飘云阁

 找回密码
 加入我们

QQ登录

只需一步,快速开始

查看: 272|回复: 3

[原创] uxtheme.dll x64汇编劫持代码 ,解决无名导出函数转发

[复制链接]
  • TA的每日心情
    奋斗
    2024-5-22 16:18
  • 签到天数: 1129 天

    [LV.10]以坛为家III

    发表于 前天 22:04 | 显示全部楼层 |阅读模式
    format PE64 GUI DLL
    entry DllEntryPoint;
    use64;
    include 'win64a.inc';
    section '.text' code readable executable;'
    macro apifix hMod,sz,fn;'
    {
    mov rdx, sz                ; proc name
    mov rcx, hMod              ; hLib
    call [GetProcAddress]
    mov qword[fn], rax
    };
    ; 利用 VirtualProtect 修改目标区域为可读写执行
    ; 修改完后再恢复其保护。
    ; 参数: 修改地址(地址偏移), 保护长度, 储存旧保护的地址,
    ;       数据宽度(byte/word/dword/qword), 写出数据
    macro fixCode lpAddr,len,oldProtect,dataWidth,data
      {
    lea rax, oldProtect
    invoke VirtualProtect, lpAddr, len, PAGE_EXECUTE_READWRITE, rax
    mov rax, lpAddr
    mov dataWidth [rax], data
    lea rax, oldProtect
    invoke VirtualProtect, lpAddr, len, dword[rax], rax
      };
    ; 修复导出的 API 地址
    proc FixImport
      local hModule:QWORD
    local lpBuffer:QWORD
      frame
       invoke LocalAlloc, LPTR, MAX_PATH + 1
        mov [lpBuffer], rax
        invoke GetSystemDirectory, rax, MAX_PATH
        invoke strncat, [lpBuffer], szTargetLibrary, MAX_PATH
       invoke LoadLibrary, [lpBuffer]
        mov [hModule], rax
      invoke LocalFree,[lpBuffer]
    apifix [hModule], 1, _Ordinal1
    apifix [hModule], 2, _Ordinal2
    apifix [hModule], 3, _Ordinal3
    apifix [hModule], 4, _Ordinal4
    apifix [hModule], szBeginPanningFeedback, _BeginPanningFeedback
    apifix [hModule], szEndPanningFeedback, _EndPanningFeedback
    apifix [hModule], 7, _Ordinal7
    apifix [hModule], 8, _Ordinal8
    apifix [hModule], 9, _Ordinal9
    apifix [hModule], 10, _Ordinal10
    apifix [hModule], 11, _Ordinal11
    apifix [hModule], szUpdatePanningFeedback, _UpdatePanningFeedback
    apifix [hModule], 13, _Ordinal13
    apifix [hModule], 14, _Ordinal14
    apifix [hModule], 15, _Ordinal15
    apifix [hModule], 16, _Ordinal16
    apifix [hModule], 17, _Ordinal17
    apifix [hModule], 18, _Ordinal18
    apifix [hModule], 19, _Ordinal19
    apifix [hModule], 20, _Ordinal20
    apifix [hModule], 21, _Ordinal21
    apifix [hModule], 22, _Ordinal22
    apifix [hModule], 23, _Ordinal23
    apifix [hModule], 24, _Ordinal24
    apifix [hModule], 25, _Ordinal25
    apifix [hModule], 26, _Ordinal26
    apifix [hModule], 27, _Ordinal27
    apifix [hModule], 28, _Ordinal28
    apifix [hModule], 29, _Ordinal29
    apifix [hModule], 30, _Ordinal30
    apifix [hModule], 31, _Ordinal31
    apifix [hModule], 32, _Ordinal32
    apifix [hModule], 33, _Ordinal33
    apifix [hModule], 34, _Ordinal34
    apifix [hModule], 35, _Ordinal35
    apifix [hModule], 36, _Ordinal36
    apifix [hModule], szBeginBufferedAnimation, _BeginBufferedAnimation
    apifix [hModule], szBeginBufferedPaint, _BeginBufferedPaint
    apifix [hModule], szBufferedPaintClear, _BufferedPaintClear
    apifix [hModule], szBufferedPaintInit, _BufferedPaintInit
    apifix [hModule], szBufferedPaintRenderAnimation, _BufferedPaintRenderAnimation
    apifix [hModule], szBufferedPaintSetAlpha, _BufferedPaintSetAlpha
    apifix [hModule], 43, _Ordinal43
    apifix [hModule], 44, _Ordinal44
    apifix [hModule], 45, _Ordinal45
    apifix [hModule], 46, _Ordinal46
    apifix [hModule], szDrawThemeBackgroundEx, _DrawThemeBackgroundEx
    apifix [hModule], 48, _Ordinal48
    apifix [hModule], 49, _Ordinal49
    apifix [hModule], 50, _Ordinal50
    apifix [hModule], szBufferedPaintStopAllAnimations, _BufferedPaintStopAllAnimations
    apifix [hModule], szBufferedPaintUnInit, _BufferedPaintUnInit
    apifix [hModule], szCloseThemeData, _CloseThemeData
    apifix [hModule], szDllCanUnloadNow, _DllCanUnloadNow
    apifix [hModule], szDllGetActivationFactory, _DllGetActivationFactory
    apifix [hModule], szDllGetClassObject, _DllGetClassObject
    apifix [hModule], szDrawThemeBackground, _DrawThemeBackground
    apifix [hModule], szDrawThemeEdge, _DrawThemeEdge
    apifix [hModule], szDrawThemeIcon, _DrawThemeIcon
    apifix [hModule], 60, _Ordinal60
    apifix [hModule], szOpenThemeDataEx, _OpenThemeDataEx
    apifix [hModule], 62, _Ordinal62
    apifix [hModule], 63, _Ordinal63
    apifix [hModule], 64, _Ordinal64
    apifix [hModule], 65, _Ordinal65
    apifix [hModule], 66, _Ordinal66
    apifix [hModule], 67, _Ordinal67
    apifix [hModule], 68, _Ordinal68
    apifix [hModule], 69, _Ordinal69
    apifix [hModule], szDrawThemeParentBackground, _DrawThemeParentBackground
    apifix [hModule], szDrawThemeParentBackgroundEx, _DrawThemeParentBackgroundEx
    apifix [hModule], 72, _Ordinal72
    apifix [hModule], 73, _Ordinal73
    apifix [hModule], 74, _Ordinal74
    apifix [hModule], 75, _Ordinal75
    apifix [hModule], 76, _Ordinal76
    apifix [hModule], 77, _Ordinal77
    apifix [hModule], 78, _Ordinal78
    apifix [hModule], 79, _Ordinal79
    apifix [hModule], 80, _Ordinal80
    apifix [hModule], 81, _Ordinal81
    apifix [hModule], 82, _Ordinal82
    apifix [hModule], 83, _Ordinal83
    apifix [hModule], 84, _Ordinal84
    apifix [hModule], 85, _Ordinal85
    apifix [hModule], 86, _Ordinal86
    apifix [hModule], 87, _Ordinal87
    apifix [hModule], 88, _Ordinal88
    apifix [hModule], szDrawThemeText, _DrawThemeText
    apifix [hModule], 90, _Ordinal90
    apifix [hModule], 91, _Ordinal91
    apifix [hModule], 92, _Ordinal92
    apifix [hModule], 93, _Ordinal93
    apifix [hModule], 94, _Ordinal94
    apifix [hModule], szGetImmersiveColorFromColorSetEx, _GetImmersiveColorFromColorSetEx
    apifix [hModule], 96, _Ordinal96
    apifix [hModule], 97, _Ordinal97
    apifix [hModule], szGetImmersiveUserColorSetPreference, _GetImmersiveUserColorSetPreference
    apifix [hModule], 99, _Ordinal99
    apifix [hModule], 100, _Ordinal100
    apifix [hModule], 101, _Ordinal101
    apifix [hModule], 102, _Ordinal102
    apifix [hModule], szDrawThemeTextEx, _DrawThemeTextEx
    apifix [hModule], 104, _Ordinal104
    apifix [hModule], 105, _Ordinal105
    apifix [hModule], 106, _Ordinal106
    apifix [hModule], 107, _Ordinal107
    apifix [hModule], 108, _Ordinal108
    apifix [hModule], 109, _Ordinal109
    apifix [hModule], 110, _Ordinal110
    apifix [hModule], 111, _Ordinal111
    apifix [hModule], 112, _Ordinal112
    apifix [hModule], 113, _Ordinal113
    apifix [hModule], szEnableThemeDialogTexture, _EnableThemeDialogTexture
    apifix [hModule], 115, _Ordinal115
    apifix [hModule], 116, _Ordinal116
    apifix [hModule], 117, _Ordinal117
    apifix [hModule], 118, _Ordinal118
    apifix [hModule], 119, _Ordinal119
    apifix [hModule], szGetUserColorPreference, _GetUserColorPreference
    apifix [hModule], szGetColorFromPreference, _GetColorFromPreference
    apifix [hModule], 122, _Ordinal122
    apifix [hModule], 123, _Ordinal123
    apifix [hModule], 124, _Ordinal124
    apifix [hModule], 125, _Ordinal125
    apifix [hModule], 126, _Ordinal126
    apifix [hModule], 127, _Ordinal127
    apifix [hModule], 128, _Ordinal128
    apifix [hModule], szEnableTheming, _EnableTheming
    apifix [hModule], 130, _Ordinal130
    apifix [hModule], 131, _Ordinal131
    apifix [hModule], 132, _Ordinal132
    apifix [hModule], 133, _Ordinal133
    apifix [hModule], szEndBufferedAnimation, _EndBufferedAnimation
    apifix [hModule], 135, _Ordinal135
    apifix [hModule], 136, _Ordinal136
    apifix [hModule], 137, _Ordinal137
    apifix [hModule], 138, _Ordinal138
    apifix [hModule], 139, _Ordinal139
    apifix [hModule], szEndBufferedPaint, _EndBufferedPaint
    apifix [hModule], szGetBufferedPaintBits, _GetBufferedPaintBits
    apifix [hModule], szGetBufferedPaintDC, _GetBufferedPaintDC
    apifix [hModule], szGetBufferedPaintTargetDC, _GetBufferedPaintTargetDC
    apifix [hModule], szGetBufferedPaintTargetRect, _GetBufferedPaintTargetRect
    apifix [hModule], szGetCurrentThemeName, _GetCurrentThemeName
    apifix [hModule], szGetThemeAnimationProperty, _GetThemeAnimationProperty
    apifix [hModule], szGetThemeAnimationTransform, _GetThemeAnimationTransform
    apifix [hModule], szGetThemeAppProperties, _GetThemeAppProperties
    apifix [hModule], szGetThemeBackgroundContentRect, _GetThemeBackgroundContentRect
    apifix [hModule], szGetThemeBackgroundExtent, _GetThemeBackgroundExtent
    apifix [hModule], szGetThemeBackgroundRegion, _GetThemeBackgroundRegion
    apifix [hModule], szGetThemeBitmap, _GetThemeBitmap
    apifix [hModule], szGetThemeBool, _GetThemeBool
    apifix [hModule], szGetThemeColor, _GetThemeColor
    apifix [hModule], szGetThemeDocumentationProperty, _GetThemeDocumentationProperty
    apifix [hModule], szGetThemeEnumValue, _GetThemeEnumValue
    apifix [hModule], szGetThemeFilename, _GetThemeFilename
    apifix [hModule], szGetThemeFont, _GetThemeFont
    apifix [hModule], szGetThemeInt, _GetThemeInt
    apifix [hModule], szGetThemeIntList, _GetThemeIntList
    apifix [hModule], szGetThemeMargins, _GetThemeMargins
    apifix [hModule], szGetThemeMetric, _GetThemeMetric
    apifix [hModule], szGetThemePartSize, _GetThemePartSize
    apifix [hModule], szGetThemePosition, _GetThemePosition
    apifix [hModule], szGetThemePropertyOrigin, _GetThemePropertyOrigin
    apifix [hModule], szGetThemeRect, _GetThemeRect
    apifix [hModule], szGetThemeStream, _GetThemeStream
    apifix [hModule], szGetThemeString, _GetThemeString
    apifix [hModule], szGetThemeSysBool, _GetThemeSysBool
    apifix [hModule], szGetThemeSysColor, _GetThemeSysColor
    apifix [hModule], szGetThemeSysColorBrush, _GetThemeSysColorBrush
    apifix [hModule], szGetThemeSysFont, _GetThemeSysFont
    apifix [hModule], szGetThemeSysInt, _GetThemeSysInt
    apifix [hModule], szGetThemeSysSize, _GetThemeSysSize
    apifix [hModule], szGetThemeSysString, _GetThemeSysString
    apifix [hModule], szGetThemeTextExtent, _GetThemeTextExtent
    apifix [hModule], szGetThemeTextMetrics, _GetThemeTextMetrics
    apifix [hModule], szGetThemeTimingFunction, _GetThemeTimingFunction
    apifix [hModule], szGetThemeTransitionDuration, _GetThemeTransitionDuration
    apifix [hModule], szGetWindowTheme, _GetWindowTheme
    apifix [hModule], szHitTestThemeBackground, _HitTestThemeBackground
    apifix [hModule], szIsAppThemed, _IsAppThemed
    apifix [hModule], szIsCompositionActive, _IsCompositionActive
    apifix [hModule], szIsThemeActive, _IsThemeActive
    apifix [hModule], szIsThemeBackgroundPartiallyTransparent, _IsThemeBackgroundPartiallyTransparent
    apifix [hModule], szIsThemeDialogTextureEnabled, _IsThemeDialogTextureEnabled
    apifix [hModule], szIsThemePartDefined, _IsThemePartDefined
    apifix [hModule], szOpenThemeData, _OpenThemeData
    apifix [hModule], szOpenThemeDataForDpi, _OpenThemeDataForDpi
    apifix [hModule], szSetThemeAppProperties, _SetThemeAppProperties
    apifix [hModule], szSetWindowTheme, _SetWindowTheme
    apifix [hModule], szSetWindowThemeAttribute, _SetWindowThemeAttribute
    apifix [hModule], szThemeInitApiHook, _ThemeInitApiHook
      endf;
      ret
    endp;
    proc DllEntryPoint hinstDLL,fdwReason,lpvReserved
      local hModule:QWORD
      local oldProtect:DWORD
      local lpBuffer:QWORD
      cmp edx, 1
      jnz skipPatch
      ; 检测是否为目标进程
       frame
        invoke LocalAlloc, LPTR, MAX_PATH + 1
        mov [lpBuffer], rax
       invoke GetModuleFileName, NULL, rax, MAX_PATH
       invoke strstr, [lpBuffer], szTargetExeName
        mov dword[oldProtect], eax
        invoke LocalFree,[lpBuffer]
      endf
      cmp dword[oldProtect], 0
      jz skipPatch
      frame
      ; 取得当前主程序句柄
        invoke GetModuleHandle,NULL
        mov rax, [hModule]
        ; 00000000012D0D99 | B0 00                    | mov al,0
        add rax, 0xED0D9A ; offset
        mov [lpBuffer], rax
        fixCode [lpBuffer], 1, [oldProtect], byte, 0x00
      ; 修改
        mov rax, [lpBuffer]
        mov word[rax], 0xB848
       add rax, 2
        mov qword[rax], 0xB848
        add rax, 8
        mov dword[rax], 0x02EBD0FF
    ; 还原
        lea rax, [oldProtect]
        invoke VirtualProtect, [lpBuffer], 0x10, dword[rax], rax
      endf
    skipPatch:
      call FixImport
      mov eax,TRUE
      ret
    endp
    ; 导出函数, 全是跳转
    _exp_Ordinal1:    jmp [        _Ordinal1   ]
    _exp_Ordinal2:    jmp [        _Ordinal2   ]
    _exp_Ordinal3:    jmp [        _Ordinal3   ]
    _exp_Ordinal4:    jmp [        _Ordinal4   ]
    _exp_BeginPanningFeedback:    jmp [        _BeginPanningFeedback   ]
    _exp_EndPanningFeedback:    jmp [        _EndPanningFeedback   ]
    _exp_Ordinal7:    jmp [        _Ordinal7   ]
    _exp_Ordinal8:    jmp [        _Ordinal8   ]
    _exp_Ordinal9:    jmp [        _Ordinal9   ]
    _exp_Ordinal10:    jmp [        _Ordinal10   ]
    _exp_Ordinal11:    jmp [        _Ordinal11   ]
    _exp_UpdatePanningFeedback:    jmp [        _UpdatePanningFeedback   ]
    _exp_Ordinal13:    jmp [        _Ordinal13   ]
    _exp_Ordinal14:    jmp [        _Ordinal14   ]
    _exp_Ordinal15:    jmp [        _Ordinal15   ]
    _exp_Ordinal16:    jmp [        _Ordinal16   ]
    _exp_Ordinal17:    jmp [        _Ordinal17   ]
    _exp_Ordinal18:    jmp [        _Ordinal18   ]
    _exp_Ordinal19:    jmp [        _Ordinal19   ]
    _exp_Ordinal20:    jmp [        _Ordinal20   ]
    _exp_Ordinal21:    jmp [        _Ordinal21   ]
    _exp_Ordinal22:    jmp [        _Ordinal22   ]
    _exp_Ordinal23:    jmp [        _Ordinal23   ]
    _exp_Ordinal24:    jmp [        _Ordinal24   ]
    _exp_Ordinal25:    jmp [        _Ordinal25   ]
    _exp_Ordinal26:    jmp [        _Ordinal26   ]
    _exp_Ordinal27:    jmp [        _Ordinal27   ]
    _exp_Ordinal28:    jmp [        _Ordinal28   ]
    _exp_Ordinal29:    jmp [        _Ordinal29   ]
    _exp_Ordinal30:    jmp [        _Ordinal30   ]
    _exp_Ordinal31:    jmp [        _Ordinal31   ]
    _exp_Ordinal32:    jmp [        _Ordinal32   ]
    _exp_Ordinal33:    jmp [        _Ordinal33   ]
    _exp_Ordinal34:    jmp [        _Ordinal34   ]
    _exp_Ordinal35:    jmp [        _Ordinal35   ]
    _exp_Ordinal36:    jmp [        _Ordinal36   ]
    _exp_BeginBufferedAnimation:    jmp [        _BeginBufferedAnimation   ]
    _exp_BeginBufferedPaint:    jmp [        _BeginBufferedPaint   ]
    _exp_BufferedPaintClear:    jmp [        _BufferedPaintClear   ]
    _exp_BufferedPaintInit:    jmp [        _BufferedPaintInit   ]
    _exp_BufferedPaintRenderAnimation:    jmp [        _BufferedPaintRenderAnimation   ]
    _exp_BufferedPaintSetAlpha:    jmp [        _BufferedPaintSetAlpha   ]
    _exp_Ordinal43:    jmp [        _Ordinal43   ]
    _exp_Ordinal44:    jmp [        _Ordinal44   ]
    _exp_Ordinal45:    jmp [        _Ordinal45   ]
    _exp_Ordinal46:    jmp [        _Ordinal46   ]
    _exp_DrawThemeBackgroundEx:    jmp [        _DrawThemeBackgroundEx   ]
    _exp_Ordinal48:    jmp [        _Ordinal48   ]
    _exp_Ordinal49:    jmp [        _Ordinal49   ]
    _exp_Ordinal50:    jmp [        _Ordinal50   ]
    _exp_BufferedPaintStopAllAnimations:    jmp [        _BufferedPaintStopAllAnimations   ]
    _exp_BufferedPaintUnInit:    jmp [        _BufferedPaintUnInit   ]
    _exp_CloseThemeData:    jmp [        _CloseThemeData   ]
    _exp_DllCanUnloadNow:    jmp [        _DllCanUnloadNow   ]
    _exp_DllGetActivationFactory:    jmp [        _DllGetActivationFactory   ]
    _exp_DllGetClassObject:    jmp [        _DllGetClassObject   ]
    _exp_DrawThemeBackground:    jmp [        _DrawThemeBackground   ]
    _exp_DrawThemeEdge:    jmp [        _DrawThemeEdge   ]
    _exp_DrawThemeIcon:    jmp [        _DrawThemeIcon   ]
    _exp_Ordinal60:    jmp [        _Ordinal60   ]
    _exp_OpenThemeDataEx:    jmp [        _OpenThemeDataEx   ]
    _exp_Ordinal62:    jmp [        _Ordinal62   ]
    _exp_Ordinal63:    jmp [        _Ordinal63   ]
    _exp_Ordinal64:    jmp [        _Ordinal64   ]
    _exp_Ordinal65:    jmp [        _Ordinal65   ]
    _exp_Ordinal66:    jmp [        _Ordinal66   ]
    _exp_Ordinal67:    jmp [        _Ordinal67   ]
    _exp_Ordinal68:    jmp [        _Ordinal68   ]
    _exp_Ordinal69:    jmp [        _Ordinal69   ]
    _exp_DrawThemeParentBackground:    jmp [        _DrawThemeParentBackground   ]
    _exp_DrawThemeParentBackgroundEx:    jmp [        _DrawThemeParentBackgroundEx   ]
    _exp_Ordinal72:    jmp [        _Ordinal72   ]
    _exp_Ordinal73:    jmp [        _Ordinal73   ]
    _exp_Ordinal74:    jmp [        _Ordinal74   ]
    _exp_Ordinal75:    jmp [        _Ordinal75   ]
    _exp_Ordinal76:    jmp [        _Ordinal76   ]
    _exp_Ordinal77:    jmp [        _Ordinal77   ]
    _exp_Ordinal78:    jmp [        _Ordinal78   ]
    _exp_Ordinal79:    jmp [        _Ordinal79   ]
    _exp_Ordinal80:    jmp [        _Ordinal80   ]
    _exp_Ordinal81:    jmp [        _Ordinal81   ]
    _exp_Ordinal82:    jmp [        _Ordinal82   ]
    _exp_Ordinal83:    jmp [        _Ordinal83   ]
    _exp_Ordinal84:    jmp [        _Ordinal84   ]
    _exp_Ordinal85:    jmp [        _Ordinal85   ]
    _exp_Ordinal86:    jmp [        _Ordinal86   ]
    _exp_Ordinal87:    jmp [        _Ordinal87   ]
    _exp_Ordinal88:    jmp [        _Ordinal88   ]
    _exp_DrawThemeText:    jmp [        _DrawThemeText   ]
    _exp_Ordinal90:    jmp [        _Ordinal90   ]
    _exp_Ordinal91:    jmp [        _Ordinal91   ]
    _exp_Ordinal92:    jmp [        _Ordinal92   ]
    _exp_Ordinal93:    jmp [        _Ordinal93   ]
    _exp_Ordinal94:    jmp [        _Ordinal94   ]
    _exp_GetImmersiveColorFromColorSetEx:    jmp [        _GetImmersiveColorFromColorSetEx   ]
    _exp_Ordinal96:    jmp [        _Ordinal96   ]
    _exp_Ordinal97:    jmp [        _Ordinal97   ]
    _exp_GetImmersiveUserColorSetPreference:    jmp [        _GetImmersiveUserColorSetPreference   ]
    _exp_Ordinal99:    jmp [        _Ordinal99   ]
    _exp_Ordinal100:    jmp [        _Ordinal100   ]
    _exp_Ordinal101:    jmp [        _Ordinal101   ]
    _exp_Ordinal102:    jmp [        _Ordinal102   ]
    _exp_DrawThemeTextEx:    jmp [        _DrawThemeTextEx   ]
    _exp_Ordinal104:    jmp [        _Ordinal104   ]
    _exp_Ordinal105:    jmp [        _Ordinal105   ]
    _exp_Ordinal106:    jmp [        _Ordinal106   ]
    _exp_Ordinal107:    jmp [        _Ordinal107   ]
    _exp_Ordinal108:    jmp [        _Ordinal108   ]
    _exp_Ordinal109:    jmp [        _Ordinal109   ]
    _exp_Ordinal110:    jmp [        _Ordinal110   ]
    _exp_Ordinal111:    jmp [        _Ordinal111   ]
    _exp_Ordinal112:    jmp [        _Ordinal112   ]
    _exp_Ordinal113:    jmp [        _Ordinal113   ]
    _exp_EnableThemeDialogTexture:    jmp [        _EnableThemeDialogTexture   ]
    _exp_Ordinal115:    jmp [        _Ordinal115   ]
    _exp_Ordinal116:    jmp [        _Ordinal116   ]
    _exp_Ordinal117:    jmp [        _Ordinal117   ]
    _exp_Ordinal118:    jmp [        _Ordinal118   ]
    _exp_Ordinal119:    jmp [        _Ordinal119   ]
    _exp_GetUserColorPreference:    jmp [        _GetUserColorPreference   ]
    _exp_GetColorFromPreference:    jmp [        _GetColorFromPreference   ]
    _exp_Ordinal122:    jmp [        _Ordinal122   ]
    _exp_Ordinal123:    jmp [        _Ordinal123   ]
    _exp_Ordinal124:    jmp [        _Ordinal124   ]
    _exp_Ordinal125:    jmp [        _Ordinal125   ]
    _exp_Ordinal126:    jmp [        _Ordinal126   ]
    _exp_Ordinal127:    jmp [        _Ordinal127   ]
    _exp_Ordinal128:    jmp [        _Ordinal128   ]
    _exp_EnableTheming:    jmp [        _EnableTheming   ]
    _exp_Ordinal130:    jmp [        _Ordinal130   ]
    _exp_Ordinal131:    jmp [        _Ordinal131   ]
    _exp_Ordinal132:    jmp [        _Ordinal132   ]
    _exp_Ordinal133:    jmp [        _Ordinal133   ]
    _exp_EndBufferedAnimation:    jmp [        _EndBufferedAnimation   ]
    _exp_Ordinal135:    jmp [        _Ordinal135   ]
    _exp_Ordinal136:    jmp [        _Ordinal136   ]
    _exp_Ordinal137:    jmp [        _Ordinal137   ]
    _exp_Ordinal138:    jmp [        _Ordinal138   ]
    _exp_Ordinal139:    jmp [        _Ordinal139   ]
    _exp_EndBufferedPaint:    jmp [        _EndBufferedPaint   ]
    _exp_GetBufferedPaintBits:    jmp [        _GetBufferedPaintBits   ]
    _exp_GetBufferedPaintDC:    jmp [        _GetBufferedPaintDC   ]
    _exp_GetBufferedPaintTargetDC:    jmp [        _GetBufferedPaintTargetDC   ]
    _exp_GetBufferedPaintTargetRect:    jmp [        _GetBufferedPaintTargetRect   ]
    _exp_GetCurrentThemeName:    jmp [        _GetCurrentThemeName   ]
    _exp_GetThemeAnimationProperty:    jmp [        _GetThemeAnimationProperty   ]
    _exp_GetThemeAnimationTransform:    jmp [        _GetThemeAnimationTransform   ]
    _exp_GetThemeAppProperties:    jmp [        _GetThemeAppProperties   ]
    _exp_GetThemeBackgroundContentRect:    jmp [        _GetThemeBackgroundContentRect   ]
    _exp_GetThemeBackgroundExtent:    jmp [        _GetThemeBackgroundExtent   ]
    _exp_GetThemeBackgroundRegion:    jmp [        _GetThemeBackgroundRegion   ]
    _exp_GetThemeBitmap:    jmp [        _GetThemeBitmap   ]
    _exp_GetThemeBool:    jmp [        _GetThemeBool   ]
    _exp_GetThemeColor:    jmp [        _GetThemeColor   ]
    _exp_GetThemeDocumentationProperty:    jmp [        _GetThemeDocumentationProperty   ]
    _exp_GetThemeEnumValue:    jmp [        _GetThemeEnumValue   ]
    _exp_GetThemeFilename:    jmp [        _GetThemeFilename   ]
    _exp_GetThemeFont:    jmp [        _GetThemeFont   ]
    _exp_GetThemeInt:    jmp [        _GetThemeInt   ]
    _exp_GetThemeIntList:    jmp [        _GetThemeIntList   ]
    _exp_GetThemeMargins:    jmp [        _GetThemeMargins   ]
    _exp_GetThemeMetric:    jmp [        _GetThemeMetric   ]
    _exp_GetThemePartSize:    jmp [        _GetThemePartSize   ]
    _exp_GetThemePosition:    jmp [        _GetThemePosition   ]
    _exp_GetThemePropertyOrigin:    jmp [        _GetThemePropertyOrigin   ]
    _exp_GetThemeRect:    jmp [        _GetThemeRect   ]
    _exp_GetThemeStream:    jmp [        _GetThemeStream   ]
    _exp_GetThemeString:    jmp [        _GetThemeString   ]
    _exp_GetThemeSysBool:    jmp [        _GetThemeSysBool   ]
    _exp_GetThemeSysColor:    jmp [        _GetThemeSysColor   ]
    _exp_GetThemeSysColorBrush:    jmp [        _GetThemeSysColorBrush   ]
    _exp_GetThemeSysFont:    jmp [        _GetThemeSysFont   ]
    _exp_GetThemeSysInt:    jmp [        _GetThemeSysInt   ]
    _exp_GetThemeSysSize:    jmp [        _GetThemeSysSize   ]
    _exp_GetThemeSysString:    jmp [        _GetThemeSysString   ]
    _exp_GetThemeTextExtent:    jmp [        _GetThemeTextExtent   ]
    _exp_GetThemeTextMetrics:    jmp [        _GetThemeTextMetrics   ]
    _exp_GetThemeTimingFunction:    jmp [        _GetThemeTimingFunction   ]
    _exp_GetThemeTransitionDuration:    jmp [        _GetThemeTransitionDuration   ]
    _exp_GetWindowTheme:    jmp [        _GetWindowTheme   ]
    _exp_HitTestThemeBackground:    jmp [        _HitTestThemeBackground   ]
    _exp_IsAppThemed:    jmp [        _IsAppThemed   ]
    _exp_IsCompositionActive:    jmp [        _IsCompositionActive   ]
    _exp_IsThemeActive:    jmp [        _IsThemeActive   ]
    _exp_IsThemeBackgroundPartiallyTransparent:    jmp [        _IsThemeBackgroundPartiallyTransparent   ]
    _exp_IsThemeDialogTextureEnabled:    jmp [        _IsThemeDialogTextureEnabled   ]
    _exp_IsThemePartDefined:    jmp [        _IsThemePartDefined   ]
    _exp_OpenThemeData:    jmp [        _OpenThemeData   ]
    _exp_OpenThemeDataForDpi:    jmp [        _OpenThemeDataForDpi   ]
    _exp_SetThemeAppProperties:    jmp [        _SetThemeAppProperties   ]
    _exp_SetWindowTheme:    jmp [        _SetWindowTheme   ]
    _exp_SetWindowThemeAttribute:    jmp [        _SetWindowThemeAttribute   ]
    _exp_ThemeInitApiHook:    jmp [        _ThemeInitApiHook   ]
    ; 常数
    section '.szdb' data readable;
    szTargetLibrary db "\uxtheme.dll",  0
    szTargetExeName db "\tobecracked.exe",  0
    szOrdinal1  db "Ordinal1",  0
    szOrdinal2  db "Ordinal2",  0
    szOrdinal3  db "Ordinal3",  0
    szOrdinal4  db "Ordinal4",  0
    szBeginPanningFeedback  db "BeginPanningFeedback",  0
    szEndPanningFeedback  db "EndPanningFeedback",  0
    szOrdinal7  db "Ordinal7",  0
    szOrdinal8  db "Ordinal8",  0
    szOrdinal9  db "Ordinal9",  0
    szOrdinal10  db "Ordinal10",  0
    szOrdinal11  db "Ordinal11",  0
    szUpdatePanningFeedback  db "UpdatePanningFeedback",  0
    szOrdinal13  db "Ordinal13",  0
    szOrdinal14  db "Ordinal14",  0
    szOrdinal15  db "Ordinal15",  0
    szOrdinal16  db "Ordinal16",  0
    szOrdinal17  db "Ordinal17",  0
    szOrdinal18  db "Ordinal18",  0
    szOrdinal19  db "Ordinal19",  0
    szOrdinal20  db "Ordinal20",  0
    szOrdinal21  db "Ordinal21",  0
    szOrdinal22  db "Ordinal22",  0
    szOrdinal23  db "Ordinal23",  0
    szOrdinal24  db "Ordinal24",  0
    szOrdinal25  db "Ordinal25",  0
    szOrdinal26  db "Ordinal26",  0
    szOrdinal27  db "Ordinal27",  0
    szOrdinal28  db "Ordinal28",  0
    szOrdinal29  db "Ordinal29",  0
    szOrdinal30  db "Ordinal30",  0
    szOrdinal31  db "Ordinal31",  0
    szOrdinal32  db "Ordinal32",  0
    szOrdinal33  db "Ordinal33",  0
    szOrdinal34  db "Ordinal34",  0
    szOrdinal35  db "Ordinal35",  0
    szOrdinal36  db "Ordinal36",  0
    szBeginBufferedAnimation  db "BeginBufferedAnimation",  0
    szBeginBufferedPaint  db "BeginBufferedPaint",  0
    szBufferedPaintClear  db "BufferedPaintClear",  0
    szBufferedPaintInit  db "BufferedPaintInit",  0
    szBufferedPaintRenderAnimation  db "BufferedPaintRenderAnimation",  0
    szBufferedPaintSetAlpha  db "BufferedPaintSetAlpha",  0
    szOrdinal43  db "Ordinal43",  0
    szOrdinal44  db "Ordinal44",  0
    szOrdinal45  db "Ordinal45",  0
    szOrdinal46  db "Ordinal46",  0
    szDrawThemeBackgroundEx  db "DrawThemeBackgroundEx",  0
    szOrdinal48  db "Ordinal48",  0
    szOrdinal49  db "Ordinal49",  0
    szOrdinal50  db "Ordinal50",  0
    szBufferedPaintStopAllAnimations  db "BufferedPaintStopAllAnimations",  0
    szBufferedPaintUnInit  db "BufferedPaintUnInit",  0
    szCloseThemeData  db "CloseThemeData",  0
    szDllCanUnloadNow  db "DllCanUnloadNow",  0
    szDllGetActivationFactory  db "DllGetActivationFactory",  0
    szDllGetClassObject  db "DllGetClassObject",  0
    szDrawThemeBackground  db "DrawThemeBackground",  0
    szDrawThemeEdge  db "DrawThemeEdge",  0
    szDrawThemeIcon  db "DrawThemeIcon",  0
    szOrdinal60  db "Ordinal60",  0
    szOpenThemeDataEx  db "OpenThemeDataEx",  0
    szOrdinal62  db "Ordinal62",  0
    szOrdinal63  db "Ordinal63",  0
    szOrdinal64  db "Ordinal64",  0
    szOrdinal65  db "Ordinal65",  0
    szOrdinal66  db "Ordinal66",  0
    szOrdinal67  db "Ordinal67",  0
    szOrdinal68  db "Ordinal68",  0
    szOrdinal69  db "Ordinal69",  0
    szDrawThemeParentBackground  db "DrawThemeParentBackground",  0
    szDrawThemeParentBackgroundEx  db "DrawThemeParentBackgroundEx",  0
    szOrdinal72  db "Ordinal72",  0
    szOrdinal73  db "Ordinal73",  0
    szOrdinal74  db "Ordinal74",  0
    szOrdinal75  db "Ordinal75",  0
    szOrdinal76  db "Ordinal76",  0
    szOrdinal77  db "Ordinal77",  0
    szOrdinal78  db "Ordinal78",  0
    szOrdinal79  db "Ordinal79",  0
    szOrdinal80  db "Ordinal80",  0
    szOrdinal81  db "Ordinal81",  0
    szOrdinal82  db "Ordinal82",  0
    szOrdinal83  db "Ordinal83",  0
    szOrdinal84  db "Ordinal84",  0
    szOrdinal85  db "Ordinal85",  0
    szOrdinal86  db "Ordinal86",  0
    szOrdinal87  db "Ordinal87",  0
    szOrdinal88  db "Ordinal88",  0
    szDrawThemeText  db "DrawThemeText",  0
    szOrdinal90  db "Ordinal90",  0
    szOrdinal91  db "Ordinal91",  0
    szOrdinal92  db "Ordinal92",  0
    szOrdinal93  db "Ordinal93",  0
    szOrdinal94  db "Ordinal94",  0
    szGetImmersiveColorFromColorSetEx  db "GetImmersiveColorFromColorSetEx",  0
    szOrdinal96  db "Ordinal96",  0
    szOrdinal97  db "Ordinal97",  0
    szGetImmersiveUserColorSetPreference  db "GetImmersiveUserColorSetPreference",  0
    szOrdinal99  db "Ordinal99",  0
    szOrdinal100  db "Ordinal100",  0
    szOrdinal101  db "Ordinal101",  0
    szOrdinal102  db "Ordinal102",  0
    szDrawThemeTextEx  db "DrawThemeTextEx",  0
    szOrdinal104  db "Ordinal104",  0
    szOrdinal105  db "Ordinal105",  0
    szOrdinal106  db "Ordinal106",  0
    szOrdinal107  db "Ordinal107",  0
    szOrdinal108  db "Ordinal108",  0
    szOrdinal109  db "Ordinal109",  0
    szOrdinal110  db "Ordinal110",  0
    szOrdinal111  db "Ordinal111",  0
    szOrdinal112  db "Ordinal112",  0
    szOrdinal113  db "Ordinal113",  0
    szEnableThemeDialogTexture  db "EnableThemeDialogTexture",  0
    szOrdinal115  db "Ordinal115",  0
    szOrdinal116  db "Ordinal116",  0
    szOrdinal117  db "Ordinal117",  0
    szOrdinal118  db "Ordinal118",  0
    szOrdinal119  db "Ordinal119",  0
    szGetUserColorPreference  db "GetUserColorPreference",  0
    szGetColorFromPreference  db "GetColorFromPreference",  0
    szOrdinal122  db "Ordinal122",  0
    szOrdinal123  db "Ordinal123",  0
    szOrdinal124  db "Ordinal124",  0
    szOrdinal125  db "Ordinal125",  0
    szOrdinal126  db "Ordinal126",  0
    szOrdinal127  db "Ordinal127",  0
    szOrdinal128  db "Ordinal128",  0
    szEnableTheming  db "EnableTheming",  0
    szOrdinal130  db "Ordinal130",  0
    szOrdinal131  db "Ordinal131",  0
    szOrdinal132  db "Ordinal132",  0
    szOrdinal133  db "Ordinal133",  0
    szEndBufferedAnimation  db "EndBufferedAnimation",  0
    szOrdinal135  db "Ordinal135",  0
    szOrdinal136  db "Ordinal136",  0
    szOrdinal137  db "Ordinal137",  0
    szOrdinal138  db "Ordinal138",  0
    szOrdinal139  db "Ordinal139",  0
    szEndBufferedPaint  db "EndBufferedPaint",  0
    szGetBufferedPaintBits  db "GetBufferedPaintBits",  0
    szGetBufferedPaintDC  db "GetBufferedPaintDC",  0
    szGetBufferedPaintTargetDC  db "GetBufferedPaintTargetDC",  0
    szGetBufferedPaintTargetRect  db "GetBufferedPaintTargetRect",  0
    szGetCurrentThemeName  db "GetCurrentThemeName",  0
    szGetThemeAnimationProperty  db "GetThemeAnimationProperty",  0
    szGetThemeAnimationTransform  db "GetThemeAnimationTransform",  0
    szGetThemeAppProperties  db "GetThemeAppProperties",  0
    szGetThemeBackgroundContentRect  db "GetThemeBackgroundContentRect",  0
    szGetThemeBackgroundExtent  db "GetThemeBackgroundExtent",  0
    szGetThemeBackgroundRegion  db "GetThemeBackgroundRegion",  0
    szGetThemeBitmap  db "GetThemeBitmap",  0
    szGetThemeBool  db "GetThemeBool",  0
    szGetThemeColor  db "GetThemeColor",  0
    szGetThemeDocumentationProperty  db "GetThemeDocumentationProperty",  0
    szGetThemeEnumValue  db "GetThemeEnumValue",  0
    szGetThemeFilename  db "GetThemeFilename",  0
    szGetThemeFont  db "GetThemeFont",  0
    szGetThemeInt  db "GetThemeInt",  0
    szGetThemeIntList  db "GetThemeIntList",  0
    szGetThemeMargins  db "GetThemeMargins",  0
    szGetThemeMetric  db "GetThemeMetric",  0
    szGetThemePartSize  db "GetThemePartSize",  0
    szGetThemePosition  db "GetThemePosition",  0
    szGetThemePropertyOrigin  db "GetThemePropertyOrigin",  0
    szGetThemeRect  db "GetThemeRect",  0
    szGetThemeStream  db "GetThemeStream",  0
    szGetThemeString  db "GetThemeString",  0
    szGetThemeSysBool  db "GetThemeSysBool",  0
    szGetThemeSysColor  db "GetThemeSysColor",  0
    szGetThemeSysColorBrush  db "GetThemeSysColorBrush",  0
    szGetThemeSysFont  db "GetThemeSysFont",  0
    szGetThemeSysInt  db "GetThemeSysInt",  0
    szGetThemeSysSize  db "GetThemeSysSize",  0
    szGetThemeSysString  db "GetThemeSysString",  0
    szGetThemeTextExtent  db "GetThemeTextExtent",  0
    szGetThemeTextMetrics  db "GetThemeTextMetrics",  0
    szGetThemeTimingFunction  db "GetThemeTimingFunction",  0
    szGetThemeTransitionDuration  db "GetThemeTransitionDuration",  0
    szGetWindowTheme  db "GetWindowTheme",  0
    szHitTestThemeBackground  db "HitTestThemeBackground",  0
    szIsAppThemed  db "IsAppThemed",  0
    szIsCompositionActive  db "IsCompositionActive",  0
    szIsThemeActive  db "IsThemeActive",  0
    szIsThemeBackgroundPartiallyTransparent  db "IsThemeBackgroundPartiallyTransparent",  0
    szIsThemeDialogTextureEnabled  db "IsThemeDialogTextureEnabled",  0
    szIsThemePartDefined  db "IsThemePartDefined",  0
    szOpenThemeData  db "OpenThemeData",  0
    szOpenThemeDataForDpi  db "OpenThemeDataForDpi",  0
    szSetThemeAppProperties  db "SetThemeAppProperties",  0
    szSetWindowTheme  db "SetWindowTheme",  0
    szSetWindowThemeAttribute  db "SetWindowThemeAttribute",  0
    szThemeInitApiHook  db "ThemeInitApiHook",  0
    ; 跳转地址储存
    section '.expw' data readable writeable;
    _Ordinal1              dq ?
    _Ordinal2              dq ?
    _Ordinal3              dq ?
    _Ordinal4              dq ?
    _BeginPanningFeedback              dq ?
    _EndPanningFeedback              dq ?
    _Ordinal7              dq ?
    _Ordinal8              dq ?
    _Ordinal9              dq ?
    _Ordinal10              dq ?
    _Ordinal11              dq ?
    _UpdatePanningFeedback              dq ?
    _Ordinal13              dq ?
    _Ordinal14              dq ?
    _Ordinal15              dq ?
    _Ordinal16              dq ?
    _Ordinal17              dq ?
    _Ordinal18              dq ?
    _Ordinal19              dq ?
    _Ordinal20              dq ?
    _Ordinal21              dq ?
    _Ordinal22              dq ?
    _Ordinal23              dq ?
    _Ordinal24              dq ?
    _Ordinal25              dq ?
    _Ordinal26              dq ?
    _Ordinal27              dq ?
    _Ordinal28              dq ?
    _Ordinal29              dq ?
    _Ordinal30              dq ?
    _Ordinal31              dq ?
    _Ordinal32              dq ?
    _Ordinal33              dq ?
    _Ordinal34              dq ?
    _Ordinal35              dq ?
    _Ordinal36              dq ?
    _BeginBufferedAnimation              dq ?
    _BeginBufferedPaint              dq ?
    _BufferedPaintClear              dq ?
    _BufferedPaintInit              dq ?
    _BufferedPaintRenderAnimation              dq ?
    _BufferedPaintSetAlpha              dq ?
    _Ordinal43              dq ?
    _Ordinal44              dq ?
    _Ordinal45              dq ?
    _Ordinal46              dq ?
    _DrawThemeBackgroundEx              dq ?
    _Ordinal48              dq ?
    _Ordinal49              dq ?
    _Ordinal50              dq ?
    _BufferedPaintStopAllAnimations              dq ?
    _BufferedPaintUnInit              dq ?
    _CloseThemeData              dq ?
    _DllCanUnloadNow              dq ?
    _DllGetActivationFactory              dq ?
    _DllGetClassObject              dq ?
    _DrawThemeBackground              dq ?
    _DrawThemeEdge              dq ?
    _DrawThemeIcon              dq ?
    _Ordinal60              dq ?
    _OpenThemeDataEx              dq ?
    _Ordinal62              dq ?
    _Ordinal63              dq ?
    _Ordinal64              dq ?
    _Ordinal65              dq ?
    _Ordinal66              dq ?
    _Ordinal67              dq ?
    _Ordinal68              dq ?
    _Ordinal69              dq ?
    _DrawThemeParentBackground              dq ?
    _DrawThemeParentBackgroundEx              dq ?
    _Ordinal72              dq ?
    _Ordinal73              dq ?
    _Ordinal74              dq ?
    _Ordinal75              dq ?
    _Ordinal76              dq ?
    _Ordinal77              dq ?
    _Ordinal78              dq ?
    _Ordinal79              dq ?
    _Ordinal80              dq ?
    _Ordinal81              dq ?
    _Ordinal82              dq ?
    _Ordinal83              dq ?
    _Ordinal84              dq ?
    _Ordinal85              dq ?
    _Ordinal86              dq ?
    _Ordinal87              dq ?
    _Ordinal88              dq ?
    _DrawThemeText              dq ?
    _Ordinal90              dq ?
    _Ordinal91              dq ?
    _Ordinal92              dq ?
    _Ordinal93              dq ?
    _Ordinal94              dq ?
    _GetImmersiveColorFromColorSetEx              dq ?
    _Ordinal96              dq ?
    _Ordinal97              dq ?
    _GetImmersiveUserColorSetPreference              dq ?
    _Ordinal99              dq ?
    _Ordinal100              dq ?
    _Ordinal101              dq ?
    _Ordinal102              dq ?
    _DrawThemeTextEx              dq ?
    _Ordinal104              dq ?
    _Ordinal105              dq ?
    _Ordinal106              dq ?
    _Ordinal107              dq ?
    _Ordinal108              dq ?
    _Ordinal109              dq ?
    _Ordinal110              dq ?
    _Ordinal111              dq ?
    _Ordinal112              dq ?
    _Ordinal113              dq ?
    _EnableThemeDialogTexture              dq ?
    _Ordinal115              dq ?
    _Ordinal116              dq ?
    _Ordinal117              dq ?
    _Ordinal118              dq ?
    _Ordinal119              dq ?
    _GetUserColorPreference              dq ?
    _GetColorFromPreference              dq ?
    _Ordinal122              dq ?
    _Ordinal123              dq ?
    _Ordinal124              dq ?
    _Ordinal125              dq ?
    _Ordinal126              dq ?
    _Ordinal127              dq ?
    _Ordinal128              dq ?
    _EnableTheming              dq ?
    _Ordinal130              dq ?
    _Ordinal131              dq ?
    _Ordinal132              dq ?
    _Ordinal133              dq ?
    _EndBufferedAnimation              dq ?
    _Ordinal135              dq ?
    _Ordinal136              dq ?
    _Ordinal137              dq ?
    _Ordinal138              dq ?
    _Ordinal139              dq ?
    _EndBufferedPaint              dq ?
    _GetBufferedPaintBits              dq ?
    _GetBufferedPaintDC              dq ?
    _GetBufferedPaintTargetDC              dq ?
    _GetBufferedPaintTargetRect              dq ?
    _GetCurrentThemeName              dq ?
    _GetThemeAnimationProperty              dq ?
    _GetThemeAnimationTransform              dq ?
    _GetThemeAppProperties              dq ?
    _GetThemeBackgroundContentRect              dq ?
    _GetThemeBackgroundExtent              dq ?
    _GetThemeBackgroundRegion              dq ?
    _GetThemeBitmap              dq ?
    _GetThemeBool              dq ?
    _GetThemeColor              dq ?
    _GetThemeDocumentationProperty              dq ?
    _GetThemeEnumValue              dq ?
    _GetThemeFilename              dq ?
    _GetThemeFont              dq ?
    _GetThemeInt              dq ?
    _GetThemeIntList              dq ?
    _GetThemeMargins              dq ?
    _GetThemeMetric              dq ?
    _GetThemePartSize              dq ?
    _GetThemePosition              dq ?
    _GetThemePropertyOrigin              dq ?
    _GetThemeRect              dq ?
    _GetThemeStream              dq ?
    _GetThemeString              dq ?
    _GetThemeSysBool              dq ?
    _GetThemeSysColor              dq ?
    _GetThemeSysColorBrush              dq ?
    _GetThemeSysFont              dq ?
    _GetThemeSysInt              dq ?
    _GetThemeSysSize              dq ?
    _GetThemeSysString              dq ?
    _GetThemeTextExtent              dq ?
    _GetThemeTextMetrics              dq ?
    _GetThemeTimingFunction              dq ?
    _GetThemeTransitionDuration              dq ?
    _GetWindowTheme              dq ?
    _HitTestThemeBackground              dq ?
    _IsAppThemed              dq ?
    _IsCompositionActive              dq ?
    _IsThemeActive              dq ?
    _IsThemeBackgroundPartiallyTransparent              dq ?
    _IsThemeDialogTextureEnabled              dq ?
    _IsThemePartDefined              dq ?
    _OpenThemeData              dq ?
    _OpenThemeDataForDpi              dq ?
    _SetThemeAppProperties              dq ?
    _SetWindowTheme              dq ?
    _SetWindowThemeAttribute              dq ?
    _ThemeInitApiHook              dq ?
    section '.idata' import data readable writeable;
       library kernel,'KERNEL32.DLL',                  \
          msvc,'msvcrt.dll';
                            ;
    import kernel,                                     \
       VirtualProtect,'VirtualProtect',                   \
    LocalAlloc,'LocalAlloc',                            \
    LocalFree,'LocalFree',                               \
       GetModuleHandle,'GetModuleHandleA', \
       LoadLibrary,'LoadLibraryA',                  \
       GetProcAddress,'GetProcAddress',                   \
       GetModuleFileName,'GetModuleFileNameA',              \
        GetSystemDirectory,'GetSystemDirectoryA';                 \
      import msvc,                  \
         strstr,'strstr',  \  
         strncpy,'strncpy', \
         strncat,'strncat'  \

    section '.edata' export data readable;                 \  
      export 'uxtheme.dll',\
    _exp_Ordinal1,'Ordinal1',\
    _exp_Ordinal2,'Ordinal2',\
    _exp_Ordinal3,'Ordinal3',\
    _exp_Ordinal4,'Ordinal4',\
    _exp_BeginPanningFeedback,'BeginPanningFeedback',\
    _exp_EndPanningFeedback,'EndPanningFeedback',\
    _exp_Ordinal7,'Ordinal7',\
    _exp_Ordinal8,'Ordinal8',\
    _exp_Ordinal9,'Ordinal9',\
    _exp_Ordinal10,'Ordinal10',\
    _exp_Ordinal11,'Ordinal11',\
    _exp_UpdatePanningFeedback,'UpdatePanningFeedback',\
    _exp_Ordinal13,'Ordinal13',\
    _exp_Ordinal14,'Ordinal14',\
    _exp_Ordinal15,'Ordinal15',\
    _exp_Ordinal16,'Ordinal16',\
    _exp_Ordinal17,'Ordinal17',\
    _exp_Ordinal18,'Ordinal18',\
    _exp_Ordinal19,'Ordinal19',\
    _exp_Ordinal20,'Ordinal20',\
    _exp_Ordinal21,'Ordinal21',\
    _exp_Ordinal22,'Ordinal22',\
    _exp_Ordinal23,'Ordinal23',\
    _exp_Ordinal24,'Ordinal24',\
    _exp_Ordinal25,'Ordinal25',\
    _exp_Ordinal26,'Ordinal26',\
    _exp_Ordinal27,'Ordinal27',\
    _exp_Ordinal28,'Ordinal28',\
    _exp_Ordinal29,'Ordinal29',\
    _exp_Ordinal30,'Ordinal30',\
    _exp_Ordinal31,'Ordinal31',\
    _exp_Ordinal32,'Ordinal32',\
    _exp_Ordinal33,'Ordinal33',\
    _exp_Ordinal34,'Ordinal34',\
    _exp_Ordinal35,'Ordinal35',\
    _exp_Ordinal36,'Ordinal36',\
    _exp_BeginBufferedAnimation,'BeginBufferedAnimation',\
    _exp_BeginBufferedPaint,'BeginBufferedPaint',\
    _exp_BufferedPaintClear,'BufferedPaintClear',\
    _exp_BufferedPaintInit,'BufferedPaintInit',\
    _exp_BufferedPaintRenderAnimation,'BufferedPaintRenderAnimation',\
    _exp_BufferedPaintSetAlpha,'BufferedPaintSetAlpha',\
    _exp_Ordinal43,'Ordinal43',\
    _exp_Ordinal44,'Ordinal44',\
    _exp_Ordinal45,'Ordinal45',\
    _exp_Ordinal46,'Ordinal46',\
    _exp_DrawThemeBackgroundEx,'DrawThemeBackgroundEx',\
    _exp_Ordinal48,'Ordinal48',\
    _exp_Ordinal49,'Ordinal49',\
    _exp_Ordinal50,'Ordinal50',\
    _exp_BufferedPaintStopAllAnimations,'BufferedPaintStopAllAnimations',\
    _exp_BufferedPaintUnInit,'BufferedPaintUnInit',\
    _exp_CloseThemeData,'CloseThemeData',\
    _exp_DllCanUnloadNow,'DllCanUnloadNow',\
    _exp_DllGetActivationFactory,'DllGetActivationFactory',\
    _exp_DllGetClassObject,'DllGetClassObject',\
    _exp_DrawThemeBackground,'DrawThemeBackground',\
    _exp_DrawThemeEdge,'DrawThemeEdge',\
    _exp_DrawThemeIcon,'DrawThemeIcon',\
    _exp_Ordinal60,'Ordinal60',\
    _exp_OpenThemeDataEx,'OpenThemeDataEx',\
    _exp_Ordinal62,'Ordinal62',\
    _exp_Ordinal63,'Ordinal63',\
    _exp_Ordinal64,'Ordinal64',\
    _exp_Ordinal65,'Ordinal65',\
    _exp_Ordinal66,'Ordinal66',\
    _exp_Ordinal67,'Ordinal67',\
    _exp_Ordinal68,'Ordinal68',\
    _exp_Ordinal69,'Ordinal69',\
    _exp_DrawThemeParentBackground,'DrawThemeParentBackground',\
    _exp_DrawThemeParentBackgroundEx,'DrawThemeParentBackgroundEx',\
    _exp_Ordinal72,'Ordinal72',\
    _exp_Ordinal73,'Ordinal73',\
    _exp_Ordinal74,'Ordinal74',\
    _exp_Ordinal75,'Ordinal75',\
    _exp_Ordinal76,'Ordinal76',\
    _exp_Ordinal77,'Ordinal77',\
    _exp_Ordinal78,'Ordinal78',\
    _exp_Ordinal79,'Ordinal79',\
    _exp_Ordinal80,'Ordinal80',\
    _exp_Ordinal81,'Ordinal81',\
    _exp_Ordinal82,'Ordinal82',\
    _exp_Ordinal83,'Ordinal83',\
    _exp_Ordinal84,'Ordinal84',\
    _exp_Ordinal85,'Ordinal85',\
    _exp_Ordinal86,'Ordinal86',\
    _exp_Ordinal87,'Ordinal87',\
    _exp_Ordinal88,'Ordinal88',\
    _exp_DrawThemeText,'DrawThemeText',\
    _exp_Ordinal90,'Ordinal90',\
    _exp_Ordinal91,'Ordinal91',\
    _exp_Ordinal92,'Ordinal92',\
    _exp_Ordinal93,'Ordinal93',\
    _exp_Ordinal94,'Ordinal94',\
    _exp_GetImmersiveColorFromColorSetEx,'GetImmersiveColorFromColorSetEx',\
    _exp_Ordinal96,'Ordinal96',\
    _exp_Ordinal97,'Ordinal97',\
    _exp_GetImmersiveUserColorSetPreference,'GetImmersiveUserColorSetPreference',\
    _exp_Ordinal99,'Ordinal99',\
    _exp_Ordinal100,'Ordinal100',\
    _exp_Ordinal101,'Ordinal101',\
    _exp_Ordinal102,'Ordinal102',\
    _exp_DrawThemeTextEx,'DrawThemeTextEx',\
    _exp_Ordinal104,'Ordinal104',\
    _exp_Ordinal105,'Ordinal105',\
    _exp_Ordinal106,'Ordinal106',\
    _exp_Ordinal107,'Ordinal107',\
    _exp_Ordinal108,'Ordinal108',\
    _exp_Ordinal109,'Ordinal109',\
    _exp_Ordinal110,'Ordinal110',\
    _exp_Ordinal111,'Ordinal111',\
    _exp_Ordinal112,'Ordinal112',\
    _exp_Ordinal113,'Ordinal113',\
    _exp_EnableThemeDialogTexture,'EnableThemeDialogTexture',\
    _exp_Ordinal115,'Ordinal115',\
    _exp_Ordinal116,'Ordinal116',\
    _exp_Ordinal117,'Ordinal117',\
    _exp_Ordinal118,'Ordinal118',\
    _exp_Ordinal119,'Ordinal119',\
    _exp_GetUserColorPreference,'GetUserColorPreference',\
    _exp_GetColorFromPreference,'GetColorFromPreference',\
    _exp_Ordinal122,'Ordinal122',\
    _exp_Ordinal123,'Ordinal123',\
    _exp_Ordinal124,'Ordinal124',\
    _exp_Ordinal125,'Ordinal125',\
    _exp_Ordinal126,'Ordinal126',\
    _exp_Ordinal127,'Ordinal127',\
    _exp_Ordinal128,'Ordinal128',\
    _exp_EnableTheming,'EnableTheming',\
    _exp_Ordinal130,'Ordinal130',\
    _exp_Ordinal131,'Ordinal131',\
    _exp_Ordinal132,'Ordinal132',\
    _exp_Ordinal133,'Ordinal133',\
    _exp_EndBufferedAnimation,'EndBufferedAnimation',\
    _exp_Ordinal135,'Ordinal135',\
    _exp_Ordinal136,'Ordinal136',\
    _exp_Ordinal137,'Ordinal137',\
    _exp_Ordinal138,'Ordinal138',\
    _exp_Ordinal139,'Ordinal139',\
    _exp_EndBufferedPaint,'EndBufferedPaint',\
    _exp_GetBufferedPaintBits,'GetBufferedPaintBits',\
    _exp_GetBufferedPaintDC,'GetBufferedPaintDC',\
    _exp_GetBufferedPaintTargetDC,'GetBufferedPaintTargetDC',\
    _exp_GetBufferedPaintTargetRect,'GetBufferedPaintTargetRect',\
    _exp_GetCurrentThemeName,'GetCurrentThemeName',\
    _exp_GetThemeAnimationProperty,'GetThemeAnimationProperty',\
    _exp_GetThemeAnimationTransform,'GetThemeAnimationTransform',\
    _exp_GetThemeAppProperties,'GetThemeAppProperties',\
    _exp_GetThemeBackgroundContentRect,'GetThemeBackgroundContentRect',\
    _exp_GetThemeBackgroundExtent,'GetThemeBackgroundExtent',\
    _exp_GetThemeBackgroundRegion,'GetThemeBackgroundRegion',\
    _exp_GetThemeBitmap,'GetThemeBitmap',\
    _exp_GetThemeBool,'GetThemeBool',\
    _exp_GetThemeColor,'GetThemeColor',\
    _exp_GetThemeDocumentationProperty,'GetThemeDocumentationProperty',\
    _exp_GetThemeEnumValue,'GetThemeEnumValue',\
    _exp_GetThemeFilename,'GetThemeFilename',\
    _exp_GetThemeFont,'GetThemeFont',\
    _exp_GetThemeInt,'GetThemeInt',\
    _exp_GetThemeIntList,'GetThemeIntList',\
    _exp_GetThemeMargins,'GetThemeMargins',\
    _exp_GetThemeMetric,'GetThemeMetric',\
    _exp_GetThemePartSize,'GetThemePartSize',\
    _exp_GetThemePosition,'GetThemePosition',\
    _exp_GetThemePropertyOrigin,'GetThemePropertyOrigin',\
    _exp_GetThemeRect,'GetThemeRect',\
    _exp_GetThemeStream,'GetThemeStream',\
    _exp_GetThemeString,'GetThemeString',\
    _exp_GetThemeSysBool,'GetThemeSysBool',\
    _exp_GetThemeSysColor,'GetThemeSysColor',\
    _exp_GetThemeSysColorBrush,'GetThemeSysColorBrush',\
    _exp_GetThemeSysFont,'GetThemeSysFont',\
    _exp_GetThemeSysInt,'GetThemeSysInt',\
    _exp_GetThemeSysSize,'GetThemeSysSize',\
    _exp_GetThemeSysString,'GetThemeSysString',\
    _exp_GetThemeTextExtent,'GetThemeTextExtent',\
    _exp_GetThemeTextMetrics,'GetThemeTextMetrics',\
    _exp_GetThemeTimingFunction,'GetThemeTimingFunction',\
    _exp_GetThemeTransitionDuration,'GetThemeTransitionDuration',\
    _exp_GetWindowTheme,'GetWindowTheme',\
    _exp_HitTestThemeBackground,'HitTestThemeBackground',\
    _exp_IsAppThemed,'IsAppThemed',\
    _exp_IsCompositionActive,'IsCompositionActive',\
    _exp_IsThemeActive,'IsThemeActive',\
    _exp_IsThemeBackgroundPartiallyTransparent,'IsThemeBackgroundPartiallyTransparent',\
    _exp_IsThemeDialogTextureEnabled,'IsThemeDialogTextureEnabled',\
    _exp_IsThemePartDefined,'IsThemePartDefined',\
    _exp_OpenThemeData,'OpenThemeData',\
    _exp_OpenThemeDataForDpi,'OpenThemeDataForDpi',\
    _exp_SetThemeAppProperties,'SetThemeAppProperties',\
    _exp_SetWindowTheme,'SetWindowTheme',\
    _exp_SetWindowThemeAttribute,'SetWindowThemeAttribute',\
    _exp_ThemeInitApiHook,'ThemeInitApiHook'

    uxtheme.zip

    7.13 KB, 下载次数: 13, 下载积分: 飘云币 -2 枚

    评分

    参与人数 1威望 +1 飘云币 +1 收起 理由
    飞天 + 1 + 1 感谢发布原创作品,PYG有你更精彩!

    查看全部评分

    PYG19周年生日快乐!
  • TA的每日心情
    奋斗
    2025-1-13 09:04
  • 签到天数: 339 天

    [LV.8]以坛为家I

    发表于 昨天 08:47 | 显示全部楼层
    PYG20周年生日快乐!
    PYG19周年生日快乐!
    回复 支持 反对

    使用道具 举报

  • TA的每日心情
    开心
    2025-1-14 16:07
  • 签到天数: 1093 天

    [LV.10]以坛为家III

    发表于 昨天 09:40 | 显示全部楼层
    感谢大佬分享~~
    PYG19周年生日快乐!
    回复 支持 反对

    使用道具 举报

    您需要登录后才可以回帖 登录 | 加入我们

    本版积分规则

    快速回复 返回顶部 返回列表