Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
explorerwin.exe
Resource
win11-20231215-en
Target
explorerwin.exe
Size
4.7MB
MD5
4bf8cf1a2379b0054860ec220ca329b9
SHA1
e94fc38810c097a64f7419960f2d21052d1cb2e7
SHA256
63f8608b5eb6ba2d37fffaf46f86363faf15684a367c1603ceb06f0693c877ba
SHA512
759c43c4f2ff060aaec953e6386d3b7225bbc496ab2c77ef594a92aaf662e149338c24d43a9fb9b4c8cf49bf88f2f5ba099f555cdc280353336ca9ca94733294
SSDEEP
49152:KIvVKvj+iGT1Lhbad1qK+OxEaLiqyZ6LXl5BffkbeiJ2+Nekgwb4EcwkdK6zjlZu:LBXqxlnkb88Nzuw8a0cD
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
explorer.pdb
?_Xout_of_range@std@@YAXPEBD@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
_Thrd_detach
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
_Thrd_join
_Thrd_id
_Cnd_do_broadcast_at_thread_exit
?_Xlength_error@std@@YAXPEBD@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z
?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z
?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG0@Z
?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ
?tolower@?$ctype@G@std@@QEBAPEBGPEAGPEBG@Z
?_Xbad_alloc@std@@YAXXZ
?tolower@?$ctype@G@std@@QEBAGG@Z
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
_Wcscoll
?_Xbad_function_call@std@@YAXXZ
?id@?$collate@G@std@@2V0locale@2@A
??Bid@locale@std@@QEAA_KXZ
?id@?$ctype@G@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
??0_Lockit@std@@QEAA@H@Z
??0_Locinfo@std@@QEAA@PEBD@Z
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??1_Lockit@std@@QEAA@XZ
??1_Locinfo@std@@QEAA@XZ
?is@?$ctype@G@std@@QEBA_NFG@Z
?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Incref@facet@locale@std@@UEAAXXZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z
?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ
?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?uncaught_exception@std@@YA_NXZ
?good@ios_base@std@@QEBA_NXZ
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ
?width@ios_base@std@@QEBA_JXZ
?flags@ios_base@std@@QEBAHXZ
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGXZ
?width@ios_base@std@@QEAA_J_J@Z
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_unlock
_Mtx_lock
_Xtime_get_ticks
_Wcsxfrm
_initterm_e
_register_thread_local_exe_atexit_callback
_c_exit
_set_error_mode
_initterm
_time64
memset
strncmp
wcscspn
wcsncmp
wcscmp
_o_iswalnum
_o_iswspace
_o_malloc
_o_memcpy_s
_o_pow
_o_realloc
_o_sqrt
_o_terminate
_o_toupper
_o_towlower
_o_wcscat_s
_o_wcscpy_s
_o_wcsncpy_s
_o_wcstol
__C_specific_handler
__CxxFrameHandler3
_o__wtoi
memmove
_o_free
_o__set_new_mode
_o__set_fmode
_o__set_errno
_o__set_app_type
_o__seh_filter_exe
_o__register_onexit_function
_o__recalloc
_o__purecall
_o__mktime64
_o_floor
_o_exit
_o_ceil
_o__wcsnicmp
_o_bsearch
_o__wcsicmp
_o__localtime64
_o__itow_s
_o__invalid_parameter_noinfo_noreturn
_o__invalid_parameter_noinfo
_o__initialize_wide_environment
_o__initialize_onexit_table
_o__get_wide_winmain_command_line
_o__get_errno
_o__exit
_o__errno
_o__difftime64
_o__crt_atexit
_o__configure_wide_argv
_o__configthreadlocale
_o__cexit
_o__beginthreadex
_o___stdio_common_vswscanf
_o___stdio_common_vswprintf
_o___stdio_common_vsnwprintf_s
_o___stdio_common_vsnprintf_s
_o___std_exception_destroy
_o___std_exception_copy
_o___p__commode
wcsstr
__std_terminate
__CxxFrameHandler4
_CxxThrowException
memcmp
memcpy
PicFreeFileInfo
PicRetrieveFileInfo
ord9
AssignProcessToJobObject
CreateJobObjectW
SetInformationJobObject
QueryInformationJobObject
RegisterApplicationRestart
UrlUnescapeW
HashData
PathIsURLW
CheckElevationEnabled
CheckElevation
SHRegGetBoolUSValueW
SHRegGetUSValueW
CoRegisterMessageFilter
GlobalGetAtomNameW
ActivateActCtx
DeactivateActCtx
CreateActCtxW
ReleaseActCtx
RtlInitString
RtlGetVersion
ZwQuerySystemInformation
RtlInitUnicodeString
RtlUpcaseUnicodeChar
RtlGetNativeSystemInformation
ZwQueryDirectoryFile
RtlpEnsureBufferSize
RtlNtPathNameToDosPathName
ZwOpenFile
ZwEnumerateKey
RtlInitUnicodeStringEx
RtlFormatCurrentUserKeyPath
ZwCreateFile
ZwQueryInformationFile
ZwCreateSection
ZwQueryInformationProcess
ZwSetInformationProcess
RtlxAnsiStringToUnicodeSize
RtlAnsiStringToUnicodeString
ZwUnmapViewOfSection
ZwMapViewOfSection
LdrResSearchResource
RtlVerifyVersionInfo
RtlImageDirectoryEntryToData
RtlReleaseSRWLockShared
RtlAcquireSRWLockShared
RtlReleaseSRWLockExclusive
RtlAcquireSRWLockExclusive
wcsspn
NtOpenThreadToken
NtClose
NtQueryInformationToken
NtOpenProcessToken
RtlCompareUnicodeString
RtlFreeHeap
RtlAllocateHeap
wcschr
wcsrchr
strchr
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlNtStatusToDosError
ZwQueryValueKey
RtlPublishWnfStateData
NtSetSystemInformation
RtlFlushHeaps
NtQueryWnfStateData
RtlSubscribeWnfStateChangeNotification
RtlUnsubscribeWnfNotificationWaitForCompletion
ZwOpenKey
RtlQueryWnfStateData
RtlCaptureContext
RtlGetDeviceFamilyInfoEnum
NtSetInformationProcess
NtQueryInformationProcess
ZwClose
RtlReAllocateHeap
RtlAppendUnicodeToString
RtlAppendUnicodeStringToString
RtlRunOnceExecuteOnce
RtlCopyUnicodeString
RtlUpcaseUnicodeString
RtlIsStateSeparationEnabled
RtlDosPathNameToNtPathName_U_WithStatus
RtlNtStatusToDosErrorNoTeb
RtlFreeUnicodeString
NtSetThreadExecutionState
VerSetConditionMask
RtlQueryResourcePolicy
WinSqmSetDWORD
WinSqmIsOptedIn
WinSqmAddToStreamEx
GetModuleFileNameW
LoadResource
LoadLibraryExW
FindStringOrdinal
GetProcAddress
GetModuleHandleA
FindResourceExW
LoadStringW
GetModuleHandleExW
GetModuleHandleW
LockResource
FreeLibrary
GetModuleFileNameA
SizeofResource
InitOnceExecuteOnce
InitOnceComplete
Sleep
InitOnceBeginInitialize
CreateMutexW
OpenMutexW
TryEnterCriticalSection
TryAcquireSRWLockExclusive
SleepEx
WaitForMultipleObjectsEx
InitializeSRWLock
DeleteCriticalSection
AcquireSRWLockShared
CreateMutexExW
ReleaseSRWLockShared
OpenSemaphoreW
WaitForSingleObjectEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
ReleaseMutex
WaitForSingleObject
InitializeCriticalSectionEx
LeaveCriticalSection
ResetEvent
ReleaseSemaphore
EnterCriticalSection
CreateSemaphoreExW
InitializeCriticalSectionAndSpinCount
InitializeCriticalSection
OpenEventW
SetEvent
CreateEventExW
CreateEventW
HeapFree
GetProcessHeap
HeapAlloc
SetLastError
SetUnhandledExceptionFilter
GetLastError
RaiseException
SetErrorMode
UnhandledExceptionFilter
FindClose
FindNextFileW
FindFirstFileW
CompareFileTime
GetFileAttributesW
GetLongPathNameW
CreateFileW
WriteFile
DeleteFileW
EventRegister
EventActivityIdControl
EventSetInformation
EventEnabled
EventWriteTransfer
EventUnregister
EventProviderEnabled
EventWrite
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteTreeW
RegNotifyChangeKeyValue
RegOpenCurrentUser
RegEnumKeyExW
RegSetValueExW
RegGetValueW
RegDeleteValueW
RegEnumValueW
RegQueryInfoKeyW
RegDeleteKeyExW
WaitForThreadpoolWaitCallbacks
TrySubmitThreadpoolCallback
CreateThreadpoolTimer
SubmitThreadpoolWork
SetThreadpoolTimer
CloseThreadpoolTimer
SetThreadpoolWait
CloseThreadpoolWait
CreateThreadpoolWait
WaitForThreadpoolTimerCallbacks
CreateThreadpoolWork
SetPriorityClass
ResumeThread
TerminateProcess
GetProcessId
GetExitCodeProcess
GetCurrentProcessId
GetThreadPriority
GetCurrentProcess
OpenThreadToken
GetCurrentThread
OpenProcessToken
OpenThread
ProcessIdToSessionId
QueueUserAPC
SetThreadPriorityBoost
CreateProcessW
SetThreadPriority
CreateThread
GetCurrentThreadId
GetStartupInfoW
ExitProcess
SetProcessShutdownParameters
GetPriorityClass
GetUserDefaultLocaleName
GetThreadUILanguage
GetLocaleInfoEx
GetCalendarInfoW
GetUserDefaultLangID
FormatMessageW
GetLocaleInfoW
DebugBreak
IsDebuggerPresent
OutputDebugStringW
CloseHandle
DuplicateHandle
SafeArrayDestroy
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayCreate
VarUI4FromStr
SysAllocStringByteLen
VariantClear
SysAllocString
SysFreeString
SysStringLen
VariantInit
SHTaskPoolGetUniqueContext
SHTaskPoolQueueTask
SetCurrentProcessExplicitAppUserModelID
IsOS
CoWaitForMultipleHandles
CreateStreamOnHGlobal
CoGetStdMarshalEx
CoGetApartmentType
CoCreateInstance
CoDisableCallCancellation
CoCreateFreeThreadedMarshaler
StringFromIID
CoInitializeSecurity
CoSetProxyBlanket
CoFreeUnusedLibraries
IIDFromString
StringFromGUID2
CoCancelCall
CoCreateGuid
CoRegisterClassObject
CoEnableCallCancellation
CoIncrementMTAUsage
CoGetObjectContext
CoRevokeClassObject
PropVariantClear
CLSIDFromString
CoTaskMemFree
CoReleaseMarshalData
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoTaskMemRealloc
CoGetCallContext
CoTaskMemAlloc
CoGetMalloc
CoUninitialize
CoInitializeEx
StrCmpNIW
StrRChrW
StrStrIW
StrCmpNICW
StrCmpIW
StrChrW
StrCmpW
StrChrIW
StrToIntW
StrCmpICW
QISearch
StrCmpICA
SHStrDupW
CommandLineToArgvW
IUnknown_GetSite
IUnknown_Set
IUnknown_SetSite
IUnknown_QueryService
LocalAlloc
GlobalAlloc
LocalReAlloc
GlobalFree
LocalFree
GetProcessMitigationPolicy
OpenProcess
IsProcessorFeaturePresent
GetDateFormatW
GetLocalTime
GetSystemTimeAsFileTime
GetTickCount
GetSystemTime
GetSystemDirectoryW
GetTickCount64
GetWindowsDirectoryW
GetVersionExW
GetDateFormatEx
GetTimeFormatEx
SearchPathW
GetCommandLineW
GetCurrentDirectoryW
ExpandEnvironmentStringsW
PathQuoteSpacesW
PathIsFileSpecW
PathRemoveBlanksW
PathFileExistsW
PathCombineW
PathCommonPrefixW
PathParseIconLocationW
PathGetArgsW
PathFindFileNameW
PathRemoveFileSpecW
SHExpandEnvironmentStringsW
PathGetDriveNumberW
PathFindExtensionW
WindowsCreateStringReference
WindowsGetStringLen
WindowsCompareStringOrdinal
WindowsDuplicateString
WindowsPreallocateStringBuffer
WindowsDeleteString
WindowsPromoteStringBuffer
WindowsDeleteStringBuffer
WindowsSubstringWithSpecifiedLength
WindowsGetStringRawBuffer
WindowsCreateString
RoInitialize
RoGetActivationFactory
RoUninitialize
RoActivateInstance
SHGetValueW
SHDeleteKeyW
SHRegGetValueW
SHQueryInfoKeyW
SHSetValueW
SHDeleteValueW
SHEnumKeyExW
CompareStringOrdinal
CompareStringW
MultiByteToWideChar
WideCharToMultiByte
SHCreateThread
SHSetThreadRef
SHGetThreadRef
SHCreateThreadRef
SetProcessReference
lstrcmpiW
lstrlenW
GetLengthSid
IsValidSid
GetAclInformation
CreateWellKnownSid
AddAce
GetAce
GetTokenInformation
MakeAbsoluteSD
DuplicateToken
InitializeAcl
DeleteAce
SetKernelObjectSecurity
EqualSid
CopySid
CheckTokenMembership
TraceMessage
RegisterTraceGuidsW
GetTraceEnableLevel
GetTraceEnableFlags
GetTraceLoggerHandle
UnregisterTraceGuids
GetUserDefaultUILanguage
LoadLibraryW
FindResourceW
SHLoadIndirectString
RemoveVectoredExceptionHandler
RegDeleteKeyValueW
RegSetKeyValueW
RoGetAgileReference
RoOriginateError
RoTransformError
GetRestrictedErrorInfo
SetRestrictedErrorInfo
RoFailFastWithErrorContext
RoGetMatchingRestrictedErrorInfo
RoOriginateLanguageException
PathCchAddExtension
PathCchRemoveFileSpec
PathCchCombine
PathCchAppend
PathAllocCombine
SHAnsiToUnicode
GlobalUnlock
GlobalLock
SetThreadDescription
SetProcessInformation
UnmapViewOfFile
CreateFileMappingW
VirtualAlloc
VirtualFree
OpenFileMappingW
MapViewOfFile
VirtualProtect
MulDiv
IStream_Reset
SHOpenRegStream2W
SHCreateStreamOnFileEx
SHCreateMemStream
IStream_Write
SHCreateStreamOnFileW
IStream_Read
GetTempPathW
QueryFullProcessImageNameW
ord170
DeleteTimerQueueTimer
UnregisterWaitEx
CreateTimerQueueTimer
ChangeTimerQueueTimer
GetProductInfo
GetOsSafeBootMode
GetUserDefaultGeoName
DeriveAppContainerSidFromAppContainerName
GetProfileType
GetTimeZoneInformation
GetDynamicTimeZoneInformation
SystemTimeToFileTime
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetComputerNameW
GetSystemPowerStatus
RegisterWaitForSingleObject
QueryPerformanceCounter
InterlockedPushEntrySList
InitializeSListHead
GetPersistedRegistryLocationW
LookupAccountNameW
CharNextW
CharLowerBuffW
NotifyServiceStatusChangeW
QueryServiceConfigW
CreateIoCompletionPort
GetQueuedCompletionStatus
SHRegGetValueFromHKCUHKLM
ord244
GetDpiForMonitor
RaiseFailFastException
CharNextA
GetPwrCapabilities
CallNtPowerInformation
PowerDeterminePlatformRoleEx
ApiSetQueryApiSetPresence
ord544
ord197
ord292
SHIsChildOrSelf
ord478
StrRetToStrW
ord509
SHCreateWorkerWindowW
ord635
PathRemoveArgsW
ShellMessageBoxW
ord479
ord481
StrRetToBufW
ord165
SHPinDllOfCLSID
ord279
IUnknown_GetWindow
AssocQueryStringW
GetDisplayConfigBufferSizes
GetMonitorInfoW
QueryDisplayConfig
EnumDisplayMonitors
SystemParametersInfoW
GetSystemMetrics
EnumDisplayDevicesW
EqualRect
IntersectRect
SetRect
CopyRect
IsRectEmpty
PtInRect
SetRectEmpty
OffsetRect
SubtractRect
InflateRect
UnionRect
SetWinEventHook
UnhookWinEvent
NotifyWinEvent
SHGetIDListFromObject
SHCreateItemFromParsingName
ILClone
SHParseDisplayName
ILCombine
ILCloneFirst
ILGetSize
ILIsParent
ILFree
ILRemoveLastID
SHBindToParent
ILIsEqual
SHBindToFolderIDListParent
ILFindLastID
SHGetNameFromIDList
SHBindToObject
SHCreateItemFromIDList
DXGIDeclareAdapterRemovalSupport
GetPointerDevices
GetCurrentInputMessageSource
EnableMouseInPointer
GetPointerType
GetPointerInfo
GetThreadFlags
SHGetKnownFolderIDList
SHGetFolderPathEx
SetThreadFlags
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
GetPackagesByPackageFamily
GetPackageFullName
SetWindowFeedbackSetting
RegisterClipboardFormatW
CreateWindowInBand
GetWindowBand
RegisterPowerSettingNotification
UnregisterPowerSettingNotification
InitVariantFromGUIDAsString
PropVariantToStringAlloc
PSPropertyBag_WriteDWORD
PropVariantToUInt32
PSPropertyBag_WriteStr
PropVariantToBoolean
PSCreateMemoryPropertyStore
PSGetPropertyFromPropertyStorage
InitVariantFromResource
CreateDispatcherQueueController
URLOpenBlockingStreamW
SHChangeNotify
SHCreateDataObject
FindPackagesByPackageFamily
ParseApplicationUserModelId
WTSUnRegisterSessionNotification
WTSRegisterSessionNotification
GetClipBox
SelectObject
CreateCompatibleDC
DeleteDC
GetObjectW
SetTextColor
DeleteObject
CombineRgn
OffsetRgn
SetTextAlign
GetTextMetricsW
SetRectRgn
CreateRectRgn
GetDeviceCaps
CreateFontIndirectW
GetStockObject
Rectangle
SetStretchBltMode
ExcludeClipRect
StretchBlt
GetTextExtentPoint32W
CreateRectRgnIndirect
GetGlyphOutlineW
GetOutlineTextMetricsW
GetClipRgn
SelectClipRgn
ExtTextOutW
GetCurrentObject
IsBadWritePtr
UuidFromStringW
NdrClientCall3
RpcBindingFree
RpcBindingFromStringBindingW
RpcStringFreeW
RpcBindingSetAuthInfoExW
I_RpcExceptionFilter
RpcStringBindingComposeW
InternetCrackUrlW
ord186
ord187
ord200
ord1
ord192
ord210
ord183
ord213
ord126
ord109
ord174
ord121
ord123
ord190
ord142
ord184
ord162
SHUnicodeToAnsi
ord680
ord723
ord885
ord95
ord850
ord22
ord134
ord743
ord907
ord43
Shell_GetCachedImageIndexW
ord790
ord792
ord727
SHAppBarMessage
ord894
ord193
ord906
ord895
ShellExecuteW
SHGetLocalizedName
SHGetPropertyStoreForWindow
ord764
ord866
SHEvaluateSystemCommandTemplate
ord181
ord244
ExtractIconExW
ord132
ord137
Shell_NotifyIconW
Shell_NotifyIconGetRect
ord6
SHGetStockIconInfo
DuplicateIcon
ord91
ord254
ord54
SHEnableServiceObject
ord61
ord896
SHAddToRecentDocs
ord60
SHUpdateRecycleBinIcon
ord2
ord711
SHFileOperationW
ord4
SHGetPathFromIDListW
ord645
ord644
ord753
ord733
SHChangeNotifyRegisterThread
DragQueryFileW
ord67
SHCreateItemInKnownFolder
ord206
ord201
ord188
ord899
ShellExecuteExW
ord245
ord200
ord89
ord190
ord85
ord100
ord172
ord162
ord164
PathIsDirectoryW
ord413
ord548
ord163
ord467
AssocQueryKeyW
ChrCmpIW
PathIsRelativeW
AssocCreate
BufferedPaintInit
BeginBufferedPaint
GetThemeFont
CloseThemeData
DrawThemeBackground
EndBufferedPaint
DrawThemeTextEx
IsCompositionActive
GetThemeBackgroundExtent
GetThemeBool
DrawThemeParentBackground
OpenThemeData
OpenThemeDataForDpi
GetThemeMargins
ord138
BufferedPaintSetAlpha
ord126
GetThemePartSize
IsThemeActive
IsAppThemed
BufferedPaintUnInit
GetBufferedPaintBits
GetThemeInt
GetThemeColor
GetThemeMetric
SetWindowTheme
GetWindowTheme
ord86
ord139
ord138
DwmRegisterThumbnail
ord141
ord140
DwmGetWindowAttribute
DwmSetWindowAttribute
DwmIsCompositionEnabled
ord113
ord114
ord159
DwmQueryThumbnailSourceSize
ord124
DwmUpdateThumbnailProperties
DwmUnregisterThumbnail
DwmEnableBlurBehindWindow
ShowWindowAsync
EndTask
IsTopLevelWindow
GetMenuState
SetScrollInfo
GetScrollInfo
SetScrollPos
GetMenuStringW
InternalGetWindowText
GetLayeredWindowAttributes
SetLayeredWindowAttributes
DrawTextExW
IsProcessDPIAware
SetThreadDpiAwarenessContext
GetWindowCompositionAttribute
GetWindowProcessHandle
GetClassLongPtrW
UpdateLayeredWindow
ord2521
GetCursorInfo
GetPhysicalCursorPos
GetClassLongW
GetClassWord
GetIconInfo
GetIconInfoExW
GhostWindowFromHungWindow
GetSysColorBrush
GetSystemMenu
ModifyMenuW
GetAsyncKeyState
ReplyMessage
AdjustWindowRectEx
GetDC
ReleaseDC
MonitorFromWindow
IsIconic
CreatePopupMenu
GetMenuDefaultItem
DestroyMenu
LoadCursorW
SetCursor
SetMenuItemInfoW
DefWindowProcA
IsWindowUnicode
LoadAcceleratorsW
ChangeWindowMessageFilterEx
TranslateAcceleratorW
ord2611
MonitorFromRect
GetGuiResources
IsHungAppWindow
ord2574
SwitchToThisWindow
GetLastActivePopup
UnregisterHotKey
RegisterHotKey
InsertMenuW
ExitWindowsEx
GetKeyState
LoadIconW
UnregisterClassW
HungWindowFromGhostWindow
CascadeWindows
ord2522
GetMenuInfo
SetMenuInfo
GetDpiForSystem
TileWindows
GetWindowDpiAwarenessContext
AreDpiAwarenessContextsEqual
CharLowerW
IsCharAlphaNumericW
LockWorkStation
InjectMouseInput
MapVirtualKeyExW
InjectKeyboardInput
GetCaretBlinkTime
GetSysColor
MonitorFromPoint
CopyImage
DestroyIcon
DrawIconEx
GetSystemMetricsForDpi
ord2005
UnregisterClassA
PostThreadMessageW
BringWindowToTop
TrackMouseEvent
SetCapture
GetCapture
ReleaseCapture
GetDoubleClickTime
CalculatePopupWindowPosition
CopyIcon
GetLastInputInfo
AdjustWindowRect
GetDpiForWindow
SetWindowCompositionAttribute
SetGestureConfig
EndDialog
ord2573
LoadImageW
CheckMenuItem
EnableMenuItem
RemoveMenu
SetMenuDefaultItem
TrackPopupMenuEx
DeleteMenu
FillRect
DrawTextW
LoadMenuW
GetSubMenu
CreateIconIndirect
GetMenuItemCount
GetMenuItemInfoW
SendDlgItemMessageW
GetUserNameExW
ResolveDelayLoadedAPI
DelayLoadFailureHook
PowerCreateRequest
PowerSetRequest
VerifyVersionInfoW
IsProcessInWDAGContainer
CopyFileW
SetTermsrvAppInstallMode
ord292
StopTraceW
EnableTraceEx2
StartTraceW
GetStagedPackagePathByFullName2
BiPtFreeMemory
BiPtQueryWorkItem
BiPtAssociateApplicationEntryPoint
BiPtEnumerateWorkItemsForPackageName
floorf
ceilf
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ