Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Overview
overview
7Static
static
307d2362002...18.exe
windows7-x64
707d2362002...18.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$SYSDIR/$_24_.dll
windows7-x64
3$SYSDIR/$_24_.dll
windows10-2004-x64
3$SYSDIR/$_25_.exe
windows7-x64
7$SYSDIR/$_25_.exe
windows10-2004-x64
7$SYSDIR/$_26_.dll
windows7-x64
3$SYSDIR/$_26_.dll
windows10-2004-x64
3$WINDIR/He...8_.chm
windows7-x64
1$WINDIR/He...8_.chm
windows10-2004-x64
1$_3_.dll
windows7-x64
3$_3_.dll
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
07d2362002a1b66221ad995725534faf_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
07d2362002a1b66221ad995725534faf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$SYSDIR/$_24_.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$SYSDIR/$_24_.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
$SYSDIR/$_25_.exe
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
$SYSDIR/$_25_.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
$SYSDIR/$_26_.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
$SYSDIR/$_26_.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
$WINDIR/Help/$_28_.chm
Resource
win7-20240729-en
Behavioral task
behavioral14
Sample
$WINDIR/Help/$_28_.chm
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
$_3_.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
$_3_.dll
Resource
win10v2004-20240802-en
Target
07d2362002a1b66221ad995725534faf_JaffaCakes118
Size
4.0MB
MD5
07d2362002a1b66221ad995725534faf
SHA1
e8fb855921aaa2c3398f2f07980568764b985396
SHA256
ba9fba02297b34b92cc187c9144c69d2626edb6e68ae921a304f6bd4097d94e0
SHA512
9ac74e28da86ce1eb5106788a9987b67193d3857bb73f20f56eb3cef3581c2b72bc7f5c0448ef88b7adc6bf4e79df193269fa3bd7d8ec41fbd45df1529c6148b
SSDEEP
98304:g8em73ieNrqLzHv25tNSaBatOGQoFrFKEwhC76Wkc:Um7yedtU3QeBKEekf
Checks for missing Authenticode signature.
resource |
---|
unpack001/$PLUGINSDIR/InstallOptions.dll |
unpack001/$PLUGINSDIR/System.dll |
unpack001/$SYSDIR/$_24_ |
unpack001/$SYSDIR/$_25_ |
unpack001/$SYSDIR/$_26_ |
unpack001/$_3_ |
resource | yara_rule |
---|---|
sample | nsis_installer_1 |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
SetFileTime
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetFileSize
GetModuleFileNameA
GetTickCount
GetCurrentProcess
CopyFileA
CloseHandle
GetWindowsDirectoryA
GetTempPathA
GetCommandLineA
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
SetErrorMode
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
MulDiv
ReadFile
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
ExitProcess
EndDialog
ScreenToClient
GetWindowRect
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
RegisterClassA
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
DispatchMessageA
PeekMessageA
CreateDialogParamA
DestroyWindow
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
ShowWindow
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
TrackPopupMenu
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
wsprintfA
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc
MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
PtInRect
GetClientRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
OpenClipboard
SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject
SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
CoTaskMemFree
dialog
initDialog
show
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalAlloc
GlobalFree
GlobalSize
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
GetLastError
VirtualAlloc
VirtualProtect
wsprintfA
StringFromGUID2
CLSIDFromString
Alloc
Call
Copy
Free
Get
Int64Op
Store
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
e:\job\pcp5intel\src\trunk\PCPandora\PandoraMon\Release\PandoraMon.pdb
timeEndPeriod
timeGetTime
timeSetEvent
timeKillEvent
timeBeginPeriod
HeapFree
GetProcessHeap
HeapAlloc
HeapReAlloc
lstrcpynA
lstrcmpiA
GetModuleFileNameA
lstrcmpA
WideCharToMultiByte
SystemTimeToFileTime
GetLocalTime
GetTickCount
lstrlenA
GetTempPathA
CreateMutexA
IsDebuggerPresent
FlushFileBuffers
WriteFile
SetFilePointer
OutputDebugStringA
CreateFileA
GetCurrentThreadId
GetCurrentProcessId
Sleep
CreateEventA
GetProcAddress
LoadLibraryA
GetLastError
ProcessIdToSessionId
FreeLibrary
OpenEventA
FlushInstructionCache
GetCurrentProcess
VirtualProtect
InterlockedDecrement
GetModuleHandleA
FormatMessageA
GetThreadPriority
GetExitCodeThread
SetThreadPriority
SetEvent
GlobalAddAtomA
CreateThread
OpenMutexA
VirtualQuery
FindClose
FindFirstFileA
SetLastError
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
GetSystemTimeAsFileTime
GetCurrentDirectoryW
GetFileTime
GetFileType
IsBadCodePtr
GetFileInformationByHandle
FileTimeToLocalFileTime
GetTimeZoneInformation
ResetEvent
DisableThreadLibraryCalls
GetFileAttributesA
SearchPathA
GetFullPathNameA
CreateProcessA
CreateProcessW
lstrlenW
GetLongPathNameA
ExitProcess
IsBadStringPtrA
IsBadStringPtrW
lstrcpyA
SetThreadPriorityBoost
GetCurrentThread
TerminateThread
CompareStringA
CompareStringW
IsBadWritePtr
GlobalAlloc
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
GetSystemDirectoryA
GetWindowsDirectoryA
Module32Next
Module32First
CreateToolhelp32Snapshot
Process32Next
Process32First
OpenProcess
GetComputerNameA
VirtualFreeEx
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
QueryPerformanceFrequency
lstrcatA
SetFileTime
QueryPerformanceCounter
GlobalFree
ReadFile
GetSystemTime
AreFileApisANSI
DeleteFileA
GetFileAttributesW
DeleteFileW
GetTempPathW
SetEndOfFile
GetFileSize
LockFile
LockFileEx
UnlockFile
GetFullPathNameW
LoadLibraryW
CreateFileW
MulDiv
WaitForMultipleObjects
InterlockedIncrement
GetSystemInfo
VirtualFree
VirtualAlloc
HeapCreate
SetUnhandledExceptionFilter
GetOEMCP
GetCPInfo
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
SetStdHandle
SetEnvironmentVariableA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetShortPathNameA
GetPrivateProfileIntA
IsBadReadPtr
LeaveCriticalSection
EnterCriticalSection
ReleaseMutex
WaitForSingleObject
CloseHandle
GetVersion
GetTimeFormatA
GetDateFormatA
FileTimeToSystemTime
FindResourceExA
FindResourceA
LoadResource
LockResource
GetCommandLineA
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
RaiseException
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
RtlUnwind
HeapSize
HeapDestroy
LocalFree
LocalAlloc
TerminateProcess
UnregisterHotKey
RegisterHotKey
IsIconic
ShowWindow
SetForegroundWindow
PeekMessageA
TranslateMessage
DispatchMessageA
GetWindowTextLengthA
GetCursorPos
ClientToScreen
PostQuitMessage
GetWindowModuleFileNameA
GetMessageA
RegisterDeviceNotificationA
RegisterClassA
GetKeyState
CallWindowProcA
DefWindowProcA
DestroyWindow
CreateWindowExA
KillTimer
SetTimer
SetActiveWindow
SetFocus
IsWindow
GetDlgItem
PostMessageA
IsDialogMessageW
IsDialogMessageA
DispatchMessageW
GetMessageW
PeekMessageW
GetWindowThreadProcessId
IsChild
GetForegroundWindow
MessageBoxA
GetActiveWindow
CallNextHookEx
SetWindowsHookExW
MsgWaitForMultipleObjects
GetQueueStatus
PostThreadMessageA
GetDC
WaitForInputIdle
GetSystemMetrics
CreateIconIndirect
ReleaseDC
GetWindowDC
FillRect
SetWindowTextA
GetDesktopWindow
ScreenToClient
SetWindowsHookExA
EndDialog
GetWindowLongA
GetWindowRect
SystemParametersInfoA
GetClientRect
MapWindowPoints
SetWindowPos
SetWindowLongA
EnumChildWindows
FindWindowA
EnumWindows
wsprintfA
GetParent
GetWindowTextA
GetWindow
UnregisterClassA
GetClassNameA
SendMessageA
RegisterWindowMessageA
SendMessageTimeoutA
DialogBoxParamA
UnregisterDeviceNotification
GdiFlush
CreateCompatibleBitmap
CreateDIBSection
CreateCompatibleDC
DeleteDC
DeleteObject
SelectObject
GetDeviceCaps
CreateDCA
Ellipse
CreateSolidBrush
GetStockObject
CreateBitmap
GetDIBits
RealizePalette
GetObjectA
BitBlt
SHFileOperationA
Shell_NotifyIconA
SHGetSpecialFolderPathA
ShellExecuteA
CoFreeUnusedLibraries
CoUninitialize
CoTaskMemAlloc
CLSIDFromProgID
CreateBindCtx
MkParseDisplayName
CoCreateInstance
StringFromCLSID
CoTaskMemFree
CoInitialize
StringFromGUID2
CLSIDFromString
SafeArrayGetUBound
SafeArrayUnlock
SysStringLen
SafeArrayGetLBound
SafeArrayCreate
SysFreeString
VarBstrCmp
VariantInit
VariantClear
SysAllocStringLen
SysAllocString
SetErrorInfo
GetErrorInfo
VariantChangeType
CreateErrorInfo
SafeArrayDestroy
SafeArrayLock
PathRemoveExtensionA
PathFindExtensionA
PathFindFileNameA
PathFileExistsA
PathCombineA
PathRemoveFileSpecA
PathCanonicalizeA
PathCombineW
PathIsRelativeW
PathIsRootW
UrlCombineA
StrStrIA
PathAddBackslashA
PathStripPathA
WSALookupServiceEnd
WSALookupServiceNextA
WSALookupServiceBeginA
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
WSAResetEvent
WSAEventSelect
socket
setsockopt
WSAStartup
WSACreateEvent
WSACleanup
WSASetEvent
WSACloseEvent
WSARecvFrom
recvfrom
WSARecv
recv
WSASendTo
sendto
WSASend
WSAAccept
accept
WSAConnect
connect
closesocket
gethostname
shutdown
gethostbyname
inet_addr
send
WSASetLastError
WSAGetLastError
htonl
htons
ntohl
ntohs
InternetCrackUrlA
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
AcceptConvertedData
CreateSettings
DllCanUnloadNow
DllCreateStub
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetSettings
UninstallProgram
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
e:\job\pcp5intel\src\trunk\PCPandora\PandoraViewer\Release\PandoraViewer.pdb
URLDownloadToFileA
URLOpenBlockingStreamA
FreeLibrary
LoadLibraryA
GetTempFileNameA
SetEvent
CreateEventA
GetCommandLineA
ResetEvent
LoadLibraryExA
IsDBCSLeadByte
lstrcpynW
GetProcessVersion
MoveFileA
GetComputerNameA
lstrcmpiW
CompareStringW
GetEnvironmentVariableW
GetStringTypeExA
GetStringTypeExW
VirtualQuery
GetProcAddress
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
GetSystemDirectoryA
GetWindowsDirectoryA
Module32Next
Module32First
CreateToolhelp32Snapshot
FindClose
FindFirstFileA
Process32Next
Process32First
OpenProcess
GetLongPathNameA
GetSystemDefaultLCID
VirtualFreeEx
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
QueryPerformanceFrequency
TlsGetValue
TlsSetValue
TlsAlloc
QueryPerformanceCounter
OpenMutexA
GetFileTime
lstrcatA
SetFileTime
GlobalSize
ReadFile
GetFileSize
WritePrivateProfileStringA
GetPrivateProfileStringA
GetShortPathNameA
GetEnvironmentVariableA
FindNextFileA
CreateDirectoryA
GetSystemTime
AreFileApisANSI
GetFileAttributesA
GetFileAttributesW
DeleteFileW
GetTempPathW
SetEndOfFile
LockFile
LockFileEx
UnlockFile
GetFullPathNameA
GetFullPathNameW
LoadLibraryW
GetSystemTimeAsFileTime
CreateFileW
HeapDestroy
HeapSize
ExitProcess
RtlUnwind
VirtualAlloc
GetSystemInfo
GetStartupInfoA
TerminateProcess
FatalAppExitA
SetUnhandledExceptionFilter
HeapCreate
SetLastError
GetProfileStringA
GlobalFree
FormatMessageA
GetModuleHandleA
lstrcpynA
HeapReAlloc
GetTickCount
GetCurrentProcessId
ReleaseMutex
OutputDebugStringA
SetFilePointer
FlushFileBuffers
IsDebuggerPresent
Sleep
CreateFileA
WriteFile
DeleteFileA
GetStringTypeW
LCMapStringA
LCMapStringW
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetConsoleCtrlHandler
GetTimeZoneInformation
IsBadCodePtr
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
SetStdHandle
SetEnvironmentVariableA
VirtualFree
GetCurrentThread
TlsFree
GetOEMCP
GetTempPathA
GetModuleFileNameA
InterlockedDecrement
InterlockedIncrement
lstrcmpA
lstrlenW
GlobalAlloc
GlobalLock
GlobalUnlock
MulDiv
GetTimeFormatA
FileTimeToSystemTime
GetDateFormatA
IsBadReadPtr
MultiByteToWideChar
GetVersion
CreateMutexA
GetLastError
IsBadWritePtr
VirtualProtect
CreateThread
WaitForSingleObject
LocalAlloc
CloseHandle
GetLocalTime
SystemTimeToFileTime
lstrcpyA
lstrcmpiA
lstrlenA
CompareStringA
FindResourceA
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceExA
GetCurrentThreadId
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcess
FlushInstructionCache
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetCPInfo
InterlockedExchange
GetLocaleInfoW
LocalFree
GetPrivateProfileIntA
GetStringTypeA
CharUpperW
SendMessageTimeoutA
RegisterClassA
RegisterClipboardFormatA
CreateIconIndirect
WaitForInputIdle
GetIconInfo
ExitWindowsEx
LoadIconA
IsDlgButtonChecked
SetWindowsHookExA
UnhookWindowsHookEx
CallNextHookEx
IsMenu
LoadStringA
ModifyMenuA
TrackPopupMenuEx
DestroyMenu
SetMenuItemInfoA
GetMenuItemInfoA
GetMenuItemCount
IsZoomed
SetMenu
GetMenu
MapVirtualKeyA
GetKeyNameTextA
FindWindowA
GetDlgItemInt
SetDlgItemInt
SetDlgItemTextA
GetCaretPos
WindowFromPoint
TrackPopupMenu
SendDlgItemMessageA
InflateRect
CopyRect
IsWindowVisible
EnumWindows
PeekMessageA
DispatchMessageA
CreateAcceleratorTableA
DestroyAcceleratorTable
CharUpperA
GetDesktopWindow
InvalidateRgn
RegisterWindowMessageA
DrawEdge
GetWindowDC
GetSystemMetrics
GetMessagePos
LoadMenuA
GetSubMenu
RegisterClassExA
wsprintfA
GetClassInfoExA
EnableWindow
PostMessageA
ClientToScreen
DestroyWindow
KillTimer
SetTimer
SetActiveWindow
MessageBoxA
ReleaseDC
GetDC
OffsetRect
CharNextA
GetClassNameA
LoadCursorA
CreateCursor
GetWindowTextLengthA
CharLowerW
CreateDialogParamA
SetClipboardData
SetRect
EmptyClipboard
CloseClipboard
GetWindowTextA
EndPaint
DrawTextA
IsWindowEnabled
GetSysColor
GetFocus
DrawFocusRect
FillRect
BeginPaint
GetDlgCtrlID
GetCursorPos
SetCursor
IsWindow
InvalidateRect
PtInRect
SetFocus
IntersectRect
OpenClipboard
IsIconic
RemoveMenu
CreatePopupMenu
AppendMenuA
LoadStringW
PostQuitMessage
SetMenuDefaultItem
GetLastActivePopup
CheckMenuRadioItem
TranslateAcceleratorA
BringWindowToTop
DrawFrameControl
GetKeyState
CharLowerA
GetSysColorBrush
FrameRect
MessageBeep
GetWindowThreadProcessId
LoadAcceleratorsA
GetMessageA
TranslateMessage
CheckDlgButton
SetForegroundWindow
DeleteMenu
IsChild
SetCapture
GetCapture
ReleaseCapture
UpdateWindow
SetRectEmpty
CallWindowProcA
DefWindowProcA
ShowWindow
GetWindowLongA
GetWindow
SystemParametersInfoA
GetClientRect
MapWindowPoints
SetWindowPos
CreateWindowExA
GetDlgItem
SetWindowTextA
GetParent
SendMessageA
GetWindowRect
ScreenToClient
LoadBitmapA
MoveWindow
ScrollWindowEx
EndDialog
GetActiveWindow
DialogBoxParamA
UnregisterClassA
SetWindowLongA
DestroyIcon
RedrawWindow
LoadImageA
SaveDC
RestoreDC
CreateDCA
EndDoc
AbortDoc
EndPage
StartPage
ResetDCA
StartDocA
GetTextExtentPointA
SetBrushOrgEx
SetBkColor
CreateDIBSection
DeleteEnhMetaFile
SelectClipRgn
CombineRgn
CreateRectRgnIndirect
DPtoLP
PlayEnhMetaFile
OffsetWindowOrgEx
Rectangle
CreatePen
TextOutA
SetWindowOrgEx
Ellipse
CreateDIBitmap
GetDIBits
RealizePalette
SetDIBitsToDevice
SetStretchBltMode
ExtSelectClipRgn
GetClipBox
StretchBlt
RectVisible
StretchDIBits
CreateFontA
GetTextExtentPoint32A
CreateSolidBrush
GetDeviceCaps
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
CreatePatternBrush
PatBlt
DeleteDC
GetStockObject
CreateFontIndirectA
SetBkMode
SelectObject
SetTextColor
GetEnhMetaFileHeader
DeleteObject
GetObjectA
GetPrinterA
OpenPrinterA
ClosePrinter
GetSaveFileNameA
GetOpenFileNameA
PrintDlgA
ShellExecuteA
ExtractIconExA
SHGetPathFromIDListA
SHGetSpecialFolderPathA
SHFileOperationA
StringFromCLSID
CoTaskMemFree
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
CoTaskMemRealloc
OleLockRunning
CoTaskMemAlloc
StringFromGUID2
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoUninitialize
CoInitialize
CoGetClassObject
VariantChangeType
SysAllocStringLen
SysAllocString
SysFreeString
SysStringLen
SysStringByteLen
OleCreateFontIndirect
VariantClear
VariantInit
LoadRegTypeLi
LoadTypeLi
CreateErrorInfo
VarUI4FromStr
SysAllocStringByteLen
GetErrorInfo
SetErrorInfo
SHDeleteKeyA
PathIsUNCA
PathStripPathA
PathRemoveBackslashA
PathFileExistsA
PathFindExtensionA
PathRemoveExtensionA
PathFindFileNameA
PathAddBackslashA
StrStrIA
ImageList_Remove
ImageList_Add
ImageList_Draw
InitCommonControlsEx
CreatePropertySheetPageA
ImageList_AddMasked
PropertySheetA
DestroyPropertySheetPage
ImageList_ReplaceIcon
ord8
ImageList_Create
ImageList_GetImageCount
ImageList_Destroy
ord6
ImageList_LoadImageA
_TrackMouseEvent
ImageList_Replace
inet_addr
WSALookupServiceBeginA
WSALookupServiceNextA
WSALookupServiceEnd
connect
recv
socket
setsockopt
htons
closesocket
WSAStartup
WSACreateEvent
WSAGetLastError
WSACleanup
WSASetEvent
WSACloseEvent
gethostname
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
WSAResetEvent
WSAEventSelect
gethostbyname
send
InternetCrackUrlA
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameExA
WTSQuerySessionInformationA
WTSEnumerateProcessesA
WTSEnumerateSessionsA
WTSFreeMemory
GetCurrentProcess
OpenEventA
ProcessIdToSessionId
Sleep
Process32Next
Process32First
CreateToolhelp32Snapshot
CreateThread
CreateEventA
GetProcessVersion
HeapFree
GetProcessHeap
FileTimeToSystemTime
GetDateFormatA
GetTimeFormatA
lstrcpynA
lstrcmpiA
SystemTimeToFileTime
GetLocalTime
GetTickCount
FlushFileBuffers
WriteFile
SetFilePointer
GetCurrentThreadId
CreateFileA
GetCurrentProcessId
GetComputerNameA
OpenProcess
GetSystemDirectoryA
HeapAlloc
IsBadReadPtr
MultiByteToWideChar
lstrlenA
CompareStringA
CompareStringW
GetModuleHandleA
EnterCriticalSection
LeaveCriticalSection
HeapReAlloc
lstrcmpA
InterlockedDecrement
GetWindowsDirectoryA
Module32Next
Module32First
GetTempPathA
FindClose
FindFirstFileA
VirtualFreeEx
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
IsDebuggerPresent
ReleaseMutex
QueryPerformanceFrequency
TlsGetValue
CreateMutexA
FormatMessageA
TlsAlloc
GetFileTime
WaitForSingleObject
SetFileTime
QueryPerformanceCounter
OpenMutexA
AreFileApisANSI
GetFileAttributesA
DeleteFileA
GetFileAttributesW
DeleteFileW
GetTempPathW
ReadFile
SetEndOfFile
GetFileSize
LockFile
LockFileEx
UnlockFile
GetFullPathNameA
GetFullPathNameW
LoadLibraryW
GetSystemTime
GetSystemTimeAsFileTime
CreateFileW
FlushInstructionCache
VirtualQuery
SetStdHandle
GetTimeZoneInformation
GetStringTypeW
UnmapViewOfFile
GetStringTypeA
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TerminateProcess
VirtualFree
HeapCreate
SetUnhandledExceptionFilter
LCMapStringW
LCMapStringA
TlsFree
GetCPInfo
GetOEMCP
GetCommandLineA
GetSystemInfo
VirtualAlloc
RtlUnwind
ExitProcess
LocalFree
HeapSize
HeapDestroy
CreateFileMappingA
DisableThreadLibraryCalls
IsBadCodePtr
LoadLibraryA
GetProcAddress
TerminateThread
GetModuleFileNameA
VirtualProtect
WideCharToMultiByte
TlsSetValue
IsBadWritePtr
MapViewOfFile
SetLastError
GetLastError
GetVersion
FreeLibrary
CloseHandle
FindResourceExA
FindResourceA
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
SetEnvironmentVariableA
OutputDebugStringA
lstrcatA
IsWindow
DestroyWindow
PostThreadMessageA
DefWindowProcA
DispatchMessageA
TranslateMessage
CreateWindowExA
RegisterClassExA
SendMessageW
SendMessageA
FindWindowA
GetWindowThreadProcessId
EnumWindows
WaitForInputIdle
GetMessageA
GetNextDlgTabItem
GetClassNameA
wsprintfA
GetWindowTextLengthA
GetWindowTextA
GetWindowLongA
SetWindowLongA
RegQueryInfoKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
OpenProcessToken
DuplicateTokenEx
SetTokenInformation
CreateProcessAsUserA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
CoTaskMemFree
StringFromCLSID
VariantClear
SysFreeString
GetErrorInfo
SetErrorInfo
SysAllocString
PathStripPathA
PathAddBackslashA
StrToIntA
PathRemoveExtensionA
PathFindExtensionA
PathFindFileNameA
WSASetLastError
WSAGetLastError
??0CxFile@@QAE@ABV0@@Z
??0CxFile@@QAE@XZ
??0CxIOFile@@QAE@ABV0@@Z
??0CxIOFile@@QAE@PAU_iobuf@@@Z
??0CxMemFile@@QAE@ABV0@@Z
??1CxFile@@UAE@XZ
??1CxIOFile@@UAE@XZ
??1CxImage@@UAE@XZ
??4CxFile@@QAEAAV0@ABV0@@Z
??4CxIOFile@@QAEAAV0@ABV0@@Z
??4CxMemFile@@QAEAAV0@ABV0@@Z
??_7CxFile@@6B@
??_7CxIOFile@@6B@
??_7CxImage@@6B@
??_7CxMemFile@@6B@
??_FCxIOFile@@QAEXXZ
??_FCxImage@@QAEXXZ
??_FCxMemFile@@QAEXXZ
??_OCxImage@@QAEXABV0@@Z
?Close@CxIOFile@@UAE_NXZ
?Eof@CxIOFile@@UAE_NXZ
?Error@CxIOFile@@UAEJXZ
?Flush@CxIOFile@@UAE_NXZ
?GetC@CxIOFile@@UAEJXZ
?Open@CxIOFile@@QAE_NPBD0@Z
?PutC@CxFile@@UAE_NE@Z
?PutC@CxIOFile@@UAE_NE@Z
?Read@CxIOFile@@UAEIPAXII@Z
?Seek@CxIOFile@@UAE_NJH@Z
?Size@CxIOFile@@UAEJXZ
?Tell@CxIOFile@@UAEJXZ
?Write@CxIOFile@@UAEIPBXII@Z
OnLockEvent
OnLogoffEvent
OnLogonEvent
OnShutdownEvent
OnStartScreenSaverEvent
OnStartShellEvent
OnStartupEvent
OnStopScreenSaverEvent
OnUnlockEvent
ProcessGroupPolicy
ProcessGroupPolicyEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetTickCount
GetLocalTime
SystemTimeToFileTime
GetDateFormatA
FileTimeToSystemTime
GetTimeFormatA
WaitForSingleObject
ReleaseMutex
HeapFree
GetProcessHeap
HeapAlloc
HeapReAlloc
lstrcmpA
lstrcpynA
GetModuleFileNameA
CreateMutexA
GetModuleHandleA
FormatMessageA
InterlockedDecrement
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
IsBadReadPtr
CreateThread
GetProcAddress
LoadLibraryA
VirtualQuery
GetFileTime
lstrcatA
GetSystemDirectoryA
MoveFileExA
FreeLibrary
WritePrivateProfileStringA
GlobalFree
GetCurrentProcess
SetFileTime
GetCurrentThread
TerminateProcess
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
EnterCriticalSection
LeaveCriticalSection
FlushInstructionCache
ReadFile
GetCurrentProcessId
GetCurrentThreadId
OutputDebugStringA
SetFilePointer
WriteFile
InterlockedIncrement
GetSystemTime
lstrcpyA
SetStdHandle
IsBadCodePtr
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LCMapStringW
LCMapStringA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCurrentDirectoryA
GetDriveTypeA
GetCPInfo
GetOEMCP
VirtualFree
HeapCreate
SetUnhandledExceptionFilter
TlsFree
ExitProcess
GetCommandLineA
GetFullPathNameA
GetSystemInfo
VirtualAlloc
RtlUnwind
LocalFree
HeapSize
HeapDestroy
QueryPerformanceCounter
CreateEventA
SetEvent
CreateDirectoryA
GetShortPathNameA
QueryPerformanceFrequency
FlushFileBuffers
IsDebuggerPresent
IsBadWritePtr
VirtualProtect
GetTempPathA
CopyFileA
GetPrivateProfileStringA
GetPrivateProfileIntA
SetLastError
FindNextFileA
Sleep
GetFileSize
GetVersionExA
RemoveDirectoryA
RaiseException
DeleteCriticalSection
InitializeCriticalSection
FindResourceExA
LoadResource
LockResource
SizeofResource
FindResourceA
GetLastError
GetFileAttributesA
SetFileAttributesA
CreateFileA
CloseHandle
DeleteFileA
FindFirstFileA
FindClose
lstrlenA
lstrcmpiA
WideCharToMultiByte
lstrlenW
CompareStringA
MultiByteToWideChar
GetVersion
GetThreadLocale
GetLocaleInfoA
GetACP
GetWindowsDirectoryA
TlsAlloc
TlsSetValue
TlsGetValue
InterlockedExchange
SetEndOfFile
UnregisterClassA
wsprintfA
EnumWindows
SendMessageA
GetClassNameA
EndDialog
SetTimer
GetDlgItem
DialogBoxParamA
DrawFocusRect
FillRect
IsWindowEnabled
GetSysColor
GetFocus
CharNextA
CreateWindowExA
DrawTextA
ReleaseDC
FindWindowA
OffsetRect
LoadCursorA
CreateCursor
ScreenToClient
GetCursorPos
GetCapture
ReleaseCapture
SetCapture
UpdateWindow
PtInRect
SetCursor
EndPaint
BeginPaint
DefWindowProcA
GetDlgCtrlID
InvalidateRect
IsWindow
SetRectEmpty
GetWindowThreadProcessId
SetWindowLongA
PostMessageA
CallWindowProcA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetWindow
GetWindowRect
GetWindowLongA
SystemParametersInfoA
GetClientRect
MapWindowPoints
SetWindowPos
GetParent
SetWindowTextA
MessageBoxA
GetDC
SetTextColor
SetBkMode
SelectObject
GetObjectA
GetStockObject
CreateFontIndirectA
DeleteDC
DeleteObject
SetSecurityDescriptorDacl
RegEnumKeyExA
RegCreateKeyExA
InitializeAcl
AddAce
EqualSid
OpenThreadToken
GetTokenInformation
GetLengthSid
CopySid
GetSidLengthRequired
InitializeSid
GetSidSubAuthority
IsValidSid
OpenProcessToken
SetNamedSecurityInfoA
LookupPrivilegeValueA
AdjustTokenPrivileges
RegSetValueExA
RegEnumKeyA
RegDeleteKeyA
RegEnumValueA
RegDeleteValueA
RegOpenKeyExA
RegCloseKey
InitializeSecurityDescriptor
RegOpenKeyA
RegQueryValueExA
CoTaskMemAlloc
CLSIDFromString
CoCreateGuid
CoInitialize
CoCreateInstance
StringFromGUID2
StringFromCLSID
CoTaskMemFree
ShellExecuteA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetSpecialFolderPathA
SHFileOperationA
SHGetDesktopFolder
SysFreeString
SetErrorInfo
GetErrorInfo
SysAllocStringByteLen
SysStringByteLen
CreateErrorInfo
SysAllocString
VariantClear
PathStripPathA
StrStrIA
PathFindFileNameA
PathFileExistsA
PathAddBackslashA
StrRetToBufA
PathFindExtensionA
PathRemoveExtensionA
_TrackMouseEvent
htonl
ntohl
FindFirstUrlCacheEntryA
DeleteUrlCacheEntry
FindCloseUrlCache
FindNextUrlCacheEntryA
CheckSumMappedFile
AddToProgramsMenu
CheckPassword
ClearFirefoxTraces
ClearTraces
ConvertFrom4x
DeleteJunkObjects
DisguiseFile
Enable
EnableRegkey
FindOrCreateAppId
FindVersion4
FindVersion5
GenerateGUID
GenerateRandomFilename
GenerateRandomRegistryKey
IsUserAdmin
MakeBrandInfo
PatchFile
PatchForBranding
SetupFS
ShutdownProgram
SubclassHotkeyControl
TakeOwnership
UninstallVersion4
UnsetupFS
UpgradeOrTrialMsg
_StorageAddChangeNotification@28
_StorageCheckAndRepair@28
_StorageCheckAndRepairCB2@108
_StorageCheckAndRepairCB@72
_StorageCheckFilePassword@28
_StorageCheckPassword@20
_StorageClose@4
_StorageCloseFile@4
_StorageCompact@8
_StorageCreate@32
_StorageCreateCB@80
_StorageCreateDirectory@8
_StorageCreateFile@48
_StorageCreateFileCompressed@60
_StorageDeleteAndRenameFile@12
_StorageDeleteDirectory@8
_StorageDeleteFile@8
_StorageDeleteFileTag@12
_StorageFileExists@12
_StorageFindClose@8
_StorageFindFirst@16
_StorageFindFirstEx@20
_StorageFindNext@8
_StorageFlushFile@4
_StorageForceCreateDirectories@8
_StorageFormatFixedSize@32
_StorageFormatFixedSizeCB@76
_StorageGetAutoCompact@8
_StorageGetBuffering@8
_StorageGetCaseSensitive@8
_StorageGetEncryption@8
_StorageGetFileAttributes@12
_StorageGetFileCompression@20
_StorageGetFileCreationTime@12
_StorageGetFileEncryption@12
_StorageGetFileLastAccessTime@12
_StorageGetFileModificationTime@12
_StorageGetFileSize@8
_StorageGetFileSizeLong@8
_StorageGetFileTag@20
_StorageGetFileTagInfo@20
_StorageGetFileTimes@20
_StorageGetInfo@12
_StorageGetLinkDestination@12
_StorageGetLinkDestinationEx@16
_StorageGetMaxPagesCount@8
_StorageGetSeparator@8
_StorageGetSizes@16
_StorageGetUseAccessTime@8
_StorageGetUseTransactions@8
_StorageGetVersion@4
_StorageIsDirectoryEmpty@12
_StorageIsReadOnly@8
_StorageIsValidStorage@4
_StorageIsValidStorageCB@48
_StorageLink@12
_StorageMoveFile@12
_StorageOpen@20
_StorageOpenCB@68
_StorageOpenFile@36
_StorageOpenReadOnly@20
_StorageOpenRootData@8
_StorageReadFile@16
_StorageReadFileWithSeek@24
_StorageRemoveChangeNotification@8
_StorageResolveLink@16
_StorageSeekFile@16
_StorageSeekFileLong@20
_StorageSetAutoCompact@8
_StorageSetBuffering@8
_StorageSetCaseSensitive@8
_StorageSetCustomCompressionHandlers@16
_StorageSetCustomEncryptionHandlers@24
_StorageSetEncryption@24
_StorageSetEncryptionEx@32
_StorageSetEndOfFile@4
_StorageSetFileAttributes@12
_StorageSetFileCompression@28
_StorageSetFileCreationTime@16
_StorageSetFileEncryption@28
_StorageSetFileLastAccessTime@16
_StorageSetFileModificationTime@16
_StorageSetFilePassword@16
_StorageSetFileSize@8
_StorageSetFileSizeLong@12
_StorageSetFileTag@20
_StorageSetFileTimes@32
_StorageSetLogo@8
_StorageSetMaxPagesCount@8
_StorageSetPassword@12
_StorageSetRegistrationKey@4
_StorageSetSeparator@8
_StorageSetUseAccessTime@8
_StorageSetUseTransactions@8
_StorageTellFile@8
_StorageTellFileLong@8
_StorageWriteFile@16
_StorageWriteFileWithSeek@24
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ