Static | ZeroBOX

PE Compile Time

2021-04-29 22:21:49

PE Imphash

ff750281199fd75b463a9612c10a02fe

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
p\18XVd! 0x00001000 0x0060d71c 0x0060d800 5.78983154223
\x1f`.E@9%\x1c 0x0060f000 0x0008b508 0x0008b600 4.91770947771
ZG<.aII+ 0x0069b000 0x0000dc04 0x00000000 0.0
m@FI,i-! 0x006a9000 0x000055cc 0x00005600 4.43392432128
A+f7Uco6 0x006af000 0x00001244 0x00001400 3.24058666039
6\x1fhp#;k7 0x006b1000 0x000000c3 0x00000200 3.61805271468
=ifQtp[, 0x006b2000 0x00000045 0x00000200 1.18311243731
=5+RP\\x1eV 0x006b3000 0x00048904 0x00048a00 7.99922841511
m:I\x1e2m@4 0x006fc000 0x00050220 0x00050400 7.99715372622
.`0dZed' 0x0074d000 0x00579042 0x00579200 7.86678113821
=b2^tF86 0x00cc7000 0x002eb764 0x002eb800 7.62490462161
/;MX5YN\ 0x00fb3000 0x00048c84 0x00048e00 6.47184716155
g_["QQ\x1ca 0x00ffc000 0x0000088f 0x00000a00 4.75996449101

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x00ffc0a0 0x00000218 LANG_ENGLISH SUBLANG_ENGLISH_US data
RT_MANIFEST 0x00ffc2b8 0x000005d7 LANG_ENGLISH SUBLANG_ENGLISH_US XML 1.0 document, ASCII text, with CRLF, LF line terminators

Imports

Library winmm.dll:
0x11f9000 PlaySoundW
Library wininet.dll:
0x11f9010 InternetCloseHandle
0x11f9018 InternetReadFile
0x11f9020 InternetOpenW
0x11f9028 InternetOpenUrlW
Library winspool.drv:
0x11f9038 DocumentPropertiesW
0x11f9040 ClosePrinter
0x11f9048 OpenPrinterW
0x11f9050 GetDefaultPrinterW
0x11f9058 EnumPrintersW
Library comctl32.dll:
0x11f9070 FlatSB_SetScrollInfo
0x11f9078 InitCommonControls
0x11f9080 ImageList_DragMove
0x11f9088 ImageList_Destroy
0x11f9090 _TrackMouseEvent
0x11f90a0 ImageList_Add
0x11f90a8 FlatSB_SetScrollProp
0x11f90b8 ImageList_Create
0x11f90c0 ImageList_EndDrag
0x11f90c8 ImageList_DrawEx
0x11f90d8 FlatSB_GetScrollPos
0x11f90e0 FlatSB_SetScrollPos
0x11f90e8 InitializeFlatSB
0x11f90f0 ImageList_Copy
0x11f90f8 FlatSB_GetScrollInfo
0x11f9100 ImageList_Write
0x11f9108 ImageList_SetBkColor
0x11f9110 ImageList_GetBkColor
0x11f9118 ImageList_BeginDrag
0x11f9120 ImageList_GetIcon
0x11f9128 ImageList_Replace
0x11f9138 ImageList_DragEnter
0x11f9140 ImageList_GetIconSize
0x11f9148 ImageList_SetIconSize
0x11f9150 ImageList_Read
0x11f9158 ImageList_DragLeave
0x11f9160 ImageList_LoadImageW
0x11f9168 ImageList_Draw
0x11f9170 ImageList_Remove
0x11f9178 ImageList_ReplaceIcon
Library shell32.dll:
0x11f9198 Shell_NotifyIconW
0x11f91a0 ShellExecuteW
0x11f91a8 SHGetPathFromIDListW
Library user32.dll:
0x11f91b8 DdeSetUserHandle
0x11f91c0 CopyImage
0x11f91c8 SetMenuItemInfoW
0x11f91d0 GetMenuItemInfoW
0x11f91d8 DefFrameProcW
0x11f91e0 GetDlgCtrlID
0x11f91e8 FrameRect
0x11f91f8 GetMenuStringW
0x11f9200 FillRect
0x11f9208 DdeCmpStringHandles
0x11f9210 SendMessageA
0x11f9220 EnumWindows
0x11f9228 ShowOwnedPopups
0x11f9230 GetClassInfoW
0x11f9238 GetScrollRange
0x11f9240 SetActiveWindow
0x11f9248 GetActiveWindow
0x11f9250 DrawEdge
0x11f9258 GetKeyboardLayoutList
0x11f9260 LoadBitmapW
0x11f9268 EnumChildWindows
0x11f9270 GetScrollBarInfo
0x11f9278 UnhookWindowsHookEx
0x11f9280 SetCapture
0x11f9288 GetCapture
0x11f9290 ShowCaret
0x11f9298 CreatePopupMenu
0x11f92a0 GetMenuItemID
0x11f92a8 CharLowerBuffW
0x11f92b0 PostMessageW
0x11f92b8 IsZoomed
0x11f92c0 SetParent
0x11f92c8 DrawMenuBar
0x11f92d0 SetSystemCursor
0x11f92d8 GetClientRect
0x11f92e0 IsChild
0x11f92e8 IsIconic
0x11f92f0 CallNextHookEx
0x11f92f8 DdeDisconnect
0x11f9300 ShowWindow
0x11f9308 GetWindowTextW
0x11f9310 SetForegroundWindow
0x11f9318 GetAsyncKeyState
0x11f9320 IsDialogMessageW
0x11f9328 DestroyWindow
0x11f9330 RegisterClassW
0x11f9338 EndMenu
0x11f9340 CharNextW
0x11f9348 GetFocus
0x11f9350 GetDC
0x11f9358 SetFocus
0x11f9360 ReleaseDC
0x11f9368 mouse_event
0x11f9370 ExitWindowsEx
0x11f9378 SetScrollRange
0x11f9380 DrawTextW
0x11f9388 PeekMessageA
0x11f9390 MessageBeep
0x11f9398 RemovePropW
0x11f93a0 GetSubMenu
0x11f93a8 DestroyIcon
0x11f93b0 IsWindowVisible
0x11f93b8 DispatchMessageA
0x11f93c0 UnregisterClassW
0x11f93c8 GetTopWindow
0x11f93d0 SendMessageW
0x11f93d8 GetMessageTime
0x11f93e0 GetWindowLongPtrW
0x11f93e8 SetWindowLongPtrW
0x11f93f0 DdeNameService
0x11f93f8 DdeAccessData
0x11f9400 LoadStringW
0x11f9408 CreateMenu
0x11f9410 CharLowerW
0x11f9418 SetWindowRgn
0x11f9420 SetWindowPos
0x11f9428 GetMenuItemCount
0x11f9430 GetSysColorBrush
0x11f9438 GetWindowDC
0x11f9440 DdeQueryConvInfo
0x11f9448 DrawTextExW
0x11f9450 EnumClipboardFormats
0x11f9458 GetScrollInfo
0x11f9460 SetWindowTextW
0x11f9468 GetMessageExtraInfo
0x11f9470 GetSysColor
0x11f9478 EnableScrollBar
0x11f9480 TrackPopupMenu
0x11f9488 DrawIconEx
0x11f9490 DdePostAdvise
0x11f9498 GetClassNameW
0x11f94a0 DdeCreateDataHandle
0x11f94a8 GetMessagePos
0x11f94b0 GetIconInfo
0x11f94b8 SetScrollInfo
0x11f94c0 GetKeyNameTextW
0x11f94c8 GetDesktopWindow
0x11f94d0 SetCursorPos
0x11f94d8 GetCursorPos
0x11f94e0 SetMenu
0x11f94e8 GetMenuState
0x11f94f0 GetMenu
0x11f94f8 SetRect
0x11f9500 GetKeyState
0x11f9508 GetCursor
0x11f9510 KillTimer
0x11f9518 WaitMessage
0x11f9520 TranslateMDISysAccel
0x11f9528 GetWindowPlacement
0x11f9530 CreateWindowExW
0x11f9538 GetMessageW
0x11f9540 GetDCEx
0x11f9548 PeekMessageW
0x11f9550 MonitorFromWindow
0x11f9558 SetTimer
0x11f9560 WindowFromPoint
0x11f9568 BeginPaint
0x11f9578 DdeUnaccessData
0x11f9580 MapVirtualKeyW
0x11f9588 IsWindowUnicode
0x11f9590 DispatchMessageW
0x11f95a0 DefMDIChildProcW
0x11f95a8 GetSystemMenu
0x11f95b0 SetScrollPos
0x11f95b8 GetScrollPos
0x11f95c0 DdeClientTransaction
0x11f95c8 DrawFocusRect
0x11f95d0 SendInput
0x11f95d8 ReleaseCapture
0x11f95e0 LoadCursorW
0x11f95e8 DdeConnect
0x11f95f0 ScrollWindow
0x11f95f8 GetLastActivePopup
0x11f9600 DdeUninitialize
0x11f9608 GetSystemMetrics
0x11f9610 CharUpperBuffW
0x11f9618 SetClassLongPtrW
0x11f9620 GetClassLongPtrW
0x11f9628 SetClipboardData
0x11f9630 GetClipboardData
0x11f9638 ClientToScreen
0x11f9640 SetWindowPlacement
0x11f9648 DdeFreeStringHandle
0x11f9650 GetMonitorInfoW
0x11f9658 CheckMenuItem
0x11f9660 CharUpperW
0x11f9668 DefWindowProcW
0x11f9670 GetForegroundWindow
0x11f9678 EnableWindow
0x11f9688 RedrawWindow
0x11f9690 EndPaint
0x11f96a0 LoadKeyboardLayoutW
0x11f96b0 GetParent
0x11f96b8 MonitorFromRect
0x11f96c0 InsertMenuItemW
0x11f96c8 DdeQueryStringA
0x11f96d0 GetPropW
0x11f96d8 MessageBoxW
0x11f96e0 SetPropW
0x11f96e8 UpdateWindow
0x11f96f8 VkKeyScanW
0x11f9700 DestroyMenu
0x11f9708 SetWindowsHookExW
0x11f9710 EmptyClipboard
0x11f9718 AdjustWindowRectEx
0x11f9720 IsWindow
0x11f9728 DrawIcon
0x11f9730 EnumThreadWindows
0x11f9738 InvalidateRect
0x11f9740 GetKeyboardState
0x11f9748 ScreenToClient
0x11f9750 DrawFrameControl
0x11f9758 DdeFreeDataHandle
0x11f9760 SetCursor
0x11f9768 CreateIcon
0x11f9770 DdeInitializeA
0x11f9778 RemoveMenu
0x11f9790 OpenClipboard
0x11f9798 TranslateMessage
0x11f97a0 MapWindowPoints
0x11f97a8 EnumDisplayMonitors
0x11f97b0 CountClipboardFormats
0x11f97b8 CallWindowProcW
0x11f97c0 CloseClipboard
0x11f97c8 DestroyCursor
0x11f97d0 PostMessageA
0x11f97d8 CopyIcon
0x11f97e0 PostQuitMessage
0x11f97e8 DdeGetLastError
0x11f97f0 ShowScrollBar
0x11f97f8 EnableMenuItem
0x11f9800 HideCaret
0x11f9808 FindWindowExW
0x11f9810 MonitorFromPoint
0x11f9818 LoadIconW
0x11f9820 SystemParametersInfoW
0x11f9828 GetWindow
0x11f9830 GetWindowRect
0x11f9838 InsertMenuW
0x11f9840 PostThreadMessageW
0x11f9848 IsWindowEnabled
0x11f9850 IsDialogMessageA
0x11f9858 FindWindowW
0x11f9860 GetKeyboardLayout
0x11f9868 DeleteMenu
Library version.dll:
0x11f9880 VerQueryValueW
0x11f9888 GetFileVersionInfoW
Library oleaut32.dll:
0x11f9898 GetErrorInfo
0x11f98a0 SysFreeString
0x11f98a8 VariantClear
0x11f98b0 VariantInit
0x11f98b8 SysReAllocStringLen
0x11f98c0 SafeArrayCreate
0x11f98c8 SafeArrayGetElement
0x11f98d0 GetActiveObject
0x11f98d8 SysAllocStringLen
0x11f98e0 SafeArrayPtrOfIndex
0x11f98e8 SafeArrayGetUBound
0x11f98f0 SafeArrayGetLBound
0x11f98f8 VariantCopy
0x11f9900 VariantChangeType
Library advapi32.dll:
0x11f9910 RegSetValueExW
0x11f9918 RegConnectRegistryW
0x11f9920 GetUserNameW
0x11f9928 RegQueryInfoKeyW
0x11f9930 RegUnLoadKeyW
0x11f9938 IsValidAcl
0x11f9940 RegSaveKeyW
0x11f9948 RegReplaceKeyW
0x11f9950 RegCreateKeyExW
0x11f9958 InitializeAcl
0x11f9960 RegLoadKeyW
0x11f9968 RegEnumKeyExW
0x11f9970 AdjustTokenPrivileges
0x11f9978 RegDeleteKeyW
0x11f9980 SetSecurityInfo
0x11f9988 LookupPrivilegeValueW
0x11f9990 RegOpenKeyExW
0x11f9998 OpenProcessToken
0x11f99a0 RegDeleteValueW
0x11f99a8 RegFlushKey
0x11f99b0 RegEnumValueW
0x11f99b8 RegQueryValueExW
0x11f99c0 RegCloseKey
0x11f99c8 RegRestoreKeyW
Library netapi32.dll:
0x11f99d8 NetWkstaGetInfo
0x11f99e0 NetApiBufferFree
Library msvcrt.dll:
0x11f99f0 memcpy
0x11f99f8 memset
Library winhttp.dll:
0x11f9a10 WinHttpSetTimeouts
0x11f9a20 WinHttpConnect
0x11f9a38 WinHttpGetProxyForUrl
0x11f9a40 WinHttpReadData
0x11f9a48 WinHttpCloseHandle
0x11f9a50 WinHttpQueryHeaders
0x11f9a58 WinHttpOpenRequest
0x11f9a68 WinHttpOpen
0x11f9a70 WinHttpWriteData
0x11f9a78 WinHttpSetCredentials
0x11f9a88 WinHttpSetOption
0x11f9a90 WinHttpSendRequest
0x11f9a98 WinHttpQueryOption
Library kernel32.dll:
0x11f9aa8 SetFileAttributesW
0x11f9ab0 GetFileType
0x11f9ab8 SetFileTime
0x11f9ac0 RtlUnwindEx
0x11f9ac8 QueryDosDeviceW
0x11f9ad0 GetACP
0x11f9ad8 CloseHandle
0x11f9ae0 LocalFree
0x11f9ae8 GetCurrentProcessId
0x11f9af0 SizeofResource
0x11f9af8 VirtualProtect
0x11f9b00 TlsAlloc
0x11f9b08 TerminateThread
0x11f9b20 IsDebuggerPresent
0x11f9b28 FindNextFileW
0x11f9b30 GetFullPathNameW
0x11f9b38 VirtualFree
0x11f9b40 HeapAlloc
0x11f9b48 ExitProcess
0x11f9b50 GetCPInfoExW
0x11f9b58 GlobalSize
0x11f9b60 RtlUnwind
0x11f9b68 GetCPInfo
0x11f9b70 EnumSystemLocalesW
0x11f9b78 GetStdHandle
0x11f9b98 GetModuleHandleW
0x11f9ba0 FreeLibrary
0x11f9bb0 HeapDestroy
0x11f9bb8 FileTimeToDosDateTime
0x11f9bc0 ReadFile
0x11f9bc8 GetUserDefaultLCID
0x11f9bd0 CreateProcessW
0x11f9bd8 HeapSize
0x11f9be0 GetLastError
0x11f9be8 GetModuleFileNameW
0x11f9bf0 SetLastError
0x11f9bf8 GlobalAlloc
0x11f9c00 GlobalUnlock
0x11f9c08 FindResourceW
0x11f9c10 CreateThread
0x11f9c18 CompareStringW
0x11f9c20 CopyFileW
0x11f9c28 MapViewOfFile
0x11f9c30 CreateMutexW
0x11f9c38 LoadLibraryA
0x11f9c40 GetVolumeInformationW
0x11f9c48 ResetEvent
0x11f9c50 MulDiv
0x11f9c58 FreeResource
0x11f9c60 GetDriveTypeW
0x11f9c68 GetVersion
0x11f9c70 RaiseException
0x11f9c78 GlobalAddAtomW
0x11f9c80 FormatMessageW
0x11f9c88 OpenProcess
0x11f9c90 SwitchToThread
0x11f9c98 GetExitCodeThread
0x11f9ca0 OutputDebugStringW
0x11f9ca8 GetCurrentThread
0x11f9cb0 GetLogicalDrives
0x11f9cb8 GetFileAttributesExW
0x11f9cc0 LoadLibraryExW
0x11f9cc8 TerminateProcess
0x11f9cd0 LockResource
0x11f9cd8 FileTimeToSystemTime
0x11f9ce0 GetCurrentThreadId
0x11f9cf0 GlobalFindAtomW
0x11f9cf8 VirtualQuery
0x11f9d00 GlobalFree
0x11f9d08 VirtualQueryEx
0x11f9d10 Sleep
0x11f9d18 EnterCriticalSection
0x11f9d20 SetFilePointer
0x11f9d28 LoadResource
0x11f9d30 SuspendThread
0x11f9d38 GetTickCount
0x11f9d40 GetFileSize
0x11f9d48 GlobalDeleteAtom
0x11f9d50 GetStartupInfoW
0x11f9d58 GetFileAttributesW
0x11f9d68 GetThreadPriority
0x11f9d70 GetCurrentProcess
0x11f9d78 GlobalLock
0x11f9d80 SetThreadPriority
0x11f9d88 VirtualAlloc
0x11f9d90 GetTempPathW
0x11f9d98 GetCommandLineW
0x11f9da0 GetSystemInfo
0x11f9da8 LeaveCriticalSection
0x11f9db0 GetProcAddress
0x11f9db8 ResumeThread
0x11f9dc8 WinExec
0x11f9dd0 GetVersionExW
0x11f9dd8 VerifyVersionInfoW
0x11f9de0 HeapCreate
0x11f9de8 LCMapStringW
0x11f9df0 GetDiskFreeSpaceW
0x11f9df8 VerSetConditionMask
0x11f9e00 FindFirstFileW
0x11f9e10 TlsFree
0x11f9e18 GetConsoleOutputCP
0x11f9e20 UnmapViewOfFile
0x11f9e28 GetConsoleCP
0x11f9e30 lstrlenW
0x11f9e38 SetEndOfFile
0x11f9e48 HeapFree
0x11f9e50 WideCharToMultiByte
0x11f9e58 FindClose
0x11f9e60 MultiByteToWideChar
0x11f9e68 LoadLibraryW
0x11f9e70 SetEvent
0x11f9e78 GetLocaleInfoW
0x11f9e80 CreateFileW
0x11f9e88 SystemTimeToFileTime
0x11f9e90 EnumResourceNamesW
0x11f9e98 DeleteFileW
0x11f9ea0 IsDBCSLeadByteEx
0x11f9eb0 GetLocalTime
0x11f9eb8 WaitForSingleObject
0x11f9ec0 WriteFile
0x11f9ec8 CreateFileMappingW
0x11f9ed0 ExitThread
0x11f9ed8 DeleteCriticalSection
0x11f9ee0 GetDateFormatW
0x11f9ee8 TlsGetValue
0x11f9ef0 SetErrorMode
0x11f9ef8 GetComputerNameW
0x11f9f08 IsValidLocale
0x11f9f10 TlsSetValue
0x11f9f18 CreateDirectoryW
0x11f9f28 EnumCalendarInfoW
0x11f9f30 LocalAlloc
0x11f9f38 RemoveDirectoryW
0x11f9f40 CreateEventW
0x11f9f50 GetThreadLocale
0x11f9f58 SetThreadLocale
Library wsock32.dll:
0x11f9f68 gethostbyaddr
0x11f9f70 WSACleanup
0x11f9f78 gethostbyname
0x11f9f80 bind
0x11f9f88 gethostname
0x11f9f90 closesocket
0x11f9f98 WSAGetLastError
0x11f9fa0 connect
0x11f9fa8 inet_addr
0x11f9fb0 getpeername
0x11f9fb8 WSAAsyncSelect
0x11f9fc0 WSAAsyncGetServByName
0x11f9fc8 WSACancelAsyncRequest
0x11f9fd0 send
0x11f9fd8 ntohs
0x11f9fe0 htons
0x11f9fe8 WSAStartup
0x11f9ff0 getservbyname
0x11f9ff8 getsockname
0x11fa000 listen
0x11fa008 socket
0x11fa010 recv
0x11fa018 inet_ntoa
0x11fa020 ioctlsocket
0x11fa028 WSAAsyncGetHostByName
Library ole32.dll:
0x11fa038 OleRegEnumVerbs
0x11fa040 IsAccelerator
0x11fa048 CreateBindCtx
0x11fa050 MkParseDisplayName
0x11fa058 CoCreateInstance
0x11fa060 CoUninitialize
0x11fa068 IsEqualGUID
0x11fa070 ProgIDFromCLSID
0x11fa078 CreateStreamOnHGlobal
0x11fa080 OleInitialize
0x11fa088 CLSIDFromProgID
0x11fa090 OleUninitialize
0x11fa098 CoGetClassObject
0x11fa0a0 CoInitialize
0x11fa0a8 CoTaskMemFree
0x11fa0b0 OleDraw
0x11fa0b8 CoTaskMemAlloc
0x11fa0c0 StringFromCLSID
0x11fa0c8 OleSetMenuDescriptor
Library gdi32.dll:
0x11fa0d8 Pie
0x11fa0e0 SetBkMode
0x11fa0f0 GetEnhMetaFileHeader
0x11fa0f8 CloseEnhMetaFile
0x11fa100 RectVisible
0x11fa108 AngleArc
0x11fa110 ResizePalette
0x11fa118 SetAbortProc
0x11fa120 SetTextColor
0x11fa128 StretchBlt
0x11fa130 RoundRect
0x11fa138 RestoreDC
0x11fa140 SetRectRgn
0x11fa148 GetTextMetricsW
0x11fa150 GetWindowOrgEx
0x11fa158 CreatePalette
0x11fa160 PolyBezierTo
0x11fa168 CreateICW
0x11fa170 CreateDCW
0x11fa178 GetStockObject
0x11fa180 CreateSolidBrush
0x11fa188 Polygon
0x11fa190 MoveToEx
0x11fa198 PlayEnhMetaFile
0x11fa1a0 Ellipse
0x11fa1a8 StartPage
0x11fa1b0 GetBitmapBits
0x11fa1b8 StartDocW
0x11fa1c0 AbortDoc
0x11fa1d0 GetEnhMetaFileBits
0x11fa1e0 CreatePenIndirect
0x11fa1e8 SetMapMode
0x11fa1f0 CreateFontIndirectW
0x11fa1f8 PolyBezier
0x11fa200 LPtoDP
0x11fa208 EndDoc
0x11fa210 GetObjectW
0x11fa218 GetWinMetaFileBits
0x11fa220 SetROP2
0x11fa230 ArcTo
0x11fa238 CreateEnhMetaFileW
0x11fa240 Arc
0x11fa248 SelectPalette
0x11fa250 ExcludeClipRect
0x11fa258 MaskBlt
0x11fa260 SetWindowOrgEx
0x11fa268 EndPage
0x11fa270 DeleteEnhMetaFile
0x11fa278 Chord
0x11fa280 SetDIBits
0x11fa288 SetViewportOrgEx
0x11fa290 CreateRectRgn
0x11fa298 RealizePalette
0x11fa2a0 SetDIBColorTable
0x11fa2a8 GetDIBColorTable
0x11fa2b0 CreateBrushIndirect
0x11fa2b8 PatBlt
0x11fa2c0 SetEnhMetaFileBits
0x11fa2c8 CreateEllipticRgn
0x11fa2d0 Rectangle
0x11fa2d8 SaveDC
0x11fa2e0 DeleteDC
0x11fa2e8 BitBlt
0x11fa2f0 FrameRgn
0x11fa2f8 GetDeviceCaps
0x11fa300 GetTextExtentPoint32W
0x11fa308 GetClipBox
0x11fa310 IntersectClipRect
0x11fa318 Polyline
0x11fa320 CreateBitmap
0x11fa328 CombineRgn
0x11fa330 SetWinMetaFileBits
0x11fa338 GetStretchBltMode
0x11fa340 CreateDIBitmap
0x11fa348 SetStretchBltMode
0x11fa350 GetDIBits
0x11fa358 CreateDIBSection
0x11fa360 LineTo
0x11fa368 GetRgnBox
0x11fa370 EnumFontsW
0x11fa378 CreateHalftonePalette
0x11fa380 SelectObject
0x11fa388 DeleteObject
0x11fa390 ExtFloodFill
0x11fa398 UnrealizeObject
0x11fa3a0 CopyEnhMetaFileW
0x11fa3a8 SetBkColor
0x11fa3b0 CreateCompatibleDC
0x11fa3b8 GetBrushOrgEx
0x11fa3c0 GetCurrentPositionEx
0x11fa3d0 GetTextExtentPointW
0x11fa3d8 ExtTextOutW
0x11fa3e0 SetBrushOrgEx
0x11fa3e8 GetPixel
0x11fa3f0 GdiFlush
0x11fa3f8 SetPixel
0x11fa400 EnumFontFamiliesExW
0x11fa408 StretchDIBits
0x11fa410 GetPaletteEntries
Library WTSAPI32.dll:
0x11fa420 WTSSendMessageW
Library kernel32.dll:
0x11fa438 GetModuleHandleA
0x11fa440 CreateEventA
0x11fa448 GetModuleFileNameW
0x11fa450 LoadLibraryA
0x11fa458 TerminateProcess
0x11fa460 GetCurrentProcess
0x11fa470 Thread32First
0x11fa478 GetCurrentProcessId
0x11fa480 GetCurrentThreadId
0x11fa488 OpenThread
0x11fa490 Thread32Next
0x11fa498 CloseHandle
0x11fa4a0 SuspendThread
0x11fa4a8 ResumeThread
0x11fa4b0 WriteProcessMemory
0x11fa4b8 GetSystemInfo
0x11fa4c0 VirtualAlloc
0x11fa4c8 VirtualProtect
0x11fa4d0 VirtualFree
0x11fa4e8 GetCurrentThread
0x11fa4f0 SetThreadAffinityMask
0x11fa4f8 Sleep
0x11fa500 FreeLibrary
0x11fa508 GetTickCount
0x11fa510 SystemTimeToFileTime
0x11fa518 FileTimeToSystemTime
0x11fa520 GlobalFree
0x11fa528 LocalAlloc
0x11fa530 LocalFree
0x11fa538 GetProcAddress
0x11fa540 ExitProcess
0x11fa548 EnterCriticalSection
0x11fa550 LeaveCriticalSection
0x11fa560 DeleteCriticalSection
0x11fa568 GetModuleHandleW
0x11fa570 LoadResource
0x11fa578 MultiByteToWideChar
0x11fa580 FindResourceExW
0x11fa588 FindResourceExA
0x11fa590 WideCharToMultiByte
0x11fa598 GetThreadLocale
0x11fa5a0 GetUserDefaultLCID
0x11fa5a8 GetSystemDefaultLCID
0x11fa5b0 EnumResourceNamesA
0x11fa5b8 EnumResourceNamesW
0x11fa5d0 EnumResourceTypesA
0x11fa5d8 EnumResourceTypesW
0x11fa5e0 CreateFileW
0x11fa5e8 LoadLibraryW
0x11fa5f0 GetLastError
0x11fa5f8 FlushFileBuffers
0x11fa600 CreateFileA
0x11fa608 WriteConsoleW
0x11fa610 GetConsoleOutputCP
0x11fa618 WriteConsoleA
0x11fa620 SetStdHandle
0x11fa628 FlsSetValue
0x11fa630 GetCommandLineA
0x11fa638 RaiseException
0x11fa640 RtlPcToFileHeader
0x11fa650 RtlUnwindEx
0x11fa658 HeapFree
0x11fa660 GetCPInfo
0x11fa668 GetACP
0x11fa670 GetOEMCP
0x11fa678 IsValidCodePage
0x11fa680 EncodePointer
0x11fa688 DecodePointer
0x11fa690 FlsGetValue
0x11fa698 FlsFree
0x11fa6a0 SetLastError
0x11fa6a8 FlsAlloc
0x11fa6c0 IsDebuggerPresent
0x11fa6c8 RtlVirtualUnwind
0x11fa6d0 RtlCaptureContext
0x11fa6d8 HeapAlloc
0x11fa6e0 LCMapStringA
0x11fa6e8 LCMapStringW
0x11fa6f0 SetHandleCount
0x11fa6f8 GetStdHandle
0x11fa700 GetFileType
0x11fa708 GetStartupInfoA
0x11fa710 GetModuleFileNameA
0x11fa720 GetEnvironmentStrings
0x11fa738 HeapSetInformation
0x11fa740 HeapCreate
0x11fa748 HeapDestroy
0x11fa758 GetStringTypeA
0x11fa760 GetStringTypeW
0x11fa768 GetLocaleInfoA
0x11fa770 HeapSize
0x11fa778 WriteFile
0x11fa780 SetFilePointer
0x11fa788 GetConsoleCP
0x11fa790 GetConsoleMode
0x11fa798 HeapReAlloc
Library user32.dll:
0x11fa7b8 CharUpperBuffW
0x11fa7c0 MessageBoxW
Library kernel32.dll:
0x11fa7d8 LocalAlloc
0x11fa7e0 GetModuleFileNameW
0x11fa7e8 LocalFree
0x11fa800 SetThreadAffinityMask
0x11fa808 Sleep
0x11fa810 ExitProcess
0x11fa818 FreeLibrary
0x11fa820 LoadLibraryA
0x11fa828 GetModuleHandleA
0x11fa830 GetProcAddress
Library user32.dll:

Exports

Ordinal Address Name
4 0x9f53c0 Fi0KUsFNBsfDy53hFM5ulsq62
3 0x49e670 TMethodImplementationIntercept
2 0x41cef0 __dbk_fcall_wrapper
1 0xaa1298 dbkFCallWrapperAddr
This program must be run under Win64
p\18XVd!
``.E@9%
ZG<.aII+
m@FI,i-!
A+f7Uco6D
6hp#;k7
@=ifQtp[,E
@=5+RP\
@.`0dZed'B
`=b2^tF86d
h/;MX5YN\
@g_["QQ
Boolean
System
AnsiChar
ShortInt
SmallInt
Integer
Cardinal
Pointer
UInt64
NativeInt
NativeUInt
Single
Extended
Double
Currency
ShortString
PAnsiChar8
PWideCharX
ByteBool
System
WordBool
System
LongBool
System
string
WideString
AnsiString
Variant
OleVariant
PFixedUInt
TClass
HRESULT
PGUIDh
&op_Equality
&op_Inequality
Create
BigEndian
Create
AStartIndex
BigEndian
PInterfaceEntryP
TInterfaceEntry(
VTable
IOffset
_Filler
ImplGetter
PInterfaceTable(
TInterfaceTable
EntryCount
_Filler
Entries
TMethod
&op_Equality
&op_Inequality
&op_GreaterThan
&op_GreaterThanOrEqual
&op_LessThan
&op_LessThanOrEqual
TObject2
Create
DisposeOf
InitInstance
Instance
CleanupInstance
ClassType
ClassName
ClassNameIs
ClassParent
ClassInfo
InstanceSize
InheritsFrom
AClass
MethodAddress
MethodAddress
MethodName
Address
QualifiedClassName
FieldAddress
FieldAddress
GetInterface
GetInterfaceEntry
GetInterfaceTable
UnitName
UnitScope
Equals
GetHashCode
ToString
SafeCallException
ExceptObject
ExceptAddr
AfterConstruction
BeforeDestruction
Dispatch
Message
DefaultHandler
Message
NewInstance
FreeInstance
Destroy
CPP_ABI_1
CPP_ABI_2
CPP_ABI_3
TObjectp
System
TCustomAttribute
TCustomAttribute
System
WeakAttribute
WeakAttribute
System
UnsafeAttribute
UnsafeAttribute
System
VolatileAttribute@*@
VolatileAttribute *@
System
_FName
StoredAttribute2
Create
Create
StorageHandlerFlag
Create
StorageHandlerName
StoredAttribute@+@
System
HPPGENAttributeE
Create
Create
HPPGENAttribute .@
System
PMonitor
TMonitor.PWaitingThread
TMonitor.TWaitingThread
Thread
WaitEvent
TMonitor.TSpinLock
TMonitor0
FLockCount
FRecursionCount
FOwningThread
FLockEvent
FSpinCount
FWaitQueue
FQueueLock
SetSpinCount
AObject
ASpinCount
AObject
AObject
Timeout
AObject
TryEnter
AObject
AObject
Timeout
AObject
Timeout
AObject
PulseAll
AObject
IInterface
System
IEnumerable
System
IDispatch
System
FRefCount
TInterfacedObject=
AfterConstruction
BeforeDestruction
NewInstance
TInterfacedObject
System
RefCount
PShortStringp
PAnsiString
PWideString
PUnicodeStringp
UCS4Char
UCS4String
System
UTF8String
RawByteString
PInteger
PCardinal
PInt64X
PExtended
PCurrencyX
PVariant
PPointer8
TDateTime
TVarArrayBound
ElementCount
LowBound
TVarArrayBoundArray
PVarArrayp:@
TVarArray
DimCount
ElementSize
LockCount
Bounds
TVarRecord
PRecord
RecInfo
TVarData
Reserved1
Reserved2
Reserved3
VSmallInt
VInteger
VSingle
VDouble
VCurrency
VOleStr
VDispatch
VError
VBoolean
VUnknown
VShortInt
VLongWord
VUInt32
VInt64
VUInt64
VString
VArray
VPointer
VUString
VRecord
VLongs
VWords
VBytes
RawData
TTypeKind
tkUnknown
tkInteger
tkChar
tkEnumeration
tkFloat
tkString
tkClass
tkMethod
tkWChar
tkLString
tkWString
tkVariant
tkArray
tkRecord
tkInterface
tkInt64
tkDynArray
tkUString
tkClassRef
tkPointer
tkProcedure
tkMRecord
System
TVarRec
VInteger
VBoolean
VExtended
VString
VPointer
VPChar
VObject
VClass
VWideChar
VPWideChar
VAnsiString
VCurrency
VVariant
VInterface
VWideString
VInt64
VUnicodeString
_Reserved1
TPtrWrapper
Create
AValue
Create
AValue
ToPointer
ToInteger
&op_Equality
&op_Inequality
TMarshal2
Create
InString
OutString
InOutString
AsAnsi
AsAnsi
AllocMem
ReallocMem
OldPtr
NewSize
FreeMem
StartIndex
StartIndex
StartIndex
StartIndex
StartIndex
StartIndex
StartIndex
StartIndex
StartIndex
StartIndex
StartIndex
StartIndex
StartIndex
StartIndex
StartIndex
StartIndex
ReadByte
ReadInt16
ReadInt32
ReadInt64
ReadPtr
WriteByte
WriteInt16
WriteInt32
WriteInt64
WritePtr
WriteByte
WriteInt16
WriteInt32
WriteInt64
WritePtr
FixString
UnfixString
UnsafeFixString
UnsafeAddrOf
AllocStringAsAnsi
AllocStringAsAnsi
CodePage
AllocStringAsUnicode
AllocStringAsAnsi
AllocStringAsAnsi
CodePage
AllocStringAsUtf8
AllocStringAsUtf8
ReadStringAsAnsi
ReadStringAsAnsi
CodePage
ReadStringAsUnicode
ReadStringAsUtf8
ReadStringAsAnsiUpTo
CodePage
MaxLen
ReadStringAsUnicodeUpTo
MaxLen
ReadStringAsUtf8UpTo
MaxLen
WriteStringAsAnsi
MaxCharsIncNull
WriteStringAsAnsi
MaxCharsIncNull
CodePage
WriteStringAsAnsi
MaxCharsIncNull
WriteStringAsAnsi
MaxCharsIncNull
CodePage
WriteStringAsUnicode
MaxCharsIncNull
WriteStringAsUnicode
MaxCharsIncNull
WriteStringAsUtf8
MaxCharsIncNull
WriteStringAsUtf8
MaxCharsIncNull
TMarshal
System
TTypeTable
PTypeTable@c@
PPackageTypeInfo
TPackageTypeInfo
TypeCount
TypeTable
UnitCount
UnitNames
TArray<System.Byte>
System
TArray<System.Char>
SystemX
TArray<System.Word>
System
TArray<System.ShortInt>
Systemx
TArray<System.SmallInt>
System
TArray<System.Integer>
System
TArray<System.Int64>
SystemX
TArray<System.TPtrWrapper>
System
PLibModule
TLibModule8
Instance
CodeInstance
DataInstance
ResInstance
TypeInfo
Reserved
PResStringRec
TResStringRec
Module
Identifier
TFloatSpecial
fsZero
fsNZero
fsDenormal
fsNDenormal
fsPositive
fsNegative
fsNInf
System
TExtended80Rec
aExtended80Frac
aExtended80Exp
Exponent
Fraction
Mantissa
SpecialType
BuildUp
SignFlag
Mantissa
Exponent
&op_Explicit
&op_Explicit
PExceptionRecord
TExceptionRecord
ExceptionCode
ExceptionFlags
ExceptionRecord
ExceptionAddress
NumberParameters
ExceptionInformation
ExceptAddr
ExceptObject
hAYAXYZ
hAYAXYZ
An unexpected memory leak has occurred.
The unexpected small block leaks are:
The sizes of unexpected leaked medium and large blocks are:
bytes:
Unknown
AnsiString
UnicodeString
Unexpected Memory Leak
AUWVSH
([^_A]
UAVAUWVSH
eX[^_A]A^]
UAVAUWVSH
eX[^_A]A^]
e([^_]
UAWAVWVSH
e([^_A^A_]
eH[^_]
UAUWVSH
e [^_A]]
UAUWVSH
E(H;E
e0[^_A]]
UAVAUWVS
[^_A]A^]
e([^_]
H3L$(
eX[^_]
eH[^_]
?^8U)zj
e8[^_]
e8[^_]
e8[^_]
eH[^_]
ex[^_]
UAVAUWVSH
e8[^_A]A^]
UAVAUWVSH
eH[^_A]A^]
UAVAUWVSH
eH[^_A]A^]
AUWVSH
8[^_A]
AVAUWVSH
0[^_A]A^
AVAUWVSH
[^_A]A^
AUWVSH
8[^_A]
eh[^_]
AVAUWVSH
0[^_A]A^
e8[^_]
UAUWVSH
[^_A]]
UAVAUWVSH
[^_A]A^]
GetLogicalProcessorInformation
UAVAUWVSH
eH[^_A]A^]
AUWVSH
([^_A]
E0H;EXu
M0H;H u
M0H;H u4H
E0H;EXu*H
AVAUWVSH
@[^_A]A^
H;H u)H
AUWVSH
([^_A]
E@HcMLH
EH;EL}<H
E@HcMHH
EH;EL|
UAUWVSH
[^_A]]
eH[^_]
AUWVSH
H[^_A]
e8[^_]
AUWVSH
([^_A]
UAUWVS
[^_A]]
UAUWVS
[^_A]]
AUWVSH
H[^_A]
UAUWVSH
e0[^_A]]
UAUWVSH
e0[^_A]]
AVAUWVSH
0[^_A]A^
AVAUWVSH
0[^_A]A^
AVAUWVSH
@[^_A]A^
AVAUWVSH
[^_A]A^
UAUWVSH
e0[^_A]]
AVAUWVSH
[^_A]A^
UAVAUWVSH
eH[^_A]A^]
AVAUWVSH
@[^_A]A^
AVAUWVSH
[^_A]A^
AVAUWVSH
[^_A]A^
UAUWVSH
e0[^_A]]
AVAUWVSH
0[^_A]A^
AVAUWVSH
0[^_A]A^
AVAUWVSH
[^_A]A^
AVAUWVSH
D$,}=H
0[^_A]A^
4sfA;4zu
AVAUWVSH
[^_A]A^
AVAUWVSH
[^_A]A^
UAUWVSH
eP[^_A]]
SystemX
AUWVSH
([^_A]
AVAUWVSH
[^_A]A^
AVAUWVSH
[^_A]A^
AUWVSH
([^_A]
AUWVSH
([^_A]
AVAUWVSH
@[^_A]A^
AVAUWVSH
@[^_A]A^
AVAUWVSH
[^_A]A^
AVAUWVSH
[^_A]A^
AVAUWVSH
[^_A]A^
}`H;EHt
E`H;EX}
E`H;EX}*H
E`H;EX}*H
EPH;E`~
E`H;EX~0H
EpH9]p
AVAUWVSH
0[^_A]A^
UAVAUWVSH
eX[^_A]A^]
UAVAUWVSH
eh[^_A]A^]
UAVAUWVSH
eX[^_A]A^]
zh-TW,zh-Hant,zh
es-ES_tradnl
nb-NO,nb,no
tg-Cyrl-TJ
az-Latn-AZ
uz-Latn-UZ
mn-MN,mn-Cyrl,mn
iu-Cans-CA
ha-Latn-NG
qps-ploc,en
qps-ploca,ja
zh-CN,zh-Hans,zh
nn-NO,nn,no
sr-Latn-CS
az-Cyrl-AZ
dsb-DE,dsb,hsb
uz-Cyrl-UZ
mn-Mong-CN
iu-Latn-CA
tzm-Latn-DZ
qps-plocm,ar
zh-HK,zh-Hant,zh
sr-Cyrl-CS
zh-SG,zh-Hans,zh
smj-NO,smj,se
zh-MO,zh-Hant,zh
bs-Latn-BA
smj-SE,smj,se
sr-Latn-BA
sma-NO,sma,se
sr-Cyrl-BA
sma-SE,sma,se
bs-Cyrl-BA
sms-FI,sms,se
sr-Latn-RS
smn-FI,smn,se
sr-Cyrl-RS
sr-Latn-ME
sr-Cyrl-ME
GetThreadPreferredUILanguages
SetThreadPreferredUILanguages
GetThreadUILanguage
UAUWVSH
E<;E8u
e@[^_A]]
UAVAUWVSH
[^_A]A^]
GetLongPathNameW
uSHcM@
uQHcM@
e8[^_]
PInstItemH
TInstItem.TBucketArray
TInstItem
FInstance
FBuckets
FMethodBuckets
Create
Destroy
RegisterWeakRef
Address
UnregisterWeakRef
Address
RegisterWeakMethodRef
Address
UnregisterWeakMethodRef
Address
TInstBucket
FCount
FInstItems
Initialize
Finalize
Unlock
AddInstItem
AIndex
FindInstItem
AInstance
AIndex
RemoveInstItem
AInstance
:TInstHashMap.:1x
TInstHashMap
FFreeInstItems
FTagCounter
FFreeCount
FInitLock
FBuckets
FInitialized
Destroy
Instance
Initialize
Finalize
RegisterWeakRef
Address
Instance
UnregisterWeakRef
Address
Instance
RegisterWeakMethodRef
Address
Instance
UnregisterWeakMethodRef
Address
Instance
IsRegistered
Instance
TArray<System.PPointer>
SystemH9@
TArray<System.PInstItem>
System
AUWVSH
([^_A]
AUWVSH
([^_A]
EhHcMHH
UhLcEHJ
MhHcUHH
AUWVSH
([^_A]
9M,}9H
U<HcE<H
EPHcM<H
BPHcJ<H
ULHcELH
E`HcMLH
B`HcJLH
ULHcELH
E`HcMLH
B`HcJLH
ULHcELH
E`HcMLH
B`HcJLH
ULHcELH
E`HcMLH
B`HcJLH
ULHcELH
E`HcMLH
B`HcJLH
eH[^_]
U8LcEp
U8LcEp
UAUWVSH
e`[^_A]]
e8[^_]
UAUWVSH
e`[^_A]]
eH[^_]
eX[^_]
eX[^_]
AUWVSH
H[^_A]
AWAVAUATVWUSH
t*IcG<A
x[]_^A\A]A^A_
fffff.
AWAVAUATVWUSH
ffffff.
r_ffffff.
8[]_^A\A]A^A_
AVVWSH
fffff.
([_^A^
AWAVAUATVWUSH
8[]_^A\A]A^A_
TArray<System.Cardinal>
System
TArray<System.string>
Systemp
TDuplicates
dupIgnore
dupAccept
dupError
System.Types
TDirection
FromBeginning
FromEnd
System.Types
Create
Create
&op_Equality
&op_Inequality
&op_Addition
&op_Subtraction
Distance
IsZero
Subtract
TSmallPoint
Create
Create
Create
&op_Equality
&op_Inequality
&op_Addition
&op_Subtraction
Distance
IsZero
Subtract
TPoint
Create
Create
&op_Equality
&op_Inequality
&op_Addition
&op_Subtraction
&op_Implicit
&op_Explicit
PointInCircle
Center
Radius
Distance
SetLocation
SetLocation
Offset
Offset
Subtract
IsZero
APoint
TSplitRectType
srLeft
srRight
srBottom
System.Types
Bottom
TopLeft
BottomRight
Create
Origin
Create
Origin
Height
Create
Bottom
Create
Normalize
Create
Normalize
&op_Equality
&op_Inequality
&op_Addition
&op_Multiply
NormalizeRect
IsEmpty
Contains
Contains
IntersectsWith
Intersect
Intersect
Points
Offset
Offset
SetLocation
SetLocation
Inflate
Inflate
CenterPoint
SplitRect
SplitType
SplitRect
SplitType
Percent
TWaitResult
wrSignaled
wrTimeout
wrAbandoned
wrError
wrIOCompletion
System.Types
TMultiWaitEvent.TWaiterFlag
Waiting
WaitAll
System.Types
TMultiWaitEvent.TWaiterFlags
:TMultiWaitEvent.TMultiWaiter.:1
FiredEvent
EventCount
FRefCount
FFlags
FStatus
TMultiWaitEvent.TMultiWaiter2
Create
Destroy
TMultiWaitEvent.TMultiWaiterp
System.Types
TMultiWaitEvent.TWaitInfo
FWaiter
FIndex
TMultiWaitEvent
Create
Destroy
WaitFor
Timeout
SetEvent
ResetEvent
WaitForAll
Events
Timeout
WaitForAny
Events
Timeout
WaitForAny
Events
Timeout
WaitForAny
Events
Timeout
TMultiWaitEvent
System.Types
IAsyncResult
System.Types
e8[^_]
e8[^_]
MH;M@~
ML;MD~
eX[^_]
AUWVSH
8[^_A]
UAUWVSH
e0[^_A]]
UAVAUWVSH
e8[^_A]A^]
E f+E(f
E"f+E*f
E8+E<;
TBorderIcon
biSystemMenu
biMinimize
biMaximize
biHelp
System.UITypes
TBorderIcons
TWindowState
wsNormal
wsMinimized
wsMaximized
System.UITypes
TEditCharCase
ecNormal
ecUpperCase
ecLowerCase
System.UITypes
TFontCharset
TFontPitch
fpDefault
fpVariable
fpFixed
System.UITypes
TFontQuality
fqDefault
fqDraft
fqProof
fqNonAntialiased
fqAntialiased
fqClearType
fqClearTypeNatural
System.UITypes
TFontStyle
fsBold
fsItalic
fsUnderline
fsStrikeOut
System.UITypes
TFontStyles
TFontName
TFontDataName|
TFontStylesBase
TCloseAction
caNone
caHide
caFree
caMinimize
System.UITypes
TMouseButton
mbLeft
mbRight
mbMiddle
System.UITypes
TMouseActivate
maDefault
maActivate
maActivateAndEat
maNoActivate
maNoActivateAndEat
System.UITypes
TTabOrder
TModalResult
TDragMode
dmManual
dmAutomatic
System.UITypes
TDragState
dsDragEnter
dsDragLeave
dsDragMove
System.UITypes
TDragKind
dkDrag
dkDock
System.UITypes
TAnchorKind
akLeft
akRight
akBottom
System.UITypes
TAnchors
TScrollCode
scLineUp
scLineDown
scPageUp
scPageDown
scPosition
scTrack
scBottom
scEndScroll
System.UITypes
TPrinterState
psNoHandle
psHandleIC
psHandleDC
System.UITypes
TPrinterOrientation
poPortrait
poLandscape
System.UITypes
TPrinterCapability
pcCopies
pcOrientation
pcCollation
System.UITypes
TPrinterCapabilities
TCursor
TColor
TAlphaColor
TImageIndex
TScrollStyle
ssNone
ssHorizontal
ssVertical
ssBoth
System.UITypes
PULONG
_LARGE_INTEGER
LowPart
HighPart
QuadPart
PListEntry
_LIST_ENTRY
TSecurityImpersonationLevel
SecurityAnonymous
SecurityIdentification
SecurityImpersonation
SecurityDelegation
Winapi.Windows
_SECURITY_QUALITY_OF_SERVICE
Length
ImpersonationLevel
ContextTrackingMode
EffectiveOnly
PRTLCriticalSection
PRTLCriticalSectionDebug
_RTL_CRITICAL_SECTION_DEBUG0
Type_18
CreatorBackTraceIndex
CriticalSection
ProcessLocksList
EntryCount
ContentionCount
_RTL_CRITICAL_SECTION(
DebugInfo
LockCount
RecursionCount
OwningThread
LockSemaphore
Reserved
HACCEL
HBITMAP
HBRUSH
HPALETTE
HMONITOR
PSecurityAttributes
_SECURITY_ATTRIBUTES
nLength
lpSecurityDescriptor
bInheritHandle
_FILETIME
dwLowDateTime
dwHighDateTime
_SYSTEMTIME
wMonth
wDayOfWeek
wMinute
wSecond
wMilliseconds
_TIME_ZONE_INFORMATION
StandardName
StandardDate
StandardBias
DaylightName
DaylightDate
DaylightBias
_WIN32_FIND_DATAWP
dwFileAttributes
ftCreationTime
ftLastAccessTime
ftLastWriteTime
nFileSizeHigh
nFileSizeLow
dwReserved0
dwReserved1
cFileName
cAlternateFileName
tagBITMAP
bmType
bmWidth
bmHeight
bmWidthBytes
bmPlanes
bmBitsPixel
bmBits
tagRGBQUAD
rgbBlue
rgbGreen
rgbRed
rgbReserved
tagBITMAPINFOHEADER(
biSize
biWidth
biHeight
biPlanes
biBitCount
biCompression
biSizeImage
biXPelsPerMeter
biYPelsPerMeter
biClrUsed
biClrImportant
PDeviceModeW
_devicemodeW
dmDeviceName
dmSpecVersion
dmDriverVersion
dmSize
dmDriverExtra
dmFields
dmOrientation
dmPaperSize
dmPaperLength
dmPaperWidth
dmScale
dmCopies
dmDefaultSource
dmPrintQuality
dmColor
dmDuplex
dmYResolution
dmTTOption
dmCollate
dmFormName
dmLogPixels
dmBitsPerPel
dmPelsWidth
dmPelsHeight
dmDisplayFlags
dmDisplayFrequency
dmICMMethod
dmICMIntent
dmMediaType
dmDitherType
dmICCManufacturer
dmICCModel
dmPanningWidth
dmPanningHeight
tagDIBSECTIONh
dsBmih
dsBitfields
dshSection
dsOffset
tagMSG0
message
wParam
lParam
tagACCEL
odSelected
odGrayed
odDisabled
odChecked
odFocused
odDefault
odHotLight
odInactive
odNoAccel
odNoFocusRect
odReserved1
odReserved2
odComboBoxEdit
Winapi.Windows
TOwnerDrawState
tagMOUSEINPUT
mouseData
dwFlags
dwExtraInfo
tagKEYBDINPUT
dwFlags
dwExtraInfo
tagHARDWAREINPUT
wParamL
wParamH
tagINPUT(
GESTURECONFIG
dwWant
dwBlock
hAYAXYZ
hAYAXYZ
hAYAXYZ
hAYAXYZ
hAYAXYZ
AVAUWVSH
[^_A]A^
AUWVSH
([^_A]
 !"#$%&'(!)*+,-./0'
56789:
;<<<<<<<<=========================
@ABCDEFGH
IJKLMNOPQRSTUVWXYZ[\]^_`a
bcd]]]]]]]]]]
e]]]]]]]]]]]]]]]
f]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]
gh]]ij
l]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]
mn]]]]]]]]]o]]]]]]]]]]]]]]]]]]]pqrstuvw''x]]]]]yz{]]]]]|}]]~
]]]]]]]]]]]]
]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]
]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]===============================================================================================================================================================================================================================================================
===============================================================================================================================================================================================================================================================
%&'()*+,-.
 !"#$
%&'()*+,
%&'()*+
FGHIJKLMN&OPQRS
TUVW'XYZ[\]^_`(
%&'()*+,
abc?defg
hij@klmn-opqArstu
b?????
abc?defg
abc?defg
hij@klmn-opqArstuBwxyz{|}~
abc?defg
%&'()*+,
%&'()*+,
@klmn-opqArstu
?333333
?333333
?UUUUUU
?UUUUUU
?333333
?UUUUUU
@UUUUUU
@w+AUUUUUU
eX[^_]
TFileName
TSearchRec
ExcludeAttr
FindHandle
FindData
TLangRec
FLocaleName
FSysLangs
TLanguages2
Create
Destroy
GetLocaleIDFromLocaleName
LocaleName
IndexOf
IndexOf
LocaleName
GetName
GetNameFromLocaleID
GetNameFromLCID
GetLocaleName
GetLocaleID
GetLocaleIDFromName
LocaleName
GetExt
TLanguages
System.SysUtils
NameFromLocaleID
NameFromLCID
LocaleName
LocaleID
LocaleIDFromName
FMessage
FHelpContext
FInnerException
FStackInfo
FAcquireInnerException
ExceptionC
Create
CreateFmt
CreateRes
CreateRes
ResStringRec
CreateResFmt
CreateResFmt
ResStringRec
CreateHelp
AHelpContext
CreateFmtHelp
AHelpContext
CreateResHelp
AHelpContext
CreateResHelp
ResStringRec
AHelpContext
CreateResFmtHelp
ResStringRec
AHelpContext
CreateResFmtHelp
AHelpContext
Destroy
GetBaseException
ToString
RaiseOuterException
ThrowOuterException
Exception
System.SysUtils
BaseException
HelpContext
InnerExceptionp
Messagep
StackTrace8
StackInfo
EArgumentException
EArgumentException
System.SysUtils
EArgumentOutOfRangeException
EArgumentOutOfRangeException
System.SysUtils
EArgumentNilException
EArgumentNilException
System.SysUtils
EPathTooLongException
EPathTooLongExceptionh
System.SysUtils
ENotSupportedException
ENotSupportedException
System.SysUtils
EDirectoryNotFoundException
EDirectoryNotFoundException
System.SysUtils
EFileNotFoundException
EFileNotFoundExceptionH
System.SysUtils
EListError
EListError
System.SysUtils
EInvalidOpException
EInvalidOpException
System.SysUtils
ENoConstructException
ENoConstructException
System.SysUtils
ExceptClass
EAbort
EAborth
System.SysUtils
AllowFree
EHeapException8
FreeInstance
EHeapException
System.SysUtils
EOutOfMemory
EOutOfMemory0
System.SysUtils
ErrorCode
EInOutError
EInOutError`
System.SysUtils
ExceptionRecord
EExternal
EExternal
System.SysUtils
EExternalException
EExternalException
System.SysUtils
EIntErrorp
EIntErrorH
System.SysUtils
EDivByZero
EDivByZerop
System.SysUtils
ERangeError
ERangeError
System.SysUtils
EIntOverflow
EIntOverflow
System.SysUtils
EMathError
EMathError
System.SysUtils
EInvalidOp
EInvalidOp0
System.SysUtils
EZeroDivide
EZeroDivide`
System.SysUtils
EOverflow
EOverflow
System.SysUtils
EUnderflow
EUnderflow
System.SysUtils
EInvalidPointer
EInvalidPointer
System.SysUtils
EInvalidCast
EInvalidCast
System.SysUtils
EConvertError
EConvertErrorP
System.SysUtils
EAccessViolation
EAccessViolation
System.SysUtils
EPrivilege
EPrivilege
System.SysUtils
EStackOverflow
EStackOverflow
System.SysUtils
EControlCP
EControlC(
System.SysUtils
EVariantError
EVariantErrorP
System.SysUtils
EPropReadOnly
EPropReadOnly
System.SysUtils
EPropWriteOnly
EPropWriteOnly
System.SysUtils
EAssertionFailed
EAssertionFailed
System.SysUtils
EAbstractError
EAbstractError0!C
System.SysUtils
EIntfCastError
EIntfCastErrorh"C
System.SysUtils
ErrorCode
EOSError
EOSError
System.SysUtils
ESafecallException
ESafecallException
System.SysUtils
EMonitor
EMonitor0&C
System.SysUtils
EMonitorLockException
EMonitorLockExceptionX'C
System.SysUtils
ENoMonitorSupportException
ENoMonitorSupportException
System.SysUtils
ENotImplemented
ENotImplemented
System.SysUtils
EObjectDisposed
EObjectDisposed(+C
System.SysUtils
EOperationCancelled
EOperationCancelled`,C
System.SysUtils
TArray<System.SysUtils.TLangRec>
SystemP
TFormatSettings.TEraInfo
EraName
EraOffset
EraStart
EraEnd
:TFormatSettings.:1`
:TFormatSettings.:2`
:TFormatSettings.:38
:TFormatSettings.:48
:TFormatSettings.:5
System.SysUtils0-C
TFormatSettings
CurrencyString
CurrencyFormat
CurrencyDecimals
DateSeparator
TimeSeparator
ListSeparator
ShortDateFormat
LongDateFormat
TimeAMString
TimePMString
ShortTimeFormat
LongTimeFormat
ShortMonthNames
LongMonthNames
ShortDayNames
LongDayNames
EraInfo
ThousandSeparator
DecimalSeparator
TwoDigitYearCenturyWindow
NegCurrFormat
NormalizedLocaleName
Create
Create
Locale
Create
LocaleName
Invariant
GetEraYearOffset
System.SysUtilsp
System.SysUtilsp
IReadWriteSync
System.SysUtils
PThreadInfo
TThreadInfo
ThreadID
Active
RecursionCount
FHashTable
TThreadLocalCounter3
Destroy
Thread
Delete
Thread
Thread
TThreadLocalCounter86C
System.SysUtils
FSentinel
FReadSignal
FWriteSignal
FWaitRecycle
FWriteRecursionCount
FWriterID
FRevisionLevel
$TMultiReadExclusiveWriteSynchronizer2
Create
Destroy
BeginRead
EndRead
BeginWrite
EndWrite
$TMultiReadExclusiveWriteSynchronizerp9C
System.SysUtils
RevisionLevel
TStringBuilder.TEnumerator
FEndPtr
Initialize
ABuilder
GetCurrent
MoveNext
FLength
FMaxCapacity
TStringBuilder2
Create
Create
aCapacity
Create
Create
aCapacity
aMaxCapacity
Create
aCapacity
Create
StartIndex
Length
aCapacity
Append
Append
Append
Append
Append
Append
Append
Append
Append
Append
Append
Append
Append
Append
Append
Append
Append
Append
Append
RepeatCount
Append
StartIndex
CharCount
Append
StartIndex
AppendFormat
Format
AppendLine
AppendLine
CopyTo
SourceIndex
Destination
DestinationIndex
EnsureCapacity
aCapacity
Equals
StringBuilder
Insert
Insert
Insert
Insert
Insert
Insert
Insert
Insert
Insert
Insert
Insert
Insert
Insert
Insert
Insert
Insert
Insert
Insert
startIndex
charCount
Remove
StartIndex
RemLength
Replace
OldChar
NewChar
Replace
OldValue
NewValue
Replace
OldChar
NewChar
StartIndex
Replace
OldValue
NewValue
StartIndex
ToString
ToString
UpdateCapacity
ToString
StartIndex
StrLength
GetEnumerator
GetChars
SetChars
TStringBuilderX>C
System.SysUtils
Capacity
Length
MaxCapacity
EEncodingError
EEncodingError
System.SysUtils
IEnumerable<System.string>
System
FIsSingleByte
FMaxCharSize
TEncoding1
Convert
Source
Destination
Convert
Source
Destination
Convert
Source
Destination
StartIndex
Convert
Source
Destination
StartIndex
FreeEncodings
IsStandardEncoding
AEncoding
GetBufferEncoding
Buffer
AEncoding
GetBufferEncoding
Buffer
AEncoding
ADefaultEncoding
GetByteCount
GetByteCount
GetByteCount
GetByteCount
CharIndex
CharCount
GetByteCount
CharIndex
CharCount
GetByteCount
GetByteCount
CharIndex
CharCount
GetByteCount
CharIndex
CharCount
StringBaseIndex
GetBytes
GetBytes
GetBytes
GetBytes
CharIndex
CharCount
GetBytes
CharIndex
CharCount
GetBytes
CharIndex
CharCount
ByteIndex
GetBytes
CharIndex
CharCount
ByteIndex
GetBytes
GetBytes
CharIndex
CharCount
ByteIndex
GetBytes
CharIndex
CharCount
ByteIndex
StringBaseIndex
GetCharCount
GetCharCount
GetCharCount
ByteIndex
ByteCount
GetCharCount
ByteIndex
ByteCount
GetChars
GetChars
GetChars
ByteIndex
ByteCount
GetChars
ByteIndex
ByteCount
GetChars
ByteIndex
ByteCount
CharIndex
GetChars
ByteIndex
ByteCount
CharIndex
GetEncoding
CodePage
GetEncoding
EncodingName
GetMaxByteCount
CharCount
GetMaxCharCount
ByteCount
GetPreamble
GetString
GetString
ByteIndex
ByteCount
GetString
TEncodingHZC
System.SysUtils
CodePagep
EncodingNamep
MIMEName
IsSingleByte
FCodePage
FMBToWCharFlags
FWCharToMBFlags
TMBCSEncoding2
Create
Create
CodePage
Create
CodePage
MBToWCharFlags
WCharToMBFlags
GetMaxByteCount
CharCount
GetMaxCharCount
ByteCount
GetPreamble
TMBCSEncoding@rC
System.SysUtils
TUTF7Encoding2
Create
GetMaxByteCount
CharCount
GetMaxCharCount
ByteCount
TUTF7Encoding
System.SysUtils
TUTF8Encoding2
Create
GetMaxByteCount
CharCount
GetMaxCharCount
ByteCount
GetPreamble
TUTF8EncodingpyC
System.SysUtils
TUnicodeEncoding2
Create
GetMaxByteCount
CharCount
GetMaxCharCount
ByteCount
GetPreamble
TUnicodeEncoding
System.SysUtils
TBigEndianUnicodeEncoding1
GetPreamble
TBigEndianUnicodeEncoding
System.SysUtils
TMarshaller.PDisposeRecx
TMarshaller.TDisposeProc\
TMarshaller.TDisposeRec
TMarshaller.IDisposer
System.SysUtils
FInline
FOverflow
FCount
TMarshaller.TDisposer3
Destroy
TMarshaller.TDisposer
System.SysUtils
TMarshaller
FDisposer
InString
MaxLen
OutString
InOutString
MaxLen
AsAnsi
AsAnsi
AsAnsi
CodePage
AsAnsi
CodePage
AsUtf8
AsUtf8
AllocMem
ReallocMem
OldPtr
NewSize
FixString
UnsafeFixString
AllocStringAsAnsi
AllocStringAsAnsi
CodePage
AllocStringAsUtf8
AllocStringAsUnicode
/TArray<System.SysUtils.TMarshaller.TDisposeRec>
Systemx
System.SysUtils
H9EPuV
e([^_]
UAUWVSH
e [^_A]]
AUWVSH
8[^_A]
AUWVSH
8[^_A]
EhHcMDf
<H v%H
EhHcM@f
EhHcMDf
ED;E@~
EhHcM@f
M@D+MDA
UAUWVSH
e`[^_A]]
AVAUWVSH
f90u`H
0[^_A]A^
AVAUWVSH
0[^_A]A^
e8[^_]
AUWVSH
([^_A]
AUWVSH
([^_A]
UAUWVSH
e [^_A]]
TStrData
System.SysUtilsX
System.SysUtilsX
eH[^_]
AUWVSH
8[^_A]
AUWVSH
([^_A]
AVAUWVSH
[^_A]A^
EXHcM4f
EXHcM4f
<H\u H
EXHcM4f
AVAUWVSH
[^_A]A^
AVAUWVSH
[^_A]A^
AVAUWVSH
0[^_A]A^
ex[^_]
AUWVSH
8[^_A]
AUWVSH
8[^_A]
UAUWVS
[^_A]]
UAVAUWVSH
e8[^_A]A^]
eH[^_]
e([^_]
CP;CH|
E(+HPH
e([^_]
e([^_]
UAUWVSH
e@[^_A]]
e8[^_]
AVAUWVSH
[^_A]A^
UAUWVSH
fkE,dfD
E.fD;E,r
E,fD)E.f
e0[^_A]]
System.SysUtilsX
UAUWVSH
e [^_A]]
UAUWVSH
eP[^_A]]
AVAUWVSH
[^_A]A^
AUWVSH
([^_A]
UAUWVSH
e`[^_A]]
E4;E8}v
E4;E8}
eH[^_]
AVAUWVSH
[^_A]A^
UAUWVSH
eP[^_A]]
eX[^_]
:TInternalEraInfoRecord.:1
System.SysUtils0-C
TInternalEraInfoRecord
EraCount
EraInfo
E`HcMtH
Et;E\~
E`HcMtH
E`HcMtH
AVAUWVSH
0[^_A]A^
System.SysUtils
e8[^_]
e8[^_]
AVAUWVSH
[^_A]A^
UAUWVSH
e@[^_A]]
System.SysUtils
PUnitHashEntry
TUnitHashEntry(
LibModule
UnitName
DupsAllowed
FullHash
TModuleInfo
Validated
UnitHashArray
&TArray<System.SysUtils.TUnitHashEntry>(
System
UAUWVSH
[^_A]]
AVAUWVSH
0[^_A]A^
AUWVSH
([^_A]
AUWVSH
([^_A]
AUWVSH
([^_A]
UAUWVSH
e0[^_A]]
9C@tL@
AUWVSH
([^_A]
AUWVSH
([^_A]
UAVAUWVSH
eH[^_A]A^]
UAVAUWVSH
eH[^_A]A^]
UAUWVSH
[^_A]]
UAVAUWVSH
eX[^_A]A^]
UAVAUWVSH
eX[^_A]A^]
UAVAUWVSH
eH[^_A]A^]
AUWVSH
Antivirus Signature
Bkav Clean
Elastic malicious (high confidence)
MicroWorld-eScan Trojan.Agent.FGHR
CMC Clean
CAT-QuickHeal Clean
ALYac Trojan.Agent.FGHR
Cylance Clean
VIPRE Clean
AegisLab Clean
Sangfor Clean
K7AntiVirus Clean
BitDefender Trojan.Agent.FGHR
K7GW Clean
CrowdStrike win/malicious_confidence_80% (W)
BitDefenderTheta Clean
Cyren W64/Mekotio.H.gen!Eldorado
Symantec Trojan.Gen.MBT
ESET-NOD32 a variant of Win64/Spy.Mekotio.P
Baidu Clean
APEX Malicious
Avast Clean
ClamAV Clean
Kaspersky Clean
Alibaba TrojanSpy:Win64/Mekotio.4d347b49
NANO-Antivirus Clean
ViRobot Clean
Tencent Clean
Ad-Aware Trojan.Agent.FGHR
TACHYON Clean
Comodo Clean
F-Secure Clean
DrWeb Trojan.Mekotio.23
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition BehavesLike.Win64.Softcnapp.wc
FireEye Generic.mg.4ea2c49920dfc1db
Emsisoft Trojan.Agent.FGHR (B)
Ikarus Trojan.Win64.Spy
GData Trojan.Agent.FGHR
Jiangmin Clean
Webroot Clean
Avira Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Trojan.Heur!.02296222
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Microsoft Clean
Cynet Clean
AhnLab-V3 Trojan/Win.Agent.R418241
Acronis Clean
McAfee Artemis!4EA2C49920DF
MAX malware (ai score=85)
VBA32 Clean
Malwarebytes Malware.AI.4211687409
Panda Clean
Zoner Clean
TrendMicro-HouseCall Clean
Rising Spyware.Mekotio!8.F5DF (CLOUD)
Yandex Clean
SentinelOne Clean
eGambit Clean
Fortinet W64/Mekotio.P!tr.spy
Qihoo-360 Clean
Paloalto Clean
MaxSecure Clean
No IRMA results available.