WsmAuto.pdb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WsmAuto.dll
Resource
win10v2004-20240426-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
WsmAuto.dll
-
Size
139KB
-
MD5
4695454b0f9bf7a377397ce3734fd7de
-
SHA1
ccf3a930fe8361f19d1dcdaffcaae8f7246b8b74
-
SHA256
7240e671f452f95c0b02b7b9147fd1e1415ed96db984bf7d2e0dfa33f18720af
-
SHA512
db47109b4d6464883c5d502eb9b20c293277c6e86857587b50618af5a150becebe4e2ab536ad7d97433055acf4244b4ffdf6693f5977a6e75ab159f9873909e5
-
SSDEEP
1536:jE2M9w6luZp3d/YmDI0HOMiwLN0qvqU4Njyhywqu4JLTsPkglWDrq8o+mSeUqdYQ:Bww6E3dxbBUq/5j/IOSkirAsa0WEe
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource WsmAuto.dll
Files
-
WsmAuto.dll.dll regsvr32 windows:10 windows x86 arch:x86
471e376f8693c88422d69f576d6185a8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_except_handler4_common
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_initterm
_amsg_exit
_XcptFilter
__CxxFrameHandler3
_CxxThrowException
_vsnwprintf
_scwprintf
_wcsicmp
wcscpy_s
realloc
wcscat_s
malloc
free
memmove_s
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@XZ
??1exception@@UAE@XZ
?what@exception@@UBEPBDXZ
_purecall
memcpy_s
__RTDynamicCast
memcmp
memcpy
memset
crypt32
CertFreeCertificateContext
CertFreeCertificateChain
api-ms-win-core-com-l1-1-1
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
api-ms-win-security-base-l1-2-0
ImpersonateLoggedOnUser
api-ms-win-core-errorhandling-l1-1-1
SetUnhandledExceptionFilter
GetLastError
UnhandledExceptionFilter
api-ms-win-core-handle-l1-1-0
CloseHandle
oleaut32
VariantChangeTypeEx
VariantInit
SetErrorInfo
CreateErrorInfo
VariantClear
LoadTypeLi
SysAllocString
SysStringLen
RegisterTypeLi
SysFreeString
SysAllocStringLen
VarUI4FromStr
api-ms-win-core-libraryloader-l1-2-0
LoadResource
FindResourceExW
GetProcAddress
SizeofResource
LoadLibraryExW
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
DisableThreadLibraryCalls
api-ms-win-core-registry-l1-1-0
RegEnumValueW
RegCreateKeyExW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteValueW
RegSetValueExW
RegCloseKey
api-ms-win-core-string-l2-1-0
CharPrevW
CharNextW
api-ms-win-core-memory-l1-1-2
VirtualProtect
VirtualAlloc
VirtualQuery
api-ms-win-core-sysinfo-l1-2-1
GetSystemTimeAsFileTime
GetTickCount
GetSystemInfo
GetVersionExW
api-ms-win-core-string-l1-1-0
MultiByteToWideChar
api-ms-win-core-synch-l1-2-0
InitializeCriticalSection
Sleep
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
api-ms-win-eventing-classicprovider-l1-1-0
UnregisterTraceGuids
GetTraceLoggerHandle
TraceMessage
RegisterTraceGuidsW
GetTraceEnableLevel
GetTraceEnableFlags
api-ms-win-core-heap-l1-2-0
HeapDestroy
api-ms-win-core-processenvironment-l1-2-0
GetCommandLineW
api-ms-win-core-debug-l1-1-1
OutputDebugStringA
api-ms-win-core-processthreads-l1-1-2
GetCurrentThreadId
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-threadpool-legacy-l1-1-0
UnregisterWaitEx
api-ms-win-core-heap-obsolete-l1-1-0
LocalAlloc
LocalFree
api-ms-win-core-string-obsolete-l1-1-0
lstrcpynW
lstrcpyW
lstrcmpiW
miutils
RtlReleaseFastLockShared
RtlTryAcquireFastLockShared
RtlReleaseFastLockExclusive
RtlInterlockedCompareWait
RtlInterlockedWakeAll
RtlQueueAcquireFastLockShared
RtlTryAcquireFastLockExclusive
RtlQueueAcquireFastLockExclusive
wsmsvc
?Init@XmlReader@@QAEHPAVIRequestContext@@PAUWSMAN_OBJECT@@@Z
??0CWSManSecurityUI@@QAE@XZ
?StringCchEqualsCI@@YGHPBG0@Z
??1XmlReader@@QAE@XZ
??0XmlReader@@QAE@XZ
?ClearOptions@CWSManResourceNoResourceUri@@QAEHXZ
?AddOption@CWSManResourceNoResourceUri@@QAEHPBG0HPAVIRequestContext@@@Z
?ClearKeys@CWSManResourceNoResourceUri@@QAEHXZ
?AddKey@CWSManResourceNoResourceUri@@QAEHPBG0PAVIRequestContext@@@Z
?GetLocator@CWSManResource@@QAEPAU_WSMAN_RESOURCE_LOCATOR@@XZ
?SetFragmentDialect@CWSManResourceNoResourceUri@@QAEHPBGPAVIRequestContext@@@Z
?SetFragmentPath@CWSManResourceNoResourceUri@@QAEHPBGPAVIRequestContext@@@Z
?GetFragmentPath@CWSManResourceNoResourceUri@@QAEPBGXZ
?GetRoot@XmlReader@@QAEPAU_FWXML_ELEMENT@@XZ
?GrowBuffer@BufferFormatter@@UAEKXZ
?SetUri@CWSManResource@@QAEHPBGPAVIRequestContext@@@Z
??6BufferFormatter@@UAEAAV0@AAVBufferFormatterDataXmlEscape@@@Z
??6BufferFormatter@@UAEAAV0@AAVBufferFormatterDataFormatULONGLONG@@@Z
FwXmlCompareElementName
FwXmlFindAttribute
??6BufferFormatter@@UAEAAV0@AAVBufferFormatterDataFormatDWORD@@@Z
??6BufferFormatter@@UAEAAV0@K@Z
??6BufferFormatter@@UAEAAV0@PAU_FWXML_ELEMENT@@@Z
??6BufferFormatter@@UAEAAV0@AAVBufferFormatterDataPUCHAR@@@Z
??6BufferFormatter@@UAEAAV0@AAVBufferFormatterDataPCWSTR@@@Z
FwXmlCloseParser
?SetMachineName@CRequestContext@@QAEKPBGI@Z
?RecordXml@CRequestContext@@AAEHKPAU_FWXML_ELEMENT@@K@Z
?RecordText@CRequestContext@@AAEHKPBGIK@Z
?GetFaultXMLPrivate@CRequestContext@@AAEXPAPAD0KHKKPBG11@Z
?Alloc@WSManMemory@@SGPAXIHW4_NitsFaultMode@@@Z
?Free@WSManMemory@@SGXPAXH@Z
?FreeBstr@WSManMemory@@SGXPAGHH@Z
?GetUri@CWSManResource@@QAEPBGXZ
?UpdateKey@CWSManResourceNoResourceUri@@QAEHPAVIRequestContext@@PBG1@Z
??0PacketFormatter@@QAE@XZ
FwXmlGetAttributeValue
?SetCharsetAndBom@PacketFormatter@@QAEXW4Charset@1@0@Z
?SetCharset@PacketFormatter@@QAEXW4Charset@1@@Z
?GetFormat@PacketFormatter@@QBE?AW4Charset@1@XZ
?InternalParse@CWSManResource@@MAEHPAVIRequestContext@@@Z
??0CErrorContext@@QAE@_N@Z
?PrintUnregisterWaitTrace@@YGXPAX@Z
?GetSpaceUsed@CircularBufferFormatter@@UBEK_N@Z
?GetCalculationSize@CircularBufferFormatter@@UBEK_N@Z
?GetBuffer@CircularBufferFormatter@@UAEPAEXZ
?GrowBuffer@CircularBufferFormatter@@UAEKK@Z
?GetKeyValue@CWSManResourceNoResourceUri@@QAEPBGPBG@Z
?Parse@CWSManResource@@SGPAV1@PAVIRequestContext@@PBGH@Z
?Reset@CRequestContext@@UAEXH@Z
?Uri@CResourceAlias@@QAEPBGXZ
??1CResourceAlias@@QAE@XZ
??0CResourceAlias@@QAE@PBG@Z
WSManCloseEnumerationHandle
WSManCloseSessionHandle
WSManCreateSessionInternal
WSManEnumerateInternalEx
?GrowBuffer@CircularBufferFormatter@@UAEKXZ
?PrintHandleTrace@@YGXPAX@Z
?Init@CWSManSecurityUI@@QAEHPAG0PAVIRequestContext@@@Z
?GetUpdatedSDDL@CWSManSecurityUI@@QAEPAGPAVIRequestContext@@@Z
FwXmlEncodeXmlEscapes
?RecordFailure@CRequestContext@@UAEXPAU_WSMAN_FAULT_OBJECT@@@Z
WSManCloseObjectHandle
WSManCloseEnumeratorHandle
WSManEnumeratorNextObject
WSManPull
??0CWSManResourceNoResourceUri@@QAE@H@Z
?GrowBuffer@BufferFormatter@@UAEKK@Z
?PrepareToCommitWithSize@BufferFormatter@@UAEKK@Z
?WSManError@@YGXPBGK0KPAVIRequestContext@@@Z
?BuildSelectorSet@CWSManResourceNoResourceUri@@UAEHAAVBufferFormatter@@@Z
?BuildFragmentTransfer@CWSManResourceNoResourceUri@@UAEHAAVBufferFormatter@@@Z
?IsEPR@CWSManResourceNoResourceUri@@UAEHXZ
??1CWSManResourceNoResourceUri@@UAE@XZ
?GetString@Locale@@QAEPBGXZ
?SetLocale@Locale@@QAE_NKPBGPAVIRequestContext@@@Z
?AllocBstrLen@WSManMemory@@SGPAGPBGIHH@Z
WSManDecodeObject
WSManInvokeInternalEx
WSManDeleteInternalEx
??1CWSManCriticalSection@@QAE@XZ
??0Locale@@QAE@XZ
WSManCreateInternalEx
?GetMessageEmpty@Locale@@QBEPBGAAVAutoLocalFree@@K@Z
??0CRequestContext@@QAE@XZ
WSManIdentifyInternal
??1CRequestContext@@UAE@XZ
?WSManMemoryOperation@@YGHW4WSMANMEMOPERATION@@PAXKK@Z
?AllocBstr@WSManMemory@@SGPAGPBGHH@Z
?PrintReleaseTrace@@YGXPAXJ@Z
WSManPutInternalEx
WSManEncodeObject
WSManGetInternalEx
api-ms-win-core-delayload-l1-1-1
DelayLoadFailureHook
ResolveDelayLoadedAPI
Exports
Exports
??0?$AutoCleanup@V?$AutoDeleteVector@E@@PAE@@QAE@PAE@Z
??0?$AutoCleanup@V?$AutoDeleteVector@G@@PAG@@QAE@PAG@Z
??0?$AutoCleanup@V?$AutoFree@E@@PAE@@QAE@PAE@Z
??0?$AutoCleanup@V?$AutoRelease@VCRequestContext@@@@PAVCRequestContext@@@@QAE@PAVCRequestContext@@@Z
??0?$AutoCleanup@V?$AutoRelease@VCWSManSecurityUI@@@@PAVCWSManSecurityUI@@@@QAE@PAVCWSManSecurityUI@@@Z
??0?$AutoCleanup@VAutoBstr@@PAG@@QAE@PAG@Z
??0?$AutoCleanup@VAutoBstr@@PAG@@QAE@XZ
??0?$AutoCleanup@VAutoBstrNoAlloc@@PAG@@QAE@PAG@Z
??0?$AutoCleanup@VAutoBstrNoAlloc@@PAG@@QAE@XZ
??0?$AutoCleanup@VAutoCertContext@@PBU_CERT_CONTEXT@@@@QAE@PBU_CERT_CONTEXT@@@Z
??0?$AutoCleanup@VAutoCertContext@@PBU_CERT_CONTEXT@@@@QAE@XZ
??0?$AutoCleanup@VAutoChainContext@@PBU_CERT_CHAIN_CONTEXT@@@@QAE@PBU_CERT_CHAIN_CONTEXT@@@Z
??0?$AutoCleanup@VAutoChainContext@@PBU_CERT_CHAIN_CONTEXT@@@@QAE@XZ
??0?$AutoCleanup@VAutoCoTaskMemFree@@PAX@@QAE@PAX@Z
??0?$AutoCleanup@VAutoCoTaskMemFree@@PAX@@QAE@XZ
??0?$AutoCleanup@VAutoFwXmlCloseParser@@PAX@@QAE@PAX@Z
??0?$AutoCleanup@VAutoFwXmlCloseParser@@PAX@@QAE@XZ
??0?$AutoCleanup@VAutoHandle@@PAX@@QAE@PAX@Z
??0?$AutoCleanup@VAutoHandle@@PAX@@QAE@XZ
??0?$AutoCleanup@VAutoImpersonateUser@@PAX@@QAE@PAX@Z
??0?$AutoCleanup@VAutoImpersonateUser@@PAX@@QAE@XZ
??0?$AutoCleanup@VAutoLibrary@@PAUHINSTANCE__@@@@QAE@PAUHINSTANCE__@@@Z
??0?$AutoCleanup@VAutoLibrary@@PAUHINSTANCE__@@@@QAE@XZ
??0?$AutoCleanup@VAutoLocalFree@@PAX@@QAE@PAX@Z
??0?$AutoCleanup@VAutoLocalFree@@PAX@@QAE@XZ
??0?$AutoCleanup@VAutoMIClass@@PAU_MI_Class@@@@QAE@PAU_MI_Class@@@Z
??0?$AutoCleanup@VAutoMIClass@@PAU_MI_Class@@@@QAE@XZ
??0?$AutoCleanup@VAutoMIInstance@@PAU_MI_Instance@@@@QAE@PAU_MI_Instance@@@Z
??0?$AutoCleanup@VAutoMIInstance@@PAU_MI_Instance@@@@QAE@XZ
??0?$AutoCleanup@VAutoObject@@PAUWSMAN_OBJECT@@@@QAE@PAUWSMAN_OBJECT@@@Z
??0?$AutoCleanup@VAutoObject@@PAUWSMAN_OBJECT@@@@QAE@XZ
??0?$AutoCleanup@VAutoRegKey@@PAUHKEY__@@@@QAE@PAUHKEY__@@@Z
??0?$AutoCleanup@VAutoRegKey@@PAUHKEY__@@@@QAE@XZ
??0?$AutoCleanup@VAutoSecurityDescriptor@@PAX@@QAE@PAX@Z
??0?$AutoCleanup@VAutoSecurityDescriptor@@PAX@@QAE@XZ
??0?$AutoCleanup@VAutoWaitHandle@@PAX@@QAE@PAX@Z
??0?$AutoCleanup@VAutoWaitHandle@@PAX@@QAE@XZ
??0?$AutoDeleteVector@E@@QAE@XZ
??0?$AutoDeleteVector@G@@QAE@PAG@Z
??0?$AutoDeleteVector@G@@QAE@XZ
??0?$AutoFree@E@@QAE@PAE@Z
??0?$AutoRelease@VCRequestContext@@@@QAE@PAVCRequestContext@@@Z
??0?$AutoRelease@VCWSManSecurityUI@@@@QAE@XZ
??0?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@QAE@XZ
??0?$SafeMap_Iterator@VKey@Locale@@K@@QAE@AAV?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@_N@Z
??0?$SafeMap_Lock@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@QAE@ABV?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@_N@Z
??0?$SimpleQueue@T_LARGE_INTEGER@@@@QAE@XZ
??0AutoBstr@@QAE@PAG@Z
??0AutoBstr@@QAE@XZ
??0AutoBstrNoAlloc@@QAE@PAG@Z
??0AutoBstrNoAlloc@@QAE@XZ
??0AutoCertContext@@QAE@PBU_CERT_CONTEXT@@@Z
??0AutoCertContext@@QAE@XZ
??0AutoChainContext@@QAE@PBU_CERT_CHAIN_CONTEXT@@@Z
??0AutoChainContext@@QAE@XZ
??0AutoCoTaskMemFree@@QAE@PAX@Z
??0AutoCoTaskMemFree@@QAE@XZ
??0AutoFwXmlCloseParser@@QAE@PAX@Z
??0AutoFwXmlCloseParser@@QAE@XZ
??0AutoHandle@@QAE@PAX@Z
??0AutoHandle@@QAE@XZ
??0AutoImpersonateUser@@QAE@PAX@Z
??0AutoImpersonateUser@@QAE@XZ
??0AutoLibrary@@QAE@PAUHINSTANCE__@@@Z
??0AutoLibrary@@QAE@XZ
??0AutoLocalFree@@QAE@PAX@Z
??0AutoLocalFree@@QAE@XZ
??0AutoMIClass@@QAE@PAU_MI_Class@@@Z
??0AutoMIClass@@QAE@XZ
??0AutoMIInstance@@QAE@PAU_MI_Instance@@@Z
??0AutoMIInstance@@QAE@XZ
??0AutoObject@@QAE@PAUWSMAN_OBJECT@@@Z
??0AutoObject@@QAE@XZ
??0AutoRegKey@@QAE@PAUHKEY__@@@Z
??0AutoRegKey@@QAE@XZ
??0AutoSecurityDescriptor@@QAE@PAX@Z
??0AutoSecurityDescriptor@@QAE@XZ
??0AutoWaitHandle@@QAE@PAX@Z
??0AutoWaitHandle@@QAE@XZ
??0BufferFormatter@@QAE@PAEK@Z
??0BufferFormatter@@QAE@XZ
??0CWSManResource@@QAE@H@Z
??0ChildLifeTimeManager@@QAE@ABV0@@Z
??0ChildLifeTimeManager@@QAE@XZ
??0CircularBufferFormatter@@QAE@XZ
??0EtwCorrelationHelper@@QAE@ABV0@@Z
??0FastLock@@QAE@XZ
??0ILifeTimeMgmt@@QAE@ABV0@@Z
??0ILifeTimeMgmt@@QAE@XZ
??0IRequestContext@@IAE@XZ
??0OwnLock@@QAE@AAVFastLock@@@Z
??0ShareLock@@QAE@AAVFastLock@@@Z
??1?$AutoCleanup@V?$AutoDelete@G@@PAG@@QAE@XZ
??1?$AutoCleanup@V?$AutoDeleteVector@E@@PAE@@QAE@XZ
??1?$AutoCleanup@V?$AutoDeleteVector@G@@PAG@@QAE@XZ
??1?$AutoCleanup@V?$AutoDeleteVector@PBG@@PAPBG@@QAE@XZ
??1?$AutoCleanup@V?$AutoDeleteVector@U_WSMAN_OPTION@@@@PAU_WSMAN_OPTION@@@@QAE@XZ
??1?$AutoCleanup@V?$AutoFree@E@@PAE@@QAE@XZ
??1?$AutoCleanup@V?$AutoRelease@VCRequestContext@@@@PAVCRequestContext@@@@QAE@XZ
??1?$AutoCleanup@V?$AutoRelease@VCWSManSecurityUI@@@@PAVCWSManSecurityUI@@@@QAE@XZ
??1?$AutoCleanup@VAutoBstr@@PAG@@QAE@XZ
??1?$AutoCleanup@VAutoBstrNoAlloc@@PAG@@QAE@XZ
??1?$AutoCleanup@VAutoCertContext@@PBU_CERT_CONTEXT@@@@QAE@XZ
??1?$AutoCleanup@VAutoChainContext@@PBU_CERT_CHAIN_CONTEXT@@@@QAE@XZ
??1?$AutoCleanup@VAutoCoTaskMemFree@@PAX@@QAE@XZ
??1?$AutoCleanup@VAutoFwXmlCloseParser@@PAX@@QAE@XZ
??1?$AutoCleanup@VAutoHandle@@PAX@@QAE@XZ
??1?$AutoCleanup@VAutoImpersonateUser@@PAX@@QAE@XZ
??1?$AutoCleanup@VAutoLibrary@@PAUHINSTANCE__@@@@QAE@XZ
??1?$AutoCleanup@VAutoLocalFree@@PAX@@QAE@XZ
??1?$AutoCleanup@VAutoMIClass@@PAU_MI_Class@@@@QAE@XZ
??1?$AutoCleanup@VAutoMIInstance@@PAU_MI_Instance@@@@QAE@XZ
??1?$AutoCleanup@VAutoObject@@PAUWSMAN_OBJECT@@@@QAE@XZ
??1?$AutoCleanup@VAutoRegKey@@PAUHKEY__@@@@QAE@XZ
??1?$AutoCleanup@VAutoSecurityDescriptor@@PAX@@QAE@XZ
??1?$AutoCleanup@VAutoWaitHandle@@PAX@@QAE@XZ
??1?$AutoDelete@G@@QAE@XZ
??1?$AutoDeleteVector@E@@QAE@XZ
??1?$AutoDeleteVector@G@@QAE@XZ
??1?$AutoDeleteVector@PBG@@QAE@XZ
??1?$AutoDeleteVector@U_WSMAN_OPTION@@@@QAE@XZ
??1?$AutoFree@E@@QAE@XZ
??1?$AutoRelease@VCRequestContext@@@@QAE@XZ
??1?$AutoRelease@VCWSManSecurityUI@@@@QAE@XZ
??1?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@QAE@XZ
??1?$SafeMap_Iterator@VKey@Locale@@K@@QAE@XZ
??1?$SafeMap_Lock@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@QAE@XZ
??1?$SimpleQueue@T_LARGE_INTEGER@@@@QAE@XZ
??1AutoBstr@@QAE@XZ
??1AutoBstrNoAlloc@@QAE@XZ
??1AutoCertContext@@QAE@XZ
??1AutoChainContext@@QAE@XZ
??1AutoCoTaskMemFree@@QAE@XZ
??1AutoFwXmlCloseParser@@QAE@XZ
??1AutoHandle@@QAE@XZ
??1AutoImpersonateUser@@QAE@XZ
??1AutoLibrary@@QAE@XZ
??1AutoLocalFree@@QAE@XZ
??1AutoMIClass@@QAE@XZ
??1AutoMIInstance@@QAE@XZ
??1AutoObject@@QAE@XZ
??1AutoRegKey@@QAE@XZ
??1AutoSecurityDescriptor@@QAE@XZ
??1AutoWaitHandle@@QAE@XZ
??1BufferFormatter@@UAE@XZ
??1CWSManCriticalSectionWithConditionVar@@QAE@XZ
??1CWSManResource@@UAE@XZ
??1ChildLifeTimeManager@@QAE@XZ
??1CircularBufferFormatter@@UAE@XZ
??1EtwCorrelationHelper@@UAE@XZ
??1ILifeTimeMgmt@@UAE@XZ
??1IRequestContext@@UAE@XZ
??1OwnLock@@QAE@XZ
??1ShareLock@@QAE@XZ
??4?$AutoCleanup@V?$AutoDeleteVector@G@@PAG@@QAEAAV?$AutoDeleteVector@G@@PAG@Z
??4?$AutoCleanup@V?$AutoRelease@VCWSManSecurityUI@@@@PAVCWSManSecurityUI@@@@QAEAAV?$AutoRelease@VCWSManSecurityUI@@@@PAVCWSManSecurityUI@@@Z
??4?$AutoCleanup@VAutoBstr@@PAG@@QAEAAVAutoBstr@@PAG@Z
??4?$AutoCleanup@VAutoBstrNoAlloc@@PAG@@QAEAAVAutoBstrNoAlloc@@PAG@Z
??4?$AutoCleanup@VAutoCertContext@@PBU_CERT_CONTEXT@@@@QAEAAVAutoCertContext@@PBU_CERT_CONTEXT@@@Z
??4?$AutoCleanup@VAutoChainContext@@PBU_CERT_CHAIN_CONTEXT@@@@QAEAAVAutoChainContext@@PBU_CERT_CHAIN_CONTEXT@@@Z
??4?$AutoCleanup@VAutoCoTaskMemFree@@PAX@@QAEAAVAutoCoTaskMemFree@@PAX@Z
??4?$AutoCleanup@VAutoFwXmlCloseParser@@PAX@@QAEAAVAutoFwXmlCloseParser@@PAX@Z
??4?$AutoCleanup@VAutoHandle@@PAX@@QAEAAVAutoHandle@@PAX@Z
??4?$AutoCleanup@VAutoImpersonateUser@@PAX@@QAEAAVAutoImpersonateUser@@PAX@Z
??4?$AutoCleanup@VAutoLibrary@@PAUHINSTANCE__@@@@QAEAAVAutoLibrary@@PAUHINSTANCE__@@@Z
??4?$AutoCleanup@VAutoLocalFree@@PAX@@QAEAAVAutoLocalFree@@PAX@Z
??4?$AutoCleanup@VAutoMIClass@@PAU_MI_Class@@@@QAEAAVAutoMIClass@@PAU_MI_Class@@@Z
??4?$AutoCleanup@VAutoMIInstance@@PAU_MI_Instance@@@@QAEAAVAutoMIInstance@@PAU_MI_Instance@@@Z
??4?$AutoCleanup@VAutoObject@@PAUWSMAN_OBJECT@@@@QAEAAVAutoObject@@PAUWSMAN_OBJECT@@@Z
??4?$AutoCleanup@VAutoRegKey@@PAUHKEY__@@@@QAEAAVAutoRegKey@@PAUHKEY__@@@Z
??4?$AutoCleanup@VAutoSecurityDescriptor@@PAX@@QAEAAVAutoSecurityDescriptor@@PAX@Z
??4?$AutoCleanup@VAutoWaitHandle@@PAX@@QAEAAVAutoWaitHandle@@PAX@Z
??4?$AutoDeleteVector@G@@QAEAAV0@PAG@Z
??4?$AutoRelease@VCWSManSecurityUI@@@@QAEAAV0@PAVCWSManSecurityUI@@@Z
??4?$SimpleQueue@T_LARGE_INTEGER@@@@QAEAAV0@ABV0@@Z
??4AutoBstr@@QAEAAV0@PAG@Z
??4AutoBstrNoAlloc@@QAEAAV0@PAG@Z
??4AutoCertContext@@QAEAAV0@PBU_CERT_CONTEXT@@@Z
??4AutoChainContext@@QAEAAV0@PBU_CERT_CHAIN_CONTEXT@@@Z
??4AutoCoTaskMemFree@@QAEAAV0@PAX@Z
??4AutoFwXmlCloseParser@@QAEAAV0@PAX@Z
??4AutoHandle@@QAEAAV0@PAX@Z
??4AutoImpersonateUser@@QAEAAV0@PAX@Z
??4AutoLibrary@@QAEAAV0@PAUHINSTANCE__@@@Z
??4AutoLocalFree@@QAEAAV0@PAX@Z
??4AutoMIClass@@QAEAAV0@PAU_MI_Class@@@Z
??4AutoMIInstance@@QAEAAV0@PAU_MI_Instance@@@Z
??4AutoObject@@QAEAAV0@PAUWSMAN_OBJECT@@@Z
??4AutoRegKey@@QAEAAV0@PAUHKEY__@@@Z
??4AutoSecurityDescriptor@@QAEAAV0@PAX@Z
??4AutoWaitHandle@@QAEAAV0@PAX@Z
??4ChildLifeTimeManager@@QAEAAV0@ABV0@@Z
??4EtwCorrelationHelper@@QAEAAV0@ABV0@@Z
??4EventLog@@QAEAAV0@$$QAV0@@Z
??4EventLog@@QAEAAV0@ABV0@@Z
??4FastLock@@QAEAAV0@$$QAV0@@Z
??4FastLock@@QAEAAV0@ABV0@@Z
??4ILifeTimeMgmt@@QAEAAV0@ABV0@@Z
??4PacketFormatter@@QAEAAV0@$$QAV0@@Z
??4PacketFormatter@@QAEAAV0@ABV0@@Z
??7?$AutoCleanup@V?$AutoDeleteVector@G@@PAG@@QBE_NXZ
??7?$AutoCleanup@V?$AutoRelease@VCRequestContext@@@@PAVCRequestContext@@@@QBE_NXZ
??7?$AutoCleanup@V?$AutoRelease@VCWSManSecurityUI@@@@PAVCWSManSecurityUI@@@@QBE_NXZ
??B?$AutoCleanup@V?$AutoDeleteVector@E@@PAE@@QAEPAEXZ
??B?$AutoCleanup@V?$AutoDeleteVector@G@@PAG@@QAEPAGXZ
??B?$AutoCleanup@V?$AutoDeleteVector@PBG@@PAPBG@@QAEPAPBGXZ
??B?$AutoCleanup@V?$AutoDeleteVector@U_WSMAN_OPTION@@@@PAU_WSMAN_OPTION@@@@QAEPAU_WSMAN_OPTION@@XZ
??B?$AutoCleanup@V?$AutoFree@E@@PAE@@QAEPAEXZ
??B?$AutoCleanup@V?$AutoFree@E@@PAE@@QBEQAEXZ
??B?$AutoCleanup@V?$AutoRelease@VCWSManSecurityUI@@@@PAVCWSManSecurityUI@@@@QAEPAVCWSManSecurityUI@@XZ
??B?$AutoCleanup@VAutoLocalFree@@PAX@@QAEPAXXZ
??C?$AutoCleanup@V?$AutoRelease@VCRequestContext@@@@PAVCRequestContext@@@@QAEPAVCRequestContext@@XZ
??C?$AutoCleanup@V?$AutoRelease@VCWSManSecurityUI@@@@PAVCWSManSecurityUI@@@@QAEPAVCWSManSecurityUI@@XZ
??_7?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@6B@
??_7BufferFormatter@@6B@
??_7CWSManResource@@6B@
??_7CircularBufferFormatter@@6B@
??_7EtwCorrelationHelper@@6B@
??_7ILifeTimeMgmt@@6B@
??_7IRequestContext@@6B@
??_FCErrorContext@@QAEXXZ
?Acquire@?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@UBEXXZ
?Acquire@?$SafeMap_Lock@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@QAEXXZ
?AcquireExclusive@FastLock@@QAEXXZ
?AcquireShared@FastLock@@QAEXXZ
?Acquired@?$SafeMap_Lock@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@QAE_NXZ
?AddRef@ILifeTimeMgmt@@UAEJXZ
?AsReference@?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@QAEAAV1@XZ
?Data@?$SafeMap_Iterator@VKey@Locale@@K@@IBEAAV?$STLMap@VKey@Locale@@K@@XZ
?DeInitialize@?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@UAE_NAAVIRequestContext@@@Z
?Detach@?$AutoCleanup@V?$AutoDeleteVector@G@@PAG@@QAEPAGXZ
?Detach@?$AutoCleanup@V?$AutoFree@E@@PAE@@QAEPAEXZ
?Detach@BufferFormatter@@QAEPAEXZ
?GetBomIndex@PacketFormatter@@QBE?AW4Charset@1@XZ
?GetBuffer@BufferFormatter@@UAEPAEXZ
?GetBuffer@BufferFormatter@@UBEPBEXZ
?GetBuffer@CircularBufferFormatter@@UBEPBEXZ
?GetBuffer@XmlReader@@QAEPBGXZ
?GetBufferSize@BufferFormatter@@QBEKXZ
?GetCalculationSize@BufferFormatter@@UBEK_N@Z
?GetCharset@PacketFormatter@@QBE?AW4Charset@1@XZ
?GetChildCount@ChildLifeTimeManager@@QBEJXZ
?GetError@BufferFormatter@@QBEKXZ
?GetErrorCode@CErrorContext@@UBEKXZ
?GetFaultXML@CErrorContext@@UBEPBGXZ
?GetFaultXML@CRequestContext@@UBEPBGXZ
?GetFormatterMode@BufferFormatter@@QAE?AW4Charset@PacketFormatter@@XZ
?GetInitError@CWSManCriticalSection@@QBEKXZ
?GetLCID@Locale@@QAEKXZ
?GetLength@XmlReader@@QAEIXZ
?GetLocale@CRequestContext@@QAEAAVLocale@@XZ
?GetLocaleString@CRequestContext@@QAEPBGXZ
?GetMap@?$SafeMap_Iterator@VKey@Locale@@K@@QBEAAV?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@XZ
?GetMap@?$SafeMap_Lock@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@QBEABV?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@XZ
?GetMessageId@CErrorContext@@UBEKXZ
?GetMessageId@CRequestContext@@UBEKXZ
?GetOptionCount@CWSManResourceNoResourceUri@@QAEKXZ
?GetOptionTypes@CWSManResourceNoResourceUri@@QAEPAPBGXZ
?GetOptions@CWSManResourceNoResourceUri@@QAEPAU_WSMAN_OPTION@@XZ
?GetOptionsMustUnderstandValue@CWSManResourceNoResourceUri@@QAEHXZ
?GetParser@XmlReader@@QAEPAXXZ
?GetRefCount@ILifeTimeMgmt@@QAEJXZ
?GetSpaceUsed@BufferFormatter@@UBEK_N@Z
?HasFaultXML@CRequestContext@@QBEHXZ
?HasHtmlError@CRequestContext@@ABEHXZ
?Initialize@?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@UAE_NAAVIRequestContext@@@Z
?IsActive@ChildLifeTimeManager@@QAE_NXZ
?IsCIM_Error@CRequestContext@@QAEHXZ
?IsGeneratingError@CErrorContext@@UBE_NXZ
?IsInCommitMode@BufferFormatter@@QAE_NXZ
?IsValid@?$SafeMap_Iterator@VKey@Locale@@K@@QBE_NXZ
?LogErrorCode@CRequestContext@@QAEXXZ
?Me@?$AutoCleanup@V?$AutoDelete@G@@PAG@@AAEAAV?$AutoDelete@G@@XZ
?Me@?$AutoCleanup@V?$AutoDeleteVector@E@@PAE@@AAEAAV?$AutoDeleteVector@E@@XZ
?Me@?$AutoCleanup@V?$AutoDeleteVector@G@@PAG@@AAEAAV?$AutoDeleteVector@G@@XZ
?Me@?$AutoCleanup@V?$AutoDeleteVector@PBG@@PAPBG@@AAEAAV?$AutoDeleteVector@PBG@@XZ
?Me@?$AutoCleanup@V?$AutoDeleteVector@U_WSMAN_OPTION@@@@PAU_WSMAN_OPTION@@@@AAEAAV?$AutoDeleteVector@U_WSMAN_OPTION@@@@XZ
?Me@?$AutoCleanup@V?$AutoFree@E@@PAE@@AAEAAV?$AutoFree@E@@XZ
?Me@?$AutoCleanup@V?$AutoRelease@VCRequestContext@@@@PAVCRequestContext@@@@AAEAAV?$AutoRelease@VCRequestContext@@@@XZ
?Me@?$AutoCleanup@V?$AutoRelease@VCWSManSecurityUI@@@@PAVCWSManSecurityUI@@@@AAEAAV?$AutoRelease@VCWSManSecurityUI@@@@XZ
?Me@?$AutoCleanup@VAutoBstr@@PAG@@AAEAAVAutoBstr@@XZ
?Me@?$AutoCleanup@VAutoBstrNoAlloc@@PAG@@AAEAAVAutoBstrNoAlloc@@XZ
?Me@?$AutoCleanup@VAutoCertContext@@PBU_CERT_CONTEXT@@@@AAEAAVAutoCertContext@@XZ
?Me@?$AutoCleanup@VAutoChainContext@@PBU_CERT_CHAIN_CONTEXT@@@@AAEAAVAutoChainContext@@XZ
?Me@?$AutoCleanup@VAutoCoTaskMemFree@@PAX@@AAEAAVAutoCoTaskMemFree@@XZ
?Me@?$AutoCleanup@VAutoFwXmlCloseParser@@PAX@@AAEAAVAutoFwXmlCloseParser@@XZ
?Me@?$AutoCleanup@VAutoHandle@@PAX@@AAEAAVAutoHandle@@XZ
?Me@?$AutoCleanup@VAutoImpersonateUser@@PAX@@AAEAAVAutoImpersonateUser@@XZ
?Me@?$AutoCleanup@VAutoLibrary@@PAUHINSTANCE__@@@@AAEAAVAutoLibrary@@XZ
?Me@?$AutoCleanup@VAutoLocalFree@@PAX@@AAEAAVAutoLocalFree@@XZ
?Me@?$AutoCleanup@VAutoMIClass@@PAU_MI_Class@@@@AAEAAVAutoMIClass@@XZ
?Me@?$AutoCleanup@VAutoMIInstance@@PAU_MI_Instance@@@@AAEAAVAutoMIInstance@@XZ
?Me@?$AutoCleanup@VAutoObject@@PAUWSMAN_OBJECT@@@@AAEAAVAutoObject@@XZ
?Me@?$AutoCleanup@VAutoRegKey@@PAUHKEY__@@@@AAEAAVAutoRegKey@@XZ
?Me@?$AutoCleanup@VAutoSecurityDescriptor@@PAX@@AAEAAVAutoSecurityDescriptor@@XZ
?Me@?$AutoCleanup@VAutoWaitHandle@@PAX@@AAEAAVAutoWaitHandle@@XZ
?Passed@CErrorContext@@UBEHXZ
?PrepareToCommitWithSize@CircularBufferFormatter@@UAEKK@Z
?ProcessContext@CRequestContext@@QAEHHPAU_WSMAN_ENUMERATOR_RESULT@@@Z
?ProcessContext@CRequestContext@@QAEHHPAU_WSMAN_EVENTS_RESULT@@@Z
?ProcessContext@CRequestContext@@QAEHHPAU_WSMAN_RESULT@@@Z
?ProcessContext@CRequestContext@@QAEHHPAU_WSMAN_STATUS@@@Z
?ProviderFailure@CErrorContext@@UBEHXZ
?RecordAccessDenied@CRequestContext@@UAEXXZ
?RecordFailure@CRequestContext@@UAEXK@Z
?RecordHtmlError@CRequestContext@@QAEHKPAU_FWXML_ELEMENT@@@Z
?RecordHtmlError@CRequestContext@@QAEHKPBGK@Z
?RecordMIFailure@IRequestContext@@QAEXW4_MI_Result@@K@Z
?RecordOutOfMemory@CRequestContext@@UAEXXZ
?RecordProviderFailure@CRequestContext@@QAEXKHPBG00@Z
?RecordSoapError@CRequestContext@@QAEHKPAU_FWXML_ELEMENT@@@Z
?RecordSoapError@CRequestContext@@UAEHKPBG@Z
?RegisterChild@ChildLifeTimeManager@@QAE_NXZ
?Release@?$SafeMap@VKey@Locale@@KV?$SafeMap_Iterator@VKey@Locale@@K@@@@UBEXXZ
?Release@ILifeTimeMgmt@@UAEJP6GXPAX@Z0@Z
?ReleaseExclusive@FastLock@@QAEXXZ
?ReleasePtr@?$AutoCleanup@V?$AutoDelete@G@@PAG@@AAEXXZ
?ReleasePtr@?$AutoCleanup@V?$AutoDeleteVector@E@@PAE@@AAEXXZ
?ReleasePtr@?$AutoCleanup@V?$AutoDeleteVector@G@@PAG@@AAEXXZ
?ReleasePtr@?$AutoCleanup@V?$AutoDeleteVector@PBG@@PAPBG@@AAEXXZ
?ReleasePtr@?$AutoCleanup@V?$AutoDeleteVector@U_WSMAN_OPTION@@@@PAU_WSMAN_OPTION@@@@AAEXXZ
?ReleasePtr@?$AutoCleanup@V?$AutoFree@E@@PAE@@AAEXXZ
?ReleasePtr@?$AutoCleanup@V?$AutoRelease@VCRequestContext@@@@PAVCRequestContext@@@@AAEXXZ
?ReleasePtr@?$AutoCleanup@V?$AutoRelease@VCWSManSecurityUI@@@@PAVCWSManSecurityUI@@@@AAEXXZ
?ReleasePtr@?$AutoCleanup@VAutoBstr@@PAG@@AAEXXZ
?ReleasePtr@?$AutoCleanup@VAutoBstrNoAlloc@@PAG@@AAEXXZ
?ReleasePtr@?$AutoCleanup@VAutoCertContext@@PBU_CERT_CONTEXT@@@@AAEXXZ
?ReleasePtr@?$AutoCleanup@VAutoChainContext@@PBU_CERT_CHAIN_CONTEXT@@@@AAEXXZ
?ReleasePtr@?$AutoCleanup@VAutoCoTaskMemFree@@PAX@@AAEXXZ
?ReleasePtr@?$AutoCleanup@VAutoFwXmlCloseParser@@PAX@@AAEXXZ
?ReleasePtr@?$AutoCleanup@VAutoHandle@@PAX@@AAEXXZ
?ReleasePtr@?$AutoCleanup@VAutoImpersonateUser@@PAX@@AAEXXZ
?ReleasePtr@?$AutoCleanup@VAutoLibrary@@PAUHINSTANCE__@@@@AAEXXZ
?ReleasePtr@?$AutoCleanup@VAutoLocalFree@@PAX@@AAEXXZ
?ReleasePtr@?$AutoCleanup@VAutoMIClass@@PAU_MI_Class@@@@AAEXXZ
?ReleasePtr@?$AutoCleanup@VAutoMIInstance@@PAU_MI_Instance@@@@AAEXXZ
?ReleasePtr@?$AutoCleanup@VAutoObject@@PAUWSMAN_OBJECT@@@@AAEXXZ
?ReleasePtr@?$AutoCleanup@VAutoRegKey@@PAUHKEY__@@@@AAEXXZ
?ReleasePtr@?$AutoCleanup@VAutoSecurityDescriptor@@PAX@@AAEXXZ
?ReleasePtr@?$AutoCleanup@VAutoWaitHandle@@PAX@@AAEXXZ
?ReleaseShared@FastLock@@QAEXXZ
?Reset@?$SafeMap_Iterator@VKey@Locale@@K@@QAEXXZ
?Reset@BufferFormatter@@UAEXXZ
?Reset@CircularBufferFormatter@@UAEXXZ
?SetCIM_Error@CErrorContext@@UAEXXZ
?SetCIM_Error@CRequestContext@@UAEXXZ
?SetExtraLogInfo@CErrorContext@@QAEXPBG000@Z
?SetFormatterMode@BufferFormatter@@QAEXW4Charset@PacketFormatter@@0@Z
?SetGeneratingError@CErrorContext@@UAEXXZ
?SetLocale@CRequestContext@@QAE_NPBGK@Z
?SetMachineName@CRequestContext@@QAEKPBG@Z
?SetMaxEnvelopeSize@CircularBufferFormatter@@QAEXK@Z
?SetOptionsMustUnderstandValue@CWSManResourceNoResourceUri@@QAEXH@Z
?SetUpdateMode@BufferFormatter@@UAEXW4Mode@1@@Z
?SetUpdateMode@CircularBufferFormatter@@UAEXW4Mode@BufferFormatter@@@Z
?Shutdown@ChildLifeTimeManager@@QAEXXZ
?SkipOrphans@?$SafeMap_Iterator@VKey@Locale@@K@@IAEXXZ
?UnregisterChild@ChildLifeTimeManager@@QAEXXZ
?UseDefaultConfig@CErrorContext@@UBEHXZ
?UsingDefaultLCID@Locale@@QAE_NXZ
?WaitForAllChildrenToUnregister@ChildLifeTimeManager@@QAEXK@Z
?WakeAllWaitingOnNoOfChildren@ChildLifeTimeManager@@AAEXXZ
?empty@?$SimpleQueue@T_LARGE_INTEGER@@@@QBE_NXZ
?pop@?$SimpleQueue@T_LARGE_INTEGER@@@@QAEXXZ
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.didat Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ