uxtheme.dll x64汇编劫持代码 ，解决无名导出函数转发

slzslz

format PE64 GUI DLL
entry DllEntryPoint;
use64;
include 'win64a.inc';
section '.text' code readable executable;'
macro apifix hMod,sz,fn;'
{
mov rdx, sz                ; proc name
mov rcx, hMod              ; hLib
call [GetProcAddress]
mov qword[fn], rax
};
; 利用 VirtualProtect 修改目标区域为可读写执行
; 修改完后再恢复其保护。
; 参数: 修改地址(地址偏移), 保护长度, 储存旧保护的地址,
;       数据宽度(byte/word/dword/qword), 写出数据
macro fixCode lpAddr,len,oldProtect,dataWidth,data
  {
lea rax, oldProtect
invoke VirtualProtect, lpAddr, len, PAGE_EXECUTE_READWRITE, rax
mov rax, lpAddr
mov dataWidth [rax], data
lea rax, oldProtect
invoke VirtualProtect, lpAddr, len, dword[rax], rax
  };
; 修复导出的 API 地址
proc FixImport
  local hModule:QWORD
local lpBuffer:QWORD
  frame
   invoke LocalAlloc, LPTR, MAX_PATH + 1
    mov [lpBuffer], rax
    invoke GetSystemDirectory, rax, MAX_PATH
    invoke strncat, [lpBuffer], szTargetLibrary, MAX_PATH
   invoke LoadLibrary, [lpBuffer]
    mov [hModule], rax
  invoke LocalFree,[lpBuffer]
apifix [hModule], 1, _Ordinal1
apifix [hModule], 2, _Ordinal2
apifix [hModule], 3, _Ordinal3
apifix [hModule], 4, _Ordinal4
apifix [hModule], szBeginPanningFeedback, _BeginPanningFeedback
apifix [hModule], szEndPanningFeedback, _EndPanningFeedback
apifix [hModule], 7, _Ordinal7
apifix [hModule], 8, _Ordinal8
apifix [hModule], 9, _Ordinal9
apifix [hModule], 10, _Ordinal10
apifix [hModule], 11, _Ordinal11
apifix [hModule], szUpdatePanningFeedback, _UpdatePanningFeedback
apifix [hModule], 13, _Ordinal13
apifix [hModule], 14, _Ordinal14
apifix [hModule], 15, _Ordinal15
apifix [hModule], 16, _Ordinal16
apifix [hModule], 17, _Ordinal17
apifix [hModule], 18, _Ordinal18
apifix [hModule], 19, _Ordinal19
apifix [hModule], 20, _Ordinal20
apifix [hModule], 21, _Ordinal21
apifix [hModule], 22, _Ordinal22
apifix [hModule], 23, _Ordinal23
apifix [hModule], 24, _Ordinal24
apifix [hModule], 25, _Ordinal25
apifix [hModule], 26, _Ordinal26
apifix [hModule], 27, _Ordinal27
apifix [hModule], 28, _Ordinal28
apifix [hModule], 29, _Ordinal29
apifix [hModule], 30, _Ordinal30
apifix [hModule], 31, _Ordinal31
apifix [hModule], 32, _Ordinal32
apifix [hModule], 33, _Ordinal33
apifix [hModule], 34, _Ordinal34
apifix [hModule], 35, _Ordinal35
apifix [hModule], 36, _Ordinal36
apifix [hModule], szBeginBufferedAnimation, _BeginBufferedAnimation
apifix [hModule], szBeginBufferedPaint, _BeginBufferedPaint
apifix [hModule], szBufferedPaintClear, _BufferedPaintClear
apifix [hModule], szBufferedPaintInit, _BufferedPaintInit
apifix [hModule], szBufferedPaintRenderAnimation, _BufferedPaintRenderAnimation
apifix [hModule], szBufferedPaintSetAlpha, _BufferedPaintSetAlpha
apifix [hModule], 43, _Ordinal43
apifix [hModule], 44, _Ordinal44
apifix [hModule], 45, _Ordinal45
apifix [hModule], 46, _Ordinal46
apifix [hModule], szDrawThemeBackgroundEx, _DrawThemeBackgroundEx
apifix [hModule], 48, _Ordinal48
apifix [hModule], 49, _Ordinal49
apifix [hModule], 50, _Ordinal50
apifix [hModule], szBufferedPaintStopAllAnimations, _BufferedPaintStopAllAnimations
apifix [hModule], szBufferedPaintUnInit, _BufferedPaintUnInit
apifix [hModule], szCloseThemeData, _CloseThemeData
apifix [hModule], szDllCanUnloadNow, _DllCanUnloadNow
apifix [hModule], szDllGetActivationFactory, _DllGetActivationFactory
apifix [hModule], szDllGetClassObject, _DllGetClassObject
apifix [hModule], szDrawThemeBackground, _DrawThemeBackground
apifix [hModule], szDrawThemeEdge, _DrawThemeEdge
apifix [hModule], szDrawThemeIcon, _DrawThemeIcon
apifix [hModule], 60, _Ordinal60
apifix [hModule], szOpenThemeDataEx, _OpenThemeDataEx
apifix [hModule], 62, _Ordinal62
apifix [hModule], 63, _Ordinal63
apifix [hModule], 64, _Ordinal64
apifix [hModule], 65, _Ordinal65
apifix [hModule], 66, _Ordinal66
apifix [hModule], 67, _Ordinal67
apifix [hModule], 68, _Ordinal68
apifix [hModule], 69, _Ordinal69
apifix [hModule], szDrawThemeParentBackground, _DrawThemeParentBackground
apifix [hModule], szDrawThemeParentBackgroundEx, _DrawThemeParentBackgroundEx
apifix [hModule], 72, _Ordinal72
apifix [hModule], 73, _Ordinal73
apifix [hModule], 74, _Ordinal74
apifix [hModule], 75, _Ordinal75
apifix [hModule], 76, _Ordinal76
apifix [hModule], 77, _Ordinal77
apifix [hModule], 78, _Ordinal78
apifix [hModule], 79, _Ordinal79
apifix [hModule], 80, _Ordinal80
apifix [hModule], 81, _Ordinal81
apifix [hModule], 82, _Ordinal82
apifix [hModule], 83, _Ordinal83
apifix [hModule], 84, _Ordinal84
apifix [hModule], 85, _Ordinal85
apifix [hModule], 86, _Ordinal86
apifix [hModule], 87, _Ordinal87
apifix [hModule], 88, _Ordinal88
apifix [hModule], szDrawThemeText, _DrawThemeText
apifix [hModule], 90, _Ordinal90
apifix [hModule], 91, _Ordinal91
apifix [hModule], 92, _Ordinal92
apifix [hModule], 93, _Ordinal93
apifix [hModule], 94, _Ordinal94
apifix [hModule], szGetImmersiveColorFromColorSetEx, _GetImmersiveColorFromColorSetEx
apifix [hModule], 96, _Ordinal96
apifix [hModule], 97, _Ordinal97
apifix [hModule], szGetImmersiveUserColorSetPreference, _GetImmersiveUserColorSetPreference
apifix [hModule], 99, _Ordinal99
apifix [hModule], 100, _Ordinal100
apifix [hModule], 101, _Ordinal101
apifix [hModule], 102, _Ordinal102
apifix [hModule], szDrawThemeTextEx, _DrawThemeTextEx
apifix [hModule], 104, _Ordinal104
apifix [hModule], 105, _Ordinal105
apifix [hModule], 106, _Ordinal106
apifix [hModule], 107, _Ordinal107
apifix [hModule], 108, _Ordinal108
apifix [hModule], 109, _Ordinal109
apifix [hModule], 110, _Ordinal110
apifix [hModule], 111, _Ordinal111
apifix [hModule], 112, _Ordinal112
apifix [hModule], 113, _Ordinal113
apifix [hModule], szEnableThemeDialogTexture, _EnableThemeDialogTexture
apifix [hModule], 115, _Ordinal115
apifix [hModule], 116, _Ordinal116
apifix [hModule], 117, _Ordinal117
apifix [hModule], 118, _Ordinal118
apifix [hModule], 119, _Ordinal119
apifix [hModule], szGetUserColorPreference, _GetUserColorPreference
apifix [hModule], szGetColorFromPreference, _GetColorFromPreference
apifix [hModule], 122, _Ordinal122
apifix [hModule], 123, _Ordinal123
apifix [hModule], 124, _Ordinal124
apifix [hModule], 125, _Ordinal125
apifix [hModule], 126, _Ordinal126
apifix [hModule], 127, _Ordinal127
apifix [hModule], 128, _Ordinal128
apifix [hModule], szEnableTheming, _EnableTheming
apifix [hModule], 130, _Ordinal130
apifix [hModule], 131, _Ordinal131
apifix [hModule], 132, _Ordinal132
apifix [hModule], 133, _Ordinal133
apifix [hModule], szEndBufferedAnimation, _EndBufferedAnimation
apifix [hModule], 135, _Ordinal135
apifix [hModule], 136, _Ordinal136
apifix [hModule], 137, _Ordinal137
apifix [hModule], 138, _Ordinal138
apifix [hModule], 139, _Ordinal139
apifix [hModule], szEndBufferedPaint, _EndBufferedPaint
apifix [hModule], szGetBufferedPaintBits, _GetBufferedPaintBits
apifix [hModule], szGetBufferedPaintDC, _GetBufferedPaintDC
apifix [hModule], szGetBufferedPaintTargetDC, _GetBufferedPaintTargetDC
apifix [hModule], szGetBufferedPaintTargetRect, _GetBufferedPaintTargetRect
apifix [hModule], szGetCurrentThemeName, _GetCurrentThemeName
apifix [hModule], szGetThemeAnimationProperty, _GetThemeAnimationProperty
apifix [hModule], szGetThemeAnimationTransform, _GetThemeAnimationTransform
apifix [hModule], szGetThemeAppProperties, _GetThemeAppProperties
apifix [hModule], szGetThemeBackgroundContentRect, _GetThemeBackgroundContentRect
apifix [hModule], szGetThemeBackgroundExtent, _GetThemeBackgroundExtent
apifix [hModule], szGetThemeBackgroundRegion, _GetThemeBackgroundRegion
apifix [hModule], szGetThemeBitmap, _GetThemeBitmap
apifix [hModule], szGetThemeBool, _GetThemeBool
apifix [hModule], szGetThemeColor, _GetThemeColor
apifix [hModule], szGetThemeDocumentationProperty, _GetThemeDocumentationProperty
apifix [hModule], szGetThemeEnumValue, _GetThemeEnumValue
apifix [hModule], szGetThemeFilename, _GetThemeFilename
apifix [hModule], szGetThemeFont, _GetThemeFont
apifix [hModule], szGetThemeInt, _GetThemeInt
apifix [hModule], szGetThemeIntList, _GetThemeIntList
apifix [hModule], szGetThemeMargins, _GetThemeMargins
apifix [hModule], szGetThemeMetric, _GetThemeMetric
apifix [hModule], szGetThemePartSize, _GetThemePartSize
apifix [hModule], szGetThemePosition, _GetThemePosition
apifix [hModule], szGetThemePropertyOrigin, _GetThemePropertyOrigin
apifix [hModule], szGetThemeRect, _GetThemeRect
apifix [hModule], szGetThemeStream, _GetThemeStream
apifix [hModule], szGetThemeString, _GetThemeString
apifix [hModule], szGetThemeSysBool, _GetThemeSysBool
apifix [hModule], szGetThemeSysColor, _GetThemeSysColor
apifix [hModule], szGetThemeSysColorBrush, _GetThemeSysColorBrush
apifix [hModule], szGetThemeSysFont, _GetThemeSysFont
apifix [hModule], szGetThemeSysInt, _GetThemeSysInt
apifix [hModule], szGetThemeSysSize, _GetThemeSysSize
apifix [hModule], szGetThemeSysString, _GetThemeSysString
apifix [hModule], szGetThemeTextExtent, _GetThemeTextExtent
apifix [hModule], szGetThemeTextMetrics, _GetThemeTextMetrics
apifix [hModule], szGetThemeTimingFunction, _GetThemeTimingFunction
apifix [hModule], szGetThemeTransitionDuration, _GetThemeTransitionDuration
apifix [hModule], szGetWindowTheme, _GetWindowTheme
apifix [hModule], szHitTestThemeBackground, _HitTestThemeBackground
apifix [hModule], szIsAppThemed, _IsAppThemed
apifix [hModule], szIsCompositionActive, _IsCompositionActive
apifix [hModule], szIsThemeActive, _IsThemeActive
apifix [hModule], szIsThemeBackgroundPartiallyTransparent, _IsThemeBackgroundPartiallyTransparent
apifix [hModule], szIsThemeDialogTextureEnabled, _IsThemeDialogTextureEnabled
apifix [hModule], szIsThemePartDefined, _IsThemePartDefined
apifix [hModule], szOpenThemeData, _OpenThemeData
apifix [hModule], szOpenThemeDataForDpi, _OpenThemeDataForDpi
apifix [hModule], szSetThemeAppProperties, _SetThemeAppProperties
apifix [hModule], szSetWindowTheme, _SetWindowTheme
apifix [hModule], szSetWindowThemeAttribute, _SetWindowThemeAttribute
apifix [hModule], szThemeInitApiHook, _ThemeInitApiHook
  endf;
  ret
endp;
proc DllEntryPoint hinstDLL,fdwReason,lpvReserved
  local hModule:QWORD
  local oldProtect:DWORD
  local lpBuffer:QWORD
  cmp edx, 1
  jnz skipPatch
  ; 检测是否为目标进程
   frame
    invoke LocalAlloc, LPTR, MAX_PATH + 1
    mov [lpBuffer], rax
   invoke GetModuleFileName, NULL, rax, MAX_PATH
   invoke strstr, [lpBuffer], szTargetExeName
    mov dword[oldProtect], eax
    invoke LocalFree,[lpBuffer]
  endf
  cmp dword[oldProtect], 0
  jz skipPatch
  frame
  ; 取得当前主程序句柄
    invoke GetModuleHandle,NULL
    mov rax, [hModule]
    ; 00000000012D0D99 | B0 00                    | mov al,0
    add rax, 0xED0D9A ; offset
    mov [lpBuffer], rax
    fixCode [lpBuffer], 1, [oldProtect], byte, 0x00
  ; 修改
    mov rax, [lpBuffer]
    mov word[rax], 0xB848
   add rax, 2
    mov qword[rax], 0xB848
    add rax, 8
    mov dword[rax], 0x02EBD0FF
; 还原
    lea rax, [oldProtect]
    invoke VirtualProtect, [lpBuffer], 0x10, dword[rax], rax
  endf
skipPatch:
  call FixImport
  mov eax,TRUE
  ret
endp
; 导出函数, 全是跳转
_exp_Ordinal1:    jmp [        _Ordinal1   ]
_exp_Ordinal2:    jmp [        _Ordinal2   ]
_exp_Ordinal3:    jmp [        _Ordinal3   ]
_exp_Ordinal4:    jmp [        _Ordinal4   ]
_exp_BeginPanningFeedback:    jmp [        _BeginPanningFeedback   ]
_exp_EndPanningFeedback:    jmp [        _EndPanningFeedback   ]
_exp_Ordinal7:    jmp [        _Ordinal7   ]
_exp_Ordinal8:    jmp [        _Ordinal8   ]
_exp_Ordinal9:    jmp [        _Ordinal9   ]
_exp_Ordinal10:    jmp [        _Ordinal10   ]
_exp_Ordinal11:    jmp [        _Ordinal11   ]
_exp_UpdatePanningFeedback:    jmp [        _UpdatePanningFeedback   ]
_exp_Ordinal13:    jmp [        _Ordinal13   ]
_exp_Ordinal14:    jmp [        _Ordinal14   ]
_exp_Ordinal15:    jmp [        _Ordinal15   ]
_exp_Ordinal16:    jmp [        _Ordinal16   ]
_exp_Ordinal17:    jmp [        _Ordinal17   ]
_exp_Ordinal18:    jmp [        _Ordinal18   ]
_exp_Ordinal19:    jmp [        _Ordinal19   ]
_exp_Ordinal20:    jmp [        _Ordinal20   ]
_exp_Ordinal21:    jmp [        _Ordinal21   ]
_exp_Ordinal22:    jmp [        _Ordinal22   ]
_exp_Ordinal23:    jmp [        _Ordinal23   ]
_exp_Ordinal24:    jmp [        _Ordinal24   ]
_exp_Ordinal25:    jmp [        _Ordinal25   ]
_exp_Ordinal26:    jmp [        _Ordinal26   ]
_exp_Ordinal27:    jmp [        _Ordinal27   ]
_exp_Ordinal28:    jmp [        _Ordinal28   ]
_exp_Ordinal29:    jmp [        _Ordinal29   ]
_exp_Ordinal30:    jmp [        _Ordinal30   ]
_exp_Ordinal31:    jmp [        _Ordinal31   ]
_exp_Ordinal32:    jmp [        _Ordinal32   ]
_exp_Ordinal33:    jmp [        _Ordinal33   ]
_exp_Ordinal34:    jmp [        _Ordinal34   ]
_exp_Ordinal35:    jmp [        _Ordinal35   ]
_exp_Ordinal36:    jmp [        _Ordinal36   ]
_exp_BeginBufferedAnimation:    jmp [        _BeginBufferedAnimation   ]
_exp_BeginBufferedPaint:    jmp [        _BeginBufferedPaint   ]
_exp_BufferedPaintClear:    jmp [        _BufferedPaintClear   ]
_exp_BufferedPaintInit:    jmp [        _BufferedPaintInit   ]
_exp_BufferedPaintRenderAnimation:    jmp [        _BufferedPaintRenderAnimation   ]
_exp_BufferedPaintSetAlpha:    jmp [        _BufferedPaintSetAlpha   ]
_exp_Ordinal43:    jmp [        _Ordinal43   ]
_exp_Ordinal44:    jmp [        _Ordinal44   ]
_exp_Ordinal45:    jmp [        _Ordinal45   ]
_exp_Ordinal46:    jmp [        _Ordinal46   ]
_exp_DrawThemeBackgroundEx:    jmp [        _DrawThemeBackgroundEx   ]
_exp_Ordinal48:    jmp [        _Ordinal48   ]
_exp_Ordinal49:    jmp [        _Ordinal49   ]
_exp_Ordinal50:    jmp [        _Ordinal50   ]
_exp_BufferedPaintStopAllAnimations:    jmp [        _BufferedPaintStopAllAnimations   ]
_exp_BufferedPaintUnInit:    jmp [        _BufferedPaintUnInit   ]
_exp_CloseThemeData:    jmp [        _CloseThemeData   ]
_exp_DllCanUnloadNow:    jmp [        _DllCanUnloadNow   ]
_exp_DllGetActivationFactory:    jmp [        _DllGetActivationFactory   ]
_exp_DllGetClassObject:    jmp [        _DllGetClassObject   ]
_exp_DrawThemeBackground:    jmp [        _DrawThemeBackground   ]
_exp_DrawThemeEdge:    jmp [        _DrawThemeEdge   ]
_exp_DrawThemeIcon:    jmp [        _DrawThemeIcon   ]
_exp_Ordinal60:    jmp [        _Ordinal60   ]
_exp_OpenThemeDataEx:    jmp [        _OpenThemeDataEx   ]
_exp_Ordinal62:    jmp [        _Ordinal62   ]
_exp_Ordinal63:    jmp [        _Ordinal63   ]
_exp_Ordinal64:    jmp [        _Ordinal64   ]
_exp_Ordinal65:    jmp [        _Ordinal65   ]
_exp_Ordinal66:    jmp [        _Ordinal66   ]
_exp_Ordinal67:    jmp [        _Ordinal67   ]
_exp_Ordinal68:    jmp [        _Ordinal68   ]
_exp_Ordinal69:    jmp [        _Ordinal69   ]
_exp_DrawThemeParentBackground:    jmp [        _DrawThemeParentBackground   ]
_exp_DrawThemeParentBackgroundEx:    jmp [        _DrawThemeParentBackgroundEx   ]
_exp_Ordinal72:    jmp [        _Ordinal72   ]
_exp_Ordinal73:    jmp [        _Ordinal73   ]
_exp_Ordinal74:    jmp [        _Ordinal74   ]
_exp_Ordinal75:    jmp [        _Ordinal75   ]
_exp_Ordinal76:    jmp [        _Ordinal76   ]
_exp_Ordinal77:    jmp [        _Ordinal77   ]
_exp_Ordinal78:    jmp [        _Ordinal78   ]
_exp_Ordinal79:    jmp [        _Ordinal79   ]
_exp_Ordinal80:    jmp [        _Ordinal80   ]
_exp_Ordinal81:    jmp [        _Ordinal81   ]
_exp_Ordinal82:    jmp [        _Ordinal82   ]
_exp_Ordinal83:    jmp [        _Ordinal83   ]
_exp_Ordinal84:    jmp [        _Ordinal84   ]
_exp_Ordinal85:    jmp [        _Ordinal85   ]
_exp_Ordinal86:    jmp [        _Ordinal86   ]
_exp_Ordinal87:    jmp [        _Ordinal87   ]
_exp_Ordinal88:    jmp [        _Ordinal88   ]
_exp_DrawThemeText:    jmp [        _DrawThemeText   ]
_exp_Ordinal90:    jmp [        _Ordinal90   ]
_exp_Ordinal91:    jmp [        _Ordinal91   ]
_exp_Ordinal92:    jmp [        _Ordinal92   ]
_exp_Ordinal93:    jmp [        _Ordinal93   ]
_exp_Ordinal94:    jmp [        _Ordinal94   ]
_exp_GetImmersiveColorFromColorSetEx:    jmp [        _GetImmersiveColorFromColorSetEx   ]
_exp_Ordinal96:    jmp [        _Ordinal96   ]
_exp_Ordinal97:    jmp [        _Ordinal97   ]
_exp_GetImmersiveUserColorSetPreference:    jmp [        _GetImmersiveUserColorSetPreference   ]
_exp_Ordinal99:    jmp [        _Ordinal99   ]
_exp_Ordinal100:    jmp [        _Ordinal100   ]
_exp_Ordinal101:    jmp [        _Ordinal101   ]
_exp_Ordinal102:    jmp [        _Ordinal102   ]
_exp_DrawThemeTextEx:    jmp [        _DrawThemeTextEx   ]
_exp_Ordinal104:    jmp [        _Ordinal104   ]
_exp_Ordinal105:    jmp [        _Ordinal105   ]
_exp_Ordinal106:    jmp [        _Ordinal106   ]
_exp_Ordinal107:    jmp [        _Ordinal107   ]
_exp_Ordinal108:    jmp [        _Ordinal108   ]
_exp_Ordinal109:    jmp [        _Ordinal109   ]
_exp_Ordinal110:    jmp [        _Ordinal110   ]
_exp_Ordinal111:    jmp [        _Ordinal111   ]
_exp_Ordinal112:    jmp [        _Ordinal112   ]
_exp_Ordinal113:    jmp [        _Ordinal113   ]
_exp_EnableThemeDialogTexture:    jmp [        _EnableThemeDialogTexture   ]
_exp_Ordinal115:    jmp [        _Ordinal115   ]
_exp_Ordinal116:    jmp [        _Ordinal116   ]
_exp_Ordinal117:    jmp [        _Ordinal117   ]
_exp_Ordinal118:    jmp [        _Ordinal118   ]
_exp_Ordinal119:    jmp [        _Ordinal119   ]
_exp_GetUserColorPreference:    jmp [        _GetUserColorPreference   ]
_exp_GetColorFromPreference:    jmp [        _GetColorFromPreference   ]
_exp_Ordinal122:    jmp [        _Ordinal122   ]
_exp_Ordinal123:    jmp [        _Ordinal123   ]
_exp_Ordinal124:    jmp [        _Ordinal124   ]
_exp_Ordinal125:    jmp [        _Ordinal125   ]
_exp_Ordinal126:    jmp [        _Ordinal126   ]
_exp_Ordinal127:    jmp [        _Ordinal127   ]
_exp_Ordinal128:    jmp [        _Ordinal128   ]
_exp_EnableTheming:    jmp [        _EnableTheming   ]
_exp_Ordinal130:    jmp [        _Ordinal130   ]
_exp_Ordinal131:    jmp [        _Ordinal131   ]
_exp_Ordinal132:    jmp [        _Ordinal132   ]
_exp_Ordinal133:    jmp [        _Ordinal133   ]
_exp_EndBufferedAnimation:    jmp [        _EndBufferedAnimation   ]
_exp_Ordinal135:    jmp [        _Ordinal135   ]
_exp_Ordinal136:    jmp [        _Ordinal136   ]
_exp_Ordinal137:    jmp [        _Ordinal137   ]
_exp_Ordinal138:    jmp [        _Ordinal138   ]
_exp_Ordinal139:    jmp [        _Ordinal139   ]
_exp_EndBufferedPaint:    jmp [        _EndBufferedPaint   ]
_exp_GetBufferedPaintBits:    jmp [        _GetBufferedPaintBits   ]
_exp_GetBufferedPaintDC:    jmp [        _GetBufferedPaintDC   ]
_exp_GetBufferedPaintTargetDC:    jmp [        _GetBufferedPaintTargetDC   ]
_exp_GetBufferedPaintTargetRect:    jmp [        _GetBufferedPaintTargetRect   ]
_exp_GetCurrentThemeName:    jmp [        _GetCurrentThemeName   ]
_exp_GetThemeAnimationProperty:    jmp [        _GetThemeAnimationProperty   ]
_exp_GetThemeAnimationTransform:    jmp [        _GetThemeAnimationTransform   ]
_exp_GetThemeAppProperties:    jmp [        _GetThemeAppProperties   ]
_exp_GetThemeBackgroundContentRect:    jmp [        _GetThemeBackgroundContentRect   ]
_exp_GetThemeBackgroundExtent:    jmp [        _GetThemeBackgroundExtent   ]
_exp_GetThemeBackgroundRegion:    jmp [        _GetThemeBackgroundRegion   ]
_exp_GetThemeBitmap:    jmp [        _GetThemeBitmap   ]
_exp_GetThemeBool:    jmp [        _GetThemeBool   ]
_exp_GetThemeColor:    jmp [        _GetThemeColor   ]
_exp_GetThemeDocumentationProperty:    jmp [        _GetThemeDocumentationProperty   ]
_exp_GetThemeEnumValue:    jmp [        _GetThemeEnumValue   ]
_exp_GetThemeFilename:    jmp [        _GetThemeFilename   ]
_exp_GetThemeFont:    jmp [        _GetThemeFont   ]
_exp_GetThemeInt:    jmp [        _GetThemeInt   ]
_exp_GetThemeIntList:    jmp [        _GetThemeIntList   ]
_exp_GetThemeMargins:    jmp [        _GetThemeMargins   ]
_exp_GetThemeMetric:    jmp [        _GetThemeMetric   ]
_exp_GetThemePartSize:    jmp [        _GetThemePartSize   ]
_exp_GetThemePosition:    jmp [        _GetThemePosition   ]
_exp_GetThemePropertyOrigin:    jmp [        _GetThemePropertyOrigin   ]
_exp_GetThemeRect:    jmp [        _GetThemeRect   ]
_exp_GetThemeStream:    jmp [        _GetThemeStream   ]
_exp_GetThemeString:    jmp [        _GetThemeString   ]
_exp_GetThemeSysBool:    jmp [        _GetThemeSysBool   ]
_exp_GetThemeSysColor:    jmp [        _GetThemeSysColor   ]
_exp_GetThemeSysColorBrush:    jmp [        _GetThemeSysColorBrush   ]
_exp_GetThemeSysFont:    jmp [        _GetThemeSysFont   ]
_exp_GetThemeSysInt:    jmp [        _GetThemeSysInt   ]
_exp_GetThemeSysSize:    jmp [        _GetThemeSysSize   ]
_exp_GetThemeSysString:    jmp [        _GetThemeSysString   ]
_exp_GetThemeTextExtent:    jmp [        _GetThemeTextExtent   ]
_exp_GetThemeTextMetrics:    jmp [        _GetThemeTextMetrics   ]
_exp_GetThemeTimingFunction:    jmp [        _GetThemeTimingFunction   ]
_exp_GetThemeTransitionDuration:    jmp [        _GetThemeTransitionDuration   ]
_exp_GetWindowTheme:    jmp [        _GetWindowTheme   ]
_exp_HitTestThemeBackground:    jmp [        _HitTestThemeBackground   ]
_exp_IsAppThemed:    jmp [        _IsAppThemed   ]
_exp_IsCompositionActive:    jmp [        _IsCompositionActive   ]
_exp_IsThemeActive:    jmp [        _IsThemeActive   ]
_exp_IsThemeBackgroundPartiallyTransparent:    jmp [        _IsThemeBackgroundPartiallyTransparent   ]
_exp_IsThemeDialogTextureEnabled:    jmp [        _IsThemeDialogTextureEnabled   ]
_exp_IsThemePartDefined:    jmp [        _IsThemePartDefined   ]
_exp_OpenThemeData:    jmp [        _OpenThemeData   ]
_exp_OpenThemeDataForDpi:    jmp [        _OpenThemeDataForDpi   ]
_exp_SetThemeAppProperties:    jmp [        _SetThemeAppProperties   ]
_exp_SetWindowTheme:    jmp [        _SetWindowTheme   ]
_exp_SetWindowThemeAttribute:    jmp [        _SetWindowThemeAttribute   ]
_exp_ThemeInitApiHook:    jmp [        _ThemeInitApiHook   ]
; 常数
section '.szdb' data readable;
szTargetLibrary db "\uxtheme.dll",  0
szTargetExeName db "\tobecracked.exe",  0
szOrdinal1  db "Ordinal1",  0
szOrdinal2  db "Ordinal2",  0
szOrdinal3  db "Ordinal3",  0
szOrdinal4  db "Ordinal4",  0
szBeginPanningFeedback  db "BeginPanningFeedback",  0
szEndPanningFeedback  db "EndPanningFeedback",  0
szOrdinal7  db "Ordinal7",  0
szOrdinal8  db "Ordinal8",  0
szOrdinal9  db "Ordinal9",  0
szOrdinal10  db "Ordinal10",  0
szOrdinal11  db "Ordinal11",  0
szUpdatePanningFeedback  db "UpdatePanningFeedback",  0
szOrdinal13  db "Ordinal13",  0
szOrdinal14  db "Ordinal14",  0
szOrdinal15  db "Ordinal15",  0
szOrdinal16  db "Ordinal16",  0
szOrdinal17  db "Ordinal17",  0
szOrdinal18  db "Ordinal18",  0
szOrdinal19  db "Ordinal19",  0
szOrdinal20  db "Ordinal20",  0
szOrdinal21  db "Ordinal21",  0
szOrdinal22  db "Ordinal22",  0
szOrdinal23  db "Ordinal23",  0
szOrdinal24  db "Ordinal24",  0
szOrdinal25  db "Ordinal25",  0
szOrdinal26  db "Ordinal26",  0
szOrdinal27  db "Ordinal27",  0
szOrdinal28  db "Ordinal28",  0
szOrdinal29  db "Ordinal29",  0
szOrdinal30  db "Ordinal30",  0
szOrdinal31  db "Ordinal31",  0
szOrdinal32  db "Ordinal32",  0
szOrdinal33  db "Ordinal33",  0
szOrdinal34  db "Ordinal34",  0
szOrdinal35  db "Ordinal35",  0
szOrdinal36  db "Ordinal36",  0
szBeginBufferedAnimation  db "BeginBufferedAnimation",  0
szBeginBufferedPaint  db "BeginBufferedPaint",  0
szBufferedPaintClear  db "BufferedPaintClear",  0
szBufferedPaintInit  db "BufferedPaintInit",  0
szBufferedPaintRenderAnimation  db "BufferedPaintRenderAnimation",  0
szBufferedPaintSetAlpha  db "BufferedPaintSetAlpha",  0
szOrdinal43  db "Ordinal43",  0
szOrdinal44  db "Ordinal44",  0
szOrdinal45  db "Ordinal45",  0
szOrdinal46  db "Ordinal46",  0
szDrawThemeBackgroundEx  db "DrawThemeBackgroundEx",  0
szOrdinal48  db "Ordinal48",  0
szOrdinal49  db "Ordinal49",  0
szOrdinal50  db "Ordinal50",  0
szBufferedPaintStopAllAnimations  db "BufferedPaintStopAllAnimations",  0
szBufferedPaintUnInit  db "BufferedPaintUnInit",  0
szCloseThemeData  db "CloseThemeData",  0
szDllCanUnloadNow  db "DllCanUnloadNow",  0
szDllGetActivationFactory  db "DllGetActivationFactory",  0
szDllGetClassObject  db "DllGetClassObject",  0
szDrawThemeBackground  db "DrawThemeBackground",  0
szDrawThemeEdge  db "DrawThemeEdge",  0
szDrawThemeIcon  db "DrawThemeIcon",  0
szOrdinal60  db "Ordinal60",  0
szOpenThemeDataEx  db "OpenThemeDataEx",  0
szOrdinal62  db "Ordinal62",  0
szOrdinal63  db "Ordinal63",  0
szOrdinal64  db "Ordinal64",  0
szOrdinal65  db "Ordinal65",  0
szOrdinal66  db "Ordinal66",  0
szOrdinal67  db "Ordinal67",  0
szOrdinal68  db "Ordinal68",  0
szOrdinal69  db "Ordinal69",  0
szDrawThemeParentBackground  db "DrawThemeParentBackground",  0
szDrawThemeParentBackgroundEx  db "DrawThemeParentBackgroundEx",  0
szOrdinal72  db "Ordinal72",  0
szOrdinal73  db "Ordinal73",  0
szOrdinal74  db "Ordinal74",  0
szOrdinal75  db "Ordinal75",  0
szOrdinal76  db "Ordinal76",  0
szOrdinal77  db "Ordinal77",  0
szOrdinal78  db "Ordinal78",  0
szOrdinal79  db "Ordinal79",  0
szOrdinal80  db "Ordinal80",  0
szOrdinal81  db "Ordinal81",  0
szOrdinal82  db "Ordinal82",  0
szOrdinal83  db "Ordinal83",  0
szOrdinal84  db "Ordinal84",  0
szOrdinal85  db "Ordinal85",  0
szOrdinal86  db "Ordinal86",  0
szOrdinal87  db "Ordinal87",  0
szOrdinal88  db "Ordinal88",  0
szDrawThemeText  db "DrawThemeText",  0
szOrdinal90  db "Ordinal90",  0
szOrdinal91  db "Ordinal91",  0
szOrdinal92  db "Ordinal92",  0
szOrdinal93  db "Ordinal93",  0
szOrdinal94  db "Ordinal94",  0
szGetImmersiveColorFromColorSetEx  db "GetImmersiveColorFromColorSetEx",  0
szOrdinal96  db "Ordinal96",  0
szOrdinal97  db "Ordinal97",  0
szGetImmersiveUserColorSetPreference  db "GetImmersiveUserColorSetPreference",  0
szOrdinal99  db "Ordinal99",  0
szOrdinal100  db "Ordinal100",  0
szOrdinal101  db "Ordinal101",  0
szOrdinal102  db "Ordinal102",  0
szDrawThemeTextEx  db "DrawThemeTextEx",  0
szOrdinal104  db "Ordinal104",  0
szOrdinal105  db "Ordinal105",  0
szOrdinal106  db "Ordinal106",  0
szOrdinal107  db "Ordinal107",  0
szOrdinal108  db "Ordinal108",  0
szOrdinal109  db "Ordinal109",  0
szOrdinal110  db "Ordinal110",  0
szOrdinal111  db "Ordinal111",  0
szOrdinal112  db "Ordinal112",  0
szOrdinal113  db "Ordinal113",  0
szEnableThemeDialogTexture  db "EnableThemeDialogTexture",  0
szOrdinal115  db "Ordinal115",  0
szOrdinal116  db "Ordinal116",  0
szOrdinal117  db "Ordinal117",  0
szOrdinal118  db "Ordinal118",  0
szOrdinal119  db "Ordinal119",  0
szGetUserColorPreference  db "GetUserColorPreference",  0
szGetColorFromPreference  db "GetColorFromPreference",  0
szOrdinal122  db "Ordinal122",  0
szOrdinal123  db "Ordinal123",  0
szOrdinal124  db "Ordinal124",  0
szOrdinal125  db "Ordinal125",  0
szOrdinal126  db "Ordinal126",  0
szOrdinal127  db "Ordinal127",  0
szOrdinal128  db "Ordinal128",  0
szEnableTheming  db "EnableTheming",  0
szOrdinal130  db "Ordinal130",  0
szOrdinal131  db "Ordinal131",  0
szOrdinal132  db "Ordinal132",  0
szOrdinal133  db "Ordinal133",  0
szEndBufferedAnimation  db "EndBufferedAnimation",  0
szOrdinal135  db "Ordinal135",  0
szOrdinal136  db "Ordinal136",  0
szOrdinal137  db "Ordinal137",  0
szOrdinal138  db "Ordinal138",  0
szOrdinal139  db "Ordinal139",  0
szEndBufferedPaint  db "EndBufferedPaint",  0
szGetBufferedPaintBits  db "GetBufferedPaintBits",  0
szGetBufferedPaintDC  db "GetBufferedPaintDC",  0
szGetBufferedPaintTargetDC  db "GetBufferedPaintTargetDC",  0
szGetBufferedPaintTargetRect  db "GetBufferedPaintTargetRect",  0
szGetCurrentThemeName  db "GetCurrentThemeName",  0
szGetThemeAnimationProperty  db "GetThemeAnimationProperty",  0
szGetThemeAnimationTransform  db "GetThemeAnimationTransform",  0
szGetThemeAppProperties  db "GetThemeAppProperties",  0
szGetThemeBackgroundContentRect  db "GetThemeBackgroundContentRect",  0
szGetThemeBackgroundExtent  db "GetThemeBackgroundExtent",  0
szGetThemeBackgroundRegion  db "GetThemeBackgroundRegion",  0
szGetThemeBitmap  db "GetThemeBitmap",  0
szGetThemeBool  db "GetThemeBool",  0
szGetThemeColor  db "GetThemeColor",  0
szGetThemeDocumentationProperty  db "GetThemeDocumentationProperty",  0
szGetThemeEnumValue  db "GetThemeEnumValue",  0
szGetThemeFilename  db "GetThemeFilename",  0
szGetThemeFont  db "GetThemeFont",  0
szGetThemeInt  db "GetThemeInt",  0
szGetThemeIntList  db "GetThemeIntList",  0
szGetThemeMargins  db "GetThemeMargins",  0
szGetThemeMetric  db "GetThemeMetric",  0
szGetThemePartSize  db "GetThemePartSize",  0
szGetThemePosition  db "GetThemePosition",  0
szGetThemePropertyOrigin  db "GetThemePropertyOrigin",  0
szGetThemeRect  db "GetThemeRect",  0
szGetThemeStream  db "GetThemeStream",  0
szGetThemeString  db "GetThemeString",  0
szGetThemeSysBool  db "GetThemeSysBool",  0
szGetThemeSysColor  db "GetThemeSysColor",  0
szGetThemeSysColorBrush  db "GetThemeSysColorBrush",  0
szGetThemeSysFont  db "GetThemeSysFont",  0
szGetThemeSysInt  db "GetThemeSysInt",  0
szGetThemeSysSize  db "GetThemeSysSize",  0
szGetThemeSysString  db "GetThemeSysString",  0
szGetThemeTextExtent  db "GetThemeTextExtent",  0
szGetThemeTextMetrics  db "GetThemeTextMetrics",  0
szGetThemeTimingFunction  db "GetThemeTimingFunction",  0
szGetThemeTransitionDuration  db "GetThemeTransitionDuration",  0
szGetWindowTheme  db "GetWindowTheme",  0
szHitTestThemeBackground  db "HitTestThemeBackground",  0
szIsAppThemed  db "IsAppThemed",  0
szIsCompositionActive  db "IsCompositionActive",  0
szIsThemeActive  db "IsThemeActive",  0
szIsThemeBackgroundPartiallyTransparent  db "IsThemeBackgroundPartiallyTransparent",  0
szIsThemeDialogTextureEnabled  db "IsThemeDialogTextureEnabled",  0
szIsThemePartDefined  db "IsThemePartDefined",  0
szOpenThemeData  db "OpenThemeData",  0
szOpenThemeDataForDpi  db "OpenThemeDataForDpi",  0
szSetThemeAppProperties  db "SetThemeAppProperties",  0
szSetWindowTheme  db "SetWindowTheme",  0
szSetWindowThemeAttribute  db "SetWindowThemeAttribute",  0
szThemeInitApiHook  db "ThemeInitApiHook",  0
; 跳转地址储存
section '.expw' data readable writeable;
_Ordinal1              dq ?
_Ordinal2              dq ?
_Ordinal3              dq ?
_Ordinal4              dq ?
_BeginPanningFeedback              dq ?
_EndPanningFeedback              dq ?
_Ordinal7              dq ?
_Ordinal8              dq ?
_Ordinal9              dq ?
_Ordinal10              dq ?
_Ordinal11              dq ?
_UpdatePanningFeedback              dq ?
_Ordinal13              dq ?
_Ordinal14              dq ?
_Ordinal15              dq ?
_Ordinal16              dq ?
_Ordinal17              dq ?
_Ordinal18              dq ?
_Ordinal19              dq ?
_Ordinal20              dq ?
_Ordinal21              dq ?
_Ordinal22              dq ?
_Ordinal23              dq ?
_Ordinal24              dq ?
_Ordinal25              dq ?
_Ordinal26              dq ?
_Ordinal27              dq ?
_Ordinal28              dq ?
_Ordinal29              dq ?
_Ordinal30              dq ?
_Ordinal31              dq ?
_Ordinal32              dq ?
_Ordinal33              dq ?
_Ordinal34              dq ?
_Ordinal35              dq ?
_Ordinal36              dq ?
_BeginBufferedAnimation              dq ?
_BeginBufferedPaint              dq ?
_BufferedPaintClear              dq ?
_BufferedPaintInit              dq ?
_BufferedPaintRenderAnimation              dq ?
_BufferedPaintSetAlpha              dq ?
_Ordinal43              dq ?
_Ordinal44              dq ?
_Ordinal45              dq ?
_Ordinal46              dq ?
_DrawThemeBackgroundEx              dq ?
_Ordinal48              dq ?
_Ordinal49              dq ?
_Ordinal50              dq ?
_BufferedPaintStopAllAnimations              dq ?
_BufferedPaintUnInit              dq ?
_CloseThemeData              dq ?
_DllCanUnloadNow              dq ?
_DllGetActivationFactory              dq ?
_DllGetClassObject              dq ?
_DrawThemeBackground              dq ?
_DrawThemeEdge              dq ?
_DrawThemeIcon              dq ?
_Ordinal60              dq ?
_OpenThemeDataEx              dq ?
_Ordinal62              dq ?
_Ordinal63              dq ?
_Ordinal64              dq ?
_Ordinal65              dq ?
_Ordinal66              dq ?
_Ordinal67              dq ?
_Ordinal68              dq ?
_Ordinal69              dq ?
_DrawThemeParentBackground              dq ?
_DrawThemeParentBackgroundEx              dq ?
_Ordinal72              dq ?
_Ordinal73              dq ?
_Ordinal74              dq ?
_Ordinal75              dq ?
_Ordinal76              dq ?
_Ordinal77              dq ?
_Ordinal78              dq ?
_Ordinal79              dq ?
_Ordinal80              dq ?
_Ordinal81              dq ?
_Ordinal82              dq ?
_Ordinal83              dq ?
_Ordinal84              dq ?
_Ordinal85              dq ?
_Ordinal86              dq ?
_Ordinal87              dq ?
_Ordinal88              dq ?
_DrawThemeText              dq ?
_Ordinal90              dq ?
_Ordinal91              dq ?
_Ordinal92              dq ?
_Ordinal93              dq ?
_Ordinal94              dq ?
_GetImmersiveColorFromColorSetEx              dq ?
_Ordinal96              dq ?
_Ordinal97              dq ?
_GetImmersiveUserColorSetPreference              dq ?
_Ordinal99              dq ?
_Ordinal100              dq ?
_Ordinal101              dq ?
_Ordinal102              dq ?
_DrawThemeTextEx              dq ?
_Ordinal104              dq ?
_Ordinal105              dq ?
_Ordinal106              dq ?
_Ordinal107              dq ?
_Ordinal108              dq ?
_Ordinal109              dq ?
_Ordinal110              dq ?
_Ordinal111              dq ?
_Ordinal112              dq ?
_Ordinal113              dq ?
_EnableThemeDialogTexture              dq ?
_Ordinal115              dq ?
_Ordinal116              dq ?
_Ordinal117              dq ?
_Ordinal118              dq ?
_Ordinal119              dq ?
_GetUserColorPreference              dq ?
_GetColorFromPreference              dq ?
_Ordinal122              dq ?
_Ordinal123              dq ?
_Ordinal124              dq ?
_Ordinal125              dq ?
_Ordinal126              dq ?
_Ordinal127              dq ?
_Ordinal128              dq ?
_EnableTheming              dq ?
_Ordinal130              dq ?
_Ordinal131              dq ?
_Ordinal132              dq ?
_Ordinal133              dq ?
_EndBufferedAnimation              dq ?
_Ordinal135              dq ?
_Ordinal136              dq ?
_Ordinal137              dq ?
_Ordinal138              dq ?
_Ordinal139              dq ?
_EndBufferedPaint              dq ?
_GetBufferedPaintBits              dq ?
_GetBufferedPaintDC              dq ?
_GetBufferedPaintTargetDC              dq ?
_GetBufferedPaintTargetRect              dq ?
_GetCurrentThemeName              dq ?
_GetThemeAnimationProperty              dq ?
_GetThemeAnimationTransform              dq ?
_GetThemeAppProperties              dq ?
_GetThemeBackgroundContentRect              dq ?
_GetThemeBackgroundExtent              dq ?
_GetThemeBackgroundRegion              dq ?
_GetThemeBitmap              dq ?
_GetThemeBool              dq ?
_GetThemeColor              dq ?
_GetThemeDocumentationProperty              dq ?
_GetThemeEnumValue              dq ?
_GetThemeFilename              dq ?
_GetThemeFont              dq ?
_GetThemeInt              dq ?
_GetThemeIntList              dq ?
_GetThemeMargins              dq ?
_GetThemeMetric              dq ?
_GetThemePartSize              dq ?
_GetThemePosition              dq ?
_GetThemePropertyOrigin              dq ?
_GetThemeRect              dq ?
_GetThemeStream              dq ?
_GetThemeString              dq ?
_GetThemeSysBool              dq ?
_GetThemeSysColor              dq ?
_GetThemeSysColorBrush              dq ?
_GetThemeSysFont              dq ?
_GetThemeSysInt              dq ?
_GetThemeSysSize              dq ?
_GetThemeSysString              dq ?
_GetThemeTextExtent              dq ?
_GetThemeTextMetrics              dq ?
_GetThemeTimingFunction              dq ?
_GetThemeTransitionDuration              dq ?
_GetWindowTheme              dq ?
_HitTestThemeBackground              dq ?
_IsAppThemed              dq ?
_IsCompositionActive              dq ?
_IsThemeActive              dq ?
_IsThemeBackgroundPartiallyTransparent              dq ?
_IsThemeDialogTextureEnabled              dq ?
_IsThemePartDefined              dq ?
_OpenThemeData              dq ?
_OpenThemeDataForDpi              dq ?
_SetThemeAppProperties              dq ?
_SetWindowTheme              dq ?
_SetWindowThemeAttribute              dq ?
_ThemeInitApiHook              dq ?
section '.idata' import data readable writeable;
   library kernel,'KERNEL32.DLL',                  \
      msvc,'msvcrt.dll';
                        ;
import kernel,                                     \
   VirtualProtect,'VirtualProtect',                   \
LocalAlloc,'LocalAlloc',                            \
LocalFree,'LocalFree',                               \
   GetModuleHandle,'GetModuleHandleA', \
   LoadLibrary,'LoadLibraryA',                  \
   GetProcAddress,'GetProcAddress',                   \
   GetModuleFileName,'GetModuleFileNameA',              \
    GetSystemDirectory,'GetSystemDirectoryA';                 \
  import msvc,                  \
     strstr,'strstr',  \  
     strncpy,'strncpy', \
     strncat,'strncat'  \

section '.edata' export data readable;                 \  
  export 'uxtheme.dll',\
_exp_Ordinal1,'Ordinal1',\
_exp_Ordinal2,'Ordinal2',\
_exp_Ordinal3,'Ordinal3',\
_exp_Ordinal4,'Ordinal4',\
_exp_BeginPanningFeedback,'BeginPanningFeedback',\
_exp_EndPanningFeedback,'EndPanningFeedback',\
_exp_Ordinal7,'Ordinal7',\
_exp_Ordinal8,'Ordinal8',\
_exp_Ordinal9,'Ordinal9',\
_exp_Ordinal10,'Ordinal10',\
_exp_Ordinal11,'Ordinal11',\
_exp_UpdatePanningFeedback,'UpdatePanningFeedback',\
_exp_Ordinal13,'Ordinal13',\
_exp_Ordinal14,'Ordinal14',\
_exp_Ordinal15,'Ordinal15',\
_exp_Ordinal16,'Ordinal16',\
_exp_Ordinal17,'Ordinal17',\
_exp_Ordinal18,'Ordinal18',\
_exp_Ordinal19,'Ordinal19',\
_exp_Ordinal20,'Ordinal20',\
_exp_Ordinal21,'Ordinal21',\
_exp_Ordinal22,'Ordinal22',\
_exp_Ordinal23,'Ordinal23',\
_exp_Ordinal24,'Ordinal24',\
_exp_Ordinal25,'Ordinal25',\
_exp_Ordinal26,'Ordinal26',\
_exp_Ordinal27,'Ordinal27',\
_exp_Ordinal28,'Ordinal28',\
_exp_Ordinal29,'Ordinal29',\
_exp_Ordinal30,'Ordinal30',\
_exp_Ordinal31,'Ordinal31',\
_exp_Ordinal32,'Ordinal32',\
_exp_Ordinal33,'Ordinal33',\
_exp_Ordinal34,'Ordinal34',\
_exp_Ordinal35,'Ordinal35',\
_exp_Ordinal36,'Ordinal36',\
_exp_BeginBufferedAnimation,'BeginBufferedAnimation',\
_exp_BeginBufferedPaint,'BeginBufferedPaint',\
_exp_BufferedPaintClear,'BufferedPaintClear',\
_exp_BufferedPaintInit,'BufferedPaintInit',\
_exp_BufferedPaintRenderAnimation,'BufferedPaintRenderAnimation',\
_exp_BufferedPaintSetAlpha,'BufferedPaintSetAlpha',\
_exp_Ordinal43,'Ordinal43',\
_exp_Ordinal44,'Ordinal44',\
_exp_Ordinal45,'Ordinal45',\
_exp_Ordinal46,'Ordinal46',\
_exp_DrawThemeBackgroundEx,'DrawThemeBackgroundEx',\
_exp_Ordinal48,'Ordinal48',\
_exp_Ordinal49,'Ordinal49',\
_exp_Ordinal50,'Ordinal50',\
_exp_BufferedPaintStopAllAnimations,'BufferedPaintStopAllAnimations',\
_exp_BufferedPaintUnInit,'BufferedPaintUnInit',\
_exp_CloseThemeData,'CloseThemeData',\
_exp_DllCanUnloadNow,'DllCanUnloadNow',\
_exp_DllGetActivationFactory,'DllGetActivationFactory',\
_exp_DllGetClassObject,'DllGetClassObject',\
_exp_DrawThemeBackground,'DrawThemeBackground',\
_exp_DrawThemeEdge,'DrawThemeEdge',\
_exp_DrawThemeIcon,'DrawThemeIcon',\
_exp_Ordinal60,'Ordinal60',\
_exp_OpenThemeDataEx,'OpenThemeDataEx',\
_exp_Ordinal62,'Ordinal62',\
_exp_Ordinal63,'Ordinal63',\
_exp_Ordinal64,'Ordinal64',\
_exp_Ordinal65,'Ordinal65',\
_exp_Ordinal66,'Ordinal66',\
_exp_Ordinal67,'Ordinal67',\
_exp_Ordinal68,'Ordinal68',\
_exp_Ordinal69,'Ordinal69',\
_exp_DrawThemeParentBackground,'DrawThemeParentBackground',\
_exp_DrawThemeParentBackgroundEx,'DrawThemeParentBackgroundEx',\
_exp_Ordinal72,'Ordinal72',\
_exp_Ordinal73,'Ordinal73',\
_exp_Ordinal74,'Ordinal74',\
_exp_Ordinal75,'Ordinal75',\
_exp_Ordinal76,'Ordinal76',\
_exp_Ordinal77,'Ordinal77',\
_exp_Ordinal78,'Ordinal78',\
_exp_Ordinal79,'Ordinal79',\
_exp_Ordinal80,'Ordinal80',\
_exp_Ordinal81,'Ordinal81',\
_exp_Ordinal82,'Ordinal82',\
_exp_Ordinal83,'Ordinal83',\
_exp_Ordinal84,'Ordinal84',\
_exp_Ordinal85,'Ordinal85',\
_exp_Ordinal86,'Ordinal86',\
_exp_Ordinal87,'Ordinal87',\
_exp_Ordinal88,'Ordinal88',\
_exp_DrawThemeText,'DrawThemeText',\
_exp_Ordinal90,'Ordinal90',\
_exp_Ordinal91,'Ordinal91',\
_exp_Ordinal92,'Ordinal92',\
_exp_Ordinal93,'Ordinal93',\
_exp_Ordinal94,'Ordinal94',\
_exp_GetImmersiveColorFromColorSetEx,'GetImmersiveColorFromColorSetEx',\
_exp_Ordinal96,'Ordinal96',\
_exp_Ordinal97,'Ordinal97',\
_exp_GetImmersiveUserColorSetPreference,'GetImmersiveUserColorSetPreference',\
_exp_Ordinal99,'Ordinal99',\
_exp_Ordinal100,'Ordinal100',\
_exp_Ordinal101,'Ordinal101',\
_exp_Ordinal102,'Ordinal102',\
_exp_DrawThemeTextEx,'DrawThemeTextEx',\
_exp_Ordinal104,'Ordinal104',\
_exp_Ordinal105,'Ordinal105',\
_exp_Ordinal106,'Ordinal106',\
_exp_Ordinal107,'Ordinal107',\
_exp_Ordinal108,'Ordinal108',\
_exp_Ordinal109,'Ordinal109',\
_exp_Ordinal110,'Ordinal110',\
_exp_Ordinal111,'Ordinal111',\
_exp_Ordinal112,'Ordinal112',\
_exp_Ordinal113,'Ordinal113',\
_exp_EnableThemeDialogTexture,'EnableThemeDialogTexture',\
_exp_Ordinal115,'Ordinal115',\
_exp_Ordinal116,'Ordinal116',\
_exp_Ordinal117,'Ordinal117',\
_exp_Ordinal118,'Ordinal118',\
_exp_Ordinal119,'Ordinal119',\
_exp_GetUserColorPreference,'GetUserColorPreference',\
_exp_GetColorFromPreference,'GetColorFromPreference',\
_exp_Ordinal122,'Ordinal122',\
_exp_Ordinal123,'Ordinal123',\
_exp_Ordinal124,'Ordinal124',\
_exp_Ordinal125,'Ordinal125',\
_exp_Ordinal126,'Ordinal126',\
_exp_Ordinal127,'Ordinal127',\
_exp_Ordinal128,'Ordinal128',\
_exp_EnableTheming,'EnableTheming',\
_exp_Ordinal130,'Ordinal130',\
_exp_Ordinal131,'Ordinal131',\
_exp_Ordinal132,'Ordinal132',\
_exp_Ordinal133,'Ordinal133',\
_exp_EndBufferedAnimation,'EndBufferedAnimation',\
_exp_Ordinal135,'Ordinal135',\
_exp_Ordinal136,'Ordinal136',\
_exp_Ordinal137,'Ordinal137',\
_exp_Ordinal138,'Ordinal138',\
_exp_Ordinal139,'Ordinal139',\
_exp_EndBufferedPaint,'EndBufferedPaint',\
_exp_GetBufferedPaintBits,'GetBufferedPaintBits',\
_exp_GetBufferedPaintDC,'GetBufferedPaintDC',\
_exp_GetBufferedPaintTargetDC,'GetBufferedPaintTargetDC',\
_exp_GetBufferedPaintTargetRect,'GetBufferedPaintTargetRect',\
_exp_GetCurrentThemeName,'GetCurrentThemeName',\
_exp_GetThemeAnimationProperty,'GetThemeAnimationProperty',\
_exp_GetThemeAnimationTransform,'GetThemeAnimationTransform',\
_exp_GetThemeAppProperties,'GetThemeAppProperties',\
_exp_GetThemeBackgroundContentRect,'GetThemeBackgroundContentRect',\
_exp_GetThemeBackgroundExtent,'GetThemeBackgroundExtent',\
_exp_GetThemeBackgroundRegion,'GetThemeBackgroundRegion',\
_exp_GetThemeBitmap,'GetThemeBitmap',\
_exp_GetThemeBool,'GetThemeBool',\
_exp_GetThemeColor,'GetThemeColor',\
_exp_GetThemeDocumentationProperty,'GetThemeDocumentationProperty',\
_exp_GetThemeEnumValue,'GetThemeEnumValue',\
_exp_GetThemeFilename,'GetThemeFilename',\
_exp_GetThemeFont,'GetThemeFont',\
_exp_GetThemeInt,'GetThemeInt',\
_exp_GetThemeIntList,'GetThemeIntList',\
_exp_GetThemeMargins,'GetThemeMargins',\
_exp_GetThemeMetric,'GetThemeMetric',\
_exp_GetThemePartSize,'GetThemePartSize',\
_exp_GetThemePosition,'GetThemePosition',\
_exp_GetThemePropertyOrigin,'GetThemePropertyOrigin',\
_exp_GetThemeRect,'GetThemeRect',\
_exp_GetThemeStream,'GetThemeStream',\
_exp_GetThemeString,'GetThemeString',\
_exp_GetThemeSysBool,'GetThemeSysBool',\
_exp_GetThemeSysColor,'GetThemeSysColor',\
_exp_GetThemeSysColorBrush,'GetThemeSysColorBrush',\
_exp_GetThemeSysFont,'GetThemeSysFont',\
_exp_GetThemeSysInt,'GetThemeSysInt',\
_exp_GetThemeSysSize,'GetThemeSysSize',\
_exp_GetThemeSysString,'GetThemeSysString',\
_exp_GetThemeTextExtent,'GetThemeTextExtent',\
_exp_GetThemeTextMetrics,'GetThemeTextMetrics',\
_exp_GetThemeTimingFunction,'GetThemeTimingFunction',\
_exp_GetThemeTransitionDuration,'GetThemeTransitionDuration',\
_exp_GetWindowTheme,'GetWindowTheme',\
_exp_HitTestThemeBackground,'HitTestThemeBackground',\
_exp_IsAppThemed,'IsAppThemed',\
_exp_IsCompositionActive,'IsCompositionActive',\
_exp_IsThemeActive,'IsThemeActive',\
_exp_IsThemeBackgroundPartiallyTransparent,'IsThemeBackgroundPartiallyTransparent',\
_exp_IsThemeDialogTextureEnabled,'IsThemeDialogTextureEnabled',\
_exp_IsThemePartDefined,'IsThemePartDefined',\
_exp_OpenThemeData,'OpenThemeData',\
_exp_OpenThemeDataForDpi,'OpenThemeDataForDpi',\
_exp_SetThemeAppProperties,'SetThemeAppProperties',\
_exp_SetWindowTheme,'SetWindowTheme',\
_exp_SetWindowThemeAttribute,'SetWindowThemeAttribute',\
_exp_ThemeInitApiHook,'ThemeInitApiHook'

飞天

感谢分享

chchhau

PYG20周年生日快乐！

gujin162

感谢大佬分享~~