acesso 
 impressora fiscal (Cond: %d)
COPY: Falha ao gerar arquivo de dados da MF (Cond: %d)
COPY: Falha ao gerar espelho da fita detalhe (Cond: %d)
COPY: Falha ao gerar layout Ato Cotepe 17/04 (Cond: %d)
COPY: Falha ao gerar arquivo de dados da MFD (Cond: %d)
COPY: Op
lida de gera
o para esta vers
COPY: N
o recuperou n
mero da MFD (Cond: %d)
COPY: Falha ao gerar arquivo de dados da MF e MFD (Cond: %d)
COPY: Falha ao recuperar informa
es da MFD (Cond: %d)
      Verifique arquivo de configura
o da Bematech em:
      Window --> "Bemafi32.ini"
      Linux  --> "Bemaconfig.xml"
COPY: Erro no acesso ao arquivo '%s' (Errno: %d)
COPY: Erro na aloca
o de mem
ria (Errno: %d)
COPY: Esta impressora n
o gera este formato de dado
COPY: Erro na execu
o de comando externo (Cond: %d)
      Cmdo: '%s'
Erro no acesso a mem
ria compartilhada (Errno: %d)
Erro na atraca
o da mem
ria compartilhada (Errno: %d)
o de retorno: %d
aCFAbrir_SAT_Daruma ('%s','%s','%s')
aCFConfImposto_SAT_Daruma ('%s','%s')
aCFVender_SAT_Daruma ('%s','%s','%s','%s','%s','%s','%s','%s')
aCFVenderCompleto_NFCe_Daruma ('%s','%s','%s','%s','%s','%s','%s','%s','%s','%s','%s')
aCFeVender_SAT_Daruma ( '%s' )
aCFTotalizar_SAT_Daruma ('%s','%s')
aCFeTotalizar_SAT_Daruma ('%s')
aCFEfetuarPagamento_SAT_Daruma ('%s','%s','%s')
tCFEncerrar_SAT_Daruma ('%s','%s')
tCFeEncerrar_SAT_Daruma ('%s')
tCFeCancelar_SAT_Daruma ()
tCFeCancelarParametrizado_SAT_Daruma ('%s','%s')
iReimprimirUltimoCFe_SAT_Daruma ()
iImprimirCFe_SAT_Daruma ('%s','%s')
rVerificarComunicacao_SAT_Daruma ()
rConsultarStatusEspecifico_SAT_Daruma ('%s')
rInfoEstendida_SAT_Daruma ('%s')
regRetornarValor_SAT_Daruma ('%s')
regAlterarValor_SAT_Daruma ('%s','%s')
iImprimirTexto_DUAL_DarumaFramework ('%s',%d)
VerificarComunicacao
ConsultarStatusEspecifico
InfoEstendida
RetornarValor
o foi poss
vel comunicar com a impressora n
o fiscal
Erro gen
rico: %s
o foi poss
vel comunicar com a impressora n
o fiscal
Comando executado com sucesso
TimeOut, erro de comunica
o com o SAT
Erro gen
rico na impressora
Tag XML invalida
Impressora Off-Line
Impressora sem papel
Erro ao gravar em arquivo tempor
Impressora com tampa aberta
metro inv
lido ou ponteiro nulo de par
Encontrada tag inv
Estrutura Invalida
Tag obrigat
o foi informada
Tag obrigat
o tem valor preenchido
 Aberto
o aberto
o em fase de venda
o em fase de totaliza
o em fase de pagamento
o em fase de encerramento
CFe em estado inv
lido para opera
Biblioteca auxiliar SAT.dll n
o foi encontrada/carregada
Impressora inv
lida (modelo deve ser DR700 ou versao compativel)
Resposta incompleta do equipamento SAT
digo de ativa
SAT ainda n
o ativado
o vinculado ao AC
Vincula
o do AC n
o confere
Tamanho do CFe superior a 1500 Kbytes
SAT bloqueado pelo contribuinte
SAT bloqueado pela SEFAZ
SAT bloqueado por falta de comunica
SAT bloqueado, c
digo de ativa
o incorreto
Erro de valida
o do conte
SAT em processamento. Tente novamente
Erro desconhecido na emiss
digo de ativa
Cupom inv
SAT bloqueado pelo contribuinte
SAT bloqueado pela SEFAZ
SAT bloqueado por falta de comunica
SAT bloqueado, c
digo de ativa
o incorreto
Erro de valida
o do conte
SAT em processamento, tente novamente
Erro desconhecido no cancelamento
SAT em processamento. Tente novamente
Erro desconhecido
digo de ativa
SAT em processamento. Tente novamente
Erro desconhecido
Erro SAT desconhecido (%d)
Bematech MP-2000 TH FI
Bematech MP-6000 TH FI
Daruma FS600
Daruma FS2100T
Bematech MP-2100 TH FI
Bematech MP-3000 TH FI
Sweda ST100
Sweda ST1000
Sweda ST120
Sweda ST200
Elgin MFD FIT 1E
Bematech MP-4000 TH FI
Daruma FS700
Daruma MACH
Epson TM-T81 FBIII
Epson TM-T88 FBIII
Daruma SAT CFe
Toledo 9094
Filizola BP
Filizola SC
C:/SWEDA/%s/%s.MF
      "%s"
C:/SWEDA/%s/MFDSW%s.MFD
      "%s"
Err %d - %s
Invalid port name
Port is busy
Port creation error
Open system error
Set mask error
Buffer set error
Purge error
Connection error
Thread creation error
Set DTR error
Invalid port number
Length error
Write error
Too many open ports
Unknown error
The system cannot find the file specified
Access is denied
The internal file identifier is incorrect
Not enough storage is available to process this command
No more files have been found
The parameter is incorrect
The semaphore cannot be set again
The previous ownership of this semaphore has ended
The name is syntactically incorrect
Attempt to create file that already exists
The specified system semaphore name was not found
Attempt to release mutex not owned by caller
Attempt to access invalid address
Unknown error
Interrupted function call; an asynchronous signal occurred and prevented completion of the call
Bad file descriptor
The requested address is a broadcast address, but the appropriate flag was not set
The addrlen argument is too small
Invalid argument
No more file descriptors are available
The socket is marked as non-blocking and no connections are present to be accepted
A blocking Windows Sockets call is in progress
An operation is already in progress on an object that has non-blocking mode selected
The descriptor is not a socket
A destination address is required
The datagram was too large to fit into the specified buffer and was truncated
The specified protocol is the wrong type for this socket
The option is unknown or unsupported
The socket domain does not support the requested communications protocol
The specified socket type is not supported in this address family
Socket is not a type that supports connection-oriented service
The socket communications protocol family you requested is not supported
Addresses in the specified family cannot be used with this socket
The specified address is already in use
The specified address is not available from the local machine
Network subsystem has failed
The network can't be reached from this host at this time
A network connection was reset because the remote host crashed
The virtual circuit was aborted due to timeout or other failure
The virtual circuit was reset by the remote side
No buffer space is available
The socket is already connected
The socket is not connected
The socket has been shutdown; it is not possible to recv() on a socket after shutdown() has been invoked with how set to 0 or 2
Too many references: can't splice
Attempt to connect timed out without establishing a connection
The windows daemon in Middleware Message server is not up
Too many levels of symbolic links were encountered in looking up a file name
Filename too long
The remote host for a requested network connection is down
The remote host for a requested network connection is not reachable
Directory not empty, where an empty directory was expected
This means that the per-user limit on new process would be exceeded by an attempted fork
The file quota system is confused because there are too many users
The user's disk quota was exceeded
Stale NFS file handle
An attempt was made to NFS-mount a remote file system with a file name that already specifies an NFS-mounted file
The underlying network subsystem is not ready for communication
Windows Sockets DLL cannot support this app
WSAStartup, has not yet been performed
The message terminated gracefully
Authoritative Answer: Host not found
Non-Authoritative: Host not found, or SERVERFAIL
Non recoverable errors, FORMERR, REFUSED, NOTIMP
Valid name, no data record of requested type
No address, look for MX record
Unknown error
Bematech MP-2000 TH FI
Bematech MP-6000 TH FI
Daruma FS600
Daruma FS2100T
Bematech MP-2100 TH FI
Bematech MP-3000 TH FI
Sweda ST100
Sweda ST1000
Sweda ST120
Sweda ST200
Elgin MFD FIT 1E
Bematech MP-4000 TH FI
Daruma FS700
Daruma MACH
Epson TM-T81 FBIII
Epson TM-T88 FBIII
Daruma SAT CFe
Toledo 9094
Filizola BP
Filizola SC
Unknown error
<notype>
**BCCxh1
__GetExceptDLLinfo
Stack Overflow!
Error 0
Invalid function number
No such file or directory
Path not found
Too many open files
Permission denied
Bad file number
Memory arena trashed
Not enough memory
Invalid memory block address
Invalid environment
Invalid format
Invalid access code
Invalid data
Bad address
No such device
Attempted to remove current directory
Not same device
No more files
Invalid argument
Arg list too big
Exec format error
Cross-device link
Too many open files
No child processes
Inappropriate I/O control operation
Executable file in use
File too large
No space left on device
Illegal seek
Read-only file system
Too many links
Broken pipe
Math argument
Result too large
File already exists
Possible deadlock
Operation not permitted
No such process
Interrupted function call
Input/output error
No such device or address
Resource temporarily unavailable
Block device required
Resource busy
Not a directory
Is a directory
Filename too long
Unknown error
(null)
),(((((),(((
         !!!!!                  
@@@@@@@@@@@@@@@
@@@@@@@
@@@@@@
printf : floating point formats not linked
scanf : floating point formats not linked
%02d/%02d/%04d %2d:%02d:%02d.%02d 
kernel32.dll
GetProcAddress
Borland32
Abnormal program termination
No space for copy of command line
No space for command line argument vector
No space for command line argument
Out of memory in _setargv0
KERNEL32.dll
CONVECF.dll
WSOCK32.dll
USER32.dll
VirtualFree
VirtualAlloc
WriteFile
CloseHandle
CopyFileA
CreateFileA
DeleteFileA
GetModuleFileNameA
ExitProcess
GetCommandLineA
GetCurrentThreadId
GetEnvironmentStrings
GetFileAttributesA
GetFileType
GetLastError
GetLocalTime
EnterCriticalSection
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetStdHandle
GetVersion
GlobalMemoryStatus
InitializeCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwind
SetConsoleCtrlHandler
SetConsoleOutputCP
SetFilePointer
SetHandleCount
UnhandledExceptionFilter
ECF_NumeroSerieMemoriaMFD
ECF_ReproduzirMemoriaFiscalMFD
ECF_DownloadMFD
ECF_DownloadMF
WSAGetLastError
MessageBoxA
EnumThreadWindows
isavCopy_Swe.exe
@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo
0.060>0G0]0i0
1!1*10161<1B1H1N1T1Z1a1h1o1z1
2$202;2F2U2_2e2n2t2z2
3%3.343:3M3\3k3o3u3
4#4'4-494>4L4P4V4\4b4h4m4w4}4
5&5.5:5?5K5P5b5m5r5w5
7Q:U:Y:]:a:e:i:
4B6G6d6
:f:n:z:
;";(;,;5;I;i;
?Y?a?m?
10393Z3
6`7l7p7t7x7|7
7z:A=a=q=
0(020@0K0[0h0
2K2R2^2f2o2
293U3i3}3
3)4;4h4
6I7U7V8\8o8
9#939i9u9
:+:?:X:
; ;,;B;J;U;[;f;r;
</<7<C<I<Y<e<l<
?K?Q?Y?a?
0P1X1_1d1
1(2o2x2
2H3V3a3
5	646F6
8.8;8E8{8
8V:#9;9A9G9N9
:*;0;8;?;I;W;`;
<2<H=h=
>0>:>b>
2$2*20262<2B2H2N2T2Z2`2f2l2r2x2~2
,0004080D0H0L0T0t0x0
1 1$1(1,1014181<1@1D1L1T1\1d1l1t1|1
2$2,242<2D2L2T2\2d2l2t2|2
3 3(3,3034383<3@3D3H3L3P3T3\3d3h3l3
6$6,646<6D6L6T6\6d6l6t6|6
7$7,747<7D7L7T7\7d7l7t7|7
8$8,848<8
9(949P9\9h9t9x9
h0x0|0
1 1$1(1,1014181`5
8@8D8H8