WindowManagementAPI.dll

Description:

Authors:

Version:

Architecture: 64-bit

Operating System:

SHA256: 895500b6fa53882fab333c8a7041a64e

File Size: 643.2 KB

Uploaded At: Dec. 1, 2025, 7:43 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

CreateWindowInformation (Ordinal: 1, Address: 0x4620)
CreateWindowLayout (Ordinal: 2, Address: 0x47b0)
DllGetActivationFactory (Ordinal: 3, Address: 0x101f0)
DllGetClassObject (Ordinal: 4, Address: 0x20ef0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x18007d4d0)

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x18007d4e0)
CoCreateInstance (Address: 0x18007d518)
CoGetApartmentType (Address: 0x18007d510)
CoGetInterfaceAndReleaseStream (Address: 0x18007d4f0)
CoMarshalInterface (Address: 0x18007d500)
CoReleaseMarshalData (Address: 0x18007d508)
CoTaskMemAlloc (Address: 0x18007d4e8)
CreateStreamOnHGlobal (Address: 0x18007d4f8)

api-ms-win-core-com-l1-1-1.dll

RoGetAgileReference (Address: 0x18007d528)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18007d548)
IsDebuggerPresent (Address: 0x18007d540)
OutputDebugStringW (Address: 0x18007d538)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18007d558)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18007d568)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18007d588)
RaiseException (Address: 0x18007d578)
SetLastError (Address: 0x18007d580)
SetUnhandledExceptionFilter (Address: 0x18007d590)
UnhandledExceptionFilter (Address: 0x18007d598)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18007d5a8)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18007d5c8)
HeapAlloc (Address: 0x18007d5c0)
HeapFree (Address: 0x18007d5b8)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x18007d5d8)

api-ms-win-core-largeinteger-l1-1-0.dll

MulDiv (Address: 0x18007d5e8)

api-ms-win-core-libraryloader-l1-2-0.dll

GetModuleFileNameA (Address: 0x18007d610)
GetModuleHandleExW (Address: 0x18007d600)
GetModuleHandleW (Address: 0x18007d608)
GetProcAddress (Address: 0x18007d5f8)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18007d620)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x18007d638)
GetCurrentProcessId (Address: 0x18007d630)
GetCurrentThreadId (Address: 0x18007d640)
OpenProcessToken (Address: 0x18007d650)
TerminateProcess (Address: 0x18007d648)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x18007d660)
OpenProcess (Address: 0x18007d668)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18007d678)

api-ms-win-core-psm-app-l1-1-0.dll

PsmRegisterAppStateChangeNotification (Address: 0x18007d688)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18007d6a0)
RtlLookupFunctionEntry (Address: 0x18007d6a8)
RtlVirtualUnwind (Address: 0x18007d698)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18007d708)
AcquireSRWLockShared (Address: 0x18007d6c0)
CreateMutexExW (Address: 0x18007d6d8)
CreateSemaphoreExW (Address: 0x18007d730)
DeleteCriticalSection (Address: 0x18007d710)
EnterCriticalSection (Address: 0x18007d6f0)
InitializeCriticalSection (Address: 0x18007d738)
InitializeCriticalSectionEx (Address: 0x18007d718)
InitializeSRWLock (Address: 0x18007d6d0)
LeaveCriticalSection (Address: 0x18007d6e0)
OpenSemaphoreW (Address: 0x18007d6e8)
ReleaseMutex (Address: 0x18007d700)
ReleaseSemaphore (Address: 0x18007d728)
ReleaseSRWLockExclusive (Address: 0x18007d6c8)
ReleaseSRWLockShared (Address: 0x18007d6b8)
WaitForSingleObject (Address: 0x18007d720)
WaitForSingleObjectEx (Address: 0x18007d6f8)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x18007d750)
InitOnceComplete (Address: 0x18007d748)
InitOnceExecuteOnce (Address: 0x18007d760)
WaitOnAddress (Address: 0x18007d758)
WakeByAddressAll (Address: 0x18007d768)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x18007d778)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x18007d790)
CreateThreadpoolTimer (Address: 0x18007d788)
SetThreadpoolTimer (Address: 0x18007d7a0)
WaitForThreadpoolTimerCallbacks (Address: 0x18007d798)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x18007d7b0)
EncodePointer (Address: 0x18007d7b8)

api-ms-win-core-winrt-error-l1-1-0.dll

GetRestrictedErrorInfo (Address: 0x18007d7c8)
RoOriginateError (Address: 0x18007d7e0)
RoOriginateErrorW (Address: 0x18007d7d8)
RoTransformError (Address: 0x18007d7e8)
SetRestrictedErrorInfo (Address: 0x18007d7d0)

api-ms-win-core-winrt-error-l1-1-1.dll

IsErrorPropagationEnabled (Address: 0x18007d808)
RoGetMatchingRestrictedErrorInfo (Address: 0x18007d7f8)
RoReportFailedDelegate (Address: 0x18007d800)

api-ms-win-core-winrt-l1-1-0.dll

RoActivateInstance (Address: 0x18007d820)
RoGetActivationFactory (Address: 0x18007d818)

api-ms-win-core-winrt-propertysetprivate-l1-1-0.dll

RoCreateNonAgilePropertySet (Address: 0x18007d830)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCompareStringOrdinal (Address: 0x18007d848)
WindowsCreateString (Address: 0x18007d868)
WindowsCreateStringReference (Address: 0x18007d858)
WindowsDeleteString (Address: 0x18007d840)
WindowsDuplicateString (Address: 0x18007d850)
WindowsGetStringRawBuffer (Address: 0x18007d870)
WindowsIsStringEmpty (Address: 0x18007d860)
WindowsStringHasEmbeddedNull (Address: 0x18007d878)

api-ms-win-crt-math-l1-1-0.dll

ceilf (Address: 0x18007d888)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x18007d910)
__CxxFrameHandler3 (Address: 0x18007d918)
__CxxFrameHandler4 (Address: 0x18007d980)
__std_terminate (Address: 0x18007d978)
_CxxThrowException (Address: 0x18007d920)
_o___std_exception_copy (Address: 0x18007d950)
_o___std_exception_destroy (Address: 0x18007d948)
_o___std_type_info_destroy_list (Address: 0x18007d930)
_o___stdio_common_vsnprintf_s (Address: 0x18007d928)
_o___stdio_common_vswprintf (Address: 0x18007d960)
_o__callnewh (Address: 0x18007d970)
_o__cexit (Address: 0x18007d968)
_o__configure_narrow_argv (Address: 0x18007d958)
_o__crt_atexit (Address: 0x18007d938)
_o__errno (Address: 0x18007d940)
_o__execute_onexit_table (Address: 0x18007d8e8)
_o__free_base (Address: 0x18007d898)
_o__initialize_narrow_environment (Address: 0x18007d8a0)
_o__initialize_onexit_table (Address: 0x18007d8a8)
_o__invalid_parameter_noinfo (Address: 0x18007d8b0)
_o__invalid_parameter_noinfo_noreturn (Address: 0x18007d8b8)
_o__malloc_base (Address: 0x18007d8c0)
_o__purecall (Address: 0x18007d8c8)
_o__register_onexit_function (Address: 0x18007d8d0)
_o__seh_filter_dll (Address: 0x18007d8d8)
_o_free (Address: 0x18007d8f0)
_o_malloc (Address: 0x18007d8f8)
_o_realloc (Address: 0x18007d900)
_o_terminate (Address: 0x18007d908)
memcmp (Address: 0x18007d988)
memcpy (Address: 0x18007d990)
memmove (Address: 0x18007d8e0)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x18007d9a8)
_initterm_e (Address: 0x18007d9a0)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x18007d9b8)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x18007d9e0)
EventSetInformation (Address: 0x18007d9d8)
EventUnregister (Address: 0x18007d9d0)
EventWriteTransfer (Address: 0x18007d9c8)

api-ms-win-rtcore-ntuser-private-l1-1-0.dll

CreateWindowInBandEx (Address: 0x18007d9f0)

api-ms-win-rtcore-ntuser-private-l1-1-5.dll

(Address: 0x18007da08)
(Address: 0x18007da00)
(Address: 0x18007da10)

api-ms-win-rtcore-ntuser-private-l1-1-7.dll

IsOneCoreTransformMode (Address: 0x18007da20)

api-ms-win-rtcore-ntuser-private-l1-1-8.dll

AddVisualIdentifier (Address: 0x18007da30)

api-ms-win-rtcore-ntuser-window-l1-1-0.dll

DefWindowProcW (Address: 0x18007da78)
DestroyWindow (Address: 0x18007da50)
GetParent (Address: 0x18007da70)
GetWindowLongPtrW (Address: 0x18007da40)
GetWindowRect (Address: 0x18007da80)
RegisterClassExW (Address: 0x18007da88)
RegisterWindowMessageW (Address: 0x18007da68)
SetWindowLongPtrW (Address: 0x18007da48)
SetWindowPos (Address: 0x18007da58)
ShowWindow (Address: 0x18007da60)

api-ms-win-security-base-l1-1-0.dll

GetTokenInformation (Address: 0x18007da98)

api-ms-win-shcore-scaling-l1-1-1.dll

(Address: 0x18007daa8)

api-ms-win-shcore-taskpool-l1-1-0.dll

SHTaskPoolAllowThreadReuse (Address: 0x18007dac0)
SHTaskPoolQueueTask (Address: 0x18007dab8)

CoreMessaging.dll

CoreUICallCreateConversationHost (Address: 0x18007d460)
CoreUICallReceive (Address: 0x18007d468)
CoreUICallSend (Address: 0x18007d470)
CoreUICreate (Address: 0x18007d478)

msvcp_win.dll

?_Xbad_function_call@std@@YAXXZ (Address: 0x18007dad8)
?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18007dad0)

ntdll.dll

RtlNtStatusToDosError (Address: 0x18007dae8)

OLEAUT32.dll

SafeArrayCreateVector (Address: 0x18007d498)
SafeArrayDestroy (Address: 0x18007d488)
SafeArrayPutElement (Address: 0x18007d4b0)
SysAllocString (Address: 0x18007d4a8)
SysFreeString (Address: 0x18007d4a0)
VariantInit (Address: 0x18007d490)

SHCORE.dll

(Address: 0x18007d4c0)

twinapi.appcore.dll

(Address: 0x18007daf8)
(Address: 0x18007db00)
(Address: 0x18007db08)
(Address: 0x18007db10)