| filename | user32.dll | |
|---|---|---|
| size | 1126912 (0x113200) | |
| md5 | 8a93f57772fd24959f76a65ff79d282d | |
| type | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | |
| mimetype | application/x-dosexec | |
| clamav | OK | |
| virustotal | → scan with virustotal.com | |
| histogram | ||
MZ Header
| signature | MZ |
| bytes_in_last_block | 0x90 |
| blocks_in_file | 3 |
| num_relocs | 0 |
| header_paragraphs | 4 |
| min_extra_paragraphs | 0 |
| max_extra_paragraphs | 0xffff |
| ss | 0 |
| sp | 0xb8 |
| checksum | 0 |
| ip | 0 |
| cs | 0 |
| reloc_table_offset | 0x40 |
| overlay_number | 0 |
| reserved0 | 0 |
| oem_id | 0 |
| oem_info | 0 |
| reserved2 | 0 |
| reserved3 | 0 |
| reserved4 | 0 |
| reserved5 | 0 |
| reserved6 | 0 |
| lfanew | 0xf8 |
Rich Header
| lib id | version | times used |
|---|---|---|
| 189 | 30716 | 1 |
| 147 | 30729 | 54 |
| 1 | 0 | 382 |
| 185 | 30716 | 9 |
| 188 | 30716 | 10 |
| 184 | 30716 | 1 |
| 187 | 30716 | 7 |
| 192 | 30716 | 118 |
| 183 | 30716 | 1 |
| 186 | 30716 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
Sections
Data Directory
| module_name | hint | ord | function_name |
|---|---|---|---|
| ntdll.dll | 1247 | RtlSetLastWin32Error | |
| ntdll.dll | 658 | RtlAllocateHeap | |
| ntdll.dll | 176 | NlsAnsiCodePage | |
| ntdll.dll | 2036 | _wtoi | |
| ntdll.dll | 2137 | wcsrchr | |
| ntdll.dll | 2134 | wcsncpy_s | |
| ntdll.dll | 2066 | iswspace | |
| ntdll.dll | 2080 | qsort | |
| ntdll.dll | 978 | RtlImageNtHeader | |
| ntdll.dll | 1107 | RtlMultiByteToUnicodeSize | |
| ntdll.dll | 112 | LdrFlushAlternateResourceModules | |
| ntdll.dll | 472 | NtRaiseHardError | |
| ntdll.dll | 2131 | wcsncat_s | |
| ntdll.dll | 1057 | RtlIsNameLegalDOS8Dot3 | |
| ntdll.dll | 2087 | sscanf_s | |
| ntdll.dll | 2103 | strrchr | |
| ntdll.dll | 2093 | strcpy_s | |
| ntdll.dll | 1274 | RtlSizeHeap | |
| ntdll.dll | 963 | RtlGetThreadLangIdByIndex | |
| ntdll.dll | 1217 | RtlRunEncodeUnicodeString | |
| ntdll.dll | 1216 | RtlRunDecodeUnicodeString | |
| ntdll.dll | 1181 | RtlReAllocateHeap | |
| ntdll.dll | 1118 | RtlNtStatusToDosError | |
| ntdll.dll | 27 | CsrFreeCaptureBuffer | |
| ntdll.dll | 25 | CsrClientCallServer | |
| ntdll.dll | 20 | CsrAllocateMessagePointer | |
| ntdll.dll | 19 | CsrAllocateCaptureBuffer | |
| ntdll.dll | 389 | NtOpenProcessToken | |
| ntdll.dll | 397 | NtOpenThreadToken | |
| ntdll.dll | 908 | RtlFreeSid | |
| ntdll.dll | 435 | NtQueryInformationToken | |
| ntdll.dll | 656 | RtlAllocateAndInitializeSid | |
| ntdll.dll | 710 | RtlCompareUnicodeString | |
| ntdll.dll | 2076 | memmove | |
| ntdll.dll | 228 | NtCallbackReturn | |
| ntdll.dll | 1214 | RtlRetrieveNtUserPfn | |
| ntdll.dll | 1008 | RtlInitializeNtUserPfn | |
| ntdll.dll | 413 | NtProtectVirtualMemory | |
| ntdll.dll | 2024 | _wcsicmp | |
| ntdll.dll | 2001 | _stricmp | |
| ntdll.dll | 939 | RtlGetIntegerAtom | |
| ntdll.dll | 792 | RtlDeleteCriticalSection | |
| ntdll.dll | 1211 | RtlResetNtUserPfn | |
| ntdll.dll | 1146 | RtlQueryElevationFlags | |
| ntdll.dll | 459 | NtQuerySystemInformation | |
| ntdll.dll | 1000 | RtlInitializeCriticalSection | |
| ntdll.dll | 1320 | RtlUnicodeToMultiByteSize | |
| ntdll.dll | 1061 | RtlIsThreadWithinLoaderCallout | |
| ntdll.dll | 609 | NtYieldExecution | |
| ntdll.dll | 1152 | RtlQueryInformationActiveActivationContext | |
| ntdll.dll | 298 | NtDeleteValueKey | |
| ntdll.dll | 561 | NtSetValueKey | |
| ntdll.dll | 257 | NtCreateKey | |
| ntdll.dll | 2143 | wcstoul | |
| ntdll.dll | 593 | NtVdmControl | |
| ntdll.dll | 664 | RtlAnsiStringToUnicodeString | |
| ntdll.dll | 984 | RtlInitAnsiString | |
| ntdll.dll | 910 | RtlFreeUnicodeString | |
| ntdll.dll | 767 | RtlCreateUnicodeStringFromAsciiz | |
| ntdll.dll | 373 | NtOpenDirectoryObject | |
| ntdll.dll | 550 | NtSetSecurityObject | |
| ntdll.dll | 454 | NtQuerySecurityObject | |
| ntdll.dll | 432 | NtQueryInformationProcess | |
| ntdll.dll | 2141 | wcstol | |
| ntdll.dll | 2021 | _vsnwprintf | |
| ntdll.dll | 1191 | RtlReleaseActivationContext | |
| ntdll.dll | 879 | RtlFindActivationContextSectionString | |
| ntdll.dll | 779 | RtlDeactivateActivationContextUnsafeFast | |
| ntdll.dll | 629 | RtlActivateActivationContextUnsafeFast | |
| ntdll.dll | 1319 | RtlUnicodeToMultiByteN | |
| ntdll.dll | 1106 | RtlMultiByteToUnicodeN | |
| ntdll.dll | 841 | RtlEnterCriticalSection | |
| ntdll.dll | 1077 | RtlLeaveCriticalSection | |
| ntdll.dll | 2123 | wcscat_s | |
| ntdll.dll | 2127 | wcscpy_s | |
| ntdll.dll | 464 | NtQueryValueKey | |
| ntdll.dll | 310 | NtEnumerateKey | |
| ntdll.dll | 235 | NtClose | |
| ntdll.dll | 380 | NtOpenKey | |
| ntdll.dll | 1130 | RtlOpenCurrentUser | |
| ntdll.dll | 1315 | RtlUnicodeStringToInteger | |
| ntdll.dll | 993 | RtlInitUnicodeString | |
| ntdll.dll | 2110 | swprintf_s | |
| ntdll.dll | 905 | RtlFreeHeap | |
| ntdll.dll | 403 | NtPowerInformation | |
| ntdll.dll | 1954 | _alldiv | |
| ntdll.dll | 1956 | _allmul | |
| ntdll.dll | 1965 | _aulldvrm | |
| ntdll.dll | 1968 | _chkstk | |
| ntdll.dll | 1974 | _ftol2_sse | |
| ntdll.dll | 2073 | memcmp | |
| ntdll.dll | 2074 | memcpy | |
| ntdll.dll | 2078 | memset | |
| ntdll.dll | 1334 | RtlUnwind | |
| api-ms-win-core-localization-l1-2-0.dll | 8 | GetACP | |
| api-ms-win-core-localization-l1-2-0.dll | 37 | IsDBCSLeadByte | |
| api-ms-win-core-localization-l1-2-0.dll | 24 | GetSystemDefaultLangID | |
| api-ms-win-core-localization-l1-2-0.dll | 9 | GetCPInfo | |
| api-ms-win-core-localization-l1-2-0.dll | 30 | GetUserDefaultLCID | |
| api-ms-win-core-localization-l1-2-0.dll | 26 | GetThreadLocale | |
| api-ms-win-core-localization-l1-2-0.dll | 18 | GetLocaleInfoW | |
| api-ms-win-core-localization-l1-2-0.dll | 21 | GetOEMCP | |
| api-ms-win-core-localization-l1-2-0.dll | 42 | IsValidLocale | |
| api-ms-win-core-localization-l1-2-0.dll | ConvertDefaultLocale | ||
| api-ms-win-core-localization-l1-2-0.dll | 38 | IsDBCSLeadByteEx | |
| api-ms-win-core-registry-l1-1-0.dll | 3 | RegCreateKeyExW | |
| api-ms-win-core-registry-l1-1-0.dll | RegCloseKey | ||
| api-ms-win-core-registry-l1-1-0.dll | 5 | RegDeleteKeyExW | |
| api-ms-win-core-registry-l1-1-0.dll | 31 | RegQueryInfoKeyW | |
| api-ms-win-core-registry-l1-1-0.dll | 14 | RegEnumValueW | |
| api-ms-win-core-registry-l1-1-0.dll | 33 | RegQueryValueExW | |
| api-ms-win-core-registry-l1-1-0.dll | 28 | RegOpenKeyExW | |
| api-ms-win-core-registry-l1-1-0.dll | 40 | RegSetValueExW | |
| api-ms-win-core-registry-l1-1-0.dll | 18 | RegGetValueW | |
| api-ms-win-core-libraryloader-l1-1-1.dll | 14 | GetModuleFileNameW | |
| api-ms-win-core-libraryloader-l1-1-1.dll | 13 | GetModuleFileNameA | |
| api-ms-win-core-libraryloader-l1-1-1.dll | 1 | DisableThreadLibraryCalls | |
| api-ms-win-core-libraryloader-l1-1-1.dll | 17 | GetModuleHandleExW | |
| api-ms-win-core-libraryloader-l1-1-1.dll | 8 | FindResourceExW | |
| api-ms-win-core-libraryloader-l1-1-1.dll | 18 | GetModuleHandleW | |
| api-ms-win-core-libraryloader-l1-1-1.dll | 22 | LoadResource | |
| api-ms-win-core-libraryloader-l1-1-1.dll | 10 | FreeLibrary | |
| api-ms-win-core-libraryloader-l1-1-1.dll | 29 | SizeofResource | |
| api-ms-win-core-libraryloader-l1-1-1.dll | 19 | GetProcAddress | |
| api-ms-win-core-libraryloader-l1-1-1.dll | 21 | LoadLibraryExW | |
| api-ms-win-core-libraryloader-l1-1-1.dll | 15 | GetModuleHandleA | |
| api-ms-win-core-libraryloader-l1-1-1.dll | 5 | EnumResourceNamesExW | |
| api-ms-win-core-interlocked-l1-2-0.dll | 3 | InterlockedDecrement | |
| api-ms-win-core-interlocked-l1-2-0.dll | 1 | InterlockedCompareExchange | |
| api-ms-win-core-interlocked-l1-2-0.dll | 7 | InterlockedIncrement | |
| api-ms-win-core-interlocked-l1-2-0.dll | 4 | InterlockedExchange | |
| api-ms-win-core-string-l1-1-0.dll | 7 | WideCharToMultiByte | |
| api-ms-win-core-string-l1-1-0.dll | 5 | GetStringTypeW | |
| api-ms-win-core-string-l1-1-0.dll | 2 | CompareStringW | |
| api-ms-win-core-string-l1-1-0.dll | 3 | FoldStringW | |
| api-ms-win-core-string-l1-1-0.dll | 6 | MultiByteToWideChar | |
| api-ms-win-core-synch-l1-2-0.dll | 50 | WaitForMultipleObjectsEx | |
| api-ms-win-core-synch-l1-2-0.dll | 39 | SetEvent | |
| api-ms-win-core-synch-l1-2-0.dll | 43 | Sleep | |
| api-ms-win-core-file-l1-2-0.dll | 46 | GetLogicalDrives | |
| api-ms-win-core-file-l1-2-0.dll | 5 | CreateFileW | |
| api-ms-win-core-file-l1-2-0.dll | 72 | SetFileTime | |
| api-ms-win-core-file-l1-2-0.dll | 61 | ReadFile | |
| api-ms-win-core-file-l1-2-0.dll | 18 | FindFirstFileW | |
| api-ms-win-core-file-l1-2-0.dll | 22 | FindNextFileW | |
| api-ms-win-core-file-l1-2-0.dll | 11 | FindClose | |
| api-ms-win-core-file-l1-2-0.dll | 37 | GetFileSize | |
| api-ms-win-core-errorhandling-l1-1-1.dll | 11 | UnhandledExceptionFilter | |
| api-ms-win-core-errorhandling-l1-1-1.dll | 9 | SetLastError | |
| api-ms-win-core-errorhandling-l1-1-1.dll | 3 | GetLastError | |
| api-ms-win-core-errorhandling-l1-1-1.dll | 10 | SetUnhandledExceptionFilter | |
| api-ms-win-core-processthreads-l1-1-1.dll | 12 | GetCurrentProcessId | |
| api-ms-win-core-processthreads-l1-1-1.dll | 19 | GetExitCodeThread | |
| api-ms-win-core-processthreads-l1-1-1.dll | 8 | ExitThread | |
| api-ms-win-core-processthreads-l1-1-1.dll | 15 | GetCurrentThread | |
| api-ms-win-core-processthreads-l1-1-1.dll | 16 | GetCurrentThreadId | |
| api-ms-win-core-processthreads-l1-1-1.dll | 2 | CreateProcessW | |
| api-ms-win-core-processthreads-l1-1-1.dll | 56 | TerminateProcess | |
| api-ms-win-core-processthreads-l1-1-1.dll | 11 | GetCurrentProcess | |
| api-ms-win-core-processthreads-l1-1-1.dll | 40 | ProcessIdToSessionId | |
| api-ms-win-core-processthreads-l1-1-1.dll | 5 | CreateThread | |
| api-ms-win-core-sysinfo-l1-2-0.dll | 10 | GetSystemDirectoryW | |
| api-ms-win-core-sysinfo-l1-2-0.dll | 23 | GetVersionExW | |
| api-ms-win-core-sysinfo-l1-2-0.dll | 18 | GetSystemWindowsDirectoryW | |
| api-ms-win-core-sysinfo-l1-2-0.dll | 19 | GetTickCount | |
| api-ms-win-core-sysinfo-l1-2-0.dll | 15 | GetSystemTimeAsFileTime | |
| api-ms-win-core-processenvironment-l1-2-0.dll | 1 | ExpandEnvironmentStringsW | |
| api-ms-win-core-processenvironment-l1-2-0.dll | 7 | GetCurrentDirectoryW | |
| api-ms-win-core-processenvironment-l1-2-0.dll | 18 | SetCurrentDirectoryW | |
| api-ms-win-core-processenvironment-l1-2-0.dll | 16 | SearchPathW | |
| api-ms-win-security-base-l1-2-0.dll | 27 | CheckTokenMembership | |
| api-ms-win-core-string-l2-1-0.dll | 5 | CharUpperW | |
| api-ms-win-core-string-l2-1-0.dll | 1 | CharLowerW | |
| api-ms-win-core-string-l2-1-0.dll | 8 | IsCharLowerW | |
| api-ms-win-core-string-l2-1-0.dll | 2 | CharNextW | |
| api-ms-win-core-string-l2-1-0.dll | 9 | IsCharUpperW | |
| api-ms-win-core-string-l2-1-0.dll | 7 | IsCharAlphaW | |
| api-ms-win-core-string-l2-1-0.dll | 6 | IsCharAlphaNumericW | |
| api-ms-win-core-string-l2-1-0.dll | CharLowerBuffW | ||
| api-ms-win-core-string-l2-1-0.dll | 4 | CharUpperBuffW | |
| api-ms-win-core-string-l2-1-0.dll | 3 | CharPrevW | |
| api-ms-win-core-handle-l1-1-0.dll | CloseHandle | ||
| api-ms-win-core-memory-l1-1-1.dll | 12 | OpenFileMappingW | |
| api-ms-win-core-memory-l1-1-1.dll | 19 | UnmapViewOfFile | |
| api-ms-win-core-memory-l1-1-1.dll | 9 | MapViewOfFile | |
| api-ms-win-core-memory-l1-1-1.dll | 2 | CreateFileMappingW | |
| api-ms-win-core-memory-l1-1-1.dll | 29 | VirtualQueryEx | |
| api-ms-win-core-memory-l1-1-1.dll | 10 | MapViewOfFileEx | |
| api-ms-win-core-profile-l1-1-0.dll | QueryPerformanceCounter | ||
| api-ms-win-core-profile-l1-1-0.dll | 1 | QueryPerformanceFrequency | |
| api-ms-win-core-privateprofile-l1-1-0.dll | 13 | WritePrivateProfileStringW | |
| api-ms-win-core-privateprofile-l1-1-0.dll | 4 | GetPrivateProfileStringW | |
| api-ms-win-core-heap-obsolete-l1-1-0.dll | 11 | LocalLock | |
| api-ms-win-core-heap-obsolete-l1-1-0.dll | 12 | LocalReAlloc | |
| api-ms-win-core-heap-obsolete-l1-1-0.dll | 1 | GlobalFlags | |
| api-ms-win-core-heap-obsolete-l1-1-0.dll | 5 | GlobalReAlloc | |
| api-ms-win-core-heap-obsolete-l1-1-0.dll | GlobalAlloc | ||
| api-ms-win-core-heap-obsolete-l1-1-0.dll | 10 | LocalFree | |
| api-ms-win-core-heap-obsolete-l1-1-0.dll | 8 | LocalAlloc | |
| api-ms-win-core-heap-obsolete-l1-1-0.dll | 4 | GlobalLock | |
| api-ms-win-core-heap-obsolete-l1-1-0.dll | 7 | GlobalUnlock | |
| api-ms-win-core-heap-obsolete-l1-1-0.dll | 2 | GlobalFree | |
| api-ms-win-core-heap-obsolete-l1-1-0.dll | 6 | GlobalSize | |
| api-ms-win-core-heap-obsolete-l1-1-0.dll | 14 | LocalUnlock | |
| api-ms-win-core-heap-obsolete-l1-1-0.dll | 3 | GlobalHandle | |
| api-ms-win-core-heap-obsolete-l1-1-0.dll | 13 | LocalSize | |
| api-ms-win-core-atoms-l1-1-0.dll | 2 | DeleteAtom | |
| api-ms-win-core-atoms-l1-1-0.dll | 1 | AddAtomW | |
| api-ms-win-core-atoms-l1-1-0.dll | 10 | GlobalAddAtomW | |
| api-ms-win-core-atoms-l1-1-0.dll | 13 | GlobalFindAtomW | |
| api-ms-win-core-atoms-l1-1-0.dll | AddAtomA | ||
| api-ms-win-core-atoms-l1-1-0.dll | 11 | GlobalDeleteAtom | |
| api-ms-win-core-atoms-l1-1-0.dll | 15 | GlobalGetAtomNameW | |
| api-ms-win-core-atoms-l1-1-0.dll | 7 | GlobalAddAtomA | |
| api-ms-win-core-atoms-l1-1-0.dll | 12 | GlobalFindAtomA | |
| api-ms-win-core-atoms-l1-1-0.dll | 6 | GetAtomNameW | |
| api-ms-win-core-atoms-l1-1-0.dll | 5 | GetAtomNameA | |
| api-ms-win-core-atoms-l1-1-0.dll | 14 | GlobalGetAtomNameA | |
| api-ms-win-core-string-obsolete-l1-1-0.dll | 9 | lstrlenW | |
| api-ms-win-core-string-obsolete-l1-1-0.dll | 8 | lstrlenA | |
| api-ms-win-core-string-obsolete-l1-1-0.dll | 4 | lstrcmpiW | |
| api-ms-win-core-localization-obsolete-l1-1-0.dll | 6 | GetStringTypeA | |
| api-ms-win-core-stringansi-l1-1-0.dll | 4 | CharPrevA | |
| api-ms-win-core-stringansi-l1-1-0.dll | 5 | CharPrevExA | |
| api-ms-win-core-stringansi-l1-1-0.dll | 8 | IsCharAlphaA | |
| api-ms-win-core-stringansi-l1-1-0.dll | 1 | CharLowerBuffA | |
| api-ms-win-core-stringansi-l1-1-0.dll | 11 | IsCharUpperA | |
| api-ms-win-core-stringansi-l1-1-0.dll | 3 | CharNextExA | |
| api-ms-win-core-stringansi-l1-1-0.dll | 2 | CharNextA | |
| api-ms-win-core-stringansi-l1-1-0.dll | CharLowerA | ||
| api-ms-win-core-stringansi-l1-1-0.dll | 7 | CharUpperBuffA | |
| api-ms-win-core-stringansi-l1-1-0.dll | 10 | IsCharLowerA | |
| api-ms-win-core-stringansi-l1-1-0.dll | 6 | CharUpperA | |
| api-ms-win-core-stringansi-l1-1-0.dll | 9 | IsCharAlphaNumericA | |
| api-ms-win-core-kernel32-private-l1-1-0.dll | 4 | RegisterWaitForInputIdle | |
| api-ms-win-core-sidebyside-l1-1-0.dll | 7 | QueryActCtxSettingsW | |
| api-ms-win-core-windowserrorreporting-l1-1-0.dll | 8 | WerpNotifyLoadStringResource | |
| api-ms-win-core-windowserrorreporting-l1-1-0.dll | 9 | WerpNotifyUseStringResource | |
| KERNELBASE.dll | 69 | LoadStringBaseExW | |
| api-ms-win-core-kernel32-legacy-l1-1-0.dll | 17 | FindResourceExA | |
| api-ms-win-core-kernel32-legacy-l1-1-0.dll | 41 | MulDiv | |
| api-ms-win-core-appinit-l1-1-0.dll | LoadAppInitDlls | ||
| GDI32.dll | 557 | GetStockObject | |
| GDI32.dll | 721 | SetBkMode | |
| GDI32.dll | 713 | SelectObject | |
| GDI32.dll | 592 | IntersectClipRect | |
| GDI32.dll | 528 | GetMapMode | |
| GDI32.dll | 519 | GetHFONT | |
| GDI32.dll | 341 | ExtSelectClipRgn | |
| GDI32.dll | 481 | GetClipRgn | |
| GDI32.dll | 735 | SetGraphicsMode | |
| GDI32.dll | 480 | GetClipBox | |
| GDI32.dll | 81 | CreateRectRgnIndirect | |
| GDI32.dll | 80 | CreateRectRgn | |
| GDI32.dll | 459 | GetBoundsRect | |
| GDI32.dll | 739 | SetLayout | |
| GDI32.dll | 627 | PlayEnhMetaFile | |
| GDI32.dll | 336 | ExcludeClipRect | |
| GDI32.dll | 268 | Ellipse | |
| GDI32.dll | 57 | CreateEllipticRgn | |
| GDI32.dll | 487 | GetDCOrgEx | |
| GDI32.dll | 403 | GdiFixUpHandle | |
| GDI32.dll | 649 | Rectangle | |
| GDI32.dll | 76 | CreatePen | |
| GDI32.dll | 45 | CreateBrushIndirect | |
| GDI32.dll | 635 | PolyPatBlt | |
| GDI32.dll | 763 | SetViewportOrgEx | |
| GDI32.dll | 585 | GetViewportOrgEx | |
| GDI32.dll | 484 | GetCurrentObject | |
| GDI32.dll | 565 | GetTextCharacterExtra | |
| GDI32.dll | 759 | SetTextCharacterExtra | |
| GDI32.dll | 722 | SetBoundsRect | |
| GDI32.dll | 38 | CopyEnhMetaFileW | |
| GDI32.dll | 40 | CopyMetaFileW | |
| GDI32.dll | 748 | SetPaletteEntries | |
| GDI32.dll | 74 | CreatePalette | |
| GDI32.dll | 544 | GetPaletteEntries | |
| GDI32.dll | 548 | GetPixel | |
| GDI32.dll | 567 | GetTextCharsetInfo | |
| GDI32.dll | 645 | QueryFontAssocStatus | |
| GDI32.dll | 342 | ExtTextOutA | |
| GDI32.dll | 476 | GetCharWidthInfo | |
| GDI32.dll | 472 | GetCharWidthA | |
| GDI32.dll | 580 | GetTextFaceW | |
| GDI32.dll | 469 | GetCharABCWidthsW | |
| GDI32.dll | 465 | GetCharABCWidthsA | |
| GDI32.dll | 724 | SetBrushOrgEx | |
| GDI32.dll | 579 | GetTextFaceAliasW | |
| GDI32.dll | 327 | EnumFontsW | |
| GDI32.dll | 65 | CreateFontIndirectW | |
| GDI32.dll | 568 | GetTextColor | |
| GDI32.dll | 582 | GetTextMetricsW | |
| GDI32.dll | 587 | GetWindowExtEx | |
| GDI32.dll | 584 | GetViewportExtEx | |
| GDI32.dll | 458 | GetBkMode | |
| GDI32.dll | 408 | GdiGetCharDimensions | |
| GDI32.dll | 566 | GetTextCharset | |
| GDI32.dll | 409 | GdiGetCodePage | |
| GDI32.dll | 434 | GdiPrinterThunk | |
| GDI32.dll | 427 | GdiLoadType1Fonts | |
| GDI32.dll | 359 | GdiAddFontResourceW | |
| GDI32.dll | 780 | TranslateCharsetInfo | |
| GDI32.dll | 343 | ExtTextOutW | |
| GDI32.dll | 659 | RestoreDC | |
| GDI32.dll | 617 | OffsetWindowOrgEx | |
| GDI32.dll | 666 | SaveDC | |
| GDI32.dll | 490 | GetDIBits | |
| GDI32.dll | 730 | SetDIBits | |
| GDI32.dll | 756 | SetStretchBltMode | |
| GDI32.dll | 54 | CreateDIBSection | |
| GDI32.dll | 48 | CreateCompatibleBitmap | |
| GDI32.dll | 55 | CreateDIBitmap | |
| GDI32.dll | 51 | CreateDCW | |
| GDI32.dll | 258 | DeleteDC | |
| GDI32.dll | 451 | GdiValidateHandle | |
| GDI32.dll | 86 | CreateSolidBrush | |
| GDI32.dll | 758 | SetTextAlign | |
| GDI32.dll | 49 | CreateCompatibleDC | |
| GDI32.dll | 435 | GdiProcessSetup | |
| GDI32.dll | 383 | GdiDllInitialize | |
| GDI32.dll | 556 | GetRgnBox | |
| GDI32.dll | 610 | MirrorRgn | |
| GDI32.dll | 615 | OffsetRgn | |
| GDI32.dll | 34 | CombineRgn | |
| GDI32.dll | 269 | EnableEUDC | |
| GDI32.dll | 377 | GdiConvertToDevmodeW | |
| GDI32.dll | 19 | BitBlt | |
| GDI32.dll | 779 | TextOutW | |
| GDI32.dll | 778 | TextOutA | |
| GDI32.dll | 624 | PatBlt | |
| GDI32.dll | 740 | SetLayoutWidth | |
| GDI32.dll | 41 | CreateBitmap | |
| GDI32.dll | 577 | GetTextExtentPointW | |
| GDI32.dll | 575 | GetTextExtentPointA | |
| GDI32.dll | 773 | StretchBlt | |
| GDI32.dll | 540 | GetObjectType | |
| GDI32.dll | 367 | GdiConvertAndCheckDC | |
| GDI32.dll | 754 | SetRectRgn | |
| GDI32.dll | 439 | GdiReleaseDC | |
| GDI32.dll | 372 | GdiConvertEnhMetaFile | |
| GDI32.dll | 564 | GetTextAlign | |
| GDI32.dll | 720 | SetBkColor | |
| GDI32.dll | 374 | GdiConvertMetaFilePict | |
| GDI32.dll | 378 | GdiCreateLocalEnhMetaFile | |
| GDI32.dll | 379 | GdiCreateLocalMetaFilePict | |
| GDI32.dll | 760 | SetTextColor | |
| GDI32.dll | 369 | GdiConvertBitmapV5 | |
| GDI32.dll | 259 | DeleteEnhMetaFile | |
| GDI32.dll | 260 | DeleteMetaFile | |
| GDI32.dll | 261 | DeleteObject | |
| GDI32.dll | 774 | StretchDIBits | |
| GDI32.dll | 491 | GetDeviceCaps | |
| GDI32.dll | 489 | GetDIBColorTable | |
| GDI32.dll | 407 | GdiGetBitmapBitsSize | |
| GDI32.dll | 525 | GetLayout | |
| GDI32.dll | 457 | GetBkColor | |
| GDI32.dll | 541 | GetObjectW | |
| api-ms-win-core-delayload-l1-1-1.dll | DelayLoadFailureHook | ||
| api-ms-win-core-delayload-l1-1-1.dll | 1 | ResolveDelayLoadedAPI |
StringTable 040904B0
| CompanyName | Microsoft Corporation |
| FileDescription | Multi-User Windows USER API Client DLL |
| FileVersion | 6.2.9200.16384 (win8_rtm.120725-1247) |
| InternalName | user32 |
| LegalCopyright | © Microsoft Corporation. All rights reserved. |
| OriginalFilename | user32 |
| ProductName | Microsoft® Windows® Operating System |
| ProductVersion | 6.2.9200.16384 |
VS_FIXEDFILEINFO
| FileVersion | 6.2.9200.16384 |
| ProductVersion | 6.2.9200.16384 |
| StrucVersion | 0x10000 |
| FileFlagsMask | 0x3f |
| FileFlags | 0 |
| FileOS | 0x40004 |
| FileType | 2 |
| FileSubtype | 0 |
![]() |
| Please donate some bucks to keep this site up and running: | |
| Ko-fi | |
|---|---|
| Yandex.Money | |
| Thank you! | |
[?] ignoring invalid PEdump::BITMAPINFOHEADER
offset:( 0x )