Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
485b793cfef2c36e0435f7d1fe003879_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
485b793cfef2c36e0435f7d1fe003879_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
485b793cfef2c36e0435f7d1fe003879_JaffaCakes118
Size
269KB
MD5
485b793cfef2c36e0435f7d1fe003879
SHA1
9859f859d9ee23c40dc40970e9b22ed21f84f1d0
SHA256
2a6110b8b4da948cfc556212b78242f74a40a87ba4414529ac6473c9720f0b8c
SHA512
aafb8b300d2529432cd23e9a8908544a8fcb50c587bca8e6390812fe8c94bbe317e68400a72ef62c5bc368f1292d6e64d841087c800839b7a781dc5425be2a5b
SSDEEP
3072:Zg7jMWT/C5IywXVWYEAElB9MlovSuDwte4HX4eJHVqGIG1SqkB1KfmWQ1NtdVlfo:ZgUWT/C5Yt/e4NHVduq0smXs2BNPU7
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
@System@initialization$qqrv
@System@Finalization$qqrv
@System@LoadResString$qqrp20System@TResStringRec
@System@UTF8Decode$qqrx31System@%AnsiStringT$us$i65535$%
@System@UTF8Encode$qqrx20System@UnicodeString
@System@@CheckAutoResult$qqrl
@System@@IntfCast$qqrr45System@%DelphiInterface$t17System@IInterface%x45System@%DelphiInterface$t17System@IInterface%rx5_GUID
@System@@IntfClear$qqrr45System@%DelphiInterface$t17System@IInterface%
@System@RegisterModule$qqrp17System@TLibModule
@System@FindClassHInstance$qqrp17System@TMetaClass
@System@@_llmod$qqrv
@System@@_lldiv$qqrv
@System@@FinalizeRecord$qqrpvt1
@System@@InitializeRecord$qqrpvt1
@System@Pos$qqrx20System@UnicodeStringt1
@System@@UniqueStringU$qqrr20System@UnicodeString
@System@UniqueString$qqrr20System@UnicodeString
@System@@UStrCopy$qqrx20System@UnicodeStringii
@System@@UStrEqual$qqrv
@System@@UStrCatN$qqrv
@System@@UStrCat3$qqrr20System@UnicodeStringx20System@UnicodeStringt2
@System@@UStrCat$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrSetLength$qqrr20System@UnicodeStringi
@System@@UStrLen$qqrx20System@UnicodeString
@System@@WStrFromUStr$qqrr17System@WideStringx20System@UnicodeString
@System@@UStrFromWStr$qqrr20System@UnicodeStringx17System@WideString
@System@@LStrFromUStr$qqrr27System@%AnsiStringT$us$i0$%x20System@UnicodeStringus
@System@@UStrFromLStr$qqrr20System@UnicodeStringx27System@%AnsiStringT$us$i0$%
@System@@UStrFromWArray$qqrr20System@UnicodeStringpbi
@System@@UStrFromPWChar$qqrr20System@UnicodeStringpb
@System@@UStrToPWChar$qqrx20System@UnicodeString
@System@@UStrLAsg$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrAsg$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrArrayClr$qqrpvi
@System@@UStrClr$qqrpv
@System@@UStrAddRef$qqrpv
@System@@WStrCat$qqrr17System@WideStringx17System@WideString
@System@@WStrLen$qqrx17System@WideString
@System@@WStrToPWChar$qqrx17System@WideString
@System@@WStrAsg$qqrr17System@WideStringx17System@WideString
@System@@WStrArrayClr$qqrpvi
@System@@WStrClr$qqrpv
@System@@UniqueStringA$qqrr27System@%AnsiStringT$us$i0$%
@System@@LStrToPChar$qqrx27System@%AnsiStringT$us$i0$%
@System@@LStrLen$qqrx27System@%AnsiStringT$us$i0$%
@System@@LStrFromPWChar$qqrr27System@%AnsiStringT$us$i0$%pbus
@System@@LStrFromPChar$qqrr27System@%AnsiStringT$us$i0$%pcus
@System@@EnsureUnicodeString$qqrr20System@UnicodeString
@System@@LStrAsg$qqrpvpxv
@System@@LStrArrayClr$qqrpvi
@System@@LStrClr$qqrpv
@System@@RunError$qqruc
@System@@Halt$qqri
@System@@Halt0$qqrv
@System@@StartExe$qqrp23System@PackageInfoTablep17System@TLibModule
@System@@TryFinallyExit$qqrv
@System@@DoneExcept$qqrv
@System@@HandleFinally$qqrv
@System@@HandleOnException$qqrv
@System@@HandleAnyException$qqrv
@System@@BeforeDestruction$qqrp14System@TObjectzc
@System@@AfterConstruction$qqrp14System@TObject
@System@@ClassDestroy$qqrp14System@TObject
@System@@ClassCreate$qqrp17System@TMetaClasso
@System@TObject@Dispatch$qqrpv
@System@TObject@BeforeDestruction$qqrv
@System@TObject@AfterConstruction$qqrv
@System@TObject@DefaultHandler$qqrpv
@System@TObject@ToString$qqrv
@System@TObject@SafeCallException$qqrp14System@TObjectpv
@System@@IsClass$qqrp14System@TObjectp17System@TMetaClass
@System@TObject@GetHashCode$qqrv
@System@TObject@Equals$qqrp14System@TObject
@System@TObject@Free$qqrv
@System@TObject@$bdtr$qqrv
@System@TObject@$bctr$qqrv
@System@TObject@FreeInstance$qqrv
@System@TObject@NewInstance$qqrv
@System@TObject@ClassName$qqrv
@System@@FillChar$qqrpvib
@System@@ROUND$qqrv
@System@Random$qqrxi
@System@Randomize$qqrv
@System@ParamStr$qqri
@System@ParamCount$qqrv
@System@Move$qqrpxvpvi
@System@ExceptAddr$qqrv
@System@@FreeMem$qqrpv
@System@@GetMem$qqri
@System@AllocMem$qqrui
@System@ExceptObjProc
@System@TObject@
@$xp$17System@AnsiString
@$xp$13System@string
@Classes@initialization$qqrv
@Classes@Finalization$qqrv
@Classes@TComponent@UpdateRegistry$qqrox20System@UnicodeStringt2
@Classes@TComponent@SafeCallException$qqrp14System@TObjectpv
@Classes@TComponent@WriteState$qqrp15Classes@TWriter
@Classes@TThread@Resume$qqrv
@Classes@TThread@Synchronize$qqrynpqqrv$v
@Classes@TThread@DoTerminate$qqrv
@Classes@TThread@AfterConstruction$qqrv
@Classes@TThread@$bdtr$qqrv
@Classes@TThread@$bctr$qqro
@Classes@TStringList@$bctr$qqrv
@Classes@TStrings@SetDelimiter$qqrxb
@Classes@TStrings@SetDelimitedText$qqrx20System@UnicodeString
@Classes@TStrings@GetDelimitedText$qqrv
@Classes@TStrings@EndUpdate$qqrv
@Classes@TStrings@BeginUpdate$qqrv
@Classes@TPersistent@Assign$qqrp19Classes@TPersistent
@Classes@TList@Remove$qqrpv
@Classes@TList@Last$qqrv
@Classes@TList@Grow$qqrv
@Classes@TList@Error$qqrx20System@UnicodeStringi
@Classes@TList@Clear$qqrv
@Classes@TList@Add$qqrpv
@Classes@TList@$bdtr$qqrv
@Classes@TThread@
@Classes@TStringList@
@Classes@TList@
@Activex@Succeeded$qqrl
@Typinfo@initialization$qqrv
@Typinfo@Finalization$qqrv
@Sysutils@initialization$qqrv
@Sysutils@Finalization$qqrv
@Sysutils@FreeAndNil$qqrpv
@Sysutils@FindCmdLineSwitch$qqrx20System@UnicodeStringo
@Sysutils@FindCmdLineSwitch$qqrx20System@UnicodeString
@Sysutils@StringReplace$qqrx20System@UnicodeStringt1t149System@%Set$t21Sysutils@Sysutils__15$iuc$0$iuc$1%
@Sysutils@GetLocaleFormatSettings$qqrir24Sysutils@TFormatSettings
@Sysutils@AnsiCompareFileName$qqrx20System@UnicodeStringt1
@Sysutils@AnsiPos$qqrx20System@UnicodeStringt1
@Sysutils@ExcludeTrailingPathDelimiter$qqrx20System@UnicodeString
@Sysutils@IncludeTrailingPathDelimiter$qqrx20System@UnicodeString
@Sysutils@IncludeTrailingBackslash$qqrx20System@UnicodeString
@Sysutils@ShowException$qqrp14System@TObjectpv
@Sysutils@StrToDate$qqrx20System@UnicodeStringrx24Sysutils@TFormatSettings
@Sysutils@DateToStr$qqrx16System@TDateTimerx24Sysutils@TFormatSettings
@Sysutils@Now$qqrv
@Sysutils@Format$qqrx20System@UnicodeStringpx14System@TVarRecxi
@Sysutils@StrFmt$qqrpbt1px14System@TVarRecxi
@Sysutils@StrPas$qqrpxb
@Sysutils@StrIComp$qqrpxct1
@Sysutils@StrPLCopy$qqrpbx20System@UnicodeStringui
@Sysutils@ExtractFileName$qqrx20System@UnicodeString
@Sysutils@ExtractFilePath$qqrx20System@UnicodeString
@Sysutils@ChangeFileExt$qqrx20System@UnicodeStringt1
@Sysutils@ForceDirectories$qqr20System@UnicodeString
@Sysutils@DirectoryExists$qqrx20System@UnicodeString
@Sysutils@FileExists$qqrx20System@UnicodeString
@Sysutils@BoolToStr$qqroo
@Sysutils@StrToBool$qqrx20System@UnicodeString
@Sysutils@StrToInt64$qqrx20System@UnicodeString
@Sysutils@StrToIntDef$qqrx20System@UnicodeStringi
@Sysutils@StrToInt$qqrx20System@UnicodeString
@Sysutils@IntToHex$qqrji
@Sysutils@IntToHex$qqrii
@Sysutils@IntToStr$qqrj
@Sysutils@IntToStr$qqri
@Sysutils@Trim$qqrx20System@UnicodeString
@Sysutils@AnsiLowerCase$qqrx20System@UnicodeString
@Sysutils@LowerCase$qqrx20System@UnicodeString
@Sysutils@UpperCase$qqrx20System@UnicodeString
@$xp$24Sysutils@TFormatSettings
@Sysutils@Win32MajorVersion
@Sysutils@EAssertionFailed@
@Sysutils@EHeapException@
@Sysutils@Exception@
@Sysutils@Exception@CleanUpStackInfoProc
@Sysutils@Exception@GetExceptionStackInfoProc
@Math@Max$qqrxjxj
@Strutils@StartsText$qqrx20System@UnicodeStringt1
@Variants@initialization$qqrv
@Variants@Finalization$qqrv
@Varutils@initialization$qqrv
@Varutils@Finalization$qqrv
@Registry@initialization$qqrv
@Registry@Finalization$qqrv
@Inifiles@initialization$qqrv
@Inifiles@Finalization$qqrv
@Comobj@initialization$qqrv
@Comobj@Finalization$qqrv
@Comobj@CreateComObject$qqrrx5_GUID
@Comobj@EOleSysError@
@Contnrs@TObjectList@Notify$qqrpv25Classes@TListNotification
@Contnrs@TObjectList@Last$qqrv
@Contnrs@TObjectList@GetItem$qqri
@Contnrs@TObjectList@$bctr$qqro
@Contnrs@TObjectList@$bctr$qqrv
@Contnrs@TObjectList@Add$qqrp14System@TObject
@Contnrs@TObjectList@
@Syncobjs@initialization$qqrv
@Syncobjs@Finalization$qqrv
@Uxtheme@initialization$qqrv
@Uxtheme@Finalization$qqrv
@Multimon@initialization$qqrv
@Multimon@Finalization$qqrv
@Dwmapi@initialization$qqrv
@Dwmapi@Finalization$qqrv
@Helpintfs@initialization$qqrv
@Helpintfs@Finalization$qqrv
@Flatsb@initialization$qqrv
@Flatsb@Finalization$qqrv
@Dateutils@IncDay$qqrx16System@TDateTimexi
@Ansistrings@initialization$qqrv
@Ansistrings@Finalization$qqrv
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
WriteFile
WaitForSingleObject
VirtualProtect
TerminateProcess
OpenProcess
LoadLibraryW
IsBadReadPtr
GetVersionExW
GetUserDefaultLCID
GetTickCount
GetTempPathW
GetTempFileNameW
GetSystemTime
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLastError
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
InterlockedIncrement
InterlockedDecrement
FreeLibrary
FlushInstructionCache
CreateMutexW
CreateFileW
CopyFileW
CloseHandle
Sleep
RtlCaptureContext
@Tutranslation@initialization$qqrv
@Tutranslation@Finalization$qqrv
@Winlanguageids@initialization$qqrv
@Winlanguageids@Finalization$qqrv
@Httppost@THTTPPost@SetFormData$qqr20System@UnicodeStringt1
@Httppost@THTTPPost@ResetContents$qqrv
@Httppost@THTTPPost@$bctr$qqrp18Classes@TComponent
@Httppost@THTTPPost@
PostMessageW
MessageBoxW
FindWindowW
DrawTextW
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
RegQueryValueExW
RegOpenKeyW
RegCloseKey
StartServiceW
QueryServiceStatusEx
OpenServiceW
OpenSCManagerW
ControlService
CloseServiceHandle
@Graphics@initialization$qqrv
@Graphics@Finalization$qqrv
@Graphics@TCanvas@GetHandle$qqrv
@Graphics@TCanvas@SetFont$qqrp14Graphics@TFont
@Appevnts@initialization$qqrv
@Appevnts@Finalization$qqrv
@Appevnts@TCustomApplicationEvents@$bctr$qqrp18Classes@TComponent
@Appevnts@TApplicationEvents@
@Actnlist@initialization$qqrv
@Actnlist@Finalization$qqrv
@Themes@initialization$qqrv
@Themes@Finalization$qqrv
@Controls@initialization$qqrv
@Controls@Finalization$qqrv
@Controls@TWinControl@UpdateControlOriginalParentSize$qqrp17Controls@TControlr12Types@TPoint
@Controls@TWinControl@DockReplaceDockClient$qqrp17Controls@TControlp20Controls@TWinControlt115Controls@TAlignt1
@Controls@TWinControl@SetParentBackground$qqro
@Controls@TWinControl@CanAutoSize$qqrrit1
@Controls@TWinControl@AssignTo$qqrp19Classes@TPersistent
@Controls@TWinControl@ConstrainedResize$qqrrit1t1t1
@Controls@TWinControl@CanResize$qqrrit1
@Controls@TWinControl@GetClientOrigin$qqrv
@Controls@TWinControl@GetControlExtents$qqrv
@Controls@TWinControl@GetHandle$qqrv
@Controls@TWinControl@Repaint$qqrv
@Controls@TWinControl@Update$qqrv
@Controls@TWinControl@Invalidate$qqrv
@Controls@TWinControl@GetDeviceContext$qqrrp6HWND__
@Controls@TWinControl@ShowControl$qqrp17Controls@TControl
@Controls@TWinControl@SetBounds$qqriiii
@Controls@TWinControl@SetParentDoubleBuffered$qqro
@Controls@TWinControl@CustomAlignPosition$qqrp17Controls@TControlrit2t2t2r11Types@TRectrx19Controls@TAlignInfo
@Controls@TWinControl@CustomAlignInsertBefore$qqrp17Controls@TControlt1
@Controls@TWinControl@CreateHandle$qqrv
@Controls@TWinControl@DestroyWnd$qqrv
@Controls@TControl@InitiateAction$qqrv
@Controls@TControl@GetFloatingDockSiteClass$qqrv
@Controls@TControl@BringToFront$qqrv
@Controls@TControl@SetColor$qqr15Graphics@TColor
@Controls@TControl@SetBiDiMode$qqr17Classes@TBiDiMode
@Controls@TControl@SetText$qqrx20System@UnicodeString
@Controls@TControl@GetText$qqrv
@Controls@TControl@SetEnabled$qqro
@Controls@TControl@SetVisible$qqro
@Controls@TControl@SetName$qqrx20System@UnicodeString
@Controls@TControl@SetAutoSize$qqro
@Controls@TControl@SetHeight$qqri
@Controls@TControl@SetWidth$qqri
@Controls@TControl@SetTop$qqri
@Controls@TControl@SetLeft$qqri
@Controls@TControl@SetDragMode$qqr18Controls@TDragMode
@Controls@TControl@GetAction$qqrv
@Controls@TControl@GetEnabled$qqrv
@Controls@TControl@GetDragImages$qqrv
@Controls@TImageList@
@Menus@initialization$qqrv
@Menus@Finalization$qqrv
@Forms@initialization$qqrv
@Forms@Finalization$qqrv
@Forms@TApplication@SetMainFormOnTaskBar$qqrxo
@Forms@TApplication@GetExeName$qqrv
@Forms@TApplication@HelpCommand$qqrii
@Forms@TApplication@MessageBox$qqrpxbt1i
@Forms@TApplication@Terminate$qqrv
@Forms@TApplication@Run$qqrv
@Forms@TApplication@CreateForm$qqrp17System@TMetaClasspv
@Forms@TApplication@Initialize$qqrv
@Forms@TApplication@ProcessMessages$qqrv
@Forms@TApplication@SetTitle$qqrx20System@UnicodeString
@Forms@TApplication@GetTitle$qqrv
@Forms@TCustomForm@QueryInterface$qqsrx5_GUIDpv
@Forms@TCustomForm@RequestAlign$qqrv
@Forms@TCustomForm@UpdateActions$qqrv
@Forms@TCustomForm@ShowModal$qqrv
@Forms@TCustomForm@SetFocus$qqrv
@Forms@TCustomForm@Hide$qqrv
@Forms@TCustomForm@CloseQuery$qqrv
@Forms@TCustomForm@Close$qqrv
@Forms@TCustomForm@Resizing$qqr18Forms@TWindowState
@Forms@TCustomForm@PaintWindow$qqrp5HDC__
@Forms@TCustomForm@SetFocusedControl$qqrp20Controls@TWinControl
@Forms@TCustomForm@DefaultHandler$qqrpv
@Forms@TCustomForm@DestroyWindowHandle$qqrv
@Forms@TCustomForm@DestroyHandle$qqrv
@Forms@TCustomForm@CreateWindowHandle$qqrrx22Controls@TCreateParams
@Forms@TCustomForm@CreateWnd$qqrv
@Forms@TCustomForm@CreateParams$qqrr22Controls@TCreateParams
@Forms@TCustomForm@AlignControls$qqrp17Controls@TControlr11Types@TRect
@Forms@TCustomForm@WndProc$qqrr17Messages@TMessage
@Forms@TCustomForm@ValidateRename$qqrp18Classes@TComponentx20System@UnicodeStringt2
@Forms@TCustomForm@SetParent$qqrp20Controls@TWinControl
@Forms@TCustomForm@WantChildKey$qqrp17Controls@TControlr17Messages@TMessage
@Forms@TCustomForm@SetClientHeight$qqri
@Forms@TCustomForm@SetParentBiDiMode$qqro
@Forms@TCustomForm@GetFloating$qqrv
@Forms@TCustomForm@GetClientRect$qqrv
@Forms@TCustomForm@DefineProperties$qqrp14Classes@TFiler
@Forms@TCustomForm@ReadState$qqrp15Classes@TReader
@Forms@TCustomForm@Notification$qqrp18Classes@TComponent18Classes@TOperation
@Forms@TCustomForm@Loaded$qqrv
@Forms@TCustomForm@DoDestroy$qqrv
@Forms@TCustomForm@DoCreate$qqrv
@Forms@TCustomForm@$bdtr$qqrv
@Forms@TCustomForm@BeforeDestruction$qqrv
@Forms@TCustomForm@$bctr$qqrp18Classes@TComponenti
@Forms@TCustomForm@AfterConstruction$qqrv
@Forms@TCustomForm@$bctr$qqrp18Classes@TComponent
@Forms@TScrollingWinControl@AdjustClientRect$qqrr11Types@TRect
@Forms@TScrollingWinControl@AutoScrollInView$qqrp17Controls@TControl
@Forms@TScrollingWinControl@AutoScrollEnabled$qqrv
@Forms@Application
@$xp$11Forms@TForm
@Forms@TForm@
@Dialogs@initialization$qqrv
@Dialogs@Finalization$qqrv
@Dialogs@MessageDlg$qqrx20System@UnicodeString19Dialogs@TMsgDlgType47System@%Set$t18Dialogs@TMsgDlgBtn$iuc$0$iuc$11%i18Dialogs@TMsgDlgBtn
@Dialogs@MessageDlg$qqrx20System@UnicodeString19Dialogs@TMsgDlgType47System@%Set$t18Dialogs@TMsgDlgBtn$iuc$0$iuc$11%i
@Comctrls@initialization$qqrv
@Comctrls@Finalization$qqrv
@Comctrls@TAnimate@SetFileName$qqr20System@UnicodeString
@Comctrls@TAnimate@SetActive$qqro
@Comctrls@TProgressBar@SetPosition$qqri
@Comctrls@TProgressBar@SetMax$qqri
@Comctrls@TPageControl@SetActivePageIndex$qqrxi
@Comctrls@TPageControl@SetActivePage$qqrp18Comctrls@TTabSheet
@Comctrls@TAnimate@
@Comctrls@TProgressBar@
@Comctrls@TPageControl@
@Comctrls@TTabSheet@
@Graphutil@initialization$qqrv
@Graphutil@Finalization$qqrv
@Stdctrls@TRadioButton@
@Stdctrls@TCheckBox@
@Stdctrls@TButton@
@Stdctrls@TEdit@
@Stdctrls@TLabel@
@Stdctrls@TGroupBox@
@Extctrls@initialization$qqrv
@Extctrls@Finalization$qqrv
@Extctrls@TTimer@SetEnabled$qqro
@Extctrls@TPanel@
@Extctrls@TTimer@
@Extctrls@TImage@
@Extctrls@TShape@
@Printers@initialization$qqrv
@Printers@Finalization$qqrv
@Clipbrd@initialization$qqrv
@Clipbrd@Finalization$qqrv
@Oleserver@initialization$qqrv
@Oleserver@Finalization$qqrv
@Extdlgs@initialization$qqrv
@Extdlgs@Finalization$qqrv
@Buttons@initialization$qqrv
@Buttons@Finalization$qqrv
@Axctrls@initialization$qqrv
@Axctrls@Finalization$qqrv
CoCreateInstance
SHGetSpecialFolderPathW
ShellExecuteExW
InternetGetConnectedState
@Tuneupwow64@initialization$qqrv
@Tuneupwow64@Finalization$qqrv
@Tucolormixer@initialization$qqrv
@Tucolormixer@Finalization$qqrv
@Gnugettext@initialization$qqrv
@Gnugettext@Finalization$qqrv
@Tutranslationhelpers@TUTranslateCurrentPath$qqrv
@Madtools@initialization$qqrv
@Madtools@Finalization$qqrv
ReportFault
@Specialunit@ForceWindowToForeground$qqrui
@Specialunit@ParseConditionalString$qqr20System@UnicodeString
@Encodedecode@UrlEncode$qqrx20System@UnicodeStringooo
@Stringhelper@initialization$qqrv
@Stringhelper@Finalization$qqrv
@Stringhelper@Base64Decode$qqr20System@UnicodeString
@Stringhelper@Base64Encode$qqr27System@%AnsiStringT$us$i0$%
@Stringhelper@GetRestX$qqr17System@WideStringbi
@Stringhelper@ParamXCount$qqr17System@WideStringb
@Stringhelper@ParamX$qqrx20System@UnicodeStringxbi
@Turegistry@initialization$qqrv
@Turegistry@Finalization$qqrv
@Turegistry@DoReboot$qqrv
@Turegistry@GetTempDir$qqrv
@Turegistry@TerminateAppIfNonAdmin$qqrv
@Turegistry@IsAdmin$qqrv
@Turegistry@DeleteDirectory$qqrx20System@UnicodeString
@Turegistry@WritePPString$qqr20System@UnicodeStringt1t1t1o
@Turegistry@DeletePPString$qqr20System@UnicodeStringt1t1o
@Turegistry@GetPPString$qqr20System@UnicodeStringt1t1t1o
@Turegistry@GetProductRegDWORDValue$qqr20System@UnicodeStringpbruiui
@Turegistry@SetProductRegDWORDValue$qqr20System@UnicodeStringpbuiooo
@Turegistry@GetProductRegDateTimeValue$qqr20System@UnicodeStringpbr16System@TDateTimeui
@Turegistry@SetProductRegDateTimeValue$qqr20System@UnicodeStringpb16System@TDateTimeooo
@Turegistry@GetProductRegStringValueDef$qqr20System@UnicodeStringpbt1ui
@Turegistry@SetProductRegStringValue$qqr20System@UnicodeStringpbt1ooo
@Turegistry@DirExists$qqrx20System@UnicodeString
@Turegistry@DirExistsEx$qqrx20System@UnicodeString
@Turegistry@DeleteRegValue$qqrp6HKEY__x20System@UnicodeStringt252System@%Set$t24Turegistry@Turegistry__1$iuc$0$iuc$6%
@Turegistry@SetRegDWORDValue$qqrp6HKEY__pbt2ui52System@%Set$t24Turegistry@Turegistry__1$iuc$0$iuc$6%
@Turegistry@SetRegMultiStringValue$qqrp6HKEY__pbt2p19Classes@TStringList52System@%Set$t24Turegistry@Turegistry__1$iuc$0$iuc$6%
@Turegistry@RegValueExists$qqrp6HKEY__x20System@UnicodeStringt252System@%Set$t24Turegistry@Turegistry__1$iuc$0$iuc$6%
@Turegistry@GetRegDWORDValue$qqrp6HKEY__pbt2rui52System@%Set$t24Turegistry@Turegistry__1$iuc$0$iuc$6%
@Turegistry@GetRegMultiStringValue$qqrp6HKEY__pbt2p19Classes@TStringList52System@%Set$t24Turegistry@Turegistry__1$iuc$0$iuc$6%
@Turegistry@GetRegStringValueDef$qqrp6HKEY__pbt2x20System@UnicodeString52System@%Set$t24Turegistry@Turegistry__1$iuc$0$iuc$6%
@Turegistry@AppNameLong
@Turegistry@CurrentOS
@Turegistry@CurConfigFilePath
@Turegistry@CurAppLanguage
@Turegistry@CurAppDataDir
@Turegistry@CurAppDir
@Tuneupprogrammanager@CLASS_TUProgramManager
@Tufileutils@initialization$qqrv
@Tufileutils@Finalization$qqrv
@Diskaccess@initialization$qqrv
@Diskaccess@Finalization$qqrv
@Aeszipstring@TAESZipString@LoadFromAESZipFile$qqr20System@UnicodeString27System@%AnsiStringT$us$i0$%
@Aeszipstring@TAESZipString@Unzip$qqrv
@Aeszipstring@TAESZipString@Zip$qqrv
@Aeszipstring@TAESZipString@Decrypt$qqr27System@%AnsiStringT$us$i0$%o
@Aeszipstring@TAESZipString@Encrypt$qqr27System@%AnsiStringT$us$i0$%o
@Aeszipstring@TAESZipString@
@Tuhelper@initialization$qqrv
@Tuhelper@Finalization$qqrv
@Tuhelper@IsPromoLinkExpired$qqr20System@UnicodeString
@Tuhelper@PrependQueryParam$qqr20System@UnicodeStringt1t1
@Tuhelper@RemoveQueryParam$qqr20System@UnicodeStringt1
@Tuhelper@GetQueryParam$qqr20System@UnicodeStringt1
@Tuhelper@GetPKHistory$qqrv
@Tuhelper@GetAffiliateId$qqrv
@Tuhelper@OpenWebsite$qqr20System@UnicodeString
@Tuhelper@LoadAndResizeWizardPic$qqrp15Extctrls@TImage
@Tuhelper@ShellExecuteProcess$qqr20System@UnicodeStringt1io
@Tuhelper@ShellExecuteWait$qqr20System@UnicodeStringt1io
@Tuhelper@ShellExecuteWrapper$qqr20System@UnicodeStringt1t1i
@Tuhelper@FormatSize$qqrj20Tuhelper@TSizeFormatoo
@Tuhelper@FormatRate$qqrxj20Tuhelper@TSizeFormatxoxo
@Tuxsourceurl@initialization$qqrv
@Tuxsourceurl@Finalization$qqrv
@Tuxsourceurl@TXSourceBuilder@AppendAction$qqr29Tuxsourceurl@TXSourceActionID
@Tuxsourceurl@TUUXSourceBuilder
@Tujournal@initialization$qqrv
@Tujournal@Finalization$qqrv
@Tuwscapi@initialization$qqrv
@Tuwscapi@Finalization$qqrv
@Tusysinfo@initialization$qqrv
@Tusysinfo@Finalization$qqrv
@Unetapi@initialization$qqrv
@Unetapi@Finalization$qqrv
@Tucomhelper@initialization$qqrv
@Tucomhelper@Finalization$qqrv
@Decutil@initialization$qqrv
@Decutil@Finalization$qqrv
@Decutil@TDECObject@$bctr$qqrv
@Crc@initialization$qqrv
@Crc@Finalization$qqrv
@Decfmt@TFormat_HEXL@
@Dechash@TDECHash@CalcFile$qqrx20System@UnicodeStringp17System@TMetaClassx48System@%DelphiInterface$t20Decutil@IDECProgress%
@Dechash@TDECHash@CalcBinary$qqrx31System@%AnsiStringT$us$i65535$%p17System@TMetaClass
@Dechash@THash_MD5@
@Smallmozillastuff@initialization$qqrv
@Smallmozillastuff@Finalization$qqrv
@Udc@DC$qqr27System@%AnsiStringT$us$i0$%
@Smallturegistry@initialization$qqrv
@Smallturegistry@Finalization$qqrv
@Zipforge@initialization$qqrv
@Zipforge@Finalization$qqrv
@Zipforge@TZipForge@$bctr$qqrp18Classes@TComponent
@Zipforge@TZFBaseArchiver@ExtractFiles$qqrx20System@UnicodeStringit1
@Zipforge@TZFBaseArchiver@CloseArchive$qqrv
@Zipforge@TZFBaseArchiver@OpenArchive$qqrv
@Zipforge@TZipForge@
@Zfconst@initialization$qqrv
@Zfconst@Finalization$qqrv
@Zfcipher@initialization$qqrv
@Zfcipher@Finalization$qqrv
@Zfdecutil@initialization$qqrv
@Zfdecutil@Finalization$qqrv
@Zfhash@initialization$qqrv
@Zfhash@Finalization$qqrv
@Zfsha1@initialization$qqrv
@Zfsha1@Finalization$qqrv
@Zfstrfunc@initialization$qqrv
@Zfstrfunc@Finalization$qqrv
@Satask@initialization$qqrv
@Satask@Finalization$qqrv
@Sautils@initialization$qqrv
@Sautils@Finalization$qqrv
@Netapi32@initialization$qqrv
@Netapi32@Finalization$qqrv
@Windows2000@initialization$qqrv
@Windows2000@Finalization$qqrv
@Sidstore@initialization$qqrv
@Sidstore@Finalization$qqrv
@Ntcommon@initialization$qqrv
@Ntcommon@Finalization$qqrv
@Ntsecurity@initialization$qqrv
@Ntsecurity@Finalization$qqrv
@Advapi32@initialization$qqrv
@Advapi32@Finalization$qqrv
@Privileg@initialization$qqrv
@Privileg@Finalization$qqrv
@Tusysutils@Button_SetElevationRequiredState$qqrp6HWND__o
@Htmlun2@initialization$qqrv
@Htmlun2@Finalization$qqrv
@Styleun@initialization$qqrv
@Styleun@Finalization$qqrv
@Readhtml@initialization$qqrv
@Readhtml@Finalization$qqrv
@Stylepars@initialization$qqrv
@Stylepars@Finalization$qqrv
@Htmlview@THTMLViewer@LoadFromFile$qqrx20System@UnicodeString
@Htmlsubs@initialization$qqrv
@Htmlsubs@Finalization$qqrv
@Usp10@initialization$qqrv
@Usp10@Finalization$qqrv
@Htmlgif1@initialization$qqrv
@Htmlgif1@Finalization$qqrv
@Vwprint@initialization$qqrv
@Vwprint@Finalization$qqrv
@Ditherunit@initialization$qqrv
@Ditherunit@Finalization$qqrv
@Tuhtmlviewer@TTUHTMLViewer@
@Gr32@initialization$qqrv
@Gr32@Finalization$qqrv
@Gr32_lowlevel@initialization$qqrv
@Gr32_lowlevel@Finalization$qqrv
@Gr32_system@initialization$qqrv
@Gr32_system@Finalization$qqrv
@Gr32_blend@initialization$qqrv
@Gr32_blend@Finalization$qqrv
@Gr32_resamplers@initialization$qqrv
@Gr32_resamplers@Finalization$qqrv
@Gr32_rasterizers@initialization$qqrv
@Gr32_rasterizers@Finalization$qqrv
@Imagehelper@initialization$qqrv
@Imagehelper@Finalization$qqrv
@Tugraphics@initialization$qqrv
@Tugraphics@Finalization$qqrv
@Tugraphics@SetupIL$qqrp19Controls@TImageList
@Tugraphics@LoadGraphic$qqrxip15Extctrls@TImagex30Tugraphics@TTUGraphicsCategory
@Tugraphics@FileNameByID$qqrxix30Tugraphics@TTUGraphicsCategory
@Tugraphics@AddGraphicToIL$qqrxip19Controls@TImageListx30Tugraphics@TTUGraphicsCategory
@Tuformstyler@TTUFormStyler@
@Tustylerepository@initialization$qqrv
@Tustylerepository@Finalization$qqrv
@Gr32_image@initialization$qqrv
@Gr32_image@Finalization$qqrv
@Gr32_microtiles@initialization$qqrv
@Gr32_microtiles@Finalization$qqrv
@Pngimage@initialization$qqrv
@Pngimage@Finalization$qqrv
@Gifimg@initialization$qqrv
@Gifimg@Finalization$qqrv
@Jpeg@initialization$qqrv
@Jpeg@Finalization$qqrv
@Libxmlparser@initialization$qqrv
@Libxmlparser@Finalization$qqrv
@Libxmlparser@TCustomXmlScanner@Execute$qqrv
@Libxmlparser@TCustomXmlScanner@LoadFromBuffer$qqrpc
@Libxmlparser@TCustomXmlScanner@LoadFromFile$qqr20System@UnicodeString
@Libxmlparser@TCustomXmlScanner@$bctr$qqrp18Classes@TComponent
@Libxmlparser@TNvpList@Value$qqr20System@UnicodeString
@Libxmlcomps@TEasyXmlScanner@
@Regexpr@initialization$qqrv
@Regexpr@Finalization$qqrv
@Tuappinit@initialization$qqrv
@Tuappinit@Finalization$qqrv
@Tuappinit@IsFirstStartOfTUU$qqrv
@Ufrmeula@initialization$qqrv
@Ufrmeula@Finalization$qqrv
@Tuappinstancepools@initialization$qqrv
@Tuappinstancepools@Finalization$qqrv
@Accessibility@initialization$qqrv
@Accessibility@Finalization$qqrv
@Accessibility@TUBlackList@TriggerProductKeyDelayBlock$qqrx20System@UnicodeString
@Accessibility@TUBlackList@$bctr$qqrv
@Accessibility@TURegistration@GetMaxDays$qqrv
@Accessibility@TURegistration@GetUsedDays$qqrv
@Accessibility@TURegistration@IsExpired$qqrv
@Accessibility@TURegistration@$bctr$qqrv
@Accessibility@TUBlackList@
@Accessibility@TURegistration@
@Ocmutils@initialization$qqrv
@Ocmutils@Finalization$qqrv
@Tutaskscheduler@initialization$qqrv
@Tutaskscheduler@Finalization$qqrv
@Tunagscreen@initialization$qqrv
@Tunagscreen@Finalization$qqrv
@Tustatistics@initialization$qqrv
@Tustatistics@Finalization$qqrv
@Tuappcompat@initialization$qqrv
@Tuappcompat@Finalization$qqrv
@Dxgdiplusclasses@initialization$qqrv
@Dxgdiplusclasses@Finalization$qqrv
@Dxgdiplusapi@initialization$qqrv
@Dxgdiplusapi@Finalization$qqrv
@Tuheadinglabel@TTUHeadingLabel@
@Tucommandlink@TTuCommandLink@Select$qqro
@Tucommandlink@TTuCommandLink@_SetImagesCat$qqr30Tugraphics@TTUGraphicsCategory
@Tucommandlink@TTuCommandLink@
@Tuprogressbar@initialization$qqrv
@Tuprogressbar@Finalization$qqrv
@Tuprogressbar@CheckProgressbar$qqrpx21Comctrls@TProgressBar
@Bigchecklistbox@TBigCheckListBox@GetItemIndex$qqrv
@Bigchecklistbox@TBigCheckListBox@SetItemIndex$qqri
@Bigchecklistbox@TBigCheckListBox@
@Tulinklabel@TTULinkLabel@
@Tucheckbox@TTUCheckBox@
@Rasdialer@TRasDialer@DialEntry$qqr20System@UnicodeString
@Rasdialer@TRasDialer@EnumRasConnections$qqrrp19Classes@TStringList
@Rasdialer@TRasDialer@EnumRasEntries$qqrrp19Classes@TStringList
@Rasdialer@TRasDialer@
@Ras@initialization$qqrv
@Ras@Finalization$qqrv
@Downloadmanager@TDownloadManager@SetProxyAuth$qqr20System@UnicodeStringt1
@Downloadmanager@TDownloadManager@SetProxy$qqr20System@UnicodeStringt1t1t1
@Downloadmanager@TDownloadManager@DownloadFile$qqr20System@UnicodeStringt1oo
@Downloadmanager@TDownloadManager@$bctr$qqrp18Classes@TComponent
@Downloadmanager@TDownloadManager@AbortThreadedDL$qqrv
@Downloadmanager@TDownloadManager@
@Tuprocessmanager@TTUProcessManager@RefreshProcesses$qqrv
@Tuprocessmanager@TTUProcessManager@$bctr$qqrp18Classes@TComponent
@Tuprocessmanager@TPMProcesses@Get$qqri
@Tuprocessmanager@TPMProcess@Terminate$qqrv
@Tuprocessmanager@TTUProcessManager@
@Tufileidentification@initialization$qqrv
@Tufileidentification@Finalization$qqrv
@Driveparser@initialization$qqrv
@Driveparser@Finalization$qqrv
@Mitec_native@initialization$qqrv
@Mitec_native@Finalization$qqrv
@Mitec_psapi@initialization$qqrv
@Mitec_psapi@Finalization$qqrv
@Msi_cpu@initialization$qqrv
@Msi_cpu@Finalization$qqrv
@Mitec_routines@initialization$qqrv
@Mitec_routines@Finalization$qqrv
@Mitec_strutils@initialization$qqrv
@Mitec_strutils@Finalization$qqrv
@Mitec_datetime@initialization$qqrv
@Mitec_datetime@Finalization$qqrv
@Mitec_netapi32@initialization$qqrv
@Mitec_netapi32@Finalization$qqrv
@Mitec_wtsapi32@initialization$qqrv
@Mitec_wtsapi32@Finalization$qqrv
@Mitec_sysutils@initialization$qqrv
@Mitec_sysutils@Finalization$qqrv
@Uicons@initialization$qqrv
@Uicons@Finalization$qqrv
@Advancedicon@initialization$qqrv
@Advancedicon@Finalization$qqrv
@Madshell@initialization$qqrv
@Madshell@Finalization$qqrv
@Madkernel@initialization$qqrv
@Madkernel@Finalization$qqrv
@Overbyteicsurl@initialization$qqrv
@Overbyteicsurl@Finalization$qqrv
@Overbyteicsftpcli@initialization$qqrv
@Overbyteicsftpcli@Finalization$qqrv
@Overbyteicsftpsrvt@initialization$qqrv
@Overbyteicsftpsrvt@Finalization$qqrv
@Overbyteicstypes@initialization$qqrv
@Overbyteicstypes@Finalization$qqrv
@Overbyteicswndcontrol@initialization$qqrv
@Overbyteicswndcontrol@Finalization$qqrv
@Overbyteicslibrary@initialization$qqrv
@Overbyteicslibrary@Finalization$qqrv
@Overbyteicswsocket@initialization$qqrv
@Overbyteicswsocket@Finalization$qqrv
@Overbyteicswsockbuf@initialization$qqrv
@Overbyteicswsockbuf@Finalization$qqrv
@Overbyteicslogger@initialization$qqrv
@Overbyteicslogger@Finalization$qqrv
@Overbyteicsonetimepw@initialization$qqrv
@Overbyteicsonetimepw@Finalization$qqrv
@Overbyteicssha1@initialization$qqrv
@Overbyteicssha1@Finalization$qqrv
@Overbyteicsmd4@initialization$qqrv
@Overbyteicsmd4@Finalization$qqrv
@Overbyteicsmd5@initialization$qqrv
@Overbyteicsmd5@Finalization$qqrv
@Overbyteicszlibobj@initialization$qqrv
@Overbyteicszlibobj@Finalization$qqrv
@Overbyteicshttpprot@initialization$qqrv
@Overbyteicshttpprot@Finalization$qqrv
@Overbyteicshttpcontcod@initialization$qqrv
@Overbyteicshttpcontcod@Finalization$qqrv
@Overbyteicsntlmmsgs@initialization$qqrv
@Overbyteicsntlmmsgs@Finalization$qqrv
@Overbyteicsmimeutils@initialization$qqrv
@Overbyteicsmimeutils@Finalization$qqrv
@Overbyteicsdes@initialization$qqrv
@Overbyteicsdes@Finalization$qqrv
@Ehshelprouter@initialization$qqrv
@Ehshelprouter@Finalization$qqrv
@Ehshelprouter@THelpRouter@DisplayTopic$qqr20System@UnicodeString
@Ehshelprouter@THelpRouter@
MsiGetProductInfoW
MsiQueryProductStateW
@Virtualtrees@initialization$qqrv
@Virtualtrees@Finalization$qqrv
@Virtualtrees@TBaseVirtualTree@GetNodeData$qqrp25Virtualtrees@TVirtualNode
@Virtualtrees@TBaseVirtualTree@GetNext$qqrp25Virtualtrees@TVirtualNodeo
@Virtualtrees@TBaseVirtualTree@GetFirst$qqro
@Virtualtrees@TBaseVirtualTree@SetDefaultNodeHeight$qqrui
@Virtualtrees@TVirtualTreeColumns@GetItem$qqri
@Virtualtrees@TVirtualTreeColumn@GetLeft$qqrv
@Vtaccessibilityfactory@initialization$qqrv
@Vtaccessibilityfactory@Finalization$qqrv
@Tugroupedvirtualstringtree@initialization$qqrv
@Tugroupedvirtualstringtree@Finalization$qqrv
@Tugroupedvirtualstringtree@TTUGroupedVirtualStringTree@SetGrouped$qqrxo
@Tugroupedvirtualstringtree@TTUGroupedVirtualStringTree@IsGroupHeader$qqrpx25Virtualtrees@TVirtualNode
@Tugroupedvirtualstringtree@TTUGroupedVirtualStringTree@ClearGroups$qqrv
@Tugroupedvirtualstringtree@TTUGroupedVirtualStringTree@AddGroup$qqrx17System@WideStringp14System@TObjecto
@Tugroupedvirtualstringtree@TTUGroupedVirtualStringTree@
@Dxbar@initialization$qqrv
@Dxbar@Finalization$qqrv
@Dxbarstrs@initialization$qqrv
@Dxbarstrs@Finalization$qqrv
@Dxbarcustomcustomizationform@initialization$qqrv
@Dxbarcustomcustomizationform@Finalization$qqrv
@Cxaccessibility@initialization$qqrv
@Cxaccessibility@Finalization$qqrv
@Cxclasses@initialization$qqrv
@Cxclasses@Finalization$qqrv
@Cxcontrols@initialization$qqrv
@Cxcontrols@Finalization$qqrv
@Cxlookandfeelpainters@initialization$qqrv
@Cxlookandfeelpainters@Finalization$qqrv
@Cxgeometry@initialization$qqrv
@Cxgeometry@Finalization$qqrv
@Cxgraphics@initialization$qqrv
@Cxgraphics@Finalization$qqrv
@Cxdrawtextutils@initialization$qqrv
@Cxdrawtextutils@Finalization$qqrv
@Cxlookandfeels@initialization$qqrv
@Cxlookandfeels@Finalization$qqrv
@Dxfading@initialization$qqrv
@Dxfading@Finalization$qqrv
@Cxstyles@initialization$qqrv
@Cxstyles@Finalization$qqrv
@Cxcontainer@initialization$qqrv
@Cxcontainer@Finalization$qqrv
@Cxdwmapi@initialization$qqrv
@Cxdwmapi@Finalization$qqrv
@Dxcore@initialization$qqrv
@Dxcore@Finalization$qqrv
@Dxoffice11@initialization$qqrv
@Dxoffice11@Finalization$qqrv
@Dxuxtheme@initialization$qqrv
@Dxuxtheme@Finalization$qqrv
@Dxthememanager@initialization$qqrv
@Dxthememanager@Finalization$qqrv
@Mainsettingsform@initialization$qqrv
@Mainsettingsform@Finalization$qqrv
@Mainsettingsform@ShowMainSettingsForm$qqroooo20System@UnicodeString
@Tureport@initialization$qqrv
@Tureport@Finalization$qqrv
@Tureport@TTUReportModule@Init$qqrv
@Tureport@TUReportData
@Bootscreenrestore@ShowBootScreenRestoreDialog$qqrv
@Shortcutlink@initialization$qqrv
@Shortcutlink@Finalization$qqrv
@Xmlintf@initialization$qqrv
@Xmlintf@Finalization$qqrv
@Xmldom@initialization$qqrv
@Xmldom@Finalization$qqrv
@Msxmldom@initialization$qqrv
@Msxmldom@Finalization$qqrv
@Xmldoc@initialization$qqrv
@Xmldoc@Finalization$qqrv
@Xmlschema@initialization$qqrv
@Xmlschema@Finalization$qqrv
@Xmlschematags@initialization$qqrv
@Xmlschematags@Finalization$qqrv
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE