Static task
static1
Behavioral task
behavioral1
Sample
052b50d121856d045ba281c5915ebc60_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
052b50d121856d045ba281c5915ebc60_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
052b50d121856d045ba281c5915ebc60_JaffaCakes118
-
Size
315KB
-
MD5
052b50d121856d045ba281c5915ebc60
-
SHA1
8a5ffd5090bbd65e73dd32d2ce1d6717b22958f7
-
SHA256
788c297b2c1ba06caeee70a8013fdbca6875281753ab27fa713b3ac068b79311
-
SHA512
826be63da9bdc1c21228ba1b6af8bf19c7a42336f0a7bb3418bd4b57a39e77ae13620156e6f335b62296195d4df6265d7e434731cf59aaadb866ec53b00b0a0c
-
SSDEEP
3072:hgMcK5RwCbo1zhUoF8L15kGHFWG/cqVdBvDMikkkJAAi6iRuvMC4ITR48Nv3KFvN:7z6UoF8L15rHncUdB92moT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 052b50d121856d045ba281c5915ebc60_JaffaCakes118
Files
-
052b50d121856d045ba281c5915ebc60_JaffaCakes118.exe windows:5 windows x86 arch:x86
f93c787916c42daf1ec2422b55d16d13
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
netui0
??0BITFIELD@@QAE@IW4BITVALUES@@@Z
??0DEC_STR@@QAE@KI@Z
??0HEX_STR@@QAE@KI@Z
?atoul@NLS_STR@@QBEKXZ
?Append@NLS_STR@@QAEJABV1@@Z
??0NLS_STR@@QAE@I@Z
NETUI_strcmp
??0NLS_STR@@QAE@ABV0@@Z
?InsertStr@NLS_STR@@QAEHABV1@AAVISTR@@@Z
?CopyFrom@NLS_STR@@QAEJABV1@@Z
?MapNTStatus@ERRMAP@@SGJJPAHJ@Z
?Resize@BUFFER@@QAEJI@Z
?strcpy@@YGPAGPAGABVNLS_STR@@@Z
??YNLS_STR@@QAEAAV0@ABV0@@Z
?InsertParams@NLS_STR@@QAAJIPBV1@ZZ
?Clear@SLIST_OF_NLS_STR@@QAEXXZ
??8NLS_STR@@QBEHABV0@@Z
??0INTL_PROFILE@@QAE@XZ
?QueryTimeLocal@WIN_TIME@@QBEJPAK@Z
??0WIN_TIME@@QAE@KH@Z
?SetGMT@WIN_TIME@@QAEJH@Z
?SetTimeLocal@WIN_TIME@@QAEJK@Z
?QueryPtr@BUFFER@@QBEPAEXZ
?Append@SLIST@@QAEJPAX@Z
?SetCurrentTime@WIN_TIME@@QAEJXZ
??0WIN_TIME@@QAE@H@Z
?Normalize@WIN_TIME@@QAEJXZ
??EISTR@@QAEAAV0@XZ
?QuerySubStr@NLS_STR@@QBEPAV1@ABVISTR@@@Z
?Reset@ISTR@@QAEXXZ
?DelSubStr@NLS_STR@@QAEXAAVISTR@@@Z
?_stricmp@NLS_STR@@QBEHABV1@ABVISTR@@@Z
?strrchr@NLS_STR@@QBEHPAVISTR@@G@Z
NETUI_strncmp2
NETUI_strnicmp2
NETUI_strnicmp
NETUI_IsDBCS
?MapCopyTo@NLS_STR@@QBEJPAGI@Z
?InsertParams@NLS_STR@@QAEJPAPBV1@@Z
?QueryProp@ITER_SL@@QAEPAXXZ
?Remove@SLIST@@QAEPAXAAVITER_SL@@@Z
??0BITFIELD@@QAE@ABV0@@Z
?Alloc@ONE_SHOT_HEAP@@QAEPAEI@Z
?DelSubStr@NLS_STR@@QAEXAAVISTR@@ABV2@@Z
??0ISTR@@QAE@ABV0@@Z
?Reset@ITER_SL@@QAEXXZ
?AppendChar@NLS_STR@@QAEJG@Z
?ConvertToGMT@LOGON_HOURS_SETTING@@QAEHXZ
?SetFromBits@LOGON_HOURS_SETTING@@QAEJPBEI@Z
?ConvertToHoursPerWeek@LOGON_HOURS_SETTING@@QAEJXZ
?MakeDefault@LOGON_HOURS_SETTING@@QAEJXZ
?ConvertFromGMT@LOGON_HOURS_SETTING@@QAEHXZ
??0LOGON_HOURS_SETTING@@QAE@ABV0@@Z
?IsIdenticalToBits@LOGON_HOURS_SETTING@@QBEHPBEI@Z
??1LOGON_HOURS_SETTING@@QAE@XZ
??0LOGON_HOURS_SETTING@@QAE@PBEI@Z
NETUI_stricmp
??0NLS_STR@@QAE@PBGG@Z
??0ONE_SHOT_HEAP@@QAE@IH@Z
??4NLS_STR@@QAEAAV0@ABV0@@Z
?QuerySize@BUFFER@@QBEIXZ
??0NLS_STR@@IAE@PAGIH@Z
?strcmp@NLS_STR@@QBEHABV1@@Z
?SetBit@BITFIELD@@QAEXIW4BITVALUES@@@Z
?IsBitSet@BITFIELD@@QBEHI@Z
?QueryPch@NLS_STR@@QBEPBGABVISTR@@@Z
??0BITFIELD@@QAE@K@Z
??1BITFIELD@@QAE@XZ
?strchr@NLS_STR@@QBEHPAVISTR@@G@Z
?QueryAnsiTextLength@NLS_STR@@QBEIXZ
?MapCopyFrom@NLS_STR@@QAEJPBGI@Z
?strlen@NLS_STR@@QBEIXZ
??0STRLIST@@QAE@H@Z
??0ITER_STRLIST@@QAE@AAVSTRLIST@@@Z
??1ITER_STRLIST@@QAE@XZ
??1STRLIST@@QAE@XZ
?Add@SLIST@@QAEJPAX@Z
??2ALLOC_BASE@@SGPAXI@Z
??4NLS_STR@@QAEAAV0@PBG@Z
?CopyFrom@NLS_STR@@QAEJPBGI@Z
?QueryNumElem@SLIST@@QAEIXZ
??0BUFFER@@QAE@I@Z
??0ITER_SL@@QAE@PAVSLIST@@@Z
??0STRLIST@@QAE@PBG0H@Z
?QuerySubStr@NLS_STR@@QBEPAV1@ABVISTR@@0@Z
??1BUFFER@@QAE@XZ
?Next@ITER_SL@@QAEPAXXZ
??1ITER_SL@@QAE@XZ
??0NLS_STR@@QAE@XZ
??1SLIST@@QAE@XZ
??0SLIST@@QAE@XZ
??YISTR@@QAEXH@Z
?QueryChar@NLS_STR@@QBEGABVISTR@@@Z
??0ISTR@@QAE@ABVNLS_STR@@@Z
?SetTime@WIN_TIME@@QAEJK@Z
?QueryTime@WIN_TIME@@QBEJPAK@Z
??1NLS_STR@@QAE@XZ
?_stricmp@NLS_STR@@QBEHABV1@@Z
?_strnicmp@NLS_STR@@QBEHABV1@ABVISTR@@@Z
?SetIters@SLIST@@IAEXPAVSL_NODE@@@Z
??4ISTR@@QAEAAV0@ABV0@@Z
?_strupr@NLS_STR@@QAEAAV1@XZ
?LoadSystem@NLS_STR@@QAEJJ@Z
NETUI_strncmp
?MapCopyFrom@NLS_STR@@QAEJPBDI@Z
?CopyTo@NLS_STR@@QBEJPAGI@Z
?atoi@NLS_STR@@QBEHXZ
??0NLS_STR@@QAE@PBG@Z
?BumpIters@SLIST@@IAEXPAVSL_NODE@@@Z
??3ALLOC_BASE@@SGXPAX@Z
netui1
??0GROUP_MEMB@@QAE@ABVLOCATION@@PBG@Z
??0GROUP_1@@QAE@PBG0@Z
?AddAssocName@MEMBERSHIP_LM_OBJ@@QAEJPBG@Z
?DeleteAssocName@MEMBERSHIP_LM_OBJ@@QAEJI@Z
?CloneFrom@GROUP_1@@QAEJABV1@@Z
?SetComment@GROUP_1@@QAEJPBG@Z
??0GROUP_1@@QAE@PBGABVLOCATION@@@Z
??0SAM_GROUP@@QAE@ABVSAM_DOMAIN@@KK@Z
??1SAM_RID_MEM@@QAE@XZ
??1SAM_SID_NAME_USE_MEM@@QAE@XZ
?TranslateNamesToRids@SAM_DOMAIN@@QBEJPBQBGKPAVSAM_RID_MEM@@PAVSAM_SID_NAME_USE_MEM@@@Z
??0SAM_SID_NAME_USE_MEM@@QAE@H@Z
??0SAM_RID_MEM@@QAE@H@Z
?GetInfo@NEW_LM_OBJ@@QAEJXZ
?SetName@GROUP@@QAEJPBG@Z
?ChangeToNew@NEW_LM_OBJ@@QAEJXZ
?CreateNew@NEW_LM_OBJ@@QAEJXZ
?SetName@GROUP_MEMB@@QAEJPBG@Z
I_MNetNameValidate
?SetLogonHours@USER_11@@QAEJPBEI@Z
??0USER10_ENUM_ITER@@QAE@AAVUSER10_ENUM@@@Z
??0USER10_ENUM@@QAE@ABVLOCATION@@H@Z
??1LOC_LM_RESUME_ENUM@@QAE@XZ
??1NT_USER_ENUM@@QAE@XZ
?Next@USER10_ENUM_ITER@@QAEPBVUSER10_ENUM_OBJ@@PAJH@Z
??0NT_USER_ENUM_ITER@@QAE@AAVNT_USER_ENUM@@@Z
??0NT_USER_ENUM@@QAE@PBVSAM_DOMAIN@@@Z
?Next@NT_USER_ENUM_ITER@@QAEPBVNT_USER_ENUM_OBJ@@PAJH@Z
?QueryAssocName@MEMBERSHIP_LM_OBJ@@QBEPBGI@Z
??1LOCATION@@QAE@XZ
?QueryMaxPasswdAge@USER_MODALS@@QBEKXZ
?GetInfo@USER_MODALS@@UAEJXZ
??0USER_MODALS@@QAE@PBG@Z
??1LM_SERVICE@@QAE@XZ
?IsStarted@LM_SERVICE@@QAEHPAJ@Z
??0LM_SERVICE@@QAE@PBG0@Z
??0USER_3@@QAE@PBG0@Z
??0USER_3@@QAE@PBGABVLOCATION@@@Z
??1LSA_SECRET@@QAE@XZ
?SetPassword@USER_2@@QAEJPBG@Z
?QueryInfo@LSA_SECRET@@QBEJPAVNLS_STR@@0PAT_LARGE_INTEGER@@1@Z
?Open@LSA_SECRET@@QAEJABVLSA_POLICY@@K@Z
??0LSA_SECRET@@QAE@ABVNLS_STR@@@Z
?SetUserFlag@USER_2@@IAEJHI@Z
??1OS_ACL@@QAE@XZ
??1OS_ACE@@QAE@XZ
?SetDACL@OS_SECURITY_DESCRIPTOR@@QAEJHPBVOS_ACL@@H@Z
?AddACE@OS_ACL@@QAEJKABVOS_ACE@@@Z
?SetSID@OS_ACE@@QAEJABVOS_SID@@@Z
?QuerySystemSid@NT_ACCOUNTS_UTILITY@@SGJW4UI_SystemSid@@PAVOS_SID@@PBG@Z
?SetAccessMask@OS_ACE@@QAEXK@Z
??0OS_SECURITY_DESCRIPTOR@@QAE@PAXH@Z
??0OS_ACE@@QAE@PAX@Z
??0OS_ACL@@QAE@PAU_ACL@@HPAVOS_SECURITY_DESCRIPTOR@@@Z
??1OS_SECURITY_DESCRIPTOR@@QAE@XZ
??0SAM_USER@@QAE@ABVSAM_DOMAIN@@KK@Z
??1SAM_USER@@QAE@XZ
?SetUsername@SAM_USER@@QAEJPBVNLS_STR@@@Z
??1LSA_ACCT_DOM_INFO_MEM@@QAE@XZ
?GetAccountDomain@LSA_POLICY@@QBEJPAVLSA_ACCT_DOM_INFO_MEM@@@Z
??0LSA_ACCT_DOM_INFO_MEM@@QAE@H@Z
??0LOCATION@@QAE@ABV0@@Z
??1LSA_ACCOUNT@@QAE@XZ
??1LSA_ENUM@@QAE@XZ
?QueryDisplayName@LSA_PRIVILEGES_ENUM_OBJ@@QBEJPAVNLS_STR@@PBVLSA_POLICY@@@Z
?Next@LSA_PRIVILEGES_ENUM_ITER@@QAEPBVLSA_PRIVILEGES_ENUM_OBJ@@PAJH@Z
??0LSA_PRIVILEGES_ENUM_ITER@@QAE@AAVLSA_PRIVILEGES_ENUM@@@Z
??0LSA_PRIVILEGES_ENUM@@QAE@PBVLSA_POLICY@@@Z
??1LSA_ACCOUNT_PRIVILEGE_ENUM_ITER@@QAE@XZ
??RLSA_ACCOUNT_PRIVILEGE_ENUM_ITER@@QAEPBVOS_LUID_AND_ATTRIBUTES@@XZ
?QueryPrivilegeEnumIter@LSA_ACCOUNT@@QAEJPAPAVLSA_ACCOUNT_PRIVILEGE_ENUM_ITER@@@Z
??0LSA_ACCOUNT@@QAE@PAVLSA_POLICY@@PAXKPBG1@Z
?Next@LSA_ACCOUNTS_ENUM_ITER@@QAEPBVLSA_ACCOUNTS_ENUM_OBJ@@PAJH@Z
??0LSA_ACCOUNTS_ENUM_ITER@@QAE@AAVLSA_ACCOUNTS_ENUM@@@Z
??0LSA_ACCOUNTS_ENUM@@QAE@PBVLSA_POLICY@@@Z
??8OS_LUID@@QBEHABV0@@Z
?DeletePrivilege@LSA_ACCOUNT@@QAEJU_LUID@@@Z
?InsertPrivilege@LSA_ACCOUNT@@QAEJU_LUID@@K@Z
?Delete@NEW_LM_OBJ@@QAEJI@Z
?IsDefaultSettings@LSA_ACCOUNT@@QAEHXZ
??1SAM_PSWD_DOM_INFO_MEM@@QAE@XZ
?QueryNoAnonChange@SAM_PSWD_DOM_INFO_MEM@@QAEHXZ
?GetPasswordInfo@SAM_DOMAIN@@QBEJPAVSAM_PSWD_DOM_INFO_MEM@@@Z
??0SAM_PSWD_DOM_INFO_MEM@@QAE@H@Z
?SetPasswordInfo@SAM_DOMAIN@@QAEJPBVSAM_PSWD_DOM_INFO_MEM@@@Z
?SetNoAnonChange@SAM_PSWD_DOM_INFO_MEM@@QAEXH@Z
?QueryPasswdHistLen@USER_MODALS@@QBEIXZ
?QueryMinPasswdAge@USER_MODALS@@QBEKXZ
?QueryForceLogoff@USER_MODALS@@QBEKXZ
?QueryMinPasswdLen@USER_MODALS@@QBEIXZ
?SetPasswdHistLen@USER_MODALS@@QAEJI@Z
?SetMinPasswdLen@USER_MODALS@@QAEJI@Z
?SetForceLogoff@USER_MODALS@@QAEJK@Z
?SetMinPasswdAge@USER_MODALS@@QAEJK@Z
?SetMaxPasswdAge@USER_MODALS@@QAEJK@Z
?QueryDuration@USER_MODALS_3@@QBEKXZ
?QueryObservation@USER_MODALS_3@@QBEKXZ
?Write@NEW_LM_OBJ@@QAEJXZ
?CloneFrom@GROUP_MEMB@@QAEJABV1@@Z
?SetObservation@USER_MODALS_3@@QAEJK@Z
?SetDuration@USER_MODALS_3@@QAEJK@Z
?Next@USER0_ENUM_ITER@@QAEPBVUSER0_ENUM_OBJ@@PAJH@Z
??0USER0_ENUM_ITER@@QAE@AAVUSER0_ENUM@@@Z
??0USER0_ENUM@@QAE@ABVLOCATION@@PBGH@Z
??1LSA_PRIMARY_DOM_INFO_MEM@@QAE@XZ
??0LSA_PRIMARY_DOM_INFO_MEM@@QAE@H@Z
??1DOMAIN@@QAE@XZ
?Disconnect@DEVICE@@QAEJI@Z
??1API_SESSION@@QAE@XZ
MNetApiBufferFree
MNetUserGetInfo
??0API_SESSION@@QAE@PBGH@Z
?Connect@DEVICE2@@QAEJPBG000K@Z
?GetInfo@DEVICE@@UAEJXZ
?QueryPDC@DOMAIN@@QBEPBGXZ
??0DOMAIN@@QAE@PBGH@Z
??0DEVICE2@@QAE@PBG@Z
??1DEVICE@@QAE@XZ
??1LSA_POLICY@@QAE@XZ
?TrustDomain@LSA_POLICY@@QAEJABVNLS_STR@@QAX0HPBGH@Z
?GetPrimaryDomain@LSA_POLICY@@QBEJPAVLSA_PRIMARY_DOM_INFO_MEM@@@Z
??0LSA_POLICY@@QAE@PBGK@Z
?GetAnyValidDC@DOMAIN@@SGJPBG0PAVNLS_STR@@@Z
??1USER_2@@UAE@XZ
?SetUserFlags@USER_2@@QAEJI@Z
??0USER_2@@QAE@PBG0@Z
?DistrustDomain@LSA_POLICY@@QAEJQAXABVNLS_STR@@H@Z
??1TRUSTED_DOMAIN_ENUM@@QAE@XZ
?Next@TRUSTED_DOMAIN_ENUM_ITER@@QAEPBVTRUSTED_DOMAIN_ENUM_OBJ@@PAJH@Z
??0TRUSTED_DOMAIN_ENUM_ITER@@QAE@AAVTRUSTED_DOMAIN_ENUM@@@Z
??0TRUSTED_DOMAIN_ENUM@@QAE@PBVLSA_POLICY@@H@Z
??1SAM_USER_ENUM@@QAE@XZ
?Next@SAM_USER_ENUM_ITER@@QAEPBVSAM_USER_ENUM_OBJ@@PAJH@Z
??0SAM_USER_ENUM_ITER@@QAE@AAVSAM_USER_ENUM@@@Z
??0SAM_USER_ENUM@@QAE@PBVSAM_DOMAIN@@KH@Z
?QueryPrimaryDomainName@LSA_POLICY@@QBEJPAVNLS_STR@@@Z
??1USER@@QAE@XZ
?RemoveMemberFromAliases@SAM_DOMAIN@@QAEJPAX@Z
??0USER@@QAE@PBGABVLOCATION@@@Z
??1GROUP@@QAE@XZ
??0GROUP@@QAE@PBGABVLOCATION@@@Z
?Delete@SAM_ALIAS@@QAEJXZ
I_MNetNameCompare
?SetPrimaryGroupId@USER_3@@QAEJK@Z
?FindAssocName@MEMBERSHIP_LM_OBJ@@QAEHPBGPAI@Z
?AddMember@SAM_ALIAS@@QAEJPAX@Z
I_MNetPathType
?SetScriptPath@USER_2@@QAEJPBG@Z
?SetHomeDir@USER_11@@QAEJPBG@Z
??1USER_11@@QAE@XZ
??0USER_11@@QAE@PBGABVLOCATION@@@Z
?SetHomedirDrive@USER_3@@QAEJPBG@Z
?SetProfile@USER_3@@QAEJPBG@Z
?SetAccountExpires@USER_2@@QAEJJ@Z
??1WKSTA_10@@QAE@XZ
?QueryLogonUser@WKSTA_10@@QBEPBGXZ
??0WKSTA_10@@QAE@PBG@Z
?SetAuthFlags@USER_11@@QAEJK@Z
?SetPriv@USER_11@@QAEJI@Z
?QueryAccountType@USER_3@@QBE?AW4_ACCOUNT_TYPE@@XZ
?SetAccountType@USER_3@@QAEJW4_ACCOUNT_TYPE@@@Z
??1USER_MEMB@@QAE@XZ
?QueryLockout@USER_2@@QBEHXZ
?QueryAccountDisabled@USER_2@@QBEHXZ
?QueryNoPasswordExpire@USER_2@@QBEHXZ
?QueryUserCantChangePass@USER_2@@QBEHXZ
?SetPasswordExpired@USER_3@@QAEJK@Z
?SetNoPasswordExpire@USER_2@@QAEJH@Z
?SetUserCantChangePass@USER_2@@QAEJH@Z
?SetLockout@USER_2@@QAEJH@Z
?SetAccountDisabled@USER_2@@QAEJH@Z
?SetComment@USER_11@@QAEJPBG@Z
??0USER_MEMB@@QAE@ABVLOCATION@@PBG@Z
??0USER_2@@QAE@PBGABVLOCATION@@@Z
?CloneFrom@USER_MEMB@@QAEJABV1@@Z
?CloneFrom@USER_3@@QAEJABV1@@Z
?CloneFrom@USER_2@@QAEJABV1@@Z
?DeleteACE@OS_ACL@@QAEJK@Z
?SetOwner@OS_SECURITY_DESCRIPTOR@@QAEJABVOS_SID@@H@Z
?SetGroup@OS_SECURITY_DESCRIPTOR@@QAEJABVOS_SID@@H@Z
?EnumerateAliasesForUser@SAM_DOMAIN@@QBEJPAXPAVSAM_RID_MEM@@@Z
?SetFullName@USER_11@@QAEJPBG@Z
?SetUserComment@USER_11@@QAEJPBG@Z
?SetName@USER@@QAEJPBG@Z
?SetName@USER_MEMB@@QAEJPBG@Z
?FreeUnicodeString@@YGXPAU_UNICODE_STRING@@@Z
??1ADMIN_AUTHORITY@@QAE@XZ
?IsServer@LOCATION@@QBEHXZ
?GetInfo@USER_MODALS_3@@UAEJXZ
??0USER_MODALS_3@@QAE@PBG@Z
?UpgradeBuiltinDomain@ADMIN_AUTHORITY@@QAEJK@Z
?UpgradeSamServer@ADMIN_AUTHORITY@@QAEJK@Z
?UpgradeLSAPolicy@ADMIN_AUTHORITY@@QAEJK@Z
?UpgradeAccountDomain@ADMIN_AUTHORITY@@QAEJK@Z
??0ADMIN_AUTHORITY@@QAE@PBGKKKKH@Z
??1SERVER_1@@QAE@XZ
?QueryWkstaDomain@WKSTA_10@@QBEPBGXZ
?QueryServerType@SERVER_1@@QBEKXZ
??0SERVER_1@@QAE@PBG@Z
?GetW32UserAndDomainName@@YGJAAVNLS_STR@@0@Z
I_MNetComputerNameCompare
?GetW32ComputerName@@YGJAAVNLS_STR@@@Z
?QueryMajorVer@WKSTA_10@@QBEIXZ
?CheckIfNT@LOCATION@@QAEJPAHPAW4LOCATION_NT_TYPE@@@Z
??1SERVER_0@@QAE@XZ
??0SERVER_0@@QAE@PBG@Z
?SetWorkstations@USER_11@@QAEJPBG@Z
?AddMembers@SAM_GROUP@@QAEJPAKI@Z
?RemoveMembers@SAM_GROUP@@QAEJPAKI@Z
??1GROUP_1@@QAE@XZ
??1GROUP_MEMB@@QAE@XZ
??1SAM_GROUP@@QAE@XZ
??0ALIAS_ENUM@@QAE@AAVSAM_DOMAIN@@I@Z
??0ALIAS_ENUM_ITER@@QAE@AAVALIAS_ENUM@@@Z
?Next@ALIAS_ENUM_ITER@@QAEPBVALIAS_ENUM_OBJ@@PAJH@Z
?GetComment@ALIAS_ENUM_OBJ@@QAEJABVSAM_DOMAIN@@PAVNLS_STR@@@Z
??1ALIAS_ENUM@@QAE@XZ
?SetThreshold@USER_MODALS_3@@QAEJK@Z
?QueryThreshold@USER_MODALS_3@@QBEKXZ
??0NT_GROUP_ENUM@@QAE@PBVSAM_DOMAIN@@@Z
??8OS_SID@@QBEHABV0@@Z
??0OS_SID@@QAE@PAXHPAVOS_SECURITY_DESCRIPTOR@@@Z
??0OS_SID@@QAE@PAXKPAVOS_SECURITY_DESCRIPTOR@@@Z
??1SAM_ALIAS@@QAE@XZ
?GetComment@SAM_ALIAS@@QAEJPAVNLS_STR@@@Z
?AddMembers@SAM_ALIAS@@QAEJPAPAXI@Z
?RemoveMembers@SAM_ALIAS@@QAEJPAPAXI@Z
?SetComment@SAM_ALIAS@@QAEJPBVNLS_STR@@@Z
?QueryDomain@LOCATION@@QBEPBGXZ
?IsDomain@LOCATION@@QBEHXZ
?GetInfo@LM_RESUME_ENUM@@QAEJH@Z
?GetQualifiedAccountNames@NT_ACCOUNTS_UTILITY@@SGJAAVLSA_POLICY@@ABVSAM_DOMAIN@@PBQAXKHPAVSTRLIST@@PAKPAW4_SID_NAME_USE@@PAJPBG3333@Z
?QueryLSAPolicy@ADMIN_AUTHORITY@@QBEPAVLSA_POLICY@@XZ
?QueryServer@LOCATION@@QBEPBGXZ
??1SAM_SID_MEM@@QAE@XZ
??1LSA_TRANSLATED_NAME_MEM@@QAE@XZ
?QueryAccountDomain@ADMIN_AUTHORITY@@QBEPAVSAM_DOMAIN@@XZ
?BuildQualifiedAccountName@NT_ACCOUNTS_UTILITY@@SGJPAVNLS_STR@@ABV2@PAX1PBV2@2W4_SID_NAME_USE@@@Z
?RemoveMember@SAM_ALIAS@@QAEJPAX@Z
??1LSA_REF_DOMAIN_MEM@@QAE@XZ
??0LSA_REF_DOMAIN_MEM@@QAE@H@Z
??0LSA_TRANSLATED_NAME_MEM@@QAE@H@Z
?TranslateSidsToNames@LSA_POLICY@@QAEJPBQAXKPAVLSA_TRANSLATED_NAME_MEM@@PAVLSA_REF_DOMAIN_MEM@@@Z
??0SAM_SID_MEM@@QAE@H@Z
??0SAM_ALIAS@@QAE@ABVSAM_DOMAIN@@KK@Z
?GetMembers@SAM_ALIAS@@QAEJPAVSAM_SID_MEM@@@Z
??0SAM_ALIAS@@QAE@ABVSAM_DOMAIN@@PBGK@Z
?GetAuditEventInfo@LSA_POLICY@@QAEJPAVLSA_AUDIT_EVENT_INFO_MEM@@@Z
?QueryBuiltinDomain@ADMIN_AUTHORITY@@QBEPAVSAM_DOMAIN@@XZ
??0LSA_AUDIT_EVENT_INFO_MEM@@QAE@H@Z
??1LSA_AUDIT_EVENT_INFO_MEM@@QAE@XZ
?QueryDisplayName@LOCATION@@QBEJPAVNLS_STR@@@Z
?SetParms@USER_11@@QAEJPBG@Z
?QueryCountPreferences2@NT_ACCOUNT_ENUM@@KGJPAK0IKKK@Z
?SetAuditEventInfo@LSA_POLICY@@QAEJPAVLSA_AUDIT_EVENT_INFO_MEM@@@Z
?CallAPI@NT_ACCOUNT_ENUM@@EAEJHPAPAEPAI@Z
??RGROUP1_ENUM_ITER@@QAEPBVGROUP1_ENUM_OBJ@@XZ
?FreeBuffer@NT_ACCOUNT_ENUM@@MAEXPAPAE@Z
??1LM_ENUM_ITER@@IAE@XZ
??RGROUP0_ENUM_ITER@@QAEPBVGROUP0_ENUM_OBJ@@XZ
??0GROUP1_ENUM_ITER@@QAE@AAVGROUP1_ENUM@@@Z
??0GROUP0_ENUM@@QAE@ABVLOCATION@@PBG@Z
??1LOC_LM_ENUM@@QAE@XZ
??0GROUP0_ENUM_ITER@@QAE@AAVGROUP0_ENUM@@@Z
??0GROUP1_ENUM@@QAE@ABVLOCATION@@@Z
??1NT_GROUP_ENUM@@QAE@XZ
?GetInfo@LM_ENUM@@QAEJXZ
?Next@NT_GROUP_ENUM_ITER@@QAEPBVNT_GROUP_ENUM_OBJ@@PAJH@Z
??0NT_GROUP_ENUM_ITER@@QAE@AAVNT_GROUP_ENUM@@@Z
??1LM_RESUME_ENUM_ITER@@IAE@XZ
?W_Set@LOCATION@@AAEJPBGW4LOCATION_TYPE@@H@Z
IsSlowTransport
??0LOCATION@@QAE@PBGH@Z
??1OS_SID@@QAE@XZ
netui2
?QuerySelCount@LIST_CONTROL@@QBEHXZ
?OnCommand@DIALOG_WINDOW@@MAEHABVCONTROL_EVENT@@@Z
?MsgPopup@@YGHABVOWNINGWND@@JW4MSG_SEVERITY@@@Z
??1NT_USER_BROWSER_DIALOG@@QAE@XZ
??1BROWSER_SUBJECT_ITER@@QAE@XZ
?QueryText@WINDOW@@QBEJPAVNLS_STR@@@Z
?Dismiss@DIALOG_WINDOW@@IAEXI@Z
?Paint@STR_DTE@@UBEXPAUHDC__@@PBUtagRECT@@@Z
?QueryQualifiedName@BROWSER_SUBJECT@@QBEJPAVNLS_STR@@PBV2@H@Z
?Next@BROWSER_SUBJECT_ITER@@QAEJPAPAVBROWSER_SUBJECT@@@Z
??0BROWSER_SUBJECT_ITER@@QAE@PAVNT_USER_BROWSER_DIALOG@@@Z
?Process@DIALOG_WINDOW@@QAEJPAH@Z
??0NT_USER_BROWSER_DIALOG@@QAE@PBGPAUHWND__@@0KK0KKKPBVADMIN_AUTHORITY@@@Z
?CalcHelpFileHC@BLT@@SGPBGK@Z
?AddItemIdemp@BLT_LISTBOX@@QAEHPAVLBI@@@Z
?QuerySelItems@LIST_CONTROL@@QBEJPAHH@Z
??1AUTO_CURSOR@@QAE@XZ
?DeleteItem@LIST_CONTROL@@QAEHH@Z
??0AUTO_CURSOR@@QAE@PBG@Z
?AddItem@BLT_LISTBOX@@QAEHPAVLBI@@@Z
?SetText@WINDOW@@QAEXPBG@Z
?QueryHwnd@WINDOW@@QBEPAUHWND__@@XZ
?ClaimFocus@CONTROL_WINDOW@@QAEXXZ
?SelectString@EDIT_CONTROL@@QAEXXZ
?QueryText@SLE_STRIP@@QBEJPAVNLS_STR@@PBG1@Z
?QueryWhiteSpace@SLE_STRIP@@SGPBGXZ
?AfterGroupActions@CONTROL_GROUP@@MAEXXZ
?OnGroupAction@CONTROL_GROUP@@MAEJPAV1@@Z
?OnUserAction@CONTROL_GROUP@@MAEJPAVCONTROL_WINDOW@@ABVCONTROL_EVENT@@@Z
?QueryEventEffects@CONTROL_VALUE@@UAEIABVCONTROL_EVENT@@@Z
?SetControlValueFocus@CONTROL_VALUE@@UAEXXZ
?InvalidateItem@LISTBOX@@QAEXHH@Z
?RestoreValue@CONTROL_VALUE@@MAEXH@Z
?SaveValue@CONTROL_VALUE@@MAEXH@Z
??1MASK_MAP@@QAE@XZ
??0SET_OF_AUDIT_CATEGORIES@@QAE@PAVOWNER_WINDOW@@IIIPAVMASK_MAP@@PAVBITFIELD@@2H@Z
?Add@MASK_MAP@@QAEJABVBITFIELD@@ABVNLS_STR@@H@Z
??0MASK_MAP@@QAE@XZ
??1SET_OF_AUDIT_CATEGORIES@@QAE@XZ
?Enable@SET_OF_AUDIT_CATEGORIES@@QAEXHH@Z
?QueryUserSelectedBits@SET_OF_AUDIT_CATEGORIES@@QAEJPAVBITFIELD@@0@Z
?SetSelection@RADIO_GROUP@@QAEXI@Z
?AddAssociation@MAGIC_GROUP@@QAEJIPAVCONTROL_VALUE@@@Z
??0MAGIC_GROUP@@QAE@PAVOWNER_WINDOW@@IHIPAVCONTROL_GROUP@@@Z
??0DIALOG_WINDOW@@QAE@ABVIDRESOURCE@@ABVPWND2HWND@@H@Z
??1DIALOG_WINDOW@@QAE@XZ
??1RADIO_GROUP@@QAE@XZ
??1ARRAY_CONTROLVAL_CID_PAIR@@QAE@XZ
?QuerySelection@RADIO_GROUP@@QBEIXZ
?CD_Guiltt@CONTROL_WINDOW@@MAEJHPAVNLS_STR@@@Z
?CD_VKey@CONTROL_WINDOW@@MAEHGG@Z
?CD_Char@CONTROL_WINDOW@@MAEHGG@Z
?CD_Measure@CONTROL_WINDOW@@MAEHPAUtagMEASUREITEMSTRUCT@@@Z
?CD_Draw@CONTROL_WINDOW@@MAEHPAUtagDRAWITEMSTRUCT@@@Z
?QueryEventEffects@BUTTON_CONTROL@@MAEIABVCONTROL_EVENT@@@Z
?RestoreValue@STATE_BUTTON_CONTROL@@MAEXH@Z
?SaveValue@STATE_BUTTON_CONTROL@@MAEXH@Z
??0STATE_BUTTON_CONTROL@@IAE@PAVOWNER_WINDOW@@I@Z
?EnableThirdState@TRISTATE@@QAEXH@Z
?SetState@STATE_BUTTON_CONTROL@@IAEXI@Z
?QueryState@STATE_BUTTON_CONTROL@@IBEIXZ
?Command@WINDOW@@QBEKIIJ@Z
?CalcSingleLineHeight@BLT_LISTBOX@@QAEJXZ
?SetFont@CONTROL_WINDOW@@QAEXPAUHFONT__@@H@Z
?OnPaintReq@DISPATCHER@@MAEHXZ
?QueryRobustHwnd@DISPATCHER@@UBEPAUHWND__@@XZ
?Dispatch@LB_COLUMN_HEADER@@MAEHABVEVENT@@PAK@Z
?OnUserMessage@DISPATCHER@@MAEHABVEVENT@@@Z
?OnCommand@DISPATCHER@@MAEHABVCONTROL_EVENT@@@Z
?OnTimer@DISPATCHER@@MAEHABVTIMER_EVENT@@@Z
?OnQMouseActivate@DISPATCHER@@MAEKABVQMOUSEACT_EVENT@@@Z
?OnQHitTest@DISPATCHER@@MAEKABVXYPOINT@@@Z
?OnQDlgCode@DISPATCHER@@MAEKXZ
?OnQMouseCursor@DISPATCHER@@MAEHABVQMOUSEACT_EVENT@@@Z
?OnLMouseButtonDblClick@DISPATCHER@@MAEHABVMOUSE_EVENT@@@Z
?OnLMouseButtonUp@DISPATCHER@@MAEHABVMOUSE_EVENT@@@Z
?OnLMouseButtonDown@DISPATCHER@@MAEHABVMOUSE_EVENT@@@Z
?OnMouseMove@DISPATCHER@@MAEHABVMOUSE_EVENT@@@Z
?OnChar@DISPATCHER@@MAEHABVCHAR_EVENT@@@Z
?OnKeyUp@DISPATCHER@@MAEHABVVKEY_EVENT@@@Z
?OnKeyDown@DISPATCHER@@MAEHABVVKEY_EVENT@@@Z
?OnDestroy@DISPATCHER@@MAEHXZ
?OnCloseReq@DISPATCHER@@MAEHXZ
?OnMove@DISPATCHER@@MAEHABVMOVE_EVENT@@@Z
?OnResize@DISPATCHER@@MAEHABVSIZE_EVENT@@@Z
?OnDefocus@DISPATCHER@@MAEHABVFOCUS_EVENT@@@Z
?OnFocus@DISPATCHER@@MAEHABVFOCUS_EVENT@@@Z
?OnDeactivation@DISPATCHER@@MAEHABVACTIVATION_EVENT@@@Z
?OnActivation@DISPATCHER@@MAEHABVACTIVATION_EVENT@@@Z
?RestoreValue@SLT@@MAEXH@Z
?SaveValue@SLT@@MAEXH@Z
??0LB_COLUMN_HEADER@@QAE@PAVOWNER_WINDOW@@IVXYPOINT@@VXYDIMENSION@@@Z
??1CUSTOM_CONTROL@@QAE@XZ
?QueryLeftMargin@METALLIC_STR_DTE@@UBEIXZ
?Paint@METALLIC_STR_DTE@@UBEXPAUHDC__@@PBUtagRECT@@@Z
?Paint@DISPLAY_TABLE@@QBEXPAVLISTBOX@@PAUHDC__@@PBUtagRECT@@@Z
??0XYRECT@@QAE@PBVWINDOW@@H@Z
??0XYRECT@@QAE@ABUtagRECT@@@Z
??0DISPLAY_CONTEXT@@QAE@PAVWINDOW@@PAUHDC__@@@Z
??1DISPLAY_CONTEXT@@QAE@XZ
??0HAW_FOR_HAWAII_INFO@@QAE@XZ
?CD_Char_HAWforHawaii@BLT_LISTBOX@@IAEHGGPAVHAW_FOR_HAWAII_INFO@@@Z
?DoRemove@SET_CONTROL@@UAEJXZ
?DoAdd@SET_CONTROL@@UAEJXZ
?BLTMoveItems@SET_CONTROL@@MAEJPAVBLT_LISTBOX@@0@Z
?OnUserAction@SET_CONTROL@@MAEJPAVCONTROL_WINDOW@@ABVCONTROL_EVENT@@@Z
??0SET_CONTROL@@QAE@PAVOWNER_WINDOW@@IIPAUHICON__@@1PAVLISTBOX@@2I@Z
?Load@CURSOR@@SGPAUHICON__@@ABVIDRESOURCE@@@Z
?SetCount@LAZY_LISTBOX@@QAEXI@Z
??1SET_CONTROL@@QAE@XZ
?DeleteAllItems@LIST_CONTROL@@QAEXXZ
?EnableMoves@SET_CONTROL@@QAEXH@Z
?SelectItems@LIST_CONTROL@@QAEXPAHHH@Z
?W_SetIcon@ICON_CONTROL@@AAEJABVIDRESOURCE@@H@Z
?ConvertScreenToClient@XYRECT@@QAEXPAUHWND__@@@Z
?QueryWindowRect@WINDOW@@QBEXPAVXYRECT@@@Z
??0XYRECT@@QAE@XZ
??0FONT@@QAE@W4FontType@@@Z
??0ICON_CONTROL@@QAE@PAVOWNER_WINDOW@@I@Z
??0LOGON_HOURS_CONTROL@@QAE@PAVOWNER_WINDOW@@I@Z
??1LOGON_HOURS_CONTROL@@QAE@XZ
?SetPos@WINDOW@@QAEXVXYPOINT@@HPAV1@@Z
?Offset@XYRECT@@QAEAAV1@HH@Z
?QueryXForRow@LOGON_HOURS_CONTROL@@QAEIH@Z
?SetHours@LOGON_HOURS_CONTROL@@QAEJPBVLOGON_HOURS_SETTING@@@Z
?MsgPopup@@YGHABVOWNINGWND@@JW4MSG_SEVERITY@@IPBGI@Z
?QueryHours@LOGON_HOURS_CONTROL@@QBEJPAVLOGON_HOURS_SETTING@@@Z
?DoPermitButton@LOGON_HOURS_CONTROL@@QAEXXZ
?DoBanButton@LOGON_HOURS_CONTROL@@QAEXXZ
?IsItemAvailable@USER_LBI_CACHE@@UAEHH@Z
?QueryItem@USER_LBI_CACHE@@UAEPAVLBI@@H@Z
?UnlockCache@USER_LBI_CACHE@@MAEXXZ
?LockCache@USER_LBI_CACHE@@MAEXXZ
??0USER_LBI_CACHE@@QAE@H@Z
??1USER_LBI_CACHE@@UAE@XZ
?RemoveItem@USER_LBI_CACHE@@UAEPAVLBI@@H@Z
?InsertItemData@LIST_CONTROL@@IAEHHPAX@Z
?AddItem@USER_LBI_CACHE@@UAEHPAVLBI@@@Z
?BinarySearch@USER_LBI_CACHE@@QAEHPAU_DOMAIN_DISPLAY_USER@@@Z
?ReleaseLBI@LAZY_LISTBOX@@EAEXPAVLBI@@@Z
?RequestLBI@LAZY_LISTBOX@@EAEPAVLBI@@PBUtagDRAWITEMSTRUCT@@@Z
?CD_Guiltt@LAZY_LISTBOX@@MAEJHPAVNLS_STR@@@Z
?OnTimerNotification@TIMER_CALLOUT@@MAEXI@Z
??0TIMER@@QAE@PAVTIMER_CALLOUT@@KH@Z
??0LAZY_LISTBOX@@QAE@PAVOWNER_WINDOW@@IVXYPOINT@@VXYDIMENSION@@KHW4FontType@@@Z
??1TIMER_BASE@@QAE@XZ
?Enable@TIMER_BASE@@QAEXH@Z
?Sort@USER_LBI_CACHE@@QAEXXZ
?ReadUsers@USER_LBI_CACHE@@QAEJPAVADMIN_AUTHORITY@@IIHPAH@Z
??0RESOURCE_STR@@QAE@J@Z
?QueryItem@BLT_LISTBOX@@QBEPAVLBI@@H@Z
??0CUSTOM_CONTROL@@QAE@PAVCONTROL_WINDOW@@@Z
??0BLT_LISTBOX@@QAE@PAVOWNER_WINDOW@@IHW4FontType@@H@Z
?HandleOnLMouseButtonDown@SET_CONTROL@@QAEHPAVLISTBOX@@PAVCUSTOM_CONTROL@@ABVMOUSE_EVENT@@@Z
?SelectItem@LIST_CONTROL@@QAEXHH@Z
?Show@WINDOW@@QAEHH@Z
?FindItem@BLT_LISTBOX@@QBEHABVLBI@@@Z
?Paint@COUNTED_STR_DTE@@UBEXPAUHDC__@@PBUtagRECT@@@Z
??0LAZY_LISTBOX@@QAE@PAVOWNER_WINDOW@@IHW4FontType@@@Z
?SetCaretIndex@LIST_CONTROL@@QAEXHH@Z
?EnableButtons@SET_CONTROL@@IAEXXZ
?AddAssociation@SPIN_GROUP@@QAEJPAVSPIN_ITEM@@@Z
??0SPIN_GROUP@@QAE@PAVOWNER_WINDOW@@IIIH@Z
??0SPIN_SLE_NUM@@QAE@PAVOWNER_WINDOW@@IKKKHI@Z
??1SPIN_SLE_NUM@@QAE@XZ
??1SPIN_GROUP@@QAE@XZ
??ARADIO_GROUP@@QAEPAVRADIO_BUTTON@@I@Z
?SetSaveValue@SPIN_SLE_NUM@@QAEJK@Z
?QueryContent@SPIN_SLE_NUM@@QBEXPAK@Z
?Process@DIALOG_WINDOW@@QAEJPAI@Z
??0MLE@@QAE@PAVOWNER_WINDOW@@II@Z
?OnOK@DIALOG_WINDOW@@MAEHXZ
?QueryTextSize@WINDOW@@QBEHXZ
?CD_Char@BLT_LISTBOX@@MAEHGG@Z
?Compare_HAWforHawaii@LBI@@UBEHABVNLS_STR@@@Z
?Load@NLS_STR@@QAEJJ@Z
?IndicateError@SLE@@UAEXJ@Z
?QueryEventEffects@EDIT_CONTROL@@MAEIABVCONTROL_EVENT@@@Z
?SetControlValueFocus@EDIT_CONTROL@@MAEXXZ
?RestoreValue@EDIT_CONTROL@@MAEXH@Z
?SaveValue@EDIT_CONTROL@@MAEXH@Z
?MsgPopup@@YGHABVOWNINGWND@@JW4MSG_SEVERITY@@II@Z
??0PASSWORD_CONTROL@@QAE@PAVOWNER_WINDOW@@II@Z
??0COMBOBOX@@QAE@PAVOWNER_WINDOW@@II@Z
?FindItemExact@STRING_LIST_CONTROL@@QBEHPBG@Z
?AddItem@STRING_LIST_CONTROL@@QAEHPBG@Z
?QueryItemText@STRING_LIST_CONTROL@@QBEJPAVNLS_STR@@H@Z
?QueryCurrentItem@LIST_CONTROL@@QBEHXZ
?SetBigIncValue@CHANGEABLE_SPIN_ITEM@@QAEXK@Z
??0HIDDEN_CONTROL@@QAE@PAVOWNER_WINDOW@@I@Z
?SetValue@CHANGEABLE_SPIN_ITEM@@QAEXK@Z
?SetTopIndex@LIST_CONTROL@@QAEXH@Z
?MsgPopup@@YGHABVOWNINGWND@@JJW4MSG_SEVERITY@@KIQAPAVNLS_STR@@I@Z
?MsgPopup@@YGHABVOWNINGWND@@JW4MSG_SEVERITY@@IPBG2I@Z
?RepaintNow@WINDOW@@QAEXXZ
?MsgPopup@@YGHABVOWNINGWND@@JW4MSG_SEVERITY@@KIQAPAVNLS_STR@@I@Z
?QueryEventEffects@COMBOBOX@@MAEIABVCONTROL_EVENT@@@Z
?RestoreValue@COMBOBOX@@MAEXH@Z
?SaveValue@COMBOBOX@@MAEXH@Z
?TurnOff@AUTO_CURSOR@@QAEXXZ
?MoveItems@BLT_SET_CONTROL@@MAEJPAVLISTBOX@@0@Z
?Dispatch@H_SPLITTER_BAR@@MAEHABVEVENT@@PAK@Z
?OnQHitTest@H_SPLITTER_BAR@@MAEKABVXYPOINT@@@Z
?OnQMouseCursor@H_SPLITTER_BAR@@MAEHABVQMOUSEACT_EVENT@@@Z
?OnLMouseButtonUp@H_SPLITTER_BAR@@MAEHABVMOUSE_EVENT@@@Z
?OnLMouseButtonDown@H_SPLITTER_BAR@@MAEHABVMOUSE_EVENT@@@Z
?OnMouseMove@H_SPLITTER_BAR@@MAEHABVMOUSE_EVENT@@@Z
?OnResize@H_SPLITTER_BAR@@MAEHABVSIZE_EVENT@@@Z
?OnPaintReq@H_SPLITTER_BAR@@MAEHXZ
?QueryActiveArea@H_SPLITTER_BAR@@MAEHXZ
??0H_SPLITTER_BAR@@QAE@PAVOWNER_WINDOW@@IVXYPOINT@@VXYDIMENSION@@K@Z
??1H_SPLITTER_BAR@@QAE@XZ
??0DISPLAY_CONTEXT@@QAE@PAVWINDOW@@@Z
?ScreenToClient@XYPOINT@@QAEXPAUHWND__@@@Z
?ClientToScreen@XYPOINT@@QAEXPAUHWND__@@@Z
??0XYRECT@@QAE@PAUHWND__@@H@Z
?QueryOwnerHwnd@WINDOW@@QBEPAUHWND__@@XZ
?BiasMenuIds@UI_MENU_EXT@@IAEJK@Z
?MenuInitExtensions@UI_MENU_EXT_MGR@@UAEXXZ
?ActivateExtension@UI_EXT_MGR@@UAEXPAUHWND__@@K@Z
?RefreshExtensions@UI_EXT_MGR@@UAEXPAUHWND__@@@Z
?UnloadExtensions@UI_EXT_MGR@@UAEXXZ
?LoadExtensions@UI_EXT_MGR@@UAEIXZ
?W_LoadExtension@UI_EXT_MGR@@MAEPAVUI_EXT@@PBGK@Z
??0UI_MENU_EXT_MGR@@QAE@PAVUI_EXT_MGR_IF@@KK@Z
??1UI_MENU_EXT_MGR@@UAE@XZ
?QueryTextLength@WINDOW@@QBEHXZ
??0DEVICE_COMBO@@QAE@PAVOWNER_WINDOW@@IW4LMO_DEVICE@@W4LMO_DEV_USAGE@@@Z
?SelectString@COMBOBOX@@QAEXXZ
??0BLT_DATE_SPIN_GROUP@@QAE@PAVOWNER_WINDOW@@ABVINTL_PROFILE@@IIIIIIIII@Z
??1BLT_DATE_SPIN_GROUP@@QAE@XZ
?SetDay@BLT_DATE_SPIN_GROUP@@QAEXH@Z
?SetMonth@BLT_DATE_SPIN_GROUP@@QAEXH@Z
?SetYear@BLT_DATE_SPIN_GROUP@@QAEXH@Z
?QueryYear@BLT_DATE_SPIN_GROUP@@QBEHXZ
?QueryMonth@BLT_DATE_SPIN_GROUP@@QBEHXZ
?QueryDay@BLT_DATE_SPIN_GROUP@@QBEHXZ
?IsValid@BLT_DATE_SPIN_GROUP@@QAEHXZ
??0RADIO_GROUP@@QAE@PAVOWNER_WINDOW@@IHIPAVCONTROL_GROUP@@@Z
??0GRAPHICAL_BUTTON@@QAE@PAVOWNER_WINDOW@@IPBG11@Z
??1GRAPHICAL_BUTTON@@QAE@XZ
?ClearText@WINDOW@@QAEXXZ
?OnShutdown@APP_WINDOW@@MAEXXZ
?MayShutdown@APP_WINDOW@@MAEHXZ
?MayRestore@APP_WINDOW@@MAEHXZ
?OnSystemChange@APP_WINDOW@@MAEHABVSYSCHANGE_EVENT@@@Z
?OnOther@CLIENT_WINDOW@@MAEHABVEVENT@@@Z
?OnDropDown@CLIENT_WINDOW@@MAEHABVCONTROL_EVENT@@@Z
?OnEnter@CLIENT_WINDOW@@MAEHABVCONTROL_EVENT@@@Z
?OnSelect@CLIENT_WINDOW@@MAEHABVCONTROL_EVENT@@@Z
?OnChange@CLIENT_WINDOW@@MAEHABVCONTROL_EVENT@@@Z
?OnDblClick@CLIENT_WINDOW@@MAEHABVCONTROL_EVENT@@@Z
?OnClick@CLIENT_WINDOW@@MAEHABVCONTROL_EVENT@@@Z
?OnDefocus@CLIENT_WINDOW@@MAEHABVFOCUS_EVENT@@@Z
?OnLMouseButtonDblClick@CLIENT_WINDOW@@MAEHABVMOUSE_EVENT@@@Z
?OnLMouseButtonUp@CLIENT_WINDOW@@MAEHABVMOUSE_EVENT@@@Z
?OnLMouseButtonDown@CLIENT_WINDOW@@MAEHABVMOUSE_EVENT@@@Z
?OnMouseMove@CLIENT_WINDOW@@MAEHABVMOUSE_EVENT@@@Z
?OnChar@CLIENT_WINDOW@@MAEHABVCHAR_EVENT@@@Z
?OnKeyUp@CLIENT_WINDOW@@MAEHABVVKEY_EVENT@@@Z
?OnKeyDown@CLIENT_WINDOW@@MAEHABVVKEY_EVENT@@@Z
?OnDestroy@CLIENT_WINDOW@@MAEHXZ
?OnDeactivation@CLIENT_WINDOW@@MAEHABVACTIVATION_EVENT@@@Z
?OnActivation@CLIENT_WINDOW@@MAEHABVACTIVATION_EVENT@@@Z
?OnPaintReq@APP_WINDOW@@MAEHXZ
?DispatchMessageW@APP_WINDOW@@MAEJABVEVENT@@@Z
?QueryRobustHwnd@CLIENT_WINDOW@@UBEPAUHWND__@@XZ
?IsPumpFinished@HAS_MESSAGE_PUMP@@MAEHXZ
?RegisterHelpFile@BLT@@SGJPAUHINSTANCE__@@JKK@Z
?QueryDesiredHeight@H_SPLITTER_BAR@@QAEHXZ
?SetMsgMapTable@POPUP@@SGXPAU_MSGMAPENTRY@@@Z
?QueryHeight@LB_COLUMN_HEADER@@QAEHXZ
??0MENUITEM@@QAE@PAVAPP_WINDOW@@I@Z
??0SLT@@QAE@PAVOWNER_WINDOW@@IVXYPOINT@@VXYDIMENSION@@KPBG@Z
?QueryStaticClassName@CONTROL_WINDOW@@KGPBGXZ
??0SUBJECT_BITMAP_BLOCK@@QAE@XZ
??1SUBJECT_BITMAP_BLOCK@@QAE@XZ
?IsChecked@MENUITEM@@QBEHXZ
?OnCloseReq@APP_WINDOW@@MAEHXZ
?SetSize@WINDOW@@QAEXHHH@Z
?QueryClientRect@WINDOW@@QBEXPAUtagRECT@@@Z
?OnMenuInit@APP_WINDOW@@MAEHABVMENU_EVENT@@@Z
?Enable@MENUITEM@@QAEXH@Z
?SetCheck@MENUITEM@@QAEXH@Z
?OnCommand@CLIENT_WINDOW@@MAEHABVCONTROL_EVENT@@@Z
?Close@APP_WINDOW@@QAEXXZ
?OnFocus@CLIENT_WINDOW@@MAEHABVFOCUS_EVENT@@@Z
?QueryCaretIndex@LIST_CONTROL@@QBEHXZ
?Remove@MENU_BASE@@QBEJII@Z
??1POPUP_MENU@@QAE@XZ
?InsertSeparator@MENU_BASE@@QBEJII@Z
?Insert@MENU_BASE@@QBEJPBGIII@Z
?QueryItemCount@MENU_BASE@@QBEHXZ
??0POPUP_MENU@@QAE@PAUHMENU__@@@Z
?QuerySubMenu@MENU_BASE@@QBEPAUHMENU__@@H@Z
?DisplayCtError@APPLICATION@@AAEXJ@Z
?IsSystemInitialized@APPLICATION@@SGHXZ
?TrimTrailing@@YGJPAVNLS_STR@@PBG@Z
?TrimLeading@@YGJPAVNLS_STR@@PBG@Z
?Enable@MAGIC_GROUP@@QAEXH@Z
?RemoveItem@BLT_LISTBOX@@QAEPAVLBI@@H@Z
?SetText@WINDOW@@QAEXABVNLS_STR@@@Z
?CalcFixedHeight@WINDOW@@KGHPAUHWND__@@PAI@Z
?Dispatch@DISPATCHER@@MAEHABVEVENT@@PAK@Z
?QueryCount@LIST_CONTROL@@QBEHXZ
?QueryLeftMargin@DTE@@UBEIXZ
?AppendDataTo@STR_DTE@@UBEJPAVNLS_STR@@@Z
??0DM_DTE@@QAE@PAVDISPLAY_MAP@@@Z
??0DISPLAY_TABLE@@QAE@IPBI@Z
??ADISPLAY_TABLE@@QAEAAPAVDTE@@I@Z
?Paint@DISPLAY_TABLE@@QBEXPAVLISTBOX@@PAUHDC__@@PBUtagRECT@@PAUGUILTT_INFO@@@Z
??1LBI@@UAE@XZ
??0LBI@@QAE@XZ
?IsDestroyable@LBI@@MAEHXZ
?CalcHeight@LBI@@UAEII@Z
?SetDialogFocus@OWNER_WINDOW@@QAEXAAVCONTROL_WINDOW@@@Z
?RemoveSelection@LIST_CONTROL@@QAEXXZ
?Enable@WINDOW@@QAEXH@Z
??0PUSH_BUTTON@@QAE@PAVOWNER_WINDOW@@I@Z
??1WINDOW@@QAE@XZ
??0SLT@@QAE@PAVOWNER_WINDOW@@I@Z
?OnUserMessage@OWNER_WINDOW@@MAEHABVEVENT@@@Z
??0SLE_STRIP@@QAE@PAVOWNER_WINDOW@@IIH@Z
??0SLE@@QAE@PAVOWNER_WINDOW@@II@Z
?OnTimer@DIALOG_WINDOW@@MAEHABVTIMER_EVENT@@@Z
?QueryRobustHwnd@DIALOG_WINDOW@@UBEPAUHWND__@@XZ
?OnCancel@DIALOG_WINDOW@@MAEHXZ
?OnDlgActivation@DIALOG_WINDOW@@MAEHABVACTIVATION_EVENT@@@Z
?OnScrollBar@DIALOG_WINDOW@@MAEHABVSCROLL_EVENT@@@Z
?OnScrollBarThumb@DIALOG_WINDOW@@MAEHABVSCROLL_THUMB_EVENT@@@Z
?OnSysColorChange@DIALOG_WINDOW@@MAEXXZ
?OnDlgDeactivation@DIALOG_WINDOW@@MAEHABVACTIVATION_EVENT@@@Z
?OnCtlColor@DIALOG_WINDOW@@MAEPAUHBRUSH__@@PAUHDC__@@PAUHWND__@@PAI@Z
?QueryHelpFile@DIALOG_WINDOW@@MAEPBGK@Z
?OnControlError@DIALOG_WINDOW@@MAEXIJ@Z
?OnValidationError@DIALOG_WINDOW@@MAEXIJ@Z
?MayRun@DIALOG_WINDOW@@MAEHXZ
?QueryHelpContext@DIALOG_WINDOW@@MAEKXZ
?IsValid@DIALOG_WINDOW@@MAEHXZ
?SetRedraw@WINDOW@@QAEXH@Z
?FilterMessage@DIALOG_WINDOW@@MAEHPAUtagMSG@@@Z
?IsPumpFinished@DIALOG_WINDOW@@MAEHXZ
??1FONT@@QAE@XZ
?QueryDmDte@SUBJECT_BITMAP_BLOCK@@QAEPAVDMID_DTE@@HHH@Z
??1HAW_FOR_HAWAII_INFO@@QAE@XZ
?QueryCid@CONTROL_WINDOW@@QBEIXZ
??1LIST_CONTROL@@IAE@XZ
??0BLT_LISTBOX_HAW@@QAE@PAVOWNER_WINDOW@@IHW4FontType@@H@Z
?ReleaseLBI@BLT_LISTBOX@@EAEXPAVLBI@@@Z
?CalcColumnWidths@DISPLAY_TABLE@@SGJPAIIPAVOWNER_WINDOW@@IH@Z
?SaveValue@LIST_CONTROL@@MAEXH@Z
?QueryEventEffects@LIST_CONTROL@@MAEIABVCONTROL_EVENT@@@Z
?RequestLBI@BLT_LISTBOX@@EAEPAVLBI@@PBUtagDRAWITEMSTRUCT@@@Z
?CD_Draw@LISTBOX@@MAEHPAUtagDRAWITEMSTRUCT@@@Z
?CD_Measure@BLT_LISTBOX@@MAEHPAUtagMEASUREITEMSTRUCT@@@Z
?CD_Char@BLT_LISTBOX_HAW@@MAEHGG@Z
?CD_VKey@LISTBOX@@MAEHGG@Z
?CD_Guiltt@BLT_LISTBOX@@MAEJHPAVNLS_STR@@@Z
?OnUserAction@CONTROL_WINDOW@@MAEJABVCONTROL_EVENT@@@Z
?Validate@CONTROL_WINDOW@@UAEJXZ
?IndicateError@CONTROL_WINDOW@@UAEXJ@Z
?OnCtlColor@CONTROL_WINDOW@@UAEPAUHBRUSH__@@PAUHDC__@@PAUHWND__@@PAI@Z
?HandleOnLMouseButtonUp@SET_CONTROL@@QAEHPAVLISTBOX@@PAVCUSTOM_CONTROL@@ABVMOUSE_EVENT@@@Z
?HandleOnMouseMove@SET_CONTROL@@QAEHPAVLISTBOX@@ABVMOUSE_EVENT@@@Z
?SetTabStop@CONTROL_VALUE@@MAEXH@Z
?SetTabStop@CONTROL_WINDOW@@MAEXH@Z
?RestoreValue@LIST_CONTROL@@MAEXH@Z
?SetControlValueFocus@CONTROL_WINDOW@@UAEXXZ
?Invalidate@WINDOW@@QAEXH@Z
??1APP_WINDOW@@IAE@XZ
?SetFont@FONT@@QAEJABUtagLOGFONTW@@@Z
?ClearMasterTimerHotkey@BLT_MASTER_TIMER@@SGKXZ
?Translate@ACCELTABLE@@QBEHPBVWINDOW@@PAUtagMSG@@@Z
?FilterMessage@HAS_MESSAGE_PUMP@@MAEHPAUtagMSG@@@Z
?ShowArea@BASE_SET_FOCUS_DLG@@IAEXH@Z
??1BASE_SET_FOCUS_DLG@@QAE@XZ
??0BASE_SET_FOCUS_DLG@@QAE@QAUHWND__@@W4SELECTION_TYPE@@KPBGK2K@Z
?OnUserMessage@BASE_SET_FOCUS_DLG@@MAEHABVEVENT@@@Z
?OnCommand@BASE_SET_FOCUS_DLG@@MAEHABVCONTROL_EVENT@@@Z
?OnOK@BASE_SET_FOCUS_DLG@@MAEHXZ
?QueryHelpFile@BASE_SET_FOCUS_DLG@@MAEPBGK@Z
?QueryHelpContext@BASE_SET_FOCUS_DLG@@MAEKXZ
??1UI_EXT_MGR_IF@@QAE@XZ
??0UI_EXT_MGR_IF@@IAE@XZ
??1UI_MENU_EXT@@UAE@XZ
??0UI_MENU_EXT@@IAE@PBGK@Z
??1DISPLAY_MAP@@QAE@XZ
??0DMID_DTE@@QAE@I@Z
?QueryDisplayWidth@DM_DTE@@QBEIXZ
?ReloadColumnWidths@LB_COL_WIDTHS@@UAEJPAUHWND__@@PAUHINSTANCE__@@ABVIDRESOURCE@@@Z
??1LB_COL_WIDTHS@@QAE@XZ
??0LB_COL_WIDTHS@@QAE@PAUHWND__@@PAUHINSTANCE__@@ABVIDRESOURCE@@II@Z
?IsMultSel@LIST_CONTROL@@QBEHXZ
?ReplaceItem@BLT_LISTBOX@@QAEJHPAVLBI@@PAPAV2@@Z
??0BLT_LISTBOX@@QAE@PAVOWNER_WINDOW@@IVXYPOINT@@VXYDIMENSION@@KHW4FontType@@H@Z
?Paint@LBI@@UBEXPAVLISTBOX@@PAUHDC__@@PBUtagRECT@@PAUGUILTT_INFO@@@Z
?Compare@LBI@@UBEHPBV1@@Z
?QueryLeadingChar@LBI@@UBEGXZ
?InitCHOOSEFONT@WIN32_FONT_PICKER@@SGXPAUtagCHOOSEFONTW@@PAUtagLOGFONTW@@PAUHWND__@@@Z
?Process@WIN32_FONT_PICKER@@SGJPAVOWNER_WINDOW@@PAHPAVFONT@@PAUtagLOGFONTW@@PAUtagCHOOSEFONTW@@@Z
??0APPLICATION@@IAE@PAUHINSTANCE__@@HIIII@Z
?Run@APPLICATION@@MAEHXZ
?QueryItemText@MENU_BASE@@QBEJPAVNLS_STR@@II@Z
?Insert@MENU_BASE@@QBEJPBGIPAUHMENU__@@I@Z
?DrawMenuBar@APP_WINDOW@@QBEJXZ
??0ACCELTABLE@@QAE@ABVIDRESOURCE@@@Z
?OnHelp@GET_FNAME_BASE_DLG@@QAEXPAUHWND__@@@Z
?OnQMinMax@APP_WINDOW@@MAEHAAVQMINMAX_EVENT@@@Z
??0FONT@@QAE@ABUtagLOGFONTW@@@Z
?SetCaption@POPUP@@SGXJ@Z
?ItemExists@MENUITEM@@SGHPAVAPP_WINDOW@@I@Z
??0POPUP_MENU@@QAE@ABVPWND2HWND@@@Z
??0APP_WINDOW@@IAE@ABVNLS_STR@@ABVIDRESOURCE@@1@Z
?OnMenuCommand@APP_WINDOW@@MAEHI@Z
??1SCREEN_DC@@QAE@XZ
??0SCREEN_DC@@QAE@XZ
??1APPLICATION@@IAE@XZ
?CalcHmodRsrc@BLT@@SGPAUHINSTANCE__@@ABVIDRESOURCE@@@Z
??1ACCELTABLE@@QAE@XZ
?GetPlacement@APP_WINDOW@@QBEJPAUtagWINDOWPLACEMENT@@@Z
?OnTimer@CLIENT_WINDOW@@MAEHABVTIMER_EVENT@@@Z
?QueryPos@WINDOW@@QBE?AVXYPOINT@@XZ
?OnResize@CLIENT_WINDOW@@MAEHABVSIZE_EVENT@@@Z
?QuerySize@WINDOW@@QBE?AVXYDIMENSION@@XZ
?OnMove@CLIENT_WINDOW@@MAEHABVMOVE_EVENT@@@Z
ntdll
wcslen
isdigit
_alldiv
NtQuerySystemTime
_wcsicmp
wcsncpy
RtlCopySid
wcschr
RtlLengthSid
wcstoul
_chkstk
iswxdigit
wcsrchr
wcscpy
RtlNtStatusToDosError
RtlCompareMemory
utildll
InitializeAnonymousUserCompareList
HaveAnonymousUsersChanged
regapi
RegDefaultUserConfigQueryW
RegUserConfigQuery
RegUserConfigRename
RegUserConfigSet
RegUserConfigDelete
netapi32
NetApiBufferFree
NetServerGetInfo
msvcrt
__p__fmode
_initterm
_adjust_fdiv
__p__commode
__setusermatherr
exit
__getmainargs
_acmdln
memmove
_XcptFilter
_exit
__argv
_except_handler3
__argc
??3@YAXPAX@Z
??2@YAPAXI@Z
_purecall
__set_app_type
_controlfp
kernel32
LoadLibraryExW
WideCharToMultiByte
CreateDirectoryW
GetStartupInfoA
lstrlenW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetModuleHandleA
LoadResource
LockResource
FindResourceW
GetCurrentThreadId
WriteFile
CreateFileW
GetACP
LocalAlloc
ReadFile
GetFileSize
CloseHandle
LocalFree
MultiByteToWideChar
GetTickCount
FreeLibrary
GetStringTypeW
LoadLibraryW
GetProcAddress
GetComputerNameW
GetLastError
gdi32
TranslateCharsetInfo
GetDeviceCaps
user32
UnhookWindowsHookEx
CallNextHookEx
RegisterWindowMessageW
BeginPaint
EndPaint
GetMessageTime
MessageBeep
SetWindowsHookExW
GetSystemMetrics
PostMessageW
WinHelpW
CharUpperW
ShowWindow
IsIconic
LoadIconW
Sections
.text Size: 214KB - Virtual size: 214KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE