Analysis Date2015-05-28 19:09:58
MD55b78037b66933bc07dbc3a155f59607b
SHA19d0ab38cec8eec57fa706ada9996c24abafe0f5e

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: 0a2b36733b6446bb09d4d9e5e0ecc5cc sha1: ec0efc3a615c0c8364743aa28153d634ab226b83 size: 200704
Section.rdata md5: 84ba81b8968800ba7830047c4895a633 sha1: 46db392ba947b825eaa624115442b6dcf64014f4 size: 52736
Section.data md5: 66f8a7988379f610379f9afecdbf4547 sha1: 192e5d1eed2dbf9223500d98542947ff08e6df19 size: 7680
Section.reloc md5: fb15d0f3d71a8f44f3d2c90c8eeb57d2 sha1: c12f830bdfe677381d1fb5074abd1aa452aea854 size: 14848
Timestamp2015-04-29 18:54:21
PackerMicrosoft Visual C++ 8
PEhash1c8a8221cae30a9876b987f37dcae7c1ef5c1423
IMPhash71a1d8824464aafddea18cc27ba822b0

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates FileC:\WINDOWS\wwatutmwpqi\psndslc
Creates FileC:\wwatutmwpqi\djk1llsiozahesbwc.exe
Creates FileC:\wwatutmwpqi\psndslc
Deletes FileC:\WINDOWS\wwatutmwpqi\psndslc
Creates ProcessC:\wwatutmwpqi\djk1llsiozahesbwc.exe

Process
↳ C:\wwatutmwpqi\djk1llsiozahesbwc.exe

RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Proxy Connection Identity Source Key Location ➝
C:\wwatutmwpqi\lvivkcv.exe
Creates FileC:\wwatutmwpqi\lvivkcv.exe
Creates FilePIPE\lsarpc
Creates FileC:\wwatutmwpqi\qzy6arxcmsp
Creates FileC:\WINDOWS\wwatutmwpqi\psndslc
Creates FileC:\wwatutmwpqi\psndslc
Deletes FileC:\WINDOWS\wwatutmwpqi\psndslc
Creates ProcessC:\wwatutmwpqi\lvivkcv.exe
Creates ServiceIKE Credential Accounts Transfer Link - C:\wwatutmwpqi\lvivkcv.exe

Process
↳ C:\WINDOWS\system32\svchost.exe

Process
↳ Pid 808

Process
↳ Pid 852

Process
↳ C:\WINDOWS\System32\svchost.exe

Creates Filepipe\PCHFaultRepExecPipe

Process
↳ Pid 1208

Process
↳ C:\WINDOWS\system32\spoolsv.exe

RegistryHKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\BeepEnabled ➝
NULL
RegistryHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\System\Print\TypesSupported ➝
7
RegistryHKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\Printers\SymbolicLinkValue ➝
NULL
RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Print\Printers\DefaultSpoolDirectory ➝
C:\WINDOWS\System32\spool\PRINTERS\\x00

Process
↳ Pid 1844

Process
↳ Pid 1144

Process
↳ C:\wwatutmwpqi\lvivkcv.exe

Creates Filepipe\net\NtControlPipe10
Creates FileC:\wwatutmwpqi\jmdcqpudvgxx.exe
Creates FileC:\wwatutmwpqi\r4plqep
Creates FileC:\wwatutmwpqi\qzy6arxcmsp
Creates FileC:\WINDOWS\wwatutmwpqi\psndslc
Creates File\Device\Afd\Endpoint
Creates FileC:\wwatutmwpqi\psndslc
Deletes FileC:\WINDOWS\wwatutmwpqi\psndslc
Creates Processvcm8izjiz6nq "c:\wwatutmwpqi\lvivkcv.exe"

Process
↳ C:\wwatutmwpqi\lvivkcv.exe

Creates FileC:\WINDOWS\wwatutmwpqi\psndslc
Creates FileC:\wwatutmwpqi\psndslc
Deletes FileC:\WINDOWS\wwatutmwpqi\psndslc

Process
↳ vcm8izjiz6nq "c:\wwatutmwpqi\lvivkcv.exe"

Creates FileC:\WINDOWS\wwatutmwpqi\psndslc
Creates FileC:\wwatutmwpqi\psndslc
Deletes FileC:\WINDOWS\wwatutmwpqi\psndslc

Network Details:

DNSleaderperfect.net
Type: A
74.208.214.100
DNSheavyheart.net
Type: A
208.48.81.134
DNSheavyheart.net
Type: A
208.48.81.133
DNSheavyheart.net
Type: A
64.15.205.101
DNSheavyheart.net
Type: A
64.15.205.100
DNSgentleheart.net
Type: A
203.189.109.142
DNSbelongbehind.net
Type: A
95.211.230.75
DNSnecessaryheart.net
Type: A
DNSpleasantperfect.net
Type: A
DNSnecessaryperfect.net
Type: A
DNSpleasantmayor.net
Type: A
DNSnecessarymayor.net
Type: A
DNSpleasantbattle.net
Type: A
DNSnecessarybattle.net
Type: A
DNSorderheart.net
Type: A
DNSrequireheart.net
Type: A
DNSorderperfect.net
Type: A
DNSrequireperfect.net
Type: A
DNSordermayor.net
Type: A
DNSrequiremayor.net
Type: A
DNSorderbattle.net
Type: A
DNSrequirebattle.net
Type: A
DNSleaderheart.net
Type: A
DNSheavenheart.net
Type: A
DNSheavenperfect.net
Type: A
DNSleadermayor.net
Type: A
DNSheavenmayor.net
Type: A
DNSleaderbattle.net
Type: A
DNSheavenbattle.net
Type: A
DNSheavyperfect.net
Type: A
DNSgentleperfect.net
Type: A
DNSheavymayor.net
Type: A
DNSgentlemayor.net
Type: A
DNSheavybattle.net
Type: A
DNSgentlebattle.net
Type: A
DNSvariousheart.net
Type: A
DNSreturnheart.net
Type: A
DNSvariousperfect.net
Type: A
DNSreturnperfect.net
Type: A
DNSvariousmayor.net
Type: A
DNSreturnmayor.net
Type: A
DNSvariousbattle.net
Type: A
DNSreturnbattle.net
Type: A
DNSjourneyunderstand.net
Type: A
DNShusbandunderstand.net
Type: A
DNSjourneybroad.net
Type: A
DNShusbandbroad.net
Type: A
DNSjourneybehind.net
Type: A
DNShusbandbehind.net
Type: A
DNSjourneybutter.net
Type: A
DNShusbandbutter.net
Type: A
DNSdestroyunderstand.net
Type: A
DNSlittleunderstand.net
Type: A
DNSdestroybroad.net
Type: A
DNSlittlebroad.net
Type: A
DNSdestroybehind.net
Type: A
DNSlittlebehind.net
Type: A
DNSdestroybutter.net
Type: A
DNSlittlebutter.net
Type: A
DNSriddenunderstand.net
Type: A
DNSbelongunderstand.net
Type: A
DNSriddenbroad.net
Type: A
DNSbelongbroad.net
Type: A
DNSriddenbehind.net
Type: A
DNSriddenbutter.net
Type: A
DNSbelongbutter.net
Type: A
DNSchairunderstand.net
Type: A
DNSthoseunderstand.net
Type: A
DNSchairbroad.net
Type: A
DNSthosebroad.net
Type: A
DNSchairbehind.net
Type: A
DNSthosebehind.net
Type: A
DNSchairbutter.net
Type: A
DNSthosebutter.net
Type: A
DNSwithinunderstand.net
Type: A
DNSsufferunderstand.net
Type: A
DNSwithinbroad.net
Type: A
DNSsufferbroad.net
Type: A
DNSwithinbehind.net
Type: A
DNSsufferbehind.net
Type: A
DNSwithinbutter.net
Type: A
DNSsufferbutter.net
Type: A
DNSeffortunderstand.net
Type: A
DNSthroughunderstand.net
Type: A
DNSeffortbroad.net
Type: A
DNSthroughbroad.net
Type: A
DNSeffortbehind.net
Type: A
DNSthroughbehind.net
Type: A
HTTP GEThttp://leaderperfect.net/index.php
User-Agent:
HTTP GEThttp://heavyheart.net/index.php
User-Agent:
HTTP GEThttp://gentleheart.net/index.php
User-Agent:
HTTP GEThttp://belongbehind.net/index.php
User-Agent:
Flows TCP192.168.1.1:1031 ➝ 74.208.214.100:80
Flows TCP192.168.1.1:1032 ➝ 208.48.81.134:80
Flows TCP192.168.1.1:1033 ➝ 203.189.109.142:80
Flows TCP192.168.1.1:1034 ➝ 95.211.230.75:80

Raw Pcap
0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a206c   : close..Host: l
0x00000040 (00064)   65616465 72706572 66656374 2e6e6574   eaderperfect.net
0x00000050 (00080)   0d0a0d0a                              ....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2068   : close..Host: h
0x00000040 (00064)   65617679 68656172 742e6e65 740d0a0d   eavyheart.net...
0x00000050 (00080)   0a0a0d0a                              ....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2067   : close..Host: g
0x00000040 (00064)   656e746c 65686561 72742e6e 65740d0a   entleheart.net..
0x00000050 (00080)   0d0a0d0a                              ....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2062   : close..Host: b
0x00000040 (00064)   656c6f6e 67626568 696e642e 6e65740d   elongbehind.net.
0x00000050 (00080)   0a0d0a0a                              ....


Strings
WeCebSvlta3
ca
"
 
\
.
 
\
  
.
e
. 
00-+ .
-
-1
+-0-E-
-0
\
.
0
0
- 
000
-
S
....
u
                                 
2.exe
- abort() has been called
af-za
af-ZA
April
ar-ae
ar-AE
ar-bh
ar-BH
ar-dz
ar-DZ
ar-eg
ar-EG
ar-iq
ar-IQ
ar-jo
ar-JO
ar-kw
ar-KW
ar-lb
ar-LB
ar-ly
ar-LY
ar-ma
ar-MA
ar-om
ar-OM
ar-qa
ar-QA
ar-sa
ar-SA
ar-sy
ar-SY
ar-tn
ar-TN
ar-ye
ar-YE
- Attempt to initialize the CRT more than once.
- Attempt to use MSIL code from this assembly during native code initialization
August
az-az-cyrl
az-AZ-Cyrl
az-az-latn
az-AZ-Latn
.bat
be-by
be-BY
bg-bg
bg-BG
bn-in
bn-IN
bs-ba-latn
bs-BA-Latn
ca-es
ca-ES
Cja-JP
.cmd
.com
CONOUT$
CR6002
- CRT not initialized
cs-cz
cs-CZ
cy-gb
cy-GB
da-dk
da-DK
dddd, MMMM dd, yyyy
de-at
de-AT
December
de-ch
de-CH
de-de
de-DE
de-li
de-LI
de-lu
de-LU
div-mv
div-MV
Djjj
DOMAIN error
el-gr
el-GR
emscoree.dll
en-au
en-AU
en-bz
en-BZ
en-ca
en-CA
en-cb
en-CB
en-gb
en-GB
en-ie
en-IE
en-jm
en-JM
en-nz
en-NZ
en-ph
en-PH
en-tt
en-TT
en-us
en-US
en-za
en-ZA
en-zw
en-ZW
es-ar
es-AR
es-bo
es-BO
es-cl
es-CL
es-co
es-CO
es-cr
es-CR
es-do
es-DO
es-ec
es-EC
es-es
es-ES
es-gt
es-GT
es-hn
es-HN
es-mx
es-MX
es-ni
es-NI
es-pa
es-PA
es-pe
es-PE
es-pr
es-PR
es-py
es-PY
es-sv
es-SV
es-uy
es-UY
es-ve
es-VE
et-ee
et-EE
eu-es
eu-ES
fa-ir
fa-IR
February
fi-fi
fi-FI
- floating point support not loaded
fo-fo
fo-FO
fr-be
fr-BE
fr-ca
fr-CA
fr-ch
fr-CH
fr-fr
fr-FR
Friday
fr-lu
fr-LU
fr-mc
fr-MC
gl-es
gl-ES
gu-in
gu-IN
         (((((                  H
he-il
he-IL
HH:mm:ss
hi-in
hi-IN
hr-ba
hr-BA
hr-hr
hr-HR
hu-hu
hu-HU
hy-am
hy-AM
id-id
id-ID
- inconsistent onexit begin-end variables
is-is
is-IS
it-ch
it-CH
it-it
it-IT
ja-jp
January
jjjjj
July
June
ka-ge
ka-GE
kernel32.dll
kk-kz
kk-KZ
kn-in
kn-IN
kok-in
kok-IN
ko-kr
ko-KR
ky-kg
ky-KG
lt-lt
lt-LT
lv-lv
lv-LV
March
Microsoft Visual C++ Runtime Library
mi-nz
mi-NZ
mk-mk
mk-MK
ml-in
ml-IN
MM/dd/yy
mn-mn
mn-MN
Monday
mr-in
mr-IN
ms-bn
ms-BN
ms-my
ms-MY
mt-mt
mt-MT
nb-no
nb-NO
nl-be
nl-BE
nl-nl
nl-NL
nn-no
nn-NO
- not enough space for arguments
- not enough space for environment
- not enough space for locale information
- not enough space for lowio initialization
- not enough space for _onexit/atexit table
- not enough space for stdio initialization
- not enough space for thread data
November
ns-za
ns-ZA
(null)
October
pa-in
pa-IN
pl-pl
pl-PL
Program: 
<program name unknown>
pt-br
pt-BR
pt-pt
pt-PT
- pure virtual function call
quz-bo
quz-BO
quz-ec
quz-EC
quz-pe
quz-PE
R6008
R6009
R6010
R6016
R6017
R6018
R6019
R6024
R6025
R6026
R6027
R6028
R6030
R6031
R6032
R6033
R6034
ro-ro
ro-RO
runtime error 
Runtime Error!
ru-ru
ru-RU
sa-in
sa-IN
Saturday
se-fi
se-FI
se-no
se-NO
September
se-se
se-SE
SING error
sk-sk
sk-SK
sl-si
sl-SI
sma-no
sma-NO
sma-se
sma-SE
smj-no
smj-NO
smj-se
smj-SE
smn-fi
smn-FI
sms-fi
sms-FI
sq-al
sq-AL
sr-ba-cyrl
sr-BA-Cyrl
sr-ba-latn
sr-BA-Latn
sr-sp-cyrl
sr-SP-Cyrl
sr-sp-latn
sr-SP-Latn
Sunday
sv-fi
sv-FI
sv-se
sv-SE
sw-ke
sw-KE
syr-sy
syr-SY
ta-in
ta-IN
te-in
te-IN
This indicates a bug in your application.
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
th-th
th-TH
Thursday
TLOSS error
tn-za
tn-ZA
tr-tr
tr-TR
tt-ru
tt-RU
Tuesday
uk-ua
uk-UA
- unable to initialize heap
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
ur-pk
ur-PK
USER32.DLL
uz-uz-cyrl
uz-UZ-Cyrl
uz-uz-latn
uz-UZ-Latn
vi-vn
vi-VN
Wednesday
xh-za
xh-ZA
ZBnB
zh-chs
zh-CHS
zh-cht
zh-CHT
zh-cn
zh-CN
zh-hk
zh-HK
zh-mo
zh-MO
zh-sg
zh-SG
zh-tw
zh-TW
zu-za
zu-ZA
                          
0 0(00080>0J0X0
0 0&0.070G0Q0Y0h0
 0(000G0X0_0p0
0!0)010=0E0M0U0Z0f0
0!0'030@0G0n0
0$0,040<0D0L0T0\0d0l0t0|0
0"0,060A0k0s0{0
0 0(060F0R0^0r0
0"0-090A0I0X0`0h0t0|0
0!0+0A0K0c0s0
0%0>0D0i0}0
0$0,0D0L0\0t0|0
0&0.0H0N0^0k0s0
0%0=0S0p0|0
0+030?0D0L0d0
0 030I0R0^0i0
0!0E0R0d0l0
0"1(1O1c1t1|1
0"121L1\1
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
0%151b1{1
0:1t1|1
020;0b0o0
061;1E1X1
080R0i0
: :(:0:8:@:F:V:
< <(<0<8<@<H<P<X<`<h<p<x<
= =(=0=8=@=H=P=X=`=h=p=x=
; ;(;0;8;@;H;P;X;`;h;p;x;
: :(:0:8:@:H:P:X:`:h:p:x:
=0=8=@=H=U=b=z=
> ?0?8?@?T?\?d?l?~?
091K1r1
<"<*<0<9<A<e<y<
0A0N0l0s0~0
0B0M0_0
	0D0M0
:0;;;D;V;\;e;r;
;!;0;>;D;X;`;l;
0E0M0T0c0
?0?F?L?T?^?n?
=0=H=R=X=p=x=
:$:*:0:::J:V:w:
0P0V0a0p0
=0=P=X=\=x=
:#:0:::X:g:s:z:
?0?<?X?x?
1(10181A1M1U1a1i1
1 1+101O1b1j1
1$1,1:1E1R1g1
1!1'1.1F1N1b1w1
1$1,141<1D1L1T1\1d1l1t1|1
1"1'161d1
1%1-1D1R1f1q1y1
111D1V1^1u1|1
1-1<1F1
111F1L1V1\1l1t1z1
1,1=1N1_1p1
1/1C1{1
1^1f1y1
1-1I1Q1Y1a1i1q1{1
1!1J1V1
1/1Y1|1
121:1J1^1l1
1"2*2N2X2f2n2{2
1	292q2
151<1@1D1H1L1P1T1X1
>!>%>)>->1>5>9>=>A>E>I>M>Q>U>Y>]>a>
171>1F1V1t1z1
;1<8<Z<a<~>
192A2N2q2
;#;1;A;W;p;
?1?C?U?g?
`1d1h1|1
1E2_2h2
?'?1???F?P?Z?`?l?t?|?
=%=1=@=I=V=
1#QNAN
1#SNAN
:#:+:2:
202:2S2
2%21292E2M2m2~2
2(21292Q2d2j2p2w2
2 2&232@2Z2|2
2$2,242:2?2E2U2e2l2t2
2$2,242<2D2L2T2\2d2l2t2|2
2&2<2D2
2%2@2G2L2P2T2u2
2!2/2W2b2p2
2-282@2H2d2
2?2b2i2v2~2
2"2C2N2\2
2(2G2N2]2d2
2$2Q2e2~2
2:2R2Y2m2
2!3'3,323Q3{3
2(3=3h3u3
2%3*3S3`3
2>3D3H3L3P3
2@3T3Y3a3u3}3
262>2O2^2l2t2
>'?2?8?
295Y7g7q7
2b4#568
=&=,=2=<=B=`=h=~=
2D2O2W2]2v2
= =2=<=D=T=\=k=s=
<2<G<N<Y<z<
<2<J<R<j<{<
:2;N;V;b;
:2:S:_:f:
2W2d2l2t2
323A3c3m3
3#3+30363>3C3I3Q3V3\3d3i3o3w3|3
3"3,323=3`3e3q3v3
3 3$3(3,3034383<3@3L3P3T3X3\3`3d3h3l3p3t3x3|3
3!3-3:3C3J3j3
3$3,343<3D3L3T3\3d3l3t3|3
3%3>3e3y3
3-3?3G3
3#3)3G3O3s3
3#3:3J3U3d3r3
3!3)3l3t3
3%3@3M3c3
3"353B3T3b3j3x3
3"3A3Q3^3i3
3/3C3`3h3r3{3
3'414<4D4O4[4x4
3$444D4T4d4
344:4L4k4
3	4(4u6
3:4F4N4X4f4
383J3X3`3g3o3w3
<+<3<;<C<I<S<[<a<o<{<
> >3>;>C>Q>u>
3G3c3i3{3
;$;+;3;G;S;c;o;
:":*:3:@:H:Z:d:l:u:
3K4L5\5m5u5
=#=)=3=?=M=W=_=e=k=u=
<#=3=@=N=k=
=(=3=Y=_=f=v=
414=4M4Y4^4j4
424?4S4j4r4
42494C4J4b4v4
4!41474[4a4
4$414N4Y4a4r4z4
4"42484>4F4L4R4Z4`4f4n4w4~4
4$4,444<4D4L4T4\4d4l4t4|4
4"4'4-454:4@4H4M4S4[4`4f4n4s4y4
4#4+4A4I4Q4d4k4
4-4:4E4T4s4~4
4!4/4M4v4|4
4.454P4
4/464;4B4O4W4
4"464E4y4
4*474@4F4w4
4(494E4h4
4!4D4J4U4
4'4D4p4
4,4E4S4s4
4,4M4c4
4	5:5B5O5y5
4<5@5F5J5
4&5>5W5
4@5J5R5]5i5q5y5
4	5N5Y5f5
>4>8>@>H>P>T>\>p>
? ?$?*?.?4?8?J?k?v?|?
?$?,?4?<?D?L?T?\?d?l?t?|?
4G4c4n4x4
:4:>:L:e:s:
4P5X5e5q5y5
=)>4>r>~>
4z=%>,>R>Y>
515I5l5
525e5m5x5
(5,5054585<5@5D5H5L5P5T5X5\5`5d5h5l5p5t5x5|5
5(505:5P5i5n5
5"515?5\5l5s5
5&545<5D5W5w5
5$5,545<5D5L5T5\5d5l5t5|5
5&5.555<5G5N5S5_5j5r5
5 5$5(5,585<5@5D5H5L5P5T5\5`5@6D6
5 5(5>5E5[5
5$5-5N5w5
5/585A5W5c5k5
5/585j5
5!595o5w5
5<5D5Q5\5b5q5
5*5s5z5
<5@5T5X5h5l5t5
5(5Z5a5i5
565>5G5O5[5e5q5y5
5	6q6|6
5]6q6y6
575B5w5
5`9j p
>/?5?;?A?G?M?T?[?b?i?p?w?~?
>!>->5>B>
?%?-?5?B?J?V?q?
>&>5>C>\>j>
:5:<:@:D:H:L:P:T:X:
>#>->5>;>E>M>_>g>s>y>
5F5P5^5w5
:-:5:F:z:
<	</<5<?<H<c<
5I5V5^5v5~5
?#?-?5?N?Y?a?m?
=$>->5>=>Q>g>
5T6_6m6x6
=5>T>f>
;-;5;?;X;a;k;
6 606=6L6T6`6h6r6z6
6*606I6O6U6_6f6z6
6%606O6Z6:7V7
6$62686M6^6j6q6x6
6$636>6J6R6[6b6}6
6+636:6J6U6f6y6
6+646A6H6l6q6
6-656=6E6P6l6x6
6$6,646<6D6L6T6\6d6 ?$?(?,?0?4?
6$6,646<6D6L6T6\6d6l6t6|6
6 6$6(6,6064686<6@6D6H6L6P6T6X6\6`6d6h6l6p6t6x6|6
6 6&6.696I6c6u6}6
6'6/676P6~6
6&6.6B6O6
6"676=6C6
6(686<6L6P6T6X6`6x6|6
6$6D6L6U6\6n6s6~6
6"6F6N6V6a6k6y6
6*6M6U6h6t6
6=6S6[6c6k6s6{6
6 777@7H7]7c7n7v7
6/7B7j7
6]7e7q7
6>7M7e7
6=7O7a7
;%;6;;;A;S;Y;d;m;z;
6d7o7|7
;6;P;Z;
6W6p6x6
6Z6_6g6{6
<&<.<6<><Z<f<m<{<
>*>7>@>
737O7W7_7q7
757;7J7T7^7k7q7{7
767L7^7}7
768;8M8k8
7,747:7Q7
7 74797U7]7i7o7u7}7
7.767^7k7x7
7 7(70787@7H7P7X7`7h7p7x7
7 7$7,7D7T7X7h7l7p7t7|7
777?7H7V7o7v7|7
7+7?7G7n7~7
7&7?7Q7X7o7
7_7j7r7{7
7*7J7Z7l7t7|7
7/7Z7`7
7^8c8i8p8
7^8f8r8
:":7:^:d:{:
=7=D=q=
<"<7<D<r<
7E7d7t7
< <.<7<?<F<W<^<c<k<s<|<
=7=?=G=R=Z=a=
7h;'4B
<*<7<?<J<W<d<l<x<
>7>k>p>
/7?=<m
; ;(;/;7;M;U;];e;l;z;
7N8W8f8m8
<7<?<Q<W<e<l<s<
81999A9I9Q9Y9a9i9q9y9
838h8p8|8
858M8Y8h8
8(808<8`8
8+818;8A8Q8i8n8v8
8)818A8l8
8#848B8M8U8b8l8
8 8(80888@8H8P8X8`8h8p8x8
8$8,828|8
8'8/848D8L8S8[8h8r8
8*888[8c8r8
8$8,8;8K8e8
8,8<8@8P8T8d8h8l8t8
8"8/8H8P8X8`8
8&898A8
8+8A8I8R8
8:8A8n8
8'8B8N8V8[8a8i8n8
8'8D8S8
8+8d8y8
8'8K8W8b8i8x8
8:8T8[8h8|8
8*939j9
8#979r9
8&9,929C9N9T9{9
8 9*9L9g9
8>9Q9V9
8ifbgubf rpjicelri jndepfy ngbe drpi codb vimkesa hiqtommneo lldodrz ibljirtd seci ctbivrbov vhleefnvoi migqie pyoyijrg sxzezkcef zbyabncu outjl ladrudosv lkape kcdexuteor gnso gppabodbir cpnellgec pgotiz bzrijyge weqjobt pijsijd olrk yungemgj nsmifj cjjeact str mbdispsa ubnfumyuf cafaejekm fjifeuun zjsul gdziulz lgpie ucuuclejwf cdooki urn kamza mjlusrc sbwo smfuox ttsazmgosj myfeiwac dfzisrim acfubepekh tcfio agajbedil fcsuab ndze flmipfda jfgis mnudek ginqi mtjejuwdar arvegemop iebxadezod iscbovguop nvmotbyoi bcfug bgcofmdane ejdjidfu igsej ubzgo kkfoh geejduhjt hcgidl bpforicig lpca enfe cscem cjja tsgucg nejo anaxba
:8:K:S:_:l:~:
8P8X8`8g8o8v8
8P9r:z:"<
;8;T;p;
<8<X<x<
?,?9???{?
92989@9L9h9t9
949t9|9
94;M<X<r<
9(:4:M:Y:z:
9":*:4:<:V:]:d:q:}:
9,:7:?:G:R:
9*:7:?:M:U:i:y:
98:C:V:j:|:
(9,9094989<9@9D9H9L9|=
9#929<9D9I9Q9a9i9{9
9,949<9D9H9L9T9h9p9x9
9-959=9E9R9]9y9
9*959@9M9[9d9j9p9v9{9
9 9(90989@9H9P9X9`9h9p9x9
9+999R9`9y9
9%9/9=9V9d9o9
9&9,9A9Y9n9
9$9^9f9n9
9-9@9H9T9
9)9.9N9U9j9t9z9
9(9C9K9S9[9r9|9
9)9G9\9d9
9_9g9q9
;-;9;A;I;T;^;t;
9$:,:A:I:U:]:g:q:
;!;';/;9;A;N;V;v;|;
9':/:;:C:K:S:v:
9 :]:g:
9G9R9h9|9
<!<9<@<H<^<i<t<
9@:J:T:
>(?9?M?S?X?
A4Nn(6Nf
A9Q9a9
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
>%>.>A>b>j>r>
a&%`D@;
address family not supported
address_family_not_supported
address in use
address_in_use
address not available
address_not_available
Ag1\tM
? ?A?K?Y?r?
already connected
already_connected
anlgauaunl gss jnsifbir lcleeit emvo zjvaro pzla jxzujbni qvbi folca cocbu ztfukglu coxp aghtu cljauccr frseks bucv zjl gnciecjli gsicadlb sij nacsoailgs lpsoungv rsgofmteal clyagpatab dzmusccu imbruy fcnaoaecx dlcuegf cgofepz eslfu tgg ljmofnej lfre bptegp jsmol cgdeucsya pugfar sdloysoaje sulvecbpil rdcujhtiii mpcof gpm icd cnmefpd bnahorobc cmv feosdeb mlzez ipaeea xedx biggi fxb dmseedccuf jio yqsirr jzpeploq amnhurfsop janvi efazm srgasbzimn lnsebcale kbzigng olcvety jwefal cdzo rme gtcembz vuin subfuanhi bput icycomwa lbuiuricz isjravnfa ljseitbg idbcutuhd gjbuter dchalsmen yfmujmo ini zjnateltuv bstabua zprigkuc
}A#pPm
>:>A>P>V>]>d>i>
>+>A>Q>a>
AreFileApisANSI
argument list too long
argument out of domain
<at-<rt"<wt
August
.?AVbad_alloc@std@@
.?AVbad_exception@std@@
.?AVerror_category@std@@
.?AVexception@std@@
.?AV_Generic_error_category@std@@
.?AV_Iostream_error_category@std@@
=A=V=^=j=
.?AVlength_error@std@@
.?AVlogic_error@std@@
.?AVout_of_range@std@@
.?AV_System_error_category@std@@
.?AVtype_info@@
;-;=;a;z;
bad address
bad_address
bad allocation
bad exception
bad file descriptor
bad_file_descriptor
bad message
 Base Class Array'
 Base Class Descriptor at (
__based(
<B<I<_<i<
;b;i;q;
?:?B?J?R?b?
>/>:>B>J>R>Z>a>t>
>!>(>.><>B>K>T>i>
broken pipe
bWWWWj
CallWindowProcA
__cdecl
CheckDlgButton
?-?;?c?k?
<!<)<;<C<K<R<`<u<
;C<`<k<r<y<
;-;C;K;S;{;
 Class Hierarchy Descriptor'
CloseHandle
CloseThreadpoolTimer
CloseThreadpoolWait
__clrcall
;(;C;M;
CompareStringEx
CompareStringW
 Complete Object Locator'
connection aborted
connection_aborted
connection already in progress
connection_already_in_progress
connection refused
connection_refused
connection reset
connection_reset
`copy constructor closure'
CorExitProcess
CoU<pj
CreateEventExW
CreateFile2
CreateFileW
CreateSemaphoreExW
CreateSymbolicLinkW
CreateThread
CreateThreadpoolTimer
CreateThreadpoolWait
cross device link
;%;C;X;b;
@.data
dddd, MMMM dd, yyyy
December
DecodePointer
`default constructor closure'
 delete
 delete[]
DeleteCriticalSection
DeleteFileA
destination address required
destination_address_required
device or resource busy
;$;(;D;H;h;
;><D<H<L<P<
directory not empty
:/;<;D;k;
;D<L<m<u<
=\=d=p=
DrawTextA
%DS&U@.
`dynamic atexit destructor for '
`dynamic initializer for '
__eabi
`eh vector constructor iterator'
`eh vector copy constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`eh vector vbase copy constructor iterator'
>!>->?>E>J>g>o>
:E;K;Q;[;c;k;q;w;
; ;e;k;r;
>.?E?M?b?
>">=>E>M>U>
:=;E;M;U;];p;
?)?/?=?E?M?Y?a?u?
EncodePointer
EndDialog
EndPaint
EnterCriticalSection
EnumSystemLocalesEx
<!<e<q<}<
:':-:e:q:
+*evHv<r
executable format error
ExitProcess
__fastcall
February
file exists
filename too long
filename_too_long
FileTimeToLocalFileTime
FileTimeToSystemTime
file too large
FindClose
FindFirstFileExW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FlushProcessWriteBuffers
FreeEnvironmentStringsW
FreeLibraryWhenCallbackReturns
Friday
function not supported
GDI32.dll
generic
GetACP
GetActiveWindow
GetBkColor
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetCPInfo
GetCurrentDirectoryW
GetCurrentObject
GetCurrentPackageId
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentThreadId
GetCursor
GetDateFormatEx
GetDCBrushColor
GetDeviceCaps
GetDialogBaseUnits
GetDlgItem
GetDlgItemInt
GetDriveTypeW
GetEnvironmentStringsW
GetFileInformationByHandle
GetFileInformationByHandleExW
GetFileType
GetFontUnicodeRanges
GetForegroundWindow
GetFullPathNameW
GetGraphicsMode
GetInputState
GetKeyboardType
GetLastActivePopup
GetLastError
GetLocaleInfoEx
GetLogicalProcessorInformation
GetMapMode
GetMenu
GetMenuCheckMarkDimensions
GetMenuContextHelpId
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMetaRgn
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetObjectType
GetOEMCP
GetPixelFormat
GetPolyFillMode
GetProcAddress
GetProcessHeap
GetProcessWindowStation
GetPropA
GetQueueStatus
GetRandomRgn
GetScrollPos
GetStartupInfoW
GetStdHandle
GetStretchBltMode
GetStringTypeW
GetSystemTimeAsFileTime
GetTextAlign
GetTextCharacterExtra
GetTextColor
GetTickCount
GetTickCount64
GetTimeFormatEx
GetTimeZoneInformation
GetUserDefaultLocaleName
GetUserObjectInformationW
GetVersion
GetWindowContextHelpId
GetWindowDC
GetWindowLongA
gfp-33
GlobalFlags
GlobalHandle
GlobalSize
;%;@;G;L;P;T;u;
<}&(gn
:?:G:O:c:k:u:
=(=G=Q=]=d=r=
`h````
H9A:y$YM
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
`h`hhh
HH:mm:ss
HHtVHHt
; ;H;L;P;T;X;\;`;
(HN<@HN
host unreachable
host_unreachable
Ht+Ht$Ht
;=;H;U;];e;p;
<H=V=m=s=
>&>;>H>_>w>}>
_hypot
identifier removed
?:?I?d?n?v?
$ifosbila jgay dlvuzi dcinah hmduts zigog llda cuaoimpum aicdgeg aibpsi ipkfaozbg almlugy loeya ifzerabhdi onouzsogcb psqifaanf jffa ffpuj dse qjsaotcb offbale juasbadpda eulbn qgponrya nawgaovly bszagpmics aop ryr ictpapsgil fuistip ucqsul kirgebxc cbz esldopos spnagr aun ter upcmuglje edasde daudisomm pmqa uzp giilbozvou nfu ncvuzlta cjgonmf dtn rmniefp llj lzjuov jdfemrse sldijgu lcrupi jgbaw ibborakm kccouiphq ncjinsbem fsras tnevab mwtuhcepi dnvagpe rodugitld aktejeup omc lpdiiufibq rtwaow rjton oee vzsuvd zoke mud gppajvmofz lbluf sxgujlbin zldedfda cuzmerj boeuj tdpay hvdudmgilp fdne akybua ecgajarys nfdafrt icscoe m.
?%?>?I?]?i?o?|?
illegal byte sequence
>*>I>m>
inappropriate io control operation
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
INJ{NN
interrupted
invalid argument
invalid_argument
invalid seek
invalid string position
:,:=:I:o:|:
io error
iostream
iostream stream error
is a directory
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocaleName
IsWindowEnabled
IsWindowUnicode
<itx<o
jA[jZZ+
JanFebMarAprMayJunJulAugSepOctNovDec
January
@jd_u	
j/_j\[f;
J?-jkf
j@j _W
?@?J?T?Y?a?i?q?
kcziyp lanlonlba jswa owmmanrtu duugdim ofsciplfa clbio cuepter lpigat pbon capg byfujezl lnjonczeo jjnegsyuw oiulm bmpacquwim wuipdaib rnu mnru nvq tmlesfcagh osnjojvf ntejamgr wrb neofnam cpe mvoifitlxu mapoho dfpedsrao wmridp rgpijugrep siuco uklledjif zltuc bragebnjo fgoa nbnujuoadn bae crnuabi milm wrii ooqpu vcegif jbr izv gnkohl sknem cqje eibvmi xdpojoes fzsiso jjle cbzoydmu euskp ajsbe xowdakao gggupsulup bnbulmni pjpanrso gddonadce wpuwohelm bicdosvwa pgcapft jjijinfk cjlo lbm rejporguec rricibdci hjaf fwe lbranz opcvixlbus qtdijvsam wucuvos ndcu bbgobm ryfino saihqa gdzocxked lnzof traveihldi sqzeonpnej kdal@?
} kE$<
KERNEL32.dll
K%[(r`<
=.=K=S=[=k=
=K=]=t=
? ?k?x?
L2P2T2X2\2`2d2p2t2x2|2
LCMapStringEx
LCMapStringW
LeaveCriticalSection
lffenfp nldiujrmas ushbe incburnpi ogbonog pmeyot dleapia brga nfve sbfalb ubg ljzeeljui roqfee ffp fwguric fwjizgfa lceba jgnugeg gklit pss ugps afdoj mpcu lgioafolo csjiccj fxza obtca ojpinig umarfovemb fopp tvgoiw mdf gqumubbzud bienifoc tgpedpbuj nmoel xzbeeut ntgeb plma diccegalmi gvbufnz njsacdce giugat ocndapfsi kirni gpfolg clr bbrevcnipb sam jwl qlnutu cyloj vqg ibbhe gaawpiowe vbgeu cvfafdcea fnodagfc mjd afxnum jntafsu mafpazmp fbceydieje izefiizapu jrj wpniieb dvsucmeg tvvecl crgijvai teppegze lamcu frgod xjyu tckepbo csteobrh pmgemfve plan steilu degpal fcnibjfuc fawrad rgpoobrp frefavujgu fyogevkc vzfa rev jdf
: :@:L:h:
>#>+>L>i>
llj opgl ssf vmamune eem jzki ubcfiasb smcogff jlwacnj jajvofj pbjimkii rtcunnfuo zsjuj scgog clfaqjfisb amiibvigel zuingop gpsayxca emm urubdidn eocgcu pizd nvkeedg kuaktuncsa devji pcgemgb lilquszago szniogf pvzunvjiy rvf qlemafxbam bdf yaucmuldgu odsjarjfi jszahhyic nyfiwqbef fnradcu tajbeb jrnov bdkexsyo pozyadp rbpuaj gukbieoofg isncuncd spusadef lidiofi tmedoby ghgupsrep iobaxfegou bbca sezbalugse ngasoayok dahmedoo dej njjaswfe ezrmicepm gjagevnay cmwo nls bsizibjibi mmeri pslu pdt mvf mcve xcdoiajf dtlez pmmecbb bbfasygev fejladic uprbiu rfjahjkio pidasu bzvoaxidh pdlovngel cmsow iuund gbgascteya gwcoo mghaciodni u
LoadIconA
LoadLibraryExW
LoadResource
LocalFlags
`local static guard'
`local static thread guard'
`local vftable'
`local vftable constructor closure'
LockResource
<&<l<y<
<:<@<M<
`managed vector constructor iterator'
`managed vector copy constructor iterator'
`managed vector destructor iterator'
map/set<T> too long
MessageBoxW
message size
message_size
mlm pvsilr gcsutgmann fmlubyb bfubobcsek cfl ajabma gyfo xgviiky pbbirsbio zuhjuemi biobrefjo dnrueet qozmu ibigyodjr nonrecu eif gzpujzzum foiil bjlej pzesigngi amptojaum atocha bonnuo nfjed cblehzs fej giiqacid wccir cjootiocfc qorqi mja stciecfla dfnajubfe acpqoycbi elbnalbkef bgxac vfnuouc jzbecd jonsadl urvsib apjvix pxmodlw odoc fnd bvibegquan sfnuzhform lkdes diagjio gjvahzuot gojau ecsjapcjoq ucocc snjehl okgub ymmene fqfojglug lmbafrdolb ptsejzf rgfad dswaj uggeji grmuifb vtgifgiro gjsogiq foogtaiutt ekm lofcedubp lqsi fjj vmw psfeor msna pagyeg yiu lenzuu zoycedezdo zmco bblanmnip fuubbesp cpa npvallteo uab 
MM/dd/yy
Monday
MoveFileA
MoveWindow
MultiByteToWideChar
:M;V;^;x;
|`NaMeN
=,=N=B>J>R>Z>
NENQ}GN
?%???N?[?e?o?~?
network down
network_down
network reset
network_reset
network unreachable
network_unreachable
 new[]
_nextafter
NFG)Re
ngrehgud anyqutbs gurlu lfvuco jxui nospusb pebanuz qmfuxju puh apjz ugfcotd jpadaupgj pspugcse qnleg fjzepplim ifbqiallus sdno yier mgju omckorjcol oviorh nydu lyc ejojs dnoseboc fdequlqhai peibdalpb pbewoxse fbodeagnl ovojlelrd mbbejjoi rnjuooaa tfpa iepzno kgc nehaiu yfbejk pfdeihij xgceumou mnd mbdoaeej dfge uznoelomfb lmudi jns nvloza bgjubwcuv ltl iep mvsu zwfi czugu hrgai wso fugneaj ucnpo jcte leffigmxi usewf mvpiddhod ajzcecf bojradd jpdo dfvintoc ibsbedsno izzosioax isfgeel sbfud loadba tbnuow jidtoffxe inqgeabnzo igqdog naihy poor glyatxepu oefdli mtluwrdidf ztijuv mgda dayc gdyurowwe xfvozuhr zblocvl idgnoW)
;@;N;g;u;
NMz8ej
nNgxrN2_sN
no buffer space
no_buffer_space
no child process
no link
no lock available
no message
no message available
no protocol option
no_protocol_option
no space on device
no stream resources
no such device
no such device or address
no such file or directory
no such process
not a directory
not a socket
not_a_socket
not a stream
not connected
not_connected
not enough memory
not supported
November
 N\P%N
(null)
<N=V=b=q=
:*:>:N:V:^:m:u:
:':N:X:e:m:
nXWK|6
October
`omni callsig'
operation canceled
operation in progress
operation_in_progress
operation not permitted
operation not supported
operation_not_supported
operation would block
operation_would_block
operator
OutputDebugStringW
:):O:V:c:k:w:
owner dead
;P;a;i;q;
__pascal
-P{c	f
PeekNamedPipe
permission denied
permission_denied
~pjCXf
`placement delete closure'
`placement delete[] closure'
-pL)nf
PP9E u
protocol error
protocol not supported
protocol_not_supported
PSSSSV
__ptr64
PWWWWV
;=;P;X;n;z;
PY)+*:E
qczm yezju ntukaqvfon bcfupf ysle gicfevj ycjaipinge jmsopap sazsaggse tqjajbaqis olrnudl mguic pjbum tov xlfouxg szcignc jog syloz svn wmaru epffel absve lwkuubau sjlobuepp lnp dscujccos potra lkre nppiae smvafpbecr oulbnucd xpx jlxocz abuevm ctzefcemae mvc qiuhja?
-&[q`f
='=/=Q=^=f=y=
QQSVWd
QueryPerformanceCounter
RaiseException
`.rdata
ReadConsoleW
ReadFile
read only file system
.reloc
resource deadlock would occur
resource unavailable try again
__restrict
restrict(
result out of range
= =R=k=
rs	3Xv
RtlUnwind
Saturday
`scalar deleting destructor'
>S?[?c?i?
September
SetDefaultDllDirectories
SetEndOfFile
SetEnvironmentVariableA
SetFileInformationByHandleW
SetFilePointer
SetFilePointerEx
SetLastError
SetStdHandle
SetSystemPaletteUse
SetTextAlign
SetTextColor
SetThreadpoolTimer
SetThreadpoolWait
SetThreadStackGuarantee
SetUnhandledExceptionFilter
SetWindowTextA
ShowWindow
SizeofResource
S&Jee<
S.K9IE
?:?S?m?|?
snkaeqlkeg opaagfafdq ojenxulkcu jymokjalo rflel lviti jsbuwsp pldeg bfcetm asgbic gjxildzu cfbohpko cjubo afdwanzba jzr mocavuc cpjoddrogt kigbaick rpmin enmgecjmof girsoqtmo fgju rnn sfaw pnpuaiemuc uxcbafdgia mpparb glgemdbub hbviubwso tvv dtmu stcobaojob firsif pkc jjzulmo uzzsougg ulcgujf scd ladl btqomgm hsca vsdiu jbego glto dtcioj jfdog nmjiznjo ljqac ticgubu gdgacnkud lpcejza dyno dab xknous bemabevf nnbice wgkijpnof cvfeqrtu ojcfafybey bmneir llfe ttniuf dlrilppa gwdiunvt fvzuytfuls cualtei mwsemudput sfjab djmecps phtudqjev fwjuaieduc sgwecyide zzbeknjoy lrd lpuocap qujwiab poufc zlau ugrmoi pzdi gosteuev mjji
SNZ;XN
SSPQSW
state not recoverable
__stdcall
stream timeout
`string'
string too long
Sunday
SunMonTueWedThuFriSat
,SVWj0X
SVWjA_jZ+
system
SystemTimeToTzSpecificLocalTime
T2\2d2l2t2|2
~';_t|%3
< t8<	t4
	T=:[c
TerminateProcess
text file busy
t!=fff
+t"HHt
tHHt*Ht#
__thiscall
!This program cannot be run in DOS mode.
Thursday
timed out
timed_out
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
=T=l=y=
tO9=((D
too many files open
too_many_files_open
too many files open in system
too many links
too many symbolic link levels
Tuesday
;t$,v-
<t?x?|?
 Type Descriptor'
`typeof'
uaPPPS
?:uBGW
uBjAYjZ+
`udt returning'
__unaligned
UnhandledExceptionFilter
UNICODE
unknown error
Unknown exception
uQj	hD
UQPXY]Y[
URPQQh@IB
USER32.dll
UTF-16LE
value too large
`vbase destructor'
`vbtable'
`vcall'
-vc;cj
__vectorcall
`vector constructor iterator'
`vector copy constructor iterator'
`vector deleting destructor'
`vector destructor iterator'
vector<T> too long
`vector vbase constructor iterator'
`vector vbase copy constructor iterator'
`vftable'
`virtual displacement map'
vjhreufbda liauplo lecmull ilpcuj mvduek bdfaop cecdo fesgikj kqsa dgotoba jzxuofg eceohpoqme cmd pfi poalnofebj grcoa eng cakuneunpk ldvobnbae gaa gqcabjc djwua lxva ifu ahrcesbiiz koqvanai wuvselpr deaudxixdb vwjejamiep zfego wnjumeowp dcpozuel inkna zxl bgiepoc fav boec gfjut fmwidlwa tlvabdozi pbs lmdatj lyonul grozi rcram cmwacooiga obcdogicao iifq okdj fnxoba ebsj ogjpouf kbuf zcdalvpuza rtzijtega ivjolunbmo bpg miuaomu brifoi jdnoviurji mzg jcvat bhg jogsajmico jgzorpsi sbceirozr bgqua lzfosnge ued ddg banfu ihdizasrv spco jutc uozokbi fdjervfaxa ghceig fmbubob yantu jmputqz ccepod sbmiiybebu rgwoev ugvj uupi sebgursjj
@vlcopsnejp moyubi shralg cwmulo ewojxuodve czpof fdi fic masdewp xwbi tjzecbc lkuef rlfejohu tcs iaba nztigiui iqffibv moga dicjutvxir fcmuej jtibuds ljnevm xip aoijsjuz ajamgoxnpu umjzaonzet ebk njsuxny npsove joazpei yjnouffega vbmajc gsb usbj nroutid molna xuseqeptte rmgoftq fazf jesdodt jlubin zggetti vgmi jsjifndam gaomojadcv spzufbg slsubnteg rbganflij mpjumjnujr cbnaf tesgadfli ogescugnaf gtf mlzovdiy hsoc ofx nvunio yzvaunclop ubjmee fnfelsnocs hbiretvsof qedqatpojo fpbufavd ujmb puc ghupic amlteo csiceno fpjazpw ccviblbum pungiu fjfo dbgabdp igul lgqaycigi wfkup pbbaigjji uwb gmpaqb aiuaipt bgdo ghfiimshaa oo
v	N+D$
WaitForThreadpoolTimerCallbacks
Wednesday
WideCharToMultiByte
WindowFromDC
Wj0XPV
;W<`<p<
WriteConsoleW
WriteFile
wrong protocol type
wrong_protocol_type
>X?b?h?|?
<"<*<X<h<p<x<
xppwpp
xpxxxx
-)/Xsh
YNLt`N
YY_^[]
Z0#1*1
<Z<_<g<x<
zpsuo lnzanram fdmoujnc pnsaxmki sfporbz agsbirnri cslu lxpecosrip siffi czlitoogzo dlf gpbogcmizp gtgaeaq oinqbi fzno lfg dbge tbb dan fgqijumje zlsamduj cus aouj zwgiann nouv sgqedcdulc svfig nbt rcroe bzfigu whmeoqlre nutotelso fbvil fifc aumrfayl aedht rjma sorli vflijmobok jcba vooq rlpuatofta xjnaq oevaf ngcuubfg bkjom flcec cbbe gbini cjcuivadg jjl ceuq glcejopcu qmamoq ssmovg jjbegpm ntlatca rhaparcz xlre etxfumcot miloiga djm vbdo bquq rbducuif ycg wzn bjeme fvdem nlfeonyg wnyadf nfbazsqe uljipum ulsoda oxd lkzuitdf fkkibxul bjg qaaifocef srd imqb jgvegfb ilj fudsa ftiwiuboj itjd rtpopqb fzru tjzomtzonj gkatej ubx-
;!;Z;q;
zzfoziu sienje xiajqosn spsapafni kjrel xninou cewlapgd ldl qtled sqcaoflles padtumlib fsj tsulujd btfoggce bdo urcle uqpmiowuic jsdug cjla iwbgop tnjijba lew hizfuof dngaj itortuxdga mpgapj qbogaisas zuvfe iephtapgde rqdeva gcimeezn dtbepica iinbi ouajpf nem umpmufp vexme dnlovaagn udsmeuhb eufppu rdsunjdo necrap xclupvbii taabyudco lalpi awprodjri nnbaldgiy ackoe pibgupr uauceyeipu zlmubcx aae fssanusxud emv wapu saamusijs urfgesnzuw jiljeu mpmicf lznalqiic vntunpor bceg jyni ovb lbcal rsgitbsif dgbejbli jssaqpbuci bfbiuvdsa noog jtso gmlihumz tqgarlnim wcigu cqf abr cvsobl oafibdoerc fxjaolf sjbuqff bhgu dvf rdme tpiaib