DllCanUnloadNow
DllGetInstance
DllGetVersion
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
8cfd86b0518b674ed5a32acda9113aac1c9cd706b13eac54b69827787a71530a.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
8cfd86b0518b674ed5a32acda9113aac1c9cd706b13eac54b69827787a71530a.dll
Resource
win10v2004-20240508-en
Target
8cfd86b0518b674ed5a32acda9113aac1c9cd706b13eac54b69827787a71530a
Size
729KB
MD5
112c2324254c1ba416b96af98a6d1b38
SHA1
601438da26fc3b8ceb8a9436af9718eaa736ed3f
SHA256
8cfd86b0518b674ed5a32acda9113aac1c9cd706b13eac54b69827787a71530a
SHA512
5a3f02b91688f963098fe131491d16c0bd34a6870df821f671bc4d48d14a8bd42a1ed9749dbcc5dae34d7e71a70ed01ff4d165a7bb1b0bbbe13dfd5381f27e68
SSDEEP
12288:YRxzwklAaJxrtnlX1N2BGdCbhSZJOGazk:YAUNNlX1N2BkCxTY
Checks for missing Authenticode signature.
resource |
---|
8cfd86b0518b674ed5a32acda9113aac1c9cd706b13eac54b69827787a71530a |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
SetFileAttributesW
SetFileTime
EnterCriticalSection
SetFilePointer
CloseHandle
LocalFree
GetCurrentProcessId
TlsAlloc
GetTickCount
OpenFileMappingA
VirtualFree
GetFullPathNameW
FindNextFileW
GetTempFileNameW
VirtualAlloc
GetProcAddress
LeaveCriticalSection
FileTimeToLocalFileTime
GetVersionExW
GetModuleHandleW
FreeLibrary
ReadFile
GetDiskFreeSpaceW
FindFirstFileW
TlsFree
UnmapViewOfFile
GetLastError
GetModuleFileNameA
CompareStringW
SetEndOfFile
WaitForSingleObjectEx
GetCompressedFileSizeW
InitializeCriticalSectionAndSpinCount
WideCharToMultiByte
MapViewOfFile
FindClose
LoadLibraryA
CreateFileW
GetDriveTypeW
RaiseException
SwitchToThread
WriteFile
LocalFileTimeToFileTime
CreateFileMappingA
DeleteCriticalSection
TlsGetValue
TlsSetValue
QueueUserAPC
GetOverlappedResult
CancelIo
FileTimeToSystemTime
LocalAlloc
RemoveDirectoryW
VirtualQuery
CreateEventW
Sleep
@Axrtl@Debug@Logfile@TDebugLogFile@$bcdtr$qqrv
@Axrtl@Debug@Common@BOOL_TO_STR
@Axrtl@Debug@Logfile@TDebugLogFile@Unlock$qqrv
@Axrtl@Debug@Common@S_START_LOG_PROCESS
@Axrtl@Project@Interfacedobject@initialization$qqrv
@Axrtl@System@Thread@TThread@TerminatedSet$qqrv
@Axrtl@Debug@Common@S_UNKNOWN
@Axrtl@Debug@Common@S_OBJECT
@Axrtl@System@Thread@TThread@
@Axrtl@Project@Interfacedobject@TProxiedInterfaceObject@$bctr$qqrv
@Axrtl@Project@Interfacedobject@TProxiedInterfaceObject@$bdtr$qqrv
@Axrtl@Debug@Common@initialization$qqrv
@Axrtl@Utils@Hash@Crc32@HashCRC32@FromBuffer$qqrpxvi
@Axrtl@Project@Interfacedobject@TProxiedInterfaceObject@BeforeDestruction$qqrv
@Axrtl@Dllroutines@Finalization$qqrv
@Axrtl@Project@Eventnotifier@Finalization$qqrv
@Axrtl@Debug@Common@S_ERROR
@Axrtl@Project@Interfacedobject@Finalization$qqrv
@Axrtl@Debug@Common@S_PARAM_DELIM
@Axrtl@System@Strutils@StrUtils@SameStr$qqrx20System@UnicodeStringt1
@Axrtl@Debug@Common@S_SPACE
@Axrtl@Debug@Logfile@TDebugLogFile@EndProc$qqri
@Axrtl@Debug@Logfile@TDebugLogFile@$bdtr$qqrv
@Axrtl@Debug@Logfile@TDebugLogFile@WriteLog$qqrix20System@UnicodeStringt2p17System@TMetaClass
@Axrtl@Project@Settings@Finalization$qqrv
@Axrtl@Project@Interfacedobject@TInterfacedObject@$bctr$qqrv
@Axrtl@Project@Interfacedobject@TInterfacedObject@$bdtr$qqrv
@Axrtl@Winapi@Kernel32@Kernel32@DeviceIoControl$qqruiuipvuit3uiruip11_OVERLAPPED
@Axrtl@Project@Interfacedobject@DllGetVersionInternal$qqsx20System@UnicodeStringr16_DLLVERSIONINFO2
@Axrtl@Project@Interfacedobject@DllGetInstanceInternal$qqsrx5_GUIDpvpp17System@TMetaClassxi
@Axrtl@System@Ioutils@initialization$qqrv
@Axrtl@Project@Interfacedobject@TInterfacedObject@Unlock$qqrv
@Axrtl@System@Thread@initialization$qqrv
@Axrtl@System@Thread@TThread@Start$qqrv
@Axrtl@System@Thread@TThread@DoTerminate$qqrv
@Axrtl@Project@Processinfo@initialization$qqrv
@Axrtl@System@Thread@TThread@$bctr$qqrynpqqrp27Axrtl@System@Thread@TThread$voi
@$xp$33Axrtl@Debug@Logfile@TDebugLogFile
@Axrtl@System@Strutils@StrUtils@GetOptimalConvertType$qqrj
@Axrtl@Project@Interfacedobject@TProxiedInterfaceObject@
@Axrtl@Project@Interfacedobject@DllCanUnloadNowInternal$qqspp17System@TMetaClassxi
@Axrtl@System@Strutils@StrUtils@LowerCase$qqrx20System@UnicodeString
@Axrtl@System@Thread@TThread@AfterConstruction$qqrv
@Axrtl@Winapi@Kernel32@Kernel32@GetVolumePathName$qqrpbt1ui
@Axrtl@System@Thread@TThread@$bdtr$qqrv
@Axrtl@System@Thread@TThread@GetHandle$qqrv
@Axrtl@Debug@Logfile@TDebugLogFile@GetLogInstance$qqrx20System@UnicodeString
@Axrtl@System@Strutils@StrUtils@UpperCase$qqrx20System@UnicodeString
@Axrtl@Debug@Common@S_VALUE_CARDINAL
@Axrtl@Project@Productinfo@ProductInfo@$bcctr$qqrv
@Axrtl@Project@Productinfo@ProductInfo@$bcdtr$qqrv
@Axrtl@Project@Eventnotifier@initialization$qqrv
@Axrtl@Dllroutines@initialization$qqrv
@Axrtl@System@Strutils@StrUtils@
@Axrtl@Project@Interfacedobject@TInterfacedObject@
@Axrtl@System@Win@Osinfo@Finalization$qqrv
@Axrtl@Winapi@Messages@initialization$qqrv
@Axrtl@Debug@Logfile@TDebugLogFile@
@Axrtl@Winapi@Ntdll@Ntdll@RtlDecompressBuffer$qqruspucuit2uipui
@Axrtl@Debug@Common@S_NIL_OBJECT
@Axrtl@Debug@Logfile@TDebugLogFile@SetDirectWrite$qqri
@Axrtl@Winapi@Kernel32@TVolumeBitmapBuffer@GetBufferElement$qqri
@Axrtl@Debug@Logfile@TDebugLogFile@SetLogLevel$qqri
@Axrtl@Winapi@Messages@Finalization$qqrv
@Axrtl@Debug@Common@S_NIL_CLASS
@Axrtl@System@Thread@TThread@Execute$qqrv
@Axrtl@Debug@Logfile@TDebugLogFile@FreeLogInstance$qqrrp33Axrtl@Debug@Logfile@TDebugLogFile
@Axrtl@Project@Settings@initialization$qqrv
@Axrtl@Debug@Logfile@TDebugLogFile@SetMaxFileSize$qqrj
@Axrtl@System@Ioutils@Finalization$qqrv
@Axrtl@Project@Interfacedobject@TInterfacedObject@Lock$qqrv
@Axrtl@Project@Interfacedobject@TInterfacedObject@DoProxiedObjectFree$qqrv
@Axrtl@Debug@Logfile@Finalization$qqrv
@Axrtl@Debug@Logfile@TDebugLogFile@BeginProc$qqrix20System@UnicodeString
@Axrtl@System@Strutils@StrUtils@BytesToStr$qqrj34Axrtl@System@Strutils@TConvertTypei
@Axrtl@Project@Interfacedobject@TInterfacedObject@$bctr$qqrp54Axrtl@Project@Interfacedobject@TProxiedInterfaceObject
@Axrtl@Debug@Logfile@initialization$qqrv
@Axrtl@Winapi@Messages@ExtMessages@$bcctr$qqrv
@Axrtl@System@Ioutils@TPathHelper@$bcctr$qqrv
@Axrtl@Project@Interfacedobject@TInterfacedObject@DefaultHandler$qqrpv
@Axrtl@System@Ioutils@TPathHelper@$bcdtr$qqrv
@Axrtl@Winapi@Messages@ExtMessages@$bcdtr$qqrv
@Axrtl@Debug@Common@S_END_PROC
@Axrtl@Project@Processinfo@Finalization$qqrv
@Axrtl@Debug@Common@S_BEGIN_PROC
@Axrtl@System@Sysutils@SysUtils@Sub$qqruiui
@Axrtl@Debug@Common@S_VALUE_INTEGER
@Axrtl@System@Win@Osinfo@OSInfo@WindowsVersion$qqrv
@Axrtl@Winapi@Ntdll@COMPRESSION_FORMAT_LZNT1
@Axrtl@Debug@Common@S_VALUE_STR
@Axrtl@Debug@Common@S_EXCEPTION
@Axrtl@Debug@Logfile@TDebugLogFile@BeginNesting$qqri
@Axrtl@Project@Productinfo@Finalization$qqrv
@Axrtl@Debug@Logfile@TDebugLogFile@Lock$qqrv
@$xp$48Axrtl@Project@Interfacedobject@TInterfacedObject
@Axrtl@System@Win@Osinfo@initialization$qqrv
@$xp$54Axrtl@Project@Interfacedobject@TProxiedInterfaceObject
@Axrtl@Debug@Common@S_PARAMS
@Axrtl@Project@Settings@CommonSettings@$bcctr$qqrv
@Axrtl@Project@Settings@CommonSettings@$bcdtr$qqrv
@Axrtl@System@Thread@Finalization$qqrv
@Axrtl@Debug@Common@S_CLASS
@$xp$27Axrtl@System@Thread@TThread
@Axrtl@Debug@Common@Finalization$qqrv
@Axrtl@System@Strutils@StrUtils@SameText$qqrx20System@UnicodeStringt1
@Axrtl@Project@Productinfo@ProductInfo@FApplicationDataPath
@Axrtl@Debug@Logfile@TDebugLogFile@EndNesting$qqri
@Axrtl@Debug@Logfile@TDebugLogFile@$bcctr$qqrv
@Axrtl@Debug@Common@S_END_METHOD
@Axrtl@Project@Productinfo@initialization$qqrv
@Axrtl@Debug@Common@S_INTERFACE
PathIsDirectoryEmptyW
AssocQueryStringW
@System@Sysutils@SystemTimeToDateTime$qqrrx11_SYSTEMTIME
@System@Generics@Collections@TListHelper@DoExtractItemRevManaged$qqrpxvpv
@System@Sysutils@IntToStr$qqrj
@System@@FinalizeArray$qqrpvt1ui
@System@@UStrFromWStr$qqrr20System@UnicodeStringx17System@WideString
@System@Classes@TMemoryStream@
@System@TObject@ToString$qqrv
@System@Generics@Collections@TListHelper@DoRemoveFwdMRef$qqrpxv
@$xp$14System@TVarRec
@$xp$6Double
@System@Sysutils@Exception@GetBaseException$qqrv
@System@@LStrAsg$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%
@System@Generics@Collections@TListHelper@SetItemN$qqrpxvi
@System@TObject@Free$qqrv
@System@Rtlconsts@_SReadError
@System@@UStrSetLength$qqrr20System@UnicodeStringi
@System@Sysutils@DeleteFile$qqrx20System@UnicodeString
@System@Classes@TStringList@SetSorted$qqro
@System@Ansistrings@Trim$qqrx27System@%AnsiStringT$us$i0$%
@System@Classes@TComponent@$bcctr$qqrv
@System@Classes@TComponent@$bcdtr$qqrv
@System@Sysutils@ExtractFileExt$qqrx20System@UnicodeString
@System@Sysutils@GetModuleName$qqrui
@System@Sysutils@EmptyStr
@System@Character@TCharHelper@ToUpper$qqrv
@System@@CopyRecord$qqrv
@System@TInterfacedObject@AfterConstruction$qqrv
@System@@UStrEqual$qqrv
@System@@WStrToPWChar$qqrx17System@WideString
@System@Sysutils@BoolToStr$qqroo
@System@@DynArrayAddRef$qqrpv
@System@Classes@TCustomMemoryStream@Read$qqrpvi
@System@IsLibrary
@System@Sysutils@EInvalidCast@
@System@Sysutils@TLanguages@$bcctr$qqrv
@System@@AbstractError$qqrv
@$xp$26System@Classes@TSeekOrigin
@System@Classes@TStream@Write64$qqrx24System@%DynamicArray$uc%jj
@System@Sysutils@TLanguages@$bcdtr$qqrv
@System@Sysutils@TryEncodeDate$qqrusususr16System@TDateTime
@System@Generics@Collections@TListHelper@DoIndexOfFwd8$qqrpxv
@System@Classes@TObserverMapping@$bcctr$qqrv
@System@Generics@Collections@TListHelper@InternalReverseManaged$qqrv
@System@Generics@Collections@TListHelper@DoIndexOfFwd4$qqrpxv
@System@Generics@Collections@TListHelper@InternalMoveN$qqrii
@System@Generics@Collections@TListHelper@InternalMove8$qqrii
@System@Generics@Collections@TListHelper@InternalMove4$qqrii
@System@Generics@Collections@TListHelper@DoIndexOfFwdN$qqrpxv
@System@Classes@TObserverMapping@$bcdtr$qqrv
@$xp$7Boolean
@System@Variants@initialization$qqrv
@System@@_llushr$qqrv
@System@TObject@ClassName$qqrv
@System@@IsClass$qqrxp14System@TObjectp17System@TMetaClass
@System@@AsClass$qqrxp14System@TObjectp17System@TMetaClass
@System@Generics@Collections@TListHelper@DoExtractItemFwd8$qqrpxvpv
@System@@UStrDelete$qqrr20System@UnicodeStringii
@System@Sysutils@StringReplace$qqrx20System@UnicodeStringt1t162System@%Set$35System@Sysutils@System_Sysutils__85t1$i0$t1$i1$%
@System@Classes@BinToHex$qqrpvpbi
@System@Sysutils@Exception@$bdtr$qqrv
@System@@LStrCat$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%
@$xp$22System@Classes@TStream
@System@Classes@TStream@SetSize$qqri
@System@Generics@Collections@TListHelper@DoRemoveFwd8$qqrpxv
@System@Generics@Collections@TListHelper@DoRemoveFwd4$qqrpxv
@System@Generics@Collections@TListHelper@DoRemoveFwdN$qqrpxv
@System@Sysutils@TStringHelper@ToLower$qqrv
@System@Generics@Collections@TListHelper@DoIndexOfRev8$qqrpxv
@System@Generics@Collections@TListHelper@DoIndexOfRev4$qqrpxv
@System@Generics@Collections@TListHelper@DoIndexOfRevN$qqrpxv
@System@Typinfo@GetTypeData$qqrp24System@Typinfo@TTypeInfo
@System@Sysutils@CompareMem$qqrpvt1i
@System@@IntfAddRef$qqrx44System@%DelphiInterface$17System@IInterface%
@System@Sysutils@CharInSet$qqrbrx25System@%Set$cc$i0$c$i-1$%
@System@Sysutils@CharInSet$qqrcrx25System@%Set$cc$i0$c$i-1$%
@System@Sysutils@initialization$qqrv
@System@TObject@NewInstance$qqrv
@System@@LStrFromPWChar$qqrr27System@%AnsiStringT$us$i0$%pbus
@$xp$16System@TDateTime
@System@Pos$qqrx20System@UnicodeStringt1i
@System@TInterfacedObject@NewInstance$qqrv
@System@Sysutils@ForceDirectories$qqr20System@UnicodeString
@$xp$26System@Classes@TStringList
@System@@StartLib$qqrv
@System@ReportMemoryLeaksOnShutdown
@System@Classes@TMemoryStream@Realloc$qqrri
@System@Sysutils@EConvertError@
@System@Math@Log2$qqrxd
@System@Ansistrings@Finalization$qqrv
@System@Sysutils@FileRead$qqruipvui
@System@Classes@TCustomMemoryStream@SaveToStream$qqrp22System@Classes@TStream
@System@Generics@Defaults@TStringComparer@$bcctr$qqrv
@System@Sysutils@Now$qqrv
@System@@LStrCatN$qqrv
@System@Generics@Defaults@TStringComparer@$bcdtr$qqrv
@System@Generics@Collections@TListHelper@InternalExchangeManaged$qqrii
@System@@UStrCatN$qqrv
@System@Classes@TMemoryStream@Write$qqrx24System@%DynamicArray$uc%ii
@System@@UniqueStringA$qqrr27System@%AnsiStringT$us$i0$%
@System@Strutils@IfThen$qqrox20System@UnicodeString20System@UnicodeString
@System@Typinfo@Finalization$qqrv
@System@Sysutils@FreeAndNil$qqrpv
@System@TObject@AfterConstruction$qqrv
@System@Sysutils@FileOpen$qqrx20System@UnicodeStringui
@System@Classes@EInvalidOperation@
@System@@AStrCmp$qqrv
@$xp$7Integer
@System@Finalization$qqrv
@System@Generics@Collections@TListHelper@InternalInsertRangeN$qqripvi
@System@Ioutils@TPath@$bcctr$qqrv
@System@Ioutils@TPath@$bcdtr$qqrv
@System@Generics@Collections@TListHelper@DoRemoveRev8$qqrpxv
@System@Generics@Collections@TListHelper@DoRemoveRev4$qqrpxv
@System@Generics@Collections@TListHelper@DoRemoveRevN$qqrpxv
@System@Syncobjs@TCriticalSection@Enter$qqrv
@System@Sysutils@ExtractFileName$qqrx20System@UnicodeString
@System@Generics@Collections@TListHelper@InternalDeleteRangeN$qqrii
@System@Generics@Collections@TListHelper@InternalDeleteRange8$qqrii
@System@Generics@Collections@TListHelper@InternalDeleteRange4$qqrii
@System@@UStrCat3$qqrr20System@UnicodeStringx20System@UnicodeStringt2
@System@@InitializeRecord$qqrpvt1
@$xp$9NativeInt
@$xp$17System@AnsiString
@System@@IntfCopy$qqrr44System@%DelphiInterface$17System@IInterface%x44System@%DelphiInterface$17System@IInterface%
@$xp$15System@ByteBool
@System@Sysutils@Finalization$qqrv
@System@Sysutils@FileSetReadOnly$qqrx20System@UnicodeStringo
@System@Classes@TStream@Read64$qqr24System@%DynamicArray$uc%jj
@$xp$13System@TClass
@System@@UStrCopy$qqrx20System@UnicodeStringii
@System@Variants@Finalization$qqrv
@System@Generics@Collections@TListHelper@DoExtractItemRev8$qqrpxvpv
@System@Generics@Collections@TListHelper@InternalInsert8$qqripxv
@System@@UStrFromChar$qqrr20System@UnicodeStringc
@System@Sysutils@Exception@$bctr$qqrx20System@UnicodeStringpx14System@TVarRecxi
@System@Sysutils@Exception@RaisingException$qqrp23System@TExceptionRecord
@System@Sysutils@SysErrorMessage$qqruiui
@System@Sysutils@EOSError@
@System@Generics@Collections@TListHelper@InternalInsertManaged$qqripxv
@System@Classes@TStream@WriteBuffer$qqrpxvi
@System@Typinfo@TTypeInfo@TypeData$qqrv
@System@RegisterModule$qqrp17System@TLibModule
@System@@RunError$qqruc
@$xp$11System@Char
@System@@ClassDestroy$qqrxp14System@TObject
@System@Rtlconsts@_SArgumentOutOfRange
@System@Generics@Collections@TListHelper@DoReverseInterface$qqrv
@System@Dateutils@IncMilliSecond$qqrx16System@TDateTimexj
@System@TObject@DefaultHandler$qqrpv
@System@@DynArrayLength$qqrpxv
@System@Generics@Collections@TListHelper@DoExtractItemFwd4$qqrpxvpv
@System@Timespan@TTimeSpan@$bcctr$qqrv
@System@TObject@BeforeDestruction$qqrv
@System@Typinfo@initialization$qqrv
@System@Timespan@TTimeSpan@$bcdtr$qqrv
@System@@ClassCreate$qqrpvzc
@System@Sysutils@FileGetAttr$qqrx20System@UnicodeStringo
@System@Generics@Collections@TListHelper@InternalInsertRangeManaged$qqripvi
@System@Sysutils@DirectoryExists$qqrx20System@UnicodeStringo
@System@Generics@Collections@TListHelper@InternalGrowCheck$qqri
@$xp$40System@Generics@Collections@TQueueHelper
@System@@UStrArrayClr$qqrpvi
@System@Sysutils@DateTimeToStr$qqrx16System@TDateTime
@System@Sysutils@EArgumentOutOfRangeException@
@$xp$12System@PByte
@System@Ansistrings@initialization$qqrv
@System@TObject@GetHashCode$qqrv
@$xp$8AnsiChar
@System@Generics@Defaults@_LookupVtableInfo$qqr49System@Generics@Defaults@TDefaultGenericInterfacep24System@Typinfo@TTypeInfoi
@System@TInterfacedObject@_Release$qqsv
@System@Sysutils@ExtractFilePath$qqrx20System@UnicodeString
@System@@TRUNC$qqrv
@System@Generics@Collections@TListHelper@DoSetItemInterface$qqrpxvi
@System@Rtti@initialization$qqrv
@$xp$14System@TObject
@System@Classes@TFileStream@$bctr$qqrx20System@UnicodeStringusui
@System@GetMemory$qi
@$xp$11System@Word
@System@Syncobjs@TCriticalSection@
@System@Sysutils@RaiseLastOSError$qqrv
@System@Generics@Collections@TListHelper@InternalClearMRef$qqrv
@System@Classes@TStream@SetSize$qqrxj
@System@Generics@Collections@TListHelper@DoInsertInterface$qqripxv
@System@@HandleAnyException$qqrv
@System@Classes@TStream@GetSize$qqrv
@System@Generics@Collections@TListHelper@DoIndexOfFwdMRef$qqrpxv
@System@Sysutils@Exception@$bcctr$qqrv
@System@Sysutils@Exception@$bcdtr$qqrv
@$xp$8Cardinal
@System@Sysutils@ExcludeTrailingPathDelimiter$qqrx20System@UnicodeString
@$xp$23System@Types@TDirection
@System@Internal@Excutils@initialization$qqrv
@System@@LStrSetLength$qqrr27System@%AnsiStringT$us$i0$%ius
@System@@HandleFinally$qqrv
@System@Sysutils@ChangeFileExt$qqrx20System@UnicodeStringt1
@System@@DynArraySetLength$qqrv
@System@@BeforeDestruction$qqrxp14System@TObjectzc
@System@Generics@Collections@TListHelper@InternalSetCountManaged$qqri
@System@FreeMemory$qpv
@System@@FinalizeRecord$qqrpvt1
@System@Sysutils@StrToDateTime$qqrx20System@UnicodeString
@System@Generics@Collections@TListHelper@DoExtractItemRev4$qqrpxvpv
@System@@RaiseExcept$qqrv
@System@Syncobjs@TCriticalSection@$bctr$qqrv
@System@@LStrToPChar$qqrx27System@%AnsiStringT$us$i0$%
@System@Internal@Excutils@Finalization$qqrv
@System@HPPGENAttribute@$bctr$qqrxix20System@UnicodeString
@System@Math@IfThen$qqroxixi
@System@Classes@TStream@SetSize64$qqrxj
@System@Syncobjs@TCriticalSection@Leave$qqrv
@System@Generics@Collections@TListHelper@InternalClearManaged$qqrv
@System@Sysutils@EListError@
@System@Generics@Collections@TListHelper@InternalToArrayManaged$qqrrpv
@System@@IntfClear$qqrr44System@%DelphiInterface$17System@IInterface%
@System@Win@Registry@TRegistry@$bcctr$qqrv
@System@Win@Registry@TRegistry@$bcdtr$qqrv
@System@Sysutils@TryEncodeTime$qqrususususr16System@TDateTime
@System@TInterfacedObject@_AddRef$qqsv
@System@Classes@EReadError@
@System@Classes@TStream@Read$qqr24System@%DynamicArray$uc%ii
@System@@WStrLen$qqrx17System@WideString
@System@UTF8ToString$qqrpxc
@System@Sysutils@Format$qqrx20System@UnicodeStringpx14System@TVarRecxi
@System@@WStrSetLength$qqrr17System@WideStringi
@System@@DynArrayHigh$qqrpxv
@System@Generics@Collections@TListHelper@SetItemManaged$qqrpxvi
@System@Classes@TFileStream@$bctr$qqrx20System@UnicodeStringus
@System@Classes@TStringList@$bctr$qqrv
@System@WideCharLenToStrVar$qqrpbir20System@UnicodeString
@System@@DynArrayAsg$qqrrpvpvt2
@System@@UStrLen$qqrx20System@UnicodeString
@System@Generics@Collections@TListHelper@InternalInsert4$qqripxv
@$xp$10NativeUInt
@System@Syncobjs@Finalization$qqrv
@System@Classes@TCustomMemoryStream@Seek$qqrxj26System@Classes@TSeekOrigin
@System@Classes@TMemoryStream@Write$qqrpxvi
@System@Classes@TBinaryWriter@$bcctr$qqrv
@System@Win@Comobj@initialization$qqrv
@System@Classes@TBinaryWriter@$bcdtr$qqrv
@System@StringOfChar$qqrbi
@System@Sysutils@ExtractFileDrive$qqrx20System@UnicodeString
@System@Variants@@VarToUStr$qqrr20System@UnicodeStringrx8TVarData
@System@Move$qqrpxvpvi
@System@Generics@Collections@TListHelper@InternalExchangeN$qqrii
@System@Generics@Collections@TListHelper@InternalExchange8$qqrii
@System@Generics@Collections@TListHelper@InternalExchange4$qqrii
@System@@IntfCast$qqrr44System@%DelphiInterface$17System@IInterface%x44System@%DelphiInterface$17System@IInterface%rx5_GUID
@System@Math@Max$qqrxjxj
@System@Generics@Collections@TListHelper@InternalSetCountN$qqri
@System@Generics@Collections@TListHelper@InternalSetCount8$qqri
@System@Generics@Collections@TListHelper@InternalSetCount4$qqri
@$xp$7Pointer
@$xp$17System@IInterface
@$xp$11System@Byte
@System@Sysutils@FindClose$qqrr26System@Sysutils@TSearchRec
@System@Generics@Defaults@TIStringComparer@$bcctr$qqrv
@System@Classes@TCustomMemoryStream@Read$qqr24System@%DynamicArray$uc%ii
@System@Generics@Defaults@TIStringComparer@$bcdtr$qqrv
@System@Generics@Collections@TListHelper@InternalAdd8$qqrpxv
@System@Generics@Collections@TListHelper@InternalAdd4$qqrpxv
@System@Generics@Collections@TListHelper@DoExtractItemFwdN$qqrpxvpv
@System@Classes@TStrings@SetDelimitedText$qqrx20System@UnicodeString
@System@Generics@Collections@TListHelper@InternalAddN$qqrpxv
@System@Sysutils@GetDiskFreeSpaceEx
@System@Classes@TStream@Write$qqrx24System@%DynamicArray$uc%ii
@System@TInterfacedObject@
@System@@UStrFromWArray$qqrr20System@UnicodeStringpbi
@$xp$13System@string
@System@Math@Min$qqrxjxj
@System@Classes@TBaseAsyncResult@$bcctr$qqrv
@System@Math@initialization$qqrv
@System@Classes@TBaseAsyncResult@$bcdtr$qqrv
@System@TGUID@_op_Equality$qqrrx5_GUIDt1
@System@Masks@MatchesMask$qqrx20System@UnicodeStringt1
@System@IsMemoryManagerSet$qqrv
@System@Classes@TMemoryStream@SetSize$qqri
@System@Sysutils@TEncoding@$bcctr$qqrv
@System@GetMemoryManager$qqrr23System@TMemoryManagerEx
@System@Sysutils@TEncoding@$bcdtr$qqrv
@System@Generics@Collections@TQueueHelper@InternalSetCapacity8$qqri
@System@Generics@Collections@TQueueHelper@InternalSetCapacity4$qqri
@System@Generics@Collections@TListHelper@InternalDeleteRangeMRef$qqrii
@System@Sysutils@IntToHex$qqrji
@System@Sysutils@IntToHex$qqrii
@System@Classes@TInterfaceList@
@System@TObject@Equals$qqrp14System@TObject
@System@Generics@Collections@TListHelper@CheckItemRange$qqri
@System@TInterfacedObject@QueryInterface$qqsrx5_GUIDpv
@System@@AfterConstruction$qqrxp14System@TObject
@System@Win@Comobj@Finalization$qqrv
@System@Classes@TStream@Seek$qqrius
@System@@RaiseAgain$qqrv
@System@Generics@Collections@TListHelper@InternalDoDeleteMRef$qqri51System@Generics@Collections@TCollectionNotification
@$xp$32System@Syncobjs@TCriticalSection
@System@Generics@Collections@TListHelper@InternalClearN$qqrv
@System@Generics@Collections@TListHelper@InternalClear8$qqrv
@System@Generics@Collections@TListHelper@InternalClear4$qqrv
@System@Dateutils@initialization$qqrv
@System@Classes@initialization$qqrv
@System@@ROUND$qqrv
@System@Classes@TInterfaceList@$bctr$qqrv
@System@TObject@$bctr$qqrv
@System@TObject@$bdtr$qqrv
@System@Win@Comobj@TComServerObject@$bcctr$qqrv
@System@Varutils@initialization$qqrv
@System@Win@Comobj@TComServerObject@$bcdtr$qqrv
@System@Sysutils@EmptyAnsiStr
@System@Generics@Collections@TListHelper@DoRemoveRevMRef$qqrpxv
@System@Dateutils@Finalization$qqrv
@System@TObject@
@System@Sysutils@Exception@
@System@Sysutils@CurrToStr$qqr15System@Currency
@System@@UStrLAsg$qqrr20System@UnicodeStringx20System@UnicodeString
@$xp$23System@Classes@TStrings
@System@Generics@Collections@TQueueHelper@InternalDequeue8$qqr51System@Generics@Collections@TCollectionNotificationopv
@System@Generics@Collections@TQueueHelper@InternalDequeue4$qqr51System@Generics@Collections@TCollectionNotificationopv
@System@Sysconst@_SInvalidCast
@System@@UStrAsg$qqrr20System@UnicodeStringx20System@UnicodeString
@System@Generics@Collections@TListHelper@DoExtractItemRevN$qqrpxvpv
@$xp$5TGUID
@System@Classes@TStream@
@System@Math@Min$qqrxixi
@System@@UStrFromWChar$qqrr20System@UnicodeStringb
@System@Classes@TStrings@GetValueFromIndex$qqri
@System@LoadResString$qqrp20System@TResStringRec
@System@Generics@Collections@TListHelper@DoExtractItemFwdManaged$qqrpxvpv
@System@Generics@Collections@TListHelper@DoAddInterface$qqrpxv
@System@Syncobjs@initialization$qqrv
@System@@UStrFromPChar$qqrr20System@UnicodeStringpc
@System@@LStrAddRef$qqrpv
@System@@UStrAddRef$qqrpv
@System@@DynArrayClear$qqrrpvpv
@System@Generics@Collections@TQueueHelper@InternalClear8$qqrv
@System@Generics@Collections@TQueueHelper@InternalClear4$qqrv
@System@@TryFinallyExit$qqrv
@System@Generics@Collections@TListHelper@InternalMoveManaged$qqrii
@System@Sysutils@FileSeek$qqruiii
@System@Generics@Collections@TListHelper@InternalDoDeleteManaged$qqri51System@Generics@Collections@TCollectionNotification
@System@Generics@Collections@TListHelper@InternalDeleteRangeManaged$qqrii
@System@Dateutils@TTimeZone@$bcctr$qqrv
@System@Classes@TStream@GetPosition$qqrv
@System@Dateutils@TTimeZone@$bcdtr$qqrv
@System@Sysutils@Exception@ToString$qqrv
@System@Rtti@TRttiContext@$bcctr$qqrv
@System@TObject@ClassType$qqrv
@System@@UStrFromPWChar$qqrr20System@UnicodeStringpb
@System@Varutils@Finalization$qqrv
@System@Rtti@TRttiContext@$bcdtr$qqrv
@System@TObject@Dispatch$qqrpv
@System@Classes@TFileStream@
@$xp$39System@Generics@Collections@TListHelper
@$xp$51System@Generics@Collections@TCollectionNotification
@System@Classes@TThread@$bcctr$qqrv
@System@Sysutils@Abort$qqrv
@System@Classes@TThread@$bcdtr$qqrv
@System@@LStrCat3$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%t2
@System@@UniqueStringU$qqrr20System@UnicodeString
@System@Classes@TLoginCredentialService@$bcctr$qqrv
@System@Classes@TLoginCredentialService@$bcdtr$qqrv
@System@@LStrArrayClr$qqrpvi
@System@Sysutils@Exception@$bctr$qqrp20System@TResStringRec
@$xp$24System@TInterfacedObject
@System@Classes@TMemoryStream@LoadFromStream$qqrp22System@Classes@TStream
@System@Sysutils@IncludeTrailingPathDelimiter$qqrx20System@UnicodeString
@System@initialization$qqrv
@System@Generics@Collections@TQueueHelper@InternalEnqueue8$qqrpxv
@System@Generics@Collections@TQueueHelper@InternalEnqueue4$qqrpxv
@System@@Halt0$qqrv
@System@Classes@TMemoryStream@SetSize$qqrxj
@$xp$5Int64
@System@Classes@Finalization$qqrv
@System@Math@Log2$qqrxf
@System@Classes@TStringList@
@System@Classes@TMemoryStream@SetCapacity$qqri
@System@Generics@Collections@TListHelper@InternalDoDelete8$qqri51System@Generics@Collections@TCollectionNotification
@System@@UStrFromLStr$qqrr20System@UnicodeStringx27System@%AnsiStringT$us$i0$%
@System@Generics@Collections@TListHelper@InternalPackN$qqrx85System@%DelphiInterface$58System@Generics@Collections@TListHelper@TInternalEmptyFunc%
@System@Generics@Collections@TListHelper@InternalPack8$qqrx85System@%DelphiInterface$58System@Generics@Collections@TListHelper@TInternalEmptyFunc%
@System@Generics@Collections@TListHelper@InternalPack4$qqrx85System@%DelphiInterface$58System@Generics@Collections@TListHelper@TInternalEmptyFunc%
@$xp$28System@Classes@TMemoryStream
@System@@UStrToPWChar$qqrx20System@UnicodeString
@$xp$25System@Sysutils@Exception
@System@Generics@Collections@TListHelper@InternalSetCountMRef$qqri
@System@@AddRefArray$qqrpvt1ui
@System@Generics@Collections@TListHelper@InternalDoDelete4$qqri51System@Generics@Collections@TCollectionNotification
@System@Math@IfThen$qqroxjxj
@$xp$29System@Classes@IInterfaceList
@System@GetHeapStatus$qqrv
@System@Generics@Collections@TListHelper@InternalSetCapacity$qqri
@System@@LStrFromChar$qqrr27System@%AnsiStringT$us$i0$%cus
@System@Generics@Collections@TListHelper@InternalMoveMRef$qqrii
@$xp$18System@IEnumerable
@System@Sysutils@Exception@$bctr$qqrx20System@UnicodeString
@System@@AddRefRecord$qqrpvt1
@System@@FillChar$qqrpvic
@System@Generics@Collections@TListHelper@InternalInsertRange8$qqripvi
@System@Classes@TMemoryStream@LoadFromFile$qqrx20System@UnicodeString
@System@Generics@Collections@TListHelper@InternalDoDeleteN$qqri51System@Generics@Collections@TCollectionNotification
@System@TInterfacedObject@BeforeDestruction$qqrv
@System@@LStrFromPChar$qqrr27System@%AnsiStringT$us$i0$%pcus
@System@Generics@Collections@TListHelper@DoRemoveFwdManaged$qqrpxv
@System@Ansistrings@EmptyAnsiStr
@System@Generics@Collections@TListHelper@DoRemoveRevManaged$qqrpxv
@System@Sysutils@FileExists$qqrx20System@UnicodeStringo
@System@Generics@Collections@TListHelper@InternalAddManaged$qqrpxv
@System@Classes@TStringList@SetCaseSensitive$qqrxo
@System@Sysutils@IntToStr$qqri
@System@Classes@TCustomMemoryStream@SaveToFile$qqrx20System@UnicodeString
@System@TObject@FreeInstance$qqrv
@System@TObject@SafeCallException$qqrp14System@TObjectpv
@System@Sysutils@Trim$qqrx20System@UnicodeString
@System@Generics@Collections@TListHelper@DoExchangeInterface$qqrii
@$xp$22System@HPPGENAttribute
@System@Character@Finalization$qqrv
@System@Generics@Collections@TListHelper@DoIndexOfRevMRef$qqrpxv
@System@@LStrLen$qqrx31System@%AnsiStringT$us$i65535$%
@$xp$26System@Sysutils@TSearchRec
@System@Math@Finalization$qqrv
@System@Sysutils@FloatToStr$qqrg
@System@Generics@Collections@TListHelper@InternalPackManaged$qqrx85System@%DelphiInterface$58System@Generics@Collections@TListHelper@TInternalEmptyFunc%
@System@@_llmul$qqrv
@System@@_llmod$qqrv
@System@Generics@Collections@TListHelper@InternalInsertN$qqripxv
@System@Character@initialization$qqrv
@System@@_lldiv$qqrv
@System@Sysutils@TOSVersion@$bcctr$qqrv
@System@Sysutils@TOSVersion@$bcdtr$qqrv
@$xp$20System@PResStringRec
@System@Generics@Collections@TListHelper@SetItem8$qqrpxvi
@System@Classes@TStream@SetPosition$qqrxj
@System@@DoneExcept$qqrv
@System@Generics@Collections@TListHelper@DoExtractItemRevInterface$qqrpxvpv
@System@Generics@Collections@TListHelper@DoExtractItemFwdInterface$qqrpxvpv
@System@@LStrClr$qqrpv
@System@Classes@TStream@ReadBuffer$qqrpvi
@System@Classes@TMemoryStream@$bdtr$qqrv
@System@Rtti@Finalization$qqrv
@System@TInterfacedObject@GetRefCount$qqrv
@System@@UStrClr$qqrpv
@System@@LStrLAsg$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%
@System@Math@Ceil$qqrxg
@$xp$15System@LongBool
@System@@UStrCat$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@HandleOnException$qqrv
@System@Generics@Collections@TListHelper@SetItem4$qqrpxvi
@System@@WStrClr$qqrpv
@System@Sysutils@FindFirst$qqrx20System@UnicodeStringir26System@Sysutils@TSearchRec
@System@@UStrFromString$qqrr20System@UnicodeStringrx29System@%SmallString$uc$i255$%
@System@Generics@Collections@TListHelper@InternalReverseN$qqrv
@System@Generics@Collections@TListHelper@InternalReverse8$qqrv
@System@Generics@Collections@TListHelper@InternalReverse4$qqrv
@System@Sysutils@FileSetAttr$qqrx20System@UnicodeStringio
@System@Generics@Collections@TListHelper@InternalInsertRange4$qqripvi
@System@SetMemoryManager$qqrrx23System@TMemoryManagerEx
@System@Generics@Collections@TListHelper@InternalToArray$qqrrpv
SHGetMalloc
SHGetDesktopFolder
SHGetSettings
SHGetSpecialFolderLocation
CoTaskMemFree
MessageBoxA
DllCanUnloadNow
DllGetInstance
DllGetVersion
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ