RasWvdAddin.dll

Description: RasWvdClient plug-in

Authors: © 2026 Parallels International GmbH. All rights reserved.

Version: 22.0.28074.0

Architecture: Unknown (0xaa64)

Operating System: Windows

SHA256: 3c958342756ddd358616b6addfcd8bc0

File Size: 3.5 MB

Uploaded At: Sept. 2, 2026, 10:10 a.m.

Views: 4

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory

Exported Functions

  • VirtualChannelEntryEx (Ordinal: 1, Address: 0x7950)

Imported DLLs & Functions

ADVAPI32.dll
  • AddAccessAllowedAceEx (Address: 0x18026a040)
  • AdjustTokenPrivileges (Address: 0x18026a068)
  • CreateWellKnownSid (Address: 0x18026a038)
  • DeregisterEventSource (Address: 0x18026a0b0)
  • GetLengthSid (Address: 0x18026a080)
  • GetNamedSecurityInfoW (Address: 0x18026a050)
  • GetTokenInformation (Address: 0x18026a060)
  • InitializeAcl (Address: 0x18026a078)
  • InitializeSecurityDescriptor (Address: 0x18026a0d0)
  • LookupPrivilegeValueW (Address: 0x18026a070)
  • OpenProcessToken (Address: 0x18026a058)
  • RegCloseKey (Address: 0x18026a0a8)
  • RegCreateKeyExW (Address: 0x18026a098)
  • RegDeleteKeyW (Address: 0x18026a018)
  • RegDeleteValueW (Address: 0x18026a028)
  • RegEnumKeyExW (Address: 0x18026a020)
  • RegEnumKeyW (Address: 0x18026a010)
  • RegEnumValueW (Address: 0x18026a000)
  • RegisterEventSourceW (Address: 0x18026a0c0)
  • RegOpenKeyExW (Address: 0x18026a088)
  • RegQueryValueExW (Address: 0x18026a0a0)
  • RegQueryValueW (Address: 0x18026a008)
  • RegSetValueExW (Address: 0x18026a090)
  • ReportEventW (Address: 0x18026a0b8)
  • SetEntriesInAclW (Address: 0x18026a030)
  • SetNamedSecurityInfoW (Address: 0x18026a048)
  • SetSecurityDescriptorDacl (Address: 0x18026a0c8)
bcrypt.dll
  • BCryptGenRandom (Address: 0x18026b398)
dbghelp.dll
  • ImageDirectoryEntryToData (Address: 0x18026b3a8)
dwmapi.dll
  • DwmDefWindowProc (Address: 0x18026b3d8)
  • DwmInvalidateIconicBitmaps (Address: 0x18026b3e0)
  • DwmIsCompositionEnabled (Address: 0x18026b3d0)
  • DwmSetIconicLivePreviewBitmap (Address: 0x18026b3b8)
  • DwmSetIconicThumbnail (Address: 0x18026b3c0)
  • DwmSetWindowAttribute (Address: 0x18026b3c8)
GDI32.dll
  • BitBlt (Address: 0x18026a378)
  • CombineRgn (Address: 0x18026a188)
  • CopyMetaFileW (Address: 0x18026a3e0)
  • CreateBitmap (Address: 0x18026a390)
  • CreateCompatibleBitmap (Address: 0x18026a3b8)
  • CreateCompatibleDC (Address: 0x18026a3b0)
  • CreateDCW (Address: 0x18026a3c8)
  • CreateDIBitmap (Address: 0x18026a200)
  • CreateDIBSection (Address: 0x18026a228)
  • CreateEllipticRgn (Address: 0x18026a238)
  • CreateFontIndirectW (Address: 0x18026a190)
  • CreateHatchBrush (Address: 0x18026a370)
  • CreatePalette (Address: 0x18026a1d8)
  • CreatePatternBrush (Address: 0x18026a360)
  • CreatePen (Address: 0x18026a368)
  • CreatePolygonRgn (Address: 0x18026a250)
  • CreateRectRgn (Address: 0x18026a358)
  • CreateRectRgnIndirect (Address: 0x18026a198)
  • CreateRoundRectRgn (Address: 0x18026a268)
  • CreateSolidBrush (Address: 0x18026a350)
  • DeleteDC (Address: 0x18026a388)
  • DeleteObject (Address: 0x18026a380)
  • DPtoLP (Address: 0x18026a1b0)
  • Ellipse (Address: 0x18026a240)
  • EnumFontFamiliesExW (Address: 0x18026a1d0)
  • EnumFontFamiliesW (Address: 0x18026a208)
  • Escape (Address: 0x18026a348)
  • ExcludeClipRect (Address: 0x18026a340)
  • ExtFloodFill (Address: 0x18026a2b8)
  • ExtSelectClipRgn (Address: 0x18026a0e0)
  • ExtTextOutW (Address: 0x18026a140)
  • FillRgn (Address: 0x18026a298)
  • FrameRgn (Address: 0x18026a2a0)
  • GetBkColor (Address: 0x18026a1c0)
  • GetBoundsRect (Address: 0x18026a2a8)
  • GetClipBox (Address: 0x18026a338)
  • GetDeviceCaps (Address: 0x18026a3c0)
  • GetLayout (Address: 0x18026a110)
  • GetNearestPaletteIndex (Address: 0x18026a1e0)
  • GetObjectType (Address: 0x18026a330)
  • GetObjectW (Address: 0x18026a398)
  • GetPaletteEntries (Address: 0x18026a1e8)
  • GetPixel (Address: 0x18026a328)
  • GetRgnBox (Address: 0x18026a280)
  • GetStockObject (Address: 0x18026a320)
  • GetSystemPaletteEntries (Address: 0x18026a1f0)
  • GetTextCharsetInfo (Address: 0x18026a210)
  • GetTextColor (Address: 0x18026a248)
  • GetTextExtentPoint32W (Address: 0x18026a1b8)
  • GetTextFaceW (Address: 0x18026a2e0)
  • GetTextMetricsW (Address: 0x18026a3d0)
  • GetViewportExtEx (Address: 0x18026a318)
  • GetViewportOrgEx (Address: 0x18026a2d8)
  • GetWindowExtEx (Address: 0x18026a310)
  • GetWindowOrgEx (Address: 0x18026a2d0)
  • IntersectClipRect (Address: 0x18026a3d8)
  • LineTo (Address: 0x18026a308)
  • LPtoDP (Address: 0x18026a270)
  • MoveToEx (Address: 0x18026a130)
  • OffsetRgn (Address: 0x18026a288)
  • OffsetViewportOrgEx (Address: 0x18026a168)
  • OffsetWindowOrgEx (Address: 0x18026a170)
  • PatBlt (Address: 0x18026a1a0)
  • Polygon (Address: 0x18026a258)
  • Polyline (Address: 0x18026a260)
  • PtInRegion (Address: 0x18026a2b0)
  • PtVisible (Address: 0x18026a300)
  • RealizePalette (Address: 0x18026a1f8)
  • Rectangle (Address: 0x18026a278)
  • RectVisible (Address: 0x18026a2f8)
  • RestoreDC (Address: 0x18026a2f0)
  • RoundRect (Address: 0x18026a290)
  • SaveDC (Address: 0x18026a2e8)
  • ScaleViewportExtEx (Address: 0x18026a178)
  • ScaleWindowExtEx (Address: 0x18026a180)
  • SelectClipRgn (Address: 0x18026a1c8)
  • SelectObject (Address: 0x18026a0e8)
  • SelectPalette (Address: 0x18026a0f0)
  • SetBkColor (Address: 0x18026a3a8)
  • SetBkMode (Address: 0x18026a0f8)
  • SetDIBColorTable (Address: 0x18026a230)
  • SetLayout (Address: 0x18026a108)
  • SetMapMode (Address: 0x18026a100)
  • SetPaletteEntries (Address: 0x18026a2c0)
  • SetPixel (Address: 0x18026a218)
  • SetPixelV (Address: 0x18026a2c8)
  • SetPolyFillMode (Address: 0x18026a118)
  • SetRectRgn (Address: 0x18026a1a8)
  • SetROP2 (Address: 0x18026a120)
  • SetTextAlign (Address: 0x18026a128)
  • SetTextColor (Address: 0x18026a3a0)
  • SetViewportExtEx (Address: 0x18026a148)
  • SetViewportOrgEx (Address: 0x18026a150)
  • SetWindowExtEx (Address: 0x18026a158)
  • SetWindowOrgEx (Address: 0x18026a160)
  • StretchBlt (Address: 0x18026a220)
  • TextOutW (Address: 0x18026a138)
gdiplus.dll
  • GdipAlloc (Address: 0x18026b490)
  • GdipBitmapLockBits (Address: 0x18026b440)
  • GdipBitmapUnlockBits (Address: 0x18026b448)
  • GdipCloneImage (Address: 0x18026b430)
  • GdipCreateBitmapFromHBITMAP (Address: 0x18026b460)
  • GdipCreateBitmapFromScan0 (Address: 0x18026b438)
  • GdipCreateBitmapFromStream (Address: 0x18026b428)
  • GdipCreateFromHDC (Address: 0x18026b468)
  • GdipDeleteGraphics (Address: 0x18026b450)
  • GdipDisposeImage (Address: 0x18026b3f0)
  • GdipDrawImageI (Address: 0x18026b458)
  • GdipDrawImageRectI (Address: 0x18026b478)
  • GdipFree (Address: 0x18026b498)
  • GdipGetImageGraphicsContext (Address: 0x18026b3f8)
  • GdipGetImageHeight (Address: 0x18026b408)
  • GdipGetImagePalette (Address: 0x18026b418)
  • GdipGetImagePaletteSize (Address: 0x18026b420)
  • GdipGetImagePixelFormat (Address: 0x18026b410)
  • GdipGetImageWidth (Address: 0x18026b400)
  • GdiplusShutdown (Address: 0x18026b488)
  • GdiplusStartup (Address: 0x18026b480)
  • GdipSetInterpolationMode (Address: 0x18026b470)
IMM32.dll
  • ImmGetContext (Address: 0x18026a400)
  • ImmGetOpenStatus (Address: 0x18026a3f8)
  • ImmReleaseContext (Address: 0x18026a3f0)
KERNEL32.dll
  • AcquireSRWLockExclusive (Address: 0x18026a5b0)
  • ActivateActCtx (Address: 0x18026a768)
  • ApplicationRecoveryFinished (Address: 0x18026a630)
  • ApplicationRecoveryInProgress (Address: 0x18026a638)
  • CloseHandle (Address: 0x18026a9d8)
  • CompareStringW (Address: 0x18026a730)
  • CopyFileW (Address: 0x18026a798)
  • CreateActCtxW (Address: 0x18026a770)
  • CreateDirectoryW (Address: 0x18026a818)
  • CreateEventExW (Address: 0x18026a7d8)
  • CreateFileW (Address: 0x18026a838)
  • CreateMutexW (Address: 0x18026a8d0)
  • CreateThread (Address: 0x18026a4b0)
  • CreateToolhelp32Snapshot (Address: 0x18026a968)
  • DeactivateActCtx (Address: 0x18026a760)
  • DecodePointer (Address: 0x18026a980)
  • DeleteCriticalSection (Address: 0x18026a978)
  • DeleteFileW (Address: 0x18026a850)
  • DuplicateHandle (Address: 0x18026a7e8)
  • EncodePointer (Address: 0x18026a550)
  • EnterCriticalSection (Address: 0x18026a8e8)
  • ExitProcess (Address: 0x18026a480)
  • ExitThread (Address: 0x18026a4a8)
  • ExpandEnvironmentStringsW (Address: 0x18026a9c0)
  • FileTimeToLocalFileTime (Address: 0x18026a6b8)
  • FileTimeToSystemTime (Address: 0x18026a6a8)
  • FindActCtxSectionStringW (Address: 0x18026a758)
  • FindClose (Address: 0x18026a820)
  • FindFirstFileExW (Address: 0x18026a438)
  • FindFirstFileW (Address: 0x18026a830)
  • FindNextFileW (Address: 0x18026a828)
  • FindResourceExW (Address: 0x18026a5f0)
  • FindResourceW (Address: 0x18026aa00)
  • FlsAlloc (Address: 0x18026a4f8)
  • FlsFree (Address: 0x18026a4e0)
  • FlsGetValue (Address: 0x18026a4f0)
  • FlsSetValue (Address: 0x18026a4e8)
  • FlushFileBuffers (Address: 0x18026a708)
  • FormatMessageW (Address: 0x18026a8c0)
  • FreeEnvironmentStringsW (Address: 0x18026a410)
  • FreeLibrary (Address: 0x18026a938)
  • FreeLibraryAndExitThread (Address: 0x18026a800)
  • GetACP (Address: 0x18026a428)
  • GetCommandLineA (Address: 0x18026a4a0)
  • GetCommandLineW (Address: 0x18026a498)
  • GetConsoleMode (Address: 0x18026a470)
  • GetConsoleOutputCP (Address: 0x18026a460)
  • GetCPInfo (Address: 0x18026a548)
  • GetCurrentDirectoryW (Address: 0x18026a650)
  • GetCurrentProcess (Address: 0x18026a960)
  • GetCurrentProcessId (Address: 0x18026a918)
  • GetCurrentThread (Address: 0x18026a7e0)
  • GetCurrentThreadId (Address: 0x18026a8a8)
  • GetDriveTypeW (Address: 0x18026a4d8)
  • GetEnvironmentStringsW (Address: 0x18026a418)
  • GetFileAttributesExW (Address: 0x18026a610)
  • GetFileAttributesW (Address: 0x18026a880)
  • GetFileInformationByHandle (Address: 0x18026a4d0)
  • GetFileSize (Address: 0x18026a700)
  • GetFileSizeEx (Address: 0x18026a608)
  • GetFileTime (Address: 0x18026a600)
  • GetFileType (Address: 0x18026a4c8)
  • GetFullPathNameW (Address: 0x18026a6f8)
  • GetLastError (Address: 0x18026a9f8)
  • GetLocaleInfoEx (Address: 0x18026a620)
  • GetLocalTime (Address: 0x18026a9b0)
  • GetModuleFileNameW (Address: 0x18026a8f8)
  • GetModuleHandleA (Address: 0x18026a920)
  • GetModuleHandleExA (Address: 0x18026a940)
  • GetModuleHandleExW (Address: 0x18026a808)
  • GetModuleHandleW (Address: 0x18026a890)
  • GetOEMCP (Address: 0x18026a420)
  • GetPrivateProfileIntW (Address: 0x18026a720)
  • GetPrivateProfileStringW (Address: 0x18026a718)
  • GetProcAddress (Address: 0x18026a9e8)
  • GetProcessHeap (Address: 0x18026a970)
  • GetProfileIntW (Address: 0x18026a5d0)
  • GetStartupInfoW (Address: 0x18026a598)
  • GetStdHandle (Address: 0x18026a458)
  • GetStringTypeW (Address: 0x18026a558)
  • GetSystemInfo (Address: 0x18026a4b8)
  • GetSystemTime (Address: 0x18026a888)
  • GetSystemTimeAsFileTime (Address: 0x18026a668)
  • GetSystemTimePreciseAsFileTime (Address: 0x18026a560)
  • GetTempFileNameW (Address: 0x18026a840)
  • GetTempPathW (Address: 0x18026a848)
  • GetThreadPreferredUILanguages (Address: 0x18026a628)
  • GetTickCount64 (Address: 0x18026a5d8)
  • GetTimeZoneInformation (Address: 0x18026a448)
  • GetUserDefaultUILanguage (Address: 0x18026a5e8)
  • GetVersionExA (Address: 0x18026a860)
  • GetVersionExW (Address: 0x18026a788)
  • GetVolumeInformationW (Address: 0x18026a6f0)
  • GetWindowsDirectoryW (Address: 0x18026a5e0)
  • GlobalAddAtomW (Address: 0x18026a748)
  • GlobalAlloc (Address: 0x18026a7c8)
  • GlobalDeleteAtom (Address: 0x18026a780)
  • GlobalFindAtomW (Address: 0x18026a738)
  • GlobalFlags (Address: 0x18026a618)
  • GlobalFree (Address: 0x18026a7a8)
  • GlobalGetAtomNameW (Address: 0x18026a740)
  • GlobalHandle (Address: 0x18026a670)
  • GlobalLock (Address: 0x18026a7b0)
  • GlobalReAlloc (Address: 0x18026a678)
  • GlobalSize (Address: 0x18026a7c0)
  • GlobalUnlock (Address: 0x18026a7b8)
  • HeapAlloc (Address: 0x18026a988)
  • HeapFree (Address: 0x18026a9a8)
  • HeapQueryInformation (Address: 0x18026a490)
  • HeapReAlloc (Address: 0x18026a990)
  • HeapSize (Address: 0x18026a998)
  • InitializeCriticalSection (Address: 0x18026a8f0)
  • InitializeCriticalSectionAndSpinCount (Address: 0x18026a6a0)
  • InitializeCriticalSectionEx (Address: 0x18026a9a0)
  • InitializeSListHead (Address: 0x18026a588)
  • InterlockedFlushSList (Address: 0x18026a500)
  • IsDebuggerPresent (Address: 0x18026a540)
  • IsValidCodePage (Address: 0x18026a430)
  • LCMapStringW (Address: 0x18026a450)
  • LeaveCriticalSection (Address: 0x18026a8e0)
  • LoadLibraryExW (Address: 0x18026a7d0)
  • LoadLibraryW (Address: 0x18026a8b0)
  • LoadResource (Address: 0x18026aa08)
  • LocalAlloc (Address: 0x18026a858)
  • LocalFree (Address: 0x18026a8b8)
  • LocalReAlloc (Address: 0x18026a660)
  • LockFile (Address: 0x18026a6e8)
  • LockResource (Address: 0x18026aa10)
  • lstrcmpA (Address: 0x18026a928)
  • lstrcmpiA (Address: 0x18026a930)
  • lstrcmpiW (Address: 0x18026a948)
  • lstrcmpW (Address: 0x18026a778)
  • lstrcpyW (Address: 0x18026a5f8)
  • lstrlenW (Address: 0x18026a9b8)
  • Module32FirstW (Address: 0x18026a958)
  • Module32NextW (Address: 0x18026a950)
  • MoveFileW (Address: 0x18026a878)
  • MulDiv (Address: 0x18026a7a0)
  • MultiByteToWideChar (Address: 0x18026a9c8)
  • OpenEventW (Address: 0x18026a8a0)
  • OutputDebugStringA (Address: 0x18026a790)
  • OutputDebugStringW (Address: 0x18026a538)
  • PeekNamedPipe (Address: 0x18026a4c0)
  • QueryActCtxW (Address: 0x18026a750)
  • QueryPerformanceCounter (Address: 0x18026a590)
  • QueryPerformanceFrequency (Address: 0x18026a568)
  • RaiseException (Address: 0x18026a530)
  • ReadConsoleW (Address: 0x18026a468)
  • ReadFile (Address: 0x18026a6e0)
  • RegisterApplicationRecoveryCallback (Address: 0x18026a648)
  • RegisterApplicationRestart (Address: 0x18026a640)
  • RegisterWaitForSingleObject (Address: 0x18026a528)
  • ReleaseMutex (Address: 0x18026a8c8)
  • ReleaseSRWLockExclusive (Address: 0x18026a5b8)
  • ResumeThread (Address: 0x18026a7f0)
  • RtlLookupFunctionEntry (Address: 0x18026a518)
  • RtlPcToFileHeader (Address: 0x18026a508)
  • RtlUnwindEx (Address: 0x18026a510)
  • SearchPathW (Address: 0x18026a5c8)
  • SetEndOfFile (Address: 0x18026a6d8)
  • SetEnvironmentVariableW (Address: 0x18026a578)
  • SetErrorMode (Address: 0x18026a658)
  • SetEvent (Address: 0x18026a898)
  • SetFilePointer (Address: 0x18026a6d0)
  • SetFilePointerEx (Address: 0x18026a440)
  • SetLastError (Address: 0x18026a9f0)
  • SetStdHandle (Address: 0x18026a488)
  • SetThreadPriority (Address: 0x18026a728)
  • SetUnhandledExceptionFilter (Address: 0x18026a9e0)
  • SizeofResource (Address: 0x18026aa18)
  • Sleep (Address: 0x18026a5c0)
  • SleepConditionVariableSRW (Address: 0x18026a5a0)
  • SystemTimeToTzSpecificLocalTime (Address: 0x18026a6b0)
  • TerminateProcess (Address: 0x18026a478)
  • TlsAlloc (Address: 0x18026a698)
  • TlsFree (Address: 0x18026a680)
  • TlsGetValue (Address: 0x18026a690)
  • TlsSetValue (Address: 0x18026a688)
  • TryAcquireSRWLockExclusive (Address: 0x18026a570)
  • UnlockFile (Address: 0x18026a6c8)
  • UnregisterWait (Address: 0x18026a520)
  • VerifyVersionInfoW (Address: 0x18026a868)
  • VerSetConditionMask (Address: 0x18026a870)
  • VirtualAlloc (Address: 0x18026aa20)
  • VirtualProtect (Address: 0x18026a908)
  • VirtualQuery (Address: 0x18026a910)
  • WaitForMultipleObjects (Address: 0x18026a7f8)
  • WaitForSingleObject (Address: 0x18026a810)
  • WaitForSingleObjectEx (Address: 0x18026a8d8)
  • WakeAllConditionVariable (Address: 0x18026a5a8)
  • WideCharToMultiByte (Address: 0x18026a9d0)
  • WriteConsoleW (Address: 0x18026a580)
  • WriteFile (Address: 0x18026a6c0)
  • WritePrivateProfileStringW (Address: 0x18026a710)
  • WriteProcessMemory (Address: 0x18026a900)
MSIMG32.dll
  • AlphaBlend (Address: 0x18026aa38)
  • TransparentBlt (Address: 0x18026aa30)
ole32.dll
  • CoCreateGuid (Address: 0x18026b520)
  • CoCreateInstance (Address: 0x18026b540)
  • CoDisconnectObject (Address: 0x18026b510)
  • CoInitialize (Address: 0x18026b518)
  • CoInitializeEx (Address: 0x18026b508)
  • CoLockObjectExternal (Address: 0x18026b4e8)
  • CoSetProxyBlanket (Address: 0x18026b4a8)
  • CoTaskMemAlloc (Address: 0x18026b550)
  • CoTaskMemFree (Address: 0x18026b548)
  • CoUninitialize (Address: 0x18026b528)
  • CreateStreamOnHGlobal (Address: 0x18026b500)
  • DoDragDrop (Address: 0x18026b4f8)
  • IsAccelerator (Address: 0x18026b4b0)
  • OleCreateMenuDescriptor (Address: 0x18026b4c8)
  • OleDestroyMenuDescriptor (Address: 0x18026b4c0)
  • OleDuplicateData (Address: 0x18026b538)
  • OleGetClipboard (Address: 0x18026b4f0)
  • OleLockRunning (Address: 0x18026b4d0)
  • OleTranslateAccelerator (Address: 0x18026b4b8)
  • RegisterDragDrop (Address: 0x18026b4e0)
  • ReleaseStgMedium (Address: 0x18026b530)
  • RevokeDragDrop (Address: 0x18026b4d8)
OLEACC.dll
  • AccessibleObjectFromWindow (Address: 0x18026aa48)
  • CreateStdAccessibleObject (Address: 0x18026aa58)
  • LresultFromObject (Address: 0x18026aa50)
OLEAUT32.dll
  • LoadTypeLib (Address: 0x18026aac0)
  • SysAllocString (Address: 0x18026aa80)
  • SysAllocStringLen (Address: 0x18026aab8)
  • SysFreeString (Address: 0x18026aa78)
  • SysStringLen (Address: 0x18026aa88)
  • SystemTimeToVariantTime (Address: 0x18026aa90)
  • VarBstrFromDate (Address: 0x18026aaa8)
  • VariantChangeType (Address: 0x18026aab0)
  • VariantClear (Address: 0x18026aa70)
  • VariantCopy (Address: 0x18026aaa0)
  • VariantInit (Address: 0x18026aa68)
  • VariantTimeToSystemTime (Address: 0x18026aa98)
RPCRT4.dll
  • UuidFromStringW (Address: 0x18026aad0)
SHELL32.dll
  • DragFinish (Address: 0x18026aaf0)
  • DragQueryFileW (Address: 0x18026aae8)
  • InitNetworkAddressControl (Address: 0x18026aaf8)
  • SHAppBarMessage (Address: 0x18026ab38)
  • SHBrowseForFolderW (Address: 0x18026ab30)
  • SHCreateItemFromParsingName (Address: 0x18026ab00)
  • ShellExecuteExW (Address: 0x18026aae0)
  • ShellExecuteW (Address: 0x18026ab10)
  • SHGetDesktopFolder (Address: 0x18026ab28)
  • SHGetFileInfoW (Address: 0x18026ab40)
  • SHGetKnownFolderPath (Address: 0x18026ab08)
  • SHGetPathFromIDListW (Address: 0x18026ab18)
  • SHGetSpecialFolderLocation (Address: 0x18026ab20)
SHLWAPI.dll
  • PathAppendW (Address: 0x18026ab50)
  • PathFileExistsW (Address: 0x18026ab60)
  • PathFindExtensionW (Address: 0x18026aba8)
  • PathFindFileNameW (Address: 0x18026ab80)
  • PathIsUNCW (Address: 0x18026ab88)
  • PathRemoveFileSpecW (Address: 0x18026ab98)
  • PathStripToRootW (Address: 0x18026ab90)
  • SHCopyKeyW (Address: 0x18026ab70)
  • SHDeleteKeyW (Address: 0x18026ab68)
  • StrCpyNW (Address: 0x18026ab78)
  • StrFormatKBSizeW (Address: 0x18026aba0)
  • wnsprintfW (Address: 0x18026ab58)
USER32.dll
  • AdjustWindowRectEx (Address: 0x18026acb0)
  • AppendMenuW (Address: 0x18026b088)
  • BeginDeferWindowPos (Address: 0x18026ad50)
  • BeginPaint (Address: 0x18026ad20)
  • BringWindowToTop (Address: 0x18026b0b8)
  • CallNextHookEx (Address: 0x18026ac60)
  • CallWindowProcW (Address: 0x18026add8)
  • ChangeWindowMessageFilter (Address: 0x18026ad40)
  • CharUpperBuffW (Address: 0x18026b278)
  • CharUpperW (Address: 0x18026abf0)
  • CheckDlgButton (Address: 0x18026ae18)
  • CheckMenuItem (Address: 0x18026ac38)
  • ClientToScreen (Address: 0x18026ada0)
  • CloseClipboard (Address: 0x18026b190)
  • CopyAcceleratorTableW (Address: 0x18026b250)
  • CopyIcon (Address: 0x18026b1d8)
  • CopyImage (Address: 0x18026abc8)
  • CopyRect (Address: 0x18026b170)
  • CreateAcceleratorTableW (Address: 0x18026b240)
  • CreateDialogIndirectParamW (Address: 0x18026af20)
  • CreateMenu (Address: 0x18026b030)
  • CreatePopupMenu (Address: 0x18026b130)
  • CreateWindowExW (Address: 0x18026adc0)
  • DeferWindowPos (Address: 0x18026ad48)
  • DefFrameProcW (Address: 0x18026b298)
  • DefMDIChildProcW (Address: 0x18026b2a0)
  • DefWindowProcW (Address: 0x18026ade0)
  • DeleteMenu (Address: 0x18026abb8)
  • DestroyAcceleratorTable (Address: 0x18026b248)
  • DestroyCursor (Address: 0x18026b2b8)
  • DestroyIcon (Address: 0x18026ae48)
  • DestroyMenu (Address: 0x18026b138)
  • DestroyWindow (Address: 0x18026ad68)
  • DispatchMessageW (Address: 0x18026b048)
  • DrawEdge (Address: 0x18026b1b8)
  • DrawFocusRect (Address: 0x18026af78)
  • DrawFrameControl (Address: 0x18026b1c0)
  • DrawIcon (Address: 0x18026b1e8)
  • DrawIconEx (Address: 0x18026af80)
  • DrawMenuBar (Address: 0x18026b290)
  • DrawStateW (Address: 0x18026b1a8)
  • DrawTextExW (Address: 0x18026aea8)
  • DrawTextW (Address: 0x18026aea0)
  • EmptyClipboard (Address: 0x18026b1a0)
  • EnableMenuItem (Address: 0x18026ac30)
  • EnableScrollBar (Address: 0x18026ad80)
  • EnableWindow (Address: 0x18026b0f8)
  • EndDeferWindowPos (Address: 0x18026af88)
  • EndDialog (Address: 0x18026af28)
  • EndPaint (Address: 0x18026ad18)
  • EnumDisplayMonitors (Address: 0x18026b180)
  • EnumWindows (Address: 0x18026b010)
  • EqualRect (Address: 0x18026ae88)
  • FillRect (Address: 0x18026aed0)
  • FlashWindow (Address: 0x18026aff0)
  • FrameRect (Address: 0x18026b1e0)
  • GetActiveWindow (Address: 0x18026b0d8)
  • GetAsyncKeyState (Address: 0x18026af38)
  • GetCapture (Address: 0x18026b0e8)
  • GetClassInfoExW (Address: 0x18026adc8)
  • GetClassInfoW (Address: 0x18026b098)
  • GetClassLongPtrW (Address: 0x18026ac80)
  • GetClassNameW (Address: 0x18026afd0)
  • GetClientRect (Address: 0x18026acc0)
  • GetComboBoxInfo (Address: 0x18026b200)
  • GetCursorPos (Address: 0x18026ac00)
  • GetDC (Address: 0x18026abe8)
  • GetDesktopWindow (Address: 0x18026ae70)
  • GetDlgCtrlID (Address: 0x18026b0c8)
  • GetDlgItem (Address: 0x18026b0c0)
  • GetDoubleClickTime (Address: 0x18026b260)
  • GetFocus (Address: 0x18026ae08)
  • GetForegroundWindow (Address: 0x18026ad30)
  • GetIconInfo (Address: 0x18026aeb8)
  • GetKeyboardLayout (Address: 0x18026b218)
  • GetKeyboardState (Address: 0x18026b238)
  • GetKeyNameTextW (Address: 0x18026aee0)
  • GetKeyState (Address: 0x18026b0e0)
  • GetLastActivePopup (Address: 0x18026ae60)
  • GetMenu (Address: 0x18026b120)
  • GetMenuCheckMarkDimensions (Address: 0x18026ac20)
  • GetMenuDefaultItem (Address: 0x18026ada8)
  • GetMenuItemCount (Address: 0x18026b078)
  • GetMenuItemID (Address: 0x18026b070)
  • GetMenuItemInfoW (Address: 0x18026aef0)
  • GetMenuState (Address: 0x18026b060)
  • GetMenuStringW (Address: 0x18026b058)
  • GetMessagePos (Address: 0x18026adf0)
  • GetMessageTime (Address: 0x18026ade8)
  • GetMessageW (Address: 0x18026ac08)
  • GetMonitorInfoW (Address: 0x18026ac40)
  • GetNextDlgGroupItem (Address: 0x18026af70)
  • GetNextDlgTabItem (Address: 0x18026af30)
  • GetParent (Address: 0x18026afc8)
  • GetPropW (Address: 0x18026b008)
  • GetScrollInfo (Address: 0x18026ac50)
  • GetScrollPos (Address: 0x18026acf0)
  • GetScrollRange (Address: 0x18026ace0)
  • GetSubMenu (Address: 0x18026b068)
  • GetSysColor (Address: 0x18026b160)
  • GetSysColorBrush (Address: 0x18026abd8)
  • GetSystemMenu (Address: 0x18026af08)
  • GetSystemMetrics (Address: 0x18026b020)
  • GetTopWindow (Address: 0x18026ac78)
  • GetUpdateRect (Address: 0x18026b288)
  • GetWindow (Address: 0x18026ae58)
  • GetWindowDC (Address: 0x18026aec8)
  • GetWindowLongPtrW (Address: 0x18026ac90)
  • GetWindowLongW (Address: 0x18026ae80)
  • GetWindowPlacement (Address: 0x18026ad60)
  • GetWindowRect (Address: 0x18026acb8)
  • GetWindowRgn (Address: 0x18026b2c0)
  • GetWindowTextLengthW (Address: 0x18026ae00)
  • GetWindowTextW (Address: 0x18026aff8)
  • GetWindowThreadProcessId (Address: 0x18026ae68)
  • GrayStringW (Address: 0x18026aeb0)
  • HideCaret (Address: 0x18026ad88)
  • InflateRect (Address: 0x18026aed8)
  • InsertMenuItemW (Address: 0x18026b140)
  • InsertMenuW (Address: 0x18026b080)
  • IntersectRect (Address: 0x18026b178)
  • InvalidateRect (Address: 0x18026b150)
  • InvertRect (Address: 0x18026ad90)
  • IsCharAlphaW (Address: 0x18026b028)
  • IsCharLowerW (Address: 0x18026b220)
  • IsChild (Address: 0x18026ad70)
  • IsClipboardFormatAvailable (Address: 0x18026b280)
  • IsDialogMessageW (Address: 0x18026adf8)
  • IsIconic (Address: 0x18026b0b0)
  • IsMenu (Address: 0x18026adb8)
  • IsRectEmpty (Address: 0x18026af00)
  • IsWindow (Address: 0x18026afa0)
  • IsWindowEnabled (Address: 0x18026b100)
  • IsWindowVisible (Address: 0x18026b0a8)
  • IsZoomed (Address: 0x18026b1c8)
  • KillTimer (Address: 0x18026afb8)
  • LoadAcceleratorsW (Address: 0x18026b108)
  • LoadBitmapW (Address: 0x18026ac10)
  • LoadCursorW (Address: 0x18026abd0)
  • LoadIconW (Address: 0x18026ae50)
  • LoadImageW (Address: 0x18026ae40)
  • LoadMenuW (Address: 0x18026b118)
  • LockWindowUpdate (Address: 0x18026af60)
  • MapDialogRect (Address: 0x18026af40)
  • MapVirtualKeyExW (Address: 0x18026b228)
  • MapVirtualKeyW (Address: 0x18026aee8)
  • MapWindowPoints (Address: 0x18026aca0)
  • MessageBeep (Address: 0x18026ad78)
  • MessageBoxW (Address: 0x18026afd8)
  • ModifyMenuW (Address: 0x18026b268)
  • MonitorFromPoint (Address: 0x18026b1f8)
  • MonitorFromWindow (Address: 0x18026ac48)
  • MoveWindow (Address: 0x18026ae20)
  • NotifyWinEvent (Address: 0x18026ad98)
  • OffsetRect (Address: 0x18026ae90)
  • OpenClipboard (Address: 0x18026b188)
  • PeekMessageW (Address: 0x18026b038)
  • PostMessageW (Address: 0x18026afa8)
  • PostQuitMessage (Address: 0x18026b050)
  • PostThreadMessageW (Address: 0x18026b208)
  • PtInRect (Address: 0x18026ac98)
  • RealChildWindowFromPoint (Address: 0x18026ae98)
  • RedrawWindow (Address: 0x18026ad08)
  • RegisterClassW (Address: 0x18026add0)
  • RegisterClipboardFormatW (Address: 0x18026b270)
  • RegisterWindowMessageW (Address: 0x18026adb0)
  • ReleaseCapture (Address: 0x18026b0f0)
  • ReleaseDC (Address: 0x18026abe0)
  • RemoveMenu (Address: 0x18026b090)
  • RemovePropW (Address: 0x18026acc8)
  • ReuseDDElParam (Address: 0x18026ae28)
  • ScreenToClient (Address: 0x18026aca8)
  • ScrollWindow (Address: 0x18026ad00)
  • SendDlgItemMessageA (Address: 0x18026af18)
  • SendMessageW (Address: 0x18026afc0)
  • SetActiveWindow (Address: 0x18026b148)
  • SetCapture (Address: 0x18026af58)
  • SetClassLongPtrW (Address: 0x18026b1b0)
  • SetClipboardData (Address: 0x18026b198)
  • SetCursor (Address: 0x18026b158)
  • SetCursorPos (Address: 0x18026b1d0)
  • SetFocus (Address: 0x18026b0d0)
  • SetForegroundWindow (Address: 0x18026ad28)
  • SetLayeredWindowAttributes (Address: 0x18026ae10)
  • SetMenu (Address: 0x18026b128)
  • SetMenuDefaultItem (Address: 0x18026b258)
  • SetMenuItemBitmaps (Address: 0x18026ac28)
  • SetMenuItemInfoW (Address: 0x18026ac18)
  • SetParent (Address: 0x18026af10)
  • SetPropW (Address: 0x18026acd0)
  • SetRect (Address: 0x18026af50)
  • SetRectEmpty (Address: 0x18026b168)
  • SetScrollInfo (Address: 0x18026ac58)
  • SetScrollPos (Address: 0x18026acf8)
  • SetScrollRange (Address: 0x18026ace8)
  • SetTimer (Address: 0x18026afb0)
  • SetWindowLongPtrW (Address: 0x18026ac88)
  • SetWindowLongW (Address: 0x18026ae78)
  • SetWindowPlacement (Address: 0x18026ad58)
  • SetWindowPos (Address: 0x18026b0a0)
  • SetWindowRgn (Address: 0x18026af90)
  • SetWindowsHookExW (Address: 0x18026ac70)
  • SetWindowTextW (Address: 0x18026b000)
  • ShowOwnedPopups (Address: 0x18026abf8)
  • ShowScrollBar (Address: 0x18026acd8)
  • ShowWindow (Address: 0x18026afe8)
  • SubtractRect (Address: 0x18026b2b0)
  • SystemParametersInfoW (Address: 0x18026abc0)
  • TabbedTextOutW (Address: 0x18026aec0)
  • ToUnicodeEx (Address: 0x18026b230)
  • TrackMouseEvent (Address: 0x18026af68)
  • TrackPopupMenu (Address: 0x18026ad38)
  • TranslateAcceleratorW (Address: 0x18026b110)
  • TranslateMDISysAccel (Address: 0x18026b2a8)
  • TranslateMessage (Address: 0x18026b040)
  • UnhookWindowsHookEx (Address: 0x18026ac68)
  • UnionRect (Address: 0x18026aef8)
  • UnpackDDElParam (Address: 0x18026ae30)
  • UnregisterClassW (Address: 0x18026b018)
  • UpdateLayeredWindow (Address: 0x18026b1f0)
  • UpdateWindow (Address: 0x18026af98)
  • ValidateRect (Address: 0x18026ad10)
  • WaitForInputIdle (Address: 0x18026afe0)
  • WaitMessage (Address: 0x18026b210)
  • WindowFromPoint (Address: 0x18026af48)
  • WinHelpW (Address: 0x18026ae38)
USERENV.dll
  • UnloadUserProfile (Address: 0x18026b2d0)
UxTheme.dll
  • BeginBufferedPaint (Address: 0x18026b300)
  • BufferedPaintInit (Address: 0x18026b2f0)
  • BufferedPaintUnInit (Address: 0x18026b2f8)
  • CloseThemeData (Address: 0x18026b330)
  • DrawThemeBackground (Address: 0x18026b310)
  • DrawThemeParentBackground (Address: 0x18026b320)
  • DrawThemeTextEx (Address: 0x18026b2e8)
  • EndBufferedPaint (Address: 0x18026b308)
  • GetCurrentThemeName (Address: 0x18026b358)
  • GetThemeColor (Address: 0x18026b348)
  • GetThemePartSize (Address: 0x18026b338)
  • GetThemeSysColor (Address: 0x18026b2e0)
  • GetWindowTheme (Address: 0x18026b350)
  • IsAppThemed (Address: 0x18026b340)
  • IsThemeBackgroundPartiallyTransparent (Address: 0x18026b318)
  • OpenThemeData (Address: 0x18026b328)
WINMM.dll
  • PlaySoundW (Address: 0x18026b368)
WINSPOOL.DRV
  • ClosePrinter (Address: 0x18026b380)
  • DocumentPropertiesW (Address: 0x18026b388)
  • OpenPrinterW (Address: 0x18026b378)