Analysis Date2014-02-19 17:02:34
MD5182aecd96081bcb96ef2cbcb8bad1a31
SHA138c2b1ffddafae98b2adc07c1047f46986429a3c

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: 7740660211b830046d40af8905ffbb00 sha1: 38855db33fd3ab9fa4161dbe8ff9cc78ac10f498 size: 221184
Section.rdata md5: aad247606d68e4e47666b341dd458c47 sha1: 8bf0356966a37ce32573c4b7c70ecb7af75913e3 size: 77824
Section.data md5: 31357f29f781a45d69817d50200e1c58 sha1: 634dbeba9de4f3587570ac4d4663ddd289a12e21 size: 12288
Section.rsrc md5: 3b88a0edd89a1c9fc413f4b0c580758c sha1: cd3458b37e5a1312f521d5899400c2108bdb98a1 size: 90112
Timestamp2005-03-10 11:43:24
Pdb pathd:\DW4PC Build\Project\DW4ConfigUtil\Release_Japanese\DW4Config.pdb
VersionLegalCopyright: (C)2005 KOEI Co.,Ltd. All right reserved.
InternalName: SM3Config.exe
FileVersion: 1.0.0.0
CompanyName: KOEI Co., Ltd.
LegalTrademarks: (R) 真·三國無双3, (C) KOEI Co., Ltd.
Comments: 真·三國無双3的设置
ProductName: 真·三國無双3的设置
ProductVersion: 1.0.0.0
FileDescription: SM3Config.exe
OriginalFilename: SM3Config.exe
PackerAHTeam EP Protector 0.3 (fake PCGuard 4.03-4.15) -> FEUERRADER
PEhash16365ea98a77e434e72a2f1328085111e5d483fe
IMPhashe64d8797b615d1bd0dba9a9103c6847b
AVmcafeeW32/Almanahe.c
AVmsseVirus:Win32/Almanahe.B
AVclamavW32.Alman-4
AVaviraW32/Almanahe.B
AVavgWin32/Alman

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates FileC:\WINDOWS\system32\d3d9caps.tmp
Creates FileC:\Documents and Settings\Administrator\My Documents\KOEI\Shin Sangokumusou 3\inputmap.1
Creates FileC:\WINDOWS\linkinfo.dll
Creates FileC:\WINDOWS\system32\drivers\IsDrv118.sys
Creates FileC:\Documents and Settings\Administrator\My Documents\KOEI\Shin Sangokumusou 3\inputmap.2
Deletes FileC:\WINDOWS\system32\d3d9caps.dat
Deletes FileC:\WINDOWS\system32\drivers\IsDrv118.sys
Creates MutexDirectInput.{5944E682-C92E-11CF-BFC7-444553540000}
Creates MutexDirectInput.{89521361-AA8A-11CF-BFC7-444553540000}

Process
↳ C:\WINDOWS\Explorer.EXE

Creates FileC:\temp\files\monitor.exe
Creates FilePIPE\SfcApi
Creates FileC:\temp\monitor.exe
Creates FileC:\WINDOWS\system32\drivers\nvmini.sys
Creates FileC:\temp\files\malware.exe
Creates FileDL5CProc
Creates Mutex__CORE_DL5__
Creates MutexPNP#DMUTEX#1#DL5
Creates Mutex__DL5_INF__
Creates Servicenvmini - system32\drivers\nvmini.sys

Process
↳ C:\WINDOWS\system32\svchost.exe

Process
↳ C:\WINDOWS\system32\svchost.exe

Process
↳ C:\WINDOWS\system32\svchost.exe

Process
↳ C:\WINDOWS\system32\svchost.exe

Process
↳ C:\WINDOWS\system32\svchost.exe

Process
↳ C:\WINDOWS\system32\svchost.exe

Process
↳ C:\WINDOWS\System32\svchost.exe

RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\CIMOM\List of event-active namespaces ➝
NULL
Creates FileC:\WINDOWS\system32\WBEM\Repository\$WinMgmt.CFG
Creates FileC:\WINDOWS\system32\WBEM\Logs\wbemess.log

Process
↳ C:\WINDOWS\system32\svchost.exe

Process
↳ C:\WINDOWS\system32\svchost.exe

Process
↳ C:\WINDOWS\system32\spoolsv.exe

RegistryHKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\BeepEnabled ➝
NULL
RegistryHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\System\Print\TypesSupported ➝
7
RegistryHKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\Printers\SymbolicLinkValue ➝
NULL
RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Print\Printers\DefaultSpoolDirectory ➝
C:\WINDOWS\System32\spool\PRINTERS\\x00
RegistryHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Providers\LogonTime ➝
NULL
Creates FileWMIDataDevice
Creates FilePIPE\lsarpc

Process
↳ C:\WINDOWS\System32\alg.exe

Process
↳ C:\WINDOWS\system32\svchost.exe

Network Details:


Raw Pcap

Strings
..
-
 
-E-0
-000-+ 
\
.
.
e
. 
C
0
0
...........?- 
0
0
0 
.
?
.
..
E
:732u
A.L..

080404B0
1.0.0.0
%1: %2
%1 contains an invalid path.=%1 could not be opened because there are too many open files.
%1 has a bad format."%1 contained an unexpected object. %1 contains an incorrect schema.
%1 was not found.
accChild
accChildCount
accDefaultAction
accDescription
Access to %1 was denied..An invalid file handle was associated with %1.<%1 could not be removed because it is the current directory.6%1 could not be created because the directory is full.
accFocus
accHelp
accHelpTopic
accHitTest
accKeyboardShortcut
accLocation
accName
accNavigate
accParent
accRole
accSelect
accSelection
accState
accValue
All Files (*.*)
Anisotropic
Anisotropic Filter Level:
Announce Yourself:
Antialiasing:
An unknown error has occurred.$An invalid argument was encountered.
an unnamed file
Available Devices:
Backward:
Bilinear
Bodyguard Orders:
Bow Attack:
(C)2005 KOEI Co.,Ltd. All right reserved.
Cancel
Cannot find this file.
Characters
Charge Attack:
Check
, (C) KOEI Co., Ltd.
Clear Settings
Close
Command failed.)Insufficient memory to perform operation.PSystem registry entries have been removed and the INI file (if any) was deleted.BNot all of the system registry entries (or INI file) were removed.FThis program requires the file %s, which was not found on this system.tThis program is linked to the missing export %s in the file %s. This machine may have an incompatible version of %s.
Comments
CompanyName
Continue running script?
Could not start print job.
Defaults
Destination disk drive is full.5Unable to read from %1, it is opened by someone else.AUnable to write to %1, it is read-only or opened by someone else..An unexpected error occurred while reading %1..An unexpected error occurred while writing %1.
Disabled
Disk full while accessing %1..An attempt was made to access %1 past its end.
Dispatch exception: %1
%d Samples
Dynamic Shadows
Dynasty Warriors 4 Configuration
Failed to initialize Direct3D.:Cannot create graphics settings file.  Settings not saved.IGraphics configuration file could not be loaded.  Using default settings.
Failed to launch help.
Failed to open document.
Failed to save document.
FileDescription
FileVersion
Fog Distance:
Forward:
Frame-based
Fullscreen
Gamma:
Graphics
Guard/Shift:
                                 H
         (((((                  H
&Help
         h((((                  H
        h((((                  H
&Hide
If necessary enter your proxy user name and password
Input
Internal application error.
InternalName
Invalid filename.
IP Address:
jjjjj
Joystick %d - 
Jump:
KOEI Co., Ltd.
Left:
LegalCopyright
LegalTrademarks
Load Player 1 Defaults
Load Player 2 Defaults
Mail system DLL is invalid.!Send Mail failed to send message.
Map Toggle:
MError writing player 1 control configuration to disk.  Is the file read only?MError writing player 2 control configuration to disk.  Is the file read only?
Mixed
msctls_trackbar32
MS Shell Dlg
Musou Attack:
Name/Life Display:
&New 
No error message is available.'An unsupported operation was attempted.$A required resource was unavailable.
No error occurred.-An unknown error occurred while accessing %1.
No error occurred.-An unknown error occurred while accessing %1./An attempt was made to write to the reading %1..An attempt was made to access %1 past its end.0An attempt was made to read from the writing %1.
None
Normal Attack:
(null)
Number of Characters:
Objects
Open
OriginalFilename
Out of memory.
Password:
Pause:
pixels
Player 1
Player 2
Please enter a currency.
Please enter a date.
Please enter a GUID.
Please enter an integer.
Please enter a number.*Please enter an integer between %1 and %2.(Please enter a number between %1 and %2.(Please enter no more than %1 characters.
Please enter a time.
Please select a button.*Please enter an integer between 0 and 255. Please enter a positive integer. Please enter a date and/or time.
Please verify that the correct path and file name are given.
Port:
Press a control
Primary
ProductName
ProductVersion
(R) 
Rendering:
Right:
Save As
Save changes to %1? Failed to create empty document.
Save Settings
Screen Resolution:
Secondary
Seek failed on %15A hardware I/O error was reported while accessing %1.0A sharing violation occurred while accessing %1.0A locking violation occurred while accessing %1.
Set proxy settings
SM3Config.exe
StringFileInfo
SysTabControl32
Texture Filtering:
The file is too large to open.
Time-based
Translation
Trilinear
#Unable to load mail system support.
#Unable to read write-only property.#Unable to write read-only property.
Uncheck
Unexpected file format.V%1
Untitled
Use Internet Explorer settings
Use proxy for server communication
User name:
VarFileInfo
Vibration:
VS_VERSION_INFO
V-Sync:
YaccDoDefaultAction
^(_^[]
^(_^][
______
_________
;;;;;;;#
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
04Q'$I'
*0b)+A
0UUUUW
#0Y ^;g
1..%(+
-1"<16!
1e!3f8r
1#QNAN
1#SNAN
+.2:7H88G;?M<AS=BS<B\BGH
2@|%9s
2b'*?5j
%2\CLSID
%2\DocObject
%2\Insertable
   2P PRESS F1
%2\protocol\StdFileEditing\server
%2\protocol\StdFileEditing\verb\0
2P WAITING ...
#32768
3-$4i{!
383{7s313
3CN8CL
3?Y2Mt
4811111K#
4	DSvx
59=coxNLK-@P
@?@6KX
76.mt~
7 =CXy=w
+)7'$Kc
7Os$=]7Fj2y
8h^,X(	
9'*1'B)'P!'^
)96;86;3<
%9, %8
9~du"hx
9~Ht]9~
9~Lu	P
9^@t83
9^@Wt;3
}*9X ~%
	:*\<a
]]a0342I\
<A|2<Z
AAB_\Yais
A buffer overrun has been detected which has corrupted the program's
AC 40D
/ACg*F
AdjustWindowRectEx
ADVAPI32.dll
AfxControlBar70s
AfxFrameOrView70s
AfxMDIFrame70s
AfxOldWndProc423
AfxOleControl70s
AfxWnd70s
america
american
american english
american-english
Apartment
Apps Key
*AQ"qA
Argentina
A security error of unknown cause has been detected which has
.?AUCThreadData@@
August
.?AUIAccessible@@
.?AUIAccessibleProxy@@
.?AUIAtlStringMgr@ATL@@
.?AUIBoundObjectSite@@
.?AUIDispatch@@
.?AUIEnumVOID@@
.?AUIMessageFilter@@
.?AUINotifyDBEvents@@
.?AUIOleClientSite@@
.?AUIOleContainer@@
.?AUIOleControlSite@@
.?AUIOleInPlaceFrame@@
.?AUIOleInPlaceSite@@
.?AUIOleInPlaceSiteEx@@
.?AUIOleInPlaceSiteWindowless@@
.?AUIOleInPlaceUIWindow@@
.?AUIOleWindow@@
.?AUIParseDisplayName@@
.?AUIPropertyNotifySink@@
.?AUIRowsetNotify@@
.?AUISequentialStream@@
.?AUIStream@@
.?AUIUnknown@@
Australia
australian
Austria
.?AV_AFX_BASE_MODULE_STATE@@
.?AV_AFX_HTMLHELP_STATE@@
.?AVAFX_MODULE_STATE@@
.?AVAFX_MODULE_THREAD_STATE@@
.?AV_AFX_OLE_STATE@@
.?AV_AFX_THREAD_STATE@@
.?AVbad_cast@@
.?AVCAccessibleProxy@ATL@@
.?AVCAfxStringMgr@@
.?AVCArchiveException@@
.?AVCArchiveStream@@
.?AVCByteArray@@
.?AVCClientDC@@
.?AVCCmdTarget@@
.?AVCCmdUI@@
.?AVCComboBox@@
.?AVCCommonDialog@@
.?AVCComObjectRootBase@ATL@@
.?AV?$CComObjectRootEx@VCComSingleThreadModel@ATL@@@ATL@@
.?AVCDataSourceControl@@
.?AVCDC@@
.?AVCDialog@@
.?AVCEdit@@
.?AVCEnumArray@@
.?AVCEnumUnknown@@
.?AVCException@@
.?AVCFile@@
.?AVCFileException@@
.?AVCFont@@
.?AVCGdiObject@@
.?AVCHandleMap@@
.?AVCImageList@@
.?AVCInvalidArgException@@
.?AVCMapPtrToPtr@@
.?AVCMemFile@@
.?AVCMemoryException@@
.?AVCMenu@@
.?AV?$CMFCComObject@VCAccessibleProxy@ATL@@@@
.?AVCNoTrackObject@@
.?AVCNotSupportedException@@
.?AVCObject@@
.?AVCOccManager@@
.?AVCOleBusyDialog@@
.?AVCOleControlContainer@@
.?AVCOleControlSite@@
.?AVCOleDialog@@
.?AVCOleDispatchException@@
.?AVCOleException@@
.?AVCOleMessageFilter@@
.?AVCPaintDC@@
.?AVCPtrList@@
.?AVCResourceException@@
.?AVCRgn@@
.?AVCSimpleException@@
.?AVCSliderCtrl@@
.?AVCStatic@@
.?AVCTabCtrl@@
.?AVCTestCmdUI@@
.?AV?$_CTypedPtrList@VCPtrList@@PAUCOleControlSiteOrWnd@@@@
.?AV?$CTypedPtrList@VCPtrList@@PAUCOleControlSiteOrWnd@@@@
.?AVCUserException@@
.?AVCWinApp@@
.?AVCWindowDC@@
.?AVCWinThread@@
.?AVCWnd@@
.?AVexception@@
.?AVfacet@locale@std@@
.?AVfailure@ios_base@std@@
.?AV?$IAccessibleProxyImpl@VCAccessibleProxy@ATL@@@ATL@@
.?AVios_base@std@@
.?AV?$_Iosb@H@std@@
.?AVlength_error@std@@
.?AV_Locimp@locale@std@@
.?AVlogic_error@std@@
.?AVout_of_range@std@@
.?AVruntime_error@std@@
.?AVtype_info@@
.?AVXAccessible@CWnd@@
.?AVXAccessibleServer@CWnd@@
.?AVXAmbientProps@COleControlSite@@
.?AVXBoundObjectSite@COleControlSite@@
.?AVXEnumVOID@CEnumArray@@
.?AVXEventSink@COleControlSite@@
.?AVXMessageFilter@COleMessageFilter@@
.?AVXNotifyDBEvents@COleControlSite@@
.?AVXOleClientSite@COleControlSite@@
.?AVXOleContainer@COleControlContainer@@
.?AVXOleControlSite@COleControlSite@@
.?AVXOleIPFrame@COleControlContainer@@
.?AVXOleIPSite@COleControlSite@@
.?AVXPropertyNotifySink@COleControlSite@@
.?AVXRowsetNotify@COleControlSite@@
<A|@<Z
B<(((((((((
bad cast
Basque
{~,,bB
;BBBBB;C
B===DDDDDF 
BeginPaint
belgian
Belgium
,bfN^HE
_bgS_{
 bK	 |
britain
btFHt+
Buffer overrun detected!
}^$bwEX
	%bZ*N
'&C3s<(
c85-]`
CallNextHookEx
CallWindowProcA
Canada
canadian
CapsLock
CArchiveException
CByteArray
:=CCCC=C=BLb
CCFFFFIIIIF<C
CClientDC
CCmdTarget
CComboBox
CConfigModeTab
CConfigModeTabCtrl
CDialog
CException
CFF?El
CFileException
CGdiObject
CGraphicsConfigDialog
CHALLENGE MODE
CharNextA
CharUpperA
CheckMenuItem
chinese
chinese-hongkong
chinese-simplified
chinese-singapore
chinese-traditional
CImageList
CInputConfigDialog
CInputEditBox
CInputPlayerTab
CInputPlayerTabCtrl
CInvalidArgException
[CK0lK@
ClientToScreen
CloseHandle
ClosePrinter
CLSID\%1
CLSID\%1\AuxUserType\2
CLSID\%1\AuxUserType\3
CLSID\%1\DefaultExtension
CLSID\%1\DefaultIcon
CLSID\%1\DocObject
CLSID\%1\InprocHandler32
CLSID\%1\InProcServer32
CLSID\%1\Insertable
CLSID\%1\LocalServer32
CLSID\%1\MiscStatus
CLSID\%1\Printable
CLSID\%1\ProgID
CLSID\%1\Verb\0
CLSID\%1\Verb\1
CLSIDFromProgID
CLSIDFromString
CMapPtrToPtr
CMemFile
CMemoryException
=C<mosS[bS_b
CNetworkConfigDialog
CNotSupportedException
CObject
CoFreeUnusedLibraries
CoGetClassObject
COleBusyDialog
COleDialog
COleDispatchException
COleException
Colombia
COMBOBOX
COMCTL32.dll
COMCTL32.DLL
comdlg32.dll
commctrl_DragListMsg
commdlg_FindReplace
CompareStringA
CompareStringW
continue execution and must now be terminated.
Control Panel\Desktop\ResourceLocale
ConvertDefaultLocale
CopyAcceleratorTableA
CopyRect
Copyright (c) 1992-2001 by P.J. Plauger, licensed by Dinkumware, Ltd. ALL RIGHTS RESERVED.
CoRegisterMessageFilter
CoRevokeClassObject
CorExitProcess
corrupted the program's internal state.  The program cannot safely
Costa Rica
CoTaskMemAlloc
CoTaskMemFree
CPaintDC
C PjPVj
C$PjQVj
C.PjRVj
C/PjSVj
C*PjTVj
C+PjUVj
C,PjVVj
C-PjWVj
CPtrList
CreateBitmap
CreateDialogIndirectParamA
CreateFileA
CreateILockBytesOnHGlobal
CreateRectRgnIndirect
CreateStdAccessibleObject
CreateWindowExA
CResourceException
CSliderCtrl
CStatic
CTabCtrl
CUserException
,C"ut6N
CWinApp
CWindowDC
CWinThread
`_______d
d_____
d_________
D$0SUVW
d3d9.dll
<DAreG
@.data
d____d
D$$(.D
<======DDDC?=U~
dddd, MMMM dd, yyyy
d:\DW4PC Build\Project\DW4ConfigUtil\Release_Japanese\DW4Config.pdb
December
DefWindowProcA
Delete
DeleteCriticalSection
DeleteDC
DeleteObject
DestroyMenu
DestroyWindow
DINPUT8.dll
Direct3DCreate9
DirectInput8Create
DispatchMessageA
DISPLAY
+DlI;V
dNT	y~f5#Q
DN-tz_
DocumentPropertiesA
DOMAIN error
Dominican Republic
DrawIcon
DrawTextA
DrawTextExA
d__uff_h
DuplicateHandle
dutch-belgian
Dw=c:s
Dw=d:s
Dw=f:s
Dw=g:s
Dw=h:s
Dw=i:s
Dw=m:s
Dw=`:s
Dw=^:s
Dw=~:s
Dw=|:s
Dw=_:s
Dw=':s
Dw=]:s
Dw={:s
Dw=}:s
Dw=&:s
Dw=	:s
Dw=t:s
Dw=u:s
Dw=U:s
Dw=y:s
Dw=z:s
EAF"L[@
Ecuador
&Edit,0,2
Embedded Object
Embed Source
EnableMenuItem
EnableWindow
EndDialog
EndPaint
england
English
english-american
english-aus
english-belize
english-can
english-caribbean
english-ire
english-jamaica
english-nz
english-south africa
english-trinidad y tobago
english-uk
english-us
english-usa
EnterCriticalSection
EnumDisplayDevicesA
EnumDisplayMonitors
EnumResourceLanguagesA
EnumSystemLocalesA
EqualRect
Escape
)Et7:D
ETcScp
EV rQo
ExitProcess
ExtSelectClipRgn
ExtTextOutA
_____f___
F@_^][
F09^(u
>@F633as~\fk^jrnpqNMOWUV
F8+F0W
;F8ve9^,ue
F,98uX
F\9~Lu)h
February
F,+F(_;E
ffuuuuuuuuu_
F(@@;F,v
FileName
FileNameW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindResourceA
FindWindowA
Finland
Finnish
- floating point not loaded
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
ForceRemove
FormatMessageA
-FPpIC
;F(r(8_
France
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
     FREE MODE
FREE MODE
FreeResource
French
french-belgian
french-canadian
french-luxembourg
french-swiss
Friday
FUc-?O-3?
,fWlTx
\\G1PG
g20400
g20401
g20403
g20404
g20407
g20501
g20503
GAIsProcessorFeaturePresent
GAME OVER
 *gAZ$
GDI32.dll
German
german-austrian
german-lichtenstein
german-luxembourg
german-swiss
GetACP
GetActiveWindow
GetBkColor
GetCapture
GetClassInfoA
GetClassInfoExA
GetClassLongA
GetClassNameA
GetClientRect
GetClipBox
GetCommandLineA
GetCPInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetCursorPos
GetDesktopWindow
GetDeviceCaps
GetDlgCtrlID
GetDlgItem
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileAttributesA
GetFileSize
GetFileTime
GetFileTitleA
GetFileType
GetFocus
GetForegroundWindow
GetFullPathNameA
GetKeyState
GetLastActivePopup
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetMapMode
GetMenu
GetMenuCheckMarkDimensions
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMessageA
GetMessagePos
GetMessageTime
GetModuleFileNameA
GetModuleHandleA
GetMonitorInfoA
GetNextDlgGroupItem
GetNextDlgTabItem
GetObjectA
GetOEMCP
GetParent
GetProcAddress
GetProcessWindowStation
GetPropA
GetRgnBox
GetStartupInfoA
GetStdHandle
GetStockObject
GetStringTypeA
GetStringTypeW
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemDefaultUILanguage
GetSystemInfo
GetSystemMetrics
GetSystemTimeAsFileTime
GetTextColor
GetThreadLocale
GetTickCount
GetTimeZoneInformation
GetTopWindow
GetUserDefaultLCID
GetUserDefaultUILanguage
GetUserObjectInformationA
GetVersion
GetVersionExA
GetViewportExtEx
GetVolumeInformationA
GetWindow
GetWindowDC
GetWindowExtEx
GetWindowLongA
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
GICR^V63.
GlobalAddAtomA
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomA
GlobalFlags
GlobalFree
GlobalGetAtomNameA
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalUnlock
GNHadh
__g_nX
graphics.cfg
GrayStringA
great britain
Guatemala
`h````
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
hhctrl.ocx
HH:mm:ss
HHt`HHt\
HHtjHHtF
HHtjHtHHt&H
_hnstqHR_w|
holland
hong-kong
houff___
HtMHt,H
HtmlHelpA
html\index.htm
http://www.gamecity.ne.jp/regist_c/user/smusou3/support/faq/
HtvHt@H
HtyHtWHtOHt&H
h\WiD#
\ia.+-
Iceland
Icelandic
	.ID4Tk
:==>IFFIFFFQ
I-iN6+
I	jjLFD
ImageList_Destroy
imuf__
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
inputmap.1
inputmap.2
inputmap.m1
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
internal state.  The program cannot safely continue execution and must
Internet Explorer
IntersectRect
InvalidateRect
InvalidateRgn
invalid string position
;invalid vector<T> subscript
ios_base::badbit set
ios_base::eofbit set
ios_base::failbit set
`i)QFZ
irish-english
IsBadCodePtr
IsBadReadPtr
IsBadWritePtr
IsChild
IsDialogMessageA
IsIconic
]isIV^S\`-39
IsRectEmpty
IsValidCodePage
IsValidLocale
IsWindow
IsWindowEnabled
IsWindowVisible
italian-swiss
It[IItM
IYldiv
JanFebMarAprMayJunJulAugSepOctNovDec
January
j@h@%D
JKHDCEQSWSUZRRbQUjR[jmz
jpuaozit{gqy
;>JPXnOWlIMabi{
K<5FX=I
KERNEL32
kernel32.dll
KERNEL32.dll
k___ffuuu__u_
KKK\\88\t8N
/`/Kn889
KOEI-Dynasty Warriors 4 Window Class
\KOEI\Shin Sangokumusou 3\
K]pKby<Vz;
KSWUPhx
L$0_^][d
LC_ALL
LC_COLLATE
LC_CTYPE
LCMapStringA
LCMapStringW
LC_MONETARY
LC_NUMERIC
LC_TIME
LeaveCriticalSection
Left Win
-]lia!
Link Source
Link Source Descriptor
L$ ;Mxu
LoadBitmapA
LoadCursorA
LoadIconA
LOADING...
LoadLibraryA
LoadResource
LoadStringA
LocalAlloc
LocalFree
LocalReAlloc
LockFile
LockResource
LresultFromObject
lstrcatA
lstrcmpA
lstrcmpiA
lstrcmpW
lstrcpyA
lstrcpynA
lstrlenA
Luxembourg
-L*V*KG
"L)w"L
m______
(;;;;;M
M1702b.h
?#M>9H
MapDialogRect
MapWindowPoints
MBCancel
MessageBeep
MessageBoxA
Mexico
Microsoft Visual C++ Runtime Library
MM/dd/yy
ModifyMenuA
Monday
MonitorFromPoint
MonitorFromRect
MonitorFromWindow
MoveWindow
[m~?Qjv
mscoree.dll
msctls_trackbar32
]msIZ`o|
MS Shell Dlg
MSWHEEL_ROLLMSG
MulDiv
MultiByteToWideChar
    MUSOU MODE
MUSOU MODE
N8+F,+N0
Native
network.cfg
new-zealand
NH;Alt
 !N\HjQ
NHSUWj
N^jpu{:BM
NL(abP
N(;N,r
NoBackButton
NoClose
NoDrives
NoEntireNetwork
NoFileMru
NoNetConnectDisconnect
NoPlacesBar
NoRecentDocsHistory
NoRemove
norwegian
norwegian-bokmal
norwegian-nynorsk
Norwegian-Nynorsk
not<AC:Qc
- not enough space for arguments
- not enough space for environment
- not enough space for lowio initialization
- not enough space for _onexit/atexit table
- not enough space for stdio initialization
- not enough space for thread data
NotifyWinEvent
November
now be terminated.
ntdll.dll
(null)
NumLock
o$6OM7
Object Descriptor
ObjectLink
October
OEM 102
OffsetRect
OffsetViewportOrgEx
oG<-uK
OH;Alt
o"	j 	h
ojh6@L
OKSWQP
ole32.dll
OLEACC.dll
OLEAUT32.dll
oledlg.dll
OleFlushClipboard
OleInitialize
OleIsCurrentClipboard
OleUninitialize
O`nS^hYix
&Open,0,2
OpenPrinterA
}OrH,c
O@sO0cO SO
Oupbqh^qy\s
OutputDebugStringA
OwnerLink
Panama
Pa~OP?7A.
Paraguay
PathFindExtensionA
PathFindFileNameA
PathIsUNCA
PathStripToRootA
Pause/Break
.PAVCArchiveException@@
.PAVCException@@
.PAVCFileException@@
.PAVCInvalidArgException@@
.PAVCMemoryException@@
.PAVCNotSupportedException@@
.PAVCObject@@
.PAVCOleDispatchException@@
.PAVCOleException@@
.PAVCResourceException@@
.PAVCSimpleException@@
.PAVCUserException@@
PCTimer class not initialised.
PeekMessageA
PhF;t$
,PJ)b0
Please contact the application's support team for more information.
P^`LLMIQX|
portuguese-brazilian
PostMessageA
PostQuitMessage
PostThreadMessageA
=P~]PC@
PPPPhd
PPPPPPPP
ppxxxx
PQQQQQ
pr china
pr-china
PreviewPages
Print Screen
Program: 
<program name unknown>
PtInRect
PtVisible
p,^U,D
puerto-rico
- pure virtual function call
{PWhx%D
PWVWWW
qInitCommonControlsEx
QQSUVW
QQSVW3
QQSVWd
QRj PWS
QueryPerformanceCounter
QueryPerformanceFrequency
<@,QUHMRDRXHJQCW_T
raE:)L
RaiseException
R^cNae[kp]ghQ_^R]^[ff
.rdata
ReadFile
RectVisible
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegisterClassA
RegisterClipboardFormatA
RegisterWindowMessageA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueA
RegQueryValueExA
RegSetValueExA
ReleaseCapture
ReleaseDC
RemovePropA
RestoreDC
RestrictRun
RfJ+!r
RichEdit Text and Objects
Rich Text Format
Right Win
?|@`	rq
RtlUnwind
runtime error 
Runtime Error!
S\_^[]
Saturday
SaveDC
ScaleViewportExtEx
ScaleWindowExtEx
Scroll
?,:sDh
%s.dll
SelectObject
SendDlgItemMessageA
SendMessageA
September
SetActiveWindow
SetBkColor
SetCapture
SetCursor
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetFilePointer
SetFocus
SetForegroundWindow
SetHandleCount
SetLastError
SetMapMode
SetMenuItemBitmaps
SetPropA
SetRect
SetStdHandle
SetTextColor
SetTimer
Settings
SetUnhandledExceptionFilter
SetViewportExtEx
SetViewportOrgEx
SetWindowContextHelpId
SetWindowExtEx
SetWindowLongA
SetWindowPos
SetWindowsHookExA
SetWindowTextA
SHCreateDirectoryExA
SHELL32.dll
SHGetSpecialFolderPathA
Shin Sangokumusou 3
SHLWAPI.dll
ShowWindow
SING error
SizeofResource
slovak
software
Software\
Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Software\Microsoft\Windows\CurrentVersion\Policies\Network
south africa
south-africa
South Africa
south korea
south-korea
Spanish
spanish-argentina
spanish-bolivia
spanish-chile
spanish-colombia
spanish-costa rica
spanish-dominican republic
spanish-ecuador
spanish-el salvador
spanish-guatemala
spanish-honduras
spanish-mexican
spanish-modern
Spanish - Modern Sort
spanish-nicaragua
spanish-panama
spanish-paraguay
spanish-peru
spanish-puerto rico
Spanish - Traditional Sort
spanish-uruguay
spanish-venezuela
\$ SQj
sqt05:prubkrMes
SQT)7H
SSSPQR
STATIC
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
string too long
Sunday
SunMonTueWedThuFriSat
,SUVWh
sVS;7|B;w
SVWj ^
SVWj(3
Sweden
Swedish
swedish-finland
Switzerland
SWURhx
SXiEJ\LUfWasPUVs
SXZTWU]c]]d\_f`bgNw
SysTabControl32
System
System does not support high resolution timers
SystemParametersInfoA
t2WWVPVSW
t	9ALu
t-9HLu
t	9p$u
t-9>u)
TabbedTextOutA
tD9wdt?
TerminateProcess
TextOutA
+t"HHt
- This application cannot run using the active version of the Microsoft .NET Runtime
This application has requested the Runtime to terminate it in an unusual way.
!This program cannot be run in DOS mode.
t<Ht0Ht$Ht
+t=Ht-Ht
Thursday
tiHt3H
TLOSS error
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
t$ PUSVV
tQ9^(tLW
TranslateMessage
trinidad & tobago
"tRN.G
T$$R@P
t!SS9]
t#SSUP
TT;M;MLp
t.;t$$t(
t%<.u(
T{%\{u
t$<"u	3
Tuesday
T$$;U|u
t$$VSS
t!VV9u
tW9qptR
tzHt<Ht
_ufffff_
>:u>FV
u;j0^V
- unable to initialize heap
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
UnhandledExceptionFilter
UnhookWindowsHookEx
united-kingdom
united-states
Unknown exception
Unknown security failure detected!
UnlockFile
UnregisterClassA
UpdateWindow
Uruguay
USER32
user32.dll
USER32.dll
@u';t$
u+WWSW
uX>F# _
UXY0Ie!/=%?]V
U]zGV\9E>=DA8A85?4->6$0*6A>
.V4)oR
ValidateRect
VC20XC00U
vector<T> too long
Venezuela
   VERSUS MODE
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
v	N+D$
VT i3=Z
VVVVPVVVj
VVVVVj
VVVVVUWUUj
w12002
w12007
w12029
Wednesday
WideCharToMultiByte
WinHelpA
WINSPOOL.DRV
WriteFile
WritePrivateProfileStringA
wsprintfA
WtuHHt
Wu)95H
WuO95D
@WvRq}F[pM
WWWWVSW
\XLM`j!<
xwwxw~Z
=Y7DUGPQG\z
YR&/*R~
Yt:SVW
_^][YY
z3aF 84
Zp}F[g?[mMZe126
Zt(Ht Ht
zu^SSS