shell32.dll

Description: Windows Shell Common Dll

Version: 10.0.19041.7417

Architecture: 64-bit

Operating System: Windows NT

SHA256: 579cb61df91539f770f39c59c441a2c9

File Size: 7.5 MB

Uploaded At: July 18, 2026, 10:23 p.m.

Views: 10

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, OpenProcess

Exported Functions

SHChangeNotifyRegister (Ordinal: 2, Address: 0x96d70)
SHDefExtractIconA (Ordinal: 3, Address: 0x28adb0)
SHChangeNotifyDeregister (Ordinal: 4, Address: 0x77bc0)
(Ordinal: 5, Address: 0x6f18fb)
SHDefExtractIconW (Ordinal: 6, Address: 0x9a750)
(Ordinal: 7, Address: 0x6f1b48)
(Ordinal: 8, Address: 0x6f1b56)
PifMgr_OpenProperties (Ordinal: 9, Address: 0x110ff0)
PifMgr_GetProperties (Ordinal: 10, Address: 0x110ff0)
PifMgr_SetProperties (Ordinal: 11, Address: 0x110ff0)
(Ordinal: 12, Address: 0x2dcce0)
PifMgr_CloseProperties (Ordinal: 13, Address: 0x1d9a40)
SHStartNetConnectionDialogW (Ordinal: 14, Address: 0x2cc2c0)
(Ordinal: 15, Address: 0x296ea0)
ILFindLastID (Ordinal: 16, Address: 0x8a160)
ILRemoveLastID (Ordinal: 17, Address: 0xd38a0)
ILClone (Ordinal: 18, Address: 0x8a190)
ILCloneFirst (Ordinal: 19, Address: 0x44600)
(Ordinal: 20, Address: 0x8a190)
ILIsEqual (Ordinal: 21, Address: 0x91a60)
DAD_DragEnterEx2 (Ordinal: 22, Address: 0x2778d0)
ILIsParent (Ordinal: 23, Address: 0x65db0)
ILFindChild (Ordinal: 24, Address: 0x67e60)
ILCombine (Ordinal: 25, Address: 0x8a290)
(Ordinal: 26, Address: 0x6f17fd)
ILSaveToStream (Ordinal: 27, Address: 0x2971e0)
SHILCreateFromPath (Ordinal: 28, Address: 0x297320)
(Ordinal: 29, Address: 0x25dd90)
(Ordinal: 30, Address: 0x6f11f7)
(Ordinal: 31, Address: 0x6f1233)
(Ordinal: 32, Address: 0x6f11dd)
(Ordinal: 33, Address: 0x6f13e8)
(Ordinal: 34, Address: 0x6f124e)
(Ordinal: 35, Address: 0x25e5d0)
(Ordinal: 36, Address: 0x25d8d0)
(Ordinal: 37, Address: 0x6f121e)
(Ordinal: 38, Address: 0x6f1447)
(Ordinal: 39, Address: 0x6f132d)
(Ordinal: 40, Address: 0x6f12e5)
IsLFNDriveA (Ordinal: 41, Address: 0x679b0)
IsLFNDriveW (Ordinal: 42, Address: 0x679b0)
PathIsExe (Ordinal: 43, Address: 0x305c0)
(Ordinal: 44, Address: 0x260420)
(Ordinal: 45, Address: 0x25dae0)
(Ordinal: 46, Address: 0x6f1375)
PathMakeUniqueName (Ordinal: 47, Address: 0x25e1b0)
(Ordinal: 48, Address: 0x6f142b)
PathQualify (Ordinal: 49, Address: 0x25e5b0)
(Ordinal: 50, Address: 0x6f145e)
PathResolve (Ordinal: 51, Address: 0xedc40)
(Ordinal: 52, Address: 0x6f1280)
(Ordinal: 53, Address: 0x6f1834)
(Ordinal: 54, Address: 0x278740)
(Ordinal: 55, Address: 0x6f13b7)
(Ordinal: 56, Address: 0x6f1477)
(Ordinal: 57, Address: 0x6f1295)
(Ordinal: 58, Address: 0x23e180)
RestartDialog (Ordinal: 59, Address: 0x278760)
(Ordinal: 60, Address: 0x278660)
(Ordinal: 61, Address: 0x108170)
PickIconDlg (Ordinal: 62, Address: 0x1d9230)
GetFileNameFromBrowse (Ordinal: 63, Address: 0x28f240)
DriveType (Ordinal: 64, Address: 0x27c8f0)
(Ordinal: 65, Address: 0x33c20)
IsNetDrive (Ordinal: 66, Address: 0x27c910)
Shell_MergeMenus (Ordinal: 67, Address: 0xb8d50)
SHGetSetSettings (Ordinal: 68, Address: 0xc7c40)
(Ordinal: 69, Address: 0x298040)
(Ordinal: 70, Address: 0x1d5b80)
Shell_GetImageLists (Ordinal: 71, Address: 0x7e070)
Shell_GetCachedImageIndex (Ordinal: 72, Address: 0x28ae50)
SHShellFolderView_Message (Ordinal: 73, Address: 0x2c80b0)
SHCreateStdEnumFmtEtc (Ordinal: 74, Address: 0x1d5710)
PathYetAnotherMakeUniqueName (Ordinal: 75, Address: 0x25e6d0)
(Ordinal: 76, Address: 0x1da820)
SHMapPIDLToSystemImageListIndex (Ordinal: 77, Address: 0x69b30)
(Ordinal: 78, Address: 0x6f1876)
(Ordinal: 79, Address: 0x6f1c49)
SHOpenPropSheetW (Ordinal: 80, Address: 0x2daa30)
OpenAs_RunDLL (Ordinal: 81, Address: 0x33c20)
(Ordinal: 82, Address: 0x6f15c4)
CIDLData_CreateFromIDArray (Ordinal: 83, Address: 0x256420)
(Ordinal: 84, Address: 0x6f1af7)
OpenRegStream (Ordinal: 85, Address: 0x68d20)
(Ordinal: 86, Address: 0x6f1bc3)
(Ordinal: 87, Address: 0x6f1bd0)
SHDoDragDrop (Ordinal: 88, Address: 0x277b10)
SHCloneSpecialIDList (Ordinal: 89, Address: 0x68210)
SHFindFiles (Ordinal: 90, Address: 0x23f1f0)
(Ordinal: 91, Address: 0x23f120)
PathGetShortPath (Ordinal: 92, Address: 0x25dd20)
(Ordinal: 93, Address: 0x6f3e0e)
(Ordinal: 94, Address: 0x1d8c30)
(Ordinal: 95, Address: 0x907f0)
(Ordinal: 96, Address: 0x6f1c2f)
(Ordinal: 97, Address: 0x110ff0)
SHGetRealIDL (Ordinal: 98, Address: 0x23f3f0)
(Ordinal: 99, Address: 0xa9140)
SHRestricted (Ordinal: 100, Address: 0x94390)
(Ordinal: 101, Address: 0x6f171e)
SHCoCreateInstance (Ordinal: 102, Address: 0x55e90)
SignalFileOpen (Ordinal: 103, Address: 0x363a0)
(Ordinal: 104, Address: 0x6f1660)
(Ordinal: 105, Address: 0x6f16ad)
(Ordinal: 106, Address: 0x6f16d3)
(Ordinal: 107, Address: 0x6f16ec)
(Ordinal: 108, Address: 0x6f1705)
(Ordinal: 109, Address: 0x6f172a)
(Ordinal: 110, Address: 0x6f1620)
(Ordinal: 111, Address: 0x6f1750)
(Ordinal: 112, Address: 0x6f1783)
(Ordinal: 113, Address: 0x6f162c)
(Ordinal: 114, Address: 0x6f1639)
(Ordinal: 115, Address: 0x6f1613)
(Ordinal: 116, Address: 0x6f179d)
(Ordinal: 117, Address: 0x6f166c)
(Ordinal: 118, Address: 0x6f16a0)
IsLFNDrive (Ordinal: 119, Address: 0x679b0)
(Ordinal: 120, Address: 0x6f15f9)
(Ordinal: 121, Address: 0x6f1a2c)
(Ordinal: 122, Address: 0x6f18c7)
(Ordinal: 123, Address: 0x6f1a46)
(Ordinal: 124, Address: 0x6f1606)
OpenAs_RunDLLA (Ordinal: 125, Address: 0x33c20)
(Ordinal: 126, Address: 0x6f1b8c)
(Ordinal: 127, Address: 0x6f1c21)
(Ordinal: 128, Address: 0x90380)
DAD_AutoScroll (Ordinal: 129, Address: 0x110ff0)
(Ordinal: 130, Address: 0x6f15aa)
DAD_DragEnterEx (Ordinal: 131, Address: 0x679b0)
DAD_DragLeave (Ordinal: 132, Address: 0x2779d0)
OpenAs_RunDLLW (Ordinal: 133, Address: 0x1e9d20)
DAD_DragMove (Ordinal: 134, Address: 0x277a10)
PrepareDiscForBurnRunDllW (Ordinal: 135, Address: 0x1ee970)
DAD_SetDragImage (Ordinal: 136, Address: 0x679b0)
DAD_ShowDragImage (Ordinal: 137, Address: 0x679b0)
PrintersGetCommand_RunDLL (Ordinal: 138, Address: 0x1fd8c0)
PrintersGetCommand_RunDLLA (Ordinal: 139, Address: 0x1fd8c0)
(Ordinal: 140, Address: 0x6f1679)
(Ordinal: 141, Address: 0x6f1686)
(Ordinal: 142, Address: 0x6f1693)
(Ordinal: 143, Address: 0x6f16c6)
(Ordinal: 144, Address: 0x6f16df)
(Ordinal: 145, Address: 0x6f1268)
(Ordinal: 146, Address: 0x6f18ba)
SHCLSIDFromString (Ordinal: 147, Address: 0xda7c0)
(Ordinal: 148, Address: 0x6f1b64)
SHFind_InitMenuPopup (Ordinal: 149, Address: 0x2cf700)
PrintersGetCommand_RunDLLW (Ordinal: 150, Address: 0x1fd9b0)
(Ordinal: 151, Address: 0x6f1b2e)
ILGetSize (Ordinal: 152, Address: 0x49790)
ILGetNext (Ordinal: 153, Address: 0x10dea0)
ILAppendID (Ordinal: 154, Address: 0x296c30)
ILFree (Ordinal: 155, Address: 0x50d40)
(Ordinal: 156, Address: 0x50d40)
ILCreateFromPath (Ordinal: 157, Address: 0x296e50)
(Ordinal: 158, Address: 0x6f1891)
(Ordinal: 159, Address: 0x6f12c2)
(Ordinal: 160, Address: 0x2981e0)
(Ordinal: 161, Address: 0x6f1bdd)
SHSimpleIDListFromPath (Ordinal: 162, Address: 0x23fd80)
(Ordinal: 163, Address: 0x6f1c3c)
Win32DeleteFile (Ordinal: 164, Address: 0x1d8c20)
SHCreateDirectory (Ordinal: 165, Address: 0x23ec40)
(Ordinal: 166, Address: 0x6f153c)
SHAddFromPropSheetExtArray (Ordinal: 167, Address: 0x2a42f0)
SHCreatePropSheetExtArray (Ordinal: 168, Address: 0x10dfd0)
SHDestroyPropSheetExtArray (Ordinal: 169, Address: 0x10e0b0)
SHReplaceFromPropSheetExtArray (Ordinal: 170, Address: 0x2a4380)
PathCleanupSpec (Ordinal: 171, Address: 0x42c50)
(Ordinal: 172, Address: 0x250bb0)
SHValidateUNC (Ordinal: 173, Address: 0x28bb60)
SHCreateShellFolderViewEx (Ordinal: 174, Address: 0x2c8000)
(Ordinal: 175, Address: 0x68d00)
SHSetInstanceExplorer (Ordinal: 176, Address: 0x67680)
(Ordinal: 177, Address: 0x6f15b7)
SHObjectProperties (Ordinal: 178, Address: 0x22d2f0)
SHGetNewLinkInfoA (Ordinal: 179, Address: 0x2511b0)
SHGetNewLinkInfoW (Ordinal: 180, Address: 0x2512d0)
(Ordinal: 181, Address: 0x688b0)
ShellMessageBoxW (Ordinal: 182, Address: 0x6f3b99)
ShellMessageBoxA (Ordinal: 183, Address: 0x6f3b6f)
(Ordinal: 184, Address: 0x110ff0)
(Ordinal: 185, Address: 0x6f1acd)
(Ordinal: 186, Address: 0x296ec0)
(Ordinal: 187, Address: 0x6f17ef)
(Ordinal: 188, Address: 0x629a0)
ILCreateFromPathA (Ordinal: 189, Address: 0x296d20)
ILCreateFromPathW (Ordinal: 190, Address: 0x296e50)
SHUpdateImageA (Ordinal: 191, Address: 0x2a3d00)
SHUpdateImageW (Ordinal: 192, Address: 0x2a3d70)
SHHandleUpdateImage (Ordinal: 193, Address: 0x2a3c40)
(Ordinal: 194, Address: 0x10dfe0)
SHFree (Ordinal: 195, Address: 0x50d40)
SHAlloc (Ordinal: 196, Address: 0x641c0)
(Ordinal: 197, Address: 0x6f1ac0)
(Ordinal: 198, Address: 0x6f18d4)
RealShellExecuteA (Ordinal: 199, Address: 0x202aa0)
(Ordinal: 200, Address: 0xd5c40)
(Ordinal: 201, Address: 0x779a0)
(Ordinal: 202, Address: 0x6f15d1)
(Ordinal: 203, Address: 0x23b9f0)
(Ordinal: 204, Address: 0x2402f0)
(Ordinal: 205, Address: 0x1fe5d0)
(Ordinal: 206, Address: 0xd5810)
RealShellExecuteExA (Ordinal: 207, Address: 0x202aa0)
RealShellExecuteExW (Ordinal: 208, Address: 0x202aa0)
(Ordinal: 209, Address: 0x23d800)
(Ordinal: 210, Address: 0x23e040)
(Ordinal: 211, Address: 0xdfb30)
(Ordinal: 212, Address: 0x1fe2a0)
(Ordinal: 213, Address: 0x1fe710)
(Ordinal: 214, Address: 0x1fe830)
(Ordinal: 215, Address: 0x2cc2c0)
(Ordinal: 216, Address: 0x6f1769)
(Ordinal: 217, Address: 0x6f1790)
(Ordinal: 218, Address: 0x6f1736)
(Ordinal: 219, Address: 0x6f1743)
(Ordinal: 220, Address: 0x6f16f8)
(Ordinal: 221, Address: 0x6f16b9)
(Ordinal: 222, Address: 0x6f1711)
(Ordinal: 223, Address: 0x6f1776)
(Ordinal: 224, Address: 0x6f1653)
(Ordinal: 225, Address: 0x6f175c)
RealShellExecuteW (Ordinal: 226, Address: 0x202aa0)
(Ordinal: 227, Address: 0x6f1646)
SHHelpShortcuts_RunDLL (Ordinal: 228, Address: 0x22d090)
SHHelpShortcuts_RunDLLA (Ordinal: 229, Address: 0x22d090)
(Ordinal: 230, Address: 0x6f17aa)
SHSetFolderPathA (Ordinal: 231, Address: 0x27cd70)
SHSetFolderPathW (Ordinal: 232, Address: 0x27cd90)
(Ordinal: 233, Address: 0x6f1aa5)
(Ordinal: 234, Address: 0x6f1bf9)
(Ordinal: 235, Address: 0x6f1b71)
(Ordinal: 236, Address: 0x2979a0)
(Ordinal: 237, Address: 0x679b0)
SHHelpShortcuts_RunDLLW (Ordinal: 238, Address: 0x22d140)
PathIsSlowW (Ordinal: 239, Address: 0x25e070)
PathIsSlowA (Ordinal: 240, Address: 0x25e010)
(Ordinal: 241, Address: 0xe4400)
(Ordinal: 242, Address: 0x6f1a7d)
(Ordinal: 243, Address: 0x6f1beb)
(Ordinal: 244, Address: 0x81150)
SHTestTokenMembership (Ordinal: 245, Address: 0x65bd0)
(Ordinal: 246, Address: 0x6f1ae9)
(Ordinal: 247, Address: 0x6f1a53)
(Ordinal: 248, Address: 0x6f1ab2)
(Ordinal: 249, Address: 0x6f138c)
(Ordinal: 250, Address: 0x6f1402)
(Ordinal: 251, Address: 0x6f13d0)
(Ordinal: 252, Address: 0x6f1340)
(Ordinal: 253, Address: 0x6f1b04)
(Ordinal: 254, Address: 0x278640)
AppCompat_RunDLLW (Ordinal: 255, Address: 0x246ae0)
SHCreateShellFolderView (Ordinal: 256, Address: 0xd32b0)
(Ordinal: 257, Address: 0x110ff0)
(Ordinal: 258, Address: 0x10e4d0)
(Ordinal: 259, Address: 0x679b0)
(Ordinal: 260, Address: 0x268470)
(Ordinal: 261, Address: 0x2d28d0)
(Ordinal: 262, Address: 0x2d2c10)
AssocCreateForClasses (Ordinal: 263, Address: 0xb9e20)
(Ordinal: 264, Address: 0x2684a0)
(Ordinal: 265, Address: 0x28bd00)
(Ordinal: 266, Address: 0x28bf60)
AssocElemCreateForKey (Ordinal: 267, Address: 0x24e1e0)
AssocGetDetailsOfPropKey (Ordinal: 268, Address: 0x24e480)
CallFileCopyHook (Ordinal: 269, Address: 0x124900)
(Ordinal: 270, Address: 0x2d1a10)
(Ordinal: 271, Address: 0x2dcd80)
CheckEscapesW (Ordinal: 272, Address: 0x25d750)
CommandLineToArgvW (Ordinal: 273, Address: 0x512e0)
Control_RunDLL (Ordinal: 274, Address: 0x260370)
Control_RunDLLA (Ordinal: 275, Address: 0x260370)
Control_RunDLLAsUserW (Ordinal: 276, Address: 0x2603f0)
Control_RunDLLW (Ordinal: 277, Address: 0x260450)
DllCanUnloadNow (Ordinal: 278, Address: 0x4f880)
DllGetActivationFactory (Ordinal: 279, Address: 0x1e0a40)
DllGetClassObject (Ordinal: 280, Address: 0x90380)
DllGetVersion (Ordinal: 281, Address: 0x27b7c0)
DllInstall (Ordinal: 282, Address: 0x27b890)
DllRegisterServer (Ordinal: 283, Address: 0x110ff0)
DllUnregisterServer (Ordinal: 284, Address: 0x110ff0)
DoEnvironmentSubstA (Ordinal: 285, Address: 0x1d5c40)
DoEnvironmentSubstW (Ordinal: 286, Address: 0x1d5cf0)
DragAcceptFiles (Ordinal: 287, Address: 0x66bc0)
DragFinish (Ordinal: 288, Address: 0x1da4e0)
DragQueryFile (Ordinal: 289, Address: 0x1da500)
DragQueryFileA (Ordinal: 290, Address: 0x1da500)
DragQueryFileAorW (Ordinal: 291, Address: 0x1da530)
DragQueryFileW (Ordinal: 292, Address: 0x1da800)
DragQueryPoint (Ordinal: 293, Address: 0x1da9d0)
DuplicateIcon (Ordinal: 294, Address: 0x4bcd0)
ExtractAssociatedIconA (Ordinal: 295, Address: 0x1d5e20)
ExtractAssociatedIconExA (Ordinal: 296, Address: 0x1d5f10)
ExtractAssociatedIconExW (Ordinal: 297, Address: 0x1d6000)
ExtractAssociatedIconW (Ordinal: 298, Address: 0x1d6270)
ExtractIconA (Ordinal: 299, Address: 0x1d6340)
ExtractIconEx (Ordinal: 300, Address: 0x1d63d0)
ExtractIconExA (Ordinal: 301, Address: 0x1d63d0)
ExtractIconExW (Ordinal: 302, Address: 0x42470)
ExtractIconW (Ordinal: 303, Address: 0x1d6450)
FindExecutableA (Ordinal: 304, Address: 0x28b680)
FindExecutableW (Ordinal: 305, Address: 0x28b760)
FreeIconList (Ordinal: 306, Address: 0x33c20)
GetCurrentProcessExplicitAppUserModelID (Ordinal: 307, Address: 0x28c340)
InitNetworkAddressControl (Ordinal: 308, Address: 0x297720)
InternalExtractIconListA (Ordinal: 309, Address: 0x110ff0)
InternalExtractIconListW (Ordinal: 310, Address: 0x110ff0)
LaunchMSHelp_RunDLLW (Ordinal: 311, Address: 0x1e0c10)
Options_RunDLL (Ordinal: 312, Address: 0x4da600)
Options_RunDLLA (Ordinal: 313, Address: 0x4da600)
Options_RunDLLW (Ordinal: 314, Address: 0x4da660)
RegenerateUserEnvironment (Ordinal: 315, Address: 0x1db6b0)
RunAsNewUser_RunDLLW (Ordinal: 316, Address: 0x1e1ec0)
SHAddDefaultPropertiesByExt (Ordinal: 317, Address: 0xe4640)
SHAddToRecentDocs (Ordinal: 318, Address: 0x110cc0)
SHAppBarMessage (Ordinal: 319, Address: 0x27c930)
SHAssocEnumHandlers (Ordinal: 320, Address: 0x1a550)
SHAssocEnumHandlersForProtocolByApplication (Ordinal: 321, Address: 0x2a9590)
SHBindToFolderIDListParent (Ordinal: 322, Address: 0xb7bc0)
SHBindToFolderIDListParentEx (Ordinal: 323, Address: 0xb7bf0)
SHBindToObject (Ordinal: 324, Address: 0x8d2e0)
SHBindToParent (Ordinal: 325, Address: 0x8a090)
SHBrowseForFolder (Ordinal: 326, Address: 0x2adc30)
SHBrowseForFolderA (Ordinal: 327, Address: 0x2adc30)
SHBrowseForFolderW (Ordinal: 328, Address: 0x2ade60)
SHChangeNotify (Ordinal: 329, Address: 0x87a50)
SHChangeNotifyRegisterThread (Ordinal: 330, Address: 0x77a40)
SHChangeNotifySuspendResume (Ordinal: 331, Address: 0x2a3b80)
SHCoCreateInstanceWorker (Ordinal: 332, Address: 0x2aea60)
SHCreateAssociationRegistration (Ordinal: 333, Address: 0x4a580)
SHCreateCategoryEnum (Ordinal: 334, Address: 0x2b5db0)
SHCreateDataObject (Ordinal: 335, Address: 0x139c0)
SHCreateDefaultContextMenu (Ordinal: 336, Address: 0xb6f20)
SHCreateDefaultExtractIcon (Ordinal: 337, Address: 0xf4fd0)
SHCreateDefaultPropertiesOp (Ordinal: 338, Address: 0x2a3f90)
SHCreateDirectoryExA (Ordinal: 339, Address: 0x23ec20)
SHCreateDirectoryExW (Ordinal: 340, Address: 0x25360)
SHCreateDrvExtIcon (Ordinal: 341, Address: 0x2b8390)
SHCreateItemFromIDList (Ordinal: 342, Address: 0x8ad10)
SHCreateItemFromParsingName (Ordinal: 343, Address: 0xb52e0)
SHCreateItemFromRelativeName (Ordinal: 344, Address: 0x250a80)
SHCreateItemInKnownFolder (Ordinal: 345, Address: 0x8ba50)
SHCreateItemWithParent (Ordinal: 346, Address: 0x89bd0)
SHCreateLocalServerRunDll (Ordinal: 347, Address: 0x25ee0)
SHCreateProcessAsUserW (Ordinal: 348, Address: 0x204e20)
SHCreateQueryCancelAutoPlayMoniker (Ordinal: 349, Address: 0x110b40)
SHCreateShellItem (Ordinal: 350, Address: 0x102430)
SHCreateShellItemArray (Ordinal: 351, Address: 0x1e7490)
SHCreateShellItemArrayFromDataObject (Ordinal: 352, Address: 0x24a00)
SHCreateShellItemArrayFromIDLists (Ordinal: 353, Address: 0x69120)
SHCreateShellItemArrayFromShellItem (Ordinal: 354, Address: 0x250b0)
SHELL32_AddToBackIconTable (Ordinal: 355, Address: 0x7ebd0)
SHELL32_AddToFrontIconTable (Ordinal: 356, Address: 0x7ea80)
SHELL32_AreAllItemsAvailable (Ordinal: 357, Address: 0x851e0)
SHELL32_CCommonPlacesFolder_CreateInstance (Ordinal: 358, Address: 0x2cba70)
SHELL32_CDBurn_CloseSession (Ordinal: 359, Address: 0x2cba80)
SHELL32_CDBurn_DriveSupportedForDataBurn (Ordinal: 360, Address: 0x2cba90)
SHELL32_CDBurn_Erase (Ordinal: 361, Address: 0x2cbaa0)
SHELL32_CDBurn_GetCDInfo (Ordinal: 362, Address: 0x2cbb00)
SHELL32_CDBurn_GetLiveFSDiscInfo (Ordinal: 363, Address: 0x2cbb10)
SHELL32_CDBurn_GetStagingPathOrNormalPath (Ordinal: 364, Address: 0x644a0)
SHELL32_CDBurn_GetTaskInfo (Ordinal: 365, Address: 0x2cbb20)
SHELL32_CDBurn_IsBlankDisc (Ordinal: 366, Address: 0x2cbb30)
SHELL32_CDBurn_IsBlankDisc2 (Ordinal: 367, Address: 0x2cbb40)
SHELL32_CDBurn_IsLiveFS (Ordinal: 368, Address: 0x2cbba0)
SHELL32_CDBurn_OnDeviceChange (Ordinal: 369, Address: 0x2cbbb0)
SHELL32_CDBurn_OnEject (Ordinal: 370, Address: 0x2cbbc0)
SHELL32_CDBurn_OnMediaChange (Ordinal: 371, Address: 0x2cbc40)
SHELL32_CDefFolderMenu_Create2 (Ordinal: 372, Address: 0x2cbc50)
SHELL32_CDefFolderMenu_Create2Ex (Ordinal: 373, Address: 0x2cbcb0)
SHELL32_CDefFolderMenu_MergeMenu (Ordinal: 374, Address: 0x2cbd10)
SHELL32_CDrivesContextMenu_Create (Ordinal: 375, Address: 0x2cbd20)
SHELL32_CDrivesDropTarget_Create (Ordinal: 376, Address: 0x2cbd30)
SHELL32_CDrives_CreateSFVCB (Ordinal: 377, Address: 0x2cbd40)
SHELL32_CFSDropTarget_CreateInstance (Ordinal: 378, Address: 0x5a0a0)
SHELL32_CFSFolderCallback_Create (Ordinal: 379, Address: 0xdbc70)
SHELL32_CFillPropertiesTask_CreateInstance (Ordinal: 380, Address: 0xdce10)
SHELL32_CLibraryDropTarget_CreateInstance (Ordinal: 381, Address: 0x2cbda0)
SHELL32_CLocationContextMenu_Create (Ordinal: 382, Address: 0xdc660)
SHELL32_CLocationFolderUI_CreateInstance (Ordinal: 383, Address: 0x2cbdb0)
SHELL32_CMountPoint_DoAutorun (Ordinal: 384, Address: 0x2cbdc0)
SHELL32_CMountPoint_DoAutorunPrompt (Ordinal: 385, Address: 0x2cbdd0)
SHELL32_CMountPoint_IsAutoRunDriveAndEnabledByPolicy (Ordinal: 386, Address: 0x2cbe00)
SHELL32_CMountPoint_ProcessAutoRunFile (Ordinal: 387, Address: 0x2cbe10)
SHELL32_CMountPoint_WantAutorunUI (Ordinal: 388, Address: 0x2cbe20)
SHELL32_CMountPoint_WantAutorunUIGetReady (Ordinal: 389, Address: 0x2cbe30)
SHELL32_CNetFolderUI_CreateInstance (Ordinal: 390, Address: 0x2cbe40)
SHELL32_CPL_CategoryIdArrayFromVariant (Ordinal: 391, Address: 0x1028f0)
SHELL32_CPL_IsLegacyCanonicalNameListedUnderKey (Ordinal: 392, Address: 0x2cbe50)
SHELL32_CPL_ModifyWowDisplayName (Ordinal: 393, Address: 0x2cbe70)
SHELL32_CRecentDocsContextMenu_CreateInstance (Ordinal: 394, Address: 0x2cbe80)
SHELL32_CTransferConfirmation_CreateInstance (Ordinal: 395, Address: 0x2cbe90)
SHELL32_CallFileCopyHooks (Ordinal: 396, Address: 0x2cbea0)
SHELL32_CanDisplayWin8CopyDialog (Ordinal: 397, Address: 0x2cbf00)
SHELL32_CloseAutoplayPrompt (Ordinal: 398, Address: 0x2cbf30)
SHELL32_CommandLineFromMsiDescriptor (Ordinal: 399, Address: 0x2cbf40)
SHELL32_CopySecondaryTiles (Ordinal: 400, Address: 0x110ff0)
SHELL32_CreateConfirmationInterrupt (Ordinal: 401, Address: 0x2cbf60)
SHELL32_CreateConflictInterrupt (Ordinal: 402, Address: 0x2cbf70)
SHELL32_CreateDefaultOperationDataProvider (Ordinal: 403, Address: 0x2cbf80)
SHELL32_CreateFileFolderContextMenu (Ordinal: 404, Address: 0x2cc000)
SHELL32_CreateLinkInfoW (Ordinal: 405, Address: 0x67d10)
SHELL32_CreateQosRecorder (Ordinal: 406, Address: 0xdd460)
SHELL32_CreateSharePointView (Ordinal: 407, Address: 0x2cc010)
SHELL32_Create_IEnumUICommand (Ordinal: 408, Address: 0x272d40)
SHELL32_DestroyLinkInfo (Ordinal: 409, Address: 0x67cf0)
SHELL32_EncryptDirectory (Ordinal: 410, Address: 0x2cc020)
SHELL32_EncryptedFileKeyInfo (Ordinal: 411, Address: 0x2cc030)
SHELL32_EnumCommonTasks (Ordinal: 412, Address: 0x2cc050)
SHELL32_FreeEncryptedFileKeyInfo (Ordinal: 413, Address: 0x2cc060)
SHELL32_GenerateAppID (Ordinal: 414, Address: 0x2cc080)
SHELL32_GetAppIDRoot (Ordinal: 415, Address: 0x2cc090)
SHELL32_GetCommandProviderForFolderType (Ordinal: 416, Address: 0x2cc0a0)
SHELL32_GetDPIAdjustedLogicalSize (Ordinal: 417, Address: 0x67de0)
SHELL32_GetDiskCleanupPath (Ordinal: 418, Address: 0x2cc0c0)
SHELL32_GetFileNameFromBrowse (Ordinal: 419, Address: 0x2cc0d0)
SHELL32_GetIconOverlayManager (Ordinal: 420, Address: 0x663b0)
SHELL32_GetLinkInfoData (Ordinal: 421, Address: 0x2cc0e0)
SHELL32_GetRatingBucket (Ordinal: 422, Address: 0x2cc100)
SHELL32_GetSqmableFileName (Ordinal: 423, Address: 0x2cc130)
SHELL32_GetThumbnailAdornerFromFactory (Ordinal: 424, Address: 0x2cc140)
SHELL32_GetThumbnailAdornerFromFactory2 (Ordinal: 425, Address: 0xb2b0)
SHELL32_HandleUnrecognizedFileSystem (Ordinal: 426, Address: 0x2cc150)
SHELL32_IconCacheCreate (Ordinal: 427, Address: 0x57f30)
SHELL32_IconCacheDestroy (Ordinal: 428, Address: 0x67a50)
SHELL32_IconCacheHandleAssociationChanged (Ordinal: 429, Address: 0x2cc160)
SHELL32_IconCacheRestore (Ordinal: 430, Address: 0x3b950)
SHELL32_IconCache_AboutToExtractIcons (Ordinal: 431, Address: 0x7e280)
SHELL32_IconCache_DoneExtractingIcons (Ordinal: 432, Address: 0x7e3d0)
SHELL32_IconCache_ExpandEnvAndSearchPath (Ordinal: 433, Address: 0x62f20)
SHELL32_IconCache_RememberRecentlyExtractedIconsW (Ordinal: 434, Address: 0x56800)
SHELL32_IconOverlayManagerInit (Ordinal: 435, Address: 0x80870)
SHELL32_IsGetKeyboardLayoutPresent (Ordinal: 436, Address: 0x679b0)
SHELL32_IsSystemUpgradeInProgress (Ordinal: 437, Address: 0xe4560)
SHELL32_IsValidLinkInfo (Ordinal: 438, Address: 0x656a0)
SHELL32_LegacyEnumSpecialTasksByType (Ordinal: 439, Address: 0x2cc170)
SHELL32_LegacyEnumTasks (Ordinal: 440, Address: 0x2cc180)
SHELL32_LookupBackIconIndex (Ordinal: 441, Address: 0x98340)
SHELL32_LookupFrontIconIndex (Ordinal: 442, Address: 0x49c60)
SHELL32_NormalizeRating (Ordinal: 443, Address: 0x2cc190)
SHELL32_NotifyLinkTrackingServiceOfMove (Ordinal: 444, Address: 0x2cc1a0)
SHELL32_PifMgr_CloseProperties (Ordinal: 445, Address: 0x1d9a40)
SHELL32_PifMgr_GetProperties (Ordinal: 446, Address: 0x110ff0)
SHELL32_PifMgr_OpenProperties (Ordinal: 447, Address: 0x110ff0)
SHELL32_PifMgr_SetProperties (Ordinal: 448, Address: 0x110ff0)
SHELL32_Printers_CreateBindInfo (Ordinal: 449, Address: 0x2cc1b0)
SHELL32_Printjob_GetPidl (Ordinal: 450, Address: 0x2cc1c0)
SHELL32_PurgeSystemIcon (Ordinal: 451, Address: 0x2cc1d0)
SHELL32_RefreshOverlayImages (Ordinal: 452, Address: 0x803f0)
SHELL32_ResolveLinkInfoW (Ordinal: 453, Address: 0x2cc1e0)
SHELL32_SHAddSparseIcon (Ordinal: 454, Address: 0x2cc200)
SHELL32_SHCreateByValueOperationInterrupt (Ordinal: 455, Address: 0x2cc210)
SHELL32_SHCreateDefaultContextMenu (Ordinal: 456, Address: 0x6a110)
SHELL32_SHCreateLocalServer (Ordinal: 457, Address: 0x2cc220)
SHELL32_SHCreateShellFolderView (Ordinal: 458, Address: 0xd4a10)
SHELL32_SHDuplicateEncryptionInfoFile (Ordinal: 459, Address: 0x2cc230)
SHELL32_SHEncryptFile (Ordinal: 460, Address: 0x2cc250)
SHELL32_SHFormatDriveAsync (Ordinal: 461, Address: 0x2cc260)
SHELL32_SHGetThreadUndoManager (Ordinal: 462, Address: 0x2cc270)
SHELL32_SHGetUserNameW (Ordinal: 463, Address: 0x110bb0)
SHELL32_SHIsVirtualDevice (Ordinal: 464, Address: 0x2cc280)
SHELL32_SHLaunchPropSheet (Ordinal: 465, Address: 0x2cc290)
SHELL32_SHLogILFromFSIL (Ordinal: 466, Address: 0x2cc2a0)
SHELL32_SHOpenWithDialog (Ordinal: 467, Address: 0x2cc2b0)
SHELL32_SHStartNetConnectionDialogW (Ordinal: 468, Address: 0x2cc2c0)
SHELL32_SHUICommandFromGUID (Ordinal: 469, Address: 0x289fc0)
SHELL32_SendToMenu_InvokeTargetedCommand (Ordinal: 470, Address: 0x4db880)
SHELL32_SendToMenu_VerifyTargetedCommand (Ordinal: 471, Address: 0x4db8d0)
SHELL32_ShowHideIconOnlyOnDesktop (Ordinal: 472, Address: 0x2cc2e0)
SHELL32_SimpleRatingToFilterCondition (Ordinal: 473, Address: 0x2cc2f0)
SHELL32_StampIconForFile (Ordinal: 474, Address: 0x2cc300)
SHELL32_SuspendUndo (Ordinal: 475, Address: 0x67d30)
SHELL32_TryVirtualDiscImageDriveEject (Ordinal: 476, Address: 0x2cc360)
SHELL32_VerifySaferTrust (Ordinal: 477, Address: 0x5be20)
SHEmptyRecycleBinA (Ordinal: 478, Address: 0x2cc770)
SHEmptyRecycleBinW (Ordinal: 479, Address: 0x2cc800)
SHEnableServiceObject (Ordinal: 480, Address: 0xafdd0)
SHEnumerateUnreadMailAccountsW (Ordinal: 481, Address: 0x23ee90)
SHEvaluateSystemCommandTemplate (Ordinal: 482, Address: 0x58f30)
SHExecuteErrorMessageBox (Ordinal: 483, Address: 0x2ceb90)
SHExtractIconsW (Ordinal: 484, Address: 0x1d68b0)
SHFileOperation (Ordinal: 485, Address: 0x1e74b0)
SHFileOperationA (Ordinal: 486, Address: 0x1e74b0)
SHFileOperationW (Ordinal: 487, Address: 0x1e74d0)
SHFormatDrive (Ordinal: 488, Address: 0x246ef0)
SHFreeNameMappings (Ordinal: 489, Address: 0x1e74f0)
SHGetDataFromIDListA (Ordinal: 490, Address: 0x250e50)
SHGetDataFromIDListW (Ordinal: 491, Address: 0x59b10)
SHGetDesktopFolder (Ordinal: 492, Address: 0x69e20)
SHGetDiskFreeSpaceA (Ordinal: 493, Address: 0x250f60)
SHGetDiskFreeSpaceExA (Ordinal: 494, Address: 0x250f60)
SHGetDiskFreeSpaceExW (Ordinal: 495, Address: 0x250fe0)
SHGetDriveMedia (Ordinal: 496, Address: 0x2d7b70)
SHGetFileInfo (Ordinal: 497, Address: 0x1ef50)
SHGetFileInfoA (Ordinal: 498, Address: 0x1ef50)
SHGetFileInfoW (Ordinal: 499, Address: 0x924d0)
SHGetFolderLocation (Ordinal: 500, Address: 0x26160)
SHGetFolderPathA (Ordinal: 501, Address: 0x27cba0)
SHGetFolderPathAndSubDirA (Ordinal: 502, Address: 0x27cbc0)
SHGetFolderPathAndSubDirW (Ordinal: 503, Address: 0x6a400)
SHGetFolderPathEx (Ordinal: 504, Address: 0x21690)
SHGetFolderPathW (Ordinal: 505, Address: 0x4f860)
SHGetIDListFromObject (Ordinal: 506, Address: 0x8ac20)
SHGetIconOverlayIndexA (Ordinal: 507, Address: 0x2d8400)
SHGetIconOverlayIndexW (Ordinal: 508, Address: 0x2d8480)
SHGetInstanceExplorer (Ordinal: 509, Address: 0x69190)
SHGetItemFromDataObject (Ordinal: 510, Address: 0x36640)
SHGetItemFromObject (Ordinal: 511, Address: 0xd39e0)
SHGetKnownFolderIDList (Ordinal: 512, Address: 0x69080)
SHGetKnownFolderItem (Ordinal: 513, Address: 0x69060)
SHGetKnownFolderPath (Ordinal: 514, Address: 0x670b0)
SHGetLocalizedName (Ordinal: 515, Address: 0x251000)
SHGetMalloc (Ordinal: 516, Address: 0x1090f0)
SHGetNameFromIDList (Ordinal: 517, Address: 0x23ec0)
SHGetNewLinkInfo (Ordinal: 518, Address: 0x2511b0)
SHGetPathFromIDList (Ordinal: 519, Address: 0x23f2d0)
(Ordinal: 520, Address: 0x6f18e1)
(Ordinal: 521, Address: 0x6f1b3b)
(Ordinal: 522, Address: 0x6f1c06)
(Ordinal: 523, Address: 0x6f1a39)
RealDriveType (Ordinal: 524, Address: 0x27c8f0)
(Ordinal: 525, Address: 0x6f15eb)
SHFlushSFCache (Ordinal: 526, Address: 0x2cfdd0)
SHGetPathFromIDListA (Ordinal: 527, Address: 0x23f2d0)
SHGetPathFromIDListEx (Ordinal: 528, Address: 0x50d60)
SHGetPathFromIDListW (Ordinal: 529, Address: 0x8cc20)
SHGetPropertyStoreForWindow (Ordinal: 530, Address: 0x449f0)
SHGetPropertyStoreFromIDList (Ordinal: 531, Address: 0x251300)
SHGetPropertyStoreFromParsingName (Ordinal: 532, Address: 0x251390)
SHGetSettings (Ordinal: 533, Address: 0x2d8cb0)
SHGetSpecialFolderLocation (Ordinal: 534, Address: 0x67660)
SHGetSpecialFolderPathA (Ordinal: 535, Address: 0x27cbe0)
SHGetSpecialFolderPathW (Ordinal: 536, Address: 0x68d00)
SHGetStockIconInfo (Ordinal: 537, Address: 0xee6b0)
SHGetTemporaryPropertyForItem (Ordinal: 538, Address: 0x7d1e0)
SHGetUnreadMailCountW (Ordinal: 539, Address: 0x23f410)
SHInvokePrinterCommandA (Ordinal: 540, Address: 0x1fe850)
SHInvokePrinterCommandW (Ordinal: 541, Address: 0x1fe940)
SHIsFileAvailableOffline (Ordinal: 542, Address: 0x23f860)
SHLoadInProc (Ordinal: 543, Address: 0xdc660)
SHLoadNonloadedIconOverlayIdentifiers (Ordinal: 544, Address: 0x23fb20)
SHOpenFolderAndSelectItems (Ordinal: 545, Address: 0x251440)
SHOpenWithDialog (Ordinal: 546, Address: 0x1ead50)
SHParseDisplayName (Ordinal: 547, Address: 0x94070)
SHPathPrepareForWriteA (Ordinal: 548, Address: 0x1e7530)
SHPathPrepareForWriteW (Ordinal: 549, Address: 0x1e7550)
SHQueryRecycleBinA (Ordinal: 550, Address: 0x2dc020)
SHQueryRecycleBinW (Ordinal: 551, Address: 0x2dc0b0)
SHQueryUserNotificationState (Ordinal: 552, Address: 0x27cca0)
SHRemoveLocalizedName (Ordinal: 553, Address: 0x251880)
SHResolveLibrary (Ordinal: 554, Address: 0x27cd50)
SHSetDefaultProperties (Ordinal: 555, Address: 0x2a40d0)
SHSetKnownFolderPath (Ordinal: 556, Address: 0x27cdb0)
SHSetLocalizedName (Ordinal: 557, Address: 0x251920)
SHSetTemporaryPropertyForItem (Ordinal: 558, Address: 0xd4950)
SHSetUnreadMailCountW (Ordinal: 559, Address: 0x23fb50)
SHShowManageLibraryUI (Ordinal: 560, Address: 0x511570)
SHUpdateRecycleBinIcon (Ordinal: 561, Address: 0x677c0)
SetCurrentProcessExplicitAppUserModelID (Ordinal: 562, Address: 0x110fd0)
SheChangeDirA (Ordinal: 563, Address: 0x1d9a50)
SheChangeDirExW (Ordinal: 564, Address: 0x1d9ad0)
SheGetDirA (Ordinal: 565, Address: 0x1da0e0)
SheSetCurDrive (Ordinal: 566, Address: 0x1da330)
ShellAboutA (Ordinal: 567, Address: 0x2ec160)
ShellAboutW (Ordinal: 568, Address: 0x2ec290)
ShellExec_RunDLL (Ordinal: 569, Address: 0x204e50)
ShellExec_RunDLLA (Ordinal: 570, Address: 0x204e50)
ShellExec_RunDLLW (Ordinal: 571, Address: 0x204f00)
ShellExecuteA (Ordinal: 572, Address: 0x205060)
ShellExecuteEx (Ordinal: 573, Address: 0x205100)
ShellExecuteExA (Ordinal: 574, Address: 0x205100)
ShellExecuteExW (Ordinal: 575, Address: 0xa6bb0)
ShellExecuteW (Ordinal: 576, Address: 0x10ba10)
ShellHookProc (Ordinal: 577, Address: 0x110ff0)
Shell_GetCachedImageIndexA (Ordinal: 578, Address: 0x28ae60)
Shell_GetCachedImageIndexW (Ordinal: 579, Address: 0x986e0)
Shell_NotifyIcon (Ordinal: 580, Address: 0x27cdf0)
Shell_NotifyIconA (Ordinal: 581, Address: 0x27cdf0)
Shell_NotifyIconGetRect (Ordinal: 582, Address: 0x10d950)
Shell_NotifyIconW (Ordinal: 583, Address: 0xad960)
StateRepoNewMenuCache_EnsureCacheAsync (Ordinal: 584, Address: 0x41060)
StateRepoNewMenuCache_RebuildCacheAsync (Ordinal: 585, Address: 0x412a0)
StrChrA (Ordinal: 586, Address: 0x116dd0)
StrChrIA (Ordinal: 587, Address: 0x116de0)
StrChrIW (Ordinal: 588, Address: 0x116df0)
StrChrW (Ordinal: 589, Address: 0x116e00)
StrCmpNA (Ordinal: 590, Address: 0x116e10)
StrCmpNIA (Ordinal: 591, Address: 0x116e20)
StrCmpNIW (Ordinal: 592, Address: 0x116e30)
StrCmpNW (Ordinal: 593, Address: 0x116e40)
StrNCmpA (Ordinal: 594, Address: 0x1d7fd0)
StrNCmpIA (Ordinal: 595, Address: 0x1d8090)
StrNCmpIW (Ordinal: 596, Address: 0x1d8150)
StrNCmpW (Ordinal: 597, Address: 0x1d8220)
StrRChrA (Ordinal: 598, Address: 0x116e50)
StrRChrIA (Ordinal: 599, Address: 0x116e60)
StrRChrIW (Ordinal: 600, Address: 0x116e70)
StrRChrW (Ordinal: 601, Address: 0x116e80)
StrRStrA (Ordinal: 602, Address: 0x1d8310)
StrRStrIA (Ordinal: 603, Address: 0x116e90)
StrRStrIW (Ordinal: 604, Address: 0x116ea0)
StrRStrW (Ordinal: 605, Address: 0x1d83f0)
StrStrA (Ordinal: 606, Address: 0x116eb0)
StrStrIA (Ordinal: 607, Address: 0x116ec0)
StrStrIW (Ordinal: 608, Address: 0x116ed0)
StrStrW (Ordinal: 609, Address: 0x116ee0)
UsersLibrariesFolderUI_CreateInstance (Ordinal: 610, Address: 0x20cf0)
WOWShellExecute (Ordinal: 611, Address: 0x205210)
WaitForExplorerRestartW (Ordinal: 612, Address: 0x27bc10)
(Ordinal: 640, Address: 0x6f1869)
(Ordinal: 641, Address: 0x6f185c)
(Ordinal: 643, Address: 0x6f18ee)
SHChangeNotification_Lock (Ordinal: 644, Address: 0x4e980)
SHChangeNotification_Unlock (Ordinal: 645, Address: 0x54f80)
(Ordinal: 646, Address: 0x6f1908)
(Ordinal: 648, Address: 0x6f1c13)
(Ordinal: 650, Address: 0x6f12fd)
(Ordinal: 651, Address: 0x1d5a80)
WriteCabinetState (Ordinal: 652, Address: 0x24380)
(Ordinal: 653, Address: 0x6f18ad)
ReadCabinetState (Ordinal: 654, Address: 0xcafe0)
(Ordinal: 660, Address: 0x69e00)
IsUserAnAdmin (Ordinal: 680, Address: 0x297980)
(Ordinal: 681, Address: 0x6f1a61)
StgMakeUniqueName (Ordinal: 682, Address: 0x2ec620)
(Ordinal: 683, Address: 0xdde50)
(Ordinal: 684, Address: 0xdde50)
SHPropStgCreate (Ordinal: 685, Address: 0x27cc40)
SHPropStgReadMultiple (Ordinal: 688, Address: 0x27cc60)
SHPropStgWriteMultiple (Ordinal: 689, Address: 0x27cc80)
(Ordinal: 690, Address: 0x27cc00)
(Ordinal: 691, Address: 0x6f1a02)
(Ordinal: 700, Address: 0x6f1512)
CDefFolderMenu_Create2 (Ordinal: 701, Address: 0x255620)
(Ordinal: 702, Address: 0x255890)
(Ordinal: 703, Address: 0x6f0f83)
(Ordinal: 704, Address: 0x6f0f90)
(Ordinal: 707, Address: 0x6f1b7f)
(Ordinal: 708, Address: 0x6f1a8b)
SHGetSetFolderCustomSettings (Ordinal: 709, Address: 0x1d6c70)
(Ordinal: 711, Address: 0x23bcc0)
(Ordinal: 712, Address: 0x6f1915)
(Ordinal: 713, Address: 0x25e110)
(Ordinal: 714, Address: 0x10cb20)
(Ordinal: 715, Address: 0x6f1976)
SHMultiFileProperties (Ordinal: 716, Address: 0x2daa10)
(Ordinal: 719, Address: 0x6f1b99)
(Ordinal: 720, Address: 0x6f1842)
(Ordinal: 721, Address: 0x6f184f)
(Ordinal: 722, Address: 0x6f195a)
(Ordinal: 723, Address: 0x5b0d0)
(Ordinal: 724, Address: 0x6f1b12)
(Ordinal: 725, Address: 0x6f17b8)
(Ordinal: 726, Address: 0x6f1557)
SHGetImageList (Ordinal: 727, Address: 0x71b70)
RestartDialogEx (Ordinal: 730, Address: 0x278770)
(Ordinal: 731, Address: 0x6f1bb5)
(Ordinal: 732, Address: 0x6f1ba7)
(Ordinal: 733, Address: 0x67960)
(Ordinal: 740, Address: 0x2ba890)
SHCreateFileExtractIconW (Ordinal: 743, Address: 0x250970)
(Ordinal: 744, Address: 0x272d40)
(Ordinal: 745, Address: 0x6f159c)
SHLimitInputEdit (Ordinal: 747, Address: 0x2d9d50)
(Ordinal: 748, Address: 0x2d9cf0)
(Ordinal: 749, Address: 0x6f1a98)
SHGetAttributesFromDataObject (Ordinal: 750, Address: 0x57a0)
(Ordinal: 751, Address: 0x23fdc0)
(Ordinal: 752, Address: 0x297e00)
(Ordinal: 753, Address: 0x69cf0)
(Ordinal: 754, Address: 0x2d9fb0)
(Ordinal: 755, Address: 0x23e420)
(Ordinal: 756, Address: 0x6f15de)
(Ordinal: 757, Address: 0x107640)
(Ordinal: 758, Address: 0x182b0)
(Ordinal: 759, Address: 0x18200)
(Ordinal: 760, Address: 0x1e7470)
(Ordinal: 761, Address: 0x2a3b40)
(Ordinal: 762, Address: 0x6f158e)
(Ordinal: 763, Address: 0x272d70)
(Ordinal: 764, Address: 0xa26e0)
(Ordinal: 765, Address: 0x2a95b0)
(Ordinal: 766, Address: 0x6f1922)
(Ordinal: 767, Address: 0xdce10)
(Ordinal: 777, Address: 0x69e0)
(Ordinal: 778, Address: 0xe4820)
(Ordinal: 779, Address: 0x23db40)
(Ordinal: 781, Address: 0x2a5f60)
(Ordinal: 782, Address: 0x28f2a0)
(Ordinal: 786, Address: 0x6f194c)
(Ordinal: 787, Address: 0x4aca0)
(Ordinal: 788, Address: 0x2c7860)
(Ordinal: 789, Address: 0x2c7900)
(Ordinal: 790, Address: 0x251420)
(Ordinal: 791, Address: 0x2c7810)
(Ordinal: 792, Address: 0x4adc0)
(Ordinal: 810, Address: 0x2d2900)
(Ordinal: 811, Address: 0x2d2700)
(Ordinal: 812, Address: 0x52e5f0)
(Ordinal: 813, Address: 0x52e690)
(Ordinal: 814, Address: 0x1e4590)
(Ordinal: 815, Address: 0x1e4500)
(Ordinal: 816, Address: 0x225d30)
(Ordinal: 817, Address: 0x2292a0)
(Ordinal: 818, Address: 0x1e4580)
(Ordinal: 819, Address: 0x1e46f0)
(Ordinal: 820, Address: 0x6f1930)
(Ordinal: 821, Address: 0x6f19d8)
(Ordinal: 822, Address: 0x6f19ca)
(Ordinal: 823, Address: 0xcf780)
(Ordinal: 824, Address: 0xd45e0)
(Ordinal: 825, Address: 0x212c90)
(Ordinal: 826, Address: 0x6f193e)
(Ordinal: 827, Address: 0x6f19e6)
(Ordinal: 828, Address: 0x255970)
(Ordinal: 829, Address: 0x255e80)
(Ordinal: 830, Address: 0x224f70)
(Ordinal: 831, Address: 0x23ec60)
(Ordinal: 832, Address: 0x6f1b20)
(Ordinal: 833, Address: 0x27cc20)
(Ordinal: 834, Address: 0x6f1984)
(Ordinal: 835, Address: 0x6f19a0)
(Ordinal: 836, Address: 0x6f1992)
(Ordinal: 837, Address: 0x6f19bc)
(Ordinal: 838, Address: 0x6f19ae)
(Ordinal: 839, Address: 0x6f1564)
(Ordinal: 840, Address: 0x297bb0)
(Ordinal: 841, Address: 0x6f1a10)
(Ordinal: 842, Address: 0x6f1a1e)
(Ordinal: 843, Address: 0x6f1a6f)
(Ordinal: 844, Address: 0x27bb70)
(Ordinal: 845, Address: 0x1e2b90)
ILLoadFromStreamEx (Ordinal: 846, Address: 0x297090)
(Ordinal: 847, Address: 0x1e43e0)
(Ordinal: 848, Address: 0x2a9600)
(Ordinal: 849, Address: 0x1e4540)
(Ordinal: 850, Address: 0x7c5d0)
(Ordinal: 851, Address: 0x231c70)
(Ordinal: 852, Address: 0x6f1adb)
(Ordinal: 853, Address: 0x8eab0)
(Ordinal: 854, Address: 0x6f1826)
(Ordinal: 856, Address: 0x6f152e)
(Ordinal: 857, Address: 0x6f1520)
(Ordinal: 858, Address: 0x6f1883)
(Ordinal: 859, Address: 0x2f0ef0)
(Ordinal: 860, Address: 0x18ac0)
(Ordinal: 861, Address: 0x6f19f4)
(Ordinal: 862, Address: 0x297280)
(Ordinal: 863, Address: 0x6f17e1)
(Ordinal: 864, Address: 0x290b50)
(Ordinal: 865, Address: 0x23dbf0)
(Ordinal: 866, Address: 0x2aeaf0)
(Ordinal: 867, Address: 0x6f1572)
(Ordinal: 868, Address: 0x6f1580)
(Ordinal: 869, Address: 0x6f189f)
(Ordinal: 870, Address: 0x69ec0)
(Ordinal: 871, Address: 0x1e7cb0)
(Ordinal: 872, Address: 0x6f1968)
(Ordinal: 873, Address: 0x4ad00)
(Ordinal: 874, Address: 0x103ef0)
(Ordinal: 875, Address: 0x103e70)
(Ordinal: 876, Address: 0x289b30)
(Ordinal: 877, Address: 0x289f10)
(Ordinal: 878, Address: 0x289d90)
(Ordinal: 880, Address: 0x23c260)
(Ordinal: 881, Address: 0x2cd740)
(Ordinal: 882, Address: 0x2cd8a0)
(Ordinal: 883, Address: 0x52cad0)
(Ordinal: 884, Address: 0x277cd0)
(Ordinal: 885, Address: 0x316c0)
(Ordinal: 886, Address: 0x23fa20)
(Ordinal: 887, Address: 0x2aeb30)
(Ordinal: 888, Address: 0x2da030)
(Ordinal: 889, Address: 0x6f180a)
(Ordinal: 890, Address: 0x6f1549)
(Ordinal: 891, Address: 0x29b100)
(Ordinal: 892, Address: 0x6f17c5)
(Ordinal: 893, Address: 0xaf3f0)
(Ordinal: 894, Address: 0x1e7430)
(Ordinal: 895, Address: 0x573f0)
(Ordinal: 896, Address: 0x1e7330)
(Ordinal: 897, Address: 0x2dfb10)
(Ordinal: 898, Address: 0x250be0)
(Ordinal: 899, Address: 0x6a120)
(Ordinal: 900, Address: 0x633a0)
(Ordinal: 901, Address: 0x4d12d0)
(Ordinal: 902, Address: 0x6f1818)
(Ordinal: 903, Address: 0x110510)
(Ordinal: 904, Address: 0x27cdd0)
(Ordinal: 905, Address: 0x110ac0)
(Ordinal: 906, Address: 0x33560)
(Ordinal: 907, Address: 0x290510)
(Ordinal: 909, Address: 0x6f17d3)
(Ordinal: 910, Address: 0x2674a0)
(Ordinal: 911, Address: 0x230810)
(Ordinal: 912, Address: 0x2713a0)
(Ordinal: 913, Address: 0x271c10)
(Ordinal: 914, Address: 0x1e72f0)
(Ordinal: 915, Address: 0xd9b40)
(Ordinal: 916, Address: 0x20860)
GetSystemPersistedStorageItemList (Ordinal: 919, Address: 0x1e7410)
CreateStorageItemFromPath_PartialTrustCaller (Ordinal: 920, Address: 0x1e7390)
CreateStorageItemFromShellItem_FullTrustCaller (Ordinal: 921, Address: 0x1e73b0)
(Ordinal: 922, Address: 0x2dca80)
(Ordinal: 923, Address: 0x25cc0)
(Ordinal: 924, Address: 0x25a80)
CreateStorageItemFromShellItem_FullTrustCaller_ForPackage (Ordinal: 925, Address: 0x25a60)
(Ordinal: 927, Address: 0x2b8080)
(Ordinal: 928, Address: 0x2cb9e0)
CreateStorageItemFromShellItem_FullTrustCaller_ForPackage_WithProcessHandle (Ordinal: 929, Address: 0x1e73d0)
(Ordinal: 930, Address: 0x25db30)
CreateStorageItemFromShellItem_FullTrustCaller_UseImplicitFlagsAndPackage (Ordinal: 931, Address: 0x1e73f0)
(Ordinal: 932, Address: 0x1e7570)
(Ordinal: 933, Address: 0x1e7510)
CreateStorageItemFromPath_FullTrustCaller (Ordinal: 935, Address: 0x1e7350)
CreateStorageItemFromPath_FullTrustCaller_ForPackage (Ordinal: 936, Address: 0x1e7370)
CStorageItem_GetValidatedStorageItemObject (Ordinal: 937, Address: 0x1e7310)
(Ordinal: 938, Address: 0x2a3a60)
(Ordinal: 939, Address: 0x5e7b0)
(Ordinal: 940, Address: 0x1e7450)
IsProcessAnExplorer (Ordinal: 941, Address: 0x56530)
IsDesktopExplorerProcess (Ordinal: 942, Address: 0x39360)
(Ordinal: 943, Address: 0x4d90b0)
(Ordinal: 944, Address: 0x2515b0)
(Ordinal: 945, Address: 0x29f870)
(Ordinal: 946, Address: 0x2510b0)
(Ordinal: 970, Address: 0x23e5b0)
(Ordinal: 971, Address: 0x2502d0)
(Ordinal: 972, Address: 0x268840)
(Ordinal: 2000, Address: 0x29fb60)
(Ordinal: 2001, Address: 0x2ed450)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x180603308)

api-ms-win-core-atoms-l1-1-0.dll

FindAtomW (Address: 0x180603318)
GetAtomNameW (Address: 0x180603328)
GlobalAddAtomW (Address: 0x180603338)
GlobalDeleteAtom (Address: 0x180603330)
GlobalGetAtomNameW (Address: 0x180603320)

api-ms-win-core-datetime-l1-1-0.dll

GetDateFormatW (Address: 0x180603348)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x180603360)
IsDebuggerPresent (Address: 0x180603358)
OutputDebugStringW (Address: 0x180603368)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x180603378)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x180603388)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x180603398)
RaiseException (Address: 0x1806033c0)
SetErrorMode (Address: 0x1806033b0)
SetLastError (Address: 0x1806033a8)
SetUnhandledExceptionFilter (Address: 0x1806033b8)
UnhandledExceptionFilter (Address: 0x1806033a0)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x180603498)
CreateDirectoryW (Address: 0x180603478)
CreateFileW (Address: 0x180603400)
DefineDosDeviceW (Address: 0x180603468)
DeleteFileW (Address: 0x1806034f8)
FileTimeToLocalFileTime (Address: 0x180603430)
FindClose (Address: 0x180603460)
FindFirstFileExW (Address: 0x180603490)
FindFirstFileW (Address: 0x180603448)
FindFirstVolumeW (Address: 0x180603440)
FindNextFileW (Address: 0x180603458)
FindNextVolumeW (Address: 0x180603410)
FindVolumeClose (Address: 0x180603408)
FlushFileBuffers (Address: 0x1806033d8)
GetDiskFreeSpaceExW (Address: 0x180603500)
GetDiskFreeSpaceW (Address: 0x180603518)
GetDriveTypeW (Address: 0x180603438)
GetFileAttributesExW (Address: 0x180603428)
GetFileAttributesW (Address: 0x1806034b8)
GetFileInformationByHandle (Address: 0x180603470)
GetFileSize (Address: 0x1806034d0)
GetFileSizeEx (Address: 0x180603418)
GetFileTime (Address: 0x1806033f8)
GetFinalPathNameByHandleW (Address: 0x1806034b0)
GetFullPathNameW (Address: 0x180603480)
GetLogicalDrives (Address: 0x1806033e0)
GetLongPathNameW (Address: 0x1806034d8)
GetShortPathNameW (Address: 0x180603488)
GetTempFileNameW (Address: 0x1806034a8)
GetVolumeInformationW (Address: 0x1806034e0)
GetVolumePathNameW (Address: 0x180603420)
LocalFileTimeToFileTime (Address: 0x1806033e8)
QueryDosDeviceW (Address: 0x180603450)
ReadFile (Address: 0x1806034c8)
RemoveDirectoryW (Address: 0x1806034e8)
SetEndOfFile (Address: 0x180603508)
SetFileAttributesW (Address: 0x1806034f0)
SetFileInformationByHandle (Address: 0x1806033f0)
SetFilePointer (Address: 0x180603510)
SetFilePointerEx (Address: 0x1806033d0)
SetFileTime (Address: 0x1806034a0)
WriteFile (Address: 0x1806034c0)

api-ms-win-core-file-l1-2-0.dll

GetTempPathW (Address: 0x180603528)
GetVolumeNameForVolumeMountPointW (Address: 0x180603530)
GetVolumePathNamesForVolumeNameW (Address: 0x180603538)

api-ms-win-core-file-l1-2-1.dll

GetCompressedFileSizeW (Address: 0x180603548)

api-ms-win-core-file-l2-1-0.dll

CopyFile2 (Address: 0x180603560)
CreateHardLinkW (Address: 0x180603570)
GetFileInformationByHandleEx (Address: 0x180603568)
MoveFileExW (Address: 0x180603578)
ReadDirectoryChangesW (Address: 0x180603580)
ReplaceFileW (Address: 0x180603558)

api-ms-win-core-file-l2-1-2.dll

CopyFileW (Address: 0x180603590)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1806035a8)
DuplicateHandle (Address: 0x1806035a0)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1806035c0)
HeapAlloc (Address: 0x1806035b8)
HeapDestroy (Address: 0x1806035d0)
HeapFree (Address: 0x1806035c8)
HeapReAlloc (Address: 0x1806035d8)

api-ms-win-core-heap-l2-1-0.dll

GlobalAlloc (Address: 0x1806035f8)
GlobalFree (Address: 0x1806035e8)
LocalAlloc (Address: 0x1806035f0)
LocalFree (Address: 0x180603600)
LocalReAlloc (Address: 0x180603608)

api-ms-win-core-heap-obsolete-l1-1-0.dll

GlobalFlags (Address: 0x180603638)
GlobalLock (Address: 0x180603618)
GlobalReAlloc (Address: 0x180603628)
GlobalSize (Address: 0x180603630)
GlobalUnlock (Address: 0x180603620)
LocalSize (Address: 0x180603640)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x180603658)
InterlockedPopEntrySList (Address: 0x180603660)
InterlockedPushEntrySList (Address: 0x180603650)

api-ms-win-core-io-l1-1-0.dll

CancelIoEx (Address: 0x180603670)
CreateIoCompletionPort (Address: 0x180603688)
DeviceIoControl (Address: 0x180603690)
GetOverlappedResult (Address: 0x180603678)
GetQueuedCompletionStatus (Address: 0x180603680)

api-ms-win-core-io-l1-1-1.dll

CancelSynchronousIo (Address: 0x1806036a0)

api-ms-win-core-job-l2-1-0.dll

AssignProcessToJobObject (Address: 0x1806036b8)
CreateJobObjectW (Address: 0x1806036b0)
SetInformationJobObject (Address: 0x1806036c0)

api-ms-win-core-kernel32-legacy-l1-1-0.dll

GetComputerNameW (Address: 0x180603708)
GetShortPathNameA (Address: 0x1806036e0)
GetSystemPowerStatus (Address: 0x1806036d0)
MulDiv (Address: 0x1806036d8)
RegisterWaitForSingleObject (Address: 0x1806036f8)
SetVolumeLabelW (Address: 0x1806036e8)
UnregisterWait (Address: 0x1806036f0)
WTSGetActiveConsoleSessionId (Address: 0x180603700)

api-ms-win-core-kernel32-legacy-l1-1-1.dll

PowerClearRequest (Address: 0x180603728)
PowerCreateRequest (Address: 0x180603720)
PowerSetRequest (Address: 0x180603718)

api-ms-win-core-kernel32-legacy-l1-1-2.dll

GetBinaryTypeW (Address: 0x180603738)

api-ms-win-core-kernel32-private-l1-1-0.dll

CheckElevation (Address: 0x180603750)
CheckElevationEnabled (Address: 0x180603748)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x1806037e8)
EnumResourceNamesExW (Address: 0x180603768)
FindResourceExW (Address: 0x1806037d8)
FindStringOrdinal (Address: 0x1806037c0)
FreeLibrary (Address: 0x180603770)
FreeResource (Address: 0x180603790)
GetModuleFileNameA (Address: 0x1806037b0)
GetModuleFileNameW (Address: 0x1806037a8)
GetModuleHandleExW (Address: 0x1806037b8)
GetModuleHandleW (Address: 0x1806037d0)
GetProcAddress (Address: 0x1806037c8)
LoadLibraryExA (Address: 0x1806037a0)
LoadLibraryExW (Address: 0x180603798)
LoadResource (Address: 0x180603778)
LoadStringA (Address: 0x180603780)
LoadStringW (Address: 0x1806037e0)
LockResource (Address: 0x180603788)
SizeofResource (Address: 0x180603760)

api-ms-win-core-libraryloader-l1-2-1.dll

FindResourceW (Address: 0x1806037f8)
LoadLibraryW (Address: 0x180603800)

api-ms-win-core-localization-l1-2-0.dll

FindNLSString (Address: 0x180603890)
FindNLSStringEx (Address: 0x180603828)
FormatMessageW (Address: 0x180603818)
GetACP (Address: 0x1806038b0)
GetCPInfo (Address: 0x180603870)
GetLocaleInfoW (Address: 0x180603878)
GetSystemDefaultLangID (Address: 0x1806038a8)
GetSystemDefaultLCID (Address: 0x180603860)
GetSystemPreferredUILanguages (Address: 0x180603850)
GetThreadLocale (Address: 0x1806038a0)
GetThreadUILanguage (Address: 0x180603820)
GetUserDefaultLangID (Address: 0x180603810)
GetUserDefaultLCID (Address: 0x180603830)
GetUserPreferredUILanguages (Address: 0x180603888)
IsDBCSLeadByte (Address: 0x180603868)
IsValidLocaleName (Address: 0x180603840)
LCMapStringEx (Address: 0x180603838)
LCMapStringW (Address: 0x180603898)
LocaleNameToLCID (Address: 0x180603848)
ResolveLocaleName (Address: 0x180603858)
VerLanguageNameW (Address: 0x180603880)

api-ms-win-core-localization-l1-2-2.dll

LCIDToLocaleName (Address: 0x1806038c0)

api-ms-win-core-localization-l2-1-0.dll

GetNumberFormatEx (Address: 0x1806038d0)

api-ms-win-core-localization-obsolete-l1-2-0.dll

EnumUILanguagesW (Address: 0x1806038e8)
GetNumberFormatW (Address: 0x1806038f0)
GetSystemDefaultUILanguage (Address: 0x1806038e0)
GetUserDefaultUILanguage (Address: 0x1806038f8)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x180603928)
MapViewOfFile (Address: 0x180603910)
OpenFileMappingW (Address: 0x180603948)
ReadProcessMemory (Address: 0x180603938)
UnmapViewOfFile (Address: 0x180603908)
VirtualAlloc (Address: 0x180603930)
VirtualFree (Address: 0x180603950)
VirtualProtect (Address: 0x180603918)
VirtualQuery (Address: 0x180603920)
WriteProcessMemory (Address: 0x180603940)

api-ms-win-core-memory-l1-1-1.dll

PrefetchVirtualMemory (Address: 0x180603960)

api-ms-win-core-path-l1-1-0.dll

PathAllocCanonicalize (Address: 0x1806039e0)
PathAllocCombine (Address: 0x180603978)
PathCchAddBackslash (Address: 0x1806039d8)
PathCchAddBackslashEx (Address: 0x180603970)
PathCchAddExtension (Address: 0x1806039b0)
PathCchAppend (Address: 0x1806039e8)
PathCchAppendEx (Address: 0x180603988)
PathCchCanonicalize (Address: 0x1806039f8)
PathCchCombine (Address: 0x1806039b8)
PathCchCombineEx (Address: 0x180603980)
PathCchRemoveBackslash (Address: 0x1806039a8)
PathCchRemoveExtension (Address: 0x180603990)
PathCchRemoveFileSpec (Address: 0x1806039a0)
PathCchRenameExtension (Address: 0x180603998)
PathCchSkipRoot (Address: 0x1806039c0)
PathCchStripPrefix (Address: 0x1806039d0)
PathCchStripToRoot (Address: 0x1806039c8)
PathIsUNCEx (Address: 0x1806039f0)

api-ms-win-core-privateprofile-l1-1-0.dll

GetPrivateProfileSectionW (Address: 0x180603a18)
GetPrivateProfileStringW (Address: 0x180603a10)
GetProfileSectionW (Address: 0x180603a20)
WritePrivateProfileStringW (Address: 0x180603a08)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsA (Address: 0x180603a50)
ExpandEnvironmentStringsW (Address: 0x180603a60)
GetCommandLineW (Address: 0x180603a38)
GetCurrentDirectoryW (Address: 0x180603a48)
GetEnvironmentVariableW (Address: 0x180603a58)
SearchPathW (Address: 0x180603a40)
SetCurrentDirectoryW (Address: 0x180603a30)
SetEnvironmentVariableW (Address: 0x180603a68)

api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessAsUserW (Address: 0x180603b08)
CreateProcessW (Address: 0x180603aa0)
CreateThread (Address: 0x180603a90)
ExitProcess (Address: 0x180603ab8)
GetCurrentProcess (Address: 0x180603a80)
GetCurrentProcessId (Address: 0x180603a88)
GetCurrentThread (Address: 0x180603b20)
GetCurrentThreadId (Address: 0x180603b38)
GetExitCodeProcess (Address: 0x180603b00)
GetExitCodeThread (Address: 0x180603b40)
GetProcessId (Address: 0x180603ae0)
GetThreadId (Address: 0x180603ac8)
GetThreadPriority (Address: 0x180603b30)
OpenProcessToken (Address: 0x180603ae8)
OpenThread (Address: 0x180603b10)
OpenThreadToken (Address: 0x180603a78)
ProcessIdToSessionId (Address: 0x180603ad8)
ResumeThread (Address: 0x180603b28)
SetPriorityClass (Address: 0x180603a98)
SetThreadPriority (Address: 0x180603ac0)
SetThreadToken (Address: 0x180603ad0)
TerminateProcess (Address: 0x180603af8)
TlsAlloc (Address: 0x180603ab0)
TlsFree (Address: 0x180603aa8)
TlsGetValue (Address: 0x180603af0)
TlsSetValue (Address: 0x180603b18)

api-ms-win-core-processthreads-l1-1-1.dll

FlushInstructionCache (Address: 0x180603b60)
IsProcessorFeaturePresent (Address: 0x180603b58)
OpenProcess (Address: 0x180603b50)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x180603b78)
QueryPerformanceFrequency (Address: 0x180603b70)

api-ms-win-core-psapi-l1-1-0.dll

K32GetProcessImageFileNameW (Address: 0x180603b88)
QueryFullProcessImageNameW (Address: 0x180603b90)

api-ms-win-core-realtime-l1-1-0.dll

QueryUnbiasedInterruptTime (Address: 0x180603ba0)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x180603c08)
RegCreateKeyExW (Address: 0x180603c00)
RegDeleteKeyExW (Address: 0x180603c30)
RegDeleteTreeW (Address: 0x180603bb0)
RegDeleteValueW (Address: 0x180603c28)
RegEnumKeyExW (Address: 0x180603bf0)
RegEnumValueW (Address: 0x180603be8)
RegGetKeySecurity (Address: 0x180603bd0)
RegGetValueW (Address: 0x180603bc0)
RegNotifyChangeKeyValue (Address: 0x180603be0)
RegOpenCurrentUser (Address: 0x180603bb8)
RegOpenKeyExA (Address: 0x180603c18)
RegOpenKeyExW (Address: 0x180603c10)
RegQueryInfoKeyA (Address: 0x180603bc8)
RegQueryInfoKeyW (Address: 0x180603bf8)
RegQueryValueExA (Address: 0x180603bd8)
RegQueryValueExW (Address: 0x180603c20)
RegSetValueExW (Address: 0x180603c38)

api-ms-win-core-registry-l1-1-1.dll

RegDeleteKeyValueW (Address: 0x180603c48)
RegSetKeyValueW (Address: 0x180603c50)

api-ms-win-core-registryuserspecific-l1-1-0.dll

SHRegCloseUSKey (Address: 0x180603c68)
SHRegEnumUSKeyW (Address: 0x180603c88)
SHRegGetBoolUSValueW (Address: 0x180603c90)
SHRegGetUSValueW (Address: 0x180603c78)
SHRegOpenUSKeyA (Address: 0x180603c70)
SHRegOpenUSKeyW (Address: 0x180603c80)
SHRegQueryUSValueW (Address: 0x180603c60)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x180603cb0)
RtlLookupFunctionEntry (Address: 0x180603ca0)
RtlVirtualUnwind (Address: 0x180603ca8)

api-ms-win-core-shlwapi-legacy-l1-1-0.dll

IsCharSpaceW (Address: 0x180603de8)
PathAddBackslashW (Address: 0x180603d08)
PathAppendA (Address: 0x180603dd8)
PathAppendW (Address: 0x180603cf0)
PathCombineW (Address: 0x180603d10)
PathCommonPrefixW (Address: 0x180603dd0)
PathFileExistsW (Address: 0x180603d30)
PathFindExtensionW (Address: 0x180603d80)
PathFindFileNameW (Address: 0x180603cd0)
PathFindNextComponentW (Address: 0x180603d60)
PathGetArgsW (Address: 0x180603d78)
PathGetCharTypeW (Address: 0x180603da0)
PathGetDriveNumberW (Address: 0x180603cf8)
PathIsFileSpecW (Address: 0x180603d98)
PathIsPrefixW (Address: 0x180603df0)
PathIsRelativeW (Address: 0x180603d58)
PathIsRootA (Address: 0x180603dc8)
PathIsRootW (Address: 0x180603d50)
PathIsSameRootW (Address: 0x180603de0)
PathIsUNCServerShareW (Address: 0x180603d18)
PathIsUNCServerW (Address: 0x180603d20)
PathIsUNCW (Address: 0x180603ce8)
PathIsValidCharW (Address: 0x180603d90)
PathMatchSpecExW (Address: 0x180603d68)
PathMatchSpecW (Address: 0x180603d40)
PathParseIconLocationW (Address: 0x180603cc0)
PathQuoteSpacesW (Address: 0x180603cd8)
PathRemoveBackslashW (Address: 0x180603db8)
PathRemoveBlanksW (Address: 0x180603d70)
PathRemoveExtensionW (Address: 0x180603cc8)
PathRemoveFileSpecA (Address: 0x180603dc0)
PathRemoveFileSpecW (Address: 0x180603d38)
PathSkipRootW (Address: 0x180603d00)
PathStripPathW (Address: 0x180603d88)
PathStripToRootW (Address: 0x180603d48)
PathUnExpandEnvStringsW (Address: 0x180603d28)
PathUnquoteSpacesW (Address: 0x180603ce0)
SHExpandEnvironmentStringsA (Address: 0x180603db0)
SHExpandEnvironmentStringsW (Address: 0x180603da8)

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll

QISearch (Address: 0x180603e50)
StrChrA (Address: 0x180603f00)
StrChrIA (Address: 0x180603ef8)
StrChrIW (Address: 0x180603ef0)
StrChrW (Address: 0x180603ee8)
StrCmpCW (Address: 0x180603e68)
StrCmpICA (Address: 0x180603e48)
StrCmpICW (Address: 0x180603e78)
StrCmpIW (Address: 0x180603e40)
StrCmpLogicalW (Address: 0x180603e10)
StrCmpNA (Address: 0x180603ee0)
StrCmpNCW (Address: 0x180603e58)
StrCmpNIA (Address: 0x180603ed8)
StrCmpNICW (Address: 0x180603e18)
StrCmpNIW (Address: 0x180603ed0)
StrCmpNW (Address: 0x180603ec8)
StrCmpW (Address: 0x180603f08)
StrCpyNXW (Address: 0x180603e08)
StrCSpnW (Address: 0x180603e00)
StrDupA (Address: 0x180603e20)
StrDupW (Address: 0x180603e30)
StrPBrkW (Address: 0x180603e60)
StrRChrA (Address: 0x180603ec0)
StrRChrIA (Address: 0x180603eb8)
StrRChrIW (Address: 0x180603eb0)
StrRChrW (Address: 0x180603ea8)
StrRStrIA (Address: 0x180603ea0)
StrRStrIW (Address: 0x180603e98)
StrSpnW (Address: 0x180603f18)
StrStrA (Address: 0x180603e90)
StrStrIA (Address: 0x180603e88)
StrStrIW (Address: 0x180603f10)
StrStrW (Address: 0x180603e80)
StrToIntA (Address: 0x180603f20)
StrToIntExW (Address: 0x180603e38)
StrToIntW (Address: 0x180603e70)
StrTrimW (Address: 0x180603e28)

api-ms-win-core-sidebyside-l1-1-0.dll

ActivateActCtx (Address: 0x180603f38)
CreateActCtxW (Address: 0x180603f50)
DeactivateActCtx (Address: 0x180603f40)
QueryActCtxW (Address: 0x180603f48)
ReleaseActCtx (Address: 0x180603f30)

api-ms-win-core-string-l1-1-0.dll

CompareStringEx (Address: 0x180603f88)
CompareStringOrdinal (Address: 0x180603f90)
CompareStringW (Address: 0x180603f68)
GetStringTypeExW (Address: 0x180603f60)
GetStringTypeW (Address: 0x180603f80)
MultiByteToWideChar (Address: 0x180603f78)
WideCharToMultiByte (Address: 0x180603f70)

api-ms-win-core-string-l2-1-0.dll

CharLowerBuffW (Address: 0x180603fc8)
CharLowerW (Address: 0x180603fa0)
CharNextW (Address: 0x180603fb0)
CharPrevW (Address: 0x180603fa8)
CharUpperBuffW (Address: 0x180603fd0)
CharUpperW (Address: 0x180603fb8)
IsCharAlphaW (Address: 0x180603fc0)

api-ms-win-core-string-l2-1-1.dll

SHLoadIndirectString (Address: 0x180603fe0)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpA (Address: 0x180604018)
lstrcmpiA (Address: 0x180604010)
lstrcmpiW (Address: 0x180603ff8)
lstrcmpW (Address: 0x180603ff0)
lstrlenA (Address: 0x180604000)
lstrlenW (Address: 0x180604008)

api-ms-win-core-stringansi-l1-1-0.dll

CharNextA (Address: 0x180604030)
CharPrevA (Address: 0x180604028)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1806040c8)
AcquireSRWLockShared (Address: 0x1806040c0)
CreateEventExW (Address: 0x180604078)
CreateEventW (Address: 0x1806040e8)
CreateMutexExW (Address: 0x180604090)
CreateMutexW (Address: 0x1806040b0)
CreateSemaphoreExW (Address: 0x1806040f0)
CreateWaitableTimerExW (Address: 0x180604080)
DeleteCriticalSection (Address: 0x1806040d0)
EnterCriticalSection (Address: 0x180604130)
InitializeCriticalSection (Address: 0x180604118)
InitializeCriticalSectionAndSpinCount (Address: 0x180604120)
InitializeCriticalSectionEx (Address: 0x180604060)
InitializeSRWLock (Address: 0x180604040)
LeaveCriticalSection (Address: 0x180604128)
OpenEventW (Address: 0x180604108)
OpenMutexW (Address: 0x1806040b8)
OpenSemaphoreW (Address: 0x180604050)
ReleaseMutex (Address: 0x180604048)
ReleaseSemaphore (Address: 0x1806040a8)
ReleaseSRWLockExclusive (Address: 0x180604068)
ReleaseSRWLockShared (Address: 0x180604088)
ResetEvent (Address: 0x180604098)
SetEvent (Address: 0x1806040a0)
SetWaitableTimer (Address: 0x1806040f8)
TryAcquireSRWLockExclusive (Address: 0x180604100)
TryAcquireSRWLockShared (Address: 0x1806040d8)
TryEnterCriticalSection (Address: 0x1806040e0)
WaitForMultipleObjectsEx (Address: 0x180604070)
WaitForSingleObject (Address: 0x180604058)
WaitForSingleObjectEx (Address: 0x180604110)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x180604150)
InitOnceComplete (Address: 0x180604148)
InitOnceExecuteOnce (Address: 0x180604140)
Sleep (Address: 0x180604158)

api-ms-win-core-synch-l1-2-1.dll

WaitForMultipleObjects (Address: 0x180604168)

api-ms-win-core-sysinfo-l1-1-0.dll

GetComputerNameExW (Address: 0x180604198)
GetLocalTime (Address: 0x1806041b8)
GetSystemDirectoryW (Address: 0x1806041d0)
GetSystemInfo (Address: 0x1806041a8)
GetSystemTime (Address: 0x180604188)
GetSystemTimeAsFileTime (Address: 0x180604180)
GetSystemWindowsDirectoryW (Address: 0x180604190)
GetTickCount (Address: 0x1806041b0)
GetTickCount64 (Address: 0x180604178)
GetVersionExW (Address: 0x1806041c0)
GetWindowsDirectoryW (Address: 0x1806041c8)
GlobalMemoryStatusEx (Address: 0x1806041a0)

api-ms-win-core-sysinfo-l1-2-0.dll

GetProductInfo (Address: 0x1806041e0)

api-ms-win-core-sysinfo-l1-2-3.dll

GetIntegratedDisplaySize (Address: 0x1806041f0)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x180604250)
CloseThreadpoolWait (Address: 0x180604240)
CloseThreadpoolWork (Address: 0x180604218)
CreateThreadpoolTimer (Address: 0x180604238)
CreateThreadpoolWait (Address: 0x180604210)
CreateThreadpoolWork (Address: 0x180604200)
SetThreadpoolTimer (Address: 0x180604230)
SetThreadpoolWait (Address: 0x180604228)
SubmitThreadpoolWork (Address: 0x180604208)
WaitForThreadpoolTimerCallbacks (Address: 0x180604248)
WaitForThreadpoolWaitCallbacks (Address: 0x180604220)

api-ms-win-core-threadpool-legacy-l1-1-0.dll

CreateTimerQueueTimer (Address: 0x180604268)
DeleteTimerQueueTimer (Address: 0x180604270)
QueueUserWorkItem (Address: 0x180604260)
UnregisterWaitEx (Address: 0x180604278)

api-ms-win-core-timezone-l1-1-0.dll

FileTimeToSystemTime (Address: 0x1806042a0)
GetTimeZoneInformationForYear (Address: 0x180604290)
SystemTimeToFileTime (Address: 0x180604298)
SystemTimeToTzSpecificLocalTime (Address: 0x1806042a8)
TzSpecificLocalTimeToSystemTime (Address: 0x180604288)

api-ms-win-core-url-l1-1-0.dll

HashData (Address: 0x1806042e8)
ParseURLW (Address: 0x1806042b8)
PathCreateFromUrlAlloc (Address: 0x180604320)
PathCreateFromUrlW (Address: 0x1806042c0)
PathIsURLW (Address: 0x1806042d0)
UrlApplySchemeW (Address: 0x180604310)
UrlCanonicalizeW (Address: 0x180604308)
UrlCompareW (Address: 0x180604300)
UrlCreateFromPathW (Address: 0x180604318)
UrlEscapeW (Address: 0x180604328)
UrlFixupW (Address: 0x1806042f0)
UrlGetPartW (Address: 0x1806042e0)
UrlIsW (Address: 0x1806042c8)
UrlUnescapeA (Address: 0x1806042f8)
UrlUnescapeW (Address: 0x1806042d8)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x180604340)
EncodePointer (Address: 0x180604338)

api-ms-win-core-version-l1-1-0.dll

GetFileVersionInfoExW (Address: 0x180604358)
GetFileVersionInfoSizeExW (Address: 0x180604350)
VerQueryValueW (Address: 0x180604360)

api-ms-win-core-wow64-l1-1-0.dll

Wow64DisableWow64FsRedirection (Address: 0x180604378)
Wow64RevertWow64FsRedirection (Address: 0x180604370)

api-ms-win-core-wow64-l1-1-1.dll

GetSystemWow64DirectoryW (Address: 0x180604398)
IsWow64Process2 (Address: 0x180604388)
Wow64SetThreadDefaultGuestMachine (Address: 0x180604390)

api-ms-win-crt-math-l1-1-0.dll

ceilf (Address: 0x1806043b0)
expf (Address: 0x1806043b8)
floorf (Address: 0x1806043c0)
logf (Address: 0x1806043c8)
sqrtf (Address: 0x1806043a8)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x1806045f0)
__CxxFrameHandler3 (Address: 0x180604480)
__CxxFrameHandler4 (Address: 0x1806045d8)
__std_terminate (Address: 0x1806045d0)
_CxxThrowException (Address: 0x1806045f8)
_o___std_exception_copy (Address: 0x1806045c8)
_o___std_exception_destroy (Address: 0x1806045c0)
_o___std_type_info_destroy_list (Address: 0x1806045b8)
_o___stdio_common_vsnprintf_s (Address: 0x1806045b0)
_o___stdio_common_vsprintf (Address: 0x1806045a8)
_o___stdio_common_vsprintf_s (Address: 0x1806045a0)
_o___stdio_common_vswprintf (Address: 0x180604598)
_o___stdio_common_vswscanf (Address: 0x180604590)
_o__cexit (Address: 0x180604588)
_o__configure_narrow_argv (Address: 0x180604580)
_o__crt_atexit (Address: 0x180604578)
_o__difftime64 (Address: 0x180604570)
_o__errno (Address: 0x180604568)
_o__execute_onexit_table (Address: 0x180604560)
_o__get_errno (Address: 0x180604558)
_o__initialize_narrow_environment (Address: 0x180604550)
_o__initialize_onexit_table (Address: 0x180604548)
_o__invalid_parameter_noinfo (Address: 0x180604540)
_o__invalid_parameter_noinfo_noreturn (Address: 0x180604538)
_o__itow (Address: 0x180604508)
_o__purecall (Address: 0x1806044e0)
_o__register_onexit_function (Address: 0x1806044d0)
_o__resetstkoflw (Address: 0x1806044c8)
_o__seh_filter_dll (Address: 0x1806044c0)
_o__set_errno (Address: 0x1806044b8)
_o__strnicmp (Address: 0x180604498)
_o__ui64tow_s (Address: 0x180604490)
_o__wcsicmp (Address: 0x180604530)
_o__wcslwr_s (Address: 0x180604528)
_o__wcsnicmp (Address: 0x180604520)
_o__wcstoui64 (Address: 0x180604518)
_o__wcsupr (Address: 0x180604510)
_o__wtoi (Address: 0x180604500)
_o_bsearch (Address: 0x1806044f8)
_o_calloc (Address: 0x1806044f0)
_o_ceil (Address: 0x1806044e8)
_o_floor (Address: 0x1806044d8)
_o_free (Address: 0x1806044b0)
_o_isalpha (Address: 0x1806044a8)
_o_isdigit (Address: 0x1806044a0)
_o_iswspace (Address: 0x1806043d8)
_o_log (Address: 0x1806043e0)
_o_malloc (Address: 0x1806043e8)
_o_pow (Address: 0x1806043f0)
_o_qsort (Address: 0x1806043f8)
_o_rand (Address: 0x180604400)
_o_realloc (Address: 0x180604408)
_o_sqrt (Address: 0x180604410)
_o_srand (Address: 0x180604418)
_o_strncpy_s (Address: 0x180604420)
_o_terminate (Address: 0x180604428)
_o_toupper (Address: 0x180604430)
_o_towlower (Address: 0x180604438)
_o_wcscat_s (Address: 0x180604440)
_o_wcscpy_s (Address: 0x180604448)
_o_wcsncpy_s (Address: 0x180604450)
_o_wcstok_s (Address: 0x180604458)
_o_wcstol (Address: 0x180604460)
_o_wcstoul (Address: 0x180604468)
memcmp (Address: 0x180604600)
memcpy (Address: 0x180604608)
memmove (Address: 0x180604488)
strchr (Address: 0x180604470)
wcschr (Address: 0x1806045e0)
wcsrchr (Address: 0x180604478)
wcsstr (Address: 0x1806045e8)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x180604620)
_initterm_e (Address: 0x180604618)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x180604658)
wcscmp (Address: 0x180604640)
wcscspn (Address: 0x180604648)
wcsncmp (Address: 0x180604650)
wcspbrk (Address: 0x180604630)
wcsspn (Address: 0x180604638)

api-ms-win-crt-time-l1-1-0.dll

_time64 (Address: 0x180604668)

api-ms-win-eventing-classicprovider-l1-1-0.dll

GetTraceEnableFlags (Address: 0x180604680)
GetTraceEnableLevel (Address: 0x180604698)
GetTraceLoggerHandle (Address: 0x180604678)
RegisterTraceGuidsW (Address: 0x180604690)
UnregisterTraceGuids (Address: 0x180604688)

api-ms-win-eventing-provider-l1-1-0.dll

EventProviderEnabled (Address: 0x1806046a8)
EventRegister (Address: 0x1806046b8)
EventSetInformation (Address: 0x1806046b0)
EventUnregister (Address: 0x1806046c0)
EventWriteTransfer (Address: 0x1806046c8)

api-ms-win-security-base-l1-1-0.dll

AccessCheck (Address: 0x180604788)
AddAccessAllowedAceEx (Address: 0x180604770)
AddAccessDeniedAceEx (Address: 0x180604760)
AddAce (Address: 0x180604778)
AdjustTokenPrivileges (Address: 0x1806046f8)
AllocateAndInitializeSid (Address: 0x180604728)
CheckTokenMembership (Address: 0x180604798)
CopySid (Address: 0x1806047b8)
CreateWellKnownSid (Address: 0x1806047a0)
DeleteAce (Address: 0x1806046d8)
DuplicateToken (Address: 0x180604748)
DuplicateTokenEx (Address: 0x1806046e0)
EqualSid (Address: 0x1806047b0)
FreeSid (Address: 0x1806047c0)
GetAce (Address: 0x180604780)
GetAclInformation (Address: 0x1806047a8)
GetFileSecurityW (Address: 0x180604790)
GetLengthSid (Address: 0x1806047d0)
GetSecurityDescriptorControl (Address: 0x180604740)
GetSecurityDescriptorDacl (Address: 0x180604710)
GetSecurityDescriptorGroup (Address: 0x180604708)
GetSecurityDescriptorOwner (Address: 0x1806046e8)
GetSecurityDescriptorSacl (Address: 0x180604718)
GetSidIdentifierAuthority (Address: 0x180604700)
GetSidLengthRequired (Address: 0x1806047c8)
GetSidSubAuthority (Address: 0x180604738)
GetSidSubAuthorityCount (Address: 0x180604720)
GetTokenInformation (Address: 0x1806047e8)
ImpersonateSelf (Address: 0x1806046f0)
InitializeAcl (Address: 0x180604768)
InitializeSid (Address: 0x180604730)
IsValidSid (Address: 0x1806047d8)
IsWellKnownSid (Address: 0x1806047e0)
RevertToSelf (Address: 0x1806047f8)
SetFileSecurityW (Address: 0x180604750)
SetSecurityDescriptorOwner (Address: 0x180604758)
SetTokenInformation (Address: 0x1806047f0)

api-ms-win-shell-shellcom-l1-1-0.dll

SHCoCreateInstance (Address: 0x180604808)

api-ms-win-stateseparation-helpers-l1-1-0.dll

GetPersistedRegistryLocationW (Address: 0x180604818)

GDI32.dll

BitBlt (Address: 0x1806028a8)
CombineRgn (Address: 0x180602740)
CreateBitmap (Address: 0x1806028e0)
CreateCompatibleBitmap (Address: 0x1806028b0)
CreateCompatibleDC (Address: 0x180602880)
CreateDCW (Address: 0x180602898)
CreateDIBSection (Address: 0x180602878)
CreateFontIndirectW (Address: 0x180602870)
CreateFontW (Address: 0x1806026f8)
CreatePen (Address: 0x180602858)
CreatePolygonRgn (Address: 0x1806027f8)
CreateRectRgn (Address: 0x1806027b8)
CreateRectRgnIndirect (Address: 0x180602758)
CreateSolidBrush (Address: 0x180602820)
DeleteDC (Address: 0x180602890)
DeleteMetaFile (Address: 0x180602780)
DeleteObject (Address: 0x1806026a0)
ExcludeClipRect (Address: 0x1806026e8)
ExtSelectClipRgn (Address: 0x180602770)
ExtTextOutW (Address: 0x180602718)
GdiAlphaBlend (Address: 0x1806028a0)
GdiTransparentBlt (Address: 0x1806028c0)
GetClipBox (Address: 0x1806027c0)
GetClipRgn (Address: 0x1806027b0)
GetCurrentObject (Address: 0x180602888)
GetDeviceCaps (Address: 0x1806026e0)
GetDIBColorTable (Address: 0x180602708)
GetDIBits (Address: 0x1806028d0)
GetLayout (Address: 0x1806026b0)
GetObjectType (Address: 0x180602720)
GetObjectW (Address: 0x180602860)
GetPixel (Address: 0x180602700)
GetRegionData (Address: 0x180602730)
GetRgnBox (Address: 0x180602738)
GetStockObject (Address: 0x1806026c0)
GetTextAlign (Address: 0x1806027f0)
GetTextColor (Address: 0x1806028b8)
GetTextExtentPoint32A (Address: 0x1806026f0)
GetTextExtentPoint32W (Address: 0x180602838)
GetTextExtentPointW (Address: 0x180602868)
GetTextMetricsW (Address: 0x180602848)
GetViewportOrgEx (Address: 0x180602778)
GetWindowOrgEx (Address: 0x180602728)
IntersectClipRect (Address: 0x1806027a8)
LineTo (Address: 0x180602800)
LPtoDP (Address: 0x180602798)
MoveToEx (Address: 0x180602808)
OffsetWindowOrgEx (Address: 0x180602828)
PatBlt (Address: 0x180602810)
PlayMetaFile (Address: 0x180602788)
PlgBlt (Address: 0x180602768)
Rectangle (Address: 0x180602850)
RestoreDC (Address: 0x180602750)
SaveDC (Address: 0x180602748)
SelectClipRgn (Address: 0x1806027a0)
SelectObject (Address: 0x1806026d0)
SetBkColor (Address: 0x1806026a8)
SetBkMode (Address: 0x1806026c8)
SetDCBrushColor (Address: 0x180602760)
SetDIBits (Address: 0x180602710)
SetLayout (Address: 0x1806026b8)
SetMapMode (Address: 0x1806027e8)
SetMetaFileBitsEx (Address: 0x180602790)
SetStretchBltMode (Address: 0x180602818)
SetTextAlign (Address: 0x180602830)
SetTextColor (Address: 0x1806026d8)
SetViewportExtEx (Address: 0x1806027d0)
SetViewportOrgEx (Address: 0x1806027d8)
SetWindowExtEx (Address: 0x1806027e0)
SetWindowOrgEx (Address: 0x180602840)
StretchBlt (Address: 0x1806028c8)
StretchDIBits (Address: 0x1806027c8)
TextOutA (Address: 0x1806028d8)

KERNELBASE.dll

ClosePackageInfo (Address: 0x180602970)
CloseState (Address: 0x180602910)
ExtensionProgIdExists (Address: 0x180602920)
GetCurrentPackageInfo (Address: 0x180602908)
GetEffectivePackageStatusForUser (Address: 0x180602940)
GetExtensionProgIds (Address: 0x180602928)
GetPackageFullName (Address: 0x1806028f0)
GetPackageInfo (Address: 0x180602968)
GetPackagesByPackageFamily (Address: 0x180602900)
GetStagedPackagePathByFullName2 (Address: 0x180602950)
GetStateFolder (Address: 0x1806028f8)
GetSystemAppDataKey (Address: 0x180602978)
IsMrtResourceRedirectionEnabled (Address: 0x180602958)
NotifyRedirectedStringChange (Address: 0x180602948)
OpenPackageInfoByFullName (Address: 0x180602960)
OpenState (Address: 0x180602918)
OpenStateExplicit (Address: 0x180602980)
PackageNameAndPublisherIdFromFamilyName (Address: 0x180602938)
ParseApplicationUserModelId (Address: 0x180602930)

msvcp_win.dll

_Cnd_broadcast (Address: 0x1806048b8)
_Cnd_destroy_in_situ (Address: 0x1806048f8)
_Cnd_init_in_situ (Address: 0x180604900)
_Cnd_wait (Address: 0x1806048a0)
_Mtx_destroy_in_situ (Address: 0x1806048f0)
_Mtx_init_in_situ (Address: 0x1806048e8)
_Mtx_lock (Address: 0x1806048d8)
_Mtx_unlock (Address: 0x1806048c0)
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z (Address: 0x180604870)
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z (Address: 0x180604910)
?__ExceptionPtrCreate@@YAXPEAX@Z (Address: 0x180604840)
?__ExceptionPtrCurrentException@@YAXPEAX@Z (Address: 0x180604a70)
?__ExceptionPtrDestroy@@YAXPEAX@Z (Address: 0x1806048c8)
?__ExceptionPtrRethrow@@YAXPEBX@Z (Address: 0x180604898)
?__ExceptionPtrToBool@@YA_NPEBX@Z (Address: 0x180604860)
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z (Address: 0x180604890)
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ (Address: 0x180604888)
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z (Address: 0x180604858)
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ (Address: 0x1806049e0)
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ (Address: 0x180604850)
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z (Address: 0x180604848)
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ (Address: 0x180604880)
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ (Address: 0x180604878)
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ (Address: 0x180604830)
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ (Address: 0x180604828)
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ (Address: 0x180604a18)
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ (Address: 0x180604a38)
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z (Address: 0x180604a30)
?_ReportUnobservedException@details@Concurrency@@YAXXZ (Address: 0x1806048b0)
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ (Address: 0x180604838)
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z (Address: 0x180604908)
?_Throw_C_error@std@@YAXH@Z (Address: 0x1806048d0)
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ (Address: 0x1806049f8)
?_Xbad_function_call@std@@YAXXZ (Address: 0x1806049d0)
?_XGetLastError@std@@YAXXZ (Address: 0x180604868)
?_Xlength_error@std@@YAXPEBD@Z (Address: 0x180604a68)
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ (Address: 0x180604950)
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z (Address: 0x180604920)
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ (Address: 0x180604968)
??0task_continuation_context@Concurrency@@AEAA@XZ (Address: 0x1806048a8)
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x1806049d8)
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x1806049c8)
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x1806049a8)
?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x180604948)
?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x180604940)
?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x180604930)
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGXZ (Address: 0x180604a50)
?flags@ios_base@std@@QEBAHXZ (Address: 0x180604a28)
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ (Address: 0x1806049e8)
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z (Address: 0x1806049b0)
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ (Address: 0x1806048e0)
?good@ios_base@std@@QEBA_NXZ (Address: 0x180604a08)
?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x1806049c0)
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x180604978)
?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x180604960)
?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x1806049b8)
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ (Address: 0x180604a48)
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z (Address: 0x180604980)
?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z (Address: 0x180604938)
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG0@Z (Address: 0x180604958)
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z (Address: 0x180604928)
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z (Address: 0x180604a60)
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ (Address: 0x180604998)
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z (Address: 0x180604a40)
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z (Address: 0x180604970)
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ (Address: 0x180604a10)
?tellp@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ (Address: 0x180604918)
?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ (Address: 0x1806049f0)
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ (Address: 0x180604990)
?uncaught_exception@std@@YA_NXZ (Address: 0x180604a00)
?width@ios_base@std@@QEAA_J_J@Z (Address: 0x180604a58)
?width@ios_base@std@@QEBA_JXZ (Address: 0x180604a20)
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z (Address: 0x180604988)
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z (Address: 0x1806049a0)

ntdll.dll

EtwEventActivityIdControl (Address: 0x180604d20)
EtwEventEnabled (Address: 0x180604d18)
EtwEventRegister (Address: 0x180604d30)
EtwEventSetInformation (Address: 0x180604d28)
EtwEventUnregister (Address: 0x180604d38)
EtwEventWrite (Address: 0x180604d10)
EtwEventWriteTransfer (Address: 0x180604a98)
EtwGetTraceEnableFlags (Address: 0x180604c78)
EtwGetTraceEnableLevel (Address: 0x180604c80)
EtwGetTraceLoggerHandle (Address: 0x180604c88)
EtwLogTraceEvent (Address: 0x180604b80)
EtwRegisterTraceGuidsW (Address: 0x180604c70)
EtwTraceMessage (Address: 0x180604d08)
EtwUnregisterTraceGuids (Address: 0x180604c68)
NtClose (Address: 0x180604ac8)
NtCompareSigningLevels (Address: 0x180604cd0)
NtCreateFile (Address: 0x180604ac0)
NtFsControlFile (Address: 0x180604ad0)
NtGetCachedSigningLevel (Address: 0x180604ce0)
NtOpenFile (Address: 0x180604ae8)
NtOpenProcessToken (Address: 0x180604d48)
NtOpenThreadToken (Address: 0x180604b78)
NtPowerInformation (Address: 0x180604c90)
NtQueryAttributesFile (Address: 0x180604ca0)
NtQueryInformationFile (Address: 0x180604ab0)
NtQueryInformationProcess (Address: 0x180604c98)
NtQueryInformationThread (Address: 0x180604cd8)
NtQueryInformationToken (Address: 0x180604d40)
NtQueryKey (Address: 0x180604be8)
NtQueryObject (Address: 0x180604bd8)
NtQuerySecurityObject (Address: 0x180604bf8)
NtQuerySystemInformation (Address: 0x180604bd0)
NtQuerySystemInformationEx (Address: 0x180604b88)
NtQueryVolumeInformationFile (Address: 0x180604b00)
NtQueryWnfStateData (Address: 0x180604c48)
NtSetCachedSigningLevel (Address: 0x180604cc8)
NtSetInformationFile (Address: 0x180604ae0)
NtSetInformationToken (Address: 0x180604ba8)
NtSetSecurityObject (Address: 0x180604bf0)
RtlAcquireResourceExclusive (Address: 0x180604b28)
RtlAllocateHeap (Address: 0x180604ba0)
RtlAreLongPathsEnabled (Address: 0x180604a88)
RtlCheckRegistryKey (Address: 0x180604bc8)
RtlCompareUnicodeString (Address: 0x180604b90)
RtlCreateEnvironment (Address: 0x180604b68)
RtlCreateServiceSid (Address: 0x180604c50)
RtlCreateUnicodeString (Address: 0x180604c38)
RtlDeleteResource (Address: 0x180604b38)
RtlDestroyEnvironment (Address: 0x180604b70)
RtlDllShutdownInProgress (Address: 0x180604cb0)
RtlDosPathNameToNtPathName_U (Address: 0x180604c00)
RtlDosPathNameToNtPathName_U_WithStatus (Address: 0x180604af0)
RtlDosPathNameToRelativeNtPathName_U (Address: 0x180604ca8)
RtlDosPathNameToRelativeNtPathName_U_WithStatus (Address: 0x180604b08)
RtlExpandEnvironmentStrings_U (Address: 0x180604b60)
RtlFlushHeaps (Address: 0x180604a80)
RtlFreeHeap (Address: 0x180604af8)
RtlFreeUnicodeString (Address: 0x180604b18)
RtlGetDeviceFamilyInfoEnum (Address: 0x180604cb8)
RtlGetLastNtStatus (Address: 0x180604b40)
RtlGetNtProductType (Address: 0x180604c60)
RtlGetNtSystemRoot (Address: 0x180604bb8)
RtlInitializeResource (Address: 0x180604b20)
RtlInitUnicodeString (Address: 0x180604aa0)
RtlInitUnicodeStringEx (Address: 0x180604b48)
RtlIsNonEmptyDirectoryReparsePointAllowed (Address: 0x180604c10)
RtlIsPartialPlaceholder (Address: 0x180604be0)
RtlLengthRequiredSid (Address: 0x180604c58)
RtlMapGenericMask (Address: 0x180604ce8)
RtlNtStatusToDosError (Address: 0x180604ab8)
RtlNtStatusToDosErrorNoTeb (Address: 0x180604b98)
RtlPrefixString (Address: 0x180604aa8)
RtlPublishWnfStateData (Address: 0x180604c40)
RtlQueryEnvironmentVariable_U (Address: 0x180604b50)
RtlQueryRegistryValuesEx (Address: 0x180604bc0)
RtlQueryResourcePolicy (Address: 0x180604a90)
RtlQueryWnfStateData (Address: 0x180604bb0)
RtlRandomEx (Address: 0x180604c30)
RtlReleaseRelativeName (Address: 0x180604b10)
RtlReleaseResource (Address: 0x180604b30)
RtlSetCurrentEnvironment (Address: 0x180604d50)
RtlSetEnvironmentVariable (Address: 0x180604b58)
RtlSubscribeWnfStateChangeNotification (Address: 0x180604c20)
RtlUnicodeStringToOemString (Address: 0x180604ad8)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x180604c28)
ShipAssert (Address: 0x180604c08)
WinSqmAddToStream (Address: 0x180604d00)
WinSqmAddToStreamEx (Address: 0x180604cc0)
WinSqmIncrementDWORD (Address: 0x180604cf8)
WinSqmSetDWORD (Address: 0x180604cf0)
ZwQueryWnfStateData (Address: 0x180604c18)

USER32.dll

(Address: 0x1806029f0)
(Address: 0x180602ae0)
(Address: 0x180602d40)
ActivateKeyboardLayout (Address: 0x180602b50)
AdjustWindowRect (Address: 0x180602c28)
AdjustWindowRectEx (Address: 0x180603128)
AdjustWindowRectExForDpi (Address: 0x180602b58)
AllowSetForegroundWindow (Address: 0x180602d10)
AnimateWindow (Address: 0x180603288)
AppendMenuW (Address: 0x180602ef8)
AreDpiAwarenessContextsEqual (Address: 0x180603290)
AttachThreadInput (Address: 0x180602c90)
BeginDeferWindowPos (Address: 0x180602c20)
BeginPaint (Address: 0x1806030d0)
BroadcastSystemMessageW (Address: 0x180602ba0)
CallNextHookEx (Address: 0x180602ac8)
CallWindowProcW (Address: 0x180602ad0)
ChangeClipboardChain (Address: 0x180602eb8)
ChangeWindowMessageFilterEx (Address: 0x180602e40)
CheckDlgButton (Address: 0x180603058)
CheckMenuItem (Address: 0x180602ee8)
CheckMenuRadioItem (Address: 0x180602ef0)
CheckRadioButton (Address: 0x180602a30)
ChildWindowFromPoint (Address: 0x1806032c8)
ClientToScreen (Address: 0x180602a48)
CloseClipboard (Address: 0x180602bb8)
CloseDesktop (Address: 0x180602bf0)
CloseGestureInfoHandle (Address: 0x180602ea8)
CopyAcceleratorTableW (Address: 0x180602c80)
CopyIcon (Address: 0x180602d90)
CopyImage (Address: 0x180602cd8)
CopyRect (Address: 0x180602e10)
CountClipboardFormats (Address: 0x180602dd0)
CreateAcceleratorTableW (Address: 0x180602a18)
CreateDialogParamW (Address: 0x1806032d0)
CreateIconIndirect (Address: 0x1806031f0)
CreateMenu (Address: 0x180602e78)
CreatePopupMenu (Address: 0x180603070)
CreateWindowExW (Address: 0x180602b30)
CreateWindowInBand (Address: 0x180602c00)
CreateWindowIndirect (Address: 0x180602b68)
DdeCreateDataHandle (Address: 0x1806029c0)
DdeCreateStringHandleW (Address: 0x1806029b8)
DdeDisconnect (Address: 0x1806029a0)
DdeFreeStringHandle (Address: 0x1806029b0)
DdeGetData (Address: 0x1806029d0)
DdeGetLastError (Address: 0x1806029c8)
DdeInitializeW (Address: 0x180603220)
DdeNameService (Address: 0x180602998)
DdeQueryConvInfo (Address: 0x1806029d8)
DdeQueryStringW (Address: 0x1806029a8)
DdeUninitialize (Address: 0x180602990)
DeferWindowPos (Address: 0x180602c78)
DefWindowProcA (Address: 0x180602c98)
DefWindowProcW (Address: 0x1806030f8)
DeleteMenu (Address: 0x180603060)
DeregisterShellHookWindow (Address: 0x180602cb0)
DestroyAcceleratorTable (Address: 0x180602e90)
DestroyIcon (Address: 0x180603200)
DestroyMenu (Address: 0x180603068)
DestroyWindow (Address: 0x180603130)
DialogBoxParamW (Address: 0x180602b90)
DispatchMessageW (Address: 0x180603088)
DisplayConfigGetDeviceInfo (Address: 0x180603238)
DrawEdge (Address: 0x1806030b0)
DrawFocusRect (Address: 0x180603148)
DrawIcon (Address: 0x180603150)
DrawIconEx (Address: 0x180602cf8)
DrawTextExW (Address: 0x180602b48)
DrawTextW (Address: 0x180603298)
EmptyClipboard (Address: 0x180603270)
EnableMenuItem (Address: 0x180602ed0)
EnableWindow (Address: 0x180602ff8)
EndDeferWindowPos (Address: 0x180602c18)
EndDialog (Address: 0x180603160)
EndMenu (Address: 0x180602e88)
EndPaint (Address: 0x1806030c8)
EnumChildWindows (Address: 0x180602bb0)
EnumDisplayDevicesW (Address: 0x180602d60)
EnumDisplayMonitors (Address: 0x180602a10)
EnumDisplaySettingsW (Address: 0x1806029f8)
EnumPropsExW (Address: 0x180602bd8)
EnumWindows (Address: 0x180602f90)
EqualRect (Address: 0x180602d20)
ExitWindowsEx (Address: 0x180602df8)
FillRect (Address: 0x1806030c0)
FindWindowExW (Address: 0x180602b38)
FindWindowW (Address: 0x180602fe0)
GetAncestor (Address: 0x180602ff0)
GetAsyncKeyState (Address: 0x180602d38)
GetCapture (Address: 0x180602a98)
GetClassInfoExW (Address: 0x180602ab0)
GetClassInfoW (Address: 0x180602cc8)
GetClassLongPtrW (Address: 0x180602a00)
GetClassLongW (Address: 0x1806032d8)
GetClassNameW (Address: 0x180602fe8)
GetClientRect (Address: 0x180603188)
GetClipboardData (Address: 0x180602bc8)
GetClipboardOwner (Address: 0x180602de0)
GetCurrentInputMessageSource (Address: 0x1806032f0)
GetCursor (Address: 0x180603190)
GetCursorPos (Address: 0x180602fc8)
GetDC (Address: 0x180602f60)
GetDesktopWindow (Address: 0x180602f48)
GetDialogBaseUnits (Address: 0x180602b10)
GetDisplayConfigBufferSizes (Address: 0x180603278)
GetDlgCtrlID (Address: 0x180602c30)
GetDlgItem (Address: 0x1806031a0)
GetDlgItemInt (Address: 0x180602a38)
GetDlgItemTextW (Address: 0x1806031c8)
GetDoubleClickTime (Address: 0x180602f00)
GetDpiForSystem (Address: 0x180602c08)
GetDpiForWindow (Address: 0x180602b98)
GetFocus (Address: 0x180602ee0)
GetForegroundWindow (Address: 0x180602f50)
GetGestureInfo (Address: 0x180602eb0)
GetIconInfo (Address: 0x1806031f8)
GetKeyboardLayout (Address: 0x180602e58)
GetKeyState (Address: 0x180603118)
GetLastActivePopup (Address: 0x180602fb8)
GetLastInputInfo (Address: 0x180602b18)
GetMenuDefaultItem (Address: 0x180602fb0)
GetMenuInfo (Address: 0x180603268)
GetMenuItemCount (Address: 0x180602f88)
GetMenuItemID (Address: 0x180602ec8)
GetMenuItemInfoW (Address: 0x180602f80)
GetMenuState (Address: 0x180602dc8)
GetMenuStringW (Address: 0x180602f40)
GetMessageExtraInfo (Address: 0x180602e98)
GetMessagePos (Address: 0x180602e50)
GetMessageTime (Address: 0x180602a20)
GetMessageW (Address: 0x180603098)
GetMonitorInfoW (Address: 0x180602e18)
GetParent (Address: 0x180603048)
GetPointerDevices (Address: 0x180602b80)
GetProcessDefaultLayout (Address: 0x180602d08)
GetProcessWindowStation (Address: 0x180602e38)
GetPropW (Address: 0x180602d98)
GetScrollInfo (Address: 0x180602d78)
GetShellChangeNotifyWindow (Address: 0x180602c48)
GetShellWindow (Address: 0x180602c50)
GetSubMenu (Address: 0x180603038)
GetSysColor (Address: 0x180603158)
GetSysColorBrush (Address: 0x1806030b8)
GetSystemMenu (Address: 0x180602a68)
GetSystemMetrics (Address: 0x180603218)
GetSystemMetricsForDpi (Address: 0x180602c10)
GetTaskmanWindow (Address: 0x180602cc0)
GetThreadDesktop (Address: 0x180602e30)
GetUpdateRect (Address: 0x1806030d8)
GetUserObjectInformationW (Address: 0x180602e28)
GetWindow (Address: 0x180602fd8)
GetWindowBand (Address: 0x180602cf0)
GetWindowDC (Address: 0x180602b78)
GetWindowDpiAwarenessContext (Address: 0x1806032f8)
GetWindowLongPtrW (Address: 0x180603168)
GetWindowLongW (Address: 0x180603140)
GetWindowPlacement (Address: 0x180602de8)
GetWindowRect (Address: 0x1806030f0)
GetWindowTextLengthW (Address: 0x180602cd0)
GetWindowTextW (Address: 0x180603178)
GetWindowThreadProcessId (Address: 0x180602fa8)
HideCaret (Address: 0x1806032a8)
InflateRect (Address: 0x180603120)
InsertMenuItemW (Address: 0x180602ed8)
InsertMenuW (Address: 0x180602e80)
IntersectRect (Address: 0x180602d28)
InvalidateRect (Address: 0x1806031a8)
IsChild (Address: 0x180602d50)
IsDialogMessageW (Address: 0x180602a80)
IsDlgButtonChecked (Address: 0x180603050)
IsHungAppWindow (Address: 0x180602dd8)
IsIconic (Address: 0x180602d88)
IsMenu (Address: 0x180602db8)
IsProcessDPIAware (Address: 0x180602d00)
IsRectEmpty (Address: 0x180602a50)
IsSETEnabled (Address: 0x180602d18)
IsWindow (Address: 0x180602f98)
IsWindowEnabled (Address: 0x180602be8)
IsWindowUnicode (Address: 0x180602ca0)
IsWindowVisible (Address: 0x1806030a8)
IsWinEventHookInstalled (Address: 0x180603260)
KillTimer (Address: 0x180603108)
LoadAcceleratorsW (Address: 0x180602f30)
LoadBitmapW (Address: 0x180602a28)
LoadCursorW (Address: 0x1806031b0)
LoadIconW (Address: 0x180603210)
LoadImageW (Address: 0x180602e00)
LoadMenuW (Address: 0x180603030)
LockSetForegroundWindow (Address: 0x1806032b8)
LockWindowUpdate (Address: 0x1806029e8)
LookupIconIdFromDirectory (Address: 0x1806031e8)
MapDialogRect (Address: 0x180602ce0)
MapWindowPoints (Address: 0x180602ec0)
MessageBeep (Address: 0x180602f08)
MessageBoxW (Address: 0x180602c70)
ModifyMenuW (Address: 0x180602dc0)
MonitorFromPoint (Address: 0x180602e20)
MonitorFromRect (Address: 0x180602aa8)
MonitorFromWindow (Address: 0x180602d30)
MoveWindow (Address: 0x180602c88)
MsgWaitForMultipleObjects (Address: 0x180602df0)
MsgWaitForMultipleObjectsEx (Address: 0x180603000)
NotifyWinEvent (Address: 0x180602f68)
OffsetRect (Address: 0x180602e60)
OpenClipboard (Address: 0x180602bd0)
OpenInputDesktop (Address: 0x180602bf8)
PeekMessageW (Address: 0x180603008)
PostMessageW (Address: 0x180603078)
PostQuitMessage (Address: 0x180603010)
PostThreadMessageW (Address: 0x180602a70)
PrivateExtractIconsW (Address: 0x180603208)
PtInRect (Address: 0x180602f38)
QueryDisplayConfig (Address: 0x180603280)
RedrawWindow (Address: 0x180602be0)
RegisterClassExW (Address: 0x180602d70)
RegisterClassW (Address: 0x180603100)
RegisterClipboardFormatW (Address: 0x180602fd0)
RegisterDeviceNotificationW (Address: 0x180602c58)
RegisterPowerSettingNotification (Address: 0x1806032e0)
RegisterShellHookWindow (Address: 0x180602ca8)
RegisterWindowMessageA (Address: 0x180602b40)
RegisterWindowMessageW (Address: 0x180602e48)
ReleaseCapture (Address: 0x180602a90)
ReleaseDC (Address: 0x180602f58)
RemoveMenu (Address: 0x180603040)
RemovePropW (Address: 0x180602da0)
ScreenToClient (Address: 0x1806031d8)
SendDlgItemMessageW (Address: 0x1806031d0)
SendMessageCallbackW (Address: 0x180602c68)
SendMessageTimeoutW (Address: 0x180602d80)
SendMessageW (Address: 0x1806031e0)
SendNotifyMessageW (Address: 0x180602f70)
SetActiveWindow (Address: 0x180602ce8)
SetCapture (Address: 0x180602a88)
SetClipboardData (Address: 0x180602bc0)
SetClipboardViewer (Address: 0x180602e68)
SetCoalescableTimer (Address: 0x180602ac0)
SetCursor (Address: 0x1806031b8)
SetDialogDpiChangeBehavior (Address: 0x180602a78)
SetDlgItemInt (Address: 0x180602a40)
SetDlgItemTextA (Address: 0x180602c38)
SetDlgItemTextW (Address: 0x1806031c0)
SetFocus (Address: 0x1806030a0)
SetForegroundWindow (Address: 0x180603018)
SetGestureConfig (Address: 0x180602ea0)
SetLayeredWindowAttributes (Address: 0x180602b70)
SetMenu (Address: 0x1806032c0)
SetMenuDefaultItem (Address: 0x180602f20)
SetMenuInfo (Address: 0x180602ab8)
SetMenuItemInfoW (Address: 0x180602f28)
SetMessageExtraInfo (Address: 0x180602f18)
SetParent (Address: 0x180602a58)
SetProcessDPIAware (Address: 0x180603080)
SetPropW (Address: 0x180602da8)
SetRect (Address: 0x180602e08)
SetRectEmpty (Address: 0x180602b88)
SetScrollInfo (Address: 0x180602af0)
SetScrollPos (Address: 0x180602ad8)
SetShellChangeNotifyWindow (Address: 0x180602c40)
SetShellWindow (Address: 0x180603248)
SetShellWindowEx (Address: 0x180602a08)
SetSysColors (Address: 0x180603230)
SetTaskmanWindow (Address: 0x180602cb8)
SetThreadDpiAwarenessContext (Address: 0x180602ba8)
SetTimer (Address: 0x180603110)
SetWindowCompositionAttribute (Address: 0x180602d68)
SetWindowLongPtrW (Address: 0x180603170)
SetWindowLongW (Address: 0x180603138)
SetWindowPos (Address: 0x180603180)
SetWindowRgn (Address: 0x180602af8)
SetWindowsHookExW (Address: 0x180602b00)
SetWindowTextW (Address: 0x180603198)
SetWinEventHook (Address: 0x180603250)
ShowCaret (Address: 0x1806032b0)
ShowScrollBar (Address: 0x180602ae8)
ShowWindow (Address: 0x1806032a0)
ShutdownBlockReasonCreate (Address: 0x180603028)
ShutdownBlockReasonDestroy (Address: 0x180603020)
SubtractRect (Address: 0x180602b60)
SwitchToThisWindow (Address: 0x180602fc0)
SystemParametersInfoA (Address: 0x180602b20)
SystemParametersInfoForDpi (Address: 0x180603240)
SystemParametersInfoW (Address: 0x180602f78)
TrackMouseEvent (Address: 0x1806030e0)
TrackPopupMenu (Address: 0x180602f10)
TrackPopupMenuEx (Address: 0x180602aa0)
TranslateAcceleratorW (Address: 0x180602e70)
TranslateMessage (Address: 0x180603090)
UnhookWindowsHookEx (Address: 0x180602b08)
UnhookWinEvent (Address: 0x180603258)
UnionRect (Address: 0x180602d58)
UnpackDDElParam (Address: 0x180602db0)
UnregisterDeviceNotification (Address: 0x180602c60)
UnregisterPowerSettingNotification (Address: 0x1806032e8)
UpdateLayeredWindow (Address: 0x180602d48)
UpdateWindow (Address: 0x1806030e8)
WaitForInputIdle (Address: 0x180602fa0)
WaitMessage (Address: 0x1806029e0)
WindowFromPoint (Address: 0x180602a60)
WinHelpW (Address: 0x180602b28)
wsprintfW (Address: 0x180603228)