Analysis Date | 2014-10-09 11:39:30 |
---|---|
MD5 | 387c2f5a6e30aec48b3976203b01218f |
SHA1 | 56c6eb8848f93d5800e3cde0647136208f775094 |
Static Details:
Runtime Details:
Screenshot | ![]() |
---|
Process
↳ C:\malware.exe
Creates File | C:\Documents and Settings\Administrator\Local Settings\Temp\errvzqzz1lhvx0dzxaimvgo.exe |
---|---|
Creates File | C:\WINDOWS\system32\nfneisac\tst |
Creates Process | C:\Documents and Settings\Administrator\Local Settings\Temp\errvzqzz1lhvx0dzxaimvgo.exe |
Process
↳ C:\Documents and Settings\Administrator\Local Settings\Temp\errvzqzz1lhvx0dzxaimvgo.exe
Registry | HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Layer Video SPP Receiver Link-Layer Removal ➝ C:\WINDOWS\system32\csfuyufnnz.exe |
---|---|
Creates File | C:\WINDOWS\system32\drivers\etc\hosts |
Creates File | C:\WINDOWS\system32\csfuyufnnz.exe |
Creates File | C:\WINDOWS\system32\nfneisac\lck |
Creates File | C:\WINDOWS\system32\nfneisac\tst |
Creates File | C:\WINDOWS\system32\nfneisac\etc |
Deletes File | C:\WINDOWS\system32\\drivers\etc\hosts |
Creates Process | C:\WINDOWS\system32\csfuyufnnz.exe |
Creates Service | Procedure Information Client IPsec Helper - C:\WINDOWS\system32\csfuyufnnz.exe |
Process
↳ Pid 816
Process
↳ Pid 864
Process
↳ C:\WINDOWS\System32\svchost.exe
Registry | HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\CIMOM\List of event-active namespaces ➝ NULL |
---|---|
Creates File | PIPE\lsarpc |
Creates File | \Device\Afd\Endpoint |
Creates File | C:\WINDOWS\system32\WBEM\Repository\$WinMgmt.CFG |
Creates File | C:\WINDOWS\system32\WBEM\Logs\wbemess.log |
Process
↳ Pid 1124
Process
↳ Pid 1220
Process
↳ C:\WINDOWS\system32\spoolsv.exe
Process
↳ Pid 1160
Process
↳ C:\WINDOWS\system32\csfuyufnnz.exe
Registry | HKEY_LOCAL_MACHINE\Software\Microsoft\Security Center\FirewallDisableNotify ➝ 1 |
---|---|
Creates File | C:\WINDOWS\system32\nfneisac\rng |
Creates File | C:\WINDOWS\system32\lrclycie.exe |
Creates File | C:\WINDOWS\TEMP\errvzqzz1rk7x0d.exe |
Creates File | C:\WINDOWS\system32\nfneisac\cfg |
Creates File | C:\WINDOWS\system32\nfneisac\lck |
Creates File | C:\WINDOWS\system32\nfneisac\run |
Creates File | pipe\net\NtControlPipe10 |
Creates File | \Device\Afd\Endpoint |
Creates File | C:\WINDOWS\system32\nfneisac\tst |
Creates Process | WATCHDOGPROC "c:\windows\system32\csfuyufnnz.exe" |
Creates Process | C:\WINDOWS\TEMP\errvzqzz1rk7x0d.exe -r 27492 tcp |
Process
↳ C:\WINDOWS\system32\csfuyufnnz.exe
Creates File | C:\WINDOWS\system32\nfneisac\tst |
---|
Process
↳ WATCHDOGPROC "c:\windows\system32\csfuyufnnz.exe"
Creates File | C:\WINDOWS\system32\nfneisac\tst |
---|
Process
↳ C:\WINDOWS\TEMP\errvzqzz1rk7x0d.exe -r 27492 tcp
Creates File | \Device\Afd\Endpoint |
---|---|
Winsock DNS | 239.255.255.250 |
Network Details:
DNS | stickmarch.net Type: A 69.195.129.70 |
---|---|
DNS | tablefruit.net Type: A 69.195.129.70 |
DNS | mightglossary.net Type: A 208.91.197.241 |
DNS | requireneither.net Type: A 208.91.197.241 |
DNS | gentlefriend.net Type: A 208.91.197.241 |
DNS | glasshealth.net Type: A 208.91.197.241 |
DNS | rememberpaint.net Type: A 208.91.197.241 |
DNS | throughcountry.net Type: A 208.91.197.241 |
DNS | rockfeel.net Type: A 211.196.153.94 |
DNS | humanguide.net Type: A 208.91.197.54 |
DNS | hairguide.net Type: A 69.172.201.208 |
DNS | yardguide.net Type: A 64.34.157.180 |
DNS | musicguide.net Type: A 69.172.201.208 |
DNS | wishguide.net Type: A 87.106.117.110 |
DNS | rockname.net Type: A 207.195.223.7 |
DNS | rockguide.net Type: A 65.182.100.15 |
DNS | necessarydress.net Type: A |
DNS | littleappear.net Type: A |
DNS | septemberfeel.net Type: A |
DNS | hanghigh.net Type: A |
DNS | septemberhigh.net Type: A |
DNS | hangcolor.net Type: A |
DNS | septembercolor.net Type: A |
DNS | hangonly.net Type: A |
DNS | septemberonly.net Type: A |
DNS | joinfeel.net Type: A |
DNS | wishfeel.net Type: A |
DNS | joinhigh.net Type: A |
DNS | wishhigh.net Type: A |
DNS | joincolor.net Type: A |
DNS | wishcolor.net Type: A |
DNS | joinonly.net Type: A |
DNS | wishonly.net Type: A |
DNS | deadfeel.net Type: A |
DNS | deadhigh.net Type: A |
DNS | rockhigh.net Type: A |
DNS | deadcolor.net Type: A |
DNS | rockcolor.net Type: A |
DNS | deadonly.net Type: A |
DNS | rockonly.net Type: A |
DNS | wrongfeel.net Type: A |
DNS | madefeel.net Type: A |
DNS | wronghigh.net Type: A |
DNS | madehigh.net Type: A |
DNS | wrongcolor.net Type: A |
DNS | madecolor.net Type: A |
DNS | wrongonly.net Type: A |
DNS | madeonly.net Type: A |
DNS | humanhalf.net Type: A |
DNS | hairhalf.net Type: A |
DNS | humanname.net Type: A |
DNS | hairname.net Type: A |
DNS | humanlate.net Type: A |
DNS | hairlate.net Type: A |
DNS | yardhalf.net Type: A |
DNS | musichalf.net Type: A |
DNS | yardname.net Type: A |
DNS | musicname.net Type: A |
DNS | yardlate.net Type: A |
DNS | musiclate.net Type: A |
DNS | wenthalf.net Type: A |
DNS | spendhalf.net Type: A |
DNS | wentname.net Type: A |
DNS | spendname.net Type: A |
DNS | wentguide.net Type: A |
DNS | spendguide.net Type: A |
DNS | wentlate.net Type: A |
DNS | spendlate.net Type: A |
DNS | fronthalf.net Type: A |
DNS | offerhalf.net Type: A |
DNS | frontname.net Type: A |
DNS | offername.net Type: A |
DNS | frontguide.net Type: A |
DNS | offerguide.net Type: A |
DNS | frontlate.net Type: A |
DNS | offerlate.net Type: A |
DNS | hanghalf.net Type: A |
DNS | septemberhalf.net Type: A |
DNS | hangname.net Type: A |
DNS | septembername.net Type: A |
DNS | hangguide.net Type: A |
DNS | septemberguide.net Type: A |
DNS | hanglate.net Type: A |
DNS | septemberlate.net Type: A |
DNS | joinhalf.net Type: A |
DNS | wishhalf.net Type: A |
DNS | joinname.net Type: A |
DNS | wishname.net Type: A |
DNS | joinguide.net Type: A |
DNS | joinlate.net Type: A |
DNS | wishlate.net Type: A |
DNS | deadhalf.net Type: A |
DNS | rockhalf.net Type: A |
DNS | deadname.net Type: A |
DNS | deadguide.net Type: A |
HTTP GET | http://stickmarch.net/forum/search.php?method=validate&mode=sox&v=028&sox=3bdbc200 User-Agent: |
HTTP GET | http://tablefruit.net/forum/search.php?method=validate&mode=sox&v=028&sox=3bdbc200 User-Agent: |
HTTP GET | http://mightglossary.net/forum/search.php?method=validate&mode=sox&v=028&sox=3bdbc200 User-Agent: |
HTTP GET | http://requireneither.net/forum/search.php?method=validate&mode=sox&v=028&sox=3bdbc200 User-Agent: |
HTTP GET | http://gentlefriend.net/forum/search.php?method=validate&mode=sox&v=028&sox=3bdbc200 User-Agent: |
HTTP GET | http://glasshealth.net/forum/search.php?method=validate&mode=sox&v=028&sox=3bdbc200 User-Agent: |
HTTP GET | http://rememberpaint.net/forum/search.php?method=validate&mode=sox&v=028&sox=3bdbc200 User-Agent: |
HTTP GET | http://throughcountry.net/forum/search.php?method=validate&mode=sox&v=028&sox=3bdbc200 User-Agent: |
HTTP GET | http://rockfeel.net/forum/search.php?method=validate&mode=sox&v=028&sox=3bdbc200 User-Agent: |
HTTP GET | http://humanguide.net/forum/search.php?method=validate&mode=sox&v=028&sox=3bdbc200 User-Agent: |
HTTP GET | http://hairguide.net/forum/search.php?method=validate&mode=sox&v=028&sox=3bdbc200 User-Agent: |
HTTP GET | http://yardguide.net/forum/search.php?method=validate&mode=sox&v=028&sox=3bdbc200 User-Agent: |
HTTP GET | http://musicguide.net/forum/search.php?method=validate&mode=sox&v=028&sox=3bdbc200 User-Agent: |
HTTP GET | http://wishguide.net/forum/search.php?method=validate&mode=sox&v=028&sox=3bdbc200 User-Agent: |
HTTP GET | http://rockname.net/forum/search.php?method=validate&mode=sox&v=028&sox=3bdbc200 User-Agent: |
HTTP GET | http://rockguide.net/forum/search.php?method=validate&mode=sox&v=028&sox=3bdbc200 User-Agent: |
HTTP GET | http://stickmarch.net/forum/search.php?method=validate&mode=sox&v=028&sox=3bdbc200 User-Agent: |
HTTP GET | http://tablefruit.net/forum/search.php?method=validate&mode=sox&v=028&sox=3bdbc200 User-Agent: |
HTTP GET | http://mightglossary.net/forum/search.php?method=validate&mode=sox&v=028&sox=3bdbc200 User-Agent: |
HTTP GET | http://requireneither.net/forum/search.php?method=validate&mode=sox&v=028&sox=3bdbc200 User-Agent: |
HTTP GET | http://gentlefriend.net/forum/search.php?method=validate&mode=sox&v=028&sox=3bdbc200 User-Agent: |
HTTP GET | http://glasshealth.net/forum/search.php?method=validate&mode=sox&v=028&sox=3bdbc200 User-Agent: |
HTTP GET | http://rememberpaint.net/forum/search.php?method=validate&mode=sox&v=028&sox=3bdbc200 User-Agent: |
HTTP GET | http://throughcountry.net/forum/search.php?method=validate&mode=sox&v=028&sox=3bdbc200 User-Agent: |
HTTP GET | http://rockfeel.net/forum/search.php?method=validate&mode=sox&v=028&sox=3bdbc200 User-Agent: |
HTTP GET | http://humanguide.net/forum/search.php?method=validate&mode=sox&v=028&sox=3bdbc200 User-Agent: |
HTTP GET | http://hairguide.net/forum/search.php?method=validate&mode=sox&v=028&sox=3bdbc200 User-Agent: |
HTTP GET | http://yardguide.net/forum/search.php?method=validate&mode=sox&v=028&sox=3bdbc200 User-Agent: |
HTTP GET | http://musicguide.net/forum/search.php?method=validate&mode=sox&v=028&sox=3bdbc200 User-Agent: |
HTTP GET | http://wishguide.net/forum/search.php?method=validate&mode=sox&v=028&sox=3bdbc200 User-Agent: |
HTTP GET | http://rockname.net/forum/search.php?method=validate&mode=sox&v=028&sox=3bdbc200 User-Agent: |
HTTP GET | http://rockguide.net/forum/search.php?method=validate&mode=sox&v=028&sox=3bdbc200 User-Agent: |
Flows TCP | 192.168.1.1:1036 ➝ 69.195.129.70:80 |
Flows TCP | 192.168.1.1:1037 ➝ 69.195.129.70:80 |
Flows TCP | 192.168.1.1:1038 ➝ 208.91.197.241:80 |
Flows TCP | 192.168.1.1:1039 ➝ 208.91.197.241:80 |
Flows TCP | 192.168.1.1:1040 ➝ 208.91.197.241:80 |
Flows TCP | 192.168.1.1:1041 ➝ 208.91.197.241:80 |
Flows TCP | 192.168.1.1:1043 ➝ 208.91.197.241:80 |
Flows TCP | 192.168.1.1:1044 ➝ 208.91.197.241:80 |
Flows TCP | 192.168.1.1:1045 ➝ 211.196.153.94:80 |
Flows TCP | 192.168.1.1:1046 ➝ 208.91.197.54:80 |
Flows TCP | 192.168.1.1:1047 ➝ 69.172.201.208:80 |
Flows TCP | 192.168.1.1:1048 ➝ 64.34.157.180:80 |
Flows TCP | 192.168.1.1:1049 ➝ 69.172.201.208:80 |
Flows TCP | 192.168.1.1:1050 ➝ 87.106.117.110:80 |
Flows TCP | 192.168.1.1:1051 ➝ 207.195.223.7:80 |
Flows TCP | 192.168.1.1:1052 ➝ 65.182.100.15:80 |
Flows TCP | 192.168.1.1:1053 ➝ 69.195.129.70:80 |
Flows TCP | 192.168.1.1:1054 ➝ 69.195.129.70:80 |
Flows TCP | 192.168.1.1:1055 ➝ 208.91.197.241:80 |
Flows TCP | 192.168.1.1:1056 ➝ 208.91.197.241:80 |
Flows TCP | 192.168.1.1:1057 ➝ 208.91.197.241:80 |
Flows TCP | 192.168.1.1:1058 ➝ 208.91.197.241:80 |
Flows TCP | 192.168.1.1:1059 ➝ 208.91.197.241:80 |
Flows TCP | 192.168.1.1:1060 ➝ 208.91.197.241:80 |
Flows TCP | 192.168.1.1:1061 ➝ 211.196.153.94:80 |
Flows TCP | 192.168.1.1:1062 ➝ 208.91.197.54:80 |
Flows TCP | 192.168.1.1:1063 ➝ 69.172.201.208:80 |
Flows TCP | 192.168.1.1:1064 ➝ 64.34.157.180:80 |
Flows TCP | 192.168.1.1:1065 ➝ 69.172.201.208:80 |
Flows TCP | 192.168.1.1:1066 ➝ 87.106.117.110:80 |
Flows TCP | 192.168.1.1:1067 ➝ 207.195.223.7:80 |
Flows TCP | 192.168.1.1:1068 ➝ 65.182.100.15:80 |
Raw Pcap
0x00000000 (00000) 47455420 2f666f72 756d2f73 65617263 GET /forum/searc 0x00000010 (00016) 682e7068 703f6d65 74686f64 3d76616c h.php?method=val 0x00000020 (00032) 69646174 65266d6f 64653d73 6f782676 idate&mode=sox&v 0x00000030 (00048) 3d303238 26736f78 3d336264 62633230 =028&sox=3bdbc20 0x00000040 (00064) 30204854 54502f31 2e300d0a 41636365 0 HTTP/1.0..Acce 0x00000050 (00080) 70743a20 2a2f2a0d 0a436f6e 6e656374 pt: */*..Connect 0x00000060 (00096) 696f6e3a 20636c6f 73650d0a 486f7374 ion: close..Host 0x00000070 (00112) 3a207374 69636b6d 61726368 2e6e6574 : stickmarch.net 0x00000080 (00128) 0d0a0d0a .... 0x00000000 (00000) 47455420 2f666f72 756d2f73 65617263 GET /forum/searc 0x00000010 (00016) 682e7068 703f6d65 74686f64 3d76616c h.php?method=val 0x00000020 (00032) 69646174 65266d6f 64653d73 6f782676 idate&mode=sox&v 0x00000030 (00048) 3d303238 26736f78 3d336264 62633230 =028&sox=3bdbc20 0x00000040 (00064) 30204854 54502f31 2e300d0a 41636365 0 HTTP/1.0..Acce 0x00000050 (00080) 70743a20 2a2f2a0d 0a436f6e 6e656374 pt: */*..Connect 0x00000060 (00096) 696f6e3a 20636c6f 73650d0a 486f7374 ion: close..Host 0x00000070 (00112) 3a207461 626c6566 72756974 2e6e6574 : tablefruit.net 0x00000080 (00128) 0d0a0d0a .... 0x00000000 (00000) 47455420 2f666f72 756d2f73 65617263 GET /forum/searc 0x00000010 (00016) 682e7068 703f6d65 74686f64 3d76616c h.php?method=val 0x00000020 (00032) 69646174 65266d6f 64653d73 6f782676 idate&mode=sox&v 0x00000030 (00048) 3d303238 26736f78 3d336264 62633230 =028&sox=3bdbc20 0x00000040 (00064) 30204854 54502f31 2e300d0a 41636365 0 HTTP/1.0..Acce 0x00000050 (00080) 70743a20 2a2f2a0d 0a436f6e 6e656374 pt: */*..Connect 0x00000060 (00096) 696f6e3a 20636c6f 73650d0a 486f7374 ion: close..Host 0x00000070 (00112) 3a206d69 67687467 6c6f7373 6172792e : mightglossary. 0x00000080 (00128) 6e65740d 0a0d0a net.... 0x00000000 (00000) 47455420 2f666f72 756d2f73 65617263 GET /forum/searc 0x00000010 (00016) 682e7068 703f6d65 74686f64 3d76616c h.php?method=val 0x00000020 (00032) 69646174 65266d6f 64653d73 6f782676 idate&mode=sox&v 0x00000030 (00048) 3d303238 26736f78 3d336264 62633230 =028&sox=3bdbc20 0x00000040 (00064) 30204854 54502f31 2e300d0a 41636365 0 HTTP/1.0..Acce 0x00000050 (00080) 70743a20 2a2f2a0d 0a436f6e 6e656374 pt: */*..Connect 0x00000060 (00096) 696f6e3a 20636c6f 73650d0a 486f7374 ion: close..Host 0x00000070 (00112) 3a207265 71756972 656e6569 74686572 : requireneither 0x00000080 (00128) 2e6e6574 0d0a0d0a .net.... 0x00000000 (00000) 47455420 2f666f72 756d2f73 65617263 GET /forum/searc 0x00000010 (00016) 682e7068 703f6d65 74686f64 3d76616c h.php?method=val 0x00000020 (00032) 69646174 65266d6f 64653d73 6f782676 idate&mode=sox&v 0x00000030 (00048) 3d303238 26736f78 3d336264 62633230 =028&sox=3bdbc20 0x00000040 (00064) 30204854 54502f31 2e300d0a 41636365 0 HTTP/1.0..Acce 0x00000050 (00080) 70743a20 2a2f2a0d 0a436f6e 6e656374 pt: */*..Connect 0x00000060 (00096) 696f6e3a 20636c6f 73650d0a 486f7374 ion: close..Host 0x00000070 (00112) 3a206765 6e746c65 66726965 6e642e6e : gentlefriend.n 0x00000080 (00128) 65740d0a 0d0a0d0a et...... 0x00000000 (00000) 47455420 2f666f72 756d2f73 65617263 GET /forum/searc 0x00000010 (00016) 682e7068 703f6d65 74686f64 3d76616c h.php?method=val 0x00000020 (00032) 69646174 65266d6f 64653d73 6f782676 idate&mode=sox&v 0x00000030 (00048) 3d303238 26736f78 3d336264 62633230 =028&sox=3bdbc20 0x00000040 (00064) 30204854 54502f31 2e300d0a 41636365 0 HTTP/1.0..Acce 0x00000050 (00080) 70743a20 2a2f2a0d 0a436f6e 6e656374 pt: */*..Connect 0x00000060 (00096) 696f6e3a 20636c6f 73650d0a 486f7374 ion: close..Host 0x00000070 (00112) 3a20676c 61737368 65616c74 682e6e65 : glasshealth.ne 0x00000080 (00128) 740d0a0d 0a0a0d0a t....... 0x00000000 (00000) 47455420 2f666f72 756d2f73 65617263 GET /forum/searc 0x00000010 (00016) 682e7068 703f6d65 74686f64 3d76616c h.php?method=val 0x00000020 (00032) 69646174 65266d6f 64653d73 6f782676 idate&mode=sox&v 0x00000030 (00048) 3d303238 26736f78 3d336264 62633230 =028&sox=3bdbc20 0x00000040 (00064) 30204854 54502f31 2e300d0a 41636365 0 HTTP/1.0..Acce 0x00000050 (00080) 70743a20 2a2f2a0d 0a436f6e 6e656374 pt: */*..Connect 0x00000060 (00096) 696f6e3a 20636c6f 73650d0a 486f7374 ion: close..Host 0x00000070 (00112) 3a207265 6d656d62 65727061 696e742e : rememberpaint. 0x00000080 (00128) 6e65740d 0a0d0a0a net..... 0x00000000 (00000) 47455420 2f666f72 756d2f73 65617263 GET /forum/searc 0x00000010 (00016) 682e7068 703f6d65 74686f64 3d76616c h.php?method=val 0x00000020 (00032) 69646174 65266d6f 64653d73 6f782676 idate&mode=sox&v 0x00000030 (00048) 3d303238 26736f78 3d336264 62633230 =028&sox=3bdbc20 0x00000040 (00064) 30204854 54502f31 2e300d0a 41636365 0 HTTP/1.0..Acce 0x00000050 (00080) 70743a20 2a2f2a0d 0a436f6e 6e656374 pt: */*..Connect 0x00000060 (00096) 696f6e3a 20636c6f 73650d0a 486f7374 ion: close..Host 0x00000070 (00112) 3a207468 726f7567 68636f75 6e747279 : throughcountry 0x00000080 (00128) 2e6e6574 0d0a0d0a .net.... 0x00000000 (00000) 47455420 2f666f72 756d2f73 65617263 GET /forum/searc 0x00000010 (00016) 682e7068 703f6d65 74686f64 3d76616c h.php?method=val 0x00000020 (00032) 69646174 65266d6f 64653d73 6f782676 idate&mode=sox&v 0x00000030 (00048) 3d303238 26736f78 3d336264 62633230 =028&sox=3bdbc20 0x00000040 (00064) 30204854 54502f31 2e300d0a 41636365 0 HTTP/1.0..Acce 0x00000050 (00080) 70743a20 2a2f2a0d 0a436f6e 6e656374 pt: */*..Connect 0x00000060 (00096) 696f6e3a 20636c6f 73650d0a 486f7374 ion: close..Host 0x00000070 (00112) 3a20726f 636b6665 656c2e6e 65740d0a : rockfeel.net.. 0x00000080 (00128) 0d0a6574 0d0a0d0a ..et.... 0x00000000 (00000) 47455420 2f666f72 756d2f73 65617263 GET /forum/searc 0x00000010 (00016) 682e7068 703f6d65 74686f64 3d76616c h.php?method=val 0x00000020 (00032) 69646174 65266d6f 64653d73 6f782676 idate&mode=sox&v 0x00000030 (00048) 3d303238 26736f78 3d336264 62633230 =028&sox=3bdbc20 0x00000040 (00064) 30204854 54502f31 2e300d0a 41636365 0 HTTP/1.0..Acce 0x00000050 (00080) 70743a20 2a2f2a0d 0a436f6e 6e656374 pt: */*..Connect 0x00000060 (00096) 696f6e3a 20636c6f 73650d0a 486f7374 ion: close..Host 0x00000070 (00112) 3a206875 6d616e67 75696465 2e6e6574 : humanguide.net 0x00000080 (00128) 0d0a0d0a 0d0a0d0a ........ 0x00000000 (00000) 47455420 2f666f72 756d2f73 65617263 GET /forum/searc 0x00000010 (00016) 682e7068 703f6d65 74686f64 3d76616c h.php?method=val 0x00000020 (00032) 69646174 65266d6f 64653d73 6f782676 idate&mode=sox&v 0x00000030 (00048) 3d303238 26736f78 3d336264 62633230 =028&sox=3bdbc20 0x00000040 (00064) 30204854 54502f31 2e300d0a 41636365 0 HTTP/1.0..Acce 0x00000050 (00080) 70743a20 2a2f2a0d 0a436f6e 6e656374 pt: */*..Connect 0x00000060 (00096) 696f6e3a 20636c6f 73650d0a 486f7374 ion: close..Host 0x00000070 (00112) 3a206861 69726775 6964652e 6e65740d : hairguide.net. 0x00000080 (00128) 0a0d0a0a 0d0a0d0a ........ 0x00000000 (00000) 47455420 2f666f72 756d2f73 65617263 GET /forum/searc 0x00000010 (00016) 682e7068 703f6d65 74686f64 3d76616c h.php?method=val 0x00000020 (00032) 69646174 65266d6f 64653d73 6f782676 idate&mode=sox&v 0x00000030 (00048) 3d303238 26736f78 3d336264 62633230 =028&sox=3bdbc20 0x00000040 (00064) 30204854 54502f31 2e300d0a 41636365 0 HTTP/1.0..Acce 0x00000050 (00080) 70743a20 2a2f2a0d 0a436f6e 6e656374 pt: */*..Connect 0x00000060 (00096) 696f6e3a 20636c6f 73650d0a 486f7374 ion: close..Host 0x00000070 (00112) 3a207961 72646775 6964652e 6e65740d : yardguide.net. 0x00000080 (00128) 0a0d0a0a 0d0a0d0a ........ 0x00000000 (00000) 47455420 2f666f72 756d2f73 65617263 GET /forum/searc 0x00000010 (00016) 682e7068 703f6d65 74686f64 3d76616c h.php?method=val 0x00000020 (00032) 69646174 65266d6f 64653d73 6f782676 idate&mode=sox&v 0x00000030 (00048) 3d303238 26736f78 3d336264 62633230 =028&sox=3bdbc20 0x00000040 (00064) 30204854 54502f31 2e300d0a 41636365 0 HTTP/1.0..Acce 0x00000050 (00080) 70743a20 2a2f2a0d 0a436f6e 6e656374 pt: */*..Connect 0x00000060 (00096) 696f6e3a 20636c6f 73650d0a 486f7374 ion: close..Host 0x00000070 (00112) 3a206d75 73696367 75696465 2e6e6574 : musicguide.net 0x00000080 (00128) 0d0a0d0a 0d0a0d0a ........ 0x00000000 (00000) 47455420 2f666f72 756d2f73 65617263 GET /forum/searc 0x00000010 (00016) 682e7068 703f6d65 74686f64 3d76616c h.php?method=val 0x00000020 (00032) 69646174 65266d6f 64653d73 6f782676 idate&mode=sox&v 0x00000030 (00048) 3d303238 26736f78 3d336264 62633230 =028&sox=3bdbc20 0x00000040 (00064) 30204854 54502f31 2e300d0a 41636365 0 HTTP/1.0..Acce 0x00000050 (00080) 70743a20 2a2f2a0d 0a436f6e 6e656374 pt: */*..Connect 0x00000060 (00096) 696f6e3a 20636c6f 73650d0a 486f7374 ion: close..Host 0x00000070 (00112) 3a207769 73686775 6964652e 6e65740d : wishguide.net. 0x00000080 (00128) 0a0d0a0a 0d0a0d0a ........ 0x00000000 (00000) 47455420 2f666f72 756d2f73 65617263 GET /forum/searc 0x00000010 (00016) 682e7068 703f6d65 74686f64 3d76616c h.php?method=val 0x00000020 (00032) 69646174 65266d6f 64653d73 6f782676 idate&mode=sox&v 0x00000030 (00048) 3d303238 26736f78 3d336264 62633230 =028&sox=3bdbc20 0x00000040 (00064) 30204854 54502f31 2e300d0a 41636365 0 HTTP/1.0..Acce 0x00000050 (00080) 70743a20 2a2f2a0d 0a436f6e 6e656374 pt: */*..Connect 0x00000060 (00096) 696f6e3a 20636c6f 73650d0a 486f7374 ion: close..Host 0x00000070 (00112) 3a20726f 636b6e61 6d652e6e 65740d0a : rockname.net.. 0x00000080 (00128) 0d0a0a0a 0d0a0d0a ........ 0x00000000 (00000) 47455420 2f666f72 756d2f73 65617263 GET /forum/searc 0x00000010 (00016) 682e7068 703f6d65 74686f64 3d76616c h.php?method=val 0x00000020 (00032) 69646174 65266d6f 64653d73 6f782676 idate&mode=sox&v 0x00000030 (00048) 3d303238 26736f78 3d336264 62633230 =028&sox=3bdbc20 0x00000040 (00064) 30204854 54502f31 2e300d0a 41636365 0 HTTP/1.0..Acce 0x00000050 (00080) 70743a20 2a2f2a0d 0a436f6e 6e656374 pt: */*..Connect 0x00000060 (00096) 696f6e3a 20636c6f 73650d0a 486f7374 ion: close..Host 0x00000070 (00112) 3a20726f 636b6775 6964652e 6e65740d : rockguide.net. 0x00000080 (00128) 0a0d0a0a 0d0a0d0a ........ 0x00000000 (00000) 47455420 2f666f72 756d2f73 65617263 GET /forum/searc 0x00000010 (00016) 682e7068 703f6d65 74686f64 3d76616c h.php?method=val 0x00000020 (00032) 69646174 65266d6f 64653d73 6f782676 idate&mode=sox&v 0x00000030 (00048) 3d303238 26736f78 3d336264 62633230 =028&sox=3bdbc20 0x00000040 (00064) 30204854 54502f31 2e300d0a 41636365 0 HTTP/1.0..Acce 0x00000050 (00080) 70743a20 2a2f2a0d 0a436f6e 6e656374 pt: */*..Connect 0x00000060 (00096) 696f6e3a 20636c6f 73650d0a 486f7374 ion: close..Host 0x00000070 (00112) 3a207374 69636b6d 61726368 2e6e6574 : stickmarch.net 0x00000080 (00128) 0d0a0d0a 0d0a0d0a ........ 0x00000000 (00000) 47455420 2f666f72 756d2f73 65617263 GET /forum/searc 0x00000010 (00016) 682e7068 703f6d65 74686f64 3d76616c h.php?method=val 0x00000020 (00032) 69646174 65266d6f 64653d73 6f782676 idate&mode=sox&v 0x00000030 (00048) 3d303238 26736f78 3d336264 62633230 =028&sox=3bdbc20 0x00000040 (00064) 30204854 54502f31 2e300d0a 41636365 0 HTTP/1.0..Acce 0x00000050 (00080) 70743a20 2a2f2a0d 0a436f6e 6e656374 pt: */*..Connect 0x00000060 (00096) 696f6e3a 20636c6f 73650d0a 486f7374 ion: close..Host 0x00000070 (00112) 3a207461 626c6566 72756974 2e6e6574 : tablefruit.net 0x00000080 (00128) 0d0a0d0a 0d0a0d0a ........ 0x00000000 (00000) 47455420 2f666f72 756d2f73 65617263 GET /forum/searc 0x00000010 (00016) 682e7068 703f6d65 74686f64 3d76616c h.php?method=val 0x00000020 (00032) 69646174 65266d6f 64653d73 6f782676 idate&mode=sox&v 0x00000030 (00048) 3d303238 26736f78 3d336264 62633230 =028&sox=3bdbc20 0x00000040 (00064) 30204854 54502f31 2e300d0a 41636365 0 HTTP/1.0..Acce 0x00000050 (00080) 70743a20 2a2f2a0d 0a436f6e 6e656374 pt: */*..Connect 0x00000060 (00096) 696f6e3a 20636c6f 73650d0a 486f7374 ion: close..Host 0x00000070 (00112) 3a206d69 67687467 6c6f7373 6172792e : mightglossary. 0x00000080 (00128) 6e65740d 0a0d0a0a net..... 0x00000000 (00000) 47455420 2f666f72 756d2f73 65617263 GET /forum/searc 0x00000010 (00016) 682e7068 703f6d65 74686f64 3d76616c h.php?method=val 0x00000020 (00032) 69646174 65266d6f 64653d73 6f782676 idate&mode=sox&v 0x00000030 (00048) 3d303238 26736f78 3d336264 62633230 =028&sox=3bdbc20 0x00000040 (00064) 30204854 54502f31 2e300d0a 41636365 0 HTTP/1.0..Acce 0x00000050 (00080) 70743a20 2a2f2a0d 0a436f6e 6e656374 pt: */*..Connect 0x00000060 (00096) 696f6e3a 20636c6f 73650d0a 486f7374 ion: close..Host 0x00000070 (00112) 3a207265 71756972 656e6569 74686572 : requireneither 0x00000080 (00128) 2e6e6574 0d0a0d0a .net.... 0x00000000 (00000) 47455420 2f666f72 756d2f73 65617263 GET /forum/searc 0x00000010 (00016) 682e7068 703f6d65 74686f64 3d76616c h.php?method=val 0x00000020 (00032) 69646174 65266d6f 64653d73 6f782676 idate&mode=sox&v 0x00000030 (00048) 3d303238 26736f78 3d336264 62633230 =028&sox=3bdbc20 0x00000040 (00064) 30204854 54502f31 2e300d0a 41636365 0 HTTP/1.0..Acce 0x00000050 (00080) 70743a20 2a2f2a0d 0a436f6e 6e656374 pt: */*..Connect 0x00000060 (00096) 696f6e3a 20636c6f 73650d0a 486f7374 ion: close..Host 0x00000070 (00112) 3a206765 6e746c65 66726965 6e642e6e : gentlefriend.n 0x00000080 (00128) 65740d0a 0d0a0d0a et...... 0x00000000 (00000) 47455420 2f666f72 756d2f73 65617263 GET /forum/searc 0x00000010 (00016) 682e7068 703f6d65 74686f64 3d76616c h.php?method=val 0x00000020 (00032) 69646174 65266d6f 64653d73 6f782676 idate&mode=sox&v 0x00000030 (00048) 3d303238 26736f78 3d336264 62633230 =028&sox=3bdbc20 0x00000040 (00064) 30204854 54502f31 2e300d0a 41636365 0 HTTP/1.0..Acce 0x00000050 (00080) 70743a20 2a2f2a0d 0a436f6e 6e656374 pt: */*..Connect 0x00000060 (00096) 696f6e3a 20636c6f 73650d0a 486f7374 ion: close..Host 0x00000070 (00112) 3a20676c 61737368 65616c74 682e6e65 : glasshealth.ne 0x00000080 (00128) 740d0a0d 0a0a0d0a t....... 0x00000000 (00000) 47455420 2f666f72 756d2f73 65617263 GET /forum/searc 0x00000010 (00016) 682e7068 703f6d65 74686f64 3d76616c h.php?method=val 0x00000020 (00032) 69646174 65266d6f 64653d73 6f782676 idate&mode=sox&v 0x00000030 (00048) 3d303238 26736f78 3d336264 62633230 =028&sox=3bdbc20 0x00000040 (00064) 30204854 54502f31 2e300d0a 41636365 0 HTTP/1.0..Acce 0x00000050 (00080) 70743a20 2a2f2a0d 0a436f6e 6e656374 pt: */*..Connect 0x00000060 (00096) 696f6e3a 20636c6f 73650d0a 486f7374 ion: close..Host 0x00000070 (00112) 3a207265 6d656d62 65727061 696e742e : rememberpaint. 0x00000080 (00128) 6e65740d 0a0d0a0a net..... 0x00000000 (00000) 47455420 2f666f72 756d2f73 65617263 GET /forum/searc 0x00000010 (00016) 682e7068 703f6d65 74686f64 3d76616c h.php?method=val 0x00000020 (00032) 69646174 65266d6f 64653d73 6f782676 idate&mode=sox&v 0x00000030 (00048) 3d303238 26736f78 3d336264 62633230 =028&sox=3bdbc20 0x00000040 (00064) 30204854 54502f31 2e300d0a 41636365 0 HTTP/1.0..Acce 0x00000050 (00080) 70743a20 2a2f2a0d 0a436f6e 6e656374 pt: */*..Connect 0x00000060 (00096) 696f6e3a 20636c6f 73650d0a 486f7374 ion: close..Host 0x00000070 (00112) 3a207468 726f7567 68636f75 6e747279 : throughcountry 0x00000080 (00128) 2e6e6574 0d0a0d0a .net.... 0x00000000 (00000) 47455420 2f666f72 756d2f73 65617263 GET /forum/searc 0x00000010 (00016) 682e7068 703f6d65 74686f64 3d76616c h.php?method=val 0x00000020 (00032) 69646174 65266d6f 64653d73 6f782676 idate&mode=sox&v 0x00000030 (00048) 3d303238 26736f78 3d336264 62633230 =028&sox=3bdbc20 0x00000040 (00064) 30204854 54502f31 2e300d0a 41636365 0 HTTP/1.0..Acce 0x00000050 (00080) 70743a20 2a2f2a0d 0a436f6e 6e656374 pt: */*..Connect 0x00000060 (00096) 696f6e3a 20636c6f 73650d0a 486f7374 ion: close..Host 0x00000070 (00112) 3a20726f 636b6665 656c2e6e 65740d0a : rockfeel.net.. 0x00000080 (00128) 0d0a6574 0d0a0d0a ..et.... 0x00000000 (00000) 47455420 2f666f72 756d2f73 65617263 GET /forum/searc 0x00000010 (00016) 682e7068 703f6d65 74686f64 3d76616c h.php?method=val 0x00000020 (00032) 69646174 65266d6f 64653d73 6f782676 idate&mode=sox&v 0x00000030 (00048) 3d303238 26736f78 3d336264 62633230 =028&sox=3bdbc20 0x00000040 (00064) 30204854 54502f31 2e300d0a 41636365 0 HTTP/1.0..Acce 0x00000050 (00080) 70743a20 2a2f2a0d 0a436f6e 6e656374 pt: */*..Connect 0x00000060 (00096) 696f6e3a 20636c6f 73650d0a 486f7374 ion: close..Host 0x00000070 (00112) 3a206875 6d616e67 75696465 2e6e6574 : humanguide.net 0x00000080 (00128) 0d0a0d0a 0d0a0d0a ........ 0x00000000 (00000) 47455420 2f666f72 756d2f73 65617263 GET /forum/searc 0x00000010 (00016) 682e7068 703f6d65 74686f64 3d76616c h.php?method=val 0x00000020 (00032) 69646174 65266d6f 64653d73 6f782676 idate&mode=sox&v 0x00000030 (00048) 3d303238 26736f78 3d336264 62633230 =028&sox=3bdbc20 0x00000040 (00064) 30204854 54502f31 2e300d0a 41636365 0 HTTP/1.0..Acce 0x00000050 (00080) 70743a20 2a2f2a0d 0a436f6e 6e656374 pt: */*..Connect 0x00000060 (00096) 696f6e3a 20636c6f 73650d0a 486f7374 ion: close..Host 0x00000070 (00112) 3a206861 69726775 6964652e 6e65740d : hairguide.net. 0x00000080 (00128) 0a0d0a0a 0d0a0d0a ........ 0x00000000 (00000) 47455420 2f666f72 756d2f73 65617263 GET /forum/searc 0x00000010 (00016) 682e7068 703f6d65 74686f64 3d76616c h.php?method=val 0x00000020 (00032) 69646174 65266d6f 64653d73 6f782676 idate&mode=sox&v 0x00000030 (00048) 3d303238 26736f78 3d336264 62633230 =028&sox=3bdbc20 0x00000040 (00064) 30204854 54502f31 2e300d0a 41636365 0 HTTP/1.0..Acce 0x00000050 (00080) 70743a20 2a2f2a0d 0a436f6e 6e656374 pt: */*..Connect 0x00000060 (00096) 696f6e3a 20636c6f 73650d0a 486f7374 ion: close..Host 0x00000070 (00112) 3a207961 72646775 6964652e 6e65740d : yardguide.net. 0x00000080 (00128) 0a0d0a0a 0d0a0d0a ........ 0x00000000 (00000) 47455420 2f666f72 756d2f73 65617263 GET /forum/searc 0x00000010 (00016) 682e7068 703f6d65 74686f64 3d76616c h.php?method=val 0x00000020 (00032) 69646174 65266d6f 64653d73 6f782676 idate&mode=sox&v 0x00000030 (00048) 3d303238 26736f78 3d336264 62633230 =028&sox=3bdbc20 0x00000040 (00064) 30204854 54502f31 2e300d0a 41636365 0 HTTP/1.0..Acce 0x00000050 (00080) 70743a20 2a2f2a0d 0a436f6e 6e656374 pt: */*..Connect 0x00000060 (00096) 696f6e3a 20636c6f 73650d0a 486f7374 ion: close..Host 0x00000070 (00112) 3a206d75 73696367 75696465 2e6e6574 : musicguide.net 0x00000080 (00128) 0d0a0d0a 0d0a0d0a ........ 0x00000000 (00000) 47455420 2f666f72 756d2f73 65617263 GET /forum/searc 0x00000010 (00016) 682e7068 703f6d65 74686f64 3d76616c h.php?method=val 0x00000020 (00032) 69646174 65266d6f 64653d73 6f782676 idate&mode=sox&v 0x00000030 (00048) 3d303238 26736f78 3d336264 62633230 =028&sox=3bdbc20 0x00000040 (00064) 30204854 54502f31 2e300d0a 41636365 0 HTTP/1.0..Acce 0x00000050 (00080) 70743a20 2a2f2a0d 0a436f6e 6e656374 pt: */*..Connect 0x00000060 (00096) 696f6e3a 20636c6f 73650d0a 486f7374 ion: close..Host 0x00000070 (00112) 3a207769 73686775 6964652e 6e65740d : wishguide.net. 0x00000080 (00128) 0a0d0a0a 0d0a0d0a ........ 0x00000000 (00000) 47455420 2f666f72 756d2f73 65617263 GET /forum/searc 0x00000010 (00016) 682e7068 703f6d65 74686f64 3d76616c h.php?method=val 0x00000020 (00032) 69646174 65266d6f 64653d73 6f782676 idate&mode=sox&v 0x00000030 (00048) 3d303238 26736f78 3d336264 62633230 =028&sox=3bdbc20 0x00000040 (00064) 30204854 54502f31 2e300d0a 41636365 0 HTTP/1.0..Acce 0x00000050 (00080) 70743a20 2a2f2a0d 0a436f6e 6e656374 pt: */*..Connect 0x00000060 (00096) 696f6e3a 20636c6f 73650d0a 486f7374 ion: close..Host 0x00000070 (00112) 3a20726f 636b6e61 6d652e6e 65740d0a : rockname.net.. 0x00000080 (00128) 0d0a0a0a 0d0a0d0a ........ 0x00000000 (00000) 47455420 2f666f72 756d2f73 65617263 GET /forum/searc 0x00000010 (00016) 682e7068 703f6d65 74686f64 3d76616c h.php?method=val 0x00000020 (00032) 69646174 65266d6f 64653d73 6f782676 idate&mode=sox&v 0x00000030 (00048) 3d303238 26736f78 3d336264 62633230 =028&sox=3bdbc20 0x00000040 (00064) 30204854 54502f31 2e300d0a 41636365 0 HTTP/1.0..Acce 0x00000050 (00080) 70743a20 2a2f2a0d 0a436f6e 6e656374 pt: */*..Connect 0x00000060 (00096) 696f6e3a 20636c6f 73650d0a 486f7374 ion: close..Host 0x00000070 (00112) 3a20726f 636b6775 6964652e 6e65740d : rockguide.net. 0x00000080 (00128) 0a0d0a0a 0d0a0d0a ........
Strings
a " ' %+#I64 ., . \ * + : : e \ %+#.* %+#.*L -_ ...... s+%3D%3A%26A& h1 21212 "1"2d1x 0 ' S ? \ . . . . . .. ... ... ... ....... .. !"! #! $!. % . ' ( . * + ,+ - .- / 012-3- [ Z [Z [ d2 h2 1 1 x onjvid.HCWnnnaK2ESdriaFSOcrpvCb3ragorEdhSTsrAaanC - CC-E- -0 -0010+-0 0 -0 00-+ . . -e- . 00-+ \ 00:\ :.. . ...........?- 0 0 0 0 - P I`6B}. .. .S . . Y .^. .. p...I u H ((((( H h(((( H jjjj jjjjh jjjjj KERNEL32.DLL Ljjjh mscoree.dll (null) \$,_^[ \$0_^[ !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~ !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~ \$09h< 09\$Ht*f 0A@@Ju 0SSSSS |$0VSHW \$0WVh 0WWWWW 1#QNAN 1#SNAN 1u`&#;sCM 2PJ!jKz _^][3 %3?B.(4OwXj 3eB}S2 \3g=e$% |$4;|$, $4#*6D \$49|$dr 4bCwn) 4cw?(xJ \$4j8h 5M1d73f 6>M~qj{ 6_=*.N 7A-'FP 7k#z}cEu ~7U_R 7:W7\N 8e Xp_H 8+,f$w |8IA\=e 8Jy +2 8$]mD| 8\$;u. 8VVVVV 9\$4u& 9\$4u-9\$8t' 9!7{eK "9"d,_ 9D$ht7h 9l$DtC ^@9n8r ^\9nTr 9\$$t9 9\$@tJ 9t$lth 9\$ to 9t$Pu_ 9t$Puv |$@9\$Ts 9|$,u0 9\$ uf 9\$(uF 9|U;~XU_b F ]9++V* \$@9XLuR \$@9YhuT 9Y kw# \$@9Z0ur abcdefghijklmnopqrstuvwxyz ABCDEFGHIJKLMNOPQRSTUVWXYZ Adeque<T> too long A{|,fE K ah8o@D AK1;xz america american american english american-english An application has made an attempt to load the C runtime library incorrectly. <at9<rt,<wt -ATL@| - Attempt to initialize the CRT more than once. - Attempt to use MSIL code from this assembly during native code initialization .?AUctype_base@std@@ August australian .?AVbad_alloc@std@@ .?AVbad_cast@std@@ .?AVbad_exception@std@@ .?AV?$basic_ios@DU?$char_traits@D@std@@@std@@ .?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@ .?AV?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ .?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@ .?AV?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ .?AV?$ctype@D@std@@ .?AVexception@std@@ .?AVfacet@locale@std@@ .?AVfailure@ios_base@std@@ .?AVios_base@std@@ .?AV?$_Iosb@H@std@@ .?AVlength_error@std@@ .?AV_Locimp@locale@std@@ .?AVlogic_error@std@@ .?AV?$numpunct@D@std@@ .?AV?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ .?AVout_of_range@std@@ .?AVruntime_error@std@@ .?AVtype_info@@ Aw/*j@h b~2n5O) bad allocation bad cast bad exception Base Class Array' Base Class Descriptor at ( __based( BEFh!Y BeginPaint belgian Bp>aE, britain B*%SNu c^~#*/? canadian __cdecl "-Ce/\ CheckDlgButton chinese chinese-hongkong chinese-simplified chinese-singapore chinese-traditional $ CjdS Class Hierarchy Descriptor' CloseHandle __clrcall cmd.exe CNR7Qu CompareStringA CompareStringW Complete Object Locator' COMSPEC CONOUT$ `copy constructor closure' Copyright (c) 1992-2004 by P.J. Plauger, licensed by Dinkumware, Ltd. ALL RIGHTS RESERVED. CorExitProcess C PjPV C$PjQV C.PjRV C/PjSV C*PjTV C+PjUV C,PjVV C-PjWV CreateFileA CreateProcessA CreateThread - CRT not initialized c s+Fl \$(:D$ D$,^_] D$(^][ D$$_^][ D$$[_^] D$$]_^[ D$0_^[ D$0j ht D$0PQR D$0SUVW D$|_^[3 D$49Y(t' D$4hd3L D$4-jVJB D$4SVW D$8_^[3 D$8PPUV D$8PVW D$8SUVW D$|9\$ D$@9-`]M \$d9|$\r D$@9\$Ts D$$;A< @.data D$`-bl `D}]D)_ +D$ +D$ D$ )D$ D$d3sp dddd, MMMM dd, yyyy D$Dh0u D$DSj' D$DSSSQRP D$dSUVW December DecodePointer `default constructor closure' delete delete[] Delete DeleteCriticalSection ,dG s- D$H9\$| D$HRWP D$hSUVW D$hSVW )D$HVj D$HWPf D$LPQW D$lQUSRP D$LRWP D$LSUVW D$ nz7 DOMAIN error D$Pj@P D$pPSQV D$PPWQ D$$PQS D$,PQV D$pSVW |$dPuu D$@PWQ D$$PWQ D$,QRP D$,QWV DrawTextA D$ SPW D$`SUVW D$<SUVW D$,SUVW D$<SVW D$,SVW ;D$$tM ;D$$tM)l$$ D$TPWSj D$TSUVW )D$TVU dutch-belgian D$ VSUP D$x9=l_M D$XRWP D$XSVW D$xWPQR !=DXYaE `dynamic atexit destructor for ' `dynamic initializer for ' e ^2WV eCEmj E+E_zM |$(EF; `eh vector constructor iterator' `eh vector copy constructor iterator' `eh vector destructor iterator' `eh vector vbase constructor iterator' `eh vector vbase copy constructor iterator' eJz1VQ $?-.eL ElSVWP ){*.Em em%,>B, EnableWindow EncodePointer EndDialog EndPaint england english-american english-aus english-belize english-can english-caribbean english-ire english-jamaica english-nz english-south africa english-trinidad y tobago english-uk english-us english-usa EnterCriticalSection EnumSystemLocalesA E">N"WXU EpSVWP E[ruXF`}h ExitProcess %&<"F* F09n(u F0|BW$ !(f0cl F 1D$( F3FjJ9 F;5 ]M F8A`\/7 __fastcall fbR|NRCAq'' February FileTimeToLocalFileTime FileTimeToSystemTime FindClose FindFirstFileA {FI[WIW^_ f%JUao - floating point support not loaded FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers _f$maA ForceRemove FqBQAf FreeEnvironmentStringsA FreeEnvironmentStringsW FreeLibrary french-belgian french-canadian french-luxembourg french-swiss Friday ^F<-uB fu>_v[ fwIy|? G>4@zF ^g9>GH GAIsProcessorFeaturePresent GDI32.dll german-austrian german-lichtenstein german-luxembourg german-swiss GetACP GetActiveWindow GetCommandLineA GetConsoleCP GetConsoleMode GetConsoleOutputCP GetCPInfo GetCurrentDirectoryA GetCurrentObject GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetCursor GetDCBrushColor GetDlgItem GetDlgItemInt GetDriveTypeA GetEnvironmentStrings GetEnvironmentStringsW GetExitCodeProcess GetFileAttributesA GetFileType GetFontLanguageInfo GetFontUnicodeRanges GetForegroundWindow GetFullPathNameA GetInputState GetKeyboardType GetLastActivePopup GetLastError GetLocaleInfoA GetLocaleInfoW GetMenu GetMenuCheckMarkDimensions GetMenuContextHelpId GetMenuItemCount GetMenuItemID GetMenuState GetModuleFileNameA GetModuleHandleA GetModuleHandleW GetNearestColor GetObjectType GetOEMCP GetPixelFormat GetPolyFillMode GetProcAddress GetProcessHeap GetProcessId GetProcessWindowStation GetPropA GetQueueStatus GetRandomRgn GetScrollPos GetStartupInfoA GetStdHandle GetStretchBltMode GetStringTypeA GetStringTypeW GetSystemPaletteUse GetSystemTimeAsFileTime GetTextAlign GetTextCharsetInfo GetTextColor GetTickCount GetTimeZoneInformation GetUserDefaultLCID GetUserObjectInformationA GetWindowContextHelpId GetWindowDC GGi6+2 gg(y-8 =GI5m~+f Giadf(p {gIl?7 \Gk[gV GlobalAlloc GlobalFlags GlobalHandle GlobalSize {g??*M4 &(=G.[r great britain G~R&rW {g s9OQ GSab?L "gTPum G;|$$u gUH._`) g[UW;P GZ}Gji `h```` h1$*c%Oj@ (H4qP}E h7j|&s \$H9-d]M \$H9|$@r \$H9\$X h\D E^\ HeapAlloc HeapCreate HeapFree HeapReAlloc HeapSize `h`hhh HH:mm:ss HHtXHHt HHtYHHt h=Ik[\ holland hong-kong &Hp2)P H!SPc7 HSUVW3 \$(hV`M i3dai[r~ "I7JUV I(A+K@ Ie=-B- >If90t Ig`th65 InitializeCriticalSection InitializeCriticalSectionAndSpinCount InterlockedDecrement InterlockedExchange InterlockedIncrement invalid map/set<T> iterator invalid string position ios_base::badbit set ios_base::eofbit set ios_base::failbit set irish-english IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale IsWindowEnabled IsWindowUnicode italian-swiss Ivwcc\bE ixX8#Qu ?j3kZh JanFebMarAprMayJunJulAugSepOctNovDec January []}!Jd @/j[D2 j h(2L j,h83L j:hDxL j"hDyL *j%hIPR j h@*L j hp3L j h\wL J$j7h42L j@j ^V 'JK:CV J"lz%[J JMb^1s j"^SSSSS j>[<Ti \$`j,WS kb^Bm< KERNEL32 KERNEL32.dll <k&tH$} L$ _^[ `,l@0bL L$0j2Q L$0PSQ L$0SSj L$0UPj L$0VWSQ L0^:Xe l2I 9c L$$_^3 L$4PQUVh {)\l55 l$8=yGL L$`9L$H| L9t$Tr *.LaA, LC_ALL LC_COLLATE LC_CTYPE LCMapStringA LCMapStringW LC_MONETARY LC_NUMERIC LC_TIME L$d_^[3 L$d_^][3 L$D_^][3 Ld,g"h L$DPQ3 L$dPSQ L$DURPVQ LeaveCriticalSection L$`h0u L$hQSSj L~I+p&x@l L$ j@Q L$,j@Q L$l_^][3 L$LPSQ L$LQRW L$LQRWU L$LQUWPP L$LQVW LlYe&6 l+Mj? LoadIconA LoadLibraryA LocalAlloc LocalFlags `local static guard' `local static thread guard' `local vftable' `local vftable constructor closure' LockResource L$PPWQ L$pQPh L$pRSPQVW L$PSSS L+Q}bQ L$,Qj$ L$$QPS L$ QUV L$|RWPQV l$siI1 L$(SU; L$t_^[3 L$TQj$ L$tQRPh L$\<+t'<-t#<0u l$ t:W L$ <-u L@UV+' L$(VWPQ L$ WQP L$xRSPQWV lxT8]3 Lz$cFl }^!M} M3Z55@{S ~MAK? `managed vector constructor iterator' `managed vector copy constructor iterator' `managed vector destructor iterator' map/set<T> too long Mbew>o {M/dl| MessageBoxA M-)%Fv Mh5j}# Mi0b@BF3 Microsoft Visual C++ Runtime Library MM/dd/yy mMqD*! ~MOE_e Monday MoveFileA ?m@ }QNp MultiByteToWideChar MVH|\8iE.P Nd@-*2 A+ new[] new-zealand Ni/q|M nj,&XF_ NO&?+bB NoRemove norwegian norwegian-bokmal norwegian-nynorsk Norwegian-Nynorsk - not enough space for arguments - not enough space for environment - not enough space for locale information - not enough space for lowio initialization - not enough space for _onexit/atexit table - not enough space for stdio initialization - not enough space for thread data November (null) o9=*&H >o"b}^ October oESTD" ogBch g o.'h1s> oJMM\X OLEAUT32.dll `omni callsig' o)&$Nv ~ooBi` operator ouHd+s P3;e|} __pascal p{"ef Pf95TbM p(g&5*]<{8 `placement delete closure' `placement delete[] closure' Please contact the application's support team for more information. /P::MS portuguese-brazilian PostMessageA PPPPPPPP |$ PQj PqLdHW PQSUVW p!r.0O@X pr china pr-china Program: <program name unknown> PSSSSSSh __ptr64 puerto-rico - pure virtual function call P#V.4; pyjELHlf pZ.O4| q'\6]f QQSVWd qs,Hu>n8 QueryPerformanceCounter q%U@R^ QVGA0WLA _r5ha-WY r7W% QiJ RaiseException r"aLzc `.rdata ReadFile RemovePropA __restrict rg*GR '_"Rk/ rQ@]gU r+r#R]O RtlUnwind runtime error Runtime Error! RYP6Q2 >#S{/` S(0ciW s%A9CL Saturday ;<s@"B `scalar deleting destructor' September SetDlgItemTextA SetEndOfFile SetEnvironmentVariableA SetFilePointer SetHandleCount SetLastError SetStdHandle SetTextAlign SetTextColor SetTextJustification SetUnhandledExceptionFilter SetWindowTextA ShowWindow SING error slovak south africa south-africa south korea south-korea spanish-argentina spanish-bolivia spanish-chile spanish-colombia spanish-costa rica spanish-dominican republic spanish-ecuador spanish-el salvador spanish-guatemala spanish-honduras spanish-mexican spanish-modern spanish-nicaragua spanish-panama spanish-paraguay spanish-peru spanish-puerto rico spanish-uruguay spanish-venezuela SPh03F <|sQH: SRUQWP s[S;7|G;w SShpdD |.SSSh ^SSSSS SSVh0%@ __stdcall Stmr\, `string' string too long Sunday SunMonTueWedThuFriSat swedish-finland SystemRoot ;|$$t \$ ;\$(t T$0RjKU T$0SSj T$4jlR T7{+m"/ T$8WRf t;9\$Huef T$DRPj T$DRSP TerminateProcess t=FA9] tGHt.Ht& (</t$h +t HHt This application has requested the Runtime to terminate it in an unusual way. __thiscall This indicates a bug in your application. This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain. !This program cannot be run in DOS mode. T$HRhk Thursday tIj"[: < tK< tG Tl>meJ TLOSS error T$lPWR T$lRhT T$LRPWSS T$LRPWUU T$LRVWS TlsAlloc TlsFree TlsGetValue TlsSetValue <\tM</tI T$ PQR T$|PSQRWV T$pSSPh@ t$PWPh ?.tqO^} tR99u2 T$,Rh? trinidad & tobago T$(RPj T$@RPQ T$(RPUV T$(]RQ t$(RQPV T$<RVP T$,RVWj T$\RWf T$@RWVP t"SS9] t)SSSh \$<;t$\s*V <+t(<-t$: t$<;t$0 t$tj4j T$TRQP t$<"u 3 Tuesday ;t$,v- `tv*MN t VV9u t$$WSPVj t+WWVPV T$XRWVP T$XUQRf T$xVSQR Type Descriptor' `typeof' U+} }? >:u8FV u,9D$|u&9 u9{uRR UBp OH ubWh(3L ]Ud5n\2 `udt returning' UeRL}rIAb >$UGm|"|c UHU&Yr\ ##u[iJ - unable to initialize heap - unable to open console device __unaligned - unexpected heap error - unexpected multithread lock error UnhandledExceptionFilter UNICODE united-kingdom united-states Unknown exception U@PWRS UqL;~[I UQPXY]Y[ uqSSSSS URPQQh(4I USER32.dll USER32.DLL u[SSSP UTF-16LE UUh _M \U[ uP[ UvE1Sy u,VVWV uw&o;^2 uX9t$8 #Uz ]Z V3MeQF vA .d5 `vbase destructor' `vbtable' `vcall' V#E> a `vector constructor iterator' `vector copy constructor iterator' `vector deleting destructor' `vector destructor iterator' `vector vbase constructor iterator' `vector vbase copy constructor iterator' V[>`FJ `vftable' =Vhuet VirtualAlloc `virtual displacement map' VirtualFree `^VL>++ v N+D$ vRO#_dw VRVVVh <=v`<>u" V^U[PLc VVShpyF VVVRPf _VVVVV VVVVVQRSSj |$ VWS v+y=n^e}u w6kGN WaitForSingleObject *w'd& w<d7k^ WD 'w? Wednesday =wfD8l W_F|ec \$<WFf ]<Wh(3L ($wHm[ WideCharToMultiByte WindowFromDC |$$Wj" w^Latn1N WriteConsoleA WriteConsoleW WriteFile WS2_32.dll ^WWWWW xa<ZHJ xCuz>{ xIPhk! ):XJ|e \$xj h +XLB1R xnATYVaq "-X}OHR 'x=p`P xppwpp xpxxxx XS2G*oM <xtX<XtT ~$_^]Y Y?9JqF 'y}a13 yoUWvK yoy46Sf >=Yt1j Y<\u#j\V z0L[fP ~,z`?iS z jdA% `?z&:qI ZRW'O4O