wdscore.dll

Description: Panther Engine Module

Version: 10.0.19041.6088

Architecture: 64-bit

Operating System: Windows NT

SHA256: ba4e7cd2be666df7831f6c972db138bf

File Size: 253.9 KB

Uploaded At: Dec. 1, 2025, 8:27 a.m.

Views: 8

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

WdsGetPointer (Ordinal: 1, Address: 0x1480)
g_Kernel32 (Ordinal: 2, Address: 0x3c1a0)
g_bEnableDiagnosticMode (Ordinal: 3, Address: 0x3c3a0)
ConstructPartialMsgIfA (Ordinal: 4, Address: 0x1d8f0)
ConstructPartialMsgIfW (Ordinal: 5, Address: 0x1d930)
ConstructPartialMsgVA (Ordinal: 6, Address: 0x1d970)
ConstructPartialMsgVW (Ordinal: 7, Address: 0x1daa0)
CurrentIP (Ordinal: 8, Address: 0x1dc80)
EndMajorTask (Ordinal: 9, Address: 0x1dc90)
EndMinorTask (Ordinal: 10, Address: 0x1dcd0)
GetMajorTask (Ordinal: 11, Address: 0x1dd20)
GetMajorTaskA (Ordinal: 12, Address: 0x1dd70)
GetMinorTask (Ordinal: 13, Address: 0x1ddd0)
GetMinorTaskA (Ordinal: 14, Address: 0x1de40)
StartMajorTask (Ordinal: 15, Address: 0x1deb0)
StartMinorTask (Ordinal: 16, Address: 0x1dfb0)
WdsAbortBlackboardItemEnum (Ordinal: 17, Address: 0x1acb0)
WdsAddModule (Ordinal: 18, Address: 0xd300)
WdsAddUsmtLogStack (Ordinal: 19, Address: 0x1e000)
WdsAllocCollection (Ordinal: 20, Address: 0xd3c0)
WdsCollectionAddValue (Ordinal: 21, Address: 0xd3e0)
WdsCollectionGetValue (Ordinal: 22, Address: 0xd470)
WdsCopyBlackboardItems (Ordinal: 23, Address: 0x1ad70)
WdsCopyBlackboardItemsEx (Ordinal: 24, Address: 0x1ad90)
WdsCreateBlackboard (Ordinal: 25, Address: 0x1b070)
WdsDeleteBlackboardValue (Ordinal: 26, Address: 0x1b0d0)
WdsDeleteEvent (Ordinal: 27, Address: 0xd4e0)
WdsDestroyBlackboard (Ordinal: 28, Address: 0x1b1c0)
WdsDuplicateData (Ordinal: 29, Address: 0xd500)
WdsEnableDiagnosticMode (Ordinal: 30, Address: 0x1e6b0)
WdsEnableExit (Ordinal: 31, Address: 0xd630)
WdsEnableExitEx (Ordinal: 32, Address: 0xd650)
WdsEnumFirstBlackboardItem (Ordinal: 33, Address: 0x1b210)
WdsEnumFirstCollectionValue (Ordinal: 34, Address: 0xd720)
WdsEnumNextBlackboardItem (Ordinal: 35, Address: 0x1b420)
WdsEnumNextCollectionValue (Ordinal: 36, Address: 0xd740)
WdsExecuteWorkQueue (Ordinal: 37, Address: 0xd760)
WdsExecuteWorkQueue2 (Ordinal: 38, Address: 0xdea0)
WdsExecuteWorkQueueEx (Ordinal: 39, Address: 0xe660)
WdsExitImmediately (Ordinal: 40, Address: 0xe6a0)
WdsExitImmediatelyEx (Ordinal: 41, Address: 0xe6c0)
WdsFreeCollection (Ordinal: 42, Address: 0xe790)
WdsFreeData (Ordinal: 43, Address: 0xe7e0)
WdsGenericSetupLogInit (Ordinal: 44, Address: 0x1e6c0)
WdsGetAssertFlags (Ordinal: 45, Address: 0x1eb60)
WdsGetBlackboardBinaryData (Ordinal: 46, Address: 0x1b4d0)
WdsGetBlackboardStringA (Ordinal: 47, Address: 0x1b650)
WdsGetBlackboardStringW (Ordinal: 48, Address: 0x1b870)
WdsGetBlackboardUintPtr (Ordinal: 49, Address: 0x1ba10)
WdsGetBlackboardValue (Ordinal: 50, Address: 0x1bb70)
WdsGetCurrentExecutionGroup (Ordinal: 51, Address: 0xe850)
WdsGetSetupLog (Ordinal: 52, Address: 0x1eb80)
WdsGetTempDir (Ordinal: 53, Address: 0xe880)
WdsInitialize (Ordinal: 54, Address: 0xea30)
WdsInitializeCallbackArray (Ordinal: 55, Address: 0x6f40)
WdsInitializeDataBinary (Ordinal: 56, Address: 0xec30)
WdsInitializeDataStringA (Ordinal: 57, Address: 0xecd0)
WdsInitializeDataStringW (Ordinal: 58, Address: 0xed70)
WdsInitializeDataUInt32 (Ordinal: 59, Address: 0xee10)
WdsInitializeDataUInt64 (Ordinal: 60, Address: 0xee30)
WdsIsDiagnosticModeEnabled (Ordinal: 61, Address: 0x1ec50)
WdsIterateOfflineQueue (Ordinal: 62, Address: 0xee50)
WdsIterateQueue (Ordinal: 63, Address: 0xef70)
WdsLockBlackboardValue (Ordinal: 64, Address: 0x1bca0)
WdsLockExecutionGroup (Ordinal: 65, Address: 0xefd0)
WdsLogCreate (Ordinal: 66, Address: 0x228f0)
WdsLogDestroy (Ordinal: 67, Address: 0x22980)
WdsLogRegStockProviders (Ordinal: 68, Address: 0x22ed0)
WdsLogRegisterProvider (Ordinal: 69, Address: 0x22f80)
WdsLogStructuredException (Ordinal: 70, Address: 0x1ec60)
WdsLogUnRegStockProviders (Ordinal: 71, Address: 0x230d0)
WdsLogUnRegisterProvider (Ordinal: 72, Address: 0x23150)
WdsPackCollection (Ordinal: 73, Address: 0xeff0)
WdsPublish (Ordinal: 74, Address: 0xf220)
WdsPublishEx (Ordinal: 75, Address: 0xf270)
WdsPublishImmediateAsync (Ordinal: 76, Address: 0xf2c0)
WdsPublishImmediateEx (Ordinal: 77, Address: 0xf310)
WdsPublishOffline (Ordinal: 78, Address: 0xf350)
WdsSeqAlloc (Ordinal: 79, Address: 0xf4c0)
WdsSeqFree (Ordinal: 80, Address: 0x2f00)
WdsSetAssertFlags (Ordinal: 81, Address: 0x1ee90)
WdsSetBlackboardValue (Ordinal: 82, Address: 0x1bdc0)
WdsSetNextExecutionGroup (Ordinal: 83, Address: 0xf530)
WdsSetUILanguage (Ordinal: 84, Address: 0xf550)
WdsSetupLogDestroy (Ordinal: 85, Address: 0x1eeb0)
WdsSetupLogInit (Ordinal: 86, Address: 0x1ef90)
WdsSetupLogMessageA (Ordinal: 87, Address: 0x1fd00)
WdsSetupLogMessageW (Ordinal: 88, Address: 0x20040)
WdsSubscribeEx (Ordinal: 89, Address: 0xf570)
WdsTerminate (Ordinal: 90, Address: 0xf5b0)
WdsUnlockExecutionGroup (Ordinal: 91, Address: 0xf630)
WdsUnpackCollection (Ordinal: 92, Address: 0xf650)
WdsUnsubscribe (Ordinal: 93, Address: 0xf9a0)
WdsUnsubscribeEx (Ordinal: 94, Address: 0xf9c0)
WdsValidBlackboard (Ordinal: 95, Address: 0x1bfd0)

Imported DLLs & Functions

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18002c910)
IsDebuggerPresent (Address: 0x18002c918)
OutputDebugStringA (Address: 0x18002c908)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18002c948)
RaiseException (Address: 0x18002c950)
SetErrorMode (Address: 0x18002c928)
SetLastError (Address: 0x18002c938)
SetUnhandledExceptionFilter (Address: 0x18002c930)
UnhandledExceptionFilter (Address: 0x18002c940)

api-ms-win-core-file-l1-1-0.dll

CreateDirectoryW (Address: 0x18002c9c0)
CreateFileA (Address: 0x18002c978)
CreateFileW (Address: 0x18002c968)
DeleteFileA (Address: 0x18002c970)
DeleteFileW (Address: 0x18002c9a0)
FindClose (Address: 0x18002c988)
FindFirstFileW (Address: 0x18002c9e8)
FindNextFileW (Address: 0x18002c9e0)
FlushFileBuffers (Address: 0x18002ca38)
GetDiskFreeSpaceExW (Address: 0x18002c9f8)
GetDiskFreeSpaceW (Address: 0x18002ca20)
GetDriveTypeW (Address: 0x18002c998)
GetFileAttributesW (Address: 0x18002ca30)
GetFileSize (Address: 0x18002c9b8)
GetFileSizeEx (Address: 0x18002c960)
GetFileType (Address: 0x18002c9b0)
GetFullPathNameW (Address: 0x18002c9f0)
GetLogicalDrives (Address: 0x18002c9d8)
GetLogicalDriveStringsW (Address: 0x18002ca08)
GetShortPathNameW (Address: 0x18002ca18)
GetTempFileNameW (Address: 0x18002c9a8)
GetVolumeInformationW (Address: 0x18002c9d0)
ReadFile (Address: 0x18002ca00)
RemoveDirectoryW (Address: 0x18002c990)
SetEndOfFile (Address: 0x18002ca40)
SetFileAttributesW (Address: 0x18002ca10)
SetFilePointer (Address: 0x18002c980)
SetFileTime (Address: 0x18002ca28)
WriteFile (Address: 0x18002c9c8)

api-ms-win-core-file-l1-2-0.dll

GetTempPathW (Address: 0x18002ca50)

api-ms-win-core-file-l2-1-0.dll

CopyFileExW (Address: 0x18002ca60)
MoveFileExW (Address: 0x18002ca68)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18002ca80)
DuplicateHandle (Address: 0x18002ca78)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18002ca90)
HeapAlloc (Address: 0x18002cac8)
HeapCompact (Address: 0x18002cab8)
HeapCreate (Address: 0x18002ca98)
HeapDestroy (Address: 0x18002cab0)
HeapFree (Address: 0x18002cac0)
HeapReAlloc (Address: 0x18002cad0)
HeapSize (Address: 0x18002cad8)
HeapValidate (Address: 0x18002caa8)
HeapWalk (Address: 0x18002caa0)

api-ms-win-core-heap-obsolete-l1-1-0.dll

GlobalAlloc (Address: 0x18002caf0)
GlobalFree (Address: 0x18002cb00)
GlobalLock (Address: 0x18002caf8)
GlobalSize (Address: 0x18002cb18)
GlobalUnlock (Address: 0x18002cae8)
LocalAlloc (Address: 0x18002cb10)
LocalFree (Address: 0x18002cb08)

api-ms-win-core-io-l1-1-0.dll

DeviceIoControl (Address: 0x18002cb30)
GetOverlappedResult (Address: 0x18002cb28)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

CreateFileMappingA (Address: 0x18002cb48)
GlobalMemoryStatus (Address: 0x18002cb40)

api-ms-win-core-libraryloader-l1-1-0.dll

FindResourceExW (Address: 0x18002cb98)
FreeLibrary (Address: 0x18002cb88)
GetModuleFileNameA (Address: 0x18002cb68)
GetModuleFileNameW (Address: 0x18002cb70)
GetModuleHandleExW (Address: 0x18002cb80)
GetModuleHandleW (Address: 0x18002cb60)
GetProcAddress (Address: 0x18002cb58)
LoadLibraryExW (Address: 0x18002cb78)
LoadResource (Address: 0x18002cba0)
LockResource (Address: 0x18002cb90)
SizeofResource (Address: 0x18002cba8)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageA (Address: 0x18002cbc0)
FormatMessageW (Address: 0x18002cbb8)
GetLocaleInfoW (Address: 0x18002cbc8)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x18002cbd8)
MapViewOfFile (Address: 0x18002cbe8)
UnmapViewOfFile (Address: 0x18002cc00)
VirtualAlloc (Address: 0x18002cbf0)
VirtualFree (Address: 0x18002cbe0)
VirtualQuery (Address: 0x18002cbf8)

api-ms-win-core-privateprofile-l1-1-0.dll

GetPrivateProfileStringW (Address: 0x18002cc10)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x18002cc28)
GetCommandLineW (Address: 0x18002cc30)
GetEnvironmentVariableW (Address: 0x18002cc20)

api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessA (Address: 0x18002cc40)
CreateProcessW (Address: 0x18002cc90)
CreateThread (Address: 0x18002cca0)
ExitProcess (Address: 0x18002cc78)
GetCurrentProcess (Address: 0x18002cc98)
GetCurrentProcessId (Address: 0x18002cc50)
GetCurrentThread (Address: 0x18002cca8)
GetCurrentThreadId (Address: 0x18002cc48)
GetExitCodeProcess (Address: 0x18002cc80)
OpenProcessToken (Address: 0x18002cc58)
OpenThreadToken (Address: 0x18002ccb0)
TerminateProcess (Address: 0x18002cc88)
TlsAlloc (Address: 0x18002ccb8)
TlsFree (Address: 0x18002cc70)
TlsGetValue (Address: 0x18002cc60)
TlsSetValue (Address: 0x18002cc68)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x18002ccc8)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18002ccd8)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18002ccf0)
RegOpenKeyExW (Address: 0x18002ccf8)
RegQueryValueExW (Address: 0x18002cce8)

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar (Address: 0x18002cd10)
WideCharToMultiByte (Address: 0x18002cd08)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18002cd50)
CreateEventW (Address: 0x18002cd60)
CreateMutexA (Address: 0x18002cd68)
CreateMutexW (Address: 0x18002cd90)
DeleteCriticalSection (Address: 0x18002cd58)
EnterCriticalSection (Address: 0x18002cd80)
InitializeCriticalSection (Address: 0x18002cd88)
LeaveCriticalSection (Address: 0x18002cd40)
OpenEventW (Address: 0x18002cd28)
ReleaseMutex (Address: 0x18002cd48)
ReleaseSRWLockExclusive (Address: 0x18002cd38)
ResetEvent (Address: 0x18002cd70)
SetEvent (Address: 0x18002cd78)
WaitForMultipleObjectsEx (Address: 0x18002cd30)
WaitForSingleObject (Address: 0x18002cd20)

api-ms-win-core-synch-l1-2-0.dll

Sleep (Address: 0x18002cda0)

api-ms-win-core-sysinfo-l1-1-0.dll

GetComputerNameExW (Address: 0x18002cdb0)
GetLocalTime (Address: 0x18002cdb8)
GetSystemInfo (Address: 0x18002cdf0)
GetSystemTimeAsFileTime (Address: 0x18002cdd0)
GetTickCount (Address: 0x18002cde0)
GetVersion (Address: 0x18002cdf8)
GetVersionExA (Address: 0x18002cdc8)
GetVersionExW (Address: 0x18002cdd8)
GetWindowsDirectoryA (Address: 0x18002cdc0)
GetWindowsDirectoryW (Address: 0x18002cde8)

api-ms-win-eventing-provider-l1-1-0.dll

EventProviderEnabled (Address: 0x18002ce10)
EventRegister (Address: 0x18002ce08)
EventUnregister (Address: 0x18002ce18)
EventWriteTransfer (Address: 0x18002ce20)

api-ms-win-security-base-l1-1-0.dll

AddAccessAllowedAce (Address: 0x18002ce78)
AllocateAndInitializeSid (Address: 0x18002ce58)
CheckTokenMembership (Address: 0x18002ce68)
EqualSid (Address: 0x18002ce30)
FreeSid (Address: 0x18002ce60)
GetLengthSid (Address: 0x18002ce48)
GetTokenInformation (Address: 0x18002ce50)
InitializeAcl (Address: 0x18002ce70)
InitializeSecurityDescriptor (Address: 0x18002ce38)
SetSecurityDescriptorDacl (Address: 0x18002ce40)

msvcrt.dll

__C_specific_handler (Address: 0x18002ce88)
__CxxFrameHandler3 (Address: 0x18002cf48)
__dllonexit (Address: 0x18002cf78)
_amsg_exit (Address: 0x18002cf30)
_callnewh (Address: 0x18002ced8)
_CxxThrowException (Address: 0x18002cfb8)
_initterm (Address: 0x18002cf50)
_lock (Address: 0x18002cf58)
_onexit (Address: 0x18002cf88)
_purecall (Address: 0x18002cf10)
_unlock (Address: 0x18002cf70)
_vsnprintf (Address: 0x18002cef8)
_vsnwprintf (Address: 0x18002cf08)
_wcsicmp (Address: 0x18002cf00)
_wcslwr (Address: 0x18002cf28)
_wcslwr_s (Address: 0x18002cf38)
_wcsnicmp (Address: 0x18002ce90)
_wfopen (Address: 0x18002cec0)
_wtoi (Address: 0x18002cfc0)
_XcptFilter (Address: 0x18002cee8)
??1type_info@@UEAA@XZ (Address: 0x18002cfa0)
?terminate@@YAXXZ (Address: 0x18002cf98)
calloc (Address: 0x18002cf60)
fclose (Address: 0x18002cea8)
feof (Address: 0x18002ced0)
fgetws (Address: 0x18002cec8)
free (Address: 0x18002cf20)
iswctype (Address: 0x18002cee0)
malloc (Address: 0x18002cf68)
memcpy (Address: 0x18002cfb0)
memcpy_s (Address: 0x18002cf40)
memmove (Address: 0x18002cfa8)
memmove_s (Address: 0x18002ceb8)
memset (Address: 0x18002cfd0)
strrchr (Address: 0x18002cfc8)
swscanf_s (Address: 0x18002cea0)
toupper (Address: 0x18002cf18)
towlower (Address: 0x18002cf90)
wcschr (Address: 0x18002cf80)
wcsncmp (Address: 0x18002cef0)
wcsrchr (Address: 0x18002ce98)
wcstok_s (Address: 0x18002ceb0)

ntdll.dll

RtlCaptureContext (Address: 0x18002cff0)
RtlLookupFunctionEntry (Address: 0x18002cfe8)
RtlVirtualUnwind (Address: 0x18002cfe0)

OLEAUT32.dll

SystemTimeToVariantTime (Address: 0x18002c8f8)
VariantTimeToSystemTime (Address: 0x18002c8f0)