DllMain
EditAuditInfo
EditOwnerInfo
EditPermissionInfo
FMExtensionProcW
SedDiscretionaryAclEditor
SedSystemAclEditor
SedTakeOwnership
Static task
static1
Behavioral task
behavioral1
Sample
744dd3e4543d1bec8ed086f1010b2b5d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
744dd3e4543d1bec8ed086f1010b2b5d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
744dd3e4543d1bec8ed086f1010b2b5d_JaffaCakes118
Size
127KB
MD5
744dd3e4543d1bec8ed086f1010b2b5d
SHA1
3445eaed3433936f95a16b3a378c60764c10d525
SHA256
d2f11828bdd5774542d245f4a6bff2a797dff47101e0ef12149be4e4fb84fc60
SHA512
a549143922a532f900cbf8f56cc4dea7dc9b4e52c7608af89a9d53f768c8a6c54e434811dba49ba8f518b861377297eb484a5a2d329d99c35ee5063d5532f6f2
SSDEEP
3072:FuVsLs7EEjLpqHv+9GT7RQ9sSgC5GB/dl:FuKLsrpjVG1
Checks for missing Authenticode signature.
resource |
---|
744dd3e4543d1bec8ed086f1010b2b5d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
wcslen
??3@YAXPAX@Z
??2@YAPAXI@Z
free
_purecall
_adjust_fdiv
malloc
_initterm
NtClose
NtOpenFile
RtlDosPathNameToNtPathName_U
RtlFreeUnicodeString
?CopyFrom@NLS_STR@@QAEJABV1@@Z
?GetSelItem@@YGJPAUHWND__@@IPAVNLS_STR@@PAH@Z
??0NLS_STR@@QAE@I@Z
?QuerySelCount@FMX@@QBEIXZ
??0FMX@@QAE@PAUHWND__@@@Z
?Refresh@FMX@@QAEXXZ
?QueryFocus@FMX@@QBEIXZ
?DelSubStr@NLS_STR@@QAEXAAVISTR@@@Z
??YISTR@@QAEXH@Z
??0ISTR@@QAE@ABVNLS_STR@@@Z
??0NLS_STR@@QAE@ABV0@@Z
??2ALLOC_BASE@@SGPAXI@Z
??0DEC_STR@@QAE@KI@Z
?IsHeterogeneousSelection@FMX@@QAEHPAH@Z
?Add@SLIST@@QAEJPAX@Z
??3ALLOC_BASE@@SGXPAX@Z
?Resize@BUFFER@@QAEJI@Z
?QueryPtr@BUFFER@@QBEPAEXZ
?QuerySize@BUFFER@@QBEIXZ
?MapNTStatus@ERRMAP@@SGJJPAHJ@Z
??0W32_FS_ENUM@@QAE@PBG0W4FILE_TYPE@@HI@Z
?QueryName@FS_ENUM@@QBEJPAVNLS_STR@@@Z
?Next@FS_ENUM@@QAEHXZ
??1BUFFER@@QAE@XZ
??0BUFFER@@QAE@I@Z
??1STRLIST@@QAE@XZ
??0STRLIST@@QAE@H@Z
??0NLS_STR@@IAE@PAGIH@Z
??1BITFIELD@@QAE@XZ
?DelSubStr@NLS_STR@@QAEXAAVISTR@@ABV2@@Z
?QueryChar@NLS_STR@@QBEGABVISTR@@@Z
??EISTR@@QAEAAV0@XZ
??0ISTR@@QAE@ABV0@@Z
NETUI_IsDBCS
??0NLS_STR@@QAE@PBG@Z
??BBITFIELD@@QAEKXZ
?strchr@NLS_STR@@QBEHPAVISTR@@G@Z
??4BITFIELD@@QAEAAV0@K@Z
??0BITFIELD@@QAE@K@Z
??0NLS_STR@@QAE@XZ
??4NLS_STR@@QAEAAV0@ABV0@@Z
?strrchr@NLS_STR@@QBEHPAVISTR@@G@Z
??BBITFIELD@@QAEGXZ
?MapCopyFrom@NLS_STR@@QAEJPBGI@Z
?InsertStr@NLS_STR@@QAEHABV1@AAVISTR@@@Z
?InsertParams@NLS_STR@@QAEJPAPBV1@@Z
?Next@ITER_SL@@QAEPAXXZ
?QueryNumElem@SLIST@@QAEIXZ
??1ITER_STRLIST@@QAE@XZ
??0ITER_STRLIST@@QAE@AAVSTRLIST@@@Z
??8BITFIELD@@QAEHAAV0@@Z
??0BITFIELD@@QAE@ABV0@@Z
??4BITFIELD@@QAEAAV0@ABV0@@Z
?Resize@BITFIELD@@QAEJI@Z
??_4BITFIELD@@QAEXG@Z
??0ITER_SL@@QAE@PAVSLIST@@@Z
?QueryProp@ITER_SL@@QAEPAXXZ
??0SLIST@@QAE@XZ
?Remove@SLIST@@QAEPAXAAVITER_SL@@@Z
?SetIters@SLIST@@IAEXPAVSL_NODE@@@Z
??1ITER_SL@@QAE@XZ
?Reset@ITER_SL@@QAEXXZ
NETUI_stricmp
??1SLIST@@QAE@XZ
?AppendChar@NLS_STR@@QAEJG@Z
?strlen@NLS_STR@@QBEIXZ
?strstr@NLS_STR@@QBEHPAVISTR@@ABV1@@Z
??YNLS_STR@@QAEAAV0@ABV0@@Z
NETUI_strcmp
?QueryNumChar@NLS_STR@@QBEIXZ
??_4BITFIELD@@QAEXABV0@@Z
?Append@NLS_STR@@QAEJABV1@@Z
??9NLS_STR@@QBEHABV0@@Z
??8NLS_STR@@QBEHABV0@@Z
??_5BITFIELD@@QAEXABV0@@Z
?SetAllBits@BITFIELD@@QAEXW4BITVALUES@@@Z
??2ALLOC_BASE@@SGPAXIPAX@Z
?CopyFrom@NLS_STR@@QAEJPBGI@Z
?InsertParams@NLS_STR@@QAAJIPBV1@ZZ
??0BITFIELD@@QAE@G@Z
??4NLS_STR@@QAEAAV0@PBG@Z
??1NLS_STR@@QAE@XZ
?CreateNew@NEW_LM_OBJ@@QAEJXZ
?CompareACL@NET_ACCESS_1@@QAEHPAV1@@Z
??0NET_ACCESS_1@@QAE@PBG0@Z
?Write@NEW_LM_OBJ@@QAEJXZ
?QueryServer@LOCATION@@QBEPBGXZ
??1LOCATION@@QAE@XZ
?CheckIfNT@LOCATION@@QAEJPAH@Z
??0LOCATION@@QAE@PBGH@Z
??1OS_SECURITY_DESCRIPTOR@@QAE@XZ
??1OS_SID@@QAE@XZ
??1NET_ACCESS_1@@QAE@XZ
?SetOwner@OS_SECURITY_DESCRIPTOR@@QAEJABVOS_SID@@H@Z
?QuerySystemSid@NT_ACCOUNTS_UTILITY@@SGJW4UI_SystemSid@@PAVOS_SID@@PBG@Z
??0OS_SID@@QAE@PAXHPAVOS_SECURITY_DESCRIPTOR@@@Z
??0OS_SECURITY_DESCRIPTOR@@QAE@PAXH@Z
??1OS_ACL@@QAE@XZ
??1OS_ACE@@QAE@XZ
?SetDACL@OS_SECURITY_DESCRIPTOR@@QAEJHPBVOS_ACL@@H@Z
?AddACE@OS_ACL@@QAEJKABVOS_ACE@@@Z
?SetSID@OS_ACE@@QAEJABVOS_SID@@@Z
?SetAccessMask@OS_ACE@@QAEXK@Z
??0OS_ACE@@QAE@PAX@Z
??0OS_ACL@@QAE@PAU_ACL@@HPAVOS_SECURITY_DESCRIPTOR@@@Z
?Compare@OS_SECURITY_DESCRIPTOR@@QAEJPAV1@PAH111PAU_GENERIC_MAPPING@@2HH@Z
?SetGroup@OS_SECURITY_DESCRIPTOR@@QAEJHPBVOS_SID@@H@Z
?SetOwner@OS_SECURITY_DESCRIPTOR@@QAEJHPBVOS_SID@@H@Z
?SetSACL@OS_SECURITY_DESCRIPTOR@@QAEJHPBVOS_ACL@@H@Z
?SetName@NET_ACCESS@@QAEJPBG@Z
?QueryFailingName@NET_ACCESS_1@@QBEJPAVNLS_STR@@PAW4PERMNAME_TYPE@@@Z
?Delete@NET_ACCESS@@QAEJXZ
?WriteNew@NEW_LM_OBJ@@QAEJXZ
?CopyAccessPerms@NET_ACCESS_1@@QAEJABV1@@Z
?SetAuditFlags@NET_ACCESS_1@@QAEJF@Z
?QueryServerName@NET_ACCESS@@QBEPBGXZ
?QueryACECount@NET_ACCESS_1@@QBEIXZ
?SetPerm@NET_ACCESS_1@@QAEJPBGW4PERMNAME_TYPE@@I@Z
?ClearPerms@NET_ACCESS_1@@QAEJXZ
??1DOMAIN_WITH_DC_CACHE@@QAE@XZ
?QueryAnyDC@DOMAIN@@QBEPBGXZ
?GetInfo@DOMAIN_WITH_DC_CACHE@@UAEJXZ
??0DOMAIN_WITH_DC_CACHE@@QAE@PBGH@Z
??1WKSTA_10@@QAE@XZ
I_MNetComputerNameCompare
?QueryLogonDomain@WKSTA_10@@QBEPBGXZ
??0WKSTA_10@@QAE@PBG@Z
?QueryName@OS_SID@@QBEJPAVNLS_STR@@PBGPAX@Z
?QueryOwner@OS_SECURITY_DESCRIPTOR@@QBEJPAHPAPAVOS_SID@@0@Z
??1API_SESSION@@QAE@XZ
??1LSA_POLICY@@QAE@XZ
??1LSA_TRANSLATED_SID_MEM@@QAE@XZ
??1LSA_REF_DOMAIN_MEM@@QAE@XZ
??1LSA_TRANSLATED_NAME_MEM@@QAE@XZ
??1LSA_ACCT_DOM_INFO_MEM@@QAE@XZ
?QueryFailingNameIndex@LSA_TRANSLATED_SID_MEM@@QAEHPAK@Z
?TranslateNamesToSids@LSA_POLICY@@QAEJPBQBGKPAVLSA_TRANSLATED_SID_MEM@@PAVLSA_REF_DOMAIN_MEM@@@Z
?BuildQualifiedAccountName@NT_ACCOUNTS_UTILITY@@SGJPAVNLS_STR@@ABV2@1PBV2@2W4_SID_NAME_USE@@@Z
?Copy@OS_SID@@QAEJABV1@@Z
??0OS_SID@@QAE@PAXKPAVOS_SECURITY_DESCRIPTOR@@@Z
?GetAccountDomain@LSA_POLICY@@QBEJPAVLSA_ACCT_DOM_INFO_MEM@@@Z
?QueryLastSubAuthority@OS_SID@@QBEJPAPAK@Z
??0LSA_ACCT_DOM_INFO_MEM@@QAE@H@Z
?TranslateSidsToNames@LSA_POLICY@@QAEJPBQAXKPAVLSA_TRANSLATED_NAME_MEM@@PAVLSA_REF_DOMAIN_MEM@@@Z
??0LSA_TRANSLATED_NAME_MEM@@QAE@H@Z
??0LSA_REF_DOMAIN_MEM@@QAE@H@Z
??0LSA_TRANSLATED_SID_MEM@@QAE@H@Z
??0LSA_POLICY@@QAE@PBGK@Z
??0API_SESSION@@QAE@PBGH@Z
?DeleteACE@OS_ACL@@QAEJK@Z
??8OS_SID@@QBEHABV0@@Z
?QuerySID@OS_ACE@@QBEJPAPAVOS_SID@@@Z
?QueryACE@OS_ACL@@QBEJKPAVOS_ACE@@@Z
?QueryACECount@OS_ACL@@QBEJPAK@Z
?GetQualifiedAccountNames@NT_ACCOUNTS_UTILITY@@SGJAAVLSA_POLICY@@QAXPBQAXKHPAVSTRLIST@@PAKPAW4_SID_NAME_USE@@PAJPBG3333@Z
?TrimLastSubAuthority@OS_SID@@QAEJPAK@Z
?Next@OS_SACL_SUBJECT_ITER@@UAEHPAJ@Z
??1OS_SACL_SUBJECT_ITER@@QAE@XZ
??0OS_SACL_SUBJECT_ITER@@QAE@PAVOS_ACL@@PAU_GENERIC_MAPPING@@1HH@Z
?QuerySACL@OS_SECURITY_DESCRIPTOR@@QBEJPAHPAPAVOS_ACL@@0@Z
?Next@OS_DACL_SUBJECT_ITER@@UAEHPAJ@Z
??1OS_DACL_SUBJECT_ITER@@QAE@XZ
??0OS_DACL_SUBJECT_ITER@@QAE@PAVOS_ACL@@PAU_GENERIC_MAPPING@@1HH@Z
?QueryDACL@OS_SECURITY_DESCRIPTOR@@QBEJPAHPAPAVOS_ACL@@0@Z
?QueryAccessMask@OS_ACE@@QBEKXZ
?QueryGroup@OS_SECURITY_DESCRIPTOR@@QBEJPAHPAPAVOS_SID@@0@Z
?Copy@OS_SECURITY_DESCRIPTOR@@QAEJABV1@@Z
?QuerySubAuthorityCount@OS_SID@@QBEJPAPAE@Z
??1LSA_AUDIT_EVENT_INFO_MEM@@QAE@XZ
?GetAuditEventInfo@LSA_POLICY@@QAEJPAVLSA_AUDIT_EVENT_INFO_MEM@@@Z
??0LSA_AUDIT_EVENT_INFO_MEM@@QAE@H@Z
?Next@USER0_ENUM_ITER@@QAEPBVUSER0_ENUM_OBJ@@PAJH@Z
??1LOC_LM_RESUME_ENUM@@QAE@XZ
??1LOC_LM_ENUM@@QAE@XZ
??1LM_RESUME_ENUM_ITER@@IAE@XZ
??1LM_ENUM_ITER@@IAE@XZ
??RGROUP0_ENUM_ITER@@QAEPBVGROUP0_ENUM_OBJ@@XZ
??0GROUP0_ENUM_ITER@@QAE@AAVGROUP0_ENUM@@@Z
?GetInfo@LM_ENUM@@QAEJXZ
??0GROUP0_ENUM@@QAE@ABVLOCATION@@PBG@Z
??0USER0_ENUM_ITER@@QAE@AAVUSER0_ENUM@@@Z
?GetInfo@LM_RESUME_ENUM@@QAEJH@Z
??0USER0_ENUM@@QAE@ABVLOCATION@@PBGH@Z
??0NET_NAME@@QAE@PBGW4NETNAME_TYPE@@@Z
?QueryComputerName@NET_NAME@@QAEJPAVNLS_STR@@@Z
??1NET_NAME@@QAE@XZ
?SetGroup@OS_SECURITY_DESCRIPTOR@@QAEJABVOS_SID@@H@Z
?GetInfo@NEW_LM_OBJ@@QAEJXZ
?QueryHelpContext@DIALOG_WINDOW@@MAEKXZ
?QueryHelpFile@DIALOG_WINDOW@@MAEPBGK@Z
?OnValidationError@DIALOG_WINDOW@@MAEXIJ@Z
?OnControlError@DIALOG_WINDOW@@MAEXIJ@Z
?OnSysColorChange@DIALOG_WINDOW@@MAEXXZ
?OnCtlColor@DIALOG_WINDOW@@MAEPAUHBRUSH__@@PAUHDC__@@PAUHWND__@@PAI@Z
?OnDlgDeactivation@DIALOG_WINDOW@@MAEHABVACTIVATION_EVENT@@@Z
?OnDlgActivation@DIALOG_WINDOW@@MAEHABVACTIVATION_EVENT@@@Z
?OnScrollBarThumb@DIALOG_WINDOW@@MAEHABVSCROLL_THUMB_EVENT@@@Z
?OnScrollBar@DIALOG_WINDOW@@MAEHABVSCROLL_EVENT@@@Z
?OnTimer@CANCEL_TASK_DIALOG@@MAEHABVTIMER_EVENT@@@Z
?OnCancel@DIALOG_WINDOW@@MAEHXZ
?OnOK@DIALOG_WINDOW@@MAEHXZ
?OnCommand@DIALOG_WINDOW@@MAEHABVCONTROL_EVENT@@@Z
?QueryRobustHwnd@DIALOG_WINDOW@@UBEPAUHWND__@@XZ
?OnUserMessage@OWNER_WINDOW@@MAEHABVEVENT@@@Z
??0CANCEL_TASK_DIALOG@@QAE@IPAUHWND__@@PBGKJW4ELLIPSIS_STYLE@@@Z
??1CANCEL_TASK_DIALOG@@QAE@XZ
?Process@DIALOG_WINDOW@@QAEJPAH@Z
?MsgPopup@@YGHABVOWNINGWND@@JW4MSG_SEVERITY@@@Z
??0RESOURCE_STR@@QAE@J@Z
??1AUTO_CURSOR@@QAE@XZ
??1MASK_MAP@@QAE@XZ
?Add@MASK_MAP@@QAEJQAUUS_IDS_PAIRS@@G@Z
?Load@NLS_STR@@QAEJJ@Z
??0MASK_MAP@@QAE@XZ
?MsgPopup@@YGHABVOWNINGWND@@JW4MSG_SEVERITY@@IPBG2I@Z
??0AUTO_CURSOR@@QAE@PBG@Z
?SetText@SLT_ELLIPSIS@@QAEJPBG@Z
?MsgPopup@@YGHABVOWNINGWND@@JW4MSG_SEVERITY@@II@Z
?MsgPopup@@YGHABVOWNINGWND@@JW4MSG_SEVERITY@@IPBGI@Z
?Init@BASE_ELLIPSIS@@SGJXZ
?Init@BLT@@SGJPAUHINSTANCE__@@IIII@Z
?Term@BLT@@SGXPAUHINSTANCE__@@@Z
?Term@BASE_ELLIPSIS@@SGXXZ
??1POPUP_MENU@@QAE@XZ
?EnableItem@MENU_BASE@@QBEIIHI@Z
??0POPUP_MENU@@QAE@PAUHMENU__@@@Z
?MayRun@DIALOG_WINDOW@@MAEHXZ
?OnTimer@DIALOG_WINDOW@@MAEHABVTIMER_EVENT@@@Z
?QueryHwnd@WINDOW@@QBEPAUHWND__@@XZ
?Process@DIALOG_WINDOW@@QAEJPAI@Z
?Add@MASK_MAP@@QAEJABVBITFIELD@@ABVNLS_STR@@H@Z
?IsPresent@MASK_MAP@@QAEHPAVBITFIELD@@@Z
??1WINDOW@@QAE@XZ
??1DIALOG_WINDOW@@QAE@XZ
?ClaimFocus@CONTROL_WINDOW@@QAEXXZ
?SetText@WINDOW@@QAEXPBG@Z
?SetText@WINDOW@@QAEXABVNLS_STR@@@Z
?Enable@WINDOW@@QAEXH@Z
?Show@WINDOW@@QAEHH@Z
??0PUSH_BUTTON@@QAE@PAVOWNER_WINDOW@@I@Z
??0SLE@@QAE@PAVOWNER_WINDOW@@II@Z
??0SLT@@QAE@PAVOWNER_WINDOW@@I@Z
??0DIALOG_WINDOW@@QAE@ABVIDRESOURCE@@ABVPWND2HWND@@H@Z
?Dismiss@DIALOG_WINDOW@@IAEXI@Z
?MsgPopup@@YGHABVOWNINGWND@@JW4MSG_SEVERITY@@KIQAPAVNLS_STR@@I@Z
?StringToBits@MASK_MAP@@QAEJABVNLS_STR@@PAVBITFIELD@@HPAI@Z
?QueryEventEffects@CONTROL_VALUE@@UAEIABVCONTROL_EVENT@@@Z
?SetControlValueFocus@CONTROL_VALUE@@UAEXXZ
?SetTabStop@CONTROL_VALUE@@MAEXH@Z
?RestoreValue@CONTROL_VALUE@@MAEXH@Z
?SaveValue@CONTROL_VALUE@@MAEXH@Z
?AfterGroupActions@CONTROL_GROUP@@MAEXXZ
?OnGroupAction@CONTROL_GROUP@@MAEJPAV1@@Z
?OnUserAction@CONTROL_GROUP@@MAEJPAVCONTROL_WINDOW@@ABVCONTROL_EVENT@@@Z
?SetState@STATE_BUTTON_CONTROL@@IAEXI@Z
?QueryState@STATE_BUTTON_CONTROL@@IBEIXZ
?QueryLeftMargin@DTE@@UBEIXZ
?AppendDataTo@STR_DTE@@UBEJPAVNLS_STR@@@Z
?Paint@STR_DTE@@UBEXPAUHDC__@@PBUtagRECT@@@Z
?QueryItem@BLT_LISTBOX@@QBEPAVLBI@@H@Z
?QueryCurrentItem@LIST_CONTROL@@QBEHXZ
?Compare_HAWforHawaii@LBI@@UBEHABVNLS_STR@@@Z
?CalcHeight@LBI@@UAEII@Z
?IsDestroyable@LBI@@MAEHXZ
?Paint@DISPLAY_TABLE@@QBEXPAVLISTBOX@@PAUHDC__@@PBUtagRECT@@PAUGUILTT_INFO@@@Z
??ADISPLAY_TABLE@@QAEAAPAVDTE@@I@Z
??0DISPLAY_TABLE@@QAE@IPBI@Z
??0DM_DTE@@QAE@PAVDISPLAY_MAP@@@Z
?ReleaseLBI@BLT_LISTBOX@@EAEXPAVLBI@@@Z
?RequestLBI@BLT_LISTBOX@@EAEPAVLBI@@PBUtagDRAWITEMSTRUCT@@@Z
?OnCtlColor@CONTROL_WINDOW@@UAEPAUHBRUSH__@@PAUHDC__@@PAUHWND__@@PAI@Z
?IndicateError@CONTROL_WINDOW@@UAEXJ@Z
?Validate@CONTROL_WINDOW@@UAEJXZ
?OnUserAction@CONTROL_WINDOW@@MAEJABVCONTROL_EVENT@@@Z
?CD_Guiltt@BLT_LISTBOX@@MAEJHPAVNLS_STR@@@Z
?CD_VKey@LISTBOX@@MAEHGG@Z
?CD_Char@BLT_LISTBOX@@MAEHGG@Z
?CD_Measure@BLT_LISTBOX@@MAEHPAUtagMEASUREITEMSTRUCT@@@Z
?CD_Draw@LISTBOX@@MAEHPAUtagDRAWITEMSTRUCT@@@Z
?QueryEventEffects@LIST_CONTROL@@MAEIABVCONTROL_EVENT@@@Z
?SetControlValueFocus@CONTROL_WINDOW@@UAEXXZ
?SetTabStop@CONTROL_WINDOW@@MAEXH@Z
?RestoreValue@LIST_CONTROL@@MAEXH@Z
?SaveValue@LIST_CONTROL@@MAEXH@Z
?Invalidate@WINDOW@@QAEXH@Z
?SelectItem@LIST_CONTROL@@QAEXHH@Z
?QueryCount@LIST_CONTROL@@QBEHXZ
?AddItem@BLT_LISTBOX@@QAEHPAVLBI@@@Z
?DeleteAllItems@LIST_CONTROL@@QAEXXZ
?SetRedraw@WINDOW@@QAEXH@Z
?DeleteItem@LIST_CONTROL@@QAEHH@Z
?QueryUserSelectedBits@SET_OF_AUDIT_CATEGORIES@@QAEJPAVBITFIELD@@0@Z
?Enable@SET_OF_AUDIT_CATEGORIES@@QAEXHH@Z
?RemoveSelection@LIST_CONTROL@@QAEXXZ
??0SET_OF_AUDIT_CATEGORIES@@QAE@PAVOWNER_WINDOW@@IIIPAVMASK_MAP@@PAVBITFIELD@@2H@Z
??1SET_OF_AUDIT_CATEGORIES@@QAE@XZ
??1NT_USER_BROWSER_DIALOG@@QAE@XZ
?ApplyPermissionsToCheckBoxes@SET_OF_AUDIT_CATEGORIES@@QAEJPAVBITFIELD@@0@Z
??1BROWSER_SUBJECT_ITER@@QAE@XZ
?Next@BROWSER_SUBJECT_ITER@@QAEJPAPAVBROWSER_SUBJECT@@@Z
?QueryQualifiedName@BROWSER_SUBJECT@@QBEJPAVNLS_STR@@PBV2@H@Z
??0BROWSER_SUBJECT_ITER@@QAE@PAVNT_USER_BROWSER_DIALOG@@@Z
??0NT_USER_BROWSER_DIALOG@@QAE@PBGPAUHWND__@@0KK0KKKPBVADMIN_AUTHORITY@@@Z
?MakeDefault@PUSH_BUTTON@@QAEXXZ
?CD_Guiltt@CONTROL_WINDOW@@MAEJHPAVNLS_STR@@@Z
?CD_VKey@CONTROL_WINDOW@@MAEHGG@Z
?CD_Char@CONTROL_WINDOW@@MAEHGG@Z
?CD_Measure@CONTROL_WINDOW@@MAEHPAUtagMEASUREITEMSTRUCT@@@Z
?CD_Draw@CONTROL_WINDOW@@MAEHPAUtagDRAWITEMSTRUCT@@@Z
?QueryEventEffects@BUTTON_CONTROL@@MAEIABVCONTROL_EVENT@@@Z
?RestoreValue@STATE_BUTTON_CONTROL@@MAEXH@Z
?SaveValue@STATE_BUTTON_CONTROL@@MAEXH@Z
??0STATE_BUTTON_CONTROL@@IAE@PAVOWNER_WINDOW@@I@Z
??1FONT@@QAE@XZ
??0SLT_FONT@@QAE@PAVOWNER_WINDOW@@IW4FontType@@@Z
?QuerySelection@RADIO_GROUP@@QBEIXZ
?QueryItemText@STRING_LIST_CONTROL@@QBEJPAVNLS_STR@@H@Z
??1LIST_CONTROL@@IAE@XZ
?InvalidateItem@LISTBOX@@QAEXHH@Z
?QueryOwnerHwnd@WINDOW@@QBEPAUHWND__@@XZ
?InsertItem@STRING_LIST_CONTROL@@QAEHHPBG@Z
?EnumStrings@MASK_MAP@@QAEJPAVNLS_STR@@PAH1H@Z
?SetSize@WINDOW@@QAEXHHH@Z
?QuerySize@WINDOW@@QBE?AVXYDIMENSION@@XZ
?SetPos@WINDOW@@QAEXVXYPOINT@@HPAV1@@Z
??1DISPLAY_CONTEXT@@QAE@XZ
?SetSize@WINDOW@@QAEXVXYDIMENSION@@H@Z
?QueryTextExtent@DEVICE_CONTEXT@@QBE?AVXYDIMENSION@@ABVNLS_STR@@@Z
??0DISPLAY_CONTEXT@@QAE@PAUHWND__@@@Z
?QueryPos@WINDOW@@QBE?AVXYPOINT@@XZ
??0COMBOBOX@@QAE@PAVOWNER_WINDOW@@II@Z
?AddItem@STRING_LIST_CONTROL@@QAEHPBG@Z
?FindItemExact@STRING_LIST_CONTROL@@QBEHPBG@Z
?QueryDmDte@SUBJECT_BITMAP_BLOCK@@QAEPAVDMID_DTE@@HHH@Z
??0LBI@@QAE@XZ
??1LBI@@UAE@XZ
?BitsToString@MASK_MAP@@QAEJABVBITFIELD@@PAVNLS_STR@@HPAI@Z
?QueryBits@MASK_MAP@@QAEJIPAVBITFIELD@@PAVNLS_STR@@PAH@Z
??1SUBJECT_BITMAP_BLOCK@@QAE@XZ
?QueryWidth@DISPLAY_MAP@@QBEIXZ
??0SUBJECT_BITMAP_BLOCK@@QAE@XZ
??0BLT_LISTBOX@@QAE@PAVOWNER_WINDOW@@IHW4FontType@@H@Z
?QuerySelItems@LIST_CONTROL@@QBEJPAHH@Z
?QuerySelCount@LIST_CONTROL@@QBEHXZ
?QueryHelpContext@NT_USER_BROWSER_DIALOG@@UAEKXZ
?QueryHelpFile@NT_USER_BROWSER_DIALOG@@UAEPBGK@Z
?OnDlgDeactivation@NT_USER_BROWSER_DIALOG@@MAEHABVACTIVATION_EVENT@@@Z
?OnOK@NT_USER_BROWSER_DIALOG@@MAEHXZ
?OnCommand@NT_USER_BROWSER_DIALOG@@MAEHABVCONTROL_EVENT@@@Z
?OnUserMessage@NT_USER_BROWSER_DIALOG@@MAEHABVEVENT@@@Z
?SetSelection@RADIO_GROUP@@QAEXI@Z
??1ARRAY_CONTROLVAL_CID_PAIR@@QAE@XZ
??1RADIO_GROUP@@QAE@XZ
??0CONTROL_WINDOW@@QAE@PAVOWNER_WINDOW@@I@Z
?Enable@MAGIC_GROUP@@QAEXH@Z
?AddAssociation@MAGIC_GROUP@@QAEJIPAVCONTROL_VALUE@@@Z
??0MAGIC_GROUP@@QAE@PAVOWNER_WINDOW@@IHIPAVCONTROL_GROUP@@@Z
?IsValid@DIALOG_WINDOW@@MAEHXZ
?MayRun@CANCEL_TASK_DIALOG@@MAEHXZ
?QueryObjectName@CANCEL_TASK_DIALOG@@MAEJPAVNLS_STR@@@Z
?FilterMessage@DIALOG_WINDOW@@MAEHPAUtagMSG@@@Z
?IsPumpFinished@DIALOG_WINDOW@@MAEHXZ
WNetFMXGetPermCaps
WNetFMXGetPermHelp
WNetFMXEditPerm
NetpReleasePrivilege
NetpGetPrivilege
SendMessageW
CharNextW
WinHelpW
UpdateWindow
InvalidateRect
SelectObject
lstrcpynW
GetVolumeInformationW
GetLastError
GetDriveTypeW
DisableThreadLibraryCalls
GetComputerNameW
EqualSid
LsaGetRemoteUserName
SetFileSecurityW
GetFileSecurityW
DllMain
EditAuditInfo
EditOwnerInfo
EditPermissionInfo
FMExtensionProcW
SedDiscretionaryAclEditor
SedSystemAclEditor
SedTakeOwnership
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ