shell32.dll

Description: Windows Shell Common Dll

Version: 10.0.26100.8737

Architecture: 64-bit

Operating System: Windows NT

SHA256: 56a16478be9e6bdd62833fa9192644bb

File Size: 7.6 MB

Uploaded At: July 1, 2026, 9:45 a.m.

Views: 34

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess, WriteProcessMemory

Exported Functions

SHChangeNotifyRegister (Ordinal: 2, Address: 0x18bee0)
SHDefExtractIconA (Ordinal: 3, Address: 0x200ca0)
SHChangeNotifyDeregister (Ordinal: 4, Address: 0x1981f0)
(Ordinal: 5, Address: 0x715e7f)
SHDefExtractIconW (Ordinal: 6, Address: 0x200cc0)
(Ordinal: 7, Address: 0x7160cc)
(Ordinal: 8, Address: 0x7160da)
PifMgr_OpenProperties (Ordinal: 9, Address: 0x196a40)
PifMgr_GetProperties (Ordinal: 10, Address: 0x196a40)
PifMgr_SetProperties (Ordinal: 11, Address: 0x196a40)
(Ordinal: 12, Address: 0x2eb6c0)
PifMgr_CloseProperties (Ordinal: 13, Address: 0x204d10)
SHStartNetConnectionDialogW (Ordinal: 14, Address: 0x2e0ee0)
(Ordinal: 15, Address: 0x200260)
ILFindLastID (Ordinal: 16, Address: 0x200220)
ILRemoveLastID (Ordinal: 17, Address: 0x200340)
ILClone (Ordinal: 18, Address: 0x200160)
ILCloneFirst (Ordinal: 19, Address: 0x200180)
(Ordinal: 20, Address: 0x200160)
ILIsEqual (Ordinal: 21, Address: 0x2002e0)
DAD_DragEnterEx2 (Ordinal: 22, Address: 0x251d70)
ILIsParent (Ordinal: 23, Address: 0x200300)
ILFindChild (Ordinal: 24, Address: 0x200200)
ILCombine (Ordinal: 25, Address: 0x2001a0)
(Ordinal: 26, Address: 0x715d81)
ILSaveToStream (Ordinal: 27, Address: 0x200360)
SHILCreateFromPath (Ordinal: 28, Address: 0x2012c0)
(Ordinal: 29, Address: 0x200640)
(Ordinal: 30, Address: 0x715777)
(Ordinal: 31, Address: 0x7157b3)
(Ordinal: 32, Address: 0x71575d)
(Ordinal: 33, Address: 0x71596c)
(Ordinal: 34, Address: 0x7157ce)
(Ordinal: 35, Address: 0x200720)
(Ordinal: 36, Address: 0x200540)
(Ordinal: 37, Address: 0x71579e)
(Ordinal: 38, Address: 0x7159cb)
(Ordinal: 39, Address: 0x7158ad)
(Ordinal: 40, Address: 0x715865)
IsLFNDriveA (Ordinal: 41, Address: 0x200480)
IsLFNDriveW (Ordinal: 42, Address: 0x200460)
PathIsExe (Ordinal: 43, Address: 0x200620)
(Ordinal: 44, Address: 0x244f60)
(Ordinal: 45, Address: 0x200580)
(Ordinal: 46, Address: 0x7158f9)
PathMakeUniqueName (Ordinal: 47, Address: 0x2006e0)
(Ordinal: 48, Address: 0x7159af)
PathQualify (Ordinal: 49, Address: 0x200700)
(Ordinal: 50, Address: 0x7159e2)
PathResolve (Ordinal: 51, Address: 0x200740)
(Ordinal: 52, Address: 0x715800)
(Ordinal: 53, Address: 0x715db8)
(Ordinal: 54, Address: 0x2527d0)
(Ordinal: 55, Address: 0x71593b)
(Ordinal: 56, Address: 0x7159fb)
(Ordinal: 57, Address: 0x715815)
(Ordinal: 58, Address: 0x200520)
RestartDialog (Ordinal: 59, Address: 0x2527f0)
(Ordinal: 60, Address: 0x252770)
(Ordinal: 61, Address: 0x28e290)
PickIconDlg (Ordinal: 62, Address: 0x203e40)
GetFileNameFromBrowse (Ordinal: 63, Address: 0x28e240)
DriveType (Ordinal: 64, Address: 0x1f2dd0)
(Ordinal: 65, Address: 0x2003e0)
IsNetDrive (Ordinal: 66, Address: 0x2663c0)
Shell_MergeMenus (Ordinal: 67, Address: 0x201840)
SHGetSetSettings (Ordinal: 68, Address: 0x2011e0)
(Ordinal: 69, Address: 0x201060)
(Ordinal: 70, Address: 0x203250)
Shell_GetImageLists (Ordinal: 71, Address: 0x201820)
Shell_GetCachedImageIndex (Ordinal: 72, Address: 0x2017c0)
SHShellFolderView_Message (Ordinal: 73, Address: 0x2df390)
SHCreateStdEnumFmtEtc (Ordinal: 74, Address: 0x200c60)
PathYetAnotherMakeUniqueName (Ordinal: 75, Address: 0x200780)
(Ordinal: 76, Address: 0x1fff40)
SHMapPIDLToSystemImageListIndex (Ordinal: 77, Address: 0x2013e0)
(Ordinal: 78, Address: 0x715dfa)
(Ordinal: 79, Address: 0x7161cd)
SHOpenPropSheetW (Ordinal: 80, Address: 0x2eaaa0)
OpenAs_RunDLL (Ordinal: 81, Address: 0x199310)
(Ordinal: 82, Address: 0x715b48)
CIDLData_CreateFromIDArray (Ordinal: 83, Address: 0x597550)
(Ordinal: 84, Address: 0x71607b)
OpenRegStream (Ordinal: 85, Address: 0x200500)
(Ordinal: 86, Address: 0x716147)
(Ordinal: 87, Address: 0x716154)
SHDoDragDrop (Ordinal: 88, Address: 0x251f80)
SHCloneSpecialIDList (Ordinal: 89, Address: 0x2008c0)
SHFindFiles (Ordinal: 90, Address: 0x200da0)
(Ordinal: 91, Address: 0x200d80)
PathGetShortPath (Ordinal: 92, Address: 0x2005e0)
(Ordinal: 93, Address: 0x71843a)
(Ordinal: 94, Address: 0x2018e0)
(Ordinal: 95, Address: 0x201360)
(Ordinal: 96, Address: 0x7161b3)
(Ordinal: 97, Address: 0x196a40)
SHGetRealIDL (Ordinal: 98, Address: 0x2011a0)
(Ordinal: 99, Address: 0x201680)
SHRestricted (Ordinal: 100, Address: 0x2014e0)
(Ordinal: 101, Address: 0x715ca2)
SHCoCreateInstance (Ordinal: 102, Address: 0x71645d)
SignalFileOpen (Ordinal: 103, Address: 0x14f010)
(Ordinal: 104, Address: 0x715be4)
(Ordinal: 105, Address: 0x715c31)
(Ordinal: 106, Address: 0x715c57)
(Ordinal: 107, Address: 0x715c70)
(Ordinal: 108, Address: 0x715c89)
(Ordinal: 109, Address: 0x715cae)
(Ordinal: 110, Address: 0x715ba4)
(Ordinal: 111, Address: 0x715cd4)
(Ordinal: 112, Address: 0x715d07)
(Ordinal: 113, Address: 0x715bb0)
(Ordinal: 114, Address: 0x715bbd)
(Ordinal: 115, Address: 0x715b97)
(Ordinal: 116, Address: 0x715d21)
(Ordinal: 117, Address: 0x715bf0)
(Ordinal: 118, Address: 0x715c24)
IsLFNDrive (Ordinal: 119, Address: 0x200460)
(Ordinal: 120, Address: 0x715b7d)
(Ordinal: 121, Address: 0x715fb0)
(Ordinal: 122, Address: 0x715e4b)
(Ordinal: 123, Address: 0x715fca)
(Ordinal: 124, Address: 0x715b8a)
OpenAs_RunDLLA (Ordinal: 125, Address: 0x199310)
(Ordinal: 126, Address: 0x716110)
(Ordinal: 127, Address: 0x7161a5)
(Ordinal: 128, Address: 0x5f660)
DAD_AutoScroll (Ordinal: 129, Address: 0x1ffde0)
(Ordinal: 130, Address: 0x715b2e)
DAD_DragEnterEx (Ordinal: 131, Address: 0x1ffe00)
DAD_DragLeave (Ordinal: 132, Address: 0x251ea0)
OpenAs_RunDLLW (Ordinal: 133, Address: 0x20df70)
DAD_DragMove (Ordinal: 134, Address: 0x238e0)
PrepareDiscForBurnRunDllW (Ordinal: 135, Address: 0x2122c0)
DAD_SetDragImage (Ordinal: 136, Address: 0x1ffe20)
DAD_ShowDragImage (Ordinal: 137, Address: 0x1ffe40)
PrintersGetCommand_RunDLL (Ordinal: 138, Address: 0x21f650)
PrintersGetCommand_RunDLLA (Ordinal: 139, Address: 0x21f650)
(Ordinal: 140, Address: 0x715bfd)
(Ordinal: 141, Address: 0x715c0a)
(Ordinal: 142, Address: 0x715c17)
(Ordinal: 143, Address: 0x715c4a)
(Ordinal: 144, Address: 0x715c63)
(Ordinal: 145, Address: 0x7157e8)
(Ordinal: 146, Address: 0x715e3e)
SHCLSIDFromString (Ordinal: 147, Address: 0x2008a0)
(Ordinal: 148, Address: 0x7160e8)
SHFind_InitMenuPopup (Ordinal: 149, Address: 0x2e3a00)
PrintersGetCommand_RunDLLW (Ordinal: 150, Address: 0x21f740)
(Ordinal: 151, Address: 0x7160b2)
ILGetSize (Ordinal: 152, Address: 0x2002c0)
ILGetNext (Ordinal: 153, Address: 0x2002a0)
ILAppendID (Ordinal: 154, Address: 0x200140)
ILFree (Ordinal: 155, Address: 0x200240)
(Ordinal: 156, Address: 0x200240)
ILCreateFromPath (Ordinal: 157, Address: 0x2001c0)
(Ordinal: 158, Address: 0x715e15)
(Ordinal: 159, Address: 0x715842)
(Ordinal: 160, Address: 0x201400)
(Ordinal: 161, Address: 0x716161)
SHSimpleIDListFromPath (Ordinal: 162, Address: 0x2015c0)
(Ordinal: 163, Address: 0x7161c0)
Win32DeleteFile (Ordinal: 164, Address: 0x2018c0)
SHCreateDirectory (Ordinal: 165, Address: 0x2009a0)
(Ordinal: 166, Address: 0x715ac0)
SHAddFromPropSheetExtArray (Ordinal: 167, Address: 0x2a02b0)
SHCreatePropSheetExtArray (Ordinal: 168, Address: 0x2a0340)
SHDestroyPropSheetExtArray (Ordinal: 169, Address: 0x2a0530)
SHReplaceFromPropSheetExtArray (Ordinal: 170, Address: 0x2a0580)
PathCleanupSpec (Ordinal: 171, Address: 0x1f9000)
(Ordinal: 172, Address: 0x200b00)
SHValidateUNC (Ordinal: 173, Address: 0x201660)
SHCreateShellFolderViewEx (Ordinal: 174, Address: 0x2df2f0)
(Ordinal: 175, Address: 0x1586f0)
SHSetInstanceExplorer (Ordinal: 176, Address: 0x266550)
(Ordinal: 177, Address: 0x715b3b)
SHObjectProperties (Ordinal: 178, Address: 0x220a70)
SHGetNewLinkInfoA (Ordinal: 179, Address: 0x201080)
SHGetNewLinkInfoW (Ordinal: 180, Address: 0x2010a0)
(Ordinal: 181, Address: 0x298ec0)
ShellMessageBoxW (Ordinal: 182, Address: 0x7181c5)
ShellMessageBoxA (Ordinal: 183, Address: 0x71819b)
(Ordinal: 184, Address: 0x1ffc20)
(Ordinal: 185, Address: 0x716051)
(Ordinal: 186, Address: 0x200280)
(Ordinal: 187, Address: 0x715d73)
(Ordinal: 188, Address: 0x1872d0)
ILCreateFromPathA (Ordinal: 189, Address: 0x2001e0)
ILCreateFromPathW (Ordinal: 190, Address: 0x2001c0)
SHUpdateImageA (Ordinal: 191, Address: 0x2a0140)
SHUpdateImageW (Ordinal: 192, Address: 0x2a0160)
SHHandleUpdateImage (Ordinal: 193, Address: 0x1a5880)
(Ordinal: 194, Address: 0x2a0350)
SHFree (Ordinal: 195, Address: 0x200de0)
SHAlloc (Ordinal: 196, Address: 0x2007e0)
(Ordinal: 197, Address: 0x716044)
(Ordinal: 198, Address: 0x715e58)
RealShellExecuteA (Ordinal: 199, Address: 0x1ffb60)
(Ordinal: 200, Address: 0x221f0)
(Ordinal: 201, Address: 0x4aa0f0)
(Ordinal: 202, Address: 0x715b55)
(Ordinal: 203, Address: 0x1ffc00)
(Ordinal: 204, Address: 0x201860)
(Ordinal: 205, Address: 0x220100)
(Ordinal: 206, Address: 0x4aa0e0)
RealShellExecuteExA (Ordinal: 207, Address: 0x1ffb80)
RealShellExecuteExW (Ordinal: 208, Address: 0x1ffba0)
(Ordinal: 209, Address: 0x200380)
(Ordinal: 210, Address: 0x2004c0)
(Ordinal: 211, Address: 0x220320)
(Ordinal: 212, Address: 0x21ffa0)
(Ordinal: 213, Address: 0x220340)
(Ordinal: 214, Address: 0x220470)
(Ordinal: 215, Address: 0x2e0ee0)
(Ordinal: 216, Address: 0x715ced)
(Ordinal: 217, Address: 0x715d14)
(Ordinal: 218, Address: 0x715cba)
(Ordinal: 219, Address: 0x715cc7)
(Ordinal: 220, Address: 0x715c7c)
(Ordinal: 221, Address: 0x715c3d)
(Ordinal: 222, Address: 0x715c95)
(Ordinal: 223, Address: 0x715cfa)
(Ordinal: 224, Address: 0x715bd7)
(Ordinal: 225, Address: 0x715ce0)
RealShellExecuteW (Ordinal: 226, Address: 0x1ffbc0)
(Ordinal: 227, Address: 0x715bca)
SHHelpShortcuts_RunDLL (Ordinal: 228, Address: 0x220840)
SHHelpShortcuts_RunDLLA (Ordinal: 229, Address: 0x220840)
(Ordinal: 230, Address: 0x715d2e)
SHSetFolderPathA (Ordinal: 231, Address: 0x266510)
SHSetFolderPathW (Ordinal: 232, Address: 0x266530)
(Ordinal: 233, Address: 0x716029)
(Ordinal: 234, Address: 0x71617d)
(Ordinal: 235, Address: 0x7160f5)
(Ordinal: 236, Address: 0x201620)
(Ordinal: 237, Address: 0x2015a0)
SHHelpShortcuts_RunDLLW (Ordinal: 238, Address: 0x2208f0)
PathIsSlowW (Ordinal: 239, Address: 0x200680)
PathIsSlowA (Ordinal: 240, Address: 0x200660)
(Ordinal: 241, Address: 0x2012a0)
(Ordinal: 242, Address: 0x716001)
(Ordinal: 243, Address: 0x71616f)
(Ordinal: 244, Address: 0x201580)
SHTestTokenMembership (Ordinal: 245, Address: 0x201600)
(Ordinal: 246, Address: 0x71606d)
(Ordinal: 247, Address: 0x715fd7)
(Ordinal: 248, Address: 0x716036)
(Ordinal: 249, Address: 0x715910)
(Ordinal: 250, Address: 0x715986)
(Ordinal: 251, Address: 0x715954)
(Ordinal: 252, Address: 0x7158c0)
(Ordinal: 253, Address: 0x716088)
(Ordinal: 254, Address: 0x252750)
AppCompat_RunDLLW (Ordinal: 255, Address: 0x226ac0)
SHCreateShellFolderView (Ordinal: 256, Address: 0xc57b0)
(Ordinal: 257, Address: 0x196a40)
(Ordinal: 258, Address: 0x296f00)
(Ordinal: 259, Address: 0x189410)
(Ordinal: 260, Address: 0x1ffd60)
(Ordinal: 261, Address: 0x2e4620)
(Ordinal: 262, Address: 0x2e4970)
AssocCreateForClasses (Ordinal: 263, Address: 0x1f8bf0)
(Ordinal: 264, Address: 0x1ffd80)
(Ordinal: 265, Address: 0x2016c0)
(Ordinal: 266, Address: 0x2016e0)
AssocElemCreateForKey (Ordinal: 267, Address: 0x1ffc80)
AssocGetDetailsOfPropKey (Ordinal: 268, Address: 0x1f8c90)
CallFileCopyHook (Ordinal: 269, Address: 0x235050)
(Ordinal: 270, Address: 0x2014c0)
(Ordinal: 271, Address: 0x2eb760)
CheckEscapesW (Ordinal: 272, Address: 0x1ffce0)
CommandLineToArgvW (Ordinal: 273, Address: 0x1593e0)
Control_RunDLL (Ordinal: 274, Address: 0x244eb0)
Control_RunDLLA (Ordinal: 275, Address: 0x244eb0)
Control_RunDLLAsUserW (Ordinal: 276, Address: 0x244f30)
Control_RunDLLW (Ordinal: 277, Address: 0x244f90)
DllCanUnloadNow (Ordinal: 278, Address: 0x117160)
DllGetActivationFactory (Ordinal: 279, Address: 0x253a10)
DllGetClassObject (Ordinal: 280, Address: 0x5f660)
DllGetVersion (Ordinal: 281, Address: 0x25dd70)
DllInstall (Ordinal: 282, Address: 0x25de40)
DllRegisterServer (Ordinal: 283, Address: 0x196a40)
DllUnregisterServer (Ordinal: 284, Address: 0x196a40)
DoEnvironmentSubstA (Ordinal: 285, Address: 0x1ffe60)
DoEnvironmentSubstW (Ordinal: 286, Address: 0x1ffe80)
DragAcceptFiles (Ordinal: 287, Address: 0x1ffea0)
DragFinish (Ordinal: 288, Address: 0x1ffec0)
DragQueryFile (Ordinal: 289, Address: 0x1ffee0)
DragQueryFileA (Ordinal: 290, Address: 0x1ffee0)
DragQueryFileAorW (Ordinal: 291, Address: 0x1fff00)
DragQueryFileW (Ordinal: 292, Address: 0x1fff20)
DragQueryPoint (Ordinal: 293, Address: 0x1fff60)
DuplicateIcon (Ordinal: 294, Address: 0x1fff80)
ExtractAssociatedIconA (Ordinal: 295, Address: 0x1fffa0)
ExtractAssociatedIconExA (Ordinal: 296, Address: 0x1fffc0)
ExtractAssociatedIconExW (Ordinal: 297, Address: 0x1fffe0)
ExtractAssociatedIconW (Ordinal: 298, Address: 0x200000)
ExtractIconA (Ordinal: 299, Address: 0x200020)
ExtractIconEx (Ordinal: 300, Address: 0x200040)
ExtractIconExA (Ordinal: 301, Address: 0x200040)
ExtractIconExW (Ordinal: 302, Address: 0x200060)
ExtractIconW (Ordinal: 303, Address: 0x200080)
FindExecutableA (Ordinal: 304, Address: 0x2000c0)
FindExecutableW (Ordinal: 305, Address: 0x2000e0)
FreeIconList (Ordinal: 306, Address: 0x200100)
GetCurrentProcessExplicitAppUserModelID (Ordinal: 307, Address: 0x1a58b0)
InitNetworkAddressControl (Ordinal: 308, Address: 0x19ce10)
InternalExtractIconListA (Ordinal: 309, Address: 0x2003a0)
InternalExtractIconListW (Ordinal: 310, Address: 0x2003c0)
LaunchMSHelp_RunDLLW (Ordinal: 311, Address: 0x209240)
Options_RunDLL (Ordinal: 312, Address: 0x4af2d0)
Options_RunDLLA (Ordinal: 313, Address: 0x4af2d0)
Options_RunDLLW (Ordinal: 314, Address: 0x4af330)
RegenerateUserEnvironment (Ordinal: 315, Address: 0x206180)
RunAsNewUser_RunDLLW (Ordinal: 316, Address: 0x20a650)
SHAddDefaultPropertiesByExt (Ordinal: 317, Address: 0x2007c0)
SHAddToRecentDocs (Ordinal: 318, Address: 0x1a5860)
SHAppBarMessage (Ordinal: 319, Address: 0x46a20)
SHAssocEnumHandlers (Ordinal: 320, Address: 0x1f8cb0)
SHAssocEnumHandlersForProtocolByApplication (Ordinal: 321, Address: 0x1f8d50)
SHBindToFolderIDListParent (Ordinal: 322, Address: 0x200820)
SHBindToFolderIDListParentEx (Ordinal: 323, Address: 0x200840)
SHBindToObject (Ordinal: 324, Address: 0x200860)
SHBindToParent (Ordinal: 325, Address: 0x200880)
SHBrowseForFolder (Ordinal: 326, Address: 0x2a4fd0)
SHBrowseForFolderA (Ordinal: 327, Address: 0x2a4fd0)
SHBrowseForFolderW (Ordinal: 328, Address: 0x2a5310)
SHChangeNotify (Ordinal: 329, Address: 0x157ff0)
SHChangeNotifyRegisterThread (Ordinal: 330, Address: 0x1a2720)
SHChangeNotifySuspendResume (Ordinal: 331, Address: 0x2a0120)
SHCoCreateInstanceWorker (Ordinal: 332, Address: 0x7164aa)
SHCreateAssociationRegistration (Ordinal: 333, Address: 0x200900)
SHCreateCategoryEnum (Ordinal: 334, Address: 0x2a77a0)
SHCreateDataObject (Ordinal: 335, Address: 0x200920)
SHCreateDefaultContextMenu (Ordinal: 336, Address: 0x918b0)
SHCreateDefaultExtractIcon (Ordinal: 337, Address: 0x200940)
SHCreateDefaultPropertiesOp (Ordinal: 338, Address: 0x200960)
SHCreateDirectoryExA (Ordinal: 339, Address: 0x2009c0)
SHCreateDirectoryExW (Ordinal: 340, Address: 0x2009e0)
SHCreateDrvExtIcon (Ordinal: 341, Address: 0x1228b0)
SHCreateItemFromIDList (Ordinal: 342, Address: 0x200a60)
SHCreateItemFromParsingName (Ordinal: 343, Address: 0x200a80)
SHCreateItemFromRelativeName (Ordinal: 344, Address: 0x200aa0)
SHCreateItemInKnownFolder (Ordinal: 345, Address: 0x200ac0)
SHCreateItemWithParent (Ordinal: 346, Address: 0x200ae0)
SHCreateLocalServerRunDll (Ordinal: 347, Address: 0x196b70)
SHCreateProcessAsUserW (Ordinal: 348, Address: 0x200b60)
SHCreateQueryCancelAutoPlayMoniker (Ordinal: 349, Address: 0x2deb10)
SHCreateShellItem (Ordinal: 350, Address: 0x200c00)
SHCreateShellItemArray (Ordinal: 351, Address: 0x1925a0)
SHCreateShellItemArrayFromDataObject (Ordinal: 352, Address: 0x195790)
SHCreateShellItemArrayFromIDLists (Ordinal: 353, Address: 0x200c20)
SHCreateShellItemArrayFromShellItem (Ordinal: 354, Address: 0x200c40)
SHELL32_AddToBackIconTable (Ordinal: 355, Address: 0xac460)
SHELL32_AddToFrontIconTable (Ordinal: 356, Address: 0x19e310)
SHELL32_AreAllItemsAvailable (Ordinal: 357, Address: 0x187680)
SHELL32_CCommonPlacesFolder_CreateInstance (Ordinal: 358, Address: 0x2e0630)
SHELL32_CDBurn_CloseSession (Ordinal: 359, Address: 0x2e0640)
SHELL32_CDBurn_DriveSupportedForDataBurn (Ordinal: 360, Address: 0x2e0650)
SHELL32_CDBurn_Erase (Ordinal: 361, Address: 0x2e0660)
SHELL32_CDBurn_GetCDInfo (Ordinal: 362, Address: 0x1a5920)
SHELL32_CDBurn_GetLiveFSDiscInfo (Ordinal: 363, Address: 0x1e1b90)
SHELL32_CDBurn_GetStagingPathOrNormalPath (Ordinal: 364, Address: 0x19ea70)
SHELL32_CDBurn_GetTaskInfo (Ordinal: 365, Address: 0x2e0670)
SHELL32_CDBurn_IsBlankDisc (Ordinal: 366, Address: 0x2e0680)
SHELL32_CDBurn_IsBlankDisc2 (Ordinal: 367, Address: 0x2e0690)
SHELL32_CDBurn_IsLiveFS (Ordinal: 368, Address: 0x2e06f0)
SHELL32_CDBurn_OnDeviceChange (Ordinal: 369, Address: 0x2e0700)
SHELL32_CDBurn_OnEject (Ordinal: 370, Address: 0x2e0710)
SHELL32_CDBurn_OnMediaChange (Ordinal: 371, Address: 0x2e0790)
SHELL32_CDefFolderMenu_Create2 (Ordinal: 372, Address: 0x2e07a0)
SHELL32_CDefFolderMenu_Create2Ex (Ordinal: 373, Address: 0x17d2d0)
SHELL32_CDefFolderMenu_MergeMenu (Ordinal: 374, Address: 0x1e1c60)
SHELL32_CDrivesContextMenu_Create (Ordinal: 375, Address: 0x2e0800)
SHELL32_CDrivesDropTarget_Create (Ordinal: 376, Address: 0x1a1800)
SHELL32_CDrives_CreateSFVCB (Ordinal: 377, Address: 0x2e0810)
SHELL32_CFSDropTarget_CreateInstance (Ordinal: 378, Address: 0x194ec0)
SHELL32_CFSFolderCallback_Create (Ordinal: 379, Address: 0x1a2620)
SHELL32_CFillPropertiesTask_CreateInstance (Ordinal: 380, Address: 0x26e370)
SHELL32_CLibraryDropTarget_CreateInstance (Ordinal: 381, Address: 0x2e0870)
SHELL32_CLocationContextMenu_Create (Ordinal: 382, Address: 0x1f2050)
SHELL32_CLocationFolderUI_CreateInstance (Ordinal: 383, Address: 0x2e0880)
SHELL32_CMountPoint_DoAutorun (Ordinal: 384, Address: 0x2e0890)
SHELL32_CMountPoint_DoAutorunPrompt (Ordinal: 385, Address: 0x2e08a0)
SHELL32_CMountPoint_IsAutoRunDriveAndEnabledByPolicy (Ordinal: 386, Address: 0x1a5810)
SHELL32_CMountPoint_ProcessAutoRunFile (Ordinal: 387, Address: 0x2e08d0)
SHELL32_CMountPoint_WantAutorunUI (Ordinal: 388, Address: 0x2e08e0)
SHELL32_CMountPoint_WantAutorunUIGetReady (Ordinal: 389, Address: 0x2e08f0)
SHELL32_CNetFolderUI_CreateInstance (Ordinal: 390, Address: 0x88b60)
SHELL32_CPL_CategoryIdArrayFromVariant (Ordinal: 391, Address: 0x1e1b80)
SHELL32_CPL_IsLegacyCanonicalNameListedUnderKey (Ordinal: 392, Address: 0x2e0950)
SHELL32_CPL_ModifyWowDisplayName (Ordinal: 393, Address: 0x2e0970)
SHELL32_CRecentDocsContextMenu_CreateInstance (Ordinal: 394, Address: 0x2e0980)
SHELL32_CTransferConfirmation_CreateInstance (Ordinal: 395, Address: 0x2e0990)
SHELL32_CallFileCopyHooks (Ordinal: 396, Address: 0x13d100)
SHELL32_CanDisplayWin8CopyDialog (Ordinal: 397, Address: 0x16aa70)
SHELL32_CloseAutoplayPrompt (Ordinal: 398, Address: 0x2e09a0)
SHELL32_CommandLineFromMsiDescriptor (Ordinal: 399, Address: 0x2e0a50)
SHELL32_CopySecondaryTiles (Ordinal: 400, Address: 0x196a40)
SHELL32_CreateConfirmationInterrupt (Ordinal: 401, Address: 0x2e0a70)
SHELL32_CreateConflictInterrupt (Ordinal: 402, Address: 0x2e0a80)
SHELL32_CreateDefaultOperationDataProvider (Ordinal: 403, Address: 0x2e0a90)
SHELL32_CreateFileFolderContextMenu (Ordinal: 404, Address: 0x2e0b70)
SHELL32_CreateLinkInfoW (Ordinal: 405, Address: 0x174fd0)
SHELL32_CreateQosRecorder (Ordinal: 406, Address: 0x19c680)
SHELL32_CreateSharePointView (Ordinal: 407, Address: 0x2e0b80)
SHELL32_Create_IEnumUICommand (Ordinal: 408, Address: 0x2e0b90)
SHELL32_DestroyLinkInfo (Ordinal: 409, Address: 0x17f1b0)
SHELL32_EncryptDirectory (Ordinal: 410, Address: 0x2e0ba0)
SHELL32_EncryptedFileKeyInfo (Ordinal: 411, Address: 0x2e0bb0)
SHELL32_EnumCommonTasks (Ordinal: 412, Address: 0x2e0bd0)
SHELL32_FreeEncryptedFileKeyInfo (Ordinal: 413, Address: 0x2e0be0)
SHELL32_GenerateAppID (Ordinal: 414, Address: 0x2e0c00)
SHELL32_GetAppIDRoot (Ordinal: 415, Address: 0x2e0c10)
SHELL32_GetCommandProviderForFolderType (Ordinal: 416, Address: 0x2e0c20)
SHELL32_GetDPIAdjustedLogicalSize (Ordinal: 417, Address: 0x1a5850)
SHELL32_GetDiskCleanupPath (Ordinal: 418, Address: 0x2e0c40)
SHELL32_GetFileNameFromBrowse (Ordinal: 419, Address: 0x2e0c50)
SHELL32_GetIconOverlayManager (Ordinal: 420, Address: 0x9c0f0)
SHELL32_GetLinkInfoData (Ordinal: 421, Address: 0x2e0c60)
SHELL32_GetRatingBucket (Ordinal: 422, Address: 0x2e0c80)
SHELL32_GetSqmableFileName (Ordinal: 423, Address: 0x2e0cb0)
SHELL32_GetThumbnailAdornerFromFactory (Ordinal: 424, Address: 0x2e0cc0)
SHELL32_GetThumbnailAdornerFromFactory2 (Ordinal: 425, Address: 0xba050)
SHELL32_HandleUnrecognizedFileSystem (Ordinal: 426, Address: 0x2e0cd0)
SHELL32_IconCacheCreate (Ordinal: 427, Address: 0x2e0ce0)
SHELL32_IconCacheDestroy (Ordinal: 428, Address: 0x197260)
SHELL32_IconCacheHandleAssociationChanged (Ordinal: 429, Address: 0x1a5910)
SHELL32_IconCacheRestore (Ordinal: 430, Address: 0x2e0cf0)
SHELL32_IconCache_AboutToExtractIcons (Ordinal: 431, Address: 0x1921d0)
SHELL32_IconCache_DoneExtractingIcons (Ordinal: 432, Address: 0x187c10)
SHELL32_IconCache_ExpandEnvAndSearchPath (Ordinal: 433, Address: 0x121aa0)
SHELL32_IconCache_RememberRecentlyExtractedIconsW (Ordinal: 434, Address: 0xfac30)
SHELL32_IconOverlayManagerInit (Ordinal: 435, Address: 0x163e50)
SHELL32_IsGetKeyboardLayoutPresent (Ordinal: 436, Address: 0x189410)
SHELL32_IsSystemUpgradeInProgress (Ordinal: 437, Address: 0x131db0)
SHELL32_IsValidLinkInfo (Ordinal: 438, Address: 0x1171d0)
SHELL32_LegacyEnumSpecialTasksByType (Ordinal: 439, Address: 0x2e0d00)
SHELL32_LegacyEnumTasks (Ordinal: 440, Address: 0x2e0d10)
SHELL32_LookupBackIconIndex (Ordinal: 441, Address: 0xe0f20)
SHELL32_LookupFrontIconIndex (Ordinal: 442, Address: 0xac590)
SHELL32_NormalizeRating (Ordinal: 443, Address: 0x2e0d20)
SHELL32_NotifyLinkTrackingServiceOfMove (Ordinal: 444, Address: 0x1a3f30)
SHELL32_PifMgr_CloseProperties (Ordinal: 445, Address: 0x204d10)
SHELL32_PifMgr_GetProperties (Ordinal: 446, Address: 0x196a40)
SHELL32_PifMgr_OpenProperties (Ordinal: 447, Address: 0x196a40)
SHELL32_PifMgr_SetProperties (Ordinal: 448, Address: 0x196a40)
SHELL32_Printers_CreateBindInfo (Ordinal: 449, Address: 0x2e0d60)
SHELL32_Printjob_GetPidl (Ordinal: 450, Address: 0x2e0d70)
SHELL32_PurgeSystemIcon (Ordinal: 451, Address: 0x2e0d80)
SHELL32_RefreshOverlayImages (Ordinal: 452, Address: 0x2e0d90)
SHELL32_RegenerateUserEnvironment (Ordinal: 453, Address: 0x2e0da0)
SHELL32_ResolveLinkInfoW (Ordinal: 454, Address: 0x1a5530)
SHELL32_SHAddSparseIcon (Ordinal: 455, Address: 0x19c1f0)
SHELL32_SHCreateByValueOperationInterrupt (Ordinal: 456, Address: 0x2e0db0)
SHELL32_SHCreateDefaultContextMenu (Ordinal: 457, Address: 0x191ff0)
SHELL32_SHCreateLocalServer (Ordinal: 458, Address: 0x2e0dc0)
SHELL32_SHCreateShellFolderView (Ordinal: 459, Address: 0x1a5800)
SHELL32_SHDuplicateEncryptionInfoFile (Ordinal: 460, Address: 0x2e0dd0)
SHELL32_SHEncryptFile (Ordinal: 461, Address: 0x2e0df0)
SHELL32_SHFormatDriveAsync (Ordinal: 462, Address: 0x2e0e00)
SHELL32_SHGetThreadUndoManager (Ordinal: 463, Address: 0x1f1df0)
SHELL32_SHGetUserNameW (Ordinal: 464, Address: 0x2e0e10)
SHELL32_SHIsVirtualDevice (Ordinal: 465, Address: 0x2e0e30)
SHELL32_SHLaunchPropSheet (Ordinal: 466, Address: 0x2e0ea0)
SHELL32_SHLogILFromFSIL (Ordinal: 467, Address: 0x2e0eb0)
SHELL32_SHOpenWithDialog (Ordinal: 468, Address: 0x2e0ed0)
SHELL32_SHStartNetConnectionDialogW (Ordinal: 469, Address: 0x2e0ee0)
SHELL32_SHUICommandFromGUID (Ordinal: 470, Address: 0x281a30)
SHELL32_SendToMenu_InvokeTargetedCommand (Ordinal: 471, Address: 0x4b1080)
SHELL32_SendToMenu_VerifyTargetedCommand (Ordinal: 472, Address: 0xe7070)
SHELL32_ShowHideIconOnlyOnDesktop (Ordinal: 473, Address: 0x2e0f00)
SHELL32_SimpleRatingToFilterCondition (Ordinal: 474, Address: 0x2e0f10)
SHELL32_StampIconForFile (Ordinal: 475, Address: 0x1f29a0)
SHELL32_SuspendUndo (Ordinal: 476, Address: 0x16d580)
SHELL32_TryVirtualDiscImageDriveEject (Ordinal: 477, Address: 0x2e0f20)
SHELL32_VerifySaferTrust (Ordinal: 478, Address: 0x198960)
SHEmptyRecycleBinA (Ordinal: 479, Address: 0x2e1380)
SHEmptyRecycleBinW (Ordinal: 480, Address: 0x2e1420)
SHEnableServiceObject (Ordinal: 481, Address: 0x177d20)
SHEnumerateUnreadMailAccountsW (Ordinal: 482, Address: 0x200ce0)
SHEvaluateSystemCommandTemplate (Ordinal: 483, Address: 0x200d00)
SHExecuteErrorMessageBox (Ordinal: 484, Address: 0x2e2ea0)
SHExtractIconsW (Ordinal: 485, Address: 0x200d60)
SHFileOperation (Ordinal: 486, Address: 0x220d70)
SHFileOperationA (Ordinal: 487, Address: 0x220d70)
SHFileOperationW (Ordinal: 488, Address: 0x1e1c40)
SHFormatDrive (Ordinal: 489, Address: 0x226f30)
SHFreeNameMappings (Ordinal: 490, Address: 0x220d90)
SHGetDataFromIDListA (Ordinal: 491, Address: 0x200e80)
SHGetDataFromIDListW (Ordinal: 492, Address: 0x200ea0)
SHGetDesktopFolder (Ordinal: 493, Address: 0x185c80)
SHGetDiskFreeSpaceA (Ordinal: 494, Address: 0x200ec0)
SHGetDiskFreeSpaceExA (Ordinal: 495, Address: 0x200ec0)
SHGetDiskFreeSpaceExW (Ordinal: 496, Address: 0x200ee0)
SHGetDriveMedia (Ordinal: 497, Address: 0x2e9940)
SHGetFileInfo (Ordinal: 498, Address: 0x200f00)
SHGetFileInfoA (Ordinal: 499, Address: 0x200f00)
SHGetFileInfoW (Ordinal: 500, Address: 0x1852f0)
SHGetFolderLocation (Ordinal: 501, Address: 0x18ab70)
SHGetFolderPathA (Ordinal: 502, Address: 0x190870)
SHGetFolderPathAndSubDirA (Ordinal: 503, Address: 0x266430)
SHGetFolderPathAndSubDirW (Ordinal: 504, Address: 0x1f3100)
SHGetFolderPathEx (Ordinal: 505, Address: 0x184980)
SHGetFolderPathW (Ordinal: 506, Address: 0x150e60)
SHGetIDListFromObject (Ordinal: 507, Address: 0x200f60)
SHGetIconOverlayIndexA (Ordinal: 508, Address: 0x296ac0)
SHGetIconOverlayIndexW (Ordinal: 509, Address: 0x9bfc0)
SHGetInstanceExplorer (Ordinal: 510, Address: 0x1f30e0)
SHGetItemFromDataObject (Ordinal: 511, Address: 0x200fa0)
SHGetItemFromObject (Ordinal: 512, Address: 0x200fc0)
SHGetKnownFolderIDList (Ordinal: 513, Address: 0x1984b0)
SHGetKnownFolderItem (Ordinal: 514, Address: 0x1a9710)
SHGetKnownFolderPath (Ordinal: 515, Address: 0x13aa00)
SHGetLocalizedName (Ordinal: 516, Address: 0x200fe0)
SHGetMalloc (Ordinal: 517, Address: 0x201020)
SHGetNameFromIDList (Ordinal: 518, Address: 0x201040)
SHGetNewLinkInfo (Ordinal: 519, Address: 0x201080)
(Ordinal: 520, Address: 0x715e65)
(Ordinal: 521, Address: 0x7160bf)
(Ordinal: 522, Address: 0x71618a)
(Ordinal: 523, Address: 0x715fbd)
RealDriveType (Ordinal: 524, Address: 0x1f2dd0)
(Ordinal: 525, Address: 0x715b6f)
SHFlushSFCache (Ordinal: 526, Address: 0x200dc0)
SHGetPathFromIDList (Ordinal: 527, Address: 0x2010e0)
SHGetPathFromIDListA (Ordinal: 528, Address: 0x2010e0)
SHGetPathFromIDListEx (Ordinal: 529, Address: 0x201120)
SHGetPathFromIDListW (Ordinal: 530, Address: 0x201140)
SHGetPropertyStoreForWindow (Ordinal: 531, Address: 0x96d20)
SHGetPropertyStoreFromIDList (Ordinal: 532, Address: 0x201160)
SHGetPropertyStoreFromParsingName (Ordinal: 533, Address: 0x201180)
SHGetSettings (Ordinal: 534, Address: 0x201200)
SHGetSpecialFolderLocation (Ordinal: 535, Address: 0x1930e0)
SHGetSpecialFolderPathA (Ordinal: 536, Address: 0x266450)
SHGetSpecialFolderPathW (Ordinal: 537, Address: 0x1586f0)
SHGetStockIconInfo (Ordinal: 538, Address: 0x201220)
SHGetTemporaryPropertyForItem (Ordinal: 539, Address: 0x201240)
SHGetUnreadMailCountW (Ordinal: 540, Address: 0x201280)
SHInvokePrinterCommandA (Ordinal: 541, Address: 0x220550)
SHInvokePrinterCommandW (Ordinal: 542, Address: 0x220640)
SHIsFileAvailableOffline (Ordinal: 543, Address: 0x201300)
SHLoadInProc (Ordinal: 544, Address: 0x1f2050)
SHLoadNonloadedIconOverlayIdentifiers (Ordinal: 545, Address: 0x201340)
SHOpenFolderAndSelectItems (Ordinal: 546, Address: 0x2664b0)
SHOpenOrGetFolderView (Ordinal: 547, Address: 0x2eb0f0)
SHOpenWithDialog (Ordinal: 548, Address: 0x20ec50)
SHParseDisplayName (Ordinal: 549, Address: 0x201420)
SHPathPrepareForWriteA (Ordinal: 550, Address: 0x220dd0)
SHPathPrepareForWriteW (Ordinal: 551, Address: 0x220df0)
SHQueryRecycleBinA (Ordinal: 552, Address: 0x201440)
SHQueryRecycleBinW (Ordinal: 553, Address: 0x201460)
SHQueryUserNotificationState (Ordinal: 554, Address: 0x105ab0)
SHRemoveLocalizedName (Ordinal: 555, Address: 0x2014a0)
SHResolveLibrary (Ordinal: 556, Address: 0x2664f0)
SHSetDefaultProperties (Ordinal: 557, Address: 0x201500)
SHSetKnownFolderPath (Ordinal: 558, Address: 0x266570)
SHSetLocalizedName (Ordinal: 559, Address: 0x201520)
SHSetTemporaryPropertyForItem (Ordinal: 560, Address: 0x201540)
SHSetUnreadMailCountW (Ordinal: 561, Address: 0x201560)
SHShowManageLibraryUI (Ordinal: 562, Address: 0x500a70)
SHUpdateRecycleBinIcon (Ordinal: 563, Address: 0x201640)
SetCurrentProcessExplicitAppUserModelID (Ordinal: 564, Address: 0x1e1c20)
SheChangeDirA (Ordinal: 565, Address: 0x204d20)
SheChangeDirExW (Ordinal: 566, Address: 0x204da0)
SheGetDirA (Ordinal: 567, Address: 0x205320)
SheSetCurDrive (Ordinal: 568, Address: 0x205580)
ShellAboutA (Ordinal: 569, Address: 0x2fc0c0)
ShellAboutW (Ordinal: 570, Address: 0x2fc1f0)
ShellExec_RunDLL (Ordinal: 571, Address: 0x201700)
ShellExec_RunDLLA (Ordinal: 572, Address: 0x201700)
ShellExec_RunDLLW (Ordinal: 573, Address: 0x201720)
ShellExecuteA (Ordinal: 574, Address: 0x201740)
ShellExecuteEx (Ordinal: 575, Address: 0x201760)
ShellExecuteExA (Ordinal: 576, Address: 0x201760)
ShellExecuteExW (Ordinal: 577, Address: 0x201780)
ShellExecuteW (Ordinal: 578, Address: 0x2017a0)
ShellHookProc (Ordinal: 579, Address: 0x196a40)
Shell_GetCachedImageIndexA (Ordinal: 580, Address: 0x2017e0)
Shell_GetCachedImageIndexW (Ordinal: 581, Address: 0x201800)
Shell_NotifyIcon (Ordinal: 582, Address: 0x15a9b0)
Shell_NotifyIconA (Ordinal: 583, Address: 0x15a9b0)
Shell_NotifyIconGetRect (Ordinal: 584, Address: 0x1afd00)
Shell_NotifyIconW (Ordinal: 585, Address: 0x1c270)
StateRepoNewMenuCache_EnsureCacheAsync (Ordinal: 586, Address: 0x80500)
StateRepoNewMenuCache_RebuildCacheAsync (Ordinal: 587, Address: 0x19c6c0)
StrChrA (Ordinal: 588, Address: 0x1f67b0)
StrChrIA (Ordinal: 589, Address: 0x1f67c0)
StrChrIW (Ordinal: 590, Address: 0x1f67d0)
StrChrW (Ordinal: 591, Address: 0x1f67e0)
StrCmpNA (Ordinal: 592, Address: 0x1f67f0)
StrCmpNIA (Ordinal: 593, Address: 0x1f6800)
StrCmpNIW (Ordinal: 594, Address: 0x1f6810)
StrCmpNW (Ordinal: 595, Address: 0x1f6820)
StrNCmpA (Ordinal: 596, Address: 0x203310)
StrNCmpIA (Ordinal: 597, Address: 0x2033e0)
StrNCmpIW (Ordinal: 598, Address: 0x2034b0)
StrNCmpW (Ordinal: 599, Address: 0x203580)
StrRChrA (Ordinal: 600, Address: 0x1f6830)
StrRChrIA (Ordinal: 601, Address: 0x1f6840)
StrRChrIW (Ordinal: 602, Address: 0x1f6850)
StrRChrW (Ordinal: 603, Address: 0x1f6860)
StrRStrA (Ordinal: 604, Address: 0x203670)
StrRStrIA (Ordinal: 605, Address: 0x1f6870)
StrRStrIW (Ordinal: 606, Address: 0x1f6880)
StrRStrW (Ordinal: 607, Address: 0x203750)
StrStrA (Ordinal: 608, Address: 0x1f6890)
StrStrIA (Ordinal: 609, Address: 0x1f68a0)
StrStrIW (Ordinal: 610, Address: 0x1f68b0)
StrStrW (Ordinal: 611, Address: 0x1f68c0)
UsersLibrariesFolderUI_CreateInstance (Ordinal: 612, Address: 0xcb810)
WOWShellExecute (Ordinal: 613, Address: 0x2018a0)
WaitForExplorerRestartW (Ordinal: 614, Address: 0x25e180)
(Ordinal: 640, Address: 0x715ded)
(Ordinal: 641, Address: 0x715de0)
(Ordinal: 643, Address: 0x715e72)
SHChangeNotification_Lock (Ordinal: 644, Address: 0x163a60)
SHChangeNotification_Unlock (Ordinal: 645, Address: 0x189050)
(Ordinal: 646, Address: 0x715e8c)
(Ordinal: 648, Address: 0x716197)
(Ordinal: 650, Address: 0x71587d)
(Ordinal: 651, Address: 0x2004e0)
WriteCabinetState (Ordinal: 652, Address: 0x201900)
(Ordinal: 653, Address: 0x715e31)
ReadCabinetState (Ordinal: 654, Address: 0x2007a0)
(Ordinal: 660, Address: 0x2000a0)
IsUserAnAdmin (Ordinal: 680, Address: 0x2663e0)
(Ordinal: 681, Address: 0x715fe5)
StgMakeUniqueName (Ordinal: 682, Address: 0x201880)
(Ordinal: 683, Address: 0x2eb780)
(Ordinal: 684, Address: 0x2eb780)
SHPropStgCreate (Ordinal: 685, Address: 0x16fb10)
SHPropStgReadMultiple (Ordinal: 688, Address: 0x1a52d0)
SHPropStgWriteMultiple (Ordinal: 689, Address: 0x2664d0)
(Ordinal: 690, Address: 0x266470)
(Ordinal: 691, Address: 0x715f86)
(Ordinal: 700, Address: 0x715a96)
CDefFolderMenu_Create2 (Ordinal: 701, Address: 0x234670)
(Ordinal: 702, Address: 0x19e40)
(Ordinal: 703, Address: 0x715503)
(Ordinal: 704, Address: 0x715510)
(Ordinal: 707, Address: 0x716103)
(Ordinal: 708, Address: 0x71600f)
SHGetSetFolderCustomSettings (Ordinal: 709, Address: 0x2011c0)
(Ordinal: 711, Address: 0x1ffd00)
(Ordinal: 712, Address: 0x715e99)
(Ordinal: 713, Address: 0x2006a0)
(Ordinal: 714, Address: 0x2006c0)
(Ordinal: 715, Address: 0x715efa)
SHMultiFileProperties (Ordinal: 716, Address: 0x2eaa80)
(Ordinal: 719, Address: 0x71611d)
(Ordinal: 720, Address: 0x715dc6)
(Ordinal: 721, Address: 0x715dd3)
(Ordinal: 722, Address: 0x715ede)
(Ordinal: 723, Address: 0x200be0)
(Ordinal: 724, Address: 0x716096)
(Ordinal: 725, Address: 0x715d3c)
(Ordinal: 726, Address: 0x715adb)
SHGetImageList (Ordinal: 727, Address: 0x200f80)
RestartDialogEx (Ordinal: 730, Address: 0x252800)
(Ordinal: 731, Address: 0x716139)
(Ordinal: 732, Address: 0x71612b)
(Ordinal: 733, Address: 0x241360)
(Ordinal: 740, Address: 0x200a00)
SHCreateFileExtractIconW (Ordinal: 743, Address: 0x200a20)
(Ordinal: 744, Address: 0x2503b0)
(Ordinal: 745, Address: 0x715b20)
SHLimitInputEdit (Ordinal: 747, Address: 0x2ea190)
(Ordinal: 748, Address: 0x2ea130)
(Ordinal: 749, Address: 0x71601c)
SHGetAttributesFromDataObject (Ordinal: 750, Address: 0x200e20)
(Ordinal: 751, Address: 0x2015e0)
(Ordinal: 752, Address: 0x200e40)
(Ordinal: 753, Address: 0x197700)
(Ordinal: 754, Address: 0x1e9d50)
(Ordinal: 755, Address: 0x200600)
(Ordinal: 756, Address: 0x715b62)
(Ordinal: 757, Address: 0x1e920)
(Ordinal: 758, Address: 0x959f0)
(Ordinal: 759, Address: 0x95110)
(Ordinal: 760, Address: 0x220d50)
(Ordinal: 761, Address: 0x2a0100)
(Ordinal: 762, Address: 0x715b12)
(Ordinal: 763, Address: 0x2503e0)
(Ordinal: 764, Address: 0x1ffc40)
(Ordinal: 765, Address: 0x1f8d70)
(Ordinal: 766, Address: 0x715ea6)
(Ordinal: 767, Address: 0x1ffc60)
(Ordinal: 777, Address: 0x200e00)
(Ordinal: 778, Address: 0x1ffca0)
(Ordinal: 779, Address: 0x200400)
(Ordinal: 781, Address: 0x200800)
(Ordinal: 782, Address: 0x28e560)
(Ordinal: 786, Address: 0x715ed0)
(Ordinal: 787, Address: 0x2013a0)
(Ordinal: 788, Address: 0x200ba0)
(Ordinal: 789, Address: 0x200bc0)
(Ordinal: 790, Address: 0x201380)
(Ordinal: 791, Address: 0x200b80)
(Ordinal: 792, Address: 0x2013c0)
(Ordinal: 810, Address: 0x2e4650)
(Ordinal: 811, Address: 0x2e4450)
(Ordinal: 812, Address: 0x5206b0)
(Ordinal: 813, Address: 0x520750)
(Ordinal: 814, Address: 0x15d770)
(Ordinal: 815, Address: 0x169990)
(Ordinal: 816, Address: 0x51e130)
(Ordinal: 817, Address: 0x51e4d0)
(Ordinal: 818, Address: 0x51d350)
(Ordinal: 819, Address: 0x51d360)
(Ordinal: 820, Address: 0x715eb4)
(Ordinal: 821, Address: 0x715f5c)
(Ordinal: 822, Address: 0x715f4e)
(Ordinal: 823, Address: 0x200f20)
(Ordinal: 824, Address: 0x200f40)
(Ordinal: 825, Address: 0xbfbd0)
(Ordinal: 826, Address: 0x715ec2)
(Ordinal: 827, Address: 0x715f6a)
(Ordinal: 828, Address: 0x2347e0)
(Ordinal: 829, Address: 0x234bd0)
(Ordinal: 830, Address: 0x2d7080)
(Ordinal: 831, Address: 0x200a40)
(Ordinal: 832, Address: 0x7160a4)
(Ordinal: 833, Address: 0x266490)
(Ordinal: 834, Address: 0x715f08)
(Ordinal: 835, Address: 0x715f24)
(Ordinal: 836, Address: 0x715f16)
(Ordinal: 837, Address: 0x715f40)
(Ordinal: 838, Address: 0x715f32)
(Ordinal: 839, Address: 0x715ae8)
(Ordinal: 840, Address: 0x2005c0)
(Ordinal: 841, Address: 0x715f94)
(Ordinal: 842, Address: 0x715fa2)
(Ordinal: 843, Address: 0x715ff3)
(Ordinal: 844, Address: 0x200b40)
(Ordinal: 845, Address: 0x51da20)
ILLoadFromStreamEx (Ordinal: 846, Address: 0x200320)
(Ordinal: 847, Address: 0xbfd60)
(Ordinal: 848, Address: 0x2010c0)
(Ordinal: 849, Address: 0x186220)
(Ordinal: 850, Address: 0x200560)
(Ordinal: 851, Address: 0x201260)
(Ordinal: 852, Address: 0x71605f)
(Ordinal: 853, Address: 0x201100)
(Ordinal: 854, Address: 0x715daa)
(Ordinal: 856, Address: 0x715ab2)
(Ordinal: 857, Address: 0x715aa4)
(Ordinal: 858, Address: 0x715e07)
(Ordinal: 859, Address: 0x302790)
(Ordinal: 860, Address: 0x200e60)
(Ordinal: 861, Address: 0x715f78)
(Ordinal: 862, Address: 0x2008e0)
(Ordinal: 863, Address: 0x715d65)
(Ordinal: 864, Address: 0x28ff80)
(Ordinal: 865, Address: 0x200440)
(Ordinal: 866, Address: 0x200d20)
(Ordinal: 867, Address: 0x715af6)
(Ordinal: 868, Address: 0x715b04)
(Ordinal: 869, Address: 0x715e23)
(Ordinal: 870, Address: 0x1a5240)
(Ordinal: 871, Address: 0x20c880)
(Ordinal: 872, Address: 0x715eec)
(Ordinal: 873, Address: 0x2012e0)
(Ordinal: 874, Address: 0x1e6de0)
(Ordinal: 875, Address: 0x15ff50)
(Ordinal: 876, Address: 0x1ed270)
(Ordinal: 877, Address: 0x281980)
(Ordinal: 878, Address: 0x9e060)
(Ordinal: 880, Address: 0x1ffd20)
(Ordinal: 881, Address: 0x14e820)
(Ordinal: 882, Address: 0x162cf0)
(Ordinal: 883, Address: 0x51c8e0)
(Ordinal: 884, Address: 0x252130)
(Ordinal: 885, Address: 0x1007f0)
(Ordinal: 886, Address: 0x201320)
(Ordinal: 887, Address: 0x200d40)
(Ordinal: 888, Address: 0x2ea270)
(Ordinal: 889, Address: 0x715d8e)
(Ordinal: 890, Address: 0x715acd)
(Ordinal: 891, Address: 0x298e20)
(Ordinal: 892, Address: 0x715d49)
(Ordinal: 893, Address: 0x666f0)
(Ordinal: 894, Address: 0x220d10)
(Ordinal: 895, Address: 0x172470)
(Ordinal: 896, Address: 0x220c10)
(Ordinal: 897, Address: 0x2ee680)
(Ordinal: 898, Address: 0x200b20)
(Ordinal: 899, Address: 0x2016a0)
(Ordinal: 900, Address: 0x1699e0)
(Ordinal: 901, Address: 0x1608f0)
(Ordinal: 902, Address: 0x715d9c)
(Ordinal: 903, Address: 0x1e2730)
(Ordinal: 904, Address: 0x266590)
(Ordinal: 905, Address: 0x2663a0)
(Ordinal: 906, Address: 0x200120)
(Ordinal: 907, Address: 0xabcd0)
(Ordinal: 909, Address: 0x715d57)
(Ordinal: 910, Address: 0x1ffd40)
(Ordinal: 911, Address: 0x1ffbe0)
(Ordinal: 912, Address: 0x24f870)
(Ordinal: 913, Address: 0x1ffdc0)
(Ordinal: 914, Address: 0x1ffac0)
(Ordinal: 915, Address: 0x95300)
(Ordinal: 916, Address: 0x17d6e0)
GetSystemPersistedStorageItemList (Ordinal: 919, Address: 0x220cf0)
CreateStorageItemFromPath_PartialTrustCaller (Ordinal: 920, Address: 0x220c70)
CreateStorageItemFromShellItem_FullTrustCaller (Ordinal: 921, Address: 0x220c90)
(Ordinal: 922, Address: 0x201480)
(Ordinal: 923, Address: 0x1a5830)
(Ordinal: 924, Address: 0x220bd0)
CreateStorageItemFromShellItem_FullTrustCaller_ForPackage (Ordinal: 925, Address: 0x179a70)
(Ordinal: 927, Address: 0x200980)
(Ordinal: 928, Address: 0x200c80)
CreateStorageItemFromShellItem_FullTrustCaller_ForPackage_WithProcessHandle (Ordinal: 929, Address: 0x220cb0)
(Ordinal: 930, Address: 0x2005a0)
CreateStorageItemFromShellItem_FullTrustCaller_UseImplicitFlagsAndPackage (Ordinal: 931, Address: 0x220cd0)
(Ordinal: 932, Address: 0x220e10)
(Ordinal: 933, Address: 0x220db0)
CreateStorageItemFromPath_FullTrustCaller (Ordinal: 935, Address: 0x220c30)
CreateStorageItemFromPath_FullTrustCaller_ForPackage (Ordinal: 936, Address: 0x220c50)
CStorageItem_GetValidatedStorageItemObject (Ordinal: 937, Address: 0x220bf0)
(Ordinal: 938, Address: 0x2a00e0)
(Ordinal: 939, Address: 0x230c0)
(Ordinal: 940, Address: 0x220d30)
IsProcessAnExplorer (Ordinal: 941, Address: 0x2004a0)
IsDesktopExplorerProcess (Ordinal: 942, Address: 0x200420)
(Ordinal: 943, Address: 0x58e50)
(Ordinal: 944, Address: 0x2eb230)
(Ordinal: 945, Address: 0x29f8f0)
(Ordinal: 946, Address: 0x201000)
(Ordinal: 947, Address: 0x235bf0)
(Ordinal: 948, Address: 0x235bd0)
(Ordinal: 949, Address: 0x235ba0)
(Ordinal: 950, Address: 0x235b50)
(Ordinal: 951, Address: 0x235b70)
(Ordinal: 952, Address: 0x235b30)
(Ordinal: 953, Address: 0x2358d0)
(Ordinal: 970, Address: 0x200760)
(Ordinal: 971, Address: 0x1ffcc0)
(Ordinal: 972, Address: 0x1ffda0)
(Ordinal: 2000, Address: 0x29fb80)
(Ordinal: 2001, Address: 0x2fcd90)
(Ordinal: 2002, Address: 0x164e80)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x18062ae28)

api-ms-win-core-atoms-l1-1-0.dll

FindAtomW (Address: 0x18062ae50)
GetAtomNameW (Address: 0x18062ae58)
GlobalAddAtomW (Address: 0x18062ae48)
GlobalDeleteAtom (Address: 0x18062ae40)
GlobalGetAtomNameW (Address: 0x18062ae38)

api-ms-win-core-datetime-l1-1-0.dll

GetDateFormatW (Address: 0x18062ae68)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18062ae80)
IsDebuggerPresent (Address: 0x18062ae88)
OutputDebugStringW (Address: 0x18062ae78)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18062ae98)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18062aea8)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18062aed0)
RaiseException (Address: 0x18062aec8)
SetErrorMode (Address: 0x18062aee0)
SetLastError (Address: 0x18062aec0)
SetUnhandledExceptionFilter (Address: 0x18062aeb8)
UnhandledExceptionFilter (Address: 0x18062aed8)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x18062af78)
CreateDirectoryW (Address: 0x18062af40)
CreateFileW (Address: 0x18062afe0)
DefineDosDeviceW (Address: 0x18062afc0)
DeleteFileW (Address: 0x18062b000)
FileTimeToLocalFileTime (Address: 0x18062af60)
FindClose (Address: 0x18062af48)
FindFirstFileExW (Address: 0x18062af38)
FindFirstFileW (Address: 0x18062af58)
FindFirstVolumeW (Address: 0x18062b010)
FindNextFileW (Address: 0x18062af50)
FindNextVolumeW (Address: 0x18062afe8)
FindVolumeClose (Address: 0x18062af18)
GetDiskFreeSpaceW (Address: 0x18062af30)
GetDriveTypeW (Address: 0x18062afd8)
GetFileAttributesExW (Address: 0x18062afa8)
GetFileAttributesW (Address: 0x18062af20)
GetFileInformationByHandle (Address: 0x18062afa0)
GetFileSize (Address: 0x18062af10)
GetFileSizeEx (Address: 0x18062af28)
GetFullPathNameW (Address: 0x18062aef8)
GetLogicalDrives (Address: 0x18062af70)
GetLongPathNameW (Address: 0x18062af68)
GetShortPathNameW (Address: 0x18062afb8)
GetTempFileNameW (Address: 0x18062af00)
GetVolumeInformationW (Address: 0x18062afc8)
GetVolumePathNameW (Address: 0x18062afd0)
LocalFileTimeToFileTime (Address: 0x18062aff8)
QueryDosDeviceW (Address: 0x18062af08)
ReadFile (Address: 0x18062afb0)
RemoveDirectoryW (Address: 0x18062aff0)
SetEndOfFile (Address: 0x18062aef0)
SetFileAttributesW (Address: 0x18062af88)
SetFileInformationByHandle (Address: 0x18062af98)
SetFilePointer (Address: 0x18062af80)
SetFileTime (Address: 0x18062af90)
WriteFile (Address: 0x18062b008)

api-ms-win-core-file-l1-2-0.dll

GetTempPathW (Address: 0x18062b020)
GetVolumeNameForVolumeMountPointW (Address: 0x18062b028)
GetVolumePathNamesForVolumeNameW (Address: 0x18062b030)

api-ms-win-core-file-l2-1-0.dll

GetFileInformationByHandleEx (Address: 0x18062b048)
MoveFileExW (Address: 0x18062b040)
ReplaceFileW (Address: 0x18062b050)

api-ms-win-core-file-l2-1-2.dll

CopyFileW (Address: 0x18062b060)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18062b078)
DuplicateHandle (Address: 0x18062b070)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18062b088)
HeapAlloc (Address: 0x18062b0a8)
HeapDestroy (Address: 0x18062b090)
HeapFree (Address: 0x18062b098)
HeapReAlloc (Address: 0x18062b0a0)

api-ms-win-core-heap-l2-1-0.dll

GlobalAlloc (Address: 0x18062b0b8)
GlobalFree (Address: 0x18062b0c8)
LocalAlloc (Address: 0x18062b0c0)
LocalFree (Address: 0x18062b0d0)
LocalReAlloc (Address: 0x18062b0d8)

api-ms-win-core-heap-obsolete-l1-1-0.dll

GlobalFlags (Address: 0x18062b0f8)
GlobalLock (Address: 0x18062b0f0)
GlobalReAlloc (Address: 0x18062b0e8)
GlobalSize (Address: 0x18062b108)
GlobalUnlock (Address: 0x18062b100)
LocalSize (Address: 0x18062b110)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x18062b130)
InterlockedPopEntrySList (Address: 0x18062b128)
InterlockedPushEntrySList (Address: 0x18062b120)

api-ms-win-core-io-l1-1-0.dll

CreateIoCompletionPort (Address: 0x18062b148)
DeviceIoControl (Address: 0x18062b150)
GetQueuedCompletionStatus (Address: 0x18062b140)

api-ms-win-core-io-l1-1-1.dll

CancelSynchronousIo (Address: 0x18062b160)

api-ms-win-core-job-l2-1-0.dll

AssignProcessToJobObject (Address: 0x18062b180)
CreateJobObjectW (Address: 0x18062b178)
SetInformationJobObject (Address: 0x18062b170)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

GetComputerNameW (Address: 0x18062b198)
GetSystemPowerStatus (Address: 0x18062b1c0)
MulDiv (Address: 0x18062b190)
RegisterWaitForSingleObject (Address: 0x18062b1b8)
SetVolumeLabelW (Address: 0x18062b1a8)
UnregisterWait (Address: 0x18062b1b0)
WTSGetActiveConsoleSessionId (Address: 0x18062b1a0)

api-ms-win-core-kernel32-legacy-l1-1-1.dll

PowerClearRequest (Address: 0x18062b1e0)
PowerCreateRequest (Address: 0x18062b1e8)
PowerSetRequest (Address: 0x18062b1d0)
VerifyVersionInfoW (Address: 0x18062b1d8)

api-ms-win-core-kernel32-legacy-l1-1-2.dll

GetBinaryTypeW (Address: 0x18062b1f8)

api-ms-win-core-kernel32-private-l1-1-0.dll

CheckElevation (Address: 0x18062b208)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x18062b240)
EnumResourceNamesExW (Address: 0x18062b278)
FindResourceExW (Address: 0x18062b228)
FindStringOrdinal (Address: 0x18062b258)
FreeLibrary (Address: 0x18062b288)
FreeResource (Address: 0x18062b290)
GetModuleFileNameA (Address: 0x18062b238)
GetModuleFileNameW (Address: 0x18062b280)
GetModuleHandleExA (Address: 0x18062b270)
GetModuleHandleExW (Address: 0x18062b248)
GetModuleHandleW (Address: 0x18062b2a8)
GetProcAddress (Address: 0x18062b260)
LoadLibraryExA (Address: 0x18062b268)
LoadLibraryExW (Address: 0x18062b2a0)
LoadResource (Address: 0x18062b250)
LoadStringA (Address: 0x18062b220)
LoadStringW (Address: 0x18062b230)
LockResource (Address: 0x18062b298)
SizeofResource (Address: 0x18062b218)

api-ms-win-core-libraryloader-l1-2-1.dll

FindResourceW (Address: 0x18062b2c0)
LoadLibraryW (Address: 0x18062b2b8)

api-ms-win-core-localization-l1-2-0.dll

FindNLSString (Address: 0x18062b350)
FindNLSStringEx (Address: 0x18062b300)
FormatMessageW (Address: 0x18062b330)
GetACP (Address: 0x18062b338)
GetLocaleInfoW (Address: 0x18062b340)
GetSystemDefaultLangID (Address: 0x18062b318)
GetSystemDefaultLCID (Address: 0x18062b308)
GetSystemPreferredUILanguages (Address: 0x18062b2d8)
GetThreadLocale (Address: 0x18062b348)
GetThreadUILanguage (Address: 0x18062b328)
GetUserDefaultLangID (Address: 0x18062b310)
GetUserPreferredUILanguages (Address: 0x18062b2e8)
IsValidLocaleName (Address: 0x18062b2f8)
LCMapStringEx (Address: 0x18062b358)
LCMapStringW (Address: 0x18062b320)
LocaleNameToLCID (Address: 0x18062b2d0)
ResolveLocaleName (Address: 0x18062b2e0)
VerLanguageNameW (Address: 0x18062b2f0)

api-ms-win-core-localization-l1-2-2.dll

LCIDToLocaleName (Address: 0x18062b368)

api-ms-win-core-localization-l2-1-0.dll

GetNumberFormatEx (Address: 0x18062b378)

api-ms-win-core-localization-obsolete-l1-2-0.dll

EnumUILanguagesW (Address: 0x18062b388)
GetNumberFormatW (Address: 0x18062b390)
GetUserDefaultUILanguage (Address: 0x18062b398)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x18062b3c8)
MapViewOfFile (Address: 0x18062b3b8)
OpenFileMappingW (Address: 0x18062b3a8)
ReadProcessMemory (Address: 0x18062b3f0)
UnmapViewOfFile (Address: 0x18062b3d0)
VirtualAlloc (Address: 0x18062b3c0)
VirtualFree (Address: 0x18062b3e8)
VirtualProtect (Address: 0x18062b3e0)
VirtualQuery (Address: 0x18062b3b0)
WriteProcessMemory (Address: 0x18062b3d8)

api-ms-win-core-memory-l1-1-1.dll

PrefetchVirtualMemory (Address: 0x18062b400)

api-ms-win-core-normalization-l1-1-0.dll

GetStringScripts (Address: 0x18062b410)

api-ms-win-core-path-l1-1-0.dll

PathAllocCanonicalize (Address: 0x18062b428)
PathAllocCombine (Address: 0x18062b458)
PathCchAddBackslash (Address: 0x18062b430)
PathCchAddExtension (Address: 0x18062b460)
PathCchAppend (Address: 0x18062b438)
PathCchAppendEx (Address: 0x18062b480)
PathCchCanonicalize (Address: 0x18062b498)
PathCchCombine (Address: 0x18062b450)
PathCchRemoveBackslash (Address: 0x18062b490)
PathCchRemoveExtension (Address: 0x18062b448)
PathCchRemoveFileSpec (Address: 0x18062b440)
PathCchRenameExtension (Address: 0x18062b470)
PathCchSkipRoot (Address: 0x18062b488)
PathCchStripPrefix (Address: 0x18062b478)
PathCchStripToRoot (Address: 0x18062b420)
PathIsUNCEx (Address: 0x18062b468)

api-ms-win-core-privateprofile-l1-1-0.dll

GetPrivateProfileSectionW (Address: 0x18062b4b0)
GetPrivateProfileStringW (Address: 0x18062b4a8)
WritePrivateProfileStringW (Address: 0x18062b4b8)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsA (Address: 0x18062b4d8)
ExpandEnvironmentStringsW (Address: 0x18062b4f0)
GetCommandLineW (Address: 0x18062b4f8)
GetCurrentDirectoryW (Address: 0x18062b4c8)
GetEnvironmentVariableW (Address: 0x18062b500)
SearchPathW (Address: 0x18062b4d0)
SetCurrentDirectoryW (Address: 0x18062b4e0)
SetEnvironmentVariableW (Address: 0x18062b4e8)

api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessW (Address: 0x18062b558)
CreateThread (Address: 0x18062b598)
DeleteProcThreadAttributeList (Address: 0x18062b590)
GetCurrentProcess (Address: 0x18062b540)
GetCurrentProcessId (Address: 0x18062b5e0)
GetCurrentThread (Address: 0x18062b5b0)
GetCurrentThreadId (Address: 0x18062b5a0)
GetExitCodeProcess (Address: 0x18062b588)
GetExitCodeThread (Address: 0x18062b580)
GetProcessId (Address: 0x18062b548)
GetThreadId (Address: 0x18062b5a8)
GetThreadPriority (Address: 0x18062b510)
InitializeProcThreadAttributeList (Address: 0x18062b578)
OpenProcessToken (Address: 0x18062b5c0)
OpenThread (Address: 0x18062b5d8)
OpenThreadToken (Address: 0x18062b5d0)
ProcessIdToSessionId (Address: 0x18062b530)
ResumeThread (Address: 0x18062b5b8)
SetPriorityClass (Address: 0x18062b570)
SetThreadPriority (Address: 0x18062b568)
SetThreadToken (Address: 0x18062b550)
TerminateProcess (Address: 0x18062b5c8)
TlsAlloc (Address: 0x18062b520)
TlsFree (Address: 0x18062b528)
TlsGetValue (Address: 0x18062b518)
TlsSetValue (Address: 0x18062b538)
UpdateProcThreadAttribute (Address: 0x18062b560)

api-ms-win-core-processthreads-l1-1-1.dll

FlushInstructionCache (Address: 0x18062b600)
IsProcessorFeaturePresent (Address: 0x18062b5f8)
OpenProcess (Address: 0x18062b5f0)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18062b610)
QueryPerformanceFrequency (Address: 0x18062b618)

api-ms-win-core-psapi-l1-1-0.dll

K32GetModuleFileNameExW (Address: 0x18062b630)
K32GetProcessImageFileNameW (Address: 0x18062b628)
QueryFullProcessImageNameW (Address: 0x18062b638)

api-ms-win-core-realtime-l1-1-0.dll

QueryUnbiasedInterruptTime (Address: 0x18062b648)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18062b6a8)
RegCreateKeyExW (Address: 0x18062b688)
RegDeleteKeyExW (Address: 0x18062b6b8)
RegDeleteTreeW (Address: 0x18062b670)
RegDeleteValueW (Address: 0x18062b698)
RegEnumKeyExW (Address: 0x18062b658)
RegEnumValueW (Address: 0x18062b6a0)
RegGetValueW (Address: 0x18062b690)
RegNotifyChangeKeyValue (Address: 0x18062b680)
RegOpenCurrentUser (Address: 0x18062b678)
RegOpenKeyExA (Address: 0x18062b6d8)
RegOpenKeyExW (Address: 0x18062b6c8)
RegQueryInfoKeyA (Address: 0x18062b6d0)
RegQueryInfoKeyW (Address: 0x18062b6c0)
RegQueryValueExA (Address: 0x18062b668)
RegQueryValueExW (Address: 0x18062b6b0)
RegSetValueExW (Address: 0x18062b660)

api-ms-win-core-registry-l1-1-1.dll

RegSetKeyValueW (Address: 0x18062b6e8)

api-ms-win-core-registryuserspecific-l1-1-0.dll

SHRegCloseUSKey (Address: 0x18062b720)
SHRegEnumUSKeyW (Address: 0x18062b6f8)
SHRegGetBoolUSValueW (Address: 0x18062b728)
SHRegGetUSValueW (Address: 0x18062b710)
SHRegOpenUSKeyA (Address: 0x18062b718)
SHRegOpenUSKeyW (Address: 0x18062b700)
SHRegQueryUSValueW (Address: 0x18062b708)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18062b738)
RtlLookupFunctionEntry (Address: 0x18062b740)
RtlVirtualUnwind (Address: 0x18062b748)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

IsCharSpaceW (Address: 0x18062b760)
PathAddBackslashW (Address: 0x18062b7f8)
PathAppendW (Address: 0x18062b7e0)
PathCombineW (Address: 0x18062b788)
PathCommonPrefixW (Address: 0x18062b780)
PathFileExistsW (Address: 0x18062b820)
PathFindExtensionW (Address: 0x18062b7f0)
PathFindFileNameW (Address: 0x18062b810)
PathFindNextComponentW (Address: 0x18062b850)
PathGetArgsW (Address: 0x18062b838)
PathGetDriveNumberW (Address: 0x18062b7e8)
PathIsFileSpecW (Address: 0x18062b858)
PathIsPrefixW (Address: 0x18062b7a0)
PathIsRelativeW (Address: 0x18062b758)
PathIsRootW (Address: 0x18062b818)
PathIsSameRootW (Address: 0x18062b770)
PathIsUNCServerShareW (Address: 0x18062b7b8)
PathIsUNCServerW (Address: 0x18062b7b0)
PathIsUNCW (Address: 0x18062b7d8)
PathIsValidCharW (Address: 0x18062b768)
PathMatchSpecExW (Address: 0x18062b800)
PathMatchSpecW (Address: 0x18062b830)
PathParseIconLocationW (Address: 0x18062b808)
PathQuoteSpacesW (Address: 0x18062b7c8)
PathRemoveBackslashW (Address: 0x18062b790)
PathRemoveBlanksW (Address: 0x18062b7d0)
PathRemoveExtensionW (Address: 0x18062b798)
PathRemoveFileSpecW (Address: 0x18062b828)
PathSkipRootW (Address: 0x18062b848)
PathStripToRootW (Address: 0x18062b840)
PathUnExpandEnvStringsW (Address: 0x18062b7c0)
PathUnquoteSpacesW (Address: 0x18062b7a8)
SHExpandEnvironmentStringsW (Address: 0x18062b778)

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll

QISearch (Address: 0x18062b8c0)
StrChrA (Address: 0x18062b868)
StrChrIA (Address: 0x18062b958)
StrChrIW (Address: 0x18062b980)
StrChrW (Address: 0x18062b978)
StrCmpCW (Address: 0x18062b8f0)
StrCmpICA (Address: 0x18062b8d8)
StrCmpICW (Address: 0x18062b8b8)
StrCmpIW (Address: 0x18062b8e0)
StrCmpLogicalW (Address: 0x18062b908)
StrCmpNA (Address: 0x18062b970)
StrCmpNCW (Address: 0x18062b938)
StrCmpNIA (Address: 0x18062b968)
StrCmpNICW (Address: 0x18062b930)
StrCmpNIW (Address: 0x18062b8d0)
StrCmpNW (Address: 0x18062b8c8)
StrCmpW (Address: 0x18062b918)
StrCSpnW (Address: 0x18062b940)
StrDupA (Address: 0x18062b960)
StrDupW (Address: 0x18062b950)
StrPBrkW (Address: 0x18062b928)
StrRChrA (Address: 0x18062b8b0)
StrRChrIA (Address: 0x18062b898)
StrRChrIW (Address: 0x18062b880)
StrRChrW (Address: 0x18062b910)
StrRStrIA (Address: 0x18062b870)
StrRStrIW (Address: 0x18062b878)
StrSpnW (Address: 0x18062b920)
StrStrA (Address: 0x18062b888)
StrStrIA (Address: 0x18062b890)
StrStrIW (Address: 0x18062b8a0)
StrStrW (Address: 0x18062b8a8)
StrToIntA (Address: 0x18062b8f8)
StrToIntExW (Address: 0x18062b948)
StrToIntW (Address: 0x18062b8e8)
StrTrimW (Address: 0x18062b900)

api-ms-win-core-sidebyside-l1-1-0.dll

ActivateActCtx (Address: 0x18062b9a8)
CreateActCtxW (Address: 0x18062b9b0)
DeactivateActCtx (Address: 0x18062b9a0)
QueryActCtxW (Address: 0x18062b998)
ReleaseActCtx (Address: 0x18062b990)

api-ms-win-core-string-l1-1-0.dll

CompareStringEx (Address: 0x18062b9e0)
CompareStringOrdinal (Address: 0x18062b9c0)
CompareStringW (Address: 0x18062b9c8)
GetStringTypeExW (Address: 0x18062b9d8)
GetStringTypeW (Address: 0x18062b9e8)
MultiByteToWideChar (Address: 0x18062b9d0)
WideCharToMultiByte (Address: 0x18062b9f0)

api-ms-win-core-string-l2-1-0.dll

CharLowerBuffW (Address: 0x18062ba28)
CharLowerW (Address: 0x18062ba08)
CharNextW (Address: 0x18062ba18)
CharPrevW (Address: 0x18062ba00)
CharUpperBuffW (Address: 0x18062ba20)
CharUpperW (Address: 0x18062ba30)
IsCharAlphaW (Address: 0x18062ba10)

api-ms-win-core-string-l2-1-1.dll

SHLoadIndirectString (Address: 0x18062ba40)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpA (Address: 0x18062ba58)
lstrcmpiA (Address: 0x18062ba78)
lstrcmpiW (Address: 0x18062ba68)
lstrcmpW (Address: 0x18062ba50)
lstrlenA (Address: 0x18062ba60)
lstrlenW (Address: 0x18062ba70)

api-ms-win-core-stringansi-l1-1-0.dll

CharNextA (Address: 0x18062ba88)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18062bac0)
AcquireSRWLockShared (Address: 0x18062baa0)
CreateEventExW (Address: 0x18062bb40)
CreateEventW (Address: 0x18062bb70)
CreateMutexExW (Address: 0x18062baa8)
CreateMutexW (Address: 0x18062bb68)
CreateSemaphoreExW (Address: 0x18062bb48)
DeleteCriticalSection (Address: 0x18062baf8)
EnterCriticalSection (Address: 0x18062bb30)
InitializeCriticalSection (Address: 0x18062bad8)
InitializeCriticalSectionAndSpinCount (Address: 0x18062bb58)
InitializeCriticalSectionEx (Address: 0x18062bb10)
InitializeSRWLock (Address: 0x18062bb08)
LeaveCriticalSection (Address: 0x18062bb18)
OpenEventW (Address: 0x18062bb50)
OpenMutexW (Address: 0x18062bad0)
OpenSemaphoreW (Address: 0x18062bab0)
ReleaseMutex (Address: 0x18062baf0)
ReleaseSemaphore (Address: 0x18062bb28)
ReleaseSRWLockExclusive (Address: 0x18062bae0)
ReleaseSRWLockShared (Address: 0x18062ba98)
ResetEvent (Address: 0x18062bac8)
SetEvent (Address: 0x18062bb38)
TryAcquireSRWLockExclusive (Address: 0x18062bb60)
TryAcquireSRWLockShared (Address: 0x18062bae8)
TryEnterCriticalSection (Address: 0x18062bb78)
WaitForMultipleObjectsEx (Address: 0x18062bb20)
WaitForSingleObject (Address: 0x18062bb00)
WaitForSingleObjectEx (Address: 0x18062bab8)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x18062bba0)
InitOnceComplete (Address: 0x18062bb90)
InitOnceExecuteOnce (Address: 0x18062bb98)
Sleep (Address: 0x18062bb88)

api-ms-win-core-sysinfo-l1-1-0.dll

GetComputerNameExW (Address: 0x18062bbf0)
GetLocalTime (Address: 0x18062bbe8)
GetSystemDirectoryW (Address: 0x18062bbc8)
GetSystemInfo (Address: 0x18062bbb8)
GetSystemTime (Address: 0x18062bbb0)
GetSystemTimeAsFileTime (Address: 0x18062bbd0)
GetSystemWindowsDirectoryW (Address: 0x18062bbf8)
GetTickCount (Address: 0x18062bbe0)
GetTickCount64 (Address: 0x18062bc08)
GetVersionExW (Address: 0x18062bbd8)
GetWindowsDirectoryW (Address: 0x18062bc00)
GlobalMemoryStatusEx (Address: 0x18062bbc0)

api-ms-win-core-sysinfo-l1-2-0.dll

GetNativeSystemInfo (Address: 0x18062bc30)
GetProductInfo (Address: 0x18062bc20)
GetSystemTimePreciseAsFileTime (Address: 0x18062bc18)
VerSetConditionMask (Address: 0x18062bc28)

api-ms-win-core-sysinfo-l1-2-3.dll

GetIntegratedDisplaySize (Address: 0x18062bc40)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x18062bca0)
CloseThreadpoolWait (Address: 0x18062bc60)
CloseThreadpoolWork (Address: 0x18062bc98)
CreateThreadpoolTimer (Address: 0x18062bc70)
CreateThreadpoolWait (Address: 0x18062bc50)
CreateThreadpoolWork (Address: 0x18062bc88)
IsThreadpoolTimerSet (Address: 0x18062bca8)
SetThreadpoolTimer (Address: 0x18062bc80)
SetThreadpoolTimerEx (Address: 0x18062bcb0)
SetThreadpoolWait (Address: 0x18062bc90)
SubmitThreadpoolWork (Address: 0x18062bc78)
TrySubmitThreadpoolCallback (Address: 0x18062bcb8)
WaitForThreadpoolTimerCallbacks (Address: 0x18062bc68)
WaitForThreadpoolWaitCallbacks (Address: 0x18062bc58)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

CreateTimerQueueTimer (Address: 0x18062bcd8)
DeleteTimerQueueTimer (Address: 0x18062bcd0)
QueueUserWorkItem (Address: 0x18062bce0)
UnregisterWaitEx (Address: 0x18062bcc8)

api-ms-win-core-timezone-l1-1-0.dll

FileTimeToSystemTime (Address: 0x18062bd10)
GetTimeZoneInformationForYear (Address: 0x18062bd00)
SystemTimeToFileTime (Address: 0x18062bd08)
SystemTimeToTzSpecificLocalTime (Address: 0x18062bcf0)
TzSpecificLocalTimeToSystemTime (Address: 0x18062bcf8)

api-ms-win-core-url-l1-1-0.dll

HashData (Address: 0x18062bd40)
ParseURLW (Address: 0x18062bd38)
PathCreateFromUrlAlloc (Address: 0x18062bd90)
PathCreateFromUrlW (Address: 0x18062bd30)
PathIsURLW (Address: 0x18062bd20)
UrlApplySchemeW (Address: 0x18062bd78)
UrlCanonicalizeW (Address: 0x18062bd50)
UrlCompareW (Address: 0x18062bd68)
UrlCreateFromPathW (Address: 0x18062bd70)
UrlEscapeW (Address: 0x18062bd60)
UrlFixupW (Address: 0x18062bd58)
UrlGetPartW (Address: 0x18062bd88)
UrlIsW (Address: 0x18062bd28)
UrlUnescapeA (Address: 0x18062bd48)
UrlUnescapeW (Address: 0x18062bd80)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x18062bda0)
EncodePointer (Address: 0x18062bda8)

api-ms-win-core-version-l1-1-0.dll

GetFileVersionInfoExW (Address: 0x18062bdb8)
GetFileVersionInfoSizeExW (Address: 0x18062bdc0)
VerQueryValueW (Address: 0x18062bdc8)

api-ms-win-core-version-l1-1-1.dll

GetFileVersionInfoSizeW (Address: 0x18062bde0)
GetFileVersionInfoW (Address: 0x18062bdd8)

api-ms-win-core-wow64-l1-1-0.dll

Wow64DisableWow64FsRedirection (Address: 0x18062bdf0)
Wow64RevertWow64FsRedirection (Address: 0x18062bdf8)

api-ms-win-core-wow64-l1-1-1.dll

GetSystemWow64DirectoryW (Address: 0x18062be10)
IsWow64Process2 (Address: 0x18062be08)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x18062bf70)
__current_exception (Address: 0x18062bf18)
__current_exception_context (Address: 0x18062bf20)
__CxxFrameHandler3 (Address: 0x18062bf10)
__CxxFrameHandler4 (Address: 0x18062c078)
__std_terminate (Address: 0x18062c070)
_CxxThrowException (Address: 0x18062c088)
_o___std_exception_copy (Address: 0x18062c060)
_o___std_exception_destroy (Address: 0x18062c058)
_o___std_type_info_destroy_list (Address: 0x18062c050)
_o___stdio_common_vsnprintf_s (Address: 0x18062c048)
_o___stdio_common_vsprintf (Address: 0x18062c040)
_o___stdio_common_vsprintf_s (Address: 0x18062c038)
_o___stdio_common_vswprintf (Address: 0x18062c030)
_o___stdio_common_vswscanf (Address: 0x18062c028)
_o__beginthreadex (Address: 0x18062c020)
_o__cexit (Address: 0x18062c018)
_o__configure_narrow_argv (Address: 0x18062c010)
_o__crt_atexit (Address: 0x18062c008)
_o__difftime64 (Address: 0x18062c000)
_o__errno (Address: 0x18062bff8)
_o__execute_onexit_table (Address: 0x18062bff0)
_o__get_errno (Address: 0x18062bfe8)
_o__initialize_narrow_environment (Address: 0x18062bfe0)
_o__initialize_onexit_table (Address: 0x18062bfd8)
_o__invalid_parameter_noinfo (Address: 0x18062bfd0)
_o__invalid_parameter_noinfo_noreturn (Address: 0x18062bfc8)
_o__itow (Address: 0x18062bfc0)
_o__purecall (Address: 0x18062bfa0)
_o__register_onexit_function (Address: 0x18062bf98)
_o__resetstkoflw (Address: 0x18062bf90)
_o__seh_filter_dll (Address: 0x18062c068)
_o__set_errno (Address: 0x18062bf88)
_o__strnicmp (Address: 0x18062bf78)
_o__ui64tow_s (Address: 0x18062bf68)
_o__wcsicmp (Address: 0x18062bf60)
_o__wcslwr (Address: 0x18062bf58)
_o__wcsnicmp (Address: 0x18062bf50)
_o__wcstoui64 (Address: 0x18062bf48)
_o__wtoi (Address: 0x18062bf40)
_o_abort (Address: 0x18062bf38)
_o_ceil (Address: 0x18062bf30)
_o_ceilf (Address: 0x18062bf28)
_o_expf (Address: 0x18062bfb8)
_o_floor (Address: 0x18062bfb0)
_o_floorf (Address: 0x18062bfa8)
_o_free (Address: 0x18062bf80)
_o_isdigit (Address: 0x18062be20)
_o_iswprint (Address: 0x18062be28)
_o_iswspace (Address: 0x18062be30)
_o_log (Address: 0x18062be38)
_o_logf (Address: 0x18062be40)
_o_malloc (Address: 0x18062be48)
_o_pow (Address: 0x18062be58)
_o_powf (Address: 0x18062be60)
_o_qsort (Address: 0x18062be68)
_o_rand (Address: 0x18062be70)
_o_realloc (Address: 0x18062be78)
_o_sqrt (Address: 0x18062be80)
_o_sqrtf (Address: 0x18062be88)
_o_srand (Address: 0x18062be90)
_o_strncpy_s (Address: 0x18062be98)
_o_strtol (Address: 0x18062bea0)
_o_strtoul (Address: 0x18062bea8)
_o_terminate (Address: 0x18062beb0)
_o_towlower (Address: 0x18062beb8)
_o_wcscat_s (Address: 0x18062bec0)
_o_wcscpy_s (Address: 0x18062bec8)
_o_wcsncpy_s (Address: 0x18062bed0)
_o_wcstok_s (Address: 0x18062bee0)
_o_wcstol (Address: 0x18062bee8)
_o_wcstoul (Address: 0x18062bef0)
_o_wcstoull (Address: 0x18062bef8)
memcmp (Address: 0x18062c090)
memcpy (Address: 0x18062c098)
memmove (Address: 0x18062bed8)
strchr (Address: 0x18062bf00)
wcschr (Address: 0x18062c080)
wcsrchr (Address: 0x18062bf08)
wcsstr (Address: 0x18062be50)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x18062c0a8)
_initterm_e (Address: 0x18062c0b0)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x18062c0f8)
strcmp (Address: 0x18062c0c0)
strncmp (Address: 0x18062c0d8)
wcscmp (Address: 0x18062c0d0)
wcscspn (Address: 0x18062c0c8)
wcsncmp (Address: 0x18062c0e0)
wcspbrk (Address: 0x18062c0f0)
wcsspn (Address: 0x18062c0e8)

api-ms-win-crt-time-l1-1-0.dll

_time64 (Address: 0x18062c108)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x18062c138)
GetTraceEnableLevel (Address: 0x18062c128)
GetTraceLoggerHandle (Address: 0x18062c130)
RegisterTraceGuidsW (Address: 0x18062c120)
UnregisterTraceGuids (Address: 0x18062c118)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x18062c150)
EventRegister (Address: 0x18062c160)
EventSetInformation (Address: 0x18062c158)
EventUnregister (Address: 0x18062c168)
EventWriteTransfer (Address: 0x18062c148)

api-ms-win-security-base-l1-1-0.dll

AccessCheck (Address: 0x18062c1c0)
AddAccessAllowedAceEx (Address: 0x18062c1e8)
AddAccessDeniedAceEx (Address: 0x18062c260)
AddAce (Address: 0x18062c1f0)
AdjustTokenPrivileges (Address: 0x18062c248)
CheckTokenMembership (Address: 0x18062c228)
CopySid (Address: 0x18062c210)
CreateWellKnownSid (Address: 0x18062c230)
DeleteAce (Address: 0x18062c238)
DuplicateToken (Address: 0x18062c1b8)
DuplicateTokenEx (Address: 0x18062c208)
EqualSid (Address: 0x18062c1d0)
GetAce (Address: 0x18062c1f8)
GetAclInformation (Address: 0x18062c200)
GetFileSecurityW (Address: 0x18062c258)
GetLengthSid (Address: 0x18062c218)
GetSecurityDescriptorControl (Address: 0x18062c1b0)
GetSidIdentifierAuthority (Address: 0x18062c190)
GetSidLengthRequired (Address: 0x18062c180)
GetSidSubAuthority (Address: 0x18062c198)
GetSidSubAuthorityCount (Address: 0x18062c178)
GetTokenInformation (Address: 0x18062c250)
ImpersonateSelf (Address: 0x18062c1a0)
InitializeAcl (Address: 0x18062c1c8)
InitializeSid (Address: 0x18062c188)
IsValidSid (Address: 0x18062c220)
IsWellKnownSid (Address: 0x18062c268)
RevertToSelf (Address: 0x18062c1a8)
SetFileSecurityW (Address: 0x18062c1d8)
SetSecurityDescriptorOwner (Address: 0x18062c1e0)
SetTokenInformation (Address: 0x18062c240)

api-ms-win-stateseparation-helpers-l1-1-0.dll

GetPersistedRegistryLocationW (Address: 0x18062c278)

GDI32.dll

BitBlt (Address: 0x18062a280)
CombineRgn (Address: 0x18062a3e0)
CreateCompatibleBitmap (Address: 0x18062a338)
CreateCompatibleDC (Address: 0x18062a258)
CreateDCW (Address: 0x18062a270)
CreateDIBSection (Address: 0x18062a250)
CreateFontIndirectW (Address: 0x18062a300)
CreateFontW (Address: 0x18062a418)
CreatePen (Address: 0x18062a350)
CreatePolygonRgn (Address: 0x18062a398)
CreateRectRgn (Address: 0x18062a358)
CreateRectRgnIndirect (Address: 0x18062a3c8)
CreateSolidBrush (Address: 0x18062a290)
DeleteDC (Address: 0x18062a268)
DeleteMetaFile (Address: 0x18062a2f8)
DeleteObject (Address: 0x18062a228)
ExcludeClipRect (Address: 0x18062a248)
ExtSelectClipRgn (Address: 0x18062a3b8)
ExtTextOutW (Address: 0x18062a408)
GdiAlphaBlend (Address: 0x18062a278)
GdiTransparentBlt (Address: 0x18062a2b0)
GetClipBox (Address: 0x18062a310)
GetClipRgn (Address: 0x18062a360)
GetCurrentObject (Address: 0x18062a348)
GetDeviceCaps (Address: 0x18062a240)
GetDIBColorTable (Address: 0x18062a410)
GetDIBits (Address: 0x18062a2a0)
GetLayout (Address: 0x18062a438)
GetObjectType (Address: 0x18062a400)
GetObjectW (Address: 0x18062a288)
GetPixel (Address: 0x18062a420)
GetRegionData (Address: 0x18062a3f0)
GetRgnBox (Address: 0x18062a3e8)
GetStockObject (Address: 0x18062a220)
GetTextAlign (Address: 0x18062a3a0)
GetTextColor (Address: 0x18062a318)
GetTextExtentPoint32A (Address: 0x18062a428)
GetTextExtentPoint32W (Address: 0x18062a320)
GetTextExtentPointW (Address: 0x18062a230)
GetTextMetricsW (Address: 0x18062a330)
GetViewportOrgEx (Address: 0x18062a308)
GetWindowOrgEx (Address: 0x18062a3f8)
IntersectClipRect (Address: 0x18062a368)
LineTo (Address: 0x18062a390)
LPtoDP (Address: 0x18062a2d0)
MoveToEx (Address: 0x18062a388)
OffsetWindowOrgEx (Address: 0x18062a3b0)
PatBlt (Address: 0x18062a380)
PlayMetaFile (Address: 0x18062a2f0)
Rectangle (Address: 0x18062a2e0)
RestoreDC (Address: 0x18062a3d0)
SaveDC (Address: 0x18062a3d8)
SelectClipRgn (Address: 0x18062a370)
SelectObject (Address: 0x18062a260)
SetBkColor (Address: 0x18062a210)
SetBkMode (Address: 0x18062a298)
SetDCBrushColor (Address: 0x18062a3c0)
SetLayout (Address: 0x18062a218)
SetMapMode (Address: 0x18062a2b8)
SetMetaFileBitsEx (Address: 0x18062a2d8)
SetStretchBltMode (Address: 0x18062a378)
SetTextAlign (Address: 0x18062a340)
SetTextColor (Address: 0x18062a238)
SetViewportExtEx (Address: 0x18062a2c8)
SetViewportOrgEx (Address: 0x18062a2e8)
SetWindowExtEx (Address: 0x18062a2c0)
SetWindowOrgEx (Address: 0x18062a3a8)
StretchBlt (Address: 0x18062a2a8)
StretchDIBits (Address: 0x18062a328)
TextOutA (Address: 0x18062a430)

KERNELBASE.dll

ClosePackageInfo (Address: 0x18062a458)
CloseState (Address: 0x18062a488)
GetCurrentPackageInfo (Address: 0x18062a4d0)
GetEffectivePackageStatusForUser (Address: 0x18062a478)
GetPackageFullName (Address: 0x18062a4c0)
GetPackageInfo (Address: 0x18062a450)
GetPackagesByPackageFamily (Address: 0x18062a4c8)
GetStagedPackagePathByFullName2 (Address: 0x18062a4b8)
GetStateFolder (Address: 0x18062a490)
GetSystemAppDataKey (Address: 0x18062a460)
IsMrtResourceRedirectionEnabled (Address: 0x18062a470)
NotifyRedirectedStringChange (Address: 0x18062a468)
OpenPackageInfoByFullName (Address: 0x18062a448)
OpenState (Address: 0x18062a4a0)
OpenStateExplicit (Address: 0x18062a498)
PackageNameAndPublisherIdFromFamilyName (Address: 0x18062a4a8)
ParseApplicationUserModelId (Address: 0x18062a4b0)
SHLoadIndirectStringInternal (Address: 0x18062a480)

msvcp_win.dll

_Cnd_do_broadcast_at_thread_exit (Address: 0x18062c448)
_Thrd_id (Address: 0x18062c450)
_Thrd_join (Address: 0x18062c440)
_Thrd_yield (Address: 0x18062c3e0)
_Xtime_get_ticks (Address: 0x18062c430)
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z (Address: 0x18062c3f0)
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z (Address: 0x18062c400)
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z (Address: 0x18062c3d8)
?__ExceptionPtrCreate@@YAXPEAX@Z (Address: 0x18062c3f8)
?__ExceptionPtrCurrentException@@YAXPEAX@Z (Address: 0x18062c3e8)
?__ExceptionPtrDestroy@@YAXPEAX@Z (Address: 0x18062c408)
?__ExceptionPtrRethrow@@YAXPEBX@Z (Address: 0x18062c410)
?__ExceptionPtrToBool@@YA_NPEBX@Z (Address: 0x18062c418)
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ (Address: 0x18062c348)
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ (Address: 0x18062c388)
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ (Address: 0x18062c3a0)
?_Throw_Cpp_error@std@@YAXH@Z (Address: 0x18062c350)
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ (Address: 0x18062c368)
?_Xbad_function_call@std@@YAXXZ (Address: 0x18062c438)
?_Xinvalid_argument@std@@YAXPEBD@Z (Address: 0x18062c420)
?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18062c3b8)
?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x18062c428)
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ (Address: 0x18062c290)
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z (Address: 0x18062c288)
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ (Address: 0x18062c2d0)
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x18062c340)
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x18062c318)
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x18062c320)
?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x18062c2c0)
?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x18062c2b8)
?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x18062c2a0)
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGXZ (Address: 0x18062c3c0)
?flags@ios_base@std@@QEBAHXZ (Address: 0x18062c398)
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ (Address: 0x18062c360)
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z (Address: 0x18062c328)
?good@ios_base@std@@QEBA_NXZ (Address: 0x18062c378)
?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x18062c338)
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x18062c2e0)
?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x18062c2d8)
?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x18062c330)
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ (Address: 0x18062c3b0)
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z (Address: 0x18062c2e8)
?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z (Address: 0x18062c2b0)
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG0@Z (Address: 0x18062c2c8)
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z (Address: 0x18062c298)
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z (Address: 0x18062c3d0)
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ (Address: 0x18062c2f8)
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z (Address: 0x18062c3a8)
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z (Address: 0x18062c308)
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ (Address: 0x18062c380)
?tellp@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ (Address: 0x18062c2a8)
?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ (Address: 0x18062c358)
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ (Address: 0x18062c310)
?uncaught_exception@std@@YA_NXZ (Address: 0x18062c370)
?width@ios_base@std@@QEAA_J_J@Z (Address: 0x18062c3c8)
?width@ios_base@std@@QEBA_JXZ (Address: 0x18062c390)
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z (Address: 0x18062c2f0)
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z (Address: 0x18062c300)

ntdll.dll

EtwEventActivityIdControl (Address: 0x18062c550)
EtwEventEnabled (Address: 0x18062c558)
EtwEventRegister (Address: 0x18062c548)
EtwEventSetInformation (Address: 0x18062c530)
EtwEventUnregister (Address: 0x18062c540)
EtwEventWrite (Address: 0x18062c560)
EtwEventWriteTransfer (Address: 0x18062c538)
EtwGetTraceEnableFlags (Address: 0x18062c5b0)
EtwGetTraceEnableLevel (Address: 0x18062c5a8)
EtwGetTraceLoggerHandle (Address: 0x18062c5a0)
EtwLogTraceEvent (Address: 0x18062c628)
EtwRegisterTraceGuidsW (Address: 0x18062c5b8)
EtwTraceMessage (Address: 0x18062c568)
EtwUnregisterTraceGuids (Address: 0x18062c5c0)
NtClose (Address: 0x18062c4c0)
NtCreateFile (Address: 0x18062c4b8)
NtFsControlFile (Address: 0x18062c4c8)
NtMapViewOfSection (Address: 0x18062c670)
NtOpenFile (Address: 0x18062c4e0)
NtOpenProcessToken (Address: 0x18062c5d0)
NtOpenThreadToken (Address: 0x18062c620)
NtPowerInformation (Address: 0x18062c598)
NtQueryInformationFile (Address: 0x18062c4a8)
NtQueryInformationProcess (Address: 0x18062c588)
NtQueryInformationThread (Address: 0x18062c630)
NtQueryInformationToken (Address: 0x18062c5c8)
NtQueryKey (Address: 0x18062c638)
NtQueryObject (Address: 0x18062c640)
NtQuerySystemInformation (Address: 0x18062c698)
NtQueryWnfStateData (Address: 0x18062c570)
NtSetInformationFile (Address: 0x18062c4d8)
NtSetInformationToken (Address: 0x18062c658)
NtUnmapViewOfSection (Address: 0x18062c660)
RtlAcquireResourceExclusive (Address: 0x18062c488)
RtlCheckRegistryKey (Address: 0x18062c690)
RtlCreateEnvironment (Address: 0x18062c518)
RtlDeleteResource (Address: 0x18062c468)
RtlDeriveCapabilitySidsFromName (Address: 0x18062c5f0)
RtlDestroyEnvironment (Address: 0x18062c528)
RtlDllShutdownInProgress (Address: 0x18062c618)
RtlDosPathNameToNtPathName_U_WithStatus (Address: 0x18062c4e8)
RtlExpandEnvironmentStrings_U (Address: 0x18062c510)
RtlFreeHeap (Address: 0x18062c4f0)
RtlGetNtProductType (Address: 0x18062c5e0)
RtlGetNtSystemRoot (Address: 0x18062c680)
RtlHashUnicodeString (Address: 0x18062c678)
RtlImageNtHeaderEx (Address: 0x18062c668)
RtlInitializeResource (Address: 0x18062c470)
RtlInitUnicodeString (Address: 0x18062c498)
RtlInitUnicodeStringEx (Address: 0x18062c4f8)
RtlIsNonEmptyDirectoryReparsePointAllowed (Address: 0x18062c610)
RtlIsPartialPlaceholder (Address: 0x18062c6a0)
RtlMapGenericMask (Address: 0x18062c5d8)
RtlNtStatusToDosError (Address: 0x18062c4b0)
RtlNtStatusToDosErrorNoTeb (Address: 0x18062c648)
RtlPrefixString (Address: 0x18062c4a0)
RtlPublishWnfStateData (Address: 0x18062c578)
RtlQueryEnvironmentVariable_U (Address: 0x18062c500)
RtlQueryRegistryValuesEx (Address: 0x18062c688)
RtlQueryResourcePolicy (Address: 0x18062c490)
RtlQueryWnfStateData (Address: 0x18062c650)
RtlRandomEx (Address: 0x18062c600)
RtlReleaseResource (Address: 0x18062c460)
RtlSetCurrentEnvironment (Address: 0x18062c520)
RtlSetEnvironmentVariable (Address: 0x18062c508)
RtlSubscribeWnfStateChangeNotification (Address: 0x18062c480)
RtlUnicodeStringToOemString (Address: 0x18062c4d0)
RtlUnsubscribeWnfStateChangeNotification (Address: 0x18062c478)
ShipAssert (Address: 0x18062c608)
WinSqmAddToStream (Address: 0x18062c5e8)
WinSqmAddToStreamEx (Address: 0x18062c5f8)
WinSqmIncrementDWORD (Address: 0x18062c580)
WinSqmSetDWORD (Address: 0x18062c590)
ZwQueryWnfStateData (Address: 0x18062c6a8)

USER32.dll

(Address: 0x18062a780)
(Address: 0x18062a8c8)
(Address: 0x18062aa88)
(Address: 0x18062a550)
(Address: 0x18062a608)
(Address: 0x18062a670)
ActivateKeyboardLayout (Address: 0x18062a6e0)
AdjustWindowRect (Address: 0x18062ae10)
AdjustWindowRectEx (Address: 0x18062a938)
AdjustWindowRectExForDpi (Address: 0x18062a768)
AllowSetForegroundWindow (Address: 0x18062ab88)
AnimateWindow (Address: 0x18062a4f8)
AppendMenuW (Address: 0x18062a8b8)
AreDpiAwarenessContextsEqual (Address: 0x18062ae08)
AttachThreadInput (Address: 0x18062a950)
BeginDeferWindowPos (Address: 0x18062a8e8)
BeginPaint (Address: 0x18062a9a0)
BroadcastSystemMessageW (Address: 0x18062a7f0)
CallNextHookEx (Address: 0x18062a740)
CallWindowProcW (Address: 0x18062a7b8)
ChangeClipboardChain (Address: 0x18062a898)
ChangeWindowMessageFilterEx (Address: 0x18062aa10)
CheckDlgButton (Address: 0x18062ace8)
CheckMenuItem (Address: 0x18062a8a8)
CheckMenuRadioItem (Address: 0x18062a8b0)
CheckRadioButton (Address: 0x18062a628)
ChildWindowFromPoint (Address: 0x18062a508)
ClientToScreen (Address: 0x18062a640)
CloseClipboard (Address: 0x18062aa00)
CloseDesktop (Address: 0x18062a830)
CloseGestureInfoHandle (Address: 0x18062a880)
CopyAcceleratorTableW (Address: 0x18062a920)
CopyIcon (Address: 0x18062ab30)
CopyImage (Address: 0x18062a990)
CopyRect (Address: 0x18062a728)
CountClipboardFormats (Address: 0x18062abc0)
CreateAcceleratorTableW (Address: 0x18062a638)
CreateDialogIndirectParamW (Address: 0x18062a510)
CreateDialogParamW (Address: 0x18062a518)
CreateMenu (Address: 0x18062a858)
CreatePopupMenu (Address: 0x18062ad08)
CreateWindowExW (Address: 0x18062aa30)
CreateWindowInBand (Address: 0x18062a840)
CreateWindowIndirect (Address: 0x18062a708)
DdeCreateDataHandle (Address: 0x18062a5c8)
DdeCreateStringHandleW (Address: 0x18062a5c0)
DdeDisconnect (Address: 0x18062a5a8)
DdeFreeStringHandle (Address: 0x18062a5b8)
DdeGetData (Address: 0x18062a5d8)
DdeGetLastError (Address: 0x18062a5d0)
DdeInitializeW (Address: 0x18062a590)
DdeNameService (Address: 0x18062a5a0)
DdeQueryConvInfo (Address: 0x18062a5e0)
DdeQueryStringW (Address: 0x18062a5b0)
DdeUninitialize (Address: 0x18062a598)
DeferWindowPos (Address: 0x18062a910)
DefWindowProcA (Address: 0x18062a958)
DefWindowProcW (Address: 0x18062ac58)
DeleteMenu (Address: 0x18062acf8)
DeregisterShellHookWindow (Address: 0x18062a970)
DestroyAcceleratorTable (Address: 0x18062a918)
DestroyIcon (Address: 0x18062ad38)
DestroyMenu (Address: 0x18062ad00)
DestroyWindow (Address: 0x18062ac20)
DialogBoxIndirectParamW (Address: 0x18062a520)
DialogBoxParamW (Address: 0x18062a7d8)
DispatchMessageW (Address: 0x18062ad20)
DisplayConfigGetDeviceInfo (Address: 0x18062a578)
DrawEdge (Address: 0x18062a890)
DrawFocusRect (Address: 0x18062ad40)
DrawIcon (Address: 0x18062ad48)
DrawIconEx (Address: 0x18062adf8)
DrawTextExW (Address: 0x18062a658)
DrawTextW (Address: 0x18062ab60)
EmptyClipboard (Address: 0x18062a9d8)
EnableMenuItem (Address: 0x18062abd8)
EnableWindow (Address: 0x18062ac88)
EndDeferWindowPos (Address: 0x18062a8e0)
EndDialog (Address: 0x18062ad58)
EndMenu (Address: 0x18062a860)
EndPaint (Address: 0x18062a998)
EnumChildWindows (Address: 0x18062a810)
EnumDisplayDevicesW (Address: 0x18062aab8)
EnumDisplayMonitors (Address: 0x18062a618)
EnumDisplaySettingsW (Address: 0x18062a5f0)
EnumPropsExW (Address: 0x18062aa20)
EnumWindows (Address: 0x18062ab38)
EqualRect (Address: 0x18062aa50)
ExitWindowsEx (Address: 0x18062ac08)
FillRect (Address: 0x18062ab70)
FindWindowExW (Address: 0x18062a6e8)
FindWindowW (Address: 0x18062ac68)
GetAncestor (Address: 0x18062ac80)
GetAsyncKeyState (Address: 0x18062aa80)
GetCapture (Address: 0x18062a6c8)
GetClassInfoExW (Address: 0x18062a7b0)
GetClassInfoW (Address: 0x18062a988)
GetClassLongPtrW (Address: 0x18062a5f8)
GetClassLongW (Address: 0x18062ac60)
GetClassNameW (Address: 0x18062ac70)
GetClientRect (Address: 0x18062ad80)
GetClipboardData (Address: 0x18062a9e8)
GetClipboardOwner (Address: 0x18062abd0)
GetComboBoxInfo (Address: 0x18062a9c8)
GetCurrentInputMessageSource (Address: 0x18062adf0)
GetCursor (Address: 0x18062ade8)
GetCursorPos (Address: 0x18062ac38)
GetDC (Address: 0x18062aaf8)
GetDesktopWindow (Address: 0x18062aae8)
GetDialogBaseUnits (Address: 0x18062a698)
GetDisplayConfigBufferSizes (Address: 0x18062a528)
GetDlgCtrlID (Address: 0x18062a8f8)
GetDlgItem (Address: 0x18062ada0)
GetDlgItemInt (Address: 0x18062a648)
GetDlgItemTextW (Address: 0x18062adc8)
GetDoubleClickTime (Address: 0x18062aa98)
GetDpiForSystem (Address: 0x18062a7e0)
GetDpiForWindow (Address: 0x18062a7e8)
GetFocus (Address: 0x18062ac10)
GetForegroundWindow (Address: 0x18062aa78)
GetGestureInfo (Address: 0x18062a888)
GetIconInfo (Address: 0x18062aa18)
GetKeyboardLayout (Address: 0x18062ab10)
GetKeyState (Address: 0x18062abe0)
GetLastActivePopup (Address: 0x18062ac28)
GetLastInputInfo (Address: 0x18062a738)
GetMenuDefaultItem (Address: 0x18062abf0)
GetMenuInfo (Address: 0x18062a548)
GetMenuItemCount (Address: 0x18062ac00)
GetMenuItemID (Address: 0x18062aba0)
GetMenuItemInfoW (Address: 0x18062abf8)
GetMenuState (Address: 0x18062abb8)
GetMenuStringW (Address: 0x18062abe8)
GetMessageExtraInfo (Address: 0x18062a868)
GetMessagePos (Address: 0x18062a538)
GetMessageTime (Address: 0x18062a630)
GetMessageW (Address: 0x18062ad30)
GetMonitorInfoW (Address: 0x18062aa60)
GetParent (Address: 0x18062acd8)
GetPointerDevices (Address: 0x18062a730)
GetProcessDefaultLayout (Address: 0x18062a530)
GetPropW (Address: 0x18062ab40)
GetScrollInfo (Address: 0x18062aad0)
GetShellWindow (Address: 0x18062a7f8)
GetSubMenu (Address: 0x18062acc8)
GetSysColor (Address: 0x18062ad50)
GetSysColorBrush (Address: 0x18062ab68)
GetSystemMenu (Address: 0x18062a758)
GetSystemMetrics (Address: 0x18062ad88)
GetSystemMetricsForDpi (Address: 0x18062a6f8)
GetTaskmanWindow (Address: 0x18062a980)
GetUpdateRect (Address: 0x18062a6d0)
GetWindow (Address: 0x18062ae18)
GetWindowBand (Address: 0x18062aa28)
GetWindowDC (Address: 0x18062a718)
GetWindowDpiAwarenessContext (Address: 0x18062a940)
GetWindowLongPtrW (Address: 0x18062ad60)
GetWindowLongW (Address: 0x18062aae0)
GetWindowPlacement (Address: 0x18062a800)
GetWindowRect (Address: 0x18062ac40)
GetWindowTextLengthW (Address: 0x18062a9e0)
GetWindowTextW (Address: 0x18062ad70)
GetWindowThreadProcessId (Address: 0x18062ab18)
HideCaret (Address: 0x18062a4e0)
InflateRect (Address: 0x18062aad8)
InsertMenuItemW (Address: 0x18062a8a0)
InsertMenuW (Address: 0x18062ab98)
IntersectRect (Address: 0x18062aa58)
InvalidateRect (Address: 0x18062ada8)
InvalidateRgn (Address: 0x18062a9c0)
IsChild (Address: 0x18062aaa0)
IsClipboardFormatAvailable (Address: 0x18062a9f0)
IsDialogMessageW (Address: 0x18062a778)
IsDlgButtonChecked (Address: 0x18062ace0)
IsHungAppWindow (Address: 0x18062abc8)
IsIconic (Address: 0x18062ab20)
IsMenu (Address: 0x18062ab80)
IsRectEmpty (Address: 0x18062a7a0)
IsSETEnabled (Address: 0x18062aa40)
IsWindow (Address: 0x18062ab28)
IsWindowEnabled (Address: 0x18062a828)
IsWindowUnicode (Address: 0x18062a960)
IsWindowVisible (Address: 0x18062aa70)
IsWinEventHookInstalled (Address: 0x18062a540)
KillTimer (Address: 0x18062ac78)
LoadAcceleratorsW (Address: 0x18062a928)
LoadCursorW (Address: 0x18062adb0)
LoadIconW (Address: 0x18062a9a8)
LoadImageW (Address: 0x18062a788)
LoadMenuW (Address: 0x18062acc0)
LockSetForegroundWindow (Address: 0x18062a4f0)
MapDialogRect (Address: 0x18062a9b8)
MapWindowPoints (Address: 0x18062a9b0)
MessageBeep (Address: 0x18062ab90)
MessageBoxW (Address: 0x18062a908)
ModifyMenuW (Address: 0x18062abb0)
MonitorFromPoint (Address: 0x18062a7c8)
MonitorFromRect (Address: 0x18062aa08)
MonitorFromWindow (Address: 0x18062aa68)
MoveWindow (Address: 0x18062a930)
MsgWaitForMultipleObjects (Address: 0x18062a808)
MsgWaitForMultipleObjectsEx (Address: 0x18062ac90)
NotifyWinEvent (Address: 0x18062a8d0)
OffsetRect (Address: 0x18062aab0)
OpenClipboard (Address: 0x18062a9f8)
OpenInputDesktop (Address: 0x18062a838)
PeekMessageW (Address: 0x18062ac98)
PostMessageW (Address: 0x18062ad10)
PostQuitMessage (Address: 0x18062aca0)
PostThreadMessageW (Address: 0x18062a760)
PtInRect (Address: 0x18062ab58)
QueryDisplayConfig (Address: 0x18062a8f0)
RedrawWindow (Address: 0x18062a820)
RegisterClassExW (Address: 0x18062aac8)
RegisterClassW (Address: 0x18062ac50)
RegisterClipboardFormatW (Address: 0x18062ac48)
RegisterPowerSettingNotification (Address: 0x18062a570)
RegisterShellHookWindow (Address: 0x18062a968)
RegisterWindowMessageA (Address: 0x18062a690)
RegisterWindowMessageW (Address: 0x18062aa48)
ReleaseCapture (Address: 0x18062a6c0)
ReleaseDC (Address: 0x18062aaf0)
RemoveMenu (Address: 0x18062acd0)
RemovePropW (Address: 0x18062ab48)
ScreenToClient (Address: 0x18062add8)
SendDlgItemMessageW (Address: 0x18062add0)
SendMessageTimeoutW (Address: 0x18062ab08)
SendMessageW (Address: 0x18062ade0)
SendNotifyMessageW (Address: 0x18062ab00)
SetActiveWindow (Address: 0x18062a9d0)
SetCapture (Address: 0x18062a6b8)
SetClassLongPtrW (Address: 0x18062a6f0)
SetClipboardData (Address: 0x18062a818)
SetClipboardViewer (Address: 0x18062a848)
SetCoalescableTimer (Address: 0x18062a660)
SetCursor (Address: 0x18062adb8)
SetDialogDpiChangeBehavior (Address: 0x18062a770)
SetDlgItemInt (Address: 0x18062a650)
SetDlgItemTextA (Address: 0x18062a900)
SetDlgItemTextW (Address: 0x18062adc0)
SetFocus (Address: 0x18062ac18)
SetForegroundWindow (Address: 0x18062aca8)
SetGestureConfig (Address: 0x18062a878)
SetLayeredWindowAttributes (Address: 0x18062a710)
SetMenu (Address: 0x18062a500)
SetMenuDefaultItem (Address: 0x18062aba8)
SetMenuInfo (Address: 0x18062a720)
SetMenuItemInfoW (Address: 0x18062ab78)
SetMessageExtraInfo (Address: 0x18062a8c0)
SetParent (Address: 0x18062a7a8)
SetProcessDPIAware (Address: 0x18062ad18)
SetProgmanWindow (Address: 0x18062a610)
SetPropW (Address: 0x18062ab50)
SetRect (Address: 0x18062a798)
SetRectEmpty (Address: 0x18062a7d0)
SetScrollInfo (Address: 0x18062a680)
SetScrollPos (Address: 0x18062a668)
SetShellWindow (Address: 0x18062a600)
SetSysColors (Address: 0x18062a558)
SetTaskmanWindow (Address: 0x18062a978)
SetThreadDpiAwarenessContext (Address: 0x18062a948)
SetTimer (Address: 0x18062acf0)
SetWindowCompositionAttribute (Address: 0x18062aac0)
SetWindowLongPtrW (Address: 0x18062ad68)
SetWindowLongW (Address: 0x18062a7c0)
SetWindowPos (Address: 0x18062ad78)
SetWindowRgn (Address: 0x18062a688)
SetWindowsHookExW (Address: 0x18062a750)
SetWindowTextW (Address: 0x18062ad98)
ShowCaret (Address: 0x18062a4e8)
ShowScrollBar (Address: 0x18062a678)
ShowWindow (Address: 0x18062ad90)
ShutdownBlockReasonCreate (Address: 0x18062acb8)
ShutdownBlockReasonDestroy (Address: 0x18062acb0)
SubtractRect (Address: 0x18062a700)
SwitchToThisWindow (Address: 0x18062ac30)
SystemParametersInfoA (Address: 0x18062a6a8)
SystemParametersInfoForDpi (Address: 0x18062a6a0)
SystemParametersInfoW (Address: 0x18062aa38)
TrackMouseEvent (Address: 0x18062a6d8)
TrackPopupMenu (Address: 0x18062a8d8)
TrackPopupMenuEx (Address: 0x18062a790)
TranslateAcceleratorW (Address: 0x18062a850)
TranslateMessage (Address: 0x18062ad28)
UnhookWindowsHookEx (Address: 0x18062a748)
UnhookWinEvent (Address: 0x18062a568)
UnionRect (Address: 0x18062aaa8)
UnpackDDElParam (Address: 0x18062a588)
UnregisterPowerSettingNotification (Address: 0x18062a560)
UpdateLayeredWindow (Address: 0x18062aa90)
UpdateWindow (Address: 0x18062a870)
WaitMessage (Address: 0x18062a5e8)
WindowFromDC (Address: 0x18062ae00)
WindowFromPoint (Address: 0x18062a620)
WinHelpW (Address: 0x18062a6b0)
wsprintfW (Address: 0x18062a580)