Analysis Date2015-05-29 16:51:37
MD58ad609b9d2525e093afc1a2bae2cafdb
SHA16df3cb03f75d699ca631497a6753b7b2ee39325e

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: 171d27a4e068fea43c77df9a55fa189b sha1: fe3dab3688a86634ad171503b10047d0226c7907 size: 196608
Section.rdata md5: f1dc1be008a681a002df6f109a39061a sha1: b0da9297005a1a03290832f50b38c56b3f86be04 size: 53248
Section.data md5: 7e1d95ba3af6b202775854f35baa2916 sha1: 6812e3b5e6dad5d7c03cdc25332ec5cc72d6f8ca size: 7168
Section.reloc md5: 4642bc474dd2e0e7f512358e3327253e sha1: ebe023f0ee4ae000fb161957fac59a287f1c096e size: 14336
Timestamp2015-04-29 19:19:33
PackerMicrosoft Visual C++ 8
PEhash689b29a6536e14640a294918ed56aff115f843a7
IMPhashe7855ea1b9625dac9a1f86dab254f5b4

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates FileC:\WINDOWS\kwwkygq\oxsvynl
Creates FileC:\kwwkygq\oxsvynl
Creates FileC:\kwwkygq\qvcrbwkbnofjqrxmm3d.exe
Deletes FileC:\WINDOWS\kwwkygq\oxsvynl
Creates ProcessC:\kwwkygq\qvcrbwkbnofjqrxmm3d.exe

Process
↳ C:\kwwkygq\qvcrbwkbnofjqrxmm3d.exe

RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Keying Parental Link-Layer Color Event ➝
C:\kwwkygq\eatweso.exe
Creates FileC:\kwwkygq\eatweso.exe
Creates FileC:\WINDOWS\kwwkygq\oxsvynl
Creates FileC:\kwwkygq\oxsvynl
Creates FilePIPE\lsarpc
Creates FileC:\kwwkygq\njkayly
Deletes FileC:\WINDOWS\kwwkygq\oxsvynl
Creates ProcessC:\kwwkygq\eatweso.exe
Creates ServiceDevice Profile Extensible Auto Backup - C:\kwwkygq\eatweso.exe

Process
↳ Pid 800

Process
↳ Pid 848

Process
↳ C:\WINDOWS\System32\svchost.exe

Creates FileC:\WINDOWS\Prefetch\RUNDLL32.EXE-1BC69D2D.pf
Creates FileC:\WINDOWS\Prefetch\EATWESO.EXE-04C8B658.pf
Creates FileC:\WINDOWS\Prefetch\FPAQDNDXY.EXE-11F974F0.pf
Creates FileC:\WINDOWS\Prefetch\CMD.EXE-087B4001.pf
Creates FileC:\WINDOWS\Prefetch\NET1.EXE-029B9DB4.pf
Creates FileC:\WINDOWS\Prefetch\EXPLORER.EXE-082F38A9.pf
Creates FileC:\WINDOWS\Prefetch\monitor.exe-1949D260.pf
Creates FileC:\WINDOWS\Prefetch\USERINIT.EXE-30B18140.pf
Creates FileC:\WINDOWS\Prefetch\READER_SL.EXE-3614FA6E.pf
Creates FileC:\WINDOWS\Prefetch\QVCRBWKBNOFJQRXMM3D.EXE-39FBFBA4.pf
Creates FilePIPE\lsarpc
Creates FileC:\WINDOWS\system32\WBEM\Logs\wbemess.log
Creates FileC:\WINDOWS\Prefetch\svchost.EXE-0C867EC1.pf

Process
↳ Pid 1124

Process
↳ Pid 1204

Process
↳ Pid 1300

Process
↳ Pid 1848

Process
↳ Pid 1004

Process
↳ C:\kwwkygq\eatweso.exe

Creates Filepipe\net\NtControlPipe10
Creates FileC:\WINDOWS\kwwkygq\oxsvynl
Creates FileC:\kwwkygq\bnugqlo
Creates FileC:\kwwkygq\oxsvynl
Creates FileC:\kwwkygq\njkayly
Creates File\Device\Afd\Endpoint
Creates FileC:\kwwkygq\fpaqdndxy.exe
Deletes FileC:\WINDOWS\kwwkygq\oxsvynl
Creates Processjjueb1mnmhla "c:\kwwkygq\eatweso.exe"

Process
↳ C:\kwwkygq\eatweso.exe

Creates FileC:\WINDOWS\kwwkygq\oxsvynl
Creates FileC:\kwwkygq\oxsvynl
Deletes FileC:\WINDOWS\kwwkygq\oxsvynl

Process
↳ jjueb1mnmhla "c:\kwwkygq\eatweso.exe"

Creates FileC:\WINDOWS\kwwkygq\oxsvynl
Creates FileC:\kwwkygq\oxsvynl
Deletes FileC:\WINDOWS\kwwkygq\oxsvynl

Network Details:

DNSlittlemister.net
Type: A
199.34.228.57
DNSlittleriver.net
Type: A
66.151.181.49
DNSrememberservice.net
Type: A
110.45.130.51
DNSwouldriver.net
Type: A
95.211.230.75
DNSforgetangry.net
Type: A
DNSincreaseangry.net
Type: A
DNSforgetarticle.net
Type: A
DNSincreasearticle.net
Type: A
DNSwoulddried.net
Type: A
DNSrememberdried.net
Type: A
DNSwouldfifteen.net
Type: A
DNSrememberfifteen.net
Type: A
DNSwouldangry.net
Type: A
DNSrememberangry.net
Type: A
DNSwouldarticle.net
Type: A
DNSrememberarticle.net
Type: A
DNSjourneymister.net
Type: A
DNShusbandmister.net
Type: A
DNSjourneysuppose.net
Type: A
DNShusbandsuppose.net
Type: A
DNSjourneyservice.net
Type: A
DNShusbandservice.net
Type: A
DNSjourneyriver.net
Type: A
DNShusbandriver.net
Type: A
DNSdestroymister.net
Type: A
DNSdestroysuppose.net
Type: A
DNSlittlesuppose.net
Type: A
DNSdestroyservice.net
Type: A
DNSlittleservice.net
Type: A
DNSdestroyriver.net
Type: A
DNSriddenmister.net
Type: A
DNSbelongmister.net
Type: A
DNSriddensuppose.net
Type: A
DNSbelongsuppose.net
Type: A
DNSriddenservice.net
Type: A
DNSbelongservice.net
Type: A
DNSriddenriver.net
Type: A
DNSbelongriver.net
Type: A
DNSchairmister.net
Type: A
DNSthosemister.net
Type: A
DNSchairsuppose.net
Type: A
DNSthosesuppose.net
Type: A
DNSchairservice.net
Type: A
DNSthoseservice.net
Type: A
DNSchairriver.net
Type: A
DNSthoseriver.net
Type: A
DNSwithinmister.net
Type: A
DNSsuffermister.net
Type: A
DNSwithinsuppose.net
Type: A
DNSsuffersuppose.net
Type: A
DNSwithinservice.net
Type: A
DNSsufferservice.net
Type: A
DNSwithinriver.net
Type: A
DNSsufferriver.net
Type: A
DNSeffortmister.net
Type: A
DNSthroughmister.net
Type: A
DNSeffortsuppose.net
Type: A
DNSthroughsuppose.net
Type: A
DNSeffortservice.net
Type: A
DNSthroughservice.net
Type: A
DNSeffortriver.net
Type: A
DNSthroughriver.net
Type: A
DNSforgetmister.net
Type: A
DNSincreasemister.net
Type: A
DNSforgetsuppose.net
Type: A
DNSincreasesuppose.net
Type: A
DNSforgetservice.net
Type: A
DNSincreaseservice.net
Type: A
DNSforgetriver.net
Type: A
DNSincreaseriver.net
Type: A
DNSwouldmister.net
Type: A
DNSremembermister.net
Type: A
DNSwouldsuppose.net
Type: A
DNSremembersuppose.net
Type: A
DNSwouldservice.net
Type: A
DNSrememberriver.net
Type: A
DNSjourneynearly.net
Type: A
DNShusbandnearly.net
Type: A
DNSjourneyhappen.net
Type: A
DNShusbandhappen.net
Type: A
DNSjourneyshake.net
Type: A
DNShusbandshake.net
Type: A
DNSjourneyshare.net
Type: A
DNShusbandshare.net
Type: A
DNSdestroynearly.net
Type: A
HTTP GEThttp://littlemister.net/index.php
User-Agent:
HTTP GEThttp://littleriver.net/index.php
User-Agent:
HTTP GEThttp://rememberservice.net/index.php
User-Agent:
HTTP GEThttp://wouldriver.net/index.php
User-Agent:
Flows TCP192.168.1.1:1031 ➝ 199.34.228.57:80
Flows TCP192.168.1.1:1032 ➝ 66.151.181.49:80
Flows TCP192.168.1.1:1033 ➝ 110.45.130.51:80
Flows TCP192.168.1.1:1034 ➝ 95.211.230.75:80

Raw Pcap
0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a206c   : close..Host: l
0x00000040 (00064)   6974746c 656d6973 7465722e 6e65740d   ittlemister.net.
0x00000050 (00080)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a206c   : close..Host: l
0x00000040 (00064)   6974746c 65726976 65722e6e 65740d0a   ittleriver.net..
0x00000050 (00080)   0d0a0a                                ...

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2072   : close..Host: r
0x00000040 (00064)   656d656d 62657273 65727669 63652e6e   ememberservice.n
0x00000050 (00080)   65740d0a 0d0a                         et....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2077   : close..Host: w
0x00000040 (00064)   6f756c64 72697665 722e6e65 740d0a0d   ouldriver.net...
0x00000050 (00080)   0a740d0a 0d0a                         .t....


Strings
oC
tdcatr.tH
"
 
\
.
 
\
9
  
.
e
. 
00-+ .
-
-1
+-0-E-
-0
\
.
0
0
- 
000
-.C. 
`.
.u
                                 
2.exe
- abort() has been called
af-za
af-ZA
April
ar-ae
ar-AE
ar-bh
ar-BH
ar-dz
ar-DZ
ar-eg
ar-EG
ar-iq
ar-IQ
ar-jo
ar-JO
ar-kw
ar-KW
ar-lb
ar-LB
ar-ly
ar-LY
ar-ma
ar-MA
ar-om
ar-OM
ar-qa
ar-QA
ar-sa
ar-SA
ar-sy
ar-SY
ar-tn
ar-TN
ar-ye
ar-YE
- Attempt to initialize the CRT more than once.
- Attempt to use MSIL code from this assembly during native code initialization
August
az-az-cyrl
az-AZ-Cyrl
az-az-latn
az-AZ-Latn
.bat
be-by
be-BY
bg-bg
bg-BG
bn-in
bn-IN
bs-ba-latn
bs-BA-Latn
ca-es
ca-ES
Cja-JP
.cmd
.com
CONOUT$
CR6002
- CRT not initialized
cs-cz
cs-CZ
cy-gb
cy-GB
da-dk
da-DK
dddd, MMMM dd, yyyy
de-at
de-AT
December
de-ch
de-CH
de-de
de-DE
de-li
de-LI
de-lu
de-LU
div-mv
div-MV
Djjj
DOMAIN error
el-gr
el-GR
emscoree.dll
en-au
en-AU
en-bz
en-BZ
en-ca
en-CA
en-cb
en-CB
en-gb
en-GB
en-ie
en-IE
en-jm
en-JM
en-nz
en-NZ
en-ph
en-PH
en-tt
en-TT
en-us
en-US
en-za
en-ZA
en-zw
en-ZW
es-ar
es-AR
es-bo
es-BO
es-cl
es-CL
es-co
es-CO
es-cr
es-CR
es-do
es-DO
es-ec
es-EC
es-es
es-ES
es-gt
es-GT
es-hn
es-HN
es-mx
es-MX
es-ni
es-NI
es-pa
es-PA
es-pe
es-PE
es-pr
es-PR
es-py
es-PY
es-sv
es-SV
es-uy
es-UY
es-ve
es-VE
et-ee
et-EE
eu-es
eu-ES
fa-ir
fa-IR
February
fi-fi
fi-FI
- floating point support not loaded
fo-fo
fo-FO
fr-be
fr-BE
fr-ca
fr-CA
fr-ch
fr-CH
fr-fr
fr-FR
Friday
fr-lu
fr-LU
fr-mc
fr-MC
gl-es
gl-ES
gu-in
gu-IN
         (((((                  H
he-il
he-IL
HH:mm:ss
hi-in
hi-IN
hr-ba
hr-BA
hr-hr
hr-HR
hu-hu
hu-HU
hy-am
hy-AM
id-id
id-ID
- inconsistent onexit begin-end variables
is-is
is-IS
it-ch
it-CH
it-it
it-IT
ja-jp
January
jjjjj
jjjjjj
July
June
ka-ge
ka-GE
kernel32.dll
kk-kz
kk-KZ
kn-in
kn-IN
kok-in
kok-IN
ko-kr
ko-KR
ky-kg
ky-KG
lt-lt
lt-LT
lv-lv
lv-LV
March
Microsoft Visual C++ Runtime Library
mi-nz
mi-NZ
mk-mk
mk-MK
ml-in
ml-IN
MM/dd/yy
mn-mn
mn-MN
Monday
mr-in
mr-IN
ms-bn
ms-BN
ms-my
ms-MY
mt-mt
mt-MT
nb-no
nb-NO
nl-be
nl-BE
nl-nl
nl-NL
nn-no
nn-NO
- not enough space for arguments
- not enough space for environment
- not enough space for locale information
- not enough space for lowio initialization
- not enough space for _onexit/atexit table
- not enough space for stdio initialization
- not enough space for thread data
November
ns-za
ns-ZA
(null)
October
pa-in
pa-IN
pl-pl
pl-PL
Program: 
<program name unknown>
pt-br
pt-BR
pt-pt
pt-PT
- pure virtual function call
quz-bo
quz-BO
quz-ec
quz-EC
quz-pe
quz-PE
R6008
R6009
R6010
R6016
R6017
R6018
R6019
R6024
R6025
R6026
R6027
R6028
R6030
R6031
R6032
R6033
R6034
ro-ro
ro-RO
runtime error 
Runtime Error!
ru-ru
ru-RU
sa-in
sa-IN
Saturday
se-fi
se-FI
se-no
se-NO
September
se-se
se-SE
SING error
sk-sk
sk-SK
sl-si
sl-SI
sma-no
sma-NO
sma-se
sma-SE
smj-no
smj-NO
smj-se
smj-SE
smn-fi
smn-FI
sms-fi
sms-FI
sq-al
sq-AL
sr-ba-cyrl
sr-BA-Cyrl
sr-ba-latn
sr-BA-Latn
sr-sp-cyrl
sr-SP-Cyrl
sr-sp-latn
sr-SP-Latn
Sunday
sv-fi
sv-FI
sv-se
sv-SE
sw-ke
sw-KE
syr-sy
syr-SY
ta-in
ta-IN
te-in
te-IN
This indicates a bug in your application.
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
th-th
th-TH
Thursday
TLOSS error
tn-za
tn-ZA
tr-tr
tr-TR
tt-ru
tt-RU
Tuesday
uk-ua
uk-UA
- unable to initialize heap
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
ur-pk
ur-PK
USER32.DLL
uz-uz-cyrl
uz-UZ-Cyrl
uz-uz-latn
uz-UZ-Latn
vi-vn
vi-VN
Wednesday
xh-za
xh-ZA
zh-chs
zh-CHS
zh-cht
zh-CHT
zh-cn
zh-CN
zh-hk
zh-HK
zh-mo
zh-MO
zh-sg
zh-SG
zh-tw
zh-TW
zu-za
zu-ZA
=!>]>|>
=#=-===
                          
0 0$0(0D0L0T0\0d0l0t0|0
0 0*020L0T0\0m0
0#0-040G0`0n0
0%0-050=0C0O0W0k0{0
0%0-080D0L0X0e0
0%0-0A0b0
0!0)0A0I0U0]0e0m0
0!0+0A0K0c0s0
000C0Y0b0n0y0
0)01090[0q0{0
0!020E0f0
0-050;0C0M0Y0
0%060A0F0Q0r0z0
$0.090C0R0d0
0,0F0X0`0h0m0s0{0
0;0H0P0X0e0o0u0z0
	0@0J0_0g0u0
0&0J0c0
0!0J0u0
0*0W0}0
0%111Z1f1
0"1*121A1H1Y1^1d1t1
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
0>1I1Q1
0"1m1}1
0*1N1V1b1
"020_0h0
? ?&?*?0?4?:?>?D?H?\?}?
080X0x0
;$;0;8;G;[;o;{;
< <(<0<8<@<H<P<X<`<h<p<x<
= =(=0=8=@=H=P=X=`=h=p=x=
> >(>0>8>@>H>P>X>`>h>p>x>
; ;(;0;8;@;H;P;X;`;h;p;x;
: :(:0:8:@:H:P:X:`:h:p:x:
: :$:(:0:D:`:
%0E0i0
?0?P?p?
0R0]0o0
;0;u;{;
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
1#111F1V1f1s1
1#1+1;1I1Y1f1r1~1
1$1,141<1D1L1T1\1d1l1t1|1
1"1*161s1y1
1&1>1F1n1v1
1*1=1K1_1z1
1$1/1L1V1^1j1v1
1$12171F1t1
1.161;1E1k1
1&181C1s1~1
1'1E1L1P1T1X1\1`1d1h1
1*1n1v1
121V1^1f1q1
1=2`2m2
1*252P2W2\2`2d2
>!>%>)>->1>5>9>=>A>E>I>M>Q>U>Y>]>a>e>i>m>q>
1A1V1\1f1l1|1
@1b_SLUp
1D2L2Z2{2
1J2h2p2|2
1N1V1h1m1
1#QNAN
1#SNAN
;%<1<u<
1U2o2x2
1Y1a1h1p1v1}1
212>2V2c2|2
2!202t2
2$212E2[2n2s2
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2
2 2$2(2,2024282D2L2T2\2d2l2t2|2
2$2,242<2D2L2T2\2d2l2t2|2
2 2,242<2H2X2`2
2,2:2B2J2R2Z2f2
222C2K2c2i2q2y2
222I2w2
2)2=2R2Z2b2
2&2@2T2_2g2q2y2
2#242<2D2J2R2W2_2l2
2,242<2D2L2V2]2k2v2
2+252@2O2]2y2
2 262L2T2
2(282A2I2a2t2z2
2?2G2T2_2f2n2
2=2J2R2Z2d2
2!424F4U4
>%>2>B>O>
=&=2=:=B=U=
:":*:2:::@:H:e:
=*=2=H=m=
2L2h2y2
=2=:=L=a=~=
2r435F8
2T3\3i3p3
30363L3g3
304U4m4u4
323<3B3M3p3u3
3(303<3r3
3"323:3B3J3R3Z3c3k3s3
3 3(3-333;3@3F3N3S3Y3a3f3l3t3y3
3(3,3@3p3x3|3
3$3,343<3B3I3T3\3
3$3,343<3D3L3T3\3d3l3t3|3
3 3'343M3T3f3u3
3&3-353N3e3
3%3/393C3L3W3d3|3
3#3,3O3\3d3l3|3
3 3<3P3X3`3h3x3
3(343<3D3O3a3o3
3%353B3R3X3^3h3s3
3-393A3M3T3e3q3}3
3#393D3X3p3|3
3>3C3K3_3j3
3;3I3b3i3
3)404O4c4i4
3[4\5l5}5
353P3]3s3
3B3J3R3{3
?3?=?C?
3D4J4\4{4
3D4K4l4t4
3E4U4e4
;#;+;3;>;G;j;z;
3I5i7w7
>)>3>=>I>O>Y>j>p>u>
<#<3<I<Q<Y<h<
='=3=J=m=
3N3T3X3\3`3
3N4Z4a4
<-=3=?=P=X=`=l=t=|=
:':3:=:T:b:j:x:
3T=X=\=`=
4'414A4G4k4q4
4'414F4Q4Y4d4l4t4
4+424B4H4N4V4\4b4j4p4v4~4
4'424U4]4e4}4
4*434A4M4U4`4l4|4
4$4*42474=4E4J4P4X4]4c4k4p4v4~4
4$4,444<4D4L4T4\4d4l4t4|4
4&4.464Y4e4z4
4*4@4Q4^4
445?5G5u5}5
4'484@4T4d4k4
4>4F4n4v4~4
4;4I4Y4i4v4
4+4J4W4t4z4
4?4M4f4t4
4@4S4Z4
4,545<5B5X5`5g5y5
4'5F5R5]5s5
4%5G5R5
4*5K5S5f5z5
464F4N4V4\4
465N5g5
?$?+?4?A?G?S?Y?d?l?w?
4d4n4v4{4
;$=,=4=<=D=L=T=\=d=l=t=|=
?&?4?<?D?P?U?p?y?
?!?,?4?D?R?Z?b?h?p?
:4:J:U:c:~:
<'</<4<?<R<Z<b<j<
4V4^4x4
505?5H5P5Z5m5u5
525P5s5
5(50585A5f5l5x5
5 5'545=5^5
5$5,545<5D5L5T5\5d5l5t5|5
5)5:5D5O5U5\5t5|5
5)5;5P5n5v5
5"565B5L5X5_5g5|5
5(5A5Y5|5
5&5B5Q5Y5e5
5%5C5R5]5j5~5
5/5K5^5
5 616:6V6
5'626:6F6N6V6b6
5#6*6=6K6S6[6k6y6
5 6&676?6J6\6d6p6{6
5/6I6`6
5<6Y6e6m6u6}6
575C5W5b5r5z5
585`5h5p5x5
585@5K5U5_5y5
=5=A=P=Y=f=
:5:b:|:
=5><>b>i>
>5?C?P?Z?e?m?u?
?!?5?=?E?`?
;5;F;K;Q;c;i;t;};
>*>5>;>I>t>|>
5k6t6z6
5P6v6|6
:*;5;P;W;\;`;d;
;(;5;@;P;Z;f;n;
;5;S;h;r;
5V5^5f5
:5:W:]:
?5?Y?g?q?}?
60676T6e6r6|6
616<6D6R6k6s6z6
656@6_6j6J7f7
6"61676J6d6i6
6%616A6M6U6e6m6s6
6$6,646<6D6L6T6\6d6l6t6|6
6'6.646B6H6]6n6z6
6 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6
6,6<6@6P6T6X6`6x6
6$6,686J6R6`6u6
6,6d6s6~6
6'6L6S6w6}6
6%6S6o6
6*757]7p7x7
6"7-7<7]7
6%7A7M7S7[7e7
6*7C7K7Q7z7
697A7Q7|7
=&=.=6=B=j=
?'?.?6?=?\?d?l?t?
;6;<;I;j;
6M7_7q7
;);6;<;O;c;z;
747D7H7\7`7p7t7x7
757=7d7l7{7
7%717<7D7W7
7#71797?7I7Q7[7g7o7u7
7,747<7Z7
7$7,747<7D7L7T7\7`7h7p7x7
7!7)757s7
7 7$7(7,7074787<7@7D7H7L7P7
7/777B7N7V7^7f7
7+7?7G7R7h7q7z7
7.7<7V7b7n7}7
7/7A7I7R7]7b7k7
7/7Q7j7
7!828A8I8Q8Y8a8m8}8
7'838;8C8
7 8(80888D8L8T8\8,989J9n9t9
7$8,8:8B8J8Z8d8n8
7&8.898A8J8
7:8?8O8U8\8x8
7(8=8v8
7+8A8z8
7@8M8V8
7:8Y8d8{8
7A7l7r7
7B7H7^7f7
>7?B?H?
;#;/;7;C;S;^;f;
7F8K8]8{8
=$=7=?=G=S=_=o=w=
7I7N7\7d7
>7???I?l?
808T8\8p8
809:9\9w9
818A8b8p8
848D8H8X8\8`8d8l8
869<9B9S9^9d9
8)808=8D8p8x8
8*808?8E8R8[8}8
8 828@8G8T8\8d8x8
8,838D8R8]8e8r8|8
8 8(80888@8H8P8X8`8h8p8x8
8!8)81898A8M8U8]8g8o8}8
8&8.868<8I8O8j8
8(8>8L8T8Y8^8f8
8[8a8f8t8
8*8E8]8i8x8
8^8f8r8
8#8V8]8d8l8}8
8:9D9_9
8-9Q9r9
;8<A<K<R<Z<
<8<<<@<D<H<L<P<
8H8c8z8
8H9M9U9w9
="=*=8=@=H=P=V=`=f=k=
;8;@;H;P;X;_;g;o;w;
=-=8=H=Q=j=
?8?I?]?c?h?
8J8Z8c8
8n8s8y8
8R9`9j9
:.;8;S;];
8',W;w
=8=X=h=
90979N9S9o9
90:m:w:
919=9D9Q9V9[9c9o9t9
93:Z:g:~:
949B9H9[9c9v9
9!:4:<:D:J:b:j:p:
9$:7:H:O:]:h:s:{:
97(_KF:y
9":7:=:u:
9 92979?9q9z9
9%929=9E9T9d9t9|9
9+949>9I9V9c9p9
9*969>9F9N9
9 9(90989@9H9P9X9`9h9p9x9
9!9)91969>9Q9Y9d9r9~9
9 9,949P9\9|9
9 9&969G9N9T9`9w9
9'9-979U9_9e9o9w9}9
9 9%9-9@9L9m9
9$9,9:9B9
9:9C9z9
9\9d9l9t9|9
9,9d9l9t9x9
9(9I9R9
9"9M9Y9
9$9P9|9
9=9X9e9
9!:/:::A:
;9<b<y<
9D;]<h<
9j9q9z9
9@:J:R:
9P:Z:g:
?.?9?>?W?r?
9X:c:j:r:z:
aa@n~&
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
address family not supported
address_family_not_supported
address in use
address_in_use
address not available
address_not_available
aexgaa supjomf fjk pfbirvru msro zmd bjsade urobkim lnutiie blsi gpjadgu gspigtl mdw kmwi cllom jcaiubon blbicsga mfsuoxo vwb hsl taljacqo scwu ulqcer lssucw clcifu pglulvd sphojwga xysiao ijf tsxugmpaj iarlmo mcefibu ust cmje ykjit grf enpnog iipgna cqobiscafi kwin lgih gioz flkojdl brwoizkfaf wijpiav mfsie gpsoohfk gkwur ncjo cphuwiksud koyzubx bgnupevf oprxi onr wddi bhba kozci glgijfov evdx pkaculfbul lfnui bjijuxrvu ugsduw csc iwnjiunn plvircdu brsusadsu ijaagn sagfogldey wwc ctpoa mafsoaj lnaomipb suf ocf hnnit aacdjavt cmecooc ermfebrs ojja edvc rjxa joenxegjp bmsunsc lvwa ooppumavg lfji zyzadnsoc sal jnmaifv tlpoedn cpielamds ijmojimd ubiahp mugkuy upytajiru gcgoi dmluc lzfamqgiu chkusbumo pic kelpo fdcu uxbdenoeg wkvavai rztazmco itegribni
:$:::A:H:\:d:l:
;A<H<j<q<
>*>A>I>\>
>$>A>L>j>q>{>
already connected
already_connected
<!<,<A<L<T<h<y<
;-;A;N;a;s;
">/ar~B
AreFileApisANSI
argument list too long
argument out of domain
?/?A?S?e?w?
<at-<rt"<wt
August
.?AVbad_alloc@std@@
.?AVbad_exception@std@@
.?AVerror_category@std@@
.?AVexception@std@@
.?AV_Generic_error_category@std@@
.?AV_Iostream_error_category@std@@
.?AVlength_error@std@@
.?AVlogic_error@std@@
.?AVout_of_range@std@@
.?AV_System_error_category@std@@
.?AVtype_info@@
;';/;B;
<B<1J:.}
bad address
bad_address
bad allocation
bad exception
bad file descriptor
bad_file_descriptor
bad message
 Base Class Array'
 Base Class Descriptor at (
__based(
bbsajtnoi annucah sbabunea budsombp rsvolsfoyr kfduoboxup dmhecjev ywsu cdramxl bnca byope gpba qyico lfilohn ejbjaj cgzam mdqigje anvbod smlekumj upjegij zcm vmjei zmbiv efjayajrg ojbcin tppej zecfacbe ngt yeglelotgi frrellve nfpikqguls lnliizg htojep vdmez nzsonuwqe dpfima anu jmcutpnobc krpambnox xqcojumn ybnau povuab lptefmvila dgzantcu vyteg nzat nlcaq mjniokk sntondh spr ohdsoaflge tmobomi fjoyodl qcpeeb lbfakl obgma vev cleena lcsosmgax fjpasbro zultop yqfirmt vwe aflrozilj ligpasnm nfgamxedu faafao rcusaldgea iiptevubcy ejv hpo osqfam fbotegjsa bsmatf xvbitfbo afedowosp omn grbaa mpfinrosi jjfaz irgdi mdcez scl oioiljoio nypi msnodl zodm juuebcor zbpiyt emuxtu gcq sgcebdci vvj tanal mjbai 
BeginPaint
>+>:>B>g>v>
<b<j<r<
:!:.:::B:M:W:_:k:s:
;";/;:;B;O;W;c;k;z;
=)=B=P=i=w=
broken pipe
bWWWWj
By]]!&j
c&7^l@
CallWindowProcA
__cdecl
=C=]=e=o=w=
Cgxfauvdofo gcc espiziiz bqlaunw ojxgoqpgu fgju xja fisk mszu jqdupapag rjfeclubeu abxig urkio yrhegglad omyvo jfriszami len mdlopuzlov nfnepjhe imrji ltlodvig dbagefbdui mzwouhscu dmlupi garfos objda udjbamnp pvnoavsvet jrrebuja eboh saaa zjsullin odmse duzdoabgl sniapujle mjboogt myisusc izcacimcud daukiet agzyodtdep bwteck szel iifll qnpaca bbojovlwom reijgemst jcenuk grvokogpev aqfbirrc nfim injmobyu dfroscimal nixpatxfac ptcelfjawg sewhejbi iiohnjoe egjbi onfd asifravy jkieme fcduau wgitewzj slrifsi tafredu cdfalffus dmduugaun sixt mhegec wmhemhtafe wwv sohdepxde oulxoinao rdvaexscaz gosf gijmo fnlosdge lmg lufozegjge daicxutjpu lshup cic hlnadnalo ccone vnuaitu gmnisffesv onlt ncnimdo luafru zrep vdbenbbe wdu opuo cgzihjye ucbmelnj vvkusivmi rse fno gywoajbca sit uocnradf pdquo
CheckDlgButton
:!:,:;:C:K:S:`:
 Class Hierarchy Descriptor'
CloseHandle
CloseThreadpoolTimer
CloseThreadpoolWait
__clrcall
-.&"CL$Zd
CompareStringEx
CompareStringW
 Complete Object Locator'
connection aborted
connection_aborted
connection already in progress
connection_already_in_progress
connection refused
connection_refused
connection reset
connection_reset
`copy constructor closure'
CorExitProcess
CreateEventExW
CreateFile2
CreateFileW
CreateSemaphoreExW
CreateSymbolicLinkW
CreateThread
CreateThreadpoolTimer
CreateThreadpoolWait
cross device link
CSs2vN%
<C<U<}<
@.data
dddd, MMMM dd, yyyy
December
DecodePointer
`default constructor closure'
 delete
 delete[]
DeleteCriticalSection
DeleteFileA
destination address required
destination_address_required
device or resource busy
directory not empty
?#?(?<?D?J?
>%><>D>L>T>\>m>
-DPq$f
=/=D=U=]=e=z=
`dynamic atexit destructor for '
`dynamic initializer for '
__eabi
`eh vector constructor iterator'
`eh vector copy constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`eh vector vbase copy constructor iterator'
???E?K?Q?W?]?d?k?r?y?
>!>:>E>^>l>
:':E:L:P:T:X:\:`:d:h:
EncodePointer
EndDialog
EndPaint
EnterCriticalSection
EnumSystemLocalesEx
<,<:<E<O<e<r<
executable format error
ExitProcess
;#;/;E;Y;q;
-$=$~f
__fastcall
February
;Fh;j|
file exists
filename too long
filename_too_long
FileTimeToLocalFileTime
FileTimeToSystemTime
file too large
FindClose
FindFirstFileExW
FindResourceA
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FlushProcessWriteBuffers
:];f;n;
<^=f=r=
FreeEnvironmentStringsW
FreeLibraryWhenCallbackReturns
Friday
function not supported
GDI32.dll
generic
GetACP
GetActiveWindow
GetBkColor
GetClipRgn
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetCPInfo
GetCurrentDirectoryW
GetCurrentObject
GetCurrentPackageId
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentThreadId
GetCursor
GetDateFormatEx
GetDCBrushColor
GetDCPenColor
GetDeviceCaps
GetDlgItem
GetDlgItemInt
GetDriveTypeA
GetDriveTypeW
GetEnvironmentStringsW
GetFileInformationByHandle
GetFileInformationByHandleExW
GetFileType
GetFontLanguageInfo
GetFontUnicodeRanges
GetForegroundWindow
GetFullPathNameW
GetInputState
GetLastActivePopup
GetLastError
GetLocaleInfoEx
GetLogicalProcessorInformation
GetMenu
GetMenuCheckMarkDimensions
GetMenuContextHelpId
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMetaRgn
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetNearestColor
GetObjectType
GetOEMCP
GetPolyFillMode
GetProcAddress
GetProcessHeap
GetProcessWindowStation
GetPropA
GetQueueStatus
GetRandomRgn
GetScrollPos
GetStartupInfoW
GetStdHandle
GetStretchBltMode
GetStringTypeW
GetSystemPaletteUse
GetSystemTimeAsFileTime
GetTextAlign
GetTextCharacterExtra
GetTickCount
GetTickCount64
GetTimeFormatEx
GetTimeZoneInformation
GetUserDefaultLocaleName
GetUserObjectInformationW
GetVersion
GetWindowContextHelpId
GetWindowDC
GetWindowLongA
ghfav jeljeqpta weysib uouig ziiu gkijodyj nmfoznpe aiyxilakbv mvbeggci pgjed bgz iingmi jgzoflg dljohti znjolcp tke zhj ootfofe obmv ifnd hmbubj cfajubtg giebe tbguesd pdceab gjgiei leobba peq gyd ghg jgiagazv tfgaqdc rccaftjicl oaicpa jauzsait fdguzfnog fodma mpsujaqjar fbsehwye inb bbfigxp viojxa pscindera sbdurob zkasejn esjy sjdasez dnzi tdv iododzuzj lmzundf cyojow unugenaf ufdejihsc ambz nja cmvaonytu oitfquj cliuxegsb vzom tulsabcjai ibeyve mehcibnme oryjunef uanic snmi bml rkl zdzarf dnbi lbne cmd ifznei mlpesjminy fbbottdo cbtavcjas rqgobjr sclozobbo txgaspb gxqotlru alrc tgmab zfbelpjuie muagmejejo fzqimgxo rsle recroeea mbgasy fyfapufquc plr jun qifdervosi vwl cdgut gggeraziva rsfi lnseptaiga rad nlzebdevo fcsopx vdbaji lkyigas eagb coddaeceet avejvoudz vdbeoem
GlobalAlloc
GlobalFlags
GlobalHandle
GlobalSize
>'>:>G>P>
</<g<p<y<
<*=g=y=
`h````
;(;H;d;h;
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
`h`hhh
HH:mm:ss
<(<H<h<t<
HHtVHHt
host unreachable
host_unreachable
=%>h?r?x?
Ht+Ht$Ht
=H>U>j>w>
;-<H<v<
_hypot
identifier removed
iiijijcec pgjopplenv jbbo cftijmuh kepboyotc vebfaymb vzfieznvo nfd fjzepfcu ibjojigr ubc rjjilzer mdp cjn fygapaqa jsmazrp tuboxoq tbaae udsvulepe wsnak pbeicigv dbrakpku ihgme kumki tft scduiprdia pjgi rsgidvo favnad yabuf fpanu gmdafujwub uir dcmons ytcogask sbbomesfel ouydqud rtocublya nfcoxyna kfcevgser szbe bplij ssbiggsirz bbd ntnietz ernebu dctoufa vah otfgaecq obbmic egngerdc mcza tweaha ufh esffubn jgcizanfim wtqolgcoxu cjorufbcib jfq zjjuoi badu iolxdotyde rpsixibl xvn prlacbcubs puvw fkipobd excicer ppqapdge jzeri fcb gdboit rynevmtu dpmeecjmaf mcsaj yasbukg umjcim ggsejm faarbaind emabc oqptopvs jlsa neeedfi qgah ppj ddfi tljed xgeonim nlwip tow blobar asllemnf zgwools llavegmsuc izaviyu smjal lsna ief mpo rutzumofd dpbidcramg bsdixgtof pwbegd ues=
=!=)=I=j=
illegal byte sequence
inappropriate io control operation
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
interrupted
invalid argument
invalid_argument
invalid seek
invalid string position
?<?I?O?
io error
iostream
iostream stream error
=I>Q>Y>a>i>
is a directory
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocaleName
IsWindowEnabled
IsWindowUnicode
:I;T;];
<itx<o
?'?-?I?u?
="=<=I=V=]=d=k=
;=;I;V;^;m;};
j031:1
jA[jZZ+
JanFebMarAprMayJunJulAugSepOctNovDec
January
?J?\?d?{?
@jd_u	
jdwur lyfoksfi jujfi bbmeg dpven sbcucmgum qdbeemno iamztabqdu cqg eglpu msbocdfe vgsajofrog lbro doj zns jcfonsjeda vrezovdm mglul pjp jaujh acij iigzki udutmura pdca blvidq bmrajnfesi kbkomev vndiai qjfarpfe unbmuec iga krlu oxmefits dbv wjoa xcigonb upfr ictiji zlmi uqlbefkfur agvludjdu pfcunheoki pisjarid kzpuob opvzipgdue lbvedbv mimwaqdpaa ibyju tsk ilcqeum gupfovuu qsjaygjoxd sbidebl dfdaflbae acu uppuziimef bsehimbil eccli kspi kbciugdad eau vjauvuhc uvtdipzq mnbo sbenijn epncemtw insj uaey iafsxuh lgl fgr slzemzamu jor fsdofuln jcguoi qbcejpfuce nuoydooggj gomtujxhub trhagmgol tsb qamjoc vuojciz rzfe acf pbo tac plfecicfu dlcamc dpoa psl dkfic cflij edpmuio jabdagbh uyupuu uzlbars ombletz hiap jikgetp xkbujgc rfativm ofjdiriu ebrlivmv ctsi guw ovuv mebbueoj cdmee nvb
j/_j\[f;
j@j _W
<@<j<r<
;";*;J;V;
} kE$<
KERNEL32.dll
k}m.3[yT
kNCvlN
< <:<`<l<
L3=%i?
	&	LbH
lcgaml ofupno frmuo fomfoz ssif oxhnudxbuf qkiubeum juweveu qgvactlut uooanl tobfeodq cmda gwsih dlzoyob ovclukg zgmocnfab cestagb psmardb futabelf jalmebcaga dmridde dmom dgbojdlof rlm bpwous ggxa foxseohvl ldced nbewadilt zkti psjegix xjrihrsolo tsg tjkizfu ezuarb fvihiil nbheulzpiv iajugm tuspisj ddu vxanivurt pepseqzdo lkmusnlig ammcobpfuv mawteft nxceen lovjill sxele rpbaz imjoy bja gfriwoahu ncvolcsi seoej ccopudt mfs kuggelcsip rfj nlem eflsi grlive uesoapsed sfgiotpg tlnodo dvpa eafrnamit ngle ima ambm tiieg qdgurgyi bdrouhz yufa cuoaj garodel jbbuifa lgudigut sbwea csfuwqgao fmloi feuxnoj ndcammzudc ppkox uvgpan jjar hblam mdcelopre ezohb ccsourxi cymuzbfoya ncfolqe llmaacafm hbjudmlanf uva xiupzi pumqigl dzoauc aijuuybed nnd rirg gdon srsev jbaan lstebbes czucuaf skpd
LCMapStringEx
LCMapStringW
LeaveCriticalSection
lfkuso rpje gnnech bixbi fdneljl rfb iujd dggoodup fvdotguf teraisidjn jofni vjisomnduf aduebk ddkiglneq dspimpvijn nmbes ilvloig utgbaat ueqvefug zgogivzxic njnoapsupo necfia fbg zpafojf snul jra rveerazn fde lmsuxhd srnousnvot iprgonmf yws cvlefrdu cnozusbi oybs gecmicfja sldea ciqxap ggjugrlepm jmlet fjlaflp udfqa ttjef ubspulo flvusk auejim vfwoepl aeqdbuogdc sjno axvsepne sds eedvu jdtobvuxox dmta bmaguymo uogfsutm xvs ubapeb whibatanae bdobi qzjaj snafo srcehe heua bifemoetn vab uaa ofpagafpqo ludpa otjmiktlo gfufe dpfolme bsez fog cfw dgyuolste kkwuaffo ncfu jrlomcvec dtu dfxou jocex udbvozfda ngmo nbdo wbyofcbuso lojpeiots mvaani mzamirbw pameoduh farsonle zin lpcofawnu psj ojmo 
LM'kMM
LoadIconA
LoadLibraryExW
LoadResource
LocalFlags
`local static guard'
`local static thread guard'
`local vftable'
`local vftable constructor closure'
LockResource
<L<T<m<
:":@:L:T:`:r:y:
`managed vector constructor iterator'
`managed vector copy constructor iterator'
`managed vector destructor iterator'
map/set<T> too long
marredljo fapca zpm lexyi qrc mjj ipizz jvmigum gdmiwg dqjianp ymceaj njlazqwiux pmpeoifn mlm ivqji ppmavzeqi nrloecil nujmu bhfiwcheln domuarom aettnunfj gcsosyic mndamlzad pljuavcrei iedlfa stjoebi nbsegfji cogfumf mcgigilfa vbpij zlp vcbeiqqta cpeceeeoj pfl cwsijhdunl fbl smaju irrle hhduclmuvo rlgeuvpbub zcz zfzipax gdbopcdouw hpo gzapo lapto mtiukivuhi nzsopfj edh napguqbce cdde jfaesoeej nogsitnzom bfr azsm dyinupp oibl isr afl zgp fozbexeq cjusikp esdfubm esksoov dpagesof ljniqlcov twcorsmib oubdr tml ueua jgcizg vogburj iducseu flc rcfuul irmavavpco sfgelbmecf jbejelt anuzcenvs wpdajo ief lsez bxqessmoov vzcaignj wffe aeife phneg gyria gascif ougnomoj sddiujtcam gbaleej ivdowemsbo vzlasib sipgaae efjdeiup kggefj ounry gmdissfoj bbeyup ujmxibd
&MbK3M.
MessageBoxW
message size
message_size
MM/dd/yy
Monday
MoveFileA
MoveWindow
^m{Q4=
mrueseenfz uflce qunlupw digkeftxis rgmoeegl rmdampji fcmirf vvsa gmme ruqw odon goaekcild yuy lsfomg tjjip zft oat bbcoeg yibsatb yvfibzagia gehmuqnyoz trpiv tiegherz bxp tmnolyi aeuzc auqonade anejuya licyo vpcaieow nzmi ugjoomer uljxargge vcherd tcgikrg xpniqgdemr fcipum inaro nfum pultoewsfi ksdoy sxfuduq smanuc aqmuteo zfb
:%:m:u:|:
MultiByteToWideChar
_N7^aN=4bN:
<N<a<q<
network down
network_down
network reset
network_reset
network unreachable
network_unreachable
 new[]
_nextafter
=:>N>g>x>
,N`l2N_(3NfZ3N.
no buffer space
no_buffer_space
no child process
no link
no lock available
no message
no message available
no protocol option
no_protocol_option
no space on device
no stream resources
no such device
no such device or address
no such file or directory
no such process
not a directory
not a socket
not_a_socket
not a stream
not connected
not_connected
not enough memory
not supported
November
<N<T<X<\<`<
(null)
October
`omni callsig'
operation canceled
operation in progress
operation_in_progress
operation not permitted
operation not supported
operation_not_supported
operation would block
operation_would_block
operator
OutputDebugStringW
>$>O>W>_>
>%>->?>O>W>h>
owner dead
;O<Z<p<
> >$><>@>\>`>p>
__pascal
PeekNamedPipe
permission denied
permission_denied
<P<h<p<
~pjCXf
`placement delete closure'
`placement delete[] closure'
PostMessageA
PP9E u
-pp%}f
PPPh0cA
protocol error
protocol not supported
protocol_not_supported
ps1%DYV,
PSSSSV
__ptr64
PWWWWV
;P;X;e;
Q9a9q9
= >;>Q>a>q>
qctzommqo ovblugpric zmiwenz ledifa kelvisifj rnnan efl drixun zlposf derfadvf guwwitib ltpopb fqlopf zvmuophmav bsalohjmah gljuf bjxir bcboq gvpafa fcz oizdb jjpogd aef lzfiob clle peivcebhxi uinajneeeb bbdimucuzu ivfv zrbitddot rcijunn szt zoedlodjl ann isyvisi mdseae iggbo varl vnf psjab gdmere gzgepekp hvigipee sourpiv hmjeu pfgupcbuso fzlundfee ugvrobfva cmhoehe odacpi jetwear unrpi fnmicge tyoca ntifeqt jlucifopfi lgluvnbe pbeqeibd lkvejpye gbsiubup ple gcul jsa llmuplzo igydu atmpece jfaiuruie pso tsfib jvolaj gybepkz bnleidzbax wnfuoe sqfilnd inijdazeos zpmiwyno bmbep jsbozbbukb drnucjlod ranhoivmz rgdi sszaagn lmlojsuq mnoce gofzeud miqiw mespam3Y
<Q<^<j<r<
=*=Q=_=k=
QQSVWd
QueryPerformanceCounter
=>=r=}=
RaiseException
`.rdata
ReadConsoleW
ReadFile
read only file system
.reloc
RemovePropA
resource deadlock would occur
resource unavailable try again
__restrict
restrict(
result out of range
RtlUnwind
?R?_?w?
<R<Y<o<y<
Saturday
`scalar deleting destructor'
SendMessageA
September
SetDefaultDllDirectories
SetDlgItemTextA
SetEndOfFile
SetEnvironmentVariableA
SetFileInformationByHandleW
SetFilePointer
SetFilePointerEx
SetFocus
SetLastError
SetPixel
SetStdHandle
SetSystemPaletteUse
SetTextAlign
SetTextCharacterExtra
SetTextColor
SetTextJustification
SetThreadpoolTimer
SetThreadpoolWait
SetThreadStackGuarantee
SetUnhandledExceptionFilter
SetWindowTextA
ShowWindow
=:>S>i>{>
SizeofResource
/S]rcy
-+>sSf
SSPQSW
state not recoverable
__stdcall
stream timeout
`string'
string too long
Sunday
SunMonTueWedThuFriSat
,SVWj0X
SVWjA_jZ+
system
SystemTimeToTzSpecificLocalTime
t2x2|2
~';_t|%3
< t8<	t4
t&9=$	D
TerminateProcess
text file busy
t!=fff
+t"HHt
tHHt*Ht#
__thiscall
!This program cannot be run in DOS mode.
Thursday
tI(}cU
timed out
timed_out
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
tN{iuN|
too many files open
too_many_files_open
too many files open in system
too many links
too many symbolic link levels
Tuesday
;t$,v-
 Type Descriptor'
`typeof'
tYU3XFr
;,;<;U;
u2S*aL?=ai
uaPPPS
?:uBGW
uBjAYjZ+
`udt returning'
__unaligned
UnhandledExceptionFilter
UNICODE
unknown error
Unknown exception
UpdateColors
UQPXY]Y[
URPQQhP9B
USER32.dll
UTF-16LE
value too large
`vbase destructor'
`vbtable'
`vcall'
__vectorcall
`vector constructor iterator'
`vector copy constructor iterator'
`vector deleting destructor'
`vector destructor iterator'
vector<T> too long
`vector vbase constructor iterator'
`vector vbase copy constructor iterator'
`vftable'
v_h*-cS@yu
`virtual displacement map'
Vj~hm$
v	N+D$
!V%'S+
vTZewz
WaitForThreadpoolTimerCallbacks
Wednesday
WideCharToMultiByte
WindowFromDC
Wj0XPV
Wj.hXD
Wqa=An
WriteConsoleW
WriteFile
wrong protocol type
wrong_protocol_type
;);/;x;
=%>->X>~>
: :@:X:
xDmEWf
xppwpp
xpxxxx
-XTMaf
Y;5X	D
yk'h]b8
YY_^[]
z}w<kihofovjxu djdieqbq dbgisgge jak qgpojvudoi jki oma esejmungvo bcjoqug gvcil lmleshvo usunhub nul duozd edtogurr veosgu csame kicfasu wblissajus zotpiast jod lcvo noxgijwl znteamrlat cgf czjejdpals blno lvfuhm tjjaqrci mjjeoegji cfyo abaogsafl uosmbogas plcag sdladaz ppbufsvo gnzoxbicad set jli ignep nvgipe edmped salm vswopt nqdabolwup zizsosgje okn sxtocvo frdei pgjogfej njbod vbsadpqan wvi sbj upazs fdy mmlaz declegecm lraeujamoz bfsuba vmmowj uowkenus andwifu fgnalp tjto mpemas bpqima hgxewsg wlzafbekoz dkdapgp iglbadmw sutyirndap des maonsi ebe cuqipul slmu hrciubhla cfrofsle wbcisuu jkc fddu afamu spfixa pujbe nggorgo ben smbilvfop utliv rsjesalx hweajiwunh nlgayz zcdaj figpabij ltfo mrte cbyedqivob oxzmudzse ofl gdl lubd wfpibim evbpe ftvefe fung nlat hlreiw flgofsok inbjeoptla hiobyu jmrojkto