Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-03_0fc76a910eb62edbd75961702f75559c_mafia.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-03_0fc76a910eb62edbd75961702f75559c_mafia.exe
Resource
win10v2004-20231222-en
Target
2024-02-03_0fc76a910eb62edbd75961702f75559c_mafia
Size
6.4MB
MD5
0fc76a910eb62edbd75961702f75559c
SHA1
6182137afcc4578a636f2ceb89554c96a26fe4ff
SHA256
977935b874ab8ca4410e461e3958629b12c55da3e039eb5117bb7acf447dbdab
SHA512
182332327561f2984f4d92dcfa211adf00f20aaf086ab7738bcd2aaed82930e1475af1872e7861e18f0e8bf4e09c42298301404dff7e04902a63ae801249701f
SSDEEP
98304:mTGNoHkfUMwUTtDNdAYA4Y7Z8h2SQUiAmtEWz3kUsx5dlfpInwnjqv6Jfe2uX4Ib:YqgUTtDNdAYFlG5gR1KwWyEj
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
D:\jenkins\workspace\ArcAsia_release\client\Release\Arc.pdb
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
SetStdHandle
SetCurrentDirectoryW
GetCurrentDirectoryW
GetConsoleCP
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
IsValidCodePage
GetOEMCP
GetACP
GetLocaleInfoW
FatalAppExitA
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
UnhandledExceptionFilter
GetCPInfo
LCMapStringW
GetNumberOfConsoleInputEvents
PeekConsoleInputA
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
SetFileAttributesA
GetFileInformationByHandle
FindFirstFileExA
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
SetConsoleCtrlHandler
GetTimeZoneInformation
VirtualQuery
VirtualProtect
GetStartupInfoW
HeapSetInformation
GetCommandLineW
ExitThread
RtlUnwind
DecodePointer
EncodePointer
InterlockedPopEntrySList
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
InterlockedPushEntrySList
SetFileTime
GetFileTime
SetEnvironmentVariableA
LoadLibraryExA
GetModuleFileNameA
CompareFileTime
SetCurrentDirectoryA
RemoveDirectoryA
MoveFileA
CreateDirectoryA
GetWindowsDirectoryA
GetSystemDirectoryA
GetWindowsDirectoryW
GetShortPathNameA
GetCurrentDirectoryA
SearchPathA
GetTempFileNameA
GetTempFileNameW
LocalAlloc
SearchPathW
FindCloseChangeNotification
FindFirstChangeNotificationA
FindFirstChangeNotificationW
CreateProcessA
ExpandEnvironmentStringsW
VerifyVersionInfoW
lstrcmpA
GetDriveTypeW
GetVolumeInformationW
CreateThread
CopyFileW
GlobalHandle
GlobalFree
GetSystemTime
GetSystemDefaultLangID
GetUserDefaultUILanguage
DuplicateHandle
SetFileAttributesW
GlobalMemoryStatusEx
IsWow64Process
WriteProcessMemory
VirtualProtectEx
SetUnhandledExceptionFilter
SetErrorMode
DeviceIoControl
RemoveDirectoryW
GetFileSizeEx
SetFilePointerEx
QueryDosDeviceW
PulseEvent
ReleaseSemaphore
CreateSemaphoreW
IsDebuggerPresent
GetExitCodeThread
OpenEventW
QueueUserWorkItem
GetOverlappedResult
ConnectNamedPipe
DisconnectNamedPipe
CreateNamedPipeW
FlushConsoleInputBuffer
FindFirstFileA
FindNextFileA
GlobalMemoryStatus
GetLogicalDriveStringsA
PeekNamedPipe
VerSetConditionMask
VerifyVersionInfoA
SleepEx
GetStdHandle
GetFileType
GetVersion
IsValidLocale
ResetEvent
WaitForMultipleObjects
DeleteFileA
AreFileApisANSI
GetTempPathA
GetVersionExA
GetFileAttributesExW
GetSystemInfo
GetDiskFreeSpaceA
CreateFileMappingA
LoadLibraryA
GetDiskFreeSpaceW
LockFileEx
HeapSize
GetTempPathW
FlushFileBuffers
GetFileAttributesW
HeapValidate
HeapCreate
GetFileAttributesA
HeapDestroy
FormatMessageW
FormatMessageA
GetProcessHeap
UnlockFileEx
LockFile
UnlockFile
HeapFree
QueryPerformanceCounter
WideCharToMultiByte
GetModuleHandleExW
SystemTimeToFileTime
HeapAlloc
SetEndOfFile
TryEnterCriticalSection
SetFilePointer
HeapCompact
CreateFileA
HeapReAlloc
GetFullPathNameA
GetFullPathNameW
GetPrivateProfileSectionNamesW
GetPrivateProfileSectionW
OutputDebugStringA
InterlockedExchangeAdd
InterlockedCompareExchange
GetLogicalDrives
InitializeCriticalSection
GetSystemTimeAsFileTime
UnmapViewOfFile
CreateMutexW
MapViewOfFile
CreateFileMappingW
ReleaseMutex
GetEnvironmentVariableW
GetExitCodeProcess
SetEnvironmentVariableW
TerminateProcess
GetSystemDirectoryW
OpenProcess
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetProcessId
GetLogicalDriveStringsW
WritePrivateProfileSectionW
LocalFree
GetPrivateProfileIntW
SetEvent
FindResourceExW
CreateEventW
InterlockedExchange
GetCurrentProcessId
FindFirstFileW
FindNextFileW
FindClose
GetTickCount
CreateDirectoryW
IsBadReadPtr
GetLocalTime
DeleteFileW
GetVersionExW
LockResource
lstrcpynW
CreateProcessW
GlobalReAlloc
RaiseException
lstrcpynA
WaitForSingleObject
CloseHandle
ResumeThread
LoadLibraryW
OutputDebugStringW
TerminateThread
GetPrivateProfileStringW
WritePrivateProfileStringW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
GlobalAlloc
GlobalLock
GlobalUnlock
GetModuleFileNameW
MulDiv
lstrcmpW
SetLastError
lstrcmpiW
InterlockedDecrement
InterlockedIncrement
GetModuleHandleW
GetProcAddress
lstrlenW
GetCurrentThreadId
MoveFileW
GetDiskFreeSpaceExW
MoveFileExW
WriteFile
lstrlenA
ReadFile
GetFileSize
CreateFileW
WriteConsoleW
GetModuleHandleA
CompareStringW
ExitProcess
Sleep
GetCurrentProcess
FlushInstructionCache
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
LeaveCriticalSection
EnterCriticalSection
ExpandEnvironmentStringsA
LocalFileTimeToFileTime
MessageBoxA
GetProcessWindowStation
GetUserObjectInformationW
wsprintfW
FindWindowExW
FindWindowW
EndPaint
BeginPaint
GetDesktopWindow
DestroyAcceleratorTable
GetWindow
GetFocus
SetFocus
CreateAcceleratorTableW
MessageBoxW
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
RegisterWindowMessageW
SetTimer
KillTimer
SendMessageTimeoutW
DialogBoxParamW
CreateDialogIndirectParamW
MsgWaitForMultipleObjectsEx
DialogBoxIndirectParamW
SetRectEmpty
ExitWindowsEx
UnregisterClassA
CharNextA
CharPrevA
CharToOemA
CallWindowProcW
FillRect
SetForegroundWindow
PtInRect
GetWindowRect
ReleaseCapture
MapDialogRect
EndDialog
SetWindowContextHelpId
SetCursor
GetIconInfo
MapWindowPoints
GetMonitorInfoW
MonitorFromWindow
IsDialogMessageW
GetNextDlgTabItem
GetMenuInfo
IsMenu
SetPropW
GetPropW
CopyRect
GetMenuItemInfoW
RemovePropW
DrawTextW
SetWindowLongW
GetWindowLongW
ShowWindow
IsWindow
SendMessageW
GetClassNameW
PostMessageW
PostMessageA
GetClassInfoExW
LoadCursorW
DestroyWindow
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
CharNextW
DefWindowProcW
RegisterClassExW
CreateWindowExW
GetSysColor
CreateDialogParamW
MoveWindow
SetWindowPos
GetClientRect
ClientToScreen
ScreenToClient
GetDC
ReleaseDC
InvalidateRect
InvalidateRgn
GetCursorPos
TrackPopupMenu
RedrawWindow
SetCapture
IsChild
GetParent
LoadImageW
SetActiveWindow
InsertMenuItemW
RemoveMenu
GetMenuItemCount
CheckMenuItem
PostQuitMessage
EnableMenuItem
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
LoadIconW
IsIconic
GetSystemMetrics
SetWindowRgn
UpdateWindow
GetWindowPlacement
DrawTextExW
MonitorFromPoint
GetKeyState
IsWindowEnabled
SystemParametersInfoW
TrackMouseEvent
GetComboBoxInfo
RegisterClipboardFormatW
GetDlgCtrlID
IntersectRect
SetRect
IsWindowVisible
SetScrollPos
EnableWindow
SetWindowsHookExW
CallNextHookEx
GetWindowDC
OffsetRect
GetDlgItem
CreateDCA
GetObjectA
GetBitmapBits
SetDIBColorTable
CreateDIBSection
CreateRoundRectRgn
CreatePen
Rectangle
CombineRgn
CreateRectRgn
SetBkColor
GetTextExtentPoint32W
SetBkMode
SetTextColor
CreateFontW
GetStockObject
GetObjectW
CreateSolidBrush
GetDeviceCaps
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
SelectObject
DeleteObject
GetOpenFileNameW
GetSaveFileNameW
RegQueryValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
OpenProcessToken
DuplicateTokenEx
IsTextUnicode
RegOpenKeyW
DeregisterEventSource
ReportEventA
RegisterEventSourceA
CryptEnumProvidersA
CryptReleaseContext
CryptDestroyKey
CryptGetProvParam
CryptAcquireContextA
CryptGetUserKey
CryptExportKey
CryptDestroyHash
CryptSignHashA
CryptSetHashParam
CryptCreateHash
CryptDecrypt
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
LookupPrivilegeValueW
AdjustTokenPrivileges
GetTokenInformation
GetNamedSecurityInfoW
LookupSecurityDescriptorPartsW
RegCreateKeyW
SHGetMalloc
Shell_NotifyIconW
SHFileOperationW
SHChangeNotify
SHGetSpecialFolderLocation
SHGetPathFromIDListW
DragQueryFileW
SHGetFileInfoW
ShellExecuteW
ShellExecuteExW
SHGetSpecialFolderPathW
SHBrowseForFolderW
RevokeDragDrop
DoDragDrop
ReleaseStgMedium
CoInitialize
CoUninitialize
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleLockRunning
StringFromGUID2
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
RegisterDragDrop
SysAllocStringByteLen
VariantCopy
CreateErrorInfo
SetErrorInfo
VariantChangeType
GetErrorInfo
LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
VariantClear
VariantInit
VarUI4FromStr
SysAllocString
SysAllocStringLen
SysFreeString
SysStringLen
ord301
ord33
ord200
ord79
ord35
ord32
ord30
ord26
ord50
ord60
ord143
ord211
ord22
ord27
ord41
ord46
PathFindFileNameW
PathRemoveBackslashW
PathIsDirectoryW
PathRemoveFileSpecW
PathFindExtensionW
StrCpyW
wnsprintfW
PathAppendW
AssocQueryStringW
PathFileExistsW
InitCommonControlsEx
InternetCrackUrlA
InternetCloseHandle
InternetReadFile
HttpQueryInfoW
InternetOpenUrlW
InternetSetOptionW
InternetOpenW
accept
listen
gethostname
shutdown
WSAStartup
WSACleanup
ntohl
WSAGetLastError
send
recv
htonl
inet_addr
gethostbyname
socket
inet_ntoa
closesocket
sendto
select
__WSAFDIsSet
recvfrom
WSASetLastError
WSAIoctl
setsockopt
getsockname
ntohs
bind
htons
getsockopt
getpeername
connect
ioctlsocket
freeaddrinfo
getaddrinfo
GetSonicUI
GetCoreUI
??1CString@WTL@@QAE@XZ
??BCString@WTL@@QBEPB_WXZ
??0CString@WTL@@QAE@XZ
??4CString@WTL@@QAEAAV01@ABV01@@Z
??A?$vector@UtagTextFontInfo@WTL@@V?$allocator@UtagTextFontInfo@WTL@@@std@@@std@@QAEAAUtagTextFontInfo@WTL@@I@Z
?size@?$vector@UtagTextFontInfo@WTL@@V?$allocator@UtagTextFontInfo@WTL@@@std@@@std@@QBEIXZ
?CompareNoCase@CString@WTL@@QBEHPB_W@Z
?ReleaseBuffer@CString@WTL@@QAEXH@Z
?GetBufferSetLength@CString@WTL@@QAEPA_WH@Z
?IsEmpty@CString@WTL@@QBEHXZ
?Compare@CString@WTL@@QBEHPB_W@Z
??1?$vector@VCString@WTL@@V?$allocator@VCString@WTL@@@std@@@std@@QAE@XZ
??3CSafeCrtBuffer@sonic_ui@@SAXPAX@Z
??0?$vector@VCString@WTL@@V?$allocator@VCString@WTL@@@std@@@std@@QAE@XZ
?push_back@?$vector@VCString@WTL@@V?$allocator@VCString@WTL@@@std@@@std@@QAEXABVCString@WTL@@@Z
??0CString@WTL@@QAE@PB_W@Z
?end@?$vector@VCString@WTL@@V?$allocator@VCString@WTL@@@std@@@std@@QAE?AV?$_Vector_iterator@V?$_Vector_val@VCString@WTL@@V?$allocator@VCString@WTL@@@std@@@std@@@2@XZ
?begin@?$vector@VCString@WTL@@V?$allocator@VCString@WTL@@@std@@@std@@QAE?AV?$_Vector_iterator@V?$_Vector_val@VCString@WTL@@V?$allocator@VCString@WTL@@@std@@@std@@@2@XZ
?clear@?$vector@VCString@WTL@@V?$allocator@VCString@WTL@@@std@@@std@@QAEXXZ
?end@?$vector@UtagMenuItemData@CCoreMenu@WTL@@V?$allocator@UtagMenuItemData@CCoreMenu@WTL@@@std@@@std@@QAE?AV?$_Vector_iterator@V?$_Vector_val@UtagMenuItemData@CCoreMenu@WTL@@V?$allocator@UtagMenuItemData@CCoreMenu@WTL@@@std@@@std@@@2@XZ
?begin@?$vector@UtagMenuItemData@CCoreMenu@WTL@@V?$allocator@UtagMenuItemData@CCoreMenu@WTL@@@std@@@std@@QAE?AV?$_Vector_iterator@V?$_Vector_val@UtagMenuItemData@CCoreMenu@WTL@@V?$allocator@UtagMenuItemData@CCoreMenu@WTL@@@std@@@std@@@2@XZ
??2CSafeCrtBuffer@sonic_ui@@SAPAXI@Z
??A?$vector@UtagItemData@?$CCoreListBoxT@V?$CListBoxT@VCWindow@ATL@@@WTL@@$0A@@WTL@@V?$allocator@UtagItemData@?$CCoreListBoxT@V?$CListBoxT@VCWindow@ATL@@@WTL@@$0A@@WTL@@@std@@@std@@QAEAAUtagItemData@?$CCoreListBoxT@V?$CListBoxT@VCWindow@ATL@@@WTL@@$0A@@WTL@@I@Z
?size@?$vector@UtagItemData@?$CCoreListBoxT@V?$CListBoxT@VCWindow@ATL@@@WTL@@$0A@@WTL@@V?$allocator@UtagItemData@?$CCoreListBoxT@V?$CListBoxT@VCWindow@ATL@@@WTL@@$0A@@WTL@@@std@@@std@@QBEIXZ
?_Orphan_range@?$vector@UtagItemData@?$CCoreListBoxT@V?$CListBoxT@VCWindow@ATL@@@WTL@@$0A@@WTL@@V?$allocator@UtagItemData@?$CCoreListBoxT@V?$CListBoxT@VCWindow@ATL@@@WTL@@$0A@@WTL@@@std@@@std@@IBEXPAUtagItemData@?$CCoreListBoxT@V?$CListBoxT@VCWindow@ATL@@@WTL@@$0A@@WTL@@0@Z
?_Reserve@?$vector@UtagItemData@?$CCoreListBoxT@V?$CListBoxT@VCWindow@ATL@@@WTL@@$0A@@WTL@@V?$allocator@UtagItemData@?$CCoreListBoxT@V?$CListBoxT@VCWindow@ATL@@@WTL@@$0A@@WTL@@@std@@@std@@IAEXI@Z
?begin@?$vector@UtagItemData@?$CCoreListBoxT@V?$CListBoxT@VCWindow@ATL@@@WTL@@$0A@@WTL@@V?$allocator@UtagItemData@?$CCoreListBoxT@V?$CListBoxT@VCWindow@ATL@@@WTL@@$0A@@WTL@@@std@@@std@@QAE?AV?$_Vector_iterator@V?$_Vector_val@UtagItemData@?$CCoreListBoxT@V?$CListBoxT@VCWindow@ATL@@@WTL@@$0A@@WTL@@V?$allocator@UtagItemData@?$CCoreListBoxT@V?$CListBoxT@VCWindow@ATL@@@WTL@@$0A@@WTL@@@std@@@std@@@2@XZ
?end@?$vector@UtagItemData@?$CCoreListBoxT@V?$CListBoxT@VCWindow@ATL@@@WTL@@$0A@@WTL@@V?$allocator@UtagItemData@?$CCoreListBoxT@V?$CListBoxT@VCWindow@ATL@@@WTL@@$0A@@WTL@@@std@@@std@@QAE?AV?$_Vector_iterator@V?$_Vector_val@UtagItemData@?$CCoreListBoxT@V?$CListBoxT@VCWindow@ATL@@@WTL@@$0A@@WTL@@V?$allocator@UtagItemData@?$CCoreListBoxT@V?$CListBoxT@VCWindow@ATL@@@WTL@@$0A@@WTL@@@std@@@std@@@2@XZ
?push_back@?$vector@UtagItemData@?$CCoreListBoxT@V?$CListBoxT@VCWindow@ATL@@@WTL@@$0A@@WTL@@V?$allocator@UtagItemData@?$CCoreListBoxT@V?$CListBoxT@VCWindow@ATL@@@WTL@@$0A@@WTL@@@std@@@std@@QAEXABUtagItemData@?$CCoreListBoxT@V?$CListBoxT@VCWindow@ATL@@@WTL@@$0A@@WTL@@@Z
??0?$vector@UtagItemData@?$CCoreListBoxT@V?$CListBoxT@VCWindow@ATL@@@WTL@@$0A@@WTL@@V?$allocator@UtagItemData@?$CCoreListBoxT@V?$CListBoxT@VCWindow@ATL@@@WTL@@$0A@@WTL@@@std@@@std@@QAE@XZ
?empty@?$vector@UtagItemData@?$CCoreListBoxT@V?$CListBoxT@VCWindow@ATL@@@WTL@@$0A@@WTL@@V?$allocator@UtagItemData@?$CCoreListBoxT@V?$CListBoxT@VCWindow@ATL@@@WTL@@$0A@@WTL@@@std@@@std@@QBE_NXZ
?erase@?$vector@UtagItemData@?$CCoreListBoxT@V?$CListBoxT@VCWindow@ATL@@@WTL@@$0A@@WTL@@V?$allocator@UtagItemData@?$CCoreListBoxT@V?$CListBoxT@VCWindow@ATL@@@WTL@@$0A@@WTL@@@std@@@std@@QAE?AV?$_Vector_iterator@V?$_Vector_val@UtagItemData@?$CCoreListBoxT@V?$CListBoxT@VCWindow@ATL@@@WTL@@$0A@@WTL@@V?$allocator@UtagItemData@?$CCoreListBoxT@V?$CListBoxT@VCWindow@ATL@@@WTL@@$0A@@WTL@@@std@@@std@@@2@V?$_Vector_const_iterator@V?$_Vector_val@UtagItemData@?$CCoreListBoxT@V?$CListBoxT@VCWindow@ATL@@@WTL@@$0A@@WTL@@V?$allocator@UtagItemData@?$CCoreListBoxT@V?$CListBoxT@VCWindow@ATL@@@WTL@@$0A@@WTL@@@std@@@std@@@2@@Z
??1?$vector@UtagItemData@?$CCoreListBoxT@V?$CListBoxT@VCWindow@ATL@@@WTL@@$0A@@WTL@@V?$allocator@UtagItemData@?$CCoreListBoxT@V?$CListBoxT@VCWindow@ATL@@@WTL@@$0A@@WTL@@@std@@@std@@QAE@XZ
?TrimRight@CString@WTL@@QAEXXZ
?TrimLeft@CString@WTL@@QAEXXZ
?GetLength@CString@WTL@@QBEHXZ
?push_back@?$vector@UtagMenuItemData@CCoreMenu@WTL@@V?$allocator@UtagMenuItemData@CCoreMenu@WTL@@@std@@@std@@QAEXABUtagMenuItemData@CCoreMenu@WTL@@@Z
?erase@?$vector@UtagMenuItemData@CCoreMenu@WTL@@V?$allocator@UtagMenuItemData@CCoreMenu@WTL@@@std@@@std@@QAE?AV?$_Vector_iterator@V?$_Vector_val@UtagMenuItemData@CCoreMenu@WTL@@V?$allocator@UtagMenuItemData@CCoreMenu@WTL@@@std@@@std@@@2@V?$_Vector_const_iterator@V?$_Vector_val@UtagMenuItemData@CCoreMenu@WTL@@V?$allocator@UtagMenuItemData@CCoreMenu@WTL@@@std@@@std@@@2@@Z
?GetData@CString@WTL@@IBEPAUCStringData@2@XZ
??4CString@WTL@@QAEAAV01@PB_W@Z
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipSaveImageToFile
GdipCloneImage
GdipFree
GdipAlloc
GdipDisposeImage
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdiplusShutdown
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdiplusStartup
CertCloseStore
CertEnumCertificatesInStore
CertDuplicateCertificateContext
CertOpenStore
CertGetCertificateContextProperty
CryptProtectData
CertFreeCertificateContext
CryptUnprotectData
CertFindCertificateInStore
IsNetworkAlive
GetModuleFileNameExW
EnumProcessModules
GetProcessImageFileNameW
GetMappedFileNameW
GetAdaptersInfo
GetNetworkParams
SetSuspendState
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ