DllMain
EditAuditInfo
EditOwnerInfo
EditPermissionInfo
FMExtensionProcW
SedDiscretionaryAclEditor
SedSystemAclEditor
SedTakeOwnership
Static task
static1
Behavioral task
behavioral1
Sample
4021a582b722213f17d2952d9cb3f60e.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4021a582b722213f17d2952d9cb3f60e.dll
Resource
win10v2004-20231222-en
Target
4021a582b722213f17d2952d9cb3f60e
Size
127KB
MD5
4021a582b722213f17d2952d9cb3f60e
SHA1
7614c31c6aecab280e8b58f96b7c5d00d714ff92
SHA256
e1270a2d99328076084583de22d4f8e55dd45c76842560ade5c4775f94c481db
SHA512
ed27fd49e0dda264b2ed0219bbcca440633eb814fa5612c9431247c78811bd768b688986ccb681ef209af8d8f266b87055951b329f533e1ae085948e14e021e6
SSDEEP
3072:FuVsLs7EEjLpqHv+9GT7RQ9sSgC5GB/dg:FuKLsrpjVGw
Checks for missing Authenticode signature.
resource |
---|
4021a582b722213f17d2952d9cb3f60e |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
wcslen
??3@YAXPAX@Z
??2@YAPAXI@Z
free
_purecall
_adjust_fdiv
malloc
_initterm
NtClose
NtOpenFile
RtlDosPathNameToNtPathName_U
RtlFreeUnicodeString
?CopyFrom@NLS_STR@@QAEJABV1@@Z
?GetSelItem@@YGJPAUHWND__@@IPAVNLS_STR@@PAH@Z
??0NLS_STR@@QAE@I@Z
?QuerySelCount@FMX@@QBEIXZ
??0FMX@@QAE@PAUHWND__@@@Z
?Refresh@FMX@@QAEXXZ
?QueryFocus@FMX@@QBEIXZ
?DelSubStr@NLS_STR@@QAEXAAVISTR@@@Z
??YISTR@@QAEXH@Z
??0ISTR@@QAE@ABVNLS_STR@@@Z
??0NLS_STR@@QAE@ABV0@@Z
??2ALLOC_BASE@@SGPAXI@Z
??0DEC_STR@@QAE@KI@Z
?IsHeterogeneousSelection@FMX@@QAEHPAH@Z
?Add@SLIST@@QAEJPAX@Z
??3ALLOC_BASE@@SGXPAX@Z
?Resize@BUFFER@@QAEJI@Z
?QueryPtr@BUFFER@@QBEPAEXZ
?QuerySize@BUFFER@@QBEIXZ
?MapNTStatus@ERRMAP@@SGJJPAHJ@Z
??0W32_FS_ENUM@@QAE@PBG0W4FILE_TYPE@@HI@Z
?QueryName@FS_ENUM@@QBEJPAVNLS_STR@@@Z
?Next@FS_ENUM@@QAEHXZ
??1BUFFER@@QAE@XZ
??0BUFFER@@QAE@I@Z
??1STRLIST@@QAE@XZ
??0STRLIST@@QAE@H@Z
??0NLS_STR@@IAE@PAGIH@Z
??1BITFIELD@@QAE@XZ
?DelSubStr@NLS_STR@@QAEXAAVISTR@@ABV2@@Z
?QueryChar@NLS_STR@@QBEGABVISTR@@@Z
??EISTR@@QAEAAV0@XZ
??0ISTR@@QAE@ABV0@@Z
NETUI_IsDBCS
??0NLS_STR@@QAE@PBG@Z
??BBITFIELD@@QAEKXZ
?strchr@NLS_STR@@QBEHPAVISTR@@G@Z
??4BITFIELD@@QAEAAV0@K@Z
??0BITFIELD@@QAE@K@Z
??0NLS_STR@@QAE@XZ
??4NLS_STR@@QAEAAV0@ABV0@@Z
?strrchr@NLS_STR@@QBEHPAVISTR@@G@Z
??BBITFIELD@@QAEGXZ
?MapCopyFrom@NLS_STR@@QAEJPBGI@Z
?InsertStr@NLS_STR@@QAEHABV1@AAVISTR@@@Z
?InsertParams@NLS_STR@@QAEJPAPBV1@@Z
?Next@ITER_SL@@QAEPAXXZ
?QueryNumElem@SLIST@@QAEIXZ
??1ITER_STRLIST@@QAE@XZ
??0ITER_STRLIST@@QAE@AAVSTRLIST@@@Z
??8BITFIELD@@QAEHAAV0@@Z
??0BITFIELD@@QAE@ABV0@@Z
??4BITFIELD@@QAEAAV0@ABV0@@Z
?Resize@BITFIELD@@QAEJI@Z
??_4BITFIELD@@QAEXG@Z
??0ITER_SL@@QAE@PAVSLIST@@@Z
?QueryProp@ITER_SL@@QAEPAXXZ
??0SLIST@@QAE@XZ
?Remove@SLIST@@QAEPAXAAVITER_SL@@@Z
?SetIters@SLIST@@IAEXPAVSL_NODE@@@Z
??1ITER_SL@@QAE@XZ
?Reset@ITER_SL@@QAEXXZ
NETUI_stricmp
??1SLIST@@QAE@XZ
?AppendChar@NLS_STR@@QAEJG@Z
?strlen@NLS_STR@@QBEIXZ
?strstr@NLS_STR@@QBEHPAVISTR@@ABV1@@Z
??YNLS_STR@@QAEAAV0@ABV0@@Z
NETUI_strcmp
?QueryNumChar@NLS_STR@@QBEIXZ
??_4BITFIELD@@QAEXABV0@@Z
?Append@NLS_STR@@QAEJABV1@@Z
??9NLS_STR@@QBEHABV0@@Z
??8NLS_STR@@QBEHABV0@@Z
??_5BITFIELD@@QAEXABV0@@Z
?SetAllBits@BITFIELD@@QAEXW4BITVALUES@@@Z
??2ALLOC_BASE@@SGPAXIPAX@Z
?CopyFrom@NLS_STR@@QAEJPBGI@Z
?InsertParams@NLS_STR@@QAAJIPBV1@ZZ
??0BITFIELD@@QAE@G@Z
??4NLS_STR@@QAEAAV0@PBG@Z
??1NLS_STR@@QAE@XZ
?CreateNew@NEW_LM_OBJ@@QAEJXZ
?CompareACL@NET_ACCESS_1@@QAEHPAV1@@Z
??0NET_ACCESS_1@@QAE@PBG0@Z
?Write@NEW_LM_OBJ@@QAEJXZ
?QueryServer@LOCATION@@QBEPBGXZ
??1LOCATION@@QAE@XZ
?CheckIfNT@LOCATION@@QAEJPAH@Z
??0LOCATION@@QAE@PBGH@Z
??1OS_SECURITY_DESCRIPTOR@@QAE@XZ
??1OS_SID@@QAE@XZ
??1NET_ACCESS_1@@QAE@XZ
?SetOwner@OS_SECURITY_DESCRIPTOR@@QAEJABVOS_SID@@H@Z
?QuerySystemSid@NT_ACCOUNTS_UTILITY@@SGJW4UI_SystemSid@@PAVOS_SID@@PBG@Z
??0OS_SID@@QAE@PAXHPAVOS_SECURITY_DESCRIPTOR@@@Z
??0OS_SECURITY_DESCRIPTOR@@QAE@PAXH@Z
??1OS_ACL@@QAE@XZ
??1OS_ACE@@QAE@XZ
?SetDACL@OS_SECURITY_DESCRIPTOR@@QAEJHPBVOS_ACL@@H@Z
?AddACE@OS_ACL@@QAEJKABVOS_ACE@@@Z
?SetSID@OS_ACE@@QAEJABVOS_SID@@@Z
?SetAccessMask@OS_ACE@@QAEXK@Z
??0OS_ACE@@QAE@PAX@Z
??0OS_ACL@@QAE@PAU_ACL@@HPAVOS_SECURITY_DESCRIPTOR@@@Z
?Compare@OS_SECURITY_DESCRIPTOR@@QAEJPAV1@PAH111PAU_GENERIC_MAPPING@@2HH@Z
?SetGroup@OS_SECURITY_DESCRIPTOR@@QAEJHPBVOS_SID@@H@Z
?SetOwner@OS_SECURITY_DESCRIPTOR@@QAEJHPBVOS_SID@@H@Z
?SetSACL@OS_SECURITY_DESCRIPTOR@@QAEJHPBVOS_ACL@@H@Z
?SetName@NET_ACCESS@@QAEJPBG@Z
?QueryFailingName@NET_ACCESS_1@@QBEJPAVNLS_STR@@PAW4PERMNAME_TYPE@@@Z
?Delete@NET_ACCESS@@QAEJXZ
?WriteNew@NEW_LM_OBJ@@QAEJXZ
?CopyAccessPerms@NET_ACCESS_1@@QAEJABV1@@Z
?SetAuditFlags@NET_ACCESS_1@@QAEJF@Z
?QueryServerName@NET_ACCESS@@QBEPBGXZ
?QueryACECount@NET_ACCESS_1@@QBEIXZ
?SetPerm@NET_ACCESS_1@@QAEJPBGW4PERMNAME_TYPE@@I@Z
?ClearPerms@NET_ACCESS_1@@QAEJXZ
??1DOMAIN_WITH_DC_CACHE@@QAE@XZ
?QueryAnyDC@DOMAIN@@QBEPBGXZ
?GetInfo@DOMAIN_WITH_DC_CACHE@@UAEJXZ
??0DOMAIN_WITH_DC_CACHE@@QAE@PBGH@Z
??1WKSTA_10@@QAE@XZ
I_MNetComputerNameCompare
?QueryLogonDomain@WKSTA_10@@QBEPBGXZ
??0WKSTA_10@@QAE@PBG@Z
?QueryName@OS_SID@@QBEJPAVNLS_STR@@PBGPAX@Z
?QueryOwner@OS_SECURITY_DESCRIPTOR@@QBEJPAHPAPAVOS_SID@@0@Z
??1API_SESSION@@QAE@XZ
??1LSA_POLICY@@QAE@XZ
??1LSA_TRANSLATED_SID_MEM@@QAE@XZ
??1LSA_REF_DOMAIN_MEM@@QAE@XZ
??1LSA_TRANSLATED_NAME_MEM@@QAE@XZ
??1LSA_ACCT_DOM_INFO_MEM@@QAE@XZ
?QueryFailingNameIndex@LSA_TRANSLATED_SID_MEM@@QAEHPAK@Z
?TranslateNamesToSids@LSA_POLICY@@QAEJPBQBGKPAVLSA_TRANSLATED_SID_MEM@@PAVLSA_REF_DOMAIN_MEM@@@Z
?BuildQualifiedAccountName@NT_ACCOUNTS_UTILITY@@SGJPAVNLS_STR@@ABV2@1PBV2@2W4_SID_NAME_USE@@@Z
?Copy@OS_SID@@QAEJABV1@@Z
??0OS_SID@@QAE@PAXKPAVOS_SECURITY_DESCRIPTOR@@@Z
?GetAccountDomain@LSA_POLICY@@QBEJPAVLSA_ACCT_DOM_INFO_MEM@@@Z
?QueryLastSubAuthority@OS_SID@@QBEJPAPAK@Z
??0LSA_ACCT_DOM_INFO_MEM@@QAE@H@Z
?TranslateSidsToNames@LSA_POLICY@@QAEJPBQAXKPAVLSA_TRANSLATED_NAME_MEM@@PAVLSA_REF_DOMAIN_MEM@@@Z
??0LSA_TRANSLATED_NAME_MEM@@QAE@H@Z
??0LSA_REF_DOMAIN_MEM@@QAE@H@Z
??0LSA_TRANSLATED_SID_MEM@@QAE@H@Z
??0LSA_POLICY@@QAE@PBGK@Z
??0API_SESSION@@QAE@PBGH@Z
?DeleteACE@OS_ACL@@QAEJK@Z
??8OS_SID@@QBEHABV0@@Z
?QuerySID@OS_ACE@@QBEJPAPAVOS_SID@@@Z
?QueryACE@OS_ACL@@QBEJKPAVOS_ACE@@@Z
?QueryACECount@OS_ACL@@QBEJPAK@Z
?GetQualifiedAccountNames@NT_ACCOUNTS_UTILITY@@SGJAAVLSA_POLICY@@QAXPBQAXKHPAVSTRLIST@@PAKPAW4_SID_NAME_USE@@PAJPBG3333@Z
?TrimLastSubAuthority@OS_SID@@QAEJPAK@Z
?Next@OS_SACL_SUBJECT_ITER@@UAEHPAJ@Z
??1OS_SACL_SUBJECT_ITER@@QAE@XZ
??0OS_SACL_SUBJECT_ITER@@QAE@PAVOS_ACL@@PAU_GENERIC_MAPPING@@1HH@Z
?QuerySACL@OS_SECURITY_DESCRIPTOR@@QBEJPAHPAPAVOS_ACL@@0@Z
?Next@OS_DACL_SUBJECT_ITER@@UAEHPAJ@Z
??1OS_DACL_SUBJECT_ITER@@QAE@XZ
??0OS_DACL_SUBJECT_ITER@@QAE@PAVOS_ACL@@PAU_GENERIC_MAPPING@@1HH@Z
?QueryDACL@OS_SECURITY_DESCRIPTOR@@QBEJPAHPAPAVOS_ACL@@0@Z
?QueryAccessMask@OS_ACE@@QBEKXZ
?QueryGroup@OS_SECURITY_DESCRIPTOR@@QBEJPAHPAPAVOS_SID@@0@Z
?Copy@OS_SECURITY_DESCRIPTOR@@QAEJABV1@@Z
?QuerySubAuthorityCount@OS_SID@@QBEJPAPAE@Z
??1LSA_AUDIT_EVENT_INFO_MEM@@QAE@XZ
?GetAuditEventInfo@LSA_POLICY@@QAEJPAVLSA_AUDIT_EVENT_INFO_MEM@@@Z
??0LSA_AUDIT_EVENT_INFO_MEM@@QAE@H@Z
?Next@USER0_ENUM_ITER@@QAEPBVUSER0_ENUM_OBJ@@PAJH@Z
??1LOC_LM_RESUME_ENUM@@QAE@XZ
??1LOC_LM_ENUM@@QAE@XZ
??1LM_RESUME_ENUM_ITER@@IAE@XZ
??1LM_ENUM_ITER@@IAE@XZ
??RGROUP0_ENUM_ITER@@QAEPBVGROUP0_ENUM_OBJ@@XZ
??0GROUP0_ENUM_ITER@@QAE@AAVGROUP0_ENUM@@@Z
?GetInfo@LM_ENUM@@QAEJXZ
??0GROUP0_ENUM@@QAE@ABVLOCATION@@PBG@Z
??0USER0_ENUM_ITER@@QAE@AAVUSER0_ENUM@@@Z
?GetInfo@LM_RESUME_ENUM@@QAEJH@Z
??0USER0_ENUM@@QAE@ABVLOCATION@@PBGH@Z
??0NET_NAME@@QAE@PBGW4NETNAME_TYPE@@@Z
?QueryComputerName@NET_NAME@@QAEJPAVNLS_STR@@@Z
??1NET_NAME@@QAE@XZ
?SetGroup@OS_SECURITY_DESCRIPTOR@@QAEJABVOS_SID@@H@Z
?GetInfo@NEW_LM_OBJ@@QAEJXZ
?QueryHelpContext@DIALOG_WINDOW@@MAEKXZ
?QueryHelpFile@DIALOG_WINDOW@@MAEPBGK@Z
?OnValidationError@DIALOG_WINDOW@@MAEXIJ@Z
?OnControlError@DIALOG_WINDOW@@MAEXIJ@Z
?OnSysColorChange@DIALOG_WINDOW@@MAEXXZ
?OnCtlColor@DIALOG_WINDOW@@MAEPAUHBRUSH__@@PAUHDC__@@PAUHWND__@@PAI@Z
?OnDlgDeactivation@DIALOG_WINDOW@@MAEHABVACTIVATION_EVENT@@@Z
?OnDlgActivation@DIALOG_WINDOW@@MAEHABVACTIVATION_EVENT@@@Z
?OnScrollBarThumb@DIALOG_WINDOW@@MAEHABVSCROLL_THUMB_EVENT@@@Z
?OnScrollBar@DIALOG_WINDOW@@MAEHABVSCROLL_EVENT@@@Z
?OnTimer@CANCEL_TASK_DIALOG@@MAEHABVTIMER_EVENT@@@Z
?OnCancel@DIALOG_WINDOW@@MAEHXZ
?OnOK@DIALOG_WINDOW@@MAEHXZ
?OnCommand@DIALOG_WINDOW@@MAEHABVCONTROL_EVENT@@@Z
?QueryRobustHwnd@DIALOG_WINDOW@@UBEPAUHWND__@@XZ
?OnUserMessage@OWNER_WINDOW@@MAEHABVEVENT@@@Z
??0CANCEL_TASK_DIALOG@@QAE@IPAUHWND__@@PBGKJW4ELLIPSIS_STYLE@@@Z
??1CANCEL_TASK_DIALOG@@QAE@XZ
?Process@DIALOG_WINDOW@@QAEJPAH@Z
?MsgPopup@@YGHABVOWNINGWND@@JW4MSG_SEVERITY@@@Z
??0RESOURCE_STR@@QAE@J@Z
??1AUTO_CURSOR@@QAE@XZ
??1MASK_MAP@@QAE@XZ
?Add@MASK_MAP@@QAEJQAUUS_IDS_PAIRS@@G@Z
?Load@NLS_STR@@QAEJJ@Z
??0MASK_MAP@@QAE@XZ
?MsgPopup@@YGHABVOWNINGWND@@JW4MSG_SEVERITY@@IPBG2I@Z
??0AUTO_CURSOR@@QAE@PBG@Z
?SetText@SLT_ELLIPSIS@@QAEJPBG@Z
?MsgPopup@@YGHABVOWNINGWND@@JW4MSG_SEVERITY@@II@Z
?MsgPopup@@YGHABVOWNINGWND@@JW4MSG_SEVERITY@@IPBGI@Z
?Init@BASE_ELLIPSIS@@SGJXZ
?Init@BLT@@SGJPAUHINSTANCE__@@IIII@Z
?Term@BLT@@SGXPAUHINSTANCE__@@@Z
?Term@BASE_ELLIPSIS@@SGXXZ
??1POPUP_MENU@@QAE@XZ
?EnableItem@MENU_BASE@@QBEIIHI@Z
??0POPUP_MENU@@QAE@PAUHMENU__@@@Z
?MayRun@DIALOG_WINDOW@@MAEHXZ
?OnTimer@DIALOG_WINDOW@@MAEHABVTIMER_EVENT@@@Z
?QueryHwnd@WINDOW@@QBEPAUHWND__@@XZ
?Process@DIALOG_WINDOW@@QAEJPAI@Z
?Add@MASK_MAP@@QAEJABVBITFIELD@@ABVNLS_STR@@H@Z
?IsPresent@MASK_MAP@@QAEHPAVBITFIELD@@@Z
??1WINDOW@@QAE@XZ
??1DIALOG_WINDOW@@QAE@XZ
?ClaimFocus@CONTROL_WINDOW@@QAEXXZ
?SetText@WINDOW@@QAEXPBG@Z
?SetText@WINDOW@@QAEXABVNLS_STR@@@Z
?Enable@WINDOW@@QAEXH@Z
?Show@WINDOW@@QAEHH@Z
??0PUSH_BUTTON@@QAE@PAVOWNER_WINDOW@@I@Z
??0SLE@@QAE@PAVOWNER_WINDOW@@II@Z
??0SLT@@QAE@PAVOWNER_WINDOW@@I@Z
??0DIALOG_WINDOW@@QAE@ABVIDRESOURCE@@ABVPWND2HWND@@H@Z
?Dismiss@DIALOG_WINDOW@@IAEXI@Z
?MsgPopup@@YGHABVOWNINGWND@@JW4MSG_SEVERITY@@KIQAPAVNLS_STR@@I@Z
?StringToBits@MASK_MAP@@QAEJABVNLS_STR@@PAVBITFIELD@@HPAI@Z
?QueryEventEffects@CONTROL_VALUE@@UAEIABVCONTROL_EVENT@@@Z
?SetControlValueFocus@CONTROL_VALUE@@UAEXXZ
?SetTabStop@CONTROL_VALUE@@MAEXH@Z
?RestoreValue@CONTROL_VALUE@@MAEXH@Z
?SaveValue@CONTROL_VALUE@@MAEXH@Z
?AfterGroupActions@CONTROL_GROUP@@MAEXXZ
?OnGroupAction@CONTROL_GROUP@@MAEJPAV1@@Z
?OnUserAction@CONTROL_GROUP@@MAEJPAVCONTROL_WINDOW@@ABVCONTROL_EVENT@@@Z
?SetState@STATE_BUTTON_CONTROL@@IAEXI@Z
?QueryState@STATE_BUTTON_CONTROL@@IBEIXZ
?QueryLeftMargin@DTE@@UBEIXZ
?AppendDataTo@STR_DTE@@UBEJPAVNLS_STR@@@Z
?Paint@STR_DTE@@UBEXPAUHDC__@@PBUtagRECT@@@Z
?QueryItem@BLT_LISTBOX@@QBEPAVLBI@@H@Z
?QueryCurrentItem@LIST_CONTROL@@QBEHXZ
?Compare_HAWforHawaii@LBI@@UBEHABVNLS_STR@@@Z
?CalcHeight@LBI@@UAEII@Z
?IsDestroyable@LBI@@MAEHXZ
?Paint@DISPLAY_TABLE@@QBEXPAVLISTBOX@@PAUHDC__@@PBUtagRECT@@PAUGUILTT_INFO@@@Z
??ADISPLAY_TABLE@@QAEAAPAVDTE@@I@Z
??0DISPLAY_TABLE@@QAE@IPBI@Z
??0DM_DTE@@QAE@PAVDISPLAY_MAP@@@Z
?ReleaseLBI@BLT_LISTBOX@@EAEXPAVLBI@@@Z
?RequestLBI@BLT_LISTBOX@@EAEPAVLBI@@PBUtagDRAWITEMSTRUCT@@@Z
?OnCtlColor@CONTROL_WINDOW@@UAEPAUHBRUSH__@@PAUHDC__@@PAUHWND__@@PAI@Z
?IndicateError@CONTROL_WINDOW@@UAEXJ@Z
?Validate@CONTROL_WINDOW@@UAEJXZ
?OnUserAction@CONTROL_WINDOW@@MAEJABVCONTROL_EVENT@@@Z
?CD_Guiltt@BLT_LISTBOX@@MAEJHPAVNLS_STR@@@Z
?CD_VKey@LISTBOX@@MAEHGG@Z
?CD_Char@BLT_LISTBOX@@MAEHGG@Z
?CD_Measure@BLT_LISTBOX@@MAEHPAUtagMEASUREITEMSTRUCT@@@Z
?CD_Draw@LISTBOX@@MAEHPAUtagDRAWITEMSTRUCT@@@Z
?QueryEventEffects@LIST_CONTROL@@MAEIABVCONTROL_EVENT@@@Z
?SetControlValueFocus@CONTROL_WINDOW@@UAEXXZ
?SetTabStop@CONTROL_WINDOW@@MAEXH@Z
?RestoreValue@LIST_CONTROL@@MAEXH@Z
?SaveValue@LIST_CONTROL@@MAEXH@Z
?Invalidate@WINDOW@@QAEXH@Z
?SelectItem@LIST_CONTROL@@QAEXHH@Z
?QueryCount@LIST_CONTROL@@QBEHXZ
?AddItem@BLT_LISTBOX@@QAEHPAVLBI@@@Z
?DeleteAllItems@LIST_CONTROL@@QAEXXZ
?SetRedraw@WINDOW@@QAEXH@Z
?DeleteItem@LIST_CONTROL@@QAEHH@Z
?QueryUserSelectedBits@SET_OF_AUDIT_CATEGORIES@@QAEJPAVBITFIELD@@0@Z
?Enable@SET_OF_AUDIT_CATEGORIES@@QAEXHH@Z
?RemoveSelection@LIST_CONTROL@@QAEXXZ
??0SET_OF_AUDIT_CATEGORIES@@QAE@PAVOWNER_WINDOW@@IIIPAVMASK_MAP@@PAVBITFIELD@@2H@Z
??1SET_OF_AUDIT_CATEGORIES@@QAE@XZ
??1NT_USER_BROWSER_DIALOG@@QAE@XZ
?ApplyPermissionsToCheckBoxes@SET_OF_AUDIT_CATEGORIES@@QAEJPAVBITFIELD@@0@Z
??1BROWSER_SUBJECT_ITER@@QAE@XZ
?Next@BROWSER_SUBJECT_ITER@@QAEJPAPAVBROWSER_SUBJECT@@@Z
?QueryQualifiedName@BROWSER_SUBJECT@@QBEJPAVNLS_STR@@PBV2@H@Z
??0BROWSER_SUBJECT_ITER@@QAE@PAVNT_USER_BROWSER_DIALOG@@@Z
??0NT_USER_BROWSER_DIALOG@@QAE@PBGPAUHWND__@@0KK0KKKPBVADMIN_AUTHORITY@@@Z
?MakeDefault@PUSH_BUTTON@@QAEXXZ
?CD_Guiltt@CONTROL_WINDOW@@MAEJHPAVNLS_STR@@@Z
?CD_VKey@CONTROL_WINDOW@@MAEHGG@Z
?CD_Char@CONTROL_WINDOW@@MAEHGG@Z
?CD_Measure@CONTROL_WINDOW@@MAEHPAUtagMEASUREITEMSTRUCT@@@Z
?CD_Draw@CONTROL_WINDOW@@MAEHPAUtagDRAWITEMSTRUCT@@@Z
?QueryEventEffects@BUTTON_CONTROL@@MAEIABVCONTROL_EVENT@@@Z
?RestoreValue@STATE_BUTTON_CONTROL@@MAEXH@Z
?SaveValue@STATE_BUTTON_CONTROL@@MAEXH@Z
??0STATE_BUTTON_CONTROL@@IAE@PAVOWNER_WINDOW@@I@Z
??1FONT@@QAE@XZ
??0SLT_FONT@@QAE@PAVOWNER_WINDOW@@IW4FontType@@@Z
?QuerySelection@RADIO_GROUP@@QBEIXZ
?QueryItemText@STRING_LIST_CONTROL@@QBEJPAVNLS_STR@@H@Z
??1LIST_CONTROL@@IAE@XZ
?InvalidateItem@LISTBOX@@QAEXHH@Z
?QueryOwnerHwnd@WINDOW@@QBEPAUHWND__@@XZ
?InsertItem@STRING_LIST_CONTROL@@QAEHHPBG@Z
?EnumStrings@MASK_MAP@@QAEJPAVNLS_STR@@PAH1H@Z
?SetSize@WINDOW@@QAEXHHH@Z
?QuerySize@WINDOW@@QBE?AVXYDIMENSION@@XZ
?SetPos@WINDOW@@QAEXVXYPOINT@@HPAV1@@Z
??1DISPLAY_CONTEXT@@QAE@XZ
?SetSize@WINDOW@@QAEXVXYDIMENSION@@H@Z
?QueryTextExtent@DEVICE_CONTEXT@@QBE?AVXYDIMENSION@@ABVNLS_STR@@@Z
??0DISPLAY_CONTEXT@@QAE@PAUHWND__@@@Z
?QueryPos@WINDOW@@QBE?AVXYPOINT@@XZ
??0COMBOBOX@@QAE@PAVOWNER_WINDOW@@II@Z
?AddItem@STRING_LIST_CONTROL@@QAEHPBG@Z
?FindItemExact@STRING_LIST_CONTROL@@QBEHPBG@Z
?QueryDmDte@SUBJECT_BITMAP_BLOCK@@QAEPAVDMID_DTE@@HHH@Z
??0LBI@@QAE@XZ
??1LBI@@UAE@XZ
?BitsToString@MASK_MAP@@QAEJABVBITFIELD@@PAVNLS_STR@@HPAI@Z
?QueryBits@MASK_MAP@@QAEJIPAVBITFIELD@@PAVNLS_STR@@PAH@Z
??1SUBJECT_BITMAP_BLOCK@@QAE@XZ
?QueryWidth@DISPLAY_MAP@@QBEIXZ
??0SUBJECT_BITMAP_BLOCK@@QAE@XZ
??0BLT_LISTBOX@@QAE@PAVOWNER_WINDOW@@IHW4FontType@@H@Z
?QuerySelItems@LIST_CONTROL@@QBEJPAHH@Z
?QuerySelCount@LIST_CONTROL@@QBEHXZ
?QueryHelpContext@NT_USER_BROWSER_DIALOG@@UAEKXZ
?QueryHelpFile@NT_USER_BROWSER_DIALOG@@UAEPBGK@Z
?OnDlgDeactivation@NT_USER_BROWSER_DIALOG@@MAEHABVACTIVATION_EVENT@@@Z
?OnOK@NT_USER_BROWSER_DIALOG@@MAEHXZ
?OnCommand@NT_USER_BROWSER_DIALOG@@MAEHABVCONTROL_EVENT@@@Z
?OnUserMessage@NT_USER_BROWSER_DIALOG@@MAEHABVEVENT@@@Z
?SetSelection@RADIO_GROUP@@QAEXI@Z
??1ARRAY_CONTROLVAL_CID_PAIR@@QAE@XZ
??1RADIO_GROUP@@QAE@XZ
??0CONTROL_WINDOW@@QAE@PAVOWNER_WINDOW@@I@Z
?Enable@MAGIC_GROUP@@QAEXH@Z
?AddAssociation@MAGIC_GROUP@@QAEJIPAVCONTROL_VALUE@@@Z
??0MAGIC_GROUP@@QAE@PAVOWNER_WINDOW@@IHIPAVCONTROL_GROUP@@@Z
?IsValid@DIALOG_WINDOW@@MAEHXZ
?MayRun@CANCEL_TASK_DIALOG@@MAEHXZ
?QueryObjectName@CANCEL_TASK_DIALOG@@MAEJPAVNLS_STR@@@Z
?FilterMessage@DIALOG_WINDOW@@MAEHPAUtagMSG@@@Z
?IsPumpFinished@DIALOG_WINDOW@@MAEHXZ
WNetFMXGetPermCaps
WNetFMXGetPermHelp
WNetFMXEditPerm
NetpReleasePrivilege
NetpGetPrivilege
SendMessageW
CharNextW
WinHelpW
UpdateWindow
InvalidateRect
SelectObject
lstrcpynW
GetVolumeInformationW
GetLastError
GetDriveTypeW
DisableThreadLibraryCalls
GetComputerNameW
EqualSid
LsaGetRemoteUserName
SetFileSecurityW
GetFileSecurityW
DllMain
EditAuditInfo
EditOwnerInfo
EditPermissionInfo
FMExtensionProcW
SedDiscretionaryAclEditor
SedSystemAclEditor
SedTakeOwnership
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ