shell32.dll

Description: Windows Shell Common Dll

Version: 10.0.26100.8246

Architecture: 64-bit

Operating System: Windows NT

SHA256: 31bfc50a35c706e86fba537665c5e070

File Size: 7.4 MB

Uploaded At: April 24, 2026, 11:57 p.m.

Views: 57

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess, WriteProcessMemory

Exported Functions

SHChangeNotifyRegister (Ordinal: 2, Address: 0x18f070)
SHDefExtractIconA (Ordinal: 3, Address: 0x2000f0)
SHChangeNotifyDeregister (Ordinal: 4, Address: 0x19ad90)
(Ordinal: 5, Address: 0x6ef6c9)
SHDefExtractIconW (Ordinal: 6, Address: 0x200110)
(Ordinal: 7, Address: 0x6ef916)
(Ordinal: 8, Address: 0x6ef924)
PifMgr_OpenProperties (Ordinal: 9, Address: 0x199580)
PifMgr_GetProperties (Ordinal: 10, Address: 0x199580)
PifMgr_SetProperties (Ordinal: 11, Address: 0x199580)
(Ordinal: 12, Address: 0x2d4120)
PifMgr_CloseProperties (Ordinal: 13, Address: 0x204110)
SHStartNetConnectionDialogW (Ordinal: 14, Address: 0x2ca6c0)
(Ordinal: 15, Address: 0x1ff6b0)
ILFindLastID (Ordinal: 16, Address: 0x1ff670)
ILRemoveLastID (Ordinal: 17, Address: 0x1ff790)
ILClone (Ordinal: 18, Address: 0x1ff5b0)
ILCloneFirst (Ordinal: 19, Address: 0x1ff5d0)
(Ordinal: 20, Address: 0x1ff5b0)
ILIsEqual (Ordinal: 21, Address: 0x1ff730)
DAD_DragEnterEx2 (Ordinal: 22, Address: 0x24f1c0)
ILIsParent (Ordinal: 23, Address: 0x1ff750)
ILFindChild (Ordinal: 24, Address: 0x1ff650)
ILCombine (Ordinal: 25, Address: 0x1ff5f0)
(Ordinal: 26, Address: 0x6ef5cb)
ILSaveToStream (Ordinal: 27, Address: 0x1ff7b0)
SHILCreateFromPath (Ordinal: 28, Address: 0x200710)
(Ordinal: 29, Address: 0x1ffa90)
(Ordinal: 30, Address: 0x6eefc1)
(Ordinal: 31, Address: 0x6eeffd)
(Ordinal: 32, Address: 0x6eefa7)
(Ordinal: 33, Address: 0x6ef1b6)
(Ordinal: 34, Address: 0x6ef018)
(Ordinal: 35, Address: 0x1ffb70)
(Ordinal: 36, Address: 0x1ff990)
(Ordinal: 37, Address: 0x6eefe8)
(Ordinal: 38, Address: 0x6ef215)
(Ordinal: 39, Address: 0x6ef0f7)
(Ordinal: 40, Address: 0x6ef0af)
IsLFNDriveA (Ordinal: 41, Address: 0x1ff8d0)
IsLFNDriveW (Ordinal: 42, Address: 0x1ff8b0)
PathIsExe (Ordinal: 43, Address: 0x1ffa70)
(Ordinal: 44, Address: 0x242f00)
(Ordinal: 45, Address: 0x1ff9d0)
(Ordinal: 46, Address: 0x6ef143)
PathMakeUniqueName (Ordinal: 47, Address: 0x1ffb30)
(Ordinal: 48, Address: 0x6ef1f9)
PathQualify (Ordinal: 49, Address: 0x1ffb50)
(Ordinal: 50, Address: 0x6ef22c)
PathResolve (Ordinal: 51, Address: 0x1ffb90)
(Ordinal: 52, Address: 0x6ef04a)
(Ordinal: 53, Address: 0x6ef602)
(Ordinal: 54, Address: 0x24fc20)
(Ordinal: 55, Address: 0x6ef185)
(Ordinal: 56, Address: 0x6ef245)
(Ordinal: 57, Address: 0x6ef05f)
(Ordinal: 58, Address: 0x1ff970)
RestartDialog (Ordinal: 59, Address: 0x24fc40)
(Ordinal: 60, Address: 0x24fbc0)
(Ordinal: 61, Address: 0x2865b0)
PickIconDlg (Ordinal: 62, Address: 0x203290)
GetFileNameFromBrowse (Ordinal: 63, Address: 0x286560)
DriveType (Ordinal: 64, Address: 0x1f2270)
(Ordinal: 65, Address: 0x1ff830)
IsNetDrive (Ordinal: 66, Address: 0x262010)
Shell_MergeMenus (Ordinal: 67, Address: 0x200c90)
SHGetSetSettings (Ordinal: 68, Address: 0x200630)
(Ordinal: 69, Address: 0x2004b0)
(Ordinal: 70, Address: 0x2026a0)
Shell_GetImageLists (Ordinal: 71, Address: 0x200c70)
Shell_GetCachedImageIndex (Ordinal: 72, Address: 0x200c10)
SHShellFolderView_Message (Ordinal: 73, Address: 0x2c8b80)
SHCreateStdEnumFmtEtc (Ordinal: 74, Address: 0x2000b0)
PathYetAnotherMakeUniqueName (Ordinal: 75, Address: 0x1ffbd0)
(Ordinal: 76, Address: 0x1ff390)
SHMapPIDLToSystemImageListIndex (Ordinal: 77, Address: 0x200830)
(Ordinal: 78, Address: 0x6ef644)
(Ordinal: 79, Address: 0x6efa17)
SHOpenPropSheetW (Ordinal: 80, Address: 0x2d3500)
OpenAs_RunDLL (Ordinal: 81, Address: 0x19be40)
(Ordinal: 82, Address: 0x6ef392)
CIDLData_CreateFromIDArray (Ordinal: 83, Address: 0x576a90)
(Ordinal: 84, Address: 0x6ef8c5)
OpenRegStream (Ordinal: 85, Address: 0x1ff950)
(Ordinal: 86, Address: 0x6ef991)
(Ordinal: 87, Address: 0x6ef99e)
SHDoDragDrop (Ordinal: 88, Address: 0x24f3d0)
SHCloneSpecialIDList (Ordinal: 89, Address: 0x1ffd10)
SHFindFiles (Ordinal: 90, Address: 0x2001f0)
(Ordinal: 91, Address: 0x2001d0)
PathGetShortPath (Ordinal: 92, Address: 0x1ffa30)
(Ordinal: 93, Address: 0x6f1c62)
(Ordinal: 94, Address: 0x200d30)
(Ordinal: 95, Address: 0x2007b0)
(Ordinal: 96, Address: 0x6ef9fd)
(Ordinal: 97, Address: 0x199580)
SHGetRealIDL (Ordinal: 98, Address: 0x2005f0)
(Ordinal: 99, Address: 0x200ad0)
SHRestricted (Ordinal: 100, Address: 0x200930)
(Ordinal: 101, Address: 0x6ef4ec)
SHCoCreateInstance (Ordinal: 102, Address: 0x6efca7)
SignalFileOpen (Ordinal: 103, Address: 0x14ff90)
(Ordinal: 104, Address: 0x6ef42e)
(Ordinal: 105, Address: 0x6ef47b)
(Ordinal: 106, Address: 0x6ef4a1)
(Ordinal: 107, Address: 0x6ef4ba)
(Ordinal: 108, Address: 0x6ef4d3)
(Ordinal: 109, Address: 0x6ef4f8)
(Ordinal: 110, Address: 0x6ef3ee)
(Ordinal: 111, Address: 0x6ef51e)
(Ordinal: 112, Address: 0x6ef551)
(Ordinal: 113, Address: 0x6ef3fa)
(Ordinal: 114, Address: 0x6ef407)
(Ordinal: 115, Address: 0x6ef3e1)
(Ordinal: 116, Address: 0x6ef56b)
(Ordinal: 117, Address: 0x6ef43a)
(Ordinal: 118, Address: 0x6ef46e)
IsLFNDrive (Ordinal: 119, Address: 0x1ff8b0)
(Ordinal: 120, Address: 0x6ef3c7)
(Ordinal: 121, Address: 0x6ef7fa)
(Ordinal: 122, Address: 0x6ef695)
(Ordinal: 123, Address: 0x6ef814)
(Ordinal: 124, Address: 0x6ef3d4)
OpenAs_RunDLLA (Ordinal: 125, Address: 0x19be40)
(Ordinal: 126, Address: 0x6ef95a)
(Ordinal: 127, Address: 0x6ef9ef)
(Ordinal: 128, Address: 0x80950)
DAD_AutoScroll (Ordinal: 129, Address: 0x1ff230)
(Ordinal: 130, Address: 0x6ef378)
DAD_DragEnterEx (Ordinal: 131, Address: 0x1ff250)
DAD_DragLeave (Ordinal: 132, Address: 0x24f2f0)
OpenAs_RunDLLW (Ordinal: 133, Address: 0x20d1f0)
DAD_DragMove (Ordinal: 134, Address: 0xbb490)
PrepareDiscForBurnRunDllW (Ordinal: 135, Address: 0x211540)
DAD_SetDragImage (Ordinal: 136, Address: 0x1ff270)
DAD_ShowDragImage (Ordinal: 137, Address: 0x1ff290)
PrintersGetCommand_RunDLL (Ordinal: 138, Address: 0x21e8d0)
PrintersGetCommand_RunDLLA (Ordinal: 139, Address: 0x21e8d0)
(Ordinal: 140, Address: 0x6ef447)
(Ordinal: 141, Address: 0x6ef454)
(Ordinal: 142, Address: 0x6ef461)
(Ordinal: 143, Address: 0x6ef494)
(Ordinal: 144, Address: 0x6ef4ad)
(Ordinal: 145, Address: 0x6ef032)
(Ordinal: 146, Address: 0x6ef688)
SHCLSIDFromString (Ordinal: 147, Address: 0x1ffcf0)
(Ordinal: 148, Address: 0x6ef932)
SHFind_InitMenuPopup (Ordinal: 149, Address: 0x2cd1a0)
PrintersGetCommand_RunDLLW (Ordinal: 150, Address: 0x21e9c0)
(Ordinal: 151, Address: 0x6ef8fc)
ILGetSize (Ordinal: 152, Address: 0x1ff710)
ILGetNext (Ordinal: 153, Address: 0x1ff6f0)
ILAppendID (Ordinal: 154, Address: 0x1ff590)
ILFree (Ordinal: 155, Address: 0x1ff690)
(Ordinal: 156, Address: 0x1ff690)
ILCreateFromPath (Ordinal: 157, Address: 0x1ff610)
(Ordinal: 158, Address: 0x6ef65f)
(Ordinal: 159, Address: 0x6ef08c)
(Ordinal: 160, Address: 0x200850)
(Ordinal: 161, Address: 0x6ef9ab)
SHSimpleIDListFromPath (Ordinal: 162, Address: 0x200a10)
(Ordinal: 163, Address: 0x6efa0a)
Win32DeleteFile (Ordinal: 164, Address: 0x200d10)
SHCreateDirectory (Ordinal: 165, Address: 0x1ffdf0)
(Ordinal: 166, Address: 0x6ef30a)
SHAddFromPropSheetExtArray (Ordinal: 167, Address: 0x297d10)
SHCreatePropSheetExtArray (Ordinal: 168, Address: 0x297da0)
SHDestroyPropSheetExtArray (Ordinal: 169, Address: 0x297f90)
SHReplaceFromPropSheetExtArray (Ordinal: 170, Address: 0x297fe0)
PathCleanupSpec (Ordinal: 171, Address: 0x1f8460)
(Ordinal: 172, Address: 0x1fff50)
SHValidateUNC (Ordinal: 173, Address: 0x200ab0)
SHCreateShellFolderViewEx (Ordinal: 174, Address: 0x2c8ae0)
(Ordinal: 175, Address: 0x159c00)
SHSetInstanceExplorer (Ordinal: 176, Address: 0x2621a0)
(Ordinal: 177, Address: 0x6ef385)
SHObjectProperties (Ordinal: 178, Address: 0x21fcf0)
SHGetNewLinkInfoA (Ordinal: 179, Address: 0x2004d0)
SHGetNewLinkInfoW (Ordinal: 180, Address: 0x2004f0)
(Ordinal: 181, Address: 0x290930)
ShellMessageBoxW (Ordinal: 182, Address: 0x6f19ed)
ShellMessageBoxA (Ordinal: 183, Address: 0x6f19c3)
(Ordinal: 184, Address: 0x1ff070)
(Ordinal: 185, Address: 0x6ef89b)
(Ordinal: 186, Address: 0x1ff6d0)
(Ordinal: 187, Address: 0x6ef5bd)
(Ordinal: 188, Address: 0x18a1a0)
ILCreateFromPathA (Ordinal: 189, Address: 0x1ff630)
ILCreateFromPathW (Ordinal: 190, Address: 0x1ff610)
SHUpdateImageA (Ordinal: 191, Address: 0x297ba0)
SHUpdateImageW (Ordinal: 192, Address: 0x297bc0)
SHHandleUpdateImage (Ordinal: 193, Address: 0x1a8a70)
(Ordinal: 194, Address: 0x297db0)
SHFree (Ordinal: 195, Address: 0x200230)
SHAlloc (Ordinal: 196, Address: 0x1ffc30)
(Ordinal: 197, Address: 0x6ef88e)
(Ordinal: 198, Address: 0x6ef6a2)
RealShellExecuteA (Ordinal: 199, Address: 0x1fefb0)
(Ordinal: 200, Address: 0xbe990)
(Ordinal: 201, Address: 0x490050)
(Ordinal: 202, Address: 0x6ef39f)
(Ordinal: 203, Address: 0x1ff050)
(Ordinal: 204, Address: 0x200cb0)
(Ordinal: 205, Address: 0x21f380)
(Ordinal: 206, Address: 0x490040)
RealShellExecuteExA (Ordinal: 207, Address: 0x1fefd0)
RealShellExecuteExW (Ordinal: 208, Address: 0x1feff0)
(Ordinal: 209, Address: 0x1ff7d0)
(Ordinal: 210, Address: 0x1ff910)
(Ordinal: 211, Address: 0x21f5a0)
(Ordinal: 212, Address: 0x21f220)
(Ordinal: 213, Address: 0x21f5c0)
(Ordinal: 214, Address: 0x21f6f0)
(Ordinal: 215, Address: 0x2ca6c0)
(Ordinal: 216, Address: 0x6ef537)
(Ordinal: 217, Address: 0x6ef55e)
(Ordinal: 218, Address: 0x6ef504)
(Ordinal: 219, Address: 0x6ef511)
(Ordinal: 220, Address: 0x6ef4c6)
(Ordinal: 221, Address: 0x6ef487)
(Ordinal: 222, Address: 0x6ef4df)
(Ordinal: 223, Address: 0x6ef544)
(Ordinal: 224, Address: 0x6ef421)
(Ordinal: 225, Address: 0x6ef52a)
RealShellExecuteW (Ordinal: 226, Address: 0x1ff010)
(Ordinal: 227, Address: 0x6ef414)
SHHelpShortcuts_RunDLL (Ordinal: 228, Address: 0x21fac0)
SHHelpShortcuts_RunDLLA (Ordinal: 229, Address: 0x21fac0)
(Ordinal: 230, Address: 0x6ef578)
SHSetFolderPathA (Ordinal: 231, Address: 0x262160)
SHSetFolderPathW (Ordinal: 232, Address: 0x262180)
(Ordinal: 233, Address: 0x6ef873)
(Ordinal: 234, Address: 0x6ef9c7)
(Ordinal: 235, Address: 0x6ef93f)
(Ordinal: 236, Address: 0x200a70)
(Ordinal: 237, Address: 0x2009f0)
SHHelpShortcuts_RunDLLW (Ordinal: 238, Address: 0x21fb70)
PathIsSlowW (Ordinal: 239, Address: 0x1ffad0)
PathIsSlowA (Ordinal: 240, Address: 0x1ffab0)
(Ordinal: 241, Address: 0x2006f0)
(Ordinal: 242, Address: 0x6ef84b)
(Ordinal: 243, Address: 0x6ef9b9)
(Ordinal: 244, Address: 0x2009d0)
SHTestTokenMembership (Ordinal: 245, Address: 0x200a50)
(Ordinal: 246, Address: 0x6ef8b7)
(Ordinal: 247, Address: 0x6ef821)
(Ordinal: 248, Address: 0x6ef880)
(Ordinal: 249, Address: 0x6ef15a)
(Ordinal: 250, Address: 0x6ef1d0)
(Ordinal: 251, Address: 0x6ef19e)
(Ordinal: 252, Address: 0x6ef10a)
(Ordinal: 253, Address: 0x6ef8d2)
(Ordinal: 254, Address: 0x24fba0)
AppCompat_RunDLLW (Ordinal: 255, Address: 0x226310)
SHCreateShellFolderView (Ordinal: 256, Address: 0xc34c0)
(Ordinal: 257, Address: 0x199580)
(Ordinal: 258, Address: 0x28e990)
(Ordinal: 259, Address: 0x18c270)
(Ordinal: 260, Address: 0x1ff1b0)
(Ordinal: 261, Address: 0x2cddc0)
(Ordinal: 262, Address: 0x2ce110)
AssocCreateForClasses (Ordinal: 263, Address: 0x1f8050)
(Ordinal: 264, Address: 0x1ff1d0)
(Ordinal: 265, Address: 0x200b10)
(Ordinal: 266, Address: 0x200b30)
AssocElemCreateForKey (Ordinal: 267, Address: 0x1ff0d0)
AssocGetDetailsOfPropKey (Ordinal: 268, Address: 0x1f80f0)
CallFileCopyHook (Ordinal: 269, Address: 0x233070)
(Ordinal: 270, Address: 0x200910)
(Ordinal: 271, Address: 0x2d41c0)
CheckEscapesW (Ordinal: 272, Address: 0x1ff130)
CommandLineToArgvW (Ordinal: 273, Address: 0x15a500)
Control_RunDLL (Ordinal: 274, Address: 0x242e50)
Control_RunDLLA (Ordinal: 275, Address: 0x242e50)
Control_RunDLLAsUserW (Ordinal: 276, Address: 0x242ed0)
Control_RunDLLW (Ordinal: 277, Address: 0x242f30)
DllCanUnloadNow (Ordinal: 278, Address: 0x1171a0)
DllGetActivationFactory (Ordinal: 279, Address: 0x2505a0)
DllGetClassObject (Ordinal: 280, Address: 0x80950)
DllGetVersion (Ordinal: 281, Address: 0x25a900)
DllInstall (Ordinal: 282, Address: 0x25a9d0)
DllRegisterServer (Ordinal: 283, Address: 0x199580)
DllUnregisterServer (Ordinal: 284, Address: 0x199580)
DoEnvironmentSubstA (Ordinal: 285, Address: 0x1ff2b0)
DoEnvironmentSubstW (Ordinal: 286, Address: 0x1ff2d0)
DragAcceptFiles (Ordinal: 287, Address: 0x1ff2f0)
DragFinish (Ordinal: 288, Address: 0x1ff310)
DragQueryFile (Ordinal: 289, Address: 0x1ff330)
DragQueryFileA (Ordinal: 290, Address: 0x1ff330)
DragQueryFileAorW (Ordinal: 291, Address: 0x1ff350)
DragQueryFileW (Ordinal: 292, Address: 0x1ff370)
DragQueryPoint (Ordinal: 293, Address: 0x1ff3b0)
DuplicateIcon (Ordinal: 294, Address: 0x1ff3d0)
ExtractAssociatedIconA (Ordinal: 295, Address: 0x1ff3f0)
ExtractAssociatedIconExA (Ordinal: 296, Address: 0x1ff410)
ExtractAssociatedIconExW (Ordinal: 297, Address: 0x1ff430)
ExtractAssociatedIconW (Ordinal: 298, Address: 0x1ff450)
ExtractIconA (Ordinal: 299, Address: 0x1ff470)
ExtractIconEx (Ordinal: 300, Address: 0x1ff490)
ExtractIconExA (Ordinal: 301, Address: 0x1ff490)
ExtractIconExW (Ordinal: 302, Address: 0x1ff4b0)
ExtractIconW (Ordinal: 303, Address: 0x1ff4d0)
FindExecutableA (Ordinal: 304, Address: 0x1ff510)
FindExecutableW (Ordinal: 305, Address: 0x1ff530)
FreeIconList (Ordinal: 306, Address: 0x1ff550)
GetCurrentProcessExplicitAppUserModelID (Ordinal: 307, Address: 0x1a8aa0)
InitNetworkAddressControl (Ordinal: 308, Address: 0x19fa40)
InternalExtractIconListA (Ordinal: 309, Address: 0x1ff7f0)
InternalExtractIconListW (Ordinal: 310, Address: 0x1ff810)
LaunchMSHelp_RunDLLW (Ordinal: 311, Address: 0x2085a0)
Options_RunDLL (Ordinal: 312, Address: 0x4953e0)
Options_RunDLLA (Ordinal: 313, Address: 0x4953e0)
Options_RunDLLW (Ordinal: 314, Address: 0x495440)
RegenerateUserEnvironment (Ordinal: 315, Address: 0x205580)
RunAsNewUser_RunDLLW (Ordinal: 316, Address: 0x2099b0)
SHAddDefaultPropertiesByExt (Ordinal: 317, Address: 0x1ffc10)
SHAddToRecentDocs (Ordinal: 318, Address: 0x1a8a50)
SHAppBarMessage (Ordinal: 319, Address: 0x68bf0)
SHAssocEnumHandlers (Ordinal: 320, Address: 0x1f8110)
SHAssocEnumHandlersForProtocolByApplication (Ordinal: 321, Address: 0x1f81b0)
SHBindToFolderIDListParent (Ordinal: 322, Address: 0x1ffc70)
SHBindToFolderIDListParentEx (Ordinal: 323, Address: 0x1ffc90)
SHBindToObject (Ordinal: 324, Address: 0x1ffcb0)
SHBindToParent (Ordinal: 325, Address: 0x1ffcd0)
SHBrowseForFolder (Ordinal: 326, Address: 0x29ca30)
SHBrowseForFolderA (Ordinal: 327, Address: 0x29ca30)
SHBrowseForFolderW (Ordinal: 328, Address: 0x29cd70)
SHChangeNotify (Ordinal: 329, Address: 0x159260)
SHChangeNotifyRegisterThread (Ordinal: 330, Address: 0x1a56a0)
SHChangeNotifySuspendResume (Ordinal: 331, Address: 0x297b80)
SHCoCreateInstanceWorker (Ordinal: 332, Address: 0x6efcf4)
SHCreateAssociationRegistration (Ordinal: 333, Address: 0x1ffd50)
SHCreateCategoryEnum (Ordinal: 334, Address: 0x29f200)
SHCreateDataObject (Ordinal: 335, Address: 0x1ffd70)
SHCreateDefaultContextMenu (Ordinal: 336, Address: 0x10550)
SHCreateDefaultExtractIcon (Ordinal: 337, Address: 0x1ffd90)
SHCreateDefaultPropertiesOp (Ordinal: 338, Address: 0x1ffdb0)
SHCreateDirectoryExA (Ordinal: 339, Address: 0x1ffe10)
SHCreateDirectoryExW (Ordinal: 340, Address: 0x1ffe30)
SHCreateDrvExtIcon (Ordinal: 341, Address: 0x1234e0)
SHCreateItemFromIDList (Ordinal: 342, Address: 0x1ffeb0)
SHCreateItemFromParsingName (Ordinal: 343, Address: 0x1ffed0)
SHCreateItemFromRelativeName (Ordinal: 344, Address: 0x1ffef0)
SHCreateItemInKnownFolder (Ordinal: 345, Address: 0x1fff10)
SHCreateItemWithParent (Ordinal: 346, Address: 0x1fff30)
SHCreateLocalServerRunDll (Ordinal: 347, Address: 0x1996b0)
SHCreateProcessAsUserW (Ordinal: 348, Address: 0x1fffb0)
SHCreateQueryCancelAutoPlayMoniker (Ordinal: 349, Address: 0x2c8300)
SHCreateShellItem (Ordinal: 350, Address: 0x200050)
SHCreateShellItemArray (Ordinal: 351, Address: 0x195880)
SHCreateShellItemArrayFromDataObject (Ordinal: 352, Address: 0x198220)
SHCreateShellItemArrayFromIDLists (Ordinal: 353, Address: 0x200070)
SHCreateShellItemArrayFromShellItem (Ordinal: 354, Address: 0x200090)
SHELL32_AddToBackIconTable (Ordinal: 355, Address: 0x649f0)
SHELL32_AddToFrontIconTable (Ordinal: 356, Address: 0x1a0e20)
SHELL32_AreAllItemsAvailable (Ordinal: 357, Address: 0x18a580)
SHELL32_CCommonPlacesFolder_CreateInstance (Ordinal: 358, Address: 0x2c9e20)
SHELL32_CDBurn_CloseSession (Ordinal: 359, Address: 0x2c9e30)
SHELL32_CDBurn_DriveSupportedForDataBurn (Ordinal: 360, Address: 0x2c9e40)
SHELL32_CDBurn_Erase (Ordinal: 361, Address: 0x2c9e50)
SHELL32_CDBurn_GetCDInfo (Ordinal: 362, Address: 0x1a8b10)
SHELL32_CDBurn_GetLiveFSDiscInfo (Ordinal: 363, Address: 0x1e0e10)
SHELL32_CDBurn_GetStagingPathOrNormalPath (Ordinal: 364, Address: 0x1a1580)
SHELL32_CDBurn_GetTaskInfo (Ordinal: 365, Address: 0x2c9e60)
SHELL32_CDBurn_IsBlankDisc (Ordinal: 366, Address: 0x2c9e70)
SHELL32_CDBurn_IsBlankDisc2 (Ordinal: 367, Address: 0x2c9e80)
SHELL32_CDBurn_IsLiveFS (Ordinal: 368, Address: 0x2c9ee0)
SHELL32_CDBurn_OnDeviceChange (Ordinal: 369, Address: 0x2c9ef0)
SHELL32_CDBurn_OnEject (Ordinal: 370, Address: 0x2c9f00)
SHELL32_CDBurn_OnMediaChange (Ordinal: 371, Address: 0x2c9f80)
SHELL32_CDefFolderMenu_Create2 (Ordinal: 372, Address: 0x2c9f90)
SHELL32_CDefFolderMenu_Create2Ex (Ordinal: 373, Address: 0x17fa70)
SHELL32_CDefFolderMenu_MergeMenu (Ordinal: 374, Address: 0x1e0ee0)
SHELL32_CDrivesContextMenu_Create (Ordinal: 375, Address: 0x2c9ff0)
SHELL32_CDrivesDropTarget_Create (Ordinal: 376, Address: 0x1a4630)
SHELL32_CDrives_CreateSFVCB (Ordinal: 377, Address: 0x2ca000)
SHELL32_CFSDropTarget_CreateInstance (Ordinal: 378, Address: 0x197960)
SHELL32_CFSFolderCallback_Create (Ordinal: 379, Address: 0x1a55a0)
SHELL32_CFillPropertiesTask_CreateInstance (Ordinal: 380, Address: 0x269ea0)
SHELL32_CLibraryDropTarget_CreateInstance (Ordinal: 381, Address: 0x2ca060)
SHELL32_CLocationContextMenu_Create (Ordinal: 382, Address: 0x1f14f0)
SHELL32_CLocationFolderUI_CreateInstance (Ordinal: 383, Address: 0x2ca070)
SHELL32_CMountPoint_DoAutorun (Ordinal: 384, Address: 0x2ca080)
SHELL32_CMountPoint_DoAutorunPrompt (Ordinal: 385, Address: 0x2ca090)
SHELL32_CMountPoint_IsAutoRunDriveAndEnabledByPolicy (Ordinal: 386, Address: 0x1a8a00)
SHELL32_CMountPoint_ProcessAutoRunFile (Ordinal: 387, Address: 0x2ca0c0)
SHELL32_CMountPoint_WantAutorunUI (Ordinal: 388, Address: 0x2ca0d0)
SHELL32_CMountPoint_WantAutorunUIGetReady (Ordinal: 389, Address: 0x2ca0e0)
SHELL32_CNetFolderUI_CreateInstance (Ordinal: 390, Address: 0x5a980)
SHELL32_CPL_CategoryIdArrayFromVariant (Ordinal: 391, Address: 0x1e0e00)
SHELL32_CPL_IsLegacyCanonicalNameListedUnderKey (Ordinal: 392, Address: 0x2ca140)
SHELL32_CPL_ModifyWowDisplayName (Ordinal: 393, Address: 0x2ca160)
SHELL32_CRecentDocsContextMenu_CreateInstance (Ordinal: 394, Address: 0x2ca170)
SHELL32_CTransferConfirmation_CreateInstance (Ordinal: 395, Address: 0x2ca180)
SHELL32_CallFileCopyHooks (Ordinal: 396, Address: 0x13db20)
SHELL32_CanDisplayWin8CopyDialog (Ordinal: 397, Address: 0x16c0a0)
SHELL32_CloseAutoplayPrompt (Ordinal: 398, Address: 0x2ca190)
SHELL32_CommandLineFromMsiDescriptor (Ordinal: 399, Address: 0x2ca240)
SHELL32_CopySecondaryTiles (Ordinal: 400, Address: 0x199580)
SHELL32_CreateConfirmationInterrupt (Ordinal: 401, Address: 0x2ca260)
SHELL32_CreateConflictInterrupt (Ordinal: 402, Address: 0x2ca270)
SHELL32_CreateDefaultOperationDataProvider (Ordinal: 403, Address: 0x2ca280)
SHELL32_CreateFileFolderContextMenu (Ordinal: 404, Address: 0x2ca360)
SHELL32_CreateLinkInfoW (Ordinal: 405, Address: 0x177300)
SHELL32_CreateQosRecorder (Ordinal: 406, Address: 0x19f2b0)
SHELL32_CreateSharePointView (Ordinal: 407, Address: 0x2ca370)
SHELL32_Create_IEnumUICommand (Ordinal: 408, Address: 0x2ca380)
SHELL32_DestroyLinkInfo (Ordinal: 409, Address: 0x181ad0)
SHELL32_EncryptDirectory (Ordinal: 410, Address: 0x2ca390)
SHELL32_EncryptedFileKeyInfo (Ordinal: 411, Address: 0x2ca3a0)
SHELL32_EnumCommonTasks (Ordinal: 412, Address: 0x2ca3c0)
SHELL32_FreeEncryptedFileKeyInfo (Ordinal: 413, Address: 0x2ca3d0)
SHELL32_GenerateAppID (Ordinal: 414, Address: 0x2ca3f0)
SHELL32_GetAppIDRoot (Ordinal: 415, Address: 0x2ca400)
SHELL32_GetCommandProviderForFolderType (Ordinal: 416, Address: 0x2ca410)
SHELL32_GetDPIAdjustedLogicalSize (Ordinal: 417, Address: 0x1a8a40)
SHELL32_GetDiskCleanupPath (Ordinal: 418, Address: 0x2ca430)
SHELL32_GetFileNameFromBrowse (Ordinal: 419, Address: 0x2ca440)
SHELL32_GetIconOverlayManager (Ordinal: 420, Address: 0xc8750)
SHELL32_GetLinkInfoData (Ordinal: 421, Address: 0x2ca450)
SHELL32_GetRatingBucket (Ordinal: 422, Address: 0x2ca470)
SHELL32_GetSqmableFileName (Ordinal: 423, Address: 0x2ca4a0)
SHELL32_GetThumbnailAdornerFromFactory (Ordinal: 424, Address: 0x2ca4b0)
SHELL32_GetThumbnailAdornerFromFactory2 (Ordinal: 425, Address: 0xc10a0)
SHELL32_HandleUnrecognizedFileSystem (Ordinal: 426, Address: 0x2ca4c0)
SHELL32_IconCacheCreate (Ordinal: 427, Address: 0x2ca4d0)
SHELL32_IconCacheDestroy (Ordinal: 428, Address: 0x199da0)
SHELL32_IconCacheHandleAssociationChanged (Ordinal: 429, Address: 0x1a8b00)
SHELL32_IconCacheRestore (Ordinal: 430, Address: 0x2ca4e0)
SHELL32_IconCache_AboutToExtractIcons (Ordinal: 431, Address: 0x1954b0)
SHELL32_IconCache_DoneExtractingIcons (Ordinal: 432, Address: 0x18ab80)
SHELL32_IconCache_ExpandEnvAndSearchPath (Ordinal: 433, Address: 0x1226d0)
SHELL32_IconCache_RememberRecentlyExtractedIconsW (Ordinal: 434, Address: 0xf8870)
SHELL32_IconOverlayManagerInit (Ordinal: 435, Address: 0x1658d0)
SHELL32_IsGetKeyboardLayoutPresent (Ordinal: 436, Address: 0x18c270)
SHELL32_IsSystemUpgradeInProgress (Ordinal: 437, Address: 0x132600)
SHELL32_IsValidLinkInfo (Ordinal: 438, Address: 0x117210)
SHELL32_LegacyEnumSpecialTasksByType (Ordinal: 439, Address: 0x2ca4f0)
SHELL32_LegacyEnumTasks (Ordinal: 440, Address: 0x2ca500)
SHELL32_LookupBackIconIndex (Ordinal: 441, Address: 0x316c0)
SHELL32_LookupFrontIconIndex (Ordinal: 442, Address: 0x1796e0)
SHELL32_NormalizeRating (Ordinal: 443, Address: 0x2ca510)
SHELL32_NotifyLinkTrackingServiceOfMove (Ordinal: 444, Address: 0x1a6f00)
SHELL32_PifMgr_CloseProperties (Ordinal: 445, Address: 0x204110)
SHELL32_PifMgr_GetProperties (Ordinal: 446, Address: 0x199580)
SHELL32_PifMgr_OpenProperties (Ordinal: 447, Address: 0x199580)
SHELL32_PifMgr_SetProperties (Ordinal: 448, Address: 0x199580)
SHELL32_Printers_CreateBindInfo (Ordinal: 449, Address: 0x2ca550)
SHELL32_Printjob_GetPidl (Ordinal: 450, Address: 0x2ca560)
SHELL32_PurgeSystemIcon (Ordinal: 451, Address: 0x2ca570)
SHELL32_RefreshOverlayImages (Ordinal: 452, Address: 0x2ca580)
SHELL32_ResolveLinkInfoW (Ordinal: 453, Address: 0x1a8720)
SHELL32_SHAddSparseIcon (Ordinal: 454, Address: 0x19ee20)
SHELL32_SHCreateByValueOperationInterrupt (Ordinal: 455, Address: 0x2ca590)
SHELL32_SHCreateDefaultContextMenu (Ordinal: 456, Address: 0x1952d0)
SHELL32_SHCreateLocalServer (Ordinal: 457, Address: 0x2ca5a0)
SHELL32_SHCreateShellFolderView (Ordinal: 458, Address: 0x1a89f0)
SHELL32_SHDuplicateEncryptionInfoFile (Ordinal: 459, Address: 0x2ca5b0)
SHELL32_SHEncryptFile (Ordinal: 460, Address: 0x2ca5d0)
SHELL32_SHFormatDriveAsync (Ordinal: 461, Address: 0x2ca5e0)
SHELL32_SHGetThreadUndoManager (Ordinal: 462, Address: 0x1f1270)
SHELL32_SHGetUserNameW (Ordinal: 463, Address: 0x2ca5f0)
SHELL32_SHIsVirtualDevice (Ordinal: 464, Address: 0x2ca610)
SHELL32_SHLaunchPropSheet (Ordinal: 465, Address: 0x2ca680)
SHELL32_SHLogILFromFSIL (Ordinal: 466, Address: 0x2ca690)
SHELL32_SHOpenWithDialog (Ordinal: 467, Address: 0x2ca6b0)
SHELL32_SHStartNetConnectionDialogW (Ordinal: 468, Address: 0x2ca6c0)
SHELL32_SHUICommandFromGUID (Ordinal: 469, Address: 0x27d420)
SHELL32_SendToMenu_InvokeTargetedCommand (Ordinal: 470, Address: 0x496390)
SHELL32_SendToMenu_VerifyTargetedCommand (Ordinal: 471, Address: 0xe67a0)
SHELL32_ShowHideIconOnlyOnDesktop (Ordinal: 472, Address: 0x2ca6e0)
SHELL32_SimpleRatingToFilterCondition (Ordinal: 473, Address: 0x2ca6f0)
SHELL32_StampIconForFile (Ordinal: 474, Address: 0x1f1e40)
SHELL32_SuspendUndo (Ordinal: 475, Address: 0x16f380)
SHELL32_TryVirtualDiscImageDriveEject (Ordinal: 476, Address: 0x2ca700)
SHELL32_VerifySaferTrust (Ordinal: 477, Address: 0x19b460)
SHEmptyRecycleBinA (Ordinal: 478, Address: 0x2cab60)
SHEmptyRecycleBinW (Ordinal: 479, Address: 0x2cac00)
SHEnableServiceObject (Ordinal: 480, Address: 0x17a380)
SHEnumerateUnreadMailAccountsW (Ordinal: 481, Address: 0x200130)
SHEvaluateSystemCommandTemplate (Ordinal: 482, Address: 0x200150)
SHExecuteErrorMessageBox (Ordinal: 483, Address: 0x2cc640)
SHExtractIconsW (Ordinal: 484, Address: 0x2001b0)
SHFileOperation (Ordinal: 485, Address: 0x21fff0)
SHFileOperationA (Ordinal: 486, Address: 0x21fff0)
SHFileOperationW (Ordinal: 487, Address: 0x1e0ec0)
SHFormatDrive (Ordinal: 488, Address: 0x226780)
SHFreeNameMappings (Ordinal: 489, Address: 0x220010)
SHGetDataFromIDListA (Ordinal: 490, Address: 0x2002d0)
SHGetDataFromIDListW (Ordinal: 491, Address: 0x2002f0)
SHGetDesktopFolder (Ordinal: 492, Address: 0x188b10)
SHGetDiskFreeSpaceA (Ordinal: 493, Address: 0x200310)
SHGetDiskFreeSpaceExA (Ordinal: 494, Address: 0x200310)
SHGetDiskFreeSpaceExW (Ordinal: 495, Address: 0x200330)
SHGetDriveMedia (Ordinal: 496, Address: 0x2d23a0)
SHGetFileInfo (Ordinal: 497, Address: 0x200350)
SHGetFileInfoA (Ordinal: 498, Address: 0x200350)
SHGetFileInfoW (Ordinal: 499, Address: 0x188110)
SHGetFolderLocation (Ordinal: 500, Address: 0x18dab0)
SHGetFolderPathA (Ordinal: 501, Address: 0x193a20)
SHGetFolderPathAndSubDirA (Ordinal: 502, Address: 0x262080)
SHGetFolderPathAndSubDirW (Ordinal: 503, Address: 0x1f25a0)
SHGetFolderPathEx (Ordinal: 504, Address: 0x1877a0)
SHGetFolderPathW (Ordinal: 505, Address: 0x1522f0)
SHGetIDListFromObject (Ordinal: 506, Address: 0x2003b0)
SHGetIconOverlayIndexA (Ordinal: 507, Address: 0x28e550)
SHGetIconOverlayIndexW (Ordinal: 508, Address: 0xc8620)
SHGetInstanceExplorer (Ordinal: 509, Address: 0x1f2580)
SHGetItemFromDataObject (Ordinal: 510, Address: 0x2003f0)
SHGetItemFromObject (Ordinal: 511, Address: 0x200410)
SHGetKnownFolderIDList (Ordinal: 512, Address: 0x19afb0)
SHGetKnownFolderItem (Ordinal: 513, Address: 0x1ad0c0)
SHGetKnownFolderPath (Ordinal: 514, Address: 0x13b5a0)
SHGetLocalizedName (Ordinal: 515, Address: 0x200430)
SHGetMalloc (Ordinal: 516, Address: 0x200470)
SHGetNameFromIDList (Ordinal: 517, Address: 0x200490)
SHGetNewLinkInfo (Ordinal: 518, Address: 0x2004d0)
SHGetPathFromIDList (Ordinal: 519, Address: 0x200530)
(Ordinal: 520, Address: 0x6ef6af)
(Ordinal: 521, Address: 0x6ef909)
(Ordinal: 522, Address: 0x6ef9d4)
(Ordinal: 523, Address: 0x6ef807)
RealDriveType (Ordinal: 524, Address: 0x1f2270)
(Ordinal: 525, Address: 0x6ef3b9)
SHFlushSFCache (Ordinal: 526, Address: 0x200210)
SHGetPathFromIDListA (Ordinal: 527, Address: 0x200530)
SHGetPathFromIDListEx (Ordinal: 528, Address: 0x200570)
SHGetPathFromIDListW (Ordinal: 529, Address: 0x200590)
SHGetPropertyStoreForWindow (Ordinal: 530, Address: 0x15b80)
SHGetPropertyStoreFromIDList (Ordinal: 531, Address: 0x2005b0)
SHGetPropertyStoreFromParsingName (Ordinal: 532, Address: 0x2005d0)
SHGetSettings (Ordinal: 533, Address: 0x200650)
SHGetSpecialFolderLocation (Ordinal: 534, Address: 0x1963c0)
SHGetSpecialFolderPathA (Ordinal: 535, Address: 0x2620a0)
SHGetSpecialFolderPathW (Ordinal: 536, Address: 0x159c00)
SHGetStockIconInfo (Ordinal: 537, Address: 0x200670)
SHGetTemporaryPropertyForItem (Ordinal: 538, Address: 0x200690)
SHGetUnreadMailCountW (Ordinal: 539, Address: 0x2006d0)
SHInvokePrinterCommandA (Ordinal: 540, Address: 0x21f7d0)
SHInvokePrinterCommandW (Ordinal: 541, Address: 0x21f8c0)
SHIsFileAvailableOffline (Ordinal: 542, Address: 0x200750)
SHLoadInProc (Ordinal: 543, Address: 0x1f14f0)
SHLoadNonloadedIconOverlayIdentifiers (Ordinal: 544, Address: 0x200790)
SHOpenFolderAndSelectItems (Ordinal: 545, Address: 0x262100)
SHOpenOrGetFolderView (Ordinal: 546, Address: 0x2d3b50)
SHOpenWithDialog (Ordinal: 547, Address: 0x20ded0)
SHParseDisplayName (Ordinal: 548, Address: 0x200870)
SHPathPrepareForWriteA (Ordinal: 549, Address: 0x220050)
SHPathPrepareForWriteW (Ordinal: 550, Address: 0x220070)
SHQueryRecycleBinA (Ordinal: 551, Address: 0x200890)
SHQueryRecycleBinW (Ordinal: 552, Address: 0x2008b0)
SHQueryUserNotificationState (Ordinal: 553, Address: 0x1028e0)
SHRemoveLocalizedName (Ordinal: 554, Address: 0x2008f0)
SHResolveLibrary (Ordinal: 555, Address: 0x262140)
SHSetDefaultProperties (Ordinal: 556, Address: 0x200950)
SHSetKnownFolderPath (Ordinal: 557, Address: 0x2621c0)
SHSetLocalizedName (Ordinal: 558, Address: 0x200970)
SHSetTemporaryPropertyForItem (Ordinal: 559, Address: 0x200990)
SHSetUnreadMailCountW (Ordinal: 560, Address: 0x2009b0)
SHShowManageLibraryUI (Ordinal: 561, Address: 0x4e0cf0)
SHUpdateRecycleBinIcon (Ordinal: 562, Address: 0x200a90)
SetCurrentProcessExplicitAppUserModelID (Ordinal: 563, Address: 0x1e0ea0)
SheChangeDirA (Ordinal: 564, Address: 0x204120)
SheChangeDirExW (Ordinal: 565, Address: 0x2041a0)
SheGetDirA (Ordinal: 566, Address: 0x204720)
SheSetCurDrive (Ordinal: 567, Address: 0x204980)
ShellAboutA (Ordinal: 568, Address: 0x2e4b20)
ShellAboutW (Ordinal: 569, Address: 0x2e4c50)
ShellExec_RunDLL (Ordinal: 570, Address: 0x200b50)
ShellExec_RunDLLA (Ordinal: 571, Address: 0x200b50)
ShellExec_RunDLLW (Ordinal: 572, Address: 0x200b70)
ShellExecuteA (Ordinal: 573, Address: 0x200b90)
ShellExecuteEx (Ordinal: 574, Address: 0x200bb0)
ShellExecuteExA (Ordinal: 575, Address: 0x200bb0)
ShellExecuteExW (Ordinal: 576, Address: 0x200bd0)
ShellExecuteW (Ordinal: 577, Address: 0x200bf0)
ShellHookProc (Ordinal: 578, Address: 0x199580)
Shell_GetCachedImageIndexA (Ordinal: 579, Address: 0x200c30)
Shell_GetCachedImageIndexW (Ordinal: 580, Address: 0x200c50)
Shell_NotifyIcon (Ordinal: 581, Address: 0x15b9e0)
Shell_NotifyIconA (Ordinal: 582, Address: 0x15b9e0)
Shell_NotifyIconGetRect (Ordinal: 583, Address: 0x1b1120)
Shell_NotifyIconW (Ordinal: 584, Address: 0x1d9d0)
StateRepoNewMenuCache_EnsureCacheAsync (Ordinal: 585, Address: 0x45fc0)
StateRepoNewMenuCache_RebuildCacheAsync (Ordinal: 586, Address: 0x19f2f0)
StrChrA (Ordinal: 587, Address: 0x1f5c10)
StrChrIA (Ordinal: 588, Address: 0x1f5c20)
StrChrIW (Ordinal: 589, Address: 0x1f5c30)
StrChrW (Ordinal: 590, Address: 0x1f5c40)
StrCmpNA (Ordinal: 591, Address: 0x1f5c50)
StrCmpNIA (Ordinal: 592, Address: 0x1f5c60)
StrCmpNIW (Ordinal: 593, Address: 0x1f5c70)
StrCmpNW (Ordinal: 594, Address: 0x1f5c80)
StrNCmpA (Ordinal: 595, Address: 0x202760)
StrNCmpIA (Ordinal: 596, Address: 0x202830)
StrNCmpIW (Ordinal: 597, Address: 0x202900)
StrNCmpW (Ordinal: 598, Address: 0x2029d0)
StrRChrA (Ordinal: 599, Address: 0x1f5c90)
StrRChrIA (Ordinal: 600, Address: 0x1f5ca0)
StrRChrIW (Ordinal: 601, Address: 0x1f5cb0)
StrRChrW (Ordinal: 602, Address: 0x1f5cc0)
StrRStrA (Ordinal: 603, Address: 0x202ac0)
StrRStrIA (Ordinal: 604, Address: 0x1f5cd0)
StrRStrIW (Ordinal: 605, Address: 0x1f5ce0)
StrRStrW (Ordinal: 606, Address: 0x202ba0)
StrStrA (Ordinal: 607, Address: 0x1f5cf0)
StrStrIA (Ordinal: 608, Address: 0x1f5d00)
StrStrIW (Ordinal: 609, Address: 0x1f5d10)
StrStrW (Ordinal: 610, Address: 0x1f5d20)
UsersLibrariesFolderUI_CreateInstance (Ordinal: 611, Address: 0xca710)
WOWShellExecute (Ordinal: 612, Address: 0x200cf0)
WaitForExplorerRestartW (Ordinal: 613, Address: 0x25ad10)
(Ordinal: 640, Address: 0x6ef637)
(Ordinal: 641, Address: 0x6ef62a)
(Ordinal: 643, Address: 0x6ef6bc)
SHChangeNotification_Lock (Ordinal: 644, Address: 0x1654e0)
SHChangeNotification_Unlock (Ordinal: 645, Address: 0x18bf50)
(Ordinal: 646, Address: 0x6ef6d6)
(Ordinal: 648, Address: 0x6ef9e1)
(Ordinal: 650, Address: 0x6ef0c7)
(Ordinal: 651, Address: 0x1ff930)
WriteCabinetState (Ordinal: 652, Address: 0x200d50)
(Ordinal: 653, Address: 0x6ef67b)
ReadCabinetState (Ordinal: 654, Address: 0x1ffbf0)
(Ordinal: 660, Address: 0x1ff4f0)
IsUserAnAdmin (Ordinal: 680, Address: 0x262030)
(Ordinal: 681, Address: 0x6ef82f)
StgMakeUniqueName (Ordinal: 682, Address: 0x200cd0)
(Ordinal: 683, Address: 0x2d41e0)
(Ordinal: 684, Address: 0x2d41e0)
SHPropStgCreate (Ordinal: 685, Address: 0x171a90)
SHPropStgReadMultiple (Ordinal: 688, Address: 0x1a84c0)
SHPropStgWriteMultiple (Ordinal: 689, Address: 0x262120)
(Ordinal: 690, Address: 0x2620c0)
(Ordinal: 691, Address: 0x6ef7d0)
(Ordinal: 700, Address: 0x6ef2e0)
CDefFolderMenu_Create2 (Ordinal: 701, Address: 0x2326a0)
(Ordinal: 702, Address: 0xe0b0)
(Ordinal: 703, Address: 0x6eed4d)
(Ordinal: 704, Address: 0x6eed5a)
(Ordinal: 707, Address: 0x6ef94d)
(Ordinal: 708, Address: 0x6ef859)
SHGetSetFolderCustomSettings (Ordinal: 709, Address: 0x200610)
(Ordinal: 711, Address: 0x1ff150)
(Ordinal: 712, Address: 0x6ef6e3)
(Ordinal: 713, Address: 0x1ffaf0)
(Ordinal: 714, Address: 0x1ffb10)
(Ordinal: 715, Address: 0x6ef744)
SHMultiFileProperties (Ordinal: 716, Address: 0x2d34e0)
(Ordinal: 719, Address: 0x6ef967)
(Ordinal: 720, Address: 0x6ef610)
(Ordinal: 721, Address: 0x6ef61d)
(Ordinal: 722, Address: 0x6ef728)
(Ordinal: 723, Address: 0x200030)
(Ordinal: 724, Address: 0x6ef8e0)
(Ordinal: 725, Address: 0x6ef586)
(Ordinal: 726, Address: 0x6ef325)
SHGetImageList (Ordinal: 727, Address: 0x2003d0)
RestartDialogEx (Ordinal: 730, Address: 0x24fc50)
(Ordinal: 731, Address: 0x6ef983)
(Ordinal: 732, Address: 0x6ef975)
(Ordinal: 733, Address: 0x23f390)
(Ordinal: 740, Address: 0x1ffe50)
SHCreateFileExtractIconW (Ordinal: 743, Address: 0x1ffe70)
(Ordinal: 744, Address: 0x24df40)
(Ordinal: 745, Address: 0x6ef36a)
SHLimitInputEdit (Ordinal: 747, Address: 0x2d2bf0)
(Ordinal: 748, Address: 0x2d2b90)
(Ordinal: 749, Address: 0x6ef866)
SHGetAttributesFromDataObject (Ordinal: 750, Address: 0x200270)
(Ordinal: 751, Address: 0x200a30)
(Ordinal: 752, Address: 0x200290)
(Ordinal: 753, Address: 0x19a240)
(Ordinal: 754, Address: 0x1e9030)
(Ordinal: 755, Address: 0x1ffa50)
(Ordinal: 756, Address: 0x6ef3ac)
(Ordinal: 757, Address: 0x20080)
(Ordinal: 758, Address: 0x147f0)
(Ordinal: 759, Address: 0x13f10)
(Ordinal: 760, Address: 0x21ffd0)
(Ordinal: 761, Address: 0x297b60)
(Ordinal: 762, Address: 0x6ef35c)
(Ordinal: 763, Address: 0x24df70)
(Ordinal: 764, Address: 0x1ff090)
(Ordinal: 765, Address: 0x1f81d0)
(Ordinal: 766, Address: 0x6ef6f0)
(Ordinal: 767, Address: 0x1ff0b0)
(Ordinal: 777, Address: 0x200250)
(Ordinal: 778, Address: 0x1ff0f0)
(Ordinal: 779, Address: 0x1ff850)
(Ordinal: 781, Address: 0x1ffc50)
(Ordinal: 782, Address: 0x286860)
(Ordinal: 786, Address: 0x6ef71a)
(Ordinal: 787, Address: 0x2007f0)
(Ordinal: 788, Address: 0x1ffff0)
(Ordinal: 789, Address: 0x200010)
(Ordinal: 790, Address: 0x2007d0)
(Ordinal: 791, Address: 0x1fffd0)
(Ordinal: 792, Address: 0x200810)
(Ordinal: 810, Address: 0x2cddf0)
(Ordinal: 811, Address: 0x2cdbf0)
(Ordinal: 812, Address: 0x500ff0)
(Ordinal: 813, Address: 0x501090)
(Ordinal: 814, Address: 0x15e7c0)
(Ordinal: 815, Address: 0x16b010)
(Ordinal: 816, Address: 0x4fd850)
(Ordinal: 817, Address: 0x4fee10)
(Ordinal: 818, Address: 0x4fe320)
(Ordinal: 819, Address: 0x4fe330)
(Ordinal: 820, Address: 0x6ef6fe)
(Ordinal: 821, Address: 0x6ef7a6)
(Ordinal: 822, Address: 0x6ef798)
(Ordinal: 823, Address: 0x200370)
(Ordinal: 824, Address: 0x200390)
(Ordinal: 825, Address: 0xb2270)
(Ordinal: 826, Address: 0x6ef70c)
(Ordinal: 827, Address: 0x6ef7b4)
(Ordinal: 828, Address: 0x232810)
(Ordinal: 829, Address: 0x232c00)
(Ordinal: 830, Address: 0x2c0700)
(Ordinal: 831, Address: 0x1ffe90)
(Ordinal: 832, Address: 0x6ef8ee)
(Ordinal: 833, Address: 0x2620e0)
(Ordinal: 834, Address: 0x6ef752)
(Ordinal: 835, Address: 0x6ef76e)
(Ordinal: 836, Address: 0x6ef760)
(Ordinal: 837, Address: 0x6ef78a)
(Ordinal: 838, Address: 0x6ef77c)
(Ordinal: 839, Address: 0x6ef332)
(Ordinal: 840, Address: 0x1ffa10)
(Ordinal: 841, Address: 0x6ef7de)
(Ordinal: 842, Address: 0x6ef7ec)
(Ordinal: 843, Address: 0x6ef83d)
(Ordinal: 844, Address: 0x1fff90)
(Ordinal: 845, Address: 0x4fd4e0)
ILLoadFromStreamEx (Ordinal: 846, Address: 0x1ff770)
(Ordinal: 847, Address: 0xb2410)
(Ordinal: 848, Address: 0x200510)
(Ordinal: 849, Address: 0x1890b0)
(Ordinal: 850, Address: 0x1ff9b0)
(Ordinal: 851, Address: 0x2006b0)
(Ordinal: 852, Address: 0x6ef8a9)
(Ordinal: 853, Address: 0x200550)
(Ordinal: 854, Address: 0x6ef5f4)
(Ordinal: 856, Address: 0x6ef2fc)
(Ordinal: 857, Address: 0x6ef2ee)
(Ordinal: 858, Address: 0x6ef651)
(Ordinal: 859, Address: 0x2eb1d0)
(Ordinal: 860, Address: 0x2002b0)
(Ordinal: 861, Address: 0x6ef7c2)
(Ordinal: 862, Address: 0x1ffd30)
(Ordinal: 863, Address: 0x6ef5af)
(Ordinal: 864, Address: 0x287a10)
(Ordinal: 865, Address: 0x1ff890)
(Ordinal: 866, Address: 0x200170)
(Ordinal: 867, Address: 0x6ef340)
(Ordinal: 868, Address: 0x6ef34e)
(Ordinal: 869, Address: 0x6ef66d)
(Ordinal: 870, Address: 0x1a8430)
(Ordinal: 871, Address: 0x20bb00)
(Ordinal: 872, Address: 0x6ef736)
(Ordinal: 873, Address: 0x200730)
(Ordinal: 874, Address: 0x1e6060)
(Ordinal: 875, Address: 0x1613a0)
(Ordinal: 876, Address: 0x1ec530)
(Ordinal: 877, Address: 0x27d370)
(Ordinal: 878, Address: 0x96a30)
(Ordinal: 880, Address: 0x1ff170)
(Ordinal: 881, Address: 0x14f7a0)
(Ordinal: 882, Address: 0x1648f0)
(Ordinal: 883, Address: 0x4fd210)
(Ordinal: 884, Address: 0x24f580)
(Ordinal: 885, Address: 0xfd620)
(Ordinal: 886, Address: 0x200770)
(Ordinal: 887, Address: 0x200190)
(Ordinal: 888, Address: 0x2d2cd0)
(Ordinal: 889, Address: 0x6ef5d8)
(Ordinal: 890, Address: 0x6ef317)
(Ordinal: 891, Address: 0x290890)
(Ordinal: 892, Address: 0x6ef593)
(Ordinal: 893, Address: 0x129880)
(Ordinal: 894, Address: 0x21ff90)
(Ordinal: 895, Address: 0x1747d0)
(Ordinal: 896, Address: 0x21fe90)
(Ordinal: 897, Address: 0x2d70e0)
(Ordinal: 898, Address: 0x1fff70)
(Ordinal: 899, Address: 0x200af0)
(Ordinal: 900, Address: 0x16b060)
(Ordinal: 901, Address: 0x1618d0)
(Ordinal: 902, Address: 0x6ef5e6)
(Ordinal: 903, Address: 0x1e19b0)
(Ordinal: 904, Address: 0x2621e0)
(Ordinal: 905, Address: 0x261ff0)
(Ordinal: 906, Address: 0x1ff570)
(Ordinal: 907, Address: 0x11bee0)
(Ordinal: 909, Address: 0x6ef5a1)
(Ordinal: 910, Address: 0x1ff190)
(Ordinal: 911, Address: 0x1ff030)
(Ordinal: 912, Address: 0x24d400)
(Ordinal: 913, Address: 0x1ff210)
(Ordinal: 914, Address: 0x1fef10)
(Ordinal: 915, Address: 0x14100)
(Ordinal: 916, Address: 0x17fe80)
GetSystemPersistedStorageItemList (Ordinal: 919, Address: 0x21ff70)
CreateStorageItemFromPath_PartialTrustCaller (Ordinal: 920, Address: 0x21fef0)
CreateStorageItemFromShellItem_FullTrustCaller (Ordinal: 921, Address: 0x21ff10)
(Ordinal: 922, Address: 0x2008d0)
(Ordinal: 923, Address: 0x1a8a20)
(Ordinal: 924, Address: 0x21fe50)
CreateStorageItemFromShellItem_FullTrustCaller_ForPackage (Ordinal: 925, Address: 0x17c0c0)
(Ordinal: 927, Address: 0x1ffdd0)
(Ordinal: 928, Address: 0x2000d0)
CreateStorageItemFromShellItem_FullTrustCaller_ForPackage_WithProcessHandle (Ordinal: 929, Address: 0x21ff30)
(Ordinal: 930, Address: 0x1ff9f0)
CreateStorageItemFromShellItem_FullTrustCaller_UseImplicitFlagsAndPackage (Ordinal: 931, Address: 0x21ff50)
(Ordinal: 932, Address: 0x220090)
(Ordinal: 933, Address: 0x220030)
CreateStorageItemFromPath_FullTrustCaller (Ordinal: 935, Address: 0x21feb0)
CreateStorageItemFromPath_FullTrustCaller_ForPackage (Ordinal: 936, Address: 0x21fed0)
CStorageItem_GetValidatedStorageItemObject (Ordinal: 937, Address: 0x21fe70)
(Ordinal: 938, Address: 0x297b40)
(Ordinal: 939, Address: 0xbdbb0)
(Ordinal: 940, Address: 0x21ffb0)
IsProcessAnExplorer (Ordinal: 941, Address: 0x1ff8f0)
IsDesktopExplorerProcess (Ordinal: 942, Address: 0x1ff870)
(Ordinal: 943, Address: 0x788a0)
(Ordinal: 944, Address: 0x2d3c90)
(Ordinal: 945, Address: 0x297350)
(Ordinal: 946, Address: 0x200450)
(Ordinal: 947, Address: 0x233bb0)
(Ordinal: 948, Address: 0x233b90)
(Ordinal: 949, Address: 0x233b60)
(Ordinal: 950, Address: 0x233b10)
(Ordinal: 951, Address: 0x233b30)
(Ordinal: 952, Address: 0x233af0)
(Ordinal: 953, Address: 0x233890)
(Ordinal: 970, Address: 0x1ffbb0)
(Ordinal: 971, Address: 0x1ff110)
(Ordinal: 972, Address: 0x1ff1f0)
(Ordinal: 2000, Address: 0x2975e0)
(Ordinal: 2001, Address: 0x2e57f0)
(Ordinal: 2002, Address: 0x166900)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x1806091f0)

api-ms-win-core-atoms-l1-1-0.dll

FindAtomW (Address: 0x180609208)
GetAtomNameW (Address: 0x180609218)
GlobalAddAtomW (Address: 0x180609220)
GlobalDeleteAtom (Address: 0x180609200)
GlobalGetAtomNameW (Address: 0x180609210)

api-ms-win-core-datetime-l1-1-0.dll

GetDateFormatW (Address: 0x180609230)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180609250)
IsDebuggerPresent (Address: 0x180609240)
OutputDebugStringW (Address: 0x180609248)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x180609260)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x180609270)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180609298)
RaiseException (Address: 0x1806092a8)
SetErrorMode (Address: 0x180609290)
SetLastError (Address: 0x180609288)
SetUnhandledExceptionFilter (Address: 0x180609280)
UnhandledExceptionFilter (Address: 0x1806092a0)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x180609310)
CreateDirectoryW (Address: 0x1806093b0)
CreateFileW (Address: 0x1806092e8)
DefineDosDeviceW (Address: 0x180609368)
DeleteFileW (Address: 0x180609350)
FileTimeToLocalFileTime (Address: 0x1806092f8)
FindClose (Address: 0x180609388)
FindFirstFileExW (Address: 0x1806093d0)
FindFirstFileW (Address: 0x180609378)
FindFirstVolumeW (Address: 0x1806093b8)
FindNextFileW (Address: 0x180609380)
FindNextVolumeW (Address: 0x1806093c0)
FindVolumeClose (Address: 0x1806093c8)
GetDiskFreeSpaceW (Address: 0x180609300)
GetDriveTypeW (Address: 0x1806092b8)
GetFileAttributesExW (Address: 0x1806092f0)
GetFileAttributesW (Address: 0x180609340)
GetFileInformationByHandle (Address: 0x1806093a0)
GetFileSize (Address: 0x1806092d0)
GetFileSizeEx (Address: 0x180609398)
GetFullPathNameW (Address: 0x180609338)
GetLogicalDrives (Address: 0x1806092d8)
GetLongPathNameW (Address: 0x180609320)
GetShortPathNameW (Address: 0x180609308)
GetTempFileNameW (Address: 0x1806093d8)
GetVolumeInformationW (Address: 0x1806092e0)
GetVolumePathNameW (Address: 0x180609360)
LocalFileTimeToFileTime (Address: 0x180609330)
QueryDosDeviceW (Address: 0x1806093a8)
ReadFile (Address: 0x1806092c8)
RemoveDirectoryW (Address: 0x180609328)
SetEndOfFile (Address: 0x180609390)
SetFileAttributesW (Address: 0x1806092c0)
SetFileInformationByHandle (Address: 0x180609348)
SetFilePointer (Address: 0x180609318)
SetFileTime (Address: 0x180609370)
WriteFile (Address: 0x180609358)

api-ms-win-core-file-l1-2-0.dll

GetTempPathW (Address: 0x1806093f8)
GetVolumeNameForVolumeMountPointW (Address: 0x1806093e8)
GetVolumePathNamesForVolumeNameW (Address: 0x1806093f0)

api-ms-win-core-file-l2-1-0.dll

CopyFile2 (Address: 0x180609418)
GetFileInformationByHandleEx (Address: 0x180609408)
MoveFileExW (Address: 0x180609410)
ReplaceFileW (Address: 0x180609420)

api-ms-win-core-file-l2-1-2.dll

CopyFileW (Address: 0x180609430)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x180609440)
DuplicateHandle (Address: 0x180609448)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x180609458)
HeapAlloc (Address: 0x180609468)
HeapDestroy (Address: 0x180609478)
HeapFree (Address: 0x180609460)
HeapReAlloc (Address: 0x180609470)

api-ms-win-core-heap-l2-1-0.dll

GlobalAlloc (Address: 0x1806094a0)
GlobalFree (Address: 0x180609498)
LocalAlloc (Address: 0x1806094a8)
LocalFree (Address: 0x180609490)
LocalReAlloc (Address: 0x180609488)

api-ms-win-core-heap-obsolete-l1-1-0.dll

GlobalFlags (Address: 0x1806094c0)
GlobalLock (Address: 0x1806094b8)
GlobalReAlloc (Address: 0x1806094d8)
GlobalSize (Address: 0x1806094d0)
GlobalUnlock (Address: 0x1806094c8)
LocalSize (Address: 0x1806094e0)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x180609500)
InterlockedPopEntrySList (Address: 0x1806094f8)
InterlockedPushEntrySList (Address: 0x1806094f0)

api-ms-win-core-io-l1-1-0.dll

CreateIoCompletionPort (Address: 0x180609510)
DeviceIoControl (Address: 0x180609520)
GetQueuedCompletionStatus (Address: 0x180609518)

api-ms-win-core-io-l1-1-1.dll

CancelSynchronousIo (Address: 0x180609530)

api-ms-win-core-job-l2-1-0.dll

AssignProcessToJobObject (Address: 0x180609548)
CreateJobObjectW (Address: 0x180609550)
SetInformationJobObject (Address: 0x180609540)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

GetComputerNameW (Address: 0x180609568)
GetSystemPowerStatus (Address: 0x180609588)
MulDiv (Address: 0x180609590)
RegisterWaitForSingleObject (Address: 0x180609578)
SetVolumeLabelW (Address: 0x180609560)
UnregisterWait (Address: 0x180609580)
WTSGetActiveConsoleSessionId (Address: 0x180609570)

api-ms-win-core-kernel32-legacy-l1-1-1.dll

PowerClearRequest (Address: 0x1806095b0)
PowerCreateRequest (Address: 0x1806095b8)
PowerSetRequest (Address: 0x1806095a8)
VerifyVersionInfoW (Address: 0x1806095a0)

api-ms-win-core-kernel32-legacy-l1-1-2.dll

GetBinaryTypeW (Address: 0x1806095c8)

api-ms-win-core-kernel32-private-l1-1-0.dll

CheckElevation (Address: 0x1806095d8)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x180609670)
EnumResourceNamesExW (Address: 0x180609630)
FindResourceExW (Address: 0x180609640)
FindStringOrdinal (Address: 0x1806095f0)
FreeLibrary (Address: 0x180609658)
FreeResource (Address: 0x180609618)
GetModuleFileNameA (Address: 0x180609610)
GetModuleFileNameW (Address: 0x180609638)
GetModuleHandleExA (Address: 0x180609608)
GetModuleHandleExW (Address: 0x1806095e8)
GetModuleHandleW (Address: 0x180609650)
GetProcAddress (Address: 0x180609660)
LoadLibraryExA (Address: 0x1806095f8)
LoadLibraryExW (Address: 0x180609648)
LoadResource (Address: 0x180609678)
LoadStringA (Address: 0x180609620)
LoadStringW (Address: 0x180609628)
LockResource (Address: 0x180609668)
SizeofResource (Address: 0x180609600)

api-ms-win-core-libraryloader-l1-2-1.dll

FindResourceW (Address: 0x180609688)
LoadLibraryW (Address: 0x180609690)

api-ms-win-core-localization-l1-2-0.dll

FindNLSString (Address: 0x180609718)
FindNLSStringEx (Address: 0x1806096c0)
FormatMessageW (Address: 0x1806096f8)
GetACP (Address: 0x1806096e8)
GetLocaleInfoW (Address: 0x180609700)
GetSystemDefaultLangID (Address: 0x1806096d8)
GetSystemDefaultLCID (Address: 0x1806096d0)
GetSystemPreferredUILanguages (Address: 0x180609720)
GetThreadLocale (Address: 0x1806096e0)
GetThreadUILanguage (Address: 0x1806096b0)
GetUserDefaultLangID (Address: 0x1806096b8)
GetUserPreferredUILanguages (Address: 0x180609728)
IsValidLocaleName (Address: 0x1806096c8)
LCMapStringEx (Address: 0x1806096a0)
LCMapStringW (Address: 0x1806096a8)
LocaleNameToLCID (Address: 0x180609708)
ResolveLocaleName (Address: 0x180609710)
VerLanguageNameW (Address: 0x1806096f0)

api-ms-win-core-localization-l1-2-2.dll

LCIDToLocaleName (Address: 0x180609738)

api-ms-win-core-localization-l2-1-0.dll

GetNumberFormatEx (Address: 0x180609748)

api-ms-win-core-localization-obsolete-l1-2-0.dll

EnumUILanguagesW (Address: 0x180609758)
GetNumberFormatW (Address: 0x180609760)
GetUserDefaultUILanguage (Address: 0x180609768)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x180609798)
MapViewOfFile (Address: 0x1806097b0)
OpenFileMappingW (Address: 0x1806097a8)
ReadProcessMemory (Address: 0x1806097c0)
UnmapViewOfFile (Address: 0x180609778)
VirtualAlloc (Address: 0x1806097a0)
VirtualFree (Address: 0x180609788)
VirtualProtect (Address: 0x180609790)
VirtualQuery (Address: 0x180609780)
WriteProcessMemory (Address: 0x1806097b8)

api-ms-win-core-memory-l1-1-1.dll

PrefetchVirtualMemory (Address: 0x1806097d0)

api-ms-win-core-path-l1-1-0.dll

PathAllocCanonicalize (Address: 0x180609818)
PathAllocCombine (Address: 0x1806097e0)
PathCchAddBackslash (Address: 0x180609808)
PathCchAddExtension (Address: 0x180609858)
PathCchAppend (Address: 0x180609800)
PathCchAppendEx (Address: 0x180609838)
PathCchCanonicalize (Address: 0x180609848)
PathCchCombine (Address: 0x1806097e8)
PathCchRemoveBackslash (Address: 0x180609840)
PathCchRemoveExtension (Address: 0x180609830)
PathCchRemoveFileSpec (Address: 0x1806097f0)
PathCchRenameExtension (Address: 0x180609828)
PathCchSkipRoot (Address: 0x180609810)
PathCchStripPrefix (Address: 0x180609850)
PathCchStripToRoot (Address: 0x1806097f8)
PathIsUNCEx (Address: 0x180609820)

api-ms-win-core-privateprofile-l1-1-0.dll

GetPrivateProfileSectionW (Address: 0x180609878)
GetPrivateProfileStringW (Address: 0x180609870)
WritePrivateProfileStringW (Address: 0x180609868)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsA (Address: 0x180609888)
ExpandEnvironmentStringsW (Address: 0x1806098b0)
GetCommandLineW (Address: 0x1806098a8)
GetCurrentDirectoryW (Address: 0x1806098a0)
GetEnvironmentVariableW (Address: 0x180609898)
SearchPathW (Address: 0x1806098c0)
SetCurrentDirectoryW (Address: 0x1806098b8)
SetEnvironmentVariableW (Address: 0x180609890)

api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessW (Address: 0x180609978)
CreateThread (Address: 0x180609920)
DeleteProcThreadAttributeList (Address: 0x1806098e0)
GetCurrentProcess (Address: 0x180609968)
GetCurrentProcessId (Address: 0x1806099a0)
GetCurrentThread (Address: 0x180609910)
GetCurrentThreadId (Address: 0x180609938)
GetExitCodeProcess (Address: 0x1806098f0)
GetExitCodeThread (Address: 0x180609948)
GetProcessId (Address: 0x180609980)
GetThreadId (Address: 0x180609900)
GetThreadPriority (Address: 0x1806098d0)
InitializeProcThreadAttributeList (Address: 0x1806098f8)
OpenProcessToken (Address: 0x1806098d8)
OpenThread (Address: 0x180609990)
OpenThreadToken (Address: 0x180609940)
ProcessIdToSessionId (Address: 0x180609908)
ResumeThread (Address: 0x180609930)
SetPriorityClass (Address: 0x180609998)
SetThreadPriority (Address: 0x1806098e8)
SetThreadToken (Address: 0x180609988)
TerminateProcess (Address: 0x180609960)
TlsAlloc (Address: 0x180609928)
TlsFree (Address: 0x180609918)
TlsGetValue (Address: 0x180609950)
TlsSetValue (Address: 0x180609958)
UpdateProcThreadAttribute (Address: 0x180609970)

api-ms-win-core-processthreads-l1-1-1.dll

FlushInstructionCache (Address: 0x1806099b8)
IsProcessorFeaturePresent (Address: 0x1806099c0)
OpenProcess (Address: 0x1806099b0)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1806099d0)
QueryPerformanceFrequency (Address: 0x1806099d8)

api-ms-win-core-psapi-l1-1-0.dll

K32GetModuleFileNameExW (Address: 0x1806099f0)
K32GetProcessImageFileNameW (Address: 0x1806099f8)
QueryFullProcessImageNameW (Address: 0x1806099e8)

api-ms-win-core-realtime-l1-1-0.dll

QueryUnbiasedInterruptTime (Address: 0x180609a08)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x180609a38)
RegCreateKeyExW (Address: 0x180609a28)
RegDeleteKeyExW (Address: 0x180609a60)
RegDeleteTreeW (Address: 0x180609a30)
RegDeleteValueW (Address: 0x180609a58)
RegEnumKeyExW (Address: 0x180609a90)
RegEnumValueW (Address: 0x180609a50)
RegGetValueW (Address: 0x180609a48)
RegNotifyChangeKeyValue (Address: 0x180609a78)
RegOpenCurrentUser (Address: 0x180609a18)
RegOpenKeyExA (Address: 0x180609a20)
RegOpenKeyExW (Address: 0x180609a88)
RegQueryInfoKeyA (Address: 0x180609a98)
RegQueryInfoKeyW (Address: 0x180609a80)
RegQueryValueExA (Address: 0x180609a70)
RegQueryValueExW (Address: 0x180609a68)
RegSetValueExW (Address: 0x180609a40)

api-ms-win-core-registry-l1-1-1.dll

RegSetKeyValueW (Address: 0x180609aa8)

api-ms-win-core-registryuserspecific-l1-1-0.dll

SHRegCloseUSKey (Address: 0x180609ac8)
SHRegEnumUSKeyW (Address: 0x180609ad0)
SHRegGetBoolUSValueW (Address: 0x180609ab8)
SHRegGetUSValueW (Address: 0x180609ae8)
SHRegOpenUSKeyA (Address: 0x180609ac0)
SHRegOpenUSKeyW (Address: 0x180609ad8)
SHRegQueryUSValueW (Address: 0x180609ae0)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x180609b00)
RtlLookupFunctionEntry (Address: 0x180609b08)
RtlVirtualUnwind (Address: 0x180609af8)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

IsCharSpaceW (Address: 0x180609c18)
PathAddBackslashW (Address: 0x180609b28)
PathAppendW (Address: 0x180609ba8)
PathCombineW (Address: 0x180609b50)
PathCommonPrefixW (Address: 0x180609b48)
PathFileExistsW (Address: 0x180609b40)
PathFindExtensionW (Address: 0x180609b38)
PathFindFileNameW (Address: 0x180609b30)
PathFindNextComponentW (Address: 0x180609bc0)
PathGetArgsW (Address: 0x180609ba0)
PathGetDriveNumberW (Address: 0x180609b98)
PathIsFileSpecW (Address: 0x180609bc8)
PathIsPrefixW (Address: 0x180609b58)
PathIsRelativeW (Address: 0x180609be8)
PathIsRootW (Address: 0x180609bd0)
PathIsSameRootW (Address: 0x180609be0)
PathIsUNCServerShareW (Address: 0x180609b20)
PathIsUNCServerW (Address: 0x180609c10)
PathIsUNCW (Address: 0x180609bf8)
PathIsValidCharW (Address: 0x180609b88)
PathMatchSpecExW (Address: 0x180609b18)
PathMatchSpecW (Address: 0x180609b80)
PathParseIconLocationW (Address: 0x180609bf0)
PathQuoteSpacesW (Address: 0x180609c00)
PathRemoveBackslashW (Address: 0x180609b90)
PathRemoveBlanksW (Address: 0x180609b78)
PathRemoveExtensionW (Address: 0x180609b70)
PathRemoveFileSpecW (Address: 0x180609b60)
PathSkipRootW (Address: 0x180609bb8)
PathStripToRootW (Address: 0x180609bb0)
PathUnExpandEnvStringsW (Address: 0x180609c08)
PathUnquoteSpacesW (Address: 0x180609b68)
SHExpandEnvironmentStringsW (Address: 0x180609bd8)

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll

QISearch (Address: 0x180609d40)
StrChrA (Address: 0x180609c68)
StrChrIA (Address: 0x180609c70)
StrChrIW (Address: 0x180609c80)
StrChrW (Address: 0x180609c88)
StrCmpCW (Address: 0x180609c40)
StrCmpICA (Address: 0x180609c28)
StrCmpICW (Address: 0x180609cb0)
StrCmpIW (Address: 0x180609c30)
StrCmpLogicalW (Address: 0x180609d28)
StrCmpNA (Address: 0x180609c98)
StrCmpNCW (Address: 0x180609ca8)
StrCmpNIA (Address: 0x180609ca0)
StrCmpNICW (Address: 0x180609cc8)
StrCmpNIW (Address: 0x180609d38)
StrCmpNW (Address: 0x180609cb8)
StrCmpW (Address: 0x180609c50)
StrCSpnW (Address: 0x180609c90)
StrDupA (Address: 0x180609c78)
StrDupW (Address: 0x180609c60)
StrPBrkW (Address: 0x180609d08)
StrRChrA (Address: 0x180609cc0)
StrRChrIA (Address: 0x180609cd0)
StrRChrIW (Address: 0x180609cd8)
StrRChrW (Address: 0x180609ce0)
StrRStrIA (Address: 0x180609ce8)
StrRStrIW (Address: 0x180609cf0)
StrSpnW (Address: 0x180609d20)
StrStrA (Address: 0x180609cf8)
StrStrIA (Address: 0x180609d00)
StrStrIW (Address: 0x180609d18)
StrStrW (Address: 0x180609d10)
StrToIntA (Address: 0x180609d30)
StrToIntExW (Address: 0x180609c58)
StrToIntW (Address: 0x180609c38)
StrTrimW (Address: 0x180609c48)

api-ms-win-core-sidebyside-l1-1-0.dll

ActivateActCtx (Address: 0x180609d68)
CreateActCtxW (Address: 0x180609d58)
DeactivateActCtx (Address: 0x180609d70)
QueryActCtxW (Address: 0x180609d60)
ReleaseActCtx (Address: 0x180609d50)

api-ms-win-core-string-l1-1-0.dll

CompareStringEx (Address: 0x180609db0)
CompareStringOrdinal (Address: 0x180609d80)
CompareStringW (Address: 0x180609d88)
GetStringTypeExW (Address: 0x180609da0)
GetStringTypeW (Address: 0x180609d98)
MultiByteToWideChar (Address: 0x180609d90)
WideCharToMultiByte (Address: 0x180609da8)

api-ms-win-core-string-l2-1-0.dll

CharLowerBuffW (Address: 0x180609de8)
CharLowerW (Address: 0x180609dc0)
CharNextW (Address: 0x180609de0)
CharPrevW (Address: 0x180609df0)
CharUpperBuffW (Address: 0x180609dd0)
CharUpperW (Address: 0x180609dc8)
IsCharAlphaW (Address: 0x180609dd8)

api-ms-win-core-string-l2-1-1.dll

SHLoadIndirectString (Address: 0x180609e00)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpA (Address: 0x180609e30)
lstrcmpiA (Address: 0x180609e20)
lstrcmpiW (Address: 0x180609e28)
lstrcmpW (Address: 0x180609e10)
lstrlenA (Address: 0x180609e18)
lstrlenW (Address: 0x180609e38)

api-ms-win-core-stringansi-l1-1-0.dll

CharNextA (Address: 0x180609e48)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x180609e78)
AcquireSRWLockShared (Address: 0x180609ec0)
CreateEventExW (Address: 0x180609f28)
CreateEventW (Address: 0x180609f18)
CreateMutexExW (Address: 0x180609eb0)
CreateMutexW (Address: 0x180609f10)
CreateSemaphoreExW (Address: 0x180609f00)
DeleteCriticalSection (Address: 0x180609f30)
EnterCriticalSection (Address: 0x180609ee8)
InitializeCriticalSection (Address: 0x180609ea0)
InitializeCriticalSectionAndSpinCount (Address: 0x180609f20)
InitializeCriticalSectionEx (Address: 0x180609ec8)
InitializeSRWLock (Address: 0x180609f08)
LeaveCriticalSection (Address: 0x180609ed0)
OpenEventW (Address: 0x180609e90)
OpenMutexW (Address: 0x180609e88)
OpenSemaphoreW (Address: 0x180609e68)
ReleaseMutex (Address: 0x180609ea8)
ReleaseSemaphore (Address: 0x180609ee0)
ReleaseSRWLockExclusive (Address: 0x180609e98)
ReleaseSRWLockShared (Address: 0x180609ef0)
ResetEvent (Address: 0x180609ef8)
SetEvent (Address: 0x180609f38)
TryAcquireSRWLockExclusive (Address: 0x180609e58)
TryAcquireSRWLockShared (Address: 0x180609ed8)
TryEnterCriticalSection (Address: 0x180609e80)
WaitForMultipleObjectsEx (Address: 0x180609e60)
WaitForSingleObject (Address: 0x180609eb8)
WaitForSingleObjectEx (Address: 0x180609e70)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x180609f58)
InitOnceComplete (Address: 0x180609f50)
InitOnceExecuteOnce (Address: 0x180609f60)
Sleep (Address: 0x180609f48)

api-ms-win-core-sysinfo-l1-1-0.dll

GetComputerNameExW (Address: 0x180609fa8)
GetLocalTime (Address: 0x180609fc0)
GetSystemDirectoryW (Address: 0x180609fc8)
GetSystemInfo (Address: 0x180609f80)
GetSystemTime (Address: 0x180609f88)
GetSystemTimeAsFileTime (Address: 0x180609f98)
GetSystemWindowsDirectoryW (Address: 0x180609fa0)
GetTickCount (Address: 0x180609f90)
GetTickCount64 (Address: 0x180609fb8)
GetVersionExW (Address: 0x180609f70)
GetWindowsDirectoryW (Address: 0x180609fb0)
GlobalMemoryStatusEx (Address: 0x180609f78)

api-ms-win-core-sysinfo-l1-2-0.dll

GetNativeSystemInfo (Address: 0x180609fe0)
GetProductInfo (Address: 0x180609fe8)
GetSystemTimePreciseAsFileTime (Address: 0x180609ff0)
VerSetConditionMask (Address: 0x180609fd8)

api-ms-win-core-sysinfo-l1-2-3.dll

GetIntegratedDisplaySize (Address: 0x18060a000)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x18060a020)
CloseThreadpoolWait (Address: 0x18060a060)
CloseThreadpoolWork (Address: 0x18060a010)
CreateThreadpoolTimer (Address: 0x18060a030)
CreateThreadpoolWait (Address: 0x18060a038)
CreateThreadpoolWork (Address: 0x18060a018)
IsThreadpoolTimerSet (Address: 0x18060a068)
SetThreadpoolTimer (Address: 0x18060a028)
SetThreadpoolTimerEx (Address: 0x18060a070)
SetThreadpoolWait (Address: 0x18060a050)
SubmitThreadpoolWork (Address: 0x18060a040)
TrySubmitThreadpoolCallback (Address: 0x18060a078)
WaitForThreadpoolTimerCallbacks (Address: 0x18060a048)
WaitForThreadpoolWaitCallbacks (Address: 0x18060a058)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

CreateTimerQueueTimer (Address: 0x18060a098)
DeleteTimerQueueTimer (Address: 0x18060a090)
QueueUserWorkItem (Address: 0x18060a0a0)
UnregisterWaitEx (Address: 0x18060a088)

api-ms-win-core-timezone-l1-1-0.dll

FileTimeToSystemTime (Address: 0x18060a0d0)
GetTimeZoneInformationForYear (Address: 0x18060a0c0)
SystemTimeToFileTime (Address: 0x18060a0c8)
SystemTimeToTzSpecificLocalTime (Address: 0x18060a0b0)
TzSpecificLocalTimeToSystemTime (Address: 0x18060a0b8)

api-ms-win-core-url-l1-1-0.dll

HashData (Address: 0x18060a100)
ParseURLW (Address: 0x18060a0f8)
PathCreateFromUrlAlloc (Address: 0x18060a120)
PathCreateFromUrlW (Address: 0x18060a0f0)
PathIsURLW (Address: 0x18060a0e0)
UrlApplySchemeW (Address: 0x18060a148)
UrlCanonicalizeW (Address: 0x18060a110)
UrlCompareW (Address: 0x18060a138)
UrlCreateFromPathW (Address: 0x18060a130)
UrlEscapeW (Address: 0x18060a150)
UrlFixupW (Address: 0x18060a118)
UrlGetPartW (Address: 0x18060a140)
UrlIsW (Address: 0x18060a0e8)
UrlUnescapeA (Address: 0x18060a108)
UrlUnescapeW (Address: 0x18060a128)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x18060a160)
EncodePointer (Address: 0x18060a168)

api-ms-win-core-version-l1-1-0.dll

GetFileVersionInfoExW (Address: 0x18060a178)
GetFileVersionInfoSizeExW (Address: 0x18060a180)
VerQueryValueW (Address: 0x18060a188)

api-ms-win-core-version-l1-1-1.dll

GetFileVersionInfoSizeW (Address: 0x18060a1a0)
GetFileVersionInfoW (Address: 0x18060a198)

api-ms-win-core-wow64-l1-1-0.dll

Wow64DisableWow64FsRedirection (Address: 0x18060a1b8)
Wow64RevertWow64FsRedirection (Address: 0x18060a1b0)

api-ms-win-core-wow64-l1-1-1.dll

GetSystemWow64DirectoryW (Address: 0x18060a1c8)
IsWow64Process2 (Address: 0x18060a1d0)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x18060a320)
__current_exception (Address: 0x18060a2c8)
__current_exception_context (Address: 0x18060a2d0)
__CxxFrameHandler3 (Address: 0x18060a2c0)
__CxxFrameHandler4 (Address: 0x18060a428)
__std_terminate (Address: 0x18060a420)
_CxxThrowException (Address: 0x18060a440)
_o___std_exception_copy (Address: 0x18060a410)
_o___std_exception_destroy (Address: 0x18060a408)
_o___std_type_info_destroy_list (Address: 0x18060a400)
_o___stdio_common_vsnprintf_s (Address: 0x18060a3f8)
_o___stdio_common_vsprintf (Address: 0x18060a3f0)
_o___stdio_common_vsprintf_s (Address: 0x18060a3e8)
_o___stdio_common_vswprintf (Address: 0x18060a3e0)
_o___stdio_common_vswscanf (Address: 0x18060a3d8)
_o__beginthreadex (Address: 0x18060a3d0)
_o__cexit (Address: 0x18060a3c8)
_o__configure_narrow_argv (Address: 0x18060a3c0)
_o__crt_atexit (Address: 0x18060a3b8)
_o__difftime64 (Address: 0x18060a3b0)
_o__errno (Address: 0x18060a3a8)
_o__execute_onexit_table (Address: 0x18060a3a0)
_o__get_errno (Address: 0x18060a398)
_o__initialize_narrow_environment (Address: 0x18060a390)
_o__initialize_onexit_table (Address: 0x18060a388)
_o__invalid_parameter_noinfo (Address: 0x18060a380)
_o__invalid_parameter_noinfo_noreturn (Address: 0x18060a378)
_o__itow (Address: 0x18060a370)
_o__purecall (Address: 0x18060a358)
_o__register_onexit_function (Address: 0x18060a350)
_o__resetstkoflw (Address: 0x18060a348)
_o__seh_filter_dll (Address: 0x18060a418)
_o__set_errno (Address: 0x18060a338)
_o__strnicmp (Address: 0x18060a330)
_o__ui64tow_s (Address: 0x18060a328)
_o__wcsicmp (Address: 0x18060a318)
_o__wcslwr (Address: 0x18060a310)
_o__wcsnicmp (Address: 0x18060a308)
_o__wcstoui64 (Address: 0x18060a300)
_o__wtoi (Address: 0x18060a2f0)
_o_abort (Address: 0x18060a2e8)
_o_ceil (Address: 0x18060a2e0)
_o_ceilf (Address: 0x18060a2d8)
_o_expf (Address: 0x18060a368)
_o_floor (Address: 0x18060a360)
_o_floorf (Address: 0x18060a340)
_o_free (Address: 0x18060a2f8)
_o_isdigit (Address: 0x18060a1e0)
_o_iswprint (Address: 0x18060a1e8)
_o_iswspace (Address: 0x18060a1f0)
_o_log (Address: 0x18060a1f8)
_o_logf (Address: 0x18060a200)
_o_malloc (Address: 0x18060a210)
_o_pow (Address: 0x18060a218)
_o_powf (Address: 0x18060a220)
_o_qsort (Address: 0x18060a430)
_o_rand (Address: 0x18060a228)
_o_realloc (Address: 0x18060a230)
_o_sqrt (Address: 0x18060a238)
_o_sqrtf (Address: 0x18060a240)
_o_srand (Address: 0x18060a248)
_o_strncpy_s (Address: 0x18060a250)
_o_strtol (Address: 0x18060a258)
_o_terminate (Address: 0x18060a260)
_o_towlower (Address: 0x18060a268)
_o_wcscat_s (Address: 0x18060a270)
_o_wcscpy_s (Address: 0x18060a278)
_o_wcsncpy_s (Address: 0x18060a288)
_o_wcstok_s (Address: 0x18060a290)
_o_wcstol (Address: 0x18060a298)
_o_wcstoul (Address: 0x18060a2a0)
_o_wcstoull (Address: 0x18060a2a8)
memcmp (Address: 0x18060a448)
memcpy (Address: 0x18060a450)
memmove (Address: 0x18060a280)
strchr (Address: 0x18060a2b0)
wcschr (Address: 0x18060a438)
wcsrchr (Address: 0x18060a2b8)
wcsstr (Address: 0x18060a208)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x18060a468)
_initterm_e (Address: 0x18060a460)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x18060a498)
wcscmp (Address: 0x18060a4a0)
wcscspn (Address: 0x18060a478)
wcsncmp (Address: 0x18060a480)
wcspbrk (Address: 0x18060a488)
wcsspn (Address: 0x18060a490)

api-ms-win-crt-time-l1-1-0.dll

_time64 (Address: 0x18060a4b0)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x18060a4d8)
GetTraceEnableLevel (Address: 0x18060a4c0)
GetTraceLoggerHandle (Address: 0x18060a4d0)
RegisterTraceGuidsW (Address: 0x18060a4e0)
UnregisterTraceGuids (Address: 0x18060a4c8)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x18060a4f0)
EventRegister (Address: 0x18060a500)
EventSetInformation (Address: 0x18060a4f8)
EventUnregister (Address: 0x18060a508)
EventWriteTransfer (Address: 0x18060a510)

api-ms-win-ro-typeresolution-l1-1-1.dll

RoCreatePropertySetSerializer (Address: 0x18060a520)

api-ms-win-security-base-l1-1-0.dll

AccessCheck (Address: 0x18060a608)
AddAccessAllowedAceEx (Address: 0x18060a600)
AddAccessDeniedAceEx (Address: 0x18060a618)
AddAce (Address: 0x18060a5a8)
AdjustTokenPrivileges (Address: 0x18060a5d0)
CheckTokenMembership (Address: 0x18060a5c8)
CopySid (Address: 0x18060a5e0)
CreateWellKnownSid (Address: 0x18060a620)
DeleteAce (Address: 0x18060a5f0)
DuplicateToken (Address: 0x18060a570)
DuplicateTokenEx (Address: 0x18060a610)
EqualSid (Address: 0x18060a5d8)
GetAce (Address: 0x18060a5b0)
GetAclInformation (Address: 0x18060a5b8)
GetFileSecurityW (Address: 0x18060a580)
GetLengthSid (Address: 0x18060a588)
GetSecurityDescriptorControl (Address: 0x18060a558)
GetSidIdentifierAuthority (Address: 0x18060a548)
GetSidLengthRequired (Address: 0x18060a538)
GetSidSubAuthority (Address: 0x18060a550)
GetSidSubAuthorityCount (Address: 0x18060a530)
GetTokenInformation (Address: 0x18060a5e8)
ImpersonateSelf (Address: 0x18060a560)
InitializeAcl (Address: 0x18060a590)
InitializeSid (Address: 0x18060a540)
IsValidSid (Address: 0x18060a5c0)
IsWellKnownSid (Address: 0x18060a598)
RevertToSelf (Address: 0x18060a568)
SetFileSecurityW (Address: 0x18060a5f8)
SetSecurityDescriptorOwner (Address: 0x18060a5a0)
SetTokenInformation (Address: 0x18060a578)

api-ms-win-stateseparation-helpers-l1-1-0.dll

GetPersistedRegistryLocationW (Address: 0x18060a630)

GDI32.dll

BitBlt (Address: 0x180608660)
CombineRgn (Address: 0x1806087c0)
CreateCompatibleBitmap (Address: 0x180608718)
CreateCompatibleDC (Address: 0x180608638)
CreateDCW (Address: 0x180608650)
CreateDIBSection (Address: 0x180608630)
CreateFontIndirectW (Address: 0x1806086e0)
CreateFontW (Address: 0x1806087f8)
CreatePen (Address: 0x180608730)
CreatePolygonRgn (Address: 0x180608778)
CreateRectRgn (Address: 0x180608738)
CreateRectRgnIndirect (Address: 0x1806087a8)
CreateSolidBrush (Address: 0x180608670)
DeleteDC (Address: 0x180608648)
DeleteMetaFile (Address: 0x1806086d8)
DeleteObject (Address: 0x180608608)
ExcludeClipRect (Address: 0x180608628)
ExtSelectClipRgn (Address: 0x180608798)
ExtTextOutW (Address: 0x1806087e8)
GdiAlphaBlend (Address: 0x180608658)
GdiTransparentBlt (Address: 0x180608690)
GetClipBox (Address: 0x1806086f0)
GetClipRgn (Address: 0x180608740)
GetCurrentObject (Address: 0x180608728)
GetDeviceCaps (Address: 0x180608620)
GetDIBColorTable (Address: 0x1806087f0)
GetDIBits (Address: 0x180608680)
GetLayout (Address: 0x180608818)
GetObjectType (Address: 0x1806087e0)
GetObjectW (Address: 0x180608668)
GetPixel (Address: 0x180608800)
GetRegionData (Address: 0x1806087d0)
GetRgnBox (Address: 0x1806087c8)
GetStockObject (Address: 0x180608600)
GetTextAlign (Address: 0x180608780)
GetTextColor (Address: 0x1806086f8)
GetTextExtentPoint32A (Address: 0x180608808)
GetTextExtentPoint32W (Address: 0x180608700)
GetTextExtentPointW (Address: 0x180608610)
GetTextMetricsW (Address: 0x180608710)
GetViewportOrgEx (Address: 0x1806086e8)
GetWindowOrgEx (Address: 0x1806087d8)
IntersectClipRect (Address: 0x180608748)
LineTo (Address: 0x180608770)
LPtoDP (Address: 0x1806086b0)
MoveToEx (Address: 0x180608768)
OffsetWindowOrgEx (Address: 0x180608790)
PatBlt (Address: 0x180608760)
PlayMetaFile (Address: 0x1806086d0)
Rectangle (Address: 0x1806086c0)
RestoreDC (Address: 0x1806087b0)
SaveDC (Address: 0x1806087b8)
SelectClipRgn (Address: 0x180608750)
SelectObject (Address: 0x180608640)
SetBkColor (Address: 0x1806085f0)
SetBkMode (Address: 0x180608678)
SetDCBrushColor (Address: 0x1806087a0)
SetLayout (Address: 0x1806085f8)
SetMapMode (Address: 0x180608698)
SetMetaFileBitsEx (Address: 0x1806086b8)
SetStretchBltMode (Address: 0x180608758)
SetTextAlign (Address: 0x180608720)
SetTextColor (Address: 0x180608618)
SetViewportExtEx (Address: 0x1806086a8)
SetViewportOrgEx (Address: 0x1806086c8)
SetWindowExtEx (Address: 0x1806086a0)
SetWindowOrgEx (Address: 0x180608788)
StretchBlt (Address: 0x180608688)
StretchDIBits (Address: 0x180608708)
TextOutA (Address: 0x180608810)

KERNELBASE.dll

ClosePackageInfo (Address: 0x180608848)
CloseState (Address: 0x180608868)
GetCurrentPackageInfo (Address: 0x1806088b0)
GetEffectivePackageStatusForUser (Address: 0x180608898)
GetPackageFullName (Address: 0x1806088a0)
GetPackageInfo (Address: 0x180608840)
GetPackagesByPackageFamily (Address: 0x1806088a8)
GetStagedPackagePathByFullName2 (Address: 0x180608828)
GetStateFolder (Address: 0x180608870)
GetSystemAppDataKey (Address: 0x180608850)
IsMrtResourceRedirectionEnabled (Address: 0x180608830)
NotifyRedirectedStringChange (Address: 0x180608860)
OpenPackageInfoByFullName (Address: 0x180608838)
OpenState (Address: 0x180608880)
OpenStateExplicit (Address: 0x180608878)
PackageNameAndPublisherIdFromFamilyName (Address: 0x180608888)
ParseApplicationUserModelId (Address: 0x180608890)
SHLoadIndirectStringInternal (Address: 0x180608858)

msvcp_win.dll

_Cnd_do_broadcast_at_thread_exit (Address: 0x18060a7f0)
_Thrd_id (Address: 0x18060a7f8)
_Thrd_join (Address: 0x18060a808)
_Thrd_yield (Address: 0x18060a790)
_Xtime_get_ticks (Address: 0x18060a7e0)
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z (Address: 0x18060a7a0)
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z (Address: 0x18060a7b0)
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z (Address: 0x18060a788)
?__ExceptionPtrCreate@@YAXPEAX@Z (Address: 0x18060a7a8)
?__ExceptionPtrCurrentException@@YAXPEAX@Z (Address: 0x18060a798)
?__ExceptionPtrDestroy@@YAXPEAX@Z (Address: 0x18060a7b8)
?__ExceptionPtrRethrow@@YAXPEBX@Z (Address: 0x18060a7c0)
?__ExceptionPtrToBool@@YA_NPEBX@Z (Address: 0x18060a7c8)
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ (Address: 0x18060a700)
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ (Address: 0x18060a738)
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ (Address: 0x18060a750)
?_Throw_Cpp_error@std@@YAXH@Z (Address: 0x18060a800)
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ (Address: 0x18060a718)
?_Xbad_function_call@std@@YAXXZ (Address: 0x18060a7e8)
?_Xinvalid_argument@std@@YAXPEBD@Z (Address: 0x18060a7d0)
?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18060a770)
?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x18060a7d8)
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ (Address: 0x18060a648)
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z (Address: 0x18060a660)
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ (Address: 0x18060a688)
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x18060a6f8)
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x18060a6d0)
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x18060a6d8)
?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x18060a678)
?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x18060a670)
?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x18060a658)
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGXZ (Address: 0x18060a768)
?flags@ios_base@std@@QEBAHXZ (Address: 0x18060a748)
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ (Address: 0x18060a710)
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z (Address: 0x18060a6e0)
?good@ios_base@std@@QEBA_NXZ (Address: 0x18060a728)
?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x18060a6f0)
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x18060a698)
?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x18060a690)
?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x18060a6e8)
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ (Address: 0x18060a760)
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z (Address: 0x18060a6a0)
?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z (Address: 0x18060a668)
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG0@Z (Address: 0x18060a680)
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z (Address: 0x18060a650)
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z (Address: 0x18060a780)
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ (Address: 0x18060a6b0)
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z (Address: 0x18060a758)
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z (Address: 0x18060a6c0)
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ (Address: 0x18060a730)
?tellp@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ (Address: 0x18060a640)
?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ (Address: 0x18060a708)
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ (Address: 0x18060a6c8)
?uncaught_exception@std@@YA_NXZ (Address: 0x18060a720)
?width@ios_base@std@@QEAA_J_J@Z (Address: 0x18060a778)
?width@ios_base@std@@QEBA_JXZ (Address: 0x18060a740)
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z (Address: 0x18060a6a8)
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z (Address: 0x18060a6b8)

ntdll.dll

EtwEventActivityIdControl (Address: 0x18060a908)
EtwEventEnabled (Address: 0x18060a910)
EtwEventRegister (Address: 0x18060a900)
EtwEventSetInformation (Address: 0x18060a8e8)
EtwEventUnregister (Address: 0x18060a8f8)
EtwEventWrite (Address: 0x18060a918)
EtwEventWriteTransfer (Address: 0x18060a8f0)
EtwGetTraceEnableFlags (Address: 0x18060a968)
EtwGetTraceEnableLevel (Address: 0x18060a960)
EtwGetTraceLoggerHandle (Address: 0x18060a958)
EtwLogTraceEvent (Address: 0x18060a9d0)
EtwRegisterTraceGuidsW (Address: 0x18060a970)
EtwTraceMessage (Address: 0x18060a920)
EtwUnregisterTraceGuids (Address: 0x18060a978)
NtClose (Address: 0x18060a878)
NtCreateFile (Address: 0x18060a870)
NtFsControlFile (Address: 0x18060a880)
NtMapViewOfSection (Address: 0x18060aa28)
NtOpenFile (Address: 0x18060a898)
NtOpenProcessToken (Address: 0x18060aa08)
NtOpenThreadToken (Address: 0x18060a9c8)
NtPowerInformation (Address: 0x18060a950)
NtQueryInformationFile (Address: 0x18060a860)
NtQueryInformationProcess (Address: 0x18060a940)
NtQueryInformationThread (Address: 0x18060a9e8)
NtQueryInformationToken (Address: 0x18060aa10)
NtQueryKey (Address: 0x18060a9f0)
NtQueryObject (Address: 0x18060a9f8)
NtQuerySystemInformation (Address: 0x18060aa48)
NtQueryWnfStateData (Address: 0x18060a928)
NtSetInformationFile (Address: 0x18060a890)
NtSetInformationToken (Address: 0x18060aa00)
NtUnmapViewOfSection (Address: 0x18060aa18)
RtlAcquireResourceExclusive (Address: 0x18060a820)
RtlCheckRegistryKey (Address: 0x18060aa40)
RtlCreateEnvironment (Address: 0x18060a8d0)
RtlDeleteResource (Address: 0x18060a840)
RtlDeriveCapabilitySidsFromName (Address: 0x18060a998)
RtlDestroyEnvironment (Address: 0x18060a8e0)
RtlDllShutdownInProgress (Address: 0x18060a9c0)
RtlDosPathNameToNtPathName_U_WithStatus (Address: 0x18060a8a0)
RtlExpandEnvironmentStrings_U (Address: 0x18060a8c8)
RtlFreeHeap (Address: 0x18060a8a8)
RtlGetNtProductType (Address: 0x18060a988)
RtlGetNtSystemRoot (Address: 0x18060aa30)
RtlImageNtHeaderEx (Address: 0x18060aa20)
RtlInitializeResource (Address: 0x18060a838)
RtlInitUnicodeString (Address: 0x18060a850)
RtlInitUnicodeStringEx (Address: 0x18060a8b0)
RtlIsNonEmptyDirectoryReparsePointAllowed (Address: 0x18060a9b8)
RtlIsPartialPlaceholder (Address: 0x18060aa50)
RtlMapGenericMask (Address: 0x18060a980)
RtlNtStatusToDosError (Address: 0x18060a868)
RtlNtStatusToDosErrorNoTeb (Address: 0x18060a9d8)
RtlPrefixString (Address: 0x18060a858)
RtlPublishWnfStateData (Address: 0x18060a930)
RtlQueryEnvironmentVariable_U (Address: 0x18060a8b8)
RtlQueryRegistryValuesEx (Address: 0x18060aa38)
RtlQueryResourcePolicy (Address: 0x18060a848)
RtlQueryWnfStateData (Address: 0x18060a9e0)
RtlRandomEx (Address: 0x18060a9a8)
RtlReleaseResource (Address: 0x18060a818)
RtlSetCurrentEnvironment (Address: 0x18060a8d8)
RtlSetEnvironmentVariable (Address: 0x18060a8c0)
RtlSubscribeWnfStateChangeNotification (Address: 0x18060a830)
RtlUnicodeStringToOemString (Address: 0x18060a888)
RtlUnsubscribeWnfStateChangeNotification (Address: 0x18060a828)
ShipAssert (Address: 0x18060a9b0)
WinSqmAddToStream (Address: 0x18060a990)
WinSqmAddToStreamEx (Address: 0x18060a9a0)
WinSqmIncrementDWORD (Address: 0x18060a938)
WinSqmSetDWORD (Address: 0x18060a948)
ZwQueryWnfStateData (Address: 0x18060aa58)

USER32.dll

(Address: 0x180608b50)
(Address: 0x180608cb0)
(Address: 0x180608e40)
(Address: 0x180608930)
(Address: 0x1806089e0)
(Address: 0x180608a48)
ActivateKeyboardLayout (Address: 0x180608ab8)
AdjustWindowRect (Address: 0x180608cd0)
AdjustWindowRectEx (Address: 0x180608d18)
AdjustWindowRectExForDpi (Address: 0x180608b38)
AllowSetForegroundWindow (Address: 0x180608f40)
AnimateWindow (Address: 0x1806088d8)
AppendMenuW (Address: 0x180608ca0)
AreDpiAwarenessContextsEqual (Address: 0x1806091d0)
AttachThreadInput (Address: 0x180608d30)
BeginDeferWindowPos (Address: 0x1806091d8)
BeginPaint (Address: 0x180608d80)
BroadcastSystemMessageW (Address: 0x180608bc0)
CallNextHookEx (Address: 0x180608b10)
CallWindowProcW (Address: 0x180608b88)
ChangeClipboardChain (Address: 0x180608c80)
ChangeWindowMessageFilterEx (Address: 0x180608dc8)
CheckDlgButton (Address: 0x1806090a0)
CheckMenuItem (Address: 0x180608c90)
CheckMenuRadioItem (Address: 0x180608c98)
CheckRadioButton (Address: 0x180608a08)
ChildWindowFromPoint (Address: 0x1806088e8)
ClientToScreen (Address: 0x180608a18)
CloseClipboard (Address: 0x180608be8)
CloseDesktop (Address: 0x180608c18)
CloseGestureInfoHandle (Address: 0x180608c68)
CopyAcceleratorTableW (Address: 0x180608d00)
CopyIcon (Address: 0x180608ee8)
CopyImage (Address: 0x180608d70)
CopyRect (Address: 0x180608af8)
CountClipboardFormats (Address: 0x180608f78)
CreateAcceleratorTableW (Address: 0x1806089f8)
CreateDialogIndirectParamW (Address: 0x1806088f0)
CreateDialogParamW (Address: 0x1806088f8)
CreateMenu (Address: 0x180608c40)
CreatePopupMenu (Address: 0x1806090c0)
CreateWindowExW (Address: 0x180608de8)
CreateWindowInBand (Address: 0x180608c28)
CreateWindowIndirect (Address: 0x180608ad8)
DdeCreateDataHandle (Address: 0x1806089a0)
DdeCreateStringHandleW (Address: 0x180608998)
DdeDisconnect (Address: 0x180608980)
DdeFreeStringHandle (Address: 0x180608990)
DdeGetData (Address: 0x1806089b0)
DdeGetLastError (Address: 0x1806089a8)
DdeInitializeW (Address: 0x180608968)
DdeNameService (Address: 0x180608978)
DdeQueryConvInfo (Address: 0x1806089b8)
DdeQueryStringW (Address: 0x180608988)
DdeUninitialize (Address: 0x180608970)
DeferWindowPos (Address: 0x180608cf0)
DefWindowProcA (Address: 0x180608d38)
DefWindowProcW (Address: 0x180609010)
DeleteMenu (Address: 0x1806090b0)
DeregisterShellHookWindow (Address: 0x180608d50)
DestroyAcceleratorTable (Address: 0x180608cf8)
DestroyIcon (Address: 0x1806090f0)
DestroyMenu (Address: 0x1806090b8)
DestroyWindow (Address: 0x180608fd8)
DialogBoxIndirectParamW (Address: 0x180608900)
DialogBoxParamW (Address: 0x180608ba8)
DispatchMessageW (Address: 0x1806090d8)
DisplayConfigGetDeviceInfo (Address: 0x180608950)
DrawEdge (Address: 0x180608c78)
DrawFocusRect (Address: 0x1806090f8)
DrawIcon (Address: 0x180609100)
DrawIconEx (Address: 0x1806091c0)
DrawTextExW (Address: 0x180608a30)
DrawTextW (Address: 0x180608f18)
EmptyClipboard (Address: 0x180608920)
EnableMenuItem (Address: 0x180608f90)
EnableWindow (Address: 0x180609040)
EndDeferWindowPos (Address: 0x180608cc8)
EndDialog (Address: 0x180609110)
EndMenu (Address: 0x180608c48)
EndPaint (Address: 0x180608d78)
EnumChildWindows (Address: 0x180608be0)
EnumDisplayDevicesW (Address: 0x180608e70)
EnumDisplayMonitors (Address: 0x1806089f0)
EnumDisplaySettingsW (Address: 0x1806089c8)
EnumPropsExW (Address: 0x180608dd8)
EnumWindows (Address: 0x180608ef0)
EqualRect (Address: 0x180608e08)
ExitWindowsEx (Address: 0x180608fc0)
FillRect (Address: 0x180608f28)
FindWindowExW (Address: 0x180608ac0)
FindWindowW (Address: 0x180609020)
GetAncestor (Address: 0x180609038)
GetAsyncKeyState (Address: 0x180608e38)
GetCapture (Address: 0x180608aa0)
GetClassInfoExW (Address: 0x180608b80)
GetClassInfoW (Address: 0x180608d68)
GetClassLongPtrW (Address: 0x1806089d0)
GetClassLongW (Address: 0x1806091b0)
GetClassNameW (Address: 0x180609028)
GetClientRect (Address: 0x180609138)
GetClipboardData (Address: 0x180608bf8)
GetClipboardOwner (Address: 0x180608f88)
GetComboBoxInfo (Address: 0x180608da8)
GetCurrentInputMessageSource (Address: 0x1806091b8)
GetCursor (Address: 0x1806091a0)
GetCursorPos (Address: 0x180608ff0)
GetDC (Address: 0x180608eb0)
GetDesktopWindow (Address: 0x1806091e0)
GetDialogBaseUnits (Address: 0x180608a70)
GetDisplayConfigBufferSizes (Address: 0x180608ea0)
GetDlgCtrlID (Address: 0x180608cd8)
GetDlgItem (Address: 0x180609158)
GetDlgItemInt (Address: 0x180608a20)
GetDlgItemTextW (Address: 0x180609180)
GetDoubleClickTime (Address: 0x180608e50)
GetDpiForSystem (Address: 0x180608bb0)
GetDpiForWindow (Address: 0x180608bb8)
GetFocus (Address: 0x180608fc8)
GetForegroundWindow (Address: 0x180608e30)
GetGestureInfo (Address: 0x180608c70)
GetIconInfo (Address: 0x180608dd0)
GetKeyboardLayout (Address: 0x180608ec8)
GetKeyState (Address: 0x180608f98)
GetLastActivePopup (Address: 0x180608fe0)
GetLastInputInfo (Address: 0x180608b08)
GetMenuDefaultItem (Address: 0x180608fa8)
GetMenuInfo (Address: 0x180608928)
GetMenuItemCount (Address: 0x180608fb8)
GetMenuItemID (Address: 0x180608f58)
GetMenuItemInfoW (Address: 0x180608fb0)
GetMenuState (Address: 0x180608f70)
GetMenuStringW (Address: 0x180608fa0)
GetMessageExtraInfo (Address: 0x180608c50)
GetMessagePos (Address: 0x180608910)
GetMessageTime (Address: 0x180608a10)
GetMessageW (Address: 0x1806090e8)
GetMonitorInfoW (Address: 0x180608e18)
GetParent (Address: 0x180609090)
GetPointerDevices (Address: 0x180608b00)
GetProcessDefaultLayout (Address: 0x180608908)
GetPropW (Address: 0x180608ef8)
GetScrollInfo (Address: 0x180608e88)
GetShellWindow (Address: 0x180608bc8)
GetSubMenu (Address: 0x180609080)
GetSysColor (Address: 0x180609108)
GetSysColorBrush (Address: 0x180608f20)
GetSystemMenu (Address: 0x180608b28)
GetSystemMetrics (Address: 0x180609140)
GetSystemMetricsForDpi (Address: 0x180608ac8)
GetTaskmanWindow (Address: 0x180608d60)
GetUpdateRect (Address: 0x180608aa8)
GetWindow (Address: 0x180609018)
GetWindowBand (Address: 0x180608de0)
GetWindowDC (Address: 0x180608ae8)
GetWindowDpiAwarenessContext (Address: 0x180608d20)
GetWindowLongPtrW (Address: 0x180609118)
GetWindowLongW (Address: 0x180608e98)
GetWindowPlacement (Address: 0x180608bd0)
GetWindowRect (Address: 0x180608ff8)
GetWindowTextLengthW (Address: 0x180608db8)
GetWindowTextW (Address: 0x180609128)
GetWindowThreadProcessId (Address: 0x180608ed0)
HideCaret (Address: 0x1806088c0)
InflateRect (Address: 0x180608e90)
InsertMenuItemW (Address: 0x180608c88)
InsertMenuW (Address: 0x180608f50)
IntersectRect (Address: 0x180608e10)
InvalidateRect (Address: 0x180609160)
InvalidateRgn (Address: 0x180608da0)
IsChild (Address: 0x180608e58)
IsDialogMessageW (Address: 0x180608b48)
IsDlgButtonChecked (Address: 0x180609098)
IsHungAppWindow (Address: 0x180608f80)
IsIconic (Address: 0x180608ed8)
IsMenu (Address: 0x180608f38)
IsRectEmpty (Address: 0x180608b70)
IsSETEnabled (Address: 0x180608df8)
IsWindow (Address: 0x180608ee0)
IsWindowEnabled (Address: 0x180608c10)
IsWindowUnicode (Address: 0x180608d40)
IsWindowVisible (Address: 0x180608e28)
IsWinEventHookInstalled (Address: 0x180608918)
KillTimer (Address: 0x180609030)
LoadAcceleratorsW (Address: 0x180608d08)
LoadCursorW (Address: 0x180609168)
LoadIconW (Address: 0x180608d88)
LoadImageW (Address: 0x180608b58)
LoadMenuW (Address: 0x180609078)
LockSetForegroundWindow (Address: 0x1806088d0)
MapDialogRect (Address: 0x180608d98)
MapWindowPoints (Address: 0x180608d90)
MessageBeep (Address: 0x180608f48)
MessageBoxW (Address: 0x180608ce8)
ModifyMenuW (Address: 0x180608f68)
MonitorFromPoint (Address: 0x180608b98)
MonitorFromRect (Address: 0x180608dc0)
MonitorFromWindow (Address: 0x180608e20)
MoveWindow (Address: 0x180608d10)
MsgWaitForMultipleObjects (Address: 0x180608bd8)
MsgWaitForMultipleObjectsEx (Address: 0x180609048)
NotifyWinEvent (Address: 0x180608cb8)
OffsetRect (Address: 0x180608e68)
OpenClipboard (Address: 0x180608c00)
OpenInputDesktop (Address: 0x180608c20)
PeekMessageW (Address: 0x180609050)
PostMessageW (Address: 0x1806090c8)
PostQuitMessage (Address: 0x180609058)
PostThreadMessageW (Address: 0x180608b30)
PtInRect (Address: 0x180608f10)
QueryDisplayConfig (Address: 0x1806091a8)
RedrawWindow (Address: 0x180608c08)
RegisterClassExW (Address: 0x180608e80)
RegisterClassW (Address: 0x180609008)
RegisterClipboardFormatW (Address: 0x180609000)
RegisterPowerSettingNotification (Address: 0x180608948)
RegisterShellHookWindow (Address: 0x180608d48)
RegisterWindowMessageA (Address: 0x180608a68)
RegisterWindowMessageW (Address: 0x180608e00)
ReleaseCapture (Address: 0x180608a98)
ReleaseDC (Address: 0x180608ea8)
RemoveMenu (Address: 0x180609088)
RemovePropW (Address: 0x180608f00)
ScreenToClient (Address: 0x180609190)
SendDlgItemMessageW (Address: 0x180609188)
SendMessageTimeoutW (Address: 0x180608ec0)
SendMessageW (Address: 0x180609198)
SendNotifyMessageW (Address: 0x180608eb8)
SetActiveWindow (Address: 0x180608db0)
SetCapture (Address: 0x180608a90)
SetClipboardData (Address: 0x180608bf0)
SetClipboardViewer (Address: 0x180608c30)
SetCoalescableTimer (Address: 0x180608a38)
SetCursor (Address: 0x180609170)
SetDialogDpiChangeBehavior (Address: 0x180608b40)
SetDlgItemInt (Address: 0x180608a28)
SetDlgItemTextA (Address: 0x180608ce0)
SetDlgItemTextW (Address: 0x180609178)
SetFocus (Address: 0x180608fd0)
SetForegroundWindow (Address: 0x180609060)
SetGestureConfig (Address: 0x180608c60)
SetLayeredWindowAttributes (Address: 0x180608ae0)
SetMenu (Address: 0x1806088e0)
SetMenuDefaultItem (Address: 0x180608f60)
SetMenuInfo (Address: 0x180608af0)
SetMenuItemInfoW (Address: 0x180608f30)
SetMessageExtraInfo (Address: 0x180608ca8)
SetParent (Address: 0x180608b78)
SetProcessDPIAware (Address: 0x1806090d0)
SetProgmanWindow (Address: 0x1806089e8)
SetPropW (Address: 0x180608f08)
SetRect (Address: 0x180608b68)
SetRectEmpty (Address: 0x180608ba0)
SetScrollInfo (Address: 0x180608a58)
SetScrollPos (Address: 0x180608a40)
SetShellWindow (Address: 0x1806089d8)
SetSysColors (Address: 0x180608938)
SetTaskmanWindow (Address: 0x180608d58)
SetThreadDpiAwarenessContext (Address: 0x180608d28)
SetTimer (Address: 0x1806090a8)
SetWindowCompositionAttribute (Address: 0x180608e78)
SetWindowLongPtrW (Address: 0x180609120)
SetWindowLongW (Address: 0x180608b90)
SetWindowPos (Address: 0x180609130)
SetWindowRgn (Address: 0x180608a60)
SetWindowsHookExW (Address: 0x180608b20)
SetWindowTextW (Address: 0x180609150)
ShowCaret (Address: 0x1806088c8)
ShowScrollBar (Address: 0x180608a50)
ShowWindow (Address: 0x180609148)
ShutdownBlockReasonCreate (Address: 0x180609070)
ShutdownBlockReasonDestroy (Address: 0x180609068)
SubtractRect (Address: 0x180608ad0)
SwitchToThisWindow (Address: 0x180608fe8)
SystemParametersInfoA (Address: 0x180608a80)
SystemParametersInfoForDpi (Address: 0x180608a78)
SystemParametersInfoW (Address: 0x180608df0)
TrackMouseEvent (Address: 0x180608ab0)
TrackPopupMenu (Address: 0x180608cc0)
TrackPopupMenuEx (Address: 0x180608b60)
TranslateAcceleratorW (Address: 0x180608c38)
TranslateMessage (Address: 0x1806090e0)
UnhookWindowsHookEx (Address: 0x180608b18)
UnionRect (Address: 0x180608e60)
UnpackDDElParam (Address: 0x180608960)
UnregisterPowerSettingNotification (Address: 0x180608940)
UpdateLayeredWindow (Address: 0x180608e48)
UpdateWindow (Address: 0x180608c58)
WaitMessage (Address: 0x1806089c0)
WindowFromDC (Address: 0x1806091c8)
WindowFromPoint (Address: 0x180608a00)
WinHelpW (Address: 0x180608a88)
wsprintfW (Address: 0x180608958)