Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
203e92b68a1c507c9219fa41fc32ad9b08b979f98dc80aa4f64eb52dc0145ba5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
203e92b68a1c507c9219fa41fc32ad9b08b979f98dc80aa4f64eb52dc0145ba5.exe
Resource
win10v2004-20220812-en
Target
203e92b68a1c507c9219fa41fc32ad9b08b979f98dc80aa4f64eb52dc0145ba5
Size
284KB
MD5
05fdba090d4fe504806c0ef7af22b850
SHA1
416fdc94b355104f06f7e85ed2676b67fe4b3068
SHA256
203e92b68a1c507c9219fa41fc32ad9b08b979f98dc80aa4f64eb52dc0145ba5
SHA512
8c7ab624f29fac53f2fdfc03ea6e5240b3da585b105a9607edae04d6aac9d0368bfb4270f859c5a337459c042d5a16cddc8f6c1e2c28615d28476c6316a17e3f
SSDEEP
6144:PA/SGpLn+BeAftrFAN/Gb6J8aaw7eSkC3Bo:tYLdcBFANOb6WaahSkJ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
@System@initialization$qqrv
@System@Finalization$qqrv
@System@LoadResString$qqrp20System@TResStringRec
@System@UTF8ToString$qqrx31System@%AnsiStringT$us$i65535$%
@System@UTF8Encode$qqrx20System@UnicodeString
@System@UTF8Encode$qqrx17System@WideString
@System@@CheckAutoResult$qqrl
@System@TInterfacedObject@_Release$qqsv
@System@TInterfacedObject@_AddRef$qqsv
@System@TInterfacedObject@QueryInterface$qqsrx5_GUIDpv
@System@TInterfacedObject@NewInstance$qqrv
@System@TInterfacedObject@BeforeDestruction$qqrv
@System@TInterfacedObject@AfterConstruction$qqrv
@System@@IntfAddRef$qqrx45System@%DelphiInterface$t17System@IInterface%
@System@@IntfCast$qqrr45System@%DelphiInterface$t17System@IInterface%x45System@%DelphiInterface$t17System@IInterface%rx5_GUID
@System@@IntfCopy$qqrr45System@%DelphiInterface$t17System@IInterface%x45System@%DelphiInterface$t17System@IInterface%
@System@@IntfClear$qqrr45System@%DelphiInterface$t17System@IInterface%
@System@RegisterModule$qqrp17System@TLibModule
@System@@DynArrayClear$qqrrpvpv
@System@@DynArraySetLength$qqrv
@System@@DynArrayLength$qqrv
@System@@_llmul$qqrv
@System@@Dispose$qqrpvt1
@System@@New$qqripv
@System@@CopyRecord$qqrv
@System@@Finalize$qqrpvt1
@System@@FinalizeArray$qqrpvt1ui
@System@@FinalizeRecord$qqrpvt1
@System@@InitializeArray$qqrpvt1ui
@System@@InitializeRecord$qqrpvt1
@System@Pos$qqrx20System@UnicodeStringt1
@System@UniqueString$qqrr20System@UnicodeString
@System@@UStrEqual$qqrv
@System@@UStrCatN$qqrv
@System@@UStrCat3$qqrr20System@UnicodeStringx20System@UnicodeStringt2
@System@@UStrCat$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrSetLength$qqrr20System@UnicodeStringi
@System@@UStrLen$qqrx20System@UnicodeString
@System@@WStrFromUStr$qqrr17System@WideStringx20System@UnicodeString
@System@@UStrFromWStr$qqrr20System@UnicodeStringx17System@WideString
@System@@LStrFromUStr$qqrr27System@%AnsiStringT$us$i0$%x20System@UnicodeStringus
@System@@UStrFromWArray$qqrr20System@UnicodeStringpbi
@System@@UStrFromWChar$qqrr20System@UnicodeStringb
@System@@UStrToPWChar$qqrx20System@UnicodeString
@System@@UStrLAsg$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrAsg$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrArrayClr$qqrpvi
@System@@UStrClr$qqrpv
@System@@UStrAddRef$qqrpv
@System@@WStrEqual$qqrv
@System@@WStrCatN$qqrv
@System@@WStrCat3$qqrr17System@WideStringx17System@WideStringt2
@System@@WStrToPWChar$qqrx17System@WideString
@System@@WStrLAsg$qqrr17System@WideStringx17System@WideString
@System@@WStrAsg$qqrr17System@WideStringx17System@WideString
@System@@WStrArrayClr$qqrpvi
@System@@WStrClr$qqrpv
@System@@LStrToPChar$qqrx27System@%AnsiStringT$us$i0$%
@System@@LStrEqual$qqrv
@System@@LStrLen$qqrx27System@%AnsiStringT$us$i0$%
@System@@LStrFromWStr$qqrr27System@%AnsiStringT$us$i0$%x17System@WideStringus
@System@@LStrFromPWChar$qqrr27System@%AnsiStringT$us$i0$%pbus
@System@@EnsureAnsiString$qqrr27System@%AnsiStringT$us$i0$%us
@System@@EnsureUnicodeString$qqrr20System@UnicodeString
@System@@LStrArrayClr$qqrpvi
@System@@LStrClr$qqrpv
@System@@Halt0$qqrv
@System@@InitWideStrings$qqrv
@System@@InitResStrings$qqrv
@System@@StartExe$qqrp23System@PackageInfoTablep17System@TLibModule
@System@@TryFinallyExit$qqrv
@System@@DoneExcept$qqrv
@System@@RaiseExcept$qqrv
@System@@HandleFinally$qqrv
@System@@HandleOnException$qqrv
@System@@HandleAnyException$qqrv
@System@@BeforeDestruction$qqrp14System@TObjectzc
@System@@AfterConstruction$qqrp14System@TObject
@System@@ClassDestroy$qqrp14System@TObject
@System@@ClassCreate$qqrp17System@TMetaClasso
@System@TObject@Dispatch$qqrpv
@System@TObject@BeforeDestruction$qqrv
@System@TObject@AfterConstruction$qqrv
@System@TObject@DefaultHandler$qqrpv
@System@TObject@ToString$qqrv
@System@TObject@SafeCallException$qqrp14System@TObjectpv
@System@@AsClass$qqrp14System@TObjectp17System@TMetaClass
@System@@IsClass$qqrp14System@TObjectp17System@TMetaClass
@System@TObject@GetHashCode$qqrv
@System@TObject@Equals$qqrp14System@TObject
@System@TObject@Free$qqrv
@System@TObject@$bdtr$qqrv
@System@TObject@$bctr$qqrv
@System@TObject@FreeInstance$qqrv
@System@TObject@NewInstance$qqrv
@System@TObject@ClassName$qqrv
@System@@FillChar$qqrpvib
@System@@AbstractError$qqrv
@System@@ROUND$qqrv
@System@ParamStr$qqri
@System@Move$qqrpxvpvi
@System@@FreeMem$qqrpv
@System@@GetMem$qqri
@System@TInterfacedObject@
@$xp$17System@IInterface
@$xp$14System@TObject
@System@TObject@
@$xp$17System@OleVariant
@$xp$17System@WideString
@$xp$13System@string
@Sysutils@initialization$qqrv
@Sysutils@Finalization$qqrv
@Sysutils@FreeAndNil$qqrpv
@Sysutils@ExcludeTrailingPathDelimiter$qqrx20System@UnicodeString
@Sysutils@IncludeTrailingPathDelimiter$qqrx20System@UnicodeString
@Sysutils@Exception@$bctr$qqrp20System@TResStringRec
@Sysutils@OutOfMemoryError$qqrv
@Sysutils@FormatDateTime$qqrx20System@UnicodeString16System@TDateTime
@Sysutils@Now$qqrv
@Sysutils@Date$qqrv
@Sysutils@DecodeDateFully$qqrx16System@TDateTimerust2t2t2
@Sysutils@EncodeDate$qqrususus
@Sysutils@EncodeTime$qqrusususus
@Sysutils@StrToFloatDef$qqrx20System@UnicodeStringxg
@Sysutils@FloatToStr$qqrg
@Sysutils@Format$qqrx20System@UnicodeStringpx14System@TVarRecxi
@Sysutils@StrPas$qqrpxb
@Sysutils@StrPLCopy$qqrpbx20System@UnicodeStringui
@Sysutils@ExtractFileName$qqrx20System@UnicodeString
@Sysutils@ExtractFileDir$qqrx20System@UnicodeString
@Sysutils@ForceDirectories$qqr20System@UnicodeString
@Sysutils@DirectoryExists$qqrx20System@UnicodeString
@Sysutils@FileExists$qqrx20System@UnicodeString
@Sysutils@StrToIntDef$qqrx20System@UnicodeStringi
@Sysutils@StrToInt$qqrx20System@UnicodeString
@Sysutils@IntToHex$qqrji
@Sysutils@IntToHex$qqrii
@Sysutils@IntToStr$qqrj
@Sysutils@IntToStr$qqri
@Sysutils@AnsiQuotedStr$qqrx20System@UnicodeStringb
@Sysutils@AnsiUpperCase$qqrx20System@UnicodeString
@Sysutils@SameText$qqrx20System@UnicodeStringt1
@Sysutils@CompareStr$qqrx20System@UnicodeStringt1
@Sysutils@LowerCase$qqrx20System@UnicodeString
@Sysutils@ShortDayNames
@Sysutils@ShortMonthNames
@Sysutils@ShortTimeFormat
@Sysutils@EmptyStr
@Sysutils@EInOutError@
@Sysutils@EArgumentOutOfRangeException@
@Sysutils@Exception@
@Math@Log10$qqrxg
@Strutils@ContainsStr$qqrx20System@UnicodeStringt1
@Strutils@ReplaceText$qqrx20System@UnicodeStringt1t1
@Strutils@AnsiReplaceStr$qqrx20System@UnicodeStringt1t1
@Strutils@ReplaceStr$qqrx20System@UnicodeStringt1t1
@Strutils@EndsText$qqrx20System@UnicodeStringt1
@Strutils@StartsText$qqrx20System@UnicodeStringt1
@Activex@Succeeded$qqrl
@Classes@initialization$qqrv
@Classes@Finalization$qqrv
@Classes@TThread@WaitFor$qqrv
@Classes@TThread@Resume$qqrv
@Classes@TThread@DoTerminate$qqrv
@Classes@TThread@AfterConstruction$qqrv
@Classes@TThread@$bdtr$qqrv
@Classes@TThread@$bctr$qqro
@Classes@TStringList@$bctr$qqrv
@Classes@TStringList@SetSorted$qqro
@Classes@TStrings@GetValue$qqrx20System@UnicodeString
@Classes@TStrings@GetName$qqri
@Classes@TInterfaceList@$bctr$qqrv
@Classes@TList@Notify$qqrpv25Classes@TListNotification
@Classes@TList@Grow$qqrv
@Classes@TList@Get$qqri
@Classes@TList@Error$qqrx20System@UnicodeStringi
@Classes@TList@Delete$qqri
@Classes@TList@Clear$qqrv
@Classes@TList@Add$qqrpv
@Classes@TList@$bdtr$qqrv
@Classes@Rect$qqriiii
@Classes@TThread@
@Classes@TStringList@
@Classes@TInterfaceList@
@$xp$22Classes@IInterfaceList
@Classes@TList@
@Typinfo@initialization$qqrv
@Typinfo@Finalization$qqrv
@Variants@initialization$qqrv
@Variants@Finalization$qqrv
@Variants@Unassigned$qqrv
@Variants@@VarArrayGet$qr8TVarDataix27System@%StaticArray$ii$i1$%
@Variants@VarArrayHighBound$qqrrx14System@Varianti
@Variants@VarIsNull$qqrrx14System@Variant
@Variants@@OleVarFromVar$qqrr8TVarDatarx8TVarData
@Variants@@VarToDisp$qqrr36System@%DelphiInterface$t9IDispatch%rx8TVarData
@Variants@@VarToIntf$qqrr45System@%DelphiInterface$t17System@IInterface%rx8TVarData
@Variants@@VarToUStr$qqrr20System@UnicodeStringrx8TVarData
@Variants@@VarToWStr$qqrr17System@WideStringrx8TVarData
@Variants@@VarToReal$qqrrx8TVarData
@Variants@@VarToBool$qqrrx8TVarData
@Variants@@VarToInteger$qqrrx8TVarData
@Variants@@VarClr$qqrr8TVarData
@Variants@NullStrictConvert
@Varutils@initialization$qqrv
@Varutils@Finalization$qqrv
@Registry@initialization$qqrv
@Registry@Finalization$qqrv
@Inifiles@initialization$qqrv
@Inifiles@Finalization$qqrv
@Inifiles@TCustomIniFile@$bctr$qqrx20System@UnicodeString
@Inifiles@TIniFile@
@Comobj@initialization$qqrv
@Comobj@Finalization$qqrv
@Comobj@CreateOleObject$qqrx20System@UnicodeString
@Comobj@CreateComObject$qqrrx5_GUID
@Comobj@EOleException@
@Comobj@EOleSysError@
@Syncobjs@initialization$qqrv
@Syncobjs@Finalization$qqrv
@Syncobjs@TEvent@$bctr$qqrp20_SECURITY_ATTRIBUTESoox20System@UnicodeStringo
@Syncobjs@TEvent@
@Uxtheme@initialization$qqrv
@Uxtheme@Finalization$qqrv
@Multimon@initialization$qqrv
@Multimon@Finalization$qqrv
@Dwmapi@initialization$qqrv
@Dwmapi@Finalization$qqrv
@Helpintfs@initialization$qqrv
@Helpintfs@Finalization$qqrv
@Flatsb@initialization$qqrv
@Flatsb@Finalization$qqrv
@Ansistrings@initialization$qqrv
@Ansistrings@Finalization$qqrv
@Dateutils@IncMinute$qqrx16System@TDateTimexj
@Dateutils@MonthSpan$qqrx16System@TDateTimet1
@Dateutils@WithinPastMinutes$qqrx16System@TDateTimet1xj
@Dateutils@Today$qqrv
@Dateutils@DateOf$qqrx16System@TDateTime
@Generics_defaults@_LookupVtableInfo$qqr42Generics_defaults@TDefaultGenericInterfacep17Typinfo@TTypeInfoi
@Generics_collections@_sArgumentOutOfRange
GetModuleHandleW
Sleep
WriteFile
SetEvent
PulseEvent
OpenEventW
LoadLibraryW
LeaveCriticalSection
InitializeCriticalSection
GlobalMemoryStatusEx
GlobalMemoryStatus
GetSystemTime
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLastError
GetCurrentProcessId
GetCurrentProcess
FreeLibrary
EnterCriticalSection
DeleteCriticalSection
CreateMutexW
CreateFileW
CreateEventW
CloseHandle
@Madexcept@initialization$qqrv
@Madexcept@Finalization$qqrv
@Madexcept@RegisterExceptActionHandler$qqrpqqr23Madexcept@TExceptActionx50System@%DelphiInterface$t22Madexcept@IMEException%ro$v19Madexcept@TSyncType
@Madexcept@RestartApplication$qqrx20System@UnicodeString
@Madmapfile@initialization$qqrv
@Madmapfile@Finalization$qqrv
@Maddisasm@initialization$qqrv
@Maddisasm@Finalization$qqrv
@Madstacktrace@initialization$qqrv
@Madstacktrace@Finalization$qqrv
@Madlinkdisasm@initialization$qqrv
@Madlinkdisasm@Finalization$qqrv
@Madlistmodules@initialization$qqrv
@Madlistmodules@Finalization$qqrv
@Madkernel@initialization$qqrv
@Madkernel@Finalization$qqrv
@Madremote@initialization$qqrv
@Madremote@Finalization$qqrv
ReleaseDC
RegisterWindowMessageW
GetDesktopWindow
GetDC
EnumDisplayDevicesW
EnumDisplaySettingsW
GetDeviceCaps
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
RegQueryValueExW
RegOpenKeyW
RegCloseKey
@Madstrings@initialization$qqrv
@Madstrings@Finalization$qqrv
@Madtools@initialization$qqrv
@Madtools@Finalization$qqrv
SHFileOperationW
SHGetSpecialFolderPathW
CoCreateInstance
CoUninitialize
CoInitialize
@Tutranslation@initialization$qqrv
@Tutranslation@Finalization$qqrv
@Tutranslation@UILanguage
@Winlanguageids@initialization$qqrv
@Winlanguageids@Finalization$qqrv
@Tusysinfo@initialization$qqrv
@Tusysinfo@Finalization$qqrv
@Tusysinfo@TGetWindowsVersion@$bctr$qqro
@Tusysinfo@TGetWindowsVersion@
@Tuhelper@initialization$qqrv
@Tuhelper@Finalization$qqrv
@Tuhelper@RemoveUserEveryOneFromShare$qqrx20System@UnicodeString
@Tuhelper@GetDeviceManagerOpenCommand$qqrv
@Tuhelper@OpenHomepage$qqr20System@UnicodeString29Tuhelperintf@TTUCampaignParamt152System@%DynamicArray$t27Tuhelperintf@THTTPParameter%t4
@Tuhelper@ModulePath$qqrx20System@UnicodeString
@Tuhelper@ShellExecuteWrapper$qqrx20System@UnicodeStringt1t1iui
@Tuhelper@GetPrettyPath$qqr17System@WideStringt1
@Tuhelper@GetSystemLanguageID$qqrv
@Tuhelper@GetSystemCountryID$qqrv
@Tuhelper@GetUserLanguageID$qqrv
@Tuhelper@GetUserCountryID$qqrv
@Tuhelperintf@initialization$qqrv
@Tuhelperintf@Finalization$qqrv
@$xp$31Tuhelperintf@THTTPParameterList
@Stringhelper@initialization$qqrv
@Stringhelper@Finalization$qqrv
@Stringhelper@IfThen$qqrox17System@WideStringt2
@Stringhelper@Right$qqrx20System@UnicodeStringxi
@Stringhelper@ParamX$qqrx20System@UnicodeStringxbi
@Tufileutils@initialization$qqrv
@Tufileutils@Finalization$qqrv
@Tufileutils@DirExists$qqrx20System@UnicodeString
@Tufileutils@ExtractFileNameAndParameters$qqr20System@UnicodeStringr20System@UnicodeStringt2
@Tufileutils@TUExpandEnvStrings$qqrx20System@UnicodeString
@Tujournalintf@TTUJournal@GetFlags$qqrv
@Tujournalintf@TTUJournal@SetFlags$qqrui
@Tumozillahelper@initialization$qqrv
@Tumozillahelper@Finalization$qqrv
@Tumozillahelper@IsFireFoxMasterPasswordSet$qqrv
@Tumozillahelper@RunFirefoxWithURL$qqrx20System@UnicodeString
@Tuverinfo@FileVersionInfo$qqrx20System@UnicodeString
@$xp$26Tuverinfo@TFileVersionInfo
@$xp$36Tuverinfo@TFileVersionIdentification
@Turegistry@initialization$qqrv
@Turegistry@Finalization$qqrv
@Turegistry@WriteDebug$qqr20System@UnicodeString
@Turegistry@GetAppDataDir$qqroo
@Turegistry@IsInternalLanguageTestingMode$qqrv
@Turegistry@GetServiceStartType$qqr20System@UnicodeStringr28Turegistry@TServiceStartType
@Turegistry@ConfigureService$qqr20System@UnicodeString28Turegistry@TServiceStartType25Turegistry@TServiceActiono
@Turegistry@ServiceExists$qqrx20System@UnicodeString
@Turegistry@EnumProductRegKeysEx$qqr20System@UnicodeStringp16Classes@TStringso52System@%Set$t24Turegistry@Turegistry__1$iuc$0$iuc$6%
@Turegistry@GetProductRegSetting$qqr20System@UnicodeStringpboui
@Turegistry@GetProductRegIntValue$qqr20System@UnicodeStringpbruiuiui
@Turegistry@GetProductRegDWORDValue$qqr20System@UnicodeStringpbruiui
@Turegistry@SetProductRegDWORDValue$qqr20System@UnicodeStringpbuiooo
@Turegistry@GetProductRegDateTimeValue$qqr20System@UnicodeStringpbr16System@TDateTimeui
@Turegistry@SetProductRegDateTimeValue$qqr20System@UnicodeStringpb16System@TDateTimeooo
@Turegistry@SetProductRegStringValue$qqr20System@UnicodeStringpbt1ooo
@Turegistry@CombineSubKeys$qqr20System@UnicodeStringt1
@Turegistry@BackupEnd$qqro
@Turegistry@BackupStart$qqr37Tujournalintf@TTUJournalTransactionID17System@WideStringt2
@Turegistry@DeleteRegKey$qqrp6HKEY__x20System@UnicodeString52System@%Set$t24Turegistry@Turegistry__1$iuc$0$iuc$6%
@Turegistry@DeleteRegValue$qqrp6HKEY__x20System@UnicodeStringt252System@%Set$t24Turegistry@Turegistry__1$iuc$0$iuc$6%
@Turegistry@CreateRegKey$qqrp6HKEY__pb52System@%Set$t24Turegistry@Turegistry__1$iuc$0$iuc$6%
@Turegistry@SetRegBinaryValue$qqrp6HKEY__pbt2pxvui52System@%Set$t24Turegistry@Turegistry__1$iuc$0$iuc$6%
@Turegistry@SetRegDWORDValue$qqrp6HKEY__pbt2ui52System@%Set$t24Turegistry@Turegistry__1$iuc$0$iuc$6%
@Turegistry@SetRegStringValue$qqrp6HKEY__pbt2t252System@%Set$t24Turegistry@Turegistry__1$iuc$0$iuc$6%
@Turegistry@KeyExist$qqrp6HKEY__pb52System@%Set$t24Turegistry@Turegistry__1$iuc$0$iuc$6%o
@Turegistry@RegValueExists$qqrp6HKEY__x20System@UnicodeStringt252System@%Set$t24Turegistry@Turegistry__1$iuc$0$iuc$6%
@Turegistry@EnumRegValuesEx$qqrp6HKEY__pbp16Classes@TStringst352System@%Set$t24Turegistry@Turegistry__1$iuc$0$iuc$6%
@Turegistry@GetRegSettingEx$qqrx20System@UnicodeStringt1o52System@%Set$t24Turegistry@Turegistry__1$iuc$0$iuc$6%
@Turegistry@GetRegSetting$qqrp6HKEY__pbt2o52System@%Set$t24Turegistry@Turegistry__1$iuc$0$iuc$6%
@Turegistry@GetRegDWORDValue$qqrp6HKEY__pbt2rui52System@%Set$t24Turegistry@Turegistry__1$iuc$0$iuc$6%
@Turegistry@GetRegIntValue$qqrp6HKEY__pbt2ruiui52System@%Set$t24Turegistry@Turegistry__1$iuc$0$iuc$6%
@Turegistry@GetRegString$qqrp6HKEY__pbt2x20System@UnicodeString52System@%Set$t24Turegistry@Turegistry__1$iuc$0$iuc$6%
@Turegistry@REGKEY_PRODUCT_GLOBAL
@Turegistry@REGKEY_PRODUCT_VERSION
@Turegistry@MAINKEY_PRODUCT_VERSION
@Turegistry@CurrentOS
@$xp$39Tuneupprogrammanager@ITUProgramInfoList
@Tuneupprogrammanager@CLASS_TUProgramManager
@Automaticupdatesintf@IID_IAutomaticUpdates2
@Automaticupdatesintf@CLASS_AutomaticUpdates
@Automaticupdatesintf@IID_IAutomaticUpdates
@Diskaccess@initialization$qqrv
@Diskaccess@Finalization$qqrv
@Tuhelperimpl@initialization$qqrv
@Tuhelperimpl@Finalization$qqrv
@Tuproductkey@initialization$qqrv
@Tuproductkey@Finalization$qqrv
@Amimpersonate@initialization$qqrv
@Amimpersonate@Finalization$qqrv
@Tujournal@initialization$qqrv
@Tujournal@Finalization$qqrv
@Tujournal@GetGlobalBackup$qqrv
@Tuwscapi@initialization$qqrv
@Tuwscapi@Finalization$qqrv
@Tuwscapi@TWscSecurityManager@SetSecurityFlag$qqr32Tuwscapi@TWscSecuritySettingFlago
@Tuwscapi@TWscSecurityManager@GetSecurityFlag$qqr32Tuwscapi@TWscSecuritySettingFlag
@Tuwscapi@TWscSecurityManager@$bctr$qqrv
@Tuwscapi@TWscSecurityManager@
@Tuusvc@CLASS_TUUtilitiesTools
@Tuusvc@CLASS_TUUtilitiesSvc
@Tuusvc@IID_ITUUSysTrayNotifications
@Tuxsourceurl@initialization$qqrv
@Tuxsourceurl@Finalization$qqrv
@Tuprocesshelper@TProcessHelper@GetProcessPath$qqrx20System@UnicodeString
@Tuprocesshelper@TProcessHelper@CloseProcess$qqrx20System@UnicodeString
@Tuprocesshelper@TProcessHelper@RefreshProcessList$qqrv
@Tuprocesshelper@TProcessHelper@$bctr$qqrv
@Tuprocesshelper@ExtractFilePath$qqrx20System@UnicodeString
@Tuprocesshelper@TProcessHelper@
@Specialunit@initialization$qqrv
@Specialunit@Finalization$qqrv
@Specialunit@SHGetFileInfoWrapper$qqr20System@UnicodeStringuiuir12_SHFILEINFOW
@Tumozillahelperimpl@initialization$qqrv
@Tumozillahelperimpl@Finalization$qqrv
@Unetapi@initialization$qqrv
@Unetapi@Finalization$qqrv
@Tucomhelper@initialization$qqrv
@Tucomhelper@Finalization$qqrv
@Wbemscripting_tlb@CoSWbemLocator@Create$qqrv
@Wbemscripting_tlb@CoSWbemLocator@
@$xp$32Wbemscripting_tlb@ISWbemProperty
@$xp$35Wbemscripting_tlb@ISWbemPropertySet
@$xp$30Wbemscripting_tlb@ISWbemObject
@Tuversionconfig@initialization$qqrv
@Tuversionconfig@Finalization$qqrv
@Gnugettext@initialization$qqrv
@Gnugettext@Finalization$qqrv
@Graphics@initialization$qqrv
@Graphics@Finalization$qqrv
@Appevnts@initialization$qqrv
@Appevnts@Finalization$qqrv
@Actnlist@initialization$qqrv
@Actnlist@Finalization$qqrv
@Themes@initialization$qqrv
@Themes@Finalization$qqrv
@Controls@initialization$qqrv
@Controls@Finalization$qqrv
@Menus@initialization$qqrv
@Menus@Finalization$qqrv
@Forms@initialization$qqrv
@Forms@Finalization$qqrv
@Forms@TApplication@MessageBox$qqrpxbt1i
@Forms@TApplication@Initialize$qqrv
@Forms@Application
@Dialogs@initialization$qqrv
@Dialogs@Finalization$qqrv
@Dialogs@MessageDlg$qqrx20System@UnicodeString19Dialogs@TMsgDlgType47System@%Set$t18Dialogs@TMsgDlgBtn$iuc$0$iuc$11%i
@Comctrls@initialization$qqrv
@Comctrls@Finalization$qqrv
@Graphutil@initialization$qqrv
@Graphutil@Finalization$qqrv
@Extctrls@initialization$qqrv
@Extctrls@Finalization$qqrv
@Printers@initialization$qqrv
@Printers@Finalization$qqrv
@Clipbrd@initialization$qqrv
@Clipbrd@Finalization$qqrv
@Extdlgs@initialization$qqrv
@Extdlgs@Finalization$qqrv
@Buttons@initialization$qqrv
@Buttons@Finalization$qqrv
@Oleserver@initialization$qqrv
@Oleserver@Finalization$qqrv
@Olectrls@initialization$qqrv
@Olectrls@Finalization$qqrv
@Axctrls@initialization$qqrv
@Axctrls@Finalization$qqrv
@Tuneupwow64@initialization$qqrv
@Tuneupwow64@Finalization$qqrv
@Tuneupwow64@IsCurrentProcessWow64$qqrv
@Satask@initialization$qqrv
@Satask@Finalization$qqrv
@Sautils@initialization$qqrv
@Sautils@Finalization$qqrv
@Tuwerapi@WerReportCloseHandle$qqsui
@Tuwerapi@WerReportSubmit$qqsui20Tuwerapi@WER_CONSENTuir26Tuwerapi@WER_SUBMIT_RESULT
@Tuwerapi@WerReportAddFile$qqsuipxb22Tuwerapi@WER_FILE_TYPEui
@Tuwerapi@WerReportSetParameter$qqsuiuipbt3
@Tuwerapi@WerReportCreate$qqspxb24Tuwerapi@WER_REPORT_TYPEp31Tuwerapi@WER_REPORT_INFORMATIONrui
@Tutaskscheduler@initialization$qqrv
@Tutaskscheduler@Finalization$qqrv
@Tutaskscheduler@TUScheduleTask@IsTaskInstalled$qqrx17System@WideString
@Tutaskscheduler@TUScheduleTask@DeleteTask$qqrx17System@WideString
@Tutaskscheduler@TUScheduleTask@$bctr$qqrv
@Tutaskscheduler@TUScheduleTask@
@Tuappinstancepools@initialization$qqrv
@Tuappinstancepools@Finalization$qqrv
@Ocmutils@initialization$qqrv
@Ocmutils@Finalization$qqrv
@Ocmutils@IsLiveOptimizerRun$qqrv
@Ocmutils@GetPlannedQuickCheckTaskParameters$qqrr31Ocmutilsintf@TTUOCMTimeSettings
@Tureport@initialization$qqrv
@Tureport@Finalization$qqrv
@Tureport@TTUReportIntegrator@SetSolvedProblems$qqrxui
@Tureport@TUReportData
@Htmlun2@initialization$qqrv
@Htmlun2@Finalization$qqrv
@Styleun@initialization$qqrv
@Styleun@Finalization$qqrv
@Readhtml@initialization$qqrv
@Readhtml@Finalization$qqrv
@Stylepars@initialization$qqrv
@Stylepars@Finalization$qqrv
@Htmlsubs@initialization$qqrv
@Htmlsubs@Finalization$qqrv
@Usp10@initialization$qqrv
@Usp10@Finalization$qqrv
@Htmlgif1@initialization$qqrv
@Htmlgif1@Finalization$qqrv
@Vwprint@initialization$qqrv
@Vwprint@Finalization$qqrv
@Ditherunit@initialization$qqrv
@Ditherunit@Finalization$qqrv
@Tuuvars@initialization$qqrv
@Tuuvars@Finalization$qqrv
@Tuuvars@CurAppDataDir$qqrv
@Gr32@initialization$qqrv
@Gr32@Finalization$qqrv
@Gr32_system@initialization$qqrv
@Gr32_system@Finalization$qqrv
@Gr32_blend@initialization$qqrv
@Gr32_blend@Finalization$qqrv
@Gr32_bindings@initialization$qqrv
@Gr32_bindings@Finalization$qqrv
@Gr32_lowlevel@initialization$qqrv
@Gr32_lowlevel@Finalization$qqrv
@Gr32_backends_vcl@initialization$qqrv
@Gr32_backends_vcl@Finalization$qqrv
@Gr32_image@initialization$qqrv
@Gr32_image@Finalization$qqrv
@Gr32_resamplers@initialization$qqrv
@Gr32_resamplers@Finalization$qqrv
@Gr32_rasterizers@initialization$qqrv
@Gr32_rasterizers@Finalization$qqrv
@Gr32_xpthemes@initialization$qqrv
@Gr32_xpthemes@Finalization$qqrv
@Gr32_microtiles@initialization$qqrv
@Gr32_microtiles@Finalization$qqrv
@Gr32_filters@initialization$qqrv
@Gr32_filters@Finalization$qqrv
@Imagehelper@initialization$qqrv
@Imagehelper@Finalization$qqrv
@Tuuconst@initialization$qqrv
@Tuuconst@Finalization$qqrv
@Tuuconst@_TUUAppTitle_ProcessManager
@Tuuconst@_TUUAppTitle_DSE
@Tuuconst@_TUUAppTitle_DiskDoctor
@Tugraphics@initialization$qqrv
@Tugraphics@Finalization$qqrv
@Tustylerepository@initialization$qqrv
@Tustylerepository@Finalization$qqrv
@Pngimage@initialization$qqrv
@Pngimage@Finalization$qqrv
@Gifimg@initialization$qqrv
@Gifimg@Finalization$qqrv
@Jpeg@initialization$qqrv
@Jpeg@Finalization$qqrv
@Zipforge@initialization$qqrv
@Zipforge@Finalization$qqrv
@Zfconst@initialization$qqrv
@Zfconst@Finalization$qqrv
@Zfcipher@initialization$qqrv
@Zfcipher@Finalization$qqrv
@Zfdecutil@initialization$qqrv
@Zfdecutil@Finalization$qqrv
@Zfhash@initialization$qqrv
@Zfhash@Finalization$qqrv
@Zfsha1@initialization$qqrv
@Zfsha1@Finalization$qqrv
@Zfstrfunc@initialization$qqrv
@Zfstrfunc@Finalization$qqrv
@Dsgnlist@TDesignList@GetCount$qqrv
@Netapi32@initialization$qqrv
@Netapi32@Finalization$qqrv
@Windows2000@initialization$qqrv
@Windows2000@Finalization$qqrv
@Sidstore@initialization$qqrv
@Sidstore@Finalization$qqrv
@Ntcommon@initialization$qqrv
@Ntcommon@Finalization$qqrv
@Ntcommon@TNTPersistent@GetEveryOneName$qqr20System@UnicodeString
@Advapi32@initialization$qqrv
@Advapi32@Finalization$qqrv
@Ntsecurity@initialization$qqrv
@Ntsecurity@Finalization$qqrv
@Abstrsec@TNTAbstractSecurity@GetAccessList$qqrv
@Abstrsec@TAccessList@GetItem$qqri
@Ntshare@TResourceList@GetItem$qqri
@Ntshare@TNTShare@GetResources$qqrv
@Ntshare@TNTShare@SetShareName$qqr20System@UnicodeString
@Ntshare@TNTShare@GetPath$qqrv
@Ntshare@TNTShare@GetShareType$qqrv
@Ntshare@TNTShare@$bctr$qqrp18Classes@TComponent
@Ntshare@TNTShare@
@Privileg@initialization$qqrv
@Privileg@Finalization$qqrv
@Userman@TNTUserMan@_GetUsers$qqrv
@Userman@TUserInfo@GetPrivilege$qqrv
@Userman@TUserInfo@GetOptions$qqrv
@Userman@TNTUserMan@SetUserName$qqr20System@UnicodeString
@Userman@TNTUserMan@$bctr$qqrp18Classes@TComponent
@Userman@TNTUserMan@
@Wtsapi32@initialization$qqrv
@Wtsapi32@Finalization$qqrv
@Crc@initialization$qqrv
@Crc@Finalization$qqrv
@Decutil@initialization$qqrv
@Decutil@Finalization$qqrv
@Nativexml@initialization$qqrv
@Nativexml@Finalization$qqrv
@Nativexml@TNativeXml@SetExternalEncoding$qqrx27Nativexml@TsdStringEncoding
@Nativexml@TNativeXml@IsEmpty$qqrv
@Nativexml@TNativeXml@GetRoot$qqrv
@Nativexml@TNativeXml@$bctr$qqrp18Classes@TComponent
@Nativexml@TNativeXml@$bctr$qqrx31System@%AnsiStringT$us$i65001$%p18Classes@TComponent
@Nativexml@TXmlNode@SetValueUnicode$qqrx20System@UnicodeString
@Nativexml@TXmlNode@NodeByName$qqrx31System@%AnsiStringT$us$i65001$%
@Nativexml@TXmlNode@GetValueUnicode$qqrv
@Nativexml@TXmlNode@AttributeAdd$qqrx31System@%AnsiStringT$us$i65001$%t1
@Nativexml@TNativeXml@
@Sddebug@initialization$qqrv
@Sddebug@Finalization$qqrv
@Libxmlparser@initialization$qqrv
@Libxmlparser@Finalization$qqrv
@Tuusvcevents@TTUUSvcProcessesSensorEvents@$bctr$qqrv
@Tuusvcevents@TTUUSvcEventsBaseSink@Disconnect$qqrv
@Tuusvcevents@TTUUSvcEventsBaseSink@Connect$qqrx45System@%DelphiInterface$t17System@IInterface%
@Tuusvcevents@TTUUSvcProcessesSensorEvents@
@Tuenergyoptdata@initialization$qqrv
@Tuenergyoptdata@Finalization$qqrv
@Tucommandline@initialization$qqrv
@Tucommandline@Finalization$qqrv
@Tutuningindex@initialization$qqrv
@Tutuningindex@Finalization$qqrv
@Tutuningindex@TTUTuningIndex@SetScanInProgess$qqrxo
@Tutuningindex@TTUTuningIndex@SetSandman$qqrrx27Tutuningindex@TTuneIdxValue
@Tutuningindex@TTUTuningIndex@SetTurboModeOptions$qqrrx27Tutuningindex@TTuneIdxValue
@Tutuningindex@TTUTuningIndex@SetTurboModeActive$qqrxo
@Tutuningindex@TTUTuningIndex@SetABMActive$qqrxo
@Tutuningindex@TTUTuningIndex@SetTuningWizardCount$qqrrx27Tutuningindex@TTuneIdxValue
@Tutuningindex@TTUTuningIndex@SetProfileFilled$qqrxo
@Tutuningindex@TTUTuningIndex@SetOCMExecutions$qqrv
@Tutuningindex@TTUTuningIndex@SetAutoStarts$qqrrx27Tutuningindex@TTuneIdxValue20System@UnicodeString
@Tutuningindex@TTUTuningIndex@SetLiveOpt$qqroo
@Tutuningindex@TTUTuningIndex@SetDashboardProblems$qqr30Tutuningindex@TTuneIdxSeverityrx27Tutuningindex@TTuneIdxValue
@Tutuningindex@TTUTuningIndex@$bctr$qqrv
@Tutuningindex@TuneIdxValue$qqrii
@Tutuningindex@TTUTuningIndex@
@Tustartupmanagerbase@initialization$qqrv
@Tustartupmanagerbase@Finalization$qqrv
@Tustringutils@initialization$qqrv
@Tustringutils@Finalization$qqrv
@Tustringutils@TypeToStr$qqrp17Typinfo@TTypeInfoi
@Driveparser@initialization$qqrv
@Driveparser@Finalization$qqrv
@Shelllink@initialization$qqrv
@Shelllink@Finalization$qqrv
@Tustartupmanager@initialization$qqrv
@Tustartupmanager@Finalization$qqrv
@Tustartupmanager@TStartUpEntries@GetFromBase$qqri
@Tustartupmanager@TTUStartUpManager@GetInstance$qqroo
@Tustartupmanager@TTUStartUpManager@ReleaseInstance$qqrv
@Tustartupmanager@TTUStartUpManager@CollectTUIDs$qqr66System@%DelphiInterface$t38Tuneupprogrammanager@ITUProgramManager%o
@Tustartupmanager@TTUStartUpManager@GetStartupEntries$qqrv
@Tustartupmanager@TTUStartUpManager@
@Tufileidentification@initialization$qqrv
@Tufileidentification@Finalization$qqrv
@Tuwin32_logicaldisk@TTUWin32_LogicalDiskList@Get$qqrxi
@Tuwin32_logicaldisk@TTUWin32_LogicalDisk@Load$qqrv
@Tuwin32_logicaldisk@TTUWin32_LogicalDisk@$bctr$qqrv
@Tuwin32_logicaldisk@TTUWin32_LogicalDisk@
@Tuwin32_logicaldisk@TTUWin32_LogicalDiskList@
@$xp$45Tuwin32_logicaldisk@TTUWin32_LogicalDiskEntry
@Tuprocessmanager@TTUProcessManager@RefreshProcesses$qqrv
@Tuprocessmanager@TTUProcessManager@$bctr$qqrp18Classes@TComponent
@Tuprocessmanager@TPMProcesses@Get$qqri
@Tuprocessmanager@TPMProcess@GetMemoryUsage$qqrv
@Tuprocessmanager@TTUProcessManager@
@Tufirewallproduct@TTUFirewallProduct@IsOneEnabled$qqrv
@Tufirewallproduct@TTUFirewallProduct@
@Uicons@initialization$qqrv
@Uicons@Finalization$qqrv
@Madshell@initialization$qqrv
@Madshell@Finalization$qqrv
@Shortcutlink@initialization$qqrv
@Shortcutlink@Finalization$qqrv
@Tuprogramrating@initialization$qqrv
@Tuprogramrating@Finalization$qqrv
@Tuprogramratinglog@initialization$qqrv
@Tuprogramratinglog@Finalization$qqrv
@Turatingconnection@initialization$qqrv
@Turatingconnection@Finalization$qqrv
@Turatingstorage@initialization$qqrv
@Turatingstorage@Finalization$qqrv
@Xmldoc@initialization$qqrv
@Xmldoc@Finalization$qqrv
@Xmlintf@initialization$qqrv
@Xmlintf@Finalization$qqrv
@Xmldom@initialization$qqrv
@Xmldom@Finalization$qqrv
@Msxmldom@initialization$qqrv
@Msxmldom@Finalization$qqrv
@Xmlschema@initialization$qqrv
@Xmlschema@Finalization$qqrv
@Xmlschematags@initialization$qqrv
@Xmlschematags@Finalization$qqrv
@Tumessagetypes@Send_SpeedOptimizerMessage$qqruiui39Tumessagetypes@TTU_SpeedOptimizerValuesui
@Tumessagetypes@Send_IntegratorPillarMessage$qqruiui41Tumessagetypes@TTU_IntegratorPillarValuesui
@Tusystemrestore@initialization$qqrv
@Tusystemrestore@Finalization$qqrv
@Tustatistics@initialization$qqrv
@Tustatistics@Finalization$qqrv
@Tudrives@initialization$qqrv
@Tudrives@Finalization$qqrv
@Tudrives@TTUDrive@IsSystemDrive$qqrv
@Tudrives@TTUDrives@Load$qqrv
@Tudrives@TTUDrives@GetDrive$qqrxi
@Tudrives@TTUDrives@Count$qqrv
@Tudrives@TTUDrives@$bctr$qqrxoxo
@Tudrives@TTUDrives@
@Tutuningpossibilityscanner@TTUTuningPossibilityScanner@GetTuningPossibilities$qqrr50System@%DelphiInterface$t22Classes@IInterfaceList%
@Tutuningpossibilityscanner@TTUTuningPossibilityScanner@ExecuteScan$qqro
@Tutuningpossibilityscanner@TTUTuningPossibilityScanner@$bctr$qqrv
@Tutuningpossibilityscanner@TTUTuningPossibilityScanner@AbortScan$qqro
@Tutuningpossibilityscanner@TTUTuningPossibilityScanner@
@Tutuningpossibility@initialization$qqrv
@Tutuningpossibility@Finalization$qqrv
@Tutuningpossibility@TTuTuningList@CountActual$qqrv
@Tutuningpossibility@TUIDX_PO
@Tuinternetoptimization@initialization$qqrv
@Tuinternetoptimization@Finalization$qqrv
@Tuconnectionprofiles@initialization$qqrv
@Tuconnectionprofiles@Finalization$qqrv
@Tuquestionnaire@TTUQuestionnaire@GetCorporateUse$qqrv
@Tuquestionnaire@TTUQuestionnaire@GetPerformanceCompleted$qqrv
@Tuquestionnaire@TTUQuestionnaire@$bctr$qqrv
@Tuquestionnaire@TTUQuestionnaire@
@Tutuningpossibilityregister@RegisterKnownPerformanceAdvisorAreas$qqrp54Tutuningpossibilityscanner@TTUTuningPossibilityScanner
@Tuantivirusproduct@TTUAntiVirusProduct@IsOneInstalled$qqrv
@Tuantivirusproduct@TTUAntiVirusProduct@
@Tussddetection@TTUSSDDetection@ScanAllDevicesForSSD$qqro57System@%Set$t29Tussddetection@TTUSSDScanFlag$iuc$0$iuc$3%ynpqqrv$o
@Tussddetection@TTUSSDDetection@$bctr$qqrv
@Tussddetection@TTUSSDDetection@
@Tuopera_preferences@initialization$qqrv
@Tuopera_preferences@Finalization$qqrv
@Tuopera_search@initialization$qqrv
@Tuopera_search@Finalization$qqrv
@Tuopera_speeddial@initialization$qqrv
@Tuopera_speeddial@Finalization$qqrv
@Tuinternetexplorerhelper@initialization$qqrv
@Tuinternetexplorerhelper@Finalization$qqrv
@Tumsofficehelper@initialization$qqrv
@Tumsofficehelper@Finalization$qqrv
@Tumediaplayerhelper@initialization$qqrv
@Tumediaplayerhelper@Finalization$qqrv
@Tumediaplayerhelper@GetWMPVersion$qqrv
@Ras@initialization$qqrv
@Ras@Finalization$qqrv
@Tupsapi@initialization$qqrv
@Tupsapi@Finalization$qqrv
@Tupsapi@TUPSGetPrefetchDate$qqrv
@Tuinstallertools@initialization$qqrv
@Tuinstallertools@Finalization$qqrv
@Tuinstalledapps@initialization$qqrv
@Tuinstalledapps@Finalization$qqrv
@Tuinstalledapps@TProgramPopulation@ProgramCount$qqrv
@Tuinstalledapps@TProgramPopulation@
@Mitec_routines@initialization$qqrv
@Mitec_routines@Finalization$qqrv
@Mitec_strutils@initialization$qqrv
@Mitec_strutils@Finalization$qqrv
@Mitec_datetime@initialization$qqrv
@Mitec_datetime@Finalization$qqrv
@Mitec_netapi32@initialization$qqrv
@Mitec_netapi32@Finalization$qqrv
@Mitec_wtsapi32@initialization$qqrv
@Mitec_wtsapi32@Finalization$qqrv
@Mitec_psapi@initialization$qqrv
@Mitec_psapi@Finalization$qqrv
@Mitec_native@initialization$qqrv
@Mitec_native@Finalization$qqrv
@Msi_cpu@initialization$qqrv
@Msi_cpu@Finalization$qqrv
@Msi_common@initialization$qqrv
@Msi_common@Finalization$qqrv
@Mitec_sysutils@initialization$qqrv
@Mitec_sysutils@Finalization$qqrv
@Msi_os@initialization$qqrv
@Msi_os@Finalization$qqrv
@Mitec_wmi@initialization$qqrv
@Mitec_wmi@Finalization$qqrv
@Mitec_ss@initialization$qqrv
@Mitec_ss@Finalization$qqrv
@Msi_devices@initialization$qqrv
@Msi_devices@Finalization$qqrv
@Msi_smbios@initialization$qqrv
@Msi_smbios@Finalization$qqrv
@Mitec_usb@initialization$qqrv
@Mitec_usb@Finalization$qqrv
@Mitec_advapi@initialization$qqrv
@Mitec_advapi@Finalization$qqrv
@Msi_bt@initialization$qqrv
@Msi_bt@Finalization$qqrv
@Mitec_btapi@initialization$qqrv
@Mitec_btapi@Finalization$qqrv
@Msi_apm@initialization$qqrv
@Msi_apm@Finalization$qqrv
@Mitec_powrprof@initialization$qqrv
@Mitec_powrprof@Finalization$qqrv
@Msi_engines@initialization$qqrv
@Msi_engines@Finalization$qqrv
@Mitec_wnaspi32@initialization$qqrv
@Mitec_wnaspi32@Finalization$qqrv
@Msi_network@initialization$qqrv
@Msi_network@Finalization$qqrv
@Mitec_shares@initialization$qqrv
@Mitec_shares@Finalization$qqrv
@Mitec_svrapi@initialization$qqrv
@Mitec_svrapi@Finalization$qqrv
@Mitec_iphlpapi@initialization$qqrv
@Mitec_iphlpapi@Finalization$qqrv
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE