Analysis Date2015-05-28 18:29:40
MD50332af48e99f7bc6a7747c004fbfb9c2
SHA15a422922211fe68ba21a930a871330bafab4d5b8

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: 10e9926965cc47be8dd8e642be779bb7 sha1: 5456ac5e5b9e4b019df6ea9b49451440d9f3aa0e size: 327680
Section.rdata md5: 47822245a6328500ca742dc84c5475e0 sha1: c13d8fe61c7426f3d664fa76587b7ba3bddb78f2 size: 61440
Section.data md5: 3181aba85f6f7db6a4edd9e0cb910918 sha1: 53404dbfa2b4bbd2d1cb2dcbe2892f7488904b08 size: 7680
Section.reloc md5: d7a4dac4cf9bb9388825befdfe3a4f26 sha1: 5d95c3c5d098d7b77552210c432cc27e428eceab size: 27648
Timestamp2015-05-11 07:13:41
PackerMicrosoft Visual C++ 8
PEhashcd7dcd04ab3cf363e72cd6d49fdcb9a496e20b5f
IMPhash675f2072273a2ba4e4dc9c2c99e8c09d

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates FileC:\hnfptaghwxbq\rn1l1dnila7b5n6dh.exe
Creates FileC:\hnfptaghwxbq\xnbr7kxkt
Creates FileC:\WINDOWS\hnfptaghwxbq\xnbr7kxkt
Deletes FileC:\WINDOWS\hnfptaghwxbq\xnbr7kxkt
Creates ProcessC:\hnfptaghwxbq\rn1l1dnila7b5n6dh.exe

Process
↳ C:\hnfptaghwxbq\rn1l1dnila7b5n6dh.exe

RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Isolation SSDP Health Plug Media SNMP TP ➝
C:\hnfptaghwxbq\nvrutjtxrb.exe
Creates FileC:\hnfptaghwxbq\nvrutjtxrb.exe
Creates FilePIPE\lsarpc
Creates FileC:\hnfptaghwxbq\wfcjs7gnf
Creates FileC:\hnfptaghwxbq\xnbr7kxkt
Creates FileC:\WINDOWS\hnfptaghwxbq\xnbr7kxkt
Deletes FileC:\WINDOWS\hnfptaghwxbq\xnbr7kxkt
Creates ProcessC:\hnfptaghwxbq\nvrutjtxrb.exe
Creates ServiceOffline Server Storage CardSpace Keying DCOM - C:\hnfptaghwxbq\nvrutjtxrb.exe

Process
↳ C:\WINDOWS\system32\svchost.exe

Process
↳ Pid 812

Process
↳ Pid 860

Process
↳ C:\WINDOWS\System32\svchost.exe

Creates FileC:\WINDOWS\system32\WBEM\Logs\wbemess.log

Process
↳ Pid 1216

Process
↳ C:\WINDOWS\system32\spoolsv.exe

RegistryHKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\BeepEnabled ➝
NULL
RegistryHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\System\Print\TypesSupported ➝
7
RegistryHKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\Printers\SymbolicLinkValue ➝
NULL
RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Print\Printers\DefaultSpoolDirectory ➝
C:\WINDOWS\System32\spool\PRINTERS\\x00

Process
↳ Pid 1868

Process
↳ Pid 1164

Process
↳ C:\hnfptaghwxbq\nvrutjtxrb.exe

Creates Filepipe\net\NtControlPipe10
Creates FileC:\hnfptaghwxbq\ypfamnqdyopu.exe
Creates FileC:\hnfptaghwxbq\veq2rrbwv
Creates File\Device\Afd\Endpoint
Creates FileC:\hnfptaghwxbq\wfcjs7gnf
Creates FileC:\hnfptaghwxbq\xnbr7kxkt
Creates FileC:\WINDOWS\hnfptaghwxbq\xnbr7kxkt
Deletes FileC:\WINDOWS\hnfptaghwxbq\xnbr7kxkt
Creates Processy6lqiqitdrga "c:\hnfptaghwxbq\nvrutjtxrb.exe"

Process
↳ C:\hnfptaghwxbq\nvrutjtxrb.exe

Creates FileC:\hnfptaghwxbq\xnbr7kxkt
Creates FileC:\WINDOWS\hnfptaghwxbq\xnbr7kxkt
Deletes FileC:\WINDOWS\hnfptaghwxbq\xnbr7kxkt

Process
↳ y6lqiqitdrga "c:\hnfptaghwxbq\nvrutjtxrb.exe"

Creates FileC:\hnfptaghwxbq\xnbr7kxkt
Creates FileC:\WINDOWS\hnfptaghwxbq\xnbr7kxkt
Deletes FileC:\WINDOWS\hnfptaghwxbq\xnbr7kxkt

Network Details:

DNSleaderperfect.net
Type: A
74.208.214.100
DNSheavyheart.net
Type: A
208.48.81.134
DNSheavyheart.net
Type: A
208.48.81.133
DNSheavyheart.net
Type: A
64.15.205.101
DNSheavyheart.net
Type: A
64.15.205.100
DNSgentleheart.net
Type: A
203.189.109.142
DNSbelongbehind.net
Type: A
95.211.230.75
DNSanswerbattle.net
Type: A
DNSglassbattle.net
Type: A
DNSdifficultheart.net
Type: A
DNSheardheart.net
Type: A
DNSdifficultperfect.net
Type: A
DNSheardperfect.net
Type: A
DNSdifficultmayor.net
Type: A
DNSheardmayor.net
Type: A
DNSdifficultbattle.net
Type: A
DNSheardbattle.net
Type: A
DNSpleasantheart.net
Type: A
DNSnecessaryheart.net
Type: A
DNSpleasantperfect.net
Type: A
DNSnecessaryperfect.net
Type: A
DNSpleasantmayor.net
Type: A
DNSnecessarymayor.net
Type: A
DNSpleasantbattle.net
Type: A
DNSnecessarybattle.net
Type: A
DNSorderheart.net
Type: A
DNSrequireheart.net
Type: A
DNSorderperfect.net
Type: A
DNSrequireperfect.net
Type: A
DNSordermayor.net
Type: A
DNSrequiremayor.net
Type: A
DNSorderbattle.net
Type: A
DNSrequirebattle.net
Type: A
DNSleaderheart.net
Type: A
DNSheavenheart.net
Type: A
DNSheavenperfect.net
Type: A
DNSleadermayor.net
Type: A
DNSheavenmayor.net
Type: A
DNSleaderbattle.net
Type: A
DNSheavenbattle.net
Type: A
DNSheavyperfect.net
Type: A
DNSgentleperfect.net
Type: A
DNSheavymayor.net
Type: A
DNSgentlemayor.net
Type: A
DNSheavybattle.net
Type: A
DNSgentlebattle.net
Type: A
DNSvariousheart.net
Type: A
DNSreturnheart.net
Type: A
DNSvariousperfect.net
Type: A
DNSreturnperfect.net
Type: A
DNSvariousmayor.net
Type: A
DNSreturnmayor.net
Type: A
DNSvariousbattle.net
Type: A
DNSreturnbattle.net
Type: A
DNSjourneyunderstand.net
Type: A
DNShusbandunderstand.net
Type: A
DNSjourneybroad.net
Type: A
DNShusbandbroad.net
Type: A
DNSjourneybehind.net
Type: A
DNShusbandbehind.net
Type: A
DNSjourneybutter.net
Type: A
DNShusbandbutter.net
Type: A
DNSdestroyunderstand.net
Type: A
DNSlittleunderstand.net
Type: A
DNSdestroybroad.net
Type: A
DNSlittlebroad.net
Type: A
DNSdestroybehind.net
Type: A
DNSlittlebehind.net
Type: A
DNSdestroybutter.net
Type: A
DNSlittlebutter.net
Type: A
DNSriddenunderstand.net
Type: A
DNSbelongunderstand.net
Type: A
DNSriddenbroad.net
Type: A
DNSbelongbroad.net
Type: A
DNSriddenbehind.net
Type: A
DNSriddenbutter.net
Type: A
DNSbelongbutter.net
Type: A
DNSchairunderstand.net
Type: A
DNSthoseunderstand.net
Type: A
DNSchairbroad.net
Type: A
DNSthosebroad.net
Type: A
DNSchairbehind.net
Type: A
DNSthosebehind.net
Type: A
DNSchairbutter.net
Type: A
DNSthosebutter.net
Type: A
DNSwithinunderstand.net
Type: A
DNSsufferunderstand.net
Type: A
DNSwithinbroad.net
Type: A
HTTP GEThttp://leaderperfect.net/index.php
User-Agent:
HTTP GEThttp://heavyheart.net/index.php
User-Agent:
HTTP GEThttp://gentleheart.net/index.php
User-Agent:
HTTP GEThttp://belongbehind.net/index.php
User-Agent:
Flows TCP192.168.1.1:1031 ➝ 74.208.214.100:80
Flows TCP192.168.1.1:1032 ➝ 208.48.81.134:80
Flows TCP192.168.1.1:1033 ➝ 203.189.109.142:80
Flows TCP192.168.1.1:1034 ➝ 95.211.230.75:80

Raw Pcap
0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a206c   : close..Host: l
0x00000040 (00064)   65616465 72706572 66656374 2e6e6574   eaderperfect.net
0x00000050 (00080)   0d0a0d0a                              ....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2068   : close..Host: h
0x00000040 (00064)   65617679 68656172 742e6e65 740d0a0d   eavyheart.net...
0x00000050 (00080)   0a0a0d0a                              ....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2067   : close..Host: g
0x00000040 (00064)   656e746c 65686561 72742e6e 65740d0a   entleheart.net..
0x00000050 (00080)   0d0a0d0a                              ....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2062   : close..Host: b
0x00000040 (00064)   656c6f6e 67626568 696e642e 6e65740d   elongbehind.net.
0x00000050 (00080)   0a0d0a0a                              ....


Strings
\
.
dtioOHaC
Wet
 
" 
.
\
  
.
e
. 
.
e
. 
00-+ 00-+ **00-+ .
-
-1
+-0-E-
-0
\
.
-
..
0
0 
- 
000
-
-%
.
u
                                 
2.exe
- abort() has been called
ADVAPI32.DLL
af-za
af-ZA
alnum
alpha
america
american
american english
american-english
April
ar-ae
ar-AE
ar-bh
ar-BH
ar-dz
ar-DZ
ar-eg
ar-EG
ar-iq
ar-IQ
ar-jo
ar-JO
ar-kw
ar-KW
ar-lb
ar-LB
ar-ly
ar-LY
ar-ma
ar-MA
ar-om
ar-OM
ar-qa
ar-QA
ar-sa
ar-SA
ar-sy
ar-SY
ar-tn
ar-TN
ar-ye
ar-YE
- Attempt to initialize the CRT more than once.
- Attempt to use MSIL code from this assembly during native code initialization
August
australian
az-az-cyrl
az-AZ-Cyrl
az-az-latn
az-AZ-Latn
.bat
be-by
be-BY
belgian
bg-bg
bg-BG
blank
bn-in
bn-IN
britain
bs-ba-latn
bs-BA-Latn
ca-es
ca-ES
canadian
china
chinese
chinese-hongkong
chinese-simplified
chinese-singapore
chinese-traditional
.cmd
cntrl
.com
CONOUT$
- CRT not initialized
cs-cz
cs-CZ
cy-gb
cy-GB
czech
da-dk
da-DK
dddd, MMMM dd, yyyy
de-at
de-AT
December
de-ch
de-CH
de-de
de-DE
de-li
de-LI
de-lu
de-LU
digit
div-mv
div-MV
DLC_ALL
DOMAIN error
dutch-belgian
ECHN
ECHS
ECHT
ECZE
EDEA
EDEC
EDEL
EDES
EENA
EENB
EENC
EENG
EENI
EENJ
EENL
EENS
EENT
EENU
EENZ
EESA
EESB
EESC
EESD
EESE
EESF
EESG
EESH
EESI
EESL
EESM
EESN
EESO
EESR
EESS
EESU
EESV
EESY
EESZ
EFRB
EFRC
EFRL
EFRS
EGBR
EHKG
EITS
Eja-JP
EKOR
el-gr
el-GR
emscoree.dll
en-au
en-AU
en-bz
en-BZ
en-ca
en-CA
en-cb
en-CB
en-gb
en-GB
england
english-american
english-aus
english-belize
english-can
english-caribbean
english-ire
english-jamaica
english-nz
english-south africa
english-trinidad y tobago
english-uk
english-us
english-usa
en-ie
en-IE
en-jm
en-JM
ENLB
ENLD
en-nz
en-NZ
ENON
ENOR
en-ph
en-PH
en-tt
en-TT
en-us
en-US
en-za
en-ZA
ENZL
en-zw
en-ZW
EPRI
EPTB
ER6002
es-ar
es-AR
es-bo
es-BO
es-cl
es-CL
es-co
es-CO
es-cr
es-CR
es-do
es-DO
es-ec
es-EC
es-es
es-ES
es-gt
es-GT
es-hn
es-HN
es-mx
es-MX
es-ni
es-NI
es-pa
es-PA
es-pe
es-PE
es-pr
es-PR
es-py
es-PY
es-sv
es-SV
es-uy
es-UY
es-ve
es-VE
ESVF
ESVK
et-ee
et-EE
ETTO
eu-es
eu-ES
EUSA
EZAF
EZHH
EZHI
fa-ir
fa-IR
February
fi-fi
fi-FI
- floating point support not loaded
fo-fo
fo-FO
fr-be
fr-BE
fr-ca
fr-CA
fr-ch
fr-CH
french-belgian
french-canadian
french-luxembourg
french-swiss
fr-fr
fr-FR
Friday
fr-lu
fr-LU
fr-mc
fr-MC
german-austrian
german-lichtenstein
german-luxembourg
german-swiss
gl-es
gl-ES
graph
great britain
gu-in
gu-IN
         (((((                  H
he-il
he-IL
HH:mm:ss
hi-in
hi-IN
holland
hong-kong
hr-ba
hr-BA
hr-hr
hr-HR
hu-hu
hu-HU
hy-am
hy-AM
id-id
id-ID
- inconsistent onexit begin-end variables
irish-english
is-is
is-IS
italian-swiss
it-ch
it-CH
it-it
it-IT
ja-jp
January
jjjjj
jjjjjj
July
June
ka-ge
ka-GE
kernel32.dll
kk-kz
kk-KZ
kn-in
kn-IN
kok-in
kok-IN
ko-kr
ko-KR
ky-kg
ky-KG
LC_COLLATE
LC_CTYPE
LC_MONETARY
LC_NUMERIC
LC_TIME
lower
lt-lt
lt-LT
lv-lv
lv-LV
March
Microsoft Visual C++ Runtime Library
mi-nz
mi-NZ
mk-mk
mk-MK
ml-in
ml-IN
MM/dd/yy
mn-mn
mn-MN
Monday
mr-in
mr-IN
ms-bn
ms-BN
ms-my
ms-MY
mt-mt
mt-MT
nb-no
nb-NO
new-zealand
nl-be
nl-BE
nl-nl
nl-NL
nn-no
nn-NO
norwegian
norwegian-bokmal
norwegian-nynorsk
- not enough space for arguments
- not enough space for environment
- not enough space for locale information
- not enough space for lowio initialization
- not enough space for _onexit/atexit table
- not enough space for stdio initialization
- not enough space for thread data
November
ns-za
ns-ZA
(null)
October
pa-in
pa-IN
pl-pl
pl-PL
portuguese-brazilian
pr china
pr-china
print
Program: 
<program name unknown>
pt-br
pt-BR
pt-pt
pt-PT
puerto-rico
punct
- pure virtual function call
quz-bo
quz-BO
quz-ec
quz-EC
quz-pe
quz-PE
R6008
R6009
R6010
R6016
R6017
R6018
R6019
R6024
R6025
R6026
R6027
R6028
R6030
R6031
R6032
R6033
R6034
ro-ro
ro-RO
runtime error 
Runtime Error!
ru-ru
ru-RU
sa-in
sa-IN
Saturday
se-fi
se-FI
se-no
se-NO
September
se-se
se-SE
SING error
sk-sk
sk-SK
slovak
sl-si
sl-SI
sma-no
sma-NO
sma-se
sma-SE
smj-no
smj-NO
smj-se
smj-SE
smn-fi
smn-FI
sms-fi
sms-FI
south africa
south-africa
south korea
south-korea
space
spanish-argentina
spanish-bolivia
spanish-chile
spanish-colombia
spanish-costa rica
spanish-dominican republic
spanish-ecuador
spanish-el salvador
spanish-guatemala
spanish-honduras
spanish-mexican
spanish-modern
spanish-nicaragua
spanish-panama
spanish-paraguay
spanish-peru
spanish-puerto rico
spanish-uruguay
spanish-venezuela
sq-al
sq-AL
sr-ba-cyrl
sr-BA-Cyrl
sr-ba-latn
sr-BA-Latn
sr-sp-cyrl
sr-SP-Cyrl
sr-sp-latn
sr-SP-Latn
Sunday
sv-fi
sv-FI
sv-se
sv-SE
swedish-finland
swiss
sw-ke
sw-KE
syr-sy
syr-SY
ta-in
ta-IN
te-in
te-IN
This indicates a bug in your application.
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
th-th
th-TH
Thursday
TLOSS error
tn-za
tn-ZA
trinidad & tobago
tr-tr
tr-TR
tt-ru
tt-RU
Tuesday
uk-ua
uk-UA
- unable to initialize heap
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
united-kingdom
united-states
upper
ur-pk
ur-PK
USER32.DLL
uz-uz-cyrl
uz-UZ-Cyrl
uz-uz-latn
uz-UZ-Latn
vi-vn
vi-VN
Wednesday
xdigit
xh-za
xh-ZA
zh-chs
zh-CHS
zh-cht
zh-CHT
zh-cn
zh-CN
zh-hk
zh-HK
zh-mo
zh-MO
zh-sg
zh-SG
zh-tw
zh-TW
zu-za
zu-ZA
<$<@<`<
                          
< <(<0<
<0=`=}=
0 0(00080@0H0P0X0`0h0p0x0
0$000<0H0T0`0l0x0
0!000<0U0c0n0x0
000@0D0T0X0\0`0h0
000;0E0_0k0
0"0)0>0K0V0`0m0u0
0#0*020@0T0d0n0u0}0
0 0,040<0C0R0n0v0
0%0,040@0F0K0S0g0l0w0~0
0#0+050Z0f0q0{0
0&0.060<0E0Z0b0j0x0
0(0-060;0H0
0'0/060>0R0Y0e0m0u0}0
0'0/070$1+1F1L1X1_1g1u1
0#0+070D0P0X0`0h0v0~0
0%0-080@0L0T0\0d0k0t0
00080D0N0V0^0v0~0
0 0,080D0P0\0h0t0
0#0+080G0O0X0_0e0l0t0~0
0!0.0A0I0P0X0c0
0!0+0A0K0c0s0
0"0*0A0T0\0r0y0
0.0;0C0V0\0l0s0{0
0.0=0E0c0k0s0{0'2?2F2N2W2h2
0'0/0I0]0e0l0t0
0$010`0h0y0
0'030;0@0T0\0h0p0|0
0+030;0C0K0S0[0c0o0
0%030L0V0^0f0m0
0>0G0Q0x0
010T0j0
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
&040<0H0P0W0_0g0z0
< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<
= =$=(=,=0=4=8=<=@=D=H=L=P=T=X=\=`=d=h=l=p=t=x=|=
|0\4n4
;(;0;4;P;X;\;t;x;
>&>0>5>B>I>S>a>g>m>s>x>~>
= =(=0=5===M=Z=
:$:*:0:6:<:B:H:N:T:Z:`:f:l:r:x:~:
;0;6;>;F;T;k;};
; ;(;0;6;;;J;R;f;l;v;
070A0e0o0
080?0E0S0[0i0r0x0
080E0O0c0k0s0y0
080X0x0
> >(>0>8>D>L>T>\>j>r>z>
?(?0?8?@?E?M?a?f?k?q?
;);0;8;?;G;\;d;p;w;~;
< <(<0<8<@<H<P<X<`<h<p<x<
= =(=0=8=@=H=P=X=`=h=p=x=
> >(>0>8>@>H>P>X>`>h>p>x>
? ?(?0?8?@?H?P?X?`?h?p?x?
=)=0=8=M=R=Z=o=t=|=
? ?0?8?@?S?[?g?r?~?
<)<0<8<W<
<0| <9
0a1k6v6
=0=>=D=L=X=
0E0N0l0
0e0x0d3w3
?	? ?0?g?|?
0G1Q1Y1r1
0H1Q1[1o1
?"?(?0?H?P?X?`?h?x?
?$?0?<?H?T?`?l?x?
0J0b0l0z0
<0|L<9
<0<L<g<
<0|m<9
=0=P=p=
0Q1X1y1
0t-HHt
0W1_1g1o1w1
10`0t0
1,101@1D1L1d1t1x1
1 1(10181@1H1P1X1`1h1p1x1
1!1%1)111I1N1
1$1*11171W1]1h1m1
1 1$1<1@1D1
1#1*1:1@1F1N1T1Z1b1h1n1v1
1+11181E1L1R1X1^1f1
1"1)141<1C1\1f1u1}1
1$1/141@1E1`1e1
1!1,151
1'1/151<1B1G1^1f1n1y1
1%1-151<1D1J1R1Z1b1j1y1
1#1/171?1J1]1l1y1
1#1/171F1O1W1_1g1t1|1
1 1(181@1H1P1d1o1
1&1.191A1I1T1k1r1
1.1:1B1J1T1\1d1m1
1'1.1E1J1Q1\1f1n1s1{1
1#131;1C1K1S1X1d1x1
1"131;1L1T1\1d1j1r1z1
1(141@1L1X1d1p1|1
1!151<1D1L1T1\1c1k1
1)151=1O1V1i1p1x1
1'151A1Q1b1p1
1-151I1Q1Y1e1m1z1
1+181D1T1Z1k1
1@1G1M1a1l1v1
1,1M1m1{1
1)1Q1f1n1
1+1Q1Y1d1o1{1
1+202E2O2\2g2o2w2
1(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2
1.2F2_2
13191A1K1m1u1
141:1B1J1b1i1
142N2^2
151;1F1s1z1
)151c1m1
?"?)?1?5?9?=?A?E?I?M?Q?U?Y?]?a?e?i?{?
>">*>1>7>E>^>l>
18102P2
189D9P9\9h9t9
:):1:8:O:Z:`:e:m:{:
:#:+:1:9:A:G:Q:W:i:q:y:
?!?)?1?9?D?P?
1a1v1|1
1A2[2v2
1B2N2w2
=$=,=1=E=]=i=q=x=
1G1O1a1n1t1
1G2N2V2
1H2V2b2
:!:):1:@:L:[:e:j:x:
="=)=1=Q=
1#QNAN
1R1r1~1
1#SNAN
:%;1;<<S=Z=m>
>$>,>1>T>
;(;1;U;
2(20272?2O2]2j2u2
2!20282?2Q2
2#2)20272=2J2g2
2 2(20282@2H2P2X2`2h2p2x2
2 2(20292B2J2X2`2
2!2)212=2E2Q2X2`2g2m2s2z2
2"2*212?2G2R2z2
2 2*222>2F2U2]2e2m2t2{2
2"2*22282B2J2R2Z2f2s2{2
2$2+22292C2V2^2f2}2
2#2,222H2q2
2"2(2/262=2D2K2R2Y2a2i2q2}2
222:2B2I2S2[2f2m2
2%2.2;2G2O2W2e2m2u2
2#2+2@2H2P2X2v2}2
2'2-242>2E2T2\2d2n2v2}2
2 2$24282<2@2H2`2p2t2
2$2,242Y2a2h2t2|2
2!2-252=2E2{2
2$2.262>2E2V2o2v2|2
2*2?2F2N2V2e2s2
2'2=2F2R2Z2d2v2~2
2%2-2G2O2]2i2t2~2
2(232Z2
2,242A2I2Q2Y2
2)262;2F2T2~2
2*272U2\2q2y2
2+282A2r2
2-2I2T2]2e2k2w2
2/2V2h2
232B2k2
2$3/3?3G3O3W3
2(3.3@3T3s3
2'3A3g3
242<2E2M2U2]2l2t2
243?3G3W3^3d3q3
253V3^3m3t3|3
262L2b2j2t3
272C2J2R2^2h2y2~2
273?3G3R3\3d3i3u3
? ?*?2?8?A?U?a?h?p?x?~?
?+?2?8???F?N?V?p?
>2>9>Q>_>
=2=:=B=J=Q=Y=l=
<2<B<J<V<^<c<k<z<
<&<2<:<B<J<Y<e<k<
<2<:<B<O<[<
>">2>?>D>L>\>d>m>w>
< <(<2<<<D<R<^<h<p<|<
2E2d2z2
;*;2;<;F;P;Z;d;v;
:2:::H:M:\:
:2;=;H;Q;W;
2L2a2g2
2M3U3a3p3
<-=2=:=O=
2R3j3(4A4P4q4
<%<+<2<S<
303?3W3a3h3p3x3
30a0r0
313=3H3S3X3`3m3|3
32393~3
3$313>3F3Q3X3`3i3}3
3'31383@3H3W3s3~3
3(323:3B3I3O3U3f3n3v3
3 3(30393@3F3N3V3b3j3q3y3
3$3)31373H3M3U3[3l3q3
3"3(3?3
3 3$3(3,3034383<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3x3|3
3"3*333?3G3O3e3m3w3~3
3#3)3/363=3D3K3R3Y3`3h3p3x3
3"3*3/373?3G3O3[3c3o3w3
3-33383F3N3f3n3z3
3 3%3*3D3J3c3q3
3 3(3@3P3T3d3h3l3t3
3$3,343<3H3P3X3`3o3v3
3$3,343S3]3e3
3%3-353f3q3
3%3-363@3H3P3e3n3
3#3*373A3[3c3
3.3@3H3N3Z3b3j3r3}3
3"3_3j3s3{3
3!3+3M3S3d3j3{3
3*3=3Q3
3#353G3
3+373?3G3O3[3c3o3t3|3
3"383?3G3O3W3_3d3l3
3?3L3c3l3
3,3Q3i3q3
3!3Q3z3
3"4*424=4R4
3	4%434L4S4]4f4v4
344<4G4
353@3I3
353?3I3V3o3v3
364=4c4j4
<$<3<8<@<T<]<
=+=3=9=?=J=P=X=c=
3a3h3p3
?"?3?A?I?Q?Y?s?
<(<3<C<K<S<[<e<
:":):3:;:C:K:W:a:i:s:
;(;-;3;;;C;K;Z;b;n;v;};
='=3=;=C=N=e=l=v=
=,=3=;=D=Z=g=t=|=
;";);3;;;E;M;\;f;
;!;&;3;=;E;T;_;l;r;|;
:3:=:E:Y:e:
?-?3?;?F?b?u?}?
3G4R4d4
>	>,>3>>>G>O>W>o>w>
3J3g3~3
=3===J=W=e=m={=
>#>+>3>;>L>T>]>g>o>w>
3O3Y3^3e3k3q3x3
%3o|AC 
<3=O=k=v=~=
;$;+;3;O;V;^;k;w;
3P6?7Q7c7u7
3Q4Z4d4
3R4b4h4
<!<)<3<=<X<^<|<
:(:4:@:
40<0D0t0|0
415>5T5[5k5v5|5
4(404<4B4I4Q4f4m4w4
4!404>4F4V4[4c4{4
4(404=4I4Q4Y4_4g4q4y4
4%41494A4F4Y4a4f4n4
4"4)40484@4H4S4X4^4h4
4 4(40484@4H4T4\4e4o4w4
4"4)41494@4\4e4m4
4"4*414E4Q4\4m4
4!4)4/4;4A4J4R4z4
4 4$4(4,4H4L4`4
4$44484H4L4P4X4p4
4$4,4:4A4I4b4
4:4@4[4a4q4y4
4#4,4`4g4
4$4+4@4H4O4c4j4y4~4
4&4.464>4C4W4b4l4t4|4
4"4.464>4F4R4_4o4y4
44484<4@4D4H4L4P4T4t7|7
4/4;4B4J4R4f4y4
4&4,4D4Z4y4
4%4+4E4W4g4
4,4>4F4Q4l4
4)4=4G4O4[4c4k4s4{4
4,4>4m4u4}4
4"4:4P4V4]4o4{4
4(4>4V4a4
4*464>4J4O4W4p4|4
4.484C4N4Z4b4n4
4;4B4I4Q4o4
4#4H4a4
4!4T4\4d4
4$5.565C5W5e5l5t5
4&5-5C5M5
4*5E5O5~5
494B4]4c4
4a4r4z4
:4:A:I:Q:Y:_:n:|:
;$;,;4;<;D;
4D4L4W4^4k4r4
: :':-:4:<:D:a:n:v:~:
;$;,;4;<;D;J;W;b;o;|;
? ?(?4?<?D?K?S?Z?d?k?u?}?
;$;,;4;<;D;L;T;\;d;l;t;|;
:$:,:4:<:D:L:T:\:d:l:t:|:
>!>)>4>D>M>b>i>|>
> >(>4><>D>Y>e>m>u>
<"<'</<4<@<E<i<
4G5U5^5h5
?4?<?G?O?W?_?g?o?y?
< <(<,<4<H<h<
= =,=4=@=H=P=_=g=r=}=
;,;4;?;H;T;\;r;~;
;$;,;4;?;\;i;p;|;
> >,>4>?>K>S>e>m>u>
;$;,;4;;;Q;];
>(>.>4>R>_>g>
>&>4>;>S>c>q>x>
4U5f5z5
50585D5b576D6P6W6^6c6o6
51696Q6W6]6
525c5@6L6W6c6j6o6u6z6
5*51575E5N5u5
5.545<5D5P5W5_5l5
5#5+5054585a5
5 5(50585t5|5
5"5)51595]5d5i5o5
5	5"52595A5U5]5e5m5v5{5
5"5*525J5R5Z5i5u5}5
5 5(545;5C5J5R5h5p5|5
5$5,545<5D5L5T5\5d5l5t5|5
5$5,545H5P5X5`5n5v5~5
5%5-555=5E5M5U5]5i5q5{5
5!5)555d5k5s5
5 555=5P5[5i5o5u5
5(555A5I5]5e5m5u5}5
5 5(5<5D5X5`5h5p5t5x5
5&5.565=5D5V5_5g5o5w5
5"556=6B6J6c6k6s6{6
5&5-575?5G5S5\5h5o5w5
5#5*575C5J5R5f5n5z5
5#5/585P5_5m5
555A5G5[5o5
5%5=5E5M5U5]5d5l5
5$5+5I5Q5Y5`5g5p5y5
5+565<5G5Q5]5k5s5{5
5(585@5H5N5V5d5z5
5 595I5T5m5x5
5"5C5M5|5
5&5D5L5V5`5k5
5 5g5o5w5
55GYBB
5&5N5\5k5s5z5
5/676?6L6W6g6o6{6
568A8I8`8p8x8
5 :D:p:
:.:5:=:D:V:]:h:n:v:{:
=%=-=5===E=L=i=q=}=
<&<-<5<E<S<[<g<o<{<
:5;=;F;N;V;b;j;y;
5G6L6T6n6
?"?.?5?<?K?Q?i?q?}?
=+>5>=>K>S>_>g>v>|>
5L5R5{5
;/;5;?;L;U;w;
<%<-<5<M<w<
5o6-7>7R7a7
=5=Q=^=
:!:5:q:z:
<"</<5<W<a<g<y<
5Y5f5k5
627Q7d7n7
647;7C7V7d7l7t7|7
6(60686@6D6L6T6\6`6h6|6
6&626:6F6V6^6h6q6y6
6*626>6G6O6d6m6x6~6
6*626G6
6-656:6B6V6h6p6x6
6"6+60666>6C6I6Q6V6\6d6i6o6w6|6
6#6*606F6]6e6x6
6#6*626E6T6`6f6l6r6z6
6$6+636>6\6d6k6s6
6$6,646<6D6L6T6\6d6l6t6|6
6 6+656=6E6M6U6\6t6{6
6&6.656=6O6W6d6l6t6
6 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6
6&6.6=6_6g6}6
6!6&6.6B6I6O6Y6c6k6v6
6$6-6;6C6P6X6`6l6t6{6
6'666J6X6`6g6o6
6'6/6<6L6T6\6d6
6$6,676t7
6%6.686@6H6R6]6i6q6y6
6"6-696@6F6P6[6c6{6
6(6.6A6H6P6s6
6*6:6A6I6a6g6o6w6
6"6;6I6e6l6s6
6#6?6I6O6U6d6s6
6:6?6K6R6v6
6:6@6W6]6
6@6K6s6{6
6'727:7B7J7Q7Y7h7t7~7
676?6R6Z6b6k6
>!>)>6><>C>N>\>c>q>
=6===C=V=]=p=w=
;";,;6;>;D;J;R;X;b;j;v;~;
<"<*<6<D<L<T<[<e<s<}<
> >(>/>6>E>K>X>e>m>y>
>$>6>>>F>Y>^>j>|>
?&?.?6?>?J?`?h?|?
; ;(;.;6;;;O;\;b;p;x;
;6<><W<_<s<
=6=@=Z=a=i=y=
708}8-9
758S8`8
7(707?7X7c7~7
7%707P7[7}7
7+737;7I7Q7Y7a7i7q7y7
7)737D7
7-747B7
7+767O7]7v7
7 7(70757=7Q7_7i7u7
7"7)717;7Q7X7_7g7t7{7
7!7+71787F7b7i7p7~7
7!7+737;7C7O7g7o7w7
7#7+737;7G7O7W7b7n7z7
7$7,747<7D7L7T7\7d7l7t7|7
7%7-757=7E7M7U7d7w7
7&7.767>7J7Q7W7e7o7
7"7'7-757:7?7H7M7S7[7`7f7n7s7y7
7!7)7.797Q7_7e7m7y7
7%7,7:7B7_7l7
7 7+7>7G7O7\7b7x7
7$7/7@7H7P7e7m7y7
7!7*7B7O7V7^7f7n7v7}7
7$7*7D7z7
7)7:7H7a7o7{7
7?7^7i7}7
7(787?7u7
7(787D7L7x7
7&787E7[7
778?8Q8
778K8}8
7/878?8N8V8]8e8w8
787X7d7
7!8(8,8084888<8@8D8
7?8J8U8_8g8o8~8
7/8M8o8
797A7M7U7\7v7
7A7H7L7P7T7X7\7`7d7
:&:7:B:T:Z:b:g:{:
7C7h7p7
7C7K7g7n798F8b8i8q8y8
:/:7:C:J:R:n:u:}:
?/?7?C?J?T?]?c?p?
7D9J9p9v9
< </<7<?<D<O<Y<i<v<~<
<'=/=7=D=W=a=i=v=
=#=/=7=?=E=M=T=Z=b=s=y=
?$?.?7?>?E?O?W?_?x?
7%:E<S<]<
7G8R8Z8o8
:*:7:?:G:O:
>7>?>G>O>W>^>k>s>
?#?+?7???G?O?W?_?m?y?
;/;7;?;G;O;Y;a;i;
<%</<7<><K<d<n<v<~<
7L8S8Z8j8
=)=7=l=w=
7V8d8s8
:$=.=8=
?#?/?8?
808=8B8
819A9I9U9c9k9s9y9
828:8J9
829X9c9
868;8A8M8W8n8v8
868>8F8U8h8u8}8
878H8n8
8(848;8F8w8
8(848?8I8P8X8o8u8{8
8"848a8s8y8:9B9U9_9g9o9
8,858@8S8a8y8
8(858K8R8
8+868V8a8
8/878P8X8]8f8|8
8$8,81878?8D8J8R8W8]8e8j8o8x8}8
8%8-828N8V8[8g8z8
8$8,848<8D8L8T8\8d8l8t8|8
8$8,848<8E8Q8d8
8#8*858=8Y8a8i8q8x8
8"8*868B8T8^8e8m8
8 8&8,82888>8D8J8P8V8\8b8h8n8t8z8
8#8)8/878?8Y8e8{8
8 8<8@8\8`8
8!8/8<8F8Q8X8`8h8}8
8#8+8;8K8b8i8q8~8
8 8,898A8I8X8`8l8z8
8$8;8B8G8O8e8q8
8#8<8D8L8T8\8h8p8x8
8]8g8o8
8%8L8W8_8g8x8
8!9(90989@9M9U9a9n9v9~9
8$9=9`9
8;9L9b9#:B:a:j:t:z:
8(9R9a9
8A8I8O8U8[8
8$ AJ.
8D9J9\9m9
8E8^8v8
>">8>e>k>x>
8F8L8h8n8y8
<#<+<8<H<T<a<h<u<}<
8I8g8o8{8
?!?8?J?a?
?(?8?>?J?\?m?u?~?
8L9W9l9s9
=%=,=8=@=L=S=Z=s=
=8>@>L>T>\>d>k>s>
?&?8?T?\?d?l?v?~?
8V8^8~8
8V9^9i9q9}9
8W8_8g8o8w8
\8,xWf
>8>X>x>
?8?X?x?
8Y8c8l8y8
9&:0:8:R:Z:r:y:
939>9E9O9W9
94:=:J:d:j:u:
96:<:F:Q:p:x:
97:D:L:Z:b:i:~:
9#919?9F9S9\9f9l9
9,92979?9H9N9V9p9|9
9 929y9
9'939:9A9H9T9X9d9j9p9|9
9%939<9F9N9V9]9z9
9 949:9B9
9&959=9R9\9j9w9
9 969<9C9O9a9
9&969C9S9Y9c9n9t9
9 9(90989J9R9Y9a9n9
9!9)91999H9V9^9f9n9}9
9!9'919?9L9W9a9i9t9
9"9,929@9H9\9b9h9v9
9#9+929A9H9S9d9
9$9,949<9D9L9T9\9d9l9t9|9
9!9,949A9N9V9^9f9n9z9
9'9/969>9I9i9r9|9
9'9/979>9E9M9d9l9t9|9
9"9(9.949:9@9F9L9R9X9^9d9j9p9v9|9
9%9,9>9J9m9w9~9
9%9=9C9
9"9=9E9M9T9k9y9
9 9,9H9T9l9p9
9:9B9J9T9\9e9m9y9
9'9C9d9
9<9D9b9j9
9>9E9L9
9*9F9M9U9a9i9u9}9
9=9H9U9[9c9w9
9A9N9Y9^9f9z9
?+?9?A?I?
>*>9>A>I>Q>e>j>q>
9#:A:Q:a:
>9>C>M>U>
9	: :*:D:
9":::D:`:g:m:{:
=%=-=9=E=T=b=j=r=z=
>9?F?O?
?(?9?F?W?a?p?{?
9g9u9}9
;&;9;G;O;W;_;
@9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
9h;l;p;t;x;|;
9J:R:a:i:q:}:
9&:.:M:
9NHC<N/V<N
9V:a:l:s:
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
address family not supported
address_family_not_supported
address in use
address_in_use
address not available
address_not_available
`adjustor{
:&:.:A:H:M:U:`:|:
?$?:?A?I?]?i?p?x?
==>a>i>q>y>
already connected
already_connected
`anonymous namespace'
<A|,<P
AreFileApisANSI
argument list too long
argument out of domain
?;?A?S?i?x?
AtOHt5Hu
<at-<rt"<wt
August
.?AVbad_alloc@std@@
.?AVbad_cast@std@@
.?AVbad_exception@std@@
.?AVbad_function_call@std@@
.?AVbad_typeid@std@@
.?AVcharNode@@
.?AVDNameNode@@
.?AVDNameStatusNode@@
<A>V>^>e>n>
.?AVerror_category@std@@
.?AVexception@std@@
.?AV_Generic_error_category@std@@
.?AVinvalid_argument@std@@
.?AV_Iostream_error_category@std@@
.?AVlength_error@std@@
.?AVlogic_error@std@@
.?AV__non_rtti_object@std@@
.?AVout_of_range@std@@
.?AVoverflow_error@std@@
.?AVpairNode@@
.?AVpcharNode@@
.?AVpDNameNode@@
.?AVregex_error@std@@
.?AVruntime_error@std@@
.?AV_System_error_category@std@@
.?AVtype_info@@
ax.h~j4
bad address
bad_address
bad allocation
bad exception
bad file descriptor
bad_file_descriptor
bad function call
bad message
 Base Class Array'
 Base Class Descriptor at (
__based(
</<B<H<N<i<q<}<
<"<*<:<B<J<R<[<g<n<v<~<
?$?.?:?B?J?R?Z?f?
;!;B;M;S;e;o;x;
;'<B<N<X<v<
broken pipe
bWWWWj
<C<[<|<
>%>C>`>~>
c4;\#Op
:':C:a:~:
CallWindowProcA
__cdecl
CheckDlgButton
;%;-;c;k;r;
>$>/>;>C>K>W>]>e>q>~>
class 
 Class Hierarchy Descriptor'
cli::array<
cli::pin_ptr<
CloseHandle
CloseThreadpoolTimer
CloseThreadpoolWait
__clrcall
CN~KEN
coclass 
cointerface 
CompareStringEx
CompareStringW
 Complete Object Locator'
connection aborted
connection_aborted
connection already in progress
connection_already_in_progress
connection refused
connection_refused
connection reset
connection_reset
const 
`copy constructor closure'
CorExitProcess
CreateEventExW
CreateEventW
CreateFile2
CreateFileW
CreateSemaphoreExW
CreateSemaphoreW
CreateSymbolicLinkW
CreateThread
CreateThreadpoolTimer
CreateThreadpoolWait
cross device link
?.?=?C?S?^?w?
>Cu/f9F
;:;d;{;
@.data
:[dcdi
;$;D;d;
dddd, MMMM dd, yyyy
December
DecodePointer
`default constructor closure'
 delete
 delete[]
DeleteCriticalSection
DeleteFileA
<D<\<e<r<
destination address required
destination_address_required
device or resource busy
dfnasvsur mgdigr fgc lnzeja rgege tqac lmlionogpu epgzap nfkeijmluv hms glbeckama oscci gsmuherd sidja sugobuynlu pqdamlluqd cjrob rijy inom bdb tpgiljgipj gwxujjcuf elunv jurlucl pboza bltipd jxguysvudp iuugxs kubr kpde ubowefeds bcgiuhgux urf gxla cppe oyc xabmepn dspiolm sgmusbco joaecvicm ypniay emuedqer oaacnux fmf bsjag lsadiokgn zlmar asxbal mgjara ivgdekcem lljuibm lymoppn mjr sap ccmapb vyger plzayhcau aeldkewcu rmdonpme hljajcko jtmidnled pnfu dcoobu fnuajovqde jfjab cbtaf dhuzaycp lusja ahnguevi vvdaysxit yfxopdpizp tifqanff nrujovmo mtgeulint xboqabszeb motto toobyujzro cobreoj cobbubecc delfehjzu oefjpaxnmo vijhiuolg f
directory not empty
>,><>D>L>T>}>
=D>L>T>\>d>l>t>|>
;);<;D;L;T;\;d;l;t;|;
double
DpEgE'
: :D:P:X:
:;:d:q:w:
DrawTextA
? ?$?,?D?T?X?h?l?p?t?|?
>(>,>D>T>X>l>p>
`dynamic atexit destructor for '
`dynamic initializer for '
__eabi
>>?E?g?n?
`eh vector constructor iterator'
`eh vector copy constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`eh vector vbase copy constructor iterator'
<ellipsis>
,<ellipsis>
EnableWindow
EncodePointer
EndDialog
EndPaint
EnterCriticalSection
?#?;?]?e?n?u?|?
EnumSystemLocalesEx
EnumSystemLocalesW
='=E=r=
;E<T<Y<a<f<y<
executable format error
ExitProcess
extern "C" 
<]<e<z<
__fastcall
FatalAppExitA
February
file exists
filename too long
filename_too_long
FileTimeToLocalFileTime
FileTimeToSystemTime
file too large
FindClose
FindFirstFileExW
FindResourceA
=->F>K>u>
; ;&;F;^;l;
{flat}
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FlushProcessWriteBuffers
<]=f=n=
fo&,Y!
=?=f=q=x=
f=RAv;|;
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryWhenCallbackReturns
Friday
Ft,Ot	OtFOt#OuV
function not supported
G0Pj.S
g0r0z0
G4Pj/S
G8PjDS
GDI32.dll
GDPjGS
GdPjOS
generic
generic-type-
GetACP
GetActiveWindow
GetBkColor
GetClipRgn
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetCPInfo
GetCurrentDirectoryW
GetCurrentObject
GetCurrentPackageId
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentThread
GetCurrentThreadId
GetCursor
GetDateFormatEx
GetDateFormatW
GetDCBrushColor
GetDCPenColor
GetDeviceCaps
GetDialogBaseUnits
GetDlgItem
GetDlgItemInt
GetDriveTypeW
GetEnvironmentStringsW
GetFileInformationByHandle
GetFileInformationByHandleExW
GetFileType
GetFontLanguageInfo
GetFontUnicodeRanges
GetForegroundWindow
GetFullPathNameA
GetFullPathNameW
GetGraphicsMode
GetKeyboardType
GetLastActivePopup
GetLastError
GetLocaleInfoEx
GetLocaleInfoW
GetLogicalProcessorInformation
GetMapMode
GetMenu
GetMenuCheckMarkDimensions
GetMenuContextHelpId
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMetaRgn
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetNearestColor
GetNearestPaletteIndex
GetObjectType
GetOEMCP
GetPixelFormat
GetPolyFillMode
GetProcAddress
GetProcessHeap
GetProcessWindowStation
GetPropA
GetRandomRgn
GetScrollPos
GetStartupInfoW
GetStdHandle
GetStretchBltMode
GetStringTypeW
GetSystemPaletteUse
GetSystemTimeAsFileTime
GetTextAlign
GetTextCharacterExtra
GetTextCharset
GetTextCharsetInfo
GetTextColor
GetTickCount
GetTickCount64
GetTimeFormatEx
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetUserDefaultLocaleName
GetUserObjectInformationW
GetWindowContextHelpId
GetWindowDC
GetWindowLongA
!G^Fk#/
GhPj8S
GHPjHS
GlobalAlloc
GlobalFlags
GlobalHandle
GlobalSize
GlPj9S
GLPjIS
;"<-<;<G<L<T<]<s<
gMj(iM#
=&=G=O=W=n={=
G<PjES
G@PjFS
G\PjMS
G`PjNS
G|Pj=S
G Pj*S
G,Pj-S
G(Pj,S
G$Pj+S
GPPjJS
GpPj:S
<#<G<Q<[<d<
="=<=G=S=_=g=s=
>+>:>G>T>\>h>p>|>
GTPjKS
GtPj;S
= =.=G=U=a=s=
_gW9"(
GXPjLS
GxPj<S
`h````
h5l5p5t5x5|5
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
`h`hhh
HH:mm:ss
HHtVHHt
;!;);<;H;N;V;^;j;u;
host unreachable
host_unreachable
?$?H?P?
:H:P:X:`:k:w:
:#:/:<:H:P:X:`:q:|:
>#>*>@>H>S>[>b>l>
Ht+Ht$Ht
>->H>V>^>f>p>w>
_hypot
?&?.?@?I?_?
identifier removed
;I;[;f;z;
illegal byte sequence
inappropriate io control operation
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
__int128
__int16
__int32
__int64
__int8
interrupted
invalid argument
invalid_argument
invalid seek
invalid string position
io error
iostream
iostream stream error
; ;(;<;I;P;W;`;i;
:!:I:Q:]:e:q:y:
is a directory
IsDebuggerPresent
:-:::I:S:e:t:{:
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
IsValidLocaleName
IsWindowEnabled
IsWindowUnicode
<ItH<ht<<lt
<itx<o
iwgaminfci ocs ncvat vkneomz labpog ipudrolav mgso diz udnubur onjsedgi imzqimlun ojmlimjfax yxo zgbeugbok urtqovlp ddsudltobv qjjabhl ojclo fsotel jssoffxom mcremcj ctfa uas elojzus dsw bps cgqaugi usc ezrcipmfel ozpyur bhruvza hbluxfimao sgdetawd ltluc qapam oulehnibtt njg fulgak tvfammd qoxicoc sfdar ucv emqgeusmob coozpu unatutumro entjiympi pwyowln wds zdseenify roo lwnujmvehj dyasabc vhv ijwdem ffduim guva dcresguc fjeiz gmlu hjfog rngep viei sasrohwf umrucet ojnsift jturoqrr mcto nvtinim firuf safdohe buplagtci ywfesfko inmji lca stpajc ezbto wjquz xomnotu pqbi gsanun mpebe cdeugudf hhtiv lobniisa nau srcucn hnvuntx vcabipoul n
:%:-:>:I:W:t:
iymcosxl kmcosm ongjisf npupiaclva fsfec kfjiegp xjmustcod xda oes ftdirmboas ykhouebe xojgatmae banik bphozlteka gllaular tleiz pjba ilrrujdlo uwcdi ubcerusag ntqigvre mljou ornbaafc ujwv pdoguzfre tkbajwiju ijmfudji asagxuntna jrusimbn dxunepjfoc bce llsegtne ien gvmijpeci zhsap lsacoefsa gtd hkmauzv pebpo lvj plm dmjam ctvum fzpacmgomn gjdukmce zcrelsceet zjrulbopo ygiopetuui obygugew anrbodjfo vcbo jpt qdzogeqqiz dlbeefmcug oatlno ggju pbocacl gdd picse ydc dbto dskig ptq kkligbna aoltnawlse fdb qdfaiaebg gjcuoa udubpohnda mipsas qbas afngojn emacavumh nmifuuxhi jjbaovqd klperouiel czfec eaujz acugeji oscdumldai pctaee clsuw
>'>/>:>J>
jA[jZZ+
JanFebMarAprMayJunJulAugSepOctNovDec
January
jAZjZ^
@jd_u	
>@?J?^?f?w?
j@ht9F
j/_j\[f;
j@j _W
j	PjYV
:#:::J:R:Z:b:i:u:}:
j"X_^[]
:':?:J:X:q:
jzg xjdignd rpgujbro ljnevopde apivvegxl kogbuffite txneua gfda swrof zjgejhv mlak dcbe uncralzbon nnco cdejuouu sjmodzr clqannga mdev lib slw spwu togdeat lsga svduxcotee wsti btobibcqa jjav sgjeuoj cid banbe jznae ddlov ggxurcocii hlqo zcnaom vjga hqwaeyx merkoes ieztsumo addk fusma grpudenmi jmfebccebf psj jtgapgj ybmoubnn mnfosmc mgfaqmbiur tpu gjzuvlc zzfaf ucvqufhjal nfisebmxo mjvextci mdjajo pil wglijnvigj mlp tpmuupbil lmix ujmd tjikuea godkistm ofplindo eeofl fjujej owu cssafpbi sdjar bfje ggciopggup fmvii lpfulamha ngl heesfo djfis bsluixb cjgaae gsji alp odlu oosta hhueg nncib vkuceyeas gnpuffgosa dinduffca fatrojla pzs znu duk o
<#</<]<k<
; <k<	=
} kE$<
KERNEL32.dll
KKt*KKt
<><k<s<{<
<$</<?<K<S<_<
<#<+<K<S<^<f<n<v<{<
>	>!>K>W>
>??K?W?f?q?
;*;@;K;W;u;
?"?K?Y?b?n?
=#=L=b=
-LCf6LXJ<L
LCMapStringEx
LCMapStringW
LeaveCriticalSection
livqamu afj jlq ncxulkpiru xfkuuit dzza ozunzi jqbuauvloi ffcefre ndroi plda oznvojbec lpeg ciasrufmru ggutoewb unnj zlleibusk zhlelvoc uwwzavfmeg ptmijuagnu mapasica ijjcehlyuo jiciaqacw pud tpxi lnvost ofcfadz mfluvm prmudsz aag tof uam nztu lbguen ofd jckozvn gzjui ldneavgs jftofdjos gradievoui dodmiibnuf hip rwrubo glfe pweurild kxfay ydmashjitc dinbafgv oldce sxnib nnrica jcfoahjo jbbolgrae bpcezdnaca vmyaj yloi jdbegefl tuv icvgaxftik bqzulnj bdjaclasi nnu jcvidcbaoc jmxivapjej flerogdzi mciw fjmouamgl cibdepa jert lmxisyric ead heg zom rmsigteqoo tpfu pcjenpcula eef alas uar aefsdaba gaigyou jjyedfj mtmorincom ideggechb lzlJ5"
LmKlU)u
:l;+<,=<=M=U=e=v=
LoadLibraryExW
LoadResource
LocalFlags
`local static destructor helper'
`local static guard'
`local static thread guard'
`local vftable'
`local vftable constructor closure'
=$=<=L=P=`=d=h=p=
LS@aFT_T
:#:?:L:T:_:k:s:
>L>V>h>
lxastapg orxt dkcudaqja ngjanccu aagmraapr zloozu arlsejv vysaba gtjunps lee jltoeobbte crropsl wgjuedso cvfetb dur qefdi jpmiz vjdukaos fxraljzuq cvmucuvgu ahto vpfedu napioezapg wmliovl odgzusg dyzitjju sbhuscco byu kvboutc ewzmi inzmi mgogagl gqtanydu jcfimcgiav pbxawgag ovwdanmled erl scyane zsceid tveef gvlegfzisb uuacrbit foglatqn zpbadcedob pnjoijgq jznud vdrejclia lgugejrvo cxij rdmecot iacv mejke oamdduahdr vjf fxigewfmef qmpegt sswipproln fzzubtri sdpeagza copdevth mecdidxdu njcaaoaq cflomjle dloviweod icbabem ntzafd ifx awguicu lpbimstobm pozwi ophjupoj gbupifk ojukfuw ujltaegcfa fbliuvyu gofan jsbebbvi sgjiv ejjsebr ullne
`managed vector constructor iterator'
`managed vector copy constructor iterator'
`managed vector destructor iterator'
map/set<T> too long
MessageBoxW
message size
message_size
mha ecgzudwt pmjekb twgikz dujrisnmib ssamo jmzufdfo ppfe oeblegu sdbab zaem kmsaooi qhriczbe obclel enjopiv pufcisel utiug nhe bfliche vdloegajoe ctvom jjmuryley rmyolcgakf zxcoygdu fnq ofndecjxew bmiqohrp qmigoa xudru pcw vbog ppfexgdi munseuo fdmebc unjsal bipcidbloy xpfob ybzek mouiemd ecm fgce crjap lxefoa dlmaam abpelai ammaui jidd hdmamnji ecs ebbpiiosbi zsgebsfagt jcyafgcee jbdibfe blohanchi idrsa ifbnef zmucegn bdfeccnu tlixezm zjjo ylizampn pviadai kil pjc fnjimcba qfm slc ibqdip bwjade trbipielul ffmidgfi usclu vvxaind untfucgt rog tmzasmjac piqcoen aecuppi kdpikpnua rapdennoz tdgornile supxi ubic eauubmge wjcew dncijezz yfvaf
MM/dd/yy
Monday
MoveFileA
MoveWindow
MultiByteToWideChar
:":M:U:]:m:y:
<#<.<N<
network down
network_down
network reset
network_reset
network unreachable
network_unreachable
 new[]
_nextafter
;';@;N;g;u;
NK?PN#
no buffer space
no_buffer_space
no child process
no link
no lock available
no message
no message available
`non-type-template-parameter
no protocol option
no_protocol_option
no space on device
no stream resources
no such device
no such device or address
no such file or directory
no such process
not a directory
not a socket
not_a_socket
not a stream
not connected
not_connected
not enough memory
not supported
November
(null)
=)=/=O=
:':-:O:]:{:
October
`omni callsig'
operation canceled
operation in progress
operation_in_progress
operation not permitted
operation not supported
operation_not_supported
operation would block
operation_would_block
operator
=;=O=U=
OutputDebugStringW
owner dead
__pascal
PeekNamedPipe
Pe_f]K
permission denied
permission_denied
~pjCXf
`placement delete closure'
`placement delete[] closure'
PostMessageA
PP9E u
private: 
protected: 
protocol error
protocol not supported
protocol_not_supported
PSSSSV
__ptr64
public: 
PVVVVQ
PWWWWV
?*?p?x?
<@>[>q>
:%:-:Q:^:
q0y0!2
QQSVWd
QueryPerformanceCounter
RaiseException
`.rdata
ReadConsoleW
ReadFile
read only file system
regex_error
regex_error(error_backref): The expression contained an invalid back reference.
regex_error(error_badbrace): The expression contained an invalid range in a { expression }.
regex_error(error_badrepeat): One of *?+{ was not preceded by a valid regular expression.
regex_error(error_brace): The expression contained mismatched { and }.
regex_error(error_brack): The expression contained mismatched [ and ].
regex_error(error_collate): The expression contained an invalid collating element name.
regex_error(error_complexity): The complexity of an attempted match against a regular expression exceeded a pre-set level.
regex_error(error_ctype): The expression contained an invalid character class name.
regex_error(error_escape): The expression contained an invalid escaped character, or a trailing escape.
regex_error(error_paren): The expression contained mismatched ( and ).
regex_error(error_parse)
regex_error(error_range): The expression contained an invalid character range, such as [b-a] in most encodings.
regex_error(error_space): There was insufficient memory to convert the expression into a finite state machine.
regex_error(error_stack): There was insufficient memory to determine whether the regular expression could match the specified character sequence.
regex_error(error_syntax)
.reloc
RemovePropA
resource deadlock would occur
resource unavailable try again
__restrict
restrict(
result out of range
]{R.SV
RtlUnwind
Saturday
`scalar deleting destructor'
SendMessageA
September
SetConsoleCtrlHandler
SetCurrentDirectoryW
SetDefaultDllDirectories
SetDlgItemTextA
SetEndOfFile
SetEnvironmentVariableA
SetFileInformationByHandleW
SetFilePointer
SetFilePointerEx
SetFocus
SetLastError
SetPixel
SetStdHandle
SetSystemPaletteUse
SetTextCharacterExtra
SetTextColor
SetTextJustification
SetThreadpoolTimer
SetThreadpoolWait
SetThreadStackGuarantee
SetUnhandledExceptionFilter
SetWindowTextA
short 
ShowWindow
signed 
sIo>Yt
SizeofResource
SN=UTN
SSPQSW
state not recoverable
static 
__stdcall
std::nullptr_t
stream timeout
`string'
string too long
struct 
Sunday
SunMonTueWedThuFriSat
SVjA[jZ^+
,SVWj0X
SVWjA_jZ+
system
SystemFunction036
SystemTimeToTzSpecificLocalTime
~';_t|%3
< t8<	t4
t9<_u5
=T>\>c>n>
_tcPVj@
tE<A|2<P
`template-parameter
template-parameter-
`template static data member constructor helper'
`template static data member destructor helper'
TerminateProcess
text file busy
t!=fff
+t"HHt
tHHt*Ht#
__thiscall
!This program cannot be run in DOS mode.
 throw(
[thunk]:
Thursday
timed out
timed_out
-t*j0X;
TKRha"
tK<_t<<$t8<<t4<>t0<-t,<a|
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
tO9=X9F
too many files open
too_many_files_open
too many files open in system
too many links
too many symbolic link levels
Tt^HtTHtJHt
t.<_u*
Tuesday
;t$,v-
t WW9}
 Type Descriptor'
`typeof'
tyPVj@W
uaPPPS
?:uBGW
uBjAYjZ+
`udt returning'
uHjAXf;
u#j,Xf;
U/K3Wj
:U;k;w;};
__unaligned
UnhandledExceptionFilter
UNICODE
union 
<unknown>
UNKNOWN
`unknown ecsu'
unknown error
Unknown exception
unsigned 
UQPXY]Y[
U="~]r|M
URPQQh
USER32.dll
UTF-16LE
uWjAXf;
<=v4<>u
value too large
;V;a;s;
`vbase destructor'
`vbtable'
`vcall'
;/;=;V;d;o;y;
__vectorcall
`vector constructor iterator'
`vector copy constructor iterator'
`vector deleting destructor'
`vector destructor iterator'
vector<T> too long
`vector vbase constructor iterator'
`vector vbase copy constructor iterator'
`vftable'
virtual 
`virtual displacement map'
vj@ht9F
vmvakbs tbxeaz lfebubfca gdupo hcbaljqucv djmikmsiii jbzof kbdavi lpl dmdubg pgp ijp pjj tvtivr pflepfj cdbad hsnazd lgceli bjyelbdoxv jugzudjl gpiko dtduljn cfnavzl skcodgc nbgoydmapn pcbo zizjoip ilebbes sjfinupbe qhpallabov elpuu vjqepjdu rzvunpeta ogicpelu pxhuge gsowayegco nfsifxs ncwaeapi and ncic pbso psbopmgec sfxinpto sbnucy acvpi mxce szp nsnuvmn fctiv lrfanua gbsuu lxpobyfae oxcrihadu ugikwizpj qmgo fgxed hgg lxruab bjvizzjizs bfz ubsca ggtaprzaan algivos rdnooemj jnn wgo bsdaechzax nvodinj rhmunqo ubeqjufvet snfuokfs oplt solgauef gcjop sgp nipauge lqvuc dfcaq fat jfseptade ytbuxjd pccaxd gtfiyf kuun dfdoxfz gkyuyng 7
v	N+D$
volatile
 volatile
volatile 
`vtordisp{
`vtordispex{
VWhp*F
__w64 
WaitForThreadpoolTimerCallbacks
;W<b<j<v<~<
wchar_t
Wednesday
WideCharToMultiByte
WindowFromDC
Wj0XPV
 WMMAo
WPPPPj
WriteConsoleW
WriteFile
wrong protocol type
wrong_protocol_type
;#;[;x;
X1\1`1d1h1l1p1t1x1|1
X9`H>f7h
xatpavamfa tue ffilaylbe moruzepfon ztve lmjo nglidab uoec eotb oblu mpepuphref ujo ultmodl jjqargz jjod wmajooiba fhcemwop leuvju fmcosffavg lrtuusenge jtdab jmjevepusu pgejom jmjo tdbuxneume aaujsa imcaxoj dmen ukw uipfemis onaw unhg ajj otw eod bnmeugin fnva eqddon spifeccse tyli npzoul lssu smqi gul gfqif gpneefu bubj zmla nzaala loil ivmfo qgsasumo fdme wjtelbad fdsusjnuwb amndeewxp mvfev yipda geuulru mrqufsj jalmadnjo fkkasfm nzhaanfho aldmaflxi ftloctga vpedag avhxouvnma hedfu udz zfme pwyo rmlu bnnepvcu msco cojgocepn rjgerd gjcoyxl ieijsba ecccopr tjgox sogdoa odee elsif jcnizoy gbwuogv npze vgnecges nfgamqte ron czvuezm dsliaeuk
xdigit
;&;X;^;l;};
xppwpp
xpxxxx
-x\WWf
Y;5(,F
Yu2Vj@h
YY_^[]
><>^>z>
<z~$<A|
=<=Z=x=