user32.dll - user32 - Multi-User Windows USER API Client DLL

info
MZ
PE
resources
imports
exports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	user32.dll
size	833024 (0xcb600)
md5	5e0db2d8b2750543cd2ebb9ea8e6cdd3

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe8

Rich Header

lib id	version	times used
132	30729	1
1	0	350
147	30729	9
146	30729	1
149	30729	7
131	30729	126
148	30729	1
145	30729	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x4ce7ba59
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2102
Magic	0x10b
LinkerVersion	9.0
SizeOfCode	0x6cc00
SizeOfInitializedData	0x5e600
SizeOfUninitializedData	0
AddressOfEntryPoint	0x1b6ed
BaseOfCode	0x10000
BaseOfData	0x80000
ImageBase	0x7dc50000
SectionAlignment	0x10000
FileAlignment	0x200
OperatingSystemVersion	6.1
ImageVersion	6.1
SubsystemVersion	6.1
Reserved1	0
SizeOfImage	0x100000
SizeOfHeaders	0x400
CheckSum	0xd5873
Subsystem	2
DllCharacteristics	0x140
SizeOfStackReserve	0x40000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

name	va	vsize	raw size	flags
.text	0x10000	0x6cabc	0x6cc00	R-X CODE
.data	0x80000	0xfe0	0x1000	RW- IDATA
.rsrc	0x90000	0x5a280	0x5a400	R-- IDATA
.reloc	0xf0000	0x3198	0x3200	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x10548	0x5a7e
IMPORT	0x7abe0	0x64
RESOURCE	0x90000	0x5a280
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0xf0000	0x3198
DEBUG	0x7ca5c	0x38
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x54670	0x40
Bound_IAT	0	0
IAT	0x10000	0x548
Delay_IAT	0x7a9b0	0xa0
CLR_Header	0	0

show previews

type	name	size
MUI	#1	232
CURSOR	#71	820
CURSOR	#72	308
CURSOR	#73	308
CURSOR	#74	1644
CURSOR	#75	820
CURSOR	#76	308
CURSOR	#77	308
CURSOR	#78	820
CURSOR	#79	820
CURSOR	#80	308
CURSOR	#81	820
CURSOR	#82	308
CURSOR	#83	820
CURSOR	#84	308
CURSOR	#85	820
CURSOR	#86	308
CURSOR	#87	820
CURSOR	#88	308
CURSOR	#89	820
CURSOR	#90	308
CURSOR	#91	820
CURSOR	#92	308
CURSOR	#93	820
CURSOR	#94	308
CURSOR	#95	820
CURSOR	#96	308
CURSOR	#97	820
CURSOR	#98	308
CURSOR	#99	820
CURSOR	#100	308
CURSOR	#101	820
CURSOR	#102	308
CURSOR	#103	1644
CURSOR	#104	748
CURSOR	#105	820
CURSOR	#106	308
CURSOR	#107	820
CURSOR	#108	308
CURSOR	#109	820
CURSOR	#110	308
CURSOR	#111	820
CURSOR	#112	308
CURSOR	#113	820
CURSOR	#114	308
CURSOR	#115	820
CURSOR	#116	308
CURSOR	#117	820
CURSOR	#118	308
CURSOR	#119	820
CURSOR	#120	308
CURSOR	#121	820
CURSOR	#122	308
CURSOR	#123	820
CURSOR	#124	308
CURSOR	#125	820
CURSOR	#126	308
BITMAP	#36	1616
BITMAP	#136	248
BITMAP	#236	360
BITMAP	#32559	322
BITMAP	#32660	370
BITMAP	#32661	394
BITMAP	#32731	184
ICON	#1	744
ICON	#2	296
ICON	#3	3752
ICON	#4	2216
ICON	#5	1384
ICON	#6	9640
ICON	#7	4264
ICON	#8	1128
ICON	#9	744
ICON	#10	304
ICON	#11	296
ICON	#12	3752
ICON	#13	2216
ICON	#14	1384
ICON	#15	9640
ICON	#16	4264
ICON	#17	1128
ICON	#18	744
ICON	#19	304
ICON	#20	3752
ICON	#21	2216
ICON	#22	1384
ICON	#23	9640
ICON	#24	4264
ICON	#25	1128
ICON	#26	744
ICON	#27	304
ICON	#28	296
ICON	#29	3752
ICON	#30	2216
ICON	#31	1384
ICON	#32	9640
ICON	#33	4264
ICON	#34	1128
ICON	#35	744
ICON	#36	304
ICON	#37	296
ICON	#38	3752
ICON	#39	2216
ICON	#40	1384
ICON	#41	9640
ICON	#42	4264
ICON	#43	1128
ICON	#44	744
ICON	#45	296
ICON	#46	3752
ICON	#47	2216
ICON	#48	1384
ICON	#49	9640
ICON	#50	4264
ICON	#51	1128
ICON	#52	10344
ICON	#53	1640
ICON	#54	744
ICON	#55	488
ICON	#56	296
ICON	#57	168
ICON	#58	19496
ICON	#59	3752
ICON	#60	2216
ICON	#61	1736
ICON	#62	1384
ICON	#63	1160
ICON	#64	49865
ICON	#65	67624
ICON	#66	9640
ICON	#67	4264
ICON	#68	2440
ICON	#69	1128
ICON	#70	328
GROUP_CURSOR	#100	34
GROUP_CURSOR	#101	34
GROUP_CURSOR	#102	34
GROUP_CURSOR	#103	34
GROUP_CURSOR	#104	34
GROUP_CURSOR	#105	34
GROUP_CURSOR	#106	34
GROUP_CURSOR	#107	34
GROUP_CURSOR	#108	34
GROUP_CURSOR	#109	34
GROUP_CURSOR	#110	34
GROUP_CURSOR	#111	34
GROUP_CURSOR	#112	34
GROUP_CURSOR	#113	34
GROUP_CURSOR	#114	34
GROUP_CURSOR	#115	34
GROUP_CURSOR	#116	34
GROUP_CURSOR	#32652	34
GROUP_CURSOR	#32653	34
GROUP_CURSOR	#32654	34
GROUP_CURSOR	#32655	34
GROUP_CURSOR	#32656	34
GROUP_CURSOR	#32657	34
GROUP_CURSOR	#32658	34
GROUP_CURSOR	#32659	34
GROUP_CURSOR	#32660	34
GROUP_CURSOR	#32661	34
GROUP_CURSOR	#32662	34
GROUP_ICON	#100	118
GROUP_ICON	#101	132
GROUP_ICON	#102	118
GROUP_ICON	#103	132
GROUP_ICON	#104	132
GROUP_ICON	#105	118
GROUP_ICON	#106	272
VERSION	#1	940

module_name	hint	function_name
ntdll.dll	346	NtOpenKey
ntdll.dll	1962	wcscat_s
ntdll.dll	1966	wcscpy_s
ntdll.dll	279	NtEnumerateKey
ntdll.dll	1054	RtlOpenCurrentUser
ntdll.dll	840	RtlFreeHeap
ntdll.dll	611	RtlAllocateHeap
ntdll.dll	1914	memcpy
ntdll.dll	1918	memset
ntdll.dll	779	RtlEnterCriticalSection
ntdll.dll	1004	RtlLeaveCriticalSection
ntdll.dll	1224	RtlUnicodeToMultiByteN
ntdll.dll	1032	RtlMultiByteToUnicodeN
ntdll.dll	1104	RtlReleaseActivationContext
ntdll.dll	815	RtlFindActivationContextSectionString
ntdll.dll	718	RtlDeactivateActivationContextUnsafeFast
ntdll.dll	584	RtlActivateActivationContextUnsafeFast
ntdll.dll	1979	wcstol
ntdll.dll	398	NtQueryInformationProcess
ntdll.dll	420	NtQuerySecurityObject
ntdll.dll	511	NtSetSecurityObject
ntdll.dll	845	RtlFreeUnicodeString
ntdll.dll	616	RtlAnsiStringToUnicodeString
ntdll.dll	915	RtlInitAnsiString
ntdll.dll	706	RtlCreateUnicodeStringFromAsciiz
ntdll.dll	1075	RtlQueryInformationActiveActivationContext
ntdll.dll	1868	_vsnwprintf
ntdll.dll	550	NtVdmControl
ntdll.dll	1981	wcstoul
ntdll.dll	339	NtOpenDirectoryObject
ntdll.dll	269	NtDeleteValueKey
ntdll.dll	522	NtSetValueKey
ntdll.dll	232	NtCreateKey
ntdll.dll	564	NtYieldExecution
ntdll.dll	989	RtlIsThreadWithinLoaderCallout
ntdll.dll	1871	_wcsicmp
ntdll.dll	1850	_stricmp
ntdll.dll	872	RtlGetIntegerAtom
ntdll.dll	379	NtProtectVirtualMemory
ntdll.dll	1125	RtlRetrieveNtUserPfn
ntdll.dll	939	RtlInitializeNtUserPfn
ntdll.dll	730	RtlDeleteCriticalSection
ntdll.dll	425	NtQuerySystemInformation
ntdll.dll	931	RtlInitializeCriticalSection
ntdll.dll	1816	_allshr
ntdll.dll	1225	RtlUnicodeToMultiByteSize
ntdll.dll	1810	_allmul
ntdll.dll	206	NtCallbackReturn
ntdll.dll	1822	_chkstk
ntdll.dll	1916	memmove
ntdll.dll	401	NtQueryInformationToken
ntdll.dll	355	NtOpenProcessToken
ntdll.dll	363	NtOpenThreadToken
ntdll.dll	1044	RtlNtStatusToDosError
ntdll.dll	24	CsrClientCallServer
ntdll.dll	26	CsrFreeCaptureBuffer
ntdll.dll	20	CsrCaptureMessageBuffer
ntdll.dll	18	CsrAllocateCaptureBuffer
ntdll.dll	843	RtlFreeSid
ntdll.dll	609	RtlAllocateAndInitializeSid
ntdll.dll	19	CsrAllocateMessagePointer
ntdll.dll	1095	RtlReAllocateHeap
ntdll.dll	1127	RtlRunDecodeUnicodeString
ntdll.dll	1128	RtlRunEncodeUnicodeString
ntdll.dll	894	RtlGetThreadLangIdByIndex
ntdll.dll	1182	RtlSizeHeap
ntdll.dll	1932	strcpy_s
ntdll.dll	1926	sscanf_s
ntdll.dll	1942	strrchr
ntdll.dll	986	RtlIsNameLegalDOS8Dot3
ntdll.dll	1970	wcsncat_s
ntdll.dll	436	NtRaiseHardError
ntdll.dll	1033	RtlMultiByteToUnicodeSize
ntdll.dll	638	RtlCheckRegistryKey
ntdll.dll	108	LdrFlushAlternateResourceModules
ntdll.dll	1920	qsort
ntdll.dll	1906	iswspace
ntdll.dll	1973	wcsncpy_s
ntdll.dll	1976	wcsrchr
ntdll.dll	1808	_alldiv
ntdll.dll	1880	_wtoi
ntdll.dll	1819	_aulldvrm
ntdll.dll	159	NlsAnsiCodePage
ntdll.dll	909	RtlImageNtHeader
ntdll.dll	1157	RtlSetLastWin32Error
ntdll.dll	1236	RtlUnwind
ntdll.dll	212	NtClose
ntdll.dll	430	NtQueryValueKey
ntdll.dll	1949	swprintf_s
ntdll.dll	924	RtlInitUnicodeString
ntdll.dll	1220	RtlUnicodeStringToInteger
GDI32.dll	449	GetClipRgn
GDI32.dll	310	ExtSelectClipRgn
GDI32.dll	487	GetHFONT
GDI32.dll	496	GetMapMode
GDI32.dll	653	SetGraphicsMode
GDI32.dll	448	GetClipBox
GDI32.dll	79	CreateRectRgn
GDI32.dll	80	CreateRectRgnIndirect
GDI32.dll	657	SetLayout
GDI32.dll	427	GetBoundsRect
GDI32.dll	305	ExcludeClipRect
GDI32.dll	585	PlayEnhMetaFile
GDI32.dll	237	Ellipse
GDI32.dll	56	CreateEllipticRgn
GDI32.dll	372	GdiFixUpHandle
GDI32.dll	75	CreatePen
GDI32.dll	607	Rectangle
GDI32.dll	533	GetTextCharacterExtra
GDI32.dll	677	SetTextCharacterExtra
GDI32.dll	452	GetCurrentObject
GDI32.dll	553	GetViewportOrgEx
GDI32.dll	681	SetViewportOrgEx
GDI32.dll	593	PolyPatBlt
GDI32.dll	44	CreateBrushIndirect
GDI32.dll	640	SetBoundsRect
GDI32.dll	38	CopyEnhMetaFileW
GDI32.dll	40	CopyMetaFileW
GDI32.dll	512	GetPaletteEntries
GDI32.dll	73	CreatePalette
GDI32.dll	666	SetPaletteEntries
GDI32.dll	516	GetPixel
GDI32.dll	311	ExtTextOutA
GDI32.dll	535	GetTextCharsetInfo
GDI32.dll	603	QueryFontAssocStatus
GDI32.dll	444	GetCharWidthInfo
GDI32.dll	440	GetCharWidthA
GDI32.dll	548	GetTextFaceW
GDI32.dll	433	GetCharABCWidthsA
GDI32.dll	437	GetCharABCWidthsW
GDI32.dll	642	SetBrushOrgEx
GDI32.dll	64	CreateFontIndirectW
GDI32.dll	296	EnumFontsW
GDI32.dll	547	GetTextFaceAliasW
GDI32.dll	550	GetTextMetricsW
GDI32.dll	536	GetTextColor
GDI32.dll	378	GdiGetCodePage
GDI32.dll	534	GetTextCharset
GDI32.dll	426	GetBkMode
GDI32.dll	552	GetViewportExtEx
GDI32.dll	555	GetWindowExtEx
GDI32.dll	377	GdiGetCharDimensions
GDI32.dll	402	GdiPrinterThunk
GDI32.dll	395	GdiLoadType1Fonts
GDI32.dll	328	GdiAddFontResourceW
GDI32.dll	698	TranslateCharsetInfo
GDI32.dll	624	SaveDC
GDI32.dll	575	OffsetWindowOrgEx
GDI32.dll	617	RestoreDC
GDI32.dll	312	ExtTextOutW
GDI32.dll	458	GetDIBits
GDI32.dll	53	CreateDIBSection
GDI32.dll	674	SetStretchBltMode
GDI32.dll	632	SelectPalette
GDI32.dll	604	RealizePalette
GDI32.dll	648	SetDIBits
GDI32.dll	50	CreateDCW
GDI32.dll	54	CreateDIBitmap
GDI32.dll	47	CreateCompatibleBitmap
GDI32.dll	636	SetBitmapBits
GDI32.dll	227	DeleteDC
GDI32.dll	419	GdiValidateHandle
GDI32.dll	352	GdiDllInitialize
GDI32.dll	403	GdiProcessSetup
GDI32.dll	525	GetStockObject
GDI32.dll	84	CreateSolidBrush
GDI32.dll	48	CreateCompatibleDC
GDI32.dll	338	GdiConvertBitmapV5
GDI32.dll	347	GdiCreateLocalEnhMetaFile
GDI32.dll	348	GdiCreateLocalMetaFilePict
GDI32.dll	524	GetRgnBox
GDI32.dll	34	CombineRgn
GDI32.dll	573	OffsetRgn
GDI32.dll	568	MirrorRgn
GDI32.dll	238	EnableEUDC
GDI32.dll	346	GdiConvertToDevmodeW
GDI32.dll	543	GetTextExtentPointA
GDI32.dll	545	GetTextExtentPointW
GDI32.dll	41	CreateBitmap
GDI32.dll	676	SetTextAlign
GDI32.dll	532	GetTextAlign
GDI32.dll	560	IntersectClipRect
GDI32.dll	631	SelectObject
GDI32.dll	639	SetBkMode
GDI32.dll	425	GetBkColor
GDI32.dll	509	GetObjectW
GDI32.dll	678	SetTextColor
GDI32.dll	638	SetBkColor
GDI32.dll	493	GetLayout
GDI32.dll	692	StretchDIBits
GDI32.dll	459	GetDeviceCaps
GDI32.dll	457	GetDIBColorTable
GDI32.dll	376	GdiGetBitmapBitsSize
GDI32.dll	230	DeleteObject
GDI32.dll	229	DeleteMetaFile
GDI32.dll	228	DeleteEnhMetaFile
GDI32.dll	343	GdiConvertMetaFilePict
GDI32.dll	341	GdiConvertEnhMetaFile
GDI32.dll	407	GdiReleaseDC
GDI32.dll	691	StretchBlt
GDI32.dll	508	GetObjectType
GDI32.dll	336	GdiConvertAndCheckDC
GDI32.dll	672	SetRectRgn
GDI32.dll	19	BitBlt
GDI32.dll	697	TextOutW
GDI32.dll	696	TextOutA
GDI32.dll	582	PatBlt
GDI32.dll	658	SetLayoutWidth
KERNEL32.dll	515	GetLocaleInfoW
KERNEL32.dll	1184	SetUnhandledExceptionFilter
KERNEL32.dll	1231	UnhandledExceptionFilter
KERNEL32.dll	1212	TerminateProcess
KERNEL32.dll	631	GetSystemTimeAsFileTime
KERNEL32.dll	828	LoadLibraryExA
KERNEL32.dll	744	InterlockedCompareExchange
KERNEL32.dll	205	DelayLoadFailureHook
KERNEL32.dll	688	GlobalAddAtomA
KERNEL32.dll	530	GetModuleHandleA
KERNEL32.dll	528	GetModuleFileNameA
KERNEL32.dll	693	GlobalFindAtomA
KERNEL32.dll	1353	lstrlenA
KERNEL32.dll	657	GetTickCount
KERNEL32.dll	932	QueryPerformanceFrequency
KERNEL32.dll	931	QueryPerformanceCounter
KERNEL32.dll	812	LCMapStringW
KERNEL32.dll	140	CreateFileMappingW
KERNEL32.dll	853	MapViewOfFile
KERNEL32.dll	493	GetFileSize
KERNEL32.dll	1234	UnmapViewOfFile
KERNEL32.dll	1289	WerpNotifyLoadStringResource
KERNEL32.dll	618	GetSystemDefaultLangID
KERNEL32.dll	991	RegQueryInfoKeyW
KERNEL32.dll	974	RegEnumValueW
KERNEL32.dll	988	RegOpenKeyExW
KERNEL32.dll	993	RegQueryValueExW
KERNEL32.dll	674	GetVersionExW
KERNEL32.dll	765	IsDBCSLeadByte
KERNEL32.dll	1291	WerpNotifyUseStringResource
KERNEL32.dll	448	GetCurrentProcessId
KERNEL32.dll	917	ProcessIdToSessionId
KERNEL32.dll	868	MulDiv
KERNEL32.dll	650	GetThreadLocale
KERNEL32.dll	312	FindFirstFileW
KERNEL32.dll	324	FindNextFileW
KERNEL32.dll	301	FindClose
KERNEL32.dll	518	GetLogicalDrives
KERNEL32.dll	1354	lstrlenW
KERNEL32.dll	1097	SetCurrentDirectoryW
KERNEL32.dll	446	GetCurrentDirectoryW
KERNEL32.dll	105	ConvertDefaultLocale
KERNEL32.dll	779	IsValidLocale
KERNEL32.dll	365	GetAtomNameW
KERNEL32.dll	364	GetAtomNameA
KERNEL32.dll	4	AddAtomW
KERNEL32.dll	3	AddAtomA
KERNEL32.dll	634	GetSystemWindowsDirectoryW
KERNEL32.dll	167	CreateProcessW
KERNEL32.dll	256	EnumResourceNamesExW
KERNEL32.dll	1125	SetFileTime
KERNEL32.dll	956	ReadFile
KERNEL32.dll	82	CloseHandle
KERNEL32.dll	333	FindResourceW
KERNEL32.dll	100	CompareStringW
KERNEL32.dll	369	GetCPInfo
KERNEL32.dll	612	GetStringTypeA
KERNEL32.dll	615	GetStringTypeW
KERNEL32.dll	1198	Sleep
KERNEL32.dll	347	FoldStringW
KERNEL32.dll	700	GlobalHandle
KERNEL32.dll	180	CreateThread
KERNEL32.dll	479	GetExitCodeThread
KERNEL32.dll	281	ExitThread
KERNEL32.dll	451	GetCurrentThread
KERNEL32.dll	447	GetCurrentProcess
KERNEL32.dll	689	GlobalAddAtomW
KERNEL32.dll	829	LoadLibraryExW
KERNEL32.dll	284	ExpandEnvironmentStringsW
KERNEL32.dll	1049	SearchPathW
KERNEL32.dll	622	GetSystemDirectoryW
KERNEL32.dll	766	IsDBCSLeadByteEx
KERNEL32.dll	221	DisableThreadLibraryCalls
KERNEL32.dll	331	FindResourceExA
KERNEL32.dll	332	FindResourceExW
KERNEL32.dll	833	LoadStringBaseExW
KERNEL32.dll	832	LoadResource
KERNEL32.dll	1197	SizeofResource
KERNEL32.dll	1008	RegisterWaitForInputIdle
KERNEL32.dll	920	QueryActCtxSettingsW
KERNEL32.dll	533	GetModuleHandleW
KERNEL32.dll	452	GetCurrentThreadId
KERNEL32.dll	826	LoadAppInitDlls
KERNEL32.dll	844	LocalSize
KERNEL32.dll	845	LocalUnlock
KERNEL32.dll	841	LocalLock
KERNEL32.dll	842	LocalReAlloc
KERNEL32.dll	359	GetACP
KERNEL32.dll	750	InterlockedIncrement
KERNEL32.dll	575	GetPrivateProfileStringW
KERNEL32.dll	1000	RegSetValueExW
KERNEL32.dll	961	RegCloseKey
KERNEL32.dll	963	RegCreateKeyExW
KERNEL32.dll	965	RegDeleteKeyExW
KERNEL32.dll	665	GetUserDefaultLCID
KERNEL32.dll	708	GlobalUnlock
KERNEL32.dll	701	GlobalLock
KERNEL32.dll	705	GlobalSize
KERNEL32.dll	839	LocalFree
KERNEL32.dll	692	GlobalDeleteAtom
KERNEL32.dll	835	LocalAlloc
KERNEL32.dll	206	DeleteAtom
KERNEL32.dll	353	FreeLibrary
KERNEL32.dll	578	GetProcAddress
KERNEL32.dll	830	LoadLibraryW
KERNEL32.dll	747	InterlockedExchange
KERNEL32.dll	698	GlobalGetAtomNameA
KERNEL32.dll	699	GlobalGetAtomNameW
KERNEL32.dll	529	GetModuleFileNameW
KERNEL32.dll	697	GlobalFree
KERNEL32.dll	746	InterlockedDecrement
KERNEL32.dll	696	GlobalFlags
KERNEL32.dll	1293	WideCharToMultiByte
KERNEL32.dll	511	GetLastError
KERNEL32.dll	564	GetOEMCP
KERNEL32.dll	704	GlobalReAlloc
KERNEL32.dll	869	MultiByteToWideChar
KERNEL32.dll	690	GlobalAlloc
KERNEL32.dll	1268	WaitForMultipleObjectsEx
KERNEL32.dll	1109	SetEvent
KERNEL32.dll	143	CreateFileW
KERNEL32.dll	1345	lstrcmpiW
KERNEL32.dll	1319	WritePrivateProfileStringW
KERNEL32.dll	694	GlobalFindAtomW
KERNEL32.dll	1134	SetLastError
ADVAPI32.dll	81	CheckTokenMembership

ord	entry_va	function_name
1500	0x789cb
1501	0x78091
1502	0x2d6c0	ActivateKeyboardLayout
1503	0x77db7	AddClipboardFormatListener
1504	0x2c6c6	AdjustWindowRect
1505	0x251e2	AdjustWindowRectEx
1506	0x793bc	AlignRects
1507	0x59e68	AllowForegroundActivation
1508	0x26697	AllowSetForegroundWindow
1509	0x2b531	AnimateWindow
1510	0x7548c	AnyPopup
1511	0x767fb	AppendMenuA
1512	0x5c099	AppendMenuW
1513	0x2c0ae	ArrangeIconicWindows
1514	0x3f188	AttachThreadInput
1515	0x263b5	BeginDeferWindowPos
1516	0x21361	BeginPaint
1517	0x77dd7	BlockInput
1518	0x27b3b	BringWindowToTop
1519	0x768a2	BroadcastSystemMessage
1520	0x768a2	BroadcastSystemMessageA
1521	0x7687b	BroadcastSystemMessageExA
1522	0x5c119	BroadcastSystemMessageExW
1523	0x5c140	BroadcastSystemMessageW
1524	0x72ff5	BuildReasonArray
1525	0x233b1	CalcMenuBar
1526	0x77e17	CalculatePopupWindowPosition
1527	0x76e4a	CallMsgFilter
1528	0x76e4a	CallMsgFilterA
1529	0x3d1e8	CallMsgFilterW
1530	0x26285	CallNextHookEx
1531	0x2792f	CallWindowProcA
1532	0x20d32	CallWindowProcW
1533	0x60a7f	CancelShutdown
1534	0x59979	CascadeChildWindows
1535	0x6cf08	CascadeWindows
1536	0x2c17b	ChangeClipboardChain
1537	0x7706c	ChangeDisplaySettingsA
1538	0x76da0	ChangeDisplaySettingsExA
1539	0x607d7	ChangeDisplaySettingsExW
1540	0x608b5	ChangeDisplaySettingsW
1541	0x6d2e9	ChangeMenuA
1542	0x6d244	ChangeMenuW
1543	0x1b6d2	ChangeWindowMessageFilter
1544	0x1f285	ChangeWindowMessageFilterEx
1545	0x23e75	CharLowerA
1546	0x24f38	CharLowerBuffA
1547	0x1760b	CharLowerBuffW
1548	0x17647	CharLowerW
1549	0x17a1b	CharNextA
1550	0x73355
1551	0x733e1
1552	0x733a9
1553	0x733ff
1554	0x73454
1555	0x7348f
1556	0x734c5
1557	0x74da0	CharNextExA
1558	0x18151	CharNextW
1559	0x23ef2	CharPrevA
1560	0x74dd7	CharPrevExA
1561	0x1768c	CharPrevW
1562	0x24fee	CharToOemA
1563	0x2b1b0	CharToOemBuffA
1564	0x71a7d	CharToOemBuffW
1565	0x71a26	CharToOemW
1566	0x1fdca	CharUpperA
1567	0x1fe47	CharUpperBuffA
1568	0x1fc5d	CharUpperBuffW
1569	0x1f350	CharUpperW
1570	0x77e97	CheckDesktopByThreadId
1571	0x3be9a	CheckDlgButton
1572	0x2a88c	CheckMenuItem
1573	0x6d3eb	CheckMenuRadioItem
1574	0x3bc9d	CheckRadioButton
1575	0x77eb7	CheckWindowThreadDesktop
1576	0x58cf0	ChildWindowFromPoint
1577	0x2cd46	ChildWindowFromPointEx
1578	0x54d0d	CliImmSetHotKey
1579	0x19da3	ClientThreadSetup
1580	0x22606	ClientToScreen
1581	0x31353	ClipCursor
1582	0x28e8d	CloseClipboard
1583	0x200fa	CloseDesktop
1584	0x589cf	CloseGestureInfoHandle
1585	0x5d2da	CloseTouchInputHandle
1586	0x5999a	CloseWindow
1587	0x200b9	CloseWindowStation
1588	0x60b35	ConsoleControl
1589	0x786cb	ControlMagnification
1590	0x38960	CopyAcceleratorTableA
1591	0x254c8	CopyAcceleratorTableW
1592	0x271e5	CopyIcon
1593	0x24a09	CopyImage
1594	0x22534	CopyRect
1595	0x2c486	CountClipboardFormats
1596	0x2d0f4	CreateAcceleratorTableA
1597	0x24e04	CreateAcceleratorTableW
1598	0x3f4d2	CreateCaret
1599	0x5ce88	CreateCursor
1600	0x59783	CreateDesktopA
1601	0x59691	CreateDesktopExA
1602	0x597ac	CreateDesktopExW
1603	0x597fc	CreateDesktopW
1604	0x2b029	CreateDialogIndirectParamA
1605	0x410a0	CreateDialogIndirectParamAorW
1606	0x2c63e	CreateDialogIndirectParamW
1607	0x35246	CreateDialogParamA
1608	0x410dc	CreateDialogParamW
1609	0x2da0a	CreateIcon
1610	0x5d15f	CreateIconFromResource
1611	0x2725d	CreateIconFromResourceEx
1612	0x27018	CreateIconIndirect
1613	0x38f33	CreateMDIWindowA
1614	0x2c92e	CreateMDIWindowW
1615	0x257a4	CreateMenu
1616	0x3d359	CreatePopupMenu
1617	0x75522	CreateSystemThreads
1618	0x1d22e	CreateWindowExA
1619	0x18a29	CreateWindowExW
1620	0x5bed7	CreateWindowStationA
1621	0x5bf1e	CreateWindowStationW
1622	0x60aca	CsrBroadcastSystemMessageExW
1623	0x5c563	CtxInitUser32
1624	0x7668c	DdeAbandonTransaction
1625	0x68282	DdeAccessData
1626	0x685e5	DdeAddData
1627	0x75f66	DdeClientTransaction
1628	0x68c45	DdeCmpStringHandles
1629	0x5eb7f	DdeConnect
1630	0x5ee95	DdeConnectList
1631	0x2f938	DdeCreateDataHandle
1632	0x2d253	DdeCreateStringHandleA
1633	0x2e849	DdeCreateStringHandleW
1634	0x5ed7d	DdeDisconnect
1635	0x5edf4	DdeDisconnectList
1636	0x57c08	DdeEnableCallback
1637	0x2f9d2	DdeFreeDataHandle
1638	0x2e10d	DdeFreeStringHandle
1639	0x2fbce	DdeGetData
1640	0x61b4c	DdeGetLastError
1641	0x5e5dc	DdeGetQualityOfService
1642	0x61b8d	DdeImpersonateClient
1643	0x2d213	DdeInitializeA
1644	0x2e821	DdeInitializeW
1645	0x68d03	DdeKeepStringHandle
1646	0x2df51	DdeNameService
1647	0x75c57	DdePostAdvise
1648	0x764ad	DdeQueryConvInfo
1649	0x5e71b	DdeQueryNextServer
1650	0x68d90	DdeQueryStringA
1651	0x30a7e	DdeQueryStringW
1652	0x5ec2a	DdeReconnect
1653	0x5e5d1	DdeSetQualityOfService
1654	0x76631	DdeSetUserHandle
1655	0x682f4	DdeUnaccessData
1656	0x2e1b9	DdeUninitialize
1657	0x15f5a	DefDlgProcA
1658	0x15f75	DefDlgProcW
1659	0x27fbb	DefFrameProcA
1660	0x285c1	DefFrameProcW
1661	0x2810c	DefMDIChildProcA
1662	0x286b4	DefMDIChildProcW
1663	0x5c7d4	DefRawInputProc
1664	0x15f90	DefWindowProcA
1665	0x15fab	DefWindowProcW
1666	0x2640f	DeferWindowPos
1667	0x26d2a	DeleteMenu
1668	0x3da4c	DeregisterShellHookWindow
1669	0x23db6	DestroyAcceleratorTable
1670	0x3f4c5	DestroyCaret
1671	0x249b2	DestroyCursor
1672	0x249b2	DestroyIcon
1673	0x23e26	DestroyMenu
1674	0x729f9	DestroyReasons
1675	0x19a55	DestroyWindow
1676	0x7a82e	DeviceEventWorker
1677	0x5ce64	DialogBoxIndirectParamA
1678	0x3ce54	DialogBoxIndirectParamAorW
1679	0x3cbf3	DialogBoxIndirectParamW
1680	0x5cb0c	DialogBoxParamA
1681	0x3cfca	DialogBoxParamW
1682	0x59e75	DisableProcessWindowsGhosting
1683	0x17bbb	DispatchMessageA
1684	0x1787b	DispatchMessageW
1685	0x77a5c	DisplayConfigGetDeviceInfo
1686	0x77a79	DisplayConfigSetDeviceInfo
1687	0x60da3	DisplayExitWindowsWarnings
1688	0x6b27d	DlgDirListA
1689	0x5e184	DlgDirListComboBoxA
1690	0x5e212	DlgDirListComboBoxW
1691	0x6b30c	DlgDirListW
1692	0x5e24a	DlgDirSelectComboBoxExA
1693	0x5e11f	DlgDirSelectComboBoxExW
1694	0x6b4d5	DlgDirSelectExA
1695	0x6b53b	DlgDirSelectExW
1696	0x77f57	DoSoundConnect
1697	0x77f75	DoSoundDisconnect
1698	0x77f93	DragDetect
1699	0x77fb3	DragObject
1700	0x77fd3	DrawAnimatedRects
1701	0x7178e	DrawCaption
1702	0x76f28	DrawCaptionTempA
1703	0x60817	DrawCaptionTempW
1704	0x25823	DrawEdge
1705	0x289c2	DrawFocusRect
1706	0x7969e	DrawFrame
1707	0x312a1	DrawFrameControl
1708	0x28deb	DrawIcon
1709	0x24879	DrawIconEx
1710	0x26ed0	DrawMenuBar
1711	0x6d3b5	DrawMenuBarTemp
1712	0x6da3e	DrawStateA
1713	0x3fc44	DrawStateW
1714	0x2aea1	DrawTextA
1715	0x2aed8	DrawTextExA
1716	0x2149e	DrawTextExW
1717	0x225cf	DrawTextW
1718	0x732df	DwmGetDxSharedSurface
1719	0x78053	DwmStartRedirection
1720	0x78073	DwmStopRedirection
1721	0x3175a	EditWndProc
1722	0x77cb9	EmptyClipboard
1723	0x26f50	EnableMenuItem
1724	0x28d3a	EnableScrollBar
1725	0x22da4	EnableWindow
1726	0x263d7	EndDeferWindowPos
1727	0x3b99c	EndDialog
1728	0x2d6e0	EndMenu
1729	0x21341	EndPaint
1730	0x7a7ee	EndTask
1731	0x7239c	EnterReaderModeHelper
1732	0x20e94	EnumChildWindows
1733	0x2c449	EnumClipboardFormats
1734	0x25f53	EnumDesktopWindows
1735	0x201ce	EnumDesktopsA
1736	0x586d1	EnumDesktopsW
1737	0x24572	EnumDisplayDevicesA
1738	0x3e567	EnumDisplayDevicesW
1739	0x2451a	EnumDisplayMonitors
1740	0x3e27c	EnumDisplaySettingsA
1741	0x3e2a8	EnumDisplaySettingsExA
1742	0x3e474	EnumDisplaySettingsExW
1743	0x3e446	EnumDisplaySettingsW
1744	0x5863e	EnumPropsA
1745	0x58678	EnumPropsExA
1746	0x58696	EnumPropsExW
1747	0x5865b	EnumPropsW
1748	0x23961	EnumThreadWindows
1749	0x202d6	EnumWindowStationsA
1750	0x586b4	EnumWindowStationsW
1751	0x1d1cf	EnumWindows
1752	0x20988	EqualRect
1753	0x28f47	ExcludeUpdateRgn
1754	0x61497	ExitWindowsEx
1755	0x20eb6	FillRect
1756	0x1ffe6	FindWindowA
1757	0x200d9	FindWindowExA
1758	0x3f588	FindWindowExW
1759	0x198fd	FindWindowW
1760	0x2bfd7	FlashWindow
1761	0x2c016	FlashWindowEx
1762	0x2899d	FrameRect
1763	0x620f1	FreeDDElParam
1764	0x780d1	FrostCrashedWindow
1765	0x3f5c7	GetActiveWindow
1766	0x77048	GetAltTabInfo
1767	0x77048	GetAltTabInfoA
1768	0x60891	GetAltTabInfoW
1769	0x19785	GetAncestor
1770	0x16be4	GetAppCompatFlags2
1771	0x261ec	GetAppCompatFlags
1772	0x3eb96	GetAsyncKeyState
1773	0x22aac	GetCapture
1774	0x28e4c	GetCaretBlinkTime
1775	0x3eef6	GetCaretPos
1776	0x26ade	GetClassInfoA
1777	0x2695f	GetClassInfoExA
1778	0x1b238	GetClassInfoExW
1779	0x1b422	GetClassInfoW
1780	0x286f9	GetClassLongA
1781	0x183a8	GetClassLongW
1782	0x279df	GetClassNameA
1783	0x182a9	GetClassNameW
1784	0x2ea55	GetClassWord
1785	0x20c62	GetClientRect
1786	0x780f1	GetClipCursor
1787	0x59f1d	GetClipboardData
1788	0x268ef	GetClipboardFormatNameA
1789	0x277fa	GetClipboardFormatNameW
1790	0x2e360	GetClipboardOwner
1791	0x28696	GetClipboardSequenceNumber
1792	0x78111	GetClipboardViewer
1793	0x40b60	GetComboBoxInfo
1794	0x3f6e0	GetCursor
1795	0x3d0ab	GetCursorFrameInfo
1796	0x7812f	GetCursorInfo
1797	0x21218	GetCursorPos
1798	0x172c4	GetDC
1799	0x23391	GetDCEx
1800	0x20a19	GetDesktopWindow
1801	0x38941	GetDialogBaseUnits
1802	0x779e4	GetDisplayConfigBufferSizes
1803	0x213b6	GetDlgCtrlID
1804	0x3f1ba	GetDlgItem
1805	0x3bd10	GetDlgItemInt
1806	0x76b36	GetDlgItemTextA
1807	0x3bc18	GetDlgItemTextW
1808	0x24216	GetDoubleClickTime
1809	0x20dee	GetFocus
1810	0x22320	GetForegroundWindow
1811	0x181d3	GetGUIThreadInfo
1812	0x7816f	GetGestureConfig
1813	0x589bb	GetGestureExtraArgs
1814	0x58952	GetGestureInfo
1815	0x781cf	GetGuiResources
1816	0x249ea	GetIconInfo
1817	0x5cc31	GetIconInfoExA
1818	0x5cb78	GetIconInfoExW
1819	0x599e5	GetInputDesktop
1820	0x7820f	GetInputLocaleInfo
1821	0x28639	GetInputState
1822	0x7822f	GetInternalWindowPos
1823	0x59eb8	GetKBCodePage
1824	0x76b6f	GetKeyNameTextA
1825	0x607a1	GetKeyNameTextW
1826	0x2291f	GetKeyState
1827	0x18d26	GetKeyboardLayout
1828	0x22e69	GetKeyboardLayoutList
1829	0x76bd9	GetKeyboardLayoutNameA
1830	0x607b1	GetKeyboardLayoutNameW
1831	0x3ec68	GetKeyboardState
1832	0x59ac4	GetKeyboardType
1833	0x3ca93	GetLastActivePopup
1834	0x2b382	GetLastInputInfo
1835	0x7828f	GetLayeredWindowAttributes
1836	0x782af	GetListBoxInfo
1837	0x6bfcb	GetMagnificationDesktopColorEffect
1838	0x6c064	GetMagnificationDesktopMagnification
1839	0x786eb	GetMagnificationLensCtxInformation
1840	0x25041	GetMenu
1841	0x25764	GetMenuBarInfo
1842	0x6d544	GetMenuCheckMarkDimensions
1843	0x6d38e	GetMenuContextHelpId
1844	0x6d1f0	GetMenuDefaultItem
1845	0x3c151	GetMenuInfo
1846	0x2563b	GetMenuItemCount
1847	0x2a725	GetMenuItemID
1848	0x273a1	GetMenuItemInfoA
1849	0x25b20	GetMenuItemInfoW
1850	0x782ef	GetMenuItemRect
1851	0x2a7c1	GetMenuState
1852	0x7676e	GetMenuStringA
1853	0x274d4	GetMenuStringW
1854	0x17bd3	GetMessageA
1855	0x3ed76	GetMessageExtraInfo
1856	0x22a8d	GetMessagePos
1857	0x3f600	GetMessageTime
1858	0x178e2	GetMessageW
1859	0x24413	GetMonitorInfoA
1860	0x23000	GetMonitorInfoW
1861	0x7830f	GetMouseMovePointsEx
1862	0x623a7	GetNextDlgGroupItem
1863	0x2db73	GetNextDlgTabItem
1864	0x2c468	GetOpenClipboardWindow
1865	0x20f68	GetParent
1866	0x59edb	GetPhysicalCursorPos
1867	0x7832f	GetPriorityClipboardFormat
1868	0x59e38	GetProcessDefaultLayout
1869	0x19eea	GetProcessWindowStation
1870	0x59bd0	GetProgmanWindow
1871	0x27b5a	GetPropA
1872	0x17227	GetPropW
1873	0x23924	GetQueueStatus
1874	0x6816c	GetRawInputBuffer
1875	0x7836f	GetRawInputData
1876	0x7690b	GetRawInputDeviceInfoA
1877	0x5c1a9	GetRawInputDeviceInfoW
1878	0x783af	GetRawInputDeviceList
1879	0x731c1	GetReasonTitleFromReasonCode
1880	0x783cf	GetRegisteredRawInputDevices
1881	0x23ff8	GetScrollBarInfo
1882	0x24018	GetScrollInfo
1883	0x24234	GetScrollPos
1884	0x290c4	GetScrollRange
1885	0x59ec3	GetSendMessageReceiver
1886	0x3e8a8	GetShellWindow
1887	0x26d73	GetSubMenu
1888	0x16c3c	GetSysColor
1889	0x235a4	GetSysColorBrush
1890	0x26ea6	GetSystemMenu
1891	0x17d2f	GetSystemMetrics
1892	0x618e8	GetTabbedTextExtentA
1893	0x618be	GetTabbedTextExtentW
1894	0x59c3e	GetTaskmanWindow
1895	0x16c63	GetThreadDesktop
1896	0x21dda	GetTitleBarInfo
1897	0x783ef	GetTopLevelWindow
1898	0x27887	GetTopWindow
1899	0x5d580	GetTouchInputInfo
1900	0x3d41f	GetUpdateRect
1901	0x26222	GetUpdateRgn
1902	0x7842f	GetUpdatedClipboardFormats
1903	0x3d396	GetUserObjectInformationA
1904	0x18068	GetUserObjectInformationW
1905	0x594b5	GetUserObjectSecurity
1906	0x5951b	GetWinStationInfo
1907	0x1926e	GetWindow
1908	0x1f462	GetWindowCompositionAttribute
1909	0x7846f	GetWindowCompositionInfo
1910	0x59cac	GetWindowContextHelpId
1911	0x18048	GetWindowDC
1912	0x7848f	GetWindowDisplayAffinity
1913	0x21bbf	GetWindowInfo
1914	0x1d156	GetWindowLongA
1915	0x16ffe	GetWindowLongW
1916	0x784af	GetWindowMinimizeRect
1917	0x768c8	GetWindowModuleFileName
1918	0x768c8	GetWindowModuleFileNameA
1919	0x5c166	GetWindowModuleFileNameW
1920	0x22aca	GetWindowPlacement
1921	0x17f34	GetWindowRect
1922	0x255a2	GetWindowRgn
1923	0x1f41d	GetWindowRgnBox
1924	0x784cf	GetWindowRgnEx
1925	0x20029	GetWindowTextA
1926	0x2b29a	GetWindowTextLengthA
1927	0x3d1a9	GetWindowTextLengthW
1928	0x2205e	GetWindowTextW
1929	0x191b4	GetWindowThreadProcessId
1930	0x2913c	GetWindowWord
1931	0x784ef	GhostWindowFromHungWindow
1932	0x59455	GrayStringA
1933	0x59485	GrayStringW
1934	0x22dc6	HideCaret
1935	0x7850f	HiliteMenuItem
1936	0x7852f	HungWindowFromGhostWindow
1937	0x77331	IMPGetIMEA
1938	0x77320	IMPGetIMEW
1939	0x77353	IMPQueryIMEA
1940	0x77342	IMPQueryIMEW
1941	0x77375	IMPSetIMEA
1942	0x77364	IMPSetIMEW
1943	0x7858f	ImpersonateDdeClientWindow
1944	0x23e46	InSendMessage
1945	0x238ee	InSendMessageEx
1946	0x23309	InflateRect
1947	0x1bea5	InitializeLpkHooks
1948	0x767b8	InsertMenuA
1949	0x2d340	InsertMenuItemA
1950	0x25f1a	InsertMenuItemW
1951	0x2d460	InsertMenuW
1952	0x70150	InternalGetWindowIcon
1953	0x21e28	InternalGetWindowText
1954	0x20903	IntersectRect
1955	0x21381	InvalidateRect
1956	0x26604	InvalidateRgn
1957	0x7953d	InvertRect
1958	0x38fa0	IsCharAlphaA
1959	0x26867	IsCharAlphaNumericA
1960	0x27792	IsCharAlphaNumericW
1961	0x24b15	IsCharAlphaW
1962	0x74e30	IsCharLowerA
1963	0x3c02b	IsCharLowerW
1964	0x74e97	IsCharUpperA
1965	0x3c05d	IsCharUpperW
1966	0x221b1	IsChild
1967	0x28676	IsClipboardFormatAvailable
1968	0x350ed	IsDialogMessage
1969	0x350ed	IsDialogMessageA
1970	0x3c701	IsDialogMessageW
1971	0x3c0a6	IsDlgButtonChecked
1972	0x75587	IsGUIThread
1973	0x75504	IsHungAppWindow
1974	0x232a9	IsIconic
1975	0x25cb1	IsMenu
1976	0x181a6	IsProcessDPIAware
1977	0x208d8	IsRectEmpty
1978	0x72a49	IsSETEnabled
1979	0x18d65	IsServerSideWindow
1980	0x171de	IsThreadDesktopComposited
1981	0x24af5	IsTopLevelWindow
1982	0x7860f	IsTouchWindow
1983	0x2773a	IsWinEventHookInstalled
1984	0x17136	IsWindow
1985	0x22c1b	IsWindowEnabled
1986	0x20da5	IsWindowInDestroy
1987	0x21dfa	IsWindowRedirectedForPrint
1988	0x3f5d4	IsWindowUnicode
1989	0x2112d	IsWindowVisible
1990	0x5c7ab	IsWow64Message
1991	0x23332	IsZoomed
1992	0x179db	KillTimer
1993	0x284cb	LoadAcceleratorsA
1994	0x24dd6	LoadAcceleratorsW
1995	0x27cc2	LoadBitmapA
1996	0x28b72	LoadBitmapW
1997	0x1dad5	LoadCursorA
1998	0x54f24	LoadCursorFromFileA
1999	0x54f05	LoadCursorFromFileW
2000	0x59f10
2001	0x6c0ca
2002	0x6c11f
2003	0x188f7	LoadCursorW
2004	0x1dafb	LoadIconA
2005	0x789eb
2006	0x1b142	LoadIconW
2007	0x28455	LoadImageA
2008	0x1fbd1	LoadImageW
2009	0x5bb35	LoadKeyboardLayoutA
2010	0x5baf2	LoadKeyboardLayoutEx
2011	0x5bb17	LoadKeyboardLayoutW
2012	0x59b5a	LoadLocalFonts
2013	0x34eef	LoadMenuA
2014	0x24bbc	LoadMenuIndirectA
2015	0x24bbc	LoadMenuIndirectW
2016	0x24391	LoadMenuW
2017	0x59b44	LoadRemoteFonts
2018	0x1db21	LoadStringA
2019	0x18eb9	LoadStringW
2020	0x59d30	LockSetForegroundWindow
2021	0x7864f	LockWindowStation
2022	0x77d37	LockWindowUpdate
2023	0x7866f	LockWorkStation
2024	0x407c8	LogicalToPhysicalPoint
2025	0x5cefd	LookupIconIdFromDirectory
2026	0x2efb4	LookupIconIdFromDirectoryEx
2027	0x1d0c4	MBToWCSEx
2028	0x6df79	MB_GetString
2029	0x2dbc8	MapDialogRect
2030	0x76c1a	MapVirtualKeyA
2031	0x76c69	MapVirtualKeyExA
2032	0x2936c	MapVirtualKeyExW
2033	0x41459	MapVirtualKeyW
2034	0x18c40	MapWindowPoints
2035	0x7874b	MenuItemFromPoint
2036	0x5c72c	MenuWindowProcA
2037	0x5c6e8	MenuWindowProcW
2038	0x2c036	MessageBeep
2039	0x6fd1e	MessageBoxA
2040	0x6fcd6	MessageBoxExA
2041	0x6fcfa	MessageBoxExW
2042	0x6fbd1	MessageBoxIndirectA
2043	0x6fc9d	MessageBoxIndirectW
2044	0x6fb28	MessageBoxTimeoutA
2045	0x6facd	MessageBoxTimeoutW
2046	0x6fd3f	MessageBoxW
2047	0x76838	ModifyMenuA
2048	0x5c0d6	ModifyMenuW
2049	0x25281	MonitorFromPoint
2050	0x3e7a0	MonitorFromRect
2051	0x23150	MonitorFromWindow
2052	0x23698	MoveWindow
2053	0x20b4a	MsgWaitForMultipleObjects
2054	0x20894	MsgWaitForMultipleObjectsEx
2055	0x59b69	NotifyOverlayWindow
2056	0x22592	NotifyWinEvent
2057	0x71b48	OemKeyScan
2058	0x7199f	OemToCharA
2059	0x719de	OemToCharBuffA
2060	0x71b0a	OemToCharBuffW
2061	0x71ac2	OemToCharW
2062	0x20bbd	OffsetRect
2063	0x28ecb	OpenClipboard
2064	0x2011a	OpenDesktopA
2065	0x59825	OpenDesktopW
2066	0x59b84	OpenIcon
2067	0x787cb	OpenInputDesktop
2068	0x787eb	OpenThreadDesktop
2069	0x2045a	OpenWindowStationA
2070	0x5b043	OpenWindowStationW
2071	0x305a0	PackDDElParam
2072	0x77d77	PaintDesktop
2073	0x25784	PaintMenuBar
2074	0x7880b	PaintMonitor
2075	0x25f74	PeekMessageA
2076	0x205ba	PeekMessageW
2077	0x40b40	PhysicalToLogicalPoint
2078	0x23baa	PostMessageA
2079	0x212a5	PostMessageW
2080	0x19abb	PostQuitMessage
2081	0x23c61	PostThreadMessageA
2082	0x18bff	PostThreadMessageW
2083	0x7882b	PrintWindow
2084	0x6811b	PrivateExtractIconExA
2085	0x68028	PrivateExtractIconExW
2086	0x67fce	PrivateExtractIconsA
2087	0x2ede0	PrivateExtractIconsW
2088	0x5ce20	PrivateRegisterICSProc
2089	0x211e9	PtInRect
2090	0x77a30	QueryDisplayConfig
2091	0x7886b	QuerySendMessage
2092	0x7888b	RealChildWindowFromPoint
2093	0x76fc6	RealGetWindowClass
2094	0x76fc6	RealGetWindowClassA
2095	0x197a5	RealGetWindowClassW
2096	0x7241d	ReasonCodeNeedsBugID
2097	0x72406	ReasonCodeNeedsComment
2098	0x61120	RecordShutdownReason
2099	0x2140b	RedrawWindow
2100	0x2434b	RegisterClassA
2101	0x1db98	RegisterClassExA
2102	0x1b17d	RegisterClassExW
2103	0x18a65	RegisterClassW
2104	0x20afa	RegisterClipboardFormatA
2105	0x19ebd	RegisterClipboardFormatW
2106	0x3de26	RegisterDeviceNotificationA
2107	0x3dbf4	RegisterDeviceNotificationW
2108	0x788cb	RegisterErrorReportingDialog
2109	0x59e9d	RegisterFrostWindow
2110	0x59e82	RegisterGhostWindow
2111	0x1efc9	RegisterHotKey
2112	0x5c481	RegisterLogonProcess
2113	0x6ffd7	RegisterMessagePumpHook
2114	0x3dd9f	RegisterPowerSettingNotification
2115	0x788eb	RegisterRawInputDevices
2116	0x7890b	RegisterServicesProcess
2117	0x7892b	RegisterSessionPort
2118	0x3df20	RegisterShellHookWindow
2119	0x59cdf	RegisterSystemThread
2120	0x7894b	RegisterTasklist
2121	0x70e7c	RegisterTouchWindow
2122	0x6ff4e	RegisterUserApiHook
2123	0x20afa	RegisterWindowMessageA
2124	0x19ebd	RegisterWindowMessageW
2125	0x3ed49	ReleaseCapture
2126	0x17446	ReleaseDC
2127	0x7898b	RemoveClipboardFormatListener
2128	0x27381	RemoveMenu
2129	0x28284	RemovePropA
2130	0x18dbd	RemovePropW
2131	0x27807	ReplyMessage
2132	0x789ab	ResolveDesktopForWOW
2133	0x3054d	ReuseDDElParam
2134	0x2227d	ScreenToClient
2135	0x6c9e8	ScrollChildren
2136	0x5a2ee	ScrollDC
2137	0x29320	ScrollWindow
2138	0x3d56b	ScrollWindowEx
2139	0x3c112	SendDlgItemMessageA
2140	0x3d0f5	SendDlgItemMessageW
2141	0x7730f	SendIMEMessageExA
2142	0x772fe	SendIMEMessageExW
2143	0x3ff4a	SendInput
2144	0x2612e	SendMessageA
2145	0x76cfc	SendMessageCallbackA
2146	0x276e0	SendMessageCallbackW
2147	0x2781f	SendMessageTimeoutA
2148	0x197d2	SendMessageTimeoutW
2149	0x19679	SendMessageW
2150	0x76d5d	SendNotifyMessageA
2151	0x27668	SendNotifyMessageW
2152	0x23208	SetActiveWindow
2153	0x3ed56	SetCapture
2154	0x27caa	SetCaretBlinkTime
2155	0x3f4aa	SetCaretPos
2156	0x2d5f9	SetClassLongA
2157	0x25483	SetClassLongW
2158	0x78a0b	SetClassWord
2159	0x58e57	SetClipboardData
2160	0x2c4b6	SetClipboardViewer
2161	0x241f6	SetCursor
2162	0x78a2b	SetCursorContents
2163	0x59cfd	SetCursorPos
2164	0x59e30	SetDebugErrorLevel
2165	0x58fe9	SetDeskWallpaper
2166	0x77a07	SetDisplayConfig
2167	0x3beca	SetDlgItemInt
2168	0x2c4d6	SetDlgItemTextA
2169	0x3cfa0	SetDlgItemTextW
2170	0x59d18	SetDoubleClickTime
2171	0x22175	SetFocus
2172	0x3f170	SetForegroundWindow
2173	0x78a6b	SetGestureConfig
2174	0x78aab	SetInternalWindowPos
2175	0x414b2	SetKeyboardState
2176	0x71c92	SetLastErrorEx
2177	0x3ec88	SetLayeredWindowAttributes
2178	0x6bf77	SetMagnificationDesktopColorEffect
2179	0x6c02c	SetMagnificationDesktopMagnification
2180	0x7870b	SetMagnificationLensCtxInformation
2181	0x22bb9	SetMenu
2182	0x78acb	SetMenuContextHelpId
2183	0x3c37d	SetMenuDefaultItem
2184	0x6d222	SetMenuInfo
2185	0x3c33a	SetMenuItemBitmaps
2186	0x2d307	SetMenuItemInfoA
2187	0x3d320	SetMenuItemInfoW
2188	0x5c793	SetMessageExtraInfo
2189	0x2c8e7	SetMessageQueue
2190	0x78b0b	SetMirrorRendering
2191	0x22d64	SetParent
2192	0x59ef5	SetPhysicalCursorPos
2193	0x1fcb8	SetProcessDPIAware
2194	0x59e50	SetProcessDefaultLayout
2195	0x202b6	SetProcessWindowStation
2196	0x59c26	SetProgmanWindow
2197	0x2822c	SetPropA
2198	0x17fce	SetPropW
2199	0x20e1b	SetRect
2200	0x20d85	SetRectEmpty
2201	0x240cf	SetScrollInfo
2202	0x287a5	SetScrollPos
2203	0x3d50b	SetScrollRange
2204	0x59bb7	SetShellWindow
2205	0x78b4b	SetShellWindowEx
2206	0x6fd60	SetSysColors
2207	0x71bab	SetSysColorsTemp
2208	0x70205	SetSystemCursor
2209	0x2a3d5	SetSystemMenu
2210	0x59c94	SetTaskmanWindow
2211	0x20296	SetThreadDesktop
2212	0x179fb	SetTimer
2213	0x78b2b	SetUserObjectInformationA
2214	0x78b2b	SetUserObjectInformationW
2215	0x594eb	SetUserObjectSecurity
2216	0x1ee09	SetWinEventHook
2217	0x20be6	SetWindowCompositionAttribute
2218	0x315ef	SetWindowContextHelpId
2219	0x78bcb	SetWindowDisplayAffinity
2220	0x26110	SetWindowLongA
2221	0x18332	SetWindowLongW
2222	0x24ab6	SetWindowPlacement
2223	0x18e4e	SetWindowPos
2224	0x2284d	SetWindowRgn
2225	0x70121	SetWindowRgnEx
2226	0x701c7	SetWindowStationUser
2227	0x27aee	SetWindowTextA
2228	0x220ec	SetWindowTextW
2229	0x2911c	SetWindowWord
2230	0x58c87	SetWindowsHookA
2231	0x2835c	SetWindowsHookExA
2232	0x27603	SetWindowsHookExW
2233	0x58ca2	SetWindowsHookW
2234	0x3d822	SfmDxBindSwapChain
2235	0x231d1	SfmDxGetSwapChainStats
2236	0x78c4b	SfmDxOpenSwapChain
2237	0x78c6b	SfmDxQuerySwapChainBindingStatus
2238	0x3d802	SfmDxReleaseSwapChain
2239	0x78c8b	SfmDxReportPendingBindingsToDwm
2240	0x78ca9	SfmDxSetSwapChainBindingStatus
2241	0x78cc9	SfmDxSetSwapChainStats
2242	0x22de6	ShowCaret
2243	0x3f670	ShowCursor
2244	0x2ae86	ShowOwnedPopups
2245	0x24162	ShowScrollBar
2246	0x59d48	ShowStartGlass
2247	0x78d09	ShowSystemCursor
2248	0x20dfb	ShowWindow
2249	0x77d97	ShowWindowAsync
2250	0x7a84e	ShutdownBlockReasonCreate
2251	0x7a88e	ShutdownBlockReasonDestroy
2252	0x7a86e	ShutdownBlockReasonQuery
2253	0x6efe5	SoftModalMessageBox
2254	0x27869	SoundSentry
2255	0x2e988	SubtractRect
2256	0x59d60	SwapMouseButton
2257	0x59854	SwitchDesktop
2258	0x5986c	SwitchDesktopWithFade
2259	0x590fc	SwitchToThisWindow
2260	0x26c30	SystemParametersInfoA
2261	0x190d3	SystemParametersInfoW
2262	0x61828	TabbedTextOutA
2263	0x617f9	TabbedTextOutW
2264	0x59d78	TileChildWindows
2265	0x6d1c9	TileWindows
2266	0x59005	ToAscii
2267	0x59062	ToAsciiEx
2268	0x70160	ToUnicode
2269	0x70193	ToUnicodeEx
2270	0x2360e	TrackMouseEvent
2271	0x3c288	TrackPopupMenu
2272	0x3c2ac	TrackPopupMenuEx
2273	0x285e5	TranslateAccelerator
2274	0x285e5	TranslateAcceleratorA
2275	0x21246	TranslateAcceleratorW
2276	0x2858e	TranslateMDISysAccel
2277	0x17809	TranslateMessage
2278	0x17839	TranslateMessageEx
2279	0x23982	UnhookWinEvent
2280	0x59d99	UnhookWindowsHook
2281	0x3f52b	UnhookWindowsHookEx
2282	0x226a8	UnionRect
2283	0x59e05	UnloadKeyboardLayout
2284	0x78d89	UnlockWindowStation
2285	0x62047	UnpackDDElParam
2286	0x1dced	UnregisterClassA
2287	0x19f84	UnregisterClassW
2288	0x22f58	UnregisterDeviceNotification
2289	0x4129b	UnregisterHotKey
2290	0x70081	UnregisterMessagePumpHook
2291	0x3d9d7	UnregisterPowerSettingNotification
2292	0x78da9	UnregisterSessionPort
2293	0x70e97	UnregisterTouchWindow
2294	0x78dc7	UnregisterUserApiHook
2295	0x2ba4a	UpdateLayeredWindow
2296	0x228da	UpdateLayeredWindowIndirect
2297	0x7163d	UpdatePerUserSystemParameters
2298	0x23559	UpdateWindow
2299	0x78e25	UpdateWindowTransform
2300	0x1bf14	User32InitializeImmEntryTable
2301	0x1b6ed	UserClientDllInitialize
2302	0x78e45	UserHandleGrantAccess
2303	0x6198e	UserLpkPSMTextOut
2304	0x6163c	UserLpkTabbedTextOut
2305	0x21486	UserRealizePalette
2306	0x5a33e	UserRegisterWowHandlers
2307	0x7a5c2	VRipOutput
2308	0x7a5ca	VTagOutput
2309	0x27849	ValidateRect
2310	0x28e72	ValidateRgn
2311	0x2dc6b	VkKeyScanA
2312	0x2d18c	VkKeyScanExA
2313	0x2cd66	VkKeyScanExW
2314	0x3fdcd	VkKeyScanW
2315	0x1cf1d	WCSToMBEx
2316	0x772dc	WINNLSEnableIME
2317	0x772ed	WINNLSGetEnableStatus
2318	0x772d2	WINNLSGetIMEHotkey
2319	0x59117	WaitForInputIdle
2320	0x3f5a9	WaitMessage
2321	0x3557f	WinHelpA
2322	0x68a63	WinHelpW
2323	0x2146e	WindowFromDC
2324	0x78ec5	WindowFromPhysicalPoint
2325	0x3ed12	WindowFromPoint
2326	0x753da	_UserTestTokenForInteractive
2327	0x804e0	gSharedInfo
2328	0x15fc8	gapfnScSendMessage
2329	0x702bf	keybd_event
2330	0x7027b	mouse_event
2331	0x2ae5f	wsprintfA
2332	0x3e061	wsprintfW
2333	0x2aad3	wvsprintfA
2334	0x3d849	wvsprintfW
2500	0x588c7
2501	0x588ec
2502	0x5891e

module_name	USER32.dll
flags	0
timestamp	2010-11-20 09:06:17
version	0.0
ordinal_base	1500
nFunctions	1003
nNames	822
Names(822)	0x1151c
Functions(1003)	0x10570
NameOrdinals(822)	0x121f4

StringTable 040904B0

CompanyName	Microsoft Corporation
FileDescription	Multi-User Windows USER API Client DLL
FileVersion	6.1.7601.17514 (win7sp1_rtm.101119-1850)
InternalName	user32
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	user32
ProductName	Microsoft® Windows® Operating System
ProductVersion	6.1.7601.17514

VS_FIXEDFILEINFO

FileVersion	6.1.7601.17514
ProductVersion	6.1.7601.17514
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	2
FileSubtype	0

show previews

offset	size	type	comment
0	833024	DLL	11/20/2010 12:08:57	#
15c1	15	HTM		#
9e238	49865	PNG	(256 x 256)	#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] ignoring invalid PEdump::BITMAPINFOHEADER

user32.dll-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904B0

VS_FIXEDFILEINFO

user32.dll
-