Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
explorer.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
explorer.exe
Resource
win10v2004-20231215-en
Target
explorer.exe
Size
5.1MB
MD5
8c667c6f7196bd7f81621824368d8321
SHA1
34294bea5fd55cb4716d16227f0dc59661e95300
SHA256
6a33947b40670d815b3dc7d1435fb0b432beca371fd5e05e2e5190aef337df9b
SHA512
2594e0767a3d94cb478d3b53767d04fbe4668535582e81d8ae4be3acce3f257c965a5b07b2863869664518c63d01f921354dfabdad380bf3fa7d522ab1de287a
SSDEEP
49152:qZltksUHBPd/rhcbeY9dquzJ1SXNUI7EKlkM1NyLqmgNHNqo6csgc/0jziKPTklh:gBUPpyJg3L6cDmYYw8a0cDm
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
?_Xout_of_range@std@@YAXPEBD@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
_Thrd_detach
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
_Thrd_join
_Thrd_id
_Cnd_do_broadcast_at_thread_exit
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z
?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z
?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG0@Z
?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ
?tolower@?$ctype@G@std@@QEBAPEBGPEAGPEBG@Z
?_Xbad_alloc@std@@YAXXZ
?tolower@?$ctype@G@std@@QEBAGG@Z
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
_Wcscoll
_Wcsxfrm
?_Xbad_function_call@std@@YAXXZ
??Bid@locale@std@@QEAA_KXZ
?id@?$ctype@G@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
??0_Lockit@std@@QEAA@H@Z
??0_Locinfo@std@@QEAA@PEBD@Z
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??1_Lockit@std@@QEAA@XZ
??1_Locinfo@std@@QEAA@XZ
?is@?$ctype@G@std@@QEBA_NFG@Z
?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Incref@facet@locale@std@@UEAAXXZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z
?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ
?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?uncaught_exception@std@@YA_NXZ
?good@ios_base@std@@QEBA_NXZ
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ
?width@ios_base@std@@QEBA_JXZ
?flags@ios_base@std@@QEBAHXZ
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGXZ
?width@ios_base@std@@QEAA_J_J@Z
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z
_Mtx_init_in_situ
_Xtime_get_ticks
_Mtx_unlock
_Mtx_lock
_Mtx_destroy_in_situ
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?id@?$collate@G@std@@2V0locale@2@A
_c_exit
_initterm_e
_initterm
_set_error_mode
_register_thread_local_exe_atexit_callback
_time64
wcsncmp
memset
wcscspn
wcscmp
strncmp
_o_iswalnum
_o_iswspace
_o_malloc
_o_memcpy_s
_o_pow
_o_realloc
_o_roundf
_o_sqrt
_o_terminate
_o_toupper
_o_towlower
_o_wcscat_s
_o_wcscpy_s
_o_wcsncpy_s
_o_wcstol
__C_specific_handler
__CxxFrameHandler3
_o__wtoi
memmove
_o__set_new_mode
_o__set_fmode
_o_free
_o__set_errno
_o__set_app_type
_o__seh_filter_exe
_o__register_onexit_function
_o__recalloc
_o__purecall
_o__mktime64
_o_floor
_o_exit
_o_ceil
_o__wcsnicmp
_o_bsearch
_o__wcsicmp
_o__localtime64
_o__itow_s
_o__invalid_parameter_noinfo_noreturn
_o__invalid_parameter_noinfo
_o__initialize_wide_environment
_o__initialize_onexit_table
_o__get_wide_winmain_command_line
_o__get_errno
_o__exit
_o__errno
_o__difftime64
_o__crt_atexit
_o__configure_wide_argv
_o__configthreadlocale
_o__cexit
_o__beginthreadex
_o___stdio_common_vswscanf
_o___stdio_common_vswprintf
_o___stdio_common_vsnwprintf_s
_o___stdio_common_vsnprintf_s
_o___std_exception_destroy
_o___std_exception_copy
_o___p__commode
wcsstr
__std_terminate
__CxxFrameHandler4
_CxxThrowException
memcmp
memcpy
PicFreeFileInfo
PicRetrieveFileInfo
ord9
SetInformationJobObject
CreateJobObjectW
AssignProcessToJobObject
QueryInformationJobObject
RegisterApplicationRestart
UrlUnescapeW
HashData
PathIsURLW
CheckElevation
CheckElevationEnabled
SHRegGetUSValueW
SHRegGetBoolUSValueW
CoRegisterMessageFilter
GlobalGetAtomNameW
DeactivateActCtx
ActivateActCtx
ReleaseActCtx
CreateActCtxW
RtlGetVersion
RtlInitString
ZwQuerySystemInformation
RtlInitUnicodeString
RtlUpcaseUnicodeChar
RtlGetNativeSystemInformation
ZwQueryDirectoryFile
RtlpEnsureBufferSize
RtlNtPathNameToDosPathName
ZwEnumerateKey
RtlInitUnicodeStringEx
RtlFormatCurrentUserKeyPath
ZwCreateFile
ZwQueryInformationFile
ZwCreateSection
ZwQueryInformationProcess
ZwSetInformationProcess
RtlxAnsiStringToUnicodeSize
RtlAnsiStringToUnicodeString
ZwUnmapViewOfSection
ZwMapViewOfSection
LdrResSearchResource
RtlVerifyVersionInfo
RtlImageDirectoryEntryToData
RtlReleaseSRWLockShared
RtlAcquireSRWLockShared
RtlReleaseSRWLockExclusive
RtlAcquireSRWLockExclusive
wcsspn
RtlQueryResourcePolicy
NtOpenThreadToken
NtClose
NtQueryInformationToken
NtOpenProcessToken
RtlCompareUnicodeString
RtlFreeHeap
RtlAllocateHeap
wcschr
ZwOpenFile
wcsrchr
strchr
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlPublishWnfStateData
ZwQueryValueKey
NtSetSystemInformation
RtlFlushHeaps
NtQueryWnfStateData
RtlSubscribeWnfStateChangeNotification
RtlUnsubscribeWnfNotificationWaitForCompletion
RtlQueryWnfStateData
ZwOpenKey
RtlNtStatusToDosError
RtlCaptureContext
RtlGetDeviceFamilyInfoEnum
NtSetInformationProcess
NtQueryInformationProcess
ZwClose
RtlReAllocateHeap
RtlAppendUnicodeToString
RtlAppendUnicodeStringToString
RtlRunOnceExecuteOnce
RtlCopyUnicodeString
RtlUpcaseUnicodeString
RtlIsStateSeparationEnabled
RtlDosPathNameToNtPathName_U_WithStatus
RtlNtStatusToDosErrorNoTeb
RtlFreeUnicodeString
NtSetThreadExecutionState
VerSetConditionMask
WinSqmSetDWORD
WinSqmIsOptedIn
WinSqmAddToStreamEx
GetModuleHandleA
FindResourceExW
LoadResource
SizeofResource
GetModuleFileNameW
GetModuleHandleExW
GetProcAddress
FreeLibrary
LoadLibraryExW
LoadStringW
FindStringOrdinal
LockResource
GetModuleFileNameA
GetModuleHandleW
Sleep
InitOnceBeginInitialize
InitOnceExecuteOnce
InitOnceComplete
InitializeSRWLock
WaitForMultipleObjectsEx
OpenMutexW
InitializeCriticalSection
SetEvent
CreateEventW
CreateEventExW
DeleteCriticalSection
AcquireSRWLockShared
CreateMutexExW
TryEnterCriticalSection
OpenSemaphoreW
WaitForSingleObjectEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
ReleaseMutex
WaitForSingleObject
InitializeCriticalSectionEx
LeaveCriticalSection
OpenEventW
ReleaseSemaphore
EnterCriticalSection
CreateSemaphoreExW
ResetEvent
TryAcquireSRWLockExclusive
InitializeCriticalSectionAndSpinCount
SleepEx
CreateMutexW
ReleaseSRWLockShared
HeapAlloc
GetProcessHeap
HeapFree
SetLastError
SetUnhandledExceptionFilter
RaiseException
SetErrorMode
GetLastError
UnhandledExceptionFilter
CompareFileTime
CreateFileW
GetLongPathNameW
FindClose
FindNextFileW
FindFirstFileW
WriteFile
DeleteFileW
GetFileAttributesW
EventActivityIdControl
EventWriteTransfer
EventSetInformation
EventRegister
EventEnabled
EventWrite
EventUnregister
EventProviderEnabled
RegEnumKeyExW
RegDeleteValueW
RegOpenCurrentUser
RegQueryValueExW
RegDeleteKeyExW
RegQueryInfoKeyW
RegDeleteTreeW
RegEnumValueW
RegSetValueExW
RegNotifyChangeKeyValue
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
RegGetValueW
CreateThreadpoolWork
TrySubmitThreadpoolCallback
CloseThreadpoolWait
CreateThreadpoolWait
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
SubmitThreadpoolWork
CreateThreadpoolTimer
WaitForThreadpoolWaitCallbacks
SetThreadpoolTimer
SetThreadpoolWait
QueueUserAPC
SetProcessShutdownParameters
ResumeThread
ExitProcess
GetStartupInfoW
SetThreadPriorityBoost
GetPriorityClass
ProcessIdToSessionId
TerminateProcess
GetExitCodeProcess
SetThreadPriority
OpenProcessToken
GetCurrentThread
OpenThreadToken
GetCurrentProcess
SetPriorityClass
GetThreadPriority
GetCurrentProcessId
GetProcessId
OpenThread
GetCurrentThreadId
CreateProcessW
CreateThread
GetLocaleInfoEx
GetThreadUILanguage
GetUserDefaultLangID
GetLocaleInfoW
FormatMessageW
GetUserDefaultLocaleName
GetCalendarInfoW
DebugBreak
OutputDebugStringW
IsDebuggerPresent
DuplicateHandle
CloseHandle
VarUI4FromStr
VariantInit
SafeArrayAccessData
SafeArrayCreate
SysAllocString
SafeArrayUnaccessData
SafeArrayDestroy
VariantClear
SysStringLen
SysAllocStringByteLen
SysFreeString
SHTaskPoolGetUniqueContext
SHTaskPoolQueueTask
SetCurrentProcessExplicitAppUserModelID
IsOS
CoGetMalloc
CoCancelCall
CoReleaseMarshalData
CoRevokeClassObject
CoDisableCallCancellation
CoUninitialize
CoTaskMemFree
CoSetProxyBlanket
CoTaskMemRealloc
CoMarshalInterThreadInterfaceInStream
CoCreateGuid
CoInitializeEx
CoEnableCallCancellation
CoCreateInstance
CoGetStdMarshalEx
StringFromIID
IIDFromString
CreateStreamOnHGlobal
CoGetObjectContext
CLSIDFromString
CoInitializeSecurity
CoRegisterClassObject
CoWaitForMultipleHandles
CoGetApartmentType
CoIncrementMTAUsage
CoCreateFreeThreadedMarshaler
StringFromGUID2
CoGetInterfaceAndReleaseStream
CoTaskMemAlloc
CoFreeUnusedLibraries
PropVariantClear
CoGetCallContext
StrCmpNICW
StrRChrW
StrStrIW
StrCmpICW
StrCmpW
StrChrIW
StrToIntW
StrCmpIW
StrChrW
StrCmpNIW
QISearch
StrCmpICA
SHStrDupW
CommandLineToArgvW
IUnknown_GetSite
IUnknown_SetSite
IUnknown_QueryService
IUnknown_Set
LocalFree
LocalAlloc
LocalReAlloc
GlobalAlloc
GlobalFree
GetProcessMitigationPolicy
IsProcessorFeaturePresent
OpenProcess
GetDateFormatW
GetTickCount
GetSystemDirectoryW
GetSystemTime
GetSystemTimeAsFileTime
GetVersionExW
GetLocalTime
GetTickCount64
GetLogicalProcessorInformation
GetWindowsDirectoryW
GetTimeFormatEx
GetDateFormatEx
GetCommandLineW
SearchPathW
ExpandEnvironmentStringsW
GetCurrentDirectoryW
PathQuoteSpacesW
PathCombineW
PathRemoveBlanksW
PathParseIconLocationW
PathFindFileNameW
SHExpandEnvironmentStringsW
PathGetArgsW
PathFileExistsW
PathFindExtensionW
PathRemoveFileSpecW
PathGetDriveNumberW
PathCommonPrefixW
PathIsFileSpecW
WindowsCreateStringReference
WindowsGetStringLen
WindowsCompareStringOrdinal
WindowsDuplicateString
WindowsPreallocateStringBuffer
WindowsDeleteString
WindowsPromoteStringBuffer
WindowsDeleteStringBuffer
WindowsSubstringWithSpecifiedLength
WindowsGetStringRawBuffer
WindowsCreateString
RoInitialize
RoGetActivationFactory
RoUninitialize
RoActivateInstance
SHDeleteKeyW
SHSetValueW
SHDeleteValueW
SHQueryInfoKeyW
SHEnumKeyExW
SHRegGetValueW
SHGetValueW
CompareStringW
MultiByteToWideChar
WideCharToMultiByte
CompareStringOrdinal
SHCreateThreadRef
SHSetThreadRef
SetProcessReference
SHGetThreadRef
SHCreateThread
lstrcmpiW
lstrlenW
GetTokenInformation
EqualSid
GetAclInformation
GetAce
DeleteAce
InitializeAcl
CopySid
AddAce
MakeAbsoluteSD
SetKernelObjectSecurity
GetLengthSid
CreateWellKnownSid
CheckTokenMembership
DuplicateToken
IsValidSid
TraceMessage
GetTraceEnableFlags
RegisterTraceGuidsW
GetTraceLoggerHandle
GetTraceEnableLevel
UnregisterTraceGuids
GetUserDefaultUILanguage
LoadLibraryW
FindResourceW
SHLoadIndirectString
RemoveVectoredExceptionHandler
RegDeleteKeyValueW
RegSetKeyValueW
RoGetAgileReference
RoOriginateError
RoTransformError
GetRestrictedErrorInfo
SetRestrictedErrorInfo
RoFailFastWithErrorContext
RoGetMatchingRestrictedErrorInfo
RoOriginateLanguageException
PathAllocCombine
PathCchCombine
PathCchRemoveFileSpec
PathCchAddExtension
PathCchAppend
SHAnsiToUnicode
GlobalLock
GlobalUnlock
SetProcessInformation
SetThreadDescription
VirtualAlloc
MapViewOfFile
OpenFileMappingW
VirtualProtect
VirtualFree
CreateFileMappingW
UnmapViewOfFile
MulDiv
IStream_Read
SHCreateStreamOnFileEx
SHCreateStreamOnFileW
SHCreateMemStream
IStream_Write
SHOpenRegStream2W
IStream_Reset
GetTempPathW
QueryFullProcessImageNameW
ord170
UnregisterWaitEx
ChangeTimerQueueTimer
CreateTimerQueueTimer
DeleteTimerQueueTimer
GetProductInfo
GetOsSafeBootMode
GetUserDefaultGeoName
DeriveAppContainerSidFromAppContainerName
GetProfileType
GetTimeZoneInformation
FileTimeToSystemTime
SystemTimeToFileTime
GetDynamicTimeZoneInformation
SystemTimeToTzSpecificLocalTime
GetComputerNameW
RegisterWaitForSingleObject
GetSystemPowerStatus
QueryPerformanceCounter
InterlockedPushEntrySList
InitializeSListHead
GetPersistedRegistryLocationW
LookupAccountNameW
CharNextW
CharLowerBuffW
QueryServiceConfigW
NotifyServiceStatusChangeW
CreateIoCompletionPort
GetQueuedCompletionStatus
GetPhysicallyInstalledSystemMemory
SHRegGetValueFromHKCUHKLM
ord244
GetDpiForMonitor
GetNetworkConnectivityHint
RaiseFailFastException
CharNextA
CallNtPowerInformation
PowerDeterminePlatformRoleEx
GetPwrCapabilities
ApiSetQueryApiSetPresence
ord165
ord509
ord292
SHCreateWorkerWindowW
ShellMessageBoxW
SHPinDllOfCLSID
StrRetToStrW
ord279
PathRemoveArgsW
ord197
SHIsChildOrSelf
ord635
AssocQueryStringW
ord478
ord479
StrRetToBufW
ord481
IUnknown_GetWindow
ord544
SystemParametersInfoW
EnumDisplayMonitors
GetSystemMetrics
EnumDisplayDevicesW
GetMonitorInfoW
GetDisplayConfigBufferSizes
QueryDisplayConfig
IsRectEmpty
IntersectRect
PtInRect
SetRectEmpty
OffsetRect
SubtractRect
InflateRect
CopyRect
UnionRect
EqualRect
SetRect
SetWinEventHook
NotifyWinEvent
UnhookWinEvent
SHCreateItemFromIDList
SHBindToObject
ILClone
SHGetIDListFromObject
ILCloneFirst
SHBindToParent
ILIsParent
SHParseDisplayName
ILCombine
ILFindLastID
ILRemoveLastID
ILFree
SHGetNameFromIDList
SHBindToFolderIDListParent
SHCreateItemFromParsingName
ILIsEqual
ILGetSize
DXGIDeclareAdapterRemovalSupport
GetPointerType
GetPointerDevices
GetPointerInfo
GetCurrentInputMessageSource
EnableMouseInPointer
SHGetFolderPathEx
SetThreadFlags
SHGetKnownFolderIDList
GetThreadFlags
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
GetPackageFullName
GetPackagesByPackageFamily
SetWindowFeedbackSetting
RegisterClipboardFormatW
GetWindowBand
CreateWindowInBand
UnregisterPowerSettingNotification
RegisterPowerSettingNotification
InitVariantFromResource
InitVariantFromGUIDAsString
PropVariantToStringAlloc
PSPropertyBag_WriteDWORD
PropVariantToUInt32
PSPropertyBag_WriteStr
PSGetPropertyFromPropertyStorage
PSCreateMemoryPropertyStore
PropVariantToBoolean
CreateDispatcherQueueController
URLOpenBlockingStreamW
SHChangeNotify
SHCreateDataObject
ParseApplicationUserModelId
FindPackagesByPackageFamily
WTSUnRegisterSessionNotification
WTSRegisterSessionNotification
GetTextExtentPoint32W
GetStockObject
GetTextMetricsW
SetTextAlign
SetTextColor
CreateFontIndirectW
GetClipBox
SelectObject
CreateCompatibleDC
DeleteDC
GetGlyphOutlineW
GetObjectW
DeleteObject
GetOutlineTextMetricsW
CombineRgn
OffsetRgn
Rectangle
SetStretchBltMode
ExcludeClipRect
StretchBlt
GetClipRgn
SetRectRgn
CreateRectRgn
GetDeviceCaps
CreateRectRgnIndirect
SelectClipRgn
ExtTextOutW
GetCurrentObject
IsBadWritePtr
RpcStringBindingComposeW
I_RpcExceptionFilter
RpcBindingSetAuthInfoExW
RpcStringFreeW
UuidFromStringW
RpcBindingFree
NdrClientCall3
RpcBindingFromStringBindingW
InternetCrackUrlW
ord190
ord121
ord162
ord174
ord109
ord1
ord210
ord126
ord213
ord183
ord142
ord192
ord123
ord187
SHUnicodeToAnsi
ord200
ord184
ord186
ord680
ord723
ord885
ord95
ord743
ord907
ord43
Shell_GetCachedImageIndexW
ord790
ord792
ord727
ord162
SHAppBarMessage
ord894
ord193
ord906
ord895
ShellExecuteW
SHGetLocalizedName
SHGetPropertyStoreForWindow
ord764
ord866
SHEvaluateSystemCommandTemplate
ord181
ord244
ExtractIconExW
ord132
ord137
Shell_NotifyIconW
Shell_NotifyIconGetRect
ord6
SHGetStockIconInfo
DuplicateIcon
ord91
ord254
ord54
SHEnableServiceObject
ord61
ord896
SHAddToRecentDocs
ord60
SHUpdateRecycleBinIcon
ord2
ord711
ord4
SHGetPathFromIDListW
ord645
ord644
ord753
ord733
SHChangeNotifyRegisterThread
DragQueryFileW
ord67
SHCreateItemInKnownFolder
ord206
ord201
ord188
ord899
ShellExecuteExW
ord245
ord200
ord89
ord190
ord85
ord100
ord172
ord134
ord22
ord850
SHFileOperationW
ord164
PathIsDirectoryW
ord413
ord548
ord163
ord467
AssocQueryKeyW
ChrCmpIW
PathIsRelativeW
AssocCreate
DrawThemeTextEx
DrawThemeParentBackground
CloseThemeData
BufferedPaintInit
BeginBufferedPaint
ord86
IsCompositionActive
GetThemeBackgroundExtent
IsAppThemed
GetThemeFont
GetThemeBool
OpenThemeData
OpenThemeDataForDpi
GetThemeMargins
ord138
EndBufferedPaint
BufferedPaintSetAlpha
ord126
GetThemePartSize
IsThemeActive
GetBufferedPaintBits
GetThemeInt
BufferedPaintUnInit
GetWindowTheme
GetThemeColor
GetThemeMetric
SetWindowTheme
DrawThemeBackground
ord138
ord141
DwmRegisterThumbnail
ord140
DwmGetWindowAttribute
ord159
ord113
DwmEnableBlurBehindWindow
DwmIsCompositionEnabled
DwmQueryThumbnailSourceSize
DwmSetWindowAttribute
ord124
DwmUpdateThumbnailProperties
DwmUnregisterThumbnail
ord114
ord139
IsTopLevelWindow
GetMenuState
SetScrollInfo
GetScrollInfo
SetScrollPos
GetMenuStringW
InternalGetWindowText
GetLayeredWindowAttributes
SetLayeredWindowAttributes
DrawTextExW
IsProcessDPIAware
SetThreadDpiAwarenessContext
GetWindowCompositionAttribute
GetWindowProcessHandle
GetClassLongPtrW
UpdateLayeredWindow
ord2521
GetIconInfoExW
GhostWindowFromHungWindow
GetSysColorBrush
GetSystemMenu
ModifyMenuW
GetAsyncKeyState
ReplyMessage
MonitorFromPoint
GetMenuItemInfoW
AdjustWindowRectEx
GetDC
ReleaseDC
MonitorFromWindow
IsIconic
CreatePopupMenu
GetMenuDefaultItem
DestroyMenu
LoadCursorW
SetCursor
SetMenuItemInfoW
DefWindowProcA
IsWindowUnicode
LoadAcceleratorsW
ChangeWindowMessageFilterEx
TranslateAcceleratorW
ord2611
MonitorFromRect
GetGuiResources
IsHungAppWindow
ord2574
SwitchToThisWindow
GetLastActivePopup
UnregisterHotKey
RegisterHotKey
SendDlgItemMessageW
EndDialog
ord2573
GetKeyState
LoadIconW
HungWindowFromGhostWindow
CascadeWindows
TileWindows
LockWorkStation
InjectMouseInput
UnregisterClassW
ord2522
GetMenuInfo
MapVirtualKeyExW
SetMenuInfo
GetDpiForSystem
GetWindowDpiAwarenessContext
AreDpiAwarenessContextsEqual
CharLowerW
IsCharAlphaNumericW
InjectKeyboardInput
GetCaretBlinkTime
GetSysColor
CopyImage
DestroyIcon
DrawIconEx
BringWindowToTop
GetSystemMetricsForDpi
ord2005
TrackMouseEvent
SetCapture
GetCapture
GetIconInfo
GetClassWord
GetClassLongW
GetPhysicalCursorPos
GetCursorInfo
ShowWindowAsync
ReleaseCapture
GetDoubleClickTime
CalculatePopupWindowPosition
CopyIcon
GetLastInputInfo
AdjustWindowRect
GetDpiForWindow
EndTask
InsertMenuW
SetWindowCompositionAttribute
SetGestureConfig
UnregisterClassA
PostThreadMessageW
LoadImageW
CheckMenuItem
EnableMenuItem
ExitWindowsEx
RemoveMenu
SetMenuDefaultItem
TrackPopupMenuEx
DeleteMenu
FillRect
DrawTextW
LoadMenuW
GetSubMenu
CreateIconIndirect
GetMenuItemCount
GetUserNameExW
ResolveDelayLoadedAPI
DelayLoadFailureHook
PowerSetRequest
PowerCreateRequest
VerifyVersionInfoW
IsProcessInWDAGContainer
CopyFileW
WaitForMultipleObjects
SetTermsrvAppInstallMode
ord292
StopTraceW
EnableTraceEx2
StartTraceW
GetStagedPackagePathByFullName2
BiPtFreeMemory
BiPtQueryWorkItem
BiPtAssociateApplicationEntryPoint
BiPtEnumerateWorkItemsForPackageName
floorf
ceilf
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ