Static task
static1
Behavioral task
behavioral1
Sample
Narrator.exe
Resource
win10v2004-20231020-en
General
-
Target
Narrator.exe
-
Size
307KB
-
MD5
3c88e37d69cb7b846b27511d48ac3bb6
-
SHA1
7c94b7c6f278f595d63aa7e17864bc246efede7c
-
SHA256
481162069167d88462a925f8a2d7ac498f59612ba8709e2fec91206a85b8295c
-
SHA512
690334d5b29dfe7aac21c0b50c09ab492eb256e112e9bcc42de6c76895168b7a78735d2a6472c5201d0b8347141257a72c061cdda22f01e9da824992abf73dac
-
SSDEEP
6144:wWpXsX3EiHLkeIemfIQFgZKUVaLWFqQWJ:wYcHEiHL+gAuVaiF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Narrator.exe
Files
-
Narrator.exe.exe windows:10 windows x86
349758a6fee08052501ac8fb19250968
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
EventUnregister
EventRegister
EventSetInformation
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
OpenProcessToken
GetTokenInformation
GetSidSubAuthority
GetSidSubAuthorityCount
ConvertSidToStringSidW
ConvertStringSecurityDescriptorToSecurityDescriptorW
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
RegQueryValueExW
RegLoadMUIStringW
RegQueryValueW
TraceMessage
EventWriteTransfer
RegGetValueW
RegEnumKeyExW
RegNotifyChangeKeyValue
kernel32
K32EnumProcesses
DeleteFileW
GetFileAttributesW
DeleteProcThreadAttributeList
CreateProcessW
UpdateProcThreadAttribute
InitializeProcThreadAttributeList
ExpandEnvironmentStringsW
ResetEvent
SetThreadPriority
LeaveCriticalSection
EnterCriticalSection
GlobalFree
Sleep
SetLastError
GetUserDefaultUILanguage
GlobalAlloc
CreateThread
SetEvent
ProcessIdToSessionId
CreateEventW
IsProcessInJob
OpenJobObjectW
WaitForSingleObject
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
K32EnumProcessModules
MultiByteToWideChar
CompareStringW
HeapDestroy
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
OpenMutexW
CloseHandle
LoadLibraryExW
GetProcAddress
DeleteCriticalSection
RaiseException
InitializeCriticalSection
GetCurrentProcess
OpenProcess
RegisterApplicationRestart
LocalFree
SizeofResource
LockResource
LoadResource
FindResourceExW
GetModuleHandleW
QueryPerformanceCounter
GetTickCount64
K32GetModuleBaseNameW
GetTickCount
GetLastError
ActivateActCtx
CreateActCtxW
GetModuleFileNameW
GetCurrentActCtx
DeactivateActCtx
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
DecodePointer
EncodePointer
LoadLibraryExA
VirtualAlloc
VirtualFree
ReleaseActCtx
gdi32
GetTextExtentPoint32W
SetTextColor
SetBkColor
SelectObject
FillRgn
CreateFontW
CombineRgn
CreateSolidBrush
CreateRectRgn
DeleteObject
ExtTextOutW
user32
SetDlgItemTextW
MessageBoxW
SetFocus
DestroyWindow
CreateDialogParamW
LoadStringW
SetWindowLongW
ChangeWindowMessageFilterEx
GetWindowLongW
LoadIconW
GetForegroundWindow
FindWindowW
IsWindow
PostMessageW
IsIconic
ShowWindow
SetForegroundWindow
InitializeTouchInjection
RegisterPointerDeviceNotifications
PeekMessageW
UnhookWinEvent
GetWindowRgn
MonitorFromWindow
BeginPaint
InflateRect
DrawTextExW
EndPaint
RegisterHotKey
MsgWaitForMultipleObjects
GetMessageW
PostQuitMessage
TranslateMessage
DispatchMessageW
UnregisterHotKey
BlockInput
GetAsyncKeyState
SendInput
MapVirtualKeyExW
LoadImageW
SendMessageW
SystemParametersInfoW
GetWindowRect
SetWindowPos
UnregisterClassA
GetKeyboardLayout
MonitorFromPoint
GetMonitorInfoW
CopyRect
GetWindowThreadProcessId
DialogBoxParamW
GetDlgItem
EndDialog
SendDlgItemMessageW
GetFocus
GetDlgCtrlID
SetWindowTextW
GetParent
KillTimer
SetTimer
IsWindowVisible
IntersectRect
EqualRect
GetWindowTextW
DefWindowProcW
GetGUIThreadInfo
GetAncestor
CallWindowProcW
GetClassNameW
EnableWindow
GetComboBoxInfo
GetDC
ReleaseDC
GetKeyState
GetShellWindow
GetUserObjectInformationW
SetWinEventHook
SendNotifyMessageW
GetThreadDesktop
api-ms-win-crt-string-l1-1-0
memmove_s
wcsncmp
wcsspn
wcspbrk
wcscspn
api-ms-win-crt-runtime-l1-1-0
_initterm
_initterm_e
_c_exit
_register_thread_local_exe_atexit_callback
api-ms-win-crt-private-l1-1-0
_o__purecall
_o__register_onexit_function
_o__seh_filter_exe
_o__set_app_type
_o__set_fmode
_o__set_new_mode
_o__wcsicmp
_o__wcslwr_s
_o__wtoi
_o_calloc
_o_exit
_o_free
_o_malloc
_o_memcpy_s
_o_memset
_o_terminate
_o_wcscat_s
_o_wcscpy_s
_o_wcstok_s
_except_handler4_common
_o__ltow_s
_o__exit
_o__errno
_o__crt_atexit
_o__controlfp_s
_o__configure_wide_argv
_o__configthreadlocale
_o__cexit
_o__callnewh
_o___stdio_common_vswscanf
_o___stdio_common_vswprintf_s
_o___stdio_common_vswprintf
_o___p__commode
_CxxThrowException
_o__itow_s
_o__invalid_parameter_noinfo
_o__initialize_wide_environment
_o__initialize_onexit_table
_o__get_wide_winmain_command_line
wcschr
wcsstr
wcsrchr
__CxxFrameHandler3
memcpy
uiautomationcore
UiaRaiseAutomationEvent
winmm
PlaySoundW
ntdll
WinSqmAddToStream
NtQueryWnfStateData
WinSqmIsOptedIn
oleacc
AccNotifyTouchInteraction
AccSetRunningUtilityState
oleaut32
SafeArrayLock
SysFreeString
SysAllocStringLen
VariantInit
VariantClear
SysAllocString
SafeArrayGetLBound
VariantCopyInd
SafeArrayGetUBound
SafeArrayUnlock
SafeArrayDestroy
SafeArrayCreate
SafeArrayRedim
VarBstrCmp
SysAllocStringByteLen
SysStringByteLen
SafeArrayGetVartype
VarBstrCat
SysStringLen
SysReAllocStringLen
shlwapi
ord219
ord199
PathRemoveFileSpecW
PathFileExistsW
shell32
ShellExecuteW
dui70
??0AccessibleButton@DirectUI@@QAE@XZ
?KeyFocusedProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?OnInput@Button@DirectUI@@UAEXPAUInputEvent@2@@Z
?DefaultAction@Button@DirectUI@@UAEJXZ
?OnReceivedDialogFocus@Button@DirectUI@@UAE_NPAUIDialogElement@2@@Z
?Register@AccessibleButton@DirectUI@@SGJXZ
?OnPropertyChanged@AccessibleButton@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?SetWidth@Element@DirectUI@@QAEJH@Z
??0Combobox@DirectUI@@QAE@XZ
??1Combobox@DirectUI@@UAE@XZ
?GetContentSize@Combobox@DirectUI@@UAE?AUtagSIZE@@HHPAVSurface@2@@Z
?MessageCallback@HWNDHost@DirectUI@@UAEIPAUtagGMSG@@@Z
?OnHosted@Combobox@DirectUI@@UAEXPAVElement@2@@Z
?OnAdjustWindowSize@Combobox@DirectUI@@UAEHHHI@Z
?CreateHWND@Combobox@DirectUI@@UAEPAUHWND__@@PAU3@@Z
?GetClassInfoPtr@Combobox@DirectUI@@SGPAUIClassInfo@2@XZ
?Initialize@Combobox@DirectUI@@QAEJIPAVElement@2@PAK@Z
?Register@Combobox@DirectUI@@SGJXZ
?SyncRect@HWNDHost@DirectUI@@IAEXI_N@Z
?OnPropertyChanged@HWNDHost@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?FireEvent@Element@DirectUI@@QAEXPAUEvent@2@_N1@Z
?EnabledProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?OnNotify@HWNDHost@DirectUI@@UAE_NIIJPAJ@Z
?SelectionProp@Combobox@DirectUI@@SGPBUPropertyInfo@2@XZ
?OnInput@Combobox@DirectUI@@UAEXPAUInputEvent@2@@Z
?GetRoot@Element@DirectUI@@QAEPAV12@XZ
?CreateHWND@Edit@DirectUI@@MAEPAUHWND__@@PAU3@_N@Z
?EraseBkgnd@HWNDHost@DirectUI@@MAE_NPAUHDC__@@PAJ@Z
?CreateHWND@Edit@DirectUI@@MAEPAUHWND__@@PAU3@@Z
?SetWindowDirection@HWNDHost@DirectUI@@UAEXPAUHWND__@@@Z
?OnAdjustWindowSize@HWNDHost@DirectUI@@UAEHHHI@Z
?OnWindowStyleChanged@HWNDHost@DirectUI@@UAEXIPBUtagSTYLESTRUCT@@@Z
?OnCtrlThemeChanged@HWNDHost@DirectUI@@UAE_NIIJPAJ@Z
?OnSinkThemeChanged@HWNDHost@DirectUI@@UAE_NIIJPAJ@Z
?OnSysChar@HWNDHost@DirectUI@@UAE_NG@Z
?OnMessage@HWNDHost@DirectUI@@UAE_NIIJPAJ@Z
?GetHWND@HWNDHost@DirectUI@@UAEPAUHWND__@@XZ
?GetAccessibleImpl@HWNDHost@DirectUI@@UAEJPAPAUIAccessible@@@Z
?GetKeyFocused@HWNDHost@DirectUI@@UAE_NXZ
?OnUnHosted@HWNDHost@DirectUI@@MAEXPAVElement@2@@Z
?OnHosted@HWNDHost@DirectUI@@MAEXPAVElement@2@@Z
?MessageCallback@Edit@DirectUI@@UAEIPAUtagGMSG@@@Z
?SetKeyFocus@HWNDHost@DirectUI@@UAEXXZ
?GetContentSize@Edit@DirectUI@@UAE?AUtagSIZE@@HHPAVSurface@2@@Z
?Paint@HWNDHost@DirectUI@@UAEXPAUHDC__@@PBUtagRECT@@1PAU4@2@Z
?OnEvent@HWNDHost@DirectUI@@UAEXPAUEvent@2@@Z
?OnDestroy@HWNDHost@DirectUI@@UAEXXZ
?OnInput@Edit@DirectUI@@UAEXPAUInputEvent@2@@Z
?OnPropertyChanged@Edit@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?GetContentStringAsDisplayed@Edit@DirectUI@@UAEPBGPAPAVValue@2@@Z
?IsContentProtected@Edit@DirectUI@@UAE_NXZ
?GetClassInfoPtr@Edit@DirectUI@@SGPAUIClassInfo@2@XZ
?Initialize@Edit@DirectUI@@QAEJIPAVElement@2@PAK@Z
?Register@Edit@DirectUI@@SGJXZ
?OnNotify@Edit@DirectUI@@UAE_NIIJPAJ@Z
??1Edit@DirectUI@@UAE@XZ
??0Edit@DirectUI@@QAE@XZ
??1AutoLock@DirectUI@@QAE@XZ
??0ElementProvider@DirectUI@@QAE@XZ
?AssertPIZeroRef@ClassInfoBase@DirectUI@@UBEXXZ
?GetChildren@ClassInfoBase@DirectUI@@UBEHXZ
?RemoveChild@ClassInfoBase@DirectUI@@UAEXXZ
?AddChild@ClassInfoBase@DirectUI@@UAEXXZ
?IsGlobal@ClassInfoBase@DirectUI@@UBE_NXZ
?GetModule@ClassInfoBase@DirectUI@@UBEPAUHINSTANCE__@@XZ
?IsSubclassOf@ClassInfoBase@DirectUI@@UBE_NPAUIClassInfo@2@@Z
?IsValidProperty@ClassInfoBase@DirectUI@@UBE_NPBUPropertyInfo@2@@Z
?GetName@ClassInfoBase@DirectUI@@UBEPBGXZ
?GetGlobalIndex@ClassInfoBase@DirectUI@@UBEIXZ
?GetPICount@ClassInfoBase@DirectUI@@UBEIXZ
?GetByClassIndex@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z
?EnumPropertyInfo@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z
?Release@ClassInfoBase@DirectUI@@UAEHXZ
?AddRef@ClassInfoBase@DirectUI@@UAEXXZ
?AdviseEventRemoved@ElementProvider@DirectUI@@UAGJHPAUtagSAFEARRAY@@@Z
?AdviseEventAdded@ElementProvider@DirectUI@@UAGJHPAUtagSAFEARRAY@@@Z
?get_FragmentRoot@ElementProvider@DirectUI@@UAGJPAPAUIRawElementProviderFragmentRoot@@@Z
?SetFocus@ElementProvider@DirectUI@@UAGJXZ
?GetEmbeddedFragmentRoots@ElementProvider@DirectUI@@UAGJPAPAUtagSAFEARRAY@@@Z
?get_BoundingRectangle@ElementProvider@DirectUI@@UAGJPAUUiaRect@@@Z
?GetRuntimeId@ElementProvider@DirectUI@@UAGJPAPAUtagSAFEARRAY@@@Z
?Navigate@ElementProvider@DirectUI@@UAGJW4NavigateDirection@@PAPAUIRawElementProviderFragment@@@Z
?ShowContextMenu@ElementProvider@DirectUI@@UAGJXZ
?get_HostRawElementProvider@ElementProvider@DirectUI@@UAGJPAPAUIRawElementProviderSimple@@@Z
?GetPropertyValue@ElementProvider@DirectUI@@UAGJHPAUtagVARIANT@@@Z
?get_ProviderOptions@ElementProvider@DirectUI@@UAGJPAW4ProviderOptions@@@Z
?QueryInterface@ElementProvider@DirectUI@@UAGJABU_GUID@@PAPAX@Z
?TossElement@ElementProvider@DirectUI@@UAEXXZ
?GetAccessibleImpl@Element@DirectUI@@UAEJPAPAUIAccessible@@@Z
?RemoveTooltip@Element@DirectUI@@MAEXPAV12@@Z
?ActivateTooltip@Element@DirectUI@@MAEXPAV12@K@Z
?UpdateTooltip@Element@DirectUI@@MAEXPAV12@@Z
?OnEvent@Element@DirectUI@@UAEXPAUEvent@2@@Z
?OnDestroy@Element@DirectUI@@UAEXXZ
?OnInput@Element@DirectUI@@UAEXPAUInputEvent@2@@Z
?OnGroupChanged@Element@DirectUI@@UAEXH_N@Z
?OnPropertyChanged@Element@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
??1ClassInfoBase@DirectUI@@UAE@XZ
??0ClassInfoBase@DirectUI@@QAE@XZ
?GetClassInfoPtr@Element@DirectUI@@SGPAUIClassInfo@2@XZ
?Initialize@ClassInfoBase@DirectUI@@QAEJPAUHINSTANCE__@@PBG_NPBQBUPropertyInfo@2@I@Z
?CreatePatternProvider@Schema@DirectUI@@SGJW4Pattern@12@PAVElementProvider@2@PAPAUIUnknown@@@Z
?IsPatternSupported@ElementProxy@DirectUI@@IAEJW4Pattern@Schema@2@PA_N@Z
?Register@ClassInfoBase@DirectUI@@QAEJXZ
?ClassExist@ClassInfoBase@DirectUI@@SG_NPAPAUIClassInfo@2@PBQBUPropertyInfo@2@IPAU32@PAUHINSTANCE__@@PBG_N@Z
??1CritSecLock@DirectUI@@QAE@XZ
?GetFactoryLock@Element@DirectUI@@SGPAU_RTL_CRITICAL_SECTION@@XZ
?Register@Element@DirectUI@@SGJXZ
?AddRef@RefcountBase@DirectUI@@QAEJXZ
?Release@RefcountBase@DirectUI@@QAEJXZ
?AddRef@ElementProvider@DirectUI@@UAGKXZ
?TossPatternProvider@ElementProvider@DirectUI@@QAEXW4Pattern@Schema@2@@Z
?DoInvokeArgs@ElementProvider@DirectUI@@QAEJHP6GPAVProviderProxy@2@PAVElement@2@@ZPAD@Z
?GetElement@ElementProvider@DirectUI@@UAEPDVElement@2@XZ
?Release@ElementProvider@DirectUI@@UAGKXZ
?Init@ElementProvider@DirectUI@@MAEJPAVElement@2@PAVInvokeHelper@2@@Z
?DoInvoke@ElementProvider@DirectUI@@IAAJHZZ
?PatternFromPatternId@Schema@DirectUI@@SG?AW4Pattern@12@H@Z
?Init@ElementProxy@DirectUI@@MAEXPAVElement@2@@Z
?DoMethod@ElementProxy@DirectUI@@UAEJHPAD@Z
?GetProperty@ElementProxy@DirectUI@@IAEJPAUtagVARIANT@@H@Z
?SetAbsorbsShortcut@Element@DirectUI@@QAEJ_N@Z
?SetActive@Element@DirectUI@@QAEJH@Z
?Initialize@Element@DirectUI@@QAEJIPAV12@PAK@Z
??0Element@DirectUI@@QAE@XZ
?SelectionItemPattern@Schema@DirectUI@@2HA
?InvokePattern@Schema@DirectUI@@2HA
??1ElementProvider@DirectUI@@UAE@XZ
??1RefcountBase@DirectUI@@UAE@XZ
??0RefcountBase@DirectUI@@QAE@XZ
?Create@NativeHWNDHost@DirectUI@@SGJPBG0PAUHWND__@@PAUHICON__@@HHHHHHPAUHINSTANCE__@@IPAPAV12@@Z
??1Element@DirectUI@@UAE@XZ
?DestroyMsg@NativeHWNDHost@DirectUI@@SGIXZ
?GetInvokeHelper@InvokeManager@DirectUI@@SGJPAPAVInvokeHelper@2@@Z
?SetAccItemStatus@Element@DirectUI@@QAEJPBG@Z
?SetContentAlign@Element@DirectUI@@QAEJH@Z
?SetClass@Element@DirectUI@@QAEJPBG@Z
?Create@Element@DirectUI@@SGJIPAV12@PAKPAPAV12@@Z
?SetAccName@Element@DirectUI@@QAEJPBG@Z
?GetContentString@Element@DirectUI@@QAEPBGPAPAVValue@2@@Z
?SetID@Element@DirectUI@@QAEJPBG@Z
?CreateInt@Value@DirectUI@@SGPAV12@HW4DynamicScaleValue@@@Z
?LayoutProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?Create@TableLayout@DirectUI@@SGJHPAHPAPAVValue@2@@Z
?DestroyAll@Element@DirectUI@@QAEJ_N@Z
?StartDefer@Element@DirectUI@@QAEXPAK@Z
?GetChildren@Element@DirectUI@@QAEPAV?$DynamicArray@PAVElement@DirectUI@@$0A@@2@PAPAVValue@2@@Z
?GetClass@Element@DirectUI@@QAEPBGPAPAVValue@2@@Z
?SetValue@Element@DirectUI@@QAEJP6GPBUPropertyInfo@2@XZHPAVValue@2@@Z
?GetValue@Element@DirectUI@@QAEPAVValue@2@P6GPBUPropertyInfo@2@XZHPAUUpdateCache@2@@Z
?Destroy@Element@DirectUI@@QAEJ_N@Z
?GetClassInfoPtr@CCPushButton@DirectUI@@SGPAUIClassInfo@2@XZ
?GetClassInfoPtr@AccessibleButton@DirectUI@@SGPAUIClassInfo@2@XZ
?SetLayoutPos@Element@DirectUI@@QAEJH@Z
?GetSelection@Combobox@DirectUI@@QAEHXZ
?Click@Button@DirectUI@@SG?AVUID@@XZ
?SelectionChange@Combobox@DirectUI@@SG?AVUID@@XZ
?UpdateSheets@DUIXmlParser@DirectUI@@QAEJPAVElement@2@@Z
?ThemeChange@HWNDElement@DirectUI@@SG?AVUID@@XZ
?GetKeyFocusedElement@HWNDElement@DirectUI@@SGPAVElement@2@XZ
?Destroy@DUIXmlParser@DirectUI@@QAEXXZ
?SetXMLFromResource@DUIXmlParser@DirectUI@@QAEJIPAUHINSTANCE__@@0@Z
?Create@DUIXmlParser@DirectUI@@SGJPAPAV12@P6GPAVValue@2@PBGPAX@Z2P6GX11H2@Z2@Z
?_OnUIStateChanged@HWNDElement@DirectUI@@MAEXGG@Z
?GetWindowClassNameAndStyle@HWNDElement@DirectUI@@UAEXPAPBGPAI@Z
?WndProc@HWNDElement@DirectUI@@UAEJPAUHWND__@@IIJ@Z
?CreateStyleParser@HWNDElement@DirectUI@@UAEJPAPAVDUIXmlParser@2@@Z
?IsMSAAEnabled@HWNDElement@DirectUI@@UAE_NXZ
?CanSetFocus@HWNDElement@DirectUI@@UAE_NXZ
?OnCompositionChanged@HWNDElement@DirectUI@@UAEXXZ
?OnWmSettingChanged@HWNDElement@DirectUI@@UAEXIJ@Z
?OnWmThemeChanged@HWNDElement@DirectUI@@UAEXIJ@Z
?OnGetDlgCode@HWNDElement@DirectUI@@UAEXPAUtagMSG@@PAJ@Z
?OnNoChildWithShortcutFound@HWNDElement@DirectUI@@UAEXPAUKeyboardEvent@2@@Z
?OnImmersiveColorSchemeChanged@HWNDElement@DirectUI@@UAEXXZ
?OnThemeChanged@HWNDElement@DirectUI@@UAEXPAUThemeChangedEvent@2@@Z
?GetHWND@HWNDElement@DirectUI@@UAEPAUHWND__@@XZ
?GetUiaFocusDelegate@Element@DirectUI@@UAEPAV12@XZ
?HandleUiaEventListener@Element@DirectUI@@UAEXPAUEvent@2@@Z
?HandleUiaPropertyChangingListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@@Z
?HandleUiaPropertyListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?HandleUiaDestroyListener@Element@DirectUI@@UAEXXZ
?GetElementProviderImpl@Element@DirectUI@@UAEJPAVInvokeHelper@2@PAPAVElementProvider@2@@Z
?GetUIAElementProvider@Element@DirectUI@@UAEJABU_GUID@@PAPAX@Z
?DefaultAction@Element@DirectUI@@UAEJXZ
?GetAccessibleImpl@HWNDElement@DirectUI@@UAEJPAPAUIAccessible@@@Z
?GetClassInfoW@HWNDElement@DirectUI@@UAEPAUIClassInfo@2@XZ
?GetKeyFocused@Element@DirectUI@@UAE_NXZ
?RemoveTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@@Z
?ActivateTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@K@Z
?UpdateTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@@Z
?OnUnHosted@Element@DirectUI@@MAEXPAV12@@Z
?OnHosted@Element@DirectUI@@MAEXPAV12@@Z
?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MAE?AUtagSIZE@@HHPAVSurface@2@@Z
?_SelfLayoutDoLayout@Element@DirectUI@@MAEXHH@Z
?GetImmersiveFocusRectOffsets@Element@DirectUI@@UAEXPAUtagRECT@@@Z
?QueryInterface@Element@DirectUI@@UAGJABU_GUID@@PAPAX@Z
?MessageCallback@Element@DirectUI@@UAEIPAUtagGMSG@@@Z
?RemoveBehavior@Element@DirectUI@@UAEJPAUIDuiBehavior@@@Z
?AddBehavior@Element@DirectUI@@UAEJPAUIDuiBehavior@@@Z
?SetKeyFocus@Element@DirectUI@@UAEXXZ
?EnsureVisible@Element@DirectUI@@UAE_NHHHH@Z
?GetAdjacent@Element@DirectUI@@UAEPAV12@PAV12@HPBUNavReference@2@K@Z
?Remove@Element@DirectUI@@UAEJPAPAV12@I@Z
?Insert@Element@DirectUI@@UAEJPAPAV12@II@Z
?Add@Element@DirectUI@@UAEJPAPAV12@I@Z
?GetContentSize@Element@DirectUI@@UAE?AUtagSIZE@@HHPAVSurface@2@@Z
?Paint@Element@DirectUI@@UAEXPAUHDC__@@PBUtagRECT@@1PAU4@2@Z
?OnDestroy@HWNDElement@DirectUI@@UAEXXZ
?OnMouseFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z
?OnKeyFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z
?OnInput@HWNDElement@DirectUI@@UAEXPAUInputEvent@2@@Z
?OnGroupChanged@HWNDElement@DirectUI@@UAEXH_N@Z
?OnPropertyChanged@Element@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanged@HWNDElement@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UAE_NPAUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UAE_NPBUPropertyInfo@2@HPAVValue@2@1@Z
?GetContentStringAsDisplayed@Element@DirectUI@@UAEPBGPAPAVValue@2@@Z
?IsContentProtected@Element@DirectUI@@UAE_NXZ
?IsRTLReading@Element@DirectUI@@UAE_NXZ
?DestroyWindow@NativeHWNDHost@DirectUI@@QAEXXZ
?OnEvent@HWNDElement@DirectUI@@UAEXPAUEvent@2@@Z
?Add@Element@DirectUI@@QAEJPAV12@@Z
?LoadFromResource@DUIFactory@DirectUI@@QAEJPAUHINSTANCE__@@PBG1PAVElement@2@PAKPAPAV42@1@Z
?Destroy@Layout@DirectUI@@QAEXXZ
?SetLayout@Element@DirectUI@@QAEJPAVLayout@2@@Z
?Create@FillLayout@DirectUI@@SGJPAPAVLayout@2@@Z
?DoubleBuffered@Element@DirectUI@@QAEX_N@Z
?Host@NativeHWNDHost@DirectUI@@QAEXPAVElement@2@@Z
?SetAccessible@Element@DirectUI@@QAEJ_N@Z
?Initialize@HWNDElement@DirectUI@@QAEJPAUHWND__@@_NIPAVElement@2@PAK@Z
?Register@HWNDElement@DirectUI@@SGJXZ
??1DUIFactory@DirectUI@@QAE@XZ
??1HWNDElement@DirectUI@@UAE@XZ
??0HWNDElement@DirectUI@@QAE@XZ
?ThumbPositionProp@CCTrackBar@DirectUI@@SGPBUPropertyInfo@2@XZ
?AddListener@Element@DirectUI@@QAEJPAUIElementListener@2@@Z
?SetContentString@Element@DirectUI@@QAEJPBG@Z
?SyncDestroyWindow@NativeHWNDHost@DirectUI@@QAEXXZ
?RemoveListener@Element@DirectUI@@QAEXPAUIElementListener@2@@Z
?SetSelected@Element@DirectUI@@QAEJ_N@Z
?AddString@Combobox@DirectUI@@QAEHPBG@Z
?SetRangeMax@CCTrackBar@DirectUI@@QAEJH@Z
?SetRangeMin@CCTrackBar@DirectUI@@QAEJH@Z
?SetX@Element@DirectUI@@QAEJH@Z
?GetX@Element@DirectUI@@QAEHXZ
?SetSelection@Combobox@DirectUI@@QAEJH@Z
?Initialize@NativeHWNDHost@DirectUI@@QAEJPBG0PAUHWND__@@PAUHICON__@@HHHHHHPAUHINSTANCE__@@I@Z
?SetEnabled@Element@DirectUI@@QAEJ_N@Z
?SetVisible@Element@DirectUI@@QAEJ_N@Z
StrToID
?FindDescendent@Element@DirectUI@@QAEPAV12@G@Z
?Release@Value@DirectUI@@QAEXXZ
?SetMinSize@Element@DirectUI@@QAEJHH@Z
?GetExtent@Element@DirectUI@@QAEPBUtagSIZE@@PAPAVValue@2@@Z
?EndDefer@Element@DirectUI@@QAEXK@Z
?CreateHostWindow@NativeHWNDHost@DirectUI@@UAEPAUHWND__@@KPBG0KHHHHPAU3@PAUHMENU__@@PAUHINSTANCE__@@PAX@Z
??0NativeHWNDHost@DirectUI@@QAE@XZ
??1NativeHWNDHost@DirectUI@@UAE@XZ
StartMessagePump
UnInitProcessPriv
UnInitThread
InitThread
InitProcessPriv
??1AccessibleButton@DirectUI@@UAE@XZ
?Initialize@AccessibleButton@DirectUI@@QAEJPAVElement@2@PAK@Z
?GetTooltip@Element@DirectUI@@QAE_NXZ
?OnLostDialogFocus@Button@DirectUI@@UAE_NPAUIDialogElement@2@@Z
api-ms-win-core-com-l1-1-1
StringFromCLSID
CoTaskMemFree
CoWaitForMultipleHandles
CoCreateInstance
CoInitializeEx
CoUninitialize
CoTaskMemAlloc
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
Sections
.text Size: 151KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ