f804d60514ec31233e6df99949b7ff1e

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 1971-Sep-11 21:58:36
Detected languages English - United States
Debug artifacts user32.pdb
CompanyName Microsoft Corporation
FileDescription Multi-User Windows USER API Client DLL
FileVersion 10.0.19041.1202 (WinBuild.160101.0800)
InternalName user32
LegalCopyright © Microsoft Corporation. All rights reserved.
OriginalFilename user32
ProductName Microsoft® Windows® Operating System
ProductVersion 10.0.19041.1202

Plugin Output

Suspicious Strings found in the binary may indicate undesirable behavior: May have dropper capabilities:
  • CurrentControlSet\Services
Contains domain names:
  • http://schemas.microsoft.com
  • http://schemas.microsoft.com/SMI/2011/WindowsSettings
  • http://schemas.microsoft.com/SMI/2014/WindowsSettings
  • http://schemas.microsoft.com/SMI/2016/WindowsSettings
  • http://schemas.microsoft.com/SMI/2017/WindowsSettings
  • microsoft.com
  • schemas.microsoft.com
Suspicious The PE is possibly packed. Unusual section name found: .didat
Malicious The PE contains functions mostly used by malware. [!] The program may be hiding some of its imports:
  • GetProcAddress
  • LoadLibraryExW
Functions which can be used for anti-debugging purposes:
  • NtQueryInformationProcess
  • NtQuerySystemInformation
Can access the registry:
  • RegCreateKeyExW
  • RegGetValueW
  • RegCloseKey
  • RegQueryValueExW
  • RegEnumValueW
  • RegQueryInfoKeyW
  • RegSetValueExW
  • RegDeleteKeyExW
  • RegOpenKeyExW
Possibly launches other programs:
  • CreateProcessW
Uses Windows's Native API:
  • NtUserTestForInteractiveUser
  • NtUserTransformRect
  • NtUserGetClassName
  • NtUserSetScrollInfo
  • NtUserSBGetParms
  • NtUserUpdateLayeredWindow
  • NtUserFindWindowEx
  • NtUserRegisterClassExWOW
  • NtUserPostThreadMessage
  • NtUserSetClassLongPtr
  • NtUserGetClipboardFormatName
  • NtUserRegisterWindowMessage
  • NtUserGetKeyNameText
  • NtUserMapVirtualKeyEx
  • NtUserEnumDisplayDevices
  • NtUserGetClassInfoEx
  • NtUserChangeDisplaySettings
  • NtUserRemoveProp
  • NtUserUnregisterClass
  • NtUserEnumDisplaySettings
  • NtUserGetAltTabInfo
  • NtUserSetClassLong
  • NtUserGetMessage
  • NtUserGetKeyboardLayoutName
  • NtUserDrawCaptionTemp
  • NtUserSetProp
  • NtUserVkKeyScanEx
  • NtUserCallMsgFilter
  • NtUserCallHwndLockSafe
  • NtUserSetImeOwnerWindow
  • NtUserNotifyIMEStatus
  • NtUserUpdateInputContext
  • NtUserCountClipboardFormats
  • NtUserGetPriorityClipboardFormat
  • NtUserGetClipboardOwner
  • NtUserGetClipboardSequenceNumber
  • NtUserGetClipboardViewer
  • NtUserSetClipboardViewer
  • NtUserChangeClipboardChain
  • NtUserAddClipboardFormatListener
  • NtUserRemoveClipboardFormatListener
  • NtUserGetUpdatedClipboardFormats
  • NtUserSetWindowCompositionAttribute
  • NtUserWOWCleanup
  • NtUserTranslateAccelerator
  • NtMITSetLastInputRecipient
  • NtUserSetClipboardData
  • NtUserDrawIconEx
  • NtUserGetUpdateRgn
  • NtUserGetUpdateRect
  • NtUserWaitForInputIdle
  • NtUserMsgWaitForMultipleObjectsEx
  • NtUserWaitForMsgAndEvent
  • NtUserSetObjectInformation
  • NtUserCreateWindowStation
  • NtUserOpenWindowStation
  • NtUserCreateDesktopEx
  • NtUserOpenDesktop
  • NtUserSwitchDesktop
  • NtUserYieldTask
  • NtUserGetMenuIndex
  • NtUserGetQueueStatus
  • NtUserCallHwndOpt
  • NtUserUnloadKeyboardLayout
  • NtUserGetKeyboardLayout
  • NtUserCreateWindowEx
  • NtUserSetProcessDpiAwarenessContext
  • NtUserGetProcessDpiAwarenessContext
  • NtUserGetDpiForMonitor
  • NtUserShutdownBlockReasonCreate
  • NtUserGetCurrentDpiInfoForWindow
  • NtUserCallHwndSafe
  • NtUserTransformPoint
  • NtUserSystemParametersInfoForDpi
  • NtCreateCompositionInputSink
  • NtUserCreatePalmRejectionDelayZone
  • NtUserDestroyPalmRejectionDelayZone
  • NtUserSystemParametersInfo
  • NtUserGetProp
  • NtUserGetHDevName
  • NtUserGetRawInputDeviceInfo
  • NtUserEnableMenuItem
  • NtUserCallNextHookEx
  • NtGdiDdDDIEscape
  • NtUserDisplayConfigGetDeviceInfo
  • NtUserGetDisplayConfigBufferSizes
  • NtUserSetDisplayConfig
  • NtUserQueryDisplayConfig
  • NtUserDisplayConfigSetDeviceInfo
  • NtUserFunctionalizeDisplayConfig
  • NtMITSetInputDelegationMode
  • NtMITGetCursorUpdateHandle
  • NtMITSynthesizeTouchInput
  • NtUserHwndSetRedirectionInfo
  • NtUserHwndQueryRedirectionInfo
  • NtUserEnableIAMAccess
  • NtUserGetOpenClipboardWindow
  • NtUserActivateKeyboardLayout
  • NtUserSetThreadDesktop
  • NtUserCallTwoParam
  • NtUserCallNoParam
  • NtUserPaintDesktop
  • NtUserModifyWindowTouchCapability
  • NtUserDefSetText
  • NtUserSetCursorIconData
  • NtUserFindExistingCursorIcon
  • NtUserSetSystemCursor
  • NtUserSetWindowStationUser
  • NtUserInternalGetWindowIcon
  • NtUserInternalGetWindowText
  • NtUserSetWindowRgnEx
  • NtUserSetWindowRgn
  • NtUserTranslateMessage
  • NtUserSetWindowLong
  • NtUserPeekMessage
  • NtUserOpenClipboard
  • NtUserGetKeyState
  • NtUserGetAsyncKeyState
  • NtUserDrawCaption
  • NtUserRegisterUserApiHook
  • NtUserNotifyWinEvent
  • NtUserSetWinEventHook
  • NtUserSetWindowsHookEx
  • NtUserCreateLocalMemHandle
  • NtUserConvertMemHandle
  • NtUserGetWOWClass
  • NtUserEvent
  • NtUserUpdatePerUserSystemParameters
  • NtUserLoadKeyboardLayoutEx
  • NtUserToUnicodeEx
  • NtUserSetSysColors
  • NtUserCallHwnd
  • NtUserModifyUserStartupInfoFlags
  • NtUserMNDragLeave
  • NtUserMNDragOver
  • NtUserDrawMenuBarTemp
  • NtUserThunkedMenuInfo
  • NtUserCheckMenuItem
  • NtUserMinMaximize
  • NtUserSetWindowLongPtr
  • NtUserCheckAccessForIntegrityLevel
  • NtUserScrollWindowEx
  • NtUserCallHwndParamLock
  • NtUserDeferWindowPosAndBand
  • NtUserInitializeClientPfnArrays
  • NtUserProcessConnect
  • NtUserDisableProcessWindowFiltering
  • NtUserSetProcessUIAccessZorder
  • NtUserGetRawInputBuffer
  • NtUserScrollDC
  • NtUserSetSystemTimer
  • NtUserCloseClipboard
  • NtUserEmptyClipboard
  • NtUserIsClipboardFormatAvailable
  • NtUserShowCaret
  • NtUserCreateCaret
  • NtUserHideCaret
  • NtUserGetControlColor
  • NtUserSetCursor
  • NtUserSetThreadState
  • NtUserQueryWindow
  • NtUserFillWindow
  • NtUserDdeInitialize
  • NtUserUpdateInstance
  • NtUserConsoleControl
  • NtUserSetInformationThread
  • NtUserSetParent
  • NtUserReleaseDC
  • NtUserCallHwndParamLockSafe
  • NtUserPostMessage
  • NtUserGetTouchInputInfo
  • NtUserLockCursor
  • NtUserLinkDpiCursor
  • NtUserGetRequiredCursorSizes
  • NtUserGetCursorFrameInfo
  • NtUserGetIconInfo
  • NtUserDestroyAcceleratorTable
  • NtUserReportInertia
  • NtUserGetHimetricScaleFactorFromPixelLocation
  • NtUserRegisterEdgy
  • NtUserRegisterPointerInputTarget
  • NtUserGetPointerInfoList
  • NtUserGetCPD
  • NtUserCallOneParam
  • NtUserValidateTimerCallback
  • NtUserDispatchMessage
  • NtUserAutoPromoteMouseInPointer
  • NtUserGetDManipHookInitFunction
  • NtUserCallHwndLock
  • NtUserSetMenu
  • NtUserSetMenuFlagRtoL
  • NtUserThunkedMenuItemInfo
  • NtUserSetWindowsHookAW
  • NtUserUnhookWindowsHookEx
  • NtUserRealWaitMessageEx
  • NtUserRealInternalGetMessage
  • NtUserMessageCall
  • NtUserInjectGesture
  • NtUserGetGestureExtArgs
  • NtUserGetGestureInfo
  • NtUserBuildNameList
  • NtUserBuildPropList
  • NtUserBuildHwndList
  • NtUserGetAtomName
  • NtUserCallHwndParam
  • NtUserAlterWindowStyle
  • NtUserSetWindowFNID
  • NtUserBitBltSysBmp
  • NtUserEnableScrollBar
  • NtUserGetOemBitmapSize
  • NtUserGetIconSize
  • NtUserGetThreadState
  • NtUserGetDC
  • NtUserGetControlBrush
  • NtUserDestroyCursor
  • NtUserCreateEmptyCursorObject
  • NtUserSetImeHotKey
  • NtUserGetImeHotKey
  • NtUserWindowFromPoint
  • NtUserWindowFromPhysicalPoint
  • NtUserWindowFromDC
  • NtUserWaitMessage
  • NtUserWaitForRedirectionStartComplete
  • NtUserWaitAvailableMessageEx
  • NtUserValidateRect
  • NtUserUserHandleGrantAccess
  • NtUserUpdateWindowTrackingInfo
  • NtUserUpdateWindowInputSinkHints
  • NtUserUpdateDefaultDesktopThumbnail
  • NtUserUnregisterUserApiHook
  • NtUserUnregisterSessionPort
  • NtUserUnregisterHotKey
  • NtUserUnlockWindowStation
  • NtUserUnhookWinEvent
  • NtUserUndelegateInput
  • NtUserTrackPopupMenuEx
  • NtUserTrackMouseEvent
  • NtUserSoundSentry
  • NtUserSlicerControl
  • NtUserDiscardPointerFrameMessages
  • NtUserSignalRedirectionStartComplete
  • NtUserShutdownBlockReasonQuery
  • NtUserShutdownReasonDestroy
  • NtUserShowWindowAsync
  • NtUserShowWindow
  • NtUserShowSystemCursor
  • NtUserShowScrollBar
  • NtUserShowCursor
  • NtUserSetWindowWord
  • NtUserSetWindowShowState
  • NtUserSetWindowPos
  • NtUserSetWindowPlacement
  • NtUserSetWindowGroup
  • NtUserSetWindowFeedbackSetting
  • NtUserSetWindowDisplayAffinity
  • NtUserSetWindowCompositionTransition
  • NtUserSetWindowBand
  • NtUserSetWindowArrangement
  • NtUserSetThreadInputBlocked
  • NtUserSetTargetForResourceBrokering
  • NtUserSetSystemMenu
  • NtUserSetShellWindowEx
  • NtSetShellCursorState
  • NtUserSetProcessWindowStation
  • NtUserSetProcessRestrictionExemption
  • NtUserSetProcessMousewheelRoutingMode
  • NtUserSetProcessInteractionFlags
  • NtUserSetPrecisionTouchPadConfiguration
  • NtSetPointerDeviceInputSpace
  • NtUserSetMirrorRendering
  • NtUserSetMenuDefaultItem
  • NtUserSetMenuContextHelpId
  • NtUserMagSetContextInformation
  • NtUserSetMagnificationDesktopMagnifierOffsetsDWMUpdated
  • NtUserSetLayeredWindowAttributes
  • NtUserSetKeyboardState
  • NtUserSetInternalWindowPos
  • NtUserSetInteractiveCtrlRotationAngle
  • NtUserSetInteractiveControlFocus
  • NtUserSetInputServiceState
  • NtUserSetGestureConfig
  • NtUserSetFullscreenMagnifierOffsetsDWMUpdated
  • NtUserSetForegroundWindowForApplication
  • NtUserSetFocus
  • NtUserSetFeatureReportResponse
  • NtUserSetFallbackForeground
  • NtUserSetDisplayMapping
  • NtUserSetDisplayAutoRotationPreferences
  • NtUserSetDialogControlDpiChangeBehavior
  • NtUserSetDesktopVisualInputSink
  • NtUserSetDesktopColorTransform
  • NtUserSetCursorPos
  • NtSetCursorInputSpace
  • NtUserSetCursorContents
  • NtUserSetCoreWindowPartner
  • NtUserSetCoreWindow
  • NtUserSetTimer
  • NtUserSetClassWord
  • NtUserSetChildWindowNoActivate
  • NtUserSetCapture
  • NtUserSetCalibrationData
  • NtUserSetBrokeredForeground
  • NtUserSetBridgeWindowChild
  • NtUserSetAutoRotation
  • NtUserSetActiveWindow
  • NtUserSetActiveProcessForMonitor
  • NtUserSetActivationFilter
  • NtUserSendInteractiveControlHapticsReport
  • NtUserSendInput
  • NtUserSendEventMessage
  • NtUserRestoreWindowDpiChanges
  • NtUserResolveDesktopForWOW
  • NtUserRequestMoveSizeOperation
  • NtUserRemoveVisualIdentifier
  • NtUserRemoveMenu
  • NtUserReleaseDwmHitTestWaiters
  • NtUserRegisterTouchPadCapable
  • NtUserRegisterTouchHitTestingWindow
  • NtUserRegisterTasklist
  • NtUserRegisterShellPTPListener
  • NtUserRegisterSessionPort
  • NtUserRegisterServicesProcess
  • NtUserRegisterRawInputDevices
  • NtUserRegisterPointerDeviceNotifications
  • NtUserRegisterHotKey
  • NtUserRegisterErrorReportingDialog
  • NtUserRegisterDManipHook
  • NtUserRegisterBSDRWindow
  • NtUserRedrawWindow
  • NtUserRealChildWindowFromPoint
  • NtRIMUpdateInputObserverRegistration
  • NtRIMUnregisterForInput
  • NtRIMSetTestModeStatus
  • NtRIMSetExtendedDeviceProperty
  • NtRIMRemoveInputObserver
  • NtRIMRegisterForInput
  • NtRIMReadInput
  • NtRIMQueryDevicePath
  • NtRIMOnTimerNotification
  • NtRIMOnPnpNotification
  • NtRIMObserveNextInput
  • NtRIMGetSourceProcessId
  • NtRIMGetPhysicalDeviceRect
  • NtRIMGetDevicePropertiesLockfree
  • NtRIMGetDeviceProperties
  • NtRIMGetDevicePreparsedDataLockfree
  • NtRIMGetDevicePreparsedData
  • NtRIMFreeInputBuffer
  • NtRIMEnableMonitorMappingForDevice
  • NtRIMDeviceIoControl
  • NtRIMAreSiblingDevices
  • NtRIMAddInputObserver
  • NtUserQuerySendMessage
  • NtUserQueryBSDRWindow
  • NtUserQueryActivationObject
  • NtUserPromotePointer
  • NtUserProcessInkFeedbackCommand
  • NtUserPrintWindow
  • NtUserPerMonitorDPIPhysicalToLogicalPoint
  • NtUserPhysicalToLogicalPoint
  • NtUserPhysicalToLogicalDpiPointForWindow
  • NtUserPaintMonitor
  • NtUserPaintMenuBar
  • NtUserOpenThreadDesktop
  • NtUserOpenInputDesktop
  • NtUserNavigateFocus
  • NtUserMoveWindow
  • NtUserMenuItemFromPoint
  • NtMapVisualRelativePoints
  • NtUserMapPointsByVisualIdentifier
  • NtUserLogicalToPerMonitorDPIPhysicalPoint
  • NtUserLogicalToPhysicalPoint
  • NtUserLogicalToPhysicalDpiPointForWindow
  • NtUserLockWorkStation
  • NtUserLockWindowUpdate
  • NtUserLockWindowStation
  • NtUserLayoutCompleted
  • NtUserKillTimer
  • NtUserIsWindowGDIScaledDpiMessageEnabled
  • NtUserIsWindowBroadcastingDpiToChildren
  • NtUserIsTouchWindow
  • NtUserIsTopLevelWindow
  • NtUserIsResizeLayoutSynchronizationEnabled
  • NtIsOneCoreTransformMode
  • NtUserIsNonClientDpiScalingEnabled
  • NtUserIsMouseInputEnabled
  • NtUserIsMouseInPointerEnabled
  • NtUserIsChildWindowDpiMessageEnabled
  • NtUserInvalidateRgn
  • NtUserInvalidateRect
  • NtUserInteractiveControlQueryUsage
  • NtInputSpaceRegionFromPoint
  • NtUserInjectTouchInput
  • NtUserInjectPointerInput
  • NtUserInjectMouseInput
  • NtUserInjectKeyboardInput
  • NtUserInjectGenericHidInput
  • NtUserInjectDeviceInput
  • NtUserInitializeTouchInjection
  • NtUserInitializePointerDeviceInjectionEx
  • NtUserInitializePointerDeviceInjection
  • NtUserInitializeInputDeviceInjection
  • NtUserInitializeGenericHidInjection
  • NtUserInheritWindowMonitor
  • NtUserImpersonateDdeClientWindow
  • NtUserHungWindowFromGhostWindow
  • NtUserHiliteMenuItem
  • NtUserHidePointerContactVisualization
  • NtUserHandleDelegatedInput
  • NtUserGhostWindowFromHungWindow
  • NtUserGetWindowRgnEx
  • NtUserGetWindowProcessHandle
  • NtUserGetWindowPlacement
  • NtUserGetWindowMinimizeRect
  • NtUserGetWindowGroupId
  • NtUserGetWindowFeedbackSetting
  • NtUserGetWindowDisplayAffinity
  • NtUserGetWindowDC
  • NtUserGetWindowCompositionInfo
  • NtUserGetWindowCompositionAttribute
  • NtUserGetWindowBand
  • NtUserGetObjectInformation
  • NtUserGetUniformSpaceMapping
  • NtUserGetTouchValidationStatus
  • NtUserGetTopLevelWindow
  • NtUserGetTitleBarInfo
  • NtUserGetThreadDesktop
  • NtUserGetSystemMenu
  • NtUserGetSystemDpiForProcess
  • NtUserGetScrollBarInfo
  • NtUserGetResizeDCompositionSynchronizationObject
  • NtUserGetRegisteredRawInputDevices
  • NtUserGetRawPointerDeviceData
  • NtUserGetRawInputDeviceList
  • NtUserGetRawInputData
  • NtUserGetQueueStatusReadonly
  • NtUserGetProcessWindowStation
  • NtUserGetProcessUIContextInformation
  • NtUserGetPrecisionTouchPadConfiguration
  • NtUserGetPointerType
  • NtUserGetPointerProprietaryId
  • NtUserGetPointerInputTransform
  • NtUserGetPointerFrameTimes
  • NtUserGetPointerDevices
  • NtUserGetPointerDeviceRects
  • NtUserGetPointerDeviceProperties
  • NtUserGetPointerDeviceOrientation
  • NtUserGetPointerDeviceInputSpace
  • NtUserGetPointerDeviceCursors
  • NtUserGetPointerDevice
  • NtUserGetPointerCursorId
  • NtUserGetPhysicalDeviceRect
  • NtUserGetOwnerTransformedMonitorRect
  • NtUserGetMouseMovePointsEx
  • NtUserGetMenuItemRect
  • NtUserGetMenuBarInfo
  • NtUserMagGetContextInformation
  • NtUserGetListBoxInfo
  • NtUserGetLayeredWindowAttributes
  • NtUserGetKeyboardState
  • NtUserGetKeyboardLayoutList
  • NtUserGetInternalWindowPos
  • NtUserGetInteractiveCtrlSupportedWaveforms
  • NtUserGetInteractiveControlInfo
  • NtUserGetInteractiveControlDeviceInfo
  • NtUserGetInputLocaleInfo
  • NtUserGetInputContainerId
  • NtUserGetGuiResources
  • NtUserGetGestureConfig
  • NtUserGetGUIThreadInfo
  • NtUserGetForegroundWindow
  • NtUserGetExtendedPointerDeviceProperty
  • NtUserGetDoubleClickTime
  • NtUserGetDisplayAutoRotationPreferencesByProcessId
  • NtUserGetDisplayAutoRotationPreferences
  • NtUserGetDesktopID
  • NtUserGetDCEx
  • NtUserGetCursorInfo
  • NtUserGetCursor
  • NtUserGetCurrentInputMessageSource
  • NtUserGetComboBoxInfo
  • NtUserGetClipboardAccessToken
  • NtUserGetClipCursor
  • NtUserGetCaretPos
  • NtUserGetCaretBlinkTime
  • NtUserGetCIMSSM
  • NtUserGetAutoRotationState
  • NtUserGetAncestor
  • NtUserGetActiveProcessesDpis
  • NtUserFrostCrashedWindow
  • NtUserForceWindowToDpiForTest
  • NtUserFlashWindowEx
  • NtUserExcludeUpdateRgn
  • NtUserEnumDisplayMonitors
  • NtUserEndPaint
  • NtUserEndMenu
  • NtUserEndDeferWindowPosEx
  • NtUserEnableWindowResizeOptimization
  • NtUserEnableWindowGroupPolicy
  • NtUserEnableWindowGDIScaledDpiMessage
  • NtUserEnableTouchPad
  • NtUserEnableSoftwareCursorForScreenCapture
  • NtUserEnableResizeLayoutSynchronization
  • NtEnableOneCoreTransformMode
  • NtUserEnableNonClientDpiScaling
  • NtUserEnableMouseInputForCursorSuppression
  • NtUserEnableMouseInPointerForWindow
  • NtUserEnableMouseInPointer
  • NtUserEnableChildWindowDpiMessage
  • NtUserDwmValidateWindow
  • NtUserDwmKernelStartup
  • NtUserDwmKernelShutdown
  • NtUserDwmGetRemoteSessionOcclusionState
  • NtUserDwmGetRemoteSessionOcclusionEvent
  • NtUserDrawAnimatedRects
  • NtUserDragObject
  • NtUserDragDetect
  • NtUserDownlevelTouchpad
  • NtUserDoSoundDisconnect
  • NtUserDoSoundConnect
  • NtUserDisableImmersiveOwner
  • NtUserDestroyWindow
  • NtUserRemoveInjectionDevice
  • NtUserDestroyMenu
  • NtUserDestroyDCompositionHwndTarget
  • NtUserDestroyActivationObject
  • NtUserDestroyActivationGroup
  • NtUserDeleteWindowGroup
  • NtUserDeleteMenu
  • NtUserDelegateInput
  • NtUserDelegateCapturePointers
  • NtUserDeferWindowDpiChanges
  • NtUserCreateWindowGroup
  • NtUserCreateDCompositionHwndTarget
  • NtUserCreateActivationObject
  • NtUserCreateActivationGroup
  • NtUserCreateAcceleratorTable
  • NtUserCopyAcceleratorTable
  • NtUserMagControl
  • NtUserConfirmResizeCommit
  • NtConfigureInputSpace
  • NtUserConfigureActivationObject
  • NtUserCompositionInputSinkViewInstanceIdFromPoint
  • NtUserCompositionInputSinkLuidFromPoint
  • NtUserCloseWindowStation
  • NtUserCloseDesktop
  • NtUserClipCursor
  • NtUserClearForeground
  • NtUserChildWindowFromPointEx
  • NtUserCheckWindowThreadDesktop
  • NtUserCheckProcessSession
  • NtUserGetDpiForCurrentProcess
  • NtUserCheckProcessForClipboardAccess
  • NtUserChangeWindowMessageFilterEx
  • NtUserCanBrokerForceForeground
  • NtUserCalculatePopupWindowPosition
  • NtUserCalcMenuBar
  • NtUserBroadcastThemeChangeEvent
  • NtUserBlockInput
  • NtUserBeginPaint
  • NtUserBeginLayoutUpdate
  • NtUserAttachThreadInput
  • NtUserAddVisualIdentifier
  • NtUserAcquireInteractiveControlBackgroundAccess
  • NtUserGetClipboardData
  • NtUserAcquireIAMKey
  • NtYieldExecution
  • NtDeleteValueKey
  • NtSetValueKey
  • NtCreateKey
  • NtVdmControl
  • NtOpenDirectoryObject
  • NtSetSecurityObject
  • NtQuerySecurityObject
  • NtQueryInformationProcess
  • ZwQueryWnfStateData
  • NtPowerInformation
  • NtRaiseHardError
  • NtCallbackReturn
  • NtQuerySystemInformation
  • NtOpenProcessToken
  • NtOpenThreadToken
  • NtQueryInformationToken
  • NtQueryVirtualMemory
  • NtQueryValueKey
  • NtEnumerateKey
  • NtClose
  • NtOpenKey
Functions related to the privilege level:
  • CheckTokenMembership
Can take screenshots:
  • BitBlt
  • CreateCompatibleDC
Info The PE is digitally signed. Signer: Microsoft Windows
Issuer: Microsoft Windows Production PCA 2011
Safe VirusTotal score: 0/65 (Scanned on 2021-11-19 03:52:53) All the AVs think this file is safe.

Hashes

MD5 f804d60514ec31233e6df99949b7ff1e
SHA1 96d48b58e741a33d6729d4d2ae57f7f52a0d4961
SHA256 a1331a9b4c8cca6ccdda97efa7b57fe249cb1753b0ee9c212a41856866c21b23
SHA3 ba620a3ef37e10a9ca21ff0af7783b14945e43cdcc7d0ab43159a00d05dd7a73
SSDeep 24576:TNjNU+J4wogYQIA4wPrfZk9BFAoUXlJJBwuCx59U4IgL5pQ:h94wogYQIA4qrfqIokPJBwuOTU4IJ
Imports Hash 7c0d348798fbf59b38cf67d2d0b59409

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0xe8

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 7
TimeDateStamp 1971-Sep-11 21:58:36
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_DLL
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0x90e00
SizeOfInitializedData 0x10b800
SizeOfUninitializedData 0
AddressOfEntryPoint 0x00000000000182D0 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x180000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion A.0
ImageVersion A.0
SubsystemVersion A.0
Win32VersionValue 0
SizeOfImage 0x1a1000
SizeOfHeaders 0x400
Checksum 0x1a8575
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
SizeofStackReserve 0x40000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 6906c99e4218bd9cb02f722de453dec6
SHA1 ca1c2f7482194844f969e92cf4d4a802c2416e02
SHA256 9531158c08a37cdb2e00938875fd37e84707343a662e5a73cf2953eb0ed3c7ce
SHA3 a8f916ec7e13c067643e7bc0a9fc0c2d79183d43bfb6bd4b24f40e7d33781f1a
VirtualSize 0x90dc8
VirtualAddress 0x1000
SizeOfRawData 0x90e00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.34801

.rdata

MD5 d91d9cfbfd384ca2af39b34d102db436
SHA1 8dde604b1ebdf0b89ccb3f47ef7805119a4f35ba
SHA256 449001cd7ab5dfbc39e1c8c2f826ff130938f89f043879a6983f76c0092d487d
SHA3 7f96a4525268683c5b8c0deef96fcbb552c92b2683e364b24e71528064a48d18
VirtualSize 0x20a4e
VirtualAddress 0x92000
SizeOfRawData 0x20c00
PointerToRawData 0x91200
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.5978

.data

MD5 21f57a60f0091223ee2f5682e964bac6
SHA1 dc2d7991a2ec4b056dceab9021efe53e34874cc8
SHA256 9589de0e91501b6cedce98dd75c433df8b5189f91555b7cde7e7aeff5598218b
SHA3 2112a83ef002f4251cdda2e2d64b1b4ba63e17436eced39fa145e3e922967918
VirtualSize 0x1f2e
VirtualAddress 0xb3000
SizeOfRawData 0xa00
PointerToRawData 0xb1e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 2.68087

.pdata

MD5 aa4bfafa79e952bd315bf48763c794bf
SHA1 833da75068014664c7d34804356e47114c7b0512
SHA256 1b69882b9b7981028e4b0f5a56b500b8d941489393c47f7c4f009a10e9c8eb3e
SHA3 eddb670b1775032ba2fc828d793bb49ca044af862f2a2119643ccbe60a193f50
VirtualSize 0x7128
VirtualAddress 0xb5000
SizeOfRawData 0x7200
PointerToRawData 0xb2800
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.91989

.didat

MD5 90b38cc6ca08afb74f0b3f73a723133c
SHA1 e302458329044d1cf08a67de1a37b8c63f6e715d
SHA256 e54a726ba0ee9b6369e056f3ac5d32ca1b40c5aaf9491f5191b69625bdb9a7cc
SHA3 1de7a647c0f2fcf8b52ea74d2d5842556e18330f9b98c6843771b01d07245f02
VirtualSize 0xf0
VirtualAddress 0xbd000
SizeOfRawData 0x200
PointerToRawData 0xb9a00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 1.627

.rsrc

MD5 3e5c072d09db3d2adec5e26ad7b6b456
SHA1 4f88f4ea5c9785797b8ee4382b171bce854092d5
SHA256 013eafe4849c40757e09f5b396dfc9a2e1aed30fa7802afeeb8011cffc7291d0
SHA3 81b3e3b39506b81e5297fed9e52db341b175e291ccb17e6fa854ee93c77c8183
VirtualSize 0xe11a0
VirtualAddress 0xbe000
SizeOfRawData 0xe1200
PointerToRawData 0xb9c00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 3.66999

.reloc

MD5 7696f20627e75992454a3cb19dad5bba
SHA1 6bf141fe1ee2da365ee5433d47592b37c48371b6
SHA256 13ab2e445673e18384a107bebd5026193408521ef4765aac0c20474548e87630
SHA3 06a7caa396d604b1c89a03dd397e3beb61d6cdf373bad1606396c04aa58e98fd
VirtualSize 0x438
VirtualAddress 0x1a0000
SizeOfRawData 0x600
PointerToRawData 0x19ae00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 4.41769

Imports

win32u.dll NtUserTestForInteractiveUser
NtUserTransformRect
NtUserGetClassName
NtUserSetScrollInfo
NtUserSBGetParms
NtUserUpdateLayeredWindow
NtUserFindWindowEx
NtUserRegisterClassExWOW
NtUserPostThreadMessage
NtUserSetClassLongPtr
NtUserGetClipboardFormatName
NtUserRegisterWindowMessage
NtUserGetKeyNameText
NtUserMapVirtualKeyEx
NtUserEnumDisplayDevices
NtUserGetClassInfoEx
NtUserChangeDisplaySettings
NtUserRemoveProp
NtUserUnregisterClass
NtUserEnumDisplaySettings
NtUserGetAltTabInfo
NtUserSetClassLong
NtUserGetMessage
NtUserGetKeyboardLayoutName
NtUserDrawCaptionTemp
NtUserSetProp
NtUserVkKeyScanEx
NtUserCallMsgFilter
NtUserCallHwndLockSafe
NtUserSetImeOwnerWindow
NtUserNotifyIMEStatus
NtUserUpdateInputContext
NtUserCountClipboardFormats
NtUserGetPriorityClipboardFormat
NtUserGetClipboardOwner
NtUserGetClipboardSequenceNumber
NtUserGetClipboardViewer
NtUserSetClipboardViewer
NtUserChangeClipboardChain
NtUserAddClipboardFormatListener
NtUserRemoveClipboardFormatListener
NtUserGetUpdatedClipboardFormats
NtUserSetWindowCompositionAttribute
NtUserWOWCleanup
NtUserTranslateAccelerator
NtMITSetLastInputRecipient
NtUserSetClipboardData
NtUserDrawIconEx
NtUserGetUpdateRgn
NtUserGetUpdateRect
NtUserWaitForInputIdle
NtUserMsgWaitForMultipleObjectsEx
NtUserWaitForMsgAndEvent
NtUserSetObjectInformation
NtUserCreateWindowStation
NtUserOpenWindowStation
NtUserCreateDesktopEx
NtUserOpenDesktop
NtUserSwitchDesktop
NtUserYieldTask
NtUserGetMenuIndex
NtUserGetQueueStatus
NtUserCallHwndOpt
NtUserUnloadKeyboardLayout
NtUserGetKeyboardLayout
NtUserCreateWindowEx
NtUserSetProcessDpiAwarenessContext
NtUserGetProcessDpiAwarenessContext
NtUserGetDpiForMonitor
NtUserShutdownBlockReasonCreate
NtUserGetCurrentDpiInfoForWindow
NtUserCallHwndSafe
NtUserTransformPoint
NtUserSystemParametersInfoForDpi
NtCreateCompositionInputSink
NtUserCreatePalmRejectionDelayZone
NtUserDestroyPalmRejectionDelayZone
NtUserSystemParametersInfo
NtUserGetProp
NtUserGetHDevName
NtUserGetRawInputDeviceInfo
NtUserEnableMenuItem
NtUserCallNextHookEx
NtGdiDdDDIEscape
NtUserDisplayConfigGetDeviceInfo
NtUserGetDisplayConfigBufferSizes
NtUserSetDisplayConfig
NtUserQueryDisplayConfig
NtUserDisplayConfigSetDeviceInfo
NtUserFunctionalizeDisplayConfig
NtMITSetInputDelegationMode
NtMITGetCursorUpdateHandle
NtMITSynthesizeTouchInput
NtUserHwndSetRedirectionInfo
NtUserHwndQueryRedirectionInfo
NtUserEnableIAMAccess
NtUserGetOpenClipboardWindow
NtUserActivateKeyboardLayout
NtUserSetThreadDesktop
NtUserCallTwoParam
NtUserCallNoParam
NtUserPaintDesktop
NtUserModifyWindowTouchCapability
NtUserDefSetText
NtUserSetCursorIconData
NtUserFindExistingCursorIcon
NtUserSetSystemCursor
NtUserSetWindowStationUser
NtUserInternalGetWindowIcon
NtUserInternalGetWindowText
NtUserSetWindowRgnEx
NtUserSetWindowRgn
NtUserTranslateMessage
NtUserSetWindowLong
NtUserPeekMessage
NtUserOpenClipboard
NtUserGetKeyState
NtUserGetAsyncKeyState
NtUserDrawCaption
NtUserRegisterUserApiHook
NtUserNotifyWinEvent
NtUserSetWinEventHook
NtUserSetWindowsHookEx
NtUserCreateLocalMemHandle
NtUserConvertMemHandle
NtUserGetWOWClass
NtUserEvent
NtUserUpdatePerUserSystemParameters
NtUserLoadKeyboardLayoutEx
NtUserToUnicodeEx
NtUserSetSysColors
NtUserCallHwnd
NtUserModifyUserStartupInfoFlags
NtUserMNDragLeave
NtUserMNDragOver
NtUserDrawMenuBarTemp
NtUserThunkedMenuInfo
NtUserCheckMenuItem
NtUserMinMaximize
NtUserSetWindowLongPtr
NtUserCheckAccessForIntegrityLevel
NtUserScrollWindowEx
NtUserCallHwndParamLock
NtUserDeferWindowPosAndBand
NtUserInitializeClientPfnArrays
NtUserProcessConnect
gDispatchTableValues
NtUserDisableProcessWindowFiltering
NtUserSetProcessUIAccessZorder
NtUserGetRawInputBuffer
NtUserScrollDC
NtUserSetSystemTimer
NtUserCloseClipboard
NtUserEmptyClipboard
NtUserIsClipboardFormatAvailable
NtUserShowCaret
NtUserCreateCaret
NtUserHideCaret
NtUserGetControlColor
NtUserSetCursor
NtUserSetThreadState
NtUserQueryWindow
NtUserFillWindow
NtUserDdeInitialize
NtUserUpdateInstance
NtUserConsoleControl
NtUserSetInformationThread
NtUserSetParent
NtUserReleaseDC
NtUserCallHwndParamLockSafe
NtUserPostMessage
NtUserGetTouchInputInfo
NtUserLockCursor
NtUserLinkDpiCursor
NtUserGetRequiredCursorSizes
NtUserGetCursorFrameInfo
NtUserGetIconInfo
NtUserDestroyAcceleratorTable
NtUserReportInertia
NtUserGetHimetricScaleFactorFromPixelLocation
NtUserRegisterEdgy
NtUserRegisterPointerInputTarget
NtUserGetPointerInfoList
NtUserGetCPD
NtUserCallOneParam
NtUserValidateTimerCallback
NtUserDispatchMessage
NtUserAutoPromoteMouseInPointer
NtUserGetDManipHookInitFunction
NtUserCallHwndLock
NtUserSetMenu
NtUserSetMenuFlagRtoL
NtUserThunkedMenuItemInfo
NtUserSetWindowsHookAW
NtUserUnhookWindowsHookEx
NtUserRealWaitMessageEx
NtUserRealInternalGetMessage
NtUserMessageCall
NtUserInjectGesture
NtUserGetGestureExtArgs
NtUserGetGestureInfo
NtUserBuildNameList
NtUserBuildPropList
NtUserBuildHwndList
NtUserGetAtomName
NtUserCallHwndParam
NtUserAlterWindowStyle
NtUserSetWindowFNID
NtUserBitBltSysBmp
NtUserEnableScrollBar
NtUserGetOemBitmapSize
NtUserGetIconSize
NtUserGetThreadState
NtUserGetDC
NtUserGetControlBrush
NtUserDestroyCursor
NtUserCreateEmptyCursorObject
NtUserSetImeHotKey
NtUserGetImeHotKey
NtUserWindowFromPoint
NtUserWindowFromPhysicalPoint
NtUserWindowFromDC
NtUserWaitMessage
NtUserWaitForRedirectionStartComplete
NtUserWaitAvailableMessageEx
NtUserValidateRect
NtUserUserHandleGrantAccess
NtUserUpdateWindowTrackingInfo
NtUserUpdateWindowInputSinkHints
NtUserUpdateDefaultDesktopThumbnail
NtUserUnregisterUserApiHook
NtUserUnregisterSessionPort
NtUserUnregisterHotKey
NtUserUnlockWindowStation
NtUserUnhookWinEvent
NtUserUndelegateInput
NtUserTrackPopupMenuEx
NtUserTrackMouseEvent
NtUserSoundSentry
NtUserSlicerControl
NtUserDiscardPointerFrameMessages
NtUserSignalRedirectionStartComplete
NtUserShutdownBlockReasonQuery
NtUserShutdownReasonDestroy
NtUserShowWindowAsync
NtUserShowWindow
NtUserShowSystemCursor
NtUserShowScrollBar
NtUserShowCursor
NtUserSetWindowWord
NtUserSetWindowShowState
NtUserSetWindowPos
NtUserSetWindowPlacement
NtUserSetWindowGroup
NtUserSetWindowFeedbackSetting
NtUserSetWindowDisplayAffinity
NtUserSetWindowCompositionTransition
NtUserSetWindowBand
NtUserSetWindowArrangement
NtUserSetThreadInputBlocked
NtUserSetTargetForResourceBrokering
NtUserSetSystemMenu
NtUserSetShellWindowEx
NtSetShellCursorState
NtUserSetProcessWindowStation
NtUserSetProcessRestrictionExemption
NtUserSetProcessMousewheelRoutingMode
NtUserSetProcessInteractionFlags
NtUserSetPrecisionTouchPadConfiguration
NtSetPointerDeviceInputSpace
NtUserSetMirrorRendering
NtUserSetMenuDefaultItem
NtUserSetMenuContextHelpId
NtUserMagSetContextInformation
NtUserSetMagnificationDesktopMagnifierOffsetsDWMUpdated
NtUserSetLayeredWindowAttributes
NtUserSetKeyboardState
NtUserSetInternalWindowPos
NtUserSetInteractiveCtrlRotationAngle
NtUserSetInteractiveControlFocus
NtUserSetInputServiceState
NtUserSetGestureConfig
NtUserSetFullscreenMagnifierOffsetsDWMUpdated
NtUserSetForegroundWindowForApplication
NtUserSetFocus
NtUserSetFeatureReportResponse
NtUserSetFallbackForeground
NtUserSetDisplayMapping
NtUserSetDisplayAutoRotationPreferences
NtUserSetDialogControlDpiChangeBehavior
NtUserSetDesktopVisualInputSink
NtUserSetDesktopColorTransform
NtUserSetCursorPos
NtSetCursorInputSpace
NtUserSetCursorContents
NtUserSetCoreWindowPartner
NtUserSetCoreWindow
NtUserSetTimer
NtUserSetClassWord
NtUserSetChildWindowNoActivate
NtUserSetCapture
NtUserSetCalibrationData
NtUserSetBrokeredForeground
NtUserSetBridgeWindowChild
NtUserSetAutoRotation
NtUserSetActiveWindow
NtUserSetActiveProcessForMonitor
NtUserSetActivationFilter
NtUserSendInteractiveControlHapticsReport
NtUserSendInput
NtUserSendEventMessage
NtUserRestoreWindowDpiChanges
NtUserResolveDesktopForWOW
NtUserRequestMoveSizeOperation
NtUserRemoveVisualIdentifier
NtUserRemoveMenu
NtUserReleaseDwmHitTestWaiters
NtUserRegisterTouchPadCapable
NtUserRegisterTouchHitTestingWindow
NtUserRegisterTasklist
NtUserRegisterShellPTPListener
NtUserRegisterSessionPort
NtUserRegisterServicesProcess
NtUserRegisterRawInputDevices
NtUserRegisterPointerDeviceNotifications
NtUserRegisterHotKey
NtUserRegisterErrorReportingDialog
NtUserRegisterDManipHook
NtUserRegisterBSDRWindow
NtUserRedrawWindow
NtUserRealChildWindowFromPoint
NtRIMUpdateInputObserverRegistration
NtRIMUnregisterForInput
NtRIMSetTestModeStatus
NtRIMSetExtendedDeviceProperty
NtRIMRemoveInputObserver
NtRIMRegisterForInput
NtRIMReadInput
NtRIMQueryDevicePath
NtRIMOnTimerNotification
NtRIMOnPnpNotification
NtRIMObserveNextInput
NtRIMGetSourceProcessId
NtRIMGetPhysicalDeviceRect
NtRIMGetDevicePropertiesLockfree
NtRIMGetDeviceProperties
NtRIMGetDevicePreparsedDataLockfree
NtRIMGetDevicePreparsedData
NtRIMFreeInputBuffer
NtRIMEnableMonitorMappingForDevice
NtRIMDeviceIoControl
NtRIMAreSiblingDevices
NtRIMAddInputObserver
NtUserQuerySendMessage
NtUserQueryBSDRWindow
NtUserQueryActivationObject
NtUserPromotePointer
NtUserProcessInkFeedbackCommand
NtUserPrintWindow
NtUserPerMonitorDPIPhysicalToLogicalPoint
NtUserPhysicalToLogicalPoint
NtUserPhysicalToLogicalDpiPointForWindow
NtUserPaintMonitor
NtUserPaintMenuBar
NtUserOpenThreadDesktop
NtUserOpenInputDesktop
NtUserNavigateFocus
NtUserMoveWindow
NtUserMenuItemFromPoint
NtMapVisualRelativePoints
NtUserMapPointsByVisualIdentifier
NtUserLogicalToPerMonitorDPIPhysicalPoint
NtUserLogicalToPhysicalPoint
NtUserLogicalToPhysicalDpiPointForWindow
NtUserLockWorkStation
NtUserLockWindowUpdate
NtUserLockWindowStation
NtUserLayoutCompleted
NtUserKillTimer
NtUserIsWindowGDIScaledDpiMessageEnabled
NtUserIsWindowBroadcastingDpiToChildren
NtUserIsTouchWindow
NtUserIsTopLevelWindow
NtUserIsResizeLayoutSynchronizationEnabled
NtIsOneCoreTransformMode
NtUserIsNonClientDpiScalingEnabled
NtUserIsMouseInputEnabled
NtUserIsMouseInPointerEnabled
NtUserIsChildWindowDpiMessageEnabled
NtUserInvalidateRgn
NtUserInvalidateRect
NtUserInteractiveControlQueryUsage
NtInputSpaceRegionFromPoint
NtUserInjectTouchInput
NtUserInjectPointerInput
NtUserInjectMouseInput
NtUserInjectKeyboardInput
NtUserInjectGenericHidInput
NtUserInjectDeviceInput
NtUserInitializeTouchInjection
NtUserInitializePointerDeviceInjectionEx
NtUserInitializePointerDeviceInjection
NtUserInitializeInputDeviceInjection
NtUserInitializeGenericHidInjection
NtUserInheritWindowMonitor
NtUserImpersonateDdeClientWindow
NtUserHungWindowFromGhostWindow
NtUserHiliteMenuItem
NtUserHidePointerContactVisualization
NtUserHandleDelegatedInput
NtUserGhostWindowFromHungWindow
NtUserGetWindowRgnEx
NtUserGetWindowProcessHandle
NtUserGetWindowPlacement
NtUserGetWindowMinimizeRect
NtUserGetWindowGroupId
NtUserGetWindowFeedbackSetting
NtUserGetWindowDisplayAffinity
NtUserGetWindowDC
NtUserGetWindowCompositionInfo
NtUserGetWindowCompositionAttribute
NtUserGetWindowBand
NtUserGetObjectInformation
NtUserGetUniformSpaceMapping
NtUserGetTouchValidationStatus
NtUserGetTopLevelWindow
NtUserGetTitleBarInfo
NtUserGetThreadDesktop
NtUserGetSystemMenu
NtUserGetSystemDpiForProcess
NtUserGetScrollBarInfo
NtUserGetResizeDCompositionSynchronizationObject
NtUserGetRegisteredRawInputDevices
NtUserGetRawPointerDeviceData
NtUserGetRawInputDeviceList
NtUserGetRawInputData
NtUserGetQueueStatusReadonly
NtUserGetProcessWindowStation
NtUserGetProcessUIContextInformation
NtUserGetPrecisionTouchPadConfiguration
NtUserGetPointerType
NtUserGetPointerProprietaryId
NtUserGetPointerInputTransform
NtUserGetPointerFrameTimes
NtUserGetPointerDevices
NtUserGetPointerDeviceRects
NtUserGetPointerDeviceProperties
NtUserGetPointerDeviceOrientation
NtUserGetPointerDeviceInputSpace
NtUserGetPointerDeviceCursors
NtUserGetPointerDevice
NtUserGetPointerCursorId
NtUserGetPhysicalDeviceRect
NtUserGetOwnerTransformedMonitorRect
NtUserGetMouseMovePointsEx
NtUserGetMenuItemRect
NtUserGetMenuBarInfo
NtUserMagGetContextInformation
NtUserGetListBoxInfo
NtUserGetLayeredWindowAttributes
NtUserGetKeyboardState
NtUserGetKeyboardLayoutList
NtUserGetInternalWindowPos
NtUserGetInteractiveCtrlSupportedWaveforms
NtUserGetInteractiveControlInfo
NtUserGetInteractiveControlDeviceInfo
NtUserGetInputLocaleInfo
NtUserGetInputContainerId
NtUserGetGuiResources
NtUserGetGestureConfig
NtUserGetGUIThreadInfo
NtUserGetForegroundWindow
NtUserGetExtendedPointerDeviceProperty
NtUserGetDoubleClickTime
NtUserGetDisplayAutoRotationPreferencesByProcessId
NtUserGetDisplayAutoRotationPreferences
NtUserGetDesktopID
NtUserGetDCEx
NtUserGetCursorInfo
NtUserGetCursor
NtUserGetCurrentInputMessageSource
NtUserGetComboBoxInfo
NtUserGetClipboardAccessToken
NtUserGetClipCursor
NtUserGetCaretPos
NtUserGetCaretBlinkTime
NtUserGetCIMSSM
NtUserGetAutoRotationState
NtUserGetAncestor
NtUserGetActiveProcessesDpis
NtUserFrostCrashedWindow
NtUserForceWindowToDpiForTest
NtUserFlashWindowEx
NtUserExcludeUpdateRgn
NtUserEnumDisplayMonitors
NtUserEndPaint
NtUserEndMenu
NtUserEndDeferWindowPosEx
NtUserEnableWindowResizeOptimization
NtUserEnableWindowGroupPolicy
NtUserEnableWindowGDIScaledDpiMessage
NtUserEnableTouchPad
NtUserEnableSoftwareCursorForScreenCapture
NtUserEnableResizeLayoutSynchronization
NtEnableOneCoreTransformMode
NtUserEnableNonClientDpiScaling
NtUserEnableMouseInputForCursorSuppression
NtUserEnableMouseInPointerForWindow
NtUserEnableMouseInPointer
NtUserEnableChildWindowDpiMessage
NtUserDwmValidateWindow
NtUserDwmKernelStartup
NtUserDwmKernelShutdown
NtUserDwmGetRemoteSessionOcclusionState
NtUserDwmGetRemoteSessionOcclusionEvent
NtUserDrawAnimatedRects
NtUserDragObject
NtUserDragDetect
NtUserDownlevelTouchpad
NtUserDoSoundDisconnect
NtUserDoSoundConnect
NtUserDisableImmersiveOwner
NtUserDestroyWindow
NtUserRemoveInjectionDevice
NtUserDestroyMenu
NtUserDestroyDCompositionHwndTarget
NtUserDestroyActivationObject
NtUserDestroyActivationGroup
NtUserDeleteWindowGroup
NtUserDeleteMenu
NtUserDelegateInput
NtUserDelegateCapturePointers
NtUserDeferWindowDpiChanges
NtUserCreateWindowGroup
NtUserCreateDCompositionHwndTarget
NtUserCreateActivationObject
NtUserCreateActivationGroup
NtUserCreateAcceleratorTable
NtUserCopyAcceleratorTable
NtUserMagControl
NtUserConfirmResizeCommit
NtConfigureInputSpace
NtUserConfigureActivationObject
NtUserCompositionInputSinkViewInstanceIdFromPoint
NtUserCompositionInputSinkLuidFromPoint
NtUserCloseWindowStation
NtUserCloseDesktop
NtUserClipCursor
NtUserClearForeground
NtUserChildWindowFromPointEx
NtUserCheckWindowThreadDesktop
NtUserCheckProcessSession
NtUserGetDpiForCurrentProcess
NtUserCheckProcessForClipboardAccess
NtUserChangeWindowMessageFilterEx
NtUserCanBrokerForceForeground
NtUserCalculatePopupWindowPosition
NtUserCalcMenuBar
NtUserBroadcastThemeChangeEvent
NtUserBlockInput
NtUserBeginPaint
NtUserBeginLayoutUpdate
NtUserAttachThreadInput
NtUserAddVisualIdentifier
NtUserAcquireInteractiveControlBackgroundAccess
NtUserGetClipboardData
NtUserAcquireIAMKey
ntdll.dll __chkstk
toupper
memcmp
wcscmp
memcpy
RtlSetLastWin32Error
NlsAnsiCodePage
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
_wtoi
RtlRaiseException
NtYieldExecution
NtDeleteValueKey
NtSetValueKey
NtCreateKey
wcstoul
NtVdmControl
RtlFreeUnicodeString
RtlCreateUnicodeStringFromAsciiz
NtOpenDirectoryObject
NtSetSecurityObject
NtQuerySecurityObject
NtQueryInformationProcess
wcstol
ZwQueryWnfStateData
wcsncmp
wcsnlen
RtlDeleteHashTable
RtlInitStrongEnumerationHashTable
RtlLookupEntryHashTable
RtlStronglyEnumerateEntryHashTable
strnlen
RtlInsertEntryHashTable
RtlInitEnumerationHashTable
RtlRemoveEntryHashTable
strncmp
RtlEndStrongEnumerationHashTable
RtlCreateHashTable
RtlEndEnumerationHashTable
RtlEnumerateEntryHashTable
RtlQueryPackageClaims
RtlInitAnsiString
RtlAnsiStringToUnicodeString
RtlCompareUnicodeString
wcsncpy_s
iswspace
qsort
VerSetConditionMask
NtPowerInformation
RtlMultiByteToUnicodeSize
LdrFlushAlternateResourceModules
RtlImageNtHeader
RtlPcToFileHeader
NtRaiseHardError
NtCallbackReturn
wcsncat_s
RtlRetrieveNtUserPfn
RtlInitializeNtUserPfn
_stricmp
RtlGetIntegerAtom
RtlResetNtUserPfn
RtlQueryInformationActiveActivationContext
RtlQueryElevationFlags
NtQuerySystemInformation
RtlInitializeCriticalSection
RtlEqualUnicodeString
LdrQueryImageFileExecutionOptions
isspace
memmove_s
RtlDeleteCriticalSection
memcpy_s
CsrClientConnectToServer
sscanf_s
strrchr
strcpy_s
RtlSizeHeap
RtlGetThreadLangIdByIndex
RtlRunEncodeUnicodeString
RtlRunDecodeUnicodeString
_wcsicmp
RtlReAllocateHeap
RtlNtStatusToDosError
RtlGetActiveConsoleId
CsrFreeCaptureBuffer
wcsrchr
CsrClientCallServer
CsrAllocateMessagePointer
CsrAllocateCaptureBuffer
NtOpenProcessToken
NtOpenThreadToken
RtlFreeSid
NtQueryInformationToken
RtlAllocateAndInitializeSid
NtQueryVirtualMemory
_vsnwprintf
RtlUnicodeToMultiByteSize
RtlIsThreadWithinLoaderCallout
RtlReleaseActivationContext
RtlFindActivationContextSectionString
RtlDeactivateActivationContextUnsafeFast
RtlActivateActivationContextUnsafeFast
RtlUnicodeToMultiByteN
RtlMultiByteToUnicodeN
RtlEnterCriticalSection
RtlLeaveCriticalSection
__C_specific_handler
wcscat_s
wcscpy_s
NtQueryValueKey
NtEnumerateKey
NtClose
NtOpenKey
RtlOpenCurrentUser
RtlUnicodeStringToInteger
RtlInitUnicodeString
swprintf_s
RtlFreeHeap
RtlAllocateHeap
memset
memmove
api-ms-win-core-localization-l1-2-0.dll GetACP
GetThreadLocale
IsDBCSLeadByteEx
ConvertDefaultLocale
GetOEMCP
IsDBCSLeadByte
GetSystemDefaultLangID
GetCPInfo
GetLocaleInfoW
GetUserDefaultLCID
FormatMessageW
IsValidLocale
api-ms-win-core-registry-l1-1-0.dll RegCreateKeyExW
RegGetValueW
RegCloseKey
RegQueryValueExW
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
RegDeleteKeyExW
RegOpenKeyExW
api-ms-win-core-heap-l2-1-0.dll LocalFree
LocalLock
LocalReAlloc
LocalUnlock
GlobalAlloc
GlobalFree
LocalAlloc
api-ms-win-core-libraryloader-l1-2-0.dll GetModuleFileNameA
DisableThreadLibraryCalls
FindResourceExW
FreeLibrary
GetModuleFileNameW
EnumResourceNamesExW
GetProcAddress
LoadLibraryExW
GetModuleHandleExW
SizeofResource
LoadResource
GetModuleHandleW
GetModuleHandleA
api-ms-win-eventing-provider-l1-1-0.dll EventRegister
EventUnregister
EventSetInformation
EventWrite
EventWriteTransfer
EventActivityIdControl
EventProviderEnabled
api-ms-win-core-processthreads-l1-1-0.dll GetCurrentProcess
ExitThread
GetCurrentProcessId
TerminateProcess
GetExitCodeThread
GetCurrentThread
CreateProcessW
ProcessIdToSessionId
GetCurrentThreadId
CreateThread
api-ms-win-core-synch-l1-1-0.dll AcquireSRWLockExclusive
ReleaseSRWLockExclusive
AcquireSRWLockShared
ReleaseSRWLockShared
ReleaseSemaphore
ReleaseMutex
SetEvent
WaitForSingleObjectEx
InitializeCriticalSectionEx
WaitForSingleObject
OpenEventW
CreateMutexExW
CreateSemaphoreExW
EnterCriticalSection
LeaveCriticalSection
InitializeSRWLock
OpenSemaphoreW
api-ms-win-core-string-l1-1-0.dll CompareStringW
MultiByteToWideChar
CompareStringOrdinal
WideCharToMultiByte
GetStringTypeW
FoldStringW
api-ms-win-core-sysinfo-l1-1-0.dll GetSystemWindowsDirectoryW
GetVersionExW
GetSystemTimeAsFileTime
GetTickCount
GetSystemDirectoryW
api-ms-win-security-base-l1-1-0.dll CheckTokenMembership
api-ms-win-core-handle-l1-1-0.dll CloseHandle
api-ms-win-core-errorhandling-l1-1-0.dll SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetLastError
GetLastError
api-ms-win-core-string-l2-1-0.dll CharPrevW
IsCharAlphaNumericW
CharLowerW
IsCharUpperW
IsCharAlphaW
CharLowerBuffW
CharUpperBuffW
CharNextW
IsCharLowerW
CharUpperW
api-ms-win-core-synch-l1-2-0.dll Sleep
api-ms-win-core-processenvironment-l1-1-0.dll ExpandEnvironmentStringsW
SearchPathW
GetCurrentDirectoryW
SetCurrentDirectoryW
api-ms-win-core-file-l1-1-0.dll GetFileSize
FindFirstFileW
FindNextFileW
FindClose
GetLogicalDrives
SetFileTime
ReadFile
CreateFileW
api-ms-win-core-heap-l1-1-0.dll HeapAlloc
HeapFree
GetProcessHeap
api-ms-win-core-debug-l1-1-0.dll OutputDebugStringW
DebugBreak
IsDebuggerPresent
api-ms-win-core-threadpool-l1-2-0.dll CreateThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
SetThreadpoolTimer
api-ms-win-core-processthreads-l1-1-1.dll GetProcessMitigationPolicy
api-ms-win-core-memory-l1-1-0.dll UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
api-ms-win-core-profile-l1-1-0.dll QueryPerformanceFrequency
QueryPerformanceCounter
api-ms-win-core-memory-l1-1-3.dll SetProcessValidCallTargets
api-ms-win-core-privateprofile-l1-1-0.dll GetPrivateProfileStringW
WritePrivateProfileStringW
api-ms-win-core-atoms-l1-1-0.dll GlobalFindAtomA
AddAtomW
GlobalGetAtomNameW
DeleteAtom
GlobalDeleteAtom
GlobalGetAtomNameA
AddAtomA
GlobalAddAtomW
GlobalFindAtomW
GetAtomNameW
GlobalAddAtomA
GetAtomNameA
api-ms-win-core-heap-obsolete-l1-1-0.dll GlobalUnlock
GlobalHandle
GlobalFlags
GlobalReAlloc
GlobalLock
LocalSize
GlobalSize
api-ms-win-core-string-obsolete-l1-1-0.dll lstrcmpiW
lstrlenA
lstrlenW
api-ms-win-core-localization-obsolete-l1-2-0.dll GetStringTypeA
api-ms-win-core-stringansi-l1-1-0.dll CharNextExA
IsCharAlphaNumericA
IsCharAlphaA
CharUpperA
CharPrevExA
CharUpperBuffA
IsCharLowerA
CharNextA
IsCharUpperA
CharLowerBuffA
CharPrevA
CharLowerA
api-ms-win-core-sidebyside-l1-1-0.dll QueryActCtxSettingsW
api-ms-win-core-kernel32-private-l1-1-0.dll RegisterWaitForInputIdle
KERNELBASE.dll WTSGetServiceSessionId
LoadStringBaseExW
api-ms-win-core-kernel32-legacy-l1-1-0.dll MulDiv
FindResourceExA
api-ms-win-core-kernel32-legacy-l1-1-1.dll VerifyVersionInfoW
api-ms-win-core-appinit-l1-1-0.dll LoadAppInitDlls
GDI32.dll PatBlt
SetBkMode
SelectObject
IntersectClipRect
SetTextAlign
GetTextAlign
GetStockObject
SetBkColor
SetTextColor
GetObjectW
GetBkColor
GetLayout
GdiGetBitmapBitsSize
GetDIBColorTable
GetDeviceCaps
StretchDIBits
GetMapMode
GetHFONT
ExtSelectClipRgn
GetClipRgn
SetGraphicsMode
GdiPrinterThunk
GdiLoadType1Fonts
GdiAddFontResourceW
GetRgnBox
ExtCreateRegion
GetRegionData
EnableEUDC
TextOutA
GdiReleaseDC
GdiConvertBitmapV5
GdiConvertToDevmodeW
GetClipBox
MirrorRgn
OffsetRgn
CreateRectRgnIndirect
SetRectRgn
CombineRgn
CreateRectRgn
GetBoundsRect
SetLayout
PlayEnhMetaFile
ExcludeClipRect
StretchBlt
Ellipse
CreateEllipticRgn
GetDCOrgEx
GdiTrackHDelete
GdiFixUpHandle
Rectangle
CreatePen
CreateBrushIndirect
PolyPatBlt
SetViewportOrgEx
GetViewportOrgEx
GetCurrentObject
GetTextCharacterExtra
SetTextCharacterExtra
SetLayoutWidth
GdiConvertAndCheckDC
SetBoundsRect
CreateSolidBrush
GdiProcessSetup
GdiDllInitialize
CopyEnhMetaFileW
CopyMetaFileW
SetPaletteEntries
CreatePalette
GetPaletteEntries
DeleteEnhMetaFile
DeleteMetaFile
GetPixel
GetTextCharsetInfo
QueryFontAssocStatus
ExtTextOutA
GetCharWidthInfo
GetCharWidthA
GetTextExtentPointA
GetTextFaceW
GetCharABCWidthsW
GetCharABCWidthsA
SetBrushOrgEx
GetDCDpiScaleValue
GetTextFaceAliasW
EnumFontsW
CreateFontIndirectW
TranslateCharsetInfo
GdiCreateLocalEnhMetaFile
GdiCreateLocalMetaFilePict
GdiConvertEnhMetaFile
GdiConvertMetaFilePict
GetTextColor
GetTextMetricsW
TextOutW
GetWindowExtEx
GetViewportExtEx
GetBkMode
GdiGetCharDimensions
GetTextCharset
GdiGetCodePage
GetTextExtentPointW
ExtTextOutW
RestoreDC
OffsetWindowOrgEx
SaveDC
GetObjectType
GetDIBits
SetDIBits
SetStretchBltMode
CreateDIBSection
GdiValidateHandle
CreateCompatibleBitmap
CreateDIBitmap
CreateDCW
GdiTrackHCreate
DeleteDC
BitBlt
CreateCompatibleDC
DeleteObject
CreateBitmap
api-ms-win-core-apiquery-l2-1-0.dll IsApiSetImplemented
api-ms-win-core-delayload-l1-1-1.dll ResolveDelayLoadedAPI
api-ms-win-core-delayload-l1-1-0.dll DelayLoadFailureHook
api-ms-win-core-apiquery-l1-1-0.dll ApiSetQueryApiSetPresence
api-ms-win-power-setting-l1-1-0.dll (delay-loaded) PowerSetActiveScheme
PowerGetActiveScheme
PowerSettingRegisterNotification
PowerSettingUnregisterNotification
PowerWriteACValueIndex
PowerWriteDCValueIndex

Delayed Imports

Attributes 0x1
Name api-ms-win-power-setting-l1-1-0.dll
ModuleHandle 0xb3f50
DelayImportAddressTable 0xbd048
DelayImportNameTable 0xa29b8
BoundDelayImportTable 0xa2d58
UnloadDelayImportTable 0
TimeStamp 1970-Jan-01 00:00:00

Ordinal 1502
Address 0x51ca0

GetPointerFrameArrivalTimes

Ordinal 1503
Address 0x50510

ActivateKeyboardLayout

Ordinal 1504
Address 0x2cb90

AddClipboardFormatListener

Ordinal 1505
Address 0x2d370

AddVisualIdentifier

Ordinal 1506
Address 0x33ec0

AdjustWindowRect

Ordinal 1507
Address 0x88b70

AdjustWindowRectEx

Ordinal 1508
Address 0x16970

AdjustWindowRectExForDpi

Ordinal 1509
Address 0x10350

AlignRects

Ordinal 1510
Address 0x8eaf0

AllowForegroundActivation

Ordinal 1511
Address 0x88be0

AllowSetForegroundWindow

Ordinal 1512
Address 0x2bc00

AnimateWindow

Ordinal 1513
Address 0x83550

AnyPopup

Ordinal 1514
Address 0x842f0

AppendMenuA

Ordinal 1515
Address 0x8c3f0

AppendMenuW

Ordinal 1516
Address 0x1fe50

AreDpiAwarenessContextsEqual

Ordinal 1517
Address 0x297d0

ArrangeIconicWindows

Ordinal 1518
Address 0x88c00

AttachThreadInput

Ordinal 1519
Address 0x33ed0

BeginDeferWindowPos

Ordinal 1520
Address 0x2a310

BeginPaint

Ordinal 1521
Address 0x33ef0

BlockInput

Ordinal 1522
Address 0x33f00

BringWindowToTop

Ordinal 1523
Address 0x31740

BroadcastSystemMessage

Ordinal 1524
Address 0x8c450

BroadcastSystemMessageA

Ordinal 1525
Address 0x8c450

BroadcastSystemMessageExA

Ordinal 1526
Address 0x8c480

BroadcastSystemMessageExW

Ordinal 1527
Address 0x8a190

BroadcastSystemMessageW

Ordinal 1528
Address 0x2b280

BuildReasonArray

Ordinal 1529
Address 0x32c30

CalcMenuBar

Ordinal 1530
Address 0x33f20

CalculatePopupWindowPosition

Ordinal 1531
Address 0x33f30

CallMsgFilter

Ordinal 1532
Address 0x85630

CallMsgFilterA

Ordinal 1533
Address 0x85630

CallMsgFilterW

Ordinal 1534
Address 0x8b9a0

CallNextHookEx

Ordinal 1535
Address 0x1fa0

CallWindowProcA

Ordinal 1536
Address 0x503a0

CallWindowProcW

Ordinal 1537
Address 0xe3f0

CancelShutdown

Ordinal 1538
Address 0x56f00

CascadeChildWindows

Ordinal 1539
Address 0x88c20

CascadeWindows

Ordinal 1540
Address 0x78a70

ChangeClipboardChain

Ordinal 1541
Address 0x86b50

ChangeDisplaySettingsA

Ordinal 1542
Address 0x85750

ChangeDisplaySettingsExA

Ordinal 1543
Address 0x313e0

ChangeDisplaySettingsExW

Ordinal 1544
Address 0x27500

ChangeDisplaySettingsW

Ordinal 1545
Address 0x8ba60

ChangeMenuA

Ordinal 1546
Address 0x78d60

ChangeMenuW

Ordinal 1547
Address 0x78e10

ChangeWindowMessageFilter

Ordinal 1548
Address 0x2b670

ChangeWindowMessageFilterEx

Ordinal 1549
Address 0x33f50

(#2)

Ordinal 1550
Address 0x7efd0

(#3)

Ordinal 1551
Address 0x7f060

(#4)

Ordinal 1552
Address 0x7ef80

DwmGetDxRgn

Ordinal 1553
Address 0x2d3f0

(#5)

Ordinal 1554
Address 0x2d3f0

CharLowerA

Ordinal 1555
Address 0x2d200

CharLowerBuffA

Ordinal 1556
Address 0x86b70

CharLowerBuffW

Ordinal 1557
Address 0x86b90

CharLowerW

Ordinal 1558
Address 0x32270

CharNextA

Ordinal 1559
Address 0x2b590

CharNextExA

Ordinal 1560
Address 0x86bb0

CharNextW

Ordinal 1561
Address 0x2c030

CharPrevA

Ordinal 1562
Address 0x1e20

CharPrevExA

Ordinal 1563
Address 0x86bd0

CharPrevW

Ordinal 1564
Address 0x86bf0

CharToOemA

Ordinal 1565
Address 0x28ab0

CharToOemBuffA

Ordinal 1566
Address 0x7dc90

CharToOemBuffW

Ordinal 1567
Address 0x7dce0

CharToOemW

Ordinal 1568
Address 0x7dd40

CharUpperA

Ordinal 1569
Address 0x29cb0

CharUpperBuffA

Ordinal 1570
Address 0x86c10

CharUpperBuffW

Ordinal 1571
Address 0x1360

CharUpperW

Ordinal 1572
Address 0x27010

CheckBannedOneCoreTransformApi

Ordinal 1573
Address 0x2d3e0

CheckDBCSEnabledExt

Ordinal 1574
Address 0x22090

CheckDlgButton

Ordinal 1575
Address 0x1b60

CheckMenuItem

Ordinal 1576
Address 0x1fb80

CheckMenuRadioItem

Ordinal 1577
Address 0x1910

CheckProcessForClipboardAccess

Ordinal 1578
Address 0x33f60

CheckProcessSession

Ordinal 1579
Address 0x33f70

CheckRadioButton

Ordinal 1580
Address 0x1380

CheckWindowThreadDesktop

Ordinal 1581
Address 0x33f80

ChildWindowFromPoint

Ordinal 1582
Address 0x88c50

ChildWindowFromPointEx

Ordinal 1583
Address 0x33f90

CliImmSetHotKey

Ordinal 1584
Address 0x4c070

ClientThreadSetup

Ordinal 1585
Address 0x1d890

ClientToScreen

Ordinal 1586
Address 0x117c0

ClipCursor

Ordinal 1587
Address 0x33fb0

CloseClipboard

Ordinal 1588
Address 0x2cd90

CloseDesktop

Ordinal 1589
Address 0x33fc0

CloseGestureInfoHandle

Ordinal 1590
Address 0x4f550

CloseTouchInputHandle

Ordinal 1591
Address 0x51bd0

CloseWindow

Ordinal 1592
Address 0x88d00

CloseWindowStation

Ordinal 1593
Address 0x33fd0

ConsoleControl

Ordinal 1594
Address 0x27820

ControlMagnification

Ordinal 1595
Address 0x34030

CopyAcceleratorTableA

Ordinal 1596
Address 0x50f90

CopyAcceleratorTableW

Ordinal 1597
Address 0x34040

CopyIcon

Ordinal 1598
Address 0x27370

CopyImage

Ordinal 1599
Address 0x15570

CopyRect

Ordinal 1600
Address 0x23fa0

CountClipboardFormats

Ordinal 1601
Address 0x2bf50

CreateAcceleratorTableA

Ordinal 1602
Address 0x51020

CreateAcceleratorTableW

Ordinal 1603
Address 0x34050

CreateCaret

Ordinal 1604
Address 0x2c180

CreateCursor

Ordinal 1605
Address 0x31d20

CreateDCompositionHwndTarget

Ordinal 1606
Address 0x34080

CreateDesktopA

Ordinal 1607
Address 0x88d40

CreateDesktopExA

Ordinal 1608
Address 0x88d80

CreateDesktopExW

Ordinal 1609
Address 0x2c640

CreateDesktopW

Ordinal 1610
Address 0x2c600

CreateDialogIndirectParamA

Ordinal 1611
Address 0x510b0

CreateDialogIndirectParamAorW

Ordinal 1612
Address 0x3b20

CreateDialogIndirectParamW

Ordinal 1613
Address 0x2930

CreateDialogParamA

Ordinal 1614
Address 0x510e0

CreateDialogParamW

Ordinal 1615
Address 0x3610

CreateIcon

Ordinal 1616
Address 0x511d0

CreateIconFromResource

Ordinal 1617
Address 0x512a0

CreateIconFromResourceEx

Ordinal 1618
Address 0x25d20

CreateIconIndirect

Ordinal 1619
Address 0x15cc0

CreateMDIWindowA

Ordinal 1620
Address 0x78aa0

CreateMDIWindowW

Ordinal 1621
Address 0x78b20

CreateMenu

Ordinal 1622
Address 0x323b0

CreatePopupMenu

Ordinal 1623
Address 0x2cd50

CreateSyntheticPointerDevice

Ordinal 1624
Address 0x7f090

CreateSystemThreads

Ordinal 1625
Address 0x8a260

CreateWindowExA

Ordinal 1626
Address 0x3c10

CreateWindowExW

Ordinal 1627
Address 0x76b0

CreateWindowInBand

Ordinal 1628
Address 0x5f50

CreateWindowInBandEx

Ordinal 1629
Address 0x5ff0

CreateWindowIndirect

Ordinal 1630
Address 0x84340

CreateWindowStationA

Ordinal 1631
Address 0x88f40

CreateWindowStationW

Ordinal 1632
Address 0x1de90

CsrBroadcastSystemMessageExW

Ordinal 1633
Address 0x2b1a0

CtxInitUser32

Ordinal 1634
Address 0x1d700

DdeAbandonTransaction

Ordinal 1635
Address 0x848c0

DdeAccessData

Ordinal 1636
Address 0x6b070

DdeAddData

Ordinal 1637
Address 0x6b130

DdeClientTransaction

Ordinal 1638
Address 0x849a0

DdeCmpStringHandles

Ordinal 1639
Address 0x6bcc0

DdeConnect

Ordinal 1640
Address 0x56450

DdeConnectList

Ordinal 1641
Address 0x56560

DdeCreateDataHandle

Ordinal 1642
Address 0x6b2d0

DdeCreateStringHandleA

Ordinal 1643
Address 0x6bce0

DdeCreateStringHandleW

Ordinal 1644
Address 0x2b010

DdeDisconnect

Ordinal 1645
Address 0x56850

DdeDisconnectList

Ordinal 1646
Address 0x56900

DdeEnableCallback

Ordinal 1647
Address 0x4dec0

DdeFreeDataHandle

Ordinal 1648
Address 0x6b430

DdeFreeStringHandle

Ordinal 1649
Address 0x6bd00

DdeGetData

Ordinal 1650
Address 0x6b4b0

DdeGetLastError

Ordinal 1651
Address 0x57e40

DdeGetQualityOfService

Ordinal 1652
Address 0x2d410

DdeImpersonateClient

Ordinal 1653
Address 0x57ea0

DdeInitializeA

Ordinal 1654
Address 0x57f40

DdeInitializeW

Ordinal 1655
Address 0x1d3a0

DdeKeepStringHandle

Ordinal 1656
Address 0x6bde0

DdeNameService

Ordinal 1657
Address 0x2acd0

DdePostAdvise

Ordinal 1658
Address 0x85030

DdeQueryConvInfo

Ordinal 1659
Address 0x85300

DdeQueryNextServer

Ordinal 1660
Address 0x56a20

DdeQueryStringA

Ordinal 1661
Address 0x6beb0

DdeQueryStringW

Ordinal 1662
Address 0x6bed0

DdeReconnect

Ordinal 1663
Address 0x56b80

DdeSetQualityOfService

Ordinal 1664
Address 0x2d410

DdeSetUserHandle

Ordinal 1665
Address 0x85530

DdeUnaccessData

Ordinal 1666
Address 0x6b620

DdeUninitialize

Ordinal 1667
Address 0x57f60

DefDlgProcA

Ordinal 1668
Address 0xa6460
ForwardName NTDLL.NtdllDialogWndProc_A

DefDlgProcW

Ordinal 1669
Address 0xa6487
ForwardName NTDLL.NtdllDialogWndProc_W

DefFrameProcA

Ordinal 1670
Address 0x78ba0

DefFrameProcW

Ordinal 1671
Address 0x30000

DefMDIChildProcA

Ordinal 1672
Address 0x78bd0

DefMDIChildProcW

Ordinal 1673
Address 0x2e550

DefRawInputProc

Ordinal 1674
Address 0x8a1c0

DefWindowProcA

Ordinal 1675
Address 0xa64ff
ForwardName NTDLL.NtdllDefWindowProc_A

DefWindowProcW

Ordinal 1676
Address 0xa6529
ForwardName NTDLL.NtdllDefWindowProc_W

DeferWindowPos

Ordinal 1677
Address 0x28220

DeferWindowPosAndBand

Ordinal 1678
Address 0x88fc0

DeleteMenu

Ordinal 1679
Address 0x340d0

DeregisterShellHookWindow

Ordinal 1680
Address 0x2d1c0

DestroyAcceleratorTable

Ordinal 1681
Address 0x27db0

DestroyCaret

Ordinal 1682
Address 0x2cc60

DestroyCursor

Ordinal 1683
Address 0x293f0

DestroyDCompositionHwndTarget

Ordinal 1684
Address 0x34110

DestroyIcon

Ordinal 1685
Address 0x293f0

DestroyMenu

Ordinal 1686
Address 0x34120

DestroyReasons

Ordinal 1687
Address 0x32ba0

DestroySyntheticPointerDevice

Ordinal 1688
Address 0x34130

DestroyWindow

Ordinal 1689
Address 0x34140

DialogBoxIndirectParamA

Ordinal 1690
Address 0x512d0

DialogBoxIndirectParamAorW

Ordinal 1691
Address 0x2d7d0

DialogBoxIndirectParamW

Ordinal 1692
Address 0x2d7a0

DialogBoxParamA

Ordinal 1693
Address 0x51300

DialogBoxParamW

Ordinal 1694
Address 0x2d710

DisableProcessWindowsGhosting

Ordinal 1695
Address 0x2d070

DispatchMessageA

Ordinal 1696
Address 0x2bb00

DispatchMessageW

Ordinal 1697
Address 0xdfd0

DisplayConfigGetDeviceInfo

Ordinal 1698
Address 0x29cf0

DisplayConfigSetDeviceInfo

Ordinal 1699
Address 0x8e180

DisplayExitWindowsWarnings

Ordinal 1700
Address 0x56f60

DlgDirListA

Ordinal 1701
Address 0x76380

DlgDirListComboBoxA

Ordinal 1702
Address 0x54930

DlgDirListComboBoxW

Ordinal 1703
Address 0x54a20

DlgDirListW

Ordinal 1704
Address 0x76480

DlgDirSelectComboBoxExA

Ordinal 1705
Address 0x54a80

DlgDirSelectComboBoxExW

Ordinal 1706
Address 0x54b30

DlgDirSelectExA

Ordinal 1707
Address 0x764e0

DlgDirSelectExW

Ordinal 1708
Address 0x765a0

DoSoundConnect

Ordinal 1709
Address 0x34160

DoSoundDisconnect

Ordinal 1710
Address 0x34170

DragDetect

Ordinal 1711
Address 0x34190

DragObject

Ordinal 1712
Address 0x341a0

DrawAnimatedRects

Ordinal 1713
Address 0x341b0

DrawCaption

Ordinal 1714
Address 0x7d630

DrawCaptionTempA

Ordinal 1715
Address 0x85780

DrawCaptionTempW

Ordinal 1716
Address 0x8ba90

DrawEdge

Ordinal 1717
Address 0x23370

DrawFocusRect

Ordinal 1718
Address 0x307d0

DrawFrame

Ordinal 1719
Address 0x8f910

DrawFrameControl

Ordinal 1720
Address 0x8fa50

DrawIcon

Ordinal 1721
Address 0x89020

DrawIconEx

Ordinal 1722
Address 0x26750

DrawMenuBar

Ordinal 1723
Address 0x32940

DrawMenuBarTemp

Ordinal 1724
Address 0x78ec0

DrawStateA

Ordinal 1725
Address 0x796d0

DrawStateW

Ordinal 1726
Address 0x28710

DrawTextA

Ordinal 1727
Address 0x57410

DrawTextExA

Ordinal 1728
Address 0x57490

DrawTextExW

Ordinal 1729
Address 0x1eae0

DrawTextW

Ordinal 1730
Address 0x1eb10

DwmGetDxSharedSurface

Ordinal 1731
Address 0x2e000

DwmGetRemoteSessionOcclusionEvent

Ordinal 1732
Address 0x341c0

DwmGetRemoteSessionOcclusionState

Ordinal 1733
Address 0x341d0

DwmKernelShutdown

Ordinal 1734
Address 0x341e0

DwmKernelStartup

Ordinal 1735
Address 0x341f0

DwmLockScreenUpdates

Ordinal 1736
Address 0x2d1e0

DwmValidateWindow

Ordinal 1737
Address 0x34200

EditWndProc

Ordinal 1738
Address 0x60bf0

EmptyClipboard

Ordinal 1739
Address 0x329e0

EnableMenuItem

Ordinal 1740
Address 0x1fc00

EnableMouseInPointer

Ordinal 1741
Address 0x34220

EnableNonClientDpiScaling

Ordinal 1742
Address 0x34250

EnableOneCoreTransformMode

Ordinal 1743
Address 0x34260

EnableScrollBar

Ordinal 1744
Address 0x13250

EnableSessionForMMCSS

Ordinal 1745
Address 0x32540

EnableWindow

Ordinal 1746
Address 0x2b740

EndDeferWindowPos

Ordinal 1747
Address 0x2a9d0

EndDeferWindowPosEx

Ordinal 1748
Address 0x342d0

EndDialog

Ordinal 1749
Address 0x32030

EndMenu

Ordinal 1750
Address 0x342e0

EndPaint

Ordinal 1751
Address 0x342f0

EndTask

Ordinal 1752
Address 0x57220

EnterReaderModeHelper

Ordinal 1753
Address 0x7eb00

EnumChildWindows

Ordinal 1754
Address 0xecc0

EnumClipboardFormats

Ordinal 1755
Address 0x32490

EnumDesktopWindows

Ordinal 1756
Address 0x21bb0

EnumDesktopsA

Ordinal 1757
Address 0x3430

EnumDesktopsW

Ordinal 1758
Address 0x4f60

EnumDisplayDevicesA

Ordinal 1759
Address 0x8bc0

EnumDisplayDevicesW

Ordinal 1760
Address 0x276c0

EnumDisplayMonitors

Ordinal 1761
Address 0x34300

EnumDisplaySettingsA

Ordinal 1762
Address 0x8990

EnumDisplaySettingsExA

Ordinal 1763
Address 0x89b0

EnumDisplaySettingsExW

Ordinal 1764
Address 0x8850

EnumDisplaySettingsW

Ordinal 1765
Address 0x8830

EnumPropsA

Ordinal 1766
Address 0x4eb30

EnumPropsExA

Ordinal 1767
Address 0x4eb50

EnumPropsExW

Ordinal 1768
Address 0x27140

EnumPropsW

Ordinal 1769
Address 0x4eb70

EnumThreadWindows

Ordinal 1770
Address 0x21be0

EnumWindowStationsA

Ordinal 1771
Address 0x3410

EnumWindowStationsW

Ordinal 1772
Address 0x4f40

EnumWindows

Ordinal 1773
Address 0x21c10

EqualRect

Ordinal 1774
Address 0x23cc0

EvaluateProximityToPolygon

Ordinal 1775
Address 0x81890

EvaluateProximityToRect

Ordinal 1776
Address 0x81dc0

ExcludeUpdateRgn

Ordinal 1777
Address 0x34310

ExitWindowsEx

Ordinal 1778
Address 0x2c3e0

FillRect

Ordinal 1779
Address 0x23640

FindWindowA

Ordinal 1780
Address 0x7dc10

FindWindowExA

Ordinal 1781
Address 0x3050

FindWindowExW

Ordinal 1782
Address 0x26350

FindWindowW

Ordinal 1783
Address 0x23950

FlashWindow

Ordinal 1784
Address 0x89090

FlashWindowEx

Ordinal 1785
Address 0x34320

FrameRect

Ordinal 1786
Address 0x307a0

FreeDDElParam

Ordinal 1787
Address 0x597f0

FrostCrashedWindow

Ordinal 1788
Address 0x34340

GetActiveWindow

Ordinal 1789
Address 0x2b760

GetAltTabInfo

Ordinal 1790
Address 0x858a0

GetAltTabInfoA

Ordinal 1791
Address 0x858a0

GetAltTabInfoW

Ordinal 1792
Address 0x8bb80

GetAncestor

Ordinal 1793
Address 0x34360

GetAppCompatFlags

Ordinal 1794
Address 0x2b550

GetAppCompatFlags2

Ordinal 1795
Address 0x11a90

GetAsyncKeyState

Ordinal 1796
Address 0x24330

GetAutoRotationState

Ordinal 1797
Address 0x34370

GetAwarenessFromDpiAwarenessContext

Ordinal 1798
Address 0x28310

GetCIMSSM

Ordinal 1799
Address 0x34380

GetCapture

Ordinal 1800
Address 0x28170

GetCaretBlinkTime

Ordinal 1801
Address 0x34390

GetCaretPos

Ordinal 1802
Address 0x343a0

GetClassInfoA

Ordinal 1803
Address 0x2aa0

GetClassInfoExA

Ordinal 1804
Address 0x2b40

GetClassInfoExW

Ordinal 1805
Address 0x7050

GetClassInfoW

Ordinal 1806
Address 0x7000

GetClassLongA

Ordinal 1807
Address 0x8c4c0

GetClassLongPtrA

Ordinal 1808
Address 0x8c520

GetClassLongPtrW

Ordinal 1809
Address 0x283d0

GetClassLongW

Ordinal 1810
Address 0x11b30

GetClassNameA

Ordinal 1811
Address 0x8bbb0

GetClassNameW

Ordinal 1812
Address 0x22050

GetClassWord

Ordinal 1813
Address 0x28b00

GetClientRect

Ordinal 1814
Address 0x12cc0

GetClipCursor

Ordinal 1815
Address 0x343b0

GetClipboardAccessToken

Ordinal 1816
Address 0x343c0

GetClipboardData

Ordinal 1817
Address 0x2b800

GetClipboardFormatNameA

Ordinal 1818
Address 0x858d0

GetClipboardFormatNameW

Ordinal 1819
Address 0x2cd30

GetClipboardOwner

Ordinal 1820
Address 0x2d160

GetClipboardSequenceNumber

Ordinal 1821
Address 0x2cbb0

GetClipboardViewer

Ordinal 1822
Address 0x86c30

GetComboBoxInfo

Ordinal 1823
Address 0x343d0

GetCurrentInputMessageSource

Ordinal 1824
Address 0x343e0

GetCursor

Ordinal 1825
Address 0x343f0

GetCursorFrameInfo

Ordinal 1826
Address 0x2ca00

GetCursorInfo

Ordinal 1827
Address 0x34400

GetCursorPos

Ordinal 1828
Address 0x28200

GetDC

Ordinal 1829
Address 0x26600

GetDCEx

Ordinal 1830
Address 0x34410

GetDesktopID

Ordinal 1831
Address 0x34420

GetDesktopWindow

Ordinal 1832
Address 0xae40

GetDialogBaseUnits

Ordinal 1833
Address 0x327a0

GetDialogControlDpiChangeBehavior

Ordinal 1834
Address 0x5a320

GetDialogDpiChangeBehavior

Ordinal 1835
Address 0x5a350

GetDisplayAutoRotationPreferences

Ordinal 1836
Address 0x34430

GetDisplayConfigBufferSizes

Ordinal 1837
Address 0x292c0

GetDlgCtrlID

Ordinal 1838
Address 0x20fc0

GetDlgItem

Ordinal 1839
Address 0x10100

GetDlgItemInt

Ordinal 1840
Address 0x5a3a0

GetDlgItemTextA

Ordinal 1841
Address 0x8c580

GetDlgItemTextW

Ordinal 1842
Address 0x326d0

GetDoubleClickTime

Ordinal 1843
Address 0x34450

GetDpiAwarenessContextForProcess

Ordinal 1844
Address 0x89100

GetDpiForMonitorInternal

Ordinal 1845
Address 0x27d80

GetDpiForSystem

Ordinal 1846
Address 0x115e0

GetDpiForWindow

Ordinal 1847
Address 0x14290

GetDpiFromDpiAwarenessContext

Ordinal 1848
Address 0x89120

GetExtendedPointerDeviceProperty

Ordinal 1849
Address 0x34460

GetFocus

Ordinal 1850
Address 0x23da0

GetForegroundWindow

Ordinal 1851
Address 0x34470

GetGUIThreadInfo

Ordinal 1852
Address 0x34480

GetGestureConfig

Ordinal 1853
Address 0x34490

GetGestureExtraArgs

Ordinal 1854
Address 0x4f5e0

GetGestureInfo

Ordinal 1855
Address 0x4f610

GetGuiResources

Ordinal 1856
Address 0x344a0

GetIconInfo

Ordinal 1857
Address 0x273d0

GetIconInfoExA

Ordinal 1858
Address 0x51470

GetIconInfoExW

Ordinal 1859
Address 0x2a3e0

GetInputDesktop

Ordinal 1860
Address 0x89150

GetInputLocaleInfo

Ordinal 1861
Address 0x344c0

GetInputState

Ordinal 1862
Address 0x84460

GetInternalWindowPos

Ordinal 1863
Address 0x34500

GetKBCodePage

Ordinal 1864
Address 0x89170

GetKeyNameTextA

Ordinal 1865
Address 0x85980

GetKeyNameTextW

Ordinal 1866
Address 0x2c590

GetKeyState

Ordinal 1867
Address 0x1e490

GetKeyboardLayout

Ordinal 1868
Address 0x27490

GetKeyboardLayoutList

Ordinal 1869
Address 0x34510

GetKeyboardLayoutNameA

Ordinal 1870
Address 0x85a40

GetKeyboardLayoutNameW

Ordinal 1871
Address 0x2c5b0

GetKeyboardState

Ordinal 1872
Address 0x34520

GetKeyboardType

Ordinal 1873
Address 0x32310

GetLastActivePopup

Ordinal 1874
Address 0x281a0

GetLastInputInfo

Ordinal 1875
Address 0x26e80

GetLayeredWindowAttributes

Ordinal 1876
Address 0x34530

GetListBoxInfo

Ordinal 1877
Address 0x34540

GetMagnificationDesktopColorEffect

Ordinal 1878
Address 0x76b90

GetMagnificationDesktopMagnification

Ordinal 1879
Address 0x76c80

GetMagnificationDesktopSamplingMode

Ordinal 1880
Address 0x76d20

GetMagnificationLensCtxInformation

Ordinal 1881
Address 0x34550

GetMenu

Ordinal 1882
Address 0x2a8f0

GetMenuBarInfo

Ordinal 1883
Address 0x34560

GetMenuCheckMarkDimensions

Ordinal 1884
Address 0x78f70

GetMenuContextHelpId

Ordinal 1885
Address 0x78fb0

GetMenuDefaultItem

Ordinal 1886
Address 0x295a0

GetMenuInfo

Ordinal 1887
Address 0x16d0

GetMenuItemCount

Ordinal 1888
Address 0x26630

GetMenuItemID

Ordinal 1889
Address 0x2aa50

GetMenuItemInfoA

Ordinal 1890
Address 0x8c5d0

GetMenuItemInfoW

Ordinal 1891
Address 0x20060

GetMenuItemRect

Ordinal 1892
Address 0x34570

GetMenuState

Ordinal 1893
Address 0x1fca0

GetMenuStringA

Ordinal 1894
Address 0x8c6d0

GetMenuStringW

Ordinal 1895
Address 0x31230

GetMessageA

Ordinal 1896
Address 0x28bb0

GetMessageExtraInfo

Ordinal 1897
Address 0x299b0

GetMessagePos

Ordinal 1898
Address 0x2b480

GetMessageTime

Ordinal 1899
Address 0x2a2f0

GetMessageW

Ordinal 1900
Address 0x21ee0

GetMonitorInfoA

Ordinal 1901
Address 0x2e110

GetMonitorInfoW

Ordinal 1902
Address 0x20b70

GetMouseMovePointsEx

Ordinal 1903
Address 0x34580

GetNextDlgGroupItem

Ordinal 1904
Address 0x5a9a0

GetNextDlgTabItem

Ordinal 1905
Address 0x1d90

GetOpenClipboardWindow

Ordinal 1906
Address 0x2d0f0

GetParent

Ordinal 1907
Address 0x1e0f0

GetPhysicalCursorPos

Ordinal 1908
Address 0x28200

GetPointerCursorId

Ordinal 1909
Address 0x345b0

GetPointerDevice

Ordinal 1910
Address 0x345c0

GetPointerDeviceCursors

Ordinal 1911
Address 0x345d0

GetPointerDeviceInputSpace

Ordinal 1912
Address 0x345e0

GetPointerDeviceOrientation

Ordinal 1913
Address 0x345f0

GetPointerDeviceProperties

Ordinal 1914
Address 0x34600

GetPointerDeviceRects

Ordinal 1915
Address 0x34610

GetPointerDevices

Ordinal 1916
Address 0x34620

GetPointerFrameInfo

Ordinal 1917
Address 0x50690

GetPointerFrameInfoHistory

Ordinal 1918
Address 0x506e0

GetPointerFramePenInfo

Ordinal 1919
Address 0x50720

GetPointerFramePenInfoHistory

Ordinal 1920
Address 0x50770

GetPointerFrameTimes

Ordinal 1921
Address 0x34630

GetPointerFrameTouchInfo

Ordinal 1922
Address 0x507b0

GetPointerFrameTouchInfoHistory

Ordinal 1923
Address 0x50800

GetPointerInfo

Ordinal 1924
Address 0x50840

GetPointerInfoHistory

Ordinal 1925
Address 0x508a0

GetPointerInputTransform

Ordinal 1926
Address 0x34640

GetPointerPenInfo

Ordinal 1927
Address 0x508f0

GetPointerPenInfoHistory

Ordinal 1928
Address 0x50950

GetPointerTouchInfo

Ordinal 1929
Address 0x509a0

GetPointerTouchInfoHistory

Ordinal 1930
Address 0x50a00

GetPointerType

Ordinal 1931
Address 0x34660

GetPriorityClipboardFormat

Ordinal 1932
Address 0x86c50

GetProcessDefaultLayout

Ordinal 1933
Address 0x2d0d0

GetProcessDpiAwarenessInternal

Ordinal 1934
Address 0x2bb60

GetProcessWindowStation

Ordinal 1935
Address 0x34690

GetProgmanWindow

Ordinal 1936
Address 0x89190

GetPropA

Ordinal 1937
Address 0x2de70

GetPropW

Ordinal 1938
Address 0x9ea0

GetQueueStatus

Ordinal 1939
Address 0x21380

GetRawInputBuffer

Ordinal 1940
Address 0x6a520

GetRawInputData

Ordinal 1941
Address 0x346b0

GetRawInputDeviceInfoA

Ordinal 1942
Address 0x8c720

GetRawInputDeviceInfoW

Ordinal 1943
Address 0x32780

GetRawInputDeviceList

Ordinal 1944
Address 0x346c0

GetRawPointerDeviceData

Ordinal 1945
Address 0x346d0

GetReasonTitleFromReasonCode

Ordinal 1946
Address 0x32ab0

GetRegisteredRawInputDevices

Ordinal 1947
Address 0x346e0

GetScrollBarInfo

Ordinal 1948
Address 0x34700

GetScrollInfo

Ordinal 1949
Address 0x288f0

GetScrollPos

Ordinal 1950
Address 0x31780

GetScrollRange

Ordinal 1951
Address 0x844a0

GetSendMessageReceiver

Ordinal 1952
Address 0x891f0

GetShellChangeNotifyWindow

Ordinal 1953
Address 0x2c3a0

GetShellWindow

Ordinal 1954
Address 0x28660

GetSubMenu

Ordinal 1955
Address 0x2a5c0

GetSysColor

Ordinal 1956
Address 0x26310

GetSysColorBrush

Ordinal 1957
Address 0x28520

GetSystemDpiForProcess

Ordinal 1958
Address 0x34710

GetSystemMenu

Ordinal 1959
Address 0x34720

GetSystemMetrics

Ordinal 1960
Address 0x21220

GetSystemMetricsForDpi

Ordinal 1961
Address 0x10b50

GetTabbedTextExtentA

Ordinal 1962
Address 0x57650

GetTabbedTextExtentW

Ordinal 1963
Address 0x57750

GetTaskmanWindow

Ordinal 1964
Address 0x2d110

GetThreadDesktop

Ordinal 1965
Address 0x34730

GetThreadDpiAwarenessContext

Ordinal 1966
Address 0x24160

GetThreadDpiHostingBehavior

Ordinal 1967
Address 0x89210

GetTitleBarInfo

Ordinal 1968
Address 0x34740

GetTopLevelWindow

Ordinal 1969
Address 0x34750

GetTopWindow

Ordinal 1970
Address 0x2d610

GetTouchInputInfo

Ordinal 1971
Address 0x51c60

GetUnpredictedMessagePos

Ordinal 1972
Address 0x89260

GetUpdateRect

Ordinal 1973
Address 0x2b7a0

GetUpdateRgn

Ordinal 1974
Address 0x89280

GetUpdatedClipboardFormats

Ordinal 1975
Address 0x86c70

GetUserObjectInformationA

Ordinal 1976
Address 0x2c920

GetUserObjectInformationW

Ordinal 1977
Address 0x34780

GetUserObjectSecurity

Ordinal 1978
Address 0x89320

GetWinStationInfo

Ordinal 1979
Address 0x89380

GetWindow

Ordinal 1980
Address 0x9d30

GetWindowBand

Ordinal 1981
Address 0x34790

GetWindowCompositionAttribute

Ordinal 1982
Address 0x347a0

GetWindowCompositionInfo

Ordinal 1983
Address 0x347b0

GetWindowContextHelpId

Ordinal 1984
Address 0x893a0

GetWindowDC

Ordinal 1985
Address 0x347c0

GetWindowDisplayAffinity

Ordinal 1986
Address 0x347d0

GetWindowDpiAwarenessContext

Ordinal 1987
Address 0x133b0

GetWindowDpiHostingBehavior

Ordinal 1988
Address 0x893c0

GetWindowFeedbackSetting

Ordinal 1989
Address 0x347e0

GetWindowInfo

Ordinal 1990
Address 0x10550

GetWindowLongA

Ordinal 1991
Address 0x142f0

GetWindowLongPtrA

Ordinal 1992
Address 0x10d70

GetWindowLongPtrW

Ordinal 1993
Address 0xf7c0

GetWindowLongW

Ordinal 1994
Address 0xfb00

GetWindowMinimizeRect

Ordinal 1995
Address 0x34800

GetWindowModuleFileName

Ordinal 1996
Address 0x8c860

GetWindowModuleFileNameA

Ordinal 1997
Address 0x8c860

GetWindowModuleFileNameW

Ordinal 1998
Address 0x8a1e0

GetWindowPlacement

Ordinal 1999
Address 0x34810

GetWindowProcessHandle

Ordinal 2000
Address 0x34820

(#6)

Ordinal 2001
Address 0x76fe0

(#7)

Ordinal 2002
Address 0x76d80

GetWindowRect

Ordinal 2003
Address 0x14ae0

GetWindowRgn

Ordinal 2004
Address 0x2a760

(#8)

Ordinal 2005
Address 0x34f30

GetWindowRgnBox

Ordinal 2006
Address 0x9050

GetWindowRgnEx

Ordinal 2007
Address 0x34830

GetWindowTextA

Ordinal 2008
Address 0x9420

GetWindowTextLengthA

Ordinal 2009
Address 0x8c8b0

(#9)

Ordinal 2010
Address 0x352f0

GetWindowTextLengthW

Ordinal 2011
Address 0xa190

GetWindowTextW

Ordinal 2012
Address 0xc280

GetWindowThreadProcessId

Ordinal 2013
Address 0x3500

GetWindowWord

Ordinal 2014
Address 0x84570

GhostWindowFromHungWindow

Ordinal 2015
Address 0x34840

GrayStringA

Ordinal 2016
Address 0x89430

GrayStringW

Ordinal 2017
Address 0x89490

HideCaret

Ordinal 2018
Address 0x29330

HiliteMenuItem

Ordinal 2019
Address 0x34870

HungWindowFromGhostWindow

Ordinal 2020
Address 0x34880

IMPGetIMEA

Ordinal 2021
Address 0x86190

IMPGetIMEW

Ordinal 2022
Address 0x861b0

IMPQueryIMEA

Ordinal 2023
Address 0x861d0

IMPQueryIMEW

Ordinal 2024
Address 0x861f0

IMPSetIMEA

Ordinal 2025
Address 0x86210

IMPSetIMEW

Ordinal 2026
Address 0x86230

ImpersonateDdeClientWindow

Ordinal 2027
Address 0x34890

InSendMessage

Ordinal 2028
Address 0x286c0

InSendMessageEx

Ordinal 2029
Address 0x23fd0

InflateRect

Ordinal 2030
Address 0x4e70

InheritWindowMonitor

Ordinal 2031
Address 0x348a0

InitDManipHook

Ordinal 2032
Address 0x22680

InitializeGenericHidInjection

Ordinal 2033
Address 0x348b0

InitializeInputDeviceInjection

Ordinal 2034
Address 0x348c0

InitializeLpkHooks

Ordinal 2035
Address 0x277a0

InitializePointerDeviceInjection

Ordinal 2036
Address 0x348d0

InitializePointerDeviceInjectionEx

Ordinal 2037
Address 0x348e0

InitializeTouchInjection

Ordinal 2038
Address 0x348f0

InjectDeviceInput

Ordinal 2039
Address 0x34900

InjectGenericHidInput

Ordinal 2040
Address 0x34910

InjectKeyboardInput

Ordinal 2041
Address 0x34920

InjectMouseInput

Ordinal 2042
Address 0x34930

InjectPointerInput

Ordinal 2043
Address 0x34940

InjectSyntheticPointerInput

Ordinal 2044
Address 0x34940

InjectTouchInput

Ordinal 2045
Address 0x34950

InputSpaceRegionFromPoint

Ordinal 2046
Address 0x34960

InsertMenuA

Ordinal 2047
Address 0x8c900

InsertMenuItemA

Ordinal 2048
Address 0x8c980

InsertMenuItemW

Ordinal 2049
Address 0x1feb0

InsertMenuW

Ordinal 2050
Address 0x1fdd0

InternalGetWindowIcon

Ordinal 2051
Address 0x7d7b0

InternalGetWindowText

Ordinal 2052
Address 0x28380

IntersectRect

Ordinal 2053
Address 0x13f70

InvalidateRect

Ordinal 2054
Address 0x34980

InvalidateRgn

Ordinal 2055
Address 0x34990

InvertRect

Ordinal 2056
Address 0x26560

IsCharAlphaA

Ordinal 2057
Address 0x86c90

IsCharAlphaNumericA

Ordinal 2058
Address 0x86cb0

IsCharAlphaNumericW

Ordinal 2059
Address 0x329c0

IsCharAlphaW

Ordinal 2060
Address 0x86cd0

IsCharLowerA

Ordinal 2061
Address 0x86cf0

IsCharLowerW

Ordinal 2062
Address 0x86d10

IsCharUpperA

Ordinal 2063
Address 0x86d30

IsCharUpperW

Ordinal 2064
Address 0x86d50

IsChild

Ordinal 2065
Address 0x14340

IsClipboardFormatAvailable

Ordinal 2066
Address 0x23930

IsDialogMessage

Ordinal 2067
Address 0x5a610

IsDialogMessageA

Ordinal 2068
Address 0x5a610

IsDialogMessageW

Ordinal 2069
Address 0xbd60

IsDlgButtonChecked

Ordinal 2070
Address 0x5a520

IsGUIThread

Ordinal 2071
Address 0x284b0

IsHungAppWindow

Ordinal 2072
Address 0x2a2c0

IsIconic

Ordinal 2073
Address 0xc180

IsImmersiveProcess

Ordinal 2074
Address 0x29a30

IsInDesktopWindowBand

Ordinal 2075
Address 0x2b690

IsMenu

Ordinal 2076
Address 0x27cd0

IsMouseInPointerEnabled

Ordinal 2077
Address 0x349b0

IsOneCoreTransformMode

Ordinal 2078
Address 0x349e0

IsProcessDPIAware

Ordinal 2079
Address 0x21e60

IsQueueAttached

Ordinal 2080
Address 0x894f0

IsRectEmpty

Ordinal 2081
Address 0x237f0

IsSETEnabled

Ordinal 2082
Address 0x7ed70

IsServerSideWindow

Ordinal 2083
Address 0x11b00

IsThreadDesktopComposited

Ordinal 2084
Address 0x10cc0

IsThreadTSFEventAware

Ordinal 2085
Address 0x1470

IsTopLevelWindow

Ordinal 2086
Address 0x34a00

IsTouchWindow

Ordinal 2087
Address 0x34a10

IsValidDpiAwarenessContext

Ordinal 2088
Address 0x89510

IsWinEventHookInstalled

Ordinal 2089
Address 0x23e20

IsWindow

Ordinal 2090
Address 0xa090

IsWindowArranged

Ordinal 2091
Address 0xc110

IsWindowEnabled

Ordinal 2092
Address 0x11a40

IsWindowInDestroy

Ordinal 2093
Address 0x23820

IsWindowRedirectedForPrint

Ordinal 2094
Address 0x13340

IsWindowUnicode

Ordinal 2095
Address 0x11770

IsWindowVisible

Ordinal 2096
Address 0x1e540

IsWow64Message

Ordinal 2097
Address 0x503d0

IsZoomed

Ordinal 2098
Address 0x23cf0

KillTimer

Ordinal 2099
Address 0x34a40

LoadAcceleratorsA

Ordinal 2100
Address 0x515c0

LoadAcceleratorsW

Ordinal 2101
Address 0x27e50

LoadBitmapA

Ordinal 2102
Address 0x32230

LoadBitmapW

Ordinal 2103
Address 0x2c080

LoadCursorA

Ordinal 2104
Address 0x2a280

LoadCursorFromFileA

Ordinal 2105
Address 0x4c150

LoadCursorFromFileW

Ordinal 2106
Address 0x4c1c0

LoadCursorW

Ordinal 2107
Address 0x14a30

LoadIconA

Ordinal 2108
Address 0x2cf00

LoadIconW

Ordinal 2109
Address 0x17250

LoadImageA

Ordinal 2110
Address 0x30150

LoadImageW

Ordinal 2111
Address 0x16ee0

LoadKeyboardLayoutA

Ordinal 2112
Address 0x89530

LoadKeyboardLayoutEx

Ordinal 2113
Address 0x895c0

LoadKeyboardLayoutW

Ordinal 2114
Address 0x1d3c0

LoadLocalFonts

Ordinal 2115
Address 0x2d2f0

LoadMenuA

Ordinal 2116
Address 0x4fc50

LoadMenuIndirectA

Ordinal 2117
Address 0x22250

LoadMenuIndirectW

Ordinal 2118
Address 0x22250

LoadMenuW

Ordinal 2119
Address 0x22190

LoadRemoteFonts

Ordinal 2120
Address 0x2d270

LoadStringA

Ordinal 2121
Address 0x51600

LoadStringW

Ordinal 2122
Address 0x284f0

LockSetForegroundWindow

Ordinal 2123
Address 0x895f0

LockWindowStation

Ordinal 2124
Address 0x34a60

LockWindowUpdate

Ordinal 2125
Address 0x34a70

LockWorkStation

Ordinal 2126
Address 0x34a80

LogicalToPhysicalPoint

Ordinal 2127
Address 0x34aa0

LogicalToPhysicalPointForPerMonitorDPI

Ordinal 2128
Address 0x34ab0

LookupIconIdFromDirectory

Ordinal 2129
Address 0x51690

LookupIconIdFromDirectoryEx

Ordinal 2130
Address 0x25e10

MBToWCSEx

Ordinal 2131
Address 0x24530

MBToWCSExt

Ordinal 2132
Address 0x24500

MB_GetString

Ordinal 2133
Address 0x7bc70

MITGetCursorUpdateHandle

Ordinal 2134
Address 0x2d390

MITSetForegroundRoutingInfo

Ordinal 2135
Address 0x2d3f0

MITSetInputDelegationMode

Ordinal 2136
Address 0x2bbc0

MITSetLastInputRecipient

Ordinal 2137
Address 0x7f0d0

MITSynthesizeTouchInput

Ordinal 2138
Address 0x7f0f0

MakeThreadTSFEventAware

Ordinal 2139
Address 0x2b4e0

MapDialogRect

Ordinal 2140
Address 0x31b80

MapPointsByVisualIdentifier

Ordinal 2141
Address 0x34ac0

MapVirtualKeyA

Ordinal 2142
Address 0x85ab0

MapVirtualKeyExA

Ordinal 2143
Address 0x85b20

MapVirtualKeyExW

Ordinal 2144
Address 0x2b4c0

MapVirtualKeyW

Ordinal 2145
Address 0x283b0

MapVisualRelativePoints

Ordinal 2146
Address 0x34ad0

MapWindowPoints

Ordinal 2147
Address 0xb9f0

MenuItemFromPoint

Ordinal 2148
Address 0x34ae0

MenuWindowProcA

Ordinal 2149
Address 0x503f0

MenuWindowProcW

Ordinal 2150
Address 0x50470

MessageBeep

Ordinal 2151
Address 0x89610

MessageBoxA

Ordinal 2152
Address 0x7bca0

MessageBoxExA

Ordinal 2153
Address 0x7bd00

MessageBoxExW

Ordinal 2154
Address 0x7bd30

MessageBoxIndirectA

Ordinal 2155
Address 0x7bd60

MessageBoxIndirectW

Ordinal 2156
Address 0x7bf10

MessageBoxTimeoutA

Ordinal 2157
Address 0x7bfd0

MessageBoxTimeoutW

Ordinal 2158
Address 0x7c140

MessageBoxW

Ordinal 2159
Address 0x7c320

ModifyMenuA

Ordinal 2160
Address 0x8c9f0

ModifyMenuW

Ordinal 2161
Address 0x321b0

MonitorFromPoint

Ordinal 2162
Address 0x299f0

MonitorFromRect

Ordinal 2163
Address 0x13b40

MonitorFromWindow

Ordinal 2164
Address 0x214b0

MoveWindow

Ordinal 2165
Address 0x34af0

MsgWaitForMultipleObjects

Ordinal 2166
Address 0x20a90

MsgWaitForMultipleObjectsEx

Ordinal 2167
Address 0x20ac0

NotifyOverlayWindow

Ordinal 2168
Address 0x89630

NotifyWinEvent

Ordinal 2169
Address 0x4a50

OemKeyScan

Ordinal 2170
Address 0x7ddb0

OemToCharA

Ordinal 2171
Address 0x7de40

OemToCharBuffA

Ordinal 2172
Address 0x7de90

OemToCharBuffW

Ordinal 2173
Address 0x7dee0

OemToCharW

Ordinal 2174
Address 0x7df30

OffsetRect

Ordinal 2175
Address 0xae10

OpenClipboard

Ordinal 2176
Address 0x2bd40

OpenDesktopA

Ordinal 2177
Address 0x1b8b0

OpenDesktopW

Ordinal 2178
Address 0x1a9e0

OpenIcon

Ordinal 2179
Address 0x89650

OpenInputDesktop

Ordinal 2180
Address 0x34b10

OpenThreadDesktop

Ordinal 2181
Address 0x34b20

OpenWindowStationA

Ordinal 2182
Address 0x1c8e0

OpenWindowStationW

Ordinal 2183
Address 0x1b840

PackDDElParam

Ordinal 2184
Address 0x59870

PackTouchHitTestingProximityEvaluation

Ordinal 2185
Address 0x81f00

PaintDesktop

Ordinal 2186
Address 0x7d7d0

PaintMenuBar

Ordinal 2187
Address 0x34b30

PaintMonitor

Ordinal 2188
Address 0x34b40

PeekMessageA

Ordinal 2189
Address 0x9910

PeekMessageW

Ordinal 2190
Address 0xa370

PhysicalToLogicalPoint

Ordinal 2191
Address 0x34b60

PhysicalToLogicalPointForPerMonitorDPI

Ordinal 2192
Address 0x34b70

PostMessageA

Ordinal 2193
Address 0x29d40

PostMessageW

Ordinal 2194
Address 0x21410

PostQuitMessage

Ordinal 2195
Address 0x2be90

PostThreadMessageA

Ordinal 2196
Address 0x32640

PostThreadMessageW

Ordinal 2197
Address 0x28340

PrintWindow

Ordinal 2198
Address 0x34b80

PrivateExtractIconExA

Ordinal 2199
Address 0x6a0b0

PrivateExtractIconExW

Ordinal 2200
Address 0x6a140

PrivateExtractIconsA

Ordinal 2201
Address 0x6a2e0

PrivateExtractIconsW

Ordinal 2202
Address 0x1bdf0

PrivateRegisterICSProc

Ordinal 2203
Address 0x516b0

PtInRect

Ordinal 2204
Address 0x13b10

QueryBSDRWindow

Ordinal 2205
Address 0x34bc0

QueryDisplayConfig

Ordinal 2206
Address 0x26a90

QuerySendMessage

Ordinal 2207
Address 0x34bd0

RIMAddInputObserver

Ordinal 2208
Address 0x34be0

RIMAreSiblingDevices

Ordinal 2209
Address 0x34bf0

RIMDeviceIoControl

Ordinal 2210
Address 0x34c00

RIMEnableMonitorMappingForDevice

Ordinal 2211
Address 0x34c10

RIMFreeInputBuffer

Ordinal 2212
Address 0x34c20

RIMGetDevicePreparsedData

Ordinal 2213
Address 0x34c30

RIMGetDevicePreparsedDataLockfree

Ordinal 2214
Address 0x34c40

RIMGetDeviceProperties

Ordinal 2215
Address 0x34c50

RIMGetDevicePropertiesLockfree

Ordinal 2216
Address 0x34c60

RIMGetPhysicalDeviceRect

Ordinal 2217
Address 0x34c70

RIMGetSourceProcessId

Ordinal 2218
Address 0x34c80

RIMObserveNextInput

Ordinal 2219
Address 0x34c90

RIMOnPnpNotification

Ordinal 2220
Address 0x34ca0

RIMOnTimerNotification

Ordinal 2221
Address 0x34cb0

RIMQueryDevicePath

Ordinal 2222
Address 0x34cc0

RIMReadInput

Ordinal 2223
Address 0x34cd0

RIMRegisterForInput

Ordinal 2224
Address 0x34ce0

RIMRemoveInputObserver

Ordinal 2225
Address 0x34cf0

RIMSetExtendedDeviceProperty

Ordinal 2226
Address 0x34d00

RIMSetTestModeStatus

Ordinal 2227
Address 0x34d10

RIMUnregisterForInput

Ordinal 2228
Address 0x34d20

RIMUpdateInputObserverRegistration

Ordinal 2229
Address 0x34d30

RealChildWindowFromPoint

Ordinal 2230
Address 0x34d40

RealGetWindowClass

Ordinal 2231
Address 0x85c10

RealGetWindowClassA

Ordinal 2232
Address 0x85c10

RealGetWindowClassW

Ordinal 2233
Address 0x24260

ReasonCodeNeedsBugID

Ordinal 2234
Address 0x7ef60

ReasonCodeNeedsComment

Ordinal 2235
Address 0x7ef70

RecordShutdownReason

Ordinal 2236
Address 0x33100

RedrawWindow

Ordinal 2237
Address 0x34d50

RegisterBSDRWindow

Ordinal 2238
Address 0x34d60

RegisterClassA

Ordinal 2239
Address 0x2ad0

RegisterClassExA

Ordinal 2240
Address 0x8ca70

RegisterClassExW

Ordinal 2241
Address 0x7250

RegisterClassW

Ordinal 2242
Address 0x7280

RegisterClipboardFormatA

Ordinal 2243
Address 0x3140

RegisterClipboardFormatW

Ordinal 2244
Address 0x26fc0

RegisterDManipHook

Ordinal 2245
Address 0x34d70

RegisterDeviceNotificationA

Ordinal 2246
Address 0x2bf70

RegisterDeviceNotificationW

Ordinal 2247
Address 0x2bf70

RegisterErrorReportingDialog

Ordinal 2248
Address 0x34d80

RegisterFrostWindow

Ordinal 2249
Address 0x896e0

RegisterGhostWindow

Ordinal 2250
Address 0x89700

RegisterHotKey

Ordinal 2251
Address 0x34d90

RegisterLogonProcess

Ordinal 2252
Address 0x2cfa0

RegisterMessagePumpHook

Ordinal 2253
Address 0x2c1d0

RegisterPointerDeviceNotifications

Ordinal 2254
Address 0x34da0

RegisterPointerInputTarget

Ordinal 2255
Address 0x50a70

RegisterPointerInputTargetEx

Ordinal 2256
Address 0x50510

RegisterPowerSettingNotification

Ordinal 2257
Address 0x2a690

RegisterRawInputDevices

Ordinal 2258
Address 0x34db0

RegisterServicesProcess

Ordinal 2259
Address 0x34dc0

RegisterSessionPort

Ordinal 2260
Address 0x34dd0

RegisterShellHookWindow

Ordinal 2261
Address 0x2d050

RegisterSuspendResumeNotification

Ordinal 2262
Address 0x7da20

RegisterSystemThread

Ordinal 2263
Address 0x32910

RegisterTasklist

Ordinal 2264
Address 0x34df0

RegisterTouchHitTestingWindow

Ordinal 2265
Address 0x34e00

RegisterTouchWindow

Ordinal 2266
Address 0x7da90

RegisterUserApiHook

Ordinal 2267
Address 0x2ca70

RegisterWindowMessageA

Ordinal 2268
Address 0x3140

RegisterWindowMessageW

Ordinal 2269
Address 0x26fc0

ReleaseCapture

Ordinal 2270
Address 0x2c990

ReleaseDC

Ordinal 2271
Address 0x24010

ReleaseDwmHitTestWaiters

Ordinal 2272
Address 0x34e20

RemoveClipboardFormatListener

Ordinal 2273
Address 0x2d350

RemoveInjectionDevice

Ordinal 2274
Address 0x34130

RemoveMenu

Ordinal 2275
Address 0x34e30

RemovePropA

Ordinal 2276
Address 0x85ce0

RemovePropW

Ordinal 2277
Address 0x26440

RemoveThreadTSFEventAwareness

Ordinal 2278
Address 0x82790

RemoveVisualIdentifier

Ordinal 2279
Address 0x34e40

ReplyMessage

Ordinal 2280
Address 0x29cd0

ResolveDesktopForWOW

Ordinal 2281
Address 0x34e60

ReuseDDElParam

Ordinal 2282
Address 0x598f0

ScreenToClient

Ordinal 2283
Address 0x11cf0

ScrollChildren

Ordinal 2284
Address 0x78bf0

ScrollDC

Ordinal 2285
Address 0x27100

ScrollWindow

Ordinal 2286
Address 0x89760

ScrollWindowEx

Ordinal 2287
Address 0x26e50

SendDlgItemMessageA

Ordinal 2288
Address 0x8cac0

SendDlgItemMessageW

Ordinal 2289
Address 0x1420

SendIMEMessageExA

Ordinal 2290
Address 0x86250

SendIMEMessageExW

Ordinal 2291
Address 0x86270

SendInput

Ordinal 2292
Address 0x34e90

SendMessageA

Ordinal 2293
Address 0x96c0

SendMessageCallbackA

Ordinal 2294
Address 0x85d80

SendMessageCallbackW

Ordinal 2295
Address 0x28280

SendMessageTimeoutA

Ordinal 2296
Address 0x315d0

SendMessageTimeoutW

Ordinal 2297
Address 0x20e50

SendMessageW

Ordinal 2298
Address 0xd540

SendNotifyMessageA

Ordinal 2299
Address 0x31060

SendNotifyMessageW

Ordinal 2300
Address 0x29850

SetActiveWindow

Ordinal 2301
Address 0x34ed0

SetCapture

Ordinal 2302
Address 0x34f20

SetCaretBlinkTime

Ordinal 2303
Address 0x2b4a0

SetCaretPos

Ordinal 2304
Address 0x2bbe0

SetClassLongA

Ordinal 2305
Address 0x85e10

SetClassLongPtrA

Ordinal 2306
Address 0x85e30

SetClassLongPtrW

Ordinal 2307
Address 0x2ce70

SetClassLongW

Ordinal 2308
Address 0x328f0

SetClassWord

Ordinal 2309
Address 0x34f40

SetClipboardData

Ordinal 2310
Address 0x30460

SetClipboardViewer

Ordinal 2311
Address 0x32960

SetCoalescableTimer

Ordinal 2312
Address 0x34f50

SetCursor

Ordinal 2313
Address 0x2b650

SetCursorContents

Ordinal 2314
Address 0x34f80

SetCursorPos

Ordinal 2315
Address 0x34fa0

SetDebugErrorLevel

Ordinal 2316
Address 0x2d3e0

SetDeskWallpaper

Ordinal 2317
Address 0x897c0

SetDesktopColorTransform

Ordinal 2318
Address 0x34fb0

SetDialogControlDpiChangeBehavior

Ordinal 2319
Address 0x34fd0

SetDialogDpiChangeBehavior

Ordinal 2320
Address 0x5a560

SetDisplayAutoRotationPreferences

Ordinal 2321
Address 0x34fe0

SetDisplayConfig

Ordinal 2322
Address 0x8e1f0

SetDlgItemInt

Ordinal 2323
Address 0x1560

SetDlgItemTextA

Ordinal 2324
Address 0x8cb10

SetDlgItemTextW

Ordinal 2325
Address 0x8a230

SetDoubleClickTime

Ordinal 2326
Address 0x897e0

SetFeatureReportResponse

Ordinal 2327
Address 0x35010

SetFocus

Ordinal 2328
Address 0x35020

SetForegroundWindow

Ordinal 2329
Address 0x2c1b0

SetFullscreenMagnifierOffsetsDWMUpdated

Ordinal 2330
Address 0x35040

SetGestureConfig

Ordinal 2331
Address 0x35050

SetInternalWindowPos

Ordinal 2332
Address 0x35090

SetKeyboardState

Ordinal 2333
Address 0x350a0

SetLastErrorEx

Ordinal 2334
Address 0x7df90

SetLayeredWindowAttributes

Ordinal 2335
Address 0x350b0

SetMagnificationDesktopColorEffect

Ordinal 2336
Address 0x76e30

SetMagnificationDesktopMagnification

Ordinal 2337
Address 0x76f10

SetMagnificationDesktopMagnifierOffsetsDWMUpdated

Ordinal 2338
Address 0x350c0

SetMagnificationDesktopSamplingMode

Ordinal 2339
Address 0x76f90

SetMagnificationLensCtxInformation

Ordinal 2340
Address 0x350d0

SetMenu

Ordinal 2341
Address 0x2cca0

SetMenuContextHelpId

Ordinal 2342
Address 0x350e0

SetMenuDefaultItem

Ordinal 2343
Address 0x350f0

SetMenuInfo

Ordinal 2344
Address 0x1770

SetMenuItemBitmaps

Ordinal 2345
Address 0x1ba0

SetMenuItemInfoA

Ordinal 2346
Address 0x8cb40

SetMenuItemInfoW

Ordinal 2347
Address 0x1fd60

SetMessageExtraInfo

Ordinal 2348
Address 0x504f0

SetMessageQueue

Ordinal 2349
Address 0x2d410

SetMirrorRendering

Ordinal 2350
Address 0x35100

SetParent

Ordinal 2351
Address 0x2c830

SetPhysicalCursorPos

Ordinal 2352
Address 0x34fa0

SetPointerDeviceInputSpace

Ordinal 2353
Address 0x35110

SetProcessDPIAware

Ordinal 2354
Address 0x1b890

SetProcessDefaultLayout

Ordinal 2355
Address 0x89800

SetProcessDpiAwarenessContext

Ordinal 2356
Address 0x1a8b0

SetProcessDpiAwarenessInternal

Ordinal 2357
Address 0x1a860

SetProcessRestrictionExemption

Ordinal 2358
Address 0x35150

SetProcessWindowStation

Ordinal 2359
Address 0x35160

SetProgmanWindow

Ordinal 2360
Address 0x89820

SetPropA

Ordinal 2361
Address 0x85f70

SetPropW

Ordinal 2362
Address 0x24420

SetRect

Ordinal 2363
Address 0x23d70

SetRectEmpty

Ordinal 2364
Address 0x23d50

SetScrollInfo

Ordinal 2365
Address 0x12a60

SetScrollPos

Ordinal 2366
Address 0x32850

SetScrollRange

Ordinal 2367
Address 0x31340

SetShellChangeNotifyWindow

Ordinal 2368
Address 0x2d330

SetShellWindow

Ordinal 2369
Address 0x89840

SetShellWindowEx

Ordinal 2370
Address 0x35180

SetSysColors

Ordinal 2371
Address 0x2d220

SetSysColorsTemp

Ordinal 2372
Address 0x7dfb0

SetSystemCursor

Ordinal 2373
Address 0x7dab0

SetSystemMenu

Ordinal 2374
Address 0x35190

SetTaskmanWindow

Ordinal 2375
Address 0x2d2d0

SetThreadDesktop

Ordinal 2376
Address 0x2c5e0

SetThreadDpiAwarenessContext

Ordinal 2377
Address 0x16ff0

SetThreadDpiHostingBehavior

Ordinal 2378
Address 0x89880

SetThreadInputBlocked

Ordinal 2379
Address 0x351b0

SetTimer

Ordinal 2380
Address 0x24070

SetUserObjectInformationA

Ordinal 2381
Address 0x89970

SetUserObjectInformationW

Ordinal 2382
Address 0x899f0

SetUserObjectSecurity

Ordinal 2383
Address 0x2ccc0

SetWinEventHook

Ordinal 2384
Address 0x298c0

SetWindowBand

Ordinal 2385
Address 0x351d0

SetWindowCompositionAttribute

Ordinal 2386
Address 0x292a0

SetWindowCompositionTransition

Ordinal 2387
Address 0x351e0

SetWindowContextHelpId

Ordinal 2388
Address 0x89a00

SetWindowDisplayAffinity

Ordinal 2389
Address 0x351f0

SetWindowFeedbackSetting

Ordinal 2390
Address 0x35200

SetWindowLongA

Ordinal 2391
Address 0x2cd10

SetWindowLongPtrA

Ordinal 2392
Address 0x2cd70

SetWindowLongPtrW

Ordinal 2393
Address 0xb750

SetWindowLongW

Ordinal 2394
Address 0x10ea0

SetWindowPlacement

Ordinal 2395
Address 0x35220

SetWindowPos

Ordinal 2396
Address 0x35230

SetWindowRgn

Ordinal 2397
Address 0x14a60

SetWindowRgnEx

Ordinal 2398
Address 0x7db10

SetWindowStationUser

Ordinal 2399
Address 0x2cbd0

SetWindowTextA

Ordinal 2400
Address 0x8cbb0

SetWindowTextW

Ordinal 2401
Address 0x147a0

SetWindowWord

Ordinal 2402
Address 0x35250

SetWindowsHookA

Ordinal 2403
Address 0x4f970

SetWindowsHookExA

Ordinal 2404
Address 0x4f990

SetWindowsHookExAW

Ordinal 2405
Address 0x35da0

SetWindowsHookExW

Ordinal 2406
Address 0x2b780

SetWindowsHookW

Ordinal 2407
Address 0x4f9b0

ShowCaret

Ordinal 2408
Address 0x29350

ShowCursor

Ordinal 2409
Address 0x35260

ShowOwnedPopups

Ordinal 2410
Address 0x329a0

ShowScrollBar

Ordinal 2411
Address 0x35270

ShowStartGlass

Ordinal 2412
Address 0x89a20

ShowSystemCursor

Ordinal 2413
Address 0x35280

ShowWindow

Ordinal 2414
Address 0x35290

ShowWindowAsync

Ordinal 2415
Address 0x352a0

ShutdownBlockReasonCreate

Ordinal 2416
Address 0x2ac60

ShutdownBlockReasonDestroy

Ordinal 2417
Address 0x352b0

ShutdownBlockReasonQuery

Ordinal 2418
Address 0x352c0

SignalRedirectionStartComplete

Ordinal 2419
Address 0x352d0

SkipPointerFrameMessages

Ordinal 2420
Address 0x352e0

SoftModalMessageBox

Ordinal 2421
Address 0x7c380

SoundSentry

Ordinal 2422
Address 0x35300

SubtractRect

Ordinal 2423
Address 0x2a4d0

SwapMouseButton

Ordinal 2424
Address 0x89a40

SwitchDesktop

Ordinal 2425
Address 0x2d0b0

SwitchDesktopWithFade

Ordinal 2426
Address 0x2d310

SwitchToThisWindow

Ordinal 2427
Address 0x1c30

SystemParametersInfoA

Ordinal 2428
Address 0x28f80

SystemParametersInfoForDpi

Ordinal 2429
Address 0x28dc0

SystemParametersInfoW

Ordinal 2430
Address 0x236b0

TabbedTextOutA

Ordinal 2431
Address 0x577e0

TabbedTextOutW

Ordinal 2432
Address 0x57910

TileChildWindows

Ordinal 2433
Address 0x89a60

TileWindows

Ordinal 2434
Address 0x78c20

ToAscii

Ordinal 2435
Address 0x89a90

ToAsciiEx

Ordinal 2436
Address 0x89b10

ToUnicode

Ordinal 2437
Address 0x7db60

ToUnicodeEx

Ordinal 2438
Address 0x28d30

TrackMouseEvent

Ordinal 2439
Address 0x35310

TrackPopupMenu

Ordinal 2440
Address 0x78fd0

TrackPopupMenuEx

Ordinal 2441
Address 0x35320

TranslateAccelerator

Ordinal 2442
Address 0x89c90

TranslateAcceleratorA

Ordinal 2443
Address 0x89c90

TranslateAcceleratorW

Ordinal 2444
Address 0x260f0

TranslateMDISysAccel

Ordinal 2445
Address 0x78c50

TranslateMessage

Ordinal 2446
Address 0x9390

TranslateMessageEx

Ordinal 2447
Address 0x26df0

UnhookWinEvent

Ordinal 2448
Address 0x35340

UnhookWindowsHook

Ordinal 2449
Address 0x89d20

UnhookWindowsHookEx

Ordinal 2450
Address 0x2b6e0

UnionRect

Ordinal 2451
Address 0x240a0

UnloadKeyboardLayout

Ordinal 2452
Address 0x89d40

UnlockWindowStation

Ordinal 2453
Address 0x35350

UnpackDDElParam

Ordinal 2454
Address 0x599b0

UnregisterClassA

Ordinal 2455
Address 0x5510

UnregisterClassW

Ordinal 2456
Address 0x7e60

UnregisterDeviceNotification

Ordinal 2457
Address 0x2c350

UnregisterHotKey

Ordinal 2458
Address 0x35360

UnregisterMessagePumpHook

Ordinal 2459
Address 0x32560

UnregisterPointerInputTarget

Ordinal 2460
Address 0x50ab0

UnregisterPointerInputTargetEx

Ordinal 2461
Address 0x50510

UnregisterPowerSettingNotification

Ordinal 2462
Address 0x2bd10

UnregisterSessionPort

Ordinal 2463
Address 0x35370

UnregisterSuspendResumeNotification

Ordinal 2464
Address 0x7dbb0

UnregisterTouchWindow

Ordinal 2465
Address 0x7dbf0

UnregisterUserApiHook

Ordinal 2466
Address 0x35380

UpdateDefaultDesktopThumbnail

Ordinal 2467
Address 0x35390

UpdateLayeredWindow

Ordinal 2468
Address 0x317f0

UpdateLayeredWindowIndirect

Ordinal 2469
Address 0x2e230

UpdatePerUserSystemParameters

Ordinal 2470
Address 0x1cca0

UpdateWindow

Ordinal 2471
Address 0x131f0

UpdateWindowInputSinkHints

Ordinal 2472
Address 0x353a0

User32InitializeImmEntryTable

Ordinal 2473
Address 0x199c0

UserClientDllInitialize

Ordinal 2474
Address 0x182d0

UserHandleGrantAccess

Ordinal 2475
Address 0x353c0

UserLpkPSMTextOut

Ordinal 2476
Address 0x57960

UserLpkTabbedTextOut

Ordinal 2477
Address 0x57ba0

UserRealizePalette

Ordinal 2478
Address 0x30440

UserRegisterWowHandlers

Ordinal 2479
Address 0x89d80

VRipOutput

Ordinal 2480
Address 0x2d3f0

VTagOutput

Ordinal 2481
Address 0x2d3f0

ValidateRect

Ordinal 2482
Address 0x353d0

ValidateRgn

Ordinal 2483
Address 0x1e00

VkKeyScanA

Ordinal 2484
Address 0x86050

VkKeyScanExA

Ordinal 2485
Address 0x860c0

VkKeyScanExW

Ordinal 2486
Address 0x1660

VkKeyScanW

Ordinal 2487
Address 0x2bf30

WCSToMBEx

Ordinal 2488
Address 0x8d60

WINNLSEnableIME

Ordinal 2489
Address 0x86290

WINNLSGetEnableStatus

Ordinal 2490
Address 0x862b0

WINNLSGetIMEHotkey

Ordinal 2491
Address 0x2d3f0

WaitForInputIdle

Ordinal 2492
Address 0x2ce10

WaitForRedirectionStartComplete

Ordinal 2493
Address 0x353f0

WaitMessage

Ordinal 2494
Address 0x35400

WinHelpA

Ordinal 2495
Address 0x31910

WinHelpW

Ordinal 2496
Address 0x31860

WindowFromDC

Ordinal 2497
Address 0x35410

WindowFromPhysicalPoint

Ordinal 2498
Address 0x35420

WindowFromPoint

Ordinal 2499
Address 0x35430

_UserTestTokenForInteractive

Ordinal 2500
Address 0x826b0

gSharedInfo

Ordinal 2501
Address 0xb4030

gapfnScSendMessage

Ordinal 2502
Address 0x92990

DelegateInput

Ordinal 2503
Address 0x340c0

UndelegateInput

Ordinal 2504
Address 0x35330

HandleDelegatedInput

Ordinal 2505
Address 0x34850

(#10)

Ordinal 2506
Address 0x4f6d0

(#11)

Ordinal 2507
Address 0x34ee0

(#12)

Ordinal 2508
Address 0x34ba0

(#13)

Ordinal 2509
Address 0x33ea0

(#14)

Ordinal 2510
Address 0x2ac30

(#15)

Ordinal 2511
Address 0x35000

(#16)

Ordinal 2512
Address 0x34440

(#17)

Ordinal 2513
Address 0x34ec0

(#18)

Ordinal 2514
Address 0x50a50

(#19)

Ordinal 2515
Address 0x50a90

(#20)

Ordinal 2516
Address 0x340b0

(#21)

Ordinal 2517
Address 0x34760

(#22)

Ordinal 2518
Address 0x1b470

(#23)

Ordinal 2519
Address 0x34240

(#24)

Ordinal 2520
Address 0x349c0

GetProcessUIContextInformation

Ordinal 2521
Address 0x34680

(#25)

Ordinal 2522
Address 0x34f00

(#26)

Ordinal 2523
Address 0x12e0

(#27)

Ordinal 2524
Address 0x4ebc0

(#28)

Ordinal 2525
Address 0x21b40

(#29)

Ordinal 2526
Address 0x4eb90

(#30)

Ordinal 2527
Address 0x21b80

IsThreadMessageQueueAttached

Ordinal 2528
Address 0x265a0

(#31)

Ordinal 2529
Address 0x34150

(#32)

Ordinal 2530
Address 0x353e0

(#33)

Ordinal 2531
Address 0x34f10

(#34)

Ordinal 2532
Address 0x34ff0

(#35)

Ordinal 2533
Address 0x33f40

(#36)

Ordinal 2534
Address 0x3450

(#37)

Ordinal 2535
Address 0x843f0

(#38)

Ordinal 2536
Address 0x91e0

(#39)

Ordinal 2537
Address 0x34e80

(#40)

Ordinal 2538
Address 0x34a50

(#41)

Ordinal 2539
Address 0x34860

(#42)

Ordinal 2540
Address 0x845d0

(#43)

Ordinal 2541
Address 0x346a0

(#44)

Ordinal 2542
Address 0x34de0

keybd_event

Ordinal 2543
Address 0x7dc30

(#45)

Ordinal 2544
Address 0x34290

(#46)

Ordinal 2545
Address 0x345a0

(#47)

Ordinal 2546
Address 0x34e10

mouse_event

Ordinal 2547
Address 0x2c2f0

(#48)

Ordinal 2548
Address 0x34670

(#49)

Ordinal 2549
Address 0x35120

(#50)

Ordinal 2550
Address 0x33fe0

ReportInertia

Ordinal 2551
Address 0x1e60

(#51)

Ordinal 2552
Address 0x89720

(#52)

Ordinal 2553
Address 0x89c10

(#53)

Ordinal 2554
Address 0x89690

(#54)

Ordinal 2555
Address 0x90380

(#55)

Ordinal 2556
Address 0x34eb0

(#56)

Ordinal 2557
Address 0x2b5b0

(#57)

Ordinal 2558
Address 0x2a340

(#58)

Ordinal 2559
Address 0x34590

(#59)

Ordinal 2560
Address 0x50540

(#60)

Ordinal 2561
Address 0x2d180

wsprintfA

Ordinal 2562
Address 0x27890

(#61)

Ordinal 2563
Address 0x33fa0

(#62)

Ordinal 2564
Address 0x2d1a0

(#63)

Ordinal 2565
Address 0x2c850

(#64)

Ordinal 2566
Address 0x351c0

(#65)

Ordinal 2567
Address 0x2d2b0

(#66)

Ordinal 2568
Address 0x2ccf0

(#67)

Ordinal 2569
Address 0x27870

(#68)

Ordinal 2570
Address 0x89910

SetCoreWindow

Ordinal 2571
Address 0x34f60

(#69)

Ordinal 2572
Address 0x21f70

(#70)

Ordinal 2573
Address 0x148b0

(#71)

Ordinal 2574
Address 0x10d10

(#72)

Ordinal 2575
Address 0x890e0

(#73)

Ordinal 2576
Address 0x34f70

(#74)

Ordinal 2577
Address 0x2d090

(#75)

Ordinal 2578
Address 0x34b00

(#76)

Ordinal 2579
Address 0x35240

wsprintfW

Ordinal 2580
Address 0x29ed0

(#77)

Ordinal 2581
Address 0x2c7a0

(#78)

Ordinal 2582
Address 0x274e0

wvsprintfA

Ordinal 2583
Address 0x278c0

(#79)

Ordinal 2584
Address 0x89050

(#80)

Ordinal 2585
Address 0x353b0

(#81)

Ordinal 2586
Address 0x35060

(#82)

Ordinal 2587
Address 0x22660

(#83)

Ordinal 2588
Address 0x33eb0

(#84)

Ordinal 2589
Address 0x344e0

(#85)

Ordinal 2590
Address 0x344d0

(#86)

Ordinal 2591
Address 0x34ea0

(#87)

Ordinal 2592
Address 0x35070

(#88)

Ordinal 2593
Address 0x34970

(#89)

Ordinal 2594
Address 0x35080

(#90)

Ordinal 2595
Address 0x35130

wvsprintfW

Ordinal 2596
Address 0x29f00

(#91)

Ordinal 2597
Address 0x2a670

(#92)

Ordinal 2598
Address 0x513f0

(#93)

Ordinal 2599
Address 0x26d10

(#94)

Ordinal 2600
Address 0x1e40

(#95)

Ordinal 2606
Address 0x34280

(#96)

Ordinal 2608
Address 0x34b90

(#97)

Ordinal 2609
Address 0x344f0

(#98)

Ordinal 2610
Address 0x33ff0

(#99)

Ordinal 2611
Address 0x342c0

(#100)

Ordinal 2612
Address 0x2bf10

(#101)

Ordinal 2613
Address 0x241e0

(#102)

Ordinal 2614
Address 0x346f0

(#103)

Ordinal 2615
Address 0x34270

(#104)

Ordinal 2616
Address 0x33ee0

(#105)

Ordinal 2617
Address 0x349f0

(#106)

Ordinal 2618
Address 0x8e420

(#107)

Ordinal 2619
Address 0x2cb50

(#108)

Ordinal 2620
Address 0x8e1b0

(#109)

Ordinal 2621
Address 0x34020

(#110)

Ordinal 2622
Address 0x351a0

(#111)

Ordinal 2626
Address 0x34e50

(#112)

Ordinal 2627
Address 0x34ef0

(#113)

Ordinal 2628
Address 0x34090

(#114)

Ordinal 2629
Address 0x340e0

(#115)

Ordinal 2630
Address 0x347f0

(#116)

Ordinal 2631
Address 0x342b0

(#117)

Ordinal 2632
Address 0x35210

(#118)

Ordinal 2633
Address 0x34070

(#119)

Ordinal 2634
Address 0x89860

(#120)

Ordinal 2635
Address 0x102b0

(#121)

Ordinal 2636
Address 0x29b70

(#122)

Ordinal 2637
Address 0x35170

(#123)

Ordinal 2638
Address 0x34010

(#124)

Ordinal 2639
Address 0x34f90

(#125)

Ordinal 2640
Address 0x87a90

(#126)

Ordinal 2641
Address 0x87c30

(#127)

Ordinal 2642
Address 0x34330

(#128)

Ordinal 2643
Address 0x34e70

(#129)

Ordinal 2644
Address 0x340a0

(#130)

Ordinal 2645
Address 0x87d90

(#131)

Ordinal 2646
Address 0x34bb0

(#132)

Ordinal 2647
Address 0x34000

(#133)

Ordinal 2648
Address 0x34100

(#134)

Ordinal 2649
Address 0x35030

(#135)

Ordinal 2650
Address 0x344b0

(#136)

Ordinal 2651
Address 0x34180

(#137)

Ordinal 2652
Address 0x34770

(#138)

Ordinal 2653
Address 0x34650

(#139)

Ordinal 2654
Address 0x34060

(#140)

Ordinal 2655
Address 0x340f0

(#141)

Ordinal 2656
Address 0x34230

(#142)

Ordinal 2657
Address 0x35140

(#143)

Ordinal 2658
Address 0x34fc0

(#144)

Ordinal 2659
Address 0x2d3e0

(#145)

Ordinal 2700
Address 0x323d0

(#146)

Ordinal 2702
Address 0x78f50

(#147)

Ordinal 2703
Address 0x349d0

(#148)

Ordinal 2704
Address 0x34210

(#149)

Ordinal 2705
Address 0x349a0

(#150)

Ordinal 2706
Address 0x34a20

(#151)

Ordinal 2707
Address 0x23870

(#152)

Ordinal 2708
Address 0x33f10

(#153)

Ordinal 2709
Address 0x342a0

(#154)

Ordinal 2710
Address 0x34a30

(#155)

Ordinal 2711
Address 0x34350

(#156)

Ordinal 2712
Address 0x1e260

(#157)

Ordinal 2713
Address 0x2cc80

(#158)

Ordinal 2714
Address 0x32380

(#159)

Ordinal 2715
Address 0x34a90

(#160)

Ordinal 2716
Address 0x34b50

1

Type MUI
Language English - United States
Codepage UNKNOWN
Size 0x110
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.74983
MD5 095b705808b498924da512f79f743af7
SHA1 f4ade8e2f9c307e04e7c5ade99c5ad1c38974ebf
SHA256 228fb180c6ffa621baa6983b5f0e5123fbc436551b648378be5fb6e470cbd377
SHA3 d98ece703216a3daafc16e3a981ce03da69a84b9aa3ffd5d66174300a3feaa6e

1 (#2)

Type WEVT_TEMPLATE
Language English - United States
Codepage UNKNOWN
Size 0x11f6
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.69382
MD5 4f8f5c729640e31cca84035c7ba8d356
SHA1 0fb764223e55abc57b7701160bb5278d79874372
SHA256 878dbd42f0f5e52ca13e9b5412fa672bd3df94c5a0013e1e1eb6a0390531b3bd
SHA3 63973e52bfb28a0e6b4edec89a443d94677da5588e94762f65dfb47aa41b2dc5

78

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x334
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.95202
MD5 fbac131f8f469ccfe070ef30855557ea
SHA1 aab0a9b6ab5654c03b587dc629d9ce5332dad00e
SHA256 b688128efed1e336a73561344861688681c497adde2d6309759df5bb248a7427
SHA3 4af7b3ee890eec7d1ab35a37cca80a6882dc7417e499a25f3749e5010b663e5b

79

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x134
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.44265
MD5 8bb9cfc14b1a6abd34ca171fa6c96a10
SHA1 3776de80654344a3ea6921e3e43ddbc45793462b
SHA256 9cffe4e3767bdf1f8c397b884015dfe44994a8859d0bf93deaaff1376e50e321
SHA3 bc02e51c9e8b2485cff1206ebdba423cf098208350dadc6564a9bc727922d198

80

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x134
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.50386
MD5 328f82aa99222756b1088d17116ba632
SHA1 7ea8381c0f4e377b3a60569a8428bcdb521315fb
SHA256 ec6a57beec34283b2831e2853bd26f99781a2062fe753b99020a808a332abe00
SHA3 ef8d945b8cdb57a71d808c9d49d6d9f41b1e21b1246c1f64b1b77b00496a407e

81

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x66c
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 0.881982
MD5 196a6665f61a5b05503cfba3837f3fdc
SHA1 a5fd59f54e1105def6f9e62b656b70548792a340
SHA256 ccd8dd47a4d1b94f07892af658259021215a6586c0cafeac1a2cd4a010697dcc
SHA3 02006a8ce9a81ed8986289e98ba7f01c8f0c07fd6c5499ff658160aa935af5f5

82

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x334
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.97875
MD5 dbb53f05d71fa6668e4db782656e7fb7
SHA1 6967dd5b7c7436ff3af7319dd6465572517fb32d
SHA256 2ab24d66ddd1f90179f7268a277195f652d9c61679e077e71c78be6c827b96cd
SHA3 e925d7762d26b3101f87416d8c481c590dfa4c5c7af0f464ed0de6de0b0a381d

83

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x134
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.35345
MD5 4ca9dac759ea24c01f80166e629af91f
SHA1 3c632cc98aec6e3bcd2c44957d291feaa37b1155
SHA256 6561e0042337cd0f63aee8f4c04ef4f4edadb8ca2661887e47dfff1e0fdcea19
SHA3 d0cc077626ba1ccc497aa51122b37f12f302c410821f49051a848d274260d9f7

84

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x134
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.84054
MD5 f0ef3b761e82d0d417c911caea57003b
SHA1 9a0561b1795b22f46a1e5276131e5433221637cd
SHA256 5f5212363f2147b6266b966bdfe93ee1e5e440f0a908b2625494845a017d073f
SHA3 2afa51fb62de68833da8b4f3d050b43c5911f34089749bc87d0109ce21114d51

85

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x334
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.46935
MD5 3e1e50888557c103cf08d4cbe539d95b
SHA1 69b42201022c6cfe281d8914d8d1be7e2ab2a7e1
SHA256 238e62edc9d09b781b62f05ba5bb1bef677f0985e815a10b8a9f82b56f3e649c
SHA3 0be845107044bf13b465b2fe3521db80a18c9aa52fbf05de7916b1cf9913a3d7

86

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x334
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.99167
MD5 1b6334a2d146d2480ceddd4ee87d90c7
SHA1 40abe44e911600095d9aa3db1c2b333b81177794
SHA256 8cd1dca20ffdd8adf36e8a115ff8d0ae818a93bc44be95f8bf07395fe7acb263
SHA3 d006c8a20ca1dca90db201a5a927e9502e97d3b5c33f26a4844b0d7b151f8daf

87

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x134
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 2.00786
MD5 b4c7e89ccc5b13b0a37ffe97aba70f3a
SHA1 3c0aaa722599b0fef0b728a683d2396427e937b8
SHA256 ac2d540bb6555235aec6b4d26b7bd37772ab1fbd5efd162e0d0a8cc192f2c651
SHA3 c143d847bd996b1c8ddfbea98069da2fc0f354ee9f23995d5a745d3a0771d082

88

Type RT_CURSOR
Language English - United States
Codepage UNKNOWN
Size 0x334
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 1.98279
MD5 d0245d7b66989b91e1f5880fbf308bee
SHA1 0e3bedf2c5b220c8686a0b1f533effedb78b3c7d