slzslz 发表于 前天 22:04

uxtheme.dll x64汇编劫持代码 ,解决无名导出函数转发

format PE64 GUI DLL
entry DllEntryPoint;
use64;
include 'win64a.inc';
section '.text' code readable executable;'
macro apifix hMod,sz,fn;'
{
mov rdx, sz                ; proc name
mov rcx, hMod            ; hLib
call
mov qword, rax
};
; 利用 VirtualProtect 修改目标区域为可读写执行
; 修改完后再恢复其保护。
; 参数: 修改地址(地址偏移), 保护长度, 储存旧保护的地址,
;       数据宽度(byte/word/dword/qword), 写出数据
macro fixCode lpAddr,len,oldProtect,dataWidth,data
{
lea rax, oldProtect
invoke VirtualProtect, lpAddr, len, PAGE_EXECUTE_READWRITE, rax
mov rax, lpAddr
mov dataWidth , data
lea rax, oldProtect
invoke VirtualProtect, lpAddr, len, dword, rax
};
; 修复导出的 API 地址
proc FixImport
local hModule:QWORD
local lpBuffer:QWORD
frame
   invoke LocalAlloc, LPTR, MAX_PATH + 1
    mov , rax
    invoke GetSystemDirectory, rax, MAX_PATH
    invoke strncat, , szTargetLibrary, MAX_PATH
   invoke LoadLibrary,
    mov , rax
invoke LocalFree,
apifix , 1, _Ordinal1
apifix , 2, _Ordinal2
apifix , 3, _Ordinal3
apifix , 4, _Ordinal4
apifix , szBeginPanningFeedback, _BeginPanningFeedback
apifix , szEndPanningFeedback, _EndPanningFeedback
apifix , 7, _Ordinal7
apifix , 8, _Ordinal8
apifix , 9, _Ordinal9
apifix , 10, _Ordinal10
apifix , 11, _Ordinal11
apifix , szUpdatePanningFeedback, _UpdatePanningFeedback
apifix , 13, _Ordinal13
apifix , 14, _Ordinal14
apifix , 15, _Ordinal15
apifix , 16, _Ordinal16
apifix , 17, _Ordinal17
apifix , 18, _Ordinal18
apifix , 19, _Ordinal19
apifix , 20, _Ordinal20
apifix , 21, _Ordinal21
apifix , 22, _Ordinal22
apifix , 23, _Ordinal23
apifix , 24, _Ordinal24
apifix , 25, _Ordinal25
apifix , 26, _Ordinal26
apifix , 27, _Ordinal27
apifix , 28, _Ordinal28
apifix , 29, _Ordinal29
apifix , 30, _Ordinal30
apifix , 31, _Ordinal31
apifix , 32, _Ordinal32
apifix , 33, _Ordinal33
apifix , 34, _Ordinal34
apifix , 35, _Ordinal35
apifix , 36, _Ordinal36
apifix , szBeginBufferedAnimation, _BeginBufferedAnimation
apifix , szBeginBufferedPaint, _BeginBufferedPaint
apifix , szBufferedPaintClear, _BufferedPaintClear
apifix , szBufferedPaintInit, _BufferedPaintInit
apifix , szBufferedPaintRenderAnimation, _BufferedPaintRenderAnimation
apifix , szBufferedPaintSetAlpha, _BufferedPaintSetAlpha
apifix , 43, _Ordinal43
apifix , 44, _Ordinal44
apifix , 45, _Ordinal45
apifix , 46, _Ordinal46
apifix , szDrawThemeBackgroundEx, _DrawThemeBackgroundEx
apifix , 48, _Ordinal48
apifix , 49, _Ordinal49
apifix , 50, _Ordinal50
apifix , szBufferedPaintStopAllAnimations, _BufferedPaintStopAllAnimations
apifix , szBufferedPaintUnInit, _BufferedPaintUnInit
apifix , szCloseThemeData, _CloseThemeData
apifix , szDllCanUnloadNow, _DllCanUnloadNow
apifix , szDllGetActivationFactory, _DllGetActivationFactory
apifix , szDllGetClassObject, _DllGetClassObject
apifix , szDrawThemeBackground, _DrawThemeBackground
apifix , szDrawThemeEdge, _DrawThemeEdge
apifix , szDrawThemeIcon, _DrawThemeIcon
apifix , 60, _Ordinal60
apifix , szOpenThemeDataEx, _OpenThemeDataEx
apifix , 62, _Ordinal62
apifix , 63, _Ordinal63
apifix , 64, _Ordinal64
apifix , 65, _Ordinal65
apifix , 66, _Ordinal66
apifix , 67, _Ordinal67
apifix , 68, _Ordinal68
apifix , 69, _Ordinal69
apifix , szDrawThemeParentBackground, _DrawThemeParentBackground
apifix , szDrawThemeParentBackgroundEx, _DrawThemeParentBackgroundEx
apifix , 72, _Ordinal72
apifix , 73, _Ordinal73
apifix , 74, _Ordinal74
apifix , 75, _Ordinal75
apifix , 76, _Ordinal76
apifix , 77, _Ordinal77
apifix , 78, _Ordinal78
apifix , 79, _Ordinal79
apifix , 80, _Ordinal80
apifix , 81, _Ordinal81
apifix , 82, _Ordinal82
apifix , 83, _Ordinal83
apifix , 84, _Ordinal84
apifix , 85, _Ordinal85
apifix , 86, _Ordinal86
apifix , 87, _Ordinal87
apifix , 88, _Ordinal88
apifix , szDrawThemeText, _DrawThemeText
apifix , 90, _Ordinal90
apifix , 91, _Ordinal91
apifix , 92, _Ordinal92
apifix , 93, _Ordinal93
apifix , 94, _Ordinal94
apifix , szGetImmersiveColorFromColorSetEx, _GetImmersiveColorFromColorSetEx
apifix , 96, _Ordinal96
apifix , 97, _Ordinal97
apifix , szGetImmersiveUserColorSetPreference, _GetImmersiveUserColorSetPreference
apifix , 99, _Ordinal99
apifix , 100, _Ordinal100
apifix , 101, _Ordinal101
apifix , 102, _Ordinal102
apifix , szDrawThemeTextEx, _DrawThemeTextEx
apifix , 104, _Ordinal104
apifix , 105, _Ordinal105
apifix , 106, _Ordinal106
apifix , 107, _Ordinal107
apifix , 108, _Ordinal108
apifix , 109, _Ordinal109
apifix , 110, _Ordinal110
apifix , 111, _Ordinal111
apifix , 112, _Ordinal112
apifix , 113, _Ordinal113
apifix , szEnableThemeDialogTexture, _EnableThemeDialogTexture
apifix , 115, _Ordinal115
apifix , 116, _Ordinal116
apifix , 117, _Ordinal117
apifix , 118, _Ordinal118
apifix , 119, _Ordinal119
apifix , szGetUserColorPreference, _GetUserColorPreference
apifix , szGetColorFromPreference, _GetColorFromPreference
apifix , 122, _Ordinal122
apifix , 123, _Ordinal123
apifix , 124, _Ordinal124
apifix , 125, _Ordinal125
apifix , 126, _Ordinal126
apifix , 127, _Ordinal127
apifix , 128, _Ordinal128
apifix , szEnableTheming, _EnableTheming
apifix , 130, _Ordinal130
apifix , 131, _Ordinal131
apifix , 132, _Ordinal132
apifix , 133, _Ordinal133
apifix , szEndBufferedAnimation, _EndBufferedAnimation
apifix , 135, _Ordinal135
apifix , 136, _Ordinal136
apifix , 137, _Ordinal137
apifix , 138, _Ordinal138
apifix , 139, _Ordinal139
apifix , szEndBufferedPaint, _EndBufferedPaint
apifix , szGetBufferedPaintBits, _GetBufferedPaintBits
apifix , szGetBufferedPaintDC, _GetBufferedPaintDC
apifix , szGetBufferedPaintTargetDC, _GetBufferedPaintTargetDC
apifix , szGetBufferedPaintTargetRect, _GetBufferedPaintTargetRect
apifix , szGetCurrentThemeName, _GetCurrentThemeName
apifix , szGetThemeAnimationProperty, _GetThemeAnimationProperty
apifix , szGetThemeAnimationTransform, _GetThemeAnimationTransform
apifix , szGetThemeAppProperties, _GetThemeAppProperties
apifix , szGetThemeBackgroundContentRect, _GetThemeBackgroundContentRect
apifix , szGetThemeBackgroundExtent, _GetThemeBackgroundExtent
apifix , szGetThemeBackgroundRegion, _GetThemeBackgroundRegion
apifix , szGetThemeBitmap, _GetThemeBitmap
apifix , szGetThemeBool, _GetThemeBool
apifix , szGetThemeColor, _GetThemeColor
apifix , szGetThemeDocumentationProperty, _GetThemeDocumentationProperty
apifix , szGetThemeEnumValue, _GetThemeEnumValue
apifix , szGetThemeFilename, _GetThemeFilename
apifix , szGetThemeFont, _GetThemeFont
apifix , szGetThemeInt, _GetThemeInt
apifix , szGetThemeIntList, _GetThemeIntList
apifix , szGetThemeMargins, _GetThemeMargins
apifix , szGetThemeMetric, _GetThemeMetric
apifix , szGetThemePartSize, _GetThemePartSize
apifix , szGetThemePosition, _GetThemePosition
apifix , szGetThemePropertyOrigin, _GetThemePropertyOrigin
apifix , szGetThemeRect, _GetThemeRect
apifix , szGetThemeStream, _GetThemeStream
apifix , szGetThemeString, _GetThemeString
apifix , szGetThemeSysBool, _GetThemeSysBool
apifix , szGetThemeSysColor, _GetThemeSysColor
apifix , szGetThemeSysColorBrush, _GetThemeSysColorBrush
apifix , szGetThemeSysFont, _GetThemeSysFont
apifix , szGetThemeSysInt, _GetThemeSysInt
apifix , szGetThemeSysSize, _GetThemeSysSize
apifix , szGetThemeSysString, _GetThemeSysString
apifix , szGetThemeTextExtent, _GetThemeTextExtent
apifix , szGetThemeTextMetrics, _GetThemeTextMetrics
apifix , szGetThemeTimingFunction, _GetThemeTimingFunction
apifix , szGetThemeTransitionDuration, _GetThemeTransitionDuration
apifix , szGetWindowTheme, _GetWindowTheme
apifix , szHitTestThemeBackground, _HitTestThemeBackground
apifix , szIsAppThemed, _IsAppThemed
apifix , szIsCompositionActive, _IsCompositionActive
apifix , szIsThemeActive, _IsThemeActive
apifix , szIsThemeBackgroundPartiallyTransparent, _IsThemeBackgroundPartiallyTransparent
apifix , szIsThemeDialogTextureEnabled, _IsThemeDialogTextureEnabled
apifix , szIsThemePartDefined, _IsThemePartDefined
apifix , szOpenThemeData, _OpenThemeData
apifix , szOpenThemeDataForDpi, _OpenThemeDataForDpi
apifix , szSetThemeAppProperties, _SetThemeAppProperties
apifix , szSetWindowTheme, _SetWindowTheme
apifix , szSetWindowThemeAttribute, _SetWindowThemeAttribute
apifix , szThemeInitApiHook, _ThemeInitApiHook
endf;
ret
endp;
proc DllEntryPoint hinstDLL,fdwReason,lpvReserved
local hModule:QWORD
local oldProtect:DWORD
local lpBuffer:QWORD
cmp edx, 1
jnz skipPatch
; 检测是否为目标进程
   frame
    invoke LocalAlloc, LPTR, MAX_PATH + 1
    mov , rax
   invoke GetModuleFileName, NULL, rax, MAX_PATH
   invoke strstr, , szTargetExeName
    mov dword, eax
    invoke LocalFree,
endf
cmp dword, 0
jz skipPatch
frame
; 取得当前主程序句柄
    invoke GetModuleHandle,NULL
    mov rax,
    ; 00000000012D0D99 | B0 00                  | mov al,0
    add rax, 0xED0D9A ; offset
    mov , rax
    fixCode , 1, , byte, 0x00
; 修改
    mov rax,
    mov word, 0xB848
   add rax, 2
    mov qword, 0xB848
    add rax, 8
    mov dword, 0x02EBD0FF
; 还原
    lea rax,
    invoke VirtualProtect, , 0x10, dword, rax
endf
skipPatch:
call FixImport
mov eax,TRUE
ret
endp
; 导出函数, 全是跳转
_exp_Ordinal1:    jmp [      _Ordinal1   ]
_exp_Ordinal2:    jmp [      _Ordinal2   ]
_exp_Ordinal3:    jmp [      _Ordinal3   ]
_exp_Ordinal4:    jmp [      _Ordinal4   ]
_exp_BeginPanningFeedback:    jmp [      _BeginPanningFeedback   ]
_exp_EndPanningFeedback:    jmp [      _EndPanningFeedback   ]
_exp_Ordinal7:    jmp [      _Ordinal7   ]
_exp_Ordinal8:    jmp [      _Ordinal8   ]
_exp_Ordinal9:    jmp [      _Ordinal9   ]
_exp_Ordinal10:    jmp [      _Ordinal10   ]
_exp_Ordinal11:    jmp [      _Ordinal11   ]
_exp_UpdatePanningFeedback:    jmp [      _UpdatePanningFeedback   ]
_exp_Ordinal13:    jmp [      _Ordinal13   ]
_exp_Ordinal14:    jmp [      _Ordinal14   ]
_exp_Ordinal15:    jmp [      _Ordinal15   ]
_exp_Ordinal16:    jmp [      _Ordinal16   ]
_exp_Ordinal17:    jmp [      _Ordinal17   ]
_exp_Ordinal18:    jmp [      _Ordinal18   ]
_exp_Ordinal19:    jmp [      _Ordinal19   ]
_exp_Ordinal20:    jmp [      _Ordinal20   ]
_exp_Ordinal21:    jmp [      _Ordinal21   ]
_exp_Ordinal22:    jmp [      _Ordinal22   ]
_exp_Ordinal23:    jmp [      _Ordinal23   ]
_exp_Ordinal24:    jmp [      _Ordinal24   ]
_exp_Ordinal25:    jmp [      _Ordinal25   ]
_exp_Ordinal26:    jmp [      _Ordinal26   ]
_exp_Ordinal27:    jmp [      _Ordinal27   ]
_exp_Ordinal28:    jmp [      _Ordinal28   ]
_exp_Ordinal29:    jmp [      _Ordinal29   ]
_exp_Ordinal30:    jmp [      _Ordinal30   ]
_exp_Ordinal31:    jmp [      _Ordinal31   ]
_exp_Ordinal32:    jmp [      _Ordinal32   ]
_exp_Ordinal33:    jmp [      _Ordinal33   ]
_exp_Ordinal34:    jmp [      _Ordinal34   ]
_exp_Ordinal35:    jmp [      _Ordinal35   ]
_exp_Ordinal36:    jmp [      _Ordinal36   ]
_exp_BeginBufferedAnimation:    jmp [      _BeginBufferedAnimation   ]
_exp_BeginBufferedPaint:    jmp [      _BeginBufferedPaint   ]
_exp_BufferedPaintClear:    jmp [      _BufferedPaintClear   ]
_exp_BufferedPaintInit:    jmp [      _BufferedPaintInit   ]
_exp_BufferedPaintRenderAnimation:    jmp [      _BufferedPaintRenderAnimation   ]
_exp_BufferedPaintSetAlpha:    jmp [      _BufferedPaintSetAlpha   ]
_exp_Ordinal43:    jmp [      _Ordinal43   ]
_exp_Ordinal44:    jmp [      _Ordinal44   ]
_exp_Ordinal45:    jmp [      _Ordinal45   ]
_exp_Ordinal46:    jmp [      _Ordinal46   ]
_exp_DrawThemeBackgroundEx:    jmp [      _DrawThemeBackgroundEx   ]
_exp_Ordinal48:    jmp [      _Ordinal48   ]
_exp_Ordinal49:    jmp [      _Ordinal49   ]
_exp_Ordinal50:    jmp [      _Ordinal50   ]
_exp_BufferedPaintStopAllAnimations:    jmp [      _BufferedPaintStopAllAnimations   ]
_exp_BufferedPaintUnInit:    jmp [      _BufferedPaintUnInit   ]
_exp_CloseThemeData:    jmp [      _CloseThemeData   ]
_exp_DllCanUnloadNow:    jmp [      _DllCanUnloadNow   ]
_exp_DllGetActivationFactory:    jmp [      _DllGetActivationFactory   ]
_exp_DllGetClassObject:    jmp [      _DllGetClassObject   ]
_exp_DrawThemeBackground:    jmp [      _DrawThemeBackground   ]
_exp_DrawThemeEdge:    jmp [      _DrawThemeEdge   ]
_exp_DrawThemeIcon:    jmp [      _DrawThemeIcon   ]
_exp_Ordinal60:    jmp [      _Ordinal60   ]
_exp_OpenThemeDataEx:    jmp [      _OpenThemeDataEx   ]
_exp_Ordinal62:    jmp [      _Ordinal62   ]
_exp_Ordinal63:    jmp [      _Ordinal63   ]
_exp_Ordinal64:    jmp [      _Ordinal64   ]
_exp_Ordinal65:    jmp [      _Ordinal65   ]
_exp_Ordinal66:    jmp [      _Ordinal66   ]
_exp_Ordinal67:    jmp [      _Ordinal67   ]
_exp_Ordinal68:    jmp [      _Ordinal68   ]
_exp_Ordinal69:    jmp [      _Ordinal69   ]
_exp_DrawThemeParentBackground:    jmp [      _DrawThemeParentBackground   ]
_exp_DrawThemeParentBackgroundEx:    jmp [      _DrawThemeParentBackgroundEx   ]
_exp_Ordinal72:    jmp [      _Ordinal72   ]
_exp_Ordinal73:    jmp [      _Ordinal73   ]
_exp_Ordinal74:    jmp [      _Ordinal74   ]
_exp_Ordinal75:    jmp [      _Ordinal75   ]
_exp_Ordinal76:    jmp [      _Ordinal76   ]
_exp_Ordinal77:    jmp [      _Ordinal77   ]
_exp_Ordinal78:    jmp [      _Ordinal78   ]
_exp_Ordinal79:    jmp [      _Ordinal79   ]
_exp_Ordinal80:    jmp [      _Ordinal80   ]
_exp_Ordinal81:    jmp [      _Ordinal81   ]
_exp_Ordinal82:    jmp [      _Ordinal82   ]
_exp_Ordinal83:    jmp [      _Ordinal83   ]
_exp_Ordinal84:    jmp [      _Ordinal84   ]
_exp_Ordinal85:    jmp [      _Ordinal85   ]
_exp_Ordinal86:    jmp [      _Ordinal86   ]
_exp_Ordinal87:    jmp [      _Ordinal87   ]
_exp_Ordinal88:    jmp [      _Ordinal88   ]
_exp_DrawThemeText:    jmp [      _DrawThemeText   ]
_exp_Ordinal90:    jmp [      _Ordinal90   ]
_exp_Ordinal91:    jmp [      _Ordinal91   ]
_exp_Ordinal92:    jmp [      _Ordinal92   ]
_exp_Ordinal93:    jmp [      _Ordinal93   ]
_exp_Ordinal94:    jmp [      _Ordinal94   ]
_exp_GetImmersiveColorFromColorSetEx:    jmp [      _GetImmersiveColorFromColorSetEx   ]
_exp_Ordinal96:    jmp [      _Ordinal96   ]
_exp_Ordinal97:    jmp [      _Ordinal97   ]
_exp_GetImmersiveUserColorSetPreference:    jmp [      _GetImmersiveUserColorSetPreference   ]
_exp_Ordinal99:    jmp [      _Ordinal99   ]
_exp_Ordinal100:    jmp [      _Ordinal100   ]
_exp_Ordinal101:    jmp [      _Ordinal101   ]
_exp_Ordinal102:    jmp [      _Ordinal102   ]
_exp_DrawThemeTextEx:    jmp [      _DrawThemeTextEx   ]
_exp_Ordinal104:    jmp [      _Ordinal104   ]
_exp_Ordinal105:    jmp [      _Ordinal105   ]
_exp_Ordinal106:    jmp [      _Ordinal106   ]
_exp_Ordinal107:    jmp [      _Ordinal107   ]
_exp_Ordinal108:    jmp [      _Ordinal108   ]
_exp_Ordinal109:    jmp [      _Ordinal109   ]
_exp_Ordinal110:    jmp [      _Ordinal110   ]
_exp_Ordinal111:    jmp [      _Ordinal111   ]
_exp_Ordinal112:    jmp [      _Ordinal112   ]
_exp_Ordinal113:    jmp [      _Ordinal113   ]
_exp_EnableThemeDialogTexture:    jmp [      _EnableThemeDialogTexture   ]
_exp_Ordinal115:    jmp [      _Ordinal115   ]
_exp_Ordinal116:    jmp [      _Ordinal116   ]
_exp_Ordinal117:    jmp [      _Ordinal117   ]
_exp_Ordinal118:    jmp [      _Ordinal118   ]
_exp_Ordinal119:    jmp [      _Ordinal119   ]
_exp_GetUserColorPreference:    jmp [      _GetUserColorPreference   ]
_exp_GetColorFromPreference:    jmp [      _GetColorFromPreference   ]
_exp_Ordinal122:    jmp [      _Ordinal122   ]
_exp_Ordinal123:    jmp [      _Ordinal123   ]
_exp_Ordinal124:    jmp [      _Ordinal124   ]
_exp_Ordinal125:    jmp [      _Ordinal125   ]
_exp_Ordinal126:    jmp [      _Ordinal126   ]
_exp_Ordinal127:    jmp [      _Ordinal127   ]
_exp_Ordinal128:    jmp [      _Ordinal128   ]
_exp_EnableTheming:    jmp [      _EnableTheming   ]
_exp_Ordinal130:    jmp [      _Ordinal130   ]
_exp_Ordinal131:    jmp [      _Ordinal131   ]
_exp_Ordinal132:    jmp [      _Ordinal132   ]
_exp_Ordinal133:    jmp [      _Ordinal133   ]
_exp_EndBufferedAnimation:    jmp [      _EndBufferedAnimation   ]
_exp_Ordinal135:    jmp [      _Ordinal135   ]
_exp_Ordinal136:    jmp [      _Ordinal136   ]
_exp_Ordinal137:    jmp [      _Ordinal137   ]
_exp_Ordinal138:    jmp [      _Ordinal138   ]
_exp_Ordinal139:    jmp [      _Ordinal139   ]
_exp_EndBufferedPaint:    jmp [      _EndBufferedPaint   ]
_exp_GetBufferedPaintBits:    jmp [      _GetBufferedPaintBits   ]
_exp_GetBufferedPaintDC:    jmp [      _GetBufferedPaintDC   ]
_exp_GetBufferedPaintTargetDC:    jmp [      _GetBufferedPaintTargetDC   ]
_exp_GetBufferedPaintTargetRect:    jmp [      _GetBufferedPaintTargetRect   ]
_exp_GetCurrentThemeName:    jmp [      _GetCurrentThemeName   ]
_exp_GetThemeAnimationProperty:    jmp [      _GetThemeAnimationProperty   ]
_exp_GetThemeAnimationTransform:    jmp [      _GetThemeAnimationTransform   ]
_exp_GetThemeAppProperties:    jmp [      _GetThemeAppProperties   ]
_exp_GetThemeBackgroundContentRect:    jmp [      _GetThemeBackgroundContentRect   ]
_exp_GetThemeBackgroundExtent:    jmp [      _GetThemeBackgroundExtent   ]
_exp_GetThemeBackgroundRegion:    jmp [      _GetThemeBackgroundRegion   ]
_exp_GetThemeBitmap:    jmp [      _GetThemeBitmap   ]
_exp_GetThemeBool:    jmp [      _GetThemeBool   ]
_exp_GetThemeColor:    jmp [      _GetThemeColor   ]
_exp_GetThemeDocumentationProperty:    jmp [      _GetThemeDocumentationProperty   ]
_exp_GetThemeEnumValue:    jmp [      _GetThemeEnumValue   ]
_exp_GetThemeFilename:    jmp [      _GetThemeFilename   ]
_exp_GetThemeFont:    jmp [      _GetThemeFont   ]
_exp_GetThemeInt:    jmp [      _GetThemeInt   ]
_exp_GetThemeIntList:    jmp [      _GetThemeIntList   ]
_exp_GetThemeMargins:    jmp [      _GetThemeMargins   ]
_exp_GetThemeMetric:    jmp [      _GetThemeMetric   ]
_exp_GetThemePartSize:    jmp [      _GetThemePartSize   ]
_exp_GetThemePosition:    jmp [      _GetThemePosition   ]
_exp_GetThemePropertyOrigin:    jmp [      _GetThemePropertyOrigin   ]
_exp_GetThemeRect:    jmp [      _GetThemeRect   ]
_exp_GetThemeStream:    jmp [      _GetThemeStream   ]
_exp_GetThemeString:    jmp [      _GetThemeString   ]
_exp_GetThemeSysBool:    jmp [      _GetThemeSysBool   ]
_exp_GetThemeSysColor:    jmp [      _GetThemeSysColor   ]
_exp_GetThemeSysColorBrush:    jmp [      _GetThemeSysColorBrush   ]
_exp_GetThemeSysFont:    jmp [      _GetThemeSysFont   ]
_exp_GetThemeSysInt:    jmp [      _GetThemeSysInt   ]
_exp_GetThemeSysSize:    jmp [      _GetThemeSysSize   ]
_exp_GetThemeSysString:    jmp [      _GetThemeSysString   ]
_exp_GetThemeTextExtent:    jmp [      _GetThemeTextExtent   ]
_exp_GetThemeTextMetrics:    jmp [      _GetThemeTextMetrics   ]
_exp_GetThemeTimingFunction:    jmp [      _GetThemeTimingFunction   ]
_exp_GetThemeTransitionDuration:    jmp [      _GetThemeTransitionDuration   ]
_exp_GetWindowTheme:    jmp [      _GetWindowTheme   ]
_exp_HitTestThemeBackground:    jmp [      _HitTestThemeBackground   ]
_exp_IsAppThemed:    jmp [      _IsAppThemed   ]
_exp_IsCompositionActive:    jmp [      _IsCompositionActive   ]
_exp_IsThemeActive:    jmp [      _IsThemeActive   ]
_exp_IsThemeBackgroundPartiallyTransparent:    jmp [      _IsThemeBackgroundPartiallyTransparent   ]
_exp_IsThemeDialogTextureEnabled:    jmp [      _IsThemeDialogTextureEnabled   ]
_exp_IsThemePartDefined:    jmp [      _IsThemePartDefined   ]
_exp_OpenThemeData:    jmp [      _OpenThemeData   ]
_exp_OpenThemeDataForDpi:    jmp [      _OpenThemeDataForDpi   ]
_exp_SetThemeAppProperties:    jmp [      _SetThemeAppProperties   ]
_exp_SetWindowTheme:    jmp [      _SetWindowTheme   ]
_exp_SetWindowThemeAttribute:    jmp [      _SetWindowThemeAttribute   ]
_exp_ThemeInitApiHook:    jmp [      _ThemeInitApiHook   ]
; 常数
section '.szdb' data readable;
szTargetLibrary db "\uxtheme.dll",0
szTargetExeName db "\tobecracked.exe",0
szOrdinal1db "Ordinal1",0
szOrdinal2db "Ordinal2",0
szOrdinal3db "Ordinal3",0
szOrdinal4db "Ordinal4",0
szBeginPanningFeedbackdb "BeginPanningFeedback",0
szEndPanningFeedbackdb "EndPanningFeedback",0
szOrdinal7db "Ordinal7",0
szOrdinal8db "Ordinal8",0
szOrdinal9db "Ordinal9",0
szOrdinal10db "Ordinal10",0
szOrdinal11db "Ordinal11",0
szUpdatePanningFeedbackdb "UpdatePanningFeedback",0
szOrdinal13db "Ordinal13",0
szOrdinal14db "Ordinal14",0
szOrdinal15db "Ordinal15",0
szOrdinal16db "Ordinal16",0
szOrdinal17db "Ordinal17",0
szOrdinal18db "Ordinal18",0
szOrdinal19db "Ordinal19",0
szOrdinal20db "Ordinal20",0
szOrdinal21db "Ordinal21",0
szOrdinal22db "Ordinal22",0
szOrdinal23db "Ordinal23",0
szOrdinal24db "Ordinal24",0
szOrdinal25db "Ordinal25",0
szOrdinal26db "Ordinal26",0
szOrdinal27db "Ordinal27",0
szOrdinal28db "Ordinal28",0
szOrdinal29db "Ordinal29",0
szOrdinal30db "Ordinal30",0
szOrdinal31db "Ordinal31",0
szOrdinal32db "Ordinal32",0
szOrdinal33db "Ordinal33",0
szOrdinal34db "Ordinal34",0
szOrdinal35db "Ordinal35",0
szOrdinal36db "Ordinal36",0
szBeginBufferedAnimationdb "BeginBufferedAnimation",0
szBeginBufferedPaintdb "BeginBufferedPaint",0
szBufferedPaintCleardb "BufferedPaintClear",0
szBufferedPaintInitdb "BufferedPaintInit",0
szBufferedPaintRenderAnimationdb "BufferedPaintRenderAnimation",0
szBufferedPaintSetAlphadb "BufferedPaintSetAlpha",0
szOrdinal43db "Ordinal43",0
szOrdinal44db "Ordinal44",0
szOrdinal45db "Ordinal45",0
szOrdinal46db "Ordinal46",0
szDrawThemeBackgroundExdb "DrawThemeBackgroundEx",0
szOrdinal48db "Ordinal48",0
szOrdinal49db "Ordinal49",0
szOrdinal50db "Ordinal50",0
szBufferedPaintStopAllAnimationsdb "BufferedPaintStopAllAnimations",0
szBufferedPaintUnInitdb "BufferedPaintUnInit",0
szCloseThemeDatadb "CloseThemeData",0
szDllCanUnloadNowdb "DllCanUnloadNow",0
szDllGetActivationFactorydb "DllGetActivationFactory",0
szDllGetClassObjectdb "DllGetClassObject",0
szDrawThemeBackgrounddb "DrawThemeBackground",0
szDrawThemeEdgedb "DrawThemeEdge",0
szDrawThemeIcondb "DrawThemeIcon",0
szOrdinal60db "Ordinal60",0
szOpenThemeDataExdb "OpenThemeDataEx",0
szOrdinal62db "Ordinal62",0
szOrdinal63db "Ordinal63",0
szOrdinal64db "Ordinal64",0
szOrdinal65db "Ordinal65",0
szOrdinal66db "Ordinal66",0
szOrdinal67db "Ordinal67",0
szOrdinal68db "Ordinal68",0
szOrdinal69db "Ordinal69",0
szDrawThemeParentBackgrounddb "DrawThemeParentBackground",0
szDrawThemeParentBackgroundExdb "DrawThemeParentBackgroundEx",0
szOrdinal72db "Ordinal72",0
szOrdinal73db "Ordinal73",0
szOrdinal74db "Ordinal74",0
szOrdinal75db "Ordinal75",0
szOrdinal76db "Ordinal76",0
szOrdinal77db "Ordinal77",0
szOrdinal78db "Ordinal78",0
szOrdinal79db "Ordinal79",0
szOrdinal80db "Ordinal80",0
szOrdinal81db "Ordinal81",0
szOrdinal82db "Ordinal82",0
szOrdinal83db "Ordinal83",0
szOrdinal84db "Ordinal84",0
szOrdinal85db "Ordinal85",0
szOrdinal86db "Ordinal86",0
szOrdinal87db "Ordinal87",0
szOrdinal88db "Ordinal88",0
szDrawThemeTextdb "DrawThemeText",0
szOrdinal90db "Ordinal90",0
szOrdinal91db "Ordinal91",0
szOrdinal92db "Ordinal92",0
szOrdinal93db "Ordinal93",0
szOrdinal94db "Ordinal94",0
szGetImmersiveColorFromColorSetExdb "GetImmersiveColorFromColorSetEx",0
szOrdinal96db "Ordinal96",0
szOrdinal97db "Ordinal97",0
szGetImmersiveUserColorSetPreferencedb "GetImmersiveUserColorSetPreference",0
szOrdinal99db "Ordinal99",0
szOrdinal100db "Ordinal100",0
szOrdinal101db "Ordinal101",0
szOrdinal102db "Ordinal102",0
szDrawThemeTextExdb "DrawThemeTextEx",0
szOrdinal104db "Ordinal104",0
szOrdinal105db "Ordinal105",0
szOrdinal106db "Ordinal106",0
szOrdinal107db "Ordinal107",0
szOrdinal108db "Ordinal108",0
szOrdinal109db "Ordinal109",0
szOrdinal110db "Ordinal110",0
szOrdinal111db "Ordinal111",0
szOrdinal112db "Ordinal112",0
szOrdinal113db "Ordinal113",0
szEnableThemeDialogTexturedb "EnableThemeDialogTexture",0
szOrdinal115db "Ordinal115",0
szOrdinal116db "Ordinal116",0
szOrdinal117db "Ordinal117",0
szOrdinal118db "Ordinal118",0
szOrdinal119db "Ordinal119",0
szGetUserColorPreferencedb "GetUserColorPreference",0
szGetColorFromPreferencedb "GetColorFromPreference",0
szOrdinal122db "Ordinal122",0
szOrdinal123db "Ordinal123",0
szOrdinal124db "Ordinal124",0
szOrdinal125db "Ordinal125",0
szOrdinal126db "Ordinal126",0
szOrdinal127db "Ordinal127",0
szOrdinal128db "Ordinal128",0
szEnableThemingdb "EnableTheming",0
szOrdinal130db "Ordinal130",0
szOrdinal131db "Ordinal131",0
szOrdinal132db "Ordinal132",0
szOrdinal133db "Ordinal133",0
szEndBufferedAnimationdb "EndBufferedAnimation",0
szOrdinal135db "Ordinal135",0
szOrdinal136db "Ordinal136",0
szOrdinal137db "Ordinal137",0
szOrdinal138db "Ordinal138",0
szOrdinal139db "Ordinal139",0
szEndBufferedPaintdb "EndBufferedPaint",0
szGetBufferedPaintBitsdb "GetBufferedPaintBits",0
szGetBufferedPaintDCdb "GetBufferedPaintDC",0
szGetBufferedPaintTargetDCdb "GetBufferedPaintTargetDC",0
szGetBufferedPaintTargetRectdb "GetBufferedPaintTargetRect",0
szGetCurrentThemeNamedb "GetCurrentThemeName",0
szGetThemeAnimationPropertydb "GetThemeAnimationProperty",0
szGetThemeAnimationTransformdb "GetThemeAnimationTransform",0
szGetThemeAppPropertiesdb "GetThemeAppProperties",0
szGetThemeBackgroundContentRectdb "GetThemeBackgroundContentRect",0
szGetThemeBackgroundExtentdb "GetThemeBackgroundExtent",0
szGetThemeBackgroundRegiondb "GetThemeBackgroundRegion",0
szGetThemeBitmapdb "GetThemeBitmap",0
szGetThemeBooldb "GetThemeBool",0
szGetThemeColordb "GetThemeColor",0
szGetThemeDocumentationPropertydb "GetThemeDocumentationProperty",0
szGetThemeEnumValuedb "GetThemeEnumValue",0
szGetThemeFilenamedb "GetThemeFilename",0
szGetThemeFontdb "GetThemeFont",0
szGetThemeIntdb "GetThemeInt",0
szGetThemeIntListdb "GetThemeIntList",0
szGetThemeMarginsdb "GetThemeMargins",0
szGetThemeMetricdb "GetThemeMetric",0
szGetThemePartSizedb "GetThemePartSize",0
szGetThemePositiondb "GetThemePosition",0
szGetThemePropertyOrigindb "GetThemePropertyOrigin",0
szGetThemeRectdb "GetThemeRect",0
szGetThemeStreamdb "GetThemeStream",0
szGetThemeStringdb "GetThemeString",0
szGetThemeSysBooldb "GetThemeSysBool",0
szGetThemeSysColordb "GetThemeSysColor",0
szGetThemeSysColorBrushdb "GetThemeSysColorBrush",0
szGetThemeSysFontdb "GetThemeSysFont",0
szGetThemeSysIntdb "GetThemeSysInt",0
szGetThemeSysSizedb "GetThemeSysSize",0
szGetThemeSysStringdb "GetThemeSysString",0
szGetThemeTextExtentdb "GetThemeTextExtent",0
szGetThemeTextMetricsdb "GetThemeTextMetrics",0
szGetThemeTimingFunctiondb "GetThemeTimingFunction",0
szGetThemeTransitionDurationdb "GetThemeTransitionDuration",0
szGetWindowThemedb "GetWindowTheme",0
szHitTestThemeBackgrounddb "HitTestThemeBackground",0
szIsAppThemeddb "IsAppThemed",0
szIsCompositionActivedb "IsCompositionActive",0
szIsThemeActivedb "IsThemeActive",0
szIsThemeBackgroundPartiallyTransparentdb "IsThemeBackgroundPartiallyTransparent",0
szIsThemeDialogTextureEnableddb "IsThemeDialogTextureEnabled",0
szIsThemePartDefineddb "IsThemePartDefined",0
szOpenThemeDatadb "OpenThemeData",0
szOpenThemeDataForDpidb "OpenThemeDataForDpi",0
szSetThemeAppPropertiesdb "SetThemeAppProperties",0
szSetWindowThemedb "SetWindowTheme",0
szSetWindowThemeAttributedb "SetWindowThemeAttribute",0
szThemeInitApiHookdb "ThemeInitApiHook",0
; 跳转地址储存
section '.expw' data readable writeable;
_Ordinal1            dq ?
_Ordinal2            dq ?
_Ordinal3            dq ?
_Ordinal4            dq ?
_BeginPanningFeedback            dq ?
_EndPanningFeedback            dq ?
_Ordinal7            dq ?
_Ordinal8            dq ?
_Ordinal9            dq ?
_Ordinal10            dq ?
_Ordinal11            dq ?
_UpdatePanningFeedback            dq ?
_Ordinal13            dq ?
_Ordinal14            dq ?
_Ordinal15            dq ?
_Ordinal16            dq ?
_Ordinal17            dq ?
_Ordinal18            dq ?
_Ordinal19            dq ?
_Ordinal20            dq ?
_Ordinal21            dq ?
_Ordinal22            dq ?
_Ordinal23            dq ?
_Ordinal24            dq ?
_Ordinal25            dq ?
_Ordinal26            dq ?
_Ordinal27            dq ?
_Ordinal28            dq ?
_Ordinal29            dq ?
_Ordinal30            dq ?
_Ordinal31            dq ?
_Ordinal32            dq ?
_Ordinal33            dq ?
_Ordinal34            dq ?
_Ordinal35            dq ?
_Ordinal36            dq ?
_BeginBufferedAnimation            dq ?
_BeginBufferedPaint            dq ?
_BufferedPaintClear            dq ?
_BufferedPaintInit            dq ?
_BufferedPaintRenderAnimation            dq ?
_BufferedPaintSetAlpha            dq ?
_Ordinal43            dq ?
_Ordinal44            dq ?
_Ordinal45            dq ?
_Ordinal46            dq ?
_DrawThemeBackgroundEx            dq ?
_Ordinal48            dq ?
_Ordinal49            dq ?
_Ordinal50            dq ?
_BufferedPaintStopAllAnimations            dq ?
_BufferedPaintUnInit            dq ?
_CloseThemeData            dq ?
_DllCanUnloadNow            dq ?
_DllGetActivationFactory            dq ?
_DllGetClassObject            dq ?
_DrawThemeBackground            dq ?
_DrawThemeEdge            dq ?
_DrawThemeIcon            dq ?
_Ordinal60            dq ?
_OpenThemeDataEx            dq ?
_Ordinal62            dq ?
_Ordinal63            dq ?
_Ordinal64            dq ?
_Ordinal65            dq ?
_Ordinal66            dq ?
_Ordinal67            dq ?
_Ordinal68            dq ?
_Ordinal69            dq ?
_DrawThemeParentBackground            dq ?
_DrawThemeParentBackgroundEx            dq ?
_Ordinal72            dq ?
_Ordinal73            dq ?
_Ordinal74            dq ?
_Ordinal75            dq ?
_Ordinal76            dq ?
_Ordinal77            dq ?
_Ordinal78            dq ?
_Ordinal79            dq ?
_Ordinal80            dq ?
_Ordinal81            dq ?
_Ordinal82            dq ?
_Ordinal83            dq ?
_Ordinal84            dq ?
_Ordinal85            dq ?
_Ordinal86            dq ?
_Ordinal87            dq ?
_Ordinal88            dq ?
_DrawThemeText            dq ?
_Ordinal90            dq ?
_Ordinal91            dq ?
_Ordinal92            dq ?
_Ordinal93            dq ?
_Ordinal94            dq ?
_GetImmersiveColorFromColorSetEx            dq ?
_Ordinal96            dq ?
_Ordinal97            dq ?
_GetImmersiveUserColorSetPreference            dq ?
_Ordinal99            dq ?
_Ordinal100            dq ?
_Ordinal101            dq ?
_Ordinal102            dq ?
_DrawThemeTextEx            dq ?
_Ordinal104            dq ?
_Ordinal105            dq ?
_Ordinal106            dq ?
_Ordinal107            dq ?
_Ordinal108            dq ?
_Ordinal109            dq ?
_Ordinal110            dq ?
_Ordinal111            dq ?
_Ordinal112            dq ?
_Ordinal113            dq ?
_EnableThemeDialogTexture            dq ?
_Ordinal115            dq ?
_Ordinal116            dq ?
_Ordinal117            dq ?
_Ordinal118            dq ?
_Ordinal119            dq ?
_GetUserColorPreference            dq ?
_GetColorFromPreference            dq ?
_Ordinal122            dq ?
_Ordinal123            dq ?
_Ordinal124            dq ?
_Ordinal125            dq ?
_Ordinal126            dq ?
_Ordinal127            dq ?
_Ordinal128            dq ?
_EnableTheming            dq ?
_Ordinal130            dq ?
_Ordinal131            dq ?
_Ordinal132            dq ?
_Ordinal133            dq ?
_EndBufferedAnimation            dq ?
_Ordinal135            dq ?
_Ordinal136            dq ?
_Ordinal137            dq ?
_Ordinal138            dq ?
_Ordinal139            dq ?
_EndBufferedPaint            dq ?
_GetBufferedPaintBits            dq ?
_GetBufferedPaintDC            dq ?
_GetBufferedPaintTargetDC            dq ?
_GetBufferedPaintTargetRect            dq ?
_GetCurrentThemeName            dq ?
_GetThemeAnimationProperty            dq ?
_GetThemeAnimationTransform            dq ?
_GetThemeAppProperties            dq ?
_GetThemeBackgroundContentRect            dq ?
_GetThemeBackgroundExtent            dq ?
_GetThemeBackgroundRegion            dq ?
_GetThemeBitmap            dq ?
_GetThemeBool            dq ?
_GetThemeColor            dq ?
_GetThemeDocumentationProperty            dq ?
_GetThemeEnumValue            dq ?
_GetThemeFilename            dq ?
_GetThemeFont            dq ?
_GetThemeInt            dq ?
_GetThemeIntList            dq ?
_GetThemeMargins            dq ?
_GetThemeMetric            dq ?
_GetThemePartSize            dq ?
_GetThemePosition            dq ?
_GetThemePropertyOrigin            dq ?
_GetThemeRect            dq ?
_GetThemeStream            dq ?
_GetThemeString            dq ?
_GetThemeSysBool            dq ?
_GetThemeSysColor            dq ?
_GetThemeSysColorBrush            dq ?
_GetThemeSysFont            dq ?
_GetThemeSysInt            dq ?
_GetThemeSysSize            dq ?
_GetThemeSysString            dq ?
_GetThemeTextExtent            dq ?
_GetThemeTextMetrics            dq ?
_GetThemeTimingFunction            dq ?
_GetThemeTransitionDuration            dq ?
_GetWindowTheme            dq ?
_HitTestThemeBackground            dq ?
_IsAppThemed            dq ?
_IsCompositionActive            dq ?
_IsThemeActive            dq ?
_IsThemeBackgroundPartiallyTransparent            dq ?
_IsThemeDialogTextureEnabled            dq ?
_IsThemePartDefined            dq ?
_OpenThemeData            dq ?
_OpenThemeDataForDpi            dq ?
_SetThemeAppProperties            dq ?
_SetWindowTheme            dq ?
_SetWindowThemeAttribute            dq ?
_ThemeInitApiHook            dq ?
section '.idata' import data readable writeable;
   library kernel,'KERNEL32.DLL',                  \
      msvc,'msvcrt.dll';
                        ;
import kernel,                                     \
   VirtualProtect,'VirtualProtect',                   \
LocalAlloc,'LocalAlloc',                            \
LocalFree,'LocalFree',                               \
   GetModuleHandle,'GetModuleHandleA', \
   LoadLibrary,'LoadLibraryA',                  \
   GetProcAddress,'GetProcAddress',                   \
   GetModuleFileName,'GetModuleFileNameA',            \
    GetSystemDirectory,'GetSystemDirectoryA';               \
import msvc,                  \
   strstr,'strstr',\
   strncpy,'strncpy', \
   strncat,'strncat'\

section '.edata' export data readable;               \
export 'uxtheme.dll',\
_exp_Ordinal1,'Ordinal1',\
_exp_Ordinal2,'Ordinal2',\
_exp_Ordinal3,'Ordinal3',\
_exp_Ordinal4,'Ordinal4',\
_exp_BeginPanningFeedback,'BeginPanningFeedback',\
_exp_EndPanningFeedback,'EndPanningFeedback',\
_exp_Ordinal7,'Ordinal7',\
_exp_Ordinal8,'Ordinal8',\
_exp_Ordinal9,'Ordinal9',\
_exp_Ordinal10,'Ordinal10',\
_exp_Ordinal11,'Ordinal11',\
_exp_UpdatePanningFeedback,'UpdatePanningFeedback',\
_exp_Ordinal13,'Ordinal13',\
_exp_Ordinal14,'Ordinal14',\
_exp_Ordinal15,'Ordinal15',\
_exp_Ordinal16,'Ordinal16',\
_exp_Ordinal17,'Ordinal17',\
_exp_Ordinal18,'Ordinal18',\
_exp_Ordinal19,'Ordinal19',\
_exp_Ordinal20,'Ordinal20',\
_exp_Ordinal21,'Ordinal21',\
_exp_Ordinal22,'Ordinal22',\
_exp_Ordinal23,'Ordinal23',\
_exp_Ordinal24,'Ordinal24',\
_exp_Ordinal25,'Ordinal25',\
_exp_Ordinal26,'Ordinal26',\
_exp_Ordinal27,'Ordinal27',\
_exp_Ordinal28,'Ordinal28',\
_exp_Ordinal29,'Ordinal29',\
_exp_Ordinal30,'Ordinal30',\
_exp_Ordinal31,'Ordinal31',\
_exp_Ordinal32,'Ordinal32',\
_exp_Ordinal33,'Ordinal33',\
_exp_Ordinal34,'Ordinal34',\
_exp_Ordinal35,'Ordinal35',\
_exp_Ordinal36,'Ordinal36',\
_exp_BeginBufferedAnimation,'BeginBufferedAnimation',\
_exp_BeginBufferedPaint,'BeginBufferedPaint',\
_exp_BufferedPaintClear,'BufferedPaintClear',\
_exp_BufferedPaintInit,'BufferedPaintInit',\
_exp_BufferedPaintRenderAnimation,'BufferedPaintRenderAnimation',\
_exp_BufferedPaintSetAlpha,'BufferedPaintSetAlpha',\
_exp_Ordinal43,'Ordinal43',\
_exp_Ordinal44,'Ordinal44',\
_exp_Ordinal45,'Ordinal45',\
_exp_Ordinal46,'Ordinal46',\
_exp_DrawThemeBackgroundEx,'DrawThemeBackgroundEx',\
_exp_Ordinal48,'Ordinal48',\
_exp_Ordinal49,'Ordinal49',\
_exp_Ordinal50,'Ordinal50',\
_exp_BufferedPaintStopAllAnimations,'BufferedPaintStopAllAnimations',\
_exp_BufferedPaintUnInit,'BufferedPaintUnInit',\
_exp_CloseThemeData,'CloseThemeData',\
_exp_DllCanUnloadNow,'DllCanUnloadNow',\
_exp_DllGetActivationFactory,'DllGetActivationFactory',\
_exp_DllGetClassObject,'DllGetClassObject',\
_exp_DrawThemeBackground,'DrawThemeBackground',\
_exp_DrawThemeEdge,'DrawThemeEdge',\
_exp_DrawThemeIcon,'DrawThemeIcon',\
_exp_Ordinal60,'Ordinal60',\
_exp_OpenThemeDataEx,'OpenThemeDataEx',\
_exp_Ordinal62,'Ordinal62',\
_exp_Ordinal63,'Ordinal63',\
_exp_Ordinal64,'Ordinal64',\
_exp_Ordinal65,'Ordinal65',\
_exp_Ordinal66,'Ordinal66',\
_exp_Ordinal67,'Ordinal67',\
_exp_Ordinal68,'Ordinal68',\
_exp_Ordinal69,'Ordinal69',\
_exp_DrawThemeParentBackground,'DrawThemeParentBackground',\
_exp_DrawThemeParentBackgroundEx,'DrawThemeParentBackgroundEx',\
_exp_Ordinal72,'Ordinal72',\
_exp_Ordinal73,'Ordinal73',\
_exp_Ordinal74,'Ordinal74',\
_exp_Ordinal75,'Ordinal75',\
_exp_Ordinal76,'Ordinal76',\
_exp_Ordinal77,'Ordinal77',\
_exp_Ordinal78,'Ordinal78',\
_exp_Ordinal79,'Ordinal79',\
_exp_Ordinal80,'Ordinal80',\
_exp_Ordinal81,'Ordinal81',\
_exp_Ordinal82,'Ordinal82',\
_exp_Ordinal83,'Ordinal83',\
_exp_Ordinal84,'Ordinal84',\
_exp_Ordinal85,'Ordinal85',\
_exp_Ordinal86,'Ordinal86',\
_exp_Ordinal87,'Ordinal87',\
_exp_Ordinal88,'Ordinal88',\
_exp_DrawThemeText,'DrawThemeText',\
_exp_Ordinal90,'Ordinal90',\
_exp_Ordinal91,'Ordinal91',\
_exp_Ordinal92,'Ordinal92',\
_exp_Ordinal93,'Ordinal93',\
_exp_Ordinal94,'Ordinal94',\
_exp_GetImmersiveColorFromColorSetEx,'GetImmersiveColorFromColorSetEx',\
_exp_Ordinal96,'Ordinal96',\
_exp_Ordinal97,'Ordinal97',\
_exp_GetImmersiveUserColorSetPreference,'GetImmersiveUserColorSetPreference',\
_exp_Ordinal99,'Ordinal99',\
_exp_Ordinal100,'Ordinal100',\
_exp_Ordinal101,'Ordinal101',\
_exp_Ordinal102,'Ordinal102',\
_exp_DrawThemeTextEx,'DrawThemeTextEx',\
_exp_Ordinal104,'Ordinal104',\
_exp_Ordinal105,'Ordinal105',\
_exp_Ordinal106,'Ordinal106',\
_exp_Ordinal107,'Ordinal107',\
_exp_Ordinal108,'Ordinal108',\
_exp_Ordinal109,'Ordinal109',\
_exp_Ordinal110,'Ordinal110',\
_exp_Ordinal111,'Ordinal111',\
_exp_Ordinal112,'Ordinal112',\
_exp_Ordinal113,'Ordinal113',\
_exp_EnableThemeDialogTexture,'EnableThemeDialogTexture',\
_exp_Ordinal115,'Ordinal115',\
_exp_Ordinal116,'Ordinal116',\
_exp_Ordinal117,'Ordinal117',\
_exp_Ordinal118,'Ordinal118',\
_exp_Ordinal119,'Ordinal119',\
_exp_GetUserColorPreference,'GetUserColorPreference',\
_exp_GetColorFromPreference,'GetColorFromPreference',\
_exp_Ordinal122,'Ordinal122',\
_exp_Ordinal123,'Ordinal123',\
_exp_Ordinal124,'Ordinal124',\
_exp_Ordinal125,'Ordinal125',\
_exp_Ordinal126,'Ordinal126',\
_exp_Ordinal127,'Ordinal127',\
_exp_Ordinal128,'Ordinal128',\
_exp_EnableTheming,'EnableTheming',\
_exp_Ordinal130,'Ordinal130',\
_exp_Ordinal131,'Ordinal131',\
_exp_Ordinal132,'Ordinal132',\
_exp_Ordinal133,'Ordinal133',\
_exp_EndBufferedAnimation,'EndBufferedAnimation',\
_exp_Ordinal135,'Ordinal135',\
_exp_Ordinal136,'Ordinal136',\
_exp_Ordinal137,'Ordinal137',\
_exp_Ordinal138,'Ordinal138',\
_exp_Ordinal139,'Ordinal139',\
_exp_EndBufferedPaint,'EndBufferedPaint',\
_exp_GetBufferedPaintBits,'GetBufferedPaintBits',\
_exp_GetBufferedPaintDC,'GetBufferedPaintDC',\
_exp_GetBufferedPaintTargetDC,'GetBufferedPaintTargetDC',\
_exp_GetBufferedPaintTargetRect,'GetBufferedPaintTargetRect',\
_exp_GetCurrentThemeName,'GetCurrentThemeName',\
_exp_GetThemeAnimationProperty,'GetThemeAnimationProperty',\
_exp_GetThemeAnimationTransform,'GetThemeAnimationTransform',\
_exp_GetThemeAppProperties,'GetThemeAppProperties',\
_exp_GetThemeBackgroundContentRect,'GetThemeBackgroundContentRect',\
_exp_GetThemeBackgroundExtent,'GetThemeBackgroundExtent',\
_exp_GetThemeBackgroundRegion,'GetThemeBackgroundRegion',\
_exp_GetThemeBitmap,'GetThemeBitmap',\
_exp_GetThemeBool,'GetThemeBool',\
_exp_GetThemeColor,'GetThemeColor',\
_exp_GetThemeDocumentationProperty,'GetThemeDocumentationProperty',\
_exp_GetThemeEnumValue,'GetThemeEnumValue',\
_exp_GetThemeFilename,'GetThemeFilename',\
_exp_GetThemeFont,'GetThemeFont',\
_exp_GetThemeInt,'GetThemeInt',\
_exp_GetThemeIntList,'GetThemeIntList',\
_exp_GetThemeMargins,'GetThemeMargins',\
_exp_GetThemeMetric,'GetThemeMetric',\
_exp_GetThemePartSize,'GetThemePartSize',\
_exp_GetThemePosition,'GetThemePosition',\
_exp_GetThemePropertyOrigin,'GetThemePropertyOrigin',\
_exp_GetThemeRect,'GetThemeRect',\
_exp_GetThemeStream,'GetThemeStream',\
_exp_GetThemeString,'GetThemeString',\
_exp_GetThemeSysBool,'GetThemeSysBool',\
_exp_GetThemeSysColor,'GetThemeSysColor',\
_exp_GetThemeSysColorBrush,'GetThemeSysColorBrush',\
_exp_GetThemeSysFont,'GetThemeSysFont',\
_exp_GetThemeSysInt,'GetThemeSysInt',\
_exp_GetThemeSysSize,'GetThemeSysSize',\
_exp_GetThemeSysString,'GetThemeSysString',\
_exp_GetThemeTextExtent,'GetThemeTextExtent',\
_exp_GetThemeTextMetrics,'GetThemeTextMetrics',\
_exp_GetThemeTimingFunction,'GetThemeTimingFunction',\
_exp_GetThemeTransitionDuration,'GetThemeTransitionDuration',\
_exp_GetWindowTheme,'GetWindowTheme',\
_exp_HitTestThemeBackground,'HitTestThemeBackground',\
_exp_IsAppThemed,'IsAppThemed',\
_exp_IsCompositionActive,'IsCompositionActive',\
_exp_IsThemeActive,'IsThemeActive',\
_exp_IsThemeBackgroundPartiallyTransparent,'IsThemeBackgroundPartiallyTransparent',\
_exp_IsThemeDialogTextureEnabled,'IsThemeDialogTextureEnabled',\
_exp_IsThemePartDefined,'IsThemePartDefined',\
_exp_OpenThemeData,'OpenThemeData',\
_exp_OpenThemeDataForDpi,'OpenThemeDataForDpi',\
_exp_SetThemeAppProperties,'SetThemeAppProperties',\
_exp_SetWindowTheme,'SetWindowTheme',\
_exp_SetWindowThemeAttribute,'SetWindowThemeAttribute',\
_exp_ThemeInitApiHook,'ThemeInitApiHook'

飞天 发表于 昨天 08:14

感谢分享

chchhau 发表于 昨天 08:47

PYG20周年生日快乐!

gujin162 发表于 昨天 09:40

感谢大佬分享~~
页: [1]
查看完整版本: uxtheme.dll x64汇编劫持代码 ,解决无名导出函数转发