Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
19bc90ffa91943d2c62390d0ffc52740_NEIKI.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
19bc90ffa91943d2c62390d0ffc52740_NEIKI.exe
Resource
win10v2004-20240508-en
Target
19bc90ffa91943d2c62390d0ffc52740_NEIKI
Size
1.6MB
MD5
19bc90ffa91943d2c62390d0ffc52740
SHA1
92356b980d2824788e7d4b502e922396c4c0bd13
SHA256
b718636851f186d84ff9177b85ba2ec952517cfe666afeaaf58aa116326f2cf3
SHA512
6bfd2bc27cfe8a173cae0604711da5a5a79fd3bf76dfe3096c3ad4393cf623d826b7616cf7d3451fecb648bc857adea4bd4c4aa365c421a0fe1f87a7ade5c738
SSDEEP
12288:ZgS4lBq9898jWkb2F/jgwCGkgMctNr1CSbCqMPFROvw8Y8KRFe4CO+uJyudeUQeW:T4lB798jJb29EpGFMctNade9eLa
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
?BDMGetWindowsVersion@BDMMisc@@YAHAAKPA_WH@Z
?BDMGetProcessCmdLineAndImgPathW@BDMBase@@YGHKPA_WK0K@Z
?SafeLoadLibrary@BDMSafeLoadLibrary@@YGPAUHINSTANCE__@@PB_WH@Z
BDMIsFileExist
_BDMZlibRC4DeFileToBuf@24
??0CBDMWin64Helper@BDMBase@@QAE@XZ
??1CBDMWin64Helper@BDMBase@@QAE@XZ
?Is64BitWindows@CBDMWin64Helper@BDMBase@@QAEHXZ
_BDMGetFileMD5W_2@8
?init@md5_engine@@QAEXXZ
?update@md5_engine@@QAEXPBXI@Z
?final@md5_engine@@QAEXPAX@Z
??0md5_engine@@QAE@XZ
_BDMMd5HashBuffer@12
GetDriverManager
UninitDriverManager
InitDriverManager
?BDLogicUtilsLibrary_Init@BDLogicUtils@@YAHXZ
?BDLogicUtilsLibrary_Unit@BDLogicUtils@@YAHXZ
?GetBDCrashCatcher@BDLogicUtils@@YAPAVIBDCrashCatcher@1@XZ
?GetBDMReportMgr@BDLogicUtils@@YAPAVIBDMReportMgr@1@XZ
?FirstChildElement@TiXmlNode@BDMTinyxml@@QAEPAVTiXmlElement@2@PBD@Z
?InsertEndChild@TiXmlNode@BDMTinyxml@@QAEPAV12@ABV12@@Z
?NextSiblingElement@TiXmlNode@BDMTinyxml@@QAEPAVTiXmlElement@2@PBD@Z
?SaveFile@TiXmlDocument@BDMTinyxml@@QBE_NPB_W@Z
?LoadFile@TiXmlDocument@BDMTinyxml@@QAE_NPB_WW4TiXmlEncoding@2@@Z
?SetAttribute@TiXmlElement@BDMTinyxml@@QAEXPBD0@Z
?Attribute@TiXmlElement@BDMTinyxml@@QBEPBDPBD@Z
?Attribute@TiXmlElement@BDMTinyxml@@QBEPBDPBDPAH@Z
??1TiXmlElement@BDMTinyxml@@UAE@XZ
?Attribute@TiXmlElement@BDMTinyxml@@QBEPBDPBDPAN@Z
?Error@TiXmlDocument@BDMTinyxml@@QBE_NXZ
??0TiXmlDocument@BDMTinyxml@@QAE@XZ
?RootElement@TiXmlDocument@BDMTinyxml@@QAEPAVTiXmlElement@2@XZ
?NextSibling@TiXmlNode@BDMTinyxml@@QAEPAV12@PBD@Z
?FirstChild@TiXmlNode@BDMTinyxml@@QAEPAV12@PBD@Z
?InsertAfterChild@TiXmlNode@BDMTinyxml@@QAEPAV12@PAV12@ABV12@@Z
?InsertBeforeChild@TiXmlNode@BDMTinyxml@@QAEPAV12@PAV12@ABV12@@Z
??0TiXmlElement@BDMTinyxml@@QAE@PBD@Z
??1TiXmlDocument@BDMTinyxml@@UAE@XZ
?RemoveChild@TiXmlNode@BDMTinyxml@@QAE_NPAV12@@Z
?GetSystemDirectory_DLL@BDMStringUtils@@YA_NPA_WH@Z
?GetWindowsDirectory_DLL@BDMStringUtils@@YA_NPA_WH@Z
lstrcmpiA
CopyFileW
CreateToolhelp32Snapshot
MoveFileExW
TerminateProcess
GetCurrentThread
SetThreadPriority
CreateEventW
CreateMutexW
GetProcessHeap
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
GetCurrentProcess
FindFirstFileW
FindClose
FindNextFileW
CreateFileA
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
OutputDebugStringA
QueryDosDeviceW
GetEnvironmentVariableW
Module32FirstW
GetLogicalDriveStringsW
Module32NextW
ReadProcessMemory
RemoveDirectoryW
CreateDirectoryW
SetFileAttributesW
GetVersionExW
ProcessIdToSessionId
GetCurrentProcessId
CreateIoCompletionPort
TlsGetValue
TlsFree
CreateNamedPipeA
DuplicateHandle
GetNamedPipeInfo
PostQueuedCompletionStatus
InterlockedCompareExchange
TlsAlloc
InterlockedExchangeAdd
DisconnectNamedPipe
OpenProcess
InitializeCriticalSectionAndSpinCount
WaitNamedPipeA
SetNamedPipeHandleState
SleepEx
WaitForSingleObjectEx
TlsSetValue
SetWaitableTimer
QueueUserAPC
TerminateThread
WaitForMultipleObjects
GetQueuedCompletionStatus
CreateWaitableTimerA
QueryPerformanceCounter
QueryPerformanceFrequency
GetModuleHandleA
ResetEvent
OpenEventA
LoadLibraryW
InterlockedDecrement
lstrlenW
CloseHandle
FreeLibrary
SetEvent
WaitForSingleObject
GetModuleFileNameW
CreateEventA
InterlockedIncrement
GetProcAddress
GetFileAttributesW
GetModuleHandleW
LocalFree
ExitProcess
CreateProcessW
GetCurrentThreadId
SetLastError
lstrcmpiW
DeleteCriticalSection
LeaveCriticalSection
InitializeCriticalSection
EnterCriticalSection
GetFileAttributesExW
GetTickCount
CreateFileW
WriteFile
GetFileSize
ReadFile
GetLastError
SetFilePointer
WideCharToMultiByte
CreateSemaphoreW
Process32NextW
Process32FirstW
ConnectNamedPipe
DeleteFileW
MultiByteToWideChar
ReleaseSemaphore
InterlockedExchange
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ResumeThread
SystemTimeToFileTime
Sleep
FormatMessageA
GetUserDefaultLCID
GetStringTypeExW
LCMapStringW
LoadLibraryA
LoadStringW
wsprintfW
QueryServiceStatus
RegOpenKeyExW
RegCloseKey
ConvertSidToStringSidW
FreeSid
LookupAccountSidW
LookupAccountNameW
RegOpenKeyW
AllocateAndInitializeSid
RegEnumKeyExW
OpenSCManagerW
ControlService
RegSetValueExW
StartServiceW
OpenServiceW
CloseServiceHandle
RegCreateKeyExW
StartServiceCtrlDispatcherW
SetServiceStatus
RegisterServiceCtrlHandlerW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
RevertToSelf
ImpersonateLoggedOnUser
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegQueryValueExW
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?push_back@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXD@Z
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?max@?$numeric_limits@I@std@@SAIXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?length@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?empty@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE_NXZ
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?max@?$numeric_limits@H@std@@SAHXZ
?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?length@?$char_traits@_W@std@@SAIPB_W@Z
?find_first_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?data@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
?at@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WI@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IIPB_W@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?str@strstreambuf@std@@QAEPADXZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
??1strstreambuf@std@@UAE@XZ
?ends@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??0strstreambuf@std@@QAE@H@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHPB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W0@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IIABV12@@Z
?find_first_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?_Tidy@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEX_NI@Z
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@I_W@Z
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@0@Z
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@0@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?insert@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V32@_W@Z
??$?O_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W0@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NPB_WABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
?size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
PathFindFileNameW
PathRemoveFileSpecW
PathFileExistsW
StrCmpIW
StrStrIW
swscanf_s
swprintf_s
memmove_s
_wcslwr
_snwprintf_s
_beginthreadex
wcschr
wcsrchr
_vsnwprintf_s
wcsncpy
fputs
__iob_func
__CxxFrameHandler3
memset
_CxxThrowException
memcpy
_except_handler3
memmove
atof
wcstombs_s
realloc
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z
?terminate@@YAXXZ
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_invoke_watson
_controlfp_s
fflush
_snprintf
strerror
_gmtime64
??3@YAXPAX@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
fprintf
??0exception@std@@QAE@ABV01@@Z
wcsstr
atoi
_wcsicmp
_invalid_parameter_noinfo
??2@YAPAXI@Z
_purecall
??0exception@std@@QAE@ABQBDH@Z
wcsncpy_s
??_V@YAXPAX@Z
_stricmp
__RTtypeid
_wcsnicmp
vsprintf_s
towupper
_wtoi
towlower
malloc
printf
free
_snwprintf
wcsncat_s
??8type_info@@QBE_NABV0@@Z
GetProcessImageFileNameW
NetUserEnum
NetApiBufferFree
ImageGetCertificateHeader
CertGetNameStringW
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
WSAStartup
WSACleanup
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ