filenameOSVolOSVol--Windows--SysWOW64--uxtheme.dll.fullextract
size245760 (0x3c000)
md543964fa89ccf97ba6be34d69455ac65f
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xf0

Rich Header

lib idversiontimes used
138307291
10387
1473072917
149307296
146307291
1323072960
1313072914
148307291
145307291

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections4
TimeDateStamp0x4a5bdb3c
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2102
Magic0x10b
LinkerVersion9.0
SizeOfCode0x37600
SizeOfInitializedData0x4e00
SizeOfUninitializedData0
AddressOfEntryPoint0x137c9
BaseOfCode0x10000
BaseOfData0x50000
ImageBase0x7d980000
SectionAlignment0x10000
FileAlignment0x200
OperatingSystemVersion6.1
ImageVersion6.1
SubsystemVersion6.1
Reserved10
SizeOfImage0x80000
SizeOfHeaders0x400
CheckSum0x479e1
Subsystem2
DllCharacteristics0x140
SizeOfStackReserve0x40000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

namevavsizeraw sizeflags
.text0x100000x374ed0x37600R-X CODE
.data0x500000x1f180x1800RW- IDATA
.rsrc0x600000x10d00x1200R-- IDATA
.reloc0x700000x1a7c0x1c00R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x111240xad5
IMPORT0x455dc0xb4
RESOURCE0x600000x10d0
EXCEPTION00
SECURITY00
BASERELOC0x700000x1a7c
DEBUG0x4748c0x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x2c9900x40
Bound_IAT00
IAT0x100000x598
Delay_IAT0x453040xa0
CLR_Header00
typenamesizecp
MUI#12080
ICON#12960
ICON#27440
ICON#32960
GROUP_ICONIDI_SMALL200
GROUP_ICONIDI_UXTHEME340
VERSION#19600
MANIFEST#111530
module_namehintordfunction_name
msvcrt.dll1190free
msvcrt.dll974_vsnwprintf
msvcrt.dll1262memset
msvcrt.dll774_resetstkoflw
msvcrt.dll764_purecall
msvcrt.dll71_CIsqrt
msvcrt.dll60_CIatan
msvcrt.dll115__CxxFrameHandler3
msvcrt.dll1173fflush
msvcrt.dll1188fputws
msvcrt.dll1199fwprintf
msvcrt.dll1387wcstoul
msvcrt.dll1299strchr
msvcrt.dll1361wcschr
msvcrt.dll1277rand
msvcrt.dll1114_wsplitpath_s
msvcrt.dll405_ftol2_sse
msvcrt.dll1179floor
msvcrt.dll1258memcpy
msvcrt.dll62_CIcos
msvcrt.dll345_except_handler4_common
msvcrt.dll257_amsg_exit
msvcrt.dll469_initterm
msvcrt.dll1260memmove
msvcrt.dll1246malloc
msvcrt.dll106_XcptFilter
ntdll.dll391NtQueryEvent
ntdll.dll57EtwEventWrite
ntdll.dll53EtwEventEnabled
ntdll.dll580RtlAcquireSRWLockExclusive
ntdll.dll1109RtlReleaseSRWLockExclusive
ntdll.dll581RtlAcquireSRWLockShared
ntdll.dll1110RtlReleaseSRWLockShared
ntdll.dll942RtlInitializeSRWLock
ntdll.dll65EtwGetTraceEnableFlags
ntdll.dll66EtwGetTraceEnableLevel
ntdll.dll67EtwGetTraceLoggerHandle
ntdll.dll74EtwRegisterTraceGuidsW
ntdll.dll81EtwUnregisterTraceGuids
ntdll.dll56EtwEventUnregister
ntdll.dll55EtwEventRegister
ntdll.dll893RtlGetThreadLangIdByIndex
ntdll.dll1043RtlNtStatusToDosError
ntdll.dll341NtOpenEvent
ntdll.dll930RtlInitializeCriticalSection
ntdll.dll463NtRequestWaitReplyPort
ntdll.dll221NtConnectPort
ntdll.dll923RtlInitUnicodeString
API-MS-Win-Core-LocalRegistry-L1-1-0.dllRegCloseKey
API-MS-Win-Core-LocalRegistry-L1-1-0.dll25RegOpenKeyExW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll37RegSetValueExW
API-MS-Win-Core-LocalRegistry-L1-1-0.dll2RegCreateKeyExW
API-MS-Win-Core-ProcessThreads-L1-1-0.dll26OpenProcessToken
API-MS-Win-Core-ProcessThreads-L1-1-0.dll10GetCurrentProcess
API-MS-Win-Core-ProcessThreads-L1-1-0.dll12GetCurrentThread
API-MS-Win-Core-ProcessThreads-L1-1-0.dll28OpenThreadToken
API-MS-Win-Core-ProcessThreads-L1-1-0.dll42TerminateProcess
API-MS-Win-Core-ProcessThreads-L1-1-0.dll13GetCurrentThreadId
API-MS-Win-Core-ProcessThreads-L1-1-0.dll11GetCurrentProcessId
API-MS-Win-Core-ProcessThreads-L1-1-0.dll44TlsAlloc
API-MS-Win-Core-ProcessThreads-L1-1-0.dll47TlsSetValue
API-MS-Win-Core-ProcessThreads-L1-1-0.dll46TlsGetValue
API-MS-Win-Core-ProcessThreads-L1-1-0.dll45TlsFree
API-MS-Win-Core-ProcessThreads-L1-1-0.dll5CreateThread
API-MS-Win-Security-Base-L1-1-0.dll61ImpersonateLoggedOnUser
API-MS-Win-Security-Base-L1-1-0.dll83RevertToSelf
API-MS-Win-Security-Base-L1-1-0.dll58GetTokenInformation
KERNEL32.dll355FreeLibraryAndExitThread
KERNEL32.dll535GetModuleHandleExW
KERNEL32.dll1260VirtualFree
KERNEL32.dll627GetSystemInfo
KERNEL32.dll1346lstrcmpW
KERNEL32.dll100CompareStringW
KERNEL32.dll936QueryPerformanceFrequency
KERNEL32.dll935QueryPerformanceCounter
KERNEL32.dll852LockResource
KERNEL32.dll833LoadResource
KERNEL32.dll507GetFullPathNameW
KERNEL32.dll624GetSystemDirectoryW
KERNEL32.dll1238UnmapViewOfFile
KERNEL32.dll174CreateSemaphoreW
KERNEL32.dll232DuplicateHandle
KERNEL32.dll855MapViewOfFile
KERNEL32.dll360GetACP
KERNEL32.dll768IsDebuggerPresent
KERNEL32.dll748InterlockedExchange
KERNEL32.dll140CreateFileMappingW
KERNEL32.dll302FindClose
KERNEL32.dll325FindNextFileW
KERNEL32.dll313FindFirstFileW
KERNEL32.dll206DelayLoadFailureHook
KERNEL32.dll829LoadLibraryExA
KERNEL32.dll1202Sleep
KERNEL32.dll633GetSystemTimeAsFileTime
KERNEL32.dll1235UnhandledExceptionFilter
KERNEL32.dll1189SetUnhandledExceptionFilter
KERNEL32.dll1123SetFilePointer
KERNEL32.dll630GetSystemTime
KERNEL32.dll1209SystemTimeToFileTime
KERNEL32.dll349FormatMessageW
KERNEL32.dll957ReadFile
KERNEL32.dll333FindResourceW
KERNEL32.dll1197SizeofResource
KERNEL32.dll616GetStringTypeW
KERNEL32.dll870MultiByteToWideChar
KERNEL32.dll206DeleteAtom
KERNEL32.dll4AddAtomW
KERNEL32.dll489GetFileAttributesW
KERNEL32.dll284ExpandEnvironmentStringsW
KERNEL32.dll970RegDeleteValueW
KERNEL32.dll994RegQueryValueExW
KERNEL32.dll987RegOpenCurrentUser
KERNEL32.dll535GetModuleHandleW
KERNEL32.dll829LoadLibraryExW
KERNEL32.dll718HeapFree
KERNEL32.dll721HeapReAlloc
KERNEL32.dll714HeapAlloc
KERNEL32.dll717HeapDestroy
KERNEL32.dll716HeapCreate
KERNEL32.dll670GetUserDefaultUILanguage
KERNEL32.dll585GetProcessHeap
KERNEL32.dll238EnterCriticalSection
KERNEL32.dll825LeaveCriticalSection
KERNEL32.dll82CloseHandle
KERNEL32.dll739InitializeCriticalSectionAndSpinCount
KERNEL32.dll209DeleteCriticalSection
KERNEL32.dll1297WideCharToMultiByte
KERNEL32.dll514GetLastError
KERNEL32.dll1317WriteFile
KERNEL32.dll1358lstrlenW
KERNEL32.dll751InterlockedIncrement
KERNEL32.dll747InterlockedDecrement
KERNEL32.dll745InterlockedCompareExchange
KERNEL32.dll659GetTickCount
KERNEL32.dll1139SetLastError
KERNEL32.dll1349lstrcmpiW
KERNEL32.dll738InitializeCriticalSection
KERNEL32.dll354FreeLibrary
KERNEL32.dll1017ReleaseActCtx
KERNEL32.dll196DeactivateActCtx
KERNEL32.dll831LoadLibraryW
KERNEL32.dll2ActivateActCtx
KERNEL32.dll120CreateActCtxW
KERNEL32.dll581GetProcAddress
KERNEL32.dll222DisableThreadLibraryCalls
KERNEL32.dll870MulDiv
KERNEL32.dll143CreateFileW
KERNEL32.dll532GetModuleFileNameW
KERNEL32.dll366GetAtomNameW
KERNEL32.dll496GetFileSize
KERNEL32.dll1257VirtualAlloc
KERNEL32.dll498GetFileTime
KERNEL32.dll979RegGetValueW
USER32.dll674SetMenuItemInfoW
USER32.dll356GetParent
USER32.dll419GetWindowTextW
USER32.dll444InternalGetWindowText
USER32.dll380GetSysColorBrush
USER32.dll276GetClientRect
USER32.dll478IsWindowRedirectedForPrint
USER32.dll351GetMonitorInfoW
USER32.dll538MonitorFromWindow
USER32.dll482IsZoomed
USER32.dll301GetForegroundWindow
USER32.dll465IsIconic
USER32.dll446InvalidateRect
USER32.dll23CalcMenuBar
USER32.dll493LoadIconW
USER32.dll264GetCapture
USER32.dll612ReleaseCapture
USER32.dll541MsgWaitForMultipleObjectsEx
USER32.dll563PeekMessageW
USER32.dll640SetCapture
USER32.dll195DrawEdge
USER32.dll480IsWindowVisible
USER32.dll200DrawIconEx
USER32.dll537MonitorFromRect
USER32.dll201DrawMenuBar
USER32.dll337GetMenuItemCount
USER32.dll332GetMenuBarInfo
USER32.dll560PaintMenuBar
USER32.dll796ValidateRect
USER32.dll317GetKeyState
USER32.dll347GetMessagePos
USER32.dll506LoadStringW
USER32.dll71ClientToScreen
USER32.dll470IsServerSideWindow
USER32.dll166DestroyWindow
USER32.dll715SetWindowTextW
USER32.dll110CreateWindowExW
USER32.dll590RegisterClassW
USER32.dll491LoadCursorW
USER32.dll270GetClassInfoW
USER32.dll748SystemParametersInfoW
USER32.dll747SystemParametersInfoA
USER32.dll3AdjustWindowRectEx
USER32.dll377GetShellWindow
USER32.dll250FindWindowW
USER32.dll6AllowSetForegroundWindow
USER32.dll768UnhookWindowsHookEx
USER32.dll719SetWindowsHookExW
USER32.dll28CallNextHookEx
USER32.dll466IsMenu
USER32.dll336GetMenuInfo
USER32.dll698SetThreadDesktop
USER32.dll554OpenInputDesktop
USER32.dll386GetThreadDesktop
USER32.dll151DefFrameProcW
USER32.dll163DestroyIcon
USER32.dll379GetSysColor
USER32.dll477IsWindowInDestroy
USER32.dll711SetWindowRgn
USER32.dll414GetWindowRgnBox
USER32.dll307GetIconInfo
USER32.dll103CreateIconIndirect
USER32.dll387GetTitleBarInfo
USER32.dll381GetSystemMenu
USER32.dll340GetMenuItemInfoW
USER32.dll636SendMessageW
USER32.dll260GetAncestor
USER32.dll272GetClassLongW
USER32.dll710SetWindowPos
USER32.dll471IsThreadDesktopComposited
USER32.dll757TrackMouseEvent
USER32.dll406GetWindowLongW
USER32.dll708SetWindowLongW
USER32.dll30CallWindowProcW
USER32.dll156DefWindowProcW
USER32.dll290GetDCEx
USER32.dll291GetDesktopWindow
USER32.dll566PostMessageW
USER32.dll420GetWindowThreadProcessId
USER32.dll680SetProcessDPIAware
USER32.dll693SetSysColors
USER32.dll289GetDC
USER32.dll617RemovePropW
USER32.dll685SetPropW
USER32.dll363GetPropW
USER32.dll274GetClassNameW
USER32.dll552OpenDesktopW
USER32.dll225EnumDesktopWindows
USER32.dll74CloseDesktop
USER32.dll398GetWindow
USER32.dll223EnumChildWindows
USER32.dll437InflateRect
USER32.dll208DrawTextW
USER32.dll84CopyImage
USER32.dll207DrawTextExW
USER32.dll402GetWindowDC
USER32.dll613ReleaseDC
USER32.dll302GetGUIThreadInfo
USER32.dll360GetProcessWindowStation
USER32.dll395GetUserObjectInformationW
USER32.dll382GetSystemMetrics
USER32.dll85CopyRect
USER32.dll576PtInRect
USER32.dll810WindowFromDC
USER32.dll699SetTimer
USER32.dll586RedrawWindow
USER32.dll483KillTimer
USER32.dll243EqualRect
USER32.dll549OffsetRect
USER32.dll412GetWindowRect
USER32.dll521MapWindowPoints
USER32.dll468IsRectEmpty
USER32.dll445IntersectRect
USER32.dll246FillRect
USER32.dll686SetRect
USER32.dll475IsWindow
USER32.dll457IsChild
USER32.dll404GetWindowInfo
USER32.dll49CharNextW
USER32.dll635SendMessageTimeoutW
USER32.dll234EnumDisplaySettingsW
USER32.dll229EnumDisplayDevicesW
USER32.dll227EnumDesktopsW
USER32.dll687SetRectEmpty
GDI32.dll639SetBkMode
GDI32.dll678SetTextColor
GDI32.dll353GdiDrawStream
GDI32.dll657SetLayout
GDI32.dll11Arc
GDI32.dll388GdiGradientFill
GDI32.dll601PtInRegion
GDI32.dll64CreateFontIndirectW
GDI32.dll674SetStretchBltMode
GDI32.dll691StretchBlt
GDI32.dll522GetRegionData
GDI32.dll373GdiFlush
GDI32.dll681SetViewportOrgEx
GDI32.dll685SetWindowOrgEx
GDI32.dll48CreateCompatibleDC
GDI32.dll47CreateCompatibleBitmap
GDI32.dll509GetObjectW
GDI32.dll640SetBoundsRect
GDI32.dll427GetBoundsRect
GDI32.dll418GdiTransparentBlt
GDI32.dll524GetRgnBox
GDI32.dll553GetViewportOrgEx
GDI32.dll556GetWindowOrgEx
GDI32.dll452GetCurrentObject
GDI32.dll635SetBitmapAttributes
GDI32.dll27ClearBitmapAttributes
GDI32.dll676SetTextAlign
GDI32.dll532GetTextAlign
GDI32.dll458GetDIBits
GDI32.dll74CreatePatternBrush
GDI32.dll642SetBrushOrgEx
GDI32.dll448GetClipBox
GDI32.dll606RectVisible
GDI32.dll648SetDIBits
GDI32.dll307ExtCreateRegion
GDI32.dll34CombineRgn
GDI32.dll1AbortPath
GDI32.dll693StrokeAndFillPath
GDI32.dll306ExtCreatePen
GDI32.dll459GetDeviceCaps
GDI32.dll582PatBlt
GDI32.dll53CreateDIBSection
GDI32.dll331GdiAlphaBlend
GDI32.dll80CreateRectRgnIndirect
GDI32.dll227DeleteDC
GDI32.dll493GetLayout
GDI32.dll520GetRandomRgn
GDI32.dll564LPtoDP
GDI32.dll573OffsetRgn
GDI32.dll305ExcludeClipRect
GDI32.dll508GetObjectType
GDI32.dll583PathToRegion
GDI32.dll638SetBkColor
GDI32.dll312ExtTextOutW
GDI32.dll425GetBkColor
GDI32.dll560IntersectClipRect
GDI32.dll75CreatePen
GDI32.dll84CreateSolidBrush
GDI32.dll525GetStockObject
GDI32.dll607Rectangle
GDI32.dll618RoundRect
GDI32.dll18BeginPath
GDI32.dll237Ellipse
GDI32.dll243EndPath
GDI32.dll628SelectClipPath
GDI32.dll19BitBlt
GDI32.dll629SelectClipRgn
GDI32.dll79CreateRectRgn
GDI32.dll449GetClipRgn
GDI32.dll631SelectObject
GDI32.dll54CreateDIBitmap
GDI32.dll230DeleteObject
GDI32.dll550GetTextMetricsW
ordentry_vafunction_name
10x3cc1f
20x3ba03
30x3bb2b
40x3baac
50x376afBeginPanningFeedback
60x3762cEndPanningFeedback
70x3c281
80x3ce6d
90x3bcca
100x3bc15
110x11ae1
120x375edUpdatePanningFeedback
130x370a8
140x3c65e
150x3c76b
160x3c973
170x3c808
180x11aef
190x11afd
200x11b0b
210x11b19
220x11b27
230x11b35
240x11b43
250x11b51
260x11b5f
270x11b6d
280x11b7b
290x11b89
300x11b97
310x3ae12
320x11ba5
330x3ae22
340x11bb3
350x11bc1
360x3c863
370x1df38BeginBufferedAnimation
380x1b741BeginBufferedPaint
390x1bbdbBufferedPaintClear
400x1b8d4BufferedPaintInit
410x1de83BufferedPaintRenderAnimation
420x3ce19BufferedPaintSetAlpha
430x129c5
440x1ebac
450x11bfe
460x3a2fe
470x2436dDrawThemeBackgroundEx
480x3c7c8
490x12052
500x3cabd
510x1e428BufferedPaintStopAllAnimations
520x27525BufferedPaintUnInit
530x11fa1CloseThemeData
540x1d464DrawThemeBackground
550x3c01cDrawThemeEdge
560x3d123DrawThemeIcon
570x1e776DrawThemeParentBackground
580x1e5c5DrawThemeParentBackgroundEx
590x1db21DrawThemeText
600x3c8ef
610x206feOpenThemeDataEx
620x11bcf
630x11bdd
640x39b8e
650x3bb77
660x11beb
670x3b75d
680x3b77d
690x3bf7a
700x1a70cDrawThemeTextEx
710x2786dEnableThemeDialogTexture
720x3c0ab
730x3cd3c
740x3d1c0
750x3a2af
760x3b791
770x3ae2c
780x3af0b
790x3ae90
800x3adcf
810x3aeac
820x3ade8
830x3adfe
840x3ae3c
850x35a88
860x3a5ef
870x3c9ffEnableTheming
880x1ace8EndBufferedAnimation
890x1ace8EndBufferedPaint
900x1cf26GetBufferedPaintBits
910x3cdcfGetBufferedPaintDC
920x3cd86GetBufferedPaintTargetDC
930x3c893GetBufferedPaintTargetRect
940x263aeGetCurrentThemeName
950x1ebd6GetThemeAppProperties
960x1da9eGetThemeBackgroundContentRect
970x27155GetThemeBackgroundExtent
980x20190GetThemeBackgroundRegion
990x14b9cGetThemeBitmap
1000x16651GetThemeBool
1010x127c0GetThemeColor
1020x3c346GetThemeDocumentationProperty
1030x127c0GetThemeEnumValue
1040x3b997GetThemeFilename
1050x276a2GetThemeFont
1060x127c0GetThemeInt
1070x3b86eGetThemeIntList
1080x12f97GetThemeMargins
1090x255b4GetThemeMetric
1100x1289fGetThemePartSize
1110x3b80dGetThemePosition
1120x20923GetThemePropertyOrigin
1130x3b936GetThemeRect
1140x3b8cfGetThemeStream
1150x3b7a1GetThemeString
1160x3cb86GetThemeSysBool
1170x25530GetThemeSysColor
1180x3ca32GetThemeSysColorBrush
1190x3c3d8GetThemeSysFont
1200x3c5e7GetThemeSysInt
1210x3cc61GetThemeSysSize
1220x3c553GetThemeSysString
1230x189feGetThemeTextExtent
1240x2778cGetThemeTextMetrics
1250x1e1a1GetThemeTransitionDuration
1260x2535bGetWindowTheme
1270x22dc1HitTestThemeBackground
1280x27009IsAppThemed
1290x165dfIsCompositionActive
1300x26f36IsThemeActive
1310x1281cIsThemeBackgroundPartiallyTransparent
1320x3cb3fIsThemeDialogTextureEnabled
1330x130cfIsThemePartDefined
1340x15f29OpenThemeData
1350x3ccecSetThemeAppProperties
1360x27afcSetWindowTheme
1370x19e39SetWindowThemeAttribute
1380x14571ThemeInitApiHook
module_nameUxTheme.dll
flags0
timestamp2009-07-13 23:39:07
version0.0
ordinal_base1
nFunctions138
nNames74
Names(74)0x11374
Functions(138)0x1114c
NameOrdinals(74)0x1149c

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionMicrosoft UxTheme Library
FileVersion6.1.7600.16385 (win7_rtm.090713-1255)
InternalNameUxTheme.dll
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenameUxTheme.dll
ProductNameMicrosoft® Windows® Operating System
ProductVersion6.1.7600.16385
OleSelfRegister

VS_FIXEDFILEINFO

FileVersion6.1.7600.16385
ProductVersion6.1.7600.16385
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType2
FileSubtype0
offsetsizetypecomment
0245760DLL07/14/2009 01:11:24#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK