Static task
static1
Behavioral task
behavioral1
Sample
a9cb89ab57d119d221366f2f1d0879a0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a9cb89ab57d119d221366f2f1d0879a0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
a9cb89ab57d119d221366f2f1d0879a0_NeikiAnalytics.exe
-
Size
1.6MB
-
MD5
a9cb89ab57d119d221366f2f1d0879a0
-
SHA1
e14ffb040d57795a4469047d11e0b8ba688848a6
-
SHA256
9cbc30b2172abf4c0cdde9f4a60a79fcbd08593b8c4ea07d34e32ca3e26a9945
-
SHA512
a0e484995c7cf98732854e289c89daea6f0c23601a93e8ce3a7f532fed87929f98be063ea4090ccce694ec3b0c191cb61cdb1bac1a429fa0a347b4a19864e269
-
SSDEEP
24576:E4x8lc8tiS5sLV/kGdckRRXXQz+in61P6RmZ0F+:qSV/Xdo6VD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9cb89ab57d119d221366f2f1d0879a0_NeikiAnalytics.exe
Files
-
a9cb89ab57d119d221366f2f1d0879a0_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
70b203306fe5f73b9feb5176445d5228
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
aimp3
@System@initialization$qqrv
@System@Finalization$qqrv
@System@LoadResString$qqrp20System@TResStringRec
@System@TInterfacedObject@_Release$qqsv
@System@TInterfacedObject@_AddRef$qqsv
@System@TInterfacedObject@QueryInterface$qqsrx5_GUIDpv
@System@TInterfacedObject@NewInstance$qqrv
@System@TInterfacedObject@BeforeDestruction$qqrv
@System@TInterfacedObject@AfterConstruction$qqrv
@System@@IntfAddRef$qqrx45System@%DelphiInterface$t17System@IInterface%
@System@@IntfCast$qqrr45System@%DelphiInterface$t17System@IInterface%x45System@%DelphiInterface$t17System@IInterface%rx5_GUID
@System@@IntfCopy$qqrr45System@%DelphiInterface$t17System@IInterface%x45System@%DelphiInterface$t17System@IInterface%
@System@@IntfClear$qqrr45System@%DelphiInterface$t17System@IInterface%
@System@RegisterModule$qqrp17System@TLibModule
@System@@DynArrayClear$qqrrpvpv
@System@@DynArrayHigh$qqrv
@System@@DynArrayLength$qqrv
@System@@_lldiv$qqrv
@System@@_llmul$qqrv
@System@@CopyRecord$qqrv
@System@@FinalizeArray$qqrpvt1ui
@System@@FinalizeRecord$qqrpvt1
@System@@InitializeRecord$qqrpvt1
@System@Pos$qqrx20System@UnicodeStringt1
@System@@UniqueStringU$qqrr20System@UnicodeString
@System@@UStrCatN$qqrv
@System@@UStrCat3$qqrr20System@UnicodeStringx20System@UnicodeStringt2
@System@@UStrCat$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrSetLength$qqrr20System@UnicodeStringi
@System@@WStrFromUStr$qqrr17System@WideStringx20System@UnicodeString
@System@@UStrFromWStr$qqrr20System@UnicodeStringx17System@WideString
@System@@UStrFromWArray$qqrr20System@UnicodeStringpbi
@System@@UStrFromArray$qqrr20System@UnicodeStringpci
@System@@UStrFromPWChar$qqrr20System@UnicodeStringpb
@System@@UStrFromPChar$qqrr20System@UnicodeStringpc
@System@@UStrFromWChar$qqrr20System@UnicodeStringb
@System@@UStrFromPWCharLen$qqrr20System@UnicodeStringpbi
@System@@UStrToPWChar$qqrx20System@UnicodeString
@System@@UStrLAsg$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrAsg$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrArrayClr$qqrpvi
@System@@UStrClr$qqrpv
@System@@UStrAddRef$qqrpv
@System@@WStrAddRef$qqrr17System@WideString
@System@Pos$qqrx17System@WideStringt1
@System@@WStrDelete$qqrr17System@WideStringii
@System@@WStrCopy$qqrx17System@WideStringii
@System@@WStrEqual$qqrv
@System@@WStrCatN$qqrv
@System@@WStrCat3$qqrr17System@WideStringx17System@WideStringt2
@System@@WStrCat$qqrr17System@WideStringx17System@WideString
@System@@PWCharLen$qqrpb
@System@@WStrLen$qqrx17System@WideString
@System@@WStrToPWChar$qqrx17System@WideString
@System@@WStrFromLStr$qqrr17System@WideStringx27System@%AnsiStringT$us$i0$%
@System@@WStrFromWArray$qqrr17System@WideStringpbi
@System@@WStrFromPWChar$qqrr17System@WideStringpb
@System@@WStrFromPChar$qqrr17System@WideStringpc
@System@@WStrFromWChar$qqrr17System@WideStringb
@System@@WStrFromPWCharLen$qqrr17System@WideStringpbi
@System@@WStrFromPCharLen$qqrr17System@WideStringpci
@System@@WStrLAsg$qqrr17System@WideStringx17System@WideString
@System@@WStrAsg$qqrr17System@WideStringx17System@WideString
@System@@WStrArrayClr$qqrpvi
@System@@WStrClr$qqrpv
@System@@LStrSetLength$qqrv
@System@@LStrDelete$qqrv
@System@@LStrCopy$qqrv
@System@@UniqueStringA$qqrr27System@%AnsiStringT$us$i0$%
@System@@LStrToPChar$qqrx27System@%AnsiStringT$us$i0$%
@System@@LStrCatN$qqrv
@System@@LStrCat3$qqrv
@System@@LStrCat$qqrv
@System@@PCharLen$qqrpc
@System@@LStrLen$qqrx27System@%AnsiStringT$us$i0$%
@System@@LStrFromWStr$qqrr27System@%AnsiStringT$us$i0$%x17System@WideStringus
@System@@LStrFromArray$qqrr27System@%AnsiStringT$us$i0$%pcius
@System@@LStrFromPWChar$qqrr27System@%AnsiStringT$us$i0$%pbus
@System@@LStrFromPChar$qqrr27System@%AnsiStringT$us$i0$%pcus
@System@@EnsureAnsiString$qqrr27System@%AnsiStringT$us$i0$%us
@System@@InternalUStrFromLStr$qqrr20System@UnicodeStringx27System@%AnsiStringT$us$i0$%
@System@@LStrFromPCharLen$qqrr27System@%AnsiStringT$us$i0$%pcius
@System@@LStrAsg$qqrpvpxv
@System@@LStrArrayClr$qqrpvi
@System@@LStrClr$qqrpv
@System@@Halt0$qqrv
@System@@InitWideStrings$qqrv
@System@@InitResStringImports$qqrv
@System@@StartExe$qqrp23System@PackageInfoTablep17System@TLibModule
@System@@TryFinallyExit$qqrv
@System@@DoneExcept$qqrv
@System@@RaiseAgain$qqrv
@System@@RaiseExcept$qqrv
@System@@HandleFinally$qqrv
@System@@HandleOnException$qqrv
@System@@HandleAnyException$qqrv
@System@@BeforeDestruction$qqrp14System@TObjectzc
@System@@AfterConstruction$qqrp14System@TObject
@System@@ClassDestroy$qqrp14System@TObject
@System@@ClassCreate$qqrp17System@TMetaClasso
@System@TObject@Dispatch$qqrpv
@System@TObject@BeforeDestruction$qqrv
@System@TObject@AfterConstruction$qqrv
@System@TObject@DefaultHandler$qqrpv
@System@TObject@ToString$qqrv
@System@TObject@SafeCallException$qqrp14System@TObjectpv
@System@@FindDynaInst$qqrv
@System@@CallDynaInst$qqrv
@System@@AsClass$qqrp14System@TObjectp17System@TMetaClass
@System@@IsClass$qqrp14System@TObjectp17System@TMetaClass
@System@TObject@GetHashCode$qqrv
@System@TObject@Equals$qqrp14System@TObject
@System@TObject@Free$qqrv
@System@TObject@$bdtr$qqrv
@System@TObject@$bctr$qqrv
@System@TObject@FreeInstance$qqrv
@System@TObject@NewInstance$qqrv
@System@TObject@ClassName$qqrv
@System@@FillChar$qqrpvib
@System@@AbstractError$qqrv
@System@@TRUNC$qqrv
@System@@ROUND$qqrv
@System@Sin$qqrxg
@System@Cos$qqrxg
@System@Get8087CW$qqrv
@System@Set8087CW$qqrus
@System@UpCase$qqrb
@System@Random$qqrxi
@System@Randomize$qqrv
@System@Move$qqrpxvpvi
@System@@FreeMem$qqrpv
@System@InitProc
@System@IsLibrary
@System@MainThreadID
@$xp$24System@TInterfacedObject
@System@TInterfacedObject@
@$xp$17System@IInterface
@$xp$14System@TObject
@System@TObject@
@$xp$14System@Variant
@$xp$17System@AnsiString
@$xp$17System@WideString
@$xp$13System@string
@$xp$7Integer
@$xp$7Boolean
@Types@Bounds$qqriiii
@Types@OffsetRect$qqrr11Types@TRectii
@Types@IsRectEmpty$qqrrx11Types@TRect
@Types@PtInRect$qqrrx11Types@TRectrx12Types@TPoint
@Types@Rect$qqriiii
@$xp$11Types@TRect
@$xp$12Types@TPoint
@Aimpcore@TAIMPCore@Initialize$qqrv
@Aimpcore@TAIMPCore@Finalize$qqrv
@Aimpcore@TAIMPCore@CheckForRunningCopy$qqrv
@Aimpcore@IsMultiUser$qqrv
@Aimpcore@TAIMPCore@
@Aimpcoreconfig@initialization$qqrv
@Aimpcoreconfig@Finalization$qqrv
@Aimpcoreconfig@GlobalConfig$qqrv
@Aimpcoreconfig@ConfigGetPath$qqri
@$xp$30Aimpsdkaddons@IAIMPAddonPlugin
@Aimpsdkaddons@IID_IAIMPAddonsPlaylistStrings
@Aimpbasesysutils@initialization$qqrv
@Aimpbasesysutils@Finalization$qqrv
@Aimpbasesysutils@TAIMPFindFileInfo@GetFullFileName$qqrv
@Aimpbasesysutils@TAIMPIniFile@SetSectionData$qqrx17System@WideStringt1
@Aimpbasesysutils@TAIMPIniFile@GetSectionData$qqrx17System@WideString
@Aimpbasesysutils@TAIMPIniFile@ReadFont$qqrx17System@WideStringt1p14Graphics@TFont
@Aimpbasesysutils@TAIMPIniFile@ReadColor$qqrx17System@WideStringt115Graphics@TColor
@Aimpbasesysutils@TAIMPIniFile@WriteInteger$qqrx17System@WideStringt1i
@Aimpbasesysutils@TAIMPIniFile@WriteFloat$qqrx17System@WideStringt1xd
@Aimpbasesysutils@TAIMPIniFile@WriteBool$qqrx17System@WideStringt1o
@Aimpbasesysutils@TAIMPIniFile@WriteRect$qqrx17System@WideStringt1rx11Types@TRect
@Aimpbasesysutils@TAIMPIniFile@ReadRect$qqrx17System@WideStringt1
@Aimpbasesysutils@TAIMPIniFile@ReadSection$qqrx17System@WideStringp33Aimpbasesysutils@TAIMPStringListW
@Aimpbasesysutils@TAIMPIniFile@ReadFloat$qqrx17System@WideStringt1xd
@Aimpbasesysutils@TAIMPIniFile@ReadBool$qqrx17System@WideStringt1o
@Aimpbasesysutils@TAIMPIniFile@ReadStream$qqrx17System@WideStringt1p15Classes@TStream
@Aimpbasesysutils@TAIMPIniFile@SectionExists$qqrx17System@WideString
@Aimpbasesysutils@TAIMPIniFile@ValueExists$qqrx17System@WideStringt1
@Aimpbasesysutils@TAIMPIniFile@LoadFromResources$qqruix17System@WideStringpb
@Aimpbasesysutils@TAIMPIniFile@DeleteKey$qqrx17System@WideStringt1
@Aimpbasesysutils@TAIMPIniFile@RenameSection$qqrx17System@WideStringt1
@Aimpbasesysutils@TAIMPIniFile@RenameKey$qqrx17System@WideStringt1t1
@Aimpbasesysutils@TAIMPIniFile@DeleteSection$qqrx17System@WideString
@Aimpbasesysutils@TAIMPIniFile@GetSectionName$qqri
@Aimpbasesysutils@TAIMPIniFile@GetSectionCount$qqrv
@Aimpbasesysutils@TAIMPIniFile@Clear$qqrv
@Aimpbasesysutils@TAIMPIniFile@Assign$qqrp29Aimpbasesysutils@TAIMPIniFile
@Aimpbasesysutils@TAIMPIniFile@$bctr$qqrx17System@WideStringo
@Aimpbasesysutils@TAIMPStringListW@LoadFromFile$qqrx17System@WideString36Aimpbaseencoding@TAIMPStringEncoding
@Aimpbasesysutils@TAIMPStringListW@SetCapacity$qqri
@Aimpbasesysutils@TAIMPStringListW@GetString$qqri
@Aimpbasesysutils@TAIMPStringListW@GetCount$qqrv
@Aimpbasesysutils@TAIMPStringListW@GetObject$qqri
@Aimpbasesysutils@TAIMPStringListW@SortLogical$qqrv
@Aimpbasesysutils@TAIMPStringListW@Sort$qqrv
@Aimpbasesysutils@TAIMPStringListW@Sort$qqrpqqriip33Aimpbasesysutils@TAIMPStringListW$i
@Aimpbasesysutils@TAIMPStringListW@FreeDataObjects$qqrv
@Aimpbasesysutils@TAIMPStringListW@IndexOfObject$qqrpx14System@TObject
@Aimpbasesysutils@TAIMPStringListW@Remove$qqrx17System@WideString
@Aimpbasesysutils@TAIMPStringListW@Delete$qqri
@Aimpbasesysutils@TAIMPStringListW@GetText$qqrv
@Aimpbasesysutils@TAIMPStringListW@GetValue$qqri
@Aimpbasesysutils@TAIMPStringListW@GetName$qqri
@Aimpbasesysutils@TAIMPStringListW@Append$qqrp33Aimpbasesysutils@TAIMPStringListW
@Aimpbasesysutils@TAIMPStringListW@Add$qqrx17System@WideStringi
@Aimpbasesysutils@TAIMPStringListW@Add$qqrx17System@WideStringp14System@TObject
@Aimpbasesysutils@TAIMPIntegerList@Remove$qqri
@Aimpbasesysutils@TAIMPIntegerList@GetItem$qqri
@Aimpbasesysutils@TAIMPIntegerList@Add$qqri
@Aimpbasesysutils@TAIMPUnknownObjectList@QueryInterface$qqsrx5_GUIDpv
@Aimpbasesysutils@TAIMPUnknownObjectList@_Release$qqsv
@Aimpbasesysutils@TAIMPUnknownObjectList@_AddRef$qqsv
@Aimpbasesysutils@TAIMPUnknownObject@QueryInterface$qqsrx5_GUIDpv
@Aimpbasesysutils@TAIMPUnknownObject@_Release$qqsv
@Aimpbasesysutils@TAIMPUnknownObject@_AddRef$qqsv
@Aimpbasesysutils@TAIMPUnknownPersistent@QueryInterface$qqsrx5_GUIDpv
@Aimpbasesysutils@TAIMPUnknownPersistent@_Release$qqsv
@Aimpbasesysutils@TAIMPUnknownPersistent@_AddRef$qqsv
@Aimpbasesysutils@TAIMPList@IsValid$qqri
@Aimpbasesysutils@TAIMPObjectList@Remove$qqrp14System@TObject
@Aimpbasesysutils@TAIMPObjectList@Notify$qqrpv25Classes@TListNotification
@Aimpbasesysutils@TAIMPObjectList@Last$qqrv
@Aimpbasesysutils@TAIMPObjectList@ChangePlace$qqrii
@Aimpbasesysutils@TAIMPObjectList@Insert$qqrip14System@TObject
@Aimpbasesysutils@TAIMPObjectList@GetItem$qqri
@Aimpbasesysutils@TAIMPObjectList@First$qqrv
@Aimpbasesysutils@TAIMPObjectList@Extract$qqrp14System@TObjecto
@Aimpbasesysutils@TAIMPObjectList@$bctr$qqro
@Aimpbasesysutils@TAIMPObjectList@Add$qqrp14System@TObject
@Aimpbasesysutils@IsUrlFileName$qqrx17System@WideString
@Aimpbasesysutils@TFileStreamW@WriteString$qqrx17System@WideString36Aimpbaseencoding@TAIMPStringEncoding
@Aimpbasesysutils@TFileStreamW@GetIsValid$qqrv
@Aimpbasesysutils@TFileStreamW@$bctr$qqrx17System@WideStringi
@Aimpbasesysutils@WideFindFileClose$qqrrp34Aimpbasesysutils@TAIMPFindFileInfo
@Aimpbasesysutils@WideFindFileNext$qqrrp34Aimpbasesysutils@TAIMPFindFileInfo
@Aimpbasesysutils@WideFindFileFirst$qqrx17System@WideStringt164System@%Set$t36Aimpbasesysutils@TAIMPFindFileObject$iuc$0$iuc$1%rp34Aimpbasesysutils@TAIMPFindFileInfo
@Aimpbasesysutils@WideModuleFileName$qqrui
@Aimpbasesysutils@WideLoadLibrary$qqrx17System@WideString
@Aimpbasesysutils@WideSelfPath$qqrv
@Aimpbasesysutils@WideSelfExeName$qqrv
@Aimpbasesysutils@WideMoveFile$qqrx17System@WideStringt1
@Aimpbasesysutils@WideDeleteFile$qqrx17System@WideString
@Aimpbasesysutils@WideFileSize$qqrx17System@WideString
@Aimpbasesysutils@WideDirectoryExists$qqrx17System@WideString
@Aimpbasesysutils@WideFileExists$qqrx17System@WideString
@Aimpbasesysutils@WideSetCurrentDir$qqrx17System@WideString
@Aimpbasesysutils@WideValidatePath$qqrx17System@WideString
@Aimpbasesysutils@WideValidateDirName$qqrx17System@WideString
@Aimpbasesysutils@WideLastDelimiter$qqrx17System@WideStringt1
@Aimpbasesysutils@WideIsOurFile$qqrx17System@WideStringt1o
@Aimpbasesysutils@WideGetMinimalCommonPath$qqrr17System@WideStringx17System@WideString
@Aimpbasesysutils@WideGetFreeFileName$qqrx17System@WideString
@Aimpbasesysutils@WideExtractFilePath$qqrx17System@WideString
@Aimpbasesysutils@WideExtractFileNameWithoutExt$qqrx17System@WideStringo
@Aimpbasesysutils@WideExtractFileName$qqrx17System@WideString
@Aimpbasesysutils@WideExtractFileFormat$qqrx17System@WideString
@Aimpbasesysutils@WideExtractFileExt$qqrx17System@WideStringo
@Aimpbasesysutils@WideExtractFileDirName$qqrx17System@WideString
@Aimpbasesysutils@WideChangeFileExt$qqrx17System@WideStringt1
@Aimpbasesysutils@WideStrLCopy$qqrpbx17System@WideStringi
@Aimpbasesysutils@WideTrim$qqrx17System@WideString
@Aimpbasesysutils@WideStringReplace$qqrx17System@WideStringt1t149System@%Set$t21Sysutils@Sysutils__55$iuc$0$iuc$1%
@Aimpbasesysutils@WideSameTextEx$qqrx17System@WideStringpx17System@WideStringxi
@Aimpbasesysutils@WideSameText$qqrx17System@WideStringt1
@Aimpbasesysutils@WidePos$qqrx17System@WideStringt1oi
@Aimpbasesysutils@WideLogicalCompare$qqrx17System@WideStringt1
@Aimpbasesysutils@WideIsSubString$qqrx17System@WideStringt1
@Aimpbasesysutils@WideDupeString$qqrx17System@WideStringi
@Aimpbasesysutils@WideCompareStrings$qqrpbt1iio
@Aimpbasesysutils@WideAllocStr$qqrx17System@WideString
@Aimpbasesysutils@Wow64SetFileSystemRedirection$qqro
@Aimpbasesysutils@IsWow64BitProcess$qqrv
@Aimpbasesysutils@TrackFormat$qqri
@Aimpbasesysutils@SizeFormat$qqrjo
@Aimpbasesysutils@FormatTimeEx$qqrf36Aimpbasesysutils@TAIMPFormatTimeModeo
@Aimpbasesysutils@FormatTime$qqrxj36Aimpbasesysutils@TAIMPFormatTimeMode
@Aimpbasesysutils@WideRectToString$qqrrx11Types@TRect
@Aimpbasesysutils@IfThenW$qqrx17System@WideStringt1
@Aimpbasesysutils@IfThenW$qqrox17System@WideStringt2
@Aimpbasesysutils@MyStrToInt$qqrx17System@WideStringi
@Aimpbasesysutils@MyStrToInt$qqrx27System@%AnsiStringT$us$i0$%i
@Aimpbasesysutils@WideExecApplication$qqr17System@WideStringi
@Aimpbasesysutils@WideMessageBox$qqruix17System@WideStringt2i
@Aimpbasesysutils@WideElfHash$qqrx17System@WideStringo
@Aimpbasesysutils@ListRandomize$qqrp36System@%StaticArray$pvi$i134217727$%ipqqrpvt1t1$ipv
@Aimpbasesysutils@ListSort$qqrp36System@%StaticArray$pvi$i134217727$%ipqqrpvt1t1$ipv
@Aimpbasesysutils@ListInvert$qqrp36System@%StaticArray$pvi$i134217727$%ipqqrpvt1t1$ipv
@Aimpbasesysutils@WideSetWindowText$qqruix17System@WideString
@Aimpbasesysutils@WideGetWindowText$qqrp6HWND__
@Aimpbasesysutils@MyWndFree$qqrp6HWND__
@Aimpbasesysutils@MyWndDefaultProc$qqrp6HWND__r17Messages@TMessage
@Aimpbasesysutils@MyWndCreate$qqrynpqqrr17Messages@TMessage$vx20System@UnicodeStringt2
@Aimpbasesysutils@MyFontToString$qqrp14Graphics@TFont
@Aimpbasesysutils@MyFontStyleToInt$qqrx47System@%Set$t19Graphics@TFontStyle$iuc$0$iuc$3%
@Aimpbasesysutils@MyStringToFont$qqrx17System@WideStringpx14Graphics@TFont
@Aimpbasesysutils@MyIntToFontStyle$qqri
@Aimpbasesysutils@LimitFloat$qqrxfxfxf36Aimpbasesysutils@TAIMPLimitFixedEdge
@Aimpbasesysutils@Limit$qqrxixixi36Aimpbasesysutils@TAIMPLimitFixedEdge
@Aimpbasesysutils@IsWinVistaOrLater
@Aimpbasesysutils@TAIMPIniFile@
@Aimpbasesysutils@TAIMPStringListW@
@$xp$39Aimpbasesysutils@TAIMPUnknownObjectList
@Aimpbasesysutils@TAIMPUnknownObjectList@
@$xp$39Aimpbasesysutils@TAIMPUnknownPersistent
@Aimpbasesysutils@TAIMPUnknownPersistent@
@$xp$35Aimpbasesysutils@TAIMPUnknownObject
@Aimpbasesysutils@TAIMPUnknownObject@
@Aimpbasesysutils@TAIMPIntegerList@
@$xp$32Aimpbasesysutils@TAIMPObjectList
@Aimpbasesysutils@TAIMPObjectList@
@Aimpbasesysutils@TFileStreamW@
@Aimpbasesysutils@Signs
@Aimpbasesysutils@NullSize
@Aimpbasesysutils@NullRect
@Aimpbasesysutils@NullPoint
@Aimpbaseencoding@initialization$qqrv
@Aimpbaseencoding@Finalization$qqrv
@Aimpbaseencoding@WideIsRealUnicode$qqrx17System@WideString
@Aimpbaseencoding@WideFromAnsi$qqrx27System@%AnsiStringT$us$i0$%i
@Aimpbaseencoding@WideFromAnsi$qqrx27System@%AnsiStringT$us$i0$%
@Aimpbaseencoding@AnsiFromWide$qqrx17System@WideStringi
@Aimpbaseencoding@AnsiFromWide$qqrx17System@WideString
@Classes@initialization$qqrv
@Classes@Finalization$qqrv
@Classes@TBasicAction@Change$qqrv
@Classes@TBasicAction@SetOnExecute$qqrynpqqrp14System@TObject$v
@Classes@TBasicAction@UpdateTarget$qqrp14System@TObject
@Classes@TBasicAction@Notification$qqrp18Classes@TComponent18Classes@TOperation
@Classes@TBasicAction@ExecuteTarget$qqrp14System@TObject
@Classes@TBasicAction@HandlesTarget$qqrp14System@TObject
@Classes@TComponent@_Release$qqsv
@Classes@TComponent@_AddRef$qqsv
@Classes@TComponent@QueryInterface$qqsrx5_GUIDpv
@Classes@TComponent@UpdateRegistry$qqrox20System@UnicodeStringt2
@Classes@TComponent@SafeCallException$qqrp14System@TObjectpv
@Classes@TComponent@UpdateAction$qqrp20Classes@TBasicAction
@Classes@TComponent@GetComponentCount$qqrv
@Classes@TComponent@GetComponent$qqri
@Classes@TComponent@SetName$qqrx20System@UnicodeString
@Classes@TComponent@ValidateRename$qqrp18Classes@TComponentx20System@UnicodeStringt2
@Classes@TComponent@WriteState$qqrp15Classes@TWriter
@Classes@TComponent@ReadState$qqrp15Classes@TReader
@Classes@TComponent@Loaded$qqrv
@Classes@TComponent@DefineProperties$qqrp14Classes@TFiler
@Classes@TComponent@Notification$qqrp18Classes@TComponent18Classes@TOperation
@Classes@TComponent@RemoveFreeNotification$qqrp18Classes@TComponent
@Classes@TComponent@FreeNotification$qqrp18Classes@TComponent
@Classes@TComponent@BeforeDestruction$qqrv
@Classes@TComponent@$bdtr$qqrv
@Classes@TComponent@$bctr$qqrp18Classes@TComponent
@Classes@TThread@Synchronize$qqrp15Classes@TThreadynpqqrv$v
@Classes@TThread@Synchronize$qqrynpqqrv$v
@Classes@TThread@DoTerminate$qqrv
@Classes@TThread@AfterConstruction$qqrv
@Classes@TThread@$bcdtr$qqrv
@Classes@TThread@$bdtr$qqrv
@Classes@TThread@$bcctr$qqrv
@Classes@TThread@$bctr$qqro
@Classes@TResourceStream@$bctr$qqruix20System@UnicodeStringpb
@Classes@TStream@ReadBuffer$qqrpvi
@Classes@TStream@SetSize64$qqrxj
@Classes@TStream@SetPosition$qqrxj
@Classes@TStrings@EndUpdate$qqrv
@Classes@TStrings@BeginUpdate$qqrv
@Classes@TPersistent@DefineProperties$qqrp14Classes@TFiler
@Classes@TPersistent@AssignTo$qqrp19Classes@TPersistent
@Classes@TPersistent@Assign$qqrp19Classes@TPersistent
@Classes@TPersistent@$bdtr$qqrv
@Classes@TInterfaceList@Unlock$qqrv
@Classes@TInterfaceList@Lock$qqrv
@Classes@TInterfaceList@Remove$qqrx45System@%DelphiInterface$t17System@IInterface%
@Classes@TInterfaceList@Add$qqrx45System@%DelphiInterface$t17System@IInterface%
@Classes@TInterfaceList@IndexOf$qqrx45System@%DelphiInterface$t17System@IInterface%
@Classes@TInterfaceList@GetCount$qqrv
@Classes@TInterfaceList@Get$qqri
@Classes@TInterfaceList@Clear$qqrv
@Classes@TInterfaceList@$bctr$qqrv
@Classes@TList@Assign$qqrp13Classes@TList21Classes@TListAssignOpt1
@Classes@TList@Sort$qqrpqqrpvt1$i
@Classes@TList@SetCapacity$qqri
@Classes@TList@Pack$qqrv
@Classes@TList@Remove$qqrpv
@Classes@TList@Move$qqrii
@Classes@TList@Last$qqrv
@Classes@TList@IndexOf$qqrpv
@Classes@TList@Grow$qqrv
@Classes@TList@Get$qqri
@Classes@TList@Error$qqrx20System@UnicodeStringi
@Classes@TList@Delete$qqri
@Classes@TList@Clear$qqrv
@Classes@TList@Add$qqrpv
@Classes@TList@$bdtr$qqrv
@Classes@RegisterClass$qqrp17System@TMetaClass
@Classes@Bounds$qqriiii
@Classes@Rect$qqriiii
@Classes@Point$qqrii
@$xp$18Classes@TComponent
@Classes@TComponent@
@$xp$22Classes@TComponentName
@Classes@TResourceStream@
@Classes@TMemoryStream@
@$xp$19Classes@TPersistent
@Classes@TPersistent@
@Classes@TInterfaceList@
@Classes@TList@
@$xp$20Classes@TNotifyEvent
@$xp$18Classes@TAlignment
@Activex@Succeeded$qqrl
@$xp$8ITypeLib
@Typinfo@initialization$qqrv
@Typinfo@Finalization$qqrv
@Typinfo@GetEnumName$qqrp17Typinfo@TTypeInfoi
@Sysutils@initialization$qqrv
@Sysutils@Finalization$qqrv
@Sysutils@TEncoding@$bcdtr$qqrv
@Sysutils@SafeLoadLibrary$qqrx20System@UnicodeStringui
@Sysutils@TLanguages@$bcdtr$qqrv
@Sysutils@Supports$qqrpx14System@TObjectrx5_GUIDpv
@Sysutils@Supports$qqrx45System@%DelphiInterface$t17System@IInterface%rx5_GUIDpv
@Sysutils@FreeAndNil$qqrpv
@Sysutils@AddTerminateProc$qqrpqqrv$o
@Sysutils@FindCmdLineSwitch$qqrx20System@UnicodeStringrx29System@%Set$tc$iuc$0$iuc$255%o
@Sysutils@AnsiPos$qqrx20System@UnicodeStringt1
@Sysutils@Exception@$bcdtr$qqrv
@Sysutils@Exception@$bcctr$qqrv
@Sysutils@Exception@$bctr$qqrx20System@UnicodeStringpx14System@TVarRecxi
@Sysutils@Exception@$bctr$qqrx20System@UnicodeString
@Sysutils@Abort$qqrv
@Sysutils@SysErrorMessage$qqrui
@Sysutils@FormatDateTime$qqrx20System@UnicodeString16System@TDateTime
@Sysutils@Now$qqrv
@Sysutils@FormatFloat$qqrx20System@UnicodeStringgrx24Sysutils@TFormatSettings
@Sysutils@FormatFloat$qqrx20System@UnicodeStringg
@Sysutils@WideFormat$qqrx17System@WideStringpx14System@TVarRecxi
@Sysutils@Format$qqrx20System@UnicodeStringpx14System@TVarRecxi
@Sysutils@StrPas$qqrpxc
@Sysutils@ExtractShortPathName$qqrx20System@UnicodeString
@Sysutils@ExtractFileName$qqrx20System@UnicodeString
@Sysutils@ExtractFileDrive$qqrx20System@UnicodeString
@Sysutils@ExtractFileDir$qqrx20System@UnicodeString
@Sysutils@ExtractFilePath$qqrx20System@UnicodeString
@Sysutils@ChangeFileExt$qqrx20System@UnicodeStringt1
@Sysutils@StrToIntDef$qqrx20System@UnicodeStringi
@Sysutils@StrToInt$qqrx20System@UnicodeString
@Sysutils@IntToStr$qqrj
@Sysutils@IntToStr$qqri
@Sysutils@IsValidIdent$qqrx20System@UnicodeStringo
@Sysutils@WideSameText$qqrx17System@WideStringt1
@Sysutils@WideCompareText$qqrx17System@WideStringt1
@Sysutils@WideSameStr$qqrx17System@WideStringt1
@Sysutils@WideLowerCase$qqrx17System@WideString
@Sysutils@WideUpperCase$qqrx17System@WideString
@Sysutils@SameText$qqrx20System@UnicodeStringt1
@Sysutils@CharInSet$qqrbrx29System@%Set$tc$iuc$0$iuc$255%
@Sysutils@CharInSet$qqrcrx29System@%Set$tc$iuc$0$iuc$255%
@Sysutils@TEncoding@$bcctr$qqrv
@$xp$24Sysutils@TFormatSettings
@Sysutils@Exception@
@Sysutils@TLanguages@$bcctr$qqrv
@Math@RandomRange$qqrxixi
@Math@IfThen$qqroxixi
@Math@IsZero$qqrxff
@Math@IsZero$qqrxdd
@Math@IsZero$qqrxgg
@Math@SameValue$qqrxfxff
@Math@Max$qqrxgxg
@Math@Max$qqrxjxj
@Math@Max$qqrxixi
@Math@Min$qqrxgxg
@Math@Min$qqrxjxj
@Math@Min$qqrxixi
@Variants@initialization$qqrv
@Variants@Finalization$qqrv
@Variants@@VarFromWStr$qqrr8TVarDatax17System@WideString
@Variants@@VarFromBool$qqrr8TVarDataxo
@Variants@@VarClr$qqrr8TVarData
@Varutils@initialization$qqrv
@Varutils@Finalization$qqrv
@Graphics@initialization$qqrv
@Graphics@Finalization$qqrv
@Graphics@TIcon@SetHandle$qqrp7HICON__
@Graphics@TIcon@GetHandle$qqrv
@Graphics@TIcon@$bctr$qqrv
@Graphics@TBitmap@SetPixelFormat$qqr21Graphics@TPixelFormat
@Graphics@TBitmap@SetHandle$qqrp9HBITMAP__
@Graphics@TBitmap@LoadFromResourceName$qqruix20System@UnicodeString
@Graphics@TBitmap@GetPixelFormat$qqrv
@Graphics@TBitmap@GetCanvas$qqrv
@Graphics@TBitmap@FreeImage$qqrv
@Graphics@TBitmap@$bctr$qqrv
@Graphics@TCanvas@GetHandle$qqrv
@Graphics@TCustomCanvas@Unlock$qqrv
@Graphics@TCustomCanvas@Lock$qqrv
@Graphics@TBrush@SetStyle$qqr20Graphics@TBrushStyle
@Graphics@TBrush@SetColor$qqr15Graphics@TColor
@Graphics@TPen@SetWidth$qqri
@Graphics@TPen@SetColor$qqr15Graphics@TColor
kernel32
GetModuleHandleW
WriteFile
WaitForSingleObject
UnmapViewOfFile
MulDiv
MapViewOfFile
LeaveCriticalSection
IsBadWritePtr
IsBadReadPtr
InitializeCriticalSection
GetVersionExW
GetTickCount
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLastError
GetCurrentProcess
GetCommandLineW
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
FreeLibrary
FindResourceW
FindFirstFileW
FindClose
EnterCriticalSection
DuplicateHandle
DeleteCriticalSection
CreateProcessW
CreatePipe
CreateFileMappingW
CloseHandle
user32
CreateWindowExW
UnregisterHotKey
UnregisterClassW
ShowWindow
SetWindowTextW
SetWindowPos
SetWindowLongW
SetTimer
SetForegroundWindow
SetFocus
SetCursorPos
SendMessageW
RegisterHotKey
RegisterClassExW
PtInRect
PostThreadMessageW
PostMessageW
OffsetRect
MessageBoxW
LoadCursorW
KillTimer
IsWindowVisible
IsWindow
IsIconic
IntersectRect
InflateRect
GetWindowRect
GetWindowLongW
GetWindowInfo
GetKeyboardState
GetFocus
GetDesktopWindow
FillRect
EqualRect
EndDialog
DestroyWindow
DestroyIcon
DefWindowProcW
CreateDialogParamW
BringWindowToTop
gdi32
SetTextColor
SetStretchBltMode
SaveDC
RestoreDC
RectVisible
GetStretchBltMode
DeleteObject
CreateSolidBrush
oleaut32
RegisterTypeLib
LoadTypeLibEx
ole32
ReleaseStgMedium
CoRevokeClassObject
CoRegisterClassObject
CoInitialize
IsEqualGUID
comctl32
ImageList_GetIcon
ImageList_ReplaceIcon
shell32
SHChangeNotify
ExtractIconW
DragAcceptFiles
gdiplus
GdipSetSmoothingMode
GdipSetPenWidth
GdipDeletePen
GdipCreatePen1
GdipDrawLineI
GdipDeleteGraphics
GdipCreateFromHDC
bass
BASS_SetConfig
sqlite3
sqlite3_result_text16
sqlite3_result_int
sqlite3_result_null
sqlite3_value_text16
sqlite3_value_bytes16
sqlite3_column_type
sqlite3_column_text16
sqlite3_column_name16
sqlite3_column_int64
sqlite3_column_count
sqlite3_busy_timeout
sqlite3_errmsg16
sqlite3_create_collation16
sqlite3_create_function16
sqlite3_step
sqlite3_prepare16_v2
sqlite3_open16
sqlite3_finalize
sqlite3_close
Sections
.text Size: 533KB - Virtual size: 533KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 428B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 158KB - Virtual size: 158KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 960KB - Virtual size: 960KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ