Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2b6d08a0da12756e0d410339e30de8cd_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2b6d08a0da12756e0d410339e30de8cd_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2b6d08a0da12756e0d410339e30de8cd_JaffaCakes118
Size
154KB
MD5
2b6d08a0da12756e0d410339e30de8cd
SHA1
de5f0ccac040582841eea44901bd2e9b90e62102
SHA256
b1dfab21a3ea040b0740fb181ac01960f1c38bfde33c2e5653bc9851e757f8aa
SHA512
56a5a086d668e1d7bbb62bf69c5689f5cc201bad97097f51425020e12af381030b9b653270b8e8df55a70ec06f062cd0eb0481def21b2319102d67878418ff00
SSDEEP
3072:ilM1Wdts6ZQ9Fj6QowphyqGGOOWqFlrRgy:ilM1Wd6fTjlMGOOWqTH
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
c:\depot\workscd\Common\WksGen\WBL\Release\WkWbl.pdb
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
InternetGetConnectedState
IsValidLocale
GetLocaleInfoW
LoadLibraryExW
FindFirstFileW
FindNextFileW
FindClose
GetACP
MulDiv
SetEvent
EnterCriticalSection
LeaveCriticalSection
GetUserDefaultLangID
GetStringTypeExW
FormatMessageW
FormatMessageA
WideCharToMultiByte
InitializeCriticalSection
FreeLibrary
lstrcmpiW
SizeofResource
lstrlenW
InterlockedDecrement
InterlockedIncrement
InterlockedExchange
DisableThreadLibraryCalls
RaiseException
DeleteCriticalSection
FlushInstructionCache
GetCurrentProcess
GetFileAttributesW
CreateEventW
CreateThread
WaitForSingleObject
GetVersionExW
GlobalMemoryStatusEx
SetLastError
GetCurrentThreadId
LoadLibraryA
CreateFileA
CreateFileW
FindFirstFileA
MoveFileW
MoveFileA
IsDBCSLeadByte
GetFileAttributesA
CreateProcessW
GlobalUnlock
GlobalAlloc
GlobalLock
GetCommandLineW
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
LocalFree
LocalAlloc
SetUnhandledExceptionFilter
QueryPerformanceCounter
UnhandledExceptionFilter
TerminateProcess
GetProcAddress
GetVersionExA
MultiByteToWideChar
GetLastError
VirtualFree
VirtualAlloc
VirtualQuery
HeapDestroy
HeapReAlloc
HeapSize
HeapFree
HeapAlloc
HeapCreate
GetSystemInfo
FreeResource
LockResource
LoadResource
GetModuleHandleW
FindResourceW
GetModuleFileNameW
GetProcessHeap
CompareStringW
GetUserDefaultLCID
GetSystemDefaultLCID
IsValidCodePage
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
IsDebuggerPresent
CloseHandle
Sleep
CallWindowProcA
MessageBoxA
SendMessageA
EndDialog
DialogBoxParamW
CallWindowProcW
DrawFocusRect
InflateRect
PostThreadMessageW
RegisterWindowMessageW
DefWindowProcW
SystemParametersInfoW
GetDlgItem
SetFocus
MapWindowPoints
GetClientRect
SetWindowPos
SetWindowTextW
GetWindowLongW
SetWindowLongW
CharNextW
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
KillTimer
SetTimer
PostMessageW
LoadStringW
RedrawWindow
ReleaseDC
GetDC
GetActiveWindow
GetSysColorBrush
GetCursor
SetCursor
IntersectRect
OffsetRect
SystemParametersInfoA
GetSystemMetrics
LoadCursorW
GetWindowPlacement
GetWindowRect
IsIconic
MessageBoxW
SendMessageW
GetWindow
GetTopWindow
SendDlgItemMessageW
GetDesktopWindow
GetClassNameW
WinHelpW
GetParent
ClientToScreen
CharNextA
UnregisterClassA
ScreenToClient
CreateFontIndirectW
SetTextColor
GetObjectW
GetTextExtentPointW
TranslateCharsetInfo
SetBkColor
CreateBitmap
CreateDIBSection
GetDCOrgEx
GetClipBox
DeleteDC
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
DeleteObject
ExtTextOutW
GetDeviceCaps
SelectObject
RegOpenKeyExA
RegQueryValueExA
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegSetValueExA
SHGetFolderPathW
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHFileOperationW
SHCreateDirectoryExW
ShellExecuteW
CoTaskMemFree
CoTaskMemRealloc
CoCreateInstance
CoTaskMemAlloc
SysFreeString
VarUI4FromStr
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?_Myptr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IBEPBDXZ
swscanf_s
memmove
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
memset
_invalid_parameter_noinfo
_purecall
malloc
_vsnwprintf_s
??0exception@std@@QAE@XZ
__CxxFrameHandler3
_wtoi
wcscmp
_time64
_vsnprintf_s
memcpy_s
_recalloc
wcsncpy_s
free
wcslen
wcscpy_s
wcsncmp
wcscat_s
fopen_s
_wfopen_s
wcsstr
memmove_s
?terminate@@YAXXZ
_unlock
_encode_pointer
__dllonexit
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
memcpy
_crt_debugger_hook
__clean_type_info_names_internal
_CxxThrowException
?_type_info_dtor_internal_method@type_info@@QAEXXZ
??0COStrMan@@QAE@XZ
??0CWblCommandLineParseResult@@AAE@ABV0@@Z
??0CWblCommandLineParseResult@@QAE@XZ
??0CWblMessages@@QAE@ABV0@@Z
??0CWblMessages@@QAE@XZ
??0CWfxContextHelp@@QAE@ABV0@@Z
??0CWfxContextHelp@@QAE@XZ
??0CWksWaitCursor@@QAE@PB_W_N@Z
??0MWblIntl@@AAE@XZ
??0MWblIntlFeatures@@AAE@XZ
??0MWblStrings@@AAE@XZ
??0MWblStringsWin32@@AAE@XZ
??1COStrMan@@QAE@XZ
??1CWblCommandLineParseResult@@QAE@XZ
??1CWksWaitCursor@@QAE@XZ
??1MWblIntl@@AAE@XZ
??1MWblIntlFeatures@@AAE@XZ
??1MWblStrings@@AAE@XZ
??1MWblStringsWin32@@AAE@XZ
??2@YAPAXIPAXK@Z
??3@YAXPAX0K@Z
??4COStrMan@@QAEAAV0@ABV0@@Z
??4CWblCommandLineParseResult@@QAEAAV0@ABV0@@Z
??4CWblMessages@@QAEAAV0@ABV0@@Z
??4CWfxContextHelp@@QAEAAV0@ABV0@@Z
??4CWksWaitCursor@@QAEAAV0@ABV0@@Z
??4MWblIntl@@QAEAAV0@ABV0@@Z
??4MWblIntlFeatures@@QAEAAV0@ABV0@@Z
??4MWblStrings@@QAEAAV0@ABV0@@Z
??4MWblStringsWin32@@QAEAAV0@ABV0@@Z
??_7CWblMessages@@6B@
??_FCWksWaitCursor@@QAEXXZ
?AddParseError@CWblCommandLineParseResult@@QAEXK@Z
?BAddItem@CWblCommandLineParseResult@@QAE_NJPA_W0@Z
?BAlphaNumWch@MWblStrings@@SA_N_W@Z
?BAlphaWch@MWblStrings@@SA_N_W@Z
?BChina@MWblIntl@@SA_NK@Z
?BDigitWch@MWblStrings@@SA_N_W@Z
?BEnableDoubleFontDialog@MWblIntlFeatures@@SA_NXZ
?BEnableVerticalTextbox@MWblIntlFeatures@@SA_NXZ
?BEqualRgwch@MWblStrings@@SA_NPB_WH0HW4EStringCompareType@@@Z
?BEqualWz@MWblStrings@@SA_NPB_W0W4EStringCompareType@@@Z
?BFEWch@MWblStrings@@SA_N_W@Z
?BFEWz@MWblStrings@@SA_NPB_W@Z
?BFarEast@MWblIntl@@SA_NK@Z
?BGetSpecialFolder@@YA_NHPA_WI@Z
?BHexDigitWch@MWblStrings@@SA_N_W@Z
?BHrIsOutOfDiskSpace@@YA_NJ@Z
?BHrIsOutOfMemory@@YA_NJ@Z
?BInit@CWblCommandLineParseResult@@QAE_NI@Z
?BIsAnsi@MWblStrings@@CA_N_W@Z
?BIsOn@CWksWaitCursor@@QAE_NXZ
?BJapan@MWblIntl@@SA_NK@Z
?BKorea@MWblIntl@@SA_NK@Z
?BLowerCaseWch@MWblStrings@@SA_N_W@Z
?BPreMessageBox@CWblMessages@@MAE_NXZ
?BPuncWch@MWblStrings@@SA_N_W@Z
?BSpaceWch@MWblStrings@@SA_N_W@Z
?BSzToRgwch@MWblStrings@@SA_NPBDPA_WH@Z
?BTaiwan@MWblIntl@@SA_NK@Z
?BUpperCaseWch@MWblStrings@@SA_N_W@Z
?BWzToRgch@MWblStrings@@SA_NPB_WPADH@Z
?BuildLocalePath@MWblIntl@@SAXKPB_WPA_WIPAUHINSTANCE__@@@Z
?CbFromSz@MWblStrings@@SAHPBD@Z
?CbFromWz@MWblStrings@@SAHPB_W@Z
?CbRgwchToRgch@MWblStrings@@SAHPB_WHPADH@Z
?CbRgwchToRgchCp@MWblStrings@@SAHIPB_WHPADH@Z
?CbWzToSz@MWblStrings@@SAHPB_WPADH@Z
?CchFromSz@MWblStrings@@SAHPBD@Z
?CharLowerCaseLid@MWblStringsWin32@@SA_W_WG@Z
?CharUpperCaseLid@MWblStringsWin32@@SA_W_WG@Z
?CompareMemory@MWblStringsWin32@@SAHPBX0I@Z
?CountryCodeFromLcid@MWblIntl@@KAHK@Z
?CpeParseErrors@CWblCommandLineParseResult@@QAEKXZ
?CwchDoubleToWz@MWblStrings@@SAHNPA_WI@Z
?CwchFormatWz@MWblStrings@@SAHPAUHINSTANCE__@@HPA_WIPAH@Z
?CwchFormatWz@MWblStrings@@SAHPAUHINSTANCE__@@HPA_WIPAPA_W@Z
?CwchFormatWz@MWblStrings@@SAHPAUHINSTANCE__@@PB_WPA_WIPAH@Z
?CwchFormatWz@MWblStrings@@SAHPB_WPA_WIPAPA_W@Z
?CwchFromWz@MWblStrings@@SAHPB_W@Z
?CwchFromWzIgnoreTrailingSpace@MWblStrings@@SAHPB_W@Z
?CwchIntToWz@MWblStrings@@SAHHHPA_WI@Z
?CwchLoadMeasurement@MWblIntl@@SAHPAUHINSTANCE__@@IW4MEASURE@@PAN@Z
?CwchLoadStringCore@COStrMan@@IAEIPAUHINSTANCE__@@IPA_WII@Z
?CwchLoadStringFromDLL@COStrMan@@QAEIPAUHINSTANCE__@@IPA_WII@Z
?CwchLoadStringFromDLL@MWblIntl@@SAHPAUHINSTANCE__@@IPA_WHI@Z
?CwchLoadWz@COStrMan@@QAEIPAUHINSTANCE__@@IPA_WI@Z
?CwchLoadWz@MWblIntl@@SAHPAUHINSTANCE__@@IPA_WH@Z
?CwchRgchToRgwch@MWblStrings@@SAHPBDHPA_WH@Z
?CwchRgchToRgwchCp@MWblStrings@@SAHIPBDHPA_WH@Z
?CwchSzToWz@MWblStrings@@SAHPBDPA_WH@Z
?CwchTimeToWz@MWblStrings@@SAHPAU_SYSTEMTIME@@PA_WI@Z
?CwchUintToWz@MWblStrings@@SAHIHPA_WI@Z
?CwchWzToDouble@MWblStrings@@SAHPB_WPAN@Z
?CwchWzToHexInt@MWblStrings@@SAHPB_WPAH@Z
?CwchWzToInt@MWblStrings@@SAHPB_WPAH@Z
?CwchWzToUint@MWblStrings@@SAHPB_WPAI@Z
?DitherBlt@@YAXPAUHDC__@@HHHH0PAUHBITMAP__@@HH@Z
?FMemAlert@@YAHXZ
?Failure@CWblMessages@@QAEXPAUHWND__@@H@Z
?Failure@CWblMessages@@QAEXPAUHWND__@@PB_W@Z
?FailureDiskSpace@CWblMessages@@QAEXPAUHWND__@@@Z
?FailureF@CWblMessages@@QAAXPAUHWND__@@HZZ
?FailureF@CWblMessages@@QAAXPAUHWND__@@PB_WZZ
?FailureFormatWz@CWblMessages@@QAEXPAUHWND__@@HPAH@Z
?FailureFormatWz@CWblMessages@@QAEXPAUHWND__@@HPAPA_W@Z
?FailureFormatWz@CWblMessages@@QAEXPAUHWND__@@PB_WPAH@Z
?FailureFormatWz@CWblMessages@@QAEXPAUHWND__@@PB_WPAPA_W@Z
?FailureHr@CWblMessages@@QAEXPAUHWND__@@J@Z
?FailureMemory@CWblMessages@@QAEXPAUHWND__@@@Z
?FailureMustClose@CWblMessages@@QAEXPAUHWND__@@@Z
?FailureOther@CWblMessages@@QAEXPAUHWND__@@@Z
?FailureReinstall@CWblMessages@@QAEXPAUHWND__@@PB_W@Z
?FailureReinstallApp@CWblMessages@@QAEXPAUHWND__@@PB_W1@Z
?GetDefaultFont@MWblIntl@@SAHPA_WIPAUHINSTANCE__@@I@Z
?GetDefaultLangId@MWblStrings@@SAGXZ
?GetHelpLcid@MWblIntl@@SAKXZ
?GetInstallLcid@MWblIntl@@SAKXZ
?GetLocaleRegistryLocation@MWblIntl@@SAPAUHKEY__@@K@Z
?GetLocaleRegistryLocation@MWblIntl@@SAPAUHKEY__@@XZ
?GetResourceDLL@@YAPAUHINSTANCE__@@XZ
?GetSystemLcid@MWblIntl@@SAKXZ
?GetUILcid@MWblIntl@@SAKXZ
?GetUserLcid@MWblIntl@@SAKXZ
?HrWblParseCommandLine@@YAJAAUSClpRules@@PB_WAAVCWblCommandLineParseResult@@@Z
?Init@CWblMessages@@QAEXPAUHINSTANCE__@@@Z
?Initialize@MWblIntl@@SAJXZ
?Initialize@MWblStrings@@SAJXZ
?IsValidCharset@MWblIntl@@SAHE@Z
?LoadLocResourceDLL@MWblIntl@@SAPAUHINSTANCE__@@KPB_WPAU2@@Z
?LoadResourceDLL@MWblIntl@@SAPAUHINSTANCE__@@PB_W@Z
?LoadUIResourceDLL@MWblIntl@@SAPAUHINSTANCE__@@PB_WPAU2@@Z
?NCompareLocRgwch@MWblStrings@@SAHPB_WH0HW4EStringCompareType@@@Z
?NCompareLocRgwchLoc@MWblStrings@@SAHPB_WH0HW4EStringCompareType@@GG@Z
?NCompareLocWz@MWblStrings@@SAHPB_W0W4EStringCompareType@@@Z
?NCompareRgwch@MWblStrings@@SAHPB_WH0H_N@Z
?NCompareWz@MWblStrings@@SAHPB_W0_N@Z
?NFindNotWchInRgwch@MWblStrings@@SAHPB_WH_W@Z
?NFindNotWchInWz@MWblStrings@@SAHPB_W_W@Z
?NFindOneOfInWz@MWblStrings@@SAHPB_W0@Z
?NFindRightWchInRgwch@MWblStrings@@SAHPB_WH_W@Z
?NFindRightWchInWz@MWblStrings@@SAHPB_W_W@Z
?NFindWchInRgwch@MWblStrings@@SAHPB_WH_W@Z
?NFindWchInWz@MWblStrings@@SAHPB_W_W@Z
?NFromWz@MWblStrings@@SAHPB_W@Z
?NLoadStringInt@MWblIntl@@SAHPAUHINSTANCE__@@I@Z
?NLoadStringIntArray@MWblIntl@@SAHPAUHINSTANCE__@@IPAHI@Z
?NMessageBox@CWblMessages@@QAEHPAUHWND__@@IH@Z
?NMessageBox@CWblMessages@@QAEHPAUHWND__@@IPB_W@Z
?NMessageBoxF@CWblMessages@@QAAHPAUHWND__@@IHZZ
?NMessageBoxF@CWblMessages@@QAAHPAUHWND__@@IPB_WZZ
?NMessageBoxFormatWz@CWblMessages@@QAEHPAUHWND__@@IHPAH@Z
?NMessageBoxFormatWz@CWblMessages@@QAEHPAUHWND__@@IHPAPA_W@Z
?NMessageBoxFormatWz@CWblMessages@@QAEHPAUHWND__@@IPB_WPAH@Z
?NMessageBoxFormatWz@CWblMessages@@QAEHPAUHWND__@@IPB_WPAPA_W@Z
?NMessageBoxTitle@CWblMessages@@QAEHPAUHWND__@@IHH@Z
?NMessageBoxTitle@CWblMessages@@QAEHPAUHWND__@@IPB_W1@Z
?NRgPosrFromRid@COStrMan@@IAEHK@Z
?NYI@CWblMessages@@QAEXPAUHWND__@@@Z
?Off@CWksWaitCursor@@QAEXXZ
?On@CWksWaitCursor@@QAEXPB_W@Z
?OnWksContextMenu@CWfxContextHelp@@QAEJIIJAAH@Z
?OnWksHelp@CWfxContextHelp@@QAEJIIJAAH@Z
?OperatorDelete@@YAXPAX@Z
?OperatorNew@@YAPAXIPAXK@Z
?PosrFromCachedRid@COStrMan@@IAEPAUSOsr@@KPAUHINSTANCE__@@@Z
?PosrFromRid@COStrMan@@IAEPAUSOsr@@KPAUHINSTANCE__@@@Z
?PostMessageBox@CWblMessages@@MAEXXZ
?ProcessWindowMessage@CWfxContextHelp@@QAEHPAUHWND__@@IIJAAJK@Z
?PvBaseFromPv@@YAPAXPAX@Z
?PvBaseFromPvFixed@@YAPAXPAX@Z
?PwchFindNotWchInRgwch@MWblStrings@@SAPA_WPB_WH_W@Z
?PwchFindNotWchInWz@MWblStrings@@SAPA_WPB_W_W@Z
?PwchFindOneOfInWz@MWblStrings@@SAPA_WPB_W0@Z
?PwchFindRightWchInRgwch@MWblStrings@@SAPA_WPB_WH_W@Z
?PwchFindRightWchInWz@MWblStrings@@SAPA_WPB_W_W@Z
?PwchFindWchInRgwch@MWblStrings@@SAPA_WPB_WH_W@Z
?PwchFindWchInWz@MWblStrings@@SAPA_WPB_W_W@Z
?PwchSkipLeadingWch@MWblStrings@@SAPA_WPA_W_W@Z
?PwchSkipWhiteSpace@MWblStrings@@SAPA_WPB_W@Z
?RClpResultItemAt@CWblCommandLineParseResult@@QAEAAUSClpResultItem@@I@Z
?RCommands@CWblCommandLineParseResult@@QAEAAV?$CWksDynamicArray@USCommands@@V?$CWksAllocator@USCommands@@@@@@XZ
?Refresh@MWblIntl@@SAJXZ
?RemoveCharsInWz@MWblStrings@@SAXPB_WIPA_W10@Z
?RemoveWhiteCharsInWz@MWblStrings@@SAXPB_WIPA_W1@Z
?RgwchStrStr@MWblStrings@@SAPA_WPB_WH0H@Z
?RgwchStrStrEx@MWblStrings@@SAPA_WPB_WH0HW4EStringCompareType@@@Z
?SendMessageToDescendants@MWblIntl@@SAXPAUHWND__@@IIJH@Z
?SetDefaultLangId@MWblStrings@@SAXG@Z
?SetDefaultParent@CWblMessages@@QAEXPAUHWND__@@@Z
?SetDefaultSection@COStrMan@@QAEXG@Z
?SetDefaultSection@MWblIntl@@SAXG@Z
?SetResourceCodePage@COStrMan@@QAEXI@Z
?SetResourceCodePage@MWblIntl@@SAXI@Z
?SetResourceDLL@@YAXPAUHINSTANCE__@@@Z
?ShowContextHelp@CWfxContextHelp@@QAEXPAUtagHELPINFO@@@Z
?ShowLangDllError@@YAXXZ
?StCountResultItems@CWblCommandLineParseResult@@QAEIXZ
?SzToWzSimple@MWblStrings@@SAJPBDPA_WI@Z
?UCodePageFromLcid@MWblIntl@@SAIK@Z
?UResourceCodePage@COStrMan@@QAEIXZ
?UResourceCodePage@MWblIntl@@SAIXZ
?WDefaultSection@COStrMan@@QAEGXZ
?WDefaultSection@MWblIntl@@SAGXZ
?WGetCType1Wch@MWblStringsWin32@@SAG_W@Z
?WGetCType2Wch@MWblStringsWin32@@SAG_W@Z
?WGetCType3Wch@MWblStringsWin32@@SAG_W@Z
?WchStripAccent@MWblStrings@@SA_W_W@Z
?WchToLowerCase@MWblStrings@@SA_W_W@Z
?WchToUpperCase@MWblStrings@@SA_W_W@Z
?WhFromPv@@YAPAXPAX@Z
?WksBGetModuleVersion@@YG_NPAUHINSTANCE__@@PAK1@Z
?WksCharSet@MWblIntl@@SAHPAE@Z
?WksCodePage@MWblIntl@@SAIXZ
?WksDefaultDialogFont@MWblIntl@@SAHPA_WI@Z
?WksGetLocaleRegDWORD@MWblIntl@@SAHPB_WPAK@Z
?WksGetLocaleRegString@MWblIntl@@SAHPB_WPA_WPAK@Z
?WksGettingStartedManual@@YAPAUHWND__@@PAU1@@Z
?WksHeapValidate@@YAHPAX@Z
?WksHeapValidate@@YAHPAXKPBX@Z
?WksHtmlHelp@@YAPAUHWND__@@PAU1@PB_W1_N@Z
?WksParseSimpleFontInfo@@YAXPA_WPAH@Z
?WksSetDefaultFont@MWblIntl@@SAHPAUHWND__@@@Z
?WzLowerCase@MWblStrings@@SAPA_WPA_WI@Z
?WzStrStr@MWblStrings@@SAPA_WPB_WI0I@Z
?WzStrStrEx@MWblStrings@@SAPA_WPB_WI0IW4EStringCompareType@@@Z
?WzStripLeadingWch@MWblStrings@@SAPA_WPA_W_W@Z
?WzStripLeadingWhiteSpace@MWblStrings@@SAPA_WPA_W@Z
?WzStripTrailingWch@MWblStrings@@SAPA_WPA_W_W@Z
?WzStripTrailingWhiteSpace@MWblStrings@@SAPA_WPA_W@Z
?WzToSzSimple@MWblStrings@@SAJPB_WPADI@Z
?WzUpperCase@MWblStrings@@SAPA_WPA_WI@Z
?_FHgReAlloc@@YAHPAXKK@Z
?_FPvReAlloc@@YAHPAXKK@Z
?_FWksHeapReAlloc@@YAHPAXKPAPAXK@Z
?_FailureF@CWblMessages@@IAAXPAUHINSTANCE__@@PAUHWND__@@HZZ
?_FailureVa@CWblMessages@@IAEXPAUHINSTANCE__@@PAUHWND__@@HPAD@Z
?_FailureVa@CWblMessages@@IAEXPAUHINSTANCE__@@PAUHWND__@@PB_WPAD@Z
?_HgAlloc@@YAPAXKK@Z
?_HgFree@@YAPAXPAX@Z
?_HgSize@@YAKPAX@Z
?_NMessageBoxTitleVa@CWblMessages@@IAEHPAUHWND__@@IPB_W1PAD@Z
?_NMessageBoxVa@CWblMessages@@IAEHPAUHWND__@@IPB_WPAD@Z
?_PvAlloc@@YAPAXKKK@Z
?_PvFree@@YAXPAX@Z
?_PvSize@@YAKPAX@Z
?_WblMemoryInit@@YAHXZ
?_WblMemoryUninit@@YAXXZ
?_WksHeapAlloc@@YAPAXPAXKK@Z
?_WksHeapCreate@@YAPAXKKK@Z
?_WksHeapDestroy@@YAPAXPAX@Z
?_WksHeapFree@@YAPAXPAXK0@Z
?_WksHeapReAlloc@@YAPAXPAXKPAPAXK@Z
?_WksHeapSize@@YAKPAXK0@Z
?m_OStrMan@MWblIntl@@0VCOStrMan@@A
?m_bInitialized@MWblIntl@@0_NA
?s_bWarningActive@CWblMessages@@0_NA
?s_lcidHelp@MWblIntl@@0KA
?s_lcidInstall@MWblIntl@@0KA
?s_lcidUI@MWblIntl@@0KA
?s_lidDefaultLanguage@MWblStrings@@0GA
WksSqmAddToAverage
WksSqmAddToStream
WksSqmBegin
WksSqmEnd
WksSqmGet
WksSqmIncrement
WksSqmOnBroadcast
WksSqmOnOptInOut
WksSqmQuit
WksSqmRegWinMsg
WksSqmSet
WksSqmSetIfMax
WksSqmSetIfMin
WksSqmSetString
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ