ANSI WinAPI delay import

ID PE092 Level WARNING Category System

Description

The executable delay imports an ANSI WinAPI function version.

Windows internally uses Unicode, which means that calling ANSI functions will always incur some encoding conversion cost. This may also cause localizaton compatibility issues.

Mitigation

  • Use the Unicode WinAPI function counterpart if available.

Arguments

This rule has the following output arguments:

  • dll - DLL name
  • api - ANSI WinAPI function
  • unicode_api - Suggested Unicode WinAPI function counterpart