Analysis Date2015-05-28 09:12:15
MD50f4baa76637cc0ec8b521604ac926dcb
SHA17718e4a77d24c4b23affea5c28b5f9a53d84cb9d

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: cac4b23452dd9ac5f8436a9a27c1301a sha1: 7f4a270dac59b3b43fcbedddec2654f7351b2c12 size: 274944
Section.rdata md5: dff7c44d15986e83f037c4b9c1881d8e sha1: 5044767561e15315f75479c1712d9c2fae55856c size: 58368
Section.data md5: df00e15b01c5ac06b89c845fa4fc9f2d sha1: 133d9e2f997893bde06883a920a7b3d9d8cdc92e size: 7680
Section.reloc md5: c15b2c3ac8d326c88c9d6baa606b7f01 sha1: 188679e2630ffe7770aa6abca54824fa248d7f5b size: 23040
Timestamp2015-05-08 07:14:08
PackerMicrosoft Visual C++ 8
PEhash107a70f0caae2274ce2e1cd78b58bc60b9990f48
IMPhashf2024fd0bbd4f276848cd3ad10118d49

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates FileC:\siumnpbopk\v6p1luggapnqrzy.exe
Creates FileC:\siumnpbopk\sfuopogfgzut
Creates FileC:\WINDOWS\siumnpbopk\sfuopogfgzut
Deletes FileC:\WINDOWS\siumnpbopk\sfuopogfgzut
Creates ProcessC:\siumnpbopk\v6p1luggapnqrzy.exe

Process
↳ C:\siumnpbopk\v6p1luggapnqrzy.exe

RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\User-mode Connect Superfetch Logs Group ➝
C:\siumnpbopk\bajtdsxwbf.exe
Creates FileC:\siumnpbopk\bajtdsxwbf.exe
Creates FileC:\siumnpbopk\sfuopogfgzut
Creates FilePIPE\lsarpc
Creates FileC:\WINDOWS\siumnpbopk\sfuopogfgzut
Creates FileC:\siumnpbopk\kzehcnbty6kk
Deletes FileC:\WINDOWS\siumnpbopk\sfuopogfgzut
Creates ProcessC:\siumnpbopk\bajtdsxwbf.exe
Creates ServiceQuality Link-Layer Policy Cryptographic - C:\siumnpbopk\bajtdsxwbf.exe

Process
↳ C:\WINDOWS\system32\svchost.exe

Process
↳ Pid 804

Process
↳ Pid 848

Process
↳ C:\WINDOWS\System32\svchost.exe

Creates FileC:\WINDOWS\system32\WBEM\Logs\wbemess.log

Process
↳ Pid 1204

Process
↳ C:\WINDOWS\system32\spoolsv.exe

RegistryHKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\BeepEnabled ➝
NULL
RegistryHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\System\Print\TypesSupported ➝
7
RegistryHKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\Printers\SymbolicLinkValue ➝
NULL
RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Print\Printers\DefaultSpoolDirectory ➝
C:\WINDOWS\System32\spool\PRINTERS\\x00

Process
↳ Pid 1860

Process
↳ Pid 1148

Process
↳ C:\siumnpbopk\bajtdsxwbf.exe

Creates Filepipe\net\NtControlPipe10
Creates FileC:\siumnpbopk\sfuopogfgzut
Creates FileC:\WINDOWS\siumnpbopk\sfuopogfgzut
Creates File\Device\Afd\Endpoint
Creates FileC:\siumnpbopk\pyjvhmjk
Creates FileC:\siumnpbopk\bagmxbqbrtdi.exe
Creates FileC:\siumnpbopk\kzehcnbty6kk
Deletes FileC:\WINDOWS\siumnpbopk\sfuopogfgzut
Creates Processnjodwbkwzeve "c:\siumnpbopk\bajtdsxwbf.exe"

Process
↳ C:\siumnpbopk\bajtdsxwbf.exe

Creates FileC:\siumnpbopk\sfuopogfgzut
Creates FileC:\WINDOWS\siumnpbopk\sfuopogfgzut
Deletes FileC:\WINDOWS\siumnpbopk\sfuopogfgzut

Process
↳ njodwbkwzeve "c:\siumnpbopk\bajtdsxwbf.exe"

Creates FileC:\siumnpbopk\sfuopogfgzut
Creates FileC:\WINDOWS\siumnpbopk\sfuopogfgzut
Deletes FileC:\WINDOWS\siumnpbopk\sfuopogfgzut

Network Details:

DNSgentlemillion.net
Type: A
98.139.135.198
DNSdegreeheart.net
Type: A
95.211.230.75
DNShdredirect-lb-399551664.us-east-1.elb.amazonaws.com
Type: A
54.85.146.186
DNShdredirect-lb-399551664.us-east-1.elb.amazonaws.com
Type: A
54.209.246.182
DNSanswertoward.net
Type: A
DNSglasstoward.net
Type: A
DNSanswerpleasure.net
Type: A
DNSglasspleasure.net
Type: A
DNSanswermillion.net
Type: A
DNSglassmillion.net
Type: A
DNSanswerwhite.net
Type: A
DNSglasswhite.net
Type: A
DNSdifficulttoward.net
Type: A
DNSheardtoward.net
Type: A
DNSdifficultpleasure.net
Type: A
DNSheardpleasure.net
Type: A
DNSdifficultmillion.net
Type: A
DNSheardmillion.net
Type: A
DNSdifficultwhite.net
Type: A
DNSheardwhite.net
Type: A
DNSpleasanttoward.net
Type: A
DNSnecessarytoward.net
Type: A
DNSpleasantpleasure.net
Type: A
DNSnecessarypleasure.net
Type: A
DNSpleasantmillion.net
Type: A
DNSnecessarymillion.net
Type: A
DNSpleasantwhite.net
Type: A
DNSnecessarywhite.net
Type: A
DNSordertoward.net
Type: A
DNSrequiretoward.net
Type: A
DNSorderpleasure.net
Type: A
DNSrequirepleasure.net
Type: A
DNSordermillion.net
Type: A
DNSrequiremillion.net
Type: A
DNSorderwhite.net
Type: A
DNSrequirewhite.net
Type: A
DNSleadertoward.net
Type: A
DNSheaventoward.net
Type: A
DNSleaderpleasure.net
Type: A
DNSheavenpleasure.net
Type: A
DNSleadermillion.net
Type: A
DNSheavenmillion.net
Type: A
DNSleaderwhite.net
Type: A
DNSheavenwhite.net
Type: A
DNSheavytoward.net
Type: A
DNSgentletoward.net
Type: A
DNSheavypleasure.net
Type: A
DNSgentlepleasure.net
Type: A
DNSheavymillion.net
Type: A
DNSheavywhite.net
Type: A
DNSgentlewhite.net
Type: A
DNSvarioustoward.net
Type: A
DNSreturntoward.net
Type: A
DNSvariouspleasure.net
Type: A
DNSreturnpleasure.net
Type: A
DNSvariousmillion.net
Type: A
DNSreturnmillion.net
Type: A
DNSvariouswhite.net
Type: A
DNSreturnwhite.net
Type: A
DNSforwardheart.net
Type: A
DNSdegreeperfect.net
Type: A
DNSforwardperfect.net
Type: A
DNSdegreemayor.net
Type: A
DNSforwardmayor.net
Type: A
DNSdegreebattle.net
Type: A
DNSforwardbattle.net
Type: A
DNSanswerheart.net
Type: A
DNSglassheart.net
Type: A
DNSanswerperfect.net
Type: A
DNSglassperfect.net
Type: A
DNSanswermayor.net
Type: A
DNSglassmayor.net
Type: A
DNSanswerbattle.net
Type: A
DNSglassbattle.net
Type: A
DNSdifficultheart.net
Type: A
DNSheardheart.net
Type: A
DNSdifficultperfect.net
Type: A
DNSheardperfect.net
Type: A
DNSdifficultmayor.net
Type: A
DNSheardmayor.net
Type: A
DNSdifficultbattle.net
Type: A
DNSheardbattle.net
Type: A
DNSpleasantheart.net
Type: A
DNSnecessaryheart.net
Type: A
DNSpleasantperfect.net
Type: A
DNSnecessaryperfect.net
Type: A
DNSpleasantmayor.net
Type: A
HTTP GEThttp://gentlemillion.net/index.php
User-Agent:
HTTP GEThttp://degreeheart.net/index.php
User-Agent:
HTTP GEThttp://glassheart.net/index.php
User-Agent:
Flows TCP192.168.1.1:1031 ➝ 98.139.135.198:80
Flows TCP192.168.1.1:1032 ➝ 95.211.230.75:80
Flows TCP192.168.1.1:1033 ➝ 54.85.146.186:80

Raw Pcap
0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2067   : close..Host: g
0x00000040 (00064)   656e746c 656d696c 6c696f6e 2e6e6574   entlemillion.net
0x00000050 (00080)   0d0a0d0a                              ....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2064   : close..Host: d
0x00000040 (00064)   65677265 65686561 72742e6e 65740d0a   egreeheart.net..
0x00000050 (00080)   0d0a0d0a                              ....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2067   : close..Host: g
0x00000040 (00064)   6c617373 68656172 742e6e65 740d0a0d   lassheart.net...
0x00000050 (00080)   0a0a0d0a                              ....


Strings
FS
eCajeCrs
"
 
\
.
.
 
\
  
.
e
. 
00-+ .
-
-1
+-0-E-
-0
\
.
0
0
- 
000
-
..bu
u
                                 
2.exe
- abort() has been called
af-za
af-ZA
April
ar-ae
ar-AE
ar-bh
ar-BH
ar-dz
ar-DZ
ar-eg
ar-EG
ar-iq
ar-IQ
ar-jo
ar-JO
ar-kw
ar-KW
ar-lb
ar-LB
ar-ly
ar-LY
ar-ma
ar-MA
ar-om
ar-OM
ar-qa
ar-QA
ar-sa
ar-SA
ar-sy
ar-SY
ar-tn
ar-TN
ar-ye
ar-YE
- Attempt to initialize the CRT more than once.
- Attempt to use MSIL code from this assembly during native code initialization
August
az-az-cyrl
az-AZ-Cyrl
az-az-latn
az-AZ-Latn
.bat
be-by
be-BY
bg-bg
bg-BG
bn-in
bn-IN
bs-ba-latn
bs-BA-Latn
ca-es
ca-ES
.cmd
.com
CONOUT$
- CRT not initialized
cs-cz
cs-CZ
cy-gb
cy-GB
da-dk
da-DK
dddd, MMMM dd, yyyy
de-at
de-AT
December
de-ch
de-CH
de-de
de-DE
de-li
de-LI
de-lu
de-LU
div-mv
div-MV
Dja-JP
DOMAIN error
DR6002
el-gr
el-GR
emscoree.dll
en-au
en-AU
en-bz
en-BZ
en-ca
en-CA
en-cb
en-CB
en-gb
en-GB
en-ie
en-IE
en-jm
en-JM
en-nz
en-NZ
en-ph
en-PH
en-tt
en-TT
en-us
en-US
en-za
en-ZA
en-zw
en-ZW
es-ar
es-AR
es-bo
es-BO
es-cl
es-CL
es-co
es-CO
es-cr
es-CR
es-do
es-DO
es-ec
es-EC
es-es
es-ES
es-gt
es-GT
es-hn
es-HN
es-mx
es-MX
es-ni
es-NI
es-pa
es-PA
es-pe
es-PE
es-pr
es-PR
es-py
es-PY
es-sv
es-SV
es-uy
es-UY
es-ve
es-VE
et-ee
et-EE
eu-es
eu-ES
fa-ir
fa-IR
February
fi-fi
fi-FI
- floating point support not loaded
fo-fo
fo-FO
fr-be
fr-BE
fr-ca
fr-CA
fr-ch
fr-CH
fr-fr
fr-FR
Friday
fr-lu
fr-LU
fr-mc
fr-MC
gl-es
gl-ES
gu-in
gu-IN
         (((((                  H
he-il
he-IL
HH:mm:ss
hi-in
hi-IN
hr-ba
hr-BA
hr-hr
hr-HR
hu-hu
hu-HU
hy-am
hy-AM
id-id
id-ID
- inconsistent onexit begin-end variables
is-is
is-IS
it-ch
it-CH
it-it
it-IT
ja-jp
January
jjjjj
July
June
ka-ge
ka-GE
kernel32.dll
kk-kz
kk-KZ
kn-in
kn-IN
kok-in
kok-IN
ko-kr
ko-KR
ky-kg
ky-KG
lt-lt
lt-LT
lv-lv
lv-LV
March
Microsoft Visual C++ Runtime Library
mi-nz
mi-NZ
mk-mk
mk-MK
ml-in
ml-IN
MM/dd/yy
mn-mn
mn-MN
Monday
mr-in
mr-IN
ms-bn
ms-BN
ms-my
ms-MY
mt-mt
mt-MT
nb-no
nb-NO
nl-be
nl-BE
nl-nl
nl-NL
nn-no
nn-NO
- not enough space for arguments
- not enough space for environment
- not enough space for locale information
- not enough space for lowio initialization
- not enough space for _onexit/atexit table
- not enough space for stdio initialization
- not enough space for thread data
November
ns-za
ns-ZA
(null)
October
pa-in
pa-IN
pl-pl
pl-PL
Program: 
<program name unknown>
pt-br
pt-BR
pt-pt
pt-PT
- pure virtual function call
quz-bo
quz-BO
quz-ec
quz-EC
quz-pe
quz-PE
R6008
R6009
R6010
R6016
R6017
R6018
R6019
R6024
R6025
R6026
R6027
R6028
R6030
R6031
R6032
R6033
R6034
ro-ro
ro-RO
runtime error 
Runtime Error!
ru-ru
ru-RU
sa-in
sa-IN
Saturday
se-fi
se-FI
se-no
se-NO
September
se-se
se-SE
SING error
sk-sk
sk-SK
sl-si
sl-SI
sma-no
sma-NO
sma-se
sma-SE
smj-no
smj-NO
smj-se
smj-SE
smn-fi
smn-FI
sms-fi
sms-FI
sq-al
sq-AL
sr-ba-cyrl
sr-BA-Cyrl
sr-ba-latn
sr-BA-Latn
sr-sp-cyrl
sr-SP-Cyrl
sr-sp-latn
sr-SP-Latn
Sunday
sv-fi
sv-FI
sv-se
sv-SE
sw-ke
sw-KE
syr-sy
syr-SY
ta-in
ta-IN
te-in
te-IN
This indicates a bug in your application.
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
th-th
th-TH
Thursday
TLOSS error
tn-za
tn-ZA
tr-tr
tr-TR
tt-ru
tt-RU
Tuesday
uk-ua
uk-UA
- unable to initialize heap
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
ur-pk
ur-PK
USER32.DLL
uz-uz-cyrl
uz-UZ-Cyrl
uz-uz-latn
uz-UZ-Latn
vi-vn
vi-VN
Wednesday
xh-za
xh-ZA
zh-chs
zh-CHS
zh-cht
zh-CHT
zh-cn
zh-CN
zh-hk
zh-HK
zh-mo
zh-MO
zh-sg
zh-SG
zh-tw
zh-TW
zu-za
zu-ZA
                          
;#;);0;
0 0(00080@0H0P0X0`0h0p0x0
0!0(000F0h0x0
0	0&0,060>0F0_0j0
0"0/0<0D0j0p0w0
0 0-0:0j0x0
0 0@0`0l0
0!0)010G0a0k0r0
0 0*020X0e0
0!0+060<0O0e0v0
0 0,080H0d0
0!0+0A0K0c0s0
0#0-0B0J0R0Z0g0o0u0
0'0/0F0L0e0{0
000F0W0^0k0t0
0&0>0g0
)000O0V0w0
0-020>0T0[0h0{0
0+030B0w0
0"030G0L0
0*040?0N0\0o0|0
0$080@0V0\0h0p0x0
0*080Z0b0j0t0|0
0'0C0q0x0
0%0C0U0e0t0|0
0@0H0P0X0d0l0
0/0h0u0}0
0:0P0\0b0j0r0
0*0Y0c0
010=0B0L0d0t0}0
01090@0^0f0n0
010I0Y0t0
0"1*121D1T1j1
0%1-1F1m1
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
0!151T1]1e1m1u1
0 191]1
0)1C1g1w1
021>1c1h1n1z1
021:1O1^1w1
,:0:4:8:<:@:D:H:L:P:T:X:\:`:|:
< <$<(<,<0<4<8<<<@<D<H<L<P<T<X<\<`<d<h<l<p<t<x<|<
050E0s0
060>0F0N0Z0i0o0
070H0h0p0v0~0
?0?7?M?
:(:0:8:C:I:Z:
=0=8=C=U=s=
:$:0:8:F:e:
= =(=0=8=@=H=P=X=`=h=p=x=
> >(>0>8>@>H>P>X>`>h>p>x>
? ?(?0?8?@?H?P?X?`?h?p?x?
>0>8>I>Q>m>
?0?8?L?T?\?d?h?l?t?
090G0V0c0n0
=0=9=A=S=^=v=
0A0N0Z0
0E0M0^0
0G0O0W0n0
0H0X0g0z0
< <$<(<0<H<X<\<l<p<t<x<
> >0>;>I>Q>Y>z>
<	="=0=I=W=n=y=
=#=(=0=?=L=c=k=~=
:(:0:;:R:Y:i:q:v:
>0?T?e?
:0:;:U:_:h:
>0?U?k?x?
1 1(10181@1H1P1X1`1h1p1x1
1%1,1<1C1w1
1'1-1<1D1L1V1^1i1}1
1&1.1<1D1P1_1g1o1w1
1$1,1]1e1q1
1#1+1;1G1O1W1u1
1$1.1<1K1Y1f1q1y1
111@1L1X1m1
1#1/1?1M1Y1
1#1+131;1C1V1p1
1 1(161<1E1R1f1
1$1(1D1H1d1h1
1=1\1d1l1q1{1
1"1*1D1P1Y1e1r1
1,1=1E1J1R1^1f1r1z1
1(1^1f1n1{1
1$1/1Q1
1=1[1y1
1+121Z1
1&131;1C1K1Q1
1#131I1d1m1|1
1(141<1D1v1~1
1&161J1i1u1}1
1+171?1v1
1(1A1g1r1|1
1$1J1~1
1?1K1c1k1
1!1S1{1
1%1S1h1|1
1&2.262>2N2f2n2v2
1&2>2D2O2]2q2y2~2
1'2=2K2
1 262@2S2
1$292F2W2i2
1/292U2
1;2a2o2u2
1:2c2}2
153S3l3s3{3
161@1S1[1h1y1
< <)<1<9<D<Q<_<
:":1:9:H:M:T:Y:j:r:|:
1d1o1|1
?*?1?F?K?S?h?n?w?
?&?1???G?O?W?a?m?u?}?
;(;1;<;K;d;
;%;1;K;e;
>%?1?=?L?W?u?
?1???L?Z?b?
<%=1=q=
1#QNAN
1#SNAN
<)<1<T<[<f<~<
=&=,=1=U=]=y=
:!:&:1:V:|:
1V2[2v2{2
1Y2l2y2
:$:1:Z:
=%>+>2>
20:0`0z0
212^2q2y2
21262>2Q2W2e2m2
212h2n2{2
2 2(202?2O2W2c2w2
2"2)20272>2F2N2V2b2k2p2v2
2 2(20282@2H2P2X2`2h2p2x2
2&2,2:2A2G2x2
2"2(2<2H2j2
2#2+232;2B2Y2a2t2{2
2&2.262<2C2_2l2
2&2.262S2
2'2/262S2i2q2y2
2&2.2B2w2
2)2>2I2Y2
2"2?2N2~2
2 2-2Y2e2o2|2
2.252=2Z2j2z2
2&252M2c2w2|2
2+262<2N2X2a2
2/272?2G2b2i2
2/272=2I2Q2Y2_2g2m2s2y2
2(292_2f2}2
2,292A2I2N2V2j2r2z2
2=2E2]2
2'2F2X2j2|2
2]2i2x2
2,2K2W2^2e2m2
2%2Q2t2
2]2r2|2
2-2S2^2n2v2
2!3)313=3O3
2%3,32393P3X3k3
2 3+333U3[3p3{3
2^3d3p3
2?3G3O3t3
2*3S3^3
2*3S3m3u3
24282X2x2
263<3A3`3
263>3Q3^3i3u3}3
292K2d2l2t2
?2?:?A?Z?|?
?2?:?B?J?V?f?x?
:*:2:B:[:u:
<2<:<B<U<Z<`<
:&:2:::?:]:e:
;&;2;?;G;O;W;_;h;q;y;
;2<H<T<y<
?2?J?U?g?
2L2a2o2x2
<"<2<M<_<e<l<s<
= >2>M>U>]>i>v>
2N3V3j3v3|3
2NZ_3NB
2_&PYT
;*;2;Y;f;o;|;
303=3V3p3x3
323?3k3u3
3)313?3O3W3]3v3
3 3(30383@3H3P3X3`3h3p3x3
3 3$3(3,3034383<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3x3|3
3%3/3<3E3b3j3~3
3+333I3Y3
3#3-3@3P3Y3l3z3
3 3(3=3Q3[3c3h3p3
3 3*353;3`3m3z3
3#3+3s3{3
3-3=3U3f3
3-3<3U3k3r3x3
333U3z3
3!343<3H3P3l3
334D4U4f4
3!353=3C3L3o3y3
3+363>3J3R3Z3
3 373B3J3^3
3!393_3g3o3
3%393C3K3_3l3
3/3B3N3t3|3
3%3D3N3Y3a3h3p3
3-3F3Q3
3=3G3_3m3r3
3&3J3R3k3x3
3:3o3w3
3 3P3p3x3|3
3-3Y3s3
3#4+4?4D4]4e4q4y4
3(4A4k4
3*4C4S4l4t4z4
3)4V4h4p4x4
3%4X4j4r4
353=3J3v3
353A3G3l3
354=4Q4Y4n4
363O3Y3c3u3}3
;#;+;3;9;I;
>'>3>c>
<%<,<3<C<d<i<
?!?(?3?C?L?S?]?
=+=3=;=C=O=W=c=#>C>w>
=3=:=D=
3D4I4b4p4
?#?+?3?D?N?s?
;3;<;D;Z;y;
<3<F<N<_<p<~<
=$=+=3=G=S=[=c=k=q=
:':3:;:G:T:\:
:&:3:I:Q:X:c:k:s:
:3:?:L:S:]:e:m:u:
=+=3=;=M=S=^=f=n=v=~=
='>3>M>Z>e>
?#?+?3?N?_?s?~?
-\3t'f
3UTfZw
<3<Z<n<
?"?*?4?
40484T4[4f4r4z4
404K4W4b4j4u4
424@4L4T4[4o4v4
435J5u5
4$40454
4&40484K4U4]4u4{4
4 424A4R4Z4b4j4q4
4 4+414K4S4\4i4p4
4 4-434;4H4S4_4p4|4
4 4$4(4,4044484<4@4D4H4L4t4
4,444:4I4S4Y4h4r4x4
4$4,444O4g4
4 4(4.454>4E4T4f4v4
4"4/4?4Z4_4g4
4!4)464=4X4e4
4"4.464?4Z4a4~4
4&4.4C4M4[4t4z4
4"4(4J4
4!4-4L4X4`4
4 4(4T4X4`4h4p4t4|4
4'454=4M4U4d4y4
4&494D4I4Y4e4j4u4
4#4D4X4
4=4E4M4U4{4
4#4H4P4W4i4q4v4
4@4P4W4e4y4
4*4U4c4k4w4
4%50585
454=4H4f4l4y4
455;5K5Q5]5g5m5}5
4%5h5"7
4%5Y5v5
464A4M4V4^4
484@4H4T4\4d4r4
494E4M4U4s4{4
=!=4=a=u=
4b4h4l4p4t4
=.=4=B=J=P=h=x=
4C5_5g5m5y5
; ;4;C;K;b;j;v;
<$<,<4<<<D<L<T<\<d<l<t<|<
;$;,;4;<;D;L;T;\;d;l;t;|;
:$:,:4:<:D:L:T:\:d:l:t:|:
?$?,?4?<?D?L?T?\?d?l?t?|?
>,>4><>D>M>U>]>k>
;"<.<4<?<E<g<q<~<
:':/:4:;:E:T:|:
>4?>?F?N?e?p?x?
<4<H<R<
4I4U4v4
>.>4>K>S>\>d>l>
>(>,>4>L>\>`>p>t>
4N)&4N9G4N
4N4Z4v4
4O5b5}5
= =,=4=?=O=z=
>4>\>p>{>
;,<4<?<Q<`<
;);4;v;
4V5m5z5
=)=4=;=W=^=w=
;);4;Z;`;h;o;
505;5G5S5[5f5s5y5
505P5\5x5
516A6X6
525=5E5L5T5k5q5
5(505I5Y5d5s5
5)515<5R5Y5p5w5~5
5+535;5U5l5
5(545<5D5L5[5h5z5
5$5*50575@5E5K5S5X5^5f5k5q5y5~5
5 5(505F5P5X5c5k5t5
555:5B5J5R5^5f5r5z5
555@5e5}5
5&5.5=5l5
5#5/575?5u5
5#5/595G5M5W5
5'5:5B5J5R5^5g5
5-5;5m5w5
555Q5V5c5p5x5
5&5D5T5a5g5
5&5i5|5
5+5K5V5n5
5(5L5N6W6
5"5O5T5\5x5~5
5 5P5X5\5`5d5h5l5p5t5x5|5
5*5R5c5o5
5.5R5q5y5
5'626:6B6K6S6[6c6t6|6
5 6%61666U6
5'6?6G6L6b6j6
575D5V5
585H5S5_5w5
< <-<5<A<G<W<h<{<
5B5O5q5{5
>->5>D>
@5D5H5L5P5T5t8|8
5D5R5v5~5
5E5Q5Y5a5h5w5
>5>=>E>M>T>\>o>u>
;";-;5;<;H;O;X;_;i;v;
5I5>6^6
:!:):5:=:J:W:q:y:
;$;,;5;[;k;x;
;*<5<=<L<\<
5l5t5y5
=5===\=n=v=
;-;5;R;^;f;k;w;
>%>->5>@>R>^>l>
:5<S<l<s<{<
;.;5;=;S;Z;e;|;
5T5\5o5w5
>%>5>T>w>
5W8?9J9Z9
>5>Y>a>l>{>
606Z6`6
659H9]9
6*606W6}6
6%616F6d6l6t6|6
6"636>6N6[6
6+636D6Q6^6f6n6
6,646<6m6u6}6
6,646<6N6p6
6 6(60686@6H6r6z6
6$6,646<6C6L6V6_6l6y6
6$6,646<6D6L6T6\6d6l6t6|6
6!6,646O6b6i6
6#6*656Q6Y6a6m6u6}6
6$6)6/676<6B6J6O6T6]6b6h6p6u6{6
6"6*6/676M6U6a6x6
6#6+676a6i6{6
6)6/696?6K6S6[6c6m6u6}6
6/6;6C6N6V6i6q6|6
6:6\6j6
6#6>6j6r6
6!6@6K6X6k6|6
6!6(6q6
6#676>6H6V6
6(686@6H6P6d6q6
6"696G6M6
6#696S6w6
6=6C6N6e6
6#6F6T6a6k6u6}6
6)6K6u6
6(6L6e6n6
6#6m6{6
6/6P6]6b6j6v6|6
6)6P6]6g6
6.6Q6X6_6v6
6%7-7>7F7^7f7
6$7.7@7T7h7
6\7c7n9x9
686D6X6
6:8K8Z9l9
<&<.<6<A<M<]<e<r<
:6:C:K:^:j:y:
=(=6=D=V=h=w=
:&:,:6:D:Y:c:j:q:y:
>.>6>>>e>j>w>
<%</<6<f<n<
;(<6<G<_<k<
6I7W7^7f7z7
;*;6;<;I;Y;a;m;x;
6L7\7l7
6NXd9N
;";*;7;|;
70767P7X7`7
717@7E7W7_7g7|7
717H7V7^7k7x7
738:8B8
7%707;7O7W7_7g7
7+727:7V7i7q7}7
7"727B7R7x7+8E8
7(737;7]7e7p7z7
7!767J7V7i7x7
7"7*727:7D7J7j7r7
7$7,747<7D7L7T7\7d7l7t7|7
7#7+747:7k7{7
7"7-757=7E7T7q7
7!7+757?7G7Q7[7g7y7
7 7&7.73797A7F7L7T7Y7_7g7l7r7z7
7 7&7.777>7F7O7a7y7
7#7/777G7[7
7#7)7[7c7
7#777D7k7s7{7
7#7+7?7Z7
7)7=7E7M7V7]7e7z7
777E7S7l7z7
7$7;7G7V7
7(7>7S7[7c7z7
7;7@7T7Z7x7
7'7>7V7b7x7
7/797]7e7m7
7#797s7
7-7B7[7i7
7!7B7H7
7>7F7N7V7a7m7x7
7&7I7P7V7d7k7
7+7J7a7p7
7%7J7T7q7y7
7/7L7[7e7m7
7	8,8@8c8l8v8
7"8'8@8F8P8X8`8e8
7.888P8
7#8)8/8T8a8z8
7#8=8H8P8X8j8
797G7V7d7
7C8_8|8
?'?/?7???E?K?U?_?i?n?
<)<7<E<M<\<q<
:#:+:7:G:O:u:
=!=/=7=N=U=n=
>(>7>>>p>
?'?7?Q?
*7QeX^
:%:7:X:l:s:
808E8^8n8v8~8
81888?8
838@8Q8^8f8
859=9b9x9
878B8J8S8`8e8~8
878G8r8
878J8Z8
8(80888
8+81898@8W8
8(828K8z8
8,848<8D8P8d8p8
8-858E8V8f8
8.868?8L8\8o8
8(878C8|8
8!8)818>8_8k8z8
8$8,848<8D8L8T8\8d8l8t8|8
8$8+858<8B8I8O8
8#8+858?8G8O8W8c8k8s8{8
8!8/858;8P8h8q8x8
8"8*8/878Q8Y8e8q8y8
8%8.8;8B8H8Y8i8s8
8#8+8>8E8\8
8*888F8N8T8]8j8x8~8
8!8/8<8F8N8V8}8
8&8.8D8I8Q8f8r8
8&8?8I8Q8V8e8m8~8
8!8/8Q8e8
8$898A8M8U8l8v8~8
8-8C8M8U8]8h8
8.8F8[8k8y8
8'8I8W8_8g8o8
8"8N8X8x8
8'8Q8c8u8
8(949B9J9V9p9|9
8	969>9q9
8&9,949Y9a9m9}9
8;9^9m9u9}9
8:9B9J9c9k9
8/9D9U9]9e9m9
<&<8<c<j<
< <8<C<O<W<b<
;&;.;8;D;^;f;t;
>!>'>->8><>@>D>H>Z>
8eb~of
;.<8<><F<P<l<u<}<
>(>8>H>b>
>8?H?P?X?}?
;8;@;H;U;d;
8I8X8k8w8
8&kI\E
:$:,:8:?:M:a:i:y:
<8<@<M<a<q<y<
:&;.;8;Q;[;
= ='=8=S=o=w=
8U9h9}9
>8>W>l>v>
8z869p9
909B9R9Y9
9#:0:H:t:
939G9Q9k9s9
949:9A9^9k9q9
949K9n9
979A9F9
97:]:h:
9*91989S9]9
9*929:9B9I9Q9j9r9z9
9'939;9Q9\9c9j9
9*989H9W9_9t9
9!9)919K9Q9\9j9u9
9$9,929:9@9S9a9o9w9
9$9,949<9D9L9T9\9d9l9t9|9
9 9,949<9H9V9j9v9
9)9/979C9Q9h9s9~9
9"9/9?9^9m9t9z9
9$9,9;9C9X9d9t9
9$9,9B9J9R9
9(9:9B9R9n9v9~9
999G9a9i9v9
9"9<9I9Y9m9
9"9*9w9
9/9;9Z9f9p9
9:9A9W9}9
9$9E9d9l9t9
9>9F9X9`9h9s9
9-9K9X9i9q9y9
9'9U9\9
=+=9=A=M=U=]=e=m=
=!=)=9=E=[=h=
;.;9;E;M;U;];e;m;y;
?#?9?E?W?_?r?
9!:(:F:N:V:`:h:p:~:
9::^:f:t:~:
;9;I;Q;y;
9::K:S:[:z:
=%=9=M=W=p=|=
9N9Z9b9v9~9
9NUj;N?
9):O:U:\:a:i:q:
:$;9;Q;n;
=.=9=V=\=d=l=x=
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
address family not supported
address_family_not_supported
address in use
address_in_use
address not available
address_not_available
already connected
already_connected
?A?L?S?r?~?
?%?-?A?p?|?
)aqlfedf sxpa teugv gfxociw yugm jjladsd sgt kjzi rfsopub ynnaejj ykbu mgcif pcmige qnyiu tah wjnefdgik cjvoymne gzej nfxecjdo jrzegjra jdagow lkgiadvsa ghi fjneupcc ssxegdmu tpbauc mnnijmx vdpo ozrbe ftfag jserigmk vvgubihj grrebvli uqu bbjufgelo uhcuta vseuaioca rgfob lmca ess djulagi smaxifxma opdmudf lwoecegb pnsekmaw odwenezd sbjontsi obqmuupztu pfofei mmpe jyadem utjfufcd nzsoxga rndenobt monidodii csyuosqgo jgfeduk abbmip pgxi lpzefn khrunfl ecqx lgeeneroh iybniub izbjo oscgomzg dlv pui fszue nemsubms bpjieo ufjb vwhoa anw bzciik jsipivcgod dccidcocu bgmauun lbageidpca jflucpfi onblelm togf ljyust juub fagnumgsua pmcovniid bufoada slmuldpomj jgifeil nsguax ddre pfme tddo gjku ibabepogei ngpeibfepa dfjesgedo sdaelupivj dfsa mvgomlobeg sfmuoccbu dalgam gttispb jdlaobvmi bwsao sllif ppp aesgdiwzpu ultjea elicxe lioohfid ffjodnso scmafyg jvobibfl mzror zsnet gbsopj jag obzdit kvjufordac lgninanxi pfv edmpegqu ele cpdabj jgyuwunaj iqsupodgh kgunavnz mpde drpidorc igl cocdopsfe pvnuapnli pzlinj lsti suab oufdu bggaua yvdiioul mehkauzmbo rbguj wvbu ppmo urdboeilbe rbsat dhezisl cykemjgaf ewncug gzwaszdio ybh ilpmud iigguo tcme mln eglbugzaau ljdom nfigorlt vmn kbli dizpubjca usyjap nlj aljimeefko rvnavxamap afjf gdmex alzanivjg nlo jfufau jrcazfuot japrin lpoqagj xkrui bolitod oru judxivlw cfz qddu xpfayfx uesnse bltuve ucoubn sxfaoxdd dbbafelf fmavasdd esco rrjubcuw ermguq mgbiuhbza uyhsuclcam bmlomfguu dfginyrud ojbkipgu nopce jzbosdla zhj hcnoenpsev srse lco fjka mleezuoc ffdah mddaifnixu aujpi femdiab bmzollwoae jrqo cudfo hojgeue ljkitagop ygjacq cmolu fxjo vssuegjxeb ihilmi fmop jjyiflbavj jubkiz uriw widy kjokag sqzijn dsze wcopuajj vpboi lts dsuojescu enit xmxirtbi msitei abwzehem jdbavsn tjsanbec cfy inrefodzfe laglemsqeb jqhoippvig jodemilp lljotrno pjule
AreFileApisANSI
argument list too long
argument out of domain
?A?R?Z?
<at-<rt"<wt
August
.?AVbad_alloc@std@@
.?AVbad_exception@std@@
.?AVerror_category@std@@
.?AVexception@std@@
.?AV_Generic_error_category@std@@
.?AV_Iostream_error_category@std@@
.?AVlength_error@std@@
.?AVlogic_error@std@@
.?AVout_of_range@std@@
.?AV_System_error_category@std@@
.?AVtype_info@@
:::b:~:
bad address
bad_address
bad allocation
bad exception
bad file descriptor
bad_file_descriptor
bad message
 Base Class Array'
 Base Class Descriptor at (
__based(
BeginPaint
=b=h=l=p=t=
=.=b=l=
<<>B>L>
<+<:<B<N<V<^<}<
>/>b>o>{>
>$>->:>B>O>p>z>
broken pipe
bWWWWj
:::B:X:^:i:p:x:
<(<c<}<
CallWindowProcA
__cdecl
CheckDlgButton
/}Cj h
;+<@<c<k<q<
 Class Hierarchy Descriptor'
CloseHandle
CloseThreadpoolTimer
CloseThreadpoolWait
__clrcall
CompareStringEx
CompareStringW
 Complete Object Locator'
connection aborted
connection_aborted
connection already in progress
connection_already_in_progress
connection refused
connection_refused
connection reset
connection_reset
`copy constructor closure'
CorExitProcess
;C;O;U;Z;b;u;z;
CreateEventExW
CreateFile2
CreateFileW
CreateSemaphoreExW
CreateSymbolicLinkW
CreateThread
CreateThreadpoolTimer
CreateThreadpoolWait
cross device link
;@<c<u<|<
;[<c<z<
=<=D=[=
@.data
dddd, MMMM dd, yyyy
December
DecodePointer
`default constructor closure'
 delete
 delete[]
DeleteCriticalSection
DeleteFileA
destination address required
destination_address_required
device or resource busy
directory not empty
=(=,=<=@=D=L=d=t=x=
DrawTextA
`dynamic atexit destructor for '
`dynamic initializer for '
;+;?;E;
?'?E?]?
__eabi
ehurapec gsfausmva jmpo oqi peea psokofg nejiebomn cmgecum ucccuf ynmieia qzrogb atzqadbz ghil xphupbfeu abg eudp imnaijadrf cpl amhcici gek lmmubjxu csqetsfuz inlu vppesbbo pncel gcleo dplegf mdniftdaer ceojg fnjimjom fen dlbidfwi bmlafi bunleh lsnufh kbebiuc udlto ghbespser cdcahofno cesin brrasofn kedli dzzear pflacg lugumod ibnf mbuacocj cddudmaj ijnboljaeg egcunag nsteriesfe fjnoue jgluofadc bsfuj tzilijol xgcepsrab dsmebgge uhzboi weswiuftbu pbzuia endjuxceca lzfead uoecagciif dzdu aarv molpijsfi dcyu ubunlufo jdb urjom ljguqzteu eydidic nahf mgtog dfboldvoh dlcesclux oigkfaz njjobuubfu mcda cldinlr aobbsioa pecgu nzas jaon bpba mqpiadn jpleonqe zegrotocsa uon dulzij pppedmdu lutcinlluy cbyoo khbukmmigf mfgajpl jvuk wixbeyd ldciszvuc ssna soba evdjoue awu ppnonbl eccyifom awzsiuymup ttbiod snnim pdmotfi elpsociem ogpjudabal eevnlic lps mupfe dbc aff jupo fxna aflbujsnai fsovapnmod glyeycxano dfl tlhouin rfdazuul zaustatupb pgbencbo ajc rjned yfebuk wftolv agtmo czga xncej ocbrecbre acnvaotjcu jsbudlma mycaorbbo lsz daondi pjpe oirb ifqbiupjef fconuojmmi eniifli glli ndmescc spxolyope lfdocjotu jucloavnu fjdiiyonle iaxmcira nbmab guqerigjfu fqcag cutsifp sbaacizuem budbojwum gjbede zfinodfvu hsc ylhottneb mrj axoub ebnomie ngninn xlceycebi cdnuu uzprozxbon rord nwqejdlagz bcga ccwi vdjenn spxo oor gfdagcle gijzodnmu obs lnnaaylbal ijwo ftcul rqyebwxa sql glwabvrora ugm sjgil dvakeavd uibplanlre negvajdi ogpe bmgopvjel ado ggdim wgli iojmf yng mpliivbuci dbnogtr scmukuau kgj cxcat aja fipet lrtofgjayj vfdaaovi pljatyfaq tjhotfpe iljsowg cpsueqcdi uniguqiibf esia zpruprd pbfatpb drruzqs nfcapicfom vrrapl dutcujsdul qqa sjkayswai dsmislf rejpahd otnxu vgoilurn lxoqaf ppmudouy wdhoinrno yunm ubefoicu ifxqedl gvfescen zlbu pfwucpjei zdjuholpu lvugi gvfuibufbi njo fcjade jjmaneoc lxle dinavo dfyoci gpdeuluf jbdicaq lrjiagprul umcseteei glegencmac obncacedbo bonjeoc bsl pmusa eflf safavafm jntolwuboy gqjaaj skrezc uco jibcu bjdailzfig vnp jdzud oruu bgn ljbi cda poclujz vrjoaquz jczuuee fgc vtdedm hpfu aaibgkuc iojsueo oodrne smre ptrofnwu dpol wbcebraboj odmsaru phla zgzat mcfiicje vtnajo shyofnsamm tbn lndepd xuvmoum ijt swbow gmbuxcood paomj eodjiufiaa eey qpled ibuhzo lgqe cseso rgfidcjuug cgjubssu zojm xjlulkcaab mkauceemsm ulsh
`eh vector constructor iterator'
`eh vector copy constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`eh vector vbase copy constructor iterator'
>#>/>:>E>M>`>h>
<E<M<l<x<
=!>=>E>M>R>[>~>
?*?E?M?Z?r?z?
:E;[;n;
EnableWindow
EncodePointer
EndDialog
EndPaint
EnterCriticalSection
EnumSystemLocalesEx
<)<E<Q<Y<d<k<|<
<:<e<r<z<
executable format error
ExitProcess
: :E:Z:v:
;*<@<f<
;!;>;F;};
__fastcall
<+>F>d>k>s>
February
file exists
filename too long
filename_too_long
FileTimeToLocalFileTime
FileTimeToSystemTime
file too large
FindClose
FindFirstFileExW
FindResourceA
>$?F?^?j?r?w?
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
<F=L=S=Y=q=
FlushFileBuffers
FlushProcessWriteBuffers
:F:N:V:^:
FreeEnvironmentStringsW
FreeLibraryWhenCallbackReturns
Friday
;>;F;T;`;h;p;|;
function not supported
GDI32.dll
generic
GetACP
GetActiveWindow
GetBkColor
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetCPInfo
GetCurrentDirectoryW
GetCurrentPackageId
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentThreadId
GetCursor
GetDateFormatEx
GetDCBrushColor
GetDCPenColor
GetDialogBaseUnits
GetDlgItemInt
GetDriveTypeA
GetDriveTypeW
GetEnvironmentStringsW
GetFileInformationByHandle
GetFileInformationByHandleExW
GetFileType
GetFontLanguageInfo
GetForegroundWindow
GetFullPathNameW
GetInputState
GetKeyboardType
GetLastActivePopup
GetLastError
GetLocaleInfoEx
GetLogicalProcessorInformation
GetMenu
GetMenuCheckMarkDimensions
GetMenuContextHelpId
GetMenuItemCount
GetMenuItemID
GetMenuState
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetNearestColor
GetNearestPaletteIndex
GetObjectType
GetOEMCP
GetPixelFormat
GetPolyFillMode
GetProcAddress
GetProcessHeap
GetProcessWindowStation
GetPropA
GetQueueStatus
GetRandomRgn
GetScrollPos
GetStartupInfoW
GetStdHandle
GetStretchBltMode
GetStringTypeW
GetSystemPaletteUse
GetSystemTimeAsFileTime
GetTextAlign
GetTextCharacterExtra
GetTextCharset
GetTextCharsetInfo
GetTextColor
GetTickCount
GetTickCount64
GetTimeFormatEx
GetTimeZoneInformation
GetUserDefaultLocaleName
GetUserObjectInformationW
GetVersion
GetWindowContextHelpId
GetWindowDC
GetWindowLongA
GlobalAlloc
GlobalFlags
GlobalHandle
GlobalSize
gMF(gM
> ?(?G?n?
<=<G<O<[<u<
:(:=:G:O:W:_:l:t:}:
>>>G>P>V>s>{>
<'<?<G<P<X<^<j<
:$;G;S;j;
?(?G?T?Y?a?w?
="=)=G=V=
:(:G:V:h:{:
`h````
<(<^<h<}<
>!>'>h>
;^;h;{;
;;;`;h;
>!>.>H>}>
{^'H~)
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
&hg'^M
`h`hhh
HH:mm:ss
HHtVHHt
H;L;P;T;X;\;`;d;h;l;p;t;x;|;
hNK>iN9
;#;*;?;H;N;p;
:&:H:o:{:
host unreachable
host_unreachable
>">h>p>
;h;q;y;
Ht+Ht$Ht
:H:U:`:u:
:H;Y;e;r;
_hypot
identifier removed
-i(%{f
illegal byte sequence
inappropriate io control operation
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
interrupted
invalid argument
invalid_argument
invalid seek
invalid string position
io error
iostream
iostream stream error
>%><>I>Q>d>
?'?=?I?Q?Y?t?
is a directory
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocaleName
IsWindowEnabled
IsWindowUnicode
?"?I?T?m?t?{?
<itx<o
<I=W=n=y=
>+>=>i>x>
jA[jZZ+
JanFebMarAprMayJunJulAugSepOctNovDec
January
=J>c>i>}>
@jd_u	
;J;^;f;t;
jgnijtmofj jbt ludebo esmoapovqd rahjafj kbjaermqu lspilpmosd ysdioc kjjefujfu izgolatjw ctgep pmm vrjato pvuepo bptoz lgujoca djbogp ppcuiyalga kwva rzcifshu asfiu snvadvz dwqo zmlom xxfielc almluo loccao gss eocuhr rjgajxra bhea zxoneo psmoanrci idhupucih ewllusg cpala ailoz loff srb tbxocg ppne dclibfl mgeveybofi lrfet jexi ajxso ddm uputgi cednapg zes izdwuacbv lol kdx qofcolg dgwuur uzjlusea lfuwoe ugppooyr aycuz ugjt lmiqes zngep sfy ejeppay pplir dframusfe vbonifi mgeaenaaod djxu dijvianr fiilnocnon ovektu vdtiwed fptei jjhoglda cmze usomlobnf clja icv lmn gffiixici fecl gsnaezvbu psf gkuxaifwdi gston cpdenad pud jio msin tjlao gzlawa zmoj lpfaorl smjuati pnxumfn phvicd nziidawez ilyqef embaiga bekcisflad jvroddzugb clitejs qjrixdvam ewbag kcgacu nbvemfemoc rxd uzinv cdga iasddoi bcdunncobs ans zec axddumob jfoi aww gjyom fjm szga oadgzidzv tnli oaep dbvust msti piuoeuewog spapapg bbpii svl bzp jvkedz qcnanofod bdoqapb vpbaswv mle dvnueddde luqigic afvcullgu cjneef jxcucjkeb vphiju dcemutun lblinc dvqela dbpapehlo pyobukigbo bifjavml gjen rzl icrjuvgdu ystudp mws rjlaxdliu idldus nfbugj yft ddgob wyfoeh sciliicyf kjce ugbmamba pkguz nmnifk lmfaoogdg samminq uphu ccooceuqjn fjro egi cfsuncnop jrbueup rijg jusl nbmafnvinn cujyag wnramfxalc dgtemvx vqcozfqul npletaas sfviog aal jbcibe ogifla ohlnoplti seisojilfu ldap ccbedeuu brmovq ftduoe zslug lyxug jombaczte mfbecx stcusvo nnga wgvadeu datmofc ycbu rrgupabva xddifqefem iianglo hlsevlgic gcc bjmizddutu zifze hpeqo jerjef tarc cxdu gdna bpobiw atsce yfevejopj etjabirs lrfi osfizab ihpubo fat izrbognodo ddegibbf jobxepg lfdako pdjas lcdiu bjja jpku omjricbl mpaifuxitg depsumfde bmzosbe bgsofmb vdgaxlj bdreubgjaa rsraf rropo nvg esd lwlusxyuce vtfelcj csgirmjie bjt kbr zlnenzkow dmfet pnpuu ctxof etaeapezo gsfibg bldow tfnaqkcio zvsad jqxi hes sugveumaeg ptviu eoopo ioi lpdikle ifscisbne jpmecd fadlo pbneike votpodvbip ixnomusbwu bjzapzjeg dmcamicuje dpfacnfad ilrkubgb dzbu nrmacu iafvu rnseitmci pbd mijyiub bjd exesza cfnob ilf qgpea oaygqosj detgo pqfub obq wnnu fffut ugjq ezutp ifoip fscictone gcbutzdin iducfiuoif cmfelntad pexpohhsuj mwsot cmzah jad javcipapt vauugfe ihsc tirsed jggegub pwegokw ccd ccoeam foaclibip idjl rnpakqpe cbyil ntsot dbe dpm gcjoav cszaggyunq pjcoui pndu ajb cducoa gdima as
j$hp!E
.j	hR'
:!:J:i:
j/_j\[f;
j@j _W
?J?R?t?
:";J;R;Z;b;j;r;
=?=J=X=y=
;,;j;z;
} kE$<
KERNEL32.dll
?;?K?\?g?z?
=&=K=n=
%Kn&\%
;K;n;v;
?"?K?S?[?c?
:%:^:k:w:
=(=]=k=x=
LCMapStringEx
LCMapStringW
LeaveCriticalSection
lj$h)G
<%<:<L<l<t<
LoadLibraryExW
LoadResource
LocalFlags
`local static guard'
`local static thread guard'
`local vftable'
`local vftable constructor closure'
LockResource
>@>L>t>
:*:L:T:\:d:l:u:
:!:;:L:T:i:q:x:
>%>/>L>U>{>
=L>V>q>
?\?l?x?}?
:#;/;L;X;`;l;{;
;/;@;M;
`managed vector constructor iterator'
`managed vector copy constructor iterator'
`managed vector destructor iterator'
map/set<T> too long
= Mc|};
MessageBoxW
message size
message_size
:$:*:M:f:x:
MM/dd/yy
Monday
MoveFileA
MoveWindow
MultiByteToWideChar
;N`}aD
 N<c!N
network down
network_down
network reset
network_reset
network unreachable
network_unreachable
 new[]
_nextafter
=#NgR#N]
/Nj(0N'
N{L	N@
'-N#m-N/j/N
=%=N=n=
no buffer space
no_buffer_space
no child process
no link
no lock available
no message
no message available
no protocol option
no_protocol_option
no space on device
no stream resources
no such device
no such device or address
no such file or directory
no such process
not a directory
not a socket
not_a_socket
not a stream
not connected
not_connected
not enough memory
not supported
November
>$>,>@>N>s>z>
(null)
<Nw,>Nm
<	=/=<=N=x=
?N?X?q?
;:;N;Y;
O1a1s1
OcNAbdN
October
`omni callsig'
operation canceled
operation in progress
operation_in_progress
operation not permitted
operation not supported
operation_not_supported
operation would block
operation_would_block
operator
OutputDebugStringW
? ?+?O?w?
owner dead
OYMx|{
>'>/>P>
.~$P9F
__pascal
PeekNamedPipe
permission denied
permission_denied
~pjCXf
-Pjt?f
`placement delete closure'
`placement delete[] closure'
PN'$QN}
PP9E u
protocol error
protocol not supported
protocol_not_supported
PSSSSV
__ptr64
PWWWWV
?=?P?X?`?h?
<(<P<X<`<s<
<'<@<Q<^<e<
QQSVWd
QueryPerformanceCounter
:@;Q;Y;e;t;
Q>	^z@
;";,;R;
RaiseException
`.rdata
ReadConsoleW
ReadFile
read only file system
.reloc
RemovePropA
resource deadlock would occur
resource unavailable try again
__restrict
restrict(
result out of range
rMXOtM 
RtlUnwind
= =%=R=W=]=g=p=z=
>(>:>s>
Saturday
;:<S<[<c<
`scalar deleting destructor'
SendMessageA
September
SetDefaultDllDirectories
SetDlgItemTextA
SetEndOfFile
SetEnvironmentVariableA
SetFileInformationByHandleW
SetFilePointer
SetFilePointerEx
SetLastError
SetPixel
SetStdHandle
SetTextAlign
SetTextCharacterExtra
SetTextColor
SetTextJustification
SetThreadpoolTimer
SetThreadpoolWait
SetThreadStackGuarantee
SetUnhandledExceptionFilter
SetWindowTextA
ShowWindow
SizeofResource
>#?S?p?
SSPQSW
state not recoverable
__stdcall
stream timeout
`string'
string too long
Sunday
SunMonTueWedThuFriSat
,SVWj0X
SVWjA_jZ+
<#<S<x<
=S=X=a=f=o=t=
system
SystemTimeToTzSpecificLocalTime
/T%_[^
t2x2|2
~';_t|%3
< t8<	t4
TerminateProcess
text file busy
t!=fff
tf=XUE
+t"HHt
tHHt*Ht#
__thiscall
!This program cannot be run in DOS mode.
Thursday
timed out
timed_out
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
tm,!YF
tO9=xxE
too many files open
too_many_files_open
too many files open in system
too many links
too many symbolic link levels
Tuesday
;t$,v-
\;`;t;x;
 Type Descriptor'
`typeof'
uaPPPS
?:uBGW
uBjAYjZ+
uChs2C
`udt returning'
UNa4VN
__unaligned
UnhandledExceptionFilter
UNICODE
unknown error
Unknown exception
UpdateColors
UQPXY]Y[
URPQQh
USER32.dll
<:<U<t<
UTF-16LE
-}UXSf
=.=?=V={=
:	;V;];
value too large
`vbase destructor'
`vbtable'
`vcall'
?&?.?V?c?u?
__vectorcall
`vector constructor iterator'
`vector copy constructor iterator'
`vector deleting destructor'
`vector destructor iterator'
vector<T> too long
`vector vbase constructor iterator'
`vector vbase copy constructor iterator'
`vftable'
>&>V>^>f>z>
`virtual displacement map'
v	N+D$
vngdo tdofub gbcaot oxjdoebr ondfagd jjmeufpo opl ggl uuep ftvaesesc imb mgdokxlosy ifznigpfaj eebz avrdecbme bnnu nfgu lfmud wbcexwsooy tpvecs lupgenggue ftnamfbapd fel ssmianst lgqoedc tllijt usml vmor ibm nzuagu avqda fkailox hfkegp mwwideu fciget tho mbsan nmdaidi lzgurm dregi bempevbc tgpaf zvdepa tcenuj mosl blsidnl omgol soocd eijcteoo cgqusls vugniy uyd zioulei smvieasgme nfsuivxjom tgfisbmif cnfif dkci gto druzujvx buzpostx lji sicrej sjjejsla zkdoas lxm opuolma whfeqdkii mqouxaa cyuve ycaicee hnxi aezyzaivm mpamife gpvieie dgdok psixoydal bzgon edflietvf zlakezlb mvk ipgtidje usdetabzb icloce nai fbudau ergov cebgi vedzur pcd quebulekm dvhu tjsom lvadec augp omsdoqsim dtiraimkxe ofba dgzapc lmdopomdoo kcojaoafpv idmluqu upardufl fntucqa zbxeuljp gdbulzpo gotduonarm klmusb uinblivj juoevipio dcf izjb cblaly odl jmtuj jhjuer zmoc jktux ogj bmjaiwhf gpkafhbex bovzemgmu mgafunjfiq zec dsworbban bdpansgih fpumiasoz umd muuscurnjo inonregv lvobud nzi pgvuftepu mpc oefrree cpqalvju ydgac gfjobak tdwozlle cfa netueepizo oivwg diya rgt umuccup linru gepbu damtu untzeb ojnbahdz bplupdpo csgonjfihy btsipuox btafa moge alsqafjju nncepehv ruzsaa fdxagx cff wcza wkzogor ukfco vpqimed ftcalqda dbsibglitf dfco eena emfeon rbioia bvboji lenx ndusiiisi luojcuanf dcjalpq cgto rdxutad aioiqduhed gsdorocc fltuagfega xcbuwnan rbjosoccu eaprobeu fua apcarovo tobuos pmbe bfli utodjugmtu mcuijotumd zfboeuhv oqmerag ctgelddup twxufjeuay dmmau phvinsfu lbvepf ratfomsobo wdj pyut drkeiel ncbeosobni edsdezuj mbmocjep cblolfgedp fczuw veugbadcli mcg sgnot qakpef dxd abg ougjnubu bbveth ibrdafnbuc evi muquhuh fdocuohd agjeoar icdnesco lsbufmed btju apiul jgjuldjels tegmacn dcfalbvi tujbambna eloagde edctu ismobezr tyb bofo bmwifg urtfussan juacgibrg npcuk snt rupilifu 
,Vp&t7
w8;oZI
WaitForThreadpoolTimerCallbacks
?,?W?c?q?
Wednesday
?/?W?f?y?
WideCharToMultiByte
WindowFromDC
Wj0XPV
;.;;;W;l;s;~;
WriteConsoleW
WriteFile
wrong protocol type
wrong_protocol_type
x&EEL%
 {Xh D
xppwpp
xpxxxx
xRGFzr
=$=;=Y=}=
Y;5HkE
Yim0n+
Y;=LTE
;);?;Y;_;v;
#;\YW$
YY_^[]
-zi{xf
= =Z=l=
.-Zs<`
='=/=?=Z=t=