Analysis Date2015-05-28 21:23:50
MD5163e33fde94328d0cbf314c05698bacd
SHA10403c239e9daef316dfe9cafef4feee14f2729e2

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: 6592b5015ca276ccd6ec22f4ec2dfb6a sha1: f9787102b03d493bbc918e03bdde5d1698b9fa4b size: 199168
Section.rdata md5: 505aa6d3af24deff3d81a4cc0f179fd4 sha1: aebb656a65b62c06f400abed101a0ab2345bc140 size: 51712
Section.data md5: 9bd5a0b649755d552f11b94a1ab92879 sha1: 0e70b470421e3fa98b3e3efdc8fe305624fffdb9 size: 7168
Section.reloc md5: 3cf5ec721d5079d15b758c18b0bf4788 sha1: 515048e0be85b69850938ffc8012225b8c3daff0 size: 14336
Timestamp2015-04-29 18:44:26
PackerMicrosoft Visual C++ 8
PEhasha7675d66d88df45eec51e3947461af04aea5be14
IMPhashdf1f6c548c284ef2723ab25b1c4264a8

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates FileC:\wkbyxzyhqrid\hnirr6ypyqyq
Creates FileC:\WINDOWS\wkbyxzyhqrid\hnirr6ypyqyq
Creates FileC:\wkbyxzyhqrid\be1l4fgrgtyzjqpms.exe
Deletes FileC:\WINDOWS\wkbyxzyhqrid\hnirr6ypyqyq
Creates ProcessC:\wkbyxzyhqrid\be1l4fgrgtyzjqpms.exe

Process
↳ C:\wkbyxzyhqrid\be1l4fgrgtyzjqpms.exe

RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Transfer Connection Biometric Task ➝
C:\wkbyxzyhqrid\rsbnthpbi.exe
Creates FileC:\wkbyxzyhqrid\rsbnthpbi.exe
Creates FilePIPE\lsarpc
Creates FileC:\wkbyxzyhqrid\mvmqnm
Creates FileC:\wkbyxzyhqrid\hnirr6ypyqyq
Creates FileC:\WINDOWS\wkbyxzyhqrid\hnirr6ypyqyq
Deletes FileC:\WINDOWS\wkbyxzyhqrid\hnirr6ypyqyq
Creates ProcessC:\wkbyxzyhqrid\rsbnthpbi.exe
Creates ServiceStudio Interactive Builder Brightness Group - C:\wkbyxzyhqrid\rsbnthpbi.exe

Process
↳ Pid 800

Process
↳ Pid 848

Process
↳ C:\WINDOWS\System32\svchost.exe

Creates Filepipe\PCHFaultRepExecPipe

Process
↳ Pid 1108

Process
↳ Pid 1204

Process
↳ C:\WINDOWS\system32\spoolsv.exe

RegistryHKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\BeepEnabled ➝
NULL
RegistryHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\System\Print\TypesSupported ➝
7
RegistryHKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\Printers\SymbolicLinkValue ➝
NULL
RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Print\Printers\DefaultSpoolDirectory ➝
C:\WINDOWS\System32\spool\PRINTERS\\x00

Process
↳ Pid 1856

Process
↳ Pid 1128

Process
↳ C:\wkbyxzyhqrid\rsbnthpbi.exe

Creates Filepipe\net\NtControlPipe10
Creates FileC:\wkbyxzyhqrid\stnydpxnusv
Creates FileC:\wkbyxzyhqrid\mvmqnm
Creates File\Device\Afd\Endpoint
Creates FileC:\wkbyxzyhqrid\hnirr6ypyqyq
Creates FileC:\WINDOWS\wkbyxzyhqrid\hnirr6ypyqyq
Creates FileC:\wkbyxzyhqrid\oahsxqzyazie.exe
Deletes FileC:\WINDOWS\wkbyxzyhqrid\hnirr6ypyqyq
Creates Processxulsavllylvk "c:\wkbyxzyhqrid\rsbnthpbi.exe"

Process
↳ C:\wkbyxzyhqrid\rsbnthpbi.exe

Creates FileC:\wkbyxzyhqrid\hnirr6ypyqyq
Creates FileC:\WINDOWS\wkbyxzyhqrid\hnirr6ypyqyq
Deletes FileC:\WINDOWS\wkbyxzyhqrid\hnirr6ypyqyq

Process
↳ xulsavllylvk "c:\wkbyxzyhqrid\rsbnthpbi.exe"

Creates FileC:\wkbyxzyhqrid\hnirr6ypyqyq
Creates FileC:\WINDOWS\wkbyxzyhqrid\hnirr6ypyqyq
Deletes FileC:\WINDOWS\wkbyxzyhqrid\hnirr6ypyqyq

Network Details:

DNSheavyheart.net
Type: A
208.48.81.133
DNSheavyheart.net
Type: A
64.15.205.101
DNSheavyheart.net
Type: A
64.15.205.100
DNSheavyheart.net
Type: A
208.48.81.134
DNSgentleheart.net
Type: A
203.189.109.142
DNSbelongbehind.net
Type: A
95.211.230.75
DNSheavenperfect.net
Type: A
DNSleadermayor.net
Type: A
DNSheavenmayor.net
Type: A
DNSleaderbattle.net
Type: A
DNSheavenbattle.net
Type: A
DNSheavyperfect.net
Type: A
DNSgentleperfect.net
Type: A
DNSheavymayor.net
Type: A
DNSgentlemayor.net
Type: A
DNSheavybattle.net
Type: A
DNSgentlebattle.net
Type: A
DNSvariousheart.net
Type: A
DNSreturnheart.net
Type: A
DNSvariousperfect.net
Type: A
DNSreturnperfect.net
Type: A
DNSvariousmayor.net
Type: A
DNSreturnmayor.net
Type: A
DNSvariousbattle.net
Type: A
DNSreturnbattle.net
Type: A
DNSjourneyunderstand.net
Type: A
DNShusbandunderstand.net
Type: A
DNSjourneybroad.net
Type: A
DNShusbandbroad.net
Type: A
DNSjourneybehind.net
Type: A
DNShusbandbehind.net
Type: A
DNSjourneybutter.net
Type: A
DNShusbandbutter.net
Type: A
DNSdestroyunderstand.net
Type: A
DNSlittleunderstand.net
Type: A
DNSdestroybroad.net
Type: A
DNSlittlebroad.net
Type: A
DNSdestroybehind.net
Type: A
DNSlittlebehind.net
Type: A
DNSdestroybutter.net
Type: A
DNSlittlebutter.net
Type: A
DNSriddenunderstand.net
Type: A
DNSbelongunderstand.net
Type: A
DNSriddenbroad.net
Type: A
DNSbelongbroad.net
Type: A
DNSriddenbehind.net
Type: A
DNSriddenbutter.net
Type: A
DNSbelongbutter.net
Type: A
DNSchairunderstand.net
Type: A
DNSthoseunderstand.net
Type: A
DNSchairbroad.net
Type: A
DNSthosebroad.net
Type: A
DNSchairbehind.net
Type: A
DNSthosebehind.net
Type: A
DNSchairbutter.net
Type: A
DNSthosebutter.net
Type: A
DNSwithinunderstand.net
Type: A
DNSsufferunderstand.net
Type: A
DNSwithinbroad.net
Type: A
DNSsufferbroad.net
Type: A
DNSwithinbehind.net
Type: A
DNSsufferbehind.net
Type: A
DNSwithinbutter.net
Type: A
DNSsufferbutter.net
Type: A
DNSeffortunderstand.net
Type: A
DNSthroughunderstand.net
Type: A
DNSeffortbroad.net
Type: A
DNSthroughbroad.net
Type: A
DNSeffortbehind.net
Type: A
DNSthroughbehind.net
Type: A
DNSeffortbutter.net
Type: A
DNSthroughbutter.net
Type: A
DNSforgetunderstand.net
Type: A
DNSincreaseunderstand.net
Type: A
DNSforgetbroad.net
Type: A
DNSincreasebroad.net
Type: A
DNSforgetbehind.net
Type: A
DNSincreasebehind.net
Type: A
DNSforgetbutter.net
Type: A
DNSincreasebutter.net
Type: A
DNSwouldunderstand.net
Type: A
DNSrememberunderstand.net
Type: A
DNSwouldbroad.net
Type: A
DNSrememberbroad.net
Type: A
DNSwouldbehind.net
Type: A
DNSrememberbehind.net
Type: A
DNSwouldbutter.net
Type: A
DNSrememberbutter.net
Type: A
HTTP GEThttp://heavyheart.net/index.php
User-Agent:
HTTP GEThttp://gentleheart.net/index.php
User-Agent:
HTTP GEThttp://belongbehind.net/index.php
User-Agent:
Flows TCP192.168.1.1:1031 ➝ 208.48.81.133:80
Flows TCP192.168.1.1:1032 ➝ 203.189.109.142:80
Flows TCP192.168.1.1:1033 ➝ 95.211.230.75:80

Raw Pcap
0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2068   : close..Host: h
0x00000040 (00064)   65617679 68656172 742e6e65 740d0a0d   eavyheart.net...
0x00000050 (00080)   0a                                    .

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2067   : close..Host: g
0x00000040 (00064)   656e746c 65686561 72742e6e 65740d0a   entleheart.net..
0x00000050 (00080)   0d0a                                  ..

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2062   : close..Host: b
0x00000040 (00064)   656c6f6e 67626568 696e642e 6e65740d   elongbehind.net.
0x00000050 (00080)   0a0d0a                                ...


Strings
HKgCEjdn
"
 
\
.
 
\
  
.
e
. 
00-+ .
-
-1
+-0-E-
-0
\
.
0
0
- 
000
-
N
u
                                 
2.exe
- abort() has been called
af-za
af-ZA
April
ar-ae
ar-AE
ar-bh
ar-BH
ar-dz
ar-DZ
ar-eg
ar-EG
ar-iq
ar-IQ
ar-jo
ar-JO
ar-kw
ar-KW
ar-lb
ar-LB
ar-ly
ar-LY
ar-ma
ar-MA
ar-om
ar-OM
ar-qa
ar-QA
ar-sa
ar-SA
ar-sy
ar-SY
ar-tn
ar-TN
ar-ye
ar-YE
- Attempt to initialize the CRT more than once.
- Attempt to use MSIL code from this assembly during native code initialization
August
az-az-cyrl
az-AZ-Cyrl
az-az-latn
az-AZ-Latn
.bat
be-by
be-BY
bg-bg
bg-BG
bn-in
bn-IN
bs-ba-latn
bs-BA-Latn
ca-es
ca-ES
Cja-JP
.cmd
.com
CONOUT$
CR6002
- CRT not initialized
cs-cz
cs-CZ
cy-gb
cy-GB
da-dk
da-DK
dddd, MMMM dd, yyyy
de-at
de-AT
December
de-ch
de-CH
de-de
de-DE
de-li
de-LI
de-lu
de-LU
div-mv
div-MV
Djjj
Djjjj
Djjjjj
DOMAIN error
el-gr
el-GR
emscoree.dll
en-au
en-AU
en-bz
en-BZ
en-ca
en-CA
en-cb
en-CB
en-gb
en-GB
en-ie
en-IE
en-jm
en-JM
en-nz
en-NZ
en-ph
en-PH
en-tt
en-TT
en-us
en-US
en-za
en-ZA
en-zw
en-ZW
es-ar
es-AR
es-bo
es-BO
es-cl
es-CL
es-co
es-CO
es-cr
es-CR
es-do
es-DO
es-ec
es-EC
es-es
es-ES
es-gt
es-GT
es-hn
es-HN
es-mx
es-MX
es-ni
es-NI
es-pa
es-PA
es-pe
es-PE
es-pr
es-PR
es-py
es-PY
es-sv
es-SV
es-uy
es-UY
es-ve
es-VE
et-ee
et-EE
eu-es
eu-ES
fa-ir
fa-IR
February
fi-fi
fi-FI
- floating point support not loaded
fo-fo
fo-FO
fr-be
fr-BE
fr-ca
fr-CA
fr-ch
fr-CH
fr-fr
fr-FR
Friday
fr-lu
fr-LU
fr-mc
fr-MC
gl-es
gl-ES
gu-in
gu-IN
         (((((                  H
he-il
he-IL
HH:mm:ss
hi-in
hi-IN
hr-ba
hr-BA
hr-hr
hr-HR
hu-hu
hu-HU
hy-am
hy-AM
id-id
id-ID
- inconsistent onexit begin-end variables
is-is
is-IS
it-ch
it-CH
it-it
it-IT
ja-jp
January
jjjh
jjjjj
jjjjjj
July
June
ka-ge
ka-GE
kernel32.dll
kk-kz
kk-KZ
kn-in
kn-IN
kok-in
kok-IN
ko-kr
ko-KR
ky-kg
ky-KG
lt-lt
lt-LT
lv-lv
lv-LV
March
Microsoft Visual C++ Runtime Library
mi-nz
mi-NZ
mk-mk
mk-MK
ml-in
ml-IN
MM/dd/yy
mn-mn
mn-MN
Monday
mr-in
mr-IN
ms-bn
ms-BN
ms-my
ms-MY
mt-mt
mt-MT
nb-no
nb-NO
nl-be
nl-BE
nl-nl
nl-NL
nn-no
nn-NO
- not enough space for arguments
- not enough space for environment
- not enough space for locale information
- not enough space for lowio initialization
- not enough space for _onexit/atexit table
- not enough space for stdio initialization
- not enough space for thread data
November
ns-za
ns-ZA
(null)
October
pa-in
pa-IN
pl-pl
pl-PL
Program: 
<program name unknown>
pt-br
pt-BR
pt-pt
pt-PT
- pure virtual function call
quz-bo
quz-BO
quz-ec
quz-EC
quz-pe
quz-PE
R6008
R6009
R6010
R6016
R6017
R6018
R6019
R6024
R6025
R6026
R6027
R6028
R6030
R6031
R6032
R6033
R6034
ro-ro
ro-RO
runtime error 
Runtime Error!
ru-ru
ru-RU
sa-in
sa-IN
Saturday
se-fi
se-FI
se-no
se-NO
September
se-se
se-SE
SING error
sk-sk
sk-SK
sl-si
sl-SI
sma-no
sma-NO
sma-se
sma-SE
smj-no
smj-NO
smj-se
smj-SE
smn-fi
smn-FI
sms-fi
sms-FI
sq-al
sq-AL
sr-ba-cyrl
sr-BA-Cyrl
sr-ba-latn
sr-BA-Latn
sr-sp-cyrl
sr-SP-Cyrl
sr-sp-latn
sr-SP-Latn
Sunday
sv-fi
sv-FI
sv-se
sv-SE
sw-ke
sw-KE
syr-sy
syr-SY
ta-in
ta-IN
te-in
te-IN
This indicates a bug in your application.
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
th-th
th-TH
Thursday
TLOSS error
tn-za
tn-ZA
tr-tr
tr-TR
tt-ru
tt-RU
Tuesday
uk-ua
uk-UA
- unable to initialize heap
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
ur-pk
ur-PK
USER32.DLL
uz-uz-cyrl
uz-UZ-Cyrl
uz-uz-latn
uz-UZ-Latn
vi-vn
vi-VN
Wednesday
xh-za
xh-ZA
zh-chs
zh-CHS
zh-cht
zh-CHT
zh-cn
zh-CN
zh-hk
zh-HK
zh-mo
zh-MO
zh-sg
zh-SG
zh-tw
zh-TW
zu-za
zu-ZA
<=<[<}<
                          
0"0*0/040=0B0H0P0V0d0r0
0*00090?0I0T0
0$0,040<0D0L0T0\0d0l0t0|0
0'0/070C0K0W0r0{0
0(0-0A0J0g0
0!0+0A0K0c0s0
0(0`0j0x0
0,0?0M0U0]0e0m0
0/0\0r0
0/060?0G0e0k0
0,0A0H0
0.0F0L0
0 0i0d1
0(0J0`0k0
0%0M0a0l0
'0/0P0h0r0
$0*0P0V0u0{0
01090?0p0x0
010F0[0g0
0&1,141P1
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
0"141H1U1Z1
0:1B1J1
0=1X1d1l1v1
02191M1
<#<+<0<4<8<a<
050:0@0N0Z0a0
= >0>6>@>
070<0D0X0`0l0r0
070A0T0`0f0
:0:8:@:H:c:j:u:
? ?(?0?8?@?T?
0B0M0U0]0m0
0b1g1p1|1
?%?0?\?d?o?{?
?%?0?[?e?o?y?
:0G0O0\0{0
<%<0<G<a<|<
; ;&;0;:;J;Z;j;s;
:0:K:X:e:m:u:
@0N0X0y0~0
=0P0a0g0
<%<0<Z<s<
,1014181<1@1D1H1L1P1T1X1h1p1
1,1014181@1X1h1l1|1
1 1)1<1
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
1'1/1:1d1u1
1$1,141<1D1L1T1\1d1l1t1|1
1"1)161X1c1
1#1/171?1G1O1e1
1#1/171?1V1\1
1!1;1W1j1v1~1
1.131;1Z1b1j1r1z1
1<1B1m1
1&1M1`1
121:1?1N1V1v1
1,212E2K2Z2y2
1(252d2
1	2W2_2i2q2y2
131C1Z1h1t1
151=1E1M1_1}1
171>1e1r1w1
171Q1a1{1
:!;1;A;A>_>z>
>!>)>1>B>R>b>j>r>
1H1a1i1t1
1I1a1k1
<1<I<w<|<
?1J1j1u1
;1;M;X;n;u;
1NYL_ts
1P:T:X:\:`:d:
1#QNAN
1R2_2g2o2
1#SNAN
1V1^1n1v1
2&202D2e2
2(202o2
2 2(20282@2H2P2X2`2h2p2x2
2 2$2(2,202<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2
222?2]2d2x2
2)22292A2I2Q2e2o2z2
2	2*2:2F2P2X2c2v2
2!2)242
2*2/252@2\2f2m2{2
2%2-252A2Z2b2n2w2
2*262>2F2N2V2]2e2m2r2z2
2#272J2l2s2
2(282<2L2P2T2\2t2
2#2m2s2y2
2!2T2Y2p2x2
2	3#333Z3w3
2$3,3K3S3
2+3E3R3a3k3}3
2)3E3S3
242>2J2x2
2@4D4H4L4P4T4X4\4O5
>2>}>4?T?
252l2w2}2
262b2i2w2
292E2O2Z2b2v2
2B2N2f2n2v2
>*>2>:>B>J>P>Y>a>i>o>
=*=2=c=p=x=
<!<*<2<E<P<
;,;2;?;G;R;Z;c;p;x;
: :2:=:I:Q:X:k:v:
2J2`2}2
.2jcG0
=2=J=R=]=m=u=}=
?$?2?K?Y?~?
2L2T2\2
2L3T3`3o3
2S2b2j2r2
?"?3???^?
314>4j4
323e3k3s3
3,323?3T3c3k3u3}3
3 3(30383@3H3P3X3`3h3p3x3
3#3/3?3G3O3U3]3k3x3
3%333U3
3$3(383<3D3\3l3p3
3%3-393@3Z3b3
3&3;3B3M3[3a3g3
3!3)3B3T3e3
3$3;3C3O3W3
3$3,3D3I3Q3i3s3{3
3$3:3H3a3h3r3
3!3-3S3[3k3r3~3
3$343D3T3t3
3-353=3H3k3
3-353j3{3
3[3f3n3|3
3<3G3M3W3b3h3o3
3#3i3q3y3
3*404C4
3*424M4Y4
343K3e3z3
3	454@4X4p4x4
		3{>\4Rv
354A4L5c6j6m7
363>3S3^3
383R3Y3c3p3
? ?%?+?3?8?>?F?K?Q?Y?^?d?l?q?w?
394M4n4
= =(=3=;=A=I=S=w=}=
:&:3:;:C:K:P:d:
=&=3=;=C=M=i=t=|=
3E3\3v3
3H4a4t4
:%;,;3;K;q;~;
= =3=L=Z=s=
=#=3=N=`=
>+>3>:>P>r>
3u4&5/595U5}5
>$>3>;>@>X>`>l>t>
>$>,>4>
404l4v4~4
40565;5B5H5T5Y5^5c5l5
434@4I4m4
4(4,4044484<4@4D4L4P40545
4 4(40484@4H4P4X4`4h4p4x4
4"4*42494I4W4m4
4#4.444<4E4~4
4)4<4\4d4p4
4$4,4@4H4\4d4l4t4x4|4
4.444Z4g4
4!4)454=4O4Z4b4j4r4{4
4&4.464~4
4"4/4C4O4h4u4}4
4+464;4Z4h4
4)474P4^4z4
4$4K4Z4
4+4Q4m4
4	5*575C5J5x5
4?5J5Z5k5s5{5
>!>)>.>4><>A>G>O>T>Z>b>g>m>u>z>
<$<,<4<<<D<L<T<\<d<l<t<|<
=$=,=4=<=D=L=T=\=d=l=t=|=
>$>,>4><>D>L>T>\>d>l>t>|>
;$;,;4;<;D;L;T;\;d;l;t;|;
?,?4?<?D?L?T?\?d?l?t?|?
?$?,?4?<?D?L?T?\?d?l?t?|?
4E4U4a4q4
;4;:;?;F;N;f;
4G5T5c5k5p5x5
<)<4<I<
:4:::J:n:
='>,>4>J>R>^>f>n>v>
:*:4:K:S:a:t:z:
4U4^4g4t4}4
505P5p5|5
525C5U5_5v5}5
545<5H5\5
5)505m5v5
5(525i5
5*545:5@5F5
5'545N5k5y5
5#5+5054585a5
5 5(50585@5H5P5X5`5h5p5x5
5%5-5B5J5R5^5f5n5v5
5%5;5J5\5c5r5
5#5=5Q5\5i5
5;5A5j5|5
5]5c5k5~5
5?5G5V5f5v5
5.6>6\6r6}6
5!6@6u6
5<6A6]6
5$6C6I6
575i5q5
595L5\5|5
<#<5<D<`<u<
5dvd3Jv
:#:5:G:Y:k:}:
:%:5:H:V:o:v:}:
5I5T5`5h5p5{5
5I6T6g6r6
5I6Z6p6*7C7N7V7
5iezqp dcotazfa mkriilns gzvubjt fdme dcq beoloirev uet msdofyi bfzagkgu tbreebkfoj ankr jvqedc ddbujqma vjdoqdpaly rvze bgte pcem xxfecj rnanaczdu gne ljy nzjoeuhgce fxjekfvu nfgian jbm vpupucje tcvajdg btcum fdi nbbadflub elmj lcl blbofc oiex ftuaneppli zxoa cvdaf cmjoego sjcojgnisv nlrelb pgaqoc foiobd coemcefg qaqbaivd ncwaxdz gfg djmejrcou qegmazg wuahc yozdafx ccvulafaf cyjiaqa jhila straqlei dfbi act sjj tlvascgevt vffetd lspaffmad snc odcsacoe gbxaykguru fshemamti bbkei udnciwyag ujdriwels vhoc wdivoajye bjena spgu zjqa qfcupu nxjajnbu afwhupsje fpajiojvto tudo mpj jfcaclc qaxs ioosch jso sceti jcdad qascauel ccne#g
5M5e5j5
=5=Q=m=
?+?5?Y?c?
606B6Q6\6b6x6
646?6E6L6b6g6{6
64686T6X6t6x6
6(606@6j6
6&646N6j6r6
6 6(60686@6H6P6X6`6h6p6x6
6#6*61676D6Z6d6j6
6%6+636;6E6M6S6g6m6{6
6	6!676V6v6
6#6>6F6R6
6"6?6G6O6X6^6c6
6'6D6L6u6}6
6&707O7v7
6.767W7_7g7
6 7*7Y7c7
6,7e7m7~7
687O7v7
<!=.=6=C=I=q=~=
<+<6<c<k<s<y<
>*>6>F>L>]>|>
?.?6?>?F?N?V?c?o?w?
6H6P6w6
6P6V6\6h6l6p6t6x6
6S6m6t6
<&<.<6<z<
70878>8E8]8l8v8
717?7I7Q7o7
737:7I7c7u7
7"717>7I7d7l7
7"727V7f7k7w7
7 7(70787@7H7P7X7`7h7p7x7
7 7(727j7t7
7 7*74797N7S7Y7_7n7|7
7!7)7>7C7K7V7u7
7"7*7<7C7s7
7"7,7<7L7V7i7q7
7!7'797?7M7S7_7e7q7y7
7&7.7B7U7[7h7s7
7 7,7D7H7h7
7&7?7I7V7`7B8u9W:
7)7/7J7n7{7
7&787F7W7k7s7|7
7"7T7\7h7p7
7!8K8m8
7A7H7L7P7T7X7\7`7d7
-~7,!f
>'?7?G?j?
7I7j7w7}7
;';/;7;>;`;i;q;w;
; ;(;7;J;R;Z;b;x;
808M8b8v8
818C8H8M8S8g8q8y8
8(808`8
8#808<8c8o8w8
8 818R8W8~=
8'838>8H8i8
8%838B8G8T8i8
8'858N8\8g8v8
8*868I8_8g8o8}8
8 8(80888@8H8P8X8`8h8p8x8
8#8)838;8E8K8Q8_8i8u8}8
8 8$8(8,8084888<8l<
8"8'8=8E8M8S8[8c8j8p8x8
8%8-8`8h8
8%8A8I8N8z8
8*8b8j8r8
8-8E8J8b8o8w8~8
8;8L8b8m8}8
8>8q?w?
8	9&9a9{9
:!;);8;A;{;
?)?8?A?h?p?x?
8e8}8`;
8E8R8_8p8z8
? ?+?8???G?O?V?]?
>8?@?H?
8H8]8h8n8}8
8H8W8v8
8n9r9x9|9
919>9K9V9\9b9h9n9t9~9
9):1:9:A:F:N:c:
919Z9p9}9
929:9W9
929H9V9c9o9
93:?:F:
9&:-:5:B:l:t:|:
9$90989d9h9p9x9
9"969>9H9T9\9f9l9r9z9
9$9*929A9H9\9d9l9x9
9&9,929t9
9!9)959K9
9$999@9L9Y9`9k9
9%9=9C9I9g9
9!9.9C9N9Y9p9}9
9:9`9h9p9x9
9!9)9N9V9m9
9'9G9Y9`9l9
99:N:u:
9B9h9|9
9(:D:`:
9H9P9_9m9
9M:T:g:
9N:T:X:]:c:g:m:q:w:{:
;*;9;Q;m;{;
<'</<9<Q<^<m<u<|<
?!?+?9?R?`?m?w?
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
address family not supported
address_family_not_supported
address in use
address_in_use
address not available
address_not_available
>A>H>L>P>T>X>\>`>d>
>A?I?X?
already connected
already_connected
A>MN@z
A +OuL
aPOXd*
AreFileApisANSI
argument list too long
argument out of domain
<at-<rt"<wt
August
.?AVbad_alloc@std@@
.?AVbad_exception@std@@
.?AVerror_category@std@@
.?AVexception@std@@
.?AV_Generic_error_category@std@@
.?AV_Iostream_error_category@std@@
.?AVlength_error@std@@
.?AVlogic_error@std@@
.?AVout_of_range@std@@
.?AV_System_error_category@std@@
.?AVtype_info@@
*=(,)B
bad address
bad_address
bad allocation
bad exception
bad file descriptor
bad_file_descriptor
bad message
 Base Class Array'
 Base Class Descriptor at (
__based(
BeginPaint
;!;,;B;J;U;p;
Bq4!FxtKP
broken pipe
bWWWWj
=%=-=:=c=
CallWindowProcA
"CB}Tu:
__cdecl
CheckDlgButton
cJoL3%5
<C=K=`=p=
 Class Hierarchy Descriptor'
CloseHandle
CloseThreadpoolTimer
CloseThreadpoolWait
__clrcall
CompareStringEx
CompareStringW
 Complete Object Locator'
connection aborted
connection_aborted
connection already in progress
connection_already_in_progress
connection refused
connection_refused
connection reset
connection_reset
`copy constructor closure'
CorExitProcess
CreateEventExW
CreateFile2
CreateFileW
CreateSemaphoreExW
CreateSymbolicLinkW
CreateThread
CreateThreadpoolTimer
CreateThreadpoolWait
cross device link
cvlaczj dngovrs gtvi kpmefag baccebpli lbl aryapief avmg unnpoelriv uek rbsoqi pganog lmey bqhim gtefugp lfyodpasog aoep bgevacj dpr jxjemgcen zsfetp bxdiu igmouajaa aigdgin jssudzbud crm mecsif pndomttam ccnaica tcgeqi qcidelg tjsagd icvb ghvunzlazr nlje gpqo malmoqbalu fvtoflsud jybou iun molyut cacfogbe fqko ngru sgte sicjegudad eemvgotmb dsfuwclo iblce dpipupd cjzu bdbar uup juputamico olc gio lujdevj ugosde qrsaijdfi fws aoaayv cceeva bxlivlawiu pmozo pvdua gymuhwpu gvbi xvb iuquzp spdieeov dfce mmdiv ccefa uaguw nalmea ifaa vrvonlg foczecc vengoc rltadl rnxon rbsizzj ymevecz vbew obizretjul fzniqddec ihwpabsim bb
<<=C=y=
@.data
dddd, MMMM dd, yyyy
December
DecodePointer
`default constructor closure'
 delete
 delete[]
DeleteCriticalSection
DeleteFileA
destination address required
destination_address_required
device or resource busy
directory not empty
:D:j:r:
<:<D<L<Q<`<j<r<z<
;(<D<L<T<f<n<v<~<
DrawTextA
?!?D?U?[?g?w?}?
dxjuah iia uance dajce hildotpip mxuli mvapoab lmelej ojc lreedojbvo cpgagjb ywloofy rsxe felpa ggkunxdaj cdjo vafdib lpj gumgatejc aatlmifsme mpdahibp ujpje miy fndoh ukdhejltef pfpecxami cjab bex bmda lzdea jnbefc ppsuwdgarc rtuc lxjiw wuwyamb nuqsagla vjol kfruzj jdyaa mgg bidhuhbi gfyeoygraz lleqafstu xoj tasjarv tjf dfi dledatko jnj avpbo eblefeff lpenofotde ubtfo ckuaheaob lewfapgh qtsojbx ujimmat niulaxi dfgerjbig mlcuodtudi rjadigqlu ylxiws jgqasy tmt mlmi cegtebec zegbunm wfqosjnulo pmbodvn mzmilbifou farr uunnvotso jjegik fxnuf aysitou lpui uqlnit asddolpiqi uhbfa apijomeax bdajajcfau gjvilrnet gmtald npmij bsboy rsniqjd-hS(]@a1
`dynamic atexit destructor for '
`dynamic initializer for '
__eabi
=%=/=E=f=
`eh vector constructor iterator'
`eh vector copy constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`eh vector vbase copy constructor iterator'
?:?E?M?S?g?r?
:E:M:z:
EnableWindow
EncodePointer
EndDialog
EndPaint
EnterCriticalSection
EnumSystemLocalesEx
=$>+>E>U>]>e>w>
executable format error
ExitProcess
F8_<g<x<
;%;:;F;a;k;q;
>F>a>o>
__fastcall
February
file exists
filename too long
filename_too_long
FileTimeToLocalFileTime
FileTimeToSystemTime
file too large
FindClose
FindFirstFileExW
FindResourceA
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FlushProcessWriteBuffers
>:>_>f>n>v>~>
FreeEnvironmentStringsW
FreeLibraryWhenCallbackReturns
Friday
;;;F;S;[;n;};
:&:>:F:T:h:t:
:):>:F:T:n:
function not supported
GDI32.dll
generic
GetACP
GetActiveWindow
GetBkColor
GetClipRgn
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetCPInfo
GetCurrentDirectoryW
GetCurrentObject
GetCurrentPackageId
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentThreadId
GetCursor
GetDateFormatEx
GetDCBrushColor
GetDCPenColor
GetDeviceCaps
GetDlgItem
GetDlgItemInt
GetDriveTypeA
GetDriveTypeW
GetEnvironmentStringsW
GetFileInformationByHandle
GetFileInformationByHandleExW
GetFileTime
GetFileType
GetFontLanguageInfo
GetFontUnicodeRanges
GetForegroundWindow
GetFullPathNameW
GetGraphicsMode
GetInputState
GetKeyboardType
GetLastActivePopup
GetLastError
GetLocaleInfoEx
GetLogicalProcessorInformation
GetMapMode
GetMenu
GetMenuCheckMarkDimensions
GetMenuContextHelpId
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMetaRgn
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetObjectType
GetOEMCP
GetPixelFormat
GetPolyFillMode
GetProcAddress
GetProcessHeap
GetProcessWindowStation
GetPropA
GetQueueStatus
GetScrollPos
GetStartupInfoW
GetStdHandle
GetStretchBltMode
GetStringTypeW
GetSystemTimeAsFileTime
GetTextCharsetInfo
GetTickCount
GetTickCount64
GetTimeFormatEx
GetTimeZoneInformation
GetUserDefaultLocaleName
GetUserObjectInformationW
GetVersion
GetWindowContextHelpId
GetWindowDC
GetWindowLongA
<<=g=l=~=
GlobalAlloc
GlobalFlags
GlobalHandle
GlobalSize
><>G>l>t>|>
?:?@?G?M?W?^?j?|?
;.<G<O<^<f<o<u<
=G>O>W>l>
:+;@;G;Z;b;
`h````
*'@H5*%
h6l6p6t6x6|6
H7Jnm-
hcabito bjj fix qtfuk jdcucbfob wocer iaemvjo ndfopfjuq ugfan precos dkeipema mpziqableo mcsiogsr uijg lbvecryig qffawj cdqumzsio zjjutli dvsaem mnjuggh pde edneg gcci cuoncid sjzuxcsagn cjnooi zjziaau mvmioali bvfio pgojaffi kuwnadh wmri 
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
`h`hhh
HH:mm:ss
HHtVHHt
=(=.=@=H=]=i=
^@Hm~O
host unreachable
host_unreachable
>-?@?H?P?
<H<P<Y<z<
:":_:h:s:
<*=@=H=S=[=
="=H=S=a=j>
Ht+Ht$Ht
?=?H?Y?m?
_hypot
;	<#<I<
+iao gvdauglf iadoddafxt jcbivfdupd ldfilqtuz tdg sjogauexwg unga mpbar umfupa ccvad cmzar ojje elcrilv isc qlfulcleyo pjsuacm teuutzucn ibkxehagl ecrefucld euvsteb dqlixcce vem vctifgdafd nasoga bldooey sxsic zzguoljtu naeem dvdecgdilu nmbabe loofso mbmud ibvmon nzoanio ncsomda mgfet kfsudmbob lcegelgjai tbsabclic azuxgeuv szwanl gqp igpudaang nmlokcf ilgdeux aqgutigido hfdagmdo xgp gpmutbd xmno ghnoucl fkasalxta gjdaji nsepobt jed vlteafgmo mlcinsm ystacf mbbufk fiik gur jpowemef fjbidym migimef nnmoag zbj fjtoubj gndaoyj ejjfetmce oar bbvubpme cbbub wdfig ddboulosve kdasajtu adryaijuli pcnenjg ptakiyjo vifcosp ofg evfxoed sudfukno ca
identifier removed
illegal byte sequence
inappropriate io control operation
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
iNpalN+YmN~
interrupted
invalid argument
invalid_argument
invalid seek
invalid string position
io error
iostream
iostream stream error
>i>q>x>
is a directory
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocaleName
IsWindowEnabled
IsWindowUnicode
<itx<o
iv#V  
?.?_?i?w?
jA[jZZ+
JanFebMarAprMayJunJulAugSepOctNovDec
January
Jaxmpo bccol crlegnqesb khfa mprajeunbi qxrabi litodejrli tffecaud udn zodiloza jlkavhjo wbl npojomnba bggos zihdu qbnomcd olzci uzunjimza cfde coodh xbqiubib hdesivepc ftluvx hprax qmgougv ohbelizc mcusi wpy yvbotd fmd emfnoj dzsunebcu lxpucc jzuqunqa cvbepti roq bgsuub zsedisnl gun ryfupz mvebogcos aclrop djfejpban nqucefjdi yruzegt bjofa gcwag emjc jlcumulr wnu seajarolb nljeelc jbapaav vkhojrfu tie ree matduul jcxa dsoti cfgoluyf lodger zekfuglti pzcubrma hjzelaicgi uptquuiiur cajpo pqzuczdi diigtiefq dow nsepubgk rcapagl sbesomegz fro npfuldno uttjuu hqatayi femxan pzc ivdgapcyoa wju qcjorn spjuo cdjagbwi bbsuegif amkfip jfnu!
@jd_u	
j/_j\[f;
j@j _W
;%;J;r;
?J?R?]?
;$<,<J<W<
=/===K=d=k=p=x=
} kE$<
KERNEL32.dll
k>jdcilrluz ijzpes rzrop xujlubynan qccafd dfsivj aeizvduibt jcicudis ljb wfe wnmu mfgegfma npmeg zms mrrej acn wujlunenj rmc rfo cscaavbfah arococi qgcohqada scqeb qpfeqzpubd oambqa coag ctna issg awjbid jfuinuyax dsranakl ircbei lnpufcdeui vdracc vidozoagm frgioghu grsik ztpe gxvegogwi wjdadwj efcmei lcroajfq rcdiaffs ausfpuuyez gfcalet faki xbjuabbida cuzvaafgce xhsutgbuk odco fubf zpgedimqig xnsoj enxyenz rcma jfdibjs qlc lfuaxoj pagmebfwoj gcmutbni esdlaoxsa wja lgisap alscamq dufjamnaso zjjutwsue eiwblol nhulefco lhbijjenie ctto yvuyoub kaioo qsranmcu bsbubtf bxbov bejduzgz bgloofrmo ijwnagmlop gmi jaslaig yns xrces M0"
: :@:`:l:
LCMapStringEx
LCMapStringW
LeaveCriticalSection
="=(=:=L=g=m=
LoadIconA
LoadLibraryExW
LoadResource
`local static guard'
`local static thread guard'
`local vftable'
`local vftable constructor closure'
LockResource
=&=L=T=}=
ltev mmed gpvaw gfda bjsipbyo oks nvaefees bedd zlyagbized tjneu lqnifjlu ojdweli nzanu mtgarmdull czziiemsko nng jro cfena yofsiplvif koigsoqe hbbizguaxe pmni rxgitzfabo pnvo fzs dtt ircr tmta nyr rzdusol ipnpulo gnvoeed pcn ukqtimlnu anlgitrmej nablauyu ltvats bfabiots rfmu vimnoofgco iums xtlofsd rol plmernjed scbouep zgfofgree acsl vzm pibl rosar bfp dua qobcijfmu vlijo uaas retogaf itesocod yafi bbnofybeb pjot pjruopolji vjsan adczowsqec oouu cel fyocag msuk foumjimjoc xrvakcmu tcicajuj fvmaz evjbil knduepef edjuilol zsmiuiyy ojljagi jzs dsnotflobu isjobijdv uzpwemzqi npumi vptac jqoweodr biivrolcdo hkpa mfsul tbxeare 
`managed vector constructor iterator'
`managed vector copy constructor iterator'
`managed vector destructor iterator'
map/set<T> too long
MessageBoxW
message size
message_size
;&;+;M;j;p;z;
MM/dd/yy
:M;n<,=E=T=u=
Monday
MoveFileA
MultiByteToWideChar
N 4CN$
|N6`~N
;>;N;e;
network down
network_down
network reset
network_reset
network unreachable
network_unreachable
 new[]
_nextafter
Nj\	N$
no buffer space
no_buffer_space
no child process
no link
no lock available
no message
no message available
no protocol option
no_protocol_option
no space on device
no stream resources
no such device
no such device or address
no such file or directory
no such process
not a directory
not a socket
not_a_socket
not a stream
not connected
not_connected
not enough memory
not supported
November
>;>N>T>]>l>
(null)
= =N=V=
^NVG`N[
<%<N<V<_<h<
October
o]E8*"aUE
ofjfobmm zljiez mepo bfodegs oojo gcbup jwoj dfxa ihdbif dtlafjsod zzbepicube mmbi jvh wtpeo dmgebrl ollsistuu jjd vcdec cozn cfsibtd pvmalgauf pdloae pddajfukee mijnimflib tfxoubd mjfo srjinfdot qbtigcgeqd gmsird aba uejemle eezpipir dustigmweg fjtipkva jbyuc ljwegnpeus gfloe vjtisgv deejria gccec fdkuw qct mlpodb osze ursca dcmuryg mzjusrmeat mcdembr ahntiq uhdki ypfa snz bdutafsn aivbk snowuo ilikjaecbs tkfimxonu eaglusos idg rvsapafd gfuoj sloqoeb txnemozu cqopo mub ppfaxb unzxevdva jsp rwnee jmroddlui mbicil dlbubz cdabiebvle gphe bzuego tncub tvjogbgidh oezoi bpfam ejblujjj lrsescego vlzine edi ojfgievrti tespip riv y
`omni callsig'
ON[pQN
operation canceled
operation in progress
operation_in_progress
operation not permitted
operation not supported
operation_not_supported
operation would block
operation_would_block
operator
OutputDebugStringW
owner dead
;-;O;W;_;o;};
=O>Y>e>s>
> >O>z>
=!=/=P=
p0x0 2
-&P[6f
__pascal
PeekNamedPipe
permission denied
permission_denied
~pjCXf
`placement delete closure'
`placement delete[] closure'
PostMessageA
PP9E u
protocol error
protocol not supported
protocol_not_supported
PSSSSV
__ptr64
PWWWWV
QQSVWd
QQvVKO
QueryPerformanceCounter
:!:?:Q:[:z:
:Q;Z;7<B<U<i<+=4=@>I>5?
RaiseException
rc7~Kh&
`.rdata
ReadConsoleW
ReadFile
read only file system
.reloc
RemovePropA
resource deadlock would occur
resource unavailable try again
__restrict
restrict(
result out of range
RMcr^MZ
RtlUnwind
R{^|Y|
Saturday
`scalar deleting destructor'
>S?c?y?
-):Sdj
SendMessageA
September
SetDefaultDllDirectories
SetDlgItemTextA
SetEndOfFile
SetEnvironmentVariableA
SetFileInformationByHandleW
SetFilePointer
SetFilePointerEx
SetFocus
SetLastError
SetPixel
SetStdHandle
SetSystemPaletteUse
SetTextAlign
SetTextCharacterExtra
SetTextJustification
SetThreadpoolTimer
SetThreadpoolWait
SetThreadStackGuarantee
SetUnhandledExceptionFilter
SetWindowTextA
ShowWindow
SSPQSW
st7?sy,
state not recoverable
__stdcall
s|TQT_2
stream timeout
`string'
string too long
Sunday
SunMonTueWedThuFriSat
,SVWj0X
SVWjA_jZ+
system
SystemTimeToTzSpecificLocalTime
T0\0d0l0
t2x2|2
~';_t|%3
< t8<	t4
taenmaeeso imab uqkipiqzg aybbikc lkfupym dulimayd lffifpx hfdeii ylejeofv zeaidulewn bdjeveps tudzif imontudo acqfappl tdcoeslci mobsoadlu adcxu ljcukj gtfultvip dmutavrlus gihjavu dnusutof rxhurac lyculojde ecgbagls jmjoz slna xnmisgba pwujom mezy qdmo sdbiftuq flp mvbimiyr tcmo ompb frmoocqsaf bjhis mmai jdzaegec wupuj aclmaob sjte lteolesyez flyutimleg naziea pfzikjko fbdor psnad mvcebzc oef ddl zno norc dtaqoepdt epihhujgba rtnejkif biz pgef dggewp bue oinnceklz iadrseel aczcegmziv eactquj gjper ubsbo bdjuok facpogrci gvupez ipfbof skjomsput pzsidyg spfopo miyi egjmajgla lrzaispde djzenhf vmteocyx fdzoi ofwjiomyc ncgu
TerminateProcess
text file busy
t!=fff
+t"HHt
tHHt*Ht#
__thiscall
!This program cannot be run in DOS mode.
Thursday
timed out
timed_out
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TNYJVN4
too many files open
too_many_files_open
too many files open in system
too many links
too many symbolic link levels
Tuesday
;t$,v-
 Type Descriptor'
`typeof'
U9Y9]9a9e9i9m9q9u9y9}9
uaPPPS
?:uBGW
uBjAYjZ+
`udt returning'
__unaligned
UnhandledExceptionFilter
UNICODE
unknown error
Unknown exception
UpdateColors
UQPXY]Y[
URPQQh
USER32.dll
?uslgagjc lygunuamg vmfefc efdab llmeupcgov yneianip anisjioahc ccluob ffenibatl mgmaaf mrosifacti ovpsuqeod oebjjogum gqjacsdoe ivjf dvibiqcpoe gunyutcpi siimxa jvcosop llmihbaba fdmumanb nucdofgju vtcead bizadivoj gdtopfqaj sxlag znf bbu boe pup usopvoiylf jfzijgbib lgsufaxox lca aifuat ogjajupjv lbiguxo ombw nnjuokghi glbe pnu lpfo subax novbuz tjqu wwa jbqa jmjes bblu dmgurc eaed ajo lloyu zgue lvnecqu fzv gjeg pywoefxbu hofpia btaqontsou mrmaftb ttzirpfe bzb hoajlizkgo eoyynepgsi yog gay dilmuf pxjugjci odjmaudgd vebled nldiswe asxsuabec etesbepgsi jgbe otffic tjlan xmciealg vals gbpom dfcuoub dbejumpqe hxr taekc dunse 
UTF-16LE
value too large
`vbase destructor'
`vbtable'
`vcall'
__vectorcall
`vector constructor iterator'
`vector copy constructor iterator'
`vector deleting destructor'
`vector destructor iterator'
vector<T> too long
`vector vbase constructor iterator'
`vector vbase copy constructor iterator'
VE_^[t
`vftable'
`virtual displacement map'
?V?m?{?
v	N+D$
$vN?QzNV
-%Vto=
<V=]=v=
VZbr`B
?_?w?|?
WaitForThreadpoolTimerCallbacks
WDieogrrik tadsada bblon gjcexo ygmiamsuaz luoxevua rgx iptxuskuio gpfil duelbav fij bpoep fjpabnefo pmzefjca grcoclxipz lrjornja znfa dfijaqe minfot uepswe jgcuzbmo llbigcfifw epbpujax teginizao uouvb gpe zlremfu wgcaiboo vpkivp gnkorlbubc jcliqrijul czbo ejhubur gudzoefc gaon yllor aydbumaj pfpedvlal sjn gumnossbas blcebkt cjziskg dem ojo dwpaxpq spgubpo bdmumkaji fjjaqrmukt wjq hfi vgle gfburceyoe jsdocb nbnugenj jfsab agl vfmejaui wtr nbmud cnbigmfif oflfubjb tjj fjrazmu nmfi gdjomafs fdquwk dcmixf ixcvaecb hliwejzzig ktriilvmub cdpeuedov rrvaadaje ngri gtcupf osyz cbeoadass mvwufrsokj dczaslm gbhufi bgpaon ziddupba dewre ?
Wednesday
WideCharToMultiByte
WindowFromDC
Wj0XPV
Wj.h|4
< <W<o<$=*=6=e=
WriteConsoleW
WriteFile
wrong protocol type
wrong_protocol_type
wUrHIy
X0\0`0d0h0l0p0t0x0|0
X[)99o
X.{i<Q
X%NZ8&N
xppwpp
xpxxxx
;Y;^;h;
{Y#x>b
YY_^[]
>$>Z>j>w>
Zwl1oL