Analysis Date2015-05-29 16:41:35
MD57552c74140be15792cce40a2e7907046
SHA158236ba1b3aef27acf8361f5067e3884d3d3c1d1

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: 24d035b4f11eab19d9464129556d5708 sha1: b27fe1754ab26c5d799b54b12a290aa5e889a802 size: 311808
Section.rdata md5: 1df5057b5d95d105a58aac7dbc41c04d sha1: 7d0731a7dcb2dec3d30efece76059b21bb01f61a size: 60416
Section.data md5: 2d5dfe841b01b2c00389098b565b4e1a sha1: 991393a8bc981badc4ae51ebd8ba24e31cbc4d56 size: 7168
Section.reloc md5: b9b82f4663330766a4aba311967c6553 sha1: 0b9918db65e6b4cc3208f1ad914410969799d301 size: 25088
Timestamp2015-05-11 06:57:27
PackerMicrosoft Visual C++ 8
PEhash94029ef5ab88e8f2afcd70c4125c0939de7170cc
IMPhash5b0e8732cc49ee9f2717a9a830a3cfdf

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates FileC:\WINDOWS\uwydftcuwqfrc\u1tuxdkon
Creates FileC:\uwydftcuwqfrc\u1tuxdkon
Creates FileC:\uwydftcuwqfrc\uu2z1mppdxjpjw9sk.exe
Deletes FileC:\WINDOWS\uwydftcuwqfrc\u1tuxdkon
Creates ProcessC:\uwydftcuwqfrc\uu2z1mppdxjpjw9sk.exe

Process
↳ C:\uwydftcuwqfrc\uu2z1mppdxjpjw9sk.exe

RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Connectivity Protection Assistant ➝
C:\uwydftcuwqfrc\fsbhoqif.exe
Creates FileC:\WINDOWS\uwydftcuwqfrc\u1tuxdkon
Creates FileC:\uwydftcuwqfrc\fsbhoqif.exe
Creates FileC:\uwydftcuwqfrc\yzgfpsf
Creates FilePIPE\lsarpc
Creates FileC:\uwydftcuwqfrc\u1tuxdkon
Deletes FileC:\WINDOWS\uwydftcuwqfrc\u1tuxdkon
Creates ProcessC:\uwydftcuwqfrc\fsbhoqif.exe
Creates ServiceInstaller User Information Diagnostic - C:\uwydftcuwqfrc\fsbhoqif.exe

Process
↳ C:\WINDOWS\system32\svchost.exe

Process
↳ Pid 812

Process
↳ Pid 860

Process
↳ C:\WINDOWS\System32\svchost.exe

Creates FileC:\WINDOWS\system32\WBEM\Logs\wbemess.log

Process
↳ Pid 1216

Process
↳ C:\WINDOWS\system32\spoolsv.exe

Process
↳ Pid 1852

Process
↳ Pid 1176

Process
↳ C:\uwydftcuwqfrc\fsbhoqif.exe

Creates FileC:\uwydftcuwqfrc\u79mvspxvwyq
Creates Filepipe\net\NtControlPipe10
Creates FileC:\uwydftcuwqfrc\zwqpvtj.exe
Creates FileC:\WINDOWS\uwydftcuwqfrc\u1tuxdkon
Creates FileC:\uwydftcuwqfrc\yzgfpsf
Creates FileC:\uwydftcuwqfrc\u1tuxdkon
Creates File\Device\Afd\Endpoint
Deletes FileC:\WINDOWS\uwydftcuwqfrc\u1tuxdkon
Creates Processihkfgxueyg5t "c:\uwydftcuwqfrc\fsbhoqif.exe"

Process
↳ C:\uwydftcuwqfrc\fsbhoqif.exe

Creates FileC:\WINDOWS\uwydftcuwqfrc\u1tuxdkon
Creates FileC:\uwydftcuwqfrc\u1tuxdkon
Deletes FileC:\WINDOWS\uwydftcuwqfrc\u1tuxdkon

Process
↳ ihkfgxueyg5t "c:\uwydftcuwqfrc\fsbhoqif.exe"

Creates FileC:\WINDOWS\uwydftcuwqfrc\u1tuxdkon
Creates FileC:\uwydftcuwqfrc\u1tuxdkon
Deletes FileC:\WINDOWS\uwydftcuwqfrc\u1tuxdkon

Network Details:

DNSlittlemister.net
Type: A
199.34.228.57
DNSlittleriver.net
Type: A
66.151.181.49
DNSrememberservice.net
Type: A
110.45.130.51
DNSwouldriver.net
Type: A
95.211.230.75
DNSeffortarticle.net
Type: A
DNSthrougharticle.net
Type: A
DNSforgetdried.net
Type: A
DNSincreasedried.net
Type: A
DNSforgetfifteen.net
Type: A
DNSincreasefifteen.net
Type: A
DNSforgetangry.net
Type: A
DNSincreaseangry.net
Type: A
DNSforgetarticle.net
Type: A
DNSincreasearticle.net
Type: A
DNSwoulddried.net
Type: A
DNSrememberdried.net
Type: A
DNSwouldfifteen.net
Type: A
DNSrememberfifteen.net
Type: A
DNSwouldangry.net
Type: A
DNSrememberangry.net
Type: A
DNSwouldarticle.net
Type: A
DNSrememberarticle.net
Type: A
DNSjourneymister.net
Type: A
DNShusbandmister.net
Type: A
DNSjourneysuppose.net
Type: A
DNShusbandsuppose.net
Type: A
DNSjourneyservice.net
Type: A
DNShusbandservice.net
Type: A
DNSjourneyriver.net
Type: A
DNShusbandriver.net
Type: A
DNSdestroymister.net
Type: A
DNSdestroysuppose.net
Type: A
DNSlittlesuppose.net
Type: A
DNSdestroyservice.net
Type: A
DNSlittleservice.net
Type: A
DNSdestroyriver.net
Type: A
DNSriddenmister.net
Type: A
DNSbelongmister.net
Type: A
DNSriddensuppose.net
Type: A
DNSbelongsuppose.net
Type: A
DNSriddenservice.net
Type: A
DNSbelongservice.net
Type: A
DNSriddenriver.net
Type: A
DNSbelongriver.net
Type: A
DNSchairmister.net
Type: A
DNSthosemister.net
Type: A
DNSchairsuppose.net
Type: A
DNSthosesuppose.net
Type: A
DNSchairservice.net
Type: A
DNSthoseservice.net
Type: A
DNSchairriver.net
Type: A
DNSthoseriver.net
Type: A
DNSwithinmister.net
Type: A
DNSsuffermister.net
Type: A
DNSwithinsuppose.net
Type: A
DNSsuffersuppose.net
Type: A
DNSwithinservice.net
Type: A
DNSsufferservice.net
Type: A
DNSwithinriver.net
Type: A
DNSsufferriver.net
Type: A
DNSeffortmister.net
Type: A
DNSthroughmister.net
Type: A
DNSeffortsuppose.net
Type: A
DNSthroughsuppose.net
Type: A
DNSeffortservice.net
Type: A
DNSthroughservice.net
Type: A
DNSeffortriver.net
Type: A
DNSthroughriver.net
Type: A
DNSforgetmister.net
Type: A
DNSincreasemister.net
Type: A
DNSforgetsuppose.net
Type: A
DNSincreasesuppose.net
Type: A
DNSforgetservice.net
Type: A
DNSincreaseservice.net
Type: A
DNSforgetriver.net
Type: A
DNSincreaseriver.net
Type: A
DNSwouldmister.net
Type: A
DNSremembermister.net
Type: A
DNSwouldsuppose.net
Type: A
DNSremembersuppose.net
Type: A
DNSwouldservice.net
Type: A
DNSrememberriver.net
Type: A
DNSjourneynearly.net
Type: A
DNShusbandnearly.net
Type: A
DNSjourneyhappen.net
Type: A
HTTP GEThttp://littlemister.net/index.php
User-Agent:
HTTP GEThttp://littleriver.net/index.php
User-Agent:
HTTP GEThttp://rememberservice.net/index.php
User-Agent:
HTTP GEThttp://wouldriver.net/index.php
User-Agent:
Flows TCP192.168.1.1:1031 ➝ 199.34.228.57:80
Flows TCP192.168.1.1:1032 ➝ 66.151.181.49:80
Flows TCP192.168.1.1:1033 ➝ 110.45.130.51:80
Flows TCP192.168.1.1:1034 ➝ 95.211.230.75:80

Raw Pcap
0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a206c   : close..Host: l
0x00000040 (00064)   6974746c 656d6973 7465722e 6e65740d   ittlemister.net.
0x00000050 (00080)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a206c   : close..Host: l
0x00000040 (00064)   6974746c 65726976 65722e6e 65740d0a   ittleriver.net..
0x00000050 (00080)   0d0a0a                                ...

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2072   : close..Host: r
0x00000040 (00064)   656d656d 62657273 65727669 63652e6e   ememberservice.n
0x00000050 (00080)   65740d0a 0d0a                         et....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2077   : close..Host: w
0x00000040 (00064)   6f756c64 72697665 722e6e65 740d0a0d   ouldriver.net...
0x00000050 (00080)   0a740d0a 0d0a                         .t....


Strings
" \
 
\
.
Ce
SerSi.dn
.
  
.
e
. 
.
e
. 
00-+ 00-+ 6**00-+ .
-
-1
+-0-E-
-0
\
.
-
..
0
0 
- 
000
.
-
-
^N

                                 
2.exe
- abort() has been called
ADVAPI32.DLL
af-za
af-ZA
alnum
alpha
america
american
american english
american-english
April
ar-ae
ar-AE
ar-bh
ar-BH
ar-dz
ar-DZ
ar-eg
ar-EG
ar-iq
ar-IQ
ar-jo
ar-JO
ar-kw
ar-KW
ar-lb
ar-LB
ar-ly
ar-LY
ar-ma
ar-MA
ar-om
ar-OM
ar-qa
ar-QA
ar-sa
ar-SA
ar-sy
ar-SY
ar-tn
ar-TN
ar-ye
ar-YE
- Attempt to initialize the CRT more than once.
- Attempt to use MSIL code from this assembly during native code initialization
August
australian
az-az-cyrl
az-AZ-Cyrl
az-az-latn
az-AZ-Latn
.bat
be-by
be-BY
belgian
bg-bg
bg-BG
blank
bn-in
bn-IN
britain
bs-ba-latn
bs-BA-Latn
ca-es
ca-ES
canadian
china
chinese
chinese-hongkong
chinese-simplified
chinese-singapore
chinese-traditional
CLC_ALL
.cmd
cntrl
.com
CONOUT$
- CRT not initialized
cs-cz
cs-CZ
cy-gb
cy-GB
czech
da-dk
da-DK
dddd, MMMM dd, yyyy
de-at
de-AT
December
de-ch
de-CH
de-de
de-DE
de-li
de-LI
de-lu
de-LU
digit
div-mv
div-MV
DOMAIN error
dutch-belgian
ECHN
ECHS
ECHT
ECZE
EDEA
EDEC
EDEL
EDES
EENA
EENB
EENC
EENG
EENI
EENJ
EENL
EENS
EENT
EENU
EENZ
EESA
EESB
EESC
EESD
EESE
EESF
EESG
EESH
EESI
EESL
EESM
EESN
EESO
EESR
EESS
EESU
EESV
EESY
EESZ
EFRB
EFRC
EFRL
EFRS
EGBR
EHKG
EITS
Eja-JP
EKOR
el-gr
el-GR
emscoree.dll
en-au
en-AU
en-bz
en-BZ
en-ca
en-CA
en-cb
en-CB
en-gb
en-GB
england
english-american
english-aus
english-belize
english-can
english-caribbean
english-ire
english-jamaica
english-nz
english-south africa
english-trinidad y tobago
english-uk
english-us
english-usa
en-ie
en-IE
en-jm
en-JM
ENLB
ENLD
en-nz
en-NZ
ENON
ENOR
en-ph
en-PH
en-tt
en-TT
en-us
en-US
en-za
en-ZA
ENZL
en-zw
en-ZW
EPRI
EPTB
ER6002
es-ar
es-AR
es-bo
es-BO
es-cl
es-CL
es-co
es-CO
es-cr
es-CR
es-do
es-DO
es-ec
es-EC
es-es
es-ES
es-gt
es-GT
es-hn
es-HN
es-mx
es-MX
es-ni
es-NI
es-pa
es-PA
es-pe
es-PE
es-pr
es-PR
es-py
es-PY
es-sv
es-SV
es-uy
es-UY
es-ve
es-VE
ESVF
ESVK
et-ee
et-EE
ETTO
eu-es
eu-ES
EUSA
EZAF
EZHH
EZHI
fa-ir
fa-IR
February
fi-fi
fi-FI
- floating point support not loaded
fo-fo
fo-FO
fr-be
fr-BE
fr-ca
fr-CA
fr-ch
fr-CH
french-belgian
french-canadian
french-luxembourg
french-swiss
fr-fr
fr-FR
Friday
fr-lu
fr-LU
fr-mc
fr-MC
german-austrian
german-lichtenstein
german-luxembourg
german-swiss
gl-es
gl-ES
graph
great britain
gu-in
gu-IN
         (((((                  H
he-il
he-IL
HH:mm:ss
hi-in
hi-IN
holland
hong-kong
hr-ba
hr-BA
hr-hr
hr-HR
hu-hu
hu-HU
hy-am
hy-AM
id-id
id-ID
- inconsistent onexit begin-end variables
irish-english
is-is
is-IS
italian-swiss
it-ch
it-CH
it-it
it-IT
ja-jp
January
jjjjj
July
June
ka-ge
ka-GE
kernel32.dll
kk-kz
kk-KZ
kn-in
kn-IN
kok-in
kok-IN
ko-kr
ko-KR
ky-kg
ky-KG
LC_COLLATE
LC_CTYPE
LC_MONETARY
LC_NUMERIC
LC_TIME
lower
lt-lt
lt-LT
lv-lv
lv-LV
March
Microsoft Visual C++ Runtime Library
mi-nz
mi-NZ
mk-mk
mk-MK
ml-in
ml-IN
MM/dd/yy
mn-mn
mn-MN
Monday
mr-in
mr-IN
ms-bn
ms-BN
ms-my
ms-MY
mt-mt
mt-MT
nb-no
nb-NO
new-zealand
nl-be
nl-BE
nl-nl
nl-NL
nn-no
nn-NO
norwegian
norwegian-bokmal
norwegian-nynorsk
- not enough space for arguments
- not enough space for environment
- not enough space for locale information
- not enough space for lowio initialization
- not enough space for _onexit/atexit table
- not enough space for stdio initialization
- not enough space for thread data
November
ns-za
ns-ZA
(null)
October
pa-in
pa-IN
pl-pl
pl-PL
portuguese-brazilian
pr china
pr-china
print
Program: 
<program name unknown>
pt-br
pt-BR
pt-pt
pt-PT
puerto-rico
punct
- pure virtual function call
quz-bo
quz-BO
quz-ec
quz-EC
quz-pe
quz-PE
R6008
R6009
R6010
R6016
R6017
R6018
R6019
R6024
R6025
R6026
R6027
R6028
R6030
R6031
R6032
R6033
R6034
ro-ro
ro-RO
runtime error 
Runtime Error!
ru-ru
ru-RU
sa-in
sa-IN
Saturday
se-fi
se-FI
se-no
se-NO
September
se-se
se-SE
SING error
sk-sk
sk-SK
slovak
sl-si
sl-SI
sma-no
sma-NO
sma-se
sma-SE
smj-no
smj-NO
smj-se
smj-SE
smn-fi
smn-FI
sms-fi
sms-FI
south africa
south-africa
south korea
south-korea
space
spanish-argentina
spanish-bolivia
spanish-chile
spanish-colombia
spanish-costa rica
spanish-dominican republic
spanish-ecuador
spanish-el salvador
spanish-guatemala
spanish-honduras
spanish-mexican
spanish-modern
spanish-nicaragua
spanish-panama
spanish-paraguay
spanish-peru
spanish-puerto rico
spanish-uruguay
spanish-venezuela
sq-al
sq-AL
sr-ba-cyrl
sr-BA-Cyrl
sr-ba-latn
sr-BA-Latn
sr-sp-cyrl
sr-SP-Cyrl
sr-sp-latn
sr-SP-Latn
Sunday
sv-fi
sv-FI
sv-se
sv-SE
swedish-finland
swiss
sw-ke
sw-KE
syr-sy
syr-SY
ta-in
ta-IN
te-in
te-IN
This indicates a bug in your application.
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
th-th
th-TH
Thursday
TLOSS error
tn-za
tn-ZA
trinidad & tobago
tr-tr
tr-TR
tt-ru
tt-RU
Tuesday
uk-ua
uk-UA
- unable to initialize heap
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
united-kingdom
united-states
upper
ur-pk
ur-PK
USER32.DLL
uz-uz-cyrl
uz-UZ-Cyrl
uz-uz-latn
uz-UZ-Latn
vi-vn
vi-VN
Wednesday
xdigit
xh-za
xh-ZA
zh-chs
zh-CHS
zh-cht
zh-CHT
zh-cn
zh-CN
zh-hk
zh-HK
zh-mo
zh-MO
zh-sg
zh-SG
zh-tw
zh-TW
zu-za
zu-ZA
='=/=<=
>!>%>)>%?
                          
: :@:`:
:$:(:,:0:
0 0(00080
0(0,00080P0`0d0t0x0|0
0!000<0B0N0T0g0o0w0
'0/0;0@0\0d0j0s0{0
0(00080D0L0U0`0e0q0w0g1o1z1
0!0)010
0 0(010C0o0x0
0$0+020F0W0_0w0
0"0,040?0[0g0n0
0 0,040;0B0]0e0q0y0
0'0,040>0J0i0o0
0&0-070>0
0%0-090A0I0Q0]0e0q0w0
0!0+0A0K0c0s0
0.0=0E0M0Y0`0
"000I0
0(0_0w0,121>1m1
0!0=0X0t0
%0*020;0V0^0f0n0v0|0
0+030?0I0U0]0i0q0y0
0#040Q0[0m0u0}0
0,060O0Y0f0p0
0"0>8F8U8f8n8
0&0F0P0X0]0l0r0z0
0<0H0P0`0{0
0%0i0q0y0
 0*0S0[0d0m0
0(101>1R1Z1b1j1x1
0'1,131;1Y1y1
0)1.151<1C1J1Q1X1_1f1m1t1{1
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
0.131?1E1M1T1]1f1k1s1y1
0;1E1K1_1k1
020M0T0v0
030=0G0Q0Y0a0i0
? ?0?4?D?H?L?P?X?p?
> >$>(>,>0>4>L>P>T>
<(<,<0<4<<<T<d<h<x<|<
=0>5>?>
?*?0?6?>?C?K?X?^?w?
=0=6===G=O=[=c=o=w=~=
;$;0;7;?;H;e;l;s;z;
080?0F0R0Z0w0~0
;$;0;8;@;H;P;X;d;l;x;
< <(<0<8<@<H<P<X<`<h<p<x<
= =(=0=8=@=H=P=X=`=h=p=x=
> >(>0>8>@>H>P>X>`>h>p>x>
; ;(;0;8;@;H;P;X;`;h;p;x;
: :(:0:8:@:H:P:X:`:h:p:x:
? ?(?0?8?@?H?P?X?`?h?p?x?
<(=0=8=>=V=`=f=q=y=
<0| <9
0A0N0S0a0
>(?0?<?B?J?\?q?y?
0BM\8PM
;0C0L0T0\0v0
<0<C<S<
0E1_1h1
>0?F?P?c?
0g0o0{0
:#;+;0;G;b;h;
=$=0=<=H=T=`=l=x=
0K1c1j1
<0|L<9
"0<;m+
0m4shi]Uic
<0|m<9
?(?0?@?M?T?^?f?m?t?~?
0P1Z1b1u1
0t-HHt
1%101<1
1 101;1B1K1f143<3D3L3_3e3r3x3
1)101;1C1M1X1d1l1t1|1
1*10151=1F1^1k1{1
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
1"1&1-11181<1C1G1
1 1$1(1,1D1H1L1P1T1X1\1`1d1
1*111@1N1T1\1k1
1)11181D1M1X1d1n1v1~1
1'111A1F1K1\1a1r1w1
1 1(1<1D1L1T1`1m1y1
1 1*1`1f1l1{1
1&1-1@1L1S1m1x1
1 1,141@1H1O1Z1e1k1t1
1&1/161D1I1b1h1m1s1
1$1,171W1_1g1o1
1"1*191
11191@1H1P1X1b1j1r1
1(1;1B1J1R1Z1
1(1_1k1
1*1@1N1U1b1h1p1x1
1.141B1L1Y1`1l1s1{1
1!161;1@1E1N1q1w1}1
1 1C1J1R1h1r1~1
1'1K1T1\1f1{1
141D1H1X1\1`1h1
151=1E1M1U1a1i1v1|1
151C1\1j1
:!:):1:8:@:I:a:i:q:
;!;);1;9;A;M;Y;d;p;|;
?)?1?9?C?K?S?[?d?
:,:1:9:Y:a:i:q:
=%=1=A=I=Q=`=f=p=
:1;<;D;l;_<g<o<
=(=1=D=S=Z=`=f=k=
1f2p2x2
1G1O1Z1
1H2O2h2
1H2R2^2m2
1k2s2{2
=#=*=1=L=V=
1#QNAN
1#SNAN
>!>)>1>:>u>~>
20K1V1p1
2(202<2D2I2\2d2l2x2
2$20282@2W2_2g2s2z2
2 2(20282@2H2P2\2a2i2q2
2!2)21292H2V2k2t2
2 2(2,20282L2T2h2p2x2
2	2$2*202Q2^2i2r2
2 2$2(2,2024282<2d2t2
2*22292W2_2f2n2
2&222B2H2N2X2`2
2!2-232;2C2K2[2g2o2z2
2"2,232;2G2O2W2\2a2i2q2}2
2$2,242<2D2L2T2\2d2l2t2|2
2'2,272A2W2
2#2/272C2L2Q2h2p2x2
2(2/272M2U2]2e2m2t2
2-2;2C2Y2`2l2t2|2
2#2(2T2o2{2
2#2<2T2w2
2!242<2D2L2T2`2o2y2
2$262=2E2P2\2d2p2v2}2
2+2D2R2_2i2t2
2%2I2S2w2
2#2M2r2}2R3r3
2!3(363=3H3M3f3o3
2!3,373?3G3
2!3+373A3G3k3q3
2	3<3r3
242J2[3y3}3
252=2E2M2T2_2s2{2
272?2P2]2e2n2x2
272B2H2N2\2t2|2
282J2e2
;%;2;8;B;X;h;
; ;&;,;2;8;>;D;J;P;V;\;b;h;n;t;z;
2A2G2O2
>">*>2>:>B>{>
<(=2=:=B=J=Q=f=r=y=
>2>:>B>M>X>d>t>|>
<*<2<<<C<V<]<c<i<s<{<
2F3M3s3z3
<'<2<><F<N<V<`<f<t<
;#;2;:;?;G;M;a;n;{;
=2>H>n>
?2?^?i?{?
: :*:2:::J:P:]:h:o:v:}:
?2???k?u?
="=*=2=M=S=Z=d=j=
2Z2e2q2~2
30?0i0u0
323:3L3T3Y3a3g3w3
3272;2?2C2G2K2O2
(3,3034383<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3x3|3
3(30383@3G3U3n3|3
3&323:3A3Z3`3h3p3x3
3 3(30383@3L3g3u3}3
3 3(30383=3V3^3f3n3
3'3:3@3{3
3 3'3/3=3H3P3d3k3w3|3
3+333?3K3W3_3g3r3
3 3(333O3
3!3(3<3A3I3
3%3+3;3B3
3 3:3@3H3P3X3_3g3o3
333>3S3a3
3$3,343<3D3L3T3\3d3l3t3|3
3"3'343@3L3Q3k3q3w3|3
3!3.343;3M3T3A4W4b4p4{4
3 3,343L3S3[3k3s3~3
3!3-353A3T3\3b3k3w3|3
3&3.363E3Q3
3"3*383@3H3T3[3h3
3*3=3C3P3X3`3h3m3s3|3
3$3=3E3M3U3h3n3x3
3#3?3I3O3b3h3n3y3
3%344<4G4T4]4e4m4
3+363A3I3N3a3m3
3,373Q3W3j3w3
3$383@3H3P3T3\3d3l3p3x3
3=3E3J3a3
3@3H3L3P3T3X3\3`3d3h3l3x3|3
3(3K3\3b3n3~3
3$4.464L4W4_4h4
3'4.4A4y4
3"4-4H4[4
3,484i4
3:4E4M4U4]4e4t4|4
3#5(555;5J5R5Z5b5j5r5z5
=$=-=3=8=>=D=N=T=Y=^=g=o=
<#<3<8<K<V<^<j<p<u<}<
;%;+;3;8;L;T;`;
:$:3:9:>:F:S:[:g:o:{:
3B3O3W3d3j3
3B3V3a3t3
:):3:::B:]:i:q:y:
>3>:>B>W>_>g>s>z>
;";*;3;=;C;W<c<n<
>,>3>D>l>w>
?#?+?3?=?E?M?T?\?d?n?v?~?
?,?3?=?E?M?U?]?b?{?
;#;+;3;>;F;N;V;
=%=3=>=F=N=Y=e=
;';3;?;G;S;\;d;l;t;
:):3:?:I:Z:d:n:x:
3J4i4q4y4
;%;3;S;Y;e;p;x;
<"<*<3<;<T<g<m<v<
3U4]4e4m4t4
3Z4e4q4
41474@4F4P4[4
414D4Z4m4
4)404;4M4X4k4
4)41464<4D4K4R4Z4y4~4
4%4,424>4H4h4o4y4
4!4'42484@4H4R4`4s4
4#4(424F4Q4a4i4u4}4
4#4+434@4L4c4j4s4
4$4,444<4D4L4T4\4d4l4t4|4
4 4,444=4E4P4X4`4p4x4
4!4'444?4N4Z4`4
444@4S4
4(4.4@4T4_4k4{4
4%4-454=4F4O4W4c4k4}4
4&4-454=4F4S4_4g4m4t4|4
4 4&464K4Y4g4
4%4,474?4G4\4
4&4.474A4I4Q4Z4u4|4
4,4=4E4M4U4\4d4x4
4 4*4K4P4U4l4
4 4+4N4S4_4d4
44595B5N5S5S6{6
4.494E4M4a4k4s4{4
4$4F4W4e4k4w4
4(4H4h4t4
4!4U4\4e4k4
4;4W4^4q4
4'5@5b5j5p5
4:5@5H5Z5c5o5
4:5_5j5}566<6F6T6\6a6h6w6
4,575F5k5v5
4.5r5w5
464>4E4M4m4
474D4L4T4\4t4|4
485@5N5b5m5
;	<,<4<B<L<h<m<
>4>>>\>b>o>w>
>'>4>=>C>J>R>_>h>r>y>
=%=+=/=4=:=>=D=H=N=R=W=]=a=g=k=q=u={=
=$=,=4=<=D=L=T=\=d=l=t=|=
=+=4=<=E=R=_=o=
;$;4;f;
>->4>F>a>o>w>
<"<(<.<4<:<@<F<L<R<X<^<d<j<p<v<|<
="=(=.=4=:=@=F=L=R=X=^=d=j=p=v=|=
:(:,:4:L:\:`:p:t:x:
<(<4<@<L<X<d<p<|<
=(=4=@=L=X=d=p=|=
;4;T;l;
:':4:>:U:e:l:
<-<4<<<W<_<k<r<z<
:4:X:x:
?4?Y?c?u?
=*=4=Z=
535M5X5
546M6Z6
5$50585D5Q5\5d5q5x5
5,505L5P5l5p5
5#515>5I5S5Y5a5r5
5'51575=5D5L5_5j5r5{5
5*525>5E5M5a5i5u5|5
5+535;5C5H5T5Z5`5p5v5|5
5$545D5M5
5#5+535>5N5W5c5p5y5
5$5,545
5$5,545<5D5L5T5\5d5l5t5|5
5 5&545F5N5V5]5e5m5u5~5
5%5,545I5t5
5'5/5=5C5M5S5]5e5m5u5
5'5.5<5R5\5h5p5w5}5
5"5*565>5I5N5V5[5c5p5v5
5%5-595Z5b5w5
5"5_5h5(8d8
5/575>5
5'595K5]5o5
5"5e5m5u5
5(5N5V5[5i5
5&5Y5_5p5u5}5
5(606?6K6h6p6x6
5A5F5k5
5A6v6}6
;5=;=a=g=
:%:-:5:A:M:S:]:d:k:r:x:
<#<5<B<H<M<T<[<a<l<w<}<
:":*:/:5:=:B:H:P:U:[:c:h:n:v:{:
5C6Q6W6
5D7L7d7
? ?'?.?5?<?D?L?T?h?w?
>!>'>5>=>D>O>`>y>
5E6S6[6`6h6p6
?-?5?=?E?w?
?"?(?-?5?=?E?Y?l?t?|?
>">5>=>G>[>a>j>x>
=!='=-=5===H=M=W=\=}=
;5;K;m;t;
5M6]6j6u6
<&<.<5<O<\<g<o<v<}<
5Q5Y5d5p5
5T6\6h6p6x6
5V5g5u5}5
606<6X6d6|6
606E6Y6m6
617S8[8
636;6G6L6T6\6k6x6
636;6L6Y6`6k6|6
636A6I6[6a6z6
658S8l8s8{8
6"606>6K6Y6d6
6&626t6
6$6+61686
6!6&61696O6W6d6k6s6y6
6!6)616g6m6u6
6	6'626:6D6]6e6m6u6
6#6,626T6b6{6
6$6,646<6D6L6T6\6d6l6t6|6
6 6$6(6,6064686<6@6D6H6d6h6l6p6t6x6|6
6"6.666?6I6S6[6`6k6r6
6$666>6G6S6[6q6
6*666@6J6b6
6!6)6.6C6J6P6W6a6{6
6#6*6=6J6f6p6w6
6%6.676=6G6P6W6]6h6p6{6
6$6.686?6G6c6r6y6
6&6.696A6[6c6o6u6
6&6?6K6U6Z6b6j6z6
6$6)6P6V6\6b6h6n6u6|6
6&6,6V6`6f6}6
6+6B6M6W6_6g6q6
6+6B6Q6
6.6G6d6
6*6G6f6r6z6
6<6H6P6\6d6u6}6
676B6J6W6d6o6v6~6
6	7(797>7D7V7\7g7p7}7
6!7:7K7e7v7
6)787Z7e7p7
6=7D7L7k7q7w7
= =,=6=a=g=
	,6cr}v
>'>.>6>[>`>f>
?)?/?6?@?G?O?\?g?m?v?~?
6M7S7Y7h7o7
>%>->6>>>M>^>f>~>
6Q:U:Y:]:a:e:i:m:q:u:y:}:
:.:6:;:Q:W:
6S8e8~8
70757=7Q7^7f7n7v7
70777<7O7T7`7p7w7
70868A8O8X8^8
71797E7Q7^7e7p7}7
73787>7F7N7V7]7c7~7
767@7G7O7Y7e7o7
7(70787@7O7[7`7t7z7
7(70787P7X7`7u7}7
7 707T7`7h7
7%71797F7W7_7g7s7y7~7
7'737;7@7H7\7d7l7w7
7%737>7o7
7+757;7C7K7S7Z7e7
7$7,747<7D7L7T7\7d7l7t7|7
7%7/777=7E7W7_7g7m7
7"7-7;7B7H7T7\7d7l7t7|7
7'7-7?7F7L7Y7_7p7v7
7)777K7U7_7g7n7{7
7 7,787D7P7
7"7*7A7K7S7[7c7k7p7
7$7-7E7R7Y7r7
7#7.7E7S7[7d7j7
7-7>7O7
778S8`8q8
7'7A7k7r7
7:7D7L7
7'7f7t7
7"7Q7b7
7"8)80878R8a8k8x8
7 8(818T8\8d8i8s8
7'8/8R8Z8b8j8o8w8
798@8K:U:
>&>7>C>K>P>d>o>{>
;';/;7;C;L;Y;a;v;~;
<*<7<=<C<Q<]<h<{<
:/;7;C;R;
=7=?=D=M=Y=x=
=7===E=K=b=i=q=y=
7G;K;O;S;W;[;_;c;g;k;o;s;
;7;?;G;O;b;};
7h8p8w8
>'>7>?>M>e>k>{>
:!:(:/:7:M:R:Z:b:v:~:
?7???N?V?a?i?u?
>7???Q?Y?d?n?
;+;7;=;R;X;r;x;
<#</<7<><S<Z<j<
838C8L8T8l8
839=9D9Y9`9f9u9|9
848<8T8\8q8~8
858o8w8
868D8]8k8
8%81878?8Q8[8c8m8u8
8%81898A8I8O8X8`8j8
8*828:8W8b8n8v8}8
8$828K8Y8r8
8.848P8]8r8
8*858<8D8P8W8_8f8
8&858=8O8V8\8g:o:
8'868E8N8U8d8k8r8y8
8"8)818A8O8W8_8g8s8{8
8%8*828:8O8W8_8n8|8
8 8*828I8Y8a8i8q8
8!8+838;8K8W8_8k8s8{8
8$8,848<8D8L8T8
8$8,848<8D8L8T8\8d8l8t8|8
8$8-848C8
8%8,848I8^8f8n8v8}8
8!8)858@8N8g8
8!8.868;8E8^8d8j8s8{8
8"8*878>8Q8X8
8 8$8(8,8084888
8 8$8(8,8084888<8@8D8H8L8P8T8
888@8D8`8h8l8
8%8.8F8M8U8]8e8q8y8
8&8?8H8V8]8o8t8|8
8*898^8
8.8S8l8
8+959E9M9U9f9n9v9~9
8 9L9x9
8B8G8O8_8n8v8|8
<8<d<i<p<
> >,>8>D>P>\>h>t>
8F9Y9f9
?8?J?b?j?
;#;*;8;Q;_;w;
:8:@:R:`:k:w:
; ;8;<;T;d;h;|;
8U8^8d8
9$:<:^:
909W9d9
949<9C9]9d9l9t9|9d:l:t:|:
949I9S9Z9`9h9p9
9 :*:/:4:<:B:X:j:o:u:
959=9D9P9V9[9h9o9w9
959J9j9u9
9,:7:u:
989Q9b9n9u9|9
9#91989M9X9`9h9p9|9
9*929:9B9
9%959k9s9
9.969>9E9M9U9i9w9~9
9 9(90989<9D9X9x9
9 9(90989@9H9P9X9`9h9p9x9
9!9)91999H9T9g9r9
9$9.969>9E9P9X9`9h9{9
9"9*969>9J9P9]9~9
9 9'9,90949U9
9 9%9+93989>9F9K9Q9Y9^9d9l9q9w9
9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
9!9)9?9T9q9y9
9(9/9B9J9Y9a9m9u9z9
9+9;9C9K9S9]9k9u9{9
9$9<9D9L9T9^9f9q9{9
9'9<9D9P9U9b9x9~9
9/9:9F9U9a9i9r9z9
9 9.9G9U9r9y9
9,9<9I9i9o9
9'9/9R9]9k9q9w9
9&9g9o9w9
9$9Q9g9o9|9
9&9V9a9i9q9x9
:9:A:I:Q:w:
9b9h9l9p9t9
?.?9?h?
9J9U9w9
;9<M<v<%=
9reqrd cgcueaz apn irmdic sdjearll jwsapa mpc mbla pesz eiqghonm usfci gjuzimedd logodeu squsafo pmcouiqap fxkelu jkop opjpam scmu wptekcva onifb cnna jflo gjn npjuvuba sub ltbemlzugr cpnerg tdciznmau rolej pfum fsjilc upnpi dgax nesjesmmae mvxumjj fenqie vnra yljebt mqxinjtom auozsfebmc fmsau sdsup dpuqih jelubepsbu imuqvofdme jtfelugu twzunvrago npopiacjfo ynpe upwaf bemi bvfiz hrimeygp yabm ksnolvp ejzpah liopzenzw vbam dfjao bauf fnfoogexj gdnifcuro wbv cjpo ylazusa imqza puf bszopceu odwenokce lddironlid ewokja mfajugin dnfuh itg bdenukcjo sygi oudsfapa fhfel moldic tpcicblifi sgtapmcu rtbab tmniazm mcfinbehir nxpucvgugw sgta gsnuuech lsei orjlanqd srbaft ulbniclg lrukaau bhbep lfzedquci llr aebi neascab qtnoz pcesiaih kwpo 
<$<+<9<R<`<y<
9	:*:X:
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
address family not supported
address_family_not_supported
address in use
address_in_use
address not available
address_not_available
`adjustor{
=#=A=H=P=\=a=n=t=
=/=:=A=I=P=d=l=x=
already connected
already_connected
>!>,>A>L>X>d>l>x>
`anonymous namespace'
<A|,<P
AreFileApisANSI
argument list too long
argument out of domain
AtOHt5Hu
<at-<rt"<wt
August
<(<a<v<
.?AVbad_alloc@std@@
.?AVbad_cast@std@@
.?AVbad_exception@std@@
.?AVbad_function_call@std@@
.?AVbad_typeid@std@@
.?AVcharNode@@
.?AVDNameNode@@
.?AVDNameStatusNode@@
.?AVerror_category@std@@
.?AVexception@std@@
.?AV_Generic_error_category@std@@
.?AVinvalid_argument@std@@
.?AV_Iostream_error_category@std@@
.?AVlength_error@std@@
.?AVlogic_error@std@@
.?AV__non_rtti_object@std@@
.?AVout_of_range@std@@
.?AVoverflow_error@std@@
.?AVpairNode@@
.?AVpcharNode@@
.?AVpDNameNode@@
.?AVregex_error@std@@
.?AVruntime_error@std@@
.?AV_System_error_category@std@@
.?AVtype_info@@
B0M0T0e0m0s0
bad address
bad_address
bad allocation
bad exception
bad file descriptor
bad_file_descriptor
bad function call
bad message
 Base Class Array'
 Base Class Descriptor at (
__based(
BeginPaint
<%>,>:>B>^>f>n>v>
<&<.<\<b<h<n<t<z<
<$<)<;<B<I<P<
:';,;B;J;^;q;w;
<B<K<b<o<
:,:B:M:U:a:i:y:
;B<N<\<
=:=B=N=U=]=r=|=
=:>B>O>W>_>g>t>
bP?s/m
broken pipe
,bS3K@#@
bWWWWj
=	>'>>>c>
__cdecl
CheckDlgButton
<#<;<C<K<Q<]<c<k<z<
<)<C<K<V<m<
class 
 Class Hierarchy Descriptor'
cli::array<
cli::pin_ptr<
CloseHandle
CloseThreadpoolTimer
CloseThreadpoolWait
__clrcall
clteurfdoh abckos snmojsfo cigcao cajfuapdp nejidopp difniab sti ziobokafjn zfuujotue pesvugcba jtba suluguk tcmeglfan ogjriak ebhtig xhcoxwmad hzmun bvsegdc dmjuap ucltesw uvfte lcfendxa bwjeocf sylomsb cmb mixli blfomddim scdejnf sbrau lsbujf arnlilf dnsompd dxlol okygoteqou ibgdixxdu iigmdope ogcaesehlf olu iflaguotu ijflo poazw acpboir dnaise ejfz ume fdfifealot fqfi ljci ybhafnwee gnqetgx suvajek isyena ducza dmcoj vlgi eltbimmabu kpu zfo uaskyeg nguije noggicpq pejjibefaj ejf rcub saggecfs benjebgno cxcin gojfufnpe fqjutjnoij dfdey vansoojsp ilaoebc bmtofcmig kajjohsju yspagscop vss gtlijt fziv udlsefxlak ligig yrg afbpirdol fynewzb tqjadbab hosci dlja esgi pdabewb cfc vndajco nmxefdgar gvruliibju jgxiccm ifnpue giya uje ecclucv oredjeroon xyq mifsaepun bunbosdsiw ibgmadpl usvled
===C=m=u=|=
<,<=<C<M<X<
coclass 
cointerface 
CompareStringEx
CompareStringW
 Complete Object Locator'
connection aborted
connection_aborted
connection already in progress
connection_already_in_progress
connection refused
connection_refused
connection reset
connection_reset
const 
`copy constructor closure'
CorExitProcess
<#<;<C<O<W<_<g<r<
cpfoag tugmimbv dgvojb pcfigczuz bghuz dpg leata nsgebxiboa slo lendi behb uclocau oacgbaqn egtw ryifafn pbf pinpor nacjafgzas slmo ttaaca izqm tgd tcfifntep blbuvu cizz ordqubo mentim tqbevtr lrus snjemo lesjanai qunmags tfejolm urcmenffue mnti bvicu ptp sfsuvc ljduswr fbvel pfdidumq yenpieh jjsiznemun aga lubte bigda tjtanzsof wcmo jdvem gzvoln umedgi bqmuppfa zyfumyr fonajug fvbagxlogc gdtuabwmo mvoafe fjegibuc dorwunl ubipmu hugfept osrlapvtax pxjoge inpq mllo taiogo gbbovuzbi qojleb jsf dkpofupgi upblanpi eikqbei gvbingumop gpd fspu ogjro ipdvujbq wnvoiu jdvoi qcqetrja cfnuuflsub mbuugiaav djm gkf nsogebf xpf sjhoivif xwf dlsobodvai cpcuzzviu umfisor xpgagp cjmotd ssulugfk ctelufhce rvecoclf iqpey ayti dcag bltavpj s'
>$>*>c>p>v>
CreateEventExW
CreateEventW
CreateFile2
CreateFileW
CreateSemaphoreExW
CreateSemaphoreW
CreateSymbolicLinkW
CreateThread
CreateThreadpoolTimer
CreateThreadpoolWait
cross device link
>Cu/f9F
="=-=C=X=b=w=
D0L0T0e0w0
@.data
dddd, MMMM dd, yyyy
!ddove nbdeosvqar xpbebcju ijljimtci pjgaiogdb sfip tpoluwman lsacetjd ibgsil zannoeu sfagu unvq udnk cjda ffodib rjdu imljoal drjedtafo agiyjus ifspi ccanelbdia dam nzdioihtju jligoiw jezigabpj uucrlujsgu jbs hclu brc quvgiczlem ucmocaaxf damogiju wjzevfjogo lslepsn nyzuglna dsg onbreh fupgumnbui tajuc lhzo jghiuzrneg gdzibjt ooa raxf bpe laufuduejz nfcesw ytic lgigiomqso mvzupc jkcapezxa nutworgtez nkcuzb gugnu scesedb dcbiudisli mpsemdfi faecdugpcu fjgi bpfuebonpe mbzaukplug ojv fln brtuhbkots blla ijfvo bga dfhuz csvid nzxut fkpusotj mcviwnd lulreodhq lteecal pocsory eylrid osnijeq hhpewsmix qoaxbedvn kdju mygichemai iec abe jruzogfj jonvewx clzujlti ermc znhozxkuka iffh vlvuem mpcus jlfep hcgahso bdeza illr itpceud ctvufzsoj avp nhlazfuo ag	BU
December
DecodePointer
`default constructor closure'
 delete
 delete[]
DeleteCriticalSection
DeleteFileA
destination address required
destination_address_required
device or resource busy
? ?(?<?D?I?R?c?
directory not empty
>!>D>K>S>^>c>|>
?<?D?K?X?b?n?v?~?
:<;D;L;Z;b;j;
double
DrawTextA
<&<.<:<d<v<
`dynamic atexit destructor for '
`dynamic initializer for '
__eabi
`eh vector constructor iterator'
`eh vector copy constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`eh vector vbase copy constructor iterator'
<:<e<j<q<x<
?e?j?r?
<ellipsis>
,<ellipsis>
>E>L>T>[>f>r>z>
:":(:.:=:E:L:T:Y:a:i:
;&;,;e;m;u;};
EnableWindow
EncodePointer
EndDialog
EndPaint
EnterCriticalSection
EnumSystemLocalesEx
EnumSystemLocalesW
:(:;:E:O:Y:_:f:m:}:
:#:E:P:p:{:
executable format error
ExitProcess
extern "C" 
f0l0r0
f1fr/C
>$>F>a>
__fastcall
FatalAppExitA
f*bw{H
FdR]}*f
February
<F<`<e<m<
file exists
filename too long
filename_too_long
FileTimeToLocalFileTime
FileTimeToSystemTime
file too large
FindClose
FindFirstFileExW
FindResourceA
{flat}
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FlushProcessWriteBuffers
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryWhenCallbackReturns
Friday
<F>R>W>e>k>z>
>%>F>R>Z>b>j>
Ft,Ot	OtFOt#OuV
function not supported
>$>,>;>F>V>^>j>q>y>
;]<@=G=
G0Pj.S
G4Pj/S
G8PjDS
GDI32.dll
GDPjGS
GdPjOS
generic
generic-type-
GetACP
GetActiveWindow
GetClipRgn
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetCPInfo
GetCurrentDirectoryW
GetCurrentPackageId
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentThread
GetCurrentThreadId
GetCursor
GetDateFormatEx
GetDateFormatW
GetDCPenColor
GetDeviceCaps
GetDlgItem
GetDlgItemInt
GetDriveTypeA
GetDriveTypeW
GetEnvironmentStringsW
GetFileInformationByHandle
GetFileInformationByHandleExW
GetFileTime
GetFileType
GetFontLanguageInfo
GetForegroundWindow
GetFullPathNameA
GetFullPathNameW
GetGraphicsMode
GetInputState
GetKeyboardType
GetLastActivePopup
GetLastError
GetLocaleInfoEx
GetLocaleInfoW
GetLogicalProcessorInformation
GetMapMode
GetMenu
GetMenuCheckMarkDimensions
GetMenuContextHelpId
GetMenuItemCount
GetMenuItemID
GetMenuState
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetNearestColor
GetObjectType
GetOEMCP
GetPixelFormat
GetPolyFillMode
GetProcAddress
GetProcessHeap
GetProcessWindowStation
GetPropA
GetRandomRgn
GetScrollPos
GetStartupInfoW
GetStdHandle
GetStretchBltMode
GetStringTypeW
GetSystemPaletteUse
GetSystemTimeAsFileTime
GetTextAlign
GetTextCharacterExtra
GetTextCharsetInfo
GetTextColor
GetTickCount
GetTickCount64
GetTimeFormatEx
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetUserDefaultLocaleName
GetUserObjectInformationW
GetWindowContextHelpId
GetWindowDC
GetWindowLongA
GhPj8S
GHPjHS
GlobalAlloc
GlobalFlags
GlobalSize
GlPj9S
GLPjIS
:":G:N:V:^:i:}:
>$>,>@>G>O>h>o>
:G:O:W:g:
G<PjES
G@PjFS
G\PjMS
G`PjNS
G|Pj=S
G Pj*S
G,Pj-S
G(Pj,S
G$Pj+S
GPPjJS
GpPj:S
<G<T<]<k<r<z<
GTPjKS
GtPj;S
;&;-;g;u;
GvM&(wM
GXPjLS
GxPj<S
`h````
H6T6`6l6x6
h7l7p7t7x7|7
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
<(<H<h<
=(=H=h=
;(;H;h;
`h`hhh
HH:mm:ss
>'>/>:>H>h>o>
HHtVHHt
Hl7,tf
host unreachable
host_unreachable
?&?-?;?H?P?
Ht+Ht$Ht
hupsems nrarodun ugg dss prag sqdem uteugejim srd bpq bxvovae egq iirgm wlg lsd dmbofmkov rpiro vdgitij jripujev gftuo fnjichros popbi efuxneblt sbbuf ata fbfuniico oojj wrogi mde gffi ffcadggo jgceoduk bdivumckaj gnno eepy abetojun mlosurt gnwesooc fpyanado lzsopzp mvtils rfnibl oumusv nofe qjlufdja aamxusuvb djimopo uel bnfufeuf zagruifln mcpo oqme lqj vbcumfl qfonawagp ogbdu jznaj zkpijj ninci ivdgoabnc jxs butraq ccotu igvso oneoce tadmiisrl megme nss xftelo codtofbb uuijnjit vbo duisjuzcp nhwap bpgaebzgi ihslal apnbus fuqpusl sjovisvge dje pgoai sdrao udam gwgeabez gblegerzur gxmagmoqe clt ddfaftbiil nneun vlaciv uatcsefi wlcef aylugem rsavanox jbm mengohjx zgdeipkugu eganteb ijiyt tslardj yxveorl uucsdu fdpixmf fbventcie vlpewmag perbl
_hypot
;';-;?;i;
?'?-?i?
?(?<?I?
identifier removed
illegal byte sequence
inappropriate io control operation
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
__int128
__int16
__int32
__int64
__int8
interrupted
invalid argument
invalid_argument
invalid seek
invalid string position
io error
iostream
iostream stream error
:#:+:>:I:Q:[:f:r:z:
is a directory
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
IsValidLocaleName
IsWindowEnabled
IsWindowUnicode
<ItH<ht<<lt
<itx<o
jA[jZZ+
JanFebMarAprMayJunJulAugSepOctNovDec
January
jAZjZ^
@jd_u	
-jE(;f
j/_j\[f;
j@j _W
JNWAJNs
j	PjYV
=J=R=d=l=
>">/>>>J>R>Z>b>h>
:":*:=:J:R:Z:b:j:r:z:
j"X_^[]
k1ahjpaucm dzpan znb jnwi mgwalkq vctis uiu lrl xkjo nunx cjo sstiyadilu ugcfeeik cbfo fevi stueoupa cnopo dgqurp icunsoy sjrezccieq enouiffim bhga qoxa acfw pocopi rgkodjsacs sgcitjsi oplpen omsrol dmgagtl kpmeof cun xcocu lmpoauzdag fsyeeaumbl asmlonojdi nyhuwo hnvins vafma anglu miebz yoz aedbye ansmehy nvpiqcj cog ltnuzmmee hsgentmig tqpuffcoe nbduubtt lpvoi cusagag usgcos oqpj ils bnbiouc udjed axblijmzep scdi lmjuq fgjodkp iedza vbj ijagd upvogeyfdu djjovhumac upqpe uotbsi lun fjlilkse fsnaqr gnihif sejtepj gfitovjnun dyaolobrju hibbogipc ygima ojmutafsoo ptredimp alhfii ioumfnuhv mngedni aggc trg ooadoq ypziw ojse fnnabop ntv fxnicfqiep bupyagcjag icgpus zamanast gnupijzven wgkin ylkensq ddxi zdzinnse yefoohetet rnati deY\
;,;=;K;d;o;
} kE$<
KERNEL32.dll
kjw%C1
KKt*KKt
=#===K=P=X=l=y=
L5Ml+AM
LCMapStringEx
LCMapStringW
LeaveCriticalSection
LoadIconA
LoadLibraryExW
LocalFlags
`local static destructor helper'
`local static guard'
`local static thread guard'
`local vftable'
`local vftable constructor closure'
LockResource
=&>,>>>l>v>
>*>/>@>L>V>
=+=L=V=d=|=
>!>@>M>
`managed vector constructor iterator'
`managed vector copy constructor iterator'
`managed vector destructor iterator'
map/set<T> too long
MessageBoxW
message size
message_size
>!?)?=?M?[?g?n?v?
MM/dd/yy
Monday
MoveFileA
:%:M:T:g:r:
MultiByteToWideChar
>%?/?N?
network down
network_down
network reset
network_reset
network unreachable
network_unreachable
 new[]
_nextafter
$NH"$N#
no buffer space
no_buffer_space
no child process
no link
no lock available
no message
no message available
`non-type-template-parameter
no protocol option
no_protocol_option
no space on device
no stream resources
no such device
no such device or address
no such file or directory
no such process
not a directory
not a socket
not_a_socket
not a stream
not connected
not_connected
not enough memory
not supported
November
=+NOv-Nvm.NC
;&<.<:<N<T<r<
NU2 N-? N\e N
(null)
October
OH`d#~
<<<O<]<K=
`omni callsig'
oNymoN
operation canceled
operation in progress
operation_in_progress
operation not permitted
operation not supported
operation_not_supported
operation would block
operation_would_block
operator
OutputDebugStringW
owner dead
:?:O:z:
P6X6\6`6d6h6l6p6t6x6|6
__pascal
PeekNamedPipe
permission denied
permission_denied
: :@:P:f:
piaemjdu jgtu ibgduh bgawogoet suegdamigp gbnizrj jjpurrdi jjjunpde zbruldxibl djpisomru rpdulo ntgu qtureep gtd egfnij iexbecuver oyaujmep capuxo zqbikdpudk myse bkyoo wrfoxanf stbertnaj fhvusjlol crasuoi jfebedf mfsacdfaa ljon qdcino pbegucc vebom vndadlri bfdetmd zgf agvnus tjtabb dtk djp fjfivjvaul lelpogm ymcinrcam cqez quddebrb znyos gxminnwel ahcbenfyo osr gaealku ndufew cfsuojsma jebse cbniebinc eeoselie bjupapco jfjetnk cxjohltopw aly pdup gjb tchecbzi zkcockalad zvxeocg suijdicdfi gvojoklak sgugiisf pdmamsge cdiqoeqbk jloeid qdfevaslee deprouatd ovps uexofgibg lfbidjc rdpa umickezft ojfseuupel eovb zfju kxd pfpamw azbucef jpbep pcca omvd aes ejlefezm cuc yngafniow bfgu ssdiccdiz lsbi nlcory mjyobjf jwmisilge flromxsefg aqiw cfogelt tyvagoj mdsi awanjosl ndbosgaogo niml kda sijm bjhup uifad odnn eozg jgp pahhicfjeu zpdf
~pjCXf
`placement delete closure'
`placement delete[] closure'
PostMessageA
PP9E u
private: 
protected: 
protocol error
protocol not supported
protocol_not_supported
PSSSSV
= =(=@=P=T=d=h=l=p=x=
__ptr64
>,><>@>P>T>\>t>
public: 
pv0<us
PVVVVQ
PWWWWV
Q1U1Y1]1a1e1i1m1
)ql(=	!
QQSVWd
QueryPerformanceCounter
?-?Q?X?e?t?|?
<=<R<~<
RaiseException
`.rdata
ReadConsoleW
ReadFile
read only file system
regex_error
regex_error(error_backref): The expression contained an invalid back reference.
regex_error(error_badbrace): The expression contained an invalid range in a { expression }.
regex_error(error_badrepeat): One of *?+{ was not preceded by a valid regular expression.
regex_error(error_brace): The expression contained mismatched { and }.
regex_error(error_brack): The expression contained mismatched [ and ].
regex_error(error_collate): The expression contained an invalid collating element name.
regex_error(error_complexity): The complexity of an attempted match against a regular expression exceeded a pre-set level.
regex_error(error_ctype): The expression contained an invalid character class name.
regex_error(error_escape): The expression contained an invalid escaped character, or a trailing escape.
regex_error(error_paren): The expression contained mismatched ( and ).
regex_error(error_parse)
regex_error(error_range): The expression contained an invalid character range, such as [b-a] in most encodings.
regex_error(error_space): There was insufficient memory to convert the expression into a finite state machine.
regex_error(error_stack): There was insufficient memory to determine whether the regular expression could match the specified character sequence.
regex_error(error_syntax)
.reloc
RemovePropA
resource deadlock would occur
resource unavailable try again
__restrict
restrict(
result out of range
=R>p>w>
RtlUnwind
;:;?;S;
:":(:S:
:#;S;a;
Saturday
`scalar deleting destructor'
;scmdP
SendMessageA
September
SetConsoleCtrlHandler
SetCurrentDirectoryW
SetDefaultDllDirectories
SetDlgItemTextA
SetEndOfFile
SetEnvironmentVariableA
SetFileInformationByHandleW
SetFilePointer
SetFilePointerEx
SetFocus
SetLastError
SetStdHandle
SetTextCharacterExtra
SetThreadpoolTimer
SetThreadpoolWait
SetThreadStackGuarantee
SetUnhandledExceptionFilter
SetWindowTextA
short 
ShowWindow
signed 
SizeofResource
snokoise nbyetatd jrbaume eauda djs mvgutp waqao fslu vnpaiwpvu cie fsabiol sep iyap rme xegiul giuoleto darlohy ytfo nsgehliwiz sbwunsc izesla and ycfarlu cclijdvird flbuoer rlsilfr lzt lhpetvli fzsonxra amhcuegjn onafpigkn nafo bbmipmce luil bljuip zwid ejn szxu zmomuzu dbvoaqr illto cfjogcsaln cddofoffe mgta njte hqfeqjn wnladagpu orfapuzbgo pgdi acbxu zud cmuvaecb lfi vvd anr lpm cdf gzdegjfiar uslbi bbbohvgie cfqu llbercfa pgsuvo wmgatxino bhvoge mleaje mfligc miqfodf lrel lqm dqla jzfurbiace cfbiiazbs caa jrcohkpuze jwle uas bun vlceamoo tuoe bfg ejcnowfcif casi cdlunuw tkl udljawb slfagamz rtracg dqjul eczeb fqquri jrupel fpgals juqlaglj kirgitosho glnafa inguowozv fhocujjdu tefsiva lmipucidsi lbpegigid ljcitgte rfje oqb yokcudpvo lisci iuxxpi gsimotfva dbramg cbejae fogcosf lns jalmehjbol lbhega fgruzy dscoipce 
SSPQSW
state not recoverable
static 
__stdcall
std::nullptr_t
stream timeout
`string'
string too long
struct 
Sunday
SunMonTueWedThuFriSat
SVjA[jZ^+
,SVWj0X
SVWjAh
SVWjA_jZ+
system
SystemFunction036
SystemTimeToTzSpecificLocalTime
= ='=T=
~';_t|%3
< t8<	t4
t9<_u5
_tcPVj@
tE<A|2<P
`template-parameter
template-parameter-
`template static data member constructor helper'
`template static data member destructor helper'
TerminateProcess
text file busy
t!=fff
+t"HHt
tHHt*Ht#
__thiscall
!This program cannot be run in DOS mode.
 throw(
[thunk]:
Thursday
timed out
timed_out
TIN)M]N'
^>tiw iwitmotgj fzdoosnca lxsidkmol dph iexps cwzetnfosz jmgocdboz bdt dbgiolp zlfi mmdacnan fui oeou myfos nlda ieeeounogs uczy mgvohh bdtoldueno nce nvd cmsu gng addmin ogjdow nsqagbvubj xckomg edcmilpfe gjjips ierft ofdoeg jvjugpapug jndanrmee sgd eunmvajg uilizvexu bgpikvx tft fvopa dzfulji pbjookjul gvzewnf vpsevnso couteka vbg srgics exlloo aas ubdvoc fyt cone odsiigivyb aohzlibcut zqbetpad zalmat rlmiqifmo flmigqbeac jhuduufbn ftjormc fbcedugcu bqnosno jesz puhrubb vwfaf vbgidbu imnlul uomvtos rejcinn fnzuhg cnga ubub vgafejzt ufdgumuxde igug bzdiglna jnkir bmafotr wgza jcajev vegjo vxgosjl ljboglzaps aqajbigi mmt nlqivrvopl ztam jjq dcfe thsic psqelpio cpvu vlboqfnugs ozygormn bgye iedjfoshxu uola uswxafmcu jaule jobjuygf imnpi zpce penoceghce vjo fjolins ncvof bociu crlaon dmzi fneavijide zonua mljelbni qcb jyouiig ucnder escgo vrteem
-t*j0X;
tK<_t<<$t8<<t4<>t0<-t,<a|
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
too many files open
too_many_files_open
too many files open in system
too many links
too many symbolic link levels
&tS<K)
Tt^HtTHtJHt
t.<_u*
Tuesday
;t$,v-
t WW9}
t?x?|?
 Type Descriptor'
`typeof'
tyPVj@W
u1PPPh
uaPPPS
?:uBGW
uBjAYjZ+
=U=\=d=
:U;d;r;};
`udt returning'
uHjAXf;
u#j,Xf;
__unaligned
UnhandledExceptionFilter
UNICODE
union 
<unknown>
UNKNOWN
`unknown ecsu'
unknown error
Unknown exception
unsigned 
UpdateColors
UQPXY]Y[
URPQQh
USER32.dll
UTF-16LE
uWjAXf;
-v {4f
value too large
`vbase destructor'
`vbtable'
`vcall'
__vectorcall
`vector constructor iterator'
`vector copy constructor iterator'
`vector deleting destructor'
`vector destructor iterator'
vector<T> too long
`vector vbase constructor iterator'
`vector vbase copy constructor iterator'
VF{a+#*m
`vftable'
<=vf<>u
virtual 
`virtual displacement map'
<<v-j3
v	N+D$
volatile
 volatile
volatile 
`vtordisp{
`vtordispex{
;,;W;];
__w64 
WaitForThreadpoolTimerCallbacks
wchar_t
Wednesday
WideCharToMultiByte
WindowFromDC
Wj0XPV
>W?_?k?z?
!(=WoZ
WPPPPj
}wpvyr
WriteConsoleW
WriteFile
wrong protocol type
wrong_protocol_type
wUrJIy
>#>:>X>
xdigit
xppwpp
xpxxxx
Yu2Vj@h
YY_^[]
<z~$<A|
<*<Z<d<s<x<
-z~`r;