DllMain
EditAuditInfo
EditOwnerInfo
EditPermissionInfo
FMExtensionProcW
SedDiscretionaryAclEditor
SedSystemAclEditor
SedTakeOwnership
Static task
static1
Behavioral task
behavioral1
Sample
0751a28b3f2adbc0731f104452066c64_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0751a28b3f2adbc0731f104452066c64_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0751a28b3f2adbc0731f104452066c64_JaffaCakes118
Size
127KB
MD5
0751a28b3f2adbc0731f104452066c64
SHA1
22e9720110b38f1ea3725d3fc053d8f9e3e097fd
SHA256
c9d1c668bd69d6f96442366d83c8954e778ee203a21975757f2e022b04fdde7b
SHA512
397841922432df27a1f0b82b022762e4d54059930278cd38bba7a6f44011e45eadda57d43b0e59e8f3aff3e237a3d524551fa8b4c0938f65a6fb829397e12f67
SSDEEP
3072:FuVsLs7EEjLpqHv+9GT7RQ9sSgC5GB/dV:FuKLsrpjVGF
Checks for missing Authenticode signature.
resource |
---|
0751a28b3f2adbc0731f104452066c64_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
wcslen
??3@YAXPAX@Z
??2@YAPAXI@Z
free
_purecall
_adjust_fdiv
malloc
_initterm
NtClose
NtOpenFile
RtlDosPathNameToNtPathName_U
RtlFreeUnicodeString
?CopyFrom@NLS_STR@@QAEJABV1@@Z
?GetSelItem@@YGJPAUHWND__@@IPAVNLS_STR@@PAH@Z
??0NLS_STR@@QAE@I@Z
?QuerySelCount@FMX@@QBEIXZ
??0FMX@@QAE@PAUHWND__@@@Z
?Refresh@FMX@@QAEXXZ
?QueryFocus@FMX@@QBEIXZ
?DelSubStr@NLS_STR@@QAEXAAVISTR@@@Z
??YISTR@@QAEXH@Z
??0ISTR@@QAE@ABVNLS_STR@@@Z
??0NLS_STR@@QAE@ABV0@@Z
??2ALLOC_BASE@@SGPAXI@Z
??0DEC_STR@@QAE@KI@Z
?IsHeterogeneousSelection@FMX@@QAEHPAH@Z
?Add@SLIST@@QAEJPAX@Z
??3ALLOC_BASE@@SGXPAX@Z
?Resize@BUFFER@@QAEJI@Z
?QueryPtr@BUFFER@@QBEPAEXZ
?QuerySize@BUFFER@@QBEIXZ
?MapNTStatus@ERRMAP@@SGJJPAHJ@Z
??0W32_FS_ENUM@@QAE@PBG0W4FILE_TYPE@@HI@Z
?QueryName@FS_ENUM@@QBEJPAVNLS_STR@@@Z
?Next@FS_ENUM@@QAEHXZ
??1BUFFER@@QAE@XZ
??0BUFFER@@QAE@I@Z
??1STRLIST@@QAE@XZ
??0STRLIST@@QAE@H@Z
??0NLS_STR@@IAE@PAGIH@Z
??1BITFIELD@@QAE@XZ
?DelSubStr@NLS_STR@@QAEXAAVISTR@@ABV2@@Z
?QueryChar@NLS_STR@@QBEGABVISTR@@@Z
??EISTR@@QAEAAV0@XZ
??0ISTR@@QAE@ABV0@@Z
NETUI_IsDBCS
??0NLS_STR@@QAE@PBG@Z
??BBITFIELD@@QAEKXZ
?strchr@NLS_STR@@QBEHPAVISTR@@G@Z
??4BITFIELD@@QAEAAV0@K@Z
??0BITFIELD@@QAE@K@Z
??0NLS_STR@@QAE@XZ
??4NLS_STR@@QAEAAV0@ABV0@@Z
?strrchr@NLS_STR@@QBEHPAVISTR@@G@Z
??BBITFIELD@@QAEGXZ
?MapCopyFrom@NLS_STR@@QAEJPBGI@Z
?InsertStr@NLS_STR@@QAEHABV1@AAVISTR@@@Z
?InsertParams@NLS_STR@@QAEJPAPBV1@@Z
?Next@ITER_SL@@QAEPAXXZ
?QueryNumElem@SLIST@@QAEIXZ
??1ITER_STRLIST@@QAE@XZ
??0ITER_STRLIST@@QAE@AAVSTRLIST@@@Z
??8BITFIELD@@QAEHAAV0@@Z
??0BITFIELD@@QAE@ABV0@@Z
??4BITFIELD@@QAEAAV0@ABV0@@Z
?Resize@BITFIELD@@QAEJI@Z
??_4BITFIELD@@QAEXG@Z
??0ITER_SL@@QAE@PAVSLIST@@@Z
?QueryProp@ITER_SL@@QAEPAXXZ
??0SLIST@@QAE@XZ
?Remove@SLIST@@QAEPAXAAVITER_SL@@@Z
?SetIters@SLIST@@IAEXPAVSL_NODE@@@Z
??1ITER_SL@@QAE@XZ
?Reset@ITER_SL@@QAEXXZ
NETUI_stricmp
??1SLIST@@QAE@XZ
?AppendChar@NLS_STR@@QAEJG@Z
?strlen@NLS_STR@@QBEIXZ
?strstr@NLS_STR@@QBEHPAVISTR@@ABV1@@Z
??YNLS_STR@@QAEAAV0@ABV0@@Z
NETUI_strcmp
?QueryNumChar@NLS_STR@@QBEIXZ
??_4BITFIELD@@QAEXABV0@@Z
?Append@NLS_STR@@QAEJABV1@@Z
??9NLS_STR@@QBEHABV0@@Z
??8NLS_STR@@QBEHABV0@@Z
??_5BITFIELD@@QAEXABV0@@Z
?SetAllBits@BITFIELD@@QAEXW4BITVALUES@@@Z
??2ALLOC_BASE@@SGPAXIPAX@Z
?CopyFrom@NLS_STR@@QAEJPBGI@Z
?InsertParams@NLS_STR@@QAAJIPBV1@ZZ
??0BITFIELD@@QAE@G@Z
??4NLS_STR@@QAEAAV0@PBG@Z
??1NLS_STR@@QAE@XZ
?CreateNew@NEW_LM_OBJ@@QAEJXZ
?CompareACL@NET_ACCESS_1@@QAEHPAV1@@Z
??0NET_ACCESS_1@@QAE@PBG0@Z
?Write@NEW_LM_OBJ@@QAEJXZ
?QueryServer@LOCATION@@QBEPBGXZ
??1LOCATION@@QAE@XZ
?CheckIfNT@LOCATION@@QAEJPAH@Z
??0LOCATION@@QAE@PBGH@Z
??1OS_SECURITY_DESCRIPTOR@@QAE@XZ
??1OS_SID@@QAE@XZ
??1NET_ACCESS_1@@QAE@XZ
?SetOwner@OS_SECURITY_DESCRIPTOR@@QAEJABVOS_SID@@H@Z
?QuerySystemSid@NT_ACCOUNTS_UTILITY@@SGJW4UI_SystemSid@@PAVOS_SID@@PBG@Z
??0OS_SID@@QAE@PAXHPAVOS_SECURITY_DESCRIPTOR@@@Z
??0OS_SECURITY_DESCRIPTOR@@QAE@PAXH@Z
??1OS_ACL@@QAE@XZ
??1OS_ACE@@QAE@XZ
?SetDACL@OS_SECURITY_DESCRIPTOR@@QAEJHPBVOS_ACL@@H@Z
?AddACE@OS_ACL@@QAEJKABVOS_ACE@@@Z
?SetSID@OS_ACE@@QAEJABVOS_SID@@@Z
?SetAccessMask@OS_ACE@@QAEXK@Z
??0OS_ACE@@QAE@PAX@Z
??0OS_ACL@@QAE@PAU_ACL@@HPAVOS_SECURITY_DESCRIPTOR@@@Z
?Compare@OS_SECURITY_DESCRIPTOR@@QAEJPAV1@PAH111PAU_GENERIC_MAPPING@@2HH@Z
?SetGroup@OS_SECURITY_DESCRIPTOR@@QAEJHPBVOS_SID@@H@Z
?SetOwner@OS_SECURITY_DESCRIPTOR@@QAEJHPBVOS_SID@@H@Z
?SetSACL@OS_SECURITY_DESCRIPTOR@@QAEJHPBVOS_ACL@@H@Z
?SetName@NET_ACCESS@@QAEJPBG@Z
?QueryFailingName@NET_ACCESS_1@@QBEJPAVNLS_STR@@PAW4PERMNAME_TYPE@@@Z
?Delete@NET_ACCESS@@QAEJXZ
?WriteNew@NEW_LM_OBJ@@QAEJXZ
?CopyAccessPerms@NET_ACCESS_1@@QAEJABV1@@Z
?SetAuditFlags@NET_ACCESS_1@@QAEJF@Z
?QueryServerName@NET_ACCESS@@QBEPBGXZ
?QueryACECount@NET_ACCESS_1@@QBEIXZ
?SetPerm@NET_ACCESS_1@@QAEJPBGW4PERMNAME_TYPE@@I@Z
?ClearPerms@NET_ACCESS_1@@QAEJXZ
??1DOMAIN_WITH_DC_CACHE@@QAE@XZ
?QueryAnyDC@DOMAIN@@QBEPBGXZ
?GetInfo@DOMAIN_WITH_DC_CACHE@@UAEJXZ
??0DOMAIN_WITH_DC_CACHE@@QAE@PBGH@Z
??1WKSTA_10@@QAE@XZ
I_MNetComputerNameCompare
?QueryLogonDomain@WKSTA_10@@QBEPBGXZ
??0WKSTA_10@@QAE@PBG@Z
?QueryName@OS_SID@@QBEJPAVNLS_STR@@PBGPAX@Z
?QueryOwner@OS_SECURITY_DESCRIPTOR@@QBEJPAHPAPAVOS_SID@@0@Z
??1API_SESSION@@QAE@XZ
??1LSA_POLICY@@QAE@XZ
??1LSA_TRANSLATED_SID_MEM@@QAE@XZ
??1LSA_REF_DOMAIN_MEM@@QAE@XZ
??1LSA_TRANSLATED_NAME_MEM@@QAE@XZ
??1LSA_ACCT_DOM_INFO_MEM@@QAE@XZ
?QueryFailingNameIndex@LSA_TRANSLATED_SID_MEM@@QAEHPAK@Z
?TranslateNamesToSids@LSA_POLICY@@QAEJPBQBGKPAVLSA_TRANSLATED_SID_MEM@@PAVLSA_REF_DOMAIN_MEM@@@Z
?BuildQualifiedAccountName@NT_ACCOUNTS_UTILITY@@SGJPAVNLS_STR@@ABV2@1PBV2@2W4_SID_NAME_USE@@@Z
?Copy@OS_SID@@QAEJABV1@@Z
??0OS_SID@@QAE@PAXKPAVOS_SECURITY_DESCRIPTOR@@@Z
?GetAccountDomain@LSA_POLICY@@QBEJPAVLSA_ACCT_DOM_INFO_MEM@@@Z
?QueryLastSubAuthority@OS_SID@@QBEJPAPAK@Z
??0LSA_ACCT_DOM_INFO_MEM@@QAE@H@Z
?TranslateSidsToNames@LSA_POLICY@@QAEJPBQAXKPAVLSA_TRANSLATED_NAME_MEM@@PAVLSA_REF_DOMAIN_MEM@@@Z
??0LSA_TRANSLATED_NAME_MEM@@QAE@H@Z
??0LSA_REF_DOMAIN_MEM@@QAE@H@Z
??0LSA_TRANSLATED_SID_MEM@@QAE@H@Z
??0LSA_POLICY@@QAE@PBGK@Z
??0API_SESSION@@QAE@PBGH@Z
?DeleteACE@OS_ACL@@QAEJK@Z
??8OS_SID@@QBEHABV0@@Z
?QuerySID@OS_ACE@@QBEJPAPAVOS_SID@@@Z
?QueryACE@OS_ACL@@QBEJKPAVOS_ACE@@@Z
?QueryACECount@OS_ACL@@QBEJPAK@Z
?GetQualifiedAccountNames@NT_ACCOUNTS_UTILITY@@SGJAAVLSA_POLICY@@QAXPBQAXKHPAVSTRLIST@@PAKPAW4_SID_NAME_USE@@PAJPBG3333@Z
?TrimLastSubAuthority@OS_SID@@QAEJPAK@Z
?Next@OS_SACL_SUBJECT_ITER@@UAEHPAJ@Z
??1OS_SACL_SUBJECT_ITER@@QAE@XZ
??0OS_SACL_SUBJECT_ITER@@QAE@PAVOS_ACL@@PAU_GENERIC_MAPPING@@1HH@Z
?QuerySACL@OS_SECURITY_DESCRIPTOR@@QBEJPAHPAPAVOS_ACL@@0@Z
?Next@OS_DACL_SUBJECT_ITER@@UAEHPAJ@Z
??1OS_DACL_SUBJECT_ITER@@QAE@XZ
??0OS_DACL_SUBJECT_ITER@@QAE@PAVOS_ACL@@PAU_GENERIC_MAPPING@@1HH@Z
?QueryDACL@OS_SECURITY_DESCRIPTOR@@QBEJPAHPAPAVOS_ACL@@0@Z
?QueryAccessMask@OS_ACE@@QBEKXZ
?QueryGroup@OS_SECURITY_DESCRIPTOR@@QBEJPAHPAPAVOS_SID@@0@Z
?Copy@OS_SECURITY_DESCRIPTOR@@QAEJABV1@@Z
?QuerySubAuthorityCount@OS_SID@@QBEJPAPAE@Z
??1LSA_AUDIT_EVENT_INFO_MEM@@QAE@XZ
?GetAuditEventInfo@LSA_POLICY@@QAEJPAVLSA_AUDIT_EVENT_INFO_MEM@@@Z
??0LSA_AUDIT_EVENT_INFO_MEM@@QAE@H@Z
?Next@USER0_ENUM_ITER@@QAEPBVUSER0_ENUM_OBJ@@PAJH@Z
??1LOC_LM_RESUME_ENUM@@QAE@XZ
??1LOC_LM_ENUM@@QAE@XZ
??1LM_RESUME_ENUM_ITER@@IAE@XZ
??1LM_ENUM_ITER@@IAE@XZ
??RGROUP0_ENUM_ITER@@QAEPBVGROUP0_ENUM_OBJ@@XZ
??0GROUP0_ENUM_ITER@@QAE@AAVGROUP0_ENUM@@@Z
?GetInfo@LM_ENUM@@QAEJXZ
??0GROUP0_ENUM@@QAE@ABVLOCATION@@PBG@Z
??0USER0_ENUM_ITER@@QAE@AAVUSER0_ENUM@@@Z
?GetInfo@LM_RESUME_ENUM@@QAEJH@Z
??0USER0_ENUM@@QAE@ABVLOCATION@@PBGH@Z
??0NET_NAME@@QAE@PBGW4NETNAME_TYPE@@@Z
?QueryComputerName@NET_NAME@@QAEJPAVNLS_STR@@@Z
??1NET_NAME@@QAE@XZ
?SetGroup@OS_SECURITY_DESCRIPTOR@@QAEJABVOS_SID@@H@Z
?GetInfo@NEW_LM_OBJ@@QAEJXZ
?QueryHelpContext@DIALOG_WINDOW@@MAEKXZ
?QueryHelpFile@DIALOG_WINDOW@@MAEPBGK@Z
?OnValidationError@DIALOG_WINDOW@@MAEXIJ@Z
?OnControlError@DIALOG_WINDOW@@MAEXIJ@Z
?OnSysColorChange@DIALOG_WINDOW@@MAEXXZ
?OnCtlColor@DIALOG_WINDOW@@MAEPAUHBRUSH__@@PAUHDC__@@PAUHWND__@@PAI@Z
?OnDlgDeactivation@DIALOG_WINDOW@@MAEHABVACTIVATION_EVENT@@@Z
?OnDlgActivation@DIALOG_WINDOW@@MAEHABVACTIVATION_EVENT@@@Z
?OnScrollBarThumb@DIALOG_WINDOW@@MAEHABVSCROLL_THUMB_EVENT@@@Z
?OnScrollBar@DIALOG_WINDOW@@MAEHABVSCROLL_EVENT@@@Z
?OnTimer@CANCEL_TASK_DIALOG@@MAEHABVTIMER_EVENT@@@Z
?OnCancel@DIALOG_WINDOW@@MAEHXZ
?OnOK@DIALOG_WINDOW@@MAEHXZ
?OnCommand@DIALOG_WINDOW@@MAEHABVCONTROL_EVENT@@@Z
?QueryRobustHwnd@DIALOG_WINDOW@@UBEPAUHWND__@@XZ
?OnUserMessage@OWNER_WINDOW@@MAEHABVEVENT@@@Z
??0CANCEL_TASK_DIALOG@@QAE@IPAUHWND__@@PBGKJW4ELLIPSIS_STYLE@@@Z
??1CANCEL_TASK_DIALOG@@QAE@XZ
?Process@DIALOG_WINDOW@@QAEJPAH@Z
?MsgPopup@@YGHABVOWNINGWND@@JW4MSG_SEVERITY@@@Z
??0RESOURCE_STR@@QAE@J@Z
??1AUTO_CURSOR@@QAE@XZ
??1MASK_MAP@@QAE@XZ
?Add@MASK_MAP@@QAEJQAUUS_IDS_PAIRS@@G@Z
?Load@NLS_STR@@QAEJJ@Z
??0MASK_MAP@@QAE@XZ
?MsgPopup@@YGHABVOWNINGWND@@JW4MSG_SEVERITY@@IPBG2I@Z
??0AUTO_CURSOR@@QAE@PBG@Z
?SetText@SLT_ELLIPSIS@@QAEJPBG@Z
?MsgPopup@@YGHABVOWNINGWND@@JW4MSG_SEVERITY@@II@Z
?MsgPopup@@YGHABVOWNINGWND@@JW4MSG_SEVERITY@@IPBGI@Z
?Init@BASE_ELLIPSIS@@SGJXZ
?Init@BLT@@SGJPAUHINSTANCE__@@IIII@Z
?Term@BLT@@SGXPAUHINSTANCE__@@@Z
?Term@BASE_ELLIPSIS@@SGXXZ
??1POPUP_MENU@@QAE@XZ
?EnableItem@MENU_BASE@@QBEIIHI@Z
??0POPUP_MENU@@QAE@PAUHMENU__@@@Z
?MayRun@DIALOG_WINDOW@@MAEHXZ
?OnTimer@DIALOG_WINDOW@@MAEHABVTIMER_EVENT@@@Z
?QueryHwnd@WINDOW@@QBEPAUHWND__@@XZ
?Process@DIALOG_WINDOW@@QAEJPAI@Z
?Add@MASK_MAP@@QAEJABVBITFIELD@@ABVNLS_STR@@H@Z
?IsPresent@MASK_MAP@@QAEHPAVBITFIELD@@@Z
??1WINDOW@@QAE@XZ
??1DIALOG_WINDOW@@QAE@XZ
?ClaimFocus@CONTROL_WINDOW@@QAEXXZ
?SetText@WINDOW@@QAEXPBG@Z
?SetText@WINDOW@@QAEXABVNLS_STR@@@Z
?Enable@WINDOW@@QAEXH@Z
?Show@WINDOW@@QAEHH@Z
??0PUSH_BUTTON@@QAE@PAVOWNER_WINDOW@@I@Z
??0SLE@@QAE@PAVOWNER_WINDOW@@II@Z
??0SLT@@QAE@PAVOWNER_WINDOW@@I@Z
??0DIALOG_WINDOW@@QAE@ABVIDRESOURCE@@ABVPWND2HWND@@H@Z
?Dismiss@DIALOG_WINDOW@@IAEXI@Z
?MsgPopup@@YGHABVOWNINGWND@@JW4MSG_SEVERITY@@KIQAPAVNLS_STR@@I@Z
?StringToBits@MASK_MAP@@QAEJABVNLS_STR@@PAVBITFIELD@@HPAI@Z
?QueryEventEffects@CONTROL_VALUE@@UAEIABVCONTROL_EVENT@@@Z
?SetControlValueFocus@CONTROL_VALUE@@UAEXXZ
?SetTabStop@CONTROL_VALUE@@MAEXH@Z
?RestoreValue@CONTROL_VALUE@@MAEXH@Z
?SaveValue@CONTROL_VALUE@@MAEXH@Z
?AfterGroupActions@CONTROL_GROUP@@MAEXXZ
?OnGroupAction@CONTROL_GROUP@@MAEJPAV1@@Z
?OnUserAction@CONTROL_GROUP@@MAEJPAVCONTROL_WINDOW@@ABVCONTROL_EVENT@@@Z
?SetState@STATE_BUTTON_CONTROL@@IAEXI@Z
?QueryState@STATE_BUTTON_CONTROL@@IBEIXZ
?QueryLeftMargin@DTE@@UBEIXZ
?AppendDataTo@STR_DTE@@UBEJPAVNLS_STR@@@Z
?Paint@STR_DTE@@UBEXPAUHDC__@@PBUtagRECT@@@Z
?QueryItem@BLT_LISTBOX@@QBEPAVLBI@@H@Z
?QueryCurrentItem@LIST_CONTROL@@QBEHXZ
?Compare_HAWforHawaii@LBI@@UBEHABVNLS_STR@@@Z
?CalcHeight@LBI@@UAEII@Z
?IsDestroyable@LBI@@MAEHXZ
?Paint@DISPLAY_TABLE@@QBEXPAVLISTBOX@@PAUHDC__@@PBUtagRECT@@PAUGUILTT_INFO@@@Z
??ADISPLAY_TABLE@@QAEAAPAVDTE@@I@Z
??0DISPLAY_TABLE@@QAE@IPBI@Z
??0DM_DTE@@QAE@PAVDISPLAY_MAP@@@Z
?ReleaseLBI@BLT_LISTBOX@@EAEXPAVLBI@@@Z
?RequestLBI@BLT_LISTBOX@@EAEPAVLBI@@PBUtagDRAWITEMSTRUCT@@@Z
?OnCtlColor@CONTROL_WINDOW@@UAEPAUHBRUSH__@@PAUHDC__@@PAUHWND__@@PAI@Z
?IndicateError@CONTROL_WINDOW@@UAEXJ@Z
?Validate@CONTROL_WINDOW@@UAEJXZ
?OnUserAction@CONTROL_WINDOW@@MAEJABVCONTROL_EVENT@@@Z
?CD_Guiltt@BLT_LISTBOX@@MAEJHPAVNLS_STR@@@Z
?CD_VKey@LISTBOX@@MAEHGG@Z
?CD_Char@BLT_LISTBOX@@MAEHGG@Z
?CD_Measure@BLT_LISTBOX@@MAEHPAUtagMEASUREITEMSTRUCT@@@Z
?CD_Draw@LISTBOX@@MAEHPAUtagDRAWITEMSTRUCT@@@Z
?QueryEventEffects@LIST_CONTROL@@MAEIABVCONTROL_EVENT@@@Z
?SetControlValueFocus@CONTROL_WINDOW@@UAEXXZ
?SetTabStop@CONTROL_WINDOW@@MAEXH@Z
?RestoreValue@LIST_CONTROL@@MAEXH@Z
?SaveValue@LIST_CONTROL@@MAEXH@Z
?Invalidate@WINDOW@@QAEXH@Z
?SelectItem@LIST_CONTROL@@QAEXHH@Z
?QueryCount@LIST_CONTROL@@QBEHXZ
?AddItem@BLT_LISTBOX@@QAEHPAVLBI@@@Z
?DeleteAllItems@LIST_CONTROL@@QAEXXZ
?SetRedraw@WINDOW@@QAEXH@Z
?DeleteItem@LIST_CONTROL@@QAEHH@Z
?QueryUserSelectedBits@SET_OF_AUDIT_CATEGORIES@@QAEJPAVBITFIELD@@0@Z
?Enable@SET_OF_AUDIT_CATEGORIES@@QAEXHH@Z
?RemoveSelection@LIST_CONTROL@@QAEXXZ
??0SET_OF_AUDIT_CATEGORIES@@QAE@PAVOWNER_WINDOW@@IIIPAVMASK_MAP@@PAVBITFIELD@@2H@Z
??1SET_OF_AUDIT_CATEGORIES@@QAE@XZ
??1NT_USER_BROWSER_DIALOG@@QAE@XZ
?ApplyPermissionsToCheckBoxes@SET_OF_AUDIT_CATEGORIES@@QAEJPAVBITFIELD@@0@Z
??1BROWSER_SUBJECT_ITER@@QAE@XZ
?Next@BROWSER_SUBJECT_ITER@@QAEJPAPAVBROWSER_SUBJECT@@@Z
?QueryQualifiedName@BROWSER_SUBJECT@@QBEJPAVNLS_STR@@PBV2@H@Z
??0BROWSER_SUBJECT_ITER@@QAE@PAVNT_USER_BROWSER_DIALOG@@@Z
??0NT_USER_BROWSER_DIALOG@@QAE@PBGPAUHWND__@@0KK0KKKPBVADMIN_AUTHORITY@@@Z
?MakeDefault@PUSH_BUTTON@@QAEXXZ
?CD_Guiltt@CONTROL_WINDOW@@MAEJHPAVNLS_STR@@@Z
?CD_VKey@CONTROL_WINDOW@@MAEHGG@Z
?CD_Char@CONTROL_WINDOW@@MAEHGG@Z
?CD_Measure@CONTROL_WINDOW@@MAEHPAUtagMEASUREITEMSTRUCT@@@Z
?CD_Draw@CONTROL_WINDOW@@MAEHPAUtagDRAWITEMSTRUCT@@@Z
?QueryEventEffects@BUTTON_CONTROL@@MAEIABVCONTROL_EVENT@@@Z
?RestoreValue@STATE_BUTTON_CONTROL@@MAEXH@Z
?SaveValue@STATE_BUTTON_CONTROL@@MAEXH@Z
??0STATE_BUTTON_CONTROL@@IAE@PAVOWNER_WINDOW@@I@Z
??1FONT@@QAE@XZ
??0SLT_FONT@@QAE@PAVOWNER_WINDOW@@IW4FontType@@@Z
?QuerySelection@RADIO_GROUP@@QBEIXZ
?QueryItemText@STRING_LIST_CONTROL@@QBEJPAVNLS_STR@@H@Z
??1LIST_CONTROL@@IAE@XZ
?InvalidateItem@LISTBOX@@QAEXHH@Z
?QueryOwnerHwnd@WINDOW@@QBEPAUHWND__@@XZ
?InsertItem@STRING_LIST_CONTROL@@QAEHHPBG@Z
?EnumStrings@MASK_MAP@@QAEJPAVNLS_STR@@PAH1H@Z
?SetSize@WINDOW@@QAEXHHH@Z
?QuerySize@WINDOW@@QBE?AVXYDIMENSION@@XZ
?SetPos@WINDOW@@QAEXVXYPOINT@@HPAV1@@Z
??1DISPLAY_CONTEXT@@QAE@XZ
?SetSize@WINDOW@@QAEXVXYDIMENSION@@H@Z
?QueryTextExtent@DEVICE_CONTEXT@@QBE?AVXYDIMENSION@@ABVNLS_STR@@@Z
??0DISPLAY_CONTEXT@@QAE@PAUHWND__@@@Z
?QueryPos@WINDOW@@QBE?AVXYPOINT@@XZ
??0COMBOBOX@@QAE@PAVOWNER_WINDOW@@II@Z
?AddItem@STRING_LIST_CONTROL@@QAEHPBG@Z
?FindItemExact@STRING_LIST_CONTROL@@QBEHPBG@Z
?QueryDmDte@SUBJECT_BITMAP_BLOCK@@QAEPAVDMID_DTE@@HHH@Z
??0LBI@@QAE@XZ
??1LBI@@UAE@XZ
?BitsToString@MASK_MAP@@QAEJABVBITFIELD@@PAVNLS_STR@@HPAI@Z
?QueryBits@MASK_MAP@@QAEJIPAVBITFIELD@@PAVNLS_STR@@PAH@Z
??1SUBJECT_BITMAP_BLOCK@@QAE@XZ
?QueryWidth@DISPLAY_MAP@@QBEIXZ
??0SUBJECT_BITMAP_BLOCK@@QAE@XZ
??0BLT_LISTBOX@@QAE@PAVOWNER_WINDOW@@IHW4FontType@@H@Z
?QuerySelItems@LIST_CONTROL@@QBEJPAHH@Z
?QuerySelCount@LIST_CONTROL@@QBEHXZ
?QueryHelpContext@NT_USER_BROWSER_DIALOG@@UAEKXZ
?QueryHelpFile@NT_USER_BROWSER_DIALOG@@UAEPBGK@Z
?OnDlgDeactivation@NT_USER_BROWSER_DIALOG@@MAEHABVACTIVATION_EVENT@@@Z
?OnOK@NT_USER_BROWSER_DIALOG@@MAEHXZ
?OnCommand@NT_USER_BROWSER_DIALOG@@MAEHABVCONTROL_EVENT@@@Z
?OnUserMessage@NT_USER_BROWSER_DIALOG@@MAEHABVEVENT@@@Z
?SetSelection@RADIO_GROUP@@QAEXI@Z
??1ARRAY_CONTROLVAL_CID_PAIR@@QAE@XZ
??1RADIO_GROUP@@QAE@XZ
??0CONTROL_WINDOW@@QAE@PAVOWNER_WINDOW@@I@Z
?Enable@MAGIC_GROUP@@QAEXH@Z
?AddAssociation@MAGIC_GROUP@@QAEJIPAVCONTROL_VALUE@@@Z
??0MAGIC_GROUP@@QAE@PAVOWNER_WINDOW@@IHIPAVCONTROL_GROUP@@@Z
?IsValid@DIALOG_WINDOW@@MAEHXZ
?MayRun@CANCEL_TASK_DIALOG@@MAEHXZ
?QueryObjectName@CANCEL_TASK_DIALOG@@MAEJPAVNLS_STR@@@Z
?FilterMessage@DIALOG_WINDOW@@MAEHPAUtagMSG@@@Z
?IsPumpFinished@DIALOG_WINDOW@@MAEHXZ
WNetFMXGetPermCaps
WNetFMXGetPermHelp
WNetFMXEditPerm
NetpReleasePrivilege
NetpGetPrivilege
SendMessageW
CharNextW
WinHelpW
UpdateWindow
InvalidateRect
SelectObject
lstrcpynW
GetVolumeInformationW
GetLastError
GetDriveTypeW
DisableThreadLibraryCalls
GetComputerNameW
EqualSid
LsaGetRemoteUserName
SetFileSecurityW
GetFileSecurityW
DllMain
EditAuditInfo
EditOwnerInfo
EditPermissionInfo
FMExtensionProcW
SedDiscretionaryAclEditor
SedSystemAclEditor
SedTakeOwnership
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ