user32.dll - user32 - Client-DLL für Windows XP USER-API

info
MZ
PE
resources
strings
imports
exports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	user32.dll
size	580096 (0x8da00)
md5	b0050cc5340e3a0760dd8b417ff7aebd

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xd8

Rich Header

lib id	version	times used
1	0	331
93	4035	7
92	4035	1
94	4035	1
15	4035	8
95	4035	119
90	4035	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x4802bfb7
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x210e
Magic	0x10b
LinkerVersion	7.10
SizeOfCode	0x5f400
SizeOfInitializedData	0x2e200
SizeOfUninitializedData	0
AddressOfEntryPoint	0xb217
BaseOfCode	0x1000
BaseOfData	0x5b000
ImageBase	0x7e360000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	5.1
ImageVersion	5.1
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x91000
SizeOfHeaders	0x400
CheckSum	0x98209
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x40000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x5f283	0x5f400	R-X CODE
.data	0x61000	0x1180	0xc00	RW- IDATA
.rsrc	0x63000	0x2a7bc	0x2a800	R-- IDATA
.reloc	0x8e000	0x2de4	0x2e00	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x3900	0x4ba9
IMPORT	0x5e638	0x50
RESOURCE	0x63000	0x2a7bc
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x8e000	0x2de4
DEBUG	0x60224	0x38
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x3f010	0x40
Bound_IAT	0x270	0x4c
IAT	0x1000	0x4e4
Delay_IAT	0x5e32c	0xa0
CLR_Header	0	0

show previews

type	name	size	cp
CURSOR	#52	308	1252
CURSOR	#53	308	1252
CURSOR	#54	308	1252
CURSOR	#55	308	1252
CURSOR	#56	308	1252
CURSOR	#57	308	1252
CURSOR	#58	308	1252
CURSOR	#59	308	1252
CURSOR	#60	308	1252
CURSOR	#61	308	1252
CURSOR	#62	308	1252
CURSOR	#63	308	1252
CURSOR	#64	308	1252
CURSOR	#65	308	1252
CURSOR	#66	308	1252
CURSOR	#67	308	1252
CURSOR	#68	748	1252
CURSOR	#69	308	1252
CURSOR	#70	308	1252
CURSOR	#71	308	1252
CURSOR	#72	308	1252
CURSOR	#73	308	1252
CURSOR	#74	308	1252
CURSOR	#75	308	1252
CURSOR	#76	308	1252
CURSOR	#77	308	1252
CURSOR	#78	308	1252
CURSOR	#79	308	1252
BITMAP	#36	1616	1252
BITMAP	#136	248	1252
BITMAP	#236	360	1252
BITMAP	#32559	322	1252
BITMAP	#32660	370	1252
BITMAP	#32661	394	1252
BITMAP	#32731	184	1252
ICON	#1	744	1252
ICON	#2	296	1252
ICON	#3	3752	1252
ICON	#4	2216	1252
ICON	#5	1384	1252
ICON	#6	9640	1252
ICON	#7	4264	1252
ICON	#8	1128	1252
ICON	#9	744	1252
ICON	#10	304	1252
ICON	#11	296	1252
ICON	#12	3752	1252
ICON	#13	2216	1252
ICON	#14	1384	1252
ICON	#15	9640	1252
ICON	#16	4264	1252
ICON	#17	1128	1252
ICON	#18	744	1252
ICON	#19	304	1252
ICON	#20	3752	1252
ICON	#21	2216	1252
ICON	#22	1384	1252
ICON	#23	9640	1252
ICON	#24	4264	1252
ICON	#25	1128	1252
ICON	#26	744	1252
ICON	#27	304	1252
ICON	#28	296	1252
ICON	#29	3752	1252
ICON	#30	2216	1252
ICON	#31	1384	1252
ICON	#32	9640	1252
ICON	#33	4264	1252
ICON	#34	1128	1252
ICON	#35	744	1252
ICON	#36	304	1252
ICON	#37	296	1252
ICON	#38	3752	1252
ICON	#39	2216	1252
ICON	#40	1384	1252
ICON	#41	9640	1252
ICON	#42	4264	1252
ICON	#43	1128	1252
ICON	#44	744	1252
ICON	#45	296	1252
ICON	#46	3752	1252
ICON	#47	2216	1252
ICON	#48	1384	1252
ICON	#49	9640	1252
ICON	#50	4264	1252
ICON	#51	1128	1252
MENU	#1	2336	1252
MENU	#4	48	1252
MENU	#16	224	1252
MENU	#32	272	1252
MENU	#48	80	1252
MENU	#64	256	1252
MENU	#80	240	1252
DIALOG	#9	220	1252
STRING	#1	364	1252
STRING	#44	188	1252
STRING	#45	1680	1252
STRING	#51	204	1252
STRING	#57	144	1252
STRING	#516	464	1252
STRING	#517	920	1252
STRING	#518	2012	1252
MESSAGETABLE	#1	1208	1252
GROUP_CURSOR	#100	20	1252
GROUP_CURSOR	#101	20	1252
GROUP_CURSOR	#102	20	1252
GROUP_CURSOR	#103	20	1252
GROUP_CURSOR	#104	20	1252
GROUP_CURSOR	#105	20	1252
GROUP_CURSOR	#106	20	1252
GROUP_CURSOR	#107	20	1252
GROUP_CURSOR	#108	20	1252
GROUP_CURSOR	#109	20	1252
GROUP_CURSOR	#110	20	1252
GROUP_CURSOR	#111	20	1252
GROUP_CURSOR	#112	20	1252
GROUP_CURSOR	#113	20	1252
GROUP_CURSOR	#114	20	1252
GROUP_CURSOR	#115	20	1252
GROUP_CURSOR	#116	20	1252
GROUP_CURSOR	#32652	20	1252
GROUP_CURSOR	#32653	20	1252
GROUP_CURSOR	#32654	20	1252
GROUP_CURSOR	#32655	20	1252
GROUP_CURSOR	#32656	20	1252
GROUP_CURSOR	#32657	20	1252
GROUP_CURSOR	#32658	20	1252
GROUP_CURSOR	#32659	20	1252
GROUP_CURSOR	#32660	20	1252
GROUP_CURSOR	#32661	20	1252
GROUP_CURSOR	#32662	20	1252
GROUP_ICON	#100	118	1252
GROUP_ICON	#101	132	1252
GROUP_ICON	#102	118	1252
GROUP_ICON	#103	132	1252
GROUP_ICON	#104	132	1252
GROUP_ICON	#105	118	1252
VERSION	#1	928	1252

id	lang	string
2	1031	Fehler
13	1031	&Weitere Fenster...
14	1031	Zum Erstellen des Bitmap ist nicht genügend Arbeitsspeicher verfügbar. Schließen Sie andere Anwendungen, um mehr Arbeitsspeicher freizugeben.
700	1031	IME s&tarten
701	1031	IME &beenden
702	1031	Bildschirmtastatur start&en
703	1031	Bildschir&mtastatur beenden
705	1031	&Rückumwandlung
706	1031	Herunterfahren
707	1031	Ausschalten
708	1031	Neustart
709	1031	Unbekannt
710	1031	Windows
711	1031	Wenn Sie diesen Remotecomputer herunterfahren, wird niemand in der Lage sein den Computer zu verwenden, bis er am Remotestandort manuell neu gestartet wird. Möchten Sie den Vorgang fortsetzen?
712	1031	Andere Benutzer sind zurzeit auf diesem Remotecomputer angemeldet. Das Herunterfahren von Windows kann zum Datenverlust führen, und der Computer wird anschließend vom Remotestandort manuell gestartet werden müssen. Möchten Sie den Vorgang fortsetzen?
713	1031	Andere Benutzer sind zurzeit auf diesem Computer angemeldet. Das Herunterfahren von Windows kann zum Datenverlust führen. Möchten Sie den Vorgang fortsetzen?
714	1031	Andere Benutzer sind zurzeit an diesem Computer angemeldet. Der Neustart von Windows kann zu Datenverlust führen. Möchten Sie den Vorgang fortsetzen?
800	1031	OK
801	1031	Abbrechen
802	1031	A&bbrechen
803	1031	Wieder&holen
804	1031	&Ignorieren
805	1031	&Ja
806	1031	&Nein
807	1031	&Schließen
808	1031	Hilfe
809	1031	Wie&derholen
810	1031	&Weiter
900	1031	Minimieren
901	1031	Maximieren
902	1031	Vergrößern
903	1031	Verkleinern
904	1031	Hilfe
905	1031	Schließen
8250	1031	Hardware: Wartung (nicht geplant)
8251	1031	Hardware: Wartung (geplant)
8252	1031	Hardware: Installation (nicht geplant)
8253	1031	Hardware: Installation (geplant)
8254	1031	Betriebssystem: Aktualisierung (nicht geplant)
8255	1031	Betriebssystem: Aktualisierung (geplant)
8256	1031	Betriebssystem: Neukonfigurierung (nicht geplant)
8257	1031	Betriebssystem: Neukonfigurierrung (geplant)
8258	1031	Anwendung: Reagiert nicht
8259	1031	Anwendung: Instabil
8260	1031	Anwendung: Wartung (nicht geplant)
8261	1031	Anderer Grund (nicht geplant)
8262	1031	Anderer Grund (geplant)
8263	1031	Systemfehler: Abbruchfehler
8264	1031	Stromversorgungsfehler: Kabel entfernt
8265	1031	Stromversorgungsfehler: Umgebung
8266	1031	Anderer Fehler: System reagierte nicht mehr
8267	1031	Unbekannt
8268	1031	Anwendung: Wartung (geplant)
8269	1031	Es wurde kein Titel für den Grund gefunden.
8275	1031	Ein Neustart bzw. Herunterfahren wurde zur Wartung der Hardware auf dem System durchgeführt.
8276	1031	Ein Neustart bzw. Herunterfahren wurde durchgeführt, um die Installation neuer Hardware zu starten bzw. abzuschließen.
8277	1031	Ein Neustart bzw. Herunterfahren wurde zur Aktualisierung des Betriebssystems durchgeführt.
8278	1031	Ein Neustart bzw. Herunterfahren wurde zur Änderung der Betriebssystemkonfiguration durchgeführt.
8279	1031	Ein Neustart bzw. Herunterfahren wurde zur Behandlung eines Problems mit einer nicht mehr reagierenden Anwendung durchgeführt.
8280	1031	Ein Neustart bzw. Herunterfahren wurde zur Behandlung eines Problems mit einer instabiler Anwendung durchgeführt.
8281	1031	Ein Neustart bzw. Herunterfahren wurde zur Wartung einer Anwendung durchgeführt.
8282	1031	Ein Neustart bzw. Herunterfahren wurde aus einem unbekannten Grund durchgeführt.
8283	1031	Ein Bluescreen ist aufgetreten.
8284	1031	Das Stromkabel wurde aus der Steckdose entfernt.
8285	1031	Stromausfall
8286	1031	Das System reagiert nicht mehr.
8287	1031	Neustart oder Herunterfahren für die geplante Wartung einer Anwendung.

module_name	hint	function_name
GDI32.dll	354	GetClipRgn
GDI32.dll	220	ExtSelectClipRgn
GDI32.dll	389	GetHFONT
GDI32.dll	398	GetMapMode
GDI32.dll	549	SetGraphicsMode
GDI32.dll	353	GetClipBox
GDI32.dll	75	CreateRectRgn
GDI32.dll	76	CreateRectRgnIndirect
GDI32.dll	553	SetLayout
GDI32.dll	335	GetBoundsRect
GDI32.dll	215	ExcludeClipRect
GDI32.dll	481	PlayEnhMetaFile
GDI32.dll	286	GdiGetBitmapBitsSize
GDI32.dll	71	CreatePen
GDI32.dll	148	Ellipse
GDI32.dll	53	CreateEllipticRgn
GDI32.dll	282	GdiFixUpHandle
GDI32.dll	429	GetTextCharacterExtra
GDI32.dll	572	SetTextCharacterExtra
GDI32.dll	357	GetCurrentObject
GDI32.dll	449	GetViewportOrgEx
GDI32.dll	576	SetViewportOrgEx
GDI32.dll	489	PolyPatBlt
GDI32.dll	41	CreateBrushIndirect
GDI32.dll	536	SetBoundsRect
GDI32.dll	36	CopyEnhMetaFileW
GDI32.dll	38	CopyMetaFileW
GDI32.dll	411	GetPaletteEntries
GDI32.dll	69	CreatePalette
GDI32.dll	561	SetPaletteEntries
GDI32.dll	606	bInitSystemAndFontsDirectoriesW
GDI32.dll	607	bMakePathNameW
GDI32.dll	608	cGetTTFFromFOT
GDI32.dll	413	GetPixel
GDI32.dll	221	ExtTextOutA
GDI32.dll	431	GetTextCharsetInfo
GDI32.dll	499	QueryFontAssocStatus
GDI32.dll	349	GetCharWidthInfo
GDI32.dll	345	GetCharWidthA
GDI32.dll	444	GetTextFaceW
GDI32.dll	338	GetCharABCWidthsA
GDI32.dll	342	GetCharABCWidthsW
GDI32.dll	538	SetBrushOrgEx
GDI32.dll	61	CreateFontIndirectW
GDI32.dll	206	EnumFontsW
GDI32.dll	443	GetTextFaceAliasW
GDI32.dll	446	GetTextMetricsW
GDI32.dll	432	GetTextColor
GDI32.dll	334	GetBkMode
GDI32.dll	448	GetViewportExtEx
GDI32.dll	451	GetWindowExtEx
GDI32.dll	287	GdiGetCharDimensions
GDI32.dll	288	GdiGetCodePage
GDI32.dll	430	GetTextCharset
GDI32.dll	310	GdiPrinterThunk
GDI32.dll	238	GdiAddFontResourceW
GDI32.dll	593	TranslateCharsetInfo
GDI32.dll	520	SaveDC
GDI32.dll	471	OffsetWindowOrgEx
GDI32.dll	513	RestoreDC
GDI32.dll	222	ExtTextOutW
GDI32.dll	407	GetObjectType
GDI32.dll	363	GetDIBits
GDI32.dll	50	CreateDIBSection
GDI32.dll	569	SetStretchBltMode
GDI32.dll	528	SelectPalette
GDI32.dll	500	RealizePalette
GDI32.dll	544	SetDIBits
GDI32.dll	47	CreateDCW
GDI32.dll	51	CreateDIBitmap
GDI32.dll	44	CreateCompatibleBitmap
GDI32.dll	532	SetBitmapBits
GDI32.dll	140	DeleteDC
GDI32.dll	327	GdiValidateHandle
GDI32.dll	262	GdiDllInitialize
GDI32.dll	80	CreateSolidBrush
GDI32.dll	422	GetStockObject
GDI32.dll	45	CreateCompatibleDC
GDI32.dll	248	GdiConvertBitmapV5
GDI32.dll	257	GdiCreateLocalEnhMetaFile
GDI32.dll	258	GdiCreateLocalMetaFilePict
GDI32.dll	421	GetRgnBox
GDI32.dll	33	CombineRgn
GDI32.dll	469	OffsetRgn
GDI32.dll	464	MirrorRgn
GDI32.dll	149	EnableEUDC
GDI32.dll	256	GdiConvertToDevmodeW
GDI32.dll	439	GetTextExtentPointA
GDI32.dll	441	GetTextExtentPointW
GDI32.dll	39	CreateBitmap
GDI32.dll	554	SetLayoutWidth
GDI32.dll	478	PatBlt
GDI32.dll	591	TextOutA
GDI32.dll	592	TextOutW
GDI32.dll	18	BitBlt
GDI32.dll	246	GdiConvertAndCheckDC
GDI32.dll	586	StretchBlt
GDI32.dll	567	SetRectRgn
GDI32.dll	315	GdiReleaseDC
GDI32.dll	251	GdiConvertEnhMetaFile
GDI32.dll	253	GdiConvertMetaFilePict
GDI32.dll	141	DeleteEnhMetaFile
GDI32.dll	142	DeleteMetaFile
GDI32.dll	143	DeleteObject
GDI32.dll	362	GetDIBColorTable
GDI32.dll	364	GetDeviceCaps
GDI32.dll	587	StretchDIBits
GDI32.dll	395	GetLayout
GDI32.dll	534	SetBkColor
GDI32.dll	573	SetTextColor
GDI32.dll	408	GetObjectW
GDI32.dll	333	GetBkColor
GDI32.dll	535	SetBkMode
GDI32.dll	527	SelectObject
GDI32.dll	456	IntersectClipRect
GDI32.dll	428	GetTextAlign
GDI32.dll	571	SetTextAlign
GDI32.dll	311	GdiProcessSetup
KERNEL32.dll	595	LocalSize
KERNEL32.dll	833	SizeofResource
KERNEL32.dll	585	LoadResource
KERNEL32.dll	225	FindResourceExW
KERNEL32.dll	224	FindResourceExA
KERNEL32.dll	377	GetModuleHandleW
KERNEL32.dll	137	DisableThreadLibraryCalls
KERNEL32.dll	318	GetCurrentThreadId
KERNEL32.dll	556	IsDBCSLeadByteEx
KERNEL32.dll	716	SearchPathW
KERNEL32.dll	186	ExpandEnvironmentStringsW
KERNEL32.dll	582	LoadLibraryExW
KERNEL32.dll	492	GlobalAddAtomW
KERNEL32.dll	442	GetSystemDirectoryW
KERNEL32.dll	272	GetComputerNameW
KERNEL32.dll	315	GetCurrentProcess
KERNEL32.dll	317	GetCurrentThread
KERNEL32.dll	183	ExitThread
KERNEL32.dll	339	GetExitCodeThread
KERNEL32.dll	108	CreateThread
KERNEL32.dll	527	HeapReAlloc
KERNEL32.dll	503	GlobalHandle
KERNEL32.dll	234	FoldStringW
KERNEL32.dll	834	Sleep
KERNEL32.dll	436	GetStringTypeW
KERNEL32.dll	433	GetStringTypeA
KERNEL32.dll	253	GetCPInfo
KERNEL32.dll	529	HeapSize
KERNEL32.dll	49	CloseHandle
KERNEL32.dll	862	UnmapViewOfFile
KERNEL32.dll	602	MapViewOfFile
KERNEL32.dll	81	CreateFileMappingW
KERNEL32.dll	347	GetFileSize
KERNEL32.dll	678	ReadFile
KERNEL32.dll	781	SetFileTime
KERNEL32.dll	349	GetFileTime
KERNEL32.dll	451	GetSystemWindowsDirectoryW
KERNEL32.dll	66	CopyFileW
KERNEL32.dll	611	MoveFileW
KERNEL32.dll	130	DeleteFileW
KERNEL32.dll	102	CreateProcessW
KERNEL32.dll	1	AddAtomA
KERNEL32.dll	2	AddAtomW
KERNEL32.dll	248	GetAtomNameW
KERNEL32.dll	247	GetAtomNameA
KERNEL32.dll	563	IsValidLocale
KERNEL32.dll	60	ConvertDefaultLocale
KERNEL32.dll	56	CompareStringW
KERNEL32.dll	314	GetCurrentDirectoryW
KERNEL32.dll	763	SetCurrentDirectoryW
KERNEL32.dll	952	lstrlenW
KERNEL32.dll	367	GetLogicalDrives
KERNEL32.dll	204	FindClose
KERNEL32.dll	218	FindNextFileW
KERNEL32.dll	211	FindFirstFileW
KERNEL32.dll	463	GetThreadLocale
KERNEL32.dll	651	ProcessIdToSessionId
KERNEL32.dll	316	GetCurrentProcessId
KERNEL32.dll	539	InterlockedCompareExchange
KERNEL32.dll	555	IsDBCSLeadByte
KERNEL32.dll	567	LCMapStringW
KERNEL32.dll	660	QueryPerformanceCounter
KERNEL32.dll	661	QueryPerformanceFrequency
KERNEL32.dll	468	GetTickCount
KERNEL32.dll	951	lstrlenA
KERNEL32.dll	496	GlobalFindAtomA
KERNEL32.dll	372	GetModuleFileNameA
KERNEL32.dll	374	GetModuleHandleA
KERNEL32.dll	491	GlobalAddAtomA
KERNEL32.dll	125	DelayLoadFailureHook
KERNEL32.dll	580	LoadLibraryA
KERNEL32.dll	448	GetSystemTimeAsFileTime
KERNEL32.dll	842	TerminateProcess
KERNEL32.dll	859	UnhandledExceptionFilter
KERNEL32.dll	822	SetUnhandledExceptionFilter
KERNEL32.dll	596	LocalUnlock
KERNEL32.dll	592	LocalLock
KERNEL32.dll	593	LocalReAlloc
KERNEL32.dll	246	GetACP
KERNEL32.dll	395	GetOEMCP
KERNEL32.dll	544	InterlockedIncrement
KERNEL32.dll	540	InterlockedDecrement
KERNEL32.dll	790	SetLastError
KERNEL32.dll	497	GlobalFindAtomW
KERNEL32.dll	493	GlobalAlloc
KERNEL32.dll	615	MultiByteToWideChar
KERNEL32.dll	507	GlobalReAlloc
KERNEL32.dll	360	GetLastError
KERNEL32.dll	408	GetProcAddress
KERNEL32.dll	583	LoadLibraryW
KERNEL32.dll	240	FreeLibrary
KERNEL32.dll	949	lstrcpynW
KERNEL32.dll	82	CreateFileW
KERNEL32.dll	917	WritePrivateProfileStringW
KERNEL32.dll	943	lstrcmpiW
KERNEL32.dll	772	SetEvent
KERNEL32.dll	893	WaitForMultipleObjectsEx
KERNEL32.dll	898	WideCharToMultiByte
KERNEL32.dll	499	GlobalFlags
KERNEL32.dll	364	GetLocaleInfoW
KERNEL32.dll	500	GlobalFree
KERNEL32.dll	373	GetModuleFileNameW
KERNEL32.dll	502	GlobalGetAtomNameW
KERNEL32.dll	501	GlobalGetAtomNameA
KERNEL32.dll	541	InterlockedExchange
KERNEL32.dll	126	DeleteAtom
KERNEL32.dll	586	LocalAlloc
KERNEL32.dll	495	GlobalDeleteAtom
KERNEL32.dll	590	LocalFree
KERNEL32.dll	508	GlobalSize
KERNEL32.dll	504	GlobalLock
KERNEL32.dll	511	GlobalUnlock
KERNEL32.dll	472	GetUserDefaultLCID
KERNEL32.dll	517	HeapAlloc
KERNEL32.dll	523	HeapFree
KERNEL32.dll	946	lstrcpyW
KERNEL32.dll	937	lstrcatW
KERNEL32.dll	405	GetPrivateProfileStringW
KERNEL32.dll	685	RegisterWaitForInputIdle
ntdll.dll	260	NtQueryVirtualMemory
ntdll.dll	850	RtlUnwind
ntdll.dll	717	RtlNtStatusToDosError
ntdll.dll	75	NlsAnsiCodePage
ntdll.dll	398	RtlAllocateHeap
ntdll.dll	1270	qsort
ntdll.dll	709	RtlMultiByteToUnicodeSize
ntdll.dll	54	LdrFlushAlternateResourceModules
ntdll.dll	727	RtlPcToFileHeader
ntdll.dll	1309	wcsrchr
ntdll.dll	264	NtRaiseHardError
ntdll.dll	676	RtlIsNameLegalDOS8Dot3
ntdll.dll	1285	strrchr
ntdll.dll	1274	sscanf
ntdll.dll	241	NtQueryKey
ntdll.dll	153	NtEnumerateValueKey
ntdll.dll	773	RtlRunEncodeUnicodeString
ntdll.dll	772	RtlRunDecodeUnicodeString
ntdll.dll	1228	_wcsicmp
ntdll.dll		CsrAllocateCaptureBuffer
ntdll.dll	2	CsrCaptureMessageBuffer
ntdll.dll	8	CsrFreeCaptureBuffer
ntdll.dll	210	NtOpenThreadToken
ntdll.dll	204	NtOpenProcessToken
ntdll.dll	237	NtQueryInformationToken
ntdll.dll	6	CsrClientCallServer
ntdll.dll	1267	memmove
ntdll.dll	98	NtCallbackReturn
ntdll.dll	844	RtlUnicodeToMultiByteSize
ntdll.dll	375	RtlActivateActivationContextUnsafeFast
ntdll.dll	481	RtlDeactivateActivationContextUnsafeFast
ntdll.dll	635	RtlInitializeCriticalSection
ntdll.dll	255	NtQuerySystemInformation
ntdll.dll	1290	swprintf
ntdll.dll	491	RtlDeleteCriticalSection
ntdll.dll	620	RtlImageNtHeader
ntdll.dll	7	CsrClientConnectToServer
ntdll.dll	362	NtYieldExecution
ntdll.dll	119	NtCreateKey
ntdll.dll	330	NtSetValueKey
ntdll.dll	145	NtDeleteValueKey
ntdll.dll	740	RtlQueryInformationActiveActivationContext
ntdll.dll	763	RtlReleaseActivationContext
ntdll.dll	576	RtlFreeHeap
ntdll.dll	1307	wcsncpy
ntdll.dll	1301	wcscmp
ntdll.dll	1314	wcstoul
ntdll.dll	1299	wcscat
ntdll.dll	624	RtlInitAnsiString
ntdll.dll	401	RtlAnsiStringToUnicodeString
ntdll.dll	473	RtlCreateUnicodeStringFromAsciiz
ntdll.dll	581	RtlFreeUnicodeString
ntdll.dll	193	NtOpenDirectoryObject
ntdll.dll	1200	_chkstk
ntdll.dll	1302	wcscpy
ntdll.dll	1305	wcsncat
ntdll.dll	320	NtSetSecurityObject
ntdll.dll	250	NtQuerySecurityObject
ntdll.dll	235	NtQueryInformationProcess
ntdll.dll	1312	wcstol
ntdll.dll	1304	wcslen
ntdll.dll	555	RtlFindActivationContextSectionString
ntdll.dll	708	RtlMultiByteToUnicodeN
ntdll.dll	843	RtlUnicodeToMultiByteN
ntdll.dll	690	RtlLeaveCriticalSection
ntdll.dll	530	RtlEnterCriticalSection
ntdll.dll	726	RtlOpenCurrentUser
ntdll.dll	151	NtEnumerateKey
ntdll.dll	199	NtOpenKey
ntdll.dll	103	NtClose
ntdll.dll	259	NtQueryValueKey
ntdll.dll	630	RtlInitUnicodeString
ntdll.dll	839	RtlUnicodeStringToInteger

ord	entry_va	function_name
1	0x18673	ActivateKeyboardLayout
2	0x21140	AdjustWindowRect
3	0x1e7ea	AdjustWindowRectEx
4	0x5d4e0	AlignRects
5	0x46414	AllowForegroundActivation
6	0x11e40	AllowSetForegroundWindow
7	0x12156	AnimateWindow
8	0x59c27	AnyPopup
9	0x21b0e	AppendMenuA
10	0x132ba	AppendMenuW
11	0x45f46	ArrangeIconicWindows
12	0x21e52	AttachThreadInput
13	0x1afb9	BeginDeferWindowPos
14	0x18fe9	BeginPaint
15	0x5ca7e	BlockInput
16	0x203a8	BringWindowToTop
17	0x5aebe	BroadcastSystemMessage
18	0x5aebe	BroadcastSystemMessageA
19	0x5ae97	BroadcastSystemMessageExA
20	0x13654	BroadcastSystemMessageExW
21	0xe666	BroadcastSystemMessageW
22	0x57df6	BuildReasonArray
23	0x1c5e4	CalcMenuBar
24	0x5b216	CallMsgFilter
25	0x5b216	CallMsgFilterA
26	0x1750e	CallMsgFilterW
27	0x1b3c6	CallNextHookEx
28	0x1a97d	CallWindowProcA
29	0x1a01e	CallWindowProcW
30	0x45f5e	CascadeChildWindows
31	0x55039	CascadeWindows
32	0x20487	ChangeClipboardChain
33	0x5b400	ChangeDisplaySettingsA
34	0x1384e	ChangeDisplaySettingsExA
35	0x495bd	ChangeDisplaySettingsExW
36	0x49623	ChangeDisplaySettingsW
37	0x3f298	ChangeMenuA
38	0x5525e	ChangeMenuW
39	0x18717	CharLowerA
40	0x18845	CharLowerBuffA
41	0x9e57	CharLowerBuffW
42	0x1b24c	CharLowerW
43	0x1c8b0	CharNextA
44	0x5984e	CharNextExA
45	0x1b1b0	CharNextW
46	0x1c8da	CharPrevA
47	0x59882	CharPrevExA
48	0x1d607	CharPrevW
49	0xaef1	CharToOemA
50	0x21626	CharToOemBuffA
51	0x56e31	CharToOemBuffW
52	0x13467	CharToOemW
53	0x8d2b	CharUpperA
54	0xae3f	CharUpperBuffA
55	0x9216	CharUpperBuffW
56	0x90d2	CharUpperW
57	0x14dca	CheckDlgButton
58	0x21abd	CheckMenuItem
59	0x553a2	CheckMenuRadioItem
60	0x4bde1	CheckRadioButton
61	0x1201f	ChildWindowFromPoint
62	0x1200b	ChildWindowFromPointEx
63	0x43c33	CliImmSetHotKey
64	0xa00a	ClientThreadSetup
65	0x19b60	ClientToScreen
66	0x2fdc5	ClipCursor
67	0x20265	CloseClipboard
68	0x1812f	CloseDesktop
69	0x45f7f	CloseWindow
70	0x17d18	CloseWindowStation
71	0x46c91	CopyAcceleratorTableA
72	0x3fc5e	CopyAcceleratorTableW
73	0xde72	CopyIcon
74	0x1dc14	CopyImage
75	0x1a042	CopyRect
76	0x2167f	CountClipboardFormats
77	0x43497	CreateAcceleratorTableA
78	0xd9bb	CreateAcceleratorTableW
79	0x1a94e	CreateCaret
80	0x47059	CreateCursor
81	0x45e37	CreateDesktopA
82	0x1162a	CreateDesktopW
83	0x29b28	CreateDialogIndirectParamA
84	0x1680b	CreateDialogIndirectParamAorW
85	0x2f01f	CreateDialogIndirectParamW
86	0x2c7db	CreateDialogParamA
87	0xea3b	CreateDialogParamW
88	0x470bc	CreateIcon
89	0x47134	CreateIconFromResource
90	0xd354	CreateIconFromResourceEx
91	0xc86c	CreateIconIndirect
92	0x3fdc0	CreateMDIWindowA
93	0x2f810	CreateMDIWindowW
94	0x1f306	CreateMenu
95	0xf601	CreatePopupMenu
96	0x216e8	CreateSystemThreads
97	0x1e4a9	CreateWindowExA
98	0x1d0a3	CreateWindowExW
99	0x4642e	CreateWindowStationA
100	0x113dd	CreateWindowStationW
101	0x1367b	CsrBroadcastSystemMessageExW
102	0xe9e2	CtxInitUser32
103	0x5ad84	DdeAbandonTransaction
104	0x51309	DdeAccessData
105	0x510d1	DdeAddData
106	0x5a6a2	DdeClientTransaction
107	0x51d8d	DdeCmpStringHandles
108	0x481c3	DdeConnect
109	0x484de	DdeConnectList
110	0x51769	DdeCreateDataHandle
111	0x51e43	DdeCreateStringHandleA
112	0x10447	DdeCreateStringHandleW
113	0x483c4	DdeDisconnect
114	0x4843b	DdeDisconnectList
115	0x45212	DdeEnableCallback
116	0x518e2	DdeFreeDataHandle
117	0x51f70	DdeFreeStringHandle
118	0x511f1	DdeGetData
119	0x4a853	DdeGetLastError
120	0x5caa6	DdeGetQualityOfService
121	0x4a894	DdeImpersonateClient
122	0x4a8f6	DdeInitializeA
123	0x106d7	DdeInitializeW
124	0x5200a	DdeKeepStringHandle
125	0x1085e	DdeNameService
126	0x5a3a5	DdePostAdvise
127	0x5aba6	DdeQueryConvInfo
128	0x479ac	DdeQueryNextServer
129	0x52096	DdeQueryStringA
130	0x520b3	DdeQueryStringW
131	0x4826b	DdeReconnect
132	0x5caba	DdeSetQualityOfService
133	0x5ad29	DdeSetUserHandle
134	0x5137b	DdeUnaccessData
135	0x4a732	DdeUninitialize
136	0x2e577	DefDlgProcA
137	0x13d3a	DefDlgProcW
138	0x3f965	DefFrameProcA
139	0x20833	DefFrameProcW
140	0x3f9b4	DefMDIChildProcA
141	0x20a47	DefMDIChildProcW
142	0x468dd	DefRawInputProc
143	0x1c17e	DefWindowProcA
144	0x18d20	DefWindowProcW
145	0x1afdb	DeferWindowPos
146	0x1ced3	DeleteMenu
147	0x302c0	DeregisterShellHookWindow
148	0x2fe8d	DestroyAcceleratorTable
149	0x19c0e	DestroyCaret
150	0x1d312	DestroyCursor
151	0x1d312	DestroyIcon
152	0x1d39d	DestroyMenu
153	0x57ed8	DestroyReasons
154	0x1b19c	DestroyWindow
155	0x4a0f8	DeviceEventWorker
156	0x46d7d	DialogBoxIndirectParamA
157	0x149d0	DialogBoxIndirectParamAorW
158	0x22072	DialogBoxIndirectParamW
159	0x2b144	DialogBoxParamA
160	0x147ab	DialogBoxParamW
161	0x46421	DisableProcessWindowsGhosting
162	0x96b8	DispatchMessageA
163	0x8a01	DispatchMessageW
164	0x49f91	DisplayExitWindowsWarnings
165	0x538df	DlgDirListA
166	0x47599	DlgDirListComboBoxA
167	0x47626	DlgDirListComboBoxW
168	0x5396d	DlgDirListW
169	0x47657	DlgDirSelectComboBoxExA
170	0x47543	DlgDirSelectComboBoxExW
171	0x53afe	DlgDirSelectExA
172	0x53b64	DlgDirSelectExW
173	0x5cace	DragDetect
174	0x5cae2	DragObject
175	0x5caf6	DrawAnimatedRects
176	0x56d9f	DrawCaption
177	0x5b2d0	DrawCaptionTempA
178	0x3f339	DrawCaptionTempW
179	0x1fbf6	DrawEdge
180	0x1f94f	DrawFocusRect
181	0x229c4	DrawFrame
182	0x2e940	DrawFrameControl
183	0x2d06c	DrawIcon
184	0x1cb84	DrawIconEx
185	0x3f69c	DrawMenuBar
186	0x5536d	DrawMenuBarTemp
187	0x3f100	DrawStateA
188	0x145bb	DrawStateW
189	0x2c702	DrawTextA
190	0x2c739	DrawTextExA
191	0x1b415	DrawTextExW
192	0x1d7e2	DrawTextW
193	0x23000	EditWndProc
194	0x20d96	EmptyClipboard
195	0x1d2c4	EnableMenuItem
196	0x58005	EnableScrollBar
197	0x19849	EnableWindow
198	0x1af8d	EndDeferWindowPos
199	0x14a4e	EndDialog
200	0x5cb5a	EndMenu
201	0x18ffd	EndPaint
202	0x4a0a5	EndTask
203	0x5769f	EnterReaderModeHelper
204	0x1b0f0	EnumChildWindows
205	0x2e53d	EnumClipboardFormats
206	0x1851a	EnumDesktopWindows
207	0x2234b	EnumDesktopsA
208	0x1853b	EnumDesktopsW
209	0x18a74	EnumDisplayDevicesA
210	0xe03c	EnumDisplayDevicesW
211	0x1a77b	EnumDisplayMonitors
212	0x13a67	EnumDisplaySettingsA
213	0x138f3	EnumDisplaySettingsExA
214	0x13563	EnumDisplaySettingsExW
215	0x1362a	EnumDisplaySettingsW
216	0x455d9	EnumPropsA
217	0x45613	EnumPropsExA
218	0x45631	EnumPropsExW
219	0x455f6	EnumPropsW
220	0x1f539	EnumThreadWindows
221	0x2232e	EnumWindowStationsA
222	0x4564f	EnumWindowStationsW
223	0x1a5ae	EnumWindows
224	0x19e81	EqualRect
225	0x20251	ExcludeUpdateRgn
226	0x4a275	ExitWindowsEx
227	0x19c2f	FillRect
228	0x182e1	FindWindowA
229	0x2214a	FindWindowExA
230	0xe0e3	FindWindowExW
231	0x1c9c3	FindWindowW
232	0x45fc4	FlashWindow
233	0x5cb80	FlashWindowEx
234	0x1f92a	FrameRect
235	0x4ba77	FreeDDElParam
236	0x1c2e8	GetActiveWindow
237	0x5b3dc	GetAltTabInfo
238	0x5b3dc	GetAltTabInfoA
239	0x20d09	GetAltTabInfoW
240	0x1af79	GetAncestor
241	0x8ed6	GetAppCompatFlags2
242	0x1cdd4	GetAppCompatFlags
243	0x1a78f	GetAsyncKeyState
244	0x94da	GetCapture
245	0x1a928	GetCaretBlinkTime
246	0x1f6a1	GetCaretPos
247	0x2ebff	GetClassInfoA
248	0xdd58	GetClassInfoExA
249	0xdebc	GetClassInfoExW
250	0x1e81e	GetClassInfoW
251	0x1f4f1	GetClassLongA
252	0x19ae9	GetClassLongW
253	0x1f45f	GetClassNameA
254	0x19d12	GetClassNameW
255	0x4535c	GetClassWord
256	0x1908e	GetClientRect
257	0x5cba6	GetClipCursor
258	0x20dba	GetClipboardData
259	0x21290	GetClipboardFormatNameA
260	0x4957f	GetClipboardFormatNameW
261	0x20da8	GetClipboardOwner
262	0x1f17a	GetClipboardSequenceNumber
263	0x5cb94	GetClipboardViewer
264	0x5cbba	GetComboBoxInfo
265	0x1a91b	GetCursor
266	0x147f8	GetCursorFrameInfo
267	0x5cbce	GetCursorInfo
268	0x1974e	GetCursorPos
269	0x86c7	GetDC
270	0x1c595	GetDCEx
271	0x1d1d2	GetDesktopWindow
272	0x46003	GetDialogBaseUnits
273	0x1af1b	GetDlgCtrlID
274	0x1436e	GetDlgItem
275	0x4bc8b	GetDlgItemInt
276	0x5b05e	GetDlgItemTextA
277	0x14305	GetDlgItemTextW
278	0x1d86b	GetDoubleClickTime
279	0x198c8	GetFocus
280	0x19823	GetForegroundWindow
281	0x17f28	GetGUIThreadInfo
282	0x5cbe2	GetGuiResources
283	0x1d427	GetIconInfo
284	0x46022	GetInputDesktop
285	0x1f64e	GetInputState
286	0x5cc0a	GetInternalWindowPos
287	0x521a8	GetKBCodePage
288	0x3f6b4	GetKeyNameTextA
289	0x4958f	GetKeyNameTextW
290	0x19ed9	GetKeyState
291	0x19bf6	GetKeyboardLayout
292	0x19c1b	GetKeyboardLayoutList
293	0x43631	GetKeyboardLayoutNameA
294	0x21481	GetKeyboardLayoutNameW
295	0x1d226	GetKeyboardState
296	0x211db	GetKeyboardType
297	0x2157a	GetLastActivePopup
298	0x94f4	GetLastInputInfo
299	0x5cfc6	GetLayeredWindowAttributes
300	0x5cc32	GetListBoxInfo
301	0x214ba	GetMenu
302	0x5cc46	GetMenuBarInfo
303	0x402f9	GetMenuCheckMarkDimensions
304	0x552ff	GetMenuContextHelpId
305	0xf667	GetMenuDefaultItem
306	0x46725	GetMenuInfo
307	0x1ef1c	GetMenuItemCount
308	0x3f1c8	GetMenuItemID
309	0x1f0ad	GetMenuItemInfoA
310	0xf72a	GetMenuItemInfoW
311	0x5cc6e	GetMenuItemRect
312	0xf967	GetMenuState
313	0x3f24e	GetMenuStringA
314	0x464e4	GetMenuStringW
315	0x1772b	GetMessageA
316	0x468b8	GetMessageExtraInfo
317	0x1996c	GetMessagePos
318	0x19de0	GetMessageTime
319	0x91c6	GetMessageW
320	0x1a84a	GetMonitorInfoA
321	0x1a6d9	GetMonitorInfoW
322	0x5cc82	GetMouseMovePointsEx
323	0x4bf27	GetNextDlgGroupItem
324	0x137c3	GetNextDlgTabItem
325	0x21691	GetOpenClipboardWindow
326	0x1910f	GetParent
327	0x5cc96	GetPriorityClipboardFormat
328	0x463e4	GetProcessDefaultLayout
329	0x9195	GetProcessWindowStation
330	0x4612d	GetProgmanWindow
331	0x20042	GetPropA
332	0x194b3	GetPropW
333	0x1ae46	GetQueueStatus
334	0x50dcd	GetRawInputBuffer
335	0x5ccbe	GetRawInputData
336	0x5af0d	GetRawInputDeviceInfoA
337	0x46558	GetRawInputDeviceInfoW
338	0x5cce6	GetRawInputDeviceList
339	0x57f24	GetReasonTitleFromReasonCode
340	0x5ccfa	GetRegisteredRawInputDevices
341	0x1dfb4	GetScrollBarInfo
342	0x1dfe2	GetScrollInfo
343	0x1f704	GetScrollPos
344	0x1f787	GetScrollRange
345	0x9252	GetShellWindow
346	0x1d896	GetSubMenu
347	0x8e78	GetSysColor
348	0x8eab	GetSysColorBrush
349	0x1b222	GetSystemMenu
350	0x8f9c	GetSystemMetrics
351	0x4a6a1	GetTabbedTextExtentA
352	0x4a677	GetTabbedTextExtentW
353	0x4370d	GetTaskmanWindow
354	0x9a51	GetThreadDesktop
355	0x1c581	GetTitleBarInfo
356	0x1f25b	GetTopWindow
357	0x1a8c9	GetUpdateRect
358	0x1f5ec	GetUpdateRgn
359	0x21300	GetUserObjectInformationA
360	0x8d17	GetUserObjectInformationW
361	0x45b65	GetUserObjectSecurity
362	0x45b9b	GetWinStationInfo
363	0x19655	GetWindow
364	0x46180	GetWindowContextHelpId
365	0x9021	GetWindowDC
366	0x1c49c	GetWindowInfo
367	0x945d	GetWindowLongA
368	0x88a6	GetWindowLongW
369	0x5aee4	GetWindowModuleFileName
370	0x5aee4	GetWindowModuleFileNameA
371	0x4652f	GetWindowModuleFileNameW
372	0x203c7	GetWindowPlacement
373	0x190b4	GetWindowRect
374	0xe443	GetWindowRgn
375	0x1d007	GetWindowRgnBox
376	0x2216b	GetWindowTextA
377	0x3f18b	GetWindowTextLengthA
378	0x17836	GetWindowTextLengthW
379	0x1a5cd	GetWindowTextW
380	0x8a80	GetWindowThreadProcessId
381	0x2030c	GetWindowWord
382	0x45b05	GrayStringA
383	0x45b35	GrayStringW
384	0x1b086	HideCaret
385	0x5cd22	HiliteMenuItem
386	0x5b4c0	IMPGetIMEA
387	0x5b4af	IMPGetIMEW
388	0x5b4e2	IMPQueryIMEA
389	0x5b4d1	IMPQueryIMEW
390	0x5b504	IMPSetIMEA
391	0x5b4f3	IMPSetIMEW
392	0x5cd36	ImpersonateDdeClientWindow
393	0x17296	InSendMessage
394	0x1ae83	InSendMessageEx
395	0x198d5	InflateRect
396	0x46646	InitializeLpkHooks
397	0x56fc7	InitializeWin32EntryTable
398	0x2ed26	InsertMenuA
399	0x3f710	InsertMenuItemA
400	0xf5c8	InsertMenuItemW
401	0xf60e	InsertMenuW
402	0x1c5a9	InternalGetWindowText
403	0x18f1f	IntersectRect
404	0x18fd5	InvalidateRect
405	0x1cdfe	InvalidateRgn
406	0x3fc72	InvertRect
407	0x2e5e6	IsCharAlphaA
408	0x3f469	IsCharAlphaNumericA
409	0x11ac2	IsCharAlphaNumericW
410	0x1d683	IsCharAlphaW
411	0x2b889	IsCharLowerA
412	0x3f3b2	IsCharLowerW
413	0x2707e	IsCharUpperA
414	0x5a1df	IsCharUpperW
415	0x970e	IsChild
416	0x1f166	IsClipboardFormatAvailable
417	0x2c689	IsDialogMessage
418	0x2c689	IsDialogMessageA
419	0x17424	IsDialogMessageW
420	0x14dfa	IsDlgButtonChecked
421	0x5a19f	IsGUIThread
422	0x59c61	IsHungAppWindow
423	0x197ff	IsIconic
424	0x21368	IsMenu
425	0x198fe	IsRectEmpty
426	0x1b0cf	IsServerSideWindow
427	0xb1a5	IsWinEventHookInstalled
428	0x19313	IsWindow
429	0x1977a	IsWindowEnabled
430	0x1b126	IsWindowInDestroy
431	0x19f72	IsWindowUnicode
432	0x19e3d	IsWindowVisible
433	0x19c8a	IsZoomed
434	0x460cc	KillSystemTimer
435	0x8c42	KillTimer
436	0x21553	LoadAcceleratorsA
437	0x1ee76	LoadAcceleratorsW
438	0x1473c	LoadBitmapA
439	0x10242	LoadBitmapW
440	0x1d33e	LoadCursorA
441	0x43ccb	LoadCursorFromFileA
442	0x43cac	LoadCursorFromFileW
443	0x9d69	LoadCursorW
444	0x1e8f6	LoadIconA
445	0x1e8bc	LoadIconW
446	0x17c08	LoadImageA
447	0x17b97	LoadImageW
448	0x46262	LoadKeyboardLayoutA
449	0x4623a	LoadKeyboardLayoutEx
450	0x21464	LoadKeyboardLayoutW
451	0xedd8	LoadLocalFonts
452	0x3fa83	LoadMenuA
453	0x1ebbf	LoadMenuIndirectA
454	0x1ebbf	LoadMenuIndirectW
455	0x1eb48	LoadMenuW
456	0xecb7	LoadRemoteFonts
457	0x1c908	LoadStringA
458	0x9e36	LoadStringW
459	0xde5a	LockSetForegroundWindow
460	0xf3c4	LockWindowStation
461	0x29636	LockWindowUpdate
462	0x5cd5e	LockWorkStation
463	0x47116	LookupIconIdFromDirectory
464	0xc4da	LookupIconIdFromDirectoryEx
465	0xadad	MBToWCSEx
466	0x55d55	MB_GetString
467	0x4be4c	MapDialogRect
468	0x1feea	MapVirtualKeyA
469	0x5b097	MapVirtualKeyExA
470	0x4959f	MapVirtualKeyExW
471	0x4029e	MapVirtualKeyW
472	0x19507	MapWindowPoints
473	0x5cd70	MenuItemFromPoint
474	0x46873	MenuWindowProcA
475	0x4682e	MenuWindowProcW
476	0x21f7b	MessageBeep
477	0x407ea	MessageBoxA
478	0x4085c	MessageBoxExA
479	0x40838	MessageBoxExW
480	0x2a082	MessageBoxIndirectA
481	0x564d5	MessageBoxIndirectW
482	0x56406	MessageBoxTimeoutA
483	0x56383	MessageBoxTimeoutW
484	0x56534	MessageBoxW
485	0x3f20b	ModifyMenuA
486	0xf51f	ModifyMenuW
487	0x1abf5	MonitorFromPoint
488	0x1c713	MonitorFromRect
489	0x1a679	MonitorFromWindow
490	0x1b29e	MoveWindow
491	0x9689	MsgWaitForMultipleObjects
492	0x9645	MsgWaitForMultipleObjectsEx
493	0x199cb	NotifyWinEvent
494	0x4023c	OemKeyScan
495	0x200d7	OemToCharA
496	0x20116	OemToCharBuffA
497	0x402bb	OemToCharBuffW
498	0x56e76	OemToCharW
499	0x19011	OffsetRect
500	0x20277	OpenClipboard
501	0x22369	OpenDesktopA
502	0x18559	OpenDesktopW
503	0x460e7	OpenIcon
504	0xeca3	OpenInputDesktop
505	0x221e1	OpenWindowStationA
506	0x45e0b	OpenWindowStationW
507	0x4b961	PackDDElParam
508	0x1864b	PaintDesktop
509	0x2151e	PaintMenuBar
510	0x1a340	PeekMessageA
511	0x929b	PeekMessageW
512	0x1aafd	PostMessageA
513	0x8ccb	PostMessageW
514	0x1ca5a	PostQuitMessage
515	0x177c5	PostThreadMessageA
516	0x177b8	PostThreadMessageW
517	0x13810	PrintWindow
518	0x50a09	PrivateExtractIconExA
519	0xd3c3	PrivateExtractIconExW
520	0x509af	PrivateExtractIconsA
521	0xccfc	PrivateExtractIconsW
522	0x5ce72	PrivateSetDbgTag
523	0x5cefe	PrivateSetRipFlags
524	0x19719	PtInRect
525	0x5cdbe	QuerySendMessage
526	0x5cdd2	QueryUserCounters
527	0x5cde6	RealChildWindowFromPoint
528	0x5b36b	RealGetWindowClass
529	0x5b36b	RealGetWindowClassA
530	0x495f6	RealGetWindowClassW
531	0x57716	ReasonCodeNeedsBugID
532	0x576ff	ReasonCodeNeedsComment
533	0x496fd	RecordShutdownReason
534	0x19944	RedrawWindow
535	0x1ea5e	RegisterClassA
536	0x17c39	RegisterClassExA
537	0xaf7f	RegisterClassExW
538	0xa39a	RegisterClassW
539	0x8e28	RegisterClipboardFormatA
540	0xaf34	RegisterClipboardFormatW
541	0x11b3b	RegisterDeviceNotificationA
542	0xe8b9	RegisterDeviceNotificationW
543	0xebb3	RegisterHotKey
544	0x12b73	RegisterLogonProcess
545	0x11efc	RegisterMessagePumpHook
546	0x5ce0e	RegisterRawInputDevices
547	0x11fae	RegisterServicesProcess
548	0xe104	RegisterShellHookWindow
549	0x46198	RegisterSystemThread
550	0x5ce22	RegisterTasklist
551	0x11cff	RegisterUserApiHook
552	0x8e28	RegisterWindowMessageA
553	0xaf34	RegisterWindowMessageW
554	0x1c37a	ReleaseCapture
555	0x869d	ReleaseDC
556	0xf716	RemoveMenu
557	0x20094	RemovePropA
558	0x1c076	RemovePropW
559	0x186f8	ReplyMessage
560	0x5ce36	ResolveDesktopForWOW
561	0x4badb	ReuseDDElParam
562	0x197a0	ScreenToClient
563	0x54dfc	ScrollChildren
564	0xb1dd	ScrollDC
565	0x1ff39	ScrollWindow
566	0x20187	ScrollWindowEx
567	0x2c2e7	SendDlgItemMessageA
568	0x173cc	SendDlgItemMessageW
569	0x5b49e	SendIMEMessageExA
570	0x5b48d	SendIMEMessageExW
571	0x1f140	SendInput
572	0x1f3c2	SendMessageA
573	0x5b129	SendMessageCallbackA
574	0x1d6db	SendMessageCallbackW
575	0x1fb6b	SendMessageTimeoutA
576	0x1cdaa	SendMessageTimeoutW
577	0x1929a	SendMessageW
578	0x43948	SendNotifyMessageA
579	0x1d64f	SendNotifyMessageW
580	0x17822	SetActiveWindow
581	0x1c35e	SetCapture
582	0x21174	SetCaretBlinkTime
583	0x1a962	SetCaretPos
584	0x1fe71	SetClassLongA
585	0xe14b	SetClassLongW
586	0x5ce4a	SetClassWord
587	0x20f9e	SetClipboardData
588	0x20473	SetClipboardViewer
589	0x1865f	SetConsoleReserveKeys
590	0x19930	SetCursor
591	0x5ce5e	SetCursorContents
592	0x461b3	SetCursorPos
593	0x462eb	SetDebugErrorLevel
594	0x45705	SetDeskWallpaper
595	0x4bc09	SetDlgItemInt
596	0x2c972	SetDlgItemTextA
597	0x1736c	SetDlgItemTextW
598	0x461ce	SetDoubleClickTime
599	0x1b112	SetFocus
600	0x142ed	SetForegroundWindow
601	0x5ce9a	SetInternalWindowPos
602	0x202b5	SetKeyboardState
603	0x56fb0	SetLastErrorEx
604	0x1ce12	SetLayeredWindowAttributes
605	0x11fef	SetLogonNotifyWindow
606	0x3f3f6	SetMenu
607	0x5cec2	SetMenuContextHelpId
608	0xf5b4	SetMenuDefaultItem
609	0x5523c	SetMenuInfo
610	0x3fab2	SetMenuItemBitmaps
611	0x5ae5e	SetMenuItemInfoA
612	0x13281	SetMenuItemInfoW
613	0x468c5	SetMessageExtraInfo
614	0x2e1eb	SetMessageQueue
615	0x1c7f9	SetParent
616	0x463fc	SetProcessDefaultLayout
617	0x17d40	SetProcessWindowStation
618	0x46168	SetProgmanWindow
619	0x20000	SetPropA
620	0x1c0b9	SetPropW
621	0x18fa6	SetRect
622	0x19cba	SetRectEmpty
623	0x9056	SetScrollInfo
624	0x1f750	SetScrollPos
625	0x1f99b	SetScrollRange
626	0x46114	SetShellWindow
627	0xff92	SetShellWindowEx
628	0x56582	SetSysColors
629	0x56ebe	SetSysColorsTemp
630	0x5670b	SetSystemCursor
631	0x2f9e3	SetSystemMenu
632	0x5cf3a	SetSystemTimer
633	0x10260	SetTaskmanWindow
634	0x17d2c	SetThreadDesktop
635	0x8c2e	SetTimer
636	0x5ceea	SetUserObjectInformationA
637	0x5ceea	SetUserObjectInformationW
638	0x113b3	SetUserObjectSecurity
639	0x217f7	SetWinEventHook
640	0x2fdd9	SetWindowContextHelpId
641	0x1c29d	SetWindowLongA
642	0x1c2bb	SetWindowLongW
643	0xde46	SetWindowPlacement
644	0x199f3	SetWindowPos
645	0x1e528	SetWindowRgn
646	0xf338	SetWindowStationUser
647	0x1f56b	SetWindowTextA
648	0x1960e	SetWindowTextW
649	0x203db	SetWindowWord
650	0x2ed69	SetWindowsHookA
651	0x21211	SetWindowsHookExA
652	0x1820f	SetWindowsHookExW
653	0x11b8a	SetWindowsHookW
654	0x1b09a	ShowCaret
655	0x1fa6e	ShowCursor
656	0x461e6	ShowOwnedPopups
657	0x1f2f2	ShowScrollBar
658	0x40101	ShowStartGlass
659	0x1af56	ShowWindow
660	0x1337d	ShowWindowAsync
661	0x2a2df	SoftModalMessageBox
662	0x10138	SubtractRect
663	0x46201	SwapMouseButton
664	0xfe6e	SwitchDesktop
665	0x4581c	SwitchToThisWindow
666	0x1deb2	SystemParametersInfoA
667	0x9f06	SystemParametersInfoW
668	0x4a5e5	TabbedTextOutA
669	0x4a5b6	TabbedTextOutW
670	0x46219	TileChildWindows
671	0x55215	TileWindows
672	0x45721	ToAscii
673	0x4577e	ToAsciiEx
674	0x566a8	ToUnicode
675	0x566d9	ToUnicodeEx
676	0x1c80d	TrackMouseEvent
677	0x5531e	TrackPopupMenu
678	0x5cf62	TrackPopupMenuEx
679	0x1fac4	TranslateAccelerator
680	0x1fac4	TranslateAcceleratorA
681	0x941e	TranslateAcceleratorW
682	0x1fb2f	TranslateMDISysAccel
683	0x8bf6	TranslateMessage
684	0x8a19	TranslateMessageEx
685	0x218ac	UnhookWinEvent
686	0x11ba5	UnhookWindowsHook
687	0x1d5f3	UnhookWindowsHookEx
688	0x1a0f1	UnionRect
689	0x462c0	UnloadKeyboardLayout
690	0xdcd9	UnlockWindowStation
691	0x4b9c5	UnpackDDElParam
692	0x189a3	UnregisterClassA
693	0x9aa4	UnregisterClassW
694	0xe8d7	UnregisterDeviceNotification
695	0x5cf8a	UnregisterHotKey
696	0xfe08	UnregisterMessagePumpHook
697	0xedfb	UnregisterUserApiHook
698	0x1acf3	UpdateLayeredWindow
699	0x119c8	UpdatePerUserSystemParameters
700	0x1aeab	UpdateWindow
701	0x2d395	User32InitializeImmEntryTable
702	0xb217	UserClientDllInitialize
703	0x5cfda	UserHandleGrantAccess
704	0x1bc25	UserLpkPSMTextOut
705	0x4a3fb	UserLpkTabbedTextOut
706	0x1fa56	UserRealizePalette
707	0x43748	UserRegisterWowHandlers
708	0x5b427	VRipOutput
709	0x5b427	VTagOutput
710	0x1fbbd	ValidateRect
711	0x1f67e	ValidateRgn
712	0x2e4c0	VkKeyScanA
713	0x5b18b	VkKeyScanExA
714	0x1f1bc	VkKeyScanExW
715	0x2e1f6	VkKeyScanW
716	0x1d446	WCSToMBEx
717	0x5b46b	WINNLSEnableIME
718	0x5b47c	WINNLSGetEnableStatus
719	0x23785	WINNLSGetIMEHotkey
720	0x3faf5	WaitForInputIdle
721	0x940c	WaitMessage
722	0x5d002	Win32PoolAllocationStats
723	0x2ee5d	WinHelpA
724	0x51bd4	WinHelpW
725	0x1fa3e	WindowFromDC
726	0x19766	WindowFromPoint
727	0x56783	keybd_event
728	0x5673f	mouse_event
729	0xa8ad	wsprintfA
730	0xa9b6	wsprintfW
731	0xa610	wvsprintfA
732	0xa9d1	wvsprintfW

module_name	USER32.dll
flags	0
timestamp	2008-04-13 19:22:34
version	0.0
ordinal_base	1
nFunctions	732
nNames	732
Names(732)	0x4498
Functions(732)	0x3928
NameOrdinals(732)	0x5008

StringTable 040704B0

CompanyName	Microsoft Corporation
FileDescription	Client-DLL für Windows XP USER-API
FileVersion	5.1.2600.5512 (xpsp.080413-2105)
InternalName	user32
LegalCopyright	© Microsoft Corporation. Alle Rechte vorbehalten.
OriginalFilename	user32
ProductName	Betriebssystem Microsoft® Windows®
ProductVersion	5.1.2600.5512

VS_FIXEDFILEINFO

FileVersion	5.1.2600.5512
ProductVersion	5.1.2600.5512
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	2
FileSubtype	0

show previews

offset	size	type	comment
0	580096	DLL	04/14/2008 02:21:43	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[?] can't find file_offset of VA 0x270

user32.dll-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040704B0

VS_FIXEDFILEINFO

user32.dll
-