C:\ADE\aime_956679\oracle\plsql\bin\orapls12.dll.pdb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
orapls12.dll
Resource
win7-20240508-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
orapls12.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
orapls12.dll
-
Size
6.1MB
-
MD5
429ffd9e3ea7abb5a6c5575e33a2ec72
-
SHA1
4df6b94c8fd81fd2742f36e05059252abf652d4a
-
SHA256
9d91d8e1dc0cbe00da67eb539fc51278caa905a0217956ca9184b327b0a37ede
-
SHA512
346222e28178734f98415bf88df17ca508b304a1ec588ae1ef0effa2a877900f9568080a320a289acbd2aba77ecc6eb03ccf3d988dc20f35b6c9f93e0a10f614
-
SSDEEP
49152:Hy6WCy20ltUnIRCHG2CfQjer8sVbsjW8lvCsNbfROLy4StpuYgSHoxMPl2vVbcZt:Hy9ltDxAhKcResk5eXb
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource orapls12.dll
Files
-
orapls12.dll.dll windows:5 windows x64 arch:x64
3f1e4cb6864a5b2cc7e3b984fa5ce8fd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
oracore12
lfilini
lfiopn
lfird
lfiwr
lfiflu
lfidel
lfilenn
lfigblsz
lfiren
lpmdone
SlfFpts
SlfFptc
SlfFgtc
SlfFgts
SlfFwrite
SlfUngtc
SlfRemove
lsrsrt
ldxrck
slfpd2f
slfpsb2d
slfpdgt
slfpdlt
slfpd2sb
slfpd2lnx
slfpf2d
slfpsb2f
slfpfgt
slfpflt
slfpf2sb
LdiInterToString
slfplnx2d
slfplnx2f
LdiInterFromStringPrec
LdiInterFromArray
LdiInterMultiply
LdiInterToArray
LdiDateToArray
lfigfn
lstmup
Slfpfn
Slfgfn
slzgetevar
sltstgi
lnxnur
lnxren
lctbval
lctbnam
lstcpn
lfpinit
lcv42b
lbivor
lnxn2cg
lfps2cfe
lfps2cde
LdiDateToLiteral
lfpcf2s
lfpcd2s
slfpfispzero
slfpdispzero
LdiInterCopy
LdiInterFromString
LdiDateToLDX
LdiDateFromString
lfimknam
LdiDateToString
LdiDateFromLDX
lnxnucoptg
lnxcpng
slfps2de
slfpd2s
lnxatn2
lnxqtri
lnxfcng
ldxsen
ldxsti
lnxban
lnxnba
lnxlog
lnxln
lnxcmp
lnxqtra
ldxatz
ldxgtz
lcvb24
lnxsqr
lnxbex
lnxsgn
lnxpow
lnxint
lnxmod
lnxrou
lnxtru
lnxflo
lpminit
lmmfree
lmmrealloc
lmmmalloc
lmmtophp
lnxsni
lnxmin
sltrgftime64
ldxdfd
sltsmnr
sltsmna
sltster
sltsmxd
sltsmxi
sltsini
lstclo
lnxnfng
lnxsca
lnxcopy
Sls8FrText
SlfVfprintf
SlfFflush
SlfFclose
SlfFprintf
SlfFopen
lstprintf
lstlo
ldxstd
ldxdts
slfpd2fs
slfpf2fs
lnxnftg
lnxpflg
ldxdtd
lnxnucg
sltrgftime
sltrgatime64
lfimkpth
lfifpo
lfifno
lficls
lstss
ldxeti
lmebucp
ldxads
ldxftd
LdiInterCompare
LdiDateCompare
ldxcmp
ldxdyf
ldxadm
ldxrnd
ldxtrn
ldxgpc
ldxsbm
ldxnxd
ldxdyn
ldxldd
lnxabs
lnxfpr
lnxneg
lnxdiv
lnxmul
lnxsub
lnxadd
slfpdadd
slfpabs
slfpdneg
slfpddiv
slfpdsub
slfpdmul
slfpfabs
slfpfneg
slfpfdiv
slfpfmul
slfpfsub
slfpfadd
slfpatan2
slfpatan
slfpasin
slfpacos
slfplog
slfpln
slfpexp
slfptanh
slfpsinh
slfpcosh
slfptan
slfpsin
slfpcos
slfpdsqrt
slfpfsqrt
slfpdsgn
slfpdcoerce
slfpfsgn
slfpfcoerce
slfppow
slfprem
slfpfrem
lnxrem
slfpmod
slfpfmod
slfpdfloor
slfpffloor
slfpdround
slfpfround
slfpdtrunc
slfpftrunc
slfpdceil
slfpfceil
slfpdisinf
slfpfisinf
slfpdisnan
slfpfisnan
slfpdeq
slfpfs2d
slfpfeq
slfpfs2f
lnxpfl
LdiParseForOutput
LdiInterToTZ
LdiDateFromLiteral
LdiInterInterConvert
LdiInterExtract
LdiDateExtract
LdiInterToTN
LdiTimeZoneShift
LdiDateDateConvert
LdiInterFromTZ
lstczpad
LdiDateDateOverlap
LdiInterInterOverlap
LdiDateInterOverlap
LdiParseForInput
LdiInterFromNumber
LdiDateDateSubtract
LdiInterInterSubtract
LdiDateInterSubtract
LdiDateInterSubtractTZISO
LdiInterInterAdd
LdiDateInterAddTZISO
LdiDateInterAdd
sLdiGetDate
LdiInterDivide
ldxite
sldxgd
LdiDateFromArray
LdiDateCopy
slfps2fe
slfpf2s
ldxsto
LdiInitDef
slfpf2lnx
lcvb2w
oranls12
lxsCntChar
lxsCpStr
lxhcsn
lxsCmpStr
lxsCnvIntToNumStr
lxhlinfo
lxhlmod
lxgratio
lxgcnv
lxsulen
lmsaicmt
lmsagbf
lmsatrm
lxhninfo
lxsCntByte
lxsCnvCase
lxhcnv
lxhlod
lxcsCompose
lxcsDeCompose
lxsRepStr
lxhchtoid
lxsStrCol
lxsCnvEqui
lxhname2id
lxsCntExc
lxnpdp
lxmopen
lxoCpToOp
lxsTrnStr
lxhnmod
lxmcpen
lxmc2wx
lxmfwdx
lxoWriWChar
lxsCnvNumStrToInt
lxoSchPat
lxmral
lxsCatStr
lxscop
lxscat
lxoCpChar
lxoWriChar
lxhci2h
lxmctex
lxsCntXExc
lxgu2t
lxgt2u
lxhnsize
lxhh2ci
lxmr2w
lxwctex
lxwpunx
lxwdigx
lxsCpFrWide
lxGetGloPtr
lxoCnvCh2Wide
lxhschar
lxhnlangid
lxhLaToId
lxhasc
lxCmpStr
lxoCpStr
lxoCnvCase
lxmfwtx
lxwalpx
lxwc2ux
lxwalnx
lxoCmpNStr
lxoSkip
oraclient12
kguqgdl
OCIPErrorClear
kguinit
kgup_iprocess
kgup_thread_connect
kguusec
kguucac
kguutrb
kguutrr
kgup_dthread
kguucad
kguused
kguutrc
kgup_sf_get
kgup_dprocess
kguterm
kguqlod
kgumsfp
kgussdt
kgupdot
kgupdfi
OCIStmtExecute
OCIBindByName
OCIStmtPrepare
kpufhndl0
OCIErrorGet
OCIHandleAlloc
kguuc1s
kguudes
kguuudg
kguusws
kguuseg
skgusst
skguwrfn
kguqot
kguqpvn
kguqpcd
kguqlgt
kguqrls
kguqlck
kguqdte
kguqdia
kguqloa
kguqdsc
kguqcls
kguqfch
kguqexe
kguqdfn
kguqbnd
kguqprs
kguqopn
kguqgdn
OCIAttrGet
skgudmp
skgupec
skgufls
skguout
skguwrf
kgupfhl
kgupfcc
kgupfqh
kgupfip
kgupfg2
kgupffp
kguplcpt
kgucrsh
kgupftc
kgupfis
kgupfic
kgupfgi
kgupfwa
kgupffl
kgupfdm
kgupfpe
kgupdfb
kgupdoa
kgupdwfn
kgupdwf
kgupff2
kgupfgp
kguugpp
kgupfia
kgupfps
kgupfgl
oracommon12
kpcddlen
kpcdtmasg
kpcitvasg
kpcdasg
ttcdty2str
kpcdalod
kpcdalo
kpcdu2dd
kpcdcmp
kpcdc2d
kpcdd2c
kpcdini
vsnnum
kpccapCTarr
kptrget
kptrgetv
kptrcmf
kptrrdt
kptrput
kptrputv
kpcxc2r
orageneric12
kghfrh
kglHeapInitialize
kghalo
kgh_mark_area
kgesin
kghrsp
kgiscn
kglbrk
kglUnPin
kglUnLock
kglgob
kgimal
kglpin
kglget
pmuctsz
pmucins
plsm0vc_rsz
skge_sign_fr
kge_reuse_guard_fr
kge_push_guard_fr
kge_pop_guard_fr
kgesic2
kgersel
kgeasnmierr
kgerec1
skgoprint
kgeresl
kgamgub4
kgampub1
kgampub4
kgampsb4
kgampub8
pmucsiz
kgamgub1
kodpgof
pmuoiin
pmuoinx
pmuoigt
koptiinit
koptinext
koptgcmd
kollgnm
kolfexst
kolfisop
kolfglen
kollgdt2
kollgform
kolectxini
kolepini
kole_length
pmucvfst
pmucvget
pmucfst
pmucvnxt
pmucnxt
pmucvins
kgekeep
pmucvdel
pmucdel
kge_is_resig_mandatory_errframe
plsm0ra_rsz
kgedecl
kgghtInitH
kgerbc3
kglhfr
kgldtc
kgldtr
kgldtg
kgghtFindCB
qcdfg_deps_del
qcdfg_deps_check
qcdfg_deps_to_kgl
qcdfg_deps_init
kglpGetNumParams
kglpGetNthParam
kge_ba_unhook
kgeisermsg
kgegec
kgghtDestroy
dbgdChkEventIntV
kglHandleParent
kglnao
kocbgd
kohsscat
kghucreatepool
kghugetuds
kocedd
kghlen
kghualloc
kghuwrlength
kghufree
kglpGetParam
kgldtn
kggmd5Update
kggmd5Finish
kghmemdmp
kollrsz
kollasg
kotitpro
kocpin
kolrcpy
kotclty2
pmuocpy
pmucpcpy
pmucfre
koptgabp
kolooob
koiofre
koiodes
koloocp
koptgna
koptlen
kopeaof
kolcget
kolcins
slgtd
kghssgai
kglIsObjectVersionable
kgiinr
kgiPinObject
kgiinp
kgiinb
kgerec0
pmuona_null_activate
kghssgmm
kodmgcn
kohfrr
kgminitsis
kopodst
kpgdcd
kghinf_cmt
kopopkcvt
kgiind
khpgPrepareToPush
khpgPush1
khpgMemoryUsage
kohalc
pesld07_Flush_Cache
dbgtCtrl_intEvalCtrlEvent
dbgtTrc_int
pesld02_Map_Object
pesld09_XREF_Instance
dbgtCtrl_intEvalTraceFilters
pesld20_Get_Validity_Criteria
pesld19_Validity_Criteria_Check
kgavgpa_get_poll_address
kgllka
kgiins
kgscReleaseCursorGroup
kgidel
kgerec3
szlcmp
szlglb
szllub
kollalop
kollfre
kollsnm
kole_n2len
kole_substr
kole_instr
kole_concat
kole_pad
kole_case
kole_trim
kole_like
kole_nvl
kole_replace
kole_convert
kolttfr
kollequ
kollfred
kole_comp
kgscIsCursorOpen
kgiiterstart
kgiiternext
pmuclst
pmucexi
pmucprv
pmuctrmall
pmucvdrng
pmuctrm
pmucvalid
pmucvlst
pmucvexi
pmucvprv
kgerin
kglrtg
kgscGetCursor
kohrsm
kgscReleaseACursor
khpgPop1
pmusgel_Get_Element
pmucget
pmusise_Insert_Element
pmucvchkey
koptiscoll
koptgettoflags
kghssaproc
kod2ppic
kghssgfr
kgegen
kgegep
kgereml
kgebem
kgemem0
kollgsz
kole_concat_varg
kolrequ
kole_l2l
pmucstrmall
pmuorinit
kotisanc
koiocop
kocunp
skgminit
skgmqprvtmaxalloc
skgmreset
pmuocon
kocstc
koionew
pmucmeq
pmucmex
pmucmis
pmucmin
pmucmmem
pmucmset
pmucmsub
pmucmun
kgghash
kgghstfel_wfp
kgghstgnel_wfp
kgghstine_wfp
kgghstdle_wfp
kgghstcrt
kole_rxlike
kole_rxinstr
kole_rxsubstr
kole_rxreplace
kohlnm
kgghstdestr_wfp
kole_rxcount
kgemem2
kgetop
kgegbc
kgedbcl
kgeprm
kgerbc2
kgidlt
kgeric0
kgerbc1
kgerbc0
kgitrc
slrac
kgscFreeCachedCursor
kglpnp
kgerec2
kgebav
kglHandleContainerId
kotgtpo
kotgtoid
kgesec1
kotgHashCode
kothcequ
koptisopq
kgmgtfd
kgldon
kglpim
kgimfr
kole_clob_imp_conv
kggrandinit
kggisaac
kgghtAddCB
kglchk3
kgldten
kglpini
kglalt
kglswp
kglchk4
kgldta
kglini
kglrtl
kghmrk
kglCmpHot
kgldmc
kglDeleteLock
kglSetHandleStatus
kglpSetParam
kgldti
kglrdti
kgltti
kglxti
kghstack_alloc
kghstack_free
kglHandleStatus
kpgenp
kgldpo
kglgtbo
kglPinMode
kgldtg0
kgldmp
pesld10_Undo_XREF_Instance
kgmsiscvp
kohgetuds
kghubigallasp
kghubiggetheapsz
dbgc_rls_diagctx
kpummTLSGDBGC
dbgc_get_diagctx
dbgrgpi_get_prodinst_id
dbgrgbd_get_basedir_default
dbgrgad_get_adrbase_directory
dbgc_new_diagctx
dbgc_iset_adr_par1
dbgc_iset_adr_enable
dbgc_init_all
kgsdfmd
pesld01_Init_Instance
khpgStop
khpgInit
kgireg
kgscClientRegister
kgavdh_declare_handler
pesld00_Init_Process
pesld13_Free_Instance
khpgFree
kghnsp
kghdmp
kohgus
kohdmp
pesld06_Free
kgesec2
kgesec3
kgesec4
kgcdinit
kgcddo
kgcdend
kgccinit
kgccdo
kgccend
kglpdn
kglpgpv
kglname
kgiPinDeleteCbk
skgmmprt
kotcty
kotftyi
kodinwp
kocbeg
kotbeg
kotpcty
kotaty
kotend
kocend
kotaat
kotasp
kotaop
kotspa
kotscc
kotsitbl
kotadom
kotsstr
kotsnum
kotssc
kotslob
kotsdtm
kotsitv
kotsab
kotgbxflg
kotgtsch
kotssyn
kotsrc
kotame
kotapa
sltln
qcdfg_deps_add
kglsget
kgghash2
kgghtRemoveCB
qcdfg_delta_add_shift
qcdfg_delta_add_change
kgghtIterInit
kgghtIterNext
kgldtf
qcdlgcc
kgldtp
kgldtin
kglnone
kgldtv
kpgenc
kgapcd_check_debuggability
kgapcbd_check_block_debuggability
kglchk1
kgavgp_go_process
kgavss_stacklet_starting
kgavsd_stacklet_done
kglComputeHash
kgamgcp_get_current_position
kgamscp_set_current_position
kgampcpy
kgghstdlmap_wfp
pmuonp_null_propagate
pmuogabi
skgdsinit
skgdsterm
skgdsgframe
kole_ba2l
kole_l2ba
pmucpcon
pmucrtti
kgrdr2ec
kgrdc2r
pmucapp
pmuccpyn
qcdotbi
qcdopint
kotgtme
kgghtIterDestroy
dbgtGrpB_int
dbgtGrpE_int
dbgtWrf_int
kglidinit
kgliddna
kglpGetDefault
kglpGetClientValue
kglidgsig
kglidins
kglidgctx
kglidsctx
kglaeti
kglaeai
kglavtal
kglavti
kglarini
kglairal
kglaeval
kglaeaal
kglasi
kglain
kglaipi
kglaici
kotgetlenhlpr
kotgethelper
kothmthnm
kothsigsz
kothstrinsig
kglaevi
kglaiji
slcpums
slgcsms
qciunprs
kopldsgen
koplsize
koptgen
koptnumber
koptvc2_sql
kopogote
koptcattr
koptcadt
koptadelt
koptupt
koptfree
koptraw
kotgttds
kotgtntds
kopuaasm
kopoget
koptbfile
koptbdouble
koptbfloat
kopt32sint
koptblob
koptchar_sql
koptclob
koptdate
koptcollection
koptassocarray
koptinterval
koptref
kopttime
kopttztime
koptstamp
koptimptzstamp
kopttzstamp
kopturowid
kopt16sint
kopogen
kopcdgen
kopcldgen
koptreset
kohrsc
korfccpy
koptprtds
koptequal2
koptequal
kopo2cachecpc
kopepic
kopocpc
kopepwlen
kopeupic
kopi2dmhdl
oraslax12
pxngoto
pxnspus
pxnrcov
pxnmstt
pxnmove
pxnrcln
orasnls12
lxkRegexpErr
lxkToUL
lxkAsciistr
lxkTrim
lxkInstr
lxkLike
lxkPad
lxkAscii
lxkUnistr
lxkTranslate
lxkSubstr
lxkRegexpFree
lxkRegexpCount
lxkRegexpSubstrNSub
lxkChr
lxkRegexpComp
lxkRegexpReusable
lxkRegexpLike
lxkRegexpInstrNSub
lxkRegexpReplace
oravsn12
vsnstr
vsnsta
oraplp12
stdicd_i
orannzsbb12
ztub64e
ztub64ecr
ztch
ztcr2ub4
ztub64d
orauts
GetProcAddress
longjmp
FreeLibrary
GetCurrentThreadId
Sleep
LoadLibraryA
kernel32
IsDebuggerPresent
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlUnwindEx
EncodePointer
DecodePointer
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlCaptureContext
msvcr100
strncpy
sprintf
_setjmp
strlen
memset
memcpy
strcmp
strcpy
atoi
memchr
strpbrk
strncat
_vsnprintf
_localtime64
_time64
asctime
isalnum
isalpha
sscanf
vsprintf
memmove
isupper
strspn
__iob_func
fprintf
_snprintf
fwrite
fread
feof
strcspn
fopen
vfprintf
fputs
putc
fclose
fflush
getc
fgets
getenv
strtok
ungetc
strchr
toupper
isspace
isdigit
strstr
_ctime64
memcmp
_malloc_crt
_initterm
_initterm_e
free
_encoded_null
_amsg_exit
__C_specific_handler
__CppXcptFilter
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
__crt_debugger_hook
strncmp
Exports
Exports
bam_free
bam_init
bamchk
bamini
bamnew
bamrlc
bamsub
hepcac
hepcas
hepcra
hepcri
heprel
hepsca
hepsci
hepsda
hshget
hshuid
lisfst
lislst
ociepacm
ocieperr
ociepgoe
ociepmsg
ociepvaa
ociepvaga
ociepvagt
parchk
parini
pbb_lu_to_plio
pbbdelete
pbbdisable
pbbenable
pbbfget
pbbfrline
pbbfset
pbbget
pbbgflu_get_frame_lu
pbbicd_i
pbbline
pbblineu
pbblu_info
pbboerdelete
pbboerset
pbbset
pbbtfline
pbcdiana
pbjfnlsget
pbjfnlsset
pbp3g_3gl_fvec
pbpopcode
pbprun_finish
pbprun_pause
pbprun_resume
pbprun_start
pbt3g_3gl_fvec
pbtevent
pbvdrp
pbvfval
pbvgetscalar
pbvlspkgs
pbvpvals
pbvset
pbvsetscalar
pbvsval
pci_check_ccflags
pci_copy_idl
pci_fast_validate
pci_generate_table_tdo
pci_parse_with_context
pci_plscope_enabled
pci_table_toid
pci_toid_by_index
pci_toid_by_name
pciadt
pcibck
pcicca_create_argdesc
pciccc_call_c
pcicmp
pcicmp0
pcicmp2
pcicms
pcicog
pcidia
pcidia2
pcidpu
pciffc
pcigad
pcigep
pcigfp_get_func_properties
pcigld
pcijpjs_parse_java_signature
pcikar
pcimpr
pcincg_compile
pcincg_destroy_ncg_context
pcincg_make_ncg_context
pcipmis_pick_match_in_scope
pcipp
pcisem
pcisem2
pcisnm
pcisyn
pcmmsg
pdechk
pdtpde_grammar
pdttdlget
pdw2F01_Assignment
pdw4F02_Coerce
pdw4F06_Generate_Move
pdw4F11_Make_Index_Instruction
pdy4M21_SQLTs
pdz2M30_Allocate
pdz2M50_PLSP
pdz2M63_Node_Attr
pdz2M89_Increment_Loop_Level
pdz2M8a_Decrement_Loop_Level
pdz2M8b_Loop_Level
pdz4M07_Connect
pdz4M13_Add_IL_Instruction
pdz4M15_Label
pdz4M16_Link
pdz4M61_Create
pdz7M00_Make
pdz7M02_Make_Temp
pdz7M10_Operand
pdz7M42_Conversion_Opcode
pdz7M43_Operation_Name
pdz8M14_Is_Temporary
pdz8M33_Make_Boolean
pdz8M36_Make_Local_Variable
pdz8M41_Make_Null_Constant
pdz8M42_Make_Number
pdz8M61_Make_Number
pdz8M63_Make_Builtin_Exception
pdz8M77_Logical_Type
pdz8M92_Vector_Append
pdz8Ma1_Is_Bind_Var
pdz8Ma2_Bind_Order
pdz8Maa_Make_Vector
pdz8Mb0_Make_String
pdz8Mb3_Vector_Get
pdz8Mc6_Make_Binary_Float
pdz8Mc7_Make_Binary_Double
pdz8Mg1_Make_SQL_Insert_Desc
pdz8Mw5_No_Bind_Var
pdz9M08_Type_Kind
pdz9Mcf_Make
pdz9Mcg_Make
pdz9Mch_Make
pdz9Mci_Make
pdz9Mcj_Make
pdz9Mck_Make
pdz9Mcl_Make
pdz9Mcm_Make
pdz9Mcn_Make
pdz9Mco_Make
pdz9Mcp_Make
pdz9Mcq_Make
pdz9Mcr_Make
pdz9Mcs_Make
pdz9Mct_Make
pdz9Mcu_Make
pdz9Mcv_Make
pdz9Mcw_Make
pdz9Mcx_Make
pdz9Mcy_Make
pdz9Mcz_Make
pdz9Mda_Make
pdz9Mdb_Make
pdz9Mdc_Make
pdz9Mdd_Make
pdz9Mde_Make
pdz9Mdf_Make
pdz9Mdg_Make
pdz9Mdh_Make
pdz9Mdi_Make
pdz9Mdj_Project_Base
pdzeM03_Insert
pdzfM01_Create
pdzfM03_Insert
pdzfM06_Lookup
pdzfM27_Insert
pdzfM28_Lookup
pdzgM01_Create
pdzgM02_Create
pdzgM05_Push
pdzgM06_Push
pdzgM07_Get
pdzgM08_Get
pdzgM18_Count
peflcc_CloseCache
peflclose
peflgfa
peflic_InitCache
peflinit
peflload
peflunload
pefskgiobject
pefsperc
pefspkgdur
pefsplskgp
pefsre_msg_alrdy_kged
pegckd_convert_kopm_to_dty
pegetcharcs
pegetclobcs
pegetlobmdt
pegiadt
pegich
pegida
pegidatetime
pegidb
pegifl
pegiinterval
peginclob
peginu
pegiopq
pegipt
pegirc
pegisc
peglusrc
pegnichar
pegtfo
pegtnfo
pegttrec
pegttri
pegttrn
pegttrx
pegttth
peiabo
peibpexception
peibplibvals
peibpstack_info
peici_connum
peicip_chk_inj_parms
peiclr
peicnt
peicnts
peicrc
peicrs
peidcs
peidmp
peidsl
peidslu
peidssa
peidstdn
peidstdp
peidxblds
peidxdes
peidxeoc
peidxexe
peidxinc
peidxino
peidxrex
peidxublds
peiet_execute_trigger
peifeb
peifum
peigpdur_get_pkg_duration
peiinbd
peiinihbndst
peiinr
peiinspbn
peiiob
peimrin
peipro
peiptd_prepare_to_deinst
peirai
peirccla_close_all
peirep
peirep_suspendable
peireststks
peirun
peirve
peisavestks
peisnd
peisus
peitcs
pemxlch
pen_BCTR
pen_CALL_SETUP
pen_CTRLC
pen_FIELDS
pen_ICAL
pen_INST
pen_JMPBUF
pen_JMPBUF_ALLOC
pen_PCLABELGET
pen_PCLABELSET
pen_UNHNDLD
pen_XCAL_i
penget_Get_NLUI
penglur
pengnl_Get_NLUI
penslur
percrc
perdcs
perpma
perpmd
pes2dsi
pes3te
pes3tm
pes3tp
pes3ts
pes_dummy
pesacos
pesacosd
pesadi
pesaii
pesasc
pesasin
pesasind
pesastr
pesatan
pesatand
pesati
pesatn2
pesatn2d
pesatz
pesbtd
pesbtdn
pesc2d
pesc2date
pesc2dbl
pesc2dsi
pesc2flt
pesc2n
pesc2tim
pesc2tsp
pesc2ymi
pescdt
pescei
pesceid
pesceif
peschr
pescnv
pescomp
pescos
pescosd
pescsh
pescshd
pesctm
pescts
pesd2c
pesdbl2c
pesdbtz
pesdcmp
pesdtm2c
pesdvin
pesefd
pesefdrvc2
pesefdt
pesefi
pesexp
pesexpd
pesflo
pesflod
pesflof
pesflt2c
pesfnm
pesftz
pesguid
pesicp
pesinc
pesinf
pesinfd
pesinff
pesist
pesist2
pesist4
pesistc
pesitv2c
peslbem
peslblb
peslbln
peslccnv
peslcct
peslcem
peslcib
peslcin
peslcl2
peslclb
peslclk
peslclm
peslcln
peslclp
peslclr
peslcnl
peslcnlr
peslcnup
peslcrl
peslcrm
peslcrp
peslcsb
peslcst
peslctr
peslcup
peslen2
peslen4
peslenc
pesleq2
pesli2
pesli22
pesli42
peslic2
peslik
peslik2
peslik4
peslikc
peslle2
peslle3
pesllt2
pesllt3
pesln
peslnd
peslog
peslogd
peslow
peslpd
pesltr
pesmcnt
pesmie
pesmni
pesmod
pesmodd
pesmodf
pesmriternext
pesmritersize
pesmriterstart
pesmsiternext
pesmsitersize
pesmsiterstart
pesn2c
pesn2dsi
pesn2ymi
pesnand
pesnanf
pesnwt
pesodd
pesodi
pesoiid
pesoiit
pesoti
pesott
pespow
pespowd
pesrem
pesremd
pesremf
pesrep
pesrnd
pesrndd
pesrndf
pesrndi
pesror_return_ole_record
pesrpd
pesrtr
pessddds
pessddym
pessdi
pessdt
pessdx
pessexu
pessgn
pessgnd
pessgnf
pessgni
pessii
pessin
pessind
pessnh
pessnhd
pessqt
pessqtd
pessqtf
pessti
pessts
pessttds
pessttym
pesstz
pessub
pessub2
pessub4
pessubc
pessysctx2
pessysctx3
pestan
pestand
pestnh
pestnhd
pestrim
pestru
pestrud
pestruf
pestrui
pestzo
pesuen
pesupp
pesustr
pesxco
pesxcp
Sections
.text Size: 4.9MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 768B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 107KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ