Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
202437dae32ee496fa69f195074f2bf0_NeikiAnalytics.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
202437dae32ee496fa69f195074f2bf0_NeikiAnalytics.dll
Resource
win10v2004-20240226-en
Target
202437dae32ee496fa69f195074f2bf0_NeikiAnalytics.exe
Size
872KB
MD5
202437dae32ee496fa69f195074f2bf0
SHA1
3356c3a351f44f40ac660a70915acfe03410732d
SHA256
8f6bae17b118f8285b25f515fdb46a4df85785b108361ebdc51fe6d12bf79ece
SHA512
52a259a89c36213d4910ddb78fc2bd6ffc6a727fc71337b95c2d364af855cd01d11e91723ba97f77308a9ebd13e6054dbb73bba77745c5ad24a66fb8a5c91b62
SSDEEP
24576:IPze9bjFNJQ7a2gdmyWI4Kwp2e0tlBTFU4w0p:bjNJ/2gdmyWfKwEe0tbh
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
GetModuleFileNameA
GetLastError
GetStringTypeExW
CompareStringW
SetEndOfFile
CloseHandle
LocalFree
GetCurrentProcessId
TlsAlloc
GetTickCount
MapViewOfFile
LoadLibraryA
LoadLibraryW
OpenFileMappingA
CreateFileW
VirtualFree
GetFileSize
RaiseException
OpenProcess
SwitchToThread
InitializeCriticalSection
GetCurrentProcess
VirtualAlloc
GetLogicalDrives
GetSystemInfo
CreateFileMappingW
CreateFileMappingA
GetProcAddress
DeleteCriticalSection
TlsGetValue
EnumResourceTypesW
GetVersionExW
TlsSetValue
GetModuleHandleW
FreeLibrary
TerminateProcess
LoadLibraryExW
GetWindowsDirectoryW
LocalAlloc
GetCurrentThreadId
VirtualQuery
TlsFree
UnmapViewOfFile
Sleep
@Axrtl@Debug@Logfile@TDebugLogFile@$bcdtr$qqrv
@$xp$35Axrtl@System@Win@Registry@TRegistry
@Axrtl@Winapi@Psapi@PsAPI@GetProcessImageFileName$qqrui
@Axrtl@Utils@Hash@Crc32@HashCRC32@FromString$qqrx20System@UnicodeString
@Axrtl@Debug@Common@BOOL_TO_STR
@Axrtl@Debug@Logfile@TDebugLogFile@Unlock$qqrv
@Axrtl@Winapi@Shell32@Shell32@SHGetSpecialFolderPath$qqrio
@Axrtl@Debug@Common@S_START_LOG_PROCESS
@Axrtl@Project@Interfacedobject@initialization$qqrv
@Axrtl@Debug@Common@S_OBJECT
@Axrtl@Debug@Common@S_UNKNOWN
@Axrtl@Winapi@Wintrust@WINTRUST_ACTION_GENERIC_VERIFY_V2
@Axrtl@Debug@Common@initialization$qqrv
@Axrtl@Winapi@Crypt32@Crypt32@CryptMsgClose$qqrrui
@Axrtl@Winapi@Ntdll@Ntdll@NtQuerySystemInformation$qqr42Axrtl@Winapi@Ntdll@TSystemInformationClasspvuipui
@Axrtl@System@Win@Registry@TRegistry@ReadString$qqrx20System@UnicodeString
@Axrtl@System@Win@Lnkfileinfo@TLnkFileInfo@$bctr$qqrx20System@UnicodeString
@Axrtl@Dllroutines@Finalization$qqrv
@Axrtl@Project@Eventnotifier@Finalization$qqrv
@Axrtl@System@Win@Registry@TRegistry@
@Axrtl@Debug@Common@S_ERROR
@Axrtl@Project@Interfacedobject@Finalization$qqrv
@Axrtl@System@Sysutils@SysUtils@Add$qqruiui
@Axrtl@Project@Productinfo@ProductInfo@FInstallationPath
@Axrtl@Debug@Common@S_PARAM_DELIM
@Axrtl@Debug@Common@S_SPACE
@Axrtl@Project@Processinfo@ProcessInfo@IsWow64Process$qqrv
@Axrtl@Dllroutines@DllRoutines@Call$qqrx20System@UnicodeStringt1
@Axrtl@Debug@Logfile@TDebugLogFile@EndProc$qqri
@Axrtl@System@Fileversioninfo@TFileVersionInfo@GetIsAviable$qqrv
@Axrtl@System@Ioutils@TPathHelper@SearchPath$qqrx20System@UnicodeStringr20System@UnicodeString
@Axrtl@Debug@Logfile@TDebugLogFile@$bdtr$qqrv
@Axrtl@Debug@Logfile@TDebugLogFile@WriteLog$qqrix20System@UnicodeStringt2p17System@TMetaClass
@Axrtl@Winapi@Crypt32@Crypt32@CryptMsgGetParam$qqruiuiuipvrui
@Axrtl@System@Win@Lnkfileinfo@TLnkFileInfo@GetPathName$qqrv
@Axrtl@System@Win@Registry@TRegistry@OpenKeyReadOnly$qqrx20System@UnicodeString
@Axrtl@Project@Settings@Finalization$qqrv
@Axrtl@Project@Interfacedobject@TInterfacedObject@$bctr$qqrv
@Axrtl@Project@Processinfo@ProcessInfo@EnablePrivilegie$qqrx20System@UnicodeString
@Axrtl@Project@Interfacedobject@TInterfacedObject@$bdtr$qqrv
@Axrtl@Project@Interfacedobject@DllGetVersionInternal$qqsx20System@UnicodeStringr16_DLLVERSIONINFO2
@Axrtl@Project@Interfacedobject@DllGetInstanceInternal$qqsrx5_GUIDpvpp17System@TMetaClassxi
@Axrtl@System@Ioutils@initialization$qqrv
@Axrtl@Project@Interfacedobject@TInterfacedObject@Unlock$qqrv
@Axrtl@System@Thread@initialization$qqrv
@Axrtl@Winapi@Crypt32@Crypt32@CertGetCertificateContextProperty$qqrp33Axrtl@Winapi@Crypt32@TCertContextuipvpui
@Axrtl@System@Ioutils@TPathHelper@PreparePathName$qqrx20System@UnicodeString
@Axrtl@Project@Processinfo@initialization$qqrv
@$xp$33Axrtl@Debug@Logfile@TDebugLogFile
@Axrtl@Winapi@Crypt32@Crypt32@CertFreeCertificateContext$qqrp33Axrtl@Winapi@Crypt32@TCertContext
@Axrtl@Project@Productinfo@ProductInfo@FCompanyName
@Axrtl@Project@Interfacedobject@DllCanUnloadNowInternal$qqspp17System@TMetaClassxi
@Axrtl@System@Win@Osinfo@OSInfo@IsWindows$qqr39Axrtl@System@Win@Osinfo@TWindowsVersiont1
@Axrtl@System@Ioutils@TPathHelper@CommandLineToArgv$qqrx20System@UnicodeStringr20System@UnicodeStringt2
@Axrtl@System@Ioutils@TPathHelper@Remove32KPrefix$qqrx20System@UnicodeString
@Axrtl@System@Win@Lnkfileinfo@TLnkFileInfo@
@Axrtl@Debug@Logfile@TDebugLogFile@GetLogInstance$qqrx20System@UnicodeString
@Axrtl@Winapi@Psapi@PsAPI@GetModuleFileNameEx$qqruiui
@$xp$45Axrtl@System@Fileversioninfo@TFileVersionInfo
@Axrtl@Debug@Common@S_VALUE_CARDINAL
@Axrtl@System@Win@Registry@TRegistry@GetValueNames$qqrp23System@Classes@TStrings
@Axrtl@Project@Productinfo@ProductInfo@$bcctr$qqrv
@Axrtl@Project@Productinfo@ProductInfo@$bcdtr$qqrv
@Axrtl@Project@Eventnotifier@initialization$qqrv
@Axrtl@Winapi@Kernel32@Kernel32@GetDosDevice$qqrx20System@UnicodeString
@Axrtl@Dllroutines@initialization$qqrv
@Axrtl@System@Strutils@StrUtils@
@Axrtl@Project@Interfacedobject@TInterfacedObject@
@Axrtl@System@Win@Osinfo@Finalization$qqrv
@Axrtl@System@Fileversioninfo@TFileVersionInfo@GetValue$qqrx20System@UnicodeString
@Axrtl@Winapi@Messages@initialization$qqrv
@Axrtl@Debug@Logfile@TDebugLogFile@
@Axrtl@Debug@Common@S_NIL_OBJECT
@Axrtl@Debug@Logfile@TDebugLogFile@SetDirectWrite$qqri
@Axrtl@Debug@Logfile@TDebugLogFile@SetLogLevel$qqri
@Axrtl@Winapi@Messages@Finalization$qqrv
@Axrtl@Debug@Common@S_NIL_CLASS
@Axrtl@Debug@Logfile@TDebugLogFile@FreeLogInstance$qqrrp33Axrtl@Debug@Logfile@TDebugLogFile
@Axrtl@Project@Settings@initialization$qqrv
@Axrtl@Debug@Logfile@TDebugLogFile@SetMaxFileSize$qqrj
@Axrtl@Dllroutines@DllRoutines@GetInstance$qqrx20System@UnicodeStringrx5_GUIDpv
@$xp$30Axrtl@System@Strutils@StrUtils
@Axrtl@System@Ioutils@TPathHelper@Add32KPrefix$qqrx20System@UnicodeString
@Axrtl@System@Win@Registry@TRegistry@GetKeyNames$qqrp23System@Classes@TStrings
@Axrtl@System@Ioutils@Finalization$qqrv
@Axrtl@Project@Interfacedobject@TInterfacedObject@Lock$qqrv
@Axrtl@System@Fileversioninfo@TFileVersionInfo@
@$xp$34Axrtl@Winapi@Crypt32@PCyptoAPIBLOB
@Axrtl@Project@Interfacedobject@TInterfacedObject@DoProxiedObjectFree$qqrv
@Axrtl@Debug@Logfile@Finalization$qqrv
@Axrtl@Debug@Logfile@TDebugLogFile@BeginProc$qqrix20System@UnicodeString
@Axrtl@Winapi@Crypt32@Crypt32@CertCloseStore$qqruiui
@Axrtl@System@Fileversioninfo@TFileVersionInfo@IsValueExist$qqrx20System@UnicodeString
@Axrtl@System@Fileversioninfo@TFileVersionInfo@$bctr$qqrx20System@UnicodeStringo
@Axrtl@Project@Interfacedobject@TInterfacedObject@$bctr$qqrp54Axrtl@Project@Interfacedobject@TProxiedInterfaceObject
@Axrtl@Debug@Logfile@initialization$qqrv
@Axrtl@Winapi@Messages@ExtMessages@$bcctr$qqrv
@Axrtl@System@Ioutils@TPathHelper@$bcctr$qqrv
@Axrtl@Winapi@Crypt32@Crypt32@CertGetNameString$qqrp33Axrtl@Winapi@Crypt32@TCertContextuiuipvpbui
@Axrtl@System@Ioutils@TPathHelper@$bcdtr$qqrv
@Axrtl@Project@Interfacedobject@TInterfacedObject@DefaultHandler$qqrpv
@Axrtl@Winapi@Messages@ExtMessages@$bcdtr$qqrv
@Axrtl@System@Ioutils@TPathHelper@PrepareFileName$qqrx20System@UnicodeString
@Axrtl@Debug@Common@S_END_PROC
@Axrtl@Project@Processinfo@Finalization$qqrv
@Axrtl@Debug@Common@S_BEGIN_PROC
@Axrtl@Debug@Common@S_VALUE_INTEGER
@Axrtl@System@Win@Osinfo@OSInfo@WindowsVersion$qqrv
@Axrtl@System@Ioutils@TPathHelper@CheckFileX64$qqrx20System@UnicodeString
@$xp$39Axrtl@System@Win@Osinfo@TWindowsVersion
@Axrtl@Debug@Common@S_EXCEPTION
@Axrtl@Debug@Common@S_VALUE_STR
@Axrtl@Debug@Logfile@TDebugLogFile@BeginNesting$qqri
@Axrtl@Project@Productinfo@Finalization$qqrv
@Axrtl@Debug@Logfile@TDebugLogFile@Lock$qqrv
@$xp$48Axrtl@Project@Interfacedobject@TInterfacedObject
@Axrtl@System@Win@Osinfo@initialization$qqrv
@Axrtl@Winapi@Crypt32@Crypt32@CryptQueryObject$qqruipvuiuiuipuit6t6t6t6ppv
@Axrtl@Debug@Common@S_PARAMS
@Axrtl@Project@Settings@CommonSettings@$bcctr$qqrv
@Axrtl@Project@Settings@CommonSettings@$bcdtr$qqrv
@Axrtl@Project@Productinfo@ProductInfo@FName
@Axrtl@System@Thread@Finalization$qqrv
@Axrtl@Debug@Common@S_CLASS
@Axrtl@Debug@Common@Finalization$qqrv
@Axrtl@Winapi@Crypt32@Crypt32@CertFindCertificateInStore$qqruiuiuiuipvp33Axrtl@Winapi@Crypt32@TCertContext
@Axrtl@System@Ioutils@TFileHelper@GetSize$qqrx20System@UnicodeString
@Axrtl@Project@Productinfo@ProductInfo@FApplicationDataPath
@Axrtl@Debug@Logfile@TDebugLogFile@EndNesting$qqri
@Axrtl@Debug@Logfile@TDebugLogFile@$bcctr$qqrv
@Axrtl@Debug@Common@S_END_METHOD
@Axrtl@Project@Productinfo@initialization$qqrv
@Axrtl@Debug@Common@S_INTERFACE
PathUnExpandEnvStringsW
PathIsUNCW
@System@Sysutils@TSimpleRWSync@$bctr$qqrv
@System@Generics@Collections@TListHelper@DoExtractItemRevManaged$qqrpxvpv
@System@Sysutils@IntToStr$qqrj
@System@Sysutils@BytesOf$qqrx20System@UnicodeString
@System@Set8087CW$qqrus
@System@@FinalizeArray$qqrpvt1ui
@System@Sysutils@Win32Check$qqri
@System@@UStrFromWStr$qqrr20System@UnicodeStringx17System@WideString
@System@Win@Registry@TRegistry@CloseKey$qqrv
@System@Generics@Collections@TListHelper@DoExtractItemFwdString$qqrpxvpv
@System@Classes@TMemoryStream@
@System@TObject@ToString$qqrv
@System@Generics@Collections@TListHelper@DoRemoveFwdMRef$qqrpxv
@$xp$14System@TVarRec
@System@Sysutils@BytesOf$qqrx31System@%AnsiStringT$us$i65535$%
@$xp$6Double
@System@Sysutils@Exception@GetBaseException$qqrv
@System@Win@Registry@TRegistry@$bctr$qqrv
@$xp$18System@Rtti@TValue
@System@Rtti@TValue@GetIsEmpty$qqrv
@System@Generics@Collections@TListHelper@SetItemN$qqrpxvi
@System@TObject@Free$qqrv
@System@Sysutils@TSimpleRWSync@
@System@Sysutils@FormatDateTime$qqrx20System@UnicodeString16System@TDateTime
@System@Classes@TStringStream@$bctr$qqrx20System@UnicodeStringi
@System@Diagnostics@TStopwatch@GetElapsedMilliseconds$qqrv
@System@@UStrSetLength$qqrr20System@UnicodeStringi
@System@Classes@TComponent@$bcctr$qqrv
@System@Classes@TComponent@$bcdtr$qqrv
@System@Sysutils@ExtractFileExt$qqrx20System@UnicodeString
@System@Sysutils@GetEnvironmentVariable$qqrx20System@UnicodeString
@System@Generics@Collections@TListHelper@DoExtractItemFwd1$qqrpxvpv
@System@Sysutils@GetModuleName$qqrui
@System@Sysutils@EmptyStr
@System@Sysutils@SameStr$qqrx20System@UnicodeStringt1
@System@@CopyRecord$qqrv
@System@@ValInt64$qqrx20System@UnicodeStringri
@System@TInterfacedObject@AfterConstruction$qqrv
@System@@UStrEqual$qqrv
@System@@DynArrayAddRef$qqrpv
@System@Generics@Collections@TListHelper@InternalInsert1$qqripxv
@System@IsLibrary
@System@Sysutils@TStringHelper@Contains$qqrx20System@UnicodeString
@System@Sysutils@EInvalidCast@
@System@Sysutils@TLanguages@$bcctr$qqrv
@System@@AbstractError$qqrv
@System@Strutils@StartsText$qqrx20System@UnicodeStringt1
@$xp$26System@Classes@TSeekOrigin
@System@Classes@TStream@Write64$qqrx24System@%DynamicArray$uc%jj
@System@Sysutils@TLanguages@$bcdtr$qqrv
@System@Generics@Collections@TListHelper@DoIndexOfFwd8$qqrpxv
@System@Classes@TObserverMapping@$bcctr$qqrv
@System@Generics@Collections@TListHelper@InternalReverseManaged$qqrv
@System@Generics@Collections@TListHelper@DoIndexOfFwd4$qqrpxv
@System@Generics@Collections@TListHelper@InternalMoveN$qqrii
@System@Generics@Collections@TListHelper@InternalMove8$qqrii
@System@Generics@Collections@TListHelper@InternalMove4$qqrii
@System@Generics@Collections@TListHelper@InternalMove1$qqrii
@System@Classes@TObserverMapping@$bcdtr$qqrv
@System@Generics@Collections@TListHelper@DoIndexOfFwdN$qqrpxv
@$xp$7Boolean
@System@Sysutils@LowerCase$qqrx20System@UnicodeString
@System@Variants@initialization$qqrv
@System@Generics@Collections@TListHelper@DoExtractItemRevString$qqrpxvpv
@System@Random$qqrxi
@System@Generics@Collections@TListHelper@DoIndexOfFwd1$qqrpxv
@System@Sysutils@AnsiCompareStr$qqrx20System@UnicodeStringt1
@System@TObject@ClassName$qqrv
@System@@AsClass$qqrxp14System@TObjectp17System@TMetaClass
@System@@IsClass$qqrxp14System@TObjectp17System@TMetaClass
@System@Generics@Collections@TListHelper@DoExtractItemFwd8$qqrpxvpv
@System@Sysutils@TByteHelper@ToHexString$qqrv
@System@@UStrDelete$qqrr20System@UnicodeStringii
@System@Sysutils@StringReplace$qqrx20System@UnicodeStringt1t162System@%Set$35System@Sysutils@System_Sysutils__85t1$i0$t1$i1$%
@System@Classes@BinToHex$qqrpvpbi
@System@Sysutils@Exception@$bdtr$qqrv
@$xp$22System@Classes@TStream
@System@Classes@TStream@SetSize$qqri
@System@Generics@Collections@TListHelper@DoRemoveFwd8$qqrpxv
@System@Generics@Collections@TListHelper@DoRemoveFwd4$qqrpxv
@System@Generics@Collections@TListHelper@DoRemoveFwdN$qqrpxv
@System@Sysutils@TStringHelper@ToLower$qqrv
@System@Generics@Collections@TListHelper@DoIndexOfRev8$qqrpxv
@System@Generics@Collections@TListHelper@DoIndexOfRev4$qqrpxv
@System@Typinfo@GetTypeData$qqrp24System@Typinfo@TTypeInfo
@System@Generics@Collections@TListHelper@DoRemoveFwd1$qqrpxv
@System@Generics@Collections@TListHelper@DoIndexOfRevN$qqrpxv
@System@Sysutils@TStringHelper@IsEmpty$qqrv
@System@@IntfAddRef$qqrx44System@%DelphiInterface$17System@IInterface%
@System@Sysutils@CharInSet$qqrbrx25System@%Set$cc$i0$c$i-1$%
@System@Sysutils@initialization$qqrv
@$xp$12System@TTime
@System@Generics@Collections@TListHelper@DoIndexOfRev1$qqrpxv
@System@TObject@NewInstance$qqrv
@System@@LStrFromPWChar$qqrr27System@%AnsiStringT$us$i0$%pbus
@$xp$16System@TDateTime
@System@Pos$qqrx20System@UnicodeStringt1i
@System@TInterfacedObject@NewInstance$qqrv
@System@Sysutils@ForceDirectories$qqr20System@UnicodeString
@$xp$26System@Classes@TStringList
@System@@FreeMem$qqrpv
@System@@StartLib$qqrv
@System@ReportMemoryLeaksOnShutdown
@System@Generics@Collections@TListHelper@SetItem1$qqrpxvi
@System@Ansistrings@Finalization$qqrv
@System@@GetMem$qqri
@System@Generics@Defaults@TStringComparer@$bcctr$qqrv
@System@Sysutils@EncodeDate$qqrususus
@System@Generics@Collections@TListHelper@DoExchangeString$qqrii
@System@Generics@Defaults@TStringComparer@$bcdtr$qqrv
@System@Generics@Collections@TListHelper@DoExtractItemRev1$qqrpxvpv
@System@Generics@Collections@TListHelper@InternalExchangeManaged$qqrii
@System@@UStrCatN$qqrv
@$xp$25System@Sysutils@TEncoding
@System@Typinfo@Finalization$qqrv
@System@Sysutils@FreeAndNil$qqrpv
@System@TObject@AfterConstruction$qqrv
@System@Sysutils@FindNext$qqrr26System@Sysutils@TSearchRec
@$xp$7Integer
@System@Get8087CW$qqrv
@System@Finalization$qqrv
@System@Generics@Collections@TListHelper@InternalInsertRangeN$qqripvi
@System@Ioutils@TPath@$bcctr$qqrv
@System@Ioutils@TPath@$bcdtr$qqrv
@System@Generics@Collections@TListHelper@DoRemoveRev8$qqrpxv
@System@Sysutils@TrimRight$qqrx20System@UnicodeString
@System@Generics@Collections@TListHelper@DoRemoveRev4$qqrpxv
@System@Generics@Collections@TListHelper@DoRemoveRevN$qqrpxv
@System@Syncobjs@TCriticalSection@Enter$qqrv
@System@Sysutils@ExtractFileName$qqrx20System@UnicodeString
@System@Generics@Collections@TListHelper@InternalDeleteRangeN$qqrii
@System@Generics@Collections@TListHelper@InternalDeleteRange8$qqrii
@System@Generics@Collections@TListHelper@InternalDeleteRange4$qqrii
@System@Generics@Collections@TListHelper@InternalDeleteRange1$qqrii
@System@Generics@Collections@TListHelper@DoRemoveRev1$qqrpxv
@System@Generics@Collections@TListHelper@DoAddString$qqrpxv
@System@@UStrCat3$qqrr20System@UnicodeStringx20System@UnicodeStringt2
@System@@InitializeRecord$qqrpvt1
@$xp$8SmallInt
@$xp$9NativeInt
@$xp$17System@AnsiString
@System@@IntfCopy$qqrr44System@%DelphiInterface$17System@IInterface%x44System@%DelphiInterface$17System@IInterface%
@System@Sysutils@Finalization$qqrv
@$xp$12System@TDate
@System@Ioutils@TFile@OpenRead$qqrx20System@UnicodeString
@System@Sysutils@TrimLeft$qqrx20System@UnicodeString
@System@Classes@TStream@Read64$qqr24System@%DynamicArray$uc%jj
@$xp$13System@TClass
@System@@UStrCopy$qqrx20System@UnicodeStringii
@System@Variants@Finalization$qqrv
@System@Generics@Collections@TListHelper@DoExtractItemRev8$qqrpxvpv
@System@Generics@Collections@TListHelper@InternalInsert8$qqripxv
@System@@UStrFromChar$qqrr20System@UnicodeStringc
@System@Sysutils@Exception@$bctr$qqrx20System@UnicodeStringpx14System@TVarRecxi
@System@Sysutils@Exception@RaisingException$qqrp23System@TExceptionRecord
@System@UTF8ToString$qqrx31System@%AnsiStringT$us$i65535$%
@System@Sysutils@SysErrorMessage$qqruiui
@System@Generics@Collections@TListHelper@InternalInsertManaged$qqripxv
@System@Typinfo@TTypeInfo@TypeData$qqrv
@System@Sysutils@FileSeek$qqruixji
@System@RegisterModule$qqrp17System@TLibModule
@System@@RunError$qqruc
@System@@ClassDestroy$qqrxp14System@TObject
@System@Rtlconsts@_SArgumentOutOfRange
@System@Sysutils@StrPas$qqrpxb
@System@Generics@Collections@TListHelper@DoReverseInterface$qqrv
@System@Rtti@TValue@Make$qqrpvp24System@Typinfo@TTypeInfor18System@Rtti@TValue
@System@@DynArrayLength$qqrpxv
@System@TObject@DefaultHandler$qqrpv
@System@Diagnostics@TStopwatch@Stop$qqrv
@System@Math@Log2$qqrxg
@System@Generics@Collections@TListHelper@DoExtractItemFwd4$qqrpxvpv
@System@Timespan@TTimeSpan@$bcctr$qqrv
@System@Math@EnsureRange$qqrxixixi
@System@TObject@BeforeDestruction$qqrv
@System@Typinfo@initialization$qqrv
@System@Timespan@TTimeSpan@$bcdtr$qqrv
@System@@ClassCreate$qqrpvzc
@System@Syncobjs@TCriticalSectionHelper@Leave$qqrv
@System@Generics@Collections@TListHelper@InternalInsertRangeManaged$qqripvi
@System@@New$qqripv
@System@Classes@TStringStream@
@System@Generics@Collections@TListHelper@InternalGrowCheck$qqri
@System@Sysutils@TStringHelper@GetLength$qqrv
@$xp$31System@Sysutils@TFormatSettings
@System@Regularexpressions@TRegEx@IsMatch$qqrx20System@UnicodeStringt165System@%Set$38System@Regularexpressions@TRegExOptiont1$i0$t1$i7$%
@System@Ln$qqrxg
@System@@UStrArrayClr$qqrpvi
@System@Sysutils@EArgumentOutOfRangeException@
@$xp$12System@PByte
@System@Ansistrings@initialization$qqrv
@System@TObject@GetHashCode$qqrv
@System@Generics@Defaults@_LookupVtableInfo$qqr49System@Generics@Defaults@TDefaultGenericInterfacep24System@Typinfo@TTypeInfoi
@$xp$18System@PAnsiString
@System@TInterfacedObject@_Release$qqsv
@System@Sysutils@ExtractFilePath$qqrx20System@UnicodeString
@System@Generics@Collections@TListHelper@DoSetItemInterface$qqrpxvi
@System@Rtti@initialization$qqrv
@$xp$14System@TObject
@System@Input
@System@GetMemory$qi
@$xp$11System@Word
@System@Sysutils@TEncoding@GetUTF8$qqrv
@System@Syncobjs@TCriticalSection@
@$xp$26System@Contnrs@TObjectList
@System@UTF8Encode$qqrx20System@UnicodeString
@System@Contnrs@TObjectList@GetItem$qqri
@System@Sysutils@RaiseLastOSError$qqrv
@System@Generics@Collections@TListHelper@InternalClearMRef$qqrv
@System@Generics@Collections@TListHelper@DoInsertInterface$qqripxv
@System@@HandleAnyException$qqrv
@System@Classes@TStream@GetSize$qqrv
@$xp$15System@Extended
@System@Generics@Collections@TListHelper@DoIndexOfFwdMRef$qqrpxv
@System@Sysutils@Exception@$bcctr$qqrv
@System@Sysutils@Exception@$bcdtr$qqrv
@$xp$8Cardinal
@System@Sysutils@ExcludeTrailingPathDelimiter$qqrx20System@UnicodeString
@$xp$23System@Types@TDirection
@System@Sysutils@StringOf$qqrx24System@%DynamicArray$uc%
@System@Internal@Excutils@initialization$qqrv
@System@@LStrSetLength$qqrr27System@%AnsiStringT$us$i0$%ius
@System@@HandleFinally$qqrv
@System@Sysutils@ChangeFileExt$qqrx20System@UnicodeStringt1
@System@ParamStr$qqri
@System@@DynArraySetLength$qqrv
@System@@BeforeDestruction$qqrxp14System@TObjectzc
@System@Inifiles@TCustomIniFile@$bctr$qqrx20System@UnicodeString
@System@Generics@Collections@TListHelper@InternalSetCountManaged$qqri
@System@FreeMemory$qpv
@System@@FinalizeRecord$qqrpvt1
@System@Generics@Collections@TListHelper@DoExtractItemRev4$qqrpxvpv
@System@@RaiseExcept$qqrv
@System@Syncobjs@TCriticalSection@$bctr$qqrv
@System@@LStrToPChar$qqrx27System@%AnsiStringT$us$i0$%
@System@Internal@Excutils@Finalization$qqrv
@System@Math@IfThen$qqroxixi
@System@HPPGENAttribute@$bctr$qqrxix20System@UnicodeString
@System@Classes@TStream@SetSize64$qqrxj
@System@Syncobjs@TCriticalSection@Leave$qqrv
@System@Generics@Collections@TListHelper@InternalClearManaged$qqrv
@System@Sysutils@EListError@
@System@Diagnostics@TStopwatch@StartNew$qqrv
@System@Math@Floor$qqrxg
@System@Generics@Collections@TListHelper@InternalToArrayManaged$qqrrpv
@System@@IntfClear$qqrr44System@%DelphiInterface$17System@IInterface%
@System@Win@Registry@TRegistry@$bcctr$qqrv
@System@Win@Registry@TRegistry@$bcdtr$qqrv
@$xp$15System@ShortInt
@System@TInterfacedObject@_AddRef$qqsv
@System@Syncobjs@TCriticalSectionHelper@Enter$qqrv
@System@Classes@TStream@Read$qqr24System@%DynamicArray$uc%ii
@System@Sysutils@Format$qqrx20System@UnicodeStringpx14System@TVarRecxi
@System@Generics@Collections@TListHelper@SetItemManaged$qqrpxvi
@System@Classes@TFileStream@$bctr$qqrx20System@UnicodeStringus
@System@Sysutils@TEncoding@GetString$qqrx24System@%DynamicArray$uc%
@System@Classes@TStringList@$bctr$qqrv
@System@Classes@TStream@CopyFrom$qqrxp22System@Classes@TStreamj
@System@@DynArrayAsg$qqrrpvpvt2
@System@@UStrLen$qqrx20System@UnicodeString
@System@Sysutils@OutOfMemoryError$qqrv
@System@Generics@Collections@TListHelper@InternalInsert4$qqripxv
@$xp$10NativeUInt
@System@Syncobjs@Finalization$qqrv
@System@Classes@TStringList@$bctr$qqr24System@Types@TDuplicatesoo
@System@Classes@TBinaryWriter@$bcctr$qqrv
@System@Win@Comobj@initialization$qqrv
@System@Classes@TBinaryWriter@$bcdtr$qqrv
@System@Rtlconsts@_SGenericItemNotFound
@System@StringOfChar$qqrbi
@System@Sysutils@ExtractFileDrive$qqrx20System@UnicodeString
@System@Variants@@VarToUStr$qqrr20System@UnicodeStringrx8TVarData
@System@Move$qqrpxvpvi
@System@Generics@Collections@TListHelper@InternalExchangeN$qqrii
@System@Generics@Collections@TListHelper@InternalExchange8$qqrii
@System@Generics@Collections@TListHelper@InternalExchange4$qqrii
@System@Generics@Collections@TListHelper@InternalExchange1$qqrii
@System@@IntfCast$qqrr44System@%DelphiInterface$17System@IInterface%x44System@%DelphiInterface$17System@IInterface%rx5_GUID
@System@Types@TRect@$bctr$qqrxixixixi
@System@Math@Max$qqrxgxg
@System@Math@Max$qqrxjxj
@System@Generics@Collections@TListHelper@InternalSetCountN$qqri
@System@Generics@Collections@TListHelper@InternalSetCount8$qqri
@System@Generics@Collections@TListHelper@InternalSetCount4$qqri
@System@Generics@Collections@TListHelper@InternalSetCount1$qqri
@$xp$7Pointer
@$xp$17System@IInterface
@System@Win@Registry@TRegistry@SetRootKey$qqrp6HKEY__
@System@Generics@Defaults@TIStringComparer@$bcctr$qqrv
@$xp$11System@Byte
@System@Sysutils@FindClose$qqrr26System@Sysutils@TSearchRec
@System@Generics@Defaults@TIStringComparer@$bcdtr$qqrv
@System@Rtlconsts@_SGenericDuplicateItem
@System@Generics@Collections@TListHelper@InternalAdd8$qqrpxv
@System@Generics@Collections@TListHelper@InternalAdd4$qqrpxv
@System@Generics@Collections@TListHelper@DoExtractItemFwdN$qqrpxvpv
@$xp$7HRESULT
@System@Generics@Collections@TListHelper@InternalAddN$qqrpxv
@System@Classes@TStringStream@GetDataString$qqrv
@System@@_IOTest$qqrv
@System@Classes@TStringsEnumerator@GetCurrent$qqrv
@System@Generics@Collections@TListHelper@InternalAdd1$qqrpxv
@System@Classes@TResourceStream@
@System@Classes@TStream@Write$qqrx24System@%DynamicArray$uc%ii
@System@TInterfacedObject@
@System@@UStrFromWArray$qqrr20System@UnicodeStringpbi
@System@Hash@THashMD5@GetHashString$qqrx20System@UnicodeString
@$xp$13System@string
@System@Math@Min$qqrxgxg
@$xp$9PAnsiChar
@System@Math@Min$qqrxjxj
@System@Classes@TBaseAsyncResult@$bcctr$qqrv
@System@Math@initialization$qqrv
@System@Classes@TBaseAsyncResult@$bcdtr$qqrv
@System@Rtti@TValue@FromOrdinal$qqrp24System@Typinfo@TTypeInfoj
@System@Classes@TStringsEnumerator@MoveNext$qqrv
@System@IsMemoryManagerSet$qqrv
@System@Sysutils@TEncoding@$bcctr$qqrv
@System@GetMemoryManager$qqrr23System@TMemoryManagerEx
@System@Sysutils@TEncoding@$bcdtr$qqrv
@System@Contnrs@TObjectList@Add$qqrp14System@TObject
@System@Classes@TResourceStream@$bctr$qqruix20System@UnicodeStringpb
@System@Sysutils@FloatToStrF$qqrg28System@Sysutils@TFloatFormatii
@System@Generics@Collections@TListHelper@InternalDeleteRangeMRef$qqrii
@System@Sysutils@IntToHex$qqrji
@System@Sysutils@IntToHex$qqrii
@System@TObject@Equals$qqrp14System@TObject
@System@Generics@Collections@TListHelper@CheckItemRange$qqri
@System@TInterfacedObject@QueryInterface$qqsrx5_GUIDpv
@System@@LStrFromUStr$qqrr27System@%AnsiStringT$us$i0$%x20System@UnicodeStringus
@System@@AfterConstruction$qqrxp14System@TObject
@System@Win@Comobj@Finalization$qqrv
@System@Classes@TStream@WriteData$qqrx24System@%DynamicArray$uc%i
@System@Sysutils@TDoubleHelper@ToString$qqrrx31System@Sysutils@TFormatSettings
@System@Classes@TStream@Seek$qqrius
@System@@RaiseAgain$qqrv
@System@Generics@Collections@TListHelper@InternalDoDeleteMRef$qqri51System@Generics@Collections@TCollectionNotification
@System@Ioutils@TFile@Exists$qqrx20System@UnicodeStringo
@$xp$32System@Syncobjs@TCriticalSection
@System@Generics@Collections@TListHelper@InternalClearN$qqrv
@System@Generics@Collections@TListHelper@InternalClear8$qqrv
@System@Generics@Collections@TListHelper@InternalClear4$qqrv
@System@Generics@Collections@TListHelper@InternalClear1$qqrv
@System@Dateutils@initialization$qqrv
@System@Classes@initialization$qqrv
@System@Sysutils@TStringHelper@EndsWith$qqrx20System@UnicodeString
@System@@ROUND$qqrv
@System@TObject@$bctr$qqrv
@System@TObject@$bdtr$qqrv
@System@Generics@Collections@TListHelper@DoReverseString$qqrv
@System@Win@Comobj@TComServerObject@$bcctr$qqrv
@System@Varutils@initialization$qqrv
@System@Win@Comobj@TComServerObject@$bcdtr$qqrv
@System@Generics@Collections@TListHelper@DoRemoveRevMRef$qqrpxv
@System@Math@Max$qqrxixi
@System@Dateutils@Finalization$qqrv
@System@TObject@
@System@Sysutils@TInt64Helper@ToString$qqrv
@System@Sysutils@Exception@
@System@@UStrLAsg$qqrr20System@UnicodeStringx20System@UnicodeString
@System@Sysutils@CurrToStr$qqr15System@Currency
@$xp$23System@Classes@TStrings
@System@Classes@TMemoryStream@Clear$qqrv
@System@Rtti@TValue@TryCast$qqrp24System@Typinfo@TTypeInfor18System@Rtti@TValuexo
@System@Sysconst@_SInvalidCast
@System@Generics@Collections@TListHelper@DoInsertString$qqripxv
@System@@UStrAsg$qqrr20System@UnicodeStringx20System@UnicodeString
@System@Classes@TStrings@GetValue$qqrx20System@UnicodeString
@System@Generics@Collections@TListHelper@DoExtractItemRevN$qqrpxvpv
@System@Classes@TStream@
@System@@UStrFromWChar$qqrr20System@UnicodeStringb
@System@Strutils@SplitString$qqrx20System@UnicodeStringt1
@System@Win@Registry@TRegistry@$bctr$qqrui
@System@Sysutils@FloatToStr$qqrgrx31System@Sysutils@TFormatSettings
@System@LoadResString$qqrp20System@TResStringRec
@System@Generics@Collections@TListHelper@DoExtractItemFwdManaged$qqrpxvpv
@System@Generics@Collections@TListHelper@DoAddInterface$qqrpxv
@System@Syncobjs@initialization$qqrv
@System@@UStrFromPChar$qqrr20System@UnicodeStringpc
@System@@UStrAddRef$qqrpv
@System@@DynArrayClear$qqrrpvpv
@System@@TryFinallyExit$qqrv
@System@Generics@Collections@TListHelper@InternalMoveManaged$qqrii
@System@Generics@Collections@TListHelper@InternalDoDeleteManaged$qqri51System@Generics@Collections@TCollectionNotification
@System@Generics@Collections@TListHelper@InternalDeleteRangeManaged$qqrii
@System@Dateutils@TTimeZone@$bcctr$qqrv
@System@Classes@TStream@GetPosition$qqrv
@System@Dateutils@TTimeZone@$bcdtr$qqrv
@System@Ioutils@TPath@GetDirectoryName$qqr20System@UnicodeString
@System@Sysutils@Exception@ToString$qqrv
@System@Inifiles@TIniFile@
@System@Rtti@TRttiContext@$bcctr$qqrv
@System@TObject@ClassType$qqrv
@System@@UStrFromPWChar$qqrr20System@UnicodeStringpb
@System@Varutils@Finalization$qqrv
@System@Rtti@TRttiContext@$bcdtr$qqrv
@System@TObject@Dispatch$qqrpv
@System@Classes@TFileStream@
@$xp$39System@Generics@Collections@TListHelper
@System@Classes@TThread@$bcctr$qqrv
@$xp$51System@Generics@Collections@TCollectionNotification
@System@Classes@TThread@$bcdtr$qqrv
@$xp$49System@Generics@Collections@TDictionaryOwnerships
@System@Strutils@AnsiReplaceStr$qqrx20System@UnicodeStringt1t1
@System@@Dispose$qqrpvt1
@System@Classes@TLoginCredentialService@$bcctr$qqrv
@System@@EofText$qqrr15System@TTextRec
@System@@UniqueStringU$qqrr20System@UnicodeString
@System@Classes@TLoginCredentialService@$bcdtr$qqrv
@System@Strutils@ContainsStr$qqrx20System@UnicodeStringt1
@System@@LStrArrayClr$qqrpvi
@System@Typinfo@GetEnumName$qqrp24System@Typinfo@TTypeInfoi
@System@Sysutils@Exception@$bctr$qqrp20System@TResStringRec
@$xp$24System@TInterfacedObject
@System@Sysutils@TIntegerHelper@ToString$qqrv
@System@Sysutils@IncludeTrailingPathDelimiter$qqrx20System@UnicodeString
@System@initialization$qqrv
@System@Rtti@TValue@ExtractRawData$qqrpv
@System@@Halt0$qqrv
@$xp$5Int64
@System@Classes@Finalization$qqrv
@System@Math@Log2$qqrxf
@System@Classes@TStringList@
@System@Generics@Collections@TListHelper@InternalDoDelete8$qqri51System@Generics@Collections@TCollectionNotification
@System@Classes@TStrings@GetEnumerator$qqrv
@System@@UStrFromLStr$qqrr20System@UnicodeStringx27System@%AnsiStringT$us$i0$%
@System@Generics@Collections@TListHelper@InternalPackN$qqrx85System@%DelphiInterface$58System@Generics@Collections@TListHelper@TInternalEmptyFunc%
@System@Generics@Collections@TListHelper@InternalPack8$qqrx85System@%DelphiInterface$58System@Generics@Collections@TListHelper@TInternalEmptyFunc%
@System@Generics@Collections@TListHelper@InternalPack4$qqrx85System@%DelphiInterface$58System@Generics@Collections@TListHelper@TInternalEmptyFunc%
@System@Generics@Collections@TListHelper@InternalPack1$qqrx85System@%DelphiInterface$58System@Generics@Collections@TListHelper@TInternalEmptyFunc%
@$xp$28System@Classes@TMemoryStream
@System@@UStrToPWChar$qqrx20System@UnicodeString
@$xp$25System@Sysutils@Exception
@System@Generics@Collections@TListHelper@InternalSetCountMRef$qqri
@System@Generics@Collections@TListHelper@InternalDoDelete4$qqri51System@Generics@Collections@TCollectionNotification
@System@GetHeapStatus$qqrv
@System@Generics@Collections@TListHelper@InternalSetCapacity$qqri
@System@Generics@Collections@TListHelper@InternalMoveMRef$qqrii
@$xp$18System@IEnumerable
@System@@AddRefRecord$qqrpvt1
@System@Sysutils@Exception@$bctr$qqrx20System@UnicodeString
@System@@FillChar$qqrpvic
@System@Generics@Collections@TListHelper@InternalInsertRange8$qqripvi
@System@Generics@Collections@TListHelper@InternalDoDeleteN$qqri51System@Generics@Collections@TCollectionNotification
@$xp$20System@WeakAttribute
@System@TInterfacedObject@BeforeDestruction$qqrv
@System@@LStrFromPChar$qqrr27System@%AnsiStringT$us$i0$%pcus
@System@Generics@Collections@TListHelper@DoRemoveFwdManaged$qqrpxv
@System@Sysutils@SameText$qqrx20System@UnicodeStringt1
@System@Dateutils@TryEncodeDateTime$qqrxusxusxusxusxusxusxusr16System@TDateTime
@System@Generics@Collections@TListHelper@DoRemoveRevManaged$qqrpxv
@System@Sysutils@FileExists$qqrx20System@UnicodeStringo
@System@Generics@Collections@TListHelper@InternalAddManaged$qqrpxv
@System@Classes@TStringList@SetCaseSensitive$qqrxo
@System@Generics@Collections@TListHelper@DoSetItemString$qqrpxvi
@System@Sysutils@IntToStr$qqri
@$xp$29System@Diagnostics@TStopwatch
@System@Generics@Collections@TListHelper@InternalInsertRange1$qqripvi
@System@@UStrFromPWCharLen$qqrr20System@UnicodeStringpbi
@System@Sysutils@GetHomePath$qqrv
@System@Sysutils@AnsiLowerCase$qqrx20System@UnicodeString
@System@TObject@FreeInstance$qqrv
@System@TObject@SafeCallException$qqrp14System@TObjectpv
@System@Sysutils@Trim$qqrx20System@UnicodeString
@System@Sysutils@TEncoding@GetDefault$qqrv
@System@Generics@Collections@TListHelper@DoExchangeInterface$qqrii
@$xp$22System@HPPGENAttribute
@System@Character@Finalization$qqrv
@System@Generics@Collections@TListHelper@DoIndexOfRevMRef$qqrpxv
@$xp$20System@RawByteString
@System@Sysutils@TStringHelper@StartsWith$qqrx20System@UnicodeStringo
@System@@LStrLen$qqrx31System@%AnsiStringT$us$i65535$%
@$xp$26System@Sysutils@TSearchRec
@System@Math@Finalization$qqrv
@System@Sysutils@FloatToStr$qqrg
@System@Generics@Collections@TListHelper@InternalPackManaged$qqrx85System@%DelphiInterface$58System@Generics@Collections@TListHelper@TInternalEmptyFunc%
@System@Sysutils@TStringHelper@ToUpper$qqrv
@System@Ioutils@TDirectory@Exists$qqrx20System@UnicodeStringo
@System@Generics@Collections@TListHelper@InternalDoDelete1$qqri51System@Generics@Collections@TCollectionNotification
@System@@_llmul$qqrv
@System@Generics@Collections@TListHelper@InternalInsertN$qqripxv
@System@Character@initialization$qqrv
@System@@_lldiv$qqrv
@System@Sysutils@TOSVersion@$bcctr$qqrv
@System@Sysutils@AnsiUpperCase$qqrx20System@UnicodeString
@System@Sysutils@TOSVersion@$bcdtr$qqrv
@$xp$20System@PResStringRec
@System@Generics@Collections@TListHelper@SetItem8$qqrpxvi
@System@Classes@TStream@SetPosition$qqrxj
@$xp$16System@PWideChar
@System@@DoneExcept$qqrv
@System@Sysutils@StrToIntDef$qqrx20System@UnicodeStringi
@System@Strutils@AnsiStartsText$qqrx20System@UnicodeStringt1
@System@Generics@Collections@TListHelper@DoExtractItemRevInterface$qqrpxvpv
@System@Generics@Collections@TListHelper@DoExtractItemFwdInterface$qqrpxvpv
@System@Strutils@StartsStr$qqrx20System@UnicodeStringt1
@System@@LStrClr$qqrpv
@System@Classes@TStream@ReadBuffer$qqrpvi
@System@Sysutils@TStringHelper@StartsWith$qqrx20System@UnicodeString
@System@Rtti@Finalization$qqrv
CryptUnprotectData
CryptProtectData
SHGetFileInfoW
SHGetSpecialFolderPathW
IsIconic
SendMessageW
EnumWindows
GetLastInputInfo
IsWindow
ShowWindow
GetWindow
GetWindowRect
GetWindowLongW
PostMessageW
MessageBoxA
GetWindowTextW
SetWindowTextW
GetWindowTextLengthW
IsZoomed
EnableWindow
IsWindowEnabled
GetWindowThreadProcessId
GetClassNameW
GetClientRect
IsWindowVisible
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
NtQuerySystemInformation
DllCanUnloadNow
DllGetInstance
DllGetVersion
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ