Analysis Date2018-05-02 21:34:39
MD55b9ef37ea596a9e0bf5b46c11515452c
SHA1515b741bec7e5f5d8706b31ea01aa688c8e082e6

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: 4453e4c84a73e70f87966fd17dfc342b sha1: 07a002f8a6865abba18a936b7c3906fef4480365 size: 163328
Section.rdata md5: b32f3151a812ce98847248a0ee0722a4 sha1: 100f413582b97be4426097ead3dfbe8d316ba7a6 size: 52224
Section.data md5: 36e2cadc27b0140b2e6e244697112aff sha1: f33b1e9b6ebfcd123ef92dd178d91ff189164365 size: 9728
Section.rsrc md5: 318811e5efdbd25f4b481a7af0ceadbd sha1: 08d3e1a12e3e0fbd97c311951b2dd7c8f22d8f47 size: 90480
Timestamp2009-02-26 12:54:45
Pdb pathd:\Office\Source\groove\bin\ReleaseSym\GrooveMigrator.pdb
VersionLegalCopyright: Copyright © 2006 Microsoft Corporation. All rights reserved.
InternalName: GrooveMigrator
FileVersion: 12.0.6500.5000
CompanyName: Microsoft Corporation
ProductName: Groove Migrator Utility
ProductVersion: 4.2.2.2807
FileDescription: Groove Migrator Utility
OriginalFilename: GrooveMigrator.exe
PackerMicrosoft Visual C++ ?.?
PEhash11cf6792d18c334d5fa8cc61a8eff2f3fe8891d7
IMPhashc5f9fe848c857e79db0dfb0c4c92c9b9
AVAlwil (avast)no_virus
AVArcabit (arcavir)no_virus
AVAuthentiumno_virus
AVAvira (antivir)no_virus
AVCA (E-Trust Ino)no_virus
AVCAT (quickheal)no_virus
AVClamAVno_virus
AVDr. Webno_virus
AVEset (nod32)no_virus
AVFortinetno_virus
AVFrisk (f-prot)no_virus
AVF-SecureGen:Malware.Heur.tq0@birlw2di
AVGrisoft (avg)no_virus
AVIkarusno_virus
AVKasperskyno_virus
AVMalwareBytesno_virus
AVMcafeeno_virus
AVMicrosoft Security Essentialsno_virus
AVMicroWorld (escan)Gen:Malware.Heur.tq0@birlw2di
AVNormanno_virus
AVRisingno_virus
AVSophosno_virus
AVSymantecno_virus
AVTrend Microno_virus
AVVirusBlokAda (vba32)no_virus

Runtime Details:

Screenshot

Process
↳ C:\Windows\System32\lsass.exe

Process
↳ C:\Users\Phil\AppData\Local\Temp\515b741bec7e5f5d8706b31ea01aa688c8e082e6.exe

Creates Filec:\Users\Phil\AppData\Local\microsoft\Office\Groove\System\Migration.log
RegistryHKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Groove\MigratedData ➝
0

Network Details:


Raw Pcap
0x00000000 (00000)   47455420 2f6e6373 692e7478 74204854   GET /ncsi.txt HT
0x00000010 (00016)   54502f31 2e310d0a 436f6e6e 65637469   TP/1.1..Connecti
0x00000020 (00032)   6f6e3a20 436c6f73 650d0a55 7365722d   on: Close..User-
0x00000030 (00048)   4167656e 743a204d 6963726f 736f6674   Agent: Microsoft
0x00000040 (00064)   204e4353 490d0a48 6f73743a 20777777    NCSI..Host: www
0x00000050 (00080)   2e6d7366 746e6373 692e636f 6d0d0a0d   .msftncsi.com...
0x00000060 (00096)   0a                                    .


Strings
...
.
CC
\
. 
0:\
-E-
-0
-0010+-0
0
-0
00
...........?- 
0
0
0
0
uo
=3i

0.0.0
000004b0
0004, 0002, 0000, 0000
12.0.6500.5000
 2006 Microsoft Corporation.  All rights reserved.
4.2.2.2807
A0x%08x 
Abandon Account FailedCGroove Account Upgrade was not able to abandon your Groove account.
AccountHeartbeat
AccountRestore
accounts\
AccountStore
Account upgrade unsuccessful. 
Action
ADBGHELP.DLL
Another Windows user has already upgraded their Groove data.  The upgrade process only permits one Windows user per device to upgrade their Groove account.
@APPID
A reboot is pending
A reboot is pending (client mode)
As a result of the error:
A%s %s
AssertionFailed
Assertion failed: %s, file %s, line %d
AuditLog\
AuditLogUpload
AuditLogUploadQuery
AuditService\
AuditServiceKey.dat
AutoActivation
AutomaticPasswordReset
AutomaticPasswordReset_SetData
< Back
Bad state (%d) on Next
BreakOnThrow
BuildNumber
</CallStack>
<CallStack>
Cancel
<![CDATA[
_Classes
ClientAuditLog.dat
Communications Master Singleton Event
CompanyName
Completed
ComponentInstalled
ContactFetch
ContactSearch
Copyright 
CreateDirectories on "%s" failed, Error = %d
Create V4 current user reg key failed, Error = %d
CSMIPC.dat
CSMIPC.tmp
ct.exe
Current user does not have Groove data
CurVer
</Data>
<Data created="
Data migration requires %s of disk space on drive %s but only %s is available.
Data was previously migrated, (%d)
 Date="
Date:  %s
@dbghelp.dll
Debugger
.DEFAULT
Deferring migration of "%s"
Delete Groove Account?
Delete key failed, Error = %d
Delete reg key: "%s\Software\Groove.OldData\%s"
Delete V3 reg value failed, Error = %d
Delete your Groove account
Deleting reg key: "%s\Software\Groove Networks, Inc.\Groove\%s"
Deleting your Groove account will prevent you and other Windows users on this computer from accessing their information in Groove. Deleting your account cannot be undone.  Are you sure you want to delete your Groove account?
<Details Process="
Detected multiple OS users with Groove data
\Development
DisableBSTRCacheWorkaround
Disk is fullOUnable to upgrade your account. There is not enough disk space on the computer.
Documents And Settings\All Users\Application Data\Groove Networks\Groove\Permanent\
Documents And Settings\All Users\Application Data\Groove Networks\Groove\Temporary\
DomainMigrationStatus
DownloadInvitation
 Eax="0x%08x" Ebx="0x%08x" Ecx="0x%08x" Edx="0x%08x" Esi="0x%08x" Edi="0x%08x"
 Eip="0x%08x" Esp="0x%08x" Ebp="0x%08x" Efl="0x%08x" SegCs="0x%08x" SegSs="0x%08x"
Enrollment
Error
ErrorDlg
Error finding data folders to migrate, Error = %d
 EventMessage="
:Examining your Groove account.  This will take a moment...xIn order to use your existing Groove account with Microsoft Office Groove 2007 you must upgrade your account.  Continue?
{F275ED8E-232B-4810-BB6F-7E8D75505DBC}
Failed writing MigragedData reg value, Error = %d
Failed writing RebootNeeded reg value, Error = %d
Failures
FileDescription
Filename:
FileUpload
FileUploadQuery
FileVersion
FindFileHandle on "%s" failed, Error %d
FindFirstFile on "%s" failed, Error = %d
FindNextFile failed, Error = %d
FindNextFile failed, Error %d
Finished
Flags
Found mulitple id.xss in "%s"
Found mulitple id.xss in speculative UserRoot "%s"
Found previously migrated user in "%s"
	<GCStackEntry Addr='0x%08X' 
GetDiskFreeSpaceEx on "%s" failed, Error = %d
GetFileAttributesEx on "%s" failed, Error = %d
Get Flags failed, Error = %d
Get GFSUserGUID failed, Error = %d
\GFS
gfsconfig.xml
GFSUserGUID
groove
groove.
Groove Account Upgrade
GrooveAuditService
groovebinaryfilestore
groovebinaryfilestore.xss_\
groovecommunicationsservices
\Groove\Data\
groovedevice
grooveeis.exe
GrooveError
groove.exe
groovefetchservices
GrooveFile\Shell\Open\Command
\GrooveIntlResource.dll
GrooveManagementServer
GrooveMigrator
GrooveMigrator.exe
.Groove Migrator Utilit
Groove Migrator Utility
groovemisc
Groove.MSO.BrandedApplicationNameChanged
\Groove Networks\Groove\Data\
\Groove Networks\Groove\Data\System\Permanent\
\Groove Networks\Groove\Data\System\Temporary\
\Groove Networks\Groove\Permanent\
\Groove Networks\Groove\Temporary\
GroovePerfmon.DLL
GrooveRebootRequest
groovetemporaryfiles
Groove upgrade process cannot start.  Make sure Groove is not currently running.
GrooveUtil
groove_xss
                                 H
         (((((                  H
         h((((                  H
HKCU
HKEY_CURRENT_USER\
HKEY_LOCAL_MACHINE\
HKLM
 HRESULT="0x%08x"
HRESULT: 0x%08x
%hu.%02hu.%hu
%hu.%02hu.%hu.%hu
IdentityPublish
IdentityUnPublish
IDispatch error #%d
id.xss
</IID>
<IID>
 in IID 
In order to use your existing Groove account with Microsoft Office Groove 2007 you must upgrade your account.  We are unable to determine if other Windows user accounts are using Groove. If other Windows user accounts are using Groove those accounts will be deleted when you upgrade or delete your Groove account.  Continue?RYour Groove account will now be upgraded.  This may take a few minutes.  Continue?AUpgrading Groove account information.  This will take a moment...UAccount upgrade not necessary! Your account can now be accessed by Office Groove 2007SAccount upgrade successful! Your account can now be accessed by Office Groove 2007.
In order to use your existing Groove account with Microsoft Office Groove 2007 you must upgrade your account. We have detected that other Windows user accounts are using Groove. Those accounts will be deleted when you upgrade or delete your Groove account.  Continue?
InstallationType
Installation unsupported-Unable to migration the current installation.
InstallBinRoot
InstallDataRoot
InstallDir
InstallRoot
Internal Failure$An internal failure was encountered.
InternalName
Invalid UserRoot %s or UniqueUserRootDirectory %s.
IPC_CSM_SHARED_MUTEX
kernel32.dll
LegalCopyright
Log End
 + %lu bytes
ManagedObjectInstall
ManagedObjectStatus
ManagedObjectUsage
Master Process Shutdown Event
Microsoft
Microsoft Corporation
Microsoft Office Groove 2007 Account Upgrade
MigratedData
MigratedNeeded returned true but FindDirsToMigrate came up with nothing
Migrate Flags failed, Error = %d
Migrate GFSUserGUID failed, Error = %d
Migrating PersistRoot system files from "%s" to "%s"
Migrating PersistRoot user files from "%s" to "%s"
Migrating specific files in InstallDataRoot from "%s" to "%s"
Migrating SystemPermanentRoot from "%s" to "%s"
Migrating SystemTemporaryRoot from "%s" to "%s"
Migrating UserRoot from "%s" to "%s"
Migration.log
 Migration Utility v1.0
Migrator
MigratorSleepInterval
Module='%s' Path='%s' Version='%s' 
Moved "%s" to "%s"
MoveFile of "%s" to "%s" failed, Error = %d
msctls_progress32
MS Shell Dlg
Next >
No action on Next
No V3 current user reg values to migrate
No V3 local machine reg values to migrate
_NT_ALTERNATE_SYMBOL_PATH
_NT_ALT_SYMBOL_PATH
_NT_SYMBOL_PATH
\ntuser.dat
(null)
 Office Groove
OriginalFilename
 OS="
 OSBuild="
 OSMajor="
 OSMinor="
 OSServicePack="
Partial account failiure
PassphraseResetRequest
PassphraseResetStatus
Path
PendingFileRenameOperations
PendingUserReboot
PersistRoot
 PID="
 PreviousMessages="
Process: %s (ID: %lu (0x%08x))
ProductName
ProductVersion
ProfileImagePath
Program Files\Groove\Data\
Program Files\Groove Networks\Groove\Data\
Program Files\Groove Networks\Groove\Data\System\Permanent\
Program Files\Groove Networks\Groove\Data\System\Temporary\
Prompting user to confirm migration.  Required disk space: %lld, Available disk space: %lld
PsAPI.dll
</RAWCallStack>
<RAWCallStack>
<RAWCallStack 
RebootNeeded
Reboot RequiredKThe system needs to be rebooted before your Groove account can be accessed.
RegKey.Open on "%s" failed, Error = %d
@ReportAllTranslatedExceptions
Run on %d/%d/%d at %d:%d:%d
RVASection='%u' RVAOffset='%u' />
%s\*
%saccounts
%saccounts\
Schedule migration of "%s" to "%s"
SeBackupPrivilege
@SecureDataRoot
 SegGs="0x%08x" SegFs="0x%08x" SegEs="0x%08x" SegDs="0x%08x"
SeRestorePrivilege
Set MigragedData reg value to %d
%sgroove\
%s\Groove\Data\
%s\Groove Networks\Groove\
SkipMigratorRebootCheck
SKULanguage
  %s, Line %lu
 %s + %lu bytes
%s\microsoft\office\groove\
%s\microsoft office\office12\
\Software\Groove Networks, Inc.\Groove
SOFTWARE\Groove Networks, Inc.\Groove
SOFTWARE\Groove.OldData
SOFTWARE\Microsoft\Office\12.0
Software\Microsoft\Office\12.0\Common\InstallRoot
Software\Microsoft\Office\12.0\Common\LanguageResources
\Software\Microsoft\Office\12.0\Groove
SOFTWARE\Microsoft\Office\12.0\Groove
SOFTWARE\Microsoft\Office\12.0\Groove%d
Software\Microsoft\Office\12.0\Groove\InstallRoot
SOFTWARE\Microsoft\Office\Groove
Software\Microsoft\Windows\CurrentVersion\RunOnce
Software\Microsoft\Windows NT\CurrentVersion\AeDebug
Software\Microsoft\Windows NT\CurrentVersion\ProfileList
Software\Policies\Microsoft\Office\Groove
Space available:
Space required:
%s '%s'
%s\%s
%s\%s\
%s%s
%s%s\
%ssystem\
StatisticsPackage
StoreURLInvitation
StringFileInfo
%suser\
System\CurrentControlSet\Control\Session Manager
SystemPermanentRoot
SystemRoot
SystemTemporaryRoot
Target already exisited for MoveFile of "%s" to "%s"
There may be other Windows users on this computer with Groove accounts. Upgrading your Groove accounts will prevent those users from accessing their information in Groove. Are you sure you want to upgrade your Groove account?
This is where the error message goes
Thread ID: %lu (0x%08x)
 TID="
Trace
TraceCommMgr
TraceLeak
TraceProxyConfig
TraceStacksOnCreation
TraceTransport
Translation
 Type="
UILanguage
Unable to upgrade account1An error encountered while upgrading your account
Unable to upgrade account4Cannot locate a Groove account for the current user.
Unable to upgrade your account
UniqueUserRootDirectory
Unknown
Unknown error 0x%0lX
Unknown Error!An unknown error was encountered.
<unknown symbol>
Unused01
Unused02
Unused03
Unused04
Unused05
Unused06
Unused07
UnUsed08
UnUsed09
Upgrade Groove Account?
Upgrade your Groove account
Upgrade Your Groove Account
_uq_
UseExceptionTranslator
User32.dll
User cancelled migration
User chose to abandon data
User chose to migrate data
User continued migration
User%d
UserRoot
User went back to action page
V3AuditKeyPath
V3AuditLogDir
V3AuditLogPath
V3AuditServiceDir
VarFileInfo
VS_VERSION_INFO
.xss
_xss.log
__XSSTemp
Your Groove account has been deleted. Microsoft Office Groove 2007 can no longer access your old Groove accounts or the accounts of other Windows users on this computer.  You are now ready to run Groove and create a new account.
Your Groove account is incomplete.  This can be caused by a failed upgrade attempt, by uninstalling a previous version of Groove or by another user upgrading their Groove account. For further details contact support.
       
                
                        
                          
        !!!!!!!!"""""""""""""*+$
       !!!!!+$-
   !*$-
!!!;!!!
!!!?!!!
!!!?!!!#
!!!'!!!;!!!
!!!'!!!;!!!?!!!?!!!
...........
..................%
.....%...........
\.................;
\...............%
########-+'
%%%%.%%.%.%.%%%%.%.%%.%%.......
%%%%%%%%%
%%%%%%%%%%%%%%%%%%%.%%.%..%%%.%%.%.%.%...
%%%%%%%%%%%%%%%%%%%%
%%%%%%%%%%%%%%%%%%%%%.%%%.%%.%.%.%..\\......
%%%%%%%%%%%%%%%%%%%%%%.%%%%%...%.%%.%.%.%.
%%%%%%%%%%%%%%%%%%%%%%%%%%
%%%%%%%%%%%%%%%%%%%%%%%%%%.%.%.
%%%%%%%%%%%%%%%%%%%%%%%%%%%%.%%.%.%.%%
00000006JJJJJJXJJJJVJJ:GF4&(0444Q4==<FHHHHHHX{{{{{{{{{{z{{zzzzzzzzzzz
00000006JJXXX7G=0/40404440444440/=GSTHHHHHHW{{{{{{{{{{{{{{{zzzzzzzz
0000000HJJJJJJJJJJJJJJVJJJJVVXJXTGFE/<GHHHHSHHHHHSFHbe
0000000HJJJJJJJXJJJVJJJJJJJ7GE(/04=4Q(HHHHHHHFSbuY{{{{{zzzzzzzzzz
00(0(006JJJJJJJKJJJJJVVVVVVJVJJVXWWgT<4HHHHHHHSHSHSSHSGFScugzzzzzz
00(00(0HJKKKKJKJJJJJJJJVVVVJVVJJXXWWT4/SHSSTcHGFSHHSSSSHSSSFFHTce
#)+,00148?3(
 !"#$%&'()*+,-./0123
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
0404000TJ6F4/(0404Q40444040(/=GcggdcVHHHHHHg{{{{{{{{{{{{z{zzzzzzzzzzzzzz
)0577:7>>>;@@80
060916010447Z
070822223102Z
080725190115Z
081022212455Z
090226181051Z0#
0A@@Ju
0p1+0)
0SSSSS
0WWWWW
                            !!!!!!!!!!""""""""""""""&"&&&&&&&&&&&&&&+$-1
          !  !!!"!"!"""""""""""""""&"&&&&+$-1
         !!!!!!!!""!")$-1
100122213455Z0
!!!!!!!!!!"!!!"""""""""""""""""&&&&&&&&&&&&&&&&&&&&**&&**********)))))))))--,11
!!!!!!!!!!!!!!!!!!"!"!"!""""""""""""&"&&&&&&&&&&&&&&&&&&&&&/&**********/--116%..........NNNNNNNNNNNNNNNNNNNNNNNNNNNNN       ,6767666777777777777777777777,!!!!!!,775,)" 
1;;;;;;;;;;;;;;;;;;;;;;;;;;;;1**)(((HJIIeeZZZZZZZZZZZZZZZZZZZYZZZZZ7EE,E5hhhhhYhhYhhhhhhhhhhhxhxxfS===FxhfhxxxxxfxxxxxxR=====T
120825070000Z0y1
&&&#*#*1@2;2@@@2??????@?@?@@?????B>A5((0000Tee\\\\\\\[\\\\\\\[[[[[[[[[[[[[cFFFFH[[
##&####1;;;;;;;:@;:;;:@@;@;@;@@@@@@25)((((0HJVuJ[[[[[[[[[[[ZZZ[[[[[Z[ZZZZ
#######1;;;;;;;;;;:;;::@;@;::@;@@;@25)((((0HVVe>[Z[[[[[Z[ZZ[[ZZ[ZZZZZZZZZZc=,E,HhhhhhhhhhhhhhhhhhhhxhhhxhSE=EFxhxhxhxxxxxfxff
#####&#1@@@@@@??2???B2>?B?>>>?>>>>>>5)))(((5AeeKK?LYMMMMMMMMMMYMMYMMMMMMMM7=4==5MYgMggMgMMMgMMMgMfMgMgMgMS==4EfgfMfMMgfgW
&&&#&#&1@@2@@@@@@@@@@@@@@@@@@@@@??B>5(((000HVuY\[\\[\[[[\[[[\[\[[[[[[[[[[[cFFFFH
130725191115Z0
#######1;;;;;;;;;;;;;;;;;::::;;;:;;@5*))((0HIVI@L[ZZZZZ[Z[ZZZZZZZZ[ZZZZZhZ8,=EEHZZZhhhhhhhhhhhhhxhxhhxhhhH=E=EhxhxhxxxxxxxyxxyE==4==Tdddddddddd
1;;;;;;;;;;;;:::@::@:@@@@@@@?5*))))(HKKKIe?MMYYYMMYYYYYYYMYYYYYYYYY744,=5MMMYYYYMgYyMMgMMyMMffMfMg5=4=Eggggffffffxxf
1.8;;;;;;;;;;;;;;;;88;;;;;;;;1***)((HKKKK:MZZZZZZZZZZZYZYYYYZYYhZhY7E4E45YhYYYhYYYfhMhhMhxhyMfhYMfS===EhfhyhffxxffxxxfxE==Q=QTdd
1;;;8;8;8;8;;;;;;;;;;;;;;;;;;1&*)))(5IIKI>KYZYZYZYZYYYYYZYYYYYYYYYY7=,4=5hYYYYYMMYYYhfhyMMyhhMhfMMS===EfyhfxxfffxxxxxxxE=====Tddwdwwdwwwwdvuvvvvvv
"188888888888899999999999999991&&&&&&1:::::::@:::::2BBBBB222BBB>B>>>5)))),>>>>>>>>>>>A>A>AeKeAeAKeK,(((0KKIIKKIKIVJJJJ9H/00000HVJVJJJVJJJUVUVVVVVVwdwUUVwwvIvV""
""""1888888999999999999999999:9::1&&&&&&1::::::@@@@:::BBBBBBBBBB>BBAAAA5)()),A>>>AAAAAAeAAeAeKIKeKeKKK,(((0KIKIIIIIVJJVVJVV&00000HVJJJJVXJUUUVVVdUVUwdVwwUwvUwwIw"""""""1888888999999999999999:::::::1&&&&&&1:::::@@@@?@9?BAAAAAAAAABAAAAAA5+)((,A>AAAAAAAKKKKKKKKKKKKKKKKF(((0IIIIVIVJVVVVVVVV/00000HVVIUUVJUUUUVVXUVUdVVVUdwwwwwVvw"""""""199999999999999999999::::::::1&&&&&&5:@@@@@@@@?@:AAAAAAAAAAAAAAAAAA5+((),KAAAKKAKAAKKKKKKKKKKKKKJIF0000VVIJJIVVVVVVVVVV/00000HUUVUVdUdUVdUdddUdVUwwwwVwwVvUvI"#"""#"1999999999999999:::::::::::::5&&&&&&5@@@@@@@@@?:?AAAAAKAAAAAAAAAAAA5((((,KKKKKJJKKJKKKKKKJIJKJJJJIF0004VJJJJJJJJVVVVVUv/40Q00HUUwXdddwVdwddddUdUUwwwwwVIwIvvv"""""&#19999999999:9::::::::::@@@@@@5*&*&/&5@@@@@@????:AAAKAAAAKKLKKAAAAKKH((((,JKKKKKKKJJJJJJJKJJJJJJJJJ10004JJJJJJJJJJJJJVUI/04040TdUWddddwwwddddddwwwwwwVvwvIvVvw&"&"&"&19999999:::::::::::::@:@@??@?5&&&&&&5:@@@@@???@?LAAAKLAAKKKAKLJKKKK6(((01JJLLLKJKJKJJLJJJJJJJJJJJJF0044JXXJJJJJXJJXUUdX/00400TdddddddddwddddddwwwwwwwvvvwvvIw#"&"&"&1:::::::::::::::@::@@@@@@@@??5******5@????????9AKKLLLKKLKKAKKKKKLLL6(000FLJLLLLLLLJJJJJJJJJJJJJLJJ10004XXXWXWWWJWWUdUXd/4Q404TdddddddwddwwwwwdwwwwwIvvIvIvevv&##&#&#1:::::::::9:::::::::@:@::@@@?5******5?@??@@@??@LLLLLLLLLLLLLLLKLLLL600001JLKJJJLLLJJJJJJJJJJJJLLLLG0044XJJJXJXWXJXWdddU/44444TWdddddddddwwwwwwwUwIvwvvvvvvwvw&&&&&&&011111155,,-----,-,,,,,,-,+))&**&***&((+((((+)(#********#*&*&*****&*0000********/***/*/**/)//))///)4000//////(444==4GGF<444Q4TdddddddwwdUwvwvvwvvvvIvevewwvww&&&&&&&&&&&&&&&&&&*************/**/***)******/)))))*&0000000000000000000(**0000)****/****/*)(44444444444400440///////////////(444Q44TWd
190915070000Z0y1
###&#&#1@@@@;@;@:;@@@;@;@;@;@@@@@@?B5)(((00HVI@[[[[[[[[[[[[[[[[[[[[[Z[[
&#&&#&&1;;;;@;@:@@@:@@@@@@@@@@@@@@BB5(((000HJeI\\[\[\\[[[[[[[[[[[[[[[[[[[[9EFEFHZ
!!""""!""""""""""""&&""""&&&&&&&&&&&&&&&&*&/&************)))))))))())(()((1IeKKLMM[\\{{{NNNNNNNNNNNNNNNNNN    !  ,6677677777777777778777777777,!!!!!!,78778888888888,40"! !"""""""""""&"""&&&&&&&&&&*&&&&&&&&/*&*********)))))))))))())))((()(H>AKIKIKIJJIIIKKIMYY\\\{{zNNNNNN ! !! !,6667777778787777787887878878,!!!!!!,888888888888888888995,$&&
1#QNAN
1#SNAN
2666<62.
!!!'!!!3!!!?!!!?!!!?!!!?!!!?!!!?!!!?!!!?
3http://crl.microsoft.com/pki/crl/products/CSPCA.crl0H
3http://crl.microsoft.com/pki/crl/products/tspca.crl0H
!!!3"%"J
!!!#!!!3!!!?!!!?!!!?!!!?!!!?KOKV
4000000HJJJXXXXJX>TF4//0Q04Q40444==0!HHHHHHL{
40000040/04444444404444(/=G7dgggWWewgHHHHHHW{{{{{{{{{{{{{{zzzzzzzzzzz
44444444(0FHIggggggggggWWWWgggggdc{
4444444444444440/=GcgW
44444444444444444440/=GcgWWWgg
444444444444/4GTgggWgWWggWgggggWgu[
4444444Fugggggggggggggggggggggffu
4444444Tggggggggggfggggggygggfydc{N
4444=4=bggggggggfggggggygggffyyue
4=4==4=bgggfggffggyfgggyyyyyy
?456789:;<=
#+49<=>>A
*******52@222B???????????????BBBABABH(00040Hui\\\\iiiiii\iii[\[\i[[i
&#****&5@@22?@@?????????????????BB>AH(00000T?M\\\\i\\\\\i\[\i[i[[[[[[\
&&&****5?????????????>>>>>>>>>>>>>>>5))((()HAKAAe>@MMMMMMMMMMMMMMMMMMMMMMM6=4445gMMMMMMMgMgMgMgMgMgMgMgggG4=4EWgfggggggfggffWf======b
)57>>???@AA
*57?AAAAA
)))))))5AAAAAAAAAAAAAAAAKKKAKKKKKKJJT0444/=ezizzziziziziiziii
)))))))5>A>AAAAAAAAAAAAKAAAAKAKKKKJJT04440(eziiiziiiiziiiii
))+))))5AAAAAAAAAKAAKAAKKKKKKKKKKKJJT4444/GAzziziziziziz
())((++5AAAAAAAKAAKKKKKKKKKKKKKKVVJJT444(4Sezzzzzzzzzizizzzizizz
)))))))5>>>ABBAAAABAAAAAAAAAAAAAeKKJH40444/9iiziizziiiiiiiiiiiiiii
*******5BBBBB2????BBBBBBB?>?>BBABAAKH000000HJ\iiiiiiiiiiiiiiiiii[iii
*)***))5>BBBB>>>BBBBBBBAAAAAAAAAAeKJH00044(Hiiiiiiiiiiiiiiiiiiiiiiiii
*******5B??>B>BBBBBBBBBA>>BBBBAA>AKKH0000445\iiiiiiiiiiiiiiiiiiiiii
5%%%%%%%%%%%%%%%%%%.%.%%...%...%......BN.....................\NNNNNNNNNN
   -66666661
   -666666667666-+#
(((((((6KKKKKKKKJKKJKKJKVJVVVVVJXJXWT44/HSHI{zz{{{z{{iI8THFFSGSSSGGGGGEFSHGGGFGT
6..........................%ZNNNNNNNNNNNNNNNNNNNNNNNNNN       -6667666677776767766777777765*! !            ! !!!!!!!!!!! !!"!!""""""""""""""""&&&&&&&&&&&&&&&&&&&*&&**+$-15
#-7>@A
!!!#!!!7"%"J
!!!#!!!7JPKV
8X6t[h
8X6tZh
\$(9\$
9\$0t	
9\$4t	
9\$4u-9\$8u'
97tU9s
9\$8t	
9999===963
9E vMPW
9~$~!S
9\$ t	
9\$,t	
9\$(t$
9\$(t	
9\$@t	
9\$$t	
9] tf9]$u\9](u\f
9u(v)V
9u wk3
aaaaaaa
aaaaaaat
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/
AddAtomW
AdjustTokenPrivileges
ADVAPI32.dll
aEEaEaat
An application has made an attempt to load the C runtime library incorrectly.
apapaaa
appaapa=RpappppaooaaaQa
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity name="GrooveMigrator" type="win32" version="1.0.0.0" processorArchitecture="X86"></assemblyIdentity><description>Groove Virtual Office Data Migration Utility</description><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="X86" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><ms_asmv3:trustInfo xmlns:ms_asmv3="urn:schemas-microsoft-com:asm.v3"><ms_asmv3:security><ms_asmv3:requestedPrivileges>
Assertion failed: %s, file %s, line %d
- Attempt to initialize the CRT more than once.
- Attempt to use MSIL code from this assembly during native code initialization
.?AU_ATL_MODULE70@ATL@@
.?AUGCErrorBase@@
August
.?AVbad_exception@std@@
.?AVCAtlException@ATL@@
.?AV?$CAtlExeModuleT@VGCModuleMigrator@@@ATL@@
.?AVCAtlModule@ATL@@
.?AV?$CAtlModuleT@VGCModuleMigrator@@@ATL@@
.?AVexception@std@@
.?AV?$GCAtlExeModuleT@VGCModuleMigrator@@@@
.?AVGCAtlModuleBase@@
.?AVGCError@@
.?AVGCModuleMigrator@@
.?AVtype_info@@
!=!b!!!#
bad allocation
bad exception
 Base Class Array'
 Base Class Descriptor at (
__based(
bbbbbbx
bbbbbtx
BBBEFII
@@BBf;
BBFFf;
=======bffyyyyyxxyyyyyyyyxxyxxwuN
B{NNNNNNNNNNNNNNNNNNNNNNNNNNNNN     ! -6666766777778787877777877777,!!!!!!,777777771-+! 
%BuZeS
=======bxxxxxxxxxxxxxxxxxxxx
=======bxxxxxxxxxxxxxxxxxxxxx
=======bxxxxxxxxxxxxxxxxxxxxxu
=======byyxxxxxxxyyxxxxxxxxxxxuh
~}^CCCC^^kkkkkkkkkkkkmkkkkkkkkkkkkkkkkklklllll|||||||||}}}}}}}~~~~~~~
}^CCC_^k|||||||}}}}}}}~}~~~~~
 CCGGf
}^_CC__^kklllll|||||||||}}}}}}}~~~~~~~~
__cdecl
cEFE=HZhhhZZhhhhhhhhhhhhhhhhhhhSEEEEhhxhxxxxxfxg
CharLowerW
}^_C__^k|||}}}}}}}}~~~~~~
 Class Hierarchy Descriptor'
CloseHandle
CloseServiceHandle
__clrcall
CoCreateInstance
CoInitialize
CoInitializeEx
COMCTL32.dll
 Complete Object Locator'
CONOUT$
ControlService
ConvertStringSidToSidW
`copy constructor closure'
"Copyright (c) 1997 Microsoft Corp.1
CopySid
CorExitProcess
CoTaskMemFree
CoUninitialize
CreateDialogParamW
CreateDirectoryW
CreateEventW
CreateFileA
CreateFileMappingW
CreateFileW
CreateFontIndirectW
CreateMutexW
CreateProcessW
CreateThread
- CRT not initialized
D$0PWWWV
D$4PSSj&S
D$8PWV
@.data
dbghelp.dll
dd*******5??????????????>>?>>>>>>>>>>>5))))))5AA>AA>@LMMMMMMMMMMMMMMMMMMMMMM64444GMgMMMgMMMMMgMgMgMgWWMgggMG=4=EgggggggggffggWf
ddddddddd
ddddddddUvvvvvvvvvvvv
ddddddwwvvvvvvvvvvw
dddd, MMMM dd, yyyy
ddddvddddvvuvvvv
ddddvvvvvvvvvvvvwwwvd
dd$!%e
DebugBreak
December
DecodePointer
`default constructor closure'
 delete
 delete[]
DeleteCriticalSection
DeleteFileW
DeregisterEventSource
DestroyWindow
D$HPSh
DispatchMessageW
d:\Office\Source\groove\bin\ReleaseSym\GrooveMigrator.pdb
DOMAIN error
d====Q4T
D$*SPf
dWddwdwvvvwwvvvvvvwvvvwvwwww&&&&&&*&*&&*&&*&******************&/*/*)/*)"!""(((()(41111111156666666668L600001LLLLLLLLLLLMLMLLLLLLLWWLWG444=LWWWWWWggWWWWWWu4444=4TfWddddddddwwvvwwvvwvvwvwwwvwwdd&&*&*&&&&***********&!!!!((((),,,,,5-))))))5>>>>>e>:LLMLLLLLLLLMLMLLMLMLMM644441LgMgMMLMMMLMLMMgWWWMWWWWWG444=gWWWWWggWWWWggWW=44444bfWdWdddwvvvwIvvvvvvvvvvvvwwdwvd&&&&&**!!(()0,,,,5556?????>??>>>>>>>5))))))5>>>>>>?>MMMMMMMLMMMMMMMMMMMMMM644441gMgMgMMggMgMMWWWMMWMgMMgMG444EWWWgggWWWgggfgWW==Q===TWd
D$*WPf
`dynamic atexit destructor for '
`dynamic initializer for '
E4Q=Q=Td
EaaEaaac
==E====bxxxxxxxxxxxxxxxxx
ecHHGG=4=EEEEEE=00=====cxxxxxxx
ecTHHEFQ04E=E==4Q<E=GSHbc
EEEEaEE
EE=E=E=b
EEEEEREc
EEEEREEt
E=E=EREbxx
EEEREEEbx
eGSGGb
`eh vector constructor iterator'
`eh vector copy constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`eh vector vbase copy constructor iterator'
e-mME)Vr
EnableWindow
EncodePointer
EnterCriticalSection
EnumerateLoadedModules64
E=Q4=4Tdddd
E===Q4T
EQ=4==T
EQ^b`+
EqualSid
EREEEEEb
E=====T
ExitProcess
ExitThread
ExpandEnvironmentStringsW
f92u	AAf91u
f9;t	S
__fastcall
February
[:FFFFH[
ffffh`To
:FFFFT[
[:FFFFT
``\`ffh[
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileW
FindNextFileW
- floating point not loaded
FlsAlloc
FlsFree
FlsGetValue
FLSh}j@
FlsSetValue
FlushFileBuffers
FormatMessageW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
Friday
fSTTTTTTTTTTTTTTT`T``f`hlo
GAIsProcessorFeaturePresent
GDI32.dll
GetACP
GetActiveWindow
GetClientRect
GetCommandLineA
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCPInfo
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetCursor
GetDateFormatW
GetDeviceCaps
GetDiskFreeSpaceExW
GetDlgItem
GetDriveTypeA
GetDriveTypeW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesExW
GetFileAttributesW
GetFileSize
GetFileType
GetFileVersionInfoSizeW
GetFileVersionInfoW
GetFullPathNameW
GetGuiResources
GetLastActivePopup
GetLastError
GetLengthSid
GetLocaleInfoA
GetLogicalDriveStringsW
GetMessageW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetProcessIoCounters
GetProcessMemoryInfo
GetProcessWindowStation
GetStartupInfoA
GetStdHandle
GetStockObject
GetStringTypeA
GetStringTypeW
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTickCount
GetTimeFormatW
GetTokenInformation
GetUserObjectInformationA
GetVersionExA
GetVersionExW
GetVolumePathNameW
 GGBBf;
gggcigTHHHHHL{{{{{{{{{{{{zz{z{zzzzzz
!!!G!k?
gpib!!!3
gpib!!!7
G===Q=T
gTTTHHHg
gTTTTTTg
gyE=====T
`h````
h7ai.P
hbbbbbt
hbbbbsbx
hbbtbbbx
hbTbTTTx
hbTTbbTx
hbTTTbTx
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
HEEEahxxxxxyyyyfy
`h`hhh
hhhHE==Fxxxyxxxyg
hhhhhh
hhhSEEEEhhxxubbSSS=EE<Q<QR=RR=b
hhhSEEEFhxhhxxxxyxygfg
hhhxeFE=E4EE/(Q====Q<0QE=S=====Rb
hhhZhhhhhhhhhhhSEEEFhxhxhhxhxxxyyxy
HH:mm:ss
hhSEEEEhhxyxxy
hhSEE=Fxxhhxxxxyg
hhxhSEEEFx
hhxxSEEEExxxxxxx
(((((((HKAKKKAKAKKKKKKKKKKKKKKKJVJJXT44Q/GSKzzzzzzzzzzzzzizzzz
 &#"&""&&&&&&&&&&&*&&&&&&&&&&&&*******)))))))))))))))()()(((()HKIIIJIIIIIIIVIVVVVIVIVIIIIIIIYY  ! !!!-77777777777777787788888888881!""""",88888888888888889999999999610+"&&&&&&&&&&&&&&*&&&&&*&&**********)*/)))/)/))()(()((((((((HIIIIIVIIIIIIIIIVIIVVVIVIIIVIIvV!!!!!!!,7777777777777877888888888888,""!"!",8888888888888888:::99:::::::::1&&&&*+)!!#&****************)*)*/*)/)()/)))(()()((((((((((HIIIVVVIIIIIIIIIIIIIeeUIIIvIIIVI!!!!!!!,87787888888888888888888888881""""""18898888998888989::::::::::::::5&*&*-:@@@51,+)!!&&/****/**))/)))/))()/())()(((((((((((0(0HKIVVIVVIVIVIIIIIVIvIweIVVIwVIII!!!!!!!-77778888888888888888888988981""""""1899999989999988::::::@::::@@@@5*&*&,??@@@?????@55-0(&!!//)/)///))()()/(((((((((((((0(((0HIVVIIIIVVVIvIIvIwVIwIvwIwVwIIww!!!!!!!177788888888888888888888999881"#""""199999999999999:@@@@@:@@@@@@@@@5***&,???????????@@??@??95,,0(&&(())))(((((((((((((0(00000HVIIIVVVJVIIIIIVVIvIwwVVIwIwvVvw!!!!!!!,88888888888888889999999999991#"""""199:99999999999@2222@@@@@@@@@@?5****,????>>??>>>?>?>>??>?>>e>e,(/()400"&*((((((0((((00000HJIVVJJJVIJVVIVvVvVIIVVwwVUVVwvV!!!!"!!188888888888888889999999999991&""&##1999:::::99::9:@222222222???>??5****,>>>??>>>>>>>>>>>>>>>>>A>>,(((0AeKKe6H1F,00&&/000(000HJVVVJJJIVJJVVwVVIwVVUwwVwwUwvVw!!"!"
(((((((HKJKKKKJKKKJKJKVVVVJJVVJJJXWdT4/=HHHV{{{{V:bHFFSSSSSSGSSGGEGHTe
(((((((HKKKKKKKKKKJKKJKKVVVKKVVJVJXXT4=/EHSJz{zzzzzzzzzzzzz\ecTHFEGSGGGGGGGGGGFGbuh
(((((((HKKKKKKKKKKKKJKJKKKKKKKKJVJXXT4400S5Kzzz{zzzzzzzzzzzzziz
HRRaax
hSEE=Exxxxyyyyyxy
HtnHt]HtLHt;WW
http://office.microsoft.com 0
,http://www.microsoft.com/pki/certs/CSPCA.crt0
,http://www.microsoft.com/pki/certs/tspca.crt0
{hWPh\
hxS===Exxxxxx
hyyn.P
hZhhhhhhhhhxHEEEFxhxhxhxxxx
hZZhhhhhhhhhhhHEEEEhhxhhxxxxxffg
iiiiiiiii
iiiiiiiuGGFGT
IISVt-I
iiuGGGGT
Il/$>e
ImageNtHeader
ImageRvaToSection
ImageRvaToVa
ImpersonateSelf
InitCommonControlsEx
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedDecrement
InterlockedIncrement
ipfx'f
iPPPPPPPPP]]achz
IsDebuggerPresent
IsWellKnownSid
iuGFGGT
iuGGGGT
!%"J!!!'
JanFebMarAprMayJunJulAugSepOctNovDec
January
j(j ^V
!!!'!!!;JPKV
JPKV!!!/
j"^SSSSS
!!!#!!!J!Y3z!qE
k_CCCC^^kkkkk^kkkkkkkkkkkkkklkllllll|||||||||}}}}}}}~}~~~~
}k_CCC_^kkkkkkkkkklklkll|||||||||}}}}}}}~}~~~~~~
}k_CCC_^kkklkkllllll||||||||}}}}}}}}}~~~~
}k_CC_^^lll||||||||}}}}}}}}~~~~~~~~
KERNEL32
kernel32.dll
KERNEL32.dll
KERNEL32.DLL
KLMKKII
}lCCCCC^^kkkkkkkkkkkkkkkklkllllll|||||||||}}}}}}}~~~~~~~~
l^CCCC^^kkkkk^kk^kkkkkkkkkkkkkkkkklllllll||||||||}}}}}}}}}~~~~~~~
}l^CCCC^^kkkkkkkkkkkkklllllll||||||||}}}}}}}}~~~~~~~~
LCMapStringA
LCMapStringW
LeaveCriticalSection
}lkHGD
lkIHFD
!L+n!!!
LoadBitmapW
LoadCursorW
LoadLibraryA
LoadLibraryW
LoadStringW
LocalAlloc
LocalFree
`local static guard'
`local static thread guard'
`local vftable'
`local vftable constructor closure'
LookupPrivilegeValueW
lstrlenW
M....................%
`managed vector constructor iterator'
`managed vector copy constructor iterator'
`managed vector destructor iterator'
MapDebugInformation
MapViewOfFile
}mCC_^k|}}}}}~~~~~~~
}m_C_ml}}~~~~~~
MessageBoxA
MessageBoxW
MHHHHHHg
Microsoft Code Signing PCA
Microsoft Code Signing PCA0
Microsoft Corporation0
Microsoft Corporation1
Microsoft Corporation1!0
Microsoft Corporation1#0!
Microsoft Root Authority
Microsoft Root Authority0
Microsoft Timestamping PCA
Microsoft Timestamping PCA0
Microsoft Time-Stamp Service0
Microsoft Visual C++ Runtime Library
~m___m|~~~
MM/dd/yy
Monday
MOPR1'0%
MoveFileExW
MoveFileW
MoveWindow
        <ms_asmv3:requestedExecutionLevel level="asInvoker" uiAccess="false"></ms_asmv3:requestedExecutionLevel>
      </ms_asmv3:requestedPrivileges></ms_asmv3:security></ms_asmv3:trustInfo></assembly>PAPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGp
mscoree.dll
MTTHTTTg
MulDiv
MultiByteToWideChar
%%%%%%%%%%%%%%%%%%%%%%.%.%%%.%%.%.%.%...N
nCipher DSE ESN:85D3-305C-5BCF1%0#
 new[]
N+"\hE
NNNNNNNNNNNNNNNNNN
nnnnnnnnnnnn```````````````__________________________________``````````````````nnnnnnn
{NNNNNNNNNNNNNNNNNNNNNNNN       -66666676666667666666661$+!
...................{NNNNNNNNNNNNNNNNNNNNNNNNNNN       -6666676766667777777777777777,!!!!! !"
- not enough space for arguments
- not enough space for environment
- not enough space for locale information
- not enough space for lowio initialization
- not enough space for _onexit/atexit table
- not enough space for stdio initialization
- not enough space for thread data
November
n_PDDDPP__________^^^^^kkkkkkkkkkkkkkkkkkkkkkkklklllll||||||||}}}}}}}}}~~~~~
nPDDPP__```_____________________________^^^mmkkkkkkkkllllllll||||||||}}}}}}}}~}~~~~~~~
nPPP``nnnnnnn```n``````````__________________________________________``````````mn||n|}}}}}}~~~~~~~
(null)
October
ole32.dll
OLEAUT32.dll
oMKMTWdsi
`omni callsig'
oopooo
OpenProcessToken
OpenSCManagerW
OpenServiceW
OpenThreadToken
operator
\$P9\$
__pascal
P\b8*-/140}
`_PDDDC_^^^kkkkkkkkkk^kk^kkkkkkkkkkkkkkkkkkklllll|||||||||}}}}}}~}~~~~~~~~
`PDDDP__`____________________^^^mkkkkkkkkkkkkkkkkklllllll||||||||}}}}}}}}~~~~~~~~~
Ph5ai.
Ph6ai.
Phf6n.
Phg6n.
Phgtn.
Phitn.
Phjtn.
Phptn.
Phv5n.
Phxtn.
Phytn.
Phztn.
`placement delete closure'
`placement delete[] closure'
Please contact the application's support team for more information.
PostMessageW
PostQuitMessage
PostThreadMessageW
`PPP_``n`n```````````__`______________________________________`````mmk|||||||}}}}}}}~}~~~~~
_PPPP_``````````_`__________________________________^^mmkkllllll|||||||||}}}}}}}~}~~~~~~~
pppppapppppppppopaaao<
PPPPPPPP
PPPPPPPPPN
pppppppppppppppppooQp
pppppppppppppppppopoRQ
ppppppppppppppppppooQr
ppppppppppppppppppoRQ
pppppppppppqpppppoo<
ppppppppppqppppppoQR
ppqppppqqqqpoqqpooQs
ppqpqpqqpqq
_PrfData_CounterClear@4
_PrfData_CounterDecrement@8
_PrfData_CounterIncrement@8
_PrfData_CounterSet@8
Program: 
<program name unknown>
__ptr64
- pure virtual function call
PVVVWVV
qqoooRQ
qqqqpqqqqqqqqoqooQr
qqqqqqq
qqqqqqqqqq
qqqqqqqqqqqq
qqqqqqqqqqqqq
qqqqqqqqqqqqqq
QQSVWd
qRRaa<r
QueryPerformanceCounter
QueryServiceStatus
QueryServiceStatusEx
[]q<yCA:653
r0p1+0)
RaiseException
raoaao
raRaoa
raRRRat
`.rdata
ReadFile
ReadProcessMemory
Redmond1
RegCloseKey
RegCreateKeyExW
RegDeleteValueW
RegEnumKeyW
RegEnumValueW
RegisterEventSourceW
RegisterWindowMessageW
RegLoadKeyW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
RegUnLoadKeyW
ReleaseDC
ReleaseMutex
ReportEventW
ResetEvent
__restrict
RevertToSelf
|RichV
rpRppppppppppppooooooooooooooooooooooo
rqaaoppopooooooooooooooooooooooooo
rqoQRaoooooooo
rqRooaoo
rRaRaRt
rRaRoa
rRRaRa
rRRRRat
rrrrrr
rRRRRRt
RRSS___
RSDS<A
rsrsrrrrrrrrr
RtlCaptureContext
RtlUnwind
runtime error 
Runtime Error!
S=4=R4s
saaoao
Saturday
`scalar deleting destructor'
SendDlgItemMessageW
September
SetCursor
SetEndOfFile
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SHELL32.dll
SHFileOperationW
SHGetFolderPathW
SHLWAPI.dll
ShowWindow
SING error
sopaRRRooaooooooooooooooooo
soRQaooooaooooooooo
SRRaaaaR<
SRRoaoaaaaQp
SRRpppaaaaaaR<
SR=RRRb
SRRRRRt
SrSSSqqSqSqqqqpqqqqppppqoopooooooooooooooooo
s[S;7|G;w
sSaaqpppppppppppppoooopoooooooooooo
ssMMKKGI
sssrrrrr
Ssssbss
SSSS__`O
^SSSSS
ssssss
sssssss
ssssssssss
sSsssssssssrrsrrrrrr
StackWalk64
__stdcall
StrFormatByteSizeW
`string'
StringFromIID
Sunday
SunMonTueWedThuFriSat
SymCleanup
SymEnumerateModules64
SymEnumerateSymbols64
SymFunctionTableAccess64
SymGetLineFromAddr64
SymGetLineFromName64
SymGetLineNext64
SymGetLinePrev64
SymGetModuleBase64
SymGetModuleInfo64
SymGetOptions
SymGetSearchPath
SymGetSymFromAddr64
SymGetSymFromName64
SymGetSymNext64
SymGetSymPrev64
SymInitialize
SymLoadModule64
SymMatchFileName
SymRegisterCallback64
SymSetOptions
SymSetSearchPath
SymUnloadModule64
======T
t0WWWWW
t78^`u	j
t^9(uZ
tb9} u
======Td
tD9(u@
TerminateProcess
t!f90t
t$(F;t$4
+t HHt
This application has requested the Runtime to terminate it in an unusual way.
__thiscall
This indicates a bug in your application.
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
!This program cannot be run in DOS mode.
Thursday
t'j(XP
< tK<	tG
TLOSS error
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
tR99u2
TranslateMessage
trpRopoooooooooooooooooooooooo
\$ t;S
t#SSUP
<+t(<-t$:
TT`````[
ttsKKGJ
ttssKKIE
tttbtbx
tttssKK]
tttttt
ttttttrttttb
tttttttttt
ttttttttttt
TTTTTTTTTTTTTT
t$<"u	3
Tuesday
;t$,v-
t$$VSS
twtsMKI
t+WWVPV
tYHHt=-
 Type Descriptor'
`typeof'
u!8F<t
u"9D$(v
`udt returning'
u&f!;f;
[[uFGFFT[
uGFGGT
uGGFGTi
uGGGFHubTGG4=EFFFEFEE00=FSHcuhhSE=EExxxxxxxxxxxxx
uGGGGT
uGGGGTi
uGGpGT
uGGSGb
uIKIIIE
- unable to initialize heap
- unable to open console device
__unaligned
- unexpected heap error
- unexpected multithread lock error
UnhandledExceptionFilter
Unknown exception
UnmapDebugInformation
UnmapViewOfFile
UnregisterClassA
UQPXY]Y[
uqSSqqTqaqqqqqpqqpppppppppooopoooooooooooooooooo
URPQQh
URRRSR_
USER32.dll
USER32.DLL
uSGqGb
uSqSqb
uSSGSb
uSSqSb
u^SSSP
uSSSqb
u`SSSS
uSSSSs
utrrsssssssrrrrrrrrrrrq
utwih?;?j1
&UYII_
uySSSS
!*!V!!!
v$;5P`C
`vbase destructor'
`vbtable'
`vcall'
`vector constructor iterator'
`vector copy constructor iterator'
`vector deleting destructor'
`vector destructor iterator'
`vector vbase constructor iterator'
`vector vbase copy constructor iterator'
VerQueryValueW
VERSION.dll
`vftable'
Vhkis.
Vhois.
Vhotn.
Vhqis.
Vhvtn.
Vhwtn.
VirtualAlloc
`virtual displacement map'
VirtualFree
VirtualQuery
v	N+D$
vSqSST
vtspGrqrqrqSqqqqqqqqqppqpqqpooppoooooo
vtspRRpppooooooooooooooooooooooooooo
vtsqSrrSrSrSSqqqqqqqqqqqqqqq
vtsttttttttttt
_VVVVV
VW_fh|{xmk@1
!!!;!*!V!Y3z!qC
Vy'**------.5:7.
WaitForSingleObject
Washington1
Wddddwvvvvvvvwvvvvvwwwwvdd
Wednesday
WgdWggWWggeu{gHHTHTHX{{{{{{{{{{{{{{{zzzzzzzzz
Whnis.
Whxis.
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
wsprintfW
Wto=,`C
wtsSrrrrrrrrrrrqrrqrqqqqqqqqqqqqqqooop
wttMLII
wvvvvvvvwvvvvvvvvwwvv
^WWWWW
WWWWWWW
\$X8\$Ht
\$X9\$
xMMMMIIE
xppwpp
xpxxxx
xSEEEaxxx
xSR==R=b
xt	G;}
xusSrrsrrrrrrrrrrr
xvttttt
xxxS==R=Rt
xxxxxx
xxxxxxxxSRRRRRt
xxxxxxxxxx
ybTTTTTy
>=Yt/j
YTTTTHTg
YTTTTTTy
yxfG=R=4RT
_^][YY
YY9\$$uk
YYu-9D$
YYuTVWh
[Z9FEFFHZZZZ
ZeHGGFGEGGFFFFFF=4EFHTcghh
z?*[FS	<
?zlDC@:51Yu
%%%%%%.%.%.%..%.........Z\.................%\NNNNNNNNNNNNNNNNNNNNNNN       -666666666766666661$&!
zzeubSS=EGGGGGGGFF==GSHcV
{{{{z{zz
{{{{z{z{z
{{{z{zzz{
{{{{{zzzzzzzz
{zzzzzzzzzz
{{{{{{{{{{zzzzzzzzzz
{{{{{{{{{{{z{z{z{zzzzzzz