Wintab32.dll

Description: Wintab Coordinator

Version: 1.0.5.10

Architecture: 32-bit

Operating System: Windows NT

SHA256: c9816aecbe3df62d5ed48c851a26f9ed

File Size: 2.0 MB

Uploaded At: Aug. 25, 2026, 2:43 a.m.

Views: 16

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

WTInfoA (Ordinal: 20, Address: 0x8b48)
WTOpenA (Ordinal: 21, Address: 0x8350)
WTClose (Ordinal: 22, Address: 0x6f37)
WTPacketsGet (Ordinal: 23, Address: 0x8a58)
WTPacket (Ordinal: 24, Address: 0x38d2)
Sync (Ordinal: 25, Address: 0x215d)
WTEnable (Ordinal: 40, Address: 0x3cf6)
WTOverlap (Ordinal: 41, Address: 0x3f5d)
WTConfig (Ordinal: 60, Address: 0x7018)
WTGetA (Ordinal: 61, Address: 0x8c0b)
WTSetA (Ordinal: 62, Address: 0x85df)
WTExtGet (Ordinal: 63, Address: 0x8a9e)
WTExtSet (Ordinal: 64, Address: 0x7b62)
WTSave (Ordinal: 65, Address: 0x8855)
WTRestore (Ordinal: 66, Address: 0x2e4b)
WTPacketsPeek (Ordinal: 80, Address: 0x1ac8)
WTDataGet (Ordinal: 81, Address: 0x2dd3)
WTDataPeek (Ordinal: 82, Address: 0x67f8)
WTQueueSizeGet (Ordinal: 84, Address: 0x4b15)
WTQueueSizeSet (Ordinal: 85, Address: 0x835f)
WTMgrOpen (Ordinal: 100, Address: 0x8b20)
WTMgrClose (Ordinal: 101, Address: 0x6dd4)
WTMgrContextEnum (Ordinal: 120, Address: 0x6e42)
WTMgrContextOwner (Ordinal: 121, Address: 0x7743)
WTMgrDefContext (Ordinal: 122, Address: 0x734c)
WTMgrDeviceConfig (Ordinal: 140, Address: 0x8143)
WTMgrExt (Ordinal: 180, Address: 0x424b)
WTMgrCsrEnable (Ordinal: 181, Address: 0x35cb)
WTMgrCsrButtonMap (Ordinal: 182, Address: 0x1339)
WTMgrCsrPressureBtnMarks (Ordinal: 183, Address: 0x9458)
WTMgrCsrPressureResponse (Ordinal: 184, Address: 0x86f2)
WTMgrCsrExt (Ordinal: 185, Address: 0x5be6)
WTQueuePacketsEx (Ordinal: 200, Address: 0x5d3f)
WTMgrCsrPressureBtnMarksEx (Ordinal: 201, Address: 0x895e)
WTMgrConfigReplaceExA (Ordinal: 202, Address: 0x5303)
WTMgrPacketHookExA (Ordinal: 203, Address: 0x2923)
WTMgrPacketUnhook (Ordinal: 204, Address: 0x2b7b)
WTMgrPacketHookNext (Ordinal: 205, Address: 0x48f4)
WTMgrDefContextEx (Ordinal: 206, Address: 0x129e)
WacEventPacket (Ordinal: 598, Address: 0x6113)
WacEvent (Ordinal: 599, Address: 0x2b94)
WacEventEx (Ordinal: 600, Address: 0x3715)
WacomGetOEMNumber (Ordinal: 601, Address: 0x567d)
WacomDoSpecialContextHandling (Ordinal: 602, Address: 0x8134)
WacomTabletOnOff (Ordinal: 603, Address: 0x7e87)
WacomExtHook (Ordinal: 604, Address: 0x6280)
WacomVersion (Ordinal: 605, Address: 0x5c45)
WacomDoSpecialMouseData (Ordinal: 606, Address: 0x64e2)
WacomCleanup (Ordinal: 607, Address: 0x72fc)
WTInfoW (Ordinal: 1020, Address: 0x8369)
WTOpenW (Ordinal: 1021, Address: 0x2f7c)
WTGetW (Ordinal: 1061, Address: 0x6839)
WTSetW (Ordinal: 1062, Address: 0x8364)
WTMgrConfigReplaceExW (Ordinal: 1202, Address: 0x4c91)
WTMgrPacketHookExW (Ordinal: 1203, Address: 0x3927)

Imported DLLs & Functions

ADVAPI32.dll

AllocateAndInitializeSid (Address: 0x101ee070)
ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x101ee000)
DeregisterEventSource (Address: 0x101ee044)
DuplicateTokenEx (Address: 0x101ee06c)
EqualSid (Address: 0x101ee068)
FreeSid (Address: 0x101ee064)
GetSecurityDescriptorSacl (Address: 0x101ee060)
GetTokenInformation (Address: 0x101ee05c)
ImpersonateLoggedOnUser (Address: 0x101ee058)
InitializeSecurityDescriptor (Address: 0x101ee054)
LookupAccountSidW (Address: 0x101ee038)
OpenProcessToken (Address: 0x101ee074)
RegCloseKey (Address: 0x101ee034)
RegCreateKeyExW (Address: 0x101ee02c)
RegDeleteKeyW (Address: 0x101ee028)
RegDeleteValueW (Address: 0x101ee024)
RegEnumKeyExW (Address: 0x101ee020)
RegEnumValueW (Address: 0x101ee01c)
RegisterEventSourceW (Address: 0x101ee040)
RegOpenCurrentUser (Address: 0x101ee030)
RegOpenKeyExW (Address: 0x101ee018)
RegQueryInfoKeyW (Address: 0x101ee014)
RegQueryValueExW (Address: 0x101ee010)
RegSetValueExW (Address: 0x101ee00c)
ReportEventA (Address: 0x101ee03c)
RevertToSelf (Address: 0x101ee050)
SetEntriesInAclW (Address: 0x101ee008)
SetSecurityDescriptorDacl (Address: 0x101ee04c)
SetSecurityInfo (Address: 0x101ee004)
SetTokenInformation (Address: 0x101ee048)

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x101ee2d0)
AcquireSRWLockShared (Address: 0x101ee2cc)
CloseHandle (Address: 0x101ee140)
CompareStringEx (Address: 0x101ee320)
CompareStringW (Address: 0x101ee27c)
CopyFileW (Address: 0x101ee20c)
CreateDirectoryW (Address: 0x101ee164)
CreateEventW (Address: 0x101ee330)
CreateFileW (Address: 0x101ee138)
CreateMutexW (Address: 0x101ee1b0)
CreateSemaphoreExW (Address: 0x101ee1c4)
CreateThread (Address: 0x101ee1d0)
CreateToolhelp32Snapshot (Address: 0x101ee220)
DecodePointer (Address: 0x101ee0f0)
DeleteCriticalSection (Address: 0x101ee0c0)
DeleteFileW (Address: 0x101ee168)
DuplicateHandle (Address: 0x101ee190)
EncodePointer (Address: 0x101ee304)
EnterCriticalSection (Address: 0x101ee2bc)
EnumSystemLocalesW (Address: 0x101ee26c)
ExitProcess (Address: 0x101ee294)
ExpandEnvironmentStringsW (Address: 0x101ee15c)
FileTimeToSystemTime (Address: 0x101ee214)
FindClose (Address: 0x101ee16c)
FindFirstFileExW (Address: 0x101ee24c)
FindFirstFileW (Address: 0x101ee170)
FindNextFileW (Address: 0x101ee174)
FindResourceA (Address: 0x101ee128)
FindResourceExA (Address: 0x101ee12c)
FindResourceW (Address: 0x101ee120)
FlushFileBuffers (Address: 0x101ee238)
FormatMessageA (Address: 0x101ee338)
FormatMessageW (Address: 0x101ee200)
FreeEnvironmentStringsW (Address: 0x101ee310)
FreeLibrary (Address: 0x101ee0c8)
FreeResource (Address: 0x101ee110)
GetACP (Address: 0x101ee2f4)
GetCommandLineA (Address: 0x101ee2fc)
GetCommandLineW (Address: 0x101ee300)
GetConsoleMode (Address: 0x101ee264)
GetConsoleOutputCP (Address: 0x101ee268)
GetCPInfo (Address: 0x101ee324)
GetCurrentDirectoryW (Address: 0x101ee160)
GetCurrentProcess (Address: 0x101ee0d8)
GetCurrentProcessId (Address: 0x101ee2ec)
GetCurrentThread (Address: 0x101ee1d4)
GetCurrentThreadId (Address: 0x101ee2e8)
GetDateFormatW (Address: 0x101ee284)
GetEnvironmentStringsW (Address: 0x101ee30c)
GetExitCodeProcess (Address: 0x101ee1cc)
GetExitCodeThread (Address: 0x101ee1e0)
GetFileAttributesW (Address: 0x101ee178)
GetFileSizeEx (Address: 0x101ee17c)
GetFileType (Address: 0x101ee288)
GetLastError (Address: 0x101ee2e0)
GetLocaleInfoEx (Address: 0x101ee244)
GetLocaleInfoW (Address: 0x101ee274)
GetLocalTime (Address: 0x101ee2e4)
GetModuleFileNameW (Address: 0x101ee1f8)
GetModuleHandleExW (Address: 0x101ee290)
GetModuleHandleW (Address: 0x101ee0cc)
GetNamedPipeInfo (Address: 0x101ee154)
GetOEMCP (Address: 0x101ee2f8)
GetOverlappedResult (Address: 0x101ee158)
GetProcAddress (Address: 0x101ee0d0)
GetProcessHeap (Address: 0x101ee108)
GetProcessId (Address: 0x101ee1e8)
GetShortPathNameW (Address: 0x101ee180)
GetStartupInfoW (Address: 0x101ee358)
GetStdHandle (Address: 0x101ee28c)
GetStringTypeW (Address: 0x101ee25c)
GetSystemDefaultLCID (Address: 0x101ee0e8)
GetSystemDirectoryW (Address: 0x101ee1f0)
GetSystemInfo (Address: 0x101ee0dc)
GetSystemTimeAsFileTime (Address: 0x101ee2b8)
GetTempPathW (Address: 0x101ee18c)
GetTimeFormatW (Address: 0x101ee280)
GetTimeZoneInformation (Address: 0x101ee250)
GetUserDefaultLCID (Address: 0x101ee0ec)
GetUserDefaultUILanguage (Address: 0x101ee0e4)
GetWindowsDirectoryW (Address: 0x101ee1f4)
GlobalAlloc (Address: 0x101ee124)
HeapAlloc (Address: 0x101ee0f8)
HeapDestroy (Address: 0x101ee0f4)
HeapFree (Address: 0x101ee100)
HeapReAlloc (Address: 0x101ee0fc)
HeapSize (Address: 0x101ee104)
InitializeCriticalSection (Address: 0x101ee2c0)
InitializeCriticalSectionAndSpinCount (Address: 0x101ee2ac)
InitializeCriticalSectionEx (Address: 0x101ee10c)
InitializeSListHead (Address: 0x101ee340)
InitializeSRWLock (Address: 0x101ee2dc)
InterlockedFlushSList (Address: 0x101ee2b0)
InterlockedPushEntrySList (Address: 0x101ee2b4)
IsDebuggerPresent (Address: 0x101ee328)
IsProcessorFeaturePresent (Address: 0x101ee344)
IsValidCodePage (Address: 0x101ee248)
IsValidLocale (Address: 0x101ee270)
IsWow64Process (Address: 0x101ee0e0)
K32EnumProcesses (Address: 0x101ee22c)
K32EnumProcessModules (Address: 0x101ee230)
K32GetModuleFileNameExW (Address: 0x101ee234)
LCMapStringEx (Address: 0x101ee308)
LCMapStringW (Address: 0x101ee278)
LeaveCriticalSection (Address: 0x101ee1b8)
LoadLibraryExW (Address: 0x101ee298)
LoadLibraryW (Address: 0x101ee0d4)
LoadResource (Address: 0x101ee114)
LocalFree (Address: 0x101ee1fc)
LockResource (Address: 0x101ee118)
lstrlenW (Address: 0x101ee204)
MoveFileExW (Address: 0x101ee210)
MultiByteToWideChar (Address: 0x101ee130)
OpenEventW (Address: 0x101ee1bc)
OpenMutexW (Address: 0x101ee1b4)
OpenProcess (Address: 0x101ee1ec)
OpenSemaphoreW (Address: 0x101ee1c0)
OutputDebugStringA (Address: 0x101ee2f0)
OutputDebugStringW (Address: 0x101ee32c)
PeekNamedPipe (Address: 0x101ee148)
Process32FirstW (Address: 0x101ee224)
Process32NextW (Address: 0x101ee228)
ProcessIdToSessionId (Address: 0x101ee1e4)
QueryFullProcessImageNameW (Address: 0x101ee208)
QueryPerformanceCounter (Address: 0x101ee354)
RaiseException (Address: 0x101ee194)
ReadConsoleW (Address: 0x101ee258)
ReadFile (Address: 0x101ee13c)
ReleaseMutex (Address: 0x101ee1a4)
ReleaseSemaphore (Address: 0x101ee1a0)
ReleaseSRWLockExclusive (Address: 0x101ee2d8)
ReleaseSRWLockShared (Address: 0x101ee2d4)
RemoveDirectoryW (Address: 0x101ee184)
ResetEvent (Address: 0x101ee19c)
SetConsoleCtrlHandler (Address: 0x101ee254)
SetEndOfFile (Address: 0x101ee334)
SetEnvironmentVariableW (Address: 0x101ee314)
SetEvent (Address: 0x101ee198)
SetFileAttributesW (Address: 0x101ee188)
SetFilePointer (Address: 0x101ee23c)
SetFilePointerEx (Address: 0x101ee260)
SetLastError (Address: 0x101ee0c4)
SetNamedPipeHandleState (Address: 0x101ee144)
SetStdHandle (Address: 0x101ee318)
SetThreadPriority (Address: 0x101ee1d8)
SetUnhandledExceptionFilter (Address: 0x101ee34c)
SizeofResource (Address: 0x101ee11c)
Sleep (Address: 0x101ee1c8)
SleepConditionVariableSRW (Address: 0x101ee33c)
SystemTimeToFileTime (Address: 0x101ee218)
TerminateProcess (Address: 0x101ee350)
TerminateThread (Address: 0x101ee1dc)
TlsAlloc (Address: 0x101ee2a8)
TlsFree (Address: 0x101ee29c)
TlsGetValue (Address: 0x101ee2a4)
TlsSetValue (Address: 0x101ee2a0)
TransactNamedPipe (Address: 0x101ee14c)
TryAcquireSRWLockExclusive (Address: 0x101ee2c8)
TryAcquireSRWLockShared (Address: 0x101ee2c4)
TryEnterCriticalSection (Address: 0x101ee0bc)
UnhandledExceptionFilter (Address: 0x101ee348)
WaitForMultipleObjectsEx (Address: 0x101ee1ac)
WaitForSingleObject (Address: 0x101ee1a8)
WaitNamedPipeW (Address: 0x101ee150)
WakeAllConditionVariable (Address: 0x101ee35c)
WideCharToMultiByte (Address: 0x101ee134)
WriteConsoleW (Address: 0x101ee31c)
WriteFile (Address: 0x101ee240)
WTSGetActiveConsoleSessionId (Address: 0x101ee21c)

MPR.dll

WNetGetUniversalNameW (Address: 0x101ee410)

ntdll.dll

NtClose (Address: 0x101ee604)
NtCreateFile (Address: 0x101ee608)
RtlInitUnicodeString (Address: 0x101ee60c)
RtlUnwind (Address: 0x101ee610)

ole32.dll

CoCreateInstance (Address: 0x101ee644)
CoInitializeEx (Address: 0x101ee650)
CoInitializeSecurity (Address: 0x101ee640)
CoSetProxyBlanket (Address: 0x101ee654)
CoTaskMemFree (Address: 0x101ee64c)
CoUninitialize (Address: 0x101ee648)

OLEAUT32.dll

CreateErrorInfo (Address: 0x101ee440)
GetErrorInfo (Address: 0x101ee44c)
SetErrorInfo (Address: 0x101ee45c)
SysAllocString (Address: 0x101ee448)
SysFreeString (Address: 0x101ee444)
VariantChangeType (Address: 0x101ee458)
VariantClear (Address: 0x101ee450)
VariantInit (Address: 0x101ee454)

SHELL32.dll

ShellExecuteExW (Address: 0x101ee4a4)
ShellExecuteW (Address: 0x101ee490)
SHFileOperationW (Address: 0x101ee4a0)
SHGetFolderPathW (Address: 0x101ee498)
SHGetKnownFolderPath (Address: 0x101ee494)
SHGetPropertyStoreForWindow (Address: 0x101ee49c)

SHLWAPI.dll

PathFileExistsW (Address: 0x101ee4e0)
PathIsRootW (Address: 0x101ee4dc)
PathIsUNCW (Address: 0x101ee4e8)
PathRemoveFileSpecW (Address: 0x101ee4d8)
PathStripPathW (Address: 0x101ee4e4)

USER32.dll

CloseDesktop (Address: 0x101ee524)
EnumWindows (Address: 0x101ee550)
FindWindowW (Address: 0x101ee554)
GetClassNameW (Address: 0x101ee54c)
GetCursorPos (Address: 0x101ee56c)
GetDesktopWindow (Address: 0x101ee558)
GetForegroundWindow (Address: 0x101ee578)
GetGUIThreadInfo (Address: 0x101ee53c)
GetProcessWindowStation (Address: 0x101ee52c)
GetThreadDesktop (Address: 0x101ee528)
GetUserObjectInformationW (Address: 0x101ee530)
GetWindowLongW (Address: 0x101ee55c)
GetWindowTextW (Address: 0x101ee570)
GetWindowThreadProcessId (Address: 0x101ee548)
IsIconic (Address: 0x101ee584)
IsWindowEnabled (Address: 0x101ee57c)
IsWindowVisible (Address: 0x101ee588)
LogicalToPhysicalPoint (Address: 0x101ee568)
MonitorFromWindow (Address: 0x101ee540)
MsgWaitForMultipleObjectsEx (Address: 0x101ee580)
PhysicalToLogicalPoint (Address: 0x101ee564)
PostMessageA (Address: 0x101ee534)
PostThreadMessageA (Address: 0x101ee538)
RegisterWindowMessageW (Address: 0x101ee574)
SetForegroundWindow (Address: 0x101ee51c)
SystemParametersInfoA (Address: 0x101ee544)
UnregisterClassA (Address: 0x101ee520)
WindowFromPoint (Address: 0x101ee560)

WTSAPI32.dll

WTSEnumerateSessionsW (Address: 0x101ee5d4)
WTSFreeMemory (Address: 0x101ee5cc)
WTSQueryUserToken (Address: 0x101ee5d0)