BcLib.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5ab47c903fb167684cf003e08e2c17f0_NeikiAnalytics.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5ab47c903fb167684cf003e08e2c17f0_NeikiAnalytics.dll
Resource
win10v2004-20240426-en
General
-
Target
5ab47c903fb167684cf003e08e2c17f0_NeikiAnalytics
-
Size
1.5MB
-
MD5
5ab47c903fb167684cf003e08e2c17f0
-
SHA1
24ab35237297840223c821f140b7dcf6f1f35ff0
-
SHA256
0b4b38fa2e78d86d45d45f50e3a366f6fde719fff14c219dc684dcaa4f26cf7b
-
SHA512
4ea21f955160ec3a265acae1ee4458c0721598364e2b5eceeb4d4e2ec8af6d5d819334f32818c9d3053f27e5e2f59018785c3c63d2e4508f0a65995e46db2313
-
SSDEEP
24576:IXtlW5bvtPYjg8x4TFtevAUDW6KjGVMLI0Okk7t0x:IX7W5LxYjJx4Ti9DZVMLIxI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ab47c903fb167684cf003e08e2c17f0_NeikiAnalytics
Files
-
5ab47c903fb167684cf003e08e2c17f0_NeikiAnalytics.dll windows:6 windows x86 arch:x86
994acc6813533cda7904ddeb8b05da5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL
PDB Paths
Imports
mpr
WNetGetConnectionW
WNetGetConnectionA
shlwapi
ord1
icuuc57
u_strncat_57
u_strncmp_57
u_strcasecmp_57
u_memmove_57
ucnv_toUChars_57
u_strToUTF8_57
u_strToUpper_57
u_strncasecmp_57
u_strcat_57
u_tolower_57
ucnv_fromUChars_57
u_strcmp_57
u_strncpy_57
u_toupper_57
u_memset_57
u_strFromUTF8_57
u_strToLower_57
u_strstr_57
u_memcpy_57
u_strFindLast_57
ucnv_close_57
ucnv_open_57
u_setDataDirectory_57
ucnv_safeClone_57
udata_setFileAccess_57
u_strlen_57
ucnv_openPackage_57
u_init_57
u_strFindFirst_57
icuio57
u_fputs_57
u_vfscanf_u_57
u_fgetc_57
u_fclose_57
u_vsprintf_57
u_sscanf_57
u_file_read_57
u_fgets_57
u_fflush_57
u_vfprintf_57
u_fsetcodepage_57
u_fsetlocale_57
u_fputc_57
u_fgetcodepage_57
u_fgetlocale_57
u_file_write_57
u_vfprintf_u_57
u_vfscanf_57
u_finit_57
u_frewind_57
kernel32
DecodePointer
IsProcessorFeaturePresent
RaiseException
InterlockedExchange
LoadLibraryExA
OutputDebugStringW
GetPrivateProfileStringW
QueryPerformanceCounter
EncodePointer
FileTimeToLocalFileTime
FindNextFileA
FindClose
FindFirstFileA
FileTimeToSystemTime
GetCurrentProcessId
GetVersionExA
ProcessIdToSessionId
GetComputerNameExW
GetEnvironmentVariableA
GetComputerNameExA
GetModuleHandleW
GetCurrentProcess
GetEnvironmentVariableW
lstrlenA
ReleaseMutex
OpenFileMappingW
CreateFileMappingW
OpenMutexW
UnmapViewOfFile
MapViewOfFile
CreateMutexW
GetExitCodeThread
GetLastError
GetHandleInformation
TerminateProcess
CreateProcessA
CreateThread
GetCurrentThreadId
TerminateThread
InterlockedDecrement
InterlockedIncrement
QueryPerformanceFrequency
GetCurrentDirectoryW
GetPrivateProfileIntW
GetUserDefaultLCID
GetACP
GetCommandLineW
GetCommandLineA
LocalFree
FreeLibrary
GetProcAddress
SearchPathA
LoadLibraryA
GetModuleHandleA
WaitForSingleObject
SetEvent
Sleep
CreateEventA
ResetEvent
WaitForMultipleObjects
CloseHandle
GetModuleFileNameA
GetCurrentDirectoryA
OutputDebugStringA
SystemTimeToFileTime
GetSystemTimeAsFileTime
TzSpecificLocalTimeToSystemTime
InitializeCriticalSection
GetTimeZoneInformation
DeleteCriticalSection
WideCharToMultiByte
MultiByteToWideChar
GetTimeZoneInformationForYear
SystemTimeToTzSpecificLocalTime
CreateDirectoryA
GetOEMCP
DisableThreadLibraryCalls
IsDebuggerPresent
LeaveCriticalSection
EnterCriticalSection
SearchPathW
GetModuleFileNameW
user32
CharToOemBuffA
MessageBoxA
GetKeyState
AttachThreadInput
GetWindowThreadProcessId
OemToCharBuffA
PostMessageA
EnumWindows
GetUserObjectInformationA
GetProcessWindowStation
GetSystemMetrics
LoadStringW
LoadStringA
advapi32
RegOpenKeyA
RegCloseKey
GetUserNameW
LookupAccountNameA
RegQueryValueExW
RegOpenKeyExA
RegOpenKeyExW
GetUserNameA
RegEnumKeyExW
RegQueryValueExA
shell32
CommandLineToArgvW
ole32
CLSIDFromProgID
odbc32
ord31
ord2
ord75
msvcp110
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
??0id@locale@std@@QAE@I@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z
?_Xbad_function_call@std@@YAXXZ
msvcr110
__CppXcptFilter
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
??1type_info@@UAE@XZ
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
?terminate@@YAXXZ
_wfindnext64i32
_findclose
_wfindfirst64i32
strrchr
malloc
free
strncat
wcscpy_s
_heapwalk
_wcsnicmp
wcsncpy_s
swprintf_s
iswdigit
_wfullpath
_wfopen
_strupr_l
_vscprintf
strcspn
_amsg_exit
_strlwr_l
_strnicmp_l
_create_locale
strncmp
vsprintf
_snprintf
_ltoa
atof
setlocale
atol
_fcvt_s
strcmp
wcscpy
wcscat_s
_wsplitpath
_wgetenv_s
_wmakepath
llabs
_i64toa_s
modf
_wtoi
localeconv
strcat
_fullpath
fclose
fseek
ftell
fwrite
fread
_malloc_crt
_initterm
_initterm_e
_except_handler4_common
__clean_type_info_names_internal
_CxxThrowException
__CxxFrameHandler3
isalpha
strcpy
memcpy
memmove
strlen
atoi
memset
strcpy_s
isdigit
_purecall
sqrt
pow
rand
srand
_time64
sprintf
memcmp
_strlwr
_strupr
_i64toa
toupper
strtoul
isxdigit
__RTDynamicCast
strncpy
printf
_kbhit
_getch
exit
_makepath
_splitpath
_mktime64
strstr
_ftime32
_ftime64
_mktime32
_localtime64
_itoa
_atoi64
wcslen
strchr
_gmtime64
_mkgmtime64
fflush
fopen
symemdll
SyMemFree
SyMemMalloc
Exports
Exports
??0?$SearchParBase@VSearchPar@@@@QAE@PADK@Z
??0?$SearchParBase@VSearchPar@@@@QAE@PAGK@Z
??0?$SearchParBase@VSearchPar@@@@QAE@PAVBcDataType@@@Z
??0?$SearchParBase@VSearchPar@@@@QAE@PAVSearchParBaseData@@@Z
??0?$StringParBase@VSearchPar@@@@QAE@PADK@Z
??0?$StringParBase@VSearchPar@@@@QAE@PAGK@Z
??0?$StringParBase@VSearchPar@@@@QAE@PAVBcDataType@@@Z
??0?$StringParBase@VSearchPar@@@@QAE@PAVStringParBaseData@@@Z
??0?$StringParBase@VStringPar@@@@QAE@PADK@Z
??0?$StringParBase@VStringPar@@@@QAE@PAGK@Z
??0?$StringParBase@VStringPar@@@@QAE@PAVBcDataType@@@Z
??0?$StringParBase@VStringPar@@@@QAE@PAVStringParBaseData@@@Z
??0BcAuthenticator@@QAE@XZ
??0BcBuffer@@QAE@$$QAV0@@Z
??0BcBuffer@@QAE@ABV0@@Z
??0BcBuffer@@QAE@ABVBcString@@@Z
??0BcBuffer@@QAE@DK@Z
??0BcBuffer@@QAE@K@Z
??0BcBuffer@@QAE@QAD@Z
??0BcBuffer@@QAE@QADK@Z
??0BcBuffer@@QAE@XZ
??0BcCheckSum@@QAE@ABV0@@Z
??0BcCheckSum@@QAE@XZ
??0BcClassInfo@@QAE@ABV0@@Z
??0BcClassInfo@@QAE@XZ
??0BcClassInfoIn@@QAE@XZ
??0BcClassInfoList@@QAE@XZ
??0BcCmdLineHandler@@AAE@ABV0@@Z
??0BcCmdLineHandler@@AAE@XZ
??0BcCode@@QAE@ABV0@@Z
??0BcCode@@QAE@XZ
??0BcCondition@@QAE@ABV0@@Z
??0BcCondition@@QAE@PAX@Z
??0BcCondition@@QAE@XZ
??0BcConverterCache@@AAE@XZ
??0BcConverterCache@@QAE@ABV0@@Z
??0BcCultureInfo@@QAE@ABV0@@Z
??0BcCultureInfo@@QAE@XZ
??0BcCurrentDateTime@@AAE@XZ
??0BcDataType@@QAE@ABV0@@Z
??0BcDataType@@QAE@XZ
??0BcDate@@QAE@$$QAV0@@Z
??0BcDate@@QAE@ABV0@@Z
??0BcDate@@QAE@GGG@Z
??0BcDate@@QAE@XZ
??0BcDateCultureInfo@@QAE@ABV0@@Z
??0BcDateCultureInfo@@QAE@XZ
??0BcDateFormatInfo@@QAE@ABV0@@Z
??0BcDateFormatInfo@@QAE@XZ
??0BcDateTime@@QAE@ABV0@@Z
??0BcDateTime@@QAE@ABVBcDate@@@Z
??0BcDateTime@@QAE@ABVBcDate@@ABVBcTime@@@Z
??0BcDateTime@@QAE@ABVBcTime@@@Z
??0BcDateTime@@QAE@GGGGGGG@Z
??0BcDateTime@@QAE@QAD@Z
??0BcDateTime@@QAE@XZ
??0BcDynIf@@QAE@ABV0@@Z
??0BcDynIf@@QAE@ABVBcIf@@@Z
??0BcDynIf@@QAE@XZ
??0BcDynObject@@QAE@ABV0@@Z
??0BcDynObject@@QAE@XZ
??0BcException@@QAE@ABV0@@Z
??0BcException@@QAE@XZ
??0BcExceptionHandler@@QAE@ABV0@@Z
??0BcExceptionHandler@@QAE@XZ
??0BcFile@@QAE@ABV0@@Z
??0BcFile@@QAE@XZ
??0BcFileName@@QAE@ABV0@@Z
??0BcFileName@@QAE@QAD@Z
??0BcFileName@@QAE@XZ
??0BcFloat@@QAE@$$QAV0@@Z
??0BcFloat@@QAE@ABV0@@Z
??0BcFloat@@QAE@ABVBcInt@@@Z
??0BcFloat@@QAE@H@Z
??0BcFloat@@QAE@K@Z
??0BcFloat@@QAE@N@Z
??0BcFloat@@QAE@QAD@Z
??0BcFloat@@QAE@XZ
??0BcFloat@@QAE@_J@Z
??0BcFormatInfo@@QAE@ABV0@@Z
??0BcFormatInfo@@QAE@XZ
??0BcFuncInfo@@QAE@ABV0@@Z
??0BcFuncInfo@@QAE@XZ
??0BcFuncInfoList@@QAE@XZ
??0BcGetFuncIn@@QAE@ABV0@@Z
??0BcGetFuncIn@@QAE@XZ
??0BcGetFuncOut@@QAE@ABV0@@Z
??0BcGetFuncOut@@QAE@XZ
??0BcIf@@QAE@ABV0@@Z
??0BcIf@@QAE@XZ
??0BcIfParam@@QAE@ABV0@@Z
??0BcIfParam@@QAE@XZ
??0BcIfParamList@@QAE@XZ
??0BcIfStore@@QAE@XZ
??0BcInt@@QAE@$$QAV0@@Z
??0BcInt@@QAE@ABV0@@Z
??0BcInt@@QAE@ABVBcFloat@@@Z
??0BcInt@@QAE@XZ
??0BcInt@@QAE@_J@Z
??0BcKeyIntInt@@QAE@$$QAV0@@Z
??0BcKeyIntInt@@QAE@ABV0@@Z
??0BcKeyIntInt@@QAE@XZ
??0BcKeyIntIntCfg@@QAE@ABV0@@Z
??0BcKeyIntIntCfg@@QAE@XZ
??0BcKeyboardState@@AAE@XZ
??0BcLock@@QAE@AAU_RTL_CRITICAL_SECTION@@@Z
??0BcLock@@QAE@ABV0@@Z
??0BcLock@@QAE@PAVBcMutex@@@Z
??0BcLogEntry@@AAE@$$QAV0@@Z
??0BcLogEntry@@AAE@PBGW4CsbLogLevel@@000H@Z
??0BcLogEntryData@@AAE@PBGW4CsbLogLevel@@000H@Z
??0BcLogEntryData@@QAE@ABV0@@Z
??0BcLogging@@AAE@XZ
??0BcLogging@@QAE@ABV0@@Z
??0BcMD5@@QAE@ABV0@@Z
??0BcMD5@@QAE@XZ
??0BcMemSave@@QAE@ABV0@@Z
??0BcMemSave@@QAE@XZ
??0BcMinIfSet@@QAE@ABV0@@Z
??0BcMinIfSet@@QAE@XZ
??0BcMutex@@QAE@_N@Z
??0BcNumCultureInfo@@QAE@ABV0@@Z
??0BcNumCultureInfo@@QAE@XZ
??0BcNumDataType@@QAE@ABV0@@Z
??0BcNumDataType@@QAE@XZ
??0BcNumFormatInfo@@QAE@ABV0@@Z
??0BcNumFormatInfo@@QAE@XZ
??0BcObject@@QAE@ABV0@@Z
??0BcObject@@QAE@XZ
??0BcProcess@@QAE@ABV0@@Z
??0BcProcess@@QAE@QAD0QAVClPosList@@@Z
??0BcProcess@@QAE@XZ
??0BcRef@@QAE@AAV0@@Z
??0BcRef@@QAE@AAVBcDataType@@@Z
??0BcRef@@QAE@XZ
??0BcRemoteInfo@@AAE@XZ
??0BcSharedMemory@@QAE@ABV0@@Z
??0BcSharedMemory@@QAE@ABVBcString@@K@Z
??0BcSharedMemory@@QAE@ABVBcUString@@K@Z
??0BcSharedMemory@@QAE@PBGK@Z
??0BcSharedMemory@@QAE@QADK@Z
??0BcSharedMemory@@QAE@XZ
??0BcString@@QAE@$$QAV0@@Z
??0BcString@@QAE@ABV0@@Z
??0BcString@@QAE@ABVBcBuffer@@@Z
??0BcString@@QAE@DK@Z
??0BcString@@QAE@PBD@Z
??0BcString@@QAE@PBDK@Z
??0BcString@@QAE@QAD@Z
??0BcString@@QAE@QADK@Z
??0BcString@@QAE@XZ
??0BcStringList@@QAE@$$QAV0@@Z
??0BcStringList@@QAE@ABV0@@Z
??0BcStringList@@QAE@XZ
??0BcTest@@QAE@ABV0@@Z
??0BcTest@@QAE@XZ
??0BcTextFormatInfo@@QAE@ABV0@@Z
??0BcTextFormatInfo@@QAE@XZ
??0BcTextKey@@QAE@ABV0@@Z
??0BcTextKey@@QAE@XZ
??0BcThread@@QAE@ABV0@@Z
??0BcThread@@QAE@XZ
??0BcTime@@QAE@$$QAV0@@Z
??0BcTime@@QAE@ABV0@@Z
??0BcTime@@QAE@GGGG@Z
??0BcTime@@QAE@XZ
??0BcTimeCultureInfo@@QAE@ABV0@@Z
??0BcTimeCultureInfo@@QAE@XZ
??0BcTimeFormatInfo@@QAE@ABV0@@Z
??0BcTimeFormatInfo@@QAE@XZ
??0BcTimeSpan@@QAE@ABV0@@Z
??0BcTimeSpan@@QAE@HHJJ_J@Z
??0BcTimeSpan@@QAE@XZ
??0BcTimeSpan@@QAE@_J@Z
??0BcTrace@@QAE@ABV0@@Z
??0BcTrace@@QAE@XZ
??0BcTransKey@@QAE@ABV0@@Z
??0BcTransKey@@QAE@XZ
??0BcUFile@@QAE@ABV0@@Z
??0BcUFile@@QAE@XZ
??0BcUFileName@@QAE@ABV0@@Z
??0BcUFileName@@QAE@PBG@Z
??0BcUFileName@@QAE@XZ
??0BcUString@@QAE@$$QAV0@@Z
??0BcUString@@QAE@ABV0@@Z
??0BcUString@@QAE@ABVBcBuffer@@@Z
??0BcUString@@QAE@GK@Z
??0BcUString@@QAE@PBG@Z
??0BcUString@@QAE@PBGK@Z
??0BcUString@@QAE@QAD@Z
??0BcUString@@QAE@XZ
??0BcUnlock@@QAE@ABV0@@Z
??0BcUnlock@@QAE@PAVBcMutex@@@Z
??0ClArray@@QAE@ABV0@@Z
??0ClArray@@QAE@K@Z
??0ClArray@@QAE@KD@Z
??0ClArray@@QAE@QADK@Z
??0ClDateStr@@QAE@PAE@Z
??0ClDateStr@@QAE@XZ
??0ClExtPic@@QAE@XZ
??0ClFfFn@@QAE@XZ
??0ClList@@QAE@ABV0@@Z
??0ClList@@QAE@XZ
??0ClMainProg@@QAE@ABV0@@Z
??0ClMainProg@@QAE@XZ
??0ClMap@@QAE@ABV0@@Z
??0ClMap@@QAE@XZ
??0ClPosList@@QAE@ABV0@@Z
??0ClPosList@@QAE@XZ
??0ClSortList@@QAE@ABV0@@Z
??0ClSortList@@QAE@XZ
??0ClSpMp@@QAE@XZ
??0ClSplitBuffer@@QAE@ABV0@@Z
??0ClSplitBuffer@@QAE@XZ
??0ClTime@@QAE@ABV0@@Z
??0ClTime@@QAE@XZ
??0ClUFfFn@@QAE@XZ
??0ClUSpMp@@QAE@XZ
??0ExecPar@@QAE@ABV0@@Z
??0ExecPar@@QAE@PAVBcIf@@@Z
??0IfEmpty@@QAE@ABV0@@Z
??0IfEmpty@@QAE@XZ
??0IfOnGetCalled@@QAE@ABV0@@Z
??0IfOnGetCalled@@QAE@XZ
??0SearchFilterBase@@IAE@W4SearchFilterRelationship@@@Z
??0SearchFilterBase@@QAE@ABV0@@Z
??0SearchFilterElement@@QAE@ABV0@@Z
??0SearchFilterElement@@QAE@W4SearchFilterRelationship@@W4SearchFilterOperator@@ABVBcString@@@Z
??0SearchFilterGroup@@QAE@ABV0@@Z
??0SearchFilterGroup@@QAE@W4SearchFilterRelationship@@@Z
??0SearchFilterParser@@QAE@ABV0@@Z
??0SearchFilterParser@@QAE@XZ
??0SearchPar@@QAE@PADK@Z
??0SearchPar@@QAE@PAGK@Z
??0SearchPar@@QAE@PAVBcDataType@@@Z
??0StringPar@@QAE@PADK@Z
??0StringPar@@QAE@PAGK@Z
??0StringPar@@QAE@PAVBcDataType@@@Z
??0odbcEnvContainer@@QAE@XZ
??1?$SearchParBase@VSearchPar@@@@UAE@XZ
??1?$StringParBase@VSearchPar@@@@UAE@XZ
??1?$StringParBase@VStringPar@@@@UAE@XZ
??1BcAuthenticator@@UAE@XZ
??1BcBuffer@@UAE@XZ
??1BcCheckSum@@UAE@XZ
??1BcClassInfo@@UAE@XZ
??1BcClassInfoIn@@QAE@XZ
??1BcClassInfoList@@QAE@XZ
??1BcCmdLineHandler@@UAE@XZ
??1BcCode@@UAE@XZ
??1BcCondition@@UAE@XZ
??1BcConverterCache@@EAE@XZ
??1BcCultureInfo@@UAE@XZ
??1BcCurrentDateTime@@EAE@XZ
??1BcDataType@@UAE@XZ
??1BcDate@@UAE@XZ
??1BcDateCultureInfo@@UAE@XZ
??1BcDateFormatInfo@@UAE@XZ
??1BcDateTime@@UAE@XZ
??1BcDynIf@@UAE@XZ
??1BcDynObject@@UAE@XZ
??1BcException@@UAE@XZ
??1BcExceptionHandler@@UAE@XZ
??1BcFile@@UAE@XZ
??1BcFileName@@UAE@XZ
??1BcFloat@@UAE@XZ
??1BcFormatInfo@@UAE@XZ
??1BcFuncInfo@@UAE@XZ
??1BcFuncInfoList@@QAE@XZ
??1BcGetFuncIn@@QAE@XZ
??1BcGetFuncOut@@QAE@XZ
??1BcIf@@UAE@XZ
??1BcIfParam@@QAE@XZ
??1BcIfParamList@@QAE@XZ
??1BcIfStore@@QAE@XZ
??1BcInt@@UAE@XZ
??1BcKeyIntInt@@UAE@XZ
??1BcKeyIntIntCfg@@UAE@XZ
??1BcKeyboardState@@EAE@XZ
??1BcLock@@UAE@XZ
??1BcLogEntry@@QAE@XZ
??1BcLogEntryData@@EAE@XZ
??1BcLogging@@EAE@XZ
??1BcMD5@@UAE@XZ
??1BcMemSave@@UAE@XZ
??1BcMinIfSet@@UAE@XZ
??1BcMutex@@UAE@XZ
??1BcNumCultureInfo@@UAE@XZ
??1BcNumDataType@@UAE@XZ
??1BcNumFormatInfo@@UAE@XZ
??1BcObject@@UAE@XZ
??1BcProcess@@UAE@XZ
??1BcRef@@UAE@XZ
??1BcRemoteInfo@@EAE@XZ
??1BcSharedMemory@@UAE@XZ
??1BcString@@UAE@XZ
??1BcStringList@@UAE@XZ
??1BcTest@@UAE@XZ
??1BcTextFormatInfo@@UAE@XZ
??1BcTextKey@@UAE@XZ
??1BcThread@@UAE@XZ
??1BcTime@@UAE@XZ
??1BcTimeCultureInfo@@UAE@XZ
??1BcTimeFormatInfo@@UAE@XZ
??1BcTimeSpan@@UAE@XZ
??1BcTrace@@UAE@XZ
??1BcTransKey@@UAE@XZ
??1BcUFile@@UAE@XZ
??1BcUFileName@@UAE@XZ
??1BcUString@@UAE@XZ
??1BcUnlock@@UAE@XZ
??1ClArray@@QAE@XZ
??1ClDateStr@@QAE@XZ
??1ClExtPic@@QAE@XZ
??1ClFfFn@@QAE@XZ
??1ClList@@UAE@XZ
??1ClMainProg@@UAE@XZ
??1ClMap@@UAE@XZ
??1ClPosList@@UAE@XZ
??1ClSortList@@UAE@XZ
??1ClSpMp@@QAE@XZ
??1ClSplitBuffer@@UAE@XZ
??1ClTime@@UAE@XZ
??1ClUFfFn@@QAE@XZ
??1ClUSpMp@@QAE@XZ
??1ExecPar@@UAE@XZ
??1IfEmpty@@UAE@XZ
??1IfOnGetCalled@@UAE@XZ
??1SearchFilterBase@@UAE@XZ
??1SearchFilterElement@@UAE@XZ
??1SearchFilterGroup@@UAE@XZ
??1SearchFilterParser@@UAE@XZ
??1SearchPar@@UAE@XZ
??1StringPar@@UAE@XZ
??1odbcEnvContainer@@QAE@XZ
??4?$SearchParBase@VSearchPar@@@@QAEAAV0@ABV0@@Z
??4?$StringParBase@VSearchPar@@@@QAEAAV0@ABV0@@Z
??4?$StringParBase@VStringPar@@@@QAEAAV0@ABV0@@Z
??4BcBuffer@@QAEAAV0@$$QAV0@@Z
??4BcBuffer@@QAEAAV0@ABV0@@Z
??4BcBuffer@@QAEAAV0@ABVBcRef@@@Z
??4BcBuffer@@QAEAAV0@ABVBcString@@@Z
??4BcBuffer@@QAEAAV0@ABVBcUString@@@Z
??4BcBuffer@@QAEAAV0@QAD@Z
??4BcBuffer@@QAEAAV0@QAE@Z
??4BcClassInfo@@QAEAAV0@ABV0@@Z
??4BcCmdLineHandler@@QAEAAV0@ABV0@@Z
??4BcCondition@@QAEAAV0@ABV0@@Z
??4BcConverterCache@@QAEAAV0@ABV0@@Z
??4BcDate@@QAEAAV0@$$QAV0@@Z
??4BcDate@@QAEAAV0@ABV0@@Z
??4BcDate@@QAEAAV0@ABVBcInt@@@Z
??4BcDate@@QAEAAV0@ABVBcRef@@@Z
??4BcDate@@QAEAAV0@QAD@Z
??4BcDate@@QAEAAV0@_J@Z
??4BcDateCultureInfo@@QAEAAV0@ABV0@@Z
??4BcDateFormatInfo@@QAEAAV0@ABV0@@Z
??4BcDateTime@@QAEAAV0@ABV0@@Z
??4BcDateTime@@QAEAAV0@ABVBcDate@@@Z
??4BcDateTime@@QAEAAV0@ABVBcTime@@@Z
??4BcDynIf@@QAEAAV0@ABV0@@Z
??4BcDynIf@@QAEAAV0@ABVBcIf@@@Z
??4BcException@@QAEAAV0@ABV0@@Z
??4BcExceptionHandler@@QAEAAV0@ABV0@@Z
??4BcFileName@@QAEAAV0@ABV0@@Z
??4BcFloat@@QAEAAV0@$$QAV0@@Z
??4BcFloat@@QAEAAV0@ABV0@@Z
??4BcFloat@@QAEAAV0@ABVBcInt@@@Z
??4BcFloat@@QAEAAV0@ABVBcRef@@@Z
??4BcFloat@@QAEAAV0@H@Z
??4BcFloat@@QAEAAV0@J@Z
??4BcFloat@@QAEAAV0@K@Z
??4BcFloat@@QAEAAV0@M@Z
??4BcFloat@@QAEAAV0@N@Z
??4BcFloat@@QAEAAV0@QAD@Z
??4BcFloat@@QAEAAV0@_J@Z
??4BcFuncInfo@@QAEAAV0@ABV0@@Z
??4BcGetFuncIn@@QAEAAV0@ABV0@@Z
??4BcGetFuncOut@@QAEAAV0@ABV0@@Z
??4BcIf@@QAEAAV0@ABV0@@Z
??4BcIfParam@@QAEAAV0@ABV0@@Z
??4BcIfStore@@QAEAAV0@ABV0@@Z
??4BcInt@@QAEAAV0@$$QAV0@@Z
??4BcInt@@QAEAAV0@ABV0@@Z
??4BcInt@@QAEAAV0@ABVBcFloat@@@Z
??4BcInt@@QAEAAV0@ABVBcRef@@@Z
??4BcInt@@QAEAAV0@H@Z
??4BcInt@@QAEAAV0@K@Z
??4BcInt@@QAEAAV0@M@Z
??4BcInt@@QAEAAV0@N@Z
??4BcInt@@QAEAAV0@QAD@Z
??4BcInt@@QAEAAV0@_J@Z
??4BcKeyIntInt@@QAEAAV0@$$QAV0@@Z
??4BcKeyIntInt@@QAEAAV0@ABV0@@Z
??4BcLock@@QAEAAV0@ABV0@@Z
??4BcLogEntry@@AAEAAV0@$$QAV0@@Z
??4BcLogWriter@@QAEAAV0@ABV0@@Z
??4BcLogging@@QAEAAV0@ABV0@@Z
??4BcMD5@@QAEAAV0@ABV0@@Z
??4BcNumCultureInfo@@QAEAAV0@ABV0@@Z
??4BcNumFormatInfo@@QAEAAV0@ABV0@@Z
??4BcProcess@@QAEAAV0@ABV0@@Z
??4BcRef@@QAEAAV0@ABV0@@Z
??4BcRef@@QAEAAV0@ABVBcDataType@@@Z
??4BcRef@@QAEAAV0@H@Z
??4BcRef@@QAEAAV0@K@Z
??4BcRef@@QAEAAV0@N@Z
??4BcRef@@QAEAAV0@QAD@Z
??4BcRef@@QAEAAV0@_J@Z
??4BcSharedMemory@@QAEAAV0@ABV0@@Z
??4BcString@@QAEAAV0@$$QAV0@@Z
??4BcString@@QAEAAV0@ABV0@@Z
??4BcString@@QAEAAV0@ABVBcBuffer@@@Z
??4BcString@@QAEAAV0@ABVBcRef@@@Z
??4BcString@@QAEAAV0@PBD@Z
??4BcString@@QAEAAV0@QAD@Z
??4BcString@@QAEAAV0@QAE@Z
??4BcStringList@@AAE?B_NABV0@@Z
??4BcStringList@@QAEAAV0@$$QAV0@@Z
??4BcTest@@QAEAAV0@ABV0@@Z
??4BcTextFormatInfo@@QAEAAV0@ABV0@@Z
??4BcTextKey@@QAEAAV0@ABV0@@Z
??4BcThread@@QAEAAV0@ABV0@@Z
??4BcTime@@QAEAAV0@$$QAV0@@Z
??4BcTime@@QAEAAV0@ABV0@@Z
??4BcTime@@QAEAAV0@ABVBcInt@@@Z
??4BcTime@@QAEAAV0@ABVBcRef@@@Z
??4BcTime@@QAEAAV0@QAD@Z
??4BcTime@@QAEAAV0@_J@Z
??4BcTimeCultureInfo@@QAEAAV0@ABV0@@Z
??4BcTimeFormatInfo@@QAEAAV0@ABV0@@Z
??4BcTimeSpan@@QAEAAV0@ABV0@@Z
??4BcTimeSpan@@QAEAAV0@_J@Z
??4BcTransKey@@QAEAAV0@ABV0@@Z
??4BcUFileName@@QAEAAV0@ABV0@@Z
??4BcUString@@QAEAAV0@$$QAV0@@Z
??4BcUString@@QAEAAV0@ABV0@@Z
??4BcUString@@QAEAAV0@ABVBcBuffer@@@Z
??4BcUString@@QAEAAV0@ABVBcRef@@@Z
??4BcUString@@QAEAAV0@PBG@Z
??4BcUnlock@@QAEAAV0@ABV0@@Z
??4BcUtils@@QAEAAV0@ABV0@@Z
??4ClArray@@QAEAAV0@ABV0@@Z
??4ClDateStr@@QAEXAAV0@@Z
??4ClExtPic@@QAEAAV0@ABV0@@Z
??4ClFfFn@@QAEAAV0@ABV0@@Z
??4ClList@@QAEAAV0@ABV0@@Z
??4ClMainProg@@QAEAAV0@ABV0@@Z
??4ClMap@@QAEAAV0@ABV0@@Z
??4ClPosList@@QAEAAV0@AAV0@@Z
??4ClSortList@@QAEAAV0@ABV0@@Z
??4ClSpMp@@QAEAAV0@ABV0@@Z
??4ClSplitBuffer@@QAEAAV0@ABV0@@Z
??4ClTime@@QAEAAV0@ABV0@@Z
??4ClUFfFn@@QAEAAV0@ABV0@@Z
??4ClUSpMp@@QAEAAV0@ABV0@@Z
??4ExecPar@@QAEAAV0@ABV0@@Z
??4SearchFilterBase@@QAEAAV0@ABV0@@Z
??4SearchFilterElement@@QAEAAV0@ABV0@@Z
??4SearchFilterGroup@@QAEAAV0@ABV0@@Z
??4SearchFilterParser@@QAEAAV0@ABV0@@Z
??4SearchPar@@QAEAAV0@ABV0@@Z
??4odbcEnvContainer@@QAEAAV0@ABV0@@Z
??7BcBuffer@@QBE_NXZ
??7BcDate@@QBE_NXZ
??7BcDateTime@@QBE_NXZ
??7BcFloat@@QBE_NXZ
??7BcInt@@QBE_NXZ
??7BcRef@@QBE_NXZ
??7BcString@@QBE_NXZ
??7BcTime@@QBE_NXZ
??7BcUString@@QBE_NXZ
??8BcBuffer@@QBE_NABV0@@Z
??8BcBuffer@@QBE_NABVBcRef@@@Z
??8BcBuffer@@QBE_NABVBcString@@@Z
??8BcBuffer@@QBE_NABVBcUString@@@Z
??8BcBuffer@@QBE_NQAD@Z
??8BcDate@@QBE_NABV0@@Z
??8BcDate@@QBE_NABVBcInt@@@Z
??8BcDate@@QBE_NABVBcRef@@@Z
??8BcDate@@QBE_NQAD@Z
??8BcDate@@QBE_N_J@Z
??8BcDateTime@@QBE_NABV0@@Z
??8BcFloat@@QBE_NABV0@@Z
??8BcFloat@@QBE_NABVBcInt@@@Z
??8BcFloat@@QBE_NABVBcRef@@@Z
??8BcFloat@@QBE_NH@Z
??8BcFloat@@QBE_NK@Z
??8BcFloat@@QBE_NN@Z
??8BcFloat@@QBE_NQAD@Z
??8BcFloat@@QBE_N_J@Z
??8BcIf@@QAE_NABV0@@Z
??8BcInt@@QBE_NABV0@@Z
??8BcInt@@QBE_NABVBcFloat@@@Z
??8BcInt@@QBE_NABVBcRef@@@Z
??8BcInt@@QBE_NH@Z
??8BcInt@@QBE_NK@Z
??8BcInt@@QBE_NN@Z
??8BcInt@@QBE_NQAD@Z
??8BcInt@@QBE_N_J@Z
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 316KB - Virtual size: 315KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ