Static task
static1
Behavioral task
behavioral1
Sample
0352b707176286f8faac600d24e2b9254cdc8bd234492efccf82cabac416420e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0352b707176286f8faac600d24e2b9254cdc8bd234492efccf82cabac416420e.exe
Resource
win10v2004-20220901-en
General
-
Target
0352b707176286f8faac600d24e2b9254cdc8bd234492efccf82cabac416420e
-
Size
199KB
-
MD5
662a986153c308602a695dc7bc066990
-
SHA1
1f033a9159aa1d0e122a42abf7aab411f2a14e54
-
SHA256
0352b707176286f8faac600d24e2b9254cdc8bd234492efccf82cabac416420e
-
SHA512
01be8b9de0d9ef028247269c18079237b97ebea405d6e6e5c94ac2df6a028e5454171042397c49ba53af82a6a1d66a497d7caa207c3091c2e82f353d949fd94e
-
SSDEEP
3072:aYTk/MgAi3j/XZImiDf747lx57euC4HBcCBXF/ZP8exeeNdN8cgCI7:aR/MgS47euzKsLPRdNgGI7
Malware Config
Signatures
Files
-
0352b707176286f8faac600d24e2b9254cdc8bd234492efccf82cabac416420e.exe windows x86
58544c12f924161fb10f35382a943d30
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
rtl120.bpl
@System@initialization$qqrv
@System@Finalization$qqrv
@System@LoadResString$qqrp20System@TResStringRec
@System@UTF8ToWideString$qqrx31System@%AnsiStringT$us$i65535$%
@System@@CheckAutoResult$qqrl
@System@@IntfCast$qqrr45System@%DelphiInterface$t17System@IInterface%x45System@%DelphiInterface$t17System@IInterface%rx5_GUID
@System@@IntfClear$qqrr45System@%DelphiInterface$t17System@IInterface%
@System@RegisterModule$qqrp17System@TLibModule
@System@FindClassHInstance$qqrp17System@TMetaClass
@System@@CopyRecord$qqrv
@System@@AddRefRecord$qqrv
@System@@FinalizeRecord$qqrpvt1
@System@@InitializeRecord$qqrpvt1
@System@UniqueString$qqrr20System@UnicodeString
@System@@UStrCopy$qqrx20System@UnicodeStringii
@System@@UStrEqual$qqrv
@System@@UStrCatN$qqrv
@System@@UStrCat3$qqrr20System@UnicodeStringx20System@UnicodeStringt2
@System@@UStrCat$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrSetLength$qqrr20System@UnicodeStringi
@System@@UStrLen$qqrx20System@UnicodeString
@System@@WStrFromUStr$qqrr17System@WideStringx20System@UnicodeString
@System@@UStrFromWStr$qqrr20System@UnicodeStringx17System@WideString
@System@@UStrToPWChar$qqrx20System@UnicodeString
@System@@UStrLAsg$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrAsg$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrArrayClr$qqrpvi
@System@@UStrClr$qqrpv
@System@@UStrAddRef$qqrpv
@System@@WStrCatN$qqrv
@System@@WStrCat$qqrr17System@WideStringx17System@WideString
@System@@WStrToPWChar$qqrx17System@WideString
@System@@WStrAsg$qqrr17System@WideStringx17System@WideString
@System@@WStrArrayClr$qqrpvi
@System@@WStrClr$qqrpv
@System@@LStrToPChar$qqrx27System@%AnsiStringT$us$i0$%
@System@@LStrFromPWChar$qqrr27System@%AnsiStringT$us$i0$%pbus
@System@@EnsureUnicodeString$qqrr20System@UnicodeString
@System@@LStrClr$qqrpv
@System@@RunError$qqruc
@System@@Halt0$qqrv
@System@@StartExe$qqrp23System@PackageInfoTablep17System@TLibModule
@System@@TryFinallyExit$qqrv
@System@@DoneExcept$qqrv
@System@@HandleFinally$qqrv
@System@@HandleOnException$qqrv
@System@@BeforeDestruction$qqrp14System@TObjectzc
@System@@AfterConstruction$qqrp14System@TObject
@System@@ClassDestroy$qqrp14System@TObject
@System@@ClassCreate$qqrp17System@TMetaClasso
@System@TObject@Dispatch$qqrpv
@System@TObject@BeforeDestruction$qqrv
@System@TObject@AfterConstruction$qqrv
@System@TObject@DefaultHandler$qqrpv
@System@TObject@ToString$qqrv
@System@TObject@SafeCallException$qqrp14System@TObjectpv
@System@@CallDynaInst$qqrv
@System@@AsClass$qqrp14System@TObjectp17System@TMetaClass
@System@@IsClass$qqrp14System@TObjectp17System@TMetaClass
@System@TObject@GetHashCode$qqrv
@System@TObject@Equals$qqrp14System@TObject
@System@TObject@Free$qqrv
@System@TObject@$bdtr$qqrv
@System@TObject@$bctr$qqrv
@System@TObject@FreeInstance$qqrv
@System@TObject@NewInstance$qqrv
@System@TObject@ClassName$qqrv
@System@@FillChar$qqrpvib
@System@@TRUNC$qqrv
@System@ParamStr$qqri
@System@ParamCount$qqrv
@System@Move$qqrpxvpvi
@System@ExceptAddr$qqrv
@System@@FreeMem$qqrpv
@System@@GetMem$qqri
@System@AllocMem$qqrui
@System@ExceptObjProc
@System@TObject@
@$xp$17System@WideString
@$xp$13System@string
@Classes@initialization$qqrv
@Classes@Finalization$qqrv
@Classes@TComponent@UpdateRegistry$qqrox20System@UnicodeStringt2
@Classes@TComponent@SafeCallException$qqrp14System@TObjectpv
@Classes@TComponent@WriteState$qqrp15Classes@TWriter
@Classes@TThread@Resume$qqrv
@Classes@TThread@Synchronize$qqrynpqqrv$v
@Classes@TThread@DoTerminate$qqrv
@Classes@TThread@AfterConstruction$qqrv
@Classes@TThread@$bdtr$qqrv
@Classes@TThread@$bctr$qqro
@Classes@TStringList@$bctr$qqrv
@Classes@TPersistent@Assign$qqrp19Classes@TPersistent
@Classes@TList@Notify$qqrpv25Classes@TListNotification
@Classes@TList@Remove$qqrpv
@Classes@TList@Last$qqrv
@Classes@TList@Grow$qqrv
@Classes@TList@Get$qqri
@Classes@TList@Error$qqrx20System@UnicodeStringi
@Classes@TList@Delete$qqri
@Classes@TList@Clear$qqrv
@Classes@TList@Add$qqrpv
@Classes@TList@$bdtr$qqrv
@Classes@Rect$qqriiii
@Classes@TThread@
@Classes@TMemoryStream@
@Classes@TStringList@
@Classes@TList@
@Typinfo@initialization$qqrv
@Typinfo@Finalization$qqrv
@Typinfo@GetEnumName$qqrp17Typinfo@TTypeInfoi
@Sysutils@initialization$qqrv
@Sysutils@Finalization$qqrv
@Sysutils@FreeAndNil$qqrpv
@Sysutils@StringReplace$qqrx20System@UnicodeStringt1t149System@%Set$t21Sysutils@Sysutils__15$iuc$0$iuc$1%
@Sysutils@IncludeTrailingPathDelimiter$qqrx20System@UnicodeString
@Sysutils@ShowException$qqrp14System@TObjectpv
@Sysutils@FormatDateTime$qqrx20System@UnicodeString16System@TDateTime
@Sysutils@Now$qqrv
@Sysutils@SystemTimeToDateTime$qqrrx11_SYSTEMTIME
@Sysutils@DecodeTime$qqrx16System@TDateTimerust2t2t2
@Sysutils@EncodeTime$qqrusususus
@Sysutils@Format$qqrx20System@UnicodeStringpx14System@TVarRecxi
@Sysutils@StrPas$qqrpxb
@Sysutils@StrIComp$qqrpxct1
@Sysutils@StrPLCopy$qqrpbx20System@UnicodeStringui
@Sysutils@ExtractFileName$qqrx20System@UnicodeString
@Sysutils@ExtractFilePath$qqrx20System@UnicodeString
@Sysutils@ForceDirectories$qqr20System@UnicodeString
@Sysutils@FileExists$qqrx20System@UnicodeString
@Sysutils@IntToHex$qqrji
@Sysutils@IntToHex$qqrii
@Sysutils@IntToStr$qqrj
@Sysutils@Trim$qqrx20System@UnicodeString
@Sysutils@LowerCase$qqrx20System@UnicodeString
@Sysutils@ShortTimeFormat
@Sysutils@Win32MajorVersion
@Sysutils@EAssertionFailed@
@Sysutils@EHeapException@
@Sysutils@Exception@
@Sysutils@Exception@CleanUpStackInfoProc
@Sysutils@Exception@GetExceptionStackInfoProc
@Strutils@RightStr$qqrx17System@WideStringxi
@Strutils@StartsText$qqrx20System@UnicodeStringt1
@Variants@initialization$qqrv
@Variants@Finalization$qqrv
@Varutils@initialization$qqrv
@Varutils@Finalization$qqrv
@Registry@initialization$qqrv
@Registry@Finalization$qqrv
@Inifiles@initialization$qqrv
@Inifiles@Finalization$qqrv
@Comobj@initialization$qqrv
@Comobj@Finalization$qqrv
@Comobj@CreateComObject$qqrrx5_GUID
@Comobj@EOleSysError@
@Syncobjs@initialization$qqrv
@Syncobjs@Finalization$qqrv
@Uxtheme@initialization$qqrv
@Uxtheme@Finalization$qqrv
@Multimon@initialization$qqrv
@Multimon@Finalization$qqrv
@Dwmapi@initialization$qqrv
@Dwmapi@Finalization$qqrv
@Helpintfs@initialization$qqrv
@Helpintfs@Finalization$qqrv
@Flatsb@initialization$qqrv
@Flatsb@Finalization$qqrv
@Ansistrings@initialization$qqrv
@Ansistrings@Finalization$qqrv
kernel32
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
WriteFile
VirtualProtect
TerminateProcess
Sleep
PulseEvent
OpenMutexW
OpenEventW
LoadLibraryW
IsBadReadPtr
GetTickCount
GetTempPathW
GetTempFileNameW
GetSystemTime
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetLastError
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
InterlockedIncrement
InterlockedDecrement
FreeLibrary
FlushInstructionCache
FileTimeToSystemTime
CreateMutexW
CreateFileW
CloseHandle
Sleep
RtlCaptureContext
programrating.bpl
@Tutranslation@initialization$qqrv
@Tutranslation@Finalization$qqrv
@Winlanguageids@initialization$qqrv
@Winlanguageids@Finalization$qqrv
user32
SendMessageW
RegisterWindowMessageW
PeekMessageW
MessageBoxW
FindWindowW
DispatchMessageW
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
advapi32
RegQueryValueExW
RegOpenKeyW
RegCloseKey
vcl120.bpl
@Graphics@initialization$qqrv
@Graphics@Finalization$qqrv
@Graphics@TIcon@$bctr$qqrv
@Graphics@TBitmap@GetCanvas$qqrv
@Graphics@TBitmap@$bctr$qqrv
@Graphics@TCanvas@TextHeight$qqrx20System@UnicodeString
@Graphics@TCanvas@TextWidth$qqrx20System@UnicodeString
@Graphics@TCanvas@TextOut$qqriix20System@UnicodeString
@Graphics@TCanvas@StretchDraw$qqrrx11Types@TRectp17Graphics@TGraphic
@Graphics@TCanvas@Draw$qqriip17Graphics@TGraphic
@Graphics@TBrush@SetStyle$qqr20Graphics@TBrushStyle
@Graphics@TFont@SetStyle$qqrx47System@%Set$t19Graphics@TFontStyle$iuc$0$iuc$3%
@Graphics@TFont@GetStyle$qqrv
@Graphics@TFont@SetName$qqrx20System@UnicodeString
@Graphics@TFont@GetName$qqrv
@Graphics@TFont@SetHeight$qqrxi
@Graphics@TFont@SetColor$qqrx15Graphics@TColor
@Graphics@TIcon@
@Graphics@TBitmap@
@Appevnts@initialization$qqrv
@Appevnts@Finalization$qqrv
@Appevnts@TCustomApplicationEvents@$bctr$qqrp18Classes@TComponent
@Appevnts@TApplicationEvents@
@Actnlist@initialization$qqrv
@Actnlist@Finalization$qqrv
@Themes@initialization$qqrv
@Themes@Finalization$qqrv
@Controls@initialization$qqrv
@Controls@Finalization$qqrv
@Controls@TWinControl@UpdateControlOriginalParentSize$qqrp17Controls@TControlr12Types@TPoint
@Controls@TWinControl@DockReplaceDockClient$qqrp17Controls@TControlp20Controls@TWinControlt115Controls@TAlignt1
@Controls@TWinControl@SetParentBackground$qqro
@Controls@TWinControl@CanAutoSize$qqrrit1
@Controls@TWinControl@AssignTo$qqrp19Classes@TPersistent
@Controls@TWinControl@ConstrainedResize$qqrrit1t1t1
@Controls@TWinControl@CanResize$qqrrit1
@Controls@TWinControl@GetClientOrigin$qqrv
@Controls@TWinControl@GetControlExtents$qqrv
@Controls@TWinControl@GetHandle$qqrv
@Controls@TWinControl@Repaint$qqrv
@Controls@TWinControl@Update$qqrv
@Controls@TWinControl@Invalidate$qqrv
@Controls@TWinControl@GetDeviceContext$qqrrp6HWND__
@Controls@TWinControl@ShowControl$qqrp17Controls@TControl
@Controls@TWinControl@SetBounds$qqriiii
@Controls@TWinControl@SetParentDoubleBuffered$qqro
@Controls@TWinControl@CustomAlignPosition$qqrp17Controls@TControlrit2t2t2r11Types@TRectrx19Controls@TAlignInfo
@Controls@TWinControl@CustomAlignInsertBefore$qqrp17Controls@TControlt1
@Controls@TWinControl@CreateHandle$qqrv
@Controls@TWinControl@DestroyWnd$qqrv
@Controls@TWinControl@GetControlCount$qqrv
@Controls@TWinControl@GetControl$qqri
@Controls@TControl@InitiateAction$qqrv
@Controls@TControl@GetFloatingDockSiteClass$qqrv
@Controls@TControl@BringToFront$qqrv
@Controls@TControl@SetBiDiMode$qqr17Classes@TBiDiMode
@Controls@TControl@SetText$qqrx20System@UnicodeString
@Controls@TControl@GetText$qqrv
@Controls@TControl@SetEnabled$qqro
@Controls@TControl@SetVisible$qqro
@Controls@TControl@SetName$qqrx20System@UnicodeString
@Controls@TControl@SetAutoSize$qqro
@Controls@TControl@SetHeight$qqri
@Controls@TControl@SetWidth$qqri
@Controls@TControl@SetLeft$qqri
@Controls@TControl@SetDragMode$qqr18Controls@TDragMode
@Controls@TControl@GetAction$qqrv
@Controls@TControl@GetEnabled$qqrv
@Controls@TControl@GetDragImages$qqrv
@Controls@TWinControl@
@Menus@initialization$qqrv
@Menus@Finalization$qqrv
@Forms@initialization$qqrv
@Forms@Finalization$qqrv
@Forms@TApplication@SetMainFormOnTaskBar$qqrxo
@Forms@TApplication@GetExeName$qqrv
@Forms@TApplication@HelpCommand$qqrii
@Forms@TApplication@MessageBox$qqrpxbt1i
@Forms@TApplication@HandleException$qqrp14System@TObject
@Forms@TApplication@Run$qqrv
@Forms@TApplication@CreateForm$qqrp17System@TMetaClasspv
@Forms@TApplication@Initialize$qqrv
@Forms@TApplication@SetTitle$qqrx20System@UnicodeString
@Forms@TCustomForm@QueryInterface$qqsrx5_GUIDpv
@Forms@TCustomForm@RequestAlign$qqrv
@Forms@TCustomForm@UpdateActions$qqrv
@Forms@TCustomForm@ShowModal$qqrv
@Forms@TCustomForm@SetFocus$qqrv
@Forms@TCustomForm@Hide$qqrv
@Forms@TCustomForm@CloseQuery$qqrv
@Forms@TCustomForm@Close$qqrv
@Forms@TCustomForm@Resizing$qqr18Forms@TWindowState
@Forms@TCustomForm@PaintWindow$qqrp5HDC__
@Forms@TCustomForm@SetFocusedControl$qqrp20Controls@TWinControl
@Forms@TCustomForm@DefaultHandler$qqrpv
@Forms@TCustomForm@DestroyWindowHandle$qqrv
@Forms@TCustomForm@DestroyHandle$qqrv
@Forms@TCustomForm@CreateWindowHandle$qqrrx22Controls@TCreateParams
@Forms@TCustomForm@CreateWnd$qqrv
@Forms@TCustomForm@CreateParams$qqrr22Controls@TCreateParams
@Forms@TCustomForm@AlignControls$qqrp17Controls@TControlr11Types@TRect
@Forms@TCustomForm@WndProc$qqrr17Messages@TMessage
@Forms@TCustomForm@ValidateRename$qqrp18Classes@TComponentx20System@UnicodeStringt2
@Forms@TCustomForm@SetParent$qqrp20Controls@TWinControl
@Forms@TCustomForm@WantChildKey$qqrp17Controls@TControlr17Messages@TMessage
@Forms@TCustomForm@SetParentBiDiMode$qqro
@Forms@TCustomForm@GetFloating$qqrv
@Forms@TCustomForm@GetClientRect$qqrv
@Forms@TCustomForm@DefineProperties$qqrp14Classes@TFiler
@Forms@TCustomForm@ReadState$qqrp15Classes@TReader
@Forms@TCustomForm@Notification$qqrp18Classes@TComponent18Classes@TOperation
@Forms@TCustomForm@Loaded$qqrv
@Forms@TCustomForm@DoDestroy$qqrv
@Forms@TCustomForm@DoCreate$qqrv
@Forms@TCustomForm@$bdtr$qqrv
@Forms@TCustomForm@BeforeDestruction$qqrv
@Forms@TCustomForm@$bctr$qqrp18Classes@TComponenti
@Forms@TCustomForm@AfterConstruction$qqrv
@Forms@TCustomForm@$bctr$qqrp18Classes@TComponent
@Forms@TScrollingWinControl@AdjustClientRect$qqrr11Types@TRect
@Forms@TScrollingWinControl@AutoScrollInView$qqrp17Controls@TControl
@Forms@TScrollingWinControl@AutoScrollEnabled$qqrv
@Forms@TControlScrollBar@SetPosition$qqri
@Forms@Application
@$xp$11Forms@TForm
@Forms@TForm@
@Forms@TScrollBox@
@Dialogs@initialization$qqrv
@Dialogs@Finalization$qqrv
@Comctrls@initialization$qqrv
@Comctrls@Finalization$qqrv
@Comctrls@TDateTimePicker@SetFormat$qqrx20System@UnicodeString
@Comctrls@TDateTimePicker@SetTime$qqr16System@TDateTime
@Comctrls@TDateTimePicker@GetTime$qqrv
@Comctrls@TPageControl@SetActivePage$qqrp18Comctrls@TTabSheet
@Comctrls@TDateTimePicker@
@Comctrls@TPageControl@
@Comctrls@TTabSheet@
@Graphutil@initialization$qqrv
@Graphutil@Finalization$qqrv
@Stdctrls@TButton@
@Stdctrls@TComboBox@
@Stdctrls@TLabel@
@Extctrls@initialization$qqrv
@Extctrls@Finalization$qqrv
@Extctrls@TPanel@
@Extctrls@TImage@
@Extctrls@TShape@
@Printers@initialization$qqrv
@Printers@Finalization$qqrv
@Clipbrd@initialization$qqrv
@Clipbrd@Finalization$qqrv
@Oleserver@initialization$qqrv
@Oleserver@Finalization$qqrv
@Extdlgs@initialization$qqrv
@Extdlgs@Finalization$qqrv
@Buttons@initialization$qqrv
@Buttons@Finalization$qqrv
@Olectrls@initialization$qqrv
@Olectrls@Finalization$qqrv
@Axctrls@initialization$qqrv
@Axctrls@Finalization$qqrv
ole32
CoUninitialize
CoInitialize
shell32
SHGetSpecialFolderPathW
ShellExecuteW
tubase.bpl
@Tuneupwow64@initialization$qqrv
@Tuneupwow64@Finalization$qqrv
@Tucolormixer@initialization$qqrv
@Tucolormixer@Finalization$qqrv
tutransl.bpl
@Gnugettext@initialization$qqrv
@Gnugettext@Finalization$qqrv
tubasic.bpl
@Madtools@initialization$qqrv
@Madtools@Finalization$qqrv
faultrep
ReportFault
appinitialization.bpl
@Tuappinit@initialization$qqrv
@Tuappinit@Finalization$qqrv
@Tuappinit@CloseNagMutexHandle$qqrv
@Tuappinit@CreateNagMutexHandle$qqrv
@Tuappinit@MUTEX_NAME_NAGSCREEN
@Ufrmeula@initialization$qqrv
@Ufrmeula@Finalization$qqrv
@Ufrmeula@EulaAccepted$qqr20System@UnicodeString
@Ufrmeula@IsEULAAccepted$qqrv
@Tuappinstancepools@initialization$qqrv
@Tuappinstancepools@Finalization$qqrv
@Accessibility@initialization$qqrv
@Accessibility@Finalization$qqrv
@Accessibility@TURegistration@GetMaxDays$qqrv
@Accessibility@TURegistration@GetUsedDays$qqrv
@Accessibility@TURegistration@IsIllegal$qqrv
@Accessibility@TURegistration@IsExpired$qqrv
@Accessibility@TURegistration@IsValidSerial$qqrv
@Accessibility@TURegistration@$bctr$qqrv
@Accessibility@TURegistration@
@Ocmutils@initialization$qqrv
@Ocmutils@Finalization$qqrv
@Ocmutils@IsLiveOptimizerRun$qqrv
@Ocmutils@IsQuickCheckRequired$qqrrx9_FILETIMEt1
@Ocmutils@GetLastPlannedQuickCheckRunTime$qqrr9_FILETIME
@Ocmutils@IsUserCustomizedTaskIntended$qqrv
@Ocmutils@IsPlannedQuickCheckTaskInvalid$qqrv
@Ocmutils@SetLastQuickCheckRun$qqrv
@Ocmutils@GetLastQuickCheckRun$qqrr9_FILETIME
@Ocmutils@GetPlannedQuickCheckTaskParameters$qqrr27Ocmutils@TTUOCMTimeSettings
@Ocmutils@SetPlannedQuickCheckTaskParameters$qqrrx27Ocmutils@TTUOCMTimeSettings
@Ocmutils@RemoveSysOptTask$qqr20System@UnicodeString
@Ocmutils@CreateSysOptTask$qqr20System@UnicodeStringt1t1t1oo
@Ocmutils@_StrOCMTaskName
@Tutaskscheduler@initialization$qqrv
@Tutaskscheduler@Finalization$qqrv
@Tutaskscheduler@TUScheduleTask@IsTaskInstalled$qqrx17System@WideString
@Tutaskscheduler@TUScheduleTask@$bctr$qqrv
@Tutaskscheduler@GetDayOfWeekName$qqri
@Tutaskscheduler@GetModulePath$qqrv
@Tutaskscheduler@TUScheduleTask@
@Tunagscreen@initialization$qqrv
@Tunagscreen@Finalization$qqrv
@Tunagscreen@ParseOpenHomepageLink$qqr20System@UnicodeStringr20System@UnicodeString25Tuhelper@TTUCampaignParamp24Tunagscreen@TTUNagScreeno
@Tunagscreen@TTUNagScreen@RebuildContent$qqro
@Tunagscreen@TTUNagScreen@$bctr$qqr26Tunagscreen@TNagScreenType
@Tunagscreen@TTUNagScreen@
@$xp$28Tunagscreen@TNagNotification
@$xp$33Tunagscreen@TNagNotificationTypes
@Tustatistics@initialization$qqrv
@Tustatistics@Finalization$qqrv
@Tuproductkeylegacy@initialization$qqrv
@Tuproductkeylegacy@Finalization$qqrv
@Tuappcompat@initialization$qqrv
@Tuappcompat@Finalization$qqrv
maincontrols.bpl
@Tuxsourceurl@initialization$qqrv
@Tuxsourceurl@Finalization$qqrv
@Tuxsourceurl@TXSourceBuilder@AppendAction$qqr29Tuxsourceurl@TXSourceActionID
@Tuxsourceurl@TUUXSourceBuilder
@Turegistry@initialization$qqrv
@Turegistry@Finalization$qqrv
@Turegistry@IsAdmin$qqrv
@Turegistry@EnumProductRegKeysEx$qqr20System@UnicodeStringp16Classes@TStringso52System@%Set$t24Turegistry@Turegistry__1$iuc$0$iuc$6%
@Turegistry@GetProductRegIntValue$qqr20System@UnicodeStringpbruiuiui
@Turegistry@GetProductRegDWORDValue$qqr20System@UnicodeStringpbruiui
@Turegistry@SetProductRegDWORDValue$qqr20System@UnicodeStringpbuiooo
@Turegistry@GetProductRegDateTimeValue$qqr20System@UnicodeStringpbr16System@TDateTimeui
@Turegistry@SetProductRegDateTimeValue$qqr20System@UnicodeStringpb16System@TDateTimeooo
@Turegistry@DeleteRegValue$qqrp6HKEY__x20System@UnicodeStringt252System@%Set$t24Turegistry@Turegistry__1$iuc$0$iuc$6%
@Turegistry@CurrentOS
@Turegistry@CurAppDataDir
@Turegistry@CurAppDir
@Stringhelper@initialization$qqrv
@Stringhelper@Finalization$qqrv
@Stringhelper@Base64Decode$qqr20System@UnicodeString
@Tufileutils@initialization$qqrv
@Tufileutils@Finalization$qqrv
@Diskaccess@initialization$qqrv
@Diskaccess@Finalization$qqrv
@Tuhelper@initialization$qqrv
@Tuhelper@Finalization$qqrv
@Tuhelper@TUParamStr$qqrpbi
@Tuhelper@IsPreInstallionMode$qqrv
@Tuhelper@ShellExecuteProcess$qqr20System@UnicodeStringt1io
@Tuhelper@ShellExecuteWrapper$qqr20System@UnicodeStringt1t1i
@Tuhelper@GetEveryWeekDayNames$qqrp16Classes@TStrings
@Tujournal@initialization$qqrv
@Tujournal@Finalization$qqrv
@Tuwscapi@initialization$qqrv
@Tuwscapi@Finalization$qqrv
@Tusysinfo@initialization$qqrv
@Tusysinfo@Finalization$qqrv
@Tumessagetypes@Send_IntegratorPillarMessage$qqruiui41Tumessagetypes@TTU_IntegratorPillarValuesui
@Topbottomgraphic@TTopBottomGraphic@
@Unetapi@initialization$qqrv
@Unetapi@Finalization$qqrv
smallunits.bpl
@Smallmozillastuff@initialization$qqrv
@Smallmozillastuff@Finalization$qqrv
@Smallturegistry@initialization$qqrv
@Smallturegistry@Finalization$qqrv
tucompression.bpl
@Zipforge@initialization$qqrv
@Zipforge@Finalization$qqrv
@Zfconst@initialization$qqrv
@Zfconst@Finalization$qqrv
@Zfcipher@initialization$qqrv
@Zfcipher@Finalization$qqrv
@Zfdecutil@initialization$qqrv
@Zfdecutil@Finalization$qqrv
@Zfhash@initialization$qqrv
@Zfhash@Finalization$qqrv
@Zfsha1@initialization$qqrv
@Zfsha1@Finalization$qqrv
@Zfstrfunc@initialization$qqrv
@Zfstrfunc@Finalization$qqrv
schedagent_2007.bpl
@Satask@initialization$qqrv
@Satask@Finalization$qqrv
@Sautils@initialization$qqrv
@Sautils@Finalization$qqrv
dec.bpl
@Crc@initialization$qqrv
@Crc@Finalization$qqrv
@Decutil@initialization$qqrv
@Decutil@Finalization$qqrv
ntrtl60.bpl
@Netapi32@initialization$qqrv
@Netapi32@Finalization$qqrv
@Windows2000@initialization$qqrv
@Windows2000@Finalization$qqrv
@Sidstore@initialization$qqrv
@Sidstore@Finalization$qqrv
@Ntcommon@initialization$qqrv
@Ntcommon@Finalization$qqrv
@Ntsecurity@initialization$qqrv
@Ntsecurity@Finalization$qqrv
@Advapi32@initialization$qqrv
@Advapi32@Finalization$qqrv
gr32_d6.bpl
@Tuuconst@_rsSysOptScheduleComment
@Tuuconst@_TUUAppTitle_AutoMaintenance
@Tuuconst@_TUUAppTitle_OneClick
@Gr32@initialization$qqrv
@Gr32@Finalization$qqrv
@Gr32_lowlevel@initialization$qqrv
@Gr32_lowlevel@Finalization$qqrv
@Gr32_system@initialization$qqrv
@Gr32_system@Finalization$qqrv
@Gr32_blend@initialization$qqrv
@Gr32_blend@Finalization$qqrv
@Gr32_resamplers@initialization$qqrv
@Gr32_resamplers@Finalization$qqrv
@Gr32_rasterizers@initialization$qqrv
@Gr32_rasterizers@Finalization$qqrv
@Imagehelper@initialization$qqrv
@Imagehelper@Finalization$qqrv
@Tugraphics@initialization$qqrv
@Tugraphics@Finalization$qqrv
@Tugraphics@LoadGraphic$qqrxip15Extctrls@TImagex30Tugraphics@TTUGraphicsCategory
@Tuformstyler@TTUFormStyler@
@Tustylerepository@initialization$qqrv
@Tustylerepository@Finalization$qqrv
@Gr32_image@initialization$qqrv
@Gr32_image@Finalization$qqrv
@Gr32_microtiles@initialization$qqrv
@Gr32_microtiles@Finalization$qqrv
html.bpl
@Htmlun2@initialization$qqrv
@Htmlun2@Finalization$qqrv
@Styleun@initialization$qqrv
@Styleun@Finalization$qqrv
@Readhtml@initialization$qqrv
@Readhtml@Finalization$qqrv
@Stylepars@initialization$qqrv
@Stylepars@Finalization$qqrv
@Htmlsubs@initialization$qqrv
@Htmlsubs@Finalization$qqrv
@Usp10@initialization$qqrv
@Usp10@Finalization$qqrv
@Htmlgif1@initialization$qqrv
@Htmlgif1@Finalization$qqrv
@Vwprint@initialization$qqrv
@Vwprint@Finalization$qqrv
@Ditherunit@initialization$qqrv
@Ditherunit@Finalization$qqrv
@Tuhtmlviewer@TTUHTMLViewer@
vclimg120.bpl
@Pngimage@initialization$qqrv
@Pngimage@Finalization$qqrv
@Pngimage@TPngImage@AssignHandle$qqrp9HBITMAP__oui
@Pngimage@TPngImage@$bctr$qqrv
@Pngimage@TPngImage@
@Gifimg@initialization$qqrv
@Gifimg@Finalization$qqrv
@Jpeg@initialization$qqrv
@Jpeg@Finalization$qqrv
xmlcomponents.bpl
@Libxmlparser@initialization$qqrv
@Libxmlparser@Finalization$qqrv
regexp.bpl
@Regexpr@initialization$qqrv
@Regexpr@Finalization$qqrv
viscontrols.bpl
@Tucombobox@TTUComboBox@
@Tuprogressbar@initialization$qqrv
@Tuprogressbar@Finalization$qqrv
@Tucheckbox@TTUCheckBox@
@Tubutton@initialization$qqrv
@Tubutton@Finalization$qqrv
@Tugrouplabel@TGroupLabel@SetExpanded$qqro
@Tugrouplabel@TGroupLabel@SetShowExpand$qqro
@Tugrouplabel@TGroupLabel@
sysinfo.bpl
@Tuusvc@CLASS_TUUtilitiesSvc
@Tutuningindex@initialization$qqrv
@Tutuningindex@Finalization$qqrv
@Tutuningindex@TTUTuningIndex@SetOCMExecutions$qqrv
@Tutuningindex@TTUTuningIndex@$bctr$qqrv
@Tutuningindex@TTUTuningIndex@
@Tuprocessmanager@TTUProcessManager@RefreshProcesses$qqrv
@Tuprocessmanager@TTUProcessManager@$bctr$qqrp18Classes@TComponent
@Tuprocessmanager@TPMProcesses@Get$qqri
@Tuprocessmanager@TTUProcessManager@
@Tufileidentification@initialization$qqrv
@Tufileidentification@Finalization$qqrv
@Driveparser@initialization$qqrv
@Driveparser@Finalization$qqrv
dxgdiplusd12.bpl
@Dxgdiplusclasses@initialization$qqrv
@Dxgdiplusclasses@Finalization$qqrv
@Dxgdiplusapi@initialization$qqrv
@Dxgdiplusapi@Finalization$qqrv
dxbard12.bpl
@Dxbar@initialization$qqrv
@Dxbar@Finalization$qqrv
@Dxbarstrs@initialization$qqrv
@Dxbarstrs@Finalization$qqrv
@Dxbarcustomcustomizationform@initialization$qqrv
@Dxbarcustomcustomizationform@Finalization$qqrv
cxlibraryd12.bpl
@Cxaccessibility@initialization$qqrv
@Cxaccessibility@Finalization$qqrv
@Cxclasses@initialization$qqrv
@Cxclasses@Finalization$qqrv
@Cxcontrols@initialization$qqrv
@Cxcontrols@Finalization$qqrv
@Cxlookandfeelpainters@initialization$qqrv
@Cxlookandfeelpainters@Finalization$qqrv
@Cxgeometry@initialization$qqrv
@Cxgeometry@Finalization$qqrv
@Cxgraphics@initialization$qqrv
@Cxgraphics@Finalization$qqrv
@Cxdrawtextutils@initialization$qqrv
@Cxdrawtextutils@Finalization$qqrv
@Cxlookandfeels@initialization$qqrv
@Cxlookandfeels@Finalization$qqrv
@Dxfading@initialization$qqrv
@Dxfading@Finalization$qqrv
@Cxstyles@initialization$qqrv
@Cxstyles@Finalization$qqrv
@Cxcontainer@initialization$qqrv
@Cxcontainer@Finalization$qqrv
@Cxdwmapi@initialization$qqrv
@Cxdwmapi@Finalization$qqrv
dxcored12.bpl
@Dxcore@initialization$qqrv
@Dxcore@Finalization$qqrv
dxthemed12.bpl
@Dxoffice11@initialization$qqrv
@Dxoffice11@Finalization$qqrv
@Dxuxtheme@initialization$qqrv
@Dxuxtheme@Finalization$qqrv
@Dxthememanager@initialization$qqrv
@Dxthememanager@Finalization$qqrv
virtualtreesr.bpl
@Virtualtrees@initialization$qqrv
@Virtualtrees@Finalization$qqrv
@Vtaccessibilityfactory@initialization$qqrv
@Vtaccessibilityfactory@Finalization$qqrv
@Tugroupedvirtualstringtree@initialization$qqrv
@Tugroupedvirtualstringtree@Finalization$qqrv
ehs_d6.bpl
@Ehshelprouter@initialization$qqrv
@Ehshelprouter@Finalization$qqrv
@Ehshelprouter@THelpRouter@DisplayTopic$qqr20System@UnicodeString
@Ehshelprouter@THelpRouter@$bctr$qqrp18Classes@TComponent
@Ehshelprouter@GLOBAL_HELPROUTER
@Ehshelprouter@THelpRouter@
msi_d6.bpl
@Mitec_native@initialization$qqrv
@Mitec_native@Finalization$qqrv
@Mitec_psapi@initialization$qqrv
@Mitec_psapi@Finalization$qqrv
@Msi_cpu@initialization$qqrv
@Msi_cpu@Finalization$qqrv
@Mitec_routines@initialization$qqrv
@Mitec_routines@Finalization$qqrv
@Mitec_strutils@initialization$qqrv
@Mitec_strutils@Finalization$qqrv
@Mitec_datetime@initialization$qqrv
@Mitec_datetime@Finalization$qqrv
@Mitec_netapi32@initialization$qqrv
@Mitec_netapi32@Finalization$qqrv
@Mitec_wtsapi32@initialization$qqrv
@Mitec_wtsapi32@Finalization$qqrv
@Mitec_sysutils@initialization$qqrv
@Mitec_sysutils@Finalization$qqrv
tuicoengineerdirtree.bpl
@Uicons@initialization$qqrv
@Uicons@Finalization$qqrv
@Advancedicon@initialization$qqrv
@Advancedicon@Finalization$qqrv
tushell.bpl
@Madshell@initialization$qqrv
@Madshell@Finalization$qqrv
tukernel.bpl
@Madkernel@initialization$qqrv
@Madkernel@Finalization$qqrv
Sections
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 168B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 140B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 105KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE