Play interactive tour

Edit tour

Windows Analysis Report a4vEYL53cZ

Overview

General Information

Sample Name:	a4vEYL53cZ (renamed file extension from none to dll)
Analysis ID:	492636
MD5:	d49772c85d426ce5fe41cf8c5529a5ff
SHA1:	4eaa4a005cd6825706634cf5fb9b95c4f546778e
SHA256:	73541b82ca26c8c60a84354c657c42bd2ece5cfad3f49437a927b4265234b9da
Tags:	Dridexexe
Infos:
Most interesting Screenshot:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Queues an APC in another process (thread injection)

PE file has nameless sections

May sleep (evasive loops) to hinder dynamic analysis

Uses code obfuscation techniques (call, push, ret)

PE file contains sections with non-standard names

Queries the installation date of Windows

Detected potential crypto function

Contains functionality to call native functions

PE file contains executable resources (Code or Archives)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

Sample file is different than original file name gathered from version info

PE file contains an invalid checksum

PE file contains strange resources

Contains capabilities to detect virtual machines

PE file contains more sections than normal

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

Creates a process in suspended mode (likely to inject code)

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Classification

Process Tree

System is w10x64

loaddll64.exe (PID: 4020 cmdline: loaddll64.exe 'C:\Users\user\Desktop\a4vEYL53cZ.dll' MD5: E0CC9D126C39A9D2FA1CAD5027EBBD18)

cmd.exe (PID: 4480 cmdline: cmd.exe /C rundll32.exe 'C:\Users\user\Desktop\a4vEYL53cZ.dll',#1 MD5: 4E2ACF4F8A396486AB4268C94A6A245F)

rundll32.exe (PID: 2716 cmdline: rundll32.exe 'C:\Users\user\Desktop\a4vEYL53cZ.dll',#1 MD5: 73C519F050C20580F8A62C849D49215A)

rundll32.exe (PID: 4552 cmdline: rundll32.exe C:\Users\user\Desktop\a4vEYL53cZ.dll,??0?$PatternProvider@VExpandCollapseProvider@DirectUI@@UIExpandCollapseProvider@@$00@DirectUI@@QEAA@XZ MD5: 73C519F050C20580F8A62C849D49215A)

explorer.exe (PID: 3292 cmdline: C:\Windows\Explorer.EXE MD5: AD5296B280E8F522A8A897C96BAB0E1D)

rundll32.exe (PID: 852 cmdline: rundll32.exe C:\Users\user\Desktop\a4vEYL53cZ.dll,??0?$PatternProvider@VGridItemProvider@DirectUI@@UIGridItemProvider@@$01@DirectUI@@QEAA@XZ MD5: 73C519F050C20580F8A62C849D49215A)

rundll32.exe (PID: 4676 cmdline: rundll32.exe C:\Users\user\Desktop\a4vEYL53cZ.dll,??0?$PatternProvider@VGridProvider@DirectUI@@UIGridProvider@@$02@DirectUI@@QEAA@XZ MD5: 73C519F050C20580F8A62C849D49215A)

explorer.exe (PID: 1004 cmdline: explorer.exe MD5: AD5296B280E8F522A8A897C96BAB0E1D)

explorer.exe (PID: 6228 cmdline: explorer.exe MD5: AD5296B280E8F522A8A897C96BAB0E1D)

explorer.exe (PID: 7160 cmdline: explorer.exe MD5: AD5296B280E8F522A8A897C96BAB0E1D)

explorer.exe (PID: 6332 cmdline: explorer.exe MD5: AD5296B280E8F522A8A897C96BAB0E1D)

explorer.exe (PID: 6252 cmdline: explorer.exe MD5: AD5296B280E8F522A8A897C96BAB0E1D)

explorer.exe (PID: 6032 cmdline: explorer.exe MD5: AD5296B280E8F522A8A897C96BAB0E1D)

cleanup

Malware Configuration

No configs have been found

Yara Overview

No yara matches

Sigma Overview

No Sigma rule has matched

Jbx Signature Overview

Click to jump to signature section

Show All Signature Results

AV Detection:

Multi AV Scanner detection for submitted file

Show sources

Source: a4vEYL53cZ.dll	Virustotal: Detection: 55%	Perma Link
Source: a4vEYL53cZ.dll	Metadefender: Detection: 51%	Perma Link
Source: a4vEYL53cZ.dll	ReversingLabs: Detection: 60%

Source: a4vEYL53cZ.dll

Static PE information: TERMINAL_SERVER_AWARE, DYNAMIC_BASE, NX_COMPAT, HIGH_ENTROPY_VA

Source:	Binary string: ntdll.pdb source: loaddll64.exe, 00000000.00000003.268961827.0000000180000000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.246270161.000001ED8CDD0000.00000004.00000001.sdmp, rundll32.exe, 00000004.00000003.248277823.0000000180000000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.255454782.0000000180000000.00000004.00000001.sdmp, rundll32.exe, 00000009.00000003.262717855.0000000180000000.00000004.00000001.sdmp
Source:	Binary string: ntdll.pdbUGP source: loaddll64.exe, 00000000.00000003.268961827.0000000180000000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.246270161.000001ED8CDD0000.00000004.00000001.sdmp, rundll32.exe, 00000004.00000003.248277823.0000000180000000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.255454782.0000000180000000.00000004.00000001.sdmp, rundll32.exe, 00000009.00000003.262717855.0000000180000000.00000004.00000001.sdmp
Source:	Binary string: FGT7t.pdb source: a4vEYL53cZ.dll

Source: C:\Windows\System32\loaddll64.exe

Code function: 0_2_000000014004FBF8 FindFirstFileExW,

0_2_000000014004FBF8

Source: explorer.exe, 0000000A.00000003.328616920.0000000004C67000.00000004.00000001.sdmp	String found in binary or memory: http://crl.globalsign.net/root-r2.crl0
Source: explorer.exe, 00000019.00000000.382237387.0000000003339000.00000004.00000001.sdmp	String found in binary or memory: http://ns.adobe.co/1
Source: explorer.exe, 00000019.00000000.382237387.0000000003339000.00000004.00000001.sdmp	String found in binary or memory: http://purl.or
Source: explorer.exe, 00000005.00000000.272918660.0000000006840000.00000004.00000001.sdmp	String found in binary or memory: http://www.autoitscript.com/autoit3/J

System Summary:

PE file has nameless sections

Show sources

Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:

Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014003B0C8	0_2_000000014003B0C8
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014003F0FC	0_2_000000014003F0FC
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_00000001400421C8	0_2_00000001400421C8
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_00000001400431CC	0_2_00000001400431CC
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_00000001400504E4	0_2_00000001400504E4
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014003A688	0_2_000000014003A688
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014004271C	0_2_000000014004271C
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_00000001400447B8	0_2_00000001400447B8
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140027954	0_2_0000000140027954
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140053AF0	0_2_0000000140053AF0
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140045BE0	0_2_0000000140045BE0
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014003BCE4	0_2_000000014003BCE4
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014004ED58	0_2_000000014004ED58
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140026FF0	0_2_0000000140026FF0
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140019054	0_2_0000000140019054
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014001C05C	0_2_000000014001C05C
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140005078	0_2_0000000140005078
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140053094	0_2_0000000140053094
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_00000001400330C4	0_2_00000001400330C4
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_00000001400380D0	0_2_00000001400380D0
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140063102	0_2_0000000140063102
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140052110	0_2_0000000140052110
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014001311C	0_2_000000014001311C
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140001154	0_2_0000000140001154
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_00000001400311B0	0_2_00000001400311B0
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_00000001400021C8	0_2_00000001400021C8
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_00000001400231DC	0_2_00000001400231DC
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014006D1F0	0_2_000000014006D1F0
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140032214	0_2_0000000140032214
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014002A214	0_2_000000014002A214
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014002E228	0_2_000000014002E228
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140035268	0_2_0000000140035268
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140046264	0_2_0000000140046264
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140069278	0_2_0000000140069278
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014002F278	0_2_000000014002F278
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014004B288	0_2_000000014004B288
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140068292	0_2_0000000140068292
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_00000001400362A0	0_2_00000001400362A0
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_00000001400172A8	0_2_00000001400172A8
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014001E2E4	0_2_000000014001E2E4
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140029320	0_2_0000000140029320
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014000732C	0_2_000000014000732C
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014002C348	0_2_000000014002C348
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140038424	0_2_0000000140038424
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014006B428	0_2_000000014006B428
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014005343C	0_2_000000014005343C
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014005B470	0_2_000000014005B470
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014004F4C8	0_2_000000014004F4C8
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014001B52C	0_2_000000014001B52C
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140026540	0_2_0000000140026540
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140044584	0_2_0000000140044584
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140061598	0_2_0000000140061598
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014004759C	0_2_000000014004759C
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_00000001400215FC	0_2_00000001400215FC
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140051620	0_2_0000000140051620
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140032648	0_2_0000000140032648
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140053644	0_2_0000000140053644
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140067663	0_2_0000000140067663
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014001A66C	0_2_000000014001A66C
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014003C6B0	0_2_000000014003C6B0
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014001D6C4	0_2_000000014001D6C4
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_00000001400356F4	0_2_00000001400356F4
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014004F708	0_2_000000014004F708
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140024718	0_2_0000000140024718
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014001276C	0_2_000000014001276C
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014000F76C	0_2_000000014000F76C
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140056790	0_2_0000000140056790
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_00000001400557DC	0_2_00000001400557DC
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140057820	0_2_0000000140057820
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014003E8E0	0_2_000000014003E8E0
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_00000001400258FC	0_2_00000001400258FC
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014005C8FC	0_2_000000014005C8FC
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014006D904	0_2_000000014006D904
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140005918	0_2_0000000140005918
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140020924	0_2_0000000140020924
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140068928	0_2_0000000140068928
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140031928	0_2_0000000140031928
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140019928	0_2_0000000140019928
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140024940	0_2_0000000140024940
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014002D95C	0_2_000000014002D95C
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140032964	0_2_0000000140032964
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014005497C	0_2_000000014005497C
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140033984	0_2_0000000140033984
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_00000001400479E0	0_2_00000001400479E0
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014002CA14	0_2_000000014002CA14
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014006BA1C	0_2_000000014006BA1C
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140002A20	0_2_0000000140002A20
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140026A24	0_2_0000000140026A24
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014002AA90	0_2_000000014002AA90
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140005AB8	0_2_0000000140005AB8
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014001CAC8	0_2_000000014001CAC8
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014006AAD8	0_2_000000014006AAD8
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140024AEC	0_2_0000000140024AEC
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140041AF4	0_2_0000000140041AF4
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014002BB18	0_2_000000014002BB18
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014000EB3C	0_2_000000014000EB3C
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140014B68	0_2_0000000140014B68
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140001B74	0_2_0000000140001B74
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014002AB7A	0_2_000000014002AB7A
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014002AB7F	0_2_000000014002AB7F
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014002AB84	0_2_000000014002AB84
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140006B88	0_2_0000000140006B88
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014002AB89	0_2_000000014002AB89
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014002AB8E	0_2_000000014002AB8E
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014002AB93	0_2_000000014002AB93
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014002AB98	0_2_000000014002AB98
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014002AB9D	0_2_000000014002AB9D
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014002ABA2	0_2_000000014002ABA2
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014002ABA7	0_2_000000014002ABA7
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014001DBB8	0_2_000000014001DBB8
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014000BBC4	0_2_000000014000BBC4
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140003BE0	0_2_0000000140003BE0
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140034BF8	0_2_0000000140034BF8
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140050BF4	0_2_0000000140050BF4
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140016BFC	0_2_0000000140016BFC
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014005ABFC	0_2_000000014005ABFC
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140036C08	0_2_0000000140036C08
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140029C1C	0_2_0000000140029C1C
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140026C30	0_2_0000000140026C30
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014003CC38	0_2_000000014003CC38
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140035C80	0_2_0000000140035C80
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140022C84	0_2_0000000140022C84
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140032CC8	0_2_0000000140032CC8
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014004CCD4	0_2_000000014004CCD4
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140015D04	0_2_0000000140015D04
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014001AD0C	0_2_000000014001AD0C
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140037D24	0_2_0000000140037D24
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014001CD24	0_2_000000014001CD24
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014005CD24	0_2_000000014005CD24
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014001FD44	0_2_000000014001FD44
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140052D60	0_2_0000000140052D60
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014000AD5C	0_2_000000014000AD5C
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014003DDA4	0_2_000000014003DDA4
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140050DA8	0_2_0000000140050DA8
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014005CDAB	0_2_000000014005CDAB
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140030DC0	0_2_0000000140030DC0
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140051DE4	0_2_0000000140051DE4
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140018DE8	0_2_0000000140018DE8
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014006BE28	0_2_000000014006BE28
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140006E34	0_2_0000000140006E34
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014002AE48	0_2_000000014002AE48
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140068E58	0_2_0000000140068E58
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014001EE68	0_2_000000014001EE68
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140004E68	0_2_0000000140004E68
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014000CEAC	0_2_000000014000CEAC
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140011EB4	0_2_0000000140011EB4
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140014EBC	0_2_0000000140014EBC
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140013ED4	0_2_0000000140013ED4
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140057FA8	0_2_0000000140057FA8
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014005CFCA	0_2_000000014005CFCA
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140047FCC	0_2_0000000140047FCC
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140025FD4	0_2_0000000140025FD4

Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014003F0FC CreateFileMappingW,NtDuplicateObject,NtDuplicateObject,	0_2_000000014003F0FC
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014003F348 NtDuplicateObject,	0_2_000000014003F348
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014003F3EC NtDuplicateObject,	0_2_000000014003F3EC
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_00000001400455F8 NtAllocateVirtualMemory,	0_2_00000001400455F8
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140059688 NtTerminateProcess,	0_2_0000000140059688
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014004386C NtDelayExecution,	0_2_000000014004386C
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140048B2C NtCreateMutant,	0_2_0000000140048B2C
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014003BCE4 NtDuplicateObject,	0_2_000000014003BCE4
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140049CF8 NtClose,	0_2_0000000140049CF8
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140028E60 NtDuplicateObject,	0_2_0000000140028E60
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_0000000140028EF8 NtDuplicateObject,NtDuplicateObject,	0_2_0000000140028EF8

Source: a4vEYL53cZ.dll

Static PE information: Resource name: RT_VERSION type: COM executable for DOS

Source: a4vEYL53cZ.dll

Binary or memory string: OriginalFilenameTeltwFoo.exe2 vs a4vEYL53cZ.dll

Source: a4vEYL53cZ.dll	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST
Source: a4vEYL53cZ.dll	Static PE information: Resource name: RT_ICON type: GLS_BINARY_LSB_FIRST

Source: a4vEYL53cZ.dll

Static PE information: Number of sections : 28 > 10

Source: a4vEYL53cZ.dll

Static PE information: Section: .text IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ

Source: a4vEYL53cZ.dll	Virustotal: Detection: 55%
Source: a4vEYL53cZ.dll	Metadefender: Detection: 51%
Source: a4vEYL53cZ.dll	ReversingLabs: Detection: 60%

Source: a4vEYL53cZ.dll

Static PE information: Section: .text IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ

Source: C:\Windows\System32\loaddll64.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Windows\System32\loaddll64.exe loaddll64.exe 'C:\Users\user\Desktop\a4vEYL53cZ.dll'
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /C rundll32.exe 'C:\Users\user\Desktop\a4vEYL53cZ.dll',#1
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe 'C:\Users\user\Desktop\a4vEYL53cZ.dll',#1
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe C:\Users\user\Desktop\a4vEYL53cZ.dll,??0?$PatternProvider@VExpandCollapseProvider@DirectUI@@UIExpandCollapseProvider@@$00@DirectUI@@QEAA@XZ
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe C:\Users\user\Desktop\a4vEYL53cZ.dll,??0?$PatternProvider@VGridItemProvider@DirectUI@@UIGridItemProvider@@$01@DirectUI@@QEAA@XZ
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe C:\Users\user\Desktop\a4vEYL53cZ.dll,??0?$PatternProvider@VGridProvider@DirectUI@@UIGridProvider@@$02@DirectUI@@QEAA@XZ
Source: unknown	Process created: C:\Windows\explorer.exe explorer.exe
Source: unknown	Process created: C:\Windows\explorer.exe explorer.exe
Source: unknown	Process created: C:\Windows\explorer.exe explorer.exe
Source: unknown	Process created: C:\Windows\explorer.exe explorer.exe
Source: unknown	Process created: C:\Windows\explorer.exe explorer.exe
Source: unknown	Process created: C:\Windows\explorer.exe explorer.exe
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\cmd.exe cmd.exe /C rundll32.exe 'C:\Users\user\Desktop\a4vEYL53cZ.dll',#1	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe C:\Users\user\Desktop\a4vEYL53cZ.dll,??0?$PatternProvider@VExpandCollapseProvider@DirectUI@@UIExpandCollapseProvider@@$00@DirectUI@@QEAA@XZ	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe C:\Users\user\Desktop\a4vEYL53cZ.dll,??0?$PatternProvider@VGridItemProvider@DirectUI@@UIGridItemProvider@@$01@DirectUI@@QEAA@XZ	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe C:\Users\user\Desktop\a4vEYL53cZ.dll,??0?$PatternProvider@VGridProvider@DirectUI@@UIGridProvider@@$02@DirectUI@@QEAA@XZ	Jump to behavior
Source: C:\Windows\System32\cmd.exe	Process created: C:\Windows\System32\rundll32.exe rundll32.exe 'C:\Users\user\Desktop\a4vEYL53cZ.dll',#1	Jump to behavior

Source: C:\Windows\explorer.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{660b90c8-73a9-4b58-8cae-355b7f55341b}\InProcServer32

Jump to behavior

Source: C:\Windows\explorer.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\Caches\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.3.ver0x0000000000000015.db

Jump to behavior

Source: classification engine

Classification label: mal56.evad.winDLL@17/1@0/0

Source: C:\Windows\explorer.exe

File read: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini

Jump to behavior

Source: C:\Windows\System32\loaddll64.exe

Code function: 0_2_000000014003F498 GetProcessId,CreateToolhelp32Snapshot,Thread32First,Thread32Next,

0_2_000000014003F498

Source: C:\Windows\System32\cmd.exe

Process created: C:\Windows\System32\rundll32.exe rundll32.exe 'C:\Users\user\Desktop\a4vEYL53cZ.dll',#1

Source: unknown	Process created: C:\Windows\explorer.exe
Source: unknown	Process created: C:\Windows\explorer.exe
Source: unknown	Process created: C:\Windows\explorer.exe
Source: unknown	Process created: C:\Windows\explorer.exe
Source: unknown	Process created: C:\Windows\explorer.exe
Source: unknown	Process created: C:\Windows\explorer.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: a4vEYL53cZ.dll

Static PE information: More than 4320 > 100 exports found

Source: a4vEYL53cZ.dll

Static PE information: Image base 0x140000000 > 0x60000000

Source: a4vEYL53cZ.dll

Static file information: File size 1368064 > 1048576

Source: a4vEYL53cZ.dll	Static PE information: section name: RT_CURSOR
Source: a4vEYL53cZ.dll	Static PE information: section name: RT_BITMAP
Source: a4vEYL53cZ.dll	Static PE information: section name: RT_ICON
Source: a4vEYL53cZ.dll	Static PE information: section name: RT_MENU
Source: a4vEYL53cZ.dll	Static PE information: section name: RT_DIALOG
Source: a4vEYL53cZ.dll	Static PE information: section name: RT_STRING
Source: a4vEYL53cZ.dll	Static PE information: section name: RT_ACCELERATOR
Source: a4vEYL53cZ.dll	Static PE information: section name: RT_GROUP_ICON

Source: a4vEYL53cZ.dll

Static PE information: TERMINAL_SERVER_AWARE, DYNAMIC_BASE, NX_COMPAT, HIGH_ENTROPY_VA

Source: a4vEYL53cZ.dll

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: ntdll.pdb source: loaddll64.exe, 00000000.00000003.268961827.0000000180000000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.246270161.000001ED8CDD0000.00000004.00000001.sdmp, rundll32.exe, 00000004.00000003.248277823.0000000180000000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.255454782.0000000180000000.00000004.00000001.sdmp, rundll32.exe, 00000009.00000003.262717855.0000000180000000.00000004.00000001.sdmp
Source:	Binary string: ntdll.pdbUGP source: loaddll64.exe, 00000000.00000003.268961827.0000000180000000.00000004.00000001.sdmp, rundll32.exe, 00000003.00000003.246270161.000001ED8CDD0000.00000004.00000001.sdmp, rundll32.exe, 00000004.00000003.248277823.0000000180000000.00000004.00000001.sdmp, rundll32.exe, 00000006.00000003.255454782.0000000180000000.00000004.00000001.sdmp, rundll32.exe, 00000009.00000003.262717855.0000000180000000.00000004.00000001.sdmp
Source:	Binary string: FGT7t.pdb source: a4vEYL53cZ.dll

Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014006E5C9 push 00000031h; retf		0_2_000000014006E5CB
Source: C:\Windows\System32\loaddll64.exe	Code function: 0_2_000000014006E6A4 push rsp; retf		0_2_000000014006E6A5

Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:
Source: a4vEYL53cZ.dll	Static PE information: section name:

Source: a4vEYL53cZ.dll

Static PE information: real checksum: 0x70461819 should be: 0x15505c

Source: initial sample

Static PE information: section name: .text entropy: 7.84727441246

Source: C:\Windows\explorer.exe

Registry key monitored for changes: HKEY_CURRENT_USER_Classes

Jump to behavior

Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Windows\explorer.exe	Process information set: NOOPENFILEERRORBOX

Source: C:\Windows\System32\loaddll64.exe TID: 4084	Thread sleep count: 999 > 30	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe TID: 4084	Thread sleep time: -99900s >= -30000s	Jump to behavior
Source: C:\Windows\System32\loaddll64.exe TID: 4084	Thread sleep time: -60000s >= -30000s	Jump to behavior

Source: C:\Windows\System32\loaddll64.exe	Window / User API: threadDelayed 999	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Window / User API: threadDelayed 1092	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Window / User API: threadDelayed 1000	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Window / User API: threadDelayed 1099	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Window / User API: threadDelayed 880	Jump to behavior

Source: C:\Windows\explorer.exe

File opened / queried: SCSI#Disk&Ven_VMware&Prod_Virtual_disk#5&1ec51bf7&0&000000#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}

Jump to behavior

Source: C:\Windows\System32\loaddll64.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Windows\System32\loaddll64.exe

Code function: 0_2_00000001400447B8 GetTokenInformation,GetTokenInformation,GetSystemInfo,

0_2_00000001400447B8

Source: C:\Windows\System32\loaddll64.exe

Code function: 0_2_000000014004FBF8 FindFirstFileExW,

0_2_000000014004FBF8

Source: explorer.exe, 00000005.00000000.260886095.0000000008A32000.00000004.00000001.sdmp	Binary or memory string: VMware SATA CD00dRom0
Source: explorer.exe, 00000005.00000000.260886095.0000000008A32000.00000004.00000001.sdmp	Binary or memory string: SCSI\Disk&Ven_VMware&Prod_Virtual_disk\5&1ec51bf7&0&000000
Source: explorer.exe, 00000014.00000000.345846492.000000000493C000.00000004.00000001.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#5&280b647&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\Device\CdRom0\??\Volume{e6e9dfd8-98f2-11e9-90ce-806e6f6e6963}\DosDevices\D:
Source: explorer.exe, 0000001F.00000003.430238443.000000000719F000.00000004.00000001.sdmp	Binary or memory string: \\?\STORAGE#Volume#{e6e9dfc6-98f2-11e9-90ce-806e6f6e6963}#0000000025700000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{e6e9dfc6-98f2-11e9-90ce-806e6f6e6963}#000000001F400000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{e6e9dfc6-98f2-11e9-90ce-806e6f6e6963}#0000000026700000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{e6e9dfc6-98f2-11e9-90ce-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#5&280b647&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_Msft&Prod_Virtual_DVD-ROM#2&1f4adffe&0&000001#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: explorer.exe, 00000005.00000000.281080497.0000000008B88000.00000004.00000001.sdmp	Binary or memory string: \\?\scsi#cdrom&ven_necvmwar&prod_vmware_sata_cd00#5&280b647&0&000000#{53f56308-b6bf-11d0-94f2-00a0c91efb8b}e
Source: explorer.exe, 00000019.00000000.379668581.0000000001217000.00000004.00000020.sdmp	Binary or memory string: SCSI\CDROM&VEN_NECVMWAR&PROD_VMWARE_SATA_CD00\5&280B647&0&000000P
Source: explorer.exe, 0000000A.00000003.329052348.0000000004B3B000.00000004.00000001.sdmp	Binary or memory string: \\?\scsi#cdrom&ven_necvmwar&prod_vmware_sata_cd00#5&280b647&0&000000#{53f56308-b6bf-11d0-94f2-00a0c91efb8b}\
Source: explorer.exe, 00000029.00000000.534217878.0000000000DF8000.00000004.00000020.sdmp	Binary or memory string: SCSI\CDROM&VEN_NECVMWAR&PROD_VMWARE_SATA_CD00\5&280B647&0&000000
Source: explorer.exe, 0000001F.00000000.419293886.00000000012D7000.00000004.00000020.sdmp	Binary or memory string: \\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#5&280b647&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}/
Source: explorer.exe, 00000005.00000000.261307630.0000000008C73000.00000004.00000001.sdmp	Binary or memory string: \\?\STORAGE#Volume#{e6e9dfc6-98f2-11e9-90ce-806e6f6e6963}#0000000025700000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{e6e9dfc6-98f2-11e9-90ce-806e6f6e6963}#000000001F400000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{e6e9dfc6-98f2-11e9-90ce-806e6f6e6963}#0000000026700000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{e6e9dfc6-98f2-11e9-90ce-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#5&280b647&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_Msft&Prod_Virtual_DVD-ROM#2&1f4adffe&0&000001#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}oft.Mic
Source: explorer.exe, 0000000A.00000003.329052348.0000000004B3B000.00000004.00000001.sdmp	Binary or memory string: \\?\scsi#cdrom&ven_necvmwar&prod_vmware_sata_cd00#5&280b647&0&000000#{53f56308-b6bf-11d0-94f2-00a0c91efb8b}>,
Source: explorer.exe, 00000019.00000003.398067553.0000000006DAB000.00000004.00000001.sdmp	Binary or memory string: \\?\STORAGE#Volume#{e6e9dfc6-98f2-11e9-90ce-806e6f6e6963}#0000000025700000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{e6e9dfc6-98f2-11e9-90ce-806e6f6e6963}#000000001F400000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{e6e9dfc6-98f2-11e9-90ce-806e6f6e6963}#0000000026700000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{e6e9dfc6-98f2-11e9-90ce-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#5&280b647&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_Msft&Prod_Virtual_DVD-ROM#2&1f4adffe&0&000001#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}F^
Source: explorer.exe, 0000000A.00000003.329052348.0000000004B3B000.00000004.00000001.sdmp	Binary or memory string: \??\scsi#cdrom&ven_necvmwar&prod_vmware_sata_cd00#5&280b647&0&000000#{53f56308-b6bf-11d0-94f2-00a0c91efb8b}puter._->
Source: explorer.exe, 00000014.00000000.341947116.0000000000CC7000.00000004.00000020.sdmp	Binary or memory string: SCSI\CDROM&VEN_NECVMWAR&PROD_VMWARE_SATA_CD00\5&280B647&0&000000y
Source: explorer.exe, 00000005.00000000.282423874.0000000008D81000.00000004.00000001.sdmp	Binary or memory string: AGE#Volume#{e6e9dfc6-98f2-11e9-90ce-806e6f6e6963}#0000000025700000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{e6e9dfc6-98f2-11e9-90ce-806e6f6e6963}#000000001F400000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{e6e9dfc6-98f2-11e9-90ce-806e6f6e6963}#0000000026700000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\STORAGE#Volume#{e6e9dfc6-98f2-11e9-90ce-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#5&280b647&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\\?\SCSI#CdRom&Ven_Msft&Prod_Virtual_DVD-ROM#2&1f4adffe&0&000001#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: explorer.exe, 00000024.00000000.470500936.0000000001006000.00000004.00000020.sdmp	Binary or memory string: \\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#5&280b647&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}c
Source: explorer.exe, 0000000A.00000003.329052348.0000000004B3B000.00000004.00000001.sdmp	Binary or memory string: \\?\scsi#cdrom&ven_necvmwar&prod_vmware_sata_cd00#5&280b647&0&000000#{53f56308-b6bf-11d0-94f2-00a0c91efb8b}
Source: explorer.exe, 0000000A.00000003.329052348.0000000004B3B000.00000004.00000001.sdmp	Binary or memory string: \??\scsi#cdrom&ven_necvmwar&prod_vmware_sata_cd00#5&280b647&0&000000#{53f56308-b6bf-11d0-94f2-00a0c91efb8b}
Source: explorer.exe, 0000000A.00000003.329052348.0000000004B3B000.00000004.00000001.sdmp	Binary or memory string: \\?\scsi#cdrom&ven_necvmwar&prod_vmware_sata_cd00#5&280b647&0&000000#{53f56308-b6bf-11d0-94f2-00a0c91efb8b}e-,
Source: explorer.exe, 00000029.00000000.534217878.0000000000DF8000.00000004.00000020.sdmp	Binary or memory string: \\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#5&280b647&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
Source: explorer.exe, 00000005.00000000.281080497.0000000008B88000.00000004.00000001.sdmp	Binary or memory string: \\?\scsi#cdrom&ven_necvmwar&prod_vmware_sata_cd00#5&280b647&0&000000#{53f56308-b6bf-11d0-94f2-00a0c91efb8b}C
Source: explorer.exe, 00000005.00000000.260975284.0000000008ACF000.00000004.00000001.sdmp	Binary or memory string: SCSI\CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00\5&280b647&0&000000Datc
Source: explorer.exe, 00000005.00000000.273163225.00000000069C6000.00000004.00000001.sdmp	Binary or memory string: VMware SATA CD002
Source: explorer.exe, 0000000A.00000003.329728980.0000000004CA5000.00000004.00000001.sdmp	Binary or memory string: \??\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#5&280b647&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\Device\CdRom0\??\Volume{e6e9dfd8-98f2-11e9-90ce-806e6f6e6963}\DosDevices\D:s
Source: explorer.exe, 0000000A.00000003.329052348.0000000004B3B000.00000004.00000001.sdmp	Binary or memory string: \\?\scsi#cdrom&ven_necvmwar&prod_vmware_sata_cd00#5&280b647&0&000000#{53f56308-b6bf-11d0-94f2-00a0c91efb8b}\N-
Source: explorer.exe, 00000014.00000000.341947116.0000000000CC7000.00000004.00000020.sdmp	Binary or memory string: \\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#5&280b647&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}K
Source: explorer.exe, 00000019.00000000.379668581.0000000001217000.00000004.00000020.sdmp	Binary or memory string: \\?\SCSI#CdRom&Ven_NECVMWar&Prod_VMware_SATA_CD00#5&280b647&0&000000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}D

Source: C:\Windows\System32\loaddll64.exe

Code function: 0_2_00000001400421C8 LdrLoadDll,

0_2_00000001400421C8

Source: C:\Windows\System32\loaddll64.exe

Code function: 0_2_0000000140045800 RtlAddVectoredExceptionHandler,

0_2_0000000140045800

HIPS / PFW / Operating System Protection Evasion:

Queues an APC in another process (thread injection)

Show sources

Source: C:\Windows\System32\loaddll64.exe

Thread APC queued: target process: C:\Windows\explorer.exe

Jump to behavior

Source: C:\Windows\System32\cmd.exe

Process created: C:\Windows\System32\rundll32.exe rundll32.exe 'C:\Users\user\Desktop\a4vEYL53cZ.dll',#1

Jump to behavior

Source: explorer.exe, 00000005.00000000.268809773.0000000001400000.00000002.00020000.sdmp	Binary or memory string: uProgram Manager
Source: explorer.exe, 00000014.00000003.340451395.00000000050E9000.00000004.00000001.sdmp	Binary or memory string: ProgmanH
Source: rundll32.exe, 00000006.00000002.778909245.000002B522320000.00000002.00020000.sdmp, rundll32.exe, 00000009.00000002.779015031.000002C96D870000.00000002.00020000.sdmp, explorer.exe, 0000000A.00000000.296780271.0000000001600000.00000002.00020000.sdmp, explorer.exe, 00000014.00000000.343068264.0000000001510000.00000002.00020000.sdmp, explorer.exe, 00000019.00000000.380841719.00000000017D0000.00000002.00020000.sdmp	Binary or memory string: Program Manager
Source: rundll32.exe, 00000003.00000002.779972207.000001ED8D260000.00000002.00020000.sdmp, explorer.exe, 00000005.00000000.268809773.0000000001400000.00000002.00020000.sdmp, rundll32.exe, 00000006.00000002.778909245.000002B522320000.00000002.00020000.sdmp, rundll32.exe, 00000009.00000002.779015031.000002C96D870000.00000002.00020000.sdmp, explorer.exe, 0000000A.00000000.299525111.0000000005007000.00000004.00000001.sdmp, explorer.exe, 00000014.00000000.349730646.00000000051F0000.00000004.00000001.sdmp, explorer.exe, 00000019.00000000.380841719.00000000017D0000.00000002.00020000.sdmp, explorer.exe, 0000001F.00000000.427551817.0000000005640000.00000004.00000001.sdmp, explorer.exe, 00000024.00000000.476541398.00000000017E0000.00000002.00020000.sdmp, explorer.exe, 00000029.00000000.536121227.0000000001450000.00000002.00020000.sdmp	Binary or memory string: Shell_TrayWnd
Source: rundll32.exe, 00000003.00000002.779972207.000001ED8D260000.00000002.00020000.sdmp, explorer.exe, 00000005.00000000.268809773.0000000001400000.00000002.00020000.sdmp, rundll32.exe, 00000006.00000002.778909245.000002B522320000.00000002.00020000.sdmp, rundll32.exe, 00000009.00000002.779015031.000002C96D870000.00000002.00020000.sdmp, explorer.exe, 0000000A.00000000.296365590.0000000001018000.00000004.00000020.sdmp, explorer.exe, 00000014.00000000.349730646.00000000051F0000.00000004.00000001.sdmp, explorer.exe, 00000019.00000000.380841719.00000000017D0000.00000002.00020000.sdmp, explorer.exe, 0000001F.00000000.427551817.0000000005640000.00000004.00000001.sdmp, explorer.exe, 00000024.00000000.476541398.00000000017E0000.00000002.00020000.sdmp, explorer.exe, 00000029.00000000.547487382.0000000004D35000.00000004.00000001.sdmp	Binary or memory string: Progman
Source: explorer.exe, 00000014.00000000.341947116.0000000000CC7000.00000004.00000020.sdmp	Binary or memory string: Progmank
Source: explorer.exe, 00000029.00000000.536121227.0000000001450000.00000002.00020000.sdmp	Binary or memory string: kProgram Manager^
Source: explorer.exe, 0000001F.00000000.420844332.0000000001840000.00000002.00020000.sdmp	Binary or memory string: nProgram Manager_
Source: explorer.exe, 00000019.00000003.380500216.0000000004D00000.00000004.00000001.sdmp	Binary or memory string: Progmans (x86)\
Source: explorer.exe, 00000029.00000000.547294508.0000000004CB0000.00000004.00000001.sdmp	Binary or memory string: Shell_TrayWndN
Source: explorer.exe, 00000029.00000000.534217878.0000000000DF8000.00000004.00000020.sdmp	Binary or memory string: Progman_^
Source: rundll32.exe, 00000003.00000002.779972207.000001ED8D260000.00000002.00020000.sdmp, explorer.exe, 00000005.00000000.268809773.0000000001400000.00000002.00020000.sdmp, rundll32.exe, 00000006.00000002.778909245.000002B522320000.00000002.00020000.sdmp, rundll32.exe, 00000009.00000002.779015031.000002C96D870000.00000002.00020000.sdmp, explorer.exe, 0000000A.00000000.296780271.0000000001600000.00000002.00020000.sdmp, explorer.exe, 00000014.00000000.343068264.0000000001510000.00000002.00020000.sdmp, explorer.exe, 00000019.00000000.380841719.00000000017D0000.00000002.00020000.sdmp, explorer.exe, 0000001F.00000000.420844332.0000000001840000.00000002.00020000.sdmp, explorer.exe, 00000024.00000000.476541398.00000000017E0000.00000002.00020000.sdmp, explorer.exe, 00000029.00000000.536121227.0000000001450000.00000002.00020000.sdmp	Binary or memory string: Progmanlock
Source: explorer.exe, 00000005.00000000.251799118.0000000000EB8000.00000004.00000020.sdmp	Binary or memory string: ProgmanX
Source: explorer.exe, 0000001F.00000000.425141362.0000000005280000.00000004.00000001.sdmp	Binary or memory string: Shell_TrayWndKa
Source: explorer.exe, 00000014.00000000.348487421.0000000005040000.00000004.00000001.sdmp	Binary or memory string: Shell_TrayWndI
Source: explorer.exe, 00000024.00000000.476541398.00000000017E0000.00000002.00020000.sdmp	Binary or memory string: rProgram Manager
Source: explorer.exe, 00000005.00000000.260975284.0000000008ACF000.00000004.00000001.sdmp	Binary or memory string: Shell_TrayWndAj
Source: explorer.exe, 00000019.00000000.379668581.0000000001217000.00000004.00000020.sdmp	Binary or memory string: Progmanv
Source: explorer.exe, 0000000A.00000000.299766270.000000000504A000.00000004.00000001.sdmp	Binary or memory string: Progmanw

Source: C:\Windows\System32\loaddll64.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion InstallDate

Jump to behavior

Source: C:\Windows\System32\loaddll64.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: C:\Windows\System32\loaddll64.exe

Code function: 0_2_0000000140043FF0 GetUserNameW,

0_2_0000000140043FF0

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	Process Injection112	Masquerading1	OS Credential Dumping	Query Registry1	Remote Services	Archive Collected Data1	Exfiltration Over Other Network Medium	Encrypted Channel1	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Virtualization/Sandbox Evasion2	LSASS Memory	Security Software Discovery11	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Junk Data	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Process Injection112	Security Account Manager	Virtualization/Sandbox Evasion2	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Steganography	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Obfuscated Files or Information2	NTDS	Process Discovery3	Distributed Component Object Model	Input Capture	Scheduled Transfer	Protocol Impersonation	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	Rundll321	LSA Secrets	Application Window Discovery1	SSH	Keylogging	Data Transfer Size Limits	Fallback Channels	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	Software Packing2	Cached Domain Credentials	Account Discovery1	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features
External Remote Services	Scheduled Task	Startup Items	Startup Items	Compile After Delivery	DCSync	System Owner/User Discovery1	Windows Remote Management	Web Portal Capture	Exfiltration Over Alternative Protocol	Commonly Used Port	Rogue Wi-Fi Access Points		Data Encrypted for Impact
Drive-by Compromise	Command and Scripting Interpreter	Scheduled Task/Job	Scheduled Task/Job	Indicator Removal from Tools	Proc Filesystem	File and Directory Discovery2	Shared Webroot	Credential API Hooking	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Application Layer Protocol	Downgrade to Insecure Protocols		Generate Fraudulent Advertising Revenue
Exploit Public-Facing Application	PowerShell	At (Linux)	At (Linux)	Masquerading	/etc/passwd and /etc/shadow	System Information Discovery13	Software Deployment Tools	Data Staged	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	Web Protocols	Rogue Cellular Base Station		Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
a4vEYL53cZ.dll	55%	Virustotal		Browse
a4vEYL53cZ.dll	51%	Metadefender		Browse
a4vEYL53cZ.dll	60%	ReversingLabs	Win64.Trojan.Injexa

Dropped Files

No Antivirus matches

Unpacked PE Files

No Antivirus matches

Domains

No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://ns.adobe.co/1	0%	Avira URL Cloud	safe
http://purl.or	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

No contacted domains info

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.autoitscript.com/autoit3/J	explorer.exe, 00000005.00000000.272918660.0000000006840000.00000004.00000001.sdmp	false		high
http://ns.adobe.co/1	explorer.exe, 00000019.00000000.382237387.0000000003339000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown
http://purl.or	explorer.exe, 00000019.00000000.382237387.0000000003339000.00000004.00000001.sdmp	false	Avira URL Cloud: safe	unknown

Contacted IPs

No contacted IP infos

General Information

Joe Sandbox Version:	33.0.0 White Diamond
Analysis ID:	492636
Start date:	28.09.2021
Start time:	21:43:41
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 13m 33s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	a4vEYL53cZ (renamed file extension from none to dll)
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	41
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.evad.winDLL@17/1@0/0
EGA Information:	Failed
HDC Information:	Successful, ratio: 6.3% (good quality ratio 5.7%) Quality average: 84.1% Quality standard deviation: 31.2%
HCA Information:	Successful, ratio: 52% Number of executed functions: 58 Number of non-executed functions: 139
Cookbook Comments:	Adjust boot time Enable AMSI Override analysis time to 240s for rundll32
Warnings:	Show All Exclude process from analysis (whitelisted): MpCmdRun.exe, SearchUI.exe, BackgroundTransferHost.exe, ShellExperienceHost.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe Excluded IPs from analysis (whitelisted): 52.182.143.212, 184.30.21.144, 104.208.16.94, 20.42.73.29, 52.168.117.173, 20.42.65.92, 23.35.236.56, 20.50.102.62, 8.248.117.254, 67.27.158.126, 8.248.113.254, 67.27.233.126, 8.248.143.254, 20.199.120.182, 20.199.120.151, 80.67.82.211, 80.67.82.235, 40.112.88.60, 20.54.110.249, 204.79.197.200, 13.107.21.200 Excluded domains from analysis (whitelisted): onedsblobprdeus16.eastus.cloudapp.azure.com, fg.download.windowsupdate.com.c.footprint.net, store-images.s-microsoft.com-c.edgekey.net, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, a1449.dscg2.akamai.net, arc.msn.com, e12564.dspb.akamaiedge.net, wns.notify.trafficmanager.net, onedsblobprdcus15.centralus.cloudapp.azure.com, consumer-displaycatalogrp-aks2aks-europe.md.mp.microsoft.com.akadns.net, onedsblobprdeus15.eastus.cloudapp.azure.com, www-bing-com.dual-a-0001.a-msedge.net, arc.trafficmanager.net, displaycatalog.mp.microsoft.com, watson.telemetry.microsoft.com, img-prod-cms-rt-microsoft-com.akamaized.net, prod.fs.microsoft.com.akadns.net, onedsblobprdcus16.centralus.cloudapp.azure.com, www.bing.com, client.wns.windows.com, fs.microsoft.com, displaycatalog-rp-europe.md.mp.microsoft.com.akadns.net, dual-a-0001.a-msedge.net, wu-shim.trafficmanager.net, ris-prod.trafficmanager.net, neu-displaycatalogrp.useroor.bigcatalog.commerce.microsoft.com, asf-ris-prod-neu.northeurope.cloudapp.azure.com, e1723.g.akamaiedge.net, ctldl.windowsupdate.com, iris-de-prod-azsc-uks.uksouth.cloudapp.azure.com, ris.api.iris.microsoft.com, onedsblobprdeus17.eastus.cloudapp.azure.com, a-0001.a-afdentry.net.trafficmanager.net, store-images.s-microsoft.com, blobcollector.events.data.trafficmanager.net, displaycatalog-rp.md.mp.microsoft.com.akadns.net Not all processes where analyzed, report is missing behavior information Report size exceeded maximum capacity and may have missing behavior information. Report size getting too big, too many NtAllocateVirtualMemory calls found. Report size getting too big, too many NtEnumerateKey calls found. Report size getting too big, too many NtEnumerateValueKey calls found. Report size getting too big, too many NtOpenKeyEx calls found. Report size getting too big, too many NtProtectVirtualMemory calls found. Report size getting too big, too many NtQueryAttributesFile calls found. Report size getting too big, too many NtQueryValueKey calls found. Report size getting too big, too many NtReadVirtualMemory calls found.

Simulations

Behavior and APIs

Time	Type	Description
21:45:00	API Interceptor	479x Sleep call for process: explorer.exe modified

Joe Sandbox View / Context

IPs

No context

Domains

No context

ASN

No context

JA3 Fingerprints

No context

Dropped Files

No context

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Windows\Explorer\thumbcache_idx.db Download File
Process:	C:\Windows\explorer.exe
File Type:	data
Category:	modified
Size (bytes):	29232
Entropy (8bit):	0.005894213252755928
Encrypted:	false
SSDEEP:	3:tnElC:G
MD5:	4D9C1D76BA4558B9CE42B01E619E3053
SHA1:	1E5BB12B567E443A3A8B2CFCB28800437CCFAFCA
SHA-256:	CBC9A97F9BCF1AE406D191DAA4C393D778A60CFBF0499F066DD70CBD4744F59A
SHA-512:	08025CE1F212CF993732C92F5BBD045F2FE80DFBB200B4C2E8A9543B23C881F5A040D5791C8ABAFE450FEA53EEDCC4F0BD8BF36ABE5A6A1D256B1BA51CB1AACF
Malicious:	false
Preview:	..0 IMMM ...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General
File type:	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Entropy (8bit):	5.608636531535347
TrID:	Win64 Dynamic Link Library (generic) (102004/3) 86.43% Win64 Executable (generic) (12005/4) 10.17% Generic Win/DOS Executable (2004/3) 1.70% DOS Executable Generic (2002/1) 1.70% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.01%
File name:	a4vEYL53cZ.dll
File size:	1368064
MD5:	d49772c85d426ce5fe41cf8c5529a5ff
SHA1:	4eaa4a005cd6825706634cf5fb9b95c4f546778e
SHA256:	73541b82ca26c8c60a84354c657c42bd2ece5cfad3f49437a927b4265234b9da
SHA512:	ac76de00fd7f4cfaaac884990f02ff26883500d4a7c1c37e13a173de04b7228847527bca4737aa32e9498a05f473ac1a27ce98f35dead85fcc95e9c54efc924e
SSDEEP:	12288:NdMIwS97wJs6tSKDXEabXaC+jhc1S8XXk7CZzHsZH9dq0TbEA:jMIJxSDX3bqjhcfHk7MzH6zn
File Content Preview:	MZ......................@........................................[.r.:.!.:.!.:.!..[!n;.!.:.!d:.!..8!.:.!.Br!j:.!...!N:.!.hL!>:.!(d. \|;.!x.^!.:.!-d. .;.!.g. .;.!P^. .:.!.BN!.:.!.._!.;.!.._!.;.!..Y!v;.!!._!M;.!Rich.:.!....................................PE.

File Icon


Icon Hash:	54b26869f8c8cc00

Static PE Info

General
Entrypoint:	0x140078760
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x140000000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, DLL, LARGE_ADDRESS_AWARE
DLL Characteristics:	TERMINAL_SERVER_AWARE, DYNAMIC_BASE, NX_COMPAT, HIGH_ENTROPY_VA
Time Stamp:	0x60ADEC84 [Wed May 26 06:36:52 2021 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	5
OS Version Minor:	1
File Version Major:	5
File Version Minor:	1
Subsystem Version Major:	5
Subsystem Version Minor:	1
Import Hash:	c6b4c2eec8a93016c63563421e15f011

Entrypoint Preview

Instruction
xor eax, edx
jmp 00007F06F8B8961Ah
inc ecx
pop ecx
dec ecx
add ecx, 08h
call edi
push edi
dec eax
mov edi, dword ptr [00014784h]
dec esp
xor dword ptr [0001476Dh], ecx
jmp 00007F06F8B895F9h
xor eax, edx
xor eax, edx
xor eax, edx
xor eax, edx
xor eax, edx
xor eax, edx
xor eax, edx
xor eax, edx
xor eax, edx
xor eax, edx
xor eax, edx
xor eax, edx
xor eax, edx
xor eax, edx
xor eax, edx
xor eax, edx
xor eax, edx
xor eax, edx
xor eax, edx
xor eax, edx
xor eax, edx
xor eax, edx
xor eax, edx
xor eax, edx
ud2
int3
push ebx
push edi
push esi
dec eax
sub esp, 000000D0h
mov eax, 919AD45Fh
inc ecx
mov eax, eax
mov eax, 1F739ECFh
mov word ptr [esp+000000CEh], 804Dh
inc esp
mov ecx, dword ptr [esp+000000C8h]
inc esp
sub eax, ecx
mov dword ptr [esp+000000C8h], eax
dec eax
mov dword ptr [esp+000000B0h], 0074A7F1h
inc sp
mov edx, dword ptr [esp+000000C4h]
inc sp
mov dword ptr [esp+000000C4h], edx
dec esp
mov ebx, dword ptr [esp+000000B0h]
dec ebp
sub eax, ebx
dec esp
mov dword ptr [esp+000000A8h], eax
dec eax
mov dword ptr [esp+70h], ecx
dec eax
mov ecx, edx
dec eax
mov dword ptr [esp+68h], edx
inc sp
mov dword ptr [esp+66h], edx

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x108010	0x451b2
IMAGE_DIRECTORY_ENTRY_IMPORT	0x891b0	0x28	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x99000	0x2f98	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x9c000	0x244	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x7d010	0x38	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x7d000	0x10	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x7bb10	0x7c000	False	0.803878291961	data	7.84727441246	IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_READ
.rdata	0x7d000	0xc210	0xd000	False	0.772648737981	data	7.6188975428	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x8a000	0xd218	0xe000	False	0.125104631696	data	1.89187623617	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_WRITE, IMAGE_SCN_MEM_READ
.pdata	0x98000	0x138	0x1000	False	0.060791015625	data	0.590508203574	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.rsrc	0x99000	0x2f98	0x3000	False	0.302408854167	data	3.73793039709	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x9c000	0x244	0x1000	False	0.076171875	data	1.23641369386	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ
	0x9d000	0x6cd0	0x7000	False	0.00177873883929	data	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
	0xa4000	0x1f2a	0x2000	False	0.0037841796875	data	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
	0xa6000	0x13e	0x1000	False	0.00634765625	data	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
	0xa7000	0x6cd0	0x7000	False	0.00177873883929	data	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
	0xae000	0x7fd	0x1000	False	0.00634765625	data	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
	0xaf000	0x13e	0x1000	False	0.00634765625	data	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
	0xb0000	0x1f7	0x1000	False	0.00634765625	data	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
	0xb1000	0x23b	0x1000	False	0.00634765625	data	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
	0xb2000	0x1278	0x2000	False	0.0037841796875	data	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
	0xb4000	0x13e	0x1000	False	0.00634765625	data	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
	0xb5000	0x9cd	0x1000	False	0.00634765625	data	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
	0xb6000	0x1124	0x2000	False	0.0037841796875	data	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
	0xb8000	0x23b	0x1000	False	0.00634765625	data	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
	0xb9000	0x1af	0x1000	False	0.00634765625	data	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
	0xba000	0x45174	0x46000	False	0.0010498046875	data	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
	0x100000	0x197d	0x2000	False	0.0037841796875	data	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
	0x102000	0x13e	0x1000	False	0.00634765625	data	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
	0x103000	0xd33	0x1000	False	0.00634765625	data	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
	0x104000	0x13e	0x1000	False	0.00634765625	data	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
	0x105000	0x1124	0x2000	False	0.0037841796875	data	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
	0x107000	0x389	0x1000	False	0.00634765625	data	0.0	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
	0x108000	0x451c2	0x46000	False	0.220598493304	data	5.77128234001	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country
RT_CURSOR	0x99640	0x134	data	English	United States
RT_BITMAP	0x99778	0x3e8	data	Hebrew	Israel
RT_BITMAP	0x99b60	0xd8	data	English	United States
RT_BITMAP	0x99c38	0xd8	data	English	United States
RT_ICON	0x99d10	0x2e8	data	Hebrew	Israel
RT_ICON	0x99ff8	0x128	GLS_BINARY_LSB_FIRST	Hebrew	Israel
RT_ICON	0x9a120	0x128	GLS_BINARY_LSB_FIRST	Hebrew	Israel
RT_MENU	0x9a248	0x430	data	English	United States
RT_MENU	0x9a678	0x1a0	data	English	United States
RT_DIALOG	0x9a818	0xa2	data	Hebrew	Israel
RT_DIALOG	0x9a8c0	0x296	data	Hebrew	Israel
RT_DIALOG	0x9ab58	0x99a	data	Hebrew	Israel
RT_DIALOG	0x9b4f8	0xfa	data	Hebrew	Israel
RT_STRING	0x9b5f8	0x230	data	English	United States
RT_STRING	0x9b828	0x116	data	English	United States
RT_STRING	0x9b940	0x4c	data	English	United States
RT_STRING	0x9b990	0x50	data	English	United States
RT_STRING	0x9b9e0	0xd6	data	English	United States
RT_STRING	0x9bab8	0x2e	data	English	United States
RT_STRING	0x9bae8	0x42	data	English	United States
RT_STRING	0x9bb30	0x6a	data	English	United States
RT_STRING	0x9bba0	0x34	data	English	United States
RT_STRING	0x9bbd8	0x62	data	English	United States
RT_ACCELERATOR	0x9bc40	0x48	data	Hebrew	Israel
RT_GROUP_CURSOR	0x9bc88	0x14	Lotus unknown worksheet or configuration, revision 0x1	English	United States
RT_GROUP_ICON	0x9bca0	0x22	data	Hebrew	Israel
RT_GROUP_ICON	0x9bcc8	0x14	data	Hebrew	Israel
RT_VERSION	0x9bce0	0x2b8	COM executable for DOS	Hebrew	Israel

Imports

DLL	Import
CRYPT32.dll	CryptImportPublicKeyInfo

Exports

Name	Ordinal	Address
??0?$PatternProvider@VExpandCollapseProvider@DirectUI@@UIExpandCollapseProvider@@$00@DirectUI@@QEAA@XZ	1	0x14000f950
??0?$PatternProvider@VGridItemProvider@DirectUI@@UIGridItemProvider@@$01@DirectUI@@QEAA@XZ	2	0x140048b04
??0?$PatternProvider@VGridProvider@DirectUI@@UIGridProvider@@$02@DirectUI@@QEAA@XZ	3	0x140067fac
??0?$PatternProvider@VInvokeProvider@DirectUI@@UIInvokeProvider@@$0A@@DirectUI@@QEAA@XZ	4	0x14001a330
??0?$PatternProvider@VRangeValueProvider@DirectUI@@UIRangeValueProvider@@$03@DirectUI@@QEAA@XZ	5	0x140056ac8
??0?$PatternProvider@VScrollItemProvider@DirectUI@@UIScrollItemProvider@@$05@DirectUI@@QEAA@XZ	6	0x140036f3c
??0?$PatternProvider@VScrollProvider@DirectUI@@UIScrollProvider@@$04@DirectUI@@QEAA@XZ	7	0x14005dc88
??0?$PatternProvider@VSelectionItemProvider@DirectUI@@UISelectionItemProvider@@$06@DirectUI@@QEAA@XZ	8	0x14000602c
??0?$PatternProvider@VSelectionProvider@DirectUI@@UISelectionProvider@@$07@DirectUI@@QEAA@XZ	9	0x14006b2dc
??0?$PatternProvider@VTableItemProvider@DirectUI@@UITableItemProvider@@$09@DirectUI@@QEAA@XZ	10	0x14005d0f0
??0?$PatternProvider@VTableProvider@DirectUI@@UITableProvider@@$08@DirectUI@@QEAA@XZ	11	0x14006624c
??0?$PatternProvider@VToggleProvider@DirectUI@@UIToggleProvider@@$0L@@DirectUI@@QEAA@XZ	12	0x140017948
??0?$PatternProvider@VValueProvider@DirectUI@@UIValueProvider@@$0M@@DirectUI@@QEAA@XZ	13	0x140047410
??0?$SafeArrayAccessor@H@DirectUI@@QEAA@XZ	14	0x140041c94
??0AccessibleButton@DirectUI@@QEAA@$$QEAV01@@Z	15	0x140021984
??0AccessibleButton@DirectUI@@QEAA@AEBV01@@Z	16	0x140061538
??0AccessibleButton@DirectUI@@QEAA@XZ	17	0x140059268
??0AnimationStrip@DirectUI@@QEAA@AEBV01@@Z	18	0x140008e40
??0AnimationStrip@DirectUI@@QEAA@XZ	19	0x14002d628
??0AutoButton@DirectUI@@QEAA@$$QEAV01@@Z	20	0x140059104
??0AutoButton@DirectUI@@QEAA@AEBV01@@Z	21	0x140057c40
??0AutoButton@DirectUI@@QEAA@XZ	22	0x140074720
??0AutoLock@DirectUI@@QEAA@PEAU_RTL_CRITICAL_SECTION@@@Z	23	0x1400255ec
??0AutoThread@DirectUI@@QEAA@XZ	24	0x140045ea4
??0AutoVariant@DirectUI@@QEAA@XZ	25	0x140023eac
??0BaseScrollBar@DirectUI@@QEAA@$$QEAV01@@Z	26	0x140045b68
??0BaseScrollBar@DirectUI@@QEAA@AEBV01@@Z	27	0x140025fa4
??0BaseScrollBar@DirectUI@@QEAA@XZ	28	0x140071444
??0BaseScrollViewer@DirectUI@@QEAA@AEBV01@@Z	29	0x140011f3c
??0BaseScrollViewer@DirectUI@@QEAA@XZ	30	0x14000b3ac
??0Bind@DirectUI@@QEAA@$$QEAV01@@Z	31	0x14005ef7c
??0Bind@DirectUI@@QEAA@AEBV01@@Z	32	0x1400241f0
??0Bind@DirectUI@@QEAA@XZ	33	0x140062ba4
??0BorderLayout@DirectUI@@QEAA@AEBV01@@Z	34	0x140020d38
??0BorderLayout@DirectUI@@QEAA@XZ	35	0x14003dea8
??0Browser@DirectUI@@QEAA@$$QEAV01@@Z	36	0x14006da04
??0Browser@DirectUI@@QEAA@AEBV01@@Z	37	0x14003861c
??0Browser@DirectUI@@QEAA@XZ	38	0x1400351ec
??0BrowserSelectionProxy@DirectUI@@QEAA@$$QEAV01@@Z	39	0x14003d5b4
??0BrowserSelectionProxy@DirectUI@@QEAA@AEBV01@@Z	40	0x140014f24
??0BrowserSelectionProxy@DirectUI@@QEAA@XZ	41	0x14007056c
??0Button@DirectUI@@QEAA@AEBV01@@Z	42	0x140064eb0
??0Button@DirectUI@@QEAA@XZ	43	0x14003c2a8
??0CCAVI@DirectUI@@QEAA@$$QEAV01@@Z	44	0x14001cf3c
??0CCAVI@DirectUI@@QEAA@AEBV01@@Z	45	0x14001c160
??0CCAVI@DirectUI@@QEAA@XZ	46	0x14000277c
??0CCBase@DirectUI@@QEAA@AEBV01@@Z	47	0x140040b94
??0CCBase@DirectUI@@QEAA@KPEBG@Z	48	0x140007324
??0CCBaseCheckRadioButton@DirectUI@@QEAA@$$QEAV01@@Z	49	0x140032684
??0CCBaseCheckRadioButton@DirectUI@@QEAA@AEBV01@@Z	50	0x140008814
??0CCBaseCheckRadioButton@DirectUI@@QEAA@K@Z	51	0x140045070
??0CCBaseScrollBar@DirectUI@@QEAA@$$QEAV01@@Z	52	0x140061f54
??0CCBaseScrollBar@DirectUI@@QEAA@AEBV01@@Z	53	0x140029a7c
??0CCBaseScrollBar@DirectUI@@QEAA@K@Z	54	0x140075664
??0CCCheckBox@DirectUI@@QEAA@$$QEAV01@@Z	55	0x14006e4b0
??0CCCheckBox@DirectUI@@QEAA@AEBV01@@Z	56	0x14001e234
??0CCCheckBox@DirectUI@@QEAA@K@Z	57	0x14005514c
??0CCCommandLink@DirectUI@@QEAA@$$QEAV01@@Z	58	0x140079a10
??0CCCommandLink@DirectUI@@QEAA@AEBV01@@Z	59	0x140036db0
??0CCCommandLink@DirectUI@@QEAA@K@Z	60	0x14005beb4
??0CCHScrollBar@DirectUI@@QEAA@$$QEAV01@@Z	61	0x140004b18
??0CCHScrollBar@DirectUI@@QEAA@AEBV01@@Z	62	0x140046e04
??0CCHScrollBar@DirectUI@@QEAA@XZ	63	0x1400060e4
??0CCListBox@DirectUI@@QEAA@$$QEAV01@@Z	64	0x14006a80c
??0CCListBox@DirectUI@@QEAA@AEBV01@@Z	65	0x140054ce0
??0CCListBox@DirectUI@@QEAA@XZ	66	0x140038a14
??0CCListView@DirectUI@@QEAA@$$QEAV01@@Z	67	0x140042cd8
??0CCListView@DirectUI@@QEAA@AEBV01@@Z	68	0x14004a048
??0CCListView@DirectUI@@QEAA@XZ	69	0x1400708f0
??0CCProgressBar@DirectUI@@QEAA@$$QEAV01@@Z	70	0x14004c2b8
??0CCProgressBar@DirectUI@@QEAA@AEBV01@@Z	71	0x140066c28
??0CCProgressBar@DirectUI@@QEAA@XZ	72	0x140034b3c
??0CCPushButton@DirectUI@@QEAA@$$QEAV01@@Z	73	0x14001b010
??0CCPushButton@DirectUI@@QEAA@AEBV01@@Z	74	0x14003aaa8
??0CCPushButton@DirectUI@@QEAA@K@Z	75	0x14007a72c
??0CCRadioButton@DirectUI@@QEAA@$$QEAV01@@Z	76	0x14003a148
??0CCRadioButton@DirectUI@@QEAA@AEBV01@@Z	77	0x140050484
??0CCRadioButton@DirectUI@@QEAA@XZ	78	0x140074e3c
??0CCSysLink@DirectUI@@QEAA@$$QEAV01@@Z	79	0x140015ca4
??0CCSysLink@DirectUI@@QEAA@AEBV01@@Z	80	0x1400763f4
??0CCSysLink@DirectUI@@QEAA@XZ	81	0x140039f8c
??0CCTrackBar@DirectUI@@QEAA@$$QEAV01@@Z	82	0x1400661b8
??0CCTrackBar@DirectUI@@QEAA@AEBV01@@Z	83	0x1400360ac
??0CCTrackBar@DirectUI@@QEAA@XZ	84	0x14001bebc
??0CCTreeView@DirectUI@@QEAA@$$QEAV01@@Z	85	0x140035604
??0CCTreeView@DirectUI@@QEAA@AEBV01@@Z	86	0x140044838
??0CCTreeView@DirectUI@@QEAA@K@Z	87	0x140070698
??0CCVScrollBar@DirectUI@@QEAA@$$QEAV01@@Z	88	0x140062668
??0CCVScrollBar@DirectUI@@QEAA@AEBV01@@Z	89	0x14002db18
??0CCVScrollBar@DirectUI@@QEAA@XZ	90	0x14006a348
??0CallstackTracker@DirectUI@@QEAA@XZ	91	0x140032b04
??0CheckBoxGlyph@DirectUI@@QEAA@AEBV01@@Z	92	0x1400384f8
??0CheckBoxGlyph@DirectUI@@QEAA@XZ	93	0x14000b794
??0ClassInfoBase@DirectUI@@QEAA@AEBV01@@Z	94	0x140057f60
??0ClassInfoBase@DirectUI@@QEAA@XZ	95	0x140076b34
??0Clipper@DirectUI@@QEAA@$$QEAV01@@Z	96	0x14003e3e4
??0Clipper@DirectUI@@QEAA@AEBV01@@Z	97	0x14007bfc8
??0Clipper@DirectUI@@QEAA@XZ	98	0x14004b270
??0Combobox@DirectUI@@QEAA@AEBV01@@Z	99	0x14002bf88
??0Combobox@DirectUI@@QEAA@XZ	100	0x14003267c
??0CritSecLock@DirectUI@@QEAA@PEAU_RTL_CRITICAL_SECTION@@@Z	101	0x140079c34
??0DCSurface@DirectUI@@QEAA@AEBV01@@Z	102	0x140062a80
??0DCSurface@DirectUI@@QEAA@PEAUHDC__@@@Z	103	0x140065dac
??0DUIFactory@DirectUI@@QEAA@PEAUHWND__@@@Z	104	0x140077320
??0DUIXmlParser@DirectUI@@QEAA@AEBV01@@Z	105	0x14004a2e0
??0DUIXmlParser@DirectUI@@QEAA@XZ	106	0x140063574
??0DialogElement@DirectUI@@QEAA@$$QEAV01@@Z	107	0x14004bb38
??0DialogElement@DirectUI@@QEAA@AEBV01@@Z	108	0x14004d79c
??0DialogElement@DirectUI@@QEAA@XZ	109	0x140044c18
??0DuiAccessible@DirectUI@@QEAA@XZ	110	0x1400327c0
??0Edit@DirectUI@@QEAA@AEBV01@@Z	111	0x1400677ec
??0Edit@DirectUI@@QEAA@XZ	112	0x1400345bc
??0Element@DirectUI@@QEAA@AEBV01@@Z	113	0x140034790
??0Element@DirectUI@@QEAA@XZ	114	0x1400342c8
??0ElementProvider@DirectUI@@QEAA@XZ	115	0x1400678cc
??0ElementProxy@DirectUI@@IEAA@XZ	116	0x14000cac0
??0ElementProxy@DirectUI@@QEAA@$$QEAV01@@Z	117	0x14004c83c
??0ElementProxy@DirectUI@@QEAA@AEBV01@@Z	118	0x140079820
??0ElementWithHWND@DirectUI@@QEAA@$$QEAV01@@Z	119	0x14000f910
??0ElementWithHWND@DirectUI@@QEAA@AEBV01@@Z	120	0x14005bc3c
??0ElementWithHWND@DirectUI@@QEAA@XZ	121	0x14003deb4
??0ExpandCollapseProvider@DirectUI@@QEAA@XZ	122	0x140043760
??0ExpandCollapseProxy@DirectUI@@QEAA@$$QEAV01@@Z	123	0x1400155e4
??0ExpandCollapseProxy@DirectUI@@QEAA@AEBV01@@Z	124	0x1400750f8
??0ExpandCollapseProxy@DirectUI@@QEAA@XZ	125	0x140070f08
??0Expandable@DirectUI@@QEAA@$$QEAV01@@Z	126	0x140030a4c
??0Expandable@DirectUI@@QEAA@AEBV01@@Z	127	0x140059e0c
??0Expandable@DirectUI@@QEAA@XZ	128	0x14007479c
??0Expando@DirectUI@@QEAA@$$QEAV01@@Z	129	0x140066350
??0Expando@DirectUI@@QEAA@AEBV01@@Z	130	0x1400459f0
??0Expando@DirectUI@@QEAA@XZ	131	0x1400047d0
??0ExpandoButtonGlyph@DirectUI@@QEAA@AEBV01@@Z	132	0x140014028
??0ExpandoButtonGlyph@DirectUI@@QEAA@XZ	133	0x14006d4d8
??0FillLayout@DirectUI@@QEAA@AEBV01@@Z	134	0x14002e794
??0FillLayout@DirectUI@@QEAA@XZ	135	0x140005b18
??0FlowLayout@DirectUI@@QEAA@AEBV01@@Z	136	0x140078fec
??0FlowLayout@DirectUI@@QEAA@XZ	137	0x14003426c
??0FontCache@DirectUI@@QEAA@$$QEAV01@@Z	138	0x140036834
??0FontCache@DirectUI@@QEAA@AEBV01@@Z	139	0x140048834
??0FontCache@DirectUI@@QEAA@XZ	140	0x140018378
??0FontCheckOut@DirectUI@@QEAA@PEAVElement@1@PEAUHDC__@@@Z	141	0x14006e248
??0GridItemProvider@DirectUI@@QEAA@XZ	142	0x1400593c8
??0GridItemProxy@DirectUI@@QEAA@$$QEAV01@@Z	143	0x14004a484
??0GridItemProxy@DirectUI@@QEAA@AEBV01@@Z	144	0x14007c6b0
??0GridItemProxy@DirectUI@@QEAA@XZ	145	0x140060710
??0GridLayout@DirectUI@@QEAA@AEBV01@@Z	146	0x140021b94
??0GridLayout@DirectUI@@QEAA@XZ	147	0x14004bc5c
??0GridProvider@DirectUI@@QEAA@XZ	148	0x14001b2bc
??0GridProxy@DirectUI@@QEAA@$$QEAV01@@Z	149	0x14005ddd0
??0GridProxy@DirectUI@@QEAA@AEBV01@@Z	150	0x14004b98c
??0GridProxy@DirectUI@@QEAA@XZ	151	0x140059640
??0HWNDElement@DirectUI@@QEAA@AEBV01@@Z	152	0x140077728
??0HWNDElement@DirectUI@@QEAA@XZ	153	0x1400652e8
??0HWNDElementAccessible@DirectUI@@QEAA@XZ	154	0x14002dde8
??0HWNDElementProvider@DirectUI@@QEAA@XZ	155	0x140071fa0
??0HWNDElementProxy@DirectUI@@IEAA@XZ	156	0x14003ab48
??0HWNDElementProxy@DirectUI@@QEAA@$$QEAV01@@Z	157	0x140060e94
??0HWNDElementProxy@DirectUI@@QEAA@AEBV01@@Z	158	0x140009de0
??0HWNDHost@DirectUI@@QEAA@AEBV01@@Z	159	0x140043790
??0HWNDHost@DirectUI@@QEAA@XZ	160	0x140055de4
??0HWNDHostAccessible@DirectUI@@QEAA@XZ	161	0x1400700d8
??0HWNDHostClientAccessible@DirectUI@@QEAA@XZ	162	0x14002381c
??0IDataEngine@DirectUI@@QEAA@AEBU01@@Z	163	0x140022ad4
??0IDataEngine@DirectUI@@QEAA@XZ	164	0x14007220c
??0IDataEntry@DirectUI@@QEAA@AEBU01@@Z	165	0x14001a2dc
??0IDataEntry@DirectUI@@QEAA@XZ	166	0x140049078
??0IProvider@DirectUI@@QEAA@$$QEAV01@@Z	167	0x140054fe8
??0IProvider@DirectUI@@QEAA@AEBV01@@Z	168	0x1400224dc
??0IProvider@DirectUI@@QEAA@XZ	169	0x140052f8c
??0ISBLeak@DirectUI@@QEAA@$$QEAU01@@Z	170	0x140007aac
??0ISBLeak@DirectUI@@QEAA@AEBU01@@Z	171	0x1400377f4
??0ISBLeak@DirectUI@@QEAA@XZ	172	0x1400134e4
??0IXElementCP@DirectUI@@QEAA@$$QEAV01@@Z	173	0x1400088c0
??0IXElementCP@DirectUI@@QEAA@AEBV01@@Z	174	0x140011a54
??0IXElementCP@DirectUI@@QEAA@XZ	175	0x140014170
??0IXProviderCP@DirectUI@@QEAA@$$QEAV01@@Z	176	0x14007bca0
??0IXProviderCP@DirectUI@@QEAA@AEBV01@@Z	177	0x140064678
??0IXProviderCP@DirectUI@@QEAA@XZ	178	0x14005c864
??0InvokeHelper@DirectUI@@QEAA@XZ	179	0x14001f17c
??0InvokeProvider@DirectUI@@QEAA@XZ	180	0x140025ab8
??0InvokeProxy@DirectUI@@QEAA@$$QEAV01@@Z	181	0x140062510
??0InvokeProxy@DirectUI@@QEAA@AEBV01@@Z	182	0x140021890
??0InvokeProxy@DirectUI@@QEAA@XZ	183	0x140064234
??0ItemList@DirectUI@@QEAA@XZ	184	0x140024c44
??0Layout@DirectUI@@QEAA@AEBV01@@Z	185	0x140054714
??0Layout@DirectUI@@QEAA@XZ	186	0x140005c84
??0LinkedList@DirectUI@@QEAA@XZ	187	0x140011884
??0Macro@DirectUI@@QEAA@$$QEAV01@@Z	188	0x1400799b8
??0Macro@DirectUI@@QEAA@AEBV01@@Z	189	0x140057c74
??0Macro@DirectUI@@QEAA@XZ	190	0x14005e3e8
??0ModernProgressBar@DirectUI@@QEAA@XZ	191	0x14003e2f8
??0ModernProgressBarRangeValueProxy@DirectUI@@QEAA@$$QEAV01@@Z	192	0x140006148
??0ModernProgressBarRangeValueProxy@DirectUI@@QEAA@AEBV01@@Z	193	0x140046e4c
??0ModernProgressBarRangeValueProxy@DirectUI@@QEAA@XZ	194	0x14005f900
??0ModernProgressRing@DirectUI@@QEAA@XZ	195	0x14001f16c
??0Movie@DirectUI@@QEAA@AEBV01@@Z	196	0x14003110c
??0Movie@DirectUI@@QEAA@XZ	197	0x140063f10
??0NativeHWNDHost@DirectUI@@QEAA@AEBV01@@Z	198	0x1400118b4
??0NativeHWNDHost@DirectUI@@QEAA@XZ	199	0x140009c40
??0Navigator@DirectUI@@QEAA@$$QEAV01@@Z	200	0x14004f43c
??0Navigator@DirectUI@@QEAA@AEBV01@@Z	201	0x14006ef38
??0Navigator@DirectUI@@QEAA@XZ	202	0x140042e4c
??0NavigatorSelectionItemProxy@DirectUI@@QEAA@$$QEAV01@@Z	203	0x14005fc54
??0NavigatorSelectionItemProxy@DirectUI@@QEAA@AEBV01@@Z	204	0x14004b9a8
??0NavigatorSelectionItemProxy@DirectUI@@QEAA@XZ	205	0x140009bcc
??0NineGridLayout@DirectUI@@QEAA@AEBV01@@Z	206	0x140037e90
??0NineGridLayout@DirectUI@@QEAA@XZ	207	0x14004c584
??0PText@DirectUI@@QEAA@AEBV01@@Z	208	0x140015890
??0PText@DirectUI@@QEAA@XZ	209	0x14001a3b4
??0Page@DirectUI@@QEAA@$$QEAV01@@Z	210	0x14005939c
??0Page@DirectUI@@QEAA@AEBV01@@Z	211	0x14006bc4c
??0Page@DirectUI@@QEAA@XZ	212	0x14001e0b4
??0Pages@DirectUI@@QEAA@$$QEAV01@@Z	213	0x14000ab70
??0Pages@DirectUI@@QEAA@AEBV01@@Z	214	0x14000d7a8
??0Pages@DirectUI@@QEAA@XZ	215	0x140074bf4
??0Progress@DirectUI@@QEAA@AEBV01@@Z	216	0x140021588
??0Progress@DirectUI@@QEAA@XZ	217	0x14000b8c8
??0ProgressRangeValueProxy@DirectUI@@QEAA@$$QEAV01@@Z	218	0x14000f948
??0ProgressRangeValueProxy@DirectUI@@QEAA@AEBV01@@Z	219	0x1400095e8
??0ProgressRangeValueProxy@DirectUI@@QEAA@XZ	220	0x1400645f4
??0ProviderProxy@DirectUI@@IEAA@XZ	221	0x14005b814
??0ProviderProxy@DirectUI@@QEAA@$$QEAV01@@Z	222	0x140005d58
??0ProviderProxy@DirectUI@@QEAA@AEBV01@@Z	223	0x14000ec78
??0Proxy@DirectUI@@QEAA@AEBV01@@Z	224	0x14001ba6c
??0Proxy@DirectUI@@QEAA@XZ	225	0x1400609c4
??0PushButton@DirectUI@@QEAA@$$QEAV01@@Z	226	0x14003d064
??0PushButton@DirectUI@@QEAA@AEBV01@@Z	227	0x140060944
??0PushButton@DirectUI@@QEAA@XZ	228	0x140073b54
??0RadioButtonGlyph@DirectUI@@QEAA@AEBV01@@Z	229	0x14002c964
??0RadioButtonGlyph@DirectUI@@QEAA@XZ	230	0x140025a78
??0RangeValueProvider@DirectUI@@QEAA@XZ	231	0x140029e50
??0RangeValueProxy@DirectUI@@IEAA@XZ	232	0x140056b84
??0RangeValueProxy@DirectUI@@QEAA@$$QEAV01@@Z	233	0x14005704c
??0RangeValueProxy@DirectUI@@QEAA@AEBV01@@Z	234	0x14001027c
??0RefPointElement@DirectUI@@QEAA@AEBV01@@Z	235	0x14002a26c
??0RefPointElement@DirectUI@@QEAA@XZ	236	0x14004e468
??0RefcountBase@DirectUI@@QEAA@XZ	237	0x14006731c
??0RepeatButton@DirectUI@@QEAA@AEBV01@@Z	238	0x14000e43c
??0RepeatButton@DirectUI@@QEAA@XZ	239	0x14006bf60
??0Repeater@DirectUI@@QEAA@$$QEAV01@@Z	240	0x140053b58
??0Repeater@DirectUI@@QEAA@AEBV01@@Z	241	0x1400364f4
??0Repeater@DirectUI@@QEAA@XZ	242	0x1400589c0
??0ResourceModuleHandles@DirectUI@@QEAA@XZ	243	0x14004c944
??0RichText@DirectUI@@QEAA@XZ	244	0x14004a4ac
??0RowLayout@DirectUI@@QEAA@AEBV01@@Z	245	0x140013be4
??0RowLayout@DirectUI@@QEAA@XZ	246	0x14001f7e4
??0ScrollBar@DirectUI@@QEAA@AEBV01@@Z	247	0x140069b9c
??0ScrollBar@DirectUI@@QEAA@XZ	248	0x14005f198
??0ScrollBarRangeValueProxy@DirectUI@@QEAA@$$QEAV01@@Z	249	0x1400595c0
??0ScrollBarRangeValueProxy@DirectUI@@QEAA@AEBV01@@Z	250	0x140065040
??0ScrollBarRangeValueProxy@DirectUI@@QEAA@XZ	251	0x14001c30c
??0ScrollItemProvider@DirectUI@@QEAA@XZ	252	0x1400488e4
??0ScrollItemProxy@DirectUI@@QEAA@$$QEAV01@@Z	253	0x140028f44
??0ScrollItemProxy@DirectUI@@QEAA@AEBV01@@Z	254	0x140015650
??0ScrollItemProxy@DirectUI@@QEAA@XZ	255	0x1400498b8
??0ScrollProvider@DirectUI@@QEAA@XZ	256	0x140050b10
??0ScrollProxy@DirectUI@@QEAA@$$QEAV01@@Z	257	0x140008180
??0ScrollProxy@DirectUI@@QEAA@AEBV01@@Z	258	0x14000e188
??0ScrollProxy@DirectUI@@QEAA@XZ	259	0x140045bf4
??0ScrollViewer@DirectUI@@QEAA@AEBV01@@Z	260	0x14002b964
??0ScrollViewer@DirectUI@@QEAA@XZ	261	0x1400564e4
??0SelectionItemProvider@DirectUI@@QEAA@XZ	262	0x140009890
??0SelectionItemProxy@DirectUI@@IEAA@XZ	263	0x140013cf8
??0SelectionItemProxy@DirectUI@@QEAA@$$QEAV01@@Z	264	0x1400333a4
??0SelectionItemProxy@DirectUI@@QEAA@AEBV01@@Z	265	0x14001ae80
??0SelectionProvider@DirectUI@@QEAA@XZ	266	0x140074fdc
??0SelectionProxy@DirectUI@@IEAA@XZ	267	0x140014710
??0SelectionProxy@DirectUI@@QEAA@$$QEAV01@@Z	268	0x14004d774
??0SelectionProxy@DirectUI@@QEAA@AEBV01@@Z	269	0x14000bedc
??0Selector@DirectUI@@QEAA@AEBV01@@Z	270	0x140054cdc
??0Selector@DirectUI@@QEAA@XZ	271	0x1400307ac
??0SelectorNoDefault@DirectUI@@QEAA@$$QEAV01@@Z	272	0x14002ad78
??0SelectorNoDefault@DirectUI@@QEAA@AEBV01@@Z	273	0x140014a28
??0SelectorNoDefault@DirectUI@@QEAA@XZ	274	0x14001f9a8
??0SelectorSelectionItemProxy@DirectUI@@QEAA@$$QEAV01@@Z	275	0x14002d3e8
??0SelectorSelectionItemProxy@DirectUI@@QEAA@AEBV01@@Z	276	0x14007722c
??0SelectorSelectionItemProxy@DirectUI@@QEAA@XZ	277	0x14006d288
??0SelectorSelectionProxy@DirectUI@@QEAA@$$QEAV01@@Z	278	0x14004ed2c
??0SelectorSelectionProxy@DirectUI@@QEAA@AEBV01@@Z	279	0x14002d50c
??0SelectorSelectionProxy@DirectUI@@QEAA@XZ	280	0x140060e94
??0ShellBorderLayout@DirectUI@@QEAA@AEBV01@@Z	281	0x14002ea14
??0ShellBorderLayout@DirectUI@@QEAA@XZ	282	0x140037ad8
??0StyleSheet@DirectUI@@QEAA@$$QEAV01@@Z	283	0x140064cc4
??0StyleSheet@DirectUI@@QEAA@AEBV01@@Z	284	0x14006e554
??0StyleSheet@DirectUI@@QEAA@XZ	285	0x1400534ac
??0StyledScrollViewer@DirectUI@@QEAA@AEBV01@@Z	286	0x140022600
??0StyledScrollViewer@DirectUI@@QEAA@XZ	287	0x140016a8c
??0Surface@DirectUI@@QEAA@AEBV01@@Z	288	0x140028dc0
??0Surface@DirectUI@@QEAA@XZ	289	0x140030890
??0TableItemProvider@DirectUI@@QEAA@XZ	290	0x140004784
??0TableItemProxy@DirectUI@@QEAA@$$QEAV01@@Z	291	0x14007c0e0
??0TableItemProxy@DirectUI@@QEAA@AEBV01@@Z	292	0x140038628
??0TableItemProxy@DirectUI@@QEAA@XZ	293	0x140022208
??0TableLayout@DirectUI@@QEAA@AEBV01@@Z	294	0x140036f84
??0TableLayout@DirectUI@@QEAA@XZ	295	0x140068a8c
??0TableProvider@DirectUI@@QEAA@XZ	296	0x14006a2e0
??0TableProxy@DirectUI@@QEAA@$$QEAV01@@Z	297	0x140038894
??0TableProxy@DirectUI@@QEAA@AEBV01@@Z	298	0x140012fe8
??0TableProxy@DirectUI@@QEAA@XZ	299	0x14005f240
??0TaskPage@DirectUI@@QEAA@AEBV01@@Z	300	0x14001edb8
??0TaskPage@DirectUI@@QEAA@XZ	301	0x14004f7f4
??0TextGraphic@DirectUI@@QEAA@$$QEAV01@@Z	302	0x140027e4c
??0TextGraphic@DirectUI@@QEAA@AEBV01@@Z	303	0x140005308
??0TextGraphic@DirectUI@@QEAA@XZ	304	0x14003aad0
??0Thumb@DirectUI@@QEAA@AEBV01@@Z	305	0x1400313a4
??0Thumb@DirectUI@@QEAA@XZ	306	0x14005cdc0
??0ToggleProvider@DirectUI@@QEAA@XZ	307	0x14005ec0c
??0ToggleProxy@DirectUI@@QEAA@$$QEAV01@@Z	308	0x14007651c
??0ToggleProxy@DirectUI@@QEAA@AEBV01@@Z	309	0x14000b71c
??0ToggleProxy@DirectUI@@QEAA@XZ	310	0x140069184
??0TouchButton@DirectUI@@QEAA@XZ	311	0x14000ec60
??0TouchCheckBox@DirectUI@@QEAA@XZ	312	0x1400149dc
??0TouchCheckBoxGlyph@DirectUI@@QEAA@XZ	313	0x1400600bc
??0TouchCommandButton@DirectUI@@QEAA@XZ	314	0x14007b634
??0TouchEdit2@DirectUI@@QEAA@XZ	315	0x14003525c
??0TouchHWNDElement@DirectUI@@QEAA@XZ	316	0x14001e6d4
??0TouchHyperLink@DirectUI@@QEAA@XZ	317	0x140072758
??0TouchRepeatButton@DirectUI@@QEAA@XZ	318	0x14004038c
??0TouchScrollBar@DirectUI@@QEAA@XZ	319	0x14001afd4
??0TouchSelect@DirectUI@@QEAA@XZ	320	0x14001efd0
??0TouchSelectItem@DirectUI@@QEAA@XZ	321	0x140028cd4
??0UnknownElement@DirectUI@@QEAA@AEBV01@@Z	322	0x1400380a4
??0UnknownElement@DirectUI@@QEAA@XZ	323	0x140046dfc
??0ValueProvider@DirectUI@@QEAA@XZ	324	0x140021788
??0ValueProxy@DirectUI@@QEAA@$$QEAV01@@Z	325	0x1400244e8
??0ValueProxy@DirectUI@@QEAA@AEBV01@@Z	326	0x14007ae84
??0ValueProxy@DirectUI@@QEAA@XZ	327	0x140006214
??0VerticalFlowLayout@DirectUI@@QEAA@AEBV01@@Z	328	0x140015e9c
??0VerticalFlowLayout@DirectUI@@QEAA@XZ	329	0x1400768a0
??0Viewer@DirectUI@@QEAA@AEBV01@@Z	330	0x14005a150
??0Viewer@DirectUI@@QEAA@XZ	331	0x14007ad78
??0XBaby@DirectUI@@QEAA@AEBV01@@Z	332	0x14005e470
??0XBaby@DirectUI@@QEAA@XZ	333	0x140068188
??0XElement@DirectUI@@QEAA@AEBV01@@Z	334	0x14006bea4
??0XElement@DirectUI@@QEAA@XZ	335	0x140035714
??0XHost@DirectUI@@QEAA@XZ	336	0x140076e64
??0XProvider@DirectUI@@QEAA@AEBV01@@Z	337	0x140012610
??0XProvider@DirectUI@@QEAA@XZ	338	0x14007b764
??0XResourceProvider@DirectUI@@QEAA@$$QEAV01@@Z	339	0x140024770
??0XResourceProvider@DirectUI@@QEAA@AEBV01@@Z	340	0x14000abd0
??0XResourceProvider@DirectUI@@QEAA@XZ	341	0x14006a908
??1?$PatternProvider@VExpandCollapseProvider@DirectUI@@UIExpandCollapseProvider@@$00@DirectUI@@UEAA@XZ	342	0x1400722e4
??1?$PatternProvider@VGridItemProvider@DirectUI@@UIGridItemProvider@@$01@DirectUI@@UEAA@XZ	343	0x140029c68
??1?$PatternProvider@VGridProvider@DirectUI@@UIGridProvider@@$02@DirectUI@@UEAA@XZ	344	0x14006a934
??1?$PatternProvider@VInvokeProvider@DirectUI@@UIInvokeProvider@@$0A@@DirectUI@@UEAA@XZ	345	0x140029998
??1?$PatternProvider@VRangeValueProvider@DirectUI@@UIRangeValueProvider@@$03@DirectUI@@UEAA@XZ	346	0x14005ba6c
??1?$PatternProvider@VScrollItemProvider@DirectUI@@UIScrollItemProvider@@$05@DirectUI@@UEAA@XZ	347	0x14005315c
??1?$PatternProvider@VScrollProvider@DirectUI@@UIScrollProvider@@$04@DirectUI@@UEAA@XZ	348	0x14005de7c
??1?$PatternProvider@VSelectionItemProvider@DirectUI@@UISelectionItemProvider@@$06@DirectUI@@UEAA@XZ	349	0x14003da58
??1?$PatternProvider@VSelectionProvider@DirectUI@@UISelectionProvider@@$07@DirectUI@@UEAA@XZ	350	0x140077f8c
??1?$PatternProvider@VTableItemProvider@DirectUI@@UITableItemProvider@@$09@DirectUI@@UEAA@XZ	351	0x14005eb14
??1?$PatternProvider@VTableProvider@DirectUI@@UITableProvider@@$08@DirectUI@@UEAA@XZ	352	0x140041770
??1?$PatternProvider@VToggleProvider@DirectUI@@UIToggleProvider@@$0L@@DirectUI@@UEAA@XZ	353	0x140004454
??1?$PatternProvider@VValueProvider@DirectUI@@UIValueProvider@@$0M@@DirectUI@@UEAA@XZ	354	0x14002d004
??1?$SafeArrayAccessor@H@DirectUI@@QEAA@XZ	355	0x14006a13c
??1AccessibleButton@DirectUI@@UEAA@XZ	356	0x14006fedc
??1AnimationStrip@DirectUI@@UEAA@XZ	357	0x1400721f0
??1AutoButton@DirectUI@@UEAA@XZ	358	0x14001c6c8
??1AutoLock@DirectUI@@QEAA@XZ	359	0x14000f5e4
??1AutoThread@DirectUI@@QEAA@XZ	360	0x14000cde0
??1AutoVariant@DirectUI@@QEAA@XZ	361	0x14001aea0
??1BaseScrollViewer@DirectUI@@UEAA@XZ	362	0x1400414b0
??1Bind@DirectUI@@UEAA@XZ	363	0x14000e704
??1BorderLayout@DirectUI@@UEAA@XZ	364	0x140079a6c
??1Browser@DirectUI@@UEAA@XZ	365	0x140005c14
??1Button@DirectUI@@UEAA@XZ	366	0x14006dad4
??1CCAVI@DirectUI@@UEAA@XZ	367	0x140045318
??1CCBase@DirectUI@@UEAA@XZ	368	0x140032620
??1CCBaseCheckRadioButton@DirectUI@@UEAA@XZ	369	0x14007ae3c
??1CCBaseScrollBar@DirectUI@@UEAA@XZ	370	0x14004607c
??1CCCheckBox@DirectUI@@UEAA@XZ	371	0x140029b34
??1CCCommandLink@DirectUI@@UEAA@XZ	372	0x14001d99c
??1CCHScrollBar@DirectUI@@UEAA@XZ	373	0x140011668
??1CCListBox@DirectUI@@UEAA@XZ	374	0x14000c864
??1CCListView@DirectUI@@UEAA@XZ	375	0x14004b648
??1CCProgressBar@DirectUI@@UEAA@XZ	376	0x140029944
??1CCPushButton@DirectUI@@UEAA@XZ	377	0x14000ea38
??1CCRadioButton@DirectUI@@UEAA@XZ	378	0x140077c50
??1CCSysLink@DirectUI@@UEAA@XZ	379	0x14000470c
??1CCTrackBar@DirectUI@@UEAA@XZ	380	0x140064ddc
??1CCTreeView@DirectUI@@UEAA@XZ	381	0x140043d88
??1CCVScrollBar@DirectUI@@UEAA@XZ	382	0x1400675e0
??1CallstackTracker@DirectUI@@QEAA@XZ	383	0x14000d4b8
??1CheckBoxGlyph@DirectUI@@UEAA@XZ	384	0x140043e88
??1ClassInfoBase@DirectUI@@UEAA@XZ	385	0x1400010b4
??1Clipper@DirectUI@@UEAA@XZ	386	0x140023c24
??1Combobox@DirectUI@@UEAA@XZ	387	0x140062590
??1CritSecLock@DirectUI@@QEAA@XZ	388	0x140045448
??1DCSurface@DirectUI@@UEAA@XZ	389	0x1400417d8
??1DUIFactory@DirectUI@@QEAA@XZ	390	0x14000a2b0
??1DUIXmlParser@DirectUI@@UEAA@XZ	391	0x14002fd00
??1DialogElement@DirectUI@@UEAA@XZ	392	0x140078c20
??1DuiAccessible@DirectUI@@UEAA@XZ	393	0x140063be0
??1Edit@DirectUI@@UEAA@XZ	394	0x14001f3c4
??1Element@DirectUI@@UEAA@XZ	395	0x140076d78
??1ElementProvider@DirectUI@@UEAA@XZ	396	0x14000189c
??1ElementWithHWND@DirectUI@@UEAA@XZ	397	0x14005bc90
??1ExpandCollapseProvider@DirectUI@@UEAA@XZ	398	0x140035ac8
??1Expandable@DirectUI@@UEAA@XZ	399	0x14004c43c
??1Expando@DirectUI@@UEAA@XZ	400	0x140030704
??1ExpandoButtonGlyph@DirectUI@@UEAA@XZ	401	0x14000a0ec
??1FillLayout@DirectUI@@UEAA@XZ	402	0x14005ec34
??1FlowLayout@DirectUI@@UEAA@XZ	403	0x14004b254
??1FontCheckOut@DirectUI@@QEAA@XZ	404	0x14001b4a0
??1GridItemProvider@DirectUI@@UEAA@XZ	405	0x140043d74
??1GridLayout@DirectUI@@UEAA@XZ	406	0x140073e88
??1GridProvider@DirectUI@@UEAA@XZ	407	0x140034034
??1HWNDElement@DirectUI@@UEAA@XZ	408	0x140031e68
??1HWNDElementAccessible@DirectUI@@UEAA@XZ	409	0x140013dc8
??1HWNDElementProvider@DirectUI@@UEAA@XZ	410	0x140011cac
??1HWNDHost@DirectUI@@UEAA@XZ	411	0x1400152bc
??1HWNDHostAccessible@DirectUI@@UEAA@XZ	412	0x14004873c
??1HWNDHostClientAccessible@DirectUI@@UEAA@XZ	413	0x14004d320
??1IDataEngine@DirectUI@@UEAA@XZ	414	0x14005f414
??1IDataEntry@DirectUI@@UEAA@XZ	415	0x14000ced0
??1InvokeHelper@DirectUI@@UEAA@XZ	416	0x14004f2b0
??1InvokeProvider@DirectUI@@UEAA@XZ	417	0x140078f8c
??1ItemList@DirectUI@@UEAA@XZ	418	0x1400361ec
??1Layout@DirectUI@@UEAA@XZ	419	0x14004a81c
??1LinkedList@DirectUI@@QEAA@XZ	420	0x140074b5c
??1Macro@DirectUI@@UEAA@XZ	421	0x140011104
??1ModernProgressBar@DirectUI@@UEAA@XZ	422	0x140050c24
??1ModernProgressRing@DirectUI@@UEAA@XZ	423	0x1400213c4
??1Movie@DirectUI@@UEAA@XZ	424	0x140019fc0
??1NativeHWNDHost@DirectUI@@UEAA@XZ	425	0x14002f7d8
??1Navigator@DirectUI@@UEAA@XZ	426	0x140040150
??1NineGridLayout@DirectUI@@UEAA@XZ	427	0x14004371c
??1PText@DirectUI@@UEAA@XZ	428	0x14005e708
??1Page@DirectUI@@UEAA@XZ	429	0x140001fd4
??1Pages@DirectUI@@UEAA@XZ	430	0x140012df8
??1Progress@DirectUI@@UEAA@XZ	431	0x140042074
??1Proxy@DirectUI@@UEAA@XZ	432	0x14005e668
??1PushButton@DirectUI@@UEAA@XZ	433	0x14006ae80
??1RadioButtonGlyph@DirectUI@@UEAA@XZ	434	0x140030cc4
??1RangeValueProvider@DirectUI@@UEAA@XZ	435	0x1400088e4
??1RefPointElement@DirectUI@@UEAA@XZ	436	0x14001d4ec
??1RefcountBase@DirectUI@@UEAA@XZ	437	0x140044870
??1RepeatButton@DirectUI@@UEAA@XZ	438	0x140058c40
??1Repeater@DirectUI@@UEAA@XZ	439	0x14004895c
??1ResourceModuleHandles@DirectUI@@QEAA@XZ	440	0x140002240
??1RichText@DirectUI@@UEAA@XZ	441	0x140041224
??1RowLayout@DirectUI@@UEAA@XZ	442	0x14001fbe8
??1ScrollBar@DirectUI@@UEAA@XZ	443	0x14004cf90
??1ScrollItemProvider@DirectUI@@UEAA@XZ	444	0x14001aac0
??1ScrollProvider@DirectUI@@UEAA@XZ	445	0x140076fa4
??1ScrollViewer@DirectUI@@UEAA@XZ	446	0x140079e4c
??1SelectionItemProvider@DirectUI@@UEAA@XZ	447	0x140046cac
??1SelectionProvider@DirectUI@@UEAA@XZ	448	0x1400049b0
??1Selector@DirectUI@@UEAA@XZ	449	0x140002124
??1SelectorNoDefault@DirectUI@@UEAA@XZ	450	0x140052594
??1ShellBorderLayout@DirectUI@@UEAA@XZ	451	0x1400387cc
??1StyledScrollViewer@DirectUI@@UEAA@XZ	452	0x140064e70
??1Surface@DirectUI@@UEAA@XZ	453	0x14001303c
??1TableItemProvider@DirectUI@@UEAA@XZ	454	0x140051068
??1TableLayout@DirectUI@@UEAA@XZ	455	0x140011984
??1TableProvider@DirectUI@@UEAA@XZ	456	0x14003bcac
??1TaskPage@DirectUI@@UEAA@XZ	457	0x140067698
??1TextGraphic@DirectUI@@UEAA@XZ	458	0x140039ef0
??1Thumb@DirectUI@@UEAA@XZ	459	0x14004a81c
??1ToggleProvider@DirectUI@@UEAA@XZ	460	0x14000d688
??1TouchButton@DirectUI@@UEAA@XZ	461	0x1400166f0
??1TouchCheckBox@DirectUI@@UEAA@XZ	462	0x14006ff28
??1TouchCheckBoxGlyph@DirectUI@@UEAA@XZ	463	0x1400098e8
??1TouchHWNDElement@DirectUI@@UEAA@XZ	464	0x140038514
??1TouchHyperLink@DirectUI@@UEAA@XZ	465	0x14005cc84
??1TouchScrollBar@DirectUI@@UEAA@XZ	466	0x140071e28
??1TouchSelect@DirectUI@@UEAA@XZ	467	0x1400749d0
??1TouchSelectItem@DirectUI@@UEAA@XZ	468	0x140038cf8
??1UnknownElement@DirectUI@@UEAA@XZ	469	0x140029a10
??1ValueProvider@DirectUI@@UEAA@XZ	470	0x14005c1c8
??1VerticalFlowLayout@DirectUI@@UEAA@XZ	471	0x14005a5d8
??1Viewer@DirectUI@@UEAA@XZ	472	0x140033c70
??1XBaby@DirectUI@@UEAA@XZ	473	0x1400644dc
??1XElement@DirectUI@@UEAA@XZ	474	0x1400287fc
??1XHost@DirectUI@@QEAA@XZ	475	0x140079004
??1XProvider@DirectUI@@UEAA@XZ	476	0x140067bd0
??4?$FunctionDefinition@H@DUIXmlParser@DirectUI@@QEAAAEAU012@$$QEAU012@@Z	477	0x14005c9a8
??4?$FunctionDefinition@H@DUIXmlParser@DirectUI@@QEAAAEAU012@AEBU012@@Z	478	0x14005a17c
??4?$FunctionDefinition@K@DUIXmlParser@DirectUI@@QEAAAEAU012@$$QEAU012@@Z	479	0x140046438
??4?$FunctionDefinition@K@DUIXmlParser@DirectUI@@QEAAAEAU012@AEBU012@@Z	480	0x14006b238
??4?$FunctionDefinition@PEAVValue@DirectUI@@@DUIXmlParser@DirectUI@@QEAAAEAU012@$$QEAU012@@Z	481	0x14000e508
??4?$FunctionDefinition@PEAVValue@DirectUI@@@DUIXmlParser@DirectUI@@QEAAAEAU012@AEBU012@@Z	482	0x14006388c
??4?$FunctionDefinition@UScaledRECT@DirectUI@@@DUIXmlParser@DirectUI@@QEAAAEAU012@$$QEAU012@@Z	483	0x14002dd44
??4?$FunctionDefinition@UScaledRECT@DirectUI@@@DUIXmlParser@DirectUI@@QEAAAEAU012@AEBU012@@Z	484	0x140017e44
??4?$FunctionDefinition@UScaledSIZE@DirectUI@@@DUIXmlParser@DirectUI@@QEAAAEAU012@$$QEAU012@@Z	485	0x14002b070
??4?$FunctionDefinition@UScaledSIZE@DirectUI@@@DUIXmlParser@DirectUI@@QEAAAEAU012@AEBU012@@Z	486	0x14002e05c
??4ACCESSIBLEROLE@AccessibleButton@DirectUI@@QEAAAEAU012@$$QEAU012@@Z	487	0x140077ec0
??4ACCESSIBLEROLE@AccessibleButton@DirectUI@@QEAAAEAU012@AEBU012@@Z	488	0x14004c428
??4AccessibleButton@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	489	0x140079ec0
??4AccessibleButton@DirectUI@@QEAAAEAV01@AEBV01@@Z	490	0x14001d98c
??4AnimationStrip@DirectUI@@QEAAAEAV01@AEBV01@@Z	491	0x14005ef78
??4AutoButton@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	492	0x140059d68
??4AutoButton@DirectUI@@QEAAAEAV01@AEBV01@@Z	493	0x140003994
??4AutoLock@DirectUI@@QEAAAEAV01@AEBV01@@Z	494	0x14000e5c4
??4AutoThread@DirectUI@@QEAAAEAV01@AEBV01@@Z	495	0x14006b880
??4AutoVariant@DirectUI@@QEAAAEAV01@AEBV01@@Z	496	0x14004fb04
??4BaseScrollBar@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	497	0x140063244
??4BaseScrollBar@DirectUI@@QEAAAEAV01@AEBV01@@Z	498	0x14001f254
??4BaseScrollViewer@DirectUI@@QEAAAEAV01@AEBV01@@Z	499	0x14002849c
??4Bind@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	500	0x1400208a4
??4Bind@DirectUI@@QEAAAEAV01@AEBV01@@Z	501	0x140072c10
??4BorderLayout@DirectUI@@QEAAAEAV01@AEBV01@@Z	502	0x14007175c
??4Browser@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	503	0x14007c0e8
??4Browser@DirectUI@@QEAAAEAV01@AEBV01@@Z	504	0x14003c330
??4BrowserSelectionProxy@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	505	0x140032758
??4BrowserSelectionProxy@DirectUI@@QEAAAEAV01@AEBV01@@Z	506	0x1400651fc
??4Button@DirectUI@@QEAAAEAV01@AEBV01@@Z	507	0x14003b658
??4CCAVI@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	508	0x140047bc4
??4CCAVI@DirectUI@@QEAAAEAV01@AEBV01@@Z	509	0x14003b5f8
??4CCBase@DirectUI@@QEAAAEAV01@AEBV01@@Z	510	0x1400065fc
??4CCBaseCheckRadioButton@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	511	0x140052c48
??4CCBaseCheckRadioButton@DirectUI@@QEAAAEAV01@AEBV01@@Z	512	0x140013fd8
??4CCBaseScrollBar@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	513	0x140009f30
??4CCBaseScrollBar@DirectUI@@QEAAAEAV01@AEBV01@@Z	514	0x140004150
??4CCCheckBox@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	515	0x140079370
??4CCCheckBox@DirectUI@@QEAAAEAV01@AEBV01@@Z	516	0x14000ee58
??4CCCommandLink@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	517	0x140021a1c
??4CCCommandLink@DirectUI@@QEAAAEAV01@AEBV01@@Z	518	0x140049668
??4CCHScrollBar@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	519	0x14005e200
??4CCHScrollBar@DirectUI@@QEAAAEAV01@AEBV01@@Z	520	0x140014508
??4CCListBox@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	521	0x140001980
??4CCListBox@DirectUI@@QEAAAEAV01@AEBV01@@Z	522	0x140032bdc
??4CCListView@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	523	0x14001f978
??4CCListView@DirectUI@@QEAAAEAV01@AEBV01@@Z	524	0x140054170
??4CCProgressBar@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	525	0x140047b40
??4CCProgressBar@DirectUI@@QEAAAEAV01@AEBV01@@Z	526	0x14004ef38
??4CCPushButton@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	527	0x140077ee0
??4CCPushButton@DirectUI@@QEAAAEAV01@AEBV01@@Z	528	0x140023834
??4CCRadioButton@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	529	0x140011030
??4CCRadioButton@DirectUI@@QEAAAEAV01@AEBV01@@Z	530	0x14006a3cc
??4CCSysLink@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	531	0x14001be28
??4CCSysLink@DirectUI@@QEAAAEAV01@AEBV01@@Z	532	0x1400138cc
??4CCTrackBar@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	533	0x14001d5a4
??4CCTrackBar@DirectUI@@QEAAAEAV01@AEBV01@@Z	534	0x14006d75c
??4CCTreeView@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	535	0x14003b6e8
??4CCTreeView@DirectUI@@QEAAAEAV01@AEBV01@@Z	536	0x140073bfc
??4CCVScrollBar@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	537	0x1400107bc
??4CCVScrollBar@DirectUI@@QEAAAEAV01@AEBV01@@Z	538	0x140022fbc
??4CallstackTracker@DirectUI@@QEAAAEAV01@AEBV01@@Z	539	0x14004ccf4
??4CheckBoxGlyph@DirectUI@@QEAAAEAV01@AEBV01@@Z	540	0x140024658
??4ClassInfoBase@DirectUI@@QEAAAEAV01@AEBV01@@Z	541	0x140007e08
??4Clipper@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	542	0x14003e32c
??4Clipper@DirectUI@@QEAAAEAV01@AEBV01@@Z	543	0x14005dcec
??4Combobox@DirectUI@@QEAAAEAV01@AEBV01@@Z	544	0x14003db70
??4CritSecLock@DirectUI@@QEAAAEAV01@AEBV01@@Z	545	0x1400168cc
??4DCSurface@DirectUI@@QEAAAEAV01@AEBV01@@Z	546	0x140058840
??4DUIFactory@DirectUI@@QEAAAEAV01@AEBV01@@Z	547	0x140048b60
??4DUIXmlParser@DirectUI@@QEAAAEAV01@AEBV01@@Z	548	0x14005626c
??4DialogElement@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	549	0x140039e44
??4DialogElement@DirectUI@@QEAAAEAV01@AEBV01@@Z	550	0x140012660
??4DialogElementCore@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	551	0x140030568
??4DialogElementCore@DirectUI@@QEAAAEAV01@AEBV01@@Z	552	0x140066904
??4DuiNavigate@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	553	0x14000ed40
??4DuiNavigate@DirectUI@@QEAAAEAV01@AEBV01@@Z	554	0x14006a984
??4Edit@DirectUI@@QEAAAEAV01@AEBV01@@Z	555	0x140012074
??4Element@DirectUI@@QEAAAEAV01@AEBV01@@Z	556	0x14003345c
??4ElementProviderManager@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	557	0x1400160d4
??4ElementProviderManager@DirectUI@@QEAAAEAV01@AEBV01@@Z	558	0x140008540
??4ElementProxy@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	559	0x140060f10
??4ElementProxy@DirectUI@@QEAAAEAV01@AEBV01@@Z	560	0x14003d594
??4ElementWithHWND@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	561	0x1400511e4
??4ElementWithHWND@DirectUI@@QEAAAEAV01@AEBV01@@Z	562	0x14006fafc
??4EventManager@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	563	0x140012ba0
??4EventManager@DirectUI@@QEAAAEAV01@AEBV01@@Z	564	0x140004a90
??4ExpandCollapseProxy@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	565	0x140043468
??4ExpandCollapseProxy@DirectUI@@QEAAAEAV01@AEBV01@@Z	566	0x140039090
??4Expandable@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	567	0x14002b860
??4Expandable@DirectUI@@QEAAAEAV01@AEBV01@@Z	568	0x140013268
??4Expando@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	569	0x140062210
??4Expando@DirectUI@@QEAAAEAV01@AEBV01@@Z	570	0x14005f1dc
??4ExpandoButtonGlyph@DirectUI@@QEAAAEAV01@AEBV01@@Z	571	0x140012e98
??4Expression@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	572	0x14005abf0
??4Expression@DirectUI@@QEAAAEAV01@AEBV01@@Z	573	0x14000fbac
??4FillLayout@DirectUI@@QEAAAEAV01@AEBV01@@Z	574	0x140016418
??4FlowLayout@DirectUI@@QEAAAEAV01@AEBV01@@Z	575	0x140029370
??4FontCache@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	576	0x14000afdc
??4FontCache@DirectUI@@QEAAAEAV01@AEBV01@@Z	577	0x14003d568
??4FontCheckOut@DirectUI@@QEAAAEAV01@AEBV01@@Z	578	0x14003457c
??4GridItemProxy@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	579	0x14006df58
??4GridItemProxy@DirectUI@@QEAAAEAV01@AEBV01@@Z	580	0x1400434d0
??4GridLayout@DirectUI@@QEAAAEAV01@AEBV01@@Z	581	0x14004ce54
??4GridProxy@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	582	0x140039328
??4GridProxy@DirectUI@@QEAAAEAV01@AEBV01@@Z	583	0x140043e3c
??4HWNDElement@DirectUI@@QEAAAEAV01@AEBV01@@Z	584	0x14004f6e8
??4HWNDElementProxy@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	585	0x14001c96c
??4HWNDElementProxy@DirectUI@@QEAAAEAV01@AEBV01@@Z	586	0x140039118
??4HWNDHost@DirectUI@@QEAAAEAV01@AEBV01@@Z	587	0x1400428dc
??4IDataEngine@DirectUI@@QEAAAEAU01@AEBU01@@Z	588	0x140010360
??4IDataEntry@DirectUI@@QEAAAEAU01@AEBU01@@Z	589	0x140048ebc
??4IProvider@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	590	0x14005e834
??4IProvider@DirectUI@@QEAAAEAV01@AEBV01@@Z	591	0x14004dc84
??4ISBLeak@DirectUI@@QEAAAEAU01@$$QEAU01@@Z	592	0x140019d90
??4ISBLeak@DirectUI@@QEAAAEAU01@AEBU01@@Z	593	0x140069ce4
??4IXElementCP@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	594	0x14001f7b4
??4IXElementCP@DirectUI@@QEAAAEAV01@AEBV01@@Z	595	0x140019c50
??4IXProviderCP@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	596	0x14001b818
??4IXProviderCP@DirectUI@@QEAAAEAV01@AEBV01@@Z	597	0x14003db60
??4InvokeManager@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	598	0x14001dba8
??4InvokeManager@DirectUI@@QEAAAEAV01@AEBV01@@Z	599	0x140034b28
??4InvokeProxy@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	600	0x14005ce70
??4InvokeProxy@DirectUI@@QEAAAEAV01@AEBV01@@Z	601	0x1400211dc
??4Layout@DirectUI@@QEAAAEAV01@AEBV01@@Z	602	0x140043e68
??4LinkedList@DirectUI@@QEAAAEAV01@AEBV01@@Z	603	0x14007a6c8
??4LinkedListNode@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	604	0x14000d5a8
??4LinkedListNode@DirectUI@@QEAAAEAV01@AEBV01@@Z	605	0x140025ab8
??4Macro@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	606	0x140066020
??4Macro@DirectUI@@QEAAAEAV01@AEBV01@@Z	607	0x14003df40
??4ModernProgressBarRangeValueProxy@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	608	0x140009de0
??4ModernProgressBarRangeValueProxy@DirectUI@@QEAAAEAV01@AEBV01@@Z	609	0x140077f4c
??4Movie@DirectUI@@QEAAAEAV01@AEBV01@@Z	610	0x14000fd68
??4NativeHWNDHost@DirectUI@@QEAAAEAV01@AEBV01@@Z	611	0x14007c808
??4NavReference@DirectUI@@QEAAAEAU01@$$QEAU01@@Z	612	0x14002dc80
??4NavReference@DirectUI@@QEAAAEAU01@AEBU01@@Z	613	0x14003c244
??4NavScoring@DirectUI@@QEAAAEAU01@$$QEAU01@@Z	614	0x140058e48
??4NavScoring@DirectUI@@QEAAAEAU01@AEBU01@@Z	615	0x140062cd0
??4Navigator@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	616	0x140013f64
??4Navigator@DirectUI@@QEAAAEAV01@AEBV01@@Z	617	0x140012654
??4NavigatorSelectionItemProxy@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	618	0x14004edd4
??4NavigatorSelectionItemProxy@DirectUI@@QEAAAEAV01@AEBV01@@Z	619	0x14006e3cc
??4NineGridLayout@DirectUI@@QEAAAEAV01@AEBV01@@Z	620	0x14004ffac
??4PText@DirectUI@@QEAAAEAV01@AEBV01@@Z	621	0x1400410b0
??4PVLAnimation@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	622	0x1400783d0
??4PVLAnimation@DirectUI@@QEAAAEAV01@AEBV01@@Z	623	0x140078f3c
??4Page@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	624	0x14007371c
??4Page@DirectUI@@QEAAAEAV01@AEBV01@@Z	625	0x14005e4e0
??4Pages@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	626	0x14004f99c
??4Pages@DirectUI@@QEAAAEAV01@AEBV01@@Z	627	0x14002d01c
??4Progress@DirectUI@@QEAAAEAV01@AEBV01@@Z	628	0x140039118
??4ProgressRangeValueProxy@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	629	0x14000c4a4
??4ProgressRangeValueProxy@DirectUI@@QEAAAEAV01@AEBV01@@Z	630	0x140034134
??4ProviderProxy@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	631	0x140014520
??4ProviderProxy@DirectUI@@QEAAAEAV01@AEBV01@@Z	632	0x140017138
??4Proxy@DirectUI@@QEAAAEAV01@AEBV01@@Z	633	0x1400620a4
??4PushButton@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	634	0x140052db0
??4PushButton@DirectUI@@QEAAAEAV01@AEBV01@@Z	635	0x1400628d4
??4RadioButtonGlyph@DirectUI@@QEAAAEAV01@AEBV01@@Z	636	0x140039d88
??4RangeValueProxy@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	637	0x14007acfc
??4RangeValueProxy@DirectUI@@QEAAAEAV01@AEBV01@@Z	638	0x140034508
??4RefPointElement@DirectUI@@QEAAAEAV01@AEBV01@@Z	639	0x14002a3b0
??4RepeatButton@DirectUI@@QEAAAEAV01@AEBV01@@Z	640	0x14004d310
??4Repeater@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	641	0x14004f50c
??4Repeater@DirectUI@@QEAAAEAV01@AEBV01@@Z	642	0x14006c038
??4ResourceModuleHandles@DirectUI@@QEAAAEAV01@AEBV01@@Z	643	0x14004c49c
??4RowLayout@DirectUI@@QEAAAEAV01@AEBV01@@Z	644	0x14001cab8
??4Schema@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	645	0x140028d30
??4Schema@DirectUI@@QEAAAEAV01@AEBV01@@Z	646	0x140018848
??4ScrollBar@DirectUI@@QEAAAEAV01@AEBV01@@Z	647	0x140016f0c
??4ScrollBarRangeValueProxy@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	648	0x1400706b8
??4ScrollBarRangeValueProxy@DirectUI@@QEAAAEAV01@AEBV01@@Z	649	0x14004a024
??4ScrollItemProxy@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	650	0x140009670
??4ScrollItemProxy@DirectUI@@QEAAAEAV01@AEBV01@@Z	651	0x1400122d8
??4ScrollProxy@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	652	0x140057348
??4ScrollProxy@DirectUI@@QEAAAEAV01@AEBV01@@Z	653	0x140001588
??4ScrollViewer@DirectUI@@QEAAAEAV01@AEBV01@@Z	654	0x14003f0a8
??4SelectionItemProxy@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	655	0x140055c7c
??4SelectionItemProxy@DirectUI@@QEAAAEAV01@AEBV01@@Z	656	0x140071fe8
??4SelectionProxy@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	657	0x1400151a4
??4SelectionProxy@DirectUI@@QEAAAEAV01@AEBV01@@Z	658	0x14005c62c
??4Selector@DirectUI@@QEAAAEAV01@AEBV01@@Z	659	0x14007bc20
??4SelectorNoDefault@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	660	0x14000c03c
??4SelectorNoDefault@DirectUI@@QEAAAEAV01@AEBV01@@Z	661	0x14000dedc
??4SelectorSelectionItemProxy@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	662	0x1400151c4
??4SelectorSelectionItemProxy@DirectUI@@QEAAAEAV01@AEBV01@@Z	663	0x14004b580
??4SelectorSelectionProxy@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	664	0x1400798e4
??4SelectorSelectionProxy@DirectUI@@QEAAAEAV01@AEBV01@@Z	665	0x140003eb8
??4ShellBorderLayout@DirectUI@@QEAAAEAV01@AEBV01@@Z	666	0x140060850
??4StyleSheet@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	667	0x1400527d4
??4StyleSheet@DirectUI@@QEAAAEAV01@AEBV01@@Z	668	0x140056c84
??4StyledScrollViewer@DirectUI@@QEAAAEAV01@AEBV01@@Z	669	0x1400474c4
??4Surface@DirectUI@@QEAAAEAV01@AEBV01@@Z	670	0x140016db0
??4TableItemProxy@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	671	0x14002f2e8
??4TableItemProxy@DirectUI@@QEAAAEAV01@AEBV01@@Z	672	0x14004770c
??4TableLayout@DirectUI@@QEAAAEAV01@AEBV01@@Z	673	0x140019d54
??4TableProxy@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	674	0x14001ec60
??4TableProxy@DirectUI@@QEAAAEAV01@AEBV01@@Z	675	0x140027150
??4TaskPage@DirectUI@@QEAAAEAV01@AEBV01@@Z	676	0x140018aa8
??4TextGraphic@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	677	0x14006fa9c
??4TextGraphic@DirectUI@@QEAAAEAV01@AEBV01@@Z	678	0x14004640c
??4Thumb@DirectUI@@QEAAAEAV01@AEBV01@@Z	679	0x140042398
??4ToggleProxy@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	680	0x140005664
??4ToggleProxy@DirectUI@@QEAAAEAV01@AEBV01@@Z	681	0x14002dd98
??4UnknownElement@DirectUI@@QEAAAEAV01@AEBV01@@Z	682	0x14003ab10
??4Value@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	683	0x1400325c4
??4Value@DirectUI@@QEAAAEAV01@AEBV01@@Z	684	0x140066c24
??4ValueProxy@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	685	0x14000f560
??4ValueProxy@DirectUI@@QEAAAEAV01@AEBV01@@Z	686	0x14002a6ac
??4VerticalFlowLayout@DirectUI@@QEAAAEAV01@AEBV01@@Z	687	0x1400409f0
??4Viewer@DirectUI@@QEAAAEAV01@AEBV01@@Z	688	0x140059560
??4XBaby@DirectUI@@QEAAAEAV01@AEBV01@@Z	689	0x14001b298
??4XElement@DirectUI@@QEAAAEAV01@AEBV01@@Z	690	0x1400792c8
??4XHost@DirectUI@@QEAAAEAV01@AEBV01@@Z	691	0x1400465ac
??4XProvider@DirectUI@@QEAAAEAV01@AEBV01@@Z	692	0x140031d8c
??4XResourceProvider@DirectUI@@QEAAAEAV01@$$QEAV01@@Z	693	0x14001b17c
??4XResourceProvider@DirectUI@@QEAAAEAV01@AEBV01@@Z	694	0x1400496a0
??B?$SafeArrayAccessor@H@DirectUI@@QEAAPEAHXZ	695	0x14007af2c
??BTaskPage@DirectUI@@QEAAPEAU_PSP@@XZ	696	0x14000726c
??_7?$PatternProvider@VExpandCollapseProvider@DirectUI@@UIExpandCollapseProvider@@$00@DirectUI@@6BIProvider@1@@	697	0x14003d4a4
??_7?$PatternProvider@VExpandCollapseProvider@DirectUI@@UIExpandCollapseProvider@@$00@DirectUI@@6BRefcountBase@1@@	698	0x1400288d4
??_7?$PatternProvider@VGridItemProvider@DirectUI@@UIGridItemProvider@@$01@DirectUI@@6BIProvider@1@@	699	0x140013a9c
??_7?$PatternProvider@VGridItemProvider@DirectUI@@UIGridItemProvider@@$01@DirectUI@@6BRefcountBase@1@@	700	0x14001ed14
??_7?$PatternProvider@VGridProvider@DirectUI@@UIGridProvider@@$02@DirectUI@@6BIProvider@1@@	701	0x140028924
??_7?$PatternProvider@VGridProvider@DirectUI@@UIGridProvider@@$02@DirectUI@@6BRefcountBase@1@@	702	0x140061448
??_7?$PatternProvider@VInvokeProvider@DirectUI@@UIInvokeProvider@@$0A@@DirectUI@@6BIProvider@1@@	703	0x140072268
??_7?$PatternProvider@VInvokeProvider@DirectUI@@UIInvokeProvider@@$0A@@DirectUI@@6BRefcountBase@1@@	704	0x1400452e4
??_7?$PatternProvider@VRangeValueProvider@DirectUI@@UIRangeValueProvider@@$03@DirectUI@@6BIProvider@1@@	705	0x14000efd8
??_7?$PatternProvider@VRangeValueProvider@DirectUI@@UIRangeValueProvider@@$03@DirectUI@@6BRefcountBase@1@@	706	0x140066334
??_7?$PatternProvider@VScrollItemProvider@DirectUI@@UIScrollItemProvider@@$05@DirectUI@@6BIProvider@1@@	707	0x14001e184
??_7?$PatternProvider@VScrollItemProvider@DirectUI@@UIScrollItemProvider@@$05@DirectUI@@6BRefcountBase@1@@	708	0x14004b0a0
??_7?$PatternProvider@VScrollProvider@DirectUI@@UIScrollProvider@@$04@DirectUI@@6BIProvider@1@@	709	0x140064bf4
??_7?$PatternProvider@VScrollProvider@DirectUI@@UIScrollProvider@@$04@DirectUI@@6BRefcountBase@1@@	710	0x140072b6c
??_7?$PatternProvider@VSelectionItemProvider@DirectUI@@UISelectionItemProvider@@$06@DirectUI@@6BIProvider@1@@	711	0x140074674
??_7?$PatternProvider@VSelectionItemProvider@DirectUI@@UISelectionItemProvider@@$06@DirectUI@@6BRefcountBase@1@@	712	0x14002c290
??_7?$PatternProvider@VSelectionProvider@DirectUI@@UISelectionProvider@@$07@DirectUI@@6BIProvider@1@@	713	0x1400729d0
??_7?$PatternProvider@VSelectionProvider@DirectUI@@UISelectionProvider@@$07@DirectUI@@6BRefcountBase@1@@	714	0x140010490
??_7?$PatternProvider@VTableItemProvider@DirectUI@@UITableItemProvider@@$09@DirectUI@@6BIProvider@1@@	715	0x140056524
??_7?$PatternProvider@VTableItemProvider@DirectUI@@UITableItemProvider@@$09@DirectUI@@6BRefcountBase@1@@	716	0x14002ddac
??_7?$PatternProvider@VTableProvider@DirectUI@@UITableProvider@@$08@DirectUI@@6BIProvider@1@@	717	0x140018560
??_7?$PatternProvider@VTableProvider@DirectUI@@UITableProvider@@$08@DirectUI@@6BRefcountBase@1@@	718	0x140043de4
??_7?$PatternProvider@VToggleProvider@DirectUI@@UIToggleProvider@@$0L@@DirectUI@@6BIProvider@1@@	719	0x140018cac
??_7?$PatternProvider@VToggleProvider@DirectUI@@UIToggleProvider@@$0L@@DirectUI@@6BRefcountBase@1@@	720	0x140045f90
??_7?$PatternProvider@VValueProvider@DirectUI@@UIValueProvider@@$0M@@DirectUI@@6BIProvider@1@@	721	0x1400182b0
??_7?$PatternProvider@VValueProvider@DirectUI@@UIValueProvider@@$0M@@DirectUI@@6BRefcountBase@1@@	722	0x14001fb18
??_7AccessibleButton@DirectUI@@6B@	723	0x14001b638
??_7AnimationStrip@DirectUI@@6B@	724	0x140010f6c
??_7AutoButton@DirectUI@@6B@	725	0x140010ba8
??_7BaseScrollBar@DirectUI@@6B@	726	0x14001c764
??_7BaseScrollViewer@DirectUI@@6BElement@1@@	727	0x14007abac
??_7BaseScrollViewer@DirectUI@@6BIElementListener@1@@	728	0x1400517a0
??_7Bind@DirectUI@@6B@	729	0x14006cac0
??_7BorderLayout@DirectUI@@6B@	730	0x140015150
??_7Browser@DirectUI@@6B@	731	0x140026468
??_7BrowserSelectionProxy@DirectUI@@6B@	732	0x14000c7c8
??_7Button@DirectUI@@6B@	733	0x14005fa40
??_7CCAVI@DirectUI@@6B@	734	0x140013654
??_7CCBase@DirectUI@@6B@	735	0x1400709bc
??_7CCBaseCheckRadioButton@DirectUI@@6B@	736	0x140012f04
??_7CCBaseScrollBar@DirectUI@@6BBaseScrollBar@1@@	737	0x1400472fc
??_7CCBaseScrollBar@DirectUI@@6BCCBase@1@@	738	0x140009b24
??_7CCCheckBox@DirectUI@@6B@	739	0x14007751c
??_7CCCommandLink@DirectUI@@6B@	740	0x14002d4bc
??_7CCHScrollBar@DirectUI@@6BBaseScrollBar@1@@	741	0x140042de4
??_7CCHScrollBar@DirectUI@@6BCCBase@1@@	742	0x14005ccc4
??_7CCListBox@DirectUI@@6B@	743	0x140034214
??_7CCListView@DirectUI@@6B@	744	0x14007a4a4
??_7CCProgressBar@DirectUI@@6B@	745	0x140054a24
??_7CCPushButton@DirectUI@@6B@	746	0x14002a21c
??_7CCRadioButton@DirectUI@@6B@	747	0x14004ed0c
??_7CCSysLink@DirectUI@@6B@	748	0x14005af68
??_7CCTrackBar@DirectUI@@6B@	749	0x140051d34
??_7CCTreeView@DirectUI@@6B@	750	0x140071e20
??_7CCVScrollBar@DirectUI@@6BBaseScrollBar@1@@	751	0x140025bcc
??_7CCVScrollBar@DirectUI@@6BCCBase@1@@	752	0x14004e4f8
??_7CheckBoxGlyph@DirectUI@@6B@	753	0x1400183d8
??_7ClassInfoBase@DirectUI@@6B@	754	0x14006f2f0
??_7Clipper@DirectUI@@6B@	755	0x140043f00
??_7Combobox@DirectUI@@6B@	756	0x14005f618
??_7DCSurface@DirectUI@@6B@	757	0x14001cb20
??_7DUIXmlParser@DirectUI@@6B@	758	0x1400187bc
??_7DialogElement@DirectUI@@6BHWNDElement@1@@	759	0x14007b0c0
??_7DialogElement@DirectUI@@6BIDialogElement@1@@	760	0x140060800
??_7DialogElement@DirectUI@@6BIElementListener@1@@	761	0x14004f0a8
??_7DuiAccessible@DirectUI@@6BIAccIdentity@@@	762	0x14002f3c8
??_7DuiAccessible@DirectUI@@6BIAccessible@@@	763	0x140023298
??_7DuiAccessible@DirectUI@@6BIEnumVARIANT@@@	764	0x140048a68
??_7DuiAccessible@DirectUI@@6BIOleWindow@@@	765	0x14007a064
??_7DuiAccessible@DirectUI@@6BIServiceProvider@@@	766	0x140012e84
??_7Edit@DirectUI@@6B@	767	0x1400694d4
??_7Element@DirectUI@@6B@	768	0x14000b040
??_7ElementProvider@DirectUI@@6BIRawElementProviderAdviseEvents@@@	769	0x140026908
??_7ElementProvider@DirectUI@@6BIRawElementProviderFragment@@@	770	0x1400358c8
??_7ElementProvider@DirectUI@@6BIRawElementProviderSimple2@@@	771	0x140047ff0
??_7ElementProvider@DirectUI@@6BRefcountBase@1@@	772	0x14002745c
??_7ElementWithHWND@DirectUI@@6B@	773	0x1400357b4
??_7ExpandCollapseProvider@DirectUI@@6B@	774	0x140053c40
??_7ExpandCollapseProvider@DirectUI@@6BIProvider@1@@	775	0x140021570
??_7ExpandCollapseProvider@DirectUI@@6BRefcountBase@1@@	776	0x140052ee8
??_7ExpandCollapseProxy@DirectUI@@6B@	777	0x1400432e0
??_7Expandable@DirectUI@@6B@	778	0x140011724
??_7Expando@DirectUI@@6B@	779	0x14002dbbc
??_7ExpandoButtonGlyph@DirectUI@@6B@	780	0x14000ae20
??_7FillLayout@DirectUI@@6B@	781	0x140039970
??_7FlowLayout@DirectUI@@6B@	782	0x14003fc34
??_7FontCache@DirectUI@@6B@	783	0x14003ce50
??_7GridItemProvider@DirectUI@@6B@	784	0x140014df4
??_7GridItemProvider@DirectUI@@6BIProvider@1@@	785	0x14007c620
??_7GridItemProvider@DirectUI@@6BRefcountBase@1@@	786	0x140071da8
??_7GridItemProxy@DirectUI@@6B@	787	0x14000b4d0
??_7GridLayout@DirectUI@@6B@	788	0x14000ffa8
??_7GridProvider@DirectUI@@6B@	789	0x140012764
??_7GridProvider@DirectUI@@6BIProvider@1@@	790	0x140021fa8
??_7GridProvider@DirectUI@@6BRefcountBase@1@@	791	0x140059c00
??_7GridProxy@DirectUI@@6B@	792	0x14001794c
??_7HWNDElement@DirectUI@@6B@	793	0x14005c9ec
??_7HWNDElementAccessible@DirectUI@@6BIAccIdentity@@@	794	0x140002ce8
??_7HWNDElementAccessible@DirectUI@@6BIAccessible@@@	795	0x1400182dc
??_7HWNDElementAccessible@DirectUI@@6BIEnumVARIANT@@@	796	0x1400250e4
??_7HWNDElementAccessible@DirectUI@@6BIOleWindow@@@	797	0x1400462c4
??_7HWNDElementAccessible@DirectUI@@6BIServiceProvider@@@	798	0x140037760
??_7HWNDElementProvider@DirectUI@@6B@	799	0x140034d4c
??_7HWNDElementProvider@DirectUI@@6BIRawElementProviderAdviseEvents@@@	800	0x140004a9c
??_7HWNDElementProvider@DirectUI@@6BIRawElementProviderFragment@@@	801	0x140063840
??_7HWNDElementProvider@DirectUI@@6BIRawElementProviderSimple2@@@	802	0x14006c3b0
??_7HWNDElementProvider@DirectUI@@6BRefcountBase@1@@	803	0x14002e630
??_7HWNDHost@DirectUI@@6B@	804	0x140030984
??_7HWNDHostAccessible@DirectUI@@6BIAccIdentity@@@	805	0x140072d20
??_7HWNDHostAccessible@DirectUI@@6BIAccessible@@@	806	0x140076388
??_7HWNDHostAccessible@DirectUI@@6BIEnumVARIANT@@@	807	0x1400156b0
??_7HWNDHostAccessible@DirectUI@@6BIOleWindow@@@	808	0x14001b20c
??_7HWNDHostAccessible@DirectUI@@6BIServiceProvider@@@	809	0x140047cd4
??_7HWNDHostClientAccessible@DirectUI@@6BIAccIdentity@@@	810	0x140065628
??_7HWNDHostClientAccessible@DirectUI@@6BIAccessible@@@	811	0x140015704
??_7HWNDHostClientAccessible@DirectUI@@6BIEnumVARIANT@@@	812	0x1400540a4
??_7HWNDHostClientAccessible@DirectUI@@6BIOleWindow@@@	813	0x14001df20
??_7HWNDHostClientAccessible@DirectUI@@6BIServiceProvider@@@	814	0x140027e70
??_7IDataEngine@DirectUI@@6B@	815	0x140072604
??_7IDataEntry@DirectUI@@6B@	816	0x140010a54
??_7ISBLeak@DirectUI@@6B@	817	0x14004ea38
??_7IXElementCP@DirectUI@@6B@	818	0x140037690
??_7IXProviderCP@DirectUI@@6B@	819	0x140047a30
??_7InvokeHelper@DirectUI@@6B@	820	0x140070d54
??_7InvokeProvider@DirectUI@@6B@	821	0x1400604fc
??_7InvokeProvider@DirectUI@@6BIProvider@1@@	822	0x140026360
??_7InvokeProvider@DirectUI@@6BRefcountBase@1@@	823	0x140018c18
??_7InvokeProxy@DirectUI@@6B@	824	0x14004eebc
??_7Layout@DirectUI@@6B@	825	0x1400344b8
??_7Macro@DirectUI@@6B@	826	0x140032d1c
??_7ModernProgressBarRangeValueProxy@DirectUI@@6B@	827	0x1400296c0
??_7Movie@DirectUI@@6B@	828	0x140068dfc
??_7NativeHWNDHost@DirectUI@@6B@	829	0x1400314ec
??_7Navigator@DirectUI@@6B@	830	0x140070d38
??_7NavigatorSelectionItemProxy@DirectUI@@6B@	831	0x140004408
??_7NineGridLayout@DirectUI@@6B@	832	0x140013f78
??_7PText@DirectUI@@6B@	833	0x14001e714
??_7Page@DirectUI@@6B@	834	0x14004a914
??_7Pages@DirectUI@@6B@	835	0x14004ae4c
??_7Progress@DirectUI@@6B@	836	0x14002e72c
??_7ProgressRangeValueProxy@DirectUI@@6B@	837	0x14000107c
??_7Proxy@DirectUI@@6B@	838	0x140005fec
??_7PushButton@DirectUI@@6B@	839	0x1400281d0
??_7RadioButtonGlyph@DirectUI@@6B@	840	0x140042924
??_7RangeValueProvider@DirectUI@@6B@	841	0x140045500
??_7RangeValueProvider@DirectUI@@6BIProvider@1@@	842	0x14002bb1c
??_7RangeValueProvider@DirectUI@@6BRefcountBase@1@@	843	0x140075798
??_7RangeValueProxy@DirectUI@@6B@	844	0x140041a18
??_7RefPointElement@DirectUI@@6B@	845	0x14000ca68
??_7RefcountBase@DirectUI@@6B@	846	0x1400723bc
??_7RepeatButton@DirectUI@@6B@	847	0x14002ab7c
??_7Repeater@DirectUI@@6B@	848	0x140078c90
??_7RowLayout@DirectUI@@6B@	849	0x140063388
??_7ScrollBar@DirectUI@@6BBaseScrollBar@1@@	850	0x14006a784
??_7ScrollBar@DirectUI@@6BElement@1@@	851	0x14000820c
??_7ScrollBarRangeValueProxy@DirectUI@@6B@	852	0x1400435b0
??_7ScrollItemProvider@DirectUI@@6B@	853	0x14001e014
??_7ScrollItemProvider@DirectUI@@6BIProvider@1@@	854	0x140056a20
??_7ScrollItemProvider@DirectUI@@6BRefcountBase@1@@	855	0x14002bd58
??_7ScrollItemProxy@DirectUI@@6B@	856	0x140060d74
??_7ScrollProvider@DirectUI@@6B@	857	0x1400504e4
??_7ScrollProvider@DirectUI@@6BIProvider@1@@	858	0x1400182bc
??_7ScrollProvider@DirectUI@@6BRefcountBase@1@@	859	0x14001b0d0
??_7ScrollProxy@DirectUI@@6B@	860	0x14000ee9c
??_7ScrollViewer@DirectUI@@6BElement@1@@	861	0x1400394f0
??_7ScrollViewer@DirectUI@@6BIElementListener@1@@	862	0x14003b9b0
??_7SelectionItemProvider@DirectUI@@6B@	863	0x140066e6c
??_7SelectionItemProvider@DirectUI@@6BIProvider@1@@	864	0x140005834
??_7SelectionItemProvider@DirectUI@@6BRefcountBase@1@@	865	0x1400060a8
??_7SelectionItemProxy@DirectUI@@6B@	866	0x140079150
??_7SelectionProvider@DirectUI@@6B@	867	0x140053fbc
??_7SelectionProvider@DirectUI@@6BIProvider@1@@	868	0x140074194
??_7SelectionProvider@DirectUI@@6BRefcountBase@1@@	869	0x140073da0
??_7SelectionProxy@DirectUI@@6B@	870	0x14005d988
??_7Selector@DirectUI@@6B@	871	0x140035578
??_7SelectorNoDefault@DirectUI@@6B@	872	0x140055924
??_7SelectorSelectionItemProxy@DirectUI@@6B@	873	0x140061bfc
??_7SelectorSelectionProxy@DirectUI@@6B@	874	0x140044e40
??_7ShellBorderLayout@DirectUI@@6B@	875	0x14002366c
??_7StyleSheet@DirectUI@@6B@	876	0x1400421c4
??_7StyledScrollViewer@DirectUI@@6BElement@1@@	877	0x140054c04
??_7StyledScrollViewer@DirectUI@@6BIElementListener@1@@	878	0x14006ef44
??_7Surface@DirectUI@@6B@	879	0x14004d390
??_7TableItemProvider@DirectUI@@6B@	880	0x14002fe7c
??_7TableItemProvider@DirectUI@@6BIProvider@1@@	881	0x140010cd8
??_7TableItemProvider@DirectUI@@6BRefcountBase@1@@	882	0x140057d44
??_7TableItemProxy@DirectUI@@6B@	883	0x14000ee6c
??_7TableLayout@DirectUI@@6B@	884	0x14000f0d0
??_7TableProvider@DirectUI@@6B@	885	0x14003cbb0
??_7TableProvider@DirectUI@@6BIProvider@1@@	886	0x14000b320
??_7TableProvider@DirectUI@@6BRefcountBase@1@@	887	0x14000e434
??_7TableProxy@DirectUI@@6B@	888	0x140059154
??_7TaskPage@DirectUI@@6BIElementListener@1@@	889	0x14007501c
??_7TaskPage@DirectUI@@6BIXProviderCP@1@@	890	0x1400223bc
??_7TextGraphic@DirectUI@@6B@	891	0x140046dd4
??_7Thumb@DirectUI@@6B@	892	0x14004bee0
??_7ToggleProvider@DirectUI@@6B@	893	0x1400761d8
??_7ToggleProvider@DirectUI@@6BIProvider@1@@	894	0x14004d8a4
??_7ToggleProvider@DirectUI@@6BRefcountBase@1@@	895	0x1400092b0
??_7ToggleProxy@DirectUI@@6B@	896	0x1400188cc
??_7UnknownElement@DirectUI@@6B@	897	0x1400427b4
??_7ValueProvider@DirectUI@@6B@	898	0x14001179c
??_7ValueProvider@DirectUI@@6BIProvider@1@@	899	0x14006eef4
??_7ValueProvider@DirectUI@@6BRefcountBase@1@@	900	0x140018574
??_7ValueProxy@DirectUI@@6B@	901	0x140030258
??_7VerticalFlowLayout@DirectUI@@6B@	902	0x140068614
??_7Viewer@DirectUI@@6B@	903	0x1400300ac
??_7XBaby@DirectUI@@6B@	904	0x14003de50
??_7XBaby@DirectUI@@6BHWNDElement@1@@	905	0x140048190
??_7XBaby@DirectUI@@6BIDialogElement@1@@	906	0x14005c8f0
??_7XBaby@DirectUI@@6BIElementListener@1@@	907	0x140001db0
??_7XElement@DirectUI@@6BHWNDHost@1@@	908	0x140062cf4
??_7XElement@DirectUI@@6BIXElementCP@1@@	909	0x140024370
??_7XProvider@DirectUI@@6B@	910	0x1400129e4
??_7XResourceProvider@DirectUI@@6B@	911	0x140012144
??_FCCBase@DirectUI@@QEAAXXZ	912	0x140013a2c
??_FCCBaseScrollBar@DirectUI@@QEAAXXZ	913	0x140018744
??_FCCCheckBox@DirectUI@@QEAAXXZ	914	0x140008c70
??_FCCCommandLink@DirectUI@@QEAAXXZ	915	0x140055748
??_FCCPushButton@DirectUI@@QEAAXXZ	916	0x14006e858
??_FCCTreeView@DirectUI@@QEAAXXZ	917	0x14007c3ac
?AbsorbsShortcutProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	918	0x140018378
?AccDefActionProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	919	0x140063e9c
?AccDescProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	920	0x14000ad24
?AccHelpProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	921	0x14004cdac
?AccItemStatusProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	922	0x140020ea0
?AccItemTypeProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	923	0x14002b0c4
?AccNameProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	924	0x14007b628
?AccNavigate@DuiAccessible@DirectUI@@SAJPEAVElement@2@JPEAPEAV32@@Z	925	0x140053fbc
?AccRoleProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	926	0x14003cad0
?AccStateProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	927	0x1400536b4
?AccValueProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	928	0x140001a78
?AcceleratorKeyProperty@Schema@DirectUI@@2HA	929	0x140002a08
?Access@?$SafeArrayAccessor@H@DirectUI@@QEAAJPEAUtagSAFEARRAY@@G@Z	930	0x14006113c
?AccessKeyProperty@Schema@DirectUI@@2HA	931	0x1400466c0
?AccessibleProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	932	0x14007322c
?ActionInitiated@Navigator@DirectUI@@SA?AVUID@@XZ	933	0x140071458
?ActivateTooltip@Element@DirectUI@@MEAAXPEAV12@K@Z	934	0x140038308
?ActivateTooltip@HWNDElement@DirectUI@@UEAAXPEAVElement@2@K@Z	935	0x140060334
?ActivateTooltip@TouchHWNDElement@DirectUI@@UEAAXPEAVElement@2@K@Z	936	0x14001fc6c
?ActiveProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	937	0x140054874
?ActiveStateChanged@TouchScrollBar@DirectUI@@SA?AVUID@@XZ	938	0x14006e890
?ActualReferencePointProp@RefPointElement@DirectUI@@SAPEBUPropertyInfo@2@XZ	939	0x14000128c
?Add@BaseScrollViewer@DirectUI@@UEAAJPEAPEAVElement@2@I@Z	940	0x140001668
?Add@Element@DirectUI@@QEAAJPEAV12@@Z	941	0x14001eb50
?Add@Element@DirectUI@@QEAAJPEAV12@P6AHPEBX1@Z@Z	942	0x14001e3fc
?Add@Element@DirectUI@@UEAAJPEAPEAV12@I@Z	943	0x14006e878
?Add@ElementProviderManager@DirectUI@@SAJPEAVElementProvider@2@@Z	944	0x140079644
?Add@Expando@DirectUI@@UEAAJPEAPEAVElement@2@I@Z	945	0x140003874
?Add@LinkedList@DirectUI@@QEAAXPEAVLinkedListNode@2@@Z	946	0x14003ba34
?Add@Macro@DirectUI@@UEAAJPEAPEAVElement@2@I@Z	947	0x14003fd0c
?Add@Pages@DirectUI@@UEAAJPEAPEAVElement@2@I@Z	948	0x1400394b4
?Add@TouchEdit2@DirectUI@@UEAAJPEAPEAVElement@2@I@Z	949	0x140018020
?Add@TouchSelect@DirectUI@@UEAAJPEAPEAVElement@2@I@Z	950	0x14007c9e4
?AddBehavior@Element@DirectUI@@UEAAJPEAUIDuiBehavior@@@Z	951	0x14006d4c0
?AddChild@ClassInfoBase@DirectUI@@UEAAXXZ	952	0x140010248
?AddChildren@ScrollViewer@DirectUI@@MEAAJXZ	953	0x140045bf4
?AddChildren@StyledScrollViewer@DirectUI@@MEAAJXZ	954	0x140039f28
?AddElement@TouchSelect@DirectUI@@QEAAJPEAVElement@2@PEBG@Z	955	0x140066ce4
?AddListener@Element@DirectUI@@QEAAJPEAUIElementListener@2@@Z	956	0x14007ae20
?AddRectangleChange@EventManager@DirectUI@@CAJPEAVElement@2@_N1@Z	957	0x140050878
?AddRef@ClassInfoBase@DirectUI@@UEAAXXZ	958	0x140038b0c
?AddRef@DuiAccessible@DirectUI@@UEAAKXZ	959	0x140078738
?AddRef@Element@DirectUI@@QEAAKXZ	960	0x14005a978
?AddRef@ElementProvider@DirectUI@@UEAAKXZ	961	0x140043208
?AddRef@ExpandCollapseProvider@DirectUI@@UEAAKXZ	962	0x1400035b4
?AddRef@GridItemProvider@DirectUI@@UEAAKXZ	963	0x14000cd88
?AddRef@GridProvider@DirectUI@@UEAAKXZ	964	0x1400708b4
?AddRef@HWNDElementProvider@DirectUI@@UEAAKXZ	965	0x140007420
?AddRef@InvokeProvider@DirectUI@@UEAAKXZ	966	0x14004cb68
?AddRef@RangeValueProvider@DirectUI@@UEAAKXZ	967	0x1400432ac
?AddRef@RefcountBase@DirectUI@@QEAAJXZ	968	0x14005e884
?AddRef@ScrollItemProvider@DirectUI@@UEAAKXZ	969	0x140043810
?AddRef@ScrollProvider@DirectUI@@UEAAKXZ	970	0x14005addc
?AddRef@SelectionItemProvider@DirectUI@@UEAAKXZ	971	0x140059dec
?AddRef@SelectionProvider@DirectUI@@UEAAKXZ	972	0x140054b28
?AddRef@TableItemProvider@DirectUI@@UEAAKXZ	973	0x1400449c0
?AddRef@TableProvider@DirectUI@@UEAAKXZ	974	0x14006bad4
?AddRef@ToggleProvider@DirectUI@@UEAAKXZ	975	0x14001fc80
?AddRef@Value@DirectUI@@QEAAXXZ	976	0x140023d2c
?AddRef@ValueProvider@DirectUI@@UEAAKXZ	977	0x14005a280
?AddRef@XProvider@DirectUI@@UEAAKXZ	978	0x1400481ac
?AddRulesToStyleSheet@DUIXmlParser@DirectUI@@IEAAJPEAUIXmlReader@@PEAVStyleSheet@2@PEBGPEAV?$DynamicArray@UXMLParserCond@DirectUI@@$0A@@2@PEAV?$DynamicArray@PEAG$0A@@2@@Z	979	0x14006b530
?AddString@CCListBox@DirectUI@@QEAAHPEBG@Z	980	0x14006ffe4
?AddString@Combobox@DirectUI@@QEAAHPEBG@Z	981	0x14003cd2c
?AddString@TouchSelect@DirectUI@@QEAAJPEBG@Z	982	0x140047f30
?AddString@TouchSelect@DirectUI@@QEAAJPEBGPEAPEAVElement@2@@Z	983	0x1400595b4
?AddStringWithLabelOverride@TouchSelect@DirectUI@@QEAAJPEBG0PEAPEAVElement@2@@Z	984	0x14005c9f8
?AddToSelection@NavigatorSelectionItemProxy@DirectUI@@AEAAJPEAVBrowser@2@@Z	985	0x140054690
?AddToSelection@SelectionItemProvider@DirectUI@@UEAAJXZ	986	0x14007c418
?AddToSelection@SelectorSelectionItemProxy@DirectUI@@AEAAJXZ	987	0x140046830
?AdvanceFrame@AnimationStrip@DirectUI@@IEAAXXZ	988	0x140049100
?AdvanceFrame@Movie@DirectUI@@SA?AVUID@@XZ	989	0x140058bcc
?AdviseEventAdded@ElementProvider@DirectUI@@UEAAJHPEAUtagSAFEARRAY@@@Z	990	0x14000aa00
?AdviseEventAdded@EventManager@DirectUI@@SAJHPEAUtagSAFEARRAY@@@Z	991	0x140001094
?AdviseEventRemoved@ElementProvider@DirectUI@@UEAAJHPEAUtagSAFEARRAY@@@Z	992	0x1400310d8
?AdviseEventRemoved@EventManager@DirectUI@@SAJHPEAUtagSAFEARRAY@@@Z	993	0x1400343bc
?AliasedRenderingProp@RichText@DirectUI@@SAPEBUPropertyInfo@2@XZ	994	0x140060790
?AlphaProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	995	0x14000bd30
?AnimatePopupOnDismissProp@TouchSelect@DirectUI@@SAPEBUPropertyInfo@2@XZ	996	0x140034a08
?AnimateScroll@TouchScrollBar@DirectUI@@SA?AVUID@@XZ	997	0x14000afd8
?AnimationChange@Element@DirectUI@@SA?AVUID@@XZ	998	0x1400769a0
?AnimationProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	999	0x140047364
?AnimationStatusChange@PVLAnimation@DirectUI@@SA?AVUID@@XZ	1000	0x140052410
?ApplySinkRegion@HWNDHost@DirectUI@@AEAAXPEBUtagRECT@@_N@Z	1001	0x14005b504
?Arrow@Expando@DirectUI@@KAGXZ	1002	0x140058208
?AssertPIZeroRef@ClassInfoBase@DirectUI@@UEBAXXZ	1003	0x14001ffac
?AsyncContentLoadedEvent@Schema@DirectUI@@2HA	1004	0x140063200
?Attach@Layout@DirectUI@@UEAAXPEAVElement@2@@Z	1005	0x14003d11c
?AttachCtrlSubclassProc@HWNDHost@DirectUI@@KAXPEAUHWND__@@@Z	1006	0x1400424e0
?AutoGroupingProp@CCRadioButton@DirectUI@@SAPEBUPropertyInfo@2@XZ	1007	0x140001128
?AutoStartProp@Movie@DirectUI@@SAPEBUPropertyInfo@2@XZ	1008	0x1400312f4
?AutoStopProp@Movie@DirectUI@@SAPEBUPropertyInfo@2@XZ	1009	0x140053304
?AutomationFocusChangedEvent@Schema@DirectUI@@2HA	1010	0x14004bbe0
?AutomationIdProperty@Schema@DirectUI@@2HA	1011	0x140012a68
?AutomationPropertyChangedEvent@Schema@DirectUI@@2HA	1012	0x1400434f4
?BackgroundOwnerIDProp@HWNDHost@DirectUI@@SAPEBUPropertyInfo@2@XZ	1013	0x14007a1c8
?BackgroundProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	1014	0x140014db8
?BaselineProp@RichText@DirectUI@@SAPEBUPropertyInfo@2@XZ	1015	0x140011c80
?BorderColorProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	1016	0x14001fe74
?BorderStyleProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	1017	0x14004bfc8
?BorderThicknessProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	1018	0x14001d094
?BoundingRectangleProperty@Schema@DirectUI@@2HA	1019	0x140054b94
?BroadcastEvent@Element@DirectUI@@QEAAXPEAUEvent@2@@Z	1020	0x140045d40
?BufferingProp@TouchSlider@DirectUI@@SAPEBUPropertyInfo@2@XZ	1021	0x14005f1b4
?BuildCacheInfo@FlowLayout@DirectUI@@IEAA?AUtagSIZE@@PEAVElement@2@HHPEAVSurface@2@_N@Z	1022	0x1400602dc
?BuildCacheInfo@VerticalFlowLayout@DirectUI@@IEAA?AUtagSIZE@@PEAVElement@2@HHPEAVSurface@2@_N@Z	1023	0x140077cd0
?BuildElement@Macro@DirectUI@@MEAAJXZ	1024	0x140077cf0
?BuildElement@Repeater@DirectUI@@MEAAJXZ	1025	0x14006b02c
?ButtonClassAcceptsEnterKeyProp@DialogElement@DirectUI@@SAPEBUPropertyInfo@2@XZ	1026	0x14003f2d4
?ButtonControlType@Schema@DirectUI@@2HA	1027	0x140079500
?CacheParser@XBaby@DirectUI@@UEAAXPEAVDUIXmlParser@2@@Z	1028	0x14002f78c
?CalendarControlType@Schema@DirectUI@@2HA	1029	0x14000c8bc
?CanPerformManualVisualSwap@TouchScrollViewer@DirectUI@@QEAA_NXZ	1030	0x14004608c
?CanSetFocus@HWNDElement@DirectUI@@UEAA_NXZ	1031	0x14006173c
?CanSetFocus@XBaby@DirectUI@@UEAA_NXZ	1032	0x1400697fc
?CanSetFocus@XProvider@DirectUI@@UEAAJPEA_N@Z	1033	0x14005e484
?CancelClick@TouchButton@DirectUI@@QEAA_NW4ClickDevice@12@@Z	1034	0x1400617b4
?CancelCurrentDrag@TouchSlider@DirectUI@@QEAAXXZ	1035	0x14006a4cc
?CaptureCallstackFrames@CallstackTracker@DirectUI@@QEAAHXZ	1036	0x140063d84
?CapturedProp@Button@DirectUI@@SAPEBUPropertyInfo@2@XZ	1037	0x140048940
?CapturedProp@TouchButton@DirectUI@@SAPEBUPropertyInfo@2@XZ	1038	0x1400594f8
?CaretMoved@TouchEditBase@DirectUI@@SA?AVUID@@XZ	1039	0x14000c928
?CheckBoxControlType@Schema@DirectUI@@2HA	1040	0x140072704
?CheckScroll@BaseScrollViewer@DirectUI@@AEAAXPEAVBaseScrollBar@2@HHH@Z	1041	0x140009374
?CheckedStateProp@TouchCheckBox@DirectUI@@SAPEBUPropertyInfo@2@XZ	1042	0x140057794
?ChildrenProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	1043	0x140067958
?ClassExist@ClassInfoBase@DirectUI@@SA_NPEAPEAUIClassInfo@2@PEBQEBUPropertyInfo@2@IPEAU32@PEAUHINSTANCE__@@PEBG_N@Z	1044	0x14002289c
?ClassNameProperty@Schema@DirectUI@@2HA	1045	0x140053838
?ClassProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	1046	0x1400051a4
?ClearButtonClicked@TouchEdit2@DirectUI@@SA?AVUID@@XZ	1047	0x14005c640
?ClearCacheDirty@Layout@DirectUI@@IEAAXXZ	1048	0x14001cd44
?ClearParser@DUIFactory@DirectUI@@AEAAXXZ	1049	0x140005ba0
?Click@Button@DirectUI@@SA?AVUID@@XZ	1050	0x140060154
?Click@TouchButton@DirectUI@@SA?AVUID@@XZ	1051	0x140043ff8
?ClickDefaultButton@DialogElement@DirectUI@@UEAA_NXZ	1052	0x14005a254
?ClickDefaultButton@DialogElementCore@DirectUI@@QEAA_NXZ	1053	0x1400100d8
?ClickDefaultButton@XBaby@DirectUI@@UEAA_NXZ	1054	0x140022c84
?ClickDefaultButton@XProvider@DirectUI@@UEAAHXZ	1055	0x140042ab8
?ClickablePointProperty@Schema@DirectUI@@2HA	1056	0x1400649f4
?Clipper@Expando@DirectUI@@KAGXZ	1057	0x140009c94
?Clone@DuiAccessible@DirectUI@@UEAAJPEAPEAUIEnumVARIANT@@@Z	1058	0x14003c3a8
?Clone@HWNDHostAccessible@DirectUI@@UEAAJPEAPEAUIEnumVARIANT@@@Z	1059	0x14005cd44
?Close@ElementProviderManager@DirectUI@@SAXXZ	1060	0x140048658
?Close@EventManager@DirectUI@@SAXXZ	1061	0x14006f014
?Close@InvokeManager@DirectUI@@SAXXZ	1062	0x140006548
?ClosePopup@TouchSelect@DirectUI@@QEAAXXZ	1063	0x140028d94
?CloseThread@InvokeManager@DirectUI@@SAXXZ	1064	0x14003a0b8
?Collapse@ExpandCollapseProvider@DirectUI@@UEAAJXZ	1065	0x1400702e8
?ColorFontPaletteIndexProp@RichText@DirectUI@@SAPEBUPropertyInfo@2@XZ	1066	0x140044a14
?ComboBoxControlType@Schema@DirectUI@@2HA	1067	0x1400749d0
?CompositedTextProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	1068	0x140071be8
?CompositingQualityProp@Movie@DirectUI@@SAPEBUPropertyInfo@2@XZ	1069	0x140044a6c
?CompositionChange@HWNDElement@DirectUI@@SA?AVUID@@XZ	1070	0x140017e64
?ConnectProp@Bind@DirectUI@@SAPEBUPropertyInfo@2@XZ	1071	0x14005e940
?ConstrainLayoutProp@RichText@DirectUI@@SAPEBUPropertyInfo@2@XZ	1072	0x140012dbc
?ContentAlignProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	1073	0x1400716e4
?ContentProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	1074	0x1400381b8
?Context@Button@DirectUI@@SA?AVUID@@XZ	1075	0x140025d24
?ContextMenuHintShowing@ContextMenuBehavior@DirectUI@@SA?AVUID@@XZ	1076	0x140076cd4
?ContextMenuRequested@ContextMenuBehavior@DirectUI@@SA?AVUID@@XZ	1077	0x14004ef94
?ContextMenuRequested@TouchEdit2@DirectUI@@SA?AVUID@@XZ	1078	0x140040a5c
?ContextSensitiveHelp@DuiAccessible@DirectUI@@UEAAJH@Z	1079	0x140031820
?ContextSensitiveHelp@HWNDHostAccessible@DirectUI@@UEAAJH@Z	1080	0x1400442f4
?ControlTypeProperty@Schema@DirectUI@@2HA	1081	0x1400625f4
?CopySheets@DUIXmlParser@DirectUI@@QEAAJPEAPEAV?$DynamicArray@PEAVValue@DirectUI@@$0A@@2@@Z	1082	0x140041638
?Count@?$SafeArrayAccessor@H@DirectUI@@QEAAHXZ	1083	0x14000c974
?Create@?$PatternProvider@VExpandCollapseProvider@DirectUI@@UIExpandCollapseProvider@@$00@DirectUI@@SAJPEAVElementProvider@2@PEAPEAUIUnknown@@@Z	1084	0x140033980
?Create@?$PatternProvider@VGridItemProvider@DirectUI@@UIGridItemProvider@@$01@DirectUI@@SAJPEAVElementProvider@2@PEAPEAUIUnknown@@@Z	1085	0x140070b2c
?Create@?$PatternProvider@VGridProvider@DirectUI@@UIGridProvider@@$02@DirectUI@@SAJPEAVElementProvider@2@PEAPEAUIUnknown@@@Z	1086	0x14006d2d4
?Create@?$PatternProvider@VInvokeProvider@DirectUI@@UIInvokeProvider@@$0A@@DirectUI@@SAJPEAVElementProvider@2@PEAPEAUIUnknown@@@Z	1087	0x1400199ac
?Create@?$PatternProvider@VRangeValueProvider@DirectUI@@UIRangeValueProvider@@$03@DirectUI@@SAJPEAVElementProvider@2@PEAPEAUIUnknown@@@Z	1088	0x140005228
?Create@?$PatternProvider@VScrollItemProvider@DirectUI@@UIScrollItemProvider@@$05@DirectUI@@SAJPEAVElementProvider@2@PEAPEAUIUnknown@@@Z	1089	0x140010a8c
?Create@?$PatternProvider@VScrollProvider@DirectUI@@UIScrollProvider@@$04@DirectUI@@SAJPEAVElementProvider@2@PEAPEAUIUnknown@@@Z	1090	0x140033270
?Create@?$PatternProvider@VSelectionItemProvider@DirectUI@@UISelectionItemProvider@@$06@DirectUI@@SAJPEAVElementProvider@2@PEAPEAUIUnknown@@@Z	1091	0x14006c0e8
?Create@?$PatternProvider@VSelectionProvider@DirectUI@@UISelectionProvider@@$07@DirectUI@@SAJPEAVElementProvider@2@PEAPEAUIUnknown@@@Z	1092	0x140019d88
?Create@?$PatternProvider@VTableItemProvider@DirectUI@@UITableItemProvider@@$09@DirectUI@@SAJPEAVElementProvider@2@PEAPEAUIUnknown@@@Z	1093	0x140003c04
?Create@?$PatternProvider@VTableProvider@DirectUI@@UITableProvider@@$08@DirectUI@@SAJPEAVElementProvider@2@PEAPEAUIUnknown@@@Z	1094	0x140061568
?Create@?$PatternProvider@VToggleProvider@DirectUI@@UIToggleProvider@@$0L@@DirectUI@@SAJPEAVElementProvider@2@PEAPEAUIUnknown@@@Z	1095	0x140002294
?Create@?$PatternProvider@VValueProvider@DirectUI@@UIValueProvider@@$0M@@DirectUI@@SAJPEAVElementProvider@2@PEAPEAUIUnknown@@@Z	1096	0x1400516b0
?Create@AcceleratorBehavior@@SAJPEAPEAUIDuiBehavior@@@Z	1097	0x14005f250
?Create@AccessibleButton@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1098	0x14005c534
?Create@AnimationStrip@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1099	0x140025220
?Create@AutoButton@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1100	0x14007bb98
?Create@Bind@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1101	0x140042154
?Create@BorderLayout@DirectUI@@SAJHPEAHPEAPEAVValue@2@@Z	1102	0x14007773c
?Create@BorderLayout@DirectUI@@SAJPEAPEAVLayout@2@@Z	1103	0x14002e788
?Create@Browser@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1104	0x140014008
?Create@Button@DirectUI@@SAJIPEAVElement@2@PEAKPEAPEAV32@@Z	1105	0x14003b308
?Create@Button@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1106	0x14001e9d0
?Create@CCAVI@DirectUI@@SAJIPEAVElement@2@PEAKPEAPEAV32@@Z	1107	0x14003a1f8
?Create@CCAVI@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1108	0x1400274ec
?Create@CCBase@DirectUI@@SAJIPEAVElement@2@PEAKPEAPEAV32@@Z	1109	0x1400492bc
?Create@CCBase@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1110	0x140034954
?Create@CCCheckBox@DirectUI@@SAJIPEAVElement@2@PEAKPEAPEAV32@@Z	1111	0x14006445c
?Create@CCCheckBox@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1112	0x14006c3ec
?Create@CCCommandLink@DirectUI@@SAJIPEAVElement@2@PEAKPEAPEAV32@@Z	1113	0x140065210
?Create@CCCommandLink@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1114	0x1400455bc
?Create@CCHScrollBar@DirectUI@@SAJIPEAVElement@2@PEAKPEAPEAV32@@Z	1115	0x140039938
?Create@CCHScrollBar@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1116	0x140021b68
?Create@CCListBox@DirectUI@@SAJIPEAVElement@2@PEAKPEAPEAV32@@Z	1117	0x14007737c
?Create@CCListBox@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1118	0x14004a56c
?Create@CCListView@DirectUI@@SAJIPEAVElement@2@PEAKPEAPEAV32@@Z	1119	0x14000cb74
?Create@CCListView@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1120	0x140043d40
?Create@CCProgressBar@DirectUI@@SAJIPEAVElement@2@PEAKPEAPEAV32@@Z	1121	0x140067480
?Create@CCProgressBar@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1122	0x1400230b0
?Create@CCPushButton@DirectUI@@SAJIPEAVElement@2@PEAKPEAPEAV32@@Z	1123	0x14001b868
?Create@CCPushButton@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1124	0x140063738
?Create@CCRadioButton@DirectUI@@SAJIPEAVElement@2@PEAKPEAPEAV32@@Z	1125	0x140039060
?Create@CCRadioButton@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1126	0x140041ac4
?Create@CCSysLink@DirectUI@@SAJIPEAVElement@2@PEAKPEAPEAV32@@Z	1127	0x140021278
?Create@CCSysLink@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1128	0x140021580
?Create@CCTrackBar@DirectUI@@SAJIPEAVElement@2@PEAKPEAPEAV32@@Z	1129	0x14002009c
?Create@CCTrackBar@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1130	0x1400641a0
?Create@CCTreeView@DirectUI@@SAJIPEAVElement@2@PEAKPEAPEAV32@@Z	1131	0x140038ce4
?Create@CCTreeView@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1132	0x14005bc5c
?Create@CCVScrollBar@DirectUI@@SAJIPEAVElement@2@PEAKPEAPEAV32@@Z	1133	0x1400744d0
?Create@CCVScrollBar@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1134	0x140016178
?Create@CheckBoxGlyph@DirectUI@@SAJIPEAVElement@2@PEAKPEAPEAV32@@Z	1135	0x14005e320
?Create@CheckBoxGlyph@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1136	0x1400572fc
?Create@Clipper@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1137	0x140014a04
?Create@Combobox@DirectUI@@SAJIPEAVElement@2@PEAKPEAPEAV32@@Z	1138	0x140006610
?Create@Combobox@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1139	0x14002ec88
?Create@ContextMenuBehavior@DirectUI@@SAJPEAPEAUIDuiBehavior@@@Z	1140	0x14002ce3c
?Create@DUIXmlParser@DirectUI@@SAJPEAPEAV12@P6APEAVValue@2@PEBGPEAX@Z2P6AX11H2@Z2@Z	1141	0x140026cdc
?Create@DialogElement@DirectUI@@SAJPEAUHWND__@@_NIPEAVElement@2@PEAKPEAPEAV42@@Z	1142	0x140071ea0
?Create@DuiAccessible@DirectUI@@SAJPEAVElement@2@PEAPEAV12@@Z	1143	0x14004a400
?Create@Edit@DirectUI@@SAJIPEAVElement@2@PEAKPEAPEAV32@@Z	1144	0x140065130
?Create@Edit@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1145	0x14000fe24
?Create@Element@DirectUI@@SAJIPEAV12@PEAKPEAPEAV12@@Z	1146	0x140062b28
?Create@ElementProvider@DirectUI@@SAJPEAVElement@2@PEAVInvokeHelper@2@PEAPEAV12@@Z	1147	0x14001ec38
?Create@ElementProxy@DirectUI@@SAPEAV12@PEAVElement@2@@Z	1148	0x140073f78
?Create@ElementWithHWND@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1149	0x140004be0
?Create@ExpandCollapseProxy@DirectUI@@SAPEAV12@PEAVElement@2@@Z	1150	0x140072f94
?Create@Expandable@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1151	0x14005a170
?Create@Expando@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1152	0x1400535ac
?Create@ExpandoButtonGlyph@DirectUI@@SAJIPEAVElement@2@PEAKPEAPEAV32@@Z	1153	0x1400013b0
?Create@ExpandoButtonGlyph@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1154	0x140011df0
?Create@FillLayout@DirectUI@@SAJHPEAHPEAPEAVValue@2@@Z	1155	0x1400344f8
?Create@FillLayout@DirectUI@@SAJPEAPEAVLayout@2@@Z	1156	0x14006f814
?Create@FlowLayout@DirectUI@@SAJHPEAHPEAPEAVValue@2@@Z	1157	0x140068868
?Create@FlowLayout@DirectUI@@SAJ_NIIIPEAPEAVLayout@2@@Z	1158	0x140039384
?Create@GridItemProxy@DirectUI@@SAPEAV12@PEAVElement@2@@Z	1159	0x14005fc68
?Create@GridLayout@DirectUI@@SAJHHPEAPEAVLayout@2@@Z	1160	0x14001b7ac
?Create@GridLayout@DirectUI@@SAJHPEAHPEAPEAVValue@2@@Z	1161	0x1400627ec
?Create@GridProxy@DirectUI@@SAPEAV12@PEAVElement@2@@Z	1162	0x140001288
?Create@HWNDElement@DirectUI@@SAJPEAUHWND__@@_NIPEAVElement@2@PEAKPEAPEAV42@@Z	1163	0x14003b54c
?Create@HWNDElementAccessible@DirectUI@@SAJPEAVHWNDElement@2@PEAPEAVDuiAccessible@2@@Z	1164	0x140016c14
?Create@HWNDElementProvider@DirectUI@@SAJPEAVHWNDElement@2@PEAVInvokeHelper@2@PEAPEAV12@@Z	1165	0x140055e24
?Create@HWNDElementProxy@DirectUI@@SAPEAV12@PEAVHWNDElement@2@@Z	1166	0x140028f7c
?Create@HWNDHost@DirectUI@@SAJIIPEAVElement@2@PEAKPEAPEAV32@@Z	1167	0x14005f7b0
?Create@HWNDHost@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1168	0x140026628
?Create@HWNDHostAccessible@DirectUI@@SAJPEAVElement@2@PEAUIAccessible@@PEAPEAVDuiAccessible@2@@Z	1169	0x14006e108
?Create@HWNDHostClientAccessible@DirectUI@@SAJPEAVElement@2@PEAUIAccessible@@PEAPEAVDuiAccessible@2@@Z	1170	0x14004ec90
?Create@InvokeProxy@DirectUI@@SAPEAV12@PEAVElement@2@@Z	1171	0x14007ad70
?Create@ItemList@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1172	0x1400686d8
?Create@Layout@DirectUI@@SAJPEAPEAV12@@Z	1173	0x14005918c
?Create@Macro@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1174	0x14005f4dc
?Create@ModernProgressBar@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1175	0x1400706e8
?Create@ModernProgressRing@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1176	0x14004ba20
?Create@Movie@DirectUI@@SAJIPEAVElement@2@PEAKPEAPEAV32@@Z	1177	0x140006e24
?Create@Movie@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1178	0x1400327b8
?Create@NativeHWNDHost@DirectUI@@SAJPEBG0PEAUHWND__@@PEAUHICON__@@HHHHHHPEAUHINSTANCE__@@IPEAPEAV12@@Z	1179	0x140053e98
?Create@NativeHWNDHost@DirectUI@@SAJPEBGPEAUHWND__@@PEAUHICON__@@HHHHHHIPEAPEAV12@@Z	1180	0x14006b984
?Create@Navigator@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1181	0x1400549fc
?Create@NineGridLayout@DirectUI@@SAJHPEAHPEAPEAVValue@2@@Z	1182	0x1400740f0
?Create@NineGridLayout@DirectUI@@SAJPEAPEAVLayout@2@@Z	1183	0x140076bdc
?Create@PText@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1184	0x140029464
?Create@Page@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1185	0x14002d768
?Create@Pages@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1186	0x14003c034
?Create@Progress@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1187	0x140008b08
?Create@PushButton@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1188	0x140008388
?Create@RadioButtonGlyph@DirectUI@@SAJIPEAVElement@2@PEAKPEAPEAV32@@Z	1189	0x140013d88
?Create@RadioButtonGlyph@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1190	0x1400038a8
?Create@RangeValueProxy@DirectUI@@SAPEAV12@PEAVElement@2@@Z	1191	0x1400737c4
?Create@RefPointElement@DirectUI@@SAJIPEAVElement@2@PEAKPEAPEAV32@@Z	1192	0x14004f844
?Create@RefPointElement@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1193	0x14001c134
?Create@RepeatButton@DirectUI@@SAJIPEAVElement@2@PEAKPEAPEAV32@@Z	1194	0x1400062f8
?Create@RepeatButton@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1195	0x140037394
?Create@Repeater@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1196	0x1400512d4
?Create@RichText@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1197	0x14000873c
?Create@RowLayout@DirectUI@@SAJHIIPEAPEAVLayout@2@@Z	1198	0x140075d70
?Create@RowLayout@DirectUI@@SAJHPEAHPEAPEAVValue@2@@Z	1199	0x140056ae8
?Create@RowLayout@DirectUI@@SAJIIPEAPEAVLayout@2@@Z	1200	0x1400699ac
?Create@ScrollBar@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1201	0x1400487f0
?Create@ScrollBar@DirectUI@@SAJ_NPEAVElement@2@PEAKPEAPEAV32@@Z	1202	0x1400536c0
?Create@ScrollItemProxy@DirectUI@@SAPEAV12@PEAVElement@2@@Z	1203	0x1400365ec
?Create@ScrollProxy@DirectUI@@SAPEAV12@PEAVElement@2@@Z	1204	0x140039604
?Create@ScrollViewer@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1205	0x140070870
?Create@ScrubBehavior@@SAJPEAPEAUIDuiBehavior@@@Z	1206	0x14004830c
?Create@SelectionItemProxy@DirectUI@@SAPEAV12@PEAVElement@2@@Z	1207	0x14002fff8
?Create@SelectionProxy@DirectUI@@SAPEAV12@PEAVElement@2@@Z	1208	0x140028b84
?Create@Selector@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1209	0x14005dd9c
?Create@SelectorNoDefault@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1210	0x1400438dc
?Create@SemanticZoomToggle@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1211	0x14003ad3c
?Create@ShellBorderLayout@DirectUI@@SAJHPEAHPEAPEAVValue@2@@Z	1212	0x140015450
?Create@ShellBorderLayout@DirectUI@@SAJPEAPEAVLayout@2@@Z	1213	0x1400408b8
?Create@StyleSheet@DirectUI@@SAJPEAPEAV12@@Z	1214	0x140004900
?Create@StyledScrollViewer@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1215	0x140062358
?Create@TableItemProxy@DirectUI@@SAPEAV12@PEAVElement@2@@Z	1216	0x14001b15c
?Create@TableLayout@DirectUI@@SAJHPEAHPEAPEAVValue@2@@Z	1217	0x14006609c
?Create@TableProxy@DirectUI@@SAPEAV12@PEAVElement@2@@Z	1218	0x140006df8
?Create@TextGraphic@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1219	0x14003407c
?Create@Thumb@DirectUI@@SAJIPEAVElement@2@PEAKPEAPEAV32@@Z	1220	0x140034288
?Create@Thumb@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1221	0x14004c934
?Create@ToggleProxy@DirectUI@@SAPEAV12@PEAVElement@2@@Z	1222	0x14003a124
?Create@TouchButton@DirectUI@@SAJIPEAVElement@2@PEAKPEAPEAV32@@Z	1223	0x140063e9c
?Create@TouchButton@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1224	0x14001c534
?Create@TouchCheckBox@DirectUI@@SAJIPEAVElement@2@PEAKPEAPEAV32@@Z	1225	0x14003ec1c
?Create@TouchCheckBox@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1226	0x1400220f8
?Create@TouchCheckBoxGlyph@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1227	0x140053488
?Create@TouchCommandButton@DirectUI@@SAJIPEAVElement@2@PEAKPEAPEAV32@@Z	1228	0x140076558
?Create@TouchCommandButton@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1229	0x14000a464
?Create@TouchEdit2@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1230	0x1400729cc
?Create@TouchEditBase@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1231	0x14002131c
?Create@TouchHWNDElement@DirectUI@@SAJPEAUHWND__@@_NIPEAVElement@2@PEAKPEAPEAV42@@Z	1232	0x14004ac14
?Create@TouchHyperLink@DirectUI@@SAJIPEAVElement@2@PEAKPEAPEAV32@@Z	1233	0x1400646e8
?Create@TouchHyperLink@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1234	0x140067150
?Create@TouchRepeatButton@DirectUI@@SAJIPEAVElement@2@PEAKPEAPEAV32@@Z	1235	0x1400516c4
?Create@TouchRepeatButton@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1236	0x14006a52c
?Create@TouchScrollBar@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1237	0x14001627c
?Create@TouchScrollViewer@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1238	0x14003bf94
?Create@TouchSelect@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1239	0x140066b6c
?Create@TouchSelectItem@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1240	0x1400385d8
?Create@TouchSlider@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1241	0x140034120
?Create@TouchSwitch@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1242	0x1400428e0
?Create@UnknownElement@DirectUI@@SAJIPEAVElement@2@PEAKPEAPEAV32@@Z	1243	0x14004afdc
?Create@UnknownElement@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1244	0x140068410
?Create@ValueProxy@DirectUI@@SAPEAV12@PEAVElement@2@@Z	1245	0x140027728
?Create@VerticalFlowLayout@DirectUI@@SAJHPEAHPEAPEAVValue@2@@Z	1246	0x14000f3a0
?Create@VerticalFlowLayout@DirectUI@@SAJ_NIIIPEAPEAVLayout@2@@Z	1247	0x140043e5c
?Create@Viewer@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1248	0x14006f8d8
?Create@XBaby@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1249	0x140039314
?Create@XBaby@DirectUI@@SAJPEAVIXElementCP@2@PEAVXProvider@2@PEAUHWND__@@PEAVElement@2@PEAKPEAPEAV62@@Z	1250	0x140020400
?Create@XElement@DirectUI@@SAJIPEAVElement@2@PEAKPEAPEAV32@@Z	1251	0x14001a4bc
?Create@XElement@DirectUI@@SAJPEAVElement@2@PEAKPEAPEAV32@@Z	1252	0x140037850
?Create@XHost@DirectUI@@SAJPEAVIXElementCP@2@PEAPEAV12@@Z	1253	0x14000fb10
?Create@XProvider@DirectUI@@SAJPEAVElement@2@PEAVIXProviderCP@2@PEAPEAV12@@Z	1254	0x140057f34
?Create@XResourceProvider@DirectUI@@SAJPEAPEAV12@@Z	1255	0x14002fcf0
?Create@XResourceProvider@DirectUI@@SAJPEAUHINSTANCE__@@PEBG11PEAPEAV12@@Z	1256	0x14003be5c
?CreateAccNameLabel@HWNDHost@DirectUI@@IEAAPEAUHWND__@@PEAU3@@Z	1257	0x140062974
?CreateAtom@Value@DirectUI@@SAPEAV12@G@Z	1258	0x140062004
?CreateAtom@Value@DirectUI@@SAPEAV12@PEBG@Z	1259	0x140016730
?CreateBool@Value@DirectUI@@SAPEAV12@_N@Z	1260	0x140057d08
?CreateButtons@ScrollBar@DirectUI@@MEAAJXZ	1261	0x14000bf1c
?CreateButtons@TouchScrollBar@DirectUI@@UEAAJXZ	1262	0x14007bc3c
?CreateCache@RichText@DirectUI@@SAJIPEAPEAUIDUIRichTextCache@@@Z	1263	0x140075514
?CreateColor@Value@DirectUI@@SAPEAV12@K@Z	1264	0x14001fc38
?CreateColor@Value@DirectUI@@SAPEAV12@KKE@Z	1265	0x140009c68
?CreateColor@Value@DirectUI@@SAPEAV12@KKKE@Z	1266	0x14006c9a0
?CreateCursor@Value@DirectUI@@SAPEAV12@PEAUHICON__@@@Z	1267	0x14004d7fc
?CreateCursor@Value@DirectUI@@SAPEAV12@PEBG@Z	1268	0x140068e74
?CreateDFCFill@Value@DirectUI@@SAPEAV12@II@Z	1269	0x1400697b8
?CreateDTBFill@Value@DirectUI@@SAPEAV12@PEBGHH@Z	1270	0x140025b50
?CreateDUI@XProvider@DirectUI@@UEAAJPEAVIXElementCP@2@PEAPEAUHWND__@@@Z	1271	0x140011294
?CreateDUICP@TaskPage@DirectUI@@EEAAJPEAVHWNDElement@2@PEAUHWND__@@1PEAPEAVElement@2@PEAPEAVDUIXmlParser@2@@Z	1272	0x1400576c4
?CreateDUICP@XResourceProvider@DirectUI@@UEAAJPEAVHWNDElement@2@PEAUHWND__@@1PEAPEAVElement@2@PEAPEAVDUIXmlParser@2@@Z	1273	0x14003d6cc
?CreateDoubleList@Value@DirectUI@@SAPEAV12@PEAV?$DynamicArray@N$0A@@2@@Z	1275	0x140072eb4
?CreateDoubleList@Value@DirectUI@@SAPEAV12@PEBNH@Z	1276	0x14006ae30
?CreateElement@DUIXmlParser@DirectUI@@QEAAJPEBGPEAVElement@2@1PEAKPEAPEAV32@@Z	1277	0x14004ba40
?CreateElementList@Value@DirectUI@@SAPEAV12@PEAV?$DynamicArray@PEAVElement@DirectUI@@$0A@@2@@Z	1278	0x14005c6dc
?CreateElementRef@Value@DirectUI@@SAPEAV12@PEAVElement@2@@Z	1279	0x14000a5c4
?CreateElementScaledValue@Value@DirectUI@@SAPEAV12@PEAVElement@2@PEAV12@@Z	1280	0x1400743b4
?CreateEncodedString@Value@DirectUI@@SAPEAV12@PEBG@Z	1281	0x140029f88
?CreateExpression@Value@DirectUI@@SAPEAV12@PEAVExpression@2@@Z	1282	0x140059780
?CreateFill@Value@DirectUI@@SAPEAV12@AEBUFill@2@@Z	1283	0x140012d54
?CreateFloat@Value@DirectUI@@SAPEAV12@MW4DynamicScaleValue@@@Z	1284	0x140005234
?CreateGraphic@Value@DirectUI@@SAPEAV12@PEAUHBITMAP__@@EI_N11@Z	1285	0x1400342ac
?CreateGraphic@Value@DirectUI@@SAPEAV12@PEAUHENHMETAFILE__@@0@Z	1286	0x140047df8
?CreateGraphic@Value@DirectUI@@SAPEAV12@PEAUHICON__@@_N11@Z	1287	0x14006b0b0
?CreateGraphic@Value@DirectUI@@SAPEAV12@PEAUISharedBitmap@@EI@Z	1288	0x140034d24
?CreateGraphic@Value@DirectUI@@SAPEAV12@PEBGEIGGPEAUHINSTANCE__@@_N2@Z	1289	0x140054cc0
?CreateGraphic@Value@DirectUI@@SAPEAV12@PEBGGGPEAUHINSTANCE__@@_N2@Z	1290	0x140027614
?CreateGraphic@Value@DirectUI@@SAPEAV12@PEBGUScaledSIZE@2@PEAUHINSTANCE__@@_N3@Z	1291	0x14002c208
?CreateHWND@CCBase@DirectUI@@UEAAPEAUHWND__@@PEAU3@@Z	1292	0x140059344
?CreateHWND@CCBaseScrollBar@DirectUI@@UEAAPEAUHWND__@@PEAU3@@Z	1293	0x14006d248
?CreateHWND@Combobox@DirectUI@@UEAAPEAUHWND__@@PEAU3@@Z	1294	0x140011bfc
?CreateHWND@Edit@DirectUI@@MEAAPEAUHWND__@@PEAU3@@Z	1295	0x140070b54
?CreateHWND@Edit@DirectUI@@MEAAPEAUHWND__@@PEAU3@_N@Z	1296	0x1400497c0
?CreateHWND@HWNDHost@DirectUI@@MEAAPEAUHWND__@@PEAU3@@Z	1297	0x140012fb4
?CreateHWND@XElement@DirectUI@@UEAAPEAUHWND__@@PEAU3@@Z	1298	0x1400081a4
?CreateHostWindow@NativeHWNDHost@DirectUI@@UEAAPEAUHWND__@@KPEBG0KHHHHPEAU3@PEAUHMENU__@@PEAUHINSTANCE__@@PEAX@Z	1299	0x14005cc1c
?CreateIconGraphicHelper@Value@DirectUI@@CAPEAV12@PEAUHICON__@@_N11@Z	1300	0x140025e28
?CreateInstance@CSafeElementProxy@@SAJPEAVElement@DirectUI@@PEAPEAV1@@Z	1301	0x140013d10
?CreateInt@Value@DirectUI@@SAPEAV12@HW4DynamicScaleValue@@@Z	1302	0x14000dea8
?CreateLayout@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@P6AJHPEAHPEAPEAVValue@2@@Z@Z	1303	0x140079244
?CreateLayout@Value@DirectUI@@SAPEAV12@PEAVLayout@2@@Z	1304	0x140065a78
?CreateParser@DUIFactory@DirectUI@@QEAAJXZ	1305	0x14001470c
?CreateParser@XProvider@DirectUI@@QEAAJPEAPEAVDUIXmlParser@2@@Z	1306	0x14003ce54
?CreateParserCP@TaskPage@DirectUI@@EEAAJPEAPEAVDUIXmlParser@2@@Z	1307	0x140076d28
?CreateParserCP@XResourceProvider@DirectUI@@UEAAJPEAPEAVDUIXmlParser@2@@Z	1308	0x14007495c
?CreatePatternProvider@Schema@DirectUI@@SAJW4Pattern@12@PEAVElementProvider@2@PEAPEAUIUnknown@@@Z	1309	0x140065f24
?CreatePoint@Value@DirectUI@@SAPEAV12@HHW4DynamicScaleValue@@@Z	1310	0x14000bce0
?CreateRect@Value@DirectUI@@SAPEAV12@HHHHW4DynamicScaleValue@@@Z	1311	0x14002433c
?CreateScaledValue@Value@DirectUI@@SAPEAV12@MPEAV12@@Z	1312	0x1400789ac
?CreateScrollBars@ScrollViewer@DirectUI@@MEAAJXZ	1313	0x14003b75c
?CreateScrollBars@StyledScrollViewer@DirectUI@@MEAAJXZ	1314	0x140017c60
?CreateSize@Value@DirectUI@@SAPEAV12@HHW4DynamicScaleValue@@@Z	1315	0x140047464
?CreateString@Value@DirectUI@@SAPEAV12@PEBGPEAUHINSTANCE__@@@Z	1316	0x14003d5d0
?CreateStringRP@Value@DirectUI@@SAPEAV12@PEBGPEAUHINSTANCE__@@@Z	1317	0x14004ae08
?CreateStyleParser@HWNDElement@DirectUI@@UEAAJPEAPEAVDUIXmlParser@2@@Z	1318	0x140066e40
?CreateStyleParser@XBaby@DirectUI@@UEAAJPEAPEAVDUIXmlParser@2@@Z	1319	0x14007ade0
?CreateStyleSheet@DUIXmlParser@DirectUI@@IEAAJPEAUIXmlReader@@PEBGPEAPEAVStyleSheet@2@@Z	1320	0x14003b05c
?CreateStyleSheet@Value@DirectUI@@SAPEAV12@PEAVStyleSheet@2@@Z	1321	0x14004be58
?CreateValueList@Value@DirectUI@@SAPEAV12@PEAV12@@Z	1322	0x140006cb8
?CreateValueList@Value@DirectUI@@SAPEAV12@PEAV?$DynamicArray@PEAVValue@DirectUI@@$0A@@2@@Z	1323	0x140064ee0
?CreateXBaby@XProvider@DirectUI@@UEAAJPEAVIXElementCP@2@PEAUHWND__@@PEAVElement@2@PEAKPEAPEAUIXBaby@2@@Z	1324	0x140054518
?CreateXmlReader@DUIXmlParser@DirectUI@@IEAAJPEAPEAUIXmlReader@@@Z	1325	0x14004410c
?CreateXmlReaderFromHGLOBAL@DUIXmlParser@DirectUI@@IEAAJPEAXPEAPEAUIXmlReader@@@Z	1326	0x14001b760
?CreateXmlReaderInputWithEncodingName@DUIXmlParser@DirectUI@@IEAAJPEAUIStream@@PEBGPEAPEAUIUnknown@@@Z	1327	0x140065e60
?CtrlSubclassProc@HWNDHost@DirectUI@@KA_JPEAUHWND__@@I_K_J@Z	1328	0x14001eabc
?CultureProperty@Schema@DirectUI@@2HA	1329	0x140061fec
?CursorProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	1330	0x140064f58
?CustomControlType@Schema@DirectUI@@2HA	1331	0x140047da4
?CustomDragDropScalingHint@PVLAnimation@DirectUI@@SA?AVUID@@XZ	1332	0x14006e9e8
?CustomProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	1333	0x14006a5d8
?CustomReflowHint@PVLAnimation@DirectUI@@SA?AVUID@@XZ	1334	0x14000a474
?CustomTapHint@PVLAnimation@DirectUI@@SA?AVUID@@XZ	1335	0x140024de4
?Cut@TouchEditBase@DirectUI@@SA?AVUID@@XZ	1336	0x14002fb58
?DCompDeviceRebuilt@Element@DirectUI@@SA?AVUID@@XZ	1337	0x140003f28
?DPIProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	1338	0x140063b34
?DUICreatePropertySheetPage@TaskPage@DirectUI@@QEAAJPEAUHINSTANCE__@@@Z	1339	0x140001458
?DataGridControlType@Schema@DirectUI@@2HA	1340	0x140009b6c
?DataItemControlType@Schema@DirectUI@@2HA	1341	0x1400310b4
?DefaultAction@Button@DirectUI@@UEAAJXZ	1342	0x140016cc8
?DefaultAction@CCBase@DirectUI@@UEAAJXZ	1343	0x140041aec
?DefaultAction@CCPushButton@DirectUI@@UEAAJXZ	1344	0x14002372c
?DefaultAction@Element@DirectUI@@UEAAJXZ	1345	0x1400050b8
?DefaultAction@SemanticZoomToggle@DirectUI@@UEAAJXZ	1346	0x140020a48
?DefaultAction@TouchButton@DirectUI@@UEAAJXZ	1347	0x14001e270
?DefaultAction@TouchRepeatButton@DirectUI@@UEAAJXZ	1348	0x14006b4b8
?DefaultButtonTrackingProp@DialogElement@DirectUI@@SAPEBUPropertyInfo@2@XZ	1349	0x1400232b8
?DelayActivateTooltip@HWNDElement@DirectUI@@QEAAXXZ	1350	0x14002acd4
?DeleteString@CCListBox@DirectUI@@QEAAHH@Z	1351	0x140021a00
?DesiredSizeProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	1352	0x140068344
?Destroy@ClassInfoBase@DirectUI@@UEAAXXZ	1353	0x14006f1d0
?Destroy@DUIXmlParser@DirectUI@@QEAAXXZ	1354	0x14003f828
?Destroy@Element@DirectUI@@QEAAJ_N@Z	1355	0x140068564
?Destroy@Expression@DirectUI@@QEAAXXZ	1356	0x14003a5d4
?Destroy@Layout@DirectUI@@QEAAXXZ	1357	0x140023758
?Destroy@NativeHWNDHost@DirectUI@@QEAAXXZ	1358	0x140003a9c
?Destroy@XHost@DirectUI@@QEAAXXZ	1359	0x140078a00
?DestroyAll@Element@DirectUI@@QEAAJ_N@Z	1360	0x14000183c
?DestroyCP@TaskPage@DirectUI@@EEAAXXZ	1361	0x140043130
?DestroyCP@XResourceProvider@DirectUI@@UEAAXXZ	1362	0x140014404
?DestroyListener@EventManager@DirectUI@@SAXPEAVElement@2@@Z	1363	0x140063f8c
?DestroyMsg@NativeHWNDHost@DirectUI@@SAIXZ	1364	0x140064168
?DestroyWindow@NativeHWNDHost@DirectUI@@QEAAXXZ	1365	0x14005b208
?DestroyWindow@XHost@DirectUI@@QEAAXXZ	1366	0x14003f7b0
?Detach@CSafeElementProxy@@QEAAXXZ	1367	0x1400516f0
?Detach@Element@DirectUI@@QEAAXPEAVDeferCycle@2@@Z	1368	0x140065844
?Detach@HWNDHost@DirectUI@@QEAAXXZ	1369	0x14002a684
?Detach@Layout@DirectUI@@UEAAXPEAVElement@2@@Z	1370	0x1400741e8
?DetachParser@DUIFactory@DirectUI@@QEAAPEAVDUIXmlParser@2@XZ	1371	0x14005aef4
?DeterminateProp@ModernProgressBar@DirectUI@@SAPEBUPropertyInfo@2@XZ	1372	0x14007b9d8
?DirectionProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	1373	0x14006e5e8
?DirtyProp@Edit@DirectUI@@SAPEBUPropertyInfo@2@XZ	1374	0x14001c210
?DisableAccTextExtendProp@RichText@DirectUI@@SAPEBUPropertyInfo@2@XZ	1375	0x14002f84c
?DisableMouseInRectCheckProp@TouchRepeatButton@DirectUI@@SAPEBUPropertyInfo@2@XZ	1376	0x140058aa0
?DisableSelectionHandlesOnEmptyContent@TouchEdit2@DirectUI@@QEAAXXZ	1377	0x140066560
?Disconnect@DuiAccessible@DirectUI@@UEAAJXZ	1378	0x140050b64
?Disconnect@HWNDElementAccessible@DirectUI@@UEAAJXZ	1379	0x14005040c
?Disconnect@HWNDHostAccessible@DirectUI@@UEAAJXZ	1380	0x140031da8
?DismissIHMAsync@TouchHWNDElement@DirectUI@@QEAAJXZ	1381	0x14004b698
?DllsLoaded@CallstackTracker@DirectUI@@CAHXZ	1382	0x140058408
?DoInvoke@?$PatternProvider@VExpandCollapseProvider@DirectUI@@UIExpandCollapseProvider@@$00@DirectUI@@IEAAJHZZ	1383	0x140002808
?DoInvoke@?$PatternProvider@VGridItemProvider@DirectUI@@UIGridItemProvider@@$01@DirectUI@@IEAAJHZZ	1384	0x140029684
?DoInvoke@?$PatternProvider@VGridProvider@DirectUI@@UIGridProvider@@$02@DirectUI@@IEAAJHZZ	1385	0x14001adb0
?DoInvoke@?$PatternProvider@VInvokeProvider@DirectUI@@UIInvokeProvider@@$0A@@DirectUI@@IEAAJHZZ	1386	0x14006932c
?DoInvoke@?$PatternProvider@VRangeValueProvider@DirectUI@@UIRangeValueProvider@@$03@DirectUI@@IEAAJHZZ	1387	0x1400512e4
?DoInvoke@?$PatternProvider@VScrollItemProvider@DirectUI@@UIScrollItemProvider@@$05@DirectUI@@IEAAJHZZ	1388	0x140006a28
?DoInvoke@?$PatternProvider@VScrollProvider@DirectUI@@UIScrollProvider@@$04@DirectUI@@IEAAJHZZ	1389	0x14006d7e4
?DoInvoke@?$PatternProvider@VSelectionItemProvider@DirectUI@@UISelectionItemProvider@@$06@DirectUI@@IEAAJHZZ	1390	0x1400642a4
?DoInvoke@?$PatternProvider@VSelectionProvider@DirectUI@@UISelectionProvider@@$07@DirectUI@@IEAAJHZZ	1391	0x14001a0a4
?DoInvoke@?$PatternProvider@VTableItemProvider@DirectUI@@UITableItemProvider@@$09@DirectUI@@IEAAJHZZ	1392	0x140073708
?DoInvoke@?$PatternProvider@VTableProvider@DirectUI@@UITableProvider@@$08@DirectUI@@IEAAJHZZ	1393	0x14002a7c4
?DoInvoke@?$PatternProvider@VToggleProvider@DirectUI@@UIToggleProvider@@$0L@@DirectUI@@IEAAJHZZ	1394	0x140008774
?DoInvoke@?$PatternProvider@VValueProvider@DirectUI@@UIValueProvider@@$0M@@DirectUI@@IEAAJHZZ	1395	0x140004338
?DoInvoke@ElementProvider@DirectUI@@IEAAJHZZ	1396	0x14005ae20
?DoInvoke@InvokeHelper@DirectUI@@QEAAJHPEAVElementProvider@2@P6APEAVProviderProxy@2@PEAVElement@2@@ZPEAD@Z	1397	0x14003e1d4
?DoInvokeArgs@ElementProvider@DirectUI@@QEAAJHP6APEAVProviderProxy@2@PEAVElement@2@@ZPEAD@Z	1398	0x14005d770
?DoLayout@BorderLayout@DirectUI@@UEAAXPEAVElement@2@HH@Z	1399	0x1400336d4
?DoLayout@FillLayout@DirectUI@@UEAAXPEAVElement@2@HH@Z	1400	0x14001578c
?DoLayout@FlowLayout@DirectUI@@UEAAXPEAVElement@2@HH@Z	1401	0x140039da0
?DoLayout@GridLayout@DirectUI@@UEAAXPEAVElement@2@HH@Z	1402	0x14000a1b4
?DoLayout@Layout@DirectUI@@UEAAXPEAVElement@2@HH@Z	1403	0x1400588ac
?DoLayout@NineGridLayout@DirectUI@@UEAAXPEAVElement@2@HH@Z	1404	0x140039dc0
?DoLayout@RowLayout@DirectUI@@UEAAXPEAVElement@2@HH@Z	1405	0x14005b410
?DoLayout@TableLayout@DirectUI@@UEAAXPEAVElement@2@HH@Z	1406	0x140018a1c
?DoLayout@VerticalFlowLayout@DirectUI@@UEAAXPEAVElement@2@HH@Z	1407	0x140031388
?DoMethod@BrowserSelectionProxy@DirectUI@@UEAAJHPEAD@Z	1408	0x140019b1c
?DoMethod@ElementProxy@DirectUI@@UEAAJHPEAD@Z	1409	0x14000ea10
?DoMethod@ExpandCollapseProxy@DirectUI@@UEAAJHPEAD@Z	1410	0x14000b7ec
?DoMethod@GridItemProxy@DirectUI@@UEAAJHPEAD@Z	1411	0x140049898
?DoMethod@GridProxy@DirectUI@@UEAAJHPEAD@Z	1412	0x14004dbf8
?DoMethod@HWNDElementProxy@DirectUI@@UEAAJHPEAD@Z	1413	0x14006dca4
?DoMethod@InvokeProxy@DirectUI@@UEAAJHPEAD@Z	1414	0x140042688
?DoMethod@ModernProgressBarRangeValueProxy@DirectUI@@UEAAJHPEAD@Z	1415	0x14003d6e8
?DoMethod@NavigatorSelectionItemProxy@DirectUI@@UEAAJHPEAD@Z	1416	0x14001e74c
?DoMethod@ProgressRangeValueProxy@DirectUI@@UEAAJHPEAD@Z	1417	0x140063c6c
?DoMethod@RangeValueProxy@DirectUI@@UEAAJHPEAD@Z	1418	0x14001f278
?DoMethod@ScrollBarRangeValueProxy@DirectUI@@UEAAJHPEAD@Z	1419	0x14007313c
?DoMethod@ScrollItemProxy@DirectUI@@UEAAJHPEAD@Z	1420	0x1400033cc
?DoMethod@ScrollProxy@DirectUI@@UEAAJHPEAD@Z	1421	0x1400258cc
?DoMethod@SelectionItemProxy@DirectUI@@UEAAJHPEAD@Z	1422	0x140003dd8
?DoMethod@SelectionProxy@DirectUI@@UEAAJHPEAD@Z	1423	0x1400627cc
?DoMethod@SelectorSelectionItemProxy@DirectUI@@UEAAJHPEAD@Z	1424	0x14000117c
?DoMethod@SelectorSelectionProxy@DirectUI@@UEAAJHPEAD@Z	1425	0x140052d30
?DoMethod@TableItemProxy@DirectUI@@UEAAJHPEAD@Z	1426	0x140021484
?DoMethod@TableProxy@DirectUI@@UEAAJHPEAD@Z	1427	0x140076de4
?DoMethod@ToggleProxy@DirectUI@@UEAAJHPEAD@Z	1428	0x140024b5c
?DoMethod@ValueProxy@DirectUI@@UEAAJHPEAD@Z	1429	0x140021690
?DockPattern@Schema@DirectUI@@2HA	1430	0x140015eb0
?DocumentControlType@Schema@DirectUI@@2HA	1431	0x140010968
?DoubleBuffered@Element@DirectUI@@QEAAX_N@Z	1432	0x140033ee8
?Drag@Thumb@DirectUI@@SA?AVUID@@XZ	1433	0x140043f24
?DragDragCancelEvent@Schema@DirectUI@@2HA	1434	0x140036408
?DragDragCompleteEvent@Schema@DirectUI@@2HA	1435	0x140033470
?DragDragStartEvent@Schema@DirectUI@@2HA	1436	0x1400536f4
?DragPattern@Schema@DirectUI@@2HA	1437	0x140066ee0
?Drag_DropEffect_Property@Schema@DirectUI@@2HA	1438	0x140019914
?Drag_DropEffects_Property@Schema@DirectUI@@2HA	1439	0x140004160
?Drag_IsGrabbed_Property@Schema@DirectUI@@2HA	1440	0x14001d238
?DrawOutlinesProp@Movie@DirectUI@@SAPEBUPropertyInfo@2@XZ	1441	0x140028ca8
?DumpDuiProperties@@YAXPEAVElement@DirectUI@@@Z	1443	0x1400248f8
?DumpDuiTree@@YAXPEAVElement@DirectUI@@H@Z	1444	0x14000a864
?EdgeHighlightColorProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	1445	0x14001ca88
?EdgeHighlightThicknessProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	1446	0x140031858
?EditControlType@Schema@DirectUI@@2HA	1447	0x140076858
?ElementFromPoint@HWNDElement@DirectUI@@QEAAPEAVElement@2@PEAUtagPOINT@@@Z	1448	0x14004115c
?ElementFromPoint@HWNDElementProxy@DirectUI@@IEAAJNNPEAPEAUIRawElementProviderFragment@@@Z	1449	0x14000e188
?ElementMovesOnIHMNotifyProp@TouchEditBase@DirectUI@@SAPEBUPropertyInfo@2@XZ	1450	0x1400336f8
?ElementProviderFromPoint@HWNDElementProvider@DirectUI@@UEAAJNNPEAPEAUIRawElementProviderFragment@@@Z	1451	0x1400418f4
?EnableDesignMode@DUIXmlParser@DirectUI@@QEAAXXZ	1452	0x14004ddf0
?EnableUiaEvents@Element@DirectUI@@QEAAX_N@Z	1453	0x14006fab4
?EnabledProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	1454	0x140037498
?End@BaseScrollBar@DirectUI@@UEAAXXZ	1455	0x140040084
?EndDefer@Element@DirectUI@@QEAAXK@Z	1456	0x140032afc
?EndDefer@EventManager@DirectUI@@SAJPEAVElement@2@@Z	1457	0x14005953c
?EnforceSizeProp@PushButton@DirectUI@@SAPEBUPropertyInfo@2@XZ	1458	0x140003820
?EnsureVisible@Element@DirectUI@@QEAA_NI@Z	1459	0x14004ee90
?EnsureVisible@Element@DirectUI@@QEAA_NXZ	1460	0x140014238
?EnsureVisible@Element@DirectUI@@UEAA_NHHHH@Z	1461	0x140065bec
?EnsureVisible@Viewer@DirectUI@@UEAA_NHHHH@Z	1462	0x14002cc20
?Enter@Edit@DirectUI@@SA?AVUID@@XZ	1463	0x14001b478
?Enter@TouchEditBase@DirectUI@@SA?AVUID@@XZ	1464	0x140004828
?Entered@Browser@DirectUI@@SA?AVUID@@XZ	1465	0x140023af8
?EnumCallstackFrames@CallstackTracker@DirectUI@@QEAAHP6AXPEBD0KK@Z@Z	1466	0x14005006c
?EnumPropertyInfo@ClassInfoBase@DirectUI@@UEAAPEBUPropertyInfo@2@I@Z	1467	0x140077794
?EraseBkgnd@HWNDHost@DirectUI@@MEAA_NPEAUHDC__@@PEA_J@Z	1468	0x140071e2c
?EraseFeedback@TouchSlider@DirectUI@@QEAAXXZ	1469	0x1400391bc
?EstimateContentSize@CCPushButton@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z	1470	0x140039510
?EventFromEventId@Schema@DirectUI@@SA?AW4Event@12@H@Z	1471	0x140011f50
?EventListener@EventManager@DirectUI@@SAJPEAVElement@2@PEAUEvent@2@@Z	1472	0x140068948
?ExecuteManualSwapDeferredZoomToRect@TouchScrollViewer@DirectUI@@QEAAJ_N@Z	1473	0x14006d178
?Expand@ExpandCollapseProvider@DirectUI@@UEAAJXZ	1474	0x14005d344
?ExpandCollapsePattern@Schema@DirectUI@@2HA	1475	0x14007c408
?ExpandCollapse_ExpandCollapseState_Property@Schema@DirectUI@@2HA	1476	0x1400444e4
?ExpandProp@Macro@DirectUI@@SAPEBUPropertyInfo@2@XZ	1477	0x140022f64
?ExpandedProp@Expandable@DirectUI@@SAPEBUPropertyInfo@2@XZ	1478	0x140059b48
?ExtentProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	1479	0x1400562d0
?FWantAnyEvent@EventManager@DirectUI@@SA_NPEAVElement@2@@Z	1480	0x140044770
?FillSymbolInfo@CallstackTracker@DirectUI@@AEAAXPEAUSTACK_SYMBOL_INFO@12@_K@Z	1481	0x140013be4
?FilterOnPasteProp@TouchEditBase@DirectUI@@SAPEBUPropertyInfo@2@XZ	1482	0x140064b18
?FinalizeCurrentIMEComposition@TouchEdit2@DirectUI@@UEAAJXZ	1483	0x14003a638
?FinalizeCurrentIMEComposition@TouchEditBase@DirectUI@@UEAAJXZ	1484	0x14000278c
?Find@ElementProviderManager@DirectUI@@SAPEAVElementProvider@2@PEAVElement@2@@Z	1485	0x14000cdec
?FindAccessibleRole@AccessibleButton@DirectUI@@CAPEBUACCESSIBLEROLE@12@H@Z	1486	0x140063f88
?FindDescendent@Element@DirectUI@@QEAAPEAV12@G@Z	1487	0x140040c6c
?FindDescendentWorker@Element@DirectUI@@AEAAPEAV12@G@Z	1488	0x1400718ec
?FindElementWithShortcutAndDoDefaultAction@XProvider@DirectUI@@UEAAHGH@Z	1489	0x14004d0ec
?FindInvokeHelper@InvokeManager@DirectUI@@CAPEAVInvokeHelper@2@PEAI@Z	1490	0x1400646a0
?FindProviderCallback@ElementProviderManager@DirectUI@@CA_NPEAVElementProvider@2@PEAX@Z	1491	0x140068ae8
?FindRefPoint@RefPointElement@DirectUI@@SAPEAVElement@2@PEAV32@PEAUtagPOINT@@@Z	1492	0x14003111c
?FindShortcut@HWNDElement@DirectUI@@SA_NGPEAVElement@2@PEAPEAV32@PEAH2H@Z	1493	0x14007049c
?FindShortcutRecursive@HWNDElement@DirectUI@@KA_NGPEAVElement@2@PEAPEAV32@PEAH2H@Z	1494	0x1400341dc
?FireAnimationChangeEvent@BaseScrollViewer@DirectUI@@IEAAX_N@Z	1495	0x140035590
?FireClickEvent@TouchButton@DirectUI@@UEAAXIIW4ClickDevice@12@PEAUtagPOINT@@@Z	1496	0x14000c350
?FireClickEvent@TouchRepeatButton@DirectUI@@UEAAXIIW4ClickDevice@TouchButton@2@PEAUtagPOINT@@@Z	1497	0x140024cb8
?FireEvent@Element@DirectUI@@QEAAXPEAUEvent@2@_N1@Z	1498	0x140019ee8
?FireEventOnMouseOrPointerRelease@TouchSlider@DirectUI@@QEAAXXZ	1499	0x1400610b4
?FireHostEvent@PushButton@DirectUI@@AEAAXPEAVElement@2@_N@Z	1500	0x14000afe8
?FireNavigate@Browser@DirectUI@@AEAAHG@Z	1501	0x14003038c
?FireNavigationEvent@Navigator@DirectUI@@AEAAXXZ	1502	0x14006d0b0
?FireRightClickEvent@TouchButton@DirectUI@@UEAAXIPEAUtagPOINT@@@Z	1503	0x140041924
?FireRightClickEvent@TouchRepeatButton@DirectUI@@UEAAXIPEAUtagPOINT@@@Z	1504	0x140031368
?FireStructureChangedEvent@EventManager@DirectUI@@SAJPEAVElement@2@W4StructureChangeType@@@Z	1505	0x1400342f0
?FlagsProp@TouchHWNDElement@DirectUI@@SAPEBUPropertyInfo@2@XZ	1506	0x14006885c
?FlushWorkingSet@HWNDElement@DirectUI@@QEAAXXZ	1507	0x1400293ec
?FontColorRunsProp@RichText@DirectUI@@SAPEBUPropertyInfo@2@XZ	1508	0x1400111ac
?FontFaceProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	1509	0x140021688
?FontProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	1510	0x140001cac
?FontQualityProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	1511	0x140020634
?FontSizeProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	1512	0x1400749ac
?FontSizeRunsProp@RichText@DirectUI@@SAPEBUPropertyInfo@2@XZ	1513	0x14007068c
?FontStyleProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	1514	0x14005ed6c
?FontWeightProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	1515	0x14003ded0
?FontWeightRunsProp@RichText@DirectUI@@SAPEBUPropertyInfo@2@XZ	1516	0x14004049c
?ForceEditTextToLTRProp@TouchEditBase@DirectUI@@SAPEBUPropertyInfo@2@XZ	1517	0x140054bac
?ForceThemeChange@XBaby@DirectUI@@UEAAX_K_J@Z	1518	0x140070be8
?ForceThemeChange@XProvider@DirectUI@@UEAAJ_K_J@Z	1519	0x14007575c
?ForegroundProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	1520	0x14006f040
?Forward@Movie@DirectUI@@QEAAXXZ	1521	0x140009514
?ForwardingWindowMessage@TouchHWNDElement@DirectUI@@SA?AVUID@@XZ	1522	0x14000add8
?FrameDurationProp@AnimationStrip@DirectUI@@SAPEBUPropertyInfo@2@XZ	1523	0x14001273c
?FrameIndexProp@AnimationStrip@DirectUI@@SAPEBUPropertyInfo@2@XZ	1524	0x140050780
?FrameWidthProp@AnimationStrip@DirectUI@@SAPEBUPropertyInfo@2@XZ	1525	0x1400212c4
?FrameworkId@Schema@DirectUI@@2HA	1526	0x14000383c
?FreeComCtl32@TaskPage@DirectUI@@AEAAXXZ	1527	0x140004934
?FreeProvider@XElement@DirectUI@@QEAAXXZ	1528	0x14006b8fc
?GetAbsorbsShortcut@Element@DirectUI@@QEAA_NXZ	1529	0x14007a424
?GetAccDefAction@Element@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z	1530	0x14006ac20
?GetAccDesc@Element@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z	1531	0x140014ec8
?GetAccHelp@Element@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z	1532	0x1400419e8
?GetAccItemStatus@Element@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z	1533	0x14004e600
?GetAccItemType@Element@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z	1534	0x14006bd60
?GetAccName@DuiAccessible@DirectUI@@IEAAJUtagVARIANT@@HPEAPEAG@Z	1535	0x14007b0c0
?GetAccName@Element@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z	1536	0x140010c48
?GetAccNameAsDisplayed@Element@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z	1537	0x140043e44
?GetAccNameFromContent@DuiAccessible@DirectUI@@IEAAJPEAPEAG@Z	1538	0x140042580
?GetAccRole@Element@DirectUI@@QEAAHXZ	1539	0x14001d528
?GetAccState@Element@DirectUI@@QEAAHXZ	1540	0x140016c38
?GetAccValue@Element@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z	1541	0x140069340
?GetAccessible@Element@DirectUI@@QEAA_NXZ	1542	0x14000422c
?GetAccessibleImpl@Element@DirectUI@@UEAAJPEAPEAUIAccessible@@@Z	1543	0x14007b75c
?GetAccessibleImpl@HWNDElement@DirectUI@@UEAAJPEAPEAUIAccessible@@@Z	1544	0x14001dc2c
?GetAccessibleImpl@HWNDHost@DirectUI@@AEAAJPEAPEAUIAccessible@@_N@Z	1545	0x1400398cc
?GetAccessibleImpl@HWNDHost@DirectUI@@UEAAJPEAPEAUIAccessible@@@Z	1546	0x1400281e0
?GetAccessibleImpl@TouchEdit2@DirectUI@@UEAAJPEAPEAUIAccessible@@@Z	1547	0x140077efc
?GetAccessibleParent@DuiAccessible@DirectUI@@SAPEAVElement@2@PEAV32@@Z	1548	0x14005a284
?GetActive@Element@DirectUI@@QEAAHXZ	1549	0x140017000
?GetActiveState@TouchScrollBar@DirectUI@@QEAA?AW4ActiveState@2@XZ	1550	0x140022630
?GetActualReferencePoint@RefPointElement@DirectUI@@QEAAPEBUtagPOINT@@PEAPEAVValue@2@@Z	1551	0x140020cb4
?GetAdjacent@BorderLayout@DirectUI@@UEAAPEAVElement@2@PEAV32@0HPEBUNavReference@2@K@Z	1552	0x14005ea60
?GetAdjacent@Element@DirectUI@@UEAAPEAV12@PEAV12@HPEBUNavReference@2@K@Z	1553	0x140044574
?GetAdjacent@FillLayout@DirectUI@@UEAAPEAVElement@2@PEAV32@0HPEBUNavReference@2@K@Z	1554	0x14001cc1c
?GetAdjacent@FlowLayout@DirectUI@@UEAAPEAVElement@2@PEAV32@0HPEBUNavReference@2@K@Z	1555	0x140028d50
?GetAdjacent@GridLayout@DirectUI@@UEAAPEAVElement@2@PEAV32@0HPEBUNavReference@2@K@Z	1556	0x140028a10
?GetAdjacent@ItemList@DirectUI@@UEAAPEAVElement@2@PEAV32@HPEBUNavReference@2@K@Z	1557	0x140023600
?GetAdjacent@Layout@DirectUI@@UEAAPEAVElement@2@PEAV32@0HPEBUNavReference@2@K@Z	1558	0x140062564
?GetAdjacent@NineGridLayout@DirectUI@@UEAAPEAVElement@2@PEAV32@0HPEBUNavReference@2@K@Z	1559	0x140020088
?GetAdjacent@RowLayout@DirectUI@@UEAAPEAVElement@2@PEAV32@0HPEBUNavReference@2@K@Z	1560	0x14006338c
?GetAdjacent@Selector@DirectUI@@UEAAPEAVElement@2@PEAV32@HPEBUNavReference@2@K@Z	1561	0x140073f34
?GetAdjacent@ShellBorderLayout@DirectUI@@UEAAPEAVElement@2@PEAV32@0HPEBUNavReference@2@K@Z	1562	0x140003c74
?GetAdjacent@TableLayout@DirectUI@@UEAAPEAVElement@2@PEAV32@0HPEBUNavReference@2@K@Z	1563	0x14006b05c
?GetAdjacent@VerticalFlowLayout@DirectUI@@UEAAPEAVElement@2@PEAV32@0HPEBUNavReference@2@K@Z	1564	0x14004c550
?GetAdjacent@XBaby@DirectUI@@UEAAPEAVElement@2@PEAV32@HPEBUNavReference@2@K@Z	1565	0x1400204dc
?GetAllowArrowOut@TouchScrollViewer@DirectUI@@QEAA_NXZ	1566	0x14006d888
?GetAlpha@Element@DirectUI@@QEAAHXZ	1567	0x140077658
?GetAnimatePopupOnDismiss@TouchSelect@DirectUI@@QEAA_NXZ	1568	0x1400633d8
?GetAnimation@Element@DirectUI@@QEAAHXZ	1569	0x1400436f4
?GetAtom@Value@DirectUI@@QEAAGXZ	1570	0x140022b64
?GetAtomZero@Value@DirectUI@@SAPEAV12@XZ	1571	0x14000ee34
?GetAutoGrouping@CCRadioButton@DirectUI@@QEAA_NXZ	1572	0x1400532f8
?GetAutoStart@Movie@DirectUI@@QEAA_NXZ	1573	0x140077208
?GetAutoStop@Movie@DirectUI@@QEAA_NXZ	1574	0x14003853c
?GetAutomationId@ElementProxy@DirectUI@@IEAAJPEAUtagVARIANT@@@Z	1575	0x14006dc20
?GetBackgroundColor@Element@DirectUI@@QEAAPEBUFill@2@PEAPEAVValue@2@@Z	1576	0x140007aa0
?GetBackgroundOwner@HWNDHost@DirectUI@@IEAAPEAVElement@2@XZ	1577	0x140052b54
?GetBackgroundOwnerID@HWNDHost@DirectUI@@QEAAGXZ	1578	0x14000a09c
?GetBackgroundStdColor@Element@DirectUI@@QEAAHXZ	1579	0x1400531e8
?GetBool@EventManager@DirectUI@@CAJPEAUtagVARIANT@@PEAVValue@2@@Z	1580	0x140036574
?GetBool@Value@DirectUI@@QEAA_NXZ	1581	0x140011d78
?GetBoolFalse@Value@DirectUI@@SAPEAV12@XZ	1582	0x14007c350
?GetBoolTrue@Value@DirectUI@@SAPEAV12@XZ	1583	0x140004dc4
?GetBorderColor@Element@DirectUI@@QEAAPEBUFill@2@PEAPEAVValue@2@@Z	1584	0x140016a2c
?GetBorderStdColor@Element@DirectUI@@QEAAHXZ	1585	0x140077764
?GetBorderStyle@Element@DirectUI@@QEAAHXZ	1586	0x14005866c
?GetBorderThickness@Element@DirectUI@@QEAAPEBUtagRECT@@PEAPEAVValue@2@@Z	1587	0x1400412fc
?GetBoundingRect@ElementProxy@DirectUI@@IEAAJPEAUUiaRect@@@Z	1588	0x140079da8
?GetBrowser@Navigator@DirectUI@@QEAAPEAVBrowser@2@XZ	1589	0x14005aadc
?GetBuffering@TouchSlider@DirectUI@@QEAAHXZ	1590	0x14001f464
?GetButtonClassAcceptsEnterKey@DialogElement@DirectUI@@UEAA_NXZ	1591	0x140077414
?GetButtonColor@CCPushButton@DirectUI@@UEAA_NPEAUHDC__@@PEAPEAUHBRUSH__@@@Z	1592	0x140015a0c
?GetByClassIndex@ClassInfoBase@DirectUI@@UEAAPEBUPropertyInfo@2@I@Z	1593	0x140006934
?GetCaptured@Button@DirectUI@@QEAA_NXZ	1594	0x140067a2c
?GetCaptured@TouchButton@DirectUI@@QEAA_NXZ	1595	0x14000d848
?GetCellInfo@TableLayout@DirectUI@@QEAAPEAUCellInfo@2@H@Z	1596	0x140060f00
?GetCheckedState@TouchCheckBox@DirectUI@@QEAA?AW4CheckedStateFlags@2@XZ	1597	0x140031c38
?GetChildFromLayoutIndex@Layout@DirectUI@@QEAAPEAVElement@2@PEAV32@HPEAV?$DynamicArray@PEAVElement@DirectUI@@$0A@@2@@Z	1598	0x140020390
?GetChildren@ClassInfoBase@DirectUI@@UEBAHXZ	1599	0x140051014
?GetChildren@Element@DirectUI@@QEAAPEAV?$DynamicArray@PEAVElement@DirectUI@@$0A@@2@PEAPEAVValue@2@@Z	1600	0x1400689c8
?GetClass@Element@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z	1601	0x140021494
?GetClassInfoPtr@AccessibleButton@DirectUI@@SAPEAUIClassInfo@2@XZ	1602	0x14002f370
?GetClassInfoPtr@AnimationStrip@DirectUI@@SAPEAUIClassInfo@2@XZ	1603	0x1400523c8
?GetClassInfoPtr@AutoButton@DirectUI@@SAPEAUIClassInfo@2@XZ	1604	0x1400360f4
?GetClassInfoPtr@BaseScrollViewer@DirectUI@@SAPEAUIClassInfo@2@XZ	1605	0x14000201c
?GetClassInfoPtr@Bind@DirectUI@@SAPEAUIClassInfo@2@XZ	1606	0x14006662c
?GetClassInfoPtr@Browser@DirectUI@@SAPEAUIClassInfo@2@XZ	1607	0x140077240
?GetClassInfoPtr@Button@DirectUI@@SAPEAUIClassInfo@2@XZ	1608	0x1400641f4
?GetClassInfoPtr@CCAVI@DirectUI@@SAPEAUIClassInfo@2@XZ	1609	0x140018dcc
?GetClassInfoPtr@CCBase@DirectUI@@SAPEAUIClassInfo@2@XZ	1610	0x140054cfc
?GetClassInfoPtr@CCBaseCheckRadioButton@DirectUI@@SAPEAUIClassInfo@2@XZ	1611	0x1400412f8
?GetClassInfoPtr@CCBaseScrollBar@DirectUI@@SAPEAUIClassInfo@2@XZ	1612	0x14003583c
?GetClassInfoPtr@CCCheckBox@DirectUI@@SAPEAUIClassInfo@2@XZ	1613	0x14004da24
?GetClassInfoPtr@CCCommandLink@DirectUI@@SAPEAUIClassInfo@2@XZ	1614	0x1400322f0
?GetClassInfoPtr@CCHScrollBar@DirectUI@@SAPEAUIClassInfo@2@XZ	1615	0x140058fa4
?GetClassInfoPtr@CCListBox@DirectUI@@SAPEAUIClassInfo@2@XZ	1616	0x14006d170
?GetClassInfoPtr@CCListView@DirectUI@@SAPEAUIClassInfo@2@XZ	1617	0x140028790
?GetClassInfoPtr@CCProgressBar@DirectUI@@SAPEAUIClassInfo@2@XZ	1618	0x1400381f4
?GetClassInfoPtr@CCPushButton@DirectUI@@SAPEAUIClassInfo@2@XZ	1619	0x140064a8c
?GetClassInfoPtr@CCRadioButton@DirectUI@@SAPEAUIClassInfo@2@XZ	1620	0x14006899c
?GetClassInfoPtr@CCSysLink@DirectUI@@SAPEAUIClassInfo@2@XZ	1621	0x140044ad4
?GetClassInfoPtr@CCTrackBar@DirectUI@@SAPEAUIClassInfo@2@XZ	1622	0x140046a1c
?GetClassInfoPtr@CCTreeView@DirectUI@@SAPEAUIClassInfo@2@XZ	1623	0x1400719d8
?GetClassInfoPtr@CCVScrollBar@DirectUI@@SAPEAUIClassInfo@2@XZ	1624	0x1400419c4
?GetClassInfoPtr@CheckBoxGlyph@DirectUI@@SAPEAUIClassInfo@2@XZ	1625	0x14002b598
?GetClassInfoPtr@Clipper@DirectUI@@SAPEAUIClassInfo@2@XZ	1626	0x14005f3d4
?GetClassInfoPtr@Combobox@DirectUI@@SAPEAUIClassInfo@2@XZ	1627	0x1400429f0
?GetClassInfoPtr@DialogElement@DirectUI@@SAPEAUIClassInfo@2@XZ	1628	0x14000fa08
?GetClassInfoPtr@Edit@DirectUI@@SAPEAUIClassInfo@2@XZ	1629	0x14003eac4
?GetClassInfoPtr@Element@DirectUI@@SAPEAUIClassInfo@2@XZ	1630	0x14006bf08
?GetClassInfoPtr@ElementWithHWND@DirectUI@@SAPEAUIClassInfo@2@XZ	1631	0x140027c48
?GetClassInfoPtr@Expandable@DirectUI@@SAPEAUIClassInfo@2@XZ	1632	0x14004c7a0
?GetClassInfoPtr@Expando@DirectUI@@SAPEAUIClassInfo@2@XZ	1633	0x14005a384
?GetClassInfoPtr@ExpandoButtonGlyph@DirectUI@@SAPEAUIClassInfo@2@XZ	1634	0x140036b58
?GetClassInfoPtr@HWNDElement@DirectUI@@SAPEAUIClassInfo@2@XZ	1635	0x140007e6c
?GetClassInfoPtr@HWNDHost@DirectUI@@SAPEAUIClassInfo@2@XZ	1636	0x140073aa0
?GetClassInfoPtr@ItemList@DirectUI@@SAPEAUIClassInfo@2@XZ	1637	0x140025ae4
?GetClassInfoPtr@Macro@DirectUI@@SAPEAUIClassInfo@2@XZ	1638	0x14001208c
?GetClassInfoPtr@ModernProgressBar@DirectUI@@SAPEAUIClassInfo@2@XZ	1639	0x14000b1b8
?GetClassInfoPtr@ModernProgressRing@DirectUI@@SAPEAUIClassInfo@2@XZ	1640	0x140020308
?GetClassInfoPtr@Movie@DirectUI@@SAPEAUIClassInfo@2@XZ	1641	0x140046670
?GetClassInfoPtr@Navigator@DirectUI@@SAPEAUIClassInfo@2@XZ	1642	0x14005dbb4
?GetClassInfoPtr@PText@DirectUI@@SAPEAUIClassInfo@2@XZ	1643	0x140075e34
?GetClassInfoPtr@Page@DirectUI@@SAPEAUIClassInfo@2@XZ	1644	0x14004973c
?GetClassInfoPtr@Pages@DirectUI@@SAPEAUIClassInfo@2@XZ	1645	0x1400773a0
?GetClassInfoPtr@Progress@DirectUI@@SAPEAUIClassInfo@2@XZ	1646	0x1400114ac
?GetClassInfoPtr@PushButton@DirectUI@@SAPEAUIClassInfo@2@XZ	1647	0x1400247e4
?GetClassInfoPtr@RadioButtonGlyph@DirectUI@@SAPEAUIClassInfo@2@XZ	1648	0x1400605a4
?GetClassInfoPtr@RefPointElement@DirectUI@@SAPEAUIClassInfo@2@XZ	1649	0x1400321e4
?GetClassInfoPtr@RepeatButton@DirectUI@@SAPEAUIClassInfo@2@XZ	1650	0x14001fa08
?GetClassInfoPtr@Repeater@DirectUI@@SAPEAUIClassInfo@2@XZ	1651	0x14005e31c
?GetClassInfoPtr@RichText@DirectUI@@SAPEAUIClassInfo@2@XZ	1652	0x1400457fc
?GetClassInfoPtr@ScrollBar@DirectUI@@SAPEAUIClassInfo@2@XZ	1653	0x1400775b4
?GetClassInfoPtr@ScrollViewer@DirectUI@@SAPEAUIClassInfo@2@XZ	1654	0x1400429cc
?GetClassInfoPtr@Selector@DirectUI@@SAPEAUIClassInfo@2@XZ	1655	0x140007398
?GetClassInfoPtr@SelectorNoDefault@DirectUI@@SAPEAUIClassInfo@2@XZ	1656	0x14002d53c
?GetClassInfoPtr@SemanticZoomToggle@DirectUI@@SAPEAUIClassInfo@2@XZ	1657	0x14005db14
?GetClassInfoPtr@StyledScrollViewer@DirectUI@@SAPEAUIClassInfo@2@XZ	1658	0x14004198c
?GetClassInfoPtr@TextGraphic@DirectUI@@SAPEAUIClassInfo@2@XZ	1659	0x1400559a4
?GetClassInfoPtr@Thumb@DirectUI@@SAPEAUIClassInfo@2@XZ	1660	0x14003c260
?GetClassInfoPtr@TouchButton@DirectUI@@SAPEAUIClassInfo@2@XZ	1661	0x140076d78
?GetClassInfoPtr@TouchCheckBox@DirectUI@@SAPEAUIClassInfo@2@XZ	1662	0x14001c784
?GetClassInfoPtr@TouchCheckBoxGlyph@DirectUI@@SAPEAUIClassInfo@2@XZ	1663	0x1400721b0
?GetClassInfoPtr@TouchCommandButton@DirectUI@@SAPEAUIClassInfo@2@XZ	1664	0x14000606c
?GetClassInfoPtr@TouchEdit2@DirectUI@@SAPEAUIClassInfo@2@XZ	1665	0x14002eb04
?GetClassInfoPtr@TouchEditBase@DirectUI@@SAPEAUIClassInfo@2@XZ	1666	0x140045edc
?GetClassInfoPtr@TouchHWNDElement@DirectUI@@SAPEAUIClassInfo@2@XZ	1667	0x140031680
?GetClassInfoPtr@TouchHyperLink@DirectUI@@SAPEAUIClassInfo@2@XZ	1668	0x14005b51c
?GetClassInfoPtr@TouchRepeatButton@DirectUI@@SAPEAUIClassInfo@2@XZ	1669	0x140063a84
?GetClassInfoPtr@TouchScrollBar@DirectUI@@SAPEAUIClassInfo@2@XZ	1670	0x140045fb8
?GetClassInfoPtr@TouchScrollViewer@DirectUI@@SAPEAUIClassInfo@2@XZ	1671	0x140030ae8
?GetClassInfoPtr@TouchSelect@DirectUI@@SAPEAUIClassInfo@2@XZ	1672	0x14003ed14
?GetClassInfoPtr@TouchSelectItem@DirectUI@@SAPEAUIClassInfo@2@XZ	1673	0x140058ec8
?GetClassInfoPtr@TouchSlider@DirectUI@@SAPEAUIClassInfo@2@XZ	1674	0x14007745c
?GetClassInfoPtr@TouchSwitch@DirectUI@@SAPEAUIClassInfo@2@XZ	1675	0x14004c1a0
?GetClassInfoPtr@UnknownElement@DirectUI@@SAPEAUIClassInfo@2@XZ	1676	0x1400635ec
?GetClassInfoPtr@Viewer@DirectUI@@SAPEAUIClassInfo@2@XZ	1677	0x140040964
?GetClassInfoPtr@XBaby@DirectUI@@SAPEAUIClassInfo@2@XZ	1678	0x1400652bc
?GetClassInfoPtr@XElement@DirectUI@@SAPEAUIClassInfo@2@XZ	1679	0x140043564
?GetClassInfoW@AccessibleButton@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1680	0x140049910
?GetClassInfoW@AnimationStrip@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1681	0x14006b8a4
?GetClassInfoW@AutoButton@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1682	0x140008b24
?GetClassInfoW@BaseScrollViewer@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1683	0x1400751ac
?GetClassInfoW@Bind@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1684	0x140045efc
?GetClassInfoW@Browser@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1685	0x14000e574
?GetClassInfoW@Button@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1686	0x1400566e0
?GetClassInfoW@CCAVI@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1687	0x140079a08
?GetClassInfoW@CCBase@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1688	0x14000f48c
?GetClassInfoW@CCBaseCheckRadioButton@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1689	0x140055918
?GetClassInfoW@CCBaseScrollBar@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1690	0x140078c80
?GetClassInfoW@CCCheckBox@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1691	0x140048850
?GetClassInfoW@CCCommandLink@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1692	0x140049788
?GetClassInfoW@CCHScrollBar@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1693	0x1400755c0
?GetClassInfoW@CCListBox@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1694	0x14005c9f8
?GetClassInfoW@CCListView@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1695	0x14004d93c
?GetClassInfoW@CCProgressBar@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1696	0x1400299fc
?GetClassInfoW@CCPushButton@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1697	0x1400416ec
?GetClassInfoW@CCRadioButton@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1698	0x1400557d0
?GetClassInfoW@CCSysLink@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1699	0x140005bc4
?GetClassInfoW@CCTrackBar@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1700	0x1400690f8
?GetClassInfoW@CCTreeView@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1701	0x1400769cc
?GetClassInfoW@CCVScrollBar@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1702	0x1400715e8
?GetClassInfoW@CheckBoxGlyph@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1703	0x14004feb0
?GetClassInfoW@Clipper@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1704	0x14005aecc
?GetClassInfoW@Combobox@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1705	0x14004d958
?GetClassInfoW@DialogElement@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1706	0x140070c04
?GetClassInfoW@Edit@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1707	0x140052d78
?GetClassInfoW@Element@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1708	0x140015600
?GetClassInfoW@ElementWithHWND@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1709	0x14003d354
?GetClassInfoW@Expandable@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1710	0x14001ec58
?GetClassInfoW@Expando@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1711	0x140015bc0
?GetClassInfoW@ExpandoButtonGlyph@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1712	0x1400794a8
?GetClassInfoW@HWNDElement@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1713	0x140049a44
?GetClassInfoW@HWNDHost@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1714	0x140076604
?GetClassInfoW@ItemList@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1715	0x140014590
?GetClassInfoW@Macro@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1716	0x14007b99c
?GetClassInfoW@ModernProgressBar@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1717	0x140004204
?GetClassInfoW@ModernProgressRing@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1718	0x14006d8ec
?GetClassInfoW@Movie@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1719	0x14000119c
?GetClassInfoW@Navigator@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1720	0x14000e7a4
?GetClassInfoW@PText@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1721	0x140073560
?GetClassInfoW@Page@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1722	0x14004479c
?GetClassInfoW@Pages@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1723	0x14000c1fc
?GetClassInfoW@Progress@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1724	0x140071800
?GetClassInfoW@PushButton@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1725	0x14001e444
?GetClassInfoW@RadioButtonGlyph@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1726	0x14003d968
?GetClassInfoW@RefPointElement@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1727	0x140048840
?GetClassInfoW@RepeatButton@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1728	0x140066bc8
?GetClassInfoW@Repeater@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1729	0x14000fd1c
?GetClassInfoW@RichText@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1730	0x140070fa4
?GetClassInfoW@ScrollBar@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1731	0x1400312d0
?GetClassInfoW@ScrollViewer@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1732	0x140001e6c
?GetClassInfoW@Selector@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1733	0x14004d970
?GetClassInfoW@SelectorNoDefault@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1734	0x14000f1f0
?GetClassInfoW@SemanticZoomToggle@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1735	0x14002b3c8
?GetClassInfoW@StyledScrollViewer@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1736	0x140032c78
?GetClassInfoW@TextGraphic@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1737	0x140052cf0
?GetClassInfoW@Thumb@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1738	0x14002af44
?GetClassInfoW@TouchButton@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1739	0x14003575c
?GetClassInfoW@TouchCheckBox@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1740	0x140068c14
?GetClassInfoW@TouchCheckBoxGlyph@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1741	0x1400188f8
?GetClassInfoW@TouchCommandButton@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1742	0x140022208
?GetClassInfoW@TouchEdit2@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1743	0x140039f28
?GetClassInfoW@TouchEditBase@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1744	0x14007a868
?GetClassInfoW@TouchHWNDElement@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1745	0x140045f08
?GetClassInfoW@TouchHyperLink@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1746	0x140055e1c
?GetClassInfoW@TouchRepeatButton@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1747	0x14001f510
?GetClassInfoW@TouchScrollBar@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1748	0x14004662c
?GetClassInfoW@TouchScrollViewer@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1749	0x140043208
?GetClassInfoW@TouchSelect@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1750	0x140032fe4
?GetClassInfoW@TouchSelectItem@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1751	0x140061744
?GetClassInfoW@TouchSlider@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1752	0x1400185f4
?GetClassInfoW@TouchSwitch@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1753	0x14007c194
?GetClassInfoW@UnknownElement@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1754	0x14000723c
?GetClassInfoW@Viewer@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1755	0x140005cd0
?GetClassInfoW@XBaby@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1756	0x140040974
?GetClassInfoW@XElement@DirectUI@@UEAAPEAUIClassInfo@2@XZ	1757	0x14003039c
?GetClickDevice@TouchButton@DirectUI@@QEAA?AW4ClickDevice@12@XZ	1758	0x140057a9c
?GetClickablePoint@Element@DirectUI@@QEAA_NPEAUtagPOINT@@@Z	1759	0x14000dbb8
?GetClientAccessibleImpl@HWNDHost@DirectUI@@QEAAJPEAPEAUIAccessible@@@Z	1760	0x14002dcc8
?GetColorFromProperty@DirectUI@@YAJPEAVElement@1@PEBUPropertyInfo@1@HPEAK@Z	1761	0x1400566c4
?GetColorFromValue@DirectUI@@YAJPEAVElement@1@PEAVValue@1@PEAK@Z	1762	0x14007ab3c
?GetColorTrans@Value@DirectUI@@SAPEAV12@XZ	1763	0x140008898
?GetColorize@Element@DirectUI@@QEAAHXZ	1764	0x1400173b0
?GetColumn@GridItemProxy@DirectUI@@AEAAJPEAH@Z	1765	0x14004e27c
?GetColumnCount@GridProxy@DirectUI@@AEAAJPEAH@Z	1766	0x140027118
?GetColumnHeaderItems@TableItemProvider@DirectUI@@UEAAJPEAPEAUtagSAFEARRAY@@@Z	1767	0x14007c654
?GetColumnHeaders@TableProvider@DirectUI@@UEAAJPEAPEAUtagSAFEARRAY@@@Z	1768	0x14004965c
?GetCommonDrawTextFlags@Element@DirectUI@@AEAAIH@Z	1769	0x14002d3d4
?GetCompositingQuality@Movie@DirectUI@@QEAAHXZ	1770	0x140064f8c
?GetConnect@Bind@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z	1771	0x140022374
?GetContainingGrid@GridItemProxy@DirectUI@@AEAAJPEAPEAUIRawElementProviderSimple@@@Z	1772	0x14001ba70
?GetContent@ElementProxy@DirectUI@@IEAAJPEAUtagVARIANT@@PEAUIAccessible@@@Z	1773	0x14006fd94
?GetContentAlign@Element@DirectUI@@QEAAHXZ	1774	0x1400505b0
?GetContentCrossfadeOpacity@TouchScrollViewer@DirectUI@@QEAAMXZ	1775	0x1400702e0
?GetContentDesiredSize@XBaby@DirectUI@@UEAA?AUtagSIZE@@HH@Z	1776	0x14002e824
?GetContentSize@CCBase@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z	1777	0x14004b000
?GetContentSize@CCBaseCheckRadioButton@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z	1778	0x140024eb8
?GetContentSize@CCCommandLink@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z	1779	0x14001e6d8
?GetContentSize@CCHScrollBar@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z	1780	0x140047138
?GetContentSize@CCListBox@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z	1781	0x140065734
?GetContentSize@CCListView@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z	1782	0x14002b214
?GetContentSize@CCPushButton@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z	1783	0x14005378c
?GetContentSize@CCSysLink@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z	1784	0x140005d10
?GetContentSize@CCTreeView@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z	1785	0x14000bde4
?GetContentSize@CCVScrollBar@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z	1786	0x140065a9c
?GetContentSize@Combobox@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z	1787	0x140053c2c
?GetContentSize@Edit@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z	1788	0x1400228c8
?GetContentSize@Element@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z	1789	0x140040504
?GetContentSize@Progress@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z	1790	0x1400026e4
?GetContentSize@PushButton@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z	1791	0x140078fb8
?GetContentSize@RichText@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z	1792	0x140074288
?GetContentString@Element@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z	1793	0x140064aa4
?GetContentStringAsDisplayed@Edit@DirectUI@@UEAAPEBGPEAPEAVValue@2@@Z	1794	0x14005778c
?GetContentStringAsDisplayed@Element@DirectUI@@UEAAPEBGPEAPEAVValue@2@@Z	1795	0x14000799c
?GetContentStringAsDisplayed@TextGraphic@DirectUI@@UEAAPEBGPEAPEAVValue@2@@Z	1796	0x14002bcb0
?GetContentStringAsDisplayed@TouchEditBase@DirectUI@@UEAAPEBGPEAPEAVValue@2@@Z	1797	0x140019db8
?GetControlType@ElementProxy@DirectUI@@IEAAXPEAUtagVARIANT@@PEAUIAccessible@@@Z	1798	0x140006374
?GetControllerFor@TouchEditBase@DirectUI@@UEAAJPEAPEAUIUnknown@@@Z	1799	0x140055360
?GetCount@CCListBox@DirectUI@@QEAAHXZ	1800	0x14005e390
?GetCount@Pages@DirectUI@@QEAAIXZ	1801	0x1400361a0
?GetCreationFlags@XElement@DirectUI@@UEAAIXZ	1802	0x14002dc98
?GetCurrentCols@GridLayout@DirectUI@@IEAAIH@Z	1803	0x140030230
?GetCurrentCols@GridLayout@DirectUI@@IEAAIPEAVElement@2@@Z	1804	0x140071a44
?GetCurrentPage@Browser@DirectUI@@QEAAPEAVElement@2@XZ	1805	0x140058960
?GetCurrentPageID@Browser@DirectUI@@QEAAGXZ	1806	0x1400566d0
?GetCurrentRows@GridLayout@DirectUI@@IEAAIH@Z	1807	0x14006137c
?GetCurrentRows@GridLayout@DirectUI@@IEAAIPEAVElement@2@@Z	1808	0x140061e88
?GetCursor@Value@DirectUI@@QEAAPEAUCursor@2@XZ	1809	0x14005ac18
?GetCursorNull@Value@DirectUI@@SAPEAV12@XZ	1810	0x14005dbbc
?GetDPI@Element@DirectUI@@QEAAHXZ	1811	0x14006a490
?GetDataEntry@Macro@DirectUI@@QEAAPEAUIDataEntry@2@XZ	1812	0x140045234
?GetDblListEmpty@Value@DirectUI@@SAPEAV12@XZ	1813	0x14003430c
?GetDefaultButton@DialogElement@DirectUI@@UEAAPEAVElement@2@XZ	1814	0x140062414
?GetDefaultButton@DialogElementCore@DirectUI@@QEAAPEAVElement@2@XZ	1815	0x140031d68
?GetDefaultButtonTracking@DialogElement@DirectUI@@UEAA_NXZ	1816	0x140026548
?GetDefaultButtonTracking@XBaby@DirectUI@@UEAA_NXZ	1817	0x1400355f8
?GetDeferObject@Element@DirectUI@@QEAAPEAVDeferCycle@2@XZ	1818	0x1400613a0
?GetDesiredSize@Element@DirectUI@@QEAAPEBUtagSIZE@@XZ	1819	0x14006dce4
?GetDesiredSize@XProvider@DirectUI@@UEAAJHHPEAUtagSIZE@@@Z	1820	0x14006d5f0
?GetDirection@Element@DirectUI@@QEAAHXZ	1821	0x140067130
?GetDirty@Edit@DirectUI@@QEAA_NXZ	1822	0x14001c0f4
?GetDisableMouseInRectCheck@TouchRepeatButton@DirectUI@@QEAA_NXZ	1823	0x14001af24
?GetDispatchFromElement@DuiAccessible@DirectUI@@IEAAJPEAVElement@2@PEAPEAUIDispatch@@@Z	1824	0x14000be84
?GetDisplayNode@Element@DirectUI@@QEAAPEAUHGADGET__@@XZ	1825	0x14004ca50
?GetDoubleList@Value@DirectUI@@QEAAPEAV?$DynamicArray@N$0A@@2@XZ	1826	0x140057114
?GetDrawOutlines@Movie@DirectUI@@QEAA_NXZ	1827	0x140020a8c
?GetEdgeHighlightColor@Element@DirectUI@@QEAAPEBUFill@2@PEAPEAVValue@2@@Z	1828	0x140058ed8
?GetEdgeHighlightThickness@Element@DirectUI@@QEAAPEBUtagRECT@@PEAPEAVValue@2@@Z	1829	0x140011ae0
?GetElListNull@Value@DirectUI@@SAPEAV12@XZ	1830	0x140066100
?GetElement@CCBaseScrollBar@DirectUI@@UEAAPEAVElement@2@XZ	1831	0x14001285c
?GetElement@ElementProvider@DirectUI@@UEAAPEDVElement@2@XZ	1832	0x140031f64
?GetElement@NativeHWNDHost@DirectUI@@QEAAPEAVElement@2@XZ	1833	0x14001333c
?GetElement@ScrollBar@DirectUI@@UEAAPEAVElement@2@XZ	1834	0x140045720
?GetElement@TaskPage@DirectUI@@IEAAPEAVElement@2@XZ	1835	0x1400379c4
?GetElement@Value@DirectUI@@QEAAPEAVElement@2@XZ	1836	0x1400608b4
?GetElement@XHost@DirectUI@@QEAAPEAVElement@2@XZ	1837	0x140049fc4
?GetElementKey@ElementProvider@DirectUI@@QEAAPEBVElement@2@XZ	1838	0x140030044
?GetElementList@Value@DirectUI@@QEAAPEAV?$DynamicArray@PEAVElement@DirectUI@@$0A@@2@XZ	1839	0x14004a6e4
?GetElementMovesOnIHMNotify@TouchEditBase@DirectUI@@QEAA_NXZ	1840	0x1400645cc
?GetElementNull@Value@DirectUI@@SAPEAV12@XZ	1841	0x14003066c
?GetElementProviderImpl@Element@DirectUI@@UEAAJPEAVInvokeHelper@2@PEAPEAVElementProvider@2@@Z	1842	0x14003300c
?GetElementProviderImpl@TouchSelect@DirectUI@@UEAAJPEAVInvokeHelper@2@PEAPEAVElementProvider@2@@Z	1843	0x140048c30
?GetElementProviderImpl@XBaby@DirectUI@@UEAAJPEAVInvokeHelper@2@PEAPEAVElementProvider@2@@Z	1844	0x14004217c
?GetElementScaleFactor@Element@DirectUI@@QEAAMXZ	1845	0x140063b5c
?GetElementScaledFloat@Value@DirectUI@@QEAAMPEAVElement@2@@Z	1846	0x14004cdf0
?GetElementScaledInt@Value@DirectUI@@QEAAHPEAVElement@2@@Z	1847	0x1400700cc
?GetElementScaledPoint@Value@DirectUI@@QEAAXPEAVElement@2@PEAUtagPOINT@@@Z	1848	0x14001e9c0
?GetElementScaledRect@Value@DirectUI@@QEAAXPEAVElement@2@PEAUtagRECT@@@Z	1849	0x14003eaac
?GetElementScaledSize@Value@DirectUI@@QEAAXPEAVElement@2@PEAUtagSIZE@@@Z	1850	0x140019c3c
?GetEmbeddedFragmentRoots@ElementProvider@DirectUI@@UEAAJPEAPEAUtagSAFEARRAY@@@Z	1851	0x1400068b4
?GetEnabled@Element@DirectUI@@QEAA_NXZ	1852	0x1400187d4
?GetEncodedContentString@Element@DirectUI@@QEAAJPEAG_K@Z	1853	0x14000c970
?GetEncodedContentStringLength@Element@DirectUI@@QEAA_KXZ	1854	0x140056d44
?GetEncodedString@Value@DirectUI@@QEAAJPEAG_K@Z	1855	0x14006c060
?GetEncodedStringLength@Value@DirectUI@@QEAA_KXZ	1856	0x14005993c
?GetEnforceSize@PushButton@DirectUI@@QEAA_NXZ	1857	0x140038700
?GetExpand@Macro@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z	1858	0x140062eb4
?GetExpandCollapseState@EventManager@DirectUI@@CAXPEAUtagVARIANT@@@Z	1859	0x14007b474
?GetExpanded@Expandable@DirectUI@@QEAA_NXZ	1860	0x140050cec
?GetExprNull@Value@DirectUI@@SAPEAV12@XZ	1861	0x14005a280
?GetExpression@Value@DirectUI@@QEAAPEAVExpression@2@XZ	1862	0x14000fda0
?GetExtent@Element@DirectUI@@QEAAPEBUtagSIZE@@PEAPEAVValue@2@@Z	1863	0x14004e39c
?GetFactory@RichText@DirectUI@@QEAAPEAUIDWriteFactory@@XZ	1864	0x140041480
?GetFactoryLock@Element@DirectUI@@SAPEAU_RTL_CRITICAL_SECTION@@XZ	1865	0x14000b9ec
?GetFill@Value@DirectUI@@QEAAPEBUFill@2@XZ	1866	0x140032134
?GetFillpartElement@TouchSlider@DirectUI@@QEAAPEAVElement@2@XZ	1867	0x14006661c
?GetFilterOnPaste@TouchEditBase@DirectUI@@QEAA_NXZ	1868	0x140035604
?GetFlags@TouchHWNDElement@DirectUI@@QEAA?AW4TouchHWNDElementFlags@2@XZ	1869	0x1400687d8
?GetFloat@Value@DirectUI@@QEAAMXZ	1870	0x140072bec
?GetFloatOne@Value@DirectUI@@SAPEAV12@XZ	1871	0x1400619fc
?GetFloatZero@Value@DirectUI@@SAPEAV12@XZ	1872	0x140056940
?GetFocus@HWNDElementProvider@DirectUI@@UEAAJPEAPEAUIRawElementProviderFragment@@@Z	1873	0x14001f154
?GetFocus@HWNDElementProxy@DirectUI@@IEAAJPEAPEAUIRawElementProviderFragment@@@Z	1874	0x14002c890
?GetFocusableElement@XBaby@DirectUI@@UEAAPEAVElement@2@XZ	1875	0x1400583d4
?GetFocusedHWNDElement@HWNDElement@DirectUI@@SAPEAV12@XZ	1876	0x140075850
?GetFont@Element@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z	1877	0x14001cda8
?GetFont@HWNDHost@DirectUI@@IEAAPEAUHFONT__@@XZ	1878	0x1400523a8
?GetFontFace@Element@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z	1879	0x1400435bc
?GetFontQuality@Element@DirectUI@@QEAAHXZ	1880	0x140055834
?GetFontSize@Element@DirectUI@@QEAAHXZ	1881	0x140057acc
?GetFontStyle@Element@DirectUI@@QEAAHXZ	1882	0x140028878
?GetFontWeight@Element@DirectUI@@QEAAHXZ	1883	0x14003de30
?GetForceEditTextToLTR@TouchEditBase@DirectUI@@QEAA_NXZ	1884	0x140035030
?GetForegroundColor@Element@DirectUI@@QEAAPEBUFill@2@PEAPEAVValue@2@@Z	1885	0x140009808
?GetForegroundColorRef@RichText@DirectUI@@UEAAJPEAK@Z	1886	0x140040f20
?GetForegroundColorRef@TouchButton@DirectUI@@UEAAJPEAK@Z	1887	0x14006040c
?GetForegroundStdColor@Element@DirectUI@@QEAAHXZ	1888	0x140059db4
?GetFragmentRoot@ElementProxy@DirectUI@@IEAAJPEAPEAUIRawElementProviderFragmentRoot@@@Z	1889	0x140001f70
?GetFrameDuration@AnimationStrip@DirectUI@@QEAAHXZ	1890	0x14000d95c
?GetFrameIndex@AnimationStrip@DirectUI@@QEAAHXZ	1891	0x14000912c
?GetFrameWidth@AnimationStrip@DirectUI@@QEAAHXZ	1892	0x140016dd0
?GetGetSheetCallback@DUIXmlParser@DirectUI@@QEAAP6APEAVValue@2@PEBGPEAX@ZXZ	1893	0x14005308c
?GetGlobalIndex@ClassInfoBase@DirectUI@@UEBAIXZ	1894	0x140027838
?GetGraphic@Value@DirectUI@@QEAAPEAUGraphic@2@XZ	1895	0x140015a38
?GetHDC@DCSurface@DirectUI@@QEAAPEAUHDC__@@XZ	1896	0x14006c588
?GetHInstance@DUIXmlParser@DirectUI@@QEAAPEAUHINSTANCE__@@XZ	1897	0x14002a590
?GetHScroll@ScrollViewer@DirectUI@@MEAAPEAVBaseScrollBar@2@XZ	1898	0x14006394c
?GetHScroll@StyledScrollViewer@DirectUI@@MEAAPEAVBaseScrollBar@2@XZ	1899	0x14002e318
?GetHScrollbar@TouchScrollViewer@DirectUI@@QEAAJPEAPEAVElement@2@@Z	1900	0x1400024b8
?GetHWND@HWNDElement@DirectUI@@UEAAPEAUHWND__@@XZ	1901	0x140028a8c
?GetHWND@HWNDHost@DirectUI@@UEAAPEAUHWND__@@XZ	1902	0x140003a08
?GetHWND@NativeHWNDHost@DirectUI@@QEAAPEAUHWND__@@XZ	1903	0x14002e4a4
?GetHWND@XHost@DirectUI@@QEAAPEAUHWND__@@XZ	1904	0x14007310c
?GetHWNDParent@HWNDHost@DirectUI@@QEAAPEAUHWND__@@XZ	1905	0x140041368
?GetHandle@ResourceModuleHandles@DirectUI@@QEAAJPEBGPEAPEAUHINSTANCE__@@@Z	1906	0x140074000
?GetHandleEnter@TouchButton@DirectUI@@QEAA_NXZ	1907	0x14003fa60
?GetHandleEnterKey@DialogElement@DirectUI@@UEAA_NXZ	1908	0x140068c5c
?GetHandleGlobalEnter@TouchButton@DirectUI@@QEAA_NXZ	1909	0x140020bc0
?GetHasShield@CCPushButton@DirectUI@@QEAA_NXZ	1910	0x140034800
?GetHeight@Element@DirectUI@@QEAAHXZ	1911	0x14000ded4
?GetHighDPI@Element@DirectUI@@QEAA_NXZ	1912	0x14006b54c
?GetHostedElementID@XBaby@DirectUI@@UEAAJPEAG@Z	1913	0x140048cf8
?GetHostedElementID@XProvider@DirectUI@@UEAAJPEAG@Z	1914	0x140006c98
?GetHwnd@ElementProxy@DirectUI@@IEAAJPEAPEAUHWND__@@@Z	1915	0x140078c94
?GetID@Element@DirectUI@@QEAAGXZ	1916	0x14004b2a4
?GetIDsOfNames@DuiAccessible@DirectUI@@UEAAJAEBU_GUID@@PEAPEAGIKPEAJ@Z	1917	0x14003b1a4
?GetIHMRect@TouchHWNDElement@DirectUI@@QEAAJPEAUtagRECT@@@Z	1918	0x14002e1bc
?GetIHMState@TouchHWNDElement@DirectUI@@QEAA?AW4IHMState@2@XZ	1919	0x14003a320
?GetIMEComposing@TouchEditBase@DirectUI@@QEAA_NXZ	1920	0x140024150
?GetIdentityString@DuiAccessible@DirectUI@@UEAAJKPEAPEAEPEAK@Z	1921	0x14001a764
?GetIdentityString@HWNDHostAccessible@DirectUI@@UEAAJKPEAPEAEPEAK@Z	1922	0x140068954
?GetIgnoredKeyCombos@TouchEditBase@DirectUI@@QEAA?AW4TouchEditFilteredKeyComboFlags@2@XZ	1923	0x140043858
?GetImage@Value@DirectUI@@QEAAPEAX_NM@Z	1924	0x140008f38
?GetImmediateChild@Element@DirectUI@@QEAAPEAV12@PEAV12@@Z	1925	0x14002df74
?GetImmersiveFocusRectOffsets@Element@DirectUI@@UEAAXPEAUtagRECT@@@Z	1926	0x14002775c
?GetImmersiveFocusRectOffsets@TouchButton@DirectUI@@UEAAXPEAUtagRECT@@@Z	1927	0x1400172c8
?GetImmersiveFocusRectOffsets@TouchCheckBox@DirectUI@@UEAAXPEAUtagRECT@@@Z	1928	0x14005819c
?GetImmersiveFocusRectOffsets@TouchHyperLink@DirectUI@@UEAAXPEAUtagRECT@@@Z	1929	0x140031080
?GetIndex@Element@DirectUI@@QEAAHXZ	1930	0x1400167d4
?GetInertiaEndpointVisibleRect@TouchScrollViewer@DirectUI@@QEAAXPEAUtagRECT@@@Z	1931	0x1400240fc
?GetInertiaEndpointZoomLevel@TouchScrollViewer@DirectUI@@QEAAMM@Z	1932	0x140002234
?GetInnerBorderThickness@TouchEdit2@DirectUI@@QEAAPEBUtagRECT@@PEAPEAVValue@2@@Z	1933	0x1400687b4
?GetInnerHWND@XElement@DirectUI@@QEAAPEAUHWND__@@XZ	1934	0x140052a18
?GetInputScope@TouchEdit2@DirectUI@@QEAA?AW4__MIDL___MIDL_itf_inputscope_0000_0000_0001@@XZ	1935	0x140015670
?GetInt@EventManager@DirectUI@@CAJPEAUtagVARIANT@@PEAVValue@2@@Z	1936	0x140014f68
?GetInt@Value@DirectUI@@QEAAHXZ	1937	0x140073184
?GetIntMinusOne@Value@DirectUI@@SAPEAV12@XZ	1938	0x140056c88
?GetIntZero@Value@DirectUI@@SAPEAV12@XZ	1939	0x1400013c0
?GetIntegrateIMECandidateList@TouchEditBase@DirectUI@@QEAA_NXZ	1940	0x14001c94c
?GetInteractionMode@TouchScrollViewer@DirectUI@@QEAAHXZ	1941	0x1400618cc
?GetInterpolationMode@Movie@DirectUI@@QEAAHXZ	1942	0x1400499c0
?GetInvokeHelper@InvokeManager@DirectUI@@SAJPEAPEAVInvokeHelper@2@@Z	1943	0x14003b30c
?GetIsContinuous@TouchSlider@DirectUI@@QEAA_NXZ	1944	0x1400350c4
?GetIsPressed@TouchSlider@DirectUI@@QEAA_NXZ	1945	0x14003d9bc
?GetIsReadOnly@ValueProxy@DirectUI@@AEAAJPEAH@Z	1946	0x14003c648
?GetIsSelected@NavigatorSelectionItemProxy@DirectUI@@AEAAJPEAVBrowser@2@PEAH@Z	1947	0x1400374ac
?GetIsSelectionRequired@BrowserSelectionProxy@DirectUI@@AEAAJPEAH@Z	1948	0x140004b5c
?GetIsSelectionRequired@SelectorSelectionProxy@DirectUI@@AEAAJPEAH@Z	1949	0x14001c63c
?GetIsShowOnOffFeedback@TouchSlider@DirectUI@@QEAA_NXZ	1950	0x14006df0c
?GetIsVertical@TouchSlider@DirectUI@@QEAA_NXZ	1951	0x14001968c
?GetItem@GridProvider@DirectUI@@UEAAJHHPEAPEAUIRawElementProviderSimple@@@Z	1952	0x14000e4a4
?GetItem@GridProxy@DirectUI@@AEAAJIIPEAPEAUIRawElementProviderSimple@@@Z	1953	0x1400707b4
?GetItemCount@TouchSelect@DirectUI@@QEAAKXZ	1954	0x140063244
?GetItemData@TouchSelect@DirectUI@@QEAAJHPEAPEAUIUnknown@@@Z	1955	0x140027de4
?GetItemData@TouchSelectItem@DirectUI@@QEAAJPEAPEAUIUnknown@@@Z	1956	0x14007609c
?GetItemHeightInPopup@TouchSelect@DirectUI@@QEAAHXZ	1957	0x1400559e0
?GetItemState@CCTreeView@DirectUI@@QEAAIQEAU_TREEITEM@@@Z	1958	0x1400030c0
?GetKeyFocused@Element@DirectUI@@UEAA_NXZ	1959	0x1400359b8
?GetKeyFocused@HWNDHost@DirectUI@@UEAA_NXZ	1960	0x140021c68
?GetKeyFocusedElement@DialogElement@DirectUI@@UEAAPEAVElement@2@XZ	1961	0x140072024
?GetKeyFocusedElement@HWNDElement@DirectUI@@SAPEAVElement@2@XZ	1962	0x140049678
?GetKeyWithin@Element@DirectUI@@QEAA_NXZ	1963	0x140072fdc
?GetKeyWithinChild@Element@DirectUI@@QEAAPEAV12@XZ	1964	0x14000d5bc
?GetKeyboardNavigationCapture@TouchEditBase@DirectUI@@QEAA?AW4TouchEditKeyboardNavigationCapture@2@XZ	1965	0x14004cb18
?GetLabel@ElementProxy@DirectUI@@IEAAJPEAUtagVARIANT@@@Z	1966	0x140040988
?GetLayout@Element@DirectUI@@QEAAPEAVLayout@2@PEAPEAVValue@2@@Z	1967	0x140021b18
?GetLayout@Value@DirectUI@@QEAAPEAVLayout@2@XZ	1968	0x140043958
?GetLayoutChildCount@Layout@DirectUI@@QEAAIPEAVElement@2@@Z	1969	0x140009720
?GetLayoutIndexFromChild@Layout@DirectUI@@QEAAHPEAVElement@2@0@Z	1970	0x140029a2c
?GetLayoutNull@Value@DirectUI@@SAPEAV12@XZ	1971	0x140008a58
?GetLayoutPos@Element@DirectUI@@QEAAHXZ	1972	0x140029fe8
?GetLightDismissIHM@TouchHWNDElement@DirectUI@@QEAA_NXZ	1973	0x14001a94c
?GetLine@CCBaseScrollBar@DirectUI@@UEAAHXZ	1974	0x140070e08
?GetLine@FlowLayout@DirectUI@@QEAAHPEAVElement@2@0@Z	1975	0x140039c14
?GetLine@ScrollBar@DirectUI@@UEAAHXZ	1976	0x1400258c0
?GetLine@VerticalFlowLayout@DirectUI@@QEAAHPEAVElement@2@0@Z	1977	0x140011348
?GetLineCount@RichText@DirectUI@@QEAAKXZ	1978	0x14000a5d0
?GetLineSize@CCTrackBar@DirectUI@@QEAAHXZ	1979	0x1400666c8
?GetLinkIndicatorsToContent@TouchScrollViewer@DirectUI@@QEAA_NXZ	1980	0x140029be0
?GetLocation@Element@DirectUI@@QEAAPEBUtagPOINT@@PEAPEAVValue@2@@Z	1981	0x140063ae4
?GetManipulationCompositor@TouchScrollViewer@DirectUI@@QEAAPEAUIDirectManipulationCompositor@@XZ	1982	0x14002c224
?GetManipulationHorizontalAlignment@TouchScrollViewer@DirectUI@@QEAAHXZ	1983	0x14002b994
?GetManipulationManager@TouchScrollViewer@DirectUI@@QEAAPEAUIDirectManipulationManager@@XZ	1984	0x14002f8dc
?GetManipulationVerticalAlignment@TouchScrollViewer@DirectUI@@QEAAHXZ	1985	0x14006b648
?GetManipulationViewport@TouchScrollViewer@DirectUI@@QEAAPEAUIDirectManipulationViewport@@_N@Z	1986	0x140055384
?GetMargin@Element@DirectUI@@QEAAPEBUtagRECT@@PEAPEAVValue@2@@Z	1987	0x14003abe4
?GetMaxLength@Edit@DirectUI@@QEAAHXZ	1988	0x1400394ac
?GetMaxLength@TouchEditBase@DirectUI@@QEAAHXZ	1989	0x140052420
?GetMaximum@CCBaseScrollBar@DirectUI@@UEAAHXZ	1990	0x14004ca84
?GetMaximum@ModernProgressBar@DirectUI@@QEAAHXZ	1991	0x14004a3c0
?GetMaximum@Progress@DirectUI@@QEAAHXZ	1992	0x140013b20
?GetMaximum@ScrollBar@DirectUI@@UEAAHXZ	1993	0x14002b930
?GetMetering@TouchSlider@DirectUI@@QEAAHXZ	1994	0x14000cdbc
?GetMinSize@Element@DirectUI@@QEAAPEBUtagSIZE@@PEAPEAVValue@2@@Z	1995	0x140041044
?GetMinimum@CCBaseScrollBar@DirectUI@@UEAAHXZ	1996	0x14007b9bc
?GetMinimum@ModernProgressBar@DirectUI@@QEAAHXZ	1997	0x140027e20
?GetMinimum@Progress@DirectUI@@QEAAHXZ	1998	0x14001edd4
?GetMinimum@ScrollBar@DirectUI@@UEAAHXZ	1999	0x1400537a4
?GetModule@ClassInfoBase@DirectUI@@UEBAPEAUHINSTANCE__@@XZ	2000	0x14003d03c
?GetModuleBase@CallstackTracker@DirectUI@@AEAA_KPEAX_K@Z	2001	0x1400189c8
?GetMouseFocused@Element@DirectUI@@QEAA_NXZ	2002	0x1400410b0
?GetMouseWithin@Element@DirectUI@@QEAA_NXZ	2003	0x140027f94
?GetMouseWithinChild@Element@DirectUI@@QEAAPEAV12@XZ	2004	0x140054e48
?GetMouseWithinHorizontalScrollRegion@TouchScrollViewer@DirectUI@@QEAA_NXZ	2005	0x1400401bc
?GetMoveCaretToEndOnSyncContent@TouchEditBase@DirectUI@@QEAA_NXZ	2006	0x140001b10
?GetMultiline@Edit@DirectUI@@QEAA_NXZ	2007	0x14003b824
?GetMultiline@TouchEditBase@DirectUI@@QEAA_NXZ	2008	0x140052458
?GetName@ClassInfoBase@DirectUI@@UEBAPEBGXZ	2009	0x14006e39c
?GetNote@CCCommandLink@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z	2010	0x1400651b8
?GetNotificationSinkHWND@XElement@DirectUI@@UEAAPEAUHWND__@@XZ	2011	0x14004f994
?GetNull@Value@DirectUI@@SAPEAV12@XZ	2012	0x140021a30
?GetOffText@TouchSwitch@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z	2013	0x140013990
?GetOnText@TouchSwitch@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z	2014	0x140073dc8
?GetOptimizeMove@HWNDHost@DirectUI@@QEAA_NXZ	2015	0x1400145dc
?GetOrder@ScrollBar@DirectUI@@QEAAHXZ	2016	0x1400109bc
?GetOverhang@Element@DirectUI@@QEAA_NXZ	2017	0x14003da5c
?GetOverrideButtonBackground@CCPushButton@DirectUI@@QEAA_NXZ	2018	0x140029f04
?GetOverrideScaleFactor@DUIXmlParser@DirectUI@@QEBA_NPEAM@Z	2019	0x1400451b4
?GetPICount@ClassInfoBase@DirectUI@@UEBAIXZ	2020	0x14003f000
?GetPVLAnimationState@Element@DirectUI@@QEAAHXZ	2021	0x14005c534
?GetPadding@Element@DirectUI@@QEAAPEBUtagRECT@@PEAPEAVValue@2@@Z	2022	0x1400447c8
?GetPage@CCBaseScrollBar@DirectUI@@UEAAHXZ	2023	0x14002a0ec
?GetPage@Pages@DirectUI@@QEAAPEAVElement@2@I@Z	2024	0x14000fd28
?GetPage@Pages@DirectUI@@QEAAPEAVElement@2@PEBG@Z	2025	0x140062400
?GetPage@ScrollBar@DirectUI@@UEAAHXZ	2026	0x140071970
?GetPageInc@BaseScrollBar@DirectUI@@QEAAHXZ	2027	0x140010d38
?GetPageRCID@TaskPage@DirectUI@@MEAAIXZ	2028	0x1400568a8
?GetPageResID@TaskPage@DirectUI@@MEAAPEBGXZ	2029	0x140048598
?GetPages@Browser@DirectUI@@QEAAPEAVPages@2@XZ	2030	0x1400265dc
?GetParent@Element@DirectUI@@QEAAPEAV12@XZ	2031	0x1400063d4
?GetParentHWND@TaskPage@DirectUI@@QEAAPEAUHWND__@@XZ	2032	0x14001c1e0
?GetParser@DUIFactory@DirectUI@@QEAAPEAVDUIXmlParser@2@XZ	2033	0x14000c4a4
?GetParserCommon@DUIXmlParser@DirectUI@@IEAAJPEAPEAV12@@Z	2034	0x14002db58
?GetPasswordCharacter@Edit@DirectUI@@QEAAHXZ	2035	0x140015bf0
?GetPasswordCharacter@TouchEditBase@DirectUI@@QEAAHXZ	2036	0x14006ad8c
?GetPasswordRevealMode@TouchEdit2@DirectUI@@QEAA?AW4TouchEditPasswordRevealMode@2@XZ	2037	0x14002eb4c
?GetPath@Movie@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z	2038	0x14003666c
?GetPatternProvider@ElementProvider@DirectUI@@UEAAJHPEAPEAUIUnknown@@@Z	2039	0x14000f514
?GetPinning@BaseScrollViewer@DirectUI@@QEAAHXZ	2040	0x14005c1c4
?GetPixelOffsetMode@Movie@DirectUI@@QEAAHXZ	2041	0x14002b7d0
?GetPlay@AnimationStrip@DirectUI@@QEAA_NXZ	2042	0x14006aa28
?GetPlayAllFramesMode@Movie@DirectUI@@QEAA_NXZ	2043	0x140004ff4
?GetPoint@Value@DirectUI@@QEAAPEBUtagPOINT@@XZ	2044	0x14005b920
?GetPointZero@Value@DirectUI@@SAPEAV12@XZ	2045	0x14005a604
?GetPopupBounds@TouchSelect@DirectUI@@QEAAPEBUtagRECT@@PEAPEAVValue@2@@Z	2046	0x140075acc
?GetPosition@CCBaseScrollBar@DirectUI@@UEAAHXZ	2047	0x140058708
?GetPosition@ModernProgressBar@DirectUI@@QEAAHXZ	2048	0x140021758
?GetPosition@Progress@DirectUI@@QEAAHXZ	2049	0x140065c80
?GetPosition@ScrollBar@DirectUI@@UEAAHXZ	2050	0x140056370
?GetPredictedVisibleRect@TouchScrollViewer@DirectUI@@QEAAXPEAUtagRECT@@@Z	2051	0x14005bd8c
?GetPreserveAlphaChannel@Element@DirectUI@@QEBA_NXZ	2052	0x140046fc0
?GetPressed@Button@DirectUI@@QEAA_NXZ	2053	0x14006f8ac
?GetPressed@TouchButton@DirectUI@@QEAA_NXZ	2054	0x14000922c
?GetPreventFormatChangeUpdatingModifiedState@TouchEditBase@DirectUI@@QEAA_NXZ	2055	0x140018508
?GetProcs@Schema@DirectUI@@CAJXZ	2056	0x14002c1f4
?GetPromptText@TouchEdit2@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z	2057	0x140060414
?GetPromptWithCaret@TouchEdit2@DirectUI@@QEAA_NXZ	2058	0x14005a5e0
?GetPropValPairInfo@DUIXmlParser@DirectUI@@IEAAJPEAUIXmlReader@@PEAUIClassInfo@2@PEBG2PEAPEBUPropertyInfo@2@PEAPEAVValue@2@@Z	2059	0x14000ffac
?GetPropValPairInfo@DUIXmlParser@DirectUI@@IEAAJULINEINFO@2@PEAUIClassInfo@2@PEBG2PEAPEBUPropertyInfo@2@PEAPEAVValue@2@@Z	2060	0x140040d68
?GetProperty@Bind@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z	2061	0x14002ea8c
?GetProperty@ElementProxy@DirectUI@@IEAAJPEAUtagVARIANT@@H@Z	2062	0x1400305c4
?GetPropertyValue@ElementProvider@DirectUI@@UEAAJHPEAUtagVARIANT@@@Z	2063	0x1400353e8
?GetProportional@CCBaseScrollBar@DirectUI@@UEAA_NXZ	2064	0x140004038
?GetProportional@ScrollBar@DirectUI@@UEAA_NXZ	2065	0x1400537e8
?GetProvider@XElement@DirectUI@@QEAAPEAUIXProvider@2@XZ	2066	0x140002b98
?GetProviderOptions@ElementProxy@DirectUI@@IEAAJPEAW4ProviderOptions@@@Z	2067	0x14002ff9c
?GetProxyCreator@?$PatternProvider@VExpandCollapseProvider@DirectUI@@UIExpandCollapseProvider@@$00@DirectUI@@UEAAP6APEAVProviderProxy@2@PEAVElement@2@@ZXZ	2068	0x140069b74
?GetProxyCreator@?$PatternProvider@VGridItemProvider@DirectUI@@UIGridItemProvider@@$01@DirectUI@@UEAAP6APEAVProviderProxy@2@PEAVElement@2@@ZXZ	2069	0x14002b688
?GetProxyCreator@?$PatternProvider@VGridProvider@DirectUI@@UIGridProvider@@$02@DirectUI@@UEAAP6APEAVProviderProxy@2@PEAVElement@2@@ZXZ	2070	0x14000fe5c
?GetProxyCreator@?$PatternProvider@VInvokeProvider@DirectUI@@UIInvokeProvider@@$0A@@DirectUI@@UEAAP6APEAVProviderProxy@2@PEAVElement@2@@ZXZ	2071	0x1400418a0
?GetProxyCreator@?$PatternProvider@VRangeValueProvider@DirectUI@@UIRangeValueProvider@@$03@DirectUI@@UEAAP6APEAVProviderProxy@2@PEAVElement@2@@ZXZ	2072	0x14005994c
?GetProxyCreator@?$PatternProvider@VScrollItemProvider@DirectUI@@UIScrollItemProvider@@$05@DirectUI@@UEAAP6APEAVProviderProxy@2@PEAVElement@2@@ZXZ	2073	0x140013564
?GetProxyCreator@?$PatternProvider@VScrollProvider@DirectUI@@UIScrollProvider@@$04@DirectUI@@UEAAP6APEAVProviderProxy@2@PEAVElement@2@@ZXZ	2074	0x140046588
?GetProxyCreator@?$PatternProvider@VSelectionItemProvider@DirectUI@@UISelectionItemProvider@@$06@DirectUI@@UEAAP6APEAVProviderProxy@2@PEAVElement@2@@ZXZ	2075	0x14006757c
?GetProxyCreator@?$PatternProvider@VSelectionProvider@DirectUI@@UISelectionProvider@@$07@DirectUI@@UEAAP6APEAVProviderProxy@2@PEAVElement@2@@ZXZ	2076	0x14003e5b4
?GetProxyCreator@?$PatternProvider@VTableItemProvider@DirectUI@@UITableItemProvider@@$09@DirectUI@@UEAAP6APEAVProviderProxy@2@PEAVElement@2@@ZXZ	2077	0x1400459c0
?GetProxyCreator@?$PatternProvider@VTableProvider@DirectUI@@UITableProvider@@$08@DirectUI@@UEAAP6APEAVProviderProxy@2@PEAVElement@2@@ZXZ	2078	0x140067af0
?GetProxyCreator@?$PatternProvider@VToggleProvider@DirectUI@@UIToggleProvider@@$0L@@DirectUI@@UEAAP6APEAVProviderProxy@2@PEAVElement@2@@ZXZ	2079	0x140016bd0
?GetProxyCreator@?$PatternProvider@VValueProvider@DirectUI@@UIValueProvider@@$0M@@DirectUI@@UEAAP6APEAVProviderProxy@2@PEAVElement@2@@ZXZ	2080	0x14003ce28
?GetProxyCreator@ElementProvider@DirectUI@@UEAAP6APEAVProviderProxy@2@PEAVElement@2@@ZXZ	2081	0x140023200
?GetProxyCreator@ExpandCollapseProvider@DirectUI@@UEAAP6APEAVProviderProxy@2@PEAVElement@2@@ZXZ	2082	0x14005ee68
?GetProxyCreator@GridItemProvider@DirectUI@@UEAAP6APEAVProviderProxy@2@PEAVElement@2@@ZXZ	2083	0x140037804
?GetProxyCreator@GridProvider@DirectUI@@UEAAP6APEAVProviderProxy@2@PEAVElement@2@@ZXZ	2084	0x140076e04
?GetProxyCreator@HWNDElementProvider@DirectUI@@UEAAP6APEAVProviderProxy@2@PEAVElement@2@@ZXZ	2085	0x140052100
?GetProxyCreator@InvokeProvider@DirectUI@@UEAAP6APEAVProviderProxy@2@PEAVElement@2@@ZXZ	2086	0x14006ccb4
?GetProxyCreator@RangeValueProvider@DirectUI@@UEAAP6APEAVProviderProxy@2@PEAVElement@2@@ZXZ	2087	0x140071918
?GetProxyCreator@ScrollItemProvider@DirectUI@@UEAAP6APEAVProviderProxy@2@PEAVElement@2@@ZXZ	2088	0x14000a480
?GetProxyCreator@ScrollProvider@DirectUI@@UEAAP6APEAVProviderProxy@2@PEAVElement@2@@ZXZ	2089	0x140033e8c
?GetProxyCreator@SelectionItemProvider@DirectUI@@UEAAP6APEAVProviderProxy@2@PEAVElement@2@@ZXZ	2090	0x1400613e4
?GetProxyCreator@SelectionProvider@DirectUI@@UEAAP6APEAVProviderProxy@2@PEAVElement@2@@ZXZ	2091	0x140050308
?GetProxyCreator@TableItemProvider@DirectUI@@UEAAP6APEAVProviderProxy@2@PEAVElement@2@@ZXZ	2092	0x14002e7dc
?GetProxyCreator@TableProvider@DirectUI@@UEAAP6APEAVProviderProxy@2@PEAVElement@2@@ZXZ	2093	0x140053168
?GetProxyCreator@ToggleProvider@DirectUI@@UEAAP6APEAVProviderProxy@2@PEAVElement@2@@ZXZ	2094	0x14001c1d8
?GetProxyCreator@ValueProvider@DirectUI@@UEAAP6APEAVProviderProxy@2@PEAVElement@2@@ZXZ	2095	0x14000e6e8
?GetRangeMax@CCTrackBar@DirectUI@@QEAAHXZ	2096	0x140029b9c
?GetRangeMax@TouchSlider@DirectUI@@QEAAHXZ	2097	0x140019104
?GetRangeMin@CCTrackBar@DirectUI@@QEAAHXZ	2098	0x14007c030
?GetRangeMin@TouchSlider@DirectUI@@QEAAHXZ	2099	0x140062758
?GetRawValue@Element@DirectUI@@QEAAPEAVValue@2@PEBUPropertyInfo@2@HPEAUUpdateCache@2@@Z	2100	0x140020614
?GetReadOnly@TouchEditBase@DirectUI@@QEAA_NXZ	2101	0x140004658
?GetRect@Value@DirectUI@@QEAAPEBUtagRECT@@XZ	2102	0x14001d170
?GetRectZero@Value@DirectUI@@SAPEAV12@XZ	2103	0x140001c2c
?GetRefCount@Value@DirectUI@@QEBAHXZ	2104	0x140049504
?GetReferencePoint@RefPointElement@DirectUI@@QEAAPEBUtagPOINT@@PEAPEAVValue@2@@Z	2105	0x14002c958
?GetRegisteredDefaultButton@DialogElement@DirectUI@@UEAAPEAVElement@2@XZ	2106	0x140074808
?GetRenderBorderThickness@Element@DirectUI@@QEAAXPEAUtagRECT@@@Z	2107	0x140074408
?GetRenderEdgeHighlightThickness@Element@DirectUI@@QEAAXPEAUtagRECT@@@Z	2108	0x140055f48
?GetRenderMargin@Element@DirectUI@@QEAAXPEAUtagRECT@@@Z	2109	0x140028ab8
?GetRenderMinSize@Element@DirectUI@@QEAAXPEAUtagSIZE@@@Z	2110	0x14006b8e0
?GetRenderPadding@Element@DirectUI@@QEAAXPEAUtagRECT@@@Z	2111	0x14001d6d8
?GetRepeat@Movie@DirectUI@@QEAA_NXZ	2112	0x140053b78
?GetResourceHInstance@DUIXmlParser@DirectUI@@QEAAPEAUHINSTANCE__@@XZ	2113	0x140075274
?GetRoot@Element@DirectUI@@QEAAPEAV12@XZ	2114	0x140042c60
?GetRoot@XProvider@DirectUI@@IEAAPEAVElement@2@XZ	2115	0x14002a35c
?GetRootRelativeBounds@Element@DirectUI@@QEAAJPEAUtagRECT@@@Z	2116	0x140064938
?GetRow@GridItemProxy@DirectUI@@AEAAJPEAH@Z	2117	0x1400543d4
?GetRowCount@GridProxy@DirectUI@@AEAAJPEAH@Z	2118	0x1400282fc
?GetRowHeaderItems@TableItemProvider@DirectUI@@UEAAJPEAPEAUtagSAFEARRAY@@@Z	2119	0x14003b8f4
?GetRowHeaders@TableProvider@DirectUI@@UEAAJPEAPEAUtagSAFEARRAY@@@Z	2120	0x14002ff68
?GetRuntimeId@ElementProvider@DirectUI@@UEAAJPEAPEAUtagSAFEARRAY@@@Z	2121	0x1400527f8
?GetRuntimeId@ElementProxy@DirectUI@@IEAAJPEAPEAUtagSAFEARRAY@@@Z	2122	0x140044994
?GetScaledFloat@Value@DirectUI@@QEAAMM@Z	2123	0x1400316e0
?GetScaledInt@Value@DirectUI@@QEAAHM@Z	2124	0x140036d5c
?GetScaledInt@Value@DirectUI@@QEAAPEBUScaledInt@2@XZ	2125	0x140054050
?GetScaledPoint@Value@DirectUI@@QEAAXMPEAUtagPOINT@@@Z	2126	0x1400485bc
?GetScaledRect@Value@DirectUI@@QEAAXMPEAUtagRECT@@@Z	2127	0x140071cf8
?GetScaledSize@Value@DirectUI@@QEAAXMPEAUtagSIZE@@@Z	2128	0x140016d60
?GetScrollBar@ScrollProxy@DirectUI@@AEAAPEAVBaseScrollBar@2@_N@Z	2129	0x14004732c
?GetScrollBarHelper@ScrollProxy@DirectUI@@AEAAPEAVBaseScrollBar@2@PEAVElement@2@_N@Z	2130	0x14001c5c4
?GetScrollPadding@TouchScrollViewer@DirectUI@@QEAAPEBUtagRECT@@PEAPEAVValue@2@@Z	2131	0x14005c8dc
?GetScrollPercent@ScrollProxy@DirectUI@@AEAAJ_NPEAN@Z	2132	0x140040f9c
?GetScrollable@ScrollProxy@DirectUI@@AEAAJ_NPEAH@Z	2133	0x1400712b0
?GetSelected@Element@DirectUI@@QEAA_NXZ	2134	0x14000d9f0
?GetSelection@BrowserSelectionProxy@DirectUI@@AEAAJPEAPEAUtagSAFEARRAY@@@Z	2135	0x14004c8e4
?GetSelection@Combobox@DirectUI@@QEAAHXZ	2136	0x140044018
?GetSelection@SelectionProvider@DirectUI@@UEAAJPEAPEAUtagSAFEARRAY@@@Z	2137	0x140032bc0
?GetSelection@Selector@DirectUI@@QEAAPEAVElement@2@XZ	2138	0x14002a964
?GetSelection@TouchEdit2@DirectUI@@QEAAJPEAJ0@Z	2139	0x14004f9c0
?GetSelection@TouchSelect@DirectUI@@QEAAPEAVElement@2@XZ	2140	0x14000d220
?GetSelectionBackgroundColor@TouchEditBase@DirectUI@@QEAAPEAVValue@2@XZ	2141	0x1400143bc
?GetSelectionContainer@SelectorSelectionItemProxy@DirectUI@@AEAAJPEAPEAUIRawElementProviderSimple@@@Z	2142	0x140031080
?GetSelectionForegroundColor@TouchEditBase@DirectUI@@QEAAPEAVValue@2@XZ	2143	0x14005af5c
?GetSelectionIndex@TouchSelect@DirectUI@@QEAAHXZ	2144	0x1400160bc
?GetShadowIntensity@Element@DirectUI@@QEAAHXZ	2145	0x14000ede0
?GetSheet@DUIXmlParser@DirectUI@@QEAAJPEBGPEAPEAVValue@2@@Z	2146	0x140018d70
?GetSheet@Element@DirectUI@@QEAAPEAVStyleSheet@2@XZ	2147	0x140042668
?GetSheetContext@DUIXmlParser@DirectUI@@QEAAPEAXXZ	2148	0x140036dc0
?GetSheetNull@Value@DirectUI@@SAPEAV12@XZ	2149	0x1400345cc
?GetShortcut@Element@DirectUI@@QEAAHXZ	2150	0x140013a7c
?GetShortcutChar@Element@DirectUI@@QEAAGXZ	2151	0x140077100
?GetShortcutChar@RichText@DirectUI@@QEAAGXZ	2152	0x140057d90
?GetShowClearButtonMinWidth@TouchEdit2@DirectUI@@QEAAHXZ	2153	0x14001f5cc
?GetShowKeyFocus@TouchButton@DirectUI@@QEAA_NXZ	2154	0x1400031cc
?GetShowTick@TouchSlider@DirectUI@@QEAA_NXZ	2155	0x14004e3a4
?GetSinkRect@HWNDHost@DirectUI@@AEAAXPEBUtagRECT@@PEAU3@@Z	2156	0x14000e6b4
?GetSize@Value@DirectUI@@QEAAPEBUtagSIZE@@XZ	2157	0x14001ce3c
?GetSizeZero@Value@DirectUI@@SAPEAV12@XZ	2158	0x14003a9b0
?GetSmoothingMode@Movie@DirectUI@@QEAAHXZ	2159	0x1400361bc
?GetSnapIntervalX@TouchScrollViewer@DirectUI@@QEAAMXZ	2160	0x14003d4d8
?GetSnapIntervalY@TouchScrollViewer@DirectUI@@QEAAMXZ	2161	0x14005b3ec
?GetSnapMode@TouchScrollViewer@DirectUI@@QEAAHXZ	2162	0x140018e20
?GetSnapOffsetX@TouchScrollViewer@DirectUI@@QEAAMXZ	2163	0x14002c884
?GetSnapOffsetY@TouchScrollViewer@DirectUI@@QEAAMXZ	2164	0x140076b38
?GetSnapPointCollectionX@TouchScrollViewer@DirectUI@@QEAAPEAV?$DynamicArray@N$0A@@2@PEAPEAVValue@2@@Z	2165	0x14003f70c
?GetSnapPointCollectionY@TouchScrollViewer@DirectUI@@QEAAPEAV?$DynamicArray@N$0A@@2@PEAPEAVValue@2@@Z	2166	0x140072430
?GetState@ModernProgressBar@DirectUI@@QEAAHXZ	2167	0x14007c7ac
?GetStaticColor@HWNDHost@DirectUI@@IEAA_NPEAUHDC__@@PEAPEAUHBRUSH__@@@Z	2168	0x1400125c0
?GetStepCount@TouchSlider@DirectUI@@QEAAHXZ	2169	0x14004d6c4
?GetString@EventManager@DirectUI@@CAJPEAUtagVARIANT@@PEAVValue@2@@Z	2170	0x1400581ec
?GetString@Value@DirectUI@@QEAAPEBGXZ	2171	0x140073654
?GetStringDynamicScaling@Value@DirectUI@@QEAAPEBGXZ	2172	0x1400300bc
?GetStringNull@Value@DirectUI@@SAPEAV12@XZ	2173	0x14006f4f0
?GetStringRPNull@Value@DirectUI@@SAPEAV12@XZ	2174	0x140022474
?GetStyle@CCTreeView@DirectUI@@QEAAKXZ	2175	0x14006b2c8
?GetStyleSheet@Value@DirectUI@@QEAAPEAVStyleSheet@2@XZ	2176	0x14004852c
?GetSubContent@TouchCommandButton@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z	2177	0x14006d298
?GetSuppressClearButton@TouchEdit2@DirectUI@@QEAA_NXZ	2178	0x140032db8
?GetSurfaceType@Surface@DirectUI@@SA?AW4EType@12@I@Z	2179	0x1400789ac
?GetSurfaceType@Surface@DirectUI@@SAIW4EType@12@@Z	2180	0x1400449e4
?GetSyncContentWhileIMEComposing@TouchEditBase@DirectUI@@QEAA_NXZ	2181	0x140065544
?GetTargetPage@Navigator@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z	2182	0x14002870c
?GetTextContentOverride@TouchSelectItem@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z	2183	0x14007bec4
?GetTextDocument@TouchEdit2@DirectUI@@UEAAJPEAPEAUITextDocument@@@Z	2184	0x14005a084
?GetTextDocument@TouchEditBase@DirectUI@@UEAAJPEAPEAUITextDocument@@@Z	2185	0x140059d30
?GetTextGlowSize@Element@DirectUI@@QEAAHXZ	2186	0x140079590
?GetTextHeight@Edit@DirectUI@@AEAAIXZ	2187	0x14006b484
?GetTextHost@TouchEdit2@DirectUI@@QEAAJPEAPEAVITextHost@@@Z	2188	0x1400167ec
?GetTextMode@TouchEditBase@DirectUI@@QEAA?AW4TouchEditTextMode@2@XZ	2189	0x140077f00
?GetTextSelection@TouchEdit2@DirectUI@@QEAAJPEAPEAUITextSelection@@@Z	2190	0x14006c27c
?GetTextServices@TouchEdit2@DirectUI@@UEAAJPEAPEAVITextServices@@@Z	2191	0x1400123e8
?GetTextServices@TouchEditBase@DirectUI@@UEAAJPEAPEAVITextServices@@@Z	2192	0x140034598
?GetTheme@Element@DirectUI@@AEAAJPEBGPEAPEAX@Z	2193	0x14006525c
?GetThemeChanged@HWNDHost@DirectUI@@IEAAHXZ	2194	0x140021744
?GetThemedBorder@Edit@DirectUI@@QEAA_NXZ	2195	0x140064d50
?GetThumb@TouchScrollBar@DirectUI@@QEAAPEAVElement@2@XZ	2196	0x140015870
?GetThumbElement@TouchSlider@DirectUI@@QEAAPEAVButton@2@XZ	2197	0x1400272b4
?GetThumbPosition@CCTrackBar@DirectUI@@QEAAHXZ	2198	0x14002af68
?GetThumbValue@TouchSlider@DirectUI@@QEAAHXZ	2199	0x140043e5c
?GetTickCount@TouchSlider@DirectUI@@QEAAHXZ	2200	0x14002ac18
?GetTitleText@TouchSwitch@DirectUI@@QEAAPEBGPEAPEAVValue@2@@Z	2201	0x140012084
?GetToggleOnClick@TouchCheckBox@DirectUI@@QEAA_NXZ	2202	0x140060d7c
?GetToggleState@EventManager@DirectUI@@CAXPEAUtagVARIANT@@@Z	2203	0x14003154c
?GetToggleState@ToggleProxy@DirectUI@@AEAAJPEAW4ToggleState@@@Z	2204	0x140061014
?GetToggleValue@TouchSwitch@DirectUI@@QEAAHXZ	2205	0x140035cec
?GetTooltip@Element@DirectUI@@QEAA_NXZ	2206	0x140015944
?GetTooltipMaxWidth@Element@DirectUI@@QEAAHXZ	2207	0x140063348
?GetTooltipMaximumLineCount@TouchHWNDElement@DirectUI@@QEAAHXZ	2208	0x140004d44
?GetTopLevel@Element@DirectUI@@QEAAPEAV12@XZ	2209	0x140009578
?GetTrackElement@TouchSlider@DirectUI@@QEAAPEAVElement@2@XZ	2210	0x140066bb8
?GetTracking@CCBaseScrollBar@DirectUI@@QEAA_NXZ	2211	0x1400620b4
?GetTranslatedTileRects@TouchScrollViewer@DirectUI@@QEAAXPEAUtagRECT@@PEAII@Z	2212	0x1400441b0
?GetTransparent@HWNDHost@DirectUI@@QEAA_NXZ	2213	0x14001efc0
?GetTreatRightMouseButtonAsLeft@TouchButton@DirectUI@@QEAA_NXZ	2214	0x140033a34
?GetTreeAlphaLevel@Element@DirectUI@@QEAAMXZ	2215	0x14003740c
?GetTrimmedLineCount@RichText@DirectUI@@QEAAKXZ	2216	0x14007bd48
?GetType@DCSurface@DirectUI@@UEBA?AW4EType@Surface@2@XZ	2217	0x14000a0d4
?GetType@Value@DirectUI@@QEBAHXZ	2218	0x14004e3d8
?GetTypeInfo@DuiAccessible@DirectUI@@UEAAJIKPEAPEAUITypeInfo@@@Z	2219	0x140033bdc
?GetTypeInfoCount@DuiAccessible@DirectUI@@UEAAJPEAI@Z	2220	0x140004244
?GetUIAElementProvider@Element@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z	2221	0x14002c0b4
?GetUIState@HWNDElement@DirectUI@@QEAAGXZ	2222	0x14000ab8c
?GetUiaFocusDelegate@Element@DirectUI@@UEAAPEAV12@XZ	2223	0x14003f224
?GetUiaFocusDelegate@TouchEdit2@DirectUI@@UEAAPEAVElement@2@XZ	2224	0x140023b0c
?GetUnavailable@Value@DirectUI@@SAPEAV12@XZ	2225	0x140037fd0
?GetUnset@Value@DirectUI@@SAPEAV12@XZ	2226	0x14003a780
?GetVScroll@ScrollViewer@DirectUI@@MEAAPEAVBaseScrollBar@2@XZ	2227	0x140069d58
?GetVScroll@StyledScrollViewer@DirectUI@@MEAAPEAVBaseScrollBar@2@XZ	2228	0x14000ba14
?GetVScrollbar@TouchScrollViewer@DirectUI@@QEAAJPEAPEAVElement@2@@Z	2229	0x14002beb0
?GetValue@Element@DirectUI@@QEAAPEAVValue@2@P6APEBUPropertyInfo@2@XZHPEAUUpdateCache@2@@Z	2230	0x1400636a4
?GetValue@Element@DirectUI@@QEAAPEAVValue@2@PEBUPropertyInfo@2@HPEAUUpdateCache@2@@Z	2231	0x140063e4c
?GetValue@ValueProxy@DirectUI@@AEAAJPEAPEAG@Z	2232	0x14002c61c
?GetValueList@Value@DirectUI@@QEAAPEAV?$DynamicArray@PEAVValue@DirectUI@@$0A@@2@XZ	2233	0x14006356c
?GetValueParser@DUIXmlParser@DirectUI@@IEAAJPEAPEAVValueParser@ParserTools@2@@Z	2234	0x140001218
?GetVertical@ScrollBar@DirectUI@@QEAA_NXZ	2235	0x14000ed14
?GetViewSize@ScrollProxy@DirectUI@@AEAAJ_NPEAN@Z	2236	0x14001d400
?GetViewer@ScrollProxy@DirectUI@@AEAAJPEAPEAVViewer@2@@Z	2237	0x140015614
?GetVisible@Element@DirectUI@@QEAA_NXZ	2238	0x140030868
?GetVisibleRect@TouchScrollViewer@DirectUI@@QEAAXPEAUtagRECT@@@Z	2239	0x14006c4a8
?GetVisited@TouchHyperLink@DirectUI@@QEAA_NXZ	2240	0x140016350
?GetVisualState@TouchSlider@DirectUI@@QEAAHXZ	2241	0x140072768
?GetWantTabs@Edit@DirectUI@@QEAA_NXZ	2242	0x1400460d4
?GetWidth@Element@DirectUI@@QEAAHXZ	2243	0x14004e28c
?GetWinStyle@CCBase@DirectUI@@QEAAHXZ	2244	0x14002ef98
?GetWindow@DuiAccessible@DirectUI@@UEAAJPEAPEAUHWND__@@@Z	2245	0x14001df10
?GetWindow@HWNDHostAccessible@DirectUI@@UEAAJPEAPEAUHWND__@@@Z	2246	0x140028478
?GetWindowAccessGradientColor@TouchHWNDElement@DirectUI@@QEAAPEAVValue@2@XZ	2247	0x1400240d4
?GetWindowActive@Element@DirectUI@@QEAA_NXZ	2248	0x140050fb0
?GetWindowClassNameAndStyle@HWNDElement@DirectUI@@UEAAXPEAPEBGPEAI@Z	2249	0x140042d78
?GetWrapKeyboardNavigate@HWNDElement@DirectUI@@QEAA_NXZ	2250	0x14006d330
?GetX@Element@DirectUI@@QEAAHXZ	2251	0x1400103e8
?GetXBabyElement@XBaby@DirectUI@@UEAAPEAVHWNDElement@2@XZ	2252	0x1400220a0
?GetXBarVisibility@BaseScrollViewer@DirectUI@@QEAAHXZ	2253	0x14007bff4
?GetXOffset@BaseScrollViewer@DirectUI@@QEAAHXZ	2254	0x14005a0c4
?GetXOffset@Viewer@DirectUI@@QEAAHXZ	2255	0x14005d608
?GetXScrollHeight@BaseScrollViewer@DirectUI@@QEAAHXZ	2256	0x14006b390
?GetXScrollable@BaseScrollViewer@DirectUI@@QEAA_NXZ	2257	0x1400167ec
?GetXScrollable@Viewer@DirectUI@@QEAA_NXZ	2258	0x1400615ec
?GetXmlLiteDll@DUIXmlParser@DirectUI@@KAJPEAPEAUHINSTANCE__@@@Z	2259	0x14005453c
?GetY@Element@DirectUI@@QEAAHXZ	2260	0x14006d294
?GetYBarVisibility@BaseScrollViewer@DirectUI@@QEAAHXZ	2261	0x1400035f8
?GetYOffset@BaseScrollViewer@DirectUI@@QEAAHXZ	2262	0x140014868
?GetYOffset@Viewer@DirectUI@@QEAAHXZ	2263	0x140062d58
?GetYScrollWidth@BaseScrollViewer@DirectUI@@QEAAHXZ	2264	0x14003932c
?GetYScrollable@BaseScrollViewer@DirectUI@@QEAA_NXZ	2265	0x140079e28
?GetYScrollable@Viewer@DirectUI@@QEAA_NXZ	2266	0x140041664
?GetZoomMaximum@TouchScrollViewer@DirectUI@@QEAAMXZ	2267	0x140060914
?GetZoomMinimum@TouchScrollViewer@DirectUI@@QEAAMXZ	2268	0x14000f058
?GridItemPattern@Schema@DirectUI@@2HA	2269	0x140048118
?GridItem_ColumnSpan_Property@Schema@DirectUI@@2HA	2270	0x14006fc04
?GridItem_Column_Property@Schema@DirectUI@@2HA	2271	0x14006cc28
?GridItem_Parent_Property@Schema@DirectUI@@2HA	2272	0x14007698c
?GridItem_RowSpan_Property@Schema@DirectUI@@2HA	2273	0x14007bc64
?GridItem_Row_Property@Schema@DirectUI@@2HA	2274	0x140004594
?GridPattern@Schema@DirectUI@@2HA	2275	0x140063014
?Grid_ColumnCount_Property@Schema@DirectUI@@2HA	2276	0x14001c208
?Grid_RowCount_Property@Schema@DirectUI@@2HA	2277	0x14000d3f4
?GroupControlType@Schema@DirectUI@@2HA	2278	0x1400441c4
?HandleAccChange@EventManager@DirectUI@@CAJPEAVElement@2@PEAUIRawElementProviderSimple@@PEAVValue@2@2@Z	2279	0x140011648
?HandleAccDesc@EventManager@DirectUI@@CAJPEAVElement@2@PEAUIRawElementProviderSimple@@PEAVValue@2@2@Z	2280	0x1400205a4
?HandleAccPatternChange@EventManager@DirectUI@@CAJPEAVElement@2@PEAUIRawElementProviderSimple@@IIHPEAUtagVARIANT@@2P6AX2@Z@Z	2281	0x140016310
?HandleAccRoleEvent@EventManager@DirectUI@@CAJPEAUIRawElementProviderSimple@@PEAVValue@2@1@Z	2282	0x140044920
?HandleAccStateChange@EventManager@DirectUI@@CAJPEAUIRawElementProviderSimple@@IIHPEAUtagVARIANT@@1_N@Z	2283	0x140009cac
?HandleBoolProp@EventManager@DirectUI@@CAJPEAVElement@2@P6A_N0@ZPEAUIRawElementProviderSimple@@HPEAVValue@2@3@Z	2284	0x140003754
?HandleChildrenEvent@EventManager@DirectUI@@CAJPEAVElement@2@PEAVValue@2@1@Z	2285	0x14004ac6c
?HandleEnterKeyProp@DialogElement@DirectUI@@SAPEBUPropertyInfo@2@XZ	2286	0x140054bb8
?HandleEnterProp@TouchButton@DirectUI@@SAPEBUPropertyInfo@2@XZ	2287	0x140060458
?HandleGlobalEnterProp@TouchButton@DirectUI@@SAPEBUPropertyInfo@2@XZ	2288	0x140032f08
?HandleRangeValue@EventManager@DirectUI@@CAJPEAVElement@2@PEAUIRawElementProviderSimple@@PEAVValue@2@2@Z	2289	0x140009940
?HandleScrollPos@EventManager@DirectUI@@CAJPEAVElement@2@PEAUIRawElementProviderSimple@@PEAVValue@2@2@Z	2290	0x140070d50
?HandleSelectedChange@EventManager@DirectUI@@CAJPEAUIRawElementProviderSimple@@PEAVValue@2@@Z	2291	0x1400037dc
?HandleStringProp@EventManager@DirectUI@@CAJPEAUIRawElementProviderSimple@@HPEAVValue@2@1@Z	2292	0x140051948
?HandleToggleValue@EventManager@DirectUI@@CAJPEAVElement@2@PEAUIRawElementProviderSimple@@PEAVValue@2@2@Z	2293	0x14003b4fc
?HandleUiaDestroyListener@Element@DirectUI@@UEAAXXZ	2294	0x14007c454
?HandleUiaEventListener@Element@DirectUI@@UEAAXPEAUEvent@2@@Z	2295	0x14003f084
?HandleUiaPropertyChangingListener@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@@Z	2296	0x14006257c
?HandleUiaPropertyListener@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2297	0x140065c9c
?HandleVisibilityChange@EventManager@DirectUI@@CAJPEAVElement@2@I@Z	2298	0x140016774
?HasAnimation@Element@DirectUI@@QEAA_NXZ	2299	0x14001e86c
?HasBorder@Element@DirectUI@@QEAA_NXZ	2300	0x140042348
?HasChildren@Element@DirectUI@@QEAA_NXZ	2301	0x14006d9a4
?HasContent@Element@DirectUI@@QEAA_NXZ	2302	0x140031fe0
?HasEdgeHighlight@Element@DirectUI@@QEAA_NXZ	2303	0x140004278
?HasKeyboardFocusProperty@Schema@DirectUI@@2HA	2304	0x140046918
?HasLayout@Element@DirectUI@@QEAA_NXZ	2305	0x140064608
?HasMargin@Element@DirectUI@@QEAA_NXZ	2306	0x140028640
?HasPVLAnimationState@Element@DirectUI@@QEAA_NI@Z	2307	0x14001a654
?HasPadding@Element@DirectUI@@QEAA_NXZ	2308	0x140049ec4
?HasSelection@TouchEdit2@DirectUI@@QEAA_NXZ	2309	0x14004c0dc
?HasShieldProp@CCPushButton@DirectUI@@SAPEBUPropertyInfo@2@XZ	2310	0x14004bcf8
?HaveWin32Focus@HWNDHost@DirectUI@@AEAA_NXZ	2311	0x140066058
?HeaderControlType@Schema@DirectUI@@2HA	2312	0x14006f6a4
?HeaderItemControlType@Schema@DirectUI@@2HA	2313	0x14007b484
?HeightProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	2314	0x14001b79c
?HelpTextProperty@Schema@DirectUI@@2HA	2315	0x14003b084
?HideTouchTooltip@TouchHWNDElement@DirectUI@@QEAAJXZ	2316	0x140057294
?HideWindow@NativeHWNDHost@DirectUI@@QEAAXXZ	2317	0x140046444
?HideWindow@XHost@DirectUI@@QEAAXXZ	2318	0x14001a594
?HighDPIProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	2319	0x14005f250
?Home@BaseScrollBar@DirectUI@@UEAAXXZ	2320	0x140044b28
?Host@NativeHWNDHost@DirectUI@@QEAAXPEAVElement@2@@Z	2321	0x14005ff34
?Host@XHost@DirectUI@@QEAAXPEAVElement@2@@Z	2322	0x140019664
?Hosted@PushButton@DirectUI@@SA?AVUID@@XZ	2323	0x1400310d0
?HyperlinkControlType@Schema@DirectUI@@2HA	2324	0x14003e7e0
?IDProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	2325	0x1400156f8
?IHMNotify@TouchHWNDElement@DirectUI@@SA?AVUID@@XZ	2326	0x1400063ec
?IMEComposingProp@TouchEditBase@DirectUI@@SAPEBUPropertyInfo@2@XZ	2327	0x14003bc28
?INITIALSTACKSKIP@CallstackTracker@DirectUI@@0HB	2328	0x140057d4c
?IgnoredKeyCombosProp@TouchEditBase@DirectUI@@SAPEBUPropertyInfo@2@XZ	2329	0x140073d78
?ImageControlType@Schema@DirectUI@@2HA	2330	0x1400214dc
?ImmersiveColorSchemeChange@HWNDElement@DirectUI@@SA?AVUID@@XZ	2331	0x14003293c
?Init@?$PatternProvider@VExpandCollapseProvider@DirectUI@@UIExpandCollapseProvider@@$00@DirectUI@@UEAAXPEAVElementProvider@2@@Z	2332	0x1400415ec
?Init@?$PatternProvider@VGridItemProvider@DirectUI@@UIGridItemProvider@@$01@DirectUI@@UEAAXPEAVElementProvider@2@@Z	2333	0x14000f62c
?Init@?$PatternProvider@VGridProvider@DirectUI@@UIGridProvider@@$02@DirectUI@@UEAAXPEAVElementProvider@2@@Z	2334	0x14001f538
?Init@?$PatternProvider@VInvokeProvider@DirectUI@@UIInvokeProvider@@$0A@@DirectUI@@UEAAXPEAVElementProvider@2@@Z	2335	0x140013230
?Init@?$PatternProvider@VRangeValueProvider@DirectUI@@UIRangeValueProvider@@$03@DirectUI@@UEAAXPEAVElementProvider@2@@Z	2336	0x140012494
?Init@?$PatternProvider@VScrollItemProvider@DirectUI@@UIScrollItemProvider@@$05@DirectUI@@UEAAXPEAVElementProvider@2@@Z	2337	0x1400575e0
?Init@?$PatternProvider@VScrollProvider@DirectUI@@UIScrollProvider@@$04@DirectUI@@UEAAXPEAVElementProvider@2@@Z	2338	0x140025370
?Init@?$PatternProvider@VSelectionItemProvider@DirectUI@@UISelectionItemProvider@@$06@DirectUI@@UEAAXPEAVElementProvider@2@@Z	2339	0x140020910
?Init@?$PatternProvider@VSelectionProvider@DirectUI@@UISelectionProvider@@$07@DirectUI@@UEAAXPEAVElementProvider@2@@Z	2340	0x14000bf5c
?Init@?$PatternProvider@VTableItemProvider@DirectUI@@UITableItemProvider@@$09@DirectUI@@UEAAXPEAVElementProvider@2@@Z	2341	0x140007528
?Init@?$PatternProvider@VTableProvider@DirectUI@@UITableProvider@@$08@DirectUI@@UEAAXPEAVElementProvider@2@@Z	2342	0x1400432a0
?Init@?$PatternProvider@VToggleProvider@DirectUI@@UIToggleProvider@@$0L@@DirectUI@@UEAAXPEAVElementProvider@2@@Z	2343	0x14000a52c
?Init@?$PatternProvider@VValueProvider@DirectUI@@UIValueProvider@@$0M@@DirectUI@@UEAAXPEAVElementProvider@2@@Z	2344	0x1400543e8
?Init@AutoThread@DirectUI@@QEAAJXZ	2345	0x14005107c
?Init@BrowserSelectionProxy@DirectUI@@MEAAXPEAVElement@2@@Z	2346	0x140027fb0
?Init@CallstackTracker@DirectUI@@SAHXZ	2347	0x140049ae0
?Init@ElementProvider@DirectUI@@MEAAJPEAVElement@2@PEAVInvokeHelper@2@@Z	2348	0x140036648
?Init@ElementProviderManager@DirectUI@@SAJXZ	2349	0x140021ce0
?Init@ElementProxy@DirectUI@@MEAAXPEAVElement@2@@Z	2350	0x140073bfc
?Init@EventManager@DirectUI@@SAJXZ	2351	0x140017474
?Init@ExpandCollapseProxy@DirectUI@@MEAAXPEAVElement@2@@Z	2352	0x1400528e4
?Init@GridItemProxy@DirectUI@@MEAAXPEAVElement@2@@Z	2353	0x140067718
?Init@GridProxy@DirectUI@@MEAAXPEAVElement@2@@Z	2354	0x14002e33c
?Init@HWNDElementProvider@DirectUI@@MEAAJPEAVHWNDElement@2@PEAVInvokeHelper@2@@Z	2355	0x14005b270
?Init@HWNDElementProxy@DirectUI@@UEAAXPEAVHWNDElement@2@@Z	2356	0x14006a094
?Init@InvokeHelper@DirectUI@@QEAAHK@Z	2357	0x140074ec0
?Init@InvokeManager@DirectUI@@SAJXZ	2358	0x140052e5c
?Init@InvokeProxy@DirectUI@@MEAAXPEAVElement@2@@Z	2359	0x14007276c
?Init@ModernProgressBarRangeValueProxy@DirectUI@@MEAAXPEAVElement@2@@Z	2360	0x140042ab4
?Init@NavReference@DirectUI@@QEAAXPEAVElement@2@PEAUtagRECT@@@Z	2361	0x14007aaf4
?Init@NavScoring@DirectUI@@QEAAXPEAVElement@2@HPEBUNavReference@2@@Z	2362	0x140040c18
?Init@NavigatorSelectionItemProxy@DirectUI@@MEAAXPEAVElement@2@@Z	2363	0x14001afa0
?Init@ProgressRangeValueProxy@DirectUI@@MEAAXPEAVElement@2@@Z	2364	0x140069310
?Init@ProviderProxy@DirectUI@@MEAAXPEAVElement@2@@Z	2365	0x1400023c8
?Init@RangeValueProxy@DirectUI@@MEAAXPEAVElement@2@@Z	2366	0x14004d228
?Init@Schema@DirectUI@@SAJXZ	2367	0x1400403b8
?Init@ScrollBarRangeValueProxy@DirectUI@@MEAAXPEAVElement@2@@Z	2368	0x140054950
?Init@ScrollItemProxy@DirectUI@@MEAAXPEAVElement@2@@Z	2369	0x14007a80c
?Init@ScrollProxy@DirectUI@@MEAAXPEAVElement@2@@Z	2370	0x14000f934
?Init@SelectionItemProxy@DirectUI@@MEAAXPEAVElement@2@@Z	2371	0x14001d0e4
?Init@SelectionProxy@DirectUI@@MEAAXPEAVElement@2@@Z	2372	0x1400086c8
?Init@SelectorSelectionItemProxy@DirectUI@@MEAAXPEAVElement@2@@Z	2373	0x14003d150
?Init@SelectorSelectionProxy@DirectUI@@MEAAXPEAVElement@2@@Z	2374	0x1400294d0
?Init@TableItemProxy@DirectUI@@MEAAXPEAVElement@2@@Z	2375	0x14002178c
?Init@TableProxy@DirectUI@@MEAAXPEAVElement@2@@Z	2376	0x1400703c4
?Init@ToggleProxy@DirectUI@@MEAAXPEAVElement@2@@Z	2377	0x14007ad88
?Init@ValueProxy@DirectUI@@MEAAXPEAVElement@2@@Z	2378	0x140052110
?InitOnceCallback@CallstackTracker@DirectUI@@CAHPEAT_RTL_RUN_ONCE@@PEAXPEAPEAX@Z	2379	0x1400015b4
?InitProcess@FontCache@DirectUI@@SAJXZ	2380	0x140001238
?InitPropSheetPage@TaskPage@DirectUI@@MEAAXPEAU_PROPSHEETPAGEW@@@Z	2381	0x140030ac4
?InitThread@FontCache@DirectUI@@SAJXZ	2382	0x140005594
?Initialize@AccessibleButton@DirectUI@@QEAAJPEAVElement@2@PEAK@Z	2383	0x140020ab0
?Initialize@AnimationStrip@DirectUI@@QEAAJIPEAVElement@2@PEAK@Z	2384	0x140078484
?Initialize@AutoButton@DirectUI@@QEAAJPEAVElement@2@PEAK@Z	2385	0x140062b18
?Initialize@BaseScrollViewer@DirectUI@@QEAAJPEAVElement@2@PEAK@Z	2386	0x140068034
?Initialize@Bind@DirectUI@@QEAAJPEAVElement@2@PEAK@Z	2387	0x14003ab04
?Initialize@BorderLayout@DirectUI@@QEAAXXZ	2388	0x14006ba8c
?Initialize@Browser@DirectUI@@QEAAJPEAVElement@2@PEAK@Z	2389	0x140067f38
?Initialize@Button@DirectUI@@QEAAJIPEAVElement@2@PEAK@Z	2390	0x140034968
?Initialize@CCBase@DirectUI@@QEAAJIPEAVElement@2@PEAK@Z	2391	0x14003baf0
?Initialize@CCBaseScrollBar@DirectUI@@QEAAJIPEAVElement@2@PEAK@Z	2392	0x140030cb8
?Initialize@CCListView@DirectUI@@QEAAJIPEAVElement@2@PEAK@Z	2393	0x140053d9c
?Initialize@CCProgressBar@DirectUI@@QEAAJIPEAVElement@2@PEAK@Z	2394	0x140021944
?Initialize@CSafeElementProxy@@IEAAJPEAVElement@DirectUI@@@Z	2395	0x140016420
?Initialize@CheckBoxGlyph@DirectUI@@QEAAJIPEAVElement@2@PEAK@Z	2396	0x14002c4d8
?Initialize@ClassInfoBase@DirectUI@@QEAAJPEAUHINSTANCE__@@PEBG_NPEBQEBUPropertyInfo@2@I@Z	2397	0x140014494
?Initialize@Clipper@DirectUI@@QEAAJPEAVElement@2@PEAK@Z	2398	0x140033da0
?Initialize@Combobox@DirectUI@@QEAAJIPEAVElement@2@PEAK@Z	2399	0x1400429b4
?Initialize@DUIXmlParser@DirectUI@@IEAAJXZ	2400	0x14003022c
?Initialize@DialogElementCore@DirectUI@@QEAAXPEAUIDialogElement@2@PEAUIElementListener@2@@Z	2401	0x14002342c
?Initialize@DuiAccessible@DirectUI@@QEAAXPEAVElement@2@@Z	2402	0x14005ae7c
?Initialize@Edit@DirectUI@@QEAAJIPEAVElement@2@PEAK@Z	2403	0x140002a24
?Initialize@Element@DirectUI@@QEAAJIPEAV12@PEAK@Z	2404	0x14002df48
?Initialize@Expando@DirectUI@@QEAAJPEAVElement@2@PEAK@Z	2405	0x14004ad9c
?Initialize@ExpandoButtonGlyph@DirectUI@@QEAAJIPEAVElement@2@PEAK@Z	2406	0x14000f100
?Initialize@FillLayout@DirectUI@@QEAAXXZ	2407	0x140040c5c
?Initialize@FlowLayout@DirectUI@@QEAAX_NIII@Z	2408	0x1400352c8
?Initialize@GridLayout@DirectUI@@QEAAXHH@Z	2409	0x14002f940
?Initialize@HWNDElement@DirectUI@@QEAAJPEAUHWND__@@_NIPEAVElement@2@PEAK@Z	2410	0x14002e4c4
?Initialize@HWNDElementAccessible@DirectUI@@QEAAJPEAVHWNDElement@2@@Z	2411	0x140040e80
?Initialize@HWNDHost@DirectUI@@QEAAJIIPEAVElement@2@PEAK@Z	2412	0x140001648
?Initialize@HWNDHostAccessible@DirectUI@@QEAAJPEAVElement@2@PEAUIAccessible@@@Z	2413	0x140036ab8
?Initialize@Layout@DirectUI@@QEAAXXZ	2414	0x140059dac
?Initialize@Macro@DirectUI@@QEAAJPEAVElement@2@PEAK@Z	2415	0x14000122c
?Initialize@NativeHWNDHost@DirectUI@@QEAAJPEBG0PEAUHWND__@@PEAUHICON__@@HHHHHHPEAUHINSTANCE__@@I@Z	2416	0x140030278
?Initialize@NativeHWNDHost@DirectUI@@QEAAJPEBGPEAUHWND__@@PEAUHICON__@@HHHHHHI@Z	2417	0x14005bb58
?Initialize@Navigator@DirectUI@@QEAAJPEAVElement@2@PEAK@Z	2418	0x140008eb8
?Initialize@NineGridLayout@DirectUI@@QEAAXXZ	2419	0x140072898
?Initialize@PText@DirectUI@@QEAAJPEAVElement@2@PEAK@Z	2420	0x14001ab1c
?Initialize@Page@DirectUI@@QEAAJPEAVElement@2@PEAK@Z	2421	0x140040fdc
?Initialize@Pages@DirectUI@@QEAAJPEAVElement@2@PEAK@Z	2422	0x14001aeb4
?Initialize@Progress@DirectUI@@QEAAJPEAVElement@2@PEAK@Z	2423	0x140073a4c
?Initialize@RadioButtonGlyph@DirectUI@@QEAAJIPEAVElement@2@PEAK@Z	2424	0x140034248
?Initialize@RefPointElement@DirectUI@@QEAAJIPEAVElement@2@PEAK@Z	2425	0x14000c410
?Initialize@RepeatButton@DirectUI@@QEAAJIPEAVElement@2@PEAK@Z	2426	0x14005b3e8
?Initialize@Repeater@DirectUI@@QEAAJPEAVElement@2@PEAK@Z	2427	0x140043e38
?Initialize@RichText@DirectUI@@QEAAJPEAVElement@2@PEAK@Z	2428	0x14006dcd8
?Initialize@RowLayout@DirectUI@@QEAAJHII@Z	2429	0x140070acc
?Initialize@ScrollBar@DirectUI@@QEAAJ_NPEAVElement@2@PEAK@Z	2430	0x140042308
?Initialize@Selector@DirectUI@@QEAAJPEAVElement@2@PEAK@Z	2431	0x140034254
?Initialize@SelectorNoDefault@DirectUI@@QEAAJPEAVElement@2@PEAK@Z	2432	0x14001e098
?Initialize@SemanticZoomToggle@DirectUI@@QEAAJPEAVElement@2@PEAK@Z	2433	0x140068e20
?Initialize@TableLayout@DirectUI@@QEAAXHHHPEAH@Z	2434	0x1400176d8
?Initialize@TextGraphic@DirectUI@@QEAAJPEAVElement@2@PEAK@Z	2435	0x14003ce30
?Initialize@Thumb@DirectUI@@QEAAJIPEAVElement@2@PEAK@Z	2436	0x140062598
?Initialize@TouchButton@DirectUI@@QEAAJIPEAVElement@2@PEAK@Z	2437	0x140048628
?Initialize@TouchCheckBox@DirectUI@@QEAAJIPEAVElement@2@PEAK@Z	2438	0x140002964
?Initialize@TouchCheckBoxGlyph@DirectUI@@QEAAJPEAVElement@2@PEAK@Z	2439	0x1400164f4
?Initialize@TouchCommandButton@DirectUI@@QEAAJIPEAVElement@2@PEAK@Z	2440	0x1400739e4
?Initialize@TouchEdit2@DirectUI@@QEAAJPEAVElement@2@PEAK@Z	2441	0x14007aafc
?Initialize@TouchHWNDElement@DirectUI@@QEAAJPEAUHWND__@@_NIPEAVElement@2@PEAK@Z	2442	0x14005cf7c
?Initialize@TouchRepeatButton@DirectUI@@QEAAJIPEAVElement@2@PEAK@Z	2443	0x14001d16c
?Initialize@TouchScrollBar@DirectUI@@QEAAJ_NPEAVElement@2@PEAK@Z	2444	0x14001f280
?Initialize@TouchSelect@DirectUI@@QEAAJPEAVElement@2@PEAK@Z	2445	0x140064dfc
?Initialize@TouchSlider@DirectUI@@QEAAJPEAVElement@2@PEAK@Z	2446	0x1400676c4
?Initialize@TouchSwitch@DirectUI@@QEAAJPEAVElement@2@PEAK@Z	2447	0x140042964
?Initialize@UnknownElement@DirectUI@@QEAAJIPEAVElement@2@PEAK@Z	2448	0x1400153cc
?Initialize@VerticalFlowLayout@DirectUI@@QEAAX_NIII@Z	2449	0x14005ee78
?Initialize@Viewer@DirectUI@@QEAAJPEAVElement@2@PEAK@Z	2450	0x1400503f4
?Initialize@XBaby@DirectUI@@IEAAJPEAVIXElementCP@2@PEAVXProvider@2@PEAUHWND__@@PEAVElement@2@PEAK@Z	2451	0x14006b10c
?Initialize@XElement@DirectUI@@QEAAJIPEAVElement@2@PEAK@Z	2452	0x14005772c
?Initialize@XHost@DirectUI@@QEAAJPEAVIXElementCP@2@@Z	2453	0x1400250a4
?Initialize@XProvider@DirectUI@@QEAAJPEAVElement@2@PEAVIXProviderCP@2@@Z	2454	0x140076660
?Initialize@XResourceProvider@DirectUI@@QEAAJPEAUHINSTANCE__@@PEBG11@Z	2455	0x140047330
?InitializeDllInfo@CallstackTracker@DirectUI@@CAHXZ	2456	0x14000b6d4
?InitializeParserFromXmlReader@DUIXmlParser@DirectUI@@IEAAJPEAUIXmlReader@@PEAUHINSTANCE__@@1@Z	2457	0x14001eba8
?InitializeSymbols@CallstackTracker@DirectUI@@CAHXZ	2458	0x14005b898
?InnerBorderThicknessProp@TouchEdit2@DirectUI@@SAPEBUPropertyInfo@2@XZ	2459	0x14003b240
?Insert@Element@DirectUI@@QEAAJPEAV12@I@Z	2460	0x14005a9f4
?Insert@Element@DirectUI@@UEAAJPEAPEAV12@II@Z	2461	0x14005f53c
?Insert@TouchCheckBox@DirectUI@@UEAAJPEAPEAVElement@2@II@Z	2462	0x14002b8f8
?Insert@TouchCheckBoxGlyph@DirectUI@@UEAAJPEAPEAVElement@2@II@Z	2463	0x140041818
?Insert@TouchCommandButton@DirectUI@@UEAAJPEAPEAVElement@2@II@Z	2464	0x140032d70
?Insert@TouchEditBase@DirectUI@@UEAAJPEAPEAVElement@2@II@Z	2465	0x1400175cc
?Insert@TouchSelect@DirectUI@@UEAAJPEAPEAVElement@2@II@Z	2466	0x140041514
?InsertItem@CCTreeView@DirectUI@@QEAAPEAU_TREEITEM@@PEAGIQEAU3@1@Z	2467	0x14006b6cc
?InsertItem@CCTreeView@DirectUI@@QEAAPEAU_TREEITEM@@PEBUtagTVINSERTSTRUCTW@@@Z	2468	0x14002db54
?IntegrateIMECandidateListProp@TouchEditBase@DirectUI@@SAPEBUPropertyInfo@2@XZ	2469	0x140041414
?InteractionEnd@TouchScrollBar@DirectUI@@SA?AVUID@@XZ	2470	0x14001b51c
?InteractionStart@TouchScrollBar@DirectUI@@SA?AVUID@@XZ	2471	0x140036594
?InternalCreate@TableLayout@DirectUI@@SAJHHHPEAHPEAPEAVLayout@2@@Z	2472	0x140058ebc
?InterpolationModeProp@Movie@DirectUI@@SAPEBUPropertyInfo@2@XZ	2473	0x140040634
?Invoke@DuiAccessible@DirectUI@@UEAAJJAEBU_GUID@@KGPEAUtagDISPPARAMS@@PEAUtagVARIANT@@PEAUtagEXCEPINFO@@PEAI@Z	2474	0x140004f2c
?Invoke@InvokeProvider@DirectUI@@UEAAJXZ	2475	0x14004f214
?Invoke@Proxy@DirectUI@@IEAAXIPEAX@Z	2476	0x140057870
?InvokeAnimation@Element@DirectUI@@QEAAXHI@Z	2477	0x140040abc
?InvokeAnimation@Element@DirectUI@@QEAAXIIMM_N@Z	2478	0x14006f4f0
?InvokeInvokedEvent@Schema@DirectUI@@2HA	2479	0x1400115f0
?InvokePattern@Schema@DirectUI@@2HA	2480	0x14002d54c
?IsActivityOccuring@ModernProgressBar@DirectUI@@QEAA_NXZ	2481	0x14001ace4
?IsActivityOccuring@ModernProgressRing@DirectUI@@QEAA_NXZ	2482	0x140014a1c
?IsAddLayeredRef@ModernProgressBar@DirectUI@@QEAA_NXZ	2483	0x140052d68
?IsAddLayeredRef@ModernProgressRing@DirectUI@@QEAA_NXZ	2484	0x14007b700
?IsAutoHeight@ModernProgressBar@DirectUI@@QEAA_NXZ	2485	0x1400578ec
?IsBehaviorLayout@Element@DirectUI@@QEBA_NXZ	2486	0x14007bd44
?IsButtonEnabledAndVisible@DialogElementCore@DirectUI@@KA_NPEAVElement@2@@Z	2487	0x14004d7b8
?IsCacheDirty@Layout@DirectUI@@IEAA_NXZ	2488	0x140066d70
?IsCompositedText@Element@DirectUI@@QEAA_NXZ	2489	0x140050d84
?IsContentElementProperty@Schema@DirectUI@@2HA	2490	0x140053340
?IsContentProtected@Edit@DirectUI@@UEAA_NXZ	2491	0x140059418
?IsContentProtected@Element@DirectUI@@UEAA_NXZ	2492	0x140043ce8
?IsContentProtected@TouchEditBase@DirectUI@@UEAA_NXZ	2493	0x140068f78
?IsContinuousProp@TouchSlider@DirectUI@@SAPEBUPropertyInfo@2@XZ	2494	0x140032c40
?IsControlElementProperty@Schema@DirectUI@@2HA	2495	0x140061b54
?IsCorrectImageHlpVersion@CallstackTracker@DirectUI@@CAHXZ	2496	0x140005384
?IsCrossfadeInProgress@TouchScrollViewer@DirectUI@@QEAA_NXZ	2497	0x14006a310
?IsDefaultCAlign@Element@DirectUI@@QEAA_NXZ	2498	0x14001111c
?IsDefaultCursor@Element@DirectUI@@QEAA_NXZ	2499	0x1400192e0
?IsDescendent@Element@DirectUI@@QEAA_NPEAV12@@Z	2500	0x14001347c
?IsDescendent@XElement@DirectUI@@QEAA_NPEAVElement@2@@Z	2501	0x14003f6f0
?IsDescendent@XProvider@DirectUI@@UEAAJPEAVElement@2@PEA_N@Z	2502	0x1400217f8
?IsDestroyed@Element@DirectUI@@QEAA_NXZ	2503	0x140069d50
?IsDeterminate@ModernProgressBar@DirectUI@@QEAA_NXZ	2504	0x14005e0f0
?IsDynamicScaled@Value@DirectUI@@QEAA_NXZ	2505	0x14005f050
?IsDynamicScaling@DUIXmlParser@DirectUI@@QEAA_NXZ	2506	0x1400345f4
?IsEnabledProperty@Schema@DirectUI@@2HA	2507	0x140024870
?IsEqual@Value@DirectUI@@QEAA_NPEAV12@@Z	2508	0x140042c30
?IsFirstElement@HWNDElement@DirectUI@@QEAA_NPEAVElement@2@@Z	2509	0x1400792e4
?IsGlobal@ClassInfoBase@DirectUI@@UEBA_NXZ	2510	0x140005c04
?IsHosted@Element@DirectUI@@QEAA_NXZ	2511	0x140023c58
?IsIndependentAnimations@ModernProgressBar@DirectUI@@QEAA_NXZ	2512	0x14000f894
?IsKeyboardFocusableProperty@Schema@DirectUI@@2HA	2513	0x14002247c
?IsLastElement@HWNDElement@DirectUI@@QEAA_NPEAVElement@2@@Z	2514	0x14007a74c
?IsMSAAEnabled@HWNDElement@DirectUI@@UEAA_NXZ	2515	0x140033320
?IsMSAAEnabled@TouchHWNDElement@DirectUI@@UEAA_NXZ	2516	0x14004445c
?IsManualVisualSwapInProgress@TouchScrollViewer@DirectUI@@QEAA_NXZ	2517	0x140023808
?IsMoveDeferred@HWNDHost@DirectUI@@IEAA_NXZ	2518	0x14000db84
?IsOffscreen@Schema@DirectUI@@2HA	2519	0x14005461c
?IsPasswordProperty@Schema@DirectUI@@2HA	2520	0x14007040c
?IsPatternSupported@ElementProxy@DirectUI@@IEAAJW4Pattern@Schema@2@PEA_N@Z	2521	0x140054280
?IsPatternSupported@ExpandCollapseProxy@DirectUI@@SA_NPEAVElement@2@@Z	2522	0x140035274
?IsPatternSupported@GridItemProxy@DirectUI@@SA_NPEAVElement@2@@Z	2523	0x14004820c
?IsPatternSupported@GridProxy@DirectUI@@SA_NPEAVElement@2@@Z	2524	0x1400593e8
?IsPatternSupported@InvokeProxy@DirectUI@@SA_NPEAVElement@2@@Z	2525	0x14007bfac
?IsPatternSupported@RangeValueProxy@DirectUI@@SA_NPEAVElement@2@@Z	2526	0x14006b4f8
?IsPatternSupported@ScrollItemProxy@DirectUI@@SA_NPEAVElement@2@@Z	2527	0x14000ea18
?IsPatternSupported@ScrollProxy@DirectUI@@SA_NPEAVElement@2@@Z	2528	0x14000f34c
?IsPatternSupported@SelectionItemProxy@DirectUI@@SA_NPEAVElement@2@@Z	2529	0x140006014
?IsPatternSupported@SelectionProxy@DirectUI@@SA_NPEAVElement@2@@Z	2530	0x14004ca90
?IsPatternSupported@TableItemProxy@DirectUI@@SA_NPEAVElement@2@@Z	2531	0x140038400
?IsPatternSupported@TableProxy@DirectUI@@SA_NPEAVElement@2@@Z	2532	0x140040308
?IsPatternSupported@ToggleProxy@DirectUI@@SA_NPEAVElement@2@@Z	2533	0x1400036ac
?IsPatternSupported@ValueProxy@DirectUI@@SA_NPEAVElement@2@@Z	2534	0x1400457f8
?IsPeripheral@Schema@DirectUI@@2HA	2535	0x140042e48
?IsPinned@BaseScrollBar@DirectUI@@QEAA_NXZ	2536	0x14001e8dc
?IsPointValid@Element@DirectUI@@AEAA_NNN@Z	2537	0x14000bb8c
?IsPopupOpen@TouchSelect@DirectUI@@QEAA_NXZ	2538	0x14006fe48
?IsPressedProp@TouchSlider@DirectUI@@SAPEBUPropertyInfo@2@XZ	2539	0x1400124b8
?IsRTL@Element@DirectUI@@QEAA_NXZ	2540	0x14000a058
?IsRTLReading@Element@DirectUI@@UEAA_NXZ	2541	0x14007a734
?IsRegisteredForAnimationStatusChanges@TouchHWNDElement@DirectUI@@QEAA_NXZ	2542	0x14001a050
?IsReorderable@ItemList@DirectUI@@QEAA_NXZ	2543	0x140074a90
?IsRoot@Element@DirectUI@@QEAAHXZ	2544	0x1400280b8
?IsScrollable@BaseScrollBar@DirectUI@@QEAA_NXZ	2545	0x140067a10
?IsSelfLayout@Element@DirectUI@@QEAA_NXZ	2546	0x14001d568
?IsShowOnOffFeedbackProp@TouchSlider@DirectUI@@SAPEBUPropertyInfo@2@XZ	2547	0x14005a2ec
?IsSmoothFillAnimation@ModernProgressBar@DirectUI@@QEAA_NXZ	2548	0x14006cf90
?IsSubclassOf@ClassInfoBase@DirectUI@@UEBA_NPEAUIClassInfo@2@@Z	2549	0x140024aac
?IsThemeClassName@DUIXmlParser@DirectUI@@KA_NPEBUExprNode@ParserTools@2@@Z	2550	0x14006f080
?IsThumbActive@TouchScrollBar@DirectUI@@QEAA_NXZ	2551	0x14005c0a0
?IsTileMember@TouchScrollViewer@DirectUI@@QEAA_NIPEAVElement@2@@Z	2552	0x140017e98
?IsValidAccessor@Element@DirectUI@@QEAA_NPEBUPropertyInfo@2@H_N@Z	2553	0x1400445d0
?IsValidProperty@ClassInfoBase@DirectUI@@UEBA_NPEBUPropertyInfo@2@@Z	2554	0x140012958
?IsValidValue@Element@DirectUI@@SA_NPEBUPropertyInfo@2@PEAVValue@2@@Z	2555	0x14000a050
?IsVerticalProp@TouchSlider@DirectUI@@SAPEBUPropertyInfo@2@XZ	2556	0x14005d500
?IsWordWrap@Element@DirectUI@@QEAA_NXZ	2557	0x14004622c
?ItemContainerPattern@Schema@DirectUI@@2HA	2558	0x14006ab34
?ItemHeightInPopupProp@TouchSelect@DirectUI@@SAPEBUPropertyInfo@2@XZ	2559	0x14006e3f0
?ItemStatusProperty@Schema@DirectUI@@2HA	2560	0x14002c060
?ItemTypeProperty@Schema@DirectUI@@2HA	2561	0x14000b124
?KeyFocusedProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	2562	0x1400470bc
?KeyWithinProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	2563	0x140020268
?KeyboardNavigate@Element@DirectUI@@SA?AVUID@@XZ	2564	0x140068748
?KeyboardNavigationCaptureProp@TouchEditBase@DirectUI@@SAPEBUPropertyInfo@2@XZ	2565	0x1400292e8
?LabeledByProperty@Schema@DirectUI@@2HA	2566	0x140055eb4
?LastDSConstProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	2567	0x14005cd9c
?LayoutInvalidatedEvent@Schema@DirectUI@@2HA	2568	0x140008d08
?LayoutPosProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	2569	0x1400635fc
?LayoutProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	2570	0x14001c948
?Leaving@Browser@DirectUI@@SA?AVUID@@XZ	2571	0x14006c8f4
?LightDismissIHMProp@TouchHWNDElement@DirectUI@@SAPEBUPropertyInfo@2@XZ	2572	0x14003909c
?LineDown@BaseScrollBar@DirectUI@@UEAAXI@Z	2573	0x140010368
?LineDown@TouchScrollBar@DirectUI@@UEAAXI@Z	2574	0x14005bca8
?LineProp@CCBaseScrollBar@DirectUI@@SAPEBUPropertyInfo@2@XZ	2575	0x1400617e4
?LineProp@ScrollBar@DirectUI@@SAPEBUPropertyInfo@2@XZ	2576	0x14003a608
?LineSizeProp@CCTrackBar@DirectUI@@SAPEBUPropertyInfo@2@XZ	2577	0x14006baec
?LineSpacingProp@RichText@DirectUI@@SAPEBUPropertyInfo@2@XZ	2578	0x14004a838
?LineUp@BaseScrollBar@DirectUI@@UEAAXI@Z	2579	0x14006a8e0
?LineUp@TouchScrollBar@DirectUI@@UEAAXI@Z	2580	0x14006dd00
?ListControlType@Schema@DirectUI@@2HA	2581	0x14001a324
?ListItemControlType@Schema@DirectUI@@2HA	2582	0x14005f47c
?LoadComCtl32@TaskPage@DirectUI@@AEAAJXZ	2583	0x14004bd78
?LoadCommonControlExports@AnimationStrip@DirectUI@@AEAAJXZ	2584	0x140058910
?LoadFromBuffer@DUIFactory@DirectUI@@QEAAJPEBG_K0PEAVElement@2@PEAKPEAPEAV32@@Z	2585	0x140017c54
?LoadFromFile@DUIFactory@DirectUI@@QEAAJPEBG0PEAVElement@2@PEAKPEAPEAV32@@Z	2586	0x14005cb54
?LoadFromPath@Movie@DirectUI@@QEAAJPEBG@Z	2587	0x140039af4
?LoadFromResource@DUIFactory@DirectUI@@QEAAJPEAUHINSTANCE__@@PEBG1PEAVElement@2@PEAKPEAPEAV42@1@Z	2588	0x14000730c
?LoadFromResource@Movie@DirectUI@@QEAAJPEAUHINSTANCE__@@H@Z	2589	0x14006c3a8
?LoadImagesIntoAnimationStrip@AnimationStrip@DirectUI@@IEAAJXZ	2590	0x14006acf8
?LoadPage@TaskPage@DirectUI@@AEAAJPEAPEAVElement@2@PEAV32@PEAPEAVDUIXmlParser@2@@Z	2591	0x140056b64
?LoadPage@TaskPage@DirectUI@@MEAAJPEAVHWNDElement@2@PEAUHINSTANCE__@@PEAPEAVElement@2@PEAPEAVDUIXmlParser@2@@Z	2592	0x140046f38
?LoadParser@TaskPage@DirectUI@@MEAAJPEAPEAVDUIXmlParser@2@@Z	2593	0x14006fa28
?LocaleProp@RichText@DirectUI@@SAPEBUPropertyInfo@2@XZ	2594	0x140067e9c
?LocalizedControlTypeProperty@Schema@DirectUI@@2HA	2595	0x14003fc54
?Locate@RefPointElement@DirectUI@@SAPEAV12@PEAVElement@2@@Z	2596	0x1400252c8
?LocationProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	2597	0x140075640
?LookupAccessibleRole@Schema@DirectUI@@SAHHPEA_N@Z	2598	0x14005c780
?LookupControlInfos@Schema@DirectUI@@CAJXZ	2599	0x140058a3c
?LookupElement@DUIXmlParser@DirectUI@@QEAAJPEAUIXmlReader@@PEBGPEAUHINSTANCE__@@PEAPEAUIClassInfo@2@@Z	2600	0x14006b378
?LookupElement@DUIXmlParser@DirectUI@@QEAAJULINEINFO@2@PEBGPEAUHINSTANCE__@@PEAPEAUIClassInfo@2@@Z	2601	0x14005033c
?LookupEventInfos@Schema@DirectUI@@CAJXZ	2602	0x140069814
?LookupPatternInfos@Schema@DirectUI@@CAJXZ	2603	0x14003bab0
?LookupPropertyInfos@Schema@DirectUI@@CAJXZ	2604	0x140069cc8
?ManipulationCompleted@TouchScrollViewer@DirectUI@@SA?AVUID@@XZ	2605	0x140057ecc
?ManipulationDelta@TouchScrollViewer@DirectUI@@SA?AVUID@@XZ	2606	0x140051170
?ManipulationHorizontalAlignmentProp@TouchScrollViewer@DirectUI@@SAPEBUPropertyInfo@2@XZ	2607	0x14006ce40
?ManipulationStarted@TouchScrollViewer@DirectUI@@SA?AVUID@@XZ	2608	0x140026a74
?ManipulationStarting@TouchScrollViewer@DirectUI@@SA?AVUID@@XZ	2609	0x14004e878
?ManipulationVerticalAlignmentProp@TouchScrollViewer@DirectUI@@SAPEBUPropertyInfo@2@XZ	2610	0x14004e404
?ManualStoryboardVerify@PVLAnimation@DirectUI@@SA?AVUID@@XZ	2611	0x14003e038
?MapContentVisuals@TouchScrollViewer@DirectUI@@SA?AVUID@@XZ	2612	0x14005d834
?MapElementPoint@Element@DirectUI@@QEAAXPEAV12@PEBUtagPOINT@@PEAU3@@Z	2613	0x14006c6e4
?MapPropertyEnumValue@DUIXmlParser@DirectUI@@IEAAJPEBUEnumMap@2@PEBGPEAH@Z	2614	0x140070060
?MapPropertyNameToPropertyInfo@DUIXmlParser@DirectUI@@IEAAJULINEINFO@2@PEAUIClassInfo@2@PEBGPEAPEBUPropertyInfo@2@@Z	2615	0x140030598
?MapRunsToClustersProp@RichText@DirectUI@@SAPEBUPropertyInfo@2@XZ	2616	0x1400343a4
?MarginProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	2617	0x14005775c
?MarkHosted@Element@DirectUI@@IEAAXXZ	2618	0x14006c190
?MarkNeedsDSUpdate@Element@DirectUI@@QEAAXXZ	2619	0x14006a7fc
?MarkSelfLayout@Element@DirectUI@@IEAAXXZ	2620	0x140022e24
?MaxLengthProp@Edit@DirectUI@@SAPEBUPropertyInfo@2@XZ	2621	0x140044f28
?MaxLengthProp@TouchEditBase@DirectUI@@SAPEBUPropertyInfo@2@XZ	2622	0x140061d44
?MaximumProp@CCBaseScrollBar@DirectUI@@SAPEBUPropertyInfo@2@XZ	2623	0x1400300d0
?MaximumProp@ModernProgressBar@DirectUI@@SAPEBUPropertyInfo@2@XZ	2624	0x14000e07c
?MaximumProp@Progress@DirectUI@@SAPEBUPropertyInfo@2@XZ	2625	0x14003f724
?MaximumProp@ScrollBar@DirectUI@@SAPEBUPropertyInfo@2@XZ	2626	0x14005cd7c
?MenuBarControlType@Schema@DirectUI@@2HA	2627	0x14004a648
?MenuClosedEvent@Schema@DirectUI@@2HA	2628	0x140077280
?MenuControlType@Schema@DirectUI@@2HA	2629	0x140042798
?MenuItemControlType@Schema@DirectUI@@2HA	2630	0x14002ad24
?MenuOpenedEvent@Schema@DirectUI@@2HA	2631	0x1400196f0
?MessageCallback@Edit@DirectUI@@UEAAIPEAUtagGMSG@@@Z	2632	0x140046c34
?MessageCallback@Element@DirectUI@@UEAAIPEAUtagGMSG@@@Z	2633	0x1400694f0
?MessageCallback@HWNDHost@DirectUI@@UEAAIPEAUtagGMSG@@@Z	2634	0x14003c8cc
?MessageCallback@TouchHWNDElement@DirectUI@@UEAAIPEAUtagGMSG@@@Z	2635	0x1400578b0
?MeteringProp@TouchSlider@DirectUI@@SAPEBUPropertyInfo@2@XZ	2636	0x14003cc40
?MinSizeProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	2637	0x140012b2c
?MinimumProp@CCBaseScrollBar@DirectUI@@SAPEBUPropertyInfo@2@XZ	2638	0x1400018bc
?MinimumProp@ModernProgressBar@DirectUI@@SAPEBUPropertyInfo@2@XZ	2639	0x1400037c0
?MinimumProp@Progress@DirectUI@@SAPEBUPropertyInfo@2@XZ	2640	0x14005a360
?MinimumProp@ScrollBar@DirectUI@@SAPEBUPropertyInfo@2@XZ	2641	0x1400798ec
?MonitorPowerSettingsChange@TouchHWNDElement@DirectUI@@SA?AVUID@@XZ	2642	0x14000d2e0
?MouseFocusedProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	2643	0x140078728
?MouseOrPointerReleased@TouchSlider@DirectUI@@SA?AVUID@@XZ	2644	0x14003f0fc
?MouseWithinProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	2645	0x1400393d0
?MoveCaretToEndOnSyncContentProp@TouchEditBase@DirectUI@@SAPEBUPropertyInfo@2@XZ	2646	0x140022858
?MultilineProp@Edit@DirectUI@@SAPEBUPropertyInfo@2@XZ	2647	0x140079de4
?MultilineProp@TouchEditBase@DirectUI@@SAPEBUPropertyInfo@2@XZ	2648	0x1400670e0
?MultipleClick@TouchButton@DirectUI@@SA?AVUID@@XZ	2649	0x140072580
?MultipleViewPattern@Schema@DirectUI@@2HA	2650	0x14004fb50
?NameProperty@Schema@DirectUI@@2HA	2651	0x14001feec
?Navigate@DuiNavigate@DirectUI@@SAPEAVElement@2@PEAV32@PEAV?$DynamicArray@PEAVElement@DirectUI@@$0A@@2@H@Z	2652	0x140057fc4
?Navigate@ElementProvider@DirectUI@@UEAAJW4NavigateDirection@@PEAPEAUIRawElementProviderFragment@@@Z	2653	0x140040984
?Navigate@ElementProxy@DirectUI@@IEAAJW4NavigateDirection@@PEAPEAUIRawElementProviderFragment@@@Z	2654	0x140028114
?Navigate@XProvider@DirectUI@@UEAAJHPEA_N@Z	2655	0x140069a90
?NeedsDSUpdate@Element@DirectUI@@QEAA_NXZ	2656	0x140074b50
?NewChildElementsAdded@TouchScrollViewer@DirectUI@@QEAAXXZ	2657	0x1400032f8
?NewNativeWindowHandleProperty@Schema@DirectUI@@2HA	2658	0x14006a010
?Next@DuiAccessible@DirectUI@@UEAAJKPEAUtagVARIANT@@PEAK@Z	2659	0x14004fb10
?Next@HWNDHostAccessible@DirectUI@@UEAAJKPEAUtagVARIANT@@PEAK@Z	2660	0x140066388
?NoteProp@CCCommandLink@DirectUI@@SAPEBUPropertyInfo@2@XZ	2661	0x1400333c4
?NotifyComplete@PVLAnimation@DirectUI@@SA?AVUID@@XZ	2662	0x140032ca8
?NotifyImplicit@PVLAnimation@DirectUI@@SA?AVUID@@XZ	2663	0x140003db0
?NotifyStart@PVLAnimation@DirectUI@@SA?AVUID@@XZ	2664	0x1400073b4
?NotifyStoryboardComplete@PVLAnimation@DirectUI@@SA?AVUID@@XZ	2665	0x1400459f4
?NullControlType@Schema@DirectUI@@2HA	2666	0x14006188c
?OffTextProp@TouchSwitch@DirectUI@@SAPEBUPropertyInfo@2@XZ	2667	0x14000ecac
?OnAction@AnimationStrip@DirectUI@@IEAAXPEAUGMA_ACTIONINFO@@@Z	2668	0x14005de64
?OnAdd@BorderLayout@DirectUI@@UEAAXPEAVElement@2@PEAPEAV32@I@Z	2669	0x14006bee4
?OnAdd@Layout@DirectUI@@UEAAXPEAVElement@2@PEAPEAV32@I@Z	2670	0x140055fa0
?OnAdd@NineGridLayout@DirectUI@@UEAAXPEAVElement@2@PEAPEAV32@I@Z	2671	0x140054d08
?OnAdd@ShellBorderLayout@DirectUI@@UEAAXPEAVElement@2@PEAPEAV32@I@Z	2672	0x140067414
?OnAdjustWindowSize@Combobox@DirectUI@@UEAAHHHI@Z	2673	0x1400224b4
?OnAdjustWindowSize@HWNDHost@DirectUI@@UEAAHHHI@Z	2674	0x1400568fc
?OnChildLostFocus@DialogElement@DirectUI@@UEAA_NPEAVElement@2@@Z	2675	0x1400542cc
?OnChildLostFocus@DialogElementCore@DirectUI@@QEAA_NPEAVElement@2@@Z	2676	0x140042708
?OnChildLostFocus@XBaby@DirectUI@@UEAA_NPEAVElement@2@@Z	2677	0x14003dde4
?OnChildReceivedFocus@DialogElement@DirectUI@@UEAA_NPEAVElement@2@@Z	2678	0x14007b6cc
?OnChildReceivedFocus@DialogElementCore@DirectUI@@QEAA_NPEAVElement@2@@Z	2679	0x140031b84
?OnChildReceivedFocus@XBaby@DirectUI@@UEAA_NPEAVElement@2@@Z	2680	0x140023e84
?OnCompositionChanged@HWNDElement@DirectUI@@UEAAXXZ	2681	0x140009994
?OnCtrlThemeChanged@HWNDHost@DirectUI@@UEAA_NI_K_JPEA_J@Z	2682	0x14002448c
?OnCustomDraw@CCBase@DirectUI@@UEAA_NPEAUtagNMCUSTOMDRAWINFO@@PEA_J@Z	2683	0x14004be68
?OnDefaultButtonTrackingChanged@DialogElementCore@DirectUI@@QEAAXPEAVValue@2@@Z	2684	0x14006a1b4
?OnDestroy@AnimationStrip@DirectUI@@MEAAXXZ	2685	0x140052388
?OnDestroy@DialogElement@DirectUI@@UEAAXXZ	2686	0x14003f698
?OnDestroy@DialogElementCore@DirectUI@@QEAAXXZ	2687	0x140040bfc
?OnDestroy@Element@DirectUI@@UEAAXXZ	2688	0x14004af04
?OnDestroy@HWNDElement@DirectUI@@UEAAXXZ	2689	0x140034e7c
?OnDestroy@HWNDHost@DirectUI@@UEAAXXZ	2690	0x1400738f4
?OnDestroy@ModernProgressBar@DirectUI@@MEAAXXZ	2691	0x14000d6a0
?OnDestroy@ModernProgressRing@DirectUI@@MEAAXXZ	2692	0x140037cc8
?OnDestroy@Movie@DirectUI@@UEAAXXZ	2693	0x140041fbc
?OnDestroy@TouchHWNDElement@DirectUI@@UEAAXXZ	2694	0x14006642c
?OnEvent@AutoButton@DirectUI@@UEAAXPEAUEvent@2@@Z	2695	0x1400125a0
?OnEvent@BaseScrollViewer@DirectUI@@UEAAXPEAUEvent@2@@Z	2696	0x14006f3bc
?OnEvent@Browser@DirectUI@@UEAAXPEAUEvent@2@@Z	2697	0x14001f630
?OnEvent@Element@DirectUI@@UEAAXPEAUEvent@2@@Z	2698	0x140014758
?OnEvent@Expando@DirectUI@@UEAAXPEAUEvent@2@@Z	2699	0x140015a88
?OnEvent@HWNDElement@DirectUI@@UEAAXPEAUEvent@2@@Z	2700	0x14002a6a0
?OnEvent@HWNDHost@DirectUI@@UEAAXPEAUEvent@2@@Z	2701	0x14000d920
?OnEvent@Movie@DirectUI@@UEAAXPEAUEvent@2@@Z	2702	0x14005ebc4
?OnEvent@Navigator@DirectUI@@UEAAXPEAUEvent@2@@Z	2703	0x140036c44
?OnEvent@RichText@DirectUI@@UEAAXPEAUEvent@2@@Z	2704	0x14001f9a8
?OnEvent@ScrollBar@DirectUI@@UEAAXPEAUEvent@2@@Z	2705	0x140066c48
?OnEvent@Selector@DirectUI@@UEAAXPEAUEvent@2@@Z	2706	0x140033d68
?OnEvent@SelectorNoDefault@DirectUI@@UEAAXPEAUEvent@2@@Z	2707	0x14000fae8
?OnEvent@TouchButton@DirectUI@@UEAAXPEAUEvent@2@@Z	2708	0x14001a0a4
?OnEvent@TouchCheckBox@DirectUI@@UEAAXPEAUEvent@2@@Z	2709	0x140041c80
?OnEvent@TouchEdit2@DirectUI@@UEAAXPEAUEvent@2@@Z	2710	0x14001dfbc
?OnEvent@TouchHWNDElement@DirectUI@@UEAAXPEAUEvent@2@@Z	2711	0x140002310
?OnEvent@TouchScrollBar@DirectUI@@UEAAXPEAUEvent@2@@Z	2712	0x14004e734
?OnEvent@TouchSelect@DirectUI@@UEAAXPEAUEvent@2@@Z	2713	0x1400353c0
?OnEvent@Viewer@DirectUI@@UEAAXPEAUEvent@2@@Z	2714	0x14002433c
?OnEvent@XBaby@DirectUI@@UEAAXPEAUEvent@2@@Z	2715	0x14002a9f8
?OnEvent@XElement@DirectUI@@UEAAXPEAUEvent@2@@Z	2716	0x14007a944
?OnGetDlgCode@DialogElement@DirectUI@@UEAAXPEAUtagMSG@@PEA_J@Z	2717	0x140009cb0
?OnGetDlgCode@DialogElementCore@DirectUI@@QEAAXPEAUtagMSG@@PEA_J@Z	2718	0x1400267f4
?OnGetDlgCode@HWNDElement@DirectUI@@UEAAXPEAUtagMSG@@PEA_J@Z	2719	0x1400452a0
?OnGroupChanged@Element@DirectUI@@UEAAXH_N@Z	2720	0x14002a3d0
?OnGroupChanged@HWNDElement@DirectUI@@UEAAXH_N@Z	2721	0x140039af0
?OnHosted@Combobox@DirectUI@@UEAAXPEAVElement@2@@Z	2722	0x14003b180
?OnHosted@Element@DirectUI@@MEAAXPEAV12@@Z	2723	0x140074184
?OnHosted@HWNDHost@DirectUI@@MEAAXPEAVElement@2@@Z	2724	0x140047fd4
?OnHosted@ModernProgressBar@DirectUI@@MEAAXPEAVElement@2@@Z	2725	0x14006e0b8
?OnHosted@ModernProgressRing@DirectUI@@MEAAXPEAVElement@2@@Z	2726	0x140063efc
?OnHosted@Movie@DirectUI@@UEAAXPEAVElement@2@@Z	2727	0x14005fd50
?OnHosted@PushButton@DirectUI@@UEAAXPEAVElement@2@@Z	2728	0x140064264
?OnHosted@RichText@DirectUI@@UEAAXPEAVElement@2@@Z	2729	0x14001bbfc
?OnHosted@TouchButton@DirectUI@@UEAAXPEAVElement@2@@Z	2730	0x14005ce54
?OnHosted@TouchEdit2@DirectUI@@UEAAXPEAVElement@2@@Z	2731	0x140001c80
?OnHosted@TouchScrollBar@DirectUI@@UEAAXPEAVElement@2@@Z	2732	0x1400791d4
?OnHosted@TouchSelect@DirectUI@@UEAAXPEAVElement@2@@Z	2733	0x140065564
?OnImmersiveColorSchemeChanged@HWNDElement@DirectUI@@UEAAXXZ	2734	0x140072f70
?OnInput@BaseScrollViewer@DirectUI@@UEAAXPEAUInputEvent@2@@Z	2735	0x14001b1a4
?OnInput@Button@DirectUI@@UEAAXPEAUInputEvent@2@@Z	2736	0x140028a20
?OnInput@CCBase@DirectUI@@UEAAXPEAUInputEvent@2@@Z	2737	0x1400202b4
?OnInput@CCCheckBox@DirectUI@@UEAAXPEAUInputEvent@2@@Z	2738	0x14006fac4
?OnInput@CCProgressBar@DirectUI@@UEAAXPEAUInputEvent@2@@Z	2739	0x14005acd4
?OnInput@CCPushButton@DirectUI@@UEAAXPEAUInputEvent@2@@Z	2740	0x140052754
?OnInput@CCRadioButton@DirectUI@@UEAAXPEAUInputEvent@2@@Z	2741	0x1400147f8
?OnInput@CCSysLink@DirectUI@@UEAAXPEAUInputEvent@2@@Z	2742	0x14006dcf8
?OnInput@Combobox@DirectUI@@UEAAXPEAUInputEvent@2@@Z	2743	0x1400403fc
?OnInput@DialogElement@DirectUI@@UEAAXPEAUInputEvent@2@@Z	2744	0x140024a94
?OnInput@DialogElementCore@DirectUI@@QEAAXPEAUInputEvent@2@@Z	2745	0x1400725b0
?OnInput@Edit@DirectUI@@UEAAXPEAUInputEvent@2@@Z	2746	0x14000d850
?OnInput@Element@DirectUI@@UEAAXPEAUInputEvent@2@@Z	2747	0x14000f860
?OnInput@HWNDElement@DirectUI@@UEAAXPEAUInputEvent@2@@Z	2748	0x14001ccd8
?OnInput@HWNDHost@DirectUI@@UEAAXPEAUInputEvent@2@@Z	2749	0x14003f604
?OnInput@RepeatButton@DirectUI@@UEAAXPEAUInputEvent@2@@Z	2750	0x14002bf70
?OnInput@Selector@DirectUI@@UEAAXPEAUInputEvent@2@@Z	2751	0x14005cd64
?OnInput@Thumb@DirectUI@@UEAAXPEAUInputEvent@2@@Z	2752	0x1400276fc
?OnInput@TouchButton@DirectUI@@UEAAXPEAUInputEvent@2@@Z	2753	0x14002177c
?OnInput@TouchEdit2@DirectUI@@UEAAXPEAUInputEvent@2@@Z	2754	0x14001b530
?OnInput@TouchHWNDElement@DirectUI@@UEAAXPEAUInputEvent@2@@Z	2755	0x1400160d0
?OnInput@TouchScrollBar@DirectUI@@UEAAXPEAUInputEvent@2@@Z	2756	0x14002b0b8
?OnInput@TouchSelect@DirectUI@@UEAAXPEAUInputEvent@2@@Z	2757	0x14006f21c
?OnInput@Viewer@DirectUI@@UEAAXPEAUInputEvent@2@@Z	2758	0x14006ea94
?OnInput@XElement@DirectUI@@UEAAXPEAUInputEvent@2@@Z	2759	0x140004668
?OnInvoke@InvokeHelper@DirectUI@@AEAAXPEAUInvokeArgs@12@@Z	2760	0x140012854
?OnInvoke@Proxy@DirectUI@@MEAAXIPEAX@Z	2761	0x1400394bc
?OnKeyFocusMoved@DialogElement@DirectUI@@UEAAXPEAVElement@2@0@Z	2762	0x14003e4d0
?OnKeyFocusMoved@DialogElementCore@DirectUI@@QEAAXPEAVElement@2@0@Z	2763	0x1400733d4
?OnKeyFocusMoved@Element@DirectUI@@UEAAXPEAV12@0@Z	2764	0x14003ba20
?OnKeyFocusMoved@Selector@DirectUI@@UEAAXPEAVElement@2@0@Z	2765	0x14001e174
?OnKeyFocusMoved@SelectorNoDefault@DirectUI@@UEAAXPEAVElement@2@0@Z	2766	0x1400216a0
?OnKeyFocusMoved@TouchHWNDElement@DirectUI@@UEAAXPEAVElement@2@0@Z	2767	0x14006ded4
?OnKillActive@TaskPage@DirectUI@@MEAA_JXZ	2768	0x140039ee4
?OnLayoutPosChanged@BorderLayout@DirectUI@@UEAAXPEAVElement@2@0HH@Z	2769	0x140026950
?OnLayoutPosChanged@Layout@DirectUI@@UEAAXPEAVElement@2@0HH@Z	2770	0x14000e13c
?OnLayoutPosChanged@NineGridLayout@DirectUI@@UEAAXPEAVElement@2@0HH@Z	2771	0x14000afd8
?OnLayoutPosChanged@ShellBorderLayout@DirectUI@@UEAAXPEAVElement@2@0HH@Z	2772	0x14002b730
?OnListenedEvent@BaseScrollViewer@DirectUI@@UEAAXPEAVElement@2@PEAUEvent@2@@Z	2773	0x1400257a4
?OnListenedEvent@DialogElement@DirectUI@@UEAAXPEAVElement@2@PEAUEvent@2@@Z	2774	0x14000681c
?OnListenedEvent@TaskPage@DirectUI@@MEAAXPEAVElement@2@PEAUEvent@2@@Z	2775	0x140071b14
?OnListenedInput@BaseScrollViewer@DirectUI@@UEAAXPEAVElement@2@PEAUInputEvent@2@@Z	2776	0x14003d644
?OnListenedInput@DialogElement@DirectUI@@UEAAXPEAVElement@2@PEAUInputEvent@2@@Z	2777	0x140007630
?OnListenedInput@TaskPage@DirectUI@@MEAAXPEAVElement@2@PEAUInputEvent@2@@Z	2778	0x140079b28
?OnListenedPropertyChanged@BaseScrollViewer@DirectUI@@UEAAXPEAVElement@2@PEBUPropertyInfo@2@HPEAVValue@2@2@Z	2779	0x14001308c
?OnListenedPropertyChanged@DialogElement@DirectUI@@UEAAXPEAVElement@2@PEBUPropertyInfo@2@HPEAVValue@2@2@Z	2780	0x140047060
?OnListenedPropertyChanged@ScrollViewer@DirectUI@@UEAAXPEAVElement@2@PEBUPropertyInfo@2@HPEAVValue@2@2@Z	2781	0x140012cc4
?OnListenedPropertyChanged@StyledScrollViewer@DirectUI@@UEAAXPEAVElement@2@PEBUPropertyInfo@2@HPEAVValue@2@2@Z	2782	0x140038570
?OnListenedPropertyChanged@TaskPage@DirectUI@@MEAAXPEAVElement@2@PEBUPropertyInfo@2@HPEAVValue@2@2@Z	2783	0x14004e214
?OnListenedPropertyChanged@TouchEdit2@DirectUI@@EEAAXPEAVElement@2@PEBUPropertyInfo@2@HPEAVValue@2@2@Z	2784	0x140076c40
?OnListenedPropertyChanging@BaseScrollViewer@DirectUI@@UEAA_NPEAVElement@2@PEBUPropertyInfo@2@HPEAVValue@2@2@Z	2785	0x140008340
?OnListenedPropertyChanging@DialogElement@DirectUI@@UEAA_NPEAVElement@2@PEBUPropertyInfo@2@HPEAVValue@2@2@Z	2786	0x140035f4c
?OnListenedPropertyChanging@TaskPage@DirectUI@@MEAA_NPEAVElement@2@PEBUPropertyInfo@2@HPEAVValue@2@2@Z	2787	0x140058ab0
?OnListenerAttach@BaseScrollViewer@DirectUI@@UEAAXPEAVElement@2@@Z	2788	0x14005ef7c
?OnListenerAttach@DialogElement@DirectUI@@UEAAXPEAVElement@2@@Z	2789	0x14004e864
?OnListenerAttach@TaskPage@DirectUI@@MEAAXPEAVElement@2@@Z	2790	0x140046fa8
?OnListenerDetach@BaseScrollViewer@DirectUI@@UEAAXPEAVElement@2@@Z	2791	0x14004abac
?OnListenerDetach@DialogElement@DirectUI@@UEAAXPEAVElement@2@@Z	2792	0x14001b09c
?OnListenerDetach@DialogElementCore@DirectUI@@QEAAXPEAVElement@2@@Z	2793	0x1400738bc
?OnListenerDetach@TaskPage@DirectUI@@MEAAXPEAVElement@2@@Z	2794	0x1400477b8
?OnListenerDetach@TouchEdit2@DirectUI@@EEAAXPEAVElement@2@@Z	2795	0x14003e944
?OnLostDialogFocus@Button@DirectUI@@UEAA_NPEAUIDialogElement@2@@Z	2796	0x140040f5c
?OnLostDialogFocus@CCBase@DirectUI@@UEAA_NPEAUIDialogElement@2@@Z	2797	0x14006c6f0
?OnLostDialogFocus@CCBaseCheckRadioButton@DirectUI@@UEAA_NPEAUIDialogElement@2@@Z	2798	0x14001069c
?OnLostDialogFocus@CCPushButton@DirectUI@@UEAA_NPEAUIDialogElement@2@@Z	2799	0x140053d68
?OnLostDialogFocus@CCSysLink@DirectUI@@UEAA_NPEAUIDialogElement@2@@Z	2800	0x14004a380
?OnLostDialogFocus@CheckBoxGlyph@DirectUI@@UEAA_NPEAUIDialogElement@2@@Z	2801	0x140074844
?OnLostDialogFocus@ExpandoButtonGlyph@DirectUI@@UEAA_NPEAUIDialogElement@2@@Z	2802	0x140039e18
?OnLostDialogFocus@RadioButtonGlyph@DirectUI@@UEAA_NPEAUIDialogElement@2@@Z	2803	0x14001d94c
?OnMaximumChanged@BaseScrollBar@DirectUI@@QEAAXPEAVValue@2@@Z	2804	0x14001cb28
?OnMessage@CCBaseScrollBar@DirectUI@@UEAA_NI_K_JPEA_J@Z	2805	0x140030924
?OnMessage@CCPushButton@DirectUI@@UEAA_NI_K_JPEA_J@Z	2806	0x140054214
?OnMessage@CCTrackBar@DirectUI@@UEAA_NI_K_JPEA_J@Z	2807	0x14002f450
?OnMessage@HWNDHost@DirectUI@@UEAA_NI_K_JPEA_J@Z	2808	0x140019574
?OnMessage@NativeHWNDHost@DirectUI@@UEAAJI_K_JPEA_J@Z	2809	0x14001ca8c
?OnMessage@TaskPage@DirectUI@@MEAA_NI_K_JPEA_J@Z	2810	0x140044fec
?OnMessage@XElement@DirectUI@@UEAA_NI_K_JPEA_J@Z	2811	0x140001cf8
?OnMinimumChanged@BaseScrollBar@DirectUI@@QEAAXPEAVValue@2@@Z	2812	0x1400072e4
?OnMouseFocusMoved@Element@DirectUI@@UEAAXPEAV12@0@Z	2813	0x140006590
?OnNoChildWithShortcutFound@HWNDElement@DirectUI@@UEAAXPEAUKeyboardEvent@2@@Z	2814	0x14001935c
?OnNoChildWithShortcutFound@XBaby@DirectUI@@UEAAXPEAUKeyboardEvent@2@@Z	2815	0x14006a708
?OnNotify@CCBase@DirectUI@@UEAA_NI_K_JPEA_J@Z	2816	0x14005df28
?OnNotify@CCCheckBox@DirectUI@@UEAA_NI_K_JPEA_J@Z	2817	0x1400480fc
?OnNotify@CCPushButton@DirectUI@@UEAA_NI_K_JPEA_J@Z	2818	0x14004b820
?OnNotify@CCRadioButton@DirectUI@@UEAA_NI_K_JPEA_J@Z	2819	0x14001ed0c
?OnNotify@CCTreeView@DirectUI@@UEAA_NI_K_JPEA_J@Z	2820	0x14001b338
?OnNotify@Combobox@DirectUI@@UEAA_NI_K_JPEA_J@Z	2821	0x140079204
?OnNotify@Edit@DirectUI@@UEAA_NI_K_JPEA_J@Z	2822	0x1400193a8
?OnNotify@HWNDHost@DirectUI@@UEAA_NI_K_JPEA_J@Z	2823	0x14002d34c
?OnPageChanged@BaseScrollBar@DirectUI@@QEAAXPEAVValue@2@@Z	2824	0x14001f32c
?OnPageChanging@BaseScrollBar@DirectUI@@QEAA_NPEAVValue@2@@Z	2825	0x140079c78
?OnPositionChanged@BaseScrollBar@DirectUI@@QEAAXPEAVValue@2@@Z	2826	0x140016824
?OnPositionChanging@BaseScrollBar@DirectUI@@QEAA_NPEAVValue@2@@Z	2827	0x14004c29c
?OnPropertyChanged@AccessibleButton@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2828	0x14002bec0
?OnPropertyChanged@AnimationStrip@DirectUI@@MEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2829	0x14002170c
?OnPropertyChanged@BaseScrollViewer@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2830	0x14004ecfc
?OnPropertyChanged@Browser@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2831	0x1400660fc
?OnPropertyChanged@Button@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2832	0x1400286ec
?OnPropertyChanged@CCBase@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2833	0x14005ea30
?OnPropertyChanged@CCBaseCheckRadioButton@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2834	0x1400431e8
?OnPropertyChanged@CCBaseScrollBar@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2835	0x140054fcc
?OnPropertyChanged@CCCommandLink@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2836	0x1400031d8
?OnPropertyChanged@CCPushButton@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2837	0x140049cd4
?OnPropertyChanged@CCTrackBar@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2838	0x14005fe4c
?OnPropertyChanged@Combobox@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2839	0x14007899c
?OnPropertyChanged@DialogElement@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2840	0x14004c638
?OnPropertyChanged@Edit@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2841	0x140064ad0
?OnPropertyChanged@Element@DirectUI@@UEAAXPEAUPropertyInfo@2@HPEAVValue@2@1@Z	2842	0x140025d34
?OnPropertyChanged@Element@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2843	0x14004793c
?OnPropertyChanged@Expando@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2844	0x1400524dc
?OnPropertyChanged@HWNDElement@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2845	0x14000562c
?OnPropertyChanged@HWNDHost@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2846	0x140037b40
?OnPropertyChanged@ItemList@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2847	0x14004f72c
?OnPropertyChanged@Macro@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2848	0x140009838
?OnPropertyChanged@ModernProgressBar@DirectUI@@MEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2849	0x140053908
?OnPropertyChanged@ModernProgressRing@DirectUI@@MEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2850	0x140055694
?OnPropertyChanged@RefPointElement@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2851	0x140074e40
?OnPropertyChanged@RichText@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2852	0x140048978
?OnPropertyChanged@ScrollBar@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2853	0x140064450
?OnPropertyChanged@ScrollViewer@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2854	0x1400530c0
?OnPropertyChanged@Selector@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2855	0x1400737e8
?OnPropertyChanged@TextGraphic@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2856	0x1400622d0
?OnPropertyChanged@TouchButton@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2857	0x140028d00
?OnPropertyChanged@TouchCheckBox@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2858	0x14001e058
?OnPropertyChanged@TouchCommandButton@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2859	0x140043e04
?OnPropertyChanged@TouchEdit2@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2860	0x1400140e8
?OnPropertyChanged@TouchEditBase@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2861	0x1400704a0
?OnPropertyChanged@TouchHWNDElement@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2862	0x14007a280
?OnPropertyChanged@TouchHyperLink@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2863	0x14006fb9c
?OnPropertyChanged@TouchRepeatButton@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2864	0x140001f88
?OnPropertyChanged@TouchScrollBar@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2865	0x1400623d8
?OnPropertyChanged@TouchSelect@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2866	0x140028ca4
?OnPropertyChanged@Viewer@DirectUI@@UEAAXPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2867	0x14005efec
?OnPropertyChanging@BaseScrollViewer@DirectUI@@UEAA_NPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2868	0x14001ed88
?OnPropertyChanging@CCBaseScrollBar@DirectUI@@UEAA_NPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2869	0x14006c1d4
?OnPropertyChanging@CCTrackBar@DirectUI@@UEAA_NPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2870	0x140032ea4
?OnPropertyChanging@Element@DirectUI@@UEAA_NPEAUPropertyInfo@2@HPEAVValue@2@1@Z	2871	0x140068330
?OnPropertyChanging@Element@DirectUI@@UEAA_NPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2872	0x140076fb0
?OnPropertyChanging@PText@DirectUI@@UEAA_NPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2873	0x140023c9c
?OnPropertyChanging@ScrollBar@DirectUI@@UEAA_NPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2874	0x140047064
?OnPropertyChanging@TextGraphic@DirectUI@@UEAA_NPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2875	0x140030c40
?OnPropertyChanging@TouchCheckBox@DirectUI@@UEAA_NPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2876	0x14000c9d4
?OnPropertyChanging@TouchCheckBoxGlyph@DirectUI@@UEAA_NPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2877	0x14001741c
?OnPropertyChanging@TouchCommandButton@DirectUI@@UEAA_NPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2878	0x1400057cc
?OnPropertyChanging@TouchEdit2@DirectUI@@UEAA_NPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2879	0x1400730e0
?OnPropertyChanging@TouchEditBase@DirectUI@@UEAA_NPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2880	0x1400562f8
?OnPropertyChanging@TouchSelect@DirectUI@@UEAA_NPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2881	0x140038510
?OnPropertyChanging@Viewer@DirectUI@@UEAA_NPEBUPropertyInfo@2@HPEAVValue@2@1@Z	2882	0x140074fd0
?OnQueryCancel@TaskPage@DirectUI@@MEAA_JXZ	2883	0x14002c9a0
?OnQueryInitialFocus@TaskPage@DirectUI@@MEAAPEAVElement@2@XZ	2884	0x14004c6f8
?OnReceivedDialogFocus@Button@DirectUI@@UEAA_NPEAUIDialogElement@2@@Z	2885	0x140007e20
?OnReceivedDialogFocus@CCBase@DirectUI@@UEAA_NPEAUIDialogElement@2@@Z	2886	0x140055720
?OnReceivedDialogFocus@CCBaseCheckRadioButton@DirectUI@@UEAA_NPEAUIDialogElement@2@@Z	2887	0x140038fc4
?OnReceivedDialogFocus@CCPushButton@DirectUI@@UEAA_NPEAUIDialogElement@2@@Z	2888	0x140001a38
?OnReceivedDialogFocus@CCSysLink@DirectUI@@UEAA_NPEAUIDialogElement@2@@Z	2889	0x140078428
?OnReceivedDialogFocus@CheckBoxGlyph@DirectUI@@UEAA_NPEAUIDialogElement@2@@Z	2890	0x1400791c0
?OnReceivedDialogFocus@ExpandoButtonGlyph@DirectUI@@UEAA_NPEAUIDialogElement@2@@Z	2891	0x140024aa0
?OnReceivedDialogFocus@RadioButtonGlyph@DirectUI@@UEAA_NPEAUIDialogElement@2@@Z	2892	0x140020ae4
?OnRegisteredDefaultButtonChanged@DialogElementCore@DirectUI@@QEAAXPEAVValue@2@0@Z	2893	0x1400178e0
?OnRemove@BorderLayout@DirectUI@@UEAAXPEAVElement@2@PEAPEAV32@I@Z	2894	0x140005e08
?OnRemove@Layout@DirectUI@@UEAAXPEAVElement@2@PEAPEAV32@I@Z	2895	0x140048528
?OnRemove@NineGridLayout@DirectUI@@UEAAXPEAVElement@2@PEAPEAV32@I@Z	2896	0x1400112c4
?OnRemove@ShellBorderLayout@DirectUI@@UEAAXPEAVElement@2@PEAPEAV32@I@Z	2897	0x140073904
?OnReset@TaskPage@DirectUI@@MEAA_JXZ	2898	0x14001c738
?OnSelectedPropertyChanged@CCCommandLink@DirectUI@@UEAAXXZ	2899	0x14000e680
?OnSelectedPropertyChanged@CCPushButton@DirectUI@@UEAAXXZ	2900	0x1400506e8
?OnSetActive@TaskPage@DirectUI@@MEAA_JXZ	2901	0x1400535a4
?OnSinkThemeChanged@HWNDHost@DirectUI@@UEAA_NI_K_JPEA_J@Z	2902	0x1400472b4
?OnSinkThemeChanged@XElement@DirectUI@@UEAA_NI_K_JPEA_J@Z	2903	0x14000a64c
?OnSysChar@HWNDHost@DirectUI@@UEAA_NG@Z	2904	0x140063710
?OnSysChar@XElement@DirectUI@@UEAA_NG@Z	2905	0x140078e74
?OnTextProp@TouchSwitch@DirectUI@@SAPEBUPropertyInfo@2@XZ	2906	0x14003a948
?OnThemeChanged@HWNDElement@DirectUI@@UEAAXPEAUThemeChangedEvent@2@@Z	2907	0x1400563fc
?OnThemeChanged@XBaby@DirectUI@@UEAAXPEAUThemeChangedEvent@2@@Z	2908	0x140052c60
?OnToolTip@EventManager@DirectUI@@SAJPEAVElement@2@K@Z	2909	0x140066cd0
?OnUnHosted@Element@DirectUI@@MEAAXPEAV12@@Z	2910	0x140042fac
?OnUnHosted@HWNDHost@DirectUI@@MEAAXPEAVElement@2@@Z	2911	0x140008f4c
?OnUnHosted@ModernProgressBar@DirectUI@@MEAAXPEAVElement@2@@Z	2912	0x14001196c
?OnUnHosted@ModernProgressRing@DirectUI@@MEAAXPEAVElement@2@@Z	2913	0x140005498
?OnUnHosted@PushButton@DirectUI@@UEAAXPEAVElement@2@@Z	2914	0x140077e30
?OnUnHosted@TouchButton@DirectUI@@UEAAXPEAVElement@2@@Z	2915	0x140072954
?OnUnHosted@TouchSelect@DirectUI@@UEAAXPEAVElement@2@@Z	2916	0x140048620
?OnWindowStyleChanged@HWNDHost@DirectUI@@UEAAX_KPEBUtagSTYLESTRUCT@@@Z	2917	0x14004f5ac
?OnWizBack@TaskPage@DirectUI@@MEAA_JXZ	2918	0x14001dcfc
?OnWizFinish@TaskPage@DirectUI@@MEAA_JXZ	2919	0x14002a9a4
?OnWizNext@TaskPage@DirectUI@@MEAA_JXZ	2920	0x14003bd5c
?OnWmSettingChanged@HWNDElement@DirectUI@@UEAAX_K_J@Z	2921	0x140024260
?OnWmThemeChanged@HWNDElement@DirectUI@@UEAAX_K_J@Z	2922	0x14007341c
?OnWmThemeChanged@XBaby@DirectUI@@UEAAX_K_J@Z	2923	0x14005bb0c
?OnWndMsg@TaskPage@DirectUI@@AEAAHI_K_JPEA_J@Z	2924	0x140009764
?OpenAnimation@CCAVI@DirectUI@@AEAAXPEAUHWND__@@@Z	2925	0x1400603a4
?OpenPopup@TouchSelect@DirectUI@@QEAAJXZ	2926	0x14001e78c
?OptimizeMoveProp@HWNDHost@DirectUI@@SAPEBUPropertyInfo@2@XZ	2927	0x140077344
?OrderProp@ScrollBar@DirectUI@@SAPEBUPropertyInfo@2@XZ	2928	0x14001c730
?Orientation@Schema@DirectUI@@2HA	2929	0x140066114
?OverhangOffsetProp@RichText@DirectUI@@SAPEBUPropertyInfo@2@XZ	2930	0x140032498
?OverhangProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	2931	0x14003c34c
?OverrideButtonBackgroundProp@CCPushButton@DirectUI@@SAPEBUPropertyInfo@2@XZ	2932	0x140017840
?OverrideZoomThreshold@TouchScrollViewer@DirectUI@@QEAAJMMH@Z	2933	0x140072fd0
?PaddingProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	2934	0x14001700c
?PageDown@BaseScrollBar@DirectUI@@UEAAXI@Z	2935	0x14004af60
?PageDown@TouchScrollBar@DirectUI@@UEAAXI@Z	2936	0x140055230
?PageProp@CCBaseScrollBar@DirectUI@@SAPEBUPropertyInfo@2@XZ	2937	0x14003184c
?PageProp@ScrollBar@DirectUI@@SAPEBUPropertyInfo@2@XZ	2938	0x14003ed70
?PageUp@BaseScrollBar@DirectUI@@UEAAXI@Z	2939	0x14000aa60
?PageUp@TouchScrollBar@DirectUI@@UEAAXI@Z	2940	0x140065a64
?Paint@AnimationStrip@DirectUI@@MEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z	2941	0x14004ff68
?Paint@Element@DirectUI@@UEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z	2942	0x140068ca0
?Paint@HWNDHost@DirectUI@@UEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z	2943	0x140012944
?Paint@ModernProgressBar@DirectUI@@MEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z	2944	0x14005ee80
?Paint@ModernProgressRing@DirectUI@@MEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z	2945	0x14003e2b8
?Paint@Movie@DirectUI@@UEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z	2946	0x14003450c
?Paint@Progress@DirectUI@@UEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z	2947	0x1400236d4
?Paint@RichText@DirectUI@@UEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z	2948	0x14005fbb4
?Paint@TouchCheckBox@DirectUI@@UEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z	2949	0x14004c9f4
?Paint@TouchCheckBoxGlyph@DirectUI@@UEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z	2950	0x1400440e0
?Paint@TouchCommandButton@DirectUI@@UEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z	2951	0x14006250c
?Paint@TouchEdit2@DirectUI@@UEAAXPEAUHDC__@@PEBUtagRECT@@1PEAU4@2@Z	2952	0x14000668c
?PaintBackground@Element@DirectUI@@QEAAXPEAUHDC__@@PEAVValue@2@AEBUtagRECT@@222@Z	2953	0x140035020
?PaintBorder@Element@DirectUI@@QEAAXPEAUHDC__@@PEAVValue@2@PEAUtagRECT@@AEBU5@@Z	2954	0x14005a06c
?PaintContent@Element@DirectUI@@QEAAXPEAUHDC__@@PEBUtagRECT@@@Z	2955	0x1400332fc
?PaintEdgeHighlight@Element@DirectUI@@QEAAXPEAUHDC__@@AEBUtagRECT@@1@Z	2956	0x14004c500
?PaintFocusRect@Element@DirectUI@@QEAAXPEAUHDC__@@PEBUtagRECT@@1@Z	2957	0x14006adc4
?PaintStringContent@Element@DirectUI@@QEAAXPEAUHDC__@@PEBUtagRECT@@PEAVValue@2@H@Z	2958	0x1400583bc
?PaneControlType@Schema@DirectUI@@2HA	2959	0x14003c2e8
?ParentProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	2960	0x140051610
?ParseARGBColor@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAKPEA_N@Z	2961	0x140019140
?ParseArgs@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEATParsedArg@12@IPEBD@Z	2962	0x140015e34
?ParseAtomValue@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAPEAVValue@2@@Z	2963	0x14001880c
?ParseBehavior@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@@Z	2964	0x14007775c
?ParseBehaviorArgValue@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAPEAVValue@2@@Z	2965	0x14001ada8
?ParseBoolValue@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAPEAVValue@2@@Z	2966	0x14007c138
?ParseColor@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAK@Z	2967	0x140001c5c
?ParseDFCFill@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAPEAVValue@2@PEA_N@Z	2968	0x140003ebc
?ParseDTBFill@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAPEAVValue@2@PEA_N@Z	2969	0x1400128c8
?ParseDoubleListValue@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAPEAVValue@2@@Z	2970	0x14000f900
?ParseFillValue@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAPEAVValue@2@@Z	2971	0x140047bd0
?ParseFloat@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAMPEA_N@Z	2972	0x14000f7c4
?ParseFloatValue@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAPEAVValue@2@@Z	2973	0x140007544
?ParseFunction@DUIXmlParser@DirectUI@@IEAAJPEBGPEBUExprNode@ParserTools@2@PEATParsedArg@12@IPEBD@Z	2974	0x140035150
?ParseGTCColor@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAKPEA_N@Z	2975	0x14004f9e4
?ParseGTFStr@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAPEAVValue@2@PEA_N@Z	2976	0x14004d87c
?ParseGTMarRect@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAUScaledRECT@2@PEA_N@Z	2977	0x14005cdbc
?ParseGTMetInt@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAHPEA_N@Z	2978	0x140005cc8
?ParseGTPartSize@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAUScaledSIZE@2@PEA_N@Z	2979	0x140007758
?ParseGradientFill@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAPEAVValue@2@PEA_N@Z	2980	0x1400128ac
?ParseGraphicGraphic@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAPEAVValue@2@PEA_N@Z	2981	0x140075d18
?ParseGraphicHelper@DUIXmlParser@DirectUI@@IEAAJ_NPEBUExprNode@ParserTools@2@PEAPEAVValue@2@@Z	2982	0x14007c960
?ParseGraphicValue@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAPEAVValue@2@@Z	2983	0x14005657c
?ParseIconGraphic@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAPEAVValue@2@PEA_N@Z	2984	0x140057f74
?ParseImageGraphic@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAPEAVValue@2@PEA_N@Z	2985	0x140041078
?ParseIntValue@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAPEAVValue@2@@Z	2986	0x140035274
?ParseLayoutValue@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@@Z	2987	0x140018e44
?ParseLibrary@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAPEAUHINSTANCE__@@@Z	2988	0x140063f98
?ParseLiteral@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAPEBG@Z	2989	0x140006bb0
?ParseLiteralColor@DUIXmlParser@DirectUI@@IEAAJPEBGPEAK@Z	2990	0x14004d300
?ParseLiteralColorInt@DUIXmlParser@DirectUI@@IEAAJPEBGPEAH@Z	2991	0x14006ca08
?ParseLiteralNumber@DUIXmlParser@DirectUI@@IEAAJPEBGPEAHPEA_N@Z	2992	0x1400505bc
?ParseMagnitude@DUIXmlParser@DirectUI@@IEAAJPEBGPEAHPEA_N@Z	2993	0x1400427cc
?ParseMagnitudeFloat@DUIXmlParser@DirectUI@@IEAAJPEBGPEAMPEA_N@Z	2994	0x140015470
?ParseNumber@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAHPEA_N@Z	2995	0x1400178f4
?ParsePointValue@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAPEAVValue@2@@Z	2996	0x140026edc
?ParseQuotedString@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAPEBG@Z	2997	0x140036518
?ParseRGBColor@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAKPEA_N@Z	2998	0x14005ee90
?ParseRect@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAUScaledRECT@2@@Z	2999	0x14004ae80
?ParseRectRect@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAUScaledRECT@2@PEA_N@Z	3000	0x1400229f8
?ParseRectValue@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAPEAVValue@2@@Z	3001	0x140030d1c
?ParseResStr@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAPEAVValue@2@PEA_N@Z	3002	0x14002e370
?ParseResid@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAPEBG@Z	3003	0x140051478
?ParseSGraphicGraphic@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAPEAVValue@2@PEA_N@Z	3004	0x14004bb94
?ParseSGraphicHelper@DUIXmlParser@DirectUI@@IEAAJ_NPEBUExprNode@ParserTools@2@PEAPEAVValue@2@@Z	3005	0x14000ea10
?ParseSize@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAUScaledSIZE@2@@Z	3006	0x14005df3c
?ParseSizeSize@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAUScaledSIZE@2@PEA_N@Z	3007	0x14000288c
?ParseSizeValue@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAPEAVValue@2@@Z	3008	0x140015168
?ParseStringValue@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAPEAVValue@2@@Z	3009	0x140068c88
?ParseStyleSheets@DUIXmlParser@DirectUI@@IEAAJPEAUIXmlReader@@@Z	3010	0x14002f764
?ParseSysMetricInt@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAHPEA_N@Z	3011	0x14004e574
?ParseSysMetricStr@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@PEAPEAVValue@2@PEA_N@Z	3012	0x1400229f8
?ParseTheme@DUIXmlParser@DirectUI@@IEAAJPEBUExprNode@ParserTools@2@_NPEAPEAX@Z	3013	0x140014aa4
?PasswordCharacterProp@Edit@DirectUI@@SAPEBUPropertyInfo@2@XZ	3014	0x14002b11c
?PasswordCharacterProp@TouchEditBase@DirectUI@@SAPEBUPropertyInfo@2@XZ	3015	0x14001afa8
?PasswordRevealModeProp@TouchEdit2@DirectUI@@SAPEBUPropertyInfo@2@XZ	3016	0x14005af88
?Paste@TouchEditBase@DirectUI@@SA?AVUID@@XZ	3017	0x14000dda4
?PasteText@TouchEdit2@DirectUI@@QEAAJPEBG@Z	3018	0x14007c6a4
?PathProp@Movie@DirectUI@@SAPEBUPropertyInfo@2@XZ	3019	0x140022ce4
?PatternFromPatternId@Schema@DirectUI@@SA?AW4Pattern@12@H@Z	3020	0x140044f98
?Pause@Movie@DirectUI@@QEAAXXZ	3021	0x140070c1c
?PfnIsSupportedFromPattern@Schema@DirectUI@@SAP6A_NPEAVElement@2@@ZW4Pattern@12@@Z	3022	0x140070aa8
?PinningProp@BaseScrollViewer@DirectUI@@SAPEBUPropertyInfo@2@XZ	3023	0x1400733ac
?PixelOffsetModeProp@Movie@DirectUI@@SAPEBUPropertyInfo@2@XZ	3024	0x1400609d4
?Play@CCAVI@DirectUI@@QEAAXPEAUHWND__@@@Z	3025	0x1400705b0
?Play@Movie@DirectUI@@QEAAXXZ	3026	0x14005fa90
?PlayAllFramesModeProp@Movie@DirectUI@@SAPEBUPropertyInfo@2@XZ	3027	0x14002f3a0
?PlayProp@AnimationStrip@DirectUI@@SAPEBUPropertyInfo@2@XZ	3028	0x14002a67c
?PopupBoundsProp@TouchSelect@DirectUI@@SAPEBUPropertyInfo@2@XZ	3029	0x140056380
?PopupChange@TouchSelect@DirectUI@@SA?AVUID@@XZ	3030	0x14003ec2c
?PosInLayoutProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	3031	0x14005e3fc
?PositionProp@CCBaseScrollBar@DirectUI@@SAPEBUPropertyInfo@2@XZ	3032	0x14003d100
?PositionProp@ModernProgressBar@DirectUI@@SAPEBUPropertyInfo@2@XZ	3033	0x14006f288
?PositionProp@Progress@DirectUI@@SAPEBUPropertyInfo@2@XZ	3034	0x14003f3ac
?PositionProp@ScrollBar@DirectUI@@SAPEBUPropertyInfo@2@XZ	3035	0x14003bac4
?PostCreate@CCAVI@DirectUI@@MEAAXPEAUHWND__@@@Z	3036	0x140053808
?PostCreate@CCBase@DirectUI@@MEAAXPEAUHWND__@@@Z	3037	0x14000c140
?PostCreate@CCBaseCheckRadioButton@DirectUI@@MEAAXPEAUHWND__@@@Z	3038	0x14002bf58
?PostCreate@CCCommandLink@DirectUI@@MEAAXPEAUHWND__@@@Z	3039	0x14003710c
?PostCreate@CCTrackBar@DirectUI@@MEAAXPEAUHWND__@@@Z	3040	0x14001f744
?PrepareManualSwapDeferredZoomToRect@TouchScrollViewer@DirectUI@@QEAAJPEBUtagRECT@@PEBM1PEAM2M@Z	3041	0x14002c798
?PressedProp@Button@DirectUI@@SAPEBUPropertyInfo@2@XZ	3042	0x140048f98
?PressedProp@TouchButton@DirectUI@@SAPEBUPropertyInfo@2@XZ	3043	0x14007299c
?PreventFormatChangeUpdatingModifiedStateProp@TouchEditBase@DirectUI@@SAPEBUPropertyInfo@2@XZ	3044	0x14001e394
?PrintRTLControl@HWNDHost@DirectUI@@IEAAXPEAUHDC__@@0AEBUtagRECT@@@Z	3045	0x140068790
?ProcessIdProperty@Schema@DirectUI@@2HA	3046	0x140056520
?ProcessingKeyboardNavigation@TouchHWNDElement@DirectUI@@SA?AVUID@@XZ	3047	0x140043d88
?ProgressBarControlType@Schema@DirectUI@@2HA	3048	0x14006249c
?PromptTextProp@TouchEdit2@DirectUI@@SAPEBUPropertyInfo@2@XZ	3049	0x14005594c
?PromptWithCaretProp@TouchEdit2@DirectUI@@SAPEBUPropertyInfo@2@XZ	3050	0x14007bbec
?PropSheet_SendMessage@TaskPage@DirectUI@@IEAA_JI_K_J@Z	3051	0x140071cac
?PropertyChangedCore@Edit@DirectUI@@AEAAXPEBUPropertyInfo@2@HPEAVValue@2@PEAUHWND__@@@Z	3052	0x140005cb4
?PropertyChangingListener@EventManager@DirectUI@@SAJPEAVElement@2@PEBUPropertyInfo@2@PEA_N@Z	3053	0x140079c30
?PropertyListener@EventManager@DirectUI@@SAJPEAVElement@2@PEBUPropertyInfo@2@HPEAVValue@2@2@Z	3054	0x14005b948
?PropertyProp@Bind@DirectUI@@SAPEBUPropertyInfo@2@XZ	3055	0x14000fdbc
?ProportionalProp@ScrollBar@DirectUI@@SAPEBUPropertyInfo@2@XZ	3056	0x14004e0e4
?QueryInterface@DuiAccessible@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z	3057	0x140032210
?QueryInterface@Element@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z	3058	0x14000af30
?QueryInterface@ElementProvider@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z	3059	0x14006532c
?QueryInterface@ExpandCollapseProvider@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z	3060	0x14000ddb0
?QueryInterface@GridItemProvider@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z	3061	0x14003201c
?QueryInterface@GridProvider@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z	3062	0x14004c674
?QueryInterface@HWNDElementProvider@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z	3063	0x14006064c
?QueryInterface@HWNDHostAccessible@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z	3064	0x140051080
?QueryInterface@InvokeProvider@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z	3065	0x1400728ac
?QueryInterface@RangeValueProvider@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z	3066	0x140036ce4
?QueryInterface@ScrollItemProvider@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z	3067	0x1400240a0
?QueryInterface@ScrollProvider@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z	3068	0x140007da4
?QueryInterface@SelectionItemProvider@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z	3069	0x14002fe68
?QueryInterface@SelectionProvider@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z	3070	0x1400308fc
?QueryInterface@TableItemProvider@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z	3071	0x14003ed3c
?QueryInterface@TableProvider@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z	3072	0x140073c4c
?QueryInterface@ToggleProvider@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z	3073	0x14002ec78
?QueryInterface@ValueProvider@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z	3074	0x14002dd04
?QueryInterface@XProvider@DirectUI@@UEAAJAEBU_GUID@@PEAPEAX@Z	3075	0x14001a3b0
?QueryService@DuiAccessible@DirectUI@@UEAAJAEBU_GUID@@0PEAPEAX@Z	3076	0x14005757c
?QueryService@HWNDHostAccessible@DirectUI@@UEAAJAEBU_GUID@@0PEAPEAX@Z	3077	0x14003c9b0
?QuerySysMetric@DUIXmlParser@DirectUI@@IEAAHHPEA_N@Z	3078	0x140017b74
?QuerySysMetricStr@DUIXmlParser@DirectUI@@IEAAPEBGHPEAGI@Z	3079	0x140074734
?QueueDefaultAction@Element@DirectUI@@QEAAJXZ	3080	0x140021774
?RadioButtonControlType@Schema@DirectUI@@2HA	3081	0x140010808
?RaiseChildRemovedEvent@EventManager@DirectUI@@CAJAEBUElementRuntimeId@2@PEAVElement@2@@Z	3082	0x14004357c
?RaiseGeometryEventWorker@EventManager@DirectUI@@CAJPEAURectangleChange@2@_N111@Z	3083	0x140062124
?RaiseGeometryEvents@EventManager@DirectUI@@CAJXZ	3084	0x14002fb60
?RaiseStructureChangedEvent@EventManager@DirectUI@@CAJPEAVElement@2@W4StructureChangeType@@@Z	3085	0x140015f20
?RaiseStructureEvents@EventManager@DirectUI@@CAJXZ	3086	0x140005454
?RaiseVisibilityEvents@EventManager@DirectUI@@CAJXZ	3087	0x14003c4a8
?RangeMaxProp@CCTrackBar@DirectUI@@SAPEBUPropertyInfo@2@XZ	3088	0x140011a18
?RangeMinProp@CCTrackBar@DirectUI@@SAPEBUPropertyInfo@2@XZ	3089	0x140044280
?RangeValuePattern@Schema@DirectUI@@2HA	3090	0x140032f48
?RangeValue_IsReadOnly_Property@Schema@DirectUI@@2HA	3091	0x140037e38
?RangeValue_LargeChange_Property@Schema@DirectUI@@2HA	3092	0x140074114
?RangeValue_Maximum_Property@Schema@DirectUI@@2HA	3093	0x14000193c
?RangeValue_Minimum_Property@Schema@DirectUI@@2HA	3094	0x140043afc
?RangeValue_SmallChange_Property@Schema@DirectUI@@2HA	3095	0x14005e13c
?RangeValue_Value_Property@Schema@DirectUI@@2HA	3096	0x140051ce8
?RawActionProc@AnimationStrip@DirectUI@@KAXPEAUGMA_ACTIONINFO@@@Z	3097	0x14004da60
?RawActionProc@Movie@DirectUI@@SAXPEAUGMA_ACTIONINFO@@@Z	3098	0x140059e48
?ReadOnlyProp@TouchEditBase@DirectUI@@SAPEBUPropertyInfo@2@XZ	3099	0x140044910
?Recalc@AccessibleButton@DirectUI@@QEAAXXZ	3100	0x140069080
?ReferencePointProp@RefPointElement@DirectUI@@SAPEBUPropertyInfo@2@XZ	3101	0x1400686c0
?ReflowStyle@PVLAnimation@DirectUI@@SA?AVUID@@XZ	3102	0x14006b928
?RefreshContent@TouchEdit2@DirectUI@@UEAAJXZ	3103	0x140013530
?RefreshContent@TouchEditBase@DirectUI@@UEAAJXZ	3104	0x14003e6e0
?Register@AccessibleButton@DirectUI@@SAJXZ	3105	0x140012110
?Register@AnimationStrip@DirectUI@@SAJXZ	3106	0x140077d64
?Register@AutoButton@DirectUI@@SAJXZ	3107	0x14006f040
?Register@BaseScrollViewer@DirectUI@@SAJXZ	3108	0x1400610e4
?Register@Bind@DirectUI@@SAJXZ	3109	0x140053d54
?Register@Browser@DirectUI@@SAJXZ	3110	0x14005eb1c
?Register@Button@DirectUI@@SAJXZ	3111	0x140017f88
?Register@CCAVI@DirectUI@@SAJXZ	3112	0x14005c668
?Register@CCBase@DirectUI@@SAJXZ	3113	0x140035f58
?Register@CCBaseCheckRadioButton@DirectUI@@SAJXZ	3114	0x1400641d4
?Register@CCBaseScrollBar@DirectUI@@SAJXZ	3115	0x140005e34
?Register@CCCheckBox@DirectUI@@SAJXZ	3116	0x1400083c4
?Register@CCCommandLink@DirectUI@@SAJXZ	3117	0x140028a00
?Register@CCHScrollBar@DirectUI@@SAJXZ	3118	0x140016414
?Register@CCListBox@DirectUI@@SAJXZ	3119	0x140030acc
?Register@CCListView@DirectUI@@SAJXZ	3120	0x140052908
?Register@CCProgressBar@DirectUI@@SAJXZ	3121	0x140077548
?Register@CCPushButton@DirectUI@@SAJXZ	3122	0x14001bf20
?Register@CCRadioButton@DirectUI@@SAJXZ	3123	0x1400484fc
?Register@CCSysLink@DirectUI@@SAJXZ	3124	0x140061110
?Register@CCTrackBar@DirectUI@@SAJXZ	3125	0x140020000
?Register@CCTreeView@DirectUI@@SAJXZ	3126	0x140073dbc
?Register@CCVScrollBar@DirectUI@@SAJXZ	3127	0x14004cf7c
?Register@CheckBoxGlyph@DirectUI@@SAJXZ	3128	0x1400433d4
?Register@ClassInfoBase@DirectUI@@QEAAJXZ	3129	0x14003c360
?Register@Clipper@DirectUI@@SAJXZ	3130	0x140045f18
?Register@Combobox@DirectUI@@SAJXZ	3131	0x14004a2b8
?Register@DialogElement@DirectUI@@SAJXZ	3132	0x140057a50
?Register@Edit@DirectUI@@SAJXZ	3133	0x14001a8d0
?Register@Element@DirectUI@@SAJXZ	3134	0x1400631c8
?Register@ElementWithHWND@DirectUI@@SAJXZ	3135	0x14006d93c
?Register@Expandable@DirectUI@@SAJXZ	3136	0x1400049f4
?Register@Expando@DirectUI@@SAJXZ	3137	0x140079d6c
?Register@ExpandoButtonGlyph@DirectUI@@SAJXZ	3138	0x140046c84
?Register@HWNDElement@DirectUI@@SAJXZ	3139	0x14001d670
?Register@HWNDHost@DirectUI@@SAJXZ	3140	0x14006c280
?Register@ItemList@DirectUI@@SAJXZ	3141	0x1400362f4
?Register@Macro@DirectUI@@SAJXZ	3142	0x14002bf98
?Register@ModernProgressBar@DirectUI@@SAJXZ	3143	0x140060b94
?Register@ModernProgressRing@DirectUI@@SAJXZ	3144	0x14004a790
?Register@Movie@DirectUI@@SAJXZ	3145	0x140031ec4
?Register@Navigator@DirectUI@@SAJXZ	3146	0x140050c38
?Register@PText@DirectUI@@SAJXZ	3147	0x140005690
?Register@Page@DirectUI@@SAJXZ	3148	0x1400740c0
?Register@Pages@DirectUI@@SAJXZ	3149	0x14002d314
?Register@Progress@DirectUI@@SAJXZ	3150	0x140018fc8
?Register@PushButton@DirectUI@@SAJXZ	3151	0x14005314c
?Register@RadioButtonGlyph@DirectUI@@SAJXZ	3152	0x140044e8c
?Register@RefPointElement@DirectUI@@SAJXZ	3153	0x14006ebdc
?Register@RepeatButton@DirectUI@@SAJXZ	3154	0x1400114e0
?Register@Repeater@DirectUI@@SAJXZ	3155	0x140041948
?Register@RichText@DirectUI@@SAJXZ	3156	0x14002f750
?Register@ScrollBar@DirectUI@@SAJXZ	3157	0x14001b6d8
?Register@ScrollViewer@DirectUI@@SAJXZ	3158	0x14002f698
?Register@Selector@DirectUI@@SAJXZ	3159	0x140028f88
?Register@SelectorNoDefault@DirectUI@@SAJXZ	3160	0x140008148
?Register@SemanticZoomToggle@DirectUI@@SAJXZ	3161	0x14000b874
?Register@StyledScrollViewer@DirectUI@@SAJXZ	3162	0x14000be9c
?Register@TextGraphic@DirectUI@@SAJXZ	3163	0x140019ce8
?Register@Thumb@DirectUI@@SAJXZ	3164	0x140008b08
?Register@TouchButton@DirectUI@@SAJXZ	3165	0x140069494
?Register@TouchCheckBox@DirectUI@@SAJXZ	3166	0x1400287d8
?Register@TouchCheckBoxGlyph@DirectUI@@SAJXZ	3167	0x140079708
?Register@TouchCommandButton@DirectUI@@SAJXZ	3168	0x14006d208
?Register@TouchEdit2@DirectUI@@SAJXZ	3169	0x1400477c8
?Register@TouchEditBase@DirectUI@@SAJXZ	3170	0x140053764
?Register@TouchHWNDElement@DirectUI@@SAJXZ	3171	0x14003bcdc
?Register@TouchHyperLink@DirectUI@@SAJXZ	3172	0x140074ab0
?Register@TouchRepeatButton@DirectUI@@SAJXZ	3173	0x14007562c
?Register@TouchScrollBar@DirectUI@@SAJXZ	3174	0x14004d428
?Register@TouchSelect@DirectUI@@SAJXZ	3175	0x14005dd50
?Register@TouchSelectItem@DirectUI@@SAJXZ	3176	0x14000da20
?Register@TouchSlider@DirectUI@@SAJXZ	3177	0x140059ea4
?Register@TouchSwitch@DirectUI@@SAJXZ	3178	0x140057970
?Register@UnknownElement@DirectUI@@SAJXZ	3179	0x14007bfb4
?Register@Viewer@DirectUI@@SAJXZ	3180	0x1400763f4
?Register@XBaby@DirectUI@@SAJXZ	3181	0x14004921c
?Register@XElement@DirectUI@@SAJXZ	3182	0x14005b4f0
?RegisterForAnimationStatusChanges@TouchHWNDElement@DirectUI@@QEAAXXZ	3183	0x14005f5b8
?RegisterForIHMChanges@TouchHWNDElement@DirectUI@@QEAAJXZ	3184	0x140049fec
?RegisterForMonitorPowerChanges@TouchHWNDElement@DirectUI@@QEAAJXZ	3185	0x14003b744
?RegisteredDefaultButtonProp@DialogElement@DirectUI@@SAPEBUPropertyInfo@2@XZ	3186	0x14001dad8
?Release@ClassInfoBase@DirectUI@@UEAAHXZ	3187	0x14003544c
?Release@DuiAccessible@DirectUI@@UEAAKXZ	3188	0x140011a28
?Release@Element@DirectUI@@QEAAKXZ	3189	0x140038ce0
?Release@ElementProvider@DirectUI@@UEAAKXZ	3190	0x1400064b8
?Release@ExpandCollapseProvider@DirectUI@@UEAAKXZ	3191	0x14002159c
?Release@GridItemProvider@DirectUI@@UEAAKXZ	3192	0x140061f28
?Release@GridProvider@DirectUI@@UEAAKXZ	3193	0x140050bf0
?Release@HWNDElementProvider@DirectUI@@UEAAKXZ	3194	0x14005acd0
?Release@InvokeProvider@DirectUI@@UEAAKXZ	3195	0x14005724c
?Release@RangeValueProvider@DirectUI@@UEAAKXZ	3196	0x14005fae0
?Release@RefcountBase@DirectUI@@QEAAJXZ	3197	0x14001cc98
?Release@ScrollItemProvider@DirectUI@@UEAAKXZ	3198	0x140075834
?Release@ScrollProvider@DirectUI@@UEAAKXZ	3199	0x1400512d4
?Release@SelectionItemProvider@DirectUI@@UEAAKXZ	3200	0x140041a1c
?Release@SelectionProvider@DirectUI@@UEAAKXZ	3201	0x14000d9bc
?Release@TableItemProvider@DirectUI@@UEAAKXZ	3202	0x14000f7b8
?Release@TableProvider@DirectUI@@UEAAKXZ	3203	0x140040ba8
?Release@ToggleProvider@DirectUI@@UEAAKXZ	3204	0x140002ae0
?Release@Value@DirectUI@@QEAAXXZ	3205	0x140045244
?Release@ValueProvider@DirectUI@@UEAAKXZ	3206	0x14004f7a8
?Release@XProvider@DirectUI@@UEAAKXZ	3207	0x140067510
?ReleaseSnapshot@TouchScrollViewer@DirectUI@@SA?AVUID@@XZ	3208	0x140042968
?ReloadIcon@Value@DirectUI@@CAPEAUHICON__@@PEAUGraphic@2@M@Z	3209	0x14006d500
?Remove@Element@DirectUI@@QEAAJPEAV12@@Z	3210	0x14007260c
?Remove@Element@DirectUI@@UEAAJPEAPEAV12@I@Z	3211	0x14004c774
?Remove@ElementProviderManager@DirectUI@@SAXPEAVElementProvider@2@@Z	3212	0x14000b5d4
?Remove@LinkedList@DirectUI@@QEAAXPEAVLinkedListNode@2@@Z	3213	0x140014428
?RemoveAll@Element@DirectUI@@QEAAJXZ	3214	0x140012174
?RemoveAll@TouchSelect@DirectUI@@QEAAXXZ	3215	0x140049dd8
?RemoveBehavior@Element@DirectUI@@UEAAJPEAUIDuiBehavior@@@Z	3216	0x1400680e0
?RemoveChild@ClassInfoBase@DirectUI@@UEAAXXZ	3217	0x1400587a4
?RemoveFromSelection@SelectionItemProvider@DirectUI@@UEAAJXZ	3218	0x140006e10
?RemoveItem@TouchSelect@DirectUI@@QEAAJH@Z	3219	0x14003c778
?RemoveListener@Element@DirectUI@@QEAAXPEAUIElementListener@2@@Z	3220	0x140076920
?RemoveLocalValue@Element@DirectUI@@QEAAJP6APEBUPropertyInfo@2@XZ@Z	3221	0x1400175b4
?RemoveLocalValue@Element@DirectUI@@QEAAJPEBUPropertyInfo@2@@Z	3222	0x14003c848
?RemoveRichDuiTooltip@TouchSlider@DirectUI@@QEAAXXZ	3223	0x14006a2a0
?RemoveShortcutFromName@Element@DirectUI@@AEAAPEAGPEBG@Z	3224	0x140033844
?RemoveTail@LinkedList@DirectUI@@QEAAPEAVLinkedListNode@2@XZ	3225	0x1400266f4
?RemoveTooltip@Element@DirectUI@@MEAAXPEAV12@@Z	3226	0x14000e710
?RemoveTooltip@HWNDElement@DirectUI@@UEAAXPEAVElement@2@@Z	3227	0x14003c378
?RemoveTooltip@TouchHWNDElement@DirectUI@@UEAAXPEAVElement@2@@Z	3228	0x14003d590
?RepeatClick@TouchRepeatButton@DirectUI@@SA?AVUID@@XZ	3229	0x140031c6c
?RepeatProp@Movie@DirectUI@@SAPEBUPropertyInfo@2@XZ	3230	0x14005bde8
?Reset@DuiAccessible@DirectUI@@UEAAJXZ	3231	0x140026dc0
?Reset@HWNDHostAccessible@DirectUI@@UEAAJXZ	3232	0x14004e0e4
?ResetInputState@TouchScrollViewer@DirectUI@@QEAAJXZ	3233	0x14005c698
?ResetManipulations@TouchScrollViewer@DirectUI@@QEAAJXZ	3234	0x140044ff0
?ResolveBindings@Macro@DirectUI@@IEAAXXZ	3235	0x140066520
?RestoreFocus@NativeHWNDHost@DirectUI@@QEAAHXZ	3236	0x140056058
?Resume@Movie@DirectUI@@QEAAXXZ	3237	0x14001e058
?ReturnValueParser@DUIXmlParser@DirectUI@@IEAAXPEAVValueParser@ParserTools@2@@Z	3238	0x140051c3c
?Rewind@Movie@DirectUI@@QEAAXXZ	3239	0x1400202c4
?RichTooltipShowing@TouchHWNDElement@DirectUI@@SA?AVUID@@XZ	3240	0x140062c78
?RightClick@TouchButton@DirectUI@@SA?AVUID@@XZ	3241	0x140062dc8
?RuntimeIdProperty@Schema@DirectUI@@2HA	3242	0x14003db24
?STACKDEPTH@CallstackTracker@DirectUI@@0HB	3243	0x140034b0c
?SaveFocus@NativeHWNDHost@DirectUI@@QEAAXXZ	3244	0x14001fb84
?ScaleChanged@TouchHWNDElement@DirectUI@@SA?AVUID@@XZ	3245	0x140012d60
?ScaleFactorProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	3246	0x140018b18
?Scroll@BaseScrollBar@DirectUI@@SA?AVUID@@XZ	3247	0x140077bf0
?Scroll@ScrollProvider@DirectUI@@UEAAJW4ScrollAmount@@0@Z	3248	0x140076268
?Scroll@ScrollProxy@DirectUI@@AEAAJW4ScrollAmount@@0@Z	3249	0x14001ba34
?ScrollBarControlType@Schema@DirectUI@@2HA	3250	0x140001844
?ScrollIntoView@ScrollItemProvider@DirectUI@@UEAAJXZ	3251	0x1400613c0
?ScrollItemPattern@Schema@DirectUI@@2HA	3252	0x14005c500
?ScrollLine@ScrollProxy@DirectUI@@AEAAJ_N0@Z	3253	0x140064c78
?ScrollPaddingProp@TouchScrollViewer@DirectUI@@SAPEBUPropertyInfo@2@XZ	3254	0x14006b478
?ScrollPage@ScrollProxy@DirectUI@@AEAAJ_N0@Z	3255	0x140005f4c
?ScrollPattern@Schema@DirectUI@@2HA	3256	0x14000a600
?ScrollToHorizontalPosition@ScrollProxy@DirectUI@@AEAAJH_N@Z	3257	0x140063580
?ScrollToVerticalPosition@ScrollProxy@DirectUI@@AEAAJH_N@Z	3258	0x14005fa10
?Scroll_HorizontalScrollPercent_Property@Schema@DirectUI@@2HA	3259	0x14001cdcc
?Scroll_HorizontalViewSize_Property@Schema@DirectUI@@2HA	3260	0x140038088
?Scroll_HorizontallyScrollable_Property@Schema@DirectUI@@2HA	3261	0x14005dc58
?Scroll_VerticalScrollPercent_Property@Schema@DirectUI@@2HA	3262	0x140057d9c
?Scroll_VerticalViewSize_Property@Schema@DirectUI@@2HA	3263	0x140069800
?Scroll_VerticallyScrollable_Property@Schema@DirectUI@@2HA	3264	0x140018e8c
?Select@SelectionItemProvider@DirectUI@@UEAAJXZ	3265	0x14005d870
?Select@SelectorSelectionItemProxy@DirectUI@@AEAAJXZ	3266	0x140049778
?SelectAll@TouchEdit2@DirectUI@@QEAAJXZ	3267	0x14007c31c
?SelectNone@TouchEdit2@DirectUI@@QEAAJXZ	3268	0x14004cc28
?SelectedProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	3269	0x14006fbd0
?SelectionBackgroundColorProp@TouchEditBase@DirectUI@@SAPEBUPropertyInfo@2@XZ	3270	0x14002594c
?SelectionChange@Combobox@DirectUI@@SA?AVUID@@XZ	3271	0x14001da54
?SelectionChange@Selector@DirectUI@@SA?AVUID@@XZ	3272	0x140046654
?SelectionChange@TouchSelect@DirectUI@@SA?AVUID@@XZ	3273	0x14000cd10
?SelectionForegroundColorProp@TouchEditBase@DirectUI@@SAPEBUPropertyInfo@2@XZ	3274	0x140012150
?SelectionInvalidatedEvent@Schema@DirectUI@@2HA	3275	0x14007a0e4
?SelectionItemElementAddedToSelectionEvent@Schema@DirectUI@@2HA	3276	0x14005ea1c
?SelectionItemElementRemovedFromSelectionEvent@Schema@DirectUI@@2HA	3277	0x140059f0c
?SelectionItemElementSelectedEvent@Schema@DirectUI@@2HA	3278	0x14004f540
?SelectionItemPattern@Schema@DirectUI@@2HA	3279	0x14004c030
?SelectionItem_IsSelected_Property@Schema@DirectUI@@2HA	3280	0x14004904c
?SelectionItem_SelectionContainer_Property@Schema@DirectUI@@2HA	3281	0x140035d6c
?SelectionPattern@Schema@DirectUI@@2HA	3282	0x14003b9d4
?SelectionProp@Combobox@DirectUI@@SAPEBUPropertyInfo@2@XZ	3283	0x140060c5c
?SelectionProp@Selector@DirectUI@@SAPEBUPropertyInfo@2@XZ	3284	0x14004c8f4
?SelectionProp@TouchSelect@DirectUI@@SAPEBUPropertyInfo@2@XZ	3285	0x140052cfc
?Selection_CanSelectMultiple_Property@Schema@DirectUI@@2HA	3286	0x14005d844
?Selection_IsSelectionRequired_Property@Schema@DirectUI@@2HA	3287	0x140056ca0
?Selection_Selection_Property@Schema@DirectUI@@2HA	3288	0x140016c68
?SemanticChange@TouchScrollViewer@DirectUI@@SA?AVUID@@XZ	3289	0x14000e6ec
?SemanticZoomControlType@Schema@DirectUI@@2HA	3290	0x140058a50
?SendParseError@DUIXmlParser@DirectUI@@IEAAXPEBG0HHJ@Z	3291	0x140058134
?SendParseError@DUIXmlParser@DirectUI@@IEAAXPEBG0PEAUIXmlReader@@J@Z	3292	0x140059f08
?SeparatorControlType@Schema@DirectUI@@2HA	3293	0x140043254
?SetAbsorbsShortcut@Element@DirectUI@@QEAAJ_N@Z	3294	0x1400056b8
?SetAccDefAction@Element@DirectUI@@QEAAJPEBG@Z	3295	0x140042c1c
?SetAccDesc@Element@DirectUI@@QEAAJPEBG@Z	3296	0x140029404
?SetAccHelp@Element@DirectUI@@QEAAJPEBG@Z	3297	0x140055cfc
?SetAccItemStatus@Element@DirectUI@@QEAAJPEBG@Z	3298	0x140055fe0
?SetAccItemType@Element@DirectUI@@QEAAJPEBG@Z	3299	0x14006c88c
?SetAccName@Element@DirectUI@@QEAAJPEBG@Z	3300	0x140055528
?SetAccRole@Element@DirectUI@@QEAAJH@Z	3301	0x140043ee4
?SetAccState@Element@DirectUI@@QEAAJH@Z	3302	0x14004efa0
?SetAccValue@Element@DirectUI@@QEAAJPEBG@Z	3303	0x140007e80
?SetAccessible@Element@DirectUI@@QEAAJ_N@Z	3304	0x140050be4
?SetActive@Element@DirectUI@@QEAAJH@Z	3305	0x1400166ac
?SetActiveState@TouchScrollBar@DirectUI@@QEAAXW4ActiveState@2@_N@Z	3306	0x1400433c8
?SetActivityOccuring@ModernProgressBar@DirectUI@@QEAAJ_N@Z	3307	0x14000cdf0
?SetActivityOccuring@ModernProgressRing@DirectUI@@QEAAJ_N@Z	3308	0x1400620f8
?SetAddLayeredRef@ModernProgressBar@DirectUI@@QEAAJ_N@Z	3309	0x140045310
?SetAddLayeredRef@ModernProgressRing@DirectUI@@QEAAJ_N@Z	3310	0x1400677bc
?SetAliasedRendering@RichText@DirectUI@@QEAAJ_N@Z	3311	0x140053974
?SetAllowArrowOut@TouchScrollViewer@DirectUI@@QEAAJ_N@Z	3312	0x14007a5ac
?SetAlpha@Element@DirectUI@@QEAAJH@Z	3313	0x14007bc4c
?SetAnimatePopupOnDismiss@TouchSelect@DirectUI@@QEAAJ_N@Z	3314	0x140034a6c
?SetAnimation@Element@DirectUI@@QEAAJH@Z	3315	0x1400620e4
?SetAutoGrouping@CCRadioButton@DirectUI@@QEAAJ_N@Z	3316	0x140070eec
?SetAutoHeight@ModernProgressBar@DirectUI@@QEAAJ_N@Z	3317	0x140011e70
?SetAutoStart@Movie@DirectUI@@QEAAJ_N@Z	3318	0x1400378b8
?SetAutoStop@Movie@DirectUI@@QEAAJ_N@Z	3319	0x14007b4e0
?SetBackgroundColor@Element@DirectUI@@QEAAJAEBUFill@2@@Z	3320	0x1400342b4
?SetBackgroundColor@Element@DirectUI@@QEAAJK@Z	3321	0x140013fd4
?SetBackgroundColor@Element@DirectUI@@QEAAJKKE@Z	3322	0x14003c944
?SetBackgroundColor@Element@DirectUI@@QEAAJKKKE@Z	3323	0x140077c50
?SetBackgroundColor@Element@DirectUI@@QEAAJPEBGHH@Z	3324	0x140076638
?SetBackgroundOwnerID@HWNDHost@DirectUI@@QEAAJPEBG@Z	3325	0x14004b470
?SetBackgroundStdColor@Element@DirectUI@@QEAAJH@Z	3326	0x140040a64
?SetBaseline@RichText@DirectUI@@QEAAJH@Z	3327	0x140066710
?SetBorderColor@Element@DirectUI@@QEAAJK@Z	3328	0x14005dd38
?SetBorderGradientColor@Element@DirectUI@@QEAAJKKE@Z	3329	0x14005f398
?SetBorderStdColor@Element@DirectUI@@QEAAJH@Z	3330	0x140039654
?SetBorderStyle@Element@DirectUI@@QEAAJH@Z	3331	0x14005da7c
?SetBorderThickness@Element@DirectUI@@QEAAJHHHH@Z	3332	0x1400228d4
?SetBuffering@TouchSlider@DirectUI@@QEAAJH@Z	3333	0x140048a00
?SetButtonClassAcceptsEnterKey@DialogElement@DirectUI@@QEAAJ_N@Z	3334	0x14005aa24
?SetButtonClassAcceptsEnterKey@XBaby@DirectUI@@UEAAJ_N@Z	3335	0x14003ae5c
?SetButtonClassAcceptsEnterKey@XProvider@DirectUI@@UEAAJ_N@Z	3336	0x140063d24
?SetCache@RichText@DirectUI@@QEAAXKPEAUIDUIRichTextCache@@@Z	3337	0x1400588b4
?SetCacheDirty@Layout@DirectUI@@IEAAXXZ	3338	0x140059de0
?SetCaptured@Button@DirectUI@@QEAAJ_N@Z	3339	0x140061d0c
?SetCaptured@TouchButton@DirectUI@@QEAAJ_N@Z	3340	0x14002af7c
?SetCaretPosition@TouchEdit2@DirectUI@@QEAAJJ@Z	3341	0x140044c68
?SetCheckedState@TouchCheckBox@DirectUI@@QEAAJW4CheckedStateFlags@2@@Z	3342	0x14006c52c
?SetClass@Element@DirectUI@@QEAAJPEBG@Z	3343	0x14001e314
?SetClassInfoPtr@AccessibleButton@DirectUI@@SAXPEAUIClassInfo@2@@Z	3344	0x14006f840
?SetClassInfoPtr@AnimationStrip@DirectUI@@SAXPEAUIClassInfo@2@@Z	3345	0x1400765a0
?SetClassInfoPtr@AutoButton@DirectUI@@SAXPEAUIClassInfo@2@@Z	3346	0x14002b138
?SetClassInfoPtr@BaseScrollViewer@DirectUI@@SAXPEAUIClassInfo@2@@Z	3347	0x14005d87c
?SetClassInfoPtr@Bind@DirectUI@@SAXPEAUIClassInfo@2@@Z	3348	0x14007b450
?SetClassInfoPtr@Browser@DirectUI@@SAXPEAUIClassInfo@2@@Z	3349	0x140047060
?SetClassInfoPtr@Button@DirectUI@@SAXPEAUIClassInfo@2@@Z	3350	0x140062a98
?SetClassInfoPtr@CCAVI@DirectUI@@SAXPEAUIClassInfo@2@@Z	3351	0x140075f18
?SetClassInfoPtr@CCBase@DirectUI@@SAXPEAUIClassInfo@2@@Z	3352	0x14003d8b8
?SetClassInfoPtr@CCBaseCheckRadioButton@DirectUI@@SAXPEAUIClassInfo@2@@Z	3353	0x140051e5c
?SetClassInfoPtr@CCBaseScrollBar@DirectUI@@SAXPEAUIClassInfo@2@@Z	3354	0x140072c8c
?SetClassInfoPtr@CCCheckBox@DirectUI@@SAXPEAUIClassInfo@2@@Z	3355	0x14001b09c
?SetClassInfoPtr@CCCommandLink@DirectUI@@SAXPEAUIClassInfo@2@@Z	3356	0x14004e044
?SetClassInfoPtr@CCHScrollBar@DirectUI@@SAXPEAUIClassInfo@2@@Z	3357	0x1400309f4
?SetClassInfoPtr@CCListBox@DirectUI@@SAXPEAUIClassInfo@2@@Z	3358	0x14002d90c
?SetClassInfoPtr@CCListView@DirectUI@@SAXPEAUIClassInfo@2@@Z	3359	0x140044d48
?SetClassInfoPtr@CCProgressBar@DirectUI@@SAXPEAUIClassInfo@2@@Z	3360	0x14001e1e4
?SetClassInfoPtr@CCPushButton@DirectUI@@SAXPEAUIClassInfo@2@@Z	3361	0x14003bd80
?SetClassInfoPtr@CCRadioButton@DirectUI@@SAXPEAUIClassInfo@2@@Z	3362	0x14000a334
?SetClassInfoPtr@CCSysLink@DirectUI@@SAXPEAUIClassInfo@2@@Z	3363	0x140025508
?SetClassInfoPtr@CCTrackBar@DirectUI@@SAXPEAUIClassInfo@2@@Z	3364	0x14003c83c
?SetClassInfoPtr@CCTreeView@DirectUI@@SAXPEAUIClassInfo@2@@Z	3365	0x14001411c
?SetClassInfoPtr@CCVScrollBar@DirectUI@@SAXPEAUIClassInfo@2@@Z	3366	0x14004752c
?SetClassInfoPtr@CheckBoxGlyph@DirectUI@@SAXPEAUIClassInfo@2@@Z	3367	0x140067058
?SetClassInfoPtr@Clipper@DirectUI@@SAXPEAUIClassInfo@2@@Z	3368	0x14004ad70
?SetClassInfoPtr@Combobox@DirectUI@@SAXPEAUIClassInfo@2@@Z	3369	0x140054290
?SetClassInfoPtr@DialogElement@DirectUI@@SAXPEAUIClassInfo@2@@Z	3370	0x140077368
?SetClassInfoPtr@Edit@DirectUI@@SAXPEAUIClassInfo@2@@Z	3371	0x140041a88
?SetClassInfoPtr@Element@DirectUI@@SAXPEAUIClassInfo@2@@Z	3372	0x140056460
?SetClassInfoPtr@ElementWithHWND@DirectUI@@SAXPEAUIClassInfo@2@@Z	3373	0x140045334
?SetClassInfoPtr@Expandable@DirectUI@@SAXPEAUIClassInfo@2@@Z	3374	0x140072808
?SetClassInfoPtr@Expando@DirectUI@@SAXPEAUIClassInfo@2@@Z	3375	0x140059d3c
?SetClassInfoPtr@ExpandoButtonGlyph@DirectUI@@SAXPEAUIClassInfo@2@@Z	3376	0x14004e75c
?SetClassInfoPtr@HWNDElement@DirectUI@@SAXPEAUIClassInfo@2@@Z	3377	0x140064630
?SetClassInfoPtr@HWNDHost@DirectUI@@SAXPEAUIClassInfo@2@@Z	3378	0x140038e6c
?SetClassInfoPtr@Macro@DirectUI@@SAXPEAUIClassInfo@2@@Z	3379	0x14004b868
?SetClassInfoPtr@Movie@DirectUI@@SAXPEAUIClassInfo@2@@Z	3380	0x140051d40
?SetClassInfoPtr@Navigator@DirectUI@@SAXPEAUIClassInfo@2@@Z	3381	0x14001e034
?SetClassInfoPtr@PText@DirectUI@@SAXPEAUIClassInfo@2@@Z	3382	0x1400275ac
?SetClassInfoPtr@Page@DirectUI@@SAXPEAUIClassInfo@2@@Z	3383	0x14002d37c
?SetClassInfoPtr@Pages@DirectUI@@SAXPEAUIClassInfo@2@@Z	3384	0x14003a018
?SetClassInfoPtr@Progress@DirectUI@@SAXPEAUIClassInfo@2@@Z	3385	0x14003eb94
?SetClassInfoPtr@PushButton@DirectUI@@SAXPEAUIClassInfo@2@@Z	3386	0x14001c0e0
?SetClassInfoPtr@RadioButtonGlyph@DirectUI@@SAXPEAUIClassInfo@2@@Z	3387	0x14007a044
?SetClassInfoPtr@RefPointElement@DirectUI@@SAXPEAUIClassInfo@2@@Z	3388	0x140020570
?SetClassInfoPtr@RepeatButton@DirectUI@@SAXPEAUIClassInfo@2@@Z	3389	0x1400701dc
?SetClassInfoPtr@Repeater@DirectUI@@SAXPEAUIClassInfo@2@@Z	3390	0x140078380
?SetClassInfoPtr@ScrollBar@DirectUI@@SAXPEAUIClassInfo@2@@Z	3391	0x140075998
?SetClassInfoPtr@ScrollViewer@DirectUI@@SAXPEAUIClassInfo@2@@Z	3392	0x1400101a8
?SetClassInfoPtr@Selector@DirectUI@@SAXPEAUIClassInfo@2@@Z	3393	0x140012b8c
?SetClassInfoPtr@SelectorNoDefault@DirectUI@@SAXPEAUIClassInfo@2@@Z	3394	0x140006060
?SetClassInfoPtr@StyledScrollViewer@DirectUI@@SAXPEAUIClassInfo@2@@Z	3395	0x14000a894
?SetClassInfoPtr@TextGraphic@DirectUI@@SAXPEAUIClassInfo@2@@Z	3396	0x14002d748
?SetClassInfoPtr@Thumb@DirectUI@@SAXPEAUIClassInfo@2@@Z	3397	0x140029b50
?SetClassInfoPtr@UnknownElement@DirectUI@@SAXPEAUIClassInfo@2@@Z	3398	0x14006e5f8
?SetClassInfoPtr@Viewer@DirectUI@@SAXPEAUIClassInfo@2@@Z	3399	0x14003dd04
?SetClassInfoPtr@XBaby@DirectUI@@SAXPEAUIClassInfo@2@@Z	3400	0x140062680
?SetClassInfoPtr@XElement@DirectUI@@SAXPEAUIClassInfo@2@@Z	3401	0x140056b2c
?SetClient@BorderLayout@DirectUI@@AEAAXPEAVElement@2@@Z	3402	0x1400074b0
?SetColorFontPaletteIndex@RichText@DirectUI@@QEAAJH@Z	3403	0x140042390
?SetCompositedText@Element@DirectUI@@QEAAJ_N@Z	3404	0x140032a94
?SetCompositingQuality@Movie@DirectUI@@QEAAJH@Z	3405	0x14000cd48
?SetConnect@Bind@DirectUI@@QEAAJPEBG@Z	3406	0x14002bc2c
?SetConstrainLayout@RichText@DirectUI@@QEAAJH@Z	3407	0x14001b648
?SetContact@TouchScrollViewer@DirectUI@@QEAAJI_N@Z	3408	0x140007970
?SetContactNeeded@TouchScrollViewer@DirectUI@@SA?AVUID@@XZ	3409	0x140014d90
?SetContactNotify@TouchScrollViewer@DirectUI@@SA?AVUID@@XZ	3410	0x140077148
?SetContentAlign@Element@DirectUI@@QEAAJH@Z	3411	0x14005ca00
?SetContentGraphic@Element@DirectUI@@QEAAJPEBGEI@Z	3412	0x14003e5c4
?SetContentGraphic@Element@DirectUI@@QEAAJPEBGGG@Z	3413	0x14004a33c
?SetContentString@Element@DirectUI@@QEAAJPEBG@Z	3414	0x140029f7c
?SetCursor@Element@DirectUI@@QEAAJPEBG@Z	3415	0x140053340
?SetCursorHandle@Element@DirectUI@@QEAAJPEAUHICON__@@@Z	3416	0x140051984
?SetDWriteFontCollection@RichText@DirectUI@@QEAAXPEAUIDWriteFontCollection@@@Z	3417	0x14005edf8
?SetDWriteTextLayout@RichText@DirectUI@@QEAAXPEAUIDWriteTextLayout@@@Z	3418	0x140077cd8
?SetDataEngine@Repeater@DirectUI@@QEAAXPEAUIDataEngine@2@@Z	3419	0x140068484
?SetDataEntry@Macro@DirectUI@@QEAAXPEAUIDataEntry@2@PEAVElement@2@@Z	3420	0x1400031d4
?SetDataEntry@PText@DirectUI@@QEAAXPEAUIDataEntry@2@@Z	3421	0x1400185d4
?SetDefaultButtonTracking@DialogElement@DirectUI@@UEAAJ_N@Z	3422	0x140055a90
?SetDefaultButtonTracking@XBaby@DirectUI@@UEAAJ_N@Z	3423	0x1400545a8
?SetDefaultButtonTracking@XProvider@DirectUI@@UEAAJ_N@Z	3424	0x140047c68
?SetDefaultFocusID@NativeHWNDHost@DirectUI@@QEAAXPEBG@Z	3425	0x1400650b0
?SetDefaultGraphicType@Macro@DirectUI@@QEAAXE_N@Z	3426	0x140011c6c
?SetDefaultHInstance@DUIXmlParser@DirectUI@@QEAAXPEAUHINSTANCE__@@@Z	3427	0x14005d60c
?SetDefaultState@CCPushButton@DirectUI@@IEAAXKK@Z	3428	0x140057330
?SetDelegateEventHandler@TouchScrollViewer@DirectUI@@QEAAJPEAUIUnknown@@@Z	3429	0x1400398bc
?SetDeterminate@ModernProgressBar@DirectUI@@QEAAJ_N@Z	3430	0x14007a880
?SetDirection@Element@DirectUI@@QEAAJH@Z	3431	0x14002c020
?SetDirty@Edit@DirectUI@@QEAAJ_N@Z	3432	0x140064158
?SetDisableAccTextExtend@RichText@DirectUI@@QEAAJ_N@Z	3433	0x14006b5bc
?SetDisableMouseInRectCheck@TouchRepeatButton@DirectUI@@QEAAJ_N@Z	3434	0x140050744
?SetDisableOffscreenCaching@TouchScrollViewer@DirectUI@@QEAAX_N@Z	3435	0x140056f20
?SetDrawOutlines@Movie@DirectUI@@QEAAJ_N@Z	3436	0x14006ca28
?SetDynamicScaling@DUIXmlParser@DirectUI@@QEAAXW4DynamicScaleParsing@2@@Z	3437	0x140061b20
?SetEdgeHighlightColor@Element@DirectUI@@QEAAJK@Z	3438	0x14007c30c
?SetEdgeHighlightThickness@Element@DirectUI@@QEAAJHHHH@Z	3439	0x14005d0f8
?SetElementMovesOnIHMNotify@TouchEditBase@DirectUI@@QEAAJ_N@Z	3440	0x14007addc
?SetEnabled@Element@DirectUI@@QEAAJ_N@Z	3441	0x14001c518
?SetEncodedContentString@Element@DirectUI@@QEAAJPEBG@Z	3442	0x140015450
?SetEnforceSize@PushButton@DirectUI@@QEAAJ_N@Z	3443	0x140077400
?SetEnsureVisibleUseLayoutCoordinates@Viewer@DirectUI@@QEAAX_N@Z	3444	0x1400378f8
?SetError@DUIFactory@DirectUI@@QEAAXPEBGZZ	3445	0x140006aac
?SetExpand@Macro@DirectUI@@QEAAJPEBG@Z	3446	0x1400471e0
?SetExpanded@Expandable@DirectUI@@QEAAJ_N@Z	3447	0x14002cf64
?SetFilterOnPaste@TouchEditBase@DirectUI@@QEAAJ_N@Z	3448	0x14004efec
?SetFireContinuousSliderEvent@TouchSlider@DirectUI@@QEAAX_N@Z	3449	0x140037fc8
?SetFlags@TouchHWNDElement@DirectUI@@QEAAJW4TouchHWNDElementFlags@2@0@Z	3450	0x14007b41c
?SetFocus@ElementProvider@DirectUI@@UEAAJXZ	3451	0x140035a04
?SetFocus@HWNDElement@DirectUI@@QEAAX_N@Z	3452	0x14003baf8
?SetFocus@XProvider@DirectUI@@UEAAJPEAVElement@2@@Z	3453	0x14007ad94
?SetFont@Element@DirectUI@@QEAAJPEBG@Z	3454	0x140058acc
?SetFontColorRuns@RichText@DirectUI@@QEAAJPEBG@Z	3455	0x140062d70
?SetFontFace@Element@DirectUI@@QEAAJPEBG@Z	3456	0x140070fcc
?SetFontQuality@Element@DirectUI@@QEAAJH@Z	3457	0x14000a9a4
?SetFontSize@Element@DirectUI@@QEAAJH@Z	3458	0x14003fda4
?SetFontSizeRuns@RichText@DirectUI@@QEAAJPEBG@Z	3459	0x14004bac0
?SetFontStyle@Element@DirectUI@@QEAAJH@Z	3460	0x140054d70
?SetFontWeight@Element@DirectUI@@QEAAJH@Z	3461	0x14000baf8
?SetFontWeightRuns@RichText@DirectUI@@QEAAJPEBG@Z	3462	0x14001c7d0
?SetForceEditTextToLTR@TouchEditBase@DirectUI@@QEAAJ_N@Z	3463	0x14007b6e8
?SetForegroundColor@Element@DirectUI@@QEAAJK@Z	3464	0x14004fff8
?SetForegroundColor@Element@DirectUI@@QEAAJKKE@Z	3465	0x1400691a8
?SetForegroundColor@Element@DirectUI@@QEAAJKKKE@Z	3466	0x14003acdc
?SetForegroundStdColor@Element@DirectUI@@QEAAJH@Z	3467	0x14001bda4
?SetFrameDuration@AnimationStrip@DirectUI@@QEAAJH@Z	3468	0x140033678
?SetFrameIndex@AnimationStrip@DirectUI@@QEAAJH@Z	3469	0x14003417c
?SetFrameWidth@AnimationStrip@DirectUI@@QEAAJH@Z	3470	0x1400605e0
?SetGetSheetCallback@DUIXmlParser@DirectUI@@QEAAXP6APEAVValue@2@PEBGPEAX@Z1@Z	3471	0x140072640
?SetGraphicType@Repeater@DirectUI@@QEAAXE@Z	3472	0x14000f648
?SetHandleEnter@TouchButton@DirectUI@@QEAAJ_N@Z	3473	0x140059b34
?SetHandleEnterKey@DialogElement@DirectUI@@QEAAJ_N@Z	3474	0x14003c6fc
?SetHandleEnterKey@XBaby@DirectUI@@UEAAJ_N@Z	3475	0x14003f1e4
?SetHandleEnterKey@XProvider@DirectUI@@IEAAX_N@Z	3476	0x140055500
?SetHandleGlobalEnter@TouchButton@DirectUI@@QEAAJ_N@Z	3477	0x1400085a0
?SetHeight@Element@DirectUI@@QEAAJH@Z	3478	0x140046ba8
?SetID@Element@DirectUI@@QEAAJPEBG@Z	3479	0x140053ff0
?SetIMEComposing@TouchEditBase@DirectUI@@QEAAJ_N@Z	3480	0x14004f108
?SetIgnoredKeyCombos@TouchEditBase@DirectUI@@QEAAJW4TouchEditFilteredKeyComboFlags@2@0@Z	3481	0x140033028
?SetIndependentAnimations@ModernProgressBar@DirectUI@@QEAAJ_N@Z	3482	0x1400216e8
?SetInnerBorderThickness@TouchEdit2@DirectUI@@QEAAJHHHH@Z	3483	0x1400739b8
?SetInputScope@TouchEdit2@DirectUI@@QEAAJW4__MIDL___MIDL_itf_inputscope_0000_0000_0001@@@Z	3484	0x14006460c
?SetIntegrateIMECandidateList@TouchEditBase@DirectUI@@QEAAJ_N@Z	3485	0x140019fd0
?SetInteractionMode@TouchScrollViewer@DirectUI@@QEAAJH@Z	3486	0x14004fbfc
?SetInterpolationMode@Movie@DirectUI@@QEAAJH@Z	3487	0x14003bcd8
?SetIsContinuous@TouchSlider@DirectUI@@QEAAJ_N@Z	3488	0x140043f84
?SetIsPressed@TouchSlider@DirectUI@@QEAAJ_N@Z	3489	0x140010ca8
?SetIsShowOnOffFeedback@TouchSlider@DirectUI@@QEAAJ_N@Z	3490	0x140032884
?SetIsVertical@TouchSlider@DirectUI@@QEAAJ_N@Z	3491	0x14004c994
?SetItemData@TouchSelect@DirectUI@@QEAAJHPEAUIUnknown@@@Z	3492	0x1400139ec
?SetItemData@TouchSelectItem@DirectUI@@QEAAJPEAUIUnknown@@@Z	3493	0x140027808
?SetItemHeightInPopup@TouchSelect@DirectUI@@QEAAJH@Z	3494	0x1400743bc
?SetItemState@CCTreeView@DirectUI@@QEAAXPEAU_TREEITEM@@I@Z	3495	0x1400329ac
?SetKeyFocus@Element@DirectUI@@UEAAXXZ	3496	0x14004c04c
?SetKeyFocus@HWNDHost@DirectUI@@UEAAXXZ	3497	0x140024f24
?SetKeyFocus@TouchEditBase@DirectUI@@UEAAXXZ	3498	0x1400434e0
?SetKeyFocus@XBaby@DirectUI@@UEAAXXZ	3499	0x14000621c
?SetKeyFocus@XElement@DirectUI@@UEAAXXZ	3500	0x14007c320
?SetKeyboardNavigationCapture@TouchEditBase@DirectUI@@QEAAJW4TouchEditKeyboardNavigationCapture@2@@Z	3501	0x140020cd0
?SetLayout@Element@DirectUI@@QEAAJPEAVLayout@2@@Z	3502	0x1400489ac
?SetLayoutCompletionNotify@Element@DirectUI@@QEAAX_N@Z	3503	0x140013ae4
?SetLayoutPointerToNull@Value@DirectUI@@QEAAXXZ	3504	0x140055dc4
?SetLayoutPos@Element@DirectUI@@QEAAJH@Z	3505	0x14004d818
?SetLightDismissIHM@TouchHWNDElement@DirectUI@@QEAAJ_N@Z	3506	0x1400430fc
?SetLine@CCBaseScrollBar@DirectUI@@UEAAJH@Z	3507	0x140007bd8
?SetLine@ScrollBar@DirectUI@@UEAAJH@Z	3508	0x14006fed0
?SetLineSize@CCTrackBar@DirectUI@@QEAAJH@Z	3509	0x140015fb0
?SetLineSpacing@RichText@DirectUI@@QEAAJH@Z	3510	0x140008c58
?SetLinkIndicatorsToContent@TouchScrollViewer@DirectUI@@QEAAJ_N@Z	3511	0x140022e30
?SetLocale@RichText@DirectUI@@QEAAJPEBG@Z	3512	0x140048570
?SetManipulationHorizontalAlignment@TouchScrollViewer@DirectUI@@QEAAJH@Z	3513	0x140078c80
?SetManipulationVerticalAlignment@TouchScrollViewer@DirectUI@@QEAAJH@Z	3514	0x14006fba8
?SetMapRunsToClusters@RichText@DirectUI@@QEAAJ_N@Z	3515	0x14001e4fc
?SetMargin@Element@DirectUI@@QEAAJHHHH@Z	3516	0x14005aae8
?SetMaxLength@Edit@DirectUI@@QEAAJH@Z	3517	0x1400193fc
?SetMaxLength@TouchEditBase@DirectUI@@QEAAJH@Z	3518	0x14005d7b8
?SetMaxLineCount@RichText@DirectUI@@QEAAXI@Z	3519	0x140034c24
?SetMaximum@CCBaseScrollBar@DirectUI@@UEAAJH@Z	3520	0x14001f3c0
?SetMaximum@ModernProgressBar@DirectUI@@QEAAJH@Z	3521	0x140025578
?SetMaximum@Progress@DirectUI@@QEAAJH@Z	3522	0x140050020
?SetMaximum@ScrollBar@DirectUI@@UEAAJH@Z	3523	0x14000ede0
?SetMetering@TouchSlider@DirectUI@@QEAAJH@Z	3524	0x14007bd58
?SetMinSize@Element@DirectUI@@QEAAJHH@Z	3525	0x14007bcdc
?SetMinimum@CCBaseScrollBar@DirectUI@@UEAAJH@Z	3526	0x14000f240
?SetMinimum@ModernProgressBar@DirectUI@@QEAAJH@Z	3527	0x140021f0c
?SetMinimum@Progress@DirectUI@@QEAAJH@Z	3528	0x1400628f4
?SetMinimum@ScrollBar@DirectUI@@UEAAJH@Z	3529	0x140061b6c
?SetMoveCaretToEndOnSyncContent@TouchEditBase@DirectUI@@QEAAJ_N@Z	3530	0x140079248
?SetMultiline@Edit@DirectUI@@QEAAJ_N@Z	3531	0x14001027c
?SetMultiline@TouchEditBase@DirectUI@@QEAAJ_N@Z	3532	0x14000f8dc
?SetNoBrowseOnFirstAdd@Pages@DirectUI@@QEAAXXZ	3533	0x140071244
?SetNote@CCCommandLink@DirectUI@@QEAAJPEBG@Z	3534	0x140026b88
?SetNotifyHandler@CCBase@DirectUI@@QEAAXP6AHI_K_JPEA_JPEAX@Z3@Z	3535	0x140002de0
?SetOffText@TouchSwitch@DirectUI@@QEAAJPEBG@Z	3536	0x14006f75c
?SetOnOffText@TouchSwitch@DirectUI@@QEAAXPEBG0@Z	3537	0x140011aa8
?SetOnText@TouchSwitch@DirectUI@@QEAAJPEBG@Z	3538	0x14004f544
?SetOptimizeMove@HWNDHost@DirectUI@@QEAAJ_N@Z	3539	0x140072368
?SetOrder@ScrollBar@DirectUI@@QEAAJH@Z	3540	0x1400784dc
?SetOverhang@Element@DirectUI@@QEAAJ_N@Z	3541	0x140005498
?SetOverhangOffset@RichText@DirectUI@@QEAAJH@Z	3542	0x140012678
?SetOverrideButtonBackground@CCPushButton@DirectUI@@QEAAJ_N@Z	3543	0x140060dfc
?SetOverrideScaleFactor@DUIXmlParser@DirectUI@@QEAAXM@Z	3544	0x14003676c
?SetOverrideScaleFactor@Element@DirectUI@@QEAAXM@Z	3545	0x1400053ac
?SetPVLAnimationState@Element@DirectUI@@QEAAXH@Z	3546	0x14002bdb8
?SetPadding@Element@DirectUI@@QEAAJHHHH@Z	3547	0x14002e518
?SetPage@CCBaseScrollBar@DirectUI@@UEAAJH@Z	3548	0x1400096f0
?SetPage@ScrollBar@DirectUI@@UEAAJH@Z	3549	0x140024f30
?SetParameter@XProvider@DirectUI@@UEAAJAEBU_GUID@@PEAX@Z	3550	0x140024ed8
?SetParentSizeControl@HWNDElement@DirectUI@@QEAAX_N@Z	3551	0x140069a68
?SetParseErrorCallback@DUIXmlParser@DirectUI@@QEAAXP6AXPEBG0HPEAX@Z1@Z	3552	0x140062bbc
?SetParseState@DUIXmlParser@DirectUI@@AEAAXW4_DUI_PARSE_STATE@2@@Z	3553	0x14004901c
?SetParser@Macro@DirectUI@@QEAAXPEAVDUIXmlParser@2@@Z	3554	0x140054290
?SetPasswordCharacter@Edit@DirectUI@@QEAAJH@Z	3555	0x1400473e4
?SetPasswordCharacter@TouchEditBase@DirectUI@@QEAAJH@Z	3556	0x1400188fc
?SetPasswordRevealMode@TouchEdit2@DirectUI@@QEAAJW4TouchEditPasswordRevealMode@2@@Z	3557	0x14002bf14
?SetPath@Movie@DirectUI@@QEAAJPEBG@Z	3558	0x140015824
?SetPercent@ScrollProxy@DirectUI@@AEAAJPEAVBaseScrollBar@2@N@Z	3559	0x14001f4d0
?SetPinned@BaseScrollBar@DirectUI@@QEAAX_N@Z	3560	0x140018044
?SetPinning@BaseScrollViewer@DirectUI@@QEAAJH@Z	3561	0x14004c474
?SetPixelOffsetMode@Movie@DirectUI@@QEAAJH@Z	3562	0x14003221c
?SetPlay@AnimationStrip@DirectUI@@QEAAJ_N@Z	3563	0x140071e54
?SetPlayAllFramesMode@Movie@DirectUI@@QEAAJ_N@Z	3564	0x1400157c4
?SetPopupBounds@TouchSelect@DirectUI@@QEAAJHHHH@Z	3565	0x140007118
?SetPosition@CCBaseScrollBar@DirectUI@@UEAAJH@Z	3566	0x14003efe8
?SetPosition@ModernProgressBar@DirectUI@@QEAAJH@Z	3567	0x14003be98
?SetPosition@Progress@DirectUI@@QEAAJH@Z	3568	0x140024318
?SetPosition@ScrollBar@DirectUI@@UEAAJH@Z	3569	0x140048bac
?SetPreprocessedXML@DUIXmlParser@DirectUI@@QEAAJPEBGPEAUHINSTANCE__@@1@Z	3570	0x14005939c
?SetPreserveAlphaChannel@Element@DirectUI@@QEAAX_N@Z	3571	0x140065164
?SetPressed@Button@DirectUI@@QEAAJ_N@Z	3572	0x140073e24
?SetPressed@TouchButton@DirectUI@@QEAAJ_N@Z	3573	0x14000aaf4
?SetPreventFormatChangeUpdatingModifiedState@TouchEditBase@DirectUI@@QEAAJ_N@Z	3574	0x14003ebe4
?SetPromptText@TouchEdit2@DirectUI@@QEAAJPEBG@Z	3575	0x1400387e4
?SetPromptWithCaret@TouchEdit2@DirectUI@@QEAAJ_N@Z	3576	0x140037978
?SetProperty@Bind@DirectUI@@QEAAJPEBG@Z	3577	0x140065e78
?SetProportional@ScrollBar@DirectUI@@QEAAJ_N@Z	3578	0x140072dc4
?SetProvider@XElement@DirectUI@@QEAAJPEAUIUnknown@@@Z	3579	0x140058ac0
?SetRangeMax@CCTrackBar@DirectUI@@QEAAJH@Z	3580	0x1400206e0
?SetRangeMax@TouchSlider@DirectUI@@QEAAXH@Z	3581	0x140077bdc
?SetRangeMin@CCTrackBar@DirectUI@@QEAAJH@Z	3582	0x140069348
?SetRangeMin@TouchSlider@DirectUI@@QEAAXH@Z	3583	0x1400249a0
?SetRangeMinAndRangeMax@TouchSlider@DirectUI@@QEAAXHH@Z	3584	0x140035fd8
?SetReadOnly@TouchEditBase@DirectUI@@QEAAJ_N@Z	3585	0x14003261c
?SetReferencePoint@RefPointElement@DirectUI@@QEAAJHH@Z	3586	0x14005cc9c
?SetRegisteredDefaultButton@DialogElement@DirectUI@@QEAAJPEAVElement@2@@Z	3587	0x14004796c
?SetRegisteredDefaultButton@XBaby@DirectUI@@UEAAJPEAVElement@2@@Z	3588	0x14005d518
?SetRegisteredDefaultButton@XProvider@DirectUI@@UEAAJPEAVElement@2@@Z	3589	0x14002335c
?SetRegisteredDefaultButtonSelectedState@DialogElementCore@DirectUI@@IEAAX_N@Z	3590	0x140056954
?SetRelPixHeight@Element@DirectUI@@QEAAJH@Z	3591	0x140024d70
?SetRelPixMargin@Element@DirectUI@@QEAAJHHHH@Z	3592	0x140008580
?SetRelPixPadding@Element@DirectUI@@QEAAJHHHH@Z	3593	0x140079bdc
?SetRelPixWidth@Element@DirectUI@@QEAAJH@Z	3594	0x14002e800
?SetReorderable@ItemList@DirectUI@@QEAAJ_N@Z	3595	0x140015c58
?SetRepeat@Movie@DirectUI@@QEAAJ_N@Z	3596	0x14006272c
?SetRespectLanguageDirection@TouchSlider@DirectUI@@QEAAX_N@Z	3597	0x14001f74c
?SetRespondToMouseScroll@TouchSlider@DirectUI@@QEAAX_N@Z	3598	0x14000bed0
?SetRootWindowForTheming@DUIXmlParser@DirectUI@@QEAAXPEAUHWND__@@@Z	3599	0x140027cbc
?SetScaleFactor@DUIXmlParser@DirectUI@@QEAAXM@Z	3600	0x14004ef30
?SetScreenCenter@HWNDElement@DirectUI@@QEAAX_N@Z	3601	0x140043248
?SetScrollControlHost@TouchScrollViewer@DirectUI@@QEAAJPEAVElement@2@@Z	3602	0x140065d50
?SetScrollPadding@TouchScrollViewer@DirectUI@@QEAAJHHHH@Z	3603	0x14003d12c
?SetScrollPercent@ScrollProvider@DirectUI@@UEAAJNN@Z	3604	0x14005550c
?SetScrollPercent@ScrollProxy@DirectUI@@AEAAJNN@Z	3605	0x1400466d8
?SetSelected@Element@DirectUI@@QEAAJ_N@Z	3606	0x14005db08
?SetSelection@Combobox@DirectUI@@QEAAJH@Z	3607	0x140038630
?SetSelection@Selector@DirectUI@@UEAAJPEAVElement@2@@Z	3608	0x140011aac
?SetSelection@SelectorNoDefault@DirectUI@@UEAAJPEAVElement@2@@Z	3609	0x14003f05c
?SetSelection@TouchEdit2@DirectUI@@QEAAJJJ@Z	3610	0x140004498
?SetSelection@TouchSelect@DirectUI@@QEAAJPEAVElement@2@@Z	3611	0x14003f294
?SetSelectionBackgroundColor@TouchEditBase@DirectUI@@QEAAJPEAVValue@2@@Z	3612	0x140054e04
?SetSelectionForegroundColor@TouchEditBase@DirectUI@@QEAAJPEAVValue@2@@Z	3613	0x140005864
?SetSelectionIndex@TouchSelect@DirectUI@@QEAAJH@Z	3614	0x140012e90
?SetShadowIntensity@Element@DirectUI@@QEAAJH@Z	3615	0x14002ecdc
?SetSheet@Element@DirectUI@@QEAAJPEAVStyleSheet@2@@Z	3616	0x140044104
?SetShortcut@Element@DirectUI@@QEAAJH@Z	3617	0x14006568c
?SetShowClearButtonMinWidth@TouchEdit2@DirectUI@@QEAAJH@Z	3618	0x14003ca98
?SetShowKeyFocus@TouchButton@DirectUI@@QEAAJ_N@Z	3619	0x14007b8dc
?SetShowTick@TouchSlider@DirectUI@@QEAAJ_N@Z	3620	0x14000c500
?SetSmoothFillAnimation@ModernProgressBar@DirectUI@@QEAAJ_N@Z	3621	0x140033c2c
?SetSmoothingMode@Movie@DirectUI@@QEAAJH@Z	3622	0x1400067d4
?SetSnapIntervalX@TouchScrollViewer@DirectUI@@QEAAJM@Z	3623	0x140039ff0
?SetSnapIntervalY@TouchScrollViewer@DirectUI@@QEAAJM@Z	3624	0x140062f58
?SetSnapMode@TouchScrollViewer@DirectUI@@QEAAJH@Z	3625	0x1400792c8
?SetSnapOffsetX@TouchScrollViewer@DirectUI@@QEAAJM@Z	3626	0x14003ce4c
?SetSnapOffsetY@TouchScrollViewer@DirectUI@@QEAAJM@Z	3627	0x140004c9c
?SetSnapPointCollectionX@TouchScrollViewer@DirectUI@@QEAAJPEAV?$DynamicArray@N$0A@@2@@Z	3628	0x14001d454
?SetSnapPointCollectionX@TouchScrollViewer@DirectUI@@QEAAJPEBNH@Z	3629	0x14004b140
?SetSnapPointCollectionY@TouchScrollViewer@DirectUI@@QEAAJPEAV?$DynamicArray@N$0A@@2@@Z	3630	0x14002dfd0
?SetSnapPointCollectionY@TouchScrollViewer@DirectUI@@QEAAJPEBNH@Z	3631	0x140039bcc
?SetState@ModernProgressBar@DirectUI@@QEAAJH@Z	3632	0x14002603c
?SetStdCursor@Element@DirectUI@@QEAAJH@Z	3633	0x140033d28
?SetStepCount@TouchSlider@DirectUI@@QEAAXH@Z	3634	0x140048f80
?SetStopThumbBehavior@RepeatButton@DirectUI@@QEAAXXZ	3635	0x14006e78c
?SetString@ElementProxy@DirectUI@@IEAAJPEAUtagVARIANT@@P8Element@2@EAAPEBGPEAPEAVValue@2@@Z@Z	3636	0x140049134
?SetStyle@CCTreeView@DirectUI@@QEAAKK@Z	3637	0x140062e10
?SetSubContent@TouchCommandButton@DirectUI@@QEAAJPEBG@Z	3638	0x140075dcc
?SetSuppressClearButton@TouchEdit2@DirectUI@@QEAAJ_N@Z	3639	0x14002d938
?SetSuppressSetContact@TouchScrollViewer@DirectUI@@QEAAJ_N@Z	3640	0x14000eec4
?SetSyncContentWhileIMEComposing@TouchEditBase@DirectUI@@QEAAJ_N@Z	3641	0x1400394dc
?SetTargetPage@Navigator@DirectUI@@QEAAJPEBG@Z	3642	0x14002711c
?SetTextContentOverride@TouchSelectItem@DirectUI@@QEAAJPEBG@Z	3643	0x1400043ec
?SetTextGlowSize@Element@DirectUI@@QEAAJH@Z	3644	0x14003bf2c
?SetTextMode@TouchEditBase@DirectUI@@QEAAJW4TouchEditTextMode@2@@Z	3645	0x14003f6dc
?SetThemeChanged@HWNDHost@DirectUI@@IEAAJH@Z	3646	0x140008d64
?SetThemedBorder@Edit@DirectUI@@QEAAJ_N@Z	3647	0x140031da0
?SetThumbPosition@CCTrackBar@DirectUI@@QEAAJH@Z	3648	0x140052644
?SetThumbValue@TouchSlider@DirectUI@@QEAAXH_N0@Z	3649	0x140004818
?SetThumbValue@TouchSlider@DirectUI@@QEAAXH_N@Z	3650	0x140065540
?SetTickCount@TouchSlider@DirectUI@@QEAAJH@Z	3651	0x1400649a4
?SetTitleText@TouchSwitch@DirectUI@@QEAAJPEBG@Z	3652	0x1400451c4
?SetToHost@XBaby@DirectUI@@UEAAJPEAVElement@2@@Z	3653	0x14004f0e0
?SetToggleOnClick@TouchCheckBox@DirectUI@@QEAAJ_N@Z	3654	0x140026e8c
?SetToggleSwitchText@TouchSwitch@DirectUI@@QEAAXPEBG@Z	3655	0x1400631c4
?SetToggleValue@TouchSwitch@DirectUI@@QEAAXH@Z	3656	0x140025804
?SetToggleValue@TouchSwitch@DirectUI@@QEAAXH_N0@Z	3657	0x14004e22c
?SetToggleValue@TouchSwitch@DirectUI@@QEAAXH_N@Z	3658	0x140014a00
?SetTooltip@Element@DirectUI@@QEAAJ_N@Z	3659	0x140001768
?SetTooltipMaxWidth@Element@DirectUI@@QEAAJH@Z	3660	0x140066f58
?SetTooltipMaximumLineCount@TouchHWNDElement@DirectUI@@QEAAJH@Z	3661	0x140069328
?SetTooltipText@TouchSlider@DirectUI@@QEAAXPEBG@Z	3662	0x14001bdf4
?SetTracking@CCBaseScrollBar@DirectUI@@QEAAJ_N@Z	3663	0x140018870
?SetTransparent@HWNDHost@DirectUI@@QEAAJ_N@Z	3664	0x1400713b8
?SetTreatRightMouseButtonAsLeft@TouchButton@DirectUI@@QEAAJ_N@Z	3665	0x14006c05c
?SetTypography@RichText@DirectUI@@QEAAJPEBG@Z	3666	0x140006a14
?SetTypographyRuns@RichText@DirectUI@@QEAAJPEBG@Z	3667	0x14004f770
?SetUnavailableIcon@DUIXmlParser@DirectUI@@QEAAXPEAUHICON__@@@Z	3668	0x1400626b0
?SetUnknownAttrCallback@DUIXmlParser@DirectUI@@QEAAXP6A_NPEBGPEAX@Z1@Z	3669	0x140058994
?SetValue@Element@DirectUI@@QEAAJP6APEBUPropertyInfo@2@XZHPEAVValue@2@@Z	3670	0x1400181d0
?SetValue@Element@DirectUI@@QEAAJPEBUPropertyInfo@2@HPEAVValue@2@@Z	3671	0x14005a2b0
?SetValue@RangeValueProvider@DirectUI@@UEAAJN@Z	3672	0x14001cca0
?SetValue@ValueProvider@DirectUI@@UEAAJPEBG@Z	3673	0x140001770
?SetValue@ValueProxy@DirectUI@@AEAAJPEBG@Z	3674	0x1400119b0
?SetVertical@ScrollBar@DirectUI@@QEAAJ_N@Z	3675	0x1400699ec
?SetVerticalScript@RichText@DirectUI@@QEAAJ_N@Z	3676	0x14001ca78
?SetVirtualizeElements@TouchScrollViewer@DirectUI@@QEAAJ_N@Z	3677	0x14005cd60
?SetVisible@Element@DirectUI@@QEAAJ_N@Z	3678	0x140036fd8
?SetVisited@TouchHyperLink@DirectUI@@QEAAJ_N@Z	3679	0x1400550e8
?SetWantTabs@Edit@DirectUI@@QEAAJ_N@Z	3680	0x14002ac10
?SetWidth@Element@DirectUI@@QEAAJH@Z	3681	0x14002b3e0
?SetWinStyle@CCBase@DirectUI@@QEAAJH@Z	3682	0x1400208a4
?SetWindowAccessGradientColor@TouchHWNDElement@DirectUI@@QEAAJPEAVValue@2@@Z	3683	0x140029d64
?SetWindowActive@Element@DirectUI@@QEAAJ_N@Z	3684	0x14002afec
?SetWindowDirection@HWNDHost@DirectUI@@UEAAXPEAUHWND__@@@Z	3685	0x14004b718
?SetWrapKeyboardNavigate@HWNDElement@DirectUI@@QEAAJ_N@Z	3686	0x1400469ec
?SetX@Element@DirectUI@@QEAAJH@Z	3687	0x14002bfd8
?SetXBarVisibility@BaseScrollViewer@DirectUI@@QEAAJH@Z	3688	0x14001483c
?SetXML@DUIXmlParser@DirectUI@@QEAAJPEBGPEAUHINSTANCE__@@1@Z	3689	0x14002d0ec
?SetXMLFromResource@DUIXmlParser@DirectUI@@QEAAJIPEAUHINSTANCE__@@0@Z	3690	0x14002516c
?SetXMLFromResource@DUIXmlParser@DirectUI@@QEAAJIPEBGPEAUHINSTANCE__@@1@Z	3691	0x140032cac
?SetXMLFromResource@DUIXmlParser@DirectUI@@QEAAJPEBG0PEAUHINSTANCE__@@1@Z	3692	0x140077698
?SetXMLFromResource@DUIXmlParser@DirectUI@@QEAAJPEBGPEAUHINSTANCE__@@1@Z	3693	0x1400330fc
?SetXMLFromResourceWithTheme@DUIXmlParser@DirectUI@@QEAAJIPEAUHINSTANCE__@@00@Z	3694	0x14001c0c0
?SetXOffset@BaseScrollViewer@DirectUI@@QEAAJH@Z	3695	0x14003b05c
?SetXOffset@Viewer@DirectUI@@QEAAJH@Z	3696	0x14005271c
?SetXScrollable@BaseScrollViewer@DirectUI@@QEAAJ_N@Z	3697	0x14004ba24
?SetXScrollable@Viewer@DirectUI@@QEAAJ_N@Z	3698	0x140072164
?SetY@Element@DirectUI@@QEAAJH@Z	3699	0x14006bf80
?SetYBarVisibility@BaseScrollViewer@DirectUI@@QEAAJH@Z	3700	0x140056158
?SetYOffset@BaseScrollViewer@DirectUI@@QEAAJH@Z	3701	0x14003f6d0
?SetYOffset@Viewer@DirectUI@@QEAAJH@Z	3702	0x140003f98
?SetYScrollable@BaseScrollViewer@DirectUI@@QEAAJ_N@Z	3703	0x1400496d0
?SetYScrollable@Viewer@DirectUI@@QEAAJ_N@Z	3704	0x14005eebc
?SetZoomMaximum@TouchScrollViewer@DirectUI@@QEAAJM@Z	3705	0x1400703b0
?SetZoomMinimum@TouchScrollViewer@DirectUI@@QEAAJM@Z	3706	0x140063a5c
?ShadowIntensityProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	3707	0x140054704
?SheetProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	3708	0x1400716d8
?ShiftChild@Element@DirectUI@@QEAAJII@Z	3709	0x140028204
?ShortcutProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	3710	0x14000ae24
?ShouldUseDesktopPerMonitorScaling@HWNDElement@DirectUI@@QEAA_NXZ	3711	0x140027d04
?ShouldUsePerMonitorScaling@TouchHWNDElement@DirectUI@@QEAA_NXZ	3712	0x14004f0a0
?ShowAccel@HWNDElement@DirectUI@@QEAA_NXZ	3713	0x140033960
?ShowClearButtonMinWidthProp@TouchEdit2@DirectUI@@SAPEBUPropertyInfo@2@XZ	3714	0x140042548
?ShowContextMenu@ElementProvider@DirectUI@@UEAAJXZ	3715	0x140017d5c
?ShowFocus@HWNDElement@DirectUI@@QEAA_NXZ	3716	0x140030894
?ShowKeyFocusProp@TouchButton@DirectUI@@SAPEBUPropertyInfo@2@XZ	3717	0x14006a880
?ShowRichTooltip@TouchHWNDElement@DirectUI@@QEAAJW4TOUCHTOOLTIP_INPUT@@W4TOUCHTOOLTIP_OPTION_FLAGS@@PEAVElement@2@@Z	3718	0x140032778
?ShowTickProp@TouchSlider@DirectUI@@SAPEBUPropertyInfo@2@XZ	3719	0x14002d0a0
?ShowTooltipOnRightForLTRBuild@TouchSlider@DirectUI@@QEAAXXZ	3720	0x14006e460
?ShowUIState@HWNDElement@DirectUI@@QEAAX_N0@Z	3721	0x140024600
?ShowWindow@NativeHWNDHost@DirectUI@@QEAAXH@Z	3722	0x14000f788
?ShowWindow@XHost@DirectUI@@QEAAXH@Z	3723	0x14004f068
?SideGraphicProp@TextGraphic@DirectUI@@SAPEBUPropertyInfo@2@XZ	3724	0x14005fd28
?SizeInLayoutProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	3725	0x140026fb4
?SizeZero@FlowLayout@DirectUI@@KA?AUtagSIZE@@XZ	3726	0x140021e48
?SizeZero@VerticalFlowLayout@DirectUI@@KA?AUtagSIZE@@XZ	3727	0x14004eee0
?Skip@DuiAccessible@DirectUI@@UEAAJK@Z	3728	0x140062984
?Skip@HWNDHostAccessible@DirectUI@@UEAAJK@Z	3729	0x140070510
?SliderControlType@Schema@DirectUI@@2HA	3730	0x140061d48
?SliderUpdated@TouchSlider@DirectUI@@SA?AVUID@@XZ	3731	0x14001dd94
?SmoothingModeProp@Movie@DirectUI@@SAPEBUPropertyInfo@2@XZ	3732	0x140032124
?SnapIntervalXProp@TouchScrollViewer@DirectUI@@SAPEBUPropertyInfo@2@XZ	3733	0x14003eca4
?SnapIntervalYProp@TouchScrollViewer@DirectUI@@SAPEBUPropertyInfo@2@XZ	3734	0x14000c188
?SnapModeProp@TouchScrollViewer@DirectUI@@SAPEBUPropertyInfo@2@XZ	3735	0x1400246fc
?SnapOffsetXProp@TouchScrollViewer@DirectUI@@SAPEBUPropertyInfo@2@XZ	3736	0x14000fc14
?SnapOffsetYProp@TouchScrollViewer@DirectUI@@SAPEBUPropertyInfo@2@XZ	3737	0x1400190ac
?SnapPointCollectionXProp@TouchScrollViewer@DirectUI@@SAPEBUPropertyInfo@2@XZ	3738	0x140063404
?SnapPointCollectionYProp@TouchScrollViewer@DirectUI@@SAPEBUPropertyInfo@2@XZ	3739	0x140033f04
?SnapshotTransformElement@TouchScrollViewer@DirectUI@@SA?AVUID@@XZ	3740	0x14003a118
?SortChildren@Element@DirectUI@@QEAAJP6AHPEBX0@Z@Z	3741	0x14004fa2c
?SpinnerControlType@Schema@DirectUI@@2HA	3742	0x140028640
?SplitButtonControlType@Schema@DirectUI@@2HA	3743	0x140019cc4
?Start@AnimationStrip@DirectUI@@AEAAJXZ	3744	0x14003dafc
?StartDefer@Element@DirectUI@@QEAAXPEAK@Z	3745	0x14007b8b0
?StartNavigate@Browser@DirectUI@@SA?AVUID@@XZ	3746	0x14006e90c
?StartRichTooltipTimer@TouchHWNDElement@DirectUI@@QEAAJW4TOUCHTOOLTIP_INPUT@@@Z	3747	0x140064794
?StateProp@ModernProgressBar@DirectUI@@SAPEBUPropertyInfo@2@XZ	3748	0x1400421a0
?StaticWndProc@HWNDElement@DirectUI@@SA_JPEAUHWND__@@I_K_J@Z	3749	0x1400600fc
?StaticXHostSubclassProc@TaskPage@DirectUI@@CA_JPEAUHWND__@@I_K_J@Z	3750	0x140021c48
?StaticXmlParserError@TaskPage@DirectUI@@CAXPEBG0HPEAX@Z	3751	0x140072ebc
?StatusBarControlType@Schema@DirectUI@@2HA	3752	0x140067710
?Stop@AnimationStrip@DirectUI@@AEAAXXZ	3753	0x1400578d8
?Stop@CCAVI@DirectUI@@QEAAXXZ	3754	0x140048348
?StopAnimation@Element@DirectUI@@QEAAXI@Z	3755	0x14005b824
?StopUsingCache@RichText@DirectUI@@QEAAXXZ	3756	0x14002830c
?StrDupW@Value@DirectUI@@CAJPEBGPEAPEAG@Z	3757	0x140067bdc
?StructureChangedEvent@Schema@DirectUI@@2HA	3758	0x14000c758
?SubContentProp@TouchCommandButton@DirectUI@@SAPEBUPropertyInfo@2@XZ	3759	0x140055bf0
?SuppressClearButtonProp@TouchEdit2@DirectUI@@SAPEBUPropertyInfo@2@XZ	3760	0x140011db0
?SupressRightButtonDrag@Thumb@DirectUI@@QEAAX_N@Z	3761	0x140074460
?SyncBackground@HWNDHost@DirectUI@@IEAAXXZ	3762	0x14005c434
?SyncCallback@Proxy@DirectUI@@SAJPEAUHGADGET__@@PEAXPEAUEventMsg@@@Z	3763	0x14005176c
?SyncColorsAndFonts@HWNDHost@DirectUI@@AEAAXXZ	3764	0x14002691c
?SyncContentWhileIMEComposingProp@TouchEditBase@DirectUI@@SAPEBUPropertyInfo@2@XZ	3765	0x1400776dc
?SyncDestroyWindow@NativeHWNDHost@DirectUI@@QEAAXXZ	3766	0x140014d18
?SyncDirection@HWNDHost@DirectUI@@IEAAXXZ	3767	0x140011f48
?SyncElementAlphaFromForegroundAlpha@DirectUI@@YAXPEAVElement@1@@Z	3768	0x140071134
?SyncFont@HWNDHost@DirectUI@@IEAAXXZ	3769	0x14002e508
?SyncForeground@HWNDHost@DirectUI@@IEAAXXZ	3770	0x140045dd0
?SyncNoteAndGlyph@CCCommandLink@DirectUI@@IEAAXPEAUHWND__@@@Z	3771	0x140033bfc
?SyncParent@HWNDHost@DirectUI@@IEAAXXZ	3772	0x140066b10
?SyncRect@HWNDHost@DirectUI@@IEAAXI_N@Z	3773	0x1400067d8
?SyncScrollBar@CCBaseScrollBar@DirectUI@@QEAAXXZ	3774	0x1400579dc
?SyncStyle@HWNDHost@DirectUI@@IEAAXXZ	3775	0x140069b50
?SyncText@HWNDHost@DirectUI@@IEAAXXZ	3776	0x14000dbe8
?SyncVisible@HWNDHost@DirectUI@@IEAAXXZ	3777	0x14005b5d8
?SystemAlertEvent@Schema@DirectUI@@2HA	3778	0x14006a7b8
?TabControlType@Schema@DirectUI@@2HA	3779	0x140077d98
?TabItemControlType@Schema@DirectUI@@2HA	3780	0x14006ceb4
?TableControlType@Schema@DirectUI@@2HA	3781	0x14007bb10
?TableItemPattern@Schema@DirectUI@@2HA	3782	0x140047368
?TableItem_ColumnHeaderItems_Property@Schema@DirectUI@@2HA	3783	0x140014bf4
?TableItem_RowHeaderItems_Property@Schema@DirectUI@@2HA	3784	0x1400563d0
?TablePattern@Schema@DirectUI@@2HA	3785	0x14000ec80
?Table_ColumnHeaders_Property@Schema@DirectUI@@2HA	3786	0x14006ef3c
?Table_RowHeaders_Property@Schema@DirectUI@@2HA	3787	0x14004a2c8
?Table_RowOrColumnMajor_Property@Schema@DirectUI@@2HA	3788	0x14005a4d0
?TargetPageProp@Navigator@DirectUI@@SAPEBUPropertyInfo@2@XZ	3789	0x14001dd8c
?TelemetrySetDescription@TouchScrollViewer@DirectUI@@QEAAJPEBG@Z	3790	0x14005b7f4
?TestDeferObject@Element@DirectUI@@QEAAPEAVDeferCycle@2@XZ	3791	0x14007748c
?TextContentOverrideProp@TouchSelectItem@DirectUI@@SAPEBUPropertyInfo@2@XZ	3792	0x14005250c
?TextControlType@Schema@DirectUI@@2HA	3793	0x14000c080
?TextGlowSizeProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	3794	0x140049778
?TextModeProp@TouchEditBase@DirectUI@@SAPEBUPropertyInfo@2@XZ	3795	0x140014860
?TextPattern@Schema@DirectUI@@2HA	3796	0x140007310
?TextTextSelectionChangedEvent@Schema@DirectUI@@2HA	3797	0x140003edc
?TextTooltipShowing@TouchHWNDElement@DirectUI@@SA?AVUID@@XZ	3798	0x14001ab28
?ThemeChange@HWNDElement@DirectUI@@SA?AVUID@@XZ	3799	0x14001c9e0
?ThemeChangedProp@HWNDHost@DirectUI@@SAPEBUPropertyInfo@2@XZ	3800	0x14006f044
?ThemedBorderProp@Edit@DirectUI@@SAPEBUPropertyInfo@2@XZ	3801	0x140036b24
?ThumbControlType@Schema@DirectUI@@2HA	3802	0x140011f54
?ThumbPositionProp@CCTrackBar@DirectUI@@SAPEBUPropertyInfo@2@XZ	3803	0x14005f5b4
?ThumbPositionProp@TouchSlider@DirectUI@@SAPEBUPropertyInfo@2@XZ	3804	0x140052e34
?TickCountProp@TouchSlider@DirectUI@@SAPEBUPropertyInfo@2@XZ	3805	0x1400341e0
?TitleBarControlType@Schema@DirectUI@@2HA	3806	0x14004ac54
?TitleTextProp@TouchSwitch@DirectUI@@SAPEBUPropertyInfo@2@XZ	3807	0x14000d8e4
?ToString@Value@DirectUI@@QEBAPEAGPEAGI@Z	3808	0x14006c3bc
?Toggle@AutoButton@DirectUI@@SA?AVUID@@XZ	3809	0x140076818
?Toggle@SemanticZoomToggle@DirectUI@@SA?AVUID@@XZ	3810	0x14002ff54
?Toggle@ToggleProvider@DirectUI@@UEAAJXZ	3811	0x14004f39c
?ToggleOnClickProp@TouchCheckBox@DirectUI@@SAPEBUPropertyInfo@2@XZ	3812	0x140042c04
?TogglePattern@Schema@DirectUI@@2HA	3813	0x1400323bc
?ToggleUIState@HWNDElement@DirectUI@@QEAAX_N0@Z	3814	0x140042f4c
?Toggle_ToggleState_Property@Schema@DirectUI@@2HA	3815	0x14004bbf0
?ToolBarControlType@Schema@DirectUI@@2HA	3816	0x140046888
?ToolTipClosedEvent@Schema@DirectUI@@2HA	3817	0x14005b534
?ToolTipControlType@Schema@DirectUI@@2HA	3818	0x1400031b0
?ToolTipOpenedEvent@Schema@DirectUI@@2HA	3819	0x140035ef8
?TooltipMaxWidthProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	3820	0x14004b63c
?TooltipMaximumLineCountProp@TouchHWNDElement@DirectUI@@SAPEBUPropertyInfo@2@XZ	3821	0x14002dacc
?TooltipProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	3822	0x140033cf4
?TooltipTimerStarting@TouchHWNDElement@DirectUI@@SA?AVUID@@XZ	3823	0x14005a2b8
?TossElement@ElementProvider@DirectUI@@UEAAXXZ	3824	0x14001ee2c
?TossPatternProvider@ElementProvider@DirectUI@@QEAAXW4Pattern@Schema@2@@Z	3825	0x14005e214
?TrackScore@NavScoring@DirectUI@@QEAAHPEAVElement@2@0@Z	3826	0x1400025fc
?TrackingProp@CCBaseScrollBar@DirectUI@@SAPEBUPropertyInfo@2@XZ	3827	0x140020d68
?TransformPattern@Schema@DirectUI@@2HA	3828	0x140004314
?TranslateThumbPositionToThumbValue@TouchSlider@DirectUI@@QEAAHH@Z	3829	0x140049098
?TransparentProp@HWNDHost@DirectUI@@SAPEBUPropertyInfo@2@XZ	3830	0x14001c144
?TreatRightMouseButtonAsLeftProp@TouchButton@DirectUI@@SAPEBUPropertyInfo@2@XZ	3831	0x140050334
?TreeControlType@Schema@DirectUI@@2HA	3832	0x14005ab6c
?TreeItemControlType@Schema@DirectUI@@2HA	3833	0x14005e8f0
?TriggeredAnimationComplete@PVLAnimation@DirectUI@@SA?AVUID@@XZ	3834	0x14001aa40
?Try@NavScoring@DirectUI@@QEAAHPEAVElement@2@HPEBUNavReference@2@K@Z	3835	0x140065578
?TryLinePattern@Element@DirectUI@@AEAA_NPEAUtagPOINT@@AEBUtagRECT@@@Z	3836	0x14002e300
?TryPattern@Element@DirectUI@@AEAA_NNNPEAUtagPOINT@@AEBUtagRECT@@@Z	3837	0x140028510
?TrySparsePattern@Element@DirectUI@@AEAA_NPEAUtagPOINT@@AEBUtagRECT@@@Z	3838	0x14003b5e8
?TypographyProp@RichText@DirectUI@@SAPEBUPropertyInfo@2@XZ	3839	0x140001da8
?TypographyRunsProp@RichText@DirectUI@@SAPEBUPropertyInfo@2@XZ	3840	0x14006d484
?UiaEvents@Element@DirectUI@@QEAA_NXZ	3841	0x14004fcc8
?UiaHostProviderFromHwnd@Schema@DirectUI@@2P6AJPEAUHWND__@@PEAPEAUIRawElementProviderSimple@@@ZEA	3842	0x140077d44
?UiaLookupId@Schema@DirectUI@@2P6AHW4AutomationIdentifierType@@PEBU_GUID@@@ZEA	3843	0x140039c30
?UiaRaiseAutomationEvent@Schema@DirectUI@@2P6AJPEAUIRawElementProviderSimple@@H@ZEA	3844	0x140064f94
?UiaRaiseAutomationPropertyChangedEvent@Schema@DirectUI@@2P6AJPEAUIRawElementProviderSimple@@HUtagVARIANT@@1@ZEA	3845	0x14000e5dc
?UiaRaiseStructureChangedEvent@Schema@DirectUI@@2P6AJPEAUIRawElementProviderSimple@@W4StructureChangeType@@PEAHH@ZEA	3846	0x140025b80
?UiaReturnRawElementProvider@Schema@DirectUI@@2P6A_JPEAUHWND__@@_K_JPEAUIRawElementProviderSimple@@@ZEA	3847	0x1400027dc
?UnRegister@Element@DirectUI@@SAJPEAPEAUIClassInfo@2@@Z	3848	0x14005252c
?UnhandledSyschar@XElement@DirectUI@@SA?AVUID@@XZ	3849	0x140076c5c
?Uninit@CallstackTracker@DirectUI@@SAXXZ	3850	0x140036c74
?Uninit@InvokeHelper@DirectUI@@QEAAXXZ	3851	0x14004a4e0
?UninitProcess@FontCache@DirectUI@@SAXXZ	3852	0x1400191f0
?UninitThread@FontCache@DirectUI@@SAXXZ	3853	0x14000b910
?UnloadCommonControlExports@AnimationStrip@DirectUI@@AEAAXXZ	3854	0x14002f2b8
?Unlock@CritSecLock@DirectUI@@QEAAXXZ	3855	0x140018f20
?UnregisterForAnimationStatusChanges@TouchHWNDElement@DirectUI@@QEAAXXZ	3856	0x140035e10
?UnregisterForIHMChanges@TouchHWNDElement@DirectUI@@QEAAXXZ	3857	0x140059bb0
?UnregisterForMonitorPowerChanges@TouchHWNDElement@DirectUI@@QEAAJXZ	3858	0x14004b88c
?UnvirtualizePosition@HWNDHost@DirectUI@@AEAAXXZ	3859	0x14002e49c
?UpdateChildFocus@DialogElementCore@DirectUI@@QEAAXPEAVElement@2@0@Z	3860	0x140078c64
?UpdateChildren@Expando@DirectUI@@IEAAXPEAVValue@2@@Z	3861	0x14002e550
?UpdateContentSize@TouchScrollViewer@DirectUI@@SA?AVUID@@XZ	3862	0x14000c4e8
?UpdateDesiredSize@BorderLayout@DirectUI@@UEAA?AUtagSIZE@@PEAVElement@2@HHPEAVSurface@2@@Z	3863	0x140028734
?UpdateDesiredSize@FillLayout@DirectUI@@UEAA?AUtagSIZE@@PEAVElement@2@HHPEAVSurface@2@@Z	3864	0x14003a0f0
?UpdateDesiredSize@FlowLayout@DirectUI@@UEAA?AUtagSIZE@@PEAVElement@2@HHPEAVSurface@2@@Z	3865	0x140015994
?UpdateDesiredSize@GridLayout@DirectUI@@UEAA?AUtagSIZE@@PEAVElement@2@HHPEAVSurface@2@@Z	3866	0x14001bbc8
?UpdateDesiredSize@Layout@DirectUI@@UEAA?AUtagSIZE@@PEAVElement@2@HHPEAVSurface@2@@Z	3867	0x1400696e0
?UpdateDesiredSize@NineGridLayout@DirectUI@@UEAA?AUtagSIZE@@PEAVElement@2@HHPEAVSurface@2@@Z	3868	0x140020f74
?UpdateDesiredSize@RowLayout@DirectUI@@UEAA?AUtagSIZE@@PEAVElement@2@HHPEAVSurface@2@@Z	3869	0x14000b3d8
?UpdateDesiredSize@TableLayout@DirectUI@@UEAA?AUtagSIZE@@PEAVElement@2@HHPEAVSurface@2@@Z	3870	0x14002b38c
?UpdateDesiredSize@VerticalFlowLayout@DirectUI@@UEAA?AUtagSIZE@@PEAVElement@2@HHPEAVSurface@2@@Z	3871	0x14005fdd8
?UpdateElement@TouchSelect@DirectUI@@QEAAJHPEAVElement@2@PEBG@Z	3872	0x14004de5c
?UpdateLayout@Element@DirectUI@@QEAAXXZ	3873	0x14001a27c
?UpdateLayoutRect@Layout@DirectUI@@SAXPEAVElement@2@HH0HHHH@Z	3874	0x14000e674
?UpdateSheets@DUIXmlParser@DirectUI@@QEAAJPEAVElement@2@@Z	3875	0x14005c8cc
?UpdateString@TouchSelect@DirectUI@@QEAAJHPEBG@Z	3876	0x14000c77c
?UpdateStyleSheets@HWNDElement@DirectUI@@IEAAXXZ	3877	0x1400561bc
?UpdateToggleState@SemanticZoomToggle@DirectUI@@QEAAXW4SemanticZoomToggleState@@_N@Z	3878	0x140030fc4
?UpdateTooltip@Element@DirectUI@@MEAAXPEAV12@@Z	3879	0x1400184c8
?UpdateTooltip@HWNDElement@DirectUI@@UEAAXPEAVElement@2@@Z	3880	0x14002398c
?UpdateTooltip@TouchHWNDElement@DirectUI@@UEAAXPEAVElement@2@@Z	3881	0x14001f7b8
?UpdateView@TouchScrollViewer@DirectUI@@SA?AVUID@@XZ	3882	0x140055d28
?UseFixedTooltipOffset@TouchSlider@DirectUI@@QEAAXXZ	3883	0x14001fcec
?UsePerMonitorScaling@TouchHWNDElement@DirectUI@@QEAAXPEAUHMONITOR__@@@Z	3884	0x1400325fc
?UserTextChanged@TouchEditBase@DirectUI@@SA?AVUID@@XZ	3885	0x140035a0c
?UserTextUpdateNoChange@TouchEditBase@DirectUI@@SA?AVUID@@XZ	3886	0x14004d10c
?UsesDesktopPerMonitorScalingProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	3887	0x140005c64
?ValuePattern@Schema@DirectUI@@2HA	3888	0x140024bd8
?Value_IsReadOnly_Property@Schema@DirectUI@@2HA	3889	0x1400598f8
?Value_Value_Property@Schema@DirectUI@@2HA	3890	0x14002a9e8
?VerifyParentage@HWNDHost@DirectUI@@IEAAHXZ	3891	0x14002c7c0
?VerticalProp@ScrollBar@DirectUI@@SAPEBUPropertyInfo@2@XZ	3892	0x140022eac
?VerticalScriptProp@RichText@DirectUI@@SAPEBUPropertyInfo@2@XZ	3893	0x14004aa40
?VirtualizedItemPattern@Schema@DirectUI@@2HA	3894	0x140078104
?VisibleProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	3895	0x140002220
?VisitedProp@TouchHyperLink@DirectUI@@SAPEBUPropertyInfo@2@XZ	3896	0x140062654
?VisualStateProp@TouchSlider@DirectUI@@SAPEBUPropertyInfo@2@XZ	3897	0x14004ac84
?WantEvent@EventManager@DirectUI@@CA_NW4Event@Schema@2@H@Z	3898	0x140042b7c
?WantEvent@EventManager@DirectUI@@SA_NW4Event@Schema@2@@Z	3899	0x140028aac
?WantPropertyEvent@EventManager@DirectUI@@SA_NH@Z	3900	0x14006b510
?WantTabsProp@Edit@DirectUI@@SAPEBUPropertyInfo@2@XZ	3901	0x14006aa4c
?WidthProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	3902	0x140037d44
?WinStyleProp@CCBase@DirectUI@@SAPEBUPropertyInfo@2@XZ	3903	0x14002fd58
?WindowAccessGradientColorProp@TouchHWNDElement@DirectUI@@SAPEBUPropertyInfo@2@XZ	3904	0x140005f00
?WindowActiveProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	3905	0x14002f158
?WindowControlType@Schema@DirectUI@@2HA	3906	0x140028320
?WindowDpiChanged@HWNDElement@DirectUI@@SA?AVUID@@XZ	3907	0x140005ce0
?WindowPattern@Schema@DirectUI@@2HA	3908	0x140055364
?WindowWindowClosedEvent@Schema@DirectUI@@2HA	3909	0x14001615c
?WindowWindowOpenedEvent@Schema@DirectUI@@2HA	3910	0x14003b958
?WndProc@HWNDElement@DirectUI@@UEAA_JPEAUHWND__@@I_K_J@Z	3911	0x140004c84
?WndProc@NativeHWNDHost@DirectUI@@SA_JPEAUHWND__@@I_K_J@Z	3912	0x140052980
?WndProc@TouchHWNDElement@DirectUI@@UEAA_JPEAUHWND__@@I_K_J@Z	3913	0x14003267c
?WndProc@XHost@DirectUI@@SA_JPEAUHWND__@@I_K_J@Z	3914	0x140020ad0
?WrapKeyboardNavigateProp@HWNDElement@DirectUI@@SAPEBUPropertyInfo@2@XZ	3915	0x14002efcc
?XBarVisibilityProp@BaseScrollViewer@DirectUI@@SAPEBUPropertyInfo@2@XZ	3916	0x14001f228
?XOffsetProp@BaseScrollViewer@DirectUI@@SAPEBUPropertyInfo@2@XZ	3917	0x14004ce98
?XOffsetProp@Viewer@DirectUI@@SAPEBUPropertyInfo@2@XZ	3918	0x14005d628
?XProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	3919	0x140033ed8
?XScrollableProp@BaseScrollViewer@DirectUI@@SAPEBUPropertyInfo@2@XZ	3920	0x140077bb4
?XScrollableProp@Viewer@DirectUI@@SAPEBUPropertyInfo@2@XZ	3921	0x140018688
?YBarVisibilityProp@BaseScrollViewer@DirectUI@@SAPEBUPropertyInfo@2@XZ	3922	0x14001c1ec
?YOffsetProp@BaseScrollViewer@DirectUI@@SAPEBUPropertyInfo@2@XZ	3923	0x14006272c
?YOffsetProp@Viewer@DirectUI@@SAPEBUPropertyInfo@2@XZ	3924	0x14006a3d8
?YProp@Element@DirectUI@@SAPEBUPropertyInfo@2@XZ	3925	0x140073c64
?YScrollableProp@BaseScrollViewer@DirectUI@@SAPEBUPropertyInfo@2@XZ	3926	0x140072654
?YScrollableProp@Viewer@DirectUI@@SAPEBUPropertyInfo@2@XZ	3927	0x140032d1c
?ZoomToRect@TouchScrollViewer@DirectUI@@QEAAJPEBUtagRECT@@_N@Z	3928	0x140063590
?ZoomToRectManualVisualSwap@TouchScrollViewer@DirectUI@@QEAAJMMMMPEBHMMM_N@Z	3929	0x1400724c0
?_AddDependency@Element@DirectUI@@SAXPEAV12@PEBUPropertyInfo@2@HPEAUDepRecs@2@PEAVDeferCycle@2@PEAJ@Z	3930	0x14002643c
?_BitAccurateFillRect@Macro@DirectUI@@KAXPEAUHDC__@@HHHHEEEEK@Z	3931	0x140048314
?_BroadcastEventWorker@Element@DirectUI@@AEAAXPEAUEvent@2@@Z	3932	0x14001c65c
?_BuildChildren@DUIXmlParser@DirectUI@@IEAAJPEAUIXmlReader@@PEAVElement@2@@Z	3933	0x140050f84
?_BuildElement@DUIXmlParser@DirectUI@@IEAAJPEAUIXmlReader@@PEAVElement@2@PEAPEAV42@@Z	3934	0x14000cf28
?_BuildFromBinary@DUIXmlParser@DirectUI@@IEAAJPEAVElement@2@0PEBGPEAKPEAPEAV32@@Z	3935	0x140055700
?_BuildStyles@DUIXmlParser@DirectUI@@IEAAJPEAUIXmlReader@@@Z	3936	0x140012bc8
?_CachedValueIsEqual@Element@DirectUI@@AEAAHPEBUPropertyInfo@2@PEAV12@@Z	3937	0x140052af0
?_CalcTabOrder@ShellBorderLayout@DirectUI@@AEAAJPEAVElement@2@@Z	3938	0x14004e3e8
?_ClearNeedsLayout@Element@DirectUI@@QEAAXXZ	3939	0x14006b358
?_ClearTooltipState@TouchHWNDElement@DirectUI@@IEAAXXZ	3940	0x140051fb8
?_CreateAndSetLayout@DirectUI@@YAJPEAVElement@1@P6AJHPEAHPEAPEAVValue@1@@ZH1@Z	3941	0x140006024
?_CreateValue@DUIXmlParser@DirectUI@@IEAAJPEBGPEBUPropertyInfo@2@PEAPEAVValue@2@@Z	3942	0x140040aac
?_CtrlWndProc@HWNDHost@DirectUI@@CAHPEAXPEAUHWND__@@I_K_JPEA_J@Z	3943	0x140079c88
?_DeleteCtrlWnd@HWNDHost@DirectUI@@AEAAXXZ	3944	0x14000643c
?_DestroyTables@DUIXmlParser@DirectUI@@QEAAXXZ	3945	0x14002c3dc
?_DestroyTooltip@TouchHWNDElement@DirectUI@@IEAAXXZ	3946	0x1400117a4
?_DisplayNodeCallback@Element@DirectUI@@SAJPEAUHGADGET__@@PEAXPEAUEventMsg@@@Z	3947	0x1400708d8
?_EndOptimizedLayoutQ@Element@DirectUI@@QEAAXXZ	3948	0x14001b71c
?_EnterOnCurrentThread@DUIXmlParser@DirectUI@@IEAAJXZ	3949	0x140033380
?_Fill@Element@DirectUI@@IEAAXPEAUHDC__@@KHHHH_N@Z	3950	0x140051924
?_FireWindowDpiChangeEvent@HWNDElement@DirectUI@@IEAAXXZ	3951	0x14004ef2c
?_FlushDS@Element@DirectUI@@AEAAXPEAVDeferCycle@2@@Z	3952	0x14003e790
?_FlushLayout@Element@DirectUI@@KAXPEAV12@PEAVDeferCycle@2@@Z	3953	0x14000b488
?_GetBitmapSize@Macro@DirectUI@@KA_NPEAUHBITMAP__@@PEAUtagSIZE@@@Z	3954	0x140047a48
?_GetBuriedSheetDependencies@Element@DirectUI@@AEAAXPEBUPropertyInfo@2@PEAV12@PEAUDepRecs@2@PEAVDeferCycle@2@PEAJ@Z	3955	0x140038a40
?_GetChangesUpdatePass@Element@DirectUI@@QEAAHXZ	3956	0x140076d10
?_GetClassForElement@DUIXmlParser@DirectUI@@IEAAJPEAUIXmlReader@@PEAPEAUIClassInfo@2@@Z	3957	0x140062a84
?_GetClassForElementByName@DUIXmlParser@DirectUI@@IEAAJPEBGPEAPEAUIClassInfo@2@@Z	3958	0x14007250c
?_GetComputedValue@Element@DirectUI@@AEAAPEAVValue@2@PEBUPropertyInfo@2@PEAUUpdateCache@2@@Z	3959	0x140054368
?_GetContent@Viewer@DirectUI@@AEAAPEAVElement@2@XZ	3960	0x1400749ac
?_GetDependencies@Element@DirectUI@@AEAAJPEBUPropertyInfo@2@HPEAUDepRecs@2@HPEAVValue@2@PEAVDeferCycle@2@@Z	3961	0x140018528
?_GetLineInfo@DUIXmlParser@DirectUI@@IEAA?AULINEINFO@2@PEAUIXmlReader@@@Z	3962	0x14005255c
?_GetLocalValue@Element@DirectUI@@AEAAPEAVValue@2@PEBUPropertyInfo@2@@Z	3963	0x14000b038
?_GetLocalValueFromVM@Element@DirectUI@@AEAAPEAVValue@2@PEBUPropertyInfo@2@@Z	3964	0x1400375e0
?_GetNeedsLayout@Element@DirectUI@@QEAAIXZ	3965	0x140053d8c
?_GetPerMonitorScaleFactorForDesktopWindow@HWNDElement@DirectUI@@IEAAHPEAUHWND__@@@Z	3966	0x1400380e4
?_GetPropertyForAttribute@DUIXmlParser@DirectUI@@IEAAJPEAUIXmlReader@@PEAUIClassInfo@2@PEAPEBUPropertyInfo@2@@Z	3967	0x14002d178
?_GetSpecifiedValue@Element@DirectUI@@AEAAPEAVValue@2@PEBUPropertyInfo@2@PEAUUpdateCache@2@@Z	3968	0x140065910
?_GetSpecifiedValueIgnoreCache@Element@DirectUI@@AEAAPEAVValue@2@PEBUPropertyInfo@2@@Z	3969	0x140076268
?_GetValueForStyleSheet@DUIXmlParser@DirectUI@@IEAAJPEAUIClassInfo@2@PEBG1PEAPEBUPropertyInfo@2@PEAPEAVValue@2@@Z	3970	0x140054c20
?_HandleImmersiveColorSchemeChange@HWNDElement@DirectUI@@IEAAXXZ	3971	0x140029850
?_InheritProperties@Element@DirectUI@@AEAAXXZ	3972	0x140038260
?_InitializeTables@DUIXmlParser@DirectUI@@QEAAJXZ	3973	0x14001fbb0
?_InternalEnsureVisible@Viewer@DirectUI@@AEAA_NHHHH@Z	3974	0x14007a4b4
?_InvalidateCachedDSConstraints@Element@DirectUI@@KAXPEAV12@@Z	3975	0x14005f80c
?_IsSemanticZoomControl@ElementProxy@DirectUI@@AEAA_NH@Z	3976	0x140063230
?_IsWindowHostUsingDoNotStealFocusFlag@ElementProxy@DirectUI@@AEAA_NXZ	3977	0x140004a54
?_LeaveOnCurrentThread@DUIXmlParser@DirectUI@@IEAAXXZ	3978	0x140020048
?_LoadImage32BitsPerPixel@Macro@DirectUI@@KAPEAVValue@2@PEBG@Z	3979	0x14006a0a4
?_MarkElementForDS@Element@DirectUI@@SAHPEAV12@@Z	3980	0x14005e3fc
?_MarkElementForLayout@Element@DirectUI@@SAHPEAV12@I@Z	3981	0x14006de00
?_OnFontPropChanged@Element@DirectUI@@IEAAXPEAVValue@2@@Z	3982	0x140030818
?_OnGetInfoTip@CCTreeView@DirectUI@@MEAAJPEBUtagNMTVGETINFOTIPW@@@Z	3983	0x14000441c
?_OnItemChanged@CCTreeView@DirectUI@@MEAAJPEBUtagTVITEMCHANGE@@@Z	3984	0x1400285bc
?_OnUIStateChanged@HWNDElement@DirectUI@@MEAAXGG@Z	3985	0x140026554
?_OnUIStateChanged@TouchHWNDElement@DirectUI@@MEAAXGG@Z	3986	0x140014554
?_ParseBehavior@DUIXmlParser@DirectUI@@IEAAJPEAVElement@2@PEBG@Z	3987	0x140008154
?_ParseLayout@DUIXmlParser@DirectUI@@IEAAJPEBGPEAPEAVValue@2@@Z	3988	0x1400338a4
?_ParseValue@DUIXmlParser@DirectUI@@IEAAJPEBUPropertyInfo@2@PEBGPEAPEAVValue@2@@Z	3989	0x140010f54
?_PostEvent@Element@DirectUI@@AEAAXPEAUEvent@2@H@Z	3990	0x140024f30
?_PostSourceChange@Element@DirectUI@@AEAAJXZ	3991	0x140074920
?_PreSourceChange@Element@DirectUI@@AEAAJP6APEBUPropertyInfo@2@XZHPEAVValue@2@1@Z	3992	0x140041a24
?_PreSourceChange@Element@DirectUI@@AEAAJPEBUPropertyInfo@2@HPEAVValue@2@1@Z	3993	0x140055764
?_RecordElementBehaviors@DUIXmlParser@DirectUI@@IEAAJPEAUIXmlReader@@PEBG@Z	3994	0x140004df4
?_RecordElementLayout@DUIXmlParser@DirectUI@@IEAAJPEAUIXmlReader@@PEBG@Z	3995	0x140017744
?_RecordElementStyleSheet@DUIXmlParser@DirectUI@@IEAAJPEBG_N@Z	3996	0x140077404
?_RecordElementTrees@DUIXmlParser@DirectUI@@IEAAJPEAUIXmlReader@@@Z	3997	0x140002744
?_RecordElementWithChildren@DUIXmlParser@DirectUI@@IEAAJPEAUIXmlReader@@_NPEAPEAG@Z	3998	0x140076ac4
?_RecordInstantiateElement@DUIXmlParser@DirectUI@@IEAAJPEAUIXmlReader@@PEAPEAG@Z	3999	0x14002add0
?_RecordSetElementProperties@DUIXmlParser@DirectUI@@IEAAJPEAUIXmlReader@@@Z	4000	0x14007a2dc
?_RecordSetValue@DUIXmlParser@DirectUI@@IEAAJPEAUIXmlReader@@PEBG1@Z	4001	0x1400563dc
?_RemoveLocalValue@Element@DirectUI@@IEAAJP6APEBUPropertyInfo@2@XZ_N@Z	4002	0x140054b68
?_RemoveLocalValue@Element@DirectUI@@IEAAJPEBUPropertyInfo@2@_N@Z	4003	0x140029030
?_RepeatButtonActionCallback@RepeatButton@DirectUI@@CAXPEAUGMA_ACTIONINFO@@@Z	4004	0x140045330
?_Reset@ShellBorderLayout@DirectUI@@AEAAXXZ	4005	0x14001beb0
?_ResolveStyleSheet@DUIXmlParser@DirectUI@@IEAAJPEBGPEAPEAVValue@2@PEAI@Z	4006	0x14001b1a0
?_ScalePointsToPixels@DUIXmlParser@DirectUI@@AEBAHH@Z	4007	0x14001ff08
?_ScalePointsToPixels@DUIXmlParser@DirectUI@@AEBAMM@Z	4008	0x1400793a8
?_ScaleRelativePixels@DUIXmlParser@DirectUI@@AEBAHH@Z	4009	0x140065fb4
?_ScaleRelativePixels@DUIXmlParser@DirectUI@@AEBAMM@Z	4010	0x140031e14
?_SelfLayoutDoLayout@Clipper@DirectUI@@UEAAXHH@Z	4011	0x140004060
?_SelfLayoutDoLayout@Element@DirectUI@@MEAAXHH@Z	4012	0x14001cc20
?_SelfLayoutDoLayout@ScrollBar@DirectUI@@UEAAXHH@Z	4013	0x1400496a8
?_SelfLayoutDoLayout@TouchScrollBar@DirectUI@@UEAAXHH@Z	4014	0x140030798
?_SelfLayoutDoLayout@Viewer@DirectUI@@UEAAXHH@Z	4015	0x14005ae60
?_SelfLayoutUpdateDesiredSize@Clipper@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z	4016	0x14006d044
?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MEAA?AUtagSIZE@@HHPEAVSurface@2@@Z	4017	0x14006abb8
?_SelfLayoutUpdateDesiredSize@ScrollBar@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z	4018	0x140033c34
?_SelfLayoutUpdateDesiredSize@TouchScrollBar@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z	4019	0x140018964
?_SelfLayoutUpdateDesiredSize@Viewer@DirectUI@@UEAA?AUtagSIZE@@HHPEAVSurface@2@@Z	4020	0x14001be00
?_SetBinaryXml@DUIXmlParser@DirectUI@@IEAAJPEBE_KPEAUHINSTANCE__@@@Z	4021	0x140073cc4
?_SetGroupChanges@Element@DirectUI@@SA_NPEAV12@HPEAVDeferCycle@2@@Z	4022	0x14004031c
?_SetNeedsLayout@Element@DirectUI@@QEAAHI@Z	4023	0x140079fb8
?_SetProperties@DUIXmlParser@DirectUI@@IEAAJPEAUIXmlReader@@PEAUIClassInfo@2@PEAVElement@2@@Z	4024	0x1400740f8
?_SetRelPixRect@Element@DirectUI@@AEAAJPEBUPropertyInfo@2@HHHH@Z	4025	0x140057644
?_SetRelPixValue@Element@DirectUI@@AEAAJPEBUPropertyInfo@2@H@Z	4026	0x140062bd0
?_SetValue@Element@DirectUI@@IEAAJP6APEBUPropertyInfo@2@XZHPEAVValue@2@_N@Z	4027	0x140022200
?_SetValue@Element@DirectUI@@IEAAJPEBUPropertyInfo@2@HPEAVValue@2@_N@Z	4028	0x14002f8dc
?_SetXMLFromResource@DUIXmlParser@DirectUI@@IEAAJPEBG0PEAUHINSTANCE__@@11@Z	4029	0x14001a4a4
?_SetupParserState@DUIXmlParser@DirectUI@@IEAAJPEAUHINSTANCE__@@0@Z	4030	0x140011f80
?_SinkWndProc@HWNDHost@DirectUI@@CAHPEAXPEAUHWND__@@I_K_JPEA_J@Z	4031	0x1400675b4
?_StartOptimizedLayoutQ@Element@DirectUI@@QEAAXXZ	4032	0x14004ee0c
?_SyncBackground@Element@DirectUI@@AEAAXXZ	4033	0x14002dd3c
?_SyncRedrawStyle@Element@DirectUI@@AEAAXXZ	4034	0x140022e10
?_SyncVisible@Element@DirectUI@@AEAAXXZ	4035	0x14005f364
?_TransferGroupFlags@Element@DirectUI@@SAXPEAV12@H@Z	4036	0x140079f40
?_UpdateDesiredSize@Element@DirectUI@@QEAA?AUtagSIZE@@HHPEAVSurface@2@@Z	4037	0x1400178e4
?_UpdateDesktopScaleFactor@HWNDElement@DirectUI@@AEAAHXZ	4038	0x140028b04
?_UpdateLayoutPosition@Element@DirectUI@@QEAAXHH@Z	4039	0x14006ab98
?_UpdateLayoutSize@Element@DirectUI@@QEAAXHH@Z	4040	0x140042300
?_UpdatePropertyInCache@Element@DirectUI@@AEAAXPEBUPropertyInfo@2@@Z	4041	0x14006a9bc
?_UpdateTileList@NineGridLayout@DirectUI@@AEAAXHPEAVElement@2@@Z	4042	0x14003d5d8
?_UsesUIAProxies@ElementProxy@DirectUI@@IEAAHXZ	4043	0x140061fbc
?_VoidPCNotifyTree@Element@DirectUI@@CAXHPEAVDeferCycle@2@@Z	4044	0x14006c1e4
?_WndProc@InvokeHelper@DirectUI@@CAHPEAXPEAUHWND__@@I_K_JPEA_J@Z	4045	0x14005213c
?_ZeroRelease@Value@DirectUI@@AEAAXXZ	4046	0x14006f660
?_atmArrow@Expando@DirectUI@@0GA	4047	0x140068adc
?_atmClipper@Expando@DirectUI@@0GA	4048	0x140070a00
?_roleMapping@Schema@DirectUI@@0QBURoleMap@12@B	4049	0x14005c754
?accDoDefaultAction@DuiAccessible@DirectUI@@UEAAJUtagVARIANT@@@Z	4050	0x1400755f4
?accDoDefaultAction@HWNDHostAccessible@DirectUI@@UEAAJUtagVARIANT@@@Z	4051	0x140014698
?accHitTest@DuiAccessible@DirectUI@@UEAAJJJPEAUtagVARIANT@@@Z	4052	0x14004b4b0
?accHitTest@HWNDHostAccessible@DirectUI@@UEAAJJJPEAUtagVARIANT@@@Z	4053	0x14004d208
?accLocation@DuiAccessible@DirectUI@@UEAAJPEAJ000UtagVARIANT@@@Z	4054	0x14005b264
?accLocation@HWNDHostAccessible@DirectUI@@UEAAJPEAJ000UtagVARIANT@@@Z	4055	0x14002a0c4
?accNavigate@DuiAccessible@DirectUI@@UEAAJJUtagVARIANT@@PEAU3@@Z	4056	0x140058cc4
?accNavigate@HWNDHostAccessible@DirectUI@@UEAAJJUtagVARIANT@@PEAU3@@Z	4057	0x14003b234
?accNavigate@HWNDHostClientAccessible@DirectUI@@UEAAJJUtagVARIANT@@PEAU3@@Z	4058	0x1400593a8
?accSelect@DuiAccessible@DirectUI@@UEAAJJUtagVARIANT@@@Z	4059	0x14005aac8
?accSelect@HWNDHostAccessible@DirectUI@@UEAAJJUtagVARIANT@@@Z	4060	0x14003989c
?advanceFrameActionStart@Movie@DirectUI@@AEAAXXZ	4061	0x14001f5a0
?advanceFrameActionStop@Movie@DirectUI@@AEAAXXZ	4062	0x140006e94
?cChangeBulk@EventManager@DirectUI@@0HB	4063	0x14002fb9c
?c_RefCountBitOffset@Value@DirectUI@@0HB	4064	0x1400163c0
?c_RefCountMask@Value@DirectUI@@0JB	4065	0x14003089c
?c_SingleRefCount@Value@DirectUI@@0JB	4066	0x140045fa0
?c_rgar@AccessibleButton@DirectUI@@0QBUACCESSIBLEROLE@12@B	4067	0x14006d7e8
?doAction@Movie@DirectUI@@QEAAXPEAUGMA_ACTIONINFO@@@Z	4068	0x14000b430
?g_cRefCount@ResourceModuleHandles@DirectUI@@0JC	4069	0x140021790
?g_controlInfoTable@Schema@DirectUI@@0QBUControlInfo@12@B	4070	0x1400723a4
?g_cs@ElementProviderManager@DirectUI@@2U_RTL_CRITICAL_SECTION@@A	4071	0x140053664
?g_cs@EventManager@DirectUI@@0U_RTL_CRITICAL_SECTION@@A	4072	0x14003529c
?g_cs@InvokeManager@DirectUI@@0U_RTL_CRITICAL_SECTION@@A	4073	0x14001428c
?g_dwElSlot@DirectUI@@3KA	4074	0x14006f600
?g_eventInfoTable@Schema@DirectUI@@0QBUEventInfo@12@B	4075	0x14003b214
?g_eventMapping@Schema@DirectUI@@0QBUEventMap@12@B	4076	0x140033a70
?g_eventRegisteredMap@EventManager@DirectUI@@0PAIA	4077	0x14007c814
?g_fInited@Schema@DirectUI@@0_NA	4078	0x14002f26c
?g_fWantAnyEvent@EventManager@DirectUI@@0_NA	4079	0x1400072d8
?g_pArrayInvokeHelper@InvokeManager@DirectUI@@0PEAV?$UiaArray@PEAVInvokeHelper@DirectUI@@@2@EA	4080	0x140007290
?g_pArrayPprv@ElementProviderManager@DirectUI@@0PEAV?$UiaArray@PEAVElementProvider@DirectUI@@@2@EA	4081	0x140037818
?g_pArrayPropertyEvent@EventManager@DirectUI@@0PEAV?$UiaArray@H@2@EA	4082	0x1400078bc
?g_patternInfoTable@Schema@DirectUI@@0QBUPatternInfo@12@B	4083	0x14006586c
?g_patternMapping@Schema@DirectUI@@0QBUPatternMap@12@B	4084	0x14002f468
?g_propertyInfoTable@Schema@DirectUI@@0QBUPropertyInfo@12@B	4085	0x14004d8b4
?g_rgMouseMap@HWNDHost@DirectUI@@0QAY02$$CBIA	4086	0x140071bc4
?get_BoundingRectangle@ElementProvider@DirectUI@@UEAAJPEAUUiaRect@@@Z	4087	0x14001f778
?get_CanSelectMultiple@SelectionProvider@DirectUI@@UEAAJPEAH@Z	4088	0x14003e4dc
?get_Column@GridItemProvider@DirectUI@@UEAAJPEAH@Z	4089	0x14002ad3c
?get_ColumnCount@GridProvider@DirectUI@@UEAAJPEAH@Z	4090	0x14004559c
?get_ColumnSpan@GridItemProvider@DirectUI@@UEAAJPEAH@Z	4091	0x140031c24
?get_ContainingGrid@GridItemProvider@DirectUI@@UEAAJPEAPEAUIRawElementProviderSimple@@@Z	4092	0x1400078a8
?get_ExpandCollapseState@ExpandCollapseProvider@DirectUI@@UEAAJPEAW4ExpandCollapseState@@@Z	4093	0x140050a80
?get_FragmentRoot@ElementProvider@DirectUI@@UEAAJPEAPEAUIRawElementProviderFragmentRoot@@@Z	4094	0x140062cf0
?get_HorizontalScrollPercent@ScrollProvider@DirectUI@@UEAAJPEAN@Z	4095	0x14006c0d0
?get_HorizontalViewSize@ScrollProvider@DirectUI@@UEAAJPEAN@Z	4096	0x140003310
?get_HorizontallyScrollable@ScrollProvider@DirectUI@@UEAAJPEAH@Z	4097	0x14002882c
?get_HostRawElementProvider@ElementProvider@DirectUI@@UEAAJPEAPEAUIRawElementProviderSimple@@@Z	4098	0x140073308
?get_IsReadOnly@RangeValueProvider@DirectUI@@UEAAJPEAH@Z	4099	0x140040650
?get_IsReadOnly@ValueProvider@DirectUI@@UEAAJPEAH@Z	4100	0x140034884
?get_IsSelected@SelectionItemProvider@DirectUI@@UEAAJPEAH@Z	4101	0x14006b8cc
?get_IsSelectionRequired@SelectionProvider@DirectUI@@UEAAJPEAH@Z	4102	0x14007498c
?get_LargeChange@RangeValueProvider@DirectUI@@UEAAJPEAN@Z	4103	0x140045b74
?get_Maximum@RangeValueProvider@DirectUI@@UEAAJPEAN@Z	4104	0x1400388fc
?get_Minimum@RangeValueProvider@DirectUI@@UEAAJPEAN@Z	4105	0x140009fc0
?get_ProviderOptions@ElementProvider@DirectUI@@UEAAJPEAW4ProviderOptions@@@Z	4106	0x14006b550
?get_Row@GridItemProvider@DirectUI@@UEAAJPEAH@Z	4107	0x140010e58
?get_RowCount@GridProvider@DirectUI@@UEAAJPEAH@Z	4108	0x14004f860
?get_RowOrColumnMajor@TableProvider@DirectUI@@UEAAJPEAW4RowOrColumnMajor@@@Z	4109	0x1400576c0
?get_RowSpan@GridItemProvider@DirectUI@@UEAAJPEAH@Z	4110	0x140017f40
?get_SelectionContainer@SelectionItemProvider@DirectUI@@UEAAJPEAPEAUIRawElementProviderSimple@@@Z	4111	0x140011384
?get_SmallChange@RangeValueProvider@DirectUI@@UEAAJPEAN@Z	4112	0x140003dbc
?get_ToggleState@ToggleProvider@DirectUI@@UEAAJPEAW4ToggleState@@@Z	4113	0x140074e40
?get_Value@RangeValueProvider@DirectUI@@UEAAJPEAN@Z	4114	0x14005c310
?get_Value@ValueProvider@DirectUI@@UEAAJPEAPEAG@Z	4115	0x1400603dc
?get_VerticalScrollPercent@ScrollProvider@DirectUI@@UEAAJPEAN@Z	4116	0x140008a44
?get_VerticalViewSize@ScrollProvider@DirectUI@@UEAAJPEAN@Z	4117	0x14001d4c4
?get_VerticallyScrollable@ScrollProvider@DirectUI@@UEAAJPEAH@Z	4118	0x140071a24
?get_accChild@DuiAccessible@DirectUI@@UEAAJUtagVARIANT@@PEAPEAUIDispatch@@@Z	4119	0x140024480
?get_accChild@HWNDHostAccessible@DirectUI@@UEAAJUtagVARIANT@@PEAPEAUIDispatch@@@Z	4120	0x140035880
?get_accChildCount@DuiAccessible@DirectUI@@UEAAJPEAJ@Z	4121	0x14007447c
?get_accChildCount@HWNDHostAccessible@DirectUI@@UEAAJPEAJ@Z	4122	0x14003b234
?get_accDefaultAction@DuiAccessible@DirectUI@@UEAAJUtagVARIANT@@PEAPEAG@Z	4123	0x140046484
?get_accDefaultAction@HWNDHostAccessible@DirectUI@@UEAAJUtagVARIANT@@PEAPEAG@Z	4124	0x14007b9c8
?get_accDescription@DuiAccessible@DirectUI@@UEAAJUtagVARIANT@@PEAPEAG@Z	4125	0x14004c0cc
?get_accDescription@HWNDHostAccessible@DirectUI@@UEAAJUtagVARIANT@@PEAPEAG@Z	4126	0x14003b7fc
?get_accFocus@DuiAccessible@DirectUI@@UEAAJPEAUtagVARIANT@@@Z	4127	0x14002e050
?get_accFocus@HWNDHostAccessible@DirectUI@@UEAAJPEAUtagVARIANT@@@Z	4128	0x1400535f8
?get_accHelp@DuiAccessible@DirectUI@@UEAAJUtagVARIANT@@PEAPEAG@Z	4129	0x140008b60
?get_accHelp@HWNDHostAccessible@DirectUI@@UEAAJUtagVARIANT@@PEAPEAG@Z	4130	0x14003d56c
?get_accHelpTopic@DuiAccessible@DirectUI@@UEAAJPEAPEAGUtagVARIANT@@PEAJ@Z	4131	0x140073b58
?get_accHelpTopic@HWNDHostAccessible@DirectUI@@UEAAJPEAPEAGUtagVARIANT@@PEAJ@Z	4132	0x14003e258
?get_accKeyboardShortcut@DuiAccessible@DirectUI@@UEAAJUtagVARIANT@@PEAPEAG@Z	4133	0x140075f44
?get_accKeyboardShortcut@HWNDHostAccessible@DirectUI@@UEAAJUtagVARIANT@@PEAPEAG@Z	4134	0x14000133c
?get_accName@DuiAccessible@DirectUI@@UEAAJUtagVARIANT@@PEAPEAG@Z	4135	0x140041934
?get_accName@HWNDHostAccessible@DirectUI@@UEAAJUtagVARIANT@@PEAPEAG@Z	4136	0x140012288
?get_accParent@DuiAccessible@DirectUI@@UEAAJPEAPEAUIDispatch@@@Z	4137	0x1400071c8
?get_accParent@HWNDElementAccessible@DirectUI@@UEAAJPEAPEAUIDispatch@@@Z	4138	0x140079684
?get_accParent@HWNDHostAccessible@DirectUI@@UEAAJPEAPEAUIDispatch@@@Z	4139	0x14005d0b4
?get_accParent@HWNDHostClientAccessible@DirectUI@@UEAAJPEAPEAUIDispatch@@@Z	4140	0x140003334
?get_accRole@DuiAccessible@DirectUI@@UEAAJUtagVARIANT@@PEAU3@@Z	4141	0x1400389b0
?get_accRole@HWNDHostAccessible@DirectUI@@UEAAJUtagVARIANT@@PEAU3@@Z	4142	0x1400532e4
?get_accRole@HWNDHostClientAccessible@DirectUI@@UEAAJUtagVARIANT@@PEAU3@@Z	4143	0x14004b248
?get_accSelection@DuiAccessible@DirectUI@@UEAAJPEAUtagVARIANT@@@Z	4144	0x140038540
?get_accSelection@HWNDHostAccessible@DirectUI@@UEAAJPEAUtagVARIANT@@@Z	4145	0x14005c2c0
?get_accState@DuiAccessible@DirectUI@@UEAAJUtagVARIANT@@PEAU3@@Z	4146	0x14004b6cc
?get_accState@HWNDHostAccessible@DirectUI@@UEAAJUtagVARIANT@@PEAU3@@Z	4147	0x1400610f4
?get_accValue@DuiAccessible@DirectUI@@UEAAJUtagVARIANT@@PEAPEAG@Z	4148	0x14001d3ac
?get_accValue@HWNDHostAccessible@DirectUI@@UEAAJUtagVARIANT@@PEAPEAG@Z	4149	0x14006eb38
?put_accName@DuiAccessible@DirectUI@@UEAAJUtagVARIANT@@PEAG@Z	4150	0x14005d6b0
?put_accName@HWNDHostAccessible@DirectUI@@UEAAJUtagVARIANT@@PEAG@Z	4151	0x140062fb8
?put_accValue@DuiAccessible@DirectUI@@UEAAJUtagVARIANT@@PEAG@Z	4152	0x14003eb38
?put_accValue@HWNDHostAccessible@DirectUI@@UEAAJUtagVARIANT@@PEAG@Z	4153	0x14004f6c4
?s_HandleDUIEventMessage@Element@DirectUI@@CA_NPEAV12@PEAUEventMsg@@@Z	4154	0x140017100
?s_ImageHlpFuncList@CallstackTracker@DirectUI@@0PAUIMGHLPFN_LOAD@12@A	4155	0x14006ac08
?s_SyncCallback@CSafeElementProxy@@SAJPEAUHGADGET__@@PEAXPEAUEventMsg@@@Z	4156	0x14006bfdc
?s_XMLParseError@DUIFactory@DirectUI@@CAXPEBG0HPEAX@Z	4157	0x140068e94
?s_fdClr@DUIXmlParser@DirectUI@@1QBU?$FunctionDefinition@K@12@B	4158	0x14005303c
?s_fdFill@DUIXmlParser@DirectUI@@1QBU?$FunctionDefinition@PEAVValue@DirectUI@@@12@B	4159	0x14000cc84
?s_fdGraphic@DUIXmlParser@DirectUI@@1QBU?$FunctionDefinition@PEAVValue@DirectUI@@@12@B	4160	0x1400738e0
?s_fdInt@DUIXmlParser@DirectUI@@1QBU?$FunctionDefinition@H@12@B	4161	0x140048530
?s_fdRect@DUIXmlParser@DirectUI@@1QBU?$FunctionDefinition@UScaledRECT@DirectUI@@@12@B	4162	0x140002988
?s_fdSize@DUIXmlParser@DirectUI@@1QBU?$FunctionDefinition@UScaledSIZE@DirectUI@@@12@B	4163	0x140044e38
?s_fdString@DUIXmlParser@DirectUI@@1QBU?$FunctionDefinition@PEAVValue@DirectUI@@@12@B	4164	0x14004a368
?s_hProcess@CallstackTracker@DirectUI@@0PEAXEA	4165	0x140060aac
?s_hinstImageHlp@CallstackTracker@DirectUI@@0PEAUHINSTANCE__@@EA	4166	0x1400382bc
?s_hinstNtDll@CallstackTracker@DirectUI@@0PEAUHINSTANCE__@@EA	4167	0x140021390
?s_initonceInit@CallstackTracker@DirectUI@@0T_RTL_RUN_ONCE@@A	4168	0x140044910
?s_pClassInfo@AccessibleButton@DirectUI@@0PEAUIClassInfo@2@EA	4169	0x1400342b0
?s_pClassInfo@AnimationStrip@DirectUI@@0PEAUIClassInfo@2@EA	4170	0x140046b38
?s_pClassInfo@AutoButton@DirectUI@@0PEAUIClassInfo@2@EA	4171	0x1400181ec
?s_pClassInfo@BaseScrollViewer@DirectUI@@0PEAUIClassInfo@2@EA	4172	0x1400239dc
?s_pClassInfo@Bind@DirectUI@@0PEAUIClassInfo@2@EA	4173	0x14002032c
?s_pClassInfo@Browser@DirectUI@@0PEAUIClassInfo@2@EA	4174	0x140032564
?s_pClassInfo@Button@DirectUI@@0PEAUIClassInfo@2@EA	4175	0x140057b18
?s_pClassInfo@CCAVI@DirectUI@@0PEAUIClassInfo@2@EA	4176	0x14004a778
?s_pClassInfo@CCBase@DirectUI@@0PEAUIClassInfo@2@EA	4177	0x140009228
?s_pClassInfo@CCBaseCheckRadioButton@DirectUI@@0PEAUIClassInfo@2@EA	4178	0x14005c958
?s_pClassInfo@CCBaseScrollBar@DirectUI@@0PEAUIClassInfo@2@EA	4179	0x140036120
?s_pClassInfo@CCCheckBox@DirectUI@@0PEAUIClassInfo@2@EA	4180	0x140001948
?s_pClassInfo@CCCommandLink@DirectUI@@0PEAUIClassInfo@2@EA	4181	0x14001a534
?s_pClassInfo@CCHScrollBar@DirectUI@@0PEAUIClassInfo@2@EA	4182	0x14002c1a8
?s_pClassInfo@CCListBox@DirectUI@@0PEAUIClassInfo@2@EA	4183	0x14005ecc4
?s_pClassInfo@CCListView@DirectUI@@0PEAUIClassInfo@2@EA	4184	0x140053460
?s_pClassInfo@CCProgressBar@DirectUI@@0PEAUIClassInfo@2@EA	4185	0x140066818
?s_pClassInfo@CCPushButton@DirectUI@@0PEAUIClassInfo@2@EA	4186	0x140068798
?s_pClassInfo@CCRadioButton@DirectUI@@0PEAUIClassInfo@2@EA	4187	0x140073f34
?s_pClassInfo@CCSysLink@DirectUI@@0PEAUIClassInfo@2@EA	4188	0x14001c7c4
?s_pClassInfo@CCTrackBar@DirectUI@@0PEAUIClassInfo@2@EA	4189	0x1400190d4
?s_pClassInfo@CCTreeView@DirectUI@@0PEAUIClassInfo@2@EA	4190	0x14001c15c
?s_pClassInfo@CCVScrollBar@DirectUI@@0PEAUIClassInfo@2@EA	4191	0x140034f30
?s_pClassInfo@CheckBoxGlyph@DirectUI@@0PEAUIClassInfo@2@EA	4192	0x140048ccc
?s_pClassInfo@Clipper@DirectUI@@0PEAUIClassInfo@2@EA	4193	0x14006b648
?s_pClassInfo@Combobox@DirectUI@@0PEAUIClassInfo@2@EA	4194	0x140025ba0
?s_pClassInfo@DialogElement@DirectUI@@0PEAUIClassInfo@2@EA	4195	0x14004e618
?s_pClassInfo@Edit@DirectUI@@0PEAUIClassInfo@2@EA	4196	0x14003ed7c
?s_pClassInfo@Element@DirectUI@@0PEAUIClassInfo@2@EA	4197	0x140035998
?s_pClassInfo@ElementWithHWND@DirectUI@@0PEAUIClassInfo@2@EA	4198	0x14005dba8
?s_pClassInfo@Expandable@DirectUI@@0PEAUIClassInfo@2@EA	4199	0x14007965c
?s_pClassInfo@Expando@DirectUI@@0PEAUIClassInfo@2@EA	4200	0x140056d48
?s_pClassInfo@ExpandoButtonGlyph@DirectUI@@0PEAUIClassInfo@2@EA	4201	0x140013a94
?s_pClassInfo@HWNDElement@DirectUI@@0PEAUIClassInfo@2@EA	4202	0x140034a54
?s_pClassInfo@HWNDHost@DirectUI@@0PEAUIClassInfo@2@EA	4203	0x14007b214
?s_pClassInfo@Macro@DirectUI@@0PEAUIClassInfo@2@EA	4204	0x14005841c
?s_pClassInfo@Movie@DirectUI@@0PEAUIClassInfo@2@EA	4205	0x1400252d4
?s_pClassInfo@Navigator@DirectUI@@0PEAUIClassInfo@2@EA	4206	0x140027aac
?s_pClassInfo@PText@DirectUI@@0PEAUIClassInfo@2@EA	4207	0x140060f14
?s_pClassInfo@Page@DirectUI@@0PEAUIClassInfo@2@EA	4208	0x140017bf4
?s_pClassInfo@Pages@DirectUI@@0PEAUIClassInfo@2@EA	4209	0x14002ea9c
?s_pClassInfo@Progress@DirectUI@@0PEAUIClassInfo@2@EA	4210	0x14004ffd4
?s_pClassInfo@PushButton@DirectUI@@0PEAUIClassInfo@2@EA	4211	0x14004c608
?s_pClassInfo@RadioButtonGlyph@DirectUI@@0PEAUIClassInfo@2@EA	4212	0x140062034
?s_pClassInfo@RefPointElement@DirectUI@@0PEAUIClassInfo@2@EA	4213	0x1400134e4
?s_pClassInfo@RepeatButton@DirectUI@@0PEAUIClassInfo@2@EA	4214	0x140052878
?s_pClassInfo@Repeater@DirectUI@@0PEAUIClassInfo@2@EA	4215	0x140015cd4
?s_pClassInfo@ScrollBar@DirectUI@@0PEAUIClassInfo@2@EA	4216	0x14007331c
?s_pClassInfo@ScrollViewer@DirectUI@@0PEAUIClassInfo@2@EA	4217	0x14005e054
?s_pClassInfo@Selector@DirectUI@@0PEAUIClassInfo@2@EA	4218	0x14006cb64
?s_pClassInfo@SelectorNoDefault@DirectUI@@0PEAUIClassInfo@2@EA	4219	0x140003304
?s_pClassInfo@StyledScrollViewer@DirectUI@@0PEAUIClassInfo@2@EA	4220	0x14004d1f0
?s_pClassInfo@TextGraphic@DirectUI@@0PEAUIClassInfo@2@EA	4221	0x140059900
?s_pClassInfo@Thumb@DirectUI@@0PEAUIClassInfo@2@EA	4222	0x140052dac
?s_pClassInfo@UnknownElement@DirectUI@@0PEAUIClassInfo@2@EA	4223	0x140001bd0
?s_pClassInfo@Viewer@DirectUI@@0PEAUIClassInfo@2@EA	4224	0x14001d6a0
?s_pClassInfo@XBaby@DirectUI@@0PEAUIClassInfo@2@EA	4225	0x140002a30
?s_pClassInfo@XElement@DirectUI@@0PEAUIClassInfo@2@EA	4226	0x14006f29c
?s_pfnImagehlpApiVersionEx@CallstackTracker@DirectUI@@0P6APEAUAPI_VERSION@@PEAU3@@ZEA	4227	0x140024cd8
?s_pfnRtlCaptureStackBackTrace@CallstackTracker@DirectUI@@0P6AGKKPEAPEAXPEAK@ZEA	4228	0x140046ce4
?s_pfnSymFromAddr@CallstackTracker@DirectUI@@0P6AHPEAX_KPEA_KPEAU_SYMBOL_INFO@@@ZEA	4229	0x140068498
?s_pfnSymGetModuleInfo64@CallstackTracker@DirectUI@@0P6AHPEAX_KPEAU_IMAGEHLP_MODULE64@@@ZEA	4230	0x140029a58
?s_pfnSymInitialize@CallstackTracker@DirectUI@@0P6AHPEAXPEBDH@ZEA	4231	0x14004ee98
?s_pfnSymLoadModule64@CallstackTracker@DirectUI@@0P6A_KPEAX0PEBD1_KK@ZEA	4232	0x140001d10
?s_pfnSymSetOptions@CallstackTracker@DirectUI@@0P6AKK@ZEA	4233	0x140033d28
?s_uButtonFocusChangeMsg@XElement@DirectUI@@2IB	4234	0x140054a58
?s_uInvokeHelperMsg@InvokeHelper@DirectUI@@0IB	4235	0x14002dbfc
?s_uNavigateOutMsg@XElement@DirectUI@@2IB	4236	0x140073a94
?s_uUnhandledSyscharMsg@XElement@DirectUI@@2IB	4237	0x1400458c0
ARGBColorFromEnumI	4238	0x140070718
AllowAllScalingPlateaus	4239	0x14001e3c0
BlurBitmap	4240	0x14001144c
BrushFromEnumI	4241	0x140032670
ColorFromEnumI	4242	0x14000bff8
CreateDUIWrapper	4243	0x14001125c
CreateDUIWrapperEx	4244	0x1400235b8
CreateDUIWrapperFromResource	4245	0x140020924
CreateDUIWrapperTouchEx	1274	0x14006b60c
CreateTouchTooltip	4246	0x14006e6f0
DUI70_DUIXmlParserCreate	4247	0x14002f09c
DUI70_DUIXmlParserCreateElement	4248	0x14003ba94
DUI70_DUIXmlParserDestroy	4249	0x14000f370
DUI70_DUIXmlParserSetXMLFromResource	4250	0x1400287f8
DUI70_ElementAddListener	4251	0x140058a4c
DUI70_ElementDestroy	4252	0x14006ae6c
DUI70_ElementEndDefer	4253	0x1400219e4
DUI70_ElementFindDescendent	4254	0x14006791c
DUI70_ElementGetChildren	4255	0x14007bf94
DUI70_ElementGetRoot	4256	0x140057380
DUI70_ElementRemoveListener	4257	0x140079acc
DUI70_ElementSetAccRole	4258	0x1400174d8
DUI70_ElementSetAccessible	4259	0x140074ee4
DUI70_ElementSetContentAlign	4260	0x140059d0c
DUI70_ElementSetContentString	4261	0x140046e54
DUI70_ElementSetFont	4262	0x140040698
DUI70_ElementSetID	4263	0x1400308bc
DUI70_ElementSetLayoutPos	4264	0x140035654
DUI70_ElementSetVisible	4265	0x140039cf0
DUI70_ElementStartDefer	4266	0x14003f184
DUI70_IsTouchButtonClickEqual	4267	0x140062300
DUI70_RichTextCreate	4268	0x140038120
DUI70_RichTextSetConstrainLayout	4269	0x1400520d8
DUI70_ValueRelease	4270	0x1400668b8
DUIDrawShadowText	4271	0x140042a68
DUIStopPVLAnimation	4272	0x14005346c
DisableAnimations	4273	0x14001e818
DisableInitCallstackTracking	4274	0x1400079ac
DrawShadowTextEx	4275	0x140049790
DuiCreateObject	1442	0x140079d9c
ElementFromGadget	4276	0x140027b38
EnableAnimations	4277	0x14000ab20
FlushThemeHandles	4278	0x1400158c0
ForceDebugBreak	4279	0x14004c60c
GetDesktopDPI	4280	0x14002e728
GetElementDataEntry	4281	0x140023154
GetElementMacro	4282	0x140028da8
GetFontCache	4283	0x1400499f0
GetScaleFactor	4284	0x14003c050
GetThemeHandle	4285	0x140018b58
HStrDup	4286	0x14001e194
HrSysAllocString	4287	0x140007980
InitPreprocessor	4288	0x14003bb68
InitProcessPriv	4289	0x14003586c
InitThread	4290	0x140028d98
IsAnimationsEnabled	4291	0x140025818
IsPalette	4292	0x14000124c
IsUIAutomationProviderEnabled	4293	0x140054008
MultiByteToUnicode	4294	0x140027068
NotifyAccessibilityEvent	4295	0x140037448
PreprocessBuffer	4296	0x14004b2dc
ProcessAlphaBitmapI	4297	0x14006c984
PurgeThemeHandles	4298	0x14001127c
RegisterAllControls	4299	0x140037f5c
RegisterBaseControls	4300	0x14002c8fc
RegisterBrowserControls	4301	0x140076798
RegisterCommonControls	4302	0x14004b964
RegisterExtendedControls	4303	0x1400433a8
RegisterMacroControls	4304	0x140061d88
RegisterMiscControls	4305	0x14000ab2c
RegisterPVLBehaviorFactory	4306	0x14005e4b4
RegisterStandardControls	4307	0x14005e080
RegisterXControls	4308	0x140057970
SetDefAction	4309	0x1400278bc
SetDesktopDPIOverride	4310	0x14000f708
SkipDLLUnloadInitChecks	4311	0x140011e80
StartMessagePump	4312	0x140023b4c
StopMessagePump	4313	0x1400138b0
StrToID	4314	0x140072bac
UiaHideOnGetObject	4315	0x14005a868
UiaOnDestroySink	4316	0x140078e58
UiaOnGetObject	4317	0x140012ec4
UiaOnToolTip	4318	0x140038090
UnInitProcessPriv	4319	0x140003aa4
UnInitThread	4320	0x140045710
UnicodeToMultiByte	4321	0x140039fd0

Version Infos

Description	Data
LegalCopyright	Copyright 2005 - 2009 Nir Sofer
InternalName	TeltwFoo
FileVersion	9.74
CompanyName	NirSoft
ProductName	TeltwFoo
ProductVersion	9.74
FileDescription	ProduKey
OriginalFilename	TeltwFoo.exe
Translation	0x0409 0x04b0

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States
Hebrew	Israel

Network Behavior

Network Port Distribution

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 28, 2021 21:44:32.914527893 CEST	59762	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:44:32.933384895 CEST	53	59762	8.8.8.8	192.168.2.7
Sep 28, 2021 21:44:33.262535095 CEST	54329	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:44:33.282004118 CEST	53	54329	8.8.8.8	192.168.2.7
Sep 28, 2021 21:44:33.752526999 CEST	58052	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:44:33.773546934 CEST	53	58052	8.8.8.8	192.168.2.7
Sep 28, 2021 21:44:34.292809010 CEST	54008	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:44:34.311683893 CEST	53	54008	8.8.8.8	192.168.2.7
Sep 28, 2021 21:44:34.859235048 CEST	59451	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:44:34.878142118 CEST	53	59451	8.8.8.8	192.168.2.7
Sep 28, 2021 21:44:35.318281889 CEST	52914	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:44:35.335392952 CEST	53	52914	8.8.8.8	192.168.2.7
Sep 28, 2021 21:44:36.140065908 CEST	64569	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:44:36.158790112 CEST	53	64569	8.8.8.8	192.168.2.7
Sep 28, 2021 21:44:36.840836048 CEST	52816	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:44:36.859751940 CEST	53	52816	8.8.8.8	192.168.2.7
Sep 28, 2021 21:44:37.438479900 CEST	50781	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:44:37.457474947 CEST	53	50781	8.8.8.8	192.168.2.7
Sep 28, 2021 21:44:38.094086885 CEST	54230	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:44:38.111465931 CEST	53	54230	8.8.8.8	192.168.2.7
Sep 28, 2021 21:44:38.837600946 CEST	54911	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:44:38.856599092 CEST	53	54911	8.8.8.8	192.168.2.7
Sep 28, 2021 21:44:39.442917109 CEST	49958	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:44:39.459717989 CEST	53	49958	8.8.8.8	192.168.2.7
Sep 28, 2021 21:44:40.004431009 CEST	50860	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:44:40.021723032 CEST	53	50860	8.8.8.8	192.168.2.7
Sep 28, 2021 21:44:40.667340040 CEST	50452	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:44:40.686522961 CEST	53	50452	8.8.8.8	192.168.2.7
Sep 28, 2021 21:44:41.195653915 CEST	59730	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:44:41.217421055 CEST	53	59730	8.8.8.8	192.168.2.7
Sep 28, 2021 21:44:41.948391914 CEST	59310	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:44:41.967434883 CEST	53	59310	8.8.8.8	192.168.2.7
Sep 28, 2021 21:44:50.426774979 CEST	51919	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:44:50.446149111 CEST	53	51919	8.8.8.8	192.168.2.7
Sep 28, 2021 21:45:10.505048037 CEST	64296	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:45:10.535124063 CEST	53	64296	8.8.8.8	192.168.2.7
Sep 28, 2021 21:45:24.620482922 CEST	56680	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:45:24.639337063 CEST	53	56680	8.8.8.8	192.168.2.7
Sep 28, 2021 21:45:26.642322063 CEST	58820	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:45:26.661937952 CEST	53	58820	8.8.8.8	192.168.2.7
Sep 28, 2021 21:45:29.815661907 CEST	60983	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:45:29.835289001 CEST	53	60983	8.8.8.8	192.168.2.7
Sep 28, 2021 21:45:35.616197109 CEST	49247	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:45:35.644670963 CEST	53	49247	8.8.8.8	192.168.2.7
Sep 28, 2021 21:45:36.379558086 CEST	52286	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:45:36.398411036 CEST	53	52286	8.8.8.8	192.168.2.7
Sep 28, 2021 21:45:43.542917967 CEST	56064	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:45:43.562242031 CEST	53	56064	8.8.8.8	192.168.2.7
Sep 28, 2021 21:45:52.995096922 CEST	63744	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:45:53.014834881 CEST	53	63744	8.8.8.8	192.168.2.7
Sep 28, 2021 21:46:05.067848921 CEST	61457	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:46:05.095678091 CEST	53	61457	8.8.8.8	192.168.2.7
Sep 28, 2021 21:46:16.030091047 CEST	58367	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:46:16.049643993 CEST	53	58367	8.8.8.8	192.168.2.7
Sep 28, 2021 21:46:48.670340061 CEST	60599	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:46:48.687983990 CEST	53	60599	8.8.8.8	192.168.2.7
Sep 28, 2021 21:47:05.904566050 CEST	59571	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:47:05.945822954 CEST	53	59571	8.8.8.8	192.168.2.7
Sep 28, 2021 21:47:06.325144053 CEST	52689	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:47:06.382050037 CEST	53	52689	8.8.8.8	192.168.2.7
Sep 28, 2021 21:47:07.079267979 CEST	50290	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:47:07.098634005 CEST	53	50290	8.8.8.8	192.168.2.7
Sep 28, 2021 21:47:07.420270920 CEST	60427	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:47:07.440586090 CEST	53	60427	8.8.8.8	192.168.2.7
Sep 28, 2021 21:47:07.775686026 CEST	56209	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:47:07.795600891 CEST	53	56209	8.8.8.8	192.168.2.7
Sep 28, 2021 21:47:08.138396978 CEST	59582	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:47:08.157864094 CEST	53	59582	8.8.8.8	192.168.2.7
Sep 28, 2021 21:47:08.501826048 CEST	60949	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:47:08.590097904 CEST	53	60949	8.8.8.8	192.168.2.7
Sep 28, 2021 21:47:09.105717897 CEST	58542	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:47:09.125333071 CEST	53	58542	8.8.8.8	192.168.2.7
Sep 28, 2021 21:47:09.612030029 CEST	59179	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:47:09.631745100 CEST	53	59179	8.8.8.8	192.168.2.7
Sep 28, 2021 21:47:09.961865902 CEST	60927	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:47:09.997334003 CEST	53	60927	8.8.8.8	192.168.2.7
Sep 28, 2021 21:47:15.954489946 CEST	57854	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:47:15.980361938 CEST	53	57854	8.8.8.8	192.168.2.7
Sep 28, 2021 21:47:23.487835884 CEST	62026	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:47:23.507220984 CEST	53	62026	8.8.8.8	192.168.2.7
Sep 28, 2021 21:47:33.331908941 CEST	59453	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:47:33.365477085 CEST	53	59453	8.8.8.8	192.168.2.7
Sep 28, 2021 21:47:48.980011940 CEST	62468	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:47:49.014292955 CEST	53	62468	8.8.8.8	192.168.2.7
Sep 28, 2021 21:48:05.714082956 CEST	52563	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:48:05.731671095 CEST	53	52563	8.8.8.8	192.168.2.7
Sep 28, 2021 21:48:23.153122902 CEST	54721	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:48:23.186912060 CEST	53	54721	8.8.8.8	192.168.2.7
Sep 28, 2021 21:48:35.352775097 CEST	62826	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:48:35.372843981 CEST	53	62826	8.8.8.8	192.168.2.7
Sep 28, 2021 21:48:41.715086937 CEST	62046	53	192.168.2.7	8.8.8.8
Sep 28, 2021 21:48:41.742312908 CEST	53	62046	8.8.8.8	192.168.2.7

Code Manipulations

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: loaddll64.exe PID: 4020 Parent PID: 5016

General

Start time:	21:44:39
Start date:	28/09/2021
Path:	C:\Windows\System32\loaddll64.exe
Wow64 process (32bit):	false
Commandline:	loaddll64.exe 'C:\Users\user\Desktop\a4vEYL53cZ.dll'
Imagebase:	0x7ff6897c0000
File size:	1136128 bytes
MD5 hash:	E0CC9D126C39A9D2FA1CAD5027EBBD18
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate

Chronological Activities

Analysis Process: cmd.exe PID: 4480 Parent PID: 4020

General

Start time:	21:44:40
Start date:	28/09/2021
Path:	C:\Windows\System32\cmd.exe
Wow64 process (32bit):	false
Commandline:	cmd.exe /C rundll32.exe 'C:\Users\user\Desktop\a4vEYL53cZ.dll',#1
Imagebase:	0x7ff7bf140000
File size:	273920 bytes
MD5 hash:	4E2ACF4F8A396486AB4268C94A6A245F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: rundll32.exe PID: 2716 Parent PID: 4480

General

Start time:	21:44:40
Start date:	28/09/2021
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32.exe 'C:\Users\user\Desktop\a4vEYL53cZ.dll',#1
Imagebase:	0x7ff644a30000
File size:	69632 bytes
MD5 hash:	73C519F050C20580F8A62C849D49215A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: rundll32.exe PID: 4552 Parent PID: 4020

General

Start time:	21:44:40
Start date:	28/09/2021
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32.exe C:\Users\user\Desktop\a4vEYL53cZ.dll,??0?$PatternProvider@VExpandCollapseProvider@DirectUI@@UIExpandCollapseProvider@@$00@DirectUI@@QEAA@XZ
Imagebase:	0x7ff644a30000
File size:	69632 bytes
MD5 hash:	73C519F050C20580F8A62C849D49215A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: explorer.exe PID: 3292 Parent PID: 4552

General

Start time:	21:44:43
Start date:	28/09/2021
Path:	C:\Windows\explorer.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\Explorer.EXE
Imagebase:	0x7ff662bf0000
File size:	3933184 bytes
MD5 hash:	AD5296B280E8F522A8A897C96BAB0E1D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: rundll32.exe PID: 852 Parent PID: 4020

General

Start time:	21:44:44
Start date:	28/09/2021
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32.exe C:\Users\user\Desktop\a4vEYL53cZ.dll,??0?$PatternProvider@VGridItemProvider@DirectUI@@UIGridItemProvider@@$01@DirectUI@@QEAA@XZ
Imagebase:	0x7ff644a30000
File size:	69632 bytes
MD5 hash:	73C519F050C20580F8A62C849D49215A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: rundll32.exe PID: 4676 Parent PID: 4020

General

Start time:	21:44:48
Start date:	28/09/2021
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	rundll32.exe C:\Users\user\Desktop\a4vEYL53cZ.dll,??0?$PatternProvider@VGridProvider@DirectUI@@UIGridProvider@@$02@DirectUI@@QEAA@XZ
Imagebase:	0x7ff644a30000
File size:	69632 bytes
MD5 hash:	73C519F050C20580F8A62C849D49215A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: explorer.exe PID: 1004 Parent PID: 568

General

Start time:	21:44:54
Start date:	28/09/2021
Path:	C:\Windows\explorer.exe
Wow64 process (32bit):	false
Commandline:	explorer.exe
Imagebase:	0x7ff662bf0000
File size:	3933184 bytes
MD5 hash:	AD5296B280E8F522A8A897C96BAB0E1D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: explorer.exe PID: 6228 Parent PID: 568

General

Start time:	21:45:20
Start date:	28/09/2021
Path:	C:\Windows\explorer.exe
Wow64 process (32bit):	false
Commandline:	explorer.exe
Imagebase:	0x7ff662bf0000
File size:	3933184 bytes
MD5 hash:	AD5296B280E8F522A8A897C96BAB0E1D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: explorer.exe PID: 7160 Parent PID: 568

General

Start time:	21:45:36
Start date:	28/09/2021
Path:	C:\Windows\explorer.exe
Wow64 process (32bit):	false
Commandline:	explorer.exe
Imagebase:	0x7ff662bf0000
File size:	3933184 bytes
MD5 hash:	AD5296B280E8F522A8A897C96BAB0E1D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: explorer.exe PID: 6332 Parent PID: 568

General

Start time:	21:45:55
Start date:	28/09/2021
Path:	C:\Windows\explorer.exe
Wow64 process (32bit):	false
Commandline:	explorer.exe
Imagebase:	0x7ff662bf0000
File size:	3933184 bytes
MD5 hash:	AD5296B280E8F522A8A897C96BAB0E1D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: explorer.exe PID: 6252 Parent PID: 568

General

Start time:	21:46:14
Start date:	28/09/2021
Path:	C:\Windows\explorer.exe
Wow64 process (32bit):	false
Commandline:	explorer.exe
Imagebase:	0x7ff662bf0000
File size:	3933184 bytes
MD5 hash:	AD5296B280E8F522A8A897C96BAB0E1D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Analysis Process: explorer.exe PID: 6032 Parent PID: 568

General

Start time:	21:46:40
Start date:	28/09/2021
Path:	C:\Windows\explorer.exe
Wow64 process (32bit):	false
Commandline:	explorer.exe
Imagebase:	0x7ff662bf0000
File size:	3933184 bytes
MD5 hash:	AD5296B280E8F522A8A897C96BAB0E1D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language

Chronological Activities

Disassembly

Code Analysis

Reset < >

Analysis Process: loaddll64.exe PID: 4020 Parent PID: 5016 loaddll64.exeCOMMON

Executed Functions

Function 000000014003F498, Relevance: 6.1, APIs: 4, Instructions: 110threadprocessCOMMON

Download Yara Rule

APIs

GetProcessId.KERNELBASE ref: 000000014003F4C6
CreateToolhelp32Snapshot.KERNEL32 ref: 000000014003F50C
Thread32First.KERNEL32 ref: 000000014003F559
Thread32Next.KERNEL32 ref: 000000014003F5C4

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: Thread32$CreateFirstNextProcessSnapshotToolhelp32
String ID:
API String ID: 1399924146-0
Opcode ID: 28cdd9aa825e42334e9432a9ee422deda0e6896626f3e60dd193e451b7bbc3ce
Instruction ID: 8c95d84fd3dffa945e71cf95d203a8a8f62c52a61d3e7aa21b6c2fd1f2021073
Opcode Fuzzy Hash: 28cdd9aa825e42334e9432a9ee422deda0e6896626f3e60dd193e451b7bbc3ce
Instruction Fuzzy Hash: 1B41A272318A4146FEA7AE27A8017FB2291BBCC7C4F4940317F5A4B2F7EE38C5019614

Uniqueness

Uniqueness Score: -1.00%

Function 00000001400447B8, Relevance: 5.1, APIs: 3, Instructions: 597COMMON

Download Yara Rule

APIs

GetTokenInformation.KERNELBASE ref: 000000014004491D
GetTokenInformation.KERNELBASE ref: 0000000140044999
GetSystemInfo.KERNELBASE ref: 0000000140045090

Part of subcall function 0000000140049CF8: NtClose.NTDLL ref: 0000000140049D20

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: InformationToken$CloseInfoSystem
String ID:
API String ID: 1157706368-0
Opcode ID: c76f72ccffdf1e908396354b4ab2abc14bd09da23f861fddb3942b86bff1bc10
Instruction ID: 60e802ebdcbefcefe9ab0a59f2a3189d782f1f4db6a1cb29122af2eddfc1bef2
Opcode Fuzzy Hash: c76f72ccffdf1e908396354b4ab2abc14bd09da23f861fddb3942b86bff1bc10
Instruction Fuzzy Hash: FA42C07260868080FB72EB27E4943EE6791EB897D4F464232BB59476F6DF34C845CB48

Uniqueness

Uniqueness Score: -1.00%

Function 000000014003F0FC, Relevance: 4.6, APIs: 3, Instructions: 145nativeCOMMON

Download Yara Rule

APIs

CreateFileMappingW.KERNELBASE ref: 000000014003F16C
NtDuplicateObject.NTDLL ref: 000000014003F280
NtDuplicateObject.NTDLL ref: 000000014003F303

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: DuplicateObject$CreateFileMapping
String ID:
API String ID: 737858986-0
Opcode ID: abcb7a610a6057af1dd7f73485ad282c2fd529db8aa55c1027b8287368611be6
Instruction ID: 90f20d4007570bc01b8c07b977e1dcc6c37cf6ca34048912c138e8e6b9267239
Opcode Fuzzy Hash: abcb7a610a6057af1dd7f73485ad282c2fd529db8aa55c1027b8287368611be6
Instruction Fuzzy Hash: 9651BCB220478086EB46EFA7A8457ABA791F78CBD4F05402ABF4D47BA6DF78C451C700

Uniqueness

Uniqueness Score: -1.00%

Function 000000014003BCE4, Relevance: 4.0, APIs: 1, Strings: 1, Instructions: 522COMMON

Download Yara Rule

Strings

, xrefs: 000000014003C393

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: Thread32$CreateFirstNextProcessSnapshotToolhelp32
String ID:
API String ID: 1399924146-3916222277
Opcode ID: 2fba20e9a62dc7fda170a65f9adfeac3a2f04bdbe0381653b11c13293f86a71d
Instruction ID: 6b75672cfe595151bbde2052339f63db7ba53f0296456aeae95220ba28780588
Opcode Fuzzy Hash: 2fba20e9a62dc7fda170a65f9adfeac3a2f04bdbe0381653b11c13293f86a71d
Instruction Fuzzy Hash: 1C22B27230468086EA26EB27D8413EE6361F7897D1F554531BB59877F7EE38C9068704

Uniqueness

Uniqueness Score: -1.00%

Function 00000001400504E4, Relevance: 3.2, APIs: 2, Instructions: 165registryCOMMON

Download Yara Rule

APIs

RegEnumKeyW.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?,?,-3FA727B001CC7BF9,00000000,?,?), ref: 00000001400505AD
RegOpenKeyExW.KERNELBASE ref: 0000000140050686

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: EnumOpen
String ID:
API String ID: 3231578192-0
Opcode ID: 2e17bb0952aa890efe7ff1a9b64585bcccc22907a6ae0069e56199c985831092
Instruction ID: 6d0864972cfa7fb4f3d248e841212fa2b7e853476a4eb29515eeedf77acb74b4
Opcode Fuzzy Hash: 2e17bb0952aa890efe7ff1a9b64585bcccc22907a6ae0069e56199c985831092
Instruction Fuzzy Hash: B251E17221468086EA62DF23E4507EE63A0F7887E4F545221BF6A477F5DF7AC856CB00

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140028EF8, Relevance: 3.1, APIs: 2, Instructions: 146nativeCOMMON

Download Yara Rule

APIs

NtDuplicateObject.NTDLL ref: 00000001400290CF
NtDuplicateObject.NTDLL ref: 000000014002911E

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: DuplicateObject
String ID:
API String ID: 3677547684-0
Opcode ID: f6a13cabeabd0bb6cf71f4ce61c7f0974b54e8d93443981749d59b89aef56418
Instruction ID: cd22fbc66342b901e548f324e304eb9a15ac2eb36bdcf0a84a6a8b27d57fcd7d
Opcode Fuzzy Hash: f6a13cabeabd0bb6cf71f4ce61c7f0974b54e8d93443981749d59b89aef56418
Instruction Fuzzy Hash: 7C518EB220878086EB55DB63E5447AEA7A1F788BC4F004429FF8C47BA6DF79C461CB04

Uniqueness

Uniqueness Score: -1.00%

Function 000000014004ED58, Relevance: 3.1, APIs: 2, Instructions: 124COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c261923aa9bd5efd89de3999fea563bdc7fd1040e4d9383a6b4af18ce7841e5c
Instruction ID: bd5c34e684ee8b2bc5c6ba6dd375b8b4083e2d7119d59d9bd93e46edb771ef39
Opcode Fuzzy Hash: c261923aa9bd5efd89de3999fea563bdc7fd1040e4d9383a6b4af18ce7841e5c
Instruction Fuzzy Hash: DC41E8B271469441FB63EA639A05BEA1291B7CD7C4F465435BF0B0B2E2DE78C485C318

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140027954, Relevance: 1.8, Strings: 1, Instructions: 547COMMON

Download Yara Rule

Strings

)8GV, xrefs: 0000000140028123

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: InformationToken
String ID: )8GV
API String ID: 4114910276-3946227331
Opcode ID: 4a921d95b5ca218faaa88993261a5f95d8c4cd69f36b73d68984f33d3418b74f
Instruction ID: 11c64b8e34554738ed0a021c9f1285209fdd718c6ad3a012a9715c2ca20613a7
Opcode Fuzzy Hash: 4a921d95b5ca218faaa88993261a5f95d8c4cd69f36b73d68984f33d3418b74f
Instruction Fuzzy Hash: 03426E3231468091EA62EB26E4517EE6361E7D97C4F814036BB4E479F7EF38C94ACB05

Uniqueness

Uniqueness Score: -1.00%

Function 00000001400421C8, Relevance: 1.7, APIs: 1, Instructions: 200libraryloaderCOMMON

Download Yara Rule

APIs

Part of subcall function 000000014004FBF8: FindFirstFileExW.KERNELBASE ref: 000000014004FC59

LdrLoadDll.NTDLL ref: 0000000140042420

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: FileFindFirstLoad
String ID:
API String ID: 2522874304-0
Opcode ID: 3574279f6464273b1b933d048f4eae5543690d2fac56635ef68b2685ea06a373
Instruction ID: bb43424f113edd1072a8f27b4ce4a6986183f57915aa202baf486a0090cba6e6
Opcode Fuzzy Hash: 3574279f6464273b1b933d048f4eae5543690d2fac56635ef68b2685ea06a373
Instruction Fuzzy Hash: 98913E323085C091EA72EB26E4553EE6361EBD97D4F824132BB59439F7DE38C54ACB48

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140048B2C, Relevance: 1.6, APIs: 1, Instructions: 137nativeCOMMON

Download Yara Rule

APIs

NtCreateMutant.NTDLL ref: 0000000140048CF2

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: CreateMutant
String ID:
API String ID: 2492398971-0
Opcode ID: a1c1280e283f09a0d63fc1f3df8dd45556dc3472221345e2fbccac8a695f744c
Instruction ID: 018caa445d916d478dafe7a0fee5e5e7bf8ff34caa8f81b8064064b4f00acf81
Opcode Fuzzy Hash: a1c1280e283f09a0d63fc1f3df8dd45556dc3472221345e2fbccac8a695f744c
Instruction Fuzzy Hash: BB51CC7230178089E762EB22E8547EE63A0E79DBC4F454431AB8D4BBE6EF38C449C744

Uniqueness

Uniqueness Score: -1.00%

Function 000000014004FBF8, Relevance: 1.6, APIs: 1, Instructions: 97COMMON

Download Yara Rule

APIs

Part of subcall function 00000001400447B8: GetTokenInformation.KERNELBASE ref: 000000014004491D

FindFirstFileExW.KERNELBASE ref: 000000014004FC59

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: FileFindFirstInformationToken
String ID:
API String ID: 3675931825-0
Opcode ID: 7ecba18ada49a144c6509f0fe90df3ccc2b200899012c5c88adc43e53c0e817c
Instruction ID: 7db4bca2be820ac942d722cddd460c7f068b99c60cfa0fc718aee5541e856b57
Opcode Fuzzy Hash: 7ecba18ada49a144c6509f0fe90df3ccc2b200899012c5c88adc43e53c0e817c
Instruction Fuzzy Hash: 2731A53250424945FE779A22A2903F9639197193E4F264331BFB6476F2CB75F442B319

Uniqueness

Uniqueness Score: -1.00%

Function 000000014003F3EC, Relevance: 1.6, APIs: 1, Instructions: 56nativeCOMMON

Download Yara Rule

APIs

NtDuplicateObject.NTDLL ref: 000000014003F45D

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: DuplicateObject
String ID:
API String ID: 3677547684-0
Opcode ID: e88d26e2c12b48801ce2c487c04ec204fbb8cedcdfd6aad670bcd566e4ec453b
Instruction ID: 307bf8ad8937dbfc2581b2af2747a819a2761b5e04822a7ce7dfb2542003e4b9
Opcode Fuzzy Hash: e88d26e2c12b48801ce2c487c04ec204fbb8cedcdfd6aad670bcd566e4ec453b
Instruction Fuzzy Hash: 9A115EB3751A6886EA12DF9BD8017AB7760BB89FD1F464021AF4C07765DF39C842C714

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140028E60, Relevance: 1.5, APIs: 1, Instructions: 42nativeCOMMON

Download Yara Rule

APIs

NtDuplicateObject.NTDLL ref: 0000000140028EC6

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: DuplicateObject
String ID:
API String ID: 3677547684-0
Opcode ID: 06c6be2291a4efdbc6407ab1d77b16d0bd036b23f191346a3ef1f2e5bded1a98
Instruction ID: 9e794831a73dede21efaabe357e1a3c02144bb42c2952a4195c39fced618414b
Opcode Fuzzy Hash: 06c6be2291a4efdbc6407ab1d77b16d0bd036b23f191346a3ef1f2e5bded1a98
Instruction Fuzzy Hash: 980171B661675586EE62EF97E4457AAB760F788BD4F070016AE4C03764CF79C441CB04

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140059688, Relevance: 1.5, APIs: 1, Instructions: 39nativeCOMMON

Download Yara Rule

APIs

NtTerminateProcess.NTDLL(?,?,?,?,?,?,?,?,?,00000000,00000000,0000000140027C8A), ref: 00000001400596D7

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: ProcessTerminate
String ID:
API String ID: 560597551-0
Opcode ID: 9439464a71b8f034752141213759a5621d2bad26f60f8ac0d092c96d04f25da4
Instruction ID: 047d3f2e51e1b11709a1e04c02542c7b98b1952106d8fcd88c0dda496a8ba30b
Opcode Fuzzy Hash: 9439464a71b8f034752141213759a5621d2bad26f60f8ac0d092c96d04f25da4
Instruction Fuzzy Hash: CAF0BEB172024180FE9BE63769957E902C56F9EBC0F560C70AF1A873A2DE3AC54A5360

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140043FF0, Relevance: 1.5, APIs: 1, Instructions: 37COMMON

Download Yara Rule

APIs

GetUserNameW.ADVAPI32(?,?,?,?,?,00000001,0000000140043FCF,?,?,?,?,00000000,0000000140049E28), ref: 000000014004404B

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: NameUser
String ID:
API String ID: 2645101109-0
Opcode ID: bc401a17161ad4cb7ae198718275a9185e8adc2233cdef8632d993ed908a25d6
Instruction ID: bc0029f980419e498ccb46db5e002df5ccb2c346641d5072cedeeeccdb32de4e
Opcode Fuzzy Hash: bc401a17161ad4cb7ae198718275a9185e8adc2233cdef8632d993ed908a25d6
Instruction Fuzzy Hash: 42014B7221054092EE52EB5BD8113ED2361BBC9BC8F824422BF8D477A7DE3CC506C754

Uniqueness

Uniqueness Score: -1.00%

Function 000000014003F348, Relevance: 1.5, APIs: 1, Instructions: 35nativeCOMMON

Download Yara Rule

APIs

NtDuplicateObject.NTDLL ref: 000000014003F397

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: DuplicateObject
String ID:
API String ID: 3677547684-0
Opcode ID: f2a3eaeadb193acacc9486464e6c6825961cdd5023ce5ab2b8e7419830b9cac0
Instruction ID: 300f7516e271fe00f97b588f2c23fbb495a261ca79e0dab6ee380591714bb39c
Opcode Fuzzy Hash: f2a3eaeadb193acacc9486464e6c6825961cdd5023ce5ab2b8e7419830b9cac0
Instruction Fuzzy Hash: FFF096B22556008AEA53DB635414BAB7391BB897C0F0900247F584B751EF39C801CB15

Uniqueness

Uniqueness Score: -1.00%

Function 00000001400455F8, Relevance: 1.5, APIs: 1, Instructions: 30memorynativeCOMMON

Download Yara Rule

APIs

NtAllocateVirtualMemory.NTDLL ref: 0000000140045648

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: AllocateMemoryVirtual
String ID:
API String ID: 2167126740-0
Opcode ID: f127d242809d97ca908363193cd24a03b76cbfffee8668c6e7b7a453e9ecd6ea
Instruction ID: b9e67c52549a19b765a407d03e59be34886c9765c5b5813abd4b4c73bfa33a58
Opcode Fuzzy Hash: f127d242809d97ca908363193cd24a03b76cbfffee8668c6e7b7a453e9ecd6ea
Instruction Fuzzy Hash: A6F0E2B232479495D751EF2BB440B5AA7A4F788BD0F925021BE8E87B65EE34C011CB04

Uniqueness

Uniqueness Score: -1.00%

Function 000000014004386C, Relevance: 1.5, APIs: 1, Instructions: 19nativeCOMMON

Download Yara Rule

APIs

NtDelayExecution.NTDLL(?,?,?,?,?,?,?,00000001400282A3), ref: 00000001400438A9

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: DelayExecution
String ID:
API String ID: 1249177460-0
Opcode ID: d436027846ca2947f8498c9f40df080fd2862fc952f90064f548782accd3a284
Instruction ID: 19f770493e311d9c0997ff8f72bd8435b6b89262e1d90723e65da2158467533b
Opcode Fuzzy Hash: d436027846ca2947f8498c9f40df080fd2862fc952f90064f548782accd3a284
Instruction Fuzzy Hash: 15E04F72B5634089DE6DA766641136EA1D0BBCC344F45123E768E837A5EF3CC6018B48

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140049CF8, Relevance: 1.5, APIs: 1, Instructions: 16nativeCOMMON

Download Yara Rule

APIs

NtClose.NTDLL ref: 0000000140049D20

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: Close
String ID:
API String ID: 3535843008-0
Opcode ID: 7ea39bda04495e70f2efefb1fe3f554fef6bf952ee667373fa2064ca9a84462f
Instruction ID: 6b2c6cf86b919e81b47f3235a509161c5d2e7720e8260aa51c3b4cff3db5bcbe
Opcode Fuzzy Hash: 7ea39bda04495e70f2efefb1fe3f554fef6bf952ee667373fa2064ca9a84462f
Instruction Fuzzy Hash: D7D09E76A5065580FE667B93B1413E552505F9D7C0F0B54706FD8077A6DD3948824314

Uniqueness

Uniqueness Score: -1.00%

Function 000000014004271C, Relevance: .6, Instructions: 577COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6878353e9f077f97dbb0b31af0c392c67aa7d892f7ec7c7a0410f262ef83ea12
Instruction ID: c2c0d1a6b589db8d75f93e07a21950cab1d10a8e768b21fc6f7e431ea7080baa
Opcode Fuzzy Hash: 6878353e9f077f97dbb0b31af0c392c67aa7d892f7ec7c7a0410f262ef83ea12
Instruction Fuzzy Hash: BF428372615A8481EB62EB26E4543DEB7A1F7887C4F824132FB8D477A6EF38C549C704

Uniqueness

Uniqueness Score: -1.00%

Function 000000014003B0C8, Relevance: .5, Instructions: 521COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: DelayExecution
String ID:
API String ID: 1249177460-0
Opcode ID: 3d78f6bd3d6c533753eb11b7c0b193e82addc726317fb8cfcf67f0f33463b69a
Instruction ID: f497070eeeda37cd2b5f4f6a3c36aa9937b2f946b8b60c6fd4ac4d4bf16a8fdc
Opcode Fuzzy Hash: 3d78f6bd3d6c533753eb11b7c0b193e82addc726317fb8cfcf67f0f33463b69a
Instruction Fuzzy Hash: 9022AE7231468081EA62EB27E8513EF6351E7D9BD4F814222BB5E477E7EE38C54AC704

Uniqueness

Uniqueness Score: -1.00%

Function 000000014003A688, Relevance: .3, Instructions: 307COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: DelayExecution
String ID:
API String ID: 1249177460-0
Opcode ID: 95a3a3e48193b167c28b28e96bd3b6474c6d1a57b40aa3ee08e7a23d841db30b
Instruction ID: e27d8be78f3596b786bc9a5026c261f0f5f7843106ea287111c2b3cdda562445
Opcode Fuzzy Hash: 95a3a3e48193b167c28b28e96bd3b6474c6d1a57b40aa3ee08e7a23d841db30b
Instruction Fuzzy Hash: B8D12E3221498051FA63E726E5527EE6351EBD97C0F854032BB8E475F7EE78C94AC704

Uniqueness

Uniqueness Score: -1.00%

Function 00000001400431CC, Relevance: .3, Instructions: 275COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 333b3cecbb9219aaad4223bef895ad8ca278d2bfd05b4bafe2a3856fb304f36b
Instruction ID: 7cbdad4493fe3af49b03be2d39fca700649f93a176ae41ceb7e664016ca2f87b
Opcode Fuzzy Hash: 333b3cecbb9219aaad4223bef895ad8ca278d2bfd05b4bafe2a3856fb304f36b
Instruction Fuzzy Hash: BCB1C072200A4091FA66DF17E4557EE63A1F799BC0F866036BB49476E6DB78C885C304

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140053AF0, Relevance: .2, Instructions: 174COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6df429a82e206470af0cdf23cebd4985cb5f2bd775537dddfe5e64a339015ac2
Instruction ID: 0fdb0cdf0d472f9d1b4f92fe41089ec25c0114d730e384dc442d5f4c95866c11
Opcode Fuzzy Hash: 6df429a82e206470af0cdf23cebd4985cb5f2bd775537dddfe5e64a339015ac2
Instruction Fuzzy Hash: EE51293131424140FE63EA27A5517EA5A92ABDC7E4F880221BF695B6F3EF37C8098715

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140045BE0, Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 18186506607b3ba3a34d6ac96d73757a16d7be88df8b63b30c18dfa220694384
Instruction ID: f50615edb5a5df1a4c229ce64c7c0df82d772f4c4c7a538366d7f45c708fb1a2
Opcode Fuzzy Hash: 18186506607b3ba3a34d6ac96d73757a16d7be88df8b63b30c18dfa220694384
Instruction Fuzzy Hash: 2611FE7270060050F75BF737D8597DA2356EBA9384F8A803AB70A435A6DD3DC58BC308

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140045800, Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 78d61a8ba99d4b801a8a99695b673d2904ea83ed50687b0f271758746e4807da
Instruction ID: a44944d72caab567585fc562bff8cf15b294ce337cae6f7657e80cf73b6eee54
Opcode Fuzzy Hash: 78d61a8ba99d4b801a8a99695b673d2904ea83ed50687b0f271758746e4807da
Instruction Fuzzy Hash: 74F0397060468099F702AB63A8453E43BA1A31C7C5F05102BBB0C6B672EE3CA0908B69

Uniqueness

Uniqueness Score: -1.00%

Function 000001F7096B2251, Relevance: 6.2, APIs: 4, Instructions: 230memoryCOMMON

Download Yara Rule

APIs

VirtualProtect.KERNELBASE ref: 000001F7096B23A9
VirtualProtect.KERNELBASE ref: 000001F7096B246A
RtlAvlRemoveNode.NTDLL ref: 000001F7096B25AC
VirtualProtect.KERNELBASE ref: 000001F7096B2672

Memory Dump Source

Source File: 00000000.00000002.767863427.000001F7096B0000.00000040.00000001.sdmp, Offset: 000001F7096B0000, based on PE: true

Similarity

API ID: ProtectVirtual$NodeRemove
String ID:
API String ID: 3879549435-0
Opcode ID: 0acfb9d5d91a34fd4850f9c0972c2330b64bc38d9314faaca5f27afd7144933b
Instruction ID: 7b6675cfd3dd8890fa51c7f0e8b632d46678c0559695514ffb13a8763fc3a49d
Opcode Fuzzy Hash: 0acfb9d5d91a34fd4850f9c0972c2330b64bc38d9314faaca5f27afd7144933b
Instruction Fuzzy Hash: 7BB13376618BC586D770CB1AE4507EAB7A1F799B80F108026EE8953B98DF79C8818F40

Uniqueness

Uniqueness Score: -1.00%

Function 00000001400378D0, Relevance: 5.5, APIs: 2, Strings: 1, Instructions: 221COMMON

Download Yara Rule

APIs

EntryPoint.A4VEYL53CZ ref: 0000000140037A13

Strings

)8GV, xrefs: 00000001400379C3

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: EntryPoint
String ID: )8GV
API String ID: 3225343992-3946227331
Opcode ID: 9066cc2828432701b89d2f9caf602f6c584f8b19ce9e660b39faa6e65afb6fe4
Instruction ID: 30f480b0fa57001bb2fe3e04df2189e1212c3a164dc0711a875eab596bf9548d
Opcode Fuzzy Hash: 9066cc2828432701b89d2f9caf602f6c584f8b19ce9e660b39faa6e65afb6fe4
Instruction Fuzzy Hash: 83919F7222468051EA63E723E851BEE63A0BBC97D4F955132BB5E4B2F7DE78C845C304

Uniqueness

Uniqueness Score: -1.00%

Function 000000014003F614, Relevance: 4.6, APIs: 3, Instructions: 107COMMON

Download Yara Rule

APIs

EnumProcessModulesEx.KERNELBASE ref: 000000014003F694
GetModuleBaseNameW.KERNELBASE ref: 000000014003F6DE
GetModuleInformation.KERNELBASE ref: 000000014003F788

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: Module$BaseEnumInformationModulesNameProcess
String ID:
API String ID: 2890305978-0
Opcode ID: 7773c2f1babe09a1294b494cced4b5838e7a1946e8e120d3fb0a3a089e0ea0ae
Instruction ID: 39129b33d052912c43a936f496ad5060356ac318bcdec55304631be0421f9960
Opcode Fuzzy Hash: 7773c2f1babe09a1294b494cced4b5838e7a1946e8e120d3fb0a3a089e0ea0ae
Instruction Fuzzy Hash: 6C41B47232454492EA52EB27E4517EF6361FBC87C0F920022BF5E476B6DE38C54ACB04

Uniqueness

Uniqueness Score: -1.00%

Function 000000014004524C, Relevance: 3.1, APIs: 2, Instructions: 134COMMON

Download Yara Rule

APIs

GetTokenInformation.KERNELBASE ref: 00000001400452D7
GetTokenInformation.KERNELBASE ref: 0000000140045330

Part of subcall function 0000000140049CF8: NtClose.NTDLL ref: 0000000140049D20

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: InformationToken$Close
String ID:
API String ID: 2126238950-0
Opcode ID: 38cdca8ffeed7e68a554f170676b86caecedff6ebc973056e4540193ed77df8a
Instruction ID: 815aa264d46fb8bdeaa843cd553f33f95f514acae1cac6ac295956a74bdff777
Opcode Fuzzy Hash: 38cdca8ffeed7e68a554f170676b86caecedff6ebc973056e4540193ed77df8a
Instruction Fuzzy Hash: B241073231569082FAA3B613A4517ED5690A7CCBD6F164031BF4E4B6F7DAB8C981C704

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140050AA4, Relevance: 3.1, APIs: 2, Instructions: 71registryCOMMON

Download Yara Rule

APIs

RegQueryValueExA.KERNELBASE ref: 0000000140050B1E
RegQueryValueExA.KERNELBASE(?,?,-3FA727B001CC7BF9,?,?,00000001,0000000140050BBD), ref: 0000000140050B77

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: f486ebd64d593ee86f9370ef1fb808c6193fffce51adef5e662ca72e5427e83b
Instruction ID: 517f7063c24002fe097d8899ace396ffdc11ae0d76264d61a8b816b5c1da6242
Opcode Fuzzy Hash: f486ebd64d593ee86f9370ef1fb808c6193fffce51adef5e662ca72e5427e83b
Instruction Fuzzy Hash: F921C232311B5185FB92DE23A944B9E2394F789BE4F458121BE29477A1EB36C842C700

Uniqueness

Uniqueness Score: -1.00%

Function 000000014004EE00, Relevance: 3.1, APIs: 2, Instructions: 66filetimeCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE ref: 000000014004EE9E
SetFileTime.KERNELBASE(?,?,?,?,?,00000000,00000001,00000000,00000000,000000014004EF8A), ref: 000000014004EEFE

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: File$CreateTime
String ID:
API String ID: 1043708186-0
Opcode ID: 7b54bfc3b8c376e2484aed8bef43abaa061974c3bcb080f5381599911e95cbad
Instruction ID: 4965a2f0ada33bbef9bb485caa991f6d4dee6eb8172efecfce58e40d26985bdd
Opcode Fuzzy Hash: 7b54bfc3b8c376e2484aed8bef43abaa061974c3bcb080f5381599911e95cbad
Instruction Fuzzy Hash: 57112C7235528442FB63DA57A906BF962856BCDBD4F4B0435BF0A0B7D2DE74C486C308

Uniqueness

Uniqueness Score: -1.00%

Function 000000014004EE2C, Relevance: 3.1, APIs: 2, Instructions: 66filetimeCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE ref: 000000014004EE9E
SetFileTime.KERNELBASE(?,?,?,?,?,00000000,00000001,00000000,00000000,000000014004EF8A), ref: 000000014004EEFE

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: File$CreateTime
String ID:
API String ID: 1043708186-0
Opcode ID: 7dbd639522359edf84f1325039a0e177737775ed75b20e8c0f305b198d5a329c
Instruction ID: 0f6b8c235dc485c170bc8e773cbd41a4b314d672eaac20dc234d77e59a93f560
Opcode Fuzzy Hash: 7dbd639522359edf84f1325039a0e177737775ed75b20e8c0f305b198d5a329c
Instruction Fuzzy Hash: 4A11EB7235528442FB63DA57A90ABE9628567CD7D4F4B0435BF0A0B3E2DF74C585C318

Uniqueness

Uniqueness Score: -1.00%

Function 000000014004EE17, Relevance: 3.1, APIs: 2, Instructions: 65filetimeCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE ref: 000000014004EE9E
SetFileTime.KERNELBASE(?,?,?,?,?,00000000,00000001,00000000,00000000,000000014004EF8A), ref: 000000014004EEFE

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: File$CreateTime
String ID:
API String ID: 1043708186-0
Opcode ID: c1f618fb17d8d5f7cdbbaab43a5feaaa2fd0f0f75dc1c915156d14d1cf5b44ad
Instruction ID: c0479f22c635c3150f300bf61dcf8dbc6a4dbe2676c29cb3dd22d41c272d7466
Opcode Fuzzy Hash: c1f618fb17d8d5f7cdbbaab43a5feaaa2fd0f0f75dc1c915156d14d1cf5b44ad
Instruction Fuzzy Hash: CC112C7275528442FB63D657AA067FA62826BCDBD4F4B4435BF0A0B3D2DE78C486C308

Uniqueness

Uniqueness Score: -1.00%

Function 000000014004EDF6, Relevance: 3.1, APIs: 2, Instructions: 61filetimeCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE ref: 000000014004EE9E
SetFileTime.KERNELBASE(?,?,?,?,?,00000000,00000001,00000000,00000000,000000014004EF8A), ref: 000000014004EEFE

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: File$CreateTime
String ID:
API String ID: 1043708186-0
Opcode ID: ba094f71801e8ed88aee0053561641b4316ac0fe88022ca4e5159deea8a1fa41
Instruction ID: b098bd92ed46f1a14ea65591fe5dc81009e3fa7f6566438aa721ce67196eacbf
Opcode Fuzzy Hash: ba094f71801e8ed88aee0053561641b4316ac0fe88022ca4e5159deea8a1fa41
Instruction Fuzzy Hash: 4A11E97235528442FA63DA57A9067E962856BCDBD4F4A0435BF0A0B3E2DE74C589C308

Uniqueness

Uniqueness Score: -1.00%

Function 000000014004EE4B, Relevance: 3.1, APIs: 2, Instructions: 59filetimeCOMMON

Download Yara Rule

APIs

CreateFileW.KERNELBASE ref: 000000014004EE9E
SetFileTime.KERNELBASE(?,?,?,?,?,00000000,00000001,00000000,00000000,000000014004EF8A), ref: 000000014004EEFE

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: File$CreateTime
String ID:
API String ID: 1043708186-0
Opcode ID: da34cd3329cd6f1ac532136db3e349b43c57658d3b22f1587ad125d20782ea2c
Instruction ID: 7ec738e19081c986d461a256423ab6647baf5e76da3078fceb27b7aa070ae054
Opcode Fuzzy Hash: da34cd3329cd6f1ac532136db3e349b43c57658d3b22f1587ad125d20782ea2c
Instruction Fuzzy Hash: 4E110C7235524441FA63DA57A5067E952856BCDBD4F4A0435BF0A0B3D2DE74C586C308

Uniqueness

Uniqueness Score: -1.00%

Function 00000001400466B8, Relevance: 3.0, APIs: 2, Instructions: 47memoryCOMMON

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(?,?,?,-3FA727B001CC7BF9,00000000,0000000140053DFA), ref: 00000001400466FA
RtlCreateHeap.NTDLL(?,?,?,-3FA727B001CC7BF9,00000000,0000000140053DFA), ref: 0000000140046752

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: Heap$AllocateCreate
String ID:
API String ID: 2875408731-0
Opcode ID: c78a6b20e998b2a0863b6beb35c9ee27c153e8ee6b6c48c296a29747fa189a80
Instruction ID: e8168db5e0586839b18fa96fa0a2c061a30582a59b7c4b798cabda7e74edde1d
Opcode Fuzzy Hash: c78a6b20e998b2a0863b6beb35c9ee27c153e8ee6b6c48c296a29747fa189a80
Instruction Fuzzy Hash: C601D47235161591F612EBA7B90ABAA2294634CBE4F428432BF0D4B7A1FD358042C71A

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140059728, Relevance: 1.6, APIs: 1, Instructions: 95COMMON

Download Yara Rule

APIs

QueryFullProcessImageNameW.KERNELBASE(?,?,?,?,?,?,?,00000000,00000000,C4F0AA12,0000000140059D8E,?,?,00000000,0000000140059D5A), ref: 00000001400597BE

Part of subcall function 0000000140059880: GetExitCodeProcess.KERNEL32 ref: 000000014005993A

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: Process$CodeExitFullImageNameQuery
String ID:
API String ID: 2650637187-0
Opcode ID: 7f2f55b78cf642c7d519c05eef8d89f9941c4d14595806c16639b7ff79044aa7
Instruction ID: ade89c8c1653413e4815b5b0e5fb5131f3aeb12ac02a44a9982c0d05c408ff1f
Opcode Fuzzy Hash: 7f2f55b78cf642c7d519c05eef8d89f9941c4d14595806c16639b7ff79044aa7
Instruction Fuzzy Hash: 3A31C57661468892FA92EF23D5457EE2365EB8EBC0F421022FF4A573A6DF39C406C700

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140048D80, Relevance: 1.6, APIs: 1, Instructions: 89COMMON

Download Yara Rule

APIs

ConvertStringSecurityDescriptorToSecurityDescriptorW.ADVAPI32 ref: 0000000140048DF5

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: DescriptorSecurity$ConvertString
String ID:
API String ID: 3907675253-0
Opcode ID: 3aeeb260c945c03cf046956b8be4ddf33b6c184952847e7539d117abfcc7508d
Instruction ID: 7448ca05fbf70741425b2bd0935471e91d3351f030cf014c6d785c230d1abc5d
Opcode Fuzzy Hash: 3aeeb260c945c03cf046956b8be4ddf33b6c184952847e7539d117abfcc7508d
Instruction Fuzzy Hash: BE316072205B4485EB62EB63E8503ED2394A78DBC8F464532BF4E4B7B6DF38C5058754

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140059880, Relevance: 1.6, APIs: 1, Instructions: 76COMMON

Download Yara Rule

APIs

Part of subcall function 0000000140049CF8: NtClose.NTDLL ref: 0000000140049D20

GetExitCodeProcess.KERNEL32 ref: 000000014005993A

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: CloseCodeExitProcess
String ID:
API String ID: 1252061823-0
Opcode ID: 6ddfe584c4c20b523d2928d54baf9106e94299b91fe390d49b661351f83b863d
Instruction ID: 83e82dffd6968143bff17c1fe49ae92a75aa765cafbda8ad152459bed589c72c
Opcode Fuzzy Hash: 6ddfe584c4c20b523d2928d54baf9106e94299b91fe390d49b661351f83b863d
Instruction Fuzzy Hash: 6B31BF7221474286EF12DB5AE4507AE77A4FBC9BC0F560029AF89477A2DF79C501CB40

Uniqueness

Uniqueness Score: -1.00%

Function 000000014004F1A8, Relevance: 1.5, APIs: 1, Instructions: 49fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE ref: 000000014004F209

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: 5b5d08ed94846bc216aab545921e26eee04ba0f8b2f0368fbd1f98072fe5f5d9
Instruction ID: 634dbe856b0751620063b59c3f51cff5f47b37c42158a0dd7a9870b58b6fbfd0
Opcode Fuzzy Hash: 5b5d08ed94846bc216aab545921e26eee04ba0f8b2f0368fbd1f98072fe5f5d9
Instruction Fuzzy Hash: A701F77632428296EA92DF237901BBA3390B74C7C0F431431BF4A8B7A1DB78D002E708

Uniqueness

Uniqueness Score: -1.00%

Function 000000014004FD1C, Relevance: 1.5, APIs: 1, Instructions: 44fileCOMMON

Download Yara Rule

APIs

FindNextFileW.KERNELBASE(?,-3FA727B001CC7BF9,-3FA727B001CC7BF9,000000014004FCF9,?,?,?,?,?,?,?,00000001400422AE), ref: 000000014004FD4B

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: FileFindNext
String ID:
API String ID: 2029273394-0
Opcode ID: 030ce8bd5da0ec6e7cbebd772c24d17eca63428c6a4732388e53c2d46ef12bad
Instruction ID: 3668fdd341d13e7383fac044b9d457da258575c02d17fa6d5a8a5bef4b38353c
Opcode Fuzzy Hash: 030ce8bd5da0ec6e7cbebd772c24d17eca63428c6a4732388e53c2d46ef12bad
Instruction Fuzzy Hash: 01018131F1120155FE67E6635445BF912C69B4D7C8F430835BF298B2F1EA74E447A309

Uniqueness

Uniqueness Score: -1.00%

Function 000000014004F11C, Relevance: 1.5, APIs: 1, Instructions: 42COMMON

Download Yara Rule

APIs

SetFilePointer.KERNELBASE ref: 000000014004F174

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: FilePointer
String ID:
API String ID: 973152223-0
Opcode ID: 341636cc73d4ba590c3b193dd3a03a2b3be0b6c8cd03cc52ad757502253323c0
Instruction ID: a0915f61e9bfde404d1e5d3434a783e7dec780e19e09d353d3244ebd8b91a8a6
Opcode Fuzzy Hash: 341636cc73d4ba590c3b193dd3a03a2b3be0b6c8cd03cc52ad757502253323c0
Instruction Fuzzy Hash: 8801F4B1700680C1FAA6DA23E9007BA26D0A78D3D8F424631FF9D877B5EB38D4429748

Uniqueness

Uniqueness Score: -1.00%

Function 00000001400508D4, Relevance: 1.5, APIs: 1, Instructions: 41registryCOMMON

Download Yara Rule

APIs

RegEnumValueA.ADVAPI32 ref: 0000000140050939

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: EnumValue
String ID:
API String ID: 2814608202-0
Opcode ID: 9ed8f359153f7a316a5f66244d12db11a142e47d3948bae118383c5bc0dec960
Instruction ID: 7e2766d4525fd58cd3d69c204a454ebb63a73fa674891528886be41876368a17
Opcode Fuzzy Hash: 9ed8f359153f7a316a5f66244d12db11a142e47d3948bae118383c5bc0dec960
Instruction Fuzzy Hash: 0A015A32200B0081EB52DF56E845BD976A4F7887D9F65413AAF9C47754DF76C94AC700

Uniqueness

Uniqueness Score: -1.00%

Function 00000001400451C4, Relevance: 1.5, APIs: 1, Instructions: 40COMMON

Download Yara Rule

APIs

GetTokenInformation.KERNELBASE ref: 000000014004522D

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: InformationToken
String ID:
API String ID: 4114910276-0
Opcode ID: 22f0f941c7aa5a3053fe439c030574998dee2c15e808160a166e3a2c6234fcf2
Instruction ID: 3310ddc9c40c1bf9efbc1bd687d2f3733fcb87448684b1dd695d4f358ab71de7
Opcode Fuzzy Hash: 22f0f941c7aa5a3053fe439c030574998dee2c15e808160a166e3a2c6234fcf2
Instruction Fuzzy Hash: FE012831364741C0FA92A663A502BEE12D47B8ABD5F4500337F4A8F7E2EEB8C8C5C614

Uniqueness

Uniqueness Score: -1.00%

Function 00000001400440B8, Relevance: 1.5, APIs: 1, Instructions: 37COMMON

Download Yara Rule

APIs

GetComputerNameW.KERNEL32(?,?,?,?,?,00000001,0000000140044097,?,?,?,?,00000000,0000000140049D96), ref: 0000000140044113

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: ComputerName
String ID:
API String ID: 3545744682-0
Opcode ID: 5ac91c3158037f1daa3cb5af00181d527f403fb85ce5849737c7777152384c0b
Instruction ID: a497da57bce658a283fdc2c033c119a01fcf3192d3414c3e29961b469315da8b
Opcode Fuzzy Hash: 5ac91c3158037f1daa3cb5af00181d527f403fb85ce5849737c7777152384c0b
Instruction Fuzzy Hash: D301FB7171454482EE52EB56D8523E92361FBCDBC8F824422BF8D4B7A6DE3CC5068754

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140050740, Relevance: 1.5, APIs: 1, Instructions: 14registryCOMMON

Download Yara Rule

APIs

RegCloseKey.KERNELBASE(?,?,?,0000000140050714,?,?,?,?,?,?,?,?,?,?,?), ref: 000000014005075F

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: Close
String ID:
API String ID: 3535843008-0
Opcode ID: d0e926472a0d5fd1457cccc99c2e05852b631758e75cc8c3a530b7fc14c246f7
Instruction ID: f71e4032bab4cf6bec162a1ab0a9df5ecefd686c173f0238a635de3e8ea2280d
Opcode Fuzzy Hash: d0e926472a0d5fd1457cccc99c2e05852b631758e75cc8c3a530b7fc14c246f7
Instruction Fuzzy Hash: 1AC01224B9E50888F96766B325613F901941B9CBC0E1C04302E1F4A392D81671914924

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140046AE8, Relevance: 1.5, APIs: 1, Instructions: 14COMMON

Download Yara Rule

APIs

RtlDeleteBoundaryDescriptor.NTDLL(?,?,?,?,00000000,000000014004C008,-3FA727B001CC7BF9,000000014004A8A7,?,?,?,?,?,00000001400435A3), ref: 0000000140046B10

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: BoundaryDeleteDescriptor
String ID:
API String ID: 3203483114-0
Opcode ID: 8678201136c86982c4deef6fda293be041d6ae6f38f76fc7de58201ce8abb08b
Instruction ID: 593adbc4618781ce20a713c8316992fccca3aa15fce3ef34a1d7600fe6bc3d34
Opcode Fuzzy Hash: 8678201136c86982c4deef6fda293be041d6ae6f38f76fc7de58201ce8abb08b
Instruction Fuzzy Hash: FFD0226075018040FD06A3E3BE053A540610FCCBC0F4C80322E2C533B6DD3881C20204

Uniqueness

Uniqueness Score: -1.00%

Function 000000014004FBCC, Relevance: 1.5, APIs: 1, Instructions: 14COMMON

Download Yara Rule

APIs

FindClose.KERNELBASE(?,?,?,000000014004FCBA,?,?,?,?,?,?,?,00000001400422AE), ref: 000000014004FBEB

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: CloseFind
String ID:
API String ID: 1863332320-0
Opcode ID: 153aa7d0758e6bdd324707022a8545b1745d4a1247f5290230369271eaa7cb26
Instruction ID: 81ef945d985d3455bdadbf3a2d093a262a04cdbd17192f27ea12c9304e553ffc
Opcode Fuzzy Hash: 153aa7d0758e6bdd324707022a8545b1745d4a1247f5290230369271eaa7cb26
Instruction Fuzzy Hash: 21C012207A504889F95672B368223F40044479D7D0E1D08303F2E8F392ED6850D16274

Uniqueness

Uniqueness Score: -1.00%

Function 000001F7096B2057, Relevance: 1.3, APIs: 1, Instructions: 67memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(?,?,?,?,?,?,?,?,?,000001F7096B298F), ref: 000001F7096B20A4

Memory Dump Source

Source File: 00000000.00000002.767863427.000001F7096B0000.00000040.00000001.sdmp, Offset: 000001F7096B0000, based on PE: true

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: ea04a22fb0b80051549ca917af940619b3718de0f0d551addbdd129c1eaed934
Instruction ID: 3902cd3e245a52f2d2af1cffb87f2a6a417270d7452c7649c0d1450cfdf8b4ba
Opcode Fuzzy Hash: ea04a22fb0b80051549ca917af940619b3718de0f0d551addbdd129c1eaed934
Instruction Fuzzy Hash: 0F314972618A8486D790DF1AE05479A7BB1F789BC4F204026FF8E87B58DF3AC4428B00

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 000000014002CA14, Relevance: 8.2, Strings: 6, Instructions: 748COMMON

Download Yara Rule

Strings

3050, xrefs: 000000014002D7C9
4040, xrefs: 000000014002D030
3050, xrefs: 000000014002CF79
0020, xrefs: 000000014002D7C4
GNOP, xrefs: 000000014002CFB8
0020, xrefs: 000000014002D69D

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID: 0020$0020$3050$3050$4040$GNOP
API String ID: 0-829999343
Opcode ID: a13761bfcf26f702793776c785a85320500c69f388fbec1b7f262070ecbc6ceb
Instruction ID: 356b16f34d02ccaf899abe365f203e32873e5895a0f8793735cc37a5e8280d15
Opcode Fuzzy Hash: a13761bfcf26f702793776c785a85320500c69f388fbec1b7f262070ecbc6ceb
Instruction Fuzzy Hash: AA728072214A84A1EB72EB26D4557DE6360F7987C4F814036BB4D476F7EE38CA4ACB04

Uniqueness

Uniqueness Score: -1.00%

Function 000000014005CD24, Relevance: 7.2, Strings: 5, Instructions: 927COMMON

Download Yara Rule

Strings

0u, xrefs: 000000014005DF79
O, xrefs: 000000014005E7E1
Z, xrefs: 000000014005DF59
a, xrefs: 000000014005E2E8
X, xrefs: 000000014005E368

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID: 0u$O$X$Z$a
API String ID: 0-4014663077
Opcode ID: 2f1889f8629d691bc5e9b2e56e4b389abc8fdba6f84189d4658499a9c1e45239
Instruction ID: 387181aede0dbe1f7c90b6151e51e2f0886461034603560bccaca51b53138e34
Opcode Fuzzy Hash: 2f1889f8629d691bc5e9b2e56e4b389abc8fdba6f84189d4658499a9c1e45239
Instruction Fuzzy Hash: 0FA206721087C48AE776CF2AE4447DEBBA0F389784F548116EBC947BA9DB39C594CB10

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140061598, Relevance: 5.7, Strings: 4, Instructions: 735COMMON

Download Yara Rule

Strings

VUUU, xrefs: 00000001400619D8
VUUU, xrefs: 0000000140061996
ERCP, xrefs: 00000001400616C4
VUUU, xrefs: 0000000140061A50

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID: ERCP$VUUU$VUUU$VUUU
API String ID: 0-2165971703
Opcode ID: fb00d0ce2cb50678b811d0fa78faa5923409941479328ec4d3a1be59f43228a0
Instruction ID: 6fe43a953f165d6d2dde0bc928034c8a3e4858e429b67e4e167dfc745c5571b2
Opcode Fuzzy Hash: fb00d0ce2cb50678b811d0fa78faa5923409941479328ec4d3a1be59f43228a0
Instruction Fuzzy Hash: EE62B5722087C486E7728F16E8447EAB7A2F3997D4F684915EB9D47BE4CB78C485CB00

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140005078, Relevance: 5.4, Strings: 4, Instructions: 442COMMON

Download Yara Rule

Strings

GET, xrefs: 0000000140005120
*/*, xrefs: 0000000140005665
P, xrefs: 00000001400051F4
POST, xrefs: 0000000140005659

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID: */*$GET$P$POST
API String ID: 0-3922522044
Opcode ID: 4e0c1912033cfcf93cef17936ff0e9129e13c4555a4e100c4625de3129cefe53
Instruction ID: 90e870cde1f07be08e25ff8751178486e86e5381b3927819218e9ef55f0fd372
Opcode Fuzzy Hash: 4e0c1912033cfcf93cef17936ff0e9129e13c4555a4e100c4625de3129cefe53
Instruction Fuzzy Hash: 0F228E72214AC095EB62EB26E8957DE7360FB897C4F854022FB4D47ABADF78C549C700

Uniqueness

Uniqueness Score: -1.00%

Function 000000014005CDAB, Relevance: 4.2, Strings: 3, Instructions: 413COMMON

Download Yara Rule

Strings

, xrefs: 000000014005F125
L, xrefs: 000000014005F17A
O, xrefs: 000000014005F1B7

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID: $L$O
API String ID: 0-1186474355
Opcode ID: 71fd0ce76d69c146db88b23a84eceada58584cbdf6fb681526888234026e345f
Instruction ID: d40effe4a4273526e113f78d71c97953415dea4327bad108e34916f54511fd68
Opcode Fuzzy Hash: 71fd0ce76d69c146db88b23a84eceada58584cbdf6fb681526888234026e345f
Instruction Fuzzy Hash: BF125272208BC48AE772CF16E4447EEB7A1F389B94F544116EB8947BA9CB7DC481DB01

Uniqueness

Uniqueness Score: -1.00%

Function 000000014002D95C, Relevance: 4.2, Strings: 3, Instructions: 411COMMON

Download Yara Rule

Strings

0020, xrefs: 000000014002DAB2
4040, xrefs: 000000014002DDF4
0020, xrefs: 000000014002DDED

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID: 0020$0020$4040
API String ID: 0-2301653233
Opcode ID: aa067af31c941e6983b1e43ce2853e5141d01e48bf0c6e16292fc14b0dc7777a
Instruction ID: 243e9e2a0b9b919a5f6bcc45d3c0caa8ea8a2dafb0fc456be01a8150b6359153
Opcode Fuzzy Hash: aa067af31c941e6983b1e43ce2853e5141d01e48bf0c6e16292fc14b0dc7777a
Instruction Fuzzy Hash: 0012E072214AD091EB62EB26D0557EE6324FB983C4F818422FB4D476E6EF74CD4ACB01

Uniqueness

Uniqueness Score: -1.00%

Function 000000014005CFCA, Relevance: 3.2, Strings: 2, Instructions: 669COMMON

Download Yara Rule

Strings

X, xrefs: 000000014005FADA
R, xrefs: 000000014005FB94

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID: R$X
API String ID: 0-69278636
Opcode ID: da336ed34350ac00bc865c028a8e733b27c177f0b5c27b1449611788459f5bab
Instruction ID: f58951c9dc4a898353c81f999da1d7884c596c0bc0f199cb12e3ea76cb90fc99
Opcode Fuzzy Hash: da336ed34350ac00bc865c028a8e733b27c177f0b5c27b1449611788459f5bab
Instruction Fuzzy Hash: E7626E725086C4CAE772CB1AE4447EEBBA1F389784F144117EB9887AA9DB7DC484DF01

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140038424, Relevance: 2.7, Strings: 1, Instructions: 1407COMMON

Download Yara Rule

Strings

m", xrefs: 00000001400392C8

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID: m"
API String ID: 0-521656021
Opcode ID: 98c415f2818a1c85024c6fe51f3c49a2642bab3af2fde7123fddbf3148d2c0bc
Instruction ID: d07ebffd0d397aab17b09172a24752fdb8a1908e683a01bf6f682d2955ee2413
Opcode Fuzzy Hash: 98c415f2818a1c85024c6fe51f3c49a2642bab3af2fde7123fddbf3148d2c0bc
Instruction Fuzzy Hash: EEE25272218AC091EA73EB26E4557DF6360E7D9780F814122BB8E879F6EF78C545CB04

Uniqueness

Uniqueness Score: -1.00%

Function 000000014003CC38, Relevance: 2.1, Strings: 1, Instructions: 846COMMON

Download Yara Rule

Strings

@, xrefs: 000000014003D793

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: Module$BaseCreateDelayEnumExecutionFileInformationMappingModulesNameProcess
String ID: @
API String ID: 825705103-2766056989
Opcode ID: 7d8fb308dae4d02a072313f6d0aa6c1caa4dc9fbd8dd694ba879149a361a1710
Instruction ID: 7b948741ba49495318ff39dfa16fe85eed064e81c9b6c4d8989e4fa6c196ccc2
Opcode Fuzzy Hash: 7d8fb308dae4d02a072313f6d0aa6c1caa4dc9fbd8dd694ba879149a361a1710
Instruction Fuzzy Hash: 2482837221468091EB52EB66E4453DE7360E7D87D0F844532BB8E876FAEF38C54ACB04

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140019928, Relevance: 1.8, Strings: 1, Instructions: 594COMMON

Download Yara Rule

Strings

h, xrefs: 0000000140019AE3

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID: h
API String ID: 0-2439710439
Opcode ID: 4cf058bccc71931e9d48d0a7106832335ef6e9ece9b965452b1939d95d6f772e
Instruction ID: f4f4607ba5750f3ff218fb8169964a6d9d9f9615f11e83ccdc491b6a9728f9a3
Opcode Fuzzy Hash: 4cf058bccc71931e9d48d0a7106832335ef6e9ece9b965452b1939d95d6f772e
Instruction Fuzzy Hash: 5A42B37220868051EA63EB26E4513EE6350EBD97D0F854132BB4D875FBEF79C64ACB04

Uniqueness

Uniqueness Score: -1.00%

Function 000000014003DDA4, Relevance: 1.8, Strings: 1, Instructions: 525COMMON

Download Yara Rule

Strings

, xrefs: 000000014003E45F

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: Thread32$CreateFirstNextProcessSnapshotToolhelp32
String ID:
API String ID: 1399924146-3916222277
Opcode ID: 26fa246227caf425f3aab1a2c33b7ba10f71c9b7bf26caa82b0d5660fb5548e8
Instruction ID: 8954ed08cc38ac81b7865467fd67f211b8599e4697586564a349b60f878bbc72
Opcode Fuzzy Hash: 26fa246227caf425f3aab1a2c33b7ba10f71c9b7bf26caa82b0d5660fb5548e8
Instruction Fuzzy Hash: BF227C7230468086EA16FB27D8513EE6360B789BD1F554536BB1A877F7EF38C9068B04

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140029320, Relevance: 1.7, Strings: 1, Instructions: 482COMMON

Download Yara Rule

Strings

)8GV, xrefs: 0000000140029917

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: AllocateMemoryVirtual
String ID: )8GV
API String ID: 2167126740-3946227331
Opcode ID: dd9e4224696582b6bcce1fe49c2985618c6fef09fb4036c79906c6d68121e61a
Instruction ID: 10c1279177a0494aae23dfb2c842b3d5bf0b76b302c94a360202407208e8e320
Opcode Fuzzy Hash: dd9e4224696582b6bcce1fe49c2985618c6fef09fb4036c79906c6d68121e61a
Instruction Fuzzy Hash: 37226F72314A8190EA62EB26E8517DE6361FBC97C4F854036BB4D47AE7EF38C905CB05

Uniqueness

Uniqueness Score: -1.00%

Function 000000014002BB18, Relevance: 1.7, Strings: 1, Instructions: 469COMMON

Download Yara Rule

Strings

4:Lx, xrefs: 000000014002C01C

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: EnumValue
String ID: 4:Lx
API String ID: 2814608202-1977821611
Opcode ID: 1df7e8ae007063359dbf4cbc708e838196a38aff41d4e9cae8a1be0b61f42d39
Instruction ID: 9de206c3fcf31fdab87be55fbd22058f8cf9662c311e7a688b94ac5a8ceb0971
Opcode Fuzzy Hash: 1df7e8ae007063359dbf4cbc708e838196a38aff41d4e9cae8a1be0b61f42d39
Instruction Fuzzy Hash: 5222A73221858091FA72EB22E4513EE6360E7D93E4F954522B75E875F7EF78CA49CB00

Uniqueness

Uniqueness Score: -1.00%

Function 00000001400258FC, Relevance: 1.7, Strings: 1, Instructions: 418COMMON

Download Yara Rule

Strings

Content-Type, xrefs: 0000000140025C23

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID: Content-Type
API String ID: 0-2058190213
Opcode ID: 84cb345cde7fc16a2ddead684e441a7777f520ff98e869843dc9286cad24fd39
Instruction ID: dd2961d55033f1dd2f49be00355e95955b690614fa1f9469657962adc0d9727f
Opcode Fuzzy Hash: 84cb345cde7fc16a2ddead684e441a7777f520ff98e869843dc9286cad24fd39
Instruction Fuzzy Hash: 9202C23231468096EB76FB27E4553EE6351F7987C4F804026BB4A47AF6EE38C94AC704

Uniqueness

Uniqueness Score: -1.00%

Function 000000014001A66C, Relevance: 1.6, Strings: 1, Instructions: 374COMMON

Download Yara Rule

Strings

h, xrefs: 000000014001A807

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID: h
API String ID: 0-2439710439
Opcode ID: 4b1bd34f086988ffe7bfdda10ffb585f655788335839c48e128eb99c67a616be
Instruction ID: 15c79e4ea189db81c61871ae3d03f1958243f6cf3faf1ce9dfff72c7a1c885b8
Opcode Fuzzy Hash: 4b1bd34f086988ffe7bfdda10ffb585f655788335839c48e128eb99c67a616be
Instruction Fuzzy Hash: 53F17D3221868051EA77EB22D4513EE6355EBC97C0F854132BB4D4B5F7EE79CA4ACB04

Uniqueness

Uniqueness Score: -1.00%

Function 00000001400557DC, Relevance: 1.6, Strings: 1, Instructions: 347COMMON

Download Yara Rule

Strings

(, xrefs: 0000000140055837

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID: (
API String ID: 0-3887548279
Opcode ID: b606c5b386daed7ea2a0050b44e7e5aaddfd02656aca6bdcdd56288db195e318
Instruction ID: ef74a4811f00421b3861909ae3df24c126d53536f14d1dae71c2132744ce6877
Opcode Fuzzy Hash: b606c5b386daed7ea2a0050b44e7e5aaddfd02656aca6bdcdd56288db195e318
Instruction Fuzzy Hash: 3CE1BB732046449BEB26FB23D4517DD33A5F78CBC1F428126BB4A476A6EB38DA45CB40

Uniqueness

Uniqueness Score: -1.00%

Function 000000014001C05C, Relevance: 1.6, Strings: 1, Instructions: 332COMMON

Download Yara Rule

Strings

h, xrefs: 000000014001C315

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: FileFind$FirstNext
String ID: h
API String ID: 1690352074-2439710439
Opcode ID: 6e83b8280553700280de66b138326a13ada5f839812444a3a985cf6f12ea0cb9
Instruction ID: 37ef1e29a1df68750ab3a8fe2a391ee9352076786285f0e4a1679bc3fa2bf329
Opcode Fuzzy Hash: 6e83b8280553700280de66b138326a13ada5f839812444a3a985cf6f12ea0cb9
Instruction Fuzzy Hash: ACE19F322186C091EA72EB26E4557EE6350EBC97C0F854122BB4D479F6DF79CA4ACB04

Uniqueness

Uniqueness Score: -1.00%

Function 000000014006BA1C, Relevance: 1.6, Strings: 1, Instructions: 308COMMON

Download Yara Rule

Strings

@, xrefs: 000000014006BD31

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID: @
API String ID: 0-2766056989
Opcode ID: 432128fce391129affea0ab4d67771d1ab4b326bf8c185cb5b208fbc6bb7dd3c
Instruction ID: c764f7acc1e29c3b1bfd69998f5e68c0e1c35fb3069282f589f0608e9acfd4d8
Opcode Fuzzy Hash: 432128fce391129affea0ab4d67771d1ab4b326bf8c185cb5b208fbc6bb7dd3c
Instruction Fuzzy Hash: 99C12CB311879486E7768F2AD8403AB77A6F39C394F245615FB8D436A4EB7CC585CB00

Uniqueness

Uniqueness Score: -1.00%

Function 000000014002A214, Relevance: 1.5, Strings: 1, Instructions: 299COMMON

Download Yara Rule

Strings

)8GV, xrefs: 000000014002A66B

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID: )8GV
API String ID: 0-3946227331
Opcode ID: d77d335a6d6dc0f5b48abdcea57320d9631b785ba80ad4d975d1d9aea5373c88
Instruction ID: e7784f472742022b51f178041a01eac8b853474124928506b79cafec91966f0d
Opcode Fuzzy Hash: d77d335a6d6dc0f5b48abdcea57320d9631b785ba80ad4d975d1d9aea5373c88
Instruction Fuzzy Hash: E9E16172314A8091EA62EB26E4513EE6361F7D97C4F814432BB4E439F7EE78C949CB05

Uniqueness

Uniqueness Score: -1.00%

Function 000000014000732C, Relevance: 1.5, Strings: 1, Instructions: 278COMMON

Download Yara Rule

Strings

8, xrefs: 000000014000772C

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID: 8
API String ID: 0-4194326291
Opcode ID: 30e89c2ca771fe5bd832859412ca78e8da0c2e79172bf4037a5f48f40b43653e
Instruction ID: 0c96b3bb1331349ee828202f0b2b8fdbd7f34504e29c4ac9316ccd82cb7bbd2a
Opcode Fuzzy Hash: 30e89c2ca771fe5bd832859412ca78e8da0c2e79172bf4037a5f48f40b43653e
Instruction Fuzzy Hash: E2C13172314AC0A1EA62EB66E8517EE6361F7D87C4F818022BB4D476B7DF78C549CB04

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140037D24, Relevance: 1.5, Strings: 1, Instructions: 209COMMON

Download Yara Rule

Strings

, xrefs: 0000000140037DAF

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID: 0-3916222277
Opcode ID: 97495a39b75a77852deba041b811f6ec0737e0be9dc5161f1c0fb34ed6c93d86
Instruction ID: bd013b986bccb95e863d4b9fb9a0bea60b924e773faef38dfdeb094c765e5923
Opcode Fuzzy Hash: 97495a39b75a77852deba041b811f6ec0737e0be9dc5161f1c0fb34ed6c93d86
Instruction Fuzzy Hash: 8F91D472305AC599EB62EB26E4147DEA351E7887C4F404131BB8D47BAAEF39C54ACB04

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140033984, Relevance: 1.4, Strings: 1, Instructions: 175COMMON

Download Yara Rule

Strings

VUUU, xrefs: 0000000140033C18

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID: VUUU
API String ID: 0-2040033107
Opcode ID: 30539f95cf41d9ef314a0d6fd167d2f6dc8c4749d63469dbc3dfb5d365fadb2f
Instruction ID: 6d17721f05edd813b04858801196553dff24e9a7dea1ceeb8acb8170bbb443e8
Opcode Fuzzy Hash: 30539f95cf41d9ef314a0d6fd167d2f6dc8c4749d63469dbc3dfb5d365fadb2f
Instruction Fuzzy Hash: 3771503232458091EA62E766E8927EE6361FBC97C4F815132BB4D479F7DE78C949CB00

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140057820, Relevance: 1.4, Strings: 1, Instructions: 168COMMON

Download Yara Rule

Strings

0, xrefs: 000000014005786F

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID: 0
API String ID: 0-4108050209
Opcode ID: 616aa20273784b9d670229da0a79f5fa514c4c21989a5eae6e8a0268e64fac22
Instruction ID: ac8f5048f8f68a7313ea225b74f00c7150461265de9df7fa90f3e8bfcf568688
Opcode Fuzzy Hash: 616aa20273784b9d670229da0a79f5fa514c4c21989a5eae6e8a0268e64fac22
Instruction Fuzzy Hash: A971AD76218A8081EB52EB66E450BEE6361FBC8BC0F454026FF4E47BA6DF39C509C745

Uniqueness

Uniqueness Score: -1.00%

Function 000000014000BBC4, Relevance: .9, Instructions: 916COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3c3eed842b8d849d1eb5e07bde9059077dc8ac29e6d03051ccc5f301a4899984
Instruction ID: de61da9168f792ab320152e590739c0cbea05f6200c3328605642294cf45bf87
Opcode Fuzzy Hash: 3c3eed842b8d849d1eb5e07bde9059077dc8ac29e6d03051ccc5f301a4899984
Instruction Fuzzy Hash: 7B82F5B2225A8092FA63EB17F451BEE6350F789BC8F414022FB4A479F6DE79C585C740

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140056790, Relevance: .9, Instructions: 875COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: FileFindFirstInformationToken
String ID:
API String ID: 3675931825-0
Opcode ID: 7ec321d1f5d51e07beae51ed88e1770045fc1a58b5a31766485eb4934d0d33a4
Instruction ID: e56c1fd0f14318e9fa9d642f98a6930b8b2a4a0bd0068d64fcde8ffe4270d522
Opcode Fuzzy Hash: 7ec321d1f5d51e07beae51ed88e1770045fc1a58b5a31766485eb4934d0d33a4
Instruction Fuzzy Hash: C79260323186C090EA62EB26E4517EE6351EBD97D4F814032BB4D479FBDE39C949CB05

Uniqueness

Uniqueness Score: -1.00%

Function 00000001400172A8, Relevance: .9, Instructions: 857COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0ffdbb73a99bb67c1eb63f578124e9a48cb0b1f63b354b3326db99ecee5d97f1
Instruction ID: 68790f09a0475486cdfdf58af8bd30fe52a72b8413839995fe3c25945e3d6be5
Opcode Fuzzy Hash: 0ffdbb73a99bb67c1eb63f578124e9a48cb0b1f63b354b3326db99ecee5d97f1
Instruction Fuzzy Hash: E3920B722189C091EA66FB26D4913DE6361EBD9780FC14032B74E475FBEE39C64ACB44

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140057FA8, Relevance: .8, Instructions: 799COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: Close
String ID:
API String ID: 3535843008-0
Opcode ID: 0b366b44e6f3378cb22cf5d7efcaa8f4a804f4781dfd2d51ac6dbecdb0593865
Instruction ID: 24c6a08f2f2c81e9f8711b68f3527e98b95ae7a1862210f8b74a74c52caec6bc
Opcode Fuzzy Hash: 0b366b44e6f3378cb22cf5d7efcaa8f4a804f4781dfd2d51ac6dbecdb0593865
Instruction Fuzzy Hash: BD821E722189C091EA72EB26E8513EE6361E7D97C0F854432BB4D47AFBDE39C549CB04

Uniqueness

Uniqueness Score: -1.00%

Function 000000014001EE68, Relevance: .8, Instructions: 788COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7b28032429721228640ebc2db7ecad55c9d61bee9128bf36d56e13687d512797
Instruction ID: 1bfaf5ab698a0d9ae5613303a26d9f110d3c3ff749fbc98f4a633123d37236ee
Opcode Fuzzy Hash: 7b28032429721228640ebc2db7ecad55c9d61bee9128bf36d56e13687d512797
Instruction Fuzzy Hash: 6B8210722185C091EB62EB22E4913EE6361E7D97C0F814422BB5E476FBDF38C549CB44

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140015D04, Relevance: .7, Instructions: 749COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: Close
String ID:
API String ID: 3535843008-0
Opcode ID: 79c2b54aec42e862f164729592ad18b9f726e96430ee60826909ab06b3c96032
Instruction ID: 920128f573a6df5efe4236e20648e1136e231cff84c02c978e49d836db60b591
Opcode Fuzzy Hash: 79c2b54aec42e862f164729592ad18b9f726e96430ee60826909ab06b3c96032
Instruction Fuzzy Hash: 827271722046C091EB62EB26E8957EE6351E7D97C0F854032BB4D4B6F7EE39C949CB04

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140005AB8, Relevance: .7, Instructions: 734COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 66d00e2519b020739f55ef65ed0c5fdac6cbf165593ff179301ffd13adb40ba5
Instruction ID: 131e5f10334d59222fdbfa38ba52a0dfac0fa8d935ea9efde1567ab7b92ce015
Opcode Fuzzy Hash: 66d00e2519b020739f55ef65ed0c5fdac6cbf165593ff179301ffd13adb40ba5
Instruction Fuzzy Hash: E8625072314A8095EA62EB63E8517EE6361EB887C4F854032BB4D4B6F7EF78C549C704

Uniqueness

Uniqueness Score: -1.00%

Function 000000014001311C, Relevance: .7, Instructions: 732COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: Close
String ID:
API String ID: 3535843008-0
Opcode ID: 130260d53668ff65b578226e147a74f106e982ff3feeb31a8bb8a4af87170253
Instruction ID: 7d3e00ef7f8b77d6f2d9db96002fb8b33bfd6274bdc73e9e7b379e1fc3f11e30
Opcode Fuzzy Hash: 130260d53668ff65b578226e147a74f106e982ff3feeb31a8bb8a4af87170253
Instruction Fuzzy Hash: 417272722186C090EA62EB26E4513EE6350EBD97D0F814132BB9E475F7EF79C54ACB04

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140020924, Relevance: .7, Instructions: 722COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: NameUser
String ID:
API String ID: 2645101109-0
Opcode ID: 75222813d0fc82450aa5ae75b8765f0135017abfe4c467b094c5b87c9261aa35
Instruction ID: 2ca85a1ce51d590c58c2f5f5a17bfdc6d1d56331f214241f4508751ea1811159
Opcode Fuzzy Hash: 75222813d0fc82450aa5ae75b8765f0135017abfe4c467b094c5b87c9261aa35
Instruction Fuzzy Hash: 62628732315AC095EA72EB56E4517DE6361E7C8BC0F854022BB8D47ABADF79C949CB00

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140069278, Relevance: .7, Instructions: 683COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d1a0b37c037957e5444907fdc230ed2f36dd6b16ab0bee81a4722d15eb4b0668
Instruction ID: 310acda9c1b13f6d042efa74e474366859b2544dd42da5b95d137f1896dce303
Opcode Fuzzy Hash: d1a0b37c037957e5444907fdc230ed2f36dd6b16ab0bee81a4722d15eb4b0668
Instruction Fuzzy Hash: 4062B2322146949BE766CF27CA48B9D3BAAF3197D4F214915EB1D47FA1CB35D8A0CB00

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140003BE0, Relevance: .6, Instructions: 643COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 74c6470d6ce8c15d147a4b2cb5894ae6b9299d0321bd6504841d31b976e8f89a
Instruction ID: 32f56c3839220215f5f16005f722bddf7b1593d80fe8cb1fb4b4f222351141c8
Opcode Fuzzy Hash: 74c6470d6ce8c15d147a4b2cb5894ae6b9299d0321bd6504841d31b976e8f89a
Instruction Fuzzy Hash: 695240B2214A8091EB62EB27E4517EE6360F7C9BC4F854022BF4D4B6B7DE78C949C704

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140024AEC, Relevance: .6, Instructions: 635COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: df0904fc8d8336dd6ad4587886e4b5cfd52bbd1139f46f800f9f826ba1e10935
Instruction ID: 4bf821dcf52957490122e6fc1cafd953d9dc1017d867385c966437f434676d3e
Opcode Fuzzy Hash: df0904fc8d8336dd6ad4587886e4b5cfd52bbd1139f46f800f9f826ba1e10935
Instruction Fuzzy Hash: 8852DF322146C095EB72EB27E8513EE63A0E7897C4F514126F74A4BAFADF78C945CB04

Uniqueness

Uniqueness Score: -1.00%

Function 000000014001B52C, Relevance: .6, Instructions: 596COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0ed305f960a4f2e412ad22e621ba74c7ef94b4202dcdf5d0519d65debbeafba9
Instruction ID: a4d01e0a7800e832750c45308c571a2334ec4913359ceb715e845cd4d758c668
Opcode Fuzzy Hash: 0ed305f960a4f2e412ad22e621ba74c7ef94b4202dcdf5d0519d65debbeafba9
Instruction Fuzzy Hash: 78424E322186C051EA77EB26D4513EE6355EBD97C0F854022BB4947AFBEF39CA46CB04

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140014EBC, Relevance: .6, Instructions: 588COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 82e41c9c57b34bf94e633798d719efa6fb390a507dba8b6551c1448fb51fadea
Instruction ID: 05968e4ff75533b60fcd67358809277c4dff7cd4020b9ad920af6d05df52b482
Opcode Fuzzy Hash: 82e41c9c57b34bf94e633798d719efa6fb390a507dba8b6551c1448fb51fadea
Instruction Fuzzy Hash: 84424C722149C0A5EB72EB22D8513EE6321F799784F854132B78D4B5FBEE78C649CB04

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140001154, Relevance: .6, Instructions: 560COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e6840cdf7c583a7f80e14c51bd0e1ca7ff0ca8b8839e5594b9fc2c118aab3997
Instruction ID: 164d544455cd13f6bec4013cfa0e65fd33a4d2072e82fcc68715056af9019a6e
Opcode Fuzzy Hash: e6840cdf7c583a7f80e14c51bd0e1ca7ff0ca8b8839e5594b9fc2c118aab3997
Instruction Fuzzy Hash: 85423172214AC091EA62EB66E8517EE6361FBD97C0F854032BB4E476F6EF38C945C704

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140013ED4, Relevance: .5, Instructions: 547COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 526fcca8c25d308d776b1fcf2acf60b2adc85aa99aad19190bcf3ebdadbe1a8e
Instruction ID: 39de981f516b0ad63a261260aa2dcde86496324121fc4c281a1fb5fdd380637f
Opcode Fuzzy Hash: 526fcca8c25d308d776b1fcf2acf60b2adc85aa99aad19190bcf3ebdadbe1a8e
Instruction Fuzzy Hash: 46429E72310AC095EB62EF26D8517ED3361EB99784F854032BB4E4B9FADE75CA49C700

Uniqueness

Uniqueness Score: -1.00%

Function 000000014000AD5C, Relevance: .5, Instructions: 546COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ea3ca21d80c8e01cd9d4f9d35c3a4c3d364ddc33834f8358be3b1292b51e9bf9
Instruction ID: 60a99d4ef0b1c7e973bb1251653f3025e474467e9f048fe2253034fdf06d99e9
Opcode Fuzzy Hash: ea3ca21d80c8e01cd9d4f9d35c3a4c3d364ddc33834f8358be3b1292b51e9bf9
Instruction Fuzzy Hash: E8427D72214AC0A1EAA2EB26E4957EE6360F7D87C4F814022BB4D476F7DF74C589CB05

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140026FF0, Relevance: .5, Instructions: 532COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 76bcbd499b82a04099d624591f3da46cb71776c4e47aeabb6735e9f028f0faa4
Instruction ID: abfb22bb805949d23a00da26f38a40a8ffa8cc214a749033549688c3725feee1
Opcode Fuzzy Hash: 76bcbd499b82a04099d624591f3da46cb71776c4e47aeabb6735e9f028f0faa4
Instruction Fuzzy Hash: 1822CD7231429085EB26FB3798157DE2650BB8DBC8F815025BF0A4BBE7DE38C64AC745

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140011EB4, Relevance: .5, Instructions: 529COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7d40d248894297a00d9ef94a41131b326ea06dc99d35909d026a4280c3e65e4c
Instruction ID: f06b7288c4d4bd07871204d2e710e9ac68a575d934354d7115c346abea651bd3
Opcode Fuzzy Hash: 7d40d248894297a00d9ef94a41131b326ea06dc99d35909d026a4280c3e65e4c
Instruction Fuzzy Hash: 2D329173205684A5EB22EF26E0517DE7320F78DB84F854122FB9D4B6A7DE39D24AC704

Uniqueness

Uniqueness Score: -1.00%

Function 000000014001276C, Relevance: .5, Instructions: 519COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c3875f6c714224796d270b7a31c76efb4669c9e92c459463cfcf9c68ea03b32c
Instruction ID: c7bcd2560e524489b38f98a7857ba95ec447b58129b26e9f461bf27d36094543
Opcode Fuzzy Hash: c3875f6c714224796d270b7a31c76efb4669c9e92c459463cfcf9c68ea03b32c
Instruction Fuzzy Hash: 56325E7231468091EB22EB22D4513DE6361F799BD5F854132BB4D4B6FBEE38C64ACB04

Uniqueness

Uniqueness Score: -1.00%

Function 000000014005ABFC, Relevance: .5, Instructions: 494COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9ea0d5a02904cb102063d9faf4d1d1e59cd88dd22a4e58979e891eb56d83b4dd
Instruction ID: b749066ee65fe362809574ebb57d7e1f52cca85a5b6bb8f9c54bceb2c82de3be
Opcode Fuzzy Hash: 9ea0d5a02904cb102063d9faf4d1d1e59cd88dd22a4e58979e891eb56d83b4dd
Instruction Fuzzy Hash: 7A0211762296A48AF777CE1A8418BBF3E96E30E3C0F089121EF57176E1C23AD950D715

Uniqueness

Uniqueness Score: -1.00%

Function 00000001400330C4, Relevance: .5, Instructions: 482COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cff099b1e9b81f3500c8b8b2f06dc35da03204bdf9322d808db5cc1c306a296e
Instruction ID: 60d4d4323987869f84665cb6ae0716d715488eecb9f561927da2240e35d110df
Opcode Fuzzy Hash: cff099b1e9b81f3500c8b8b2f06dc35da03204bdf9322d808db5cc1c306a296e
Instruction Fuzzy Hash: 10225372214A84A1EB62EB26D4953DE6361F7D8784F814432B74D476BBEF38C64ACB04

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140051620, Relevance: .5, Instructions: 475COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: efc801f50530962fb58d8598e51325d4f859ef958ebdfc3b1e50d4f104be7a84
Instruction ID: ed2b767acc8c18619810d12ac44cf125cd66551bf44ec9db52a5166d2764bde4
Opcode Fuzzy Hash: efc801f50530962fb58d8598e51325d4f859ef958ebdfc3b1e50d4f104be7a84
Instruction Fuzzy Hash: 7B02E13231865141FA63EB67A4117EE1791ABCDBC8F410221BF4A8B7F6EE32C846C705

Uniqueness

Uniqueness Score: -1.00%

Function 00000001400362A0, Relevance: .5, Instructions: 471COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: Close
String ID:
API String ID: 3535843008-0
Opcode ID: 34522c594376eaf1ecf48a739fa6cc57f05a5bd0733f7a7ba9320492d3f3586e
Instruction ID: 436fa2e480cc294b92e4ee261bdc4eac362c4f034c2f68f82cd627fe5c143e0b
Opcode Fuzzy Hash: 34522c594376eaf1ecf48a739fa6cc57f05a5bd0733f7a7ba9320492d3f3586e
Instruction Fuzzy Hash: 81226D322146C091EA73EB26D4553EE6350EBD97C4F858132BB4E475FADE38C94ACB05

Uniqueness

Uniqueness Score: -1.00%

Function 000000014003E8E0, Relevance: .5, Instructions: 457COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: Thread32$CreateFirstNextProcessSnapshotToolhelp32
String ID:
API String ID: 1399924146-0
Opcode ID: e8cb3941f499e00b5c353defee2f0a990b56fe0226d356a6c9f2b33c56ea727c
Instruction ID: c2d3e0c23f61db920edfd1556318e7c30ecea7d1c74c27024d3b8d5a76ca7338
Opcode Fuzzy Hash: e8cb3941f499e00b5c353defee2f0a990b56fe0226d356a6c9f2b33c56ea727c
Instruction Fuzzy Hash: 7612617221468090EA63E727E4517EFA351EB98BC0F854532BB4D47AF7EE38C54ACB05

Uniqueness

Uniqueness Score: -1.00%

Function 000000014000CEAC, Relevance: .4, Instructions: 450COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 65579a37f257981ea6b0cbeb2137411723ee95df2a04ec701091b7f6d2d121c5
Instruction ID: 5414fda6f51c9c511d83c9211c3f10b3feabaf364110faf69a24053b98e4c13e
Opcode Fuzzy Hash: 65579a37f257981ea6b0cbeb2137411723ee95df2a04ec701091b7f6d2d121c5
Instruction Fuzzy Hash: 9112B1B231458091EAA2EB26E451BEE6360F7D97C4F815032BB4E479F7DE78C54ACB04

Uniqueness

Uniqueness Score: -1.00%

Function 000000014001AD0C, Relevance: .4, Instructions: 449COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4454c9dcaa8af30a53f99a3d059c245680f2f8885bdf73d64f9ce9965ac0d2cc
Instruction ID: fda6be3ec237923fe9f5f0dc213fc9e4c4912560e6773db89d11bc4dbc5ccab1
Opcode Fuzzy Hash: 4454c9dcaa8af30a53f99a3d059c245680f2f8885bdf73d64f9ce9965ac0d2cc
Instruction Fuzzy Hash: 62127C7220468091EA77EB26E4513EE6354EBC97C0F854032BB4A475F7EF79CA4ACB04

Uniqueness

Uniqueness Score: -1.00%

Function 00000001400021C8, Relevance: .4, Instructions: 439COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 595204a9b9463a4788fd995764ed1dcbfa657e0188e98a19218fc12b14178766
Instruction ID: 0c8889d60dca162dd1cd30145a8fb7b7e6fd6cca0af41a049159531b8d7e94ff
Opcode Fuzzy Hash: 595204a9b9463a4788fd995764ed1dcbfa657e0188e98a19218fc12b14178766
Instruction Fuzzy Hash: 991298B2205B8191EA62EB12E548BDE63A5F78CBC0F815022EF4D1B7B5DF78D586C304

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140067663, Relevance: .4, Instructions: 424COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ec9f129dca0404cd4eb89d9feac4bc83178c6938a0250f1c550dbd2474f92119
Instruction ID: f84857d65023bb0b9959cfe63f1243dc611ab175f2cf301fd6e417ff86ed69ff
Opcode Fuzzy Hash: ec9f129dca0404cd4eb89d9feac4bc83178c6938a0250f1c550dbd2474f92119
Instruction Fuzzy Hash: 7A02D1739182948BE326CF16E848FAD7BA6F388395F624615FF8993794D738D840DB40

Uniqueness

Uniqueness Score: -1.00%

Function 00000001400311B0, Relevance: .4, Instructions: 419COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9b970a898d8b8d34e135979fbbd4cd9e38a0149799cc46c08806449442db8618
Instruction ID: 8b507d96c1cbe0c2ecbcab510dfe04252df980b1f1c1554bd079a4c74e77c534
Opcode Fuzzy Hash: 9b970a898d8b8d34e135979fbbd4cd9e38a0149799cc46c08806449442db8618
Instruction Fuzzy Hash: 1A127D7221468091EA63EB26E4953EE6360EBDD7C0F854032BB4E476F7DE39CA45CB04

Uniqueness

Uniqueness Score: -1.00%

Function 000000014002AE48, Relevance: .4, Instructions: 414COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8378129fe89238999a6891638556179d379e60ace3d3b49b882a79e30546ddeb
Instruction ID: 31afb4075b914bed2b7695b49e41a33128bad52d460a062de6e4064ab516db2a
Opcode Fuzzy Hash: 8378129fe89238999a6891638556179d379e60ace3d3b49b882a79e30546ddeb
Instruction Fuzzy Hash: 7B125F72215AC490EB62EB26E4553DE7360E7D8B80F854032B74D476F7EE78C68ACB04

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140002A20, Relevance: .4, Instructions: 408COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7479621fe27de98e4b79be29aa01a8d03d347ab9a08fb342245f9883028e1f72
Instruction ID: 9e84e2e5dc75087e1564b8ebe951cdc9a9bb166e846e2a009843290cb6ecd376
Opcode Fuzzy Hash: 7479621fe27de98e4b79be29aa01a8d03d347ab9a08fb342245f9883028e1f72
Instruction Fuzzy Hash: 73122F722249C091EA62FB26E8957EE6361FBD8784F814032B74D475FBDE78C949CB04

Uniqueness

Uniqueness Score: -1.00%

Function 000000014002C348, Relevance: .4, Instructions: 400COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b75eaf13bd8ab63a2a0946afc728efcf72b91baabeea1edef971cc55ac7bbbbc
Instruction ID: 85f24d3bb5a0f791ff67dff1e7302054a76fe63dcaebd5fed4744a6f54a78ce6
Opcode Fuzzy Hash: b75eaf13bd8ab63a2a0946afc728efcf72b91baabeea1edef971cc55ac7bbbbc
Instruction Fuzzy Hash: D6029236214A9091EA62EB26E454BEF73A0FB88BC4F514126FB8D476F6DF38C945C704

Uniqueness

Uniqueness Score: -1.00%

Function 000000014006BE28, Relevance: .4, Instructions: 383COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8d612b07937cfa1e5694db9485771d000a9ca6b1c5ec33947b844a1af6287e0a
Instruction ID: 5d755b72472fe60230bb3285c73b61b88c9c6b0aedda874616b054f18f2f5cab
Opcode Fuzzy Hash: 8d612b07937cfa1e5694db9485771d000a9ca6b1c5ec33947b844a1af6287e0a
Instruction Fuzzy Hash: 18E1CE772286E08BD7218F26A801BAEBFA1F389388F509515FB8A43B55C739D954CF00

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140036C08, Relevance: .4, Instructions: 369COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b16fa458bcc8ef6f35420467b153f3c83c3bcc3fb0aafc5c70d06f59e68eac31
Instruction ID: 7a70bfda75841080f65ae555b7e505d22f6544ee0499e2394e1e549d5b5c8b8a
Opcode Fuzzy Hash: b16fa458bcc8ef6f35420467b153f3c83c3bcc3fb0aafc5c70d06f59e68eac31
Instruction Fuzzy Hash: 9C025F322149C091EA73EB26E4557DE6361E7D8784F858032B78E479F6EF78C54ACB01

Uniqueness

Uniqueness Score: -1.00%

Function 000000014006D1F0, Relevance: .4, Instructions: 364COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 67dcefd65efa97fdf6e6426d41f4cbb4db376ecbab85ba68c67edb907fb79f4c
Instruction ID: 6a02120812094a0ed137d131d253ff0f4048b9e63ce9bd6e874256b598714934
Opcode Fuzzy Hash: 67dcefd65efa97fdf6e6426d41f4cbb4db376ecbab85ba68c67edb907fb79f4c
Instruction Fuzzy Hash: A6E179B2318290A7D31E8F29C6513EDB3A2F759791F509A05EB6B87790E734E970C321

Uniqueness

Uniqueness Score: -1.00%

Function 000000014001E2E4, Relevance: .4, Instructions: 364COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1a434c74d64d0a1809bcf39a23b6f1906c94990716d58ca764a775655d6a5bed
Instruction ID: 9565bdbfea31f15a641769849ab9d305a38391c77ab3944f6c098f7d26c97f52
Opcode Fuzzy Hash: 1a434c74d64d0a1809bcf39a23b6f1906c94990716d58ca764a775655d6a5bed
Instruction Fuzzy Hash: ADF1CE722189C090EA62F726E8517EE6761E7D97C0F854032BB4D47AF7DE39C549CB04

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140063102, Relevance: .4, Instructions: 357COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 62e1e4bf5cc55a3eaca6b7b7cd98166de1f40f909c8ded27d2d86e9ec0acaea5
Instruction ID: 82e08d680a6390378da86792b6607ca9e940cd3545550ab1a3b4b079cae623f1
Opcode Fuzzy Hash: 62e1e4bf5cc55a3eaca6b7b7cd98166de1f40f909c8ded27d2d86e9ec0acaea5
Instruction Fuzzy Hash: 27E136735182E18BE7738F26D8507EE7BA1F3497C4F640912EB8A87AA5CB38C445DB40

Uniqueness

Uniqueness Score: -1.00%

Function 000000014005C8FC, Relevance: .4, Instructions: 355COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e82729c48a8bb0e60dcbe5acffc1ae3892e87042a428716ee9b0a14022611ed7
Instruction ID: 45cb368d52bea33d50019873d4550a810173569b84cf03d143e4903fc7952072
Opcode Fuzzy Hash: e82729c48a8bb0e60dcbe5acffc1ae3892e87042a428716ee9b0a14022611ed7
Instruction Fuzzy Hash: 0CF16172258BC489E7B6CF16E4417EAB7A0F389BD4F540116EF8917BA9CB39C580CB40

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140068292, Relevance: .3, Instructions: 346COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0373dd68f4967f5e88725c214717e7e9053186580ca92eaa6ee36fb39a378c71
Instruction ID: ad4c30511573bf3415e8390caf8d5b0b4627b5d85cb452bf1f47e15a9a61a444
Opcode Fuzzy Hash: 0373dd68f4967f5e88725c214717e7e9053186580ca92eaa6ee36fb39a378c71
Instruction Fuzzy Hash: F4E1A0726143A08BE772CF1AE448B9D7BA5F359B80F164654FF8A57BA5C734D880CB40

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140029C1C, Relevance: .3, Instructions: 346COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: AllocateMemoryVirtual
String ID:
API String ID: 2167126740-0
Opcode ID: 120fc75c0a77331f10dbd65eb599ff9a48f163cd1fd91ffd790f1ef7cc107c15
Instruction ID: cda5e18fc3a2f60903d9baf9f887e9a1b44717e2bb2bf840619311c2f194ddd1
Opcode Fuzzy Hash: 120fc75c0a77331f10dbd65eb599ff9a48f163cd1fd91ffd790f1ef7cc107c15
Instruction Fuzzy Hash: FCF1B172205BC081EBA6DB26E4517DE73A0F789BD4F44803AAB8D477A6DF78C895C704

Uniqueness

Uniqueness Score: -1.00%

Function 000000014002F278, Relevance: .3, Instructions: 333COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: FileFindFirst
String ID:
API String ID: 1974802433-0
Opcode ID: fdd55432a73ebf8db6515f4716f41b18020f468a8b1a47863484d8d003167406
Instruction ID: 69179cdea89a738f355240d139f0edf7c2e4f8b489b3507e122ce3176674e354
Opcode Fuzzy Hash: fdd55432a73ebf8db6515f4716f41b18020f468a8b1a47863484d8d003167406
Instruction Fuzzy Hash: 5BE172322146C091EA62EB26E4553EE6364EBD97C4F824132BB8D475F7DF78CA46CB04

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140026540, Relevance: .3, Instructions: 318COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 50f1d5b965a4b3a63cb4678645382e29125aa26b23b5d188acc3ff8b040d911d
Instruction ID: 45e6ca7a6e7bdab6746189a5672824e734e28c0da8c3ed667a3d887727cabeae
Opcode Fuzzy Hash: 50f1d5b965a4b3a63cb4678645382e29125aa26b23b5d188acc3ff8b040d911d
Instruction Fuzzy Hash: A7D1657232458092EA67EB56E8517EE6361F789BC0F419032BF5D0B6E7DE78C944CB04

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140047FCC, Relevance: .3, Instructions: 309COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e4a9275121f18da47b16e7e0638a10ae6b1a9170be6e947c90c9c2cdf0883233
Instruction ID: a923770c6f301ec2082aa607b531da59edb32b68c7c2684cecd6b55d82c4cec2
Opcode Fuzzy Hash: e4a9275121f18da47b16e7e0638a10ae6b1a9170be6e947c90c9c2cdf0883233
Instruction Fuzzy Hash: BFD15E7221468591EA62EB23E4517EE6351FB88BD0F424532BF4E476FBDE38C509C748

Uniqueness

Uniqueness Score: -1.00%

Function 000000014003C6B0, Relevance: .3, Instructions: 306COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: Thread32$CreateFirstNextProcessSnapshotToolhelp32
String ID:
API String ID: 1399924146-0
Opcode ID: e8cff4231c5e915614ab65b6c553c81535962afc0576ca653d0540cc8a7424fa
Instruction ID: 56847661ef8f97e2b6a9f4718d631dbda82c0d392b183813c8bb446912749f0f
Opcode Fuzzy Hash: e8cff4231c5e915614ab65b6c553c81535962afc0576ca653d0540cc8a7424fa
Instruction Fuzzy Hash: ADC1537231468051EA62EB23E4517EF6351ABC97C0F454431BB4E87AF6EF38C94ACB05

Uniqueness

Uniqueness Score: -1.00%

Function 000000014006AAD8, Relevance: .3, Instructions: 306COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c1e006301050d09af0594a914fb5112285e1279ce453ba0eede0c90aa28a2322
Instruction ID: a793eeb2d47bd972cd4739d72169585229f26ef3c73c1fe26c3f8e42f5869857
Opcode Fuzzy Hash: c1e006301050d09af0594a914fb5112285e1279ce453ba0eede0c90aa28a2322
Instruction Fuzzy Hash: EDE150766106948BE766DF3AE444BDEB7A1F349B84F208411EB9E83791DB3DE851CB00

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140022C84, Relevance: .3, Instructions: 301COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e758337f650f1751cbc5c5eed39f45844cb4dd37c9bf5573a5793bd7599f6ef2
Instruction ID: 093b09890293c3b9028163432023d48a8fd26ff60f69f152e65130d40716d581
Opcode Fuzzy Hash: e758337f650f1751cbc5c5eed39f45844cb4dd37c9bf5573a5793bd7599f6ef2
Instruction Fuzzy Hash: 8AD1B27221468491EB62EB26D4517EE6361FBC9BC0F814432BB4D47AFBDE38C849CB05

Uniqueness

Uniqueness Score: -1.00%

Function 000000014001D6C4, Relevance: .3, Instructions: 299COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aedf24d5c7f1e79699632eabf9ce4ae2c50606786e20183710febd3f65c013b2
Instruction ID: b45a19ad935d2ae584adeeaafd9345d3aefae3b8c5eec25843ca36380f0e5bb3
Opcode Fuzzy Hash: aedf24d5c7f1e79699632eabf9ce4ae2c50606786e20183710febd3f65c013b2
Instruction Fuzzy Hash: D9C1447221468090FA66FA22E8517EE7351EBD97C0F858032BB4E4B5F7EE79C54AC704

Uniqueness

Uniqueness Score: -1.00%

Function 000000014000EB3C, Relevance: .3, Instructions: 297COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fef49f06a612c05a2073872a7cd5bbba7c11f2ccf77538cbdb6d2fab2b7a52e6
Instruction ID: 9a8bd49d56b1e208164abed3a2eaa3ff9acc54332056ee5ae6b2ef198d64a711
Opcode Fuzzy Hash: fef49f06a612c05a2073872a7cd5bbba7c11f2ccf77538cbdb6d2fab2b7a52e6
Instruction Fuzzy Hash: 89C180B321458095EB22EF26E4517ED6321F789BC4F854032BB495B6FBDE78C686CB04

Uniqueness

Uniqueness Score: -1.00%

Function 000000014006D904, Relevance: .3, Instructions: 289COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7f774ce4d8783887dafbf916ff989042a0e8ee389f27334fb0b914e100e6f2c7
Instruction ID: 742f63a618538df639f564180c81bfe715ce16f0fed6f21ada9b15c4265c68ca
Opcode Fuzzy Hash: 7f774ce4d8783887dafbf916ff989042a0e8ee389f27334fb0b914e100e6f2c7
Instruction Fuzzy Hash: 4AC1E4B76046A4D7D301CF19C884BED3BA9F388BC8FA59526DB6A43351E7B9C954C310

Uniqueness

Uniqueness Score: -1.00%

Function 00000001400479E0, Relevance: .3, Instructions: 288COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 08c37a75342cf0e8cccdd72db8d21ece7d121a09a7558853e50db8de55441d01
Instruction ID: 9df5d06871ddbacd2daffc333f37d2eb8eb3481e6a6e08769e6c37e926f4298c
Opcode Fuzzy Hash: 08c37a75342cf0e8cccdd72db8d21ece7d121a09a7558853e50db8de55441d01
Instruction Fuzzy Hash: A6D1A53220468094FB62EB32E4507ED2790EB897E4F568232BB6D47AFADF74C945C744

Uniqueness

Uniqueness Score: -1.00%

Function 00000001400231DC, Relevance: .3, Instructions: 279COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c31b5cc5e4fca3087f1be0c7b2f5031e8bd3682fd355fa3596881f239161af6b
Instruction ID: 67313f059e9d7a2c41518caf16522e13c18e8195cb148257ac4c0ef82fbc2694
Opcode Fuzzy Hash: c31b5cc5e4fca3087f1be0c7b2f5031e8bd3682fd355fa3596881f239161af6b
Instruction Fuzzy Hash: A5B1BF7230568095EA66FB26D4517EE6351AB8CBC0F868035BF4E4B7E7EE38C949C704

Uniqueness

Uniqueness Score: -1.00%

Function 000000014002E228, Relevance: .3, Instructions: 276COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 30fb4749480aaab03407e247420141de91f883be1dd848b7b8b21b32362a06c5
Instruction ID: 26d5067383d71e56ec64c44516f53ed37148344395b5bea6d500fdcc472e26b0
Opcode Fuzzy Hash: 30fb4749480aaab03407e247420141de91f883be1dd848b7b8b21b32362a06c5
Instruction Fuzzy Hash: B9B1C273214590A2EB62FB26E4557DE6320F7997C4F814025BB8E4B9F7DE38C64ACB04

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140035C80, Relevance: .3, Instructions: 274COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e0704f7e135f67635657c27bbe0fa617f242a5c5429df77b16018c49f2718634
Instruction ID: 11c24946b309041b428f58a6f591f3b0151a9c8f55ae466be750c1eb8b7dbf60
Opcode Fuzzy Hash: e0704f7e135f67635657c27bbe0fa617f242a5c5429df77b16018c49f2718634
Instruction Fuzzy Hash: ABB1B43222498051EA72FB22E8517DE7350F7C87E4F454232BB6E576EAEE38C549CB44

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140032CC8, Relevance: .3, Instructions: 271COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e7e574ef73f15cd5c0f4e48beb3ca61b9a6ad1c59312355b43c24aeb1df523a
Instruction ID: ec5f3de131154a7fad7775b7b6e04cf334aaa1d10931257122a0c57b036f21ee
Opcode Fuzzy Hash: 4e7e574ef73f15cd5c0f4e48beb3ca61b9a6ad1c59312355b43c24aeb1df523a
Instruction Fuzzy Hash: A8B1703261868081FAA7EA67D4513EF6391EBCC7C4F544036BB4A57AFADE38C546C700

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140034BF8, Relevance: .3, Instructions: 261COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 26231744fd8a565c09f820cfce6ebaa6f2253af248bf930ecb1d30a7495fcbda
Instruction ID: 043192ac4e57957f27a2040c43260d426793f4f5d38f04c46e21d605b8ad23d1
Opcode Fuzzy Hash: 26231744fd8a565c09f820cfce6ebaa6f2253af248bf930ecb1d30a7495fcbda
Instruction Fuzzy Hash: 0EB17F3221858091FB62E766E4513EF6391F7C97C0F864022BB8D876FADE39C949CB44

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140052110, Relevance: .3, Instructions: 260COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 160bceb4fc89f745f08d7b823cb25b8fffa364c32bad70a06045bef26be589b3
Instruction ID: ea9dc9199cca76e98c13cdffc4ae6b74f642c8d36fc0496a27e4b4c163dad8df
Opcode Fuzzy Hash: 160bceb4fc89f745f08d7b823cb25b8fffa364c32bad70a06045bef26be589b3
Instruction Fuzzy Hash: 35A1D232204A4085FA62EB27E4517EE2795AB8EBD0F460131BF49877F6EF35C846CB10

Uniqueness

Uniqueness Score: -1.00%

Function 000000014005497C, Relevance: .3, Instructions: 253COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6bd1cd7815a55ec6cfcc4dec7c146e5faf22b70897b76c87a17632d95ce4e695
Instruction ID: f74fe9de8ebbf7e3ba465b2e22e0b48a9f6b8f16c2839c5d36b9050ada8e3523
Opcode Fuzzy Hash: 6bd1cd7815a55ec6cfcc4dec7c146e5faf22b70897b76c87a17632d95ce4e695
Instruction Fuzzy Hash: 53911572305AA041EBF3EA27E4547EE2290EBC87C8F010121BF1987AF5EF36C9458704

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140068E58, Relevance: .2, Instructions: 247COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 084ed0ec5b923f6bc89c9be914fd79e54978a6f344408da28a8a2f95e026a4dd
Instruction ID: 4384f26b1d834212b8cda70983afe17c260f3aa7c98ba8c61fd0092cb4358f7c
Opcode Fuzzy Hash: 084ed0ec5b923f6bc89c9be914fd79e54978a6f344408da28a8a2f95e026a4dd
Instruction Fuzzy Hash: 6AA11233A146888BDB52DF3AC488BAD736AFB59784F518321EF09636A1E735D945C700

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140031928, Relevance: .2, Instructions: 237COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: Close
String ID:
API String ID: 3535843008-0
Opcode ID: 724cbb108dfe72c90a7750abdcc142b7aff0a48a18ac08c4d70f9e0b975e7d37
Instruction ID: 7d9660fc1b8a2d1e5e7f5cad4b6e10fa8296a975f0b0489aff90fa135f630cf6
Opcode Fuzzy Hash: 724cbb108dfe72c90a7750abdcc142b7aff0a48a18ac08c4d70f9e0b975e7d37
Instruction Fuzzy Hash: E7A11E722185C050EB62EB26E8517EE6351E7D97C0F865432BB4E479F6EE38C549CB04

Uniqueness

Uniqueness Score: -1.00%

Function 000000014000F76C, Relevance: .2, Instructions: 229COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1964adbb3758f682b2381cf14d2a34d048a88c1a2c10a7597998ed4cb8eba014
Instruction ID: e6519f55a7d2182c3a6645842573f2409047abe28c0139a18592fc590dae0476
Opcode Fuzzy Hash: 1964adbb3758f682b2381cf14d2a34d048a88c1a2c10a7597998ed4cb8eba014
Instruction Fuzzy Hash: C3916272204A4491EA12E736E8517EE7361FBD97C0F828022BB4E475B7EE78C945C705

Uniqueness

Uniqueness Score: -1.00%

Function 000000014005B470, Relevance: .2, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 973dd57a9dc054770aa409359167b4519dc9372c6b7d6bfa41168b819a0f1849
Instruction ID: 1835e9ea57aa2cd784a8e3bb1e18e15354660f591a2f073ad0cb7535124317d7
Opcode Fuzzy Hash: 973dd57a9dc054770aa409359167b4519dc9372c6b7d6bfa41168b819a0f1849
Instruction Fuzzy Hash: 5981D373204B44C6EB26CF26E4547AEB3A1F788B98F141215EF4A437E0EB75D899C700

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140032964, Relevance: .2, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a145fbd8fb76f4d99dcba62380dfee784634fa82e262474cc4a1a6be55d2437c
Instruction ID: ca5fc7efc7eb25e8290bedf773b7448f7d2c1a984f20dfb83223612a4b11670e
Opcode Fuzzy Hash: a145fbd8fb76f4d99dcba62380dfee784634fa82e262474cc4a1a6be55d2437c
Instruction Fuzzy Hash: 0381887231568096FEA7AB63A9123EA5241BBCCBC4F495031BF4E0B7B3EE39C4058714

Uniqueness

Uniqueness Score: -1.00%

Function 000000014002AA90, Relevance: .2, Instructions: 225COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a54825b42aa2bf6ce63f8372e4ff9430964136e2c84ff260ace2e1abd24e4b58
Instruction ID: 464f888c2c58cd5c544f284fe6c7dccf4c3ec3dc42bb6d375607104e125b1bd8
Opcode Fuzzy Hash: a54825b42aa2bf6ce63f8372e4ff9430964136e2c84ff260ace2e1abd24e4b58
Instruction Fuzzy Hash: 7F91C63221458092FB63EB22D5517EE6352E79A7C0F554026FB4E476FAEE78CC45C700

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140041AF4, Relevance: .2, Instructions: 224COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 07d19fbeddc980f2ad91f4009a231f794db3eb1cab4d65118ab249d6976a3df0
Instruction ID: 5322fe7bad52e7cfdfe3e67a61b331afcd5e07fac9a711bb0cae0bc700a72cc7
Opcode Fuzzy Hash: 07d19fbeddc980f2ad91f4009a231f794db3eb1cab4d65118ab249d6976a3df0
Instruction Fuzzy Hash: AA8194B6704A949AEA1A9B27C9003EC6B61F389BE4F564726EB7A077E1CF34D4518304

Uniqueness

Uniqueness Score: -1.00%

Function 000000014004B288, Relevance: .2, Instructions: 220COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5f581283dafb0b99734b6b0993c6ca6766a86a460a165cc5dd1edb8cd2d87267
Instruction ID: 3719507d48488bc16aa2aa168a2784d4254424dcfb7f1b5eb80ee1e00d89957a
Opcode Fuzzy Hash: 5f581283dafb0b99734b6b0993c6ca6766a86a460a165cc5dd1edb8cd2d87267
Instruction Fuzzy Hash: 69918F72204A9082E722DF16E95479EB761F788BD4F528121FB8D07BBADF78C585CB04

Uniqueness

Uniqueness Score: -1.00%

Function 000000014004CCD4, Relevance: .2, Instructions: 217COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c136084e57519f5ba6051a9e5d5fe21de6e48bf843f55d750dc4fefea0b19f14
Instruction ID: 685c2e001e06491338c6389faf311f46e5b9eae3bd43b3dc093b42521d51c0f9
Opcode Fuzzy Hash: c136084e57519f5ba6051a9e5d5fe21de6e48bf843f55d750dc4fefea0b19f14
Instruction Fuzzy Hash: 8F91BF72214A9092E762DF17E444B9EB761F788BC4F129132FB8907BA9DF79C485CB04

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140016BFC, Relevance: .2, Instructions: 215COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bf48383015078623439fa5654449482b9ae8cdf6a85c015b20a7503ed35b3aa1
Instruction ID: b13e1745205cdd666b056ab2711c81f6197c71d32dc096043af97acd8c512652
Opcode Fuzzy Hash: bf48383015078623439fa5654449482b9ae8cdf6a85c015b20a7503ed35b3aa1
Instruction Fuzzy Hash: C0A19332218AC491EB62EB26E8513DE6321E7D9784F854032B78D475FBEF79C94AC704

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140019054, Relevance: .2, Instructions: 213COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f3a9d4a65daa30cbe08c45737917d8bdcbc4ef0e326f2ac33a2ac2c9d9bffd5a
Instruction ID: 90130b8c0a8b3265959fcdbed33caf9a69e7398d3126d30cb65c95f0b58065db
Opcode Fuzzy Hash: f3a9d4a65daa30cbe08c45737917d8bdcbc4ef0e326f2ac33a2ac2c9d9bffd5a
Instruction Fuzzy Hash: F491007221458060EA62F726E4513DE6351FBD97C4F814032BB8E475FBEE79C64ACB04

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140014B68, Relevance: .2, Instructions: 213COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: FileFindFirst
String ID:
API String ID: 1974802433-0
Opcode ID: 75d10c7bf1904d2ba361b316ec32bbb28952c5ca85a13c8fdd4aaaf4d8c29f43
Instruction ID: f75e8eaf09b9b5a14f5ecdd22e7fb1644c627db0a8208faa295536d16b5e792e
Opcode Fuzzy Hash: 75d10c7bf1904d2ba361b316ec32bbb28952c5ca85a13c8fdd4aaaf4d8c29f43
Instruction Fuzzy Hash: A081E13220868451EFB2EE22E8953EE6350EBD97D0F414222BB4E4B6F7DE39C945C744

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140030DC0, Relevance: .2, Instructions: 210COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7913aef71b8ac21d7a4549d800e679684d2254b4be79c8ef95d8974b5b38f8ef
Instruction ID: a368fa9d8d4c82026e851e09c309caa3cca30390238fcfee25dc27d274b451cd
Opcode Fuzzy Hash: 7913aef71b8ac21d7a4549d800e679684d2254b4be79c8ef95d8974b5b38f8ef
Instruction Fuzzy Hash: 44917D7231458490EAA2FB22D4A53EE6351EBD9780F854432BB4E436F7DF38C54ACB05

Uniqueness

Uniqueness Score: -1.00%

Function 000000014001DBB8, Relevance: .2, Instructions: 208COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a7c16be5a34f6a0620693821499dc0aa1993f8c4ef68d4565ee38ebff9f9a802
Instruction ID: 42a0163b4bb8d65bfd0557bea0a1aa1e1866fed524a677b7b3dc3e12b98c5b02
Opcode Fuzzy Hash: a7c16be5a34f6a0620693821499dc0aa1993f8c4ef68d4565ee38ebff9f9a802
Instruction Fuzzy Hash: AB81727221498090EA63F626E8517EE7391FBD97C0F814432BB4D4B5FAEE79C54AC700

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140025FD4, Relevance: .2, Instructions: 207COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bcd065173f27ee99190f3779502f2b4aff466ffaaaf49c64b44645e8ed30f383
Instruction ID: 7acf7ae80e7117a10c46fd51c4f5b4039ecae92691744995e148274b6ff42c55
Opcode Fuzzy Hash: bcd065173f27ee99190f3779502f2b4aff466ffaaaf49c64b44645e8ed30f383
Instruction Fuzzy Hash: 8D81D43232498091EAA2EB62E8517EE6361F7C97C4F815132BB4D476F7DE78C949C704

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140051DE4, Relevance: .2, Instructions: 199COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ba914bfb1722fe8461c8d828070be8c7914c2a0c01ca75f447a6e67495e1c373
Instruction ID: 26c4d40a118159b55fd50ce8481bbdadfdae974e4aa23c8df4225c8ad12fb802
Opcode Fuzzy Hash: ba914bfb1722fe8461c8d828070be8c7914c2a0c01ca75f447a6e67495e1c373
Instruction Fuzzy Hash: 2771B232205A5051FA62EB23E8507EE6695AB8DBD0F454131BF49877F7EF36C84ACB01

Uniqueness

Uniqueness Score: -1.00%

Function 000000014004759C, Relevance: .2, Instructions: 197COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 84195636787ceb255cb5a6e54dd78642cd214fcf737d848f80a41fe932eefe07
Instruction ID: a8e7c2163ff7f89035dd19893dadf242702611a7cc072c5100bec8aa4adf0413
Opcode Fuzzy Hash: 84195636787ceb255cb5a6e54dd78642cd214fcf737d848f80a41fe932eefe07
Instruction Fuzzy Hash: 1D81F4722047808DFB629F36A454FE92B91A7497E8F464724FB6D0BAE5CB76C4488348

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140053094, Relevance: .2, Instructions: 196COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2a61ff70b1735897a6e65cad553fa3946b8d5f12fa7b887850c1292a82f5269a
Instruction ID: 949d991729a3740058087c8285a0a3fafd8ee858ccedd776573aeaaa21726734
Opcode Fuzzy Hash: 2a61ff70b1735897a6e65cad553fa3946b8d5f12fa7b887850c1292a82f5269a
Instruction Fuzzy Hash: 4871F33231464041FB66FA3398517EE2281BB9DBD4F844631BF5A4B6F7EE36C60A8704

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140032648, Relevance: .2, Instructions: 192COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: DelayExecution
String ID:
API String ID: 1249177460-0
Opcode ID: 3b1a29725f6ba6fab69307240f73e9572b61ec6dc7fbcf3fe13a67a34790ae34
Instruction ID: 7a6f5970798cd0a6199914ad11449669907be93ed244566221034dc2aed4c959
Opcode Fuzzy Hash: 3b1a29725f6ba6fab69307240f73e9572b61ec6dc7fbcf3fe13a67a34790ae34
Instruction Fuzzy Hash: 3F819D7221864092EB63FB26E4527EE6351EB887D0F854132BB4E476F7EE78C54AC704

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140006E34, Relevance: .2, Instructions: 191COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 34e1924efc29ea4908f7605881d2dbb6d7480d5efb944a4baa1b5d71ca5d0104
Instruction ID: 0e1d548a6fdd886ac907b9be1ddd075fe8d20a4164d9a87482d9848ddaf2a928
Opcode Fuzzy Hash: 34e1924efc29ea4908f7605881d2dbb6d7480d5efb944a4baa1b5d71ca5d0104
Instruction Fuzzy Hash: 7671A1B270468191FB22EF27F6507EE6A92B789BD4F515131FF4A276F2DA38C8458700

Uniqueness

Uniqueness Score: -1.00%

Function 000000014006B428, Relevance: .2, Instructions: 186COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 153537a5343418c18e6a8dd97a8f01c241509d2c9d34234fefe811c8f3d7c81c
Instruction ID: d1dc5265b1a6542e57f52560333962e3aa7dbb9f05792d5c9a4d49b9bd892aa8
Opcode Fuzzy Hash: 153537a5343418c18e6a8dd97a8f01c241509d2c9d34234fefe811c8f3d7c81c
Instruction Fuzzy Hash: B171B1B65681204BE31F8E75991976E33A1F319B8FB91A510FE4BC7294C638DE60D720

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140006B88, Relevance: .2, Instructions: 183COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: da057ff235ba4b5a06e0042cd6fcddfc38a59c86bdd81988262893d13d9fece4
Instruction ID: 9303d44b0f888b55fd914570b1496e4313da22429fde8887523cf7199abe0bce
Opcode Fuzzy Hash: da057ff235ba4b5a06e0042cd6fcddfc38a59c86bdd81988262893d13d9fece4
Instruction Fuzzy Hash: DE618FB270428455FB66EE27B6547FE2692B389BD4F145022FF8A2B6F1DE38C4428704

Uniqueness

Uniqueness Score: -1.00%

Function 00000001400380D0, Relevance: .2, Instructions: 182COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 62a9eac952884d0a3107ba9385c435aa66b0e591d1459619511318ca371b36fb
Instruction ID: 7d32502cbe720c9530575118cdd111e6cd88d533b31e8540eabc0099ba41f30e
Opcode Fuzzy Hash: 62a9eac952884d0a3107ba9385c435aa66b0e591d1459619511318ca371b36fb
Instruction Fuzzy Hash: E4717D7220478491FAA3E726E8917EF6391FBC9780F854022BF4E476E6DE78C549C704

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140052D60, Relevance: .2, Instructions: 174COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ec691f123b7542507130d76308b1cd466871ad67ca86c5feab269c0745fded00
Instruction ID: 450d9658e18c72a24320ef39066f28bd54ccd01b7f40a6cc1dbddf0ed531c53a
Opcode Fuzzy Hash: ec691f123b7542507130d76308b1cd466871ad67ca86c5feab269c0745fded00
Instruction Fuzzy Hash: CE51A23232424040FA56F633A4517EE5262AFDEBE4F4942317F5A47AFBEE36C5068704

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140001B74, Relevance: .2, Instructions: 173COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: FileFindFirst
String ID:
API String ID: 1974802433-0
Opcode ID: 463aeaad61699cd5be01587d5a2496ec243ad9e719360f80b9b7edd9465feb73
Instruction ID: d50d502c5b6950ae0461b6150da2bcf565a72d99d6952b51ab4612b2f255be3d
Opcode Fuzzy Hash: 463aeaad61699cd5be01587d5a2496ec243ad9e719360f80b9b7edd9465feb73
Instruction Fuzzy Hash: 5561CD763146C095FA62EE2AE4507EE2351EB8ABD4F454222BF4D4B9F7EE38C545CB00

Uniqueness

Uniqueness Score: -1.00%

Function 000000014001FD44, Relevance: .2, Instructions: 163COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: FileFindFirst
String ID:
API String ID: 1974802433-0
Opcode ID: 7dcaa7dca82f4c7f54b35c8ce826c99b023df26e74fdcc984b9871b30d2707fe
Instruction ID: 75acd8829386b8b0ac0503c424414e50cb0ba8c5c90cb3cbb265ebcaafce4b08
Opcode Fuzzy Hash: 7dcaa7dca82f4c7f54b35c8ce826c99b023df26e74fdcc984b9871b30d2707fe
Instruction Fuzzy Hash: 10610F3230468091EA72EA22E4993FE6351FB8A7D4F454235BB5D0B6F7DE79C84AC700

Uniqueness

Uniqueness Score: -1.00%

Function 000000014004F4C8, Relevance: .2, Instructions: 160COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bdf000f3f7188701bd175c1ab86143cdc6e62cf757c15683e73a3b05c78a9dbc
Instruction ID: 4c445678070d573d3ffe1f8fd41cdd125d044eec911f27e9c9b2ec0ee2ab1b10
Opcode Fuzzy Hash: bdf000f3f7188701bd175c1ab86143cdc6e62cf757c15683e73a3b05c78a9dbc
Instruction Fuzzy Hash: 93519C3231864091FA62EA26E8917FA5351EBDDBC4F464031BB4E4B5F7EE38C945C708

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140024718, Relevance: .2, Instructions: 155COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 688c7f89327c9c691013af710b6af6f2dc0e60627eb5af531dd4333ff77a0454
Instruction ID: 08b028d38f2970c18d3941a06827fd8d902d0db97e7e9764b0950f2e26ae78e0
Opcode Fuzzy Hash: 688c7f89327c9c691013af710b6af6f2dc0e60627eb5af531dd4333ff77a0454
Instruction Fuzzy Hash: FA51B373700780A6F75BDB3A99553ED7791F3C9B80F09803AAB0A036A2DF349565C344

Uniqueness

Uniqueness Score: -1.00%

Function 00000001400356F4, Relevance: .2, Instructions: 153COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f0799f8035c694d85439dababa8767130ac1b060f45cbef4f27ada2f64bf291e
Instruction ID: 3e6008192b08b4dc09db711a0915997e581a547a489de3b56ce43fc4cd696c11
Opcode Fuzzy Hash: f0799f8035c694d85439dababa8767130ac1b060f45cbef4f27ada2f64bf291e
Instruction Fuzzy Hash: 13511F722246C091EA62F726E8517EE6351EBD97C0F859032BB4D47AF7EE38C549CB04

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140018DE8, Relevance: .2, Instructions: 151COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b5241b9ad79ee244b25c092893b689395c3f5247976eb1051537332b0f277feb
Instruction ID: af14db1f92581e26ac38af4f5c9fbbc26fdd1c4040d517091160ba046d99126a
Opcode Fuzzy Hash: b5241b9ad79ee244b25c092893b689395c3f5247976eb1051537332b0f277feb
Instruction Fuzzy Hash: 0751FC7232858051EA66F632D4513EEA751EBD97C1F814432BB4E476FBEE38C64ACB04

Uniqueness

Uniqueness Score: -1.00%

Function 000000014004F708, Relevance: .1, Instructions: 149COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: FileFindFirst
String ID:
API String ID: 1974802433-0
Opcode ID: eabab95ca488f1205fed220a1f2511db3b9657e8eab3f0f3ef8a4cee80011f85
Instruction ID: 198caa2341a95bea27265698d566bcab50ef7c1f64eca98a30c9385584aa5f13
Opcode Fuzzy Hash: eabab95ca488f1205fed220a1f2511db3b9657e8eab3f0f3ef8a4cee80011f85
Instruction Fuzzy Hash: E951D33220458051FAB2EA22E4553FA2351EBDA3C8F464235BF8E4B5F7DE39C946D704

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140035268, Relevance: .1, Instructions: 146COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: Close
String ID:
API String ID: 3535843008-0
Opcode ID: a44add96779b995e2eb0f75773b41d7008c8f6dc51a66d87ff26ce7cdd18b502
Instruction ID: 3eb52e73a32a3855d1951ff3b450e29d53ef01050f9ca171b19d4841cb5f2f7a
Opcode Fuzzy Hash: a44add96779b995e2eb0f75773b41d7008c8f6dc51a66d87ff26ce7cdd18b502
Instruction Fuzzy Hash: 1861E2722086C091F7A2EB26E4917DE7791F7C9784F814026BB8D07AE6DF79C549CB04

Uniqueness

Uniqueness Score: -1.00%

Function 00000001400215FC, Relevance: .1, Instructions: 146COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: Close
String ID:
API String ID: 3535843008-0
Opcode ID: 1ccabd48fe54e09c22987d006764997337b1d2e6856ff9fdbc81a3e91961c1b1
Instruction ID: f337c8dd6029e041a48329aefd06710d2d64e9ddbab3d94a7437e77041eafbf0
Opcode Fuzzy Hash: 1ccabd48fe54e09c22987d006764997337b1d2e6856ff9fdbc81a3e91961c1b1
Instruction Fuzzy Hash: 605183722245D091EA62EB26E4517EE6361FBD97C0F825022BB4E479E7DE38C949CB04

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140026A24, Relevance: .1, Instructions: 142COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b9ff6c94233a3290197520457a41f485d7b3ea2bcc658af81785093760b9d261
Instruction ID: a9c9ae6313f60de290384c2a0026f40a1e6e70301aec51650f1626b88888666d
Opcode Fuzzy Hash: b9ff6c94233a3290197520457a41f485d7b3ea2bcc658af81785093760b9d261
Instruction Fuzzy Hash: 4651443721929085EB27EF3AC0547DE2760E78E3C4F851025FB8A57BA3DA38C546CB05

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140068928, Relevance: .1, Instructions: 139COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3c177517244b934963845247481af7694056c56fe069a37809a97af90c50bac7
Instruction ID: f03825c870c7897c15dd0659bd33f2866f4c8df2145a493c11cc7e2212e8a87f
Opcode Fuzzy Hash: 3c177517244b934963845247481af7694056c56fe069a37809a97af90c50bac7
Instruction Fuzzy Hash: F351B2735242548BF73ACF16D848BAD3AA6E308791F265B25FF5A476E1D734C880CB41

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140032214, Relevance: .1, Instructions: 135COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1dc7720e5aa7ae08a88ebdf659d5e35100d059536340daadff2200fcf4b25bff
Instruction ID: 97dcdf415850c04c601ef4d8881f7bd9504b67c2dc37d1aa1e8fa488e6a96362
Opcode Fuzzy Hash: 1dc7720e5aa7ae08a88ebdf659d5e35100d059536340daadff2200fcf4b25bff
Instruction Fuzzy Hash: 4641EE3331024066EB13EB27991ABEF6351BB99BC4F954421BF0A5B6B2EE38C542C704

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140046264, Relevance: .1, Instructions: 128COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d168cf2973793bcb110853d077d7ae3e60aaa90b8eae0d5f2a53e04c6bbb512b
Instruction ID: a1f04e5562d603e187753cea740b756eab9e3e8f033bece5f16d7fa62bbf4908
Opcode Fuzzy Hash: d168cf2973793bcb110853d077d7ae3e60aaa90b8eae0d5f2a53e04c6bbb512b
Instruction Fuzzy Hash: E9413673A141E446F67B8D3799003ED5241934D7D6E8B4230FF27076E2EA74DE818A0B

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140044584, Relevance: .1, Instructions: 126COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: FileFindInformationNextToken
String ID:
API String ID: 176754387-0
Opcode ID: 32d4ba2a5917606a7356e8ae31d8962f2cf6583eb955297d21cffeb86cd9aeeb
Instruction ID: 9f07d43f2bd18b8c0010053b0f47ab6d30f8f422700b47ca7dffd7d84ffb5a49
Opcode Fuzzy Hash: 32d4ba2a5917606a7356e8ae31d8962f2cf6583eb955297d21cffeb86cd9aeeb
Instruction Fuzzy Hash: 5451833220858051EB62EA26E4553EE6361EB9A7C4F964232BB4D079FADF3CC54AC744

Uniqueness

Uniqueness Score: -1.00%

Function 000000014002AB7A, Relevance: .1, Instructions: 125COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 340fb91b42600fdb10c93fe8c89b7fd90e58f5e93d1a55769911497d890854da
Instruction ID: 143a0a160b94ef87670d09ddd976b80085c7f4634abf2ccc5a4579e5d4583ff0
Opcode Fuzzy Hash: 340fb91b42600fdb10c93fe8c89b7fd90e58f5e93d1a55769911497d890854da
Instruction Fuzzy Hash: 6951D77231458482EB62EB26D5517EE6352FBDA3C0F515032BB4E47AFADE38C949C700

Uniqueness

Uniqueness Score: -1.00%

Function 000000014002AB7F, Relevance: .1, Instructions: 125COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a939c99dff6ca6a35e942251211cae13007293a80dc5880d8450e8cfff855433
Instruction ID: 8a081f3fbd87f0e93475713d3af930fef2e280dcc2147cd541aaab14f4a83651
Opcode Fuzzy Hash: a939c99dff6ca6a35e942251211cae13007293a80dc5880d8450e8cfff855433
Instruction Fuzzy Hash: 7351D97231458482E762EB26D5517EE5352FBDA3C0F515031BB4E47AFADE38C949C700

Uniqueness

Uniqueness Score: -1.00%

Function 000000014002AB84, Relevance: .1, Instructions: 125COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 46f77919551d660cbc69cfdaf5169a8e72632cd5b5c14de6f40cde48fa84d780
Instruction ID: e970ee9b9311b66497e28943d4ac05bbd75f9dfab10fae3abb4a733bd6dacf89
Opcode Fuzzy Hash: 46f77919551d660cbc69cfdaf5169a8e72632cd5b5c14de6f40cde48fa84d780
Instruction Fuzzy Hash: B151D77231458482EB62EB26D5517EE6352FBDA3C0F515032BB4E47AFADE38C949C700

Uniqueness

Uniqueness Score: -1.00%

Function 000000014002AB89, Relevance: .1, Instructions: 125COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cce68110ede7272b9d962cdc4f00e23768f58a340f91b321724bf89b47a7f187
Instruction ID: 425f8b827db5a98ca1d212d2169699493a823b0fff3d9b1172a4de758f02bfbd
Opcode Fuzzy Hash: cce68110ede7272b9d962cdc4f00e23768f58a340f91b321724bf89b47a7f187
Instruction Fuzzy Hash: A751D77231458482EB62EB26D5517EE6352FBDA3C0F515032BB4E47AFADE38C949C700

Uniqueness

Uniqueness Score: -1.00%

Function 000000014002AB8E, Relevance: .1, Instructions: 125COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a07053686d7fd3aac746f16f5d21cb6d9054fe0c2fc95e67eb22170273725430
Instruction ID: 29032a6bc9e14c885bb641d1670f685e298fa1e735bb3a79d3164f234e4fe301
Opcode Fuzzy Hash: a07053686d7fd3aac746f16f5d21cb6d9054fe0c2fc95e67eb22170273725430
Instruction Fuzzy Hash: FF51D77231458482EB62EB26D5517EE6352FBDA3C0F515032BB4E47AFADE38C949C700

Uniqueness

Uniqueness Score: -1.00%

Function 000000014002AB93, Relevance: .1, Instructions: 125COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2c42eafe69df22cf6c6be8c749daa7e3e7be5d241f6def26d95c0d2ba9a49366
Instruction ID: bd56e2702dfe8df73c092647a9b599ac84cdbed630297b30843a147f9c36b8ce
Opcode Fuzzy Hash: 2c42eafe69df22cf6c6be8c749daa7e3e7be5d241f6def26d95c0d2ba9a49366
Instruction Fuzzy Hash: 9551D77231458482EB62EB26D5517EE6352FBDA3C0F515032BB4E47AFADE38C949C700

Uniqueness

Uniqueness Score: -1.00%

Function 000000014002AB98, Relevance: .1, Instructions: 125COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4f1838639043f119cd44f75da30c710f366cb6a32cde17ae8d20e081a1679a4e
Instruction ID: dc67bd505ec4cffd83a7e6f580c77948f19b4fa0b0d15da92b556df9b9615608
Opcode Fuzzy Hash: 4f1838639043f119cd44f75da30c710f366cb6a32cde17ae8d20e081a1679a4e
Instruction Fuzzy Hash: 3851D77231458482EB62EB26D5517EE6352FBDA3C0F515032BB4E47AFADE38C949C700

Uniqueness

Uniqueness Score: -1.00%

Function 000000014002AB9D, Relevance: .1, Instructions: 125COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dff349ae071f4b1576a2a05002c77336985181e504b0e436b278d1f23b2b7884
Instruction ID: 4a259fd6c7d332a945260aa488340a7c6b73232464ec90235efb4461374f366a
Opcode Fuzzy Hash: dff349ae071f4b1576a2a05002c77336985181e504b0e436b278d1f23b2b7884
Instruction Fuzzy Hash: 1451D77231458482EB62EB26D5517EE6352FBDA3C0F519032BB4E47AFADE38C949C700

Uniqueness

Uniqueness Score: -1.00%

Function 000000014002ABA2, Relevance: .1, Instructions: 125COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8655ef064b727df6d3483d93327e8601673213c978961d73250b542c2bd06cdf
Instruction ID: ebf1c4f49a204f1cbeb98ae3c8a93ece1bb0fafb9feb69452c2789754ae34731
Opcode Fuzzy Hash: 8655ef064b727df6d3483d93327e8601673213c978961d73250b542c2bd06cdf
Instruction Fuzzy Hash: 0751D77231458482EB62EB26D5517EE6352FBDA3C0F515032BB4E47AFADE38C949C700

Uniqueness

Uniqueness Score: -1.00%

Function 000000014002ABA7, Relevance: .1, Instructions: 125COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8784ab835c675b4d52eca0d7be2c13c618b03c2aeceddd17b902690c1f4de842
Instruction ID: 03f15185f23b23a734dbaafc8cfb2b1697e6598f703da8bc8b5b34a77580e0f8
Opcode Fuzzy Hash: 8784ab835c675b4d52eca0d7be2c13c618b03c2aeceddd17b902690c1f4de842
Instruction Fuzzy Hash: AE51D77231458482EB62EB26D5517EE6352FBDA3C0F515032BB4E47AFADE38C949C700

Uniqueness

Uniqueness Score: -1.00%

Function 000000014005343C, Relevance: .1, Instructions: 124COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a2ea3436d03751496e77ce9bd5117939811b28904932c1fccd0b617f358895e8
Instruction ID: 7e347492f39847182a2b500db4f79634476029136cca2c3785cbc21c18c38b40
Opcode Fuzzy Hash: a2ea3436d03751496e77ce9bd5117939811b28904932c1fccd0b617f358895e8
Instruction Fuzzy Hash: 9441DF32214A4491FBABDA2799117EA2A91F7C97D4F859121FB4B073F2EB32C861C300

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140026C30, Relevance: .1, Instructions: 120COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 28d64d73645ea6a03bce64af8220a40d6d724a1954fd1769bbf00cb0463ed6e7
Instruction ID: 2af6f1c9e92d73fd308a379bef39af4e96c6a9023f3a98445739356550a7e9c7
Opcode Fuzzy Hash: 28d64d73645ea6a03bce64af8220a40d6d724a1954fd1769bbf00cb0463ed6e7
Instruction Fuzzy Hash: 875149766017D085E742EF2AD859BDD3BA6F79D748F9A802AAB0E43262DF31C549C304

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140053644, Relevance: .1, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cb2ea06220dc76028948e9f6e0ae162ff853a9e89af2c3e8ab71d00c7f94d605
Instruction ID: 3ba0b29ec795d38afbb48cfb99f4fb2344dff9fe09c7df4aec90b71c361543a5
Opcode Fuzzy Hash: cb2ea06220dc76028948e9f6e0ae162ff853a9e89af2c3e8ab71d00c7f94d605
Instruction Fuzzy Hash: 17416D7231864051E616FA33E8527DEA351BBD9BD0F824032BF4A47AB7EE39C546CB04

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140050DA8, Relevance: .1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2bd4a4ae4039013f202ade2474416138ef04a818b16ced90649bf8042ebd644f
Instruction ID: cb64edaac42ec8557eb0a3d6d85671ae8d5bcff6e28e0bdacdf9be62f7ee0853
Opcode Fuzzy Hash: 2bd4a4ae4039013f202ade2474416138ef04a818b16ced90649bf8042ebd644f
Instruction Fuzzy Hash: A241C27231454040FA66FA2BE8523EE5262EBD97D0F918431BB4F4BAFAED39C506C700

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140050BF4, Relevance: .1, Instructions: 114COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: eb9013f13b37e6d579af0bd50c6758762535d06bf60ca84ef7acd169c56bd709
Instruction ID: 941524e861ce51f6328a9b2c59bb9bdcf64462bf13cb282e872174707d41dfb1
Opcode Fuzzy Hash: eb9013f13b37e6d579af0bd50c6758762535d06bf60ca84ef7acd169c56bd709
Instruction Fuzzy Hash: DA418E7232448051EAA2FB2BD4617EE5662FBCA7C0F854122BB4F476FADD39C545CB04

Uniqueness

Uniqueness Score: -1.00%

Function 000000014001CAC8, Relevance: .1, Instructions: 108COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 282e042d029d0714da2c61913dcadc05b565025010ee74695248ac6a09a782f9
Instruction ID: 0a014d50f813c8ea1b85f766fe6b2b30482370fe1ba7d80fb1cbcbe2f5a52d6b
Opcode Fuzzy Hash: 282e042d029d0714da2c61913dcadc05b565025010ee74695248ac6a09a782f9
Instruction Fuzzy Hash: 6631AE3632065051FA53EB27A81ABDF2255BBCABC8F455421BF0E4B2B3EE36C546C304

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140024940, Relevance: .1, Instructions: 106COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 76ac7770237754c879823d738c5c7df96058171ce9c6fe1874b4a266795b4d94
Instruction ID: 560b60485f3885514a8b944888e17dcf678349c50ba9748416b9f5e684109964
Opcode Fuzzy Hash: 76ac7770237754c879823d738c5c7df96058171ce9c6fe1874b4a266795b4d94
Instruction Fuzzy Hash: 3B5167736027C089E762DF3AC8943DD3BA2F399748F99802AA74D4766ADF31C259C744

Uniqueness

Uniqueness Score: -1.00%

Function 000000014001CD24, Relevance: .1, Instructions: 106COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e338a5ed06dce3e110e7f6a5a8fac41192614efa2789d809829d0447c1d29b9a
Instruction ID: 2227912e94398942fc4ec4e906928f8a2e101598a5de672bd5b0a8326d344fcc
Opcode Fuzzy Hash: e338a5ed06dce3e110e7f6a5a8fac41192614efa2789d809829d0447c1d29b9a
Instruction Fuzzy Hash: 0E31833232069050F657EB27A925BEF2752BBC97C8F555021BF0A176B7EE36C146C344

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140005918, Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2058832922cf76d17ec304d2a11e9d83bf698163b794ed7b98266a9db9f2da5f
Instruction ID: 7ad2512ab1d92147d7b1f5df1382b4771a69ff2b0e55fa04a2fd80408f6768bf
Opcode Fuzzy Hash: 2058832922cf76d17ec304d2a11e9d83bf698163b794ed7b98266a9db9f2da5f
Instruction Fuzzy Hash: 68310836710680A6E79AEB3ADA513DD73A2F7D9340F498032A31E435A6DF31E57AC304

Uniqueness

Uniqueness Score: -1.00%

Function 0000000140004E68, Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.766414308.0000000140001000.00000020.00020000.sdmp, Offset: 0000000140000000, based on PE: true

Associated: 00000000.00000002.766375294.0000000140000000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767245807.000000014006E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767347181.000000014007D000.00000004.00020000.sdmp Download File
Associated: 00000000.00000002.767404544.000000014007E000.00000002.00020000.sdmp Download File
Associated: 00000000.00000002.767433728.0000000140083000.00000002.00020000.sdmp Download File

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d051917b15e5768cf15bdf79bda9ec86629f8c9852e1d184f2c27e00891fe61f
Instruction ID: ae94ff5fe79290a2be1c67a1a164642d05d9ed7b0d764c683e01a8c5fcd7cc45
Opcode Fuzzy Hash: d051917b15e5768cf15bdf79bda9ec86629f8c9852e1d184f2c27e00891fe61f
Instruction Fuzzy Hash: 4231B636711680A2F79EE73ACA553DD7252F7D9380F49C132A31A431A7DF31A5798304

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: rundll32.exe PID: 2716 Parent PID: 4480 rundll32.exeCOMMON

Executed Functions

Function 000001ED8CA72251, Relevance: 6.2, APIs: 4, Instructions: 230memoryCOMMON

Download Yara Rule

APIs

VirtualProtect.KERNELBASE ref: 000001ED8CA723A9
VirtualProtect.KERNELBASE ref: 000001ED8CA7246A
RtlAvlRemoveNode.NTDLL ref: 000001ED8CA725AC
VirtualProtect.KERNELBASE ref: 000001ED8CA72672

Memory Dump Source

Source File: 00000003.00000002.774892922.000001ED8CA70000.00000040.00000001.sdmp, Offset: 000001ED8CA70000, based on PE: true

Similarity

API ID: ProtectVirtual$NodeRemove
String ID:
API String ID: 3879549435-0
Opcode ID: 0acfb9d5d91a34fd4850f9c0972c2330b64bc38d9314faaca5f27afd7144933b
Instruction ID: da35a2076eff3f9dca67cd5b760f354435085e8e8f96a6fe35b47203d15862a7
Opcode Fuzzy Hash: 0acfb9d5d91a34fd4850f9c0972c2330b64bc38d9314faaca5f27afd7144933b
Instruction Fuzzy Hash: 79B132B6618BC486D7708B1AF440BDEB7A1F789B84F108126EEC957B59DB7DC8418F40

Uniqueness

Uniqueness Score: -1.00%

Function 000001ED8CA72057, Relevance: 1.3, APIs: 1, Instructions: 67memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(?,?,?,?,?,?,?,?,?,000001ED8CA7298F), ref: 000001ED8CA720A4

Memory Dump Source

Source File: 00000003.00000002.774892922.000001ED8CA70000.00000040.00000001.sdmp, Offset: 000001ED8CA70000, based on PE: true

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: ea04a22fb0b80051549ca917af940619b3718de0f0d551addbdd129c1eaed934
Instruction ID: 39943d0437f5bfe3c080290f8fec0337521c0dfdfa8ed544d9d60c2e54e7359d
Opcode Fuzzy Hash: ea04a22fb0b80051549ca917af940619b3718de0f0d551addbdd129c1eaed934
Instruction Fuzzy Hash: EF3149B2614A8086D790DF1AF05479A7BA1F389BC8F204026EF8D87B18DB3AC4428B00

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Analysis Process: rundll32.exe PID: 4552 Parent PID: 4020 rundll32.exeCOMMON

Executed Functions

Function 000001C4D3542251, Relevance: 6.2, APIs: 4, Instructions: 230memoryCOMMON

Download Yara Rule

APIs

VirtualProtect.KERNELBASE ref: 000001C4D35423A9
VirtualProtect.KERNELBASE ref: 000001C4D354246A
RtlAvlRemoveNode.NTDLL ref: 000001C4D35425AC
VirtualProtect.KERNELBASE ref: 000001C4D3542672

Memory Dump Source

Source File: 00000004.00000002.775705482.000001C4D3540000.00000040.00000001.sdmp, Offset: 000001C4D3540000, based on PE: true

Similarity

API ID: ProtectVirtual$NodeRemove
String ID:
API String ID: 3879549435-0
Opcode ID: 0acfb9d5d91a34fd4850f9c0972c2330b64bc38d9314faaca5f27afd7144933b
Instruction ID: 48bc3d4c42a9864a6cc42bf9fdb3733b2e64ae5c6a642b115f8a8cf6e8be63f5
Opcode Fuzzy Hash: 0acfb9d5d91a34fd4850f9c0972c2330b64bc38d9314faaca5f27afd7144933b
Instruction Fuzzy Hash: DDB16376618BD486E730CB5AF450BEAB7A0F7D9B90F108026EE8957B58DB79C8418F40

Uniqueness

Uniqueness Score: -1.00%

Function 000001C4D3542057, Relevance: 1.3, APIs: 1, Instructions: 67memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(?,?,?,?,?,?,?,?,?,000001C4D354298F), ref: 000001C4D35420A4

Memory Dump Source

Source File: 00000004.00000002.775705482.000001C4D3540000.00000040.00000001.sdmp, Offset: 000001C4D3540000, based on PE: true

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: ea04a22fb0b80051549ca917af940619b3718de0f0d551addbdd129c1eaed934
Instruction ID: 41d3e97ff4b8aee13b307c600f030c81447e01b2de11cc68b50df35d5992a4e3
Opcode Fuzzy Hash: ea04a22fb0b80051549ca917af940619b3718de0f0d551addbdd129c1eaed934
Instruction Fuzzy Hash: 69314B72614A9086D790DF5AE45576A7BB1F389BD4F204026EF8E87B18DB3AC442CB00

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Analysis Process: rundll32.exe PID: 852 Parent PID: 4020 rundll32.exeCOMMON

Executed Functions

Function 000002B5219F2251, Relevance: 6.2, APIs: 4, Instructions: 230memoryCOMMON

Download Yara Rule

APIs

VirtualProtect.KERNELBASE ref: 000002B5219F23A9
VirtualProtect.KERNELBASE ref: 000002B5219F246A
RtlAvlRemoveNode.NTDLL ref: 000002B5219F25AC
VirtualProtect.KERNELBASE ref: 000002B5219F2672

Memory Dump Source

Source File: 00000006.00000002.772205956.000002B5219F0000.00000040.00000001.sdmp, Offset: 000002B5219F0000, based on PE: true

Similarity

API ID: ProtectVirtual$NodeRemove
String ID:
API String ID: 3879549435-0
Opcode ID: 0acfb9d5d91a34fd4850f9c0972c2330b64bc38d9314faaca5f27afd7144933b
Instruction ID: 29e7322f08a5d3bac5c7eda2d293c3524b1b4faf4c69fd2d1f966baea4aa6fcd
Opcode Fuzzy Hash: 0acfb9d5d91a34fd4850f9c0972c2330b64bc38d9314faaca5f27afd7144933b
Instruction Fuzzy Hash: 88B145B6619BD486D770CB1AE44179EB7A1F7C9B80F108026EE8957B58DB7DC8818F80

Uniqueness

Uniqueness Score: -1.00%

Function 000002B5219F2057, Relevance: 1.3, APIs: 1, Instructions: 67memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(?,?,?,?,?,?,?,?,?,000002B5219F298F), ref: 000002B5219F20A4

Memory Dump Source

Source File: 00000006.00000002.772205956.000002B5219F0000.00000040.00000001.sdmp, Offset: 000002B5219F0000, based on PE: true

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: ea04a22fb0b80051549ca917af940619b3718de0f0d551addbdd129c1eaed934
Instruction ID: 6261410f0c6f70033cac6562583ae34dab1c4ee78e53c752b6f6500d54b33758
Opcode Fuzzy Hash: ea04a22fb0b80051549ca917af940619b3718de0f0d551addbdd129c1eaed934
Instruction Fuzzy Hash: 4B3158B2615B9086D790DF1AE05575A7BA1F389BC4F204026EF8D87B18DF3AC482CF00

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Analysis Process: rundll32.exe PID: 4676 Parent PID: 4020 rundll32.exeCOMMON

Executed Functions

Function 000002C96D062251, Relevance: 6.2, APIs: 4, Instructions: 230memoryCOMMON

Download Yara Rule

APIs

VirtualProtect.KERNELBASE ref: 000002C96D0623A9
VirtualProtect.KERNELBASE ref: 000002C96D06246A
RtlAvlRemoveNode.NTDLL ref: 000002C96D0625AC
VirtualProtect.KERNELBASE ref: 000002C96D062672

Memory Dump Source

Source File: 00000009.00000002.774893552.000002C96D060000.00000040.00000001.sdmp, Offset: 000002C96D060000, based on PE: true

Similarity

API ID: ProtectVirtual$NodeRemove
String ID:
API String ID: 3879549435-0
Opcode ID: 0acfb9d5d91a34fd4850f9c0972c2330b64bc38d9314faaca5f27afd7144933b
Instruction ID: 8160ced6d775b09640111a5b057031e2eb4c4cc35d17b0835ec26eb5c5b9a0a2
Opcode Fuzzy Hash: 0acfb9d5d91a34fd4850f9c0972c2330b64bc38d9314faaca5f27afd7144933b
Instruction Fuzzy Hash: 25B14677618BC586E770CB1AE440B9EB7A5F7C9B84F108026EEC957B58DB79C8818F40

Uniqueness

Uniqueness Score: -1.00%

Function 000002C96D062057, Relevance: 1.3, APIs: 1, Instructions: 67memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(?,?,?,?,?,?,?,?,?,000002C96D06298F), ref: 000002C96D0620A4

Memory Dump Source

Source File: 00000009.00000002.774893552.000002C96D060000.00000040.00000001.sdmp, Offset: 000002C96D060000, based on PE: true

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: ea04a22fb0b80051549ca917af940619b3718de0f0d551addbdd129c1eaed934
Instruction ID: 7235388b1c8a7163490712bacd3688d43412d266053bd80996505cd0c94139c7
Opcode Fuzzy Hash: ea04a22fb0b80051549ca917af940619b3718de0f0d551addbdd129c1eaed934
Instruction Fuzzy Hash: 413147B2614A8086D790DF1AE05975E7BA1F389BC4F204026EF8D87B58DB3AC4428B00

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse rundll32.exe to proxy execution of malicious code. Using rundll32.exe, vice executing directly (i.e. Shared Modules ), may avoid triggering security tools that may not monitor execution of the rundll32.exe process because of allowlists or false positives from normal operations. Rundll32.exe is commonly associated with executing DLL payloads.
Tactics:	Defense Evasion
Data Sources:	DLL monitoring, Loaded DLLs, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata
Platforms:	macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Process command-line parameters, Process monitoring, Windows Registry
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to identify the primary user, currently logged in user, set of users that commonly uses a system, or whether a user is actively using the system. They may do this, for example, by retrieving account usernames or by using OS Credential Dumping . The information may be collected in a number of different ways using other Discovery techniques, because user and username details are prevalent throughout a system and include running process ownership, file/directory ownership, session information, and system logs. Adversaries may use the information from [System Owner/User Discovery](https://attack.mitre.org/techniques/T1033) during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Windows Analysis Report a4vEYL53cZ

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Overview

Sigma Overview

Jbx Signature Overview

AV Detection:

Compliance:

Spreading:

Networking:

System Summary:

Data Obfuscation:

Hooking and other Techniques for Hiding and Protection:

Malware Analysis System Evasion:

Anti Debugging:

HIPS / PFW / Operating System Protection Evasion:

Language, Device and Operating System Detection:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

Contacted IPs

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Exports

Version Infos

Possible Origin

Network Behavior

Network Port Distribution

UDP Packets

Code Manipulations

Statistics

CPU Usage

Memory Usage

High Level Behavior Distribution

back

Behavior

System Behavior

Analysis Process: loaddll64.exe PID: 4020 Parent PID: 5016

General

Analysis Process: cmd.exe PID: 4480 Parent PID: 4020