Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
5b3b5da47b7dda9562e0bc6192d9a915_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5b3b5da47b7dda9562e0bc6192d9a915_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5b3b5da47b7dda9562e0bc6192d9a915_JaffaCakes118
Size
154KB
MD5
5b3b5da47b7dda9562e0bc6192d9a915
SHA1
e1ba22a20dc3439253869183f4999c249ebda4b0
SHA256
10f884a6f2b455682dfb8d01174dd0db01822ac047668b3cde56a2f968dd4dae
SHA512
fd4ebad707e6b150329425028d4447171c5ea54d46631925061701516c805eb0cf2210bd6a24e6f51d6dc6d528e3d418ef68e4c10eb7721f9eb3c3d5145e9e73
SSDEEP
3072:Myr+kkIRzt3jgFj6QowphyqGGOOWqFlrRgy:zt3ojlMGOOWqTH
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
c:\depot\workscd\Common\WksGen\WBL\Release\WkWbl.pdb
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
InternetGetConnectedState
IsValidLocale
GetLocaleInfoW
LoadLibraryExW
FindFirstFileW
FindNextFileW
FindClose
GetACP
MulDiv
SetEvent
EnterCriticalSection
LeaveCriticalSection
GetUserDefaultLangID
GetStringTypeExW
FormatMessageW
FormatMessageA
WideCharToMultiByte
InitializeCriticalSection
FreeLibrary
lstrcmpiW
SizeofResource
lstrlenW
InterlockedDecrement
InterlockedIncrement
InterlockedExchange
DisableThreadLibraryCalls
RaiseException
DeleteCriticalSection
FlushInstructionCache
GetCurrentProcess
GetFileAttributesW
CreateEventW
CreateThread
WaitForSingleObject
GetVersionExW
GlobalMemoryStatusEx
SetLastError
GetCurrentThreadId
LoadLibraryA
CreateFileA
CreateFileW
FindFirstFileA
MoveFileW
MoveFileA
IsDBCSLeadByte
GetFileAttributesA
CreateProcessW
GlobalUnlock
GlobalAlloc
GlobalLock
GetCommandLineW
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
LocalFree
LocalAlloc
SetUnhandledExceptionFilter
QueryPerformanceCounter
UnhandledExceptionFilter
TerminateProcess
GetProcAddress
GetVersionExA
MultiByteToWideChar
GetLastError
VirtualFree
VirtualAlloc
VirtualQuery
HeapDestroy
HeapReAlloc
HeapSize
HeapFree
HeapAlloc
HeapCreate
GetSystemInfo
FreeResource
LockResource
LoadResource
GetModuleHandleW
FindResourceW
GetModuleFileNameW
GetProcessHeap
CompareStringW
GetUserDefaultLCID
GetSystemDefaultLCID
IsValidCodePage
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
IsDebuggerPresent
CloseHandle
Sleep
CallWindowProcA
MessageBoxA
SendMessageA
EndDialog
DialogBoxParamW
CallWindowProcW
DrawFocusRect
InflateRect
PostThreadMessageW
RegisterWindowMessageW
DefWindowProcW
SystemParametersInfoW
GetDlgItem
SetFocus
MapWindowPoints
GetClientRect
SetWindowPos
SetWindowTextW
GetWindowLongW
SetWindowLongW
CharNextW
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
KillTimer
SetTimer
PostMessageW
LoadStringW
RedrawWindow
ReleaseDC
GetDC
GetActiveWindow
GetSysColorBrush
GetCursor
SetCursor
IntersectRect
OffsetRect
SystemParametersInfoA
GetSystemMetrics
LoadCursorW
GetWindowPlacement
GetWindowRect
IsIconic
MessageBoxW
SendMessageW
GetWindow
GetTopWindow
SendDlgItemMessageW
GetDesktopWindow
GetClassNameW
WinHelpW
GetParent
ClientToScreen
CharNextA
UnregisterClassA
ScreenToClient
CreateFontIndirectW
SetTextColor
GetObjectW
GetTextExtentPointW
TranslateCharsetInfo
SetBkColor
CreateBitmap
CreateDIBSection
GetDCOrgEx
GetClipBox
DeleteDC
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
DeleteObject
ExtTextOutW
GetDeviceCaps
SelectObject
RegOpenKeyExA
RegQueryValueExA
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegSetValueExA
SHGetFolderPathW
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHFileOperationW
SHCreateDirectoryExW
ShellExecuteW
CoTaskMemFree
CoTaskMemRealloc
CoCreateInstance
CoTaskMemAlloc
SysFreeString
VarUI4FromStr
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?_Myptr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IBEPBDXZ
swscanf_s
memmove
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
memset
_invalid_parameter_noinfo
_purecall
malloc
_vsnwprintf_s
??0exception@std@@QAE@XZ
__CxxFrameHandler3
_wtoi
wcscmp
_time64
_vsnprintf_s
memcpy_s
_recalloc
wcsncpy_s
free
wcslen
wcscpy_s
wcsncmp
wcscat_s
fopen_s
_wfopen_s
wcsstr
memmove_s
?terminate@@YAXXZ
_unlock
_encode_pointer
__dllonexit
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
memcpy
_crt_debugger_hook
__clean_type_info_names_internal
_CxxThrowException
?_type_info_dtor_internal_method@type_info@@QAEXXZ
??0COStrMan@@QAE@XZ
??0CWblCommandLineParseResult@@AAE@ABV0@@Z
??0CWblCommandLineParseResult@@QAE@XZ
??0CWblMessages@@QAE@ABV0@@Z
??0CWblMessages@@QAE@XZ
??0CWfxContextHelp@@QAE@ABV0@@Z
??0CWfxContextHelp@@QAE@XZ
??0CWksWaitCursor@@QAE@PB_W_N@Z
??0MWblIntl@@AAE@XZ
??0MWblIntlFeatures@@AAE@XZ
??0MWblStrings@@AAE@XZ
??0MWblStringsWin32@@AAE@XZ
??1COStrMan@@QAE@XZ
??1CWblCommandLineParseResult@@QAE@XZ
??1CWksWaitCursor@@QAE@XZ
??1MWblIntl@@AAE@XZ
??1MWblIntlFeatures@@AAE@XZ
??1MWblStrings@@AAE@XZ
??1MWblStringsWin32@@AAE@XZ
??2@YAPAXIPAXK@Z
??3@YAXPAX0K@Z
??4COStrMan@@QAEAAV0@ABV0@@Z
??4CWblCommandLineParseResult@@QAEAAV0@ABV0@@Z
??4CWblMessages@@QAEAAV0@ABV0@@Z
??4CWfxContextHelp@@QAEAAV0@ABV0@@Z
??4CWksWaitCursor@@QAEAAV0@ABV0@@Z
??4MWblIntl@@QAEAAV0@ABV0@@Z
??4MWblIntlFeatures@@QAEAAV0@ABV0@@Z
??4MWblStrings@@QAEAAV0@ABV0@@Z
??4MWblStringsWin32@@QAEAAV0@ABV0@@Z
??_7CWblMessages@@6B@
??_FCWksWaitCursor@@QAEXXZ
?AddParseError@CWblCommandLineParseResult@@QAEXK@Z
?BAddItem@CWblCommandLineParseResult@@QAE_NJPA_W0@Z
?BAlphaNumWch@MWblStrings@@SA_N_W@Z
?BAlphaWch@MWblStrings@@SA_N_W@Z
?BChina@MWblIntl@@SA_NK@Z
?BDigitWch@MWblStrings@@SA_N_W@Z
?BEnableDoubleFontDialog@MWblIntlFeatures@@SA_NXZ
?BEnableVerticalTextbox@MWblIntlFeatures@@SA_NXZ
?BEqualRgwch@MWblStrings@@SA_NPB_WH0HW4EStringCompareType@@@Z
?BEqualWz@MWblStrings@@SA_NPB_W0W4EStringCompareType@@@Z
?BFEWch@MWblStrings@@SA_N_W@Z
?BFEWz@MWblStrings@@SA_NPB_W@Z
?BFarEast@MWblIntl@@SA_NK@Z
?BGetSpecialFolder@@YA_NHPA_WI@Z
?BHexDigitWch@MWblStrings@@SA_N_W@Z
?BHrIsOutOfDiskSpace@@YA_NJ@Z
?BHrIsOutOfMemory@@YA_NJ@Z
?BInit@CWblCommandLineParseResult@@QAE_NI@Z
?BIsAnsi@MWblStrings@@CA_N_W@Z
?BIsOn@CWksWaitCursor@@QAE_NXZ
?BJapan@MWblIntl@@SA_NK@Z
?BKorea@MWblIntl@@SA_NK@Z
?BLowerCaseWch@MWblStrings@@SA_N_W@Z
?BPreMessageBox@CWblMessages@@MAE_NXZ
?BPuncWch@MWblStrings@@SA_N_W@Z
?BSpaceWch@MWblStrings@@SA_N_W@Z
?BSzToRgwch@MWblStrings@@SA_NPBDPA_WH@Z
?BTaiwan@MWblIntl@@SA_NK@Z
?BUpperCaseWch@MWblStrings@@SA_N_W@Z
?BWzToRgch@MWblStrings@@SA_NPB_WPADH@Z
?BuildLocalePath@MWblIntl@@SAXKPB_WPA_WIPAUHINSTANCE__@@@Z
?CbFromSz@MWblStrings@@SAHPBD@Z
?CbFromWz@MWblStrings@@SAHPB_W@Z
?CbRgwchToRgch@MWblStrings@@SAHPB_WHPADH@Z
?CbRgwchToRgchCp@MWblStrings@@SAHIPB_WHPADH@Z
?CbWzToSz@MWblStrings@@SAHPB_WPADH@Z
?CchFromSz@MWblStrings@@SAHPBD@Z
?CharLowerCaseLid@MWblStringsWin32@@SA_W_WG@Z
?CharUpperCaseLid@MWblStringsWin32@@SA_W_WG@Z
?CompareMemory@MWblStringsWin32@@SAHPBX0I@Z
?CountryCodeFromLcid@MWblIntl@@KAHK@Z
?CpeParseErrors@CWblCommandLineParseResult@@QAEKXZ
?CwchDoubleToWz@MWblStrings@@SAHNPA_WI@Z
?CwchFormatWz@MWblStrings@@SAHPAUHINSTANCE__@@HPA_WIPAH@Z
?CwchFormatWz@MWblStrings@@SAHPAUHINSTANCE__@@HPA_WIPAPA_W@Z
?CwchFormatWz@MWblStrings@@SAHPAUHINSTANCE__@@PB_WPA_WIPAH@Z
?CwchFormatWz@MWblStrings@@SAHPB_WPA_WIPAPA_W@Z
?CwchFromWz@MWblStrings@@SAHPB_W@Z
?CwchFromWzIgnoreTrailingSpace@MWblStrings@@SAHPB_W@Z
?CwchIntToWz@MWblStrings@@SAHHHPA_WI@Z
?CwchLoadMeasurement@MWblIntl@@SAHPAUHINSTANCE__@@IW4MEASURE@@PAN@Z
?CwchLoadStringCore@COStrMan@@IAEIPAUHINSTANCE__@@IPA_WII@Z
?CwchLoadStringFromDLL@COStrMan@@QAEIPAUHINSTANCE__@@IPA_WII@Z
?CwchLoadStringFromDLL@MWblIntl@@SAHPAUHINSTANCE__@@IPA_WHI@Z
?CwchLoadWz@COStrMan@@QAEIPAUHINSTANCE__@@IPA_WI@Z
?CwchLoadWz@MWblIntl@@SAHPAUHINSTANCE__@@IPA_WH@Z
?CwchRgchToRgwch@MWblStrings@@SAHPBDHPA_WH@Z
?CwchRgchToRgwchCp@MWblStrings@@SAHIPBDHPA_WH@Z
?CwchSzToWz@MWblStrings@@SAHPBDPA_WH@Z
?CwchTimeToWz@MWblStrings@@SAHPAU_SYSTEMTIME@@PA_WI@Z
?CwchUintToWz@MWblStrings@@SAHIHPA_WI@Z
?CwchWzToDouble@MWblStrings@@SAHPB_WPAN@Z
?CwchWzToHexInt@MWblStrings@@SAHPB_WPAH@Z
?CwchWzToInt@MWblStrings@@SAHPB_WPAH@Z
?CwchWzToUint@MWblStrings@@SAHPB_WPAI@Z
?DitherBlt@@YAXPAUHDC__@@HHHH0PAUHBITMAP__@@HH@Z
?FMemAlert@@YAHXZ
?Failure@CWblMessages@@QAEXPAUHWND__@@H@Z
?Failure@CWblMessages@@QAEXPAUHWND__@@PB_W@Z
?FailureDiskSpace@CWblMessages@@QAEXPAUHWND__@@@Z
?FailureF@CWblMessages@@QAAXPAUHWND__@@HZZ
?FailureF@CWblMessages@@QAAXPAUHWND__@@PB_WZZ
?FailureFormatWz@CWblMessages@@QAEXPAUHWND__@@HPAH@Z
?FailureFormatWz@CWblMessages@@QAEXPAUHWND__@@HPAPA_W@Z
?FailureFormatWz@CWblMessages@@QAEXPAUHWND__@@PB_WPAH@Z
?FailureFormatWz@CWblMessages@@QAEXPAUHWND__@@PB_WPAPA_W@Z
?FailureHr@CWblMessages@@QAEXPAUHWND__@@J@Z
?FailureMemory@CWblMessages@@QAEXPAUHWND__@@@Z
?FailureMustClose@CWblMessages@@QAEXPAUHWND__@@@Z
?FailureOther@CWblMessages@@QAEXPAUHWND__@@@Z
?FailureReinstall@CWblMessages@@QAEXPAUHWND__@@PB_W@Z
?FailureReinstallApp@CWblMessages@@QAEXPAUHWND__@@PB_W1@Z
?GetDefaultFont@MWblIntl@@SAHPA_WIPAUHINSTANCE__@@I@Z
?GetDefaultLangId@MWblStrings@@SAGXZ
?GetHelpLcid@MWblIntl@@SAKXZ
?GetInstallLcid@MWblIntl@@SAKXZ
?GetLocaleRegistryLocation@MWblIntl@@SAPAUHKEY__@@K@Z
?GetLocaleRegistryLocation@MWblIntl@@SAPAUHKEY__@@XZ
?GetResourceDLL@@YAPAUHINSTANCE__@@XZ
?GetSystemLcid@MWblIntl@@SAKXZ
?GetUILcid@MWblIntl@@SAKXZ
?GetUserLcid@MWblIntl@@SAKXZ
?HrWblParseCommandLine@@YAJAAUSClpRules@@PB_WAAVCWblCommandLineParseResult@@@Z
?Init@CWblMessages@@QAEXPAUHINSTANCE__@@@Z
?Initialize@MWblIntl@@SAJXZ
?Initialize@MWblStrings@@SAJXZ
?IsValidCharset@MWblIntl@@SAHE@Z
?LoadLocResourceDLL@MWblIntl@@SAPAUHINSTANCE__@@KPB_WPAU2@@Z
?LoadResourceDLL@MWblIntl@@SAPAUHINSTANCE__@@PB_W@Z
?LoadUIResourceDLL@MWblIntl@@SAPAUHINSTANCE__@@PB_WPAU2@@Z
?NCompareLocRgwch@MWblStrings@@SAHPB_WH0HW4EStringCompareType@@@Z
?NCompareLocRgwchLoc@MWblStrings@@SAHPB_WH0HW4EStringCompareType@@GG@Z
?NCompareLocWz@MWblStrings@@SAHPB_W0W4EStringCompareType@@@Z
?NCompareRgwch@MWblStrings@@SAHPB_WH0H_N@Z
?NCompareWz@MWblStrings@@SAHPB_W0_N@Z
?NFindNotWchInRgwch@MWblStrings@@SAHPB_WH_W@Z
?NFindNotWchInWz@MWblStrings@@SAHPB_W_W@Z
?NFindOneOfInWz@MWblStrings@@SAHPB_W0@Z
?NFindRightWchInRgwch@MWblStrings@@SAHPB_WH_W@Z
?NFindRightWchInWz@MWblStrings@@SAHPB_W_W@Z
?NFindWchInRgwch@MWblStrings@@SAHPB_WH_W@Z
?NFindWchInWz@MWblStrings@@SAHPB_W_W@Z
?NFromWz@MWblStrings@@SAHPB_W@Z
?NLoadStringInt@MWblIntl@@SAHPAUHINSTANCE__@@I@Z
?NLoadStringIntArray@MWblIntl@@SAHPAUHINSTANCE__@@IPAHI@Z
?NMessageBox@CWblMessages@@QAEHPAUHWND__@@IH@Z
?NMessageBox@CWblMessages@@QAEHPAUHWND__@@IPB_W@Z
?NMessageBoxF@CWblMessages@@QAAHPAUHWND__@@IHZZ
?NMessageBoxF@CWblMessages@@QAAHPAUHWND__@@IPB_WZZ
?NMessageBoxFormatWz@CWblMessages@@QAEHPAUHWND__@@IHPAH@Z
?NMessageBoxFormatWz@CWblMessages@@QAEHPAUHWND__@@IHPAPA_W@Z
?NMessageBoxFormatWz@CWblMessages@@QAEHPAUHWND__@@IPB_WPAH@Z
?NMessageBoxFormatWz@CWblMessages@@QAEHPAUHWND__@@IPB_WPAPA_W@Z
?NMessageBoxTitle@CWblMessages@@QAEHPAUHWND__@@IHH@Z
?NMessageBoxTitle@CWblMessages@@QAEHPAUHWND__@@IPB_W1@Z
?NRgPosrFromRid@COStrMan@@IAEHK@Z
?NYI@CWblMessages@@QAEXPAUHWND__@@@Z
?Off@CWksWaitCursor@@QAEXXZ
?On@CWksWaitCursor@@QAEXPB_W@Z
?OnWksContextMenu@CWfxContextHelp@@QAEJIIJAAH@Z
?OnWksHelp@CWfxContextHelp@@QAEJIIJAAH@Z
?OperatorDelete@@YAXPAX@Z
?OperatorNew@@YAPAXIPAXK@Z
?PosrFromCachedRid@COStrMan@@IAEPAUSOsr@@KPAUHINSTANCE__@@@Z
?PosrFromRid@COStrMan@@IAEPAUSOsr@@KPAUHINSTANCE__@@@Z
?PostMessageBox@CWblMessages@@MAEXXZ
?ProcessWindowMessage@CWfxContextHelp@@QAEHPAUHWND__@@IIJAAJK@Z
?PvBaseFromPv@@YAPAXPAX@Z
?PvBaseFromPvFixed@@YAPAXPAX@Z
?PwchFindNotWchInRgwch@MWblStrings@@SAPA_WPB_WH_W@Z
?PwchFindNotWchInWz@MWblStrings@@SAPA_WPB_W_W@Z
?PwchFindOneOfInWz@MWblStrings@@SAPA_WPB_W0@Z
?PwchFindRightWchInRgwch@MWblStrings@@SAPA_WPB_WH_W@Z
?PwchFindRightWchInWz@MWblStrings@@SAPA_WPB_W_W@Z
?PwchFindWchInRgwch@MWblStrings@@SAPA_WPB_WH_W@Z
?PwchFindWchInWz@MWblStrings@@SAPA_WPB_W_W@Z
?PwchSkipLeadingWch@MWblStrings@@SAPA_WPA_W_W@Z
?PwchSkipWhiteSpace@MWblStrings@@SAPA_WPB_W@Z
?RClpResultItemAt@CWblCommandLineParseResult@@QAEAAUSClpResultItem@@I@Z
?RCommands@CWblCommandLineParseResult@@QAEAAV?$CWksDynamicArray@USCommands@@V?$CWksAllocator@USCommands@@@@@@XZ
?Refresh@MWblIntl@@SAJXZ
?RemoveCharsInWz@MWblStrings@@SAXPB_WIPA_W10@Z
?RemoveWhiteCharsInWz@MWblStrings@@SAXPB_WIPA_W1@Z
?RgwchStrStr@MWblStrings@@SAPA_WPB_WH0H@Z
?RgwchStrStrEx@MWblStrings@@SAPA_WPB_WH0HW4EStringCompareType@@@Z
?SendMessageToDescendants@MWblIntl@@SAXPAUHWND__@@IIJH@Z
?SetDefaultLangId@MWblStrings@@SAXG@Z
?SetDefaultParent@CWblMessages@@QAEXPAUHWND__@@@Z
?SetDefaultSection@COStrMan@@QAEXG@Z
?SetDefaultSection@MWblIntl@@SAXG@Z
?SetResourceCodePage@COStrMan@@QAEXI@Z
?SetResourceCodePage@MWblIntl@@SAXI@Z
?SetResourceDLL@@YAXPAUHINSTANCE__@@@Z
?ShowContextHelp@CWfxContextHelp@@QAEXPAUtagHELPINFO@@@Z
?ShowLangDllError@@YAXXZ
?StCountResultItems@CWblCommandLineParseResult@@QAEIXZ
?SzToWzSimple@MWblStrings@@SAJPBDPA_WI@Z
?UCodePageFromLcid@MWblIntl@@SAIK@Z
?UResourceCodePage@COStrMan@@QAEIXZ
?UResourceCodePage@MWblIntl@@SAIXZ
?WDefaultSection@COStrMan@@QAEGXZ
?WDefaultSection@MWblIntl@@SAGXZ
?WGetCType1Wch@MWblStringsWin32@@SAG_W@Z
?WGetCType2Wch@MWblStringsWin32@@SAG_W@Z
?WGetCType3Wch@MWblStringsWin32@@SAG_W@Z
?WchStripAccent@MWblStrings@@SA_W_W@Z
?WchToLowerCase@MWblStrings@@SA_W_W@Z
?WchToUpperCase@MWblStrings@@SA_W_W@Z
?WhFromPv@@YAPAXPAX@Z
?WksBGetModuleVersion@@YG_NPAUHINSTANCE__@@PAK1@Z
?WksCharSet@MWblIntl@@SAHPAE@Z
?WksCodePage@MWblIntl@@SAIXZ
?WksDefaultDialogFont@MWblIntl@@SAHPA_WI@Z
?WksGetLocaleRegDWORD@MWblIntl@@SAHPB_WPAK@Z
?WksGetLocaleRegString@MWblIntl@@SAHPB_WPA_WPAK@Z
?WksGettingStartedManual@@YAPAUHWND__@@PAU1@@Z
?WksHeapValidate@@YAHPAX@Z
?WksHeapValidate@@YAHPAXKPBX@Z
?WksHtmlHelp@@YAPAUHWND__@@PAU1@PB_W1_N@Z
?WksParseSimpleFontInfo@@YAXPA_WPAH@Z
?WksSetDefaultFont@MWblIntl@@SAHPAUHWND__@@@Z
?WzLowerCase@MWblStrings@@SAPA_WPA_WI@Z
?WzStrStr@MWblStrings@@SAPA_WPB_WI0I@Z
?WzStrStrEx@MWblStrings@@SAPA_WPB_WI0IW4EStringCompareType@@@Z
?WzStripLeadingWch@MWblStrings@@SAPA_WPA_W_W@Z
?WzStripLeadingWhiteSpace@MWblStrings@@SAPA_WPA_W@Z
?WzStripTrailingWch@MWblStrings@@SAPA_WPA_W_W@Z
?WzStripTrailingWhiteSpace@MWblStrings@@SAPA_WPA_W@Z
?WzToSzSimple@MWblStrings@@SAJPB_WPADI@Z
?WzUpperCase@MWblStrings@@SAPA_WPA_WI@Z
?_FHgReAlloc@@YAHPAXKK@Z
?_FPvReAlloc@@YAHPAXKK@Z
?_FWksHeapReAlloc@@YAHPAXKPAPAXK@Z
?_FailureF@CWblMessages@@IAAXPAUHINSTANCE__@@PAUHWND__@@HZZ
?_FailureVa@CWblMessages@@IAEXPAUHINSTANCE__@@PAUHWND__@@HPAD@Z
?_FailureVa@CWblMessages@@IAEXPAUHINSTANCE__@@PAUHWND__@@PB_WPAD@Z
?_HgAlloc@@YAPAXKK@Z
?_HgFree@@YAPAXPAX@Z
?_HgSize@@YAKPAX@Z
?_NMessageBoxTitleVa@CWblMessages@@IAEHPAUHWND__@@IPB_W1PAD@Z
?_NMessageBoxVa@CWblMessages@@IAEHPAUHWND__@@IPB_WPAD@Z
?_PvAlloc@@YAPAXKKK@Z
?_PvFree@@YAXPAX@Z
?_PvSize@@YAKPAX@Z
?_WblMemoryInit@@YAHXZ
?_WblMemoryUninit@@YAXXZ
?_WksHeapAlloc@@YAPAXPAXKK@Z
?_WksHeapCreate@@YAPAXKKK@Z
?_WksHeapDestroy@@YAPAXPAX@Z
?_WksHeapFree@@YAPAXPAXK0@Z
?_WksHeapReAlloc@@YAPAXPAXKPAPAXK@Z
?_WksHeapSize@@YAKPAXK0@Z
?m_OStrMan@MWblIntl@@0VCOStrMan@@A
?m_bInitialized@MWblIntl@@0_NA
?s_bWarningActive@CWblMessages@@0_NA
?s_lcidHelp@MWblIntl@@0KA
?s_lcidInstall@MWblIntl@@0KA
?s_lcidUI@MWblIntl@@0KA
?s_lidDefaultLanguage@MWblStrings@@0GA
WksSqmAddToAverage
WksSqmAddToStream
WksSqmBegin
WksSqmEnd
WksSqmGet
WksSqmIncrement
WksSqmOnBroadcast
WksSqmOnOptInOut
WksSqmQuit
WksSqmRegWinMsg
WksSqmSet
WksSqmSetIfMax
WksSqmSetIfMin
WksSqmSetString
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ