Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
explorer.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral2
Sample
explorer.exe
Resource
win11-20231215-en
Target
explorer.exe
Size
5.3MB
MD5
02280f4613e3d8eb6579d79ab7a182ca
SHA1
f25e92edc0cab5e7446a302863802f3879b27bd9
SHA256
81d8ea67d17bf48524c82d576f8ddaddb37a218d0566fd7f0aab8b8fbd03f193
SHA512
6e272bff5ec67bff338b4e4cddd3785a5ba1a6c335794694ef327b7123b512095b5b5d3906bcd68faf65598b19b10fe61d3e3d555365448894a4c397a08f979f
SSDEEP
49152:9nt8dGQkhnciqbQsS9LkGqClsZ2Hju8jlTNPI0XAmwraNffkizY1WgDGJHK2nl+U:9uKTvpBIADttkixx+skOw8a0cD5v+
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
?_Xbad_function_call@std@@YAXXZ
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
_Thrd_detach
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
_Thrd_join
_Thrd_id
_Cnd_do_broadcast_at_thread_exit
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z
?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z
?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG0@Z
?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ
?tolower@?$ctype@G@std@@QEBAPEBGPEAGPEBG@Z
?_Xbad_alloc@std@@YAXXZ
?tolower@?$ctype@G@std@@QEBAGG@Z
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
_Wcscoll
_Wcsxfrm
?_Xout_of_range@std@@YAXPEBD@Z
??Bid@locale@std@@QEAA_KXZ
?id@?$ctype@G@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
??0_Lockit@std@@QEAA@H@Z
??0_Locinfo@std@@QEAA@PEBD@Z
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??1_Lockit@std@@QEAA@XZ
??1_Locinfo@std@@QEAA@XZ
?is@?$ctype@G@std@@QEBA_NFG@Z
?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Incref@facet@locale@std@@UEAAXXZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z
?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ
?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?uncaught_exception@std@@YA_NXZ
?good@ios_base@std@@QEBA_NXZ
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ
?width@ios_base@std@@QEBA_JXZ
?flags@ios_base@std@@QEBAHXZ
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGXZ
?width@ios_base@std@@QEAA_J_J@Z
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z
_Mtx_init_in_situ
_Xtime_get_ticks
_Mtx_unlock
_Mtx_lock
_Mtx_destroy_in_situ
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?id@?$collate@G@std@@2V0locale@2@A
_initterm
_initterm_e
_register_thread_local_exe_atexit_callback
_c_exit
_set_error_mode
_time64
wcsncmp
memset
wcscmp
wcscspn
strncmp
_o_iswalnum
_o_iswspace
_o_malloc
_o_memcpy_s
_o_pow
_o_realloc
_o_roundf
_o_sqrt
_o_terminate
_o_toupper
_o_towlower
_o_wcscat_s
_o_wcscpy_s
_o_wcsncpy_s
_o_wcstol
_o_wcstoll
__C_specific_handler
__CxxFrameHandler3
_o__wtoi
memmove
_o__set_new_mode
_o__set_fmode
_o__set_errno
_o__set_app_type
_o__seh_filter_exe
_o_free
_o__register_onexit_function
_o__recalloc
_o__purecall
_o__mktime64
_o_floor
_o_exit
_o__wcsnicmp
_o_ceil
_o__localtime64
_o__wcsicmp
_o_bsearch
_o__itow_s
_o__invalid_parameter_noinfo_noreturn
_o__invalid_parameter_noinfo
_o__initialize_wide_environment
_o__initialize_onexit_table
_o__get_wide_winmain_command_line
_o__get_errno
_o__exit
_o__errno
_o__difftime64
_o__crt_atexit
_o__configure_wide_argv
_o__configthreadlocale
_o__cexit
_o__beginthreadex
_o___stdio_common_vswscanf
_o___stdio_common_vswprintf
_o___stdio_common_vsnwprintf_s
_o___stdio_common_vsnprintf_s
_o___std_exception_destroy
_o___std_exception_copy
_o___p__commode
wcsstr
__std_terminate
__CxxFrameHandler4
_CxxThrowException
memcmp
memcpy
PicFreeFileInfo
PicRetrieveFileInfo
ord9
SetInformationJobObject
AssignProcessToJobObject
QueryInformationJobObject
CreateJobObjectW
RegisterApplicationRestart
HashData
UrlUnescapeW
PathIsURLW
CheckElevationEnabled
CheckElevation
SHRegGetUSValueW
SHRegGetBoolUSValueW
CoRegisterMessageFilter
GlobalGetAtomNameW
ReleaseActCtx
ActivateActCtx
CreateActCtxW
DeactivateActCtx
RtlGetVersion
RtlInitString
ZwQuerySystemInformation
RtlInitUnicodeString
RtlUpcaseUnicodeChar
RtlGetNativeSystemInformation
ZwQueryDirectoryFile
RtlpEnsureBufferSize
RtlNtPathNameToDosPathName
ZwEnumerateKey
RtlInitUnicodeStringEx
RtlFormatCurrentUserKeyPath
ZwCreateFile
ZwQueryInformationFile
ZwCreateSection
ZwQueryInformationProcess
ZwSetInformationProcess
RtlxAnsiStringToUnicodeSize
RtlAnsiStringToUnicodeString
ZwUnmapViewOfSection
ZwMapViewOfSection
LdrResSearchResource
RtlVerifyVersionInfo
RtlImageDirectoryEntryToData
RtlReleaseSRWLockShared
RtlAcquireSRWLockShared
RtlReleaseSRWLockExclusive
RtlAcquireSRWLockExclusive
wcsspn
RtlQueryResourcePolicy
NtOpenThreadToken
NtClose
NtQueryInformationToken
NtOpenProcessToken
RtlCompareUnicodeString
RtlFreeHeap
RtlAllocateHeap
wcschr
ZwOpenFile
wcsrchr
strchr
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlPublishWnfStateData
ZwQueryValueKey
NtSetSystemInformation
RtlFlushHeaps
NtQueryWnfStateData
RtlSubscribeWnfStateChangeNotification
RtlUnsubscribeWnfNotificationWaitForCompletion
RtlQueryWnfStateData
ZwOpenKey
RtlNtStatusToDosError
RtlCaptureContext
RtlGetDeviceFamilyInfoEnum
NtSetInformationProcess
NtQueryInformationProcess
ZwClose
RtlReAllocateHeap
RtlAppendUnicodeToString
RtlAppendUnicodeStringToString
RtlRunOnceExecuteOnce
RtlCopyUnicodeString
RtlUpcaseUnicodeString
RtlIsStateSeparationEnabled
RtlDosPathNameToNtPathName_U_WithStatus
RtlNtStatusToDosErrorNoTeb
RtlFreeUnicodeString
NtSetThreadExecutionState
VerSetConditionMask
WinSqmSetDWORD
WinSqmIsOptedIn
WinSqmAddToStreamEx
FindResourceExW
GetModuleHandleExW
FindStringOrdinal
LoadResource
LoadStringW
FreeLibrary
LockResource
GetProcAddress
LoadLibraryExW
GetModuleFileNameW
GetModuleHandleW
SizeofResource
GetModuleFileNameA
GetModuleHandleA
InitOnceBeginInitialize
InitOnceExecuteOnce
InitOnceComplete
Sleep
CreateEventW
SetEvent
OpenEventW
InitializeSRWLock
WaitForMultipleObjectsEx
InitializeCriticalSection
OpenMutexW
DeleteCriticalSection
AcquireSRWLockShared
CreateMutexExW
ReleaseSRWLockShared
OpenSemaphoreW
WaitForSingleObjectEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
ReleaseMutex
WaitForSingleObject
InitializeCriticalSectionEx
LeaveCriticalSection
TryEnterCriticalSection
ReleaseSemaphore
EnterCriticalSection
CreateSemaphoreExW
InitializeCriticalSectionAndSpinCount
ResetEvent
CreateMutexW
SleepEx
TryAcquireSRWLockExclusive
CreateEventExW
HeapAlloc
GetProcessHeap
HeapFree
GetLastError
RaiseException
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetErrorMode
GetLongPathNameW
CompareFileTime
FindNextFileW
FindFirstFileW
GetFileAttributesW
DeleteFileW
WriteFile
CreateFileW
FindClose
EventWrite
EventRegister
EventWriteTransfer
EventSetInformation
EventEnabled
EventActivityIdControl
EventUnregister
EventProviderEnabled
RegSetValueExW
RegQueryValueExW
RegDeleteValueW
RegOpenCurrentUser
RegCreateKeyExW
RegEnumKeyExW
RegGetValueW
RegNotifyChangeKeyValue
RegQueryInfoKeyW
RegDeleteTreeW
RegOpenKeyExW
RegEnumValueW
RegCloseKey
RegDeleteKeyExW
WaitForThreadpoolWaitCallbacks
SetThreadpoolWait
CloseThreadpoolWait
WaitForThreadpoolTimerCallbacks
CreateThreadpoolWait
CloseThreadpoolTimer
TrySubmitThreadpoolCallback
CreateThreadpoolWork
SetThreadpoolTimer
CreateThreadpoolTimer
SubmitThreadpoolWork
QueueUserAPC
SetProcessShutdownParameters
GetCurrentProcessId
ResumeThread
ExitProcess
GetStartupInfoW
GetPriorityClass
SetThreadPriorityBoost
SetPriorityClass
SetThreadPriority
CreateProcessW
TerminateProcess
OpenThread
ProcessIdToSessionId
GetExitCodeProcess
OpenProcessToken
GetCurrentThread
GetThreadPriority
GetProcessId
OpenThreadToken
GetCurrentProcess
GetCurrentThreadId
CreateThread
GetUserDefaultLangID
GetThreadUILanguage
GetGeoInfoW
GetCalendarInfoW
GetLocaleInfoW
FormatMessageW
GetLocaleInfoEx
GetUserDefaultLocaleName
OutputDebugStringW
DebugBreak
IsDebuggerPresent
CloseHandle
DuplicateHandle
VariantInit
VarUI4FromStr
SysStringLen
SafeArrayAccessData
SafeArrayCreate
SysAllocString
SafeArrayUnaccessData
SafeArrayDestroy
VariantClear
SysFreeString
SysAllocStringByteLen
SHTaskPoolGetUniqueContext
SHTaskPoolQueueTask
SetCurrentProcessExplicitAppUserModelID
IsOS
IIDFromString
StringFromIID
CoGetObjectContext
CoTaskMemFree
StringFromGUID2
CoReleaseMarshalData
CoTaskMemRealloc
CoGetInterfaceAndReleaseStream
CoCreateGuid
CoDisableCallCancellation
CoGetCallContext
CoTaskMemAlloc
CoCancelCall
CoUninitialize
CoInitializeEx
CoSetProxyBlanket
CoCreateInstance
CoGetStdMarshalEx
CoRegisterClassObject
CoEnableCallCancellation
CoInitializeSecurity
CLSIDFromString
CoWaitForMultipleHandles
CoGetApartmentType
CoMarshalInterThreadInterfaceInStream
CoCreateFreeThreadedMarshaler
CreateStreamOnHGlobal
CoGetMalloc
CoRevokeClassObject
CoFreeUnusedLibraries
PropVariantClear
CoIncrementMTAUsage
StrRChrW
StrStrIW
QISearch
StrChrW
StrCmpIW
StrCmpW
StrChrIW
StrToIntW
StrCmpNICW
StrCmpNIW
StrCmpICA
StrCmpICW
CommandLineToArgvW
SHStrDupW
IUnknown_QueryService
IUnknown_Set
IUnknown_GetSite
IUnknown_SetSite
LocalFree
LocalReAlloc
LocalAlloc
GlobalFree
GlobalAlloc
IsProcessorFeaturePresent
GetProcessMitigationPolicy
OpenProcess
GetDateFormatW
GetTickCount64
GetLocalTime
GetSystemTime
GetTickCount
GetWindowsDirectoryW
GetLogicalProcessorInformation
GetSystemTimeAsFileTime
GetSystemDirectoryW
GetVersionExW
GetTimeFormatEx
GetDateFormatEx
ExpandEnvironmentStringsW
GetCurrentDirectoryW
SearchPathW
GetCommandLineW
PathRemoveFileSpecW
PathFindFileNameW
SHExpandEnvironmentStringsW
PathGetDriveNumberW
PathIsFileSpecW
PathGetArgsW
PathRemoveBlanksW
PathParseIconLocationW
PathQuoteSpacesW
PathCombineW
PathFileExistsW
PathCommonPrefixW
PathFindExtensionW
WindowsPromoteStringBuffer
WindowsDeleteStringBuffer
WindowsDeleteString
WindowsGetStringLen
WindowsCreateStringReference
WindowsCreateString
WindowsCompareStringOrdinal
WindowsDuplicateString
WindowsSubstringWithSpecifiedLength
WindowsGetStringRawBuffer
WindowsPreallocateStringBuffer
RoActivateInstance
RoGetActivationFactory
RoUninitialize
RoInitialize
SHGetValueW
SHEnumKeyExW
SHSetValueW
SHDeleteValueW
SHQueryInfoKeyW
SHRegGetValueW
SHDeleteKeyW
MultiByteToWideChar
CompareStringW
WideCharToMultiByte
CompareStringOrdinal
SHCreateThread
SHSetThreadRef
SHGetThreadRef
SetProcessReference
SHCreateThreadRef
lstrcmpiW
lstrlenW
CopySid
DuplicateToken
IsValidSid
GetLengthSid
GetTokenInformation
EqualSid
GetAclInformation
CheckTokenMembership
MakeAbsoluteSD
GetAce
DeleteAce
InitializeAcl
SetKernelObjectSecurity
AddAce
CreateWellKnownSid
UnregisterTraceGuids
GetTraceEnableFlags
GetTraceLoggerHandle
TraceMessage
GetTraceEnableLevel
RegisterTraceGuidsW
GetUserDefaultUILanguage
LoadLibraryW
FindResourceW
SHLoadIndirectString
RemoveVectoredExceptionHandler
RegSetKeyValueW
RegDeleteKeyValueW
RoGetAgileReference
RoTransformError
RoOriginateError
GetRestrictedErrorInfo
RoFailFastWithErrorContext
SetRestrictedErrorInfo
RoGetMatchingRestrictedErrorInfo
RoOriginateLanguageException
PathCchCombine
PathCchAppend
PathCchAddExtension
PathAllocCombine
PathCchRemoveFileSpec
SHAnsiToUnicode
GlobalLock
GlobalUnlock
SetProcessInformation
SetThreadDescription
OpenFileMappingW
VirtualAlloc
VirtualFree
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
VirtualProtect
MulDiv
IStream_Write
SHCreateStreamOnFileEx
IStream_Reset
SHCreateMemStream
IStream_Read
SHOpenRegStream2W
SHCreateStreamOnFileW
GetTempPathW
QueryFullProcessImageNameW
ord170
CreateTimerQueueTimer
DeleteTimerQueueTimer
ChangeTimerQueueTimer
UnregisterWaitEx
GetProductInfo
GetOsSafeBootMode
GetUserDefaultGeoName
DeriveAppContainerSidFromAppContainerName
GetProfileType
FileTimeToSystemTime
GetTimeZoneInformation
GetDynamicTimeZoneInformation
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
GetSystemPowerStatus
RegisterWaitForSingleObject
GetComputerNameW
QueryPerformanceCounter
InitializeSListHead
InterlockedPushEntrySList
GetPersistedRegistryLocationW
LookupAccountNameW
CharNextW
CharLowerBuffW
QueryServiceConfigW
NotifyServiceStatusChangeW
GetQueuedCompletionStatus
CreateIoCompletionPort
GetPhysicallyInstalledSystemMemory
SHRegGetValueFromHKCUHKLM
GetDpiForMonitor
ord244
GetNetworkConnectivityHint
RaiseFailFastException
CharNextA
PowerDeterminePlatformRoleEx
GetPwrCapabilities
CallNtPowerInformation
ApiSetQueryApiSetPresence
ord292
ord197
ord509
SHCreateWorkerWindowW
SHPinDllOfCLSID
ShellMessageBoxW
ord479
AssocQueryStringW
ord279
ord165
ord481
SHIsChildOrSelf
PathRemoveArgsW
StrRetToStrW
ord478
ord544
ord635
StrRetToBufW
IUnknown_GetWindow
SystemParametersInfoW
GetDisplayConfigBufferSizes
GetMonitorInfoW
QueryDisplayConfig
EnumDisplayMonitors
EnumDisplayDevicesW
GetSystemMetrics
SetRect
EqualRect
UnionRect
CopyRect
InflateRect
SubtractRect
OffsetRect
PtInRect
IsRectEmpty
IntersectRect
SetRectEmpty
SetWinEventHook
NotifyWinEvent
UnhookWinEvent
SHGetIDListFromObject
ILCombine
ILFindLastID
ILGetSize
SHBindToObject
SHBindToFolderIDListParent
SHCreateItemFromIDList
ILFree
ILRemoveLastID
SHParseDisplayName
SHBindToParent
ILIsParent
SHCreateItemFromParsingName
ILClone
SHGetNameFromIDList
ILCloneFirst
ILIsEqual
DXGIDeclareAdapterRemovalSupport
GetPointerInfo
GetCurrentInputMessageSource
GetPointerDevices
EnableMouseInPointer
GetPointerType
SHGetKnownFolderIDList
SHGetFolderPathEx
GetThreadFlags
SetThreadFlags
MsgWaitForMultipleObjects
MsgWaitForMultipleObjectsEx
GetPackagesByPackageFamily
GetPackageFullName
SetWindowFeedbackSetting
RegisterClipboardFormatW
CreateWindowInBand
GetWindowBand
RegisterPowerSettingNotification
UnregisterPowerSettingNotification
InitVariantFromResource
InitVariantFromGUIDAsString
PropVariantToStringAlloc
PropVariantToUInt32
PSPropertyBag_WriteStr
PropVariantToBoolean
PSGetPropertyFromPropertyStorage
PSCreateMemoryPropertyStore
PSPropertyBag_WriteDWORD
CreateDispatcherQueueController
URLOpenBlockingStreamW
SHChangeNotify
SHCreateDataObject
FindPackagesByPackageFamily
ParseApplicationUserModelId
WTSUnRegisterSessionNotification
WTSRegisterSessionNotification
GetTextExtentPoint32W
GetStockObject
GetTextMetricsW
SetTextAlign
SetTextColor
CreateFontIndirectW
GetClipBox
SelectObject
CreateCompatibleDC
DeleteDC
CreateRectRgnIndirect
GetObjectW
GetGlyphOutlineW
GetOutlineTextMetricsW
Rectangle
SetStretchBltMode
ExcludeClipRect
StretchBlt
GetClipRgn
CombineRgn
OffsetRgn
SetRectRgn
CreateRectRgn
GetDeviceCaps
DeleteObject
SelectClipRgn
ExtTextOutW
GetCurrentObject
IsBadWritePtr
RpcStringBindingComposeW
I_RpcExceptionFilter
RpcBindingSetAuthInfoExW
RpcStringFreeW
RpcBindingFree
NdrClientCall3
UuidFromStringW
RpcBindingFromStringBindingW
InternetCrackUrlW
ord123
ord190
ord174
ord187
ord162
ord109
SHUnicodeToAnsi
ord126
ord213
ord184
ord183
ord142
ord210
ord1
ord121
ord192
ord200
ord186
ord680
ord723
ord885
ord95
ord743
ord907
ord43
Shell_GetCachedImageIndexW
ord790
ord792
ord727
ord162
SHAppBarMessage
ord894
ord193
ord906
ord895
SHGetLocalizedName
SHGetPropertyStoreForWindow
ord764
ord866
SHEvaluateSystemCommandTemplate
ord181
ord244
ExtractIconExW
ShellExecuteW
ord132
ord137
Shell_NotifyIconW
Shell_NotifyIconGetRect
ord6
SHGetStockIconInfo
DuplicateIcon
ord91
ord254
ord54
SHEnableServiceObject
ord61
ord896
SHAddToRecentDocs
ord60
SHUpdateRecycleBinIcon
ord2
SHFileOperationW
ord4
SHGetPathFromIDListW
ord645
ord644
ord753
ord733
SHChangeNotifyRegisterThread
DragQueryFileW
ord67
SHCreateItemInKnownFolder
ord206
ord201
ord188
ord899
ShellExecuteExW
ord245
ord200
ord89
ord190
ord85
ord100
ord172
ord134
ord22
ord850
ord711
ord164
PathIsDirectoryW
ord413
ord548
ord163
ord467
AssocQueryKeyW
ChrCmpIW
PathIsRelativeW
AssocCreate
GetThemeBool
OpenThemeData
OpenThemeDataForDpi
GetThemeMargins
ord138
BufferedPaintSetAlpha
GetThemePartSize
IsThemeActive
GetBufferedPaintBits
GetThemeInt
GetThemeBackgroundExtent
GetThemeColor
GetThemeMetric
SetWindowTheme
GetWindowTheme
ord126
BufferedPaintUnInit
EndBufferedPaint
BeginBufferedPaint
BufferedPaintInit
CloseThemeData
DrawThemeParentBackground
DrawThemeBackground
ord86
GetThemeFont
DrawThemeTextEx
IsCompositionActive
IsAppThemed
ord141
DwmEnableBlurBehindWindow
ord138
ord140
DwmGetWindowAttribute
ord159
ord139
DwmIsCompositionEnabled
ord113
DwmQueryThumbnailSourceSize
DwmRegisterThumbnail
ord124
DwmUpdateThumbnailProperties
DwmUnregisterThumbnail
ord114
DwmSetWindowAttribute
IsTopLevelWindow
GetMenuState
SetScrollInfo
GetScrollInfo
SetScrollPos
GetMenuStringW
InternalGetWindowText
GetLayeredWindowAttributes
SetLayeredWindowAttributes
DrawTextExW
IsProcessDPIAware
SetThreadDpiAwarenessContext
GetWindowCompositionAttribute
GetWindowProcessHandle
GetClassLongPtrW
UpdateLayeredWindow
ord2521
GetIconInfoExW
GhostWindowFromHungWindow
GetSysColorBrush
GetSystemMenu
ModifyMenuW
GetAsyncKeyState
ReplyMessage
MonitorFromPoint
AdjustWindowRectEx
GetDC
ReleaseDC
MonitorFromWindow
IsIconic
CreatePopupMenu
GetMenuDefaultItem
DestroyMenu
LoadCursorW
SetCursor
SetMenuItemInfoW
DefWindowProcA
IsWindowUnicode
LoadAcceleratorsW
ChangeWindowMessageFilterEx
TranslateAcceleratorW
ord2611
MonitorFromRect
GetGuiResources
IsHungAppWindow
ord2574
SwitchToThisWindow
GetLastActivePopup
UnregisterHotKey
RegisterHotKey
SendDlgItemMessageW
EndDialog
ord2573
GetKeyState
LoadIconW
HungWindowFromGhostWindow
CascadeWindows
TileWindows
LockWorkStation
InjectMouseInput
MapVirtualKeyExW
UnregisterClassW
ord2522
GetMenuInfo
SetMenuInfo
InjectKeyboardInput
GetDpiForSystem
GetWindowDpiAwarenessContext
AreDpiAwarenessContextsEqual
CharLowerW
IsCharAlphaNumericW
GetCaretBlinkTime
GetSysColor
CopyImage
DestroyIcon
DrawIconEx
GetSystemMetricsForDpi
GetIconInfo
ord2005
TrackMouseEvent
SetCapture
GetCapture
GetClassWord
ReleaseCapture
GetClassLongW
GetPhysicalCursorPos
GetCursorInfo
ShowWindowAsync
InsertMenuW
GetDoubleClickTime
CalculatePopupWindowPosition
CopyIcon
GetLastInputInfo
AdjustWindowRect
GetDpiForWindow
SetWindowCompositionAttribute
EndTask
BringWindowToTop
SetGestureConfig
UnregisterClassA
LoadImageW
PostThreadMessageW
CheckMenuItem
EnableMenuItem
RemoveMenu
ExitWindowsEx
SetMenuDefaultItem
TrackPopupMenuEx
DeleteMenu
FillRect
DrawTextW
LoadMenuW
GetSubMenu
CreateIconIndirect
GetMenuItemCount
GetMenuItemInfoW
GetUserNameExW
ResolveDelayLoadedAPI
DelayLoadFailureHook
VerifyVersionInfoW
PowerCreateRequest
PowerSetRequest
IsProcessInWDAGContainer
CopyFileW
WaitForMultipleObjects
SetTermsrvAppInstallMode
ord292
StartTraceW
StopTraceW
EnableTraceEx2
GetStagedPackagePathByFullName2
BiPtQueryWorkItem
BiPtAssociateApplicationEntryPoint
BiPtEnumerateWorkItemsForPackageName
BiPtFreeMemory
ceilf
floorf
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ