7e88f784bdc570b148d7541c64849426

Summary

Architecture IMAGE_FILE_MACHINE_I386
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2010-Nov-20 12:08:06

Plugin Output

Malicious The PE contains functions mostly used by malware. Functions related to the privilege level:
  • CheckTokenMembership
  • OpenProcessToken
Safe VirusTotal score: 0/70 (Scanned on 2019-06-11 20:13:18) All the AVs think this file is safe.

Hashes

MD5 7e88f784bdc570b148d7541c64849426
SHA1 a6cdd60da701e993b772f329080d330498a3735a
SHA256 954f5f27ba2d777fbfbabde75f24005a46980d3a91f06b04eb6c7c987bf6f538
SHA3 570b02436f0722736b1b84702b57a52e8ca2f235d45730e7c0e104ae51180437
SSDeep 1536:Qqz8d8WMkIyeIpJDkoRnV7TtRwO8NXdxkJDrVA2SbbkvE3YA+au9xoIeO/:QSkIyzaoTDwXCA2ozYaExeO
Imports Hash d2b2a787ca75c4549867be173cd4d98d

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0xf0

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_I386
NumberofSections 4
TimeDateStamp 2010-Nov-20 12:08:06
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xe0
Characteristics IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_EXECUTABLE_IMAGE

Image Optional Header

Magic PE32
LinkerVersion 9.1
SizeOfCode 0x67800
SizeOfInitializedData 0x5e600
SizeOfUninitializedData 0
AddressOfEntryPoint 0x0001D711 (Section: .text)
BaseOfCode 0x1000
BaseOfData 0x64000
ImageBase 0x75a60000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.1
ImageVersion 6.1
SubsystemVersion 6.1
Win32VersionValue 0
SizeOfImage 0xc9000
SizeOfHeaders 0x400
Checksum 0xcea65
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
SizeofStackReserve 0x40000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 13fff542afcfa36212d55e42992fe417
SHA1 2a42ae4ecc7f37ed5d6667a9742baf1816496aca
SHA256 5d74b18a9b565e126f539663fc650758ba7f860e301bd22c6a27ba8c07b9d1a2
SHA3 6f13cbd58a099aeeafaeb6988c69a71bad804b16f8c7baefb69ccfe02b4c9b18
VirtualSize 0x676ef
VirtualAddress 0x1000
SizeOfRawData 0x67800
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 2.13295

.data

MD5 316229295b36e3baf0c049ab89f3f0fe
SHA1 1957ee4b79a3ca77f6b21a1aa814370fbf0c3555
SHA256 c7539d43b0b54fff6402bfeaa57f5e8b0b4e3a1a7d0447356e60356d704eec97
SHA3 9b7786cd6a604dacd47678ecee603913d2dffa580c0705ed1a40d14d137aad36
VirtualSize 0xf64
VirtualAddress 0x69000
SizeOfRawData 0x1000
PointerToRawData 0x67c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 2.40728

.rsrc

MD5 57612fda511abd5182b224ff802890ad
SHA1 158dd08a87b6a719848155a6d6dcbc1c91935169
SHA256 096267dab1903678743727469211491d6c95adbba8df91d8b3f4ef024921d3c8
SHA3 83747b29197d27ceec774c12780d86221e56b4c0479fc7468c27c10f36d85dc1
VirtualSize 0x5a280
VirtualAddress 0x6a000
SizeOfRawData 0x5a400
PointerToRawData 0x68c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 0.0515918

.reloc

MD5 430077b0065cb075748316c2bc3cb8c5
SHA1 157ef2a45f8abde1f74b3374e0c77d3e99e5be58
SHA256 59ec91dcb7dc65b5f928091cb0e25c26729a0a4453ebe7d8244fc1ceae7d9712
SHA3 cf088c3f496ba93905f7ac57ec20dcf9a463ad309e64479037536b980e84c8d0
VirtualSize 0x3078
VirtualAddress 0xc5000
SizeOfRawData 0x3200
PointerToRawData 0xc3000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 0

Imports

ntdll.dll RtlUnwind
RtlSetLastWin32Error
NlsAnsiCodePage
_aulldvrm
_wtoi
_alldiv
wcsncpy_s
iswspace
qsort
LdrFlushAlternateResourceModules
RtlCheckRegistryKey
RtlMultiByteToUnicodeSize
RtlPcToFileHeader
wcsrchr
RtlImageNtHeader
NtRaiseHardError
wcsncat_s
RtlIsNameLegalDOS8Dot3
strrchr
sscanf_s
strcpy_s
RtlSizeHeap
RtlGetThreadLangIdByIndex
RtlRunEncodeUnicodeString
RtlRunDecodeUnicodeString
RtlR
#28686
#28714
#28744
#28758
#28786
#28812
#28836
#28860
#28880
#28902
#28928
#28950
#28960
#28980
#28990
#29018
#29050
#29078
#29106
#29126
#29138
#29150
#29178
#29212
#29232
#29246
#29262
#29282
#29306
#29316
#29332
#29346
#29392
#29428
#29448
#29480
#29504
#29526
#29550
#29578
#29588
#29630
#29674
#29714
#29744
#29770
#29796
#29822
#29848
#29858
#29868
#29886
#29900
#29922
#29940
#29952
#29964
#29976
#29986
#30004
#30018
#30042
GDI32.dll #30070
#30092
#30106
#30126
#30138
#30152
#30170
#30184
#30200
#30224
#30236
#30252
#30270
#30288
#30298
#30318
#30336
#30348
#30360
#30384
#30408
#30428
#30448
#30468
#30482
#30504
#30520
#30540
#30556
#30576
#30592
#30612
#30624
#30638
#30660
#30684
#30704
#30720
#30736
#30756
#30776
#30792
#30806
#30826
#30844
#30860
#30878
#30896
#30908
#30928
#30946
#30970
#30988
#31008
#31030
#31054
#31064
#31084
#31096
#31110
#31122
#31142
#31162
#31178
#31196
#31208
#31220
#31238
#31264
#31280
#31292
#31312
#31332
#31350
#31368
#31388
#31410
#31432
#31460
#31490
#31502
#31516
#31528
#31540
#31554
#31578
#31600
#31622
#31638
#31656
#31666
#31678
#31690
#31706
#31722
#31742
#31758
#31770
#31784
#31798
#31814
#31828
#31840
#31856
#31872
#31892
#31916
#31932
#31950
#31970
#31996
#32020
#32036
#32050
#32066
#32090
#32104
KERNEL32.dll #32114
#32130
#32154
#32178
#32188
#32204
#32216
#32230
#32242
#32260
#32282
#32302
#32326
#32354
#32372
#32388
#32408
#32426
#32444
#32472
#32492
#32514
#32528
#32556
#32574
#32592
#32612
#32632
#32646
#32666
#32682
#32698
#32712
#32720
#32738
#32756
#0
#18
#34
#48
#60
#74
#98
#116
#146
#158
#170
#186
#202
#218
#242
#266
#290
#302
#322
#334
#350
#368
#386
#396
#420
#442
#472
#502
#520
#536
#556
#572
#588
#608
#634
#666
#684
#698
#714
#736
#752
#778
#806
#822
#834
#852
#874
#894
#912
#936
#954
#980
#1000
#1028
#1058
#1076
#1104
#1122
#1136
#1154
#1172
#1194
#1210
#1224
#1238
#1250
#1270
#1284
#1298
#1312
#1330
#1346
#1368
#1390
#1412
#1434
#1448
#1466
#1480
#1502
#1518
#1530
#1546
#1568
#1582
#1610
#1622
#1636
#1648
ADVAPI32.dll (delay-loaded) CheckTokenMembership
ReportEventW
RegisterEventSourceW
OpenProcessToken
OpenThreadToken
GetTokenInformation
DeregisterEventSource

Delayed Imports

Attributes 0x1
Name ADVAPI32.dll
ModuleHandle 0x69adc
DelayImportAddressTable 0x69000
DelayImportNameTable 0x6668c
BoundDelayImportTable 0
UnloadDelayImportTable 0
TimeStamp 1970-Jan-01 00:00:00

Ordinal 1500
Address 0x65017

(#2)

Ordinal 1501
Address 0x6502b

ActivateKeyboardLayout

Ordinal 1502
Address 0x8203

AddClipboardFormatListener

Ordinal 1503
Address 0x649a5

AdjustWindowRect

Ordinal 1504
Address 0x270a4

AdjustWindowRectEx

Ordinal 1505
Address 0x148ba

AlignRects

Ordinal 1506
Address 0x65598

AllowForegroundActivation

Ordinal 1507
Address 0x4c292

AllowSetForegroundWindow

Ordinal 1508
Address 0x7b60

AnimateWindow

Ordinal 1509
Address 0x30620

AnyPopup

Ordinal 1510
Address 0x627ee

AppendMenuA

Ordinal 1511
Address 0x63aa3

AppendMenuW

Ordinal 1512
Address 0x1175c

ArrangeIconicWindows

Ordinal 1513
Address 0x312de

AttachThreadInput

Ordinal 1514
Address 0x36b54

BeginDeferWindowPos

Ordinal 1515
Address 0xa6a6

BeginPaint

Ordinal 1516
Address 0x15d14

BlockInput

Ordinal 1517
Address 0x36a99

BringWindowToTop

Ordinal 1518
Address 0x3040b

BroadcastSystemMessage

Ordinal 1519
Address 0x63b4a

BroadcastSystemMessageA

Ordinal 1520
Address 0x63b4a

BroadcastSystemMessageExA

Ordinal 1521
Address 0x63b23

BroadcastSystemMessageExW

Ordinal 1522
Address 0x4255

BroadcastSystemMessageW

Ordinal 1523
Address 0x7cb8

BuildReasonArray

Ordinal 1524
Address 0x6042d

CalcMenuBar

Ordinal 1525
Address 0x14d55

CalculatePopupWindowPosition

Ordinal 1526
Address 0x1ee86

CallMsgFilter

Ordinal 1527
Address 0x63eec

CallMsgFilterA

Ordinal 1528
Address 0x63eec

CallMsgFilterW

Ordinal 1529
Address 0x140c2

CallNextHookEx

Ordinal 1530
Address 0xabe1

CallWindowProcA

Ordinal 1531
Address 0x32bd3

CallWindowProcW

Ordinal 1532
Address 0x11b3c

CancelShutdown

Ordinal 1533
Address 0x4fd1b

CascadeChildWindows

Ordinal 1534
Address 0x4beb2

CascadeWindows

Ordinal 1535
Address 0x5b931

ChangeClipboardChain

Ordinal 1536
Address 0x3147c

ChangeDisplaySettingsA

Ordinal 1537
Address 0x64102

ChangeDisplaySettingsExA

Ordinal 1538
Address 0x2627a

ChangeDisplaySettingsExW

Ordinal 1539
Address 0x4fa39

ChangeDisplaySettingsW

Ordinal 1540
Address 0x26181

ChangeMenuA

Ordinal 1541
Address 0x5bca1

ChangeMenuW

Ordinal 1542
Address 0x5bbfc

ChangeWindowMessageFilter

Ordinal 1543
Address 0xe248

ChangeWindowMessageFilterEx

Ordinal 1544
Address 0x124c8

CharLowerA

Ordinal 1545
Address 0x13bf0

CharLowerBuffA

Ordinal 1546
Address 0x13b3a

CharLowerBuffW

Ordinal 1547
Address 0x13afe

CharLowerW

Ordinal 1548
Address 0xba8a

CharNextA

Ordinal 1549
Address 0xc861

(#3)

Ordinal 1550
Address 0x60717

(#4)

Ordinal 1551
Address 0x607a3

(#5)

Ordinal 1552
Address 0x6076b

(#6)

Ordinal 1553
Address 0x26031

(#7)

Ordinal 1554
Address 0x25fe2

(#8)

Ordinal 1555
Address 0x607c1

(#9)

Ordinal 1556
Address 0x607f7

CharNextExA

Ordinal 1557
Address 0x6205f

CharNextW

Ordinal 1558
Address 0x10be6

CharPrevA

Ordinal 1559
Address 0xc8be

CharPrevExA

Ordinal 1560
Address 0x62096

CharPrevW

Ordinal 1561
Address 0xc816

CharToOemA

Ordinal 1562
Address 0x98a7

CharToOemBuffA

Ordinal 1563
Address 0x624b

CharToOemBuffW

Ordinal 1564
Address 0x5f11f

CharToOemW

Ordinal 1565
Address 0x5f0c8

CharUpperA

Ordinal 1566
Address 0x1ecae

CharUpperBuffA

Ordinal 1567
Address 0x1ecef

CharUpperBuffW

Ordinal 1568
Address 0x1ebd5

CharUpperW

Ordinal 1569
Address 0x1e981

CheckDesktopByThreadId

Ordinal 1570
Address 0x8d3d

CheckDlgButton

Ordinal 1571
Address 0x2ebfe

CheckMenuItem

Ordinal 1572
Address 0x2ee7c

CheckMenuRadioItem

Ordinal 1573
Address 0x225df

CheckRadioButton

Ordinal 1574
Address 0x2ecf5

CheckWindowThreadDesktop

Ordinal 1575
Address 0x64a1d

ChildWindowFromPoint

Ordinal 1576
Address 0x4b6aa

ChildWindowFromPointEx

Ordinal 1577
Address 0x2f624

CliImmSetHotKey

Ordinal 1578
Address 0x491ed

ClientThreadSetup

Ordinal 1579
Address 0x1d90b

ClientToScreen

Ordinal 1580
Address 0x11316

ClipCursor

Ordinal 1581
Address 0x1f8f7

CloseClipboard

Ordinal 1582
Address 0x3446c

CloseDesktop

Ordinal 1583
Address 0xc4ce

CloseGestureInfoHandle

Ordinal 1584
Address 0x4b38a

CloseTouchInputHandle

Ordinal 1585
Address 0x4d42e

CloseWindow

Ordinal 1586
Address 0x4bed3

CloseWindowStation

Ordinal 1587
Address 0xc6f2

ConsoleControl

Ordinal 1588
Address 0x1ced1

ControlMagnification

Ordinal 1589
Address 0x2688c

CopyAcceleratorTableA

Ordinal 1590
Address 0x2af0b

CopyAcceleratorTableW

Ordinal 1591
Address 0x33412

CopyIcon

Ordinal 1592
Address 0x34119

CopyImage

Ordinal 1593
Address 0x87a6

CopyRect

Ordinal 1594
Address 0x14ad9

CountClipboardFormats

Ordinal 1595
Address 0x3470a

CreateAcceleratorTableA

Ordinal 1596
Address 0x26e79

CreateAcceleratorTableW

Ordinal 1597
Address 0x9794

CreateCaret

Ordinal 1598
Address 0x36232

CreateCursor

Ordinal 1599
Address 0x24489

CreateDesktopA

Ordinal 1600
Address 0x4bd9e

CreateDesktopExA

Ordinal 1601
Address 0x4bcac

CreateDesktopExW

Ordinal 1602
Address 0x40f8

CreateDesktopW

Ordinal 1603
Address 0x40cf

CreateDialogIndirectParamA

Ordinal 1604
Address 0x2721d

CreateDialogIndirectParamAorW

Ordinal 1605
Address 0x35327

CreateDialogIndirectParamW

Ordinal 1606
Address 0x2ea10

CreateDialogParamA

Ordinal 1607
Address 0x21f42

CreateDialogParamW

Ordinal 1608
Address 0x35630

CreateIcon

Ordinal 1609
Address 0x27510

CreateIconFromResource

Ordinal 1610
Address 0x4d2b6

CreateIconFromResourceEx

Ordinal 1611
Address 0xde11

CreateIconIndirect

Ordinal 1612
Address 0xa7ab

CreateMDIWindowA

Ordinal 1613
Address 0x28714

CreateMDIWindowW

Ordinal 1614
Address 0x267cb

CreateMenu

Ordinal 1615
Address 0x36aed

CreatePopupMenu

Ordinal 1616
Address 0x867c

CreateSystemThreads

Ordinal 1617
Address 0x62828

CreateWindowExA

Ordinal 1618
Address 0xbf40

CreateWindowExW

Ordinal 1619
Address 0xec7c

CreateWindowStationA

Ordinal 1620
Address 0x4c8f4

CreateWindowStationW

Ordinal 1621
Address 0x164c

CsrBroadcastSystemMessageExW

Ordinal 1622
Address 0x42b4

CtxInitUser32

Ordinal 1623
Address 0x1c4f

DdeAbandonTransaction

Ordinal 1624
Address 0x63934

DdeAccessData

Ordinal 1625
Address 0x57291

DdeAddData

Ordinal 1626
Address 0x575f5

DdeClientTransaction

Ordinal 1627
Address 0x6323c

DdeCmpStringHandles

Ordinal 1628
Address 0x57a4b

DdeConnect

Ordinal 1629
Address 0x4eb5b

DdeConnectList

Ordinal 1630
Address 0x4ee71

DdeCreateDataHandle

Ordinal 1631
Address 0x25d42

DdeCreateStringHandleA

Ordinal 1632
Address 0x269ec

DdeCreateStringHandleW

Ordinal 1633
Address 0x5e1a

DdeDisconnect

Ordinal 1634
Address 0x4ed59

DdeDisconnectList

Ordinal 1635
Address 0x4edd0

DdeEnableCallback

Ordinal 1636
Address 0x4a70a

DdeFreeDataHandle

Ordinal 1637
Address 0x25ddc

DdeFreeStringHandle

Ordinal 1638
Address 0x32d00

DdeGetData

Ordinal 1639
Address 0x24d50

DdeGetLastError

Ordinal 1640
Address 0x50f78

DdeGetQualityOfService

Ordinal 1641
Address 0x4e5b9

DdeImpersonateClient

Ordinal 1642
Address 0x50fb9

DdeInitializeA

Ordinal 1643
Address 0x269ac

DdeInitializeW

Ordinal 1644
Address 0x5df2

DdeKeepStringHandle

Ordinal 1645
Address 0x57b0b

DdeNameService

Ordinal 1646
Address 0x6a01

DdePostAdvise

Ordinal 1647
Address 0x62f2d

DdeQueryConvInfo

Ordinal 1648
Address 0x63756

DdeQueryNextServer

Ordinal 1649
Address 0x4e6f8

DdeQueryStringA

Ordinal 1650
Address 0x57b98

DdeQueryStringW

Ordinal 1651
Address 0x25aef

DdeReconnect

Ordinal 1652
Address 0x4ec06

DdeSetQualityOfService

Ordinal 1653
Address 0x4e5b9

DdeSetUserHandle

Ordinal 1654
Address 0x638d9

DdeUnaccessData

Ordinal 1655
Address 0x57303

DdeUninitialize

Ordinal 1656
Address 0x32bf7

DefDlgProcA

Ordinal 1657
Address 0x271e4

DefDlgProcW

Ordinal 1658
Address 0x35bc1

DefFrameProcA

Ordinal 1659
Address 0x325b7

DefFrameProcW

Ordinal 1660
Address 0x3152b

DefMDIChildProcA

Ordinal 1661
Address 0x325db

DefMDIChildProcW

Ordinal 1662
Address 0x3150a

DefRawInputProc

Ordinal 1663
Address 0x4cc17

DefWindowProcA

Ordinal 1664
Address 0xbb1c

DefWindowProcW

Ordinal 1665
Address 0x1507d

DeferWindowPos

Ordinal 1666
Address 0xa6c8

DeleteMenu

Ordinal 1667
Address 0x83c2

DeregisterShellHookWindow

Ordinal 1668
Address 0x23c5e

DestroyAcceleratorTable

Ordinal 1669
Address 0x362e5

DestroyCaret

Ordinal 1670
Address 0x363c0

DestroyCursor

Ordinal 1671
Address 0xa77f

DestroyIcon

Ordinal 1672
Address 0xa77f

DestroyMenu

Ordinal 1673
Address 0x87f7

DestroyReasons

Ordinal 1674
Address 0x60071

DestroyWindow

Ordinal 1675
Address 0xb2f4

DeviceEventWorker

Ordinal 1676
Address 0x41bf

DialogBoxIndirectParamA

Ordinal 1677
Address 0x4d274

DialogBoxIndirectParamAorW

Ordinal 1678
Address 0x33b40

DialogBoxIndirectParamW

Ordinal 1679
Address 0x33b7f

DialogBoxParamA

Ordinal 1680
Address 0x4cf42

DialogBoxParamW

Ordinal 1681
Address 0x23b9b

DisableProcessWindowsGhosting

Ordinal 1682
Address 0x59bd

DispatchMessageA

Ordinal 1683
Address 0x12e32

DispatchMessageW

Ordinal 1684
Address 0x1cc61

DisplayConfigGetDeviceInfo

Ordinal 1685
Address 0x1f026

DisplayConfigSetDeviceInfo

Ordinal 1686
Address 0x648a5

DisplayExitWindowsWarnings

Ordinal 1687
Address 0x4ff97

DlgDirListA

Ordinal 1688
Address 0x59eab

DlgDirListComboBoxA

Ordinal 1689
Address 0x4e1ac

DlgDirListComboBoxW

Ordinal 1690
Address 0x4e239

DlgDirListW

Ordinal 1691
Address 0x59f39

DlgDirSelectComboBoxExA

Ordinal 1692
Address 0x4e26a

DlgDirSelectComboBoxExW

Ordinal 1693
Address 0x4e154

DlgDirSelectExA

Ordinal 1694
Address 0x5a0fc

DlgDirSelectExW

Ordinal 1695
Address 0x5a162

DoSoundConnect

Ordinal 1696
Address 0x3e69

DoSoundDisconnect

Ordinal 1697
Address 0x64a31

DragDetect

Ordinal 1698
Address 0x64a43

DragObject

Ordinal 1699
Address 0x64a57

DrawAnimatedRects

Ordinal 1700
Address 0x64a6b

DrawCaption

Ordinal 1701
Address 0x5ee36

DrawCaptionTempA

Ordinal 1702
Address 0x63fbe

DrawCaptionTempW

Ordinal 1703
Address 0x4fa79

DrawEdge

Ordinal 1704
Address 0x1311a

DrawFocusRect

Ordinal 1705
Address 0x33091

DrawFrame

Ordinal 1706
Address 0x1ee9a

DrawFrameControl

Ordinal 1707
Address 0x2b4f9

DrawIcon

Ordinal 1708
Address 0x6427

DrawIconEx

Ordinal 1709
Address 0x12c32

DrawMenuBar

Ordinal 1710
Address 0x315ae

DrawMenuBarTemp

Ordinal 1711
Address 0x5bd65

DrawStateA

Ordinal 1712
Address 0x5c1a5

DrawStateW

Ordinal 1713
Address 0x33588

DrawTextA

Ordinal 1714
Address 0x2ae29

DrawTextExA

Ordinal 1715
Address 0x2ae60

DrawTextExW

Ordinal 1716
Address 0x15894

DrawTextW

Ordinal 1717
Address 0x15b6a

DwmGetDxSharedSurface

Ordinal 1718
Address 0x263e6

DwmStartRedirection

Ordinal 1719
Address 0x4fba

DwmStopRedirection

Ordinal 1720
Address 0x261a9

EditWndProc

Ordinal 1721
Address 0x2b6cb

EmptyClipboard

Ordinal 1722
Address 0x2290c

EnableMenuItem

Ordinal 1723
Address 0x343bc

EnableScrollBar

Ordinal 1724
Address 0x319ce

EnableWindow

Ordinal 1725
Address 0x8d02

EndDeferWindowPos

Ordinal 1726
Address 0xa67a

EndDialog

Ordinal 1727
Address 0x33ba3

EndMenu

Ordinal 1728
Address 0x8302

EndPaint

Ordinal 1729
Address 0x15d42

EndTask

Ordinal 1730
Address 0x4fd66

EnterReaderModeHelper

Ordinal 1731
Address 0x5fa1b

EnumChildWindows

Ordinal 1732
Address 0x12948

EnumClipboardFormats

Ordinal 1733
Address 0x347ec

EnumDesktopWindows

Ordinal 1734
Address 0xb4c7

EnumDesktopsA

Ordinal 1735
Address 0x6e80

EnumDesktopsW

Ordinal 1736
Address 0xc698

EnumDisplayDevicesA

Ordinal 1737
Address 0xc204

EnumDisplayDevicesW

Ordinal 1738
Address 0x5b66

EnumDisplayMonitors

Ordinal 1739
Address 0x134a3

EnumDisplaySettingsA

Ordinal 1740
Address 0x264df

EnumDisplaySettingsExA

Ordinal 1741
Address 0x2650b

EnumDisplaySettingsExW

Ordinal 1742
Address 0x113cc

EnumDisplaySettingsW

Ordinal 1743
Address 0x114c7

EnumPropsA

Ordinal 1744
Address 0x4b056

EnumPropsExA

Ordinal 1745
Address 0x4b090

EnumPropsExW

Ordinal 1746
Address 0x4b0ae

EnumPropsW

Ordinal 1747
Address 0x4b073

EnumThreadWindows

Ordinal 1748
Address 0xb712

EnumWindowStationsA

Ordinal 1749
Address 0x6e63

EnumWindowStationsW

Ordinal 1750
Address 0x37178

EnumWindows

Ordinal 1751
Address 0x1375b

EqualRect

Ordinal 1752
Address 0x149ba

ExcludeUpdateRgn

Ordinal 1753
Address 0x2e947

ExitWindowsEx

Ordinal 1754
Address 0x506c7

FillRect

Ordinal 1755
Address 0x15d56

FindWindowA

Ordinal 1756
Address 0x8ff3

FindWindowExA

Ordinal 1757
Address 0x6f69

FindWindowExW

Ordinal 1758
Address 0x3712b

FindWindowW

Ordinal 1759
Address 0xae0d

FlashWindow

Ordinal 1760
Address 0x32ef3

FlashWindowEx

Ordinal 1761
Address 0x32f32

FrameRect

Ordinal 1762
Address 0x30eb0

FreeDDElParam

Ordinal 1763
Address 0x24c3c

FrostCrashedWindow

Ordinal 1764
Address 0x64acf

GetActiveWindow

Ordinal 1765
Address 0x33b33

GetAltTabInfo

Ordinal 1766
Address 0x640de

GetAltTabInfoA

Ordinal 1767
Address 0x640de

GetAltTabInfoW

Ordinal 1768
Address 0x4faf3

GetAncestor

Ordinal 1769
Address 0x12a9d

GetAppCompatFlags2

Ordinal 1770
Address 0x1d734

GetAppCompatFlags

Ordinal 1771
Address 0x111ff

GetAsyncKeyState

Ordinal 1772
Address 0xa256

GetCapture

Ordinal 1773
Address 0x9dc7

GetCaretBlinkTime

Ordinal 1774
Address 0x10d01

GetCaretPos

Ordinal 1775
Address 0x333fe

GetClassInfoA

Ordinal 1776
Address 0x7158

GetClassInfoExA

Ordinal 1777
Address 0x6fd9

GetClassInfoExW

Ordinal 1778
Address 0x1095e

GetClassInfoW

Ordinal 1779
Address 0x10ac2

GetClassLongA

Ordinal 1780
Address 0x3119f

GetClassLongW

Ordinal 1781
Address 0x13860

GetClassNameA

Ordinal 1782
Address 0x32445

GetClassNameW

Ordinal 1783
Address 0x12a29

GetClassWord

Ordinal 1784
Address 0x34076

GetClientRect

Ordinal 1785
Address 0x154dd

GetClipCursor

Ordinal 1786
Address 0x64b09

GetClipboardData

Ordinal 1787
Address 0x22ba7

GetClipboardFormatNameA

Ordinal 1788
Address 0x2700a

GetClipboardFormatNameW

Ordinal 1789
Address 0x25fd2

GetClipboardOwner

Ordinal 1790
Address 0x34525

GetClipboardSequenceNumber

Ordinal 1791
Address 0x34513

GetClipboardViewer

Ordinal 1792
Address 0x64af7

GetComboBoxInfo

Ordinal 1793
Address 0x33466

GetCursor

Ordinal 1794
Address 0x36408

GetCursorFrameInfo

Ordinal 1795
Address 0x3266e

GetCursorInfo

Ordinal 1796
Address 0x64b31

GetCursorPos

Ordinal 1797
Address 0xa4b3

GetDC

Ordinal 1798
Address 0x1544c

GetDCEx

Ordinal 1799
Address 0x12d57

GetDesktopWindow

Ordinal 1800
Address 0x101a9

GetDialogBaseUnits

Ordinal 1801
Address 0x3351c

GetDisplayConfigBufferSizes

Ordinal 1802
Address 0x4fce

GetDlgCtrlID

Ordinal 1803
Address 0xb4e8

GetDlgItem

Ordinal 1804
Address 0x342bb

GetDlgItemInt

Ordinal 1805
Address 0x2ed56

GetDlgItemTextA

Ordinal 1806
Address 0x63d14

GetDlgItemTextW

Ordinal 1807
Address 0x2ecbc

GetDoubleClickTime

Ordinal 1808
Address 0xade0

GetFocus

Ordinal 1809
Address 0x13a34

GetForegroundWindow

Ordinal 1810
Address 0x1335d

GetGUIThreadInfo

Ordinal 1811
Address 0x1237e

GetGestureConfig

Ordinal 1812
Address 0x650a3

GetGestureExtraArgs

Ordinal 1813
Address 0x4b376

GetGestureInfo

Ordinal 1814
Address 0x4b30d

GetGuiResources

Ordinal 1815
Address 0x64b45

GetIconInfo

Ordinal 1816
Address 0x12989

GetIconInfoExA

Ordinal 1817
Address 0x4d067

GetIconInfoExW

Ordinal 1818
Address 0x4cfae

GetInputDesktop

Ordinal 1819
Address 0x4bf18

GetInputLocaleInfo

Ordinal 1820
Address 0x64b6d

GetInputState

Ordinal 1821
Address 0x31c5f

GetInternalWindowPos

Ordinal 1822
Address 0x64b81

GetKBCodePage

Ordinal 1823
Address 0x4c2ba

GetKeyNameTextA

Ordinal 1824
Address 0x63d4d

GetKeyNameTextW

Ordinal 1825
Address 0x4fa03

GetKeyState

Ordinal 1826
Address 0x12b4d

GetKeyboardLayout

Ordinal 1827
Address 0x13800

GetKeyboardLayoutList

Ordinal 1828
Address 0x935c

GetKeyboardLayoutNameA

Ordinal 1829
Address 0x63db7

GetKeyboardLayoutNameW

Ordinal 1830
Address 0x4fa13

GetKeyboardState

Ordinal 1831
Address 0x36946

GetKeyboardType

Ordinal 1832
Address 0x4bfee

GetLastActivePopup

Ordinal 1833
Address 0x36894

GetLastInputInfo

Ordinal 1834
Address 0x13834

GetLayeredWindowAttributes

Ordinal 1835
Address 0x64f53

GetListBoxInfo

Ordinal 1836
Address 0x64bbd

GetMagnificationDesktopColorEffect

Ordinal 1837
Address 0x5ab99

GetMagnificationDesktopMagnification

Ordinal 1838
Address 0x5ac32

GetMagnificationLensCtxInformation

Ordinal 1839
Address 0x2690b

GetMenu

Ordinal 1840
Address 0x36b68

GetMenuBarInfo

Ordinal 1841
Address 0x36fc7

GetMenuCheckMarkDimensions

Ordinal 1842
Address 0x5bd9b

GetMenuContextHelpId

Ordinal 1843
Address 0x5bd46

GetMenuDefaultItem

Ordinal 1844
Address 0x8710

GetMenuInfo

Ordinal 1845
Address 0x345b1

GetMenuItemCount

Ordinal 1846
Address 0xae39

GetMenuItemID

Ordinal 1847
Address 0x9cd4

GetMenuItemInfoA

Ordinal 1848
Address 0x856a

GetMenuItemInfoW

Ordinal 1849
Address 0xaefa

GetMenuItemRect

Ordinal 1850
Address 0x222c5

GetMenuState

Ordinal 1851
Address 0x367d2

GetMenuStringA

Ordinal 1852
Address 0x63a16

GetMenuStringW

Ordinal 1853
Address 0x36528

GetMessageA

Ordinal 1854
Address 0x11899

GetMessageExtraInfo

Ordinal 1855
Address 0xb705

GetMessagePos

Ordinal 1856
Address 0x36703

GetMessageTime

Ordinal 1857
Address 0x34231

GetMessageW

Ordinal 1858
Address 0x1cde8

GetMonitorInfoA

Ordinal 1859
Address 0xc34e

GetMonitorInfoW

Ordinal 1860
Address 0x133e7

GetMouseMovePointsEx

Ordinal 1861
Address 0x64be5

GetNextDlgGroupItem

Ordinal 1862
Address 0x515f9

GetNextDlgTabItem

Ordinal 1863
Address 0x3625b

GetOpenClipboardWindow

Ordinal 1864
Address 0x3480b

GetParent

Ordinal 1865
Address 0x16029

GetPhysicalCursorPos

Ordinal 1866
Address 0x36ebd

GetPriorityClipboardFormat

Ordinal 1867
Address 0x64bf9

GetProcessDefaultLayout

Ordinal 1868
Address 0x4e28

GetProcessWindowStation

Ordinal 1869
Address 0xdfdc

GetProgmanWindow

Ordinal 1870
Address 0x4c0cd

GetPropA

Ordinal 1871
Address 0x32b61

GetPropW

Ordinal 1872
Address 0x15bbe

GetQueueStatus

Ordinal 1873
Address 0xb23d

GetRawInputBuffer

Ordinal 1874
Address 0x57190

GetRawInputData

Ordinal 1875
Address 0x64c21

GetRawInputDeviceInfoA

Ordinal 1876
Address 0x63b99

GetRawInputDeviceInfoW

Ordinal 1877
Address 0x4ca06

GetRawInputDeviceList

Ordinal 1878
Address 0x64c49

GetReasonTitleFromReasonCode

Ordinal 1879
Address 0x605f9

GetRegisteredRawInputDevices

Ordinal 1880
Address 0x64c5d

GetScrollBarInfo

Ordinal 1881
Address 0x14e11

GetScrollInfo

Ordinal 1882
Address 0x12da3

GetScrollPos

Ordinal 1883
Address 0x30e43

GetScrollRange

Ordinal 1884
Address 0x3045a

GetSendMessageReceiver

Ordinal 1885
Address 0x4c2c5

GetShellWindow

Ordinal 1886
Address 0x12fcb

GetSubMenu

Ordinal 1887
Address 0x9c19

GetSysColor

Ordinal 1888
Address 0x1db7a

GetSysColorBrush

Ordinal 1889
Address 0xf1ed

GetSystemMenu

Ordinal 1890
Address 0xfd8b

GetSystemMetrics

Ordinal 1891
Address 0x167cf

GetTabbedTextExtentA

Ordinal 1892
Address 0x50d14

GetTabbedTextExtentW

Ordinal 1893
Address 0x50cea

GetTaskmanWindow

Ordinal 1894
Address 0x4c122

GetThreadDesktop

Ordinal 1895
Address 0x1db66

GetTitleBarInfo

Ordinal 1896
Address 0x14d41

GetTopLevelWindow

Ordinal 1897
Address 0x64c71

GetTopWindow

Ordinal 1898
Address 0x324d9

GetTouchInputInfo

Ordinal 1899
Address 0x4d6d3

GetUpdateRect

Ordinal 1900
Address 0xa575

GetUpdateRgn

Ordinal 1901
Address 0x31c07

GetUpdatedClipboardFormats

Ordinal 1902
Address 0x64c85

GetUserObjectInformationA

Ordinal 1903
Address 0x71b8

GetUserObjectInformationW

Ordinal 1904
Address 0xe355

GetUserObjectSecurity

Ordinal 1905
Address 0x4bb6d

GetWinStationInfo

Ordinal 1906
Address 0x4bba3

GetWindow

Ordinal 1907
Address 0x12780

GetWindowCompositionAttribute

Ordinal 1908
Address 0x12b25

GetWindowCompositionInfo

Ordinal 1909
Address 0x12b39

GetWindowContextHelpId

Ordinal 1910
Address 0x4c15f

GetWindowDC

Ordinal 1911
Address 0x14ab7

GetWindowDisplayAffinity

Ordinal 1912
Address 0x64c99

GetWindowInfo

Ordinal 1913
Address 0x14b5e

GetWindowLongA

Ordinal 1914
Address 0xa95e

GetWindowLongW

Ordinal 1915
Address 0x161b8

GetWindowMinimizeRect

Ordinal 1916
Address 0x9db3

GetWindowModuleFileName

Ordinal 1917
Address 0x63b70

GetWindowModuleFileNameA

Ordinal 1918
Address 0x63b70

GetWindowModuleFileNameW

Ordinal 1919
Address 0x4c9dd

GetWindowPlacement

Ordinal 1920
Address 0x369de

GetWindowRect

Ordinal 1921
Address 0x1558c

GetWindowRgn

Ordinal 1922
Address 0x36415

GetWindowRgnBox

Ordinal 1923
Address 0x128ab

GetWindowRgnEx

Ordinal 1924
Address 0x12bd9

GetWindowTextA

Ordinal 1925
Address 0x6eed

GetWindowTextLengthA

Ordinal 1926
Address 0x26ded

GetWindowTextLengthW

Ordinal 1927
Address 0xa04c

GetWindowTextW

Ordinal 1928
Address 0xb8c5

GetWindowThreadProcessId

Ordinal 1929
Address 0xee32

GetWindowWord

Ordinal 1930
Address 0x304f5

GhostWindowFromHungWindow

Ordinal 1931
Address 0xa561

GrayStringA

Ordinal 1932
Address 0x4bb0d

GrayStringW

Ordinal 1933
Address 0x4bb3d

HideCaret

Ordinal 1934
Address 0x9348

HiliteMenuItem

Ordinal 1935
Address 0x64cc1

HungWindowFromGhostWindow

Ordinal 1936
Address 0x261f5

IMPGetIMEA

Ordinal 1937
Address 0x641d7

IMPGetIMEW

Ordinal 1938
Address 0x641c6

IMPQueryIMEA

Ordinal 1939
Address 0x641f9

IMPQueryIMEW

Ordinal 1940
Address 0x641e8

IMPSetIMEA

Ordinal 1941
Address 0x6421b

IMPSetIMEW

Ordinal 1942
Address 0x6420a

ImpersonateDdeClientWindow

Ordinal 1943
Address 0x64cd5

InSendMessage

Ordinal 1944
Address 0x6fb8

InSendMessageEx

Ordinal 1945
Address 0xb27a

InflateRect

Ordinal 1946
Address 0x154b4

InitializeLpkHooks

Ordinal 1947
Address 0x1d898

InsertMenuA

Ordinal 1948
Address 0x63a60

InsertMenuItemA

Ordinal 1949
Address 0x26d4e

InsertMenuItemW

Ordinal 1950
Address 0xaac5

InsertMenuW

Ordinal 1951
Address 0x869a

InternalGetWindowIcon

Ordinal 1952
Address 0x261d6

InternalGetWindowText

Ordinal 1953
Address 0x14b00

IntersectRect

Ordinal 1954
Address 0x1ce38

InvalidateRect

Ordinal 1955
Address 0x1566d

InvalidateRgn

Ordinal 1956
Address 0x7fa5

InvertRect

Ordinal 1957
Address 0x65719

IsCharAlphaA

Ordinal 1958
Address 0x28776

IsCharAlphaNumericA

Ordinal 1959
Address 0x25f3a

IsCharAlphaNumericW

Ordinal 1960
Address 0x9a7a

IsCharAlphaW

Ordinal 1961
Address 0x3154f

IsCharLowerA

Ordinal 1962
Address 0x620ef

IsCharLowerW

Ordinal 1963
Address 0x2758f

IsCharUpperA

Ordinal 1964
Address 0x62156

IsCharUpperW

Ordinal 1965
Address 0x275c1

IsChild

Ordinal 1966
Address 0x13a83

IsClipboardFormatAvailable

Ordinal 1967
Address 0x344ff

IsDialogMessage

Ordinal 1968
Address 0x22019

IsDialogMessageA

Ordinal 1969
Address 0x22019

IsDialogMessageW

Ordinal 1970
Address 0x14104

IsDlgButtonChecked

Ordinal 1971
Address 0x27135

IsGUIThread

Ordinal 1972
Address 0x6288d

IsHungAppWindow

Ordinal 1973
Address 0x37195

IsIconic

Ordinal 1974
Address 0x14c8e

IsMenu

Ordinal 1975
Address 0x36f0e

IsProcessDPIAware

Ordinal 1976
Address 0x1212e

IsRectEmpty

Ordinal 1977
Address 0x1561e

IsSETEnabled

Ordinal 1978
Address 0x3fbc

IsServerSideWindow

Ordinal 1979
Address 0x129d0

IsThreadDesktopComposited

Ordinal 1980
Address 0x168b3

IsTopLevelWindow

Ordinal 1981
Address 0xa49f

IsTouchWindow

Ordinal 1982
Address 0x65003

IsWinEventHookInstalled

Ordinal 1983
Address 0x33f6d

IsWindow

Ordinal 1984
Address 0x153ba

IsWindowEnabled

Ordinal 1985
Address 0xa9b9

IsWindowInDestroy

Ordinal 1986
Address 0x14b3b

IsWindowRedirectedForPrint

Ordinal 1987
Address 0x12d2b

IsWindowUnicode

Ordinal 1988
Address 0x12f55

IsWindowVisible

Ordinal 1989
Address 0x14d69

IsWow64Message

Ordinal 1990
Address 0x66252

IsZoomed

Ordinal 1991
Address 0x14ce9

KillTimer

Ordinal 1992
Address 0x164f7

LoadAcceleratorsA

Ordinal 1993
Address 0x2ae02

LoadAcceleratorsW

Ordinal 1994
Address 0x976d

LoadBitmapA

Ordinal 1995
Address 0x31608

LoadBitmapW

Ordinal 1996
Address 0x6460

LoadCursorA

Ordinal 1997
Address 0x8328

LoadCursorFromFileA

Ordinal 1998
Address 0x49285

LoadCursorFromFileW

Ordinal 1999
Address 0x49266

(#10)

Ordinal 2000
Address 0x574f

(#11)

Ordinal 2001
Address 0x5ac98

(#12)

Ordinal 2002
Address 0x268b4

LoadCursorW

Ordinal 2003
Address 0xed90

LoadIconA

Ordinal 2004
Address 0x64ad

(#13)

Ordinal 2005
Address 0x3fa8

LoadIconW

Ordinal 2006
Address 0xf142

LoadImageA

Ordinal 2007
Address 0x27779

LoadImageW

Ordinal 2008
Address 0x112eb

LoadKeyboardLayoutA

Ordinal 2009
Address 0x4c892

LoadKeyboardLayoutEx

Ordinal 2010
Address 0x4c84f

LoadKeyboardLayoutW

Ordinal 2011
Address 0x4c874

LoadLocalFonts

Ordinal 2012
Address 0x2227

LoadMenuA

Ordinal 2013
Address 0x1f92c

LoadMenuIndirectA

Ordinal 2014
Address 0xfbf5

LoadMenuIndirectW

Ordinal 2015
Address 0xfbf5

LoadMenuW

Ordinal 2016
Address 0xf214

LoadRemoteFonts

Ordinal 2017
Address 0x3ee7

LoadStringA

Ordinal 2018
Address 0x66a7

LoadStringW

Ordinal 2019
Address 0xdfba

LockSetForegroundWindow

Ordinal 2020
Address 0x369ff

LockWindowStation

Ordinal 2021
Address 0x478a

LockWindowUpdate

Ordinal 2022
Address 0x24a34

LockWorkStation

Ordinal 2023
Address 0x1edff

LogicalToPhysicalPoint

Ordinal 2024
Address 0x36e4f

LookupIconIdFromDirectory

Ordinal 2025
Address 0x4d298

LookupIconIdFromDirectoryEx

Ordinal 2026
Address 0xdebc

MBToWCSEx

Ordinal 2027
Address 0x1e9c4

MB_GetString

Ordinal 2028
Address 0x5c6fc

MapDialogRect

Ordinal 2029
Address 0x3347a

MapVirtualKeyA

Ordinal 2030
Address 0x36038

MapVirtualKeyExA

Ordinal 2031
Address 0x63df8

MapVirtualKeyExW

Ordinal 2032
Address 0x2fb48

MapVirtualKeyW

Ordinal 2033
Address 0x36a7c

MapWindowPoints

Ordinal 2034
Address 0x15caa

MenuItemFromPoint

Ordinal 2035
Address 0x64cfd

MenuWindowProcA

Ordinal 2036
Address 0x4cbbb

MenuWindowProcW

Ordinal 2037
Address 0x4cb77

MessageBeep

Ordinal 2038
Address 0x32939

MessageBoxA

Ordinal 2039
Address 0x5ea11

MessageBoxExA

Ordinal 2040
Address 0x5e9c9

MessageBoxExW

Ordinal 2041
Address 0x5e9ed

MessageBoxIndirectA

Ordinal 2042
Address 0x5e869

MessageBoxIndirectW

Ordinal 2043
Address 0x5e963

MessageBoxTimeoutA

Ordinal 2044
Address 0x5e795

MessageBoxTimeoutW

Ordinal 2045
Address 0x5e70d

MessageBoxW

Ordinal 2046
Address 0x5ea5f

ModifyMenuA

Ordinal 2047
Address 0x63ae0

ModifyMenuW

Ordinal 2048
Address 0x346c7

MonitorFromPoint

Ordinal 2049
Address 0x94c9

MonitorFromRect

Ordinal 2050
Address 0x10ca1

MonitorFromWindow

Ordinal 2051
Address 0x13622

MoveWindow

Ordinal 2052
Address 0x8d29

MsgWaitForMultipleObjects

Ordinal 2053
Address 0x137d8

MsgWaitForMultipleObjectsEx

Ordinal 2054
Address 0xe369

NotifyOverlayWindow

Ordinal 2055
Address 0x4c06c

NotifyWinEvent

Ordinal 2056
Address 0x1cfbe

OemKeyScan

Ordinal 2057
Address 0x5f1ea

OemToCharA

Ordinal 2058
Address 0x5f041

OemToCharBuffA

Ordinal 2059
Address 0x5f080

OemToCharBuffW

Ordinal 2060
Address 0x5f1ac

OemToCharW

Ordinal 2061
Address 0x5f164

OffsetRect

Ordinal 2062
Address 0x1cdab

OpenClipboard

Ordinal 2063
Address 0x3447e

OpenDesktopA

Ordinal 2064
Address 0xb764

OpenDesktopW

Ordinal 2065
Address 0xc669

OpenIcon

Ordinal 2066
Address 0x4c087

OpenInputDesktop

Ordinal 2067
Address 0x5c39

OpenThreadDesktop

Ordinal 2068
Address 0x64d73

OpenWindowStationA

Ordinal 2069
Address 0x6e9e

OpenWindowStationW

Ordinal 2070
Address 0x3714c

PackDDElParam

Ordinal 2071
Address 0x257e6

PaintDesktop

Ordinal 2072
Address 0x573b

PaintMenuBar

Ordinal 2073
Address 0x37082

PaintMonitor

Ordinal 2074
Address 0x54a4

PeekMessageA

Ordinal 2075
Address 0x119a5

PeekMessageW

Ordinal 2076
Address 0x1634a

PhysicalToLogicalPoint

Ordinal 2077
Address 0x36e63

PostMessageA

Ordinal 2078
Address 0xb446

PostMessageW

Ordinal 2079
Address 0x1447b

PostQuitMessage

Ordinal 2080
Address 0xb308

PostThreadMessageA

Ordinal 2081
Address 0xad09

PostThreadMessageW

Ordinal 2082
Address 0xeefc

PrintWindow

Ordinal 2083
Address 0x64d87

PrivateExtractIconExA

Ordinal 2084
Address 0x5713f

PrivateExtractIconExW

Ordinal 2085
Address 0x11233

PrivateExtractIconsA

Ordinal 2086
Address 0x570e5

PrivateExtractIconsW

Ordinal 2087
Address 0x10d13

PrivateRegisterICSProc

Ordinal 2088
Address 0x432f

PtInRect

Ordinal 2089
Address 0x12392

QueryDisplayConfig

Ordinal 2090
Address 0x50a5

QuerySendMessage

Ordinal 2091
Address 0x64d9b

RealChildWindowFromPoint

Ordinal 2092
Address 0x64daf

RealGetWindowClass

Ordinal 2093
Address 0x6405c

RealGetWindowClassA

Ordinal 2094
Address 0x6405c

RealGetWindowClassW

Ordinal 2095
Address 0xadb3

ReasonCodeNeedsBugID

Ordinal 2096
Address 0x5fa96

ReasonCodeNeedsComment

Ordinal 2097
Address 0x5fa7f

RecordShutdownReason

Ordinal 2098
Address 0x50350

RedrawWindow

Ordinal 2099
Address 0x129bc

RegisterClassA

Ordinal 2100
Address 0xbc6a

RegisterClassExA

Ordinal 2101
Address 0x6293

RegisterClassExW

Ordinal 2102
Address 0x10162

RegisterClassW

Ordinal 2103
Address 0xed4a

RegisterClipboardFormatA

Ordinal 2104
Address 0xc091

RegisterClipboardFormatW

Ordinal 2105
Address 0xdf8d

RegisterDeviceNotificationA

Ordinal 2106
Address 0x6c53

RegisterDeviceNotificationW

Ordinal 2107
Address 0x6c53

RegisterErrorReportingDialog

Ordinal 2108
Address 0x64dd7

RegisterFrostWindow

Ordinal 2109
Address 0x4c29f

RegisterGhostWindow

Ordinal 2110
Address 0x261bb

RegisterHotKey

Ordinal 2111
Address 0xaa19

RegisterLogonProcess

Ordinal 2112
Address 0x474b

RegisterMessagePumpHook

Ordinal 2113
Address 0x88ad

RegisterPowerSettingNotification

Ordinal 2114
Address 0x9370

RegisterRawInputDevices

Ordinal 2115
Address 0x5b52

RegisterServicesProcess

Ordinal 2116
Address 0x1539

RegisterSessionPort

Ordinal 2117
Address 0x3ed3

RegisterShellHookWindow

Ordinal 2118
Address 0x4aeb

RegisterSystemThread

Ordinal 2119
Address 0x4c192

RegisterTasklist

Ordinal 2120
Address 0x64deb

RegisterTouchWindow

Ordinal 2121
Address 0x5ed18

RegisterUserApiHook

Ordinal 2122
Address 0x22af

RegisterWindowMessageA

Ordinal 2123
Address 0xc091

RegisterWindowMessageW

Ordinal 2124
Address 0xdf8d

ReleaseCapture

Ordinal 2125
Address 0x369f2

ReleaseDC

Ordinal 2126
Address 0x15421

RemoveClipboardFormatListener

Ordinal 2127
Address 0x64dff

RemoveMenu

Ordinal 2128
Address 0x86e8

RemovePropA

Ordinal 2129
Address 0x32551

RemovePropW

Ordinal 2130
Address 0x15fe1

ReplyMessage

Ordinal 2131
Address 0x25ca7

ResolveDesktopForWOW

Ordinal 2132
Address 0x64e13

ReuseDDElParam

Ordinal 2133
Address 0x25793

ScreenToClient

Ordinal 2134
Address 0xa506

ScrollChildren

Ordinal 2135
Address 0x5b4a9

ScrollDC

Ordinal 2136
Address 0x1ec44

ScrollWindow

Ordinal 2137
Address 0x2fc1d

ScrollWindowEx

Ordinal 2138
Address 0x33fe6

SendDlgItemMessageA

Ordinal 2139
Address 0x27241

SendDlgItemMessageW

Ordinal 2140
Address 0x270d8

SendIMEMessageExA

Ordinal 2141
Address 0x641b5

SendIMEMessageExW

Ordinal 2142
Address 0x641a4

SendInput

Ordinal 2143
Address 0x37019

SendMessageA

Ordinal 2144
Address 0xad60

SendMessageCallbackA

Ordinal 2145
Address 0x63e8b

SendMessageCallbackW

Ordinal 2146
Address 0x12f7b

SendMessageTimeoutA

Ordinal 2147
Address 0x36da9

SendMessageTimeoutW

Ordinal 2148
Address 0xe459

SendMessageW

Ordinal 2149
Address 0x15539

SendNotifyMessageA

Ordinal 2150
Address 0x2493c

SendNotifyMessageW

Ordinal 2151
Address 0xc88a

SetActiveWindow

Ordinal 2152
Address 0x1333a

SetCapture

Ordinal 2153
Address 0x36932

SetCaretBlinkTime

Ordinal 2154
Address 0x2fbd3

SetCaretPos

Ordinal 2155
Address 0x36217

SetClassLongA

Ordinal 2156
Address 0x31236

SetClassLongW

Ordinal 2157
Address 0x658b

SetClassWord

Ordinal 2158
Address 0x64e27

SetClipboardData

Ordinal 2159
Address 0x22962

SetClipboardViewer

Ordinal 2160
Address 0x26ff6

SetCursor

Ordinal 2161
Address 0x13075

SetCursorContents

Ordinal 2162
Address 0x64e3b

SetCursorPos

Ordinal 2163
Address 0x4c1b0

SetDebugErrorLevel

Ordinal 2164
Address 0x6417a

SetDeskWallpaper

Ordinal 2165
Address 0x4b71e

SetDisplayConfig

Ordinal 2166
Address 0x6487c

SetDlgItemInt

Ordinal 2167
Address 0x2ec2e

SetDlgItemTextA

Ordinal 2168
Address 0x2707a

SetDlgItemTextW

Ordinal 2169
Address 0x2ebd4

SetDoubleClickTime

Ordinal 2170
Address 0x4c1cb

SetFocus

Ordinal 2171
Address 0xabad

SetForegroundWindow

Ordinal 2172
Address 0xb225

SetGestureConfig

Ordinal 2173
Address 0x4715

SetInternalWindowPos

Ordinal 2174
Address 0x64e4f

SetKeyboardState

Ordinal 2175
Address 0x3695a

SetLastErrorEx

Ordinal 2176
Address 0x5f334

SetLayeredWindowAttributes

Ordinal 2177
Address 0xa6dc

SetMagnificationDesktopColorEffect

Ordinal 2178
Address 0x5ab45

SetMagnificationDesktopMagnification

Ordinal 2179
Address 0x5abfa

SetMagnificationLensCtxInformation

Ordinal 2180
Address 0x268a0

SetMenu

Ordinal 2181
Address 0x36b0e

SetMenuContextHelpId

Ordinal 2182
Address 0x64e63

SetMenuDefaultItem

Ordinal 2183
Address 0x86fc

SetMenuInfo

Ordinal 2184
Address 0x34744

SetMenuItemBitmaps

Ordinal 2185
Address 0x2225e

SetMenuItemInfoA

Ordinal 2186
Address 0x26d15

SetMenuItemInfoW

Ordinal 2187
Address 0x11799

SetMessageExtraInfo

Ordinal 2188
Address 0x4cbff

SetMessageQueue

Ordinal 2189
Address 0x267a4

SetMirrorRendering

Ordinal 2190
Address 0x650b7

SetParent

Ordinal 2191
Address 0x8314

SetPhysicalCursorPos

Ordinal 2192
Address 0x36f6c

SetProcessDPIAware

Ordinal 2193
Address 0x1e95c

SetProcessDefaultLayout

Ordinal 2194
Address 0x4c27a

SetProcessWindowStation

Ordinal 2195
Address 0xb83d

SetProgmanWindow

Ordinal 2196
Address 0x4c10a

SetPropA

Ordinal 2197
Address 0x328e5

SetPropW

Ordinal 2198
Address 0x15dc5

SetRect

Ordinal 2199
Address 0x1498b

SetRectEmpty

Ordinal 2200
Address 0x14a97

SetScrollInfo

Ordinal 2201
Address 0x148da

SetScrollPos

Ordinal 2202
Address 0x304be

SetScrollRange

Ordinal 2203
Address 0x8ec5

SetShellWindow

Ordinal 2204
Address 0x4c0b4

SetShellWindowEx

Ordinal 2205
Address 0x3f94

SetSysColors

Ordinal 2206
Address 0x5eaad

SetSysColorsTemp

Ordinal 2207
Address 0x5f24d

SetSystemCursor

Ordinal 2208
Address 0x5ec07

SetSystemMenu

Ordinal 2209
Address 0x2f580

SetTaskmanWindow

Ordinal 2210
Address 0x3f31

SetThreadDesktop

Ordinal 2211
Address 0xb829

SetTimer

Ordinal 2212
Address 0x152ef

SetUserObjectInformationA

Ordinal 2213
Address 0x64e8b

SetUserObjectInformationW

Ordinal 2214
Address 0x64e8b

SetUserObjectSecurity

Ordinal 2215
Address 0x2285

SetWinEventHook

Ordinal 2216
Address 0x124dc

SetWindowCompositionAttribute

Ordinal 2217
Address 0xaab1

SetWindowContextHelpId

Ordinal 2218
Address 0x1f6bb

SetWindowDisplayAffinity

Ordinal 2219
Address 0x64edb

SetWindowLongA

Ordinal 2220
Address 0x8ba3

SetWindowLongW

Ordinal 2221
Address 0x14449

SetWindowPlacement

Ordinal 2222
Address 0x7f78

SetWindowPos

Ordinal 2223
Address 0x11bc4

SetWindowRgn

Ordinal 2224
Address 0x99ec

SetWindowRgnEx

Ordinal 2225
Address 0x3314a

SetWindowStationUser

Ordinal 2226
Address 0x3cad

SetWindowTextA

Ordinal 2227
Address 0x30c5b

SetWindowTextW

Ordinal 2228
Address 0x1612b

SetWindowWord

Ordinal 2229
Address 0x304aa

SetWindowsHookA

Ordinal 2230
Address 0x4b641

SetWindowsHookExA

Ordinal 2231
Address 0x36d0c

SetWindowsHookExW

Ordinal 2232
Address 0xe30c

SetWindowsHookW

Ordinal 2233
Address 0x4b65c

SfmDxBindSwapChain

Ordinal 2234
Address 0x23c0e

SfmDxGetSwapChainStats

Ordinal 2235
Address 0x23c4a

SfmDxOpenSwapChain

Ordinal 2236
Address 0x23c22

SfmDxQuerySwapChainBindingStatus

Ordinal 2237
Address 0x23c36

SfmDxReleaseSwapChain

Ordinal 2238
Address 0x23cf2

SfmDxReportPendingBindingsToDwm

Ordinal 2239
Address 0x4fa8

SfmDxSetSwapChainBindingStatus

Ordinal 2240
Address 0x23cde

SfmDxSetSwapChainStats

Ordinal 2241
Address 0x1cebd

ShowCaret

Ordinal 2242
Address 0x9334

ShowCursor

Ordinal 2243
Address 0x64d3

ShowOwnedPopups

Ordinal 2244
Address 0x328ca

ShowScrollBar

Ordinal 2245
Address 0x33c89

ShowStartGlass

Ordinal 2246
Address 0x4c1e3

ShowSystemCursor

Ordinal 2247
Address 0x650cb

ShowWindow

Ordinal 2248
Address 0xf2a9

ShowWindowAsync

Ordinal 2249
Address 0x64f03

ShutdownBlockReasonCreate

Ordinal 2250
Address 0x507c5

ShutdownBlockReasonDestroy

Ordinal 2251
Address 0x4fdbe

ShutdownBlockReasonQuery

Ordinal 2252
Address 0x508b1

SoftModalMessageBox

Ordinal 2253
Address 0x5da4b

SoundSentry

Ordinal 2254
Address 0x25f28

SubtractRect

Ordinal 2255
Address 0x7f19

SwapMouseButton

Ordinal 2256
Address 0x4c1fb

SwitchDesktop

Ordinal 2257
Address 0x476b

SwitchDesktopWithFade

Ordinal 2258
Address 0x4a0f

SwitchToThisWindow

Ordinal 2259
Address 0x36a17

SystemParametersInfoA

Ordinal 2260
Address 0x80e0

SystemParametersInfoW

Ordinal 2261
Address 0xe09a

TabbedTextOutA

Ordinal 2262
Address 0x50c54

TabbedTextOutW

Ordinal 2263
Address 0x50c25

TileChildWindows

Ordinal 2264
Address 0x4c213

TileWindows

Ordinal 2265
Address 0x5bbd5

ToAscii

Ordinal 2266
Address 0x4b73a

ToAsciiEx

Ordinal 2267
Address 0x4b797

ToUnicode

Ordinal 2268
Address 0x5ebd4

ToUnicodeEx

Ordinal 2269
Address 0x221b2

TrackMouseEvent

Ordinal 2270
Address 0x130ae

TrackPopupMenu

Ordinal 2271
Address 0x22228

TrackPopupMenuEx

Ordinal 2272
Address 0x34832

TranslateAccelerator

Ordinal 2273
Address 0x3133f

TranslateAcceleratorA

Ordinal 2274
Address 0x3133f

TranslateAcceleratorW

Ordinal 2275
Address 0x1667e

TranslateMDISysAccel

Ordinal 2276
Address 0x31a5a

TranslateMessage

Ordinal 2277
Address 0x164c7

TranslateMessageEx

Ordinal 2278
Address 0x1cc79

UnhookWinEvent

Ordinal 2279
Address 0xb750

UnhookWindowsHook

Ordinal 2280
Address 0x4c234

UnhookWindowsHookEx

Ordinal 2281
Address 0xadf9

UnionRect

Ordinal 2282
Address 0x13699

UnloadKeyboardLayout

Ordinal 2283
Address 0x4c24f

UnlockWindowStation

Ordinal 2284
Address 0x4a30

UnpackDDElParam

Ordinal 2285
Address 0x25a5d

UnregisterClassA

Ordinal 2286
Address 0x8d70

UnregisterClassW

Ordinal 2287
Address 0xb9ae

UnregisterDeviceNotification

Ordinal 2288
Address 0x6dd4

UnregisterHotKey

Ordinal 2289
Address 0x36a54

UnregisterMessagePumpHook

Ordinal 2290
Address 0x835c

UnregisterPowerSettingNotification

Ordinal 2291
Address 0x3634b

UnregisterSessionPort

Ordinal 2292
Address 0x64fa1

UnregisterTouchWindow

Ordinal 2293
Address 0x5ed33

UnregisterUserApiHook

Ordinal 2294
Address 0x2273

UpdateLayeredWindow

Ordinal 2295
Address 0xa420

UpdateLayeredWindowIndirect

Ordinal 2296
Address 0x9ac2

UpdatePerUserSystemParameters

Ordinal 2297
Address 0x3310

UpdateWindow

Ordinal 2298
Address 0xffa8

UpdateWindowTransform

Ordinal 2299
Address 0x64fb3

User32InitializeImmEntryTable

Ordinal 2300
Address 0x1e878

UserClientDllInitialize

Ordinal 2301
Address 0x1d711

UserHandleGrantAccess

Ordinal 2302
Address 0x64f67

UserLpkPSMTextOut

Ordinal 2303
Address 0x50dba

UserLpkTabbedTextOut

Ordinal 2304
Address 0x50a68

UserRealizePalette

Ordinal 2305
Address 0x2ffd5

UserRegisterWowHandlers

Ordinal 2306
Address 0x4c2dd

VRipOutput

Ordinal 2307
Address 0x66252

VTagOutput

Ordinal 2308
Address 0x66252

ValidateRect

Ordinal 2309
Address 0x2f089

ValidateRgn

Ordinal 2310
Address 0x31a9e

VkKeyScanA

Ordinal 2311
Address 0x266cf

VkKeyScanExA

Ordinal 2312
Address 0x26947

VkKeyScanExW

Ordinal 2313
Address 0x2f09d

VkKeyScanW

Ordinal 2314
Address 0x2ef77

WCSToMBEx

Ordinal 2315
Address 0xc15c

WINNLSEnableIME

Ordinal 2316
Address 0x64182

WINNLSGetEnableStatus

Ordinal 2317
Address 0x64193

WINNLSGetIMEHotkey

Ordinal 2318
Address 0x6414f

WaitForInputIdle

Ordinal 2319
Address 0x30397

WaitMessage

Ordinal 2320
Address 0x166bd

WinHelpA

Ordinal 2321
Address 0x2471e

WinHelpW

Ordinal 2322
Address 0x24867

WindowFromDC

Ordinal 2323
Address 0x12116

WindowFromPhysicalPoint

Ordinal 2324
Address 0x36c39

WindowFromPoint

Ordinal 2325
Address 0x36be9

_UserTestTokenForInteractive

Ordinal 2326
Address 0x62743

gSharedInfo

Ordinal 2327
Address 0x69440

gapfnScSendMessage

Ordinal 2328
Address 0x1c318

keybd_event

Ordinal 2329
Address 0x5ec3b

mouse_event

Ordinal 2330
Address 0x26209

wsprintfA

Ordinal 2331
Address 0x13f47

wsprintfW

Ordinal 2332
Address 0x2426d

wvsprintfA

Ordinal 2333
Address 0x13c94

wvsprintfW

Ordinal 2334
Address 0x2407a

(#14)

Ordinal 2500
Address 0x4b282

(#15)

Ordinal 2501
Address 0x4b2a7

(#16)

Ordinal 2502
Address 0x4b2d9

Version Info

IMAGE_DEBUG_TYPE_UNKNOWN

Characteristics 0
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
SizeofData 0
AddressOfRawData 0
PointerToRawData 0

IMAGE_DEBUG_TYPE_UNKNOWN (#2)

Characteristics 0
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
SizeofData 0
AddressOfRawData 0
PointerToRawData 0

TLS Callbacks

Load Configuration

Size 0x48
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x75ac9108
SEHandlerTable 0x75aa8f08
SEHandlerCount 2

RICH Header

XOR Key 0x4151ec6a
Unmarked objects 0
C++ objects (VS2008 SP1 build 30729) 1
Total imports 351
Imports (VS2008 SP1 build 30729) 7
Exports (VS2008 SP1 build 30729) 1
ASM objects (VS2008 SP1 build 30729) 7
C objects (VS2008 SP1 build 30729) 125
Linker (VS2008 SP1 build 30729) 1
Resource objects (VS2008 SP1 build 30729) 1

Errors

[!] Error: Could not read an IMAGE_RESOURCE_DIRECTORY_ENTRY's name. [*] Warning: 165 invalid export(s) not shown.
<-- -->