C:\ADE\aime_1\oracle\oracore\bin\oracore12.dll.pdb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
oracore12.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
oracore12.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
oracore12.dll
-
Size
1.7MB
-
MD5
c6b14d304a0eb656ba8f3a10b476c891
-
SHA1
9dea56e30912ae528299baa1a6b453cbd8da2d58
-
SHA256
9c66130dc51cf600303334ceca59aed7e2f474f12201b5a133cbd62022259ca1
-
SHA512
75e93f676ef71f047e518a90e9dccf9685166d2a3a4faec67f201130e21dea31f7ae2b6c1209263fe43852300d314245633f1843733e6281ac47313f6fe2d491
-
SSDEEP
24576:xdMJvvrS4M5Cl/lsF5e2bfIdoo6uN+sxhi47S8dt8M/nJHp1G+5NYMZKr1BZNm3e:gTSC/lsre283d+6swn/nBp11GFSe
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource oracore12.dll
Files
-
oracore12.dll.dll windows:5 windows x64 arch:x64
d5ce9ad75aa2a9dbecad3eed8f25dd7f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
oranls12
lxhlmod
lmsagbf
lxhebc
lxhLangEnv
lmsaicmt
lxhninfo
lxhci2h
lxhchtoid
lxhlinfo
lxsCnvIntToNumStr
lxsCnvCase
lxoWriChar
lxlinit
lxlterm
lxgcnv
lxgratio
lxhasc
lxhnmod
lxhnamemap
lxhid2name
lxhcsn
lxoCpStr
lxmfwdx
lxmspax
lxmctex
lxscat
lxsCmpStr
lxscop
lxoCpChar
lxwdigx
lxmral
lxwalpx
lxoWriWChar
lxmopen
lxwspax
lxhLaToId
lxsulen
lmsatrm
lxspln
lxoPadStr
lxlinfo
lxgcvp
lxGetGloPtr
lxmcpen
lxmc2wx
lxmprix
lxmblax
lxoSkip
lxwprix
lxmr2w
lxsbcpu
lxoCnvCh2Wide
lxeldd
lxsCntExc
lxmcpbx
lxmlowx
lxmalpx
lxoCvChar
lxsply
lxdprl
lxinitc
lxoCnvCase
lxsplth
lxoCnvIntToNumStr
lxeadm
lxgucs2utf
lxesbm
lxeg2u
lxeu2g
lxlMatch
lxCmpStr
lxeifnd
lxmpunx
lxoCmpNStr
lxmalnx
lxldini
lxgutf2ucs
lxzinit
lxoCpDisp
lxoCntByte
lxsCntChar
lxsCntDisp
lxsCnvSimple
lxsCpToWide
lxBomDetect
lxmnsg
lxmbteqx
lxmdigx
lxoCnvNumStrToInt
lxmuppx
lxmtos
lxwuppx
lxwc2lx
lxsCnvEqui
lxgt2u
lxgu2t
lxsCpStr
lmsacbn
lmsacin
lxoCpToOp
oraunls12
lxuCpCplrStr
lxuFreCtx
lxuGetCtx
lxuCvtToCtx
lxuCmpBinStr
lxuStrLen
lxuPadStr
lxuGetTxtHnd
ole32
CoUninitialize
CoInitialize
CoCreateGuid
psapi
EnumProcessModules
GetModuleBaseNameA
ws2_32
WSAStartup
connect
WSAGetLastError
getsockname
listen
accept
closesocket
WSACleanup
bind
recv
send
getnameinfo
getaddrinfo
socket
freeaddrinfo
gethostname
orauts
TlsGetValue
TlsSetValue
GetCurrentThreadId
TlsAlloc
TlsFree
GetLastError
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CloseHandle
GetCurrentThread
DuplicateHandle
WaitForSingleObject
TerminateThread
CreateThread
ExitThread
OpenProcess
CreateFileA
GetModuleHandleA
GetProcAddress
FreeLibrary
WriteFile
LoadLibraryA
ReadFile
SetFilePointer
longjmp
ReleaseMutex
CreateSemaphoreA
CreateEventA
SetEvent
ResetEvent
ReleaseSemaphore
GetExitCodeThread
Sleep
CreateMutexA
SleepEx
TryEnterCriticalSection
kernel32
EncodePointer
GetThreadLocale
GetThreadPriority
LocalFree
FormatMessageA
FindFirstFileA
VirtualFree
VirtualAlloc
HeapCreate
HeapFree
HeapAlloc
HeapDestroy
GlobalAlloc
GlobalFree
DeleteFileA
MoveFileA
GetEnvironmentVariableA
GetModuleFileNameA
GetFileSize
GetFullPathNameA
LocalAlloc
CreateFileMappingA
DecodePointer
UnmapViewOfFile
lstrcpynA
GetFileType
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
GetFileAttributesA
GetVersionExA
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
GetLocalTime
GetSystemTime
CopyFileA
SetEndOfFile
GetSystemInfo
CreateTimerQueue
DeleteTimerQueueEx
DeleteTimerQueueTimer
CreateTimerQueueTimer
SetEnvironmentVariableA
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SetThreadPriority
FindNextFileA
FindClose
GetCurrentProcessId
CreateDirectoryA
MapViewOfFile
GetCurrentProcess
GetProcessHeap
advapi32
InitializeSecurityDescriptor
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
SetNamedSecurityInfoA
SetEntriesInAclA
BuildExplicitAccessWithNameA
GetNamedSecurityInfoA
LookupAccountSidA
GetSecurityInfo
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
SetSecurityDescriptorDacl
user32
CharUpperA
CharNextA
msvcr100
_stat64i32
_write
rename
_close
remove
_open
strncat
_ltoa
_fstat64i32
_strtime_s
_strdate_s
memmove
memcpy
memset
strlen
sscanf
localeconv
fputs
fclose
fread
fprintf
__iob_func
fopen
strrchr
_errno
_ismbblead
_setjmp
toupper
islower
vsprintf
strncpy
strtol
puts
printf
isxdigit
tolower
isupper
strncmp
isgraph
isdigit
strchr
strstr
isalpha
free
realloc
atoi
sprintf
calloc
malloc
fgets
isprint
signal
fwrite
isspace
_open_osfhandle
_stat64
_commit
fputc
__doserrno
_read
_strnicmp
fgetc
feof
fgetpos
fsetpos
_fseeki64
ftell
ferror
clearerr
_lseeki64
tmpnam
tmpfile
ungetc
_stricmp
vfprintf
_strtoui64
setbuf
setvbuf
strerror
abort
memchr
_HUGE
_isnan
strtod
getc
strtoul
__C_specific_handler
_endthreadex
exit
vprintf
_vscprintf
_vsnprintf
strcmp
_snprintf
_malloc_crt
_initterm
_initterm_e
_encoded_null
_amsg_exit
__CppXcptFilter
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
__crt_debugger_hook
_flushall
_strdup
_memccpy
_ecvt
_itoa
_access
fflush
Exports
Exports
??_C@_00A@?$AA@
??_C@_01A@0?$AA@
??_C@_01A@?$CD?$AA@
??_C@_01A@?$CI?$AA@
??_C@_01A@?$CJ?$AA@
??_C@_01A@?$CK?$AA@
??_C@_01A@?$CL?$AA@
??_C@_01A@?$DL?$AA@
??_C@_01A@?$DN?$AA@
??_C@_01A@?$DP?$AA@
??_C@_01A@?$EA?$AA@
??_C@_01A@?$FL?$AA@
??_C@_01A@?$FN?$AA@
??_C@_01A@?0?$AA@
??_C@_01A@?1?$AA@
??_C@_01A@?2?$AA@
??_C@_01A@?3?$AA@
??_C@_01A@?4?$AA@
??_C@_01A@?5?$AA@
??_C@_01A@?6?$AA@
??_C@_01A@?9?$AA@
??_C@_01A@_?$AA@
??_C@_01A@a?$AA@
??_C@_01A@c?$AA@
??_C@_01A@d?$AA@
??_C@_01A@f?$AA@
??_C@_01A@h?$AA@
??_C@_01A@l?$AA@
??_C@_01A@o?$AA@
??_C@_01A@p?$AA@
??_C@_01A@r?$AA@
??_C@_01A@s?$AA@
??_C@_01A@t?$AA@
??_C@_01A@w?$AA@
??_C@_01A@y?$AA@
??_C@_02A@80?$AA@
??_C@_02A@?$AN?6?$AA@
??_C@_02A@?$CFd?$AA@
??_C@_02A@?$CFp?$AA@
??_C@_02A@?$CFs?$AA@
??_C@_02A@?$CFu?$AA@
??_C@_02A@?$DL?5?$AA@
??_C@_02A@?$FL?$FN?$AA@
??_C@_02A@?1?1?$AA@
??_C@_02A@?3?1?$AA@
??_C@_02A@?4?4?$AA@
??_C@_02A@?5?5?$AA@
??_C@_02A@IW?$AA@
??_C@_02A@a?$CL?$AA@
??_C@_02A@an?$AA@
??_C@_02A@bc?$AA@
??_C@_02A@br?$AA@
??_C@_02A@cs?$AA@
??_C@_02A@df?$AA@
??_C@_02A@ec?$AA@
??_C@_02A@fr?$AA@
??_C@_02A@in?$AA@
??_C@_02A@m4?$AA@
??_C@_02A@mc?$AA@
??_C@_02A@me?$AA@
??_C@_02A@mk?$AA@
??_C@_02A@mm?$AA@
??_C@_02A@mn?$AA@
??_C@_02A@ms?$AA@
??_C@_02A@nf?$AA@
??_C@_02A@nx?$AA@
??_C@_02A@ok?$AA@
??_C@_02A@pc?$AA@
??_C@_02A@pf?$AA@
??_C@_02A@pl?$AA@
??_C@_02A@pp?$AA@
??_C@_02A@qa?$AA@
??_C@_02A@r?$CL?$AA@
??_C@_02A@ro?$AA@
??_C@_02A@sc?$AA@
??_C@_02A@se?$AA@
??_C@_02A@sh?$AA@
??_C@_02A@sr?$AA@
??_C@_02A@sv?$AA@
??_C@_02A@tc?$AA@
??_C@_02A@v1?$AA@
??_C@_02A@w?$CL?$AA@
??_C@_03A@2?40?$AA@
??_C@_03A@404?$AA@
??_C@_03A@?$CFhu?$AA@
??_C@_03A@?$CFlg?$AA@
??_C@_03A@?$CFlu?$AA@
??_C@_03A@?$CFs?6?$AA@
??_C@_03A@?1?$CFs?$AA@
??_C@_03A@?3?1?1?$AA@
??_C@_03A@?4?4?1?$AA@
??_C@_03A@?4?4?4?$AA@
??_C@_03A@?d?U?R?$AA@
??_C@_03A@GET?$AA@
??_C@_03A@LDM?$AA@
??_C@_03A@LEM?$AA@
??_C@_03A@LFI?$AA@
??_C@_03A@LHT?$AA@
??_C@_03A@LMM?$AA@
??_C@_03A@LPM?$AA@
??_C@_03A@LRM?$AA@
??_C@_03A@LSF?$AA@
??_C@_03A@NaN?$AA@
??_C@_03A@Ora?$AA@
??_C@_03A@UNK?$AA@
??_C@_03A@acu?$AA@
??_C@_03A@ada?$AA@
??_C@_03A@adb?$AA@
??_C@_03A@adc?$AA@
??_C@_03A@adi?$AA@
??_C@_03A@adl?$AA@
??_C@_03A@ado?$AA@
??_C@_03A@ads?$AA@
??_C@_03A@ali?$AA@
??_C@_03A@arg?$AA@
??_C@_03A@asm?$AA@
??_C@_03A@avf?$AA@
??_C@_03A@bad?$AA@
??_C@_03A@bak?$AA@
??_C@_03A@bat?$AA@
??_C@_03A@bck?$AA@
??_C@_03A@bsq?$AA@
??_C@_03A@cal?$AA@
??_C@_03A@chk?$AA@
??_C@_03A@clg?$AA@
??_C@_03A@cli?$AA@
??_C@_03A@cob?$AA@
??_C@_03A@com?$AA@
??_C@_03A@csh?$AA@
??_C@_03A@ctl?$AA@
??_C@_03A@dat?$AA@
??_C@_03A@dbf?$AA@
??_C@_03A@dbg?$AA@
??_C@_03A@dcl?$AA@
??_C@_03A@def?$AA@
??_C@_03A@dei?$AA@
??_C@_03A@dfd?$AA@
??_C@_03A@dff?$AA@
??_C@_03A@dif?$AA@
??_C@_03A@dir?$AA@
??_C@_03A@dmp?$AA@
??_C@_03A@doc?$AA@
??_C@_03A@dsc?$AA@
??_C@_03A@dtm?$AA@
??_C@_03A@dtr?$AA@
??_C@_03A@e?$CFd?$AA@
??_C@_03A@err?$AA@
??_C@_03A@evt?$AA@
??_C@_03A@exb?$AA@
??_C@_03A@exe?$AA@
??_C@_03A@exs?$AA@
??_C@_03A@fac?$AA@
??_C@_03A@fig?$AA@
??_C@_03A@fls?$AA@
??_C@_03A@fmb?$AA@
??_C@_03A@fmt?$AA@
??_C@_03A@fmx?$AA@
??_C@_03A@for?$AA@
??_C@_03A@frm?$AA@
??_C@_03A@ftp?$AA@
??_C@_03A@hlp?$AA@
??_C@_03A@hok?$AA@
??_C@_03A@htm?$AA@
??_C@_03A@ico?$AA@
??_C@_03A@idl?$AA@
??_C@_03A@idx?$AA@
??_C@_03A@inc?$AA@
??_C@_03A@ini?$AA@
??_C@_03A@inp?$AA@
??_C@_03A@ins?$AA@
??_C@_03A@iri?$AA@
??_C@_03A@irl?$AA@
??_C@_03A@itr?$AA@
??_C@_03A@jav?$AA@
??_C@_03A@kdf?$AA@
??_C@_03A@ks2?$AA@
??_C@_03A@kv1?$AA@
??_C@_03A@kv2?$AA@
??_C@_03A@kys?$AA@
??_C@_03A@lbl?$AA@
??_C@_03A@ldf?$AA@
??_C@_03A@lhs?$AA@
??_C@_03A@lib?$AA@
??_C@_03A@lis?$AA@
??_C@_03A@llg?$AA@
??_C@_03A@lls?$AA@
??_C@_03A@lnk?$AA@
??_C@_03A@log?$AA@
??_C@_03A@lsf?$AA@
??_C@_03A@lst?$AA@
??_C@_03A@ltx?$AA@
??_C@_03A@m0x?$AA@
??_C@_03A@mac?$AA@
??_C@_03A@mad?$AA@
??_C@_03A@mak?$AA@
??_C@_03A@map?$AA@
??_C@_03A@mar?$AA@
??_C@_03A@mco?$AA@
??_C@_03A@mfo?$AA@
??_C@_03A@mif?$AA@
??_C@_03A@mln?$AA@
??_C@_03A@mmb?$AA@
??_C@_03A@mmt?$AA@
??_C@_03A@mmx?$AA@
??_C@_03A@mpa?$AA@
??_C@_03A@mpg?$AA@
??_C@_03A@mpl?$AA@
??_C@_03A@msb?$AA@
??_C@_03A@msg?$AA@
??_C@_03A@msi?$AA@
??_C@_03A@nls?$AA@
??_C@_03A@oar?$AA@
??_C@_03A@obb?$AA@
??_C@_03A@obj?$AA@
??_C@_03A@obn?$AA@
??_C@_03A@obs?$AA@
??_C@_03A@ocp?$AA@
??_C@_03A@odb?$AA@
??_C@_03A@odl?$AA@
??_C@_03A@oht?$AA@
??_C@_03A@opt?$AA@
??_C@_03A@ora?$AA@
??_C@_03A@orc?$AA@
??_C@_03A@out?$AA@
??_C@_03A@pad?$AA@
??_C@_03A@par?$AA@
??_C@_03A@pas?$AA@
??_C@_03A@pcc?$AA@
??_C@_03A@pco?$AA@
??_C@_03A@pfo?$AA@
??_C@_03A@pin?$AA@
??_C@_03A@pkb?$AA@
??_C@_03A@pkh?$AA@
??_C@_03A@pla?$AA@
??_C@_03A@plb?$AA@
??_C@_03A@plc?$AA@
??_C@_03A@pld?$AA@
??_C@_03A@plg?$AA@
??_C@_03A@pli?$AA@
??_C@_03A@pll?$AA@
??_C@_03A@plm?$AA@
??_C@_03A@plp?$AA@
??_C@_03A@pls?$AA@
??_C@_03A@ppa?$AA@
??_C@_03A@ppl?$AA@
??_C@_03A@prd?$AA@
??_C@_03A@prn?$AA@
??_C@_03A@prs?$AA@
??_C@_03A@prt?$AA@
??_C@_03A@put?$AA@
??_C@_03A@pvf?$AA@
??_C@_03A@qxf?$AA@
??_C@_03A@rdf?$AA@
??_C@_03A@reg?$AA@
??_C@_03A@rep?$AA@
??_C@_03A@res?$AA@
??_C@_03A@rex?$AA@
??_C@_03A@rgs?$AA@
??_C@_03A@ros?$AA@
??_C@_03A@rpf?$AA@
??_C@_03A@rpt?$AA@
??_C@_03A@rsp?$AA@
??_C@_03A@rsq?$AA@
??_C@_03A@rul?$AA@
??_C@_03A@sad?$AA@
??_C@_03A@sav?$AA@
??_C@_03A@sco?$AA@
??_C@_03A@scr?$AA@
??_C@_03A@sfo?$AA@
??_C@_03A@slf?$AA@
??_C@_03A@smi?$AA@
??_C@_03A@sop?$AA@
??_C@_03A@spc?$AA@
??_C@_03A@spl?$AA@
??_C@_03A@sql?$AA@
??_C@_03A@stb?$AA@
??_C@_03A@suc?$AA@
??_C@_03A@tab?$AA@
??_C@_03A@tal?$AA@
??_C@_03A@tcl?$AA@
??_C@_03A@ter?$AA@
??_C@_03A@tfm?$AA@
??_C@_03A@tif?$AA@
??_C@_03A@tlg?$AA@
??_C@_03A@tmp?$AA@
??_C@_03A@tnm?$AA@
??_C@_03A@toc?$AA@
??_C@_03A@tra?$AA@
??_C@_03A@trc?$AA@
??_C@_03A@trn?$AA@
??_C@_03A@tsc?$AA@
??_C@_03A@tsi?$AA@
??_C@_03A@tso?$AA@
??_C@_03A@tup?$AA@
??_C@_03A@txt?$AA@
??_C@_03A@typ?$AA@
??_C@_03A@upd?$AA@
??_C@_03A@upx?$AA@
??_C@_03A@uri?$AA@
??_C@_03A@url?$AA@
??_C@_03A@ver?$AA@
??_C@_03A@vrf?$AA@
??_C@_03A@wrk?$AA@
??_C@_03A@xbf?$AA@
??_C@_03A@xdk?$AA@
??_C@_03A@xdl?$AA@
??_C@_03A@xmc?$AA@
??_C@_03A@xms?$AA@
??_C@_03A@xpm?$AA@
??_C@_03A@xrb?$AA@
??_C@_03A@xrh?$AA@
??_C@_03A@xrl?$AA@
??_C@_03A@zoo?$AA@
??_C@_04A@?$AN?6?$AN?6?$AA@
??_C@_04A@?$CC?$DP?$DO?6?$AA@
??_C@_04A@?2?2?4?2?$AA@
??_C@_04A@?4Dll?$AA@
??_C@_04A@?4dat?$AA@
??_C@_04A@?4dmp?$AA@
??_C@_04A@?4tmp?$AA@
??_C@_04A@?4xml?$AA@
??_C@_04A@?5?$CD?$CFs?$AA@
??_C@_04A@ACC?5?$AA@
??_C@_04A@Beta?$AA@
??_C@_04A@ERR?5?$AA@
??_C@_04A@Init?$AA@
??_C@_04A@NULL?$AA@
??_C@_04A@POST?$AA@
??_C@_04A@REDU?$AA@
??_C@_04A@SHFT?$AA@
??_C@_04A@SOSD?$AA@
??_C@_04A@TRUE?$AA@
??_C@_04A@UTF8?$AA@
??_C@_04A@char?$AA@
??_C@_04A@core?$AA@
??_C@_04A@date?$AA@
??_C@_04A@end$?$AA@
??_C@_04A@file?$AA@
??_C@_04A@help?$AA@
??_C@_04A@html?$AA@
??_C@_04A@http?$AA@
??_C@_04A@java?$AA@
??_C@_04A@ldap?$AA@
??_C@_04A@logs?$AA@
??_C@_04A@open?$AA@
??_C@_04A@prod?$AA@
??_C@_04A@pz?4c?$AA@
??_C@_04A@read?$AA@
??_C@_04A@utf8?$AA@
??_C@_05A@?$CFs?$DN?$CFd?$AA@
??_C@_05A@?$CFs?$DN?$CFs?$AA@
??_C@_05A@?$DMSEQ?$DO?$AA@
??_C@_05A@?4UTF8?$AA@
??_C@_05A@?4utf8?$AA@
??_C@_05A@?5?$FL?$CFd?$FN?$AA@
??_C@_05A@?5?$FL?$CFs?$FN?$AA@
??_C@_05A@?7?7?$CFs?6?$AA@
??_C@_05A@Alpha?$AA@
??_C@_05A@ERROR?$AA@
??_C@_05A@FALSE?$AA@
??_C@_05A@RDBMS?$AA@
??_C@_05A@TRACE?$AA@
??_C@_05A@UTF16?$AA@
??_C@_05A@cache?$AA@
??_C@_05A@close?$AA@
??_C@_05A@edate?$AA@
??_C@_05A@error?$AA@
??_C@_05A@https?$AA@
??_C@_05A@inity?$AA@
??_C@_05A@ltz?4c?$AA@
??_C@_05A@lxglo?$AA@
??_C@_05A@news?3?$AA@
??_C@_05A@ociei?$AA@
??_C@_05A@oradb?$AA@
??_C@_05A@parts?$AA@
??_C@_05A@pz7?4c?$AA@
??_C@_05A@rdbms?$AA@
??_C@_05A@sysdg?$AA@
??_C@_05A@syskm?$AA@
??_C@_05A@usage?$AA@
??_C@_05A@utf?98?$AA@
??_C@_05A@write?$AA@
??_C@_06A@?$DMEID?$DO?6?$AA@
??_C@_06A@?$DMNAME?$DO?$AA@
??_C@_06A@E?$CF?$CL04d?$AA@
??_C@_06A@EPSV?$AN?6?$AA@
??_C@_06A@Host?3?5?$AA@
??_C@_06A@LSFEB1?$AA@
??_C@_06A@LSFEB2?$AA@
??_C@_06A@LSFEB4?$AA@
??_C@_06A@LSFEND?$AA@
??_C@_06A@LSFSB1?$AA@
??_C@_06A@LSFSB2?$AA@
??_C@_06A@LSFSB4?$AA@
??_C@_06A@LSFSB8?$AA@
??_C@_06A@LSFTXT?$AA@
??_C@_06A@LSFUB1?$AA@
??_C@_06A@LSFUB2?$AA@
??_C@_06A@LSFUB4?$AA@
??_C@_06A@LSFUB8?$AA@
??_C@_06A@Oracle?$AA@
??_C@_06A@PASV?$AN?6?$AA@
??_C@_06A@STRING?$AA@
??_C@_06A@Slfgfn?$AA@
??_C@_06A@UTF?916?$AA@
??_C@_06A@buffer?$AA@
??_C@_06A@closed?$AA@
??_C@_06A@frdptr?$AA@
??_C@_06A@gopher?$AA@
??_C@_06A@ldmctx?$AA@
??_C@_06A@ldmmsg?$AA@
??_C@_06A@ldmuid?$AA@
??_C@_06A@lekchk?$AA@
??_C@_06A@lekcrs?$AA@
??_C@_06A@leksli?$AA@
??_C@_06A@lemasi?$AA@
??_C@_06A@lembem?$AA@
??_C@_06A@lemchk?$AA@
??_C@_06A@lemcrs?$AA@
??_C@_06A@lemcss?$AA@
??_C@_06A@lemfri?$AA@
??_C@_06A@lemmic?$AA@
??_C@_06A@lemsic?$AA@
??_C@_06A@lemsiv?$AA@
??_C@_06A@lemsli?$AA@
??_C@_06A@lemtas?$AA@
??_C@_06A@lemtav?$AA@
??_C@_06A@lemtcr?$AA@
??_C@_06A@lemtcs?$AA@
??_C@_06A@lemtec?$AA@
??_C@_06A@lemtev?$AA@
??_C@_06A@lemtic?$AA@
??_C@_06A@lemtiv?$AA@
??_C@_06A@length?$AA@
??_C@_06A@lfiext?$AA@
??_C@_06A@lmserr?$AA@
??_C@_06A@lrmpzp?$AA@
??_C@_06A@lxmeta?$AA@
??_C@_06A@opened?$AA@
??_C@_06A@slficl?$AA@
??_C@_06A@slfidp?$AA@
??_C@_06A@slfigf?$AA@
??_C@_06A@slfign?$AA@
??_C@_06A@slfimp?$AA@
??_C@_06A@slfiop?$AA@
??_C@_06A@slfipa?$AA@
??_C@_06A@slfipn?$AA@
??_C@_06A@slfirb?$AA@
??_C@_06A@slfirf?$AA@
??_C@_06A@slfirn?$AA@
??_C@_06A@slfisk?$AA@
??_C@_06A@slfitn?$AA@
??_C@_06A@slfiwb?$AA@
??_C@_06A@slfiwl?$AA@
??_C@_06A@slfiws?$AA@
??_C@_06A@sysasm?$AA@
??_C@_06A@sysdba?$AA@
??_C@_07A@?$CF?4?$CKs?5?$DN?5?$AA@
??_C@_07A@?$CFs?7?7?$CFs?6?$AA@
??_C@_07A@?$DM?1EID?$DO?6?$AA@
??_C@_07A@?$DM?1SEQ?$DO?6?$AA@
??_C@_07A@?$DMVALUE?$DO?$AA@
??_C@_07A@?d?U?R?U?V?f?U?$AA@
??_C@_07A@COMMENT?$AA@
??_C@_07A@CYCLE?3?6?$AA@
??_C@_07A@LSFDBLP?$AA@
??_C@_07A@LSFFLTP?$AA@
??_C@_07A@LSFTXTP?$AA@
??_C@_07A@ORACORE?$AA@
??_C@_07A@ORA_KEY?$AA@
??_C@_07A@SLNXZPD?$AA@
??_C@_07A@SlfMmap?$AA@
??_C@_07A@SlfOpen?$AA@
??_C@_07A@SlfStat?$AA@
??_C@_07A@UNKNOWN?$AA@
??_C@_07A@WARNING?$AA@
??_C@_07A@charset?$AA@
??_C@_07A@edition?$AA@
??_C@_07A@lekpilx?$AA@
??_C@_07A@lempfrr?$AA@
??_C@_07A@lempfrs?$AA@
??_C@_07A@lempgem?$AA@
??_C@_07A@lempgfm?$AA@
??_C@_07A@lempgmh?$AA@
??_C@_07A@lempgsh?$AA@
??_C@_07A@lempilx?$AA@
??_C@_07A@lempllp?$AA@
??_C@_07A@lemptfr?$AA@
??_C@_07A@lemptfs?$AA@
??_C@_07A@lfife?$CI?$CJ?$AA@
??_C@_07A@lfiff?$CI?$CJ?$AA@
??_C@_07A@lfiln?$CI?$CJ?$AA@
??_C@_07A@lfird?$CI?$CJ?$AA@
??_C@_07A@lfiwr?$CI?$CJ?$AA@
??_C@_07A@lfvopen?$AA@
??_C@_07A@lfvseek?$AA@
??_C@_07A@lhtqm?4c?$AA@
??_C@_07A@lmmfree?$AA@
??_C@_07A@lmmrist?$AA@
??_C@_07A@log?4xml?$AA@
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 342KB - Virtual size: 341KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.trace Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 752B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ