b6bf5bd64a36f46578b7378843a4e859138c780758f16e969f7eca5e485ddda1
Detection Ratio
1 / 109 rules matched
Matches rule network_tcp_socket
from malware
by x0r
↳Communications over RAW socket
| Author | x0r |
Matched Strings
$c3
| Offset (hex) | Offset (dec) | Length | Matched Data |
|---|---|---|---|
| 0x30787 | 198535 | 4 | send |
rule network_tcp_socket
{"
strings:
$p1 = "tor\\hidden_service\\private_key" nocase
$p2 = "tor\\hidden_service\\hostname" nocase
$p3 = "tor\\lock" nocase
$p4 = "tor\\state" nocase
condition:
any of them
}
rule network_irc {
meta:
author = "x0r"
description = "Communications over IRC network"
version = "0.1"
strings:
$s1 = "NICK"
$s2 = "PING"
$s3 = "JOIN"
$s4 = "USER"
}
Hashes
b6bf5bd64a36f46578b7378843a4e859138c780758f16e969f7eca5e485ddda1
8da54c8a9c7eedbf60ce074a975a12118de37931
6cf0469c599ecb326c9a6e599210c906
d012233299c4a54e8459620d5379086dcc64fcd4173b140210e1ef77dc927c3695e8d5897f05cbdfb364a9d13188d4d4da97cfa240ed50ab20f53fa5780645a2
File Properties
Executable (PE) Details
| Section | Virtual Size | Raw Size | Entropy |
|---|---|---|---|
| .text | 298889 | 299008 | 5.52 |
| .rsrc | 21844 | 22016 | 7.61 ⚠ |
| Offset (hex) | Offset (dec) | String |
|---|---|---|
| 0x4D | 77 | !This program cannot be run in DOS mode. |
| 0x1AF | 431 | `.rsrc |
| 0x2038C | 131980 | v4.0.30319 |
| 0x203B0 | 132016 | #Strings |
| 0x2BAE1 | 178913 | <>9__4_10 |
| 0x2BAEB | 178923 | <RegisterViews>b__4_10 |
| 0x2BB02 | 178946 | <ex>5__10 |
| 0x2BB0C | 178956 | <IsEnabled>d__10 |
| 0x2BB1D | 178973 | <>c__DisplayClass11_0 |
| 0x2BB33 | 178995 | <.ctor>b__1_0 |
| 0x2BB41 | 179009 | <RefreshNetworks>b__1_0 |
| 0x2BB59 | 179033 | <>c__DisplayClass1_0 |
| 0x2BB6E | 179054 | <.ctor>b__12_0 |
| 0x2BB7D | 179069 | <>c__DisplayClass12_0 |
| 0x2BB93 | 179091 | <>9__2_0 |
| 0x2BB9C | 179100 | <MainForm_Load>b__2_0 |
| 0x2BBB2 | 179122 | <HasDonated>b__2_0 |
| 0x2BBC5 | 179141 | <LoadOrAskBackground>b__2_0 |
| 0x2BBE1 | 179169 | <btnCheckUpdates_Click>b__2_0 |
| 0x2BBFF | 179199 | <.ctor>b__2_0 |
| 0x2BC0D | 179213 | <>c__DisplayClass2_0 |
| 0x2BC22 | 179234 | <>c__DisplayClass23_0 |
| 0x2BC38 | 179256 | <>9__3_0 |
| 0x2BC41 | 179265 | <btnInstallUpdates_Click>b__3_0 |
| 0x2BC61 | 179297 | <DoScan>b__3_0 |
| 0x2BC70 | 179312 | <InitProviderCombo>b__3_0 |
| 0x2BC8A | 179338 | <GetAvailableWifiNetworks>b__3_0 |
| 0x2BCAB | 179371 | <SetDonationStatus>b__3_0 |
| 0x2BCC5 | 179397 | <>c__DisplayClass3_0 |
| 0x2BCDA | 179418 | <>c__DisplayClass14_0 |
| 0x2BCF0 | 179440 | <>9__4_0 |
| 0x2BCF9 | 179449 | <DoRemove>b__4_0 |
| 0x2BD0A | 179466 | <.ctor>b__4_0 |
| 0x2BD18 | 179480 | <RegisterViews>b__4_0 |
| 0x2BD2E | 179502 | <>c__DisplayClass4_0 |
| 0x2BD43 | 179523 | <UpdateBadgeLegend>g__Style|4_0 |
| 0x2BD63 | 179555 | <>9__15_0 |
| 0x2BD6D | 179565 | <btnRemoveSelected_Click>b__15_0 |
| 0x2BD8E | 179598 | <>9__5_0 |
| 0x2BD97 | 179607 | <btnInstall_Click>b__5_0 |
| 0x2BDB0 | 179632 | <InitializeProfileDropdown>b__5_0 |
| 0x2BDD2 | 179666 | <GetCategories>b__5_0 |
| 0x2BDE8 | 179688 | <WireNavButtons>b__5_0 |
| 0x2BDFF | 179711 | <>c__DisplayClass5_0 |
| 0x2BE14 | 179732 | <>9__6_0 |
| 0x2BE1D | 179741 | <RunWingetCommand>b__6_0 |
| 0x2BE36 | 179766 | <InitializeLogger>b__6_0 |
| 0x2BE4F | 179791 | <.ctor>b__6_0 |
| 0x2BE5D | 179805 | <HookUpEvents>b__6_0 |
| 0x2BE72 | 179826 | <ReadMetadataFromScript>b__6_0 |
| 0x2BE91 | 179857 | <>c__DisplayClass6_0 |
| 0x2BEA6 | 179878 | <>c__DisplayClass17_0 |
| 0x2BEBC | 179900 | <>c__DisplayClass7_0 |
| 0x2BED1 | 179921 | <.ctor>b__18_0 |
| 0x2BEE0 | 179936 | <>c__DisplayClass8_0 |
| 0x2BEF5 | 179957 | <.ctor>b__19_0 |
| 0x2BF04 | 179972 | <BuildUI>b__9_0 |
| 0x2BF14 | 179988 | <>c__DisplayClass9_0 |
| 0x2BF29 | 180009 | <UninstallAppAsync>b__0 |
| 0x2BF41 | 180033 | <LoadInstalledAppsAsync>b__0 |
| 0x2BF5E | 180062 | <RunScriptAsync>b__0 |
| 0x2BF73 | 180083 | <OnGlobalSearchChanged>b__0 |
| 0x2BF8F | 180111 | <linkInstallById_LinkClicked>b__0 |
| 0x2BFB1 | 180145 | <ChooseBackground>b__0 |
| 0x2BFC8 | 180168 | <ApplyBackground>b__0 |
| 0x2BFDE | 180190 | <UpdateStatusSafe>b__0 |
| 0x2BFF5 | 180213 | <AddExtensionTile>b__0 |
| 0x2C00C | 180236 | <AddLog>b__0 |
| 0x2C019 | 180249 | <ConnectToWifi>b__0 |
| 0x2C02D | 180269 | <btnConnect_Click>b__0 |
| 0x2C044 | 180292 | <dgvApps_CellContentClick>b__0 |
| 0x2C063 | 180323 | <EnableRoundedPanel>b__0 |
| 0x2C07C | 180348 | <AddQuickTool>b__0 |
| 0x2C08F | 180367 | <BuildOobeSidebar>b__0 |
| 0x2C0A6 | 180390 | <LoadTools>b__0 |
| 0x2C0B6 | 180406 | <LoadAndDisplayApps>b__0 |
| 0x2C0CF | 180431 | <FilterProviders>b__0 |
| 0x2C0E5 | 180453 | <BuildContent>b__0 |
| 0x2C0F8 | 180472 | <InitializeTextInput>b__0 |
| 0x2C112 | 180498 | <GetFeaturesByCategory>b__0 |
| 0x2C12E | 180526 | _VtblGap1_11 |
| 0x2C13B | 180539 | <>9__4_11 |
| 0x2C145 | 180549 | <RegisterViews>b__4_11 |
| 0x2C15C | 180572 | DetectWindows11 |
| 0x2C16C | 180588 | <.ctor>b__1_1 |
| 0x2C17A | 180602 | _VtblGap1_1 |
| 0x2C186 | 180614 | <.ctor>b__12_1 |
| 0x2C195 | 180629 | _VtblGap2_1 |
| 0x2C1A1 | 180641 | <>9__3_1 |
| 0x2C1AA | 180650 | <btnInstallUpdates_Click>b__3_1 |
| 0x2C1CA | 180682 | <InitProviderCombo>b__3_1 |
| 0x2C1E4 | 180708 | <>9__4_1 |
| 0x2C1ED | 180717 | <.ctor>b__4_1 |
| 0x2C1FB | 180731 | <RegisterViews>b__4_1 |
| 0x2C211 | 180753 | <>9__5_1 |
| 0x2C21A | 180762 | <btnInstall_Click>b__5_1 |
| 0x2C233 | 180787 | <WireNavButtons>b__5_1 |
| 0x2C24A | 180810 | <>c__DisplayClass5_1 |
| 0x2C25F | 180831 | <>9__6_1 |
| 0x2C268 | 180840 | <RunWingetCommand>b__6_1 |
| 0x2C281 | 180865 | <HookUpEvents>b__6_1 |
| 0x2C296 | 180886 | <ReadMetadataFromScript>b__6_1 |
| 0x2C2B5 | 180917 | <>9__8_1 |
| 0x2C2BE | 180926 | <RunScriptAsync>b__8_1 |
| 0x2C2D5 | 180949 | <>c__DisplayClass8_1 |
| 0x2C2EA | 180970 | <BuildUI>b__9_1 |
| 0x2C2FA | 180986 | <selected>5__1 |
| 0x2C309 | 181001 | <sfd>5__1 |
| 0x2C313 | 181011 | <useConsole>5__1 |
| 0x2C324 | 181028 | <profileName>5__1 |
| 0x2C336 | 181046 | <name>5__1 |
| 0x2C341 | 181057 | <dlg>5__1 |
| 0x2C34B | 181067 | <i>5__1 |
| 0x2C353 | 181075 | <url>5__1 |
| 0x2C35D | 181085 | <item>5__1 |
| 0x2C368 | 181096 | <currentVersion>5__1 |
| 0x2C37D | 181117 | <p>5__1 |
| 0x2C385 | 181125 | <appliedTweaks>5__1 |
| 0x2C399 | 181145 | <networks>5__1 |
| 0x2C3A8 | 181160 | <items>5__1 |
| 0x2C3B4 | 181172 | <selectedApps>5__1 |
| 0x2C3C7 | 181191 | <row>5__1 |
| 0x2C3D1 | 181201 | <category>5__1 |
| 0x2C3E0 | 181216 | <>8__1 |
| 0x2C3E7 | 181223 | <UninstallAppAsync>b__1 |
| 0x2C3FF | 181247 | <ApplyBackground>b__1 |
| 0x2C415 | 181269 | <DoRemove>b__1 |
| 0x2C424 | 181284 | <ConnectToWifi>b__1 |
| 0x2C438 | 181304 | <dgvApps_CellContentClick>b__1 |
| 0x2C457 | 181335 | <EnableRoundedPanel>b__1 |
| 0x2C470 | 181360 | <DoScan>b__1 |
| 0x2C47D | 181373 | <GetAvailableWifiNetworks>b__1 |
| 0x2C49C | 181404 | <LoadTools>b__1 |
| 0x2C4AC | 181420 | <LoadAndDisplayApps>b__1 |
| 0x2C4C5 | 181445 | <InitializeTextInput>b__1 |
| 0x2C4DF | 181471 | <RefreshNetworks>d__1 |
| 0x2C4F5 | 181493 | <>s__1 |
| 0x2C4FC | 181500 | <>u__1 |
| 0x2C503 | 181507 | Func`1 |
| 0x2C50A | 181514 | IEnumerable`1 |
| 0x2C518 | 181528 | Predicate`1 |
| 0x2C524 | 181540 | Stack`1 |
| 0x2C52C | 181548 | Task`1 |
| 0x2C533 | 181555 | Action`1 |
| 0x2C53C | 181564 | AsyncTaskMethodBuilder`1 |
| 0x2C555 | 181589 | IEqualityComparer`1 |
| 0x2C569 | 181609 | TaskAwaiter`1 |
| 0x2C577 | 181623 | IEnumerator`1 |
| 0x2C585 | 181637 | List`1 |
| 0x2C58C | 181644 | valueName1 |
| 0x2C597 | 181655 | label1 |
| 0x2C59E | 181662 | panel1 |
| 0x2C5AB | 181675 | toolTip1 |
| 0x2C5B4 | 181684 | contextMenuStrip1 |
| 0x2C5C6 | 181702 | CS$<>8__locals1 |
| 0x2C5D6 | 181718 | _VtblGap1_12 |
| 0x2C5E3 | 181731 | <>9__4_12 |
| 0x2C5ED | 181741 | <RegisterViews>b__4_12 |
| 0x2C604 | 181764 | <RunSelectedAsync>d__12 |
| 0x2C61C | 181788 | <dgvApps_CellContentClick>d__12 |
| 0x2C63C | 181820 | <RefreshView>d__12 |
| 0x2C64F | 181839 | Microsoft.Win32 |
| 0x2C65F | 181855 | UInt32 |
| 0x2C666 | 181862 | ToInt32 |
| 0x2C66E | 181870 | _VtblGap1_2 |
| 0x2C67A | 181882 | <.ctor>b__12_2 |
| 0x2C689 | 181897 | _VtblGap3_2 |
| 0x2C695 | 181909 | <>9__4_2 |
| 0x2C69E | 181918 | <DoRemove>b__4_2 |
| 0x2C6AF | 181935 | <RegisterViews>b__4_2 |
| 0x2C6C5 | 181957 | <WireNavButtons>b__5_2 |
| 0x2C6DC | 181980 | <HookUpEvents>b__6_2 |
| 0x2C6F1 | 182001 | <BuildUI>b__9_2 |
| 0x2C701 | 182017 | <wc>5__2 |
| 0x2C70A | 182026 | <filtered>5__2 |
| 0x2C719 | 182041 | <id>5__2 |
| 0x2C722 | 182050 | <node>5__2 |
| 0x2C72D | 182061 | <fileName>5__2 |
| 0x2C73C | 182076 | <columnName>5__2 |
| 0x2C74D | 182093 | <realAppName>5__2 |
| 0x2C75F | 182111 | <appName>5__2 |
| 0x2C76D | 182125 | <useLog>5__2 |
| 0x2C77A | 182138 | <i>5__2 |
| 0x2C782 | 182146 | <tweak>5__2 |
| 0x2C78E | 182158 | <ok>5__2 |
| 0x2C797 | 182167 | <url>5__2 |
| 0x2C7A1 | 182177 | <pm>5__2 |
| 0x2C7AA | 182186 | <appDir>5__2 |
| 0x2C7B7 | 182199 | <packages>5__2 |
| 0x2C7C6 | 182214 | <loadedTools>5__2 |
| 0x2C7D8 | 182232 | <results>5__2 |
| 0x2C7E6 | 182246 | <result>5__2 |
| 0x2C7F3 | 182259 | <last>5__2 |
| 0x2C7FE | 182270 | <baseText>5__2 |
| 0x2C80D | 182285 | <RunScriptAsync>b__2 |
| 0x2C822 | 182306 | <ConnectToWifi>b__2 |
| 0x2C836 | 182326 | <btnInstall_Click>b__2 |
| 0x2C84D | 182349 | <btnInstallUpdates_Click>b__2 |
| 0x2C86B | 182379 | <LoadAndDisplayApps>b__2 |
| 0x2C884 | 182404 | <InstallFromUrlAsync>d__2 |
| 0x2C89E | 182430 | <btnCheckUpdates_Click>d__2 |
| 0x2C8BA | 182458 | <btnConnect_Click>d__2 |
| 0x2C8D1 | 182481 | <RefreshView>d__2 |
| 0x2C8E3 | 182499 | <>s__2 |
| 0x2C8EA | 182506 | <>u__2 |
| 0x2C8F1 | 182513 | Func`2 |
| 0x2C8F8 | 182520 | ValueTuple`2 |
| 0x2C905 | 182533 | AsyncOperationWithProgressCompletedHandler`2 |
| 0x2C932 | 182578 | KeyValuePair`2 |
| 0x2C941 | 182593 | IAsyncOperationWithProgress`2 |
| 0x2C95F | 182623 | Dictionary`2 |
| 0x2C96C | 182636 | valueName2 |
| 0x2C977 | 182647 | keyName2 |
| 0x2C980 | 182656 | label2 |
| 0x2C98D | 182669 | IUpdateSession2 |
| 0x2C99D | 182685 | <>9__4_13 |
| 0x2C9A7 | 182695 | <RegisterViews>b__4_13 |
| 0x2C9BE | 182718 | <toolStripMenuInstallUrl_Click>d__13 |
| 0x2C9E3 | 182755 | <dgvApps_CellContentClick>d__13 |
| 0x2CA03 | 182787 | <.ctor>b__12_3 |
| 0x2CA12 | 182802 | _VtblGap2_3 |
| 0x2CA1E | 182814 | <>9__4_3 |
| 0x2CA27 | 182823 | <DoRemove>b__4_3 |
| 0x2CA38 | 182840 | <RegisterViews>b__4_3 |
| 0x2CA4E | 182862 | <btnInstall_Click>b__5_3 |
| 0x2CA67 | 182887 | <WireNavButtons>b__5_3 |
| 0x2CA7E | 182910 | <HookUpEvents>b__6_3 |
| 0x2CA93 | 182931 | <BuildUI>b__9_3 |
| 0x2CAA3 | 182947 | <isEnabled>5__3 |
| 0x2CAB3 | 182963 | <node>5__3 |
| 0x2CABE | 182974 | <fullName>5__3 |
| 0x2CACD | 182989 | <optionArg>5__3 |
| 0x2CADD | 183005 | <localPath>5__3 |
| 0x2CAED | 183021 | <operation>5__3 |
| 0x2CAFD | 183037 | <args>5__3 |
| 0x2CB08 | 183048 | <content>5__3 |
| 0x2CB16 | 183062 | <count>5__3 |
| 0x2CB22 | 183074 | <reboot>5__3 |
| 0x2CB2F | 183087 | <row>5__3 |
| 0x2CB39 | 183097 | <ex>5__3 |
| 0x2CB42 | 183106 | <btnInstallUpdates_Click>d__3 |
| 0x2CB60 | 183136 | <DoScan>d__3 |
| 0x2CB6D | 183149 | <>s__3 |
| 0x2CB74 | 183156 | ValueTuple`3 |
| 0x2CB81 | 183169 | valueName3 |
| 0x2CB8C | 183180 | label3 |
| 0x2CB99 | 183193 | IUpdateSession3 |
| 0x2CBA9 | 183209 | <UninstallAppAsync>d__14 |
| 0x2CBC2 | 183234 | <DownloadProviderAsync>d__14 |
| 0x2CBDF | 183263 | <.ctor>b__12_4 |
| 0x2CBEE | 183278 | _VtblGap2_4 |
| 0x2CBFA | 183290 | <>9__4_4 |
| 0x2CC03 | 183299 | <RegisterViews>b__4_4 |
| 0x2CC19 | 183321 | <HookUpEvents>b__6_4 |
| 0x2CC2E | 183342 | <shouldEnable>5__4 |
| 0x2CC41 | 183361 | <appName>5__4 |
| 0x2CC4F | 183375 | <inputArg>5__4 |
| 0x2CC5E | 183390 | <exePath>5__4 |
| 0x2CC6C | 183404 | <scriptsDir>5__4 |
| 0x2CC7D | 183421 | <success>5__4 |
| 0x2CC8B | 183435 | <it>5__4 |
| 0x2CC94 | 183444 | <result>5__4 |
| 0x2CCA1 | 183457 | <ex>5__4 |
| 0x2CCAA | 183466 | <>8__4 |
| 0x2CCB1 | 183473 | <BuildUI>b__4 |
| 0x2CCBF | 183487 | <AppsControlView_Load>d__4 |
| 0x2CCDA | 183514 | <comboCategories_SelectedIndexChanged>d__4 |
| 0x2CD05 | 183557 | <DoRemove>d__4 |
| 0x2CD14 | 183572 | <btnSetDefaultBrowser_Click>d__4 |
| 0x2CD35 | 183605 | <>s__4 |
| 0x2CD3C | 183612 | label4 |
| 0x2CD49 | 183625 | <btnRemoveSelected_Click>d__15 |
| 0x2CD68 | 183656 | _VtblGap1_5 |
| 0x2CD74 | 183668 | <>9__4_5 |
| 0x2CD7D | 183677 | <RegisterViews>b__4_5 |
| 0x2CD93 | 183699 | <isCurrentlyEnabled>5__5 |
| 0x2CDAC | 183724 | <ofd>5__5 |
| 0x2CDB6 | 183734 | <fullName>5__5 |
| 0x2CDC5 | 183749 | <name>5__5 |
| 0x2CDD0 | 183760 | <p>5__5 |
| 0x2CDD8 | 183768 | <extraArgs>5__5 |
| 0x2CDE8 | 183784 | <it>5__5 |
| 0x2CDF1 | 183793 | <client>5__5 |
| 0x2CDFE | 183806 | <ex>5__5 |
| 0x2CE07 | 183815 | <DownloadAsync>d__5 |
| 0x2CE1B | 183835 | <btnInstall_Click>d__5 |
| 0x2CE32 | 183858 | <LoadTools>d__5 |
| 0x2CE42 | 183874 | <LoadTweaksForCategory>d__5 |
| 0x2CE5E | 183902 | <>s__5 |
| 0x2CE6B | 183915 | <RunQuickAsync>d__16 |
| 0x2CE80 | 183936 | _VtblGap1_6 |
| 0x2CE8C | 183948 | <>9__4_6 |
| 0x2CE95 | 183957 | <RegisterViews>b__4_6 |
| 0x2CEAB | 183979 | <name>5__6 |
| 0x2CEB6 | 183990 | <tool>5__6 |
| 0x2CEC1 | 184001 | <downloads>5__6 |
| 0x2CED1 | 184017 | <success>5__6 |
| 0x2CEDF | 184031 | <dest>5__6 |
| 0x2CEEA | 184042 | <output>5__6 |
| 0x2CEF7 | 184055 | <ex>5__6 |
| 0x2CF00 | 184064 | <ApplyProfileChange>d__6 |
| 0x2CF19 | 184089 | <>s__6 |
| 0x2CF26 | 184102 | <RefreshView>d__17 |
| 0x2CF39 | 184121 | <>9__4_7 |
| 0x2CF42 | 184130 | <RegisterViews>b__4_7 |
| 0x2CF58 | 184152 | <hc>5__7 |
| 0x2CF61 | 184161 | <cmd>5__7 |
| 0x2CF6B | 184171 | <fullName>5__7 |
| 0x2CF7A | 184186 | <control>5__7 |
| 0x2CF88 | 184200 | <status>5__7 |
| 0x2CF95 | 184213 | <t>5__7 |
| 0x2CF9D | 184221 | <ex>5__7 |
| 0x2CFA6 | 184230 | <LoadCommunityProfileAsync>d__7 |
| 0x2CFC6 | 184262 | <ApplyFeature>d__7 |
| 0x2CFD9 | 184281 | <btnRun_Click>d__7 |
| 0x2CFEC | 184300 | <btnApply_Click>d__7 |
| 0x2D001 | 184321 | <>s__7 |
| 0x2D00E | 184334 | get_UTF8 |
| 0x2D017 | 184343 | _VtblGap1_8 |
| 0x2D023 | 184355 | <>9__4_8 |
| 0x2D02C | 184364 | <RegisterViews>b__4_8 |
| 0x2D042 | 184386 | <placeholder>5__8 |
| 0x2D054 | 184404 | <btnInstall_Click>d__8 |
| 0x2D06B | 184427 | <LoadAndDisplayApps>d__8 |
| 0x2D084 | 184452 | <RefreshView>d__8 |
| 0x2D096 | 184470 | <ReloadCurrentCategory>d__8 |
| 0x2D0B2 | 184498 | <>s__8 |
| 0x2D0B9 | 184505 | ValueTuple`8 |
| 0x2D0C6 | 184518 | _VtblGap4_19 |
| 0x2D0D7 | 184535 | <>9__4_9 |
| 0x2D0E0 | 184544 | <RegisterViews>b__4_9 |
| 0x2D0F6 | 184566 | <ex>5__9 |
| 0x2D0FF | 184575 | <LoadInstalledAppsAsync>d__9 |
| 0x2D11C | 184604 | <btnRefresh_Click>d__9 |
| 0x2D133 | 184627 | <>s__9 |
| 0x2D13A | 184634 | <Module> |
| 0x2D143 | 184643 | System.Drawing.Drawing2D |
| 0x2D15C | 184668 | GetTypeFromCLSID |
| 0x2D16D | 184685 | get_UpdateID |
| 0x2D17A | 184698 | FlyOOBE |
| 0x2D182 | 184706 | RebootToWinRE |
| 0x2D196 | 184726 | PointF |
| 0x2D19D | 184733 | Settings.UI |
| 0x2D1A9 | 184745 | BuildUI |
| 0x2D1B1 | 184753 | ReadDwordHKLM |
| 0x2D1BF | 184767 | WriteDwordHKLM |
| 0x2D1CE | 184782 | System.IO |
| 0x2D1D8 | 184792 | GameDVR |
| 0x2D1E0 | 184800 | SupportedOS |
| 0x2D1EC | 184812 | ReadDwordHKCU |
| 0x2D1FA | 184826 | WriteDwordHKCU |
| 0x2D209 | 184841 | VisualFX |
| 0x2D212 | 184850 | get_DpiY |
| 0x2D21B | 184859 | value__ |
| 0x2D223 | 184867 | criteria |
| 0x2D22C | 184876 | get_Fuchsia |
| 0x2D238 | 184888 | chkEula |
| 0x2D240 | 184896 | get_AcceptEula |
| 0x2D24F | 184911 | chkExtra |
| 0x2D258 | 184920 | get_Data |
| 0x2D261 | 184929 | ViewMetadata |
| 0x2D26E | 184942 | FromArgb |
| 0x2D277 | 184951 | WUApiLib |
| 0x2D280 | 184960 | mscorlib |
| 0x2D289 | 184969 | set_Verb |
| 0x2D292 | 184978 | btnCreateUsb |
| 0x2D29F | 184991 | Flyoobe.ToolHub |
| 0x2D2B3 | 185011 | System.Collections.Generic |
| 0x2D2CE | 185038 | DownloadAsync |
| 0x2D2DC | 185052 | RunSelectedAsync |
| 0x2D2ED | 185069 | RemovePackageAsync |
| 0x2D300 | 185088 | LoadCommunityProfileAsync |
| 0x2D31A | 185114 | GetStringAsync |
| 0x2D329 | 185129 | RunQuickAsync |
| 0x2D337 | 185143 | DownloadFileTaskAsync |
| 0x2D34D | 185165 | InstallFromUrlAsync |
| 0x2D361 | 185185 | UninstallAppAsync |
| 0x2D373 | 185203 | DownloadProviderAsync |
| 0x2D389 | 185225 | LoadInstalledAppsAsync |
| 0x2D3A0 | 185248 | RunScriptAsync |
| 0x2D3AF | 185263 | AddArc |
| 0x2D3B6 | 185270 | <<-ctor>b__1_0>d |
| 0x2D3C7 | 185287 | <<InitializeProfileDropdown>b__5_0>d |
| 0x2D3EC | 185324 | <<HookUpEvents>b__6_0>d |
| 0x2D404 | 185348 | <<-ctor>b__1_1>d |
| 0x2D415 | 185365 | <<HookUpEvents>b__6_2>d |
| 0x2D42D | 185389 | <<HookUpEvents>b__6_3>d |
| 0x2D445 | 185413 | <<HookUpEvents>b__6_4>d |
| 0x2D45D | 185437 | get_Id |
| 0x2D464 | 185444 | get_EnteredId |
| 0x2D472 | 185458 | PackageId |
| 0x2D482 | 185474 | providerId |
| 0x2D48D | 185485 | PlaceholderId |
| 0x2D49B | 185499 | ExtractId |
| 0x2D4A5 | 185509 | linkInstallById |
| 0x2D4B5 | 185525 | FindProviderById |
| 0x2D4CC | 185548 | add_Load |
| 0x2D4D5 | 185557 | MainForm_Load |
| 0x2D4E3 | 185571 | HomeControlView_Load |
| 0x2D4F8 | 185592 | AppSettingsControlView_Load |
| 0x2D514 | 185620 | AppsControlView_Load |
| 0x2D529 | 185641 | panelDownload |
| 0x2D537 | 185655 | btnDownload |
| 0x2D543 | 185667 | comboDownload |
| 0x2D551 | 185681 | btnAdd |
| 0x2D558 | 185688 | get_IsDownloaded |
| 0x2D569 | 185705 | orcSucceeded |
| 0x2D576 | 185718 | get_IsRecommended |
| 0x2D588 | 185736 | add_CheckedChanged |
| 0x2D59B | 185755 | chkDonated_CheckedChanged |
| 0x2D5B5 | 185781 | checkSelectAll_CheckedChanged |
| 0x2D5D3 | 185811 | checkNeedOtherBrowser_CheckedChanged |
| 0x2D5F8 | 185848 | NotifyThemeChanged |
| 0x2D60B | 185867 | OnGlobalSearchChanged |
| 0x2D621 | 185889 | add_TextChanged |
| 0x2D631 | 185905 | textSearch_TextChanged |
| 0x2D648 | 185928 | _onViewChanged |
| 0x2D657 | 185943 | add_SelectedIndexChanged |
| 0x2D670 | 185968 | remove_SelectedIndexChanged |
| 0x2D68C | 185996 | comboFilter_SelectedIndexChanged |
| 0x2D6AD | 186029 | comboCategories_SelectedIndexChanged |
| 0x2D6D2 | 186066 | listTweaks_SelectedIndexChanged |
| 0x2D6F2 | 186098 | get_Checked |
| 0x2D6FE | 186110 | set_Checked |
| 0x2D70A | 186122 | GetItemChecked |
| 0x2D719 | 186137 | SetItemChecked |
| 0x2D728 | 186152 | add_Clicked |
| 0x2D734 | 186164 | remove_Clicked |
| 0x2D743 | 186179 | linkInstallById_LinkClicked |
| 0x2D75F | 186207 | add_LinkClicked |
| 0x2D76F | 186223 | linkAppVersion_LinkClicked |
| 0x2D78A | 186250 | linkOnlineAccount_LinkClicked |
| 0x2D7A8 | 186280 | linkPoweredBy_LinkClicked |
| 0x2D7C2 | 186306 | Interlocked |
| 0x2D7CE | 186318 | set_Enabled |
| 0x2D7DA | 186330 | set_FormattingEnabled |
| 0x2D7F0 | 186352 | EnsureLocationEnabled |
| 0x2D806 | 186374 | IsEnabled |
| 0x2D810 | 186384 | orcFailed |
| 0x2D81A | 186394 | get_IsInstalled |
| 0x2D82A | 186410 | IsWingetInstalled |
| 0x2D83C | 186428 | get_InvokeRequired |
| 0x2D84F | 186447 | get_RebootRequired |
| 0x2D862 | 186466 | chkDonated |
| 0x2D86D | 186477 | HasDonated |
| 0x2D878 | 186488 | donated |
| 0x2D880 | 186496 | UpdateUiContextForNoneSelected |
| 0x2D89F | 186527 | btnRemoveSelected |
| 0x2D8B1 | 186545 | put_Completed |
| 0x2D8BF | 186559 | AwaitUnsafeOnCompleted |
| 0x2D8D6 | 186582 | get_IsCompleted |
| 0x2D8E6 | 186598 | orcNotStarted |
| 0x2D8F4 | 186612 | orcAborted |
| 0x2D8FF | 186623 | add_ErrorDataReceived |
| 0x2D915 | 186645 | add_OutputDataReceived |
| 0x2D92C | 186668 | Synchronized |
| 0x2D947 | 186695 | <UseConsole>k__BackingField |
| 0x2D963 | 186723 | <Title>k__BackingField |
| 0x2D97A | 186746 | <Feature>k__BackingField |
| 0x2D993 | 186771 | <Value>k__BackingField |
| 0x2D9AA | 186794 | <IsActive>k__BackingField |
| 0x2D9C4 | 186820 | <UseLog>k__BackingField |
| 0x2D9DC | 186844 | <IconGlyph>k__BackingField |
| 0x2D9F7 | 186871 | <LastExePath>k__BackingField |
| 0x2DA14 | 186900 | <LastIsoPath>k__BackingField |
| 0x2DA31 | 186929 | <ScriptPath>k__BackingField |
| 0x2DA4D | 186957 | <PoweredByUrl>k__BackingField |
| 0x2DA6B | 186987 | <Children>k__BackingField |
| 0x2DA85 | 187013 | <Icon>k__BackingField |
| 0x2DA9B | 187035 | <Description>k__BackingField |
| 0x2DAB8 | 187064 | <InputPlaceholder>k__BackingField |
| 0x2DADA | 187098 | <AllFeatures>k__BackingField |
| 0x2DAF7 | 187127 | <SearchTags>k__BackingField |
| 0x2DB13 | 187155 | <Options>k__BackingField |
| 0x2DB2C | 187180 | <SupportsInput>k__BackingField |
| 0x2DB4B | 187211 | <Text>k__BackingField |
| 0x2DB61 | 187233 | <LabelText>k__BackingField |
| 0x2DB7C | 187260 | <PoweredByText>k__BackingField |
| 0x2DB9B | 187291 | <CurrentView>k__BackingField |
| 0x2DBB8 | 187320 | <CurrentKey>k__BackingField |
| 0x2DBD4 | 187348 | <Category>k__BackingField |
| 0x2DBEE | 187374 | get_Build |
| 0x2DBF8 | 187384 | ReadToEnd |
| 0x2DC07 | 187399 | DataGridViewBand |
| 0x2DC18 | 187416 | get_Hand |
| 0x2DC21 | 187425 | RunCommand |
| 0x2DC2C | 187436 | RunWingetCommand |
| 0x2DC3D | 187453 | command |
| 0x2DC45 | 187461 | UpdateBadgeLegend |
| 0x2DC57 | 187479 | Append |
| 0x2DC5E | 187486 | RegistryValueKind |
| 0x2DC70 | 187504 | btnUIBackground |
| 0x2DC80 | 187520 | ChooseBackground |
| 0x2DC91 | 187537 | LoadOrAskBackground |
| 0x2DCA5 | 187557 | ApplyBackground |
| 0x2DCB5 | 187573 | Clipboard |
| 0x2DCBF | 187583 | rbWizard |
| 0x2DCC8 | 187592 | ResetWizard |
| 0x2DCD4 | 187604 | btnCreateAccountWizard |
| 0x2DCEB | 187627 | textPassword |