Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
1563a7a27f673e873f8dd00250d5dca9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1563a7a27f673e873f8dd00250d5dca9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
1563a7a27f673e873f8dd00250d5dca9_JaffaCakes118
Size
171KB
MD5
1563a7a27f673e873f8dd00250d5dca9
SHA1
47cf43a4c5a7cbee9f4239c4ce99d1a64e716693
SHA256
b616de0dc4b9a0202da99a5b4c6316d413e89dcca334c4918315afed202454b6
SHA512
b94ef49b87ed36b1d2c3b55d5dc1acfcbae19935931fa9df4890ba719f745fcb3ce0e70f15abcdca30eb45b9210fc9fe35ea5ba4b412ff5aa1a8d09c3d723056
SSDEEP
3072:p8SNMBHxPcjvzcADndSKcPAD600ag6N8/ZzHf+R98cmv:pthX086+R98cm
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
@System@initialization$qqrv
@System@Finalization$qqrv
@System@LoadResString$qqrp20System@TResStringRec
@System@@CheckAutoResult$qqrl
@System@@IntfCopy$qqrr45System@%DelphiInterface$t17System@IInterface%x45System@%DelphiInterface$t17System@IInterface%
@System@@IntfClear$qqrr45System@%DelphiInterface$t17System@IInterface%
@System@RegisterModule$qqrp17System@TLibModule
@System@FindClassHInstance$qqrp17System@TMetaClass
@System@@Dispose$qqrpvt1
@System@@New$qqripv
@System@@FinalizeArray$qqrpvt1ui
@System@@FinalizeRecord$qqrpvt1
@System@@InitializeRecord$qqrpvt1
@System@Pos$qqrx20System@UnicodeStringt1
@System@UniqueString$qqrr20System@UnicodeString
@System@@UStrCopy$qqrx20System@UnicodeStringii
@System@@UStrEqual$qqrv
@System@@UStrCatN$qqrv
@System@@UStrCat3$qqrr20System@UnicodeStringx20System@UnicodeStringt2
@System@@UStrCat$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrSetLength$qqrr20System@UnicodeStringi
@System@@UStrLen$qqrx20System@UnicodeString
@System@@WStrFromUStr$qqrr17System@WideStringx20System@UnicodeString
@System@@UStrFromWStr$qqrr20System@UnicodeStringx17System@WideString
@System@@LStrFromUStr$qqrr27System@%AnsiStringT$us$i0$%x20System@UnicodeStringus
@System@@UStrFromLStr$qqrr20System@UnicodeStringx27System@%AnsiStringT$us$i0$%
@System@@UStrToPWChar$qqrx20System@UnicodeString
@System@@UStrLAsg$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrAsg$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrArrayClr$qqrpvi
@System@@UStrClr$qqrpv
@System@@UStrAddRef$qqrpv
@System@@WStrArrayClr$qqrpvi
@System@@WStrClr$qqrpv
@System@@LStrToPChar$qqrx27System@%AnsiStringT$us$i0$%
@System@@LStrEqual$qqrv
@System@@LStrFromPWChar$qqrr27System@%AnsiStringT$us$i0$%pbus
@System@@EnsureUnicodeString$qqrr20System@UnicodeString
@System@@LStrClr$qqrpv
@System@@RunError$qqruc
@System@@Halt0$qqrv
@System@@StartExe$qqrp23System@PackageInfoTablep17System@TLibModule
@System@@TryFinallyExit$qqrv
@System@@DoneExcept$qqrv
@System@@HandleFinally$qqrv
@System@@HandleOnException$qqrv
@System@@HandleAnyException$qqrv
@System@TObject@Dispatch$qqrpv
@System@TObject@BeforeDestruction$qqrv
@System@TObject@AfterConstruction$qqrv
@System@TObject@DefaultHandler$qqrpv
@System@TObject@ToString$qqrv
@System@TObject@SafeCallException$qqrp14System@TObjectpv
@System@@CallDynaInst$qqrv
@System@@IsClass$qqrp14System@TObjectp17System@TMetaClass
@System@TObject@GetHashCode$qqrv
@System@TObject@Equals$qqrp14System@TObject
@System@TObject@Free$qqrv
@System@TObject@$bdtr$qqrv
@System@TObject@$bctr$qqrv
@System@TObject@FreeInstance$qqrv
@System@TObject@NewInstance$qqrv
@System@TObject@ClassName$qqrv
@System@@FillChar$qqrpvib
@System@ParamStr$qqri
@System@Move$qqrpxvpvi
@System@ExceptAddr$qqrv
@System@@FreeMem$qqrpv
@System@@GetMem$qqri
@System@AllocMem$qqrui
@System@ExceptObjProc
@System@TObject@
@$xp$13System@string
@Classes@initialization$qqrv
@Classes@Finalization$qqrv
@Classes@TComponent@UpdateRegistry$qqrox20System@UnicodeStringt2
@Classes@TComponent@SafeCallException$qqrp14System@TObjectpv
@Classes@TComponent@WriteState$qqrp15Classes@TWriter
@Classes@TThread@Resume$qqrv
@Classes@TThread@AfterConstruction$qqrv
@Classes@TThread@$bdtr$qqrv
@Classes@TThread@$bctr$qqro
@Classes@TStringList@$bctr$qqrv
@Classes@TStringList@SetSorted$qqro
@Classes@TStrings@EndUpdate$qqrv
@Classes@TStrings@BeginUpdate$qqrv
@Classes@TPersistent@Assign$qqrp19Classes@TPersistent
@Classes@TList@Remove$qqrpv
@Classes@TList@Last$qqrv
@Classes@TList@Add$qqrpv
@Classes@Point$qqrii
@Classes@TThread@
@Classes@TStringList@
@Classes@TList@
@Typinfo@initialization$qqrv
@Typinfo@Finalization$qqrv
@Sysutils@initialization$qqrv
@Sysutils@Finalization$qqrv
@Sysutils@FreeAndNil$qqrpv
@Sysutils@AnsiCompareFileName$qqrx20System@UnicodeStringt1
@Sysutils@AnsiPos$qqrx20System@UnicodeStringt1
@Sysutils@IncludeTrailingPathDelimiter$qqrx20System@UnicodeString
@Sysutils@ShowException$qqrp14System@TObjectpv
@Sysutils@FormatDateTime$qqrx20System@UnicodeString16System@TDateTime
@Sysutils@DateTimeToStr$qqrx16System@TDateTime
@Sysutils@Now$qqrv
@Sysutils@EncodeDate$qqrususus
@Sysutils@FormatFloat$qqrx20System@UnicodeStringg
@Sysutils@Format$qqrx20System@UnicodeStringpx14System@TVarRecxi
@Sysutils@StrPas$qqrpxb
@Sysutils@StrIComp$qqrpxbt1
@Sysutils@StrIComp$qqrpxct1
@Sysutils@StrPLCopy$qqrpbx20System@UnicodeStringui
@Sysutils@ExtractFileExt$qqrx20System@UnicodeString
@Sysutils@ExtractFileName$qqrx20System@UnicodeString
@Sysutils@ChangeFileExt$qqrx20System@UnicodeStringt1
@Sysutils@DeleteFile$qqrx20System@UnicodeString
@Sysutils@ForceDirectories$qqr20System@UnicodeString
@Sysutils@FileExists$qqrx20System@UnicodeString
@Sysutils@StrToIntDef$qqrx20System@UnicodeStringi
@Sysutils@IntToHex$qqrji
@Sysutils@IntToHex$qqrii
@Sysutils@IntToStr$qqrj
@Sysutils@IntToStr$qqri
@Sysutils@AnsiCompareText$qqrx20System@UnicodeStringt1
@Sysutils@AnsiLowerCase$qqrx20System@UnicodeString
@Sysutils@AnsiUpperCase$qqrx20System@UnicodeString
@Sysutils@SameText$qqrx20System@UnicodeStringt1
@Sysutils@LowerCase$qqrx20System@UnicodeString
@Sysutils@UpperCase$qqrx20System@UnicodeString
@Sysutils@ShortDateFormat
@Sysutils@Win32MinorVersion
@Sysutils@Win32MajorVersion
@Sysutils@Win32Platform
@Sysutils@EAssertionFailed@
@Sysutils@EHeapException@
@Sysutils@Exception@CleanUpStackInfoProc
@Sysutils@Exception@GetExceptionStackInfoProc
@Math@CompareValue$qqrxdxdd
@Math@Sign$qqrxd
@Math@MaxIntValue$qqrpxixi
@Variants@initialization$qqrv
@Variants@Finalization$qqrv
@Varutils@initialization$qqrv
@Varutils@Finalization$qqrv
@Registry@initialization$qqrv
@Registry@Finalization$qqrv
@Inifiles@initialization$qqrv
@Inifiles@Finalization$qqrv
@Comobj@initialization$qqrv
@Comobj@Finalization$qqrv
@Comobj@EOleException@
@Comobj@EOleSysError@
@Syncobjs@initialization$qqrv
@Syncobjs@Finalization$qqrv
@Uxtheme@initialization$qqrv
@Uxtheme@Finalization$qqrv
@Multimon@initialization$qqrv
@Multimon@Finalization$qqrv
@Dwmapi@initialization$qqrv
@Dwmapi@Finalization$qqrv
@Helpintfs@initialization$qqrv
@Helpintfs@Finalization$qqrv
@Flatsb@initialization$qqrv
@Flatsb@Finalization$qqrv
@Ansistrings@initialization$qqrv
@Ansistrings@Finalization$qqrv
@Dateutils@CompareDate$qqrx16System@TDateTimet1
@Dateutils@CompareDateTime$qqrx16System@TDateTimet1
@Dateutils@IncDay$qqrx16System@TDateTimexi
@Dateutils@IncWeek$qqrx16System@TDateTimexi
@Dateutils@DaysBetween$qqrx16System@TDateTimet1
@Dateutils@EndOfTheDay$qqrx16System@TDateTime
@Dateutils@EndOfTheWeek$qqrx16System@TDateTime
@Dateutils@StartOfTheWeek$qqrx16System@TDateTime
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
WriteFile
VirtualProtect
TerminateProcess
LoadLibraryW
IsBadReadPtr
GetTickCount
GetTempPathW
GetTempFileNameW
GetSystemTime
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
InterlockedIncrement
InterlockedDecrement
FreeLibrary
FlushInstructionCache
FindNextFileW
FindFirstFileW
FindClose
CreateFileW
CloseHandle
Sleep
RtlCaptureContext
@Tutranslation@initialization$qqrv
@Tutranslation@Finalization$qqrv
@Winlanguageids@initialization$qqrv
@Winlanguageids@Finalization$qqrv
@Tuprogramrating@initialization$qqrv
@Tuprogramrating@Finalization$qqrv
@Tuprogramratinglog@initialization$qqrv
@Tuprogramratinglog@Finalization$qqrv
@Turatingconnection@initialization$qqrv
@Turatingconnection@Finalization$qqrv
@Turatingstorage@initialization$qqrv
@Turatingstorage@Finalization$qqrv
ShowWindow
SetWindowLongW
SendNotifyMessageW
RegisterWindowMessageW
PostMessageW
MessageBoxW
LoadCursorW
IsIconic
InvalidateRect
GetWindowLongW
FindWindowW
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
RegQueryValueExW
RegOpenKeyW
RegCloseKey
@Graphics@initialization$qqrv
@Graphics@Finalization$qqrv
@Graphics@TIcon@SetHandle$qqrp7HICON__
@Graphics@TIcon@$bctr$qqrv
@Graphics@TBrush@SetColor$qqr15Graphics@TColor
@Graphics@TPen@SetStyle$qqr18Graphics@TPenStyle
@Graphics@TFont@SetStyle$qqrx47System@%Set$t19Graphics@TFontStyle$iuc$0$iuc$3%
@Graphics@TFont@GetStyle$qqrv
@Graphics@TFont@SetSize$qqrxi
@Graphics@TFont@GetName$qqrv
@Graphics@TFont@SetColor$qqrx15Graphics@TColor
@Appevnts@initialization$qqrv
@Appevnts@Finalization$qqrv
@Appevnts@TCustomApplicationEvents@$bctr$qqrp18Classes@TComponent
@Appevnts@TApplicationEvents@
@Actnlist@initialization$qqrv
@Actnlist@Finalization$qqrv
@Actnlist@TAction@
@Actnlist@TActionList@
@Imglist@TCustomImageList@GetCount$qqrv
@Imglist@TCustomImageList@AddIcon$qqrp14Graphics@TIcon
@Imglist@TCustomImageList@$bctr$qqrii
@Themes@initialization$qqrv
@Themes@Finalization$qqrv
@Controls@initialization$qqrv
@Controls@Finalization$qqrv
@Controls@TMouse@GetCursorPos$qqrv
@Controls@TWinControl@UpdateControlOriginalParentSize$qqrp17Controls@TControlr12Types@TPoint
@Controls@TWinControl@DockReplaceDockClient$qqrp17Controls@TControlp20Controls@TWinControlt115Controls@TAlignt1
@Controls@TWinControl@SetParentBackground$qqro
@Controls@TWinControl@CanAutoSize$qqrrit1
@Controls@TWinControl@AssignTo$qqrp19Classes@TPersistent
@Controls@TWinControl@ConstrainedResize$qqrrit1t1t1
@Controls@TWinControl@CanResize$qqrrit1
@Controls@TWinControl@GetClientOrigin$qqrv
@Controls@TWinControl@GetControlExtents$qqrv
@Controls@TWinControl@GetHandle$qqrv
@Controls@TWinControl@Repaint$qqrv
@Controls@TWinControl@Update$qqrv
@Controls@TWinControl@Invalidate$qqrv
@Controls@TWinControl@GetDeviceContext$qqrrp6HWND__
@Controls@TWinControl@ShowControl$qqrp17Controls@TControl
@Controls@TWinControl@SetBounds$qqriiii
@Controls@TWinControl@SetDoubleBuffered$qqro
@Controls@TWinControl@SetParentDoubleBuffered$qqro
@Controls@TWinControl@CustomAlignPosition$qqrp17Controls@TControlrit2t2t2r11Types@TRectrx19Controls@TAlignInfo
@Controls@TWinControl@CustomAlignInsertBefore$qqrp17Controls@TControlt1
@Controls@TWinControl@CreateHandle$qqrv
@Controls@TWinControl@DestroyWnd$qqrv
@Controls@TControl@InitiateAction$qqrv
@Controls@TControl@GetFloatingDockSiteClass$qqrv
@Controls@TControl@Perform$qqruiii
@Controls@TControl@Refresh$qqrv
@Controls@TControl@BringToFront$qqrv
@Controls@TControl@SetCursor$qqr16Controls@TCursor
@Controls@TControl@SetBiDiMode$qqr17Classes@TBiDiMode
@Controls@TControl@SetText$qqrx20System@UnicodeString
@Controls@TControl@GetText$qqrv
@Controls@TControl@SetEnabled$qqro
@Controls@TControl@SetVisible$qqro
@Controls@TControl@SetName$qqrx20System@UnicodeString
@Controls@TControl@SetAutoSize$qqro
@Controls@TControl@SetWidth$qqri
@Controls@TControl@SetTop$qqri
@Controls@TControl@SetLeft$qqri
@Controls@TControl@SetDragMode$qqr18Controls@TDragMode
@Controls@TControl@GetAction$qqrv
@Controls@TControl@GetEnabled$qqrv
@Controls@TControl@GetDragImages$qqrv
@Controls@Mouse
@Controls@TImageList@
@Menus@initialization$qqrv
@Menus@Finalization$qqrv
@Menus@TMenuItem@SetVisible$qqro
@Menus@TMenuItem@SetEnabled$qqro
@Menus@TPopupMenu@
@Menus@TMenuItem@
@Forms@initialization$qqrv
@Forms@Finalization$qqrv
@Forms@TApplication@SetMainFormOnTaskBar$qqrxo
@Forms@TApplication@GetExeName$qqrv
@Forms@TApplication@HelpCommand$qqrii
@Forms@TApplication@MessageBox$qqrpxbt1i
@Forms@TApplication@Run$qqrv
@Forms@TApplication@CreateForm$qqrp17System@TMetaClasspv
@Forms@TApplication@Initialize$qqrv
@Forms@TApplication@ProcessMessages$qqrv
@Forms@TApplication@SetTitle$qqrx20System@UnicodeString
@Forms@TScreen@SetCursors$qqrip7HICON__
@Forms@TScreen@SetCursor$qqr16Controls@TCursor
@Forms@TCustomForm@QueryInterface$qqsrx5_GUIDpv
@Forms@TCustomForm@RequestAlign$qqrv
@Forms@TCustomForm@UpdateActions$qqrv
@Forms@TCustomForm@ShowModal$qqrv
@Forms@TCustomForm@SetFocus$qqrv
@Forms@TCustomForm@Show$qqrv
@Forms@TCustomForm@Hide$qqrv
@Forms@TCustomForm@CloseQuery$qqrv
@Forms@TCustomForm@Close$qqrv
@Forms@TCustomForm@Resizing$qqr18Forms@TWindowState
@Forms@TCustomForm@PaintWindow$qqrp5HDC__
@Forms@TCustomForm@SetFocusedControl$qqrp20Controls@TWinControl
@Forms@TCustomForm@DefaultHandler$qqrpv
@Forms@TCustomForm@DestroyWindowHandle$qqrv
@Forms@TCustomForm@DestroyHandle$qqrv
@Forms@TCustomForm@CreateWindowHandle$qqrrx22Controls@TCreateParams
@Forms@TCustomForm@CreateWnd$qqrv
@Forms@TCustomForm@CreateParams$qqrr22Controls@TCreateParams
@Forms@TCustomForm@AlignControls$qqrp17Controls@TControlr11Types@TRect
@Forms@TCustomForm@WndProc$qqrr17Messages@TMessage
@Forms@TCustomForm@ValidateRename$qqrp18Classes@TComponentx20System@UnicodeStringt2
@Forms@TCustomForm@SetParent$qqrp20Controls@TWinControl
@Forms@TCustomForm@WantChildKey$qqrp17Controls@TControlr17Messages@TMessage
@Forms@TCustomForm@SetParentBiDiMode$qqro
@Forms@TCustomForm@GetFloating$qqrv
@Forms@TCustomForm@GetClientRect$qqrv
@Forms@TCustomForm@DefineProperties$qqrp14Classes@TFiler
@Forms@TCustomForm@ReadState$qqrp15Classes@TReader
@Forms@TCustomForm@Notification$qqrp18Classes@TComponent18Classes@TOperation
@Forms@TCustomForm@Loaded$qqrv
@Forms@TCustomForm@DoDestroy$qqrv
@Forms@TCustomForm@DoCreate$qqrv
@Forms@TCustomForm@$bdtr$qqrv
@Forms@TCustomForm@BeforeDestruction$qqrv
@Forms@TCustomForm@$bctr$qqrp18Classes@TComponenti
@Forms@TCustomForm@AfterConstruction$qqrv
@Forms@TCustomForm@$bctr$qqrp18Classes@TComponent
@Forms@TScrollingWinControl@AdjustClientRect$qqrr11Types@TRect
@Forms@TScrollingWinControl@AutoScrollInView$qqrp17Controls@TControl
@Forms@TScrollingWinControl@AutoScrollEnabled$qqrv
@Forms@Screen
@Forms@Application
@$xp$11Forms@TForm
@Forms@TForm@
@Dialogs@initialization$qqrv
@Dialogs@Finalization$qqrv
@Dialogs@InputQuery$qqrx20System@UnicodeStringt1r20System@UnicodeString
@Comctrls@initialization$qqrv
@Comctrls@Finalization$qqrv
@Comctrls@TAnimate@SetFileName$qqr20System@UnicodeString
@Comctrls@TAnimate@SetActive$qqro
@Comctrls@TCustomListView@SetSelected$qqrp18Comctrls@TListItem
@Comctrls@TCustomListView@GetSelected$qqrv
@Comctrls@TListItems@EndUpdate$qqrv
@Comctrls@TListItems@BeginUpdate$qqrv
@Comctrls@TListItems@Clear$qqrv
@Comctrls@TListItems@GetItem$qqri
@Comctrls@TListItems@GetCount$qqrv
@Comctrls@TListItems@Add$qqrv
@Comctrls@TListItem@SetState$qqrio
@Comctrls@TListItem@SetCaption$qqrx20System@UnicodeString
@Comctrls@TListItem@MakeVisible$qqro
@Comctrls@TCustomTreeView@SetImages$qqrp24Imglist@TCustomImageList
@Comctrls@TCustomTreeView@FullExpand$qqrv
@Comctrls@TTreeNodes@GetNodeFromIndex$qqri
@Comctrls@TTreeNodes@Add$qqrp18Comctrls@TTreeNodex20System@UnicodeString
@Comctrls@TTreeNodes@AddChild$qqrp18Comctrls@TTreeNodex20System@UnicodeString
@Comctrls@TTreeNodes@Clear$qqrv
@Comctrls@TTreeNode@MakeVisible$qqrv
@Comctrls@TTreeNode@SetSelectedIndex$qqri
@Comctrls@TTreeNode@SetImageIndex$qqri
@Comctrls@TAnimate@
@Comctrls@TListView@
@Comctrls@TProgressBar@
@Graphutil@initialization$qqrv
@Graphutil@Finalization$qqrv
@Stdctrls@TCustomListBox@ItemAtPos$qqrrx12Types@TPointo
@Stdctrls@TCustomListBox@SetTopIndex$qqri
@Stdctrls@TCustomListBox@GetTopIndex$qqrv
@Stdctrls@TButton@
@Stdctrls@TComboBox@
@Stdctrls@TLabel@
@Extctrls@initialization$qqrv
@Extctrls@Finalization$qqrv
@Extctrls@TTimer@SetEnabled$qqro
@Extctrls@TPanel@
@Extctrls@TTimer@
@Extctrls@TImage@
@Extctrls@TShape@
@Printers@initialization$qqrv
@Printers@Finalization$qqrv
@Clipbrd@initialization$qqrv
@Clipbrd@Finalization$qqrv
@Oleserver@initialization$qqrv
@Oleserver@Finalization$qqrv
@Extdlgs@initialization$qqrv
@Extdlgs@Finalization$qqrv
@Buttons@initialization$qqrv
@Buttons@Finalization$qqrv
@Olectrls@initialization$qqrv
@Olectrls@Finalization$qqrv
@Axctrls@initialization$qqrv
@Axctrls@Finalization$qqrv
CoTaskMemFree
SHGetSpecialFolderPathW
SHGetSpecialFolderLocation
SHChangeNotify
ExtractIconExW
@Tuneupwow64@initialization$qqrv
@Tuneupwow64@Finalization$qqrv
@Tuneupwow64@IsCurrentProcessWow64$qqrv
@Tuneupwow64@GetNativeSystemInfo
@Gnugettext@initialization$qqrv
@Gnugettext@Finalization$qqrv
@Madtools@initialization$qqrv
@Madtools@Finalization$qqrv
ReportFault
@Sharedmem@TSharedMem@$bctr$qqrx20System@UnicodeStringi
@Sharedmem@TSharedMem@
@Tuappinit@initialization$qqrv
@Tuappinit@Finalization$qqrv
@Ufrmeula@initialization$qqrv
@Ufrmeula@Finalization$qqrv
@Tuappinstancepools@initialization$qqrv
@Tuappinstancepools@Finalization$qqrv
@Accessibility@initialization$qqrv
@Accessibility@Finalization$qqrv
@Ocmutils@initialization$qqrv
@Ocmutils@Finalization$qqrv
@Tutaskscheduler@initialization$qqrv
@Tutaskscheduler@Finalization$qqrv
@Tunagscreen@initialization$qqrv
@Tunagscreen@Finalization$qqrv
@Tustatistics@initialization$qqrv
@Tustatistics@Finalization$qqrv
@Tuappcompat@initialization$qqrv
@Tuappcompat@Finalization$qqrv
@Specialunit@ForceWindowToForeground$qqrui
@Specialunit@WideSHGetFileInfoWrapper$qqrpbuiuir12_SHFILEINFOW
@Stringhelper@initialization$qqrv
@Stringhelper@Finalization$qqrv
@Stringhelper@ParamX$qqrx20System@UnicodeStringxbi
@Turegistry@initialization$qqrv
@Turegistry@Finalization$qqrv
@Turegistry@GetAppDataDir$qqroo
@Turegistry@GetFolderLocStr$qqrui
@Turegistry@ShowRelogonPrompt$qqr20System@UnicodeString
@Turegistry@ShowRebootPrompt$qqr20System@UnicodeString
@Turegistry@DoReboot$qqrv
@Turegistry@TerminateAppIfNonAdmin$qqrv
@Turegistry@IsAdmin$qqrv
@Turegistry@TUGetFileSize$qqrx20System@UnicodeString
@Turegistry@RestoreBackup$qqrx27System@%AnsiStringT$us$i0$%
@Turegistry@BackupCleanOld$qqr66System@%DelphiInterface$t38Tuneupprogrammanager@ITUProgramManager%
@Turegistry@DeleteRegKey$qqrp6HKEY__x20System@UnicodeString52System@%Set$t24Turegistry@Turegistry__1$iuc$0$iuc$6%
@Turegistry@Backup_BaseDir
@Turegistry@CurrentOS
@Turegistry@CurAppDataDir
@Turegistry@CurAppDir
@$xp$57Tuneupprogrammanager@ITUProgramManagerModificaitonSession
@$xp$38Tuneupprogrammanager@ITUProgramManager
@Tujournalintf@TTUJournal@LoadFromFile$qqrx20System@UnicodeString
@Tujournalintf@TTUJournal@GetEntryCountByID$qqr33Tujournalintf@TTUJournalEntryType
@Tujournalintf@TTUJournal@$bctr$qqr28Tujournalintf@TTUJournalType
@Tujournalintf@TTUJournal@GetEnumerator$qqrv
@Tujournalintf@TTUJournal@
@$xp$34Tujournalintf@TTUJournalBackupInfo
@$xp$34Tujournalintf@ITUJournalEnumerator
@Tufileutils@initialization$qqrv
@Tufileutils@Finalization$qqrv
@Diskaccess@initialization$qqrv
@Diskaccess@Finalization$qqrv
@Hashlist@THashList@Put$qqrx20System@UnicodeStringpv
@Hashlist@THashList@Get$qqrx20System@UnicodeString
@Hashlist@THashList@$bctr$qqrv
@Hashlist@THashList@
@Tuhelper@initialization$qqrv
@Tuhelper@Finalization$qqrv
@Tuhelper@ShellExecuteWrapper$qqr20System@UnicodeStringt1t1i
@Tuhelper@FormatSize$qqrj20Tuhelper@TSizeFormatoo
@Tuxsourceurl@initialization$qqrv
@Tuxsourceurl@Finalization$qqrv
@Amimpersonate@TAmImpUser@BackupDir$qqrv
@Amimpersonate@TAmImpersonatList@_Get$qqri
@Amimpersonate@InitImpersonate$qqrv
@Amimpersonate@ImpersonationList
@Tujournal@initialization$qqrv
@Tujournal@Finalization$qqrv
@Tujournal@GetBackupInfo$qqrx20System@UnicodeStringr34Tujournalintf@TTUJournalBackupInfo
@Tuwscapi@initialization$qqrv
@Tuwscapi@Finalization$qqrv
@Tujournaltheme@TTUJournalThemeEntry@GetThemeName$qqrv
@Tujournaltasks@TTUJournalTaskEntry@GetTaskPath$qqrv
@Tujournaltasks@TTUJournalTaskEntry@GetTaskName$qqrv
@Tujournaldiskfile@TTUJournalDiskFileEntry@GetFilepath$qqrv
@Tujournalregistry@TTUJournalRegistryEntry@GetSubKey$qqrv
@Tujournalregistry@TTUJournalRegistryEntry@GetMainKey$qqrv
@Tusysinfo@initialization$qqrv
@Tusysinfo@Finalization$qqrv
@Tumessagetypes@Send_IntegratorPillarMessage$qqruiui41Tumessagetypes@TTU_IntegratorPillarValuesui
@Tujournalpowerplan@TTUJournalPowerPlanEntry@GetPowerPlanName$qqrv
@Unetapi@initialization$qqrv
@Unetapi@Finalization$qqrv
@Tucomhelper@initialization$qqrv
@Tucomhelper@Finalization$qqrv
@Bettertreeview@TBetterTreeView@
@Decutil@initialization$qqrv
@Decutil@Finalization$qqrv
@Crc@initialization$qqrv
@Crc@Finalization$qqrv
@Smallmozillastuff@initialization$qqrv
@Smallmozillastuff@Finalization$qqrv
@Smallturegistry@initialization$qqrv
@Smallturegistry@Finalization$qqrv
@Smallprocesshelper@TProcessHelper@GetRunningTUApps$qqr20System@UnicodeStringrp19Classes@TStringList
@Smallprocesshelper@TProcessHelper@RefreshProcessList$qqrv
@Smallprocesshelper@TProcessHelper@$bctr$qqrv
@Smallprocesshelper@ExtractFilePath$qqrx20System@UnicodeString
@Smallprocesshelper@TProcessHelper@
@Zipforge@initialization$qqrv
@Zipforge@Finalization$qqrv
@Zipforge@TZipForge@$bctr$qqrp18Classes@TComponent
@Zipforge@TZFBaseArchiver@FindNext$qqrr23Zipforge@TZFArchiveItem
@Zipforge@TZFBaseArchiver@FindFirst$qqrx20System@UnicodeStringr23Zipforge@TZFArchiveItemit1
@Zipforge@TZFBaseArchiver@CloseArchive$qqrv
@Zipforge@TZFBaseArchiver@OpenArchive$qqrv
@Zipforge@TZipForge@
@$xp$23Zipforge@TZFArchiveItem
@Zfconst@initialization$qqrv
@Zfconst@Finalization$qqrv
@Zfcipher@initialization$qqrv
@Zfcipher@Finalization$qqrv
@Zfdecutil@initialization$qqrv
@Zfdecutil@Finalization$qqrv
@Zfhash@initialization$qqrv
@Zfhash@Finalization$qqrv
@Zfsha1@initialization$qqrv
@Zfsha1@Finalization$qqrv
@Zfstrfunc@initialization$qqrv
@Zfstrfunc@Finalization$qqrv
@Satask@initialization$qqrv
@Satask@Finalization$qqrv
@Sautils@initialization$qqrv
@Sautils@Finalization$qqrv
@Netapi32@initialization$qqrv
@Netapi32@Finalization$qqrv
@Windows2000@initialization$qqrv
@Windows2000@Finalization$qqrv
@Sidstore@initialization$qqrv
@Sidstore@Finalization$qqrv
@Ntcommon@initialization$qqrv
@Ntcommon@Finalization$qqrv
@Ntsecurity@initialization$qqrv
@Ntsecurity@Finalization$qqrv
@Advapi32@initialization$qqrv
@Advapi32@Finalization$qqrv
@Privileg@initialization$qqrv
@Privileg@Finalization$qqrv
@Wtsapi32@initialization$qqrv
@Wtsapi32@Finalization$qqrv
@Tuuconst@_TUUAppTitle_SystemHealth
@Tuuconst@_TUUAppTitle_OneClick
@Gr32@initialization$qqrv
@Gr32@Finalization$qqrv
@Gr32_lowlevel@initialization$qqrv
@Gr32_lowlevel@Finalization$qqrv
@Gr32_system@initialization$qqrv
@Gr32_system@Finalization$qqrv
@Gr32_blend@initialization$qqrv
@Gr32_blend@Finalization$qqrv
@Gr32_resamplers@initialization$qqrv
@Gr32_resamplers@Finalization$qqrv
@Gr32_rasterizers@initialization$qqrv
@Gr32_rasterizers@Finalization$qqrv
@Imagehelper@initialization$qqrv
@Imagehelper@Finalization$qqrv
@Tugraphics@initialization$qqrv
@Tugraphics@Finalization$qqrv
@Tugraphics@SetupIL$qqrp19Controls@TImageList
@Tugraphics@LoadGraphic$qqrxip14Graphics@TIconx30Tugraphics@TTUGraphicsCategory
@Tugraphics@LoadGraphic$qqrxip15Extctrls@TImagex30Tugraphics@TTUGraphicsCategory
@Tugraphics@FileNameByID$qqrxix30Tugraphics@TTUGraphicsCategory
@Tugraphics@AddGraphicToIL$qqrxip19Controls@TImageListx30Tugraphics@TTUGraphicsCategory
@Tugraphics@TUSmallIcon@
@Tuformstyler@TTUFormStyler@
@Tustylerepository@initialization$qqrv
@Tustylerepository@Finalization$qqrv
@Gr32_image@initialization$qqrv
@Gr32_image@Finalization$qqrv
@Gr32_microtiles@initialization$qqrv
@Gr32_microtiles@Finalization$qqrv
@Htmlun2@initialization$qqrv
@Htmlun2@Finalization$qqrv
@Styleun@initialization$qqrv
@Styleun@Finalization$qqrv
@Readhtml@initialization$qqrv
@Readhtml@Finalization$qqrv
@Stylepars@initialization$qqrv
@Stylepars@Finalization$qqrv
@Htmlsubs@initialization$qqrv
@Htmlsubs@Finalization$qqrv
@Usp10@initialization$qqrv
@Usp10@Finalization$qqrv
@Htmlgif1@initialization$qqrv
@Htmlgif1@Finalization$qqrv
@Vwprint@initialization$qqrv
@Vwprint@Finalization$qqrv
@Ditherunit@initialization$qqrv
@Ditherunit@Finalization$qqrv
@Pngimage@initialization$qqrv
@Pngimage@Finalization$qqrv
@Gifimg@initialization$qqrv
@Gifimg@Finalization$qqrv
@Jpeg@initialization$qqrv
@Jpeg@Finalization$qqrv
@Libxmlparser@initialization$qqrv
@Libxmlparser@Finalization$qqrv
@Regexpr@initialization$qqrv
@Regexpr@Finalization$qqrv
@Tuverinfo@FileVersionInfo$qqrx20System@UnicodeString
@$xp$26Tuverinfo@TFileVersionInfo
@Tujournalstartups@TTUJournalStartupEntry@GetStartupName$qqrv
@Tustartupmanager@initialization$qqrv
@Tustartupmanager@Finalization$qqrv
@Tutuningindex@initialization$qqrv
@Tutuningindex@Finalization$qqrv
@Driveparser@initialization$qqrv
@Driveparser@Finalization$qqrv
@Tufileidentification@initialization$qqrv
@Tufileidentification@Finalization$qqrv
@Shelllink@initialization$qqrv
@Shelllink@Finalization$qqrv
@Dxgdiplusclasses@initialization$qqrv
@Dxgdiplusclasses@Finalization$qqrv
@Dxgdiplusapi@initialization$qqrv
@Dxgdiplusapi@Finalization$qqrv
@Tuheadinglabel@TTUHeadingLabel@
@Tuprogressbar@initialization$qqrv
@Tuprogressbar@Finalization$qqrv
@Tuprogressbar@SetProgressBarVistaMarqueeStyle$qqrp21Comctrls@TProgressBari
@Alprogressbar@TALProgressBar@
@Bigchecklistbox@TBigCheckListBox@IsHeader$qqri
@Bigchecklistbox@TBigCheckListBox@GetItemIndex$qqrv
@Bigchecklistbox@TBigCheckListBox@SetItemIndex$qqri
@Bigchecklistbox@TBigCheckListBox@GetMyItemData$qqri
@Bigchecklistbox@TBigCheckListBox@SetMyItemData$qqripv
@Bigchecklistbox@TBigCheckListBox@DeleteItem$qqrio
@Bigchecklistbox@TBigCheckListBox@SelNearestItem$qqri
@Bigchecklistbox@TBigCheckListBox@AddItem$qqr20System@UnicodeStringpv
@Bigchecklistbox@TBigCheckListBox@SetImageList$qqrp19Controls@TImageList
@Bigchecklistbox@TBigCheckListBox@
@Tuapplicationheader@TTUApplicationHeader@
@Tubutton@initialization$qqrv
@Tubutton@Finalization$qqrv
@Tubutton@TTUButton@SetGlyphFileName$qqrx20System@UnicodeString
@Tubutton@TTUButton@
@Controlplacement@SaveFormSettings$qqrp11Forms@TFormx20System@UnicodeString
@Controlplacement@LoadFormSettings$qqrp11Forms@TFormx20System@UnicodeStringiio
@Tureport@initialization$qqrv
@Tureport@Finalization$qqrv
@Tureport@TTUReportModule@Init$qqrv
@Tureport@TUReportData
@Mainsettingsform@initialization$qqrv
@Mainsettingsform@Finalization$qqrv
@Mainsettingsform@ShowMainSettingsForm$qqroooo20System@UnicodeString
@Mainsettingsform@_TUUAppAlias_PerformAdvisor
@Mainsettingsform@frmMainSettings
@Xmlintf@initialization$qqrv
@Xmlintf@Finalization$qqrv
@Xmldom@initialization$qqrv
@Xmldom@Finalization$qqrv
@Msxmldom@initialization$qqrv
@Msxmldom@Finalization$qqrv
@Xmldoc@initialization$qqrv
@Xmldoc@Finalization$qqrv
@Xmlschema@initialization$qqrv
@Xmlschema@Finalization$qqrv
@Xmlschematags@initialization$qqrv
@Xmlschematags@Finalization$qqrv
@Uicons@initialization$qqrv
@Uicons@Finalization$qqrv
@Uicons@RebuildIconCache$qqriii
@Uicons@AddSmallIconToIL$qqrp19Controls@TImageList20System@UnicodeString
@Uicons@AddIconFromHandleToIL$qqrp19Controls@TImageListp7HICON__
@Advancedicon@initialization$qqrv
@Advancedicon@Finalization$qqrv
@Madshell@initialization$qqrv
@Madshell@Finalization$qqrv
@Tutuningpossibility@initialization$qqrv
@Tutuningpossibility@Finalization$qqrv
@Programmanagerconnector@TTUProgramManagerConnector@$bctr$qqrv
@Programmanagerconnector@TTUProgramManagerConnector@ConnectToProgramManager$qqrv
@Programmanagerconnector@TTUProgramManagerConnector@CheckConnectionToProgramManager$qqr66System@%DelphiInterface$t38Tuneupprogrammanager@ITUProgramManager%
@Programmanagerconnector@_rsConnectionFailedReinstallDesc1309
@Programmanagerconnector@_rsInstallAndStartServiceHeading1300
@Programmanagerconnector@TTUProgramManagerConnector@
@Ehshelprouter@initialization$qqrv
@Ehshelprouter@Finalization$qqrv
@Ehshelprouter@THelpRouter@DisplayTopic$qqr20System@UnicodeString
@Ehshelprouter@THelpRouter@
@Shortcutlink@initialization$qqrv
@Shortcutlink@Finalization$qqrv
@Dxbar@initialization$qqrv
@Dxbar@Finalization$qqrv
@Dxbarstrs@initialization$qqrv
@Dxbarstrs@Finalization$qqrv
@Dxbarcustomcustomizationform@initialization$qqrv
@Dxbarcustomcustomizationform@Finalization$qqrv
@Cxaccessibility@initialization$qqrv
@Cxaccessibility@Finalization$qqrv
@Cxclasses@initialization$qqrv
@Cxclasses@Finalization$qqrv
@Cxcontrols@initialization$qqrv
@Cxcontrols@Finalization$qqrv
@Cxlookandfeelpainters@initialization$qqrv
@Cxlookandfeelpainters@Finalization$qqrv
@Cxgeometry@initialization$qqrv
@Cxgeometry@Finalization$qqrv
@Cxgraphics@initialization$qqrv
@Cxgraphics@Finalization$qqrv
@Cxdrawtextutils@initialization$qqrv
@Cxdrawtextutils@Finalization$qqrv
@Cxlookandfeels@initialization$qqrv
@Cxlookandfeels@Finalization$qqrv
@Dxfading@initialization$qqrv
@Dxfading@Finalization$qqrv
@Cxstyles@initialization$qqrv
@Cxstyles@Finalization$qqrv
@Cxcontainer@initialization$qqrv
@Cxcontainer@Finalization$qqrv
@Cxdwmapi@initialization$qqrv
@Cxdwmapi@Finalization$qqrv
@Dxcore@initialization$qqrv
@Dxcore@Finalization$qqrv
@Dxoffice11@initialization$qqrv
@Dxoffice11@Finalization$qqrv
@Dxuxtheme@initialization$qqrv
@Dxuxtheme@Finalization$qqrv
@Dxthememanager@initialization$qqrv
@Dxthememanager@Finalization$qqrv
@Tusystemrestore@initialization$qqrv
@Tusystemrestore@Finalization$qqrv
@Tusystemrestore@TTUSystemRestore@RestoreSystemRestorePoint$qqrxi
@Tusystemrestore@TTUSystemRestore@Load$qqrv
@Tusystemrestore@TTUSystemRestore@GetLastError$qqrv
@Tusystemrestore@TTUSystemRestore@GetItem$qqrxi
@Tusystemrestore@TTUSystemRestore@GetEnabled$qqrv
@Tusystemrestore@TTUSystemRestore@GetCount$qqrv
@Tusystemrestore@TTUSystemRestore@Enable$qqrv
@Tusystemrestore@TTUSystemRestore@DeleteOneSystemRestorePoint$qqrxi
@Tusystemrestore@TTUSystemRestore@DeleteAllSystemRestorePoints$qqro
@Tusystemrestore@TTUSystemRestore@CreateSystemRestorePoint$qqrx20System@UnicodeString
@Tusystemrestore@TTUSystemRestore@StartRestoreService$qqrv
@Tusystemrestore@TTUSystemRestore@IsRestoreServiceRunning$qqrv
@Tusystemrestore@TTUSystemRestore@IsRestoreServiceExists$qqrv
@Tusystemrestore@TTUSystemRestore@$bctr$qqrv
@Tusystemrestore@TTUSystemRestore@
@Fmtumessagedialog@initialization$qqrv
@Fmtumessagedialog@Finalization$qqrv
@Madkernel@initialization$qqrv
@Madkernel@Finalization$qqrv
@Madkernel@Process$qqr27System@%AnsiStringT$us$i0$%
@Tupsapi@initialization$qqrv
@Tupsapi@Finalization$qqrv
@Tuinstallertools@initialization$qqrv
@Tuinstallertools@Finalization$qqrv
@Tuinstalledapps@initialization$qqrv
@Tuinstalledapps@Finalization$qqrv
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE