explorer.exe
Description: Windows Explorer
Authors: © Microsoft Corporation. All rights reserved.
Version: 6.1.7601.17514
Architecture: 64-bit
Operating System: Windows NT
SHA256: 10273298549b9eab7ccf61c05690c62d
File Size: 2.7 MB
Uploaded At: July 3, 2026, 11:27 a.m.
Views: 30
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
No exported functions.
Imported DLLs & Functions
ADVAPI32.dll
- CheckTokenMembership (Address: 0x1000b9170)
- CloseServiceHandle (Address: 0x1000b9190)
- ConvertSidToStringSidW (Address: 0x1000b9160)
- ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x1000b9168)
- ConvertStringSidToSidW (Address: 0x1000b9198)
- CreateWellKnownSid (Address: 0x1000b9140)
- CryptAcquireContextW (Address: 0x1000b9108)
- CryptCreateHash (Address: 0x1000b9110)
- CryptDestroyHash (Address: 0x1000b9128)
- CryptGetHashParam (Address: 0x1000b9120)
- CryptHashData (Address: 0x1000b9118)
- CryptReleaseContext (Address: 0x1000b9130)
- EnableTraceEx (Address: 0x1000b90f8)
- EventEnabled (Address: 0x1000b9028)
- EventRegister (Address: 0x1000b9088)
- EventUnregister (Address: 0x1000b9098)
- EventWrite (Address: 0x1000b9020)
- GetLengthSid (Address: 0x1000b9060)
- GetSidSubAuthority (Address: 0x1000b9150)
- GetSidSubAuthorityCount (Address: 0x1000b90d0)
- GetTokenInformation (Address: 0x1000b9068)
- GetTraceEnableFlags (Address: 0x1000b9040)
- GetTraceEnableLevel (Address: 0x1000b9038)
- GetTraceLoggerHandle (Address: 0x1000b9030)
- IsValidSid (Address: 0x1000b90e0)
- LsaClose (Address: 0x1000b90d8)
- LsaFreeMemory (Address: 0x1000b90e8)
- LsaLookupSids (Address: 0x1000b9158)
- LsaOpenPolicy (Address: 0x1000b90c8)
- OpenProcessToken (Address: 0x1000b9070)
- OpenSCManagerW (Address: 0x1000b9180)
- OpenServiceW (Address: 0x1000b9188)
- OpenThreadToken (Address: 0x1000b91a0)
- QueryServiceStatus (Address: 0x1000b9178)
- RegCloseKey (Address: 0x1000b9008)
- RegCreateKeyExW (Address: 0x1000b9078)
- RegCreateKeyW (Address: 0x1000b9000)
- RegDeleteKeyExW (Address: 0x1000b9090)
- RegDeleteValueW (Address: 0x1000b90b0)
- RegEnumKeyExW (Address: 0x1000b9148)
- RegEnumValueW (Address: 0x1000b90c0)
- RegGetValueW (Address: 0x1000b9018)
- RegisterTraceGuidsW (Address: 0x1000b9048)
- RegOpenKeyExW (Address: 0x1000b9010)
- RegOpenKeyW (Address: 0x1000b90a8)
- RegQueryInfoKeyW (Address: 0x1000b90b8)
- RegQueryValueExW (Address: 0x1000b9058)
- RegSetValueExW (Address: 0x1000b9080)
- StartServiceW (Address: 0x1000b9138)
- StartTraceW (Address: 0x1000b90f0)
- StopTraceW (Address: 0x1000b9100)
- TraceMessage (Address: 0x1000b90a0)
- UnregisterTraceGuids (Address: 0x1000b9050)
dwmapi.dll
- (Address: 0x1000ba990)
- (Address: 0x1000ba998)
- (Address: 0x1000ba9c0)
- (Address: 0x1000ba9d8)
- (Address: 0x1000ba9e0)
- DwmEnableBlurBehindWindow (Address: 0x1000ba9a0)
- DwmIsCompositionEnabled (Address: 0x1000ba9b0)
- DwmQueryThumbnailSourceSize (Address: 0x1000ba9b8)
- DwmSetWindowAttribute (Address: 0x1000ba9a8)
- DwmUnregisterThumbnail (Address: 0x1000ba9d0)
- DwmUpdateThumbnailProperties (Address: 0x1000ba9c8)
GDI32.dll
- BitBlt (Address: 0x1000b9710)
- CombineRgn (Address: 0x1000b9610)
- CreateBitmap (Address: 0x1000b96c0)
- CreateCompatibleBitmap (Address: 0x1000b96e8)
- CreateCompatibleDC (Address: 0x1000b9730)
- CreateDIBSection (Address: 0x1000b9738)
- CreateFontIndirectW (Address: 0x1000b9720)
- CreatePen (Address: 0x1000b9640)
- CreateRectRgn (Address: 0x1000b96a8)
- CreateRectRgnIndirect (Address: 0x1000b9728)
- DeleteDC (Address: 0x1000b9750)
- DeleteObject (Address: 0x1000b9748)
- ExtCreateRegion (Address: 0x1000b9670)
- ExtTextOutW (Address: 0x1000b9758)
- GdiAlphaBlend (Address: 0x1000b9708)
- GdiFlush (Address: 0x1000b9608)
- GetBkColor (Address: 0x1000b96b0)
- GetClipBox (Address: 0x1000b96f8)
- GetClipRgn (Address: 0x1000b96a0)
- GetDeviceCaps (Address: 0x1000b9718)
- GetLayout (Address: 0x1000b9660)
- GetObjectW (Address: 0x1000b9700)
- GetRegionData (Address: 0x1000b9650)
- GetRgnBox (Address: 0x1000b95f0)
- GetStockObject (Address: 0x1000b9600)
- GetTextColor (Address: 0x1000b9658)
- GetTextExtentPoint32W (Address: 0x1000b9638)
- GetTextExtentPointW (Address: 0x1000b96f0)
- GetTextMetricsW (Address: 0x1000b9668)
- GetViewportOrgEx (Address: 0x1000b9690)
- IntersectClipRect (Address: 0x1000b9698)
- LPtoDP (Address: 0x1000b95e8)
- OffsetRgn (Address: 0x1000b9618)
- OffsetViewportOrgEx (Address: 0x1000b95f8)
- OffsetWindowOrgEx (Address: 0x1000b96e0)
- PatBlt (Address: 0x1000b96b8)
- Polyline (Address: 0x1000b9648)
- SelectClipRgn (Address: 0x1000b9680)
- SelectObject (Address: 0x1000b9740)
- SetBkColor (Address: 0x1000b96d8)
- SetBkMode (Address: 0x1000b96c8)
- SetDIBits (Address: 0x1000b9678)
- SetLayout (Address: 0x1000b9620)
- SetTextColor (Address: 0x1000b96d0)
- SetViewportOrgEx (Address: 0x1000b9688)
- SetWindowOrgEx (Address: 0x1000b9628)
- StretchBlt (Address: 0x1000b9630)
gdiplus.dll
- GdipAlloc (Address: 0x1000baa48)
- GdipCloneImage (Address: 0x1000baa10)
- GdipCreateBitmapFromHBITMAP (Address: 0x1000baa28)
- GdipCreateFromHDC (Address: 0x1000baa58)
- GdipDeleteGraphics (Address: 0x1000baa60)
- GdipDisposeImage (Address: 0x1000baa50)
- GdipDrawImageRectI (Address: 0x1000baa08)
- GdipFree (Address: 0x1000baa40)
- GdipGetImageHeight (Address: 0x1000baa20)
- GdipGetImageWidth (Address: 0x1000baa18)
- GdiplusShutdown (Address: 0x1000baa38)
- GdiplusStartup (Address: 0x1000baa30)
- GdipSetCompositingMode (Address: 0x1000baa68)
- GdipSetInterpolationMode (Address: 0x1000baa00)
KERNEL32.dll
- ActivateActCtx (Address: 0x1000b94f8)
- AssignProcessToJobObject (Address: 0x1000b95b8)
- CloseHandle (Address: 0x1000b95d8)
- CompareFileTime (Address: 0x1000b9480)
- CompareStringOrdinal (Address: 0x1000b92f0)
- CompareStringW (Address: 0x1000b9470)
- CreateActCtxW (Address: 0x1000b9508)
- CreateEventW (Address: 0x1000b9308)
- CreateFileMappingW (Address: 0x1000b9490)
- CreateFileW (Address: 0x1000b91d0)
- CreateIoCompletionPort (Address: 0x1000b9438)
- CreateJobObjectW (Address: 0x1000b95d0)
- CreateMutexW (Address: 0x1000b9280)
- CreateProcessW (Address: 0x1000b9560)
- CreateThread (Address: 0x1000b9598)
- DeactivateActCtx (Address: 0x1000b94f0)
- DelayLoadFailureHook (Address: 0x1000b91b0)
- DeleteCriticalSection (Address: 0x1000b9290)
- DeleteFileW (Address: 0x1000b9450)
- DuplicateHandle (Address: 0x1000b94b0)
- EnterCriticalSection (Address: 0x1000b93a0)
- ExitProcess (Address: 0x1000b93d0)
- ExpandEnvironmentStringsW (Address: 0x1000b9368)
- FindClose (Address: 0x1000b9250)
- FindFirstFileW (Address: 0x1000b92f8)
- FindNextFileW (Address: 0x1000b9258)
- FindResourceExW (Address: 0x1000b9520)
- FlushInstructionCache (Address: 0x1000b91d8)
- FreeLibrary (Address: 0x1000b9320)
- GetBinaryTypeW (Address: 0x1000b9408)
- GetCommandLineW (Address: 0x1000b9548)
- GetComputerNameW (Address: 0x1000b94c8)
- GetCurrentDirectoryW (Address: 0x1000b94b8)
- GetCurrentProcess (Address: 0x1000b9540)
- GetCurrentProcessId (Address: 0x1000b9230)
- GetCurrentThread (Address: 0x1000b93b0)
- GetCurrentThreadId (Address: 0x1000b9228)
- GetDateFormatW (Address: 0x1000b9208)
- GetDynamicTimeZoneInformation (Address: 0x1000b93f8)
- GetFileAttributesW (Address: 0x1000b9350)
- GetFileSize (Address: 0x1000b91c8)
- GetLastError (Address: 0x1000b95c8)
- GetLocaleInfoW (Address: 0x1000b9200)
- GetLocalTime (Address: 0x1000b9218)
- GetLongPathNameW (Address: 0x1000b9260)
- GetModuleFileNameW (Address: 0x1000b9558)
- GetModuleHandleA (Address: 0x1000b9460)
- GetModuleHandleW (Address: 0x1000b9238)
- GetPriorityClass (Address: 0x1000b95a8)
- GetPrivateProfileStringW (Address: 0x1000b9550)
- GetProcAddress (Address: 0x1000b9328)
- GetProcessHeap (Address: 0x1000b9538)
- GetProcessId (Address: 0x1000b9458)
- GetProductInfo (Address: 0x1000b9428)
- GetQueuedCompletionStatus (Address: 0x1000b9440)
- GetStartupInfoW (Address: 0x1000b9270)
- GetSystemDirectoryW (Address: 0x1000b9310)
- GetSystemTime (Address: 0x1000b9378)
- GetSystemTimeAsFileTime (Address: 0x1000b91f8)
- GetThreadPriority (Address: 0x1000b9390)
- GetTickCount (Address: 0x1000b93c0)
- GetTickCount64 (Address: 0x1000b9388)
- GetTimeFormatW (Address: 0x1000b9210)
- GetTimeZoneInformation (Address: 0x1000b9400)
- GetUserDefaultLangID (Address: 0x1000b93c8)
- GetUserDefaultUILanguage (Address: 0x1000b9338)
- GetVersionExW (Address: 0x1000b9318)
- GetWindowsDirectoryW (Address: 0x1000b9468)
- GlobalAlloc (Address: 0x1000b94e0)
- GlobalFree (Address: 0x1000b94a8)
- GlobalGetAtomNameW (Address: 0x1000b9360)
- GlobalLock (Address: 0x1000b94d0)
- GlobalUnlock (Address: 0x1000b94d8)
- HeapAlloc (Address: 0x1000b9528)
- HeapDestroy (Address: 0x1000b93d8)
- HeapFree (Address: 0x1000b9530)
- InitializeCriticalSection (Address: 0x1000b9288)
- InterlockedPopEntrySList (Address: 0x1000b9248)
- InterlockedPushEntrySList (Address: 0x1000b92a0)
- LeaveCriticalSection (Address: 0x1000b9398)
- LoadLibraryA (Address: 0x1000b9448)
- LoadLibraryExA (Address: 0x1000b91b8)
- LoadLibraryExW (Address: 0x1000b9420)
- LoadLibraryW (Address: 0x1000b9330)
- LoadResource (Address: 0x1000b9518)
- LocalAlloc (Address: 0x1000b9580)
- LocalFree (Address: 0x1000b9578)
- LockResource (Address: 0x1000b9510)
- lstrcmpA (Address: 0x1000b9478)
- lstrcmpiW (Address: 0x1000b92e8)
- lstrlenA (Address: 0x1000b94e8)
- lstrlenW (Address: 0x1000b9568)
- MapViewOfFile (Address: 0x1000b93e8)
- MulDiv (Address: 0x1000b9380)
- MultiByteToWideChar (Address: 0x1000b9220)
- OpenEventW (Address: 0x1000b9240)
- OpenProcess (Address: 0x1000b9570)
- OpenThread (Address: 0x1000b91f0)
- QueryFullProcessImageNameW (Address: 0x1000b9488)
- QueryInformationJobObject (Address: 0x1000b9588)
- QueryPerformanceCounter (Address: 0x1000b92b0)
- QueryPerformanceFrequency (Address: 0x1000b9410)
- QueueUserWorkItem (Address: 0x1000b9418)
- RaiseException (Address: 0x1000b91e0)
- ReadFile (Address: 0x1000b91c0)
- RegisterApplicationRestart (Address: 0x1000b9358)
- ReleaseActCtx (Address: 0x1000b9500)
- ReleaseMutex (Address: 0x1000b9278)
- ResetEvent (Address: 0x1000b9498)
- ResumeThread (Address: 0x1000b95b0)
- RtlCaptureContext (Address: 0x1000b92e0)
- RtlLookupFunctionEntry (Address: 0x1000b92d0)
- RtlVirtualUnwind (Address: 0x1000b92c8)
- SearchPathW (Address: 0x1000b93f0)
- SetErrorMode (Address: 0x1000b9300)
- SetEvent (Address: 0x1000b93a8)
- SetInformationJobObject (Address: 0x1000b95c0)
- SetLastError (Address: 0x1000b91e8)
- SetPriorityClass (Address: 0x1000b95a0)
- SetProcessShutdownParameters (Address: 0x1000b9268)
- SetTermsrvAppInstallMode (Address: 0x1000b9348)
- SetThreadPriority (Address: 0x1000b93b8)
- SetUnhandledExceptionFilter (Address: 0x1000b92a8)
- Sleep (Address: 0x1000b9590)
- SystemTimeToFileTime (Address: 0x1000b9370)
- TerminateProcess (Address: 0x1000b92b8)
- TerminateThread (Address: 0x1000b9430)
- UnhandledExceptionFilter (Address: 0x1000b92c0)
- UnmapViewOfFile (Address: 0x1000b93e0)
- VirtualAlloc (Address: 0x1000b9298)
- VirtualFree (Address: 0x1000b92d8)
- WaitForMultipleObjects (Address: 0x1000b94c0)
- WaitForSingleObject (Address: 0x1000b9340)
- WideCharToMultiByte (Address: 0x1000b94a0)
msvcrt.dll
- __C_specific_handler (Address: 0x1000b9ee8)
- __dllonexit (Address: 0x1000b9f50)
- __set_app_type (Address: 0x1000b9f60)
- __setusermatherr (Address: 0x1000b9f28)
- __wgetmainargs (Address: 0x1000b9ee0)
- _amsg_exit (Address: 0x1000b9f20)
- _cexit (Address: 0x1000b9f00)
- _commode (Address: 0x1000b9f30)
- _exit (Address: 0x1000b9ef8)
- _fmode (Address: 0x1000b9f80)
- _initterm (Address: 0x1000b9f18)
- _lock (Address: 0x1000b9f48)
- _onexit (Address: 0x1000b9f40)
- _unlock (Address: 0x1000b9f58)
- _vsnwprintf (Address: 0x1000b9e78)
- _wcmdln (Address: 0x1000b9f10)
- _wcsicmp (Address: 0x1000b9ea8)
- _wtoi (Address: 0x1000b9eb8)
- _XcptFilter (Address: 0x1000b9ef0)
- ?terminate@@YAXXZ (Address: 0x1000b9f38)
- bsearch (Address: 0x1000b9ed8)
- ceil (Address: 0x1000b9ed0)
- cosf (Address: 0x1000b9eb0)
- exit (Address: 0x1000b9f08)
- free (Address: 0x1000b9e80)
- iswalpha (Address: 0x1000b9e90)
- malloc (Address: 0x1000b9f88)
- memcmp (Address: 0x1000b9ec0)
- memcpy (Address: 0x1000b9f70)
- memmove (Address: 0x1000b9f68)
- memset (Address: 0x1000b9f78)
- realloc (Address: 0x1000b9ea0)
- sin (Address: 0x1000b9f90)
- sqrt (Address: 0x1000b9ec8)
- wcschr (Address: 0x1000b9e98)
- wcsstr (Address: 0x1000b9e88)
ntdll.dll
- EtwEventEnabled (Address: 0x1000ba008)
- EtwEventWrite (Address: 0x1000ba010)
- NtClose (Address: 0x1000b9ff0)
- NtOpenProcessToken (Address: 0x1000b9fe8)
- NtOpenThreadToken (Address: 0x1000b9ff8)
- NtQueryInformationProcess (Address: 0x1000ba018)
- NtQueryInformationToken (Address: 0x1000b9fe0)
- NtSetInformationProcess (Address: 0x1000b9fd8)
- NtSetSystemInformation (Address: 0x1000b9fb8)
- RtlGetProductInfo (Address: 0x1000ba000)
- WinSqmAddToStream (Address: 0x1000b9fc0)
- WinSqmAddToStreamEx (Address: 0x1000b9fb0)
- WinSqmEventEnabled (Address: 0x1000b9fc8)
- WinSqmIsOptedIn (Address: 0x1000b9fd0)
- WinSqmSetDWORD (Address: 0x1000b9fa8)
- WinSqmSetString (Address: 0x1000b9fa0)
OLEAUT32.dll
- SysAllocString (Address: 0x1000ba848)
- SysAllocStringByteLen (Address: 0x1000ba838)
- SysAllocStringLen (Address: 0x1000ba840)
- SysFreeString (Address: 0x1000ba850)
- VariantClear (Address: 0x1000ba830)
- VariantInit (Address: 0x1000ba828)
POWRPROF.dll
- CallNtPowerInformation (Address: 0x1000ba970)
- GetPwrCapabilities (Address: 0x1000ba980)
- PowerDeterminePlatformRole (Address: 0x1000ba978)
PROPSYS.dll
- PropVariantToBoolean (Address: 0x1000bab00)
- PropVariantToInt64 (Address: 0x1000baaf0)
- PropVariantToString (Address: 0x1000baae0)
- PropVariantToStringAlloc (Address: 0x1000bab18)
- PropVariantToUInt32 (Address: 0x1000bab10)
- PropVariantToUInt64 (Address: 0x1000bab08)
- PSCreateMemoryPropertyStore (Address: 0x1000baac8)
- VariantToBooleanWithDefault (Address: 0x1000baae8)
- VariantToInt32WithDefault (Address: 0x1000baaf8)
- VariantToStringAlloc (Address: 0x1000baad0)
- VariantToStringWithDefault (Address: 0x1000baad8)
RPCRT4.dll
- I_RpcExceptionFilter (Address: 0x1000baa90)
- NdrClientCall3 (Address: 0x1000baa88)
- RpcBindingFree (Address: 0x1000baaa0)
- RpcBindingFromStringBindingW (Address: 0x1000baab8)
- RpcBindingSetAuthInfoExW (Address: 0x1000baaa8)
- RpcStringBindingComposeW (Address: 0x1000baab0)
- RpcStringFreeW (Address: 0x1000baa98)
Secur32.dll
- GetUserNameExW (Address: 0x1000baa78)
SHELL32.dll
- (Address: 0x1000ba750)
- (Address: 0x1000ba3c8)
- (Address: 0x1000ba3d0)
- (Address: 0x1000ba3d8)
- (Address: 0x1000ba3f0)
- (Address: 0x1000ba3f8)
- (Address: 0x1000ba400)
- (Address: 0x1000ba408)
- (Address: 0x1000ba410)
- (Address: 0x1000ba418)
- (Address: 0x1000ba428)
- (Address: 0x1000ba430)
- (Address: 0x1000ba438)
- (Address: 0x1000ba440)
- (Address: 0x1000ba448)
- (Address: 0x1000ba450)
- (Address: 0x1000ba460)
- (Address: 0x1000ba468)
- (Address: 0x1000ba478)
- (Address: 0x1000ba480)
- (Address: 0x1000ba488)
- (Address: 0x1000ba490)
- (Address: 0x1000ba498)
- (Address: 0x1000ba4a0)
- (Address: 0x1000ba4c8)
- (Address: 0x1000ba4d8)
- (Address: 0x1000ba4e0)
- (Address: 0x1000ba4f0)
- (Address: 0x1000ba4f8)
- (Address: 0x1000ba500)
- (Address: 0x1000ba510)
- (Address: 0x1000ba518)
- (Address: 0x1000ba528)
- (Address: 0x1000ba540)
- (Address: 0x1000ba548)
- (Address: 0x1000ba550)
- (Address: 0x1000ba558)
- (Address: 0x1000ba560)
- (Address: 0x1000ba568)
- (Address: 0x1000ba580)
- (Address: 0x1000ba588)
- (Address: 0x1000ba590)
- (Address: 0x1000ba598)
- (Address: 0x1000ba5a8)
- (Address: 0x1000ba5b8)
- (Address: 0x1000ba5c0)
- (Address: 0x1000ba5c8)
- (Address: 0x1000ba5d0)
- (Address: 0x1000ba5e0)
- (Address: 0x1000ba5e8)
- (Address: 0x1000ba5f0)
- (Address: 0x1000ba5f8)
- (Address: 0x1000ba600)
- (Address: 0x1000ba608)
- (Address: 0x1000ba610)
- (Address: 0x1000ba618)
- (Address: 0x1000ba620)
- (Address: 0x1000ba628)
- (Address: 0x1000ba638)
- (Address: 0x1000ba640)
- (Address: 0x1000ba660)
- (Address: 0x1000ba668)
- (Address: 0x1000ba670)
- (Address: 0x1000ba678)
- (Address: 0x1000ba6a8)
- (Address: 0x1000ba6b0)
- (Address: 0x1000ba6b8)
- (Address: 0x1000ba6c0)
- (Address: 0x1000ba6d0)
- (Address: 0x1000ba6e0)
- (Address: 0x1000ba710)
- (Address: 0x1000ba720)
- (Address: 0x1000ba728)
- DragQueryFileW (Address: 0x1000ba730)
- ExtractIconExW (Address: 0x1000ba700)
- SHAddToRecentDocs (Address: 0x1000ba6e8)
- SHBindToFolderIDListParent (Address: 0x1000ba4b8)
- SHBindToFolderIDListParentEx (Address: 0x1000ba4c0)
- SHBindToObject (Address: 0x1000ba538)
- SHBindToParent (Address: 0x1000ba680)
- SHChangeNotify (Address: 0x1000ba4d0)
- SHChangeNotifyRegisterThread (Address: 0x1000ba5d8)
- SHCreateDataObject (Address: 0x1000ba3e0)
- SHCreateItemFromIDList (Address: 0x1000ba6d8)
- SHCreateItemFromParsingName (Address: 0x1000ba748)
- SHCreateItemWithParent (Address: 0x1000ba4b0)
- SHCreateShellItem (Address: 0x1000ba5b0)
- SHCreateShellItemArrayFromIDLists (Address: 0x1000ba718)
- SHCreateShellItemArrayFromShellItem (Address: 0x1000ba740)
- Shell_GetCachedImageIndexW (Address: 0x1000ba420)
- Shell_NotifyIconGetRect (Address: 0x1000ba6f8)
- Shell_NotifyIconW (Address: 0x1000ba6f0)
- ShellExecuteExW (Address: 0x1000ba578)
- ShellExecuteW (Address: 0x1000ba698)
- SHEnableServiceObject (Address: 0x1000ba6a0)
- SHEvaluateSystemCommandTemplate (Address: 0x1000ba708)
- SHFileOperationW (Address: 0x1000ba648)
- SHGetFileInfoW (Address: 0x1000ba4e8)
- SHGetFolderLocation (Address: 0x1000ba520)
- SHGetFolderPathEx (Address: 0x1000ba650)
- SHGetFolderPathW (Address: 0x1000ba688)
- SHGetIDListFromObject (Address: 0x1000ba6c8)
- SHGetKnownFolderIDList (Address: 0x1000ba570)
- SHGetKnownFolderPath (Address: 0x1000ba738)
- SHGetLocalizedName (Address: 0x1000ba3e8)
- SHGetNameFromIDList (Address: 0x1000ba5a0)
- SHGetPathFromIDListA (Address: 0x1000ba690)
- SHGetPathFromIDListW (Address: 0x1000ba630)
- SHGetPropertyStoreForWindow (Address: 0x1000ba470)
- SHGetSpecialFolderLocation (Address: 0x1000ba4a8)
- SHGetSpecialFolderPathW (Address: 0x1000ba530)
- SHGetStockIconInfo (Address: 0x1000ba458)
- SHParseDisplayName (Address: 0x1000ba508)
- SHUpdateRecycleBinIcon (Address: 0x1000ba658)
slc.dll
- SLGetWindowsInformationDWORD (Address: 0x1000ba9f0)
USER32.dll
- ActivateKeyboardLayout (Address: 0x1000b97b0)
- AdjustWindowRect (Address: 0x1000b9cf0)
- AdjustWindowRectEx (Address: 0x1000b9c78)
- AllowSetForegroundWindow (Address: 0x1000b9d40)
- AppendMenuW (Address: 0x1000b9c30)
- BeginDeferWindowPos (Address: 0x1000b9ab8)
- BeginPaint (Address: 0x1000b9ba0)
- BringWindowToTop (Address: 0x1000b98a0)
- CalculatePopupWindowPosition (Address: 0x1000b9cf8)
- CallNextHookEx (Address: 0x1000b9958)
- CallWindowProcW (Address: 0x1000b9cd8)
- CascadeWindows (Address: 0x1000b9c38)
- ChangeWindowMessageFilterEx (Address: 0x1000b9a18)
- CharNextW (Address: 0x1000b9d58)
- CharPrevW (Address: 0x1000b99d8)
- CharUpperW (Address: 0x1000b9850)
- CheckDlgButton (Address: 0x1000b9cd0)
- CheckMenuItem (Address: 0x1000b9bf8)
- ChildWindowFromPoint (Address: 0x1000b9b88)
- ChildWindowFromPointEx (Address: 0x1000b9840)
- ClientToScreen (Address: 0x1000b9c10)
- CloseDesktop (Address: 0x1000b98e8)
- CopyIcon (Address: 0x1000b9c80)
- CopyRect (Address: 0x1000b9768)
- CreatePopupMenu (Address: 0x1000b99f8)
- CreateWindowExW (Address: 0x1000b9778)
- DeferWindowPos (Address: 0x1000b9ac0)
- DefWindowProcW (Address: 0x1000b97a8)
- DeleteMenu (Address: 0x1000b9bf0)
- DeregisterShellHookWindow (Address: 0x1000b98c0)
- DestroyIcon (Address: 0x1000b9be0)
- DestroyMenu (Address: 0x1000b9dc0)
- DestroyWindow (Address: 0x1000b9e18)
- DialogBoxParamW (Address: 0x1000b9780)
- DispatchMessageW (Address: 0x1000b99f0)
- DrawEdge (Address: 0x1000b9bb0)
- DrawFocusRect (Address: 0x1000b9c70)
- DrawIconEx (Address: 0x1000b9d18)
- DrawTextW (Address: 0x1000b9ce8)
- EnableMenuItem (Address: 0x1000b9bc8)
- EnableWindow (Address: 0x1000b9ca8)
- EndDeferWindowPos (Address: 0x1000b9ac8)
- EndDialog (Address: 0x1000b9b70)
- EndPaint (Address: 0x1000b9bb8)
- EndTask (Address: 0x1000b98d8)
- EnumChildWindows (Address: 0x1000b9d98)
- EnumDisplayMonitors (Address: 0x1000b99a0)
- EnumWindows (Address: 0x1000b9a40)
- EqualRect (Address: 0x1000b99b0)
- ExitWindowsEx (Address: 0x1000b9bd0)
- FillRect (Address: 0x1000b9ba8)
- FindWindowW (Address: 0x1000b9e50)
- FlashWindowEx (Address: 0x1000b98c8)
- FrameRect (Address: 0x1000b9860)
- GetActiveWindow (Address: 0x1000b9b40)
- GetAncestor (Address: 0x1000b9968)
- GetAsyncKeyState (Address: 0x1000b9b80)
- GetCapture (Address: 0x1000b9d08)
- GetCaretBlinkTime (Address: 0x1000b9928)
- GetClassInfoExW (Address: 0x1000b9790)
- GetClassInfoW (Address: 0x1000b9788)
- GetClassLongPtrW (Address: 0x1000b98a8)
- GetClassLongW (Address: 0x1000b9808)
- GetClassNameW (Address: 0x1000b9e68)
- GetClientRect (Address: 0x1000b9a70)
- GetCursorPos (Address: 0x1000b97b8)
- GetDC (Address: 0x1000b9e48)
- GetDesktopWindow (Address: 0x1000b9b78)
- GetDlgCtrlID (Address: 0x1000b9820)
- GetDlgItem (Address: 0x1000b9ca0)
- GetDlgItemInt (Address: 0x1000b9cb0)
- GetDoubleClickTime (Address: 0x1000b9978)
- GetFocus (Address: 0x1000b9b48)
- GetForegroundWindow (Address: 0x1000b9a38)
- GetGUIThreadInfo (Address: 0x1000b9818)
- GetIconInfo (Address: 0x1000b98b0)
- GetKeyboardLayout (Address: 0x1000b9db0)
- GetKeyState (Address: 0x1000b9a88)
- GetLastActivePopup (Address: 0x1000b9b28)
- GetLastInputInfo (Address: 0x1000b9b18)
- GetLayeredWindowAttributes (Address: 0x1000b9938)
- GetMenuDefaultItem (Address: 0x1000b9a00)
- GetMenuItemCount (Address: 0x1000b97a0)
- GetMenuItemInfoW (Address: 0x1000b9798)
- GetMenuState (Address: 0x1000b98f0)
- GetMenuStringW (Address: 0x1000b97c8)
- GetMessageExtraInfo (Address: 0x1000b9d00)
- GetMessagePos (Address: 0x1000b9b98)
- GetMessageW (Address: 0x1000b99e0)
- GetMonitorInfoW (Address: 0x1000b99c0)
- GetNextDlgGroupItem (Address: 0x1000b9828)
- GetNextDlgTabItem (Address: 0x1000b9830)
- GetParent (Address: 0x1000b9a48)
- GetProcessWindowStation (Address: 0x1000b9888)
- GetPropW (Address: 0x1000b9d70)
- GetScrollInfo (Address: 0x1000b9908)
- GetShellWindow (Address: 0x1000b9e60)
- GetSubMenu (Address: 0x1000b9d38)
- GetSysColor (Address: 0x1000b9c68)
- GetSysColorBrush (Address: 0x1000b9d68)
- GetSystemMenu (Address: 0x1000b9bc0)
- GetSystemMetrics (Address: 0x1000b9e58)
- GetThreadDesktop (Address: 0x1000b9890)
- GetUpdateRect (Address: 0x1000b9940)
- GetUserObjectInformationW (Address: 0x1000b9880)
- GetWindow (Address: 0x1000b9d60)
- GetWindowDC (Address: 0x1000b9848)
- GetWindowInfo (Address: 0x1000b9920)
- GetWindowLongPtrW (Address: 0x1000b9e00)
- GetWindowLongW (Address: 0x1000b9d88)
- GetWindowPlacement (Address: 0x1000b9b08)
- GetWindowRect (Address: 0x1000b9db8)
- GetWindowRgnBox (Address: 0x1000b9af8)
- GetWindowTextW (Address: 0x1000b9a68)
- GetWindowThreadProcessId (Address: 0x1000b9c28)
- GhostWindowFromHungWindow (Address: 0x1000b9a90)
- HungWindowFromGhostWindow (Address: 0x1000b9d78)
- InflateRect (Address: 0x1000b99a8)
- InsertMenuItemW (Address: 0x1000b97d8)
- InsertMenuW (Address: 0x1000b97c0)
- InternalGetWindowText (Address: 0x1000b9918)
- IntersectRect (Address: 0x1000b9a20)
- InvalidateRect (Address: 0x1000b9ad0)
- IsChild (Address: 0x1000b97e0)
- IsDlgButtonChecked (Address: 0x1000b9cc0)
- IsHungAppWindow (Address: 0x1000b9c20)
- IsIconic (Address: 0x1000b9be8)
- IsProcessDPIAware (Address: 0x1000b97f0)
- IsRectEmpty (Address: 0x1000b97f8)
- IsWindow (Address: 0x1000b9a50)
- IsWindowEnabled (Address: 0x1000b9cc8)
- IsWindowVisible (Address: 0x1000b9a30)
- IsWinEventHookInstalled (Address: 0x1000b97e8)
- IsZoomed (Address: 0x1000b98f8)
- KillTimer (Address: 0x1000b9df0)
- LoadAcceleratorsW (Address: 0x1000b9d48)
- LoadCursorW (Address: 0x1000b9aa0)
- LoadIconW (Address: 0x1000b9bd8)
- LoadImageW (Address: 0x1000b9b00)
- LoadMenuW (Address: 0x1000b9d30)
- LoadStringW (Address: 0x1000b9e28)
- LockSetForegroundWindow (Address: 0x1000b9a10)
- LockWorkStation (Address: 0x1000b9c48)
- MapWindowPoints (Address: 0x1000b9dd8)
- MessageBeep (Address: 0x1000b9b38)
- ModifyMenuW (Address: 0x1000b9c00)
- MonitorFromPoint (Address: 0x1000b99c8)
- MonitorFromRect (Address: 0x1000b99d0)
- MonitorFromWindow (Address: 0x1000b9a28)
- MoveWindow (Address: 0x1000b9838)
- MsgWaitForMultipleObjects (Address: 0x1000b9c88)
- MsgWaitForMultipleObjectsEx (Address: 0x1000b9d90)
- NotifyWinEvent (Address: 0x1000b9c60)
- OffsetRect (Address: 0x1000b9ad8)
- OpenInputDesktop (Address: 0x1000b98e0)
- PeekMessageW (Address: 0x1000b9e38)
- PostMessageW (Address: 0x1000b9e30)
- PostQuitMessage (Address: 0x1000b9e08)
- PtInRect (Address: 0x1000b9da8)
- RedrawWindow (Address: 0x1000b9ab0)
- RegisterClassExW (Address: 0x1000b9c98)
- RegisterClassW (Address: 0x1000b9a98)
- RegisterClipboardFormatW (Address: 0x1000b9c58)
- RegisterHotKey (Address: 0x1000b9b60)
- RegisterShellHookWindow (Address: 0x1000b98b8)
- RegisterWindowMessageW (Address: 0x1000b9980)
- ReleaseCapture (Address: 0x1000b9970)
- ReleaseDC (Address: 0x1000b9e40)
- RemoveMenu (Address: 0x1000b9d20)
- RemovePropW (Address: 0x1000b9b20)
- ScreenToClient (Address: 0x1000b9c50)
- SendDlgItemMessageW (Address: 0x1000b9b68)
- SendMessageCallbackW (Address: 0x1000b9870)
- SendMessageTimeoutW (Address: 0x1000b9ae0)
- SendMessageW (Address: 0x1000b9da0)
- SendNotifyMessageW (Address: 0x1000b9a08)
- SetActiveWindow (Address: 0x1000b9a80)
- SetCapture (Address: 0x1000b9ce0)
- SetClassLongW (Address: 0x1000b9810)
- SetCursor (Address: 0x1000b9b50)
- SetCursorPos (Address: 0x1000b9b90)
- SetDlgItemInt (Address: 0x1000b9cb8)
- SetFocus (Address: 0x1000b9960)
- SetForegroundWindow (Address: 0x1000b9b10)
- SetGestureConfig (Address: 0x1000b9d10)
- SetLayeredWindowAttributes (Address: 0x1000b9930)
- SetMenuDefaultItem (Address: 0x1000b9d28)
- SetMenuItemInfoW (Address: 0x1000b97d0)
- SetPropW (Address: 0x1000b9de8)
- SetRect (Address: 0x1000b9770)
- SetRectEmpty (Address: 0x1000b9998)
- SetScrollInfo (Address: 0x1000b9900)
- SetScrollPos (Address: 0x1000b9910)
- SetThreadDesktop (Address: 0x1000b98d0)
- SetTimer (Address: 0x1000b9de0)
- SetWindowCompositionAttribute (Address: 0x1000b9d80)
- SetWindowLongPtrW (Address: 0x1000b9e10)
- SetWindowPlacement (Address: 0x1000b9990)
- SetWindowPos (Address: 0x1000b9df8)
- SetWindowRgn (Address: 0x1000b9ae8)
- SetWindowsHookExW (Address: 0x1000b9948)
- SetWindowTextW (Address: 0x1000b9988)
- SetWinEventHook (Address: 0x1000b9c90)
- ShowWindow (Address: 0x1000b9dd0)
- ShowWindowAsync (Address: 0x1000b9898)
- ShutdownBlockReasonCreate (Address: 0x1000b9e20)
- SubtractRect (Address: 0x1000b9aa8)
- SwitchToThisWindow (Address: 0x1000b9b30)
- SystemParametersInfoW (Address: 0x1000b9dc8)
- TileWindows (Address: 0x1000b9c40)
- TrackMouseEvent (Address: 0x1000b9d50)
- TrackPopupMenu (Address: 0x1000b9c18)
- TrackPopupMenuEx (Address: 0x1000b9a78)
- TranslateAcceleratorW (Address: 0x1000b9a58)
- TranslateMessage (Address: 0x1000b99e8)
- UnhookWindowsHookEx (Address: 0x1000b9950)
- UnionRect (Address: 0x1000b9800)
- UnregisterClassW (Address: 0x1000b9858)
- UnregisterHotKey (Address: 0x1000b9b58)
- UpdateLayeredWindow (Address: 0x1000b9878)
- UpdateLayeredWindowIndirect (Address: 0x1000b9af0)
- UpdateWindow (Address: 0x1000b99b8)
- WaitMessage (Address: 0x1000b9a60)
- WindowFromDC (Address: 0x1000b9868)
- WindowFromPoint (Address: 0x1000b9c08)
UxTheme.dll
- (Address: 0x1000ba960)
- BeginBufferedPaint (Address: 0x1000ba928)
- BufferedPaintClear (Address: 0x1000ba8b0)
- BufferedPaintInit (Address: 0x1000ba948)
- BufferedPaintUnInit (Address: 0x1000ba950)
- CloseThemeData (Address: 0x1000ba8d0)
- DrawThemeBackground (Address: 0x1000ba8e8)
- DrawThemeIcon (Address: 0x1000ba8a0)
- DrawThemeParentBackground (Address: 0x1000ba908)
- DrawThemeText (Address: 0x1000ba8f8)
- DrawThemeTextEx (Address: 0x1000ba930)
- EndBufferedPaint (Address: 0x1000ba938)
- GetBufferedPaintBits (Address: 0x1000ba8a8)
- GetThemeBackgroundContentRect (Address: 0x1000ba918)
- GetThemeBackgroundExtent (Address: 0x1000ba878)
- GetThemeBackgroundRegion (Address: 0x1000ba880)
- GetThemeBool (Address: 0x1000ba900)
- GetThemeColor (Address: 0x1000ba888)
- GetThemeMargins (Address: 0x1000ba940)
- GetThemeMetric (Address: 0x1000ba8e0)
- GetThemePartSize (Address: 0x1000ba920)
- GetThemeRect (Address: 0x1000ba898)
- GetThemeTextExtent (Address: 0x1000ba8f0)
- GetWindowTheme (Address: 0x1000ba910)
- IsAppThemed (Address: 0x1000ba8b8)
- IsCompositionActive (Address: 0x1000ba8c0)
- IsThemeActive (Address: 0x1000ba958)
- IsThemePartDefined (Address: 0x1000ba890)
- OpenThemeData (Address: 0x1000ba8c8)
- SetWindowTheme (Address: 0x1000ba8d8)
wrp64.dll
- (Address: 0x1000ba860)
- (Address: 0x1000ba868)
- (Address: 0x1000ba358)
- (Address: 0x1000ba378)
- (Address: 0x1000ba380)
- (Address: 0x1000ba388)
- (Address: 0x1000ba390)
- (Address: 0x1000ba398)
- (Address: 0x1000ba3a0)
- (Address: 0x1000ba3b0)
- (Address: 0x1000ba3b8)
- (Address: 0x1000ba030)
- (Address: 0x1000ba038)
- (Address: 0x1000ba050)
- (Address: 0x1000ba060)
- (Address: 0x1000ba068)
- (Address: 0x1000ba078)
- (Address: 0x1000ba080)
- (Address: 0x1000ba088)
- (Address: 0x1000ba090)
- (Address: 0x1000ba098)
- (Address: 0x1000ba0a0)
- (Address: 0x1000ba0a8)
- (Address: 0x1000ba0b8)
- (Address: 0x1000ba0c8)
- (Address: 0x1000ba0d8)
- (Address: 0x1000ba0f0)
- (Address: 0x1000ba0f8)
- (Address: 0x1000ba100)
- (Address: 0x1000ba118)
- (Address: 0x1000ba120)
- (Address: 0x1000ba128)
- (Address: 0x1000ba130)
- (Address: 0x1000ba138)
- (Address: 0x1000ba150)
- (Address: 0x1000ba158)
- (Address: 0x1000ba168)
- (Address: 0x1000ba178)
- (Address: 0x1000ba190)
- (Address: 0x1000ba1a0)
- (Address: 0x1000ba1b8)
- (Address: 0x1000ba1d0)
- (Address: 0x1000ba1d8)
- (Address: 0x1000ba1e0)
- (Address: 0x1000ba1e8)
- (Address: 0x1000ba1f0)
- (Address: 0x1000ba1f8)
- (Address: 0x1000ba220)
- (Address: 0x1000ba228)
- (Address: 0x1000ba230)
- (Address: 0x1000ba250)
- (Address: 0x1000ba258)
- (Address: 0x1000ba260)
- (Address: 0x1000ba268)
- (Address: 0x1000ba278)
- (Address: 0x1000ba288)
- (Address: 0x1000ba298)
- (Address: 0x1000ba2a0)
- (Address: 0x1000ba2b0)
- (Address: 0x1000ba2b8)
- (Address: 0x1000ba2c0)
- (Address: 0x1000ba2e0)
- (Address: 0x1000ba2e8)
- (Address: 0x1000ba2f0)
- (Address: 0x1000ba300)
- (Address: 0x1000ba318)
- (Address: 0x1000ba350)
- AssocCreate (Address: 0x1000ba2a8)
- AssocQueryKeyW (Address: 0x1000ba180)
- AssocQueryStringW (Address: 0x1000ba040)
- ChrCmpIW (Address: 0x1000ba170)
- CLSIDFromString (Address: 0x1000ba768)
- CoCreateFreeThreadedMarshaler (Address: 0x1000ba818)
- CoCreateInstance (Address: 0x1000ba7e0)
- CoFreeUnusedLibraries (Address: 0x1000ba7a8)
- CoGetInterfaceAndReleaseStream (Address: 0x1000ba778)
- CoGetMalloc (Address: 0x1000ba770)
- CoInitialize (Address: 0x1000ba798)
- CoInitializeEx (Address: 0x1000ba760)
- CoMarshalInterThreadInterfaceInStream (Address: 0x1000ba7a0)
- CoRegisterClassObject (Address: 0x1000ba7d8)
- CoRegisterMessageFilter (Address: 0x1000ba7b0)
- CoRevokeClassObject (Address: 0x1000ba7d0)
- CoTaskMemAlloc (Address: 0x1000ba810)
- CoTaskMemFree (Address: 0x1000ba7e8)
- CoUninitialize (Address: 0x1000ba790)
- CreateBindCtx (Address: 0x1000ba808)
- CreateStreamOnHGlobal (Address: 0x1000ba7f0)
- OleInitialize (Address: 0x1000ba7c8)
- OleUninitialize (Address: 0x1000ba7c0)
- PathAppendW (Address: 0x1000ba370)
- PathCombineW (Address: 0x1000ba2f8)
- PathCommonPrefixW (Address: 0x1000ba248)
- PathFileExistsW (Address: 0x1000ba108)
- PathFindExtensionW (Address: 0x1000ba3a8)
- PathFindFileNameW (Address: 0x1000ba328)
- PathGetArgsW (Address: 0x1000ba348)
- PathGetDriveNumberW (Address: 0x1000ba110)
- PathIsDirectoryW (Address: 0x1000ba148)
- PathIsFileSpecW (Address: 0x1000ba290)
- PathIsNetworkPathW (Address: 0x1000ba0b0)
- PathIsPrefixW (Address: 0x1000ba1c8)
- PathIsRootW (Address: 0x1000ba198)
- PathParseIconLocationW (Address: 0x1000ba1a8)
- PathQuoteSpacesW (Address: 0x1000ba048)
- PathRemoveArgsW (Address: 0x1000ba330)
- PathRemoveBlanksW (Address: 0x1000ba338)
- PathRemoveExtensionW (Address: 0x1000ba280)
- PathRemoveFileSpecW (Address: 0x1000ba140)
- PathStripPathW (Address: 0x1000ba188)
- PathStripToRootW (Address: 0x1000ba238)
- PropVariantClear (Address: 0x1000ba800)
- RegisterDragDrop (Address: 0x1000ba788)
- ReleaseStgMedium (Address: 0x1000ba7f8)
- RevokeDragDrop (Address: 0x1000ba780)
- SHCreateStreamOnFileW (Address: 0x1000ba200)
- SHCreateThreadRef (Address: 0x1000ba308)
- SHDeleteKeyW (Address: 0x1000ba058)
- SHDeleteValueW (Address: 0x1000ba368)
- SHGetValueW (Address: 0x1000ba320)
- SHOpenRegStream2W (Address: 0x1000ba0c0)
- SHQueryInfoKeyW (Address: 0x1000ba208)
- SHRegGetBoolUSValueW (Address: 0x1000ba0d0)
- SHRegGetUSValueW (Address: 0x1000ba070)
- SHRegGetValueW (Address: 0x1000ba160)
- SHSetThreadRef (Address: 0x1000ba310)
- SHSetValueW (Address: 0x1000ba360)
- SHStrDupA (Address: 0x1000ba270)
- SHStrDupW (Address: 0x1000ba0e0)
- StrChrIW (Address: 0x1000ba0e8)
- StrChrW (Address: 0x1000ba2d8)
- StrCmpIW (Address: 0x1000ba1b0)
- StrCmpNIW (Address: 0x1000ba340)
- StrCmpNW (Address: 0x1000ba210)
- StrCmpW (Address: 0x1000ba1c0)
- StringFromGUID2 (Address: 0x1000ba7b8)
- StrRetToBufW (Address: 0x1000ba240)
- StrRetToStrW (Address: 0x1000ba2c8)
- StrStrIW (Address: 0x1000ba028)
- StrToIntW (Address: 0x1000ba2d0)
- StrTrimW (Address: 0x1000ba218)