~!!SetUp_KEY_9696_PAas$c0De!%!![.]zip

Resubmissions

27-07-2024 15:17

240727-sn5bpaycnf 10

27-07-2024 15:03

240727-se5k4avdpm 10

27-07-2024 14:34

240727-rxyd3atfjl 10

Sharing

Copy URL

Twitter E-mail

General

Target

~!!SetUp_KEY_9696_PAas$c0De!%!!.zip
Size

3.1MB
MD5

eade8ec3fb15be090a784517edac94cd
SHA1

8c30ab460a1e60efbaa94bc2123ba756678b6dd5
SHA256

910ec7d764e93e5ffd27e4b623c445e1ab2b66efdd962aebb7f6913a21f3e030
SHA512

92a9ecc566e84172fc38742c0f73f9b9f1b9cd63db1910da82e529f1c61bec357e76746fc01938b64fd8bcbd93cc49cb56c13a04520f4b373f1abe6f942a5e00
SSDEEP

49152:DWFfIQoUex85paSmkQmzfQ/x54yi53m+N/7Lv7dqmWgRhsfscmYR95FE4bYg85nY:DAfIQde0Zzxyi53NpgmWHfs1YRv8sHJ

Score

1^/10

Malware Config

Signatures

Files

~!!SetUp_KEY_9696_PAas$c0De!%!!.zip
.zip
~!!SetUp_KEY_9696_PAas$c0De!%!!/Setup.exe
.exe windows:5 windows x86 arch:x86

668fc9893277bcf73c5f63175b9eacff

Code Sign

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-03-2021 00:00

Not After

24-03-2024 23:59

Subject

CN=IObit CO.\, LTD,O=IObit CO.\, LTD,POSTALCODE=610042,STREET=No. 605\, 6th Floor\, Unit 1\, Building 1+STREET=45 Renmin South Road,L=Chengdu Shi,ST=Sichuan Sheng,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-05-2023 00:00

Not After

02-08-2034 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-03-2021 00:00

Not After

24-03-2024 23:59

Subject

CN=IObit CO.\, LTD,O=IObit CO.\, LTD,POSTALCODE=610042,STREET=No. 605\, 6th Floor\, Unit 1\, Building 1+STREET=45 Renmin South Road,L=Chengdu Shi,ST=Sichuan Sheng,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-05-2023 00:00

Not After

02-08-2034 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

bf:c4:7c:2e:46:47:d9:ad:84:fb:f8:88:b5:2b:f6:3d:bb:20:0d:f7:df:23:e2:5c:8c:02:08:02:40:35:77:89
Signer

Actual PE Digest

bf:c4:7c:2e:46:47:d9:ad:84:fb:f8:88:b5:2b:f6:3d:bb:20:0d:f7:df:23:e2:5c:8c:02:08:02:40:35:77:89

Digest Algorithm

sha256

PE Digest Matches

true

6f:dc:73:7c:0c:53:9d:82:0e:33:9b:2b:58:f1:a7:a3:1a:92:6d:70
Signer

Actual PE Digest

6f:dc:73:7c:0c:53:9d:82:0e:33:9b:2b:58:f1:a7:a3:1a:92:6d:70

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

rtl120.bpl

@System@initialization$qqrv
@System@Finalization$qqrv
@System@LoadResString$qqrp20System@TResStringRec
@System@FreeMemory$qpv
@System@GetMemory$qi
@System@@IntfClear$qqrr45System@%DelphiInterface$t17System@IInterface%
@System@RegisterModule$qqrp17System@TLibModule
@System@@DynArrayAddRef$qqrv
@System@@DynArrayAsg$qqrv
@System@@DynArrayClear$qqrrpvpv
@System@@DynArraySetLength$qqrv
@System@@DynArrayLength$qqrv
@System@@FinalizeArray$qqrpvt1ui
@System@@FinalizeRecord$qqrpvt1
@System@@InitializeRecord$qqrpvt1
@System@Pos$qqrx20System@UnicodeStringt1
@System@@UniqueStringU$qqrr20System@UnicodeString
@System@@UStrDelete$qqrr20System@UnicodeStringii
@System@@UStrCopy$qqrx20System@UnicodeStringii
@System@@UStrEqual$qqrv
@System@@UStrCatN$qqrv
@System@@UStrCat3$qqrr20System@UnicodeStringx20System@UnicodeStringt2
@System@@UStrCat$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrSetLength$qqrr20System@UnicodeStringi
@System@@UStrLen$qqrx20System@UnicodeString
@System@@WStrFromUStr$qqrr17System@WideStringx20System@UnicodeString
@System@@UStrFromWStr$qqrr20System@UnicodeStringx17System@WideString
@System@@LStrFromUStr$qqrr27System@%AnsiStringT$us$i0$%x20System@UnicodeStringus
@System@@UStrFromLStr$qqrr20System@UnicodeStringx27System@%AnsiStringT$us$i0$%
@System@@UStrFromWArray$qqrr20System@UnicodeStringpbi
@System@@UStrFromPWChar$qqrr20System@UnicodeStringpb
@System@@UStrFromWChar$qqrr20System@UnicodeStringb
@System@@UStrFromPWCharLen$qqrr20System@UnicodeStringpbi
@System@@UStrToPWChar$qqrx20System@UnicodeString
@System@@UStrLAsg$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrAsg$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrArrayClr$qqrpvi
@System@@UStrClr$qqrpv
@System@@UStrAddRef$qqrpv
@System@@WStrCat3$qqrr17System@WideStringx17System@WideStringt2
@System@@WStrToPWChar$qqrx17System@WideString
@System@@WStrClr$qqrpv
@System@@LStrToPChar$qqrx27System@%AnsiStringT$us$i0$%
@System@@LStrFromPWChar$qqrr27System@%AnsiStringT$us$i0$%pbus
@System@@EnsureUnicodeString$qqrr20System@UnicodeString
@System@@LStrClr$qqrpv
@System@@Halt0$qqrv
@System@@InitResStringImports$qqrv
@System@@StartExe$qqrp23System@PackageInfoTablep17System@TLibModule
@System@@TryFinallyExit$qqrv
@System@@DoneExcept$qqrv
@System@@RaiseAgain$qqrv
@System@@RaiseExcept$qqrv
@System@@HandleFinally$qqrv
@System@@HandleOnException$qqrv
@System@@HandleAnyException$qqrv
@System@@BeforeDestruction$qqrp14System@TObjectzc
@System@@AfterConstruction$qqrp14System@TObject
@System@@ClassDestroy$qqrp14System@TObject
@System@@ClassCreate$qqrp17System@TMetaClasso
@System@TObject@Dispatch$qqrpv
@System@TObject@BeforeDestruction$qqrv
@System@TObject@AfterConstruction$qqrv
@System@TObject@DefaultHandler$qqrpv
@System@TObject@ToString$qqrv
@System@TObject@SafeCallException$qqrp14System@TObjectpv
@System@TObject@InheritsFrom$qqrp17System@TMetaClass
@System@@CallDynaInst$qqrv
@System@@IsClass$qqrp14System@TObjectp17System@TMetaClass
@System@TObject@GetHashCode$qqrv
@System@TObject@Equals$qqrp14System@TObject
@System@TObject@Free$qqrv
@System@TObject@$bdtr$qqrv
@System@TObject@$bctr$qqrv
@System@TObject@FreeInstance$qqrv
@System@TObject@NewInstance$qqrv
@System@@FillChar$qqrpvib
@System@@AbstractError$qqrv
@System@ParamStr$qqri
@System@Move$qqrpxvpvi
@System@@ReallocMem$qqrrpvi
@System@@FreeMem$qqrpv
@System@@GetMem$qqri
@System@AllocMem$qqrui
@System@TObject@
@$xp$17System@WideString
@$xp$13System@string
@$xp$8Cardinal
@$xp$7Integer
@$xp$7Boolean
@Sysutils@initialization$qqrv
@Sysutils@Finalization$qqrv
@Sysutils@TEncoding@GetUTF8$qqrv
@Sysutils@TEncoding@GetUnicode$qqrv
@Sysutils@GetEnvironmentVariable$qqrx20System@UnicodeString
@Sysutils@FreeAndNil$qqrpv
@Sysutils@RaiseLastOSError$qqrv
@Sysutils@GetModuleName$qqrui
@Sysutils@FindCmdLineSwitch$qqrx20System@UnicodeStringrx29System@%Set$tc$iuc$0$iuc$255%o
@Sysutils@StringReplace$qqrx20System@UnicodeStringt1t149System@%Set$t21Sysutils@Sysutils__15$iuc$0$iuc$1%
@Sysutils@GetLocaleFormatSettings$qqrir24Sysutils@TFormatSettings
@Sysutils@AnsiPos$qqrx20System@UnicodeStringt1
@Sysutils@IncludeTrailingPathDelimiter$qqrx20System@UnicodeString
@Sysutils@IncludeTrailingBackslash$qqrx20System@UnicodeString
@Sysutils@Exception@$bctr$qqrx20System@UnicodeString
@Sysutils@SysErrorMessage$qqrui
@Sysutils@StrToDateTime$qqrx20System@UnicodeStringrx24Sysutils@TFormatSettings
@Sysutils@FormatDateTime$qqrx20System@UnicodeString16System@TDateTime
@Sysutils@Now$qqrv
@Sysutils@Format$qqrx20System@UnicodeStringpx14System@TVarRecxi
@Sysutils@StrPas$qqrpxb
@Sysutils@StrPLCopy$qqrpbx20System@UnicodeStringui
@Sysutils@StrECopy$qqrpbpxb
@Sysutils@StrCopy$qqrpbpxb
@Sysutils@ExpandFileName$qqrx20System@UnicodeString
@Sysutils@ExtractFileExt$qqrx20System@UnicodeString
@Sysutils@ExtractFileName$qqrx20System@UnicodeString
@Sysutils@ExtractFileDir$qqrx20System@UnicodeString
@Sysutils@ExtractFilePath$qqrx20System@UnicodeString
@Sysutils@ChangeFileExt$qqrx20System@UnicodeStringt1
@Sysutils@RenameFile$qqrx20System@UnicodeStringt1
@Sysutils@DeleteFile$qqrx20System@UnicodeString
@Sysutils@FileSetAttr$qqrx20System@UnicodeStringi
@Sysutils@FileGetAttr$qqrx20System@UnicodeString
@Sysutils@ForceDirectories$qqr20System@UnicodeString
@Sysutils@DirectoryExists$qqrx20System@UnicodeString
@Sysutils@FileExists$qqrx20System@UnicodeString
@Sysutils@StrToIntDef$qqrx20System@UnicodeStringi
@Sysutils@IntToHex$qqrji
@Sysutils@IntToHex$qqrii
@Sysutils@IntToStr$qqrj
@Sysutils@UIntToStr$qqrui
@Sysutils@IntToStr$qqri
@Sysutils@Trim$qqrx20System@UnicodeString
@Sysutils@AnsiCompareText$qqrx20System@UnicodeStringt1
@Sysutils@AnsiUpperCase$qqrx20System@UnicodeString
@Sysutils@SameText$qqrx20System@UnicodeStringt1
@Sysutils@CompareMem$qqrpvt1i
@Sysutils@UpperCase$qqrx20System@UnicodeString
@Sysutils@AddExitProc$qqrpqqrv$v
@Sysutils@GUIDToString$qqrrx5_GUID
@Sysutils@CreateGUID$qqsr5_GUID
@$xp$24Sysutils@TFormatSettings
@Sysutils@TwoDigitYearCenturyWindow
@Sysutils@Win32MinorVersion
@Sysutils@Win32MajorVersion
@Sysutils@EConvertError@
@Sysutils@Exception@
@$xp$15Sysutils@TBytes
@Registry@initialization$qqrv
@Registry@Finalization$qqrv
@Registry@TRegistry@ValueExists$qqrx20System@UnicodeString
@Registry@TRegistry@GetDataAsString$qqrx20System@UnicodeStringo
@Registry@TRegistry@WriteString$qqrx20System@UnicodeStringt1
@Registry@TRegistry@OpenKeyReadOnly$qqrx20System@UnicodeString
@Registry@TRegistry@OpenKey$qqrx20System@UnicodeStringo
@Registry@TRegistry@SetRootKey$qqrp6HKEY__
@Registry@TRegistry@CloseKey$qqrv
@Registry@TRegistry@$bctr$qqrv
@Registry@TRegistry@
@Inifiles@initialization$qqrv
@Inifiles@Finalization$qqrv
@Inifiles@TMemIniFile@ReadString$qqrx20System@UnicodeStringt1t1
@Inifiles@TMemIniFile@ReadSectionValues$qqrx20System@UnicodeStringp16Classes@TStrings
@Inifiles@TMemIniFile@ReadSections$qqrp16Classes@TStrings
@Inifiles@TMemIniFile@ReadSection$qqrx20System@UnicodeStringp16Classes@TStrings
@Inifiles@TMemIniFile@GetStrings$qqrp16Classes@TStrings
@Inifiles@TMemIniFile@GetCaseSensitive$qqrv
@Inifiles@TMemIniFile@EraseSection$qqrx20System@UnicodeString
@Inifiles@TMemIniFile@Clear$qqrv
@Inifiles@TMemIniFile@$bdtr$qqrv
@Inifiles@TMemIniFile@$bctr$qqrx20System@UnicodeString
@Inifiles@THashedStringList@IndexOfName$qqrx20System@UnicodeString
@Inifiles@THashedStringList@IndexOf$qqrx20System@UnicodeString
@Inifiles@THashedStringList@$bdtr$qqrv
@Inifiles@THashedStringList@Changed$qqrv
@Inifiles@TStringHash@Remove$qqrx20System@UnicodeString
@Inifiles@TStringHash@Add$qqrx20System@UnicodeStringi
@Inifiles@TCustomIniFile@ReadSections$qqrx20System@UnicodeStringp16Classes@TStrings
@Inifiles@TCustomIniFile@WriteBinaryStream$qqrx20System@UnicodeStringt1p15Classes@TStream
@Inifiles@TCustomIniFile@ReadBinaryStream$qqrx20System@UnicodeStringt1p15Classes@TStream
@Inifiles@TCustomIniFile@ValueExists$qqrx20System@UnicodeStringt1
@Inifiles@TCustomIniFile@WriteTime$qqrx20System@UnicodeStringt116System@TDateTime
@Inifiles@TCustomIniFile@WriteFloat$qqrx20System@UnicodeStringt1d
@Inifiles@TCustomIniFile@WriteDate$qqrx20System@UnicodeStringt116System@TDateTime
@Inifiles@TCustomIniFile@ReadTime$qqrx20System@UnicodeStringt116System@TDateTime
@Inifiles@TCustomIniFile@ReadFloat$qqrx20System@UnicodeStringt1d
@Inifiles@TCustomIniFile@ReadDate$qqrx20System@UnicodeStringt116System@TDateTime
@Inifiles@TCustomIniFile@ReadBool$qqrx20System@UnicodeStringt1o
@Inifiles@TCustomIniFile@WriteInteger$qqrx20System@UnicodeStringt1i
@Inifiles@TCustomIniFile@ReadInteger$qqrx20System@UnicodeStringt1i
@Inifiles@TMemIniFile@
@$xp$26Inifiles@THashedStringList
@Inifiles@THashedStringList@
@Classes@initialization$qqrv
@Classes@Finalization$qqrv
@Classes@TDataModule@ReadState$qqrp15Classes@TReader
@Classes@TDataModule@DefineProperties$qqrp14Classes@TFiler
@Classes@TDataModule@DoDestroy$qqrv
@Classes@TDataModule@DoCreate$qqrv
@Classes@TDataModule@$bdtr$qqrv
@Classes@TDataModule@BeforeDestruction$qqrv
@Classes@TDataModule@$bctr$qqrp18Classes@TComponenti
@Classes@TDataModule@AfterConstruction$qqrv
@Classes@TDataModule@$bctr$qqrp18Classes@TComponent
@Classes@TComponent@QueryInterface$qqsrx5_GUIDpv
@Classes@TComponent@UpdateRegistry$qqrox20System@UnicodeStringt2
@Classes@TComponent@SafeCallException$qqrp14System@TObjectpv
@Classes@TComponent@GetComponentCount$qqrv
@Classes@TComponent@GetComponent$qqri
@Classes@TComponent@SetName$qqrx20System@UnicodeString
@Classes@TComponent@ValidateRename$qqrp18Classes@TComponentx20System@UnicodeStringt2
@Classes@TComponent@WriteState$qqrp15Classes@TWriter
@Classes@TComponent@ReadState$qqrp15Classes@TReader
@Classes@TComponent@Loaded$qqrv
@Classes@TComponent@DefineProperties$qqrp14Classes@TFiler
@Classes@TComponent@Notification$qqrp18Classes@TComponent18Classes@TOperation
@Classes@TComponent@Destroying$qqrv
@Classes@TComponent@DestroyComponents$qqrv
@Classes@TComponent@BeforeDestruction$qqrv
@Classes@TComponent@$bdtr$qqrv
@Classes@TComponent@$bctr$qqrp18Classes@TComponent
@Classes@TThread@WaitFor$qqrv
@Classes@TThread@Terminate$qqrv
@Classes@TThread@Resume$qqrv
@Classes@TThread@Suspend$qqrv
@Classes@TThread@DoTerminate$qqrv
@Classes@TThread@AfterConstruction$qqrv
@Classes@TThread@$bdtr$qqrv
@Classes@TThread@$bctr$qqro
@Classes@TStringList@SetCaseSensitive$qqrxo
@Classes@TStringList@$bctr$qqrv
@Classes@TStringList@CompareStrings$qqrx20System@UnicodeStringt1
@Classes@TStringList@CustomSort$qqrpqqrp19Classes@TStringListii$i
@Classes@TStringList@Sort$qqrv
@Classes@TStringList@SetUpdateState$qqro
@Classes@TStringList@SetCapacity$qqri
@Classes@TStringList@PutObject$qqrip14System@TObject
@Classes@TStringList@Put$qqrix20System@UnicodeString
@Classes@TStringList@InsertItem$qqrix20System@UnicodeStringp14System@TObject
@Classes@TStringList@InsertObject$qqrix20System@UnicodeStringp14System@TObject
@Classes@TStringList@Insert$qqrix20System@UnicodeString
@Classes@TStringList@GetObject$qqri
@Classes@TStringList@GetCount$qqrv
@Classes@TStringList@GetCapacity$qqrv
@Classes@TStringList@Get$qqri
@Classes@TStringList@Find$qqrx20System@UnicodeStringri
@Classes@TStringList@Exchange$qqrii
@Classes@TStringList@Delete$qqri
@Classes@TStringList@Clear$qqrv
@Classes@TStringList@Changing$qqrv
@Classes@TStringList@AddObject$qqrx20System@UnicodeStringp14System@TObject
@Classes@TStringList@Add$qqrx20System@UnicodeString
@Classes@TStrings@GetNameValueSeparator$qqrv
@Classes@TStrings@SetTextStr$qqrx20System@UnicodeString
@Classes@TStrings@SetText$qqrpb
@Classes@TStrings@SaveToStream$qqrp15Classes@TStreamp18Sysutils@TEncoding
@Classes@TStrings@SaveToStream$qqrp15Classes@TStream
@Classes@TStrings@SaveToFile$qqrx20System@UnicodeStringp18Sysutils@TEncoding
@Classes@TStrings@SaveToFile$qqrx20System@UnicodeString
@Classes@TStrings@Move$qqrii
@Classes@TStrings@LoadFromStream$qqrp15Classes@TStreamp18Sysutils@TEncoding
@Classes@TStrings@LoadFromStream$qqrp15Classes@TStream
@Classes@TStrings@LoadFromFile$qqrx20System@UnicodeStringp18Sysutils@TEncoding
@Classes@TStrings@LoadFromFile$qqrx20System@UnicodeString
@Classes@TStrings@IndexOfObject$qqrp14System@TObject
@Classes@TStrings@GetTextStr$qqrv
@Classes@TStrings@GetText$qqrv
@Classes@TStrings@GetEnumerator$qqrv
@Classes@TStrings@DefineProperties$qqrp14Classes@TFiler
@Classes@TStrings@Assign$qqrp19Classes@TPersistent
@Classes@TStrings@AddStrings$qqrp16Classes@TStrings
@Classes@TStringsEnumerator@MoveNext$qqrv
@Classes@TStringsEnumerator@GetCurrent$qqrv
@Classes@TCollection@Notify$qqrp23Classes@TCollectionItem31Classes@TCollectionNotification
@Classes@TCollection@Deleting$qqrp23Classes@TCollectionItem
@Classes@TCollection@Added$qqrrp23Classes@TCollectionItem
@Classes@TCollection@Update$qqrp23Classes@TCollectionItem
@Classes@TCollection@SetItemName$qqrp23Classes@TCollectionItem
@Classes@TCollection@GetItem$qqri
@Classes@TCollection@GetCount$qqrv
@Classes@TCollection@EndUpdate$qqrv
@Classes@TCollection@BeginUpdate$qqrv
@Classes@TCollection@Assign$qqrp19Classes@TPersistent
@Classes@TCollection@$bdtr$qqrv
@Classes@TCollection@$bctr$qqrp17System@TMetaClass
@Classes@TCollectionItem@SetIndex$qqri
@Classes@TCollectionItem@SetDisplayName$qqrx20System@UnicodeString
@Classes@TCollectionItem@SetCollection$qqrp19Classes@TCollection
@Classes@TCollectionItem@GetDisplayName$qqrv
@Classes@TCollectionItem@$bdtr$qqrv
@Classes@TCollectionItem@$bctr$qqrp19Classes@TCollection
@Classes@TPersistent@DefineProperties$qqrp14Classes@TFiler
@Classes@TPersistent@AssignTo$qqrp19Classes@TPersistent
@Classes@TPersistent@Assign$qqrp19Classes@TPersistent
@$xp$19Classes@TDataModule
@Classes@TDataModule@
@$xp$18Classes@TComponent
@Classes@TComponent@
@Classes@TThread@
@Classes@TStringList@
@$xp$19Classes@TCollection
@Classes@TCollection@
@$xp$23Classes@TCollectionItem
@Classes@TCollectionItem@
@Typinfo@initialization$qqrv
@Typinfo@Finalization$qqrv
@Typinfo@GetEnumName$qqrp17Typinfo@TTypeInfoi
@Variants@initialization$qqrv
@Variants@Finalization$qqrv
@Varutils@initialization$qqrv
@Varutils@Finalization$qqrv
@Syncobjs@initialization$qqrv
@Syncobjs@Finalization$qqrv
@Uxtheme@initialization$qqrv
@Uxtheme@Finalization$qqrv
@Multimon@initialization$qqrv
@Multimon@Finalization$qqrv
@Dwmapi@initialization$qqrv
@Dwmapi@Finalization$qqrv
@Helpintfs@initialization$qqrv
@Helpintfs@Finalization$qqrv
@Mapi@initialization$qqrv
@Mapi@Finalization$qqrv
@Flatsb@initialization$qqrv
@Flatsb@Finalization$qqrv

kernel32

GetModuleHandleW
lstrcmpiW
WriteFile
WinExec
WaitForSingleObject
TerminateProcess
Sleep
SetLastError
OutputDebugStringW
OpenProcess
MoveFileExW
LoadLibraryW
GetWindowsDirectoryW
GetVersionExW
GetTickCount
GetTempPathW
GetSystemDirectoryW
GetShortPathNameW
GetProcAddress
GetModuleHandleW
GetLastError
GetCurrentProcessId
GetCurrentProcess
FreeLibrary
CreateProcessW
CreateFileW
CloseHandle
Sleep
GetProcAddress
LoadLibraryA
GetModuleHandleA
ProcessIdToSessionId

madexcept_.bpl

@Madexcept@initialization$qqrv
@Madexcept@Finalization$qqrv
@Madexcept@HookThreads$qqrv
@Madexcept@RegisterExceptionHandler$qqrpqqrx50System@%DelphiInterface$t22Madexcept@IMEException%ro$v19Madexcept@TSyncType22Madexcept@TExceptPhase
@Madmapfile@initialization$qqrv
@Madmapfile@Finalization$qqrv
@Madstacktrace@initialization$qqrv
@Madstacktrace@Finalization$qqrv
@Madlinkdisasm@initialization$qqrv
@Madlinkdisasm@Finalization$qqrv
@Madlisthardware@initialization$qqrv
@Madlisthardware@Finalization$qqrv
@Madlistprocesses@initialization$qqrv
@Madlistprocesses@Finalization$qqrv
@Madlistmodules@initialization$qqrv
@Madlistmodules@Finalization$qqrv

user32

ShowOwnedPopups
PostThreadMessageW
PostMessageW
PeekMessageW
GetMessageW
DispatchMessageW

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

advapi32

ReportEventW
RegisterEventSourceW
OpenProcessToken
LookupAccountSidW
GetTokenInformation
GetSidSubAuthorityCount
GetSidSubAuthority
DuplicateTokenEx
DeregisterEventSource
CreateProcessAsUserW
StartServiceW
StartServiceCtrlDispatcherW
SetServiceStatus
QueryServiceStatus
OpenServiceW
OpenSCManagerW
DeleteService
CreateServiceW
ControlService
CloseServiceHandle

madbasic_.bpl

@Madstrings@initialization$qqrv
@Madstrings@Finalization$qqrv
@Madtools@initialization$qqrv
@Madtools@Finalization$qqrv

maddisasm_.bpl

@Maddisasm@initialization$qqrv
@Maddisasm@Finalization$qqrv

shell32

ShellExecuteW
SHGetSpecialFolderPathW

vcl120.bpl

@Graphics@initialization$qqrv
@Graphics@Finalization$qqrv
@Consts@_SServiceUninstallFailed
@Consts@_SServiceUninstallOK
@Consts@_SServiceInstallFailed
@Consts@_SServiceInstallOK
@Consts@_SCustomError
@Consts@_SShutdown
@Consts@_SInterrogate
@Consts@_SContinue
@Consts@_SPause
@Consts@_SStop
@Consts@_SStart
@Consts@_SExecute
@Consts@_SServiceFailed
@Extctrls@initialization$qqrv
@Extctrls@Finalization$qqrv
@Extctrls@TTimer@SetEnabled$qqro
@Extctrls@TTimer@
@Themes@initialization$qqrv
@Themes@Finalization$qqrv
@Controls@initialization$qqrv
@Controls@Finalization$qqrv
@Actnlist@initialization$qqrv
@Actnlist@Finalization$qqrv
@Menus@initialization$qqrv
@Menus@Finalization$qqrv
@Forms@initialization$qqrv
@Forms@Finalization$qqrv
@Forms@TApplication@SetShowHint$qqro
@Forms@TApplication@GetExeName$qqrv
@Forms@TApplication@Terminate$qqrv
@Forms@TApplication@CreateForm$qqrp17System@TMetaClasspv
@Forms@TApplication@Initialize$qqrv
@Forms@TApplication@UnhookMainWindow$qqrynpqqrr17Messages@TMessage$o
@Forms@TApplication@HookMainWindow$qqrynpqqrr17Messages@TMessage$o
@Forms@TApplication@HandleMessage$qqrv
@Forms@Application
@Dialogs@initialization$qqrv
@Dialogs@Finalization$qqrv
@Dialogs@MessageDlg$qqrx20System@UnicodeString19Dialogs@TMsgDlgType47System@%Set$t18Dialogs@TMsgDlgBtn$iuc$0$iuc$11%i
@Comctrls@initialization$qqrv
@Comctrls@Finalization$qqrv
@Graphutil@initialization$qqrv
@Graphutil@Finalization$qqrv
@Printers@initialization$qqrv
@Printers@Finalization$qqrv
@Clipbrd@initialization$qqrv
@Clipbrd@Finalization$qqrv
@Extactns@initialization$qqrv
@Extactns@Finalization$qqrv
@Extdlgs@initialization$qqrv
@Extdlgs@Finalization$qqrv
@Buttons@initialization$qqrv
@Buttons@Finalization$qqrv

userenv

DestroyEnvironmentBlock
CreateEnvironmentBlock

wtsapi32

WTSFreeMemory
WTSQuerySessionInformationW
WTSEnumerateSessionsW

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 704B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
~!!SetUp_KEY_9696_PAas$c0De!%!!/chloral.ai
~!!SetUp_KEY_9696_PAas$c0De!%!!/madbasic_.bpl
.dll windows:5 windows x86 arch:x86

ae5a6a29d3cea5a63ad958cfb1a5fb0c

Code Sign

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-03-2021 00:00

Not After

24-03-2024 23:59

Subject

CN=IObit CO.\, LTD,O=IObit CO.\, LTD,POSTALCODE=610042,STREET=No. 605\, 6th Floor\, Unit 1\, Building 1+STREET=45 Renmin South Road,L=Chengdu Shi,ST=Sichuan Sheng,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-05-2023 00:00

Not After

02-08-2034 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-03-2021 00:00

Not After

24-03-2024 23:59

Subject

CN=IObit CO.\, LTD,O=IObit CO.\, LTD,POSTALCODE=610042,STREET=No. 605\, 6th Floor\, Unit 1\, Building 1+STREET=45 Renmin South Road,L=Chengdu Shi,ST=Sichuan Sheng,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-05-2023 00:00

Not After

02-08-2034 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3c:84:2a:e3:37:a9:9f:25:14:45:02:2b:54:0d:d9:c7:b5:d9:a5:cb:3e:61:ba:2c:3b:69:4a:d3:c1:00:d7:71
Signer

Actual PE Digest

3c:84:2a:e3:37:a9:9f:25:14:45:02:2b:54:0d:d9:c7:b5:d9:a5:cb:3e:61:ba:2c:3b:69:4a:d3:c1:00:d7:71

Digest Algorithm

sha256

PE Digest Matches

true

f0:61:17:94:aa:8f:fc:7b:a6:41:14:52:28:8d:c8:db:fa:d1:c6:cb
Signer

Actual PE Digest

f0:61:17:94:aa:8f:fc:7b:a6:41:14:52:28:8d:c8:db:fa:d1:c6:cb

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

rtl120.bpl

@System@initialization$qqrv
@System@Finalization$qqrv
@System@@IntfAddRef$qqrx45System@%DelphiInterface$t17System@IInterface%
@System@@IntfCopy$qqrr45System@%DelphiInterface$t17System@IInterface%x45System@%DelphiInterface$t17System@IInterface%
@System@@IntfClear$qqrr45System@%DelphiInterface$t17System@IInterface%
@System@UnregisterModule$qqrp17System@TLibModule
@System@RegisterModule$qqrp17System@TLibModule
@System@@DynArrayAsg$qqrv
@System@@DynArrayClear$qqrrpvpv
@System@@DynArrayCopy$qqrpvt1rpv
@System@@DynArraySetLength$qqrv
@System@@DynArrayHigh$qqrv
@System@@DynArrayLength$qqrv
@System@@_llmod$qqrv
@System@@_lldiv$qqrv
@System@@_llmul$qqrv
@System@@Dispose$qqrpvt1
@System@@New$qqripv
@System@@CopyRecord$qqrv
@System@@FinalizeArray$qqrpvt1ui
@System@@FinalizeRecord$qqrpvt1
@System@@UniqueStringU$qqrr20System@UnicodeString
@System@UniqueString$qqrr20System@UnicodeString
@System@@UStrInsert$qqrx20System@UnicodeStringr20System@UnicodeStringi
@System@@UStrDelete$qqrr20System@UnicodeStringii
@System@@UStrCopy$qqrx20System@UnicodeStringii
@System@@UStrEqual$qqrv
@System@@UStrCatN$qqrv
@System@@UStrCat3$qqrr20System@UnicodeStringx20System@UnicodeStringt2
@System@@UStrCat$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrSetLength$qqrr20System@UnicodeStringi
@System@@UStrLen$qqrx20System@UnicodeString
@System@@WStrFromUStr$qqrr17System@WideStringx20System@UnicodeString
@System@@LStrFromUStr$qqrr27System@%AnsiStringT$us$i0$%x20System@UnicodeStringus
@System@@UStrFromLStr$qqrr20System@UnicodeStringx27System@%AnsiStringT$us$i0$%
@System@@UStrFromWArray$qqrr20System@UnicodeStringpbi
@System@@UStrFromPWChar$qqrr20System@UnicodeStringpb
@System@@UStrFromPChar$qqrr20System@UnicodeStringpc
@System@@UStrFromWChar$qqrr20System@UnicodeStringb
@System@@UStrToPWChar$qqrx20System@UnicodeString
@System@@UStrLAsg$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrAsg$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrArrayClr$qqrpvi
@System@@UStrClr$qqrpv
@System@@UStrAddRef$qqrpv
@System@@WStrToPWChar$qqrx17System@WideString
@System@@WStrClr$qqrpv
@System@@LStrSetLength$qqrv
@System@@LStrInsert$qqrv
@System@@LStrDelete$qqrv
@System@@LStrCopy$qqrv
@System@@UniqueStringA$qqrr27System@%AnsiStringT$us$i0$%
@System@UniqueString$qqrr27System@%AnsiStringT$us$i0$%
@System@@LStrToPChar$qqrx27System@%AnsiStringT$us$i0$%
@System@@LStrAddRef$qqrpv
@System@@LStrEqual$qqrv
@System@@LStrCatN$qqrv
@System@@LStrCat3$qqrv
@System@@LStrCat$qqrv
@System@@LStrLen$qqrx27System@%AnsiStringT$us$i0$%
@System@@LStrFromArray$qqrr27System@%AnsiStringT$us$i0$%pcius
@System@@LStrFromPWChar$qqrr27System@%AnsiStringT$us$i0$%pbus
@System@@LStrFromPChar$qqrr27System@%AnsiStringT$us$i0$%pcus
@System@@LStrFromChar$qqrr27System@%AnsiStringT$us$i0$%cus
@System@@EnsureAnsiString$qqrr27System@%AnsiStringT$us$i0$%us
@System@@EnsureUnicodeString$qqrr20System@UnicodeString
@System@@LStrFromPCharLen$qqrr27System@%AnsiStringT$us$i0$%pcius
@System@@LStrLAsg$qqrpvpxv
@System@@LStrAsg$qqrpvpxv
@System@@LStrArrayClr$qqrpvi
@System@@LStrClr$qqrpv
@System@@RunError$qqruc
@System@@PackageUnload$qqrpx23System@PackageInfoTablep17System@TLibModule
@System@@PackageLoad$qqrpx23System@PackageInfoTablep17System@TLibModule
@System@@TryFinallyExit$qqrv
@System@@DoneExcept$qqrv
@System@@RaiseAgain$qqrv
@System@@RaiseExcept$qqrv
@System@@HandleFinally$qqrv
@System@@HandleAnyException$qqrv
@System@@BeforeDestruction$qqrp14System@TObjectzc
@System@@AfterConstruction$qqrp14System@TObject
@System@@ClassDestroy$qqrp14System@TObject
@System@@ClassCreate$qqrp17System@TMetaClasso
@System@TObject@Dispatch$qqrpv
@System@TObject@BeforeDestruction$qqrv
@System@TObject@AfterConstruction$qqrv
@System@TObject@DefaultHandler$qqrpv
@System@TObject@ToString$qqrv
@System@TObject@SafeCallException$qqrp14System@TObjectpv
@System@TObject@GetInterface$qqrrx5_GUIDpv
@System@TObject@GetHashCode$qqrv
@System@TObject@Equals$qqrp14System@TObject
@System@TObject@Free$qqrv
@System@TObject@$bdtr$qqrv
@System@TObject@$bctr$qqrv
@System@TObject@FreeInstance$qqrv
@System@TObject@NewInstance$qqrv
@System@@SetSub$qqrv
@System@@SetUnion$qqrv
@System@@FillChar$qqrpvib
@System@@AbstractError$qqrv
@System@@ROUND$qqrv
@System@Sin$qqrxg
@System@Get8087CW$qqrv
@System@Set8087CW$qqrus
@System@Move$qqrpxvpvi
@System@@FreeMem$qqrpv
@System@@GetMem$qqri
@System@AllocMem$qqrui
@System@ExceptionClass
@System@ExceptObjProc
@$xp$17System@IInterface
@$xp$14System@TObject
@System@TObject@
@$xp$17System@AnsiString
@$xp$17System@WideString
@$xp$13System@string
@$xp$6Double
@$xp$5Int64
@$xp$8Cardinal
@$xp$11System@Word
@$xp$11System@Byte
@$xp$7Integer
@$xp$8SmallInt
@$xp$15System@ShortInt
@$xp$11System@Char
@$xp$8AnsiChar
@$xp$7Boolean
@Classes@initialization$qqrv
@Classes@Finalization$qqrv
@Classes@Rect$qqriiii
@Typinfo@initialization$qqrv
@Typinfo@Finalization$qqrv
@Sysutils@initialization$qqrv
@Sysutils@Finalization$qqrv
@Math@Min$qqrxixi
@Math@Ceil$qqrxg
@Variants@initialization$qqrv
@Variants@Finalization$qqrv
@Varutils@initialization$qqrv
@Varutils@Finalization$qqrv
@Registry@initialization$qqrv
@Registry@Finalization$qqrv
@Inifiles@initialization$qqrv
@Inifiles@Finalization$qqrv

kernel32

TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
FreeLibrary
lstrlenW
lstrcmpA
WriteFile
WaitForSingleObject
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
UnmapViewOfFile
SizeofResource
SetLastError
SetFileTime
SetFilePointer
SetFileAttributesA
SetFileAttributesW
SetEndOfFile
ReleaseMutex
ReadFile
MapViewOfFile
LockResource
LocalFree
LocalAlloc
LoadResource
LoadLibraryExA
LeaveCriticalSection
InitializeCriticalSection
GetVersionExA
GetVersionExW
GetVersion
GetTickCount
GetThreadLocale
GetTempPathA
GetTempPathW
GetProcAddress
GetModuleHandleA
GetModuleHandleW
GetModuleFileNameA
GetModuleFileNameW
GetLocaleInfoA
GetLocaleInfoW
GetLastError
GetFileTime
GetFileSize
GetFileAttributesA
GetFileAttributesW
GetCurrentThreadId
GetCurrentProcessId
FreeResource
InterlockedIncrement
InterlockedDecrement
FreeLibrary
FormatMessageA
FormatMessageW
FindResourceA
FindResourceW
FindFirstFileA
FindFirstFileW
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
EnterCriticalSection
DeleteFileA
DeleteFileW
DeleteCriticalSection
CreateMutexA
CreateFileMappingA
CreateFileMappingW
CreateFileA
CreateFileW
CloseHandle

user32

CreateWindowExA
UnregisterClassA
RegisterClassA
PostMessageW
IsWindowUnicode
IsWindow
GetSystemMetrics
DestroyWindow
DefWindowProcA
DefWindowProcW

gdi32

GetObjectW

version

VerQueryValueA
VerQueryValueW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoA
GetFileVersionInfoW

vcl120.bpl

@Graphics@initialization$qqrv
@Graphics@Finalization$qqrv
@Graphics@TBitmap@SetPixelFormat$qqr21Graphics@TPixelFormat
@Graphics@TBitmap@GetScanline$qqri
@Graphics@TBitmap@GetPixelFormat$qqrv
@Graphics@TBitmap@GetCanvas$qqrv
@Graphics@TBitmap@$bctr$qqrv
@Graphics@TCanvas@GetHandle$qqrv
@Graphics@TCanvas@StretchDraw$qqrrx11Types@TRectp17Graphics@TGraphic
@Graphics@TBitmap@

comctl32

ImageList_GetImageInfo
ImageList_Draw

Exports

Exports

@$xp$12Madtools@TOS
@$xp$14Madbasic@IList
@$xp$15Madbasic@IBasic
@$xp$15Madbasic@TIList
@$xp$15Madtypes@TSByte
@$xp$15Madtypes@TSChar
@$xp$16Madbasic@TIBasic
@$xp$16Madtools@TOsEnum
@$xp$16Madtypes@TDAByte
@$xp$16Madtypes@TDAChar
@$xp$16Madtypes@TDAWord
@$xp$17Madbasic@TDABasic
@$xp$17Madtypes@TAString
@$xp$17Madtypes@TDAInt64
@$xp$17Madtypes@TExtBool
@$xp$18Madtypes@TDAString
@$xp$18Madtypes@TSBoolean
@$xp$18Madtypes@TSExtBool
@$xp$19Madlists@IBasicList
@$xp$19Madtypes@TAIUnknown
@$xp$19Madtypes@TDABoolean
@$xp$19Madtypes@TDAExtBool
@$xp$19Madtypes@TDAInteger
@$xp$19Madtypes@TDAPointer
@$xp$20Madbasic@TChangeType
@$xp$20Madbasic@_TIBasic@_1
@$xp$20Madtypes@TDAAnsiChar
@$xp$20Madtypes@TDACardinal
@$xp$20Madtypes@TDAIUnknown
@$xp$20Madtypes@TDAShortInt
@$xp$20Madtypes@TDASmallInt
@$xp$20Madtypes@TDAWideChar
@$xp$21Madlists@IPointerList
@$xp$21Madtypes@MadException
@$xp$21Madtypes@TAAnsiString
@$xp$21Madtypes@TAWideString
@$xp$21Madtypes@TDANativeInt
@$xp$22Madtools@TMsgHandlerOO
@$xp$22Madtypes@TDAAnsiString
@$xp$22Madtypes@TDANativeUInt
@$xp$22Madtypes@TDAWideString
@$xp$23Madlists@IInterfaceList
@$xp$24Madgraphics@TGrayPercent
@$xp$24Madtypes@TAUnicodeString
@$xp$25Madbasic@ICriticalSection
@$xp$25Madbasic@ICustomBasicList
@$xp$25Madtypes@TDAUnicodeString
@$xp$26Madbasic@TICustomBasicList
@$xp$27Madbasic@TDataDestroyProcOO
@$xp$27Madgraphics@TStretchQuality
@$xp$28Madbasic@IBasicListSelection
@$xp$28Madbasic@TIListChangeEventOO
@$xp$29Madbasic@TIBasicListSelection
@$xp$30Madbasic@_TICustomBasicList@_1
@$xp$30Madbasic@_TICustomBasicList@_2
@$xp$30Madbasic@_TICustomBasicList@_3
@$xp$30Madbasic@_TICustomBasicList@_4
@GetPackageInfoTable
@Madbasic@CErrorStr_AmInvalid
@Madbasic@CErrorStr_IndexOutOfRange
@Madbasic@CErrorStr_InvalidClass
@Madbasic@CErrorStr_InvalidIndex
@Madbasic@CErrorStr_SectionBlocked
@Madbasic@CErrorStr_SectionLeaveError
@Madbasic@CErrorStr_Unknown
@Madbasic@Finalization$qqrv
@Madbasic@NewCriticalSection$qqrv
@Madbasic@TIBasic@
@Madbasic@TIBasic@$bctr$qqrouix20System@UnicodeString
@Madbasic@TIBasic@$bdtr$qqrv
@Madbasic@TIBasic@AddParent$qqrp26Madbasic@TICustomBasicList
@Madbasic@TIBasic@AfterConstruction$qqrv
@Madbasic@TIBasic@BeforeDestruction$qqrv
@Madbasic@TIBasic@CheckValid$qqrv
@Madbasic@TIBasic@DelParent$qqrp26Madbasic@TICustomBasicList
@Madbasic@TIBasic@GetChecked$qqrx53System@%DelphiInterface$t25Madbasic@ICustomBasicList%
@Madbasic@TIBasic@GetData$qqrv
@Madbasic@TIBasic@GetFocused$qqrx53System@%DelphiInterface$t25Madbasic@ICustomBasicList%
@Madbasic@TIBasic@GetIndex$qqrx53System@%DelphiInterface$t25Madbasic@ICustomBasicList%
@Madbasic@TIBasic@GetLastChangeType$qqrx53System@%DelphiInterface$t25Madbasic@ICustomBasicList%
@Madbasic@TIBasic@GetLastErrorNo$qqrv
@Madbasic@TIBasic@GetLastErrorStr$qqrv
@Madbasic@TIBasic@GetOldIndex$qqrx53System@%DelphiInterface$t25Madbasic@ICustomBasicList%
@Madbasic@TIBasic@GetSelected$qqrx53System@%DelphiInterface$t25Madbasic@ICustomBasicList%
@Madbasic@TIBasic@GetStrBuf$qqrv
@Madbasic@TIBasic@GetStrBufA$qqrv
@Madbasic@TIBasic@GetStrBufW$qqrv
@Madbasic@TIBasic@IsValid$qqrv
@Madbasic@TIBasic@NewInstance$qqrv
@Madbasic@TIBasic@QueryInterface$qqsrx5_GUIDpv
@Madbasic@TIBasic@SelfAsTObject$qqrv
@Madbasic@TIBasic@SetChecked$qqrx53System@%DelphiInterface$t25Madbasic@ICustomBasicList%17Madtypes@TExtBool
@Madbasic@TIBasic@SetData$qqrpv
@Madbasic@TIBasic@SetData$qqrpvpqqrrpv$v
@Madbasic@TIBasic@SetData$qqrpvynpqqrrpv$v
@Madbasic@TIBasic@SetFocused$qqrx53System@%DelphiInterface$t25Madbasic@ICustomBasicList%o
@Madbasic@TIBasic@SetLastChangeType$qqrx53System@%DelphiInterface$t25Madbasic@ICustomBasicList%20Madbasic@TChangeType
@Madbasic@TIBasic@SetLastError$qqruix20System@UnicodeString
@Madbasic@TIBasic@SetLastErrorNo$qqrui
@Madbasic@TIBasic@SetLastErrorStr$qqrx20System@UnicodeString
@Madbasic@TIBasic@SetSelected$qqrx53System@%DelphiInterface$t25Madbasic@ICustomBasicList%o
@Madbasic@TIBasic@SetStrBuf$qqrx20System@UnicodeString
@Madbasic@TIBasic@SetStrBuf$qqrx27System@%AnsiStringT$us$i0$%
@Madbasic@TIBasic@SetStrBufA$qqrx27System@%AnsiStringT$us$i0$%
@Madbasic@TIBasic@SetStrBufW$qqrx20System@UnicodeString
@Madbasic@TIBasic@Success$qqrv
@Madbasic@TIBasic@Supports$qqrrx5_GUID
@Madbasic@TIBasic@_AddRef$qqsv
@Madbasic@TIBasic@_Release$qqsv
@Madbasic@TIBasicListSelection@
@Madbasic@TIBasicListSelection@$bctr$qqrouix20System@UnicodeStringx53System@%DelphiInterface$t25Madbasic@ICustomBasicList%o
@Madbasic@TIBasicListSelection@$bdtr$qqrv
@Madbasic@TIBasicListSelection@GetParentList$qqrv
@Madbasic@TIBasicListSelection@ParentListChanged$qqrx53System@%DelphiInterface$t25Madbasic@ICustomBasicList%x43System@%DelphiInterface$t15Madbasic@IBasic%o20Madbasic@TChangeTypeii
@Madbasic@TICustomBasicList@
@Madbasic@TICustomBasicList@$bdtr$qqrv
@Madbasic@TICustomBasicList@AddItem$qqrx43System@%DelphiInterface$t15Madbasic@IBasic%
@Madbasic@TICustomBasicList@AddItems$qqrpx43System@%DelphiInterface$t15Madbasic@IBasic%xi
@Madbasic@TICustomBasicList@BasicItem$qqri
@Madbasic@TICustomBasicList@BeginRefresh$qqrv
@Madbasic@TICustomBasicList@Change$qqrx43System@%DelphiInterface$t15Madbasic@IBasic%o20Madbasic@TChangeTypeii
@Madbasic@TICustomBasicList@DeleteItem$qqri
@Madbasic@TICustomBasicList@EndRefresh$qqrv
@Madbasic@TICustomBasicList@GetSortDown$qqrv
@Madbasic@TICustomBasicList@GetSortInfo$qqrv
@Madbasic@TICustomBasicList@GetSortParams$qqrrpqqrx42System@%DelphiInterface$t14Madbasic@IList%x43System@%DelphiInterface$t15Madbasic@IBasic%t2i$irori
@Madbasic@TICustomBasicList@GetSortProc$qqrv
@Madbasic@TICustomBasicList@InsertItem$qqrx43System@%DelphiInterface$t15Madbasic@IBasic%i
@Madbasic@TICustomBasicList@Pack$qqrv
@Madbasic@TICustomBasicList@RegisterChangeEvent$qqrpqqrx53System@%DelphiInterface$t25Madbasic@ICustomBasicList%x43System@%DelphiInterface$t15Madbasic@IBasic%o20Madbasic@TChangeTypeii$v
@Madbasic@TICustomBasicList@RegisterChangeEvent$qqrynpqqrx53System@%DelphiInterface$t25Madbasic@ICustomBasicList%x43System@%DelphiInterface$t15Madbasic@IBasic%o20Madbasic@TChangeTypeii$v
@Madbasic@TICustomBasicList@SetCapacity$qqri
@Madbasic@TICustomBasicList@SetSortDown$qqro
@Madbasic@TICustomBasicList@SetSortInfo$qqri
@Madbasic@TICustomBasicList@SetSortParams$qqrpqqrx42System@%DelphiInterface$t14Madbasic@IList%x43System@%DelphiInterface$t15Madbasic@IBasic%t2i$ioi
@Madbasic@TICustomBasicList@SetSortProc$qqrpqqrx42System@%DelphiInterface$t14Madbasic@IList%x43System@%DelphiInterface$t15Madbasic@IBasic%t2i$i
@Madbasic@TICustomBasicList@SortItem$qqri
@Madbasic@TICustomBasicList@UnregisterChangeEvent$qqrpqqrx53System@%DelphiInterface$t25Madbasic@ICustomBasicList%x43System@%DelphiInterface$t15Madbasic@IBasic%o20Madbasic@TChangeTypeii$v
@Madbasic@TICustomBasicList@UnregisterChangeEvent$qqrynpqqrx53System@%DelphiInterface$t25Madbasic@ICustomBasicList%x43System@%DelphiInterface$t15Madbasic@IBasic%o20Madbasic@TChangeTypeii$v
@Madbasic@TIList@
@Madbasic@TIList@$bctr$qqrouix20System@UnicodeString
@Madbasic@TIList@$bdtr$qqrv
@Madbasic@TIList@Clear$qqrv
@Madbasic@TIList@GetCapacity$qqrv
@Madbasic@TIList@GetFocusedItem$qqrv
@Madbasic@TIList@GetItemCount$qqrv
@Madbasic@TIList@GetLastFocusedItem$qqrv
@Madbasic@TIList@GetSelectedCount$qqrv
@Madbasic@TIList@Grow$qqrv
@Madbasic@TIList@Lock$qqrv
@Madbasic@TIList@QuickSort$qqrpvt1iit1oi
@Madbasic@TIList@SetLastFocusedItem$qqr43System@%DelphiInterface$t15Madbasic@IBasic%
@Madbasic@TIList@Unlock$qqrv
@Madbasic@initialization$qqrv
@Madbasic_@@GetPackageInfoTable$qqrv
@Madbasic_@@PackageLoad$qqrv
@Madbasic_@@PackageUnload$qqrv
@Madbasic_@initialization$qqrv
@Madcrypt@Decode$qqrpvi
@Madcrypt@Decode$qqrx27System@%AnsiStringT$us$i0$%
@Madcrypt@DecodeA
@Madcrypt@DecodeW$qqrpvi
@Madcrypt@DecodeW$qqrx27System@%AnsiStringT$us$i0$%
@Madcrypt@Decrypt$qqrpvuix27System@%AnsiStringT$us$i0$%j
@Madcrypt@Decrypt$qqrr20System@UnicodeStringx27System@%AnsiStringT$us$i0$%j
@Madcrypt@Decrypt$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%j
@Madcrypt@DecryptA
@Madcrypt@DecryptW
@Madcrypt@Encode$qqrpvi
@Madcrypt@Encode$qqrx20System@UnicodeString
@Madcrypt@Encode$qqrx27System@%AnsiStringT$us$i0$%
@Madcrypt@EncodeA
@Madcrypt@EncodeW
@Madcrypt@Encrypt$qqrpvuix27System@%AnsiStringT$us$i0$%j
@Madcrypt@Encrypt$qqrr20System@UnicodeStringx27System@%AnsiStringT$us$i0$%j
@Madcrypt@Encrypt$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%j
@Madcrypt@EncryptA
@Madcrypt@EncryptW
@Madcrypt@Finalization$qqrv
@Madcrypt@OldDecrypt$qqrpvuix27System@%AnsiStringT$us$i0$%
@Madcrypt@OldDecrypt$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%
@Madcrypt@OldEncrypt$qqrpvuix27System@%AnsiStringT$us$i0$%
@Madcrypt@OldEncrypt$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%
@Madcrypt@initialization$qqrv
@Madgraphics@AlphaBlend$qqrp16Graphics@TBitmapt1t1ui
@Madgraphics@AlphaBlend$qqrp16Graphics@TBitmapt1uit1ii
@Madgraphics@Draw$qqrp16Graphics@TBitmapt1t1iiii24Madgraphics@TGrayPercentui27Madgraphics@TStretchQuality
@Madgraphics@Draw$qqruiuip16Graphics@TBitmapiiii24Madgraphics@TGrayPercentui27Madgraphics@TStretchQuality
@Madgraphics@Finalization$qqrv
@Madgraphics@GrayScale$qqrp16Graphics@TBitmap24Madgraphics@TGrayPercent
@Madgraphics@StretchBitmap$qqrp16Graphics@TBitmapt1ii27Madgraphics@TStretchQuality
@Madgraphics@StretchBitmap$qqrp16Graphics@TBitmapt1t1t127Madgraphics@TStretchQuality
@Madgraphics@initialization$qqrv
@Madlists@Finalization$qqrv
@Madlists@NewBasicList$qqrpx43System@%DelphiInterface$t15Madbasic@IBasic%xi
@Madlists@NewBasicList$qqrv
@Madlists@NewInterfaceList$qqrpx45System@%DelphiInterface$t17System@IInterface%xi
@Madlists@NewInterfaceList$qqrv
@Madlists@NewPointerList$qqrpxpvxipqqrrpv$v
@Madlists@NewPointerList$qqrv
@Madlists@initialization$qqrv
@Madres@BeginUpdateResourceExW$qqsuip9_FILETIMEi
@Madres@BeginUpdateResourceW$qqspbi
@Madres@DeleteIconGroupResourceW$qqsuipbus
@Madres@DontShrinkResourceSection
@Madres@EndUpdateResourceW$qqsuii
@Madres@Finalization$qqrv
@Madres@GetIconGroupResourceW$qqsuipbusrp17Madres@TIconGroup
@Madres@GetResourceW$qqsuipbt2usrpvrui
@Madres@LoadBitmapResourceW$qqsuipbust2
@Madres@LoadIconGroupResourceW$qqsuipbust2
@Madres@SaveBitmapResourceW$qqsuipbust2
@Madres@SaveIconGroupResourceW$qqsuipbust2
@Madres@UpdateResourceW$qqsuipbt2uspvui
@Madres@initialization$qqrv
@Madstrings@AnsiToWideEx$qqrx27System@%AnsiStringT$us$i0$%o
@Madstrings@BooleanToChar$qqro
@Madstrings@BooleanToCharA
@Madstrings@BooleanToCharW$qqro
@Madstrings@CNtDll
@Madstrings@CompareStr$qqrx20System@UnicodeStringt1
@Madstrings@CompareStr$qqrx27System@%AnsiStringT$us$i0$%t1
@Madstrings@CompareStrA
@Madstrings@CompareStrW
@Madstrings@CompareText$qqrx20System@UnicodeStringt1
@Madstrings@CompareText$qqrx27System@%AnsiStringT$us$i0$%t1
@Madstrings@CompareTextA
@Madstrings@CompareTextW
@Madstrings@CopyR$qqrx20System@UnicodeStringui
@Madstrings@CopyR$qqrx27System@%AnsiStringT$us$i0$%ui
@Madstrings@CopyRA
@Madstrings@CopyRW
@Madstrings@DecodeUtf8$qqrx27System@%AnsiStringT$us$i0$%
@Madstrings@DecryptStr$qqrx27System@%AnsiStringT$us$i0$%
@Madstrings@DeleteR$qqrr20System@UnicodeStringui
@Madstrings@DeleteR$qqrr27System@%AnsiStringT$us$i0$%ui
@Madstrings@DeleteRA
@Madstrings@DeleteRW
@Madstrings@EncodeUtf8$qqrx20System@UnicodeString
@Madstrings@ErrorCodeToStr$qqrui
@Madstrings@ErrorCodeToStrA
@Madstrings@ErrorCodeToStrW$qqrui
@Madstrings@ExtractFileDriveW$qqrx20System@UnicodeString
@Madstrings@ExtractFileExtW$qqrx20System@UnicodeString
@Madstrings@ExtractFileNameW$qqrx20System@UnicodeString
@Madstrings@ExtractFilePathW$qqrx20System@UnicodeString
@Madstrings@FileMatch$qqrx20System@UnicodeStringt1
@Madstrings@FileMatch$qqrx27System@%AnsiStringT$us$i0$%t1
@Madstrings@FileMatchA
@Madstrings@FileMatchW
@Madstrings@FillStr$qqrx20System@UnicodeStringib
@Madstrings@FillStr$qqrx27System@%AnsiStringT$us$i0$%ic
@Madstrings@FillStrA
@Madstrings@FillStrW
@Madstrings@Finalization$qqrv
@Madstrings@FormatSubStrs$qqrr20System@UnicodeStringc
@Madstrings@FormatSubStrs$qqrr27System@%AnsiStringT$us$i0$%c
@Madstrings@FormatSubStrsA
@Madstrings@FormatSubStrsW
@Madstrings@IntToHexEx$qqriic
@Madstrings@IntToHexEx$qqrjic
@Madstrings@IntToHexEx$qqruiic
@Madstrings@IntToHexExA$qqriic
@Madstrings@IntToHexExA$qqrjic
@Madstrings@IntToHexExA$qqruiic
@Madstrings@IntToHexExW$qqriib
@Madstrings@IntToHexExW$qqrjib
@Madstrings@IntToHexExW$qqruiib
@Madstrings@IntToStrEx$qqriic
@Madstrings@IntToStrEx$qqrjic
@Madstrings@IntToStrEx$qqruiic
@Madstrings@IntToStrExA$qqriic
@Madstrings@IntToStrExA$qqrjic
@Madstrings@IntToStrExA$qqruiic
@Madstrings@IntToStrExW$qqriib
@Madstrings@IntToStrExW$qqrjib
@Madstrings@IntToStrExW$qqruiib
@Madstrings@InternalStrMatchW$qqrx20System@UnicodeStringt1o
@Madstrings@IsTextEqual$qqrx20System@UnicodeStringt1
@Madstrings@IsTextEqual$qqrx27System@%AnsiStringT$us$i0$%t1
@Madstrings@IsTextEqualA
@Madstrings@IsTextEqualW
@Madstrings@IsValidIdentW$qqrx20System@UnicodeStringo
@Madstrings@Keep$qqrr20System@UnicodeStringuiui
@Madstrings@Keep$qqrr27System@%AnsiStringT$us$i0$%uiui
@Madstrings@KeepA
@Madstrings@KeepR$qqrr20System@UnicodeStringui
@Madstrings@KeepR$qqrr27System@%AnsiStringT$us$i0$%ui
@Madstrings@KeepRA
@Madstrings@KeepRW
@Madstrings@KeepW
@Madstrings@KillChar$qqrr20System@UnicodeStringb
@Madstrings@KillChar$qqrr27System@%AnsiStringT$us$i0$%c
@Madstrings@KillCharA
@Madstrings@KillCharW
@Madstrings@KillChars$qqrr20System@UnicodeStringrx29System@%Set$tc$iuc$0$iuc$255%
@Madstrings@KillChars$qqrr27System@%AnsiStringT$us$i0$%rx29System@%Set$tc$iuc$0$iuc$255%
@Madstrings@KillCharsA
@Madstrings@KillCharsW
@Madstrings@KillStr$qqrr20System@UnicodeStringx20System@UnicodeString
@Madstrings@KillStr$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%
@Madstrings@KillStrA
@Madstrings@KillStrW
@Madstrings@LowChar$qqrxb
@Madstrings@LowChar$qqrxc
@Madstrings@LowCharA
@Madstrings@LowCharW
@Madstrings@LowStr$qqrx20System@UnicodeString
@Madstrings@LowStr$qqrx27System@%AnsiStringT$us$i0$%
@Madstrings@LowStrA
@Madstrings@LowStrW
@Madstrings@MsToStr$qqrui
@Madstrings@MsToStrA
@Madstrings@MsToStrW$qqrui
@Madstrings@PosChars$qqrrx29System@%Set$tc$iuc$0$iuc$255%x20System@UnicodeStringuiui
@Madstrings@PosChars$qqrrx29System@%Set$tc$iuc$0$iuc$255%x27System@%AnsiStringT$us$i0$%uiui
@Madstrings@PosCharsA
@Madstrings@PosCharsW
@Madstrings@PosNotCharsW$qqrrx29System@%Set$tc$iuc$0$iuc$255%x20System@UnicodeStringuiui
@Madstrings@PosPChar$qqrpbt1uiuiouiui
@Madstrings@PosPChar$qqrpct1uiuiouiui
@Madstrings@PosPCharA
@Madstrings@PosPCharW
@Madstrings@PosStr$qqrx20System@UnicodeStringt1uiui
@Madstrings@PosStr$qqrx27System@%AnsiStringT$us$i0$%t1uiui
@Madstrings@PosStrA
@Madstrings@PosStrIs1$qqrx20System@UnicodeStringt1
@Madstrings@PosStrIs1$qqrx27System@%AnsiStringT$us$i0$%t1
@Madstrings@PosStrIs1A
@Madstrings@PosStrIs1W
@Madstrings@PosStrW
@Madstrings@PosText$qqrx20System@UnicodeStringt1uiui
@Madstrings@PosText$qqrx27System@%AnsiStringT$us$i0$%t1uiui
@Madstrings@PosTextA
@Madstrings@PosTextIs1$qqrx20System@UnicodeStringt1
@Madstrings@PosTextIs1$qqrx27System@%AnsiStringT$us$i0$%t1
@Madstrings@PosTextIs1A
@Madstrings@PosTextIs1W
@Madstrings@PosTextW
@Madstrings@ReplaceStr$qqrr20System@UnicodeStringx20System@UnicodeStringt2o
@Madstrings@ReplaceStr$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%t2o
@Madstrings@ReplaceStrA
@Madstrings@ReplaceStrW
@Madstrings@ReplaceText$qqrr20System@UnicodeStringx20System@UnicodeStringt2o
@Madstrings@ReplaceText$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%t2o
@Madstrings@ReplaceTextA
@Madstrings@ReplaceTextW
@Madstrings@RetDelete$qqrx20System@UnicodeStringuiui
@Madstrings@RetDelete$qqrx27System@%AnsiStringT$us$i0$%uiui
@Madstrings@RetDeleteA
@Madstrings@RetDeleteR$qqrx20System@UnicodeStringui
@Madstrings@RetDeleteR$qqrx27System@%AnsiStringT$us$i0$%ui
@Madstrings@RetDeleteRA
@Madstrings@RetDeleteRW
@Madstrings@RetDeleteW
@Madstrings@RetTrimStr$qqrx20System@UnicodeString
@Madstrings@RetTrimStr$qqrx27System@%AnsiStringT$us$i0$%
@Madstrings@RetTrimStrA
@Madstrings@RetTrimStrW
@Madstrings@SizeToStr$qqrj
@Madstrings@SizeToStrA
@Madstrings@SizeToStrW$qqrj
@Madstrings@StrMatch$qqrx20System@UnicodeStringt1
@Madstrings@StrMatch$qqrx27System@%AnsiStringT$us$i0$%t1
@Madstrings@StrMatchA
@Madstrings@StrMatchEx$qqrx27System@%AnsiStringT$us$i0$%t1
@Madstrings@StrMatchExA
@Madstrings@StrMatchW
@Madstrings@StrToIntEx$qqropbi
@Madstrings@StrToIntEx$qqropci
@Madstrings@StrToIntExA
@Madstrings@StrToIntExW
@Madstrings@SubStr$qqrx20System@UnicodeStringuic
@Madstrings@SubStr$qqrx27System@%AnsiStringT$us$i0$%uic
@Madstrings@SubStrA
@Madstrings@SubStrCount$qqrx20System@UnicodeStringc
@Madstrings@SubStrCount$qqrx27System@%AnsiStringT$us$i0$%c
@Madstrings@SubStrCountA
@Madstrings@SubStrCountW
@Madstrings@SubStrExists$qqrx20System@UnicodeStringt1c
@Madstrings@SubStrExists$qqrx27System@%AnsiStringT$us$i0$%t1c
@Madstrings@SubStrExistsA
@Madstrings@SubStrExistsW
@Madstrings@SubStrW
@Madstrings@SubTextExists$qqrx20System@UnicodeStringt1c
@Madstrings@SubTextExists$qqrx27System@%AnsiStringT$us$i0$%t1c
@Madstrings@SubTextExistsA
@Madstrings@SubTextExistsW
@Madstrings@TextMatch$qqrx20System@UnicodeStringt1
@Madstrings@TextMatch$qqrx27System@%AnsiStringT$us$i0$%t1
@Madstrings@TextMatchA
@Madstrings@TextMatchEx$qqrx27System@%AnsiStringT$us$i0$%t1
@Madstrings@TextMatchExA
@Madstrings@TextMatchW
@Madstrings@TrimStr$qqrr20System@UnicodeString
@Madstrings@TrimStr$qqrr27System@%AnsiStringT$us$i0$%
@Madstrings@TrimStrA
@Madstrings@TrimStrW
@Madstrings@UpChar$qqrxb
@Madstrings@UpChar$qqrxc
@Madstrings@UpCharA
@Madstrings@UpCharW
@Madstrings@UpStr$qqrx20System@UnicodeString
@Madstrings@UpStr$qqrx27System@%AnsiStringT$us$i0$%
@Madstrings@UpStrA
@Madstrings@UpStrW
@Madstrings@WideToAnsiEx$qqrpb
@Madstrings@initialization$qqrv
@Madtools@AddMsgHandler$qqrpqqrp6HWND__uiiiri$vuiui
@Madtools@AddMsgHandler$qqrynpqqrp6HWND__uiiiri$vuiui
@Madtools@COsDescr
@Madtools@CheckProcAddress
@Madtools@DelMsgHandler$qqrpqqrp6HWND__uiiiri$vuiui
@Madtools@DelMsgHandler$qqrynpqqrp6HWND__uiiiri$vuiui
@Madtools@FileVersionToStr$qqrj
@Madtools@FileVersionToStrA
@Madtools@FileVersionToStrW$qqrj
@Madtools@Finalization$qqrv
@Madtools@FindModule$qqrpvruir20System@UnicodeString
@Madtools@FindModule$qqrpvruir27System@%AnsiStringT$us$i0$%
@Madtools@FindModuleA
@Madtools@FindModuleW
@Madtools@GetFileVersion$qqrx20System@UnicodeString
@Madtools@GetFileVersion$qqrx27System@%AnsiStringT$us$i0$%
@Madtools@GetFileVersionA
@Madtools@GetFileVersionStr$qqrx20System@UnicodeString
@Madtools@GetFileVersionStr$qqrx27System@%AnsiStringT$us$i0$%
@Madtools@GetFileVersionStrA
@Madtools@GetFileVersionStrW
@Madtools@GetFileVersionW
@Madtools@GetFreeSystemResources$qqrus
@Madtools@GetImageExportDirectory$qqrui
@Madtools@GetImageImportDirectory$qqrui
@Madtools@GetImageNtHeaders$qqrui
@Madtools@GetImageProcAddress$qqruii
@Madtools@GetImageProcAddress$qqruix27System@%AnsiStringT$us$i0$%o
@Madtools@GetImageProcName$qqruipvo
@Madtools@GetImageProcNameA
@Madtools@GetImageProcNameW$qqruipvo
@Madtools@GetLongFileName$qqr20System@UnicodeString
@Madtools@GetLongFileName$qqr27System@%AnsiStringT$us$i0$%
@Madtools@GetLongFileNameA
@Madtools@GetLongFileNameW
@Madtools@GetShortFileName$qqr20System@UnicodeString
@Madtools@GetShortFileName$qqr27System@%AnsiStringT$us$i0$%
@Madtools@GetShortFileNameA
@Madtools@GetShortFileNameW
@Madtools@GetSizeOfImage$qqrp17_IMAGE_NT_HEADERS
@Madtools@HideLeak_
@Madtools@InitTryExceptFinally$qqrv
@Madtools@Is64bitModule$qqspb
@Madtools@IsBadReadPtr2$qqrpvui
@Madtools@IsBadWritePtr2$qqrpvui
@Madtools@IsWine
@Madtools@MethodToProcedure$qqrp14System@TObjectpvi
@Madtools@MethodToProcedure$qqrrx16Madtypes@TMethodi
@Madtools@MsgHandlerWindow$qqrui
@Madtools@NeedModuleFileMap$qqrui
@Madtools@NeedModuleFileMapEx
@Madtools@OS$qqrv
@Madtools@ProcedureToMethod$qqrp14System@TObjectpv
@Madtools@ResToStr$qqruipbx20System@UnicodeString
@Madtools@TickDif$qqrui
@Madtools@UnmangleA$qqrr27System@%AnsiStringT$us$i0$%t1
@Madtools@UnmangleW$qqrr20System@UnicodeStringt1
@Madtools@VirtualToRaw$qqrp17_IMAGE_NT_HEADERSui
@Madtools@initialization$qqrv
@Madtypes@Finalization$qqrv
@Madtypes@MadException@
@Madtypes@MadException@$bdtr$qqrv
@Madtypes@MadException@CleanUpStackInfoProc
@Madtypes@MadException@Create$qqrx20System@UnicodeString
@Madtypes@initialization$qqrv
@Madzip@Compress$qqrpvt1ii
@Madzip@Compress$qqrx20System@UnicodeStringt1o
@Madzip@Compress$qqrx27System@%AnsiStringT$us$i0$%o
@Madzip@Finalization$qqrv
@Madzip@GetCompressedFileInfo$qqrx20System@UnicodeStringrjrui
@Madzip@GetUncompressedFileInfo$qqrx20System@UnicodeStringrjrui
@Madzip@IsCompressedFileEqual$qqrx20System@UnicodeStringt1
@Madzip@Uncompress$qqrpvt1ii
@Madzip@Uncompress$qqrx20System@UnicodeStringt1jui
@Madzip@Uncompress$qqrx27System@%AnsiStringT$us$i0$%
@Madzip@UpdateCrc32$qqruipxvi
@Madzip@Zip$qqrx20System@UnicodeStringpx20System@UnicodeStringxix45System@%DynamicArray$t20System@UnicodeString%
@Madzip@initialization$qqrv
Finalize
Initialize

Sections

.text
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 35KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 34B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
~!!SetUp_KEY_9696_PAas$c0De!%!!/maddisAsm_.bpl
.dll windows:5 windows x86 arch:x86

22531f752b354d949452fbdf15d6da72

Code Sign

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-03-2021 00:00

Not After

24-03-2024 23:59

Subject

CN=IObit CO.\, LTD,O=IObit CO.\, LTD,POSTALCODE=610042,STREET=No. 605\, 6th Floor\, Unit 1\, Building 1+STREET=45 Renmin South Road,L=Chengdu Shi,ST=Sichuan Sheng,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-05-2023 00:00

Not After

02-08-2034 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-03-2021 00:00

Not After

24-03-2024 23:59

Subject

CN=IObit CO.\, LTD,O=IObit CO.\, LTD,POSTALCODE=610042,STREET=No. 605\, 6th Floor\, Unit 1\, Building 1+STREET=45 Renmin South Road,L=Chengdu Shi,ST=Sichuan Sheng,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-05-2023 00:00

Not After

02-08-2034 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

97:54:65:bc:6d:2d:fe:cd:12:15:a8:43:26:3e:63:d6:0e:1b:86:0f:3b:97:8e:c8:5f:ff:f5:fa:00:3e:4e:f3
Signer

Actual PE Digest

97:54:65:bc:6d:2d:fe:cd:12:15:a8:43:26:3e:63:d6:0e:1b:86:0f:3b:97:8e:c8:5f:ff:f5:fa:00:3e:4e:f3

Digest Algorithm

sha256

PE Digest Matches

true

86:63:ac:7d:5b:62:b0:c2:2d:7d:9a:db:47:eb:76:77:23:b6:90:72
Signer

Actual PE Digest

86:63:ac:7d:5b:62:b0:c2:2d:7d:9a:db:47:eb:76:77:23:b6:90:72

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

rtl120.bpl

@System@initialization$qqrv
@System@Finalization$qqrv
@System@UnregisterModule$qqrp17System@TLibModule
@System@RegisterModule$qqrp17System@TLibModule
@System@@DynArrayClear$qqrrpvpv
@System@@DynArraySetLength$qqrv
@System@@DynArrayHigh$qqrv
@System@@DynArrayLength$qqrv
@System@@Dispose$qqrpvt1
@System@@New$qqripv
@System@@CopyRecord$qqrv
@System@@Finalize$qqrpvt1
@System@@FinalizeRecord$qqrpvt1
@System@@UStrLen$qqrx20System@UnicodeString
@System@@LStrFromUStr$qqrr27System@%AnsiStringT$us$i0$%x20System@UnicodeStringus
@System@@UStrArrayClr$qqrpvi
@System@@UStrClr$qqrpv
@System@@LStrSetLength$qqrv
@System@@LStrInsert$qqrv
@System@@LStrDelete$qqrv
@System@@UniqueStringA$qqrr27System@%AnsiStringT$us$i0$%
@System@@LStrToPChar$qqrx27System@%AnsiStringT$us$i0$%
@System@@LStrAddRef$qqrpv
@System@@LStrCatN$qqrv
@System@@LStrCat3$qqrv
@System@@LStrCat$qqrv
@System@@PCharLen$qqrpc
@System@@LStrLen$qqrx27System@%AnsiStringT$us$i0$%
@System@@LStrFromString$qqrr27System@%AnsiStringT$us$i0$%rx28System@%SmallString$iuc$255%us
@System@@LStrFromPWChar$qqrr27System@%AnsiStringT$us$i0$%pbus
@System@@LStrFromPChar$qqrr27System@%AnsiStringT$us$i0$%pcus
@System@@EnsureAnsiString$qqrr27System@%AnsiStringT$us$i0$%us
@System@@LStrFromPCharLen$qqrr27System@%AnsiStringT$us$i0$%pcius
@System@@LStrLAsg$qqrpvpxv
@System@@LStrAsg$qqrpvpxv
@System@@LStrArrayClr$qqrpvi
@System@@LStrClr$qqrpv
@System@@RunError$qqruc
@System@@Halt0$qqrv
@System@@PackageUnload$qqrpx23System@PackageInfoTablep17System@TLibModule
@System@@PackageLoad$qqrpx23System@PackageInfoTablep17System@TLibModule
@System@@DoneExcept$qqrv
@System@@HandleAutoException$qqrv
@System@@HandleFinally$qqrv
@System@@HandleOnException$qqrv
@System@@HandleAnyException$qqrv
@System@TObject@ClassName$qqrv
@System@@_CToPasStr$qqrp28System@%SmallString$iuc$255%pxc
@System@@FillChar$qqrpvib
@System@Move$qqrpxvpvi
@$xp$17System@AnsiString
@$xp$7Integer

kernel32

TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
FreeLibrary
VirtualQuery
VirtualProtect
GetVersion
GetProcAddress
GetModuleHandleA
GetModuleHandleW
GetModuleFileNameA
GetCurrentThreadId
GetCurrentProcessId
FreeLibrary

madbasic_.bpl

@Madtools@initialization$qqrv
@Madtools@Finalization$qqrv
@Madtools@GetImageProcName$qqruipvo
@Madtools@GetImageProcAddress$qqruix27System@%AnsiStringT$us$i0$%o
@Madtools@GetSizeOfImage$qqrp17_IMAGE_NT_HEADERS
@Madtools@GetImageNtHeaders$qqrui
@Madtools@FindModule$qqrpvruir27System@%AnsiStringT$us$i0$%
@Madtools@FindModuleA
@Madstrings@initialization$qqrv
@Madstrings@Finalization$qqrv
@Madstrings@AnsiToWideEx$qqrx27System@%AnsiStringT$us$i0$%o
@Madstrings@DecryptStr$qqrx27System@%AnsiStringT$us$i0$%
@Madstrings@IntToHexExA$qqrjic
@Madstrings@IntToHexExA$qqruiic
@Madstrings@IntToStrExA$qqrjic
@Madstrings@IntToStrExA$qqruiic
@Madstrings@IntToHexExA$qqriic
@Madstrings@IntToStrExA$qqriic
@Madstrings@CNtDll
@Madstrings@ErrorCodeToStrA
@Madstrings@SubStrA
@Madstrings@SubStrCountA
@Madstrings@FillStrA
@Madstrings@PosStrA
@Madstrings@ReplaceStrA

Exports

Exports

@$xp$23Maddisasm@TFunctionInfo
@$xp$27Maddisasm@_TFunctionInfo@_1
@$xp$27Maddisasm@_TFunctionInfo@_2
@$xp$27Maddisasm@_TFunctionInfo@_3
@$xp$27Maddisasm@_TFunctionInfo@_4
@GetPackageInfoTable
@Maddisasm@BcbInitExceptBlockLDTC
@Maddisasm@CErrorStr_BadFunction
@Maddisasm@CErrorStr_CodeNotInterceptable
@Maddisasm@CErrorStr_DoubleHook
@Maddisasm@CErrorStr_InvalidCode
@Maddisasm@CErrorStr_UnknownTarget
@Maddisasm@CKernel32
@Maddisasm@CKernelbase
@Maddisasm@CReadProcessMemory
@Maddisasm@CWriteProcessMemory
@Maddisasm@EndTryRead$qqrui
@Maddisasm@Finalization$qqrv
@Maddisasm@GetExportDirectory$qqrpvruirp30Madtools@TImageExportDirectory
@Maddisasm@GetLineNumber
@Maddisasm@GetProcNameFromMapFile
@Maddisasm@IsBadReadPtrEx$qqrpvuiui
@Maddisasm@KernelProc$qqrx27System@%AnsiStringT$us$i0$%o
@Maddisasm@Magic$qqrv
@Maddisasm@Magic95$qqrv
@Maddisasm@NtProc$qqrx27System@%AnsiStringT$us$i0$%o
@Maddisasm@ParseCode$qqrpv
@Maddisasm@ParseCode$qqrpvr27System@%AnsiStringT$us$i0$%
@Maddisasm@ParseCode_$qqrpvui
@Maddisasm@ParseFunction$qqrpv
@Maddisasm@ParseFunction$qqrpvr27System@%AnsiStringT$us$i0$%
@Maddisasm@ParseFunctionEx$qqrpvr27System@%AnsiStringT$us$i0$%t1io
@Maddisasm@ParseFunction_$qqrpvuit1t1t1t1t1
@Maddisasm@SolveW9xDebugMode$qqrpv
@Maddisasm@StartTryRead$qqrv
@Maddisasm@TryRead$qqrpvt1uiui
@Maddisasm@TryWrite$qqrpvt1ui
@Maddisasm@initialization$qqrv
@Maddisasm@kernel32handle$qqrv
@Maddisasm@ntdllhandle$qqrv
@Maddisasm_@@GetPackageInfoTable$qqrv
@Maddisasm_@@PackageLoad$qqrv
@Maddisasm_@@PackageUnload$qqrv
@Maddisasm_@initialization$qqrv
Finalize
Initialize

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 28B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 35B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
~!!SetUp_KEY_9696_PAas$c0De!%!!/madexcept_.bpl
.dll windows:5 windows x86 arch:x86

2a873ab64f922b5d3d6841d9d0c267c9

Code Sign

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-03-2021 00:00

Not After

24-03-2024 23:59

Subject

CN=IObit CO.\, LTD,O=IObit CO.\, LTD,POSTALCODE=610042,STREET=No. 605\, 6th Floor\, Unit 1\, Building 1+STREET=45 Renmin South Road,L=Chengdu Shi,ST=Sichuan Sheng,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-05-2023 00:00

Not After

02-08-2034 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-03-2021 00:00

Not After

24-03-2024 23:59

Subject

CN=IObit CO.\, LTD,O=IObit CO.\, LTD,POSTALCODE=610042,STREET=No. 605\, 6th Floor\, Unit 1\, Building 1+STREET=45 Renmin South Road,L=Chengdu Shi,ST=Sichuan Sheng,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-05-2023 00:00

Not After

02-08-2034 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d4:99:73:94:5b:85:25:fd:33:15:ef:09:79:4e:f1:8d:0b:73:09:20:fc:96:02:94:17:9a:49:13:db:d5:c4:1a
Signer

Actual PE Digest

d4:99:73:94:5b:85:25:fd:33:15:ef:09:79:4e:f1:8d:0b:73:09:20:fc:96:02:94:17:9a:49:13:db:d5:c4:1a

Digest Algorithm

sha256

PE Digest Matches

false

d4:32:13:5e:d4:a0:ea:22:c1:85:9e:50:c7:28:82:6c:35:55:25:2b
Signer

Actual PE Digest

d4:32:13:5e:d4:a0:ea:22:c1:85:9e:50:c7:28:82:6c:35:55:25:2b

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

rtl120.bpl

@System@initialization$qqrv
@System@Finalization$qqrv
@System@LoadResString$qqrp20System@TResStringRec
@System@FreeMemory$qpv
@System@TInterfacedObject@_Release$qqsv
@System@TInterfacedObject@_AddRef$qqsv
@System@TInterfacedObject@QueryInterface$qqsrx5_GUIDpv
@System@TInterfacedObject@NewInstance$qqrv
@System@TInterfacedObject@BeforeDestruction$qqrv
@System@TInterfacedObject@AfterConstruction$qqrv
@System@@IntfAddRef$qqrx45System@%DelphiInterface$t17System@IInterface%
@System@@IntfCast$qqrr45System@%DelphiInterface$t17System@IInterface%x45System@%DelphiInterface$t17System@IInterface%rx5_GUID
@System@@IntfCopy$qqrr45System@%DelphiInterface$t17System@IInterface%x45System@%DelphiInterface$t17System@IInterface%
@System@@IntfClear$qqrr45System@%DelphiInterface$t17System@IInterface%
@System@UnregisterModule$qqrp17System@TLibModule
@System@RegisterModule$qqrp17System@TLibModule
@System@FindResourceHInstance$qqrui
@System@@DynArrayAddRef$qqrv
@System@@DynArrayAsg$qqrv
@System@@DynArrayClear$qqrrpvpv
@System@@DynArrayCopyRange$qqrpvt1iirpv
@System@@DynArrayCopy$qqrpvt1rpv
@System@@DynArraySetLength$qqrv
@System@@DynArrayHigh$qqrv
@System@@DynArrayLength$qqrv
@System@@_llshl$qqrv
@System@@_llmod$qqrv
@System@@_lldiv$qqrv
@System@@_llmul$qqrv
@System@@CopyRecord$qqrv
@System@@Finalize$qqrpvt1
@System@@FinalizeArray$qqrpvt1ui
@System@@FinalizeRecord$qqrpvt1
@System@@InitializeRecord$qqrpvt1
@System@@UniqueStringU$qqrr20System@UnicodeString
@System@@Write0UString$qqrr15System@TTextRecx20System@UnicodeString
@System@@UStrInsert$qqrx20System@UnicodeStringr20System@UnicodeStringi
@System@@UStrDelete$qqrr20System@UnicodeStringii
@System@@UStrCopy$qqrx20System@UnicodeStringii
@System@@UStrEqual$qqrv
@System@@UStrCatN$qqrv
@System@@UStrCat3$qqrr20System@UnicodeStringx20System@UnicodeStringt2
@System@@UStrCat$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrSetLength$qqrr20System@UnicodeStringi
@System@@UStrLen$qqrx20System@UnicodeString
@System@@UStrFromString$qqrr20System@UnicodeStringrx28System@%SmallString$iuc$255%
@System@@WStrFromUStr$qqrr17System@WideStringx20System@UnicodeString
@System@@UStrFromWStr$qqrr20System@UnicodeStringx17System@WideString
@System@@LStrFromUStr$qqrr27System@%AnsiStringT$us$i0$%x20System@UnicodeStringus
@System@@UStrFromLStr$qqrr20System@UnicodeStringx27System@%AnsiStringT$us$i0$%
@System@@UStrFromWArray$qqrr20System@UnicodeStringpbi
@System@@UStrFromArray$qqrr20System@UnicodeStringpci
@System@@UStrFromPWChar$qqrr20System@UnicodeStringpb
@System@@UStrFromWChar$qqrr20System@UnicodeStringb
@System@@UStrFromPWCharLen$qqrr20System@UnicodeStringpbi
@System@@UStrToPWChar$qqrx20System@UnicodeString
@System@@UStrLAsg$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrAsg$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrArrayClr$qqrpvi
@System@@UStrClr$qqrpv
@System@@UStrAddRef$qqrpv
@System@@WStrClr$qqrpv
@System@@Write0LString$qqrr15System@TTextRecx27System@%AnsiStringT$us$i0$%
@System@@LStrSetLength$qqrv
@System@@LStrInsert$qqrv
@System@@LStrDelete$qqrv
@System@@LStrCopy$qqrv
@System@@UniqueStringA$qqrr27System@%AnsiStringT$us$i0$%
@System@@LStrToPChar$qqrx27System@%AnsiStringT$us$i0$%
@System@@LStrAddRef$qqrpv
@System@@LStrEqual$qqrv
@System@@LStrCatN$qqrv
@System@@LStrCat3$qqrv
@System@@LStrCat$qqrv
@System@@PCharLen$qqrpc
@System@@LStrLen$qqrx27System@%AnsiStringT$us$i0$%
@System@@LStrFromArray$qqrr27System@%AnsiStringT$us$i0$%pcius
@System@@LStrFromString$qqrr27System@%AnsiStringT$us$i0$%rx28System@%SmallString$iuc$255%us
@System@@LStrFromPWChar$qqrr27System@%AnsiStringT$us$i0$%pbus
@System@@LStrFromPChar$qqrr27System@%AnsiStringT$us$i0$%pcus
@System@@LStrFromChar$qqrr27System@%AnsiStringT$us$i0$%cus
@System@@EnsureAnsiString$qqrr27System@%AnsiStringT$us$i0$%us
@System@@EnsureUnicodeString$qqrr20System@UnicodeString
@System@@LStrFromPCharLen$qqrr27System@%AnsiStringT$us$i0$%pcius
@System@@LStrLAsg$qqrpvpxv
@System@@LStrAsg$qqrpvpxv
@System@@LStrArrayClr$qqrpvi
@System@@LStrClr$qqrpv
@System@BeginThread$qqrpvuipqqrpv$it1uirui
@System@@RunError$qqruc
@System@@Halt$qqri
@System@@Halt0$qqrv
@System@@PackageUnload$qqrpx23System@PackageInfoTablep17System@TLibModule
@System@@PackageLoad$qqrpx23System@PackageInfoTablep17System@TLibModule
@System@@TryFinallyExit$qqrv
@System@@DoneExcept$qqrv
@System@@RaiseAgain$qqrv
@System@@RaiseExcept$qqrv
@System@@HandleAutoException$qqrv
@System@@HandleFinally$qqrv
@System@@HandleOnException$qqrv
@System@@HandleAnyException$qqrv
@System@@BeforeDestruction$qqrp14System@TObjectzc
@System@@AfterConstruction$qqrp14System@TObject
@System@@ClassDestroy$qqrp14System@TObject
@System@@ClassCreate$qqrp17System@TMetaClasso
@System@TObject@Dispatch$qqrpv
@System@TObject@BeforeDestruction$qqrv
@System@TObject@AfterConstruction$qqrv
@System@TObject@DefaultHandler$qqrpv
@System@TObject@ToString$qqrv
@System@TObject@SafeCallException$qqrp14System@TObjectpv
@System@TObject@ClassInfo$qqrv
@System@@IsClass$qqrp14System@TObjectp17System@TMetaClass
@System@TObject@GetHashCode$qqrv
@System@TObject@Equals$qqrp14System@TObject
@System@TObject@Free$qqrv
@System@TObject@$bdtr$qqrv
@System@TObject@$bctr$qqrv
@System@TObject@InstanceSize$qqrv
@System@TObject@FreeInstance$qqrv
@System@TObject@NewInstance$qqrv
@System@TObject@ClassName$qqrv
@System@TObject@ClassType$qqrv
@System@@WriteLn$qqrr15System@TTextRec
@System@@FillChar$qqrpvib
@System@@ROUND$qqrv
@System@Get8087CW$qqrv
@System@Set8087CW$qqrus
@System@ParamCount$qqrv
@System@Move$qqrpxvpvi
@System@@_IOTest$qqrv
@System@RaiseList$qqrv
@System@AcquireExceptionObject$qqrv
@System@ExceptObject$qqrv
@System@GetMemoryManager$qqrr23System@TMemoryManagerEx
@System@GetMemoryManager$qqrr21System@TMemoryManager
@System@@ReallocMem$qqrrpvi
@System@@FreeMem$qqrpv
@System@@GetMem$qqri
@System@DebugHook
@System@Output
@System@IsMultiThread
@System@IsConsole
@System@ErrorAddr
@System@IsLibrary
@System@MainThreadID
@System@RaiseExceptionProc
@System@ExceptObjProc
@System@TInterfacedObject@
@$xp$17System@IInterface
@$xp$14System@TObject
@System@TObject@
@$xp$17System@AnsiString
@$xp$13System@string
@$xp$8Cardinal
@$xp$7Integer
@$xp$7Boolean
@Activex@Succeeded$qqrl
@Sysconst@_SModuleAccessViolation
@Sysconst@_SExternalException
@Sysconst@_SWriteAccess
@Sysconst@_SReadAccess
@Sysconst@_SPrivilege
@Sysconst@_SControlC
@Sysconst@_SStackOverflow
@Sysconst@_SUnderflow
@Sysconst@_SOverflow
@Sysconst@_SZeroDivide
@Sysconst@_SInvalidOp
@Sysconst@_SIntOverflow
@Sysconst@_SRangeError
@Sysconst@_SDivByZero
@Typinfo@initialization$qqrv
@Typinfo@Finalization$qqrv
@Typinfo@GetInt64Prop$qqrp14System@TObjectp17Typinfo@TPropInfo
@Typinfo@GetVariantProp$qqrp14System@TObjectp17Typinfo@TPropInfo
@Typinfo@GetFloatProp$qqrp14System@TObjectp17Typinfo@TPropInfo
@Typinfo@GetUnicodeStrProp$qqrp14System@TObjectp17Typinfo@TPropInfo
@Typinfo@GetWideStrProp$qqrp14System@TObjectp17Typinfo@TPropInfo
@Typinfo@GetStrProp$qqrp14System@TObjectp17Typinfo@TPropInfo
@Typinfo@GetOrdProp$qqrp14System@TObjectp17Typinfo@TPropInfo
@Typinfo@GetPropList$qqrp17Typinfo@TTypeInfo46System@%Set$t17Typinfo@TTypeKind$iuc$0$iuc$18%p50System@%StaticArray$p17Typinfo@TPropInfoi$i16380$%o
@Typinfo@GetEnumName$qqrp17Typinfo@TTypeInfoi
@Typinfo@GetTypeData$qqrp17Typinfo@TTypeInfo
@Sysutils@initialization$qqrv
@Sysutils@Finalization$qqrv
@Sysutils@FloatToStr$qqrg
@Variants@initialization$qqrv
@Variants@Finalization$qqrv
@Variants@@VarAdd$qqrr8TVarDatarx8TVarData
@Variants@@VarFromUStr$qqrr8TVarDatax20System@UnicodeString
@Variants@@VarToUStr$qqrr20System@UnicodeStringrx8TVarData
@Variants@@VarClr$qqrr8TVarData
@Varutils@initialization$qqrv
@Varutils@Finalization$qqrv

kernel32

TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
FreeLibrary
lstrcmpiW
WriteFile
WaitForSingleObject
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
UnmapViewOfFile
TerminateThread
TerminateProcess
SystemTimeToFileTime
SuspendThread
Sleep
SizeofResource
SetUnhandledExceptionFilter
SetThreadPriority
SetLastError
SetFilePointer
SetFileAttributesA
SetFileAttributesW
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ResetEvent
RemoveDirectoryA
RemoveDirectoryW
ReleaseMutex
ReadProcessMemory
ReadFile
RaiseException
QueryPerformanceFrequency
QueryPerformanceCounter
OpenProcess
OpenFileMappingA
OpenFileMappingW
MapViewOfFile
LockResource
LocalSize
LocalFree
LocalAlloc
LoadResource
LoadLibraryA
LoadLibraryW
LeaveCriticalSection
IsBadReadPtr
InitializeCriticalSection
GlobalUnlock
GlobalMemoryStatus
GlobalLock
GlobalFree
GlobalAlloc
GetWindowsDirectoryA
GetVersion
GetTickCount
GetThreadPriority
GetThreadContext
GetTempPathA
GetTempPathW
GetSystemTime
GetSystemDirectoryW
GetProcAddress
GetPriorityClass
GetModuleHandleA
GetModuleHandleW
GetModuleFileNameA
GetModuleFileNameW
GetLocaleInfoA
GetLocaleInfoW
GetLocalTime
GetLastError
GetFileSize
GetFileAttributesA
GetFileAttributesW
GetDiskFreeSpaceA
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryA
GetCurrentDirectoryW
GetComputerNameA
GetComputerNameW
GetCommandLineA
GetCommandLineW
FreeResource
InterlockedIncrement
InterlockedDecrement
FreeLibrary
FlushInstructionCache
FindResourceA
FindResourceW
FindNextFileA
FindNextFileW
FindFirstFileA
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
ExitThread
ExitProcess
EnterCriticalSection
DuplicateHandle
DeleteFileA
DeleteFileW
DeleteCriticalSection
CreateThread
CreateProcessA
CreateProcessW
CreatePipe
CreateMutexA
CreateMutexW
CreateFileMappingA
CreateFileMappingW
CreateFileA
CreateFileW
CreateEventA
CreateEventW
CreateDirectoryA
CreateDirectoryW
CopyFileA
CopyFileW
CloseHandle
Beep
RtlUnwind

user32

CreateWindowExA
CreateWindowExW
WindowFromPoint
TranslateMessage
SystemParametersInfoW
ShowWindow
SetWindowTextA
SetWindowTextW
SetWindowPos
SetWindowLongA
SetWindowLongW
SetTimer
SetRect
SetForegroundWindow
SetFocus
SetCursor
SetClipboardData
SetCapture
SetActiveWindow
SendMessageTimeoutA
SendMessageA
SendMessageW
ScreenToClient
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClassA
RegisterClassW
PostThreadMessageA
PostThreadMessageW
PostQuitMessage
PostMessageA
PostMessageW
PeekMessageA
PeekMessageW
OpenClipboard
OffsetRect
MessageBoxA
MessageBoxW
MessageBeep
LoadImageA
LoadImageW
LoadCursorW
KillTimer
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsIconic
IsDialogMessageW
InvalidateRect
InflateRect
GetWindowThreadProcessId
GetWindowTextA
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowLongA
GetWindowLongW
GetWindowDC
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetWindow
GetMessageA
GetMessageW
GetKeyState
GetIconInfo
GetFocus
GetDC
GetCursorPos
GetCursor
GetClientRect
GetClassNameA
GetCapture
FrameRect
FindWindowA
FillRect
EnumWindows
EndPaint
EnableWindow
EmptyClipboard
DrawTextA
DrawTextW
DrawIconEx
DrawFrameControl
DrawFocusRect
DispatchMessageW
DestroyWindow
DefWindowProcA
DefWindowProcW
CloseClipboard
CallWindowProcA
CallWindowProcW
BringWindowToTop
BeginPaint
AttachThreadInput

gdi32

TextOutA
TextOutW
StartPage
StartDocA
StartDocW
SetTextColor
SetMapMode
SetBkMode
SetBkColor
SelectObject
SelectClipRgn
MoveToEx
LineTo
GetTextMetricsW
GetTextFaceA
GetTextExtentPoint32A
GetTextExtentPoint32W
GetStockObject
GetRgnBox
GetObjectW
GetDeviceCaps
GdiFlush
EndPage
EndDoc
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgnIndirect
CreatePen
CreateFontA
CreateFontW
CreateDIBSection
CreateDCW
CreateCompatibleDC
CombineRgn
BitBlt

advapi32

SetSecurityDescriptorDacl
RegSetValueExA
RegSetValueExW
RegQueryValueExA
RegQueryValueExW
RegQueryInfoKeyA
RegOpenKeyExA
RegOpenKeyExW
RegEnumKeyA
RegDeleteValueA
RegDeleteValueW
RegCreateKeyExA
RegCreateKeyExW
RegCloseKey
OpenProcessToken
InitializeSecurityDescriptor
GetUserNameA
GetUserNameW
GetTokenInformation
FreeSid
AllocateAndInitializeSid

madbasic_.bpl

@Madtypes@MadException@$bdtr$qqrv
@Madtypes@MadException@Create$qqrx20System@UnicodeString
@$xp$21Madtypes@MadException
@Madtypes@MadException@
@Madtypes@MadException@CleanUpStackInfoProc
@$xp$25Madtypes@TDAUnicodeString
@$xp$22Madtypes@TDAAnsiString
@$xp$22Madtypes@TDANativeUInt
@$xp$19Madtypes@TDAInteger
@$xp$20Madtypes@TDACardinal
@$xp$20Madtypes@TDASmallInt
@Madstrings@initialization$qqrv
@Madstrings@Finalization$qqrv
@Madstrings@ExtractFileExtW$qqrx20System@UnicodeString
@Madstrings@ExtractFileDriveW$qqrx20System@UnicodeString
@Madstrings@ExtractFilePathW$qqrx20System@UnicodeString
@Madstrings@ExtractFileNameW$qqrx20System@UnicodeString
@Madstrings@IsValidIdentW$qqrx20System@UnicodeStringo
@Madstrings@EncodeUtf8$qqrx20System@UnicodeString
@Madstrings@DecodeUtf8$qqrx27System@%AnsiStringT$us$i0$%
@Madstrings@ErrorCodeToStrW$qqrui
@Madstrings@SizeToStrW$qqrj
@Madstrings@IntToHexExW$qqruiib
@Madstrings@IntToStrExW$qqrjib
@Madstrings@IntToStrExW$qqruiib
@Madstrings@IntToHexExW$qqriib
@Madstrings@IntToStrExW$qqriib
@Madstrings@IntToHexExA$qqrjic
@Madstrings@IntToHexExA$qqruiic
@Madstrings@IntToStrExA$qqruiic
@Madstrings@IntToHexExA$qqriic
@Madstrings@IntToStrExA$qqriic
@Madstrings@PosNotCharsW$qqrrx29System@%Set$tc$iuc$0$iuc$255%x20System@UnicodeStringuiui
@Madstrings@PosText$qqrx20System@UnicodeStringt1uiui
@Madstrings@PosStr$qqrx20System@UnicodeStringt1uiui
@Madstrings@BooleanToCharW$qqro
@Madstrings@CopyR$qqrx20System@UnicodeStringui
@Madstrings@RetDelete$qqrx20System@UnicodeStringuiui
@Madstrings@SubTextExistsW
@Madstrings@SubStrExistsW
@Madstrings@SubStrW
@Madstrings@SubStrCountW
@Madstrings@FormatSubStrsW
@Madstrings@StrToIntExW
@Madstrings@FillStrW
@Madstrings@PosCharsW
@Madstrings@PosTextIs1W
@Madstrings@PosStrIs1W
@Madstrings@PosTextW
@Madstrings@PosStrW
@Madstrings@CompareTextW
@Madstrings@IsTextEqualW
@Madstrings@LowStrW
@Madstrings@LowCharW
@Madstrings@UpStrW
@Madstrings@KeepW
@Madstrings@RetDeleteW
@Madstrings@ReplaceTextW
@Madstrings@ReplaceStrW
@Madstrings@KillStrW
@Madstrings@KillCharsW
@Madstrings@KillCharW
@Madstrings@RetTrimStrW
@Madstrings@TrimStrW
@Madstrings@SubStrA
@Madstrings@SubStrCountA
@Madstrings@StrToIntExA
@Madstrings@PosStrIs1A
@Madstrings@PosPCharA
@Madstrings@PosTextA
@Madstrings@PosStrA
@Madstrings@IsTextEqualA
@Madstrings@UpStrA
@Madstrings@UpCharA
@Madstrings@ReplaceTextA
@Madstrings@ReplaceStrA
@Madstrings@RetTrimStrA
@Madstrings@TrimStrA
@Madtools@initialization$qqrv
@Madtools@Finalization$qqrv
@Madtools@InitTryExceptFinally$qqrv
@Madtools@TickDif$qqrui
@Madtools@IsBadReadPtr2$qqrpvui
@Madtools@UnmangleW$qqrr20System@UnicodeStringt1
@Madtools@ResToStr$qqruipbx20System@UnicodeString
@Madtools@GetImageProcNameW$qqruipvo
@Madtools@GetImageProcAddress$qqruix27System@%AnsiStringT$us$i0$%o
@Madtools@GetImageExportDirectory$qqrui
@Madtools@GetImageNtHeaders$qqrui
@Madtools@DelMsgHandler$qqrpqqrp6HWND__uiiiri$vuiui
@Madtools@AddMsgHandler$qqrpqqrp6HWND__uiiiri$vuiui
@Madtools@MsgHandlerWindow$qqrui
@Madtools@MethodToProcedure$qqrp14System@TObjectpvi
@Madtools@GetFileVersionStr$qqrx20System@UnicodeString
@Madtools@GetFreeSystemResources$qqrus
@Madtools@OS$qqrv
@Madtools@HideLeak_
@Madtools@FindModuleA
@Madtools@GetFileVersionStrW
@Madtools@GetLongFileNameW
@Madtools@GetShortFileNameW
@Madtools@GetLongFileNameA
@$xp$12Madtools@TOS
@Madzip@Zip$qqrx20System@UnicodeStringpx20System@UnicodeStringxix45System@%DynamicArray$t20System@UnicodeString%
@Madzip@UpdateCrc32$qqruipxvi
@Madzip@Uncompress$qqrx27System@%AnsiStringT$us$i0$%
@Madzip@Compress$qqrx27System@%AnsiStringT$us$i0$%o
@Madzip@Compress$qqrpvt1ii
@Madcrypt@Encode$qqrx27System@%AnsiStringT$us$i0$%
@Madcrypt@Encode$qqrpvi
@Madcrypt@OldDecrypt$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%
@Madcrypt@OldEncrypt$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%
@Madcrypt@Decrypt$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%j
@Madcrypt@DecodeA

maddisasm_.bpl

@Maddisasm@initialization$qqrv
@Maddisasm@Finalization$qqrv
@Maddisasm@TryRead$qqrpvt1uiui
@Maddisasm@EndTryRead$qqrui
@Maddisasm@StartTryRead$qqrv
@Maddisasm@Magic95$qqrv
@Maddisasm@Magic$qqrv
@Maddisasm@ParseFunctionEx$qqrpvr27System@%AnsiStringT$us$i0$%t1io
@Maddisasm@ParseFunction$qqrpv
@Maddisasm@ParseFunction_$qqrpvuit1t1t1t1t1
@Maddisasm@ParseCode_$qqrpvui
@Maddisasm@ParseCode$qqrpv
@Maddisasm@BcbInitExceptBlockLDTC
@Maddisasm@GetLineNumber
@Maddisasm@GetProcNameFromMapFile
@$xp$23Maddisasm@TFunctionInfo
@$xp$27Maddisasm@_TFunctionInfo@_3

comctl32

ImageList_Destroy
ImageList_Create
InitCommonControls

comdlg32

PrintDlgW
GetSaveFileNameA
GetSaveFileNameW

shell32

ShellExecuteExA
ShellExecuteA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc

wsock32

WSACleanup
WSAStartup
WSAGetLastError
gethostbyname
socket
setsockopt
sendto
send
select
recvfrom
recv
ioctlsocket
inet_addr
htons
connect
closesocket
bind

Exports

Exports

@$xp$19Madexcept@IMEFields
@$xp$19Madexcept@TMEButton
@$xp$19Madexcept@TMEDupDef
@$xp$19Madexcept@TSyncType
@$xp$19Madmapfile@TMapFile
@$xp$20Madmapfile@TMfPublic
@$xp$21Madexcept@IMESettings
@$xp$21Madexcept@TExceptType
@$xp$21Madmapfile@TMfSegment
@$xp$21Madnvbitmap@INVBitmap
@$xp$22Madexcept@IMEException
@$xp$22Madexcept@Madexcept__1
@$xp$22Madexcept@Madexcept__2
@$xp$22Madexcept@TExceptPhase
@$xp$22Madmapfile@TSymTagEnum
@$xp$22Madnvassistant@INVEdit
@$xp$22Madnvassistant@INVForm
@$xp$22Madnvassistant@INVItem
@$xp$22Madnvbitmap@TPngFormat
@$xp$23Madexcept@TExceptAction
@$xp$23Madexcept@TExceptSource
@$xp$23Madmapfile@_TMapFile@_1
@$xp$23Madmapfile@_TMapFile@_2
@$xp$23Madmapfile@_TMapFile@_3
@$xp$23Madnvassistant@INVImage
@$xp$23Madnvassistant@INVLabel
@$xp$24Madexcept@IMEAttachments
@$xp$24Madexcept@TExceptEventOO
@$xp$24Madexcept@TMEShowSetting
@$xp$24Madnvassistant@INVButton
@$xp$24Madnvassistant@TNVAction
@$xp$24Madstacktrace@TStackItem
@$xp$25Madstacktrace@TStackTrace
@$xp$26Madnvassistant@INVCheckBox
@$xp$26Madnvassistant@TOutputType
@$xp$27Madexcept@IMEModuleSettings
@$xp$27Madnvassistant@INVAssistant
@$xp$28Madstacktrace@BcbTermination
@$xp$29Madnvassistant@TNVModalResult
@$xp$29Madnvprgralert@IProgressAlert
@$xp$30Madexcept@TBugReportCallbackOO
@$xp$30Madexcept@TExceptActionEventOO
@GetPackageInfoTable
@Maddumpobj@DumpObj$qqrp14System@TObject
@Maddumpobj@Finalization$qqrv
@Maddumpobj@initialization$qqrv
@Madexcept@AddCmdLineToBugRep
@Madexcept@AmHttpServer
@Madexcept@AmOnline$qqro
@Madexcept@AutoSaveBugReport$qqrx20System@UnicodeStringx49System@%DelphiInterface$t21Madexcept@IMESettings%
@Madexcept@AutoSendBugReport$qqrx20System@UnicodeStringx49System@%DelphiInterface$t21Madnvbitmap@INVBitmap%x49System@%DelphiInterface$t21Madexcept@IMESettings%o
@Madexcept@BcbCallTerminate
@Madexcept@BcbExceptionHandler
@Madexcept@BcbHelper_GetIntraWebVersion$qqrpv
@Madexcept@BcbInitExceptBlockLDTC
@Madexcept@BcbOrgMalloc
@Madexcept@BcbPTerminate
@Madexcept@BcbThrowExceptionLDTC
@Madexcept@BcbVclClearEH
@Madexcept@BugReportHtml
@Madexcept@BugZillaUpload$qqrx27System@%AnsiStringT$us$i0$%ouix20System@UnicodeStringt4t4t4t4t4t4t4t4t4t4t4x52System@%DelphiInterface$t24Madexcept@IMEAttachments%p6HWND__oox49System@%DelphiInterface$t21Madexcept@IMESettings%
@Madexcept@CGIApp_TCGIApplication_CGIHandleException
@Madexcept@CMadExceptVersionString
@Madexcept@CalibrateCode$qqrv
@Madexcept@CalibrateData
@Madexcept@CheckBugTracker$qqri27System@%AnsiStringT$us$i0$%ouix20System@UnicodeStringt5t5t5t5rotatatatar45System@%DynamicArray$t20System@UnicodeString%tftftftf
@Madexcept@CheckExceptParams$qqrrp14System@TObjectrpvr27System@%AnsiStringT$us$i0$%rp8_CONTEXT
@Madexcept@CheckHttpUpload$qqrx27System@%AnsiStringT$us$i0$%ouix20System@UnicodeStringt4rot6t6
@Madexcept@CheckSmtpClient$qqrx27System@%AnsiStringT$us$i0$%oouix20System@UnicodeStringt5rot7t7t7t7t7r20System@UnicodeString
@Madexcept@Classes_CheckSynchronize
@Madexcept@ClearLeaks$qqroo
@Madexcept@CloseAntiFreeze$qqrv
@Madexcept@CloseAppExitCode
@Madexcept@CloseApplication$qqrv
@Madexcept@CloseExceptionView$qqrp14System@TObject
@Madexcept@CrashOnOverrun
@Madexcept@CreateBugReport$qqr21Madexcept@TExceptTypep14System@TObjectpvuiuiuip8_CONTEXTox55System@%DelphiInterface$t27Madexcept@IMEModuleSettings%23Madexcept@TExceptSourcet2uix27System@%AnsiStringT$us$i0$%p25Madtypes@TExceptionRecord
@Madexcept@CreateExceptionView$qqrp6HWND__rx11Types@TRectrp6HWND__
@Madexcept@CustomizeSimpleMsgBox
@Madexcept@DecryptPassword$qqrx20System@UnicodeStringt1x27System@%AnsiStringT$us$i0$%
@Madexcept@DefaultBugReportHtml$qqrx20System@UnicodeStringx49System@%DelphiInterface$t21Madexcept@IMESettings%
@Madexcept@DelphiDebugMm
@Madexcept@DetectConsole
@Madexcept@DisAsmFunc
@Madexcept@DontAddDots
@Madexcept@DontHookThreads$qqrv
@Madexcept@DontPrettifyExceptMsg
@Madexcept@DontReformatExcMsg
@Madexcept@DontUseProxy
@Madexcept@DumbStackTrace
@Madexcept@Ebp$qqrv
@Madexcept@EnableRedirection
@Madexcept@Esp$qqrv
@Madexcept@ExceptionBoxHeight
@Madexcept@ExceptionBoxWidth
@Madexcept@ExpandVars$qqruir20System@UnicodeStringx20System@UnicodeStringt3t3t3
@Madexcept@ExtractBugReportHeaderField$qqrx20System@UnicodeStringt1
@Madexcept@FMX_TApplication_HandleException
@Madexcept@FMX_TApplication_ShowException
@Madexcept@FillClipboard$qqrx20System@UnicodeString
@Madexcept@Finalization$qqrv
@Madexcept@FinalizeMadExcept$qqrv
@Madexcept@FogBugzUpload$qqrx27System@%AnsiStringT$us$i0$%ouix20System@UnicodeStringt4t4t4t4t4t4t4t4t4t4t4t4x52System@%DelphiInterface$t24Madexcept@IMEAttachments%x47System@%DelphiInterface$t19Madexcept@IMEFields%p6HWND__oox49SystevH6auFUwE84qPbye8egXAw
@Madexcept@FollowRedirect
@Madexcept@ForceUtf8
@Madexcept@FormatExceptMessage$qqrx20System@UnicodeString
@Madexcept@Forms_TApplication_HandleException
@Madexcept@Forms_TApplication_ShowException
@Madexcept@Get9xResourceReport$qqrv
@Madexcept@GetAllocatedMemory$qqrv
@Madexcept@GetAttachments$qqrx52System@%DelphiInterface$t24Madexcept@IMEAttachments%p6HWND__oox49System@%DelphiInterface$t21Madexcept@IMESettings%
@Madexcept@GetCpuCount$qqrv
@Madexcept@GetCpuName$qqrv
@Madexcept@GetCrashStackTrace$qqrooop49System@%DynamicArray$t24Madstacktrace@TStackItem%x57System@%DelphiInterface$t29Madnvprgralert@IProgressAlert%opuit7pop45System@%DynamicArray$t20System@UnicodeString%
@Madexcept@GetDisplayModeString$qqrv
@Madexcept@GetExceptBoxHandle$qqrv
@Madexcept@GetLargestFreeBlock$qqrv
@Madexcept@GetLeakCallstack$qqrj
@Madexcept@GetLeakReport$qqrooo
@Madexcept@GetMemoryStatus$qqrv
@Madexcept@GetOsLanguageString$qqrv
@Madexcept@GetOsVersionString$qqrv
@Madexcept@GetProgramUpTime$qqrv
@Madexcept@GetSpecialFolderW$qqrio
@Madexcept@GetSystemUpTime$qqrv
@Madexcept@GetTSClientName$qqrv
@Madexcept@GetThreadCreatorAddr$qqrui
@Madexcept@GetThreadInfos$qqruiruit2t2t2r8_CONTEXTriro
@Madexcept@GetThreadList$qqrv
@Madexcept@GetThreadName$qqrui
@Madexcept@GetThreadStackTrace$qqruiooop49System@%DynamicArray$t24Madstacktrace@TStackItem%x57System@%DelphiInterface$t29Madnvprgralert@IProgressAlert%opuit8pop45System@%DynamicArray$t20System@UnicodeString%
@Madexcept@HandleContactForm$qqr50System@%DelphiInterface$t22Madnvassistant@INVForm%24Madnvassistant@TNVAction50System@%DelphiInterface$t22Madnvassistant@INVItem%50System@%DelphiInterface$t22Madexcept@IMEException%
@Madexcept@HandleException$qqr21Madexcept@TExceptTypep14System@TObjectpvouiuip8_CONTEXT23Madexcept@TExceptSourcet2uip20System@UnicodeString
@Madexcept@HandleScreenshotForm$qqr50System@%DelphiInterface$t22Madnvassistant@INVForm%24Madnvassistant@TNVAction50System@%DelphiInterface$t22Madnvassistant@INVItem%50System@%DelphiInterface$t22Madexcept@IMEException%
@Madexcept@HiddenAutoMailing
@Madexcept@HideInitializationLeaks$qqrv
@Madexcept@HideLeak$qqrp17System@TMetaClassi
@Madexcept@HideLeak$qqrpv
@Madexcept@HideLeak$qqrui
@Madexcept@HideLeak$qqrx20System@UnicodeString
@Madexcept@HookThreads$qqrv
@Madexcept@HttpExtensionProcNext
@Madexcept@HttpUpload$qqrx27System@%AnsiStringT$us$i0$%ouix20System@UnicodeStringt4x52System@%DelphiInterface$t24Madexcept@IMEAttachments%x47System@%DelphiInterface$t19Madexcept@IMEFields%t4p6HWND__oox49System@%DelphiInterface$t21Madexcept@IMESettings%
@Madexcept@HttpUploadTimeout
@Madexcept@HyperJumpCallstack$qqrx20System@UnicodeString
@Madexcept@ISAPIApp_TISAPIApplication_ISAPIHandleException
@Madexcept@IgnoreSmtpCert
@Madexcept@ImNotFrozen$qqrv
@Madexcept@ImportBugReport$qqrx20System@UnicodeString
@Madexcept@InitAntiFreeze$qqrv
@Madexcept@InstallUnhandledExceptionFilter$qqrv
@Madexcept@IsThreadSuspended$qqruiui
@Madexcept@IsTrueUnicodeString$qqrx20System@UnicodeString
@Madexcept@IsUserAdmin$qqrv
@Madexcept@LastHttpErrorNo
@Madexcept@LastHttpErrorStr
@Madexcept@LastHttpPostReply
@Madexcept@LastMantisIssueId
@Madexcept@LastRedirectURL
@Madexcept@MESettings$qqrpv
@Madexcept@MESettings$qqrui
@Madexcept@MESettings$qqrv
@Madexcept@MantisUpload$qqrx27System@%AnsiStringT$us$i0$%ouix20System@UnicodeStringt4t4t4t4t4t4t4t4t4t4t4x52System@%DelphiInterface$t24Madexcept@IMEAttachments%p6HWND__oox49System@%DelphiInterface$t21Madexcept@IMESettings%
@Madexcept@MxLookup$qqr27System@%AnsiStringT$us$i0$%
@Madexcept@NameThread$qqruix20System@UnicodeString
@Madexcept@NewAttachments$qqrv
@Madexcept@NewException$qqr21Madexcept@TExceptTypep14System@TObjectpvouiuiuip8_CONTEXTx55System@%DelphiInterface$t27Madexcept@IMEModuleSettings%23Madexcept@TExceptSourcet2uix27System@%AnsiStringT$us$i0$%op25Madtypes@TExceptionRecord
@Madexcept@NewFields$qqrv
@Madexcept@NoOnlineCheck
@Madexcept@OnExceptBoxCreate
@Madexcept@OnExceptBoxDestroy
@Madexcept@OpenThread$qqruiui
@Madexcept@PatchAPI$qqrx27System@%AnsiStringT$us$i0$%t1pvrpvt3o
@Madexcept@PatchInt$qqrpvi
@Madexcept@PatchJmp$qqrpvt1
@Madexcept@PatchPtr$qqrpvt1t1
@Madexcept@PauseFreezeCheck$qqro
@Madexcept@PauseMadExcept$qqro
@Madexcept@PauseMeEventually$qqrv
@Madexcept@Ping$qqrx27System@%AnsiStringT$us$i0$%
@Madexcept@Plugins
@Madexcept@PrintBugReport$qqrx20System@UnicodeStringp6HWND__x49System@%DelphiInterface$t21Madexcept@IMESettings%
@Madexcept@ProcessMainThreadId
@Madexcept@ProxyBypass
@Madexcept@ProxyPassword
@Madexcept@ProxyServer
@Madexcept@ProxyUserName
@Madexcept@PutAssisIntoBugReport$qqrx55System@%DelphiInterface$t27Madnvassistant@INVAssistant%x50System@%DelphiInterface$t22Madexcept@IMEException%
@Madexcept@Qforms_TApplication_HandleException
@Madexcept@Qforms_TApplication_ShowException
@Madexcept@RegDelVal$qqrp6HKEY__x20System@UnicodeStringt2
@Madexcept@RegReadStr$qqrp6HKEY__x20System@UnicodeStringt2
@Madexcept@RegWriteStr$qqrp6HKEY__x20System@UnicodeStringt2t2
@Madexcept@RegisterBugReportPlugin$qqrx20System@UnicodeStringt1pqqrv$20System@UnicodeStringo
@Madexcept@RegisterBugReportPlugin$qqrx20System@UnicodeStringt1pqqrv$27System@%AnsiStringT$us$i0$%o
@Madexcept@RegisterBugReportPlugin$qqrx20System@UnicodeStringt1pqqrx50System@%DelphiInterface$t22Madexcept@IMEException%$20System@UnicodeStringo
@Madexcept@RegisterBugReportPlugin$qqrx20System@UnicodeStringt1pqqrx50System@%DelphiInterface$t22Madexcept@IMEException%$27System@%AnsiStringT$us$i0$%o
@Madexcept@RegisterExceptActionHandler$qqrpqqr23Madexcept@TExceptActionx50System@%DelphiInterface$t22Madexcept@IMEException%ro$v19Madexcept@TSyncType
@Madexcept@RegisterExceptActionHandler$qqrynpqqr23Madexcept@TExceptActionx50System@%DelphiInterface$t22Madexcept@IMEException%ro$v19Madexcept@TSyncType
@Madexcept@RegisterExceptionHandler$qqrpqqrx50System@%DelphiInterface$t22Madexcept@IMEException%ro$v19Madexcept@TSyncType22Madexcept@TExceptPhase
@Madexcept@RegisterExceptionHandler$qqrynpqqrx50System@%DelphiInterface$t22Madexcept@IMEException%ro$v19Madexcept@TSyncType22Madexcept@TExceptPhase
@Madexcept@RegisterHiddenExceptionHandler$qqrpqqrx50System@%DelphiInterface$t22Madexcept@IMEException%ro$v19Madexcept@TSyncType
@Madexcept@RegisterHiddenExceptionHandler$qqrynpqqrx50System@%DelphiInterface$t22Madexcept@IMEException%ro$v19Madexcept@TSyncType
@Madexcept@RelativeToAbsolute$qqrx20System@UnicodeString
@Madexcept@ReportLeaks
@Madexcept@ReportLeaksNow$qqro
@Madexcept@RequireAuthenticSsl
@Madexcept@ResetFpuMode
@Madexcept@RestartApplication$qqrx20System@UnicodeStringo
@Madexcept@SaveBugReport$qqrx20System@UnicodeStringp6HWND__x49System@%DelphiInterface$t21Madexcept@IMESettings%
@Madexcept@SendBugReport$qqrx20System@UnicodeStringx49System@%DelphiInterface$t21Madnvbitmap@INVBitmap%p6HWND__x49System@%DelphiInterface$t21Madexcept@IMESettings%
@Madexcept@SendMapiMail$qqrx20System@UnicodeStringt1t1x52System@%DelphiInterface$t24Madexcept@IMEAttachments%p6HWND__oox49System@%DelphiInterface$t21Madexcept@IMESettings%
@Madexcept@SendShellMail$qqrx20System@UnicodeStringt1t1
@Madexcept@SendSmtpMail$qqrx20System@UnicodeStringt1t1t1t1x52System@%DelphiInterface$t24Madexcept@IMEAttachments%x27System@%AnsiStringT$us$i0$%t1t1uioop6HWND__oox49System@%DelphiInterface$t21Madexcept@IMESettings%
@Madexcept@SetDebugMmAlignment$qqri
@Madexcept@SetFreezeTimeout$qqrui
@Madexcept@SetLeakReportFile$qqrx20System@UnicodeString
@Madexcept@SetTopmost$qqrp6HWND__o
@Madexcept@ShowBugReportKey
@Madexcept@ShowLeakProgressWindow$qqro
@Madexcept@ShowLeakReport$qqrx20System@UnicodeString
@Madexcept@ShowNoLeaksWindow$qqro
@Madexcept@ShowOuterExceptDetails
@Madexcept@SmtpComputerName
@Madexcept@SmtpMailFrom
@Madexcept@SmtpReplyTo
@Madexcept@SmtpServerPort
@Madexcept@SmtpTimeout
@Madexcept@StartLeakChecking$qqro
@Madexcept@StopLeakChecking$qqro
@Madexcept@SysUtils_AnsiStrAlloc
@Madexcept@SysUtils_Exception_Destroy
@Madexcept@SysUtils_Exception_GetStackTrace
@Madexcept@SysUtils_Exception_RaisingException
@Madexcept@SysUtils_InitializePackage
@Madexcept@SysUtils_LoadPackage
@Madexcept@SysUtils_ShowException
@Madexcept@SysUtils_WideStrAlloc
@Madexcept@System_ExceptionHandler
@Madexcept@System_FinalizeUnits
@Madexcept@System_InitUnits
@Madexcept@System_runErrMsg
@Madexcept@ThisIsNoLeak$qqrpv
@Madexcept@ThisIsNoLeak$qqrui
@Madexcept@UnpatchAPI$qqrpvt1t1o
@Madexcept@UnregisterBugReportPlugin$qqrx20System@UnicodeString
@Madexcept@UnregisterExceptActionHandler$qqrpqqr23Madexcept@TExceptActionx50System@%DelphiInterface$t22Madexcept@IMEException%ro$v
@Madexcept@UnregisterExceptActionHandler$qqrynpqqr23Madexcept@TExceptActionx50System@%DelphiInterface$t22Madexcept@IMEException%ro$v
@Madexcept@UnregisterExceptionHandler$qqrpqqrx50System@%DelphiInterface$t22Madexcept@IMEException%ro$v
@Madexcept@UnregisterExceptionHandler$qqrynpqqrx50System@%DelphiInterface$t22Madexcept@IMEException%ro$v
@Madexcept@UnregisterHiddenExceptionHandler$qqrpqqrx50System@%DelphiInterface$t22Madexcept@IMEException%ro$v
@Madexcept@UnregisterHiddenExceptionHandler$qqrynpqqrx50System@%DelphiInterface$t22Madexcept@IMEException%ro$v
@Madexcept@UpdateExceptionView$qqrp14System@TObjectx50System@%DelphiInterface$t22Madexcept@IMEException%
@Madexcept@WasRestarted
@Madexcept@initialization$qqrv
@Madexcept@madTraceProcess$qqsi
@Madexcept_@@GetPackageInfoTable$qqrv
@Madexcept_@@PackageLoad$qqrv
@Madexcept_@@PackageUnload$qqrv
@Madexcept_@initialization$qqrv
@Madlinkdisasm@Finalization$qqrv
@Madlinkdisasm@initialization$qqrv
@Madlisthardware@Finalization$qqrv
@Madlisthardware@GetHardwareList$qqrv
@Madlisthardware@initialization$qqrv
@Madlistmodules@Finalization$qqrv
@Madlistmodules@GetModuleList$qqrv
@Madlistmodules@initialization$qqrv
@Madlistprocesses@Finalization$qqrv
@Madlistprocesses@GetProcessList$qqrv
@Madlistprocesses@initialization$qqrv
@Madmapfile@CMapFileStreamDescriptor
@Madmapfile@Finalization$qqrv
@Madmapfile@FindMapFile$qqrpv
@Madmapfile@GetMapFileAddress$qqrx20System@UnicodeStringt1t1
@Madmapfile@GetMapFileInfos$qqrpvr20System@UnicodeStringt2t2rpvri
@Madmapfile@GetMyProcName$qqro
@Madmapfile@ImportMapFile$qqrx27System@%AnsiStringT$us$i0$%
@Madmapfile@LoadMapFile$qqrx20System@UnicodeStringo
@Madmapfile@LoadMapFileEx$qqrx20System@UnicodeStringo
@Madmapfile@SymCleanup
@Madmapfile@SymEnumLines
@Madmapfile@SymEnumSymbols
@Madmapfile@SymGetModuleInfo64
@Madmapfile@SymInitialize
@Madmapfile@SymLoadModuleEx
@Madmapfile@SymUnloadModule64
@Madmapfile@TMapFile@
@Madmapfile@TMapFile@$bctr$qqrox27System@%AnsiStringT$us$i0$%x20System@UnicodeStringuioo
@Madmapfile@TMapFile@Export$qqrooo
@Madmapfile@TMapFile@FindAddress$qqrx20System@UnicodeStringt1
@Madmapfile@TMapFile@FindLine$qqrpv
@Madmapfile@TMapFile@FindLine$qqrpvrpv
@Madmapfile@TMapFile@FindPublic$qqri
@Madmapfile@TMapFile@FindPublic$qqrox20System@UnicodeStringt2o
@Madmapfile@TMapFile@FindPublic$qqrpv
@Madmapfile@TMapFile@FindSegment$qqri
@Madmapfile@TMapFile@FindSegment$qqropv
@Madmapfile@TMapFile@Line_NewItem$qqripvo
@Madmapfile@TMapFile@Public_NewItem$qqro20System@UnicodeStringuio
@Madmapfile@TMapFile@Segment_NewItem$qqroouiui20System@UnicodeStringoo
@Madmapfile@initialization$qqrv
@Madnvassistant@CreateAssistant$qqrx20System@UnicodeStringpx27System@%AnsiStringT$us$i0$%xix45System@%DelphiInterface$t17System@IInterface%
@Madnvassistant@Finalization$qqrv
@Madnvassistant@HandleContactFormProc
@Madnvassistant@HandleExceptionHelper
@Madnvassistant@HandleScreenshotFormProc
@Madnvassistant@LoadAssistant$qqruix20System@UnicodeStringpx20System@UnicodeStringxix45System@%DelphiInterface$t17System@IInterface%
@Madnvassistant@OnAssistantCreate
@Madnvassistant@initialization$qqrv
@Madnvbitmap@Finalization$qqrv
@Madnvbitmap@LoadBitmap$qqrx20System@UnicodeString
@Madnvbitmap@ScreenShot$qqro
@Madnvbitmap@initialization$qqrv
@Madnvprgralert@Finalization$qqrv
@Madnvprgralert@NewProgressAlert$qqrx20System@UnicodeStringuit1
@Madnvprgralert@initialization$qqrv
@Madstacktrace@BcbTermination@
@Madstacktrace@BcbTermination@$bctr$qqrx20System@UnicodeString
@Madstacktrace@FastMM_LogStackTrace$qqrpvipcoooo
@Madstacktrace@Finalization$qqrv
@Madstacktrace@InternalError$qqrx20System@UnicodeStringoo
@Madstacktrace@PrepareStackTrace$qqruiuiuip8_CONTEXTpvo
@Madstacktrace@StackAddrToStr$qqrpvoo
@Madstacktrace@StackTrace$qqrooop49System@%DynamicArray$t24Madstacktrace@TStackItem%p8_CONTEXTpvoouiuit6ppvtctc57System@%DelphiInterface$t29Madnvprgralert@IProgressAlert%uioo27System@%AnsiStringT$us$i0$%popuitltkp45System@%DynamicASKuXo+q15gvF0I9owRkH7g
@Madstacktrace@initialization$qqrv
Finalize
Initialize
madTraceProcess

Sections

.text
Size: 337KB - Virtual size: 336KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 328B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
~!!SetUp_KEY_9696_PAas$c0De!%!!/mismarriage.pkg
~!!SetUp_KEY_9696_PAas$c0De!%!!/plugins/Microsoft.VisualStudio.VsWebProtocol
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-03-2023 18:43

Not After

14-03-2024 18:43

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5f:af:0c:58:d2:42:9a:e0:4a:81:ab:97:5c:6c:f6:e8:7d:30:0a:ad:18:b9:59:1c:3f:a4:76:78:f5:ef:fd:00
Signer

Actual PE Digest

5f:af:0c:58:d2:42:9a:e0:4a:81:ab:97:5c:6c:f6:e8:7d:30:0a:ad:18:b9:59:1c:3f:a4:76:78:f5:ef:fd:00

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\dbs\el\ddvsm\out\Intermediate\appid\microsoft.visualstudio.vswebprotocolselector_x86Retail_E59B6BE4\Release\net472\Microsoft.VisualStudio.VsWebProtocolSelector.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 471KB - Virtual size: 470KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
~!!SetUp_KEY_9696_PAas$c0De!%!!/plugins/NvStWiz
.exe windows:6 windows x86 arch:x86

a7e73ef2207e9ee97c678506145e1258

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

4f:be:0a:02:42:6e:bd:20:c2:62:44:b5:ec:a6:52:a3
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

09-07-2018 00:00

Not After

10-07-2019 23:59

Subject

CN=NVIDIA Corporation,OU=IT-MIS,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22-02-2011 19:25

Not After

22-02-2021 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

62:e7:45:e9:21:65:21:3c:97:1f:5c:49:0a:ea:12:a5
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

09-07-2018 00:00

Not After

09-07-2021 23:59

Subject

CN=NVIDIA Corporation,OU=IT-MIS,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

22-07-2014 00:00

Not After

21-07-2024 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:2d:23:cb:00:00:00:00:00:21
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22-02-2011 19:46

Not After

22-02-2021 19:56

Subject

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

54:cb:ab:94:75:80:97:ed:a8:bb:b7:bd:5b:5f:9b:d9:c4:b8:e5:05:1b:74:5b:83:60:86:a9:f7:ca:58:97:d7
Signer

Actual PE Digest

54:cb:ab:94:75:80:97:ed:a8:bb:b7:bd:5b:5f:9b:d9:c4:b8:e5:05:1b:74:5b:83:60:86:a9:f7:ca:58:97:d7

Digest Algorithm

sha256

PE Digest Matches

true

7f:01:56:fd:7c:3f:56:65:ab:41:e1:66:0d:22:36:1d:f4:00:d1:24
Signer

Actual PE Digest

7f:01:56:fd:7c:3f:56:65:ab:41:e1:66:0d:22:36:1d:f4:00:d1:24

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\dvs\p4\build\sw\rel\gpu_drv\r415\r415_00\drivers\stereo_vision\Apps\GeForce3DVisionSetupWizard\release\NvStWiz.pdb

Imports

user32

GetDesktopWindow
PostQuitMessage
GetUserObjectInformationW
SetCursor
LoadCursorW
TranslateMessage
OpenInputDesktop
ValidateRect
PeekMessageW
EnumDisplaySettingsExW
DestroyIcon
EnumDisplaySettingsW
CloseDesktop
ChangeDisplaySettingsW
ShowWindow
DestroyCursor
RegisterClassExW
SendMessageW
CreateWindowExW
MessageBoxW
DestroyWindow
DefWindowProcW
ChangeDisplaySettingsExW
UpdateWindow
LoadImageW
SetCursorPos
DispatchMessageW
GetCursorPos

shell32

SHGetFolderPathW
ShellExecuteW
SHGetKnownFolderPath

ole32

CoTaskMemFree
CreateStreamOnHGlobal
CoCreateInstance
CoUninitialize
CoInitialize

d3d9

Direct3DCreate9

d3d10

D3D10CreateDevice

gdiplus

GdipLoadImageFromStream
GdipSetStringFormatFlags
GdipGetImageWidth
GdipSetStringFormatAlign
GdiplusStartup
GdipCreatePen1
GdipCreateStringFormat
GdipDeleteFontFamily
GdipGetImageHeight
GdipSetImageAttributesColorMatrix
GdipDeleteFont
GdipSetCompositingMode
GdipDeleteStringFormat
GdipDeleteGraphics
GdiplusShutdown
GdipMeasureString
GdipCloneBrush
GdipSetTextRenderingHint
GdipCreateFromHDC
GdipDrawString
GdipFree
GdipGetGenericFontFamilySansSerif
GdipCreateImageAttributes
GdipDrawLine
GdipCreateSolidFill
GdipCreateFont
GdipDisposeImage
GdipDisposeImageAttributes
GdipDrawImageRectI
GdipAlloc
GdipDeleteBrush
GdipCloneImage
GdipDrawImageRectRect
GdipCreateFontFamilyFromName
GdipDeletePen

kernel32

GetConsoleCP
FlushFileBuffers
SetStdHandle
GetProcessHeap
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
GetStringTypeW
GetFileType
HeapAlloc
HeapFree
GetACP
WriteFile
GetStdHandle
HeapSize
MultiByteToWideChar
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
GetCommandLineW
GetCommandLineA
EncodePointer
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
RaiseException
RtlUnwind
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
SetEvent
GetConsoleMode
HeapReAlloc
SetFilePointerEx
SetEndOfFile
ReadFile
ReadConsoleW
DecodePointer
WideCharToMultiByte
SizeofResource
FindFirstFileW
GetSystemDefaultLCID
FindNextFileW
lstrcpynW
GetThreadLocale
GetUserDefaultUILanguage
GetTempPathW
FindClose
GetLocaleInfoW
GetFileAttributesW
GetVersionExW
GetSystemDirectoryW
FreeResource
CreateEventW
Sleep
GetLastError
LockResource
GlobalAlloc
GlobalFree
CloseHandle
LoadLibraryW
FindResourceExW
LoadResource
FindResourceW
GetProcAddress
GlobalLock
WriteConsoleW
FreeLibrary
lstrcmpiW
GlobalUnlock
LoadLibraryExW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VerSetConditionMask
ExpandEnvironmentStringsW
CreateFileW
GetFullPathNameW
SetLastError
GetCurrentProcess
GetModuleHandleA
LocalAlloc
LocalFree
lstrcmpW
VerifyVersionInfoW
GetModuleHandleW

advapi32

RegQueryValueExW
RegOpenKeyExA
InitializeSecurityDescriptor
RegSetValueExA
RegQueryValueExA
RegCloseKey
SetSecurityDescriptorDacl
RegOpenKeyExW

Sections

.text
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
~!!SetUp_KEY_9696_PAas$c0De!%!!/plugins/StartupHelper
.exe windows:5 windows x86 arch:x86

d21794f0d47bb5c7f5977a6500854d85

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:28:14:36:98:54:a8:5f:9b:8f:90:12:67:c0:3c:f2
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

17-08-2022 00:00

Not After

29-07-2025 23:59

Subject

SERIALNUMBER=91110108680456115E,CN=Glarysoft Ltd,O=Glarysoft Ltd,ST=Beijing,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13104861696469616e204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:28:14:36:98:54:a8:5f:9b:8f:90:12:67:c0:3c:f2
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

17-08-2022 00:00

Not After

29-07-2025 23:59

Subject

SERIALNUMBER=91110108680456115E,CN=Glarysoft Ltd,O=Glarysoft Ltd,ST=Beijing,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13104861696469616e204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cc:08:bb:49:63:6e:cf:3f:72:bf:92:cf:45:8b:91:0e:90:0f:7d:11:28:70:03:90:0a:af:8b:19:89:f5:2f:7b
Signer

Actual PE Digest

cc:08:bb:49:63:6e:cf:3f:72:bf:92:cf:45:8b:91:0e:90:0f:7d:11:28:70:03:90:0a:af:8b:19:89:f5:2f:7b

Digest Algorithm

sha256

PE Digest Matches

true

b2:c8:9c:70:dd:00:70:00:00:18:3b:25:00:02:8e:c2:fc:f9:28:b7
Signer

Actual PE Digest

b2:c8:9c:70:dd:00:70:00:00:18:3b:25:00:02:8e:c2:fc:f9:28:b7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\winapps\mh\trunk\exe\vc\StartupHelper\sourcecode\Release\StartupHelper.pdb

Imports

mfc90u

ord404
ord2597
ord2141
ord4131
ord6635
ord4044
ord611
ord595
ord3489
ord5664
ord4652
ord1493
ord6411
ord3355
ord1665
ord5939
ord4405
ord1607
ord3220
ord5632
ord5167
ord5324
ord1810
ord1809
ord1675
ord3353
ord6408
ord1754
ord1751
ord4345
ord1492
ord4664
ord5602
ord2074
ord5512
ord6800
ord4603
ord3743
ord5154
ord4702
ord1728
ord6466
ord5685
ord5683
ord960
ord965
ord969
ord967
ord971
ord2615
ord2635
ord2619
ord2625
ord2623
ord2621
ord2638
ord2633
ord2617
ord2640
ord2628
ord2610
ord2612
ord2630
ord2375
ord2368
ord1641
ord6802
ord4174
ord6804
ord3682
ord5404
ord6376
ord3226
ord1442
ord5625
ord2139
ord1792
ord1791
ord1727
ord5650
ord3140
ord4910
ord4682
ord3515
ord2593
ord5653
ord6091
ord4774
ord4815
ord5078
ord613
ord337
ord4631
ord2901
ord4741
ord1533
ord3537
ord6095
ord3622
ord6187
ord6094
ord333
ord3488
ord1354
ord1353
ord2097
ord3543
ord1183
ord3486
ord4527
ord6579
ord4543
ord6577
ord2592
ord744
ord524
ord2069
ord1063
ord663
ord2146
ord1166
ord1064
ord6604
ord4530
ord2904
ord1047
ord2596
ord5008
ord1108
ord367
ord586
ord4000
ord374
ord2130
ord3577
ord2282
ord4512
ord4442
ord4448
ord4423
ord6801
ord4173
ord6803
ord4747
ord2251
ord2206
ord6035
ord4179
ord1048
ord5548
ord6741
ord5830
ord4213
ord2087
ord3217
ord5674
ord5676
ord4347
ord4996
ord5680
ord5663
ord6018
ord2771
ord2983
ord3112
ord799
ord265
ord266
ord1272
ord1137
ord1254
ord686
ord436
ord792
ord587
ord4728
ord2966
ord3115
ord2774
ord2893
ord2764
ord4080
ord4081
ord4071
ord2891
ord4348
ord4905
ord4681
ord3670
ord2447
ord636
ord790
ord639
ord2208
ord6482
ord1098
ord4211
ord794
ord589
ord4043
ord4967
ord1318
ord2327
ord316
ord601
ord899
ord1315
ord938
ord1603
ord2478
ord5979
ord6687
ord285
ord5535
ord6079
ord6813
ord1552
ord2551
ord946
ord821
ord2470
ord6096
ord4541
ord4410
ord290
ord1088
ord6659
ord2243
ord6204
ord339
ord289
ord288
ord6164
ord1599
ord809
ord6013
ord935
ord936
ord2702
ord286
ord5851
ord3637
ord2106
ord811
ord280
ord2326
ord2694
ord6529
ord813
ord2537
ord600
ord1143
ord296
ord1248
ord2084
ord1250
ord801

msvcr90

memcpy
memset
towupper
__CxxFrameHandler3
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
__wargv
__argc
setlocale
_resetstkoflw
?what@exception@std@@UBEPBDXZ
_msize
_purecall
_set_errno
_get_errno
_wtoi64
realloc
_gcvt_s
_fpclass
_HUGE
iswspace
wcsrchr
wcschr
_ui64toa_s
_i64toa_s
isspace
_itoa_s
wcsncmp
wcstod
wcstol
_wcstoui64
_wcstoi64
strtol
_wtoi
wcsnlen
_wcsicmp
_scwprintf
_ultoa_s
strncmp
_strlwr_s
_recalloc
calloc
_itow_s
swprintf_s
_CxxThrowException
malloc
wcscpy_s
wcsncpy_s
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
free
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
memmove_s
memcpy_s

kernel32

GetPrivateProfileSectionW
LocalFree
GetCurrentProcessId
InterlockedCompareExchange
GetStartupInfoW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
SetLastError
LoadLibraryW
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
GetProcAddress
GetModuleHandleW
Sleep
GetTickCount
GetCommandLineW
InterlockedExchange
CreateMutexW
CloseHandle
HeapReAlloc
GetPrivateProfileIntW
HeapFree
GetProcessHeap
HeapAlloc
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
GetLastError
GetModuleFileNameW
lstrlenW
WaitForSingleObject
HeapDestroy
HeapSize
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection

user32

SendMessageW
AppendMenuW
GetSystemMenu
GetWindowRect
MessageBoxW
GetWindowLongW
SetWindowLongW
UnionRect
GetMenuBarInfo
GetMenuItemID
GetMenuItemCount
GetSysColor
OffsetRect
FrameRect
DrawFrameControl
CopyRect
EnableWindow
IsWindow
InvalidateRect
KillTimer
PtInRect
ReleaseDC
FillRect
GetDC
SystemParametersInfoW
EndPaint
BeginPaint
DrawIcon
GetSystemMetrics
IsIconic
SetTimer
GetClientRect
LoadIconW

gdi32

CreatePen
CreateCompatibleBitmap
CreateSolidBrush
GetObjectW
SetDIBColorTable
GetTextExtentPoint32W
SetBkMode
CreateRoundRectRgn
GetCurrentObject
GetBkMode
CreatePatternBrush
SetBrushOrgEx
FillRgn
FrameRgn
SelectObject
CreateFontW
GetDIBColorTable
StretchBlt
CreateDIBSection
BitBlt
CreateCompatibleDC
DeleteDC
DeleteObject

msimg32

TransparentBlt
GradientFill
AlphaBlend

advapi32

RegQueryValueExW
RegOpenKeyExW

shell32

ShellExecuteW
CommandLineToArgvW

comctl32

_TrackMouseEvent
InitCommonControlsEx

shlwapi

PathFileExistsW

ole32

OleInitialize
CoUninitialize
CoInitialize
CoCreateInstance

oleaut32

SysAllocStringLen
VariantClear
SysAllocString
VariantInit
SysFreeString

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
?find_last_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?find_first_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ

ws2_32

WSASetLastError
GetAddrInfoW
WSAStartup
WSACleanup
closesocket
WSACloseEvent
WSASocketW
WSAGetLastError
WSAConnect
WSAEnumNetworkEvents
WSAResetEvent
WSASend
WSAGetOverlappedResult
WSARecv
WSACreateEvent
WSASetEvent
WSAEventSelect
FreeAddrInfoW

boottime

ord2
GetSetupTime
ord1

gdiplus

GdipDisposeImage
GdipFree
GdiplusShutdown
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdiplusStartup
GdipAlloc

languages

ord5
ord3
ord6
ord8
ord4

config

ord13
ord11

Sections

.text
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
~!!SetUp_KEY_9696_PAas$c0De!%!!/plugins/lang-1049.dll
.dll windows:6 windows x86 arch:x86

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:75:e1:f7:ec:9b:d8:a6:7a:3f:61:89:c6:3e:97:bb
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

16-09-2022 00:00

Not After

17-09-2025 23:59

Subject

CN=PIRIFORM SOFTWARE LIMITED,O=PIRIFORM SOFTWARE LIMITED,L=London,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

47:61:59:f6:b7:42:45:ca:c9:25:78:ae:bc:3c:f6:ba:c3:c2:15:e8:6d:ed:75:4a:cd:f7:6c:5e:97:9a:9e:e5
Signer

Actual PE Digest

47:61:59:f6:b7:42:45:ca:c9:25:78:ae:bc:3c:f6:ba:c3:c2:15:e8:6d:ed:75:4a:cd:f7:6c:5e:97:9a:9e:e5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 247KB - Virtual size: 246KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
~!!SetUp_KEY_9696_PAas$c0De!%!!/plugins/lang-1058.dll
.dll windows:6 windows x86 arch:x86

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:75:e1:f7:ec:9b:d8:a6:7a:3f:61:89:c6:3e:97:bb
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

16-09-2022 00:00

Not After

17-09-2025 23:59

Subject

CN=PIRIFORM SOFTWARE LIMITED,O=PIRIFORM SOFTWARE LIMITED,L=London,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

79:ad:e0:64:e4:e6:2d:91:c0:f1:bf:7f:f7:1a:3d:a5:01:8f:45:2b:7e:ff:ba:4b:f0:59:d2:18:e7:a8:32:e4
Signer

Actual PE Digest

79:ad:e0:64:e4:e6:2d:91:c0:f1:bf:7f:f7:1a:3d:a5:01:8f:45:2b:7e:ff:ba:4b:f0:59:d2:18:e7:a8:32:e4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.rdata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 251KB - Virtual size: 250KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
~!!SetUp_KEY_9696_PAas$c0De!%!!/rtl120.bpl
.dll windows:5 windows x86 arch:x86

71ef3c08452290b9b380ced40a0015c9

Code Sign

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-03-2021 00:00

Not After

24-03-2024 23:59

Subject

CN=IObit CO.\, LTD,O=IObit CO.\, LTD,POSTALCODE=610042,STREET=No. 605\, 6th Floor\, Unit 1\, Building 1+STREET=45 Renmin South Road,L=Chengdu Shi,ST=Sichuan Sheng,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-05-2023 00:00

Not After

02-08-2034 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-03-2021 00:00

Not After

24-03-2024 23:59

Subject

CN=IObit CO.\, LTD,O=IObit CO.\, LTD,POSTALCODE=610042,STREET=No. 605\, 6th Floor\, Unit 1\, Building 1+STREET=45 Renmin South Road,L=Chengdu Shi,ST=Sichuan Sheng,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-05-2023 00:00

Not After

02-08-2034 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

94:26:b9:c6:a2:5b:93:6e:b2:29:b5:a4:07:7a:28:5a:93:5e:1c:d0:7d:7d:8e:0f:de:d4:58:47:30:f3:6e:66
Signer

Actual PE Digest

94:26:b9:c6:a2:5b:93:6e:b2:29:b5:a4:07:7a:28:5a:93:5e:1c:d0:7d:7d:8e:0f:de:d4:58:47:30:f3:6e:66

Digest Algorithm

sha256

PE Digest Matches

true

96:9c:c2:bf:d1:6f:fc:8c:1a:01:38:9e:44:53:61:ce:25:1f:d6:10
Signer

Actual PE Digest

96:9c:c2:bf:d1:6f:fc:8c:1a:01:38:9e:44:53:61:ce:25:1f:d6:10

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayGetElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayRedim
SafeArrayCreate
VariantChangeType
VariantCopyInd
VariantCopy
VariantClear
VariantInit
CreateErrorInfo
GetErrorInfo
SetErrorInfo
GetActiveObject
DispInvoke
DispGetIDsOfNames
LHashValOfNameSys
SysFreeString

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegUnLoadKeyW
RegSetValueExW
RegSaveKeyW
RegRestoreKeyW
RegReplaceKeyW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegOpenKeyW
RegLoadKeyW
RegFlushKey
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegConnectRegistryW
RegCloseKey

user32

GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
UnregisterClassW
TranslateMessage
SystemParametersInfoW
ShowScrollBar
SetWindowLongW
SetScrollRange
SetScrollPos
SetScrollInfo
SendMessageW
RegisterClassW
PostMessageW
PeekMessageW
OffsetRect
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MessageBoxW
MessageBeep
LoadStringW
IsWindow
IsIconic
IntersectRect
GetWindowThreadProcessId
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetSystemMetrics
GetScrollRange
GetScrollPos
GetScrollInfo
GetMessageW
GetClassInfoW
GetCapture
FindWindowExW
EnableScrollBar
DispatchMessageW
DestroyWindow
DefWindowProcW
CharUpperBuffW
CharUpperW
CharToOemW
CharNextW
CharLowerBuffW
CharLowerW
CallWindowProcW
CharNextA
CharLowerBuffA
CharLowerA
CharUpperBuffA
CharUpperA

kernel32

GetACP
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
CreateFileMappingA
GetCurrentProcessId
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
SetCurrentDirectoryW
SetCurrentDirectoryA
RemoveDirectoryW
MultiByteToWideChar
lstrlenW
lstrlenA
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLastError
GetCurrentDirectoryW
GetCurrentDirectoryA
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
CreateDirectoryW
ExitProcess
ExitThread
CreateThread
CompareStringW
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
MoveFileW
GetStdHandle
GetFileSize
GetFileType
DeleteFileW
CreateFileW
CloseHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
FreeLibrary
lstrcpyW
WritePrivateProfileStringW
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjectsEx
VirtualQueryEx
VirtualQuery
VirtualAlloc
UnmapViewOfFile
TryEnterCriticalSection
SwitchToThread
SuspendThread
SizeofResource
SignalObjectAndWait
SetThreadPriority
SetLastError
SetFileTime
SetFilePointer
SetFileAttributesW
SetEvent
SetErrorMode
SetEndOfFile
SetCurrentDirectoryW
ResumeThread
ResetEvent
RemoveDirectoryW
ReleaseSemaphore
ReleaseMutex
ReadFile
OpenSemaphoreW
OpenMutexW
MultiByteToWideChar
MoveFileW
MapViewOfFile
LockResource
LocalFileTimeToFileTime
LoadResource
LoadLibraryExW
LoadLibraryW
LeaveCriticalSection
LCMapStringW
IsValidLocale
InitializeCriticalSection
GetVersionExW
GetThreadPriority
GetThreadLocale
GetStdHandle
GetShortPathNameA
GetShortPathNameW
GetProfileIntW
GetProcAddress
GetPrivateProfileStringW
GetOverlappedResult
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameA
GetFullPathNameW
GetFileTime
GetFileAttributesExW
GetFileAttributesW
GetExitCodeThread
GetEnvironmentVariableW
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcess
GetComputerNameW
GetCPInfo
FreeResource
InterlockedIncrement
InterlockedExchangeAdd
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindResourceW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
EnumSystemLocalesW
EnumCalendarInfoA
EnterCriticalSection
DosDateTimeToFileTime
DeleteFileW
DeleteCriticalSection
CreateSemaphoreW
CreateMutexW
CreateFileMappingW
CreateFileW
CreateEventW
CreateDirectoryW
CompareStringA
CompareStringW
CloseHandle
Sleep

gdi32

GetDCOrgEx
GetClipBox

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

mpr

WNetOpenEnumW
WNetGetUniversalNameA
WNetGetUniversalNameW
WNetEnumResourceA
WNetEnumResourceW
WNetCloseEnum

imagehlp

ImageDirectoryEntryToData

ole32

IsEqualGUID
CLSIDFromString
CoTaskMemFree
StringFromCLSID
CoCreateGuid
CoTaskMemFree
CoTaskMemAlloc
CoCreateGuid
CLSIDFromProgID
ProgIDFromCLSID
CLSIDFromString
StringFromCLSID
CoCreateInstance
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoLockObjectExternal
CoDisconnectObject
CoRevokeClassObject
CoRegisterClassObject
CoUninitialize
CoInitialize
IsEqualGUID

wsock32

WSACleanup
WSAStartup
WSAGetLastError
WSACancelAsyncRequest
WSAAsyncGetServByName
WSAAsyncGetHostByName
WSAAsyncSelect
gethostname
getservbyname
gethostbyname
gethostbyaddr
socket
setsockopt
send
select
recv
ntohs
listen
ioctlsocket
inet_ntoa
inet_addr
htons
getsockopt
getsockname
getpeername
connect
closesocket
bind
accept

oleacc

CreateStdAccessibleProxyW

Exports

Exports

@$xp$10CppLongInt
@$xp$10DBPROPINFO
@$xp$10IASPObject
@$xp$10IEnumNames
@$xp$10IErrorInfo
@$xp$10ILockBytes
@$xp$10IMallocSpy
@$xp$10IMtsEvents
@$xp$10IOleCache2
@$xp$10IOleObject
@$xp$10IOleWindow
@$xp$10ITypeInfo2
@$xp$10NativeUInt
@$xp$10TASPObject
@$xp$10TComObject
@$xp$10TParamFlag
@$xp$10_xml_error
@$xp$10tagREGKIND
@$xp$11Adoint@_ADO
@$xp$11ContextInfo
@$xp$11CppULongInt
@$xp$11DBPARAMINFO
@$xp$11IAccessible
@$xp$11IAdviseSink
@$xp$11ICrmMonitor
@$xp$11IDataObject
@$xp$11IDispatchEx
@$xp$11IDropSource
@$xp$11IDropTarget
@$xp$11IEnumString
@$xp$11IGetAppData
@$xp$11IMTSLocator
@$xp$11IOleControl
@$xp$11IReadCookie
@$xp$11IStringList
@$xp$11IViewObject
@$xp$11Masks@TMask
@$xp$11System@Byte
@$xp$11System@Char
@$xp$11System@Comp
@$xp$11System@Word
@$xp$11TAutoObject
@$xp$11tagMULTI_QI
@$xp$11tagSTATDATA
@$xp$12ADDRESS_MODE
@$xp$12Adoint@Error
@$xp$12Adoint@Field
@$xp$12DBCOLUMNDESC
@$xp$12DBCOLUMNINFO
@$xp$12IAccIdentity
@$xp$12IAdviseSink2
@$xp$12IChannelHook
@$xp$12IComQCEvents
@$xp$12IEnumMoniker
@$xp$12IEnumOLEVERB
@$xp$12IEnumStatStg
@$xp$12IEnumUnknown
@$xp$12IEnumVARIANT
@$xp$12IEventServer
@$xp$12IOleDocument
@$xp$12IPersistFile
@$xp$12IPictureDisp
@$xp$12IPropertyBag
@$xp$12IRootStorage
@$xp$12ITransaction
@$xp$12IViewObject2
@$xp$12IWriteCookie
@$xp$12IXMLDocument
@$xp$12System@TDate
@$xp$12System@TTime
@$xp$12TChunkStatus
@$xp$12TFactoryProc
@$xp$12tagEXCEPINFO
@$xp$13Adoint@Errors
@$xp$13Adoint@Fields
@$xp$13Classes@TBits
@$xp$13Classes@TList
@$xp$13IClassFactory
@$xp$13IComAppEvents
@$xp$13IComCRMEvents
@$xp$13IComUserEvent
@$xp$13IContextState
@$xp$13IEnumSTATDATA
@$xp$13IMessageMover
@$xp$13IMtsEventInfo
@$xp$13IObjectSafety
@$xp$13IOleContainer
@$xp$13IPropertyPage
@$xp$13ObjectContext
@$xp$13ObjectControl
@$xp$13Oledb@IDBInfo
@$xp$13Oledb@IMDFind
@$xp$13Oledb@IRowset
@$xp$13System@string
@$xp$13TASPMTSObject
@$xp$13TByteDynArray
@$xp$13TConnectEvent
@$xp$13TWordDynArray
@$xp$14Adoint@Field15
@$xp$14Classes@TFiler
@$xp$14Contnrs@TQueue
@$xp$14Contnrs@TStack
@$xp$14IAccPropServer
@$xp$14IClassFactory2
@$xp$14ICreateTypeLib
@$xp$14ICrmLogControl
@$xp$14IEnumFORMATETC
@$xp$14IFillLockBytes
@$xp$14IMessageFilter
@$xp$14IObjectContext
@$xp$14IObjectControl
@$xp$14IOleClientSite
@$xp$14IPersistStream
@$xp$14IPropertyPage2
@$xp$14IQuickActivate
@$xp$14IRpcStubBuffer
@$xp$14ISessionObject
@$xp$14Oledb@ICommand
@$xp$14PROPERTYORIGIN
@$xp$14System@TObject
@$xp$14System@Variant
@$xp$14Sysutils@TProc
@$xp$14TInt64DynArray
@$xp$14TIntfFlagsBase
@$xp$14tagCONNECTDATA
@$xp$14tagQACONTAINER
@$xp$15Adoint@Fields15
@$xp$15Adoint@_ADODisp
@$xp$15Adoint@_Command
@$xp$15Classes@EThread
@$xp$15Classes@TParser
@$xp$15Classes@TReader
@$xp$15Classes@TRecall
@$xp$15Classes@TStream
@$xp$15Classes@TThread
@$xp$15Classes@TWriter
@$xp$15Contnrs@TBucket
@$xp$15IAccessibleDisp
@$xp$15IActiveDesigner
@$xp$15ICreateTypeInfo
@$xp$15ICreateTypeLib2
@$xp$15ICrmCompensator
@$xp$15IObjectWithSite
@$xp$15IOleControlSite
@$xp$15IOleInPlaceSite
@$xp$15IOleUndoManager
@$xp$15IPersistStorage
@$xp$15IReceiveAppData
@$xp$15IRpcProxyBuffer
@$xp$15IRunnableObject
@$xp$15ISharedProperty
@$xp$15IStdMarshalInfo
@$xp$15Math@TValueSign
@$xp$15Msxml@IXMLError
@$xp$15Oledb@IAccessor
@$xp$15Oledb@IDBInfoSC
@$xp$15Oledb@IMDFindSC
@$xp$15Oledb@IRowsetSC
@$xp$15Oledb@IViewSort
@$xp$15ShortStringBase
@$xp$15Stdvcl@IStrings
@$xp$15Syncobjs@TEvent
@$xp$15Syncobjs@TMutex
@$xp$15System@ByteBool
@$xp$15System@Currency
@$xp$15System@Extended
@$xp$15System@ShortInt
@$xp$15System@UCS4Char
@$xp$15System@WordBool
@$xp$15Sysutils@EAbort
@$xp$15Sysutils@TBytes
@$xp$15TDoubleDynArray
@$xp$15TParamFlagsBase
@$xp$15TSingleDynArray
@$xp$15TStringDynArray
@$xp$15TTypedComObject
@$xp$15Zlib@EZLibError
@$xp$16Activex@TOleEnum
@$xp$16Adoint@CoCommand
@$xp$16Adoint@Command15
@$xp$16Adoint@ErrorDisp
@$xp$16Adoint@FieldDisp
@$xp$16Adoint@Property_
@$xp$16Classes@TStrings
@$xp$16Comobj@EOleError
@$xp$16IAccPropServices
@$xp$16IComMethodEvents
@$xp$16IComObjectEvents
@$xp$16IComThreadEvents
@$xp$16IConnectionPoint
@$xp$16ICreateErrorInfo
@$xp$16ICreateTypeInfo2
@$xp$16IDispenserDriver
@$xp$16IEnumConnections
@$xp$16IEnumSTATPROPSTG
@$xp$16IObjectConstruct
@$xp$16IOleAdviseHolder
@$xp$16IOleCacheControl
@$xp$16IOleDocumentSite
@$xp$16IOleDocumentView
@$xp$16IOleInPlaceFrame
@$xp$16IPSFactoryBuffer
@$xp$16IPlaybackControl
@$xp$16IPropertyStorage
@$xp$16IServiceProvider
@$xp$16ISimpleFrameSite
@$xp$16Oledb@ICommandSC
@$xp$16SecurityProperty
@$xp$16Stdvcl@IProvider
@$xp$16System@TDateTime
@$xp$16TBooleanDynArray
@$xp$16TComClassManager
@$xp$16TIntegerDynArray
@$xp$16Typinfo@TOrdType
@$xp$16tagINTERFACEINFO
@$xp$17Activex@IEnumGUID
@$xp$17Adoint@ErrorsDisp
@$xp$17Adoint@FieldsDisp
@$xp$17Adoint@IDataspace
@$xp$17Adoint@Parameters
@$xp$17Adoint@Properties
@$xp$17Adoint@_Parameter
@$xp$17Adoint@_Recordset
@$xp$17Classes@TBiDiMode
@$xp$17Classes@TGetClass
@$xp$17Classes@THelpType
@$xp$17Classes@TShortCut
@$xp$17IContinueCallback
@$xp$17ICrmMonitorClerks
@$xp$17IDataAdviseHolder
@$xp$17IDispenserManager
@$xp$17IObjectContextTip
@$xp$17IOleCommandTarget
@$xp$17IOleInPlaceObject
@$xp$17IOleInPlaceSiteEx
@$xp$17IOleItemContainer
@$xp$17IParseDisplayName
@$xp$17IPropertyPageSite
@$xp$17IProvideClassInfo
@$xp$17IRpcChannelBuffer
@$xp$17IScriptingContext
@$xp$17ISecurityProperty
@$xp$17ISequentialStream
@$xp$17ISupportErrorInfo
@$xp$17Inifiles@TIniFile
@$xp$17Math@TPaymentTime
@$xp$17Msxml@IXMLDOMNode
@$xp$17Msxml@IXMLDOMText
@$xp$17Msxml@IXMLElement
@$xp$17Msxml@IXTLRuntime
@$xp$17Oledb@IAccessorSC
@$xp$17Oledb@IAlterIndex
@$xp$17Oledb@IAlterTable
@$xp$17Oledb@IOpenRowset
@$xp$17Oledb@IRowsetFind
@$xp$17Oledb@IRowsetInfo
@$xp$17Oledb@IRowsetView
@$xp$17Oledb@IViewFilter
@$xp$17Oledb@IViewRowset
@$xp$17Oledb@IViewSortSC
@$xp$17System@AnsiString
@$xp$17System@IInterface
@$xp$17System@IInvokable
@$xp$17System@OleVariant
@$xp$17System@Openstring
@$xp$17System@UCS4String
@$xp$17System@UTF8String
@$xp$17System@WideString
@$xp$17Sysutils@EMonitor
@$xp$17Sysutils@EOSError
@$xp$17Sysutils@TLangRec
@$xp$17TCardinalDynArray
@$xp$17TComObjectFactory
@$xp$17TComponentFactory
@$xp$17TLongWordDynArray
@$xp$17TShortIntDynArray
@$xp$17TSmallIntDynArray
@$xp$17Typinfo@TTypeKind
@$xp$18Adoint@CoParameter
@$xp$18Adoint@CoRecordset
@$xp$18Adoint@Field15Disp
@$xp$18Adoint@Recordset15
@$xp$18Adoint@Recordset20
@$xp$18Adoint@_Collection
@$xp$18Adoint@_Connection
@$xp$18Classes@Classes__1
@$xp$18Classes@EBitsError
@$xp$18Classes@EListError
@$xp$18Classes@EReadError
@$xp$18Classes@TAlignment
@$xp$18Classes@TComponent
@$xp$18Classes@TFilerFlag
@$xp$18Classes@TLeftRight
@$xp$18Classes@TOperation
@$xp$18Classes@TTopBottom
@$xp$18Classes@TValueType
@$xp$18Classes@TWndMethod
@$xp$18CoCAccPropServices
@$xp$18Contnrs@TClassList
@$xp$18DWMWINDOWATTRIBUTE
@$xp$18IAccessibleHandler
@$xp$18IApplicationObject
@$xp$18IComActivityEvents
@$xp$18IComIdentityEvents
@$xp$18IComInstanceEvents
@$xp$18IComResourceEvents
@$xp$18IComSecurityEvents
@$xp$18IPersistStreamInit
@$xp$18IPersistTextStream
@$xp$18IRequestDictionary
@$xp$18IVariantDictionary
@$xp$18Inifiles@THashItem
@$xp$18Math@TFPUException
@$xp$18Math@TRoundToRange
@$xp$18Msxml@IXMLElement2
@$xp$18Objauto@Objauto__1
@$xp$18Oledb@IColumnsInfo
@$xp$18Oledb@ICommandText
@$xp$18Oledb@IConvertType
@$xp$18Oledb@IErrorLookup
@$xp$18Oledb@IRowPosition
@$xp$18Oledb@IRowsetIndex
@$xp$18Oledb@ITransaction
@$xp$18Oledb@IViewChapter
@$xp$18Oledb@TDBPropArray
@$xp$18Registry@TRegistry
@$xp$18Stdvcl@IDataBroker
@$xp$18System@IComparable
@$xp$18System@IEnumerable
@$xp$18System@IEnumerator
@$xp$18System@ShortString
@$xp$18System@TBoundArray
@$xp$18Sysutils@EControlC
@$xp$18Sysutils@EExternal
@$xp$18Sysutils@EIntError
@$xp$18Sysutils@EOverflow
@$xp$18Sysutils@Exception
@$xp$18Sysutils@TEncoding
@$xp$18Sysutils@TFileName
@$xp$18Sysutils@TNameType
@$xp$18TAutoObjectFactory
@$xp$18Typinfo@TFloatType
@$xp$18Typinfo@TIntfFlags
@$xp$18Typinfo@TTypeKinds
@$xp$18Typinfo@Typinfo__4
@$xp$19Activex@TOldOleEnum
@$xp$19Adoint@CoConnection
@$xp$19Adoint@Connection15
@$xp$19Adoint@Fields15Disp
@$xp$19Adoint@_CommandDisp
@$xp$19Classes@Classes__33
@$xp$19Classes@Classes__45
@$xp$19Classes@Classes__55
@$xp$19Classes@EFOpenError
@$xp$19Classes@EFilerError
@$xp$19Classes@EWriteError
@$xp$19Classes@TCollection
@$xp$19Classes@TDataModule
@$xp$19Classes@TDuplicates
@$xp$19Classes@TFileStream
@$xp$19Classes@TFilerFlags
@$xp$19Classes@TGetStrProc
@$xp$19Classes@TPersistent
@$xp$19Classes@TReaderProc
@$xp$19Classes@TSeekOrigin
@$xp$19Classes@TShiftState
@$xp$19Classes@TStreamProc
@$xp$19Classes@TStringItem
@$xp$19Classes@TStringList
@$xp$19Classes@TTextReader
@$xp$19Classes@TTextWriter
@$xp$19Classes@TThreadList
@$xp$19Classes@TWriterProc
@$xp$19Comobj@EOleSysError
@$xp$19Contnrs@TBucketList
@$xp$19Contnrs@TObjectList
@$xp$19Convutils@TConvType
@$xp$19IComExceptionEvents
@$xp$19IEnumSTATPROPSETSTG
@$xp$19IExternalConnection
@$xp$19IOleInPlaceUIWindow
@$xp$19IPersistPropertyBag
@$xp$19IPropertyNotifySink
@$xp$19IPropertySetStorage
@$xp$19IProvideRuntimeText
@$xp$19IRunningObjectTable
@$xp$19ITransactionContext
@$xp$19Maskutils@TEditMask
@$xp$19Msxml@CoDOMDocument
@$xp$19Msxml@CoXMLDocument
@$xp$19Msxml@IXMLAttribute
@$xp$19Msxml@IXMLDOMEntity
@$xp$19Msxml@IXMLDocument2
@$xp$19Objauto@TParamFlags
@$xp$19Oledb@IAlterIndexSC
@$xp$19Oledb@IAlterTableSC
@$xp$19Oledb@IDBInitialize
@$xp$19Oledb@IDBProperties
@$xp$19Oledb@IOpenRowsetSC
@$xp$19Oledb@IParentRowset
@$xp$19Oledb@IRowsetChange
@$xp$19Oledb@IRowsetFindSC
@$xp$19Oledb@IRowsetInfoSC
@$xp$19Oledb@IRowsetLocate
@$xp$19Oledb@IRowsetScroll
@$xp$19Oledb@IRowsetUpdate
@$xp$19Oledb@IRowsetViewSC
@$xp$19Oledb@ISQLErrorInfo
@$xp$19Oledb@ISecurityInfo
@$xp$19Oledb@IViewFilterSC
@$xp$19Oledb@IViewRowsetSC
@$xp$19Stdvcl@IStringsDisp
@$xp$19Syncobjs@TSemaphore
@$xp$19Sysutils@EDivByZero
@$xp$19Sysutils@EInvalidOp
@$xp$19Sysutils@EMathError
@$xp$19Sysutils@EPrivilege
@$xp$19Sysutils@EUnderflow
@$xp$19Sysutils@TCharArray
@$xp$19Sysutils@TLanguages
@$xp$19Sysutils@TSearchRec
@$xp$19TWideStringDynArray
@$xp$19Typinfo@TMethodKind
@$xp$19Typinfo@TParamFlags
@$xp$19Zlib@TCustomZStream
@$xp$20Activex@ICatRegister
@$xp$20Activex@TUnknownList
@$xp$20Adoint@Command15Disp
@$xp$20Adoint@Property_Disp
@$xp$20Character@TCharacter
@$xp$20Classes@EParserError
@$xp$20Classes@EResNotFound
@$xp$20Classes@EStreamError
@$xp$20Classes@TBasicAction
@$xp$20Classes@TBytesStream
@$xp$20Classes@TClassFinder
@$xp$20Classes@THelpContext
@$xp$20Classes@TNotifyEvent
@$xp$20Classes@TReaderError
@$xp$20Comobj@EOleException
@$xp$20Contnrs@TBucketArray
@$xp$20Contnrs@TBucketEvent
@$xp$20Contnrs@TObjectQueue
@$xp$20Contnrs@TObjectStack
@$xp$20Contnrs@TOrderedList
@$xp$20IComObjectPoolEvents
@$xp$20ICrmFormatLogRecords
@$xp$20IPerPropertyBrowsing
@$xp$20ISecurityCallContext
@$xp$20ISecurityCallersColl
@$xp$20ISharedPropertyGroup
@$xp$20Inifiles@TMemIniFile
@$xp$20Inifiles@TStringHash
@$xp$20Masks@EMaskException
@$xp$20Msxml@IXMLDOMComment
@$xp$20Msxml@IXMLDOMElement
@$xp$20Msxml@IXMLDSOControl
@$xp$20Oledb@IColumnsInfoSC
@$xp$20Oledb@IColumnsRowset
@$xp$20Oledb@ICommandTextSC
@$xp$20Oledb@IConvertTypeSC
@$xp$20Oledb@IErrorLookupSC
@$xp$20Oledb@IGetDataSource
@$xp$20Oledb@IMDRangeRowset
@$xp$20Oledb@IRowPositionSC
@$xp$20Oledb@IRowsetIndexSC
@$xp$20Oledb@IRowsetRefresh
@$xp$20Oledb@IRowsetResynch
@$xp$20Oledb@ISourcesRowset
@$xp$20Oledb@ITransactionSC
@$xp$20Oledb@IViewChapterSC
@$xp$20Registry@TRegIniFile
@$xp$20Scktcomp@TAsyncStyle
@$xp$20Scktcomp@TClientType
@$xp$20Scktcomp@TErrorEvent
@$xp$20Scktcomp@TServerType
@$xp$20Stdvcl@IProviderDisp
@$xp$20Syncobjs@TWaitResult
@$xp$20System@RawByteString
@$xp$20System@TRuntimeError
@$xp$20Sysutils@EInOutError
@$xp$20Sysutils@ERangeError
@$xp$20Sysutils@EWin32Error
@$xp$20Sysutils@EZeroDivide
@$xp$20Sysutils@TFloatValue
@$xp$20Sysutils@TSysCharSet
@$xp$20Types@TSplitRectType
@$xp$20Widestrutils@CharSet
@$xp$21Activex@TMultiQIArray
@$xp$21Activex@TTypeInfoList
@$xp$21Adoint@IDataspaceDisp
@$xp$21Adoint@ParametersDisp
@$xp$21Adoint@PropertiesDisp
@$xp$21Adoint@_ParameterDisp
@$xp$21Adoint@_RecordsetDisp
@$xp$21Classes@EFCreateError
@$xp$21Classes@EInvalidImage
@$xp$21Classes@IVCLComObject
@$xp$21Classes@TGetChildProc
@$xp$21Classes@THandleStream

Sections

.text
Size: 611KB - Virtual size: 610KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 21KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 312KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 26B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
~!!SetUp_KEY_9696_PAas$c0De!%!!/vcl120.bpl
.dll windows:5 windows x86 arch:x86

8df8c3c6e47c73ef6aa19581542f5b9f

Code Sign

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-03-2021 00:00

Not After

24-03-2024 23:59

Subject

CN=IObit CO.\, LTD,O=IObit CO.\, LTD,POSTALCODE=610042,STREET=No. 605\, 6th Floor\, Unit 1\, Building 1+STREET=45 Renmin South Road,L=Chengdu Shi,ST=Sichuan Sheng,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-05-2023 00:00

Not After

02-08-2034 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-03-2021 00:00

Not After

24-03-2024 23:59

Subject

CN=IObit CO.\, LTD,O=IObit CO.\, LTD,POSTALCODE=610042,STREET=No. 605\, 6th Floor\, Unit 1\, Building 1+STREET=45 Renmin South Road,L=Chengdu Shi,ST=Sichuan Sheng,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12-03-2019 00:00

Not After

31-12-2028 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-05-2023 00:00

Not After

02-08-2034 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b3:2b:41:ed:eb:87:6a:89:36:e6:9c:3a:6e:a7:bb:67:7b:2a:85:11:65:f7:43:2c:0d:ef:a8:b3:53:67:a0:09
Signer

Actual PE Digest

b3:2b:41:ed:eb:87:6a:89:36:e6:9c:3a:6e:a7:bb:67:7b:2a:85:11:65:f7:43:2c:0d:ef:a8:b3:53:67:a0:09

Digest Algorithm

sha256

PE Digest Matches

true

96:c4:c7:ac:5f:29:72:da:59:d8:46:3e:bc:a8:7c:45:7c:f9:ec:ba
Signer

Actual PE Digest

96:c4:c7:ac:5f:29:72:da:59:d8:46:3e:bc:a8:7c:45:7c:f9:ec:ba

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

rtl120.bpl

@System@initialization$qqrv
@System@Finalization$qqrv
@System@LoadResString$qqrp20System@TResStringRec
@System@UTF8ToUnicodeString$qqrrx28System@%SmallString$iuc$255%
@System@UTF8EncodeToShortString$qqrx20System@UnicodeString
@System@@CheckAutoResult$qqrl
@System@TContainedObject@QueryInterface$qqsrx5_GUIDpv
@System@TAggregatedObject@_Release$qqsv
@System@TAggregatedObject@_AddRef$qqsv
@System@TAggregatedObject@QueryInterface$qqsrx5_GUIDpv
@System@TAggregatedObject@GetController$qqrv
@System@TAggregatedObject@$bctr$qqrx45System@%DelphiInterface$t17System@IInterface%
@System@TInterfacedObject@_Release$qqsv
@System@TInterfacedObject@_AddRef$qqsv
@System@TInterfacedObject@QueryInterface$qqsrx5_GUIDpv
@System@TInterfacedObject@NewInstance$qqrv
@System@TInterfacedObject@BeforeDestruction$qqrv
@System@TInterfacedObject@AfterConstruction$qqrv
@System@@IntfAddRef$qqrx45System@%DelphiInterface$t17System@IInterface%
@System@@IntfCast$qqrr45System@%DelphiInterface$t17System@IInterface%x45System@%DelphiInterface$t17System@IInterface%rx5_GUID
@System@@IntfCopy$qqrr45System@%DelphiInterface$t17System@IInterface%x45System@%DelphiInterface$t17System@IInterface%
@System@@IntfClear$qqrr45System@%DelphiInterface$t17System@IInterface%
@System@UnregisterModule$qqrp17System@TLibModule
@System@RegisterModule$qqrp17System@TLibModule
@System@@DynArrayAddRef$qqrv
@System@@DynArrayAsg$qqrv
@System@@DynArrayClear$qqrrpvpv
@System@@DynArrayCopyRange$qqrpvt1iirpv
@System@@DynArraySetLength$qqrv
@System@@DynArrayHigh$qqrv
@System@@DynArrayLength$qqrv
@System@@IntfDispCall$qv
@System@StringToOleStr$qqrx20System@UnicodeString
@System@OleStrToStrVar$qqrpbr27System@%AnsiStringT$us$i0$%
@System@OleStrToString$qqrpb
@System@StringToWideChar$qqrx20System@UnicodeStringpbi
@System@WideCharToString$qqrpb
@System@@Dispose$qqrpvt1
@System@@New$qqripv
@System@@CopyRecord$qqrv
@System@@AddRefRecord$qqrv
@System@@FinalizeArray$qqrpvt1ui
@System@@FinalizeRecord$qqrpvt1
@System@@InitializeRecord$qqrpvt1
@System@Pos$qqrx20System@UnicodeStringt1
@System@@UniqueStringU$qqrr20System@UnicodeString
@System@@UStrInsert$qqrx20System@UnicodeStringr20System@UnicodeStringi
@System@@UStrDelete$qqrr20System@UnicodeStringii
@System@@UStrCopy$qqrx20System@UnicodeStringii
@System@@UStrEqual$qqrv
@System@@UStrCatN$qqrv
@System@@UStrCat3$qqrr20System@UnicodeStringx20System@UnicodeStringt2
@System@@UStrCat$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrSetLength$qqrr20System@UnicodeStringi
@System@@UStrLen$qqrx20System@UnicodeString
@System@@UStrFromString$qqrr20System@UnicodeStringrx28System@%SmallString$iuc$255%
@System@@WStrFromUStr$qqrr17System@WideStringx20System@UnicodeString
@System@@UStrFromWStr$qqrr20System@UnicodeStringx17System@WideString
@System@@LStrFromUStr$qqrr27System@%AnsiStringT$us$i0$%x20System@UnicodeStringus
@System@@UStrFromWArray$qqrr20System@UnicodeStringpbi
@System@@UStrFromPWChar$qqrr20System@UnicodeStringpb
@System@@UStrFromWChar$qqrr20System@UnicodeStringb
@System@@UStrFromPWCharLen$qqrr20System@UnicodeStringpbi
@System@@UStrToPWChar$qqrx20System@UnicodeString
@System@@UStrLAsg$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrAsg$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrArrayClr$qqrpvi
@System@@UStrClr$qqrpv
@System@@UStrAddRef$qqrpv
@System@StringOfChar$qqrbi
@System@@WStrSetLength$qqrr17System@WideStringi
@System@@WStrEqual$qqrv
@System@@WStrToPWChar$qqrx17System@WideString
@System@@WStrFromWArray$qqrr17System@WideStringpbi
@System@@WStrFromPWChar$qqrr17System@WideStringpb
@System@@WStrArrayClr$qqrpvi
@System@@WStrClr$qqrpv
@System@@LStrToPChar$qqrx27System@%AnsiStringT$us$i0$%
@System@@LStrFromPWChar$qqrr27System@%AnsiStringT$us$i0$%pbus
@System@@EnsureUnicodeString$qqrr20System@UnicodeString
@System@@InternalUStrFromLStr$qqrr20System@UnicodeStringx27System@%AnsiStringT$us$i0$%
@System@@LStrArrayClr$qqrpvi
@System@@LStrClr$qqrpv
@System@@RunError$qqruc
@System@@Halt0$qqrv
@System@@InitImports$qqrv
@System@@InitResStringImports$qqrv
@System@@PackageUnload$qqrpx23System@PackageInfoTablep17System@TLibModule
@System@@PackageLoad$qqrpx23System@PackageInfoTablep17System@TLibModule
@System@@TryFinallyExit$qqrv
@System@@DoneExcept$qqrv
@System@@RaiseAgain$qqrv
@System@@RaiseExcept$qqrv
@System@@HandleAutoException$qqrv
@System@@HandleFinally$qqrv
@System@@HandleOnException$qqrv
@System@@HandleAnyException$qqrv
@System@@BeforeDestruction$qqrp14System@TObjectzc
@System@@AfterConstruction$qqrp14System@TObject
@System@@ClassDestroy$qqrp14System@TObject
@System@@ClassCreate$qqrp17System@TMetaClasso
@System@TObject@Dispatch$qqrpv
@System@TObject@BeforeDestruction$qqrv
@System@TObject@AfterConstruction$qqrv
@System@TObject@DefaultHandler$qqrpv
@System@TObject@ToString$qqrv
@System@TObject@SafeCallException$qqrp14System@TObjectpv
@System@TObject@InheritsFrom$qqrp17System@TMetaClass
@System@@FindDynaInst$qqrv
@System@@CallDynaInst$qqrv
@System@@AsClass$qqrp14System@TObjectp17System@TMetaClass
@System@@IsClass$qqrp14System@TObjectp17System@TMetaClass
@System@TObject@GetInterfaceEntry$qqrrx5_GUID
@System@TObject@GetInterface$qqrrx5_GUIDpv
@System@TObject@GetHashCode$qqrv
@System@TObject@Equals$qqrp14System@TObject
@System@TObject@Free$qqrv
@System@TObject@$bdtr$qqrv
@System@TObject@$bctr$qqrv
@System@TObject@InstanceSize$qqrv
@System@TObject@FreeInstance$qqrv
@System@TObject@NewInstance$qqrv
@System@TObject@ClassParent$qqrv
@System@TObject@ClassNameIs$qqrx20System@UnicodeString
@System@TObject@ClassName$qqrv
@System@@SetRange$qqrv
@System@@SetElem$qqrv
@System@@FillChar$qqrpvib
@System@@AStrCmp$qqrv
@System@@PStrNCpy$qqrp28System@%SmallString$iuc$255%t1uc
@System@@AbstractError$qqrv
@System@@TRUNC$qqrv
@System@@ROUND$qqrv
@System@Frac$qqrxg
@System@Get8087CW$qqrv
@System@Set8087CW$qqrus
@System@ParamStr$qqri
@System@Move$qqrpxvpvi
@System@ExceptAddr$qqrv
@System@ExceptObject$qqrv
@System@@ReallocMem$qqrrpvi
@System@@FreeMem$qqrpv
@System@@GetMem$qqri
@System@AllocMem$qqrui
@System@LibModuleList
@System@Test8086
@System@IsConsole
@System@InitProc
@System@CmdShow
@System@IsLibrary
@System@MainThreadID
@System@MainInstance
@$xp$12System@TTime
@$xp$12System@TDate
@$xp$16System@TDateTime
@$xp$23System@TContainedObject
@System@TContainedObject@
@$xp$24System@TAggregatedObject
@System@TAggregatedObject@
@$xp$24System@TInterfacedObject
@System@TInterfacedObject@
@$xp$9IDispatch
@$xp$17System@IInterface
@$xp$14System@TObject
@System@TObject@
@$xp$7HRESULT
@$xp$17System@OleVariant
@$xp$14System@Variant
@$xp$17System@WideString
@$xp$13System@string
@$xp$6Double
@$xp$8Cardinal
@$xp$11System@Word
@$xp$11System@Byte
@$xp$7Integer
@$xp$8SmallInt
@$xp$11System@Char
@$xp$7Boolean
@Classes@initialization$qqrv
@Classes@Finalization$qqrv
@Classes@DeallocateHWnd$qqrp6HWND__
@Classes@AllocateHWnd$qqrynpqqrr17Messages@TMessage$v
@Classes@FreeObjectInstance$qqrpv
@Classes@MakeObjectInstance$qqrynpqqrr17Messages@TMessage$v
@Classes@TDataModule@ReadState$qqrp15Classes@TReader
@Classes@TDataModule@DefineProperties$qqrp14Classes@TFiler
@Classes@TDataModule@DoDestroy$qqrv
@Classes@TDataModule@DoCreate$qqrv
@Classes@TDataModule@$bdtr$qqrv
@Classes@TDataModule@BeforeDestruction$qqrv
@Classes@TDataModule@$bctr$qqrp18Classes@TComponenti
@Classes@TDataModule@AfterConstruction$qqrv
@Classes@TDataModule@$bctr$qqrp18Classes@TComponent
@Classes@TStreamAdapter@$bctr$qqrp15Classes@TStream24Classes@TStreamOwnership
@Classes@TBasicAction@Change$qqrv
@Classes@TBasicAction@SetOnExecute$qqrynpqqrp14System@TObject$v
@Classes@TBasicAction@Update$qqrv
@Classes@TBasicAction@Execute$qqrv
@Classes@TBasicAction@UpdateTarget$qqrp14System@TObject
@Classes@TBasicAction@Notification$qqrp18Classes@TComponent18Classes@TOperation
@Classes@TBasicAction@ExecuteTarget$qqrp14System@TObject
@Classes@TBasicAction@HandlesTarget$qqrp14System@TObject
@Classes@TBasicAction@$bdtr$qqrv
@Classes@TBasicAction@$bctr$qqrp18Classes@TComponent
@Classes@TBasicActionLink@Update$qqrv
@Classes@TBasicActionLink@SetOnExecute$qqrynpqqrp14System@TObject$v
@Classes@TBasicActionLink@IsOnExecuteLinked$qqrv
@Classes@TBasicActionLink@SetAction$qqrp20Classes@TBasicAction
@Classes@TBasicActionLink@Execute$qqrp18Classes@TComponent
@Classes@TBasicActionLink@Change$qqrv
@Classes@TBasicActionLink@$bdtr$qqrv
@Classes@TBasicActionLink@AssignClient$qqrp14System@TObject
@Classes@TBasicActionLink@$bctr$qqrp14System@TObject
@Classes@TComponent@_Release$qqsv
@Classes@TComponent@_AddRef$qqsv
@Classes@TComponent@QueryInterface$qqsrx5_GUIDpv
@Classes@TComponent@UpdateRegistry$qqrox20System@UnicodeStringt2
@Classes@TComponent@SafeCallException$qqrp14System@TObjectpv
@Classes@TComponent@SetSubComponent$qqro
@Classes@TComponent@ExecuteAction$qqrp20Classes@TBasicAction
@Classes@TComponent@SetComponentIndex$qqri
@Classes@TComponent@GetComponentCount$qqrv
@Classes@TComponent@GetComponent$qqri
@Classes@TComponent@SetName$qqrx20System@UnicodeString
@Classes@TComponent@FindComponent$qqrx20System@UnicodeString
@Classes@TComponent@ValidateContainer$qqrp18Classes@TComponent
@Classes@TComponent@ValidateRename$qqrp18Classes@TComponentx20System@UnicodeStringt2
@Classes@TComponent@WriteState$qqrp15Classes@TWriter
@Classes@TComponent@ReadState$qqrp15Classes@TReader
@Classes@TComponent@Loaded$qqrv
@Classes@TComponent@GetParentComponent$qqrv
@Classes@TComponent@HasParent$qqrv
@Classes@TComponent@DefineProperties$qqrp14Classes@TFiler
@Classes@TComponent@Notification$qqrp18Classes@TComponent18Classes@TOperation
@Classes@TComponent@RemoveFreeNotification$qqrp18Classes@TComponent
@Classes@TComponent@Destroying$qqrv
@Classes@TComponent@DestroyComponents$qqrv
@Classes@TComponent@InsertComponent$qqrp18Classes@TComponent
@Classes@TComponent@FreeNotification$qqrp18Classes@TComponent
@Classes@TComponent@BeforeDestruction$qqrv
@Classes@TComponent@$bdtr$qqrv
@Classes@TComponent@$bctr$qqrp18Classes@TComponent
@Classes@TThread@WaitFor$qqrv
@Classes@TThread@Terminate$qqrv
@Classes@TThread@Resume$qqrv
@Classes@TThread@Suspend$qqrv
@Classes@TThread@Synchronize$qqrynpqqrv$v
@Classes@TThread@DoTerminate$qqrv
@Classes@TThread@AfterConstruction$qqrv
@Classes@TThread@$bdtr$qqrv
@Classes@TThread@$bctr$qqro
@Classes@CheckSynchronize$qqri
@Classes@TWriter@WriteString$qqrx20System@UnicodeString
@Classes@TWriter@WriteListEnd$qqrv
@Classes@TWriter@WriteListBegin$qqrv
@Classes@TWriter@WriteInteger$qqri
@Classes@TWriter@WriteDescendent$qqrp18Classes@TComponentt1
@Classes@TWriter@WriteCollection$qqrp19Classes@TCollection
@Classes@TWriter@WriteBoolean$qqro
@Classes@TReader@ReadValue$qqrv
@Classes@TReader@ReadString$qqrv
@Classes@TReader@ReadRootComponent$qqrp18Classes@TComponent
@Classes@TReader@ReadListEnd$qqrv
@Classes@TReader@ReadListBegin$qqrv
@Classes@TReader@ReadInteger$qqrv
@Classes@TReader@ReadIdent$qqrv
@Classes@TReader@ReadCollection$qqrp19Classes@TCollection
@Classes@TReader@ReadBoolean$qqrv
@Classes@TReader@EndOfList$qqrv
@Classes@RemoveFixupReferences$qqrp18Classes@TComponentx20System@UnicodeString
@Classes@TFiler@$bctr$qqrp15Classes@TStreami
@Classes@TResourceStream@$bctr$qqruiipb
@Classes@TResourceStream@$bctr$qqruix20System@UnicodeStringpb
@Classes@TMemoryStream@LoadFromStream$qqrp15Classes@TStream
@Classes@TFileStream@$bctr$qqrx20System@UnicodeStringus
@Classes@TStream@WriteComponent$qqrp18Classes@TComponent
@Classes@TStream@ReadComponent$qqrp18Classes@TComponent
@Classes@TStream@CopyFrom$qqrp15Classes@TStreamj
@Classes@TStream@WriteBuffer$qqrpxvi
@Classes@TStream@ReadBuffer$qqrpvi
@Classes@TStream@Seek$qqrxj19Classes@TSeekOrigin
@Classes@TStream@SetSize$qqrxj
@Classes@TStream@SetSize64$qqrxj
@Classes@TStream@SetSize$qqri
@Classes@TStream@GetSize$qqrv
@Classes@TStream@SetPosition$qqrxj
@Classes@TStream@GetPosition$qqrv
@Classes@TStringList@$bctr$qqrv
@Classes@TStringList@CompareStrings$qqrx20System@UnicodeStringt1
@Classes@TStringList@CustomSort$qqrpqqrp19Classes@TStringListii$i
@Classes@TStringList@Sort$qqrv
@Classes@TStringList@SetUpdateState$qqro
@Classes@TStringList@SetSorted$qqro
@Classes@TStringList@SetCapacity$qqri
@Classes@TStringList@PutObject$qqrip14System@TObject
@Classes@TStringList@Put$qqrix20System@UnicodeString
@Classes@TStringList@InsertItem$qqrix20System@UnicodeStringp14System@TObject
@Classes@TStringList@InsertObject$qqrix20System@UnicodeStringp14System@TObject
@Classes@TStringList@Insert$qqrix20System@UnicodeString
@Classes@TStringList@IndexOf$qqrx20System@UnicodeString
@Classes@TStringList@GetObject$qqri
@Classes@TStringList@GetCount$qqrv
@Classes@TStringList@GetCapacity$qqrv
@Classes@TStringList@Get$qqri
@Classes@TStringList@Find$qqrx20System@UnicodeStringri
@Classes@TStringList@Exchange$qqrii
@Classes@TStringList@Delete$qqri
@Classes@TStringList@Clear$qqrv
@Classes@TStringList@Changing$qqrv
@Classes@TStringList@Changed$qqrv
@Classes@TStringList@AddObject$qqrx20System@UnicodeStringp14System@TObject
@Classes@TStringList@Add$qqrx20System@UnicodeString
@Classes@TStringList@$bdtr$qqrv
@Classes@TStrings@CompareStrings$qqrx20System@UnicodeStringt1
@Classes@TStrings@SetValue$qqrx20System@UnicodeStringt1
@Classes@TStrings@SetUpdateState$qqro
@Classes@TStrings@SetTextStr$qqrx20System@UnicodeString
@Classes@TStrings@SetText$qqrpb
@Classes@TStrings@SetStringsAdapter$qqrx51System@%DelphiInterface$t23Classes@IStringsAdapter%
@Classes@TStrings@SetCapacity$qqri
@Classes@TStrings@SaveToStream$qqrp15Classes@TStreamp18Sysutils@TEncoding
@Classes@TStrings@SaveToStream$qqrp15Classes@TStream
@Classes@TStrings@SaveToFile$qqrx20System@UnicodeStringp18Sysutils@TEncoding
@Classes@TStrings@SaveToFile$qqrx20System@UnicodeString
@Classes@TStrings@PutObject$qqrip14System@TObject
@Classes@TStrings@Put$qqrix20System@UnicodeString
@Classes@TStrings@Move$qqrii
@Classes@TStrings@LoadFromStream$qqrp15Classes@TStreamp18Sysutils@TEncoding
@Classes@TStrings@LoadFromStream$qqrp15Classes@TStream
@Classes@TStrings@LoadFromFile$qqrx20System@UnicodeStringp18Sysutils@TEncoding
@Classes@TStrings@LoadFromFile$qqrx20System@UnicodeString
@Classes@TStrings@InsertObject$qqrix20System@UnicodeStringp14System@TObject
@Classes@TStrings@IndexOfObject$qqrp14System@TObject
@Classes@TStrings@IndexOfName$qqrx20System@UnicodeString
@Classes@TStrings@IndexOf$qqrx20System@UnicodeString
@Classes@TStrings@GetValue$qqrx20System@UnicodeString
@Classes@TStrings@GetTextStr$qqrv
@Classes@TStrings@GetText$qqrv
@Classes@TStrings@GetObject$qqri
@Classes@TStrings@GetName$qqri
@Classes@TStrings@GetCapacity$qqrv
@Classes@TStrings@ExtractName$qqrx20System@UnicodeString
@Classes@TStrings@Exchange$qqrii
@Classes@TStrings@Error$qqrx20System@UnicodeStringi
@Classes@TStrings@EndUpdate$qqrv
@Classes@TStrings@DefineProperties$qqrp14Classes@TFiler
@Classes@TStrings@BeginUpdate$qqrv
@Classes@TStrings@Assign$qqrp19Classes@TPersistent
@Classes@TStrings@AddStrings$qqrp16Classes@TStrings
@Classes@TStrings@Append$qqrx20System@UnicodeString
@Classes@TStrings@AddObject$qqrx20System@UnicodeStringp14System@TObject
@Classes@TStrings@Add$qqrx20System@UnicodeString
@Classes@TStrings@$bdtr$qqrv
@Classes@TOwnedCollection@$bctr$qqrp19Classes@TPersistentp17System@TMetaClass
@Classes@TCollection@Notify$qqrp23Classes@TCollectionItem31Classes@TCollectionNotification
@Classes@TCollection@Deleting$qqrp23Classes@TCollectionItem
@Classes@TCollection@Added$qqrrp23Classes@TCollectionItem
@Classes@TCollection@Owner$qqrv
@Classes@TCollection@Delete$qqri
@Classes@TCollection@Update$qqrp23Classes@TCollectionItem
@Classes@TCollection@SetItemName$qqrp23Classes@TCollectionItem
@Classes@TCollection@SetItem$qqrip23Classes@TCollectionItem
@Classes@TCollection@Insert$qqri
@Classes@TCollection@GetItem$qqri
@Classes@TCollection@GetCount$qqrv
@Classes@TCollection@GetEnumerator$qqrv
@Classes@TCollection@FindItemID$qqri
@Classes@TCollection@EndUpdate$qqrv
@Classes@TCollection@Clear$qqrv
@Classes@TCollection@BeginUpdate$qqrv
@Classes@TCollection@Assign$qqrp19Classes@TPersistent
@Classes@TCollection@Add$qqrv
@Classes@TCollection@$bdtr$qqrv
@Classes@TCollection@$bctr$qqrp17System@TMetaClass
@Classes@TCollectionEnumerator@MoveNext$qqrv
@Classes@TCollectionEnumerator@GetCurrent$qqrv
@Classes@TCollectionItem@SetIndex$qqri
@Classes@TCollectionItem@SetDisplayName$qqrx20System@UnicodeString
@Classes@TCollectionItem@SetCollection$qqrp19Classes@TCollection
@Classes@TCollectionItem@GetDisplayName$qqrv
@Classes@TCollectionItem@GetIndex$qqrv
@Classes@TCollectionItem@Changed$qqro
@Classes@TCollectionItem@$bdtr$qqrv
@Classes@TCollectionItem@$bctr$qqrp19Classes@TCollection
@Classes@TRecall@$bdtr$qqrv
@Classes@TRecall@$bctr$qqrp19Classes@TPersistentt1
@Classes@TInterfacedPersistent@QueryInterface$qqsrx5_GUIDpv
@Classes@TInterfacedPersistent@_Release$qqsv
@Classes@TInterfacedPersistent@_AddRef$qqsv
@Classes@TInterfacedPersistent@AfterConstruction$qqrv
@Classes@TPersistent@DefineProperties$qqrp14Classes@TFiler
@Classes@TPersistent@AssignTo$qqrp19Classes@TPersistent
@Classes@TPersistent@Assign$qqrp19Classes@TPersistent
@Classes@TPersistent@$bdtr$qqrv
@Classes@TBits@OpenBit$qqrv
@Classes@TBits@GetBit$qqri
@Classes@TBits@SetBit$qqrio
@Classes@TBits@SetSize$qqri
@Classes@TInterfaceList@Add$qqrx45System@%DelphiInterface$t17System@IInterface%
@Classes@TInterfaceList@Clear$qqrv
@Classes@TInterfaceList@$bctr$qqrv
@Classes@TThreadList@UnlockList$qqrv
@Classes@TThreadList@Remove$qqrpv
@Classes@TThreadList@LockList$qqrv
@Classes@TThreadList@Clear$qqrv
@Classes@TThreadList@Add$qqrpv
@Classes@TThreadList@$bctr$qqrv
@Classes@TList@Assign$qqrp13Classes@TList21Classes@TListAssignOpt1
@Classes@TList@Notify$qqrpv25Classes@TListNotification
@Classes@TList@Sort$qqrpqqrpvt1$i
@Classes@TList@SetCount$qqri
@Classes@TList@SetCapacity$qqri
@Classes@TList@Remove$qqrpv
@Classes@TList@Put$qqripv
@Classes@TList@Move$qqrii
@Classes@TList@Last$qqrv
@Classes@TList@Insert$qqripv
@Classes@TList@IndexOf$qqrpv
@Classes@TList@Grow$qqrv
@Classes@TList@Get$qqri
@Classes@TList@First$qqrv
@Classes@TList@Expand$qqrv
@Classes@TList@Error$qqrx20System@UnicodeStringi
@Classes@TList@Delete$qqri
@Classes@TList@Clear$qqrv
@Classes@TList@Add$qqrpv
@Classes@TList@$bdtr$qqrv
@Classes@InitInheritedComponent$qqrp18Classes@TComponentp17System@TMetaClass
@Classes@UnregisterFindGlobalComponentProc$qqrpqqrx20System@UnicodeString$p18Classes@TComponent
@Classes@RegisterFindGlobalComponentProc$qqrpqqrx20System@UnicodeString$p18Classes@TComponent
@Classes@IntToIdent$qqrir20System@UnicodeStringpx22Classes@TIdentMapEntryxi
@Classes@IdentToInt$qqrx20System@UnicodeStringripx22Classes@TIdentMapEntryxi
@Classes@RegisterIntegerConsts$qqrpvpqqrx20System@UnicodeStringri$opqqrir20System@UnicodeString$o
@Classes@ActivateClassGroup$qqrp17System@TMetaClass
@Classes@GroupDescendentsWith$qqrp17System@TMetaClasst1
@Classes@StartClassGroup$qqrp17System@TMetaClass
@Classes@RegisterClasses$qqrpp17System@TMetaClassxi
@Classes@RegisterClass$qqrp17System@TMetaClass
@Classes@InvalidPoint$qqrx17Types@TSmallPoint
@Classes@InvalidPoint$qqrrx12Types@TPoint
@Classes@Bounds$qqriiii
@Classes@Rect$qqriiii
@Classes@SmallPoint$qqrss
@Classes@Point$qqrii
@Classes@WakeMainThread
@$xp$22Classes@TIdentMapEntry
@Classes@GlobalNameSpace
@Classes@ApplicationShowException
@Classes@ApplicationHandleException
@Classes@RemoveDataModule
@Classes@AddDataModule
@$xp$19Classes@TDataModule
@Classes@TDataModule@
@$xp$20Classes@TBasicAction
@Classes@TBasicAction@
@$xp$24Classes@TBasicActionLink
@Classes@TBasicActionLink@
@$xp$18Classes@TComponent
@Classes@TComponent@
@$xp$23Classes@IDesignerNotify
@$xp$15Classes@TThread
@Classes@TThread@
@Classes@TWriter@
@Classes@TReader@
@Classes@TStreamAdapter@
@Classes@TResourceStream@
@Classes@TMemoryStream@
@Classes@TFileStream@
@$xp$15Classes@TStream
@Classes@TStream@
@$xp$19Classes@TStringList
@Classes@TStringList@
@$xp$16Classes@TStrings
@Classes@TStrings@
@$xp$24Classes@TOwnedCollection
@Classes@TOwnedCollection@
@$xp$19Classes@TCollection
@Classes@TCollection@
@$xp$23Classes@TCollectionItem
@Classes@TCollectionItem@
@$xp$15Classes@TRecall
@Classes@TRecall@
@$xp$29Classes@TInterfacedPersistent
@Classes@TInterfacedPersistent@
@$xp$19Classes@TPersistent
@Classes@TPersistent@
@Classes@TBits@
@Classes@TInterfaceList@
@Classes@TThreadList@
@$xp$13Classes@TList
@Classes@TList@
@Classes@EInvalidOperation@
@Classes@EOutOfResources@
@Classes@EComponentError@
@Classes@EListError@
@Classes@EResNotFound@
@Classes@EWriteError@
@Classes@EReadError@
@$xp$20Classes@TNotifyEvent
@$xp$17Classes@TShortCut

kernel32

TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
FreeLibrary
lstrcmpW
WaitForSingleObject
SetThreadLocale
SetEvent
SetErrorMode
MultiByteToWideChar
MulDiv
LockResource
LoadResource
LoadLibraryW
LeaveCriticalSection
InitializeCriticalSection
GlobalUnlock
GlobalSize
GlobalLock
GlobalFree
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVersion
GetUserDefaultLCID
GetTickCount
GetThreadLocale
GetSystemDefaultLCID
GetProfileStringW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLastError
GetCurrentThreadId
GetCurrentProcessId
FreeResource
InterlockedIncrement
FreeLibrary
FormatMessageW
FindResourceW
EnterCriticalSection
DeleteCriticalSection
CreateThread
CreateEventW
CompareStringW
CloseHandle
Sleep
MulDiv

oleaut32

GetActiveObject
LoadRegTypeLib
SysFreeString

ole32

CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
GetHGlobalFromILockBytes
OleRegEnumVerbs
OleRegGetUserType
OleGetIconOfClass
IsAccelerator
CreateOleAdviseHolder
ReleaseStgMedium
OleIsRunning
OleRun
OleDraw
OleSetMenuDescriptor
OleGetClipboard
OleSetClipboard
OleSetContainedObject
OleSave
OleLoad
OleCreateFromFile
OleCreateLinkToFile
OleCreateLinkFromData
OleCreateFromData
OleCreate
OleQueryCreateFromData
OleQueryLinkFromData
OleUninitialize
OleInitialize
CreateBindCtx
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
StgCreateDocfile
CreateDataAdviseHolder
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoGetClassObject
IsEqualGUID
IsEqualGUID

user32

CreateWindowExW
WindowFromPoint
WinHelpW
WaitMessage
ValidateRect
UpdateWindow
UnregisterClassW
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
TrackMouseEvent
SystemParametersInfoW
ShowWindow
ShowScrollBar
ShowOwnedPopups
SetWindowRgn
SetWindowsHookExW
SetWindowTextW
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetMenu
SetKeyboardState
SetForegroundWindow
SetFocus
SetCursorPos
SetCursor
SetClipboardData
SetClassLongW
SetCaretPos
SetCapture
SetActiveWindow
SendMessageA
SendMessageW
SendDlgItemMessageW
ScrollWindowEx
ScrollWindow
ScreenToClient
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PtInRect
PostThreadMessageW
PostQuitMessage
PostMessageW
PeekMessageA
PeekMessageW
OpenClipboard
OffsetRect
MessageBoxW
MessageBeep
MapWindowPoints
MapVirtualKeyW
LockWindowUpdate
LoadKeyboardLayoutW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsIconic
IsDialogMessageA
IsDialogMessageW
IsClipboardFormatAvailable
IsChild
IsCharAlphaNumericW
IsCharAlphaW
InvalidateRect
IntersectRect
InsertMenuItemW
InsertMenuW
InflateRect
GetWindowThreadProcessId
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetUpdateRect
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetWindow
GetMessageTime
GetMessagePos
GetMessageW
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetIconInfo
GetForegroundWindow
GetFocus
GetDoubleClickTime
GetDlgItem
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardData
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetCaretPos
GetCapture
GetActiveWindow
FrameRect
FindWindowExW
FindWindowW
FillRect
EqualRect
EnumWindows
EnumThreadWindows
EnumClipboardFormats
EnumChildWindows
EndPaint
EndDeferWindowPos
EnableWindow
EnableMenuItem
EmptyClipboard
DrawTextExW
DrawTextW
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DestroyCaret
DestroyAcceleratorTable
DeleteMenu
DeferWindowPos
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreatePopupMenu
CreateMenu
CreateIcon
CreateCaret
CreateAcceleratorTableW
CountClipboardFormats
CopyIcon
CloseClipboard
ClientToScreen
ChildWindowFromPoint
CheckMenuItem
CharPrevW
CharNextW
CharLowerW
CallWindowProcW
CallNextHookEx
BringWindowToTop
BeginPaint
BeginDeferWindowPos
AdjustWindowRectEx
ActivateKeyboardLayout

msimg32

GradientFill
AlphaBlend

gdi32

UnrealizeObject
TextOutW
StretchDIBits
StretchBlt
StartPage
StartDocW
SetWindowOrgEx
SetWindowExtEx
SetWinMetaFileBits
SetViewportOrgEx
SetViewportExtEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetMapMode
SetEnhMetaFileBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SetAbortProc
SelectPalette
SelectObject
SelectClipRgn
SelectClipPath
SaveDC
RoundRect
RestoreDC
Rectangle
RectVisible
RealizePalette
Polyline
Polygon
PolyPolyline
PolyBezierTo
PolyBezier
PlayEnhMetaFile
Pie
PatBlt
MoveToEx
MaskBlt
LineTo
LPtoDP
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetTextMetricsW
GetTextExtentPointW
GetTextExtentPoint32W
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectW
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileDescriptionW
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
GdiFlush
FrameRgn
FillRgn
ExtTextOutW
ExtFloodFill
ExtCreatePen
ExcludeClipRect
EnumFontsW
EnumFontFamiliesExW
EndPath
EndPage
EndDoc
Ellipse
DeleteObject
DeleteMetaFile
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgnIndirect
CreateRectRgn
CreatePolygonRgn
CreatePenIndirect
CreatePen
CreatePatternBrush
CreatePalette
CreateMetaFileW
CreateICW
CreateHalftonePalette
CreateFontIndirectW
CreateEnhMetaFileW
CreateEllipticRgn
CreateDIBitmap
CreateDIBSection
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileW
CombineRgn
CloseMetaFile
CloseEnhMetaFile
Chord
BitBlt
BeginPath
Arc
AbortDoc

advapi32

ReportEventW
RegisterEventSourceW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
DeregisterEventSource
StartServiceCtrlDispatcherW
SetServiceStatus
RegisterServiceCtrlHandlerW
OpenServiceW
OpenSCManagerW
DeleteService
CreateServiceW
CloseServiceHandle

comctl32

InitializeFlatSB
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Copy
ImageList_LoadImageW
ImageList_GetIcon
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
ImageList_Draw
ImageList_SetOverlayImage
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
InitCommonControls

shell32

SHGetPathFromIDListW
SHGetMalloc
SHGetDesktopFolder
SHBrowseForFolderW
Shell_NotifyIconW
ShellExecuteW

comdlg32

PageSetupDlgW
PrintDlgW
ChooseFontW
ReplaceTextW
FindTextW
ChooseColorW
GetSaveFileNameW
GetOpenFileNameW

winspool.drv

OpenPrinterW
EnumPrintersW
DocumentPropertiesW
ClosePrinter

oledlg

OleUIObjectPropertiesW
OleUIChangeIconW
OleUIPasteSpecialW
OleUIInsertObjectW

Exports

Exports

@$xp$11Forms@TForm
@$xp$11Menus@TMenu
@$xp$11TActiveForm
@$xp$12Forms@TFrame
@$xp$12Mask@Mask__2
@$xp$12Tabs@TTabSet
@$xp$13Forms@TScreen
@$xp$13Graphics@TPen
@$xp$13Tabs@TTabList
@$xp$14Extctrls@TPage
@$xp$14Forms@Forms__6
@$xp$14Forms@IOleForm
@$xp$14Forms@TMonitor
@$xp$14Graphics@TFont
@$xp$14Graphics@TIcon
@$xp$14Grids@Grids__3
@$xp$14Grids@Grids__4
@$xp$14Mask@TMaskEdit
@$xp$14Stdctrls@TEdit
@$xp$14Stdctrls@TMemo
@$xp$14Tabs@TEdgePart
@$xp$14Tabs@TEdgeType
@$xp$14Tabs@TScroller
@$xp$15Buttons@TBitBtn
@$xp$15Comctrls@TWidth
@$xp$15Controls@TAlign
@$xp$15Controls@TMouse
@$xp$15Extctrls@TBevel
@$xp$15Extctrls@TImage
@$xp$15Extctrls@TPanel
@$xp$15Extctrls@TShape
@$xp$15Extctrls@TTimer
@$xp$15Forms@TPosition
@$xp$15Forms@TTileMode
@$xp$15Graphics@TBrush
@$xp$15Graphics@TColor
@$xp$15Grids@TDrawGrid
@$xp$15Menus@TMainMenu
@$xp$15Menus@TMenuItem
@$xp$15Stdctrls@TLabel
@$xp$15Svcmgr@TService
@$xp$15TActiveXControl
@$xp$15TConnectionKind
@$xp$15Tabs@TScrollBtn
@$xp$16Actnlist@TAction
@$xp$16Comctrls@THotKey
@$xp$16Comctrls@TUpDown
@$xp$16Controls@TCursor
@$xp$16Extctrls@THeader
@$xp$16Forms@TFormState
@$xp$16Forms@TFormStyle
@$xp$16Forms@THelpEvent
@$xp$16Forms@TIdleEvent
@$xp$16Forms@TPopupMode
@$xp$16Forms@TScrollBox
@$xp$16Forms@TTimerMode
@$xp$16Graphics@TBitmap
@$xp$16Graphics@TCanvas
@$xp$16Grids@TEditStyle
@$xp$16Grids@TGridState
@$xp$16Imglist@TOverlay
@$xp$16Imglist@TResType
@$xp$16Menus@EMenuError
@$xp$16Menus@TMenuBreak
@$xp$16Menus@TPopupList
@$xp$16Menus@TPopupMenu
@$xp$16Stdctrls@TButton
@$xp$16TConnectionPoint
@$xp$17Comctrls@TAddMode
@$xp$17Comctrls@TAnimate
@$xp$17Comctrls@TCoolBar
@$xp$17Comctrls@THitTest
@$xp$17Comctrls@TToolBar
@$xp$17Controls@TAnchors
@$xp$17Controls@TCaption
@$xp$17Controls@TControl
@$xp$17Controls@TImeMode
@$xp$17Controls@TImeName
@$xp$17Controls@TMargins
@$xp$17Controls@TPadding
@$xp$17Dialogs@TPageType
@$xp$17Extactns@TFileRun
@$xp$17Extactns@TNextTab
@$xp$17Extactns@TShowCmd
@$xp$17Extctrls@TRowItem
@$xp$17Extctrls@TRowSize
@$xp$17Forms@TBorderIcon
@$xp$17Forms@TCloseEvent
@$xp$17Forms@TCustomForm
@$xp$17Forms@TGlassFrame
@$xp$17Forms@TPrintScale
@$xp$17Forms@TShowAction
@$xp$17Forms@TWindowHook
@$xp$17Graphics@TGraphic
@$xp$17Graphics@TPenMode
@$xp$17Graphics@TPicture
@$xp$17Grids@TCustomGrid
@$xp$17Grids@TGridOption
@$xp$17Grids@TMovedEvent
@$xp$17Grids@TStringGrid
@$xp$17Imouse@TPanOption
@$xp$17Mask@EDBEditError
@$xp$17Mask@TMaskedState
@$xp$17Olectnrs@TOleForm
@$xp$17Printers@EPrinter
@$xp$17Printers@TPrinter
@$xp$17Stdactns@TEditCut
@$xp$17Stdctrls@TListBox
@$xp$17Svcmgr@TStartType
@$xp$17Svcmgr@TStopEvent
@$xp$17TConnectionPoints
@$xp$17Themes@TThemedTab
@$xp$17Valedit@TItemProp
@$xp$18Axctrls@TOleStream
@$xp$18Buttons@TNumGlyphs
@$xp$18Clipbrd@TClipboard
@$xp$18Comctrls@TCoolBand
@$xp$18Comctrls@THitTests
@$xp$18Comctrls@TItemFind
@$xp$18Comctrls@TListItem
@$xp$18Comctrls@TListView
@$xp$18Comctrls@TRichEdit
@$xp$18Comctrls@TSortType
@$xp$18Comctrls@TTabSheet
@$xp$18Comctrls@TTabStyle
@$xp$18Comctrls@TTickMark
@$xp$18Comctrls@TTrackBar
@$xp$18Comctrls@TTreeNode
@$xp$18Comctrls@TTreeView
@$xp$18Comctrls@TWorkArea
@$xp$18Controls@TAlignSet
@$xp$18Controls@TBevelCut
@$xp$18Controls@TDockTree
@$xp$18Controls@TDockZone
@$xp$18Controls@TDragKind
@$xp$18Controls@TDragMode
@$xp$18Controls@THintInfo
@$xp$18Controls@TKeyEvent
@$xp$18Controls@TTabOrder
@$xp$18Dialogs@TMsgDlgBtn
@$xp$18Extactns@TSendMail
@$xp$18Extctrls@TCellItem
@$xp$18Extctrls@TCellSpan
@$xp$18Extctrls@TColorBox
@$xp$18Extctrls@TNotebook
@$xp$18Extctrls@TPaintBox
@$xp$18Extctrls@TSplitter
@$xp$18Extctrls@TTrayIcon
@$xp$18Extdlgs@Extdlgs__5
@$xp$18Forms@TApplication
@$xp$18Forms@TBorderIcons
@$xp$18Forms@TBorderStyle
@$xp$18Forms@TCloseAction
@$xp$18Forms@TCustomFrame
@$xp$18Forms@TWindowState
@$xp$18Graphics@TFillMode
@$xp$18Graphics@TFontName
@$xp$18Graphics@TMetafile
@$xp$18Graphics@TPenStyle
@$xp$18Grids@TGridOptions
@$xp$18Grids@TInplaceEdit
@$xp$18Imglist@TImageType
@$xp$18Imouse@TPanOptions
@$xp$18Menus@TTrackButton
@$xp$18Olectnrs@TSizeMode
@$xp$18Stdactns@TEditCopy
@$xp$18Stdactns@TEditUndo
@$xp$18Stdactns@TFileExit
@$xp$18Stdactns@TFileOpen
@$xp$18Stdactns@TFontEdit
@$xp$18Stdactns@TPrintDlg
@$xp$18Stdctrls@TCheckBox
@$xp$18Stdctrls@TComboBox
@$xp$18Stdctrls@TGroupBox
@$xp$18Svcmgr@TDependency
@$xp$18Svcmgr@TPauseEvent
@$xp$18Svcmgr@TStartEvent
@$xp$18TActiveFormControl
@$xp$18TActiveFormFactory
@$xp$18Themes@TThemedEdit
@$xp$18Themes@TThemedMenu
@$xp$18Themes@TThemedPage
@$xp$18Themes@TThemedSpin
@$xp$18Toolwin@TEdgeStyle
@$xp$18Valedit@TItemProps
@$xp$18Valedit@TKeyOption
@$xp$19Actnlist@THintEvent
@$xp$19Axctrls@IFontAccess
@$xp$19Axctrls@TOleGraphic
@$xp$19Buttons@TBitBtnKind
@$xp$19Comctrls@TCommonAVI
@$xp$19Comctrls@TCoolBands
@$xp$19Comctrls@TItemState
@$xp$19Comctrls@TListGroup
@$xp$19Comctrls@TListItems
@$xp$19Comctrls@TNodeState
@$xp$19Comctrls@TStatusBar
@$xp$19Comctrls@TTickStyle
@$xp$19Comctrls@TTreeNodes
@$xp$19Comctrls@TUDBtnType
@$xp$19Comctrls@TViewStyle
@$xp$19Comctrls@TWorkAreas
@$xp$19Controls@TBevelEdge
@$xp$19Controls@TBevelKind
@$xp$19Controls@TDragState
@$xp$19Controls@TImageList
@$xp$19Dialogs@TFindDialog
@$xp$19Dialogs@TFindOption
@$xp$19Dialogs@TFontDialog
@$xp$19Dialogs@TMsgDlgType
@$xp$19Dialogs@TOFNotifyEx
@$xp$19Dialogs@TOpenDialog
@$xp$19Dialogs@TOpenOption
@$xp$19Dialogs@TPrintRange
@$xp$19Dialogs@TSaveDialog
@$xp$19Dialogs@TTaskDialog
@$xp$19Extactns@TBrowseURL
@$xp$19Extactns@TTabAction
@$xp$19Extactns@TURLAction
@$xp$19Extctrls@TFlowPanel
@$xp$19Extctrls@TFlowStyle
@$xp$19Extctrls@TGridPanel
@$xp$19Extctrls@TLinkLabel
@$xp$19Extctrls@TShapeType
@$xp$19Extctrls@TSizeStyle
@$xp$19Forms@IDesignerHook
@$xp$19Forms@TMessageEvent
@$xp$19Forms@TScrollBarInc
@$xp$19Graphics@TFillStyle
@$xp$19Graphics@TFontPitch
@$xp$19Graphics@TFontStyle
@$xp$19Graphics@TIconImage
@$xp$19Graphics@TPenRecall
@$xp$19Grids@TGetEditEvent
@$xp$19Grids@TGridMovement
@$xp$19Grids@TSetEditEvent
@$xp$19Imglist@TChangeLink
@$xp$19Imglist@TColorDepth
@$xp$19Imglist@TImageIndex
@$xp$19Imouse@TUpdateEvent
@$xp$19Menus@TFindItemKind
@$xp$19Menus@TMenuAutoFlag
@$xp$19Olectrls@TEnumValue
@$xp$19Stdactns@TEditPaste
@$xp$19Stdctrls@TScrollBar
@$xp$19Svcmgr@TEventLogger
@$xp$19Svcmgr@TServiceType
@$xp$19Themes@TThemedClock
@$xp$19Themes@TThemedRebar
@$xp$19Toolwin@TEdgeBorder
@$xp$19Toolwin@TToolWindow
@$xp$19Valedit@TKeyOptions
@$xp$20Actnlist@TActionLink
@$xp$20Actnlist@TActionList
@$xp$20Axctrls@TFontAdapter
@$xp$20Buttons@TButtonState
@$xp$20Buttons@TButtonStyle
@$xp$20Buttons@TSpeedButton
@$xp$20Comctrls@Comctrls__9
@$xp$20Comctrls@TComboBoxEx
@$xp$20Comctrls@TConversion
@$xp$20Comctrls@TDTDateMode
@$xp$20Comctrls@THKModifier
@$xp$20Comctrls@TItemChange
@$xp$20Comctrls@TItemStates
@$xp$20Comctrls@TListColumn
@$xp$20Comctrls@TListGroups
@$xp$20Comctrls@TSearchType
@$xp$20Comctrls@TTabControl
@$xp$20Comctrls@TToolButton
@$xp$20Controls@TAnchorKind
@$xp$20Controls@TBevelEdges
@$xp$20Controls@TBevelWidth
@$xp$20Controls@TCustomHint
@$xp$20Controls@TDragObject
@$xp$20Controls@THintWindow
@$xp$20Controls@TMarginSize
@$xp$20Controls@TMouseEvent
@$xp$20Controls@TWinControl
@$xp$20Dialogs@TColorDialog
@$xp$20Dialogs@TFindOptions
@$xp$20Dialogs@TOpenOptions
@$xp$20Dialogs@TPrintDialog
@$xp$20Dialogs@TPrinterKind
@$xp$20Extctrls@TBevelShape
@$xp$20Extctrls@TBevelStyle
@$xp$20Extctrls@TBoundLabel
@$xp$20Extctrls@TColumnItem
@$xp$20Extctrls@TControlBar
@$xp$20Extctrls@TCornerEdge
@$xp$20Extctrls@TEditButton
@$xp$20Extctrls@TRadioGroup
@$xp$20Forms@TPopupWndArray
@$xp$20Forms@TScrollBarKind
@$xp$20Forms@TShortCutEvent
@$xp$20Forms@TShowHintEvent
@$xp$20Graphics@TBrushStyle
@$xp$20Graphics@TFontRecall
@$xp$20Graphics@TFontStyles
@$xp$20Graphics@TTextFormat
@$xp$20Graphutil@TArrowType
@$xp$20Grids@TDrawCellEvent
@$xp$20Grids@TGridDrawState
@$xp$20Imouse@TPanDirection
@$xp$20Mask@TCustomMaskEdit
@$xp$20Menus@TMenuAnimation
@$xp$20Menus@TMenuItemStack
@$xp$20Olectnrs@TCreateInfo
@$xp$20Olectnrs@TCreateType
@$xp$20Olectrls@TOleControl
@$xp$20Oleserver@TOleServer
@$xp$20Stdactns@TEditAction
@$xp$20Stdactns@TEditDelete
@$xp$20Stdactns@TFileAction
@$xp$20Stdactns@TFileSaveAs
@$xp$20Stdactns@THelpAction
@$xp$20Stdactns@THelpOnHelp
@$xp$20Stdactns@THintAction
@$xp$20Stdactns@TSearchFind
@$xp$20Stdctrls@TCustomEdit
@$xp$20Stdctrls@TCustomMemo
@$xp$20Stdctrls@TFNDrawText
@$xp$20Stdctrls@TScrollCode
@$xp$20Stdctrls@TStaticText
@$xp$20Stdctrls@TTextLayout
@$xp$20Svcmgr@TDependencies
@$xp$20Svcmgr@TServiceEvent
@$xp$20TActiveXPropertyPage
@$xp$20Tabs@TTabChangeEvent
@$xp$20Tabs@TTabSetTabStyle
@$xp$20Themes@TThemedButton
@$xp$20Themes@TThemedHeader
@$xp$20Themes@TThemedStatus
@$xp$20Themes@TThemedWindow
@$xp$20Toolwin@TEdgeBorders
@$xp$21Actnlist@TActionEvent
@$xp$21Axctrls@TPropertyPage
@$xp$21Buttons@TButtonLayout
@$xp$21Comctrls@Comctrls__74
@$xp$21Comctrls@Comctrls__84
@$xp$21Comctrls@TComboExItem
@$xp$21Comctrls@TDisplayCode
@$xp$21Comctrls@THKModifiers
@$xp$21Comctrls@THeaderStyle
@$xp$21Comctrls@TIconOptions
@$xp$21Comctrls@TItemRequest
@$xp$21Comctrls@TListColumns
@$xp$21Comctrls@TPageControl
@$xp$21Comctrls@TProgressBar
@$xp$21Comctrls@TSearchTypes
@$xp$21Comctrls@TStatusPanel
@$xp$21Comctrls@TTabPosition
@$xp$21Controls@Controls__21
@$xp$21Controls@Controls__31
@$xp$21Controls@Controls__41
@$xp$21Controls@IDockManager
@$xp$21Controls@TBalloonHint
@$xp$21Controls@TBorderWidth
@$xp$21Controls@TDragMessage
@$xp$21Controls@TModalResult
@$xp$21Controls@TMouseButton
@$xp$21Controls@TUnDockEvent
@$xp$21Dialogs@TCommonDialog
@$xp$21Dialogs@TFDApplyEvent
@$xp$21Dialogs@TFileTypeItem
@$xp$21Dialogs@TOpenOptionEx
@$xp$21Extactns@TDownLoadURL
@$xp$21Extactns@TOpenPicture
@$xp$21Extactns@TPreviousTab
@$xp$21Extactns@TSavePicture
@$xp$21Extctrls@TControlItem
@$xp$21Extctrls@TCustomPanel
@$xp$21Extctrls@TExpandStyle
@$xp$21Extctrls@TLabeledEdit
@$xp$21Extctrls@TResizeStyle
@$xp$21Extctrls@TSysLinkType
@$xp$21Forms@TCustomDockForm
@$xp$21Forms@TDefaultMonitor
@$xp$21Forms@TExceptionEvent
@$xp$21Forms@TGetHandleEvent
@$xp$21Forms@TPopupFormArray
@$xp$21Forms@TScrollBarStyle
@$xp$21Graphics@TAlphaFormat
@$xp$21Graphics@TBitmapImage
@$xp$21Graphics@TBrushRecall
@$xp$21Graphics@TCanvasState
@$xp$21Graphics@TFontCharset
@$xp$21Graphics@TPixelFormat
@$xp$21Graphics@TSharedImage
@$xp$21Graphics@TTextFormats
@$xp$21Graphutil@TColorArray
@$xp$21Grids@TCustomDrawGrid
@$xp$21Grids@TGetExtentsFunc
@$xp$21Imglist@TDrawingStyle
@$xp$21Imglist@TLoadResource
@$xp$21Imouse@TPanDirections
@$xp$21Imouse@TPanningWindow
@$xp$21Menus@TMenuActionLink
@$xp$21Menus@TMenuAnimations
@$xp$21Menus@TPopupAlignment
@$xp$21Olectnrs@TObjectState
@$xp$21Stdactns@TColorSelect
@$xp$21Stdactns@TWindowClose
@$xp$21Stdctrls@TCustomCombo
@$xp$21Stdctrls@TCustomLabel
@$xp$21Stdctrls@TRadioButton
@$xp$21Stdctrls@TScrollEvent
@$xp$21Stdctrls@TScrollStyle
@$xp$21Svcmgr@TContinueEvent
@$xp$21Svcmgr@TCurrentStatus
@$xp$21Svcmgr@TErrorSeverity
@$xp$21Svcmgr@TServiceThread
@$xp$21Tabs@TMeasureTabEvent
@$xp$21Themes@TThemeServices
@$xp$21Themes@TThemedElement
@$xp$21Themes@TThemedTaskBar
@$xp$21Themes@TThemedToolBar
@$xp$21Themes@TThemedToolTip
@$xp$21Toolwin@TToolDockForm
@$xp$22Actnlist@TCustomAction
@$xp$22Actnlist@TShortCutList
@$xp$22Axctrls@IPictureAccess
@$xp$22Axctrls@TCustomAdapter
@$xp$22Comctrls@TCalDayOfWeek
@$xp$22Comctrls@TComboExItems
@$xp$22Comctrls@TCustomHotKey
@$xp$22Comctrls@TCustomUpDown
@$xp$22Comctrls@TDTDateFormat
@$xp$22Comctrls@TDateTimeKind
@$xp$22Comctrls@TDrawTabEvent
@$xp$22Comctrls@THKInvalidKey
@$xp$22Comctrls@TItemRequests
@$xp$22Comctrls@TNodeDataType
@$xp$22Comctrls@TPageScroller
@$xp$22Comctrls@TStatusPanels
@$xp$22Comctrls@TUDClickEvent
@$xp$22Controls@TControlState
@$xp$22Controls@TControlStyle
@$xp$22Controls@TDragObjectEx
@$xp$22Controls@TEndDragEvent
@$xp$22Controls@TScalingFlags
@$xp$22Dialogs@TFileEditStyle
@$xp$22Dialogs@TFileTypeItems
@$xp$22Dialogs@TMsgDlgButtons
@$xp$22Dialogs@TOpenOptionsEx
@$xp$22Dialogs@TReplaceDialog
@$xp$22Docktabset@TDockTabSet
@$xp$22Extactns@TRichEditBold
@$xp$22Extctrls@NaturalNumber
@$xp$22Extctrls@TBalloonFlags
@$xp$22Extctrls@TButtonedEdit
@$xp$22Extctrls@TColorListBox
@$xp$22Extctrls@TSectionEvent
@$xp$22Extctrls@TSysLinkEvent
@$xp$22Forms@TCloseQueryEvent
@$xp$22Forms@TFormBorderStyle
@$xp$22Forms@_TApplication@_1
@$xp$22Graphics@TCanvasStates
@$xp$22Graphics@TFontDataName
@$xp$22Graphutil@Graphutil__1
@$xp$22Grids@TInplaceEditList
@$xp$22Grids@TSelectCellEvent
@$xp$22Imglist@TLoadResources
@$xp$22Menus@TMenuChangeEvent
@$xp$22Olectnrs@IVCLFrameForm
@$xp$22Olectnrs@TAutoActivate
@$xp$22Olectnrs@TOleContainer
@$xp$22Olectrls@EOleCtrlError
@$xp$22Olectrls@TEnumPropDesc
@$xp$22Olectrls@TServiceQuery
@$xp$22Oleserver@TConnectKind
@$xp$22Printers@TPrinterState
@$xp$22Stdactns@TFileOpenWith
@$xp$22Stdactns@THelpContents
@$xp$22Stdactns@TSearchAction
@$xp$22Stdactns@TWindowAction
@$xp$22Stdctrls@TCustomButton
@$xp$22Stdctrls@TEditCharCase
@$xp$22Stdctrls@TImageMargins
@$xp$22Stdctrls@TListBoxStyle
@$xp$22TActiveXControlFactory
@$xp$22Themes@TThemedComboBox
@$xp$22Themes@TThemedListview
@$xp$22Themes@TThemedProgress
@$xp$22Themes@TThemedTaskBand
@$xp$22Themes@TThemedTrackBar
@$xp$22Themes@TThemedTreeview
@$xp$22Valedit@TDisplayOption
@$xp$23Axctrls@TPictureAdapter
@$xp$23Axctrls@TStringsAdapter
@$xp$23Comctrls@EDateTimeError
@$xp$23Comctrls@EMonthCalError
@$xp$23Comctrls@ETreeViewError
@$xp$23Comctrls@TAnimateParams
@$xp$23Comctrls@TAttributeType
@$xp$23Comctrls@THKInvalidKeys
@$xp$23Comctrls@THeaderControl
@$xp$23Comctrls@THeaderSection
@$xp$23Comctrls@TLVChangeEvent
@$xp$23Comctrls@TLVEditedEvent

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 828B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 458KB - Virtual size: 457KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 34B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

668fc9893277bcf73c5f63175b9eacff

Code Sign

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82Certificate

Extended Key Usages

Key Usages

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95Certificate

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82Certificate

Extended Key Usages

Key Usages

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95Certificate

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

bf:c4:7c:2e:46:47:d9:ad:84:fb:f8:88:b5:2b:f6:3d:bb:20:0d:f7:df:23:e2:5c:8c:02:08:02:40:35:77:89Signer

6f:dc:73:7c:0c:53:9d:82:0e:33:9b:2b:58:f1:a7:a3:1a:92:6d:70Signer

Headers

File Characteristics

Imports

rtl120.bpl

kernel32

madexcept_.bpl

user32

version

advapi32

madbasic_.bpl

maddisasm_.bpl

shell32

vcl120.bpl

userenv

wtsapi32

Sections

.text Size: 51KB - Virtual size: 51KB

.itext Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 424B

.bss Size: - Virtual size: 704B

.idata Size: 25KB - Virtual size: 24KB

.reloc Size: 4KB - Virtual size: 4KB

.rsrc Size: 59KB - Virtual size: 59KB

ae5a6a29d3cea5a63ad958cfb1a5fb0c

Code Sign

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82Certificate

Extended Key Usages

Key Usages

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95Certificate

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82Certificate

Extended Key Usages

Key Usages

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82
Certificate

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82
Certificate

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

bf:c4:7c:2e:46:47:d9:ad:84:fb:f8:88:b5:2b:f6:3d:bb:20:0d:f7:df:23:e2:5c:8c:02:08:02:40:35:77:89
Signer

6f:dc:73:7c:0c:53:9d:82:0e:33:9b:2b:58:f1:a7:a3:1a:92:6d:70
Signer

.text
Size: 51KB - Virtual size: 51KB

.itext
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 424B

.bss
Size: - Virtual size: 704B

.idata
Size: 25KB - Virtual size: 24KB

.reloc
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 59KB - Virtual size: 59KB

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82
Certificate

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82
Certificate

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

3c:84:2a:e3:37:a9:9f:25:14:45:02:2b:54:0d:d9:c7:b5:d9:a5:cb:3e:61:ba:2c:3b:69:4a:d3:c1:00:d7:71
Signer

f0:61:17:94:aa:8f:fc:7b:a6:41:14:52:28:8d:c8:db:fa:d1:c6:cb
Signer

.text
Size: 132KB - Virtual size: 132KB

.itext
Size: 512B - Virtual size: 252B

.data
Size: 10KB - Virtual size: 9KB

.bss
Size: - Virtual size: 35KB

.idata
Size: 10KB - Virtual size: 10KB

.edata
Size: 25KB - Virtual size: 25KB

.rdata
Size: 512B - Virtual size: 34B

.reloc
Size: 6KB - Virtual size: 5KB

.rsrc
Size: 6KB - Virtual size: 6KB

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82
Certificate

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

8b:a1:f1:72:fd:50:ba:8d:4c:11:b7:4f:fa:c8:a2:82
Certificate

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

97:54:65:bc:6d:2d:fe:cd:12:15:a8:43:26:3e:63:d6:0e:1b:86:0f:3b:97:8e:c8:5f:ff:f5:fa:00:3e:4e:f3
Signer

86:63:ac:7d:5b:62:b0:c2:2d:7d:9a:db:47:eb:76:77:23:b6:90:72
Signer