@@Unitkingcpp1@Finalize
@@Unitkingcpp1@Initialize
TMethodImplementationIntercept
___CPPdebugHook
___setRaiseListFuncAddr
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Overview
overview
7Static
static
7KingNoteBo...lp.exe
windows7-x64
7KingNoteBo...lp.exe
windows10-2004-x64
7KingNoteBo...ok.exe
windows7-x64
7KingNoteBo...ok.exe
windows10-2004-x64
7KingNoteBo...32.exe
windows7-x64
7KingNoteBo...32.exe
windows10-2004-x64
7KingNoteBo...32.exe
windows7-x64
7KingNoteBo...32.exe
windows10-2004-x64
7KingNoteBo...32.exe
windows7-x64
7KingNoteBo...32.exe
windows10-2004-x64
7KingNoteBo...EB.exe
windows7-x64
7KingNoteBo...EB.exe
windows10-2004-x64
7KingNoteBo...box.js
windows7-x64
1KingNoteBo...box.js
windows10-2004-x64
1KingNoteBo...20.exe
windows7-x64
1KingNoteBo...20.exe
windows10-2004-x64
13112136173...08.ps1
windows7-x64
13112136173...08.ps1
windows10-2004-x64
1KingNoteBo...ch.exe
windows7-x64
1KingNoteBo...ch.exe
windows10-2004-x64
1KingNoteBo...32.exe
windows7-x64
1KingNoteBo...32.exe
windows10-2004-x64
1KingNoteBo...KN.exe
windows7-x64
1KingNoteBo...KN.exe
windows10-2004-x64
1KingNoteBo...bp.exe
windows7-x64
1KingNoteBo...bp.exe
windows10-2004-x64
1KingNoteBo...Up.exe
windows7-x64
1KingNoteBo...Up.exe
windows10-2004-x64
1KingNoteBo...ys.dll
windows7-x64
1KingNoteBo...ys.dll
windows10-2004-x64
3KingNoteBo...ql.dll
windows7-x64
3KingNoteBo...ql.dll
windows10-2004-x64
3Behavioral task
behavioral1
Sample
KingNoteBookV21/Help.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
KingNoteBookV21/Help.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
KingNoteBookV21/KingNoteBook.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
KingNoteBookV21/KingNoteBook.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
KingNoteBookV21/KingNoteDate/KN202032.exe
Resource
win7-20231215-en
Behavioral task
behavioral6
Sample
KingNoteBookV21/KingNoteDate/KN202032.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
KingNoteBookV21/KingNoteDate/KN202132.exe
Resource
win7-20240215-en
Behavioral task
behavioral8
Sample
KingNoteBookV21/KingNoteDate/KN202132.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
KingNoteBookV21/KingNoteDate/KN202232.exe
Resource
win7-20231129-en
Behavioral task
behavioral10
Sample
KingNoteBookV21/KingNoteDate/KN202232.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral11
Sample
KingNoteBookV21/KingNoteDate/KN2022EB.exe
Resource
win7-20231215-en
Behavioral task
behavioral12
Sample
KingNoteBookV21/KingNoteDate/KN2022EB.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
KingNoteBookV21/KingNoteDate/KNSystem/Tool/InPlayMp3box.js
Resource
win7-20231215-en
Behavioral task
behavioral14
Sample
KingNoteBookV21/KingNoteDate/KNSystem/Tool/InPlayMp3box.js
Resource
win10v2004-20231215-en
Behavioral task
behavioral15
Sample
KingNoteBookV21/KingNoteDate/KNSystem/Tool/KN20112018ToKN2020.exe
Resource
win7-20231215-en
Behavioral task
behavioral16
Sample
KingNoteBookV21/KingNoteDate/KNSystem/Tool/KN20112018ToKN2020.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
311213617322710008.ps1
Resource
win7-20231215-en
Behavioral task
behavioral18
Sample
311213617322710008.ps1
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
KingNoteBookV21/KingNoteDate/KNSystem/Tool/KingSpeech.exe
Resource
win7-20240215-en
Behavioral task
behavioral20
Sample
KingNoteBookV21/KingNoteDate/KNSystem/Tool/KingSpeech.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
KingNoteBookV21/KingNoteDate/KNSystem/Tool/STAddApp32.exe
Resource
win7-20231215-en
Behavioral task
behavioral22
Sample
KingNoteBookV21/KingNoteDate/KNSystem/Tool/STAddApp32.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
KingNoteBookV21/KingNoteDate/KNSystem/Tool/Teacher2KN.exe
Resource
win7-20231215-en
Behavioral task
behavioral24
Sample
KingNoteBookV21/KingNoteDate/KNSystem/Tool/Teacher2KN.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral25
Sample
KingNoteBookV21/KingNoteDate/KNSystem/Tool/dwebp.exe
Resource
win7-20231215-en
Behavioral task
behavioral26
Sample
KingNoteBookV21/KingNoteDate/KNSystem/Tool/dwebp.exe
Resource
win10v2004-20231222-en
Behavioral task
behavioral27
Sample
KingNoteBookV21/KingNoteDate/SheTianSoftUp.exe
Resource
win7-20231215-en
Behavioral task
behavioral28
Sample
KingNoteBookV21/KingNoteDate/SheTianSoftUp.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
KingNoteBookV21/KingNoteDate/dbxmys.dll
Resource
win7-20231215-en
Behavioral task
behavioral30
Sample
KingNoteBookV21/KingNoteDate/dbxmys.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
KingNoteBookV21/KingNoteDate/libmysql.dll
Resource
win7-20240215-en
Behavioral task
behavioral32
Sample
KingNoteBookV21/KingNoteDate/libmysql.dll
Resource
win10v2004-20231222-en
Target
e33660c18be3b1f461d668486b5627503ebbececbd5fa20e3afb21b8bb0b2ff6
Size
13.4MB
MD5
c95c76dbae81c5cdcc336797c6717395
SHA1
f567b58a79926905fca2920bd76d2f992ffa524a
SHA256
e33660c18be3b1f461d668486b5627503ebbececbd5fa20e3afb21b8bb0b2ff6
SHA512
e8312976fba36d1bb29aa05e4add78bbe925c3f237afb8bcad4da61bb6331051126b5312ce32521503683d1a496f5fef9637b69f141ed060c3a8ac28a92e215b
SSDEEP
393216:nq3aLWpYH+qIi3xgiQAlPSSxlmtgqcsivBAyThYU:nqZpYeqIiKiRlKSSBiZtNn
resource | yara_rule |
---|---|
static1/unpack001/KingNoteBookV21/KingNoteBook.exe | upx |
static1/unpack001/KingNoteBookV21/KingNoteDate/KN202032.exe | upx |
static1/unpack001/KingNoteBookV21/KingNoteDate/KN202132.exe | upx |
static1/unpack001/KingNoteBookV21/KingNoteDate/KN202232.exe | upx |
static1/unpack001/KingNoteBookV21/KingNoteDate/KN2022EB.exe | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/KingNoteBookV21/Help.exe |
unpack001/KingNoteBookV21/KingNoteBook.exe |
unpack001/KingNoteBookV21/KingNoteDate/KN202032.exe |
unpack001/KingNoteBookV21/KingNoteDate/KN202132.exe |
unpack001/KingNoteBookV21/KingNoteDate/KN202232.exe |
unpack001/KingNoteBookV21/KingNoteDate/KN2022EB.exe |
unpack001/KingNoteBookV21/KingNoteDate/KNSystem/Tool/KN20112018ToKN2020.exe |
unpack001/KingNoteBookV21/KingNoteDate/KNSystem/Tool/KingSpeech.exe |
unpack001/KingNoteBookV21/KingNoteDate/KNSystem/Tool/STAddApp32.exe |
unpack001/KingNoteBookV21/KingNoteDate/KNSystem/Tool/Teacher2KN.exe |
unpack001/KingNoteBookV21/KingNoteDate/KNSystem/Tool/dwebp.exe |
unpack001/KingNoteBookV21/KingNoteDate/SheTianSoftUp.exe |
unpack001/KingNoteBookV21/KingNoteDate/dbxmys.dll |
unpack001/KingNoteBookV21/KingNoteDate/libmysql.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
RegCloseKey
ShellExecuteA
CharNextA
SafeArrayCreate
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
@@Unitkingcpp1@Finalize
@@Unitkingcpp1@Initialize
TMethodImplementationIntercept
___CPPdebugHook
___setRaiseListFuncAddr
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
@$xp$11Aes@TKeyBit
@$xp$11TFormLoding
@$xp$11TKN2020Main
@$xp$11TKuTitPeiXu
@$xp$12TKN_FromZanZ
@$xp$12ThreadInsBGG
@$xp$14Elaes@PInteger
@$xp$15Elaes@EAESError
@$xp$16Elaes@PAESBuffer
@$xp$16Elaes@PAESKey128
@$xp$16Elaes@PAESKey192
@$xp$16Elaes@PAESKey256
@$xp$16Elaes@TAESBuffer
@$xp$16Elaes@TAESKey128
@$xp$16Elaes@TAESKey192
@$xp$16Elaes@TAESKey256
@$xp$24Elaes@PAESExpandedKey128
@$xp$24Elaes@PAESExpandedKey192
@$xp$24Elaes@PAESExpandedKey256
@$xp$24Elaes@TAESExpandedKey128
@$xp$24Elaes@TAESExpandedKey192
@$xp$24Elaes@TAESExpandedKey256
@$xp$5TKNZC
@$xp$7MThread
@$xp$7TKNYHDL
@$xp$8TSTAbout
@$xp$9TKN_EXEJM
@@Unitcpp1@Finalize
@@Unitcpp1@Initialize
@@Unitcpp2@Finalize
@@Unitcpp2@Initialize
@@Unitformatst@Finalize
@@Unitformatst@Initialize
@@Unitformloding@Finalize
@@Unitformloding@Initialize
@@Unitformpeixu@Finalize
@@Unitformpeixu@Initialize
@@Unitformzhuce@Finalize
@@Unitformzhuce@Initialize
@@Unitfromdenlu@Finalize
@@Unitfromdenlu@Initialize
@@Unitfromzanzhu@Finalize
@@Unitfromzanzhu@Initialize
@@Unitknexejm@Finalize
@@Unitknexejm@Initialize
@@Unitmain@Finalize
@@Unitmain@Initialize
@@Unitmthread1@Finalize
@@Unitmthread1@Initialize
@@Unitthreadinsbgg@Finalize
@@Unitthreadinsbgg@Initialize
@Aes@DecryptFile$qqr20System@UnicodeStringt127System@%AnsiStringT$us$i0$%11Aes@TKeyBit
@Aes@DecryptStream$qqrp22System@Classes@TStream27System@%AnsiStringT$us$i0$%rp22System@Classes@TStream11Aes@TKeyBit
@Aes@DecryptString$qqr27System@%AnsiStringT$us$i0$%t111Aes@TKeyBit
@Aes@EncryptFile$qqr20System@UnicodeStringt127System@%AnsiStringT$us$i0$%11Aes@TKeyBit
@Aes@EncryptStream$qqrp22System@Classes@TStream27System@%AnsiStringT$us$i0$%rp22System@Classes@TStream11Aes@TKeyBit
@Aes@EncryptString$qqr27System@%AnsiStringT$us$i0$%t111Aes@TKeyBit
@Aes@Finalization$qqrv
@Aes@HexToStr$qqrx27System@%AnsiStringT$us$i0$%
@Aes@StrToHex$qqrx27System@%AnsiStringT$us$i0$%
@Aes@initialization$qqrv
@Elaes@DecryptAES$qqrrx29System@%StaticArray$uci$i16$%rx29System@%StaticArray$uii$i44$%r29System@%StaticArray$uci$i16$%
@Elaes@DecryptAES$qqrrx29System@%StaticArray$uci$i16$%rx29System@%StaticArray$uii$i54$%r29System@%StaticArray$uci$i16$%
@Elaes@DecryptAES$qqrrx29System@%StaticArray$uci$i16$%rx29System@%StaticArray$uii$i64$%r29System@%StaticArray$uci$i16$%
@Elaes@DecryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i16$%t3t1
@Elaes@DecryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i24$%rx29System@%StaticArray$uci$i16$%t1
@Elaes@DecryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i32$%rx29System@%StaticArray$uci$i16$%t1
@Elaes@DecryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i44$%rx29System@%StaticArray$uci$i16$%t1
@Elaes@DecryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i54$%rx29System@%StaticArray$uci$i16$%t1
@Elaes@DecryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i64$%rx29System@%StaticArray$uci$i16$%t1
@Elaes@DecryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i16$%t1
@Elaes@DecryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i24$%t1
@Elaes@DecryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i32$%t1
@Elaes@DecryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i44$%t1
@Elaes@DecryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i54$%t1
@Elaes@DecryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i64$%t1
@Elaes@EAESError@
@Elaes@EncryptAES$qqrrx29System@%StaticArray$uci$i16$%rx29System@%StaticArray$uii$i44$%r29System@%StaticArray$uci$i16$%
@Elaes@EncryptAES$qqrrx29System@%StaticArray$uci$i16$%rx29System@%StaticArray$uii$i54$%r29System@%StaticArray$uci$i16$%
@Elaes@EncryptAES$qqrrx29System@%StaticArray$uci$i16$%rx29System@%StaticArray$uii$i64$%r29System@%StaticArray$uci$i16$%
@Elaes@EncryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i16$%t3t1
@Elaes@EncryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i24$%rx29System@%StaticArray$uci$i16$%t1
@Elaes@EncryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i32$%rx29System@%StaticArray$uci$i16$%t1
@Elaes@EncryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i44$%rx29System@%StaticArray$uci$i16$%t1
@Elaes@EncryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i54$%rx29System@%StaticArray$uci$i16$%t1
@Elaes@EncryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i64$%rx29System@%StaticArray$uci$i16$%t1
@Elaes@EncryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i16$%t1
@Elaes@EncryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i24$%t1
@Elaes@EncryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i32$%t1
@Elaes@EncryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i44$%t1
@Elaes@EncryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i54$%t1
@Elaes@EncryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i64$%t1
@Elaes@ExpandAESKeyForDecryption$qqrr29System@%StaticArray$uii$i44$%
@Elaes@ExpandAESKeyForDecryption$qqrr29System@%StaticArray$uii$i54$%
@Elaes@ExpandAESKeyForDecryption$qqrr29System@%StaticArray$uii$i64$%
@Elaes@ExpandAESKeyForDecryption$qqrrx29System@%StaticArray$uci$i16$%r29System@%StaticArray$uii$i44$%
@Elaes@ExpandAESKeyForDecryption$qqrrx29System@%StaticArray$uci$i24$%r29System@%StaticArray$uii$i54$%
@Elaes@ExpandAESKeyForDecryption$qqrrx29System@%StaticArray$uci$i32$%r29System@%StaticArray$uii$i64$%
@Elaes@ExpandAESKeyForEncryption$qqrrx29System@%StaticArray$uci$i16$%r29System@%StaticArray$uii$i44$%
@Elaes@ExpandAESKeyForEncryption$qqrrx29System@%StaticArray$uci$i24$%r29System@%StaticArray$uii$i54$%
@Elaes@ExpandAESKeyForEncryption$qqrrx29System@%StaticArray$uci$i32$%r29System@%StaticArray$uii$i64$%
@Elaes@Finalization$qqrv
@Elaes@_SInvalidInBufSize
@Elaes@_SReadError
@Elaes@_SWriteError
@Elaes@initialization$qqrv
TMethodImplementationIntercept
_FormLoding
_KN2020Main
_KNYHDL
_KNZC
_KN_EXEJM
_KN_FromZanZ
_KuTitPeiXu
_STAbout
___CPPdebugHook
___setRaiseListFuncAddr
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
@$xp$18TKingNoteBookUPv21
@@Unitcpp1@Finalize
@@Unitcpp1@Initialize
@@Unitmain1@Finalize
@@Unitmain1@Initialize
TMethodImplementationIntercept
_KingNoteBookUPv21
___CPPdebugHook
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
@$xp$11Aes@TKeyBit
@$xp$13TKN_FormHLink
@$xp$14Elaes@PInteger
@$xp$15Elaes@EAESError
@$xp$15TKN_FormFindWeb
@$xp$15TKN_FormSetPage
@$xp$15TKN_FormShuQian
@$xp$16Elaes@PAESBuffer
@$xp$16Elaes@PAESKey128
@$xp$16Elaes@PAESKey192
@$xp$16Elaes@PAESKey256
@$xp$16Elaes@TAESBuffer
@$xp$16Elaes@TAESKey128
@$xp$16Elaes@TAESKey192
@$xp$16Elaes@TAESKey256
@$xp$24Elaes@PAESExpandedKey128
@$xp$24Elaes@PAESExpandedKey192
@$xp$24Elaes@PAESExpandedKey256
@$xp$24Elaes@TAESExpandedKey128
@$xp$24Elaes@TAESExpandedKey192
@$xp$24Elaes@TAESExpandedKey256
@$xp$7TKN22WB
@$xp$9TKNSeeImg
@@Cpp1@Finalize
@@Cpp1@Initialize
@@Unit_formfindweb@Finalize
@@Unit_formfindweb@Initialize
@@Unit_formhlink@Finalize
@@Unit_formhlink@Initialize
@@Unit_formseeshuqian@Finalize
@@Unit_formseeshuqian@Initialize
@@Unit_formsetpage@Finalize
@@Unit_formsetpage@Initialize
@@Unit_fromseeimg@Finalize
@@Unit_fromseeimg@Initialize
@@Unitmain1@Finalize
@@Unitmain1@Initialize
@Aes@DecryptFile$qqr20System@UnicodeStringt127System@%AnsiStringT$us$i0$%11Aes@TKeyBit
@Aes@DecryptStream$qqrp22System@Classes@TStream27System@%AnsiStringT$us$i0$%rp22System@Classes@TStream11Aes@TKeyBit
@Aes@DecryptString$qqr27System@%AnsiStringT$us$i0$%t111Aes@TKeyBit
@Aes@EncryptFile$qqr20System@UnicodeStringt127System@%AnsiStringT$us$i0$%11Aes@TKeyBit
@Aes@EncryptStream$qqrp22System@Classes@TStream27System@%AnsiStringT$us$i0$%rp22System@Classes@TStream11Aes@TKeyBit
@Aes@EncryptString$qqr27System@%AnsiStringT$us$i0$%t111Aes@TKeyBit
@Aes@Finalization$qqrv
@Aes@HexToStr$qqrx27System@%AnsiStringT$us$i0$%
@Aes@StrToHex$qqrx27System@%AnsiStringT$us$i0$%
@Aes@initialization$qqrv
@Elaes@DecryptAES$qqrrx29System@%StaticArray$uci$i16$%rx29System@%StaticArray$uii$i44$%r29System@%StaticArray$uci$i16$%
@Elaes@DecryptAES$qqrrx29System@%StaticArray$uci$i16$%rx29System@%StaticArray$uii$i54$%r29System@%StaticArray$uci$i16$%
@Elaes@DecryptAES$qqrrx29System@%StaticArray$uci$i16$%rx29System@%StaticArray$uii$i64$%r29System@%StaticArray$uci$i16$%
@Elaes@DecryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i16$%t3t1
@Elaes@DecryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i24$%rx29System@%StaticArray$uci$i16$%t1
@Elaes@DecryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i32$%rx29System@%StaticArray$uci$i16$%t1
@Elaes@DecryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i44$%rx29System@%StaticArray$uci$i16$%t1
@Elaes@DecryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i54$%rx29System@%StaticArray$uci$i16$%t1
@Elaes@DecryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i64$%rx29System@%StaticArray$uci$i16$%t1
@Elaes@DecryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i16$%t1
@Elaes@DecryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i24$%t1
@Elaes@DecryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i32$%t1
@Elaes@DecryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i44$%t1
@Elaes@DecryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i54$%t1
@Elaes@DecryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i64$%t1
@Elaes@EAESError@
@Elaes@EncryptAES$qqrrx29System@%StaticArray$uci$i16$%rx29System@%StaticArray$uii$i44$%r29System@%StaticArray$uci$i16$%
@Elaes@EncryptAES$qqrrx29System@%StaticArray$uci$i16$%rx29System@%StaticArray$uii$i54$%r29System@%StaticArray$uci$i16$%
@Elaes@EncryptAES$qqrrx29System@%StaticArray$uci$i16$%rx29System@%StaticArray$uii$i64$%r29System@%StaticArray$uci$i16$%
@Elaes@EncryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i16$%t3t1
@Elaes@EncryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i24$%rx29System@%StaticArray$uci$i16$%t1
@Elaes@EncryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i32$%rx29System@%StaticArray$uci$i16$%t1
@Elaes@EncryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i44$%rx29System@%StaticArray$uci$i16$%t1
@Elaes@EncryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i54$%rx29System@%StaticArray$uci$i16$%t1
@Elaes@EncryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i64$%rx29System@%StaticArray$uci$i16$%t1
@Elaes@EncryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i16$%t1
@Elaes@EncryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i24$%t1
@Elaes@EncryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i32$%t1
@Elaes@EncryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i44$%t1
@Elaes@EncryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i54$%t1
@Elaes@EncryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i64$%t1
@Elaes@ExpandAESKeyForDecryption$qqrr29System@%StaticArray$uii$i44$%
@Elaes@ExpandAESKeyForDecryption$qqrr29System@%StaticArray$uii$i54$%
@Elaes@ExpandAESKeyForDecryption$qqrr29System@%StaticArray$uii$i64$%
@Elaes@ExpandAESKeyForDecryption$qqrrx29System@%StaticArray$uci$i16$%r29System@%StaticArray$uii$i44$%
@Elaes@ExpandAESKeyForDecryption$qqrrx29System@%StaticArray$uci$i24$%r29System@%StaticArray$uii$i54$%
@Elaes@ExpandAESKeyForDecryption$qqrrx29System@%StaticArray$uci$i32$%r29System@%StaticArray$uii$i64$%
@Elaes@ExpandAESKeyForEncryption$qqrrx29System@%StaticArray$uci$i16$%r29System@%StaticArray$uii$i44$%
@Elaes@ExpandAESKeyForEncryption$qqrrx29System@%StaticArray$uci$i24$%r29System@%StaticArray$uii$i54$%
@Elaes@ExpandAESKeyForEncryption$qqrrx29System@%StaticArray$uci$i32$%r29System@%StaticArray$uii$i64$%
@Elaes@Finalization$qqrv
@Elaes@_SInvalidInBufSize
@Elaes@_SReadError
@Elaes@_SWriteError
@Elaes@initialization$qqrv
TMethodImplementationIntercept
_KN22WB
_KNSeeImg
_KN_FormFindWeb
_KN_FormHLink
_KN_FormSetPage
_KN_FormShuQian
___CPPdebugHook
___setRaiseListFuncAddr
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
@$xp$11Aes@TKeyBit
@$xp$14Elaes@PInteger
@$xp$15Elaes@EAESError
@$xp$16Elaes@PAESBuffer
@$xp$16Elaes@PAESKey128
@$xp$16Elaes@PAESKey192
@$xp$16Elaes@PAESKey256
@$xp$16Elaes@TAESBuffer
@$xp$16Elaes@TAESKey128
@$xp$16Elaes@TAESKey192
@$xp$16Elaes@TAESKey256
@$xp$17TKN2022ExeBook32x
@$xp$24Elaes@PAESExpandedKey128
@$xp$24Elaes@PAESExpandedKey192
@$xp$24Elaes@PAESExpandedKey256
@$xp$24Elaes@TAESExpandedKey128
@$xp$24Elaes@TAESExpandedKey192
@$xp$24Elaes@TAESExpandedKey256
@@Unitmain@Finalize
@@Unitmain@Initialize
@Aes@DecryptFile$qqr20System@UnicodeStringt127System@%AnsiStringT$us$i0$%11Aes@TKeyBit
@Aes@DecryptStream$qqrp22System@Classes@TStream27System@%AnsiStringT$us$i0$%rp22System@Classes@TStream11Aes@TKeyBit
@Aes@DecryptString$qqr27System@%AnsiStringT$us$i0$%t111Aes@TKeyBit
@Aes@EncryptFile$qqr20System@UnicodeStringt127System@%AnsiStringT$us$i0$%11Aes@TKeyBit
@Aes@EncryptStream$qqrp22System@Classes@TStream27System@%AnsiStringT$us$i0$%rp22System@Classes@TStream11Aes@TKeyBit
@Aes@EncryptString$qqr27System@%AnsiStringT$us$i0$%t111Aes@TKeyBit
@Aes@Finalization$qqrv
@Aes@HexToStr$qqrx27System@%AnsiStringT$us$i0$%
@Aes@StrToHex$qqrx27System@%AnsiStringT$us$i0$%
@Aes@initialization$qqrv
@Elaes@DecryptAES$qqrrx29System@%StaticArray$uci$i16$%rx29System@%StaticArray$uii$i44$%r29System@%StaticArray$uci$i16$%
@Elaes@DecryptAES$qqrrx29System@%StaticArray$uci$i16$%rx29System@%StaticArray$uii$i54$%r29System@%StaticArray$uci$i16$%
@Elaes@DecryptAES$qqrrx29System@%StaticArray$uci$i16$%rx29System@%StaticArray$uii$i64$%r29System@%StaticArray$uci$i16$%
@Elaes@DecryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i16$%t3t1
@Elaes@DecryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i24$%rx29System@%StaticArray$uci$i16$%t1
@Elaes@DecryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i32$%rx29System@%StaticArray$uci$i16$%t1
@Elaes@DecryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i44$%rx29System@%StaticArray$uci$i16$%t1
@Elaes@DecryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i54$%rx29System@%StaticArray$uci$i16$%t1
@Elaes@DecryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i64$%rx29System@%StaticArray$uci$i16$%t1
@Elaes@DecryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i16$%t1
@Elaes@DecryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i24$%t1
@Elaes@DecryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i32$%t1
@Elaes@DecryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i44$%t1
@Elaes@DecryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i54$%t1
@Elaes@DecryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i64$%t1
@Elaes@EAESError@
@Elaes@EncryptAES$qqrrx29System@%StaticArray$uci$i16$%rx29System@%StaticArray$uii$i44$%r29System@%StaticArray$uci$i16$%
@Elaes@EncryptAES$qqrrx29System@%StaticArray$uci$i16$%rx29System@%StaticArray$uii$i54$%r29System@%StaticArray$uci$i16$%
@Elaes@EncryptAES$qqrrx29System@%StaticArray$uci$i16$%rx29System@%StaticArray$uii$i64$%r29System@%StaticArray$uci$i16$%
@Elaes@EncryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i16$%t3t1
@Elaes@EncryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i24$%rx29System@%StaticArray$uci$i16$%t1
@Elaes@EncryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i32$%rx29System@%StaticArray$uci$i16$%t1
@Elaes@EncryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i44$%rx29System@%StaticArray$uci$i16$%t1
@Elaes@EncryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i54$%rx29System@%StaticArray$uci$i16$%t1
@Elaes@EncryptAESStreamCBC$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i64$%rx29System@%StaticArray$uci$i16$%t1
@Elaes@EncryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i16$%t1
@Elaes@EncryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i24$%t1
@Elaes@EncryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uci$i32$%t1
@Elaes@EncryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i44$%t1
@Elaes@EncryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i54$%t1
@Elaes@EncryptAESStreamECB$qqrp22System@Classes@TStreamuirx29System@%StaticArray$uii$i64$%t1
@Elaes@ExpandAESKeyForDecryption$qqrr29System@%StaticArray$uii$i44$%
@Elaes@ExpandAESKeyForDecryption$qqrr29System@%StaticArray$uii$i54$%
@Elaes@ExpandAESKeyForDecryption$qqrr29System@%StaticArray$uii$i64$%
@Elaes@ExpandAESKeyForDecryption$qqrrx29System@%StaticArray$uci$i16$%r29System@%StaticArray$uii$i44$%
@Elaes@ExpandAESKeyForDecryption$qqrrx29System@%StaticArray$uci$i24$%r29System@%StaticArray$uii$i54$%
@Elaes@ExpandAESKeyForDecryption$qqrrx29System@%StaticArray$uci$i32$%r29System@%StaticArray$uii$i64$%
@Elaes@ExpandAESKeyForEncryption$qqrrx29System@%StaticArray$uci$i16$%r29System@%StaticArray$uii$i44$%
@Elaes@ExpandAESKeyForEncryption$qqrrx29System@%StaticArray$uci$i24$%r29System@%StaticArray$uii$i54$%
@Elaes@ExpandAESKeyForEncryption$qqrrx29System@%StaticArray$uci$i32$%r29System@%StaticArray$uii$i64$%
@Elaes@Finalization$qqrv
@Elaes@_SInvalidInBufSize
@Elaes@_SReadError
@Elaes@_SWriteError
@Elaes@initialization$qqrv
TMethodImplementationIntercept
_KN2022ExeBook32x
___CPPdebugHook
___setRaiseListFuncAddr
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
RegCloseKey
GetFileVersionInfoA
ClosePrinter
ImageList_Add
ChooseColorA
BitBlt
SHBrowseForFolderA
ActivateKeyboardLayout
timeGetTime
ImmGetCompositionStringA
CLSIDFromProgID
GetErrorInfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
RegCloseKey
GetFileVersionInfoA
ImageList_Add
BitBlt
DragAcceptFiles
ActivateKeyboardLayout
CLSIDFromString
GetActiveObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
RegCloseKey
SHGetMalloc
CharNextA
CoCreateInstance
GetErrorInfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
RegCloseKey
GetFileVersionInfoA
ImageList_Add
ChooseColorA
BitBlt
ShellExecuteA
ActivateKeyboardLayout
CoCreateInstance
GetActiveObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
GetHGlobalFromStream
CoInitialize
CoCreateInstance
CreateStreamOnHGlobal
SHCreateStreamOnFileA
LoadLibraryExW
SetEndOfFile
HeapSize
CreateFileW
FlushFileBuffers
GetProcessHeap
QueryPerformanceCounter
QueryPerformanceFrequency
GlobalUnlock
GlobalLock
GetStdHandle
WriteFile
GlobalSize
GetConsoleMode
SetConsoleMode
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
InitializeConditionVariable
WakeConditionVariable
SleepConditionVariableCS
WaitForSingleObjectEx
SetThreadPriority
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
GetStringTypeW
RtlUnwind
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
WriteConsoleW
RaiseException
ReadFile
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetModuleFileNameW
ExitProcess
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
CompareStringW
LCMapStringW
GetFileType
GetFileSizeEx
SetFilePointerEx
GetConsoleCP
ReadConsoleW
SetStdHandle
HeapReAlloc
DecodePointer
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
RegCloseKey
WNetAddConnection2A
GetFileVersionInfoA
ImageList_Add
BitBlt
SHBrowseForFolderA
ActivateKeyboardLayout
CoCreateInstance
GetActiveObject
FtpCreateDirectoryA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
CloseHandle
CreateFileA
CreateFileMappingA
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStrings
GetFileAttributesA
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetUserDefaultLCID
GetVersion
GetVersionExA
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByteEx
IsDebuggerPresent
IsValidLocale
LCMapStringA
LeaveCriticalSection
LoadLibraryA
MapViewOfFile
MultiByteToWideChar
OpenFileMappingA
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
SetLastError
SetThreadLocale
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteFile
EnumThreadWindows
MessageBoxA
wsprintfA
DBXBase_Close
DBXBase_GetErrorMessage
DBXBase_GetErrorMessageLength
DBXCommand_CreateParameterRow
DBXCommand_Execute
DBXCommand_ExecuteImmediate
DBXCommand_GetNextReader
DBXCommand_GetParameterCount
DBXCommand_GetParameterType
DBXCommand_GetRowsAffected
DBXCommand_Prepare
DBXCommand_SetMaxBlobSize
DBXCommand_SetRowSetSize
DBXConnection_BeginTransaction
DBXConnection_Commit
DBXConnection_Connect
DBXConnection_CreateCommand
DBXConnection_Disconnect
DBXConnection_GetIsolation
DBXConnection_GetVendorProperty
DBXConnection_Rollback
DBXConnection_SetCallbackEvent
DBXDriver_CreateConnection
DBXDriver_GetVersion
DBXLoader_GetDriver
DBXParameterRow_SetParameterType
DBXReader_GetColumnCount
DBXReader_GetColumnMetadata
DBXReader_Next
DBXRow_GetBcd
DBXRow_GetBoolean
DBXRow_GetByteLength
DBXRow_GetBytes
DBXRow_GetDate
DBXRow_GetDouble
DBXRow_GetFixedBytes
DBXRow_GetInt16
DBXRow_GetInt32
DBXRow_GetInt64
DBXRow_GetInt8
DBXRow_GetObjectTypeName
DBXRow_GetSingle
DBXRow_GetString
DBXRow_GetTime
DBXRow_GetTimeStamp
DBXRow_GetTimeStampOffset
DBXRow_GetUInt8
DBXRow_GetWideString
DBXWritableRow_SetBcd
DBXWritableRow_SetBoolean
DBXWritableRow_SetBytes
DBXWritableRow_SetDate
DBXWritableRow_SetDouble
DBXWritableRow_SetInt16
DBXWritableRow_SetInt32
DBXWritableRow_SetInt64
DBXWritableRow_SetInt8
DBXWritableRow_SetNull
DBXWritableRow_SetSingle
DBXWritableRow_SetString
DBXWritableRow_SetTime
DBXWritableRow_SetTimeStamp
DBXWritableRow_SetTimeStampOffset
DBXWritableRow_SetUInt8
DBXWritableRow_SetWideString
___CPPdebugHook
getSQLDriverMYSQL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
G:\mysql-5.1.48-winbuild\mysql-community-nt-5.1.48-build\libmysql\RelWithDebInfo\libmysql.pdb
GetLastError
UnmapViewOfFile
WaitForSingleObject
SetEvent
MapViewOfFile
OpenFileMappingA
OpenEventA
GetSystemDirectoryA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetWindowsDirectoryA
Sleep
DeleteCriticalSection
InitializeCriticalSection
InterlockedIncrement
GetTempFileNameA
GetTempPathA
GetFileAttributesExA
SetEndOfFile
SetFilePointer
DeleteFileA
MoveFileA
CreateFileA
QueryPerformanceCounter
GetSystemTimeAsFileTime
QueryPerformanceFrequency
GetFileAttributesA
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
CreateEventA
ResetEvent
WaitForMultipleObjects
TryEnterCriticalSection
InterlockedCompareExchange
SetThreadPriority
GetOverlappedResult
CancelIo
ReadFile
WriteFile
DisconnectNamedPipe
FindClose
FindNextFileA
FindFirstFileA
GetCurrentThreadId
WaitNamedPipeA
SetNamedPipeHandleState
CloseHandle
GetLocaleInfoA
EnterCriticalSection
GetTickCount
LeaveCriticalSection
GetConsoleOutputCP
WriteConsoleA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoW
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetEnvironmentVariableW
LoadLibraryW
ExitProcess
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
SetConsoleCtrlHandler
SetStdHandle
GetFileType
WideCharToMultiByte
GetTimeZoneInformation
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetDriveTypeA
HeapAlloc
HeapFree
HeapReAlloc
ExitThread
ResumeThread
CreateThread
FlushFileBuffers
WriteConsoleW
GetStdHandle
GetModuleFileNameW
GetCommandLineA
GetVersionExA
GetProcessHeap
FatalAppExitA
SetLastError
InterlockedDecrement
GetCurrentThread
FreeLibrary
InterlockedExchange
LoadLibraryA
SetHandleCount
GetStartupInfoA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
MultiByteToWideChar
GetConsoleCP
GetFullPathNameA
GetCurrentDirectoryA
SetCurrentDirectoryA
VirtualFree
VirtualAlloc
HeapDestroy
HeapCreate
HeapSize
RaiseException
CryptReleaseContext
CryptAcquireContextA
RegOpenKeyExA
RegEnumValueA
RegCloseKey
CryptGenRandom
getpeername
shutdown
closesocket
setsockopt
send
recv
inet_ntoa
select
__WSAFDIsSet
inet_addr
WSAStartup
WSACleanup
gethostbyname
getservbyname
ntohs
socket
WSAGetLastError
htons
ioctlsocket
connect
WSASetLastError
_dig_vec_lower
_dig_vec_upper
bmove_upp
client_errors
delete_dynamic
free_defaults
get_defaults_options
getopt_compare_strings
getopt_ull_limit_value
handle_options
init_dynamic_array
insert_dynamic
int2str
is_prefix
list_add
list_delete
load_defaults
modify_defaults_file
my_end
my_getopt_print_errors
my_init
my_malloc
my_memdup
my_no_flags_free
my_path
my_print_help
my_print_variables
my_realloc
my_strdup
myodbc_remove_escape
mysql_affected_rows
mysql_autocommit
mysql_change_user
mysql_character_set_name
mysql_close
mysql_commit
mysql_data_seek
mysql_debug
mysql_disable_reads_from_master
mysql_disable_rpl_parse
mysql_dump_debug_info
mysql_embedded
mysql_enable_reads_from_master
mysql_enable_rpl_parse
mysql_eof
mysql_errno
mysql_error
mysql_escape_string
mysql_fetch_field
mysql_fetch_field_direct
mysql_fetch_fields
mysql_fetch_lengths
mysql_fetch_row
mysql_field_count
mysql_field_seek
mysql_field_tell
mysql_free_result
mysql_get_character_set_info
mysql_get_client_info
mysql_get_client_version
mysql_get_host_info
mysql_get_parameters
mysql_get_proto_info
mysql_get_server_info
mysql_get_server_version
mysql_get_ssl_cipher
mysql_hex_string
mysql_info
mysql_init
mysql_insert_id
mysql_kill
mysql_list_dbs
mysql_list_fields
mysql_list_processes
mysql_list_tables
mysql_master_query
mysql_more_results
mysql_next_result
mysql_num_fields
mysql_num_rows
mysql_options
mysql_ping
mysql_query
mysql_read_query_result
mysql_real_connect
mysql_real_escape_string
mysql_real_query
mysql_refresh
mysql_rollback
mysql_row_seek
mysql_row_tell
mysql_rpl_parse_enabled
mysql_rpl_probe
mysql_rpl_query_type
mysql_select_db
mysql_send_query
mysql_server_end
mysql_server_init
mysql_set_character_set
mysql_set_local_infile_default
mysql_set_local_infile_handler
mysql_set_server_option
mysql_shutdown
mysql_slave_query
mysql_sqlstate
mysql_ssl_set
mysql_stat
mysql_stmt_affected_rows
mysql_stmt_attr_get
mysql_stmt_attr_set
mysql_stmt_bind_param
mysql_stmt_bind_result
mysql_stmt_close
mysql_stmt_data_seek
mysql_stmt_errno
mysql_stmt_error
mysql_stmt_execute
mysql_stmt_fetch
mysql_stmt_fetch_column
mysql_stmt_field_count
mysql_stmt_free_result
mysql_stmt_init
mysql_stmt_insert_id
mysql_stmt_num_rows
mysql_stmt_param_count
mysql_stmt_param_metadata
mysql_stmt_prepare
mysql_stmt_reset
mysql_stmt_result_metadata
mysql_stmt_row_seek
mysql_stmt_row_tell
mysql_stmt_send_long_data
mysql_stmt_sqlstate
mysql_stmt_store_result
mysql_store_result
mysql_thread_end
mysql_thread_id
mysql_thread_init
mysql_thread_safe
mysql_use_result
mysql_warning_count
set_dynamic
strcend
strcont
strdup_root
strfill
strinstr
strmake
strmov
strxmov
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ