Analysis Date2015-05-28 20:35:31
MD55791c6fdcd82a9f1c4cc17b74eef1931
SHA1413617fb6957b2eb11d32e1e968b3fe822850608

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: e3fdc69626da058cd0b06a3c74af8289 sha1: a234439ee0f23c4a4e171a4e9c2701d50d2124f2 size: 198656
Section.rdata md5: 85e405eec3f8aed9e284e94f40f7361c sha1: 8bba110d1972dafac5bfdc60362253d66d531c1f size: 53248
Section.data md5: 0fde5c175cc077c34f2b61c64817de8c sha1: 626a4158ba5d4385f6eb7e56ad31c4f5486cb297 size: 7168
Section.reloc md5: 1783ebd8f46f24c5c0b9b7ffd5293b21 sha1: dcb8e8dbd9c61e38631041bf1e06a67790ac2779 size: 14848
Timestamp2015-04-29 19:13:09
PackerMicrosoft Visual C++ 8
PEhash422f88c983087917334f1f8a66f9053f5d4be27d
IMPhashc2621d320877f4468dc678f1a425f62e

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates FileC:\wkmtpelanez\ifnbo1kufzjbalqkjjb.exe
Creates FileC:\wkmtpelanez\tkekts
Creates FileC:\WINDOWS\wkmtpelanez\tkekts
Deletes FileC:\WINDOWS\wkmtpelanez\tkekts
Creates ProcessC:\wkmtpelanez\ifnbo1kufzjbalqkjjb.exe

Process
↳ C:\wkmtpelanez\ifnbo1kufzjbalqkjjb.exe

RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\PnP-X Smart NGEN Socket Update Link ➝
C:\wkmtpelanez\skjszovbeos.exe
Creates FileC:\wkmtpelanez\tkekts
Creates FileC:\wkmtpelanez\skjszovbeos.exe
Creates FilePIPE\lsarpc
Creates FileC:\wkmtpelanez\njvgtff5vv
Creates FileC:\WINDOWS\wkmtpelanez\tkekts
Deletes FileC:\WINDOWS\wkmtpelanez\tkekts
Creates ProcessC:\wkmtpelanez\skjszovbeos.exe
Creates ServiceMedia Disk Class Counter Spooler - C:\wkmtpelanez\skjszovbeos.exe

Process
↳ Pid 804

Process
↳ Pid 852

Process
↳ C:\WINDOWS\System32\svchost.exe

Creates FileC:\WINDOWS\system32\WBEM\Logs\wbemess.log

Process
↳ Pid 1120

Process
↳ Pid 1208

Process
↳ C:\WINDOWS\system32\spoolsv.exe

RegistryHKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\BeepEnabled ➝
NULL
RegistryHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\System\Print\TypesSupported ➝
7
RegistryHKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\Printers\SymbolicLinkValue ➝
NULL
RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Print\Printers\DefaultSpoolDirectory ➝
C:\WINDOWS\System32\spool\PRINTERS\\x00

Process
↳ Pid 1856

Process
↳ Pid 1172

Process
↳ C:\wkmtpelanez\skjszovbeos.exe

Creates FileC:\wkmtpelanez\qchpmkhue
Creates Filepipe\net\NtControlPipe10
Creates FileC:\wkmtpelanez\tkekts
Creates FileC:\wkmtpelanez\hohcklvfpaxs.exe
Creates File\Device\Afd\Endpoint
Creates FileC:\wkmtpelanez\njvgtff5vv
Creates FileC:\WINDOWS\wkmtpelanez\tkekts
Deletes FileC:\WINDOWS\wkmtpelanez\tkekts
Creates Processyzule8lpzbw9 "c:\wkmtpelanez\skjszovbeos.exe"

Process
↳ C:\wkmtpelanez\skjszovbeos.exe

Creates FileC:\wkmtpelanez\tkekts
Creates FileC:\WINDOWS\wkmtpelanez\tkekts
Deletes FileC:\WINDOWS\wkmtpelanez\tkekts

Process
↳ yzule8lpzbw9 "c:\wkmtpelanez\skjszovbeos.exe"

Creates FileC:\wkmtpelanez\tkekts
Creates FileC:\WINDOWS\wkmtpelanez\tkekts
Deletes FileC:\WINDOWS\wkmtpelanez\tkekts

Network Details:

DNSleaderperfect.net
Type: A
74.208.214.100
DNSheavyheart.net
Type: A
208.48.81.134
DNSheavyheart.net
Type: A
208.48.81.133
DNSheavyheart.net
Type: A
64.15.205.101
DNSheavyheart.net
Type: A
64.15.205.100
DNSgentleheart.net
Type: A
203.189.109.142
DNSbelongbehind.net
Type: A
95.211.230.75
DNSpleasantbattle.net
Type: A
DNSnecessarybattle.net
Type: A
DNSorderheart.net
Type: A
DNSrequireheart.net
Type: A
DNSorderperfect.net
Type: A
DNSrequireperfect.net
Type: A
DNSordermayor.net
Type: A
DNSrequiremayor.net
Type: A
DNSorderbattle.net
Type: A
DNSrequirebattle.net
Type: A
DNSleaderheart.net
Type: A
DNSheavenheart.net
Type: A
DNSheavenperfect.net
Type: A
DNSleadermayor.net
Type: A
DNSheavenmayor.net
Type: A
DNSleaderbattle.net
Type: A
DNSheavenbattle.net
Type: A
DNSheavyperfect.net
Type: A
DNSgentleperfect.net
Type: A
DNSheavymayor.net
Type: A
DNSgentlemayor.net
Type: A
DNSheavybattle.net
Type: A
DNSgentlebattle.net
Type: A
DNSvariousheart.net
Type: A
DNSreturnheart.net
Type: A
DNSvariousperfect.net
Type: A
DNSreturnperfect.net
Type: A
DNSvariousmayor.net
Type: A
DNSreturnmayor.net
Type: A
DNSvariousbattle.net
Type: A
DNSreturnbattle.net
Type: A
DNSjourneyunderstand.net
Type: A
DNShusbandunderstand.net
Type: A
DNSjourneybroad.net
Type: A
DNShusbandbroad.net
Type: A
DNSjourneybehind.net
Type: A
DNShusbandbehind.net
Type: A
DNSjourneybutter.net
Type: A
DNShusbandbutter.net
Type: A
DNSdestroyunderstand.net
Type: A
DNSlittleunderstand.net
Type: A
DNSdestroybroad.net
Type: A
DNSlittlebroad.net
Type: A
DNSdestroybehind.net
Type: A
DNSlittlebehind.net
Type: A
DNSdestroybutter.net
Type: A
DNSlittlebutter.net
Type: A
DNSriddenunderstand.net
Type: A
DNSbelongunderstand.net
Type: A
DNSriddenbroad.net
Type: A
DNSbelongbroad.net
Type: A
DNSriddenbehind.net
Type: A
DNSriddenbutter.net
Type: A
DNSbelongbutter.net
Type: A
DNSchairunderstand.net
Type: A
DNSthoseunderstand.net
Type: A
DNSchairbroad.net
Type: A
DNSthosebroad.net
Type: A
DNSchairbehind.net
Type: A
DNSthosebehind.net
Type: A
DNSchairbutter.net
Type: A
DNSthosebutter.net
Type: A
DNSwithinunderstand.net
Type: A
DNSsufferunderstand.net
Type: A
DNSwithinbroad.net
Type: A
DNSsufferbroad.net
Type: A
DNSwithinbehind.net
Type: A
DNSsufferbehind.net
Type: A
DNSwithinbutter.net
Type: A
DNSsufferbutter.net
Type: A
DNSeffortunderstand.net
Type: A
DNSthroughunderstand.net
Type: A
DNSeffortbroad.net
Type: A
DNSthroughbroad.net
Type: A
DNSeffortbehind.net
Type: A
DNSthroughbehind.net
Type: A
DNSeffortbutter.net
Type: A
DNSthroughbutter.net
Type: A
DNSforgetunderstand.net
Type: A
DNSincreaseunderstand.net
Type: A
DNSforgetbroad.net
Type: A
HTTP GEThttp://leaderperfect.net/index.php
User-Agent:
HTTP GEThttp://heavyheart.net/index.php
User-Agent:
HTTP GEThttp://gentleheart.net/index.php
User-Agent:
HTTP GEThttp://belongbehind.net/index.php
User-Agent:
Flows TCP192.168.1.1:1031 ➝ 74.208.214.100:80
Flows TCP192.168.1.1:1032 ➝ 208.48.81.134:80
Flows TCP192.168.1.1:1033 ➝ 203.189.109.142:80
Flows TCP192.168.1.1:1034 ➝ 95.211.230.75:80

Raw Pcap
0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a206c   : close..Host: l
0x00000040 (00064)   65616465 72706572 66656374 2e6e6574   eaderperfect.net
0x00000050 (00080)   0d0a0d0a                              ....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2068   : close..Host: h
0x00000040 (00064)   65617679 68656172 742e6e65 740d0a0d   eavyheart.net...
0x00000050 (00080)   0a0a0d0a                              ....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2067   : close..Host: g
0x00000040 (00064)   656e746c 65686561 72742e6e 65740d0a   entleheart.net..
0x00000050 (00080)   0d0a0d0a                              ....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2062   : close..Host: b
0x00000040 (00064)   656c6f6e 67626568 696e642e 6e65740d   elongbehind.net.
0x00000050 (00080)   0a0d0a0a                              ....


Strings
W
SCT
dSe
eKbol
"
 
\
.
 
\
n
  
.
e
. 
00-+ .
-
-1
+-0-E-
-0
\
.
0
0
- 
000
-&.
u
                                 
2.exe
- abort() has been called
af-za
af-ZA
April
ar-ae
ar-AE
ar-bh
ar-BH
ar-dz
ar-DZ
ar-eg
ar-EG
ar-iq
ar-IQ
ar-jo
ar-JO
ar-kw
ar-KW
ar-lb
ar-LB
ar-ly
ar-LY
ar-ma
ar-MA
ar-om
ar-OM
ar-qa
ar-QA
ar-sa
ar-SA
ar-sy
ar-SY
ar-tn
ar-TN
ar-ye
ar-YE
- Attempt to initialize the CRT more than once.
- Attempt to use MSIL code from this assembly during native code initialization
August
az-az-cyrl
az-AZ-Cyrl
az-az-latn
az-AZ-Latn
.bat
be-by
be-BY
bg-bg
bg-BG
bn-in
bn-IN
bs-ba-latn
bs-BA-Latn
ca-es
ca-ES
Cja-JP
.cmd
.com
CONOUT$
CR6002
- CRT not initialized
cs-cz
cs-CZ
cy-gb
cy-GB
da-dk
da-DK
dddd, MMMM dd, yyyy
de-at
de-AT
December
de-ch
de-CH
de-de
de-DE
de-li
de-LI
de-lu
de-LU
div-mv
div-MV
Djjjj
Djjjjj
DOMAIN error
el-gr
el-GR
emscoree.dll
en-au
en-AU
en-bz
en-BZ
en-ca
en-CA
en-cb
en-CB
en-gb
en-GB
en-ie
en-IE
en-jm
en-JM
en-nz
en-NZ
en-ph
en-PH
en-tt
en-TT
en-us
en-US
en-za
en-ZA
en-zw
en-ZW
es-ar
es-AR
es-bo
es-BO
es-cl
es-CL
es-co
es-CO
es-cr
es-CR
es-do
es-DO
es-ec
es-EC
es-es
es-ES
es-gt
es-GT
es-hn
es-HN
es-mx
es-MX
es-ni
es-NI
es-pa
es-PA
es-pe
es-PE
es-pr
es-PR
es-py
es-PY
es-sv
es-SV
es-uy
es-UY
es-ve
es-VE
et-ee
et-EE
eu-es
eu-ES
fa-ir
fa-IR
February
fi-fi
fi-FI
- floating point support not loaded
fo-fo
fo-FO
fr-be
fr-BE
fr-ca
fr-CA
fr-ch
fr-CH
fr-fr
fr-FR
Friday
fr-lu
fr-LU
fr-mc
fr-MC
gl-es
gl-ES
gu-in
gu-IN
         (((((                  H
he-il
he-IL
HH:mm:ss
hi-in
hi-IN
hr-ba
hr-BA
hr-hr
hr-HR
hu-hu
hu-HU
hy-am
hy-AM
id-id
id-ID
- inconsistent onexit begin-end variables
is-is
is-IS
it-ch
it-CH
it-it
it-IT
ja-jp
January
jjjjj
July
June
ka-ge
ka-GE
kernel32.dll
kk-kz
kk-KZ
kn-in
kn-IN
kok-in
kok-IN
ko-kr
ko-KR
ky-kg
ky-KG
lt-lt
lt-LT
lv-lv
lv-LV
March
Microsoft Visual C++ Runtime Library
mi-nz
mi-NZ
mk-mk
mk-MK
ml-in
ml-IN
MM/dd/yy
mn-mn
mn-MN
Monday
mr-in
mr-IN
ms-bn
ms-BN
ms-my
ms-MY
mt-mt
mt-MT
nb-no
nb-NO
nl-be
nl-BE
nl-nl
nl-NL
nn-no
nn-NO
- not enough space for arguments
- not enough space for environment
- not enough space for locale information
- not enough space for lowio initialization
- not enough space for _onexit/atexit table
- not enough space for stdio initialization
- not enough space for thread data
November
ns-za
ns-ZA
(null)
October
pa-in
pa-IN
pl-pl
pl-PL
Program: 
<program name unknown>
pt-br
pt-BR
pt-pt
pt-PT
- pure virtual function call
quz-bo
quz-BO
quz-ec
quz-EC
quz-pe
quz-PE
R6008
R6009
R6010
R6016
R6017
R6018
R6019
R6024
R6025
R6026
R6027
R6028
R6030
R6031
R6032
R6033
R6034
ro-ro
ro-RO
runtime error 
Runtime Error!
ru-ru
ru-RU
sa-in
sa-IN
Saturday
se-fi
se-FI
se-no
se-NO
September
se-se
se-SE
SING error
sk-sk
sk-SK
sl-si
sl-SI
sma-no
sma-NO
sma-se
sma-SE
smj-no
smj-NO
smj-se
smj-SE
smn-fi
smn-FI
sms-fi
sms-FI
sq-al
sq-AL
sr-ba-cyrl
sr-BA-Cyrl
sr-ba-latn
sr-BA-Latn
sr-sp-cyrl
sr-SP-Cyrl
sr-sp-latn
sr-SP-Latn
Sunday
sv-fi
sv-FI
sv-se
sv-SE
sw-ke
sw-KE
syr-sy
syr-SY
ta-in
ta-IN
te-in
te-IN
This indicates a bug in your application.
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
th-th
th-TH
Thursday
TLOSS error
tn-za
tn-ZA
tr-tr
tr-TR
tt-ru
tt-RU
Tuesday
uk-ua
uk-UA
- unable to initialize heap
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
ur-pk
ur-PK
USER32.DLL
uz-uz-cyrl
uz-UZ-Cyrl
uz-uz-latn
uz-UZ-Latn
vi-vn
vi-VN
Wednesday
xh-za
xh-ZA
zh-chs
zh-CHS
zh-cht
zh-CHT
zh-cn
zh-CN
zh-hk
zh-HK
zh-mo
zh-MO
zh-sg
zh-SG
zh-tw
zh-TW
zu-za
zu-ZA
                          
; ;(;>;
:+;0;|;
0!0'0/0@0H0P0X0^0r0~0
0(00060A0I0]0h0x0
0%0,0=0E0e0m0u0{0
000?0G0]0j0v0~0
000>0W0^0v0~0
0 0(050J0U0e0w0
0%0-080V0c0p0x0
0!0+0A0K0c0s0
0&0.0A0Q0
0#0*0J0X0q0
0)0@0T0_0
0,040?0G0O0W0_0g0o0w0
0 0D0P0X0
0*0E0^0u0~0
0 0E0Z0v0
-0_0j0r0z0
0 0J0U0Z0c0
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
0$191Q1n1
0:1a1~1
0)1a1u1}1
> >$>(>,>0>4>8>`>d>h>l>p>t>x>
052S2l2s2{2
070U0Z0
;$;*;0;7;@;E;K;S;X;^;f;k;q;y;~;
>!>(>0>7>O>h>q>~>
"080?0G0g0s0
080O0a0s0{0
<"<0<8<@<:=e=
< <(<0<8<@<H<P<X<`<h<p<x<
= =(=0=8=@=H=P=X=`=h=p=x=
> >(>0>8>@>H>P>X>`>h>p>x>
; ;(;0;8;@;H;P;X;`;h;p;x;
: :(:0:8:@:H:P:X:`:h:p:x:
? ?(?0?8?@?H?P?X?`?h?p?x?
?0?8?K?R?W?_?e?
;+;0;8;S;[;c;k;
;&;0;8;@;U;
;0C0R0r0}0
;$;(;0;D;L;`;h;|;
0E1[1n1
0H0U0`0u0
;0;H;_;o;w;
:(:0:M:p:v:{:
<0<P<p<
101:1L1`1h1|1
1%101B1L1Q1[1`1t1
1#1)101
1 1@1`1
1)11181@1a1m1u1
1!1)141
1$1,161<1B1L1R1Z1h1n1~1
1)1:1B1U1d1k1s1
1+1?1E1
1#1)1I1Y1^1f1v1~1
1!1)1J1
1'1?1K1S1u1
1%1/1U1
1%1-1Z1g1
1&121?1G1O1W1_1h1q1y1
1'151N1\1s1
1*1C1Q1]1
1=1Y1m1w1
122H2T2y2
1-2C2i2
1[2c2z2
1]2o2|2	3
>1>6>;>A>J>R>h>
; <%<1<6<U<
:1:8:H:O:e:r:}:
?*?1?8?S?]?
1E1c1i1{1
1G1Q1]1e1q1y1
<$<)<1<I<~<
1J1f1y1
1#QNAN
1#SNAN
2%202@2
2(20272A2I2]2t2|2
2#202B2J2R2Z2f2m2u2
2&21292F2p2y2
2$2*20282>2H2N2X2`2h2v2~2
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2l2p2t2x2|2
2!2'2/272=2]2m2t2
2$2,242<2D2L2T2\2d2l2t2|2
2"2*292A2M2U2]2k2q2
222C2U2i2r2
2!2[2h2t2
2*2=2P2Z2f2v2
2'2@2Q2^2e2
2-2;2W2^2e2l2r2
2*242d2k2q2
2$292W2b2
\2`2d2h2l2p2t2
2(2H2h2
2$2Q2Y2
2#2Y2t2
2%313q3
2+3;3C3K3
2'3:3F3N3_3r3z3
2 3*3I3
2*353V3^3
2<4B4L4
272i2q2x2
>!>,>2><>A>F>N>h>n>u>
2F3L3S3Y3q3
<$<2<:<F<N<Z<z<
2I2T2\2w2
2I3W3n3y3
2J2[2t2
:#:2:j:z:
=$=2=K=Y=r=|=
<#<2<:<S<Z<a<i<u<|<
>">*>2>T>d>o>
314A4I4b4t4
323>3D3L3T3Z3b3j3t3~3
323I3Q3Y3a3i3u3}3
3#3+333;3C3K3|3
3&3,3=3V3c3x3
3$3,343<3D3L3T3\3d3l3t3|3
3#3.363K3t3|3
3'3/373?3G3S3]3b3
3'3/3A3O3
3&3A3T3a3h3p3
3+3G3L3R3^3f3k3
3:3H3h3v3
3-3I3^3n3z3
3?3L3q3w3
3*3T3\3d3t3
3%4+424
3 4(4,4044484<4@4D4H4L4X4\4`4d4h4l4p4t4|4
3%4+4=4K4f4t4
3"4;4F4^4f4r4y4
= =&=.=3=9=A=F=L=T=Y=_=g=l=r=z=
=3>:>B>
3b3h3l3p3t3
3C3K3S3Y3t3
;.;3;;;C;h;u;};
3D3T3d3t3
3f4&565_5
;#;3;F;U;[;n;
;!;+;3;:;G;`;n;
=#=3=H=T=Y=a=l=|=
:3;J;u;
3L4V4q4
&3NV,3N
=#=3=>=Q=Y=h=p=|=
3S3X3a3f3o3t3
3U3Z3b3v3
<$=,=4=<=
424e4m4
435l5t5|5
4*424;4L4Q4]4j4r4z4
4'424Q4]4e4
4)434=4G4Q4^4c4l4t4
4 434L4Z4s4
4$4,444<4D4L4T4\4d4l4t4|4
4$4-4:4B4O4p4z4
4(444V4x4~4
4*4?4D4b4p4v4
4!4;4j4
4&464Y4
4%484>4V4
4.4B4J4l4s4
4%515=5L5W5u5
454@4F4s4
4(545B5[5j5o5
4-5g5t5
4#5S5p5
464;4z4
	'46P|
484?4G4O4W4~4
484W4l4v4
4A5I5]5d5
4C5W516
:4:D:H:X:\:d:|:
>$>,>4><>D>L>T>\>d>l>t>|>
4G5R5n5v5~5
:):4:?:I:R:w:
:,:4:::I:S:Y:h:r:x:
<)<4<J<f<x<
4M4q4y4
4O7a7s7
:$:,:4:S:Y:e:~:
=4=U=f=
>4?<?W?c?k?
525J5U5g5
545D5L5W5g5
5)505G5f5
5$525K5Y5r5
5'535;5B5J5q5
5$545m5v5
5$5,545<5D5L5T5
5$5,545<5D5L5T5\5d5l5t5|5
5!5)545;5X5d5l5v5~5
5$5,545D5R5Z5b5n5v5
5/5@5S5[5c5+6
5.595I5\5
5'595I5Q5Y5^5f5q5
5*5A5M5Z6n6~7
5+5G5T5Z5`5n5v5~5
5(5J5j5t5~5
5:5L5x5
565S5\5
5#6(606;6U6a6i6u6
5"6:6^6s6
5/676?6M6`6p6y6
5a5f5n5
=*=5=B=Q=V=k=s={=
/ 5:?CZ
>->5>E>V>f>
<5?H?]?
?&?.?5?=?H?P?m?x?
-5|T_f
627>7c7h7n7z7
6*626;6H6P6_6n6~6
6(636p6
6,656;6A6L6Y6g6
6#6+636o6y6
6$6,646<6D6L6T6\6d6l6t6|6
6$6,646<6L6T6\6d6l6t6|6
6&6-656Z6{6
6#666<6G6O6Z6
6+6>6E6T6,7C7M7W7c7k7w7
6%6-6Z6b6j6r6}6
6+696E6O6{6
6!6E6m6
6?6L6T6d6l6t6|6
6&727@7r7
676E6g6n6
6-7:7D7L7h7t7
6/7d7q7
6E6M6^6
?)?.?6?>?F?U?n?|?
:.:6:J:R:Z:
:$:6:M:W:x:
70]0h0
727?7J7P7V7\7f7w7
757C7Z7e7n7v7
759S9l9s9{9
7#707;7i7
7(70787Z7w7
7	717M7T7q7
7,727}7
7&7+737
7$7,747<7D7L7T7\7d7l7t7|7
7&7-747J7X7`7m7~7
7)777?7U7e7s7
7!787V7f7
7]7d7r7
7'7H7W7
7*7O7W7_7k7t7
7!7S7{7
7*868?8E8z8
7 868@8S8
7 8'8.8=8M8i8}8
7	8,8:8S8_8e8m8u8}8
789T9a9h9p9
7;8a8o8u8
7\8d8|8
7=8J8d8n8
7	8Y8i8
<$<)</<7<<<B<J<O<T<]<b<h<p<u<{<
= =&=.=7=>=F=O=a=y=
>7>J>Z>
7K7_7k7x7
7M7X7^7w7
?%?7?M?a?
?,?7?P?]?
=$=/=7=>=P=_=m=
7V8[8v8{8
838;8G8O8W8_8g8m8u8|8
84898I8_8l8y8
858B8Y8
858O8~8
8!81878C8I8R8f8}8
8*83888T8^8n8v8~8
8+868<8N8X8a8
8"8)80878>8F8N8V8b8k8p8v8
8$8,848<8D8L8T8\8d8l8t8|8
8"8.868=8P8X8
8 8$8(8,8084888<8@8D8H8L8P8T8X8\8`8d8h8l8p8t8x8|8
8"8(888\8u8
8(888<8L8P8T8X8`8x8
8"8(8<8H8j8
8%898A8I8P8s8
8$8C8K8R8[8|8
8'8E8Z8k8
8'8F8X8j8|8
8)949V9d9
8^9d9p9
8*9S9m9u9
8+9T9r9
8G9T9[9h9~9
?$?,?8?@?H?
8J8q8v8~8
8L8a8o8x8
; ;8;?;L;];i;q;~;
=8=T=X=t=x=
919>9G9u9
929?9k9u9
93:D:U:f:
^{]95E{
9.:5:V:[:w:
969<9U9[9y9
9'939:9B9J9t9|9
9+939;9C9j9x9
9.969>9F9N9V9_9o9
9*979Q9]9e9m9u9
9 9(90989@9H9P9X9`9h9p9x9
9 9$9(909H9X9\9l9p9t9|9
9#9*9B9I9P9V9
9$9;9C9K9l9t9
9-9:9G9j9v9
9 9(9X9
9%9A9K9U9i9s9
9-9F9]9d9o9
9>9F9N9V9]9c9q9|9
9'9U9]9t9
9-9Y9s9
=!=.=9=A=K=Y=a=i=t=|=
>9>C>K>R>_>k>
:&:9:D:I:Y:e:j:u:
;%;-;9;E;M;b;r;w;
=9=G=V=d=
>9>j>r>
=&=9=k=s=~=">2>:>E>
9@:L:l:t:
>#>,>9>l>t>
<+<9<N<Y<h<u<|<
>9?q?y?
;&;-;9;T;m;{;
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
address family not supported
address_family_not_supported
address in use
address_in_use
address not available
address_not_available
=AJ&ek
already connected
already_connected
?a?p?y?
AreFileApisANSI
argument list too long
argument out of domain
<at-<rt"<wt
August
.?AVbad_alloc@std@@
.?AVbad_exception@std@@
.?AVerror_category@std@@
.?AVexception@std@@
.?AV_Generic_error_category@std@@
.?AV_Iostream_error_category@std@@
.?AVlength_error@std@@
.?AVlogic_error@std@@
.?AVout_of_range@std@@
.?AV_System_error_category@std@@
.?AVtype_info@@
~AX1Br
bad address
bad_address
bad allocation
bad exception
bad file descriptor
bad_file_descriptor
bad message
 Base Class Array'
 Base Class Descriptor at (
__based(
bbfogdnu bcrum ibjavopdc hxbanixsas vmta gdobahu umvfo zsrefdrorm ljcebre geocloldm gdmali gcm tfusunzzu mlwes tkyouhjodi ffdijufgi lppiu oafrnat iuqv pjsucrlu liuy fjenugg dlvorwuzi gneadoa mzudimbsed vvxasime reeg edseotiu njk mbcujuhge oodtmu szk jugri cqsa dapgo bug fqov phsivasfa tjrabnnuct esiorfu sqbamlu jsamugutjo gpcapmbos sli vstab zfeyilgg frgaegtub kgferpqoc jtati olfonarlb mjpis dnje ftguozzp rrlavffiwo blm solmormcop cdbad idn fbmamagjo zqnucrm rjed ejmd pqix hflitnove dengoudnpo rmafeolws wdnovtp zxduzn copd den anpqa pctoupiif itvekil goeodficdi gafyiu srlidbki gildasf sgri uempvu mzsoabcd lapaajibbo pcbecjfom shgusa ijdzijxqa ona mmri ekzcijzf vfgei ujcfavdmi mcsoe
BeginPaint
=!=B=H=
:b:h:l:p:t:
>B>j>|>
?%?B?O?`?h?y?
?b-_.R
broken pipe
bWWWWj
__cdecl
=%=:=@=c=h=}=
CheckDlgButton
;\;c;k;
:#;;;C;K;`;k;s;{;
>.???c?k?q?y?
=!=C=K=S=
 Class Hierarchy Descriptor'
CloseHandle
CloseThreadpoolTimer
CloseThreadpoolWait
__clrcall
=	>,>@>c>l>v>
<\=c=n?x?
CompareStringEx
CompareStringW
 Complete Object Locator'
connection aborted
connection_aborted
connection already in progress
connection_already_in_progress
connection refused
connection_refused
connection reset
connection_reset
`copy constructor closure'
CorExitProcess
=C=P=q=x=
CreateEventExW
CreateFile2
CreateFileW
CreateSemaphoreExW
CreateSymbolicLinkW
CreateThread
CreateThreadpoolTimer
CreateThreadpoolWait
cross device link
<(</<[<c<x<
=<=C=X=d=w=
@.data
dddd, MMMM dd, yyyy
December
DecodePointer
`default constructor closure'
 delete
 delete[]
DeleteCriticalSection
DeleteFileA
destination address required
destination_address_required
device or resource busy
directory not empty
>/>:>D>L>c>z>
= >:>D>L>i>
:<:D:L:T:\:c:k:
=	>:>D>O>[>r>|>
DrawTextA
<><D<W<d<n<y<
`dynamic atexit destructor for '
`dynamic initializer for '
-e7#if
__eabi
`eh vector constructor iterator'
`eh vector copy constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`eh vector vbase copy constructor iterator'
;;<E<K<Q<g<
EnableWindow
EncodePointer
EndDialog
EndPaint
EnterCriticalSection
EnumSystemLocalesEx
:=:E:Q:d:n:v:
?"?:?e?s?{?
executable format error
ExitProcess
__fastcall
February
file exists
filename too long
filename_too_long
FileTimeToLocalFileTime
FileTimeToSystemTime
file too large
FindClose
FindFirstFileExW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FlushProcessWriteBuffers
:/:F:N:Z:
FreeEnvironmentStringsW
FreeLibraryWhenCallbackReturns
Friday
function not supported
GDI32.dll
generic
GetACP
GetActiveWindow
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetCPInfo
GetCurrentDirectoryW
GetCurrentObject
GetCurrentPackageId
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentThreadId
GetCursor
GetDateFormatEx
GetDCBrushColor
GetDCPenColor
GetDeviceCaps
GetDialogBaseUnits
GetDlgItem
GetDlgItemInt
GetDriveTypeA
GetDriveTypeW
GetEnvironmentStringsW
GetFileInformationByHandle
GetFileInformationByHandleExW
GetFileType
GetForegroundWindow
GetFullPathNameW
GetGraphicsMode
GetInputState
GetKeyboardType
GetLastActivePopup
GetLastError
GetLocaleInfoEx
GetLogicalProcessorInformation
GetMapMode
GetMenu
GetMenuCheckMarkDimensions
GetMenuContextHelpId
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMetaRgn
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetObjectType
GetOEMCP
GetPixelFormat
GetPolyFillMode
GetProcAddress
GetProcessHeap
GetProcessWindowStation
GetPropA
GetQueueStatus
GetRandomRgn
GetScrollPos
GetStartupInfoW
GetStdHandle
GetStretchBltMode
GetStringTypeW
GetSystemTimeAsFileTime
GetTextCharsetInfo
GetTextColor
GetTickCount
GetTickCount64
GetTimeFormatEx
GetTimeZoneInformation
GetUserDefaultLocaleName
GetUserObjectInformationW
GetVersion
GetWindowContextHelpId
GetWindowDC
GetWindowLongA
GlobalAlloc
GlobalFlags
GlobalHandle
GlobalSize
gnVBRcw
:G;T;\;k;|;
< <G<w<
gxjifdqivk ccn lcfuzzv xtezi jdcufbficb aenedagoao ypbanol zqbespc jopmur tja mnocek lbooaders lzolirdn iyrnelz lxuboct ysb farxovmogo dnoc daulruubl pdzon jagwurd nuazraro qwp dehpijtl toko xqc ladfaluve csocobbo wpmupjxo tbeyoepzf cboceho aus igeffu zackuughga itdu ulfnoucxt bnabop zcgeltno bbeqi mcagilcjel fnufiujmpo rbjevaeppa ecuunumugm edmjuywnuz lzuate frsoepd axn csjobbs rnl
`h````
:%;h;"=
H8L8P8T8X8\8`8d8h8l8
Hafjga elov cjpooy jbnit aruujyiddw pymacct fpcokgna dgaculkd bswumlc tvuepoueb gledulik dbjemkc exsufitvfo nlo dibemu nrvugtios bopdoenbd ifbguafhd mvokegcbar ujghuc klreqzg gligouhx smriesd gpc mcdaolneew xjsoci hdiyebl gonwodf lrsoe lyvais rnsij opimpumc cju eilabrolrd mpfupgyadn ljpivvmo vcxa jiznihni tsfumvjejp ctn csvuse lrpea jbniiofel cejmofmj bvseydwen gfpuayl ddmijegcar zyede yfbocsc isrkel gtrulnupeg lfcezea spsoxg ehhjam lgs jqogujulm lsdidicz bpfapekr fuscojlom epsefo niptipxcot ezg lecmopp lfm fmeorec zdmivfju pcivugps gwrid fjacoummj wrsottzu jcdaee ajgsun frge fcd yebdolnfis jpduveff fgluz xexmugofa ujmlo hoeijbeu jjgoxpm pvfomapq lcmudjzas rvujavgf plgeosgsoe etmdoen rbnicnuoj notl giavr pjenuemzbu upooec rbmod eizcmimx xeclesfs fdru vdxe lvunicobop bdopujwmer ifmbus iiornmoc lshim ddpac lggelj slukoczb fnfo bte
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
hgcuy tjiur rjpavpredr gcexe lfpeeolp pglamsla eabjgi wsyiusac buppueb gppoj dncujpge uod sbzem ynjadseo donpoqbs oecquel stoeciiag tcdutlp coftodcgib iab mqdaktb omrw pvnat ajabn ozlsuu imzo nbladlr ojzfegwjab rhda tidwawfbi lbletobefe cjnecbvu fepp wvcaczv ggd qbba vacdujpi fqpiotse cgpueclepa dnae uqrub ldlenbpa reevcagif ssu ndseivnvoe jffiti unrc duhfuen ujqqem fpdozw cdluuec pezfupt gwlordf gbtifd sfeniwsemu stlimliyed omgcoskzel nfujiez baaz cglipnlidp vabd njcudugir jsgohpdu qrtijbeeaa obpvadtpow tfci fbji jpluwmpazh sjqumdcacv ydtop acdituy wunlijd wfpesnm fbsaedo kdwoefd jepfuruatj bwzezng fgfeza ucnesaxa dgbudtaje std moadnarlab vgjuagfviw nbgugdg eumgrioil kpiasosdji pgre aggpunnho evdamiaadh vbxovso vgrodr lqzudl iefecrao djqenflofl aecorni iabpfolpjo gsca masnin fushodopv cmbon eugmcajo cltiisdk sjnehgjadl tcte liljoj lpdiygujob mk
`h`hhh
HH:mm:ss
HHtVHHt
host unreachable
host_unreachable
>/?@?H?P?
?<?H?P?
Ht+Ht$Ht
_hypot
;I;><^<
identifier removed
ieoe gnvo umdma qdajanon cdfelfadi oopmaout ccdaelzwej lxmu eylce ibdyadwox fas isdnu opop twsuwzeus fnjiu lfjeior vgku cbnefnmox clgap idf otdunao voti cadmacet eum dzi bhligzta yedmupnqan jsqogf jqeiqapr axfomif sruroglgu rpf ferufail otwiqaclf olqvenjnem gidjokj cpauwamtv bsyu saus ebl wgodongzup dljegbo csbiobik emdjul ndgapfomo cig dicb dtcidb dbopabbnof aevwzoeie crisosb sisjafa ycaf cjpatgku gsbieyvse ghiboyz ypzez pipd udpputf jdqoy sddis ttfei lkm nelyu pffo gdpeecdqe jikpavydu nxfenf oysiicaig fasinaosv deujumu ldolebffad bpugictni dlsab flbej nomduh etcreb xjaejuejm otbm eoijlepinb ubxp zgjajrfava ktgaenfaba ucmegunrc ytjode pracaml vfvixfben imzbeja jqdenmla fyigucl ffedazeds ltgucnb mgpahjc eij pjcajdseff bagi fazkoudd bbakesc gleli
illegal byte sequence
inappropriate io control operation
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
<'<-<I<N<_<p<|<
interrupted
invalid argument
invalid_argument
invalid seek
invalid string position
io error
iostream
iostream stream error
? ?&?,?@?I?Q?i?p?w?
is a directory
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocaleName
IsWindowEnabled
IsWindowUnicode
<itx<o
/iuNr#
:::_:j:
jA[jZZ+
JanFebMarAprMayJunJulAugSepOctNovDec
January
=+=J=a=p=
:":*:J:\:d:
@jd_u	
j/_j\[f;
j@j _W
; ;J;R;};
:':J:R:[:e:m:u:}:
=#=J=R=q=
=*=j=u=
>:>J>u>
>J>Z>j>|>
k?3Vm^
=kAC7A
} kE$<
KERNEL32.dll
KNZ*LN
;-;k;s;
<:>K>Z?l?
< <(<_<l<
LCMapStringEx
LCMapStringW
ldc agiie ltk qpciwa smqacxabin vrleuvv sjnapsf ltpimodtaq jtme tmyo rajci ctcepr fogp mxmu cnn ned slcoh cjatespquj qduv ilnbawbh bepko euahwfa cutgut emiak pjq jgite mvyophno sdqumapilo dmba fffogjla ujerfowzv mchirmcu pon gmxiyni nfboz sidegafgd ssfodnbeaa zia ngjoejscom mfeozejwt bbsoyl jpjazfna bfnufnamiu sdodez hmlaltyu ajs ioozr bgmeir bzbagmj ynsu juonlutb hivsinulp zwpanmzia etmdevfibi gocd geotvi lwmoua zmderu ibr byb codj fpbi hpjimgceg smjadlada jfno naq vfbi gyif gfipuob glzof aaqncit sacvawhji kjcisjalu mgtiijgil jdaunoxsk gmpecoa qcjab tagu lcs bnicehfle varsusnzic rujr vpgujvie dtzeom fmkij fxtiro plgevv giR*QL
>$>@>L>d>h>
LeaveCriticalSection
lfdubgaheh eiuq kgpaiutm jktocjfud htzoaftd dzj vgs ecnoy escagiy mhoat cimset dyidalncue xrxinclu tpdiu symuel uorxdee pdloej xttagfs bjleilgipu aidnpa gcxed fkcexhsa uaiibmyuf lfzerm lmheioaelm prcaickep pleiki ksfig txaujiregw ezgc vxwesreosi aerlvaf zobjecmpi avugg pyae ybu zvvewme ebffutub ghseqmfa ccfaaf fcqifszo mdnemybecl iqzcioze iwjru tbyaubqnoh ubcfujb ufsp ddletlitu tubamu abr ulmlembj jdfos lmlepibc pgcaupnto bwqommi btlalcl imscu cgjoeii svalu hkfaelsg ropjif spraof vfrinzwaa przajjgau edxseljpo iduaerihod lzluiafovo jjjubic dbfivwimi boufb gdyo fupzakn btsorbgec aeejtwogl cudpehff blat ebgpodpope rnbo gbsejozogu jlH
;(;L;N<W<
LoadIconA
LoadLibraryExW
LoadResource
LocalFlags
`local static guard'
`local static thread guard'
`local vftable'
`local vftable constructor closure'
LockResource
:!;L;Q;n;
;$<L<R<
}LR"0&
>L>T>`>k>{>
lTT;R\
:L:W:_:t:
<#<m<{<
`managed vector constructor iterator'
`managed vector copy constructor iterator'
`managed vector destructor iterator'
map/set<T> too long
MessageBoxW
message size
message_size
.M/H:M
m`jW$o
MM/dd/yy
? ?(?>?M?_?o?
Monday
MoveFileA
MultiByteToWideChar
=M=U=]=s=
:#:\:n:
network down
network_down
network reset
network_reset
network unreachable
network_unreachable
 new[]
_nextafter
nka pxnamdl mcubusuf uwsrelfb vrficcoeew nauhaj xsjejeor lmluegsj osfruz tdtigmhimw orbsaoq jirsitdo lgmi jpsona acndob dlf chbifqriv wih pvz gcj unuzsesre ufngof iwcga dcnis lmtoyfmum ciuhmafslo fcisabkcej yusm ugnyejdgai jibgearp uar efc ggaui dolfenujk vejfoj notcikioue gpdidja ccsil sfsaxrvox bsajujsd bhjonpiki sljutbav mvcalzral nmid muh grb uftu rzsuufp mfe fclosq fpoulagv aonjpuoini ljnihsz zuzxoq nbgi jbpirpoau wumpijlpel tjg jsjalj ovigbu gkson efanum lledu cgp nvbam lfloej fontoi rcluoqp opccurvgep ltmu ncemaiozi dgdo chagidsnow cfm algfea dgbef rpex buzfudcub rjogidvraa gcjili cddaioji pnlap gmlaudxga ndgauj icrjif omhtogr buspi tjgaomnzod ltgarclis qmwazmjo jlnocjavof vrse kinejar fbdippniaz eicvw nnz dbjutfced vmk yltotf vhidel nfk wmgid gbaf gdfa bpagesbco mehoirar lnrulupb zvemobcb btzedcj
+NnF/N!
no buffer space
no_buffer_space
no child process
no link
no lock available
no message
no message available
no protocol option
no_protocol_option
no space on device
no stream resources
no such device
no such device or address
no such file or directory
no such process
not a directory
not a socket
not_a_socket
not a stream
not connected
not_connected
not enough memory
not supported
November
(null)
: :/:?:N:V:a:r:
October
olpcuce mggogomsif adkbayhj fkbuo ahkbuef njcomg afgr sqneptu ytdosd lfnosnpa uxjcooge svzegfti vqkoedy afb ehmjodjaco cxcuxrsamd wtresffe zjanaz fet rwjiggji jhbujb dwkiybkow oiujdyodrb olai fene dbcu qecbuofon irnxiybs gzmeoetpc ntsucafloj uco ozrkazobk glpofe ayunpusn opzyitkz dupfeldz apap ldtufib nutunub mcseigyc gudjoiold zssouc crrubqdigu yfvuafd lkule tcdory bplo dldisdto aec bvn zlk qxfi dcf afmgirrp aal pmuz baiolaja jjneu qfp zbricrzuc gcvurczu cmgik lvubuvoung hbeiov sovlijoa cudl nmiamasjb svufa crbafodn fqbudfayiy lzbo wlpavtjij fltoa ntn jmjuo gmga ggb kppekjcuax vwbaf zdcupoqquc jcxit tvruhmvatn sfkoj vscalo froiqu efbsi umdxupn jalegeydf kadasug uqahgecfj qsp skcuxbsu xqzivnl xdvenjf gdsugg olfjiotomh lnt let ccwijmqaf djminvp vmb fyqaxli rzjaqgt dqayi femcufzeb drjujwmud gori nddegori lmho lslafpre rcrum
`omni callsig'
operation canceled
operation in progress
operation_in_progress
operation not permitted
operation not supported
operation_not_supported
operation would block
operation_would_block
operator
OutputDebugStringW
>!>O>W>b>t>|>
owner dead
p1t1x1|1
__pascal
PeekNamedPipe
permission denied
permission_denied
~pjCXf
<P<j<r<z<
`placement delete closure'
`placement delete[] closure'
PostMessageA
PP9E u
protocol error
protocol not supported
protocol_not_supported
PSSSSV
__ptr64
PWWWWV
qjni scdibecd fdaguogpvi scia pcfabtr psfujmbuei wmnadffu xtiabopobo jgbirg xbh ifgru fbrozoow inmr plhuwzpun bfkeynj gzjodean eubzmuaabj bhniogydo hjdia gpm titneb mlqodpfucp ubfsix mlxancj awvjiqpa zijret mejjatak cunode nkpasessu nia fucfunnyeg sccomm onsge bix erzq odqpijd glhef sidsiclca awmsiyf cpni bvefu blewuzncas fgtuzr albcaejbta kjta xgdujalh iopgijic bxkasz dfginxad scopemb jlnaljdon zptu bvo pssuwicee tjzul dsf mlesavm ebgou qtf gbdi basxi ldcensgu ccwejmzibs luaeeojno acbwoy zfxetgbu oljm jml nflej can zpom sktuhmdam cabmufl cgp spdo fptoxmv swge nlsewrfoo jspub eowsol cmzoom drxibrnuuy vxk fvnad jbbodz lfasuaehe dxmikxladf pumuz coyqu	<
>$>/>Q>[>k>u>
QQSVWd
+qrbu adsmeempwi jageu llfisn efbdo bibo ssculdkui rdqo pjd prfoiddu zmuwesjri alolefomnb musm tfdo liiagbo ddoalax pqgulldalu fml mvg bfredgba guddocjl dpdamtgua mtmomc gsleldse pjd jdbifzfo ehgcomlcun fromalbx zixbojlxez jrasofg solmupnli oejlbexoij ioa rdgi liulvud cbov rfhujrk lbgegcfap fbgibtw maqdotmbug gqfod glfopgvoq xflaiclpu tfgaac ogafhogabv enrjaop dhviwvz oblyiuv lfpig mrruld eapyocor pducuql obanpazs bbla ofs ppragvh mozrel ctugem xcovau ugtje sozpuoauo dmfou ojozuco isenope rtzipign ssno uuynza sflosnxenc ugagfemovf vplonzgaue fvfompiz fyjukubvia cebyonnhi wamnag ibjsa dnvij fcpokagf copimuag osgsotm csgugunc mpcunfz idlyuci dhhoog adyinaa vjuj ferubajjij cspomrco vxexabug
QueryPerformanceCounter
;=<Q<W<a<s<
R0Z0u0{0
RaiseException
rB35_	i
`.rdata
ReadConsoleW
ReadFile
read only file system
.reloc
RemovePropA
resource deadlock would occur
resource unavailable try again
__restrict
restrict(
result out of range
RtlUnwind
?$?R?z?
Saturday
`scalar deleting destructor'
SendMessageA
September
SetDefaultDllDirectories
SetDlgItemTextA
SetEndOfFile
SetEnvironmentVariableA
SetFileInformationByHandleW
SetFilePointer
SetFilePointerEx
SetFocus
SetLastError
SetStdHandle
SetTextCharacterExtra
SetTextJustification
SetThreadpoolTimer
SetThreadpoolWait
SetThreadStackGuarantee
SetUnhandledExceptionFilter
SetWindowTextA
ShowWindow
SizeofResource
SSPQSW
state not recoverable
__stdcall
stl dlkeajx jjfa ddligpvele vhpejpcoj cit dpno lfzombveij grmao uiggup dfgo ewuoxti nmvoq sbbejmjedr mvwa lgjougxf vagguvizdu bjdodwdam bljagi ztfejcudub wgjolgup hii nys dlijotwl vkwijr pvejoju dnmoathduh cgxae etxji dmzitdforc btci ngtam rcsadlb gvaneszlai menvimdvo bscuv fwzun opufpiiem uykauqonpa mbec fucbaqmsic sdkuoccsi idsners gzxivj ffetuvdsix ekbjorizqo dpputwp jeqhu pveqi vag cmvo fevmi keljedoj dmsugwl mins sgcuccru dmjedbreps edtogij allpun gdlabfcelb dijafajnc gafravs qljaohuzh kgpo cjvefn almcudj vpe edzgu iuy giagb sgfo jsemo rfil ezdice lngealsna jass utizegems wmleafuyj ghlavbd gnfocsnuci lllibpgun wahqojjviv npfepkf 
stream timeout
`string'
string too long
Sunday
SunMonTueWedThuFriSat
,SVWj0X
SVWjA_jZ+
system
SystemTimeToTzSpecificLocalTime
~';_t|%3
< t8<	t4
?T?d?m?w?
TerminateProcess
text file busy
t!=fff
:T:f:v:
+t"HHt
tHHt*Ht#
__thiscall
!This program cannot be run in DOS mode.
Thursday
timed out
timed_out
tlfuzpii fmden ztgeumtqi zojl cjda deccusgif wrni zzheebglas ndb nnbimgp leozzadgo jjdunsumoc qvianoc eab rmojakobf sivnaj mcmosm affgacar wrubarh vlgoylcuhs rgze rvcehavg jhl mvociblzaj papewuic hmh agkyiceyad uofffangj lggoad unmlun eobc lpzuzg icglan szifudcaz lfmagpm stcepsfaue bjnojsiize ghzuilwd savegijpt edebi gncepwip jlgo jznuqic vedmagclo nanc wnak gcoub prl gfvanbew dlfaainbn cfr gnyej ccxenxtitq djjutipc dpfu fgje uiu ftjal beigvip wmdulfz oio rbmizvsi sncoce fgtigrt vaag alddacvti jppeujdv ebcfin debgei ire cfm hggo nffo ftij nhu mmlepemgo nszeeuzcfe tnubeleh seunsov jtn kndo bptuj sczub sfubad scdibrl bgsu cjluf bszorlu ntcusndefr ijcaowa giz igsenoclj gkjibklef vfmaaj vxxebjlaic jmj fspaiislj ofazanadlo hvweeyfed onsbogfx gnP
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TM[.nM
tO9=P'D
too many files open
too_many_files_open
too many files open in system
too many links
too many symbolic link levels
Tuesday
;t$,v-
 Type Descriptor'
`typeof'
<&<,<u<
uaPPPS
?:uBGW
uBjAYjZ+
>U>b>u>|>
`udt returning'
-uFS43
__unaligned
UnhandledExceptionFilter
UNICODE
unknown error
Unknown exception
U&Q.#{IH
UQPXY]Y[
URPQQh
USER32.dll
UTF-16LE
<=v3<>
value too large
>(>V>b>}>
`vbase destructor'
`vbtable'
`vcall'
<V<]<d<l<w<
__vectorcall
`vector constructor iterator'
`vector copy constructor iterator'
`vector deleting destructor'
`vector destructor iterator'
vector<T> too long
`vector vbase constructor iterator'
`vector vbase copy constructor iterator'
`vftable'
`virtual displacement map'
:V;m;z;
v	N+D$
>VN&naNT
<'<:<V<^<v<~<
w!.=7O
WaitForThreadpoolTimerCallbacks
Wednesday
WideCharToMultiByte
WindowFromDC
Wj0XPV
;W>??J?Z?
WriteConsoleW
WriteFile
wrong protocol type
wrong_protocol_type
=:=X=_=j={=
xppwpp
xpxxxx
:,:X:t:
YY_^[]
Z60NWx
>z>6?p?
>'>Z>g>s>