| filename | user32.dll | |
|---|---|---|
| size | 1361408 (0x14c600) | |
| md5 | c7099d6a46b880ee194f7a4473d71e10 | |
| type | PE32 executable (DLL) (GUI) Intel 80386, for MS Windows | |
| mimetype | application/x-dosexec | |
| clamav | OK | |
| virustotal | → scan with virustotal.com | |
| histogram | ||
MZ Header
| signature | MZ |
| bytes_in_last_block | 0x90 |
| blocks_in_file | 3 |
| num_relocs | 0 |
| header_paragraphs | 4 |
| min_extra_paragraphs | 0 |
| max_extra_paragraphs | 0xffff |
| ss | 0 |
| sp | 0xb8 |
| checksum | 0 |
| ip | 0 |
| cs | 0 |
| reloc_table_offset | 0x40 |
| overlay_number | 0 |
| reserved0 | 0 |
| oem_id | 0 |
| oem_info | 0 |
| reserved2 | 0 |
| reserved3 | 0 |
| reserved4 | 0 |
| reserved5 | 0 |
| reserved6 | 0 |
| lfanew | 0x100 |
Rich Header
| lib id | version | times used |
|---|---|---|
| 207 | 65501 | 1 |
| 147 | 30729 | 52 |
| 1 | 0 | 383 |
| 203 | 65501 | 9 |
| 206 | 65501 | 10 |
| 202 | 65501 | 1 |
| 205 | 65501 | 8 |
| 215 | 65501 | 117 |
| 201 | 65501 | 1 |
| 204 | 65501 | 1 |
DOS stub
00000000: 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 |........!..L.!Th| 00000010: 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f |is program canno| 00000020: 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 |t be run in DOS | 00000030: 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 |mode....$.......|
PE Header
Packer / Compiler
Sections
Data Directory
| module_name | hint | ord | function_name |
|---|---|---|---|
| ntdll.dll | 671 | RtlAllocateHeap | |
| ntdll.dll | 992 | RtlImageNtHeader | |
| ntdll.dll | 175 | NlsAnsiCodePage | |
| ntdll.dll | 698 | RtlCaptureContext | |
| ntdll.dll | 2065 | _wtoi | |
| ntdll.dll | 2166 | wcsrchr | |
| ntdll.dll | 2163 | wcsncpy_s | |
| ntdll.dll | 2095 | iswspace | |
| ntdll.dll | 2109 | qsort | |
| ntdll.dll | 405 | NtPowerInformation | |
| ntdll.dll | 1123 | RtlMultiByteToUnicodeSize | |
| ntdll.dll | 111 | LdrFlushAlternateResourceModules | |
| ntdll.dll | 474 | NtRaiseHardError | |
| ntdll.dll | 2160 | wcsncat_s | |
| ntdll.dll | 1071 | RtlIsNameLegalDOS8Dot3 | |
| ntdll.dll | 2116 | sscanf_s | |
| ntdll.dll | 2132 | strrchr | |
| ntdll.dll | 2122 | strcpy_s | |
| ntdll.dll | 1293 | RtlSizeHeap | |
| ntdll.dll | 977 | RtlGetThreadLangIdByIndex | |
| ntdll.dll | 1235 | RtlRunEncodeUnicodeString | |
| ntdll.dll | 1234 | RtlRunDecodeUnicodeString | |
| ntdll.dll | 1199 | RtlReAllocateHeap | |
| ntdll.dll | 1134 | RtlNtStatusToDosError | |
| ntdll.dll | 27 | CsrFreeCaptureBuffer | |
| ntdll.dll | 25 | CsrClientCallServer | |
| ntdll.dll | 20 | CsrAllocateMessagePointer | |
| ntdll.dll | 19 | CsrAllocateCaptureBuffer | |
| ntdll.dll | 391 | NtOpenProcessToken | |
| ntdll.dll | 399 | NtOpenThreadToken | |
| ntdll.dll | 920 | RtlFreeSid | |
| ntdll.dll | 437 | NtQueryInformationToken | |
| ntdll.dll | 668 | RtlAllocateAndInitializeSid | |
| ntdll.dll | 723 | RtlCompareUnicodeString | |
| ntdll.dll | 2105 | memmove | |
| ntdll.dll | 227 | NtCallbackReturn | |
| ntdll.dll | 1232 | RtlRetrieveNtUserPfn | |
| ntdll.dll | 1022 | RtlInitializeNtUserPfn | |
| ntdll.dll | 415 | NtProtectVirtualMemory | |
| ntdll.dll | 2053 | _wcsicmp | |
| ntdll.dll | 2030 | _stricmp | |
| ntdll.dll | 953 | RtlGetIntegerAtom | |
| ntdll.dll | 804 | RtlDeleteCriticalSection | |
| ntdll.dll | 1229 | RtlResetNtUserPfn | |
| ntdll.dll | 1162 | RtlQueryElevationFlags | |
| ntdll.dll | 461 | NtQuerySystemInformation | |
| ntdll.dll | 1014 | RtlInitializeCriticalSection | |
| ntdll.dll | 1341 | RtlUnicodeToMultiByteSize | |
| ntdll.dll | 1076 | RtlIsThreadWithinLoaderCallout | |
| ntdll.dll | 612 | NtYieldExecution | |
| ntdll.dll | 1168 | RtlQueryInformationActiveActivationContext | |
| ntdll.dll | 299 | NtDeleteValueKey | |
| ntdll.dll | 564 | NtSetValueKey | |
| ntdll.dll | 257 | NtCreateKey | |
| ntdll.dll | 2172 | wcstoul | |
| ntdll.dll | 597 | NtVdmControl | |
| ntdll.dll | 677 | RtlAnsiStringToUnicodeString | |
| ntdll.dll | 998 | RtlInitAnsiString | |
| ntdll.dll | 922 | RtlFreeUnicodeString | |
| ntdll.dll | 779 | RtlCreateUnicodeStringFromAsciiz | |
| ntdll.dll | 375 | NtOpenDirectoryObject | |
| ntdll.dll | 552 | NtSetSecurityObject | |
| ntdll.dll | 456 | NtQuerySecurityObject | |
| ntdll.dll | 434 | NtQueryInformationProcess | |
| ntdll.dll | 2170 | wcstol | |
| ntdll.dll | 2050 | _vsnwprintf | |
| ntdll.dll | 1209 | RtlReleaseActivationContext | |
| ntdll.dll | 891 | RtlFindActivationContextSectionString | |
| ntdll.dll | 791 | RtlDeactivateActivationContextUnsafeFast | |
| ntdll.dll | 640 | RtlActivateActivationContextUnsafeFast | |
| ntdll.dll | 1340 | RtlUnicodeToMultiByteN | |
| ntdll.dll | 1122 | RtlMultiByteToUnicodeN | |
| ntdll.dll | 853 | RtlEnterCriticalSection | |
| ntdll.dll | 1093 | RtlLeaveCriticalSection | |
| ntdll.dll | 2152 | wcscat_s | |
| ntdll.dll | 2156 | wcscpy_s | |
| ntdll.dll | 466 | NtQueryValueKey | |
| ntdll.dll | 311 | NtEnumerateKey | |
| ntdll.dll | 235 | NtClose | |
| ntdll.dll | 382 | NtOpenKey | |
| ntdll.dll | 1146 | RtlOpenCurrentUser | |
| ntdll.dll | 1336 | RtlUnicodeStringToInteger | |
| ntdll.dll | 1007 | RtlInitUnicodeString | |
| ntdll.dll | 2139 | swprintf_s | |
| ntdll.dll | 917 | RtlFreeHeap | |
| ntdll.dll | 1265 | RtlSetLastWin32Error | |
| ntdll.dll | 1983 | _alldiv | |
| ntdll.dll | 1985 | _allmul | |
| ntdll.dll | 1994 | _aulldvrm | |
| ntdll.dll | 1997 | _chkstk | |
| ntdll.dll | 2003 | _ftol2_sse | |
| ntdll.dll | 2102 | memcmp | |
| ntdll.dll | 2103 | memcpy | |
| ntdll.dll | 2107 | memset | |
| ntdll.dll | 1355 | RtlUnwind | |
| api-ms-win-core-localization-l1-2-1.dll | 38 | IsDBCSLeadByte | |
| api-ms-win-core-localization-l1-2-1.dll | 31 | GetUserDefaultLCID | |
| api-ms-win-core-localization-l1-2-1.dll | 19 | GetLocaleInfoW | |
| api-ms-win-core-localization-l1-2-1.dll | 43 | IsValidLocale | |
| api-ms-win-core-localization-l1-2-1.dll | 22 | GetOEMCP | |
| api-ms-win-core-localization-l1-2-1.dll | ConvertDefaultLocale | ||
| api-ms-win-core-localization-l1-2-1.dll | 10 | GetCPInfo | |
| api-ms-win-core-localization-l1-2-1.dll | 25 | GetSystemDefaultLangID | |
| api-ms-win-core-localization-l1-2-1.dll | 39 | IsDBCSLeadByteEx | |
| api-ms-win-core-localization-l1-2-1.dll | 9 | GetACP | |
| api-ms-win-core-localization-l1-2-1.dll | 27 | GetThreadLocale | |
| api-ms-win-core-registry-l1-1-0.dll | 14 | RegEnumValueW | |
| api-ms-win-core-registry-l1-1-0.dll | 40 | RegSetValueExW | |
| api-ms-win-core-registry-l1-1-0.dll | RegCloseKey | ||
| api-ms-win-core-registry-l1-1-0.dll | 33 | RegQueryValueExW | |
| api-ms-win-core-registry-l1-1-0.dll | 18 | RegGetValueW | |
| api-ms-win-core-registry-l1-1-0.dll | 5 | RegDeleteKeyExW | |
| api-ms-win-core-registry-l1-1-0.dll | 28 | RegOpenKeyExW | |
| api-ms-win-core-registry-l1-1-0.dll | 31 | RegQueryInfoKeyW | |
| api-ms-win-core-registry-l1-1-0.dll | 3 | RegCreateKeyExW | |
| api-ms-win-core-libraryloader-l1-2-0.dll | 14 | GetModuleFileNameW | |
| api-ms-win-core-libraryloader-l1-2-0.dll | 1 | DisableThreadLibraryCalls | |
| api-ms-win-core-libraryloader-l1-2-0.dll | 10 | FreeLibrary | |
| api-ms-win-core-libraryloader-l1-2-0.dll | 19 | GetProcAddress | |
| api-ms-win-core-libraryloader-l1-2-0.dll | 21 | LoadLibraryExW | |
| api-ms-win-core-libraryloader-l1-2-0.dll | 18 | GetModuleHandleW | |
| api-ms-win-core-libraryloader-l1-2-0.dll | 8 | FindResourceExW | |
| api-ms-win-core-libraryloader-l1-2-0.dll | 28 | SizeofResource | |
| api-ms-win-core-libraryloader-l1-2-0.dll | 13 | GetModuleFileNameA | |
| api-ms-win-core-libraryloader-l1-2-0.dll | 15 | GetModuleHandleA | |
| api-ms-win-core-libraryloader-l1-2-0.dll | 17 | GetModuleHandleExW | |
| api-ms-win-core-libraryloader-l1-2-0.dll | 5 | EnumResourceNamesExW | |
| api-ms-win-core-libraryloader-l1-2-0.dll | 22 | LoadResource | |
| api-ms-win-core-string-l1-1-0.dll | 7 | WideCharToMultiByte | |
| api-ms-win-core-string-l1-1-0.dll | 6 | MultiByteToWideChar | |
| api-ms-win-core-string-l1-1-0.dll | 5 | GetStringTypeW | |
| api-ms-win-core-string-l1-1-0.dll | 2 | CompareStringW | |
| api-ms-win-core-string-l1-1-0.dll | 3 | FoldStringW | |
| api-ms-win-core-string-l1-1-0.dll | 1 | CompareStringOrdinal | |
| api-ms-win-core-synch-l1-2-0.dll | 39 | SetEvent | |
| api-ms-win-core-synch-l1-2-0.dll | 43 | Sleep | |
| api-ms-win-core-synch-l1-2-0.dll | 50 | WaitForMultipleObjectsEx | |
| api-ms-win-core-file-l1-2-1.dll | 18 | FindFirstFileW | |
| api-ms-win-core-file-l1-2-1.dll | 22 | FindNextFileW | |
| api-ms-win-core-file-l1-2-1.dll | 11 | FindClose | |
| api-ms-win-core-file-l1-2-1.dll | 48 | GetLogicalDrives | |
| api-ms-win-core-file-l1-2-1.dll | 63 | ReadFile | |
| api-ms-win-core-file-l1-2-1.dll | 75 | SetFileTime | |
| api-ms-win-core-file-l1-2-1.dll | 39 | GetFileSize | |
| api-ms-win-core-file-l1-2-1.dll | 5 | CreateFileW | |
| api-ms-win-core-errorhandling-l1-1-1.dll | 10 | SetUnhandledExceptionFilter | |
| api-ms-win-core-errorhandling-l1-1-1.dll | 11 | UnhandledExceptionFilter | |
| api-ms-win-core-errorhandling-l1-1-1.dll | 3 | GetLastError | |
| api-ms-win-core-errorhandling-l1-1-1.dll | 9 | SetLastError | |
| api-ms-win-core-processthreads-l1-1-2.dll | 45 | ProcessIdToSessionId | |
| api-ms-win-core-processthreads-l1-1-2.dll | 8 | ExitThread | |
| api-ms-win-core-processthreads-l1-1-2.dll | 19 | GetExitCodeThread | |
| api-ms-win-core-processthreads-l1-1-2.dll | 2 | CreateProcessW | |
| api-ms-win-core-processthreads-l1-1-2.dll | 11 | GetCurrentProcess | |
| api-ms-win-core-processthreads-l1-1-2.dll | 15 | GetCurrentThread | |
| api-ms-win-core-processthreads-l1-1-2.dll | 12 | GetCurrentProcessId | |
| api-ms-win-core-processthreads-l1-1-2.dll | 5 | CreateThread | |
| api-ms-win-core-processthreads-l1-1-2.dll | 63 | TerminateProcess | |
| api-ms-win-core-processthreads-l1-1-2.dll | 24 | GetProcessMitigationPolicy | |
| api-ms-win-core-processthreads-l1-1-2.dll | 16 | GetCurrentThreadId | |
| api-ms-win-core-sysinfo-l1-2-1.dll | 17 | GetSystemTimeAsFileTime | |
| api-ms-win-core-sysinfo-l1-2-1.dll | 20 | GetSystemWindowsDirectoryW | |
| api-ms-win-core-sysinfo-l1-2-1.dll | 21 | GetTickCount | |
| api-ms-win-core-sysinfo-l1-2-1.dll | 12 | GetSystemDirectoryW | |
| api-ms-win-core-sysinfo-l1-2-1.dll | 25 | GetVersionExW | |
| api-ms-win-core-processenvironment-l1-2-0.dll | 16 | SearchPathW | |
| api-ms-win-core-processenvironment-l1-2-0.dll | 7 | GetCurrentDirectoryW | |
| api-ms-win-core-processenvironment-l1-2-0.dll | 18 | SetCurrentDirectoryW | |
| api-ms-win-core-processenvironment-l1-2-0.dll | 1 | ExpandEnvironmentStringsW | |
| api-ms-win-security-base-l1-2-0.dll | 27 | CheckTokenMembership | |
| api-ms-win-core-string-l2-1-0.dll | 8 | IsCharLowerW | |
| api-ms-win-core-string-l2-1-0.dll | 2 | CharNextW | |
| api-ms-win-core-string-l2-1-0.dll | 4 | CharUpperBuffW | |
| api-ms-win-core-string-l2-1-0.dll | CharLowerBuffW | ||
| api-ms-win-core-string-l2-1-0.dll | 1 | CharLowerW | |
| api-ms-win-core-string-l2-1-0.dll | 9 | IsCharUpperW | |
| api-ms-win-core-string-l2-1-0.dll | 7 | IsCharAlphaW | |
| api-ms-win-core-string-l2-1-0.dll | 6 | IsCharAlphaNumericW | |
| api-ms-win-core-string-l2-1-0.dll | 5 | CharUpperW | |
| api-ms-win-core-string-l2-1-0.dll | 3 | CharPrevW | |
| api-ms-win-core-handle-l1-1-0.dll | CloseHandle | ||
| api-ms-win-core-memory-l1-1-2.dll | 4 | CreateFileMappingW | |
| api-ms-win-core-memory-l1-1-2.dll | 15 | MapViewOfFile | |
| api-ms-win-core-memory-l1-1-2.dll | 40 | VirtualQueryEx | |
| api-ms-win-core-memory-l1-1-2.dll | 16 | MapViewOfFileEx | |
| api-ms-win-core-memory-l1-1-2.dll | 19 | OpenFileMappingW | |
| api-ms-win-core-memory-l1-1-2.dll | 28 | UnmapViewOfFile | |
| api-ms-win-core-profile-l1-1-0.dll | QueryPerformanceCounter | ||
| api-ms-win-core-profile-l1-1-0.dll | 1 | QueryPerformanceFrequency | |
| api-ms-win-core-privateprofile-l1-1-1.dll | 5 | GetPrivateProfileStringW | |
| api-ms-win-core-privateprofile-l1-1-1.dll | 15 | WritePrivateProfileStringW | |
| api-ms-win-core-heap-obsolete-l1-1-0.dll | 6 | GlobalSize | |
| api-ms-win-core-heap-obsolete-l1-1-0.dll | 2 | GlobalFree | |
| api-ms-win-core-heap-obsolete-l1-1-0.dll | 3 | GlobalHandle | |
| api-ms-win-core-heap-obsolete-l1-1-0.dll | GlobalAlloc | ||
| api-ms-win-core-heap-obsolete-l1-1-0.dll | 8 | LocalAlloc | |
| api-ms-win-core-heap-obsolete-l1-1-0.dll | 7 | GlobalUnlock | |
| api-ms-win-core-heap-obsolete-l1-1-0.dll | 1 | GlobalFlags | |
| api-ms-win-core-heap-obsolete-l1-1-0.dll | 11 | LocalLock | |
| api-ms-win-core-heap-obsolete-l1-1-0.dll | 14 | LocalUnlock | |
| api-ms-win-core-heap-obsolete-l1-1-0.dll | 5 | GlobalReAlloc | |
| api-ms-win-core-heap-obsolete-l1-1-0.dll | 13 | LocalSize | |
| api-ms-win-core-heap-obsolete-l1-1-0.dll | 4 | GlobalLock | |
| api-ms-win-core-heap-obsolete-l1-1-0.dll | 12 | LocalReAlloc | |
| api-ms-win-core-heap-obsolete-l1-1-0.dll | 10 | LocalFree | |
| api-ms-win-core-atoms-l1-1-0.dll | AddAtomA | ||
| api-ms-win-core-atoms-l1-1-0.dll | 14 | GlobalGetAtomNameA | |
| api-ms-win-core-atoms-l1-1-0.dll | 15 | GlobalGetAtomNameW | |
| api-ms-win-core-atoms-l1-1-0.dll | 10 | GlobalAddAtomW | |
| api-ms-win-core-atoms-l1-1-0.dll | 1 | AddAtomW | |
| api-ms-win-core-atoms-l1-1-0.dll | 5 | GetAtomNameA | |
| api-ms-win-core-atoms-l1-1-0.dll | 6 | GetAtomNameW | |
| api-ms-win-core-atoms-l1-1-0.dll | 12 | GlobalFindAtomA | |
| api-ms-win-core-atoms-l1-1-0.dll | 2 | DeleteAtom | |
| api-ms-win-core-atoms-l1-1-0.dll | 11 | GlobalDeleteAtom | |
| api-ms-win-core-atoms-l1-1-0.dll | 7 | GlobalAddAtomA | |
| api-ms-win-core-atoms-l1-1-0.dll | 13 | GlobalFindAtomW | |
| api-ms-win-core-string-obsolete-l1-1-0.dll | 4 | lstrcmpiW | |
| api-ms-win-core-string-obsolete-l1-1-0.dll | 8 | lstrlenA | |
| api-ms-win-core-string-obsolete-l1-1-0.dll | 9 | lstrlenW | |
| api-ms-win-core-localization-obsolete-l1-2-0.dll | 5 | GetStringTypeA | |
| api-ms-win-core-stringansi-l1-1-0.dll | 2 | CharNextA | |
| api-ms-win-core-stringansi-l1-1-0.dll | 11 | IsCharUpperA | |
| api-ms-win-core-stringansi-l1-1-0.dll | 1 | CharLowerBuffA | |
| api-ms-win-core-stringansi-l1-1-0.dll | 7 | CharUpperBuffA | |
| api-ms-win-core-stringansi-l1-1-0.dll | 10 | IsCharLowerA | |
| api-ms-win-core-stringansi-l1-1-0.dll | CharLowerA | ||
| api-ms-win-core-stringansi-l1-1-0.dll | 6 | CharUpperA | |
| api-ms-win-core-stringansi-l1-1-0.dll | 8 | IsCharAlphaA | |
| api-ms-win-core-stringansi-l1-1-0.dll | 9 | IsCharAlphaNumericA | |
| api-ms-win-core-stringansi-l1-1-0.dll | 5 | CharPrevExA | |
| api-ms-win-core-stringansi-l1-1-0.dll | 4 | CharPrevA | |
| api-ms-win-core-stringansi-l1-1-0.dll | 3 | CharNextExA | |
| api-ms-win-core-kernel32-private-l1-1-1.dll | 5 | RegisterWaitForInputIdle | |
| api-ms-win-core-sidebyside-l1-1-0.dll | 7 | QueryActCtxSettingsW | |
| api-ms-win-core-windowserrorreporting-l1-1-0.dll | 8 | WerpNotifyLoadStringResource | |
| api-ms-win-core-windowserrorreporting-l1-1-0.dll | 9 | WerpNotifyUseStringResource | |
| KERNELBASE.dll | 157 | LoadStringBaseExW | |
| api-ms-win-core-kernel32-legacy-l1-1-1.dll | 49 | MulDiv | |
| api-ms-win-core-kernel32-legacy-l1-1-1.dll | 19 | FindResourceExA | |
| api-ms-win-core-appinit-l1-1-0.dll | LoadAppInitDlls | ||
| GDI32.dll | 768 | SetStretchBltMode | |
| GDI32.dll | 553 | GetObjectW | |
| GDI32.dll | 772 | SetTextColor | |
| GDI32.dll | 537 | GetLayout | |
| GDI32.dll | 540 | GetMapMode | |
| GDI32.dll | 531 | GetHFONT | |
| GDI32.dll | 351 | ExtSelectClipRgn | |
| GDI32.dll | 492 | GetClipRgn | |
| GDI32.dll | 747 | SetGraphicsMode | |
| GDI32.dll | 491 | GetClipBox | |
| GDI32.dll | 81 | CreateRectRgnIndirect | |
| GDI32.dll | 80 | CreateRectRgn | |
| GDI32.dll | 470 | GetBoundsRect | |
| GDI32.dll | 751 | SetLayout | |
| GDI32.dll | 639 | PlayEnhMetaFile | |
| GDI32.dll | 346 | ExcludeClipRect | |
| GDI32.dll | 278 | Ellipse | |
| GDI32.dll | 57 | CreateEllipticRgn | |
| GDI32.dll | 499 | GetDCOrgEx | |
| GDI32.dll | 414 | GdiFixUpHandle | |
| GDI32.dll | 661 | Rectangle | |
| GDI32.dll | 76 | CreatePen | |
| GDI32.dll | 45 | CreateBrushIndirect | |
| GDI32.dll | 647 | PolyPatBlt | |
| GDI32.dll | 775 | SetViewportOrgEx | |
| GDI32.dll | 597 | GetViewportOrgEx | |
| GDI32.dll | 496 | GetCurrentObject | |
| GDI32.dll | 577 | GetTextCharacterExtra | |
| GDI32.dll | 771 | SetTextCharacterExtra | |
| GDI32.dll | 734 | SetBoundsRect | |
| GDI32.dll | 38 | CopyEnhMetaFileW | |
| GDI32.dll | 40 | CopyMetaFileW | |
| GDI32.dll | 760 | SetPaletteEntries | |
| GDI32.dll | 74 | CreatePalette | |
| GDI32.dll | 556 | GetPaletteEntries | |
| GDI32.dll | 560 | GetPixel | |
| GDI32.dll | 579 | GetTextCharsetInfo | |
| GDI32.dll | 657 | QueryFontAssocStatus | |
| GDI32.dll | 352 | ExtTextOutA | |
| GDI32.dll | 487 | GetCharWidthInfo | |
| GDI32.dll | 483 | GetCharWidthA | |
| GDI32.dll | 592 | GetTextFaceW | |
| GDI32.dll | 480 | GetCharABCWidthsW | |
| GDI32.dll | 476 | GetCharABCWidthsA | |
| GDI32.dll | 736 | SetBrushOrgEx | |
| GDI32.dll | 591 | GetTextFaceAliasW | |
| GDI32.dll | 337 | EnumFontsW | |
| GDI32.dll | 65 | CreateFontIndirectW | |
| GDI32.dll | 580 | GetTextColor | |
| GDI32.dll | 594 | GetTextMetricsW | |
| GDI32.dll | 599 | GetWindowExtEx | |
| GDI32.dll | 596 | GetViewportExtEx | |
| GDI32.dll | 469 | GetBkMode | |
| GDI32.dll | 419 | GdiGetCharDimensions | |
| GDI32.dll | 578 | GetTextCharset | |
| GDI32.dll | 420 | GdiGetCodePage | |
| GDI32.dll | 445 | GdiPrinterThunk | |
| GDI32.dll | 438 | GdiLoadType1Fonts | |
| GDI32.dll | 369 | GdiAddFontResourceW | |
| GDI32.dll | 792 | TranslateCharsetInfo | |
| GDI32.dll | 353 | ExtTextOutW | |
| GDI32.dll | 671 | RestoreDC | |
| GDI32.dll | 629 | OffsetWindowOrgEx | |
| GDI32.dll | 678 | SaveDC | |
| GDI32.dll | 502 | GetDIBits | |
| GDI32.dll | 742 | SetDIBits | |
| GDI32.dll | 468 | GetBkColor | |
| GDI32.dll | 54 | CreateDIBSection | |
| GDI32.dll | 48 | CreateCompatibleBitmap | |
| GDI32.dll | 55 | CreateDIBitmap | |
| GDI32.dll | 51 | CreateDCW | |
| GDI32.dll | 268 | DeleteDC | |
| GDI32.dll | 462 | GdiValidateHandle | |
| GDI32.dll | 86 | CreateSolidBrush | |
| GDI32.dll | 49 | CreateCompatibleDC | |
| GDI32.dll | 446 | GdiProcessSetup | |
| GDI32.dll | 394 | GdiDllInitialize | |
| GDI32.dll | 569 | GetStockObject | |
| GDI32.dll | 375 | GdiClearStockObjectCache | |
| GDI32.dll | 568 | GetRgnBox | |
| GDI32.dll | 622 | MirrorRgn | |
| GDI32.dll | 627 | OffsetRgn | |
| GDI32.dll | 34 | CombineRgn | |
| GDI32.dll | 418 | GdiGetBitmapBitsSize | |
| GDI32.dll | 348 | ExtCreateRegion | |
| GDI32.dll | 566 | GetRegionData | |
| GDI32.dll | 279 | EnableEUDC | |
| GDI32.dll | 388 | GdiConvertToDevmodeW | |
| GDI32.dll | 732 | SetBkColor | |
| GDI32.dll | 501 | GetDIBColorTable | |
| GDI32.dll | 503 | GetDeviceCaps | |
| GDI32.dll | 786 | StretchDIBits | |
| GDI32.dll | 19 | BitBlt | |
| GDI32.dll | 791 | TextOutW | |
| GDI32.dll | 271 | DeleteObject | |
| GDI32.dll | 790 | TextOutA | |
| GDI32.dll | 636 | PatBlt | |
| GDI32.dll | 270 | DeleteMetaFile | |
| GDI32.dll | 733 | SetBkMode | |
| GDI32.dll | 269 | DeleteEnhMetaFile | |
| GDI32.dll | 380 | GdiConvertBitmapV5 | |
| GDI32.dll | 390 | GdiCreateLocalMetaFilePict | |
| GDI32.dll | 725 | SelectObject | |
| GDI32.dll | 604 | IntersectClipRect | |
| GDI32.dll | 389 | GdiCreateLocalEnhMetaFile | |
| GDI32.dll | 770 | SetTextAlign | |
| GDI32.dll | 752 | SetLayoutWidth | |
| GDI32.dll | 41 | CreateBitmap | |
| GDI32.dll | 385 | GdiConvertMetaFilePict | |
| GDI32.dll | 589 | GetTextExtentPointW | |
| GDI32.dll | 587 | GetTextExtentPointA | |
| GDI32.dll | 576 | GetTextAlign | |
| GDI32.dll | 785 | StretchBlt | |
| GDI32.dll | 552 | GetObjectType | |
| GDI32.dll | 378 | GdiConvertAndCheckDC | |
| GDI32.dll | 766 | SetRectRgn | |
| GDI32.dll | 383 | GdiConvertEnhMetaFile | |
| GDI32.dll | 450 | GdiReleaseDC | |
| api-ms-win-core-delayload-l1-1-1.dll | DelayLoadFailureHook | ||
| api-ms-win-core-delayload-l1-1-1.dll | 1 | ResolveDelayLoadedAPI |
StringTable 040904B0
| CompanyName | Microsoft Corporation |
| FileDescription | Multi-User Windows USER API Client DLL |
| FileVersion | 6.3.9600.17031 (winblue_gdr.140221-1952) |
| InternalName | user32 |
| LegalCopyright | © Microsoft Corporation. All rights reserved. |
| OriginalFilename | user32 |
| ProductName | Microsoft® Windows® Operating System |
| ProductVersion | 6.3.9600.17031 |
VS_FIXEDFILEINFO
| FileVersion | 6.3.9600.17031 |
| ProductVersion | 6.3.9600.17031 |
| StrucVersion | 0x10000 |
| FileFlagsMask | 0x3f |
| FileFlags | 0 |
| FileOS | 0x40004 |
| FileType | 2 |
| FileSubtype | 0 |
 |
| Please donate some bucks to keep this site up and running: | |
| Ko-fi | |
|---|---|
| Yandex.Money | |
| Thank you! | |
[?] ignoring invalid PEdump::BITMAPINFOHEADER