DllMain
EditAuditInfo
EditOwnerInfo
EditPermissionInfo
FMExtensionProcW
SedDiscretionaryAclEditor
SedSystemAclEditor
SedTakeOwnership
Static task
static1
Behavioral task
behavioral1
Sample
61b1fd97ccd2eb26724bec7e73744f8e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
61b1fd97ccd2eb26724bec7e73744f8e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
61b1fd97ccd2eb26724bec7e73744f8e_JaffaCakes118
Size
127KB
MD5
61b1fd97ccd2eb26724bec7e73744f8e
SHA1
82210250fe66a635287deb92a7ac3aa874adabb4
SHA256
1d039567e78cb9414c4728163eed44419c3d5405707e1fdaa82b15739f61fa87
SHA512
a3d4ab743a70f84300905146a72b8892d171e2f81aceae1efb06ca7153d407bfac11d896611b8839529a234e34903f812f2f97354cd0605e07044fbafdff06f3
SSDEEP
3072:FuVsLs7EEjLpqHv+9GT7RQ9sSgC5GB/df:FuKLsrpjVGP
Checks for missing Authenticode signature.
resource |
---|
61b1fd97ccd2eb26724bec7e73744f8e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
wcslen
??3@YAXPAX@Z
??2@YAPAXI@Z
free
_purecall
_adjust_fdiv
malloc
_initterm
NtClose
NtOpenFile
RtlDosPathNameToNtPathName_U
RtlFreeUnicodeString
?CopyFrom@NLS_STR@@QAEJABV1@@Z
?GetSelItem@@YGJPAUHWND__@@IPAVNLS_STR@@PAH@Z
??0NLS_STR@@QAE@I@Z
?QuerySelCount@FMX@@QBEIXZ
??0FMX@@QAE@PAUHWND__@@@Z
?Refresh@FMX@@QAEXXZ
?QueryFocus@FMX@@QBEIXZ
?DelSubStr@NLS_STR@@QAEXAAVISTR@@@Z
??YISTR@@QAEXH@Z
??0ISTR@@QAE@ABVNLS_STR@@@Z
??0NLS_STR@@QAE@ABV0@@Z
??2ALLOC_BASE@@SGPAXI@Z
??0DEC_STR@@QAE@KI@Z
?IsHeterogeneousSelection@FMX@@QAEHPAH@Z
?Add@SLIST@@QAEJPAX@Z
??3ALLOC_BASE@@SGXPAX@Z
?Resize@BUFFER@@QAEJI@Z
?QueryPtr@BUFFER@@QBEPAEXZ
?QuerySize@BUFFER@@QBEIXZ
?MapNTStatus@ERRMAP@@SGJJPAHJ@Z
??0W32_FS_ENUM@@QAE@PBG0W4FILE_TYPE@@HI@Z
?QueryName@FS_ENUM@@QBEJPAVNLS_STR@@@Z
?Next@FS_ENUM@@QAEHXZ
??1BUFFER@@QAE@XZ
??0BUFFER@@QAE@I@Z
??1STRLIST@@QAE@XZ
??0STRLIST@@QAE@H@Z
??0NLS_STR@@IAE@PAGIH@Z
??1BITFIELD@@QAE@XZ
?DelSubStr@NLS_STR@@QAEXAAVISTR@@ABV2@@Z
?QueryChar@NLS_STR@@QBEGABVISTR@@@Z
??EISTR@@QAEAAV0@XZ
??0ISTR@@QAE@ABV0@@Z
NETUI_IsDBCS
??0NLS_STR@@QAE@PBG@Z
??BBITFIELD@@QAEKXZ
?strchr@NLS_STR@@QBEHPAVISTR@@G@Z
??4BITFIELD@@QAEAAV0@K@Z
??0BITFIELD@@QAE@K@Z
??0NLS_STR@@QAE@XZ
??4NLS_STR@@QAEAAV0@ABV0@@Z
?strrchr@NLS_STR@@QBEHPAVISTR@@G@Z
??BBITFIELD@@QAEGXZ
?MapCopyFrom@NLS_STR@@QAEJPBGI@Z
?InsertStr@NLS_STR@@QAEHABV1@AAVISTR@@@Z
?InsertParams@NLS_STR@@QAEJPAPBV1@@Z
?Next@ITER_SL@@QAEPAXXZ
?QueryNumElem@SLIST@@QAEIXZ
??1ITER_STRLIST@@QAE@XZ
??0ITER_STRLIST@@QAE@AAVSTRLIST@@@Z
??8BITFIELD@@QAEHAAV0@@Z
??0BITFIELD@@QAE@ABV0@@Z
??4BITFIELD@@QAEAAV0@ABV0@@Z
?Resize@BITFIELD@@QAEJI@Z
??_4BITFIELD@@QAEXG@Z
??0ITER_SL@@QAE@PAVSLIST@@@Z
?QueryProp@ITER_SL@@QAEPAXXZ
??0SLIST@@QAE@XZ
?Remove@SLIST@@QAEPAXAAVITER_SL@@@Z
?SetIters@SLIST@@IAEXPAVSL_NODE@@@Z
??1ITER_SL@@QAE@XZ
?Reset@ITER_SL@@QAEXXZ
NETUI_stricmp
??1SLIST@@QAE@XZ
?AppendChar@NLS_STR@@QAEJG@Z
?strlen@NLS_STR@@QBEIXZ
?strstr@NLS_STR@@QBEHPAVISTR@@ABV1@@Z
??YNLS_STR@@QAEAAV0@ABV0@@Z
NETUI_strcmp
?QueryNumChar@NLS_STR@@QBEIXZ
??_4BITFIELD@@QAEXABV0@@Z
?Append@NLS_STR@@QAEJABV1@@Z
??9NLS_STR@@QBEHABV0@@Z
??8NLS_STR@@QBEHABV0@@Z
??_5BITFIELD@@QAEXABV0@@Z
?SetAllBits@BITFIELD@@QAEXW4BITVALUES@@@Z
??2ALLOC_BASE@@SGPAXIPAX@Z
?CopyFrom@NLS_STR@@QAEJPBGI@Z
?InsertParams@NLS_STR@@QAAJIPBV1@ZZ
??0BITFIELD@@QAE@G@Z
??4NLS_STR@@QAEAAV0@PBG@Z
??1NLS_STR@@QAE@XZ
?CreateNew@NEW_LM_OBJ@@QAEJXZ
?CompareACL@NET_ACCESS_1@@QAEHPAV1@@Z
??0NET_ACCESS_1@@QAE@PBG0@Z
?Write@NEW_LM_OBJ@@QAEJXZ
?QueryServer@LOCATION@@QBEPBGXZ
??1LOCATION@@QAE@XZ
?CheckIfNT@LOCATION@@QAEJPAH@Z
??0LOCATION@@QAE@PBGH@Z
??1OS_SECURITY_DESCRIPTOR@@QAE@XZ
??1OS_SID@@QAE@XZ
??1NET_ACCESS_1@@QAE@XZ
?SetOwner@OS_SECURITY_DESCRIPTOR@@QAEJABVOS_SID@@H@Z
?QuerySystemSid@NT_ACCOUNTS_UTILITY@@SGJW4UI_SystemSid@@PAVOS_SID@@PBG@Z
??0OS_SID@@QAE@PAXHPAVOS_SECURITY_DESCRIPTOR@@@Z
??0OS_SECURITY_DESCRIPTOR@@QAE@PAXH@Z
??1OS_ACL@@QAE@XZ
??1OS_ACE@@QAE@XZ
?SetDACL@OS_SECURITY_DESCRIPTOR@@QAEJHPBVOS_ACL@@H@Z
?AddACE@OS_ACL@@QAEJKABVOS_ACE@@@Z
?SetSID@OS_ACE@@QAEJABVOS_SID@@@Z
?SetAccessMask@OS_ACE@@QAEXK@Z
??0OS_ACE@@QAE@PAX@Z
??0OS_ACL@@QAE@PAU_ACL@@HPAVOS_SECURITY_DESCRIPTOR@@@Z
?Compare@OS_SECURITY_DESCRIPTOR@@QAEJPAV1@PAH111PAU_GENERIC_MAPPING@@2HH@Z
?SetGroup@OS_SECURITY_DESCRIPTOR@@QAEJHPBVOS_SID@@H@Z
?SetOwner@OS_SECURITY_DESCRIPTOR@@QAEJHPBVOS_SID@@H@Z
?SetSACL@OS_SECURITY_DESCRIPTOR@@QAEJHPBVOS_ACL@@H@Z
?SetName@NET_ACCESS@@QAEJPBG@Z
?QueryFailingName@NET_ACCESS_1@@QBEJPAVNLS_STR@@PAW4PERMNAME_TYPE@@@Z
?Delete@NET_ACCESS@@QAEJXZ
?WriteNew@NEW_LM_OBJ@@QAEJXZ
?CopyAccessPerms@NET_ACCESS_1@@QAEJABV1@@Z
?SetAuditFlags@NET_ACCESS_1@@QAEJF@Z
?QueryServerName@NET_ACCESS@@QBEPBGXZ
?QueryACECount@NET_ACCESS_1@@QBEIXZ
?SetPerm@NET_ACCESS_1@@QAEJPBGW4PERMNAME_TYPE@@I@Z
?ClearPerms@NET_ACCESS_1@@QAEJXZ
??1DOMAIN_WITH_DC_CACHE@@QAE@XZ
?QueryAnyDC@DOMAIN@@QBEPBGXZ
?GetInfo@DOMAIN_WITH_DC_CACHE@@UAEJXZ
??0DOMAIN_WITH_DC_CACHE@@QAE@PBGH@Z
??1WKSTA_10@@QAE@XZ
I_MNetComputerNameCompare
?QueryLogonDomain@WKSTA_10@@QBEPBGXZ
??0WKSTA_10@@QAE@PBG@Z
?QueryName@OS_SID@@QBEJPAVNLS_STR@@PBGPAX@Z
?QueryOwner@OS_SECURITY_DESCRIPTOR@@QBEJPAHPAPAVOS_SID@@0@Z
??1API_SESSION@@QAE@XZ
??1LSA_POLICY@@QAE@XZ
??1LSA_TRANSLATED_SID_MEM@@QAE@XZ
??1LSA_REF_DOMAIN_MEM@@QAE@XZ
??1LSA_TRANSLATED_NAME_MEM@@QAE@XZ
??1LSA_ACCT_DOM_INFO_MEM@@QAE@XZ
?QueryFailingNameIndex@LSA_TRANSLATED_SID_MEM@@QAEHPAK@Z
?TranslateNamesToSids@LSA_POLICY@@QAEJPBQBGKPAVLSA_TRANSLATED_SID_MEM@@PAVLSA_REF_DOMAIN_MEM@@@Z
?BuildQualifiedAccountName@NT_ACCOUNTS_UTILITY@@SGJPAVNLS_STR@@ABV2@1PBV2@2W4_SID_NAME_USE@@@Z
?Copy@OS_SID@@QAEJABV1@@Z
??0OS_SID@@QAE@PAXKPAVOS_SECURITY_DESCRIPTOR@@@Z
?GetAccountDomain@LSA_POLICY@@QBEJPAVLSA_ACCT_DOM_INFO_MEM@@@Z
?QueryLastSubAuthority@OS_SID@@QBEJPAPAK@Z
??0LSA_ACCT_DOM_INFO_MEM@@QAE@H@Z
?TranslateSidsToNames@LSA_POLICY@@QAEJPBQAXKPAVLSA_TRANSLATED_NAME_MEM@@PAVLSA_REF_DOMAIN_MEM@@@Z
??0LSA_TRANSLATED_NAME_MEM@@QAE@H@Z
??0LSA_REF_DOMAIN_MEM@@QAE@H@Z
??0LSA_TRANSLATED_SID_MEM@@QAE@H@Z
??0LSA_POLICY@@QAE@PBGK@Z
??0API_SESSION@@QAE@PBGH@Z
?DeleteACE@OS_ACL@@QAEJK@Z
??8OS_SID@@QBEHABV0@@Z
?QuerySID@OS_ACE@@QBEJPAPAVOS_SID@@@Z
?QueryACE@OS_ACL@@QBEJKPAVOS_ACE@@@Z
?QueryACECount@OS_ACL@@QBEJPAK@Z
?GetQualifiedAccountNames@NT_ACCOUNTS_UTILITY@@SGJAAVLSA_POLICY@@QAXPBQAXKHPAVSTRLIST@@PAKPAW4_SID_NAME_USE@@PAJPBG3333@Z
?TrimLastSubAuthority@OS_SID@@QAEJPAK@Z
?Next@OS_SACL_SUBJECT_ITER@@UAEHPAJ@Z
??1OS_SACL_SUBJECT_ITER@@QAE@XZ
??0OS_SACL_SUBJECT_ITER@@QAE@PAVOS_ACL@@PAU_GENERIC_MAPPING@@1HH@Z
?QuerySACL@OS_SECURITY_DESCRIPTOR@@QBEJPAHPAPAVOS_ACL@@0@Z
?Next@OS_DACL_SUBJECT_ITER@@UAEHPAJ@Z
??1OS_DACL_SUBJECT_ITER@@QAE@XZ
??0OS_DACL_SUBJECT_ITER@@QAE@PAVOS_ACL@@PAU_GENERIC_MAPPING@@1HH@Z
?QueryDACL@OS_SECURITY_DESCRIPTOR@@QBEJPAHPAPAVOS_ACL@@0@Z
?QueryAccessMask@OS_ACE@@QBEKXZ
?QueryGroup@OS_SECURITY_DESCRIPTOR@@QBEJPAHPAPAVOS_SID@@0@Z
?Copy@OS_SECURITY_DESCRIPTOR@@QAEJABV1@@Z
?QuerySubAuthorityCount@OS_SID@@QBEJPAPAE@Z
??1LSA_AUDIT_EVENT_INFO_MEM@@QAE@XZ
?GetAuditEventInfo@LSA_POLICY@@QAEJPAVLSA_AUDIT_EVENT_INFO_MEM@@@Z
??0LSA_AUDIT_EVENT_INFO_MEM@@QAE@H@Z
?Next@USER0_ENUM_ITER@@QAEPBVUSER0_ENUM_OBJ@@PAJH@Z
??1LOC_LM_RESUME_ENUM@@QAE@XZ
??1LOC_LM_ENUM@@QAE@XZ
??1LM_RESUME_ENUM_ITER@@IAE@XZ
??1LM_ENUM_ITER@@IAE@XZ
??RGROUP0_ENUM_ITER@@QAEPBVGROUP0_ENUM_OBJ@@XZ
??0GROUP0_ENUM_ITER@@QAE@AAVGROUP0_ENUM@@@Z
?GetInfo@LM_ENUM@@QAEJXZ
??0GROUP0_ENUM@@QAE@ABVLOCATION@@PBG@Z
??0USER0_ENUM_ITER@@QAE@AAVUSER0_ENUM@@@Z
?GetInfo@LM_RESUME_ENUM@@QAEJH@Z
??0USER0_ENUM@@QAE@ABVLOCATION@@PBGH@Z
??0NET_NAME@@QAE@PBGW4NETNAME_TYPE@@@Z
?QueryComputerName@NET_NAME@@QAEJPAVNLS_STR@@@Z
??1NET_NAME@@QAE@XZ
?SetGroup@OS_SECURITY_DESCRIPTOR@@QAEJABVOS_SID@@H@Z
?GetInfo@NEW_LM_OBJ@@QAEJXZ
?QueryHelpContext@DIALOG_WINDOW@@MAEKXZ
?QueryHelpFile@DIALOG_WINDOW@@MAEPBGK@Z
?OnValidationError@DIALOG_WINDOW@@MAEXIJ@Z
?OnControlError@DIALOG_WINDOW@@MAEXIJ@Z
?OnSysColorChange@DIALOG_WINDOW@@MAEXXZ
?OnCtlColor@DIALOG_WINDOW@@MAEPAUHBRUSH__@@PAUHDC__@@PAUHWND__@@PAI@Z
?OnDlgDeactivation@DIALOG_WINDOW@@MAEHABVACTIVATION_EVENT@@@Z
?OnDlgActivation@DIALOG_WINDOW@@MAEHABVACTIVATION_EVENT@@@Z
?OnScrollBarThumb@DIALOG_WINDOW@@MAEHABVSCROLL_THUMB_EVENT@@@Z
?OnScrollBar@DIALOG_WINDOW@@MAEHABVSCROLL_EVENT@@@Z
?OnTimer@CANCEL_TASK_DIALOG@@MAEHABVTIMER_EVENT@@@Z
?OnCancel@DIALOG_WINDOW@@MAEHXZ
?OnOK@DIALOG_WINDOW@@MAEHXZ
?OnCommand@DIALOG_WINDOW@@MAEHABVCONTROL_EVENT@@@Z
?QueryRobustHwnd@DIALOG_WINDOW@@UBEPAUHWND__@@XZ
?OnUserMessage@OWNER_WINDOW@@MAEHABVEVENT@@@Z
??0CANCEL_TASK_DIALOG@@QAE@IPAUHWND__@@PBGKJW4ELLIPSIS_STYLE@@@Z
??1CANCEL_TASK_DIALOG@@QAE@XZ
?Process@DIALOG_WINDOW@@QAEJPAH@Z
?MsgPopup@@YGHABVOWNINGWND@@JW4MSG_SEVERITY@@@Z
??0RESOURCE_STR@@QAE@J@Z
??1AUTO_CURSOR@@QAE@XZ
??1MASK_MAP@@QAE@XZ
?Add@MASK_MAP@@QAEJQAUUS_IDS_PAIRS@@G@Z
?Load@NLS_STR@@QAEJJ@Z
??0MASK_MAP@@QAE@XZ
?MsgPopup@@YGHABVOWNINGWND@@JW4MSG_SEVERITY@@IPBG2I@Z
??0AUTO_CURSOR@@QAE@PBG@Z
?SetText@SLT_ELLIPSIS@@QAEJPBG@Z
?MsgPopup@@YGHABVOWNINGWND@@JW4MSG_SEVERITY@@II@Z
?MsgPopup@@YGHABVOWNINGWND@@JW4MSG_SEVERITY@@IPBGI@Z
?Init@BASE_ELLIPSIS@@SGJXZ
?Init@BLT@@SGJPAUHINSTANCE__@@IIII@Z
?Term@BLT@@SGXPAUHINSTANCE__@@@Z
?Term@BASE_ELLIPSIS@@SGXXZ
??1POPUP_MENU@@QAE@XZ
?EnableItem@MENU_BASE@@QBEIIHI@Z
??0POPUP_MENU@@QAE@PAUHMENU__@@@Z
?MayRun@DIALOG_WINDOW@@MAEHXZ
?OnTimer@DIALOG_WINDOW@@MAEHABVTIMER_EVENT@@@Z
?QueryHwnd@WINDOW@@QBEPAUHWND__@@XZ
?Process@DIALOG_WINDOW@@QAEJPAI@Z
?Add@MASK_MAP@@QAEJABVBITFIELD@@ABVNLS_STR@@H@Z
?IsPresent@MASK_MAP@@QAEHPAVBITFIELD@@@Z
??1WINDOW@@QAE@XZ
??1DIALOG_WINDOW@@QAE@XZ
?ClaimFocus@CONTROL_WINDOW@@QAEXXZ
?SetText@WINDOW@@QAEXPBG@Z
?SetText@WINDOW@@QAEXABVNLS_STR@@@Z
?Enable@WINDOW@@QAEXH@Z
?Show@WINDOW@@QAEHH@Z
??0PUSH_BUTTON@@QAE@PAVOWNER_WINDOW@@I@Z
??0SLE@@QAE@PAVOWNER_WINDOW@@II@Z
??0SLT@@QAE@PAVOWNER_WINDOW@@I@Z
??0DIALOG_WINDOW@@QAE@ABVIDRESOURCE@@ABVPWND2HWND@@H@Z
?Dismiss@DIALOG_WINDOW@@IAEXI@Z
?MsgPopup@@YGHABVOWNINGWND@@JW4MSG_SEVERITY@@KIQAPAVNLS_STR@@I@Z
?StringToBits@MASK_MAP@@QAEJABVNLS_STR@@PAVBITFIELD@@HPAI@Z
?QueryEventEffects@CONTROL_VALUE@@UAEIABVCONTROL_EVENT@@@Z
?SetControlValueFocus@CONTROL_VALUE@@UAEXXZ
?SetTabStop@CONTROL_VALUE@@MAEXH@Z
?RestoreValue@CONTROL_VALUE@@MAEXH@Z
?SaveValue@CONTROL_VALUE@@MAEXH@Z
?AfterGroupActions@CONTROL_GROUP@@MAEXXZ
?OnGroupAction@CONTROL_GROUP@@MAEJPAV1@@Z
?OnUserAction@CONTROL_GROUP@@MAEJPAVCONTROL_WINDOW@@ABVCONTROL_EVENT@@@Z
?SetState@STATE_BUTTON_CONTROL@@IAEXI@Z
?QueryState@STATE_BUTTON_CONTROL@@IBEIXZ
?QueryLeftMargin@DTE@@UBEIXZ
?AppendDataTo@STR_DTE@@UBEJPAVNLS_STR@@@Z
?Paint@STR_DTE@@UBEXPAUHDC__@@PBUtagRECT@@@Z
?QueryItem@BLT_LISTBOX@@QBEPAVLBI@@H@Z
?QueryCurrentItem@LIST_CONTROL@@QBEHXZ
?Compare_HAWforHawaii@LBI@@UBEHABVNLS_STR@@@Z
?CalcHeight@LBI@@UAEII@Z
?IsDestroyable@LBI@@MAEHXZ
?Paint@DISPLAY_TABLE@@QBEXPAVLISTBOX@@PAUHDC__@@PBUtagRECT@@PAUGUILTT_INFO@@@Z
??ADISPLAY_TABLE@@QAEAAPAVDTE@@I@Z
??0DISPLAY_TABLE@@QAE@IPBI@Z
??0DM_DTE@@QAE@PAVDISPLAY_MAP@@@Z
?ReleaseLBI@BLT_LISTBOX@@EAEXPAVLBI@@@Z
?RequestLBI@BLT_LISTBOX@@EAEPAVLBI@@PBUtagDRAWITEMSTRUCT@@@Z
?OnCtlColor@CONTROL_WINDOW@@UAEPAUHBRUSH__@@PAUHDC__@@PAUHWND__@@PAI@Z
?IndicateError@CONTROL_WINDOW@@UAEXJ@Z
?Validate@CONTROL_WINDOW@@UAEJXZ
?OnUserAction@CONTROL_WINDOW@@MAEJABVCONTROL_EVENT@@@Z
?CD_Guiltt@BLT_LISTBOX@@MAEJHPAVNLS_STR@@@Z
?CD_VKey@LISTBOX@@MAEHGG@Z
?CD_Char@BLT_LISTBOX@@MAEHGG@Z
?CD_Measure@BLT_LISTBOX@@MAEHPAUtagMEASUREITEMSTRUCT@@@Z
?CD_Draw@LISTBOX@@MAEHPAUtagDRAWITEMSTRUCT@@@Z
?QueryEventEffects@LIST_CONTROL@@MAEIABVCONTROL_EVENT@@@Z
?SetControlValueFocus@CONTROL_WINDOW@@UAEXXZ
?SetTabStop@CONTROL_WINDOW@@MAEXH@Z
?RestoreValue@LIST_CONTROL@@MAEXH@Z
?SaveValue@LIST_CONTROL@@MAEXH@Z
?Invalidate@WINDOW@@QAEXH@Z
?SelectItem@LIST_CONTROL@@QAEXHH@Z
?QueryCount@LIST_CONTROL@@QBEHXZ
?AddItem@BLT_LISTBOX@@QAEHPAVLBI@@@Z
?DeleteAllItems@LIST_CONTROL@@QAEXXZ
?SetRedraw@WINDOW@@QAEXH@Z
?DeleteItem@LIST_CONTROL@@QAEHH@Z
?QueryUserSelectedBits@SET_OF_AUDIT_CATEGORIES@@QAEJPAVBITFIELD@@0@Z
?Enable@SET_OF_AUDIT_CATEGORIES@@QAEXHH@Z
?RemoveSelection@LIST_CONTROL@@QAEXXZ
??0SET_OF_AUDIT_CATEGORIES@@QAE@PAVOWNER_WINDOW@@IIIPAVMASK_MAP@@PAVBITFIELD@@2H@Z
??1SET_OF_AUDIT_CATEGORIES@@QAE@XZ
??1NT_USER_BROWSER_DIALOG@@QAE@XZ
?ApplyPermissionsToCheckBoxes@SET_OF_AUDIT_CATEGORIES@@QAEJPAVBITFIELD@@0@Z
??1BROWSER_SUBJECT_ITER@@QAE@XZ
?Next@BROWSER_SUBJECT_ITER@@QAEJPAPAVBROWSER_SUBJECT@@@Z
?QueryQualifiedName@BROWSER_SUBJECT@@QBEJPAVNLS_STR@@PBV2@H@Z
??0BROWSER_SUBJECT_ITER@@QAE@PAVNT_USER_BROWSER_DIALOG@@@Z
??0NT_USER_BROWSER_DIALOG@@QAE@PBGPAUHWND__@@0KK0KKKPBVADMIN_AUTHORITY@@@Z
?MakeDefault@PUSH_BUTTON@@QAEXXZ
?CD_Guiltt@CONTROL_WINDOW@@MAEJHPAVNLS_STR@@@Z
?CD_VKey@CONTROL_WINDOW@@MAEHGG@Z
?CD_Char@CONTROL_WINDOW@@MAEHGG@Z
?CD_Measure@CONTROL_WINDOW@@MAEHPAUtagMEASUREITEMSTRUCT@@@Z
?CD_Draw@CONTROL_WINDOW@@MAEHPAUtagDRAWITEMSTRUCT@@@Z
?QueryEventEffects@BUTTON_CONTROL@@MAEIABVCONTROL_EVENT@@@Z
?RestoreValue@STATE_BUTTON_CONTROL@@MAEXH@Z
?SaveValue@STATE_BUTTON_CONTROL@@MAEXH@Z
??0STATE_BUTTON_CONTROL@@IAE@PAVOWNER_WINDOW@@I@Z
??1FONT@@QAE@XZ
??0SLT_FONT@@QAE@PAVOWNER_WINDOW@@IW4FontType@@@Z
?QuerySelection@RADIO_GROUP@@QBEIXZ
?QueryItemText@STRING_LIST_CONTROL@@QBEJPAVNLS_STR@@H@Z
??1LIST_CONTROL@@IAE@XZ
?InvalidateItem@LISTBOX@@QAEXHH@Z
?QueryOwnerHwnd@WINDOW@@QBEPAUHWND__@@XZ
?InsertItem@STRING_LIST_CONTROL@@QAEHHPBG@Z
?EnumStrings@MASK_MAP@@QAEJPAVNLS_STR@@PAH1H@Z
?SetSize@WINDOW@@QAEXHHH@Z
?QuerySize@WINDOW@@QBE?AVXYDIMENSION@@XZ
?SetPos@WINDOW@@QAEXVXYPOINT@@HPAV1@@Z
??1DISPLAY_CONTEXT@@QAE@XZ
?SetSize@WINDOW@@QAEXVXYDIMENSION@@H@Z
?QueryTextExtent@DEVICE_CONTEXT@@QBE?AVXYDIMENSION@@ABVNLS_STR@@@Z
??0DISPLAY_CONTEXT@@QAE@PAUHWND__@@@Z
?QueryPos@WINDOW@@QBE?AVXYPOINT@@XZ
??0COMBOBOX@@QAE@PAVOWNER_WINDOW@@II@Z
?AddItem@STRING_LIST_CONTROL@@QAEHPBG@Z
?FindItemExact@STRING_LIST_CONTROL@@QBEHPBG@Z
?QueryDmDte@SUBJECT_BITMAP_BLOCK@@QAEPAVDMID_DTE@@HHH@Z
??0LBI@@QAE@XZ
??1LBI@@UAE@XZ
?BitsToString@MASK_MAP@@QAEJABVBITFIELD@@PAVNLS_STR@@HPAI@Z
?QueryBits@MASK_MAP@@QAEJIPAVBITFIELD@@PAVNLS_STR@@PAH@Z
??1SUBJECT_BITMAP_BLOCK@@QAE@XZ
?QueryWidth@DISPLAY_MAP@@QBEIXZ
??0SUBJECT_BITMAP_BLOCK@@QAE@XZ
??0BLT_LISTBOX@@QAE@PAVOWNER_WINDOW@@IHW4FontType@@H@Z
?QuerySelItems@LIST_CONTROL@@QBEJPAHH@Z
?QuerySelCount@LIST_CONTROL@@QBEHXZ
?QueryHelpContext@NT_USER_BROWSER_DIALOG@@UAEKXZ
?QueryHelpFile@NT_USER_BROWSER_DIALOG@@UAEPBGK@Z
?OnDlgDeactivation@NT_USER_BROWSER_DIALOG@@MAEHABVACTIVATION_EVENT@@@Z
?OnOK@NT_USER_BROWSER_DIALOG@@MAEHXZ
?OnCommand@NT_USER_BROWSER_DIALOG@@MAEHABVCONTROL_EVENT@@@Z
?OnUserMessage@NT_USER_BROWSER_DIALOG@@MAEHABVEVENT@@@Z
?SetSelection@RADIO_GROUP@@QAEXI@Z
??1ARRAY_CONTROLVAL_CID_PAIR@@QAE@XZ
??1RADIO_GROUP@@QAE@XZ
??0CONTROL_WINDOW@@QAE@PAVOWNER_WINDOW@@I@Z
?Enable@MAGIC_GROUP@@QAEXH@Z
?AddAssociation@MAGIC_GROUP@@QAEJIPAVCONTROL_VALUE@@@Z
??0MAGIC_GROUP@@QAE@PAVOWNER_WINDOW@@IHIPAVCONTROL_GROUP@@@Z
?IsValid@DIALOG_WINDOW@@MAEHXZ
?MayRun@CANCEL_TASK_DIALOG@@MAEHXZ
?QueryObjectName@CANCEL_TASK_DIALOG@@MAEJPAVNLS_STR@@@Z
?FilterMessage@DIALOG_WINDOW@@MAEHPAUtagMSG@@@Z
?IsPumpFinished@DIALOG_WINDOW@@MAEHXZ
WNetFMXGetPermCaps
WNetFMXGetPermHelp
WNetFMXEditPerm
NetpReleasePrivilege
NetpGetPrivilege
SendMessageW
CharNextW
WinHelpW
UpdateWindow
InvalidateRect
SelectObject
lstrcpynW
GetVolumeInformationW
GetLastError
GetDriveTypeW
DisableThreadLibraryCalls
GetComputerNameW
EqualSid
LsaGetRemoteUserName
SetFileSecurityW
GetFileSecurityW
DllMain
EditAuditInfo
EditOwnerInfo
EditPermissionInfo
FMExtensionProcW
SedDiscretionaryAclEditor
SedSystemAclEditor
SedTakeOwnership
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ