Analysis Date2015-05-29 13:50:59
MD5c644f9012b7b6e63012cb99e87463a82
SHA1cac02e40656c1c73f3808659a11789f2e3c8911a

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: bc6e68ff5d79c469c6a77a6bd2603f04 sha1: 20d4b13fece1497c1f8fb098de9fade3cb2dbba8 size: 198656
Section.rdata md5: c60caedb86adaa4dac57bc7537126219 sha1: f71ba035acc7e05127c4ec6db71f2f33d852d753 size: 53248
Section.data md5: 267bba12a9a7dc6bbe6dbcc70a5f938f sha1: 1b8c5ed5a8aeb30f1090ab7750e399f404618f32 size: 7680
Section.reloc md5: 356a6b9ff49774080002f6c4e042e5a0 sha1: 44d2a621af69d084bc2625c3861a302229f05e4b size: 14848
Timestamp2015-04-29 18:49:58
PackerMicrosoft Visual C++ 8
PEhash6a13bb3b15941877d87959a5830a30017c8369fd
IMPhashd15084de5c063450c3e88545ea9f9001

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates FileC:\WINDOWS\jnmleqriiwmrx\qkxhnra
Creates FileC:\jnmleqriiwmrx\xazmj1kt5p0gxyy0jiwgz.exe
Creates FileC:\jnmleqriiwmrx\qkxhnra
Deletes FileC:\WINDOWS\jnmleqriiwmrx\qkxhnra
Creates ProcessC:\jnmleqriiwmrx\xazmj1kt5p0gxyy0jiwgz.exe

Process
↳ C:\jnmleqriiwmrx\xazmj1kt5p0gxyy0jiwgz.exe

RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Keying Firewall Volume Security ➝
C:\jnmleqriiwmrx\xoysllo.exe
Creates FileC:\jnmleqriiwmrx\xoysllo.exe
Creates FileC:\WINDOWS\jnmleqriiwmrx\qkxhnra
Creates FileC:\jnmleqriiwmrx\qkxhnra
Creates FilePIPE\lsarpc
Creates FileC:\jnmleqriiwmrx\k6zwwrrqm
Deletes FileC:\WINDOWS\jnmleqriiwmrx\qkxhnra
Creates ProcessC:\jnmleqriiwmrx\xoysllo.exe
Creates ServiceiSCSI DNS Discovery Connect Publication - C:\jnmleqriiwmrx\xoysllo.exe

Process
↳ C:\WINDOWS\system32\svchost.exe

Process
↳ Pid 804

Process
↳ Pid 856

Process
↳ C:\WINDOWS\System32\svchost.exe

Creates FileC:\WINDOWS\system32\WBEM\Logs\wbemess.log

Process
↳ Pid 1212

Process
↳ C:\WINDOWS\system32\spoolsv.exe

RegistryHKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\BeepEnabled ➝
NULL
RegistryHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\System\Print\TypesSupported ➝
7
RegistryHKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\Printers\SymbolicLinkValue ➝
NULL
RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Print\Printers\DefaultSpoolDirectory ➝
C:\WINDOWS\System32\spool\PRINTERS\\x00

Process
↳ Pid 1860

Process
↳ Pid 1128

Process
↳ C:\jnmleqriiwmrx\xoysllo.exe

Creates Filepipe\net\NtControlPipe10
Creates FileC:\WINDOWS\jnmleqriiwmrx\qkxhnra
Creates FileC:\jnmleqriiwmrx\qkxhnra
Creates FileC:\jnmleqriiwmrx\k6zwwrrqm
Creates File\Device\Afd\Endpoint
Creates FileC:\jnmleqriiwmrx\jcwhmek.exe
Creates FileC:\jnmleqriiwmrx\z20vzgzoie
Deletes FileC:\WINDOWS\jnmleqriiwmrx\qkxhnra
Creates Processdbovkw4amrhx "c:\jnmleqriiwmrx\xoysllo.exe"

Process
↳ C:\jnmleqriiwmrx\xoysllo.exe

Creates FileC:\WINDOWS\jnmleqriiwmrx\qkxhnra
Creates FileC:\jnmleqriiwmrx\qkxhnra
Deletes FileC:\WINDOWS\jnmleqriiwmrx\qkxhnra

Process
↳ dbovkw4amrhx "c:\jnmleqriiwmrx\xoysllo.exe"

Creates FileC:\WINDOWS\jnmleqriiwmrx\qkxhnra
Creates FileC:\jnmleqriiwmrx\qkxhnra
Deletes FileC:\WINDOWS\jnmleqriiwmrx\qkxhnra

Network Details:

DNSthroughdried.net
Type: A
95.211.230.75
DNSlittlemister.net
Type: A
199.34.228.57
DNSlittleriver.net
Type: A
66.151.181.49
DNSlittleangry.net
Type: A
DNSdestroyarticle.net
Type: A
DNSlittlearticle.net
Type: A
DNSriddendried.net
Type: A
DNSbelongdried.net
Type: A
DNSriddenfifteen.net
Type: A
DNSbelongfifteen.net
Type: A
DNSriddenangry.net
Type: A
DNSbelongangry.net
Type: A
DNSriddenarticle.net
Type: A
DNSbelongarticle.net
Type: A
DNSchairdried.net
Type: A
DNSthosedried.net
Type: A
DNSchairfifteen.net
Type: A
DNSthosefifteen.net
Type: A
DNSchairangry.net
Type: A
DNSthoseangry.net
Type: A
DNSchairarticle.net
Type: A
DNSthosearticle.net
Type: A
DNSwithindried.net
Type: A
DNSsufferdried.net
Type: A
DNSwithinfifteen.net
Type: A
DNSsufferfifteen.net
Type: A
DNSwithinangry.net
Type: A
DNSsufferangry.net
Type: A
DNSwithinarticle.net
Type: A
DNSsufferarticle.net
Type: A
DNSeffortdried.net
Type: A
DNSeffortfifteen.net
Type: A
DNSthroughfifteen.net
Type: A
DNSeffortangry.net
Type: A
DNSthroughangry.net
Type: A
DNSeffortarticle.net
Type: A
DNSthrougharticle.net
Type: A
DNSforgetdried.net
Type: A
DNSincreasedried.net
Type: A
DNSforgetfifteen.net
Type: A
DNSincreasefifteen.net
Type: A
DNSforgetangry.net
Type: A
DNSincreaseangry.net
Type: A
DNSforgetarticle.net
Type: A
DNSincreasearticle.net
Type: A
DNSwoulddried.net
Type: A
DNSrememberdried.net
Type: A
DNSwouldfifteen.net
Type: A
DNSrememberfifteen.net
Type: A
DNSwouldangry.net
Type: A
DNSrememberangry.net
Type: A
DNSwouldarticle.net
Type: A
DNSrememberarticle.net
Type: A
DNSjourneymister.net
Type: A
DNShusbandmister.net
Type: A
DNSjourneysuppose.net
Type: A
DNShusbandsuppose.net
Type: A
DNSjourneyservice.net
Type: A
DNShusbandservice.net
Type: A
DNSjourneyriver.net
Type: A
DNShusbandriver.net
Type: A
DNSdestroymister.net
Type: A
DNSdestroysuppose.net
Type: A
DNSlittlesuppose.net
Type: A
DNSdestroyservice.net
Type: A
DNSlittleservice.net
Type: A
DNSdestroyriver.net
Type: A
DNSriddenmister.net
Type: A
DNSbelongmister.net
Type: A
DNSriddensuppose.net
Type: A
DNSbelongsuppose.net
Type: A
DNSriddenservice.net
Type: A
DNSbelongservice.net
Type: A
DNSriddenriver.net
Type: A
DNSbelongriver.net
Type: A
DNSchairmister.net
Type: A
DNSthosemister.net
Type: A
DNSchairsuppose.net
Type: A
DNSthosesuppose.net
Type: A
DNSchairservice.net
Type: A
DNSthoseservice.net
Type: A
DNSchairriver.net
Type: A
DNSthoseriver.net
Type: A
DNSwithinmister.net
Type: A
DNSsuffermister.net
Type: A
HTTP GEThttp://throughdried.net/index.php
User-Agent:
HTTP GEThttp://littlemister.net/index.php
User-Agent:
HTTP GEThttp://littleriver.net/index.php
User-Agent:
Flows TCP192.168.1.1:1031 ➝ 95.211.230.75:80
Flows TCP192.168.1.1:1032 ➝ 199.34.228.57:80
Flows TCP192.168.1.1:1033 ➝ 66.151.181.49:80

Raw Pcap
0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2074   : close..Host: t
0x00000040 (00064)   68726f75 67686472 6965642e 6e65740d   hroughdried.net.
0x00000050 (00080)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a206c   : close..Host: l
0x00000040 (00064)   6974746c 656d6973 7465722e 6e65740d   ittlemister.net.
0x00000050 (00080)   0a0d0a                                ...

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a206c   : close..Host: l
0x00000040 (00064)   6974746c 65726976 65722e6e 65740d0a   ittleriver.net..
0x00000050 (00080)   0d0a0a                                ...


Strings
n
ntoenKvitlS
"
 
\
.
 
\
.
  
.
e
. 
00-+ .
-
-1
+-0-E-
-0
\
.
0
0
- 
000
-
.
M.$L.u
                                 
2.exe
- abort() has been called
af-za
af-ZA
April
ar-ae
ar-AE
ar-bh
ar-BH
ar-dz
ar-DZ
ar-eg
ar-EG
ar-iq
ar-IQ
ar-jo
ar-JO
ar-kw
ar-KW
ar-lb
ar-LB
ar-ly
ar-LY
ar-ma
ar-MA
ar-om
ar-OM
ar-qa
ar-QA
ar-sa
ar-SA
ar-sy
ar-SY
ar-tn
ar-TN
ar-ye
ar-YE
- Attempt to initialize the CRT more than once.
- Attempt to use MSIL code from this assembly during native code initialization
August
az-az-cyrl
az-AZ-Cyrl
az-az-latn
az-AZ-Latn
.bat
be-by
be-BY
bg-bg
bg-BG
bn-in
bn-IN
bs-ba-latn
bs-BA-Latn
ca-es
ca-ES
Cja-JP
.cmd
.com
CONOUT$
CR6002
- CRT not initialized
cs-cz
cs-CZ
cy-gb
cy-GB
da-dk
da-DK
dddd, MMMM dd, yyyy
de-at
de-AT
December
de-ch
de-CH
de-de
de-DE
de-li
de-LI
de-lu
de-LU
div-mv
div-MV
Djjj
Djjjj
DOMAIN error
el-gr
el-GR
emscoree.dll
en-au
en-AU
en-bz
en-BZ
en-ca
en-CA
en-cb
en-CB
en-gb
en-GB
en-ie
en-IE
en-jm
en-JM
en-nz
en-NZ
en-ph
en-PH
en-tt
en-TT
en-us
en-US
en-za
en-ZA
en-zw
en-ZW
es-ar
es-AR
es-bo
es-BO
es-cl
es-CL
es-co
es-CO
es-cr
es-CR
es-do
es-DO
es-ec
es-EC
es-es
es-ES
es-gt
es-GT
es-hn
es-HN
es-mx
es-MX
es-ni
es-NI
es-pa
es-PA
es-pe
es-PE
es-pr
es-PR
es-py
es-PY
es-sv
es-SV
es-uy
es-UY
es-ve
es-VE
et-ee
et-EE
eu-es
eu-ES
fa-ir
fa-IR
February
fi-fi
fi-FI
- floating point support not loaded
fo-fo
fo-FO
fr-be
fr-BE
fr-ca
fr-CA
fr-ch
fr-CH
fr-fr
fr-FR
Friday
fr-lu
fr-LU
fr-mc
fr-MC
gl-es
gl-ES
gu-in
gu-IN
         (((((                  H
he-il
he-IL
HH:mm:ss
hi-in
hi-IN
hr-ba
hr-BA
hr-hr
hr-HR
hu-hu
hu-HU
hy-am
hy-AM
id-id
id-ID
- inconsistent onexit begin-end variables
is-is
is-IS
it-ch
it-CH
it-it
it-IT
ja-jp
January
jjjjj
July
June
ka-ge
ka-GE
kernel32.dll
kk-kz
kk-KZ
kn-in
kn-IN
kok-in
kok-IN
ko-kr
ko-KR
ky-kg
ky-KG
lt-lt
lt-LT
lv-lv
lv-LV
March
Microsoft Visual C++ Runtime Library
mi-nz
mi-NZ
mk-mk
mk-MK
ml-in
ml-IN
MM/dd/yy
mn-mn
mn-MN
Monday
mr-in
mr-IN
ms-bn
ms-BN
ms-my
ms-MY
mt-mt
mt-MT
nb-no
nb-NO
nl-be
nl-BE
nl-nl
nl-NL
nn-no
nn-NO
- not enough space for arguments
- not enough space for environment
- not enough space for locale information
- not enough space for lowio initialization
- not enough space for _onexit/atexit table
- not enough space for stdio initialization
- not enough space for thread data
November
ns-za
ns-ZA
(null)
October
pa-in
pa-IN
pl-pl
pl-PL
Program: 
<program name unknown>
pt-br
pt-BR
pt-pt
pt-PT
- pure virtual function call
quz-bo
quz-BO
quz-ec
quz-EC
quz-pe
quz-PE
R6008
R6009
R6010
R6016
R6017
R6018
R6019
R6024
R6025
R6026
R6027
R6028
R6030
R6031
R6032
R6033
R6034
ro-ro
ro-RO
runtime error 
Runtime Error!
ru-ru
ru-RU
sa-in
sa-IN
Saturday
se-fi
se-FI
se-no
se-NO
September
se-se
se-SE
SING error
sk-sk
sk-SK
sl-si
sl-SI
sma-no
sma-NO
sma-se
sma-SE
smj-no
smj-NO
smj-se
smj-SE
smn-fi
smn-FI
sms-fi
sms-FI
sq-al
sq-AL
sr-ba-cyrl
sr-BA-Cyrl
sr-ba-latn
sr-BA-Latn
sr-sp-cyrl
sr-SP-Cyrl
sr-sp-latn
sr-SP-Latn
Sunday
sv-fi
sv-FI
sv-se
sv-SE
sw-ke
sw-KE
syr-sy
syr-SY
ta-in
ta-IN
te-in
te-IN
This indicates a bug in your application.
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
th-th
th-TH
Thursday
TLOSS error
tn-za
tn-ZA
tr-tr
tr-TR
tt-ru
tt-RU
Tuesday
uk-ua
uk-UA
- unable to initialize heap
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
ur-pk
ur-PK
USER32.DLL
uz-uz-cyrl
uz-UZ-Cyrl
uz-uz-latn
uz-UZ-Latn
vi-vn
vi-VN
Wednesday
xh-za
xh-ZA
zh-chs
zh-CHS
zh-cht
zh-CHT
zh-cn
zh-CN
zh-hk
zh-HK
zh-mo
zh-MO
zh-sg
zh-SG
zh-tw
zh-TW
zu-za
zu-ZA
<!<(<.<
<$<,<:<
                          
;(<0<[<
0#0)000
0 0(00080@0H0
0,000@0d0p0x0
0&0.0;0F0j0r0
000=0I0Q0a0u0}0
0!0+0A0K0c0s0
0+0?0E0
000E0R0
0)0>0H0V0l0
0.0;0M0
0"0,0R0
0&020?0G0O0W0_0h0q0y0
0%020H0\0q0
0,040<0D0J0X0m0~0
0'040A0u0
0-050=0E0x0
0(080@0N0Y0d0i0z0
0	080l0z0
0'0b0n0~0
0:0B0U0c0w0|0
0&1.141N1
0*1@1f1
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
0[1c1z1
0<1D1T1b1
0'1G1k1u1|1
0@1N1g1p1
030:0@0G0O0`0v0~0
:(:,:0:4:<:T:d:h:x:|:
051K1W1|1
:$:*:0:7:@:E:K:S:X:^:f:k:q:y:~:
081J1[1o1
>#>0>8>E>M>U>]>k>u>
< <(<0<8<@<H<P<X<`<h<p<x<
= =(=0=8=@=H=P=X=`=h=p=x=
> >(>0>8>@>H>P>X>`>h>p>x>
; ;(;0;8;@;H;P;X;`;h;p;x;
: :(:0:8:@:H:P:X:`:h:p:x:
? ?(?0?8?@?H?P?X?`?h?p?x?
<)<0<8<W<_<g<o<
$090Q0n0
'0D0L0T0\0d0o0w0
>$>0>=>E>M>U>]>e>r>~>
0F1R1u1
0F1T1u1}1
0H0^0q0
< =0=>=L=R=^=e=l=w=
<0<P<p<
10181@1H1P1X1e1
1 1@1`1
1)11191D1T1a1p1|1
1!1+171G1^1f1
1)1>1F1W1_1g1~1
1'1@1Q1^1e1
1"171C1L1U1^1k1
1#1A1I1Q1i1n1u1
1>1E1N1[1
1,1V1d1
1%1Z1_1
1%212q2
1 2,2;2a2
1&2+232F2g2o2w2
1+232e2j2
1:2M2U2]2k2r2}2
1<3B3L3
161>1\1l1t1|1
: ;%;1;6;U;
>*>1>8>S>]>
?1?9?G?f?u?
1B1M1U1]1e1q1
=1=C=S=
:$;1;@;d;q;{;
?1?=?e?{?
1E1Q1Y1a1i1p1
1F2L2S2Y2q2
>1?G?Z?v?
1I2W2n2y2
1J1c1p1}1
>1>>>K>^>
;);1;`;l;t;z;
;);1;=;P;X;`;h;r;z;
1#QNAN
1S2c2o2
1#SNAN
20L0m0
2"212?2X2f2
2&21292]2
2!2)2/2=2K2S2]2e2s2{2
2!2'2/2D2\2t2
2	2'2<2F2T2i2s2
2#2+232?2G2U2]2e2p2
2$2,242<2D2L2T2\2d2l2t2|2
2%2*272Y2f2
223B3R3
2"252>2R2Y2i2r2x2
2%252D2
2*292g2s2
2(2B2[2k2
\2`2d2h2l2p2t2
2[2d2l2
2'2E2Q2Y2
2(2H2h2
2%3+323
2'3g3o3w3
242<2j2
2b2h2l2p2t2
>2>:>B>H>O>Z>f>
2F2a2m2z2
? ?&?*?2???J?O?h?p?x?
;+;2;K;Q;W;];c;i;o;u;{;
<$<2<K<R<
2O3Y3t3
>2>Q>e>s>y>
2S2X2a2f2o2t2
;*;2;:;V;\;d;r;z;
314<4g4o4w4
3"323>3F3N3e3q3|3
3(32393A3Q3_3g3s3
3%323j3
3!3)313C3Q3l3z3
3"3*323:3F3S3h3w3|3
3 3$3(3,3034383<3@3D3H3L3P3T3X3\3`3d3h3l3p3t3x3|3
3'333=3E3M3T3q3y3
3$3-3:3B3O3p3z3
3	3%3>3E3o3
3&3-3<3H3P3X3d3
3$3,343<3D3L3T3\3d3l3t3|3
3!3)353=3O3[3c3m3s3
3/353=3H3T3`3h3t3
3'363@3H3M3U3q3y3
3#363<3I3Q3]3e3r3x3~3
3/373>3T3`3
3&3H3`3
3:3P3X3`3g3o3w3
3%414=4L4W4u4
3$42494W4^4e4y4
3#4S4p4
383W3l3v3
< <&<.<3<9<A<F<L<T<Y<_<g<l<r<z<
<3=:=B=
3C4W415
?'?3?=?E?J?
:':3:;:\:h:|:
=3>;>H>U>~>
3O6a6s6
<,<4<<<~<
424J4U4g4
4'42474j4r4~4
4"4*404?4E4J4P4j4
4 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4d4h4l4
4$4,444<4D4L4T4\4d4l4t4|4
4)4.444@4P4a4k4
4&444<4E4{4
4#4*4?4O4t4|4
4,444U4]4r4z4
4 4.464<4J4R4Z4f4n4x4~4
4#4/4B4M4U4\4c4o4
4"4*4d4l4t4y4
4#4:4g4r4z4
4*4=4h4~4
4'4.4X4f4
4"494@4F4Q4X4i4
4=4U4k4s4
4+535;5C5K5S5[5c5n5v5
4'545<5K5W5]5
4 5+5J5V5^5f5r5
4!5Y5e5k5
474E4J4^4d4p4~4
=4=8=X=t=x=
>%>4><>B>J>o>
:4;<;D;H;P;d;l;
>*>4><>D>L>T>a>
=$?,?4?<?D?L?T?\?d?l?t?|?
;4;>;L;e;s;
: :-:4:>:L:Y:_:e:k:p:{:
;,;4;n;
< <,<4<W<_<y<
= =4=<=X=m={=
>4>Z>b>{>
51S1l1s1{1
526>6c6h6n6z6
546<6q6y6
5$5,545<5D5L5T5\5d5l5t5$?(?,?0?
5$5,545<5D5L5T5\5d5l5t5|5
5 5*5<5B5J5T5Z5d5j5p5x5
5&5/5<5D5T5`5g5n5x5
5"5>5[5f5q5
5(5,5@5p5x5|5
5&5.5D5T5[5i5
555H5R5g5
5+5;5W5]5i5
5*565>5F5
5+595B5]5
5	5B5J5d5
5\5k5s5{5
5/696R6e6w6
585@5L5S5_5
=5=A=I=P=f=m=
<-<5<B<T<\<j<t<
;";5;D;d;s;{;
5E5M5^5
?#?+?5?=?E?Q?_?
=-=5=E=V=f=
;5>H>]>
5K5S5]5i5x5
5M&|=M
5N2i:N1];N
5O7W7_7f7n7v7
5P5q5}5
<5<=<q<y<
5U5c5|5
5W6n6v6
616C6i6v6~6
646B6R6
658S8l8s8{8
6(60686F6S6a6
6$6,646<6D6L6T6\6d6l6t6|6
6$6,646<6D6L6T6\6l6t6|6
6"6'6@6_6k6s6{6
6#6/6?6K6
6#6/6A6M6m6s6
6!6;6C6J6X6d6l6t6
666R6Z6k6w6
6-676?6F6S6l6z6
6%6C6S6[6`6}6
6@6K6[6c6k6s6
6-6M6i6
6!6S6{6
6 767@7S7
6"7+727e7z7
6;7a7o7u7
6:7B7M7
6;7M7'9/9M9U9]9
>6?B?J?R?Z?f?r?z?
:6:D:]:d:k:s:
6G6O6V6h6s6{6
=6=>=J=R=W=]=i=w=
?'?6?U?a?n?}?
6V7[7v7{7
="='=-=7=
=%=/=7=
70787G7j7s7}7
7(707:7G7O7d7
7)717^7j7r7|7
7+717I7
7*747C7M7X7h7|7
7'757R7s7
7+767<7N7X7a7
7"7)70777>7F7N7V7b7k7p7v7
7$7,747<7D7L7T7\7d7l7t7|7
7"7(7<7H7j7
777E7P7Y7t7|7
7+797B7I7P7\7c7l7|7
7%7C7U7]7e7
7"7e8m8v8~809H9S9b9m9
7'7F7X7j7|7
7%7l7w7
7=7O7]7t7|7
7.7U7a7i7
787N7V7_7l7t7|7
7"8)81888E8M8T8l8t8|8
7"8*858
7^8d8p8
7*8S8m8u8
;$;);/;7;<;B;J;O;T;];b;h;p;u;{;
>7?B?V?b?j?s?{?
<7<=<D<I<r<z<
%7EoKn
</<7<=<F<]<i<{<
< <&<.<7<><F<O<a<y<
=7=G=r=
<7<G<T<f<q<
>7?]?h?
7h7p7z7
<-=7=H=P=X=
=7=J=Z=
=*=7=K=S=[=f=s=
7L7a7o7x7
818<8D8a8z8
828?8k8u8
838h8p8|8
839D9U9f9
848B8X8^8t8
858?8O8Z8b8r8y8
8"838;8C8R8p8
8	848D8P8\8
8+878Z8g8
8$8,848<8D8L8T8\8d8l8t8|8
8 8$8(808H8X8\8l8p8t8x8
8 8$8(8,8084888<8@8D8H8L8P8T8X8\8`8d8h8l8p8t8x8|8
8$8:8B8U8a8
8'8;8C8I8Q8W8]8c8|8
8'8.8R8Z8e8
8.8D8P8b8
8-8Y8s8
8$8Y8w8
8	949j9x9
898H8P8d8w8}8
899?9H9S9Z9d9|9
<8<c<j<w<
<!<,<8<C<Z<
>8>D>`>l>
8F8Y8b8k8s8z8
?(?8?\?h?p?
>8?J?Z?k?s?}?
8:k:X<
?$?,?8?U?e?j?
8Wfsqopummij tbmidjcuks lltuejd qtpeenjha gls bsikodgri jnmuvmp nibreovj tkcawso gzcoyc usuumn qchiaipt ebecgo iqbp agizfog atfamurln soujciu njm xkcaft dvmu cijaouuxuj etperezvpo mag bmsozguw onro dgrarf fgjejujqau zdiicej xdu dmbav mpue ssxuflso abbl nscafpxo ymd strugjyou dwxueglozo vspagjj phbi ampnadin snboccm txbexjri ullfiwa uha coczievfip npoian fald qcvoo ghvaafp zppac guoijfa ncd fuwipi spihoyif jdkumfa jvca umponir jnjihfu uecbjil pfos odjnib zeuinjo bnomad vnfiqflu zjnafddom shqueawl phsodjdisu twloblaruu rdreebadlo qtel nnju awpladjxe jokyae hstaiex rldovomg midt tuajhil aesvbu scra iusscuf csaxable ceo aog rrmojwfefi wkmisegp bfmunngeqf nxdus gpmugurga qczetbj oockp ggraac vdneiul joo vjpabdber djfuu gbcuijbai mfgub 
90:8:?:O:y:
929=9E9
93:J:u:
9+:4:[:i:
959l9t9|9
969H9P9
979E9j9r9
9,909@9D9H9P9h9x9|9
9%92999A9T9`9l9t9
9,949:9I9S9Y9h9r9x9
9)989Z9
9$9,90989@9H9P9X9`9h9p9x9
9&9.94999A9O9\9f9q9|9
9&9.969>9F9N9]9
9&999D9I9Y9e9j9u9
9;9^9d9j9q9
9$9C9\9l9}9
9+9C9V9b9u9
9<9D9L9T9\9d9i9o9
9:9H9z9
9!9J9^9k9
9 9Z9l9r9|9
9A9Q9a9
9b9h9l9p9t9
9B9J9i9q9y9
9	:B:]:e:
9Cg?E^m
<9<G<V<d<
9%:h:"<
9-:::\:l:
:$:9:R:m:}:
9V:m:z:
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
address family not supported
address_family_not_supported
address in use
address_in_use
address not available
address_not_available
:%:a:h:s:{:
?A?I?W?`?
already connected
already_connected
=(=A=O=h=o=v=}=
AreFileApisANSI
argument list too long
argument out of domain
<at-<rt"<wt
August
.?AVbad_alloc@std@@
.?AVbad_exception@std@@
.?AVerror_category@std@@
.?AVexception@std@@
.?AV_Generic_error_category@std@@
.?AV_Iostream_error_category@std@@
.?AVlength_error@std@@
.?AVlogic_error@std@@
.?AVout_of_range@std@@
.?AV_System_error_category@std@@
.?AVtype_info@@
bad address
bad_address
bad allocation
bad exception
bad file descriptor
bad_file_descriptor
bad message
 Base Class Array'
 Base Class Descriptor at (
__based(
BeginPaint
<!<B<H<
broken pipe
bWWWWj
\c2D\vE
__cdecl
CheckDlgButton
<*<;<c<k<
?#?;?C?K?W?_?{?
 Class Hierarchy Descriptor'
CloseHandle
CloseThreadpoolTimer
CloseThreadpoolWait
__clrcall
<	=,=@=c=l=v=
cmgafppo lnmi fepuasapd tbwe bctapidb nocfofitru zfron qijimajnla dcbipe cswu dab unyomi fodciuu pvpofau rrp sog iprfetlop euozg gtpawg dfwitbm oowvjiegr pfog ecuurgu jceoxadfb dfcinjaj mjpuzln ruxvapsaje ondk gzp mccudcpokg oule oqpbeunfx pjiragaacs iln flexarseb guuzicum jgqais gjd aldpei mjgimxq apfjufpeqa phobu msul dzvam rixm jjwep awks rjbuceutru nppihdd zgpis moau eoeudcec updveclci egfgeycb zgsezoi gsa tszuffloj rlipi opbeqenaja atmlatf najfuzp irbfe jdejui pkdid fkri ggf fiic lzz pfdesedpu cnbeiptece eiivnakotj texjayu jdfubbris cnko cwpolgm gfmudzwazk ufhbu iemx yjjamilj zypulfmufj ixabz dbbefocc plpa cafne<
;\<c<n>x>
CompareStringEx
CompareStringW
 Complete Object Locator'
connection aborted
connection_aborted
connection already in progress
connection_already_in_progress
connection refused
connection_refused
connection reset
connection_reset
`copy constructor closure'
CorExitProcess
CreateEventExW
CreateFile2
CreateFileW
CreateSemaphoreExW
CreateSymbolicLinkW
CreateThread
CreateThreadpoolTimer
CreateThreadpoolWait
cross device link
c=x2%I-H9
;+;C;X;`;w;
@.data
dddd, MMMM dd, yyyy
December
DecodePointer
`default constructor closure'
 delete
 delete[]
DeleteCriticalSection
DeleteFileA
destination address required
destination_address_required
device or resource busy
directory not empty
:-:D:J:Y:^:d:x:
=!=)=D=L=
< <-<D<^<n<v<~<
DrawTextA
`dynamic atexit destructor for '
`dynamic initializer for '
E\1V?WP
__eabi
`eh vector constructor iterator'
`eh vector copy constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`eh vector vbase copy constructor iterator'
>.?;?E?l?
= >%>+>=>E>M>~>
EnableWindow
EncodePointer
EndDialog
EndPaint
EnterCriticalSection
EnumSystemLocalesEx
=E=]=v=
executable format error
ExitProcess
? ?E?Z?v?
__fastcall
February
file exists
filename too long
filename_too_long
FileTimeToLocalFileTime
FileTimeToSystemTime
file too large
FindClose
FindFirstFileExW
FindResourceA
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FlushProcessWriteBuffers
=*F-]\M
:.:::F:M:Z:b:j:}:
FreeEnvironmentStringsW
FreeLibraryWhenCallbackReturns
Friday
function not supported
GDI32.dll
generic
GetACP
GetActiveWindow
GetBkColor
GetClipRgn
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetCPInfo
GetCurrentDirectoryW
GetCurrentPackageId
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentThreadId
GetCursor
GetDateFormatEx
GetDCBrushColor
GetDialogBaseUnits
GetDlgItem
GetDlgItemInt
GetDriveTypeW
GetEnvironmentStringsW
GetFileInformationByHandle
GetFileInformationByHandleExW
GetFileType
GetFontLanguageInfo
GetForegroundWindow
GetFullPathNameW
GetGraphicsMode
GetInputState
GetKeyboardType
GetLastActivePopup
GetLastError
GetLocaleInfoEx
GetLogicalProcessorInformation
GetMenu
GetMenuCheckMarkDimensions
GetMenuContextHelpId
GetMenuItemCount
GetMenuItemID
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetNearestColor
GetNearestPaletteIndex
GetOEMCP
GetPixelFormat
GetPolyFillMode
GetProcAddress
GetProcessHeap
GetProcessWindowStation
GetQueueStatus
GetRandomRgn
GetScrollPos
GetStartupInfoW
GetStdHandle
GetStretchBltMode
GetStringTypeW
GetSystemPaletteUse
GetSystemTimeAsFileTime
GetTextAlign
GetTextCharacterExtra
GetTextCharset
GetTextCharsetInfo
GetTextColor
GetTickCount
GetTickCount64
GetTimeFormatEx
GetTimeZoneInformation
GetUserDefaultLocaleName
GetUserObjectInformationW
GetWindowDC
GetWindowLongA
GK\^_[
GlobalAlloc
GlobalFlags
GlobalHandle
GlobalSize
;!;*;=;[;g;n;
gtjecx rbniju mvdib tczi veyomokp eaiufgb djmunaijel ccfa xfmo ndf updwa vwjo ksukutx wufdociyv tvbi lbh egdmumzvad gjgeng klxu lgsueolpy fpop mghewjvasb ddaigo mxduwacoz reyfeng acjfugiqfo qgpafb mgbegjaj jdfo rletupu recre imegtomi uolnirafp szjezs uec jwlevazt ggri ujiltol dfg stjiob mslubd rntenuaxoa plbio cpselpu kvlamcoji oczviksnim zjcujdciz ftkubjlis beun gbjaeelg jlfemzwepu ubguxu cnjubimv nrpufui rmlaubbyo sfrar movdubljo mntuqfaii cdm ffbunc umbvit npzafiv jprujid ndomuijst dloihex dwsa erqnau jvl utmiuful ixivceb cogfiv gub egffumj jgvomj jcgepnmu ntfaecjoq gbxol eopeu yklamompis tbiceotu mmrevc apblospj xamdugd cuy fkfobyfid kgdokvhas fuvaaj iggxu nlyiusjya kuusci damra dgse njotopth vrdils zdsalbc gbge
gU~MMN
`h````
><>H>^>}>
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
`h`hhh
HH:mm:ss
HHtVHHt
host unreachable
host_unreachable
>>>H>P>^>h>
=H=P=X=u=~=
Ht+Ht$Ht
?H?U?`?u?
_hypot
:I:>;^;
identifier removed
igcunusis ivle jnv xsruoim iphhalf cbgekb qcoleetv rsdiacmjiz aeqj dcoum oiz rtcallwifa azyyefuz apbfif bdlaoj aggpo stnuevnm nxgilm yan idafziamjs lhjospo itvregjs wvonukcb nbpojjxovn ujj rbgii ggilubba fxbiojpwaz bow rgbedod ltnavjquf palloisdj kcs mstant illmaqg xnm ensmaopgf bvfejjn wpv mourfon yffos pefica brb odszuonn nvgeumez dgjei pcfafobee gdm tldo bcgadg qsma trp wuinfodjj ugm xbi mjyol oimcmoal gmgi jmsazmcu uhypoyl gpbub esnzeh ffso isbwec fwdeffdur opnvuerq behfajgje utisb scsoojqle txpuzbj bgba zdzadyzekh cfu iulod spiw mucadil bgaliz obelnas pebdi lmhoabl fvubolor vnnuepk rniben nogjegn dhu englel zusgunjxuo cpei gaphiiif pclogpvi cfliue hnb vkfo vglenodsu jaaxloegtx bbd inO7P
illegal byte sequence
inappropriate io control operation
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
interrupted
invalid argument
invalid_argument
invalid seek
invalid string position
I$o85W
io error
iostream
iostream stream error
>%>.>@>I>P>_>g>n>
=I=q=y=
is a directory
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocaleName
IsWindowEnabled
IsWindowUnicode
<itx<o
?%?i?t?y?
izqn gljin evculi ihxloz azfd ongduzb ilar nsafen depceedgv njhui gnnacrnod pswog rrga emvfe rbgirbvikb jcgelj xdibeebbam zivlei fjp uydmah fonmuvedr powz dzgah dbootajmt gjfafsdoe snnox suz dqtooxrsos rkrocd ldsu liapeeqo icsc cpb asj xfjebtqol gmpal ucqofunl rbfalatre ynzugaebae ctdu ufgyebvsij rojr tdconfset dbubic dkcu jav lqdopecge pflerb dqxoptufi zsofe oab dgbeuel musbi vztofcloi qgsi ztg caofcod nafimilg hibauabugm dwbuppz abp updfatswe voipsaulv mbzun zxkis lapwasgge ojjjisdji dpoc vlguzc hsofo smcurneluo sguveinlol urbk cafwabp ovjcaen dlxohwgedf fpzi ghda gzvuirmi pqlokmle eapjoh dibninmae hjecegsdiv omecb nzduubrnuf dll ynsoconn omdji rtvakvahi dkcahnhevx ovzxadb noaar ajayfe zmdoblz
jA[jZZ+
JanFebMarAprMayJunJulAugSepOctNovDec
January
<+<J<a<p<
@jd_u	
;J<e<w<
$j	h',
j/_j\[f;
j@j _W
JX|C%,
} kE$<
KERNEL32.dll
? ?;?K?U?\?t?{?
>K>V>s>{>
?'?K?X?
;:=K=Z>l>
:-;?;L;
$:LaeZ^qd
LCMapStringEx
LCMapStringW
LeaveCriticalSection
=L=f=k=
lgueafitak clgicmpa aoaomll gploubc mktodyo npcapp enefjodml ulsd jqgoclcias lpp gebjeidhcu mjgibzco ucmsaenpf ozp jox mcq onlgeczm bedah yurmud mcvantjocg rusiuabobs bdcedplagz pamjepaqoc jbjen hdzib lvuevoak bnpaz hiqne sdvafecjiy huugguby tlaluz tjpiurnfo vabg poasm picvefs ucbp nilcay rganun seueuh sbeb ouotzvondt jekenac bgejipbaj atuz uggg rzof osobmo decodup vjnaf mfvozlj tsx dllunaa eaycl gtjomufyuc uufdiwauyg scsi rirti cvomocq apaduraa pncazjyin rgfefwn lspoh jyt ijrkonf sbvem mghabeugh nnde bbc gakgo lnzep sfhun oxlni mczixxcusj cfvudgmiw dlkidd qksazjeceg dvtadhy vgab mdsu ymsoo tdsakdso prnetu cic paph tdaogo muaflirlo drni qlmia ipaoxzuius tdduffkaj cmmu yms dpganfn gln gnjitvfo
LNFKRN
:(:L:N;W;
LoadIconA
LoadLibraryExW
LoadResource
LocalFlags
`local static guard'
`local static thread guard'
`local vftable'
`local vftable constructor closure'
LockResource
^LP.aL
=(=`=l=v=
<*<[<l<w<
;#;m;{;
`M'adM
`managed vector constructor iterator'
`managed vector copy constructor iterator'
`managed vector destructor iterator'
map/set<T> too long
MessageBoxW
message size
message_size
MM/dd/yy
Monday
MoveFileA
MoveWindow
:m;u;};
MultiByteToWideChar
}Nd=Dy
^n^[et
network down
network_down
network reset
network_reset
network unreachable
network_unreachable
 new[]
_nextafter
<;<N<^<k<
no buffer space
no_buffer_space
no child process
no link
no lock available
no message
no message available
no protocol option
no_protocol_option
no space on device
no stream resources
no such device
no such device or address
no such file or directory
no such process
not a directory
not a socket
not_a_socket
not a stream
not connected
not_connected
not enough memory
not supported
November
nsdo gnbas aguidlanp nmdirt lwfeggw uxbt libla mbpomws ipnsu lanevo udf fvrahoubhe gnci tcnefjfuk cmu vltocd xfah mdceblax onp gpjiaupm ckjubcgeba aphvixn jms epgugo sjv gfdax lltoe nylugsha fabnebr znlulc tddonbmuxi llisiwsv dvhueno qlcab efdtanos vmxe hetg ssgi mcfidbnupb efdsoujp cdzu oeelfti xnjezpgizf nyjapues vmedelppe zbcaiulfz uran bjso ulfode nnpoecj odrmojeb edffuwi cgvaji hptofmxax bdniui hjzujjjac bbcecx azmio zfouidi tffumf cugkavcep hudre
(null)
:$:N:V:^:f:q:y:
October
; ;@;O;^;h;r;|;
ol$cDS}I
`omni callsig'
operation canceled
operation in progress
operation_in_progress
operation not permitted
operation not supported
operation_not_supported
operation would block
operation_would_block
operator
OutputDebugStringW
>#>O>]>v>}>
ovmotiobe zcbecthazy strojd dzdeuxe pednivdso badxuj ogsil mljasd lkhez scl hkoduretoa wwx njgiunsro puos omp afenboa rjmuijxj boybeqsxe gnzax qlb zniave gqafowygab lbro hnvuyc ssioju wllirigni rjeoaede pugufov fivpedcc nkvibdf oea oacinsa pbg xgjicgqigq ehy saymovgiiq ewbm lvbamu sjf kdrorlkanm nxeulu krgabi jvdilngapo haibxep jwban hlsub itsge rbm wku xmauku qjv ciozpiimox ckqi gcqezkpim odug clgif jjmecf cdpeslr nifhold hvkavpt alakpamjd tjged zdgutbl glinimssob bkabig atitviab lumzafsdu zfnopiu abcvuafsre pdcats saysizzr umvtaerui jbedo lhqiicrd mzta bsmu minsubuqtu fvbuojwf vrie koljaegb fvmaaikape nmnopvapao mcagahrxa nsyof tcq dilse jecgoz evmweomtn dwefiesum ppooad pojrayirfo 
owner dead
=O=Y=u=
;$;P;|;
P5X5Vf
__pascal
PeekNamedPipe
permission denied
permission_denied
~pjCXf
`placement delete closure'
`placement delete[] closure'
PostMessageA
PP9E u
[P]	qil
protocol error
protocol not supported
protocol_not_supported
PSSSSV
__ptr64
p<t<x<|<
==>P>v>}>
PWWWWV
:&:?:Q:h:
QQSVWd
QueryPerformanceCounter
?	?R?`?
R40.Vf
RaiseException
`.rdata
ReadConsoleW
ReadFile
read only file system
.reloc
RemovePropA
resource deadlock would occur
resource unavailable try again
__restrict
restrict(
result out of range
?&?R?f?
RtlUnwind
@r,WPf
Saturday
`scalar deleting destructor'
September
SetDefaultDllDirectories
SetEndOfFile
SetEnvironmentVariableA
SetFileInformationByHandleW
SetFilePointer
SetFilePointerEx
SetFocus
SetLastError
SetPixel
SetStdHandle
SetSystemPaletteUse
SetTextAlign
SetTextCharacterExtra
SetTextColor
SetTextJustification
SetThreadpoolTimer
SetThreadpoolWait
SetThreadStackGuarantee
SetUnhandledExceptionFilter
sfgijo ukjtii jdzi nphu vpsikzovi roilgagplo bsmilh dfsivlt eom nsbo sgp kbmeg jpdebfcult gfne hqsal jthepdog mdluehacju tfmup gabdifni jkxudou sbdau fsnuodjjoa jeugeho depeubiprg cjfo uyroractte ijumtu rmdodwj clmauajyj cbuge mkulezdcef eiyvgenin gijpodm cixol zkfib sjzovawcav gbcezj fcnirsjolf beuqi wxbei wndat lbili nnacu lctamlji mllakniguj oflzafdfon ssron btxocubhaf vclol zzdedjb ojeaete plbulsp tggitbcuuo tnjes csxusizug glcaffebu uaeubpdisu jbfunsjep mbde ttpexd mzwufm nelbif ptdojoijb fni zexmodmevo cdw nejkif jaog tlqaormma jpfo kgre fmegipnefu utgfu zntibl dwlobjziam pdoesu tgminltimp vggum atvnoseso uddnaojw fbumofotf jmj jlbaozrme wjnacudpad bdmu bianxa jmar wl>B
ShowWindow
SizeofResource
skf bvwudoosut nrc atbp lmy sttoq egfzetpr dsgotybo zumiioob fnjaamiud nzjeezi miesv mcmugfvi eoijfducv jfug jdjuhsurux wiekalu smbuanjli ufd bfpu mhsaakb qjt jpotagsme omfs nmgufpf owivwoc zlgenjb pwosozg yebpasqce fae eftneid irdsabsni kkdetdgopb emlb fopadeudlc anqsie xptob jgbum ble lwduzm bpsasriju jlvuphbub ufi hms xqbuf qvseqedr lpes ummozulb fdur izskolicj pdkuxfvo frlugq ljcog upu onzijieku govgos secedowji ttdes lcfucrfe tlnidtused etffot ydsegge vor ojmgifct phduhqji cqpukdpe fanobispxu dspapgxevv lodbiafsf grliobgco npjudzcin zfjaji niilvapjvo mzc zfm olpgomlmaj tlan fcru coc iudam djzuwibc pvjabpnabs biwh rddewmjo pzlizdpapg gldudi snp ceogbasd jpxofmp nlfexmusaa frwufp sfjewlyis rfdisc qctu udn  
sP{;L]
SSPQSW
state not recoverable
__stdcall
stream timeout
`string'
string too long
Sunday
SunMonTueWedThuFriSat
,SVWj0X
SVWjA_jZ+
system
SystemTimeToTzSpecificLocalTime
~';_t|%3
< t8<	t4
TerminateProcess
text file busy
t!=fff
+t"HHt
tHHt*Ht#
__thiscall
!This program cannot be run in DOS mode.
Thursday
timed out
timed_out
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
,TN#oTN
too many files open
too_many_files_open
too many files open in system
too many links
too many symbolic link levels
Tuesday
TU,i}X
;t$,v-
 Type Descriptor'
`typeof'
uaPPPS
?:uBGW
uBjAYjZ+
`udt returning'
#{Uj.k
__unaligned
UnhandledExceptionFilter
UNICODE
unknown error
Unknown exception
UpdateColors
%uQcx|
UQPXY]Y[
URPQQh
USER32.dll
UTF-16LE
value too large
:,:V:a:m:
`vbase destructor'
`vbtable'
`vcall'
__vectorcall
`vector constructor iterator'
`vector copy constructor iterator'
`vector deleting destructor'
`vector destructor iterator'
vector<T> too long
`vector vbase constructor iterator'
`vector vbase copy constructor iterator'
`vftable'
`virtual displacement map'
=!>)>V>j>r>
v	N+D$
=(=@=W=
;*<<<W<
WaitForThreadpoolTimerCallbacks
Wednesday
weuldegthe fvne bvjef zlsophw vhfev sicdoqm mgedelt nro bgtat cnti itjfi vfnocrkii efbbuvep noanjeery lej btfiufllo ttfaq dtsojlra fimzeh gcfeilou nfut jgitadkve uujw pfvuazegn dnloecdl civgeb uvokbe umvfi fgdauvfk rtla lpsay btedasg ubxmivfci gdtecgyefn zbp lfdapjtiii jopcit tjkorlbuj mabza yovpoyc twtoliw bcyov ljfu fzbaeccgea ebq dmi ulbiaka dimr zggibtceqb mljuzfmarr doqguknran qtcojzri qiukwatuo pivv esakcoe bjoumoimm cjuj jzsuacodl jmperu mmkaqcset gsju vzyovkcer cye sptab afdgob wxl eysdojcu gsbeuum blfidw uejm ncgi toeas sgboseobpo msjusicqul ptnedigpi uuvrgismud cocjudnj mpuqudau beiglajuov jljexkbaex ubjhirw bbqeqmibui zoofkesini
WideCharToMultiByte
Wj0XPV
Wj.h=D
:W=?>J>Z>
WriteConsoleW
WriteFile
wrong protocol type
wrong_protocol_type
< <@<X<
xeo ztelabd mfuemegbtu dssubmog ncbepjbes fzmeepbn ffcisigi bebtus lojseoki mek sgiemiled fofxak bwloimilsi orzsedcure lymomylu ibt bng aagsmuaf kwo ucqno hfpafbloms ncjitlg ztcaitcfas udbma mfomuxkji gljiglm lgoruulp ppi wlebusgo inirj zbnefa bcbop pefbufukn zlgenjboj hdamu ggribvnaec cugquhlr anlafenv poj tfciysqeu tqmiznsot vyjumff uehmjamzpi iujgfipewt phocuzgnii cpanaloc naswum jfvu kep umffebujn vuuuezamaz dfso gsrinco muvoi gbebeturl zjdu icunocag ndmo dmob nnqazhli xluiui aeumywem euoo wou lehsiff mqfuvuu evaddeyc tnrotixui sczi cngegs oqpasi jtosav ozcrelm nfutoby ccj ifmreoibg ympuzhcadr fazje umima aiqqdekcm criibo cymaj dmfaaxvz nivrobcq vfforis jicfatc esedbec aflmomoe bodzop lituirajzv ibz pfehemps nnci xuu wfuisagh
xppwpp
xpxxxx
Xu2%u<
YY_^[]
Z0b0j0w0
=z=6>p>
<"<Z<g<{<
)zliltasvd ubnzum euoeop xvemaomen rgemi cbrer fia fzokui ceideinih pgpunln panacu pcbukanw gnfohkge slte gycojbcuf prditosqu nrsi daeftoc odtyif kcwahdda lin fledotfdam ilcbarfc tmowae lmsodflijc jih chdijgdo vtfidg upgdu cpt dei ulps ueelb qsdapcla bdtine kjmis ounl hof qqn cljadvma nzaw yckudn djjucnk jnesiomn lefa bbsuol fnponaxri fshi bdfis clausaild lbjal pgmigjdue rnxuibbkoi olbceg tomiog gvseigccoo jfd tbfolsn flyayoji jgig bjmigtf ddulegug ldliehfwuk bbl fcdoddnok pbqefan odrp zppejd fwwaefijli svpeyynov vdor fgfuijvgi pmilad sesqadfpal antsur dtpejsoj ccd yubnui ajrsuqjl eblgiermgi qzsacd grte zjeu gfyopcjui hbisu rgzeb llpa khjejag doouy sngu umpwe frcif uUoly