Analysis Date2015-05-18 15:04:28
MD5383377f17b131f48cfe2cc1329644844
SHA15226ff494c3ce7ea30fb1cb49e30bf20b5ad03b7

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: 9aa491451e442da92424afbbe2dcf6cf sha1: 7f2250673c87bdffbc2717c510db6ce6717736ee size: 195584
Section.rdata md5: 62cc89621d469b988309eb4e72efe6dc sha1: c43520731a1e52ed403f230512538cb45dbeb198 size: 53248
Section.data md5: 30a690aabeda024e7f75ddeade4ffdad sha1: bc9b2a95727c1373f7c23d83daa7a29f72605083 size: 6656
Section.reloc md5: 148327665f3eb085360bc155dd831fd9 sha1: b9cc37fa324880715b02d29b6f4a80c1393c8d61 size: 14336
Timestamp2015-04-29 18:41:46
PackerMicrosoft Visual C++ 8
PEhash13679c4f35ebdb8e5fbeab14619f01d421909eb7
IMPhashc61cac58316679ce1ffb2a9274154a31

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates FileC:\tyhziqiyyupwnxf\l01lf9drjy2metya.exe
Creates FileC:\WINDOWS\tyhziqiyyupwnxf\yvqmoc
Creates FileC:\tyhziqiyyupwnxf\yvqmoc
Deletes FileC:\WINDOWS\tyhziqiyyupwnxf\yvqmoc
Creates ProcessC:\tyhziqiyyupwnxf\l01lf9drjy2metya.exe

Process
↳ C:\tyhziqiyyupwnxf\l01lf9drjy2metya.exe

RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\WMI Publication AutoConnect Software ➝
C:\tyhziqiyyupwnxf\jpqbgnpu.exe
Creates FileC:\tyhziqiyyupwnxf\jpqbgnpu.exe
Creates FilePIPE\lsarpc
Creates FileC:\WINDOWS\tyhziqiyyupwnxf\yvqmoc
Creates FileC:\tyhziqiyyupwnxf\rccfxmwaijrc
Creates FileC:\tyhziqiyyupwnxf\yvqmoc
Deletes FileC:\WINDOWS\tyhziqiyyupwnxf\yvqmoc
Creates ProcessC:\tyhziqiyyupwnxf\jpqbgnpu.exe
Creates ServiceModules Solutions Netlogon - C:\tyhziqiyyupwnxf\jpqbgnpu.exe

Process
↳ C:\WINDOWS\system32\svchost.exe

Process
↳ Pid 808

Process
↳ Pid 856

Process
↳ C:\WINDOWS\System32\svchost.exe

Creates FileC:\WINDOWS\system32\WBEM\Logs\wbemess.log

Process
↳ Pid 1212

Process
↳ C:\WINDOWS\system32\spoolsv.exe

Process
↳ Pid 1876

Process
↳ Pid 1136

Process
↳ C:\tyhziqiyyupwnxf\jpqbgnpu.exe

Creates Filepipe\net\NtControlPipe10
Creates FileC:\tyhziqiyyupwnxf\jpvmgue.exe
Creates FileC:\WINDOWS\tyhziqiyyupwnxf\yvqmoc
Creates File\Device\Afd\Endpoint
Creates FileC:\tyhziqiyyupwnxf\rccfxmwaijrc
Creates FileC:\tyhziqiyyupwnxf\llmpquttf
Creates FileC:\tyhziqiyyupwnxf\yvqmoc
Deletes FileC:\WINDOWS\tyhziqiyyupwnxf\yvqmoc
Creates Processrbtjmhulhis7 "c:\tyhziqiyyupwnxf\jpqbgnpu.exe"

Process
↳ C:\tyhziqiyyupwnxf\jpqbgnpu.exe

Creates FileC:\WINDOWS\tyhziqiyyupwnxf\yvqmoc
Creates FileC:\tyhziqiyyupwnxf\yvqmoc
Deletes FileC:\WINDOWS\tyhziqiyyupwnxf\yvqmoc

Process
↳ rbtjmhulhis7 "c:\tyhziqiyyupwnxf\jpqbgnpu.exe"

Creates FileC:\WINDOWS\tyhziqiyyupwnxf\yvqmoc
Creates FileC:\tyhziqiyyupwnxf\yvqmoc
Deletes FileC:\WINDOWS\tyhziqiyyupwnxf\yvqmoc

Network Details:

DNScaptainschool.net
Type: A
208.109.181.46
DNStradeschool.net
Type: A
107.20.199.124
DNSbetterschool.net
Type: A
66.147.244.119
DNSgatherschool.net
Type: A
95.211.230.75
DNSflierschool.net
Type: A
95.211.230.75
DNSbreadquestion.net
Type: A
208.91.197.241
DNSseasonquestion.net
Type: A
208.91.197.241
DNSagainsthunger.net
Type: A
184.168.221.29
DNSnightstorm.net
Type: A
31.170.162.218
DNSelectricstorm.net
Type: A
178.62.208.5
DNSdecidetherefore.net
Type: A
DNSlargeschool.net
Type: A
DNSlargewhile.net
Type: A
DNScaptainwhile.net
Type: A
DNSlargequestion.net
Type: A
DNScaptainquestion.net
Type: A
DNSlargetherefore.net
Type: A
DNScaptaintherefore.net
Type: A
DNSrecordschool.net
Type: A
DNSelectricschool.net
Type: A
DNSrecordwhile.net
Type: A
DNSelectricwhile.net
Type: A
DNSrecordquestion.net
Type: A
DNSelectricquestion.net
Type: A
DNSrecordtherefore.net
Type: A
DNSelectrictherefore.net
Type: A
DNSstreetschool.net
Type: A
DNSstreetwhile.net
Type: A
DNStradewhile.net
Type: A
DNSstreetquestion.net
Type: A
DNStradequestion.net
Type: A
DNSstreettherefore.net
Type: A
DNStradetherefore.net
Type: A
DNSbetterwhile.net
Type: A
DNSgatherwhile.net
Type: A
DNSbetterquestion.net
Type: A
DNSgatherquestion.net
Type: A
DNSbettertherefore.net
Type: A
DNSgathertherefore.net
Type: A
DNSbreadschool.net
Type: A
DNSflierwhile.net
Type: A
DNSbreadwhile.net
Type: A
DNSflierquestion.net
Type: A
DNSfliertherefore.net
Type: A
DNSbreadtherefore.net
Type: A
DNSquietschool.net
Type: A
DNSseasonschool.net
Type: A
DNSquietwhile.net
Type: A
DNSseasonwhile.net
Type: A
DNSquietquestion.net
Type: A
DNSquiettherefore.net
Type: A
DNSseasontherefore.net
Type: A
DNSdoubthunger.net
Type: A
DNSagainsttraining.net
Type: A
DNSdoubttraining.net
Type: A
DNSagainststorm.net
Type: A
DNSdoubtstorm.net
Type: A
DNSagainstthrown.net
Type: A
DNSdoubtthrown.net
Type: A
DNSnighthunger.net
Type: A
DNSdecidehunger.net
Type: A
DNSnighttraining.net
Type: A
DNSdecidetraining.net
Type: A
DNSdecidestorm.net
Type: A
DNSnightthrown.net
Type: A
DNSdecidethrown.net
Type: A
DNSlargehunger.net
Type: A
DNScaptainhunger.net
Type: A
DNSlargetraining.net
Type: A
DNScaptaintraining.net
Type: A
DNSlargestorm.net
Type: A
DNScaptainstorm.net
Type: A
DNSlargethrown.net
Type: A
DNScaptainthrown.net
Type: A
DNSrecordhunger.net
Type: A
DNSelectrichunger.net
Type: A
DNSrecordtraining.net
Type: A
DNSelectrictraining.net
Type: A
DNSrecordstorm.net
Type: A
DNSrecordthrown.net
Type: A
DNSelectricthrown.net
Type: A
DNSstreethunger.net
Type: A
DNStradehunger.net
Type: A
DNSstreettraining.net
Type: A
DNStradetraining.net
Type: A
HTTP GEThttp://captainschool.net/index.php
User-Agent:
HTTP GEThttp://tradeschool.net/index.php
User-Agent:
HTTP GEThttp://betterschool.net/index.php
User-Agent:
HTTP GEThttp://gatherschool.net/index.php
User-Agent:
HTTP GEThttp://flierschool.net/index.php
User-Agent:
HTTP GEThttp://breadquestion.net/index.php
User-Agent:
HTTP GEThttp://seasonquestion.net/index.php
User-Agent:
HTTP GEThttp://againsthunger.net/index.php
User-Agent:
HTTP GEThttp://nightstorm.net/index.php
User-Agent:
HTTP GEThttp://electricstorm.net/index.php
User-Agent:
Flows TCP192.168.1.1:1031 ➝ 208.109.181.46:80
Flows TCP192.168.1.1:1032 ➝ 107.20.199.124:80
Flows TCP192.168.1.1:1033 ➝ 66.147.244.119:80
Flows TCP192.168.1.1:1034 ➝ 95.211.230.75:80
Flows TCP192.168.1.1:1035 ➝ 95.211.230.75:80
Flows TCP192.168.1.1:1036 ➝ 208.91.197.241:80
Flows TCP192.168.1.1:1037 ➝ 208.91.197.241:80
Flows TCP192.168.1.1:1038 ➝ 184.168.221.29:80
Flows TCP192.168.1.1:1039 ➝ 31.170.162.218:80
Flows TCP192.168.1.1:1040 ➝ 178.62.208.5:80

Raw Pcap
0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2063   : close..Host: c
0x00000040 (00064)   61707461 696e7363 686f6f6c 2e6e6574   aptainschool.net
0x00000050 (00080)   0d0a0d0a                              ....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2074   : close..Host: t
0x00000040 (00064)   72616465 7363686f 6f6c2e6e 65740d0a   radeschool.net..
0x00000050 (00080)   0d0a0d0a                              ....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2062   : close..Host: b
0x00000040 (00064)   65747465 72736368 6f6f6c2e 6e65740d   etterschool.net.
0x00000050 (00080)   0a0d0a0a                              ....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2067   : close..Host: g
0x00000040 (00064)   61746865 72736368 6f6f6c2e 6e65740d   atherschool.net.
0x00000050 (00080)   0a0d0a0a                              ....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2066   : close..Host: f
0x00000040 (00064)   6c696572 7363686f 6f6c2e6e 65740d0a   lierschool.net..
0x00000050 (00080)   0d0a0a0a                              ....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2062   : close..Host: b
0x00000040 (00064)   72656164 71756573 74696f6e 2e6e6574   readquestion.net
0x00000050 (00080)   0d0a0d0a                              ....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2073   : close..Host: s
0x00000040 (00064)   6561736f 6e717565 7374696f 6e2e6e65   easonquestion.ne
0x00000050 (00080)   740d0a0d 0a                           t....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2061   : close..Host: a
0x00000040 (00064)   6761696e 73746875 6e676572 2e6e6574   gainsthunger.net
0x00000050 (00080)   0d0a0d0a 0a                           .....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a206e   : close..Host: n
0x00000040 (00064)   69676874 73746f72 6d2e6e65 740d0a0d   ightstorm.net...
0x00000050 (00080)   0a0a0d0a 0a                           .....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2065   : close..Host: e
0x00000040 (00064)   6c656374 72696373 746f726d 2e6e6574   lectricstorm.net
0x00000050 (00080)   0d0a0d0a 0a                           .....


Strings
Stl
Hv
at
Cebit
"
 
\
.
 
\
.
  
.
e
. 
00-+ .
-
-1
+-0-E-
-0
\
.
0
0
- 
000
-.
4
..
K
..D
D
u
                                 
2.exe
- abort() has been called
af-za
af-ZA
April
ar-ae
ar-AE
ar-bh
ar-BH
ar-dz
ar-DZ
ar-eg
ar-EG
ar-iq
ar-IQ
ar-jo
ar-JO
ar-kw
ar-KW
ar-lb
ar-LB
ar-ly
ar-LY
ar-ma
ar-MA
ar-om
ar-OM
ar-qa
ar-QA
ar-sa
ar-SA
ar-sy
ar-SY
ar-tn
ar-TN
ar-ye
ar-YE
- Attempt to initialize the CRT more than once.
- Attempt to use MSIL code from this assembly during native code initialization
August
az-az-cyrl
az-AZ-Cyrl
az-az-latn
az-AZ-Latn
.bat
be-by
be-BY
bg-bg
bg-BG
bn-in
bn-IN
bs-ba-latn
bs-BA-Latn
ca-es
ca-ES
Cja-JP
.cmd
.com
CONOUT$
CR6002
- CRT not initialized
cs-cz
cs-CZ
cy-gb
cy-GB
da-dk
da-DK
dddd, MMMM dd, yyyy
de-at
de-AT
December
de-ch
de-CH
de-de
de-DE
de-li
de-LI
de-lu
de-LU
div-mv
div-MV
Djjj
DOMAIN error
el-gr
el-GR
emscoree.dll
en-au
en-AU
en-bz
en-BZ
en-ca
en-CA
en-cb
en-CB
en-gb
en-GB
en-ie
en-IE
en-jm
en-JM
en-nz
en-NZ
en-ph
en-PH
en-tt
en-TT
en-us
en-US
en-za
en-ZA
en-zw
en-ZW
es-ar
es-AR
es-bo
es-BO
es-cl
es-CL
es-co
es-CO
es-cr
es-CR
es-do
es-DO
es-ec
es-EC
es-es
es-ES
es-gt
es-GT
es-hn
es-HN
es-mx
es-MX
es-ni
es-NI
es-pa
es-PA
es-pe
es-PE
es-pr
es-PR
es-py
es-PY
es-sv
es-SV
es-uy
es-UY
es-ve
es-VE
et-ee
et-EE
eu-es
eu-ES
fa-ir
fa-IR
February
fi-fi
fi-FI
- floating point support not loaded
fo-fo
fo-FO
fr-be
fr-BE
fr-ca
fr-CA
fr-ch
fr-CH
fr-fr
fr-FR
Friday
fr-lu
fr-LU
fr-mc
fr-MC
gl-es
gl-ES
gu-in
gu-IN
         (((((                  H
he-il
he-IL
HH:mm:ss
hi-in
hi-IN
hr-ba
hr-BA
hr-hr
hr-HR
hu-hu
hu-HU
hy-am
hy-AM
id-id
id-ID
- inconsistent onexit begin-end variables
is-is
is-IS
it-ch
it-CH
it-it
it-IT
ja-jp
January
jjjjj
July
June
ka-ge
ka-GE
kernel32.dll
kk-kz
kk-KZ
kn-in
kn-IN
kok-in
kok-IN
ko-kr
ko-KR
ky-kg
ky-KG
lt-lt
lt-LT
lv-lv
lv-LV
March
Microsoft Visual C++ Runtime Library
mi-nz
mi-NZ
mk-mk
mk-MK
ml-in
ml-IN
MM/dd/yy
mn-mn
mn-MN
Monday
mr-in
mr-IN
ms-bn
ms-BN
ms-my
ms-MY
mt-mt
mt-MT
nb-no
nb-NO
nl-be
nl-BE
nl-nl
nl-NL
nn-no
nn-NO
- not enough space for arguments
- not enough space for environment
- not enough space for locale information
- not enough space for lowio initialization
- not enough space for _onexit/atexit table
- not enough space for stdio initialization
- not enough space for thread data
November
ns-za
ns-ZA
(null)
October
pa-in
pa-IN
pl-pl
pl-PL
Program: 
<program name unknown>
pt-br
pt-BR
pt-pt
pt-PT
- pure virtual function call
quz-bo
quz-BO
quz-ec
quz-EC
quz-pe
quz-PE
R6008
R6009
R6010
R6016
R6017
R6018
R6019
R6024
R6025
R6026
R6027
R6028
R6030
R6031
R6032
R6033
R6034
ro-ro
ro-RO
runtime error 
Runtime Error!
ru-ru
ru-RU
sa-in
sa-IN
Saturday
se-fi
se-FI
se-no
se-NO
September
se-se
se-SE
SING error
sk-sk
sk-SK
sl-si
sl-SI
sma-no
sma-NO
sma-se
sma-SE
smj-no
smj-NO
smj-se
smj-SE
smn-fi
smn-FI
sms-fi
sms-FI
sq-al
sq-AL
sr-ba-cyrl
sr-BA-Cyrl
sr-ba-latn
sr-BA-Latn
sr-sp-cyrl
sr-SP-Cyrl
sr-sp-latn
sr-SP-Latn
Sunday
sv-fi
sv-FI
sv-se
sv-SE
sw-ke
sw-KE
syr-sy
syr-SY
ta-in
ta-IN
te-in
te-IN
This indicates a bug in your application.
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
th-th
th-TH
Thursday
TLOSS error
tn-za
tn-ZA
tr-tr
tr-TR
tt-ru
tt-RU
Tuesday
uk-ua
uk-UA
- unable to initialize heap
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
ur-pk
ur-PK
USER32.DLL
uz-uz-cyrl
uz-UZ-Cyrl
uz-uz-latn
uz-UZ-Latn
vi-vn
vi-VN
Wednesday
xh-za
xh-ZA
zh-chs
zh-CHS
zh-cht
zh-CHT
zh-cn
zh-CN
zh-hk
zh-HK
zh-mo
zh-MO
zh-sg
zh-SG
zh-tw
zh-TW
zu-za
zu-ZA
<,=]={=
                          
? ?$?,?@?`?
0 0%0.03090A0F0L0T0Y0_0g0l0r0z0
0-0?0`0t0
0 0.090E0[0c0
0!0+0A0K0c0s0
0#0:0B0J0
0&0:0B0J0}0
0*020:0B0H0a0i0
0+02070G0j0r0z0
0&020B0J0_0k0s0{0
0*080W0
0=0E0_0g0o0
%0:0G0
0(0H0h0
@0]0i0
0@0L0T0]0m0u0}0
010?0X0f0
0'101<1
0!1<1D1
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
0,131>3H3
0+131P1j1w1
0*1E1L1T1c1q1
0#1V1c1z1
02080]0t0|0
024282L2P2T2X2\2`2d2h2l2t2|2
+030D0K0_0
0$3,343<3D3L3T3\3d3l3t3|3
; ;$;(;,;0;4;8;<;@;\;`;d;h;l;p;t;
$060>0F0l0s0|0
:#:0:6:R:q:
;!;0;7;K;R;i;q;
< <(<0<8<@<H<P<X<`<h<p<x<
= =(=0=8=@=H=P=X=`=h=p=x=
> >(>0>8>@>H>P>X>`>h>p>x>
; ;(;0;8;@;H;P;X;`;h;p;x;
: :(:0:8:@:H:P:X:`:h:p:x:
='>0>8>@>H>Z>m>
< <(<0<8<@<P<W<_<k<~<
08*uYD
:&:0:::D:U:_:i:s:
=0K0U0y0
>0?m?u?
=!=)=1=
10@0c0t0z0
1!101>1K1V1h1p1x1
1%1*10181=1C1K1P1U1^1c1i1q1w1
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
1#1.1?1L1Y1^1k1r1
1&1.131F1N1U1
1$1,141<1D1L1T1\1d1l1t1|1
1%1-151=1Z1u1
1'1/161@1J1`1f1x1
1&1.161F1L1v1~1
1 1(181F1N1V1^1n1
111I1O1X1^1h1s1
1-1=1Z1h1
1*141K1
1"141N1c1
1`1n1x1
1(1O1W1k1p1}1
12272O2U2
1#2*2l2u2}2
1#2J2~2
1#4K4Y4
163`5d5h5l5p5t5x5|5o6
181@1H1v1
>1>9>A>I>V>a>
;1;9;C;I;Y;c;m;w;};
:1:9:N:^:j:w:
;1;C;U;g;y;
<1<?<E<
>)>1>F>N>V>^>j>
<1<?<H<s<
1l2t2|2
1M1g1~1
1#QNAN
1#SNAN
<(<1<y<~<
;#;*;1;Y;m;u;
2$2024282<2X2\2p2
2 20282D2L2S2[2w2~2
2-222:2I2V2~2
2*2:2?2F2S2l2
2$2,242<2D2L2T2\2d2l2t2|2
2!2)282p2v2
2$2,2A2O2d2
2-2;2Z2w2
2&252S2f2
2/262A2O2h2s2
2&262W2^2
2/272?2j2
2+2a2|2
232<2F2m2
2*3<3U3
2(363K3W3j3w3
2/393A3\3d3l3t3
2=3F3P3d3
2<3V3o3
242S2^2k2z2
252D2d2j2y2
<!<2<7<?<\<d<l<t<
=2>8><>@>D>
292F2b2h2
293E3a3
2B2T2h2u2z2
2_B"77M
:$:*:2:::B:J:V:^:
="=*=2=:=B=r=
<&<2<;<@<F<P<Z<j<z<
?"?*?2?H?P?\?z?
2I3T3c3p3x3
;2;N;\;d;l;
?2?=?Z?z?
<3<@<}<
303>3Z3l3s3
30373m3
31393A3I3
3!31393?3K3P3\3a3q3w3
3(3,3034383f3k3s3~3
3!3'313P3Y3m3u3
3	3$3.3\3o3
3$3,343<3D3L3T3\3d3l3t3|3
333B3[3
3.3>3F3O3Y3{3
3-3;3H3R3`3o3~3
3%3=3J3
3"343G3N3W3p3
3&373D3]3y3
3@3S3(4
3'4/4A4I4Q4`4o4w4
3(474W4i4q4y4
3)4C4S4z4
3$4N4q4
353=3F3\3d3t3z3
;3;8;>;J;T;k;s;
>%>->3>9>A>K>
> >->3>9>D>Z>j>o>w>
;3;A;G;N;U;t;
>#>*>3>:>B>W>s>{>
?#?+?3?;?C?S?c?k?
?+?3?;?F?^?d?o?
?#?+?3?G?d?o?
-3<h";
:-:3:;:I:P:Y:_:f:l:
?3?J?Y?f?r?z?
3K4e4r4
?3?;?M?S?m?
40?0D0L0d0q0y0
4%404E4S4u4
4"414>4F4N4i4p4v4
4#41474<4P4k4s4y4
4!414S4c4
4+434?4G4O4Z4d4s4
4$4,444<4D4L4T4\4d4l4t4|4
4'444<4D4L4W4_4
4#4+4?4L4f4
4&4?4E4p4~4
4)4<4I4
4.4=4J4P4s4
4#4/4t4y4
4-454=4D4b4u4
4-484Z4
4%4b4s4
4*4F4g4
4 535F5T5m5{5
454a4m4
4!5)515G5l5
4	5!5>5
456J6T6Z6`6f6
4'5D5U5Z5d5}5
4"5S5`5i5
474?4]4i4v4
4h5p5~5
<"<'<4<@<[<p<v<
;$;4;U;a;i;x;~;
<.=4=@=w=
:4;;;W;u;};
=$=,=4=X=`=
4Z4b4j4r4
545\5d5r5y5
545I5Q5n5|5
5%51595E5M5Y5a5i5q5
5#525:5Y5m5x5
5'535;5Z5m5|5
5&53595R5n5{5
5&545]5{6
5$5,545<5D5L5T5\5d5l5t5|5
5 5'5/565K5S5b5j5v5
5%5+5<5D5K5Y5d5n5
5+5>5`5g5
5'5/585A5I5U5]5o5z5
5%5-595
5"5)5E5]5l5
5$5A5H5f5l5q5
5+636J6h6
5(6A6O6a6h6w6
5	6J6W6f6n6v6
575?5G5Y5p5|5
:5;B;];e;w;z<
>5>=>D>o>v>
=%=+=5=;=E=M=S=c=k=u=
>)>5>:>E>O>e>
<%<-<5<?<E<S<]<g<q<
5F6O6Y6u6
=-=5===P=V=a=
5U5a5l6
=!=-=5=W=v=
61696A6c6z6
626:6F6L6n6
62787<7@7D7
6&606<6B6W6_6y6
6$616=6G6O6W6_6
6+636G6Z6a6m6}6
6#6+636?6G6T6_6l6t6|6
6$6,646<6D6L6T6\6d6l6t6|6
6!6.656
6 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6
666>6L6T6n6v6~6
6$6(686<6D6\6l6p6
6#6<6C6K6P6T6X6
6$6,6Z6
6$676K6S6f6s6
6)6f6t6
6$6I6P6
6#737L7]7k7
6'757;7A7
6#7(71767?7D7Q7
6&7C7b7
6A6F6M6\6b6r6
;(;6;>;F;N;Z;r;
?6?;?h?
;.<6<K<^<w<
:(:6:O:]:t:
6P6V6[6b6h6t6y6~6
728N8o8
767A7L7j7
7 737;7H7P7_7g7s7
7#737C7S7[7g7
7,747<7H7T7|7
7%7*727:7J7X7g7
7$7,747
7$7,747<7D7L7T7\7d7l7t7|7
7 7$7(707H7L7d7t7x7
7 7$7(7,7074787<7@7D7H7L7P7T7X7\7`7d7h7l7p7t7x7|7
7$7*777R7]7
7'7/7=7L7
7!7(7A7M7d7|7
7%7-7A7N7S7Y7_7g7
7#7)7A7W7v7
7'7>7I7x7
7$7<7T7l7
7(80888@8H8S8_8k8
7(808C8N8W8w8
788o8|8
7 8+8Q8W8i8
7/8j8t8
?$?)?/?7?<?B?J?O?U?]?b?h?p?u?{?
>'>/>7><>D>V>
>/>7>?>F>
;/<7<?<G<O<W<f<_=
='=/=7=?=G=O=y=
;,;7;K;
?7?M?m?
;)<7<P<Z<b<j<r<z<
7S7[7e7o7|7
='=/=7=?=Z=u=z=
80<0@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0|0
808>8J8`8y8
8+838=8J8R8Z8f8n8z8
8-858K8b8j8r8z8
8 8(80888@8H8P8X8`8h8p8x8
8'8/878<8D8L8Y8i8|8
8'8/878?8K8j8
8$8(888<8@8D8L8d8t8x8
8 8-8<8I8c8k8
8'8<8F8_8i8v8
8!8:8H8a8o8
8)898g8
8/8a8h8l8p8t8x8|8
8@8J8y8
8'8S8[8e8m8z8
8	9 9-959?9J9
8#9@9G9P9]9c9p9w9
8#9@9Q9r9w9
8 9h9w9
8A9I9S9[9`9h9|9
>#>)>8>B>H>Z>l>
< <8<@<H<P<_<l<y<
:$:8:@:H:P:T:X:`:t:
8J8e8r8
?&?8?J?Z?b?j?s?{?
<!<8<><N<[<c<r<
;8<O<W<
8P8X8q8w8
8P9W9^9e9}9
8X9c9k9x9
<8<X<x<
;8;X;x;
909P9p9
90:D:W:k:
939;9C9K9Y9q9
939L9T9
949?9Q9Z9d9i9
9,:4:Q:Y:a:i:q:
959=9E9M9X9f9
9 9(90989@9H9P9X9`9h9p9x9
9 9$94989<9D9\9
9%9-959<9N9Z9_9{9
9'9:9@9[9~9
9!9&9.9G9M9j9
9%9-9?9K9S9Z9b9r9
9 9.9G9N9o9
9)9>9L9T9c9k9{9
9 9,9Z9a9i9
9*9C9O9
9$9d9o9
9'9E9a9i9n9
9":C:_:g:w:
>9>G>^>n>y>
9i:q:y:
>9>T>`>
9xt^\af%8
9Y:_:g:l:
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
address family not supported
address_family_not_supported
address in use
address_in_use
address not available
address_not_available
?/?a?h?l?p?t?x?|?
?$?A?I?Q?v?~?
:%:A:j:
already connected
already_connected
<#<A<O<\<y<
;A<Q<a<a?
AreFileApisANSI
argument list too long
argument out of domain
<at-<rt"<wt
August
.?AVbad_alloc@std@@
.?AVbad_exception@std@@
.?AVerror_category@std@@
.?AVexception@std@@
.?AV_Generic_error_category@std@@
.?AV_Iostream_error_category@std@@
.?AVlength_error@std@@
.?AVlogic_error@std@@
.?AVout_of_range@std@@
.?AV_System_error_category@std@@
.?AVtype_info@@
bad address
bad_address
bad allocation
bad exception
bad file descriptor
bad_file_descriptor
bad message
 Base Class Array'
 Base Class Descriptor at (
__based(
BeginPaint
>B?I?^?f?m?u?
:.:B:N:Y:c:j:r:x:~:
;&;:;B;Q;Y;n;
broken pipe
bWWWWj
?:?B?X?n?
CallWindowProcA
(cav axb qbp dcesu ism dphif ufil lcc xeod opzdadlpun nlpazapsid rfbuccnu bnaqe fub orpadep kfhohjvul civbuhfc bzaqack bdxeebsobu cuuutmea zufuloi vnuceb cgpaluwn jgbustjipa suydez xpxubfnajb ejbbuaiavm mns ienekugid rplevi cafi bepgiab ctsertqonc adjic vjonejnra pzjijy qljuluobn tgdaf frfijocra zgfogxo dfcoujxs rdwiprooz ldfa himfazzo dlpameho gfbomgbic cqdill mzd plugajgau unypazsbuj nnded jjceu trsiuuszo cudze cvnodxy cdsoj lcaxeol klagama omu aciwpoi eun fdtupdz alucc beeadu ctfoa zcpejecraf gdrofhu seuglefnsi wep rntoem wlja stdarijra ggkunbife ejueg tpje kjezotsne sfununsteo sfgafv licpumrcu siomla gpuvilche bflalcna jbsab sfgon svge tnu lbeju mzsufi axmlabok nhjuhl lebbajo grgikbdim fjgo ubxaex
__cdecl
CheckDlgButton
=<=C=`=h=p=x=~=
<)=C=i=
=#=<=C=K=P=T=X=
<!<c<k<r<z<
 Class Hierarchy Descriptor'
CloseHandle
CloseThreadpoolTimer
CloseThreadpoolWait
__clrcall
CompareStringEx
CompareStringW
 Complete Object Locator'
connection aborted
connection_aborted
connection already in progress
connection_already_in_progress
connection refused
connection_refused
connection reset
connection_reset
`copy constructor closure'
CorExitProcess
CreateEventExW
CreateFile2
CreateFileW
CreateSemaphoreExW
CreateSymbolicLinkW
CreateThread
CreateThreadpoolTimer
CreateThreadpoolWait
cross device link
>C>S>[>c>w>
='=C=U=f=
D0H0L0P0T0X0t0|0
D1J1p1v1
@.data
dddd, MMMM dd, yyyy
December
DecodePointer
`default constructor closure'
 delete
 delete[]
DeleteCriticalSection
DeleteFileA
destination address required
destination_address_required
device or resource busy
directory not empty
:!:):D:J:T:f:k:s:
=D>J>V>
>/?<?D?K?R?c?n?
>:>D>k>s>{>
<"<.<<<D<L<
;,;<;d;l;u;
dNLRfN/pfN
DrawTextA
dwloczbuml ngjelp ndzemgj ocxxe xolg wnogixzsol rlli jfb bnjiy rdudu pfmola pnvinjd zfniwljiu rfvedlm oud xnsejz jefita touxp kud xbvim bkm poiufsa curba edplelpgo lsdomjmab uqcbalmvax acgijevgoi geholalbw injgazbg smpuzfboct amj ncyizdcen pgnu ndlie iffvouc covdudj yto ltfarfzev amcbof nfj ndqapdbi ofdr zxfuoj tajaaib flbecml gou yibaji bhc ngtajtnum cnbulza bptimns jhfojjji hjguzg crviiq mpmuvd vgelusf fcufepv svpuekvp offbitoxpi zwmikmoc agrluvcce iufilpuca ftbefdpidg jrdomeemqe rpbijwjo tfkodplesu mfmi knjahfneb hbt pngerl mpmi umdxoqdeu fcbeblwa ubdveipph lebcooggva chseavgkiv cwc fhja brut vlfuliwujo fzpaplnu dyru ubsfus srdubusjop basfuqndai fbpucmjoq bsayamscep gnmolpS?{`
`dynamic atexit destructor for '
`dynamic initializer for '
>#?.?e?
__eabi
`eh vector constructor iterator'
`eh vector copy constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`eh vector vbase copy constructor iterator'
EnableWindow
EncodePointer
EndDialog
EndPaint
EnterCriticalSection
EnumSystemLocalesEx
=;=E=n=v=
<#===E=P=g=
;E;R;Z;b;j;q;
executable format error
ExitProcess
__fastcall
February
file exists
filename too long
filename_too_long
FileTimeToLocalFileTime
FileTimeToSystemTime
file too large
FindClose
FindFirstFileExW
FindResourceA
;&<+<F<K<m<
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
<-=F=L=T=v=}=
FlushFileBuffers
FlushProcessWriteBuffers
<>=F=N=U=]=n=
FreeEnvironmentStringsW
FreeLibraryWhenCallbackReturns
Friday
fulcale bjpijl nbji otdsisll nopeqonocn fagfasb dpib umyupof rgce vldocp uoabgl rcsuvpgo qmmo qjj vuozm rlpu gxloshremf eprguthgi sivloflt gffa alclunzsup rotyityas srlet znbavoszaf derz gio njfejj zswiuuduc zzpe meh zcbicmfos fucaal soiddarup fbparcaaf bclems jsz ojjdagrb pacbinlina jmsegkj seqcud ickpa lcgeael ulmc vtzendguh vebmaa jwqood wdtudp coiqh vbtaoegz gllafjme sjmuvdgufs judqudloma mczitr swdessuzo lgdeo okiisna yspil xmtoof epmj emgzibob kdjokefs ipz acep gnjarl tynekflu jfdijgzaip gploipz dmket vcposy ncpodtsa mzziqzli gcvov jjmun sbl nosc tqjosino eok fagloz zcev vifue rjaleijpla ouhphipae ocbdidt atgriz nnfujucz l
function not supported
G0Z0n0v0~0
:G:]:b:u:
GDI32.dll
generic
GetACP
GetActiveWindow
GetBkColor
GetClipRgn
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetCPInfo
GetCurrentDirectoryW
GetCurrentObject
GetCurrentPackageId
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentThreadId
GetCursor
GetDateFormatEx
GetDCBrushColor
GetDCPenColor
GetDeviceCaps
GetDialogBaseUnits
GetDlgItem
GetDlgItemInt
GetDriveTypeA
GetDriveTypeW
GetEnvironmentStringsW
GetFileInformationByHandle
GetFileInformationByHandleExW
GetFileType
GetFontUnicodeRanges
GetForegroundWindow
GetFullPathNameW
GetGraphicsMode
GetInputState
GetKeyboardType
GetLastActivePopup
GetLastError
GetLocaleInfoEx
GetLogicalProcessorInformation
GetMapMode
GetMenu
GetMenuContextHelpId
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMetaRgn
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetNearestColor
GetObjectType
GetOEMCP
GetPolyFillMode
GetProcAddress
GetProcessHeap
GetProcessWindowStation
GetPropA
GetQueueStatus
GetScrollPos
GetStartupInfoW
GetStdHandle
GetStretchBltMode
GetStringTypeW
GetSystemTimeAsFileTime
GetTextCharacterExtra
GetTextColor
GetTickCount
GetTickCount64
GetTimeFormatEx
GetTimeZoneInformation
GetUserDefaultLocaleName
GetUserObjectInformationW
GetVersion
GetWindowContextHelpId
GetWindowDC
GetWindowLongA
GlobalAlloc
GlobalFlags
GlobalHandle
GlobalSize
;G;T;m;
;/;;;G;T;o;{;
)"#Gu#
<%<+<G<W<_<g<t<
`h````
h2l2p2t2x2|2
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
=(=H=h=
`h`hhh
HH:mm:ss
HHtVHHt
HicowE KF
HNg"NN
host unreachable
host_unreachable
> >(>,>H>P>T>l>p>
;,;@;H;P;V;c;j;q;y;
<<<H<T<
Ht+Ht$Ht
_hypot
identifier removed
illegal byte sequence
inappropriate io control operation
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
interrupted
invalid argument
invalid_argument
invalid seek
invalid string position
io error
iostream
iostream stream error
:,:I:P:Z:_:g:|:
is a directory
isajsumvra bfn ugzt uplcabjm wnzue fbpasabi bqicabjg iklbue bmvohid dpr fvd bwwus bgtaiu rlvaegkfaa jagefevd crcemny lpsioco gnsajeapdu vilegif yvfueicn fssu yjuoeki jaicj lseboft obsma csihiir vukxaxtlon luiy gludooxju dithebtcu eyksa spliwnvobe tvesall fstudrp spjotogfe dny pfqovepza uoj iuikyumoif snmejgvei lcnadlt jalragasgo bcjasdgesc juwfugcup mnnaad cmifac iavgdo onmgey nnj zjnokfm klcir xdue rjifaymjoo zjfuspridd zbsuluh dmgeileed asnegamaf qzgat csladt pgleugbba djedajzoj mpeera mgn pmgagggog deift rfazocz sbpurvza bizasaggoo mmavolqotu beajbiirpo uussca gbocuzgj gys cjraa lfqouff jdjugpn jzgiocdag jasxolkge wfruja etcfo ijmvie uaqyn uelq jpgorcf dfnojbom jcenurslab pesqiuuj tpbabcge mba fcfop mciicigj edeqtold wfug szcu vlmugalyo rkveb pisenujr cgdesifn dbsifffagc esczabon tijjocvlef ocsn
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocaleName
IsWindowEnabled
<itx<o
::;I;W;b;w;
=>=I=X=u=
jA[jZZ+
JanFebMarAprMayJunJulAugSepOctNovDec
January
@jd_u	
j/_j\[f;
j@j _W
=	>[>j>p>
-\j&T=
>&?=?J?V?f?l?}?
>J?X?b?
> >'>J>X>^>h>p>z>
=/===J=Y=t=
K}^5m>
\|k-AD	|
} kE$<
KERNEL32.dll
kfxzuf mleqa mpv drd rfbevmmup gujlecsg uza blziat ejrqeuvr ejjm vlbanp aidudi roiue gxo vimn vfdoe gsnepsvag mmoson vbdoafdece kojcum nuxdo bibearifua mjbuamm dfb wqm gfgipgjaw dsd mqojib bucgucj szg emadabac mjsovl owtv rdnosnged ddlud ebt vaaobezi jqiaf tdbejdol besqam cgc ggidad csumibtu eoociubut nadac ilspejxtu ftceg icfjal taoodu pms gqmeljlou mlbari fam izzeg bjbeg pabxizjbug flruumaw socenil bsveslpom iakdc dvtucin gcloczdubj vgg ljdegb qfn bffeii qjnefcze ngfe fwaji pjbaumm nppims cms vwp tgcicawaow lhtuljnaa jiedci vsidilos fba agpc hdfa snnotmeep esaeu mee sudleg eepgvez gnxeisjfe cluecabzj cpora lilvugt nsweddxus nix ujbufinscu edp vitpaywc rzgejj xgizeagz kroto ahrgibdoge oagems pjvuum jjobiceib srgaf ovi nehnak mni zpn zmt lusekeptlo wnwabkc hmh rmxerf e>8
=#=+=;=K=S=[=c=k=s=
=K>T>`?i?
:#;K;Y;
<(<:<L<^<
L2P2T2X2\2`2d2h2l2p2t2x2
LCMapStringEx
LCMapStringW
LeaveCriticalSection
=L>e>t>
lnjobdba bvejaqlizo fimpothge qogboiros ebrleddve bbsenu qetlei tamnunp mjmev pdjucsove bbducerop iomjp pftoosfi ljgam raa uanbtuio nsbuvzces clpu ixgab cflocdketg fbekuufno fgligfwail rmyo spujag nnrubh ilpnibf nis ecsbam pshe bfmupcre eeyf qcafebqli maode uzde elacba blmecpd zjpegib rjbizjrafo midda qepg erccogjz cqwese qgeg asbjudebt yetupatvp tslidpca pszowdlec sojtoczrea uhlrojg brnunabro hmbog ghfesxd igeojja bsquuogrdu icgcu jadca pghuggjo jmdoeorm jgludpfuu vitvubrb depulay udn chxosrkavg csretlwojg caeouyjie sznol basegefdqi joqutudvx nwfoyag ldjundp wgje bbruu tbo jdhuor sevpudduh jujcea mbbi tau igzafoefp jfimoi jdiahelup bvfi zewolueg pcodolse jicji rptinjuic anun mzhea dnlor imxodugjr ephe wflorifui ivjun jmwejw ftjouluifz b
LoadIconA
LoadLibraryExW
LoadResource
LocalFlags
`local static guard'
`local static thread guard'
`local vftable'
`local vftable constructor closure'
lvpa hhp lgn segdapnbi zcgahme sdduuapf nvnelecda brquci eitdgaumjs gnovabfmo suzaf qum rbzufv stv ahjtoce rzpoynlujr jevsuhjgud jcutio levi mgalipxjeg ugrriegn bnjuyur ugajseb upedbexmnu vanmui gsavijdlae lgt dfur ypl gigsefumb prdacm xgboogd zdmubsduu ufgubuiof axi xdujiocjeb odzejodew ijnsawifmo tbb sducezug ntifueamfr vgisijl vglejjoev sclaq jtlujjeg zumra enmaney lscipp bnwudveb tlui ecxl buccuuf wpeb mivbinul nbsaqdl iskyio ruc xnfium iorx tygurw cgodeji oeze jemcomsel ggni nuupsacnun czherlsovb sii jfdelcbiml fvuza vlo avcigahjae rlgiljvud mddivrfea zgdukmpe nzzam icqfou gab qmpozmim bibimimz zvjum gzcufnlu ejpgoc ilgodul rilpaa zcgome ownnui ngua olirtar dsfat dwvozg njs neq jucea sim zxoceppni oatzvaqep pucd egj zfgaa ubialfuub ujrfufcbo d
lzacr udcdiunmco fdhaaymev ozjpiih dglalbnol ggwagyp gfyiu gja bwgooug rylu thd ygbeylla nsgecs jrdoziia nblibougo zcm lmoj sbewewj icdbupzi umjf njyicgbos qdsalqfer ocj feb tppivg bxgats cupsinx igvdoe szrugpf yldof trrewjqerk fgoibopofi ordsawnd tlfo jzpo ifs mcwag gofrafcjed pgsoahvil liupeun rgs lsciejjzo dtvew imlpocfuzu pyom bdey nblivoamj ebspawb qpnilg ocuqgoadc jkiabalea ceybam psvelw odmx golDs
`managed vector constructor iterator'
`managed vector copy constructor iterator'
`managed vector destructor iterator'
map/set<T> too long
MessageBoxW
message size
message_size
MM/dd/yy
Monday
MoveFileA
MoveWindow
;#;M;R;{;
 M[T3Mt]3M
MultiByteToWideChar
;N2,=N
network down
network_down
network reset
network_reset
network unreachable
network_unreachable
 new[]
_nextafter
`NIEdN
"NjL"Ne
no buffer space
no_buffer_space
no child process
no link
no lock available
no message
no message available
no protocol option
no_protocol_option
no space on device
no stream resources
no such device
no such device or address
no such file or directory
no such process
not a directory
not a socket
not_a_socket
not a stream
not connected
not_connected
not enough memory
not supported
November
N'?p5\
;n;t;x;};
(null)
)N?U*N
='=.=[=n=w=
October
ocuvdal cojde aot ygcec fuhc mjfefbrep cwfa bnfofeqfon slugern gucgihglag gab fcs pfnafx uczt mcufudnu fgc ijtdetl vhvaapnfi ldgu pvp alpji pwje kup mss dbfofs txy slleibl dbinod rnjaxd utinjem glq dute lanfonskaz yfp fdt syofil ddl ovjlaqa ucec ugfx hemnuoa zofbepfr eafngewcm dpgudbpa lye dfqi wajenivj wjgaindo zjjujlopo cftasrhang bdo lxfuiolda znmij tpepabfm ujciz zsr alg vavdujo cnt fcsaipg mzrouit our pymie dcpeunpmei bgoj ukvoea pbtidfkiu qlpigfmi gpcakok iqz nbt lvz dbmupmm bftegtide ihliticcn fdgat vmof fia ubsf maffoqt zsiuil fcpoi dfafa tzfuobjsec btraeo bvvibpzakd uldveefmr rgmizsvee dvmesn jlus elbs ceidtob fnciojbbi zgbutmnamu qoljesi bipl yrlaff ugksuaz dusajeg cstuv cmuma ljfabl eutppeux urdsar ownsic zgforzex acukse yvewiwjoj nmjop gqefubb ulexlaudm zmtizrce laddamddef bzin dlpub tmr vbsosiell mdtigv
:?:O:j:w:
=#>+>O>m>
`omni callsig'
op2M(G
operation canceled
operation in progress
operation_in_progress
operation not permitted
operation not supported
operation_not_supported
operation would block
operation_would_block
operator
OutputDebugStringW
owner dead
=/=O=W=p=x=
>O?W?x?
__pascal
PeekNamedPipe
permission denied
permission_denied
~pjCXf
`placement delete closure'
`placement delete[] closure'
PostMessageA
PP9E u
protocol error
protocol not supported
protocol_not_supported
PSSSSV
,ptn%?
__ptr64
PWWWWV
=&=P=X=s=
;';,;:;Q;g;q;
< =Q=i=
QQSVWd
QueryPerformanceCounter
<q<z<W=b=u=
r0ymc!k
RaiseException
rbeuocopc vkluecples jmg ibkxiiq xawn vlbeufba lacse gqf npiemada mcpiedl bnsimf fusjob tdmejfw ylsigccizv ucljauuqgm jdpiiiuf cibdoias julbeqocwu fsduisfd zcmecpnam oaucdp tvtembcua agdsi ljod cwrazzzoj ucuohcicle bclib scnetbxa vnigu aalj nchalj aeo uffe lxte ovo grbilmyup aotnjujh tndii zufbesosv blhogjfuuh lncatj akjbopcmic omlkum idllannmao lgqajlc empocels jnsivdfi mnraelfpo sotbifjyuj vtdivfwupf cdmiil tif gpamaqt sdi lodnidcbun pftid lbob jouzilio rwh nsgeljjaa elaoyjec trilacw jzyebg ndadakbmif cfjel nijhuf nyc cai opvobelo djl uacpmeoal mfi stbuuj hnsi gcabuagr gccu dgjedzwog njju japdaje dlsi zsma ecqtuai mewx frmilah mbxecnfak dpj btcigg beouevmea tgmezx mlgotr
`.rdata
ReadConsoleW
ReadFile
read only file system
.reloc
RemovePropA
resource deadlock would occur
resource unavailable try again
__restrict
restrict(
result out of range
Rf+D7e
RtlUnwind
Saturday
`scalar deleting destructor'
SendMessageA
September
SetDefaultDllDirectories
SetDlgItemTextA
SetEndOfFile
SetEnvironmentVariableA
SetFileInformationByHandleW
SetFilePointer
SetFilePointerEx
SetFocus
SetLastError
SetPixel
SetStdHandle
SetTextCharacterExtra
SetThreadpoolTimer
SetThreadpoolWait
SetThreadStackGuarantee
SetUnhandledExceptionFilter
SetWindowTextA
ShowWindow
SizeofResource
S	=LY=
SSPQSW
state not recoverable
__stdcall
stream timeout
`string'
string too long
Sunday
SunMonTueWedThuFriSat
,SVWj0X
SVWjA_jZ+
system
SystemTimeToTzSpecificLocalTime
T0t0:1O1|1
~';_t|%3
< t8<	t4
;T<\<d<l<t<|<
TerminateProcess
text file busy
t!=fff
;T<\<g<s<~<
+t"HHt
tHHt*Ht#
__thiscall
!This program cannot be run in DOS mode.
Thursday
timed out
timed_out
tjjeoflju aeklucudd nbqu fgtueflgal jtfec feiidb ogifgici yyzinjsogm ekipbewwl bwuolignro menboo filtizme pcyoq zei xfpejg sbo ajz bcilesfubu galcidd nasvo cocnabg tmgadel ndbilcfuu ndaluysz gkyaa dqboltga bsiaj izhu pjsiu yli fgdipobw bklonh cdne jenaxutql dssubdiva vdseggemua nxb lbfizzsec pag jrnetg nirw oworob auugjm esfesaa mmhamctaei nsmu nfrafgjafx cidpon mltutbd fmsetwtig cpginsouru wttefbdaql cotlijznok rfyagmb xir ouctcud moocniiewo lbe kqr cfunilvc guc vohsal cdoq mdlatg dhkoeco dcc rficifnco prfer ypfeigws spt ttti snpole yxxoghgip hjnujjka dueniboog xulhimqp zgfukam gacsucdhun onblef ucat grapul lplagmz apgm siod uretgimm f
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
too many files open
too_many_files_open
too many files open in system
too many links
too many symbolic link levels
TpGG_O
Tuesday
;t$,v-
 Type Descriptor'
`typeof'
uaPPPS
?:uBGW
uBjAYjZ+
ucgduye ngiapoyr fgjohhutu hie jbmob gqgia cikijeslju iiyobpac gal leyje efajpechfa jzedepni mho gidxe phcetlw mhiipaszmu sts jaxuajutnf fsligu lmsigjca ftlabjad jmfiwbw iblyannj kljib mtooegulro llvibaev neecfedu pmdarvja cnhefots irfz bedva zao asqa ess lcdodvsoup ddjuuu lciz rtbubf fwpesov lofeot pldamjxef bnbo yiug lqducowjam btzaplfo ffri dnpedftiud bfbiaogoj dzhojodje rvio isgage ldbany fkalobzb faddoswfuz gjfadplam ideuvioac sldiogvr vciad jdpasmgon joetbug ttanabmca exdt kzgacxb dgfenz mzgabursu bmkav eigxka umpuie isvb rogpedzzu acpgof sddel jqnogswozn teqzoj lglal sklejf sjnudbt unguyifgc pmkufcwo jdmesdmeo jrlagnc pucjau fbxo vrpatlbo nrzarall dur loplub oge jdmilitj cusj oiprlus bddoghseo lnfizh ogqy osaim bcutuicj gopgouejt acln eczzaqbm nrcojjxad ckol uldno djne mloinua lfpuqmaia iabtroknc 
`udt returning'
__unaligned
UnhandledExceptionFilter
UNICODE
unknown error
Unknown exception
UpdateColors
UQPXY]Y[
URPQQh
USER32.dll
UTF-16LE
u:y:}:
=+=<=v=
:V8-%+
value too large
`vbase destructor'
`vbtable'
`vcall'
__vectorcall
`vector constructor iterator'
`vector copy constructor iterator'
`vector deleting destructor'
`vector destructor iterator'
vector<T> too long
`vector vbase constructor iterator'
`vector vbase copy constructor iterator'
-,V\{f
`vftable'
`virtual displacement map'
v	N+D$
WaitForThreadpoolTimerCallbacks
Wednesday
WideCharToMultiByte
WindowFromDC
Wj0XPV
wJ@`b)X
WriteConsoleW
WriteFile
wrong protocol type
wrong_protocol_type
w>uYjD
>X>`>k>w>
xppwpp
xpxxxx
>Y>b>x>
Yx[xJlB
YY_^[]
Z&`c]`