Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
67ceffdce15a3a53856a706b4624bd9f20a67f1d630c1d89ef41da4686a5884d.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
67ceffdce15a3a53856a706b4624bd9f20a67f1d630c1d89ef41da4686a5884d.dll
Resource
win10v2004-20240426-en
Target
67ceffdce15a3a53856a706b4624bd9f20a67f1d630c1d89ef41da4686a5884d
Size
1.7MB
MD5
32a2cde55e8f5d0658d0186528292923
SHA1
1bb1e54fbfee4a34c33bbebd67a2a9b65ae0d230
SHA256
67ceffdce15a3a53856a706b4624bd9f20a67f1d630c1d89ef41da4686a5884d
SHA512
91247336ddd8ca2a0c8894599cf66d8db8fb900a170252483c0897322c37107bdfe02c260dbfa32197c54dfb36b641aafa661fa2caf3ad7124286928347f1025
SSDEEP
49152:qG6uzrAvMi54zcB85ZzxRtrORiwnP1yIi0p:qGZzoMi54z+8f4nP
resource | yara_rule |
---|---|
sample | INDICATOR_SUSPICIOUS_EXE_SQLQuery_ConfidentialDataStore |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
e:\AMWork\branches\BRCloudv2\output\win32\release\UiLogic.pdb
CreateDdmManager
GetObjectGpt
GetObjSockHlp
GetObjectLang
GetObjectSys
GetObjectLog
CreateFuncExecute
CreateEnumDisk
CreateMountDisk
RpcStringFreeW
NdrClientCall2
RpcBindingFromStringBindingW
RpcBindingFree
RpcImpersonateClient
UuidCreate
RpcStringBindingComposeW
RpcRevertToSelf
CreateObjectImgInfo
CreateObjectFlbImgFile
SHGetFolderPathW
ShellExecuteExW
SHGetFolderPathA
CreateEncryptObject
StrToHex
HexToStr
BRCrc32
CreateEnumRemoteFolder
CreateCompressObject
GetBrLogMgr
PathIsDirectoryW
PathAppendW
PathFileExistsW
SHDeleteKeyW
PathFindFileNameW
WNetGetUniversalNameW
?getTaskSuccessCnt@NS_AMCB_CONSOLE@@YAIPBGAAH@Z
?getBakTaskVersions@NS_AMCB_CONSOLE@@YAIPBGAAV?$set@HU?$less@H@std@@V?$allocator@H@2@@std@@@Z
?getTaskStrategyInfo@NS_AMCB_CONSOLE@@YAIPBGAAU_tag_POLICY_PARAM@@@Z
?updateTaskLastResTime@NS_AMCB_CONSOLE@@YAIPBG_J@Z
?updateTaskStrategyInfo@NS_AMCB_CONSOLE@@YAIPBGABU_tag_POLICY_PARAM@@@Z
?getTaskType@NS_AMCB_CONSOLE@@YAIPBGAAW4AMCB_TASK_TYPE@@@Z
?updateTaskType@NS_AMCB_CONSOLE@@YAIPBGW4AMCB_TASK_TYPE@@@Z
?freeTaskInfo@NS_AMCB_CONSOLE@@YAIPAU_tag_AMCB_BACKUP_TASK_INFO@@@Z
?updateTaskDisplayName@NS_AMCB_CONSOLE@@YAIPBG0@Z
?updateTaskLastExecTime@NS_AMCB_CONSOLE@@YAIPBG_J@Z
?getTaskProg@NS_AMCB_CONSOLE@@YAIW4AMCB_TASK_TYPE@@PBGAAU_tag_AMCB_TASK_PROG_DETAIL@@_N@Z
?UidForPartition@DeviceUtil@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@D_N@Z
?UidForDrive@DeviceUtil@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAGPAV23@_N@Z
?GetCurRemovablePartitions@DeviceUtil@@SAXPAV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@DU?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@D@std@@@2@@std@@@Z
GetObjSendClass
GetDriveTypeW
CloseHandle
GetVersionExW
GetModuleFileNameW
CreateFileW
LoadLibraryW
GetFileAttributesA
GetModuleFileNameA
SystemTimeToFileTime
LocalFree
GetSystemTime
GetModuleHandleW
SetLastError
GetSystemInfo
GetPrivateProfileStringA
CreateDirectoryA
WritePrivateProfileStringA
GetLocalTime
GetTempPathW
SetFileAttributesW
DeleteFileW
CreateFileA
CreateDirectoryW
DeleteFileA
GetFileSize
GetVolumeInformationW
CopyFileExW
SetVolumeMountPointW
GetTempPathA
GetDiskFreeSpaceExW
IsBadWritePtr
DeleteVolumeMountPointW
ReadFile
SetFilePointer
GetFileSizeEx
ReleaseMutex
CreateEventW
HeapFree
WaitForSingleObject
GetTickCount
GetProcessHeap
CreateMutexW
SetEvent
OpenEventW
ResetEvent
GetVersion
GetWindowsDirectoryA
GetWindowsDirectoryW
WinExec
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetStartupInfoW
CreateThread
GetNativeSystemInfo
CreateProcessW
SetFilePointerEx
CopyFileW
FlushFileBuffers
IsBadReadPtr
lstrlenW
lstrlenA
SetConsoleTextAttribute
GetVolumeNameForVolumeMountPointW
GetPrivateProfileIntA
FindResourceExW
FindResourceW
LoadResource
ReadConsoleW
GetConsoleWindow
WriteConsoleW
GetStdHandle
WaitForSingleObjectEx
CreateFileMappingA
TryEnterCriticalSection
OutputDebugStringW
GetCurrentProcessId
MapViewOfFile
UnlockFileEx
UnmapViewOfFile
CreateFileMappingW
GetSystemTimeAsFileTime
AreFileApisANSI
FormatMessageA
SetEndOfFile
GetDiskFreeSpaceA
GetFullPathNameW
QueryPerformanceCounter
GetFullPathNameA
HeapSize
GetFileAttributesExW
FormatMessageW
HeapReAlloc
InterlockedCompareExchange
LockFileEx
HeapDestroy
GetCurrentThreadId
UnlockFile
OutputDebugStringA
GetDiskFreeSpaceW
HeapCreate
HeapCompact
FlushViewOfFile
GetVersionExA
LockFile
HeapValidate
LoadLibraryA
GetSystemDirectoryW
CreatePipe
GetExitCodeProcess
LocalAlloc
WTSGetActiveConsoleSessionId
OpenProcess
GetCurrentThread
GenerateConsoleCtrlEvent
TerminateProcess
CreateProcessA
OpenMutexW
FindClose
FindFirstFileW
GetPrivateProfileIntW
Process32FirstW
Process32NextW
MultiByteToWideChar
DeviceIoControl
GetCurrentProcess
WritePrivateProfileStringW
GetProcAddress
GetPrivateProfileStringW
GetComputerNameW
GetFileAttributesW
RaiseException
GetLastError
WriteFile
SizeofResource
GetLogicalDriveStringsW
GetThreadLocale
GetLocaleInfoA
GetACP
IsDebuggerPresent
SetUnhandledExceptionFilter
Sleep
FreeLibrary
LockResource
CreateToolhelp32Snapshot
RemoveDirectoryW
FindNextFileW
WideCharToMultiByte
AllocConsole
FindFirstFileA
UnhandledExceptionFilter
HeapAlloc
InterlockedExchange
wsprintfW
GetSystemMetrics
DeleteMenu
GetSystemMenu
SetProcessWindowStation
CloseDesktop
GetUserObjectSecurity
GetThreadDesktop
SetThreadDesktop
CloseWindowStation
OpenWindowStationW
OpenDesktopW
SetUserObjectSecurity
GetProcessWindowStation
UnregisterClassA
RegDeleteKeyW
RegQueryValueExW
ConvertSecurityDescriptorToStringSecurityDescriptorW
RegSetKeySecurity
RegFlushKey
CreateProcessAsUserW
StartServiceW
RegEnumValueW
ChangeServiceConfigW
OpenProcessToken
CloseServiceHandle
ControlService
OpenSCManagerW
AdjustTokenPrivileges
QueryServiceStatus
RegOpenKeyExW
RegCloseKey
RegEnumKeyExA
DuplicateTokenEx
RegQueryInfoKeyW
LookupPrivilegeValueW
AddAce
GetAclInformation
GetSecurityDescriptorDacl
OpenServiceW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegGetKeySecurity
RegOpenKeyExA
RegQueryValueExA
QueryServiceConfigW
InitializeAcl
SetSecurityDescriptorDacl
FreeSid
AllocateAndInitializeSid
GetLengthSid
GetTokenInformation
RevertToSelf
SetTokenInformation
ImpersonateLoggedOnUser
GetAce
OpenThreadToken
CopySid
SetFileSecurityA
RegLoadKeyW
RegEnumKeyExW
SetSecurityInfo
RegUnLoadKeyW
SetEntriesInAclW
ConvertStringSidToSidW
BuildExplicitAccessWithNameW
SetNamedSecurityInfoW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegSetValueExA
InitializeSecurityDescriptor
AddAccessAllowedAce
LogonUserW
RegDeleteKeyA
RegOpenKeyW
CoUninitialize
CoInitialize
CoCreateGuid
CoCreateInstance
VariantInit
SysAllocString
SysFreeString
VariantClear
VariantChangeType
SystemTimeToVariantTime
rand_s
gets
memset
strlen
_errno
fflush
fread_s
wcslen
_wgetenv_s
memcpy
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
__CxxFrameHandler3
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_msize
realloc
_endthreadex
_dupenv_s
wcsncpy_s
wcsncat_s
_vscwprintf
_vscprintf
vsprintf_s
rand
vswprintf_s
srand
_vsnwprintf
_vsnprintf
wprintf
_beginthreadex
memmove
isalpha
tolower
isalnum
isspace
ferror
_vsnprintf_s
_fsopen
fputc
strstr
_wfopen_s
fprintf
fwrite
fopen_s
_wcsicmp
ftell
fclose
fread
fseek
_gmtime64
_vswprintf_c_l
strncmp
setlocale
wcsftime
swscanf_s
sscanf_s
calloc
memcpy_s
atoi
sscanf
strcpy_s
strtok_s
mbstowcs
_localtime64
strftime
_mktime64
strcat_s
_atoi64
_localtime64_s
_time64
sprintf_s
_difftime64
printf
wcsstr
strncpy
_wtoi
_vswprintf
swprintf_s
??_U@YAPAXI@Z
wcsncpy
memmove_s
??2@YAPAXI@Z
_swprintf
_CIpow
wcsrchr
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
wcscpy_s
strchr
??_V@YAXPAX@Z
wcstombs
sprintf
_itow
strrchr
_wcsnicmp
strncpy_s
wcscat_s
strncat_s
_purecall
??0exception@std@@QAE@ABV01@@Z
??3@YAXPAX@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
_invalid_parameter_noinfo
malloc
free
_wcsupr
_CxxThrowException
_finite
_snprintf
modf
wcschr
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??0?$_String_val@DV?$allocator@D@std@@@std@@IAE@V?$allocator@D@1@@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IPBDI@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@@Z
?uncaught_exception@std@@YA_NXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??_D?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??$getline@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??0?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAE@PB_WHH@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?rbegin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$reverse_iterator@V?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@XZ
?push_back@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXD@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??Bios_base@std@@QBEPAXXZ
??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@D@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?_Myptr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEPADXZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHPBD@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
?insert@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IPB_W@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHPB_W@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@DABV10@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
?length@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
?deallocate@?$allocator@D@std@@QAEXPADI@Z
?size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
?deallocate@?$allocator@_W@std@@QAEXPA_WI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?allocate@?$allocator@D@std@@QAEPADI@Z
?allocate@?$allocator@_W@std@@QAEPA_WI@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??0?$allocator@D@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
gethostbyname
WSAStartup
WSACleanup
inet_ntoa
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
WTSQuerySessionInformationW
WTSFreeMemory
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpOpenRequest
WinHttpOpen
WinHttpConnect
WinHttpCloseHandle
WinHttpAddRequestHeaders
WinHttpSetOption
WinHttpWriteData
WinHttpQueryHeaders
InternetReadFile
InternetOpenA
InternetCloseHandle
HttpQueryInfoA
InternetConnectA
InternetSetOptionW
HttpSendRequestA
HttpOpenRequestA
LoadUserProfileW
CreateEnvironmentBlock
UnloadUserProfile
GetUserProfileDirectoryW
DestroyEnvironmentBlock
AskServiceReloadRegInfo
CreateShutdownCfg
CreateShutdownMgr
CreateUiLogic
CreateUiOptions
CreateUiPolicyPtr
GetObjGATrackingData
GetObjTaskMgrHlp
GetRecordObj
GetScheduleObj
GetUserObject
SendUpdateSyncEvent2ABService
TerminateSpawnProcess
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ