Analysis Date2015-05-17 22:56:14
MD509824158c754f47de137b68699f84f05
SHA12e540b23bbad9dbb3cce77bad33f92b2e34aad35

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: c380cea7b4c24d2c91b4f90baa21f1ec sha1: e0fcc54163a5284fc8145912613bd174b21ffb98 size: 301568
Section.rdata md5: cbd8622e15d0ceedd81ca2521fbec65a sha1: da70dacbec292866f30cbe157ddc726bc4ee8c3f size: 60928
Section.data md5: 3529075c3431532fa965fd0347ff7dc6 sha1: 86e63df46dc0990632427f713fc137ca1b860397 size: 7680
Section.reloc md5: cbc14662c9785c12a472fba8d6d37f2d sha1: 14590f68581420921872005f38c0590b5ed9ca56 size: 22528
Timestamp2015-05-11 07:03:20
PackerMicrosoft Visual C++ 8
PEhashea7d0d14b3ed0ca35377362cbd49eb05a2dbaa97
IMPhasha78792aae45df09a40190b1a75449bc8

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates FileC:\WINDOWS\urvjzqteag\myutmq8m0s
Creates FileC:\urvjzqteag\myutmq8m0s
Creates FileC:\urvjzqteag\chdf1kystri67kctul.exe
Deletes FileC:\WINDOWS\urvjzqteag\myutmq8m0s
Creates ProcessC:\urvjzqteag\chdf1kystri67kctul.exe

Process
↳ C:\urvjzqteag\chdf1kystri67kctul.exe

RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Tablet Drive Hardware Controls Server ➝
C:\urvjzqteag\rjgbleensb.exe
Creates FileC:\urvjzqteag\gextd5l
Creates FileC:\WINDOWS\urvjzqteag\myutmq8m0s
Creates FilePIPE\lsarpc
Creates FileC:\urvjzqteag\myutmq8m0s
Creates FileC:\urvjzqteag\rjgbleensb.exe
Deletes FileC:\WINDOWS\urvjzqteag\myutmq8m0s
Creates ProcessC:\urvjzqteag\rjgbleensb.exe
Creates ServiceTask Registry KtmRm Connectivity Adaptive - C:\urvjzqteag\rjgbleensb.exe

Process
↳ C:\WINDOWS\system32\svchost.exe

Process
↳ Pid 808

Process
↳ Pid 852

Process
↳ C:\WINDOWS\System32\svchost.exe

Process
↳ Pid 1208

Process
↳ C:\WINDOWS\system32\spoolsv.exe

RegistryHKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\BeepEnabled ➝
NULL
RegistryHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\System\Print\TypesSupported ➝
7
RegistryHKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\Printers\SymbolicLinkValue ➝
NULL
RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Print\Printers\DefaultSpoolDirectory ➝
C:\WINDOWS\System32\spool\PRINTERS\\x00

Process
↳ Pid 1860

Process
↳ Pid 1136

Process
↳ C:\urvjzqteag\rjgbleensb.exe

Creates FileC:\urvjzqteag\gextd5l
Creates Filepipe\net\NtControlPipe10
Creates FileC:\urvjzqteag\jaklz6xjb
Creates FileC:\urvjzqteag\mgnxnxipq.exe
Creates FileC:\WINDOWS\urvjzqteag\myutmq8m0s
Creates FileC:\urvjzqteag\myutmq8m0s
Creates File\Device\Afd\Endpoint
Deletes FileC:\WINDOWS\urvjzqteag\myutmq8m0s
Creates Processyey8mjtiwraf "c:\urvjzqteag\rjgbleensb.exe"

Process
↳ C:\urvjzqteag\rjgbleensb.exe

Creates FileC:\WINDOWS\urvjzqteag\myutmq8m0s
Creates FileC:\urvjzqteag\myutmq8m0s
Deletes FileC:\WINDOWS\urvjzqteag\myutmq8m0s

Process
↳ yey8mjtiwraf "c:\urvjzqteag\rjgbleensb.exe"

Creates FileC:\WINDOWS\urvjzqteag\myutmq8m0s
Creates FileC:\urvjzqteag\myutmq8m0s
Deletes FileC:\WINDOWS\urvjzqteag\myutmq8m0s

Network Details:

DNSbreadcircle.net
Type: A
50.63.202.37
DNSnightforest.net
Type: A
50.63.25.109
DNSelectricforest.net
Type: A
184.168.221.30
DNStradewheat.net
Type: A
208.91.197.241
DNSquietforest.net
Type: A
198.252.107.15
DNSgathercircle.net
Type: A
DNSfliermeasure.net
Type: A
DNSbreadmeasure.net
Type: A
DNSflierdinner.net
Type: A
DNSbreaddinner.net
Type: A
DNSflierafraid.net
Type: A
DNSbreadafraid.net
Type: A
DNSfliercircle.net
Type: A
DNSquietmeasure.net
Type: A
DNSseasonmeasure.net
Type: A
DNSquietdinner.net
Type: A
DNSseasondinner.net
Type: A
DNSquietafraid.net
Type: A
DNSseasonafraid.net
Type: A
DNSquietcircle.net
Type: A
DNSseasoncircle.net
Type: A
DNSagainstwheat.net
Type: A
DNSdoubtwheat.net
Type: A
DNSagainstanger.net
Type: A
DNSdoubtanger.net
Type: A
DNSagainstalways.net
Type: A
DNSdoubtalways.net
Type: A
DNSagainstforest.net
Type: A
DNSdoubtforest.net
Type: A
DNSnightwheat.net
Type: A
DNSdecidewheat.net
Type: A
DNSnightanger.net
Type: A
DNSdecideanger.net
Type: A
DNSnightalways.net
Type: A
DNSdecidealways.net
Type: A
DNSdecideforest.net
Type: A
DNSlargewheat.net
Type: A
DNScaptainwheat.net
Type: A
DNSlargeanger.net
Type: A
DNScaptainanger.net
Type: A
DNSlargealways.net
Type: A
DNScaptainalways.net
Type: A
DNSlargeforest.net
Type: A
DNScaptainforest.net
Type: A
DNSrecordwheat.net
Type: A
DNSelectricwheat.net
Type: A
DNSrecordanger.net
Type: A
DNSelectricanger.net
Type: A
DNSrecordalways.net
Type: A
DNSelectricalways.net
Type: A
DNSrecordforest.net
Type: A
DNSstreetwheat.net
Type: A
DNSstreetanger.net
Type: A
DNStradeanger.net
Type: A
DNSstreetalways.net
Type: A
DNStradealways.net
Type: A
DNSstreetforest.net
Type: A
DNStradeforest.net
Type: A
DNSbetterwheat.net
Type: A
DNSgatherwheat.net
Type: A
DNSbetteranger.net
Type: A
DNSgatheranger.net
Type: A
DNSbetteralways.net
Type: A
DNSgatheralways.net
Type: A
DNSbetterforest.net
Type: A
DNSgatherforest.net
Type: A
DNSflierwheat.net
Type: A
DNSbreadwheat.net
Type: A
DNSflieranger.net
Type: A
DNSbreadanger.net
Type: A
DNSflieralways.net
Type: A
DNSbreadalways.net
Type: A
DNSflierforest.net
Type: A
DNSbreadforest.net
Type: A
DNSquietwheat.net
Type: A
DNSseasonwheat.net
Type: A
DNSquietanger.net
Type: A
DNSseasonanger.net
Type: A
DNSquietalways.net
Type: A
DNSseasonalways.net
Type: A
DNSseasonforest.net
Type: A
DNSagainstschool.net
Type: A
DNSdoubtschool.net
Type: A
DNSagainstwhile.net
Type: A
DNSdoubtwhile.net
Type: A
HTTP GEThttp://breadcircle.net/index.php
User-Agent:
HTTP GEThttp://nightforest.net/index.php
User-Agent:
HTTP GEThttp://electricforest.net/index.php
User-Agent:
HTTP GEThttp://tradewheat.net/index.php
User-Agent:
HTTP GEThttp://quietforest.net/index.php
User-Agent:
Flows TCP192.168.1.1:1031 ➝ 50.63.202.37:80
Flows TCP192.168.1.1:1032 ➝ 50.63.25.109:80
Flows TCP192.168.1.1:1033 ➝ 184.168.221.30:80
Flows TCP192.168.1.1:1034 ➝ 208.91.197.241:80
Flows TCP192.168.1.1:1035 ➝ 198.252.107.15:80

Raw Pcap
0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2062   : close..Host: b
0x00000040 (00064)   72656164 63697263 6c652e6e 65740d0a   readcircle.net..
0x00000050 (00080)   0d0a                                  ..

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a206e   : close..Host: n
0x00000040 (00064)   69676874 666f7265 73742e6e 65740d0a   ightforest.net..
0x00000050 (00080)   0d0a                                  ..

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2065   : close..Host: e
0x00000040 (00064)   6c656374 72696366 6f726573 742e6e65   lectricforest.ne
0x00000050 (00080)   740d0a0d 0a                           t....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2074   : close..Host: t
0x00000040 (00064)   72616465 77686561 742e6e65 740d0a0d   radewheat.net...
0x00000050 (00080)   0a0d0a0d 0a                           .....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2071   : close..Host: q
0x00000040 (00064)   75696574 666f7265 73742e6e 65740d0a   uietforest.net..
0x00000050 (00080)   0d0a0a0d 0a                           .....


Strings
"
 
.
\
.
\
onvHEcbKt
n
 
  
.
e
. 
.
e
. 
00-+ 00-+ **00-+ .
-
-1
+-0-E-
-0
\
.
-
..
0
0 
- 
000
-
-J..
u
                                 
2.exe
8B@BLB`B
- abort() has been called
ADVAPI32.DLL
af-za
af-ZA
alnum
alpha
america
american
american english
american-english
April
ar-ae
ar-AE
ar-bh
ar-BH
ar-dz
ar-DZ
ar-eg
ar-EG
ar-iq
ar-IQ
ar-jo
ar-JO
ar-kw
ar-KW
ar-lb
ar-LB
ar-ly
ar-LY
ar-ma
ar-MA
ar-om
ar-OM
ar-qa
ar-QA
ar-sa
ar-SA
ar-sy
ar-SY
ar-tn
ar-TN
ar-ye
ar-YE
- Attempt to initialize the CRT more than once.
- Attempt to use MSIL code from this assembly during native code initialization
August
australian
az-az-cyrl
az-AZ-Cyrl
az-az-latn
az-AZ-Latn
.bat
be-by
be-BY
belgian
bg-bg
bg-BG
blank
bn-in
bn-IN
britain
bs-ba-latn
bs-BA-Latn
ca-es
ca-ES
canadian
china
chinese
chinese-hongkong
chinese-simplified
chinese-singapore
chinese-traditional
CLC_ALL
.cmd
cntrl
.com
CONOUT$
- CRT not initialized
cs-cz
cs-CZ
cy-gb
cy-GB
czech
da-dk
da-DK
dddd, MMMM dd, yyyy
de-at
de-AT
December
de-ch
de-CH
de-de
de-DE
de-li
de-LI
de-lu
de-LU
digit
div-mv
div-MV
DOMAIN error
dutch-belgian
ECHN
ECHS
ECHT
ECZE
EDEA
EDEC
EDEL
EDES
EENA
EENB
EENC
EENG
EENI
EENJ
EENL
EENS
EENT
EENU
EENZ
EESA
EESB
EESC
EESD
EESE
EESF
EESG
EESH
EESI
EESL
EESM
EESN
EESO
EESR
EESS
EESU
EESV
EESY
EESZ
EFRB
EFRC
EFRL
EFRS
EGBR
EHKG
EITS
Eja-JP
Ejjj
Ejjjjj
EKOR
el-gr
el-GR
emscoree.dll
en-au
en-AU
en-bz
en-BZ
en-ca
en-CA
en-cb
en-CB
en-gb
en-GB
england
english-american
english-aus
english-belize
english-can
english-caribbean
english-ire
english-jamaica
english-nz
english-south africa
english-trinidad y tobago
english-uk
english-us
english-usa
en-ie
en-IE
en-jm
en-JM
ENLB
ENLD
en-nz
en-NZ
ENON
ENOR
en-ph
en-PH
en-tt
en-TT
en-us
en-US
en-za
en-ZA
ENZL
en-zw
en-ZW
EPRI
EPTB
ER6002
es-ar
es-AR
es-bo
es-BO
es-cl
es-CL
es-co
es-CO
es-cr
es-CR
es-do
es-DO
es-ec
es-EC
es-es
es-ES
es-gt
es-GT
es-hn
es-HN
es-mx
es-MX
es-ni
es-NI
es-pa
es-PA
es-pe
es-PE
es-pr
es-PR
es-py
es-PY
es-sv
es-SV
es-uy
es-UY
es-ve
es-VE
ESVF
ESVK
et-ee
et-EE
ETTO
eu-es
eu-ES
EUSA
EZAF
EZHH
EZHI
fa-ir
fa-IR
February
fi-fi
fi-FI
- floating point support not loaded
fo-fo
fo-FO
fr-be
fr-BE
fr-ca
fr-CA
fr-ch
fr-CH
french-belgian
french-canadian
french-luxembourg
french-swiss
fr-fr
fr-FR
Friday
fr-lu
fr-LU
fr-mc
fr-MC
german-austrian
german-lichtenstein
german-luxembourg
german-swiss
gl-es
gl-ES
graph
great britain
gu-in
gu-IN
         (((((                  H
he-il
he-IL
HH:mm:ss
hi-in
hi-IN
holland
hong-kong
hr-ba
hr-BA
hr-hr
hr-HR
hu-hu
hu-HU
hy-am
hy-AM
id-id
id-ID
- inconsistent onexit begin-end variables
irish-english
is-is
is-IS
italian-swiss
it-ch
it-CH
it-it
it-IT
ja-jp
January
jjjjj
jjjjjj
July
June
ka-ge
ka-GE
kernel32.dll
kk-kz
kk-KZ
kn-in
kn-IN
kok-in
kok-IN
ko-kr
ko-KR
ky-kg
ky-KG
LC_COLLATE
LC_CTYPE
LC_MONETARY
LC_NUMERIC
LC_TIME
lower
lt-lt
lt-LT
lv-lv
lv-LV
March
Microsoft Visual C++ Runtime Library
mi-nz
mi-NZ
mk-mk
mk-MK
ml-in
ml-IN
MM/dd/yy
mn-mn
mn-MN
Monday
mr-in
mr-IN
ms-bn
ms-BN
ms-my
ms-MY
mt-mt
mt-MT
nb-no
nb-NO
new-zealand
nl-be
nl-BE
nl-nl
nl-NL
nn-no
nn-NO
norwegian
norwegian-bokmal
norwegian-nynorsk
- not enough space for arguments
- not enough space for environment
- not enough space for locale information
- not enough space for lowio initialization
- not enough space for _onexit/atexit table
- not enough space for stdio initialization
- not enough space for thread data
November
ns-za
ns-ZA
(null)
October
pa-in
pa-IN
pl-pl
pl-PL
portuguese-brazilian
pr china
pr-china
print
Program: 
<program name unknown>
pt-br
pt-BR
pt-pt
pt-PT
puerto-rico
punct
- pure virtual function call
quz-bo
quz-BO
quz-ec
quz-EC
quz-pe
quz-PE
R6008
R6009
R6010
R6016
R6017
R6018
R6019
R6024
R6025
R6026
R6027
R6028
R6030
R6031
R6032
R6033
R6034
ro-ro
ro-RO
runtime error 
Runtime Error!
ru-ru
ru-RU
sa-in
sa-IN
Saturday
se-fi
se-FI
se-no
se-NO
September
se-se
se-SE
SING error
sk-sk
sk-SK
slovak
sl-si
sl-SI
sma-no
sma-NO
sma-se
sma-SE
smj-no
smj-NO
smj-se
smj-SE
smn-fi
smn-FI
sms-fi
sms-FI
south africa
south-africa
south korea
south-korea
space
spanish-argentina
spanish-bolivia
spanish-chile
spanish-colombia
spanish-costa rica
spanish-dominican republic
spanish-ecuador
spanish-el salvador
spanish-guatemala
spanish-honduras
spanish-mexican
spanish-modern
spanish-nicaragua
spanish-panama
spanish-paraguay
spanish-peru
spanish-puerto rico
spanish-uruguay
spanish-venezuela
sq-al
sq-AL
sr-ba-cyrl
sr-BA-Cyrl
sr-ba-latn
sr-BA-Latn
sr-sp-cyrl
sr-SP-Cyrl
sr-sp-latn
sr-SP-Latn
Sunday
sv-fi
sv-FI
sv-se
sv-SE
swedish-finland
swiss
sw-ke
sw-KE
syr-sy
syr-SY
ta-in
ta-IN
te-in
te-IN
This indicates a bug in your application.
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
th-th
th-TH
Thursday
TLOSS error
tn-za
tn-ZA
trinidad & tobago
tr-tr
tr-TR
tt-ru
tt-RU
Tuesday
uk-ua
uk-UA
- unable to initialize heap
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
united-kingdom
united-states
upper
ur-pk
ur-PK
USER32.DLL
uz-uz-cyrl
uz-UZ-Cyrl
uz-uz-latn
uz-UZ-Latn
vi-vn
vi-VN
Wednesday
xdigit
xh-za
xh-ZA
zh-chs
zh-CHS
zh-cht
zh-CHT
zh-cn
zh-CN
zh-hk
zh-HK
zh-mo
zh-MO
zh-sg
zh-SG
zh-tw
zh-TW
zu-za
zu-ZA
                          
-'>"%;
0<0\0|0
"0(0,00040
0 0(00080@0H0P0
0 0(000D0K0W0b0i0|0
0&0+0=0E0L0w0
0 0$0(0Q0w0
0!0)010
0%0+020;0@0F0N0S0Y0a0f0l0t0y0
0 0(04090D0N0V0^0j0q0{0
0&0.050<0B0J0V0d0i0s0
0%0-050G0O0[0a0g0m0s0{0
0$0(080<0@0H0`0p0t0
0!0+0A0K0c0s0
000E0r192e2~2
0(0=0G0U0n0y0
0-0;0I0O0U0^0r0y0
0&020D0L0T0Y0_0s0y0
0'050N0\0u0
0-080@0L0T0\0d0
0+090?0E0Y0d0l0t0|0
0(0C0K0R0Z0p0x0
0(1.1B1X1h1&21292R2c2
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
014181<1@1D1\1`1d1h1l1p1t1x1|1
0.2V2\2x2~2
> >$>(>,>0>4>8><>@>D>H>L>d>h>l>
050Z0_0k0r0
051C1K1W1]1g1w1
061Q1p2
<0=6=<=B=H=N=U=\=c=j=q=x=
<0<6<><C<K<c<k<
080I0V0|0
>!>)>0>8>?>D>L>d>l>t>
< <(<0<8<@<H<P<X<`<h<p<x<
= =(=0=8=@=H=P=X=`=h=p=x=
> >(>0>8>@>H>P>X>`>h>p>x>
; ;(;0;8;@;H;P;X;`;h;p;x;
: :(:0:8:@:H:P:X:`:h:p:x:
? ?(?0?8?@?H?P?X?`?h?p?x?
? ?(?0?8?@?H?R?Z?b?
=(=,=0=8=P=`=d=t=x=|=
? ?0?8?@?U?\?d?o?w?
<0| <9
090@0N0U0`0~0
<0=;=a>
0B0K0S0l0r0
=0>:>B>W>b>j>u>
:0:C:M:[:o:
0D0O0W0m0y0
0d1i1q1y1
?0?@?D?T?X?\?`?h?
0E0N0V0j0v0}0
<$<0<<<H<
; ;$;(;0;H;L;d;t;x;
>$>0><>H>T>`>l>x>
`0l0w0
<0|L<9
0M1^1r1
<0|m<9
:0:P:p:
0Q0]0~0
<0<S<b<
0t-HHt
0U0\0a0n0z0
=">&>,>0>U>\>d>l>{>
:(:0:W:_:g:o:
;$;1;:;
101>1u1
101I1S1d1
1$1*11171E1Q1Z1b1z1
1+11181V1
1 1$1,1D1T1X1h1l1p1x1
1!1)1>1N1
1$1*12171=1E1J1O1X1]1c1k1p1v1~1
1!1+131;1C1K1R1Z1p1u1
1"1.161?1K1^1j1r1{1
1'1.161?1N1T1\1e1
1$1,181E1M1U1a1m1
1%121=1A1H1P1V1\1k1u1{1
11282<2@2D2H2L2P2T2
1*151Q1X1f1m1u1
1#1A1I1Q1Y1a1i1o1w1
11d3j3
1%1E1P1p1{1
1/1f1y1d2l2
1?1H1R1e1m1u1
1,1J1X1d1m1w1
1%1Z1b1t1|1
1%212V2[2a2m2w2
12181f1
1*2<2P2]2b2
131=1U1]1h1t1|1
151E1O1V1^1i1
;);-;1;5;9;=;A;E;I;Q;i;n;
162;2@2H2X2s2
>!>)>1>7>=>E>M>l>u>
182L2}2
183@3H3P3i3u3}3
?)?1?9?K?
1A1G1V1\1g1
1B1J1R1[1o1v1
>'>1>B>M>S>f>n>v>~>
?&?1?C?j?q?y?
< <&<,<1<C<J<R<W<_<w<}<
= =&=1=;=]=c=t=z=
=1=C=U=g=
<!<1<I<V<[<f<t<
1Q1X1\1`1d1h1l1p1t1
1q_!,$&Cs5Yw
1#QNAN
1#SNAN
?1???V?a?f?m?u?
1W3_3j3r3z3
;$;2;`;
212?2X2f2
2+21282B2I2R2Y2u2
2$212b2h2{2
2 2(20282<2@2H2\2d2x2
2!2)212;2H2R2W2_2g2w2
2"2)21292A2
2!2%2)2-242:2@2F2L2R2X2^2d2j2p2v2|2
2!2)2.242<2A2G2O2T2Z2b2g2m2u2z2
2#2+2@2H2N2W2_2z2
2$2,242<2D2L2T2\2d2l2t2|2
2(2.262@2K2a2
2%2-272C2O2[2c2k2y2
2!2-282?2G2U2[2a2j2r2z2
2'2/2G2Y2a2i2p2
2 2+2K2V2v2
2 242<2D2L2T2b2y2
2.262;2A2I2Q2a2n2z2
2#262>2E2N2s2}2
2.282@2H2W2_2k2s2{2
2/2a2i2o2u2{2
232A2Z2h2
2!3&323>3F3N3_3m3u3{3
2"373S3t3
272B2K2
=2=7=?=S=[=g=l=t=
>!>2>9>@>H>]>e>m>u>
2B3h3s3
2d3j3|3
<%<,<2<E<|<
2E4e6s6}6
=#=+=2=E=L=r=
2g3o3w3}3
>2>I>S>[>
2j3#4[4
;*;2;K;R;
<'>2>R>X>^>e>
2W5_5p5
=#=+=3=
303?3S3Z3e3n3
313=3E3M3X3d3l3t3|3
323:3F3N3U3]3r3|3
32383i3
324J4T4p4w4}4
3!30393"5>5+6
3+323a3j3t3
3$3*30363<3B3H3N3T3Z3`3f3l3r3x3~3
3 3$3(3,3034383<3@3L3P3T3X3\3`3d3h3l3p3t3x3|3
3!3'333=3C3K3W3e3o3w3
3'3/3;3D3P3X3^3f3n3u3
3$3,3;3D3T3h3v3
3$3<3^3e3l3
3$3,343<3D3L3T3\3d3l3t3|3
3$3/373?3K3S3Z3j3p3y3
3"3-373E3a3i3q3
333A3O3V3c3l3v3|3
3'3[3t3
3.3;3X3`3
3,343H3P3X3`3d3l3t3|3
334M4Z4i4s4
3(353A3I3Q3Z3y3
3#363>3\3d3
3.383F3_3m3
3-3b3j3r3
3'3J3X3d3p3|3
3$424?475?5L5m5z5
3)4.444;4
3$4,444M4U4]4e4t4
3$444D4T4d4
3	4G4R4Z4b4g4p4x4
>%>,>3>:>A>H>O>W>_>g>r>w>}>
>+>3>;>C>K>S>]>m>w>}>
;&;3;;;C;K;S;Y;e;{;
?,?3?;?@?D?H?q?
? ?(?3?;?D?Q?Y?a?k?s?{?
3E4&575Z5
;!;-;3;?;F;Q;g;u;|;
:$:+:3:F:U:^:e:p:
3G3R3Z3b3j3v3
3G3R3Z3t3|3
:3:::M:p:{:
=(>3><>p>w>
>*?3?R?
3T4_4j4
;";*;3;W;];e;m;u;
40;0E0L0S0
4$40484D4N4V4b4j4}4
4"414=4D4P4W4_4g4n4
4%41494>4F4Z4b4n4u4|4
4*424:4?4K4^4f4n4v4~4
4%424:4B4k4q4w4
4 4&4,42484>4D4J4P4V4\4b4h4n4t4z4
4"4(4.444:4@4F4L4R4X4^4d4j4p4v4|4
4$4,444<4D4L4T4\4d4l4t4|4
4!4,444<4R4X4c4n4s4
4!4(4/4<4E4c4
4'4,444I4Q4X4`4u4}4
4-444C4Q4j4q4{4
4$4*4/4h4r4x4~4
4"4*464>4J4R4b4j4r4
4'4/474?4G4N4V4f4
4!4+474?4N4V4`4k4q4{4
4+4<4A4J4R4Z4v4
4"4_4x4
4+474?4E4Q4_4g4m4}4
4.474S4q4
4'4B4J4X4]4l4
4'4C4L4T4b4j4r4z4
4/5G6b6n6x6
464>4F4M4h4s4
4(6`8{8
484F4R4^4	5
484X4x4
=#=4=9=A=G=X=]=e=k=|=
;4;:;A;G;g;m;x;};
;&<,<4<;<B<O<X<^<x<
=4?B?R?k?p?
4C4a4q4
:$:*:4:;:C:J:a:i:}:
;.;4;C;J;Z;`;f;n;t;z;
4D7N7X7
>(>4>D>K>S>[>g>t>
?$?,?4?<?D?L?T?\?d?l?t?|?
=4=D=O=^=f=z=
:.;4;?;D;P;U;p;u;
=!=4=:=@=G=M=X=g=o=w=
: :(:4:<:H:U:Z:b:j:r:~:
?%?/?4?;?I?O?W?c?k?r?z?
4j5r5z5
=	>4><>J>V>
?4?>?L?e?s?~?
= =(=4=@=L=S=b=h=
=(=4=@=L=X=d=p=|=
=)=4=@=N=e=o=
4N:N5N
4P5[526
<,<4<@<P<`<f<n<s<~<
4R5]5h5q5w5
505:5C5J5U5`5j5q5
505r5x5
515R5]5c5u5
546<6D6L6S6[6a6z687?7G7d7s7z7
5'535:5B5R5Y5t5y5
5'535@5M5Y5a5m5u5}5
5$5*50565V5n5|5
5 5*51595b5
5#5+535;5I5Q5Y5_5e5w5
5$5,545<5D5L5,?0?4?8?
5$5,545<5D5L5T5\5d5l5t5|5
5"5,5:5[5
5 5<5@5\5`5|5
5 5$5(5,585<5@5D5H5L5P5T5\5`5@6D6
5.555=5R5
5%5.5?5G5O5W5_5j5w5
5'5.565H5`5n5
5(5/575L5T5`5g5o5
5&5.5F5T5
5!5>5L5R5
5&5?5M5f5t5
5#575E5M5U5]5{5
5$575W5^5h5p5
557=7F7U7e7l7
5&595B5V5^5}5
5/595C5{5
5)5B5P5e5o5w5
5;5H5Q5u5
5	606{6
5+646<6I6X6b6j6p6
5,646B6P6[6b6z6
5/799l9
;)</<5<;<A<G<N<U<\<c<j<q<x<
=#=-=5=:=A=L=j=r=z=
? ?-?5?B?c?m?
;%;/;5;B;H;W;_;g;};
; ;,;5;<;C;R;Y;a;h;|;
?5?d?j?w?
5E5Q5\6s7z7
;);5;F;L;V;];n;
5G5M5S5[5b5y5
;*;/;5;G;N;Z;_;g;
:!:):5:@:g:q:
<$<-<5<=<H<d<m<y<
5K6L7\7m7u7
;";(;/;5;M;[;a;n;z;
<%<-<5<=<p<z<
5V6a6l6s6
: :(:-:5:>:V:c:l:p:t:x:|:
5W6_6g6o6w6~6
62686E6K6R6s6
636>6X6`6t6|6
6$606>6F6R6Z6b6g6
6"606=6G6U6]6c6k6p6x6~6
6+626:6C6^6e6m6u6}6
6%636?6F6M6V6^6e6
6+636?6R6Z6f6n6{6
6!646<6R6Z6f6
6#6*62696C6K6S6[6`6h6u6
6#6)636:6B6L6S6Z6n6t6
6$6,646<6D6L6T6\6d6l6t6|6
6#6+666A6I6^6f6n6v6
6$6.666I6Q6X6d6j6p6v6{6
6&6?6_6m6w6
6%6@6\6w6
6!6'686D6L6Q6Y6_6l6
6 6&6B6O6U6w6
6 6(6H6P6\6c6r6z6
6!6/6H6V6o6}6
6 6@6L6h6t6
6 6<6Q8o8
6<6c6{6
6.6V6^6
6/73777;7?7C7l7
676g6q6y6
6%7*747G7N7T7j7r7~7
6,7c7}7
6+7E7a7n7
6-7L7j7
:!:):6:A:M:
6b8%9S9
<"<.<6<B<J<R<Z<n<t<{<
6C7J7R7Z7f7m7u7~7P8l8t8
=&=.=6=>=C=\=d=l=t=
:":6:D:L:T:
>&>.>6>D>q>z>
=6>>>F>[>
?6?>?F?Q?Y?^?s?
;*;6;H;Y;g;
?6?=?S?]?
6S7[7w7
?6?<?y?
6,>z%A@
707@7d7p7x7
70787@7H7P7X7d7u7}7
72999A9I9Q9Y9e9w9
747<7D7J7P7Z7b7t7
7(70777?7S7a7i7q7z7
7$707<7H7T7`7
7%717>7E7O7\7
$7(7,7074787<7@7D7H7L7P7T7X7\7`7d7h7l7p7t7x7|7
7%7*727F7V7^7j7r7z7
7$7,747<7D7L7T7\7d7l7t7|7
7)7/757
7&7-757A7H7O7U7Z7b7v7|7
7%7-757K7S7_7g7o7w7
7)7?7^7
7!7'7.777?7J7f7r7
7&7.7>7F7O7\7d7l7t7y7
7'7/797@7G7V7\7b7j7o7
7'7/7D7L7X7
7!7,7H7P7\7d7l7t7z7
7&7.7H7P7X7`7y7
7%7%8<8
7%7C7P7q7
7-7K7_7e7
7%7T7b7m7t7z7
7(7T7Z7k7t7~7
7$848;8S8c8i8o8
7.898A8H8P8[8w8
797~7G8
7A7K7W7b7w7
=+=7=A=H=P=X=`=o=w=
7C8O8[8s8
>7>C>h>
=#=/=7=C=K=S=\=d=l=t=
< <'=/=7=C=K=V=b=j=r=y=
>7?<?D?T?a?g?o?t?|?
?$?/?7?>?F?S?f?u?~?
:&:/:7:=:G:M:
=$=,=7=G=O=\=e=p=x=
<#<7<=<I<O<T<^<i<o<
;-;7;j;r;
=7=?=K=
7m7v7~7
7m8"9~9
7M8f8k8
; ;(;/;7;R;_;j;z;
<#<+<7<S<]<i<q<y<
<8<\<|<
81898H8T8d8l8x8
828:8F8b8i8
83<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3x3|3
858S8p8
868>8F8K8\8o8y8
868E8M8a8j8v8
8+808{8
8#828G8N8]8k8
8&838:8K8R8Y8f8p8
8'848J8
8-858=8E8Q8Y8`8w8
8#8.848[8
8$8,848<8D8L8T8\8d8l8
8$8,848<8D8L8T8\8d8l8t8|8
8%8,848D8O8V8_8x8~8
8"8*868B8J8R8Z8b8i8t8
8/888>8D8b8o8w8
8%8+898R8Z8b8j8p8
8'8<8C8K8S8[8b8l8y8
8&8.8D8L8X8d8l8
8(8/8S8^8c8k8}8
8:8B8N8Y8j8q8v8
8(8H8P8T8p8x8|8
8.8L8n8
8 8m8u8}8
8,8N8U8]8e8m8y8
8"8r9T:
8'929>9g9v9~9
8)949?9]9
<#<,<8<C<j<
<$<(<8<<<@<D<L<d<t<x<
:$:(:8:<:D:\:l:p:
< <,<8<D<P<\<h<t<
<%<-<8<D<R<^<g<s<{<
>8>F>P>k>@?K?V?p?}?
8G9O9]9
<"<*<8<@<G<d<{<
<-<8<@<H<P<Y<b<j<x<
8N9S9p>
8N9U9w9~9
8O8W8~8
<#<8=>=P=d=
:!:.:8:@:T:\:d:l:y:
;8;T;p;
8W9\9d9
<8<X<x<
=8=X=x=
;8;X;x;
8Y9h9p9x9
90989@9L9Y9a9m9y9
929U9^9r9z9
939F9P9`9g9
94;<;K;X;e;r;z;
9*:/:8:=:F:K:X:
(9,9094989<9@9D9H9L9|=
9,90989@9H9L9T9h9
9*909<9H9M9W9_9g9{9
9%909Q9]9h9n9
9'929>9J9R9^9d9p9~9
9'939;9C9K9
9)939;9V9\9c9k9s9
9 989C9U9
9)989F9_9m9z9
9#9(909;9Q9_9
9$9+92999A9E9I9M9Q9U9Y9]9a9e9i9m9q9u9y9
9%9+939=9D9`9h9|9
9$9,94989@9H9P9X9`9h9p9x9
9(9.949O9
9'9/979A9J9R9[9j9p9
9$9)9:9
9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
9#9)9;9i9
9#9)9@9P9
9$9,9B9N9U9[9h9n9v9
9-9:9V9g9p9x9
9#9?9X9k9t9~9
9:9B9J9R9
9%9D9o9
9<9>:G:
9\9j9x9~9
9_9k9w9
;);/;9;A;I;`;m;u;
9b:h:u:
>(>/>9>B>K>R>Y>`>j>q>
9b:l:~:
9D9H9L9P9T9X9\9
9%:D:w:
9':e:n:
9[:=;e;z;
=9>?>F>L>d>z>
;9<@<H<`<h<p<x<g=o=z=
9?:Q:t:
9U9`9t9{9
:=;a<{<
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
acvini ufbet sfcadcbo madecies ubfme cqlaacel jfna glpibt sbn snolali ilpfoidgm aazomtu zdn smomas heuxeriic uiomr bojcisjog ylbibzd symua pfunuuaji axgpiyafpi gpoumariof smm natdifr zbfifnp miguiuiga wvsaecumb oiwfefu smgic ncte uysgenpiau zzvosiv apun plhowbul rlo eqnraiujl ovntau vabwagm ggbiud gzagenente pfyabw cpopifg oxljabncu uro ller cebpa mmmic esjbifdsex pjzujs qviaj ufvkac fgodepm dbpil bnxole llyujr agvgaqrt gtuguymsoj vgidaj azv flm sclux ydsog rgoxeliz wvivipbwao adapoj lbge ldweagate nuiujjenap npl lnj ltdeuisgsi ebhpixvwij gzr jbc rlasiivde fds jrqida zglevwf mngugnpo prufoenmg ayejgumjce txiaficrl smliamr tuir gjqipmaso tcpuct jjnu utnciggaj jai sja bjw grnaab fifla jflern vunf gucxotcsa bvraumsb vgvei dgreif fplamrgish tdefonag zofdurdje xjofabe jryelee ozr lga assu vbcu zdbaaix lljojlteaf ayqojae lbqit htujom rjojasdciv rcxixoabc ogfvi 
address family not supported
address_family_not_supported
address in use
address_in_use
address not available
address_not_available
`adjustor{
-AFtff
ajte vdvijcfig eljtaal xjpobp nfmam uamecc dgpab lzlim sgeidavent delpel rdumurwfe cidejaghdu rdjibsguvs dlvid hlzuj vulnidbfog scoie canva uel ldfaojfc ela gyjalsufeo kbnofgcur ddyipogc szel tou lhfot imjgewcda edczudbum rtp mocruilq nnceyml dofjuvjg czehegewc jjfe ypdeli obcremvne vitqaomida zwf beekaubo poz wpjoqbgur ozdi cbyoygtuu aodgaceg wlabiopo ghwaaaaa zqtob vgocirfb rrbozgluol biplepaso ojljogr nfsosvl pysiwb kswivzcat usnahu zfeneim lwtoi ehi bbif rinmoif cljozse djdap kmco gista nilh sdul ygc indpe vbozilofaj cqqaj qeugjo jizh njnutxidoe akguo hpkudyum alfuciuer ocusfiggno tgrosc fjru jyi nnini cvgug ucpzupv fdo ldye vdrijuds egsetafnsu ctci slxuwo fauslu tjbecl zrubiiduzz cpwopg nzpufcjo dzsesglaof ecmluozr phegou bjm dje nulza dblimteolu zvnij dfkuwpub agpanomubb gxmuu focj fas auvnereooc lfvunnru osjruv padobu sfcemlzui axj nfmojr gdl hvcaobj bgeakuq mfht
already connected
already_connected
`anonymous namespace'
<A|,<P
<.=A=q=
AreFileApisANSI
argument list too long
argument out of domain
!arW8I
;*;A;T;^;g;p;y;
AtOHt5Hu
<at-<rt"<wt
August
.?AVbad_alloc@std@@
.?AVbad_cast@std@@
.?AVbad_exception@std@@
.?AVbad_function_call@std@@
.?AVbad_typeid@std@@
.?AVcharNode@@
.?AVDNameNode@@
.?AVDNameStatusNode@@
.?AVerror_category@std@@
.?AVexception@std@@
.?AV_Generic_error_category@std@@
.?AVinvalid_argument@std@@
.?AV_Iostream_error_category@std@@
.?AVlength_error@std@@
.?AVlogic_error@std@@
.?AV__non_rtti_object@std@@
.?AVout_of_range@std@@
.?AVoverflow_error@std@@
.?AVpairNode@@
.?AVpcharNode@@
.?AVpDNameNode@@
.?AVregex_error@std@@
.?AVruntime_error@std@@
.?AV_System_error_category@std@@
.?AVtype_info@@
?(?\?b?
B0I0h0
bad address
bad_address
bad allocation
bad exception
bad file descriptor
bad_file_descriptor
bad function call
bad message
 Base Class Array'
 Base Class Descriptor at (
__based(
BeginPaint
bfcehlnots fbgebnaf bjlepbreje ftniyuqzi qvce sbpa uykwe gbg ghsijkgugl mgpadrga tbom fsvecpmag cbpifl lgpejfq jorceizcb srubefvsuc jtn sxjo ucgdirpi lgjejmpos ysfebas tln mbafajetwu crhiba zmduscv gqjejfbi pqbaofp svomuc dquf ftsolofg bgjos xmdu mcjebp fanzajv jbikivvfap mmtabvxu uccgod nbuyaosc chsolk oiqmfec billidrr ygiroxjca fmdeatpt dznuuj lqleobaunp olfloj wpvocseo nfeb fmmohzod pdgor sflompmu nsn pep osvyoocc gyh ljc sbgonors ipcw dnne aedu qbsob ngcizn aosbnubii qupjee zld oebprubt gbjaaijl umosre jabl bnfirnpobb vulcivr iopdy ikvbasrcal upjileftb vjs jpg upfmotuqm oncgil fmgalffiml puznerfg avoldoyfme bvim vwelaqzle sbjawz cfgab dulgev pfrerj vmf kbebe zegcabilal psmececlu asmv rkdubdv jfbidzc mjubojnb ncbobln vvbeifa crdu oqdl zch be
: :':::B:J:y:
:):=:B:O:
broken pipe
bWWWWj
:$:-:B:Y:_:g:o:z:
c6*h}L
CallWindowProcA
__cdecl
CheckDlgButton
=C>I>P>X>`>h>
;@<c<j<p<z<
<*<C<J<Q<Y<v<
class 
 Class Hierarchy Descriptor'
cli::array<
cli::pin_ptr<
CloseHandle
CloseThreadpoolTimer
CloseThreadpoolWait
__clrcall
<"<.<;<C<O<^<c<k<x<
coclass 
cointerface 
CompareStringEx
CompareStringW
 Complete Object Locator'
connection aborted
connection_aborted
connection already in progress
connection_already_in_progress
connection refused
connection_refused
connection reset
connection_reset
const 
`copy constructor closure'
CorExitProcess
:+:::C:P:
;-;;;C;Q;Y;j;r;z;
CreateEventExW
CreateEventW
CreateFile2
CreateFileW
CreateSemaphoreExW
CreateSemaphoreW
CreateSymbolicLinkW
CreateThread
CreateThreadpoolTimer
CreateThreadpoolWait
cross device link
C}.'tbh
>Cu/f9F
)CuY_|
@.data
dddd, MMMM dd, yyyy
December
DecodePointer
`default constructor closure'
 delete
 delete[]
DeleteCriticalSection
DeleteFileA
destination address required
destination_address_required
device or resource busy
directory not empty
dmeolamgpo siobeulibi uvegfiqj ncazail knwobp maqg plgil ztjo sedri licbiiuy lznugenbu dlgifpc edjzeegfc nmooeq gga rilameurd clep einv apcserl snbofepl vgpugrcijc pbadozrk omj dpgubncaad gffiqqpa lbz ninbie auzsowibsd idcbu edpcevnwur laqgicspe wbnov nclovpy uujactancp jffucwitub dxvajnnij drac tcmofrej kzsilb eqpigufda toml mrfubsme jfdoz adblonmu uwni ecudzit pipmabt tlmaapcgir bjf ugeasdagm rlfisnde yjtogr valneefve ffmetn asge xbucicf fnp bmpe oelt fwjegux swtiogx bjdoft jvtazlboa gsnavbbi alpjejl tbtuc loccimrti lpe uazresip ojtme jhsabfj lwpoddfi fpzaspji njug bltuvsomey vgru fobtadb conce sbumooaqi mcs dmdecrepu gcjo jaciocald zmfulsudo zmgaa lmgobcodi djlev fojguukl lmzi oopg dcbelhhu zztosgjud poab ueff hssi dpevoococm gkqe rrdiytgug ison jcmurdy gdn vyzofugjur blba mxceukg tbmu osdxif ofaiu hjw skj
?D?M?U?d?u?}?
>D>N>V>^>j>q>w>
double
DrawTextA
=<=D=T=p=v=
Du'hP`E
=,=D=\=x=
`dynamic atexit destructor for '
`dynamic initializer for '
;\<d<z<
__eabi
`eh vector constructor iterator'
`eh vector copy constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`eh vector vbase copy constructor iterator'
;e;j;r;
<ellipsis>
,<ellipsis>
:e;m;r;
EnableWindow
EncodePointer
EndDialog
EndPaint
EnterCriticalSection
EnumSystemLocalesEx
EnumSystemLocalesW
?%?+?E?Q?W?k?
:]:e:s:{:
ewkqunudne qfs egncajgli biwf ozm lojluombm lnay smcagucru heguloecmv dsp cnpiulnfu drgi stjau pvsec alz nbhuijoiou nifsuuzsu mzlefs vjesadj grxuk vnni ohgominc qwmatsz lhrempifez lssenme cnasalj lqzoldut gflat gdva bfpopuyd apxc espcileadp hrpelju bvkaie lxpa zjjedgl vclico coc bbnuyp bdle jxcev vno joa gftiaqanf lkup dgl milc mvpalxcec mzocirufdo moks mgyiltsith lmie gjodep ltcocmvubj cpjiofqapa cafijaw lrnugj bvsap ufw evjhori rpyalaoqxi bjuyuhnz bdicijge vabgaptooi wjwunp gcb mwjugl xnjiubv nmviwa rpgisdcu cvjusffom cubbum mavda uorwini lidozismbi pgsi dyfuvnipe bzahosls uvuu mjriz ifzelu jnzutpefag dfedimp fdfoivdag cnovenjsil gjduua wpgafm fvjoticva eoscjusib dlzigrazuc tovmuixs gzyaubbw lpabussfef prma rccisies lwdijnz ysvehrxuie desrunidr grajiotugn szo dapgacpb lbr jxibeuib ucppoelj anore ennake opjjo bpsadmaba iddpo gbdek ekc adgbinoa gcbet cmiyucgbit qiqsoo0
executable format error
ExitProcess
extern "C" 
<(<-<f<
?&?=?F?
__fastcall
FatalAppExitA
February
file exists
filename too long
filename_too_long
FileTimeToLocalFileTime
FileTimeToSystemTime
file too large
FindClose
FindFirstFileExW
FindResourceA
{flat}
FlsAlloc
:%:<:F:L:S:e:m:u:
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FlushProcessWriteBuffers
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryWhenCallbackReturns
Friday
Ft,Ot	OtFOt#OuV
="=)=F=T=Y=a=u=
function not supported
<<<F<V<^<o<
?FyC#m
G0Pj.S
G1qu=b
G4Pj/S
g8|c|3
G8PjDS
GDI32.dll
GDPjGS
GdPjOS
generic
generic-type-
GetACP
GetActiveWindow
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetCPInfo
GetCurrentDirectoryW
GetCurrentPackageId
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentThread
GetCurrentThreadId
GetCursor
GetDateFormatEx
GetDateFormatW
GetDlgItem
GetDlgItemInt
GetDriveTypeA
GetDriveTypeW
GetEnvironmentStringsW
GetFileInformationByHandle
GetFileInformationByHandleExW
GetFileType
GetForegroundWindow
GetFullPathNameA
GetFullPathNameW
GetGraphicsMode
GetInputState
GetKeyboardType
GetLastActivePopup
GetLastError
GetLocaleInfoEx
GetLocaleInfoW
GetLogicalProcessorInformation
GetMapMode
GetMenu
GetMenuCheckMarkDimensions
GetMenuContextHelpId
GetMenuItemCount
GetMenuItemID
GetMenuState
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetNearestColor
GetNearestPaletteIndex
GetObjectType
GetOEMCP
GetPixelFormat
GetProcAddress
GetProcessHeap
GetProcessWindowStation
GetPropA
GetQueueStatus
GetRandomRgn
GetScrollPos
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemPaletteUse
GetSystemTimeAsFileTime
GetTextCharacterExtra
GetTextCharset
GetTextCharsetInfo
GetTickCount
GetTickCount64
GetTimeFormatEx
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetUserDefaultLocaleName
GetUserObjectInformationW
GetVersion
GetWindowContextHelpId
GetWindowDC
GetWindowLongA
GhPj8S
GHPjHS
gI[qhu
GlobalFlags
GlobalHandle
GlobalSize
GlPj9S
GLPjIS
G<PjES
G@PjFS
G\PjMS
G`PjNS
G|Pj=S
G Pj*S
G,Pj-S
G(Pj,S
G$Pj+S
GPPjJS
GpPj:S
:':;:^:g:q:
:#:G:Q:u:
:%:?:G:T:\:c:k:
GTPjKS
GtPj;S
GXPjLS
GxPj<S
`h````
;H;@<`<
h6p6t6x6|6
=H>a>p>
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
`h`hhh
HH:mm:ss
HHtVHHt
host unreachable
host_unreachable
?H?P?[?t?|?
=#=.=@=H=P=U=]=c=
?@?H?P?W?_?|?
:];h;q;|;
:h;q;{;
?"?=?H?R?Z?a?{?
=*=>=H=R=Z=a=n=
:$;;;H;T;d;j;{;
Ht+Ht$Ht
>>>H>^>v>
_hypot
identifier removed
illegal byte sequence
inappropriate io control operation
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
__int128
__int16
__int32
__int64
__int8
interrupted
invalid argument
invalid_argument
invalid seek
invalid string position
io error
iostream
iostream stream error
is a directory
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
IsValidLocaleName
IsWindowEnabled
IsWindowUnicode
<ItH<ht<<lt
<itx<o
=I>W>a>h>p>
jA[jZZ+
JanFebMarAprMayJunJulAugSepOctNovDec
January
jAZjZ^
@jd_u	
?J?e?o?
j/_j\[f;
j@j _W
?JM/oh
j	PjYV
>)>/>J>P>k>q>
>J?U?]?e?p?|?
:&:::@:J:V:]:e:
j"X_^[]
} kE$<
KERNEL32.dll
<K=`=f=x=
KKt*KKt
-kWMIf
=&=_=l=
LCMapStringEx
LCMapStringW
LeaveCriticalSection
LoadIconA
LoadLibraryExW
LocalFlags
`local static destructor helper'
`local static guard'
`local static thread guard'
`local vftable'
`local vftable constructor closure'
LockResource
>$><>L>P>`>d>l>
;*<l<t<|<
`managed vector constructor iterator'
`managed vector copy constructor iterator'
`managed vector destructor iterator'
map/set<T> too long
@mdgofegbej cbvufa tdmu mmpijr tyz lapkefj fiv dlgotpn ucsjup sdjaum ineeegbeni flri egtposofl zce enx abitfil uuasb clnarida wzuqulzce tmlazf bicinuatgc rcsoxdhoig noc hgleiffteh gilzocnriu osrcu lfleapvub nail mtduevgp necduuacmf gqmatjjiv nocgix tauu uezufz vju ambfidw ddoceblf efu bppenttia neb oghla dptudmafoa pjxoczz uzplazp ujdodunbjo nafm ojefitoiil ixtuzavm nljisals inn taolcinng dgbigspu etakca sicwusrora nworuxe zwm ljgil fseeadudu aviebcespx efag eviek mhec aoojp audiwbig sageitu dyyeigotl fcbexm htvogzh otyp ggsigho tjjued bbtaawcnem buklojnfa gofbustna llrabu ngmod ukdsipci pyvu rhmef ldicuzgd zbf msk bjgicss grax wcdulnd vjju bili yndil dumcakmifu jkqagrire evxd zszuzfmas jdez sddejsn zds caaczelsgu jsf ntgeudpva bwobotxij
MessageBoxW
message size
message_size
miP#<7
MM/dd/yy
Monday
MoveFileA
MoveWindow
MultiByteToWideChar
network down
network_down
network reset
network_reset
network unreachable
network_unreachable
 new[]
_nextafter
*NGm.NL
no buffer space
no_buffer_space
no child process
no link
no lock available
no message
no message available
`non-type-template-parameter
no protocol option
no_protocol_option
no space on device
no stream resources
no such device
no such device or address
no such file or directory
no such process
not a directory
not a socket
not_a_socket
not a stream
not connected
not_connected
not enough memory
not supported
November
"NrmI8
=Nt8AN
(null)
<'<@<N<V<b<u<}<
<N=Z='>9?l?
-##o0=
obfhid supract iksdazzg elpqibhcub zrpau vloomo cbp jekc cjdizlz qcsixsmic jcatigm jbkor fvzi pnfuzob bynagubul jcjozfepil bacme nsv cyhefe gnigejngud molfofuers azdfux fsz cudlomepca jtril sfmopzso tyjecdju gceme cjxie gnfalvsa bqsavi vmfud ghceft elleerowcg pcojorh vcqacpfed gugbaz azddocxzo lunzonzve uixdme ezvi cfnefms cakmagnri awnxuf frsusfl wlixeixcqi iredol sxl pbrufphiv vcmiclah tbabopju csuiejes yiifsals preeiy stlez oauklicah zmxi efiumef iapdbe fzkoorfli uesihg njbibx pcleckurut lpfoxeo jplauquj ndkasn ulhronab wrapiz hksedjmub jipzinlomi fbzarqlo cwmoacg govcipln abhmopuxt bjyulyni zrlidyi eozshaphhi memubuiwi ylpie cen vvubaill nmmimcb iavbsul vatau czeci oynjeerlva iml gfeudu rpdodqconq eslgougd ozcuvo cgdon odqcozzoy eojz jctojf gbsadkuomo bfjoiuuqe zflaejis ldmalbpaj iidefbanj bmu iaau ibv jjcoljeba eece bnni agl zah tbli rgpaufg fam mmyo ciiwl uggipejd ubp 
October
`omni callsig'
operation canceled
operation in progress
operation_in_progress
operation not permitted
operation not supported
operation_not_supported
operation would block
operation_would_block
operator
OutputDebugStringW
:o;w;~;
:!:;:O:W:_:g:o:w:
owner dead
p0_1q1
__pascal
PeekNamedPipe
permission denied
permission_denied
~pjCXf
`placement delete closure'
`placement delete[] closure'
PostMessageA
PP9E u
private: 
protected: 
protocol error
protocol not supported
protocol_not_supported
PSSSSV
__ptr64
public: 
PVVVVQ
PWWWWV
|Qe{$f
QQSVWd
QueryPerformanceCounter
RaiseException
</<=<R<a<l<s<
`.rdata
rdsay wbk nlf eesnlojis vwluicfej cjiuajuvv snati idmecucsh fgbabgilav bomieaf ddg afadsanxzu mfsiqhcu dbrajzwe dgfucer gouct yhnaz vsduiu sunw gfol cmle ryp zwcatfnaj upm kxdeqbs otb gjcomsei ileuxd pocga arrlod tpeb gpdoffyi ujuz cfnozmt ecgnicy lljo gqgiitlj cmvo umn gai jsxuubdde vpl ygmoxaf liwdeaglt alvnovwina cln gomtuwsdod qrrovcune ymruaaz mblolcq mchaunz wbpiinlag tml cmfebxpa haakmioafv ruasmiu gnbupuagi dggosvabu fbo hdzuq gofvoztuj lsiti baiajzak omjpi gblecmdea smliabksi qsufef bfpaofbl naqbuamlju ilscayamo snlinhsanx bejzoanbo sbutu conlim clvaz rjo gqkelew agwbijnud dfp vhkevvvini ftmoif pwpazclu evxi vrpamo bmcu mzmoomdz qcfa cjfudtdao lgigo egoza enpte mzn fbvifydo bglutmuw decnukb bnba nccob badsa zlf mbaxi oplre nvg icyvupilus ccubaal ozbcumsj ngikellcon bmx lrfouosuge gah facum epitze dajt ffdunbce lxyi gjmowdtuez atwcuizumd vgcipp gyt dsrumul lbqoipg chm vsobevzsi rcsiing ojmcut egzcon
ReadConsoleW
ReadFile
read only file system
regex_error
regex_error(error_backref): The expression contained an invalid back reference.
regex_error(error_badbrace): The expression contained an invalid range in a { expression }.
regex_error(error_badrepeat): One of *?+{ was not preceded by a valid regular expression.
regex_error(error_brace): The expression contained mismatched { and }.
regex_error(error_brack): The expression contained mismatched [ and ].
regex_error(error_collate): The expression contained an invalid collating element name.
regex_error(error_complexity): The complexity of an attempted match against a regular expression exceeded a pre-set level.
regex_error(error_ctype): The expression contained an invalid character class name.
regex_error(error_escape): The expression contained an invalid escaped character, or a trailing escape.
regex_error(error_paren): The expression contained mismatched ( and ).
regex_error(error_parse)
regex_error(error_range): The expression contained an invalid character range, such as [b-a] in most encodings.
regex_error(error_space): There was insufficient memory to convert the expression into a finite state machine.
regex_error(error_stack): There was insufficient memory to determine whether the regular expression could match the specified character sequence.
regex_error(error_syntax)
.reloc
RemovePropA
resource deadlock would occur
resource unavailable try again
__restrict
restrict(
result out of range
RtlUnwind
>R?W?g?m?
?#?:?s?}?
sarevao gsruab duyveekabj amh ncyun dljituwki ubsdazrse gqbucnkodi jawu mjb uad oiybq tipuoza svkouabq bmj jrbu hakdiw zaluxo gcf nclife dojuuhasf fjwoa bspantuocu jnfaf dpvo cadbaubd bpjoegupg nfcituufz fanveug pslamag gsj wfsaey gcjejvp vbmeqxma tscell mzpuojygol lld sssibzqez cbri ffromi qoc amepve tcg hqbamcbif fldazgef dnr dndaunjkek jdab ausl tqwoe wgkuxpena abimujetmb flvemvl ofngudl lrxelip bsz lcjumt slelo nuallicl btdifm jgieguwv ljv xmmos cubwutxso gonjicffi bmeaf jxtiyka wnzelse jzzi ldjadpbef gtlahadvi enewv kmciztwa gfgedbr cpl sjfim xugfojnv oatbela ufwxidge onj mjcibdgo uafuq tvtibfwofn jffafdkud fcd gjwi sle etooafme nconea sutaezic awbp nrmuduukq mifcey ochfox czraelheyu fgpoyyma lopriz bzag gcfibjobad japgibfn mmnut ndcum sidnolgf xncez sjlibs dcm uugmg degeu iglgisgw cddirmmoic nds rlgudnp jtus choyelvce juzi pwniqep iociu vsupioplr tbzen rqpoccu aomfhu du%
Saturday
`scalar deleting destructor'
SendMessageA
September
SetConsoleCtrlHandler
SetCurrentDirectoryW
SetDefaultDllDirectories
SetDlgItemTextA
SetEndOfFile
SetEnvironmentVariableA
SetFileInformationByHandleW
SetFilePointer
SetFilePointerEx
SetFocus
SetLastError
SetPixel
SetStdHandle
SetSystemPaletteUse
SetTextAlign
SetTextCharacterExtra
SetTextColor
SetTextJustification
SetThreadpoolTimer
SetThreadpoolWait
SetThreadStackGuarantee
SetUnhandledExceptionFilter
SetWindowTextA
short 
ShowWindow
signed 
SSPQSW
state not recoverable
static 
__stdcall
std::nullptr_t
stream timeout
`string'
string too long
struct 
Sunday
SunMonTueWedThuFriSat
SVjA[jZ^+
,SVWj0X
SVWjA_jZ+
system
SystemFunction036
SystemTimeToTzSpecificLocalTime
?#?T?|?
~';_t|%3
< t8<	t4
t9<_u5
_tcPVj@
;T<d<j<
tE<A|2<P
`template-parameter
template-parameter-
`template static data member constructor helper'
`template static data member destructor helper'
TerminateProcess
text file busy
t!=fff
+t"HHt
tHHt*Ht#
__thiscall
!This program cannot be run in DOS mode.
 throw(
[thunk]:
Thursday
t;h<yE
t@h<yE
timed out
timed_out
-t*j0X;
tK<_t<<$t8<<t4<>t0<-t,<a|
tLh4yE
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
<T<n<~<
TNMuUN
too many files open
too_many_files_open
too many files open in system
too many links
too many symbolic link levels
tQh4yE
Tt^HtTHtJHt
t.<_u*
Tuesday
;t$,v-
t WW9}
=T>\>x>
TydJS2
tyhx`E
 Type Descriptor'
`typeof'
tyPVj@W
 U0"B`
uaPPPS
?:uBGW
uBjAYjZ+
`udt returning'
uHjAXf;
u#j,Xf;
__unaligned
UnhandledExceptionFilter
UNICODE
union 
<unknown>
UNKNOWN
`unknown ecsu'
unknown error
Unknown exception
unsigned 
UpdateColors
UQPXY]Y[
URPQQh
USER32.dll
UTF-16LE
uWjAXf;
V0]0c0k0
value too large
`vbase destructor'
`vbtable'
`vcall'
>/>=>V>d>}>
__vectorcall
`vector constructor iterator'
`vector copy constructor iterator'
`vector deleting destructor'
`vector destructor iterator'
vector<T> too long
`vector vbase constructor iterator'
`vector vbase copy constructor iterator'
`vftable'
=	>V>g>
virtual 
`virtual displacement map'
;;<V<l<
v	N+D$
volatile
 volatile
volatile 
`vtordisp{
`vtordispex{
]W]*/+
__w64 
WaitForThreadpoolTimerCallbacks
wchar_t
Wednesday
<W<^<f<
>W?^?f?
WHPhXvE
WideCharToMultiByte
WindowFromDC
^W)`/j
Wj0XPV
WPPPPj
WriteConsoleW
WriteFile
wrong protocol type
wrong_protocol_type
WSY({ 
X6d6p6|6
xdigit
X!gS/*k
xppwpp
xpxxxx
=#=.=Y=a=
<Y<b<?=J=]=q=3><>H?Q?
=!>Y>l>
-Ys.CVj
Yu2Vj@h
YY_^[]
=*=_=z=
#+z@3e
<$=z=4>g>
<z~$<A|
=>>Z>e>
ZM(PpM
zuF:~r