Windows 10 DLL File Information - filemgmt.dll |
The following DLL report was generated by automatic DLL script that scanned and loaded all DLL files in the system32 directory of Windows 10, extracted the information from them, and then saved it into HTML reports. If you want to view a report of another DLL, go to the main page of this Web site.
General Information
File Description: | Services and Shared Folders |
File Version: | 10.0.10130.0 (fbl_impressive.150522-2224) |
Company: | Microsoft Corporation |
Product Name: | Microsoft® Windows® Operating System |
DLL popularity | Very Low - There is no any other DLL in system32 directory that is statically linked to this file. |
File Size: | 459 KB |
Total Number of Exported Functions: | 6 |
Total Number of Exported Functions With Names: | 6 |
Section Headers
Name | Virtual Address | Raw Data Size | % of File | Characteristics | Section Contains... |
---|---|---|---|---|---|
.text | 0x00001000 | 247,808 Bytes | 52.7% | Read, Execute | Code |
.data | 0x0003e000 | 7,680 Bytes | 1.6% | Write, Read | Initialized Data |
.idata | 0x00043000 | 7,168 Bytes | 1.5% | Read | Initialized Data |
.didat | 0x00045000 | 512 Bytes | 0.1% | Write, Read | Initialized Data |
.rsrc | 0x00046000 | 176,640 Bytes | 37.6% | Read | Initialized Data |
.reloc | 0x00072000 | 29,184 Bytes | 6.2% | Read, Discardable | Initialized Data |
Static Linking
filemgmt.dll is statically linked to the following files:MFC42u.dll
msvcrt.dll
ATL.DLL
ntdll.dll
ADVAPI32.dll
USER32.dll
GDI32.dll
CFGMGR32.dll
KERNEL32.dll
This means that when filemgmt.dll is loaded, the above files are automatically loaded too. If one of these files is corrupted or missing, filemgmt.dll won't be loaded.
General Resources Information
Resource Type | Number of Items | Total Size | % of File |
---|---|---|---|
Icons | 4 | 109,126 Bytes | 23.2% |
Animated Icons | 0 | 0 Bytes | 0.0% |
Cursors | 0 | 0 Bytes | 0.0% |
Animated Cursors | 0 | 0 Bytes | 0.0% |
Bitmaps | 9 | 62,824 Bytes | 13.4% |
AVI Files | 0 | 0 Bytes | 0.0% |
Dialog-Boxes | 21 | 16,448 Bytes | 3.5% |
HTML Related Files | 0 | 0 Bytes | 0.0% |
Menus | 0 | 0 Bytes | 0.0% |
Strings | 389 | 37,776 Bytes | 8.0% |
Type Libraries | 0 | 0 Bytes | 0.0% |
Manifest | 1 | 721 Bytes | 0.2% |
All Others | 4 | 1,565 Bytes | 0.3% |
Total | 428 | 228,460 Bytes | 48.6% |
Icons in this file
There are 4 icons stored in this DLL file. You can view all these icons in the following small thumbnail:
Cursors in this file
No cursors found in this file
Dialog-boxes list (up to 1000 dialogs)
In the following section, you can find the captions of dialog-boxes stored in this DLL. The list is currently limited to 1000 dialogs.ID | Dialog Caption |
---|---|
101 | Shared Folders |
211 | General |
212 | Log On |
213 | Recovery |
214 | Restart Computer Options |
215 | Stop Other Services |
219 | Service Control |
220 | Recovery |
223 | General |
224 | General |
225 | General |
239 | Offline Settings |
340 | Publish |
360 | Change |
970 | Select Computer |
5000 | Select Computer |
11475 | Configuration |
11625 | Sessions |
11650 | Add Document Type |
11675 | Edit Document Type |
11700 | File Association |
String resources in this dll (up to 1000 strings)
String ID | String Text |
---|---|
1 | FILEMGMT 1.0 Object |
2 | SvcVwr 1.0 Object |
3 | Local Computer |
4 | Shared Folders |
5 | Services |
11 | %1 Properties (%2) |
12 | %1 Error %2!u!: %3 |
13 | %1 Error 0x%2!x!: %3 |
98 | Error |
99 | Warning |
100 | Boot |
101 | System |
102 | Automatic |
103 | Manual |
104 | Disabled |
105 | Running |
106 | Stopped |
107 | Paused |
108 | Starting |
109 | Stopping |
110 | Pausing |
111 | Resuming |
112 | (Unknown) |
113 | Your computer is connected to the computer named %2. The %1 service on %2 has ended unexpectedly. %2 will restart automatically, and then you can reestablish the connection. |
116 | Windows is attempting to start the following service on %1!.0s!%2... |
117 | Windows is attempting to stop the following service on %1!.0s!%2... |
118 | Windows is attempting to pause the following service on %1!.0s!%2... |
119 | Windows is attempting to resume the following service on %1!.0s!%2... |
120 | Take No Action |
121 | Restart the Service |
122 | Run a Program |
123 | Restart the Computer |
125 | Hardware Profile |
126 | Instance |
127 | Service |
129 | Enabled |
130 | Disabled |
131 | Do you want to restart these services? |
132 | Restart Other Services |
133 | When %1 stops, these other services will also stop. |
134 | When %1 restarts, these other services will also restart. |
140 | &Start |
141 | St&op |
142 | Pa&use |
143 | Resu&me |
144 | R&estart |
145 | Start service %1 on %2 |
146 | Stop service %1 on %2 |
147 | Pause service %1 on %2 |
148 | Resume service %1 on %2 |
149 | Stop and Start service %1 on %2 |
160 | Local System |
161 | Local Service |
162 | Network Service |
200 | Configuration Manager: The operation completed successfully. |
201 | Configuration Manager: 0x1 |
202 | Configuration Manager: Not enough memory is available to process this command. |
203 | Configuration Manager: A required pointer parameter is invalid. |
204 | Configuration Manager: The ulFlags parameter specified is invalid for this operation. |
205 | Configuration Manager: The device instance handle parameter is not valid. |
206 | Configuration Manager: The supplied resource descriptor parameter is invalid. |
207 | Configuration Manager: The supplied logical configuration parameter is invalid. |
208 | Configuration Manager: 0x8 |
209 | Configuration Manager: 0x9 |
210 | Configuration Manager: 0xA |
211 | Configuration Manager: The RESOURCEID parameter does not contain a valid RESOURCEID. |
212 | Configuration Manager: 0xC |
213 | Configuration Manager: The specified device instance handle does not correspond to a present device. |
214 | Configuration Manager: There are no more logical configurations available. |
215 | Configuration Manager: There are no more resource descriptions available. |
216 | Configuration Manager: This device instance already exists. |
217 | Configuration Manager: The supplied range list parameter is invalid. |
218 | Configuration Manager: 0x12 |
219 | Configuration Manager: A general internal error occurred. |
220 | Configuration Manager: 0x14 |
221 | Configuration Manager: The device is disabled for this configuration. |
222 | Configuration Manager: 0x16 |
223 | Configuration Manager: A service or application refused to allow removal of this device. |
224 | Configuration Manager: 0x18 |
225 | Configuration Manager: 0x19 |
226 | Configuration Manager: An output parameter was too small to hold all the data available. |
227 | Configuration Manager: 0x1B |
228 | Configuration Manager: 0x1C |
229 | Configuration Manager: A required entry in the registry is missing or an attempt to write to the registry failed. |
230 | Configuration Manager: The specified Device ID is not a valid Device ID. |
231 | Configuration Manager: One or more parameters were invalid. |
232 | Configuration Manager: 0x20 |
233 | Configuration Manager: 0x21 |
234 | Configuration Manager: 0x22 |
235 | Configuration Manager: There are no more hardware profiles available. |
236 | Configuration Manager: 0x24 |
237 | Configuration Manager: The specified value does not exist in the registry. |
238 | Configuration Manager: 0x26 |
239 | Configuration Manager: The specified priority is invalid for this operation. |
240 | Configuration Manager: This device cannot be disabled. |
241 | Configuration Manager: 0x29 |
242 | Configuration Manager: 0x2A |
243 | Configuration Manager: 0x2B |
246 | Configuration Manager: The specified key does not exist in the registry. |
247 | Configuration Manager: The specified machine name does not meet the UNC naming conventions. |
248 | Configuration Manager: A general remote communication error occurred. |
249 | Configuration Manager: The machine selected for remote communication is not available at this time. |
250 | Configuration Manager: The Plug and Play service or another required service is not available. |
251 | Configuration Manager: Access denied. |
252 | Configuration Manager: This routine is not implemented in this version of the operating system. |
253 | Configuration Manager: The specified property type is invalid for this operation. |
254 | Configuration Manager: Device interface is active. |
255 | Configuration Manager: No such device interface. |
256 | Configuration Manager: Invalid reference string. |
257 | Configuration Manager: Invalid conflict list. |
258 | Configuration Manager: Invalid index. |
259 | Configuration Manager: Invalid structure size. |
366 | Edit Keywords |
367 | Type a keyword, and then click Add. |
368 | The system encountered the following error while invoking the Change dialog: |
369 | "%1" is not a valid character. Please correct the string you just typed. |
500 | %1 %2 |
602 | Starts, stops, and configures Windows services. |
603 | Displays shared folders, current sessions, and open files. |
970 | Invalid computer name. |
971 | Select Computer |
972 | Unable to open Computer Selector. |
973 | Automatic (Delayed Start) |
976 | Manual (Trigger Start) |
977 | Automatic (Trigger Start) |
978 | Automatic (Delayed Start, Trigger Start) |
1002 | The startup parameters are not valid. |
1003 | Passwords mismatch. |
1004 | Please enter a valid password. |
1006 | Windows could not start the %1 service on %2.%3 |
1007 | Windows could not stop the %1 service on %2.%3 |
1008 | Windows could not pause the %1 service on %2.%3 |
1009 | Windows could not resume the %1 service on %2.%3 |
1010 | The %1 service on %2 started and then stopped. Some services stop automatically if they are not in use by other services or programs. |
1014 | Windows was unable to open service %1 for reading on %2. |
1015 | Windows was unable to open service %1 for writing on %2. |
1016 | The service has returned a service-specific error code. |
1017 | The service did not return an error. This could be an internal Windows error or an internal service error. If the problem persists, contact your system administrator. |
1018 | Windows was unable to open service control manager database on %1. |
1019 | The system encountered the following error while reading the list of services on %1: |
1020 | Windows was unable to query status for service %1. The remote connection on %2 has been broken. |
1021 | Service %1 could not be configured to run under account name %2 on computer %3. Service %1 runs in a shared process. If computer %3 is running Windows NT 4.0 or earlier, services which run in a shared process must run under the system account. |
1030 | Windows could not start the %1 on %2. For more information, review the System Event Log. If this is a non-Microsoft service, contact the service vendor, and refer to service-specific error code %3!d!. |
1031 | Windows could not stop the %1 on %2. For more information, review the System Event Log. If this is a non-Microsoft service, contact the service vendor, and refer to service-specific error code %3!d!. |
1032 | Windows could not pause the %1 on %2. For more information, review the System Event Log. If this is a non-Microsoft service, contact the service vendor, and refer to service-specific error code %3!d!. |
1033 | Windows could not resume the %1 on %2. For more information, review the System Event Log. If this is a non-Microsoft service, contact the service vendor, and refer to service-specific error code %3!d!. |
1034 | The delayed auto-start flag could not be set. |
1035 | The delayed auto-start flag could not be reset. |
1036 | The service-failure-actions flag could not be set. |
1037 | The service-failure-actions flag could not be reset. |
2000 | Shared Folders (%1) |
2001 | Shares (%1) |
2002 | Sessions (%1) |
2003 | Open Files (%1) |
2004 | Services (%1) |
2100 | Shared Folders (Local) |
2101 | Shares (Local) |
2102 | Sessions (Local) |
2103 | Open Files (Local) |
2104 | Services (Local) |
2200 | Shared Folders |
2201 | Shares |
2202 | Sessions |
2203 | Open Files |
2204 | Services |
3001 | File Server for Macintosh |
3002 | Please type a server name, or choose Cancel. |
3003 | This change will take effect when File Server for Macintosh service is restarted. |
3004 | The message contains too many characters. Please type a shorter message. |
3005 | Are you sure you want to delete the selected document Creator/Type item and all associated extensions? |
3006 | Type the message text you wish to send, or choose Cancel. |
3007 | The selected Macintosh user is no longer connected. The user may have logged off or been forced off by another administrator. |
3008 | The message was sent successfully. |
3009 | The message has been sent, but the connected workstation has not received it. The workstation is running an unsupported version of System software. |
3010 | You must specify both a Creator and a Type to create a valid Creator/Type item. |
3012 | Configure &File Server for Macintosh... Configure File Server for Macintosh |
3013 | Configure &File Server for Macintosh... Configure File Server for Macintosh |
3014 | Microsoft only |
3015 | Apple Clear Text |
3016 | Apple Encrypted |
3017 | Apple Clear Text or Microsoft |
3018 | Apple Encrypted or Microsoft |
3019 | The service %1 has not been started. Start it now? |
3020 | Apple Encrypted authentication requires that user passwords are saved in the directory service in clear text format. Please see your help documentation for more information. |
3021 | Creator |
3022 | Type |
3023 | Description |
3024 | Enter a numerical value that is between 0 and 0x%1!x! for the sessions limit. |
3500 | Shared Folders |
3501 | Shared Folders Extension |
3502 | Services |
3503 | Services Extension |
3504 | MMCViewExt object |
3505 | Microsoft Corporation |
4001 | There is no configuration for this device. |
4002 | The device loader for this device failed to load. |
4003 | Insufficient memory. |
4004 | General device error. |
4005 | There is no arbitrator for this resource type. |
4006 | There was a conflict with this device's boot configuration. |
4007 | The resource requirements for this device could not be filtered. |
4008 | The device loader for this device could not be found. |
4009 | The data for this device is invalid. |
4010 | This device failed to start. |
4011 | General device error. |
4012 | A conflict was found with this device's configuration. |
4013 | This device has not been verified. |
4014 | This device needs to be restarted. |
4015 | This device needs to be re-enumerated. |
4016 | This device has an incomplete configuration. |
4017 | This device requires a resource type that is unknown. |
4018 | This device needs to be installed. |
4019 | The registry data for this device has been corrupted. |
4020 | An error occurred with the VxD Loader. |
4021 | This device will be removed. |
4022 | This device is disabled. |
4023 | The device loader is not ready. |
4024 | This device is not present. |
4025 | This device has been moved. |
4026 | General device error. |
4027 | The configuration for this device is invalid. |
4028 | The installation of this device has failed. |
4029 | This device is disabled. |
4030 | This IRQ isn't sharable. |
4031 | Driver failed AddDevice. |
22000 | Base for all AFP Manager errors. |
22105 | The server name specified is not valid. Specify a valid server name without colons. |
25000 | Base for all system errors. |
25003 | The service could not be started because the path was not found. |
25005 | Access was denied to the MacFile service. |
25006 | An internal error occurred (INVALID_HANDLE). |
25008 | Insufficient memory available to complete the operation. |
25032 | Another workstation with the same name exists. The name was not changed. |
25087 | An internal error occurred (INVALID_PARAMETER). |
25123 | An internal error occurred (INVALID_NAME). |
25124 | An internal error occurred (INVALID_LEVEL). |
26053 | The service could not be started because the service did not respond to the start or control request in a timely fashion. |
26054 | The service could not be started because a thread could not be created for the service. |
26055 | The service could not be started because the service database is locked. |
26056 | The service could not be started because the service is already running. |
26058 | The service could not be started because it is disabled. |
26060 | The File Server for Macintosh service is not installed on the server %1. |
26065 | The service could not be started because the database does not exist. |
26068 | The service could not be started because the service dependency failed. |
26069 | The service could not be started because the logon to the computer failed. |
26072 | The service could not be started because the service is marked for deletion. |
26075 | The service could not be started because the service dependency was deleted. |
32000 | You do not have permissions to see the list of shares for Windows clients. |
32001 | You do not have permissions to see the list of shares for Macintosh clients. |
32002 | You do not have permissions to see the list of sessions from Windows clients. |
32003 | You do not have permissions to see the list of sessions from Macintosh clients. |
32004 | You do not have permissions to see the list of files opened by Windows clients. |
32005 | You do not have permissions to see the list of files opened by Macintosh clients. |
32776 | Share Name |
32777 | Folder Path |
32778 | # Client Connections |
32779 | Description |
32780 | User |
32781 | Computer |
32782 | Sessions |
32783 | # Open Files |
32784 | Connected Time |
32785 | Idle Time |
32786 | Guest |
32787 | Open File |
32788 | Via Share |
32789 | Accessed By |
32790 | # Locks |
32791 | Open Mode |
32792 | Name |
32793 | Description |
32794 | Status |
32795 | Startup Type |
32796 | Log On As |
32797 | <Failed to Read Description. Error Code: %1!u! > |
32800 | %2!.2d!:%3!.2d!:%4!.2d! |
32801 | %1!d! day %2!.2d!:%3!.2d!:%4!.2d! |
32802 | %1!d! days %2!.2d!:%3!.2d!:%4!.2d! |
32805 | no access |
32806 | Read |
32807 | Write |
32808 | Create |
32809 | &Open Open the share |
32810 | &Open Open the share |
32811 | Cannot open the share %1. |
32812 | Failed to launch explorer homed at %1. |
32813 | The following error occurred while attempting to close a session from Windows client %1: |
32815 | The following error occurred while attempting to close a session from Macintosh client %1: |
32816 | The following error occurred while attempting to close the file "%1" opened by Windows client: |
32818 | The following error occurred while attempting to close the file "%1" opened by Macintosh client: |
32819 | The following error occurred while reading the list of shares for Windows clients: |
32821 | The following error occurred while reading the list of shares for Macintosh clients: |
32822 | The following error occurred while reading the list of sessions from Windows clients: |
32824 | The following error occurred while reading the list of sessions from Macintosh clients: |
32825 | The following error occurred while reading the list of files opened by Windows clients: |
32827 | The following error occurred while reading the list of files opened by Macintosh clients: |
32828 | The system encountered the following error while reading the list of services: |
32829 | &Stop Sharing Stop sharing the selected folder |
32830 | &Stop Sharing Stop sharing the selected folder |
32831 | You are not allowed to close a session that is being used to administer the remote machine. |
32832 | You are not allowed to close the file %1 that is being used to administer the remote machine. |
32833 | The system encountered the following error while attempting to delete share %1: |
32834 | The system encountered the following error while attempting to close the session: |
32835 | The system encountered the following error while attempting to close the open file: |
32836 | Name |
32837 | Are you sure you wish to stop sharing %1? |
32838 | There are %1!d! file(s) open by %2!d! user(s) connected to %3. If you stop sharing %3, the files will close, which may cause these users to lose data. Do you want to continue? |
32839 | There are %1!d! user(s) connected to %2. If you stop sharing %2, they will be disconnected. Do you want to continue? |
32840 | Are you sure you wish to close the session? |
32841 | Are you sure you wish to close the open file? |
32842 | Type |
32843 | Windows |
32845 | Macintosh |
32846 | Type |
32847 | Type |
32848 | Shares |
32849 | Sessions |
32850 | Open Files |
32852 | The system encountered the following error while querying the properties of share %1: |
32853 | The system encountered the following error while saving the properties of share %1: |
32855 | Read |
32856 | Change |
32857 | Full Control |
32858 | The system encountered the following error while attempting to open a connection to server %1: |
32859 | The system encountered the following error while reading directory information on path %1: |
32860 | The system encountered the following error while writing directory information on path %1: |
32861 | Primary Group |
32862 | Owner |
32863 | The system encountered the following error while displaying the list of accounts: |
32864 | The system encountered the following error while attempting to execute the New Share Wizard: |
32865 | The system is out of memory or resources and cannot execute the New Share Wizard. |
32868 | Are you sure you wish to close all sessions? |
32869 | Are you sure you wish to close all resources? |
32872 | Write+Read |
32873 | New Share |
32874 | Share a Folder |
32875 | Start |
32876 | Start Service |
32877 | Stop |
32878 | Stop Service |
32879 | Pause |
32880 | Pause Service |
32881 | Resume |
32882 | Resume service |
32883 | Restart |
32884 | Restart Service |
32886 | Services |
32887 | System Service Management could not determine whether the account %1 already has the Log On As A Service right. If not, this service may not run correctly under the %1 account. |
32888 | The account %1 could not be granted the Log On As A Service right. This service may not run correctly under the %1 account. |
32889 | The account %1 has been granted the Log On As A Service right. |
32890 | This has been shared for administrative purposes. The share permissions and file security cannot be set. |
32891 | This share was created for administrative purposes only. The share will reappear when the Server service is stopped and restarted or the computer is restarted. Are you sure you want to stop sharing %1? |
32892 | &Share... Share a folder |
32893 | New &Share... Share a folder |
32894 | Close &Session Close this session |
32895 | Close &Session Close this session |
32896 | Close &Open File Close this open file |
32897 | Close &Open File Close this open file |
32898 | Disconnect &All Sessions Disconnect all sessions |
32899 | Disconnect &All Sessions Disconnect all sessions |
32900 | Disconnect &All Open Files Disconnect all open files |
32901 | Disconnect &All Open Files Disconnect all open files |
32908 | This has been shared for administrative purposes. The share permissions and file security cannot be set. |
32909 | &Connect to another computer ... Manage a different computer |
32910 | &Connect to another computer ... Manage a different computer |
32911 | The system encountered the following error while querying the publish information of share %1: |
32912 | The system encountered the following error while saving the publish information of share %1: |
32913 | The share name exceeds 64 characters. The share cannot be published in Active Directory. |
32914 | The IPC$ share is required for the server service to operate, and cannot be deleted. |
32915 | This share is required for the machine to act properly as a domain controller. Removing it will cause a loss of functionality on all clients that this domain controller serves. Are you sure you wish to stop sharing %1? |
32920 | Are you sure you wish to stop sharing all the selected shares? |
32921 | Are you sure you wish to close all the selected sessions? |
32922 | Are you sure you wish to close all the selected open files? |
57344 | Shared Folders |
57345 | Changes cannot be saved. |
57346 | Share Permissions |
57347 | Guest |
57400 | The new logon name will not take effect until you stop and restart the service. |
57401 | Executable Files (*.exe;*.com;*.cmd;*.bat) |
57500 | <A href = javascript:try{external.ExecuteSelectionMenuItem('Start')}catch(err){UpdateState()}>Start</A> the service<BR> |
57501 | <A href = javascript:try{external.ExecuteSelectionMenuItem('Stop')}catch(err){UpdateState()}>Stop</A> the service<BR> |
57502 | <A href = javascript:try{external.ExecuteSelectionMenuItem('Pause')}catch(err){UpdateState()}>Pause</A> the service<BR> |
57503 | <A href = javascript:try{external.ExecuteSelectionMenuItem('Resume')}catch(err){UpdateState()}>Resume</A> the service<BR> |
57504 | <A href = javascript:try{external.ExecuteSelectionMenuItem('Restart')}catch(err){UpdateState()}>Restart</A> the service<BR> |
COM Classes/Interfaces
There is no type library in this file with COM classes/interfaces information
Exported Functions List
The following functions are exported by this dll:CacheSettingsDlg | CacheSettingsDlg2 | DllCanUnloadNow | DllGetClassObject |
DllRegisterServer | DllUnregisterServer |
Imported Functions List
The following functions are imported by this dll:- MFC42u.dll:
DllRegisterServer DllRegisterServer DllRegisterServer DllRegisterServer DllRegisterServer - msvcrt.dll:
_CxxThrowException _XcptFilter __CxxFrameHandler __RTDynamicCast __dllonexit _amsg_exit _callnewh _except_handler4_common _initterm _lock _onexit _purecall _unlock _vsnwprintf _wcsicmp _wcsnicmp _wtoi64 calloc free iswspace malloc memcmp memcpy memcpy_s memmove memmove_s memset public: __thiscall exception::exception(char const * const &) public: __thiscall exception::exception(class exception const &) public: __thiscall exception::exception(void) public: virtual __thiscall exception::~exception(void) public: virtual __thiscall type_info::~type_info(void) public: virtual char const * __thiscall exception::what(void)const void __cdecl terminate(void) wcschr wcsncmp wcsstr - ATL.DLL:
AtlInternalQueryInterface AtlModuleGetClassObject AtlModuleInit AtlModuleRegisterServer AtlModuleTerm AtlModuleUnregisterServer - ntdll.dll:
RtlIpv4AddressToStringW RtlIpv6AddressToStringW - ADVAPI32.dll:
AddAccessAllowedAce AllocateAndInitializeSid CopySid EnumServicesStatusW FreeSid GetLengthSid GetSecurityDescriptorControl GetSecurityDescriptorLength GetSidSubAuthority GetSidSubAuthorityCount GetUserNameW InitializeAcl InitializeSecurityDescriptor IsWellKnownSid LsaClose LsaCreateAccount LsaFreeMemory LsaGetSystemAccessAccount LsaLookupNames LsaOpenAccount LsaOpenPolicy LsaSetSystemAccessAccount MakeSelfRelativeSD MapGenericMask RegCloseKey RegConnectRegistryW RegCreateKeyExW RegDeleteValueW RegOpenKeyExW RegQueryValueExW RegSetValueExW RevertToSelf SetSecurityDescriptorDacl SetSecurityDescriptorGroup SetSecurityDescriptorOwner - USER32.dll:
CallNextHookEx DialogBoxParamW DispatchMessageW EnableWindow EndDialog EnumThreadWindows FindWindowExW GetActiveWindow GetClientRect GetDesktopWindow GetDlgCtrlID GetDlgItem GetDlgItemTextW GetFocus GetParent GetSystemMetrics GetWindowLongW GetWindowRect GetWindowThreadProcessId IsDlgButtonChecked IsWindowVisible KillTimer LoadBitmapW LoadIconW LoadImageW LoadStringW MessageBoxW MsgWaitForMultipleObjects PeekMessageW PostMessageW RegisterClipboardFormatW SendMessageW SetActiveWindow SetDlgItemTextW SetFocus SetTimer SetWindowLongW SetWindowTextW SetWindowsHookExW ShowWindow TranslateMessage UnhookWindowsHookEx WinHelpW - GDI32.dll:
DeleteObject - CFGMGR32.dll:
CM_Connect_MachineW CM_Disconnect_Machine CM_Get_HW_Prof_Flags_ExW CM_Set_HW_Prof_Flags_ExW - KERNEL32.dll:
ActivateActCtx CloseHandle CompareStringW CreateActCtxW CreateEventW CreateProcessW CreateThread DeactivateActCtx DelayLoadFailureHook DuplicateHandle FormatMessageW FreeLibrary GetCommandLineW GetComputerNameExW GetComputerNameW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetExitCodeProcess GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetProcAddress GetSystemTimeAsFileTime GetSystemWindowsDirectoryW GetTickCount GlobalAlloc GlobalFree GlobalLock GlobalUnlock LoadLibraryA LoadLibraryExW LoadLibraryW LocalAlloc LocalFree MultiByteToWideChar OutputDebugStringA QueryPerformanceCounter ReleaseActCtx ResumeThread SetEvent SetLastError SetUnhandledExceptionFilter Sleep TerminateProcess UnhandledExceptionFilter WaitForSingleObject WideCharToMultiByte lstrcmpW lstrcmpiW lstrlenW ntdll!LdrResolveDelayLoadedAPI ntdll!RtlDeleteCriticalSection ntdll!RtlEnterCriticalSection ntdll!RtlInitializeCriticalSection ntdll!RtlLeaveCriticalSection