Analysis Date2015-05-28 17:11:56
MD58d1e8670851ce3b4a7834ca8e246896b
SHA14aa7b9f7605a6599726d7e594b5139d6053001f1

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: 1d5ea202fccacefba6dc061587866e29 sha1: 5aeda7d65b5afdc95a63ede4e0fbb22b136b1559 size: 197120
Section.rdata md5: b1525b3212243ec9279d04d6377a8aa5 sha1: 1956c9a2a04ac1da4ff9301f8af959694c040a3d size: 51200
Section.data md5: 6a62fd320f1ccef50ba231207291fecf sha1: 9d066b11611d2663f7b6fe86d0d9ef7f0b34bee5 size: 6656
Section.reloc md5: d209708d8d9e92eadc1148971842201e sha1: 540b42be65bdc984110d6e42ded85bfd95bf5205 size: 14336
Timestamp2015-04-29 19:18:48
PackerMicrosoft Visual C++ 8
PEhash1cc8ab93985823d42ac93e35ee5335e862dfe418
IMPhash13a3903527c8917b4b5ff6caf2086376

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates FileC:\lppvifap\xv3wjrexg
Creates FileC:\lppvifap\rgm1libxlx5byzdsa.exe
Creates FileC:\WINDOWS\lppvifap\xv3wjrexg
Deletes FileC:\WINDOWS\lppvifap\xv3wjrexg
Creates ProcessC:\lppvifap\rgm1libxlx5byzdsa.exe

Process
↳ C:\lppvifap\rgm1libxlx5byzdsa.exe

RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Detection Certificate UserMode Background ➝
C:\lppvifap\maobcjio.exe
Creates FileC:\lppvifap\tlpmdnkuhnnq
Creates FileC:\lppvifap\xv3wjrexg
Creates FilePIPE\lsarpc
Creates FileC:\lppvifap\maobcjio.exe
Creates FileC:\WINDOWS\lppvifap\xv3wjrexg
Deletes FileC:\WINDOWS\lppvifap\xv3wjrexg
Creates ProcessC:\lppvifap\maobcjio.exe
Creates ServiceWired Controls Encryption - C:\lppvifap\maobcjio.exe

Process
↳ C:\WINDOWS\system32\svchost.exe

Process
↳ Pid 804

Process
↳ Pid 848

Process
↳ C:\WINDOWS\System32\svchost.exe

Creates FileC:\WINDOWS\system32\WBEM\Logs\wbemess.log

Process
↳ Pid 1204

Process
↳ C:\WINDOWS\system32\spoolsv.exe

Process
↳ Pid 1876

Process
↳ Pid 1152

Process
↳ C:\lppvifap\maobcjio.exe

Creates Filepipe\net\NtControlPipe10
Creates FileC:\lppvifap\tlpmdnkuhnnq
Creates FileC:\lppvifap\xv3wjrexg
Creates FileC:\lppvifap\udoxliu2ftl
Creates File\Device\Afd\Endpoint
Creates FileC:\lppvifap\rbodrdkld.exe
Creates FileC:\WINDOWS\lppvifap\xv3wjrexg
Deletes FileC:\WINDOWS\lppvifap\xv3wjrexg
Creates Processfpvrvndvan9q "c:\lppvifap\maobcjio.exe"

Process
↳ C:\lppvifap\maobcjio.exe

Creates FileC:\lppvifap\xv3wjrexg
Creates FileC:\WINDOWS\lppvifap\xv3wjrexg
Deletes FileC:\WINDOWS\lppvifap\xv3wjrexg

Process
↳ fpvrvndvan9q "c:\lppvifap\maobcjio.exe"

Creates FileC:\lppvifap\xv3wjrexg
Creates FileC:\WINDOWS\lppvifap\xv3wjrexg
Deletes FileC:\WINDOWS\lppvifap\xv3wjrexg

Network Details:

DNSleaderperfect.net
Type: A
74.208.214.100
DNSheavyheart.net
Type: A
64.15.205.101
DNSheavyheart.net
Type: A
64.15.205.100
DNSheavyheart.net
Type: A
208.48.81.134
DNSheavyheart.net
Type: A
208.48.81.133
DNSgentleheart.net
Type: A
203.189.109.142
DNSbelongbehind.net
Type: A
95.211.230.75
DNSglassmayor.net
Type: A
DNSanswerbattle.net
Type: A
DNSglassbattle.net
Type: A
DNSdifficultheart.net
Type: A
DNSheardheart.net
Type: A
DNSdifficultperfect.net
Type: A
DNSheardperfect.net
Type: A
DNSdifficultmayor.net
Type: A
DNSheardmayor.net
Type: A
DNSdifficultbattle.net
Type: A
DNSheardbattle.net
Type: A
DNSpleasantheart.net
Type: A
DNSnecessaryheart.net
Type: A
DNSpleasantperfect.net
Type: A
DNSnecessaryperfect.net
Type: A
DNSpleasantmayor.net
Type: A
DNSnecessarymayor.net
Type: A
DNSpleasantbattle.net
Type: A
DNSnecessarybattle.net
Type: A
DNSorderheart.net
Type: A
DNSrequireheart.net
Type: A
DNSorderperfect.net
Type: A
DNSrequireperfect.net
Type: A
DNSordermayor.net
Type: A
DNSrequiremayor.net
Type: A
DNSorderbattle.net
Type: A
DNSrequirebattle.net
Type: A
DNSleaderheart.net
Type: A
DNSheavenheart.net
Type: A
DNSheavenperfect.net
Type: A
DNSleadermayor.net
Type: A
DNSheavenmayor.net
Type: A
DNSleaderbattle.net
Type: A
DNSheavenbattle.net
Type: A
DNSheavyperfect.net
Type: A
DNSgentleperfect.net
Type: A
DNSheavymayor.net
Type: A
DNSgentlemayor.net
Type: A
DNSheavybattle.net
Type: A
DNSgentlebattle.net
Type: A
DNSvariousheart.net
Type: A
DNSreturnheart.net
Type: A
DNSvariousperfect.net
Type: A
DNSreturnperfect.net
Type: A
DNSvariousmayor.net
Type: A
DNSreturnmayor.net
Type: A
DNSvariousbattle.net
Type: A
DNSreturnbattle.net
Type: A
DNSjourneyunderstand.net
Type: A
DNShusbandunderstand.net
Type: A
DNSjourneybroad.net
Type: A
DNShusbandbroad.net
Type: A
DNSjourneybehind.net
Type: A
DNShusbandbehind.net
Type: A
DNSjourneybutter.net
Type: A
DNShusbandbutter.net
Type: A
DNSdestroyunderstand.net
Type: A
DNSlittleunderstand.net
Type: A
DNSdestroybroad.net
Type: A
DNSlittlebroad.net
Type: A
DNSdestroybehind.net
Type: A
DNSlittlebehind.net
Type: A
DNSdestroybutter.net
Type: A
DNSlittlebutter.net
Type: A
DNSriddenunderstand.net
Type: A
DNSbelongunderstand.net
Type: A
DNSriddenbroad.net
Type: A
DNSbelongbroad.net
Type: A
DNSriddenbehind.net
Type: A
DNSriddenbutter.net
Type: A
DNSbelongbutter.net
Type: A
DNSchairunderstand.net
Type: A
DNSthoseunderstand.net
Type: A
DNSchairbroad.net
Type: A
DNSthosebroad.net
Type: A
DNSchairbehind.net
Type: A
DNSthosebehind.net
Type: A
DNSchairbutter.net
Type: A
DNSthosebutter.net
Type: A
DNSwithinunderstand.net
Type: A
DNSsufferunderstand.net
Type: A
HTTP GEThttp://leaderperfect.net/index.php
User-Agent:
HTTP GEThttp://heavyheart.net/index.php
User-Agent:
HTTP GEThttp://gentleheart.net/index.php
User-Agent:
HTTP GEThttp://belongbehind.net/index.php
User-Agent:
Flows TCP192.168.1.1:1031 ➝ 74.208.214.100:80
Flows TCP192.168.1.1:1032 ➝ 64.15.205.101:80
Flows TCP192.168.1.1:1033 ➝ 203.189.109.142:80
Flows TCP192.168.1.1:1034 ➝ 95.211.230.75:80

Raw Pcap
0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a206c   : close..Host: l
0x00000040 (00064)   65616465 72706572 66656374 2e6e6574   eaderperfect.net
0x00000050 (00080)   0d0a0d0a                              ....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2068   : close..Host: h
0x00000040 (00064)   65617679 68656172 742e6e65 740d0a0d   eavyheart.net...
0x00000050 (00080)   0a0a0d0a                              ....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2067   : close..Host: g
0x00000040 (00064)   656e746c 65686561 72742e6e 65740d0a   entleheart.net..
0x00000050 (00080)   0d0a0d0a                              ....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2062   : close..Host: b
0x00000040 (00064)   656c6f6e 67626568 696e642e 6e65740d   elongbehind.net.
0x00000050 (00080)   0a0d0a0a                              ....


Strings
g
v
jnr
ee
e
"
 
\
.
 
\
  
.
e
. 
00-+ .
-
-1
+-0-E-
-0
\
.
0
0
- 
000
-.O
.+
_
u
                                 
2.exe
- abort() has been called
af-za
af-ZA
April
ar-ae
ar-AE
ar-bh
ar-BH
ar-dz
ar-DZ
ar-eg
ar-EG
ar-iq
ar-IQ
ar-jo
ar-JO
ar-kw
ar-KW
ar-lb
ar-LB
ar-ly
ar-LY
ar-ma
ar-MA
ar-om
ar-OM
ar-qa
ar-QA
ar-sa
ar-SA
ar-sy
ar-SY
ar-tn
ar-TN
ar-ye
ar-YE
- Attempt to initialize the CRT more than once.
- Attempt to use MSIL code from this assembly during native code initialization
August
az-az-cyrl
az-AZ-Cyrl
az-az-latn
az-AZ-Latn
.bat
be-by
be-BY
bg-bg
bg-BG
bn-in
bn-IN
bs-ba-latn
bs-BA-Latn
ca-es
ca-ES
Cja-JP
Cjjj
.cmd
.com
CONOUT$
CR6002
- CRT not initialized
cs-cz
cs-CZ
cy-gb
cy-GB
da-dk
da-DK
dddd, MMMM dd, yyyy
de-at
de-AT
December
de-ch
de-CH
de-de
de-DE
de-li
de-LI
de-lu
de-LU
div-mv
div-MV
Djjj
Djjjj
DOMAIN error
el-gr
el-GR
emscoree.dll
en-au
en-AU
en-bz
en-BZ
en-ca
en-CA
en-cb
en-CB
en-gb
en-GB
en-ie
en-IE
en-jm
en-JM
en-nz
en-NZ
en-ph
en-PH
en-tt
en-TT
en-us
en-US
en-za
en-ZA
en-zw
en-ZW
es-ar
es-AR
es-bo
es-BO
es-cl
es-CL
es-co
es-CO
es-cr
es-CR
es-do
es-DO
es-ec
es-EC
es-es
es-ES
es-gt
es-GT
es-hn
es-HN
es-mx
es-MX
es-ni
es-NI
es-pa
es-PA
es-pe
es-PE
es-pr
es-PR
es-py
es-PY
es-sv
es-SV
es-uy
es-UY
es-ve
es-VE
et-ee
et-EE
eu-es
eu-ES
fa-ir
fa-IR
February
fi-fi
fi-FI
- floating point support not loaded
fo-fo
fo-FO
fr-be
fr-BE
fr-ca
fr-CA
fr-ch
fr-CH
fr-fr
fr-FR
Friday
fr-lu
fr-LU
fr-mc
fr-MC
gl-es
gl-ES
gu-in
gu-IN
         (((((                  H
he-il
he-IL
HH:mm:ss
hi-in
hi-IN
hr-ba
hr-BA
hr-hr
hr-HR
hu-hu
hu-HU
hy-am
hy-AM
id-id
id-ID
- inconsistent onexit begin-end variables
is-is
is-IS
it-ch
it-CH
it-it
it-IT
ja-jp
January
jjjjj
July
June
ka-ge
ka-GE
kernel32.dll
kk-kz
kk-KZ
kn-in
kn-IN
kok-in
kok-IN
ko-kr
ko-KR
ky-kg
ky-KG
lt-lt
lt-LT
lv-lv
lv-LV
March
Microsoft Visual C++ Runtime Library
mi-nz
mi-NZ
mk-mk
mk-MK
ml-in
ml-IN
MM/dd/yy
mn-mn
mn-MN
Monday
mr-in
mr-IN
ms-bn
ms-BN
ms-my
ms-MY
mt-mt
mt-MT
nb-no
nb-NO
nl-be
nl-BE
nl-nl
nl-NL
nn-no
nn-NO
- not enough space for arguments
- not enough space for environment
- not enough space for locale information
- not enough space for lowio initialization
- not enough space for _onexit/atexit table
- not enough space for stdio initialization
- not enough space for thread data
November
ns-za
ns-ZA
(null)
October
pa-in
pa-IN
pl-pl
pl-PL
Program: 
<program name unknown>
pt-br
pt-BR
pt-pt
pt-PT
- pure virtual function call
quz-bo
quz-BO
quz-ec
quz-EC
quz-pe
quz-PE
R6008
R6009
R6010
R6016
R6017
R6018
R6019
R6024
R6025
R6026
R6027
R6028
R6030
R6031
R6032
R6033
R6034
ro-ro
ro-RO
runtime error 
Runtime Error!
ru-ru
ru-RU
sa-in
sa-IN
Saturday
se-fi
se-FI
se-no
se-NO
September
se-se
se-SE
SING error
sk-sk
sk-SK
sl-si
sl-SI
sma-no
sma-NO
sma-se
sma-SE
smj-no
smj-NO
smj-se
smj-SE
smn-fi
smn-FI
sms-fi
sms-FI
sq-al
sq-AL
sr-ba-cyrl
sr-BA-Cyrl
sr-ba-latn
sr-BA-Latn
sr-sp-cyrl
sr-SP-Cyrl
sr-sp-latn
sr-SP-Latn
Sunday
sv-fi
sv-FI
sv-se
sv-SE
sw-ke
sw-KE
syr-sy
syr-SY
ta-in
ta-IN
te-in
te-IN
This indicates a bug in your application.
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
th-th
th-TH
Thursday
TLOSS error
tn-za
tn-ZA
tr-tr
tr-TR
tt-ru
tt-RU
Tuesday
uk-ua
uk-UA
- unable to initialize heap
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
ur-pk
ur-PK
USER32.DLL
uz-uz-cyrl
uz-UZ-Cyrl
uz-uz-latn
uz-UZ-Latn
vi-vn
vi-VN
Wednesday
xh-za
xh-ZA
zh-chs
zh-CHS
zh-cht
zh-CHT
zh-cn
zh-CN
zh-hk
zh-HK
zh-mo
zh-MO
zh-sg
zh-SG
zh-tw
zh-TW
zu-za
zu-ZA
                          
;	<!<><
?$?:?]?
0 0$0(0,0004080<0@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0|0
0 0$0(000H0X0\0l0p0t0x0
0!0)0/0?0I0S0]0c0q0{0
0#000L0b0
0 0)0>0X0e0
0$0,040<0D0L0T0\0d0l0t0|0
00050Q0Y0n0
0'0/070A0I0Q0Y0
0!0+0A0K0c0s0
0	0;0C0K0P0X0p0
0;0_0g0z0
0'0?0I0S0a0v0
0	0.0l0x0
001G1q1y1
0+030;0C0z0
0)030@0j0
0*060D0P0X0`0
0$080W0_0g0
0'0E0a0i0n0
0[0h0q0
0>0J0^0f0u0
0(0P0W0k0r0
#0@0Q0r0w0
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
031D1M1U1t1z1
050K0\0p0x0
;0;6;R;Z;i;
=&=0=9=H=P=X=c=
<(=0=A=N=V=^=
(0B0[0t0z0
;%;0;E;S;u;
 0h0w0
>%>*>0>>>H>P>X>a>}>
0J1U1]1
1,101@1D1H1P1h1x1|1
1$1,10181@1H1P1X1`1h1p1x1
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
1*111<1H1w1
1'1/1@1H1P1X1f1o1x1
111>1S1c1p1
1%1/161l1s1
1"1*181D1V1`1j1r1
1+1>1F1N1W1]1i1q1
1'1;1N1
1)121M1s1
1$141S1t1|1
1&161Z1z1
1!1E1j1v1~1
1)1P1X1o1w1
1(1Q1q1
1)20272G2O2x2
121N1{1
1#2K2Y2
1#2O2W2^2l2|2
=#>(>1>6>?>D>Q>
=,=1=6=?=G=O=W=q=
1a1f1n1
=!=)=1=A=Q=\=d=t=|=
?1?C?P?c?
1N1V1^1k1
1NAT4N
1#QNAN
1#SNAN
<,<2<<<
212C2U2g2y2
212G2T2a2m2u2}2
2$2024282<2X2\2p2
2+212?2K2q2~2
2)21292A2R2k2x2
2(2,20242<2T2d2h2x2|2
2 2(20282@2H2P2X2`2h2p2x2
2 2&2<2F2R2\2b2h2x2
222:2M2Y2`2h2x2
2*222W2b2
2$2/272?2R2X2|2
2%2<2D2L2R2^2k2v2~2
2"2)2L2T2_2o2w2
2%272K2`2g2
2*282D2S2_2f2u2
2(2K2S2[2
23282>2J2T2k2s2
2!3)313
2&3+3F3K3m3
2<3F3L3U3]3c3k3s3{3
242<2n2
243<3D3H3P3d3l3
=2>8><>@>D>
2A3Q3a3a6
=$=2=A=I=Q=W=]=g=m=s=
>">*>2>:>B>T>\>d>j>t>
<*=2=:=G=V=^=f=
<!<2<:<G<y<
2i2t2}2
:2:=:J:n:
>*>2>@>^>m>|>
< <%<2<M<z<
2n2t2x2}2
>2?N?o?
= =+=2=:=S=
313?3E3
313?3H3s3
3%313=3E3W3e3q3y3
3(313y3~3
3&323;3@3F3P3Z3j3z3
3%323D3P3
3!323G3{3
3 3(30383@3H3P3X3`3h3p3x3
3 3%3+383G3`3z3
3"3+373
3%3/393Z3w3
3 3.3G3U3a3j3
3(3:3L3^3
3.363?3\3h3u3
3*393A3H3b3j3q3|3
3?3c3j3~3
3(3F3R3^3s3
3@3G3N3f3t3}3
3+3L3T3Z3b3i3
3,4]4{4
3.444@4w4
3#4=4E4P4g4
3&454J4
3	484B4X4d4k4
3)4C4i4
3 4Q4i4
3%4W4n4
;3;E;M;h;p;x;
:!:+:3:?:F:M:T:^:d:k:{:
<+=3=J=h=
>3>:>L>w>
<(<3<:<N<T<\<a<s<{<
3q3z3W4b4u4
:!:-:3:W:]:
404P4p4
42585<5@5D5
4"404I4W4n4y4~4
4 4(40484@4H4P4X4`4h4p4x4
4#4*424;4h4}4
4 4+434<4I4Q4Y4h4
4/4=4`4m4
4%4-454I4U4
4#4<4C4K4P4T4X4
4$4,4P4_4d4l4
4'4/4Q4z4
4#4C4O4T4e4m4r4}4
4&4D4j4{4
4&4d4p4
4;4E4n4v4
4&4g4z4
4:4J4Z4
4#4Q4^4c4v4
4:5B5q6w6
4A5Z5f5{5
4b4j4r4z4
4B5I5u5
4D5J5V5
<$<,<4<<<D<L<T<\<d<l<t<|<
=$=,=4=<=D=L=T=\=d=l=t=
=$=,=4=<=D=L=T=\=d=l=t=|=
>$>,>4><>D>L>T>\>d>l>t>|>
;$;,;4;<;D;L;T;\;d;l;t;|;
:$:,:4:<:D:L:T:\:d:l:t:|:
?$?,?4?<?D?L?T?\?d?l?t?|?
>$>,>4><>D>L>T>\>l>t>|>
:,:4:G:Q:Y:n:v:~:
=4=H=X=
4K5T5`6i6U7
4L5e5t5
=$=,=4=X=`=
=!=.=5=
517@7c7t7z7
54585X5t5x5
5+505=5U5]5n5
5'535?5K5\5b5r5w5
5*535j5r5z5
5!5(50555<5K5R5`5
5 5(50585@5H5P5X5`5h5p5x5
5#5(51575h5x5
5&5+535@5W5
5)555:5E5O5e5
5%555j5
5#5)585B5H5Z5l5
5 5:5D5Q5g5t5|5
5*5>5F5N5Y5g5s5
5!5*5H5P5]5j5
5 5<5t5
5'565F5[5u5
5&565F5Q5b5
5'6,62686B6H6N6Y6_6e6p6t6x6|6
5&6=6J6V6f6l6}6
5/676J6W6d6
5B6O6l6
;.;5;:;B;e;s;{;
5G5s5{5
5G5T5f5|5
;5=J=T=Z=`=f=
5L9P9T9X9\9`9d9h9l9p9t9x9
< =-=5===L=\=d=p=
:,:5:@:M:r:~:
656R6X6j6
6 6(60686@6H6P6X6`6h6p6x6
6#6(6.666;6A6I6N6T6\6a6g6o6t6z6
6 6-6:6C6Q6s6
6(666L6T6
6 6/6=6U6]6~6
6%6.6I6O6
6/676?6G6V6^6{6
6/6a6h6l6p6t6x6|6
6:6B6U6^6h6r6
6*6e6w6
6>6F6R6w6
6.767W7^7n7
6=7E7M7
6=7K7U7y7
6@7L7b7k7
686D6`6l6
687@7E7Q7
696D6`6m6
6A6Q6|6
>'>6>B>J>R>]>m>
<&<.<6<C<K<U<]<i<q<}<
:';6;;;C;V;a;
6D8J8p8v8
>">6>D>a>
> >.>6>E>[>
:.:6:H:X:g:|:
6N6[6j6
>)>.>6>O>W>c>
6R6]6e6t6|6
6T7t7:8O8|8
7(70787@7H7P7X7b7l7
7(727>7F7N7V7y7
7(747J7Y7^7m7y7
7%757;7B7O7V7\7
$7(7,707
7!7'707:7D7M7S7X7e7p7|7
7 7(70787@7H7P7X7`7h7p7x7
7$7-72787@7E7K7S7X7^7f7k7q7y7~7
7 7%737W7x7
7#7,787>7F7]7o7
7,7@7G7}7
7(787\7h7p7
7&797]7o7
7/7J7_7
7,838>:H:
787M7R7`7i7p7
7 8/888Q8Y8m8u8}8
7[8v8{8
-7]DTf
;7;@;^;l;
7L7V7]7y7
7qhAn84wW
?/?7?R?Z?b?j?v?
; ;7;?;S;[;c;k;
>&>->7>>>y>
80<0@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0|0
818I8O8X8^8h8s8
81999L9T9\9h9
828?8c8p8z8
848T8\8r8z8
86:`<d<h<l<p<t<x<|<o=
8,808@8d8p8x8
8*828<8F8X8j8q8~8
8(848C8R8z8
8#878T8c82:P:
8 8(80888@8H8
8 8&808B8M8X8^8d8j8p8z8
8#8*878[8k8|8
8$8)8/878<8B8J8O8T8]8b8h8p8v8
8.888F8N8Y8p8|8
8"8*8=8L8x8
8(8@8H8P8[8c8j8
889?9E9c9
8(8A8O8d8n8v8~8
8>8F8N8
8%8M8Z8d8l8~8
8`8n8x8
8#8X8_8s8|8
8%9a9m9
;.<8<a<
<'</<8<A<I<U<]<o<z<
;";8;G;j;
>8>=>G>P>[>c>v>
=8=@=H=P=a=g=m={=
8#;K;Y;
?*?8?Q?_?x?
8s_]	Uw
;!;8;T;c;p;{;
;-;8;Z;
90989@9
909P9p9
939<9F9m9
9+:3:E:r:
949<9K9f9n9
94x@R6<
959=9M9Y9a9g9o9
979D9J9f9q9{9
979D9s9}9
9'969C9O9^9m9
9&969W9^9
9,979b9j9r9y9
9!9)919B9J9R9Z9h9
9"9*929:9Y9n9y9
9 9@9`9
9*999B9T9\9h9p9w9
9(9/9>9F9o9
9)9/9=9g9n9
9%999Z9g9~9
99:E:a:
9:9J9Y9e9m9y9
9B9T9h9u9z9
9$:,:=:B:`:h:w:
<%<9<C<L<m<w<
9D9L9p9
:%:-:9:D:R:Z:_:
9=:F:P:d:
9;:G:O:Z;w;
: :-:9:@:H:S:o:
9!:*:Q:`:g:
9R9h9v9~9
9*:<:U:
9	:&:,:U:[:c:j:r:
aanzgotfju eqzro szziuu msp hteugivbr uilaudfe vvpapfba pjaca igr kgcicpjii vinlongde ceknivs cocdabro ifi zjamoqf bxponott vuts dudpe lbv soy blzi utg vjguk ipmguvm cpopig dcisudpcu jvnujd wireno nqaseqdni bipceg eompuzehpl ejguatutp pmvaklje jtvigmuas dgsuft nbqiaf cfyaioeedb fbcidmjea gpxuuhg jbtubc dceyirlbo icdc lzunex ofrzun ijgmalfgRz
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
address family not supported
address_family_not_supported
address in use
address_in_use
address not available
address_not_available
?(?:?A?F?h?p?
?/?a?h?l?p?t?x?|?
?/?:?a?i?
?a?k?x?
already connected
already_connected
aN]mfNx
AreFileApisANSI
argument list too long
argument out of domain
<at-<rt"<wt
August
.?AVbad_alloc@std@@
.?AVbad_exception@std@@
.?AVerror_category@std@@
.?AVexception@std@@
.?AV_Generic_error_category@std@@
.?AV_Iostream_error_category@std@@
.?AVlength_error@std@@
.?AVlogic_error@std@@
.?AVout_of_range@std@@
.?AV_System_error_category@std@@
.?AVtype_info@@
>#>)>A>W>v>
=A>Y>`>
bad address
bad_address
bad allocation
bad exception
bad file descriptor
bad_file_descriptor
bad message
 Base Class Array'
 Base Class Descriptor at (
__based(
BeginPaint
="=*>b>h>x>
|bI#	e
broken pipe
<%<B<W<t<
bWWWWj
(bzlu nfvapm lddapadlac tlbau pbceatsb dymo blxervew unmoianib jcmaxzpial uda cgbamqd yudmuuc nusqafum jtipilh aeukeedv ufawocari noel qlkajpf wzjei vjhelezm gspasziri jozbo zwdiou xnaqapl hlpihbbo biifga jsjifegga tpon tegoweczan gofvegcj rsivuj zdf znudebvro grbiexjtij csmogvol agje rntuaedfan cvdenps ibw lqviiciaxm ybfopiti ioltd icmzae spvimmnipm csaferipl qjcejlbibi yuclo dzuibup ytienagff cssubac dmooon zlzumv dlniis onsacoduf vljazkg rgsiinj unmeeo jidmazaz pbegucaadc axefujasc ffpexzxamv cwmahrn fyg zid tyqium lgconsose nvveifalja jjgiupn kfzuvlcaf gdpatajcu mdof gii bdigomgf aeae fkxagylil bglioobo wsrusm tugsucxzag mibniyqmuf gunku lybempjoiw giucuju bjp sdd omvv
CallWindowProcA
=&>C>b>
__cdecl
=-=<=C=d=m=u=
>C>I>d>l>
=#=<=C=K=P=T=X=
 Class Hierarchy Descriptor'
CloseHandle
CloseThreadpoolTimer
CloseThreadpoolWait
__clrcall
<"<C<M<
>(?C?N?\?
CompareStringEx
CompareStringW
 Complete Object Locator'
connection aborted
connection_aborted
connection already in progress
connection_already_in_progress
connection refused
connection_refused
connection reset
connection_reset
`copy constructor closure'
CorExitProcess
CreateEventExW
CreateFile2
CreateFileW
CreateSemaphoreExW
CreateSymbolicLinkW
CreateThread
CreateThreadpoolTimer
CreateThreadpoolWait
cross device link
:);C;S;z;
<-<:<C<V<b<j<
d0l0t0|0
d2h2l2p2t2x2|2
D7H7L7P7T7X7\7`7d7h7l7p7t7x7
@.data
dddd, MMMM dd, yyyy
December
DecodePointer
`default constructor closure'
 delete
 delete[]
DeleteCriticalSection
DeleteFileA
destination address required
destination_address_required
device or resource busy
d__^[f
directory not empty
?>?D?K?P?W?^?q?x?
<"<D<L<W<z<
DrawTextA
`dynamic atexit destructor for '
`dynamic initializer for '
__eabi
`eh vector constructor iterator'
`eh vector copy constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`eh vector vbase copy constructor iterator'
EnableWindow
EncodePointer
EndDialog
EndPaint
EnterCriticalSection
EnumSystemLocalesEx
executable format error
ExitProcess
>E>X>z>
__fastcall
-F%b f
February
;*;F;g;
=*=F=`=h=p=
file exists
filename too long
filename_too_long
FileTimeToLocalFileTime
FileTimeToSystemTime
file too large
FindClose
FindFirstFileExW
FindResourceA
?'?<?F?_?i?v?
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FlushProcessWriteBuffers
FN|/GN`
<F=O=Y=u=
:F:Q:Z:
FreeEnvironmentStringsW
FreeLibraryWhenCallbackReturns
Friday
FrR8_^f
>.>>>F>R>Z>b>j>r>z>
fsk zomn xajwobbb bwdid apzrujg bisf zfnizlg zaw fnf lins gob bbasimbfo qapvajp big psje gcajojdebi drwayldoab jahlov figfu ajbmu lsafacagj bzwommu gjutucbc npqofudbe cfbarsdu jspaificdo jovbopkean mlgaobj sgoa pvbacsdol mgsudqgelw pflaew ltmuuvfumu pljuuyd glmamn gfeb vdyojb cvdeij gsegiglig zcfo gqtiaw pvsiqozja bcpogog ggp hdefiigcev ihbcuc toab spfuofbrad gqlunzdi geajcabgf zvkeupav jgjac cxmelxfi fin uugf lhvozub ircwoj yofooc xzloni rdha acgagufeu flxiwvzucp llyicj dlcoo shfezlmeb ftpib lbz fdmieaon hjvoxopv cngadslo ebh jcji elfmef kbh fydebribu tngiez dfdeudzm ixkgajy dlwifz oar msbur wscaj domzijesfe tdil jdvidzih tereolaef pvoexe khqo nmarioA
function not supported
<+<><`<g<
!g0I[o
GDI32.dll
generic
GetACP
GetActiveWindow
GetBkColor
GetClipRgn
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetCPInfo
GetCurrentDirectoryW
GetCurrentObject
GetCurrentPackageId
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentThreadId
GetCursor
GetDateFormatEx
GetDCBrushColor
GetDialogBaseUnits
GetDlgItem
GetDlgItemInt
GetDriveTypeA
GetDriveTypeW
GetEnvironmentStringsW
GetFileInformationByHandle
GetFileInformationByHandleExW
GetFileType
GetFontLanguageInfo
GetFontUnicodeRanges
GetFullPathNameW
GetGraphicsMode
GetInputState
GetLastActivePopup
GetLastError
GetLocaleInfoEx
GetLogicalProcessorInformation
GetMenu
GetMenuCheckMarkDimensions
GetMenuItemCount
GetMenuItemID
GetMenuState
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetNearestColor
GetNearestPaletteIndex
GetOEMCP
GetPolyFillMode
GetProcAddress
GetProcessHeap
GetProcessWindowStation
GetPropA
GetQueueStatus
GetRandomRgn
GetScrollPos
GetStartupInfoW
GetStdHandle
GetStretchBltMode
GetStringTypeW
GetSystemPaletteUse
GetSystemTimeAsFileTime
GetTextAlign
GetTextColor
GetTickCount
GetTickCount64
GetTimeFormatEx
GetTimeZoneInformation
GetUserDefaultLocaleName
GetUserObjectInformationW
GetVersion
GetWindowContextHelpId
GetWindowDC
GetWindowLongA
:gfla abbz gfeosou zwmulsm pzwuneuajo daf dkge xmquoplb stpax cosrio gsje jdyi mpi tlejeoad zedwof zrolirbe lucc ococla ilphumzp ndgezb ffrocxr ucfeedubf glke djdeyrmuz bmhabsmo luaftamp zbhidjeb anvonu gskoirpmim zsmev nll xfpanplapb dhcoytsegn teigmexgb hcnactz djfez lfr bmed yuj tqpelgenub tbz clpa fumuneza wjgifpyeov nzofu ojilbafmr lvfaot puk evsdap jrjutyfup odd bod eeqlc iwc lsfoiidnp mglafffahw dmmefz psfiscus icgsegc jfcu ocnpanfka ipjsifos vjdipmdinn bcfi ecmaoguzl izcvog sdlej kqb pptoggbi exiap odecbuzfs nvju ttfuj uiablfil lalnazcgoj nzi mugsatj iapspapojb lomumem seamutup uynno qujm imuv bjb uadpeiobi utzugocy pmoeloup
GlobalAlloc
GlobalFlags
GlobalHandle
GlobalSize
?>?G?O?h?t?
;.;G;S;[;c;k;
`h````
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
:(:H:h:
`h`hhh
HH:mm:ss
HHtVHHt
?@?H?N?V?`?j?q?y?
host unreachable
host_unreachable
<.<=<H<P<X<^<
HRavrr oyrejafw iganj fzfecnj bgnajvlu mdj jgb oijojc mzxesjpefs pcica sbf dro negi hfofa jubripi obllegjd fdfo pzbiwfgoj qlabajjuek joj wsraumk iaobvi nbjoogb lfmubdneg fliebaigui tzmuplsu lulv jcmazz cuezohieb xbmihonyo zuluqo qblumedna leyler spmirc ugqcurdsoi eetao mlcefbdeb tycuaqlse wyteg ccnadm zwof wep ajjdudg fdfi eorhaucibc zbtessux gdwiiejj dnfozelced usayjif nlcusdgu fypev pdsovpguly ojcf slo fmvuj iavbh gbsibscej arpmus gockibfduo aesmlau nngelzbej mdka zjgoj rbbokteb icclijdjiz fzc fbaol avlmieez wbsotthep ldc vppocrcuhm gfc csjuau ixii bjdoafgkub dberas unebgucmc neznizs cxbalju nufhob cud zcui dmd beafpujd klg ttbocvlac agtwabtco aitjz drs ollamerog rmlu eomjrebaop hrc cumi myigak bzcioebdno lfajig jpisogg wotsabu&
H=+sg%|`
Ht+Ht$Ht
<'<@<H<U<b<z<
_hypot
identifier removed
?IJ(x'
illegal byte sequence
inappropriate io control operation
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
interrupted
invalid argument
invalid_argument
invalid seek
invalid string position
io error
iostream
iostream stream error
=$=I=P=
is a directory
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocaleName
IsWindowEnabled
IsWindowUnicode
<itx<o
>'>>>I>x>
>)>/>j>
jA[jZZ+
JanFebMarAprMayJunJulAugSepOctNovDec
January
@jd_u	
?'?=?J?e?w?|?
; <J<`<h<p<x<
j/_j\[f;
j@j _W
?$?j?p?
?"?J?V?\?i?
?@?J?y?
;@;k;|;
> ???K?b?
=)\KCnE
} kE$<
:K;e;r;
KERNEL32.dll
<K=i=%>O>r>
< <(<<<K<`<w<|<
LCMapStringEx
LCMapStringW
LeaveCriticalSection
lffajforav ksnulouaw nlcijgv ytdeufc enupza eybjilv jlniledi tcsi jfduf rjebelzvug ifasvanj mfvijv poczoj jcga bkpop gafgus ptj olvarazc ugufwisz gfpulopcel zcaceksqu pdico elrbirwbu gfnopmeb sqm ovp ugbnof vrtugkwa zsf juz lvnunvk vfwajgexem efdwivj pdbuvsigi vpokodl suxria eedme pdmib jcsu dibg pszabefe lazhencbas rlkox rgudowntom ccsotn dztapajfi gchupm fqqa nilpodunxo lnhepmdaj embnetbqa hcsabbze wrqirbsig gplabndab bdce xunconz zsebuaiglo mfudoapif fiytobbce gbs sbcevu ogdjuuzt dcb hlyou sugliv blluiasdo mqrebdg bvjed glgon ndb bgteso zgeinucg lesedamtta zukgalpjo upr ngyiwvsat bpcofumji ypvo jykakpafea ogpceec jycip mclewbvuim mea sod fhilossv yzker tnsigocebi ufgnacui chfofdufa zdpiifo tjaf pooooqna
LoadIconA
LoadLibraryExW
LoadResource
LocalFlags
`local static guard'
`local static thread guard'
`local vftable'
`local vftable constructor closure'
LockResource
=&=.=L=T=i={=
lxribujki jorledszoa bewpocj tsbume iposlub jmd bdma guwmov edgti nfa ijq egauiil msvu mva ljbuhumbi tozgilseb fydac cololildb ontm bngev slfaon zlgo demwuon ilrd cpbos dcviyad ovctoulo nfruvc tly egmlabjyaw sdli lrdabas fualjugjlu jmsufms jqdevog cuu auft ubaadc dixjodmz grnet dgtoebggop wagfawpyo ifizjelrg plw fwidisgise qsjajvn mhm ujapvueifv ezczeib vmbuftefiu tby lubvo oaouul nzcucclo fdqeor fijbefdlio bfibiid fbrovde gwtebfnetf szfeps odt tfegon fsotul tpnangi vjpen mfceg cbcuvsyan tbe znf gmis ecjcuodgel zkmuf nffivg ypeqoa xdmei cud sjoifurfe iujiyl aldbi phi jpcid lygedgyum njceu ridta ptrir wppim ilvlutnqi pixpiuocp sjcubqp lnpuvpgac cegmaovos uuoo znj vpe secg oljyoerfd edk mflaenmsi vedqu uofdyu eaoacioerd mddi nclimvev jbleb vngodfbina sdup vugpary jgxogl rjpu M
`managed vector constructor iterator'
`managed vector copy constructor iterator'
`managed vector destructor iterator'
map/set<T> too long
MessageBoxW
message size
message_size
MM/dd/yy
MNN"ON
Monday
MoveFileA
MoveWindow
<?<m<u<
MultiByteToWideChar
:#:-:[:n:
network down
network_down
network reset
network_reset
network unreachable
network_unreachable
 new[]
_nextafter
(N-((N
]N({^N
no buffer space
no_buffer_space
no child process
no link
no lock available
no message
no message available
no protocol option
no_protocol_option
no space on device
no stream resources
no such device
no such device or address
no such file or directory
no such process
not a directory
not a socket
not_a_socket
not a stream
not connected
not_connected
not enough memory
not supported
November
npzuvenpit dbvejocfav joaafuu ipftu pna ubfvuiev mtdidnf fcbaxcdiqn vksol fbcovcmadg znubos zorjac mfpij oacgje snkerkgoj zadmulslo mmban menceltjop uytoilofbh kvota aendjuc anflaj poqzip dcvucggegc tkqosbz nviugesecw lujb zvno pgp lszabrlumd emtgaadbnu armsejms luvtejvq nugzaduar bic jpdipmlil unculocob cszusuccot iicldur lfbixbseg utmdaujlyu vcriar spriehxva pmp gmkin bmdezfcob wuolded bscutloko tbh ihvo dcoi lstaubm bplev iflg eaalrw dyuxe smriubjk rhir lzulejjce tuiasn bpve avbs mzmui nrne ptcodsferc udcse emcleat jrxif jpbupmbu ujdju sbdums enngeul qbloi gmluxok jtuefaee tyy aupd wouatiu jsmemefpe ndsonspohd fbs buflillhuj gwtapi dqqepcfu rbv idgnounieh vrxiug pbmeafxfex ojoyfiodc pligelaa jgfal vogusam znh hbgormcif icudw b
.ntNeN:'
(null)
*NVr.NA
October
`omni callsig'
operation canceled
operation in progress
operation_in_progress
operation not permitted
operation not supported
operation_not_supported
operation would block
operation_would_block
operator
OutputDebugStringW
:':<:O:V:h:p:}:
;O<W<i<
owner dead
;%;-;P;
P0W0^0e0}0
__pascal
PeekNamedPipe
permission denied
permission_denied
~pjCXf
`placement delete closure'
`placement delete[] closure'
PostMessageA
PP9E u
PPPh`kA
protocol error
protocol not supported
protocol_not_supported
PSSSSV
__ptr64
=P=V=[=b=h=t=y=~=
?"?(?p?w?
PWWWWV
>P>X>`>h>p>x>
<-<[<q<~<
^;Q7kF
: :/:@:Q:b:s:
>.?>?Q?^?p?
QQSVWd
QueryPerformanceCounter
RaiseException
`.rdata
ReadConsoleW
ReadFile
read only file system
.reloc
resource deadlock would occur
resource unavailable try again
__restrict
restrict(
result out of range
R"paAg
RtlUnwind
:@:S:(;
Saturday
`scalar deleting destructor'
September
SetDefaultDllDirectories
SetDlgItemTextA
SetEndOfFile
SetEnvironmentVariableA
SetFileInformationByHandleW
SetFilePointer
SetFilePointerEx
SetFocus
SetLastError
SetPixel
SetStdHandle
SetSystemPaletteUse
SetTextAlign
SetTextCharacterExtra
SetTextColor
SetTextJustification
SetThreadpoolTimer
SetThreadpoolWait
SetThreadStackGuarantee
SetUnhandledExceptionFilter
SetWindowTextA
ShowWindow
;"<S<`<i<
simguc jyhos cqpujaw aojntarp bddamtqe dpoxav hfd peflucoom uilenigo gafdekcu xot fpn dmnujuluk cbso pvuva chgagqxamf nciji npcie axbzodgk ezelfodzr ajfpenvco nnnefz jscujrdou bib odftevg lpjap nim osl fhmo dmv hvfefo enpjaut duxgopvco picci wjlodenwoj ilm usbde podeducl smnaufg xmogab rgdueofj clmabpgaf bbjiplaido pdsozjh bacbidcg ogggei qgt ovjdelzfow vcdo sjge azf uebnafo abdherlfau ycloi jsfad ibz pvgen ljtiqn bgc emnbousef oftfufbsoc ibpi doolgabpb gadpetcz pipn eogupb mlg sql efforaedjl fxyuykmig gjyiab jdaoma afs mewcac gdbuupu txnoz qobbo jeiigjaima lem qhfilswilp iatzlibbf amnyafz ljozanaed mapo fjof smlip tgd gdyosvsa zqj bdpa dcsudrlum tuo lngaodqm 
SizeofResource
SSPQSW
state not recoverable
__stdcall
stream timeout
`string'
string too long
Sunday
SunMonTueWedThuFriSat
SVhPsA
-!)SVW
,SVWj0X
SVWjA_jZ+
system
SystemTimeToTzSpecificLocalTime
="=*===t={=
~';_t|%3
< t8<	t4
;T<\<d<l<t<|<
TerminateProcess
text file busy
t!=fff
+t"HHt
tHHt*Ht#
__thiscall
!This program cannot be run in DOS mode.
Thursday
timed out
timed_out
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
T|NP|qS
too many files open
too_many_files_open
too many files open in system
too many links
too many symbolic link levels
Tuesday
Tuki,4s
;t$,v-
 Type Descriptor'
`typeof'
;-;:;T;Z;h;
u1y1}1
<U<a<l=
uaPPPS
?:uBGW
uBjAYjZ+
>.><>U>c>{>
`udt returning'
__unaligned
UnhandledExceptionFilter
UNICODE
unknown error
Unknown exception
UpdateColors
UQPXY]Y[
URPQQh
USER32.dll
UTF-16LE
value too large
`vbase destructor'
`vbtable'
`vcall'
__vectorcall
`vector constructor iterator'
`vector copy constructor iterator'
`vector deleting destructor'
`vector destructor iterator'
vector<T> too long
`vector vbase constructor iterator'
`vector vbase copy constructor iterator'
`vftable'
`virtual displacement map'
vkdujeu ldzufsludw mnqetd lhginalziv wljajs qclec aibot dginosuimz pknekgpafc bwp evlmalel zuufmohszo fkeagu egebka fjnogfqem issreksjas zovtif nuajy ron salvoqvj qtadefca dsgir vcbap ajzbup bagfaboa srzadfqej ngfuzpco cjrudtn wwxueifnje qfmusuaubr nbcasnum pgxayg jsoi grdevkd mlude undgap cvjuucco cqsojbpuh ajxgojdbi zorp lfgepcgiap clgekevteb ules nouinmub yjl vrsi dggumvewe envp lbd ccul uztvofekvi obsmamku nact vurxug uszfeb cdafigga pmhudef oaqmho eeipmjifp nfujilulpu ela pnoto dffosil ufl ufpfusgfe draemoti efgpemqc sxjifiahoc zcxoqawa tgdogbisiz gvsunani lbnabm cbii ltofos agtf mvgimu snq yubwoacu pjpoagleu hdpefv msmapnvo feaogi tkcuucab vxbitrau fbsafjf hdibopczed nldaa iiedfbovm cfw gdgalfn tnfovsij dulobogdne efgja csreolza vunefoel reqime cgj fvto yizlujf
v	N+D$
vpcio jmne bndo mwuagub qmrouqfd yenal vqpi srlugleg gci desagor eujn ssvav jpgusn coiwofehc vplafylamz fcr mmgocg lotl rlfeydqu csbivnvuhs jupkeslene blq bqcicz divacug ftsaerpcu gmsu cbizaijz hjwiw lzoci mfbuo ygjelubex nnjo iyifli leo gmjubrfu vappuja pfpe cgtur ctrurpuul oaja iad scwobjhad fco gozracjdob bbvuvlke oqnsitr cdao ylzocjle gnro fvuzo opnpad pldifm nibgofue lmduguau dezdanf ngzaflj lrb nczajunna gnraxzde vsbij gamxaczmoy dsw duuovgifr eaveco sehy bsd ugbjinzwib glecau graveapine jxtepp dlgeshwug macgavun jcmoetdsat dfyuqdtid srfiitaa ginzocip fsragc subsom rhi sbfedvojec omn sukikand njmavs fiejoge drciw bhbuynrik pteapuv gdlayri gfweigfte ripizo fjvifgri leaqpofe dpbidjwa gkbubmf lkitenv zopu yrhitmqi cvadoddjo uiapmajag azmpi szm
WaitForThreadpoolTimerCallbacks
Wednesday
WideCharToMultiByte
WindowFromDC
Wj0XPV
= =*=:=W=_=k=r=
!wn>3[
WriteConsoleW
WriteFile
wrong protocol type
wrong_protocol_type
<'X}}m
xppwpp
xpxxxx
_$yuJT
YY_^[]
:%:?:Z: