ole32.dll

Description: Microsoft OLE for Windows

Version: 10.0.19041.5915

Architecture: 64-bit

Operating System: Windows NT

SHA256: 4a7b8ed9f2aeca875f948d9a1bce8b8d

File Size: 1.2 MB

Uploaded At: Dec. 1, 2025, 7:35 a.m.

Views: 14

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

(Ordinal: 800, Address: 0x57c0)
(Ordinal: 801, Address: 0x7fdb0)
OleGetPackageClipboardOwner (Ordinal: 802, Address: 0x80390)
(Ordinal: 803, Address: 0x25e00)
(Ordinal: 804, Address: 0x7fd10)
CLIPFORMAT_UserFreeExt (Ordinal: 805, Address: 0xc1bf0)
CLIPFORMAT_UserMarshalExt (Ordinal: 806, Address: 0xc1c10)
CLIPFORMAT_UserSizeExt (Ordinal: 807, Address: 0xc1c30)
CLIPFORMAT_UserUnmarshalExt (Ordinal: 808, Address: 0xc1c50)
ClipboardProcessUninitialize (Ordinal: 809, Address: 0xc6d0)
HPALETTE_UserFreeExt (Ordinal: 810, Address: 0xc1c70)
HPALETTE_UserMarshalExt (Ordinal: 811, Address: 0xc1c90)
HPALETTE_UserSizeExt (Ordinal: 812, Address: 0xc1cb0)
HPALETTE_UserUnmarshalExt (Ordinal: 813, Address: 0xc1cd0)
HWND_UserFree64Ext (Ordinal: 814, Address: 0xc1cf0)
HWND_UserFreeExt (Ordinal: 815, Address: 0xc1d10)
HWND_UserMarshal64Ext (Ordinal: 816, Address: 0xc1d30)
HWND_UserMarshalExt (Ordinal: 817, Address: 0xc1d50)
HWND_UserSize64Ext (Ordinal: 818, Address: 0xc1d70)
HWND_UserSizeExt (Ordinal: 819, Address: 0xc1d90)
(Ordinal: 820, Address: 0x8dc10)
(Ordinal: 821, Address: 0x8dd40)
(Ordinal: 822, Address: 0x8dbe0)
(Ordinal: 823, Address: 0x8de60)
HWND_UserUnmarshal64Ext (Ordinal: 824, Address: 0xc1db0)
HWND_UserUnmarshalExt (Ordinal: 825, Address: 0xc1dd0)
MonikerLoadTypeLib (Ordinal: 826, Address: 0xc1df0)
ReadStorageProperties (Ordinal: 827, Address: 0x22150)
STGMEDIUM_UserFreeExt (Ordinal: 828, Address: 0xc1ed0)
STGMEDIUM_UserMarshalExt (Ordinal: 829, Address: 0xc1ef0)
STGMEDIUM_UserSizeExt (Ordinal: 830, Address: 0xc1f10)
STGMEDIUM_UserUnmarshalExt (Ordinal: 831, Address: 0xc1f30)
SetOleautModule (Ordinal: 832, Address: 0xa890)
StdTypesGetClassObject (Ordinal: 833, Address: 0xb1fa0)
StdTypesRegisterServer (Ordinal: 834, Address: 0xb2020)
WriteStorageProperties (Ordinal: 835, Address: 0xc1f50)
BindMoniker (Ordinal: 836, Address: 0x6470)
CLIPFORMAT_UserFree (Ordinal: 837, Address: 0xf3a35)
CLIPFORMAT_UserFree64 (Ordinal: 838, Address: 0xf3a67)
CLIPFORMAT_UserMarshal (Ordinal: 839, Address: 0xf3a9c)
CLIPFORMAT_UserMarshal64 (Ordinal: 840, Address: 0xf3ad4)
CLIPFORMAT_UserSize (Ordinal: 841, Address: 0xf3b09)
CLIPFORMAT_UserSize64 (Ordinal: 842, Address: 0xf3b3b)
CLIPFORMAT_UserUnmarshal (Ordinal: 843, Address: 0xf3b72)
CLIPFORMAT_UserUnmarshal64 (Ordinal: 844, Address: 0xf3bae)
CLSIDFromOle1Class (Ordinal: 845, Address: 0xf3be4)
CLSIDFromProgID (Ordinal: 846, Address: 0xf3c2a)
CLSIDFromProgIDEx (Ordinal: 847, Address: 0xf3c67)
CLSIDFromString (Ordinal: 848, Address: 0xf3ca4)
CStdAsyncStubBuffer2_Connect (Ordinal: 849, Address: 0xf3cec)
CStdAsyncStubBuffer2_Disconnect (Ordinal: 850, Address: 0xf3d52)
CStdAsyncStubBuffer2_Release (Ordinal: 851, Address: 0xf3db8)
CStdAsyncStubBuffer_AddRef (Ordinal: 852, Address: 0xf3e19)
CStdAsyncStubBuffer_Connect (Ordinal: 853, Address: 0xf3e79)
CStdAsyncStubBuffer_Disconnect (Ordinal: 854, Address: 0xf3edd)
CStdAsyncStubBuffer_Invoke (Ordinal: 855, Address: 0xf3f40)
CStdAsyncStubBuffer_QueryInterface (Ordinal: 856, Address: 0xf3fa7)
CStdAsyncStubBuffer_Release (Ordinal: 857, Address: 0xf400f)
CStdStubBuffer2_Connect (Ordinal: 858, Address: 0xf406c)
CStdStubBuffer2_CountRefs (Ordinal: 859, Address: 0xf40c7)
CStdStubBuffer2_Disconnect (Ordinal: 860, Address: 0xf4125)
CStdStubBuffer2_QueryInterface (Ordinal: 861, Address: 0xf4188)
CheckInitDde (Ordinal: 862, Address: 0x10660)
CleanROTForApartment (Ordinal: 863, Address: 0xc2e0)
CoAddRefServerProcess (Ordinal: 864, Address: 0xf4208)
CoAicGetTokenForCOM (Ordinal: 865, Address: 0x5130)
CoAllowSetForegroundWindow (Ordinal: 866, Address: 0x4410)
CoAllowUnmarshalerCLSID (Ordinal: 867, Address: 0xf4280)
CoBuildVersion (Ordinal: 868, Address: 0x51b30)
CoCancelCall (Ordinal: 869, Address: 0xf42cf)
CoCheckElevationEnabled (Ordinal: 870, Address: 0x449b0)
CoCopyProxy (Ordinal: 871, Address: 0xf431b)
CoCreateFreeThreadedMarshaler (Ordinal: 872, Address: 0xf4360)
CoCreateGuid (Ordinal: 873, Address: 0xf43a6)
CoCreateInstance (Ordinal: 874, Address: 0xf43df)
CoCreateInstanceEx (Ordinal: 875, Address: 0xf441e)
CoCreateInstanceFromApp (Ordinal: 876, Address: 0xf4464)
CoCreateObjectInContext (Ordinal: 877, Address: 0xf44af)
CoDeactivateObject (Ordinal: 878, Address: 0xf44fd)
CoDecodeProxy (Ordinal: 879, Address: 0xf4541)
CoDecrementMTAUsage (Ordinal: 880, Address: 0xf456b)
CoDisableCallCancellation (Ordinal: 881, Address: 0xf45b4)
CoDisconnectContext (Ordinal: 882, Address: 0xf45fd)
CoDisconnectObject (Ordinal: 883, Address: 0xf463f)
CoDosDateTimeToFileTime (Ordinal: 884, Address: 0x53d70)
CoEnableCallCancellation (Ordinal: 885, Address: 0xf469e)
CoFileTimeNow (Ordinal: 886, Address: 0xf46e0)
CoFileTimeToDosDateTime (Ordinal: 887, Address: 0x53e20)
CoFreeAllLibraries (Ordinal: 888, Address: 0x14b00)
CoFreeLibrary (Ordinal: 889, Address: 0x51b40)
CoFreeUnusedLibraries (Ordinal: 890, Address: 0xf4758)
CoFreeUnusedLibrariesEx (Ordinal: 891, Address: 0xf47a1)
CoGetActivationState (Ordinal: 892, Address: 0xf47e9)
CoGetApartmentID (Ordinal: 893, Address: 0xf4832)
CoGetApartmentType (Ordinal: 894, Address: 0xf4879)
CoGetCallContext (Ordinal: 895, Address: 0xf48b8)
CoGetCallState (Ordinal: 896, Address: 0xf48f3)
CoGetCallerTID (Ordinal: 897, Address: 0xf4934)
CoGetCancelObject (Ordinal: 898, Address: 0xf4970)
CoGetClassObject (Ordinal: 899, Address: 0xf49ae)
CoGetClassVersion (Ordinal: 900, Address: 0xf49ec)
CoGetComCatalog (Ordinal: 901, Address: 0xf4a31)
CoGetContextToken (Ordinal: 902, Address: 0xf4a77)
CoGetCurrentLogicalThreadId (Ordinal: 903, Address: 0xf4ac0)
CoGetCurrentProcess (Ordinal: 904, Address: 0xf4b0b)
CoGetDefaultContext (Ordinal: 905, Address: 0xf4b4e)
CoGetInstanceFromFile (Ordinal: 906, Address: 0xf4b93)
CoGetInstanceFromIStorage (Ordinal: 907, Address: 0xf4be6)
CoGetInterceptor (Ordinal: 908, Address: 0x55930)
CoGetInterceptorForOle32 (Ordinal: 909, Address: 0x11070)
CoGetInterceptorFromTypeInfo (Ordinal: 910, Address: 0x235c0)
CoGetInterfaceAndReleaseStream (Ordinal: 911, Address: 0xf4c89)
CoGetMalloc (Ordinal: 912, Address: 0xf4ccf)
CoGetMarshalSizeMax (Ordinal: 913, Address: 0xf4d0a)
CoGetModuleType (Ordinal: 914, Address: 0xf4d49)
CoGetObject (Ordinal: 915, Address: 0xe180)
CoGetObjectContext (Ordinal: 916, Address: 0xf4d9b)
CoGetPSClsid (Ordinal: 917, Address: 0xf4dd6)
CoGetProcessIdentifier (Ordinal: 918, Address: 0xf4e15)
CoGetStandardMarshal (Ordinal: 919, Address: 0xf4e64)
CoGetStdMarshalEx (Ordinal: 920, Address: 0xf4ea6)
CoGetSystemSecurityPermissions (Ordinal: 921, Address: 0xf4ef2)
CoGetSystemWow64DirectoryW (Ordinal: 922, Address: 0x449d0)
CoGetTreatAsClass (Ordinal: 923, Address: 0xf4f61)
CoHandlePriorityEventsFromMessagePump (Ordinal: 924, Address: 0xf4fb4)
CoImpersonateClient (Ordinal: 925, Address: 0xf4fd5)
CoIncrementMTAUsage (Ordinal: 926, Address: 0xf5018)
CoInitialize (Ordinal: 927, Address: 0x9130)
CoInitializeEx (Ordinal: 928, Address: 0xf5063)
CoInitializeSecurity (Ordinal: 929, Address: 0xf50a2)
CoInitializeWOW (Ordinal: 930, Address: 0x28200)
CoInstall (Ordinal: 931, Address: 0x51b50)
CoInvalidateRemoteMachineBindings (Ordinal: 932, Address: 0xf510e)
CoIsHandlerConnected (Ordinal: 933, Address: 0xf5168)
CoIsOle1Class (Ordinal: 934, Address: 0x53670)
CoLoadLibrary (Ordinal: 935, Address: 0x51c20)
CoLockObjectExternal (Ordinal: 936, Address: 0xf51c9)
CoMarshalHresult (Ordinal: 937, Address: 0xf520a)
CoMarshalInterThreadInterfaceInStream (Ordinal: 938, Address: 0xf525c)
CoMarshalInterface (Ordinal: 939, Address: 0xf52b0)
CoPopServiceDomain (Ordinal: 940, Address: 0xf52f1)
CoPushServiceDomain (Ordinal: 941, Address: 0xf533b)
CoQueryAuthenticationServices (Ordinal: 942, Address: 0xf5390)
CoQueryClientBlanket (Ordinal: 943, Address: 0xf53de)
CoQueryProxyBlanket (Ordinal: 944, Address: 0xf5422)
CoQueryReleaseObject (Ordinal: 945, Address: 0x14b50)
CoReactivateObject (Ordinal: 946, Address: 0xf5479)
CoRegisterActivationFilter (Ordinal: 947, Address: 0xf54ca)
CoRegisterChannelHook (Ordinal: 948, Address: 0xf5516)
CoRegisterClassObject (Ordinal: 949, Address: 0xf5539)
CoRegisterInitializeSpy (Ordinal: 950, Address: 0xf5582)
CoRegisterMallocSpy (Ordinal: 951, Address: 0xf55d1)
CoRegisterMessageFilter (Ordinal: 952, Address: 0x282a0)
CoRegisterPSClsid (Ordinal: 953, Address: 0xf5632)
CoRegisterSurrogate (Ordinal: 954, Address: 0xf5673)
CoRegisterSurrogateEx (Ordinal: 955, Address: 0x282c0)
CoReleaseMarshalData (Ordinal: 956, Address: 0xf56cd)
CoReleaseServerProcess (Ordinal: 957, Address: 0xf5714)
CoResumeClassObjects (Ordinal: 958, Address: 0xf575b)
CoRetireServer (Ordinal: 959, Address: 0xf579a)
CoRevertToSelf (Ordinal: 960, Address: 0xf57db)
CoRevokeClassObject (Ordinal: 961, Address: 0xf5819)
CoRevokeInitializeSpy (Ordinal: 962, Address: 0xf585e)
CoRevokeMallocSpy (Ordinal: 963, Address: 0xf58a9)
CoSetCancelObject (Ordinal: 964, Address: 0xf58f0)
CoSetMessageDispatcher (Ordinal: 965, Address: 0xf5934)
CoSetProxyBlanket (Ordinal: 966, Address: 0xf5953)
CoSetState (Ordinal: 967, Address: 0x14ad0)
CoSuspendClassObjects (Ordinal: 968, Address: 0xf59a1)
CoSwitchCallContext (Ordinal: 969, Address: 0xf59e6)
CoTaskMemAlloc (Ordinal: 970, Address: 0xf5a24)
CoTaskMemFree (Ordinal: 971, Address: 0xf5a5c)
CoTaskMemRealloc (Ordinal: 972, Address: 0xf5a96)
CoTestCancel (Ordinal: 973, Address: 0xf5acf)
CoTreatAsClass (Ordinal: 974, Address: 0x53690)
CoUninitialize (Ordinal: 975, Address: 0xf5b15)
CoUnloadingWOW (Ordinal: 976, Address: 0x282e0)
CoUnmarshalHresult (Ordinal: 977, Address: 0xf5b61)
CoUnmarshalInterface (Ordinal: 978, Address: 0xf5ba4)
CoVrfCheckThreadState (Ordinal: 979, Address: 0xf5bea)
CoVrfGetThreadState (Ordinal: 980, Address: 0xf5c37)
CoVrfReleaseThreadState (Ordinal: 981, Address: 0xf5c86)
CoWaitForMultipleHandles (Ordinal: 982, Address: 0xf5cda)
CoWaitForMultipleObjects (Ordinal: 983, Address: 0xf5d27)
ComPs_NdrDllCanUnloadNow (Ordinal: 984, Address: 0x14b50)
ComPs_NdrDllGetClassObject (Ordinal: 985, Address: 0x55bc0)
ComPs_NdrDllRegisterProxy (Ordinal: 986, Address: 0x56240)
ComPs_NdrDllUnregisterProxy (Ordinal: 987, Address: 0x56280)
CreateAntiMoniker (Ordinal: 988, Address: 0x463a0)
CreateBindCtx (Ordinal: 989, Address: 0xe790)
CreateClassMoniker (Ordinal: 990, Address: 0x47a00)
CreateDataAdviseHolder (Ordinal: 991, Address: 0x14a20)
CreateDataCache (Ordinal: 992, Address: 0x77640)
CreateErrorInfo (Ordinal: 993, Address: 0xf5e2f)
CreateFileMoniker (Ordinal: 994, Address: 0x17610)
CreateGenericComposite (Ordinal: 995, Address: 0xfee0)
CreateILockBytesOnHGlobal (Ordinal: 996, Address: 0x44a80)
CreateItemMoniker (Ordinal: 997, Address: 0x4c20)
CreateObjrefMoniker (Ordinal: 998, Address: 0x463f0)
CreateOleAdviseHolder (Ordinal: 999, Address: 0x6520)
CreatePointerMoniker (Ordinal: 1000, Address: 0x5f10)
CreateStdProgressIndicator (Ordinal: 1001, Address: 0x22640)
CreateStreamOnHGlobal (Ordinal: 1002, Address: 0xf5f29)
DcomChannelSetHResult (Ordinal: 1003, Address: 0xf5f70)
DdeBindToObject (Ordinal: 1004, Address: 0x62bf0)
DeletePatternAndExtensionTables (Ordinal: 1005, Address: 0x449f0)
DestroyRunningObjectTable (Ordinal: 1006, Address: 0x6c20)
DllDebugObjectRPCHook (Ordinal: 1007, Address: 0xf5fee)
DllGetClassObject (Ordinal: 1008, Address: 0x10000)
DllGetClassObjectWOW (Ordinal: 1009, Address: 0x10000)
DllRegisterServer (Ordinal: 1010, Address: 0x14ad0)
DoDragDrop (Ordinal: 1011, Address: 0x8d9b0)
DragDropSetFDT (Ordinal: 1012, Address: 0x8db50)
EnableHookObject (Ordinal: 1013, Address: 0xf608b)
FindExt (Ordinal: 1014, Address: 0x4d290)
FmtIdToPropStgName (Ordinal: 1015, Address: 0x44aa0)
FreePropVariantArray (Ordinal: 1016, Address: 0x26140)
GetActiveObjectExt (Ordinal: 1017, Address: 0xc2050)
GetClassFile (Ordinal: 1018, Address: 0x4d330)
GetConvertStg (Ordinal: 1019, Address: 0x44ac0)
GetDocumentBitStg (Ordinal: 1020, Address: 0x44ae0)
GetErrorInfo (Ordinal: 1021, Address: 0xf613c)
GetHGlobalFromILockBytes (Ordinal: 1022, Address: 0x44b00)
GetHGlobalFromStream (Ordinal: 1023, Address: 0xf619c)
GetHookInterface (Ordinal: 1024, Address: 0xf61dd)
GetObjectFromRotByPath (Ordinal: 1025, Address: 0x62350)
GetRunningObjectTable (Ordinal: 1026, Address: 0xc060)
HACCEL_UserFree (Ordinal: 1027, Address: 0xf624e)
HACCEL_UserFree64 (Ordinal: 1028, Address: 0xf6278)
HACCEL_UserMarshal (Ordinal: 1029, Address: 0xf62a5)
HACCEL_UserMarshal64 (Ordinal: 1030, Address: 0xf62d5)
HACCEL_UserSize (Ordinal: 1031, Address: 0xf6302)
HACCEL_UserSize64 (Ordinal: 1032, Address: 0xf632c)
HACCEL_UserUnmarshal (Ordinal: 1033, Address: 0xf635b)
HACCEL_UserUnmarshal64 (Ordinal: 1034, Address: 0xf638f)
HBITMAP_UserFree (Ordinal: 1035, Address: 0xf63bf)
HBITMAP_UserFree64 (Ordinal: 1036, Address: 0xf63eb)
HBITMAP_UserMarshal (Ordinal: 1037, Address: 0xf641a)
HBITMAP_UserMarshal64 (Ordinal: 1038, Address: 0xf644c)
HBITMAP_UserSize (Ordinal: 1039, Address: 0xf647b)
HBITMAP_UserSize64 (Ordinal: 1040, Address: 0xf64a7)
HBITMAP_UserUnmarshal (Ordinal: 1041, Address: 0xf64d8)
HBITMAP_UserUnmarshal64 (Ordinal: 1042, Address: 0xf650e)
HBRUSH_UserFree (Ordinal: 1043, Address: 0xf653e)
HBRUSH_UserFree64 (Ordinal: 1044, Address: 0xf6568)
HBRUSH_UserMarshal (Ordinal: 1045, Address: 0xf6595)
HBRUSH_UserMarshal64 (Ordinal: 1046, Address: 0xf65c5)
HBRUSH_UserSize (Ordinal: 1047, Address: 0xf65f2)
HBRUSH_UserSize64 (Ordinal: 1048, Address: 0xf661c)
HBRUSH_UserUnmarshal (Ordinal: 1049, Address: 0xf664b)
HBRUSH_UserUnmarshal64 (Ordinal: 1050, Address: 0xf667f)
HDC_UserFree (Ordinal: 1051, Address: 0xf66ab)
HDC_UserFree64 (Ordinal: 1052, Address: 0xf66cf)
HDC_UserMarshal (Ordinal: 1053, Address: 0xf66f6)
HDC_UserMarshal64 (Ordinal: 1054, Address: 0xf6720)
HDC_UserSize (Ordinal: 1055, Address: 0xf6747)
HDC_UserSize64 (Ordinal: 1056, Address: 0xf676b)
HDC_UserUnmarshal (Ordinal: 1057, Address: 0xf6794)
HDC_UserUnmarshal64 (Ordinal: 1058, Address: 0xf67c2)
HENHMETAFILE_UserFree (Ordinal: 1059, Address: 0x28a80)
HENHMETAFILE_UserFree64 (Ordinal: 1060, Address: 0x28a90)
HENHMETAFILE_UserMarshal (Ordinal: 1061, Address: 0x28aa0)
HENHMETAFILE_UserMarshal64 (Ordinal: 1062, Address: 0x28ab0)
HENHMETAFILE_UserSize (Ordinal: 1063, Address: 0x28ac0)
HENHMETAFILE_UserSize64 (Ordinal: 1064, Address: 0x28ad0)
HENHMETAFILE_UserUnmarshal (Ordinal: 1065, Address: 0x28ae0)
HENHMETAFILE_UserUnmarshal64 (Ordinal: 1066, Address: 0x28af0)
HGLOBAL_UserFree (Ordinal: 1067, Address: 0xf68b7)
HGLOBAL_UserFree64 (Ordinal: 1068, Address: 0xf68e3)
HGLOBAL_UserMarshal (Ordinal: 1069, Address: 0xf6912)
HGLOBAL_UserMarshal64 (Ordinal: 1070, Address: 0xf6944)
HGLOBAL_UserSize (Ordinal: 1071, Address: 0xf6973)
HGLOBAL_UserSize64 (Ordinal: 1072, Address: 0xf699f)
HGLOBAL_UserUnmarshal (Ordinal: 1073, Address: 0xf69d0)
HGLOBAL_UserUnmarshal64 (Ordinal: 1074, Address: 0xf6a06)
HICON_UserFree (Ordinal: 1075, Address: 0xf6a35)
HICON_UserFree64 (Ordinal: 1076, Address: 0xf6a5d)
HICON_UserMarshal (Ordinal: 1077, Address: 0xf6a88)
HICON_UserMarshal64 (Ordinal: 1078, Address: 0xf6ab6)
HICON_UserSize (Ordinal: 1079, Address: 0xf6ae1)
HICON_UserSize64 (Ordinal: 1080, Address: 0xf6b09)
HICON_UserUnmarshal (Ordinal: 1081, Address: 0xf6b36)
HICON_UserUnmarshal64 (Ordinal: 1082, Address: 0xf6b68)
HMENU_UserFree (Ordinal: 1083, Address: 0xf6b95)
HMENU_UserFree64 (Ordinal: 1084, Address: 0xf6bbd)
HMENU_UserMarshal (Ordinal: 1085, Address: 0xf6be8)
HMENU_UserMarshal64 (Ordinal: 1086, Address: 0xf6c16)
HMENU_UserSize (Ordinal: 1087, Address: 0xf6c41)
HMENU_UserSize64 (Ordinal: 1088, Address: 0xf6c69)
HMENU_UserUnmarshal (Ordinal: 1089, Address: 0xf6c96)
HMENU_UserUnmarshal64 (Ordinal: 1090, Address: 0xf6cc8)
HMETAFILEPICT_UserFree (Ordinal: 1091, Address: 0x28b00)
HMETAFILEPICT_UserFree64 (Ordinal: 1092, Address: 0x28b10)
HMETAFILEPICT_UserMarshal (Ordinal: 1093, Address: 0x28b20)
HMETAFILEPICT_UserMarshal64 (Ordinal: 1094, Address: 0x28b30)
HMETAFILEPICT_UserSize (Ordinal: 1095, Address: 0x28b40)
HMETAFILEPICT_UserSize64 (Ordinal: 1096, Address: 0x28b50)
HMETAFILEPICT_UserUnmarshal (Ordinal: 1097, Address: 0x28b60)
HMETAFILEPICT_UserUnmarshal64 (Ordinal: 1098, Address: 0x28b70)
HMETAFILE_UserFree (Ordinal: 1099, Address: 0x28b80)
HMETAFILE_UserFree64 (Ordinal: 1100, Address: 0x28b90)
HMETAFILE_UserMarshal (Ordinal: 1101, Address: 0x28ba0)
HMETAFILE_UserMarshal64 (Ordinal: 1102, Address: 0x28bb0)
HMETAFILE_UserSize (Ordinal: 1103, Address: 0x28bc0)
HMETAFILE_UserSize64 (Ordinal: 1104, Address: 0x28bd0)
HMETAFILE_UserUnmarshal (Ordinal: 1105, Address: 0x28be0)
HMETAFILE_UserUnmarshal64 (Ordinal: 1106, Address: 0x28bf0)
HMONITOR_UserFree (Ordinal: 1107, Address: 0xf6e78)
HMONITOR_UserFree64 (Ordinal: 1108, Address: 0xf6ea6)
HMONITOR_UserMarshal (Ordinal: 1109, Address: 0xf6ed7)
HMONITOR_UserMarshal64 (Ordinal: 1110, Address: 0xf6f0b)
HMONITOR_UserSize (Ordinal: 1111, Address: 0xf6f3c)
HMONITOR_UserSize64 (Ordinal: 1112, Address: 0xf6f6a)
HMONITOR_UserUnmarshal (Ordinal: 1113, Address: 0xf6f9d)
HMONITOR_UserUnmarshal64 (Ordinal: 1114, Address: 0xf6fd5)
HPALETTE_UserFree (Ordinal: 1115, Address: 0xf7008)
HPALETTE_UserFree64 (Ordinal: 1116, Address: 0xf7036)
HPALETTE_UserMarshal (Ordinal: 1117, Address: 0xf7067)
HPALETTE_UserMarshal64 (Ordinal: 1118, Address: 0xf709b)
HPALETTE_UserSize (Ordinal: 1119, Address: 0xf70cc)
HPALETTE_UserSize64 (Ordinal: 1120, Address: 0xf70fa)
HPALETTE_UserUnmarshal (Ordinal: 1121, Address: 0xf712d)
HPALETTE_UserUnmarshal64 (Ordinal: 1122, Address: 0xf7165)
HRGN_UserFree (Ordinal: 1123, Address: 0xf7194)
HRGN_UserMarshal (Ordinal: 1124, Address: 0xf71bb)
HRGN_UserSize (Ordinal: 1125, Address: 0xf71e2)
HRGN_UserUnmarshal (Ordinal: 1126, Address: 0xf720b)
HWND_UserFree (Ordinal: 1127, Address: 0xf7234)
HWND_UserFree64 (Ordinal: 1128, Address: 0xf725a)
HWND_UserMarshal (Ordinal: 1129, Address: 0xf7283)
HWND_UserMarshal64 (Ordinal: 1130, Address: 0xf72af)
HWND_UserSize (Ordinal: 1131, Address: 0xf72d8)
HWND_UserSize64 (Ordinal: 1132, Address: 0xf72fe)
HWND_UserUnmarshal (Ordinal: 1133, Address: 0xf7329)
HWND_UserUnmarshal64 (Ordinal: 1134, Address: 0xf7359)
HkOleRegisterObject (Ordinal: 1135, Address: 0xf738a)
IIDFromString (Ordinal: 1136, Address: 0xf73cf)
IsAccelerator (Ordinal: 1137, Address: 0x8fa70)
IsEqualGUID (Ordinal: 1138, Address: 0x10290)
IsRoInitializeASTAAllowedInDesktop (Ordinal: 1139, Address: 0x25e40)
IsValidIid (Ordinal: 1140, Address: 0x14b50)
IsValidInterface (Ordinal: 1141, Address: 0xf840)
IsValidPtrIn (Ordinal: 1142, Address: 0x14b50)
IsValidPtrOut (Ordinal: 1143, Address: 0x14b50)
MkParseDisplayName (Ordinal: 1144, Address: 0xeed0)
MonikerCommonPrefixWith (Ordinal: 1145, Address: 0x49c80)
MonikerRelativePathTo (Ordinal: 1146, Address: 0x49d20)
NdrOleInitializeExtension (Ordinal: 1147, Address: 0xf74c7)
NdrProxyForwardingFunction10 (Ordinal: 1148, Address: 0xf7521)
NdrProxyForwardingFunction11 (Ordinal: 1149, Address: 0xf7584)
NdrProxyForwardingFunction12 (Ordinal: 1150, Address: 0xf75e7)
NdrProxyForwardingFunction13 (Ordinal: 1151, Address: 0xf764a)
NdrProxyForwardingFunction14 (Ordinal: 1152, Address: 0xf76ad)
NdrProxyForwardingFunction15 (Ordinal: 1153, Address: 0xf7710)
NdrProxyForwardingFunction16 (Ordinal: 1154, Address: 0xf7773)
NdrProxyForwardingFunction17 (Ordinal: 1155, Address: 0xf77d6)
NdrProxyForwardingFunction18 (Ordinal: 1156, Address: 0xf7839)
NdrProxyForwardingFunction19 (Ordinal: 1157, Address: 0xf789c)
NdrProxyForwardingFunction20 (Ordinal: 1158, Address: 0xf78ff)
NdrProxyForwardingFunction21 (Ordinal: 1159, Address: 0xf7962)
NdrProxyForwardingFunction22 (Ordinal: 1160, Address: 0xf79c5)
NdrProxyForwardingFunction23 (Ordinal: 1161, Address: 0xf7a28)
NdrProxyForwardingFunction24 (Ordinal: 1162, Address: 0xf7a8b)
NdrProxyForwardingFunction25 (Ordinal: 1163, Address: 0xf7aee)
NdrProxyForwardingFunction26 (Ordinal: 1164, Address: 0xf7b51)
NdrProxyForwardingFunction27 (Ordinal: 1165, Address: 0xf7bb4)
NdrProxyForwardingFunction28 (Ordinal: 1166, Address: 0xf7c17)
NdrProxyForwardingFunction29 (Ordinal: 1167, Address: 0xf7c7a)
NdrProxyForwardingFunction3 (Ordinal: 1168, Address: 0xf7cdc)
NdrProxyForwardingFunction30 (Ordinal: 1169, Address: 0xf7d3e)
NdrProxyForwardingFunction31 (Ordinal: 1170, Address: 0xf7da1)
NdrProxyForwardingFunction32 (Ordinal: 1171, Address: 0xf7e04)
NdrProxyForwardingFunction4 (Ordinal: 1172, Address: 0xf7e66)
NdrProxyForwardingFunction5 (Ordinal: 1173, Address: 0xf7ec7)
NdrProxyForwardingFunction6 (Ordinal: 1174, Address: 0xf7f28)
NdrProxyForwardingFunction7 (Ordinal: 1175, Address: 0xf7f89)
NdrProxyForwardingFunction8 (Ordinal: 1176, Address: 0xf7fea)
NdrProxyForwardingFunction9 (Ordinal: 1177, Address: 0xf804b)
ObjectStublessClient10 (Ordinal: 1178, Address: 0xf80a7)
ObjectStublessClient11 (Ordinal: 1179, Address: 0xf80fe)
ObjectStublessClient12 (Ordinal: 1180, Address: 0xf8155)
ObjectStublessClient13 (Ordinal: 1181, Address: 0xf81ac)
ObjectStublessClient14 (Ordinal: 1182, Address: 0xf8203)
ObjectStublessClient15 (Ordinal: 1183, Address: 0xf825a)
ObjectStublessClient16 (Ordinal: 1184, Address: 0xf82b1)
ObjectStublessClient17 (Ordinal: 1185, Address: 0xf8308)
ObjectStublessClient18 (Ordinal: 1186, Address: 0xf835f)
ObjectStublessClient19 (Ordinal: 1187, Address: 0xf83b6)
ObjectStublessClient20 (Ordinal: 1188, Address: 0xf840d)
ObjectStublessClient21 (Ordinal: 1189, Address: 0xf8464)
ObjectStublessClient22 (Ordinal: 1190, Address: 0xf84bb)
ObjectStublessClient23 (Ordinal: 1191, Address: 0xf8512)
ObjectStublessClient24 (Ordinal: 1192, Address: 0xf8569)
ObjectStublessClient25 (Ordinal: 1193, Address: 0xf85c0)
ObjectStublessClient26 (Ordinal: 1194, Address: 0xf8617)
ObjectStublessClient27 (Ordinal: 1195, Address: 0xf866e)
ObjectStublessClient28 (Ordinal: 1196, Address: 0xf86c5)
ObjectStublessClient29 (Ordinal: 1197, Address: 0xf871c)
ObjectStublessClient3 (Ordinal: 1198, Address: 0xf8772)
ObjectStublessClient30 (Ordinal: 1199, Address: 0xf87c8)
ObjectStublessClient31 (Ordinal: 1200, Address: 0xf881f)
ObjectStublessClient32 (Ordinal: 1201, Address: 0xf8876)
ObjectStublessClient4 (Ordinal: 1202, Address: 0xf88cc)
ObjectStublessClient5 (Ordinal: 1203, Address: 0xf8921)
ObjectStublessClient6 (Ordinal: 1204, Address: 0xf8976)
ObjectStublessClient7 (Ordinal: 1205, Address: 0xf89cb)
ObjectStublessClient8 (Ordinal: 1206, Address: 0xf8a20)
ObjectStublessClient9 (Ordinal: 1207, Address: 0xf8a75)
Ole32DllGetClassObject (Ordinal: 1208, Address: 0xfff0)
OleBuildVersion (Ordinal: 1209, Address: 0x51b30)
OleConvertIStorageToOLESTREAM (Ordinal: 1210, Address: 0xa14d0)
OleConvertIStorageToOLESTREAMEx (Ordinal: 1211, Address: 0xa1560)
OleConvertOLESTREAMToIStorage (Ordinal: 1212, Address: 0xa1770)
OleConvertOLESTREAMToIStorage2 (Ordinal: 1213, Address: 0x2a9c0)
OleConvertOLESTREAMToIStorageEx (Ordinal: 1214, Address: 0xa17a0)
OleConvertOLESTREAMToIStorageEx2 (Ordinal: 1215, Address: 0x2aa90)
OleCreate (Ordinal: 1216, Address: 0x73f50)
OleCreateDefaultHandler (Ordinal: 1217, Address: 0x91e30)
OleCreateEmbeddingHelper (Ordinal: 1218, Address: 0x18920)
OleCreateEx (Ordinal: 1219, Address: 0x73fe0)
OleCreateFontIndirectExt (Ordinal: 1220, Address: 0x4800)
OleCreateFromData (Ordinal: 1221, Address: 0x74210)
OleCreateFromDataEx (Ordinal: 1222, Address: 0x742a0)
OleCreateFromFile (Ordinal: 1223, Address: 0x74510)
OleCreateFromFileEx (Ordinal: 1224, Address: 0x745b0)
OleCreateLink (Ordinal: 1225, Address: 0x74830)
OleCreateLinkEx (Ordinal: 1226, Address: 0x748c0)
OleCreateLinkFromData (Ordinal: 1227, Address: 0x74a70)
OleCreateLinkFromDataEx (Ordinal: 1228, Address: 0x74b00)
OleCreateLinkToFile (Ordinal: 1229, Address: 0x74de0)
OleCreateLinkToFileEx (Ordinal: 1230, Address: 0x74e70)
OleCreateMenuDescriptor (Ordinal: 1231, Address: 0x8fca0)
OleCreatePictureIndirectExt (Ordinal: 1232, Address: 0x44f0)
OleCreatePropertyFrameIndirectExt (Ordinal: 1233, Address: 0xbc780)
OleCreateStaticFromData (Ordinal: 1234, Address: 0x1d3a0)
OleDestroyMenuDescriptor (Ordinal: 1235, Address: 0x8fe30)
OleDoAutoConvert (Ordinal: 1236, Address: 0x18560)
OleDraw (Ordinal: 1237, Address: 0x20bd0)
OleDuplicateData (Ordinal: 1238, Address: 0x1e240)
OleFlushClipboard (Ordinal: 1239, Address: 0x7d740)
OleGetAutoConvert (Ordinal: 1240, Address: 0x17e20)
OleGetClipboard (Ordinal: 1241, Address: 0x10740)
OleGetClipboardWithEnterpriseInfo (Ordinal: 1242, Address: 0x7d840)
OleGetIconOfClass (Ordinal: 1243, Address: 0x93160)
OleGetIconOfFile (Ordinal: 1244, Address: 0x932d0)
OleIconToCursorExt (Ordinal: 1245, Address: 0xba2a0)
OleInitialize (Ordinal: 1246, Address: 0xd120)
OleInitializeWOW (Ordinal: 1247, Address: 0x75bd0)
OleIsCurrentClipboard (Ordinal: 1248, Address: 0x16e90)
OleIsRunning (Ordinal: 1249, Address: 0x75670)
OleLoad (Ordinal: 1250, Address: 0x1b0d0)
OleLoadFromStream (Ordinal: 1251, Address: 0x468c0)
OleLoadPictureExt (Ordinal: 1252, Address: 0xba780)
OleLoadPictureFileExt (Ordinal: 1253, Address: 0xbcbf0)
OleLoadPicturePathExt (Ordinal: 1254, Address: 0xba8a0)
OleLockRunning (Ordinal: 1255, Address: 0x6a50)
OleMetafilePictFromIconAndLabel (Ordinal: 1256, Address: 0x93620)
OleNoteObjectVisible (Ordinal: 1257, Address: 0x756f0)
OleQueryCreateFromData (Ordinal: 1258, Address: 0x75110)
OleQueryLinkFromData (Ordinal: 1259, Address: 0x75160)
OleRegEnumFormatEtc (Ordinal: 1260, Address: 0x95590)
OleRegEnumVerbs (Ordinal: 1261, Address: 0x95e60)
OleRegGetMiscStatus (Ordinal: 1262, Address: 0x14530)
OleRegGetUserType (Ordinal: 1263, Address: 0x183a0)
OleReleaseEnumVerbCache (Ordinal: 1264, Address: 0xa980)
OleRun (Ordinal: 1265, Address: 0xd250)
OleSave (Ordinal: 1266, Address: 0x218a0)
OleSavePictureFileExt (Ordinal: 1267, Address: 0xbcd30)
OleSaveToStream (Ordinal: 1268, Address: 0x25d00)
OleSetAutoConvert (Ordinal: 1269, Address: 0x922e0)
OleSetClipboard (Ordinal: 1270, Address: 0x15360)
OleSetContainedObject (Ordinal: 1271, Address: 0x21380)
OleSetMenuDescriptor (Ordinal: 1272, Address: 0x8fe90)
OleTranslateAccelerator (Ordinal: 1273, Address: 0x90060)
OleTranslateColorExt (Ordinal: 1274, Address: 0xa9b0)
OleUninitialize (Ordinal: 1275, Address: 0xc910)
OpenOrCreateStream (Ordinal: 1276, Address: 0x1d190)
ProgIDFromCLSID (Ordinal: 1277, Address: 0xf9060)
PropStgNameToFmtId (Ordinal: 1278, Address: 0x44b20)
PropSysAllocString (Ordinal: 1279, Address: 0x44b40)
PropSysFreeString (Ordinal: 1280, Address: 0x44b60)
PropVariantChangeType (Ordinal: 1281, Address: 0x44b80)
PropVariantClear (Ordinal: 1282, Address: 0x261e0)
PropVariantCopy (Ordinal: 1283, Address: 0x26200)
ReadClassStg (Ordinal: 1284, Address: 0x22150)
ReadClassStm (Ordinal: 1285, Address: 0x25ea0)
ReadFmtUserTypeStg (Ordinal: 1286, Address: 0x1a780)
ReadOleStg (Ordinal: 1287, Address: 0x1cf60)
ReadStringStream (Ordinal: 1288, Address: 0x1a960)
RegisterActiveObjectExt (Ordinal: 1289, Address: 0xc20f0)
RegisterDragDrop (Ordinal: 1290, Address: 0xca10)
ReleaseStgMedium (Ordinal: 1291, Address: 0xebe0)
RevokeActiveObjectExt (Ordinal: 1292, Address: 0xc21b0)
RevokeDragDrop (Ordinal: 1293, Address: 0xbc20)
RoGetAgileReference (Ordinal: 1294, Address: 0xf91b6)
SNB_UserFree (Ordinal: 1295, Address: 0x28c00)
SNB_UserFree64 (Ordinal: 1296, Address: 0x28c10)
SNB_UserMarshal (Ordinal: 1297, Address: 0x28c20)
SNB_UserMarshal64 (Ordinal: 1298, Address: 0x28c30)
SNB_UserSize (Ordinal: 1299, Address: 0x28c40)
SNB_UserSize64 (Ordinal: 1300, Address: 0x28c50)
SNB_UserUnmarshal (Ordinal: 1301, Address: 0x28c60)
SNB_UserUnmarshal64 (Ordinal: 1302, Address: 0x28c70)
STGMEDIUM_UserFree (Ordinal: 1303, Address: 0x28c80)
STGMEDIUM_UserFree64 (Ordinal: 1304, Address: 0x28c90)
STGMEDIUM_UserMarshal (Ordinal: 1305, Address: 0x28ca0)
STGMEDIUM_UserMarshal64 (Ordinal: 1306, Address: 0x28cb0)
STGMEDIUM_UserSize (Ordinal: 1307, Address: 0x28cc0)
STGMEDIUM_UserSize64 (Ordinal: 1308, Address: 0x28cd0)
STGMEDIUM_UserUnmarshal (Ordinal: 1309, Address: 0x28ce0)
STGMEDIUM_UserUnmarshal64 (Ordinal: 1310, Address: 0x28cf0)
SetConvertStg (Ordinal: 1311, Address: 0x759a0)
SetDocumentBitStg (Ordinal: 1312, Address: 0x759c0)
SetErrorInfo (Ordinal: 1313, Address: 0xf9342)
SetWOWThunkGlobalPtr (Ordinal: 1314, Address: 0x14b00)
StgConvertPropertyToVariant (Ordinal: 1315, Address: 0x44ba0)
StgConvertVariantToProperty (Ordinal: 1316, Address: 0x44bc0)
StgCreateDocfile (Ordinal: 1317, Address: 0x44be0)
StgCreateDocfileOnILockBytes (Ordinal: 1318, Address: 0x6b60)
StgCreatePropSetStg (Ordinal: 1319, Address: 0x44c00)
StgCreatePropStg (Ordinal: 1320, Address: 0x44c20)
StgCreateStorageEx (Ordinal: 1321, Address: 0x44c40)
StgGetIFillLockBytesOnFile (Ordinal: 1322, Address: 0x44c90)
StgGetIFillLockBytesOnILockBytes (Ordinal: 1323, Address: 0x44cb0)
StgIsStorageFile (Ordinal: 1324, Address: 0x44cd0)
StgIsStorageILockBytes (Ordinal: 1325, Address: 0x44cf0)
StgOpenAsyncDocfileOnIFillLockBytes (Ordinal: 1326, Address: 0x44d10)
StgOpenPropStg (Ordinal: 1327, Address: 0x44d30)
StgOpenStorage (Ordinal: 1328, Address: 0xa440)
StgOpenStorageEx (Ordinal: 1329, Address: 0x22090)
StgOpenStorageOnHandle (Ordinal: 1330, Address: 0x44d50)
StgOpenStorageOnILockBytes (Ordinal: 1331, Address: 0x6960)
StgPropertyLengthAsVariant (Ordinal: 1332, Address: 0x44d70)
StgSetTimes (Ordinal: 1333, Address: 0x44d90)
StringFromCLSID (Ordinal: 1334, Address: 0xf9547)
StringFromGUID2 (Ordinal: 1335, Address: 0xf9582)
StringFromIID (Ordinal: 1336, Address: 0xf95bb)
UpdateDCOMSettings (Ordinal: 1337, Address: 0xf95f7)
UpdateProcessTracing (Ordinal: 1338, Address: 0xf9642)
UtConvertDvtd16toDvtd32 (Ordinal: 1339, Address: 0xa2d40)
UtConvertDvtd32toDvtd16 (Ordinal: 1340, Address: 0xa2fb0)
UtGetDvtd16Info (Ordinal: 1341, Address: 0xa32c0)
UtGetDvtd32Info (Ordinal: 1342, Address: 0xa3410)
WdtpInterfacePointer_UserFree (Ordinal: 1343, Address: 0xf96e8)
WdtpInterfacePointer_UserFree64 (Ordinal: 1344, Address: 0xf972e)
WdtpInterfacePointer_UserMarshal (Ordinal: 1345, Address: 0xf9777)
WdtpInterfacePointer_UserMarshal64 (Ordinal: 1346, Address: 0xf97c3)
WdtpInterfacePointer_UserSize (Ordinal: 1347, Address: 0xf980c)
WdtpInterfacePointer_UserSize64 (Ordinal: 1348, Address: 0xf9852)
WdtpInterfacePointer_UserUnmarshal (Ordinal: 1349, Address: 0xf989d)
WdtpInterfacePointer_UserUnmarshal64 (Ordinal: 1350, Address: 0xf98ed)
WriteClassStg (Ordinal: 1351, Address: 0x44db0)
WriteClassStm (Ordinal: 1352, Address: 0x44dd0)
WriteFmtUserTypeStg (Ordinal: 1353, Address: 0x1bc10)
WriteOleStg (Ordinal: 1354, Address: 0x1cb70)
WriteStringStream (Ordinal: 1355, Address: 0x1b810)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x1800d5a38)

api-ms-win-core-atoms-l1-1-0.dll

GlobalAddAtomA (Address: 0x1800d5a58)
GlobalAddAtomW (Address: 0x1800d5a60)
GlobalDeleteAtom (Address: 0x1800d5a70)
GlobalFindAtomA (Address: 0x1800d5a48)
GlobalFindAtomW (Address: 0x1800d5a50)
GlobalGetAtomNameA (Address: 0x1800d5a68)
GlobalGetAtomNameW (Address: 0x1800d5a78)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1800d5a90)
IsDebuggerPresent (Address: 0x1800d5a88)
OutputDebugStringW (Address: 0x1800d5a98)

api-ms-win-core-debug-l1-1-1.dll

CheckRemoteDebuggerPresent (Address: 0x1800d5aa8)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1800d5ab8)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1800d5ac8)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1800d5af0)
RaiseException (Address: 0x1800d5ae8)
SetLastError (Address: 0x1800d5ad8)
SetUnhandledExceptionFilter (Address: 0x1800d5af8)
UnhandledExceptionFilter (Address: 0x1800d5ae0)

api-ms-win-core-file-l1-1-0.dll

CreateFileW (Address: 0x1800d5b08)
DeleteFileW (Address: 0x1800d5b58)
FindClose (Address: 0x1800d5b40)
FindFirstFileW (Address: 0x1800d5b48)
GetDriveTypeW (Address: 0x1800d5b50)
GetFileAttributesExW (Address: 0x1800d5b10)
GetFileAttributesW (Address: 0x1800d5b60)
GetFullPathNameW (Address: 0x1800d5b38)
GetShortPathNameW (Address: 0x1800d5b18)
GetTempFileNameW (Address: 0x1800d5b28)
ReadFile (Address: 0x1800d5b20)
SetFilePointer (Address: 0x1800d5b30)

api-ms-win-core-file-l1-2-0.dll

GetTempPathW (Address: 0x1800d5b70)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1800d5b80)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1800d5ba0)
HeapAlloc (Address: 0x1800d5b98)
HeapFree (Address: 0x1800d5b90)

api-ms-win-core-heap-l2-1-0.dll

LocalFree (Address: 0x1800d5bb0)

api-ms-win-core-heap-obsolete-l1-1-0.dll

GlobalHandle (Address: 0x1800d5bd8)
GlobalLock (Address: 0x1800d5bc0)
GlobalReAlloc (Address: 0x1800d5be0)
GlobalSize (Address: 0x1800d5bc8)
GlobalUnlock (Address: 0x1800d5bd0)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x1800d5bf8)
InterlockedPopEntrySList (Address: 0x1800d5c00)
InterlockedPushEntrySList (Address: 0x1800d5bf0)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

DosDateTimeToFileTime (Address: 0x1800d5c20)
FileTimeToDosDateTime (Address: 0x1800d5c18)
MulDiv (Address: 0x1800d5c10)

api-ms-win-core-kernel32-private-l1-1-0.dll

_lclose (Address: 0x1800d5c50)
_llseek (Address: 0x1800d5c40)
_lread (Address: 0x1800d5c38)
_lwrite (Address: 0x1800d5c30)
CheckElevationEnabled (Address: 0x1800d5c48)

api-ms-win-core-libraryloader-l1-2-0.dll

FreeLibrary (Address: 0x1800d5c98)
GetModuleFileNameA (Address: 0x1800d5c60)
GetModuleFileNameW (Address: 0x1800d5cb0)
GetModuleHandleExW (Address: 0x1800d5ca8)
GetModuleHandleW (Address: 0x1800d5c80)
GetProcAddress (Address: 0x1800d5c68)
LoadLibraryExA (Address: 0x1800d5c70)
LoadLibraryExW (Address: 0x1800d5c88)
LoadResource (Address: 0x1800d5c78)
LoadStringW (Address: 0x1800d5ca0)
LockResource (Address: 0x1800d5c90)

api-ms-win-core-libraryloader-l1-2-1.dll

FindResourceW (Address: 0x1800d5cc8)
LoadLibraryA (Address: 0x1800d5cc0)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1800d5cf0)
GetLocaleInfoW (Address: 0x1800d5ce8)
GetSystemDefaultLCID (Address: 0x1800d5d08)
GetThreadLocale (Address: 0x1800d5cd8)
GetUserDefaultLCID (Address: 0x1800d5d00)
IsDBCSLeadByte (Address: 0x1800d5cf8)
LCMapStringW (Address: 0x1800d5ce0)

api-ms-win-core-marshal-l1-1-0.dll

CLIPFORMAT_UserFree (Address: 0x1800d5d38)
CLIPFORMAT_UserMarshal (Address: 0x1800d5d30)
CLIPFORMAT_UserSize (Address: 0x1800d5d90)
CLIPFORMAT_UserUnmarshal (Address: 0x1800d5d48)
HPALETTE_UserFree (Address: 0x1800d5d58)
HPALETTE_UserMarshal (Address: 0x1800d5d40)
HPALETTE_UserSize (Address: 0x1800d5d20)
HPALETTE_UserUnmarshal (Address: 0x1800d5d50)
HWND_UserFree (Address: 0x1800d5d70)
HWND_UserFree64 (Address: 0x1800d5d78)
HWND_UserMarshal (Address: 0x1800d5d28)
HWND_UserMarshal64 (Address: 0x1800d5d18)
HWND_UserSize (Address: 0x1800d5d88)
HWND_UserSize64 (Address: 0x1800d5d80)
HWND_UserUnmarshal (Address: 0x1800d5d68)
HWND_UserUnmarshal64 (Address: 0x1800d5d60)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x1800d5db8)
MapViewOfFile (Address: 0x1800d5da8)
OpenFileMappingW (Address: 0x1800d5db0)
UnmapViewOfFile (Address: 0x1800d5da0)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x1800d5dd8)
GetCommandLineW (Address: 0x1800d5dd0)
SearchPathW (Address: 0x1800d5dc8)

api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessW (Address: 0x1800d5e48)
CreateThread (Address: 0x1800d5e00)
GetCurrentProcess (Address: 0x1800d5e30)
GetCurrentProcessId (Address: 0x1800d5e38)
GetCurrentThread (Address: 0x1800d5df8)
GetCurrentThreadId (Address: 0x1800d5e40)
GetProcessId (Address: 0x1800d5e28)
OpenProcessToken (Address: 0x1800d5de8)
OpenThreadToken (Address: 0x1800d5e50)
SetThreadToken (Address: 0x1800d5e08)
TerminateProcess (Address: 0x1800d5df0)
TlsAlloc (Address: 0x1800d5e20)
TlsFree (Address: 0x1800d5e18)
TlsSetValue (Address: 0x1800d5e10)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x1800d5e68)
OpenProcess (Address: 0x1800d5e60)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1800d5e78)

api-ms-win-core-psapi-l1-1-0.dll

QueryFullProcessImageNameW (Address: 0x1800d5e88)

api-ms-win-core-psm-key-l1-1-0.dll

PsmGetKeyFromToken (Address: 0x1800d5e98)

api-ms-win-core-quirks-l1-1-0.dll

QuirkIsEnabled (Address: 0x1800d5ea8)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1800d5ec8)
RegCreateKeyExW (Address: 0x1800d5f30)
RegDeleteKeyExA (Address: 0x1800d5ef8)
RegDeleteKeyExW (Address: 0x1800d5f28)
RegDeleteValueW (Address: 0x1800d5f10)
RegEnumKeyExA (Address: 0x1800d5ed0)
RegEnumKeyExW (Address: 0x1800d5ee0)
RegEnumValueW (Address: 0x1800d5eb8)
RegFlushKey (Address: 0x1800d5f20)
RegGetValueW (Address: 0x1800d5ed8)
RegLoadMUIStringW (Address: 0x1800d5f18)
RegOpenKeyExA (Address: 0x1800d5ef0)
RegOpenKeyExW (Address: 0x1800d5f00)
RegQueryInfoKeyA (Address: 0x1800d5f08)
RegQueryInfoKeyW (Address: 0x1800d5f38)
RegQueryValueExW (Address: 0x1800d5ee8)
RegSetValueExW (Address: 0x1800d5ec0)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

PathFindFileNameW (Address: 0x1800d5f48)
PathIsFileSpecW (Address: 0x1800d5f50)

api-ms-win-core-sidebyside-l1-1-0.dll

FindActCtxSectionGuid (Address: 0x1800d5f60)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x1800d5f78)
CompareStringW (Address: 0x1800d5f80)
GetStringTypeW (Address: 0x1800d5f70)
MultiByteToWideChar (Address: 0x1800d5f88)
WideCharToMultiByte (Address: 0x1800d5f90)

api-ms-win-core-string-l2-1-0.dll

CharNextW (Address: 0x1800d5fb8)
CharPrevW (Address: 0x1800d5fa0)
CharUpperW (Address: 0x1800d5fa8)
IsCharAlphaNumericW (Address: 0x1800d5fc0)
IsCharAlphaW (Address: 0x1800d5fb0)

api-ms-win-core-stringansi-l1-1-0.dll

CharLowerA (Address: 0x1800d5fd8)
CharNextA (Address: 0x1800d5fe8)
CharPrevA (Address: 0x1800d5fd0)
CharUpperA (Address: 0x1800d5fe0)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1800d6028)
AcquireSRWLockShared (Address: 0x1800d5ff8)
CreateEventExW (Address: 0x1800d6070)
CreateEventW (Address: 0x1800d6000)
CreateMutexExW (Address: 0x1800d6020)
CreateSemaphoreExW (Address: 0x1800d6090)
DeleteCriticalSection (Address: 0x1800d6018)
EnterCriticalSection (Address: 0x1800d6080)
InitializeCriticalSectionAndSpinCount (Address: 0x1800d6038)
InitializeCriticalSectionEx (Address: 0x1800d6030)
InitializeSRWLock (Address: 0x1800d6050)
LeaveCriticalSection (Address: 0x1800d6058)
OpenSemaphoreW (Address: 0x1800d6040)
ReleaseMutex (Address: 0x1800d6068)
ReleaseSemaphore (Address: 0x1800d6088)
ReleaseSRWLockExclusive (Address: 0x1800d6060)
ReleaseSRWLockShared (Address: 0x1800d6098)
ResetEvent (Address: 0x1800d6010)
SetEvent (Address: 0x1800d6008)
WaitForSingleObject (Address: 0x1800d6078)
WaitForSingleObjectEx (Address: 0x1800d6048)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x1800d60b0)
InitOnceComplete (Address: 0x1800d60b8)
InitOnceExecuteOnce (Address: 0x1800d60a8)

api-ms-win-core-synch-l1-2-1.dll

CreateSemaphoreW (Address: 0x1800d60c8)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemInfo (Address: 0x1800d60e0)
GetSystemTime (Address: 0x1800d6100)
GetSystemTimeAsFileTime (Address: 0x1800d60f0)
GetTickCount (Address: 0x1800d60d8)
GetVersion (Address: 0x1800d60f8)
GetWindowsDirectoryW (Address: 0x1800d60e8)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x1800d6128)
CloseThreadpoolWait (Address: 0x1800d6140)
CloseThreadpoolWork (Address: 0x1800d6160)
CreateThreadpoolTimer (Address: 0x1800d6120)
CreateThreadpoolWait (Address: 0x1800d6118)
CreateThreadpoolWork (Address: 0x1800d6158)
SetThreadpoolTimer (Address: 0x1800d6138)
SetThreadpoolWait (Address: 0x1800d6110)
SubmitThreadpoolWork (Address: 0x1800d6150)
WaitForThreadpoolTimerCallbacks (Address: 0x1800d6130)
WaitForThreadpoolWorkCallbacks (Address: 0x1800d6148)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

CreateTimerQueueTimer (Address: 0x1800d6178)
DeleteTimerQueueTimer (Address: 0x1800d6170)

api-ms-win-core-timezone-l1-1-0.dll

SystemTimeToFileTime (Address: 0x1800d6188)

api-ms-win-core-wow64-l1-1-0.dll

IsWow64Process (Address: 0x1800d6198)

api-ms-win-core-wow64-l1-1-1.dll

GetSystemWow64DirectoryW (Address: 0x1800d61b0)
Wow64SetThreadDefaultGuestMachine (Address: 0x1800d61a8)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x1800d6248)
__CxxFrameHandler3 (Address: 0x1800d6270)
__CxxFrameHandler4 (Address: 0x1800d6260)
__std_terminate (Address: 0x1800d6268)
_CxxThrowException (Address: 0x1800d62f0)
_local_unwind (Address: 0x1800d62f8)
_o___std_type_info_destroy_list (Address: 0x1800d62e8)
_o___stdio_common_vsprintf (Address: 0x1800d62e0)
_o___stdio_common_vswprintf (Address: 0x1800d62d8)
_o___stdio_common_vswprintf_s (Address: 0x1800d62d0)
_o__cexit (Address: 0x1800d62c8)
_o__configure_narrow_argv (Address: 0x1800d62c0)
_o__crt_atexit (Address: 0x1800d62b8)
_o__errno (Address: 0x1800d62b0)
_o__execute_onexit_table (Address: 0x1800d62a8)
_o__initialize_narrow_environment (Address: 0x1800d6288)
_o__initialize_onexit_table (Address: 0x1800d6280)
_o__invalid_parameter_noinfo (Address: 0x1800d6278)
_o__purecall (Address: 0x1800d6298)
_o__register_onexit_function (Address: 0x1800d62a0)
_o__resetstkoflw (Address: 0x1800d6290)
_o__seh_filter_dll (Address: 0x1800d61c0)
_o__wcsicmp (Address: 0x1800d61c8)
_o__wcslwr (Address: 0x1800d61d0)
_o__wcsnicmp (Address: 0x1800d61d8)
_o__wtoi (Address: 0x1800d61e0)
_o_fmod (Address: 0x1800d61e8)
_o_free (Address: 0x1800d61f0)
_o_malloc (Address: 0x1800d6200)
_o_memcpy_s (Address: 0x1800d6208)
_o_strcpy_s (Address: 0x1800d6210)
_o_toupper (Address: 0x1800d6218)
_o_wcscpy_s (Address: 0x1800d6220)
_o_wcsncat_s (Address: 0x1800d6228)
_o_wcsncpy_s (Address: 0x1800d6230)
_o_wcstol (Address: 0x1800d6238)
_o_wcstoul (Address: 0x1800d6240)
memcmp (Address: 0x1800d6300)
memcpy (Address: 0x1800d6308)
memmove (Address: 0x1800d61f8)
wcschr (Address: 0x1800d6250)
wcsrchr (Address: 0x1800d6258)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x1800d6320)
_initterm_e (Address: 0x1800d6318)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x1800d6330)
strcmp (Address: 0x1800d6338)
strcspn (Address: 0x1800d6350)
wcscmp (Address: 0x1800d6340)
wcsncmp (Address: 0x1800d6348)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x1800d6378)
EventProviderEnabled (Address: 0x1800d6388)
EventRegister (Address: 0x1800d6368)
EventSetInformation (Address: 0x1800d6380)
EventUnregister (Address: 0x1800d6360)
EventWriteTransfer (Address: 0x1800d6370)

api-ms-win-security-base-l1-1-0.dll

CreateWellKnownSid (Address: 0x1800d6398)
DuplicateToken (Address: 0x1800d63b8)
GetSidSubAuthority (Address: 0x1800d63c8)
GetSidSubAuthorityCount (Address: 0x1800d63a8)
GetTokenInformation (Address: 0x1800d63c0)
ImpersonateLoggedOnUser (Address: 0x1800d63a0)
RevertToSelf (Address: 0x1800d63b0)

combase.dll

(Address: 0x1800d63d8)
(Address: 0x1800d63e0)
(Address: 0x1800d63e8)
(Address: 0x1800d63f0)
(Address: 0x1800d63f8)
(Address: 0x1800d6400)
(Address: 0x1800d6408)
(Address: 0x1800d6410)
(Address: 0x1800d6418)
(Address: 0x1800d6420)
(Address: 0x1800d6428)
(Address: 0x1800d6430)
(Address: 0x1800d6438)
(Address: 0x1800d6440)
(Address: 0x1800d6448)
(Address: 0x1800d6450)
(Address: 0x1800d6458)
(Address: 0x1800d6460)
(Address: 0x1800d6468)
(Address: 0x1800d6470)
(Address: 0x1800d6478)
(Address: 0x1800d6480)
(Address: 0x1800d6488)
(Address: 0x1800d6490)
(Address: 0x1800d6498)
(Address: 0x1800d64a0)
(Address: 0x1800d64a8)
(Address: 0x1800d64b0)
(Address: 0x1800d64b8)
(Address: 0x1800d64c0)
(Address: 0x1800d64c8)
(Address: 0x1800d64d0)
(Address: 0x1800d64d8)
(Address: 0x1800d64e0)
(Address: 0x1800d64e8)
(Address: 0x1800d64f0)
(Address: 0x1800d64f8)
(Address: 0x1800d6500)
(Address: 0x1800d6508)
(Address: 0x1800d6510)
(Address: 0x1800d6518)
(Address: 0x1800d6520)
(Address: 0x1800d6528)
(Address: 0x1800d6530)

GDI32.dll

BitBlt (Address: 0x1800d51d0)
CloseEnhMetaFile (Address: 0x1800d53b0)
CloseMetaFile (Address: 0x1800d5318)
CopyEnhMetaFileW (Address: 0x1800d52e8)
CopyMetaFileW (Address: 0x1800d52e0)
CreateBitmap (Address: 0x1800d52c0)
CreateCompatibleBitmap (Address: 0x1800d5238)
CreateCompatibleDC (Address: 0x1800d5288)
CreateDIBitmap (Address: 0x1800d5248)
CreateDIBSection (Address: 0x1800d51b8)
CreateEnhMetaFileW (Address: 0x1800d53a0)
CreateFontIndirectW (Address: 0x1800d5320)
CreateHalftonePalette (Address: 0x1800d5230)
CreateMetaFileA (Address: 0x1800d5310)
CreateMetaFileW (Address: 0x1800d53f8)
CreatePalette (Address: 0x1800d5268)
DeleteDC (Address: 0x1800d5280)
DeleteEnhMetaFile (Address: 0x1800d5300)
DeleteMetaFile (Address: 0x1800d52b0)
DeleteObject (Address: 0x1800d52b8)
EnumEnhMetaFile (Address: 0x1800d51b0)
EnumFontFamiliesExW (Address: 0x1800d5228)
EnumMetaFile (Address: 0x1800d53d8)
Escape (Address: 0x1800d5350)
ExtTextOutA (Address: 0x1800d5378)
GetBitmapBits (Address: 0x1800d52d8)
GetBitmapDimensionEx (Address: 0x1800d52f0)
GetCurrentObject (Address: 0x1800d5208)
GetDeviceCaps (Address: 0x1800d5380)
GetDIBits (Address: 0x1800d5240)
GetEnhMetaFileBits (Address: 0x1800d5410)
GetEnhMetaFileHeader (Address: 0x1800d5408)
GetEnhMetaFilePaletteEntries (Address: 0x1800d5278)
GetGraphicsMode (Address: 0x1800d5398)
GetMetaFileBitsEx (Address: 0x1800d5308)
GetObjectType (Address: 0x1800d5200)
GetObjectW (Address: 0x1800d52c8)
GetPaletteEntries (Address: 0x1800d5250)
GetStockObject (Address: 0x1800d53e0)
GetTextExtentPointA (Address: 0x1800d5368)
GetTextExtentPointW (Address: 0x1800d51c0)
GetTextFaceW (Address: 0x1800d5218)
GetTextMetricsA (Address: 0x1800d5330)
GetTextMetricsW (Address: 0x1800d5220)
GetWindowOrgEx (Address: 0x1800d51e0)
GetWinMetaFileBits (Address: 0x1800d52a0)
IntersectClipRect (Address: 0x1800d5390)
LPtoDP (Address: 0x1800d53c0)
OffsetViewportOrgEx (Address: 0x1800d51d8)
PatBlt (Address: 0x1800d5210)
PlayEnhMetaFile (Address: 0x1800d53b8)
PlayEnhMetaFileRecord (Address: 0x1800d5290)
PlayMetaFile (Address: 0x1800d53a8)
PlayMetaFileRecord (Address: 0x1800d5400)
RealizePalette (Address: 0x1800d5260)
RestoreDC (Address: 0x1800d53f0)
SaveDC (Address: 0x1800d5388)
SelectObject (Address: 0x1800d5328)
SelectPalette (Address: 0x1800d53e8)
SetBitmapBits (Address: 0x1800d52d0)
SetBitmapDimensionEx (Address: 0x1800d52f8)
SetBkColor (Address: 0x1800d51e8)
SetBkMode (Address: 0x1800d5360)
SetDIBits (Address: 0x1800d51c8)
SetEnhMetaFileBits (Address: 0x1800d5270)
SetMapMode (Address: 0x1800d5338)
SetMetaFileBitsEx (Address: 0x1800d5298)
SetStretchBltMode (Address: 0x1800d51f0)
SetTextAlign (Address: 0x1800d5370)
SetTextColor (Address: 0x1800d5358)
SetViewportExtEx (Address: 0x1800d53d0)
SetViewportOrgEx (Address: 0x1800d53c8)
SetWindowExtEx (Address: 0x1800d5348)
SetWindowOrgEx (Address: 0x1800d5340)
SetWinMetaFileBits (Address: 0x1800d52a8)
StretchBlt (Address: 0x1800d51f8)
StretchDIBits (Address: 0x1800d5258)

KERNEL32.dll

CreateFileA (Address: 0x1800d5478)
GetFullPathNameA (Address: 0x1800d5468)
HeapCreate (Address: 0x1800d5420)
HeapDestroy (Address: 0x1800d5480)
RegOpenUserClassesRoot (Address: 0x1800d5450)
SearchPathA (Address: 0x1800d5428)
SetThreadStackGuarantee (Address: 0x1800d5440)
TryAcquireSRWLockExclusive (Address: 0x1800d5458)
VirtualAlloc (Address: 0x1800d5438)
VirtualProtect (Address: 0x1800d5430)
VirtualQuery (Address: 0x1800d5448)
Wow64DisableWow64FsRedirection (Address: 0x1800d5460)
Wow64RevertWow64FsRedirection (Address: 0x1800d5470)

KERNELBASE.dll

AreFileApisANSI (Address: 0x1800d5498)
GetPackageFullName (Address: 0x1800d54d8)
GlobalAlloc (Address: 0x1800d54a0)
GlobalFree (Address: 0x1800d54a8)
LocalAlloc (Address: 0x1800d54b8)
LocalLock (Address: 0x1800d54b0)
LocalUnlock (Address: 0x1800d54c8)
lstrcmpiW (Address: 0x1800d54e0)
lstrcmpW (Address: 0x1800d54c0)
lstrlenW (Address: 0x1800d5490)
Sleep (Address: 0x1800d54d0)

ntdll.dll

EtwEventRegister (Address: 0x1800d6550)
EtwEventSetInformation (Address: 0x1800d6570)
EtwEventUnregister (Address: 0x1800d6558)
EtwEventWriteTransfer (Address: 0x1800d6560)
EtwGetTraceEnableFlags (Address: 0x1800d6578)
EtwGetTraceEnableLevel (Address: 0x1800d6628)
EtwGetTraceLoggerHandle (Address: 0x1800d6600)
EtwRegisterTraceGuidsW (Address: 0x1800d6630)
EtwTraceMessage (Address: 0x1800d6580)
EtwUnregisterTraceGuids (Address: 0x1800d6568)
NtQuerySecurityAttributesToken (Address: 0x1800d65b0)
NtQuerySystemInformation (Address: 0x1800d6548)
NtQuerySystemInformationEx (Address: 0x1800d65a8)
NtQueryWnfStateData (Address: 0x1800d6658)
NtSetInformationFile (Address: 0x1800d6640)
RtlAllocateHeap (Address: 0x1800d6588)
RtlAnsiStringToUnicodeString (Address: 0x1800d6688)
RtlCaptureContext (Address: 0x1800d6608)
RtlCompareUnicodeString (Address: 0x1800d65d8)
RtlDeleteCriticalSection (Address: 0x1800d65e0)
RtlFreeHeap (Address: 0x1800d6590)
RtlGetNtSystemRoot (Address: 0x1800d65f8)
RtlImageNtHeader (Address: 0x1800d65a0)
RtlInitializeCriticalSection (Address: 0x1800d6638)
RtlInitializeCriticalSectionAndSpinCount (Address: 0x1800d6540)
RtlInitUnicodeString (Address: 0x1800d65c8)
RtlIsCriticalSectionLockedByThread (Address: 0x1800d6680)
RtlLoadString (Address: 0x1800d6620)
RtlLookupFunctionEntry (Address: 0x1800d6610)
RtlNtStatusToDosError (Address: 0x1800d6648)
RtlQueryPackageClaims (Address: 0x1800d65f0)
RtlReAllocateHeap (Address: 0x1800d6598)
RtlVirtualUnwind (Address: 0x1800d6618)
RtlWriteRegistryValue (Address: 0x1800d6678)
WinSqmSetDWORD (Address: 0x1800d65e8)
ZwClose (Address: 0x1800d65b8)
ZwCreateKey (Address: 0x1800d6650)
ZwDeleteKey (Address: 0x1800d65c0)
ZwDeleteValueKey (Address: 0x1800d65d0)
ZwEnumerateKey (Address: 0x1800d6668)
ZwOpenKey (Address: 0x1800d6660)
ZwQueryValueKey (Address: 0x1800d6670)

RPCRT4.dll

CStdStubBuffer_AddRef (Address: 0x1800d5568)
CStdStubBuffer_Connect (Address: 0x1800d55b0)
CStdStubBuffer_CountRefs (Address: 0x1800d5650)
CStdStubBuffer_DebugServerQueryInterface (Address: 0x1800d5558)
CStdStubBuffer_DebugServerRelease (Address: 0x1800d5590)
CStdStubBuffer_Disconnect (Address: 0x1800d5598)
CStdStubBuffer_Invoke (Address: 0x1800d5548)
CStdStubBuffer_IsIIDSupported (Address: 0x1800d55a8)
CStdStubBuffer_QueryInterface (Address: 0x1800d5580)
I_RpcExceptionFilter (Address: 0x1800d5638)
IUnknown_AddRef_Proxy (Address: 0x1800d5550)
IUnknown_QueryInterface_Proxy (Address: 0x1800d55a0)
IUnknown_Release_Proxy (Address: 0x1800d5570)
Ndr64AsyncClientCall (Address: 0x1800d55f8)
NdrClientInitializeNew (Address: 0x1800d55d8)
NdrConvert2 (Address: 0x1800d55f0)
NdrCorrelationInitialize (Address: 0x1800d5578)
NdrCStdStubBuffer_Release (Address: 0x1800d55b8)
NdrGetSimpleTypeBufferAlignment (Address: 0x1800d54f0)
NdrGetSimpleTypeBufferSize (Address: 0x1800d54f8)
NdrGetSimpleTypeMemorySize (Address: 0x1800d55c8)
NdrGetTypeFlags (Address: 0x1800d55c0)
NdrOleAllocate (Address: 0x1800d5588)
NdrOleFree (Address: 0x1800d5560)
NdrOutInit (Address: 0x1800d5510)
NdrpGetProcFormatString (Address: 0x1800d5528)
NdrpGetTypeFormatString (Address: 0x1800d5530)
NdrpGetTypeGenCookie (Address: 0x1800d5520)
NdrpMemoryIncrement (Address: 0x1800d55d0)
NdrpReleaseTypeFormatString (Address: 0x1800d5518)
NdrpReleaseTypeGenCookie (Address: 0x1800d5540)
NdrpVarVtOfTypeDesc (Address: 0x1800d5538)
NdrTypeMarshall (Address: 0x1800d55e8)
NdrTypeSize (Address: 0x1800d55e0)
NdrTypeUnmarshall (Address: 0x1800d5508)
NdrUnmarshallBasetypeInline (Address: 0x1800d5500)
RpcAsyncCancelCall (Address: 0x1800d5610)
RpcAsyncCompleteCall (Address: 0x1800d5630)
RpcAsyncInitializeHandle (Address: 0x1800d5658)
RpcBindingFree (Address: 0x1800d5608)
RpcBindingFromStringBindingW (Address: 0x1800d5648)
RpcBindingSetAuthInfoExW (Address: 0x1800d5628)
RpcImpersonateClient (Address: 0x1800d5620)
RpcStringBindingComposeW (Address: 0x1800d5640)
RpcStringFreeW (Address: 0x1800d5618)
UuidFromStringW (Address: 0x1800d5600)

USER32.dll

(Address: 0x1800d5738)
(Address: 0x1800d5740)
(Address: 0x1800d5748)
(Address: 0x1800d5a00)
AllowSetForegroundWindow (Address: 0x1800d56c0)
CallMsgFilterW (Address: 0x1800d56e0)
CallNextHookEx (Address: 0x1800d5960)
CallWindowProcW (Address: 0x1800d5728)
CloseClipboard (Address: 0x1800d5780)
CopyAcceleratorTableW (Address: 0x1800d56f8)
CopyIcon (Address: 0x1800d59c8)
CopyImage (Address: 0x1800d59d0)
CountClipboardFormats (Address: 0x1800d5758)
CreateCursor (Address: 0x1800d59b0)
CreateDialogParamW (Address: 0x1800d58a0)
CreateIcon (Address: 0x1800d59b8)
CreateWindowExW (Address: 0x1800d5850)
DefWindowProcW (Address: 0x1800d5838)
DestroyIcon (Address: 0x1800d5968)
DestroyWindow (Address: 0x1800d5900)
DialogBoxParamW (Address: 0x1800d58a8)
DispatchMessageA (Address: 0x1800d59f0)
DispatchMessageW (Address: 0x1800d5918)
DrawIcon (Address: 0x1800d5998)
EmptyClipboard (Address: 0x1800d5770)
EnableWindow (Address: 0x1800d58b0)
EnumClipboardFormats (Address: 0x1800d5760)
FreeDDElParam (Address: 0x1800d5840)
GetActiveWindow (Address: 0x1800d58c0)
GetClassNameW (Address: 0x1800d5820)
GetClientRect (Address: 0x1800d5938)
GetClipboardData (Address: 0x1800d57a0)
GetClipboardFormatNameA (Address: 0x1800d57e0)
GetClipboardFormatNameW (Address: 0x1800d57f0)
GetClipboardOwner (Address: 0x1800d5768)
GetClipboardSequenceNumber (Address: 0x1800d5790)
GetCursor (Address: 0x1800d5698)
GetCursorPos (Address: 0x1800d56a0)
GetDC (Address: 0x1800d5978)
GetDesktopWindow (Address: 0x1800d5940)
GetDialogBaseUnits (Address: 0x1800d5a10)
GetDlgItem (Address: 0x1800d58e0)
GetFocus (Address: 0x1800d59d8)
GetIconInfo (Address: 0x1800d59c0)
GetKeyState (Address: 0x1800d5670)
GetMenuItemID (Address: 0x1800d5708)
GetMenuState (Address: 0x1800d5958)
GetMessageA (Address: 0x1800d59e0)
GetMessageW (Address: 0x1800d59e8)
GetOpenClipboardWindow (Address: 0x1800d5720)
GetParent (Address: 0x1800d56b8)
GetPropW (Address: 0x1800d57c0)
GetShellWindow (Address: 0x1800d5888)
GetSubMenu (Address: 0x1800d5700)
GetSysColor (Address: 0x1800d59a0)
GetSystemMetrics (Address: 0x1800d5988)
GetThreadDpiAwarenessContext (Address: 0x1800d56e8)
GetTopWindow (Address: 0x1800d5a18)
GetWindow (Address: 0x1800d5818)
GetWindowDpiAwarenessContext (Address: 0x1800d5690)
GetWindowLongPtrW (Address: 0x1800d5890)
GetWindowLongW (Address: 0x1800d5678)
GetWindowRect (Address: 0x1800d5930)
GetWindowTextA (Address: 0x1800d5a08)
GetWindowThreadProcessId (Address: 0x1800d5880)
GetWindowWord (Address: 0x1800d5808)
InSendMessage (Address: 0x1800d5710)
IsClipboardFormatAvailable (Address: 0x1800d57a8)
IsIconic (Address: 0x1800d5680)
IsWindow (Address: 0x1800d5860)
IsWindowEnabled (Address: 0x1800d58b8)
IsWindowUnicode (Address: 0x1800d5a20)
KillTimer (Address: 0x1800d5868)
LoadCursorW (Address: 0x1800d5778)
LoadIconW (Address: 0x1800d5970)
MessageBoxW (Address: 0x1800d58c8)
MoveWindow (Address: 0x1800d5750)
MsgWaitForMultipleObjects (Address: 0x1800d5920)
MsgWaitForMultipleObjectsEx (Address: 0x1800d5948)
OpenClipboard (Address: 0x1800d5788)
PackDDElParam (Address: 0x1800d5870)
PeekMessageW (Address: 0x1800d5908)
PostMessageW (Address: 0x1800d5848)
PostQuitMessage (Address: 0x1800d57f8)
RealChildWindowFromPoint (Address: 0x1800d56a8)
RegisterClassW (Address: 0x1800d5830)
RegisterClipboardFormatA (Address: 0x1800d57e8)
RegisterClipboardFormatW (Address: 0x1800d5800)
RegisterWindowMessageW (Address: 0x1800d57d8)
ReleaseCapture (Address: 0x1800d57b0)
ReleaseDC (Address: 0x1800d59a8)
RemovePropW (Address: 0x1800d57c8)
ReplyMessage (Address: 0x1800d5718)
ScreenToClient (Address: 0x1800d56f0)
SendDlgItemMessageW (Address: 0x1800d58d8)
SendMessageW (Address: 0x1800d58f0)
SetActiveWindow (Address: 0x1800d59f8)
SetCapture (Address: 0x1800d57b8)
SetClipboardData (Address: 0x1800d5798)
SetCursor (Address: 0x1800d56d8)
SetDlgItemTextW (Address: 0x1800d58d0)
SetFocus (Address: 0x1800d5730)
SetForegroundWindow (Address: 0x1800d5668)
SetPropW (Address: 0x1800d57d0)
SetRectEmpty (Address: 0x1800d5990)
SetThreadDpiAwarenessContext (Address: 0x1800d5688)
SetTimer (Address: 0x1800d56c8)
SetWindowLongPtrW (Address: 0x1800d5898)
SetWindowsHookExW (Address: 0x1800d58e8)
SetWindowTextW (Address: 0x1800d5928)
SetWindowWord (Address: 0x1800d5810)
ShowWindow (Address: 0x1800d58f8)
SystemParametersInfoW (Address: 0x1800d5980)
TranslateMessage (Address: 0x1800d5910)
UnhookWindowsHookEx (Address: 0x1800d5950)
UnpackDDElParam (Address: 0x1800d5878)
UnregisterClassW (Address: 0x1800d5828)
WaitForInputIdle (Address: 0x1800d5858)
WaitMessage (Address: 0x1800d56d0)
WindowFromPoint (Address: 0x1800d56b0)
WinHelpW (Address: 0x1800d5a28)