shell32.dll

Description: Windows Shell Common Dll

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.26100.9168

Architecture: 64-bit

Operating System: Windows NT

SHA256: a7779772d197cd94a2309d4739b85587

File Size: 7.6 MB

Uploaded At: Aug. 27, 2026, 8:41 p.m.

Views: 14

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, OpenProcess

Exported Functions

  • SHChangeNotifyRegister (Ordinal: 2, Address: 0x18a670)
  • SHDefExtractIconA (Ordinal: 3, Address: 0x2005b0)
  • SHChangeNotifyDeregister (Ordinal: 4, Address: 0x1969d0)
  • (Ordinal: 5, Address: 0x70f9df)
  • SHDefExtractIconW (Ordinal: 6, Address: 0x2005d0)
  • (Ordinal: 7, Address: 0x70fc2c)
  • (Ordinal: 8, Address: 0x70fc3a)
  • PifMgr_OpenProperties (Ordinal: 9, Address: 0x1950a0)
  • PifMgr_GetProperties (Ordinal: 10, Address: 0x1950a0)
  • PifMgr_SetProperties (Ordinal: 11, Address: 0x1950a0)
  • (Ordinal: 12, Address: 0x2e4820)
  • PifMgr_CloseProperties (Ordinal: 13, Address: 0x204620)
  • SHStartNetConnectionDialogW (Ordinal: 14, Address: 0x2d9b80)
  • (Ordinal: 15, Address: 0x1ffb70)
  • ILFindLastID (Ordinal: 16, Address: 0x1ffb30)
  • ILRemoveLastID (Ordinal: 17, Address: 0x1ffc50)
  • ILClone (Ordinal: 18, Address: 0x1ffa70)
  • ILCloneFirst (Ordinal: 19, Address: 0x1ffa90)
  • (Ordinal: 20, Address: 0x1ffa70)
  • ILIsEqual (Ordinal: 21, Address: 0x1ffbf0)
  • DAD_DragEnterEx2 (Ordinal: 22, Address: 0x2502d0)
  • ILIsParent (Ordinal: 23, Address: 0x1ffc10)
  • ILFindChild (Ordinal: 24, Address: 0x1ffb10)
  • ILCombine (Ordinal: 25, Address: 0x1ffab0)
  • (Ordinal: 26, Address: 0x70f8e1)
  • ILSaveToStream (Ordinal: 27, Address: 0x1ffc70)
  • SHILCreateFromPath (Ordinal: 28, Address: 0x200bd0)
  • (Ordinal: 29, Address: 0x1fff50)
  • (Ordinal: 30, Address: 0x70f2d7)
  • (Ordinal: 31, Address: 0x70f313)
  • (Ordinal: 32, Address: 0x70f2bd)
  • (Ordinal: 33, Address: 0x70f4cc)
  • (Ordinal: 34, Address: 0x70f32e)
  • (Ordinal: 35, Address: 0x200030)
  • (Ordinal: 36, Address: 0x1ffe50)
  • (Ordinal: 37, Address: 0x70f2fe)
  • (Ordinal: 38, Address: 0x70f52b)
  • (Ordinal: 39, Address: 0x70f40d)
  • (Ordinal: 40, Address: 0x70f3c5)
  • IsLFNDriveA (Ordinal: 41, Address: 0x1ffd90)
  • IsLFNDriveW (Ordinal: 42, Address: 0x1ffd70)
  • PathIsExe (Ordinal: 43, Address: 0x1fff30)
  • (Ordinal: 44, Address: 0x243360)
  • (Ordinal: 45, Address: 0x1ffe90)
  • (Ordinal: 46, Address: 0x70f459)
  • PathMakeUniqueName (Ordinal: 47, Address: 0x1ffff0)
  • (Ordinal: 48, Address: 0x70f50f)
  • PathQualify (Ordinal: 49, Address: 0x200010)
  • (Ordinal: 50, Address: 0x70f542)
  • PathResolve (Ordinal: 51, Address: 0x200050)
  • (Ordinal: 52, Address: 0x70f360)
  • (Ordinal: 53, Address: 0x70f918)
  • (Ordinal: 54, Address: 0x250d30)
  • (Ordinal: 55, Address: 0x70f49b)
  • (Ordinal: 56, Address: 0x70f55b)
  • (Ordinal: 57, Address: 0x70f375)
  • (Ordinal: 58, Address: 0x1ffe30)
  • RestartDialog (Ordinal: 59, Address: 0x250d50)
  • (Ordinal: 60, Address: 0x250cd0)
  • (Ordinal: 61, Address: 0x285010)
  • PickIconDlg (Ordinal: 62, Address: 0x203750)
  • GetFileNameFromBrowse (Ordinal: 63, Address: 0x284fc0)
  • DriveType (Ordinal: 64, Address: 0x1f2700)
  • (Ordinal: 65, Address: 0x1ffcf0)
  • IsNetDrive (Ordinal: 66, Address: 0x25d300)
  • Shell_MergeMenus (Ordinal: 67, Address: 0x201150)
  • SHGetSetSettings (Ordinal: 68, Address: 0x200af0)
  • (Ordinal: 69, Address: 0x200970)
  • (Ordinal: 70, Address: 0x202b60)
  • Shell_GetImageLists (Ordinal: 71, Address: 0x201130)
  • Shell_GetCachedImageIndex (Ordinal: 72, Address: 0x2010d0)
  • SHShellFolderView_Message (Ordinal: 73, Address: 0x2d7af0)
  • SHCreateStdEnumFmtEtc (Ordinal: 74, Address: 0x200570)
  • PathYetAnotherMakeUniqueName (Ordinal: 75, Address: 0x200090)
  • (Ordinal: 76, Address: 0x1ff850)
  • SHMapPIDLToSystemImageListIndex (Ordinal: 77, Address: 0x200cf0)
  • (Ordinal: 78, Address: 0x70f95a)
  • (Ordinal: 79, Address: 0x70fd2d)
  • SHOpenPropSheetW (Ordinal: 80, Address: 0x2e3c00)
  • OpenAs_RunDLL (Ordinal: 81, Address: 0x197af0)
  • (Ordinal: 82, Address: 0x70f6a8)
  • CIDLData_CreateFromIDArray (Ordinal: 83, Address: 0x593520)
  • (Ordinal: 84, Address: 0x70fbdb)
  • OpenRegStream (Ordinal: 85, Address: 0x1ffe10)
  • (Ordinal: 86, Address: 0x70fca7)
  • (Ordinal: 87, Address: 0x70fcb4)
  • SHDoDragDrop (Ordinal: 88, Address: 0x2504e0)
  • SHCloneSpecialIDList (Ordinal: 89, Address: 0x2001d0)
  • SHFindFiles (Ordinal: 90, Address: 0x2006b0)
  • (Ordinal: 91, Address: 0x200690)
  • PathGetShortPath (Ordinal: 92, Address: 0x1ffef0)
  • (Ordinal: 93, Address: 0x711f9a)
  • (Ordinal: 94, Address: 0x2011f0)
  • (Ordinal: 95, Address: 0x200c70)
  • (Ordinal: 96, Address: 0x70fd13)
  • (Ordinal: 97, Address: 0x1950a0)
  • SHGetRealIDL (Ordinal: 98, Address: 0x200ab0)
  • (Ordinal: 99, Address: 0x200f90)
  • SHRestricted (Ordinal: 100, Address: 0x200df0)
  • (Ordinal: 101, Address: 0x70f802)
  • SHCoCreateInstance (Ordinal: 102, Address: 0x70ffbd)
  • SignalFileOpen (Ordinal: 103, Address: 0x14f2f0)
  • (Ordinal: 104, Address: 0x70f744)
  • (Ordinal: 105, Address: 0x70f791)
  • (Ordinal: 106, Address: 0x70f7b7)
  • (Ordinal: 107, Address: 0x70f7d0)
  • (Ordinal: 108, Address: 0x70f7e9)
  • (Ordinal: 109, Address: 0x70f80e)
  • (Ordinal: 110, Address: 0x70f704)
  • (Ordinal: 111, Address: 0x70f834)
  • (Ordinal: 112, Address: 0x70f867)
  • (Ordinal: 113, Address: 0x70f710)
  • (Ordinal: 114, Address: 0x70f71d)
  • (Ordinal: 115, Address: 0x70f6f7)
  • (Ordinal: 116, Address: 0x70f881)
  • (Ordinal: 117, Address: 0x70f750)
  • (Ordinal: 118, Address: 0x70f784)
  • IsLFNDrive (Ordinal: 119, Address: 0x1ffd70)
  • (Ordinal: 120, Address: 0x70f6dd)
  • (Ordinal: 121, Address: 0x70fb10)
  • (Ordinal: 122, Address: 0x70f9ab)
  • (Ordinal: 123, Address: 0x70fb2a)
  • (Ordinal: 124, Address: 0x70f6ea)
  • OpenAs_RunDLLA (Ordinal: 125, Address: 0x197af0)
  • (Ordinal: 126, Address: 0x70fc70)
  • (Ordinal: 127, Address: 0x70fd05)
  • (Ordinal: 128, Address: 0x4d950)
  • DAD_AutoScroll (Ordinal: 129, Address: 0x1ff6f0)
  • (Ordinal: 130, Address: 0x70f68e)
  • DAD_DragEnterEx (Ordinal: 131, Address: 0x1ff710)
  • DAD_DragLeave (Ordinal: 132, Address: 0x250400)
  • OpenAs_RunDLLW (Ordinal: 133, Address: 0x20d660)
  • DAD_DragMove (Ordinal: 134, Address: 0x96380)
  • PrepareDiscForBurnRunDllW (Ordinal: 135, Address: 0x2119b0)
  • DAD_SetDragImage (Ordinal: 136, Address: 0x1ff730)
  • DAD_ShowDragImage (Ordinal: 137, Address: 0x1ff750)
  • PrintersGetCommand_RunDLL (Ordinal: 138, Address: 0x21ed40)
  • PrintersGetCommand_RunDLLA (Ordinal: 139, Address: 0x21ed40)
  • (Ordinal: 140, Address: 0x70f75d)
  • (Ordinal: 141, Address: 0x70f76a)
  • (Ordinal: 142, Address: 0x70f777)
  • (Ordinal: 143, Address: 0x70f7aa)
  • (Ordinal: 144, Address: 0x70f7c3)
  • (Ordinal: 145, Address: 0x70f348)
  • (Ordinal: 146, Address: 0x70f99e)
  • SHCLSIDFromString (Ordinal: 147, Address: 0x2001b0)
  • (Ordinal: 148, Address: 0x70fc48)
  • SHFind_InitMenuPopup (Ordinal: 149, Address: 0x2dca50)
  • PrintersGetCommand_RunDLLW (Ordinal: 150, Address: 0x21ee30)
  • (Ordinal: 151, Address: 0x70fc12)
  • ILGetSize (Ordinal: 152, Address: 0x1ffbd0)
  • ILGetNext (Ordinal: 153, Address: 0x1ffbb0)
  • ILAppendID (Ordinal: 154, Address: 0x1ffa50)
  • ILFree (Ordinal: 155, Address: 0x1ffb50)
  • (Ordinal: 156, Address: 0x1ffb50)
  • ILCreateFromPath (Ordinal: 157, Address: 0x1ffad0)
  • (Ordinal: 158, Address: 0x70f975)
  • (Ordinal: 159, Address: 0x70f3a2)
  • (Ordinal: 160, Address: 0x200d10)
  • (Ordinal: 161, Address: 0x70fcc1)
  • SHSimpleIDListFromPath (Ordinal: 162, Address: 0x200ed0)
  • (Ordinal: 163, Address: 0x70fd20)
  • Win32DeleteFile (Ordinal: 164, Address: 0x2011d0)
  • SHCreateDirectory (Ordinal: 165, Address: 0x2002b0)
  • (Ordinal: 166, Address: 0x70f620)
  • SHAddFromPropSheetExtArray (Ordinal: 167, Address: 0x296f80)
  • SHCreatePropSheetExtArray (Ordinal: 168, Address: 0x297010)
  • SHDestroyPropSheetExtArray (Ordinal: 169, Address: 0x297200)
  • SHReplaceFromPropSheetExtArray (Ordinal: 170, Address: 0x297250)
  • PathCleanupSpec (Ordinal: 171, Address: 0x1f88c0)
  • (Ordinal: 172, Address: 0x200410)
  • SHValidateUNC (Ordinal: 173, Address: 0x200f70)
  • SHCreateShellFolderViewEx (Ordinal: 174, Address: 0x2d7a50)
  • (Ordinal: 175, Address: 0x158e70)
  • SHSetInstanceExplorer (Ordinal: 176, Address: 0x25d490)
  • (Ordinal: 177, Address: 0x70f69b)
  • SHObjectProperties (Ordinal: 178, Address: 0x220160)
  • SHGetNewLinkInfoA (Ordinal: 179, Address: 0x200990)
  • SHGetNewLinkInfoW (Ordinal: 180, Address: 0x2009b0)
  • (Ordinal: 181, Address: 0x28fb80)
  • ShellMessageBoxW (Ordinal: 182, Address: 0x711d25)
  • ShellMessageBoxA (Ordinal: 183, Address: 0x711cfb)
  • (Ordinal: 184, Address: 0x1ff530)
  • (Ordinal: 185, Address: 0x70fbb1)
  • (Ordinal: 186, Address: 0x1ffb90)
  • (Ordinal: 187, Address: 0x70f8d3)
  • (Ordinal: 188, Address: 0x1856f0)
  • ILCreateFromPathA (Ordinal: 189, Address: 0x1ffaf0)
  • ILCreateFromPathW (Ordinal: 190, Address: 0x1ffad0)
  • SHUpdateImageA (Ordinal: 191, Address: 0x296e10)
  • SHUpdateImageW (Ordinal: 192, Address: 0x296e30)
  • SHHandleUpdateImage (Ordinal: 193, Address: 0x1a4130)
  • (Ordinal: 194, Address: 0x297020)
  • SHFree (Ordinal: 195, Address: 0x2006f0)
  • SHAlloc (Ordinal: 196, Address: 0x2000f0)
  • (Ordinal: 197, Address: 0x70fba4)
  • (Ordinal: 198, Address: 0x70f9b8)
  • RealShellExecuteA (Ordinal: 199, Address: 0x1ff470)
  • (Ordinal: 200, Address: 0x992f0)
  • (Ordinal: 201, Address: 0x4a5580)
  • (Ordinal: 202, Address: 0x70f6b5)
  • (Ordinal: 203, Address: 0x1ff510)
  • (Ordinal: 204, Address: 0x201170)
  • (Ordinal: 205, Address: 0x21f7f0)
  • (Ordinal: 206, Address: 0x4a5570)
  • RealShellExecuteExA (Ordinal: 207, Address: 0x1ff490)
  • RealShellExecuteExW (Ordinal: 208, Address: 0x1ff4b0)
  • (Ordinal: 209, Address: 0x1ffc90)
  • (Ordinal: 210, Address: 0x1ffdd0)
  • (Ordinal: 211, Address: 0x21fa10)
  • (Ordinal: 212, Address: 0x21f690)
  • (Ordinal: 213, Address: 0x21fa30)
  • (Ordinal: 214, Address: 0x21fb60)
  • (Ordinal: 215, Address: 0x2d9b80)
  • (Ordinal: 216, Address: 0x70f84d)
  • (Ordinal: 217, Address: 0x70f874)
  • (Ordinal: 218, Address: 0x70f81a)
  • (Ordinal: 219, Address: 0x70f827)
  • (Ordinal: 220, Address: 0x70f7dc)
  • (Ordinal: 221, Address: 0x70f79d)
  • (Ordinal: 222, Address: 0x70f7f5)
  • (Ordinal: 223, Address: 0x70f85a)
  • (Ordinal: 224, Address: 0x70f737)
  • (Ordinal: 225, Address: 0x70f840)
  • RealShellExecuteW (Ordinal: 226, Address: 0x1ff4d0)
  • (Ordinal: 227, Address: 0x70f72a)
  • SHHelpShortcuts_RunDLL (Ordinal: 228, Address: 0x21ff30)
  • SHHelpShortcuts_RunDLLA (Ordinal: 229, Address: 0x21ff30)
  • (Ordinal: 230, Address: 0x70f88e)
  • SHSetFolderPathA (Ordinal: 231, Address: 0x25d450)
  • SHSetFolderPathW (Ordinal: 232, Address: 0x25d470)
  • (Ordinal: 233, Address: 0x70fb89)
  • (Ordinal: 234, Address: 0x70fcdd)
  • (Ordinal: 235, Address: 0x70fc55)
  • (Ordinal: 236, Address: 0x200f30)
  • (Ordinal: 237, Address: 0x200eb0)
  • SHHelpShortcuts_RunDLLW (Ordinal: 238, Address: 0x21ffe0)
  • PathIsSlowW (Ordinal: 239, Address: 0x1fff90)
  • PathIsSlowA (Ordinal: 240, Address: 0x1fff70)
  • (Ordinal: 241, Address: 0x200bb0)
  • (Ordinal: 242, Address: 0x70fb61)
  • (Ordinal: 243, Address: 0x70fccf)
  • (Ordinal: 244, Address: 0x200e90)
  • SHTestTokenMembership (Ordinal: 245, Address: 0x200f10)
  • (Ordinal: 246, Address: 0x70fbcd)
  • (Ordinal: 247, Address: 0x70fb37)
  • (Ordinal: 248, Address: 0x70fb96)
  • (Ordinal: 249, Address: 0x70f470)
  • (Ordinal: 250, Address: 0x70f4e6)
  • (Ordinal: 251, Address: 0x70f4b4)
  • (Ordinal: 252, Address: 0x70f420)
  • (Ordinal: 253, Address: 0x70fbe8)
  • (Ordinal: 254, Address: 0x250cb0)
  • AppCompat_RunDLLW (Ordinal: 255, Address: 0x2261b0)
  • SHCreateShellFolderView (Ordinal: 256, Address: 0xaa070)
  • (Ordinal: 257, Address: 0x1950a0)
  • (Ordinal: 258, Address: 0x28dc60)
  • (Ordinal: 259, Address: 0x187850)
  • (Ordinal: 260, Address: 0x1ff670)
  • (Ordinal: 261, Address: 0x2dd660)
  • (Ordinal: 262, Address: 0x2dd9b0)
  • AssocCreateForClasses (Ordinal: 263, Address: 0x1f84b0)
  • (Ordinal: 264, Address: 0x1ff690)
  • (Ordinal: 265, Address: 0x200fd0)
  • (Ordinal: 266, Address: 0x200ff0)
  • AssocElemCreateForKey (Ordinal: 267, Address: 0x1ff590)
  • AssocGetDetailsOfPropKey (Ordinal: 268, Address: 0x1f8550)
  • CallFileCopyHook (Ordinal: 269, Address: 0x234a50)
  • (Ordinal: 270, Address: 0x200dd0)
  • (Ordinal: 271, Address: 0x2e48c0)
  • CheckEscapesW (Ordinal: 272, Address: 0x1ff5f0)
  • CommandLineToArgvW (Ordinal: 273, Address: 0x159b60)
  • Control_RunDLL (Ordinal: 274, Address: 0x2432b0)
  • Control_RunDLLA (Ordinal: 275, Address: 0x2432b0)
  • Control_RunDLLAsUserW (Ordinal: 276, Address: 0x243330)
  • Control_RunDLLW (Ordinal: 277, Address: 0x243390)
  • DllCanUnloadNow (Ordinal: 278, Address: 0x119560)
  • DllGetActivationFactory (Ordinal: 279, Address: 0x251f70)
  • DllGetClassObject (Ordinal: 280, Address: 0x4d950)
  • DllGetVersion (Ordinal: 281, Address: 0x25c530)
  • DllInstall (Ordinal: 282, Address: 0x25c600)
  • DllRegisterServer (Ordinal: 283, Address: 0x1950a0)
  • DllUnregisterServer (Ordinal: 284, Address: 0x1950a0)
  • DoEnvironmentSubstA (Ordinal: 285, Address: 0x1ff770)
  • DoEnvironmentSubstW (Ordinal: 286, Address: 0x1ff790)
  • DragAcceptFiles (Ordinal: 287, Address: 0x1ff7b0)
  • DragFinish (Ordinal: 288, Address: 0x1ff7d0)
  • DragQueryFile (Ordinal: 289, Address: 0x1ff7f0)
  • DragQueryFileA (Ordinal: 290, Address: 0x1ff7f0)
  • DragQueryFileAorW (Ordinal: 291, Address: 0x1ff810)
  • DragQueryFileW (Ordinal: 292, Address: 0x1ff830)
  • DragQueryPoint (Ordinal: 293, Address: 0x1ff870)
  • DuplicateIcon (Ordinal: 294, Address: 0x1ff890)
  • ExtractAssociatedIconA (Ordinal: 295, Address: 0x1ff8b0)
  • ExtractAssociatedIconExA (Ordinal: 296, Address: 0x1ff8d0)
  • ExtractAssociatedIconExW (Ordinal: 297, Address: 0x1ff8f0)
  • ExtractAssociatedIconW (Ordinal: 298, Address: 0x1ff910)
  • ExtractIconA (Ordinal: 299, Address: 0x1ff930)
  • ExtractIconEx (Ordinal: 300, Address: 0x1ff950)
  • ExtractIconExA (Ordinal: 301, Address: 0x1ff950)
  • ExtractIconExW (Ordinal: 302, Address: 0x1ff970)
  • ExtractIconW (Ordinal: 303, Address: 0x1ff990)
  • FindExecutableA (Ordinal: 304, Address: 0x1ff9d0)
  • FindExecutableW (Ordinal: 305, Address: 0x1ff9f0)
  • FreeIconList (Ordinal: 306, Address: 0x1ffa10)
  • GetCurrentProcessExplicitAppUserModelID (Ordinal: 307, Address: 0x1a4160)
  • InitNetworkAddressControl (Ordinal: 308, Address: 0x19b770)
  • InternalExtractIconListA (Ordinal: 309, Address: 0x1ffcb0)
  • InternalExtractIconListW (Ordinal: 310, Address: 0x1ffcd0)
  • LaunchMSHelp_RunDLLW (Ordinal: 311, Address: 0x208b60)
  • Options_RunDLL (Ordinal: 312, Address: 0x4aa720)
  • Options_RunDLLA (Ordinal: 313, Address: 0x4aa720)
  • Options_RunDLLW (Ordinal: 314, Address: 0x4aa780)
  • RegenerateUserEnvironment (Ordinal: 315, Address: 0x205a90)
  • RunAsNewUser_RunDLLW (Ordinal: 316, Address: 0x20a0c0)
  • SHAddDefaultPropertiesByExt (Ordinal: 317, Address: 0x2000d0)
  • SHAddToRecentDocs (Ordinal: 318, Address: 0x1a4110)
  • SHAppBarMessage (Ordinal: 319, Address: 0x47150)
  • SHAssocEnumHandlers (Ordinal: 320, Address: 0x1f8570)
  • SHAssocEnumHandlersForProtocolByApplication (Ordinal: 321, Address: 0x1f8610)
  • SHBindToFolderIDListParent (Ordinal: 322, Address: 0x200130)
  • SHBindToFolderIDListParentEx (Ordinal: 323, Address: 0x200150)
  • SHBindToObject (Ordinal: 324, Address: 0x200170)
  • SHBindToParent (Ordinal: 325, Address: 0x200190)
  • SHBrowseForFolder (Ordinal: 326, Address: 0x29bca0)
  • SHBrowseForFolderA (Ordinal: 327, Address: 0x29bca0)
  • SHBrowseForFolderW (Ordinal: 328, Address: 0x29bfe0)
  • SHChangeNotify (Ordinal: 329, Address: 0x158690)
  • SHChangeNotifyRegisterThread (Ordinal: 330, Address: 0x1a1290)
  • SHChangeNotifySuspendResume (Ordinal: 331, Address: 0x296df0)
  • SHCoCreateInstanceWorker (Ordinal: 332, Address: 0x71000a)
  • SHCreateAssociationRegistration (Ordinal: 333, Address: 0x200210)
  • SHCreateCategoryEnum (Ordinal: 334, Address: 0x29e470)
  • SHCreateDataObject (Ordinal: 335, Address: 0x200230)
  • SHCreateDefaultContextMenu (Ordinal: 336, Address: 0x9edc0)
  • SHCreateDefaultExtractIcon (Ordinal: 337, Address: 0x200250)
  • SHCreateDefaultPropertiesOp (Ordinal: 338, Address: 0x200270)
  • SHCreateDirectoryExA (Ordinal: 339, Address: 0x2002d0)
  • SHCreateDirectoryExW (Ordinal: 340, Address: 0x2002f0)
  • SHCreateDrvExtIcon (Ordinal: 341, Address: 0x124020)
  • SHCreateItemFromIDList (Ordinal: 342, Address: 0x200370)
  • SHCreateItemFromParsingName (Ordinal: 343, Address: 0x200390)
  • SHCreateItemFromRelativeName (Ordinal: 344, Address: 0x2003b0)
  • SHCreateItemInKnownFolder (Ordinal: 345, Address: 0x2003d0)
  • SHCreateItemWithParent (Ordinal: 346, Address: 0x2003f0)
  • SHCreateLocalServerRunDll (Ordinal: 347, Address: 0x1951d0)
  • SHCreateProcessAsUserW (Ordinal: 348, Address: 0x200470)
  • SHCreateQueryCancelAutoPlayMoniker (Ordinal: 349, Address: 0x2d7270)
  • SHCreateShellItem (Ordinal: 350, Address: 0x200510)
  • SHCreateShellItemArray (Ordinal: 351, Address: 0x190bf0)
  • SHCreateShellItemArrayFromDataObject (Ordinal: 352, Address: 0x193d80)
  • SHCreateShellItemArrayFromIDLists (Ordinal: 353, Address: 0x200530)
  • SHCreateShellItemArrayFromShellItem (Ordinal: 354, Address: 0x200550)
  • SHELL32_AddToBackIconTable (Ordinal: 355, Address: 0x216c0)
  • SHELL32_AddToFrontIconTable (Ordinal: 356, Address: 0x19cb80)
  • SHELL32_AreAllItemsAvailable (Ordinal: 357, Address: 0x185aa0)
  • SHELL32_CCommonPlacesFolder_CreateInstance (Ordinal: 358, Address: 0x2d92d0)
  • SHELL32_CDBurn_CloseSession (Ordinal: 359, Address: 0x2d92e0)
  • SHELL32_CDBurn_DriveSupportedForDataBurn (Ordinal: 360, Address: 0x2d92f0)
  • SHELL32_CDBurn_Erase (Ordinal: 361, Address: 0x2d9300)
  • SHELL32_CDBurn_GetCDInfo (Ordinal: 362, Address: 0x1a41d0)
  • SHELL32_CDBurn_GetLiveFSDiscInfo (Ordinal: 363, Address: 0x1e1480)
  • SHELL32_CDBurn_GetStagingPathOrNormalPath (Ordinal: 364, Address: 0x19d2e0)
  • SHELL32_CDBurn_GetTaskInfo (Ordinal: 365, Address: 0x2d9310)
  • SHELL32_CDBurn_IsBlankDisc (Ordinal: 366, Address: 0x2d9320)
  • SHELL32_CDBurn_IsBlankDisc2 (Ordinal: 367, Address: 0x2d9330)
  • SHELL32_CDBurn_IsLiveFS (Ordinal: 368, Address: 0x2d9390)
  • SHELL32_CDBurn_OnDeviceChange (Ordinal: 369, Address: 0x2d93a0)
  • SHELL32_CDBurn_OnEject (Ordinal: 370, Address: 0x2d93b0)
  • SHELL32_CDBurn_OnMediaChange (Ordinal: 371, Address: 0x2d9430)
  • SHELL32_CDefFolderMenu_Create2 (Ordinal: 372, Address: 0x2d9440)
  • SHELL32_CDefFolderMenu_Create2Ex (Ordinal: 373, Address: 0x17b2e0)
  • SHELL32_CDefFolderMenu_MergeMenu (Ordinal: 374, Address: 0x1e1550)
  • SHELL32_CDrivesContextMenu_Create (Ordinal: 375, Address: 0x2d94a0)
  • SHELL32_CDrivesDropTarget_Create (Ordinal: 376, Address: 0x1a0370)
  • SHELL32_CDrives_CreateSFVCB (Ordinal: 377, Address: 0x2d94b0)
  • SHELL32_CFSDropTarget_CreateInstance (Ordinal: 378, Address: 0x1934b0)
  • SHELL32_CFSFolderCallback_Create (Ordinal: 379, Address: 0x1a1190)
  • SHELL32_CFillPropertiesTask_CreateInstance (Ordinal: 380, Address: 0x264ce0)
  • SHELL32_CLibraryDropTarget_CreateInstance (Ordinal: 381, Address: 0x2d9510)
  • SHELL32_CLocationContextMenu_Create (Ordinal: 382, Address: 0x1f19a0)
  • SHELL32_CLocationFolderUI_CreateInstance (Ordinal: 383, Address: 0x2d9520)
  • SHELL32_CMountPoint_DoAutorun (Ordinal: 384, Address: 0x2d9530)
  • SHELL32_CMountPoint_DoAutorunPrompt (Ordinal: 385, Address: 0x2d9540)
  • SHELL32_CMountPoint_IsAutoRunDriveAndEnabledByPolicy (Ordinal: 386, Address: 0x1a40c0)
  • SHELL32_CMountPoint_ProcessAutoRunFile (Ordinal: 387, Address: 0x2d9570)
  • SHELL32_CMountPoint_WantAutorunUI (Ordinal: 388, Address: 0x2d9580)
  • SHELL32_CMountPoint_WantAutorunUIGetReady (Ordinal: 389, Address: 0x2d9590)
  • SHELL32_CNetFolderUI_CreateInstance (Ordinal: 390, Address: 0x90c00)
  • SHELL32_CPL_CategoryIdArrayFromVariant (Ordinal: 391, Address: 0x1e1470)
  • SHELL32_CPL_IsLegacyCanonicalNameListedUnderKey (Ordinal: 392, Address: 0x2d95f0)
  • SHELL32_CPL_ModifyWowDisplayName (Ordinal: 393, Address: 0x2d9610)
  • SHELL32_CRecentDocsContextMenu_CreateInstance (Ordinal: 394, Address: 0x2d9620)
  • SHELL32_CTransferConfirmation_CreateInstance (Ordinal: 395, Address: 0x2d9630)
  • SHELL32_CallFileCopyHooks (Ordinal: 396, Address: 0x13d9e0)
  • SHELL32_CanDisplayWin8CopyDialog (Ordinal: 397, Address: 0x16a7f0)
  • SHELL32_CloseAutoplayPrompt (Ordinal: 398, Address: 0x2d9640)
  • SHELL32_CommandLineFromMsiDescriptor (Ordinal: 399, Address: 0x2d96f0)
  • SHELL32_CopySecondaryTiles (Ordinal: 400, Address: 0x1950a0)
  • SHELL32_CreateConfirmationInterrupt (Ordinal: 401, Address: 0x2d9710)
  • SHELL32_CreateConflictInterrupt (Ordinal: 402, Address: 0x2d9720)
  • SHELL32_CreateDefaultOperationDataProvider (Ordinal: 403, Address: 0x2d9730)
  • SHELL32_CreateFileFolderContextMenu (Ordinal: 404, Address: 0x2d9810)
  • SHELL32_CreateLinkInfoW (Ordinal: 405, Address: 0x172ff0)
  • SHELL32_CreateQosRecorder (Ordinal: 406, Address: 0x19afc0)
  • SHELL32_CreateSharePointView (Ordinal: 407, Address: 0x2d9820)
  • SHELL32_Create_IEnumUICommand (Ordinal: 408, Address: 0x2d9830)
  • SHELL32_DestroyLinkInfo (Ordinal: 409, Address: 0x17d6c0)
  • SHELL32_EncryptDirectory (Ordinal: 410, Address: 0x2d9840)
  • SHELL32_EncryptedFileKeyInfo (Ordinal: 411, Address: 0x2d9850)
  • SHELL32_EnumCommonTasks (Ordinal: 412, Address: 0x2d9870)
  • SHELL32_FreeEncryptedFileKeyInfo (Ordinal: 413, Address: 0x2d9880)
  • SHELL32_GenerateAppID (Ordinal: 414, Address: 0x2d98a0)
  • SHELL32_GetAppIDRoot (Ordinal: 415, Address: 0x2d98b0)
  • SHELL32_GetCommandProviderForFolderType (Ordinal: 416, Address: 0x2d98c0)
  • SHELL32_GetDPIAdjustedLogicalSize (Ordinal: 417, Address: 0x1a4100)
  • SHELL32_GetDiskCleanupPath (Ordinal: 418, Address: 0x2d98e0)
  • SHELL32_GetFileNameFromBrowse (Ordinal: 419, Address: 0x2d98f0)
  • SHELL32_GetIconOverlayManager (Ordinal: 420, Address: 0xcbf90)
  • SHELL32_GetLinkInfoData (Ordinal: 421, Address: 0x2d9900)
  • SHELL32_GetRatingBucket (Ordinal: 422, Address: 0x2d9920)
  • SHELL32_GetSqmableFileName (Ordinal: 423, Address: 0x2d9950)
  • SHELL32_GetThumbnailAdornerFromFactory (Ordinal: 424, Address: 0x2d9960)
  • SHELL32_GetThumbnailAdornerFromFactory2 (Ordinal: 425, Address: 0xbf470)
  • SHELL32_HandleUnrecognizedFileSystem (Ordinal: 426, Address: 0x2d9970)
  • SHELL32_IconCacheCreate (Ordinal: 427, Address: 0x2d9980)
  • SHELL32_IconCacheDestroy (Ordinal: 428, Address: 0x1958c0)
  • SHELL32_IconCacheHandleAssociationChanged (Ordinal: 429, Address: 0x1a41c0)
  • SHELL32_IconCacheRestore (Ordinal: 430, Address: 0x2d9990)
  • SHELL32_IconCache_AboutToExtractIcons (Ordinal: 431, Address: 0x190820)
  • SHELL32_IconCache_DoneExtractingIcons (Ordinal: 432, Address: 0x186030)
  • SHELL32_IconCache_ExpandEnvAndSearchPath (Ordinal: 433, Address: 0x123210)
  • SHELL32_IconCache_RememberRecentlyExtractedIconsW (Ordinal: 434, Address: 0xfdd20)
  • SHELL32_IconOverlayManagerInit (Ordinal: 435, Address: 0x163d00)
  • SHELL32_IsGetKeyboardLayoutPresent (Ordinal: 436, Address: 0x187850)
  • SHELL32_IsSystemUpgradeInProgress (Ordinal: 437, Address: 0x132640)
  • SHELL32_IsValidLinkInfo (Ordinal: 438, Address: 0x1195d0)
  • SHELL32_LegacyEnumSpecialTasksByType (Ordinal: 439, Address: 0x2d99a0)
  • SHELL32_LegacyEnumTasks (Ordinal: 440, Address: 0x2d99b0)
  • SHELL32_LookupBackIconIndex (Ordinal: 441, Address: 0xe3ec0)
  • SHELL32_LookupFrontIconIndex (Ordinal: 442, Address: 0x217f0)
  • SHELL32_NormalizeRating (Ordinal: 443, Address: 0x2d99c0)
  • SHELL32_NotifyLinkTrackingServiceOfMove (Ordinal: 444, Address: 0x1a2ad0)
  • SHELL32_PifMgr_CloseProperties (Ordinal: 445, Address: 0x204620)
  • SHELL32_PifMgr_GetProperties (Ordinal: 446, Address: 0x1950a0)
  • SHELL32_PifMgr_OpenProperties (Ordinal: 447, Address: 0x1950a0)
  • SHELL32_PifMgr_SetProperties (Ordinal: 448, Address: 0x1950a0)
  • SHELL32_Printers_CreateBindInfo (Ordinal: 449, Address: 0x2d9a00)
  • SHELL32_Printjob_GetPidl (Ordinal: 450, Address: 0x2d9a10)
  • SHELL32_PurgeSystemIcon (Ordinal: 451, Address: 0x2d9a20)
  • SHELL32_RefreshOverlayImages (Ordinal: 452, Address: 0x2d9a30)
  • SHELL32_RegenerateUserEnvironment (Ordinal: 453, Address: 0x2d9a40)
  • SHELL32_ResolveLinkInfoW (Ordinal: 454, Address: 0x1a3de0)
  • SHELL32_SHAddSparseIcon (Ordinal: 455, Address: 0x19ab30)
  • SHELL32_SHCreateByValueOperationInterrupt (Ordinal: 456, Address: 0x2d9a50)
  • SHELL32_SHCreateDefaultContextMenu (Ordinal: 457, Address: 0x190640)
  • SHELL32_SHCreateLocalServer (Ordinal: 458, Address: 0x2d9a60)
  • SHELL32_SHCreateShellFolderView (Ordinal: 459, Address: 0x1a40b0)
  • SHELL32_SHDuplicateEncryptionInfoFile (Ordinal: 460, Address: 0x2d9a70)
  • SHELL32_SHEncryptFile (Ordinal: 461, Address: 0x2d9a90)
  • SHELL32_SHFormatDriveAsync (Ordinal: 462, Address: 0x2d9aa0)
  • SHELL32_SHGetThreadUndoManager (Ordinal: 463, Address: 0x1f1740)
  • SHELL32_SHGetUserNameW (Ordinal: 464, Address: 0x2d9ab0)
  • SHELL32_SHIsVirtualDevice (Ordinal: 465, Address: 0x2d9ad0)
  • SHELL32_SHLaunchPropSheet (Ordinal: 466, Address: 0x2d9b40)
  • SHELL32_SHLogILFromFSIL (Ordinal: 467, Address: 0x2d9b50)
  • SHELL32_SHOpenWithDialog (Ordinal: 468, Address: 0x2d9b70)
  • SHELL32_SHStartNetConnectionDialogW (Ordinal: 469, Address: 0x2d9b80)
  • SHELL32_SHUICommandFromGUID (Ordinal: 470, Address: 0x277ed0)
  • SHELL32_SendToMenu_InvokeTargetedCommand (Ordinal: 471, Address: 0x4ac4d0)
  • SHELL32_SendToMenu_VerifyTargetedCommand (Ordinal: 472, Address: 0xea640)
  • SHELL32_ShowHideIconOnlyOnDesktop (Ordinal: 473, Address: 0x2d9ba0)
  • SHELL32_SimpleRatingToFilterCondition (Ordinal: 474, Address: 0x2d9bb0)
  • SHELL32_StampIconForFile (Ordinal: 475, Address: 0x1f22d0)
  • SHELL32_SuspendUndo (Ordinal: 476, Address: 0x16c300)
  • SHELL32_TryVirtualDiscImageDriveEject (Ordinal: 477, Address: 0x2d9bc0)
  • SHELL32_VerifySaferTrust (Ordinal: 478, Address: 0x197140)
  • SHEmptyRecycleBinA (Ordinal: 479, Address: 0x2da740)
  • SHEmptyRecycleBinW (Ordinal: 480, Address: 0x2da7e0)
  • SHEnableServiceObject (Ordinal: 481, Address: 0x175c90)
  • SHEnumerateUnreadMailAccountsW (Ordinal: 482, Address: 0x2005f0)
  • SHEvaluateSystemCommandTemplate (Ordinal: 483, Address: 0x200610)
  • SHExecuteErrorMessageBox (Ordinal: 484, Address: 0x2dbef0)
  • SHExtractIconsW (Ordinal: 485, Address: 0x200670)
  • SHFileOperation (Ordinal: 486, Address: 0x220460)
  • SHFileOperationA (Ordinal: 487, Address: 0x220460)
  • SHFileOperationW (Ordinal: 488, Address: 0x1e1530)
  • SHFormatDrive (Ordinal: 489, Address: 0x226620)
  • SHFreeNameMappings (Ordinal: 490, Address: 0x220480)
  • SHGetDataFromIDListA (Ordinal: 491, Address: 0x200790)
  • SHGetDataFromIDListW (Ordinal: 492, Address: 0x2007b0)
  • SHGetDesktopFolder (Ordinal: 493, Address: 0x1840a0)
  • SHGetDiskFreeSpaceA (Ordinal: 494, Address: 0x2007d0)
  • SHGetDiskFreeSpaceExA (Ordinal: 495, Address: 0x2007d0)
  • SHGetDiskFreeSpaceExW (Ordinal: 496, Address: 0x2007f0)
  • SHGetDriveMedia (Ordinal: 497, Address: 0x2e2980)
  • SHGetFileInfo (Ordinal: 498, Address: 0x200810)
  • SHGetFileInfoA (Ordinal: 499, Address: 0x200810)
  • SHGetFileInfoW (Ordinal: 500, Address: 0x183660)
  • SHGetFolderLocation (Ordinal: 501, Address: 0x189350)
  • SHGetFolderPathA (Ordinal: 502, Address: 0x18ee30)
  • SHGetFolderPathAndSubDirA (Ordinal: 503, Address: 0x25d370)
  • SHGetFolderPathAndSubDirW (Ordinal: 504, Address: 0x1f2a30)
  • SHGetFolderPathEx (Ordinal: 505, Address: 0x182d40)
  • SHGetFolderPathW (Ordinal: 506, Address: 0x1516a0)
  • SHGetIDListFromObject (Ordinal: 507, Address: 0x200870)
  • SHGetIconOverlayIndexA (Ordinal: 508, Address: 0x28d820)
  • SHGetIconOverlayIndexW (Ordinal: 509, Address: 0xcbe60)
  • SHGetInstanceExplorer (Ordinal: 510, Address: 0x1f2a10)
  • SHGetItemFromDataObject (Ordinal: 511, Address: 0x2008b0)
  • SHGetItemFromObject (Ordinal: 512, Address: 0x2008d0)
  • SHGetKnownFolderIDList (Ordinal: 513, Address: 0x196c90)
  • SHGetKnownFolderItem (Ordinal: 514, Address: 0x1a81c0)
  • SHGetKnownFolderPath (Ordinal: 515, Address: 0x13b5e0)
  • SHGetLocalizedName (Ordinal: 516, Address: 0x2008f0)
  • SHGetMalloc (Ordinal: 517, Address: 0x200930)
  • SHGetNameFromIDList (Ordinal: 518, Address: 0x200950)
  • SHGetNewLinkInfo (Ordinal: 519, Address: 0x200990)
  • (Ordinal: 520, Address: 0x70f9c5)
  • (Ordinal: 521, Address: 0x70fc1f)
  • (Ordinal: 522, Address: 0x70fcea)
  • (Ordinal: 523, Address: 0x70fb1d)
  • RealDriveType (Ordinal: 524, Address: 0x1f2700)
  • (Ordinal: 525, Address: 0x70f6cf)
  • SHFlushSFCache (Ordinal: 526, Address: 0x2006d0)
  • SHGetPathFromIDList (Ordinal: 527, Address: 0x2009f0)
  • SHGetPathFromIDListA (Ordinal: 528, Address: 0x2009f0)
  • SHGetPathFromIDListEx (Ordinal: 529, Address: 0x200a30)
  • SHGetPathFromIDListW (Ordinal: 530, Address: 0x200a50)
  • SHGetPropertyStoreForWindow (Ordinal: 531, Address: 0xa3140)
  • SHGetPropertyStoreFromIDList (Ordinal: 532, Address: 0x200a70)
  • SHGetPropertyStoreFromParsingName (Ordinal: 533, Address: 0x200a90)
  • SHGetSettings (Ordinal: 534, Address: 0x200b10)
  • SHGetSpecialFolderLocation (Ordinal: 535, Address: 0x191730)
  • SHGetSpecialFolderPathA (Ordinal: 536, Address: 0x25d390)
  • SHGetSpecialFolderPathW (Ordinal: 537, Address: 0x158e70)
  • SHGetStockIconInfo (Ordinal: 538, Address: 0x200b30)
  • SHGetTemporaryPropertyForItem (Ordinal: 539, Address: 0x200b50)
  • SHGetUnreadMailCountW (Ordinal: 540, Address: 0x200b90)
  • SHInvokePrinterCommandA (Ordinal: 541, Address: 0x21fc40)
  • SHInvokePrinterCommandW (Ordinal: 542, Address: 0x21fd30)
  • SHIsFileAvailableOffline (Ordinal: 543, Address: 0x200c10)
  • SHLoadInProc (Ordinal: 544, Address: 0x1f19a0)
  • SHLoadNonloadedIconOverlayIdentifiers (Ordinal: 545, Address: 0x200c50)
  • SHOpenFolderAndSelectItems (Ordinal: 546, Address: 0x25d3f0)
  • SHOpenOrGetFolderView (Ordinal: 547, Address: 0x2e4250)
  • SHOpenWithDialog (Ordinal: 548, Address: 0x20e340)
  • SHParseDisplayName (Ordinal: 549, Address: 0x200d30)
  • SHPathPrepareForWriteA (Ordinal: 550, Address: 0x2204c0)
  • SHPathPrepareForWriteW (Ordinal: 551, Address: 0x2204e0)
  • SHQueryRecycleBinA (Ordinal: 552, Address: 0x200d50)
  • SHQueryRecycleBinW (Ordinal: 553, Address: 0x200d70)
  • SHQueryUserNotificationState (Ordinal: 554, Address: 0x107f70)
  • SHRemoveLocalizedName (Ordinal: 555, Address: 0x200db0)
  • SHResolveLibrary (Ordinal: 556, Address: 0x25d430)
  • SHSetDefaultProperties (Ordinal: 557, Address: 0x200e10)
  • SHSetKnownFolderPath (Ordinal: 558, Address: 0x25d4b0)
  • SHSetLocalizedName (Ordinal: 559, Address: 0x200e30)
  • SHSetTemporaryPropertyForItem (Ordinal: 560, Address: 0x200e50)
  • SHSetUnreadMailCountW (Ordinal: 561, Address: 0x200e70)
  • SHShowManageLibraryUI (Ordinal: 562, Address: 0x4fc760)
  • SHUpdateRecycleBinIcon (Ordinal: 563, Address: 0x200f50)
  • SetCurrentProcessExplicitAppUserModelID (Ordinal: 564, Address: 0x1e1510)
  • SheChangeDirA (Ordinal: 565, Address: 0x204630)
  • SheChangeDirExW (Ordinal: 566, Address: 0x2046b0)
  • SheGetDirA (Ordinal: 567, Address: 0x204c30)
  • SheSetCurDrive (Ordinal: 568, Address: 0x204e90)
  • ShellAboutA (Ordinal: 569, Address: 0x2f5220)
  • ShellAboutW (Ordinal: 570, Address: 0x2f5350)
  • ShellExec_RunDLL (Ordinal: 571, Address: 0x201010)
  • ShellExec_RunDLLA (Ordinal: 572, Address: 0x201010)
  • ShellExec_RunDLLW (Ordinal: 573, Address: 0x201030)
  • ShellExecuteA (Ordinal: 574, Address: 0x201050)
  • ShellExecuteEx (Ordinal: 575, Address: 0x201070)
  • ShellExecuteExA (Ordinal: 576, Address: 0x201070)
  • ShellExecuteExW (Ordinal: 577, Address: 0x201090)
  • ShellExecuteW (Ordinal: 578, Address: 0x2010b0)
  • ShellHookProc (Ordinal: 579, Address: 0x1950a0)
  • Shell_GetCachedImageIndexA (Ordinal: 580, Address: 0x2010f0)
  • Shell_GetCachedImageIndexW (Ordinal: 581, Address: 0x201110)
  • Shell_NotifyIcon (Ordinal: 582, Address: 0x15b130)
  • Shell_NotifyIconA (Ordinal: 583, Address: 0x15b130)
  • Shell_NotifyIconGetRect (Ordinal: 584, Address: 0x1af490)
  • Shell_NotifyIconW (Ordinal: 585, Address: 0x1c060)
  • StateRepoNewMenuCache_EnsureCacheAsync (Ordinal: 586, Address: 0x880f0)
  • StateRepoNewMenuCache_RebuildCacheAsync (Ordinal: 587, Address: 0x19b000)
  • StrChrA (Ordinal: 588, Address: 0x1f6080)
  • StrChrIA (Ordinal: 589, Address: 0x1f6090)
  • StrChrIW (Ordinal: 590, Address: 0x1f60a0)
  • StrChrW (Ordinal: 591, Address: 0x1f60b0)
  • StrCmpNA (Ordinal: 592, Address: 0x1f60c0)
  • StrCmpNIA (Ordinal: 593, Address: 0x1f60d0)
  • StrCmpNIW (Ordinal: 594, Address: 0x1f60e0)
  • StrCmpNW (Ordinal: 595, Address: 0x1f60f0)
  • StrNCmpA (Ordinal: 596, Address: 0x202c20)
  • StrNCmpIA (Ordinal: 597, Address: 0x202cf0)
  • StrNCmpIW (Ordinal: 598, Address: 0x202dc0)
  • StrNCmpW (Ordinal: 599, Address: 0x202e90)
  • StrRChrA (Ordinal: 600, Address: 0x1f6100)
  • StrRChrIA (Ordinal: 601, Address: 0x1f6110)
  • StrRChrIW (Ordinal: 602, Address: 0x1f6120)
  • StrRChrW (Ordinal: 603, Address: 0x1f6130)
  • StrRStrA (Ordinal: 604, Address: 0x202f80)
  • StrRStrIA (Ordinal: 605, Address: 0x1f6140)
  • StrRStrIW (Ordinal: 606, Address: 0x1f6150)
  • StrRStrW (Ordinal: 607, Address: 0x203060)
  • StrStrA (Ordinal: 608, Address: 0x1f6160)
  • StrStrIA (Ordinal: 609, Address: 0x1f6170)
  • StrStrIW (Ordinal: 610, Address: 0x1f6180)
  • StrStrW (Ordinal: 611, Address: 0x1f6190)
  • UsersLibrariesFolderUI_CreateInstance (Ordinal: 612, Address: 0xcfaa0)
  • WOWShellExecute (Ordinal: 613, Address: 0x2011b0)
  • WaitForExplorerRestartW (Ordinal: 614, Address: 0x25c940)
  • (Ordinal: 640, Address: 0x70f94d)
  • (Ordinal: 641, Address: 0x70f940)
  • (Ordinal: 643, Address: 0x70f9d2)
  • SHChangeNotification_Lock (Ordinal: 644, Address: 0x163910)
  • SHChangeNotification_Unlock (Ordinal: 645, Address: 0x187490)
  • (Ordinal: 646, Address: 0x70f9ec)
  • (Ordinal: 648, Address: 0x70fcf7)
  • (Ordinal: 650, Address: 0x70f3dd)
  • (Ordinal: 651, Address: 0x1ffdf0)
  • WriteCabinetState (Ordinal: 652, Address: 0x201210)
  • (Ordinal: 653, Address: 0x70f991)
  • ReadCabinetState (Ordinal: 654, Address: 0x2000b0)
  • (Ordinal: 660, Address: 0x1ff9b0)
  • IsUserAnAdmin (Ordinal: 680, Address: 0x25d320)
  • (Ordinal: 681, Address: 0x70fb45)
  • StgMakeUniqueName (Ordinal: 682, Address: 0x201190)
  • (Ordinal: 683, Address: 0x2e48e0)
  • (Ordinal: 684, Address: 0x2e48e0)
  • SHPropStgCreate (Ordinal: 685, Address: 0x16e7b0)
  • SHPropStgReadMultiple (Ordinal: 688, Address: 0x1a3b80)
  • SHPropStgWriteMultiple (Ordinal: 689, Address: 0x25d410)
  • (Ordinal: 690, Address: 0x25d3b0)
  • (Ordinal: 691, Address: 0x70fae6)
  • (Ordinal: 700, Address: 0x70f5f6)
  • CDefFolderMenu_Create2 (Ordinal: 701, Address: 0x234070)
  • (Ordinal: 702, Address: 0x19c30)
  • (Ordinal: 703, Address: 0x70f063)
  • (Ordinal: 704, Address: 0x70f070)
  • (Ordinal: 707, Address: 0x70fc63)
  • (Ordinal: 708, Address: 0x70fb6f)
  • SHGetSetFolderCustomSettings (Ordinal: 709, Address: 0x200ad0)
  • (Ordinal: 711, Address: 0x1ff610)
  • (Ordinal: 712, Address: 0x70f9f9)
  • (Ordinal: 713, Address: 0x1fffb0)
  • (Ordinal: 714, Address: 0x1fffd0)
  • (Ordinal: 715, Address: 0x70fa5a)
  • SHMultiFileProperties (Ordinal: 716, Address: 0x2e3be0)
  • (Ordinal: 719, Address: 0x70fc7d)
  • (Ordinal: 720, Address: 0x70f926)
  • (Ordinal: 721, Address: 0x70f933)
  • (Ordinal: 722, Address: 0x70fa3e)
  • (Ordinal: 723, Address: 0x2004f0)
  • (Ordinal: 724, Address: 0x70fbf6)
  • (Ordinal: 725, Address: 0x70f89c)
  • (Ordinal: 726, Address: 0x70f63b)
  • SHGetImageList (Ordinal: 727, Address: 0x200890)
  • RestartDialogEx (Ordinal: 730, Address: 0x250d60)
  • (Ordinal: 731, Address: 0x70fc99)
  • (Ordinal: 732, Address: 0x70fc8b)
  • (Ordinal: 733, Address: 0x240d60)
  • (Ordinal: 740, Address: 0x200310)
  • SHCreateFileExtractIconW (Ordinal: 743, Address: 0x200330)
  • (Ordinal: 744, Address: 0x24e610)
  • (Ordinal: 745, Address: 0x70f680)
  • SHLimitInputEdit (Ordinal: 747, Address: 0x2e31d0)
  • (Ordinal: 748, Address: 0x2e3170)
  • (Ordinal: 749, Address: 0x70fb7c)
  • SHGetAttributesFromDataObject (Ordinal: 750, Address: 0x200730)
  • (Ordinal: 751, Address: 0x200ef0)
  • (Ordinal: 752, Address: 0x200750)
  • (Ordinal: 753, Address: 0x195d60)
  • (Ordinal: 754, Address: 0x1e95e0)
  • (Ordinal: 755, Address: 0x1fff10)
  • (Ordinal: 756, Address: 0x70f6c2)
  • (Ordinal: 757, Address: 0x1e710)
  • (Ordinal: 758, Address: 0xa1f90)
  • (Ordinal: 759, Address: 0xeefb0)
  • (Ordinal: 760, Address: 0x220440)
  • (Ordinal: 761, Address: 0x296dd0)
  • (Ordinal: 762, Address: 0x70f672)
  • (Ordinal: 763, Address: 0x24e640)
  • (Ordinal: 764, Address: 0x1ff550)
  • (Ordinal: 765, Address: 0x1f8630)
  • (Ordinal: 766, Address: 0x70fa06)
  • (Ordinal: 767, Address: 0x1ff570)
  • (Ordinal: 777, Address: 0x200710)
  • (Ordinal: 778, Address: 0x1ff5b0)
  • (Ordinal: 779, Address: 0x1ffd10)
  • (Ordinal: 781, Address: 0x200110)
  • (Ordinal: 782, Address: 0x2852a0)
  • (Ordinal: 786, Address: 0x70fa30)
  • (Ordinal: 787, Address: 0x200cb0)
  • (Ordinal: 788, Address: 0x2004b0)
  • (Ordinal: 789, Address: 0x2004d0)
  • (Ordinal: 790, Address: 0x200c90)
  • (Ordinal: 791, Address: 0x200490)
  • (Ordinal: 792, Address: 0x200cd0)
  • (Ordinal: 810, Address: 0x2dd690)
  • (Ordinal: 811, Address: 0x2dd490)
  • (Ordinal: 812, Address: 0x51c3a0)
  • (Ordinal: 813, Address: 0x51c440)
  • (Ordinal: 814, Address: 0x15dda0)
  • (Ordinal: 815, Address: 0x1698d0)
  • (Ordinal: 816, Address: 0x519e20)
  • (Ordinal: 817, Address: 0x51a1c0)
  • (Ordinal: 818, Address: 0x519040)
  • (Ordinal: 819, Address: 0x519050)
  • (Ordinal: 820, Address: 0x70fa14)
  • (Ordinal: 821, Address: 0x70fabc)
  • (Ordinal: 822, Address: 0x70faae)
  • (Ordinal: 823, Address: 0x200830)
  • (Ordinal: 824, Address: 0x200850)
  • (Ordinal: 825, Address: 0xc50a0)
  • (Ordinal: 826, Address: 0x70fa22)
  • (Ordinal: 827, Address: 0x70faca)
  • (Ordinal: 828, Address: 0x2341e0)
  • (Ordinal: 829, Address: 0x2345d0)
  • (Ordinal: 830, Address: 0x2cf6e0)
  • (Ordinal: 831, Address: 0x200350)
  • (Ordinal: 832, Address: 0x70fc04)
  • (Ordinal: 833, Address: 0x25d3d0)
  • (Ordinal: 834, Address: 0x70fa68)
  • (Ordinal: 835, Address: 0x70fa84)
  • (Ordinal: 836, Address: 0x70fa76)
  • (Ordinal: 837, Address: 0x70faa0)
  • (Ordinal: 838, Address: 0x70fa92)
  • (Ordinal: 839, Address: 0x70f648)
  • (Ordinal: 840, Address: 0x1ffed0)
  • (Ordinal: 841, Address: 0x70faf4)
  • (Ordinal: 842, Address: 0x70fb02)
  • (Ordinal: 843, Address: 0x70fb53)
  • (Ordinal: 844, Address: 0x200450)
  • (Ordinal: 845, Address: 0x519710)
  • ILLoadFromStreamEx (Ordinal: 846, Address: 0x1ffc30)
  • (Ordinal: 847, Address: 0xc5230)
  • (Ordinal: 848, Address: 0x2009d0)
  • (Ordinal: 849, Address: 0x184640)
  • (Ordinal: 850, Address: 0x1ffe70)
  • (Ordinal: 851, Address: 0x200b70)
  • (Ordinal: 852, Address: 0x70fbbf)
  • (Ordinal: 853, Address: 0x200a10)
  • (Ordinal: 854, Address: 0x70f90a)
  • (Ordinal: 856, Address: 0x70f612)
  • (Ordinal: 857, Address: 0x70f604)
  • (Ordinal: 858, Address: 0x70f967)
  • (Ordinal: 859, Address: 0x2fb8f0)
  • (Ordinal: 860, Address: 0x200770)
  • (Ordinal: 861, Address: 0x70fad8)
  • (Ordinal: 862, Address: 0x2001f0)
  • (Ordinal: 863, Address: 0x70f8c5)
  • (Ordinal: 864, Address: 0x286cc0)
  • (Ordinal: 865, Address: 0x1ffd50)
  • (Ordinal: 866, Address: 0x200630)
  • (Ordinal: 867, Address: 0x70f656)
  • (Ordinal: 868, Address: 0x70f664)
  • (Ordinal: 869, Address: 0x70f983)
  • (Ordinal: 870, Address: 0x1a3af0)
  • (Ordinal: 871, Address: 0x20bf70)
  • (Ordinal: 872, Address: 0x70fa4c)
  • (Ordinal: 873, Address: 0x200bf0)
  • (Ordinal: 874, Address: 0x1e66d0)
  • (Ordinal: 875, Address: 0x160350)
  • (Ordinal: 876, Address: 0x1ecba0)
  • (Ordinal: 877, Address: 0x277e20)
  • (Ordinal: 878, Address: 0xad1b0)
  • (Ordinal: 880, Address: 0x1ff630)
  • (Ordinal: 881, Address: 0x1428c0)
  • (Ordinal: 882, Address: 0x162f10)
  • (Ordinal: 883, Address: 0x5185d0)
  • (Ordinal: 884, Address: 0x250690)
  • (Ordinal: 885, Address: 0x102cb0)
  • (Ordinal: 886, Address: 0x200c30)
  • (Ordinal: 887, Address: 0x200650)
  • (Ordinal: 888, Address: 0x2e32b0)
  • (Ordinal: 889, Address: 0x70f8ee)
  • (Ordinal: 890, Address: 0x70f62d)
  • (Ordinal: 891, Address: 0x28fae0)
  • (Ordinal: 892, Address: 0x70f8a9)
  • (Ordinal: 893, Address: 0x68320)
  • (Ordinal: 894, Address: 0x220400)
  • (Ordinal: 895, Address: 0x170dd0)
  • (Ordinal: 896, Address: 0x220300)
  • (Ordinal: 897, Address: 0x2e77e0)
  • (Ordinal: 898, Address: 0x200430)
  • (Ordinal: 899, Address: 0x200fb0)
  • (Ordinal: 900, Address: 0x169920)
  • (Ordinal: 901, Address: 0x160cf0)
  • (Ordinal: 902, Address: 0x70f8fc)
  • (Ordinal: 903, Address: 0x1e2020)
  • (Ordinal: 904, Address: 0x25d4d0)
  • (Ordinal: 905, Address: 0x25d2e0)
  • (Ordinal: 906, Address: 0x1ffa30)
  • (Ordinal: 907, Address: 0x209d0)
  • (Ordinal: 909, Address: 0x70f8b7)
  • (Ordinal: 910, Address: 0x1ff650)
  • (Ordinal: 911, Address: 0x1ff4f0)
  • (Ordinal: 912, Address: 0x24dad0)
  • (Ordinal: 913, Address: 0x1ff6d0)
  • (Ordinal: 914, Address: 0x1ff3d0)
  • (Ordinal: 915, Address: 0xa79f0)
  • (Ordinal: 916, Address: 0x17bd60)
  • GetSystemPersistedStorageItemList (Ordinal: 919, Address: 0x2203e0)
  • CreateStorageItemFromPath_PartialTrustCaller (Ordinal: 920, Address: 0x220360)
  • CreateStorageItemFromShellItem_FullTrustCaller (Ordinal: 921, Address: 0x220380)
  • (Ordinal: 922, Address: 0x200d90)
  • (Ordinal: 923, Address: 0x1a40e0)
  • (Ordinal: 924, Address: 0x2202c0)
  • CreateStorageItemFromShellItem_FullTrustCaller_ForPackage (Ordinal: 925, Address: 0x177a60)
  • (Ordinal: 927, Address: 0x200290)
  • (Ordinal: 928, Address: 0x200590)
  • CreateStorageItemFromShellItem_FullTrustCaller_ForPackage_WithProcessHandle (Ordinal: 929, Address: 0x2203a0)
  • (Ordinal: 930, Address: 0x1ffeb0)
  • CreateStorageItemFromShellItem_FullTrustCaller_UseImplicitFlagsAndPackage (Ordinal: 931, Address: 0x2203c0)
  • (Ordinal: 932, Address: 0x220500)
  • (Ordinal: 933, Address: 0x2204a0)
  • CreateStorageItemFromPath_FullTrustCaller (Ordinal: 935, Address: 0x220320)
  • CreateStorageItemFromPath_FullTrustCaller_ForPackage (Ordinal: 936, Address: 0x220340)
  • CStorageItem_GetValidatedStorageItemObject (Ordinal: 937, Address: 0x2202e0)
  • (Ordinal: 938, Address: 0x296db0)
  • (Ordinal: 939, Address: 0x985f0)
  • (Ordinal: 940, Address: 0x220420)
  • IsProcessAnExplorer (Ordinal: 941, Address: 0x1ffdb0)
  • IsDesktopExplorerProcess (Ordinal: 942, Address: 0x1ffd30)
  • (Ordinal: 943, Address: 0x7e990)
  • (Ordinal: 944, Address: 0x2e4390)
  • (Ordinal: 945, Address: 0x2965c0)
  • (Ordinal: 946, Address: 0x200910)
  • (Ordinal: 947, Address: 0x2355f0)
  • (Ordinal: 948, Address: 0x2355d0)
  • (Ordinal: 949, Address: 0x2355a0)
  • (Ordinal: 950, Address: 0x235550)
  • (Ordinal: 951, Address: 0x235570)
  • (Ordinal: 952, Address: 0x235530)
  • (Ordinal: 953, Address: 0x2352d0)
  • (Ordinal: 970, Address: 0x200070)
  • (Ordinal: 971, Address: 0x1ff5d0)
  • (Ordinal: 972, Address: 0x1ff6b0)
  • (Ordinal: 2000, Address: 0x296850)
  • (Ordinal: 2001, Address: 0x2f5ef0)
  • (Ordinal: 2002, Address: 0x164c00)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll
  • ApiSetQueryApiSetPresence (Address: 0x180625878)
api-ms-win-core-atoms-l1-1-0.dll
  • FindAtomW (Address: 0x180625890)
  • GetAtomNameW (Address: 0x1806258a8)
  • GlobalAddAtomW (Address: 0x180625898)
  • GlobalDeleteAtom (Address: 0x1806258a0)
  • GlobalGetAtomNameW (Address: 0x180625888)
api-ms-win-core-datetime-l1-1-0.dll
  • GetDateFormatW (Address: 0x1806258b8)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x1806258d8)
  • IsDebuggerPresent (Address: 0x1806258c8)
  • OutputDebugStringW (Address: 0x1806258d0)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x1806258e8)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x1806258f8)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x180625920)
  • RaiseException (Address: 0x180625928)
  • SetErrorMode (Address: 0x180625910)
  • SetLastError (Address: 0x180625908)
  • SetUnhandledExceptionFilter (Address: 0x180625918)
  • UnhandledExceptionFilter (Address: 0x180625930)
api-ms-win-core-file-l1-1-0.dll
  • CompareFileTime (Address: 0x180625980)
  • CreateDirectoryW (Address: 0x1806259e0)
  • CreateFileW (Address: 0x1806259c8)
  • DefineDosDeviceW (Address: 0x180625a38)
  • DeleteFileW (Address: 0x180625990)
  • FileTimeToLocalFileTime (Address: 0x180625950)
  • FindClose (Address: 0x180625958)
  • FindFirstFileExW (Address: 0x1806259c0)
  • FindFirstFileW (Address: 0x180625a40)
  • FindFirstVolumeW (Address: 0x180625a10)
  • FindNextFileW (Address: 0x180625988)
  • FindNextVolumeW (Address: 0x180625a28)
  • FindVolumeClose (Address: 0x180625a30)
  • GetDiskFreeSpaceW (Address: 0x180625948)
  • GetDriveTypeW (Address: 0x180625a58)
  • GetFileAttributesExW (Address: 0x180625970)
  • GetFileAttributesW (Address: 0x1806259e8)
  • GetFileInformationByHandle (Address: 0x180625a50)
  • GetFileSize (Address: 0x1806259d0)
  • GetFileSizeEx (Address: 0x180625978)
  • GetFullPathNameW (Address: 0x180625a48)
  • GetLogicalDrives (Address: 0x1806259a0)
  • GetLongPathNameW (Address: 0x1806259b0)
  • GetShortPathNameW (Address: 0x1806259b8)
  • GetTempFileNameW (Address: 0x180625968)
  • GetVolumeInformationW (Address: 0x180625a60)
  • GetVolumePathNameW (Address: 0x1806259a8)
  • LocalFileTimeToFileTime (Address: 0x180625940)
  • QueryDosDeviceW (Address: 0x180625a18)
  • ReadFile (Address: 0x1806259d8)
  • RemoveDirectoryW (Address: 0x1806259f0)
  • SetEndOfFile (Address: 0x180625960)
  • SetFileAttributesW (Address: 0x1806259f8)
  • SetFileInformationByHandle (Address: 0x180625a20)
  • SetFilePointer (Address: 0x180625998)
  • SetFileTime (Address: 0x180625a00)
  • WriteFile (Address: 0x180625a08)
api-ms-win-core-file-l1-2-0.dll
  • GetTempPathW (Address: 0x180625a78)
  • GetVolumeNameForVolumeMountPointW (Address: 0x180625a80)
  • GetVolumePathNamesForVolumeNameW (Address: 0x180625a70)
api-ms-win-core-file-l2-1-0.dll
  • GetFileInformationByHandleEx (Address: 0x180625a90)
  • MoveFileExW (Address: 0x180625aa0)
  • ReplaceFileW (Address: 0x180625a98)
api-ms-win-core-file-l2-1-2.dll
  • CopyFileW (Address: 0x180625ab0)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x180625ac8)
  • DuplicateHandle (Address: 0x180625ac0)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x180625af8)
  • HeapAlloc (Address: 0x180625af0)
  • HeapDestroy (Address: 0x180625ae8)
  • HeapFree (Address: 0x180625ad8)
  • HeapReAlloc (Address: 0x180625ae0)
api-ms-win-core-heap-l2-1-0.dll
  • GlobalAlloc (Address: 0x180625b28)
  • GlobalFree (Address: 0x180625b08)
  • LocalAlloc (Address: 0x180625b10)
  • LocalFree (Address: 0x180625b20)
  • LocalReAlloc (Address: 0x180625b18)
api-ms-win-core-heap-obsolete-l1-1-0.dll
  • GlobalFlags (Address: 0x180625b58)
  • GlobalLock (Address: 0x180625b48)
  • GlobalReAlloc (Address: 0x180625b50)
  • GlobalSize (Address: 0x180625b40)
  • GlobalUnlock (Address: 0x180625b38)
  • LocalSize (Address: 0x180625b60)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x180625b80)
  • InterlockedPopEntrySList (Address: 0x180625b70)
  • InterlockedPushEntrySList (Address: 0x180625b78)
api-ms-win-core-io-l1-1-0.dll
  • CreateIoCompletionPort (Address: 0x180625b90)
  • DeviceIoControl (Address: 0x180625ba0)
  • GetQueuedCompletionStatus (Address: 0x180625b98)
api-ms-win-core-io-l1-1-1.dll
  • CancelSynchronousIo (Address: 0x180625bb0)
api-ms-win-core-job-l2-1-0.dll
  • AssignProcessToJobObject (Address: 0x180625bc8)
  • CreateJobObjectW (Address: 0x180625bd0)
  • SetInformationJobObject (Address: 0x180625bc0)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
  • GetComputerNameW (Address: 0x180625c10)
  • GetSystemPowerStatus (Address: 0x180625bf8)
  • MulDiv (Address: 0x180625be8)
  • RegisterWaitForSingleObject (Address: 0x180625c00)
  • SetVolumeLabelW (Address: 0x180625bf0)
  • UnregisterWait (Address: 0x180625c08)
  • WTSGetActiveConsoleSessionId (Address: 0x180625be0)
api-ms-win-core-kernel32-legacy-l1-1-1.dll
  • PowerClearRequest (Address: 0x180625c20)
  • PowerCreateRequest (Address: 0x180625c28)
  • PowerSetRequest (Address: 0x180625c38)
  • VerifyVersionInfoW (Address: 0x180625c30)
api-ms-win-core-kernel32-legacy-l1-1-2.dll
  • GetBinaryTypeW (Address: 0x180625c48)
api-ms-win-core-kernel32-private-l1-1-0.dll
  • CheckElevation (Address: 0x180625c58)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x180625cb8)
  • EnumResourceNamesExW (Address: 0x180625c90)
  • FindResourceExW (Address: 0x180625cc0)
  • FindStringOrdinal (Address: 0x180625ce8)
  • FreeLibrary (Address: 0x180625cf0)
  • FreeResource (Address: 0x180625cf8)
  • GetModuleFileNameA (Address: 0x180625cc8)
  • GetModuleFileNameW (Address: 0x180625c70)
  • GetModuleHandleExA (Address: 0x180625c98)
  • GetModuleHandleExW (Address: 0x180625cd8)
  • GetModuleHandleW (Address: 0x180625cd0)
  • GetProcAddress (Address: 0x180625c88)
  • LoadLibraryExA (Address: 0x180625c78)
  • LoadLibraryExW (Address: 0x180625c68)
  • LoadResource (Address: 0x180625c80)
  • LoadStringA (Address: 0x180625ce0)
  • LoadStringW (Address: 0x180625cb0)
  • LockResource (Address: 0x180625ca8)
  • SizeofResource (Address: 0x180625ca0)
api-ms-win-core-libraryloader-l1-2-1.dll
  • FindResourceW (Address: 0x180625d10)
  • LoadLibraryW (Address: 0x180625d08)
api-ms-win-core-localization-l1-2-0.dll
  • FindNLSString (Address: 0x180625d20)
  • FindNLSStringEx (Address: 0x180625d30)
  • FormatMessageW (Address: 0x180625d88)
  • GetACP (Address: 0x180625d38)
  • GetLocaleInfoW (Address: 0x180625d50)
  • GetSystemDefaultLangID (Address: 0x180625d98)
  • GetSystemDefaultLCID (Address: 0x180625d78)
  • GetSystemPreferredUILanguages (Address: 0x180625d70)
  • GetThreadLocale (Address: 0x180625da8)
  • GetThreadUILanguage (Address: 0x180625da0)
  • GetUserDefaultLangID (Address: 0x180625d68)
  • GetUserPreferredUILanguages (Address: 0x180625d58)
  • IsValidLocaleName (Address: 0x180625d40)
  • LCMapStringEx (Address: 0x180625d48)
  • LCMapStringW (Address: 0x180625d90)
  • LocaleNameToLCID (Address: 0x180625d28)
  • ResolveLocaleName (Address: 0x180625d80)
  • VerLanguageNameW (Address: 0x180625d60)
api-ms-win-core-localization-l1-2-2.dll
  • LCIDToLocaleName (Address: 0x180625db8)
api-ms-win-core-localization-l2-1-0.dll
  • GetNumberFormatEx (Address: 0x180625dc8)
api-ms-win-core-localization-obsolete-l1-2-0.dll
  • EnumUILanguagesW (Address: 0x180625dd8)
  • GetNumberFormatW (Address: 0x180625de0)
  • GetUserDefaultUILanguage (Address: 0x180625de8)
api-ms-win-core-memory-l1-1-0.dll
  • CreateFileMappingW (Address: 0x180625e10)
  • MapViewOfFile (Address: 0x180625e18)
  • OpenFileMappingW (Address: 0x180625e20)
  • ReadProcessMemory (Address: 0x180625e00)
  • UnmapViewOfFile (Address: 0x180625e08)
  • VirtualAlloc (Address: 0x180625e38)
  • VirtualFree (Address: 0x180625e30)
  • VirtualProtect (Address: 0x180625df8)
  • VirtualQuery (Address: 0x180625e28)
  • WriteProcessMemory (Address: 0x180625e40)
api-ms-win-core-memory-l1-1-1.dll
  • PrefetchVirtualMemory (Address: 0x180625e50)
api-ms-win-core-normalization-l1-1-0.dll
  • GetStringScripts (Address: 0x180625e60)
api-ms-win-core-path-l1-1-0.dll
  • PathAllocCanonicalize (Address: 0x180625e90)
  • PathAllocCombine (Address: 0x180625ea0)
  • PathCchAddBackslash (Address: 0x180625e80)
  • PathCchAddExtension (Address: 0x180625eb0)
  • PathCchAppend (Address: 0x180625ea8)
  • PathCchAppendEx (Address: 0x180625ee8)
  • PathCchCanonicalize (Address: 0x180625ec0)
  • PathCchCombine (Address: 0x180625ed0)
  • PathCchRemoveBackslash (Address: 0x180625ed8)
  • PathCchRemoveExtension (Address: 0x180625e98)
  • PathCchRemoveFileSpec (Address: 0x180625e70)
  • PathCchRenameExtension (Address: 0x180625ec8)
  • PathCchSkipRoot (Address: 0x180625e78)
  • PathCchStripPrefix (Address: 0x180625e88)
  • PathCchStripToRoot (Address: 0x180625ee0)
  • PathIsUNCEx (Address: 0x180625eb8)
api-ms-win-core-privateprofile-l1-1-0.dll
  • GetPrivateProfileSectionW (Address: 0x180625ef8)
  • GetPrivateProfileStringW (Address: 0x180625f00)
  • WritePrivateProfileStringW (Address: 0x180625f08)
api-ms-win-core-processenvironment-l1-1-0.dll
  • ExpandEnvironmentStringsA (Address: 0x180625f30)
  • ExpandEnvironmentStringsW (Address: 0x180625f50)
  • GetCommandLineW (Address: 0x180625f28)
  • GetCurrentDirectoryW (Address: 0x180625f40)
  • GetEnvironmentVariableW (Address: 0x180625f18)
  • SearchPathW (Address: 0x180625f38)
  • SetCurrentDirectoryW (Address: 0x180625f48)
  • SetEnvironmentVariableW (Address: 0x180625f20)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateProcessW (Address: 0x180625f68)
  • CreateThread (Address: 0x180625fb0)
  • DeleteProcThreadAttributeList (Address: 0x180625fa8)
  • GetCurrentProcess (Address: 0x180626028)
  • GetCurrentProcessId (Address: 0x180625ff0)
  • GetCurrentThread (Address: 0x180626010)
  • GetCurrentThreadId (Address: 0x180625ff8)
  • GetExitCodeProcess (Address: 0x180625fc0)
  • GetExitCodeThread (Address: 0x180625f90)
  • GetProcessId (Address: 0x180626030)
  • GetThreadId (Address: 0x180626008)
  • GetThreadPriority (Address: 0x180626020)
  • InitializeProcThreadAttributeList (Address: 0x180625fa0)
  • OpenProcessToken (Address: 0x180626000)
  • OpenThread (Address: 0x180625f98)
  • OpenThreadToken (Address: 0x180625f78)
  • ProcessIdToSessionId (Address: 0x180625fe8)
  • ResumeThread (Address: 0x180625f70)
  • SetPriorityClass (Address: 0x180625f60)
  • SetThreadPriority (Address: 0x180625f88)
  • SetThreadToken (Address: 0x180626018)
  • TerminateProcess (Address: 0x180625fb8)
  • TlsAlloc (Address: 0x180625fd8)
  • TlsFree (Address: 0x180625fe0)
  • TlsGetValue (Address: 0x180625fd0)
  • TlsSetValue (Address: 0x180625fc8)
  • UpdateProcThreadAttribute (Address: 0x180625f80)
api-ms-win-core-processthreads-l1-1-1.dll
  • FlushInstructionCache (Address: 0x180626048)
  • IsProcessorFeaturePresent (Address: 0x180626040)
  • OpenProcess (Address: 0x180626050)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x180626068)
  • QueryPerformanceFrequency (Address: 0x180626060)
api-ms-win-core-psapi-l1-1-0.dll
  • K32GetModuleFileNameExW (Address: 0x180626080)
  • K32GetProcessImageFileNameW (Address: 0x180626088)
  • QueryFullProcessImageNameW (Address: 0x180626078)
api-ms-win-core-realtime-l1-1-0.dll
  • QueryUnbiasedInterruptTime (Address: 0x180626098)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x180626100)
  • RegCreateKeyExW (Address: 0x180626108)
  • RegDeleteKeyExW (Address: 0x1806260c8)
  • RegDeleteTreeW (Address: 0x1806260f0)
  • RegDeleteValueW (Address: 0x1806260d0)
  • RegEnumKeyExW (Address: 0x1806260b0)
  • RegEnumValueW (Address: 0x1806260e8)
  • RegGetValueW (Address: 0x180626120)
  • RegNotifyChangeKeyValue (Address: 0x1806260d8)
  • RegOpenCurrentUser (Address: 0x1806260c0)
  • RegOpenKeyExA (Address: 0x1806260f8)
  • RegOpenKeyExW (Address: 0x180626110)
  • RegQueryInfoKeyA (Address: 0x180626118)
  • RegQueryInfoKeyW (Address: 0x1806260e0)
  • RegQueryValueExA (Address: 0x1806260a8)
  • RegQueryValueExW (Address: 0x180626128)
  • RegSetValueExW (Address: 0x1806260b8)
api-ms-win-core-registry-l1-1-1.dll
  • RegSetKeyValueW (Address: 0x180626138)
api-ms-win-core-registryuserspecific-l1-1-0.dll
  • SHRegCloseUSKey (Address: 0x180626170)
  • SHRegEnumUSKeyW (Address: 0x180626148)
  • SHRegGetBoolUSValueW (Address: 0x180626158)
  • SHRegGetUSValueW (Address: 0x180626160)
  • SHRegOpenUSKeyA (Address: 0x180626178)
  • SHRegOpenUSKeyW (Address: 0x180626150)
  • SHRegQueryUSValueW (Address: 0x180626168)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x180626190)
  • RtlLookupFunctionEntry (Address: 0x180626198)
  • RtlVirtualUnwind (Address: 0x180626188)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
  • IsCharSpaceW (Address: 0x180626268)
  • PathAddBackslashW (Address: 0x1806261a8)
  • PathAppendW (Address: 0x1806261d0)
  • PathCombineW (Address: 0x180626248)
  • PathCommonPrefixW (Address: 0x1806262a0)
  • PathFileExistsW (Address: 0x1806261d8)
  • PathFindExtensionW (Address: 0x1806261b0)
  • PathFindFileNameW (Address: 0x1806261b8)
  • PathFindNextComponentW (Address: 0x180626208)
  • PathGetArgsW (Address: 0x1806261c0)
  • PathGetDriveNumberW (Address: 0x180626240)
  • PathIsFileSpecW (Address: 0x180626218)
  • PathIsPrefixW (Address: 0x180626238)
  • PathIsRelativeW (Address: 0x180626278)
  • PathIsRootW (Address: 0x180626260)
  • PathIsSameRootW (Address: 0x180626298)
  • PathIsUNCServerShareW (Address: 0x1806262a8)
  • PathIsUNCServerW (Address: 0x180626290)
  • PathIsUNCW (Address: 0x180626288)
  • PathIsValidCharW (Address: 0x180626258)
  • PathMatchSpecExW (Address: 0x180626250)
  • PathMatchSpecW (Address: 0x1806261e0)
  • PathParseIconLocationW (Address: 0x180626270)
  • PathQuoteSpacesW (Address: 0x1806261f0)
  • PathRemoveBackslashW (Address: 0x180626230)
  • PathRemoveBlanksW (Address: 0x180626280)
  • PathRemoveExtensionW (Address: 0x1806261e8)
  • PathRemoveFileSpecW (Address: 0x180626220)
  • PathSkipRootW (Address: 0x1806261f8)
  • PathStripToRootW (Address: 0x1806261c8)
  • PathUnExpandEnvStringsW (Address: 0x180626200)
  • PathUnquoteSpacesW (Address: 0x180626210)
  • SHExpandEnvironmentStringsW (Address: 0x180626228)
api-ms-win-core-shlwapi-obsolete-l1-1-0.dll
  • QISearch (Address: 0x180626380)
  • StrChrA (Address: 0x180626358)
  • StrChrIA (Address: 0x180626350)
  • StrChrIW (Address: 0x180626348)
  • StrChrW (Address: 0x180626338)
  • StrCmpCW (Address: 0x1806263b0)
  • StrCmpICA (Address: 0x180626388)
  • StrCmpICW (Address: 0x1806262e8)
  • StrCmpIW (Address: 0x180626398)
  • StrCmpLogicalW (Address: 0x1806262c0)
  • StrCmpNA (Address: 0x180626328)
  • StrCmpNCW (Address: 0x180626370)
  • StrCmpNIA (Address: 0x180626320)
  • StrCmpNICW (Address: 0x180626360)
  • StrCmpNIW (Address: 0x180626318)
  • StrCmpNW (Address: 0x180626308)
  • StrCmpW (Address: 0x1806263c8)
  • StrCSpnW (Address: 0x180626378)
  • StrDupA (Address: 0x180626390)
  • StrDupW (Address: 0x1806263b8)
  • StrPBrkW (Address: 0x180626340)
  • StrRChrA (Address: 0x180626310)
  • StrRChrIA (Address: 0x1806263a8)
  • StrRChrIW (Address: 0x1806262b8)
  • StrRChrW (Address: 0x1806262c8)
  • StrRStrIA (Address: 0x1806262d0)
  • StrRStrIW (Address: 0x1806262d8)
  • StrSpnW (Address: 0x1806262f8)
  • StrStrA (Address: 0x1806262e0)
  • StrStrIA (Address: 0x1806262f0)
  • StrStrIW (Address: 0x180626368)
  • StrStrW (Address: 0x180626330)
  • StrToIntA (Address: 0x180626300)
  • StrToIntExW (Address: 0x1806263d0)
  • StrToIntW (Address: 0x1806263a0)
  • StrTrimW (Address: 0x1806263c0)
api-ms-win-core-sidebyside-l1-1-0.dll
  • ActivateActCtx (Address: 0x1806263f8)
  • CreateActCtxW (Address: 0x1806263e8)
  • DeactivateActCtx (Address: 0x180626400)
  • QueryActCtxW (Address: 0x1806263f0)
  • ReleaseActCtx (Address: 0x1806263e0)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringEx (Address: 0x180626430)
  • CompareStringOrdinal (Address: 0x180626418)
  • CompareStringW (Address: 0x180626440)
  • GetStringTypeExW (Address: 0x180626428)
  • GetStringTypeW (Address: 0x180626438)
  • MultiByteToWideChar (Address: 0x180626420)
  • WideCharToMultiByte (Address: 0x180626410)
api-ms-win-core-string-l2-1-0.dll
  • CharLowerBuffW (Address: 0x180626468)
  • CharLowerW (Address: 0x180626450)
  • CharNextW (Address: 0x180626460)
  • CharPrevW (Address: 0x180626478)
  • CharUpperBuffW (Address: 0x180626480)
  • CharUpperW (Address: 0x180626458)
  • IsCharAlphaW (Address: 0x180626470)
api-ms-win-core-string-l2-1-1.dll
  • SHLoadIndirectString (Address: 0x180626490)
api-ms-win-core-string-obsolete-l1-1-0.dll
  • lstrcmpA (Address: 0x1806264b0)
  • lstrcmpiA (Address: 0x1806264a0)
  • lstrcmpiW (Address: 0x1806264a8)
  • lstrcmpW (Address: 0x1806264c8)
  • lstrlenA (Address: 0x1806264c0)
  • lstrlenW (Address: 0x1806264b8)
api-ms-win-core-stringansi-l1-1-0.dll
  • CharNextA (Address: 0x1806264d8)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x180626508)
  • AcquireSRWLockShared (Address: 0x180626588)
  • CreateEventExW (Address: 0x1806265c8)
  • CreateEventW (Address: 0x1806265c0)
  • CreateMutexExW (Address: 0x180626518)
  • CreateMutexW (Address: 0x1806265a0)
  • CreateSemaphoreExW (Address: 0x180626590)
  • DeleteCriticalSection (Address: 0x1806264e8)
  • EnterCriticalSection (Address: 0x180626578)
  • InitializeCriticalSection (Address: 0x180626520)
  • InitializeCriticalSectionAndSpinCount (Address: 0x1806264f0)
  • InitializeCriticalSectionEx (Address: 0x180626558)
  • InitializeSRWLock (Address: 0x180626530)
  • LeaveCriticalSection (Address: 0x180626560)
  • OpenEventW (Address: 0x180626550)
  • OpenMutexW (Address: 0x1806265a8)
  • OpenSemaphoreW (Address: 0x1806264f8)
  • ReleaseMutex (Address: 0x180626538)
  • ReleaseSemaphore (Address: 0x180626570)
  • ReleaseSRWLockExclusive (Address: 0x180626528)
  • ReleaseSRWLockShared (Address: 0x180626580)
  • ResetEvent (Address: 0x180626540)
  • SetEvent (Address: 0x180626598)
  • TryAcquireSRWLockExclusive (Address: 0x180626510)
  • TryAcquireSRWLockShared (Address: 0x1806265b0)
  • TryEnterCriticalSection (Address: 0x180626568)
  • WaitForMultipleObjectsEx (Address: 0x1806265b8)
  • WaitForSingleObject (Address: 0x180626548)
  • WaitForSingleObjectEx (Address: 0x180626500)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x1806265f0)
  • InitOnceComplete (Address: 0x1806265e0)
  • InitOnceExecuteOnce (Address: 0x1806265e8)
  • Sleep (Address: 0x1806265d8)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetComputerNameExW (Address: 0x180626640)
  • GetLocalTime (Address: 0x180626648)
  • GetSystemDirectoryW (Address: 0x180626638)
  • GetSystemInfo (Address: 0x180626630)
  • GetSystemTime (Address: 0x180626620)
  • GetSystemTimeAsFileTime (Address: 0x180626628)
  • GetSystemWindowsDirectoryW (Address: 0x180626618)
  • GetTickCount (Address: 0x180626600)
  • GetTickCount64 (Address: 0x180626608)
  • GetVersionExW (Address: 0x180626650)
  • GetWindowsDirectoryW (Address: 0x180626610)
  • GlobalMemoryStatusEx (Address: 0x180626658)
api-ms-win-core-sysinfo-l1-2-0.dll
  • GetNativeSystemInfo (Address: 0x180626668)
  • GetProductInfo (Address: 0x180626670)
  • GetSystemTimePreciseAsFileTime (Address: 0x180626680)
  • VerSetConditionMask (Address: 0x180626678)
api-ms-win-core-sysinfo-l1-2-3.dll
  • GetIntegratedDisplaySize (Address: 0x180626690)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x1806266b8)
  • CloseThreadpoolWait (Address: 0x1806266f0)
  • CloseThreadpoolWork (Address: 0x1806266d8)
  • CreateThreadpoolTimer (Address: 0x1806266e8)
  • CreateThreadpoolWait (Address: 0x1806266c0)
  • CreateThreadpoolWork (Address: 0x1806266a0)
  • IsThreadpoolTimerSet (Address: 0x1806266d0)
  • SetThreadpoolTimer (Address: 0x1806266e0)
  • SetThreadpoolTimerEx (Address: 0x1806266f8)
  • SetThreadpoolWait (Address: 0x180626700)
  • SubmitThreadpoolWork (Address: 0x1806266c8)
  • TrySubmitThreadpoolCallback (Address: 0x180626708)
  • WaitForThreadpoolTimerCallbacks (Address: 0x1806266b0)
  • WaitForThreadpoolWaitCallbacks (Address: 0x1806266a8)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
  • CreateTimerQueueTimer (Address: 0x180626728)
  • DeleteTimerQueueTimer (Address: 0x180626720)
  • QueueUserWorkItem (Address: 0x180626730)
  • UnregisterWaitEx (Address: 0x180626718)
api-ms-win-core-timezone-l1-1-0.dll
  • FileTimeToSystemTime (Address: 0x180626760)
  • GetTimeZoneInformationForYear (Address: 0x180626750)
  • SystemTimeToFileTime (Address: 0x180626758)
  • SystemTimeToTzSpecificLocalTime (Address: 0x180626740)
  • TzSpecificLocalTimeToSystemTime (Address: 0x180626748)
api-ms-win-core-url-l1-1-0.dll
  • HashData (Address: 0x1806267d8)
  • ParseURLW (Address: 0x180626790)
  • PathCreateFromUrlAlloc (Address: 0x1806267c8)
  • PathCreateFromUrlW (Address: 0x180626788)
  • PathIsURLW (Address: 0x180626778)
  • UrlApplySchemeW (Address: 0x1806267c0)
  • UrlCanonicalizeW (Address: 0x1806267a0)
  • UrlCompareW (Address: 0x1806267e0)
  • UrlCreateFromPathW (Address: 0x1806267b0)
  • UrlEscapeW (Address: 0x1806267d0)
  • UrlFixupW (Address: 0x1806267a8)
  • UrlGetPartW (Address: 0x180626770)
  • UrlIsW (Address: 0x180626780)
  • UrlUnescapeA (Address: 0x180626798)
  • UrlUnescapeW (Address: 0x1806267b8)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x1806267f8)
  • EncodePointer (Address: 0x1806267f0)
api-ms-win-core-version-l1-1-0.dll
  • GetFileVersionInfoExW (Address: 0x180626810)
  • GetFileVersionInfoSizeExW (Address: 0x180626808)
  • VerQueryValueW (Address: 0x180626818)
api-ms-win-core-version-l1-1-1.dll
  • GetFileVersionInfoSizeW (Address: 0x180626830)
  • GetFileVersionInfoW (Address: 0x180626828)
api-ms-win-core-wow64-l1-1-0.dll
  • Wow64DisableWow64FsRedirection (Address: 0x180626848)
  • Wow64RevertWow64FsRedirection (Address: 0x180626840)
api-ms-win-core-wow64-l1-1-1.dll
  • GetSystemWow64DirectoryW (Address: 0x180626860)
  • IsWow64Process2 (Address: 0x180626858)
api-ms-win-crt-private-l1-1-0.dll
  • __C_specific_handler (Address: 0x1806269d0)
  • __current_exception (Address: 0x180626960)
  • __current_exception_context (Address: 0x180626968)
  • __CxxFrameHandler3 (Address: 0x180626958)
  • __CxxFrameHandler4 (Address: 0x180626ad0)
  • __std_terminate (Address: 0x180626ac0)
  • _CxxThrowException (Address: 0x180626ad8)
  • _o___std_exception_copy (Address: 0x180626ab8)
  • _o___std_exception_destroy (Address: 0x180626ab0)
  • _o___std_type_info_destroy_list (Address: 0x180626aa8)
  • _o___stdio_common_vsnprintf_s (Address: 0x180626aa0)
  • _o___stdio_common_vsprintf (Address: 0x180626a98)
  • _o___stdio_common_vsprintf_s (Address: 0x180626a90)
  • _o___stdio_common_vswprintf (Address: 0x180626a88)
  • _o___stdio_common_vswscanf (Address: 0x180626a80)
  • _o__beginthreadex (Address: 0x180626a78)
  • _o__cexit (Address: 0x180626a70)
  • _o__configure_narrow_argv (Address: 0x180626a68)
  • _o__crt_atexit (Address: 0x180626a60)
  • _o__difftime64 (Address: 0x180626a58)
  • _o__errno (Address: 0x180626a50)
  • _o__execute_onexit_table (Address: 0x180626a48)
  • _o__get_errno (Address: 0x180626a40)
  • _o__initialize_narrow_environment (Address: 0x180626a38)
  • _o__initialize_onexit_table (Address: 0x180626a30)
  • _o__invalid_parameter_noinfo (Address: 0x180626a28)
  • _o__invalid_parameter_noinfo_noreturn (Address: 0x180626a20)
  • _o__itow (Address: 0x180626a18)
  • _o__purecall (Address: 0x1806269f8)
  • _o__register_onexit_function (Address: 0x1806269f0)
  • _o__resetstkoflw (Address: 0x1806269e8)
  • _o__seh_filter_dll (Address: 0x1806269e0)
  • _o__set_errno (Address: 0x1806269d8)
  • _o__strnicmp (Address: 0x1806269c0)
  • _o__ui64tow_s (Address: 0x1806269b0)
  • _o__wcsicmp (Address: 0x1806269a8)
  • _o__wcslwr (Address: 0x1806269a0)
  • _o__wcsnicmp (Address: 0x180626998)
  • _o__wcstoui64 (Address: 0x180626990)
  • _o__wtoi (Address: 0x180626988)
  • _o_abort (Address: 0x180626980)
  • _o_ceil (Address: 0x180626978)
  • _o_ceilf (Address: 0x180626970)
  • _o_expf (Address: 0x180626a10)
  • _o_floor (Address: 0x180626a08)
  • _o_floorf (Address: 0x180626a00)
  • _o_free (Address: 0x1806269b8)
  • _o_isdigit (Address: 0x180626870)
  • _o_iswprint (Address: 0x180626878)
  • _o_iswspace (Address: 0x180626880)
  • _o_log (Address: 0x180626888)
  • _o_logf (Address: 0x180626890)
  • _o_malloc (Address: 0x180626898)
  • _o_pow (Address: 0x1806268a8)
  • _o_powf (Address: 0x1806268b0)
  • _o_qsort (Address: 0x1806268b8)
  • _o_rand (Address: 0x1806268c0)
  • _o_realloc (Address: 0x180626ac8)
  • _o_sqrt (Address: 0x1806268c8)
  • _o_sqrtf (Address: 0x1806268d0)
  • _o_srand (Address: 0x1806268d8)
  • _o_strncpy_s (Address: 0x1806268e0)
  • _o_strtol (Address: 0x1806268e8)
  • _o_strtoul (Address: 0x1806268f0)
  • _o_terminate (Address: 0x1806268f8)
  • _o_towlower (Address: 0x180626900)
  • _o_wcscat_s (Address: 0x180626908)
  • _o_wcscpy_s (Address: 0x180626910)
  • _o_wcsncpy_s (Address: 0x180626918)
  • _o_wcstok_s (Address: 0x180626928)
  • _o_wcstol (Address: 0x180626930)
  • _o_wcstoul (Address: 0x180626938)
  • _o_wcstoull (Address: 0x180626940)
  • memcmp (Address: 0x180626ae0)
  • memcpy (Address: 0x180626ae8)
  • memmove (Address: 0x180626920)
  • strchr (Address: 0x180626948)
  • wcschr (Address: 0x1806268a0)
  • wcsrchr (Address: 0x180626950)
  • wcsstr (Address: 0x1806269c8)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x180626af8)
  • _initterm_e (Address: 0x180626b00)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x180626b40)
  • strcmp (Address: 0x180626b10)
  • strncmp (Address: 0x180626b28)
  • wcscmp (Address: 0x180626b20)
  • wcscspn (Address: 0x180626b18)
  • wcsncmp (Address: 0x180626b30)
  • wcspbrk (Address: 0x180626b48)
  • wcsspn (Address: 0x180626b38)
api-ms-win-crt-time-l1-1-0.dll
  • _time64 (Address: 0x180626b58)
api-ms-win-eventing-classicprovider-l1-1-0.dll
  • GetTraceEnableFlags (Address: 0x180626b88)
  • GetTraceEnableLevel (Address: 0x180626b78)
  • GetTraceLoggerHandle (Address: 0x180626b80)
  • RegisterTraceGuidsW (Address: 0x180626b70)
  • UnregisterTraceGuids (Address: 0x180626b68)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventActivityIdControl (Address: 0x180626b98)
  • EventRegister (Address: 0x180626ba8)
  • EventSetInformation (Address: 0x180626ba0)
  • EventUnregister (Address: 0x180626bb0)
  • EventWriteTransfer (Address: 0x180626bb8)
api-ms-win-security-base-l1-1-0.dll
  • AccessCheck (Address: 0x180626c90)
  • AddAccessAllowedAceEx (Address: 0x180626c48)
  • AddAccessDeniedAceEx (Address: 0x180626c38)
  • AddAce (Address: 0x180626c50)
  • AdjustTokenPrivileges (Address: 0x180626ca0)
  • CheckTokenMembership (Address: 0x180626c78)
  • CopySid (Address: 0x180626c58)
  • CreateWellKnownSid (Address: 0x180626c98)
  • DeleteAce (Address: 0x180626c80)
  • DuplicateToken (Address: 0x180626c08)
  • DuplicateTokenEx (Address: 0x180626bc8)
  • EqualSid (Address: 0x180626c88)
  • GetAce (Address: 0x180626c68)
  • GetAclInformation (Address: 0x180626c20)
  • GetFileSecurityW (Address: 0x180626c18)
  • GetLengthSid (Address: 0x180626c60)
  • GetSecurityDescriptorControl (Address: 0x180626c00)
  • GetSidIdentifierAuthority (Address: 0x180626be0)
  • GetSidLengthRequired (Address: 0x180626bd0)
  • GetSidSubAuthority (Address: 0x180626be8)
  • GetSidSubAuthorityCount (Address: 0x180626c10)
  • GetTokenInformation (Address: 0x180626ca8)
  • ImpersonateSelf (Address: 0x180626bf0)
  • InitializeAcl (Address: 0x180626c40)
  • InitializeSid (Address: 0x180626bd8)
  • IsValidSid (Address: 0x180626cb8)
  • IsWellKnownSid (Address: 0x180626c70)
  • RevertToSelf (Address: 0x180626bf8)
  • SetFileSecurityW (Address: 0x180626c28)
  • SetSecurityDescriptorOwner (Address: 0x180626c30)
  • SetTokenInformation (Address: 0x180626cb0)
api-ms-win-stateseparation-helpers-l1-1-0.dll
  • GetPersistedRegistryLocationW (Address: 0x180626cc8)
GDI32.dll
  • BitBlt (Address: 0x180624cd0)
  • CombineRgn (Address: 0x180624e30)
  • CreateCompatibleBitmap (Address: 0x180624d88)
  • CreateCompatibleDC (Address: 0x180624ca8)
  • CreateDCW (Address: 0x180624cc0)
  • CreateDIBSection (Address: 0x180624ca0)
  • CreateFontIndirectW (Address: 0x180624d50)
  • CreateFontW (Address: 0x180624e68)
  • CreatePen (Address: 0x180624da0)
  • CreatePolygonRgn (Address: 0x180624de8)
  • CreateRectRgn (Address: 0x180624da8)
  • CreateRectRgnIndirect (Address: 0x180624e18)
  • CreateSolidBrush (Address: 0x180624ce0)
  • DeleteDC (Address: 0x180624cb8)
  • DeleteMetaFile (Address: 0x180624d48)
  • DeleteObject (Address: 0x180624c78)
  • ExcludeClipRect (Address: 0x180624c98)
  • ExtSelectClipRgn (Address: 0x180624e08)
  • ExtTextOutW (Address: 0x180624e58)
  • GdiAlphaBlend (Address: 0x180624cc8)
  • GdiTransparentBlt (Address: 0x180624d00)
  • GetClipBox (Address: 0x180624d60)
  • GetClipRgn (Address: 0x180624db0)
  • GetCurrentObject (Address: 0x180624d98)
  • GetDeviceCaps (Address: 0x180624c90)
  • GetDIBColorTable (Address: 0x180624e60)
  • GetDIBits (Address: 0x180624cf0)
  • GetLayout (Address: 0x180624e88)
  • GetObjectType (Address: 0x180624e50)
  • GetObjectW (Address: 0x180624cd8)
  • GetPixel (Address: 0x180624e70)
  • GetRegionData (Address: 0x180624e40)
  • GetRgnBox (Address: 0x180624e38)
  • GetStockObject (Address: 0x180624c70)
  • GetTextAlign (Address: 0x180624df0)
  • GetTextColor (Address: 0x180624d68)
  • GetTextExtentPoint32A (Address: 0x180624e78)
  • GetTextExtentPoint32W (Address: 0x180624d70)
  • GetTextExtentPointW (Address: 0x180624c80)
  • GetTextMetricsW (Address: 0x180624d80)
  • GetViewportOrgEx (Address: 0x180624d58)
  • GetWindowOrgEx (Address: 0x180624e48)
  • IntersectClipRect (Address: 0x180624db8)
  • LineTo (Address: 0x180624de0)
  • LPtoDP (Address: 0x180624d20)
  • MoveToEx (Address: 0x180624dd8)
  • OffsetWindowOrgEx (Address: 0x180624e00)
  • PatBlt (Address: 0x180624dd0)
  • PlayMetaFile (Address: 0x180624d40)
  • Rectangle (Address: 0x180624d30)
  • RestoreDC (Address: 0x180624e20)
  • SaveDC (Address: 0x180624e28)
  • SelectClipRgn (Address: 0x180624dc0)
  • SelectObject (Address: 0x180624cb0)
  • SetBkColor (Address: 0x180624c60)
  • SetBkMode (Address: 0x180624ce8)
  • SetDCBrushColor (Address: 0x180624e10)
  • SetLayout (Address: 0x180624c68)
  • SetMapMode (Address: 0x180624d08)
  • SetMetaFileBitsEx (Address: 0x180624d28)
  • SetStretchBltMode (Address: 0x180624dc8)
  • SetTextAlign (Address: 0x180624d90)
  • SetTextColor (Address: 0x180624c88)
  • SetViewportExtEx (Address: 0x180624d18)
  • SetViewportOrgEx (Address: 0x180624d38)
  • SetWindowExtEx (Address: 0x180624d10)
  • SetWindowOrgEx (Address: 0x180624df8)
  • StretchBlt (Address: 0x180624cf8)
  • StretchDIBits (Address: 0x180624d78)
  • TextOutA (Address: 0x180624e80)
KERNELBASE.dll
  • ClosePackageInfo (Address: 0x180624e98)
  • CloseState (Address: 0x180624ed8)
  • GetCurrentPackageInfo (Address: 0x180624f18)
  • GetEffectivePackageStatusForUser (Address: 0x180624ec8)
  • GetPackageFullName (Address: 0x180624f10)
  • GetPackageInfo (Address: 0x180624ea0)
  • GetPackagesByPackageFamily (Address: 0x180624f20)
  • GetStagedPackagePathByFullName2 (Address: 0x180624eb8)
  • GetStateFolder (Address: 0x180624ee0)
  • GetSystemAppDataKey (Address: 0x180624f08)
  • IsMrtResourceRedirectionEnabled (Address: 0x180624eb0)
  • NotifyRedirectedStringChange (Address: 0x180624ec0)
  • OpenPackageInfoByFullName (Address: 0x180624ea8)
  • OpenState (Address: 0x180624ef0)
  • OpenStateExplicit (Address: 0x180624ee8)
  • PackageNameAndPublisherIdFromFamilyName (Address: 0x180624ef8)
  • ParseApplicationUserModelId (Address: 0x180624f00)
  • SHLoadIndirectStringInternal (Address: 0x180624ed0)
msvcp_win.dll
  • _Cnd_do_broadcast_at_thread_exit (Address: 0x180626e90)
  • _Thrd_id (Address: 0x180626e88)
  • _Thrd_join (Address: 0x180626d90)
  • _Thrd_yield (Address: 0x180626e28)
  • _Xtime_get_ticks (Address: 0x180626e80)
  • ?__ExceptionPtrAssign@@YAXPEAXPEBX@Z (Address: 0x180626e40)
  • ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z (Address: 0x180626e50)
  • ?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z (Address: 0x180626e20)
  • ?__ExceptionPtrCreate@@YAXPEAX@Z (Address: 0x180626e48)
  • ?__ExceptionPtrCurrentException@@YAXPEAX@Z (Address: 0x180626e38)
  • ?__ExceptionPtrDestroy@@YAXPEAX@Z (Address: 0x180626e58)
  • ?__ExceptionPtrRethrow@@YAXPEBX@Z (Address: 0x180626e60)
  • ?__ExceptionPtrToBool@@YA_NPEBX@Z (Address: 0x180626e68)
  • ?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ (Address: 0x180626da0)
  • ?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ (Address: 0x180626dd8)
  • ?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ (Address: 0x180626df0)
  • ?_Throw_Cpp_error@std@@YAXH@Z (Address: 0x180626cf0)
  • ?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ (Address: 0x180626db8)
  • ?_Xinvalid_argument@std@@YAXPEBD@Z (Address: 0x180626e70)
  • ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x180626e30)
  • ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x180626e78)
  • ??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ (Address: 0x180626d98)
  • ??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z (Address: 0x180626d10)
  • ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ (Address: 0x180626d08)
  • ??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x180626d88)
  • ??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x180626d60)
  • ??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ (Address: 0x180626d68)
  • ?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x180626cf8)
  • ?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x180626d20)
  • ?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x180626ce8)
  • ?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGXZ (Address: 0x180626e08)
  • ?flags@ios_base@std@@QEBAHXZ (Address: 0x180626de8)
  • ?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ (Address: 0x180626db0)
  • ?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z (Address: 0x180626d70)
  • ?good@ios_base@std@@QEBA_NXZ (Address: 0x180626dc8)
  • ?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x180626d80)
  • ?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x180626d28)
  • ?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x180626d18)
  • ?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ (Address: 0x180626d78)
  • ?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ (Address: 0x180626e00)
  • ?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z (Address: 0x180626d30)
  • ?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z (Address: 0x180626cd8)
  • ?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG0@Z (Address: 0x180626d00)
  • ?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z (Address: 0x180626ce0)
  • ?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z (Address: 0x180626e18)
  • ?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ (Address: 0x180626d40)
  • ?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z (Address: 0x180626df8)
  • ?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z (Address: 0x180626d50)
  • ?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ (Address: 0x180626dd0)
  • ?tellp@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ (Address: 0x180626e98)
  • ?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ (Address: 0x180626da8)
  • ?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ (Address: 0x180626d58)
  • ?uncaught_exception@std@@YA_NXZ (Address: 0x180626dc0)
  • ?width@ios_base@std@@QEAA_J_J@Z (Address: 0x180626e10)
  • ?width@ios_base@std@@QEBA_JXZ (Address: 0x180626de0)
  • ?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z (Address: 0x180626d38)
  • ?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z (Address: 0x180626d48)
ntdll.dll
  • EtwEventActivityIdControl (Address: 0x180626f98)
  • EtwEventEnabled (Address: 0x180626fa0)
  • EtwEventRegister (Address: 0x180626f90)
  • EtwEventSetInformation (Address: 0x180626f78)
  • EtwEventUnregister (Address: 0x180626f88)
  • EtwEventWrite (Address: 0x180626fa8)
  • EtwEventWriteTransfer (Address: 0x180626f80)
  • EtwGetTraceEnableFlags (Address: 0x180626ff8)
  • EtwGetTraceEnableLevel (Address: 0x180626ff0)
  • EtwGetTraceLoggerHandle (Address: 0x180626fe8)
  • EtwLogTraceEvent (Address: 0x1806270c0)
  • EtwRegisterTraceGuidsW (Address: 0x180627000)
  • EtwTraceMessage (Address: 0x180626fb0)
  • EtwUnregisterTraceGuids (Address: 0x180627008)
  • NtClose (Address: 0x180626f08)
  • NtCreateFile (Address: 0x180626f00)
  • NtFsControlFile (Address: 0x180626f10)
  • NtMapViewOfSection (Address: 0x180627098)
  • NtOpenFile (Address: 0x180626f28)
  • NtOpenProcessToken (Address: 0x180627018)
  • NtOpenThreadToken (Address: 0x1806270a0)
  • NtPowerInformation (Address: 0x180626fe0)
  • NtQueryInformationFile (Address: 0x180626ef0)
  • NtQueryInformationProcess (Address: 0x180626fd0)
  • NtQueryInformationThread (Address: 0x1806270a8)
  • NtQueryInformationToken (Address: 0x180627010)
  • NtQueryKey (Address: 0x1806270b0)
  • NtQueryObject (Address: 0x1806270b8)
  • NtQuerySystemInformation (Address: 0x180627078)
  • NtQueryWnfStateData (Address: 0x180626fb8)
  • NtSetInformationFile (Address: 0x180626f20)
  • NtSetInformationToken (Address: 0x1806270d8)
  • NtUnmapViewOfSection (Address: 0x1806270e0)
  • RtlAcquireResourceExclusive (Address: 0x180626ed0)
  • RtlCheckRegistryKey (Address: 0x180627080)
  • RtlCreateEnvironment (Address: 0x180626f60)
  • RtlDeleteResource (Address: 0x180626eb0)
  • RtlDeriveCapabilitySidsFromName (Address: 0x180627038)
  • RtlDestroyEnvironment (Address: 0x180626f70)
  • RtlDllShutdownInProgress (Address: 0x180627068)
  • RtlDosPathNameToNtPathName_U_WithStatus (Address: 0x180626f30)
  • RtlExpandEnvironmentStrings_U (Address: 0x180626f58)
  • RtlFreeHeap (Address: 0x180626f38)
  • RtlGetNtProductType (Address: 0x180627028)
  • RtlGetNtSystemRoot (Address: 0x180627090)
  • RtlHashUnicodeString (Address: 0x1806270f0)
  • RtlImageNtHeaderEx (Address: 0x1806270e8)
  • RtlInitializeResource (Address: 0x180626eb8)
  • RtlInitUnicodeString (Address: 0x180626ee0)
  • RtlInitUnicodeStringEx (Address: 0x180626f40)
  • RtlIsNonEmptyDirectoryReparsePointAllowed (Address: 0x180627058)
  • RtlIsPartialPlaceholder (Address: 0x180627070)
  • RtlMapGenericMask (Address: 0x180627020)
  • RtlNtStatusToDosError (Address: 0x180626ef8)
  • RtlNtStatusToDosErrorNoTeb (Address: 0x1806270c8)
  • RtlPrefixString (Address: 0x180626ee8)
  • RtlPublishWnfStateData (Address: 0x180626fc0)
  • RtlQueryEnvironmentVariable_U (Address: 0x180626f48)
  • RtlQueryRegistryValuesEx (Address: 0x180627088)
  • RtlQueryResourcePolicy (Address: 0x180626ed8)
  • RtlQueryWnfStateData (Address: 0x1806270d0)
  • RtlRandomEx (Address: 0x180627048)
  • RtlReleaseResource (Address: 0x180626ea8)
  • RtlSetCurrentEnvironment (Address: 0x180626f68)
  • RtlSetEnvironmentVariable (Address: 0x180626f50)
  • RtlSubscribeWnfStateChangeNotification (Address: 0x180626ec8)
  • RtlUnicodeStringToOemString (Address: 0x180626f18)
  • RtlUnsubscribeWnfStateChangeNotification (Address: 0x180626ec0)
  • ShipAssert (Address: 0x180627050)
  • WinSqmAddToStream (Address: 0x180627030)
  • WinSqmAddToStreamEx (Address: 0x180627040)
  • WinSqmIncrementDWORD (Address: 0x180626fc8)
  • WinSqmSetDWORD (Address: 0x180626fd8)
  • ZwQueryWnfStateData (Address: 0x180627060)
USER32.dll
  • (Address: 0x180625238)
  • (Address: 0x180625348)
  • (Address: 0x180625500)
  • (Address: 0x180624fc8)
  • (Address: 0x180625080)
  • (Address: 0x1806250e8)
  • ActivateKeyboardLayout (Address: 0x180625158)
  • AdjustWindowRect (Address: 0x180625370)
  • AdjustWindowRectEx (Address: 0x1806253b8)
  • AdjustWindowRectExForDpi (Address: 0x1806251e0)
  • AllowSetForegroundWindow (Address: 0x180625600)
  • AnimateWindow (Address: 0x180624f50)
  • AppendMenuW (Address: 0x180625860)
  • AreDpiAwarenessContextsEqual (Address: 0x180625758)
  • AttachThreadInput (Address: 0x1806253d0)
  • BeginDeferWindowPos (Address: 0x180625368)
  • BeginPaint (Address: 0x180625420)
  • BroadcastSystemMessageW (Address: 0x180625270)
  • CallNextHookEx (Address: 0x1806251b8)
  • CallWindowProcW (Address: 0x180625228)
  • ChangeClipboardChain (Address: 0x180625318)
  • ChangeWindowMessageFilterEx (Address: 0x180625490)
  • CheckDlgButton (Address: 0x180625760)
  • CheckMenuItem (Address: 0x180625328)
  • CheckMenuRadioItem (Address: 0x180625330)
  • CheckRadioButton (Address: 0x1806250a0)
  • ChildWindowFromPoint (Address: 0x180624f60)
  • ClientToScreen (Address: 0x1806250b8)
  • CloseClipboard (Address: 0x180625480)
  • CloseDesktop (Address: 0x1806252b0)
  • CloseGestureInfoHandle (Address: 0x180625300)
  • CopyAcceleratorTableW (Address: 0x1806253a0)
  • CopyIcon (Address: 0x1806255a8)
  • CopyImage (Address: 0x180625410)
  • CopyRect (Address: 0x1806251a0)
  • CountClipboardFormats (Address: 0x180625638)
  • CreateAcceleratorTableW (Address: 0x1806250b0)
  • CreateDialogIndirectParamW (Address: 0x180624f68)
  • CreateDialogParamW (Address: 0x180624f70)
  • CreateMenu (Address: 0x1806252d8)
  • CreatePopupMenu (Address: 0x180625780)
  • CreateWindowExW (Address: 0x180625230)
  • CreateWindowInBand (Address: 0x1806252c0)
  • CreateWindowIndirect (Address: 0x180625180)
  • DdeCreateDataHandle (Address: 0x180625040)
  • DdeCreateStringHandleW (Address: 0x180625038)
  • DdeDisconnect (Address: 0x180625020)
  • DdeFreeStringHandle (Address: 0x180625030)
  • DdeGetData (Address: 0x180625050)
  • DdeGetLastError (Address: 0x180625048)
  • DdeInitializeW (Address: 0x180625008)
  • DdeNameService (Address: 0x180625018)
  • DdeQueryConvInfo (Address: 0x180625058)
  • DdeQueryStringW (Address: 0x180625028)
  • DdeUninitialize (Address: 0x180625010)
  • DeferWindowPos (Address: 0x180625390)
  • DefWindowProcA (Address: 0x1806253d8)
  • DefWindowProcW (Address: 0x1806256d0)
  • DeleteMenu (Address: 0x180625770)
  • DeregisterShellHookWindow (Address: 0x1806253f0)
  • DestroyAcceleratorTable (Address: 0x180625398)
  • DestroyIcon (Address: 0x1806257b0)
  • DestroyMenu (Address: 0x180625778)
  • DestroyWindow (Address: 0x180625698)
  • DialogBoxIndirectParamW (Address: 0x180624f78)
  • DialogBoxParamW (Address: 0x180625258)
  • DispatchMessageW (Address: 0x180625798)
  • DisplayConfigGetDeviceInfo (Address: 0x180624ff0)
  • DrawEdge (Address: 0x180625310)
  • DrawFocusRect (Address: 0x1806257b8)
  • DrawIcon (Address: 0x1806257c0)
  • DrawIconEx (Address: 0x180624fa0)
  • DrawTextExW (Address: 0x1806250d0)
  • DrawTextW (Address: 0x1806255d8)
  • EmptyClipboard (Address: 0x180625458)
  • EnableMenuItem (Address: 0x180625650)
  • EnableWindow (Address: 0x180625700)
  • EndDeferWindowPos (Address: 0x180625360)
  • EndDialog (Address: 0x1806257d0)
  • EndMenu (Address: 0x1806252e0)
  • EndPaint (Address: 0x180625418)
  • EnumChildWindows (Address: 0x180625290)
  • EnumDisplayDevicesW (Address: 0x180625530)
  • EnumDisplayMonitors (Address: 0x180625090)
  • EnumDisplaySettingsW (Address: 0x180625068)
  • EnumPropsExW (Address: 0x1806254a0)
  • EnumWindows (Address: 0x1806255b0)
  • EqualRect (Address: 0x1806254c8)
  • ExitWindowsEx (Address: 0x180625680)
  • FillRect (Address: 0x1806255e8)
  • FindWindowExW (Address: 0x180625160)
  • FindWindowW (Address: 0x1806256e0)
  • GetAncestor (Address: 0x1806256f8)
  • GetAsyncKeyState (Address: 0x1806254f8)
  • GetCapture (Address: 0x180625140)
  • GetClassInfoExW (Address: 0x180625220)
  • GetClassInfoW (Address: 0x180625408)
  • GetClassLongPtrW (Address: 0x180625070)
  • GetClassLongW (Address: 0x180624f90)
  • GetClassNameW (Address: 0x1806256e8)
  • GetClientRect (Address: 0x1806257f8)
  • GetClipboardData (Address: 0x180625468)
  • GetClipboardOwner (Address: 0x180625648)
  • GetComboBoxInfo (Address: 0x180625448)
  • GetCurrentInputMessageSource (Address: 0x180624f98)
  • GetCursor (Address: 0x180624f30)
  • GetCursorPos (Address: 0x1806256b0)
  • GetDC (Address: 0x180625570)
  • GetDesktopWindow (Address: 0x180625560)
  • GetDialogBaseUnits (Address: 0x180625110)
  • GetDisplayConfigBufferSizes (Address: 0x180624f80)
  • GetDlgCtrlID (Address: 0x180625378)
  • GetDlgItem (Address: 0x180625818)
  • GetDlgItemInt (Address: 0x1806250c0)
  • GetDlgItemTextW (Address: 0x180625840)
  • GetDoubleClickTime (Address: 0x180625510)
  • GetDpiForSystem (Address: 0x180625260)
  • GetDpiForWindow (Address: 0x180625268)
  • GetFocus (Address: 0x180625688)
  • GetForegroundWindow (Address: 0x1806254f0)
  • GetGestureInfo (Address: 0x180625308)
  • GetIconInfo (Address: 0x180625498)
  • GetKeyboardLayout (Address: 0x180625588)
  • GetKeyState (Address: 0x180625658)
  • GetLastActivePopup (Address: 0x1806256a0)
  • GetLastInputInfo (Address: 0x1806251b0)
  • GetMenuDefaultItem (Address: 0x180625668)
  • GetMenuInfo (Address: 0x180624fc0)
  • GetMenuItemCount (Address: 0x180625678)
  • GetMenuItemID (Address: 0x180625618)
  • GetMenuItemInfoW (Address: 0x180625670)
  • GetMenuState (Address: 0x180625630)
  • GetMenuStringW (Address: 0x180625660)
  • GetMessageExtraInfo (Address: 0x1806252e8)
  • GetMessagePos (Address: 0x180624fb0)
  • GetMessageTime (Address: 0x1806250a8)
  • GetMessageW (Address: 0x1806257a8)
  • GetMonitorInfoW (Address: 0x1806254d8)
  • GetParent (Address: 0x180625750)
  • GetPointerDevices (Address: 0x1806251a8)
  • GetProcessDefaultLayout (Address: 0x180624fa8)
  • GetPropW (Address: 0x1806255b8)
  • GetScrollInfo (Address: 0x180625548)
  • GetShellWindow (Address: 0x180625278)
  • GetSubMenu (Address: 0x180625740)
  • GetSysColor (Address: 0x1806257c8)
  • GetSysColorBrush (Address: 0x1806255e0)
  • GetSystemMenu (Address: 0x1806251d0)
  • GetSystemMetrics (Address: 0x180625800)
  • GetSystemMetricsForDpi (Address: 0x180625170)
  • GetTaskmanWindow (Address: 0x180625400)
  • GetUpdateRect (Address: 0x180625148)
  • GetWindow (Address: 0x1806256d8)
  • GetWindowBand (Address: 0x1806254a8)
  • GetWindowDC (Address: 0x180625190)
  • GetWindowDpiAwarenessContext (Address: 0x1806253c0)
  • GetWindowLongPtrW (Address: 0x1806257d8)
  • GetWindowLongW (Address: 0x180625558)
  • GetWindowPlacement (Address: 0x180625280)
  • GetWindowRect (Address: 0x1806256b8)
  • GetWindowTextLengthW (Address: 0x180625460)
  • GetWindowTextW (Address: 0x1806257e8)
  • GetWindowThreadProcessId (Address: 0x180625590)
  • HideCaret (Address: 0x180624f38)
  • InflateRect (Address: 0x180625550)
  • InsertMenuItemW (Address: 0x180625320)
  • InsertMenuW (Address: 0x180625610)
  • IntersectRect (Address: 0x1806254d0)
  • InvalidateRect (Address: 0x180625820)
  • InvalidateRgn (Address: 0x180625440)
  • IsChild (Address: 0x180625518)
  • IsClipboardFormatAvailable (Address: 0x180625470)
  • IsDialogMessageW (Address: 0x1806251f0)
  • IsDlgButtonChecked (Address: 0x180625868)
  • IsHungAppWindow (Address: 0x180625640)
  • IsIconic (Address: 0x180625598)
  • IsMenu (Address: 0x1806255f8)
  • IsRectEmpty (Address: 0x180625210)
  • IsSETEnabled (Address: 0x1806254b8)
  • IsWindow (Address: 0x1806255a0)
  • IsWindowEnabled (Address: 0x1806252a8)
  • IsWindowUnicode (Address: 0x1806253e0)
  • IsWindowVisible (Address: 0x1806254e8)
  • IsWinEventHookInstalled (Address: 0x180624fb8)
  • KillTimer (Address: 0x1806256f0)
  • LoadAcceleratorsW (Address: 0x1806253a8)
  • LoadCursorW (Address: 0x180625828)
  • LoadIconW (Address: 0x180625428)
  • LoadImageW (Address: 0x1806251f8)
  • LoadMenuW (Address: 0x180625738)
  • LockSetForegroundWindow (Address: 0x180624f48)
  • MapDialogRect (Address: 0x180625438)
  • MapWindowPoints (Address: 0x180625430)
  • MessageBeep (Address: 0x180625608)
  • MessageBoxW (Address: 0x180625388)
  • ModifyMenuW (Address: 0x180625628)
  • MonitorFromPoint (Address: 0x180625248)
  • MonitorFromRect (Address: 0x180625488)
  • MonitorFromWindow (Address: 0x1806254e0)
  • MoveWindow (Address: 0x1806253b0)
  • MsgWaitForMultipleObjects (Address: 0x180625288)
  • MsgWaitForMultipleObjectsEx (Address: 0x180625708)
  • NotifyWinEvent (Address: 0x180625350)
  • OffsetRect (Address: 0x180625528)
  • OpenClipboard (Address: 0x180625478)
  • OpenInputDesktop (Address: 0x1806252b8)
  • PeekMessageW (Address: 0x180625710)
  • PostMessageW (Address: 0x180625788)
  • PostQuitMessage (Address: 0x180625718)
  • PostThreadMessageW (Address: 0x1806251d8)
  • PtInRect (Address: 0x1806255d0)
  • QueryDisplayConfig (Address: 0x180624f88)
  • RedrawWindow (Address: 0x1806252a0)
  • RegisterClassExW (Address: 0x180625540)
  • RegisterClassW (Address: 0x1806256c8)
  • RegisterClipboardFormatW (Address: 0x1806256c0)
  • RegisterPowerSettingNotification (Address: 0x180624fe8)
  • RegisterShellHookWindow (Address: 0x1806253e8)
  • RegisterWindowMessageA (Address: 0x180625108)
  • RegisterWindowMessageW (Address: 0x1806254c0)
  • ReleaseCapture (Address: 0x180625138)
  • ReleaseDC (Address: 0x180625568)
  • RemoveMenu (Address: 0x180625748)
  • RemovePropW (Address: 0x1806255c0)
  • ScreenToClient (Address: 0x180625850)
  • SendDlgItemMessageW (Address: 0x180625848)
  • SendMessageTimeoutW (Address: 0x180625580)
  • SendMessageW (Address: 0x180625858)
  • SendNotifyMessageW (Address: 0x180625578)
  • SetActiveWindow (Address: 0x180625450)
  • SetCapture (Address: 0x180625130)
  • SetClassLongPtrW (Address: 0x180625168)
  • SetClipboardData (Address: 0x180625298)
  • SetClipboardViewer (Address: 0x1806252c8)
  • SetCoalescableTimer (Address: 0x1806250d8)
  • SetCursor (Address: 0x180625830)
  • SetDialogDpiChangeBehavior (Address: 0x1806251e8)
  • SetDlgItemInt (Address: 0x1806250c8)
  • SetDlgItemTextA (Address: 0x180625380)
  • SetDlgItemTextW (Address: 0x180625838)
  • SetFocus (Address: 0x180625690)
  • SetForegroundWindow (Address: 0x180625720)
  • SetGestureConfig (Address: 0x1806252f8)
  • SetLayeredWindowAttributes (Address: 0x180625188)
  • SetMenu (Address: 0x180624f58)
  • SetMenuDefaultItem (Address: 0x180625620)
  • SetMenuInfo (Address: 0x180625198)
  • SetMenuItemInfoW (Address: 0x1806255f0)
  • SetMessageExtraInfo (Address: 0x180625340)
  • SetParent (Address: 0x180625218)
  • SetProcessDPIAware (Address: 0x180625790)
  • SetProgmanWindow (Address: 0x180625088)
  • SetPropW (Address: 0x1806255c8)
  • SetRect (Address: 0x180625208)
  • SetRectEmpty (Address: 0x180625250)
  • SetScrollInfo (Address: 0x1806250f8)
  • SetScrollPos (Address: 0x1806250e0)
  • SetShellWindow (Address: 0x180625078)
  • SetSysColors (Address: 0x180624fd0)
  • SetTaskmanWindow (Address: 0x1806253f8)
  • SetThreadDpiAwarenessContext (Address: 0x1806253c8)
  • SetTimer (Address: 0x180625768)
  • SetWindowCompositionAttribute (Address: 0x180625538)
  • SetWindowLongPtrW (Address: 0x1806257e0)
  • SetWindowLongW (Address: 0x180625240)
  • SetWindowPos (Address: 0x1806257f0)
  • SetWindowRgn (Address: 0x180625100)
  • SetWindowsHookExW (Address: 0x1806251c8)
  • SetWindowTextW (Address: 0x180625810)
  • ShowCaret (Address: 0x180624f40)
  • ShowScrollBar (Address: 0x1806250f0)
  • ShowWindow (Address: 0x180625808)
  • ShutdownBlockReasonCreate (Address: 0x180625730)
  • ShutdownBlockReasonDestroy (Address: 0x180625728)
  • SubtractRect (Address: 0x180625178)
  • SwitchToThisWindow (Address: 0x1806256a8)
  • SystemParametersInfoA (Address: 0x180625120)
  • SystemParametersInfoForDpi (Address: 0x180625118)
  • SystemParametersInfoW (Address: 0x1806254b0)
  • TrackMouseEvent (Address: 0x180625150)
  • TrackPopupMenu (Address: 0x180625358)
  • TrackPopupMenuEx (Address: 0x180625200)
  • TranslateAcceleratorW (Address: 0x1806252d0)
  • TranslateMessage (Address: 0x1806257a0)
  • UnhookWindowsHookEx (Address: 0x1806251c0)
  • UnhookWinEvent (Address: 0x180624fe0)
  • UnionRect (Address: 0x180625520)
  • UnpackDDElParam (Address: 0x180625000)
  • UnregisterPowerSettingNotification (Address: 0x180624fd8)
  • UpdateLayeredWindow (Address: 0x180625508)
  • UpdateWindow (Address: 0x1806252f0)
  • WaitMessage (Address: 0x180625060)
  • WindowFromDC (Address: 0x180625338)
  • WindowFromPoint (Address: 0x180625098)
  • WinHelpW (Address: 0x180625128)
  • wsprintfW (Address: 0x180624ff8)