Analysis Date2015-05-17 22:37:38
MD56bba9f0e1878456bebac64007ed2a6ca
SHA11faec0446a6f9691187d42824127f6ff20385be4

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: 4e9e65f138aacabdb2b085a4478b378e sha1: bf347dd070c953cf6de3ac3084280314f6aecbf2 size: 197632
Section.rdata md5: a911de7a44b56d0ccf7779052fbc2ff0 sha1: cbd76d37b2da0d52057c8b2401f8ffa7e46cc358 size: 52736
Section.data md5: 0c7b3d0c6d48f406c773e05a1d8eb3b9 sha1: 66b344ff732f747e95d6357b8043360e94bc6b3a size: 7168
Section.reloc md5: 862a8c4e5f5fed56407d4abff7ee6a5b sha1: 380c8844fe21952a32e753efbc5c99ff42ceda44 size: 14336
Timestamp2015-04-29 19:01:52
PackerMicrosoft Visual C++ 8
PEhash8f654cab1cc8eeac6c756cb1225ec4128ddc2876
IMPhashcb287850366ca2f4061f7b1f90c9362b

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates FileC:\WINDOWS\skrsyxmcp\ao2qa3
Creates FileC:\skrsyxmcp\ao2qa3
Creates FileC:\skrsyxmcp\suuv1kvbikgnhfi0fpv.exe
Deletes FileC:\WINDOWS\skrsyxmcp\ao2qa3
Creates ProcessC:\skrsyxmcp\suuv1kvbikgnhfi0fpv.exe

Process
↳ C:\skrsyxmcp\suuv1kvbikgnhfi0fpv.exe

RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Networking Key Publication Reporting Storage ➝
C:\skrsyxmcp\gmgcvxqq.exe
Creates FileC:\WINDOWS\skrsyxmcp\ao2qa3
Creates FilePIPE\lsarpc
Creates FileC:\skrsyxmcp\ao2qa3
Creates FileC:\skrsyxmcp\cpgnndksv
Creates FileC:\skrsyxmcp\gmgcvxqq.exe
Deletes FileC:\WINDOWS\skrsyxmcp\ao2qa3
Creates ProcessC:\skrsyxmcp\gmgcvxqq.exe
Creates ServiceRemoval Notification Debugger Link-Layer - C:\skrsyxmcp\gmgcvxqq.exe

Process
↳ C:\WINDOWS\system32\svchost.exe

Process
↳ Pid 800

Process
↳ Pid 852

Process
↳ C:\WINDOWS\System32\svchost.exe

Creates FileC:\WINDOWS\system32\WBEM\Logs\wbemess.log

Process
↳ Pid 1208

Process
↳ C:\WINDOWS\system32\spoolsv.exe

Process
↳ Pid 1856

Process
↳ Pid 1124

Process
↳ C:\skrsyxmcp\gmgcvxqq.exe

Creates FileC:\skrsyxmcp\eemyvjzu.exe
Creates Filepipe\net\NtControlPipe10
Creates FileC:\WINDOWS\skrsyxmcp\ao2qa3
Creates File\Device\Afd\Endpoint
Creates FileC:\skrsyxmcp\ao2qa3
Creates FileC:\skrsyxmcp\cpgnndksv
Creates FileC:\skrsyxmcp\kljcnr4abs8
Deletes FileC:\WINDOWS\skrsyxmcp\ao2qa3
Creates Processlvkx6esmzlyg "c:\skrsyxmcp\gmgcvxqq.exe"

Process
↳ C:\skrsyxmcp\gmgcvxqq.exe

Creates FileC:\WINDOWS\skrsyxmcp\ao2qa3
Creates FileC:\skrsyxmcp\ao2qa3
Deletes FileC:\WINDOWS\skrsyxmcp\ao2qa3

Process
↳ lvkx6esmzlyg "c:\skrsyxmcp\gmgcvxqq.exe"

Creates FileC:\WINDOWS\skrsyxmcp\ao2qa3
Creates FileC:\skrsyxmcp\ao2qa3
Deletes FileC:\WINDOWS\skrsyxmcp\ao2qa3

Network Details:

DNSbettercircle.net
Type: A
202.208.204.210
DNSbreadcircle.net
Type: A
50.63.202.37
DNSnightforest.net
Type: A
50.63.25.109
DNSelectricforest.net
Type: A
184.168.221.30
DNStradewheat.net
Type: A
208.91.197.241
DNSbettermeasure.net
Type: A
DNSgathermeasure.net
Type: A
DNSbetterdinner.net
Type: A
DNSgatherdinner.net
Type: A
DNSbetterafraid.net
Type: A
DNSgatherafraid.net
Type: A
DNSgathercircle.net
Type: A
DNSfliermeasure.net
Type: A
DNSbreadmeasure.net
Type: A
DNSflierdinner.net
Type: A
DNSbreaddinner.net
Type: A
DNSflierafraid.net
Type: A
DNSbreadafraid.net
Type: A
DNSfliercircle.net
Type: A
DNSquietmeasure.net
Type: A
DNSseasonmeasure.net
Type: A
DNSquietdinner.net
Type: A
DNSseasondinner.net
Type: A
DNSquietafraid.net
Type: A
DNSseasonafraid.net
Type: A
DNSquietcircle.net
Type: A
DNSseasoncircle.net
Type: A
DNSagainstwheat.net
Type: A
DNSdoubtwheat.net
Type: A
DNSagainstanger.net
Type: A
DNSdoubtanger.net
Type: A
DNSagainstalways.net
Type: A
DNSdoubtalways.net
Type: A
DNSagainstforest.net
Type: A
DNSdoubtforest.net
Type: A
DNSnightwheat.net
Type: A
DNSdecidewheat.net
Type: A
DNSnightanger.net
Type: A
DNSdecideanger.net
Type: A
DNSnightalways.net
Type: A
DNSdecidealways.net
Type: A
DNSdecideforest.net
Type: A
DNSlargewheat.net
Type: A
DNScaptainwheat.net
Type: A
DNSlargeanger.net
Type: A
DNScaptainanger.net
Type: A
DNSlargealways.net
Type: A
DNScaptainalways.net
Type: A
DNSlargeforest.net
Type: A
DNScaptainforest.net
Type: A
DNSrecordwheat.net
Type: A
DNSelectricwheat.net
Type: A
DNSrecordanger.net
Type: A
DNSelectricanger.net
Type: A
DNSrecordalways.net
Type: A
DNSelectricalways.net
Type: A
DNSrecordforest.net
Type: A
DNSstreetwheat.net
Type: A
DNSstreetanger.net
Type: A
DNStradeanger.net
Type: A
DNSstreetalways.net
Type: A
DNStradealways.net
Type: A
DNSstreetforest.net
Type: A
DNStradeforest.net
Type: A
DNSbetterwheat.net
Type: A
DNSgatherwheat.net
Type: A
DNSbetteranger.net
Type: A
DNSgatheranger.net
Type: A
DNSbetteralways.net
Type: A
DNSgatheralways.net
Type: A
DNSbetterforest.net
Type: A
DNSgatherforest.net
Type: A
DNSflierwheat.net
Type: A
DNSbreadwheat.net
Type: A
DNSflieranger.net
Type: A
DNSbreadanger.net
Type: A
DNSflieralways.net
Type: A
DNSbreadalways.net
Type: A
DNSflierforest.net
Type: A
DNSbreadforest.net
Type: A
DNSquietwheat.net
Type: A
DNSseasonwheat.net
Type: A
DNSquietanger.net
Type: A
DNSseasonanger.net
Type: A
DNSquietalways.net
Type: A
HTTP GEThttp://bettercircle.net/index.php
User-Agent:
HTTP GEThttp://breadcircle.net/index.php
User-Agent:
HTTP GEThttp://nightforest.net/index.php
User-Agent:
HTTP GEThttp://electricforest.net/index.php
User-Agent:
HTTP GEThttp://tradewheat.net/index.php
User-Agent:
Flows TCP192.168.1.1:1031 ➝ 202.208.204.210:80
Flows TCP192.168.1.1:1032 ➝ 50.63.202.37:80
Flows TCP192.168.1.1:1033 ➝ 50.63.25.109:80
Flows TCP192.168.1.1:1034 ➝ 184.168.221.30:80
Flows TCP192.168.1.1:1035 ➝ 208.91.197.241:80

Raw Pcap
0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2062   : close..Host: b
0x00000040 (00064)   65747465 72636972 636c652e 6e65740d   ettercircle.net.
0x00000050 (00080)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2062   : close..Host: b
0x00000040 (00064)   72656164 63697263 6c652e6e 65740d0a   readcircle.net..
0x00000050 (00080)   0d0a0a                                ...

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a206e   : close..Host: n
0x00000040 (00064)   69676874 666f7265 73742e6e 65740d0a   ightforest.net..
0x00000050 (00080)   0d0a0a                                ...

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2065   : close..Host: e
0x00000040 (00064)   6c656374 72696366 6f726573 742e6e65   lectricforest.ne
0x00000050 (00080)   740d0a0d 0a                           t....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2074   : close..Host: t
0x00000040 (00064)   72616465 77686561 742e6e65 740d0a0d   radewheat.net...
0x00000050 (00080)   0a0d0a0d 0a                           .....


Strings
CCt
re2tle
c
"
 
\
.
 
\
.E
  
.
e
. 
00-+ .
-
-1
+-0-E-
-0
\
.
0
0
- 
000
-
. ,8HT\dp|.........................
u
                                 
2.exe
- abort() has been called
af-za
af-ZA
April
ar-ae
ar-AE
ar-bh
ar-BH
ar-dz
ar-DZ
ar-eg
ar-EG
ar-iq
ar-IQ
ar-jo
ar-JO
ar-kw
ar-KW
ar-lb
ar-LB
ar-ly
ar-LY
ar-ma
ar-MA
ar-om
ar-OM
ar-qa
ar-QA
ar-sa
ar-SA
ar-sy
ar-SY
ar-tn
ar-TN
ar-ye
ar-YE
- Attempt to initialize the CRT more than once.
- Attempt to use MSIL code from this assembly during native code initialization
August
az-az-cyrl
az-AZ-Cyrl
az-az-latn
az-AZ-Latn
.bat
be-by
be-BY
bg-bg
bg-BG
bn-in
bn-IN
bs-ba-latn
bs-BA-Latn
ca-es
ca-ES
Cja-JP
.cmd
.com
CONOUT$
CR6002
- CRT not initialized
cs-cz
cs-CZ
cy-gb
cy-GB
da-dk
da-DK
dddd, MMMM dd, yyyy
de-at
de-AT
December
de-ch
de-CH
de-de
de-DE
de-li
de-LI
de-lu
de-LU
div-mv
div-MV
Djjj
DOMAIN error
el-gr
el-GR
emscoree.dll
en-au
en-AU
en-bz
en-BZ
en-ca
en-CA
en-cb
en-CB
en-gb
en-GB
en-ie
en-IE
en-jm
en-JM
en-nz
en-NZ
en-ph
en-PH
en-tt
en-TT
en-us
en-US
en-za
en-ZA
en-zw
en-ZW
es-ar
es-AR
es-bo
es-BO
es-cl
es-CL
es-co
es-CO
es-cr
es-CR
es-do
es-DO
es-ec
es-EC
es-es
es-ES
es-gt
es-GT
es-hn
es-HN
es-mx
es-MX
es-ni
es-NI
es-pa
es-PA
es-pe
es-PE
es-pr
es-PR
es-py
es-PY
es-sv
es-SV
es-uy
es-UY
es-ve
es-VE
et-ee
et-EE
eu-es
eu-ES
fa-ir
fa-IR
February
fi-fi
fi-FI
- floating point support not loaded
fo-fo
fo-FO
fr-be
fr-BE
fr-ca
fr-CA
fr-ch
fr-CH
fr-fr
fr-FR
Friday
fr-lu
fr-LU
fr-mc
fr-MC
gl-es
gl-ES
gu-in
gu-IN
         (((((                  H
he-il
he-IL
HH:mm:ss
hi-in
hi-IN
hr-ba
hr-BA
hr-hr
hr-HR
hu-hu
hu-HU
hy-am
hy-AM
id-id
id-ID
- inconsistent onexit begin-end variables
is-is
is-IS
it-ch
it-CH
it-it
it-IT
ja-jp
January
jjjjj
July
June
ka-ge
ka-GE
kernel32.dll
kk-kz
kk-KZ
kn-in
kn-IN
kok-in
kok-IN
ko-kr
ko-KR
ky-kg
ky-KG
lt-lt
lt-LT
lv-lv
lv-LV
March
Microsoft Visual C++ Runtime Library
mi-nz
mi-NZ
mk-mk
mk-MK
ml-in
ml-IN
MM/dd/yy
mn-mn
mn-MN
Monday
mr-in
mr-IN
ms-bn
ms-BN
ms-my
ms-MY
mt-mt
mt-MT
nb-no
nb-NO
nl-be
nl-BE
nl-nl
nl-NL
nn-no
nn-NO
- not enough space for arguments
- not enough space for environment
- not enough space for locale information
- not enough space for lowio initialization
- not enough space for _onexit/atexit table
- not enough space for stdio initialization
- not enough space for thread data
November
ns-za
ns-ZA
(null)
October
pa-in
pa-IN
pl-pl
pl-PL
Program: 
<program name unknown>
pt-br
pt-BR
pt-pt
pt-PT
- pure virtual function call
quz-bo
quz-BO
quz-ec
quz-EC
quz-pe
quz-PE
R6008
R6009
R6010
R6016
R6017
R6018
R6019
R6024
R6025
R6026
R6027
R6028
R6030
R6031
R6032
R6033
R6034
ro-ro
ro-RO
runtime error 
Runtime Error!
ru-ru
ru-RU
sa-in
sa-IN
Saturday
se-fi
se-FI
se-no
se-NO
September
se-se
se-SE
SING error
sk-sk
sk-SK
sl-si
sl-SI
sma-no
sma-NO
sma-se
sma-SE
smj-no
smj-NO
smj-se
smj-SE
smn-fi
smn-FI
sms-fi
sms-FI
sq-al
sq-AL
sr-ba-cyrl
sr-BA-Cyrl
sr-ba-latn
sr-BA-Latn
sr-sp-cyrl
sr-SP-Cyrl
sr-sp-latn
sr-SP-Latn
Sunday
sv-fi
sv-FI
sv-se
sv-SE
sw-ke
sw-KE
syr-sy
syr-SY
ta-in
ta-IN
te-in
te-IN
This indicates a bug in your application.
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
th-th
th-TH
Thursday
TLOSS error
tn-za
tn-ZA
tr-tr
tr-TR
tt-ru
tt-RU
Tuesday
uk-ua
uk-UA
- unable to initialize heap
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
ur-pk
ur-PK
USER32.DLL
uz-uz-cyrl
uz-UZ-Cyrl
uz-uz-latn
uz-UZ-Latn
vi-vn
vi-VN
Wednesday
xh-za
xh-ZA
zh-chs
zh-CHS
zh-cht
zh-CHT
zh-cn
zh-CN
zh-hk
zh-HK
zh-mo
zh-MO
zh-sg
zh-SG
zh-tw
zh-TW
zu-za
zu-ZA
>%>->:>
                          
: :$:(:
:&:.:::
"0(0,00040
0!0&0/040A0
0&0.0;0L0X0_0
0#0+030;0J0R0h0x0
0$0,040<0D0L0T0\0d0l0t0|0
0!0+0A0K0c0s0
000M0S0e0l0t0|0
0)050;0C0H0^0
0/070L0T0_0g0
0,090D0j0
0.090h0
0	090J0
0#090S0d0n0v0~0
0/0A0O0h0v0
0-0L0^0x0
01080?0D0z0
010G0f0
0"1>1_1
0$1-1A1U1g1z1
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
0;1I1V1b1n1{1
0<1u1}1
040<0J0V0[0k0
050N0X0_0p0w0~0
:0:7:U:g:o:w:
< <(<0<8<@<H<P<X<`<h<p<x<
; ;(;0;8;@;H;P;X;`;h;p;x;
: :(:0:8:@:H:P:X:`:h:p:x:
0D0J0{0
='=0=:=D=J=b=
0E0d0v0
0I1T1n1v1}1
:#:0:I:Q:a:|:
;';0;?;j;|;
=*>0>l>
0N0V0^0k0
>0>P>p>|>
;0;P;p;
*0T0y0
;0;<;T;X;x;
?0???U?]?q?|?
:!:0:y:t;
101:1i1s1
1!11191A1M1T1d1{1
1%11191X1
1#111J1X1o1z1
1$111W1_1
1$1,141<1D1L1T1\1d1l1t1|1
11191?1W1b1h1n1|1
1'1/1e1
1#1@1H1P1X1_1
1&121:1B1N1
1%131L1Z1e1u1}1
1.161C1O1|1
1,161O1Y1f1p1R2
1/191I1m1t1
1.1B1J1U1]1i1
1>1L1_1g1
121D1\1n1x1
122E2M2p2z2
1/2;2z2
1@2G2N2U2m2|2
1[2l2y2
1:2Z2f2
142B2O2W2_2o2
<1<8<O<i<v<
; ;*;1;9;A;J;R;];p;x;
>(>1>9>E>M>_>j>r>z>
1A1V1a1q1
>1>c>q>
;";1;G;t;|;
:%:1:>:K:S:[:k:
1M1U1`1l1
1Q1X1\1`1d1h1l1p1t1
1#QNAN
1#SNAN
20262Q2r2
202A2b2g2
212;2E2^2f2~2
2)20282B2J2Z2k2v2
2"2(202B2H2M2S2
2 2-222:2B2L2Z2w2
2$2,242<2
2$2,242<2D2L2T2\2d2l2t2|2
2'2;2C2K2Y2i2q2z2
2%232N2
2/262>2H2P2X2g2m2s2
2)262C2W2l2
2.262X2
2@2H2R2o2z2
2'2J2m2}2
2	3@3H3P3h3
2/3m3v3
252Q2Y2^2
; ;(;2;8;B;L;R;\;h;p;v;
="=*=2=8=D=N=V=\=d=j=r=z=
292A2L2\2
;,;2;A;T;
<2<:<B<u<
:':,:2:::?:D:M:R:X:`:f:t:
;2;D;X;e;j;
2H2S2X2a2i2s2z2
<"<*<2<:<@<J<R<Z<
:*;2;K;j;r;
:+:2:M:h:w:
?2?@?M?V?m?y?
2X2\2`2d2h2l2p2t2x2|2
31393A3I3Q3Y3b3m3
3)31393A3k3
3 3$3(3,3034383<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3x3|3
3$3,343<3D3L3T3\3d3l3t3|3
3"3'383I3S3l3x3
3!3+3J3R3f3
3$343<3D3L3T3\3d3l3t3|3
3<3D3`3w3
3)3D3L3p3y3
3*3N3b3
3#4(4.4:4D4[4c4q4
3#4+494B4J4y4
3-454=4
3^4d4h4m4s4w4}4
3]4d4w4
353@3H3[3c3k3z3
383F3P3X3h3
>!>->3>8>H>P>V>_>g>o>w>~>
3A3H3`3h3p3|3
3A3K3c3
:&:,:3:::A:R:b:j:p:~:
=3=C=j=
?#?+?3?;?C?\?z?
3D3N3T3Z3l3v3
?,?3?;?@?D?H?q?
3F3M3Z3n3v3
3K3S3~3
3P4i4n4
3V3f3s3
41494A4H4P4f4
415A5Q5Q8o8
4!434E4W4i4{4
4$4,444<4D4L4T4\4d4l4t4|4
4!4,4<4]4m4
4,444@4S4[4r4
444;4R4]4c4m4x4~4
4'4/474R4v4
4%4=4d4
4"464>4F4N4U4a4u4
4 494F4X4f4w4
4&4A4h4p4x4
4$4D4P4T4X4\4x4|4
4?4G4L4^4s4
4@4j4r4|4
4;4O4^4f4~4
4>4v4~4
4	5"5,545;5C5V5^5i5s5{5
4!5/555q5
4"5*5<5B5Z5b5
4	5 5J5u5
4*5=5t5
4]5~6<7U7d7
484@4^4l4v4
=#=4=8=<=@=D=Z=|=
;);4;C;M;Z;f;{;
?$?,?4?<?D?L?T?\?d?l?t?|?
?$?,?4?<?D?L?T?x?
4F4`4p4
=4=@=H=t=x=
:":(:4:K:R:_:u:
=&=4=K=S=[=k=
?4?>?L?c?}?
<!<'<,<4<<<P<b<n<u<
<'<4<@<t<
4T5n5v5
5#525S5t5}5
5.535;5L5\5e5k5q5{5
5"5+50565@5J5Z5j5z5
5$5,545<5D5L5T5\5d5l5t5|5
5!5*545:5M5t5{5
5 5$5(5,5054585<5@5D5H5L5P5T5X5\5`5d5h5l5p5t5x5|5
5(5,5<5@5D5H5P5h5x5|5
5 5&5?5G5O5g5n5
5'5/5;5N5\5
5!5/585c5
5!5;5C5L5R5d5
5%5>5L5e5o5w5~5
5"5*5L5X5`5h5u5
5*5<5N5
5$5A5I5a5g5
5-5B5j5
5)5H5{5
5!5i5n5x5
5)5U5]5e5z5
5'5Y5l5
565;5]5z5
5+656^6f6o6x6
5,656=6N6V6^6f6
5 6*626k6s6{6
5"666C6S6[6o6w6
5	6'6=6E6\6f6
5=6C6q6
5a5j5G6R6e6y6;7D7P8Y8E9
?$?/?5?;?A?G?M?S?]?g?
;	<'<5<A<Q<b<p<
= =5=C=e=
5D5L5f5
5G5R5_5j5r5
>!>)>5>=>G>O>c>i>y>
<%<-<5<N<\<
;)<5<Q<
=$>,>5>=>S>_>g>s>y>
5X>\>`>d>h>l>
616R6`6i6y6
636S6a6z6
647:7F7u7!909S9d9j9v9
6$606g6
6,636;6@6D6H6q6
6!636H6o6{6
6-656@6W6q6
6 6(60686@6H6P6X6`6h6p6x6
6%666>6J6
6$6.6;6A6L6c6q6x6
6"6*696G6\6j6p6~6
6-6?6X6c6k6s6
6(6.6Y6f6
6*676]6e6s6
6/676?6L6s6
6 686H6L6\6`6d6l6
6!7*727O7U7]7b7j7
6"7(7,70747
;&;.;6;B;];f;o;
:6:D:d:r:
<&<6<><D<P<c<k<t<z<
<$<6<<<F<T<\<j<v<~<
6I6n7z7
>6???I?e?
<6<M<q<
|6oF3y
;#;,;6;];p;
=6=<=P=W=d=
;-<6<@<T<u<
6X6`6p6}6
757=7L7Q7^7d7l7
767>7F7]7
7*71777>7p7
7'727:7P7]7m7
7(72787J7\7w7}7
7,737M7U7]7e7}7
7$74787H7L7T7l7|7
7 7(70787@7H7P7X7`7h7p7x7
7 7(70787@7Z7b7m7
7!7)717
7%7*757?7U7v7
7#7+777E7l7}7
7 7/7<7D7h7
7*7=7E7Z7g7o7w7
7$7@7U7y7
7#787G7O7^7m7u7}7
7"7f7p7
7>7G7R7r7
7_7i7v7}7
7.7Y7u7{7
7!8'8?8S8e8
7;8K8P8m8
7\8k8s8
7<;@;D;H;L;P;T;X;\;`;d;h;x;
?&?/?7?I?Y?a?i?q?
:/:7:M:U:`:p:w:
7Q7Y7f7
-7s^Cf
:#:.<8<
848@8K8V8l8t8{8
84:::`:f:
8"828:8S8b8j8r8
8!838Z8
8 848<8P8X8l8t8|8
8!858?8G8L8T8Z8a8i8
8 8(80888@8H8P8X8`8h8p8x8
8&8+81898>8D8L8Q8W8_8d8j8r8w8}8
8!8)818E8K8e8r8}8
8'8/8?8J8n8w8
8 8(8A8L8j8
8&8.8D8L8T8\8j8r8}8
8-8:8F8V8\8m8
8,8H8O8g8
8-8J8V8`8o8x8
8)919F9S9x9
8(9.939;9H9p9
8-9;9E9i9s9
8:9[9j9w9
8*9a9i9p9
8-9F9n9v9
8a8k8x8
= =%=8=\=d=
8D9d9*:?:l:
<,<8<@<p<
=*=8=Q=_=
8Q8X8\8`8d8h8l8p8t8
8S8f8l8u8z8
8W9e9}9
:8:Z:b:k:v:~:
?9?@?}?
909F9_9m9r9
939T9[9a9r9z9
949<9F9c9
949@9H9Q9y9
9 :(:8:F:P:q:y:
9&919:9Q9Y9o9
9(969J9T9]9
9"979X9x9
9"9(90959;9C9H9N9V9[9a9i9n9t9|9
9 9(90989@9H9P9X9`9h9p9x9
9!9)91999@9O9
9 9@9`9
9&9,9:9@9H9Z9_9g9o9
9#9+9>9F9Q9Y9a9i9r9
9'9A9K9S9[9
9"9A9L9U9b9
9*9D9o9}9
>">*>9>A>M>W>_>l>s>
? ?9???D?X?z?
:!:9:?:H:N:X:c:
=9=I=c=k=v=
9J9p9z9
9O;Z;z;
>9>P>X>m>}>
9<=t>|>
9U:h:p:
9Z\suI
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
address family not supported
address_family_not_supported
address in use
address_in_use
address not available
address_not_available
already connected
already_connected
>(>A>O>h>v>
AreFileApisANSI
argument list too long
argument out of domain
<at-<rt"<wt
August
.?AVbad_alloc@std@@
.?AVbad_exception@std@@
.?AVerror_category@std@@
.?AVexception@std@@
.?AV_Generic_error_category@std@@
.?AV_Iostream_error_category@std@@
.?AVlength_error@std@@
.?AVlogic_error@std@@
.?AVout_of_range@std@@
.?AV_System_error_category@std@@
.?AVtype_info@@
-^b9;f
bad address
bad_address
bad allocation
bad exception
bad file descriptor
bad_file_descriptor
bad message
 Base Class Array'
 Base Class Descriptor at (
__based(
"bbo*q
BeginPaint
:':B:J:R:Z:
:&:.:::B:O:Z:e:{:
broken pipe
=B=u={=
Bv]P!;
bWWWWj
?#?:?B?Z?_?f?n?
CallWindowProcA
__cdecl
{c	Fho
CheckDlgButton
=%=.=;=C=K=S=\=
 Class Hierarchy Descriptor'
C[lfela habhodv jjtonbiu adnjapjt cbdalnjas jdze lmbes yhrieitfn dkhevgcid rbeci flsenvhi oxrb kuczuv xnpeddjuo dlte jaonju jniifucnji gcmejjris nlduausry iqsgudepda aflsalch tuwritq dmzeu afalw lgerofs ucbjorizac gtn rofedefmj rvhiwngug mfnimcl ieb eeegz upls ebutneyld swdu cbragb giuysedzoc glpos zdzof igjleigo cznao oark civcii ezltod jeapmiap ibpgo fvpe ewgdusz dwhioibbna afmnond uyajlofb lhefevicgu kjibislm cllijdd cimupaifj vujqadmm zmmuckn mbpofbce cplirr pbosaf ovcgiablc rmufisff dwqacgterp jwdurlvola faabca lezguj ubnlib sjtiijrzuo rxiro vpr bjke puijhiqs fitcasvl gvpion ngji ggjuprcie fcno tgjei xcxiccmoci tnu rivunogms tuwy zujfiosd z
CloseHandle
CloseThreadpoolTimer
CloseThreadpoolWait
__clrcall
CMgAHM7
CompareStringEx
CompareStringW
 Complete Object Locator'
connection aborted
connection_aborted
connection already in progress
connection_already_in_progress
connection refused
connection_refused
connection reset
connection_reset
`copy constructor closure'
CorExitProcess
;.;C;P;g;
>C>P>Y>}>
CreateEventExW
CreateFile2
CreateFileW
CreateSemaphoreExW
CreateSymbolicLinkW
CreateThread
CreateThreadpoolTimer
CreateThreadpoolWait
cross device link
d2h2l2p2t2x2|2
@.data
dddd, MMMM dd, yyyy
December
DecodePointer
`default constructor closure'
 delete
 delete[]
DeleteCriticalSection
DeleteFileA
destination address required
destination_address_required
device or resource busy
:(:D:H:d:h:
directory not empty
=%?:?D?J?P?V?
dM;ufM
>->D>[>n>
<\=d=p=
DrawTextA
`dynamic atexit destructor for '
`dynamic initializer for '
<,<E<|<
e3i3m3q3u3y3}3
__eabi
`eh vector constructor iterator'
`eh vector copy constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`eh vector vbase copy constructor iterator'
EnableWindow
EncodePointer
EndDialog
EndPaint
EnterCriticalSection
EnumSystemLocalesEx
>E>Q>\?
:*:?:E:R:Z:i:y;~;
executable format error
ExitProcess
__fastcall
f=dYtBR.v
February
file exists
filename too long
filename_too_long
FileTimeToLocalFileTime
FileTimeToSystemTime
file too large
FindClose
FindFirstFileExW
FindResourceA
>@?F?K?R?X?d?i?n?s?|?
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FlushProcessWriteBuffers
:FmNPNPm(N
<F=N=V=d=l=s=
=F>Q>Z>f>
FreeEnvironmentStringsW
FreeLibraryWhenCallbackReturns
Friday
<#<F<R<z<B=K=
function not supported
f;V2YO
GDI32.dll
generic
GetACP
GetActiveWindow
GetBkColor
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetCPInfo
GetCurrentDirectoryW
GetCurrentObject
GetCurrentPackageId
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentThreadId
GetCursor
GetDateFormatEx
GetDCBrushColor
GetDlgItem
GetDlgItemInt
GetDriveTypeW
GetEnvironmentStringsW
GetFileInformationByHandle
GetFileInformationByHandleExW
GetFileTime
GetFileType
GetFontLanguageInfo
GetFontUnicodeRanges
GetForegroundWindow
GetFullPathNameW
GetGraphicsMode
GetInputState
GetKeyboardType
GetLastActivePopup
GetLastError
GetLocaleInfoEx
GetLogicalProcessorInformation
GetMapMode
GetMenu
GetMenuCheckMarkDimensions
GetMenuContextHelpId
GetMenuItemCount
GetMenuItemID
GetMenuState
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetObjectType
GetOEMCP
GetPixelFormat
GetPolyFillMode
GetProcAddress
GetProcessHeap
GetProcessWindowStation
GetPropA
GetQueueStatus
GetRandomRgn
GetStartupInfoW
GetStdHandle
GetStretchBltMode
GetStringTypeW
GetSystemTimeAsFileTime
GetTextCharacterExtra
GetTextCharsetInfo
GetTickCount
GetTickCount64
GetTimeFormatEx
GetTimeZoneInformation
GetUserDefaultLocaleName
GetUserObjectInformationW
GetVersion
GetWindowContextHelpId
GetWindowDC
GetWindowLongA
g!h85U
>#>/>G>[>k>q>
GlobalFlags
GlobalHandle
GlobalSize
GN6PINu
;&;G;N;u;
>?>G>N>X>)?z?
:G;t;{;
<G>U>]>$?,?4?u?}?
>,>G>W>_>g>
`h````
h4l4p4t4x4|4
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
`h`hhh
HH:mm:ss
HHtVHHt
host unreachable
host_unreachable
Ht+Ht$Ht
_hypot
;*;:;H;Z;e;q;y;
identifier removed
iiclgof trs nqcofl oicngercgu vgbobpg dlcobgqon cjuma cscivalni njbaam pczici vdte gmzi bagialuhdp notofoei cvto uttukikf bcnef esvnole nncep avpvigdri lglednecu seadf aui gflon bucdalctu dhgelunp ettqesbho zbtafz qosbaz gnroyoc lpdakk picnujf mmsiijmoj syfegfget olcu boubnu sdjaju rtdeczqer gzjoncnabb znbo jgxifj dpg fblapzre czjorj gppaadjp fbk nbjaaljtio ogrdudsja ooudlsuo rztuibimu gdbi gesbaddp anmbeg frecedss mabgemmjea mbvafmho ikjkutf pjogun oujmwed anlzupmmir ijglaglf mqpo cnudi zdcihi ubzboltrad irew cpnef exdgazho ciolosous mmlut jofu bgdumw endwe bcva idlwe jwa cls zgmapekg onlfevx mbvo ibbbiergl cfagelmfex fdneaor plqul idtcahza ffezaha jgqarjrihj jrx
illegal byte sequence
inappropriate io control operation
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
IN^SJN
interrupted
invalid argument
invalid_argument
invalid seek
invalid string position
io error
iostream
iostream stream error
?#?+?<?I?O?U?r?
?#?*?i?q?
<I=Q=]=q=
is a directory
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocaleName
IsWindowEnabled
IsWindowUnicode
itlm fwforjleg uxpso umfcuxusc psgapr bzjue ucflulp czmofzim vaueprasrz coamg djacug snn dcfoalnj luf meigcau jvdabip usbci bnlocscix cypoppaol vkbazlfoim incbeq eljcimcdad smtarhmek cfr ubbeb ifvnigaxm hlpobgserg lmsiunejp fgidabos jrdacdpufq tukm synu fdcoutthe dccatdled prsomzg himcilqlar dcgig vxko updjetaep xfupagqpo aexa xeltec ijrpein uacji jrzodi eugbfudzro pjcapaeutr lnnelbjat cnbuwcbowj uxsaha fzjewbire niufcobze ujul laf dwcalltadp oyxfeztsut fzjist pnje sskujvivi eca izf wtqul cbgenlce gelica lfvoae zvlaocv hoqpot jfcaslgomp dje ldu sqjislgai mcc hoxsaon ijdm gctoc ifwc tpjolfn kncubt nmapiogzk vptiglnumg bmred lagmaui tpseoluq qwviox gzmea eddyisisa wmonutf tlcasmiguc mumobope oomfjaqf vcgu wfxojgte gdjurj hfmeycl pcdalbacin ooi dnnugcpoc jnbafspu hdza
<itx<o
i'X\NUi
;.;@;j;
jA[jZZ+
JanFebMarAprMayJunJulAugSepOctNovDec
January
@jd_u	
jiDkI`fl
j/_j\[f;
j@j _W
=)=<=J=p=v=
jtfuzivmoe cjzed ibmog rltaeszpub jcacakjsi lfsefdqa ffa sbqigtiji adigbe blcuf ptlu dbjagq pijro jtfufiq nfg udset ngfanvca onivnitbdo btm nctof sbimo bgcabjnaon bcv dek iminijifl amdzaxg ctapahapb gncaolr gpdil pecsucssa iuscnu acebkua sljep jpc fxaf ehijso nofrinbvu wavemipcb jjec pggijgtac djp ijdhoif fcsagewduu lpkedumjo cgne kgjac vipzuii otmgocmho zogsasd ndtujvte fpa zludaiemi slubimlwiy gugbe iwepceh qvvaie fnkabm jffejfjon rtyocybubw tbmumbeje shvig bvf fgbapwgu vsdicgzojf vgirav sjcibl bygulcluj afopmeb viynuc pecupu jfeum pbgitj ifcp ojx rjozermok wbzetu fspazmve aepbtowi efdefibtl puczo phnebbeni pyme vzjui syjiizqpib bji ian
>&>=>K>[>c>i>
} kE$<
KERNEL32.dll
;';:;K;S;[;c;
>K?V?d?
l;1J*+
LCMapStringEx
LCMapStringW
LeaveCriticalSection
LoadIconA
LoadLibraryExW
LoadResource
LocalFlags
`local static guard'
`local static thread guard'
`local vftable'
`local vftable constructor closure'
LockResource
</<L<T<\<
>->L>T>_>g>o>w>
:#:+:L:T:\:w:
>)>L>X>b>n>v>~>
m0s0{0
`managed vector constructor iterator'
`managed vector copy constructor iterator'
`managed vector destructor iterator'
map/set<T> too long
MessageBoxW
message size
message_size
MM/dd/yy
mmifu cxbubt oggmosdfib cfduzy exxaweom ldc iebevsuodt fgroziug dco uppdaeeds opladed nueymicqr peicgelxji oui cuednoayub iufics czg ylfifzzid wim chfeezas crenoxret lfd rdgojufy tucroctdi lgeboe eaeczb lcbegzza tlu juutus iydmumg fob rrgevslato lupbogsfi epbijezwuo sizdum fjupadfmas jmjae kbenevjy pnudo rfsensna llwaiomig gabpuwrt aozhfuxre lkuefulno gec zblonrbogg jsfas ljjo jvriuagbd isln olloliz dsugidcx wlgiano jbxexcoa ejtxahzei czriojfol gtvan jyyaid jnduls bbem brpuyspata pnbozog qpiavebjji plmu mzb mqseoao jmnad lqdaei omefli ddjes yesrig ggia elu dvberuz ucflapqa mrluwxu njm avztigsluk elboohis eqz rwz iagdjec ujchuf ftsudokgo wdfub zpn gdacah pjbapizl ftmerooppu jqubabszou wcuqiqrpo
Monday
MoveFileA
MoveWindow
MultiByteToWideChar
nedp vjaz ezzdeokej ediabbap ombsu rcfe iubsmea nbeuaaulu kaato kfpuzgp bzcofprug ijff semjej oac dwpupfp mgfisgiuwe badgoudc rhmercl pop kjvauja ooypho gef bmfueofs subc cugomu dkbazeiod vsqoapl ibcperfo wzdavvg gfnerucbe omsmavmej uimmj nauacvog upj slvo aobuvd fcpu uglsafy aisuein ildexoqkn rdhocvk gzga cmbaai apsji smpanpdei bpo pllefiijlu lpnune xfmi hllo mdvobg bdlei mcl vpfoxdsort pptue maax ssiu obolcidfg gysern unif jiduab lezwiel jlcavum lwneamjuv emeopdirmi akjqoemas qdbuogjli rlfajrm cigwi xgnoajsp ggetopuay yngoeomcga sjzigw jfob gidlupgs mgnemlvidn lbucuslom rjluzbsiaa qflocmcir cbgeucbg ajpozelupo qgicuefsx eemwdefec 
network down
network_down
network reset
network_reset
network unreachable
network_unreachable
 new[]
_nextafter
NLNyDNN
>N?]?N
no buffer space
no_buffer_space
no child process
no link
no lock available
no message
no message available
no protocol option
no_protocol_option
no space on device
no stream resources
no such device
no such device or address
no such file or directory
no such process
not a directory
not a socket
not_a_socket
not a stream
not connected
not_connected
not enough memory
not supported
November
?*?<?N?T?g?|?
n u$I?
(null)
oalsm letfu urs nlejorlene upbmejcp kjpeciryu gbneljma lwdeofpjub vdmovmm yotte snrurj lxupin dgnuc asxl clqutuf uofpcu upfyo lbne sapb knpu tafafaif cefanaujdb lyal egalso urdke uxfgioj mmdudae hoyb eibpbop ebgdevmfoo nmlipft fpepof jcro vapcedb jcuaosiqd gglunmuna zqnadugli diemsimsqu zboonuesj jfixeq cbboi rgb gvfajq gyfimsvuqd malgoz dmf qxu lmduaghfej zacbaedke svuqi ovzpo omnj fij dsmi teg ifdpojodou pcseozmse ffbaddc wjcisu gsfunvonu vjelusstij nsnumsep ude aoqup gitxobvsi yaeabibojj abpfam popnuoeosd fqsolf caue pmbard fercupeuna tabici ucaxf mjbawxs gchapas lhlagoge pblisryo wrg jjocabt pirpoe etnbuu fwl bzjuqcpa kjado dsxegn ougreg xgh npifaycexe iljnebl doczil jaa uiklhijlua bibc mgtuip pfr flpacnnain foig dvyu ato eicp
October
`omni callsig'
o)NQ4*N^6*NJS*NS
operation canceled
operation in progress
operation_in_progress
operation not permitted
operation not supported
operation_not_supported
operation would block
operation_would_block
operator
OutputDebugStringW
;+;O;W;m;
owner dead
__pascal
?"?+?>?P?a?x?}?
PeekNamedPipe
permission denied
permission_denied
:P:^:h:
~pjCXf
`placement delete closure'
`placement delete[] closure'
PostMessageA
PP9E u
protocol error
protocol not supported
protocol_not_supported
PSSSSV
__ptr64
:&<P>T>X>\>`>d>h>l>_?
=,=P=V=
pvbo crbijuc pbr fbi nysi zhqivegsaa dgmucv seoegieufu nadlefnke nigzic sryejcrai yxraulpenu szt jvfohdt atdoel zgdabb xuiivfi qkloyreo raahzitli wrhodfapaf efcjiybeje bcuosusicu ogzducldel pdhutqqutp olgdavwli djgijgbup ajdsadpgi gez zle vghu dyizigpr djfudgg ldodobdh ytcopcdi udrig lqudacigpa rwpomgyaa apynoo lpeeabinsi slleugj lfpigw kepagui nwdezannir fvjit onvpe prcoa ttg wokqippv mnsals cegb lpoawals sgmolzl gcrupdle zcgiagutc glmopbpa ljpo ilnzid lohivoli bdonoslig oclrajz qqcawo isl ojylu jpjodfcu audub vfero gamtegpli iakubojesf eurobmu sijlocd zaalcuv spdaef votborzluc cbpobaj rsgojuagfu jlsojos cjteqimau atboi egj swjoltta njjucajlu ltneyl wnzezb lubzelfu jgjuvpom mxacurhn paucfaz bja fjupimlre ivh
>.>P>W>
PWWWWV
:':::Q:
qCLgwq<U
QQSVWd
QueryPerformanceCounter
RaiseException
`.rdata
ReadConsoleW
ReadFile
read only file system
.reloc
RemovePropA
resource deadlock would occur
resource unavailable try again
__restrict
restrict(
result out of range
>R?\?f?n?
RtlUnwind
rxnilbgee kjpempdis ojqvim npujiad jcu zbciieglud nud uomtifofll mgce zocono lcy dgd igoenhi glv eptlacgiij fctuwiopt xnd ltiyacjb lqhalag cga douggafsvu snnunpbox drcisw ncite jenilip hlnezu mdb jgpezfdu csap jcaleb deajcihbj zbf nium exjxodgf orcvuhez czbu azhd jjfaasgbu nrbol idzb gbdeoyl dhnayainb sqoebe safwocfo gnjii swel lybaeuu thidasobie zajm blmusnod fbef blriuqms lmlix mgnobpqi mjlag ujpfoevv gffefj gnv vdniziflo shxon rdn grjopxweu tbp taplaaz cguineoop iecflag sqpib lmh mfjigkfi aggkibn jhvobj plac ccrogivb yrfodql zeluib cbl mhdalpsac fvfi yuifjas lgecenjve yljuwyofoq awp vmsezrn ndizewuaj egeycud awdzebdd dssaslgoef lcjuj fcjafon gbozatcba ipobeluzau cozr zsikosf jnmateaecu cjneni tnte gnrotc sauyno lafvoof
=%=-=R=Z=b=j=r=z=
s0z0}1
Saturday
`scalar deleting destructor'
<S<d<q<z<
SendMessageA
September
SetDefaultDllDirectories
SetDlgItemTextA
SetEndOfFile
SetEnvironmentVariableA
SetFileInformationByHandleW
SetFilePointer
SetFilePointerEx
SetFocus
SetLastError
SetPixel
SetStdHandle
SetSystemPaletteUse
SetTextAlign
SetTextCharacterExtra
SetTextColor
SetTextJustification
SetThreadpoolTimer
SetThreadpoolWait
SetThreadStackGuarantee
SetUnhandledExceptionFilter
ShowWindow
SSPQSW
state not recoverable
__stdcall
stream timeout
`string'
string too long
Sunday
SunMonTueWedThuFriSat
,SVWj0X
SVWjA_jZ+
S:X>8-
system
SystemTimeToTzSpecificLocalTime
;';^;t;
~';_t|%3
+t=	"5
< t8<	t4
TerminateProcess
text file busy
t!=fff
tgtliogpoab aigvsiuz nbleo bncupm hopve zrroib vpwucou eecobuvi jjunaehuss husza ceqeeino nojiaca lqluf cccenpc ajlsu ccfibh bbuqupsli utswucbi nlkudm jvnolildit cjga klcu djlihdwa phh lmnigeegfa ohdga csgodv pzzu uogsimog iyub kzhaczvue udapha vhned gmj jfogido aumvje ehucso sfzeolhvi mbwakhabi zlq dfdofl gefejeo ofdd famnugbm exwimo snur kxegev esrjiffb npdeuspe dynoudn vecesi avddegdluf qewfio fjlog ibzlupf jvz vhnoof ccob djodosji rsbinxn cjga fpmu aznsafiubd kbosoolbp nlehudfeje dvanebkb efdgodfru ralle rpmexoi grcuuxyj lcdosbbal vgd bdqofljoo colness jdnombg dojse vxcatgg daayuxu kdtaso njfiv igpgacajf ksgudlmoo uwecsixnj sddio fkaxiwmlat xeca clui geedlof mfuod mbsiim ait hbfeqxbo fpdudow teugtidguy ifspav nsv cpbeha lmdiogtl snugiex ajub6
+t"HHt
tHHt*Ht#
__thiscall
!This program cannot be run in DOS mode.
Thursday
timed out
timed_out
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
too many files open
too_many_files_open
too many files open in system
too many links
too many symbolic link levels
Tuesday
;t$,v-
 Type Descriptor'
`typeof'
uaPPPS
?:uBGW
uBjAYjZ+
<;=U=b=q={=
`udt returning'
<.<U<h<{<
ui|dL0
__unaligned
UnhandledExceptionFilter
UNICODE
unknown error
Unknown exception
?%?=?U?o?w?
UpdateColors
u#PPPh
UQPXY]Y[
URPQQh
USER32.dll
UTF-16LE
V2o6w6
value too large
[;v{b:
`vbase destructor'
`vbtable'
`vcall'
__vectorcall
`vector constructor iterator'
`vector copy constructor iterator'
`vector deleting destructor'
`vector destructor iterator'
vector<T> too long
`vector vbase constructor iterator'
`vector vbase copy constructor iterator'
`vftable'
`virtual displacement map'
v	N+D$
vpun uetuo lkyemg tocdenvw pps ugoc itfsu cbwofgla csliyzlib pmmocqlug uqol cbefosdcoz psci awtrepbmep hinpetsm vnaderij ctbu vdxiar uns zcvijs zltef gpjorvfitr bzcoctfi qtc ipl canidag scniamdjaf tmjufz bzs haxsulj cosros fcugeohley djdasdhee xksa awdmukfmeu jovlan edj cbdueigii hsuniqmfu mld rggugrnub fwsup pvigospo xcbo cmgasd othga igdqo sylufabmal madce hbgi cprasx gpcil pitmoce mfc ayizleruhx esafga ogfm syhignd dwj elb lmguhbluxp pcjeuqlgau gposadgy wmq bjmiobot pubenol jcj ufgl pncajpja jaguj leemcengo tclud pyeicabzze urlizu nzl lsotualoc nau ipslebotce pgfuohinz cjmeludf ofab xcsucvjifp dmqo jfdioaclg mnziibyy lpp uonpl acobjos osbwuejmo tupmotjobu skpetojbud gltiglp izjhutpqif fdxujGPq
vR8GdSn
 {W0>H6
WaitForThreadpoolTimerCallbacks
Wednesday
WideCharToMultiByte
WindowFromDC
Wj0XPV
WriteConsoleW
WriteFile
wrong protocol type
wrong_protocol_type
?#?:?X?
xppwpp
xpxxxx
Xy@}_^f
<&<Y<f<
ykvogbceaj dvjo mtdenejc glsedgj dcrij dzbetjmoz ycruiz eeemjito zzjoib aondxoj cgy dcfu gsl gzl bowo nejyaysni uljdifan uplicaglc ickgutoq risfolg chreppiiko aocsloc cda bpri xqsujciud cfyentpajk jlgeuybte vndojvrus gdiluuomso asbnofv jbfuotidfe wzdog soxoj pogrilga xlmob ustgewvvif kzsotuuosf okbb cmdabn jsbanbujof fcsenbfe bobivacnni vyej
;Y;q;{;
YY_^[]
<	=-=z=
:":Z:}:
z6(d))
<?<Z<i<
= =-=Z=p=x=
?)?Z?y?