shell32.dll
Description: Windows Shell Common Dll
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.26100.7920
Architecture: 64-bit
Operating System: Windows NT
SHA256: 4759511bcd8008e1e4abb8beafb7f530
File Size: 7.4 MB
Uploaded At: May 9, 2026, 10:50 p.m.
Views: 31
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess, WriteProcessMemory
Exported Functions
- SHChangeNotifyRegister (Ordinal: 2, Address: 0x193900)
- SHDefExtractIconA (Ordinal: 3, Address: 0x2030d0)
- SHChangeNotifyDeregister (Ordinal: 4, Address: 0x19f5c0)
- (Ordinal: 5, Address: 0x6e6fa9)
- SHDefExtractIconW (Ordinal: 6, Address: 0x2030f0)
- (Ordinal: 7, Address: 0x6e71f6)
- (Ordinal: 8, Address: 0x6e7204)
- PifMgr_OpenProperties (Ordinal: 9, Address: 0x19dc70)
- PifMgr_GetProperties (Ordinal: 10, Address: 0x19dc70)
- PifMgr_SetProperties (Ordinal: 11, Address: 0x19dc70)
- (Ordinal: 12, Address: 0x2d2b00)
- PifMgr_CloseProperties (Ordinal: 13, Address: 0x2070f0)
- SHStartNetConnectionDialogW (Ordinal: 14, Address: 0x2c90c0)
- (Ordinal: 15, Address: 0x202690)
- ILFindLastID (Ordinal: 16, Address: 0x202650)
- ILRemoveLastID (Ordinal: 17, Address: 0x202770)
- ILClone (Ordinal: 18, Address: 0x202590)
- ILCloneFirst (Ordinal: 19, Address: 0x2025b0)
- (Ordinal: 20, Address: 0x202590)
- ILIsEqual (Ordinal: 21, Address: 0x202710)
- DAD_DragEnterEx2 (Ordinal: 22, Address: 0x250ae0)
- ILIsParent (Ordinal: 23, Address: 0x202730)
- ILFindChild (Ordinal: 24, Address: 0x202630)
- ILCombine (Ordinal: 25, Address: 0x2025d0)
- (Ordinal: 26, Address: 0x6e6eab)
- ILSaveToStream (Ordinal: 27, Address: 0x202790)
- SHILCreateFromPath (Ordinal: 28, Address: 0x2036f0)
- (Ordinal: 29, Address: 0x202a70)
- (Ordinal: 30, Address: 0x6e68a1)
- (Ordinal: 31, Address: 0x6e68dd)
- (Ordinal: 32, Address: 0x6e6887)
- (Ordinal: 33, Address: 0x6e6a96)
- (Ordinal: 34, Address: 0x6e68f8)
- (Ordinal: 35, Address: 0x202b50)
- (Ordinal: 36, Address: 0x202970)
- (Ordinal: 37, Address: 0x6e68c8)
- (Ordinal: 38, Address: 0x6e6af5)
- (Ordinal: 39, Address: 0x6e69d7)
- (Ordinal: 40, Address: 0x6e698f)
- IsLFNDriveA (Ordinal: 41, Address: 0x2028b0)
- IsLFNDriveW (Ordinal: 42, Address: 0x202890)
- PathIsExe (Ordinal: 43, Address: 0x202a50)
- (Ordinal: 44, Address: 0x244880)
- (Ordinal: 45, Address: 0x2029b0)
- (Ordinal: 46, Address: 0x6e6a23)
- PathMakeUniqueName (Ordinal: 47, Address: 0x202b10)
- (Ordinal: 48, Address: 0x6e6ad9)
- PathQualify (Ordinal: 49, Address: 0x202b30)
- (Ordinal: 50, Address: 0x6e6b0c)
- PathResolve (Ordinal: 51, Address: 0x202b70)
- (Ordinal: 52, Address: 0x6e692a)
- (Ordinal: 53, Address: 0x6e6ee2)
- (Ordinal: 54, Address: 0x251540)
- (Ordinal: 55, Address: 0x6e6a65)
- (Ordinal: 56, Address: 0x6e6b25)
- (Ordinal: 57, Address: 0x6e693f)
- (Ordinal: 58, Address: 0x202950)
- RestartDialog (Ordinal: 59, Address: 0x251560)
- (Ordinal: 60, Address: 0x2514e0)
- (Ordinal: 61, Address: 0x2878e0)
- PickIconDlg (Ordinal: 62, Address: 0x206270)
- GetFileNameFromBrowse (Ordinal: 63, Address: 0x287890)
- DriveType (Ordinal: 64, Address: 0x1f5280)
- (Ordinal: 65, Address: 0x202810)
- IsNetDrive (Ordinal: 66, Address: 0x263810)
- Shell_MergeMenus (Ordinal: 67, Address: 0x203c70)
- SHGetSetSettings (Ordinal: 68, Address: 0x203610)
- (Ordinal: 69, Address: 0x203490)
- (Ordinal: 70, Address: 0x205680)
- Shell_GetImageLists (Ordinal: 71, Address: 0x203c50)
- Shell_GetCachedImageIndex (Ordinal: 72, Address: 0x203bf0)
- SHShellFolderView_Message (Ordinal: 73, Address: 0x2c7830)
- SHCreateStdEnumFmtEtc (Ordinal: 74, Address: 0x203090)
- PathYetAnotherMakeUniqueName (Ordinal: 75, Address: 0x202bb0)
- (Ordinal: 76, Address: 0x202370)
- SHMapPIDLToSystemImageListIndex (Ordinal: 77, Address: 0x203810)
- (Ordinal: 78, Address: 0x6e6f24)
- (Ordinal: 79, Address: 0x6e72f7)
- SHOpenPropSheetW (Ordinal: 80, Address: 0x2d1ee0)
- OpenAs_RunDLL (Ordinal: 81, Address: 0x1a0650)
- (Ordinal: 82, Address: 0x6e6c72)
- CIDLData_CreateFromIDArray (Ordinal: 83, Address: 0x570d40)
- (Ordinal: 84, Address: 0x6e71a5)
- OpenRegStream (Ordinal: 85, Address: 0x202930)
- (Ordinal: 86, Address: 0x6e7271)
- (Ordinal: 87, Address: 0x6e727e)
- SHDoDragDrop (Ordinal: 88, Address: 0x250cf0)
- SHCloneSpecialIDList (Ordinal: 89, Address: 0x202cf0)
- SHFindFiles (Ordinal: 90, Address: 0x2031d0)
- (Ordinal: 91, Address: 0x2031b0)
- PathGetShortPath (Ordinal: 92, Address: 0x202a10)
- (Ordinal: 93, Address: 0x6e9542)
- (Ordinal: 94, Address: 0x203d10)
- (Ordinal: 95, Address: 0x203790)
- (Ordinal: 96, Address: 0x6e72dd)
- (Ordinal: 97, Address: 0x19dc70)
- SHGetRealIDL (Ordinal: 98, Address: 0x2035d0)
- (Ordinal: 99, Address: 0x203ab0)
- SHRestricted (Ordinal: 100, Address: 0x203910)
- (Ordinal: 101, Address: 0x6e6dcc)
- SHCoCreateInstance (Ordinal: 102, Address: 0x6e7587)
- SignalFileOpen (Ordinal: 103, Address: 0x155c10)
- (Ordinal: 104, Address: 0x6e6d0e)
- (Ordinal: 105, Address: 0x6e6d5b)
- (Ordinal: 106, Address: 0x6e6d81)
- (Ordinal: 107, Address: 0x6e6d9a)
- (Ordinal: 108, Address: 0x6e6db3)
- (Ordinal: 109, Address: 0x6e6dd8)
- (Ordinal: 110, Address: 0x6e6cce)
- (Ordinal: 111, Address: 0x6e6dfe)
- (Ordinal: 112, Address: 0x6e6e31)
- (Ordinal: 113, Address: 0x6e6cda)
- (Ordinal: 114, Address: 0x6e6ce7)
- (Ordinal: 115, Address: 0x6e6cc1)
- (Ordinal: 116, Address: 0x6e6e4b)
- (Ordinal: 117, Address: 0x6e6d1a)
- (Ordinal: 118, Address: 0x6e6d4e)
- IsLFNDrive (Ordinal: 119, Address: 0x202890)
- (Ordinal: 120, Address: 0x6e6ca7)
- (Ordinal: 121, Address: 0x6e70da)
- (Ordinal: 122, Address: 0x6e6f75)
- (Ordinal: 123, Address: 0x6e70f4)
- (Ordinal: 124, Address: 0x6e6cb4)
- OpenAs_RunDLLA (Ordinal: 125, Address: 0x1a0650)
- (Ordinal: 126, Address: 0x6e723a)
- (Ordinal: 127, Address: 0x6e72cf)
- (Ordinal: 128, Address: 0x3df50)
- DAD_AutoScroll (Ordinal: 129, Address: 0x202210)
- (Ordinal: 130, Address: 0x6e6c58)
- DAD_DragEnterEx (Ordinal: 131, Address: 0x202230)
- DAD_DragLeave (Ordinal: 132, Address: 0x250c10)
- OpenAs_RunDLLW (Ordinal: 133, Address: 0x210c60)
- DAD_DragMove (Ordinal: 134, Address: 0xb5400)
- PrepareDiscForBurnRunDllW (Ordinal: 135, Address: 0x214fb0)
- DAD_SetDragImage (Ordinal: 136, Address: 0x202250)
- DAD_ShowDragImage (Ordinal: 137, Address: 0x202270)
- PrintersGetCommand_RunDLL (Ordinal: 138, Address: 0x222340)
- PrintersGetCommand_RunDLLA (Ordinal: 139, Address: 0x222340)
- (Ordinal: 140, Address: 0x6e6d27)
- (Ordinal: 141, Address: 0x6e6d34)
- (Ordinal: 142, Address: 0x6e6d41)
- (Ordinal: 143, Address: 0x6e6d74)
- (Ordinal: 144, Address: 0x6e6d8d)
- (Ordinal: 145, Address: 0x6e6912)
- (Ordinal: 146, Address: 0x6e6f68)
- SHCLSIDFromString (Ordinal: 147, Address: 0x202cd0)
- (Ordinal: 148, Address: 0x6e7212)
- SHFind_InitMenuPopup (Ordinal: 149, Address: 0x2cbb80)
- PrintersGetCommand_RunDLLW (Ordinal: 150, Address: 0x222430)
- (Ordinal: 151, Address: 0x6e71dc)
- ILGetSize (Ordinal: 152, Address: 0x2026f0)
- ILGetNext (Ordinal: 153, Address: 0x2026d0)
- ILAppendID (Ordinal: 154, Address: 0x202570)
- ILFree (Ordinal: 155, Address: 0x202670)
- (Ordinal: 156, Address: 0x202670)
- ILCreateFromPath (Ordinal: 157, Address: 0x2025f0)
- (Ordinal: 158, Address: 0x6e6f3f)
- (Ordinal: 159, Address: 0x6e696c)
- (Ordinal: 160, Address: 0x203830)
- (Ordinal: 161, Address: 0x6e728b)
- SHSimpleIDListFromPath (Ordinal: 162, Address: 0x2039f0)
- (Ordinal: 163, Address: 0x6e72ea)
- Win32DeleteFile (Ordinal: 164, Address: 0x203cf0)
- SHCreateDirectory (Ordinal: 165, Address: 0x202dd0)
- (Ordinal: 166, Address: 0x6e6bea)
- SHAddFromPropSheetExtArray (Ordinal: 167, Address: 0x299030)
- SHCreatePropSheetExtArray (Ordinal: 168, Address: 0x2990c0)
- SHDestroyPropSheetExtArray (Ordinal: 169, Address: 0x2992b0)
- SHReplaceFromPropSheetExtArray (Ordinal: 170, Address: 0x299300)
- PathCleanupSpec (Ordinal: 171, Address: 0x1fb470)
- (Ordinal: 172, Address: 0x202f30)
- SHValidateUNC (Ordinal: 173, Address: 0x203a90)
- SHCreateShellFolderViewEx (Ordinal: 174, Address: 0x2c7790)
- (Ordinal: 175, Address: 0x15fb20)
- SHSetInstanceExplorer (Ordinal: 176, Address: 0x2639a0)
- (Ordinal: 177, Address: 0x6e6c65)
- SHObjectProperties (Ordinal: 178, Address: 0x223760)
- SHGetNewLinkInfoA (Ordinal: 179, Address: 0x2034b0)
- SHGetNewLinkInfoW (Ordinal: 180, Address: 0x2034d0)
- (Ordinal: 181, Address: 0x291c60)
- ShellMessageBoxW (Ordinal: 182, Address: 0x6e92cd)
- ShellMessageBoxA (Ordinal: 183, Address: 0x6e92a3)
- (Ordinal: 184, Address: 0x202050)
- (Ordinal: 185, Address: 0x6e717b)
- (Ordinal: 186, Address: 0x2026b0)
- (Ordinal: 187, Address: 0x6e6e9d)
- (Ordinal: 188, Address: 0x18e640)
- ILCreateFromPathA (Ordinal: 189, Address: 0x202610)
- ILCreateFromPathW (Ordinal: 190, Address: 0x2025f0)
- SHUpdateImageA (Ordinal: 191, Address: 0x298ec0)
- SHUpdateImageW (Ordinal: 192, Address: 0x298ee0)
- SHHandleUpdateImage (Ordinal: 193, Address: 0x1ad560)
- (Ordinal: 194, Address: 0x2990d0)
- SHFree (Ordinal: 195, Address: 0x203210)
- SHAlloc (Ordinal: 196, Address: 0x202c10)
- (Ordinal: 197, Address: 0x6e716e)
- (Ordinal: 198, Address: 0x6e6f82)
- RealShellExecuteA (Ordinal: 199, Address: 0x201f90)
- (Ordinal: 200, Address: 0xb8900)
- (Ordinal: 201, Address: 0x48d050)
- (Ordinal: 202, Address: 0x6e6c7f)
- (Ordinal: 203, Address: 0x202030)
- (Ordinal: 204, Address: 0x203c90)
- (Ordinal: 205, Address: 0x222df0)
- (Ordinal: 206, Address: 0x48d040)
- RealShellExecuteExA (Ordinal: 207, Address: 0x201fb0)
- RealShellExecuteExW (Ordinal: 208, Address: 0x201fd0)
- (Ordinal: 209, Address: 0x2027b0)
- (Ordinal: 210, Address: 0x2028f0)
- (Ordinal: 211, Address: 0x223010)
- (Ordinal: 212, Address: 0x222c90)
- (Ordinal: 213, Address: 0x223030)
- (Ordinal: 214, Address: 0x223160)
- (Ordinal: 215, Address: 0x2c90c0)
- (Ordinal: 216, Address: 0x6e6e17)
- (Ordinal: 217, Address: 0x6e6e3e)
- (Ordinal: 218, Address: 0x6e6de4)
- (Ordinal: 219, Address: 0x6e6df1)
- (Ordinal: 220, Address: 0x6e6da6)
- (Ordinal: 221, Address: 0x6e6d67)
- (Ordinal: 222, Address: 0x6e6dbf)
- (Ordinal: 223, Address: 0x6e6e24)
- (Ordinal: 224, Address: 0x6e6d01)
- (Ordinal: 225, Address: 0x6e6e0a)
- RealShellExecuteW (Ordinal: 226, Address: 0x201ff0)
- (Ordinal: 227, Address: 0x6e6cf4)
- SHHelpShortcuts_RunDLL (Ordinal: 228, Address: 0x223530)
- SHHelpShortcuts_RunDLLA (Ordinal: 229, Address: 0x223530)
- (Ordinal: 230, Address: 0x6e6e58)
- SHSetFolderPathA (Ordinal: 231, Address: 0x263960)
- SHSetFolderPathW (Ordinal: 232, Address: 0x263980)
- (Ordinal: 233, Address: 0x6e7153)
- (Ordinal: 234, Address: 0x6e72a7)
- (Ordinal: 235, Address: 0x6e721f)
- (Ordinal: 236, Address: 0x203a50)
- (Ordinal: 237, Address: 0x2039d0)
- SHHelpShortcuts_RunDLLW (Ordinal: 238, Address: 0x2235e0)
- PathIsSlowW (Ordinal: 239, Address: 0x202ab0)
- PathIsSlowA (Ordinal: 240, Address: 0x202a90)
- (Ordinal: 241, Address: 0x2036d0)
- (Ordinal: 242, Address: 0x6e712b)
- (Ordinal: 243, Address: 0x6e7299)
- (Ordinal: 244, Address: 0x2039b0)
- SHTestTokenMembership (Ordinal: 245, Address: 0x203a30)
- (Ordinal: 246, Address: 0x6e7197)
- (Ordinal: 247, Address: 0x6e7101)
- (Ordinal: 248, Address: 0x6e7160)
- (Ordinal: 249, Address: 0x6e6a3a)
- (Ordinal: 250, Address: 0x6e6ab0)
- (Ordinal: 251, Address: 0x6e6a7e)
- (Ordinal: 252, Address: 0x6e69ea)
- (Ordinal: 253, Address: 0x6e71b2)
- (Ordinal: 254, Address: 0x2514c0)
- AppCompat_RunDLLW (Ordinal: 255, Address: 0x229aa0)
- SHCreateShellFolderView (Ordinal: 256, Address: 0xbf240)
- (Ordinal: 257, Address: 0x19dc70)
- (Ordinal: 258, Address: 0x28fcc0)
- (Ordinal: 259, Address: 0x190830)
- (Ordinal: 260, Address: 0x202190)
- (Ordinal: 261, Address: 0x2cc7a0)
- (Ordinal: 262, Address: 0x2ccaf0)
- AssocCreateForClasses (Ordinal: 263, Address: 0x1fb060)
- (Ordinal: 264, Address: 0x2021b0)
- (Ordinal: 265, Address: 0x203af0)
- (Ordinal: 266, Address: 0x203b10)
- AssocElemCreateForKey (Ordinal: 267, Address: 0x2020b0)
- AssocGetDetailsOfPropKey (Ordinal: 268, Address: 0x1fb100)
- CallFileCopyHook (Ordinal: 269, Address: 0x234f40)
- (Ordinal: 270, Address: 0x2038f0)
- (Ordinal: 271, Address: 0x2d2ba0)
- CheckEscapesW (Ordinal: 272, Address: 0x202110)
- CommandLineToArgvW (Ordinal: 273, Address: 0x160420)
- Control_RunDLL (Ordinal: 274, Address: 0x2447d0)
- Control_RunDLLA (Ordinal: 275, Address: 0x2447d0)
- Control_RunDLLAsUserW (Ordinal: 276, Address: 0x244850)
- Control_RunDLLW (Ordinal: 277, Address: 0x2448b0)
- DllCanUnloadNow (Ordinal: 278, Address: 0x11c500)
- DllGetActivationFactory (Ordinal: 279, Address: 0x251ec0)
- DllGetClassObject (Ordinal: 280, Address: 0x3df50)
- DllGetVersion (Ordinal: 281, Address: 0x25c220)
- DllInstall (Ordinal: 282, Address: 0x25c2f0)
- DllRegisterServer (Ordinal: 283, Address: 0x19dc70)
- DllUnregisterServer (Ordinal: 284, Address: 0x19dc70)
- DoEnvironmentSubstA (Ordinal: 285, Address: 0x202290)
- DoEnvironmentSubstW (Ordinal: 286, Address: 0x2022b0)
- DragAcceptFiles (Ordinal: 287, Address: 0x2022d0)
- DragFinish (Ordinal: 288, Address: 0x2022f0)
- DragQueryFile (Ordinal: 289, Address: 0x202310)
- DragQueryFileA (Ordinal: 290, Address: 0x202310)
- DragQueryFileAorW (Ordinal: 291, Address: 0x202330)
- DragQueryFileW (Ordinal: 292, Address: 0x202350)
- DragQueryPoint (Ordinal: 293, Address: 0x202390)
- DuplicateIcon (Ordinal: 294, Address: 0x2023b0)
- ExtractAssociatedIconA (Ordinal: 295, Address: 0x2023d0)
- ExtractAssociatedIconExA (Ordinal: 296, Address: 0x2023f0)
- ExtractAssociatedIconExW (Ordinal: 297, Address: 0x202410)
- ExtractAssociatedIconW (Ordinal: 298, Address: 0x202430)
- ExtractIconA (Ordinal: 299, Address: 0x202450)
- ExtractIconEx (Ordinal: 300, Address: 0x202470)
- ExtractIconExA (Ordinal: 301, Address: 0x202470)
- ExtractIconExW (Ordinal: 302, Address: 0x202490)
- ExtractIconW (Ordinal: 303, Address: 0x2024b0)
- FindExecutableA (Ordinal: 304, Address: 0x2024f0)
- FindExecutableW (Ordinal: 305, Address: 0x202510)
- FreeIconList (Ordinal: 306, Address: 0x202530)
- GetCurrentProcessExplicitAppUserModelID (Ordinal: 307, Address: 0x1ad590)
- InitNetworkAddressControl (Ordinal: 308, Address: 0x1a4180)
- InternalExtractIconListA (Ordinal: 309, Address: 0x2027d0)
- InternalExtractIconListW (Ordinal: 310, Address: 0x2027f0)
- LaunchMSHelp_RunDLLW (Ordinal: 311, Address: 0x20b410)
- Options_RunDLL (Ordinal: 312, Address: 0x4923a0)
- Options_RunDLLA (Ordinal: 313, Address: 0x4923a0)
- Options_RunDLLW (Ordinal: 314, Address: 0x492400)
- RegenerateUserEnvironment (Ordinal: 315, Address: 0x208560)
- RunAsNewUser_RunDLLW (Ordinal: 316, Address: 0x20c820)
- SHAddDefaultPropertiesByExt (Ordinal: 317, Address: 0x202bf0)
- SHAddToRecentDocs (Ordinal: 318, Address: 0x1ad540)
- SHAppBarMessage (Ordinal: 319, Address: 0x4deb0)
- SHAssocEnumHandlers (Ordinal: 320, Address: 0x1fb120)
- SHAssocEnumHandlersForProtocolByApplication (Ordinal: 321, Address: 0x1fb1c0)
- SHBindToFolderIDListParent (Ordinal: 322, Address: 0x202c50)
- SHBindToFolderIDListParentEx (Ordinal: 323, Address: 0x202c70)
- SHBindToObject (Ordinal: 324, Address: 0x202c90)
- SHBindToParent (Ordinal: 325, Address: 0x202cb0)
- SHBrowseForFolder (Ordinal: 326, Address: 0x29dd50)
- SHBrowseForFolderA (Ordinal: 327, Address: 0x29dd50)
- SHBrowseForFolderW (Ordinal: 328, Address: 0x29e090)
- SHChangeNotify (Ordinal: 329, Address: 0x15f080)
- SHChangeNotifyRegisterThread (Ordinal: 330, Address: 0x1a9e30)
- SHChangeNotifySuspendResume (Ordinal: 331, Address: 0x298ea0)
- SHCoCreateInstanceWorker (Ordinal: 332, Address: 0x6e75d4)
- SHCreateAssociationRegistration (Ordinal: 333, Address: 0x202d30)
- SHCreateCategoryEnum (Ordinal: 334, Address: 0x2a0520)
- SHCreateDataObject (Ordinal: 335, Address: 0x202d50)
- SHCreateDefaultContextMenu (Ordinal: 336, Address: 0x898d0)
- SHCreateDefaultExtractIcon (Ordinal: 337, Address: 0x202d70)
- SHCreateDefaultPropertiesOp (Ordinal: 338, Address: 0x202d90)
- SHCreateDirectoryExA (Ordinal: 339, Address: 0x202df0)
- SHCreateDirectoryExW (Ordinal: 340, Address: 0x202e10)
- SHCreateDrvExtIcon (Ordinal: 341, Address: 0x128680)
- SHCreateItemFromIDList (Ordinal: 342, Address: 0x202e90)
- SHCreateItemFromParsingName (Ordinal: 343, Address: 0x202eb0)
- SHCreateItemFromRelativeName (Ordinal: 344, Address: 0x202ed0)
- SHCreateItemInKnownFolder (Ordinal: 345, Address: 0x202ef0)
- SHCreateItemWithParent (Ordinal: 346, Address: 0x202f10)
- SHCreateLocalServerRunDll (Ordinal: 347, Address: 0x19dda0)
- SHCreateProcessAsUserW (Ordinal: 348, Address: 0x202f90)
- SHCreateQueryCancelAutoPlayMoniker (Ordinal: 349, Address: 0x2c6fb0)
- SHCreateShellItem (Ordinal: 350, Address: 0x203030)
- SHCreateShellItemArray (Ordinal: 351, Address: 0x199ff0)
- SHCreateShellItemArrayFromDataObject (Ordinal: 352, Address: 0x19c910)
- SHCreateShellItemArrayFromIDLists (Ordinal: 353, Address: 0x203050)
- SHCreateShellItemArrayFromShellItem (Ordinal: 354, Address: 0x203070)
- SHELL32_AddToBackIconTable (Ordinal: 355, Address: 0x49ac0)
- SHELL32_AddToFrontIconTable (Ordinal: 356, Address: 0x1a55f0)
- SHELL32_AreAllItemsAvailable (Ordinal: 357, Address: 0x18ea20)
- SHELL32_CCommonPlacesFolder_CreateInstance (Ordinal: 358, Address: 0x2c8820)
- SHELL32_CDBurn_CloseSession (Ordinal: 359, Address: 0x2c8830)
- SHELL32_CDBurn_DriveSupportedForDataBurn (Ordinal: 360, Address: 0x2c8840)
- SHELL32_CDBurn_Erase (Ordinal: 361, Address: 0x2c8850)
- SHELL32_CDBurn_GetCDInfo (Ordinal: 362, Address: 0x1ad600)
- SHELL32_CDBurn_GetLiveFSDiscInfo (Ordinal: 363, Address: 0x1e3850)
- SHELL32_CDBurn_GetStagingPathOrNormalPath (Ordinal: 364, Address: 0x1a5c10)
- SHELL32_CDBurn_GetTaskInfo (Ordinal: 365, Address: 0x2c8860)
- SHELL32_CDBurn_IsBlankDisc (Ordinal: 366, Address: 0x2c8870)
- SHELL32_CDBurn_IsBlankDisc2 (Ordinal: 367, Address: 0x2c8880)
- SHELL32_CDBurn_IsLiveFS (Ordinal: 368, Address: 0x2c88e0)
- SHELL32_CDBurn_OnDeviceChange (Ordinal: 369, Address: 0x2c88f0)
- SHELL32_CDBurn_OnEject (Ordinal: 370, Address: 0x2c8900)
- SHELL32_CDBurn_OnMediaChange (Ordinal: 371, Address: 0x2c8980)
- SHELL32_CDefFolderMenu_Create2 (Ordinal: 372, Address: 0x2c8990)
- SHELL32_CDefFolderMenu_Create2Ex (Ordinal: 373, Address: 0x183fc0)
- SHELL32_CDefFolderMenu_MergeMenu (Ordinal: 374, Address: 0x1e3920)
- SHELL32_CDrivesContextMenu_Create (Ordinal: 375, Address: 0x2c89f0)
- SHELL32_CDrivesDropTarget_Create (Ordinal: 376, Address: 0x1a8e80)
- SHELL32_CDrives_CreateSFVCB (Ordinal: 377, Address: 0x2c8a00)
- SHELL32_CFSDropTarget_CreateInstance (Ordinal: 378, Address: 0x19c0f0)
- SHELL32_CFSFolderCallback_Create (Ordinal: 379, Address: 0x1a9d30)
- SHELL32_CFillPropertiesTask_CreateInstance (Ordinal: 380, Address: 0x26b320)
- SHELL32_CLibraryDropTarget_CreateInstance (Ordinal: 381, Address: 0x2c8a60)
- SHELL32_CLocationContextMenu_Create (Ordinal: 382, Address: 0x1f4500)
- SHELL32_CLocationFolderUI_CreateInstance (Ordinal: 383, Address: 0x2c8a70)
- SHELL32_CMountPoint_DoAutorun (Ordinal: 384, Address: 0x2c8a80)
- SHELL32_CMountPoint_DoAutorunPrompt (Ordinal: 385, Address: 0x2c8a90)
- SHELL32_CMountPoint_IsAutoRunDriveAndEnabledByPolicy (Ordinal: 386, Address: 0x1ad4f0)
- SHELL32_CMountPoint_ProcessAutoRunFile (Ordinal: 387, Address: 0x2c8ac0)
- SHELL32_CMountPoint_WantAutorunUI (Ordinal: 388, Address: 0x2c8ad0)
- SHELL32_CMountPoint_WantAutorunUIGetReady (Ordinal: 389, Address: 0x2c8ae0)
- SHELL32_CNetFolderUI_CreateInstance (Ordinal: 390, Address: 0x7f440)
- SHELL32_CPL_CategoryIdArrayFromVariant (Ordinal: 391, Address: 0x1e3840)
- SHELL32_CPL_IsLegacyCanonicalNameListedUnderKey (Ordinal: 392, Address: 0x2c8b40)
- SHELL32_CPL_ModifyWowDisplayName (Ordinal: 393, Address: 0x2c8b60)
- SHELL32_CRecentDocsContextMenu_CreateInstance (Ordinal: 394, Address: 0x2c8b70)
- SHELL32_CTransferConfirmation_CreateInstance (Ordinal: 395, Address: 0x2c8b80)
- SHELL32_CallFileCopyHooks (Ordinal: 396, Address: 0x143cf0)
- SHELL32_CanDisplayWin8CopyDialog (Ordinal: 397, Address: 0x171f20)
- SHELL32_CloseAutoplayPrompt (Ordinal: 398, Address: 0x2c8b90)
- SHELL32_CommandLineFromMsiDescriptor (Ordinal: 399, Address: 0x2c8c40)
- SHELL32_CopySecondaryTiles (Ordinal: 400, Address: 0x19dc70)
- SHELL32_CreateConfirmationInterrupt (Ordinal: 401, Address: 0x2c8c60)
- SHELL32_CreateConflictInterrupt (Ordinal: 402, Address: 0x2c8c70)
- SHELL32_CreateDefaultOperationDataProvider (Ordinal: 403, Address: 0x2c8c80)
- SHELL32_CreateFileFolderContextMenu (Ordinal: 404, Address: 0x2c8d60)
- SHELL32_CreateLinkInfoW (Ordinal: 405, Address: 0x17bc30)
- SHELL32_CreateQosRecorder (Ordinal: 406, Address: 0x1a38b0)
- SHELL32_CreateSharePointView (Ordinal: 407, Address: 0x2c8d70)
- SHELL32_Create_IEnumUICommand (Ordinal: 408, Address: 0x2c8d80)
- SHELL32_DestroyLinkInfo (Ordinal: 409, Address: 0x185fc0)
- SHELL32_EncryptDirectory (Ordinal: 410, Address: 0x2c8d90)
- SHELL32_EncryptedFileKeyInfo (Ordinal: 411, Address: 0x2c8da0)
- SHELL32_EnumCommonTasks (Ordinal: 412, Address: 0x2c8dc0)
- SHELL32_FreeEncryptedFileKeyInfo (Ordinal: 413, Address: 0x2c8dd0)
- SHELL32_GenerateAppID (Ordinal: 414, Address: 0x2c8df0)
- SHELL32_GetAppIDRoot (Ordinal: 415, Address: 0x2c8e00)
- SHELL32_GetCommandProviderForFolderType (Ordinal: 416, Address: 0x2c8e10)
- SHELL32_GetDPIAdjustedLogicalSize (Ordinal: 417, Address: 0x1ad530)
- SHELL32_GetDiskCleanupPath (Ordinal: 418, Address: 0x2c8e30)
- SHELL32_GetFileNameFromBrowse (Ordinal: 419, Address: 0x2c8e40)
- SHELL32_GetIconOverlayManager (Ordinal: 420, Address: 0xcf740)
- SHELL32_GetLinkInfoData (Ordinal: 421, Address: 0x2c8e50)
- SHELL32_GetRatingBucket (Ordinal: 422, Address: 0x2c8e70)
- SHELL32_GetSqmableFileName (Ordinal: 423, Address: 0x2c8ea0)
- SHELL32_GetThumbnailAdornerFromFactory (Ordinal: 424, Address: 0x2c8eb0)
- SHELL32_GetThumbnailAdornerFromFactory2 (Ordinal: 425, Address: 0xbce20)
- SHELL32_HandleUnrecognizedFileSystem (Ordinal: 426, Address: 0x2c8ec0)
- SHELL32_IconCacheCreate (Ordinal: 427, Address: 0x2c8ed0)
- SHELL32_IconCacheDestroy (Ordinal: 428, Address: 0x19e490)
- SHELL32_IconCacheHandleAssociationChanged (Ordinal: 429, Address: 0x1ad5f0)
- SHELL32_IconCacheRestore (Ordinal: 430, Address: 0x2c8ee0)
- SHELL32_IconCache_AboutToExtractIcons (Ordinal: 431, Address: 0x199e90)
- SHELL32_IconCache_DoneExtractingIcons (Ordinal: 432, Address: 0x18f050)
- SHELL32_IconCache_ExpandEnvAndSearchPath (Ordinal: 433, Address: 0x127870)
- SHELL32_IconCache_RememberRecentlyExtractedIconsW (Ordinal: 434, Address: 0xff410)
- SHELL32_IconOverlayManagerInit (Ordinal: 435, Address: 0x16b760)
- SHELL32_IsGetKeyboardLayoutPresent (Ordinal: 436, Address: 0x190830)
- SHELL32_IsSystemUpgradeInProgress (Ordinal: 437, Address: 0x138f00)
- SHELL32_IsValidLinkInfo (Ordinal: 438, Address: 0x11c570)
- SHELL32_LegacyEnumSpecialTasksByType (Ordinal: 439, Address: 0x2c8ef0)
- SHELL32_LegacyEnumTasks (Ordinal: 440, Address: 0x2c8f00)
- SHELL32_LookupBackIconIndex (Ordinal: 441, Address: 0x28df0)
- SHELL32_LookupFrontIconIndex (Ordinal: 442, Address: 0x17e160)
- SHELL32_NormalizeRating (Ordinal: 443, Address: 0x2c8f10)
- SHELL32_NotifyLinkTrackingServiceOfMove (Ordinal: 444, Address: 0x1ab9c0)
- SHELL32_PifMgr_CloseProperties (Ordinal: 445, Address: 0x2070f0)
- SHELL32_PifMgr_GetProperties (Ordinal: 446, Address: 0x19dc70)
- SHELL32_PifMgr_OpenProperties (Ordinal: 447, Address: 0x19dc70)
- SHELL32_PifMgr_SetProperties (Ordinal: 448, Address: 0x19dc70)
- SHELL32_Printers_CreateBindInfo (Ordinal: 449, Address: 0x2c8f50)
- SHELL32_Printjob_GetPidl (Ordinal: 450, Address: 0x2c8f60)
- SHELL32_PurgeSystemIcon (Ordinal: 451, Address: 0x2c8f70)
- SHELL32_RefreshOverlayImages (Ordinal: 452, Address: 0x2c8f80)
- SHELL32_ResolveLinkInfoW (Ordinal: 453, Address: 0x1ad210)
- SHELL32_SHAddSparseIcon (Ordinal: 454, Address: 0x1a3560)
- SHELL32_SHCreateByValueOperationInterrupt (Ordinal: 455, Address: 0x2c8f90)
- SHELL32_SHCreateDefaultContextMenu (Ordinal: 456, Address: 0x199cb0)
- SHELL32_SHCreateLocalServer (Ordinal: 457, Address: 0x2c8fa0)
- SHELL32_SHCreateShellFolderView (Ordinal: 458, Address: 0x1ad4e0)
- SHELL32_SHDuplicateEncryptionInfoFile (Ordinal: 459, Address: 0x2c8fb0)
- SHELL32_SHEncryptFile (Ordinal: 460, Address: 0x2c8fd0)
- SHELL32_SHFormatDriveAsync (Ordinal: 461, Address: 0x2c8fe0)
- SHELL32_SHGetThreadUndoManager (Ordinal: 462, Address: 0x1f4280)
- SHELL32_SHGetUserNameW (Ordinal: 463, Address: 0x2c8ff0)
- SHELL32_SHIsVirtualDevice (Ordinal: 464, Address: 0x2c9010)
- SHELL32_SHLaunchPropSheet (Ordinal: 465, Address: 0x2c9080)
- SHELL32_SHLogILFromFSIL (Ordinal: 466, Address: 0x2c9090)
- SHELL32_SHOpenWithDialog (Ordinal: 467, Address: 0x2c90b0)
- SHELL32_SHStartNetConnectionDialogW (Ordinal: 468, Address: 0x2c90c0)
- SHELL32_SHUICommandFromGUID (Ordinal: 469, Address: 0x27e8a0)
- SHELL32_SendToMenu_InvokeTargetedCommand (Ordinal: 470, Address: 0x493350)
- SHELL32_SendToMenu_VerifyTargetedCommand (Ordinal: 471, Address: 0xefd50)
- SHELL32_ShowHideIconOnlyOnDesktop (Ordinal: 472, Address: 0x2c90e0)
- SHELL32_SimpleRatingToFilterCondition (Ordinal: 473, Address: 0x2c90f0)
- SHELL32_StampIconForFile (Ordinal: 474, Address: 0x1f4e50)
- SHELL32_SuspendUndo (Ordinal: 475, Address: 0x174bd0)
- SHELL32_TryVirtualDiscImageDriveEject (Ordinal: 476, Address: 0x2c9100)
- SHELL32_VerifySaferTrust (Ordinal: 477, Address: 0x19fc80)
- SHEmptyRecycleBinA (Ordinal: 478, Address: 0x2c9560)
- SHEmptyRecycleBinW (Ordinal: 479, Address: 0x2c9600)
- SHEnableServiceObject (Ordinal: 480, Address: 0x17ee00)
- SHEnumerateUnreadMailAccountsW (Ordinal: 481, Address: 0x203110)
- SHEvaluateSystemCommandTemplate (Ordinal: 482, Address: 0x203130)
- SHExecuteErrorMessageBox (Ordinal: 483, Address: 0x2cb020)
- SHExtractIconsW (Ordinal: 484, Address: 0x203190)
- SHFileOperation (Ordinal: 485, Address: 0x223a60)
- SHFileOperationA (Ordinal: 486, Address: 0x223a60)
- SHFileOperationW (Ordinal: 487, Address: 0x1e3900)
- SHFormatDrive (Ordinal: 488, Address: 0x229f10)
- SHFreeNameMappings (Ordinal: 489, Address: 0x223a80)
- SHGetDataFromIDListA (Ordinal: 490, Address: 0x2032b0)
- SHGetDataFromIDListW (Ordinal: 491, Address: 0x2032d0)
- SHGetDesktopFolder (Ordinal: 492, Address: 0x18cd80)
- SHGetDiskFreeSpaceA (Ordinal: 493, Address: 0x2032f0)
- SHGetDiskFreeSpaceExA (Ordinal: 494, Address: 0x2032f0)
- SHGetDiskFreeSpaceExW (Ordinal: 495, Address: 0x203310)
- SHGetDriveMedia (Ordinal: 496, Address: 0x2d0d80)
- SHGetFileInfo (Ordinal: 497, Address: 0x203330)
- SHGetFileInfoA (Ordinal: 498, Address: 0x203330)
- SHGetFileInfoW (Ordinal: 499, Address: 0x18c380)
- SHGetFolderLocation (Ordinal: 500, Address: 0x192270)
- SHGetFolderPathA (Ordinal: 501, Address: 0x198360)
- SHGetFolderPathAndSubDirA (Ordinal: 502, Address: 0x263880)
- SHGetFolderPathAndSubDirW (Ordinal: 503, Address: 0x1f55b0)
- SHGetFolderPathEx (Ordinal: 504, Address: 0x18bb10)
- SHGetFolderPathW (Ordinal: 505, Address: 0x157d80)
- SHGetIDListFromObject (Ordinal: 506, Address: 0x203390)
- SHGetIconOverlayIndexA (Ordinal: 507, Address: 0x28f880)
- SHGetIconOverlayIndexW (Ordinal: 508, Address: 0xcf610)
- SHGetInstanceExplorer (Ordinal: 509, Address: 0x1f5590)
- SHGetItemFromDataObject (Ordinal: 510, Address: 0x2033d0)
- SHGetItemFromObject (Ordinal: 511, Address: 0x2033f0)
- SHGetKnownFolderIDList (Ordinal: 512, Address: 0x19f7e0)
- SHGetKnownFolderItem (Ordinal: 513, Address: 0x1b1a70)
- SHGetKnownFolderPath (Ordinal: 514, Address: 0x141830)
- SHGetLocalizedName (Ordinal: 515, Address: 0x203410)
- SHGetMalloc (Ordinal: 516, Address: 0x203450)
- SHGetNameFromIDList (Ordinal: 517, Address: 0x203470)
- SHGetNewLinkInfo (Ordinal: 518, Address: 0x2034b0)
- SHGetPathFromIDList (Ordinal: 519, Address: 0x203510)
- (Ordinal: 520, Address: 0x6e6f8f)
- (Ordinal: 521, Address: 0x6e71e9)
- (Ordinal: 522, Address: 0x6e72b4)
- (Ordinal: 523, Address: 0x6e70e7)
- RealDriveType (Ordinal: 524, Address: 0x1f5280)
- (Ordinal: 525, Address: 0x6e6c99)
- SHFlushSFCache (Ordinal: 526, Address: 0x2031f0)
- SHGetPathFromIDListA (Ordinal: 527, Address: 0x203510)
- SHGetPathFromIDListEx (Ordinal: 528, Address: 0x203550)
- SHGetPathFromIDListW (Ordinal: 529, Address: 0x203570)
- SHGetPropertyStoreForWindow (Ordinal: 530, Address: 0x8ee50)
- SHGetPropertyStoreFromIDList (Ordinal: 531, Address: 0x203590)
- SHGetPropertyStoreFromParsingName (Ordinal: 532, Address: 0x2035b0)
- SHGetSettings (Ordinal: 533, Address: 0x203630)
- SHGetSpecialFolderLocation (Ordinal: 534, Address: 0x19ab30)
- SHGetSpecialFolderPathA (Ordinal: 535, Address: 0x2638a0)
- SHGetSpecialFolderPathW (Ordinal: 536, Address: 0x15fb20)
- SHGetStockIconInfo (Ordinal: 537, Address: 0x203650)
- SHGetTemporaryPropertyForItem (Ordinal: 538, Address: 0x203670)
- SHGetUnreadMailCountW (Ordinal: 539, Address: 0x2036b0)
- SHInvokePrinterCommandA (Ordinal: 540, Address: 0x223240)
- SHInvokePrinterCommandW (Ordinal: 541, Address: 0x223330)
- SHIsFileAvailableOffline (Ordinal: 542, Address: 0x203730)
- SHLoadInProc (Ordinal: 543, Address: 0x1f4500)
- SHLoadNonloadedIconOverlayIdentifiers (Ordinal: 544, Address: 0x203770)
- SHOpenFolderAndSelectItems (Ordinal: 545, Address: 0x263900)
- SHOpenOrGetFolderView (Ordinal: 546, Address: 0x2d2530)
- SHOpenWithDialog (Ordinal: 547, Address: 0x211940)
- SHParseDisplayName (Ordinal: 548, Address: 0x203850)
- SHPathPrepareForWriteA (Ordinal: 549, Address: 0x223ac0)
- SHPathPrepareForWriteW (Ordinal: 550, Address: 0x223ae0)
- SHQueryRecycleBinA (Ordinal: 551, Address: 0x203870)
- SHQueryRecycleBinW (Ordinal: 552, Address: 0x203890)
- SHQueryUserNotificationState (Ordinal: 553, Address: 0x109b50)
- SHRemoveLocalizedName (Ordinal: 554, Address: 0x2038d0)
- SHResolveLibrary (Ordinal: 555, Address: 0x263940)
- SHSetDefaultProperties (Ordinal: 556, Address: 0x203930)
- SHSetKnownFolderPath (Ordinal: 557, Address: 0x2639c0)
- SHSetLocalizedName (Ordinal: 558, Address: 0x203950)
- SHSetTemporaryPropertyForItem (Ordinal: 559, Address: 0x203970)
- SHSetUnreadMailCountW (Ordinal: 560, Address: 0x203990)
- SHShowManageLibraryUI (Ordinal: 561, Address: 0x4dac30)
- SHUpdateRecycleBinIcon (Ordinal: 562, Address: 0x203a70)
- SetCurrentProcessExplicitAppUserModelID (Ordinal: 563, Address: 0x1e38e0)
- SheChangeDirA (Ordinal: 564, Address: 0x207100)
- SheChangeDirExW (Ordinal: 565, Address: 0x207180)
- SheGetDirA (Ordinal: 566, Address: 0x207700)
- SheSetCurDrive (Ordinal: 567, Address: 0x207960)
- ShellAboutA (Ordinal: 568, Address: 0x2e3500)
- ShellAboutW (Ordinal: 569, Address: 0x2e3630)
- ShellExec_RunDLL (Ordinal: 570, Address: 0x203b30)
- ShellExec_RunDLLA (Ordinal: 571, Address: 0x203b30)
- ShellExec_RunDLLW (Ordinal: 572, Address: 0x203b50)
- ShellExecuteA (Ordinal: 573, Address: 0x203b70)
- ShellExecuteEx (Ordinal: 574, Address: 0x203b90)
- ShellExecuteExA (Ordinal: 575, Address: 0x203b90)
- ShellExecuteExW (Ordinal: 576, Address: 0x203bb0)
- ShellExecuteW (Ordinal: 577, Address: 0x203bd0)
- ShellHookProc (Ordinal: 578, Address: 0x19dc70)
- Shell_GetCachedImageIndexA (Ordinal: 579, Address: 0x203c10)
- Shell_GetCachedImageIndexW (Ordinal: 580, Address: 0x203c30)
- Shell_NotifyIcon (Ordinal: 581, Address: 0x161850)
- Shell_NotifyIconA (Ordinal: 582, Address: 0x161850)
- Shell_NotifyIconGetRect (Ordinal: 583, Address: 0x1b5730)
- Shell_NotifyIconW (Ordinal: 584, Address: 0x11d20)
- StateRepoNewMenuCache_EnsureCacheAsync (Ordinal: 585, Address: 0x3d750)
- StateRepoNewMenuCache_RebuildCacheAsync (Ordinal: 586, Address: 0x1a38f0)
- StrChrA (Ordinal: 587, Address: 0x1f8c20)
- StrChrIA (Ordinal: 588, Address: 0x1f8c30)
- StrChrIW (Ordinal: 589, Address: 0x1f8c40)
- StrChrW (Ordinal: 590, Address: 0x1f8c50)
- StrCmpNA (Ordinal: 591, Address: 0x1f8c60)
- StrCmpNIA (Ordinal: 592, Address: 0x1f8c70)
- StrCmpNIW (Ordinal: 593, Address: 0x1f8c80)
- StrCmpNW (Ordinal: 594, Address: 0x1f8c90)
- StrNCmpA (Ordinal: 595, Address: 0x205740)
- StrNCmpIA (Ordinal: 596, Address: 0x205810)
- StrNCmpIW (Ordinal: 597, Address: 0x2058e0)
- StrNCmpW (Ordinal: 598, Address: 0x2059b0)
- StrRChrA (Ordinal: 599, Address: 0x1f8ca0)
- StrRChrIA (Ordinal: 600, Address: 0x1f8cb0)
- StrRChrIW (Ordinal: 601, Address: 0x1f8cc0)
- StrRChrW (Ordinal: 602, Address: 0x1f8cd0)
- StrRStrA (Ordinal: 603, Address: 0x205aa0)
- StrRStrIA (Ordinal: 604, Address: 0x1f8ce0)
- StrRStrIW (Ordinal: 605, Address: 0x1f8cf0)
- StrRStrW (Ordinal: 606, Address: 0x205b80)
- StrStrA (Ordinal: 607, Address: 0x1f8d00)
- StrStrIA (Ordinal: 608, Address: 0x1f8d10)
- StrStrIW (Ordinal: 609, Address: 0x1f8d20)
- StrStrW (Ordinal: 610, Address: 0x1f8d30)
- UsersLibrariesFolderUI_CreateInstance (Ordinal: 611, Address: 0xcd170)
- WOWShellExecute (Ordinal: 612, Address: 0x203cd0)
- WaitForExplorerRestartW (Ordinal: 613, Address: 0x25c630)
- (Ordinal: 640, Address: 0x6e6f17)
- (Ordinal: 641, Address: 0x6e6f0a)
- (Ordinal: 643, Address: 0x6e6f9c)
- SHChangeNotification_Lock (Ordinal: 644, Address: 0x16b370)
- SHChangeNotification_Unlock (Ordinal: 645, Address: 0x190510)
- (Ordinal: 646, Address: 0x6e6fb6)
- (Ordinal: 648, Address: 0x6e72c1)
- (Ordinal: 650, Address: 0x6e69a7)
- (Ordinal: 651, Address: 0x202910)
- WriteCabinetState (Ordinal: 652, Address: 0x203d30)
- (Ordinal: 653, Address: 0x6e6f5b)
- ReadCabinetState (Ordinal: 654, Address: 0x202bd0)
- (Ordinal: 660, Address: 0x2024d0)
- IsUserAnAdmin (Ordinal: 680, Address: 0x263830)
- (Ordinal: 681, Address: 0x6e710f)
- StgMakeUniqueName (Ordinal: 682, Address: 0x203cb0)
- (Ordinal: 683, Address: 0x2d2bc0)
- (Ordinal: 684, Address: 0x2d2bc0)
- SHPropStgCreate (Ordinal: 685, Address: 0x176e50)
- SHPropStgReadMultiple (Ordinal: 688, Address: 0x1acfb0)
- SHPropStgWriteMultiple (Ordinal: 689, Address: 0x263920)
- (Ordinal: 690, Address: 0x2638c0)
- (Ordinal: 691, Address: 0x6e70b0)
- (Ordinal: 700, Address: 0x6e6bc0)
- CDefFolderMenu_Create2 (Ordinal: 701, Address: 0x234570)
- (Ordinal: 702, Address: 0xdbd0)
- (Ordinal: 703, Address: 0x6e662d)
- (Ordinal: 704, Address: 0x6e663a)
- (Ordinal: 707, Address: 0x6e722d)
- (Ordinal: 708, Address: 0x6e7139)
- SHGetSetFolderCustomSettings (Ordinal: 709, Address: 0x2035f0)
- (Ordinal: 711, Address: 0x202130)
- (Ordinal: 712, Address: 0x6e6fc3)
- (Ordinal: 713, Address: 0x202ad0)
- (Ordinal: 714, Address: 0x202af0)
- (Ordinal: 715, Address: 0x6e7024)
- SHMultiFileProperties (Ordinal: 716, Address: 0x2d1ec0)
- (Ordinal: 719, Address: 0x6e7247)
- (Ordinal: 720, Address: 0x6e6ef0)
- (Ordinal: 721, Address: 0x6e6efd)
- (Ordinal: 722, Address: 0x6e7008)
- (Ordinal: 723, Address: 0x203010)
- (Ordinal: 724, Address: 0x6e71c0)
- (Ordinal: 725, Address: 0x6e6e66)
- (Ordinal: 726, Address: 0x6e6c05)
- SHGetImageList (Ordinal: 727, Address: 0x2033b0)
- RestartDialogEx (Ordinal: 730, Address: 0x251570)
- (Ordinal: 731, Address: 0x6e7263)
- (Ordinal: 732, Address: 0x6e7255)
- (Ordinal: 733, Address: 0x241260)
- (Ordinal: 740, Address: 0x202e30)
- SHCreateFileExtractIconW (Ordinal: 743, Address: 0x202e50)
- (Ordinal: 744, Address: 0x24f860)
- (Ordinal: 745, Address: 0x6e6c4a)
- SHLimitInputEdit (Ordinal: 747, Address: 0x2d15d0)
- (Ordinal: 748, Address: 0x2d1570)
- (Ordinal: 749, Address: 0x6e7146)
- SHGetAttributesFromDataObject (Ordinal: 750, Address: 0x203250)
- (Ordinal: 751, Address: 0x203a10)
- (Ordinal: 752, Address: 0x203270)
- (Ordinal: 753, Address: 0x19e9c0)
- (Ordinal: 754, Address: 0x1ec030)
- (Ordinal: 755, Address: 0x202a30)
- (Ordinal: 756, Address: 0x6e6c8c)
- (Ordinal: 757, Address: 0x143d0)
- (Ordinal: 758, Address: 0x8dac0)
- (Ordinal: 759, Address: 0x8d1e0)
- (Ordinal: 760, Address: 0x223a40)
- (Ordinal: 761, Address: 0x298e80)
- (Ordinal: 762, Address: 0x6e6c3c)
- (Ordinal: 763, Address: 0x24f890)
- (Ordinal: 764, Address: 0x202070)
- (Ordinal: 765, Address: 0x1fb1e0)
- (Ordinal: 766, Address: 0x6e6fd0)
- (Ordinal: 767, Address: 0x202090)
- (Ordinal: 777, Address: 0x203230)
- (Ordinal: 778, Address: 0x2020d0)
- (Ordinal: 779, Address: 0x202830)
- (Ordinal: 781, Address: 0x202c30)
- (Ordinal: 782, Address: 0x287b90)
- (Ordinal: 786, Address: 0x6e6ffa)
- (Ordinal: 787, Address: 0x2037d0)
- (Ordinal: 788, Address: 0x202fd0)
- (Ordinal: 789, Address: 0x202ff0)
- (Ordinal: 790, Address: 0x2037b0)
- (Ordinal: 791, Address: 0x202fb0)
- (Ordinal: 792, Address: 0x2037f0)
- (Ordinal: 810, Address: 0x2cc7d0)
- (Ordinal: 811, Address: 0x2cc5d0)
- (Ordinal: 812, Address: 0x4faee0)
- (Ordinal: 813, Address: 0x4faf80)
- (Ordinal: 814, Address: 0x1644e0)
- (Ordinal: 815, Address: 0x170d60)
- (Ordinal: 816, Address: 0x4f7730)
- (Ordinal: 817, Address: 0x4f8d00)
- (Ordinal: 818, Address: 0x4f8210)
- (Ordinal: 819, Address: 0x4f8220)
- (Ordinal: 820, Address: 0x6e6fde)
- (Ordinal: 821, Address: 0x6e7086)
- (Ordinal: 822, Address: 0x6e7078)
- (Ordinal: 823, Address: 0x203350)
- (Ordinal: 824, Address: 0x203370)
- (Ordinal: 825, Address: 0xc4be0)
- (Ordinal: 826, Address: 0x6e6fec)
- (Ordinal: 827, Address: 0x6e7094)
- (Ordinal: 828, Address: 0x2346e0)
- (Ordinal: 829, Address: 0x234ad0)
- (Ordinal: 830, Address: 0x2bf3f0)
- (Ordinal: 831, Address: 0x202e70)
- (Ordinal: 832, Address: 0x6e71ce)
- (Ordinal: 833, Address: 0x2638e0)
- (Ordinal: 834, Address: 0x6e7032)
- (Ordinal: 835, Address: 0x6e704e)
- (Ordinal: 836, Address: 0x6e7040)
- (Ordinal: 837, Address: 0x6e706a)
- (Ordinal: 838, Address: 0x6e705c)
- (Ordinal: 839, Address: 0x6e6c12)
- (Ordinal: 840, Address: 0x2029f0)
- (Ordinal: 841, Address: 0x6e70be)
- (Ordinal: 842, Address: 0x6e70cc)
- (Ordinal: 843, Address: 0x6e711d)
- (Ordinal: 844, Address: 0x202f70)
- (Ordinal: 845, Address: 0x4f73c0)
- ILLoadFromStreamEx (Ordinal: 846, Address: 0x202750)
- (Ordinal: 847, Address: 0xc4d80)
- (Ordinal: 848, Address: 0x2034f0)
- (Ordinal: 849, Address: 0x18d6c0)
- (Ordinal: 850, Address: 0x202990)
- (Ordinal: 851, Address: 0x203690)
- (Ordinal: 852, Address: 0x6e7189)
- (Ordinal: 853, Address: 0x203530)
- (Ordinal: 854, Address: 0x6e6ed4)
- (Ordinal: 856, Address: 0x6e6bdc)
- (Ordinal: 857, Address: 0x6e6bce)
- (Ordinal: 858, Address: 0x6e6f31)
- (Ordinal: 859, Address: 0x2e9bb0)
- (Ordinal: 860, Address: 0x203290)
- (Ordinal: 861, Address: 0x6e70a2)
- (Ordinal: 862, Address: 0x202d10)
- (Ordinal: 863, Address: 0x6e6e8f)
- (Ordinal: 864, Address: 0x288d40)
- (Ordinal: 865, Address: 0x202870)
- (Ordinal: 866, Address: 0x203150)
- (Ordinal: 867, Address: 0x6e6c20)
- (Ordinal: 868, Address: 0x6e6c2e)
- (Ordinal: 869, Address: 0x6e6f4d)
- (Ordinal: 870, Address: 0x1acf20)
- (Ordinal: 871, Address: 0x20f570)
- (Ordinal: 872, Address: 0x6e7016)
- (Ordinal: 873, Address: 0x203710)
- (Ordinal: 874, Address: 0x1e8d40)
- (Ordinal: 875, Address: 0x167060)
- (Ordinal: 876, Address: 0x1ef460)
- (Ordinal: 877, Address: 0x27e7f0)
- (Ordinal: 878, Address: 0xaaee0)
- (Ordinal: 880, Address: 0x202150)
- (Ordinal: 881, Address: 0x155420)
- (Ordinal: 882, Address: 0x16a780)
- (Ordinal: 883, Address: 0x4f70f0)
- (Ordinal: 884, Address: 0x250ea0)
- (Ordinal: 885, Address: 0x1041c0)
- (Ordinal: 886, Address: 0x203750)
- (Ordinal: 887, Address: 0x203170)
- (Ordinal: 888, Address: 0x2d16b0)
- (Ordinal: 889, Address: 0x6e6eb8)
- (Ordinal: 890, Address: 0x6e6bf7)
- (Ordinal: 891, Address: 0x291bc0)
- (Ordinal: 892, Address: 0x6e6e73)
- (Ordinal: 893, Address: 0x56af0)
- (Ordinal: 894, Address: 0x223a00)
- (Ordinal: 895, Address: 0x179710)
- (Ordinal: 896, Address: 0x223900)
- (Ordinal: 897, Address: 0x2d5ac0)
- (Ordinal: 898, Address: 0x202f50)
- (Ordinal: 899, Address: 0x203ad0)
- (Ordinal: 900, Address: 0x170f40)
- (Ordinal: 901, Address: 0x167590)
- (Ordinal: 902, Address: 0x6e6ec6)
- (Ordinal: 903, Address: 0x1e43f0)
- (Ordinal: 904, Address: 0x2639e0)
- (Ordinal: 905, Address: 0x2637f0)
- (Ordinal: 906, Address: 0x202550)
- (Ordinal: 907, Address: 0x48820)
- (Ordinal: 909, Address: 0x6e6e81)
- (Ordinal: 910, Address: 0x202170)
- (Ordinal: 911, Address: 0x202010)
- (Ordinal: 912, Address: 0x24ed20)
- (Ordinal: 913, Address: 0x2021f0)
- (Ordinal: 914, Address: 0x201ef0)
- (Ordinal: 915, Address: 0x8d3d0)
- (Ordinal: 916, Address: 0x1843d0)
- GetSystemPersistedStorageItemList (Ordinal: 919, Address: 0x2239e0)
- CreateStorageItemFromPath_PartialTrustCaller (Ordinal: 920, Address: 0x223960)
- CreateStorageItemFromShellItem_FullTrustCaller (Ordinal: 921, Address: 0x223980)
- (Ordinal: 922, Address: 0x2038b0)
- (Ordinal: 923, Address: 0x1ad510)
- (Ordinal: 924, Address: 0x2238c0)
- CreateStorageItemFromShellItem_FullTrustCaller_ForPackage (Ordinal: 925, Address: 0x1803d0)
- (Ordinal: 927, Address: 0x202db0)
- (Ordinal: 928, Address: 0x2030b0)
- CreateStorageItemFromShellItem_FullTrustCaller_ForPackage_WithProcessHandle (Ordinal: 929, Address: 0x2239a0)
- (Ordinal: 930, Address: 0x2029d0)
- CreateStorageItemFromShellItem_FullTrustCaller_UseImplicitFlagsAndPackage (Ordinal: 931, Address: 0x2239c0)
- (Ordinal: 932, Address: 0x223b00)
- (Ordinal: 933, Address: 0x223aa0)
- CreateStorageItemFromPath_FullTrustCaller (Ordinal: 935, Address: 0x223920)
- CreateStorageItemFromPath_FullTrustCaller_ForPackage (Ordinal: 936, Address: 0x223940)
- CStorageItem_GetValidatedStorageItemObject (Ordinal: 937, Address: 0x2238e0)
- (Ordinal: 938, Address: 0x298e60)
- (Ordinal: 939, Address: 0xb7b20)
- (Ordinal: 940, Address: 0x223a20)
- IsProcessAnExplorer (Ordinal: 941, Address: 0x2028d0)
- IsDesktopExplorerProcess (Ordinal: 942, Address: 0x202850)
- (Ordinal: 943, Address: 0x42570)
- (Ordinal: 944, Address: 0x2d2670)
- (Ordinal: 945, Address: 0x298670)
- (Ordinal: 946, Address: 0x203430)
- (Ordinal: 947, Address: 0x235a80)
- (Ordinal: 948, Address: 0x235a60)
- (Ordinal: 949, Address: 0x235a30)
- (Ordinal: 950, Address: 0x2359e0)
- (Ordinal: 951, Address: 0x235a00)
- (Ordinal: 952, Address: 0x2359c0)
- (Ordinal: 953, Address: 0x235760)
- (Ordinal: 970, Address: 0x202b90)
- (Ordinal: 971, Address: 0x2020f0)
- (Ordinal: 972, Address: 0x2021d0)
- (Ordinal: 2000, Address: 0x298900)
- (Ordinal: 2001, Address: 0x2e41d0)
- (Ordinal: 2002, Address: 0x16c660)
Imported DLLs & Functions
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x180602090)
api-ms-win-core-atoms-l1-1-0.dll
- FindAtomW (Address: 0x1806020a8)
- GetAtomNameW (Address: 0x1806020a0)
- GlobalAddAtomW (Address: 0x1806020b8)
- GlobalDeleteAtom (Address: 0x1806020c0)
- GlobalGetAtomNameW (Address: 0x1806020b0)
api-ms-win-core-datetime-l1-1-0.dll
- GetDateFormatW (Address: 0x1806020d0)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x1806020e8)
- IsDebuggerPresent (Address: 0x1806020e0)
- OutputDebugStringW (Address: 0x1806020f0)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x180602100)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x180602110)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x180602140)
- RaiseException (Address: 0x180602130)
- SetErrorMode (Address: 0x180602128)
- SetLastError (Address: 0x180602120)
- SetUnhandledExceptionFilter (Address: 0x180602138)
- UnhandledExceptionFilter (Address: 0x180602148)
api-ms-win-core-file-l1-1-0.dll
- CompareFileTime (Address: 0x1806021c8)
- CreateDirectoryW (Address: 0x1806021e0)
- CreateFileW (Address: 0x180602278)
- DefineDosDeviceW (Address: 0x180602230)
- DeleteFileW (Address: 0x180602170)
- FileTimeToLocalFileTime (Address: 0x1806021e8)
- FindClose (Address: 0x1806021a8)
- FindFirstFileExW (Address: 0x180602210)
- FindFirstFileW (Address: 0x180602198)
- FindFirstVolumeW (Address: 0x1806021f0)
- FindNextFileW (Address: 0x1806021a0)
- FindNextVolumeW (Address: 0x1806021f8)
- FindVolumeClose (Address: 0x180602200)
- GetDiskFreeSpaceW (Address: 0x1806021d8)
- GetDriveTypeW (Address: 0x1806021b8)
- GetFileAttributesExW (Address: 0x180602250)
- GetFileAttributesW (Address: 0x180602260)
- GetFileInformationByHandle (Address: 0x180602228)
- GetFileSize (Address: 0x180602270)
- GetFileSizeEx (Address: 0x1806021d0)
- GetFullPathNameW (Address: 0x180602208)
- GetLogicalDrives (Address: 0x180602158)
- GetLongPathNameW (Address: 0x180602188)
- GetShortPathNameW (Address: 0x180602160)
- GetTempFileNameW (Address: 0x180602218)
- GetVolumeInformationW (Address: 0x180602238)
- GetVolumePathNameW (Address: 0x180602258)
- LocalFileTimeToFileTime (Address: 0x180602168)
- QueryDosDeviceW (Address: 0x1806021c0)
- ReadFile (Address: 0x180602268)
- RemoveDirectoryW (Address: 0x180602178)
- SetEndOfFile (Address: 0x180602220)
- SetFileAttributesW (Address: 0x180602180)
- SetFileInformationByHandle (Address: 0x180602248)
- SetFilePointer (Address: 0x1806021b0)
- SetFileTime (Address: 0x180602190)
- WriteFile (Address: 0x180602240)
api-ms-win-core-file-l1-2-0.dll
- GetTempPathW (Address: 0x180602298)
- GetVolumeNameForVolumeMountPointW (Address: 0x180602288)
- GetVolumePathNamesForVolumeNameW (Address: 0x180602290)
api-ms-win-core-file-l2-1-0.dll
- GetFileInformationByHandleEx (Address: 0x1806022a8)
- MoveFileExW (Address: 0x1806022b8)
- ReplaceFileW (Address: 0x1806022b0)
api-ms-win-core-file-l2-1-2.dll
- CopyFileW (Address: 0x1806022c8)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x1806022d8)
- DuplicateHandle (Address: 0x1806022e0)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x180602300)
- HeapAlloc (Address: 0x1806022f8)
- HeapDestroy (Address: 0x180602310)
- HeapFree (Address: 0x180602308)
- HeapReAlloc (Address: 0x1806022f0)
api-ms-win-core-heap-l2-1-0.dll
- GlobalAlloc (Address: 0x180602320)
- GlobalFree (Address: 0x180602338)
- LocalAlloc (Address: 0x180602330)
- LocalFree (Address: 0x180602340)
- LocalReAlloc (Address: 0x180602328)
api-ms-win-core-heap-obsolete-l1-1-0.dll
- GlobalFlags (Address: 0x180602370)
- GlobalLock (Address: 0x180602368)
- GlobalReAlloc (Address: 0x180602350)
- GlobalSize (Address: 0x180602360)
- GlobalUnlock (Address: 0x180602358)
- LocalSize (Address: 0x180602378)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x180602390)
- InterlockedPopEntrySList (Address: 0x180602388)
- InterlockedPushEntrySList (Address: 0x180602398)
api-ms-win-core-io-l1-1-0.dll
- CreateIoCompletionPort (Address: 0x1806023a8)
- DeviceIoControl (Address: 0x1806023b8)
- GetQueuedCompletionStatus (Address: 0x1806023b0)
api-ms-win-core-io-l1-1-1.dll
- CancelSynchronousIo (Address: 0x1806023c8)
api-ms-win-core-job-l2-1-0.dll
- AssignProcessToJobObject (Address: 0x1806023e0)
- CreateJobObjectW (Address: 0x1806023e8)
- SetInformationJobObject (Address: 0x1806023d8)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
- GetComputerNameW (Address: 0x180602400)
- GetSystemPowerStatus (Address: 0x180602420)
- MulDiv (Address: 0x180602428)
- RegisterWaitForSingleObject (Address: 0x180602410)
- SetVolumeLabelW (Address: 0x1806023f8)
- UnregisterWait (Address: 0x180602418)
- WTSGetActiveConsoleSessionId (Address: 0x180602408)
api-ms-win-core-kernel32-legacy-l1-1-1.dll
- PowerClearRequest (Address: 0x180602448)
- PowerCreateRequest (Address: 0x180602450)
- PowerSetRequest (Address: 0x180602440)
- VerifyVersionInfoW (Address: 0x180602438)
api-ms-win-core-kernel32-legacy-l1-1-2.dll
- GetBinaryTypeW (Address: 0x180602460)
api-ms-win-core-kernel32-private-l1-1-0.dll
- CheckElevation (Address: 0x180602470)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x1806024f8)
- EnumResourceNamesExW (Address: 0x180602488)
- FindResourceExW (Address: 0x1806024c0)
- FindStringOrdinal (Address: 0x1806024d8)
- FreeLibrary (Address: 0x1806024a0)
- FreeResource (Address: 0x1806024b0)
- GetModuleFileNameA (Address: 0x180602510)
- GetModuleFileNameW (Address: 0x180602490)
- GetModuleHandleExA (Address: 0x1806024a8)
- GetModuleHandleExW (Address: 0x1806024f0)
- GetModuleHandleW (Address: 0x1806024d0)
- GetProcAddress (Address: 0x180602500)
- LoadLibraryExA (Address: 0x180602480)
- LoadLibraryExW (Address: 0x1806024c8)
- LoadResource (Address: 0x180602508)
- LoadStringA (Address: 0x1806024e8)
- LoadStringW (Address: 0x1806024b8)
- LockResource (Address: 0x1806024e0)
- SizeofResource (Address: 0x180602498)
api-ms-win-core-libraryloader-l1-2-1.dll
- FindResourceW (Address: 0x180602520)
- LoadLibraryW (Address: 0x180602528)
api-ms-win-core-localization-l1-2-0.dll
- FindNLSString (Address: 0x180602558)
- FindNLSStringEx (Address: 0x180602590)
- FormatMessageW (Address: 0x180602540)
- GetACP (Address: 0x180602570)
- GetLocaleInfoW (Address: 0x1806025c0)
- GetSystemDefaultLangID (Address: 0x180602568)
- GetSystemDefaultLCID (Address: 0x1806025a0)
- GetSystemPreferredUILanguages (Address: 0x1806025b0)
- GetThreadLocale (Address: 0x180602560)
- GetThreadUILanguage (Address: 0x180602548)
- GetUserDefaultLangID (Address: 0x180602598)
- GetUserPreferredUILanguages (Address: 0x180602588)
- IsValidLocaleName (Address: 0x180602550)
- LCMapStringEx (Address: 0x180602578)
- LCMapStringW (Address: 0x180602538)
- LocaleNameToLCID (Address: 0x1806025b8)
- ResolveLocaleName (Address: 0x1806025a8)
- VerLanguageNameW (Address: 0x180602580)
api-ms-win-core-localization-l1-2-2.dll
- LCIDToLocaleName (Address: 0x1806025d0)
api-ms-win-core-localization-l2-1-0.dll
- GetNumberFormatEx (Address: 0x1806025e0)
api-ms-win-core-localization-obsolete-l1-2-0.dll
- EnumUILanguagesW (Address: 0x180602600)
- GetNumberFormatW (Address: 0x1806025f0)
- GetUserDefaultUILanguage (Address: 0x1806025f8)
api-ms-win-core-memory-l1-1-0.dll
- CreateFileMappingW (Address: 0x180602650)
- MapViewOfFile (Address: 0x180602648)
- OpenFileMappingW (Address: 0x180602638)
- ReadProcessMemory (Address: 0x180602620)
- UnmapViewOfFile (Address: 0x180602630)
- VirtualAlloc (Address: 0x180602610)
- VirtualFree (Address: 0x180602628)
- VirtualProtect (Address: 0x180602618)
- VirtualQuery (Address: 0x180602640)
- WriteProcessMemory (Address: 0x180602658)
api-ms-win-core-memory-l1-1-1.dll
- PrefetchVirtualMemory (Address: 0x180602668)
api-ms-win-core-path-l1-1-0.dll
- PathAllocCanonicalize (Address: 0x1806026b0)
- PathAllocCombine (Address: 0x1806026e8)
- PathCchAddBackslash (Address: 0x180602690)
- PathCchAddExtension (Address: 0x180602698)
- PathCchAppend (Address: 0x180602678)
- PathCchAppendEx (Address: 0x1806026c0)
- PathCchCanonicalize (Address: 0x1806026e0)
- PathCchCombine (Address: 0x1806026a8)
- PathCchRemoveBackslash (Address: 0x1806026c8)
- PathCchRemoveExtension (Address: 0x180602680)
- PathCchRemoveFileSpec (Address: 0x1806026d0)
- PathCchRenameExtension (Address: 0x1806026d8)
- PathCchSkipRoot (Address: 0x180602688)
- PathCchStripPrefix (Address: 0x1806026b8)
- PathCchStripToRoot (Address: 0x1806026a0)
- PathIsUNCEx (Address: 0x1806026f0)
api-ms-win-core-privateprofile-l1-1-0.dll
- GetPrivateProfileSectionW (Address: 0x180602708)
- GetPrivateProfileStringW (Address: 0x180602700)
- WritePrivateProfileStringW (Address: 0x180602710)
api-ms-win-core-processenvironment-l1-1-0.dll
- ExpandEnvironmentStringsA (Address: 0x180602748)
- ExpandEnvironmentStringsW (Address: 0x180602728)
- GetCommandLineW (Address: 0x180602740)
- GetCurrentDirectoryW (Address: 0x180602720)
- GetEnvironmentVariableW (Address: 0x180602758)
- SearchPathW (Address: 0x180602738)
- SetCurrentDirectoryW (Address: 0x180602750)
- SetEnvironmentVariableW (Address: 0x180602730)
api-ms-win-core-processthreads-l1-1-0.dll
- CreateProcessW (Address: 0x180602800)
- CreateThread (Address: 0x180602780)
- DeleteProcThreadAttributeList (Address: 0x180602830)
- GetCurrentProcess (Address: 0x1806027d8)
- GetCurrentProcessId (Address: 0x180602838)
- GetCurrentThread (Address: 0x1806027a8)
- GetCurrentThreadId (Address: 0x1806027d0)
- GetExitCodeProcess (Address: 0x180602778)
- GetExitCodeThread (Address: 0x180602770)
- GetProcessId (Address: 0x1806027e0)
- GetThreadId (Address: 0x1806027a0)
- GetThreadPriority (Address: 0x180602768)
- InitializeProcThreadAttributeList (Address: 0x180602828)
- OpenProcessToken (Address: 0x180602820)
- OpenThread (Address: 0x180602808)
- OpenThreadToken (Address: 0x1806027f0)
- ProcessIdToSessionId (Address: 0x180602788)
- ResumeThread (Address: 0x1806027b0)
- SetPriorityClass (Address: 0x1806027b8)
- SetThreadPriority (Address: 0x1806027f8)
- SetThreadToken (Address: 0x1806027e8)
- TerminateProcess (Address: 0x180602818)
- TlsAlloc (Address: 0x180602798)
- TlsFree (Address: 0x180602790)
- TlsGetValue (Address: 0x1806027c0)
- TlsSetValue (Address: 0x1806027c8)
- UpdateProcThreadAttribute (Address: 0x180602810)
api-ms-win-core-processthreads-l1-1-1.dll
- FlushInstructionCache (Address: 0x180602848)
- IsProcessorFeaturePresent (Address: 0x180602858)
- OpenProcess (Address: 0x180602850)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x180602868)
- QueryPerformanceFrequency (Address: 0x180602870)
api-ms-win-core-psapi-l1-1-0.dll
- K32GetModuleFileNameExW (Address: 0x180602888)
- K32GetProcessImageFileNameW (Address: 0x180602880)
- QueryFullProcessImageNameW (Address: 0x180602890)
api-ms-win-core-realtime-l1-1-0.dll
- QueryUnbiasedInterruptTime (Address: 0x1806028a0)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x1806028d0)
- RegCreateKeyExW (Address: 0x180602928)
- RegDeleteKeyExW (Address: 0x1806028d8)
- RegDeleteTreeW (Address: 0x1806028f8)
- RegDeleteValueW (Address: 0x1806028e8)
- RegEnumKeyExW (Address: 0x180602920)
- RegEnumValueW (Address: 0x1806028c0)
- RegGetValueW (Address: 0x180602918)
- RegNotifyChangeKeyValue (Address: 0x180602908)
- RegOpenCurrentUser (Address: 0x1806028e0)
- RegOpenKeyExA (Address: 0x1806028b8)
- RegOpenKeyExW (Address: 0x1806028b0)
- RegQueryInfoKeyA (Address: 0x1806028f0)
- RegQueryInfoKeyW (Address: 0x1806028c8)
- RegQueryValueExA (Address: 0x180602900)
- RegQueryValueExW (Address: 0x180602930)
- RegSetValueExW (Address: 0x180602910)
api-ms-win-core-registry-l1-1-1.dll
- RegSetKeyValueW (Address: 0x180602940)
api-ms-win-core-registryuserspecific-l1-1-0.dll
- SHRegCloseUSKey (Address: 0x180602960)
- SHRegEnumUSKeyW (Address: 0x180602958)
- SHRegGetBoolUSValueW (Address: 0x180602970)
- SHRegGetUSValueW (Address: 0x180602980)
- SHRegOpenUSKeyA (Address: 0x180602968)
- SHRegOpenUSKeyW (Address: 0x180602978)
- SHRegQueryUSValueW (Address: 0x180602950)
api-ms-win-core-rtlsupport-l1-1-0.dll
- RtlCaptureContext (Address: 0x1806029a0)
- RtlLookupFunctionEntry (Address: 0x180602990)
- RtlVirtualUnwind (Address: 0x180602998)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
- IsCharSpaceW (Address: 0x1806029c0)
- PathAddBackslashW (Address: 0x180602a30)
- PathAppendW (Address: 0x1806029d0)
- PathCombineW (Address: 0x180602a38)
- PathCommonPrefixW (Address: 0x180602a50)
- PathFileExistsW (Address: 0x180602a20)
- PathFindExtensionW (Address: 0x180602a00)
- PathFindFileNameW (Address: 0x180602a08)
- PathFindNextComponentW (Address: 0x180602a80)
- PathGetArgsW (Address: 0x180602a68)
- PathGetDriveNumberW (Address: 0x1806029d8)
- PathIsFileSpecW (Address: 0x1806029b0)
- PathIsPrefixW (Address: 0x1806029f8)
- PathIsRelativeW (Address: 0x1806029b8)
- PathIsRootW (Address: 0x180602a98)
- PathIsSameRootW (Address: 0x180602a48)
- PathIsUNCServerShareW (Address: 0x180602a40)
- PathIsUNCServerW (Address: 0x180602a18)
- PathIsUNCW (Address: 0x180602ab0)
- PathIsValidCharW (Address: 0x1806029c8)
- PathMatchSpecExW (Address: 0x180602a58)
- PathMatchSpecW (Address: 0x180602a60)
- PathParseIconLocationW (Address: 0x180602aa0)
- PathQuoteSpacesW (Address: 0x1806029e8)
- PathRemoveBackslashW (Address: 0x1806029e0)
- PathRemoveBlanksW (Address: 0x180602a90)
- PathRemoveExtensionW (Address: 0x1806029f0)
- PathRemoveFileSpecW (Address: 0x180602a28)
- PathSkipRootW (Address: 0x180602a78)
- PathStripToRootW (Address: 0x180602a70)
- PathUnExpandEnvStringsW (Address: 0x180602a10)
- PathUnquoteSpacesW (Address: 0x180602aa8)
- SHExpandEnvironmentStringsW (Address: 0x180602a88)
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll
- QISearch (Address: 0x180602b40)
- StrChrA (Address: 0x180602ba8)
- StrChrIA (Address: 0x180602bb0)
- StrChrIW (Address: 0x180602bc0)
- StrChrW (Address: 0x180602bc8)
- StrCmpCW (Address: 0x180602ae8)
- StrCmpICA (Address: 0x180602b28)
- StrCmpICW (Address: 0x180602b48)
- StrCmpIW (Address: 0x180602b18)
- StrCmpLogicalW (Address: 0x180602b58)
- StrCmpNA (Address: 0x180602bd8)
- StrCmpNCW (Address: 0x180602ba0)
- StrCmpNIA (Address: 0x180602b90)
- StrCmpNICW (Address: 0x180602b88)
- StrCmpNIW (Address: 0x180602ad8)
- StrCmpNW (Address: 0x180602ac8)
- StrCmpW (Address: 0x180602ad0)
- StrCSpnW (Address: 0x180602ac0)
- StrDupA (Address: 0x180602b98)
- StrDupW (Address: 0x180602b80)
- StrPBrkW (Address: 0x180602b70)
- StrRChrA (Address: 0x180602b68)
- StrRChrIA (Address: 0x180602b30)
- StrRChrIW (Address: 0x180602b20)
- StrRChrW (Address: 0x180602af8)
- StrRStrIA (Address: 0x180602b38)
- StrRStrIW (Address: 0x180602b50)
- StrSpnW (Address: 0x180602b60)
- StrStrA (Address: 0x180602b78)
- StrStrIA (Address: 0x180602b10)
- StrStrIW (Address: 0x180602b08)
- StrStrW (Address: 0x180602bd0)
- StrToIntA (Address: 0x180602ae0)
- StrToIntExW (Address: 0x180602af0)
- StrToIntW (Address: 0x180602b00)
- StrTrimW (Address: 0x180602bb8)
api-ms-win-core-sidebyside-l1-1-0.dll
- ActivateActCtx (Address: 0x180602bf8)
- CreateActCtxW (Address: 0x180602be8)
- DeactivateActCtx (Address: 0x180602c00)
- QueryActCtxW (Address: 0x180602c08)
- ReleaseActCtx (Address: 0x180602bf0)
api-ms-win-core-string-l1-1-0.dll
- CompareStringEx (Address: 0x180602c40)
- CompareStringOrdinal (Address: 0x180602c18)
- CompareStringW (Address: 0x180602c28)
- GetStringTypeExW (Address: 0x180602c30)
- GetStringTypeW (Address: 0x180602c38)
- MultiByteToWideChar (Address: 0x180602c48)
- WideCharToMultiByte (Address: 0x180602c20)
api-ms-win-core-string-l2-1-0.dll
- CharLowerBuffW (Address: 0x180602c60)
- CharLowerW (Address: 0x180602c88)
- CharNextW (Address: 0x180602c68)
- CharPrevW (Address: 0x180602c80)
- CharUpperBuffW (Address: 0x180602c70)
- CharUpperW (Address: 0x180602c78)
- IsCharAlphaW (Address: 0x180602c58)
api-ms-win-core-string-l2-1-1.dll
- SHLoadIndirectString (Address: 0x180602c98)
api-ms-win-core-string-obsolete-l1-1-0.dll
- lstrcmpA (Address: 0x180602cb8)
- lstrcmpiA (Address: 0x180602cb0)
- lstrcmpiW (Address: 0x180602cc0)
- lstrcmpW (Address: 0x180602cd0)
- lstrlenA (Address: 0x180602cc8)
- lstrlenW (Address: 0x180602ca8)
api-ms-win-core-stringansi-l1-1-0.dll
- CharNextA (Address: 0x180602ce0)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x180602d18)
- AcquireSRWLockShared (Address: 0x180602dc0)
- CreateEventExW (Address: 0x180602d88)
- CreateEventW (Address: 0x180602cf0)
- CreateMutexExW (Address: 0x180602d60)
- CreateMutexW (Address: 0x180602da8)
- CreateSemaphoreExW (Address: 0x180602d98)
- DeleteCriticalSection (Address: 0x180602d28)
- EnterCriticalSection (Address: 0x180602d80)
- InitializeCriticalSection (Address: 0x180602d50)
- InitializeCriticalSectionAndSpinCount (Address: 0x180602d20)
- InitializeCriticalSectionEx (Address: 0x180602d68)
- InitializeSRWLock (Address: 0x180602d38)
- LeaveCriticalSection (Address: 0x180602d70)
- OpenEventW (Address: 0x180602db8)
- OpenMutexW (Address: 0x180602d40)
- OpenSemaphoreW (Address: 0x180602d08)
- ReleaseMutex (Address: 0x180602d48)
- ReleaseSemaphore (Address: 0x180602d78)
- ReleaseSRWLockExclusive (Address: 0x180602d90)
- ReleaseSRWLockShared (Address: 0x180602dd0)
- ResetEvent (Address: 0x180602d00)
- SetEvent (Address: 0x180602cf8)
- TryAcquireSRWLockExclusive (Address: 0x180602d30)
- TryAcquireSRWLockShared (Address: 0x180602dc8)
- TryEnterCriticalSection (Address: 0x180602da0)
- WaitForMultipleObjectsEx (Address: 0x180602db0)
- WaitForSingleObject (Address: 0x180602d58)
- WaitForSingleObjectEx (Address: 0x180602d10)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceBeginInitialize (Address: 0x180602de8)
- InitOnceComplete (Address: 0x180602df0)
- InitOnceExecuteOnce (Address: 0x180602de0)
- Sleep (Address: 0x180602df8)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetComputerNameExW (Address: 0x180602e18)
- GetLocalTime (Address: 0x180602e30)
- GetSystemDirectoryW (Address: 0x180602e50)
- GetSystemInfo (Address: 0x180602e48)
- GetSystemTime (Address: 0x180602e38)
- GetSystemTimeAsFileTime (Address: 0x180602e58)
- GetSystemWindowsDirectoryW (Address: 0x180602e08)
- GetTickCount (Address: 0x180602e60)
- GetTickCount64 (Address: 0x180602e20)
- GetVersionExW (Address: 0x180602e40)
- GetWindowsDirectoryW (Address: 0x180602e28)
- GlobalMemoryStatusEx (Address: 0x180602e10)
api-ms-win-core-sysinfo-l1-2-0.dll
- GetNativeSystemInfo (Address: 0x180602e88)
- GetProductInfo (Address: 0x180602e80)
- GetSystemTimePreciseAsFileTime (Address: 0x180602e78)
- VerSetConditionMask (Address: 0x180602e70)
api-ms-win-core-sysinfo-l1-2-3.dll
- GetIntegratedDisplaySize (Address: 0x180602e98)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x180602ed0)
- CloseThreadpoolWait (Address: 0x180602f00)
- CloseThreadpoolWork (Address: 0x180602eb0)
- CreateThreadpoolTimer (Address: 0x180602ee0)
- CreateThreadpoolWait (Address: 0x180602ee8)
- CreateThreadpoolWork (Address: 0x180602eb8)
- IsThreadpoolTimerSet (Address: 0x180602ea8)
- SetThreadpoolTimer (Address: 0x180602ed8)
- SetThreadpoolTimerEx (Address: 0x180602f08)
- SetThreadpoolWait (Address: 0x180602ef0)
- SubmitThreadpoolWork (Address: 0x180602ec0)
- TrySubmitThreadpoolCallback (Address: 0x180602f10)
- WaitForThreadpoolTimerCallbacks (Address: 0x180602ec8)
- WaitForThreadpoolWaitCallbacks (Address: 0x180602ef8)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
- CreateTimerQueueTimer (Address: 0x180602f30)
- DeleteTimerQueueTimer (Address: 0x180602f28)
- QueueUserWorkItem (Address: 0x180602f38)
- UnregisterWaitEx (Address: 0x180602f20)
api-ms-win-core-timezone-l1-1-0.dll
- FileTimeToSystemTime (Address: 0x180602f68)
- GetTimeZoneInformationForYear (Address: 0x180602f58)
- SystemTimeToFileTime (Address: 0x180602f60)
- SystemTimeToTzSpecificLocalTime (Address: 0x180602f48)
- TzSpecificLocalTimeToSystemTime (Address: 0x180602f50)
api-ms-win-core-url-l1-1-0.dll
- HashData (Address: 0x180602f98)
- ParseURLW (Address: 0x180602f90)
- PathCreateFromUrlAlloc (Address: 0x180602fb8)
- PathCreateFromUrlW (Address: 0x180602f88)
- PathIsURLW (Address: 0x180602f78)
- UrlApplySchemeW (Address: 0x180602fe0)
- UrlCanonicalizeW (Address: 0x180602fa8)
- UrlCompareW (Address: 0x180602fd0)
- UrlCreateFromPathW (Address: 0x180602fc8)
- UrlEscapeW (Address: 0x180602fe8)
- UrlFixupW (Address: 0x180602fb0)
- UrlGetPartW (Address: 0x180602fd8)
- UrlIsW (Address: 0x180602f80)
- UrlUnescapeA (Address: 0x180602fa0)
- UrlUnescapeW (Address: 0x180602fc0)
api-ms-win-core-util-l1-1-0.dll
- DecodePointer (Address: 0x180602ff8)
- EncodePointer (Address: 0x180603000)
api-ms-win-core-version-l1-1-0.dll
- GetFileVersionInfoExW (Address: 0x180603010)
- GetFileVersionInfoSizeExW (Address: 0x180603018)
- VerQueryValueW (Address: 0x180603020)
api-ms-win-core-version-l1-1-1.dll
- GetFileVersionInfoSizeW (Address: 0x180603038)
- GetFileVersionInfoW (Address: 0x180603030)
api-ms-win-core-wow64-l1-1-0.dll
- Wow64DisableWow64FsRedirection (Address: 0x180603050)
- Wow64RevertWow64FsRedirection (Address: 0x180603048)
api-ms-win-core-wow64-l1-1-1.dll
- GetSystemWow64DirectoryW (Address: 0x180603060)
- IsWow64Process2 (Address: 0x180603068)
api-ms-win-crt-private-l1-1-0.dll
- __C_specific_handler (Address: 0x1806031b8)
- __current_exception (Address: 0x180603160)
- __current_exception_context (Address: 0x180603168)
- __CxxFrameHandler3 (Address: 0x180603158)
- __CxxFrameHandler4 (Address: 0x1806032c0)
- __std_terminate (Address: 0x1806032b8)
- _CxxThrowException (Address: 0x1806032d8)
- _o___std_exception_copy (Address: 0x1806032a8)
- _o___std_exception_destroy (Address: 0x1806032a0)
- _o___std_type_info_destroy_list (Address: 0x180603298)
- _o___stdio_common_vsnprintf_s (Address: 0x180603290)
- _o___stdio_common_vsprintf (Address: 0x180603288)
- _o___stdio_common_vsprintf_s (Address: 0x180603280)
- _o___stdio_common_vswprintf (Address: 0x180603278)
- _o___stdio_common_vswscanf (Address: 0x180603270)
- _o__beginthreadex (Address: 0x180603268)
- _o__cexit (Address: 0x180603260)
- _o__configure_narrow_argv (Address: 0x180603258)
- _o__crt_atexit (Address: 0x180603250)
- _o__difftime64 (Address: 0x180603248)
- _o__errno (Address: 0x180603240)
- _o__execute_onexit_table (Address: 0x180603238)
- _o__get_errno (Address: 0x180603230)
- _o__initialize_narrow_environment (Address: 0x180603228)
- _o__initialize_onexit_table (Address: 0x180603220)
- _o__invalid_parameter_noinfo (Address: 0x180603218)
- _o__invalid_parameter_noinfo_noreturn (Address: 0x180603210)
- _o__itow (Address: 0x180603208)
- _o__purecall (Address: 0x1806031f8)
- _o__register_onexit_function (Address: 0x1806031f0)
- _o__resetstkoflw (Address: 0x1806031e8)
- _o__seh_filter_dll (Address: 0x1806032b0)
- _o__set_errno (Address: 0x1806031d8)
- _o__strnicmp (Address: 0x1806031c8)
- _o__ui64tow_s (Address: 0x1806031c0)
- _o__wcsicmp (Address: 0x1806031b0)
- _o__wcslwr (Address: 0x1806031a8)
- _o__wcsnicmp (Address: 0x1806031a0)
- _o__wcstoui64 (Address: 0x180603198)
- _o__wtoi (Address: 0x180603188)
- _o_abort (Address: 0x180603180)
- _o_ceil (Address: 0x180603178)
- _o_ceilf (Address: 0x180603170)
- _o_expf (Address: 0x180603200)
- _o_floor (Address: 0x1806031e0)
- _o_floorf (Address: 0x1806031d0)
- _o_free (Address: 0x180603190)
- _o_isdigit (Address: 0x180603078)
- _o_iswprint (Address: 0x180603080)
- _o_iswspace (Address: 0x180603088)
- _o_log (Address: 0x180603090)
- _o_logf (Address: 0x180603098)
- _o_malloc (Address: 0x1806030a8)
- _o_pow (Address: 0x1806030b0)
- _o_powf (Address: 0x1806030b8)
- _o_qsort (Address: 0x1806032c8)
- _o_rand (Address: 0x1806030c0)
- _o_realloc (Address: 0x1806030c8)
- _o_sqrt (Address: 0x1806030d0)
- _o_sqrtf (Address: 0x1806030d8)
- _o_srand (Address: 0x1806030e0)
- _o_strncpy_s (Address: 0x1806030e8)
- _o_strtol (Address: 0x1806030f0)
- _o_terminate (Address: 0x1806030f8)
- _o_towlower (Address: 0x180603100)
- _o_wcscat_s (Address: 0x180603108)
- _o_wcscpy_s (Address: 0x180603110)
- _o_wcsncpy_s (Address: 0x180603120)
- _o_wcstok_s (Address: 0x180603128)
- _o_wcstol (Address: 0x180603130)
- _o_wcstoul (Address: 0x180603138)
- _o_wcstoull (Address: 0x180603140)
- memcmp (Address: 0x1806032e0)
- memcpy (Address: 0x1806032e8)
- memmove (Address: 0x180603118)
- strchr (Address: 0x180603148)
- wcschr (Address: 0x1806032d0)
- wcsrchr (Address: 0x180603150)
- wcsstr (Address: 0x1806030a0)
api-ms-win-crt-runtime-l1-1-0.dll
- _initterm (Address: 0x180603300)
- _initterm_e (Address: 0x1806032f8)
api-ms-win-crt-string-l1-1-0.dll
- memset (Address: 0x180603318)
- wcscmp (Address: 0x180603338)
- wcscspn (Address: 0x180603330)
- wcsncmp (Address: 0x180603310)
- wcspbrk (Address: 0x180603320)
- wcsspn (Address: 0x180603328)
api-ms-win-crt-time-l1-1-0.dll
- _time64 (Address: 0x180603348)
api-ms-win-eventing-classicprovider-l1-1-0.dll
- GetTraceEnableFlags (Address: 0x180603370)
- GetTraceEnableLevel (Address: 0x180603360)
- GetTraceLoggerHandle (Address: 0x180603368)
- RegisterTraceGuidsW (Address: 0x180603358)
- UnregisterTraceGuids (Address: 0x180603378)
api-ms-win-eventing-provider-l1-1-0.dll
- EventActivityIdControl (Address: 0x180603390)
- EventRegister (Address: 0x1806033a0)
- EventSetInformation (Address: 0x180603398)
- EventUnregister (Address: 0x1806033a8)
- EventWriteTransfer (Address: 0x180603388)
api-ms-win-ro-typeresolution-l1-1-1.dll
- RoCreatePropertySetSerializer (Address: 0x1806033b8)
api-ms-win-security-base-l1-1-0.dll
- AccessCheck (Address: 0x180603408)
- AddAccessAllowedAceEx (Address: 0x180603410)
- AddAccessDeniedAceEx (Address: 0x180603440)
- AddAce (Address: 0x180603448)
- AdjustTokenPrivileges (Address: 0x180603478)
- CheckTokenMembership (Address: 0x1806034b8)
- CopySid (Address: 0x180603418)
- CreateWellKnownSid (Address: 0x180603468)
- DeleteAce (Address: 0x180603480)
- DuplicateToken (Address: 0x180603400)
- DuplicateTokenEx (Address: 0x180603438)
- EqualSid (Address: 0x180603498)
- GetAce (Address: 0x180603450)
- GetAclInformation (Address: 0x180603470)
- GetFileSecurityW (Address: 0x1806034a8)
- GetLengthSid (Address: 0x180603458)
- GetSecurityDescriptorControl (Address: 0x1806033e8)
- GetSidIdentifierAuthority (Address: 0x1806033d8)
- GetSidLengthRequired (Address: 0x1806033c8)
- GetSidSubAuthority (Address: 0x1806033e0)
- GetSidSubAuthorityCount (Address: 0x1806034b0)
- GetTokenInformation (Address: 0x1806034a0)
- ImpersonateSelf (Address: 0x1806033f0)
- InitializeAcl (Address: 0x180603490)
- InitializeSid (Address: 0x1806033d0)
- IsValidSid (Address: 0x180603460)
- IsWellKnownSid (Address: 0x180603430)
- RevertToSelf (Address: 0x1806033f8)
- SetFileSecurityW (Address: 0x180603488)
- SetSecurityDescriptorOwner (Address: 0x180603428)
- SetTokenInformation (Address: 0x180603420)
api-ms-win-stateseparation-helpers-l1-1-0.dll
- GetPersistedRegistryLocationW (Address: 0x1806034c8)
GDI32.dll
- BitBlt (Address: 0x180601500)
- CombineRgn (Address: 0x180601660)
- CreateCompatibleBitmap (Address: 0x1806015b8)
- CreateCompatibleDC (Address: 0x1806014d8)
- CreateDCW (Address: 0x1806014f0)
- CreateDIBSection (Address: 0x1806014d0)
- CreateFontIndirectW (Address: 0x180601580)
- CreateFontW (Address: 0x180601698)
- CreatePen (Address: 0x1806015d0)
- CreatePolygonRgn (Address: 0x180601618)
- CreateRectRgn (Address: 0x1806015d8)
- CreateRectRgnIndirect (Address: 0x180601648)
- CreateSolidBrush (Address: 0x180601510)
- DeleteDC (Address: 0x1806014e8)
- DeleteMetaFile (Address: 0x180601578)
- DeleteObject (Address: 0x1806014a8)
- ExcludeClipRect (Address: 0x1806014c8)
- ExtSelectClipRgn (Address: 0x180601638)
- ExtTextOutW (Address: 0x180601688)
- GdiAlphaBlend (Address: 0x1806014f8)
- GdiTransparentBlt (Address: 0x180601530)
- GetClipBox (Address: 0x180601590)
- GetClipRgn (Address: 0x1806015e0)
- GetCurrentObject (Address: 0x1806015c8)
- GetDeviceCaps (Address: 0x1806014c0)
- GetDIBColorTable (Address: 0x180601690)
- GetDIBits (Address: 0x180601520)
- GetLayout (Address: 0x1806016b8)
- GetObjectType (Address: 0x180601680)
- GetObjectW (Address: 0x180601508)
- GetPixel (Address: 0x1806016a0)
- GetRegionData (Address: 0x180601670)
- GetRgnBox (Address: 0x180601668)
- GetStockObject (Address: 0x1806014a0)
- GetTextAlign (Address: 0x180601620)
- GetTextColor (Address: 0x180601598)
- GetTextExtentPoint32A (Address: 0x1806016a8)
- GetTextExtentPoint32W (Address: 0x1806015a0)
- GetTextExtentPointW (Address: 0x1806014b0)
- GetTextMetricsW (Address: 0x1806015b0)
- GetViewportOrgEx (Address: 0x180601588)
- GetWindowOrgEx (Address: 0x180601678)
- IntersectClipRect (Address: 0x1806015e8)
- LineTo (Address: 0x180601610)
- LPtoDP (Address: 0x180601550)
- MoveToEx (Address: 0x180601608)
- OffsetWindowOrgEx (Address: 0x180601630)
- PatBlt (Address: 0x180601600)
- PlayMetaFile (Address: 0x180601570)
- Rectangle (Address: 0x180601560)
- RestoreDC (Address: 0x180601650)
- SaveDC (Address: 0x180601658)
- SelectClipRgn (Address: 0x1806015f0)
- SelectObject (Address: 0x1806014e0)
- SetBkColor (Address: 0x180601490)
- SetBkMode (Address: 0x180601518)
- SetDCBrushColor (Address: 0x180601640)
- SetLayout (Address: 0x180601498)
- SetMapMode (Address: 0x180601538)
- SetMetaFileBitsEx (Address: 0x180601558)
- SetStretchBltMode (Address: 0x1806015f8)
- SetTextAlign (Address: 0x1806015c0)
- SetTextColor (Address: 0x1806014b8)
- SetViewportExtEx (Address: 0x180601548)
- SetViewportOrgEx (Address: 0x180601568)
- SetWindowExtEx (Address: 0x180601540)
- SetWindowOrgEx (Address: 0x180601628)
- StretchBlt (Address: 0x180601528)
- StretchDIBits (Address: 0x1806015a8)
- TextOutA (Address: 0x1806016b0)
KERNELBASE.dll
- ClosePackageInfo (Address: 0x1806016e8)
- CloseState (Address: 0x180601708)
- GetCurrentPackageInfo (Address: 0x180601750)
- GetEffectivePackageStatusForUser (Address: 0x180601738)
- GetPackageFullName (Address: 0x180601740)
- GetPackageInfo (Address: 0x1806016e0)
- GetPackagesByPackageFamily (Address: 0x180601748)
- GetStagedPackagePathByFullName2 (Address: 0x1806016c8)
- GetStateFolder (Address: 0x180601710)
- GetSystemAppDataKey (Address: 0x1806016f0)
- IsMrtResourceRedirectionEnabled (Address: 0x1806016d0)
- NotifyRedirectedStringChange (Address: 0x180601700)
- OpenPackageInfoByFullName (Address: 0x1806016d8)
- OpenState (Address: 0x180601720)
- OpenStateExplicit (Address: 0x180601718)
- PackageNameAndPublisherIdFromFamilyName (Address: 0x180601728)
- ParseApplicationUserModelId (Address: 0x180601730)
- SHLoadIndirectStringInternal (Address: 0x1806016f8)
msvcp_win.dll
- _Cnd_do_broadcast_at_thread_exit (Address: 0x180603688)
- _Thrd_id (Address: 0x180603690)
- _Thrd_join (Address: 0x1806036a0)
- _Thrd_yield (Address: 0x180603628)
- _Xtime_get_ticks (Address: 0x180603678)
- ?__ExceptionPtrAssign@@YAXPEAXPEBX@Z (Address: 0x180603638)
- ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z (Address: 0x180603648)
- ?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z (Address: 0x180603620)
- ?__ExceptionPtrCreate@@YAXPEAX@Z (Address: 0x180603640)
- ?__ExceptionPtrCurrentException@@YAXPEAX@Z (Address: 0x180603630)
- ?__ExceptionPtrDestroy@@YAXPEAX@Z (Address: 0x180603650)
- ?__ExceptionPtrRethrow@@YAXPEBX@Z (Address: 0x180603658)
- ?__ExceptionPtrToBool@@YA_NPEBX@Z (Address: 0x180603660)
- ?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ (Address: 0x180603598)
- ?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ (Address: 0x1806035d0)
- ?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ (Address: 0x1806035e8)
- ?_Throw_Cpp_error@std@@YAXH@Z (Address: 0x180603698)
- ?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ (Address: 0x1806035b0)
- ?_Xbad_function_call@std@@YAXXZ (Address: 0x180603680)
- ?_Xinvalid_argument@std@@YAXPEBD@Z (Address: 0x180603668)
- ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x180603608)
- ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x180603670)
- ??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ (Address: 0x1806034e0)
- ??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z (Address: 0x1806034f8)
- ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ (Address: 0x180603520)
- ??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x180603590)
- ??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x180603568)
- ??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x180603570)
- ?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x180603510)
- ?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x180603508)
- ?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x1806034f0)
- ?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGXZ (Address: 0x180603600)
- ?flags@ios_base@std@@QEBAHXZ (Address: 0x1806035e0)
- ?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ (Address: 0x1806035a8)
- ?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z (Address: 0x180603578)
- ?good@ios_base@std@@QEBA_NXZ (Address: 0x1806035c0)
- ?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x180603588)
- ?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x180603530)
- ?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x180603528)
- ?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x180603580)
- ?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ (Address: 0x1806035f8)
- ?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z (Address: 0x180603538)
- ?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z (Address: 0x180603500)
- ?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG0@Z (Address: 0x180603518)
- ?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z (Address: 0x1806034e8)
- ?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z (Address: 0x180603618)
- ?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ (Address: 0x180603548)
- ?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z (Address: 0x1806035f0)
- ?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z (Address: 0x180603558)
- ?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ (Address: 0x1806035c8)
- ?tellp@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ (Address: 0x1806034d8)
- ?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ (Address: 0x1806035a0)
- ?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ (Address: 0x180603560)
- ?uncaught_exception@std@@YA_NXZ (Address: 0x1806035b8)
- ?width@ios_base@std@@QEAA_J_J@Z (Address: 0x180603610)
- ?width@ios_base@std@@QEBA_JXZ (Address: 0x1806035d8)
- ?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z (Address: 0x180603540)
- ?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z (Address: 0x180603550)
ntdll.dll
- EtwEventActivityIdControl (Address: 0x1806037a0)
- EtwEventEnabled (Address: 0x1806037a8)
- EtwEventRegister (Address: 0x180603798)
- EtwEventSetInformation (Address: 0x180603780)
- EtwEventUnregister (Address: 0x180603790)
- EtwEventWrite (Address: 0x1806037b0)
- EtwEventWriteTransfer (Address: 0x180603788)
- EtwGetTraceEnableFlags (Address: 0x180603800)
- EtwGetTraceEnableLevel (Address: 0x1806037f8)
- EtwGetTraceLoggerHandle (Address: 0x1806037f0)
- EtwLogTraceEvent (Address: 0x180603878)
- EtwRegisterTraceGuidsW (Address: 0x180603808)
- EtwTraceMessage (Address: 0x1806037b8)
- EtwUnregisterTraceGuids (Address: 0x180603810)
- NtClose (Address: 0x180603710)
- NtCreateFile (Address: 0x180603708)
- NtFsControlFile (Address: 0x180603718)
- NtMapViewOfSection (Address: 0x1806038d0)
- NtOpenFile (Address: 0x180603730)
- NtOpenProcessToken (Address: 0x1806038b0)
- NtOpenThreadToken (Address: 0x180603870)
- NtPowerInformation (Address: 0x1806037e8)
- NtQueryInformationFile (Address: 0x1806036f8)
- NtQueryInformationProcess (Address: 0x1806037d8)
- NtQueryInformationThread (Address: 0x180603890)
- NtQueryInformationToken (Address: 0x1806038b8)
- NtQueryKey (Address: 0x180603898)
- NtQueryObject (Address: 0x1806038a0)
- NtQuerySystemInformation (Address: 0x1806038f0)
- NtQueryWnfStateData (Address: 0x1806037c0)
- NtSetInformationFile (Address: 0x180603728)
- NtSetInformationToken (Address: 0x1806038a8)
- NtUnmapViewOfSection (Address: 0x1806038c0)
- RtlAcquireResourceExclusive (Address: 0x1806036b8)
- RtlCheckRegistryKey (Address: 0x1806038e8)
- RtlCreateEnvironment (Address: 0x180603768)
- RtlDeleteResource (Address: 0x1806036b0)
- RtlDeriveCapabilitySidsFromName (Address: 0x180603830)
- RtlDestroyEnvironment (Address: 0x180603778)
- RtlDllShutdownInProgress (Address: 0x180603858)
- RtlDosPathNameToNtPathName_U_WithStatus (Address: 0x180603738)
- RtlEqualSid (Address: 0x180603860)
- RtlExpandEnvironmentStrings_U (Address: 0x180603760)
- RtlFreeHeap (Address: 0x180603740)
- RtlGetNtProductType (Address: 0x180603820)
- RtlGetNtSystemRoot (Address: 0x1806038d8)
- RtlImageNtHeaderEx (Address: 0x1806038c8)
- RtlInitializeResource (Address: 0x1806036c0)
- RtlInitUnicodeString (Address: 0x1806036e8)
- RtlInitUnicodeStringEx (Address: 0x180603748)
- RtlIsNonEmptyDirectoryReparsePointAllowed (Address: 0x180603850)
- RtlIsPartialPlaceholder (Address: 0x1806038f8)
- RtlMapGenericMask (Address: 0x180603818)
- RtlNtStatusToDosError (Address: 0x180603700)
- RtlNtStatusToDosErrorNoTeb (Address: 0x180603880)
- RtlPrefixString (Address: 0x1806036f0)
- RtlPublishWnfStateData (Address: 0x1806037c8)
- RtlQueryElevationFlags (Address: 0x180603868)
- RtlQueryEnvironmentVariable_U (Address: 0x180603750)
- RtlQueryRegistryValuesEx (Address: 0x1806038e0)
- RtlQueryResourcePolicy (Address: 0x1806036e0)
- RtlQueryWnfStateData (Address: 0x180603888)
- RtlRandomEx (Address: 0x180603840)
- RtlReleaseResource (Address: 0x1806036d8)
- RtlSetCurrentEnvironment (Address: 0x180603770)
- RtlSetEnvironmentVariable (Address: 0x180603758)
- RtlSubscribeWnfStateChangeNotification (Address: 0x1806036d0)
- RtlUnicodeStringToOemString (Address: 0x180603720)
- RtlUnsubscribeWnfStateChangeNotification (Address: 0x1806036c8)
- ShipAssert (Address: 0x180603848)
- WinSqmAddToStream (Address: 0x180603828)
- WinSqmAddToStreamEx (Address: 0x180603838)
- WinSqmIncrementDWORD (Address: 0x1806037d0)
- WinSqmSetDWORD (Address: 0x1806037e0)
- ZwQueryWnfStateData (Address: 0x180603900)
USER32.dll
- (Address: 0x1806019f0)
- (Address: 0x180601b50)
- (Address: 0x180601ce0)
- (Address: 0x1806017d0)
- (Address: 0x180601880)
- (Address: 0x1806018e8)
- ActivateKeyboardLayout (Address: 0x180601958)
- AdjustWindowRect (Address: 0x180601b70)
- AdjustWindowRectEx (Address: 0x180601bb8)
- AdjustWindowRectExForDpi (Address: 0x1806019d8)
- AllowSetForegroundWindow (Address: 0x180601de0)
- AnimateWindow (Address: 0x180601778)
- AppendMenuW (Address: 0x180601b40)
- AreDpiAwarenessContextsEqual (Address: 0x180602070)
- AttachThreadInput (Address: 0x180601bd0)
- BeginDeferWindowPos (Address: 0x180602078)
- BeginPaint (Address: 0x180601c20)
- BroadcastSystemMessageW (Address: 0x180601a60)
- CallNextHookEx (Address: 0x1806019b0)
- CallWindowProcW (Address: 0x180601a28)
- ChangeClipboardChain (Address: 0x180601b20)
- ChangeWindowMessageFilterEx (Address: 0x180601c68)
- CheckDlgButton (Address: 0x180601f40)
- CheckMenuItem (Address: 0x180601b30)
- CheckMenuRadioItem (Address: 0x180601b38)
- CheckRadioButton (Address: 0x1806018a8)
- ChildWindowFromPoint (Address: 0x180601788)
- ClientToScreen (Address: 0x1806018b8)
- CloseClipboard (Address: 0x180601a88)
- CloseDesktop (Address: 0x180601ab8)
- CloseGestureInfoHandle (Address: 0x180601b08)
- CopyAcceleratorTableW (Address: 0x180601ba0)
- CopyIcon (Address: 0x180601d88)
- CopyImage (Address: 0x180601c10)
- CopyRect (Address: 0x180601998)
- CountClipboardFormats (Address: 0x180601e18)
- CreateAcceleratorTableW (Address: 0x180601898)
- CreateDialogIndirectParamW (Address: 0x180601790)
- CreateDialogParamW (Address: 0x180601798)
- CreateMenu (Address: 0x180601ae0)
- CreatePopupMenu (Address: 0x180601f60)
- CreateWindowExW (Address: 0x180601c88)
- CreateWindowInBand (Address: 0x180601ac8)
- CreateWindowIndirect (Address: 0x180601978)
- DdeCreateDataHandle (Address: 0x180601840)
- DdeCreateStringHandleW (Address: 0x180601838)
- DdeDisconnect (Address: 0x180601820)
- DdeFreeStringHandle (Address: 0x180601830)
- DdeGetData (Address: 0x180601850)
- DdeGetLastError (Address: 0x180601848)
- DdeInitializeW (Address: 0x180601808)
- DdeNameService (Address: 0x180601818)
- DdeQueryConvInfo (Address: 0x180601858)
- DdeQueryStringW (Address: 0x180601828)
- DdeUninitialize (Address: 0x180601810)
- DeferWindowPos (Address: 0x180601b90)
- DefWindowProcA (Address: 0x180601bd8)
- DefWindowProcW (Address: 0x180601eb0)
- DeleteMenu (Address: 0x180601f50)
- DeregisterShellHookWindow (Address: 0x180601bf0)
- DestroyAcceleratorTable (Address: 0x180601b98)
- DestroyIcon (Address: 0x180601f90)
- DestroyMenu (Address: 0x180601f58)
- DestroyWindow (Address: 0x180601e78)
- DialogBoxIndirectParamW (Address: 0x1806017a0)
- DialogBoxParamW (Address: 0x180601a48)
- DispatchMessageW (Address: 0x180601f78)
- DisplayConfigGetDeviceInfo (Address: 0x1806017f0)
- DrawEdge (Address: 0x180601b18)
- DrawFocusRect (Address: 0x180601f98)
- DrawIcon (Address: 0x180601fa0)
- DrawIconEx (Address: 0x180602060)
- DrawTextExW (Address: 0x1806018d0)
- DrawTextW (Address: 0x180601db8)
- EmptyClipboard (Address: 0x1806017c0)
- EnableMenuItem (Address: 0x180601e30)
- EnableWindow (Address: 0x180601ee0)
- EndDeferWindowPos (Address: 0x180601b68)
- EndDialog (Address: 0x180601fb0)
- EndMenu (Address: 0x180601ae8)
- EndPaint (Address: 0x180601c18)
- EnumChildWindows (Address: 0x180601a80)
- EnumDisplayDevicesW (Address: 0x180601d10)
- EnumDisplayMonitors (Address: 0x180601890)
- EnumDisplaySettingsW (Address: 0x180601868)
- EnumPropsExW (Address: 0x180601c78)
- EnumWindows (Address: 0x180601d90)
- EqualRect (Address: 0x180601ca8)
- ExitWindowsEx (Address: 0x180601e60)
- FillRect (Address: 0x180601dc8)
- FindWindowExW (Address: 0x180601960)
- FindWindowW (Address: 0x180601ec0)
- GetAncestor (Address: 0x180601ed8)
- GetAsyncKeyState (Address: 0x180601cd8)
- GetCapture (Address: 0x180601940)
- GetClassInfoExW (Address: 0x180601a20)
- GetClassInfoW (Address: 0x180601c08)
- GetClassLongPtrW (Address: 0x180601870)
- GetClassLongW (Address: 0x180602050)
- GetClassNameW (Address: 0x180601ec8)
- GetClientRect (Address: 0x180601fd8)
- GetClipboardData (Address: 0x180601a98)
- GetClipboardOwner (Address: 0x180601e28)
- GetComboBoxInfo (Address: 0x180601c48)
- GetCurrentInputMessageSource (Address: 0x180602058)
- GetCursor (Address: 0x180602040)
- GetCursorPos (Address: 0x180601e90)
- GetDC (Address: 0x180601d50)
- GetDesktopWindow (Address: 0x180602080)
- GetDialogBaseUnits (Address: 0x180601910)
- GetDisplayConfigBufferSizes (Address: 0x180601d40)
- GetDlgCtrlID (Address: 0x180601b78)
- GetDlgItem (Address: 0x180601ff8)
- GetDlgItemInt (Address: 0x1806018c0)
- GetDlgItemTextW (Address: 0x180602020)
- GetDoubleClickTime (Address: 0x180601cf0)
- GetDpiForSystem (Address: 0x180601a50)
- GetDpiForWindow (Address: 0x180601a58)
- GetFocus (Address: 0x180601e68)
- GetForegroundWindow (Address: 0x180601cd0)
- GetGestureInfo (Address: 0x180601b10)
- GetIconInfo (Address: 0x180601c70)
- GetKeyboardLayout (Address: 0x180601d68)
- GetKeyState (Address: 0x180601e38)
- GetLastActivePopup (Address: 0x180601e80)
- GetLastInputInfo (Address: 0x1806019a8)
- GetMenuDefaultItem (Address: 0x180601e48)
- GetMenuInfo (Address: 0x1806017c8)
- GetMenuItemCount (Address: 0x180601e58)
- GetMenuItemID (Address: 0x180601df8)
- GetMenuItemInfoW (Address: 0x180601e50)
- GetMenuState (Address: 0x180601e10)
- GetMenuStringW (Address: 0x180601e40)
- GetMessageExtraInfo (Address: 0x180601af0)
- GetMessagePos (Address: 0x1806017b0)
- GetMessageTime (Address: 0x1806018b0)
- GetMessageW (Address: 0x180601f88)
- GetMonitorInfoW (Address: 0x180601cb8)
- GetParent (Address: 0x180601f30)
- GetPointerDevices (Address: 0x1806019a0)
- GetProcessDefaultLayout (Address: 0x1806017a8)
- GetPropW (Address: 0x180601d98)
- GetScrollInfo (Address: 0x180601d28)
- GetShellWindow (Address: 0x180601a68)
- GetSubMenu (Address: 0x180601f20)
- GetSysColor (Address: 0x180601fa8)
- GetSysColorBrush (Address: 0x180601dc0)
- GetSystemMenu (Address: 0x1806019c8)
- GetSystemMetrics (Address: 0x180601fe0)
- GetSystemMetricsForDpi (Address: 0x180601968)
- GetTaskmanWindow (Address: 0x180601c00)
- GetUpdateRect (Address: 0x180601948)
- GetWindow (Address: 0x180601eb8)
- GetWindowBand (Address: 0x180601c80)
- GetWindowDC (Address: 0x180601988)
- GetWindowDpiAwarenessContext (Address: 0x180601bc0)
- GetWindowLongPtrW (Address: 0x180601fb8)
- GetWindowLongW (Address: 0x180601d38)
- GetWindowPlacement (Address: 0x180601a70)
- GetWindowRect (Address: 0x180601e98)
- GetWindowTextLengthW (Address: 0x180601c58)
- GetWindowTextW (Address: 0x180601fc8)
- GetWindowThreadProcessId (Address: 0x180601d70)
- HideCaret (Address: 0x180601760)
- InflateRect (Address: 0x180601d30)
- InsertMenuItemW (Address: 0x180601b28)
- InsertMenuW (Address: 0x180601df0)
- IntersectRect (Address: 0x180601cb0)
- InvalidateRect (Address: 0x180602000)
- InvalidateRgn (Address: 0x180601c40)
- IsChild (Address: 0x180601cf8)
- IsDialogMessageW (Address: 0x1806019e8)
- IsDlgButtonChecked (Address: 0x180601f38)
- IsHungAppWindow (Address: 0x180601e20)
- IsIconic (Address: 0x180601d78)
- IsMenu (Address: 0x180601dd8)
- IsRectEmpty (Address: 0x180601a10)
- IsSETEnabled (Address: 0x180601c98)
- IsWindow (Address: 0x180601d80)
- IsWindowEnabled (Address: 0x180601ab0)
- IsWindowUnicode (Address: 0x180601be0)
- IsWindowVisible (Address: 0x180601cc8)
- IsWinEventHookInstalled (Address: 0x1806017b8)
- KillTimer (Address: 0x180601ed0)
- LoadAcceleratorsW (Address: 0x180601ba8)
- LoadCursorW (Address: 0x180602008)
- LoadIconW (Address: 0x180601c28)
- LoadImageW (Address: 0x1806019f8)
- LoadMenuW (Address: 0x180601f18)
- LockSetForegroundWindow (Address: 0x180601770)
- MapDialogRect (Address: 0x180601c38)
- MapWindowPoints (Address: 0x180601c30)
- MessageBeep (Address: 0x180601de8)
- MessageBoxW (Address: 0x180601b88)
- ModifyMenuW (Address: 0x180601e08)
- MonitorFromPoint (Address: 0x180601a38)
- MonitorFromRect (Address: 0x180601c60)
- MonitorFromWindow (Address: 0x180601cc0)
- MoveWindow (Address: 0x180601bb0)
- MsgWaitForMultipleObjects (Address: 0x180601a78)
- MsgWaitForMultipleObjectsEx (Address: 0x180601ee8)
- NotifyWinEvent (Address: 0x180601b58)
- OffsetRect (Address: 0x180601d08)
- OpenClipboard (Address: 0x180601aa0)
- OpenInputDesktop (Address: 0x180601ac0)
- PeekMessageW (Address: 0x180601ef0)
- PostMessageW (Address: 0x180601f68)
- PostQuitMessage (Address: 0x180601ef8)
- PostThreadMessageW (Address: 0x1806019d0)
- PtInRect (Address: 0x180601db0)
- QueryDisplayConfig (Address: 0x180602048)
- RedrawWindow (Address: 0x180601aa8)
- RegisterClassExW (Address: 0x180601d20)
- RegisterClassW (Address: 0x180601ea8)
- RegisterClipboardFormatW (Address: 0x180601ea0)
- RegisterPowerSettingNotification (Address: 0x1806017e8)
- RegisterShellHookWindow (Address: 0x180601be8)
- RegisterWindowMessageA (Address: 0x180601908)
- RegisterWindowMessageW (Address: 0x180601ca0)
- ReleaseCapture (Address: 0x180601938)
- ReleaseDC (Address: 0x180601d48)
- RemoveMenu (Address: 0x180601f28)
- RemovePropW (Address: 0x180601da0)
- ScreenToClient (Address: 0x180602030)
- SendDlgItemMessageW (Address: 0x180602028)
- SendMessageTimeoutW (Address: 0x180601d60)
- SendMessageW (Address: 0x180602038)
- SendNotifyMessageW (Address: 0x180601d58)
- SetActiveWindow (Address: 0x180601c50)
- SetCapture (Address: 0x180601930)
- SetClipboardData (Address: 0x180601a90)
- SetClipboardViewer (Address: 0x180601ad0)
- SetCoalescableTimer (Address: 0x1806018d8)
- SetCursor (Address: 0x180602010)
- SetDialogDpiChangeBehavior (Address: 0x1806019e0)
- SetDlgItemInt (Address: 0x1806018c8)
- SetDlgItemTextA (Address: 0x180601b80)
- SetDlgItemTextW (Address: 0x180602018)
- SetFocus (Address: 0x180601e70)
- SetForegroundWindow (Address: 0x180601f00)
- SetGestureConfig (Address: 0x180601b00)
- SetLayeredWindowAttributes (Address: 0x180601980)
- SetMenu (Address: 0x180601780)
- SetMenuDefaultItem (Address: 0x180601e00)
- SetMenuInfo (Address: 0x180601990)
- SetMenuItemInfoW (Address: 0x180601dd0)
- SetMessageExtraInfo (Address: 0x180601b48)
- SetParent (Address: 0x180601a18)
- SetProcessDPIAware (Address: 0x180601f70)
- SetProgmanWindow (Address: 0x180601888)
- SetPropW (Address: 0x180601da8)
- SetRect (Address: 0x180601a08)
- SetRectEmpty (Address: 0x180601a40)
- SetScrollInfo (Address: 0x1806018f8)
- SetScrollPos (Address: 0x1806018e0)
- SetShellWindow (Address: 0x180601878)
- SetSysColors (Address: 0x1806017d8)
- SetTaskmanWindow (Address: 0x180601bf8)
- SetThreadDpiAwarenessContext (Address: 0x180601bc8)
- SetTimer (Address: 0x180601f48)
- SetWindowCompositionAttribute (Address: 0x180601d18)
- SetWindowLongPtrW (Address: 0x180601fc0)
- SetWindowLongW (Address: 0x180601a30)
- SetWindowPos (Address: 0x180601fd0)
- SetWindowRgn (Address: 0x180601900)
- SetWindowsHookExW (Address: 0x1806019c0)
- SetWindowTextW (Address: 0x180601ff0)
- ShowCaret (Address: 0x180601768)
- ShowScrollBar (Address: 0x1806018f0)
- ShowWindow (Address: 0x180601fe8)
- ShutdownBlockReasonCreate (Address: 0x180601f10)
- ShutdownBlockReasonDestroy (Address: 0x180601f08)
- SubtractRect (Address: 0x180601970)
- SwitchToThisWindow (Address: 0x180601e88)
- SystemParametersInfoA (Address: 0x180601920)
- SystemParametersInfoForDpi (Address: 0x180601918)
- SystemParametersInfoW (Address: 0x180601c90)
- TrackMouseEvent (Address: 0x180601950)
- TrackPopupMenu (Address: 0x180601b60)
- TrackPopupMenuEx (Address: 0x180601a00)
- TranslateAcceleratorW (Address: 0x180601ad8)
- TranslateMessage (Address: 0x180601f80)
- UnhookWindowsHookEx (Address: 0x1806019b8)
- UnionRect (Address: 0x180601d00)
- UnpackDDElParam (Address: 0x180601800)
- UnregisterPowerSettingNotification (Address: 0x1806017e0)
- UpdateLayeredWindow (Address: 0x180601ce8)
- UpdateWindow (Address: 0x180601af8)
- WaitMessage (Address: 0x180601860)
- WindowFromDC (Address: 0x180602068)
- WindowFromPoint (Address: 0x1806018a0)
- WinHelpW (Address: 0x180601928)
- wsprintfW (Address: 0x1806017f8)