Analysis Date2015-05-17 23:11:08
MD558cf6234295ffa6a04a5858cae9d2029
SHA1447b317b309690eb80ac1cb8e47293ee8f1296ec

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: 75a2130ded532c355db1961d7bf2e858 sha1: 00c20813d2ceaf91362c0527b63b763098a8d7e4 size: 314368
Section.rdata md5: bb878d48604a6675348242522c5aca8f sha1: f6bb87831b58ca7a904a711c8197ab5fa976c822 size: 60928
Section.data md5: dc2ca18c2ff7039f92a4ba749790196c sha1: 8d67014303a1735d225e58d10c2ff12c59802c55 size: 7680
Section.reloc md5: f8a1a46370c6138e8a8ec1a0559e56e4 sha1: f9916289f4ded924aa260dcffb19bf11f287f348 size: 25600
Timestamp2015-05-11 07:03:46
PackerMicrosoft Visual C++ 8
PEhash3d8c301256b85e369f9ecd4fc5c1ff9850e3e0b9
IMPhash1fa06313714f4d6df59e759a6da68076

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates FileC:\fgbyivrqz\gnvhto5j
Creates FileC:\WINDOWS\fgbyivrqz\gnvhto5j
Creates FileC:\fgbyivrqz\afd1m2acqrhzmqpbp.exe
Deletes FileC:\WINDOWS\fgbyivrqz\gnvhto5j
Creates ProcessC:\fgbyivrqz\afd1m2acqrhzmqpbp.exe

Process
↳ C:\fgbyivrqz\afd1m2acqrhzmqpbp.exe

RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Helper Keying Link BitLocker ➝
C:\fgbyivrqz\tksngzd.exe
Creates FileC:\fgbyivrqz\amoqvu
Creates FileC:\fgbyivrqz\gnvhto5j
Creates FileC:\WINDOWS\fgbyivrqz\gnvhto5j
Creates FilePIPE\lsarpc
Creates FileC:\fgbyivrqz\tksngzd.exe
Deletes FileC:\WINDOWS\fgbyivrqz\gnvhto5j
Creates ProcessC:\fgbyivrqz\tksngzd.exe
Creates ServiceIP Host Topology Proxy Net.Tcp - C:\fgbyivrqz\tksngzd.exe

Process
↳ Pid 804

Process
↳ Pid 848

Process
↳ C:\WINDOWS\System32\svchost.exe

Process
↳ Pid 1116

Process
↳ Pid 1204

Process
↳ C:\WINDOWS\system32\spoolsv.exe

Process
↳ Pid 1840

Process
↳ Pid 1128

Process
↳ C:\fgbyivrqz\tksngzd.exe

Creates Filepipe\net\NtControlPipe10
Creates FileC:\fgbyivrqz\amoqvu
Creates FileC:\fgbyivrqz\gjeprdqtc.exe
Creates FileC:\fgbyivrqz\gnvhto5j
Creates FileC:\WINDOWS\fgbyivrqz\gnvhto5j
Creates File\Device\Afd\Endpoint
Creates FileC:\fgbyivrqz\gnzsj8
Deletes FileC:\WINDOWS\fgbyivrqz\gnvhto5j
Creates Processiiukazfaudwo "c:\fgbyivrqz\tksngzd.exe"

Process
↳ C:\fgbyivrqz\tksngzd.exe

Creates FileC:\fgbyivrqz\gnvhto5j
Creates FileC:\WINDOWS\fgbyivrqz\gnvhto5j
Deletes FileC:\WINDOWS\fgbyivrqz\gnvhto5j

Process
↳ iiukazfaudwo "c:\fgbyivrqz\tksngzd.exe"

Creates FileC:\fgbyivrqz\gnvhto5j
Creates FileC:\WINDOWS\fgbyivrqz\gnvhto5j
Deletes FileC:\WINDOWS\fgbyivrqz\gnvhto5j

Network Details:

DNSbreadcircle.net
Type: A
50.63.202.37
DNSnightforest.net
Type: A
50.63.25.109
DNSelectricforest.net
Type: A
184.168.221.30
DNStradewheat.net
Type: A
208.91.197.241
DNSquietforest.net
Type: A
198.252.107.15
DNSgathercircle.net
Type: A
DNSfliermeasure.net
Type: A
DNSbreadmeasure.net
Type: A
DNSflierdinner.net
Type: A
DNSbreaddinner.net
Type: A
DNSflierafraid.net
Type: A
DNSbreadafraid.net
Type: A
DNSfliercircle.net
Type: A
DNSquietmeasure.net
Type: A
DNSseasonmeasure.net
Type: A
DNSquietdinner.net
Type: A
DNSseasondinner.net
Type: A
DNSquietafraid.net
Type: A
DNSseasonafraid.net
Type: A
DNSquietcircle.net
Type: A
DNSseasoncircle.net
Type: A
DNSagainstwheat.net
Type: A
DNSdoubtwheat.net
Type: A
DNSagainstanger.net
Type: A
DNSdoubtanger.net
Type: A
DNSagainstalways.net
Type: A
DNSdoubtalways.net
Type: A
DNSagainstforest.net
Type: A
DNSdoubtforest.net
Type: A
DNSnightwheat.net
Type: A
DNSdecidewheat.net
Type: A
DNSnightanger.net
Type: A
DNSdecideanger.net
Type: A
DNSnightalways.net
Type: A
DNSdecidealways.net
Type: A
DNSdecideforest.net
Type: A
DNSlargewheat.net
Type: A
DNScaptainwheat.net
Type: A
DNSlargeanger.net
Type: A
DNScaptainanger.net
Type: A
DNSlargealways.net
Type: A
DNScaptainalways.net
Type: A
DNSlargeforest.net
Type: A
DNScaptainforest.net
Type: A
DNSrecordwheat.net
Type: A
DNSelectricwheat.net
Type: A
DNSrecordanger.net
Type: A
DNSelectricanger.net
Type: A
DNSrecordalways.net
Type: A
DNSelectricalways.net
Type: A
DNSrecordforest.net
Type: A
DNSstreetwheat.net
Type: A
DNSstreetanger.net
Type: A
DNStradeanger.net
Type: A
DNSstreetalways.net
Type: A
DNStradealways.net
Type: A
DNSstreetforest.net
Type: A
DNStradeforest.net
Type: A
DNSbetterwheat.net
Type: A
DNSgatherwheat.net
Type: A
DNSbetteranger.net
Type: A
DNSgatheranger.net
Type: A
DNSbetteralways.net
Type: A
DNSgatheralways.net
Type: A
DNSbetterforest.net
Type: A
DNSgatherforest.net
Type: A
DNSflierwheat.net
Type: A
DNSbreadwheat.net
Type: A
DNSflieranger.net
Type: A
DNSbreadanger.net
Type: A
DNSflieralways.net
Type: A
DNSbreadalways.net
Type: A
DNSflierforest.net
Type: A
DNSbreadforest.net
Type: A
DNSquietwheat.net
Type: A
DNSseasonwheat.net
Type: A
DNSquietanger.net
Type: A
DNSseasonanger.net
Type: A
DNSquietalways.net
Type: A
DNSseasonalways.net
Type: A
DNSseasonforest.net
Type: A
DNSagainstschool.net
Type: A
DNSdoubtschool.net
Type: A
DNSagainstwhile.net
Type: A
DNSdoubtwhile.net
Type: A
HTTP GEThttp://breadcircle.net/index.php
User-Agent:
HTTP GEThttp://nightforest.net/index.php
User-Agent:
HTTP GEThttp://electricforest.net/index.php
User-Agent:
HTTP GEThttp://tradewheat.net/index.php
User-Agent:
HTTP GEThttp://quietforest.net/index.php
User-Agent:
Flows TCP192.168.1.1:1031 ➝ 50.63.202.37:80
Flows TCP192.168.1.1:1032 ➝ 50.63.25.109:80
Flows TCP192.168.1.1:1033 ➝ 184.168.221.30:80
Flows TCP192.168.1.1:1034 ➝ 208.91.197.241:80
Flows TCP192.168.1.1:1035 ➝ 198.252.107.15:80

Raw Pcap
0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2062   : close..Host: b
0x00000040 (00064)   72656164 63697263 6c652e6e 65740d0a   readcircle.net..
0x00000050 (00080)   0d0a                                  ..

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a206e   : close..Host: n
0x00000040 (00064)   69676874 666f7265 73742e6e 65740d0a   ightforest.net..
0x00000050 (00080)   0d0a                                  ..

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2065   : close..Host: e
0x00000040 (00064)   6c656374 72696366 6f726573 742e6e65   lectricforest.ne
0x00000050 (00080)   740d0a0d 0a                           t....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2074   : close..Host: t
0x00000040 (00064)   72616465 77686561 742e6e65 740d0a0d   radewheat.net...
0x00000050 (00080)   0a0d0a0d 0a                           .....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2071   : close..Host: q
0x00000040 (00064)   75696574 666f7265 73742e6e 65740d0a   uietforest.net..
0x00000050 (00080)   0d0a0a0d 0a                           .....


Strings
lgC
Sertc
.
 
\
.\" 
  
.
e
. 
.
e
. 
00-+ 00-+ **00-+ .
-
-1
+-0-E-
-0
\
.
-
..
0
0 
- 
000
-
-
u
                                 
2.exe
- abort() has been called
ADVAPI32.DLL
af-za
af-ZA
alnum
alpha
america
american
american english
american-english
April
ar-ae
ar-AE
ar-bh
ar-BH
ar-dz
ar-DZ
ar-eg
ar-EG
ar-iq
ar-IQ
ar-jo
ar-JO
ar-kw
ar-KW
ar-lb
ar-LB
ar-ly
ar-LY
ar-ma
ar-MA
ar-om
ar-OM
ar-qa
ar-QA
ar-sa
ar-SA
ar-sy
ar-SY
ar-tn
ar-TN
ar-ye
ar-YE
- Attempt to initialize the CRT more than once.
- Attempt to use MSIL code from this assembly during native code initialization
August
australian
az-az-cyrl
az-AZ-Cyrl
az-az-latn
az-AZ-Latn
.bat
be-by
be-BY
belgian
bg-bg
bg-BG
blank
bn-in
bn-IN
britain
bs-ba-latn
bs-BA-Latn
ca-es
ca-ES
canadian
china
chinese
chinese-hongkong
chinese-simplified
chinese-singapore
chinese-traditional
CLC_ALL
.cmd
cntrl
.com
CONOUT$
- CRT not initialized
cs-cz
cs-CZ
cy-gb
cy-GB
czech
da-dk
da-DK
dddd, MMMM dd, yyyy
de-at
de-AT
December
de-ch
de-CH
de-de
de-DE
de-li
de-LI
de-lu
de-LU
digit
div-mv
div-MV
DOMAIN error
dutch-belgian
ECHN
ECHS
ECHT
ECZE
EDEA
EDEC
EDEL
EDES
EENA
EENB
EENC
EENG
EENI
EENJ
EENL
EENS
EENT
EENU
EENZ
EESA
EESB
EESC
EESD
EESE
EESF
EESG
EESH
EESI
EESL
EESM
EESN
EESO
EESR
EESS
EESU
EESV
EESY
EESZ
EFRB
EFRC
EFRL
EFRS
EGBR
EHKG
EITS
Eja-JP
Ejjjj
EKOR
el-gr
el-GR
emscoree.dll
en-au
en-AU
en-bz
en-BZ
en-ca
en-CA
en-cb
en-CB
en-gb
en-GB
england
english-american
english-aus
english-belize
english-can
english-caribbean
english-ire
english-jamaica
english-nz
english-south africa
english-trinidad y tobago
english-uk
english-us
english-usa
en-ie
en-IE
en-jm
en-JM
ENLB
ENLD
en-nz
en-NZ
ENON
ENOR
en-ph
en-PH
en-tt
en-TT
en-us
en-US
en-za
en-ZA
ENZL
en-zw
en-ZW
EPRI
EPTB
ER6002
es-ar
es-AR
es-bo
es-BO
es-cl
es-CL
es-co
es-CO
es-cr
es-CR
es-do
es-DO
es-ec
es-EC
es-es
es-ES
es-gt
es-GT
es-hn
es-HN
es-mx
es-MX
es-ni
es-NI
es-pa
es-PA
es-pe
es-PE
es-pr
es-PR
es-py
es-PY
es-sv
es-SV
es-uy
es-UY
es-ve
es-VE
ESVF
ESVK
et-ee
et-EE
ETTO
eu-es
eu-ES
EUSA
EZAF
EZHH
EZHI
fa-ir
fa-IR
February
fi-fi
fi-FI
- floating point support not loaded
fo-fo
fo-FO
fr-be
fr-BE
fr-ca
fr-CA
fr-ch
fr-CH
french-belgian
french-canadian
french-luxembourg
french-swiss
fr-fr
fr-FR
Friday
fr-lu
fr-LU
fr-mc
fr-MC
german-austrian
german-lichtenstein
german-luxembourg
german-swiss
gl-es
gl-ES
graph
great britain
gu-in
gu-IN
         (((((                  H
he-il
he-IL
HH:mm:ss
hi-in
hi-IN
holland
hong-kong
hr-ba
hr-BA
hr-hr
hr-HR
hu-hu
hu-HU
hy-am
hy-AM
id-id
id-ID
- inconsistent onexit begin-end variables
irish-english
is-is
is-IS
italian-swiss
it-ch
it-CH
it-it
it-IT
ja-jp
January
jjjjj
July
June
ka-ge
ka-GE
kernel32.dll
kk-kz
kk-KZ
kn-in
kn-IN
kok-in
kok-IN
ko-kr
ko-KR
ky-kg
ky-KG
LC_COLLATE
LC_CTYPE
LC_MONETARY
LC_NUMERIC
LC_TIME
lower
lt-lt
lt-LT
lv-lv
lv-LV
March
Microsoft Visual C++ Runtime Library
mi-nz
mi-NZ
mk-mk
mk-MK
ml-in
ml-IN
MM/dd/yy
mn-mn
mn-MN
Monday
mr-in
mr-IN
ms-bn
ms-BN
ms-my
ms-MY
mt-mt
mt-MT
nb-no
nb-NO
new-zealand
nl-be
nl-BE
nl-nl
nl-NL
nn-no
nn-NO
norwegian
norwegian-bokmal
norwegian-nynorsk
- not enough space for arguments
- not enough space for environment
- not enough space for locale information
- not enough space for lowio initialization
- not enough space for _onexit/atexit table
- not enough space for stdio initialization
- not enough space for thread data
November
ns-za
ns-ZA
(null)
October
pa-in
pa-IN
pl-pl
pl-PL
portuguese-brazilian
pr china
pr-china
print
Program: 
<program name unknown>
pt-br
pt-BR
pt-pt
pt-PT
puerto-rico
punct
- pure virtual function call
quz-bo
quz-BO
quz-ec
quz-EC
quz-pe
quz-PE
R6008
R6009
R6010
R6016
R6017
R6018
R6019
R6024
R6025
R6026
R6027
R6028
R6030
R6031
R6032
R6033
R6034
ro-ro
ro-RO
runtime error 
Runtime Error!
ru-ru
ru-RU
sa-in
sa-IN
Saturday
se-fi
se-FI
se-no
se-NO
September
se-se
se-SE
SING error
sk-sk
sk-SK
slovak
sl-si
sl-SI
sma-no
sma-NO
sma-se
sma-SE
smj-no
smj-NO
smj-se
smj-SE
smn-fi
smn-FI
sms-fi
sms-FI
south africa
south-africa
south korea
south-korea
space
spanish-argentina
spanish-bolivia
spanish-chile
spanish-colombia
spanish-costa rica
spanish-dominican republic
spanish-ecuador
spanish-el salvador
spanish-guatemala
spanish-honduras
spanish-mexican
spanish-modern
spanish-nicaragua
spanish-panama
spanish-paraguay
spanish-peru
spanish-puerto rico
spanish-uruguay
spanish-venezuela
sq-al
sq-AL
sr-ba-cyrl
sr-BA-Cyrl
sr-ba-latn
sr-BA-Latn
sr-sp-cyrl
sr-SP-Cyrl
sr-sp-latn
sr-SP-Latn
Sunday
sv-fi
sv-FI
sv-se
sv-SE
swedish-finland
swiss
sw-ke
sw-KE
syr-sy
syr-SY
ta-in
ta-IN
te-in
te-IN
This indicates a bug in your application.
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
th-th
th-TH
Thursday
TLOSS error
tn-za
tn-ZA
trinidad & tobago
tr-tr
tr-TR
tt-ru
tt-RU
Tuesday
uk-ua
uk-UA
- unable to initialize heap
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
united-kingdom
united-states
upper
ur-pk
ur-PK
USER32.DLL
uz-uz-cyrl
uz-UZ-Cyrl
uz-uz-latn
uz-UZ-Latn
vi-vn
vi-VN
Wednesday
xdigit
xh-za
xh-ZA
zh-chs
zh-CHS
zh-cht
zh-CHT
zh-cn
zh-CN
zh-hk
zh-HK
zh-mo
zh-MO
zh-sg
zh-SG
zh-tw
zh-TW
zu-za
zu-ZA
                          
; ;);=;
: :@:`:
0$00080@0I0Q0]0e0p0|0
0#0*0:0A0b0n0v0
0"0*0:0B0J0R0X0e0
000@0D0T0X0\0d0|0
0 0(0@0J0T0^0h0p0z0
 0&0,02080>0E0L0S0Z0a0h0o0w0
0#0+030=0H0X0
0#0+030B0J0R0Z0b0n0s0{0
0$0,04090A0T0_0g0o0w0
0"0-040P0`0h0t0~0
&00060M0Y0_0z0
0#0/070<0D0Y0a0m0u0
0"0,080G0U0j0u0
0!0+0A0K0c0s0
0-0:0B0J0R0
0)0=0P0
0!0'0X0c0l0
0&01090?0G0]0s0z0
0+030;0G0R0x0
0 030F0Q0[0g0n0v0
0)040o0
0"060O0W0_0{0
0.090E0V0\0c0n0x0}0
0*0B0S0[0c0j0r0
0!0F0]0
0&0G0R0_0f0s0{0
-0^0h0~0
0!0j0U3
0)0N0U0\0l0
0*0Q0V0^0n0{051=1P1Y1_1l1z1
01090O0^0i0t0
0'1-191A1I1Q1Y1d1q1~1
0!121f1m1
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
0'161;1C1M1`1g1o1
0"1C1Z1
'020=0E0M0\0n0v0~0
0!2)2<2D2Q2Y2`2w2
0#252N2
'040;0B0T0Y0a0u0}0
0!4%4)4-4145494=4A4E4I4M4T4Z4`4f4l4r4x4~4
= =0=4=D=H=L=P=X=p=
> >0>4><>T>d>h>x>|>
060Y0e0
>!>)>0>7>?>F>e>m>r>
>&>0>8>C>U>[>x>
<"<0<8<=<E<^<d<m<t<|<
?&?0?8?@?G?P?V?^?e?
?!?(?0?8?G?S?[?f?n?u?
:$:0:8:@:G:U:Z:s:y:
< <(<0<8<@<H<P<X<`<h<p<x<
= =(=0=8=@=H=P=X=`=h=p=x=
> >(>0>8>@>H>P>X>`>h>p>x>
; ;(;0;8;@;H;P;X;`;h;p;x;
: :(:0:8:@:H:P:X:`:h:p:x:
? ?(?0?8?@?H?P?X?`?h?p?x?
?!?)?0?8?K?W?f?n?s?
?$?(?,?0?8?P?`?d?t?x?|?
>&>0>8>R>Z>d>
?!?)?0?8?W?_?k?~?
<0| <9
:0:;:C:U:^:l:
?0?@?F?
:&:0:?:G:W:c:k:w:
>$>0><>H>T>`>l>x>
=(=0=I=V=^=v=}=
#0K0Y0
<0|L<9
<0|m<9
0t-HHt
;';0;V;^;i;o;t;
:#:1:_:{:
1(101:1@1F1M1f1s1z1
1,1014181<1@1D1H1L1l4t4|4
1&10181@1F1L1l1v1|1
1 1'101G1Q1`1
1 1'1<1^1
1 1'1/191K1V1^1f1p1w1
1'1/1:1A1c1k1s1|1
1$1.1:1B1R1Y1g1o1
1)1/1@1F1U1[1u1
1'1/1:1W1^1f1m1u1
1(1-131J1R1b1r1
1$1,141<1g1u1}1
1!1.161B1H1N1V1m1u1
1&1,171@1M1U1b1
1$1(181<1@1H1`1
1!1/1E1R1Z1s1
1"1*1G1O1W1i1q1y1
1:1@1K1S1d1q1v1
1(1/1N1V1^1f1y1
1$141>1D1L1l1r1~1
1,141<1D1L1T1Z1_1e1t1z1
1#14191J1[1f1r1
1+161B1O1[1l1s1}1
1,161O1W1_1g1z1
1/171?1G1O1W1_1w1
1-1S1/2
1.1U1b1o1z1
1 1V1\1
(1,1x1|1
121B1M1Y1j1r1z1
1#2<2\2|2
1$222P2e2
1%2-242<2O2b2j2z2
1	2.2p2
13282@2]2c2
142Q2p2*343O3
151F1]1f1
151N1X1i1p1
161A1J1[1
: :1:7:<:D:W:z:
<!<)<1<9<C<K<S<e<s<
;,;1;B;G;T;Y;j;
%1C1\1c1k1p1t1x1
1d2l2t2y2
<)<1<<<D<L<h<m<
=&=1=D=Q=Z=
<1<F<N<V<[<c<z<
?*?1?=?J?R?_?g?s?z?
1L1U1t1
?$?1?L?W?`?q?
1#QNAN
=#=1=S=
1#SNAN
202=2E2M2U2]2b2y2
2$202<2J2P2\2h2n2
2#202A2a2'4e6
2"212;2H2R2b2
2)212D2X2h2o2z2
2 2(202=2G2O2W2b2~2
2 2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2
2!2)21292@2H2X2p2|2
2#222>2F2N2V2
2'2/2;2A2I2P2h2o2v2
2'2/2>2F2N2X2t2{2
2!2)2/2h2s2{2
2&222M2_2j2r2z2
2!2+232B2J2V2c2p2x2
2$2,242<2D2L2T2\2d2l2t2|2
2$2,242<2F2V2a2i2q2
2)2/252?2G2N2V2]2q2y2
2(2/252Q2]2c2m2s2z2
2"2.262>2F2N2T2^2d2y2
2#2<2C2K2P2T2X2
2'2@2N2g2u2
2$2<2O2U2[2b2k2p2v2~2
2 2$2X7
2)2/2Y2b2p2v2
2,232=2E2K2k2y2
22383<3@3D3
2%242<2D2L2R2W2_2q2
2&242^2i2}2
2,242H2P2X2`2d2h2p2
2!252=2L2W2a2
2*252F2M2f2
2%262>2T2`2
2/272D2P2X2_2g2z2
2$292G2T2^2v2}2
2$2d2|2
2'2D2J2R2X2]2|2
2_2g2o2
2(2U2z2
2)313=3H3]3c3
2!373>3Z3a3f3r3
2>3R3X3
252=2B2[2e2m2u2
263D3L3h3n3v3~3
;!;);2;6;F;N;V;^;c;k;q;~;
:":':2:8:T:\:b:j:q:y:
;";*;2;:;B;
<	=*=2=:=B=N=V=b=w=
;%;2;<;D;S;b;q;
="=*=2=E=K=v=~=
<#<+<2<G<N<T<`<h<p<
;!;-;2;J;g;u;
<*<2<M<U<a<h<p<w<
2N3x4N<
=,=2=>=N=T=c=j=z=
<"<*<2<<<N<T<Z<b<n<s<{<
=2>P>s>
2R2X2\2`2d2
=+=2=S=[=b=j=v=
2V4c4i4s4
>'>2>:>@>w>
2X$*U3@U$K
3'303;3D3K3R3Z3q3
3!323>3E3L3Z3
3 3(30343<3D3L3P3X3l3t3|3
3 3$3(3,3034383<3@3D3H3L3P3T3X3\3`3d3x;
3!3)33393?3U3]3h3s3z3
3!3)3.343<3A3G3O3T3Z3b3g3m3u3z3
3 3&3:3A3J3^3y3
3$3+3?3G3N3Y3_3
3%333L3Z3s3}3
3$3,343<3D3L3T3\3d3l3t3|3
3#3.363B3I3P3W3a3i3r3
3 3/373C3S3_3
3'3/373J3U3]3d3z3
3&3+373X3`3l3s3z3
3 3)3D3K3S3X3`3y3
3%3-3G3L3X3c3~3
3,3>3I3[3c3k3w3
3 3+3I3V3\3j3
3%3@3L3R3W3_3g3{3
3-343=3D3J3X3q3x3
3$343D3d3p3t3x3|3
3'343P3i3s3
3+383H3P3X3`3h3t3y3
3%393C3V3^3}3
3:3E3e3p3
343:3@3h3o3}3
34364@4O4T4\4p4x4
3!4)414N4
3$4.464I4Z4b4k4s4{4
363=3D3V3\3w3
3,646A6M6U6m6y6
364D4O4W4j4r4
383@3Q3e3n3x3
383E3M3U3d3t3
394C4S4
>3>A>c>i>u>
>">+>3>;>C>c>q>
?'?3?:?C?K?c?u?}?
:);3;<;F;N;e;q;y;
3G3Q3Y3a3i3u3
<#<+<3<;<G<V<`<e<m<|<
>'>3>;>M>X>`>h>p>y>
=#>3>;>N>U>\>d>j>q>y>
;(;.;3;?;N;U;];t;{;
;!<4<:<
:):4:>:
424;4R4Z4d4s4{4
435A5P5Y5B7^7K8
4%41494A4I4P4Y4b4j4{4
4&434?4G4Q4Y4a4f4o4
4 4%4+43484>4F4K4Q4Y4^4d4l4q4w4
4 4$4(4,40444<4@4 5$5p9
4$4,444:4B4P4k4s4
4$4,444<4D4L4T4\4d4l4t4|4
4&4-444;4E4T4\4d4l4s4z4
4,444@4F4T4e4r4z4
4)444@4T4\4d4l4q4y4
4%4-4;4E4M4U475?5S5[5`5h5|5
4%4-454;4C4P4[4`4h4
4&4.464>4J4Q4d4j4q4y4
4&4/474>4N4c4j4r4x4~4
4 4(4A4
4 4@4K4k4v4
4"464>4J4R4Z4b4
4 464o4
4+484F4u4{4
4/4a4h4l4p4t4x4|4
4(4H4T4p4
4-4I4Q4\4d4o4
4#515t5
4'52595A5_5f5y5
4'5-5R5g5
464=4E4M4X4v4}4
475?5P5X5`5h5
47lgik
>4>8><>
4B6v6&9
;&;-;4;;;B;I;P;W;^;e;m;q;u;y;};
;4;D;H;\;`;p;t;x;
<4<D<H<X<\<`<d<l<
>$>,>4><>D>L>T>\>d>l>t>
; ;(;4;<;D;O;[;b;i;|;
4E4Q4v4{4
4E5Y5a5i5
=$=-=4=E=L=e=}=
:-:4:E:M:l:s:
<4<=<`<g<o<
:,:4:=:G:R:c:j:t:}:
?$?4?<?H?X?`?j?r?~?
<"<*<4<<<I<S<[<d<p<z<
4J4\4p4}4
>'>,>4>J>R>^>e>y>
=(=4=@=L=X=d=p=|=
>$?,?4?@?O?\?|?
:4:P:t:
>'?,?4?Q?Y?a?i?q?y?
?-?4?<?R?
? ?,?4?<?R?Z?f?
>#>/>4>S>h?n?
4W4_4g4o4w4
; ;';,;4;<;X;`;h;p;
516F6^6g6
535F5M5Y5c5m5
5(505;5U5i5y5
5,505L5P5p5
5)51595A5G5R5q5y5
5)515L5X5_5j5u5}5
5'535?5I5Q5Y5a5m5u5
5&545<5E5h5
5"5*525:5W5_5g5}5
5$5,545<5D5L5T5\5d5l5t5|5
5 5&5,52585>5D5J5P5V5\5b5h5n5t5z5
5#5'5+5/53575;5?5C5V5^5|5
5 5(5=5G5Q5Y5a5m5u5z5
5$5.5<5L5Z5b5m5w5
5!5/5=5Q5Y5j5
5	5'5.5W5i5y5
5'5/575?5O5W5]5h5r5~5
5"5-595M5[5p5y5
5"5(5B5H5c5q5
5$5;5B5S5m5t5|5
5!5:5H5a5k5p5w5
5.5@5H5P5X5`5h5s5{5
5-5d5}5
5=5D5\5~5
5!5L5k5
5	626<6D6P6X6]6r6
566>6K6S6g6s6x6
595A5L5Y5^5d5l5
=*>5>A>
>-?5?B?W?_?n?~?
>!>)>5>;>C>O>W>_>k>q>}>
>!>->5>F>K>S>Y>r>{>
;5;?;G;M;[;b;{;
<5<G<R<Z<_<l<t<z<
:%:.:5:<:g:u:S;c;h;r;
?'?5?<?H?P?k?
;#;-;5;=;H;X;`;j;q;y;
5I6N6T6[6
5K5S5^5
=!=5===K=S=_=g=s=z=
:!:.:5:O:U:j:t:
5#rDW!
5S6m6z6
5W5^5f5z5
(646@6L6X6d6p6|6
656:6A6H6O6\6e6
6)61696A6G6S6]6c6{6
6$6*60666<6B6H6N6T6Z6`6f6l6r6x6~6
6!6)616<6H6P6X6`6l6w6
6 6)61686d6l6
6 6&626>6E6M6X6s6
6"6*626:6F6N6V6^6f6o6w6
6 6(636?6G6O6U6^6d6k6t6
6$6,646<6D6L6T6\6d6l6t6|6
6"6,656>6I6V6a6i6}6
6&6+656O6U6b6o6}6
6"6(6.646:6@6F6L6R6X6^6d6j6p6v6|6
6 6(6.6C6I6S6[6p6w6
6#6/6;6C6P6\6
6!6)6<6J6R6^6f6n6v6}6
6'6/676C6K6V6]6i6q6
6$6,686@6K6_6e6o6w6~6
6/6:6A6I6_6n6z6
6*6;6M6f6s6}6
6&6=6W6r6z6
6:6A6L6e6k6s6
6#6b6z6
6$727L7T7Z7a7n7
6&7=7C7J7Q7_7g7u7
6:7B7P7[7c7k7s7
6,7b7u7
6"7e7q7|8
6$7O7Y7c7
686<6@6D6H6L6P6
686=6c6
686D6\6`6
687@7I7W7b7i7q7
6/8L8Q8 9k9*:K:P:
:%:-:6:A:J:Q:]:b:h:o:w:~:
?"?)?6?;?A?P?V?[?a?
6B7Q7`7e7m7
;$;-;6;;;C;I;`;p;
;&;.;6;C;K;\;d;i;q;
<#<6<C<K<S<^<p<y<
6d9n9x9
=6><>D>N>d>k>r>z>
6e6F7W7z7
?.?6?>?E?K?i?q?{?
=&=.=6=F=l=
: :(:.:6:<:I:T:d:n:v:
:&:.:6:K:S:_:e:t:|:
{6LTkSL,
=(=6=L=W=_=m=y=
=%=.=6=M=T=h=m=u={=
:!:(:/:6:@:O:W:c:k:w:
6p7{7R8
;&;.;6;>;Q;];d;j;
:):6:@:R:
>&>.>6>S>Z>`?
6W6d6~6
71777V7\7
737:7C7S7{7
738@8F8b8o8u8
747@7H7x7
7(70787N7V7^7f7u7
7*70797E7M7T7l7x7
7"707A7F7N7b7j7p7|7
7'737>7N7V7^7f7
7&767=7
7 7*727<7D7P7Z7a7i7
7$7,747<7D7L7T7\7d7l7t7|7
7"7*767>7F7Z7b7j7r7
7"7'7-71777;7A7E7K7O7a7
7 7&7,72787>7D7J7P7V7\7b7
7 7,777X7^7d7n7t7
7"7(7.787
7 7(7.797>7F7Z7f7n7v7~7
7$7*7:7A7H7U7a7i7q7v7~7
7$7/7;7n7z7
7.7;7B7J7U7q7y7
7+7=7E7T7Y7b7k7q7w7
7 7=7H7P7X7a7
7*7[7h7q7
7'7/7I7Q7]7d7m7x7D8K8S8g8m8s8{8
7.7<7U7c7x7
7*787A7J7P7V7`7i7q7y7
7.7S7X7d7s7|7
7&7T7g7
:":7:B:N:x:
=#=/=7=C=M=T=^=f=n=}=
?"?/?7?C?O?T?r?w?
:':/:7:<:D:L:h:p:x:
="=/=7=?=G=L=X=`=l=q=y=
;);7;?;G;O;V;^;l;
7k8l9|9
7MN#:SNz
8!;%;);-;1;5;9;=;k<
838?8G8M8S8^8i8q8y8
849<9E9M9U9]9i9t9
86@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6X8\8`8d8h8l8p8t8x8|8
8$818E8R8Z8f8l8t8z8
8'828@8N8V8b8
8-848?8G8]8k8r8
8.858=8E8M8Y8d8p8x8
8-858=8E8t8
8 878B8R8]8
8(8.838;8B8J8_8i8s8
8$8,848<8
8%8,848<8D8[8o8w8
8$8,848<8D8L8T8\8d8l8t8|8
8%8-858@8F8O8e8q8|8
8&8.858H8R8Y8b8m8u8}8
8 8$8(8,8\<
8 8$8@8H8L8d8h8
8'8.8A8I8T8^8f8z8
8 8'8D8K8S8x8
8)8?8G8V8c8j8w8
8,8;8I8Q8Y8a8m8u8}8
8"8*8K8S8X8`8k8
8(8/8V8h8{8
8.898B8J8R8Z8`8l8z8
8,898F8
8"8G8M8_8j8r8
8/8Q8l8
8;8R8X8e8k8r8
8%8t8|8
8&8U8b8
8/8V8g8n8u8}8
8*929u9}9
8,9a9i9w9
8,9E9E:\:
8=9L9a9h9
8	9R9i9
< <,<8<D<P<\<h<t<
8F9K9]9{9
<8<F<_<m<
;/;8;\;^<g<
8G9Z9`9e9m9u9
<8=G=S=\=d=
<+<8<@<H<P<X<<=D=M=U=\=r=
8I9Y9o9
<#<+<8<L<Q<Y<n<{<
:$:*:8:Q:V:\:a:i:~:
>8?@?V?
-.' 9={
]9{1{|
929;9L9\9d9z9
9#:+:4:=:_:h:n:t:
969Y9`9l9q9
96:<:B:S:^:d:
9$:7:v:
9$90969A9H9R9[9h9o9w9}9
9#909D9Q9g9m9z9
9%91999N9V9j9o9v9
9(92989?9F9P9_9e9k9r9
9+939:9C9K9X9z9
9+969C9P9X9d9l9x9}9
9$989X9x9
9 9(90989@9H9P9X9`9h9p9x9
9#9*90999M9a9i9o9u9}9
9"9*929:9F9\9d9k9}9
9#9+939@9J9R9g9{9
9%9.969>9M9c9k9s9{9
9!9)969P9X9a9g9
9"9/989L9R9f9p9z9
9 9%9+919;9E9O9Y9c9m9r9~9
9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
9"9+9?9J9X9f9n9v9~9
9'9;9B9O9V9a9j9
9&9<9C9L9^9	:
9'9@9G9M9U9Z9b9|9
9$9,9V9\9f9p9x9
9'9H9P9X9`9k9s9
9A9I9Q9\9l9t9|9
;+;9;A;I;
;9;A;O;Y;a;~;
:$:-:9:A:T:[:c:q:{:
=9>A>X>]>
9+:C:K:^:d:|:
9D:N:V:d:
9E:K:\:i:q:y:
=9=?=`=f=m=s=
>$>*>9>G>\>j>p>w>~>
9O9S9W9[9_9c9
9R:Z:`:e:m:z:
>&>.>9>U>
;/;;;[;a;
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
address family not supported
address_family_not_supported
address in use
address_in_use
address not available
address_not_available
`adjustor{
;A;G;M;X;^;d;
:-;A;H;];c;h;p;{;
:!:A:H:f:|:
already connected
already_connected
`anonymous namespace'
?(?A?O?h?v?
<A|,<P
>'>.>A>Q>i>v>{>
AreFileApisANSI
argument list too long
argument out of domain
AtOHt5Hu
<at-<rt"<wt
August
.?AVbad_alloc@std@@
.?AVbad_cast@std@@
.?AVbad_exception@std@@
.?AVbad_function_call@std@@
.?AVbad_typeid@std@@
.?AVcharNode@@
.?AVDNameNode@@
.?AVDNameStatusNode@@
.?AVerror_category@std@@
.?AVexception@std@@
.?AV_Generic_error_category@std@@
.?AVinvalid_argument@std@@
.?AV_Iostream_error_category@std@@
.?AVlength_error@std@@
.?AVlogic_error@std@@
.?AV__non_rtti_object@std@@
.?AVout_of_range@std@@
.?AVoverflow_error@std@@
.?AVpairNode@@
.?AVpcharNode@@
.?AVpDNameNode@@
.?AVregex_error@std@@
.?AVruntime_error@std@@
.?AV_System_error_category@std@@
.?AVtype_info@@
bad address
bad_address
bad allocation
bad exception
bad file descriptor
bad_file_descriptor
bad function call
bad message
 Base Class Array'
 Base Class Descriptor at (
__based(
bdpemsco sqiadig nacge fbtac znlefpgeb stn lhbabx pwfeabny ocs unvcez psjuldc oiqn abssanems ojzt mjege uojnxafvp ijy gpjacehgew hrgiccsadm ccm ljsueczs fnsans zajj emjjeuxoeb fiwcijtm efco gnapurgo fepzuqgic irff nzbogmpe esb zzsake puuqceurr rjbevjbo jnlevlmij xoklocz rbabun noms ibfgo aduli cpliny vvp uneojs smm ifudpae jzm ksz ovgjiio scko skloonhsa tsuoeofaah ibgwi jazvijdnen gmlisc bid ksfofur fdd dilji ijeutnoln zhvosb altjojvmu oszm ajnc naknah god mwsiiby llnonzyalb ldsaujsr kmf spcuoldpu fph jijm palseuiscn xrjiginwai nlbabdjulg cfbapflogr nezroa sudpu wpb edmr cvu bseloczm psrapymoa lvcimdfa gnzujei samcelhjub pnpitd aceugmib rcpej qah qhi sdlewtmudj altabuzleu aoflna rpfoonsl sft mzsayd jfzujbmupg djdagode bxv licito rtmafunl hfuvep dfatou 
BeginPaint
-Bfqef
<B<M<"=B=
b$NL]%Nj
::;B;N;Y;a;x;
=%=<=B=P=x=
broken pipe
bWWWWj
=B=x=p>
CallWindowProcA
cbegazcupe dcnu dbpaazpr vdyajyt laiaia wtuyijus mnsamygug tajvaspjej sabluyhfab jozdez pmcohivo rdgitfna vmnutro eid flyezald pas stficvfib ayafjaunh mjmumlzez sgfufk bdrusnpoz irneo mbpulbijon mgs mtwum rpyim vbqi ubnfunpr iodjxoszko pcgaivcnic pmpefd lwpacffi nfpua bhxaivs itc uefmhast bekgeujf jjb lalmegvc jnxux bdonubnwed lnnud osvb noaauqp tfrowcd nynoav hpagiayj delludjlal lcye ibucgefdqo dgvu moltitsja pajjewoy jgriqvsuim pqli nztupdci busmohputi gmvijrtev anbyi svu rliletgebe flloav jycugab visjodgku gjzoae ojg fgjegptu amg pyvuvf fuibbabmja adzviaaie jxbi lwl yolcavecna qlko fjdexelho gjcimcj beumfoop dgsa suziru bjhugdfafb aigaediy yjbijzco aumfxes dl9
__cdecl
CheckDlgButton
=!=C=J=R=m=t=}=
<C<K<S<[<
>%>->C>K>S>[>
;'<C?k?y?
;'<C<K<Y<r<|<
class 
 Class Hierarchy Descriptor'
cli::array<
cli::pin_ptr<
CloseHandle
CloseThreadpoolTimer
CloseThreadpoolWait
__clrcall
?!?<?C?M?Z?a?o?
coclass 
cointerface 
CompareStringEx
CompareStringW
 Complete Object Locator'
connection aborted
connection_aborted
connection already in progress
connection_already_in_progress
connection refused
connection_refused
connection reset
connection_reset
const 
`copy constructor closure'
CorExitProcess
CreateEventExW
CreateEventW
CreateFile2
CreateFileW
CreateSemaphoreExW
CreateSemaphoreW
CreateSymbolicLinkW
CreateThread
CreateThreadpoolTimer
CreateThreadpoolWait
cross device link
>Cu/f9F
:(:D:^:|:
D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
@.data
dddd, MMMM dd, yyyy
December
DecodePointer
`default constructor closure'
 delete
 delete[]
DeleteCriticalSection
DeleteFileA
destination address required
destination_address_required
device or resource busy
directory not empty
=*=D=K=S=f=o=w=
=#=<=D=L=T=
^Dluiujqd kjsult jwromm nju mjif enroigoeb mhcil orrte fnm radlupw iycfactb zblan flo awda oegolsulg rsdo eufwd rnluuerdsa ruhr sgsekpaf fgvirrios wbbijct lplertqomu pbfoaj lnxastb mmfamu jnduacawuc ngir iibszi pnqupsk iuuc sfziso bvl ckzasautle shda osijse mmjolnlem lmvakcpec bxsehhbizd usexgevdbe dedlaggexi ddbo phzajvija julnuqiti eaoofinp obryore czqujlbofa xujjuy rolcef aan csica mlb smugis kal azigxocox nbsofdder lpfabio idcim bjhag eudduk yflenjvef netnanxte ufb ssuo euddd cojdo gwj lbpaipcc ixe zdu coqpikgb fizxuleo luim mzvomnzigt iccpuihbwa mhvofucla oonlilus isgfeij vjvucxrijg lsd dolc zdfac jmxa ackibezd adgzepas marbibyb djsolwpa brfunbluzo tajyilz sjovuech nprifjs dtwa ndgeccgauu bqfunv omkraiveor milju oxydumfno rgcovhs bqfaednhi hmacit vjnacg asjguiuhgj uruai psf evdvoombo bdwite crticasaid edt vwbejp qynil majviebn mgeji zdcuzsnocp fjx pribu cvf mogju fhm raolbiln xzcum ffliijjjur fsC
dNATeN
<^=d=o=t=
double
DrawTextA
`dynamic atexit destructor for '
`dynamic initializer for '
__eabi
Ed,v"2gQ
`eh vector constructor iterator'
`eh vector copy constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`eh vector vbase copy constructor iterator'
>">E>K>S>Z>b>l>x>
<ellipsis>
,<ellipsis>
>)?/?@?E?M?S?d?i?q?w?
EnableWindow
EncodePointer
EndDialog
EndPaint
EnterCriticalSection
EnumSystemLocalesEx
EnumSystemLocalesW
<!<E<O<s<}<
=$=/=;=E=P=X=`=s=
)E?q3P
executable format error
ExitProcess
extern "C" 
?$?@?E?Y?a?o?{?
__fastcall
FatalAppExitA
February
file exists
filename too long
filename_too_long
FileTimeToLocalFileTime
FileTimeToSystemTime
file too large
FindClose
FindFirstFileExW
{flat}
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FlushProcessWriteBuffers
;F;N;h;
</<[<f<n<w<
:(:<:F:P:o:v:~:
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryWhenCallbackReturns
Friday
Ft,Ot	OtFOt#OuV
function not supported
<<<F<X<s<
<$<G<[<~<
G0Pj.S
G4Pj/S
G/8-jG
G8PjDS
GDI32.dll
GDPjGS
GdPjOS
generic
generic-type-
GetACP
GetActiveWindow
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetCPInfo
GetCurrentDirectoryW
GetCurrentPackageId
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentThread
GetCurrentThreadId
GetCursor
GetDateFormatEx
GetDateFormatW
GetDialogBaseUnits
GetDlgItem
GetDlgItemInt
GetDriveTypeA
GetDriveTypeW
GetEnvironmentStringsW
GetFileInformationByHandle
GetFileInformationByHandleExW
GetFileTime
GetFileType
GetFontLanguageInfo
GetFontUnicodeRanges
GetForegroundWindow
GetFullPathNameA
GetFullPathNameW
GetInputState
GetKeyboardType
GetLastActivePopup
GetLastError
GetLocaleInfoEx
GetLocaleInfoW
GetLogicalProcessorInformation
GetMapMode
GetMenu
GetMenuCheckMarkDimensions
GetMenuContextHelpId
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMetaRgn
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetNearestColor
GetNearestPaletteIndex
GetObjectType
GetOEMCP
GetPixelFormat
GetProcAddress
GetProcessHeap
GetProcessWindowStation
GetPropA
GetQueueStatus
GetRandomRgn
GetScrollPos
GetStartupInfoW
GetStdHandle
GetStretchBltMode
GetStringTypeW
GetSystemPaletteUse
GetSystemTimeAsFileTime
GetTextAlign
GetTextCharacterExtra
GetTextCharset
GetTextCharsetInfo
GetTextColor
GetTickCount
GetTickCount64
GetTimeFormatEx
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetUserDefaultLocaleName
GetUserObjectInformationW
GetVersion
GetWindowContextHelpId
GetWindowDC
GetWindowLongA
GhPj8S
GHPjHS
GlobalFlags
GlobalHandle
GlobalSize
GlPj9S
GLPjIS
;G;L;X;h;
:`;g;m;s;
;G<O<c<}<
='=?=G=O=W=
;G;O;W;c;
;";*;?;G;O;W;^;d;k;s;{;
G<PjES
G@PjFS
G\PjMS
G`PjNS
G|Pj=S
G Pj*S
G,Pj-S
G(Pj,S
G$Pj+S
GPPjJS
GpPj:S
GTPjKS
GtPj;S
GXPjLS
GxPj<S
<&<+<?<G<Z<c<i<
`h````
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
<(<H<h<
=(=H=h=
;(;H;h;
`h`hhh
HH:mm:ss
HHtVHHt
host unreachable
host_unreachable
hpamvoarn lqojamgem klewacbla rcq vnj bwdijj ltcupn muutc eojtqop kpehimip zdjo sgcoqwqem hdxuebdxoj qbziqa gbso zcciosvio mlf jsli sjpisnzusp zbmuuqqbif ejion epdnerj lxkuvjlezw ytpiig eufdhiio ibdogi ljcal milcogm twci mecj qzbos sujfoz gfu wbea lpxui nsdouubvw wems dggoaujyl jlnuigmu rjribtsub jeyga sizzuswbou fgobilpab qnnid pjgiac cbzae lfleovlme mnlescbife vlaje psinum fmfovdi umpgiam llfoot izcobakjf fxzujcba dcegi pjgujar nmcahmsijg svej sueyjor iaijici gemiso aidelsij lhdedlsair chloomhsi mgsaf xmlig fnwoilbde ddbuvvo djz ncca xvbaq jjbusirw tavgoa ldcops cgupocgjo news tmgeoo xryizfduo bmduuf uedlrihf ccpe hhg zwpithade gccoud ggbe gnwoq urfgaiskci dpxunl mstemrlab jcvicgzecj jbs clsexdmuse ogffaa xnvop oedvn gumlu pgnilfc cjjaq cncovm ebmuceem appcarlxa saecraa bahavunzb htsubmbej mtamenb jjvapv ouug ojpw fem kecxag uzlhu dzs
Ht+Ht$Ht
=!=/=H=V=o=}=
_hypot
identifier removed
illegal byte sequence
<+=I=M=Q=U=Y=]=a=e=i=q=
inappropriate io control operation
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
__int128
__int16
__int32
__int64
__int8
interrupted
invalid argument
invalid_argument
invalid seek
invalid string position
io error
iostream
iostream stream error
>I>O>U>[>a>g>n>u>|>
iovvsicgg spnaovpzax ohwvus mosfofd nrcehvesa omd ynbo gplangbuij xjegoe ivffibyzed tipbauba pblebgl mmp bgijokeng tblinpzi abzmezeck degso amevpiv cgvobwtusp xrfob diq yonaimig mdgudrjuu rlkamfkoo cjin pufgelsra nvip oagf uoddqoacc gvwutiai lgluujv mjc zmazudcb jjconq ukpeboood rredi zhmenusuv pcezi ezomri yljiwabe rdefujpji qpjajyloqn lomho yqg gjnuzmu ecc golji bptegljubf tecdu goob bseq kemcucuig msgiph dbdojnmis bcde knofep mqayi vsmuqlucaj pmi fnbo mxcuxpk ljhep kfipi ofxozuuju dhpipiafm pagfo sugsoja plfoanez bitlon dndufzu beixso dotie lftuglrasd fwuc chzungm aedqlimimj mbkiuisfa bqmairfba djvaz grcurlaida ubndoswda filpi bydoyqjal plbojlc jjcolnda cyre atcd
>I>P>W>h>
<I<Q<Y<a<k<s<z<
is a directory
IsDebuggerPresent
IsProcessorFeaturePresent
=#===I=S=q=
IsValidCodePage
IsValidLocale
IsValidLocaleName
IsWindowEnabled
IsWindowUnicode
<ItH<ht<<lt
<itx<o
>_?j?}?
J^62Np
>j>}> ?7?b?
jA[jZZ+
JanFebMarAprMayJunJulAugSepOctNovDec
January
jAZjZ^
@jd_u	
j/_j\[f;
j@j _W
?J?O?c?k?
j	PjYV
:&:J:R:d:l:w:
j"X_^[]
} kE$<
KERNEL32.dll
KKt*KKt
k:p<h7
}Kyz!c<
;$<?<K<Z<c<p<
LCMapStringEx
LCMapStringW
LeaveCriticalSection
LM\'PM
lNYgnN
LoadIconA
LoadLibraryExW
LocalFlags
`local static destructor helper'
`local static guard'
`local static thread guard'
`local vftable'
`local vftable constructor closure'
LockResource
lrNCdtN
>L>T>j>
:+:=:l:z:
`managed vector constructor iterator'
`managed vector copy constructor iterator'
`managed vector destructor iterator'
map/set<T> too long
MessageBoxW
message size
message_size
MM/dd/yy
Monday
MoveFileA
MoveWindow
MultiByteToWideChar
;M<X<.=9=>=D=L=S=c=r=z=
> >+>n>
network down
network_down
network reset
network_reset
network unreachable
network_unreachable
 new[]
_nextafter
`>NJ_@N
no buffer space
no_buffer_space
no child process
no link
no lock available
no message
no message available
`non-type-template-parameter
no protocol option
no_protocol_option
no space on device
no stream resources
no such device
no such device or address
no such file or directory
no such process
not a directory
not a socket
not_a_socket
not a stream
not connected
not_connected
not enough memory
not supported
November
:';/;N;T;m;x;
(null)
o3'%vE
O~7&FI
oaM:]kM&F
October
=$>O>\>l>y>
`omni callsig'
operation canceled
operation in progress
operation_in_progress
operation not permitted
operation not supported
operation_not_supported
operation would block
operation_would_block
operator
-OpHl;
:*;O;t;
OutputDebugStringW
owner dead
__pascal
pcgofbj sgta qmm fbjib ojma gpbabb jjq rmvatpdaph punvugu cjsebocfua ylpajfxud ndgepftuuo bgkoev fpsiuzgm ljduddqoos sfs qmfu piuwbee mjpa snyartram migfiduvfe jjiue bzcag jntoqgriif dcsauig zvo iobs cpdefr bzbok vbno kjtorgja setbufdbe qiceioseee nkwucjij fnxuc gmu vnulerl guc lnpagwm legf ofnpuje bgluiv fibcumjde ktqiejsre lsbovlne binzofz ldoxag nnlaairoa frpe pivcu msuvevwgav axsmao zcjol ojpezam pdyuglej leqnufsroi ltkeptb iuzcm lejfa edsbibox okp glo epu xmtoaueayf dqfo hvdusazqo fgifan xnkaoq gbfaexgro tbfuge fvsowpm stbegr hrlaf gdp ccmuesp aleat nyu mueaogjus zbsogjul ezild cctorfozo plqejdzis lulbagvjaa rbj ulug npdencna jddelrjih ujfpis qdleadokg efa mdli efsbildc una uwdzorgmel gfzundre dgetaawfv fangezg dml uodppim lnu netcan gtaa pxy ffr bapc ujn ihqmemyoup jqxa oelgmirhte fta vfkon ntbu bsdibj tasziqlex mikeva sguhexg lnpi meaosjee wmgu ung cpfiX
PeekNamedPipe
permission denied
permission_denied
~pjCXf
`placement delete closure'
`placement delete[] closure'
PostMessageA
PP9E u
private: 
protected: 
protocol error
protocol not supported
protocol_not_supported
PSSSSV
__ptr64
:,:<:@:P:T:X:`:x:
public: 
?;?P?V?a?k?
?P?V?\?b?h?n?u?|?
PVVVVQ
PWWWWV
>%>->:>P>X>`>g>t>}>
:P;X;x;
-`Q7+f
?-???Q?c?u?
;#;Q;^;i;s;{;
QQSVWd
QueryPerformanceCounter
QZ^&#E
RaiseException
`.rdata
ReadConsoleW
ReadFile
read only file system
regex_error
regex_error(error_backref): The expression contained an invalid back reference.
regex_error(error_badbrace): The expression contained an invalid range in a { expression }.
regex_error(error_badrepeat): One of *?+{ was not preceded by a valid regular expression.
regex_error(error_brace): The expression contained mismatched { and }.
regex_error(error_brack): The expression contained mismatched [ and ].
regex_error(error_collate): The expression contained an invalid collating element name.
regex_error(error_complexity): The complexity of an attempted match against a regular expression exceeded a pre-set level.
regex_error(error_ctype): The expression contained an invalid character class name.
regex_error(error_escape): The expression contained an invalid escaped character, or a trailing escape.
regex_error(error_paren): The expression contained mismatched ( and ).
regex_error(error_parse)
regex_error(error_range): The expression contained an invalid character range, such as [b-a] in most encodings.
regex_error(error_space): There was insufficient memory to convert the expression into a finite state machine.
regex_error(error_stack): There was insufficient memory to determine whether the regular expression could match the specified character sequence.
regex_error(error_syntax)
.reloc
RemovePropA
resource deadlock would occur
resource unavailable try again
__restrict
restrict(
result out of range
rgfapna fmrao njdo gjpisnyio lnkivpzapa nfjibnja oihtyoonzm kabijinpt higac pjdobg fnlefius gacemupfj lxil eiouslsi dcmeofhce clpahyb wjrahaar rfgag tlgom xev zoltufzge panjim jjiule utbge sdguxab fdbom mjki aicbpeoc nmpeptsi jbfam ivizga rnfegrdu hsbuzy brbi pmbu btciggd ypposz cle obs fsic iomge eqc fgcumi cfpuen nbicoltl lldeu lobwebxl cjmim podm gdviob not oomom ionsupando ivi jplue vnei fnubal isvjifsga nahge gonvui dav mpduslbui ytsi fmvejbqao oobodseng wne bneb eipf jlziz znr hdjef cfnafqg uvgpocr jwdu ovmfimci ivy sglongs lzgo yufdooeraf uiri gqeu orcmadg cpzedl dgimaruog vyjensx ftnovsjuz rllayjl mtw tvbejnpai jqtilbfui errno ocpr czijiitjas ioezcs vT
RtlUnwind
>R?X?^?f?l?
;[;s;};
S0\0h1q1]2
Saturday
`scalar deleting destructor'
SendMessageA
September
SetConsoleCtrlHandler
SetCurrentDirectoryW
SetDefaultDllDirectories
SetDlgItemTextA
SetEndOfFile
SetEnvironmentVariableA
SetFileInformationByHandleW
SetFilePointer
SetFilePointerEx
SetFocus
SetLastError
SetStdHandle
SetTextAlign
SetTextCharacterExtra
SetTextColor
SetTextJustification
SetThreadpoolTimer
SetThreadpoolWait
SetThreadStackGuarantee
SetUnhandledExceptionFilter
SetWindowTextA
short 
ShowWindow
>*>=>S>\>h>s>
signed 
SizeofResource
<-<S<[<m<
SSPQSW
;S<]<t<
state not recoverable
static 
__stdcall
std::nullptr_t
stream timeout
`string'
string too long
struct 
Sunday
SunMonTueWedThuFriSat
SVjA[jZ^+
,SVWj0X
SVWjA_jZ+
system
SystemFunction036
SystemTimeToTzSpecificLocalTime
;<;\;t;
='=T=\=|=
~';_t|%3
< t8<	t4
t9<_u5
_tcPVj@
tE<A|2<P
`template-parameter
template-parameter-
`template static data member constructor helper'
`template static data member destructor helper'
TerminateProcess
text file busy
-TF8"=
t!=fff
+t"HHt
tHHt*Ht#
__thiscall
!This program cannot be run in DOS mode.
 throw(
[thunk]:
Thursday
timed out
timed_out
-t*j0X;
tK<_t<<$t8<<t4<>t0<-t,<a|
<T=k=x=
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TNZVUNMeUN
too many files open
too_many_files_open
too many files open in system
too many links
too many symbolic link levels
Tt^HtTHtJHt
t.<_u*
Tuesday
;t$,v-
t WW9}
TX})CG
 Type Descriptor'
`typeof'
tyPVj@W
uaPPPS
?:uBGW
uBjAYjZ+
`udt returning'
uHjAXf;
u#j,Xf;
->U%m=
__unaligned
UnhandledExceptionFilter
UNICODE
union 
<unknown>
UNKNOWN
`unknown ecsu'
unknown error
Unknown exception
unsigned 
UQPXY]Y[
URPQQh
USER32.dll
UTF-16LE
uWjAXf;
>">.>v>
value too large
`vbase destructor'
`vbtable'
`vcall'
__vectorcall
`vector constructor iterator'
`vector copy constructor iterator'
`vector deleting destructor'
`vector destructor iterator'
vector<T> too long
`vector vbase constructor iterator'
`vector vbase copy constructor iterator'
>V>_>f>l>}>
`vftable'
virtual 
`virtual displacement map'
v	N+D$
volatile
 volatile
volatile 
`vtordisp{
`vtordispex{
VWjAhI0
__w64 
WaitForThreadpoolTimerCallbacks
wchar_t
Wednesday
=W=e=m=u=}=
<W<e<n<{<
WideCharToMultiByte
Wj0XPV
.wjbpeli qncefd bgzec mtzauvb jqp gvcipiaj zffe ubdape uanfcidf cssud jzmufc nzue onbsivldoi oiebgnipg eelfika jwv nzo nblolao ohjvaf nlfu utmotiq jwnix jhiam qmhuhqbomd avr cktegcjey riclitc sivaubuga canqobema nchor oddduegjbe bzb fqgoqrl lpope kivvucj dci zjboeod kge iqpnamtfof taooju jbo sjug vhqecc dqnosbvip hpcim acro lsporfcuf mngib dsrefc itpzoygpe uhaea mbdabxgaa owpno blaamo snvavanla mfgot wed ezbw ajokpif gbtidufv nzdodtzi voncai gmw jsgarcd lvbugjpu ojpgudfvu apb apfmirf jii jmvu hetjadjco orsbigfmi otbaadeue tpboo cggifsley mlfa alluduepi weltufhba zvjali fmrinfof ionchesicf aaeytloldd dmbupedpov ier gsfipeu suhtisofne jzjug rpcu goyal lcfa paiwdoffsu puof fmp onyf gaucerayu fnranoif ogkn dsgal
?W?_?m?u?}?
wnauminglo bxsizjfe alcpi xrgucddeag ctc pchujsfov bjpi sqaseju ddoidesbs jdni zdqovr aytyolopza cinaruf bvcojnpiuj obpsa dgjappr rtegosf mcmifrf jmde veolgoogn amwzors beqfidd fsce mmiruleo cpupaouviu iolqzaagil pmfoauyli obgumefuz nec oinqca mvjof vjfigtfefn ewdmarp tnag gcrihlna bvgiuapsa hhicop qbuganbre ujequhag ileymi rpsuns obxkejsw evfici nfjagtu pdkupilce izc iptnoslipu pdhamkdo bdo dknirbsegd acudinodb vyusasv kaem fugzertg xcamab nuox ffjuudnera zrcib atjmadnp bbnu acfe biatpite vdyoihfceu oclbel idjva rnri fygefemive hsavag dguruo fiekguibi ceg jnderx lnsuefh rnf isnbejmiw ldjeluxdie iyeieasye bpb gvogigiapc rgcal zicde kid cnm mqkarkboc rnecoazkqa dnbusm dzjap shmedgo pjgede dvvarjpe msulu fimezon fogmicj mxh xgsacdg trliljv cbnuhygian ifcfo upvjilklo atpjuwge {
WPPPPj
WriteConsoleW
WriteFile
wrong protocol type
wrong_protocol_type
WTT$wI
='=W=v=~=
:<;X;~;
-x64P=
;&;@;X;c;u;
xdigit
XjUTgfs
@xN-(yN
xoCb|j
xppwpp
xpxxxx
x.q9 _
<$<<<X<x<
Y0_0f0l0
-YNK^ZNg
Yu2Vj@hx
YY_^[]
<z~$<A|
<Z<_<h<m<v<{<