shell32.dll

Description: Windows Shell Common Dll

Version: 6.1.7601.18429

Architecture: 32-bit

Operating System: Windows NT

SHA256: 226b05b57c1f509a48c7ec22b71e6020

File Size: 12.3 MB

Uploaded At: June 24, 2026, 7:08 p.m.

Views: 46

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

SHChangeNotifyRegister (Ordinal: 2, Address: 0x923c1)
SHDefExtractIconA (Ordinal: 3, Address: 0x242935)
SHChangeNotifyDeregister (Ordinal: 4, Address: 0x976cd)
(Ordinal: 5, Address: 0xb8759)
SHDefExtractIconW (Ordinal: 6, Address: 0x66e66)
(Ordinal: 7, Address: 0xb8766)
(Ordinal: 8, Address: 0xb8774)
PifMgr_OpenProperties (Ordinal: 9, Address: 0x212454)
PifMgr_GetProperties (Ordinal: 10, Address: 0x21159d)
PifMgr_SetProperties (Ordinal: 11, Address: 0x211ef9)
(Ordinal: 12, Address: 0x246995)
PifMgr_CloseProperties (Ordinal: 13, Address: 0x210c95)
SHStartNetConnectionDialogW (Ordinal: 14, Address: 0x246923)
(Ordinal: 15, Address: 0x2444b3)
ILFindLastID (Ordinal: 16, Address: 0xa2d1c)
ILRemoveLastID (Ordinal: 17, Address: 0xa4c0b)
ILClone (Ordinal: 18, Address: 0xa1643)
ILCloneFirst (Ordinal: 19, Address: 0xa45d4)
(Ordinal: 20, Address: 0xa1643)
ILIsEqual (Ordinal: 21, Address: 0xa567c)
DAD_DragEnterEx2 (Ordinal: 22, Address: 0x239ded)
ILIsParent (Ordinal: 23, Address: 0x94a79)
ILFindChild (Ordinal: 24, Address: 0x8b4b6)
ILCombine (Ordinal: 25, Address: 0xa184b)
(Ordinal: 26, Address: 0xb8782)
ILSaveToStream (Ordinal: 27, Address: 0x48931)
SHILCreateFromPath (Ordinal: 28, Address: 0x5fa9e)
(Ordinal: 29, Address: 0x231479)
(Ordinal: 30, Address: 0xb878f)
(Ordinal: 31, Address: 0xb87a6)
(Ordinal: 32, Address: 0xb87c1)
(Ordinal: 33, Address: 0xb87db)
(Ordinal: 34, Address: 0xb87f5)
(Ordinal: 35, Address: 0x23144f)
(Ordinal: 36, Address: 0x2314d6)
(Ordinal: 37, Address: 0xb880f)
(Ordinal: 38, Address: 0xb8824)
(Ordinal: 39, Address: 0xb883b)
(Ordinal: 40, Address: 0xb884e)
IsLFNDriveA (Ordinal: 41, Address: 0x2317af)
IsLFNDriveW (Ordinal: 42, Address: 0x1a224)
PathIsExe (Ordinal: 43, Address: 0x5c18d)
(Ordinal: 44, Address: 0x235bae)
(Ordinal: 45, Address: 0x2314a3)
(Ordinal: 46, Address: 0xb8866)
PathMakeUniqueName (Ordinal: 47, Address: 0x231c89)
(Ordinal: 48, Address: 0xb887d)
PathQualify (Ordinal: 49, Address: 0x231876)
(Ordinal: 50, Address: 0xb8899)
PathResolve (Ordinal: 51, Address: 0x1435f)
(Ordinal: 52, Address: 0xb88b2)
(Ordinal: 53, Address: 0xb88c7)
(Ordinal: 54, Address: 0x23aa59)
(Ordinal: 55, Address: 0xb88d5)
(Ordinal: 56, Address: 0xb88ee)
(Ordinal: 57, Address: 0xb8909)
(Ordinal: 58, Address: 0x223ad8)
RestartDialog (Ordinal: 59, Address: 0x23a6a0)
(Ordinal: 60, Address: 0x23aa8d)
(Ordinal: 61, Address: 0xdc219)
PickIconDlg (Ordinal: 62, Address: 0x20bcd0)
GetFileNameFromBrowse (Ordinal: 63, Address: 0x24431f)
DriveType (Ordinal: 64, Address: 0x9e61b)
(Ordinal: 65, Address: 0x188881)
IsNetDrive (Ordinal: 66, Address: 0xa6cc0)
Shell_MergeMenus (Ordinal: 67, Address: 0x49f35)
SHGetSetSettings (Ordinal: 68, Address: 0x8a35a)
(Ordinal: 69, Address: 0x2467fa)
(Ordinal: 70, Address: 0x191ecc)
Shell_GetImageLists (Ordinal: 71, Address: 0x160a45)
Shell_GetCachedImageIndex (Ordinal: 72, Address: 0xe7b49)
SHShellFolderView_Message (Ordinal: 73, Address: 0x26b817)
SHCreateStdEnumFmtEtc (Ordinal: 74, Address: 0x203e5d)
PathYetAnotherMakeUniqueName (Ordinal: 75, Address: 0x11bfa3)
(Ordinal: 76, Address: 0x214f18)
SHMapPIDLToSystemImageListIndex (Ordinal: 77, Address: 0x160d78)
(Ordinal: 78, Address: 0xb8925)
(Ordinal: 79, Address: 0xb8932)
SHOpenPropSheetW (Ordinal: 80, Address: 0x27a9fa)
OpenAs_RunDLL (Ordinal: 81, Address: 0x218e65)
(Ordinal: 82, Address: 0xb893f)
CIDLData_CreateFromIDArray (Ordinal: 83, Address: 0x230dc1)
(Ordinal: 84, Address: 0xb894c)
OpenRegStream (Ordinal: 85, Address: 0x30006)
(Ordinal: 86, Address: 0xb8959)
(Ordinal: 87, Address: 0xb8966)
SHDoDragDrop (Ordinal: 88, Address: 0x239e26)
SHCloneSpecialIDList (Ordinal: 89, Address: 0x1a47d)
SHFindFiles (Ordinal: 90, Address: 0x22588c)
(Ordinal: 91, Address: 0x225741)
PathGetShortPath (Ordinal: 92, Address: 0x231caf)
(Ordinal: 93, Address: 0xadb68)
(Ordinal: 94, Address: 0xafb5)
(Ordinal: 95, Address: 0x98283)
(Ordinal: 96, Address: 0xb8973)
(Ordinal: 97, Address: 0x242e2d)
SHGetRealIDL (Ordinal: 98, Address: 0x1214c)
(Ordinal: 99, Address: 0x2f491)
SHRestricted (Ordinal: 100, Address: 0x7f02b)
(Ordinal: 101, Address: 0xb8980)
SHCoCreateInstance (Ordinal: 102, Address: 0x9b729)
SignalFileOpen (Ordinal: 103, Address: 0x162e4a)
(Ordinal: 104, Address: 0xb898c)
(Ordinal: 105, Address: 0xb8998)
(Ordinal: 106, Address: 0xb89a4)
(Ordinal: 107, Address: 0xb89b0)
(Ordinal: 108, Address: 0xb89bc)
(Ordinal: 109, Address: 0xb89c8)
(Ordinal: 110, Address: 0xb89d4)
(Ordinal: 111, Address: 0xb89e0)
(Ordinal: 112, Address: 0xb89ec)
(Ordinal: 113, Address: 0xb89f9)
(Ordinal: 114, Address: 0xb8a06)
(Ordinal: 115, Address: 0xb8a13)
(Ordinal: 116, Address: 0xb8a20)
(Ordinal: 117, Address: 0xb8a2d)
(Ordinal: 118, Address: 0xb8a3a)
IsLFNDrive (Ordinal: 119, Address: 0x1a224)
(Ordinal: 120, Address: 0xb8a47)
(Ordinal: 121, Address: 0xb8a54)
(Ordinal: 122, Address: 0xb8a61)
(Ordinal: 123, Address: 0xb8a6e)
(Ordinal: 124, Address: 0xb8a7b)
OpenAs_RunDLLA (Ordinal: 125, Address: 0x218e65)
(Ordinal: 126, Address: 0xb8a88)
(Ordinal: 127, Address: 0xb8a95)
(Ordinal: 128, Address: 0xb2561)
DAD_AutoScroll (Ordinal: 129, Address: 0x86f55)
(Ordinal: 130, Address: 0xb8aa3)
DAD_DragEnterEx (Ordinal: 131, Address: 0x15d70d)
DAD_DragLeave (Ordinal: 132, Address: 0x237fa4)
OpenAs_RunDLLW (Ordinal: 133, Address: 0x218f02)
DAD_DragMove (Ordinal: 134, Address: 0x238f8a)
PrepareDiscForBurnRunDllW (Ordinal: 135, Address: 0x2210ce)
DAD_SetDragImage (Ordinal: 136, Address: 0xa8445)
DAD_ShowDragImage (Ordinal: 137, Address: 0xb49a1)
PrintersGetCommand_RunDLL (Ordinal: 138, Address: 0x22344a)
PrintersGetCommand_RunDLLA (Ordinal: 139, Address: 0x22344a)
(Ordinal: 140, Address: 0xb8ab0)
(Ordinal: 141, Address: 0xb8abd)
(Ordinal: 142, Address: 0xb8aca)
(Ordinal: 143, Address: 0xb8ad7)
(Ordinal: 144, Address: 0xb8ae4)
(Ordinal: 145, Address: 0xb8af1)
(Ordinal: 146, Address: 0xb8b09)
SHCLSIDFromString (Ordinal: 147, Address: 0x8bc79)
(Ordinal: 148, Address: 0xb8b16)
SHFind_InitMenuPopup (Ordinal: 149, Address: 0x2703b7)
PrintersGetCommand_RunDLLW (Ordinal: 150, Address: 0x2234cf)
(Ordinal: 151, Address: 0xb8b23)
ILGetSize (Ordinal: 152, Address: 0xa162b)
ILGetNext (Ordinal: 153, Address: 0x463f9)
ILAppendID (Ordinal: 154, Address: 0x2445b1)
ILFree (Ordinal: 155, Address: 0x9c221)
(Ordinal: 156, Address: 0x9c221)
ILCreateFromPath (Ordinal: 157, Address: 0x244641)
(Ordinal: 158, Address: 0xb8b30)
(Ordinal: 159, Address: 0xb8b3e)
(Ordinal: 160, Address: 0x2465df)
(Ordinal: 161, Address: 0xb8b57)
SHSimpleIDListFromPath (Ordinal: 162, Address: 0x11c6eb)
(Ordinal: 163, Address: 0xb8b65)
Win32DeleteFile (Ordinal: 164, Address: 0x11d367)
SHCreateDirectory (Ordinal: 165, Address: 0x10dceb)
(Ordinal: 166, Address: 0xb8b72)
SHAddFromPropSheetExtArray (Ordinal: 167, Address: 0x249028)
SHCreatePropSheetExtArray (Ordinal: 168, Address: 0xd99f8)
SHDestroyPropSheetExtArray (Ordinal: 169, Address: 0xd9ae0)
SHReplaceFromPropSheetExtArray (Ordinal: 170, Address: 0x249094)
PathCleanupSpec (Ordinal: 171, Address: 0x11bde0)
(Ordinal: 172, Address: 0x2462cc)
SHValidateUNC (Ordinal: 173, Address: 0xbe73)
SHCreateShellFolderViewEx (Ordinal: 174, Address: 0x26b9f8)
(Ordinal: 175, Address: 0x20420)
SHSetInstanceExplorer (Ordinal: 176, Address: 0x16770)
(Ordinal: 177, Address: 0xb8b7f)
SHObjectProperties (Ordinal: 178, Address: 0x2236b8)
SHGetNewLinkInfoA (Ordinal: 179, Address: 0x245efc)
SHGetNewLinkInfoW (Ordinal: 180, Address: 0x245ed3)
(Ordinal: 181, Address: 0x3b42)
ShellMessageBoxW (Ordinal: 182, Address: 0xb8740)
ShellMessageBoxA (Ordinal: 183, Address: 0xb8727)
(Ordinal: 184, Address: 0xc0613)
(Ordinal: 185, Address: 0xb8b8c)
(Ordinal: 186, Address: 0x244403)
(Ordinal: 187, Address: 0xb8b9a)
(Ordinal: 188, Address: 0x278a)
ILCreateFromPathA (Ordinal: 189, Address: 0x24467b)
ILCreateFromPathW (Ordinal: 190, Address: 0x244641)
SHUpdateImageA (Ordinal: 191, Address: 0x24ff78)
SHUpdateImageW (Ordinal: 192, Address: 0x24fdac)
SHHandleUpdateImage (Ordinal: 193, Address: 0xf704c)
(Ordinal: 194, Address: 0xd9a16)
SHFree (Ordinal: 195, Address: 0x9c221)
SHAlloc (Ordinal: 196, Address: 0x1a5cd)
(Ordinal: 197, Address: 0xb8ba8)
(Ordinal: 198, Address: 0xb8bb5)
SHHelpShortcuts_RunDLL (Ordinal: 199, Address: 0x22361f)
(Ordinal: 200, Address: 0x85a1)
(Ordinal: 201, Address: 0x8948)
(Ordinal: 202, Address: 0xb8bc2)
(Ordinal: 203, Address: 0x223a99)
(Ordinal: 204, Address: 0x223ab7)
(Ordinal: 205, Address: 0x2229c7)
SHHelpShortcuts_RunDLLA (Ordinal: 206, Address: 0x22361f)
SHHelpShortcuts_RunDLLW (Ordinal: 207, Address: 0x22367a)
AppCompat_RunDLLW (Ordinal: 208, Address: 0x22c778)
(Ordinal: 209, Address: 0x226fab)
(Ordinal: 210, Address: 0x22716d)
(Ordinal: 211, Address: 0x5761c)
(Ordinal: 212, Address: 0x222afb)
(Ordinal: 213, Address: 0x2228eb)
(Ordinal: 214, Address: 0x2229b0)
(Ordinal: 215, Address: 0x246923)
(Ordinal: 216, Address: 0xb8bcf)
(Ordinal: 217, Address: 0xb8bdc)
(Ordinal: 218, Address: 0xb8be9)
(Ordinal: 219, Address: 0xb8bf6)
(Ordinal: 220, Address: 0xb8c03)
(Ordinal: 221, Address: 0xb8c10)
(Ordinal: 222, Address: 0xb8c1d)
(Ordinal: 223, Address: 0xb8c2a)
(Ordinal: 224, Address: 0xb8c37)
(Ordinal: 225, Address: 0xb8c44)
AssocCreateForClasses (Ordinal: 226, Address: 0x2c6fc)
(Ordinal: 227, Address: 0xb8c51)
AssocGetDetailsOfPropKey (Ordinal: 228, Address: 0x8ad47)
CheckEscapesW (Ordinal: 229, Address: 0x231eb0)
(Ordinal: 230, Address: 0xb8c5e)
SHSetFolderPathA (Ordinal: 231, Address: 0x25013d)
SHSetFolderPathW (Ordinal: 232, Address: 0x24ffcb)
(Ordinal: 233, Address: 0xb8c6c)
(Ordinal: 234, Address: 0xb8c79)
(Ordinal: 235, Address: 0xb8c86)
(Ordinal: 236, Address: 0x246533)
(Ordinal: 237, Address: 0xc8ed0)
CommandLineToArgvW (Ordinal: 238, Address: 0x19ea0)
PathIsSlowW (Ordinal: 239, Address: 0x1420c3)
PathIsSlowA (Ordinal: 240, Address: 0x231dad)
(Ordinal: 241, Address: 0x69373)
(Ordinal: 242, Address: 0xb8c94)
(Ordinal: 243, Address: 0xb8ca2)
(Ordinal: 244, Address: 0x192ef)
SHTestTokenMembership (Ordinal: 245, Address: 0x52c6a)
(Ordinal: 246, Address: 0xb8cb0)
(Ordinal: 247, Address: 0xb8cbe)
(Ordinal: 248, Address: 0xb8ccc)
(Ordinal: 249, Address: 0xb8cda)
(Ordinal: 250, Address: 0xb8cf9)
(Ordinal: 251, Address: 0xb8d16)
(Ordinal: 252, Address: 0xb8d2e)
(Ordinal: 253, Address: 0xb8d41)
(Ordinal: 254, Address: 0x23aa73)
Control_RunDLL (Ordinal: 255, Address: 0x235bf0)
SHCreateShellFolderView (Ordinal: 256, Address: 0x308be)
(Ordinal: 257, Address: 0xa0f51)
(Ordinal: 258, Address: 0x7b920)
(Ordinal: 259, Address: 0xb49a1)
(Ordinal: 260, Address: 0x236729)
(Ordinal: 261, Address: 0x2720d7)
(Ordinal: 262, Address: 0x27243a)
Control_RunDLLA (Ordinal: 263, Address: 0x235bf0)
(Ordinal: 264, Address: 0x23655c)
(Ordinal: 265, Address: 0xdc61b)
(Ordinal: 266, Address: 0x243439)
Control_RunDLLAsUserW (Ordinal: 267, Address: 0x235bcf)
Control_RunDLLW (Ordinal: 268, Address: 0xd9dfd)
DllCanUnloadNow (Ordinal: 269, Address: 0xb9631)
(Ordinal: 270, Address: 0x2716f4)
DllGetClassObject (Ordinal: 271, Address: 0xb2561)
DllGetVersion (Ordinal: 272, Address: 0x379290)
DllInstall (Ordinal: 273, Address: 0x23c35b)
DllRegisterServer (Ordinal: 274, Address: 0x99995)
DllUnregisterServer (Ordinal: 275, Address: 0x99995)
DoEnvironmentSubstA (Ordinal: 276, Address: 0x20527e)
DoEnvironmentSubstW (Ordinal: 277, Address: 0x11c3a)
DragAcceptFiles (Ordinal: 278, Address: 0x121af1)
DragFinish (Ordinal: 279, Address: 0x215090)
DragQueryFile (Ordinal: 280, Address: 0x2152f7)
DragQueryFileA (Ordinal: 281, Address: 0x2152f7)
DragQueryFileAorW (Ordinal: 282, Address: 0x2150a1)
DragQueryFileW (Ordinal: 283, Address: 0x2152d4)
DragQueryPoint (Ordinal: 284, Address: 0x21502d)
DuplicateIcon (Ordinal: 285, Address: 0x204c14)
ExtractAssociatedIconA (Ordinal: 286, Address: 0x205166)
ExtractAssociatedIconExA (Ordinal: 287, Address: 0x204fbb)
ExtractAssociatedIconExW (Ordinal: 288, Address: 0x204d73)
ExtractAssociatedIconW (Ordinal: 289, Address: 0x205086)
ExtractIconA (Ordinal: 290, Address: 0x205110)
ExtractIconEx (Ordinal: 291, Address: 0x204d17)
ExtractIconExA (Ordinal: 292, Address: 0x204d17)
ExtractIconExW (Ordinal: 293, Address: 0x11f02d)
ExtractIconW (Ordinal: 294, Address: 0x10dc84)
FindExecutableA (Ordinal: 295, Address: 0x243253)
FindExecutableW (Ordinal: 296, Address: 0x2301)
FreeIconList (Ordinal: 297, Address: 0xdd6ff)
GetCurrentProcessExplicitAppUserModelID (Ordinal: 298, Address: 0x2350c3)
InitNetworkAddressControl (Ordinal: 299, Address: 0x7c047)
InternalExtractIconListA (Ordinal: 300, Address: 0x86f55)
InternalExtractIconListW (Ordinal: 301, Address: 0x86f55)
LaunchMSHelp_RunDLLW (Ordinal: 302, Address: 0x215b58)
Options_RunDLL (Ordinal: 303, Address: 0x3487d4)
Options_RunDLLA (Ordinal: 304, Address: 0x3487d4)
Options_RunDLLW (Ordinal: 305, Address: 0xcb8ff)
RealShellExecuteA (Ordinal: 306, Address: 0x246d59)
RealShellExecuteExA (Ordinal: 307, Address: 0x246d4e)
RealShellExecuteExW (Ordinal: 308, Address: 0x246d4e)
RealShellExecuteW (Ordinal: 309, Address: 0x246d59)
RegenerateUserEnvironment (Ordinal: 310, Address: 0xbae59)
RunAsNewUser_RunDLLW (Ordinal: 311, Address: 0x215c78)
SHAddDefaultPropertiesByExt (Ordinal: 312, Address: 0xee2f5)
SHAddToRecentDocs (Ordinal: 313, Address: 0x11afae)
SHAppBarMessage (Ordinal: 314, Address: 0x13240)
SHAssocEnumHandlers (Ordinal: 315, Address: 0x132527)
SHAssocEnumHandlersForProtocolByApplication (Ordinal: 316, Address: 0xe84f3)
SHBindToFolderIDListParent (Ordinal: 317, Address: 0xa6c83)
SHBindToFolderIDListParentEx (Ordinal: 318, Address: 0xa4c84)
SHBindToObject (Ordinal: 319, Address: 0xa2b5a)
SHBindToParent (Ordinal: 320, Address: 0x8b004)
SHBrowseForFolder (Ordinal: 321, Address: 0x24e2be)
SHBrowseForFolderA (Ordinal: 322, Address: 0x24e2be)
SHBrowseForFolderW (Ordinal: 323, Address: 0x24e186)
SHChangeNotify (Ordinal: 324, Address: 0x578e5)
SHChangeNotifyRegisterThread (Ordinal: 325, Address: 0x46597)
SHChangeNotifySuspendResume (Ordinal: 326, Address: 0x57eff)
SHCreateAssociationRegistration (Ordinal: 327, Address: 0xf8ba5)
SHCreateDataObject (Ordinal: 328, Address: 0x190501)
SHCreateDefaultContextMenu (Ordinal: 329, Address: 0x4c1b6)
SHCreateDefaultExtractIcon (Ordinal: 330, Address: 0x6c019)
SHCreateDefaultPropertiesOp (Ordinal: 331, Address: 0x248e6e)
SHCreateDirectoryExA (Ordinal: 332, Address: 0x1150d3)
SHCreateDirectoryExW (Ordinal: 333, Address: 0xadac9)
SHCreateItemFromIDList (Ordinal: 334, Address: 0xa6b55)
SHCreateItemFromParsingName (Ordinal: 335, Address: 0x54195)
SHCreateItemFromRelativeName (Ordinal: 336, Address: 0x19fc3f)
SHCreateItemInKnownFolder (Ordinal: 337, Address: 0xed5bf)
SHCreateItemWithParent (Ordinal: 338, Address: 0x8b386)
SHCreateLocalServerRunDll (Ordinal: 339, Address: 0xf5888)
SHCreateProcessAsUserW (Ordinal: 340, Address: 0x246d3c)
SHCreateQueryCancelAutoPlayMoniker (Ordinal: 341, Address: 0xf9cd5)
SHCreateShellItem (Ordinal: 342, Address: 0x110ee4)
SHCreateShellItemArray (Ordinal: 343, Address: 0x2ee6c)
SHCreateShellItemArrayFromDataObject (Ordinal: 344, Address: 0x4ad07)
SHCreateShellItemArrayFromIDLists (Ordinal: 345, Address: 0x64c11)
SHCreateShellItemArrayFromShellItem (Ordinal: 346, Address: 0x2ef03)
SHEmptyRecycleBinA (Ordinal: 347, Address: 0x26f6ab)
SHEmptyRecycleBinW (Ordinal: 348, Address: 0x26f66c)
SHEnableServiceObject (Ordinal: 349, Address: 0xe4b9)
SHEnumerateUnreadMailAccountsW (Ordinal: 350, Address: 0x22435b)
SHEvaluateSystemCommandTemplate (Ordinal: 351, Address: 0x63eb8)
SHExtractIconsW (Ordinal: 352, Address: 0x2050e3)
SHFileOperation (Ordinal: 353, Address: 0x25b4c1)
SHFileOperationA (Ordinal: 354, Address: 0x25b4c1)
SHFileOperationW (Ordinal: 355, Address: 0x59700)
SHFormatDrive (Ordinal: 356, Address: 0xb4035)
SHFreeNameMappings (Ordinal: 357, Address: 0x2506d1)
SHGetDataFromIDListA (Ordinal: 358, Address: 0x2450a9)
SHGetDataFromIDListW (Ordinal: 359, Address: 0x3259f)
SHGetDesktopFolder (Ordinal: 360, Address: 0xa18fa)
SHGetDiskFreeSpaceA (Ordinal: 361, Address: 0x24504c)
SHGetDiskFreeSpaceExA (Ordinal: 362, Address: 0x24504c)
SHGetDiskFreeSpaceExW (Ordinal: 363, Address: 0xaa73a)
SHGetDriveMedia (Ordinal: 364, Address: 0xf9b95)
SHGetFileInfo (Ordinal: 365, Address: 0x1ae7bb)
SHGetFileInfoA (Ordinal: 366, Address: 0x1ae7bb)
SHGetFileInfoW (Ordinal: 367, Address: 0x1ae67a)
SHGetFolderLocation (Ordinal: 368, Address: 0x8df70)
SHGetFolderPathA (Ordinal: 369, Address: 0x11776c)
SHGetFolderPathAndSubDirA (Ordinal: 370, Address: 0x2501cf)
SHGetFolderPathAndSubDirW (Ordinal: 371, Address: 0x350b1)
SHGetFolderPathEx (Ordinal: 372, Address: 0x855a8)
SHGetFolderPathW (Ordinal: 373, Address: 0x85650)
SHGetIDListFromObject (Ordinal: 374, Address: 0xa2927)
SHGetIconOverlayIndexA (Ordinal: 375, Address: 0x275a53)
SHGetIconOverlayIndexW (Ordinal: 376, Address: 0x2759a3)
SHGetInstanceExplorer (Ordinal: 377, Address: 0x46329)
SHGetItemFromDataObject (Ordinal: 378, Address: 0x4e85c)
SHGetItemFromObject (Ordinal: 379, Address: 0x49d7d)
SHGetKnownFolderIDList (Ordinal: 380, Address: 0x8a1eb)
SHGetKnownFolderItem (Ordinal: 381, Address: 0x91294)
SHGetKnownFolderPath (Ordinal: 382, Address: 0xb4c10)
SHGetLocalizedName (Ordinal: 383, Address: 0x2459fb)
SHGetMalloc (Ordinal: 384, Address: 0x205ba)
SHGetNameFromIDList (Ordinal: 385, Address: 0x2aa10)
SHGetNewLinkInfo (Ordinal: 386, Address: 0x245efc)
SHGetPathFromIDList (Ordinal: 387, Address: 0x121b24)
SHGetPathFromIDListA (Ordinal: 388, Address: 0x121b24)
SHGetPathFromIDListEx (Ordinal: 389, Address: 0x5ed69)
SHGetPathFromIDListW (Ordinal: 390, Address: 0x91717)
SHGetPropertyStoreForWindow (Ordinal: 391, Address: 0xaff45)
SHGetPropertyStoreFromIDList (Ordinal: 392, Address: 0x245417)
SHGetPropertyStoreFromParsingName (Ordinal: 393, Address: 0x24547d)
SHGetSettings (Ordinal: 394, Address: 0x275f38)
SHGetSpecialFolderLocation (Ordinal: 395, Address: 0x8e099)
SHGetSpecialFolderPathA (Ordinal: 396, Address: 0x25019e)
SHGetSpecialFolderPathW (Ordinal: 397, Address: 0x20420)
SHGetStockIconInfo (Ordinal: 398, Address: 0x1a8012)
SHGetTemporaryPropertyForItem (Ordinal: 399, Address: 0x18c857)
SHGetUnreadMailCountW (Ordinal: 400, Address: 0x2277d1)
SHInvokePrinterCommandA (Ordinal: 401, Address: 0x2232bd)
SHInvokePrinterCommandW (Ordinal: 402, Address: 0x22300f)
SHIsFileAvailableOffline (Ordinal: 403, Address: 0x229058)
SHLoadInProc (Ordinal: 404, Address: 0x2a4142)
SHLoadNonloadedIconOverlayIdentifiers (Ordinal: 405, Address: 0x277279)
SHOpenFolderAndSelectItems (Ordinal: 406, Address: 0x245332)
SHOpenWithDialog (Ordinal: 407, Address: 0x218e09)
SHParseDisplayName (Ordinal: 408, Address: 0x87ed3)
SHPathPrepareForWriteA (Ordinal: 409, Address: 0x27b703)
SHPathPrepareForWriteW (Ordinal: 410, Address: 0x5550b)
SHQueryRecycleBinA (Ordinal: 411, Address: 0x26ed31)
SHQueryRecycleBinW (Ordinal: 412, Address: 0x26ec53)
SHQueryUserNotificationState (Ordinal: 413, Address: 0xb380)
SHRemoveLocalizedName (Ordinal: 414, Address: 0x245aa8)
SHResolveLibrary (Ordinal: 415, Address: 0x145828)
SHSetDefaultProperties (Ordinal: 416, Address: 0x248f3b)
SHSetKnownFolderPath (Ordinal: 417, Address: 0x35b21d)
SHSetLocalizedName (Ordinal: 418, Address: 0x10d973)
SHSetTemporaryPropertyForItem (Ordinal: 419, Address: 0x1ab538)
SHSetUnreadMailCountW (Ordinal: 420, Address: 0x2279e6)
SHShowManageLibraryUI (Ordinal: 421, Address: 0x365248)
SHUpdateRecycleBinIcon (Ordinal: 422, Address: 0xc56d)
SetCurrentProcessExplicitAppUserModelID (Ordinal: 423, Address: 0x10cd34)
SheChangeDirA (Ordinal: 424, Address: 0x214b96)
SheChangeDirExW (Ordinal: 425, Address: 0x214bf3)
SheGetDirA (Ordinal: 426, Address: 0x214938)
SheSetCurDrive (Ordinal: 427, Address: 0x214e76)
ShellAboutA (Ordinal: 428, Address: 0x27d289)
ShellAboutW (Ordinal: 429, Address: 0xca091)
ShellExec_RunDLL (Ordinal: 430, Address: 0x247892)
ShellExec_RunDLLA (Ordinal: 431, Address: 0x247892)
ShellExec_RunDLLW (Ordinal: 432, Address: 0x2477a0)
ShellExecuteA (Ordinal: 433, Address: 0x247715)
ShellExecuteEx (Ordinal: 434, Address: 0x24767a)
ShellExecuteExA (Ordinal: 435, Address: 0x24767a)
ShellExecuteExW (Ordinal: 436, Address: 0x21e06)
ShellExecuteW (Ordinal: 437, Address: 0x13c39)
ShellHookProc (Ordinal: 438, Address: 0x86f55)
Shell_GetCachedImageIndexA (Ordinal: 439, Address: 0x242994)
Shell_GetCachedImageIndexW (Ordinal: 440, Address: 0x7587e)
Shell_NotifyIcon (Ordinal: 441, Address: 0x24918e)
Shell_NotifyIconA (Ordinal: 442, Address: 0x24918e)
Shell_NotifyIconGetRect (Ordinal: 443, Address: 0xc5dcd)
Shell_NotifyIconW (Ordinal: 444, Address: 0x20179)
StrChrA (Ordinal: 445, Address: 0x3b08c1)
StrChrIA (Ordinal: 446, Address: 0x3b08cc)
StrChrIW (Ordinal: 447, Address: 0x3b08d7)
StrChrW (Ordinal: 448, Address: 0x14ca08)
StrCmpNA (Ordinal: 449, Address: 0x3b08e2)
StrCmpNIA (Ordinal: 450, Address: 0x3b08ed)
StrCmpNIW (Ordinal: 451, Address: 0xbdb6e)
StrCmpNW (Ordinal: 452, Address: 0x3b08f8)
StrNCmpA (Ordinal: 453, Address: 0x20aedc)
StrNCmpIA (Ordinal: 454, Address: 0x20afd7)
StrNCmpIW (Ordinal: 455, Address: 0x20af54)
StrNCmpW (Ordinal: 456, Address: 0x20ae11)
StrRChrA (Ordinal: 457, Address: 0x3b0903)
StrRChrIA (Ordinal: 458, Address: 0x3b090e)
StrRChrIW (Ordinal: 459, Address: 0x3b0919)
StrRChrW (Ordinal: 460, Address: 0x3b0924)
StrRStrA (Ordinal: 461, Address: 0x20b0b8)
StrRStrIA (Ordinal: 462, Address: 0x3b092f)
StrRStrIW (Ordinal: 463, Address: 0x3b093a)
StrRStrW (Ordinal: 464, Address: 0x20b04f)
StrStrA (Ordinal: 465, Address: 0x3b0945)
StrStrIA (Ordinal: 466, Address: 0x3b0950)
StrStrIW (Ordinal: 467, Address: 0x11d990)
StrStrW (Ordinal: 468, Address: 0x3b095b)
WOWShellExecute (Ordinal: 469, Address: 0x247575)
WaitForExplorerRestartW (Ordinal: 470, Address: 0x23c241)
(Ordinal: 520, Address: 0xb8d4f)
(Ordinal: 521, Address: 0xb8d5c)
(Ordinal: 522, Address: 0xb8d69)
(Ordinal: 523, Address: 0xb8d76)
RealDriveType (Ordinal: 524, Address: 0x9e633)
(Ordinal: 525, Address: 0xb8d83)
SHFlushSFCache (Ordinal: 526, Address: 0x270429)
(Ordinal: 640, Address: 0xb8d91)
(Ordinal: 641, Address: 0xb8d9e)
(Ordinal: 643, Address: 0xb8dab)
SHChangeNotification_Lock (Ordinal: 644, Address: 0x99585)
SHChangeNotification_Unlock (Ordinal: 645, Address: 0x99561)
(Ordinal: 646, Address: 0xb8db8)
(Ordinal: 648, Address: 0xb8dc5)
(Ordinal: 650, Address: 0xb8dd3)
(Ordinal: 651, Address: 0x204183)
WriteCabinetState (Ordinal: 652, Address: 0x20419b)
(Ordinal: 653, Address: 0xb8deb)
ReadCabinetState (Ordinal: 654, Address: 0x12c7b9)
(Ordinal: 660, Address: 0x2376b)
IsUserAnAdmin (Ordinal: 680, Address: 0x54475)
(Ordinal: 681, Address: 0x15fe7f)
StgMakeUniqueName (Ordinal: 682, Address: 0x27e1f0)
(Ordinal: 683, Address: 0x27bb61)
(Ordinal: 684, Address: 0x27bb61)
SHPropStgCreate (Ordinal: 685, Address: 0xe7e94)
SHPropStgReadMultiple (Ordinal: 688, Address: 0xe7e27)
SHPropStgWriteMultiple (Ordinal: 689, Address: 0xe7a53)
(Ordinal: 690, Address: 0xe7c65)
(Ordinal: 691, Address: 0xb8df8)
(Ordinal: 700, Address: 0xb8e06)
CDefFolderMenu_Create2 (Ordinal: 701, Address: 0x230ac6)
(Ordinal: 702, Address: 0x4cb50)
(Ordinal: 703, Address: 0xb8e14)
(Ordinal: 704, Address: 0xb8e21)
(Ordinal: 707, Address: 0xb8e2e)
(Ordinal: 708, Address: 0xb8e3b)
SHGetSetFolderCustomSettings (Ordinal: 709, Address: 0x133343)
(Ordinal: 711, Address: 0x1138ad)
(Ordinal: 712, Address: 0xb8e48)
(Ordinal: 713, Address: 0x231371)
(Ordinal: 714, Address: 0x119259)
(Ordinal: 715, Address: 0xb8e55)
SHMultiFileProperties (Ordinal: 716, Address: 0x27ae4b)
(Ordinal: 719, Address: 0x9641d)
(Ordinal: 720, Address: 0xb8e63)
(Ordinal: 721, Address: 0xb8e70)
(Ordinal: 722, Address: 0xb8e7d)
(Ordinal: 723, Address: 0x84ef3)
(Ordinal: 724, Address: 0xb8e8b)
(Ordinal: 725, Address: 0xb8e99)
(Ordinal: 726, Address: 0xb8ea6)
SHGetImageList (Ordinal: 727, Address: 0x68d2e)
RestartDialogEx (Ordinal: 730, Address: 0x23a3e6)
(Ordinal: 731, Address: 0x10dde)
(Ordinal: 732, Address: 0x96610)
(Ordinal: 733, Address: 0x1af76e)
(Ordinal: 740, Address: 0x2a3b8)
SHCreateFileExtractIconW (Ordinal: 743, Address: 0x2462f0)
(Ordinal: 744, Address: 0x17b265)
(Ordinal: 745, Address: 0xb8eb3)
SHLimitInputEdit (Ordinal: 747, Address: 0x276d19)
(Ordinal: 748, Address: 0x276dbe)
(Ordinal: 749, Address: 0xb8ec1)
SHGetAttributesFromDataObject (Ordinal: 750, Address: 0x191014)
(Ordinal: 751, Address: 0x225020)
(Ordinal: 752, Address: 0x246a9b)
(Ordinal: 753, Address: 0x10872)
(Ordinal: 754, Address: 0x276b99)
(Ordinal: 755, Address: 0x934e1)
(Ordinal: 756, Address: 0xb8ece)
(Ordinal: 757, Address: 0x912dc)
(Ordinal: 758, Address: 0x26e8e7)
(Ordinal: 759, Address: 0xafe99)
(Ordinal: 760, Address: 0x252289)
(Ordinal: 761, Address: 0x24ff32)
(Ordinal: 762, Address: 0xb8edb)
(Ordinal: 763, Address: 0x236b6c)
(Ordinal: 764, Address: 0x9dccd)
(Ordinal: 766, Address: 0xb8ee9)
(Ordinal: 767, Address: 0xa5ec8)
(Ordinal: 777, Address: 0x4ab01)
(Ordinal: 778, Address: 0xed67d)
(Ordinal: 781, Address: 0x249f58)
(Ordinal: 786, Address: 0xb8ef7)
(Ordinal: 787, Address: 0xa796a)
(Ordinal: 788, Address: 0x25f559)
(Ordinal: 789, Address: 0x155cc9)
(Ordinal: 790, Address: 0x2457c1)
(Ordinal: 791, Address: 0x14a429)
(Ordinal: 810, Address: 0x271e70)
(Ordinal: 811, Address: 0x27228b)
(Ordinal: 812, Address: 0x37a81d)
(Ordinal: 813, Address: 0x37a888)
(Ordinal: 814, Address: 0x13d8ba)
(Ordinal: 815, Address: 0x12240d)
(Ordinal: 816, Address: 0x39362b)
(Ordinal: 817, Address: 0x39359c)
(Ordinal: 818, Address: 0x122836)
(Ordinal: 819, Address: 0xcd8c1)
(Ordinal: 820, Address: 0xb8f05)
(Ordinal: 821, Address: 0xb8f13)
(Ordinal: 822, Address: 0xb8f21)
(Ordinal: 823, Address: 0x183509)
(Ordinal: 824, Address: 0x13a49f)
(Ordinal: 825, Address: 0x122432)
(Ordinal: 826, Address: 0xb8f2f)
(Ordinal: 827, Address: 0xb8f3d)
(Ordinal: 828, Address: 0x22f95d)
(Ordinal: 829, Address: 0x22fb38)
(Ordinal: 830, Address: 0x13dc09)
(Ordinal: 831, Address: 0x225e5d)
(Ordinal: 832, Address: 0xb8f4b)
(Ordinal: 833, Address: 0x85512)
(Ordinal: 834, Address: 0xb8f59)
(Ordinal: 835, Address: 0xb8f67)
(Ordinal: 836, Address: 0xb8f75)
(Ordinal: 837, Address: 0xb8f83)
(Ordinal: 838, Address: 0xb8f91)
(Ordinal: 839, Address: 0xb8f9f)
(Ordinal: 840, Address: 0xe86f2)
(Ordinal: 841, Address: 0xb8fad)
(Ordinal: 842, Address: 0xb8fbb)
(Ordinal: 843, Address: 0xb8fc9)
(Ordinal: 844, Address: 0x393691)
(Ordinal: 845, Address: 0x3936f4)
ILLoadFromStreamEx (Ordinal: 846, Address: 0x5ea45)
(Ordinal: 847, Address: 0x1224a7)
(Ordinal: 848, Address: 0x24a2f0)
(Ordinal: 849, Address: 0x13c96d)
(Ordinal: 850, Address: 0x932be)
(Ordinal: 851, Address: 0x152acf)
(Ordinal: 852, Address: 0xb8fd7)
(Ordinal: 854, Address: 0xb8fe5)
(Ordinal: 856, Address: 0xb8ff3)
(Ordinal: 857, Address: 0xb9001)
(Ordinal: 858, Address: 0xb900f)
(Ordinal: 859, Address: 0xffe11)
(Ordinal: 860, Address: 0x3fbbd)
(Ordinal: 861, Address: 0xb901d)
(Ordinal: 862, Address: 0xa56a1)
(Ordinal: 863, Address: 0xb902b)
(Ordinal: 864, Address: 0xdf842)
(Ordinal: 865, Address: 0x1a8e99)
(Ordinal: 866, Address: 0x882c7)
(Ordinal: 867, Address: 0xb9039)
(Ordinal: 868, Address: 0xb9047)
(Ordinal: 869, Address: 0xb9055)
(Ordinal: 870, Address: 0x162fe3)
(Ordinal: 871, Address: 0x18af06)
(Ordinal: 872, Address: 0xb9063)
(Ordinal: 873, Address: 0x1a80a6)
(Ordinal: 874, Address: 0x16614c)
(Ordinal: 875, Address: 0x16591f)
(Ordinal: 876, Address: 0x1507a1)
(Ordinal: 877, Address: 0x24076c)
(Ordinal: 878, Address: 0x138e2e)
(Ordinal: 880, Address: 0x12c0fa)
(Ordinal: 881, Address: 0xc8761)
(Ordinal: 882, Address: 0xc8c6c)
(Ordinal: 883, Address: 0x3787ef)
(Ordinal: 884, Address: 0x239f7d)
(Ordinal: 885, Address: 0x2ed5)
(Ordinal: 886, Address: 0x225c5c)
(Ordinal: 887, Address: 0x24e9db)
(Ordinal: 888, Address: 0x2768ac)
(Ordinal: 889, Address: 0x98967)
(Ordinal: 890, Address: 0x98936)
(Ordinal: 891, Address: 0xb225)
(Ordinal: 892, Address: 0x5175)
(Ordinal: 893, Address: 0x16383b)
(Ordinal: 894, Address: 0x119538)
(Ordinal: 895, Address: 0x171c7)
(Ordinal: 896, Address: 0x233aff)
(Ordinal: 897, Address: 0x153e22)
(Ordinal: 898, Address: 0x246156)
(Ordinal: 899, Address: 0x24a5)
(Ordinal: 900, Address: 0x187ba8)
(Ordinal: 901, Address: 0x1133c1)
(Ordinal: 902, Address: 0x69288)
(Ordinal: 903, Address: 0x11a615)

Imported DLLs & Functions

API-MS-Win-Core-Debug-L1-1-0.dll

OutputDebugStringA (Address: 0x7380110c)
OutputDebugStringW (Address: 0x73801108)

API-MS-Win-Core-ErrorHandling-L1-1-0.dll

GetLastError (Address: 0x73801128)
RaiseException (Address: 0x7380111c)
SetErrorMode (Address: 0x73801118)
SetLastError (Address: 0x73801114)
SetUnhandledExceptionFilter (Address: 0x73801124)
UnhandledExceptionFilter (Address: 0x73801120)

API-MS-Win-Core-File-L1-1-0.dll

CompareFileTime (Address: 0x73801154)
CreateDirectoryW (Address: 0x73801160)
CreateFileW (Address: 0x73801174)
DeleteFileW (Address: 0x73801164)
FileTimeToSystemTime (Address: 0x738011b8)
FindClose (Address: 0x73801188)
FindCloseChangeNotification (Address: 0x73801198)
FindFirstChangeNotificationW (Address: 0x738011a4)
FindFirstFileExW (Address: 0x738011bc)
FindFirstFileW (Address: 0x73801194)
FindFirstVolumeW (Address: 0x738011c8)
FindNextChangeNotification (Address: 0x738011a0)
FindNextFileW (Address: 0x7380118c)
FindNextVolumeW (Address: 0x738011c4)
FindVolumeClose (Address: 0x738011c0)
FlushFileBuffers (Address: 0x738011a8)
GetDiskFreeSpaceExW (Address: 0x73801190)
GetDiskFreeSpaceW (Address: 0x73801180)
GetDriveTypeW (Address: 0x73801148)
GetFileAttributesA (Address: 0x73801144)
GetFileAttributesExW (Address: 0x73801130)
GetFileAttributesW (Address: 0x7380116c)
GetFileInformationByHandle (Address: 0x738011b0)
GetFileSize (Address: 0x7380113c)
GetFileSizeEx (Address: 0x73801178)
GetFullPathNameW (Address: 0x7380119c)
GetLogicalDrives (Address: 0x73801138)
GetLongPathNameW (Address: 0x73801184)
GetShortPathNameW (Address: 0x73801140)
GetTempFileNameW (Address: 0x738011b4)
GetVolumeInformationW (Address: 0x73801134)
GetVolumePathNameW (Address: 0x738011ac)
QueryDosDeviceW (Address: 0x73801170)
ReadFile (Address: 0x7380114c)
RemoveDirectoryW (Address: 0x7380115c)
SetEndOfFile (Address: 0x738011cc)
SetFileAttributesW (Address: 0x73801168)
SetFilePointer (Address: 0x73801150)
SetFileTime (Address: 0x7380117c)
WriteFile (Address: 0x73801158)

API-MS-Win-Core-Handle-L1-1-0.dll

CloseHandle (Address: 0x738011d4)
DuplicateHandle (Address: 0x738011d8)

API-MS-Win-Core-Heap-L1-1-0.dll

GetProcessHeap (Address: 0x738011e4)
HeapAlloc (Address: 0x738011e0)
HeapDestroy (Address: 0x738011e8)
HeapFree (Address: 0x738011f0)
HeapReAlloc (Address: 0x738011ec)

API-MS-Win-Core-Interlocked-L1-1-0.dll

InterlockedCompareExchange (Address: 0x73801204)
InterlockedCompareExchange64 (Address: 0x73801208)
InterlockedDecrement (Address: 0x738011fc)
InterlockedExchange (Address: 0x738011f8)
InterlockedIncrement (Address: 0x73801200)

API-MS-Win-Core-IO-L1-1-0.dll

CancelIoEx (Address: 0x73801210)
DeviceIoControl (Address: 0x73801218)
GetOverlappedResult (Address: 0x73801214)

API-MS-Win-Core-LibraryLoader-L1-1-0.dll

DisableThreadLibraryCalls (Address: 0x73801248)
FreeLibrary (Address: 0x73801230)
FreeLibraryAndExitThread (Address: 0x73801244)
FreeResource (Address: 0x73801224)
GetModuleFileNameW (Address: 0x73801220)
GetModuleHandleExW (Address: 0x73801254)
GetModuleHandleW (Address: 0x73801234)
GetProcAddress (Address: 0x7380123c)
LoadLibraryExA (Address: 0x73801240)
LoadLibraryExW (Address: 0x7380124c)
LoadResource (Address: 0x73801228)
LoadStringA (Address: 0x73801238)
LoadStringW (Address: 0x7380122c)
LockResource (Address: 0x73801258)
SizeofResource (Address: 0x73801250)

API-MS-Win-Core-Localization-L1-1-0.dll

FindNLSString (Address: 0x73801260)
GetACP (Address: 0x73801278)
GetCPInfo (Address: 0x73801270)
GetCPInfoExW (Address: 0x73801264)
GetLocaleInfoEx (Address: 0x73801268)
GetLocaleInfoW (Address: 0x73801274)
GetOEMCP (Address: 0x73801294)
GetSystemDefaultLangID (Address: 0x7380126c)
GetSystemDefaultLCID (Address: 0x7380128c)
GetThreadLocale (Address: 0x73801280)
GetThreadUILanguage (Address: 0x73801288)
GetUserDefaultLCID (Address: 0x73801284)
LCMapStringW (Address: 0x7380127c)
VerLanguageNameW (Address: 0x73801290)

API-MS-Win-Core-LocalRegistry-L1-1-0.dll

RegCloseKey (Address: 0x7380129c)
RegCreateKeyExW (Address: 0x738012a8)
RegDeleteKeyExW (Address: 0x738012b0)
RegDeleteTreeW (Address: 0x738012c8)
RegDeleteValueW (Address: 0x738012b4)
RegEnumKeyExW (Address: 0x738012c4)
RegEnumValueW (Address: 0x738012ac)
RegGetValueW (Address: 0x738012b8)
RegOpenCurrentUser (Address: 0x738012d0)
RegOpenKeyExA (Address: 0x738012cc)
RegOpenKeyExW (Address: 0x738012a0)
RegQueryInfoKeyA (Address: 0x738012c0)
RegQueryInfoKeyW (Address: 0x738012bc)
RegQueryValueExA (Address: 0x738012d4)
RegQueryValueExW (Address: 0x738012d8)
RegSetValueExW (Address: 0x738012a4)

API-MS-Win-Core-Memory-L1-1-0.dll

CreateFileMappingW (Address: 0x738012e8)
MapViewOfFile (Address: 0x73801300)
OpenFileMappingW (Address: 0x738012ec)
ReadProcessMemory (Address: 0x738012f0)
UnmapViewOfFile (Address: 0x738012e0)
VirtualAlloc (Address: 0x738012f8)
VirtualFree (Address: 0x738012f4)
VirtualProtect (Address: 0x738012e4)
VirtualQuery (Address: 0x738012fc)

API-MS-Win-Core-Misc-L1-1-0.dll

FormatMessageW (Address: 0x7380132c)
GlobalAlloc (Address: 0x73801310)
GlobalFree (Address: 0x73801314)
IsWow64Process (Address: 0x7380131c)
LocalAlloc (Address: 0x73801334)
LocalFree (Address: 0x73801330)
LocalReAlloc (Address: 0x73801328)
lstrcmpA (Address: 0x73801324)
lstrcmpiA (Address: 0x73801320)
lstrcmpiW (Address: 0x7380133c)
lstrcmpW (Address: 0x73801340)
lstrlenA (Address: 0x73801308)
lstrlenW (Address: 0x73801338)
Sleep (Address: 0x73801318)
Wow64DisableWow64FsRedirection (Address: 0x7380130c)
Wow64RevertWow64FsRedirection (Address: 0x73801344)

API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x7380134c)
FreeEnvironmentStringsW (Address: 0x73801350)
GetCurrentDirectoryW (Address: 0x73801354)
GetEnvironmentStringsW (Address: 0x73801368)
GetEnvironmentVariableW (Address: 0x73801358)
SearchPathW (Address: 0x7380135c)
SetCurrentDirectoryW (Address: 0x73801364)
SetEnvironmentVariableW (Address: 0x73801360)

API-MS-Win-Core-ProcessThreads-L1-1-0.dll

CreateProcessAsUserW (Address: 0x738013d4)
CreateProcessW (Address: 0x738013dc)
CreateThread (Address: 0x738013c0)
DeleteProcThreadAttributeList (Address: 0x738013d0)
ExitProcess (Address: 0x73801370)
GetCurrentProcess (Address: 0x738013c4)
GetCurrentProcessId (Address: 0x738013b4)
GetCurrentThread (Address: 0x7380137c)
GetCurrentThreadId (Address: 0x738013cc)
GetExitCodeProcess (Address: 0x73801378)
GetExitCodeThread (Address: 0x73801384)
GetProcessTimes (Address: 0x738013a4)
GetStartupInfoW (Address: 0x738013a0)
GetThreadId (Address: 0x73801388)
GetThreadPriority (Address: 0x73801394)
InitializeProcThreadAttributeList (Address: 0x73801398)
OpenProcessToken (Address: 0x738013c8)
OpenThread (Address: 0x7380138c)
OpenThreadToken (Address: 0x73801380)
ProcessIdToSessionId (Address: 0x738013b0)
ResumeThread (Address: 0x7380139c)
SetThreadPriority (Address: 0x73801390)
SetThreadToken (Address: 0x738013d8)
TerminateProcess (Address: 0x73801374)
TlsAlloc (Address: 0x738013a8)
TlsFree (Address: 0x738013ac)
TlsGetValue (Address: 0x738013b8)
TlsSetValue (Address: 0x738013bc)

API-MS-Win-Core-Profile-L1-1-0.dll

QueryPerformanceCounter (Address: 0x738013e8)
QueryPerformanceFrequency (Address: 0x738013e4)

API-MS-Win-Core-String-L1-1-0.dll

CompareStringEx (Address: 0x73801400)
CompareStringOrdinal (Address: 0x738013f8)
CompareStringW (Address: 0x73801408)
GetStringTypeExW (Address: 0x738013fc)
GetStringTypeW (Address: 0x73801404)
MultiByteToWideChar (Address: 0x738013f4)
WideCharToMultiByte (Address: 0x738013f0)

API-MS-Win-Core-Synch-L1-1-0.dll

AcquireSRWLockExclusive (Address: 0x7380145c)
AcquireSRWLockShared (Address: 0x7380144c)
CreateEventW (Address: 0x73801414)
CreateMutexW (Address: 0x73801438)
DeleteCriticalSection (Address: 0x73801428)
EnterCriticalSection (Address: 0x73801430)
InitializeCriticalSection (Address: 0x7380142c)
InitializeSRWLock (Address: 0x73801440)
LeaveCriticalSection (Address: 0x73801434)
OpenEventW (Address: 0x73801458)
OpenMutexW (Address: 0x73801444)
OpenProcess (Address: 0x73801448)
ReleaseMutex (Address: 0x73801454)
ReleaseSemaphore (Address: 0x73801420)
ReleaseSRWLockExclusive (Address: 0x73801410)
ReleaseSRWLockShared (Address: 0x73801450)
ResetEvent (Address: 0x73801418)
SetEvent (Address: 0x73801424)
SetWaitableTimer (Address: 0x73801460)
TryEnterCriticalSection (Address: 0x7380143c)
WaitForSingleObject (Address: 0x7380141c)

API-MS-Win-Core-SysInfo-L1-1-0.dll

GetComputerNameExW (Address: 0x73801494)
GetLocalTime (Address: 0x7380148c)
GetSystemDirectoryW (Address: 0x73801480)
GetSystemInfo (Address: 0x73801470)
GetSystemTime (Address: 0x73801474)
GetSystemTimeAsFileTime (Address: 0x7380147c)
GetSystemWindowsDirectoryW (Address: 0x73801488)
GetTickCount (Address: 0x73801478)
GetTickCount64 (Address: 0x73801484)
GetVersionExW (Address: 0x73801468)
GetWindowsDirectoryW (Address: 0x73801498)
GlobalMemoryStatusEx (Address: 0x73801490)
SystemTimeToFileTime (Address: 0x7380146c)

API-MS-Win-Security-Base-L1-1-0.dll

AccessCheck (Address: 0x73801514)
AddAccessAllowedAce (Address: 0x738014a0)
AddAccessAllowedAceEx (Address: 0x73801538)
AddAccessDeniedAceEx (Address: 0x7380153c)
AddAce (Address: 0x738014b0)
AdjustTokenPrivileges (Address: 0x738014d8)
AllocateAndInitializeSid (Address: 0x73801500)
CheckTokenMembership (Address: 0x7380150c)
CopySid (Address: 0x7380152c)
CreateWellKnownSid (Address: 0x73801508)
DeleteAce (Address: 0x738014bc)
DuplicateToken (Address: 0x73801534)
DuplicateTokenEx (Address: 0x73801528)
EqualSid (Address: 0x73801518)
FreeSid (Address: 0x73801504)
GetAce (Address: 0x738014b8)
GetAclInformation (Address: 0x738014b4)
GetFileSecurityW (Address: 0x73801510)
GetKernelObjectSecurity (Address: 0x738014c4)
GetLengthSid (Address: 0x738014a8)
GetSecurityDescriptorControl (Address: 0x738014a4)
GetSecurityDescriptorDacl (Address: 0x738014f0)
GetSecurityDescriptorGroup (Address: 0x738014e8)
GetSecurityDescriptorOwner (Address: 0x738014e4)
GetSecurityDescriptorSacl (Address: 0x738014f4)
GetSidIdentifierAuthority (Address: 0x738014e0)
GetSidLengthRequired (Address: 0x738014d4)
GetSidSubAuthority (Address: 0x738014dc)
GetSidSubAuthorityCount (Address: 0x738014d0)
GetTokenInformation (Address: 0x7380151c)
ImpersonateSelf (Address: 0x738014f8)
InitializeAcl (Address: 0x738014ac)
InitializeSecurityDescriptor (Address: 0x738014c8)
InitializeSid (Address: 0x73801544)
IsValidSid (Address: 0x73801530)
IsWellKnownSid (Address: 0x738014ec)
QuerySecurityAccessMask (Address: 0x738014c0)
RevertToSelf (Address: 0x738014fc)
SetFileSecurityW (Address: 0x73801520)
SetSecurityDescriptorDacl (Address: 0x738014cc)
SetSecurityDescriptorOwner (Address: 0x73801524)
SetTokenInformation (Address: 0x73801540)

GDI32.dll

AddFontResourceW (Address: 0x738020ec)
BitBlt (Address: 0x73802128)
CreateBitmap (Address: 0x738020bc)
CreateCompatibleBitmap (Address: 0x738020fc)
CreateCompatibleDC (Address: 0x73802124)
CreateDCW (Address: 0x73802108)
CreateDIBSection (Address: 0x738020c4)
CreateFontA (Address: 0x738020f0)
CreateFontIndirectW (Address: 0x73802114)
CreateFontW (Address: 0x73802160)
CreatePen (Address: 0x738020ac)
CreatePolygonRgn (Address: 0x7380209c)
CreateRectRgn (Address: 0x7380205c)
CreateRectRgnIndirect (Address: 0x7380214c)
CreateSolidBrush (Address: 0x7380216c)
DeleteDC (Address: 0x7380212c)
DeleteMetaFile (Address: 0x73802074)
DeleteObject (Address: 0x73802178)
EnumFontFamiliesA (Address: 0x738020e8)
EnumFontFamiliesExW (Address: 0x7380210c)
ExtTextOutW (Address: 0x7380215c)
GdiAlphaBlend (Address: 0x738020d0)
GdiFlush (Address: 0x738020c8)
GdiTransparentBlt (Address: 0x738020b8)
GetClipBox (Address: 0x73802058)
GetClipRgn (Address: 0x73802060)
GetCurrentObject (Address: 0x738020a8)
GetDeviceCaps (Address: 0x738020d4)
GetDIBColorTable (Address: 0x73802158)
GetLayout (Address: 0x738020f4)
GetNearestColor (Address: 0x7380213c)
GetObjectType (Address: 0x73802144)
GetObjectW (Address: 0x73802118)
GetPixel (Address: 0x738020cc)
GetStockObject (Address: 0x73802170)
GetTextAlign (Address: 0x73802084)
GetTextColor (Address: 0x738020b4)
GetTextExtentPoint32A (Address: 0x73802168)
GetTextExtentPoint32W (Address: 0x73802110)
GetTextExtentPointW (Address: 0x738020d8)
GetTextFaceW (Address: 0x73802104)
GetTextMetricsW (Address: 0x7380211c)
GetViewportOrgEx (Address: 0x73802054)
GetWindowOrgEx (Address: 0x73802148)
IntersectClipRect (Address: 0x73802064)
LineTo (Address: 0x738020a4)
LPtoDP (Address: 0x73802078)
MoveToEx (Address: 0x738020a0)
OffsetWindowOrgEx (Address: 0x738020e0)
PatBlt (Address: 0x73802120)
PlayMetaFile (Address: 0x73802070)
PlgBlt (Address: 0x73802140)
Rectangle (Address: 0x738020b0)
RestoreDC (Address: 0x73802150)
SaveDC (Address: 0x73802154)
SelectClipRgn (Address: 0x73802068)
SelectObject (Address: 0x73802138)
SetBkColor (Address: 0x73802134)
SetBkMode (Address: 0x738020dc)
SetFontEnumeration (Address: 0x73802100)
SetLayout (Address: 0x738020f8)
SetMapMode (Address: 0x7380208c)
SetMetaFileBitsEx (Address: 0x7380206c)
SetStretchBltMode (Address: 0x7380207c)
SetTextAlign (Address: 0x73802088)
SetTextColor (Address: 0x73802130)
SetViewportExtEx (Address: 0x73802098)
SetViewportOrgEx (Address: 0x73802090)
SetWindowExtEx (Address: 0x73802094)
SetWindowOrgEx (Address: 0x738020e4)
StretchBlt (Address: 0x73802080)
TextOutA (Address: 0x73802164)
TextOutW (Address: 0x738020c0)
TranslateCharsetInfo (Address: 0x73802174)

KERNEL32.dll

ActivateActCtx (Address: 0x7380222c)
AssignProcessToJobObject (Address: 0x73802188)
CancelSynchronousIo (Address: 0x738021f8)
CheckElevation (Address: 0x738022c4)
CheckElevationEnabled (Address: 0x7380228c)
CloseThreadpoolTimer (Address: 0x738021d4)
CopyFileW (Address: 0x738022d4)
CreateActCtxW (Address: 0x738022bc)
CreateHardLinkW (Address: 0x738021e0)
CreateIoCompletionPort (Address: 0x73802194)
CreateJobObjectW (Address: 0x738021a4)
CreateSemaphoreW (Address: 0x7380220c)
CreateThreadpoolTimer (Address: 0x738021d8)
CreateTimerQueueTimer (Address: 0x738021e4)
CreateWaitableTimerW (Address: 0x738022dc)
DeactivateActCtx (Address: 0x73802230)
DelayLoadFailureHook (Address: 0x73802274)
DeleteTimerQueueTimer (Address: 0x738021e8)
DosDateTimeToFileTime (Address: 0x73802234)
EnumResourceNamesW (Address: 0x7380224c)
ExpandEnvironmentStringsA (Address: 0x738021a8)
FileTimeToDosDateTime (Address: 0x73802238)
FileTimeToLocalFileTime (Address: 0x738021c0)
FindAtomW (Address: 0x738021f4)
FindResourceExW (Address: 0x738021b0)
FindResourceW (Address: 0x73802240)
FlushInstructionCache (Address: 0x738021cc)
GetAtomNameW (Address: 0x738021ac)
GetBinaryTypeW (Address: 0x738022cc)
GetCompressedFileSizeW (Address: 0x738022d0)
GetComputerNameW (Address: 0x73802244)
GetDateFormatW (Address: 0x7380227c)
GetFileInformationByHandleEx (Address: 0x738022e4)
GetNativeSystemInfo (Address: 0x738022b8)
GetPhysicallyInstalledSystemMemory (Address: 0x738021c8)
GetPrivateProfileIntW (Address: 0x7380225c)
GetPrivateProfileSectionNamesW (Address: 0x73802228)
GetPrivateProfileSectionW (Address: 0x738022ec)
GetPrivateProfileStringW (Address: 0x73802254)
GetProcessId (Address: 0x73802190)
GetProductInfo (Address: 0x738021f0)
GetProfileIntW (Address: 0x73802260)
GetProfileSectionW (Address: 0x73802290)
GetQueuedCompletionStatus (Address: 0x7380219c)
GetShortPathNameA (Address: 0x73802264)
GetSystemPreferredUILanguages (Address: 0x738022f4)
GetSystemWow64DirectoryW (Address: 0x738021ec)
GetTempPathW (Address: 0x73802278)
GetVolumeNameForVolumeMountPointW (Address: 0x73802294)
GetVolumePathNamesForVolumeNameW (Address: 0x738022f0)
GlobalAddAtomW (Address: 0x738022b4)
GlobalDeleteAtom (Address: 0x738022b0)
GlobalFlags (Address: 0x73802200)
GlobalGetAtomNameW (Address: 0x7380223c)
GlobalLock (Address: 0x7380226c)
GlobalReAlloc (Address: 0x73802270)
GlobalSize (Address: 0x738022a0)
GlobalUnlock (Address: 0x73802268)
InitOnceBeginInitialize (Address: 0x73802298)
InitOnceExecuteOnce (Address: 0x7380229c)
IsProcessInJob (Address: 0x738021a0)
LoadLibraryA (Address: 0x738021c4)
LoadLibraryW (Address: 0x73802250)
LocaleNameToLCID (Address: 0x73802184)
LocalFileTimeToFileTime (Address: 0x738021bc)
LocalSize (Address: 0x73802210)
MoveFileExW (Address: 0x73802248)
MoveFileW (Address: 0x738022a8)
MulDiv (Address: 0x73802258)
PowerClearRequest (Address: 0x73802280)
PowerCreateRequest (Address: 0x73802288)
PowerSetRequest (Address: 0x73802284)
QueryActCtxW (Address: 0x738022ac)
QueryFullProcessImageNameW (Address: 0x73802224)
QueueUserWorkItem (Address: 0x738021d0)
ReadDirectoryChangesW (Address: 0x738022e0)
RegisterWaitForSingleObject (Address: 0x73802214)
ReleaseActCtx (Address: 0x738022c0)
ReplaceFileW (Address: 0x738022a4)
ResolveLocaleName (Address: 0x73802180)
SetInformationJobObject (Address: 0x73802198)
SetThreadpoolTimer (Address: 0x738021dc)
SetVolumeLabelW (Address: 0x73802204)
SystemTimeToTzSpecificLocalTime (Address: 0x738021b4)
TerminateThread (Address: 0x7380218c)
TzSpecificLocalTimeToSystemTime (Address: 0x738021b8)
UnregisterWait (Address: 0x738021fc)
UnregisterWaitEx (Address: 0x73802218)
WaitForMultipleObjects (Address: 0x73802208)
WerpNotifyUseStringResource (Address: 0x738022d8)
Wow64EnableWow64FsRedirection (Address: 0x738022c8)
WritePrivateProfileSectionW (Address: 0x73802220)
WritePrivateProfileStringW (Address: 0x7380221c)
WTSGetActiveConsoleSessionId (Address: 0x738022e8)

KERNELBASE.dll

EnumSystemLocalesEx (Address: 0x738010e8)
EnumUILanguagesW (Address: 0x738010f8)
GetNumberFormatW (Address: 0x738010ec)
GetUserDefaultUILanguage (Address: 0x738010f4)
IsDBCSLeadByte (Address: 0x73801100)
LCIDToLocaleName (Address: 0x738010f0)
NotifyRedirectedStringChange (Address: 0x738010fc)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x73801080)
__dllonexit (Address: 0x738010d0)
_amsg_exit (Address: 0x738010c4)
_CIexp (Address: 0x73801058)
_CIlog (Address: 0x73801060)
_CIpow (Address: 0x7380106c)
_CxxThrowException (Address: 0x738010a0)
_except_handler4_common (Address: 0x738010c8)
_ftol2 (Address: 0x73801064)
_ftol2_sse (Address: 0x73801028)
_initterm (Address: 0x738010c0)
_itow (Address: 0x73801070)
_lock (Address: 0x738010d4)
_ltow_s (Address: 0x7380103c)
_onexit (Address: 0x738010d8)
_resetstkoflw (Address: 0x738010a4)
_strnicmp (Address: 0x7380101c)
_ui64tow_s (Address: 0x73801068)
_unlock (Address: 0x738010cc)
_vsnprintf (Address: 0x73801074)
_vsnwprintf (Address: 0x738010e0)
_wcsicmp (Address: 0x73801018)
_wcsnicmp (Address: 0x73801030)
_wtoi (Address: 0x73801008)
_XcptFilter (Address: 0x738010bc)
??0exception@@QAE@ABQBD@Z (Address: 0x73801084)
??0exception@@QAE@ABV0@@Z (Address: 0x73801094)
??0exception@@QAE@XZ (Address: 0x7380108c)
??1exception@@UAE@XZ (Address: 0x73801090)
??1type_info@@UAE@XZ (Address: 0x738010dc)
?what@exception@@UBEPBDXZ (Address: 0x73801088)
ceil (Address: 0x7380104c)
floor (Address: 0x7380105c)
free (Address: 0x73801044)
isalpha (Address: 0x73801034)
isdigit (Address: 0x738010b8)
iswalnum (Address: 0x738010b4)
iswalpha (Address: 0x7380102c)
iswcntrl (Address: 0x738010b0)
iswprint (Address: 0x738010a8)
iswspace (Address: 0x738010ac)
malloc (Address: 0x7380107c)
memcpy (Address: 0x73801000)
memcpy_s (Address: 0x73801098)
memmove (Address: 0x73801014)
memmove_s (Address: 0x7380109c)
memset (Address: 0x73801004)
qsort (Address: 0x73801078)
realloc (Address: 0x73801048)
swscanf_s (Address: 0x73801054)
wcschr (Address: 0x7380100c)
wcsncmp (Address: 0x73801020)
wcspbrk (Address: 0x73801038)
wcsrchr (Address: 0x73801024)
wcsstr (Address: 0x73801010)
wcstok_s (Address: 0x73801050)
wcstol (Address: 0x73801040)

ntdll.dll

(Address: 0x73801b5c)
EtwEventEnabled (Address: 0x73801afc)
EtwEventRegister (Address: 0x73801b30)
EtwEventUnregister (Address: 0x73801b34)
EtwEventWrite (Address: 0x73801ad0)
EtwGetTraceEnableFlags (Address: 0x73801b1c)
EtwGetTraceEnableLevel (Address: 0x73801b20)
EtwGetTraceLoggerHandle (Address: 0x73801b24)
EtwLogTraceEvent (Address: 0x73801ba8)
EtwRegisterTraceGuidsW (Address: 0x73801b28)
EtwTraceMessage (Address: 0x73801af8)
EtwUnregisterTraceGuids (Address: 0x73801b2c)
NtClose (Address: 0x73801ac8)
NtCreateFile (Address: 0x73801ac4)
NtFsControlFile (Address: 0x73801acc)
NtOpenFile (Address: 0x73801ab0)
NtOpenProcessToken (Address: 0x73801b14)
NtOpenThreadToken (Address: 0x73801bac)
NtQueryDirectoryFile (Address: 0x73801b6c)
NtQueryEaFile (Address: 0x73801b8c)
NtQueryInformationFile (Address: 0x73801abc)
NtQueryInformationProcess (Address: 0x73801b0c)
NtQueryInformationThread (Address: 0x73801b4c)
NtQueryInformationToken (Address: 0x73801b10)
NtQueryLicenseValue (Address: 0x73801af0)
NtQueryObject (Address: 0x73801ba4)
NtQuerySecurityObject (Address: 0x73801b88)
NtQuerySystemInformation (Address: 0x73801b38)
NtQueryVolumeInformationFile (Address: 0x73801b44)
NtSetEaFile (Address: 0x73801b84)
NtSetInformationFile (Address: 0x73801aac)
NtSetInformationThread (Address: 0x73801b48)
NtSetInformationToken (Address: 0x73801b18)
NtSetSecurityObject (Address: 0x73801b80)
RtlCreateEnvironment (Address: 0x73801aec)
RtlCreateUnicodeString (Address: 0x73801b64)
RtlDestroyEnvironment (Address: 0x73801ae4)
RtlDllShutdownInProgress (Address: 0x73801b08)
RtlDosPathNameToNtPathName_U (Address: 0x73801b9c)
RtlDosPathNameToNtPathName_U_WithStatus (Address: 0x73801aa0)
RtlDosPathNameToRelativeNtPathName_U (Address: 0x73801b7c)
RtlDowncaseUnicodeString (Address: 0x73801b90)
RtlExpandEnvironmentStrings_U (Address: 0x73801ad4)
RtlFreeAnsiString (Address: 0x73801b70)
RtlFreeHeap (Address: 0x73801aa4)
RtlFreeUnicodeString (Address: 0x73801b60)
RtlGetLastNtStatus (Address: 0x73801ab8)
RtlGetNtProductType (Address: 0x73801b3c)
RtlInitString (Address: 0x73801b98)
RtlInitUnicodeString (Address: 0x73801ab4)
RtlInitUnicodeStringEx (Address: 0x73801ad8)
RtlMapGenericMask (Address: 0x73801b04)
RtlNtStatusToDosError (Address: 0x73801ac0)
RtlOemStringToUnicodeString (Address: 0x73801b94)
RtlPrefixString (Address: 0x73801bb0)
RtlQueryEnvironmentVariable_U (Address: 0x73801ae0)
RtlRandomEx (Address: 0x73801b68)
RtlReleaseRelativeName (Address: 0x73801b78)
RtlSetCurrentEnvironment (Address: 0x73801ae8)
RtlSetEnvironmentVariable (Address: 0x73801adc)
RtlUnicodeStringToAnsiString (Address: 0x73801b74)
RtlUnicodeStringToOemString (Address: 0x73801aa8)
ShipAssert (Address: 0x73801ba0)
wcscat_s (Address: 0x73801b58)
wcsncpy_s (Address: 0x73801b54)
WinSqmAddToStream (Address: 0x73801b00)
WinSqmIncrementDWORD (Address: 0x73801af4)
WinSqmIsOptedIn (Address: 0x73801b40)
WinSqmSetDWORD (Address: 0x73801b50)

SHLWAPI.dll

(Address: 0x738019e4)
(Address: 0x73801a04)
(Address: 0x73801a10)
(Address: 0x73801a14)
(Address: 0x73801a18)
(Address: 0x73801a38)
(Address: 0x73801a3c)
(Address: 0x73801a48)
(Address: 0x73801a54)
(Address: 0x73801a5c)
(Address: 0x73801a60)
(Address: 0x73801a74)
(Address: 0x73801a7c)
(Address: 0x73801a84)
(Address: 0x73801a88)
(Address: 0x73801a8c)
(Address: 0x73801a94)
(Address: 0x73801a98)
(Address: 0x73801614)
(Address: 0x73801618)
(Address: 0x7380161c)
(Address: 0x73801620)
(Address: 0x73801628)
(Address: 0x7380162c)
(Address: 0x73801630)
(Address: 0x73801634)
(Address: 0x73801638)
(Address: 0x7380163c)
(Address: 0x73801640)
(Address: 0x73801644)
(Address: 0x7380165c)
(Address: 0x73801660)
(Address: 0x73801664)
(Address: 0x73801668)
(Address: 0x7380166c)
(Address: 0x73801670)
(Address: 0x73801674)
(Address: 0x73801678)
(Address: 0x7380167c)
(Address: 0x73801680)
(Address: 0x73801684)
(Address: 0x73801688)
(Address: 0x73801690)
(Address: 0x73801694)
(Address: 0x73801698)
(Address: 0x7380169c)
(Address: 0x738016a0)
(Address: 0x738016a4)
(Address: 0x738016a8)
(Address: 0x738016ac)
(Address: 0x738016b0)
(Address: 0x738016bc)
(Address: 0x738016c0)
(Address: 0x738016c4)
(Address: 0x738016c8)
(Address: 0x738016cc)
(Address: 0x738016d4)
(Address: 0x738016d8)
(Address: 0x738016dc)
(Address: 0x738016e0)
(Address: 0x738016ec)
(Address: 0x738016f0)
(Address: 0x738016f4)
(Address: 0x738016f8)
(Address: 0x738016fc)
(Address: 0x73801700)
(Address: 0x73801708)
(Address: 0x73801714)
(Address: 0x73801718)
(Address: 0x7380171c)
(Address: 0x73801720)
(Address: 0x73801724)
(Address: 0x7380172c)
(Address: 0x73801730)
(Address: 0x73801734)
(Address: 0x73801738)
(Address: 0x7380173c)
(Address: 0x73801744)
(Address: 0x73801748)
(Address: 0x7380174c)
(Address: 0x73801750)
(Address: 0x73801754)
(Address: 0x73801758)
(Address: 0x7380175c)
(Address: 0x7380176c)
(Address: 0x73801770)
(Address: 0x73801784)
(Address: 0x73801788)
(Address: 0x7380178c)
(Address: 0x73801790)
(Address: 0x73801794)
(Address: 0x7380179c)
(Address: 0x738017a0)
(Address: 0x738017a4)
(Address: 0x738017ac)
(Address: 0x738017b0)
(Address: 0x738017b4)
(Address: 0x738017b8)
(Address: 0x738017c0)
(Address: 0x738017c4)
(Address: 0x738017d0)
(Address: 0x738017d4)
(Address: 0x738017d8)
(Address: 0x738017dc)
(Address: 0x738017e0)
(Address: 0x73801554)
(Address: 0x73801558)
(Address: 0x7380155c)
(Address: 0x73801560)
(Address: 0x73801568)
(Address: 0x7380157c)
(Address: 0x73801588)
(Address: 0x73801590)
(Address: 0x7380159c)
(Address: 0x738015a8)
(Address: 0x738015ac)
(Address: 0x738015b4)
(Address: 0x738015b8)
(Address: 0x738015bc)
(Address: 0x738015c4)
(Address: 0x738015c8)
(Address: 0x738015cc)
(Address: 0x738015d0)
(Address: 0x738015d4)
(Address: 0x738015d8)
(Address: 0x738015dc)
(Address: 0x738015e8)
(Address: 0x738015ec)
(Address: 0x738015f0)
(Address: 0x738015f4)
(Address: 0x738015f8)
(Address: 0x738015fc)
(Address: 0x73801600)
(Address: 0x738017f4)
(Address: 0x73801800)
(Address: 0x73801804)
(Address: 0x73801808)
(Address: 0x7380180c)
(Address: 0x73801810)
(Address: 0x73801820)
(Address: 0x73801828)
(Address: 0x73801830)
(Address: 0x7380183c)
(Address: 0x73801840)
(Address: 0x73801844)
(Address: 0x73801848)
(Address: 0x7380184c)
(Address: 0x73801854)
(Address: 0x73801868)
(Address: 0x7380186c)
(Address: 0x73801878)
(Address: 0x7380187c)
(Address: 0x73801880)
(Address: 0x73801884)
(Address: 0x73801888)
(Address: 0x7380188c)
(Address: 0x73801890)
(Address: 0x73801894)
(Address: 0x738018b4)
(Address: 0x738018b8)
(Address: 0x738018bc)
(Address: 0x738018c0)
(Address: 0x738018c8)
(Address: 0x738018cc)
(Address: 0x738018d0)
(Address: 0x738018d8)
(Address: 0x738018dc)
(Address: 0x738018e0)
(Address: 0x738018e4)
(Address: 0x738018e8)
(Address: 0x738018f4)
(Address: 0x738018f8)
(Address: 0x738018fc)
(Address: 0x73801900)
(Address: 0x73801904)
(Address: 0x7380191c)
(Address: 0x73801920)
(Address: 0x73801924)
(Address: 0x73801928)
(Address: 0x73801930)
(Address: 0x73801934)
(Address: 0x73801938)
(Address: 0x7380194c)
(Address: 0x73801950)
(Address: 0x73801954)
(Address: 0x73801998)
(Address: 0x738019a4)
(Address: 0x738019ac)
(Address: 0x738019b0)
(Address: 0x738019b8)
(Address: 0x738019bc)
(Address: 0x738019cc)
(Address: 0x738019d0)
(Address: 0x738019d4)
(Address: 0x738019d8)
(Address: 0x738019dc)
(Address: 0x738019e0)
AssocCreate (Address: 0x73801a08)
AssocGetPerceivedType (Address: 0x738019a0)
AssocIsDangerous (Address: 0x738017bc)
AssocQueryKeyW (Address: 0x738018c4)
AssocQueryStringByKeyW (Address: 0x73801624)
AssocQueryStringW (Address: 0x738019fc)
ColorHLSToRGB (Address: 0x73801870)
ColorRGBToHLS (Address: 0x73801874)
GetMenuPosFromID (Address: 0x73801564)
HashData (Address: 0x738016e8)
IntlStrEqWorkerW (Address: 0x7380181c)
PathAddBackslashW (Address: 0x738018a4)
PathAddExtensionW (Address: 0x73801764)
PathAppendA (Address: 0x73801580)
PathAppendW (Address: 0x73801a20)
PathBuildRootA (Address: 0x738017f8)
PathBuildRootW (Address: 0x738019f0)
PathCanonicalizeW (Address: 0x73801834)
PathCombineW (Address: 0x738015e0)
PathCommonPrefixW (Address: 0x73801814)
PathCompactPathExW (Address: 0x73801648)
PathCompactPathW (Address: 0x738019f8)
PathCreateFromUrlW (Address: 0x738016b4)
PathFileExistsW (Address: 0x7380193c)
PathFindExtensionW (Address: 0x73801a70)
PathFindFileNameW (Address: 0x73801a40)
PathFindNextComponentW (Address: 0x73801584)
PathFindOnPathW (Address: 0x738015a4)
PathFindSuffixArrayW (Address: 0x7380164c)
PathGetArgsA (Address: 0x73801704)
PathGetArgsW (Address: 0x73801914)
PathGetCharTypeW (Address: 0x73801594)
PathGetDriveNumberA (Address: 0x738017fc)
PathGetDriveNumberW (Address: 0x73801944)
PathIsContentTypeW (Address: 0x73801768)
PathIsDirectoryA (Address: 0x738017ec)
PathIsDirectoryEmptyW (Address: 0x73801798)
PathIsDirectoryW (Address: 0x73801608)
PathIsFileSpecW (Address: 0x73801550)
PathIsNetworkPathW (Address: 0x73801908)
PathIsPrefixW (Address: 0x73801740)
PathIsRelativeW (Address: 0x738018ec)
PathIsRootA (Address: 0x73801578)
PathIsRootW (Address: 0x7380190c)
PathIsSameRootW (Address: 0x73801650)
PathIsUNCServerShareW (Address: 0x73801a6c)
PathIsUNCServerW (Address: 0x73801a68)
PathIsUNCW (Address: 0x73801a24)
PathIsURLW (Address: 0x738015a0)
PathMakePrettyW (Address: 0x73801570)
PathMakeSystemFolderW (Address: 0x73801a4c)
PathMatchSpecExW (Address: 0x73801654)
PathMatchSpecW (Address: 0x738019c0)
PathParseIconLocationW (Address: 0x73801a50)
PathQuoteSpacesA (Address: 0x73801a28)
PathQuoteSpacesW (Address: 0x73801a34)
PathRelativePathToW (Address: 0x7380170c)
PathRemoveArgsW (Address: 0x73801728)
PathRemoveBackslashW (Address: 0x73801598)
PathRemoveBlanksW (Address: 0x738018f0)
PathRemoveExtensionW (Address: 0x73801a44)
PathRemoveFileSpecA (Address: 0x73801574)
PathRemoveFileSpecW (Address: 0x73801940)
PathRenameExtensionW (Address: 0x738017f0)
PathSetDlgItemPathW (Address: 0x73801710)
PathSkipRootW (Address: 0x738016d0)
PathStripPathW (Address: 0x7380199c)
PathStripToRootW (Address: 0x7380158c)
PathUnExpandEnvStringsW (Address: 0x73801a58)
PathUnquoteSpacesW (Address: 0x73801a64)
SHAutoComplete (Address: 0x73801a30)
SHCreateStreamOnFileEx (Address: 0x738016e4)
SHCreateStreamOnFileW (Address: 0x738015b0)
SHDeleteKeyA (Address: 0x738015e4)
SHDeleteKeyW (Address: 0x7380192c)
SHDeleteValueW (Address: 0x738019ec)
SHEnumKeyExW (Address: 0x738019c8)
SHEnumValueW (Address: 0x73801948)
SHGetThreadRef (Address: 0x7380156c)
SHGetValueW (Address: 0x738019f4)
SHOpenRegStream2W (Address: 0x738015c0)
SHQueryValueExW (Address: 0x738019c4)
SHRegCloseUSKey (Address: 0x73801778)
SHRegEnumUSKeyW (Address: 0x7380177c)
SHRegGetBoolUSValueW (Address: 0x738018d4)
SHRegGetPathW (Address: 0x73801818)
SHRegGetUSValueW (Address: 0x73801858)
SHRegGetValueW (Address: 0x73801a80)
SHRegOpenUSKeyA (Address: 0x738019b4)
SHRegOpenUSKeyW (Address: 0x73801780)
SHRegQueryUSValueW (Address: 0x73801774)
SHRegSetPathW (Address: 0x73801838)
SHSetValueW (Address: 0x738019e8)
SHSkipJunction (Address: 0x738017e8)
SHStrDupA (Address: 0x738017e4)
SHStrDupW (Address: 0x73801910)
StrChrA (Address: 0x73801994)
StrChrIA (Address: 0x73801990)
StrChrIW (Address: 0x7380198c)
StrChrW (Address: 0x73801988)
StrCmpIW (Address: 0x73801a0c)
StrCmpLogicalW (Address: 0x73801a90)
StrCmpNA (Address: 0x73801984)
StrCmpNIA (Address: 0x73801980)
StrCmpNIW (Address: 0x7380197c)
StrCmpNW (Address: 0x73801978)
StrCmpW (Address: 0x73801a00)
StrCSpnW (Address: 0x738019a8)
StrDupA (Address: 0x73801658)
StrDupW (Address: 0x73801a1c)
StrFormatByteSizeEx (Address: 0x73801860)
StrFormatByteSizeW (Address: 0x73801958)
StrPBrkW (Address: 0x738017cc)
StrRChrA (Address: 0x73801974)
StrRChrIA (Address: 0x73801970)
StrRChrIW (Address: 0x7380196c)
StrRChrW (Address: 0x73801968)
StrRetToBSTR (Address: 0x73801850)
StrRetToBufW (Address: 0x73801918)
StrRetToStrW (Address: 0x7380168c)
StrRStrIA (Address: 0x73801964)
StrRStrIW (Address: 0x73801960)
StrSpnW (Address: 0x738017c8)
StrStrA (Address: 0x7380195c)
StrStrIA (Address: 0x738018a0)
StrStrIW (Address: 0x7380189c)
StrStrNIW (Address: 0x7380185c)
StrStrW (Address: 0x73801898)
StrToIntA (Address: 0x7380182c)
StrToIntExW (Address: 0x73801610)
StrToIntW (Address: 0x73801a78)
StrTrimA (Address: 0x73801a2c)
StrTrimW (Address: 0x7380154c)
UrlApplySchemeW (Address: 0x7380160c)
UrlCanonicalizeW (Address: 0x73801760)
UrlCompareW (Address: 0x73801824)
UrlCreateFromPathW (Address: 0x738018b0)
UrlEscapeW (Address: 0x73801864)
UrlGetLocationW (Address: 0x738016b8)
UrlGetPartW (Address: 0x73801604)
UrlIsW (Address: 0x738018a8)
UrlUnescapeA (Address: 0x738017a8)
UrlUnescapeW (Address: 0x738018ac)

USER32.dll

(Address: 0x73801db8)
ActivateKeyboardLayout (Address: 0x73801e9c)
AdjustWindowRect (Address: 0x73801bb8)
AdjustWindowRectEx (Address: 0x73801e14)
AllowSetForegroundWindow (Address: 0x73801d78)
AnimateWindow (Address: 0x73801f40)
AppendMenuW (Address: 0x73801dd8)
AttachThreadInput (Address: 0x73801e60)
BeginDeferWindowPos (Address: 0x73801d84)
BeginPaint (Address: 0x73801fe8)
BringWindowToTop (Address: 0x73801e68)
BroadcastSystemMessageW (Address: 0x73801d48)
CallNextHookEx (Address: 0x73801e30)
CallWindowProcW (Address: 0x73801e34)
ChangeClipboardChain (Address: 0x73801dcc)
ChangeWindowMessageFilterEx (Address: 0x73801c68)
CharLowerBuffW (Address: 0x73801eac)
CharLowerW (Address: 0x73801c98)
CharNextA (Address: 0x73801bc4)
CharNextW (Address: 0x73801bc0)
CharPrevA (Address: 0x73801c40)
CharPrevW (Address: 0x73801cdc)
CharToOemBuffA (Address: 0x73801bd0)
CharUpperBuffW (Address: 0x73801ce0)
CharUpperW (Address: 0x73801c0c)
CheckDlgButton (Address: 0x73801fb8)
CheckMenuItem (Address: 0x73801dc4)
CheckMenuRadioItem (Address: 0x73801dc8)
CheckRadioButton (Address: 0x73801fd8)
ChildWindowFromPoint (Address: 0x73801f54)
ClientToScreen (Address: 0x73801ec0)
CloseClipboard (Address: 0x73801df8)
CloseDesktop (Address: 0x73801dac)
CloseGestureInfoHandle (Address: 0x73801de4)
CopyAcceleratorTableW (Address: 0x73801e64)
CopyIcon (Address: 0x73801cfc)
CopyImage (Address: 0x73801e10)
CopyRect (Address: 0x73801be4)
CountClipboardFormats (Address: 0x73801ccc)
CreateAcceleratorTableW (Address: 0x73801ecc)
CreateDialogParamW (Address: 0x73801f5c)
CreateIconIndirect (Address: 0x73802040)
CreateMenu (Address: 0x73801dd0)
CreatePopupMenu (Address: 0x73801c2c)
CreateWindowExW (Address: 0x73801e5c)
DdeCreateDataHandle (Address: 0x73801ef4)
DdeCreateStringHandleW (Address: 0x73801f10)
DdeDisconnect (Address: 0x73801f04)
DdeFreeStringHandle (Address: 0x73801f0c)
DdeGetData (Address: 0x73801f00)
DdeGetLastError (Address: 0x73801efc)
DdeInitializeW (Address: 0x73801f18)
DdeNameService (Address: 0x73801ef8)
DdeQueryConvInfo (Address: 0x73801ef0)
DdeQueryStringW (Address: 0x73801f14)
DdeUninitialize (Address: 0x73801f08)
DeferWindowPos (Address: 0x73801d7c)
DefWindowProcW (Address: 0x7380201c)
DeleteMenu (Address: 0x73801c30)
DeregisterShellHookWindow (Address: 0x73801d60)
DestroyAcceleratorTable (Address: 0x73801de0)
DestroyIcon (Address: 0x73802038)
DestroyMenu (Address: 0x73801c28)
DestroyWindow (Address: 0x73801c3c)
DialogBoxParamW (Address: 0x73801e0c)
DispatchMessageW (Address: 0x73801d8c)
DrawEdge (Address: 0x73801bf4)
DrawFocusRect (Address: 0x73802014)
DrawFrameControl (Address: 0x73801bf0)
DrawIcon (Address: 0x73801bcc)
DrawIconEx (Address: 0x73801d44)
DrawTextW (Address: 0x73801fdc)
EmptyClipboard (Address: 0x73801f28)
EnableMenuItem (Address: 0x73801ca4)
EnableWindow (Address: 0x73801fac)
EndDeferWindowPos (Address: 0x73801d80)
EndDialog (Address: 0x73801fc0)
EndMenu (Address: 0x73801ddc)
EndPaint (Address: 0x73802000)
EnumChildWindows (Address: 0x73801e08)
EnumDisplayDevicesW (Address: 0x73801d00)
EnumDisplayMonitors (Address: 0x73801ed0)
EnumDisplaySettingsW (Address: 0x73801fc4)
EnumPropsExW (Address: 0x73801df4)
EnumWindows (Address: 0x73801cf0)
EqualRect (Address: 0x73801d28)
ExitWindowsEx (Address: 0x73801d20)
FillRect (Address: 0x73801ffc)
FindWindowA (Address: 0x73801f3c)
FindWindowExW (Address: 0x73801e54)
FindWindowW (Address: 0x73801c18)
FrameRect (Address: 0x73801ff4)
FreeDDElParam (Address: 0x73801e6c)
GetAncestor (Address: 0x73801c10)
GetAsyncKeyState (Address: 0x73801d24)
GetCapture (Address: 0x73801e84)
GetClassInfoExW (Address: 0x73801ebc)
GetClassInfoW (Address: 0x73801d58)
GetClassLongW (Address: 0x73801eec)
GetClassNameW (Address: 0x73801c80)
GetClassWord (Address: 0x73801e50)
GetClientRect (Address: 0x73801fec)
GetClipboardData (Address: 0x73801e00)
GetClipboardOwner (Address: 0x73801cac)
GetCursor (Address: 0x73801f48)
GetCursorPos (Address: 0x73801d14)
GetDC (Address: 0x73802008)
GetDesktopWindow (Address: 0x73801d1c)
GetDialogBaseUnits (Address: 0x73801e48)
GetDisplayConfigBufferSizes (Address: 0x73801f64)
GetDlgCtrlID (Address: 0x73801fcc)
GetDlgItem (Address: 0x73802044)
GetDlgItemInt (Address: 0x73801fd0)
GetDlgItemTextA (Address: 0x73801c04)
GetDlgItemTextW (Address: 0x73801f94)
GetDoubleClickTime (Address: 0x73801d04)
GetFocus (Address: 0x73801fbc)
GetForegroundWindow (Address: 0x73801c64)
GetGestureInfo (Address: 0x73801de8)
GetIconInfo (Address: 0x7380203c)
GetKeyboardLayout (Address: 0x73801e58)
GetKeyState (Address: 0x73802020)
GetLastActivePopup (Address: 0x73801cf8)
GetLastInputInfo (Address: 0x73801ea4)
GetMenuDefaultItem (Address: 0x73801cb8)
GetMenuInfo (Address: 0x73801f2c)
GetMenuItemCount (Address: 0x73801c5c)
GetMenuItemID (Address: 0x73801cd0)
GetMenuItemInfoW (Address: 0x73801c54)
GetMenuState (Address: 0x73801cb4)
GetMenuStringW (Address: 0x73801cd8)
GetMessagePos (Address: 0x73801c44)
GetMessageTime (Address: 0x73801ec8)
GetMessageW (Address: 0x73801e18)
GetMonitorInfoW (Address: 0x73801f74)
GetNextDlgTabItem (Address: 0x73802024)
GetParent (Address: 0x73801fe4)
GetProcessDefaultLayout (Address: 0x73801f34)
GetProcessWindowStation (Address: 0x73801c78)
GetPropW (Address: 0x73801cec)
GetScrollInfo (Address: 0x73801d0c)
GetShellWindow (Address: 0x73801ca0)
GetSubMenu (Address: 0x73801c88)
GetSysColor (Address: 0x73801f98)
GetSysColorBrush (Address: 0x73801be0)
GetSystemMenu (Address: 0x73801e7c)
GetSystemMetrics (Address: 0x7380204c)
GetTaskmanWindow (Address: 0x73801d64)
GetThreadDesktop (Address: 0x73801c74)
GetUpdateRect (Address: 0x73801e94)
GetUserObjectInformationW (Address: 0x73801c70)
GetWindow (Address: 0x73801c4c)
GetWindowDC (Address: 0x73801e98)
GetWindowLongW (Address: 0x73801fe0)
GetWindowPlacement (Address: 0x73801d5c)
GetWindowRect (Address: 0x7380200c)
GetWindowTextLengthW (Address: 0x73801d54)
GetWindowTextW (Address: 0x73801f84)
GetWindowThreadProcessId (Address: 0x73801c48)
GrayStringW (Address: 0x73801be8)
HideCaret (Address: 0x73801f44)
InflateRect (Address: 0x73801ff8)
InsertMenuItemW (Address: 0x73801c50)
InsertMenuW (Address: 0x73801c58)
IntersectRect (Address: 0x73801d2c)
InvalidateRect (Address: 0x73801fc8)
IsCharAlphaW (Address: 0x73801c08)
IsChild (Address: 0x73801f7c)
IsDialogMessageW (Address: 0x73801e80)
IsDlgButtonChecked (Address: 0x73801fb0)
IsIconic (Address: 0x73801cf4)
IsMenu (Address: 0x73801cc0)
IsProcessDPIAware (Address: 0x73801d40)
IsRectEmpty (Address: 0x73801eb8)
IsSETEnabled (Address: 0x73801d34)
IsWindow (Address: 0x73801f9c)
IsWindowEnabled (Address: 0x73801bec)
IsWindowUnicode (Address: 0x73801e44)
IsWindowVisible (Address: 0x73801f80)
IsWinEventHookInstalled (Address: 0x73801f38)
KillTimer (Address: 0x73801c34)
LoadAcceleratorsW (Address: 0x73801dd4)
LoadBitmapW (Address: 0x73801f78)
LoadCursorW (Address: 0x73801fa4)
LoadIconW (Address: 0x73802030)
LoadImageW (Address: 0x73801c94)
LoadMenuW (Address: 0x73801c8c)
LockSetForegroundWindow (Address: 0x73801f50)
LockWindowUpdate (Address: 0x73801ee8)
LookupIconIdFromDirectory (Address: 0x7380202c)
MapDialogRect (Address: 0x73801d4c)
MapVirtualKeyW (Address: 0x73801bfc)
MapWindowPoints (Address: 0x73801f90)
MessageBeep (Address: 0x73801cd4)
MessageBoxIndirectW (Address: 0x73801f60)
MessageBoxW (Address: 0x73801d74)
ModifyMenuW (Address: 0x73801cb0)
MonitorFromPoint (Address: 0x73801c7c)
MonitorFromRect (Address: 0x73801f70)
MonitorFromWindow (Address: 0x73801d30)
MoveWindow (Address: 0x73801f68)
MsgWaitForMultipleObjects (Address: 0x73801d9c)
MsgWaitForMultipleObjectsEx (Address: 0x73801f30)
NotifyWinEvent (Address: 0x73801db4)
OemToCharBuffA (Address: 0x73801bd4)
OffsetRect (Address: 0x73801bf8)
OpenClipboard (Address: 0x73801e04)
OpenInputDesktop (Address: 0x73801db0)
PackDDElParam (Address: 0x73801e74)
PaintDesktop (Address: 0x73801ee0)
PaintMonitor (Address: 0x73801edc)
PeekMessageW (Address: 0x73801d94)
PostMessageW (Address: 0x73801bd8)
PostQuitMessage (Address: 0x73801da8)
PostThreadMessageW (Address: 0x73801e78)
PrivateExtractIconsW (Address: 0x73802034)
PtInRect (Address: 0x73801cc8)
RedrawWindow (Address: 0x73801d3c)
RegisterClassExW (Address: 0x73801d18)
RegisterClassW (Address: 0x73801fa8)
RegisterClipboardFormatW (Address: 0x73801c9c)
RegisterDeviceNotificationW (Address: 0x73801da4)
RegisterShellHookWindow (Address: 0x73801d68)
RegisterWindowMessageA (Address: 0x73801e20)
RegisterWindowMessageW (Address: 0x73801c6c)
ReleaseCapture (Address: 0x73801e90)
ReleaseDC (Address: 0x73802018)
RemoveMenu (Address: 0x73801c84)
RemovePropW (Address: 0x73801ce8)
ScreenToClient (Address: 0x73802010)
SendDlgItemMessageW (Address: 0x73801ff0)
SendMessageCallbackW (Address: 0x73801da0)
SendMessageTimeoutW (Address: 0x73801ca8)
SendMessageW (Address: 0x73802048)
SendNotifyMessageW (Address: 0x73801d88)
SetActiveWindow (Address: 0x73801d50)
SetCapture (Address: 0x73801e8c)
SetClipboardData (Address: 0x73801dfc)
SetClipboardViewer (Address: 0x73801dc0)
SetCursor (Address: 0x73801bc8)
SetDlgItemInt (Address: 0x73801fd4)
SetDlgItemTextA (Address: 0x73801c00)
SetDlgItemTextW (Address: 0x73801f88)
SetFocus (Address: 0x73802004)
SetForegroundWindow (Address: 0x73801c14)
SetGestureConfig (Address: 0x73801dec)
SetMenu (Address: 0x73801f58)
SetMenuDefaultItem (Address: 0x73801cc4)
SetMenuInfo (Address: 0x73801ea8)
SetMenuItemInfoW (Address: 0x73801cbc)
SetParent (Address: 0x73801eb4)
SetProcessDPIAware (Address: 0x73801c1c)
SetPropW (Address: 0x73801ce4)
SetRect (Address: 0x73801bbc)
SetRectEmpty (Address: 0x73801ea0)
SetScrollInfo (Address: 0x73801e2c)
SetScrollPos (Address: 0x73801e40)
SetShellWindowEx (Address: 0x73801ed8)
SetTaskmanWindow (Address: 0x73801d6c)
SetTimer (Address: 0x73801c38)
SetWindowLongW (Address: 0x73802028)
SetWindowPos (Address: 0x73801f6c)
SetWindowRgn (Address: 0x73801e24)
SetWindowsHookExW (Address: 0x73801e3c)
SetWindowTextW (Address: 0x73801f8c)
SetWinEventHook (Address: 0x73801f24)
ShowCaret (Address: 0x73801f4c)
ShowScrollBar (Address: 0x73801e28)
ShowWindow (Address: 0x73801fb4)
ShutdownBlockReasonCreate (Address: 0x73801c24)
ShutdownBlockReasonDestroy (Address: 0x73801c20)
SubtractRect (Address: 0x73801ed4)
SwitchToThisWindow (Address: 0x73801eb0)
SystemParametersInfoA (Address: 0x73801c90)
SystemParametersInfoW (Address: 0x73801d38)
TabbedTextOutW (Address: 0x73801fa0)
TrackMouseEvent (Address: 0x73801e88)
TrackPopupMenu (Address: 0x73801c60)
TrackPopupMenuEx (Address: 0x73801e1c)
TranslateAcceleratorW (Address: 0x73801dbc)
TranslateMessage (Address: 0x73801d90)
UnhookWindowsHookEx (Address: 0x73801e38)
UnhookWinEvent (Address: 0x73801f20)
UnionRect (Address: 0x73801d08)
UnpackDDElParam (Address: 0x73801e70)
UnregisterClassW (Address: 0x73801bdc)
UnregisterDeviceNotification (Address: 0x73801d98)
UpdateLayeredWindow (Address: 0x73801d10)
UpdateWindow (Address: 0x73801df0)
WaitForInputIdle (Address: 0x73801d70)
WaitMessage (Address: 0x73801ee4)
WindowFromPoint (Address: 0x73801ec4)
WinHelpW (Address: 0x73801e4c)
wsprintfW (Address: 0x73801f1c)