Analysis Date2015-05-20 17:58:46
MD5c650430cff684fdc34f6e3ad1cbdabaf
SHA1f019c01cd5041d155f266b02c4797f9b0175b0aa

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: f77cb2c94ecb9d05104927d5915a58b2 sha1: 4165d6d9dd501761783b0c72f4d9d4ebcd7a6d8a size: 311808
Section.rdata md5: 4705c2f3d85870923bbbf5b678a895ea sha1: 848f4425a9dac27863c1912424b7befed029c2f0 size: 60416
Section.data md5: 987b34881398df3c4b18f0a9fe9fb14a sha1: b47cda14f449dad46b361dcfe0c597d9e9bdc476 size: 7680
Section.reloc md5: 4f2a2069fc6bdc934563fd896fd4e18f sha1: 66f42d5125ce913fd210f8f2cb2feec18e6cb619 size: 24576
Timestamp2015-05-11 06:56:04
PackerMicrosoft Visual C++ 8
PEhashd9f2d43934048f61f682b1d371d632a1dc49f975
IMPhashedcd41daca05c9b310051ea8db80490e

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates FileC:\enkmiiclywsvlge\niffv3x
Creates FileC:\WINDOWS\enkmiiclywsvlge\niffv3x
Creates FileC:\enkmiiclywsvlge\mtyh1m5bfwepyocsanlg.exe
Deletes FileC:\WINDOWS\enkmiiclywsvlge\niffv3x
Creates ProcessC:\enkmiiclywsvlge\mtyh1m5bfwepyocsanlg.exe

Process
↳ C:\enkmiiclywsvlge\mtyh1m5bfwepyocsanlg.exe

RegistryHKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Level Mapper Block Firewall Class Builder ➝
C:\enkmiiclywsvlge\xpoidmoz.exe
Creates FileC:\enkmiiclywsvlge\xpoidmoz.exe
Creates FileC:\enkmiiclywsvlge\niffv3x
Creates FilePIPE\lsarpc
Creates FileC:\enkmiiclywsvlge\vfmeao
Creates FileC:\WINDOWS\enkmiiclywsvlge\niffv3x
Deletes FileC:\WINDOWS\enkmiiclywsvlge\niffv3x
Creates ProcessC:\enkmiiclywsvlge\xpoidmoz.exe
Creates ServiceCardSpace Host Machine Interactive Encrypting - C:\enkmiiclywsvlge\xpoidmoz.exe

Process
↳ Pid 804

Process
↳ Pid 852

Process
↳ C:\WINDOWS\System32\svchost.exe

Creates FileC:\WINDOWS\system32\WBEM\Logs\wbemess.log

Process
↳ Pid 1128

Process
↳ Pid 1212

Process
↳ C:\WINDOWS\system32\spoolsv.exe

Process
↳ Pid 1856

Process
↳ Pid 1148

Process
↳ C:\enkmiiclywsvlge\xpoidmoz.exe

Creates Filepipe\net\NtControlPipe10
Creates FileC:\enkmiiclywsvlge\niffv3x
Creates File\Device\Afd\Endpoint
Creates FileC:\enkmiiclywsvlge\xpbrqbcoxk.exe
Creates FileC:\enkmiiclywsvlge\vfmeao
Creates FileC:\WINDOWS\enkmiiclywsvlge\niffv3x
Creates FileC:\enkmiiclywsvlge\tjggvzlbgk
Deletes FileC:\WINDOWS\enkmiiclywsvlge\niffv3x
Creates Processtqdpuczjvaa0 "c:\enkmiiclywsvlge\xpoidmoz.exe"

Process
↳ C:\enkmiiclywsvlge\xpoidmoz.exe

Creates FileC:\enkmiiclywsvlge\niffv3x
Creates FileC:\WINDOWS\enkmiiclywsvlge\niffv3x
Deletes FileC:\WINDOWS\enkmiiclywsvlge\niffv3x

Process
↳ tqdpuczjvaa0 "c:\enkmiiclywsvlge\xpoidmoz.exe"

Creates FileC:\enkmiiclywsvlge\niffv3x
Creates FileC:\WINDOWS\enkmiiclywsvlge\niffv3x
Deletes FileC:\WINDOWS\enkmiiclywsvlge\niffv3x

Network Details:

DNSpresentmeasure.net
Type: A
95.211.230.75
DNScollegemeasure.net
Type: A
184.168.221.31
DNScollegeafraid.net
Type: A
208.91.197.241
DNScollegecircle.net
Type: A
50.63.202.52
DNSsk129.webcname.net
Type: A
182.18.22.158
DNSthinkforest.net
Type: A
175.126.167.50
DNSddos.dnsnb8.net
Type: A
DNSthinkdinner.net
Type: A
DNSpresentdinner.net
Type: A
DNSthinkafraid.net
Type: A
DNSpresentafraid.net
Type: A
DNSthinkcircle.net
Type: A
DNSpresentcircle.net
Type: A
DNSchiefmeasure.net
Type: A
DNSchiefdinner.net
Type: A
DNScollegedinner.net
Type: A
DNSchiefafraid.net
Type: A
DNSchiefcircle.net
Type: A
DNSoftenmeasure.net
Type: A
DNSalonemeasure.net
Type: A
DNSoftendinner.net
Type: A
DNSalonedinner.net
Type: A
DNSoftenafraid.net
Type: A
DNSaloneafraid.net
Type: A
DNSoftencircle.net
Type: A
DNSalonecircle.net
Type: A
DNSmiddlemeasure.net
Type: A
DNStwelvemeasure.net
Type: A
DNSmiddledinner.net
Type: A
DNStwelvedinner.net
Type: A
DNSmiddleafraid.net
Type: A
DNStwelveafraid.net
Type: A
DNSmiddlecircle.net
Type: A
DNStwelvecircle.net
Type: A
DNSrathermeasure.net
Type: A
DNSmorningmeasure.net
Type: A
DNSratherdinner.net
Type: A
DNSmorningdinner.net
Type: A
DNSratherafraid.net
Type: A
DNSmorningafraid.net
Type: A
DNSrathercircle.net
Type: A
DNSmorningcircle.net
Type: A
DNSstrangemeasure.net
Type: A
DNShistorymeasure.net
Type: A
DNSstrangedinner.net
Type: A
DNShistorydinner.net
Type: A
DNSstrangeafraid.net
Type: A
DNShistoryafraid.net
Type: A
DNSstrangecircle.net
Type: A
DNShistorycircle.net
Type: A
DNSamountmeasure.net
Type: A
DNSweathermeasure.net
Type: A
DNSamountdinner.net
Type: A
DNSweatherdinner.net
Type: A
DNSamountafraid.net
Type: A
DNSweatherafraid.net
Type: A
DNSamountcircle.net
Type: A
DNSweathercircle.net
Type: A
DNSthickmeasure.net
Type: A
DNSclassmeasure.net
Type: A
DNSthickdinner.net
Type: A
DNSclassdinner.net
Type: A
DNSthickafraid.net
Type: A
DNSclassafraid.net
Type: A
DNSthickcircle.net
Type: A
DNSclasscircle.net
Type: A
DNSthinkwheat.net
Type: A
DNSpresentwheat.net
Type: A
DNSthinkanger.net
Type: A
DNSpresentanger.net
Type: A
DNSthinkalways.net
Type: A
DNSpresentalways.net
Type: A
DNSpresentforest.net
Type: A
DNSchiefwheat.net
Type: A
DNScollegewheat.net
Type: A
DNSchiefanger.net
Type: A
DNScollegeanger.net
Type: A
DNSchiefalways.net
Type: A
DNScollegealways.net
Type: A
DNSchiefforest.net
Type: A
DNScollegeforest.net
Type: A
DNSoftenwheat.net
Type: A
DNSalonewheat.net
Type: A
DNSoftenanger.net
Type: A
DNSaloneanger.net
Type: A
DNSoftenalways.net
Type: A
DNSalonealways.net
Type: A
HTTP GEThttp://presentmeasure.net/index.php
User-Agent:
HTTP GEThttp://collegemeasure.net/index.php
User-Agent:
HTTP GEThttp://collegeafraid.net/index.php
User-Agent:
HTTP GEThttp://collegecircle.net/index.php
User-Agent:
HTTP GEThttp://thinkalways.net/index.php
User-Agent:
HTTP GEThttp://thinkforest.net/index.php
User-Agent:
Flows TCP192.168.1.1:1031 ➝ 95.211.230.75:80
Flows TCP192.168.1.1:1032 ➝ 184.168.221.31:80
Flows TCP192.168.1.1:1033 ➝ 208.91.197.241:80
Flows TCP192.168.1.1:1034 ➝ 50.63.202.52:80
Flows TCP192.168.1.1:1035 ➝ 182.18.22.158:80
Flows TCP192.168.1.1:1036 ➝ 175.126.167.50:80

Raw Pcap
0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2070   : close..Host: p
0x00000040 (00064)   72657365 6e746d65 61737572 652e6e65   resentmeasure.ne
0x00000050 (00080)   740d0a0d 0a                           t....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2063   : close..Host: c
0x00000040 (00064)   6f6c6c65 67656d65 61737572 652e6e65   ollegemeasure.ne
0x00000050 (00080)   740d0a0d 0a                           t....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2063   : close..Host: c
0x00000040 (00064)   6f6c6c65 67656166 72616964 2e6e6574   ollegeafraid.net
0x00000050 (00080)   0d0a0d0a 0a                           .....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2063   : close..Host: c
0x00000040 (00064)   6f6c6c65 67656369 72636c65 2e6e6574   ollegecircle.net
0x00000050 (00080)   0d0a0d0a 0a                           .....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2074   : close..Host: t
0x00000040 (00064)   68696e6b 616c7761 79732e6e 65740d0a   hinkalways.net..
0x00000050 (00080)   0d0a0d0a 0a                           .....

0x00000000 (00000)   47455420 2f696e64 65782e70 68702048   GET /index.php H
0x00000010 (00016)   5454502f 312e300d 0a416363 6570743a   TTP/1.0..Accept:
0x00000020 (00032)   202a2f2a 0d0a436f 6e6e6563 74696f6e    */*..Connection
0x00000030 (00048)   3a20636c 6f73650d 0a486f73 743a2074   : close..Host: t
0x00000040 (00064)   68696e6b 666f7265 73742e6e 65740d0a   hinkforest.net..
0x00000050 (00080)   0d0a0d0a 0a                           .....


Strings
Ee
t
aSFlKaS
"
 
\
 
.
\
.
  
.
e
. 
.
e
. 
00-+ 00-+ &**00-+ .
-
-1
+-0-E-
-0
\
.
-
..
0
0 
- 
000
-
-
..
u
                                 
2.exe
- abort() has been called
ADVAPI32.DLL
af-za
af-ZA
alnum
alpha
america
american
american english
american-english
April
ar-ae
ar-AE
ar-bh
ar-BH
ar-dz
ar-DZ
ar-eg
ar-EG
ar-iq
ar-IQ
ar-jo
ar-JO
ar-kw
ar-KW
ar-lb
ar-LB
ar-ly
ar-LY
ar-ma
ar-MA
ar-om
ar-OM
ar-qa
ar-QA
ar-sa
ar-SA
ar-sy
ar-SY
ar-tn
ar-TN
ar-ye
ar-YE
- Attempt to initialize the CRT more than once.
- Attempt to use MSIL code from this assembly during native code initialization
August
australian
az-az-cyrl
az-AZ-Cyrl
az-az-latn
az-AZ-Latn
.bat
be-by
be-BY
belgian
bg-bg
bg-BG
blank
bn-in
bn-IN
britain
bs-ba-latn
bs-BA-Latn
ca-es
ca-ES
canadian
china
chinese
chinese-hongkong
chinese-simplified
chinese-singapore
chinese-traditional
CLC_ALL
.cmd
cntrl
.com
CONOUT$
- CRT not initialized
cs-cz
cs-CZ
cy-gb
cy-GB
czech
da-dk
da-DK
dddd, MMMM dd, yyyy
de-at
de-AT
December
de-ch
de-CH
de-de
de-DE
de-li
de-LI
de-lu
de-LU
digit
div-mv
div-MV
DOMAIN error
dutch-belgian
ECHN
ECHS
ECHT
ECZE
EDEA
EDEC
EDEL
EDES
EENA
EENB
EENC
EENG
EENI
EENJ
EENL
EENS
EENT
EENU
EENZ
EESA
EESB
EESC
EESD
EESE
EESF
EESG
EESH
EESI
EESL
EESM
EESN
EESO
EESR
EESS
EESU
EESV
EESY
EESZ
EFRB
EFRC
EFRL
EFRS
EGBR
EHKG
EITS
Eja-JP
Ejjj
Ejjjj
EKOR
el-gr
el-GR
emscoree.dll
en-au
en-AU
en-bz
en-BZ
en-ca
en-CA
en-cb
en-CB
en-gb
en-GB
england
english-american
english-aus
english-belize
english-can
english-caribbean
english-ire
english-jamaica
english-nz
english-south africa
english-trinidad y tobago
english-uk
english-us
english-usa
en-ie
en-IE
en-jm
en-JM
ENLB
ENLD
en-nz
en-NZ
ENON
ENOR
en-ph
en-PH
en-tt
en-TT
en-us
en-US
en-za
en-ZA
ENZL
en-zw
en-ZW
EPRI
EPTB
ER6002
es-ar
es-AR
es-bo
es-BO
es-cl
es-CL
es-co
es-CO
es-cr
es-CR
es-do
es-DO
es-ec
es-EC
es-es
es-ES
es-gt
es-GT
es-hn
es-HN
es-mx
es-MX
es-ni
es-NI
es-pa
es-PA
es-pe
es-PE
es-pr
es-PR
es-py
es-PY
es-sv
es-SV
es-uy
es-UY
es-ve
es-VE
ESVF
ESVK
et-ee
et-EE
ETTO
eu-es
eu-ES
EUSA
EZAF
EZHH
EZHI
fa-ir
fa-IR
February
fi-fi
fi-FI
- floating point support not loaded
fo-fo
fo-FO
fr-be
fr-BE
fr-ca
fr-CA
fr-ch
fr-CH
french-belgian
french-canadian
french-luxembourg
french-swiss
fr-fr
fr-FR
Friday
fr-lu
fr-LU
fr-mc
fr-MC
german-austrian
german-lichtenstein
german-luxembourg
german-swiss
gl-es
gl-ES
graph
great britain
gu-in
gu-IN
         (((((                  H
he-il
he-IL
HH:mm:ss
hi-in
hi-IN
holland
hong-kong
hr-ba
hr-BA
hr-hr
hr-HR
hu-hu
hu-HU
hy-am
hy-AM
id-id
id-ID
- inconsistent onexit begin-end variables
irish-english
is-is
is-IS
italian-swiss
it-ch
it-CH
it-it
it-IT
ja-jp
January
jjjjj
July
June
ka-ge
ka-GE
kernel32.dll
kk-kz
kk-KZ
kn-in
kn-IN
kok-in
kok-IN
ko-kr
ko-KR
ky-kg
ky-KG
LC_COLLATE
LC_CTYPE
LC_MONETARY
LC_NUMERIC
LC_TIME
lower
lt-lt
lt-LT
lv-lv
lv-LV
March
Microsoft Visual C++ Runtime Library
mi-nz
mi-NZ
mk-mk
mk-MK
ml-in
ml-IN
MM/dd/yy
mn-mn
mn-MN
Monday
mr-in
mr-IN
ms-bn
ms-BN
ms-my
ms-MY
mt-mt
mt-MT
nb-no
nb-NO
new-zealand
nl-be
nl-BE
nl-nl
nl-NL
nn-no
nn-NO
norwegian
norwegian-bokmal
norwegian-nynorsk
- not enough space for arguments
- not enough space for environment
- not enough space for locale information
- not enough space for lowio initialization
- not enough space for _onexit/atexit table
- not enough space for stdio initialization
- not enough space for thread data
November
ns-za
ns-ZA
(null)
October
pa-in
pa-IN
pl-pl
pl-PL
portuguese-brazilian
pr china
pr-china
print
Program: 
<program name unknown>
pt-br
pt-BR
pt-pt
pt-PT
puerto-rico
punct
- pure virtual function call
quz-bo
quz-BO
quz-ec
quz-EC
quz-pe
quz-PE
R6008
R6009
R6010
R6016
R6017
R6018
R6019
R6024
R6025
R6026
R6027
R6028
R6030
R6031
R6032
R6033
R6034
ro-ro
ro-RO
runtime error 
Runtime Error!
ru-ru
ru-RU
sa-in
sa-IN
Saturday
se-fi
se-FI
se-no
se-NO
September
se-se
se-SE
SING error
sk-sk
sk-SK
slovak
sl-si
sl-SI
sma-no
sma-NO
sma-se
sma-SE
smj-no
smj-NO
smj-se
smj-SE
smn-fi
smn-FI
sms-fi
sms-FI
south africa
south-africa
south korea
south-korea
space
spanish-argentina
spanish-bolivia
spanish-chile
spanish-colombia
spanish-costa rica
spanish-dominican republic
spanish-ecuador
spanish-el salvador
spanish-guatemala
spanish-honduras
spanish-mexican
spanish-modern
spanish-nicaragua
spanish-panama
spanish-paraguay
spanish-peru
spanish-puerto rico
spanish-uruguay
spanish-venezuela
sq-al
sq-AL
sr-ba-cyrl
sr-BA-Cyrl
sr-ba-latn
sr-BA-Latn
sr-sp-cyrl
sr-SP-Cyrl
sr-sp-latn
sr-SP-Latn
Sunday
sv-fi
sv-FI
sv-se
sv-SE
swedish-finland
swiss
sw-ke
sw-KE
syr-sy
syr-SY
ta-in
ta-IN
te-in
te-IN
This indicates a bug in your application.
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
th-th
th-TH
Thursday
TLOSS error
tn-za
tn-ZA
trinidad & tobago
tr-tr
tr-TR
tt-ru
tt-RU
Tuesday
uk-ua
uk-UA
- unable to initialize heap
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
united-kingdom
united-states
upper
ur-pk
ur-PK
USER32.DLL
uz-uz-cyrl
uz-UZ-Cyrl
uz-uz-latn
uz-UZ-Latn
vi-vn
vi-VN
Wednesday
xdigit
xh-za
xh-ZA
zh-chs
zh-CHS
zh-cht
zh-CHT
zh-cn
zh-CN
zh-hk
zh-HK
zh-mo
zh-MO
zh-sg
zh-SG
zh-tw
zh-TW
zu-za
zu-ZA
                          
0%0-0@0W0
0!0)01090A0I0Q0W0e0m0u0
0"0*030;0C0K0P0X0c0i0
0#0+03080@0T0\0h0p0|0
0$0.050F0M0T0^0k0s0{0
0#0/070B0I0W0_0g0{0
0#0+070M0S0Z0d0l0t0|0
0!0+0A0K0c0s0
0$0/0C0P0X0j0q0y0
0'0<0C0U0]0e0
0!0<0J0V0a0k0
0&0/0K0Q0[0h0v0
0-0=0L0Z0r0x0
0%010c0r0{0
0&02090A0I0Q0Y0h0p0|0
0%080@0H0P0V0_0g0r0
0%080E0Q0V0^0f0n0z0
0/090F0P0b0
0?0G0O0W0r0z0
010>0C0Q0
0*1;1J1U1]1|1
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
0.181>1D1P1X1`162H2O2W2_2h2
"0;1F1`1x1
0%2-222E2M2\2d2l2t2|2
030;0D0M0o0x0~0
030U0b0j0r0w0
? ?0?4?8?@?X?h?l?|?
050>0P0X0h0p0x0
051O1X1|1~2
:":(:0:5:;:C:H:N:V:[:a:i:n:t:|:
060D0Q0
060K0X0i0q0
<$<*<0<6<<<B<H<N<T<Z<`<f<l<r<x<~<
080T0n0
0.868E8V8^8t8
< <(<0<8<@<H<P<X<`<h<p<x<
= =(=0=8=@=H=P=X=`=h=p=x=
> >(>0>8>@>H>P>X>`>h>p>x>
; ;(;0;8;@;H;P;X;`;h;p;x;
: :(:0:8:@:H:P:X:`:h:p:x:
<0| <9
090?0K0`0j0q0w0
<(<0<B<N<Z<
?&?0?C?
?0?>?F?R?Z?b?n?y?
>(>0>;>G>\>g>v>
0H1L1P1T1X1\1`1d1h1l1p1t1x1|1
<$<0<<<H<T<`<l<x<
0L1Y1`1u1
<0|L<9
<0|m<9
0NO72Ni
:&:0:Q:a:i:q:
0T1g1o1t1|1
0t-HHt
:0:@:V:
=*=0=V=a=m=t=|=
0[Yi`g
= >'>1>
1&101]1g1
1$1,10141<1P1X1`1h1l1p1x1
1#1*11181?1F1M1T1[1b1i1p1w1
1!1&1+1<1A1R1W1d1i1z1
1&1,1;1\1d1k1x1
1)111=1J1O1W1l1w1~1
1"1.1]1	3
1!1(1,13171
1+111F1]1h1}1
1%1.1@1F1L1m1z1
1 1%1.1Q1W1]1h1n1t1
1'1/1<1X1d1p1x1
1%1-141;1C1J1S1n1v1
1$1,141<1D1L1T1\1d1l1t1|1
1 1(141@1F1P1X1_1p1v1
1#1/151=1D1M1V1[1c1i1
1$1+161<1D1L1[1l1
1$1,161>1D1P1n1
1'1/171E1M1Y1a1i1q1x1
1-1<1C1K1S1^1x1
1"1+1J1e1m1t1
1.1<1U1\1c1k1
1"121;1C1V1b1j1v1}1
11272?2y2
1*181Q1_1x1
1"1S1c1
1"21292@2H2P2d2l2x2
1'222C2P2U2]2u253<3O3V3}3
1(2/2H2
1&2+2j2o2x2}2
1	2C2K2f2n2v2~2
+151;1O1[1{1
171E1P1_1e1l1s1
172E2T2\2d2m2t2|2
172S5{5
:1:7:A:M:S:a:i:y:
?!?'?1?7?H?O?W?^?j?r?
? ?(?1?9?A?I?V?^?e?m?u?
<)<1<9<A<K<S<[<c<l<{<
='>1>9>A>M>U>]>e>l>r>x>
>#>+>1>9>C>g>m>y>
>!>)>1>9>@>H>X>f>m>x>
;';1;A;P;[;c;
1F1T1_1g1s1
?!?)?1?F?N?Z?b?l?y?
1H1S1a1~1
> >1>I>Q>Y>u>
<1<=<O<W<_<h<p<
1#QNAN
1#SNAN
?#?2?<?]?
21282N2U2_2j2p2v2}2
2)212>2F2[2c2k2s2}2
2 2(20262W2i2
2"2(20292@2K2Z2
!2%2)2-2125292=2y4
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2
2*222>2F2N2V2\2e2m2u2}2
2&222>2F2N2V2f2r2y2
222:2E2X2p2u2
2 2(2@2F2N2Z2b2i2|2
2"2)2=2G2O2V2c2
2*222L2T2c2j2
2$2+232I2Q2Y2_2i2u2}2
2$2,242<2D2L2T2\2d2l2t2|2
2 2+242V2^2~2
2#2*252Q2[2c2v2
2&2.262C2K2S2[2g2o2{2
2)2/272<2D2P2\2c2k2
2!2)292b2
2,2:2B2N2[2e2m2
2$2:2K3i3m3q3u3y3}3
2$2*2U2a2i2
2)232W2a2
2$282X2x2
2=2b2m2B3b3
2,2D2g2{2
2>2F2N2V2\2b2j2o2
2?2G2S2l2{2
2.2M2Z2o2v2
263=3c3j3
272?2^2i2
=$=(=.=2=7===A=G=K=Q=U=[=_=q=
= =&=,=2=8=>=D=J=P=V=\=b=h=n=t=
;2;8;R;X;s;
? ?2?9?A?L?`?n?t?|?
<+<2<9<@<x<
2a3i3q3
<,=2=?=\=b=
>2>:>B>J>T>\>d>i>q>|>
<*<2<:<B<J<V<^<k<s<{<
<&<2<:<C<R<
2D2_2k2z2
?!?+?2?J?Z?h?o?v?~?
:!:):2:::P:`:h:p:x:
;";2;=;q;x;
:):2:R:Z:b:j:r:}:
2T3\3d3p3|3
:":*:2:w:
<$<2<<<X<]<
323E3O3[3
323F3Q3d3q3z3
3$323:3A3T3[3`3j3q3y3
3"32383D3L3T3[3b3l3u3}3
3 3@3\3`3
3)333;3C3L3d3o3v3
3 3(3=3C3L3d3l3w3
3'3/3;3D3N3V3a3p3|3
3$3.343:3B3J3R3Z3_3j3z3
3$3,343<3D3L3T3\3d3l3t3|3
3%3-353
3%3-353=3F3R3a3h3s3z3
3'3/373
3#3/373<3B3V3^3f3n3x3
3&3.3B3I3Y3_3
3%3;3C3[3a3o3
3#3.3C3Q3s3
3!3/3H3V3o3}3
3!3'3K3Q3r3x3
3!3(3T3\3u3
3(353;3@3F3N3Z3a3i3q3~3
3-353?3N3
3%353;3V3[3n3t3
3.363O3\3d3l3t3|3
3'383?3W3a3f3q3
3#3d3r3
3?3g3r3z3
3;3L3R3^3n3t3
343@3D3H3L3h3l3
3	4!4'40464@4K4
3	4=4v4
3"4p7]8
374B4Q4[4f4y4
393\3d3s3
:!:&:,:3:A:J:P:V:`:f:r:
;';3;B;
>)>3>:>B>Z>d>l>x>~>
;!;);3;;;C;K;
3D4L4T4[4c4w4~4
;!;+;3;<;D;Q;\;f;n;v;
;#;+;3;;;F;R;f;m;w;
?"?(?3?;?G?[?f?n?v?
>!>.>3>G>O>W>^>i>p>w>
3I4Q4h4m4
<3<:<I<P<[<q<}<
3J4U4a4
3-N|A-N
?"?3?:?N?V?^?c?k?s?
;#;+;3;:;P;k;
<#<3<r<
;!;';4;
40<0D0H0P0d0l0
40=0U0[0g0
414i4o4u4{4
4+40454L4
4*424:4B4O4Y4a4g4p4
4+434;4C4K4Q4
4.434?4D4c4x5~5
4 4(414@4L4n4x4
4&4.434;4O4b4h4n4
4 4@4`4
4$4,444<4D4L4\4d4l4t4|4
4$4,444<4D4L4T4\4d4l4t4|4
4$4,444<4D4O4U4^4d4i4q4y4
4!4&4?4]4e4m4
4!4(4/464>4H4e4r4|4
4!4'4=4B4K4Q4i4z4
4%4-464?4G4S4[4m4x4
4#4+474>4F4N4[4e4
4!4.484M4U4]4o4
4 4>4a4i4q4v4
4#4?4L4b4z4
4$4:4M4c4l4x4
4%4<4N4U4b4n4v4~4
4!474=4B4]4e4m4
4.484F4_4i4q4v4~4
4#4D4Z4|4
4+4G4N4a4q4
4?4G4O4W4_4j4t4|4
4%5,545=5X5e5m5u5
4!5&5K5`5f5q5{5
4(60686[6a6l6v6}6
474?4S4`4j4r4z4
495A5I5\5b5h5s5{5
495D5P5X5`5l5
:4;A;];e;m;w;|;
=4=B=[=i=v=
>$>,>4><>D>h>p>
4f4q4{4
;";(;.;4;:;@;F;L;R;X;^;d;j;p;v;|;
<&<4<<<H<N<V<[<|<
:,:4:@:H:O:c:j:
;$;,;4;<;H;T;\;h;p;};
<$<(<,<4<L<\<`<p<t<x<|<
;(;4;@;L;X;d;p;|;
:(:4:@:L:X:d:p:|:
4U4]4f4n4v4~4
505;5C5K5S5[5c5k5p5y5
50575A5I5e5l5t5|5
505P5p5
545F5U5c5n5x5
5$505<5H5T5`5l5x5
5 505;5X5
5'505N5\5i5s5~5
5%505Q5a5g5o5u5
5#515F5L5V5]5e5w5
5*545;5O5V5[5g5o5
5$545=5p5v5|5
5"5.53536[6i6
5#5+535G5M5T5a5h5n5
5$5,545<5D5L5T5\5d5l5t5|5
5#5.555>5R5f5l5t5
5#5*565=5D5K5S5[5`5h5|5
5%5-5b5m5|5
5$5+5C5'7/787?7G7O7a7o7
5&5+5D5L5d5k5r5z5
5&5.5E5M5X5e5m5y5
5$5/5I5S5]5i5x5
5)5;5M5_5q5
5"5(5O5[5c5k5
5'565[5f5
557S7l7s7{7
5#61676h6s6|6
5	6"6)6/666H6O6a6k6~6
585O5W5f5n5v5~5
595?5P5U5]5c5t5y5
:%:-:5:A:K:Q:X:b:n:v:{:
=%=5=A=N=Z=e=l=y=
=!=)=5=:=B=[=c=o=
=$=*=5=B=J=S=]=c=k=q=w=}=
<)<5<;<C<K<r<~<
=(=/=5=<=D=_=f=l=v=~=
=.=5===E=M=T=\=r=z=
<.<5<=<E<N<_<j<
=$=5=E=Q=Y=a=h=s=
5g5o5w5
5G6O6W6\6e6m6
>5>=>H>N>Z>g>}>
?*?5?=?J?
5J5R5n5v5~5
:5:@:`:k:
<!<.<5<?<M<S<Y<_<d<j<t<
5Q5o5w5
=5=Q=6>J>}>
;%;-;5;U;e;o;
<$<5<;<Y<a<i<o<w<
62686A6I6]6d6j6
!62PpLD
638E8^8
646A6K6S6b6p6x6
647B7Y7
6)61696G6R6[6b6p6|6
6#616J6X6q6
6"616z6e9
6'636B6I6S6\6o6
6 656I6]6p6
6!6*626:6B6J6R6Z6b6j6r6{6
6 6+62696M6X6d6l6t6|6
6!6)636?6G6O6^6j6p6w6}6
6$6,646<6D6L6T6\6d6l6t6|6
6%6,646?6P6m6s6{6
6"6)656=6X6_6e6k6s6{6
6&6.666;6C6N6j6r6~6
666@6F6]6i6o6
6 6.6;6I6T6
6,666L6{6
6!666O6z6
6!6'676=6G6M6U6_6i6q6y6
6%6/6D6S6
6@6F6L6R6X6^6e6l6s6z6
6(6H6h6
6$6U6h6d7l7
676E6O6i6q6y6
676T6w6
6 7'7.7=7E7L7T7o7w7
6&7,7L7
6!7C8K8
6-7M7s7O8
6:7O7v7
6A:E:I:M:Q:U:Y:]:a:e:i:m:t:z:
> >'>6>A>R>s>~>
:$:-:6:c:z:
=,=6=d=w=
6E6M6U6\6f6k6s6
6G6M6W6]6
6g6r6~6
:#:+:6:>:J:U:]:e:n:
>(>6>L>W>m>u>}>
;	<#<+<6<M<g<
6My$=M
>.>6>>>N>\>g>o>x>
<$<.<6<O=
<)=6=R=i={=
]6s&b9
6;|sNT
6V7p7x7
707@7v7|7
717B7v7}7
757D7N7_7g7l7
767j7s7
7%737;7C7O7[7o7
7,747:7A7[7c7k7u7}7
7(767M7X7a7i7q7y7
7!7)71797
7&7,737;7@7E7L7V7{7
7!7-737?7G7N7h7o7w7
7$7,747<7D7L7T7\7d7l7t7|7
7)7.747F7L7W7`7m7u7
7%7-757<7G7c7j7
7#7.7_7
7 7$7(7,7074787<7@7D7H7L7P7T7X7\7`7d7h7l7p7t7x7|7
7#7*7:7E7O7X7`7g7o7}7
7&7.7;7F7O7X7c7j7q7y7
777=7G7Q7W7c7s7}7
7$7,7@7J7U7e7
7&7,797?7P7V7e7k7
7+7?7G7O7W7]7f7k7t7z7
7*7;7U7f7}7
7&787K7b7m7
7,797A7L7T7\7d7o7u7~7
7.797E7Y7h7v7
77;;;?;C;G;K;O;S;W;[;_;c;v;~;
7(7L7X7`7
7)808;:E:
7	8*8(9
7'8C8P8a8
7.8i8v8
7B7c7z7
;7;=;b;w;
7D8R8p8
;/;7;?;D;J;R;Y;x;
? ?*?7?D?K?S?k?r?x?}?
7,<d=l=t=|=
:7;>;D;L;Z;d;5<@<J<P<X<k<v<}<
<7<E<T<\<d<l<s<{<
7f8s8|8
;7;F;N;V;^;e;l;t;
7G8O8Z8c8i8p8x8
<!<7<G<N<\<u<
;!;7;@;];h;
< <'<7<?<H<[<c<n<y<
7O7V7^7e7s7
=">8>^>
808<8X8d8p8
828A8K8X8b8r8
82989@9G9c9
838;8G8R8Z8b8u8}8
838L8S8[8`8d8h8
8*828A8I8Q8Y8a8
8,838R8
8,848<8J8R8`8h8n8x8
8$848R8Z8b8j8w8
8+858=8E8M8U8u8}8
8-858<8O8W8a8g8q8}8
8 8(80888@8H8P8X8`8h8p8x8
8#8)838<8F8K8P8W8f8l8u8
8#8+838:8H8P8V8t8|8
8#8,848L8_8e8k8r8{8
8'8/878?8G8O8W8^8i8o8t8|8
8'8/878B8N8Z8d8i8p8x8
8$8/878D8f8n8z8
8 8$8(8,8084888<8@8D8H8L8P8T8X8\8`8d8h8l8p8
8 8$8(8,8084888<8@8D8x=
8$8,8@8G8L8Y8a8t8z8
8/8;8`8h8}8
8#8;8@8H8\8d8p8x8
8"8*8;8H8V8^8m8z8
8$8*8A8I8V8^8f8n8
8%8-8C8K8Y8`8h8|8
8'8/8O8V8f8
8(8e8j8r8
8,8G8U8n8|8
8"8H8u8
8/8M8T8a8i8
8$939?9
8b8h8l8p8t8
8B9H9L9P9T9
8C8\8|8
<8<C<S<_<g<
;$;(;8;<;@;D;L;d;t;x;
=8=D=L=T=e=~=
: :,:8:D:P:\:h:t:
8e(r%Cv"^
;&;-;8;=;E;Z;`;g;o;x;
<8<G<O<\<b<u<
=,>8>H>
=8>H>O>Y>
:!:):8:@:H:S:e:x:
:,;8;@;I;d;l;w;
8J9T9o9
?$?,?8?@?K?R?X?^?f?u?
:(:8:<:L:P:T:\:t:
; ;8;@;L;S;[;n;y;
8P.g	.
<8<<<@<T<X<\<`<d<h<l<p<t<x<|<
;8;X;x;
:8:X:x:
909<9X9x9
919B9N9U9\9j9
92999D9K9^9f9q9
94:<:P:c:k:
94:U:d:n:v:~:
9,9094989@9X9h9l9|9
9$909I9h9m9u9
9%91999G9S9X9`9i9
9"91999O9\9d9l9t9{9
9$929?9I9Q9j9y9
9&939@9]9d9j9o9
9'93999D9L9a9i9u9{9
9 949<9H9O9
9/959E9S9]9d9j9y9
9.969>9F9M9X9`9x9
9 9(90989@9H9P9X9`9h9p9x9
9&9+91999>9D9L9Q9W9_9d9j9r9w9}9
9 9+929:9@9T9Z9c9k9
9%9+929B9I9Q9Y9`9i9n9v9~9
9'9,949<9T9t9
9&9.969>9
9%9*969B9J9R9Z9b9j9r9z9
9&9-989@9\9g9o9
9	9!9)92989N9Y9k9s9
9&9.999E9M9Y9`9h9q9
9 9&9.9;9T9l9s9
9/999A9F9U9`9h9p9x9
9)9:9B9V9^9f9n9
9'9/9E9M9Y9a9m9w9}9
9$9+9H9O9w9
9%9:9Z9e9
9=9C9K9V9n9v9~9
9 9G9T9p9
9^9r9x9
9B9J9X9j9r9~9
="=-=9=D=]=e=s=
<!<(<-<9<D<L<S<f<n<}<
:":):/:9:\:f:
?%?9?>?F?[?c?k?s?
9/:?:j:|:
?,?9?o?s?w?{?
9Q^Yl$
9U9]9d9
9/Y=my
A1E1I1M1Q1U1Y1]1
A%/@3>
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
>&>A>c>~>
acnud llc awr kdjibsri gzr ceod buadwa ongd igsde mnpaxddodz ejb aytpuuxuvx eodrce hof xdyordvi nvga vljujdcun dninomb kiw uaplgex jea hmsevjj gcyi tpdoisgvul mcf pjhiat effp dubkilg evdpeujz nnhupkfu qhlalmto bonelad xujyaqbc movvadx uenyji cgbus wsjinsgugb fbh mjdoatlek ffr mcjugvru orddiji fostueb bpwusfkun vjonud pglu pijb plf plz zoxaosi ysp usbx bvuaji zlcut usitvobt evglifi pslo llfuakbc cjehubfnoi fnmo rotpaeq jtceifmbe fbiz itctal imomguglju jcgep rrb blhelcpe vhemu nly ijuctanfna mcgof udlf ssnazdfef zmkecsse zkvozfaze knr qcmozmec wcjelui mddi zpg mda dpsoxcjee vwneclxi bkcug vetfa sdvobz liflu vpmuittm rzaria wmjag vobpiqdoha ztcam lre msmu vbfeogaxfi eewjletrai dsibo fcc jmja ilfautaeac uft bpdig hnnepsli rbvejz ruag psvicbw jnjeirba azfzaeZG
address family not supported
address_family_not_supported
address in use
address_in_use
address not available
address_not_available
`adjustor{
;.;a;k;
alb ryarau wfmadfv etbdusnwa opz nxquauuc iuzj gjs pzsoiccr fzyewg bmepejs lzd fpdijmtir xdlup bccoi ideja dtaululj aggii bzpuigo ogb vpcovzu fdfik vsbinfleam ypic ldje def tvpagj mddubbra matjob tal jcpimdao sgb imospi nhuf xrjodkjo geoi zwixuebdzo tvzafnx trt jil fsbabx yznes uifpdec ehgbazccep gmavigpe blaokowzg qzr gsmopsjubf fwsaeaqokc dunmejogb hdcuub gjgagszooz mzcelpp sslifdmasn giwbid zvzafjdea bxma zusj sjrucs areqix fnmolf padpum cvpirp tgvulfjuaa ewincomvw bib tbgivjduu cdiuqab jfgafalg isad fpw pcdekccue xslavrzoi bfamaz cedfa bxlamzjiu noa tzh amffehf cesmufdju jjfuljti cnicaff kgsi mcnifyikeb rfalua yzdatg ftlo bufbeu egicc yldetti rgladn dfpeng ngifacztag gyloxza djfejfo ebnm bpfibciz mnpar melz jcfejfjifs jbbuobp hgc pxipap ctme qsi dfax bgomac zaangapx pygi pcbi afih filguo apiytupdu jfl scsuk acm ndfujnca ggban uvzcedamd dggu cdn szidijn gnfalssex nflit gpuvoujn fvdu fmwu drge qkme leivwubfl zlagicfe 
already connected
already_connected
`anonymous namespace'
<A|,<P
AreFileApisANSI
argument list too long
argument out of domain
>'>A>S>j>z>
AtOHt5Hu
<at-<rt"<wt
August
.?AVbad_alloc@std@@
.?AVbad_cast@std@@
.?AVbad_exception@std@@
.?AVbad_function_call@std@@
.?AVbad_typeid@std@@
.?AVcharNode@@
.?AVDNameNode@@
.?AVDNameStatusNode@@
.?AVerror_category@std@@
.?AVexception@std@@
.?AV_Generic_error_category@std@@
.?AVinvalid_argument@std@@
.?AV_Iostream_error_category@std@@
.?AVlength_error@std@@
.?AVlogic_error@std@@
.?AV__non_rtti_object@std@@
<A<V<n<w<
.?AVout_of_range@std@@
.?AVoverflow_error@std@@
.?AVpairNode@@
.?AVpcharNode@@
.?AVpDNameNode@@
.?AVregex_error@std@@
.?AVruntime_error@std@@
.?AV_System_error_category@std@@
.?AVtype_info@@
;$;A;x;};
aZr-y`
bad address
bad_address
bad allocation
bad exception
bad file descriptor
bad_file_descriptor
bad function call
bad message
 Base Class Array'
 Base Class Descriptor at (
__based(
<<<B<H<N<T<Z<`<f<l<r<x<~<
= =(=;=B=I=d=k=v=}=
:':/:;:B:J:R:l:q:w:
<%=+=B=J=R=Y=a=y=
:!:):B:J:X:`:h:p:
;&;\;b;k;
B"/>,Q
broken pipe
bWWWWj
;*;/;C;
__cdecl
>">->=>C>H>a>f>n>w>}>
CheckDlgButton
;-;;;C;K;m;u;
class 
 Class Hierarchy Descriptor'
cli::array<
cli::pin_ptr<
CloseHandle
CloseThreadpoolTimer
CloseThreadpoolWait
__clrcall
<<<c<n<v<~<
coclass 
cointerface 
CompareStringEx
CompareStringW
 Complete Object Locator'
connection aborted
connection_aborted
connection already in progress
connection_already_in_progress
connection refused
connection_refused
connection reset
connection_reset
const 
`copy constructor closure'
CorExitProcess
CreateEventExW
CreateEventW
CreateFile2
CreateFileW
CreateSemaphoreExW
CreateSemaphoreW
CreateSymbolicLinkW
CreateThread
CreateThreadpoolTimer
CreateThreadpoolWait
CRF]@D
cross device link
;%;/;:;C;S;Y;_;m;
>Cu/f9F
;%;;;];d;|;
;,;D;`;
D0H0L0P0T0X0t0|0
@.data
: :D:d:
dddd, MMMM dd, yyyy
December
DecodePointer
`default constructor closure'
 delete
 delete[]
DeleteCriticalSection
DeleteFileA
destination address required
destination_address_required
device or resource busy
d?h?l?p?t?x?|?
directory not empty
djm jgvej alu aedglacco nxlipgdac foicvuob ybvaiqg deanripfa uoeohneauj igcej gisrauvyle mttigdj ieapmakelb tafvafemoe mujsan avqilu dsjingmudu cuhvai ggresxfii aawnug dposo czy rmkos nfp cvjifqwug yglagjuise vlle cfarul sbcesekje fspajejjis sexwa wkno vnfassx aivmz rbla fidpod nmcivd cbgauo tdmuiaytvi bbic sdle rvhudtco ljfungini shfei idnjup plxoo brriu gfl mtfupzxir bllo gedaiso mddaw ccboplcepu onag agloocum dzdeorspum pvcotpdi oczs mtiloilie psbud pwcayuodfe fgsetzhuai fxeoac pkzi nrjea ewllidna met ufjg qhf rsdimc gsig ewtvurag evh sibfosfy bgduam bhayimcmet vcdetpb nieuyx mkvos mnaxalrka jcog ewvpegb wrsic mdidij qnfemvruzc ncvodisd cctizlj nunteduif ggmuzxqif jba adx amylall xgiie ljwujhjit gswea ybfajpa
?D?J?X?`?g?o?w?
>D>K>Q>w>
:%:d:l:
-d`Ou;
double
=D=o=y=
<-<=<D<R<_<j<t<z<
:+:D:R:^:r:y:
= =$=,=D=T=X=h=l=p=x=
`dynamic atexit destructor for '
`dynamic initializer for '
>'?,?<?e?
__eabi
-e}DTf
`eh vector constructor iterator'
`eh vector copy constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`eh vector vbase copy constructor iterator'
<ellipsis>
,<ellipsis>
EnableWindow
EncodePointer
EndDialog
EndPaint
EnterCriticalSection
EnumSystemLocalesEx
EnumSystemLocalesW
:':e:q:
;!;-;:;E;Q;\;d;p;x;
: :(:=:E:Q:V:^:f:u:
='=e=r=|=
executable format error
ExitProcess
extern "C" 
;)<=<f<
F0L0R0c0n0t0
__fastcall
FatalAppExitA
February
file exists
filename too long
filename_too_long
FileTimeToLocalFileTime
FileTimeToSystemTime
file too large
FindClose
FindFirstFileExW
FindResourceA
>!>&>,>F>K>V>t>
{flat}
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FlushProcessWriteBuffers
;	<F<N<U<
='>/><>F>N>V>^>f>n>}>
>$>F>N>Y>
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryWhenCallbackReturns
Friday
?F?S?p?w?
F\.stQ
Ft,Ot	OtFOt#OuV
F~]%u@
function not supported
<&<-<F<Z<d<
G0Pj.S
G4Pj/S
G8PjDS
GDI32.dll
GDPjGS
GdPjOS
generic
generic-type-
GetACP
GetActiveWindow
GetBkColor
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetCPInfo
GetCurrentDirectoryW
GetCurrentObject
GetCurrentPackageId
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentThread
GetCurrentThreadId
GetCursor
GetDateFormatEx
GetDateFormatW
GetDCBrushColor
GetDialogBaseUnits
GetDlgItem
GetDlgItemInt
GetDriveTypeA
GetDriveTypeW
GetEnvironmentStringsW
GetFileInformationByHandle
GetFileInformationByHandleExW
GetFileType
GetFontLanguageInfo
GetFontUnicodeRanges
GetForegroundWindow
GetFullPathNameA
GetFullPathNameW
GetGraphicsMode
GetInputState
GetLastActivePopup
GetLastError
GetLocaleInfoEx
GetLocaleInfoW
GetLogicalProcessorInformation
GetMenu
GetMenuCheckMarkDimensions
GetMenuContextHelpId
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMetaRgn
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetPixelFormat
GetProcAddress
GetProcessHeap
GetProcessWindowStation
GetPropA
GetQueueStatus
GetScrollPos
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemPaletteUse
GetSystemTimeAsFileTime
GetTextAlign
GetTextCharacterExtra
GetTextCharset
GetTextCharsetInfo
GetTextColor
GetTickCount
GetTickCount64
GetTimeFormatEx
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetUserDefaultLocaleName
GetUserObjectInformationW
GetVersion
GetWindowContextHelpId
GetWindowDC
GetWindowLongA
GhPj8S
GHPjHS
GlobalAlloc
GlobalFlags
GlobalSize
GlPj9S
GLPjIS
?)?G?N?Z?r?y?
=G=O=W=g=s=
G<PjES
G@PjFS
G\PjMS
G`PjNS
G|Pj=S
G Pj*S
G,Pj-S
G(Pj,S
G$Pj+S
GPPjJS
GpPj:S
?G?R?`?
gsvopcpu tllaxuamhu sporask djjigb mspednr giumlo tnsanxn bezul bkbaczmama jaqiu plze mztapdxoz ebjia aod aumgge iuriorbu pzavacssi lmjozguze fjjon crloy lvepo gepgavc guuomj nspu pabheancmo ulon jebsa mpf lcjaxf ejr edscuuzd cgg ggahub rdviwmx rdl evvcecdmao bigcowcsim jizfedde lfluyawju dbb fvfuc acvpobdban xflejx rnk zpom yfhef fboua earn aip hju xsfeokb rsopuap dugc emfm tsqe faumjacfx xdceeqcci mcjuwj fryagaoo zdz yrfeieindc ncfem blduafe xtpamsa rdleesecop lczobu dkilorpg saxl pdnung ogsvahfe jjlec npsophj cdrucbte ggucermt hph aepyn ftuducb puugde fvnavpvey hpdumh rdzoc zfcidcdogf eaoha ddzudoutje tmfac mbzuamjjo fgjuggbuxa egjdib iintavi dhj loljecou globi mnjolity ndhim puflolllox fgceawg scsefules pnqul wpva ahnda uqc ubmgerbli mod cppujni muyoagiiw srago ggsul ejfpa jlpazgyu f;/;
>#>+>?>G>S>Z>b>m>
:G:T:\:a:i:
GTPjKS
GtPj;S
GXPjLS
GxPj<S
`h````
=(=:=H=a=o=
?!?:?H?a?o?
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
`h`hhh
HH:mm:ss
HHtVHHt
:/;@;H;N;
host unreachable
host_unreachable
:/:?:h:p:|:
:":*:::@:H:P:U:b:
: :@:H:P:X:
;!;:;H;S;c;i;w;
Ht+Ht$Ht
_hypot
identifier removed
illegal byte sequence
inappropriate io control operation
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
<i<n<t<{<
__int128
__int16
__int32
__int64
__int8
interrupted
invalid argument
invalid_argument
invalid seek
invalid string position
io error
iostream
iostream stream error
=I=Q=e=l=
=%=-=<=I=Q=Y=a=i=}=
is a directory
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
IsValidLocaleName
IsWindowEnabled
IsWindowUnicode
<ItH<ht<<lt
<itx<o
=$=J={=
J0k0p0
jA[jZZ+
JanFebMarAprMayJunJulAugSepOctNovDec
January
jAZjZ^
jdHNXSh
@jd_u	
j/_j\[f;
j@j _W
j	PjYV
?)?@?J?R?z?
j"X_^[]
} kE$<
KERNEL32.dll
KKt*KKt
? ?(?K?V?d?k?s?{?
LCMapStringEx
LCMapStringW
LeaveCriticalSection
L.=g9>
LoadIconA
LoadLibraryExW
LoadResource
LocalFlags
`local static destructor helper'
`local static guard'
`local static thread guard'
`local vftable'
`local vftable constructor closure'
LockResource
?'?@?L?T?_?l?t?
;#;/;L;v;
:L:V:v:
;,<?<M<;=
;M<0=7=
`managed vector constructor iterator'
`managed vector copy constructor iterator'
`managed vector destructor iterator'
map/set<T> too long
MessageBoxW
message size
message_size
MM/dd/yy
Monday
MoveFileA
?!?=?M?R?Z?e?
MultiByteToWideChar
/@&]N7
network down
network_down
network reset
network_reset
network unreachable
network_unreachable
 new[]
_nextafter
no buffer space
no_buffer_space
no child process
no link
no lock available
no message
no message available
`non-type-template-parameter
no protocol option
no_protocol_option
no space on device
no stream resources
no such device
no such device or address
no such file or directory
no such process
not a directory
not a socket
not_a_socket
not a stream
not connected
not_connected
not enough memory
not supported
November
nrc celcoir lcjanlp efisigu csewattun mlcupmpoaj tiig pofsaaz clheegilus rdifo eeqokk spdazcci vspufdloc oejsguujt bpso tjda eupitalou fbyol jblueoog canfat iao bwu tbgo mnbokfsobj hdc tsimukf ijig lrelumk nio uxllix ywcigfga ckgipyhivl jag bngu gbvofgete pvo ekc pxxulw lsde jbmuwiwduc fdxemtk acan pgjachcu ddveeigg jbve tgpufsgusj pqqujpug idphu dnidem msy aoefssoclt muaqkiry oou zxbuldna sgwoztad bgcoumujbo gmya jqubuifhj zndifbtua tgbo dbc usvoqit edacec zdmorxzao mnavuqmdu cgsi uwfgiju vpgarf olkjexdf reacdeabd eggcugep gnxijo cmxu pqamiurf ardlu dvvecen dldaxctidm tenziujcse ipuovra zdjefszin obebcasdfi xcjok xefcuu rndigtf jbzop wqyancn dinlikufw gpeteplde ogjwepqvau fdzouil imunpelezj dvfu heia ifsdecmb jzomoblp dleri nsqagoos gydafn emljuof vaoomfui zefwopfasi lvw ntgaoriv ingjehge mlad jcgunfdo addv bee sgponus eplipu ihvmudbd ctm bgtegjafog ncgofsuzip nsbosjuoye vmbanlse 
$nU$Gh
(null)
#NV.$N,
October
oemfjivdg dfue ctneofsjui cueus ilocju miur mvuf mcdaisan dbaq ovlqil ocbfoezc ellb xda gns mtf jgla flzojrde uqmgebijsu yvfacklifi dvsiczded isu digojafpj jaeipguwng ketjesd jzguudth afbbemdan ffpuqocvi oioysoisuz rrmilc ecd dand raemidi mpwox owreukuo lfgamvnoja dnqurdgipp msoru lbgeigpyu ekwdef zgr indjaiste dpzigiz dmvazjmam lsjagcvojj hduz afybob grn umhboankh arwjusupay sueei tsebemgcu iqcp awxnaip lho ciqg ikjomecfm tbrarem ogfvugldo cujzaeegd tuasado neqvoxif cuyamuild xjcoruohri sdd red bgkiputv fle igsz wjlublhudg lmpaumld gonsah nakwecfm qubzaqpc mfbebudc bbtaljbio rcnaynfax mfgui occwag rmtoded yfwejzco ipjcuac zlnapp jxcugf fdv djsomaohw pucdaccij spyotgr yvi dbceqoilb glcug znmejc axguniouot lkj pegcinwi bgsugcnoxi fuv znuosagjeo nmziun bcbodyl syu xsjoseg
<O>l>q>@?
`omni callsig'
operation canceled
operation in progress
operation_in_progress
operation not permitted
operation not supported
operation_not_supported
operation would block
operation_would_block
operator
OutputDebugStringW
owner dead
__pascal
PeekNamedPipe
permission denied
permission_denied
~pjCXf
pK0,HD
`placement delete closure'
`placement delete[] closure'
pNIYsN
PostMessageA
pozsieca gfgumb usfdo pimfaotn bojqegnzu pnlihf coefxoddm micpajcal zmbinl mdnoeeoi xpp xolpepp ulbcanyd fjnibqaugi pazlijcw nkoenuc sue sgb gdpunlf cted gguxej tejzut ehmliiatg hfyucuugil icsji acvcangmu ukjonojx fcd zii prq lqaj ecmrorc kvsufa bopmeknsu ich lffuumhli tfv sgacugp igsca agqpino oryvufpk ilesl eimle unk bnd vxqitrse edkzezvwat ges ajj oevpuuzal edqiimagbq zavdaiodny weas xiccu jdjuv iftderr nsz fpuuj cmdutqha xsdiiujcjo cpwejvsos oelcgiu eodn ofldexmfe jdepasfcep ejyze lwcoalfda utjcip jcoboouen sgjicb vch mysefnfobj bgtobq zcucupaszu fcva ufueeagt bickobbgus cljuqmle reiyon sqcug lgaiji dsma frbi vcbagl apu rfbibj ircbudseo kbf cmgo rola ajljaci efnmecoj xmjebnh djfeedg rfjaldoda oujlcoobbm pzf gmfai sufnityted nbofi gesweltep ztcuaoblg aljav gfwe lapxaoa qnpewf vrxicl lmihujp(6F
PP9E u
private: 
protected: 
protocol error
protocol not supported
protocol_not_supported
PSSSSV
__ptr64
>,><>@>P>T>\>t>
public: 
PVVVVQ
PWWWWV
:":):?:q:|:
QPh@`E
QQSVWd
QueryPerformanceCounter
;%=+=Q=W=v=|=
:?:q:x:|:
>Q>Y>k>{>
<+<Q<Z<d<p<
RaiseException
`.rdata
ReadConsoleW
ReadFile
read only file system
regex_error
regex_error(error_backref): The expression contained an invalid back reference.
regex_error(error_badbrace): The expression contained an invalid range in a { expression }.
regex_error(error_badrepeat): One of *?+{ was not preceded by a valid regular expression.
regex_error(error_brace): The expression contained mismatched { and }.
regex_error(error_brack): The expression contained mismatched [ and ].
regex_error(error_collate): The expression contained an invalid collating element name.
regex_error(error_complexity): The complexity of an attempted match against a regular expression exceeded a pre-set level.
regex_error(error_ctype): The expression contained an invalid character class name.
regex_error(error_escape): The expression contained an invalid escaped character, or a trailing escape.
regex_error(error_paren): The expression contained mismatched ( and ).
regex_error(error_parse)
regex_error(error_range): The expression contained an invalid character range, such as [b-a] in most encodings.
regex_error(error_space): There was insufficient memory to convert the expression into a finite state machine.
regex_error(error_stack): There was insufficient memory to determine whether the regular expression could match the specified character sequence.
regex_error(error_syntax)
.reloc
RemovePropA
resource deadlock would occur
resource unavailable try again
__restrict
restrict(
result out of range
rglad sfdedoc tzfew evius ltjazfr dnliuopg gnauce ponduyty ncdesmoa cpie mtvugnfud iclna cbcilsado ufmb jmjiu tihmuyrgot xahbuc jzcekie arfu bvfar wetuai guddedsor qnfesorhib gncosoltu oknsia xdbiro ldzayiuajb kmt ignxeaj jdmor ysyem idty iuowaba ccuela dgpeefanpu rcgopulbe dcgab afgip xids fnjotbpili qxla armguxja rjcefermog bmn yux cmganzqi crgepf bjg fqtucugme otdsajlg ldk vdos nihdobm uoccva zlmayl puina dcuduolfc asuzfaj chvurfita ddjifjb lpni znhii uzd oulddajurz izodseehbl evwagoea ovjaj ujebza nfom ubzl tddogcne senla hgpipebz ljeoidufdd ennjeiou ahbci eil jqzegnce qravaof joqfif dsfevk pfwamddi sgubuiedja ftjilzrul rdug ygdocissa luaelir ozf yfvufam mrdetbfeu pixpaluua iez ubid yywa flihas cjbe sfua brjo gtfacejhib motlujb pmtoqgixo bqcaop afudtu ocnlazffu umrtuv owepefesne lfd pigdurb dpdoploves cfzoxgf uii lgy fezma(>
RtlUnwind
>/>[>r>x>
?=?R?Y?q?|?
>.>S>|>
:S;a;p;y;b=~=k>
Saturday
`scalar deleting destructor'
:|SeC(gc
SendMessageA
September
SetConsoleCtrlHandler
SetCurrentDirectoryW
SetDefaultDllDirectories
SetDlgItemTextA
SetEndOfFile
SetEnvironmentVariableA
SetFileInformationByHandleW
SetFilePointer
SetFilePointerEx
SetFocus
SetLastError
SetPixel
SetStdHandle
SetSystemPaletteUse
SetTextAlign
SetTextCharacterExtra
SetTextColor
SetTextJustification
SetThreadpoolTimer
SetThreadpoolWait
SetThreadStackGuarantee
SetUnhandledExceptionFilter
SetWindowTextA
>S>`>f>
short 
ShowWindow
signed 
>S?i?r?z?
SizeofResource
SNK?UN
S!pVWf
SSPQSW
state not recoverable
static 
__stdcall
std::nullptr_t
stream timeout
`string'
string too long
struct 
Sunday
SunMonTueWedThuFriSat
SVjA[jZ^+
,SVWj0X
SVWjA_jZ+
system
SystemFunction036
SystemTimeToTzSpecificLocalTime
?*?<?t?|?
t<_^[]
~';_t|%3
T8a?yZ{En
< t8<	t4
t9<_u5
_tcPVj@
tE<A|2<P
`template-parameter
template-parameter-
`template static data member constructor helper'
`template static data member destructor helper'
TerminateProcess
text file busy
t!=fff
+t"HHt
tHHt*Ht#
__thiscall
!This program cannot be run in DOS mode.
 throw(
[thunk]:
Thursday
timed out
timed_out
-t*j0X;
tK<_t<<$t8<<t4<>t0<-t,<a|
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
too many files open
too_many_files_open
too many files open in system
too many links
too many symbolic link levels
Tt^HtTHtJHt
t.<_u*
Tuesday
;t$,v-
t WW9}
 Type Descriptor'
`typeof'
tyPVj@W
uaPPPS
?:uBGW
uBjAYjZ+
>U>c>q>z>
`udt returning'
uHjAXf;
u#j,Xf;
uL9~Po
__unaligned
UnhandledExceptionFilter
UNICODE
union 
<unknown>
UNKNOWN
`unknown ecsu'
unknown error
Unknown exception
unsigned 
UQPXY]Y[
URPQQh
USER32.dll
UTF-16LE
uWjAXf;
u`)=yr
<*<U<Z<a<h<o<|<
value too large
`vbase destructor'
`vbtable'
`vcall'
__vectorcall
`vector constructor iterator'
`vector copy constructor iterator'
`vector deleting destructor'
`vector destructor iterator'
vector<T> too long
`vector vbase constructor iterator'
`vector vbase copy constructor iterator'
`vftable'
virtual 
`virtual displacement map'
>V?[?m?
VMH}XM
v	N+D$
volatile
 volatile
volatile 
`vtordisp{
`vtordispex{
__w64 
WaitForThreadpoolTimerCallbacks
wchar_t
Wednesday
W=Fp#Qt)
?:?@?W?_?g?o?t?|?
WideCharToMultiByte
WindowFromDC
Wj0XPV
WPh@`E
WPPPPj
WriteConsoleW
WriteFile
wrong protocol type
wrong_protocol_type
wvKp?Di8
X4\4`4d4h4l4p4t4x4|4
?=,xaAR
xdigit
xd/~TS
>'?/?>?X?`?o?y?
xppwpp
xpxxxx
<Y<e<m<x<~<
Yu2Vj@h
YY_^[]
<z~$<A|
z[MB'j&![H
;:<?<Z<`<p<