DllCanUnloadNow
DllGetClassObject
Overview
overview
3Static
static
WcnApi.dll
windows7-x64
1WcnApi.dll
windows10-2004-x64
1WcnEapAuthProxy.dll
windows7-x64
3WcnEapAuthProxy.dll
windows10-2004-x64
3utildll.dll
windows7-x64
3utildll.dll
windows10-2004-x64
1verifier.exe
windows7-x64
1verifier.exe
windows10-2004-x64
1version.dll
windows7-x64
3version.dll
windows10-2004-x64
3vfpodbc.dll
windows7-x64
1vfpodbc.dll
windows10-2004-x64
1vfwwdm32.dll
windows7-x64
1vfwwdm32.dll
windows10-2004-x64
1wbiosrvc.dll
windows7-x64
1wbiosrvc.dll
windows10-2004-x64
1wcncsvc.dll
windows7-x64
1wcncsvc.dll
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
WcnApi.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
WcnApi.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
WcnEapAuthProxy.dll
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
WcnEapAuthProxy.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
utildll.dll
Resource
win7-20220901-en
Behavioral task
behavioral6
Sample
utildll.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
verifier.exe
Resource
win7-20220901-en
Behavioral task
behavioral8
Sample
verifier.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral9
Sample
version.dll
Resource
win7-20220901-en
Behavioral task
behavioral10
Sample
version.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral11
Sample
vfpodbc.dll
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
vfpodbc.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
vfwwdm32.dll
Resource
win7-20220812-en
Behavioral task
behavioral14
Sample
vfwwdm32.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
wbiosrvc.dll
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
wbiosrvc.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
wcncsvc.dll
Resource
win7-20220812-en
Behavioral task
behavioral18
Sample
wcncsvc.dll
Resource
win10v2004-20220812-en
Target
0bc4f8e28353ea32db19426daebd039df1639b6bac1bada2b31db183aa54eb5c
Size
331KB
MD5
6f40e46cffca04557bfa3d535f7845a9
SHA1
b7dace3f5ac7ba7aa38c414ce922093040a2964e
SHA256
0bc4f8e28353ea32db19426daebd039df1639b6bac1bada2b31db183aa54eb5c
SHA512
5c56e7e6612fad718259610524ca27fa3520be88c6d24bb8fdec19877c6ae242d5cecfea5ec8ee2aee8af5856f2b0e567c3750afa3667b1573652c9ec0efc52f
SSDEEP
6144:RIJ6dmjwSWhyK8z63jk6XCIjIBxfcr33PUZTgahTpiWNvdT8EVOSe8m3hbfn1WVg:CwaK85rBkUZk0piUFTWuVg
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
??0exception@@QAE@XZ
memcpy
malloc
free
_callnewh
_XcptFilter
_initterm
_amsg_exit
??1type_info@@UAE@XZ
__CxxFrameHandler3
_unlock
__dllonexit
_lock
_onexit
memset
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABQBD@Z
_wcsdup
_CxxThrowException
memmove_s
memcpy_s
_except_handler4_common
WinSqmAddToStream
EtwGetTraceEnableFlags
EtwGetTraceEnableLevel
EtwUnregisterTraceGuids
EtwRegisterTraceGuidsW
EtwGetTraceLoggerHandle
EtwTraceMessage
QueryServiceStatus
OpenSCManagerW
OpenServiceW
StartServiceW
CloseServiceHandle
NotifyServiceStatusChangeW
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
OutputDebugStringA
Sleep
LocalAlloc
UnhandledExceptionFilter
WideCharToMultiByte
InterlockedExchange
GlobalAlloc
GlobalFree
LoadLibraryExA
InterlockedCompareExchange
GetProcAddress
DelayLoadFailureHook
SetUnhandledExceptionFilter
CreateThreadpoolCleanupGroup
SetThreadpoolTimer
CreateThreadpoolTimer
LocalFree
MultiByteToWideChar
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
GetLastError
SetEvent
WaitForSingleObjectEx
ResetEvent
SleepEx
WaitForMultipleObjectsEx
ReleaseSRWLockShared
AcquireSRWLockShared
WaitForSingleObject
CloseHandle
OutputDebugStringW
GetCurrentThreadId
DuplicateHandle
GetCurrentThread
GetCurrentProcess
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
CreateThread
CreateEventW
InitializeSRWLock
FreeLibrary
GetModuleHandleExW
NdrAsyncClientCall
RpcBindingFree
RpcBindingSetAuthInfoExW
NdrClientCall2
RpcStringBindingComposeW
RpcBindingFromStringBindingW
RpcMgmtInqServerPrincNameW
RpcEpResolveBinding
NdrOleAllocate
NdrOleFree
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
IUnknown_Release_Proxy
CStdStubBuffer_QueryInterface
CStdStubBuffer_AddRef
CStdStubBuffer_Connect
CStdStubBuffer_Disconnect
CStdStubBuffer_Invoke
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_CountRefs
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease
NdrCStdStubBuffer_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
RpcAsyncInitializeHandle
RpcAsyncCompleteCall
RpcAsyncCancelCall
RpcExceptionFilter
RpcSmDestroyClientContext
RpcStringFreeW
CoWaitForMultipleHandles
CoCreateInstance
CoInitializeEx
CoUninitialize
CreateStreamOnHGlobal
CreateWellKnownSid
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_unlock
??0exception@@QAE@XZ
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
free
_CxxThrowException
_callnewh
malloc
_XcptFilter
_onexit
_lock
__dllonexit
__CxxFrameHandler3
??1type_info@@UAE@XZ
_except_handler4_common
_amsg_exit
_initterm
EtwGetTraceEnableFlags
EtwGetTraceEnableLevel
EtwGetTraceLoggerHandle
EtwRegisterTraceGuidsW
EtwUnregisterTraceGuids
EtwEventRegister
EtwEventUnregister
EtwEventWrite
EtwTraceMessage
RpcAsyncCancelCall
RpcBindingFree
RpcStringFreeW
RpcBindingSetAuthInfoExW
RpcMgmtInqServerPrincNameW
RpcEpResolveBinding
RpcBindingFromStringBindingW
RpcStringBindingComposeW
NdrClientCall2
NdrAsyncClientCall
RpcSmDestroyClientContext
RpcAsyncInitializeHandle
RpcExceptionFilter
RpcAsyncCompleteCall
UuidCreate
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLastError
CloseHandle
InterlockedExchange
InterlockedCompareExchange
DisableThreadLibraryCalls
Sleep
LocalAlloc
LocalFree
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
WaitForSingleObjectEx
InitializeSRWLock
ResetEvent
CreateEventW
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
GetSystemTimeAsFileTime
GetTickCount
CreateWellKnownSid
WcnEapPluginGetInfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_wcslwr
NtQueryVolumeInformationFile
_wcsnicmp
_wcsicmp
strstr
memcpy_s
_chkstk
RtlLeaveCriticalSection
RtlInitializeCriticalSection
RtlEnterCriticalSection
wcsrchr
swprintf_s
vswprintf_s
RtlUnwind
RtlExtendedLargeIntegerDivide
wcscpy_s
wcscat_s
RtlAllocateAndInitializeSid
RtlFreeSid
wcsstr
memcpy
memset
ord1
_vsnwprintf
free
malloc
_initterm
_XcptFilter
fwprintf
_iob
_amsg_exit
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
SetLastError
LocalFree
SetDefaultCommConfigW
CommConfigDialogW
LocalAlloc
GetDefaultCommConfigW
lstrlenW
MultiByteToWideChar
GetModuleHandleW
GetTimeFormatW
GlobalFree
GlobalAlloc
GetDateFormatW
GetLocalTime
FormatMessageW
lstrcmpiW
CloseHandle
CreateFileW
FreeLibrary
GetProcAddress
LoadLibraryW
GetLastError
SystemTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
WideCharToMultiByte
QueryDosDeviceW
InterlockedExchange
Sleep
InterlockedCompareExchange
QueryPerformanceCounter
GetTickCount
EqualSid
GetLengthSid
CopySid
RegQueryValueExW
RegOpenKeyExW
RegQueryValueExA
RegOpenKeyExA
CheckTokenMembership
LsaFreeMemory
LsaClose
RegEnumValueW
LookupAccountSidW
RegEnumKeyExW
LsaOpenPolicy
LsaQueryInformationPolicy
RegCloseKey
WinStationQueryInformationW
MessageBoxW
LoadStringW
LoadCursorW
SetCursor
SetupDiCallClassInstaller
SetupDiCreateDeviceInfoList
SetupDiDestroyDeviceInfoList
SetupDiSetClassInstallParamsW
NetGetAnyDCName
NetServerGetInfo
NetServerEnum
NetLocalGroupGetMembers
NetApiBufferFree
AsyncDeviceEnumerate
CachedGetUserFromSid
CalculateDiffTime
CalculateElapsedTime
CompareElapsedTime
ConfigureModem
CtxGetAnyDCName
CurrentDateTimeString
DateTimeString
ElapsedTimeString
EnumerateMultiUserServers
FormDecoratedAsyncDeviceName
GetAssociatedPortName
GetSystemMessageA
GetSystemMessageW
GetUnknownString
GetUserFromSid
HaveAnonymousUsersChanged
InitializeAnonymousUserCompareList
InstallModem
IsPartOfDomain
NetBIOSDeviceEnumerate
NetworkDeviceEnumerate
ParseDecoratedAsyncDeviceName
QueryCurrentWinStation
RegGetNetworkDeviceName
RegGetNetworkServiceName
SetupAsyncCdConfig
StandardErrorMessage
StrAsyncConnectState
StrConnectState
StrProcessState
StrSdClass
StrSystemWaitReason
TestUserForAdmin
WinEnumerateDevices
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
__iob_func
__CxxFrameHandler3
??3@YAXPAX@Z
??2@YAPAXI@Z
_vsnwprintf
_controlfp
_except_handler4_common
?terminate@@YAXXZ
_onexit
_lock
__dllonexit
_unlock
??1type_info@@UAE@XZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_wcmdln
_XcptFilter
_exit
_cexit
__wgetmainargs
memcpy
malloc
free
wprintf
fputws
_purecall
??_U@YAPAXI@Z
??_V@YAXPAX@Z
_putws
_wtoi
_wfopen
fclose
puts
memset
_ftol2_sse
_wcsicmp
__argc
_wsetlocale
__wargv
exit
_wcsdup
fflush
NtQuerySystemInformation
NtSetSystemInformation
RtlInitUnicodeString
RtlUnicodeStringToInteger
EnableWindow
PostMessageW
SendMessageW
SetTimer
GetSysColor
GetClientRect
TranslateMessage
MsgWaitForMultipleObjects
PeekMessageW
RedrawWindow
LoadStringW
CharToOemW
DispatchMessageW
GetWindowRect
GetSystemMetrics
LoadIconW
ScreenToClient
GetSysColorBrush
IsIconic
GetSystemMenu
AppendMenuW
DrawIcon
OffsetRect
ShellAboutW
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
CommDlgExtendedError
WinVerifyTrust
CryptCATCatalogInfoFromContext
CryptCATAdminEnumCatalogFromHash
CryptCATAdminAcquireContext
CryptCATAdminCalcHashFromFileHandle
CertFreeCertificateContext
ImageDirectoryEntryToDataEx
ImageUnload
ImageLoad
RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegDeleteValueW
RegCloseKey
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
GetLocalTime
GetDateFormatW
GetTimeFormatW
GetLastError
CreateFileW
MultiByteToWideChar
lstrcmpiA
GetModuleHandleW
GetSystemDirectoryW
GetCurrentDirectoryW
GlobalMemoryStatusEx
InterlockedExchange
CreateThread
CreateEventW
SetEvent
CloseHandle
WaitForSingleObject
Sleep
HeapSetInformation
GetConsoleOutputCP
SetThreadPreferredUILanguages
FreeConsole
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
ExpandEnvironmentStringsW
SetCurrentDirectoryW
ResetEvent
UnhandledExceptionFilter
ord268
ord1560
ord772
ord500
ord5602
ord5856
ord4253
ord489
ord768
ord1899
ord1761
ord324
ord4229
ord4370
ord4847
ord5276
ord3592
ord4270
ord3693
ord765
ord860
ord6879
ord6667
ord6211
ord2078
ord1172
ord355
ord2507
ord3447
ord5679
ord5706
ord5855
ord5977
ord2877
ord3281
ord2371
ord3658
ord641
ord2293
ord1197
ord6655
ord2350
ord6330
ord2634
ord541
ord4197
ord538
ord4124
ord537
ord713
ord414
ord3657
ord5817
ord6137
ord859
ord656
ord3577
ord4392
ord2570
ord4213
ord2015
ord2403
ord616
ord3312
ord4254
ord1165
ord2858
ord4294
ord3133
ord1143
ord771
ord1008
ord496
ord3695
ord4425
ord2046
ord4433
ord5284
ord2520
ord1683
ord3087
ord4709
ord5050
ord755
ord470
ord3605
ord2362
ord2289
ord2357
ord1569
ord1196
ord2504
ord4667
ord4269
ord815
ord3733
ord4418
ord4616
ord4075
ord3074
ord3820
ord3826
ord3825
ord2971
ord3076
ord2980
ord3257
ord3131
ord4459
ord3254
ord3142
ord2977
ord5710
ord5285
ord5303
ord4692
ord4074
ord2717
ord5298
ord5296
ord3341
ord2388
ord5193
ord1089
ord3917
ord5727
ord2546
ord4480
ord6371
ord800
ord540
ord561
ord1131
ord795
ord609
ord693
ord4419
ord4621
ord5273
ord2116
ord2438
ord5257
ord1720
ord5059
ord3744
ord6372
ord2047
ord2640
ord4435
ord4829
ord3793
ord5283
ord4347
ord6370
ord5157
ord2377
ord5237
ord4401
ord1767
ord4073
ord6048
ord2506
ord4992
ord4848
ord4371
ord5261
ord4352
ord4942
ord4736
ord5156
ord4155
ord858
ord5155
ord818
ord567
ord3716
ord3397
ord4831
ord5286
ord1768
ord6051
ord3569
ord4390
ord2567
ord3635
ord3365
ord4396
ord2574
ord2294
ord5568
ord2910
ord4704
ord4970
ord6896
ord6195
ord6139
ord6928
ord5857
ord6874
ord924
ord926
ord6278
ord6279
ord861
ord536
ord2606
ord535
ord940
ord2755
ord941
ord801
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetLastError
SetFileTime
GetFileTime
LocalAlloc
LocalFree
TlsGetValue
_lopen
_lread
GetLastError
_lwrite
_lclose
_llseek
FreeLibrary
InterlockedExchangeAdd
GetProcAddress
LoadLibraryW
TlsSetValue
_lcreat
lstrcmpiA
GetFullPathNameA
DeleteFileA
GetFileSize
ReadFile
SetFilePointer
GetFileSizeEx
CloseHandle
CreateFileW
IsDBCSLeadByte
LoadLibraryExW
SetErrorMode
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
lstrlenA
CompareStringA
CompareStringW
GetSystemDirectoryW
GetWindowsDirectoryW
MoveFileW
lstrcmpiW
lstrlenW
DeleteFileW
LZClose
LZCopy
LZInit
GetFileAttributesW
LZCloseFile
WideCharToMultiByte
LZCreateFileW
TlsFree
TlsAlloc
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
SetUnhandledExceptionFilter
_vsnprintf
memcpy
_wcsicmp
_vsnwprintf
_XcptFilter
malloc
free
_initterm
_except_handler4_common
_amsg_exit
RtlFreeAnsiString
LdrResSearchResource
NlsMbCodePageTag
RtlAllocateHeap
RtlUnicodeStringToAnsiString
RtlInitAnsiString
RtlAnsiStringToUnicodeString
RtlFreeUnicodeString
RtlInitUnicodeString
GetFileVersionInfoA
GetFileVersionInfoByHandle
GetFileVersionInfoExW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeExW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerFindFileA
VerFindFileW
VerInstallFileA
VerInstallFileW
VerLanguageNameA
VerLanguageNameW
VerQueryValueA
VerQueryValueW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LoadStringA
MessageBoxA
ord50
??4CVfpodbc@@QAEAAV0@ABV0@@Z
ConfigDSN
ConfigDSNEx
LibMain
SQLSetConnectOption
fnVfpodbc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_initterm
free
_amsg_exit
_except_handler4_common
malloc
_XcptFilter
_purecall
strtol
memcpy
memset
??3@YAXPAX@Z
??2@YAPAXI@Z
_vsnprintf
KsCreatePin
SetForegroundWindow
LoadCursorA
RegisterClassA
CreateWindowExA
GetWindowRect
GetClientRect
DefWindowProcA
PostQuitMessage
GetMessageA
DispatchMessageA
GetClassInfoA
FindWindowA
GetWindowLongA
WinHelpA
SetWindowLongA
GetParent
IsWindowEnabled
EnableWindow
SetWindowTextA
ShowWindow
LoadStringA
MessageBoxA
SendMessageA
GetDlgItem
UnregisterClassA
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
CreateThread
SetThreadPriority
ResumeThread
ExitThread
WaitForMultipleObjectsEx
SetEvent
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
OutputDebugStringA
DisableThreadLibraryCalls
LoadLibraryA
GetProcAddress
GetModuleHandleA
FreeLibrary
VirtualAlloc
CreateEventA
GetLastError
VirtualFree
DeviceIoControl
WaitForSingleObject
CancelIo
CloseHandle
GetOverlappedResult
DefDriverProc
timeGetTime
DriverCallback
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
CoUninitialize
CoInitialize
CoTaskMemFree
CoCreateInstance
OleCreatePropertyFrame
SysFreeString
ord17
PropertySheetA
CreatePropertySheetPageA
DllMain
DriverProc
VfwWdm
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
__CxxFrameHandler3
??0exception@@QAE@XZ
?what@exception@@UBEPBDXZ
swscanf_s
_vsnwprintf
??8type_info@@QBEHABV0@@Z
toupper
iswdigit
strnlen
_strnicmp
_wcsnicmp
_purecall
memcpy_s
??0exception@@QAE@ABQBD@Z
memset
memcpy
??0exception@@QAE@ABV0@@Z
free
_CxxThrowException
??1exception@@UAE@XZ
_callnewh
memmove_s
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
??1type_info@@UAE@XZ
_amsg_exit
_initterm
_XcptFilter
malloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLastError
SetLastError
RaiseException
DuplicateHandle
CloseHandle
InterlockedCompareExchange
InterlockedIncrement
InterlockedDecrement
InterlockedExchangeAdd
InterlockedExchange
LocalFree
LocalAlloc
Sleep
TerminateProcess
GetCurrentProcess
GetCurrentProcessId
OpenProcessToken
CreateThread
ResumeThread
ProcessIdToSessionId
GetCurrentThread
GetCurrentThreadId
OpenThreadToken
QueryPerformanceCounter
CreateEventW
LeaveCriticalSection
WaitForSingleObject
DeleteCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
OpenProcess
ReleaseSemaphore
GetSystemTime
GetTickCount
SystemTimeToFileTime
GetSystemTimeAsFileTime
GetSystemDirectoryW
RegisterServiceCtrlHandlerExW
SetServiceStatus
QueryServiceStatus
OpenServiceW
OpenSCManagerW
CloseServiceHandle
ChangeServiceConfigW
QueryServiceConfigW
UnregisterWaitEx
LoadLibraryW
WaitForMultipleObjects
RaiseFailFastException
WTSGetActiveConsoleSessionId
CancelSynchronousIo
UnregisterWait
RegisterWaitForSingleObject
CreateSemaphoreW
OutputDebugStringA
CompareFileTime
WriteFile
ReadFile
CreateFileW
FindClose
FindNextFileW
FindFirstFileW
GetProcessHeap
HeapAlloc
HeapFree
CreateIoCompletionPort
GetOverlappedResult
DeviceIoControl
GetQueuedCompletionStatus
PostQueuedCompletionStatus
GetProcAddress
FreeLibraryAndExitThread
GetModuleHandleExW
FreeLibrary
GetModuleHandleW
CreatePipe
LookupAccountSidLocalW
GetLengthSid
EqualDomainSid
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
CreateWellKnownSid
AllocateAndInitializeSid
InitializeSecurityDescriptor
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
FreeSid
CredProtectW
EventUnregister
EventWrite
RegCloseKey
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegGetValueW
RegEnumKeyExW
RegQueryValueExW
AccessCheck
CopySid
EventRegister
GetTokenInformation
ConvertStringSecurityDescriptorToSecurityDescriptorW
EqualSid
IsValidSid
LogonUserW
CredIsProtectedW
ImpersonateLoggedOnUser
UnregisterDeviceNotification
RegisterDeviceNotificationW
CoTaskMemAlloc
CoTaskMemFree
UuidCreate
RpcServerUseProtseqEpW
RpcServerListen
RpcServerInqBindings
RpcImpersonateClient
RpcAsyncCompleteCall
RpcRevertToSelfEx
RpcServerInqCallAttributesW
RpcServerSubscribeForNotification
RpcServerRegisterIfEx
RpcEpRegisterW
RpcEpUnregister
RpcServerUnregisterIf
RpcBindingVectorFree
NdrAsyncServerCall
RpcServerTestCancel
RpcServerUnsubscribeForNotification
RpcMgmtStopServerListening
RpcRevertToSelf
NdrServerCall2
GetFileVersionInfoSizeW
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiGetDeviceInstanceIdW
SetupDiOpenDevRegKey
SetupDiGetClassDevsExW
VaultFree
VaultCreateItemType
VaultGetItemType
VaultOpenVault
VaultAddItem
VaultEnumerateItems
VaultRemoveItem
VaultGetItem
VaultCloseVault
RtlEqualSid
RtlImageNtHeader
RtlGetNtProductType
CryptUnprotectData
CryptUnprotectMemory
CryptProtectData
NetApiBufferFree
NetUserModalsGet
NetGetJoinInformation
WTSDisconnectSession
WTSQuerySessionInformationW
WTSFreeMemory
LsaDeregisterLogonProcess
LsaConnectUntrusted
LsaLookupAuthenticationPackage
LsaFreeReturnBuffer
LsaLogonUser
CredPackAuthenticationBufferW
ServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
__CxxFrameHandler3
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
_CxxThrowException
vswprintf_s
memcpy
sscanf_s
__RTDynamicCast
_purecall
swprintf_s
??0exception@@QAE@ABQBD@Z
memmove_s
memcpy_s
memset
_vsnwprintf
malloc
free
_callnewh
_XcptFilter
_initterm
_amsg_exit
??1type_info@@UAE@XZ
_except_handler4_common
?terminate@@YAXXZ
_unlock
__dllonexit
_onexit
_lock
??0exception@@QAE@XZ
EtwEventRegister
EtwEventUnregister
EtwGetTraceEnableFlags
EtwGetTraceEnableLevel
EtwGetTraceLoggerHandle
EtwRegisterTraceGuidsW
EtwUnregisterTraceGuids
EtwEventWrite
RtlInitUnicodeString
RtlNtStatusToDosError
EtwTraceMessage
NtOpenFile
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
OpenThreadToken
GetCurrentThread
GetCurrentProcess
SetServiceStatus
RegisterServiceCtrlHandlerExW
AcquireSRWLockShared
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
GetComputerNameExW
ReleaseSRWLockShared
GetTickCount64
WaitForThreadpoolTimerCallbacks
WaitForSingleObjectEx
LeaveCriticalSection
EnterCriticalSection
InitializeSRWLock
GetVersionExW
SubmitThreadpoolWork
WaitForSingleObject
CloseThreadpoolWork
CloseThreadpoolTimer
OutputDebugStringA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
WaitForThreadpoolWorkCallbacks
ResetEvent
WaitForMultipleObjectsEx
SetLastError
DeviceIoControl
SetThreadpoolTimer
QueryPerformanceCounter
Sleep
GetLastError
SetEvent
CloseHandle
UnregisterWaitEx
CreateEventW
RaiseException
InitializeCriticalSection
DeleteCriticalSection
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
CreateThreadpoolCleanupGroup
CloseThreadpoolCleanupGroup
CloseThreadpoolCleanupGroupMembers
CreateThreadpoolWork
CreateThreadpoolTimer
InterlockedExchange
MultiByteToWideChar
WideCharToMultiByte
InterlockedCompareExchange
GetTickCount
CoInitializeEx
CoUninitialize
CoCreateInstance
IIDFromString
CoDisconnectContext
StringFromGUID2
SysAllocString
SafeArrayUnlock
SafeArrayLock
SafeArrayCreate
VariantInit
SafeArrayPutElement
SafeArrayGetElement
SafeArrayAccessData
SafeArrayUnaccessData
VariantClear
SysFreeString
SafeArrayDestroy
WlanGetAvailableNetworkList
WlanCloseHandle
WlanOpenHandle
WlanConnect
WlanHostedNetworkStopUsing
WlanDisconnect
WlanGetNetworkBssList
WlanFreeMemory
WlanEnumInterfaces
WlanRegisterNotification
WlanHostedNetworkQueryStatus
WlanHostedNetworkStartUsing
WlanQueryInterface
WlanInternalScan
WlanHostedNetworkSetWCNSettings
RegGetValueW
GetTokenInformation
RpcServerSubscribeForNotification
RpcServerUnsubscribeForNotification
RpcAsyncCompleteCall
NdrAsyncServerCall
RpcImpersonateClient
NdrServerCall2
UuidCreate
RpcStringFreeW
RpcBindingVectorFree
RpcServerUnregisterIfEx
RpcEpUnregister
RpcEpRegisterW
RpcServerInqBindings
RpcServerRegisterIfEx
RpcRevertToSelf
RpcAsyncAbortCall
RpcServerUseProtseqEpW
RpcBindingToStringBindingW
RpcStringBindingParseW
RpcServerInqDefaultPrincNameW
RpcServerRegisterAuthInfoW
BCryptDecrypt
BCryptCloseAlgorithmProvider
BCryptSetProperty
BCryptGetProperty
BCryptOpenAlgorithmProvider
BCryptGenRandom
BCryptDestroyHash
BCryptFinishHash
BCryptHashData
BCryptCreateHash
BCryptDeriveKey
BCryptSecretAgreement
BCryptDestroySecret
BCryptDestroyKey
BCryptExportKey
BCryptImportKeyPair
BCryptFinalizeKeyPair
BCryptGenerateKeyPair
BCryptGenerateSymmetricKey
BCryptEncrypt
SvchostPushServiceGlobals
WcnServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ