Analysis Date2014-11-01 15:30:18
MD5a1488bac0ead0213960fcff009157a30
SHA1adb4f03a75a6e02153364442a072ec2f1e9cd17a

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: 47f5f8c7f4e02359c0935b73ff49f2dd sha1: 4f9b5ef8891c16d6b7c8e6f1f63b5309744454a2 size: 243200
Section.rdata md5: 990453590cf8a4ca11e8f33718c7be92 sha1: 7132144a2ce2411b08dd6495907c491402b6e2f4 size: 58368
Section.data md5: 70223636ba36355a5f88f89c176cc9f5 sha1: 147a8a83c5216eb04060b01235c70252f56b662e size: 8192
Section.rsrc md5: a71e8faad0d24c7f10d7a18e9158f758 sha1: 7531f00d0ae136d8c854c25dd2c26619b3a68a6f size: 34816
Section.reloc md5: 9e2dd98b3d80cd04f04c9346e2305fcd sha1: 38775b1a520d603d29aaf2c5026d66996df24b52 size: 17408
Timestamp2013-12-26 12:04:18
VersionLegalCopyright: Copyright (C) 2013
InternalName: downloader
FileVersion: 3, 1, 23, 0
CompanyName: Company #1
LegalTrademarks: TM(c)
Comments: Get your downloads faster
ProductName: Get your downloads
ProductVersion: 3, 1, 23, 0
FileDescription: Get your downloads
PackerMicrosoft Visual C++ ?.?
PEhashec3f6bf661e39043432d2b9f54331ebd8bbe4871
IMPhash781bfc07dc48e0b3466413d45f3ab493
AV360 Safeno_virus
AVAd-Awareno_virus
AVAlwil (avast)no_virus
AVArcabit (arcavir)no_virus
AVAuthentiumno_virus
AVAvira (antivir)no_virus
AVBullGuardno_virus
AVCA (E-Trust Ino)no_virus
AVCAT (quickheal)no_virus
AVClamAVno_virus
AVDr. Webno_virus
AVEmsisoftno_virus
AVEset (nod32)no_virus
AVFortinetno_virus
AVFrisk (f-prot)no_virus
AVF-Secureno_virus
AVGrisoft (avg)no_virus
AVIkarusDownloader.Win32.GetFaster
AVK7Trojan ( 0049c8d01 )
AVKasperskyno_virus
AVMalwareBytesPUP.Optional.4Shared
AVMcafeeno_virus
AVMicrosoft Security Essentialsno_virus
AVMicroWorld (escan)no_virus
AVNormanno_virus
AVRisingno_virus
AVSophosno_virus
AVSymantecno_virus
AVTrend Microno_virus
AVVirusBlokAda (vba32)Downloader.GetFaster

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

RegistryHKEY_CURRENT_USER\Software\4shared\DownloadHelper\AlreadyRun ➝
1
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\UNT2.tmp
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\UNT1.tmp
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\UNT3.tmp
Creates File\Device\Afd\AsyncConnectHlp
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\UNT4.tmp
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\UNT5.tmp
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\UNT8.tmp
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\UNT7.tmp
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\UNT6.tmp
Creates File\Device\Afd\Endpoint
Winsock DNSdownloadget.net
Winsock DNSwww.adshost2.com
Winsock DNStrack.getportal.net

Network Details:

DNSdownloadget.net
Type: A
162.159.245.192
DNSdownloadget.net
Type: A
162.159.244.192
DNSdownloadget.net
Type: A
162.159.244.192
DNSdownloadget.net
Type: A
162.159.245.192
DNSwww.adshost2.com
Type: A
212.124.126.10
DNSwww.adshost2.com
Type: A
212.124.126.16
DNSwww.adshost2.com
Type: A
212.124.126.7
DNStrack.getportal.net
Type: A
178.162.201.18
HTTP GEThttp://downloadget.net/smart-download/67020300055/bundle.exe/bundle.exe?bundleorigin=4300109
User-Agent: UniversalUserAgent(winHTTP)
HTTP GEThttp://downloadget.net/smart-download/67010300055/bundle.exe/bundle.exe?bundleorigin=4300109
User-Agent: UniversalUserAgent(winHTTP)
HTTP GEThttp://downloadget.net/smart-download/67050200/bundle.exe/bundle.exe?bundleorigin=4300109
User-Agent: UniversalUserAgent(winHTTP)
HTTP GEThttp://www.adshost2.com/at?subId=MjIyOTN8NTM1Mjh8QlJ8M3wxfHw%7C91b2c621b056215c1c5339e97e804178
User-Agent: UniversalUserAgent(winHTTP)
HTTP GEThttp://track.getportal.net/trackcnt/Kvg48RpSKKFNkW8e/?data=L4300109
User-Agent: UniversalUserAgent(winHTTP)
HTTP GEThttp://www.adshost2.com/at?subId=MjIyOTN8NTM1Mjh8QlJ8M3wxfHw%7C2559fe70e84778aec687cb683b2cbd0c
User-Agent: UniversalUserAgent(winHTTP)
HTTP GEThttp://track.getportal.net/trackcnt/Kvg48RpSKKFNkW8e/?data=M4300109
User-Agent: UniversalUserAgent(winHTTP)
Flows TCP192.168.1.1:1033 ➝ 162.159.245.192:80
Flows TCP192.168.1.1:1032 ➝ 162.159.244.192:80
Flows TCP192.168.1.1:1034 ➝ 162.159.245.192:80
Flows TCP192.168.1.1:1035 ➝ 212.124.126.10:80
Flows TCP192.168.1.1:1036 ➝ 178.162.201.18:80
Flows TCP192.168.1.1:1037 ➝ 212.124.126.10:80
Flows TCP192.168.1.1:1038 ➝ 178.162.201.18:80

Raw Pcap
0x00000000 (00000)   47455420 2f736d61 72742d64 6f776e6c   GET /smart-downl
0x00000010 (00016)   6f61642f 36373032 30333030 3035352f   oad/67020300055/
0x00000020 (00032)   62756e64 6c652e65 78652f62 756e646c   bundle.exe/bundl
0x00000030 (00048)   652e6578 653f6275 6e646c65 6f726967   e.exe?bundleorig
0x00000040 (00064)   696e3d34 33303031 30392048 5454502f   in=4300109 HTTP/
0x00000050 (00080)   312e310d 0a436f6f 6b69653a 200d0a55   1.1..Cookie: ..U
0x00000060 (00096)   7365722d 4167656e 743a2055 6e697665   ser-Agent: Unive
0x00000070 (00112)   7273616c 55736572 4167656e 74287769   rsalUserAgent(wi
0x00000080 (00128)   6e485454 50290d0a 486f7374 3a20646f   nHTTP)..Host: do
0x00000090 (00144)   776e6c6f 61646765 742e6e65 740d0a43   wnloadget.net..C
0x000000a0 (00160)   6f6e6e65 6374696f 6e3a204b 6565702d   onnection: Keep-
0x000000b0 (00176)   416c6976 650d0a0d 0a                  Alive....

0x00000000 (00000)   47455420 2f736d61 72742d64 6f776e6c   GET /smart-downl
0x00000010 (00016)   6f61642f 36373031 30333030 3035352f   oad/67010300055/
0x00000020 (00032)   62756e64 6c652e65 78652f62 756e646c   bundle.exe/bundl
0x00000030 (00048)   652e6578 653f6275 6e646c65 6f726967   e.exe?bundleorig
0x00000040 (00064)   696e3d34 33303031 30392048 5454502f   in=4300109 HTTP/
0x00000050 (00080)   312e310d 0a436f6f 6b69653a 200d0a55   1.1..Cookie: ..U
0x00000060 (00096)   7365722d 4167656e 743a2055 6e697665   ser-Agent: Unive
0x00000070 (00112)   7273616c 55736572 4167656e 74287769   rsalUserAgent(wi
0x00000080 (00128)   6e485454 50290d0a 486f7374 3a20646f   nHTTP)..Host: do
0x00000090 (00144)   776e6c6f 61646765 742e6e65 740d0a43   wnloadget.net..C
0x000000a0 (00160)   6f6e6e65 6374696f 6e3a204b 6565702d   onnection: Keep-
0x000000b0 (00176)   416c6976 650d0a0d 0a                  Alive....

0x00000000 (00000)   47455420 2f61743f 73756249 643d4d6a   GET /at?subId=Mj
0x00000010 (00016)   49794f54 4e384e54 4d314d6a 6838516c   IyOTN8NTM1Mjh8Ql
0x00000020 (00032)   4a384d33 77786648 77253743 39316232   J8M3wxfHw%7C91b2
0x00000030 (00048)   63363231 62303536 32313563 31633533   c621b056215c1c53
0x00000040 (00064)   33396539 37653830 34313738 20485454   39e97e804178 HTT
0x00000050 (00080)   502f312e 310d0a43 6f6f6b69 653a200d   P/1.1..Cookie: .
0x00000060 (00096)   0a557365 722d4167 656e743a 20556e69   .User-Agent: Uni
0x00000070 (00112)   76657273 616c5573 65724167 656e7428   versalUserAgent(
0x00000080 (00128)   77696e48 54545029 0d0a486f 73743a20   winHTTP)..Host: 
0x00000090 (00144)   7777772e 61647368 6f737432 2e636f6d   www.adshost2.com
0x000000a0 (00160)   0d0a436f 6e6e6563 74696f6e 3a204b65   ..Connection: Ke
0x000000b0 (00176)   65702d41 6c697665 0d0a0d0a            ep-Alive....

0x00000000 (00000)   47455420 2f736d61 72742d64 6f776e6c   GET /smart-downl
0x00000010 (00016)   6f61642f 36373035 30323030 2f62756e   oad/67050200/bun
0x00000020 (00032)   646c652e 6578652f 62756e64 6c652e65   dle.exe/bundle.e
0x00000030 (00048)   78653f62 756e646c 656f7269 67696e3d   xe?bundleorigin=
0x00000040 (00064)   34333030 31303920 48545450 2f312e31   4300109 HTTP/1.1
0x00000050 (00080)   0d0a436f 6f6b6965 3a200d0a 55736572   ..Cookie: ..User
0x00000060 (00096)   2d416765 6e743a20 556e6976 65727361   -Agent: Universa
0x00000070 (00112)   6c557365 72416765 6e742877 696e4854   lUserAgent(winHT
0x00000080 (00128)   5450290d 0a486f73 743a2064 6f776e6c   TP)..Host: downl
0x00000090 (00144)   6f616467 65742e6e 65740d0a 436f6e6e   oadget.net..Conn
0x000000a0 (00160)   65637469 6f6e3a20 4b656570 2d416c69   ection: Keep-Ali
0x000000b0 (00176)   76650d0a 0d0a                         ve....

0x00000000 (00000)   47455420 2f747261 636b636e 742f4b76   GET /trackcnt/Kv
0x00000010 (00016)   67343852 70534b4b 464e6b57 38652f3f   g48RpSKKFNkW8e/?
0x00000020 (00032)   64617461 3d4c3433 30303130 39204854   data=L4300109 HT
0x00000030 (00048)   54502f31 2e310d0a 436f6f6b 69653a20   TP/1.1..Cookie: 
0x00000040 (00064)   0d0a5573 65722d41 67656e74 3a20556e   ..User-Agent: Un
0x00000050 (00080)   69766572 73616c55 73657241 67656e74   iversalUserAgent
0x00000060 (00096)   2877696e 48545450 290d0a48 6f73743a   (winHTTP)..Host:
0x00000070 (00112)   20747261 636b2e67 6574706f 7274616c    track.getportal
0x00000080 (00128)   2e6e6574 0d0a436f 6e6e6563 74696f6e   .net..Connection
0x00000090 (00144)   3a204b65 65702d41 6c697665 0d0a0d0a   : Keep-Alive....
0x000000a0 (00160)   30303130 39204854 54502f0a            00109 HTTP/.

0x00000000 (00000)   47455420 2f61743f 73756249 643d4d6a   GET /at?subId=Mj
0x00000010 (00016)   49794f54 4e384e54 4d314d6a 6838516c   IyOTN8NTM1Mjh8Ql
0x00000020 (00032)   4a384d33 77786648 77253743 32353539   J8M3wxfHw%7C2559
0x00000030 (00048)   66653730 65383437 37386165 63363837   fe70e84778aec687
0x00000040 (00064)   63623638 33623263 62643063 20485454   cb683b2cbd0c HTT
0x00000050 (00080)   502f312e 310d0a43 6f6f6b69 653a200d   P/1.1..Cookie: .
0x00000060 (00096)   0a557365 722d4167 656e743a 20556e69   .User-Agent: Uni
0x00000070 (00112)   76657273 616c5573 65724167 656e7428   versalUserAgent(
0x00000080 (00128)   77696e48 54545029 0d0a486f 73743a20   winHTTP)..Host: 
0x00000090 (00144)   7777772e 61647368 6f737432 2e636f6d   www.adshost2.com
0x000000a0 (00160)   0d0a436f 6e6e6563 74696f6e 3a204b65   ..Connection: Ke
0x000000b0 (00176)   65702d41 6c697665 0d0a0d0a            ep-Alive....

0x00000000 (00000)   47455420 2f747261 636b636e 742f4b76   GET /trackcnt/Kv
0x00000010 (00016)   67343852 70534b4b 464e6b57 38652f3f   g48RpSKKFNkW8e/?
0x00000020 (00032)   64617461 3d4d3433 30303130 39204854   data=M4300109 HT
0x00000030 (00048)   54502f31 2e310d0a 436f6f6b 69653a20   TP/1.1..Cookie: 
0x00000040 (00064)   0d0a5573 65722d41 67656e74 3a20556e   ..User-Agent: Un
0x00000050 (00080)   69766572 73616c55 73657241 67656e74   iversalUserAgent
0x00000060 (00096)   2877696e 48545450 290d0a48 6f73743a   (winHTTP)..Host:
0x00000070 (00112)   20747261 636b2e67 6574706f 7274616c    track.getportal
0x00000080 (00128)   2e6e6574 0d0a436f 6e6e6563 74696f6e   .net..Connection
0x00000090 (00144)   3a204b65 65702d41 6c697665 0d0a0d0a   : Keep-Alive....
0x000000a0 (00160)   0d0a436f 6e6e6563 74696f6e 3a204b65   ..Connection: Ke
0x000000b0 (00176)   65702d41 6c697665 0d0a0d0a            ep-Alive....


Strings
 
..
..
.
 
 
CC
-E-
-0
-0010+-0
0
-0
.
00-+ 
0
\
00
-...........?- 
0
0
0
0
`
a
a
+
u
.
...

000004b0
%%%02X
2Downloader Helper Maxige
3, 1, 23, 0
{374DE290-123F-4565-9164-39C4925E467B}
400 Bad Request
401 Unauthorized
403 Forbidden
404 Not Found
408 Request Timeout
500 Internal Server Error
502 Bad Gateway
503 Service Unavailable
@504 Gateway Timeout
a([a-zA-Z0-9])
ABORT_CONFIRMATION
Accept: */*
AlreadyRun
AMQUTIL.DLL
 and 
APPLICATION_NAME
Are you sure you want to abort download?
b([ \t])
BUNDLES_ACTIVATION_XEROX
button
By clicking "
By clicking "Download" you agree to
By creating account you accept our
Cancel
Cannot download file from:
Cannot download from
Cannot download the requested files.
Cannot establish connection to the server.
CAppID
c([a-zA-Z])
CDelete
CForceRemove
Change
charset={[A-Za-z0-9\-_]+}
Choose if you'd like to install Baidu PC Faster.
Choose target directory...
Cjjj
Cjjjj
Cjjjjjjjjjjjjj
CLSID
CNoRemove
Comments
Company #1
CompanyName
Component Categories
Confirm
Content-Length: 
Content-Length: {[0-9]+}
Content-Type: application/x-www-form-urlencoded
Cookie: 
Copyright (C) 2013
Create New Free Account
CVal
d([0-9])
DAppID
DDelete
DEnglish
DForceRemove
Dialog
d like to keep your PC fast and smooth throughout its life, then you can
DNoRemove
Download
downloader
Downloading...
DVal
E-mail
E-mail cannot be empty, please enter correct e-mail.
End User License Agreement
equal
.exe
file
FileDescription
FileType
FileVersion
First Name
%FIRSTNAME%
firstrunexe
folder
Get your downloads
Get your downloads faster
                                 H
         (((((                  H
h([0-9a-fA-F])
Hardware
Hash
         h((((                  H
{<html[^\>]*>.*<body[^\>]*>.*<\/body>.*<\/html>.*}
http://download-faster.net/error.jsp?msg=downloadhelperxmlnotfound
https://www.4shared.com/terms.jsp
_Hyperlink_Color_
_Hyperlink_Original_Proc_
@_Hyperlink_Original_Proc_
%i%%
I already have an account...
IDC_BUTTON_BROWSE
IDC_BUTTON_CANCEL
IDC_BUTTON_CHANGE_DST
IDC_BUTTON_CREATE_ACCOUNT
IDC_BUTTON_DOWNLOAD
IDC_BUTTON_LOGIN
IDC_BUTTON_OPEN
IDC_CB_AGREE
IDC_CB_BAIDU
IDC_CB_CHROMEEMPTYTABSet improved Google Chrome Empty Tab
IDC_CB_HOMEPAGE
IDC_LINK_DONT_HAVE_ACCOUNT
IDC_LINK_EULA
IDC_LINK_HAVE_ACCOUNT
IDC_LINK_PP
IDC_LINK_TERM_OF_USE
IDC_MAIN_BUTTON_DOWNLOAD
IDC_MAIN_TEXT_DOWNLOAD_DST
IDC_MAIN_TEXT_INTRO
IDC_MAIN_TEXT_REQUESTED_FILE
IDC_MAIN_TEXT_REQUESTED_FILE_PRE
IDC_PROGRESS_TEXT_FILENAME
IDC_TEXT_AND
IDC_TEXT_AUTH_INSTRUCTION
IDC_TEXT_DESCRIPTION_BAIDU
IDC_TEXT_DOWNLOAD_DST_PRE
IDC_TEXT_FILENAME
IDC_TEXT_FIRSTNAME
IDC_TEXT_HOMEPAGE_INSTRUCTION
IDC_TEXT_INTRO
IDC_TEXT_LOGIN
IDC_TEXT_PASSWORD
IDC_TEXT_PASSWORD_CONFIRM
IDC_TEXT_REQUESTED_FILE_PRE
IDC_TEXT_SECONDNAME
IDC_TEXT_STATUS
IDC_TEXT_STATUS_PROGRESS
I don't have an account,
If you
Ignore and continue
Interface
InternalName
Invalid DateTime
Invalid DateTimeSpan
%i%% - %s
I want to create new free account...
jjjj
jjjjj
KERNEL32.DLL
_Label_Original_Proc_
Last Name
%LASTNAME%
_Lbl_Background_Color_
LegalCopyright
LegalTrademarks
License Agreement
ll perform a complete maintenance routine, including boot time optimization, disk cleanup and much more!
Location: {[A-Za-z0-9\-_%+*:;/.=?&]+}
Location of the downloaded file:
Login
%LOGIN%
Login and Download
MESSAGE_LOGIN_EMPTY
MESSAGE_NAMES_EMPTY
MESSAGE_PASSWORD_EMPTY
MESSAGE_PASSWORD_LONG
MESSAGE_PASSWORD_MISMATCH
Mime
mscoree.dll
msctls_progress32
MS Shell Dlg
Name cannot be empty, please enter your name.
NETMSG.DLL
(null)
open
openas
Open file
Password
%PASSWORD%
Password and confirmation do not match, please enter identical passwords.
Password cannot be empty, please enter correct password.
Password ls too long, please enter shorter password.
Please go back to the site and download the file again.
POST
Privacy Policy
ProductName
ProductVersion
q("[^"]*")|('[^']*')
Quit
Range: bytes=%i-
renameto_
runas
runexe
Save the downloaded file to:
SECURITY
Server answered: 
Set-Cookie:\b*{.+?}\n
Set my homepage to search.b1.org in Internet Explorer, Firefox and Google Chrome
shell32.dll
Show
Show in Explorer
Software
Software\4shared\DownloadHelper
Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
Something's wrong either with your Internet connection or with our server. We recommend you to go back to the site and download the original file again.
Sorry, your session has expired.
static
%STATYPE%
StringFileInfo
substring
SYSTEM
t be without Baidu PC Faster. One click and you
Terms of Use
Time on your computer is incorrect, therefore cannot establish connection to the server. Please set correct time and try again.
TM(c)
Translation
triny_loder_tmp.exe
Triny Tiny Loader/2.0
TypeLib
Unexpected network error
Unexpected network error, cannot download %s
UniversalUserAgent(winHTTP)
Unknown error. Error code: 0x%x
@UNT
%URL%
URL: 
%USERPROFILE%
utf-8
VarFileInfo
VS_VERSION_INFO
w([a-zA-Z]+)
Welcome to %s Download Helper,
which will guide you through the download process.
WININET.DLL
" you agree to 
You have requested file:
You need 4Shared account to download this file:
z([0-9]+)
> >@>`>
                          
 ((((((((((((
? ?@?\?`?
? ?$?(?,?
/(((((((((((( ;
''  ;'%
+);;<+
> >$>(>,>0>
>">0>`>
%#%' 0,,
+;;;<+,0
0,);;<+
0+<;;+
)0,,++++++,0)
0+);;)+0
0.0[0~0
0$0(0,040L0\0`0p0t0x0|0
0"0(0.080>0R0h0n0u0
0!0+030@0G0w0
0 0$0M0s0
000P0X0d0
(000T0h0p0|0
0 0`1d1h1l1p1t1x1|1(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2
0,040<0D0L0T0\0d0p0
#0?0b0u0
0"0L0c0
	0'0x0
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
0/1V1[1p1
0-2c2t233B3_3
030B0Q0
031C1i1s1
,03:::9,
,03:::9;5
,03:::9:5
,03:::9;55
04080p0t0x0
04090H0Z0
]042*323
: :$:(:,:0:4:8:<:
: :$:(:,:0:4:8:<:@:D:H:L:P:T:X:\:`:d:h:l:p:t:x:|:
:,:0:4:<:T:d:h:x:|:
061116015437Z
07969287
079692870
080X0x0
> >$>(>,>0>8><>@>D>H>L>P>T>X>\>`>d>h>l>p>t>x>|>
: :(:0:8:@:H:P:X:`:h:p:x:
>$>0>8>\>p>
\$09^$
,0,::95
,0+:::9:5
0 9(9,9094989<9@9D9H9L9P9T9X9\9`9d9
~09n<v
0A@@Ju
0#**(,)-,B
0B0I0X0_0v0
;,;0;@;d;p;x;
;0;@;D;T;X;\;`;h;
<&=0=H=q=
: :$:(:0:H:X:\:l:p:t:|:
0SSSSS
0WWWWW
,0Zs%tmC54x
<!<%<)<-<1<
1#()-,;
1$101T1t1|1
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
1#1'1+1/13171;1?1C1
1*11181
1 1(1@1D1\1`1x1
1(1/171<1@1D1m1
1!1-171C1O1Y1e1q1
1<1`1l1t1
1*151C1R1o1
1#191T1h2o2J3
1-24282<2@2D2H2L2P2
1#252J2_2
1$2D2d2
130815064132Z
1'3:3I3\3
160815064132Z0e1
181@1H1P1X1`1h1p1|1
,1,::9:
>199GM W
;$;+;1;b;
1D6'7V7g7q7S8
1J2T2j2x2
?&?1?K?W?_?o?
<)=1>o>
1#QNAN
,,%1R(L],l
1S2b2q2
1#SNAN
202@2D2T2X2\2d2|2
2 2(20282@2H2P2X2`2h2p2x2
2 2(20282@2H2T2t2
2$2(2,202
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2
2$2-2>2H2S2b2j2{2
2 2@2D2L2`2h2p2x2|2
2!2,2Z2
2.2O2q2
2-2S2a2
242A2K2r2
261116015437Z0
2f``hJIIIT`d=YLYZ_AKIONbfaa
2G3X3b3
2M2 4+434I4f4
2S2b2p2
*2S3f3
2S5c536E6
<2=S=c=
2{'v0/HfM
<2=@=Z=#>2>\>
,3,)(#"
3 3$3(3,30343A3
3(3,3<3@3D3L3d3t3x3
3"3*3;3D3I3R3Z3i3p3z3
3$3,3D3L3T3\3d3p3
3&3.3Z3c3o3
3,383X3`3h3p3|3
3"3F3i3
3<3s3{3
3#3s3}3
3,3T3|3
343@3h3x3
3"4_4Q5z5
3)62686>6H6N6b6x6~6
3,6B6r6
3"&)%8
+3-899999883+
<3=B=[=%?
=3=B=Q=
<(<3<E<X<c<i<o<t<}<
3H4b4|4
+3k4?D	{ 8
3M3T3X3\3`3d3h3l3p3
"=3t=uN
3z384t4
4#(*)-(:
404<4D4\4h4
414=4C4z4
4 40444<4T4d4h4l4t4
4 40444D4H4L4T4l4|4
4 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4d4h4l4p4t4x4|4
4%4)4B4R4]4
444C4o4
4/4^4l4
4*4B4_4l4
4`4d4h4l4
4,4L4T4\4d4l4t4|4
4)535V5
4	585<5@5D5H5
4.5C6Q6
,=47*[f
484@4H4P4X4`4h4p4|4
>$>4>8>H>L>T>l>|>
>%>->4>9>A>J>V>[>`>f>j>p>u>{>
4C4R4y4
;4;D;H;X;\;`;h;
<$<,<4<<<D<L<T<\<d<l<t<|<
:4:<:D:L:T:\:h:
4E5e5U6~6
<$<4<H<P<h<t<
4K4n4s4
?(?,?4?L?\?`?h?
4L"W55
4M5U5c6u6
<4===O=U=m=t=
= =(=4=\=p=
4W5f5m5w5~5
>5?=?[?
50!101
5,50545<5T5d5h5x5|5
5$525;5J5O5Y5g5
5%5-545E5J5Q5d5x5
5#5'5+5/535O6
555;99
5 5@5H5P5X5`5h5p5x5
5(5,5P5T5X5\5`5d5h5l5
5$5)5Y5_5d5
5(585<5L5P5T5X5\5d5|5
5,5H5`5
5>5H6S6a6
5(5P5d5p5x5
5%626E6
5 6'6-6r6
5	6-6d6
5#6B6b6
5"6M6z6
5.6x6=7g7
/.56^z3( ql3s
585L5\5p5x5
5A:J:F;X;F=U=
:#;5;G;R<
5http://certificates.godaddy.com/repository/gdroot.crl0K
]5JT8j?	
5k7#858G8
5mL3H] .
5`[O`P-
5Q6b6g6
5R5_5i5w5
;5<S<e<w<
5T7X7\7`7d7h7l7p7t7x7|7
;+;5;<;T;c;j;w;
5 =X%"
5x"sDd4;7~GWJFKaLM8`~Vrt
+6%).@
6"&(())-,5
6 60646D6H6P6h6x6|6
6666665
6!6'6-6<6A6I6Q6\6w6
6$6<6L6P6`6d6h6l6t6
6$6D6L6T6\6d6l6t6|6
6(6D6X6x6
6(6H6P6X6`6h6p6x6
6#757G7i7
686D6d6p6
6B6J6U6
6C7U7g7
6O6`6r6D7N7[7v7}7
6OKKVKP
6S7a7z7
>6>S>p>
%6sY8e
6v".IUrLuZ
6x7n8v8)9
6ZhTv9
70747T7x7
727F7T7
738B8P8
7"717W7^7l7y7
7(7,7074787<7D7\7l7p7
7$7,747<7D7L7T7`7
7$7,747<7D7L7T7\7h7
7 7$7(7,7074787<7@7D7H7L7P7X7\7`7d7h7l7p7t7x7|7
7$7)7/797B7M7Y7^7n7s7y7
7"7*7A7Y7`7f7v7{7
7%7+7c7r7
7$7<7P7
7(787<7L7P7T7X7\7d7|7
7/7B7P7T7X7\7`7d7h7
77%d[xZY`/C
7"7F7X7f7{7
7 7L7T7x7
7!8&8.8=8
7#8E8g8
7@=D=H=L=P=T=X=\=`=d=h=l=p=t=x=|=
>/>7>>>D>N>X>n>
<7I,hv%
7L9P9T9
7P8]8f8
7rPF =V3<^
839E9W9
839F9l9
,8+4xjUb`U`X}qcSbRa
869X9b9h9n9u9{9
8.:7:A:P:g:w:
	87S"bt
8::::8-
8(848T8\8d8p8
8 8$84888H8L8P8X8p8
8$8,848<8D8L8T8\8d8l8t8|8
8(8-848t8
8%8.858>8~8
8 8$8(8,8084888<8@8D8H8L8P8T8X8\8`8d8h8l8p8t8x8|8
8 8$8,8D8T8X8h8l8p8t8|8
8"8(8K8R8k8
8$8D8\8x8
8 8D8d8l8t8|8
8$8D8L8X8|8
8::;9+
8#919J9
]89]4v
8!989I9
8'9`9}9
8(9V9h9
8=C~G`
: :8:D:d:l:x:
8ecbbe
:8:=:G:U:q:
8I8R8n84;;;S;f;
8J9U9_9p9{9.;?;G;M;R;X;
`8JKIOn1$
8mo^((O
{8mX:I;su
=8=T=X=t=x=
\$`9^,
\9%:\\
90;@;^;
949@9`9h9t9
98;;;;3>M>IF
989@9H9P9\9|9
!-9:;;:::::::;;:9-,00
9,909@9D9L9d9t9x9
9)92989A9F9U9|9
9 929V9
9$94989H9L9P9X9p9
9 9(90989@9H9P9X9`9h9p9x9
9$9,949<9D9P9p9|9
9#9)9[9
:::::::::9999::;:-,00000
9 9$9(9,9094989<9@9D9H9L9P9T9X9\9`9d9h9l9p9t9x9|9
9<9f9z9
9,9H9d9
9*9I9f9
9*9R9z9
:$:*:9:B:
9/:C:Q:t:
9C:V:l;
9:Cxb=
9D$$SU
9E9g9G:w:
9":(;@;G;u;
9[:j:s:
9mFQcEc
^@9n8r
^\9nTr
9|$$_^r
[9\$<t
9\$(t-
9\$(t3
9\$ uf
9\$(uF
9ve(MiN`W
&%)-.A,=
 a"+8(G',
AAFFf;
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
ADVAPI32.dll
a[\]jT
A;L$ t
america
american
american english
american-english
An application has made an attempt to load the C runtime library incorrectly.
AppendMenuW
Arizona1
      <assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="x86" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity>
</assembly>PAD
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
~a;t$l
- Attempt to initialize the CRT more than once.
- Attempt to use MSIL code from this assembly during native code initialization
	at`vob
.?AUctype_base@std@@
August
.?AUIFake@@
.?AUITextWidther@@
australian
autolaunch
.?AVbad_alloc@std@@
.?AVbad_cast@std@@
.?AVbad_exception@std@@
.?AV?$basic_ios@DU?$char_traits@D@std@@@std@@
.?AV?$basic_ostream@DU?$char_traits@D@std@@@std@@
.?AV?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AV?$basic_streambuf@DU?$char_traits@D@std@@@std@@
.?AV?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@
.?AVCAtlException@ATL@@
.?AV?$ctype@D@std@@
.?AVCustomWindow@@
.?AVDiskFile@@
.?AVexception@std@@
.?AVfacet@locale@std@@
.?AVfailure@ios_base@std@@
.?AVFileBase@@
AvG^<y}V?+
.?AVios_base@std@@
.?AV?$_Iosb@H@std@@
.?AVLabelTextSetter@@
.?AVlength_error@std@@
.?AVLoaderCallback@@
.?AV_Locimp@locale@std@@
.?AVlogic_error@std@@
.?AVLoginWindow@@
.?AVMainDownloaderWindow@@
.?AVMainWindow@@
.?AVMemoryFile@@
.?AV?$MemPoolT@$0CE@@tinyxml2@@
.?AV?$MemPoolT@$0CM@@tinyxml2@@
.?AV?$MemPoolT@$0DA@@tinyxml2@@
.?AV?$MemPoolT@$0DE@@tinyxml2@@
.?AVMemPool@tinyxml2@@
.?AVNullFile@@
.?AVout_of_range@std@@
.?AVProgressDownloaderWindow@@
.?AVruntime_error@std@@
.?AVScreenBase@@
.?AVScreenLogin@@
.?AVScreenRegistererBase@@
.?AV?$ScreenRegisterer@VScreenLogin@@@@
.?AV?$ScreenRegisterer@VScreenSignUp@@@@
.?AVScreenSignUp@@
.?AV?$Screen@VScreenLogin@@@@
.?AV?$Screen@VScreenSignUp@@@@
.?AVServerResponsesHandler@@
.?AVtype_info@@
.?AVUrlOpener@Utilities@@
.?AVWinHttpSmartLoader@@
.?AVXMLAttribute@tinyxml2@@
.?AVXmlBackImage@@
.?AVXmlBinary@@
.?AV?$XmlBundledContent@VXmlComplexDescriptionBundle@@@@
.?AVXmlBundleEulaText@@
.?AVXmlBundleLine@@
.?AVXmlBundleNumber@@
.?AVXMLComment@tinyxml2@@
.?AVXmlComplexBundlesLoadManager@@
.?AVXmlComplexDescriptionBundle@@
.?AVXmlContentBase@@
.?AVXmlContentData@@
.?AVXMLDeclaration@tinyxml2@@
.?AVXMLDocument@tinyxml2@@
.?AVXMLElement@tinyxml2@@
.?AVXmlExBundle@@
.?AVXmlFileFolderCheck@@
.?AVXmlFileFolderCheckers_OR@@
.?AVXmlIconedBundle@@
.?AVXmlLaunchValidation@@
.?AVXmlLoaderBase@xml@@
.?AVXmlLoadManager@@
.?AVXMLNode@tinyxml2@@
.?AVXmlRawBundle@@
.?AVXmlRegCheck@@
.?AVXmlRegCheckers_OR@@
.?AVXMLText@tinyxml2@@
.?AVXmlUniversalStyleContent@@
.?AVXMLUnknown@tinyxml2@@
.?AVXmlValidationResponse@@
aVX^X[]WOOdEFF?d^`^`i
+b6xh0jZ8
backimages
bad allocation
bad cast
bad exception
 Base Class Array'
 Base Class Descriptor at (
__based(
=bB8tD-!6
BBIZL.
 bD[}!db;J- =,'~!
BeginPaint
belgian
BHHHHIHHGFDKKKK[[ZVZVKKVZVVVUIIWYS@HKU[UZXY
binary
BitBlt
bk#r;gs;;NC
B&"{L`-p
bottom
BP\;:vxS
britain
bubY)=
bundlebeforelaunch
bundle%d
bundle%dbuttonLabel
bundle%deulatext
bundle%dex
bundle%dheader1
bundle%dheader2
bundle%dheader3
bundle%dicon
bundle%dlines
bundledownloaderror
bundledownloadstart
bundledownloadsuccess
bundle%drequestLabel
bundlelauncherror
bundlelaunchsuccess
bundlestimeout
buttonLabel
C0`1e1
CallWindowProcW
canadian
cancelbutton
C+++)C
<![CDATA[
__cdecl
"C=dwE"
:c^^`^f>KIPN]bdgPW\j=KK?d^^^j@KHIAgW]c`Xbbch@
checkbox
CheckDlgButton
chinese
chinese-hongkong
chinese-simplified
chinese-singapore
chinese-traditional
:c:h:r:
Ciqxx~xx
 Class Hierarchy Descriptor'
CloseHandle
__clrcall
CMYQOPL
CoCreateInstance
CoInitializeEx
COMCTL32.dll
 Complete Object Locator'
CONOUT$
`copy constructor closure'
Copyright (c) 1992-2004 by P.J. Plauger, licensed by Dinkumware, Ltd. ALL RIGHTS RESERVED.
CorExitProcess
CoTaskMemFree
CoUninitialize
C PjPV
C$PjQV
C.PjRV
C/PjSV
C*PjTV
C+PjUV
C,PjVV
C-PjWV
=!>C?R?a?
CreateCompatibleBitmap
CreateCompatibleDC
CreateDialogIndirectParamW
CreateDialogParamW
CreateEventW
CreateFileA
CreateFileW
CreateFontIndirectW
CreateFontW
CreateMutexW
CreatePatternBrush
CreatePopupMenu
CreateSolidBrush
CreateThread
CreateWindowExW
- CRT not initialized
;C<U<v<&=S=S?a?
;+c&~W
Cyprus1
:;cY};r_	B
D$ _^][
D$0+D$(
D$0SUVW
D$49l$hr
d5!]X"v)08
D$8jdP
|$d8^L
D$8SUVW
D$$9\$8s
D$|9l$tr
D$@9\$pr
D$\9|$ps
@.data
>#?D?c?m?s?
D$,+D$$
D$(,%D
D$(+D$ 
D$D;D$@
DDDDDDDF?
dddd, MMMM dd, yyyy
December
DecodePointer
`default constructor closure'
 delete
 delete[]
DeleteCriticalSection
DeleteDC
DeleteFileW
DeleteObject
  </dependency>
  <dependency>
    </dependentAssembly>
    <dependentAssembly>
DestroyMenu
DestroyWindow
<D=H=L=P=X=`=h=p=|=
D$HSUVW
D.h!zU
Diaotfutffuuuufutytyytfu  }}yyt{{{{{{zyz{y
DispatchMessageW
:D:J:U:a:v:}:
D$(l$D
<(<,<<<@<D<L<d<t<x<
D$lSUV
?<?D?L?T?\?d?l?t?|?
<d?l?t?x?
;=;d;m;
&d_mr![
DOMAIN error
downloaderror
downurl
D$<P	D
D$<PQP
D$PSUVW
D$ PUV
D$@PWV
DrawTextW
D$$RPW
D!s=mo`=Y"7
D$ SUV
D$\SUV
D$|SUVW
D$ SUVW
D$,SUVW
D$(SUVW
D$\SUVW
D$<SVW
D$$SVW
D$\SVW
?<?d?t?
dutch-belgian
D$$VPVS
D$ VSUP
D$X9l$ls
D$x9|$pr
D$xSUVW
`dynamic atexit destructor for '
`dynamic initializer for '
,<%':]^E
?#?)?E?
EB>	NtG]cq=@m
E<F9B7OV}iU.^Nv?
`eh vector constructor iterator'
`eh vector copy constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`eh vector vbase copy constructor iterator'
<E<K<g<
eL{*bM;(q
[e)LKs"swNIO%?MbJ 
EnableWindow
EncodePointer
EndDialog
EndPaint
england
english-american
english-aus
english-belize
english-can
english-caribbean
english-ire
english-jamaica
english-nz
english-south africa
english-trinidad y tobago
english-uk
english-us
english-usa
EnterCriticalSection
EnumChildWindows
EnumSystemLocalesA
E=@!P4==@@@@@==?4T!=EBBE=
E+r"V L
eSPwyV8k<
ExitProcess
ExpandEnvironmentStringsW
expire
externals
extra1
extra2
extra3
=;=@=f=
F09n(u
F49n,r
@@f90u
F\9nTr
F<9|$(r
failon302redirect
__fastcall
fB"^bC
February
<f"ESL?
filecheck
fileName
FillRect
fixHeight
FL9nDr
- floating point support not loaded
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
;F,~LSW
FlushFileBuffers
FormatMessageW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
french-belgian
french-canadian
french-luxembourg
french-swiss
Friday
Ft9nlr
ft<`B|-KjrI)y
(f;)u&
Fx9npr
FX9nPr
G0c0u1
'G*2<:L-1PGW
G6(=^kZCxK55
g6-L~b-TCT
GAIsProcessorFeaturePresent
GDI32.dll
german-austrian
german-lichtenstein
german-luxembourg
german-swiss
GetACP
GetActiveWindow
GetAncestor
GetClientRect
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCPInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetCursor
GetCursorPos
GetDlgItem
GetDlgItemTextW
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileAttributesW
GetFileSize
GetFileType
GetLastActivePopup
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetMessageW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetObjectW
GetOEMCP
GetParent
GetProcAddress
GetProcessWindowStation
GetPropW
GetStartupInfoA
GetStdHandle
GetStockObject
GetStringTypeA
GetStringTypeW
GetSysColorBrush
GetSystemTimeAsFileTime
GetTempFileNameW
GetTempPathW
GetTextExtentPoint32W
GetTickCount
GetUserDefaultLCID
GetUserObjectInformationA
GetVersionExW
GetWindowLongW
GetWindowRect
GetWindowTextW
G~(EXsZ
GFFGCYVUUXWU[W[[dBFD=h\^\_
gGFdw%E	
GGGGGGGIIOPOGOWWWWWWW[UUUUUUUUUOUOUQ7
GGIIOOIUZ]>DDD@d=DFDFDDDDDD=
GHIIIIHOVc
GIOOOOIZZ[TGHD@j4FFGHGGFFFDB4FDF??BDFDB
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
(Go Daddy Class 2 Certification Authority0
GoDaddy.com, Inc.1301
'Go Daddy Secure Certification Authority1
great britain
<G<T<^<c<
GVC;*++<T
,GXf73RB
`h````
H0`0o0
h8p8x8
hcenter
header1
header2
header3
HeapAlloc
HeapCreate
HeapFree
HeapReAlloc
HeapSize
<(<H<h<
:(:H:h:
`h`hhh
?HHHHHHHGIIOOOHO[W[W[[UOUUUUUUOIIVUUUO[W
@HHHHHHHHHOOOUHO[W[W\WOPUU[[UUOPM>PIUUUZ\X
HHHHIIHIOO>>@@QZ`TaS@@aSaSSQIQST44JSPVVW[[`Q
; ;H;h;l;
HH:mm:ss
;$;H;h;p;x;
HHtYHHt
ho^HY?sJ	6oP
holland
hong-kong
h=++);T
*http://certificates.godaddy.com/repository0
+http://certificates.godaddy.com/repository/0
*http://certificates.godaddy.com/repository100.
>http://certificates.godaddy.com/repository/gd_intermediate.crt0
"http://crl.godaddy.com/gds5-16.crl0S
http://ocsp.godaddy.com0F
http://ocsp.godaddy.com/0J
<H<U<Z<h<t<{<
h=*++<?Vf
hW"CIe
> >H>X>d>l>
hybridFileName
hybridUrl
:H;Z;g;s;};
_i1sofe
I3FFFF197jAkkkjB
I9$&*77j
Ib_ir/
IIOOUOEP[[gEFD=_c.FFHH>JMA>A6BB)eed>FFD?CUX\ci7
IJe"j>-o;
ijZxWwb
images
IMNF&((7
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedDecrement
InterlockedIncrement
InvalidateRect
invalid map/set<T> iterator
invalid string position
ios_base::badbit set
ios_base::eofbit set
ios_base::failbit set
irish-english
IsDebuggerPresent
IsDialogMessageW
IsDlgButtonChecked
IsValidCodePage
IsValidLocale
IsWindow
italian-swiss
#iu0T?
]~[iYonL{?X~*Z27S:
:*;J;};
j2j2QShN
j	=5l:d
j,;8.aR;U=
JanFebMarAprMayJunJulAugSepOctNovDec
January
j-d|[=#j
j@j ^V
	jK	"oH
jLFuAu
.js8k2
jS^iL1gx#1%E 
j"^SSSSS
:#;J;z;,<
K1%)-.@
,k9arhZM-_s=t
:KdCbSN`
KERNEL32
KERNEL32.dll
>KHKAkW]cbXbch>
KillTimer
,KK0nt:ISwMuT`x:^v`Ttb
kkkkkkkDV
kkqVVb 
klS8po)	~'
kN?'D7)
=?=K=r=
"KS``h<
K .=txh'7`o-
ktxxppmpxv
K :x7V!(C5?K	
,K;x)C
Ky)<h1
%k[y((.m
k|Zt<0<Bn~`
L$4jdQ
L$4QRP
L$4QSSh5
L$4QWSU
L$4RPQ
l$4VSRU
 %L6k]kV;7
l$89l$4v
L$8jdQ
L$8QVS
L8[vytt{tzzy}yyz
L$@9l$pr
L$$9|$Tr
L&%-.AS
launch-params
launch-type
launchValidation
|Lb|XS(o
LC_ALL
LC_COLLATE
LC_CTYPE
LCMapStringA
LCMapStringW
LC_MONETARY
LC_NUMERIC
LC_TIME
LeaveCriticalSection
leftBorder
LgZK=(y`]6
L$h_^[3
LHC<``^JJsVF
L$hQUh
L$(hX	D
Limassol1
line%d
Lk^^dvC
L$l_^]
L$ +L$
L$$+L$
L$l_^3
LLxzZL7K7 m~
LMYMMMMMMYJL_cbccc_
l=^n	U;i
LoadBitmapW
LoadCursorW
LoadIconW
LoadImageW
LoadLibraryA
LoadLibraryW
LocalFree
`local static guard'
`local static thread guard'
`local vftable'
`local vftable constructor closure'
=$=L=`=p=
L$p_^][3
l$Ph8!D
L$ QSh3
L$ QSUR
L$ QUV
L$<QVP
L$ QWSR
lR0hjb
:L;R;b;
L$$RPQ
L$ SQSR
lstrcatW
lstrcmpiA
lstrcmpiW
lstrcpynW
lstrcpyW
lstrlenA
lstrlenW
ltppuvvuqptL
;@;L;T;t;
L',)ty9tN 6(q^Kur"	KZiq
lummz.
LV?0%)7R(5
lzurmqt|
>&%))%M
_|m38^%`
M4uI%(4Y
M&%**-7-*
:M7!(,Nv
=[%"(M8
mainbundle
maincheckbox
`managed vector constructor iterator'
`managed vector copy constructor iterator'
`managed vector destructor iterator'
map/set<T> too long
masteraction
masterrun
masterstart
maxiget
Maxiget Limited0
Maxiget Limited1
)Mc|{W:
mDfjJg^nmc)
message
MessageBeep
MessageBoxA
MessageBoxW
metalink
</metalink>
metaurl
Microsoft Visual C++ Runtime Library
Mm=8k4PiI9
MM/dd/yy
MMn???>j
.=''MNKdiQ)
Monday
MoveFileW
MoveWindow
Movxb^
m |R,w9xZ
mTu,ZK
MultiByteToWideChar
;#;:;@;M;V;c;p;z;
mW9	X	Ys
N3%).@
N##$5/HHll=mmH
(N5JUBKyk_ZG4
N<9n4r
N@9n8r
 new[]
new-zealand
Nh9n`r
n+>IIQ
NKIOOKYdhMKKIQPIOKPdiQDIIIOIOIKAhbcc`bfT
n}MN"(
norwegian
norwegian-bokmal
norwegian-nynorsk
Norwegian-Nynorsk
- not enough space for arguments
- not enough space for environment
- not enough space for locale information
- not enough space for lowio initialization
- not enough space for _onexit/atexit table
- not enough space for stdio initialization
- not enough space for thread data
November
NP9nHr
N,QhP&D
Ns6IZ"AmF
Nt9nlr
(null)
N"[V{3zqMY"mN
Nx9npr
:_:o:{:
O>190)790;U
O6190i.AA,'
October
<"<;<O<f<
offset
OIOUOWaaUZe=DF?gZe5HFFB6gWcaM%2`[[\j>FHD
ole32.dll
`omni callsig'
O<;OD~
OOOUZXaY[[f>FHEg\[a
operator
oS=lCXn%SFY~t
>oumxw
:!:P:_:
__pascal
PathFileExistsW
PathIsDirectoryW
PathRemoveFileSpecW
PathRenameExtensionW
PathStripPathW
pJ57"}E^
: :$:(:,:P:l:
`placement delete closure'
`placement delete[] closure'
Please contact the application's support team for more information.
policy
portuguese-brazilian
PostMessageW
PostQuitMessage
PPPPPPPP
PQRWVS
PQSUVW
pr china
pr-china
Program: 
<program name unknown>
|psu{umpm{
= =(=@=P=T=d=h=l=t=
__ptr64
<,<<<@<P<T<\<t<
{pttxxptrxv
puerto-rico
- pure virtual function call
<,<P<X<
>(>/>Q>
q2bK9%y
Q\^dEH?EHHFF4c^``^ci@7
|[qjwxXxh
QQSVWd
QueryPerformanceCounter
q}vF8J
= =&=@=Q=W=h=
QZ\[c_
radiocustom
radioquick
RaiseException
`.rdata
RdSSOIKAceEDQNSCQKIBeh4SSTRQIIKAk]cfb`ceS
ReadFile
regcheck
regcheck_notexists
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
ReleaseDC
@.reloc
RemovePropW
        <requestedExecutionLevel level="requireAdministrator" uiAccess="false"></requestedExecutionLevel>
      </requestedPrivileges>
      <requestedPrivileges>
requestLabel
__restrict
R=KIMM1&%;
RPKKKKIKKS
r) sd("N
RtlUnwind
runtime error 
Runtime Error!
r=Z9 US
r!Z}F|.FVZNroS5
<!--%s-->
<?%s?>
s0Z=nlFz6,ZFC6UKysnxi6
S6k-;7J47>jZ
Saturday
>S?b?q?
SBY(A=s94
`scalar deleting destructor'
Scottsdale1
ScreenToClient
    </security>
    <security>
SelectObject
SendMessageW
September
SetBkMode
SetCursor
SetDlgItemTextW
SetEvent
SetFilePointer
SetFocus
SetHandleCount
SetLastError
SetPropW
SetStdHandle
SetTextColor
SetTimer
SetUnhandledExceptionFilter
SetWindowLongW
SetWindowPos
SetWindowTextW
\$ Sh8
SHBrowseForFolderW
SHCreateDirectoryExW
SHELL32.dll
ShellExecuteExW
Shell_NotifyIconW
SHGetPathFromIDListW
SHGetSpecialFolderPathW
SHLWAPI.dll
SHOpenFolderAndSelectItems
SHOpenWithDialog
ShowWindow
signupurl
SING error
S"i'`Q(
-sIrWj/u
SKKKKKKKKDPibbcc`fS
slovak
s(mWr9
s"o6=`
south africa
south-africa
south korea
south-korea
spanish-argentina
spanish-bolivia
spanish-chile
spanish-colombia
spanish-costa rica
spanish-dominican republic
spanish-ecuador
spanish-el salvador
spanish-guatemala
spanish-honduras
spanish-mexican
spanish-modern
spanish-nicaragua
spanish-panama
spanish-paraguay
spanish-peru
spanish-puerto rico
spanish-uruguay
spanish-venezuela
|~sppq~xsxv
s(rXMws+
s[S;7|G;w
ssDER;
^SSSSS
stats-url
stats-url2
staturl
+s +t$D
__stdcall
`string'
string too long
StrStrIW
StrToIntExW
subidlaunch
^SU? ^j8s DFs`UF
Sunday
SunMonTueWedThuFriSat
svnup.sh
swedish-finland
	sx=g|=V
:=sxZj;
+||sZ-ed
;|$$t	
\$ ;\$(t
;(<.<?<T<
t)^0G-'
T$49t$dr
T$4PPj
T$4RVj
t$4;t$8v
T$4WUj
>T72x	xcv4t
t7h(#D
t$89t$4v
T$8jdR
"t9Gl6
T$ 9l$4s
t"9l$lr
T$ 9l$Pr
t!9^`r
T$,9t$lr
T$@9t$pr
T$\9|$Tr
T^b]X`c`eo7
)-tbZAk%t
T$DRVP
TEj'-Z({`P
T^^^``\eMKK?g^^^UW^eCHIDA_\b
t%eo1t
TerminateProcess
: :<:T:h:
t"h4'D
t"h<'D
t$h :D
The Go Daddy Group, Inc.110/
+t HHt
This application has requested the Runtime to terminate it in an unusual way.
__thiscall
This indicates a bug in your application.
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
!This program cannot be run in DOS mode.
t=h@KD
Thursday
tinyxml2::XMLDocument error id=%d str1=%s str2=%s
T$<jdR
*-tk4o
< tK<	tG
TLOSS error
T$lRPQW
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
tmh,#D
{~~~~~~tn	>;91
tNhDKD
topBorder
T$$PQPR
TPVW[X_?
TQPOOPT
T$,QRP
T$$QRW
T$ QSSSWRP
tR99u2
TrackPopupMenuEx
TranslateMessage
trinidad & tobago
trinity.void.v3
T$ RQPW
T$$RSUV
  </trustInfo>
  <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
T$ RVWS
T$ RWSP
ts9^hu
T$ SRSQ
t"SS9]
<+t(<-t$:
t$@+t$<
t$TQVP
ttufffffffffffftttuuff  ytttuffffff{tufttuffwi:U
t$<"u	3
Tuesday
;t$,v-
T$ VQR
T$$VQR
t VV9u
TW,4dv-,Z
 twsM&7
t+WWVPV
txjLW,;cpA
txl(%=m4yFcXM^x	A#4Bb=)(
 Type Descriptor'
`typeof'
t%z-oVUb
U16OXb9*h
u	_^]2
u	]_^3
u4;u8v
>u5d		
u-9^`r
u?9^`r
#'ua9	
`udt returning'
(uD,WY}xR%
u;h0SD
u&h @D
u%hHKD
u,h(SD
*`uh:UjD
u)jAXf;
- unable to initialize heap
- unable to open console device
__unaligned
- unexpected heap error
- unexpected multithread lock error
UnhandledExceptionFilter
UNICODE
uninstall
united-kingdom
united-states
universal.catalina.v3
universal.newit.v3
universal.v3
Unknown exception
UnL??6j
UpdateWindow
uQh@0D
UQPXY]Y[
u*QVoZS_[bU"I
url_download_method
url_params
URnB|. 
URPQQh
 uS7`jvr	=m
USER32.dll
USER32.DLL
Us;<ygkd l
UTF-16LE
UUPQRUUS
UUWQWnidD9
u,VVWV
u)Whp!D
uxptnl|pqx|
)uz	=]kkGh
V09n(r
V<9n4r
V@9n8r
V\9nTr
`vbase destructor'
`vbtable'
`vcall'
vcenter
%v=CU	9RDw[q
VDkkkkkkkS
VDRh\&D
`vector constructor iterator'
`vector copy constructor iterator'
`vector deleting destructor'
`vector destructor iterator'
vector<T> too long
`vector vbase constructor iterator'
`vector vbase copy constructor iterator'
vfrWy?KL5
`vftable'
Vh'tM`D
virgin
VirtualAlloc
`virtual displacement map'
VirtualFree
Vj@hhHD
Vj j j
Vl9ndr
&v.`MR
v	N+D$
V\Rh@&D
Vr#I8/6IXuR.I4ZI0ss
*vSI~ 	=4}-YI4f
vT+vK|^
_VVVVV
VX9nPr
vxmuo	
vzyyz|
W*8-C9
W8\$dt/
WaitForMultipleObjects
WaitForSingleObject
WBRPSU
/.w'D=x*
Wednesday
WideCharToMultiByte
WinHttpAddRequestHeaders
WinHttpCloseHandle
WinHttpConnect
WinHttpCrackUrl
WINHTTP.dll
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpOpen
WinHttpOpenRequest
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpReadData
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpSetOption
WinHttpSetStatusCallback
WinHttpSetTimeouts
WinHttpWriteData
wintitle
WI$,-.S
!WIU?j
W`J`J|
wprmlvxqu.
w~q}uztx~}k	490
WriteConsoleA
WriteConsoleW
WriteFile
^<W;^@v
WV:ig}}}
WVOO[[XP[\cAFHGN]\Uf
^WWWWW
W[\XhM
~WZ4(T
Wz7S`M"Q
wzusssun
WZUW\\UW^`NGHHAc^WUf
]Xa)4J
>'>X>e>
x"EH#WPZD;
Xj0j2j2j
XkJu0q2
xml version="1.0"
<?xml version="1.0" encoding="UTF-8"?>
xml version="1.0" encoding="UTF-8"
?,?@?X?p?|?
xppwpp
xpxxxx
XqcJv:'
xsvx4k7WV,m~h"=
:X%U0]492
X[[WX^WW`dBHK>_^^W\f
}xx}  
xxc(drE`(T
]\\X^`X\h?KF@e\`XX^flGKF?CW^i?DFKGHH4h\Xbb``j
<.=_=y=
~$_^]Y
yd"D)%5U
Yi"Ttj,t%WuFoJ/QxL 
ypspu{zrtx{
ySmZrL1/s<sn+
}yt{{  
>=Yt1j
YU^\]<TTN>HGD=h\^`^hR77
y<W.T7{Hhi~=
y~x~~pt~xo
yxqmz{urpy
]_^^__^YY\\\]YZZZYY]ee\\]bccY]e_e^___ddddZZd^_]]^e  ]_^^__^YY\\\]YZZZYY]ee\\]bccY]e_e^___ddddZZd^_]]^e  ]_^^__^YY\\\]YZZZYY]ee\\]bccY]e_e^___ddddZZd^_]]^e  ]_^^__^YY\\\]YZZZYY]ee\\]bccY]e_e^___ddddZZd^_]]^e  gYYggggYYddYYYccYYYYdddpX`ggdYddddg^^ddddYdYdYgggg  gcdgggsffggddftttfffcdgaia`ggdcgddgggfccdggcccgggf  uuuuffffffffuffutffffsa7<:P
{yyzw.z{.C
z<(4XZ'
}`z5:Lx
$$>Zd8?L4sX>$
ZhD6t-sc
Zkk:[nN
zMW?o`P|I
Zp	uhc
zpxxxrsxy
Zq J,7
-Z[(U	CUZmGiIp"QB6sY
Z];Wd|?:l