DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.3145312adc5ea9f7006b8a9e81dda860.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.3145312adc5ea9f7006b8a9e81dda860.dll
Resource
win10v2004-20231020-en
Target
NEAS.3145312adc5ea9f7006b8a9e81dda860.exe
Size
4.6MB
MD5
3145312adc5ea9f7006b8a9e81dda860
SHA1
28b312581288e04b8e1132e3cc86b979b575f670
SHA256
c9e8e405920b222bb41dec3fd2a3458a636b9dff53ba0f9707d141a9309fb67d
SHA512
6675a4c4093383f0d9488f2dd697e01830c3af9d93993e4dfed3dd0f3bc4c4be32bc57d523afa069fb9f03aece765d14f1106ee9c5d70afd384187d8488664a9
SSDEEP
98304:Tdg8T/URuQ9RhFZBcs5UhscvCMDUIXxNfly6o75dhFpNR1D0pN7s6vwEYsg0FBDq:xg8T/Ul9P7Bc1sNMDpXxNo2v
Checks for missing Authenticode signature.
resource |
---|
NEAS.3145312adc5ea9f7006b8a9e81dda860.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
GetUserNameExW
ceil
_CIsin
_CIcos
_CIatan2
_hypot
toupper
swscanf
wcstoul
_ultow
_itow
_wtol
iswctype
wctomb
strtod
_time64
_localtime64
_ltow
iswspace
_fcvt
_CIfmod
_wcsupr
modf
__RTDynamicCast
wcsncpy
wcsstr
strchr
??0exception@std@@QAE@ABQBDH@Z
_wtoi
memset
_CxxThrowException
memcpy_s
__CxxFrameHandler3
wcstok
free
malloc
_recalloc
swprintf_s
tolower
_invalid_parameter_noinfo
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
_CIpow
_CIexp
rand
srand
_CIacos
_CIasin
_CItan
realloc
calloc
_wcsnicmp
memmove_s
wcstod
wcsncmp
_wcslwr
wcsrchr
iswdigit
_wcsicmp
memcpy
wcscpy_s
wcsncpy_s
wcscat_s
_resetstkoflw
floor
memmove
_CIsqrt
_vsnprintf
vswprintf_s
vsprintf_s
fclose
fwprintf_s
fopen_s
_encode_pointer
_malloc_crt
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_crt_debugger_hook
_onexit
_lock
__dllonexit
_unlock
_except_handler4_common
?terminate@@YAXXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABV01@@Z
_vsnwprintf
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
?find_first_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHIIPB_W@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHPB_W@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WI@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?find_first_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?find_last_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@II@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?_Myptr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEPA_WXZ
?size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?at@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?empty@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE_NXZ
??$?O_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?insert@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IABV12@II@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IIABV12@II@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@I_W@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@N@Z
??0?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z
?str@?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??_D?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHABV12@@Z
?setf@ios_base@std@@QAEHHH@Z
?deallocate@?$allocator@_W@std@@QAEXPA_WI@Z
??0?$allocator@_W@std@@QAE@XZ
?allocate@?$allocator@_W@std@@QAEPA_WI@Z
?max_size@?$allocator@_W@std@@QBEIXZ
??0?$allocator@_W@std@@QAE@ABV01@@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
?insert@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IPB_WI@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IIPB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@II@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?setf@ios_base@std@@QAEHH@Z
?precision@ios_base@std@@QAEHH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_WABV10@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?find_first_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?data@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@_W@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEAB_WI@Z
?at@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEAB_WI@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z
?insert@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IPB_W@Z
?length@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
MultiByteToWideChar
lstrlenA
EnterCriticalSection
LeaveCriticalSection
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcmpW
MulDiv
RaiseException
GetCurrentThreadId
GetTickCount
GlobalFree
GetVersionExW
GlobalHandle
GetVersionExA
WideCharToMultiByte
DeleteFileW
InitializeCriticalSection
DeleteCriticalSection
FindResourceExW
lstrcmpiW
FormatMessageW
lstrcmpiA
LoadLibraryExW
DisableThreadLibraryCalls
GetUserDefaultUILanguage
GetProcessHeap
HeapFree
HeapSize
HeapValidate
HeapAlloc
HeapReAlloc
VirtualAlloc
TlsSetValue
InitializeCriticalSectionAndSpinCount
TlsAlloc
GetSystemDefaultLCID
VirtualFree
TlsGetValue
TlsFree
GetACP
GetSystemDefaultLangID
IsValidLocale
WaitForSingleObject
ReleaseMutex
CloseHandle
GetSystemTimeAsFileTime
WriteFile
SetFileAttributesW
FlushFileBuffers
ReadFile
ResumeThread
CreateThread
GetFileType
CreateFileW
GetLocaleInfoW
ExpandEnvironmentStringsW
GetProcessTimes
CreateMutexA
OpenMutexA
CreateSemaphoreA
CreateEventA
GetShortPathNameA
GetModuleFileNameA
GetUserDefaultLangID
GetOEMCP
LoadLibraryExA
GetSystemDirectoryW
GetTimeZoneInformation
GetDiskFreeSpaceExW
GetSystemInfo
GetUserDefaultLCID
LocalFree
LocalAlloc
CreateProcessA
Sleep
TerminateProcess
GetCurrentProcessId
SetEvent
IsDBCSLeadByte
GetStringTypeExW
IsValidCodePage
FileTimeToSystemTime
GetSystemTime
CompareStringW
CreateDirectoryW
GetCurrentThread
GlobalMemoryStatus
ReleaseSemaphore
IsProcessorFeaturePresent
EnumUILanguagesW
EnumSystemLocalesW
EnumCalendarInfoExW
GetCalendarInfoW
EnumTimeFormatsW
EnumDateFormatsExW
VirtualProtect
QueryPerformanceCounter
GetTempFileNameA
GetTempPathA
InterlockedExchange
InterlockedCompareExchange
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryW
GetProcAddress
FreeLibrary
GetCurrentProcess
GetLocaleInfoA
GetThreadLocale
HeapDestroy
GetDateFormatA
GetDateFormatW
GetTimeFormatA
LoadLibraryA
GetTimeFormatW
GetCurrencyFormatA
GetCurrencyFormatW
OutputDebugStringW
GetStringTypeW
LCMapStringW
GlobalSize
CreateEventW
GetStdHandle
OutputDebugStringA
EnumCalendarInfoA
EnumDateFormatsW
FlushInstructionCache
lstrlenW
GetModuleHandleA
GetModuleHandleW
GetFileAttributesW
GetVersion
SizeofResource
LockResource
LoadResource
FindResourceW
GetLastError
SetLastError
GetModuleFileNameW
SysAllocStringLen
SysAllocString
SysStringByteLen
VariantInit
VariantClear
OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi
SysAllocStringByteLen
SysReAllocStringLen
OleTranslateColor
VarBstrCat
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
OleCreatePropertyFrame
SafeArrayAccessData
SafeArrayDestroy
SafeArrayUnaccessData
SafeArrayGetLBound
SysStringLen
VariantChangeType
SysFreeString
SafeArrayGetUBound
SafeArrayGetElement
SafeArrayCreateVector
OleCreatePictureIndirect
VarBstrCmp
FreePropVariantArray
StringFromCLSID
CoUninitialize
CreateStreamOnHGlobal
WriteClassStg
ReadClassStg
CoGetTreatAsClass
OleLoad
StgOpenStorageOnILockBytes
PropVariantClear
CreateILockBytesOnHGlobal
ReadClassStm
CoCreateInstance
StgOpenStorage
OleSaveToStream
WriteClassStm
CreateOleAdviseHolder
CreateDataAdviseHolder
OleRegGetMiscStatus
OleRegGetUserType
OleRegEnumVerbs
ReleaseStgMedium
CoTaskMemRealloc
CoDisconnectObject
CoTaskMemFree
RevokeDragDrop
RegisterDragDrop
CoTaskMemAlloc
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleLockRunning
CoCreateGuid
StringFromGUID2
OleUninitialize
OleInitialize
CoInitializeEx
LresultFromObject
CreateStdAccessibleObject
EnumDisplayMonitors
GetMonitorInfoA
GetKeyboardLayout
GetMenuCheckMarkDimensions
EqualRect
SetWindowRgn
NotifyWinEvent
RemoveMenu
DestroyCursor
GetKeyState
DialogBoxIndirectParamW
WindowFromPoint
GetScrollInfo
SetScrollInfo
IsWindowVisible
IntersectRect
SystemParametersInfoA
LoadBitmapW
LoadMenuW
GetSubMenu
TrackPopupMenu
GetUpdateRgn
GetKeyboardState
CreateDialogIndirectParamW
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
GetMessageW
IsDialogMessageW
DispatchMessageW
PostQuitMessage
GetCursorPos
ShowCursor
SetRect
FrameRect
GetDlgCtrlID
KillTimer
SetTimer
UnionRect
OffsetRect
SetRectEmpty
CheckRadioButton
IsDlgButtonChecked
CheckDlgButton
SetDlgItemTextW
GetDlgItemTextW
DrawFrameControl
GetActiveWindow
SystemParametersInfoW
SendDlgItemMessageW
EndDialog
DialogBoxParamW
PtInRect
GetCapture
DrawFocusRect
CreateAcceleratorTableW
GetFocus
DestroyAcceleratorTable
GetDesktopWindow
BeginPaint
EndPaint
FillRect
ReleaseCapture
GetClassNameW
IsChild
SetCapture
InvalidateRgn
InvalidateRect
ScreenToClient
ClientToScreen
MoveWindow
CharNextW
RegisterWindowMessageW
LoadCursorW
CreateWindowExW
RegisterClassExW
SetWindowContextHelpId
MapDialogRect
GetMenuInfo
GetMenuItemID
SetMenuItemInfoW
MapWindowPoints
MessageBoxW
PostMessageW
IsWindow
SetParent
GetParent
GetWindow
SetFocus
EnableWindow
ShowWindow
SetWindowPos
SendMessageW
DestroyWindow
GetWindowLongW
DefWindowProcW
CreatePopupMenu
SetMenuInfo
AppendMenuW
TrackPopupMenuEx
DestroyMenu
CallWindowProcW
RedrawWindow
GetClientRect
GetWindowRect
GetSysColorBrush
GetMenuItemCount
GetSysColor
GetDC
ReleaseDC
DrawTextW
DrawEdge
GetSystemMetrics
InflateRect
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
LoadStringW
GetDlgItem
SetWindowLongW
SetCursor
GetClassInfoExW
PeekMessageW
DestroyIcon
UnregisterClassA
ScrollDC
CreateIconIndirect
GetUserNameW
RegQueryValueExW
RegOpenKeyExW
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteValueA
RegEnumValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumKeyW
RegEnumValueW
GetLengthSid
AddAccessAllowedAce
AddAccessDeniedAce
InitializeAcl
AllocateAndInitializeSid
CopySid
GetTokenInformation
OpenProcessToken
FreeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidA
CheckTokenMembership
IsValidSid
RegQueryValueExA
OpenThreadToken
RegCloseKey
SHGetSpecialFolderPathW
DragQueryFileW
ShellExecuteExW
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
GetTextExtentPoint32W
Polygon
BitBlt
SetBkMode
CreateSolidBrush
CreatePen
SelectObject
Rectangle
DeleteObject
GetObjectW
GetStockObject
GetBkColor
SetTextColor
CreateFontIndirectW
SetBkColor
CreateBrushIndirect
LineTo
MoveToEx
GetTextMetricsW
SetViewportOrgEx
IntersectClipRect
CreateICW
FillRgn
CreateRectRgn
CreateFontIndirectA
GetObjectType
RealizePalette
SelectPalette
SetROP2
CreatePalette
CreateRectRgnIndirect
DeleteMetaFile
CloseMetaFile
RestoreDC
SetWindowExtEx
SetWindowOrgEx
SaveDC
CreateMetaFileW
CreateDCW
SetMapMode
LPtoDP
GetTextFaceW
GetTextMetricsA
GetOutlineTextMetricsA
CreateDCA
GetObjectA
TranslateCharsetInfo
GetTextCharset
GetCurrentObject
GetTextFaceA
GetDeviceCaps
CreateDIBSection
GetViewportOrgEx
CreateEnhMetaFileA
CloseEnhMetaFile
GetEnhMetaFileHeader
SetWinMetaFileBits
SetEnhMetaFileBits
DeleteEnhMetaFile
SetTextAlign
StretchBlt
GetPaletteEntries
RemoveFontResourceExW
AddFontResourceExW
GetFontData
GetOutlineTextMetricsW
GetTextCharsetInfo
GetCharABCWidthsW
GetEnhMetaFileBits
StretchDIBits
CreateBitmap
wnsprintfA
SHCreateStreamOnFileW
SHRegSetUSValueW
SHRegGetUSValueW
SHDeleteValueW
SHGetValueW
SHSetValueW
PathCreateFromUrlW
UrlIsW
UrlGetPartW
PathIsURLW
UrlCombineW
PathIsRelativeW
SHRegGetBoolUSValueW
UrlCanonicalizeW
PathFileExistsW
ClosePrinter
OpenPrinterW
ord203
EnumPrintersW
DeviceCapabilitiesW
DocumentPropertiesW
UuidCreate
IsValidURL
URLDownloadToCacheFileW
HlinkSimpleNavigateToString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ