DllMain
EditAuditInfo
EditOwnerInfo
EditPermissionInfo
FMExtensionProcW
SedDiscretionaryAclEditor
SedSystemAclEditor
SedTakeOwnership
Static task
static1
Behavioral task
behavioral1
Sample
6abb8081dcad2baea6303a8ba91bf7f8_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6abb8081dcad2baea6303a8ba91bf7f8_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6abb8081dcad2baea6303a8ba91bf7f8_JaffaCakes118
Size
130KB
MD5
6abb8081dcad2baea6303a8ba91bf7f8
SHA1
2aaf2d4e177dc15069367ca4aa5eddecc510fcb3
SHA256
49bf3f2dfbe54139ba6f21327cb89c0e5ca67e06e77da8b3e36a355d81819fda
SHA512
64df025b89538951456c6358731b66227414240c859695f56195e0cb45b2af1d9241c4e8dcb095021bc4f20d88fc489ff59f383ac1744e58a165892ecd356c24
SSDEEP
3072:e8+xuaQEXjkp0gD5+wGT7RQ9sSgOsdNq5P:eJxuaupedM
Checks for missing Authenticode signature.
resource |
---|
6abb8081dcad2baea6303a8ba91bf7f8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
wcslen
??3@YAXPAX@Z
??2@YAPAXI@Z
free
_purecall
_adjust_fdiv
malloc
_initterm
NtClose
NtOpenFile
RtlDosPathNameToNtPathName_U
RtlFreeUnicodeString
?CopyFrom@NLS_STR@@QAEJABV1@@Z
?GetSelItem@@YGJPAUHWND__@@IPAVNLS_STR@@PAH@Z
??0NLS_STR@@QAE@I@Z
?QuerySelCount@FMX@@QBEIXZ
??0FMX@@QAE@PAUHWND__@@@Z
?Refresh@FMX@@QAEXXZ
?QueryFocus@FMX@@QBEIXZ
?DelSubStr@NLS_STR@@QAEXAAVISTR@@@Z
??YISTR@@QAEXH@Z
??0ISTR@@QAE@ABVNLS_STR@@@Z
??0NLS_STR@@QAE@ABV0@@Z
??2ALLOC_BASE@@SGPAXI@Z
??0DEC_STR@@QAE@KI@Z
?IsHeterogeneousSelection@FMX@@QAEHPAH@Z
?Add@SLIST@@QAEJPAX@Z
??3ALLOC_BASE@@SGXPAX@Z
?Resize@BUFFER@@QAEJI@Z
?QueryPtr@BUFFER@@QBEPAEXZ
?QuerySize@BUFFER@@QBEIXZ
?MapNTStatus@ERRMAP@@SGJJPAHJ@Z
??0W32_FS_ENUM@@QAE@PBG0W4FILE_TYPE@@HI@Z
?QueryName@FS_ENUM@@QBEJPAVNLS_STR@@@Z
?Next@FS_ENUM@@QAEHXZ
??1BUFFER@@QAE@XZ
??0BUFFER@@QAE@I@Z
??1STRLIST@@QAE@XZ
??0STRLIST@@QAE@H@Z
??0NLS_STR@@IAE@PAGIH@Z
??1BITFIELD@@QAE@XZ
?DelSubStr@NLS_STR@@QAEXAAVISTR@@ABV2@@Z
?QueryChar@NLS_STR@@QBEGABVISTR@@@Z
??EISTR@@QAEAAV0@XZ
??0ISTR@@QAE@ABV0@@Z
NETUI_IsDBCS
??0NLS_STR@@QAE@PBG@Z
??BBITFIELD@@QAEKXZ
?strchr@NLS_STR@@QBEHPAVISTR@@G@Z
??4BITFIELD@@QAEAAV0@K@Z
??0BITFIELD@@QAE@K@Z
??0NLS_STR@@QAE@XZ
??4NLS_STR@@QAEAAV0@ABV0@@Z
?strrchr@NLS_STR@@QBEHPAVISTR@@G@Z
??BBITFIELD@@QAEGXZ
?MapCopyFrom@NLS_STR@@QAEJPBGI@Z
?InsertStr@NLS_STR@@QAEHABV1@AAVISTR@@@Z
?InsertParams@NLS_STR@@QAEJPAPBV1@@Z
?Next@ITER_SL@@QAEPAXXZ
?QueryNumElem@SLIST@@QAEIXZ
??1ITER_STRLIST@@QAE@XZ
??0ITER_STRLIST@@QAE@AAVSTRLIST@@@Z
??8BITFIELD@@QAEHAAV0@@Z
??0BITFIELD@@QAE@ABV0@@Z
??4BITFIELD@@QAEAAV0@ABV0@@Z
?Resize@BITFIELD@@QAEJI@Z
??_4BITFIELD@@QAEXG@Z
??0ITER_SL@@QAE@PAVSLIST@@@Z
?QueryProp@ITER_SL@@QAEPAXXZ
??0SLIST@@QAE@XZ
?Remove@SLIST@@QAEPAXAAVITER_SL@@@Z
?SetIters@SLIST@@IAEXPAVSL_NODE@@@Z
??1ITER_SL@@QAE@XZ
?Reset@ITER_SL@@QAEXXZ
NETUI_stricmp
??1SLIST@@QAE@XZ
?AppendChar@NLS_STR@@QAEJG@Z
?strlen@NLS_STR@@QBEIXZ
?strstr@NLS_STR@@QBEHPAVISTR@@ABV1@@Z
??YNLS_STR@@QAEAAV0@ABV0@@Z
NETUI_strcmp
?QueryNumChar@NLS_STR@@QBEIXZ
??_4BITFIELD@@QAEXABV0@@Z
?Append@NLS_STR@@QAEJABV1@@Z
??9NLS_STR@@QBEHABV0@@Z
??8NLS_STR@@QBEHABV0@@Z
??_5BITFIELD@@QAEXABV0@@Z
?SetAllBits@BITFIELD@@QAEXW4BITVALUES@@@Z
??2ALLOC_BASE@@SGPAXIPAX@Z
?CopyFrom@NLS_STR@@QAEJPBGI@Z
?InsertParams@NLS_STR@@QAAJIPBV1@ZZ
??0BITFIELD@@QAE@G@Z
??4NLS_STR@@QAEAAV0@PBG@Z
??1NLS_STR@@QAE@XZ
?CreateNew@NEW_LM_OBJ@@QAEJXZ
?CompareACL@NET_ACCESS_1@@QAEHPAV1@@Z
??0NET_ACCESS_1@@QAE@PBG0@Z
?Write@NEW_LM_OBJ@@QAEJXZ
?QueryServer@LOCATION@@QBEPBGXZ
??1LOCATION@@QAE@XZ
?CheckIfNT@LOCATION@@QAEJPAH@Z
??0LOCATION@@QAE@PBGH@Z
??1OS_SECURITY_DESCRIPTOR@@QAE@XZ
??1OS_SID@@QAE@XZ
??1NET_ACCESS_1@@QAE@XZ
?SetOwner@OS_SECURITY_DESCRIPTOR@@QAEJABVOS_SID@@H@Z
?QuerySystemSid@NT_ACCOUNTS_UTILITY@@SGJW4UI_SystemSid@@PAVOS_SID@@PBG@Z
??0OS_SID@@QAE@PAXHPAVOS_SECURITY_DESCRIPTOR@@@Z
??0OS_SECURITY_DESCRIPTOR@@QAE@PAXH@Z
??1OS_ACL@@QAE@XZ
??1OS_ACE@@QAE@XZ
?SetDACL@OS_SECURITY_DESCRIPTOR@@QAEJHPBVOS_ACL@@H@Z
?AddACE@OS_ACL@@QAEJKABVOS_ACE@@@Z
?SetSID@OS_ACE@@QAEJABVOS_SID@@@Z
?SetAccessMask@OS_ACE@@QAEXK@Z
??0OS_ACE@@QAE@PAX@Z
??0OS_ACL@@QAE@PAU_ACL@@HPAVOS_SECURITY_DESCRIPTOR@@@Z
?Compare@OS_SECURITY_DESCRIPTOR@@QAEJPAV1@PAH111PAU_GENERIC_MAPPING@@2HH@Z
?SetGroup@OS_SECURITY_DESCRIPTOR@@QAEJHPBVOS_SID@@H@Z
?SetOwner@OS_SECURITY_DESCRIPTOR@@QAEJHPBVOS_SID@@H@Z
?SetSACL@OS_SECURITY_DESCRIPTOR@@QAEJHPBVOS_ACL@@H@Z
?SetName@NET_ACCESS@@QAEJPBG@Z
?QueryFailingName@NET_ACCESS_1@@QBEJPAVNLS_STR@@PAW4PERMNAME_TYPE@@@Z
?Delete@NET_ACCESS@@QAEJXZ
?WriteNew@NEW_LM_OBJ@@QAEJXZ
?CopyAccessPerms@NET_ACCESS_1@@QAEJABV1@@Z
?SetAuditFlags@NET_ACCESS_1@@QAEJF@Z
?QueryServerName@NET_ACCESS@@QBEPBGXZ
?QueryACECount@NET_ACCESS_1@@QBEIXZ
?SetPerm@NET_ACCESS_1@@QAEJPBGW4PERMNAME_TYPE@@I@Z
?ClearPerms@NET_ACCESS_1@@QAEJXZ
??1DOMAIN_WITH_DC_CACHE@@QAE@XZ
?QueryAnyDC@DOMAIN@@QBEPBGXZ
?GetInfo@DOMAIN_WITH_DC_CACHE@@UAEJXZ
??0DOMAIN_WITH_DC_CACHE@@QAE@PBGH@Z
??1WKSTA_10@@QAE@XZ
I_MNetComputerNameCompare
?QueryLogonDomain@WKSTA_10@@QBEPBGXZ
??0WKSTA_10@@QAE@PBG@Z
?QueryName@OS_SID@@QBEJPAVNLS_STR@@PBGPAX@Z
?QueryOwner@OS_SECURITY_DESCRIPTOR@@QBEJPAHPAPAVOS_SID@@0@Z
??1API_SESSION@@QAE@XZ
??1LSA_POLICY@@QAE@XZ
??1LSA_TRANSLATED_SID_MEM@@QAE@XZ
??1LSA_REF_DOMAIN_MEM@@QAE@XZ
??1LSA_TRANSLATED_NAME_MEM@@QAE@XZ
??1LSA_ACCT_DOM_INFO_MEM@@QAE@XZ
?QueryFailingNameIndex@LSA_TRANSLATED_SID_MEM@@QAEHPAK@Z
?TranslateNamesToSids@LSA_POLICY@@QAEJPBQBGKPAVLSA_TRANSLATED_SID_MEM@@PAVLSA_REF_DOMAIN_MEM@@@Z
?BuildQualifiedAccountName@NT_ACCOUNTS_UTILITY@@SGJPAVNLS_STR@@ABV2@1PBV2@2W4_SID_NAME_USE@@@Z
?Copy@OS_SID@@QAEJABV1@@Z
??0OS_SID@@QAE@PAXKPAVOS_SECURITY_DESCRIPTOR@@@Z
?GetAccountDomain@LSA_POLICY@@QBEJPAVLSA_ACCT_DOM_INFO_MEM@@@Z
?QueryLastSubAuthority@OS_SID@@QBEJPAPAK@Z
??0LSA_ACCT_DOM_INFO_MEM@@QAE@H@Z
?TranslateSidsToNames@LSA_POLICY@@QAEJPBQAXKPAVLSA_TRANSLATED_NAME_MEM@@PAVLSA_REF_DOMAIN_MEM@@@Z
??0LSA_TRANSLATED_NAME_MEM@@QAE@H@Z
??0LSA_REF_DOMAIN_MEM@@QAE@H@Z
??0LSA_TRANSLATED_SID_MEM@@QAE@H@Z
??0LSA_POLICY@@QAE@PBGK@Z
??0API_SESSION@@QAE@PBGH@Z
?DeleteACE@OS_ACL@@QAEJK@Z
??8OS_SID@@QBEHABV0@@Z
?QuerySID@OS_ACE@@QBEJPAPAVOS_SID@@@Z
?QueryACE@OS_ACL@@QBEJKPAVOS_ACE@@@Z
?QueryACECount@OS_ACL@@QBEJPAK@Z
?GetQualifiedAccountNames@NT_ACCOUNTS_UTILITY@@SGJAAVLSA_POLICY@@QAXPBQAXKHPAVSTRLIST@@PAKPAW4_SID_NAME_USE@@PAJPBG3333@Z
?TrimLastSubAuthority@OS_SID@@QAEJPAK@Z
?Next@OS_SACL_SUBJECT_ITER@@UAEHPAJ@Z
??1OS_SACL_SUBJECT_ITER@@QAE@XZ
??0OS_SACL_SUBJECT_ITER@@QAE@PAVOS_ACL@@PAU_GENERIC_MAPPING@@1HH@Z
?QuerySACL@OS_SECURITY_DESCRIPTOR@@QBEJPAHPAPAVOS_ACL@@0@Z
?Next@OS_DACL_SUBJECT_ITER@@UAEHPAJ@Z
??1OS_DACL_SUBJECT_ITER@@QAE@XZ
??0OS_DACL_SUBJECT_ITER@@QAE@PAVOS_ACL@@PAU_GENERIC_MAPPING@@1HH@Z
?QueryDACL@OS_SECURITY_DESCRIPTOR@@QBEJPAHPAPAVOS_ACL@@0@Z
?QueryAccessMask@OS_ACE@@QBEKXZ
?QueryGroup@OS_SECURITY_DESCRIPTOR@@QBEJPAHPAPAVOS_SID@@0@Z
?Copy@OS_SECURITY_DESCRIPTOR@@QAEJABV1@@Z
?QuerySubAuthorityCount@OS_SID@@QBEJPAPAE@Z
??1LSA_AUDIT_EVENT_INFO_MEM@@QAE@XZ
?GetAuditEventInfo@LSA_POLICY@@QAEJPAVLSA_AUDIT_EVENT_INFO_MEM@@@Z
??0LSA_AUDIT_EVENT_INFO_MEM@@QAE@H@Z
?Next@USER0_ENUM_ITER@@QAEPBVUSER0_ENUM_OBJ@@PAJH@Z
??1LOC_LM_RESUME_ENUM@@QAE@XZ
??1LOC_LM_ENUM@@QAE@XZ
??1LM_RESUME_ENUM_ITER@@IAE@XZ
??1LM_ENUM_ITER@@IAE@XZ
??RGROUP0_ENUM_ITER@@QAEPBVGROUP0_ENUM_OBJ@@XZ
??0GROUP0_ENUM_ITER@@QAE@AAVGROUP0_ENUM@@@Z
?GetInfo@LM_ENUM@@QAEJXZ
??0GROUP0_ENUM@@QAE@ABVLOCATION@@PBG@Z
??0USER0_ENUM_ITER@@QAE@AAVUSER0_ENUM@@@Z
?GetInfo@LM_RESUME_ENUM@@QAEJH@Z
??0USER0_ENUM@@QAE@ABVLOCATION@@PBGH@Z
??0NET_NAME@@QAE@PBGW4NETNAME_TYPE@@@Z
?QueryComputerName@NET_NAME@@QAEJPAVNLS_STR@@@Z
??1NET_NAME@@QAE@XZ
?SetGroup@OS_SECURITY_DESCRIPTOR@@QAEJABVOS_SID@@H@Z
?GetInfo@NEW_LM_OBJ@@QAEJXZ
?QueryHelpContext@DIALOG_WINDOW@@MAEKXZ
?QueryHelpFile@DIALOG_WINDOW@@MAEPBGK@Z
?OnValidationError@DIALOG_WINDOW@@MAEXIJ@Z
?OnControlError@DIALOG_WINDOW@@MAEXIJ@Z
?OnSysColorChange@DIALOG_WINDOW@@MAEXXZ
?OnCtlColor@DIALOG_WINDOW@@MAEPAUHBRUSH__@@PAUHDC__@@PAUHWND__@@PAI@Z
?OnDlgDeactivation@DIALOG_WINDOW@@MAEHABVACTIVATION_EVENT@@@Z
?OnDlgActivation@DIALOG_WINDOW@@MAEHABVACTIVATION_EVENT@@@Z
?OnScrollBarThumb@DIALOG_WINDOW@@MAEHABVSCROLL_THUMB_EVENT@@@Z
?OnScrollBar@DIALOG_WINDOW@@MAEHABVSCROLL_EVENT@@@Z
?OnTimer@CANCEL_TASK_DIALOG@@MAEHABVTIMER_EVENT@@@Z
?OnCancel@DIALOG_WINDOW@@MAEHXZ
?OnOK@DIALOG_WINDOW@@MAEHXZ
?OnCommand@DIALOG_WINDOW@@MAEHABVCONTROL_EVENT@@@Z
?QueryRobustHwnd@DIALOG_WINDOW@@UBEPAUHWND__@@XZ
?OnUserMessage@OWNER_WINDOW@@MAEHABVEVENT@@@Z
??0CANCEL_TASK_DIALOG@@QAE@IPAUHWND__@@PBGKJW4ELLIPSIS_STYLE@@@Z
??1CANCEL_TASK_DIALOG@@QAE@XZ
?Process@DIALOG_WINDOW@@QAEJPAH@Z
?MsgPopup@@YGHABVOWNINGWND@@JW4MSG_SEVERITY@@@Z
??0RESOURCE_STR@@QAE@J@Z
??1AUTO_CURSOR@@QAE@XZ
??1MASK_MAP@@QAE@XZ
?Add@MASK_MAP@@QAEJQAUUS_IDS_PAIRS@@G@Z
?Load@NLS_STR@@QAEJJ@Z
??0MASK_MAP@@QAE@XZ
?MsgPopup@@YGHABVOWNINGWND@@JW4MSG_SEVERITY@@IPBG2I@Z
??0AUTO_CURSOR@@QAE@PBG@Z
?SetText@SLT_ELLIPSIS@@QAEJPBG@Z
?MsgPopup@@YGHABVOWNINGWND@@JW4MSG_SEVERITY@@II@Z
?MsgPopup@@YGHABVOWNINGWND@@JW4MSG_SEVERITY@@IPBGI@Z
?Init@BASE_ELLIPSIS@@SGJXZ
?Init@BLT@@SGJPAUHINSTANCE__@@IIII@Z
?Term@BLT@@SGXPAUHINSTANCE__@@@Z
?Term@BASE_ELLIPSIS@@SGXXZ
??1POPUP_MENU@@QAE@XZ
?EnableItem@MENU_BASE@@QBEIIHI@Z
??0POPUP_MENU@@QAE@PAUHMENU__@@@Z
?MayRun@DIALOG_WINDOW@@MAEHXZ
?OnTimer@DIALOG_WINDOW@@MAEHABVTIMER_EVENT@@@Z
?QueryHwnd@WINDOW@@QBEPAUHWND__@@XZ
?Process@DIALOG_WINDOW@@QAEJPAI@Z
?Add@MASK_MAP@@QAEJABVBITFIELD@@ABVNLS_STR@@H@Z
?IsPresent@MASK_MAP@@QAEHPAVBITFIELD@@@Z
??1WINDOW@@QAE@XZ
??1DIALOG_WINDOW@@QAE@XZ
?ClaimFocus@CONTROL_WINDOW@@QAEXXZ
?SetText@WINDOW@@QAEXPBG@Z
?SetText@WINDOW@@QAEXABVNLS_STR@@@Z
?Enable@WINDOW@@QAEXH@Z
?Show@WINDOW@@QAEHH@Z
??0PUSH_BUTTON@@QAE@PAVOWNER_WINDOW@@I@Z
??0SLE@@QAE@PAVOWNER_WINDOW@@II@Z
??0SLT@@QAE@PAVOWNER_WINDOW@@I@Z
??0DIALOG_WINDOW@@QAE@ABVIDRESOURCE@@ABVPWND2HWND@@H@Z
?Dismiss@DIALOG_WINDOW@@IAEXI@Z
?MsgPopup@@YGHABVOWNINGWND@@JW4MSG_SEVERITY@@KIQAPAVNLS_STR@@I@Z
?StringToBits@MASK_MAP@@QAEJABVNLS_STR@@PAVBITFIELD@@HPAI@Z
?QueryEventEffects@CONTROL_VALUE@@UAEIABVCONTROL_EVENT@@@Z
?SetControlValueFocus@CONTROL_VALUE@@UAEXXZ
?SetTabStop@CONTROL_VALUE@@MAEXH@Z
?RestoreValue@CONTROL_VALUE@@MAEXH@Z
?SaveValue@CONTROL_VALUE@@MAEXH@Z
?AfterGroupActions@CONTROL_GROUP@@MAEXXZ
?OnGroupAction@CONTROL_GROUP@@MAEJPAV1@@Z
?OnUserAction@CONTROL_GROUP@@MAEJPAVCONTROL_WINDOW@@ABVCONTROL_EVENT@@@Z
?SetState@STATE_BUTTON_CONTROL@@IAEXI@Z
?QueryState@STATE_BUTTON_CONTROL@@IBEIXZ
?QueryLeftMargin@DTE@@UBEIXZ
?AppendDataTo@STR_DTE@@UBEJPAVNLS_STR@@@Z
?Paint@STR_DTE@@UBEXPAUHDC__@@PBUtagRECT@@@Z
?QueryItem@BLT_LISTBOX@@QBEPAVLBI@@H@Z
?QueryCurrentItem@LIST_CONTROL@@QBEHXZ
?Compare_HAWforHawaii@LBI@@UBEHABVNLS_STR@@@Z
?CalcHeight@LBI@@UAEII@Z
?IsDestroyable@LBI@@MAEHXZ
?Paint@DISPLAY_TABLE@@QBEXPAVLISTBOX@@PAUHDC__@@PBUtagRECT@@PAUGUILTT_INFO@@@Z
??ADISPLAY_TABLE@@QAEAAPAVDTE@@I@Z
??0DISPLAY_TABLE@@QAE@IPBI@Z
??0DM_DTE@@QAE@PAVDISPLAY_MAP@@@Z
?ReleaseLBI@BLT_LISTBOX@@EAEXPAVLBI@@@Z
?RequestLBI@BLT_LISTBOX@@EAEPAVLBI@@PBUtagDRAWITEMSTRUCT@@@Z
?OnCtlColor@CONTROL_WINDOW@@UAEPAUHBRUSH__@@PAUHDC__@@PAUHWND__@@PAI@Z
?IndicateError@CONTROL_WINDOW@@UAEXJ@Z
?Validate@CONTROL_WINDOW@@UAEJXZ
?OnUserAction@CONTROL_WINDOW@@MAEJABVCONTROL_EVENT@@@Z
?CD_Guiltt@BLT_LISTBOX@@MAEJHPAVNLS_STR@@@Z
?CD_VKey@LISTBOX@@MAEHGG@Z
?CD_Char@BLT_LISTBOX@@MAEHGG@Z
?CD_Measure@BLT_LISTBOX@@MAEHPAUtagMEASUREITEMSTRUCT@@@Z
?CD_Draw@LISTBOX@@MAEHPAUtagDRAWITEMSTRUCT@@@Z
?QueryEventEffects@LIST_CONTROL@@MAEIABVCONTROL_EVENT@@@Z
?SetControlValueFocus@CONTROL_WINDOW@@UAEXXZ
?SetTabStop@CONTROL_WINDOW@@MAEXH@Z
?RestoreValue@LIST_CONTROL@@MAEXH@Z
?SaveValue@LIST_CONTROL@@MAEXH@Z
?Invalidate@WINDOW@@QAEXH@Z
?SelectItem@LIST_CONTROL@@QAEXHH@Z
?QueryCount@LIST_CONTROL@@QBEHXZ
?AddItem@BLT_LISTBOX@@QAEHPAVLBI@@@Z
?DeleteAllItems@LIST_CONTROL@@QAEXXZ
?SetRedraw@WINDOW@@QAEXH@Z
?DeleteItem@LIST_CONTROL@@QAEHH@Z
?QueryUserSelectedBits@SET_OF_AUDIT_CATEGORIES@@QAEJPAVBITFIELD@@0@Z
?Enable@SET_OF_AUDIT_CATEGORIES@@QAEXHH@Z
?RemoveSelection@LIST_CONTROL@@QAEXXZ
??0SET_OF_AUDIT_CATEGORIES@@QAE@PAVOWNER_WINDOW@@IIIPAVMASK_MAP@@PAVBITFIELD@@2H@Z
??1SET_OF_AUDIT_CATEGORIES@@QAE@XZ
??1NT_USER_BROWSER_DIALOG@@QAE@XZ
?ApplyPermissionsToCheckBoxes@SET_OF_AUDIT_CATEGORIES@@QAEJPAVBITFIELD@@0@Z
??1BROWSER_SUBJECT_ITER@@QAE@XZ
?Next@BROWSER_SUBJECT_ITER@@QAEJPAPAVBROWSER_SUBJECT@@@Z
?QueryQualifiedName@BROWSER_SUBJECT@@QBEJPAVNLS_STR@@PBV2@H@Z
??0BROWSER_SUBJECT_ITER@@QAE@PAVNT_USER_BROWSER_DIALOG@@@Z
??0NT_USER_BROWSER_DIALOG@@QAE@PBGPAUHWND__@@0KK0KKKPBVADMIN_AUTHORITY@@@Z
?MakeDefault@PUSH_BUTTON@@QAEXXZ
?CD_Guiltt@CONTROL_WINDOW@@MAEJHPAVNLS_STR@@@Z
?CD_VKey@CONTROL_WINDOW@@MAEHGG@Z
?CD_Char@CONTROL_WINDOW@@MAEHGG@Z
?CD_Measure@CONTROL_WINDOW@@MAEHPAUtagMEASUREITEMSTRUCT@@@Z
?CD_Draw@CONTROL_WINDOW@@MAEHPAUtagDRAWITEMSTRUCT@@@Z
?QueryEventEffects@BUTTON_CONTROL@@MAEIABVCONTROL_EVENT@@@Z
?RestoreValue@STATE_BUTTON_CONTROL@@MAEXH@Z
?SaveValue@STATE_BUTTON_CONTROL@@MAEXH@Z
??0STATE_BUTTON_CONTROL@@IAE@PAVOWNER_WINDOW@@I@Z
??1FONT@@QAE@XZ
??0SLT_FONT@@QAE@PAVOWNER_WINDOW@@IW4FontType@@@Z
?QuerySelection@RADIO_GROUP@@QBEIXZ
?QueryItemText@STRING_LIST_CONTROL@@QBEJPAVNLS_STR@@H@Z
??1LIST_CONTROL@@IAE@XZ
?InvalidateItem@LISTBOX@@QAEXHH@Z
?QueryOwnerHwnd@WINDOW@@QBEPAUHWND__@@XZ
?InsertItem@STRING_LIST_CONTROL@@QAEHHPBG@Z
?EnumStrings@MASK_MAP@@QAEJPAVNLS_STR@@PAH1H@Z
?SetSize@WINDOW@@QAEXHHH@Z
?QuerySize@WINDOW@@QBE?AVXYDIMENSION@@XZ
?SetPos@WINDOW@@QAEXVXYPOINT@@HPAV1@@Z
??1DISPLAY_CONTEXT@@QAE@XZ
?SetSize@WINDOW@@QAEXVXYDIMENSION@@H@Z
?QueryTextExtent@DEVICE_CONTEXT@@QBE?AVXYDIMENSION@@ABVNLS_STR@@@Z
??0DISPLAY_CONTEXT@@QAE@PAUHWND__@@@Z
?QueryPos@WINDOW@@QBE?AVXYPOINT@@XZ
??0COMBOBOX@@QAE@PAVOWNER_WINDOW@@II@Z
?AddItem@STRING_LIST_CONTROL@@QAEHPBG@Z
?FindItemExact@STRING_LIST_CONTROL@@QBEHPBG@Z
?QueryDmDte@SUBJECT_BITMAP_BLOCK@@QAEPAVDMID_DTE@@HHH@Z
??0LBI@@QAE@XZ
??1LBI@@UAE@XZ
?BitsToString@MASK_MAP@@QAEJABVBITFIELD@@PAVNLS_STR@@HPAI@Z
?QueryBits@MASK_MAP@@QAEJIPAVBITFIELD@@PAVNLS_STR@@PAH@Z
??1SUBJECT_BITMAP_BLOCK@@QAE@XZ
?QueryWidth@DISPLAY_MAP@@QBEIXZ
??0SUBJECT_BITMAP_BLOCK@@QAE@XZ
??0BLT_LISTBOX@@QAE@PAVOWNER_WINDOW@@IHW4FontType@@H@Z
?QuerySelItems@LIST_CONTROL@@QBEJPAHH@Z
?QuerySelCount@LIST_CONTROL@@QBEHXZ
?QueryHelpContext@NT_USER_BROWSER_DIALOG@@UAEKXZ
?QueryHelpFile@NT_USER_BROWSER_DIALOG@@UAEPBGK@Z
?OnDlgDeactivation@NT_USER_BROWSER_DIALOG@@MAEHABVACTIVATION_EVENT@@@Z
?OnOK@NT_USER_BROWSER_DIALOG@@MAEHXZ
?OnCommand@NT_USER_BROWSER_DIALOG@@MAEHABVCONTROL_EVENT@@@Z
?OnUserMessage@NT_USER_BROWSER_DIALOG@@MAEHABVEVENT@@@Z
?SetSelection@RADIO_GROUP@@QAEXI@Z
??1ARRAY_CONTROLVAL_CID_PAIR@@QAE@XZ
??1RADIO_GROUP@@QAE@XZ
??0CONTROL_WINDOW@@QAE@PAVOWNER_WINDOW@@I@Z
?Enable@MAGIC_GROUP@@QAEXH@Z
?AddAssociation@MAGIC_GROUP@@QAEJIPAVCONTROL_VALUE@@@Z
??0MAGIC_GROUP@@QAE@PAVOWNER_WINDOW@@IHIPAVCONTROL_GROUP@@@Z
?IsValid@DIALOG_WINDOW@@MAEHXZ
?MayRun@CANCEL_TASK_DIALOG@@MAEHXZ
?QueryObjectName@CANCEL_TASK_DIALOG@@MAEJPAVNLS_STR@@@Z
?FilterMessage@DIALOG_WINDOW@@MAEHPAUtagMSG@@@Z
?IsPumpFinished@DIALOG_WINDOW@@MAEHXZ
WNetFMXGetPermCaps
WNetFMXGetPermHelp
WNetFMXEditPerm
NetpReleasePrivilege
NetpGetPrivilege
SendMessageW
CharNextW
WinHelpW
UpdateWindow
InvalidateRect
SelectObject
lstrcpynW
GetVolumeInformationW
GetLastError
GetDriveTypeW
DisableThreadLibraryCalls
GetComputerNameW
EqualSid
LsaGetRemoteUserName
SetFileSecurityW
GetFileSecurityW
DllMain
EditAuditInfo
EditOwnerInfo
EditPermissionInfo
FMExtensionProcW
SedDiscretionaryAclEditor
SedSystemAclEditor
SedTakeOwnership
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ