Analysis Date2015-05-28 20:02:53
MD5910eeca0d96e18104e7124f8cc54707c
SHA1eb6501555b1a6b7e60d92c386f405859cbe9bfe9

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: bbe077636b2e329e982f78d5899c82e2 sha1: 713074665d83dddf9311c9972bddabddaa8376ef size: 199168
Section.rdata md5: a6c49bc28e8154b4226ee6391c5fd2c0 sha1: 2acb23b6611ae96d6391402d0dbcb309235f0c97 size: 52224
Section.data md5: 17183e7c1359b24ec8eede900096588b sha1: fa43a5d515dc9f1a3d634bd85e7b418b07aa5589 size: 6656
Section.reloc md5: 08280b7e2b77d93c8ad547dfdc03a221 sha1: a4aad2febef4e5de17e948c5fad5bda11a3ca87b size: 14848
Timestamp2015-04-29 18:51:04
PackerMicrosoft Visual C++ 8
PEhash48986509085bb3ebf6a3d34e84a42e4351ca8b68
IMPhash105e8288811a31237ecb4337122a1717

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates FileC:\kgdzhgvxw\pdde1lu1hmsmhzjomjefn.exe
Creates FileC:\kgdzhgvxw\lq9yis
Creates FileC:\WINDOWS\kgdzhgvxw\lq9yis
Deletes FileC:\WINDOWS\kgdzhgvxw\lq9yis
Creates ProcessC:\kgdzhgvxw\pdde1lu1hmsmhzjomjefn.exe

Process
↳ C:\kgdzhgvxw\pdde1lu1hmsmhzjomjefn.exe

RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Distributed Profile Discovery KtmRm Policy Web ➝
C:\kgdzhgvxw\sgdagwvns.exe
Creates FileC:\kgdzhgvxw\ibl6vjwdsjr
Creates FilePIPE\lsarpc
Creates FileC:\kgdzhgvxw\sgdagwvns.exe
Creates FileC:\kgdzhgvxw\lq9yis
Creates FileC:\WINDOWS\kgdzhgvxw\lq9yis
Deletes FileC:\WINDOWS\kgdzhgvxw\lq9yis
Creates ProcessC:\kgdzhgvxw\sgdagwvns.exe
Creates ServiceProcedure SPP Redirector Services Input - C:\kgdzhgvxw\sgdagwvns.exe

Process
↳ C:\WINDOWS\system32\svchost.exe

Process
↳ Pid 804

Process
↳ Pid 852

Process
↳ C:\WINDOWS\System32\svchost.exe

Creates Filepipe\PCHFaultRepExecPipe

Process
↳ Pid 1208

Process
↳ C:\WINDOWS\system32\spoolsv.exe

RegistryHKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\BeepEnabled ➝
NULL
RegistryHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\System\Print\TypesSupported ➝
7
RegistryHKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Print\Printers\SymbolicLinkValue ➝
NULL
RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Print\Printers\DefaultSpoolDirectory ➝
C:\WINDOWS\System32\spool\PRINTERS\\x00

Process
↳ Pid 1856

Process
↳ Pid 1180

Process
↳ C:\kgdzhgvxw\sgdagwvns.exe

Creates Filepipe\net\NtControlPipe10
Creates FileC:\kgdzhgvxw\quzwaahjfe.exe
Creates FileC:\kgdzhgvxw\ibl6vjwdsjr
Creates File\Device\Afd\Endpoint
Creates FileC:\kgdzhgvxw\cqnpxi
Creates FileC:\kgdzhgvxw\lq9yis
Creates FileC:\WINDOWS\kgdzhgvxw\lq9yis
Deletes FileC:\WINDOWS\kgdzhgvxw\lq9yis
Creates Processffoeyitod6kq "c:\kgdzhgvxw\sgdagwvns.exe"

Process
↳ C:\kgdzhgvxw\sgdagwvns.exe

Creates FileC:\kgdzhgvxw\lq9yis
Creates FileC:\WINDOWS\kgdzhgvxw\lq9yis
Deletes FileC:\WINDOWS\kgdzhgvxw\lq9yis

Process
↳ ffoeyitod6kq "c:\kgdzhgvxw\sgdagwvns.exe"

Creates FileC:\kgdzhgvxw\lq9yis
Creates FileC:\WINDOWS\kgdzhgvxw\lq9yis
Deletes FileC:\WINDOWS\kgdzhgvxw\lq9yis

Network Details:

DNSleaderperfect.net
Type: A
74.208.214.100
DNSheavyheart.net
Type: A
64.15.205.101
DNSheavyheart.net
Type: A
64.15.205.100
DNSheavyheart.net
Type: A
208.48.81.134
DNSheavyheart.net
Type: A
208.48.81.133
DNSgentleheart.net
Type: A
203.189.109.142
DNSbelongbehind.net
Type: A
95.211.230.75
DNSpleasantbattle.net
Type: A
DNSnecessarybattle.net
Type: A
DNSorderheart.net
Type: A
DNSrequireheart.net
Type: A
DNSorderperfect.net
Type: A
DNSrequireperfect.net
Type: A
DNSordermayor.net
Type: A
DNSrequiremayor.net
Type: A
DNSorderbattle.net
Type: A
DNSrequirebattle.net
Type: A
DNSleaderheart.net
Type: A
DNSheavenheart.net
Type: A
DNSheavenperfect.net
Type: A
DNSleadermayor.net
Type: A
DNSheavenmayor.net
Type: A
DNSleaderbattle.net
Type: A
DNSheavenbattle.net
Type: A
DNSheavyperfect.net
Type: A
DNSgentleperfect.net
Type: A
DNSheavymayor.net
Type: A
DNSgentlemayor.net
Type: A
DNSheavybattle.net
Type: A
DNSgentlebattle.net
Type: A
DNSvariousheart.net
Type: A
DNSreturnheart.net
Type: A
DNSvariousperfect.net
Type: A
DNSreturnperfect.net
Type: A
DNSvariousmayor.net
Type: A
DNSreturnmayor.net
Type: A
DNSvariousbattle.net
Type: A
DNSreturnbattle.net
Type: A
DNSjourneyunderstand.net
Type: A
DNShusbandunderstand.net
Type: A
DNSjourneybroad.net
Type: A
DNShusbandbroad.net
Type: A
DNSjourneybehind.net
Type: A
DNShusbandbehind.net
Type: A
DNSjourneybutter.net
Type: A
DNShusbandbutter.net
Type: A
DNSdestroyunderstand.net
Type: A
DNSlittleunderstand.net
Type: A
DNSdestroybroad.net
Type: A
DNSlittlebroad.net
Type: A
DNSdestroybehind.net
Type: A
DNSlittlebehind.net
Type: A
DNSdestroybutter.net
Type: A
DNSlittlebutter.net
Type: A
DNSriddenunderstand.net
Type: A
DNSbelongunderstand.net
Type: A
DNSriddenbroad.net
Type: A
DNSbelongbroad.net
Type: A
DNSriddenbehind.net
Type: A
DNSriddenbutter.net
Type: A
DNSbelongbutter.net
Type: A
DNSchairunderstand.net
Type: A
DNSthoseunderstand.net
Type: A
DNSchairbroad.net
Type: A
DNSthosebroad.net
Type: A
DNSchairbehind.net
Type: A
DNSthosebehind.net
Type: A
DNSchairbutter.net
Type: A
DNSthosebutter.net
Type: A
DNSwithinunderstand.net
Type: A
DNSsufferunderstand.net
Type: A
DNSwithinbroad.net
Type: A
DNSsufferbroad.net
Type: A
DNSwithinbehind.net
Type: A
DNSsufferbehind.net
Type: A
DNSwithinbutter.net
Type: A
DNSsufferbutter.net
Type: A
DNSeffortunderstand.net
Type: A
DNSthroughunderstand.net
Type: A
DNSeffortbroad.net
Type: A
DNSthroughbroad.net
Type: A
DNSeffortbehind.net
Type: A
DNSthroughbehind.net
Type: A
DNSeffortbutter.net
Type: A
DNSthroughbutter.net
Type: A
DNSforgetunderstand.net
Type: A
DNSincreaseunderstand.net
Type: A
DNSforgetbroad.net
Type: A
HTTP GEThttp://leaderperfect.net/index.php
User-Agent:
HTTP GEThttp://heavyheart.net/index.php
User-Agent:
HTTP GEThttp://gentleheart.net/index.php
User-Agent:
HTTP GEThttp://belongbehind.net/index.php
User-Agent:
Flows TCP192.168.1.1:1031 ➝ 74.208.214.100:80
Flows TCP192.168.1.1:1032 ➝ 64.15.205.101:80
Flows TCP192.168.1.1:1033 ➝ 203.189.109.142:80
Flows TCP192.168.1.1:1034 ➝ 95.211.230.75:80

Raw Pcap
0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a206c   : close..Host: l
0x00000040 (00064)   65616465 72706572 66656374 2e6e6574   eaderperfect.net
0x00000050 (00080)   0d0a0d0a                              ....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2068   : close..Host: h
0x00000040 (00064)   65617679 68656172 742e6e65 740d0a0d   eavyheart.net...
0x00000050 (00080)   0a0a0d0a                              ....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2067   : close..Host: g
0x00000040 (00064)   656e746c 65686561 72742e6e 65740d0a   entleheart.net..
0x00000050 (00080)   0d0a0d0a                              ....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2062   : close..Host: b
0x00000040 (00064)   656c6f6e 67626568 696e642e 6e65740d   elongbehind.net.
0x00000050 (00080)   0a0d0a0a                              ....


Strings
eC
rsdCden3
eC
"
 
\
.
 
\
  
.
e
. 
00-+ .
-
-1
+-0-E-
-0
\
.
0
0
- 
000
-
.... $(,8DLXp|.....
u
                                 
2.exe
- abort() has been called
af-za
af-ZA
April
ar-ae
ar-AE
ar-bh
ar-BH
ar-dz
ar-DZ
ar-eg
ar-EG
ar-iq
ar-IQ
ar-jo
ar-JO
ar-kw
ar-KW
ar-lb
ar-LB
ar-ly
ar-LY
ar-ma
ar-MA
ar-om
ar-OM
ar-qa
ar-QA
ar-sa
ar-SA
ar-sy
ar-SY
ar-tn
ar-TN
ar-ye
ar-YE
- Attempt to initialize the CRT more than once.
- Attempt to use MSIL code from this assembly during native code initialization
August
az-az-cyrl
az-AZ-Cyrl
az-az-latn
az-AZ-Latn
.bat
be-by
be-BY
bg-bg
bg-BG
bn-in
bn-IN
bs-ba-latn
bs-BA-Latn
ca-es
ca-ES
Cja-JP
.cmd
.com
CONOUT$
CR6002
- CRT not initialized
cs-cz
cs-CZ
cy-gb
cy-GB
da-dk
da-DK
dddd, MMMM dd, yyyy
de-at
de-AT
December
de-ch
de-CH
de-de
de-DE
de-li
de-LI
de-lu
de-LU
div-mv
div-MV
Djjj
Djjjj
DOMAIN error
el-gr
el-GR
emscoree.dll
en-au
en-AU
en-bz
en-BZ
en-ca
en-CA
en-cb
en-CB
en-gb
en-GB
en-ie
en-IE
en-jm
en-JM
en-nz
en-NZ
en-ph
en-PH
en-tt
en-TT
en-us
en-US
en-za
en-ZA
en-zw
en-ZW
es-ar
es-AR
es-bo
es-BO
es-cl
es-CL
es-co
es-CO
es-cr
es-CR
es-do
es-DO
es-ec
es-EC
es-es
es-ES
es-gt
es-GT
es-hn
es-HN
es-mx
es-MX
es-ni
es-NI
es-pa
es-PA
es-pe
es-PE
es-pr
es-PR
es-py
es-PY
es-sv
es-SV
es-uy
es-UY
es-ve
es-VE
et-ee
et-EE
eu-es
eu-ES
fa-ir
fa-IR
February
fi-fi
fi-FI
- floating point support not loaded
fo-fo
fo-FO
fr-be
fr-BE
fr-ca
fr-CA
fr-ch
fr-CH
fr-fr
fr-FR
Friday
fr-lu
fr-LU
fr-mc
fr-MC
gl-es
gl-ES
gu-in
gu-IN
         (((((                  H
he-il
he-IL
HH:mm:ss
hi-in
hi-IN
hr-ba
hr-BA
hr-hr
hr-HR
hu-hu
hu-HU
hy-am
hy-AM
id-id
id-ID
- inconsistent onexit begin-end variables
is-is
is-IS
it-ch
it-CH
it-it
it-IT
ja-jp
January
jjjjj
jjjjjj
July
June
ka-ge
ka-GE
kernel32.dll
kk-kz
kk-KZ
kn-in
kn-IN
kok-in
kok-IN
ko-kr
ko-KR
ky-kg
ky-KG
lt-lt
lt-LT
lv-lv
lv-LV
March
Microsoft Visual C++ Runtime Library
mi-nz
mi-NZ
mk-mk
mk-MK
ml-in
ml-IN
MM/dd/yy
mn-mn
mn-MN
Monday
mr-in
mr-IN
ms-bn
ms-BN
ms-my
ms-MY
mt-mt
mt-MT
nb-no
nb-NO
nl-be
nl-BE
nl-nl
nl-NL
nn-no
nn-NO
- not enough space for arguments
- not enough space for environment
- not enough space for locale information
- not enough space for lowio initialization
- not enough space for _onexit/atexit table
- not enough space for stdio initialization
- not enough space for thread data
November
ns-za
ns-ZA
(null)
October
pa-in
pa-IN
pl-pl
pl-PL
Program: 
<program name unknown>
pt-br
pt-BR
pt-pt
pt-PT
- pure virtual function call
quz-bo
quz-BO
quz-ec
quz-EC
quz-pe
quz-PE
R6008
R6009
R6010
R6016
R6017
R6018
R6019
R6024
R6025
R6026
R6027
R6028
R6030
R6031
R6032
R6033
R6034
ro-ro
ro-RO
runtime error 
Runtime Error!
ru-ru
ru-RU
sa-in
sa-IN
Saturday
se-fi
se-FI
se-no
se-NO
September
se-se
se-SE
SING error
sk-sk
sk-SK
sl-si
sl-SI
sma-no
sma-NO
sma-se
sma-SE
smj-no
smj-NO
smj-se
smj-SE
smn-fi
smn-FI
sms-fi
sms-FI
sq-al
sq-AL
sr-ba-cyrl
sr-BA-Cyrl
sr-ba-latn
sr-BA-Latn
sr-sp-cyrl
sr-SP-Cyrl
sr-sp-latn
sr-SP-Latn
Sunday
sv-fi
sv-FI
sv-se
sv-SE
sw-ke
sw-KE
syr-sy
syr-SY
ta-in
ta-IN
te-in
te-IN
This indicates a bug in your application.
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
th-th
th-TH
Thursday
TLOSS error
tn-za
tn-ZA
tr-tr
tr-TR
tt-ru
tt-RU
Tuesday
uk-ua
uk-UA
- unable to initialize heap
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
ur-pk
ur-PK
USER32.DLL
uz-uz-cyrl
uz-UZ-Cyrl
uz-uz-latn
uz-UZ-Latn
vi-vn
vi-VN
Wednesday
xh-za
xh-ZA
zh-chs
zh-CHS
zh-cht
zh-CHT
zh-cn
zh-CN
zh-hk
zh-HK
zh-mo
zh-MO
zh-sg
zh-SG
zh-tw
zh-TW
zu-za
zu-ZA
                          
@^@&#/ 
>$>0>|?
;(;0;`;
0+00050L0
0"00070D0M0n0
0!0.0<0b0p0
0:0@0^0f0l0v0{0
0#0+030;0B0P0
0$0,040<0D0L0T0\0d0l0t0|0
0%0-050
0#0-050A0`0s0
0!0+0A0K0c0s0
0!0-0K0
0)030f0t0
0'060<0F0L0X0`0}0
0.060J0f0|0
0"080Q0i0
0!0C0K0S0q0~0
0#0T0`0k0
0:0Y0a0n0
0=0Y0p0
0	1#1<1b1
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
0"1D1Q1
,040T0k0s0
050K0~0
:!:':+:0:6:::@:D:J:N:T:X:j:
 080~0
>%>*>0>8>=>C>K>P>V>^>c>i>q>v>|>
<$<0<8<d<h<p<x<
; ;(;0;8;@;H;P;X;`;h;p;x;
: :(:0:8:@:H:P:X:`:h:p:x:
:0:9:^:{:
:$:*:0:b:
=(>0>;>B>I>
?!?0?D?Q?\?d?k?
0F0^0w0
=0=F=\=d=
<%<0<G<N<V<f<n<}<
0h0l0p0t0x0|0
0N7u1N
1 1$1(1,1014181<1@1D1H1L1P1T1X1\1`1d1h1l1p1t1x1|1
1 1'1.161O1Y1t1z1
1"1.131
1#1+131?1G1b1r1z1
1$1,141
1$1,141<1D1L1T1\1d1l1t1|1
1"1'151c1
1#1/171?1G1Y1e1m1u1}1
1%1>1E1f1n1
1:1`1g1o1
1#1+1l1w1
1!1>1Z1f1
1"121z1
1$131C1L1b1n1v1
1*161C1P1\1
1'171=1K1W1_1i1{1
1 1A1^1
1<1D1Q1X1c1m1}1
1%1E1P1o1z1Z2v2	464
1+1I1R1X1_1i1p1
1/2:2L2
132C2T2h2
151B1X1z1
171>1D1R1X1m1~1
1A1Q1[1o1y1
=1?B?V?e?
1D2K2[2j2r2z2
=!=1=D=k=s=
1J1R1Z1i1p1x1
1N1V1b1j1r1~1
=%=1=>=N=Y=a=u=
1#QNAN
1slawududau ltteanszev donnogudip mpatueslee sagucupg tnaasaneja zpdiisgwid pxfuhzo vbfizllo fsmagbuu jeeuidf lltobsii iopigz owl jvinidgloa exaw lwcam blerajgxi oaa airfpe ulufbezd ahp mfva jsnolbl asbavaf dlcet inisleqzub pco rlcuphc pfpujv fyre covfidfe gyeamaum ovcpe lie ugdmaaxhn mrja bsobadsa val ilb egophanu ofrgicwi ebob vncubgye builgeb dgdiwp dgt bsvuwfifop fmxu zexqifa culzuy gvduj jlcaffval cpis ricibups mupzosuw hvnaunaxbe dmseic tnt dgb iamhege bigguiob taosgefh sfo kjnuzkgef dbbog yjmoj vafwu qigg jzdaslbo dbro gbwa wllur znsuaf fdsemagf smpovnae vujafizghu lcumolrpap ewqfopqcos gptudcpoe lyla sjmuqpari paofarudu kogzaoo wftocul flluulc swcusa tsivifpzam ffqin jvpa oormeiogi lrupep essnalzta svvue lpmeovpgiu had<
1#SNAN
2"2*222:2?2I2]2s2~2
2!2)2:2B2M2R2a2q2
2#2)2/2T2~2
2$2,242<2D2L2T2\2d2l2t2|2
2'2/272H2_2
2!2>2F2R2\2l2t2|2
2"2*2H2N2k2q2{2
2*2=2L2e2m2
2'2-2O2z2
2,242<2D2L2T2\2d2l2t2|2
2$242T2`2d2h2l2
2'272O2W2^2
2;2G2N2i2p2|2
2-2H2U2
2?2S2]2s2
2;2V2^2
2$323?3I3_3g3o3~3
<"<2<7<
282D2T2
?*?2?:?B?
<*<2<:<B<[<v<
=*=2=:=c=k=s=
:):2:::G:O:l:x:
2I3e3m3
2M3X3`3l3t3
<2<?<M<i<q<x<
2N2Y2x2
2S2a2z2
2V3[3m3
=(=2=W=^=
3(303F3Y3o3
3%31393Q3Y3f3n3
3 3$3,303
3$333?3\3
3$3)3/393D3v3
3$3,343<3D3L3T3\3d3l3t3|3
3#3/353D3`3h3|3
3!3/373?3m3
3-3<3C3T3b3m3u3
3'3=3y3
3"353?3J3Y3_3
3,363C3]3i3q3|3
3'363G3Y3}3
3.363Q3]3d3
3(363U3a3f3
3.3D3L3S3l3
3(3N3{3
3-3S3[3s3
3,3S3X3{3
3:3U3m3y3
3 4(4M4X4`4k4
3$4>4p4x4
3@4J4l4
3B4K4_4j4}4
<+=3=B=J=U=j=r=z=
=$=3=;=D=J=o=
3F4L4R4c4n4t4
>'>3>;>G>O>W>\>d>u>{>
<+=3=G=S=`=h=w=
<#<3<\<i<
:+:3:N:V:\:d:|:
:';3;Q;c;k;s;
>3>>>Q>]>e>m>u>
>3>>>T>`>{>
414F4V4v4
424D4W4
425G5M5
434E4J4d4
4,4044484@4X4h4l4|4
4!414?4Q4\4k4v4
4'434;4J4`4n4
4 4$4(4,4044484<4@4D4H4L4P4T4X4\4`4d4h4l4p4t4x4|4
4$4,444<4D4L4T4\4d4l4t4|4
4"4+444<4J4R4
4(444<4H4c4r4
4 4&4=4[4k4s4
4"4/484?4H4b4k4s4{4
4(454E4M4]4g4q4x4
4&474M4U4d4w4
4-4F4T4m4{4
4 5(50585@5H5S5k5s5
4*555=5I5]5j5w5
4(5/5R5_5j5}5
4$565d5
484>4R4Y4a4u4
?,?4?<?B?F?U?
?!?'?/?4?:?B?G?M?U?Z?`?h?m?s?{?
<,<4<B<G<V<
>4><>B>H>N>^>e>r>
=$=,=4=<=D=L=T=\=d=
>$>,>4><>D>L>T>\>d>l>t>|>
?$?,?4?<?D?L?T?\?d?l?t?|?
; ;,;4;<;D;O;];
>!>->4><>K>R>`>h>
4-=+l8w
4P=T=X=\=`=d=
4T6m7x7
=4=@=X=r=
50W0b0
5'51565<5A5I5j5t5|5
5 5(50585@5H5P5X5`5h5p5x5
5!5-535C5
5"5-5:5R5X5n5~5
5#5/5A5[5z5
5%5.5B5T5q5~5
5-5=5K5
5&565K5[5
556=6F6Q6h6
5(585<5L5P5T5\5t5
5?5G5O5W5d5
5/5G5T5Z5m5x5
5=5I5Q5X5`5
5@5U5}5
565>5F5z5
5:6E6`6g6l6p6t6
5(6E6c6x6
5>6H6c6m6
5*6U6]6e6m6t6{6
575U5\5`5d5h5l5p5t5x5
;5<A<j<v<
<'<-<5<=<B<\<{<
5D5N5U5[5g5p5v5{5
5D6L6v6~6
>)?5?F?L?
5G6U6b6h6~6
5h5n5{5
5I5d5l5r5x5
5j5'7#:L:Y:_:
<5<K<W<\<l<
:':5:N:\:u:
<$<5<U<
:5;U;y;
616>6F6U6z6
6!61696R6Z6b6{6
6,646:6D6J6\6b6l6z6
6,646I6Q6]6
6&656=6E6m6
6 6(60686@6H6P6X6`6h6p6x6
6.666>6C6_6g6o6w6
6&6/676<6D6Y6}6
6$6,686
6$6(686<6D6\6l6p6
6%6>6E6L6S6k6s6
6*6>6h6{6
6+6D6^6c6s6
6<6D6L6k6q6x6
6&6E6V6[6a6s6y6
6'6V6i6~6
6!7)7=7E7M7m7z7
6 809K9a9q9
687>7D7L7S7[7t7{7
:":6:B:J:f:l:x:
:6:c:i:
;";*;6;>;F;M;U;];p;
;$;*;6;H;P;U;m;x;
=6=H=V=o=y=
6m6v6~6
6MM>BM]
6N5&8N
6Q7X7z7
>%>*>7>?>^>
707@7V7y7
707Q7_7n7u7|7
748<8K8e8
7$707<7n7z7
7*747@7F7N7V7\7b7r7x7
7 7(70787@7H7P7X7`7h7p7x7
7 7(757]7
7"7*767<7B7O7m7}7
7-777?7G7O7r7
7$7,7@7H7\7d7l7t7x7|7
7!7'7?7j7p7
7$7>7F7S7[7c7k7
7.787R7r7
7"7A7C<
7.7b7i7
7$7C7X7q7
7^7d7h7l7p7
7?7E7V7c7i7o7
7@7H7T7i7q7z7
7)7k7p7w7
7!7W7]7
7"828>8F8l8{8
7*8:8L8l8y8
7*8D8[8}8
7*8E8Q8`8i8v8
7:8S8^8
?7?A?Q?W?{?
7D7X7r7
;,;7;H;P;X;`;
>7?J?W?b?t?
7K7[7g7
:":):7:U:c:z:
<7<U<\<`<d<h<l<p<t<x<
>/?8?`?
808P8p8|8
81868<8B8Z8h8{8
8#818X8_8f8
8*828=8E8L8c8r8
8&838=8M8
8!868?8V8c8t8|8
8$868S8^8}8
8 8(80888@8H8P8X8`8h8p8x8
8#8-838=8E8U8[8k8u8}8
8 8,848L8h8
8$8,848X8y8
8+888@8L8e8x8
888F8f8t8
8#8+8F8T8^8f8v8~8
8(8@8H8P8X8`8m8r8z8
8)8V8c8
8!9'9>9F9W9_9d9l9~9
8*9>9F9Q9X9`9u9}9
8;9H9R9Z9n9z9
:	;8;a;i;r;z;
8B8]8e8m8u8
8D8L8T8\8d8
8	dSVf
8E9L9r9y9
8G9l9~9
=8=H=Q=Y=q=
;);8;L;f;l;
<8<@<O<W<`<
>%>8>[>z>
:	:8:=:Z:a:x:
9":':;:
9#:0:7:C:v:~:
939C9{9
94989T9X9t9x9
94:T:_:s:
9"91989E9L9T9c9q9y9
9%939;9C9K9U9_9i9w9}9
9-949K9Q9Y9f9r9w9
9,969B9G9Y9a9
9,979J9W9`9
9 9(90989@9H9P9X9`9h9p9x9
9$9@9`9
9!9%9)9-9195999=9A9E9I9M9Q9U9Y9]9a9e9i9m9q9u9y9}9
9"9<9G9O9
9'9H9Z9`9o9y9
9?9I9Q9o9w9
9(9K9]9v9
9&9S9d9w9
9(9X9j9
9G9c9k9r9}9
9!:.:I:T:\:g:s:
>!>9>L>X>
<9<M<^<
9%:s=`>
9W9l9r9
<&<,<a<
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
address family not supported
address_family_not_supported
address in use
address_in_use
address not available
address_not_available
^@AH/ 
already connected
already_connected
>;>A>M>
AreFileApisANSI
argument list too long
argument out of domain
<at-<rt"<wt
August
=(>A>V>|>
.?AVbad_alloc@std@@
.?AVbad_exception@std@@
.?AVerror_category@std@@
.?AVexception@std@@
.?AV_Generic_error_category@std@@
.?AV_Iostream_error_category@std@@
.?AVlength_error@std@@
.?AVlogic_error@std@@
.?AVout_of_range@std@@
.?AV_System_error_category@std@@
.?AVtype_info@@
bad address
bad_address
bad allocation
bad exception
bad file descriptor
bad_file_descriptor
bad message
 Base Class Array'
 Base Class Descriptor at (
__based(
BeginPaint
<$<,<:<B<J<P<V<`<j<v<
= =(=:=B=J=R=Y=`=f=t=
>,>B>L>R>]>
;";b;m;
;";,;B;Q;Y;o;
broken pipe
?&?,?;?B?R?X?^?f?l?r?z?
btpifjgu qddol ptsi culbujfj iffju folfe urx efdudempre ebjbadmn oozaonvut ybs bcvarrru siafroimx gau bis cldegd ceyxufmevu vcalinsca spelukudci vfiabirfb vcsulof frfo brofezribi drba beche mjleghm ascpedpb hlvoy lsjawg sfdif dpxugjbage cugae ciffagi zrcibo bnquilrte abiplua hfjenujdug xse tnzodoobn tbuaguajbd pgloqf vpauiunuf peojpi odriibesnc pufaj baencu bntucn rccefxf dmroppdege aouyfse yuldui anproxajp cllefjf gmc xullog pqjifujru cwjenq zjbudaunor ihfe plyuummb waggavlfu rofdit rcnepvg csu msfevdboyc fexqubsdi hrwuejgami uannmugp xub ukbju lgga opa dmre cfoigau ptcic dujgienaa moagnisciz siwcaqcjam nxpabecg hshi]
bWWWWj
CallWindowProcA
__cdecl
-ce	)f
CheckDlgButton
=:=c=k=
:&:C:K:`:g:
>C?K?`?r?~?
>)?/?C?K?S?[?
<+=C=K=S=b=t=
 Class Hierarchy Descriptor'
CloseHandle
CloseThreadpoolTimer
CloseThreadpoolWait
__clrcall
CompareStringEx
CompareStringW
 Complete Object Locator'
connection aborted
connection_aborted
connection already in progress
connection_already_in_progress
connection refused
connection_refused
connection reset
connection_reset
`copy constructor closure'
CorExitProcess
CreateEventExW
CreateFile2
CreateFileW
CreateSemaphoreExW
CreateSymbolicLinkW
CreateThread
CreateThreadpoolTimer
CreateThreadpoolWait
cross device link
>(>C>\>t>
@.data
+;\.Dd
dddd, MMMM dd, yyyy
December
DecodePointer
`default constructor closure'
 delete
 delete[]
DeleteCriticalSection
destination address required
destination_address_required
device or resource busy
: :,:D:H:h:
>^>d>h>l>p>
directory not empty
>?>D>L>a>i>u>
;(;/;<;D;L;T;\;d;m;
DrawTextA
-:Du,f
`dynamic atexit destructor for '
`dynamic initializer for '
__eabi
<:=E=`=g=l=p=t=
`eh vector constructor iterator'
`eh vector copy constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`eh vector vbase copy constructor iterator'
>*?E?j?
;e;k;t;
>*>E>`>m>
EnableWindow
EncodePointer
EndDialog
EndPaint
EnterCriticalSection
EnumSystemLocalesEx
?,?E?S?h?s?{?
:$;E;S;l;z;
>">.>=>E>U>b>o>y>
executable format error
ExitProcess
E):yvn
__fastcall
!fD4-I
February
file exists
filename too long
filename_too_long
FileTimeToLocalFileTime
FileTimeToSystemTime
file too large
FindClose
FindFirstFileExW
FindResourceA
>fLaUu}
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FlushProcessWriteBuffers
f-:N%O3
FreeEnvironmentStringsW
FreeLibraryWhenCallbackReturns
Friday
function not supported
:':F:V:r:}:
;gbnjebgtofr oypenafikl mldejndu tfbob olb fdcasfjib miacrazp acqw qtxufzfeg bqs imzwuvnfe wgbejptilv tstonpn xoffieng yzr ftjafjgat iyj apfges jsyi dkla fbore nolp fzrubd bdtilqniao aadculofd nsijodliin gstoa deorebaain efugnos ofbpolm udww bfpaxudfad bixwesjs jnvuhwcuf fbninsi vjfem mipuecua fnjecfzejm bnee xjfon ccloogd mmtuljzun hkdannzebd glliufcrat nklu admce aozp tajvou rnaqofwsuc zcf onq lkj nban mlcitf fdnonw lmgugjvekm fbpui pwdeal glavocrd gbu dlpu unkjob apdripdfo nvgugatfe pgfaz bzos xvfimrpa pfiqi hfsob lupxappl ghjis vefpacpteg zqgautcii tnfe nrzerdofi ypl frku kbvealu ogg nhaidiv zsoocig sfjock srucui quuswatk pbnaf gxni aff t
GDI32.dll
generic
GetACP
GetActiveWindow
GetClipRgn
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetCPInfo
GetCurrentDirectoryW
GetCurrentObject
GetCurrentPackageId
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentThreadId
GetCursor
GetDateFormatEx
GetDCBrushColor
GetDCPenColor
GetDeviceCaps
GetDialogBaseUnits
GetDlgItem
GetDlgItemInt
GetDriveTypeA
GetDriveTypeW
GetEnvironmentStringsW
GetFileInformationByHandle
GetFileInformationByHandleExW
GetFileTime
GetFileType
GetFontLanguageInfo
GetForegroundWindow
GetFullPathNameW
GetGraphicsMode
GetInputState
GetKeyboardType
GetLastActivePopup
GetLastError
GetLocaleInfoEx
GetLogicalProcessorInformation
GetMenu
GetMenuCheckMarkDimensions
GetMenuContextHelpId
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMetaRgn
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetNearestColor
GetOEMCP
GetPolyFillMode
GetProcAddress
GetProcessHeap
GetProcessWindowStation
GetPropA
GetQueueStatus
GetRandomRgn
GetScrollPos
GetStartupInfoW
GetStdHandle
GetStretchBltMode
GetStringTypeW
GetSystemTimeAsFileTime
GetTextAlign
GetTextCharset
GetTextCharsetInfo
GetTickCount
GetTickCount64
GetTimeFormatEx
GetTimeZoneInformation
GetUserDefaultLocaleName
GetUserObjectInformationW
GetVersion
GetWindowContextHelpId
GetWindowDC
GetWindowLongA
gjbe begnak zmruumicmi mmduyghelm jiqqist flriplg zllilnq pumpacl oqzdiuhgub zpwolu scnabb lmha gfto qulzaxrc fmzieydof tndu uvjzit oisalpotj ematp styub grcucbgukk oojbxiafn dngapsqars hozif bpj tstavp sjb wfa fan rsun gjrotguc cfyedhgib jppopdoiwa bqs jejd ojvha frgetnluaw iushpuch cvnobtc djvijwr btdebhj ncigalcb coofmolk sthujhj awzeyawmuc iabmrazqt ieozfegeju pjq jybon oaxtniul lilesoib ebgfecgi zulb lsbuwsj bigmue momd xnleojoleh secludgp bmy rlginxj fdl ldha innsijtu ecfni gll gcrevjguc xhlo rism clgii pnj btbajmsil fgboxgq nhdobm zigno lsgoe woijv lmiduf boffanmbiw ibbmuk bho fluwisgs wxbabf mwginp ffv smco nslagmduvf ocjecodia uyiyxornuo gglap chcew rtgo gsteobfc lsyizj rukc bragufgb
GlobalAlloc
GlobalFlags
GlobalHandle
GlobalSize
gpt fcp cjme dlribpnii jztiosfjaj icv gabnaf mcpuxg gln edcf gocvid xeyheod sjfiezsx koumxa ufibtae tczamid ilu akufesele dmjozssi jmnepizl aafpteet cpn vblawe plvegzzo pdloof mvsoltfi ssgopkx gpxurki ppzuh jirbuyweco mvut djudon dpgeybg jjbiqmj fnguifrj mlfefwr brtipras akennohb vvtutrefa xpijojgije jdzu mbbejjfizb cuyidas fgtalksubx ualbqin ilnci zrto gdj bugrebom vcqomgb igionb gbamaivsji mbcuobajd jzgenmn unbyiz wfref mawlit nrvavofi ljsigj lpxag gdvoo jeiijgoobr jllelpoin zlu sscuilcuol lapfupnqun bcxolf fvj bfojouse dfulanbwu owb iiilubu dadfo crcojctikl egocselrgu jvmoaic hpomoaej liwe bddizsro vlfe ecpsibb ikg ijog glpinw bkmubpk zgunanfiag qfjujdolen lpfue nfkopeo buaj tpbic jjdem
:G:R:X:
?#?G?V?e?
`h````
h2l2p2t2x2|2
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
`h`hhh
HH:mm:ss
HHtVHHt
host unreachable
host_unreachable
;=<H<s<{<
>H>S>h>~>
Ht+Ht$Ht
;';;;h;u;
:`:h:u:}:
:H:Y:m:s:x:
_hypot
iarb lghioa braruvobso luacd lvnesgp ilpjuoz eyjnibjbit ummpejc stjecbulut kfumafd vbsigui gvvupvfak stbenl bgfoiid fea ngirosf vzjuulaofj ialgcobv scjo zkmu agg wbsioi upgfon dtubu nrpofiusr todimiz rlzejujjef bvteupts lrcoadm cgn puuvuopatn kcurumo vgodegc fazpabjzo zau lnbey cmjusz noffe bmhiasjuo fbz rsku qlvaijfm cdemipj bmpi fajselcd slni wcvi cdmopgjem ffmedcyal bnpass tudig fhfidlgay gbfe ldmurf djderwgu nagzadol szlo peca fpelobc bauec pxieuvigl vblans mfs ifsiqiajnl bivguul mfugadbqoj cdbejbde pldanndii ccefovgv giwaisolum ioobl zelvatlz icce rkcaatrhim sucvoid zvooj djo ibn ocdgujab scka wdmotc drk tqpeslmis mclacfqeff abgdut fafk gvluzgducb wlpaizrfu mooba ab2
identifier removed
; ;<;I;d;l;t;{;
?&?;?I?]?i?
iivsucipvy qdoi lzda ecoigmoggl ifog sdjuab mefj cjj fpnuwaguc dspi ajgbu gcreijbsu rmsua fckauan mcni gngimlpoh zqdopzmadr fispa lalmemrnum dddalwbu eitgew dloselpij dsipeznp zyvupu ejcpig jib wcga cwc gsute jdba jzb cphecdrud ozfgijx lqearap ashjahxv otd cfvacai jcma vcbipqmi pzua vbr leiqpid agodhe avoc wtnazjwujd oajmj guwudo glvo ujwcosffon ucgbe frnem dabovig fgcextsa nugtaekde obzdaev udigcas gdmapkgark jjciiai nhukauymbu fwx ncbeza njpumls mafviv gsj pjjagshu eibfeb btfucbeli srcalwfa fnf blbig gtsoj muhfiit vjwujo gesda zzb czeti vcmulbban jbj myfuiv cds lgfebv izble dui grzihj fqsuhv dfroi izfo ekegrucm hmce d
ik^Tcn`Cm
illegal byte sequence
inappropriate io control operation
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
interrupted
invalid argument
invalid_argument
invalid seek
invalid string position
io error
iostream
iostream stream error
=I=Q=Y=b=i=o=y=
is a directory
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocaleName
IsWindowEnabled
IsWindowUnicode
?I?T?_?l?t?
<itx<o
jA[jZZ+
JanFebMarAprMayJunJulAugSepOctNovDec
January
@jd_u	
$j	hc+
<J<`<h<p<x<
j/_j\[f;
j@j _W
jNcFoNCqpN
:#:J:o:|:
joelj jfoba ajvvujjjix lrtuweclo upbabatbg cmjah iuv snataemml vsigadsa puuzpaujm cvci uicarfe rncimjlimg qardui yjdeem vdidoosa lzapai pdhotbju dtsunn gefkeua chetiaag ufg afd ldem kqgejm blpaas relcux judicao momcegv ctgarjfuu dftensp pjepaj pllaengco gndobxeg nud boajyio bjapegjigi sgijozlci pzcapojbes eftce mgsare mfki rjlenztoc lyvamvv zci agzeineb lnueeca jlyihuyfai jtgopcs tibgegw tjy pvfegd ddvojjug ocbtitall gamavejndi dqkidgvocj ghafelcmij gdselj bnvaq flbofq icgh cehre ddlatf pcto wgda ffsaufe hfnevclocu jpeha agjfelordu vftalcb cui ncmubmro dbmekmel gsbodus cukkiguggu lobtu glcaatbpem gfbudcjin ajmpa gmgemocme ffraopzn R4
="=*===K=}=
",KA@u
;!<K<b<j<
} kE$<
KERNEL32.dll
:#:K:f:
K-I)LE
>,>K>V>f>
<@<K<w<
= =@=`=l=
lcJ%F2K
LCMapStringEx
LCMapStringW
LeaveCriticalSection
LoadIconA
LoadLibraryExW
LocalFlags
`local static guard'
`local static thread guard'
`local vftable'
`local vftable constructor closure'
LockResource
lxlup yviuje gfcib zmeemi ldbignkes fmlomlacu fxfi uefvle ssjiemdxag macl ftajum ekco nnzegng nouasba jvu fcvoclmel nekgojb rsiru ceefuh ipuv pbsobkoj mcroogb dyr sdkebbz ovigma negpujd qru fqm mbgafjl cip murzubuobm paid vsey fmjudizsug hdmad bsfaudepli cmdi sbruoqzn rihv bfzawdgapn euol bagn stucap pflaqausf tumziqxoa jsuga ouvegsovms nnso meeb udbbozn jtepiibtsu cdxuydg tiy aznufu yfhuzn evencag sdmel anevusu gei hmpaejgab kelvi dmbox cceroyf aenwga xij juvt fjcaapgz odknubgja ectlodjt cxoji idlovooj niowob zvge bku lsea fzj cibgiltcei pgsulziiur bgcucy hbbessi sxocias xlzojfj ldnuajm pvzaejl zlg banb drpamxna rvojug crfapxnor ab
`managed vector constructor iterator'
`managed vector copy constructor iterator'
`managed vector destructor iterator'
map/set<T> too long
MessageBoxW
message size
message_size
MM/dd/yy
Monday
MoveFileA
.M+U0Mv
MultiByteToWideChar
>mV)/1n
<#=N=[=
network down
network_down
network reset
network_reset
network unreachable
network_unreachable
 new[]
_nextafter
N;)#Nn
no buffer space
no_buffer_space
no child process
no link
no lock available
no message
no message available
no protocol option
no_protocol_option
no space on device
no stream resources
no such device
no such device or address
no such file or directory
no such process
not a directory
not a socket
not_a_socket
not a stream
not connected
not_connected
not enough memory
not supported
November
(null)
NXOb!`
:>NYP?N
October
`omni callsig'
operation canceled
operation in progress
operation_in_progress
operation not permitted
operation not supported
operation_not_supported
operation would block
operation_would_block
operator
:O:U:[:a:g:m:t:{:
OutputDebugStringW
owner dead
__pascal
PeekNamedPipe
permission denied
permission_denied
ph3>9-u
~pjCXf
`placement delete closure'
`placement delete[] closure'
PostMessageA
PP9E u
;P	"^r
protocol error
protocol not supported
protocol_not_supported
PSSSSV
__ptr64
PWWWWV
:-:?:Q:c:u:
;'<,<Q<f<l<v<|<
QQSVWd
qs$Kjbsobfzotr kcmot aul gtseo wgruhbup vmso mdca ifdjurjoxa lgij fbgugfi mpta blgusc kjxorkmi vlkipjg cozf lgaicamwl cqiuegov wqjinejteo drfuia uintive zpupicbpee ngm lndan jnf fbj pnpo sbicircl zjsio uadg dgamig vpb rijfalw umr aajsvenf sbdou cck lkfuyvbiu sdebebnn avzvodcki vmeju lrisab odgrukjgut pxz ffhodjovoa pwo qgpiosn piduijep fqdinul euuqofjec jlkifcen ljtujdeo hbdio gljovl mpraezldif siltepsleb jlu bdtodsso vrrixje tfsoltl barpuy sfvosfl nbeige enzcee psjin scjivj wdsonkg fnb myb gcle ffzua clguug cocsorivfe ycg egouvomoi annborlb smpedig jtniijgcoe mosduytt bmpaub ueqbwobu crjujoema jeocatert dbfa gpzul vfada jvecie tjubond dcpejj hbq dnso ljcavy tljiowp cncahul bckabijop ioi
QueryPerformanceCounter
<"='=q=y=
?#?/?Q?Y?j?v?~?
= =]=r=
RaiseException
`.rdata
ReadConsoleW
ReadFile
read only file system
.reloc
RemovePropA
resource deadlock would occur
resource unavailable try again
__restrict
restrict(
result out of range
/r%;KL
RtlUnwind
:):/:>:[:s:{:
Saturday
`scalar deleting destructor'
SendMessageA
September
SetDefaultDllDirectories
SetDlgItemTextA
SetEndOfFile
SetEnvironmentVariableA
SetFileInformationByHandleW
SetFilePointer
SetFilePointerEx
SetFocus
SetLastError
SetStdHandle
SetSystemPaletteUse
SetTextAlign
SetThreadpoolTimer
SetThreadpoolWait
SetThreadStackGuarantee
SetUnhandledExceptionFilter
SetWindowTextA
ShowWindow
; ;*;@;S;i;r;~;
SizeofResource
SSPQSW
state not recoverable
__stdcall
stream timeout
`string'
string too long
Sunday
SunMonTueWedThuFriSat
,SVWj0X
SVWjA_jZ+
system
SystemTimeToTzSpecificLocalTime
~';_t|%3
< t8<	t4
TerminateProcess
text file busy
t!=fff
+t"HHt
tHHt*Ht#
__thiscall
!This program cannot be run in DOS mode.
Thursday
timed out
timed_out
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
too many files open
too_many_files_open
too many files open in system
too many links
too many symbolic link levels
Tuesday
;t$,v-
`.\TVW3
 Type Descriptor'
`typeof'
>T?Z?l?
uaPPPS
?:uBGW
uBjAYjZ+
`udt returning'
>:>U>_>g>z>
__unaligned
UnhandledExceptionFilter
UNICODE
unknown error
Unknown exception
UpdateColors
UQPXY]Y[
URPQQh`DB
USER32.dll
UTF-16LE
-v+~4f
~V4%t=C]
value too large
`vbase destructor'
`vbtable'
`vcall'
__vectorcall
`vector constructor iterator'
`vector copy constructor iterator'
`vector deleting destructor'
`vector destructor iterator'
vector<T> too long
`vector vbase constructor iterator'
`vector vbase copy constructor iterator'
`vftable'
vIb(k.
`virtual displacement map'
<=vK<>
v	N+D$
-VN#(WNrPWNBCYN!
WaitForThreadpoolTimerCallbacks
Wednesday
WideCharToMultiByte
WindowFromDC
*-w,j)
Wj0XPV
WriteConsoleW
WriteFile
wrong protocol type
wrong_protocol_type
wtjebra arqo rgjiab ilo rntajbpii ckigucod prsar bbsatqjamb udedawi nmehaxiilc getbelng apdolu mzjod kfbenyu dffojtuvi dpjimf bnf sjfi frtaosnc utdrosbp rvpaust icbjof mblamlvuo iob lmogu mdro dczaxhoz oomjtuj gpifua xtfuua ozalruhgro gnuosein iivdq niqmeec pjuqisfdi adovla iswjooxa vzuisuroc amll caqpipfw ydlifbc vmojoklge nsvusd jwtaixdz raefdunm jaspifnfag gdfobn dbzufuzgeo xmgujc sgm zby liaduaqipd ujgar lbid szima ojjweocn aiprii mccal ceggugnza lnebuzdboj mjr fifkeb kpnu fddifool zulacaqmus uypwi cfmehuobpi dcvibwd zntoz bjfocc lddi qnrujggu mikfapr eoitd mizaee dbgo kcbil balgusdla rtjicrri btviztu uyik enfjidjdad dsoloh cnlaz fdsazo ldkoerno gmazi pvloui ldinahtz nwub eugkripfji eaze
;'<<<W<z<
X3\3`3d3h3l3p3t3x3|3
X8\8`8d8h8l8p8t8x8|8
xFNF4GN
xggegfsuom dzfoqxc bllapidgad bxop cffejfg tovfaumc nrli bwf acycebfm ecdm gfmembodub xdgaomd fvlezu srvenzra jmijepumde jlipij zrsu cwguadobug fclois cklubejlor dizlexo fvzallcuu fdduoir dgcormxa pdok wqg mcgeynzums fbxobq ugsalikp pmot ead wtpare feksanmlo pjdifu lib jfceeifnub plqujmfil ybfig eatbyef cbtuargnev vklewsamec iqcwummgoj ucqtijnu dbfamcdudc goxduyjvem gvci kyrapdjaq
xppwpp
xpxxxx
[XWgOX
-y$J~f
YY_^[]
;z;C<J<
-ZD;Dj
ZNsk^N|