ole32.dll
Description: Microsoft OLE for Windows
Authors: © Microsoft Corporation. All rights reserved.
Version: 10.0.19041.5915
Architecture: 32-bit
Operating System: Windows NT
SHA256: 60bc39af69692154c27788a7facd8464
File Size: 907.5 KB
Uploaded At: Dec. 1, 2025, 8:02 a.m.
Views: 26
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- (Ordinal: 800, Address: 0x16410)
- (Ordinal: 801, Address: 0x71890)
- OleGetPackageClipboardOwner (Ordinal: 802, Address: 0x71b90)
- (Ordinal: 803, Address: 0x2c3d0)
- (Ordinal: 804, Address: 0x71860)
- CLIPFORMAT_UserFreeExt (Ordinal: 805, Address: 0xa9520)
- CLIPFORMAT_UserMarshalExt (Ordinal: 806, Address: 0xa9530)
- CLIPFORMAT_UserSizeExt (Ordinal: 807, Address: 0xa9550)
- CLIPFORMAT_UserUnmarshalExt (Ordinal: 808, Address: 0xa9570)
- ClipboardProcessUninitialize (Ordinal: 809, Address: 0x238e0)
- HPALETTE_UserFreeExt (Ordinal: 810, Address: 0xa9590)
- HPALETTE_UserMarshalExt (Ordinal: 811, Address: 0xa95a0)
- HPALETTE_UserSizeExt (Ordinal: 812, Address: 0xa95c0)
- HPALETTE_UserUnmarshalExt (Ordinal: 813, Address: 0xa95e0)
- HWND_UserFreeExt (Ordinal: 814, Address: 0xa9600)
- HWND_UserMarshalExt (Ordinal: 815, Address: 0xa9610)
- HWND_UserSizeExt (Ordinal: 816, Address: 0xa9630)
- HWND_UserUnmarshalExt (Ordinal: 817, Address: 0xa9650)
- MonikerLoadTypeLib (Ordinal: 818, Address: 0xa9670)
- ReadStorageProperties (Ordinal: 819, Address: 0x3f3f0)
- (Ordinal: 820, Address: 0x7ba10)
- (Ordinal: 821, Address: 0x7bb00)
- (Ordinal: 822, Address: 0x7b9e0)
- (Ordinal: 823, Address: 0x7bbe0)
- STGMEDIUM_UserFreeExt (Ordinal: 824, Address: 0xa9720)
- STGMEDIUM_UserMarshalExt (Ordinal: 825, Address: 0xa9730)
- STGMEDIUM_UserSizeExt (Ordinal: 826, Address: 0xa9750)
- STGMEDIUM_UserUnmarshalExt (Ordinal: 827, Address: 0xa9770)
- SetOleautModule (Ordinal: 828, Address: 0x29f00)
- StdTypesGetClassObject (Ordinal: 829, Address: 0x9ba90)
- StdTypesRegisterServer (Ordinal: 830, Address: 0x9bab0)
- WriteStorageProperties (Ordinal: 831, Address: 0xa9790)
- BindMoniker (Ordinal: 832, Address: 0x224d0)
- CLIPFORMAT_UserFree (Ordinal: 833, Address: 0xb5285)
- CLIPFORMAT_UserMarshal (Ordinal: 834, Address: 0xb52b8)
- CLIPFORMAT_UserSize (Ordinal: 835, Address: 0xb52eb)
- CLIPFORMAT_UserUnmarshal (Ordinal: 836, Address: 0xb5320)
- CLSIDFromOle1Class (Ordinal: 837, Address: 0xb5354)
- CLSIDFromProgID (Ordinal: 838, Address: 0xb539a)
- CLSIDFromProgIDEx (Ordinal: 839, Address: 0xb53d7)
- CLSIDFromString (Ordinal: 840, Address: 0xb5414)
- CStdAsyncStubBuffer2_Connect (Ordinal: 841, Address: 0xb545c)
- CStdAsyncStubBuffer2_Disconnect (Ordinal: 842, Address: 0xb54c2)
- CStdAsyncStubBuffer2_Release (Ordinal: 843, Address: 0xb5528)
- CStdAsyncStubBuffer_AddRef (Ordinal: 844, Address: 0xb5589)
- CStdAsyncStubBuffer_Connect (Ordinal: 845, Address: 0xb55e9)
- CStdAsyncStubBuffer_Disconnect (Ordinal: 846, Address: 0xb564d)
- CStdAsyncStubBuffer_Invoke (Ordinal: 847, Address: 0xb56b0)
- CStdAsyncStubBuffer_QueryInterface (Ordinal: 848, Address: 0xb5717)
- CStdAsyncStubBuffer_Release (Ordinal: 849, Address: 0xb577f)
- CStdStubBuffer2_Connect (Ordinal: 850, Address: 0xb57dc)
- CStdStubBuffer2_CountRefs (Ordinal: 851, Address: 0xb5837)
- CStdStubBuffer2_Disconnect (Ordinal: 852, Address: 0xb5895)
- CStdStubBuffer2_QueryInterface (Ordinal: 853, Address: 0xb58f8)
- CheckInitDde (Ordinal: 854, Address: 0x237b0)
- CleanROTForApartment (Ordinal: 855, Address: 0x243c0)
- ClearQITableEntry (Ordinal: 856, Address: 0x18220)
- CoAddRefServerProcess (Ordinal: 857, Address: 0xb598a)
- CoAicGetTokenForCOM (Ordinal: 858, Address: 0x3f1b0)
- CoAllowSetForegroundWindow (Ordinal: 859, Address: 0x17ea0)
- CoAllowUnmarshalerCLSID (Ordinal: 860, Address: 0xb5a02)
- CoBuildVersion (Ordinal: 861, Address: 0x18240)
- CoCancelCall (Ordinal: 862, Address: 0xb5a51)
- CoCheckElevationEnabled (Ordinal: 863, Address: 0x3f1f0)
- CoCopyProxy (Ordinal: 864, Address: 0xb5a9d)
- CoCreateFreeThreadedMarshaler (Ordinal: 865, Address: 0xb5ae2)
- CoCreateGuid (Ordinal: 866, Address: 0xb5b28)
- CoCreateInstance (Ordinal: 867, Address: 0xb5b61)
- CoCreateInstanceEx (Ordinal: 868, Address: 0xb5ba0)
- CoCreateInstanceFromApp (Ordinal: 869, Address: 0xb5be6)
- CoCreateObjectInContext (Ordinal: 870, Address: 0xb5c31)
- CoDeactivateObject (Ordinal: 871, Address: 0xb5c7f)
- CoDecodeProxy (Ordinal: 872, Address: 0xb5cc3)
- CoDecrementMTAUsage (Ordinal: 873, Address: 0xb5ced)
- CoDisableCallCancellation (Ordinal: 874, Address: 0xb5d36)
- CoDisconnectContext (Ordinal: 875, Address: 0xb5d7f)
- CoDisconnectObject (Ordinal: 876, Address: 0xb5dc1)
- CoDosDateTimeToFileTime (Ordinal: 877, Address: 0x4bf20)
- CoEnableCallCancellation (Ordinal: 878, Address: 0xb5e20)
- CoFileTimeNow (Ordinal: 879, Address: 0xb5e62)
- CoFileTimeToDosDateTime (Ordinal: 880, Address: 0x4bfc0)
- CoFreeAllLibraries (Ordinal: 881, Address: 0x2a490)
- CoFreeLibrary (Ordinal: 882, Address: 0x4a040)
- CoFreeUnusedLibraries (Ordinal: 883, Address: 0xb5eda)
- CoFreeUnusedLibrariesEx (Ordinal: 884, Address: 0xb5f23)
- CoGetActivationState (Ordinal: 885, Address: 0xb5f6b)
- CoGetApartmentID (Ordinal: 886, Address: 0xb5fb4)
- CoGetApartmentType (Ordinal: 887, Address: 0xb5ffb)
- CoGetCallContext (Ordinal: 888, Address: 0xb603a)
- CoGetCallState (Ordinal: 889, Address: 0xb6075)
- CoGetCallerTID (Ordinal: 890, Address: 0xb60b6)
- CoGetCancelObject (Ordinal: 891, Address: 0xb60f2)
- CoGetClassObject (Ordinal: 892, Address: 0xb6130)
- CoGetClassVersion (Ordinal: 893, Address: 0xb616e)
- CoGetComCatalog (Ordinal: 894, Address: 0xb61b3)
- CoGetContextToken (Ordinal: 895, Address: 0xb61f9)
- CoGetCurrentLogicalThreadId (Ordinal: 896, Address: 0xb6242)
- CoGetCurrentProcess (Ordinal: 897, Address: 0xb628d)
- CoGetDefaultContext (Ordinal: 898, Address: 0xb62d0)
- CoGetInstanceFromFile (Ordinal: 899, Address: 0xb6315)
- CoGetInstanceFromIStorage (Ordinal: 900, Address: 0xb6368)
- CoGetInterceptor (Ordinal: 901, Address: 0x4d590)
- CoGetInterceptorForOle32 (Ordinal: 902, Address: 0x1fd30)
- CoGetInterceptorFromTypeInfo (Ordinal: 903, Address: 0x1ec00)
- CoGetInterfaceAndReleaseStream (Ordinal: 904, Address: 0xb640b)
- CoGetMalloc (Ordinal: 905, Address: 0xb6451)
- CoGetMarshalSizeMax (Ordinal: 906, Address: 0xb648c)
- CoGetModuleType (Ordinal: 907, Address: 0xb64cb)
- CoGetObject (Ordinal: 908, Address: 0x24ee0)
- CoGetObjectContext (Ordinal: 909, Address: 0xb651d)
- CoGetPSClsid (Ordinal: 910, Address: 0xb6558)
- CoGetProcessIdentifier (Ordinal: 911, Address: 0xb6597)
- CoGetStandardMarshal (Ordinal: 912, Address: 0xb65e6)
- CoGetStdMarshalEx (Ordinal: 913, Address: 0xb6628)
- CoGetSystemSecurityPermissions (Ordinal: 914, Address: 0xb6674)
- CoGetSystemWow64DirectoryW (Ordinal: 915, Address: 0x3f210)
- CoGetTreatAsClass (Ordinal: 916, Address: 0xb66e3)
- CoHandlePriorityEventsFromMessagePump (Ordinal: 917, Address: 0xb6736)
- CoImpersonateClient (Ordinal: 918, Address: 0xb6757)
- CoIncrementMTAUsage (Ordinal: 919, Address: 0xb679a)
- CoInitialize (Ordinal: 920, Address: 0x29cb0)
- CoInitializeEx (Ordinal: 921, Address: 0xb67e5)
- CoInitializeSecurity (Ordinal: 922, Address: 0xb6824)
- CoInitializeWOW (Ordinal: 923, Address: 0x2dd40)
- CoInstall (Ordinal: 924, Address: 0x4a060)
- CoInvalidateRemoteMachineBindings (Ordinal: 925, Address: 0xb6890)
- CoIsHandlerConnected (Ordinal: 926, Address: 0xb68ea)
- CoIsOle1Class (Ordinal: 927, Address: 0x4b870)
- CoLoadLibrary (Ordinal: 928, Address: 0x4a140)
- CoLockObjectExternal (Ordinal: 929, Address: 0xb694b)
- CoMarshalHresult (Ordinal: 930, Address: 0xb698c)
- CoMarshalInterThreadInterfaceInStream (Ordinal: 931, Address: 0xb69de)
- CoMarshalInterface (Ordinal: 932, Address: 0xb6a32)
- CoPopServiceDomain (Ordinal: 933, Address: 0xb6a73)
- CoPushServiceDomain (Ordinal: 934, Address: 0xb6abd)
- CoQueryAuthenticationServices (Ordinal: 935, Address: 0xb6b12)
- CoQueryClientBlanket (Ordinal: 936, Address: 0xb6b60)
- CoQueryProxyBlanket (Ordinal: 937, Address: 0xb6ba4)
- CoQueryReleaseObject (Ordinal: 938, Address: 0x4a170)
- CoReactivateObject (Ordinal: 939, Address: 0xb6bfb)
- CoRegisterActivationFilter (Ordinal: 940, Address: 0xb6c4c)
- CoRegisterChannelHook (Ordinal: 941, Address: 0xb6c98)
- CoRegisterClassObject (Ordinal: 942, Address: 0xb6cbb)
- CoRegisterInitializeSpy (Ordinal: 943, Address: 0xb6d04)
- CoRegisterMallocSpy (Ordinal: 944, Address: 0xb6d53)
- CoRegisterMessageFilter (Ordinal: 945, Address: 0x2dd70)
- CoRegisterPSClsid (Ordinal: 946, Address: 0xb6db4)
- CoRegisterSurrogate (Ordinal: 947, Address: 0xb6df5)
- CoRegisterSurrogateEx (Ordinal: 948, Address: 0x2dd90)
- CoReleaseMarshalData (Ordinal: 949, Address: 0xb6e4f)
- CoReleaseServerProcess (Ordinal: 950, Address: 0xb6e96)
- CoResumeClassObjects (Ordinal: 951, Address: 0xb6edd)
- CoRetireServer (Ordinal: 952, Address: 0xb6f1c)
- CoRevertToSelf (Ordinal: 953, Address: 0xb6f5d)
- CoRevokeClassObject (Ordinal: 954, Address: 0xb6f9b)
- CoRevokeInitializeSpy (Ordinal: 955, Address: 0xb6fe0)
- CoRevokeMallocSpy (Ordinal: 956, Address: 0xb702b)
- CoSetCancelObject (Ordinal: 957, Address: 0xb7072)
- CoSetMessageDispatcher (Ordinal: 958, Address: 0xb70b6)
- CoSetProxyBlanket (Ordinal: 959, Address: 0xb70d5)
- CoSetState (Ordinal: 960, Address: 0x2a990)
- CoSuspendClassObjects (Ordinal: 961, Address: 0xb7123)
- CoSwitchCallContext (Ordinal: 962, Address: 0xb7168)
- CoTaskMemAlloc (Ordinal: 963, Address: 0xb71a6)
- CoTaskMemFree (Ordinal: 964, Address: 0xb71de)
- CoTaskMemRealloc (Ordinal: 965, Address: 0xb7218)
- CoTestCancel (Ordinal: 966, Address: 0xb7251)
- CoTreatAsClass (Ordinal: 967, Address: 0x4b8e0)
- CoUninitialize (Ordinal: 968, Address: 0xb7297)
- CoUnloadingWOW (Ordinal: 969, Address: 0x2ddb0)
- CoUnmarshalHresult (Ordinal: 970, Address: 0xb72e3)
- CoUnmarshalInterface (Ordinal: 971, Address: 0xb7326)
- CoVrfCheckThreadState (Ordinal: 972, Address: 0xb736c)
- CoVrfGetThreadState (Ordinal: 973, Address: 0xb73b9)
- CoVrfReleaseThreadState (Ordinal: 974, Address: 0xb7408)
- CoWaitForMultipleHandles (Ordinal: 975, Address: 0xb745c)
- CoWaitForMultipleObjects (Ordinal: 976, Address: 0xb74a9)
- ComPs_NdrDllCanUnloadNow (Ordinal: 977, Address: 0x2a520)
- ComPs_NdrDllGetClassObject (Ordinal: 978, Address: 0x4d7c0)
- ComPs_NdrDllRegisterProxy (Ordinal: 979, Address: 0x4dd30)
- ComPs_NdrDllUnregisterProxy (Ordinal: 980, Address: 0x4dd60)
- CreateAntiMoniker (Ordinal: 981, Address: 0x40700)
- CreateBindCtx (Ordinal: 982, Address: 0x22390)
- CreateClassMoniker (Ordinal: 983, Address: 0x41890)
- CreateDataAdviseHolder (Ordinal: 984, Address: 0x2a1d0)
- CreateDataCache (Ordinal: 985, Address: 0x6a790)
- CreateErrorInfo (Ordinal: 986, Address: 0xb75b1)
- CreateFileMoniker (Ordinal: 987, Address: 0x18740)
- CreateGenericComposite (Ordinal: 988, Address: 0x24920)
- CreateILockBytesOnHGlobal (Ordinal: 989, Address: 0x3f2e0)
- CreateItemMoniker (Ordinal: 990, Address: 0x22ed0)
- CreateObjrefMoniker (Ordinal: 991, Address: 0x40750)
- CreateOleAdviseHolder (Ordinal: 992, Address: 0x63300)
- CreatePointerMoniker (Ordinal: 993, Address: 0x29f20)
- CreateStdProgressIndicator (Ordinal: 994, Address: 0x2b0c0)
- CreateStreamOnHGlobal (Ordinal: 995, Address: 0xb76ab)
- DcomChannelSetHResult (Ordinal: 996, Address: 0xb76f2)
- DdeBindToObject (Ordinal: 997, Address: 0x575f0)
- DeletePatternAndExtensionTables (Ordinal: 998, Address: 0x3f230)
- DestroyRunningObjectTable (Ordinal: 999, Address: 0x56eb0)
- DllDebugObjectRPCHook (Ordinal: 1000, Address: 0xb7770)
- DllGetClassObject (Ordinal: 1001, Address: 0x24680)
- DllGetClassObjectWOW (Ordinal: 1002, Address: 0x24680)
- DllRegisterServer (Ordinal: 1003, Address: 0x2e560)
- DoDragDrop (Ordinal: 1004, Address: 0x7b810)
- DragDropSetFDT (Ordinal: 1005, Address: 0x7b970)
- EnableHookObject (Ordinal: 1006, Address: 0xb780d)
- FindExt (Ordinal: 1007, Address: 0x464d0)
- FmtIdToPropStgName (Ordinal: 1008, Address: 0x3f300)
- FreePropVariantArray (Ordinal: 1009, Address: 0x2c610)
- GetActiveObjectExt (Ordinal: 1010, Address: 0xa97c0)
- GetClassFile (Ordinal: 1011, Address: 0x46540)
- GetConvertStg (Ordinal: 1012, Address: 0x3f320)
- GetDocumentBitStg (Ordinal: 1013, Address: 0x3f340)
- GetErrorInfo (Ordinal: 1014, Address: 0xb78be)
- GetHGlobalFromILockBytes (Ordinal: 1015, Address: 0x3f360)
- GetHGlobalFromStream (Ordinal: 1016, Address: 0xb791e)
- GetHookInterface (Ordinal: 1017, Address: 0xb795f)
- GetObjectFromRotByPath (Ordinal: 1018, Address: 0x56f00)
- GetRunningObjectTable (Ordinal: 1019, Address: 0x27050)
- HACCEL_UserFree (Ordinal: 1020, Address: 0xb79d0)
- HACCEL_UserMarshal (Ordinal: 1021, Address: 0xb79fb)
- HACCEL_UserSize (Ordinal: 1022, Address: 0xb7a26)
- HACCEL_UserUnmarshal (Ordinal: 1023, Address: 0xb7a53)
- HBITMAP_UserFree (Ordinal: 1024, Address: 0xb7a81)
- HBITMAP_UserMarshal (Ordinal: 1025, Address: 0xb7aae)
- HBITMAP_UserSize (Ordinal: 1026, Address: 0xb7adb)
- HBITMAP_UserUnmarshal (Ordinal: 1027, Address: 0xb7b0a)
- HBRUSH_UserFree (Ordinal: 1028, Address: 0xb7b38)
- HBRUSH_UserMarshal (Ordinal: 1029, Address: 0xb7b63)
- HBRUSH_UserSize (Ordinal: 1030, Address: 0xb7b8e)
- HBRUSH_UserUnmarshal (Ordinal: 1031, Address: 0xb7bbb)
- HDC_UserFree (Ordinal: 1032, Address: 0xb7be5)
- HDC_UserMarshal (Ordinal: 1033, Address: 0xb7c0a)
- HDC_UserSize (Ordinal: 1034, Address: 0xb7c2f)
- HDC_UserUnmarshal (Ordinal: 1035, Address: 0xb7c56)
- HENHMETAFILE_UserFree (Ordinal: 1036, Address: 0x2e0a0)
- HENHMETAFILE_UserMarshal (Ordinal: 1037, Address: 0x2e0b0)
- HENHMETAFILE_UserSize (Ordinal: 1038, Address: 0x2e0c0)
- HENHMETAFILE_UserUnmarshal (Ordinal: 1039, Address: 0x2e0d0)
- HGLOBAL_UserFree (Ordinal: 1040, Address: 0xb7ce1)
- HGLOBAL_UserMarshal (Ordinal: 1041, Address: 0xb7d0e)
- HGLOBAL_UserSize (Ordinal: 1042, Address: 0xb7d3b)
- HGLOBAL_UserUnmarshal (Ordinal: 1043, Address: 0xb7d6a)
- HICON_UserFree (Ordinal: 1044, Address: 0xb7d97)
- HICON_UserMarshal (Ordinal: 1045, Address: 0xb7dc0)
- HICON_UserSize (Ordinal: 1046, Address: 0xb7de9)
- HICON_UserUnmarshal (Ordinal: 1047, Address: 0xb7e14)
- HMENU_UserFree (Ordinal: 1048, Address: 0xb7e3f)
- HMENU_UserMarshal (Ordinal: 1049, Address: 0xb7e68)
- HMENU_UserSize (Ordinal: 1050, Address: 0xb7e91)
- HMENU_UserUnmarshal (Ordinal: 1051, Address: 0xb7ebc)
- HMETAFILEPICT_UserFree (Ordinal: 1052, Address: 0x2e0e0)
- HMETAFILEPICT_UserMarshal (Ordinal: 1053, Address: 0x2e0f0)
- HMETAFILEPICT_UserSize (Ordinal: 1054, Address: 0x2e100)
- HMETAFILEPICT_UserUnmarshal (Ordinal: 1055, Address: 0x2e110)
- HMETAFILE_UserFree (Ordinal: 1056, Address: 0x2e120)
- HMETAFILE_UserMarshal (Ordinal: 1057, Address: 0x2e130)
- HMETAFILE_UserSize (Ordinal: 1058, Address: 0x2e140)
- HMETAFILE_UserUnmarshal (Ordinal: 1059, Address: 0x2e150)
- HMONITOR_UserFree (Ordinal: 1060, Address: 0xb7fa2)
- HMONITOR_UserMarshal (Ordinal: 1061, Address: 0xb7fd1)
- HMONITOR_UserSize (Ordinal: 1062, Address: 0xb8000)
- HMONITOR_UserUnmarshal (Ordinal: 1063, Address: 0xb8031)
- HPALETTE_UserFree (Ordinal: 1064, Address: 0xb8062)
- HPALETTE_UserMarshal (Ordinal: 1065, Address: 0xb8091)
- HPALETTE_UserSize (Ordinal: 1066, Address: 0xb80c0)
- HPALETTE_UserUnmarshal (Ordinal: 1067, Address: 0xb80f1)
- HRGN_UserFree (Ordinal: 1068, Address: 0xb811e)
- HRGN_UserMarshal (Ordinal: 1069, Address: 0xb8145)
- HRGN_UserSize (Ordinal: 1070, Address: 0xb816c)
- HRGN_UserUnmarshal (Ordinal: 1071, Address: 0xb8195)
- HWND_UserFree (Ordinal: 1072, Address: 0xb81be)
- HWND_UserMarshal (Ordinal: 1073, Address: 0xb81e5)
- HWND_UserSize (Ordinal: 1074, Address: 0xb820c)
- HWND_UserUnmarshal (Ordinal: 1075, Address: 0xb8235)
- HkOleRegisterObject (Ordinal: 1076, Address: 0xb8264)
- IIDFromString (Ordinal: 1077, Address: 0xb82a9)
- IsAccelerator (Ordinal: 1078, Address: 0x7d110)
- IsEqualGUID (Ordinal: 1079, Address: 0x247d0)
- IsRoInitializeASTAAllowedInDesktop (Ordinal: 1080, Address: 0x2c410)
- IsValidIid (Ordinal: 1081, Address: 0x2a520)
- IsValidInterface (Ordinal: 1082, Address: 0x26350)
- IsValidPtrIn (Ordinal: 1083, Address: 0x3f5f0)
- IsValidPtrOut (Ordinal: 1084, Address: 0x3f5f0)
- MkParseDisplayName (Ordinal: 1085, Address: 0x25ca0)
- MonikerCommonPrefixWith (Ordinal: 1086, Address: 0x43770)
- MonikerRelativePathTo (Ordinal: 1087, Address: 0x437f0)
- NdrOleInitializeExtension (Ordinal: 1088, Address: 0xb83a1)
- NdrProxyForwardingFunction10 (Ordinal: 1089, Address: 0xb83fb)
- NdrProxyForwardingFunction11 (Ordinal: 1090, Address: 0xb845e)
- NdrProxyForwardingFunction12 (Ordinal: 1091, Address: 0xb84c1)
- NdrProxyForwardingFunction13 (Ordinal: 1092, Address: 0xb8524)
- NdrProxyForwardingFunction14 (Ordinal: 1093, Address: 0xb8587)
- NdrProxyForwardingFunction15 (Ordinal: 1094, Address: 0xb85ea)
- NdrProxyForwardingFunction16 (Ordinal: 1095, Address: 0xb864d)
- NdrProxyForwardingFunction17 (Ordinal: 1096, Address: 0xb86b0)
- NdrProxyForwardingFunction18 (Ordinal: 1097, Address: 0xb8713)
- NdrProxyForwardingFunction19 (Ordinal: 1098, Address: 0xb8776)
- NdrProxyForwardingFunction20 (Ordinal: 1099, Address: 0xb87d9)
- NdrProxyForwardingFunction21 (Ordinal: 1100, Address: 0xb883c)
- NdrProxyForwardingFunction22 (Ordinal: 1101, Address: 0xb889f)
- NdrProxyForwardingFunction23 (Ordinal: 1102, Address: 0xb8902)
- NdrProxyForwardingFunction24 (Ordinal: 1103, Address: 0xb8965)
- NdrProxyForwardingFunction25 (Ordinal: 1104, Address: 0xb89c8)
- NdrProxyForwardingFunction26 (Ordinal: 1105, Address: 0xb8a2b)
- NdrProxyForwardingFunction27 (Ordinal: 1106, Address: 0xb8a8e)
- NdrProxyForwardingFunction28 (Ordinal: 1107, Address: 0xb8af1)
- NdrProxyForwardingFunction29 (Ordinal: 1108, Address: 0xb8b54)
- NdrProxyForwardingFunction30 (Ordinal: 1109, Address: 0xb8bb7)
- NdrProxyForwardingFunction31 (Ordinal: 1110, Address: 0xb8c1a)
- NdrProxyForwardingFunction32 (Ordinal: 1111, Address: 0xb8c7d)
- NdrProxyForwardingFunction3 (Ordinal: 1112, Address: 0xb8cdf)
- NdrProxyForwardingFunction4 (Ordinal: 1113, Address: 0xb8d40)
- NdrProxyForwardingFunction5 (Ordinal: 1114, Address: 0xb8da1)
- NdrProxyForwardingFunction6 (Ordinal: 1115, Address: 0xb8e02)
- NdrProxyForwardingFunction7 (Ordinal: 1116, Address: 0xb8e63)
- NdrProxyForwardingFunction8 (Ordinal: 1117, Address: 0xb8ec4)
- NdrProxyForwardingFunction9 (Ordinal: 1118, Address: 0xb8f25)
- ObjectStublessClient10 (Ordinal: 1119, Address: 0xb8f81)
- ObjectStublessClient11 (Ordinal: 1120, Address: 0xb8fd8)
- ObjectStublessClient12 (Ordinal: 1121, Address: 0xb902f)
- ObjectStublessClient13 (Ordinal: 1122, Address: 0xb9086)
- ObjectStublessClient14 (Ordinal: 1123, Address: 0xb90dd)
- ObjectStublessClient15 (Ordinal: 1124, Address: 0xb9134)
- ObjectStublessClient16 (Ordinal: 1125, Address: 0xb918b)
- ObjectStublessClient17 (Ordinal: 1126, Address: 0xb91e2)
- ObjectStublessClient18 (Ordinal: 1127, Address: 0xb9239)
- ObjectStublessClient19 (Ordinal: 1128, Address: 0xb9290)
- ObjectStublessClient20 (Ordinal: 1129, Address: 0xb92e7)
- ObjectStublessClient21 (Ordinal: 1130, Address: 0xb933e)
- ObjectStublessClient22 (Ordinal: 1131, Address: 0xb9395)
- ObjectStublessClient23 (Ordinal: 1132, Address: 0xb93ec)
- ObjectStublessClient24 (Ordinal: 1133, Address: 0xb9443)
- ObjectStublessClient25 (Ordinal: 1134, Address: 0xb949a)
- ObjectStublessClient26 (Ordinal: 1135, Address: 0xb94f1)
- ObjectStublessClient27 (Ordinal: 1136, Address: 0xb9548)
- ObjectStublessClient28 (Ordinal: 1137, Address: 0xb959f)
- ObjectStublessClient29 (Ordinal: 1138, Address: 0xb95f6)
- ObjectStublessClient30 (Ordinal: 1139, Address: 0xb964d)
- ObjectStublessClient31 (Ordinal: 1140, Address: 0xb96a4)
- ObjectStublessClient32 (Ordinal: 1141, Address: 0xb96fb)
- ObjectStublessClient3 (Ordinal: 1142, Address: 0xb9751)
- ObjectStublessClient4 (Ordinal: 1143, Address: 0xb97a6)
- ObjectStublessClient5 (Ordinal: 1144, Address: 0xb97fb)
- ObjectStublessClient6 (Ordinal: 1145, Address: 0xb9850)
- ObjectStublessClient7 (Ordinal: 1146, Address: 0xb98a5)
- ObjectStublessClient8 (Ordinal: 1147, Address: 0xb98fa)
- ObjectStublessClient9 (Ordinal: 1148, Address: 0xb994f)
- Ole32DllGetClassObject (Ordinal: 1149, Address: 0x24670)
- OleBuildVersion (Ordinal: 1150, Address: 0x18240)
- OleConvertIStorageToOLESTREAM (Ordinal: 1151, Address: 0x8e7b0)
- OleConvertIStorageToOLESTREAMEx (Ordinal: 1152, Address: 0x8e810)
- OleConvertOLESTREAMToIStorage2 (Ordinal: 1153, Address: 0x2f7e0)
- OleConvertOLESTREAMToIStorage (Ordinal: 1154, Address: 0x8e980)
- OleConvertOLESTREAMToIStorageEx2 (Ordinal: 1155, Address: 0x2f890)
- OleConvertOLESTREAMToIStorageEx (Ordinal: 1156, Address: 0x8e9b0)
- OleCreate (Ordinal: 1157, Address: 0x652a0)
- OleCreateDefaultHandler (Ordinal: 1158, Address: 0x81130)
- OleCreateEmbeddingHelper (Ordinal: 1159, Address: 0x81160)
- OleCreateEx (Ordinal: 1160, Address: 0x652f0)
- OleCreateFontIndirectExt (Ordinal: 1161, Address: 0x9eb80)
- OleCreateFromData (Ordinal: 1162, Address: 0x65450)
- OleCreateFromDataEx (Ordinal: 1163, Address: 0x654a0)
- OleCreateFromFile (Ordinal: 1164, Address: 0x65610)
- OleCreateFromFileEx (Ordinal: 1165, Address: 0x65660)
- OleCreateLink (Ordinal: 1166, Address: 0x65820)
- OleCreateLinkEx (Ordinal: 1167, Address: 0x65870)
- OleCreateLinkFromData (Ordinal: 1168, Address: 0x65940)
- OleCreateLinkFromDataEx (Ordinal: 1169, Address: 0x65990)
- OleCreateLinkToFile (Ordinal: 1170, Address: 0x65bd0)
- OleCreateLinkToFileEx (Ordinal: 1171, Address: 0x65c20)
- OleCreateMenuDescriptor (Ordinal: 1172, Address: 0x7d2a0)
- OleCreatePictureIndirectExt (Ordinal: 1173, Address: 0xa3160)
- OleCreatePropertyFrameIndirectExt (Ordinal: 1174, Address: 0xa4f80)
- OleCreateStaticFromData (Ordinal: 1175, Address: 0x65e20)
- OleDestroyMenuDescriptor (Ordinal: 1176, Address: 0x7d3d0)
- OleDoAutoConvert (Ordinal: 1177, Address: 0x66140)
- OleDraw (Ordinal: 1178, Address: 0x66710)
- OleDuplicateData (Ordinal: 1179, Address: 0x667a0)
- OleFlushClipboard (Ordinal: 1180, Address: 0x1e8c0)
- OleGetAutoConvert (Ordinal: 1181, Address: 0x81830)
- OleGetClipboard (Ordinal: 1182, Address: 0x195e0)
- OleGetClipboardWithEnterpriseInfo (Ordinal: 1183, Address: 0x6fbb0)
- OleGetIconOfClass (Ordinal: 1184, Address: 0x828f0)
- OleGetIconOfFile (Ordinal: 1185, Address: 0x82a50)
- OleIconToCursorExt (Ordinal: 1186, Address: 0xa3280)
- OleInitialize (Ordinal: 1187, Address: 0x23b10)
- OleInitializeWOW (Ordinal: 1188, Address: 0x673c0)
- OleIsCurrentClipboard (Ordinal: 1189, Address: 0x1a850)
- OleIsRunning (Ordinal: 1190, Address: 0x668b0)
- OleLoad (Ordinal: 1191, Address: 0x66260)
- OleLoadFromStream (Ordinal: 1192, Address: 0x40b40)
- OleLoadPictureExt (Ordinal: 1193, Address: 0xa36b0)
- OleLoadPictureFileExt (Ordinal: 1194, Address: 0xa52e0)
- OleLoadPicturePathExt (Ordinal: 1195, Address: 0xa3790)
- OleLockRunning (Ordinal: 1196, Address: 0x66920)
- OleMetafilePictFromIconAndLabel (Ordinal: 1197, Address: 0x82d60)
- OleNoteObjectVisible (Ordinal: 1198, Address: 0x669a0)
- OleQueryCreateFromData (Ordinal: 1199, Address: 0x66310)
- OleQueryLinkFromData (Ordinal: 1200, Address: 0x1afc0)
- OleRegEnumFormatEtc (Ordinal: 1201, Address: 0x84530)
- OleRegEnumVerbs (Ordinal: 1202, Address: 0x84e90)
- OleRegGetMiscStatus (Ordinal: 1203, Address: 0x819f0)
- OleRegGetUserType (Ordinal: 1204, Address: 0x81b10)
- OleReleaseEnumVerbCache (Ordinal: 1205, Address: 0x2a0e0)
- OleRun (Ordinal: 1206, Address: 0x2c360)
- OleSave (Ordinal: 1207, Address: 0x17fd0)
- OleSavePictureFileExt (Ordinal: 1208, Address: 0xa53b0)
- OleSaveToStream (Ordinal: 1209, Address: 0x2c2c0)
- OleSetAutoConvert (Ordinal: 1210, Address: 0x81ed0)
- OleSetClipboard (Ordinal: 1211, Address: 0x1b5a0)
- OleSetContainedObject (Ordinal: 1212, Address: 0x669c0)
- OleSetMenuDescriptor (Ordinal: 1213, Address: 0x7d410)
- OleTranslateAccelerator (Ordinal: 1214, Address: 0x7d560)
- OleTranslateColorExt (Ordinal: 1215, Address: 0x2a260)
- OleUninitialize (Ordinal: 1216, Address: 0x275d0)
- OpenOrCreateStream (Ordinal: 1217, Address: 0x8f2e0)
- ProgIDFromCLSID (Ordinal: 1218, Address: 0xb9f3a)
- PropStgNameToFmtId (Ordinal: 1219, Address: 0x3f380)
- PropSysAllocString (Ordinal: 1220, Address: 0x3f3a0)
- PropSysFreeString (Ordinal: 1221, Address: 0x3f3c0)
- PropVariantChangeType (Ordinal: 1222, Address: 0x3f3d0)
- PropVariantClear (Ordinal: 1223, Address: 0x2c640)
- PropVariantCopy (Ordinal: 1224, Address: 0x2c660)
- ReadClassStg (Ordinal: 1225, Address: 0x3f3f0)
- ReadClassStm (Ordinal: 1226, Address: 0x2c480)
- ReadFmtUserTypeStg (Ordinal: 1227, Address: 0x1e380)
- ReadOleStg (Ordinal: 1228, Address: 0x66c40)
- ReadStringStream (Ordinal: 1229, Address: 0x8f340)
- RegisterActiveObjectExt (Ordinal: 1230, Address: 0x17bb0)
- RegisterDragDrop (Ordinal: 1231, Address: 0x23c50)
- ReleaseStgMedium (Ordinal: 1232, Address: 0x24300)
- RevokeActiveObjectExt (Ordinal: 1233, Address: 0x180e0)
- RevokeDragDrop (Ordinal: 1234, Address: 0x23960)
- RoGetAgileReference (Ordinal: 1235, Address: 0xba090)
- SNB_UserFree (Ordinal: 1236, Address: 0x2e160)
- SNB_UserMarshal (Ordinal: 1237, Address: 0x2e170)
- SNB_UserSize (Ordinal: 1238, Address: 0x2e180)
- SNB_UserUnmarshal (Ordinal: 1239, Address: 0x2e190)
- STGMEDIUM_UserFree (Ordinal: 1240, Address: 0x2e1a0)
- STGMEDIUM_UserMarshal (Ordinal: 1241, Address: 0x2e1b0)
- STGMEDIUM_UserSize (Ordinal: 1242, Address: 0x2e1c0)
- STGMEDIUM_UserUnmarshal (Ordinal: 1243, Address: 0x2e1d0)
- SetConvertStg (Ordinal: 1244, Address: 0x66d90)
- SetDocumentBitStg (Ordinal: 1245, Address: 0x66dc0)
- SetErrorInfo (Ordinal: 1246, Address: 0xba17c)
- SetWOWThunkGlobalPtr (Ordinal: 1247, Address: 0x3f2c0)
- StgConvertPropertyToVariant (Ordinal: 1248, Address: 0x3f410)
- StgConvertVariantToProperty (Ordinal: 1249, Address: 0x3f430)
- StgCreateDocfile (Ordinal: 1250, Address: 0x18200)
- StgCreateDocfileOnILockBytes (Ordinal: 1251, Address: 0x3f450)
- StgCreatePropSetStg (Ordinal: 1252, Address: 0x3f470)
- StgCreatePropStg (Ordinal: 1253, Address: 0x3f490)
- StgCreateStorageEx (Ordinal: 1254, Address: 0x18140)
- StgGetIFillLockBytesOnFile (Ordinal: 1255, Address: 0x3f4b0)
- StgGetIFillLockBytesOnILockBytes (Ordinal: 1256, Address: 0x3f4d0)
- StgIsStorageFile (Ordinal: 1257, Address: 0x18170)
- StgIsStorageILockBytes (Ordinal: 1258, Address: 0x3f4f0)
- StgOpenAsyncDocfileOnIFillLockBytes (Ordinal: 1259, Address: 0x3f510)
- StgOpenPropStg (Ordinal: 1260, Address: 0x3f530)
- StgOpenStorage (Ordinal: 1261, Address: 0x29db0)
- StgOpenStorageEx (Ordinal: 1262, Address: 0x181b0)
- StgOpenStorageOnHandle (Ordinal: 1263, Address: 0x3f550)
- StgOpenStorageOnILockBytes (Ordinal: 1264, Address: 0x3f570)
- StgPropertyLengthAsVariant (Ordinal: 1265, Address: 0x3f590)
- StgSetTimes (Ordinal: 1266, Address: 0x3f5b0)
- StoreQITableEntry (Ordinal: 1267, Address: 0x2a300)
- StringFromCLSID (Ordinal: 1268, Address: 0xba393)
- StringFromGUID2 (Ordinal: 1269, Address: 0xba3ce)
- StringFromIID (Ordinal: 1270, Address: 0xba407)
- UpdateDCOMSettings (Ordinal: 1271, Address: 0xba443)
- UpdateProcessTracing (Ordinal: 1272, Address: 0xba48e)
- UtConvertDvtd16toDvtd32 (Ordinal: 1273, Address: 0x900a0)
- UtConvertDvtd32toDvtd16 (Ordinal: 1274, Address: 0x902c0)
- UtGetDvtd16Info (Ordinal: 1275, Address: 0x90520)
- UtGetDvtd32Info (Ordinal: 1276, Address: 0x90650)
- WdtpInterfacePointer_UserFree (Ordinal: 1277, Address: 0xba534)
- WdtpInterfacePointer_UserMarshal (Ordinal: 1278, Address: 0xba57b)
- WdtpInterfacePointer_UserSize (Ordinal: 1279, Address: 0xba5c2)
- WdtpInterfacePointer_UserUnmarshal (Ordinal: 1280, Address: 0xba60b)
- WriteClassStg (Ordinal: 1281, Address: 0x181d0)
- WriteClassStm (Ordinal: 1282, Address: 0x3f5d0)
- WriteFmtUserTypeStg (Ordinal: 1283, Address: 0x1bf80)
- WriteOleStg (Ordinal: 1284, Address: 0x67120)
- WriteStringStream (Ordinal: 1285, Address: 0x1c1e0)
Imported DLLs & Functions
api-ms-win-core-apiquery-l1-1-0.dll
- ApiSetQueryApiSetPresence (Address: 0x68fbd444)
api-ms-win-core-atoms-l1-1-0.dll
- GlobalAddAtomA (Address: 0x68fbd454)
- GlobalAddAtomW (Address: 0x68fbd464)
- GlobalDeleteAtom (Address: 0x68fbd458)
- GlobalFindAtomA (Address: 0x68fbd460)
- GlobalFindAtomW (Address: 0x68fbd450)
- GlobalGetAtomNameA (Address: 0x68fbd44c)
- GlobalGetAtomNameW (Address: 0x68fbd45c)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x68fbd46c)
- IsDebuggerPresent (Address: 0x68fbd474)
- OutputDebugStringW (Address: 0x68fbd470)
api-ms-win-core-debug-l1-1-1.dll
- CheckRemoteDebuggerPresent (Address: 0x68fbd47c)
api-ms-win-core-delayload-l1-1-0.dll
- DelayLoadFailureHook (Address: 0x68fbd484)
api-ms-win-core-delayload-l1-1-1.dll
- ResolveDelayLoadedAPI (Address: 0x68fbd48c)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x68fbd4a4)
- RaiseException (Address: 0x68fbd494)
- SetLastError (Address: 0x68fbd49c)
- SetUnhandledExceptionFilter (Address: 0x68fbd4a0)
- UnhandledExceptionFilter (Address: 0x68fbd498)
api-ms-win-core-file-l1-1-0.dll
- CreateFileW (Address: 0x68fbd4d8)
- DeleteFileW (Address: 0x68fbd4b0)
- FindClose (Address: 0x68fbd4c0)
- FindFirstFileW (Address: 0x68fbd4c4)
- GetDriveTypeW (Address: 0x68fbd4b4)
- GetFileAttributesExW (Address: 0x68fbd4d0)
- GetFileAttributesW (Address: 0x68fbd4cc)
- GetFullPathNameW (Address: 0x68fbd4ac)
- GetShortPathNameW (Address: 0x68fbd4c8)
- GetTempFileNameW (Address: 0x68fbd4d4)
- ReadFile (Address: 0x68fbd4b8)
- SetFilePointer (Address: 0x68fbd4bc)
api-ms-win-core-file-l1-2-0.dll
- GetTempPathW (Address: 0x68fbd4e0)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x68fbd4e8)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x68fbd4f0)
- HeapAlloc (Address: 0x68fbd4f8)
- HeapFree (Address: 0x68fbd4f4)
api-ms-win-core-heap-l2-1-0.dll
- LocalFree (Address: 0x68fbd500)
api-ms-win-core-heap-obsolete-l1-1-0.dll
- GlobalHandle (Address: 0x68fbd514)
- GlobalLock (Address: 0x68fbd50c)
- GlobalReAlloc (Address: 0x68fbd508)
- GlobalSize (Address: 0x68fbd518)
- GlobalUnlock (Address: 0x68fbd510)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x68fbd528)
- InterlockedPopEntrySList (Address: 0x68fbd524)
- InterlockedPushEntrySList (Address: 0x68fbd520)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
- DosDateTimeToFileTime (Address: 0x68fbd534)
- FileTimeToDosDateTime (Address: 0x68fbd530)
- MulDiv (Address: 0x68fbd538)
api-ms-win-core-kernel32-private-l1-1-0.dll
- _lclose (Address: 0x68fbd54c)
- _llseek (Address: 0x68fbd544)
- _lread (Address: 0x68fbd540)
- _lwrite (Address: 0x68fbd548)
- CheckElevationEnabled (Address: 0x68fbd550)
api-ms-win-core-libraryloader-l1-2-0.dll
- FreeLibrary (Address: 0x68fbd564)
- GetModuleFileNameA (Address: 0x68fbd57c)
- GetModuleFileNameW (Address: 0x68fbd558)
- GetModuleHandleExW (Address: 0x68fbd578)
- GetModuleHandleW (Address: 0x68fbd568)
- GetProcAddress (Address: 0x68fbd55c)
- LoadLibraryExA (Address: 0x68fbd56c)
- LoadLibraryExW (Address: 0x68fbd574)
- LoadResource (Address: 0x68fbd560)
- LoadStringW (Address: 0x68fbd570)
- LockResource (Address: 0x68fbd580)
api-ms-win-core-libraryloader-l1-2-1.dll
- FindResourceW (Address: 0x68fbd58c)
- LoadLibraryA (Address: 0x68fbd588)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x68fbd594)
- GetLocaleInfoW (Address: 0x68fbd598)
- GetSystemDefaultLCID (Address: 0x68fbd5ac)
- GetThreadLocale (Address: 0x68fbd5a0)
- GetUserDefaultLCID (Address: 0x68fbd5a4)
- IsDBCSLeadByte (Address: 0x68fbd5a8)
- LCMapStringW (Address: 0x68fbd59c)
api-ms-win-core-marshal-l1-1-0.dll
- CLIPFORMAT_UserFree (Address: 0x68fbd5bc)
- CLIPFORMAT_UserMarshal (Address: 0x68fbd5dc)
- CLIPFORMAT_UserSize (Address: 0x68fbd5d0)
- CLIPFORMAT_UserUnmarshal (Address: 0x68fbd5c4)
- HPALETTE_UserFree (Address: 0x68fbd5d4)
- HPALETTE_UserMarshal (Address: 0x68fbd5c0)
- HPALETTE_UserSize (Address: 0x68fbd5b8)
- HPALETTE_UserUnmarshal (Address: 0x68fbd5e0)
- HWND_UserFree (Address: 0x68fbd5b4)
- HWND_UserMarshal (Address: 0x68fbd5cc)
- HWND_UserSize (Address: 0x68fbd5c8)
- HWND_UserUnmarshal (Address: 0x68fbd5d8)
api-ms-win-core-memory-l1-1-0.dll
- CreateFileMappingW (Address: 0x68fbd5ec)
- MapViewOfFile (Address: 0x68fbd5f4)
- OpenFileMappingW (Address: 0x68fbd5e8)
- UnmapViewOfFile (Address: 0x68fbd5f0)
api-ms-win-core-processenvironment-l1-1-0.dll
- ExpandEnvironmentStringsW (Address: 0x68fbd600)
- GetCommandLineW (Address: 0x68fbd5fc)
- SearchPathW (Address: 0x68fbd604)
api-ms-win-core-processthreads-l1-1-0.dll
- CreateProcessW (Address: 0x68fbd628)
- CreateThread (Address: 0x68fbd610)
- GetCurrentProcess (Address: 0x68fbd63c)
- GetCurrentProcessId (Address: 0x68fbd61c)
- GetCurrentThread (Address: 0x68fbd638)
- GetCurrentThreadId (Address: 0x68fbd640)
- GetProcessId (Address: 0x68fbd624)
- OpenProcessToken (Address: 0x68fbd618)
- OpenThreadToken (Address: 0x68fbd60c)
- SetThreadToken (Address: 0x68fbd614)
- TerminateProcess (Address: 0x68fbd620)
- TlsAlloc (Address: 0x68fbd634)
- TlsFree (Address: 0x68fbd630)
- TlsSetValue (Address: 0x68fbd62c)
api-ms-win-core-processthreads-l1-1-1.dll
- IsProcessorFeaturePresent (Address: 0x68fbd64c)
- OpenProcess (Address: 0x68fbd648)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x68fbd654)
api-ms-win-core-psapi-l1-1-0.dll
- QueryFullProcessImageNameW (Address: 0x68fbd65c)
api-ms-win-core-psm-key-l1-1-0.dll
- PsmGetKeyFromToken (Address: 0x68fbd664)
api-ms-win-core-quirks-l1-1-0.dll
- QuirkIsEnabled (Address: 0x68fbd66c)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x68fbd684)
- RegCreateKeyExW (Address: 0x68fbd6b4)
- RegDeleteKeyExA (Address: 0x68fbd690)
- RegDeleteKeyExW (Address: 0x68fbd680)
- RegDeleteValueW (Address: 0x68fbd6ac)
- RegEnumKeyExA (Address: 0x68fbd674)
- RegEnumKeyExW (Address: 0x68fbd688)
- RegEnumValueW (Address: 0x68fbd69c)
- RegFlushKey (Address: 0x68fbd698)
- RegGetValueW (Address: 0x68fbd6b0)
- RegLoadMUIStringW (Address: 0x68fbd678)
- RegOpenKeyExA (Address: 0x68fbd68c)
- RegOpenKeyExW (Address: 0x68fbd6a4)
- RegQueryInfoKeyA (Address: 0x68fbd6a8)
- RegQueryInfoKeyW (Address: 0x68fbd694)
- RegQueryValueExW (Address: 0x68fbd6a0)
- RegSetValueExW (Address: 0x68fbd67c)
api-ms-win-core-shlwapi-legacy-l1-1-0.dll
- PathFindFileNameW (Address: 0x68fbd6bc)
- PathIsFileSpecW (Address: 0x68fbd6c0)
api-ms-win-core-sidebyside-l1-1-0.dll
- FindActCtxSectionGuid (Address: 0x68fbd6c8)
api-ms-win-core-string-l1-1-0.dll
- CompareStringOrdinal (Address: 0x68fbd6dc)
- CompareStringW (Address: 0x68fbd6e0)
- GetStringTypeW (Address: 0x68fbd6d0)
- MultiByteToWideChar (Address: 0x68fbd6d4)
- WideCharToMultiByte (Address: 0x68fbd6d8)
api-ms-win-core-string-l2-1-0.dll
- CharNextW (Address: 0x68fbd6f4)
- CharPrevW (Address: 0x68fbd6f8)
- CharUpperW (Address: 0x68fbd6e8)
- IsCharAlphaNumericW (Address: 0x68fbd6f0)
- IsCharAlphaW (Address: 0x68fbd6ec)
api-ms-win-core-stringansi-l1-1-0.dll
- CharLowerA (Address: 0x68fbd704)
- CharNextA (Address: 0x68fbd708)
- CharPrevA (Address: 0x68fbd70c)
- CharUpperA (Address: 0x68fbd700)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x68fbd740)
- AcquireSRWLockShared (Address: 0x68fbd714)
- CreateEventExW (Address: 0x68fbd748)
- CreateEventW (Address: 0x68fbd750)
- CreateMutexExW (Address: 0x68fbd728)
- CreateSemaphoreExW (Address: 0x68fbd734)
- DeleteCriticalSection (Address: 0x68fbd724)
- EnterCriticalSection (Address: 0x68fbd72c)
- InitializeCriticalSectionAndSpinCount (Address: 0x68fbd744)
- InitializeCriticalSectionEx (Address: 0x68fbd730)
- InitializeSRWLock (Address: 0x68fbd764)
- LeaveCriticalSection (Address: 0x68fbd720)
- OpenSemaphoreW (Address: 0x68fbd738)
- ReleaseMutex (Address: 0x68fbd74c)
- ReleaseSemaphore (Address: 0x68fbd75c)
- ReleaseSRWLockExclusive (Address: 0x68fbd71c)
- ReleaseSRWLockShared (Address: 0x68fbd718)
- ResetEvent (Address: 0x68fbd760)
- SetEvent (Address: 0x68fbd758)
- WaitForSingleObject (Address: 0x68fbd754)
- WaitForSingleObjectEx (Address: 0x68fbd73c)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceBeginInitialize (Address: 0x68fbd76c)
- InitOnceComplete (Address: 0x68fbd770)
- InitOnceExecuteOnce (Address: 0x68fbd774)
api-ms-win-core-synch-l1-2-1.dll
- CreateSemaphoreW (Address: 0x68fbd77c)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemInfo (Address: 0x68fbd788)
- GetSystemTime (Address: 0x68fbd798)
- GetSystemTimeAsFileTime (Address: 0x68fbd790)
- GetTickCount (Address: 0x68fbd784)
- GetVersion (Address: 0x68fbd794)
- GetWindowsDirectoryW (Address: 0x68fbd78c)
api-ms-win-core-threadpool-l1-2-0.dll
- CloseThreadpoolTimer (Address: 0x68fbd7ac)
- CloseThreadpoolWait (Address: 0x68fbd7b8)
- CloseThreadpoolWork (Address: 0x68fbd7c8)
- CreateThreadpoolTimer (Address: 0x68fbd7a8)
- CreateThreadpoolWait (Address: 0x68fbd7a4)
- CreateThreadpoolWork (Address: 0x68fbd7c4)
- SetThreadpoolTimer (Address: 0x68fbd7b4)
- SetThreadpoolWait (Address: 0x68fbd7a0)
- SubmitThreadpoolWork (Address: 0x68fbd7c0)
- WaitForThreadpoolTimerCallbacks (Address: 0x68fbd7b0)
- WaitForThreadpoolWorkCallbacks (Address: 0x68fbd7bc)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
- CreateTimerQueueTimer (Address: 0x68fbd7d4)
- DeleteTimerQueueTimer (Address: 0x68fbd7d0)
api-ms-win-core-timezone-l1-1-0.dll
- SystemTimeToFileTime (Address: 0x68fbd7dc)
api-ms-win-core-wow64-l1-1-0.dll
- IsWow64Process (Address: 0x68fbd7e4)
api-ms-win-core-wow64-l1-1-1.dll
- GetSystemWow64DirectoryW (Address: 0x68fbd7ec)
api-ms-win-crt-private-l1-1-0.dll
- __CxxFrameHandler3 (Address: 0x68fbd848)
- __std_terminate (Address: 0x68fbd84c)
- _CxxThrowException (Address: 0x68fbd888)
- _except_handler4_common (Address: 0x68fbd850)
- _local_unwind4 (Address: 0x68fbd88c)
- _o___std_type_info_destroy_list (Address: 0x68fbd884)
- _o___stdio_common_vsprintf (Address: 0x68fbd880)
- _o___stdio_common_vswprintf (Address: 0x68fbd87c)
- _o___stdio_common_vswprintf_s (Address: 0x68fbd878)
- _o__cexit (Address: 0x68fbd874)
- _o__CIfmod (Address: 0x68fbd870)
- _o__configure_narrow_argv (Address: 0x68fbd86c)
- _o__crt_atexit (Address: 0x68fbd868)
- _o__errno (Address: 0x68fbd864)
- _o__execute_onexit_table (Address: 0x68fbd860)
- _o__initialize_narrow_environment (Address: 0x68fbd85c)
- _o__initialize_onexit_table (Address: 0x68fbd858)
- _o__invalid_parameter_noinfo (Address: 0x68fbd854)
- _o__purecall (Address: 0x68fbd7f4)
- _o__register_onexit_function (Address: 0x68fbd7f8)
- _o__resetstkoflw (Address: 0x68fbd7fc)
- _o__seh_filter_dll (Address: 0x68fbd800)
- _o__wcsicmp (Address: 0x68fbd804)
- _o__wcslwr (Address: 0x68fbd808)
- _o__wcsnicmp (Address: 0x68fbd80c)
- _o__wtoi (Address: 0x68fbd810)
- _o_free (Address: 0x68fbd818)
- _o_malloc (Address: 0x68fbd81c)
- _o_memcpy_s (Address: 0x68fbd820)
- _o_strcpy_s (Address: 0x68fbd824)
- _o_toupper (Address: 0x68fbd828)
- _o_wcscpy_s (Address: 0x68fbd82c)
- _o_wcsncat_s (Address: 0x68fbd830)
- _o_wcsncpy_s (Address: 0x68fbd834)
- _o_wcstol (Address: 0x68fbd838)
- _o_wcstoul (Address: 0x68fbd83c)
- memcmp (Address: 0x68fbd890)
- memcpy (Address: 0x68fbd894)
- memmove (Address: 0x68fbd814)
- wcschr (Address: 0x68fbd840)
- wcsrchr (Address: 0x68fbd844)
api-ms-win-crt-runtime-l1-1-0.dll
- _initterm (Address: 0x68fbd8a0)
- _initterm_e (Address: 0x68fbd89c)
api-ms-win-crt-string-l1-1-0.dll
- memset (Address: 0x68fbd8a8)
- strcspn (Address: 0x68fbd8b0)
- wcsncmp (Address: 0x68fbd8ac)
api-ms-win-eventing-provider-l1-1-0.dll
- EventActivityIdControl (Address: 0x68fbd8b8)
- EventProviderEnabled (Address: 0x68fbd8c8)
- EventRegister (Address: 0x68fbd8c0)
- EventSetInformation (Address: 0x68fbd8cc)
- EventUnregister (Address: 0x68fbd8bc)
- EventWriteTransfer (Address: 0x68fbd8c4)
api-ms-win-security-base-l1-1-0.dll
- CreateWellKnownSid (Address: 0x68fbd8d4)
- DuplicateToken (Address: 0x68fbd8e8)
- GetSidSubAuthority (Address: 0x68fbd8e0)
- GetSidSubAuthorityCount (Address: 0x68fbd8e4)
- GetTokenInformation (Address: 0x68fbd8ec)
- ImpersonateLoggedOnUser (Address: 0x68fbd8d8)
- RevertToSelf (Address: 0x68fbd8dc)
combase.dll
- (Address: 0x68fbd930)
- (Address: 0x68fbd914)
- (Address: 0x68fbd8fc)
- (Address: 0x68fbd900)
- (Address: 0x68fbd904)
- (Address: 0x68fbd92c)
- (Address: 0x68fbd908)
- (Address: 0x68fbd928)
- (Address: 0x68fbd924)
- (Address: 0x68fbd920)
- (Address: 0x68fbd90c)
- (Address: 0x68fbd910)
- (Address: 0x68fbd91c)
- (Address: 0x68fbd918)
- (Address: 0x68fbd934)
- (Address: 0x68fbd8f8)
- (Address: 0x68fbd938)
- (Address: 0x68fbd93c)
- (Address: 0x68fbd940)
- (Address: 0x68fbd944)
- (Address: 0x68fbd948)
- (Address: 0x68fbd94c)
- (Address: 0x68fbd8f4)
- (Address: 0x68fbd950)
GDI32.dll
- BitBlt (Address: 0x68fbd010)
- CloseEnhMetaFile (Address: 0x68fbd100)
- CloseMetaFile (Address: 0x68fbd0b4)
- CopyEnhMetaFileW (Address: 0x68fbd09c)
- CopyMetaFileW (Address: 0x68fbd098)
- CreateBitmap (Address: 0x68fbd088)
- CreateCompatibleBitmap (Address: 0x68fbd044)
- CreateCompatibleDC (Address: 0x68fbd06c)
- CreateDIBitmap (Address: 0x68fbd04c)
- CreateDIBSection (Address: 0x68fbd004)
- CreateEnhMetaFileW (Address: 0x68fbd0f8)
- CreateFontIndirectW (Address: 0x68fbd0b8)
- CreateHalftonePalette (Address: 0x68fbd040)
- CreateMetaFileA (Address: 0x68fbd0b0)
- CreateMetaFileW (Address: 0x68fbd124)
- CreatePalette (Address: 0x68fbd05c)
- DeleteDC (Address: 0x68fbd068)
- DeleteEnhMetaFile (Address: 0x68fbd0a8)
- DeleteMetaFile (Address: 0x68fbd080)
- DeleteObject (Address: 0x68fbd084)
- EnumEnhMetaFile (Address: 0x68fbd070)
- EnumFontFamiliesExW (Address: 0x68fbd03c)
- EnumMetaFile (Address: 0x68fbd114)
- Escape (Address: 0x68fbd0d0)
- ExtTextOutA (Address: 0x68fbd0e4)
- GetBitmapBits (Address: 0x68fbd094)
- GetBitmapDimensionEx (Address: 0x68fbd0a0)
- GetCurrentObject (Address: 0x68fbd02c)
- GetDeviceCaps (Address: 0x68fbd0e8)
- GetDIBits (Address: 0x68fbd048)
- GetEnhMetaFileBits (Address: 0x68fbd130)
- GetEnhMetaFileHeader (Address: 0x68fbd12c)
- GetEnhMetaFilePaletteEntries (Address: 0x68fbd064)
- GetGraphicsMode (Address: 0x68fbd0f4)
- GetMetaFileBitsEx (Address: 0x68fbd0ac)
- GetObjectType (Address: 0x68fbd028)
- GetObjectW (Address: 0x68fbd08c)
- GetPaletteEntries (Address: 0x68fbd050)
- GetStockObject (Address: 0x68fbd118)
- GetTextExtentPointA (Address: 0x68fbd0dc)
- GetTextExtentPointW (Address: 0x68fbd008)
- GetTextFaceW (Address: 0x68fbd034)
- GetTextMetricsA (Address: 0x68fbd0c0)
- GetTextMetricsW (Address: 0x68fbd038)
- GetWindowOrgEx (Address: 0x68fbd018)
- GetWinMetaFileBits (Address: 0x68fbd078)
- IntersectClipRect (Address: 0x68fbd0f0)
- LPtoDP (Address: 0x68fbd108)
- OffsetViewportOrgEx (Address: 0x68fbd014)
- PatBlt (Address: 0x68fbd030)
- PlayEnhMetaFile (Address: 0x68fbd104)
- PlayEnhMetaFileRecord (Address: 0x68fbd000)
- PlayMetaFile (Address: 0x68fbd0fc)
- PlayMetaFileRecord (Address: 0x68fbd128)
- RealizePalette (Address: 0x68fbd058)
- RestoreDC (Address: 0x68fbd120)
- SaveDC (Address: 0x68fbd0ec)
- SelectObject (Address: 0x68fbd0bc)
- SelectPalette (Address: 0x68fbd11c)
- SetBitmapBits (Address: 0x68fbd090)
- SetBitmapDimensionEx (Address: 0x68fbd0a4)
- SetBkColor (Address: 0x68fbd01c)
- SetBkMode (Address: 0x68fbd0d8)
- SetDIBits (Address: 0x68fbd00c)
- SetEnhMetaFileBits (Address: 0x68fbd060)
- SetMapMode (Address: 0x68fbd0c4)
- SetMetaFileBitsEx (Address: 0x68fbd074)
- SetStretchBltMode (Address: 0x68fbd020)
- SetTextAlign (Address: 0x68fbd0e0)
- SetTextColor (Address: 0x68fbd0d4)
- SetViewportExtEx (Address: 0x68fbd110)
- SetViewportOrgEx (Address: 0x68fbd10c)
- SetWindowExtEx (Address: 0x68fbd0cc)
- SetWindowOrgEx (Address: 0x68fbd0c8)
- SetWinMetaFileBits (Address: 0x68fbd07c)
- StretchBlt (Address: 0x68fbd024)
- StretchDIBits (Address: 0x68fbd054)
KERNEL32.dll
- CreateFileA (Address: 0x68fbd164)
- GetFullPathNameA (Address: 0x68fbd15c)
- HeapCreate (Address: 0x68fbd138)
- HeapDestroy (Address: 0x68fbd168)
- RegOpenUserClassesRoot (Address: 0x68fbd150)
- SearchPathA (Address: 0x68fbd13c)
- SetThreadStackGuarantee (Address: 0x68fbd148)
- TryAcquireSRWLockExclusive (Address: 0x68fbd154)
- VirtualAlloc (Address: 0x68fbd144)
- VirtualProtect (Address: 0x68fbd140)
- VirtualQuery (Address: 0x68fbd14c)
- Wow64DisableWow64FsRedirection (Address: 0x68fbd158)
- Wow64RevertWow64FsRedirection (Address: 0x68fbd160)
KERNELBASE.dll
- AreFileApisANSI (Address: 0x68fbd174)
- GetPackageFullName (Address: 0x68fbd194)
- GlobalAlloc (Address: 0x68fbd178)
- GlobalFree (Address: 0x68fbd17c)
- LocalAlloc (Address: 0x68fbd184)
- LocalLock (Address: 0x68fbd180)
- LocalUnlock (Address: 0x68fbd18c)
- lstrcmpiW (Address: 0x68fbd198)
- lstrcmpW (Address: 0x68fbd188)
- lstrlenW (Address: 0x68fbd170)
- Sleep (Address: 0x68fbd190)
ntdll.dll
- EtwEventRegister (Address: 0x68fbd95c)
- EtwEventSetInformation (Address: 0x68fbd96c)
- EtwEventUnregister (Address: 0x68fbd960)
- EtwEventWriteTransfer (Address: 0x68fbd9c8)
- EtwGetTraceEnableFlags (Address: 0x68fbd970)
- EtwGetTraceEnableLevel (Address: 0x68fbd9c4)
- EtwGetTraceLoggerHandle (Address: 0x68fbd978)
- EtwRegisterTraceGuidsW (Address: 0x68fbd9cc)
- EtwTraceMessage (Address: 0x68fbd974)
- EtwUnregisterTraceGuids (Address: 0x68fbd968)
- NtQuerySecurityAttributesToken (Address: 0x68fbd98c)
- NtQuerySystemInformation (Address: 0x68fbd958)
- NtQueryWnfStateData (Address: 0x68fbd9a8)
- NtSetInformationFile (Address: 0x68fbd9e8)
- RtlAllocateHeap (Address: 0x68fbd97c)
- RtlAnsiStringToUnicodeString (Address: 0x68fbd9ec)
- RtlCompareUnicodeString (Address: 0x68fbd99c)
- RtlDeleteCriticalSection (Address: 0x68fbd9a0)
- RtlFreeHeap (Address: 0x68fbd980)
- RtlGetNtSystemRoot (Address: 0x68fbd9b4)
- RtlImageNtHeader (Address: 0x68fbd988)
- RtlInitializeCriticalSection (Address: 0x68fbd9d0)
- RtlInitializeCriticalSectionAndSpinCount (Address: 0x68fbd9bc)
- RtlInitUnicodeString (Address: 0x68fbd994)
- RtlIsCriticalSectionLockedByThread (Address: 0x68fbd9b0)
- RtlLoadString (Address: 0x68fbd9b8)
- RtlNtStatusToDosError (Address: 0x68fbd9c0)
- RtlQueryPackageClaims (Address: 0x68fbd9ac)
- RtlReAllocateHeap (Address: 0x68fbd984)
- RtlWriteRegistryValue (Address: 0x68fbd9e4)
- WinSqmSetDWORD (Address: 0x68fbd9a4)
- ZwClose (Address: 0x68fbd964)
- ZwCreateKey (Address: 0x68fbd9d4)
- ZwDeleteKey (Address: 0x68fbd990)
- ZwDeleteValueKey (Address: 0x68fbd998)
- ZwEnumerateKey (Address: 0x68fbd9dc)
- ZwOpenKey (Address: 0x68fbd9d8)
- ZwQueryValueKey (Address: 0x68fbd9e0)
RPCRT4.dll
- CStdStubBuffer_AddRef (Address: 0x68fbd1dc)
- CStdStubBuffer_Connect (Address: 0x68fbd200)
- CStdStubBuffer_CountRefs (Address: 0x68fbd250)
- CStdStubBuffer_DebugServerQueryInterface (Address: 0x68fbd1d4)
- CStdStubBuffer_DebugServerRelease (Address: 0x68fbd1f0)
- CStdStubBuffer_Disconnect (Address: 0x68fbd1f4)
- CStdStubBuffer_Invoke (Address: 0x68fbd1cc)
- CStdStubBuffer_IsIIDSupported (Address: 0x68fbd1fc)
- CStdStubBuffer_QueryInterface (Address: 0x68fbd1e8)
- I_RpcExceptionFilter (Address: 0x68fbd244)
- IUnknown_AddRef_Proxy (Address: 0x68fbd1d0)
- IUnknown_QueryInterface_Proxy (Address: 0x68fbd1f8)
- IUnknown_Release_Proxy (Address: 0x68fbd1e0)
- NdrAsyncClientCall (Address: 0x68fbd228)
- NdrClientInitializeNew (Address: 0x68fbd214)
- NdrConvert2 (Address: 0x68fbd220)
- NdrCorrelationInitialize (Address: 0x68fbd1e4)
- NdrCStdStubBuffer_Release (Address: 0x68fbd204)
- NdrGetSimpleTypeBufferAlignment (Address: 0x68fbd1a0)
- NdrGetSimpleTypeBufferSize (Address: 0x68fbd1a4)
- NdrGetSimpleTypeMemorySize (Address: 0x68fbd20c)
- NdrGetTypeFlags (Address: 0x68fbd208)
- NdrOleAllocate (Address: 0x68fbd1ec)
- NdrOleFree (Address: 0x68fbd1d8)
- NdrOutInit (Address: 0x68fbd1b0)
- NdrpGetProcFormatString (Address: 0x68fbd1bc)
- NdrpGetTypeFormatString (Address: 0x68fbd1c0)
- NdrpGetTypeGenCookie (Address: 0x68fbd1b8)
- NdrpMemoryIncrement (Address: 0x68fbd210)
- NdrpReleaseTypeFormatString (Address: 0x68fbd1b4)
- NdrpReleaseTypeGenCookie (Address: 0x68fbd1c8)
- NdrpVarVtOfTypeDesc (Address: 0x68fbd1c4)
- NdrTypeMarshall (Address: 0x68fbd21c)
- NdrTypeSize (Address: 0x68fbd218)
- NdrTypeUnmarshall (Address: 0x68fbd1ac)
- NdrUnmarshallBasetypeInline (Address: 0x68fbd1a8)
- RpcAsyncCancelCall (Address: 0x68fbd234)
- RpcAsyncCompleteCall (Address: 0x68fbd240)
- RpcAsyncInitializeHandle (Address: 0x68fbd24c)
- RpcBindingFree (Address: 0x68fbd22c)
- RpcBindingFromStringBindingW (Address: 0x68fbd254)
- RpcBindingSetAuthInfoExW (Address: 0x68fbd23c)
- RpcImpersonateClient (Address: 0x68fbd230)
- RpcStringBindingComposeW (Address: 0x68fbd248)
- RpcStringFreeW (Address: 0x68fbd238)
- UuidFromStringW (Address: 0x68fbd224)
USER32.dll
- (Address: 0x68fbd43c)
- (Address: 0x68fbd438)
- (Address: 0x68fbd424)
- (Address: 0x68fbd2c4)
- AllowSetForegroundWindow (Address: 0x68fbd284)
- AttachThreadInput (Address: 0x68fbd420)
- CallMsgFilterW (Address: 0x68fbd3cc)
- CallNextHookEx (Address: 0x68fbd39c)
- CallWindowProcW (Address: 0x68fbd2b4)
- CloseClipboard (Address: 0x68fbd2dc)
- CopyAcceleratorTableW (Address: 0x68fbd2a0)
- CopyIcon (Address: 0x68fbd400)
- CopyImage (Address: 0x68fbd404)
- CountClipboardFormats (Address: 0x68fbd2c8)
- CreateCursor (Address: 0x68fbd3f4)
- CreateDialogParamW (Address: 0x68fbd378)
- CreateIcon (Address: 0x68fbd3f8)
- CreateWindowExW (Address: 0x68fbd350)
- DefWindowProcW (Address: 0x68fbd344)
- DestroyIcon (Address: 0x68fbd3d0)
- DestroyWindow (Address: 0x68fbd3a8)
- DialogBoxParamW (Address: 0x68fbd37c)
- DispatchMessageA (Address: 0x68fbd414)
- DispatchMessageW (Address: 0x68fbd3b4)
- DrawIcon (Address: 0x68fbd3e8)
- EmptyClipboard (Address: 0x68fbd2d8)
- EnableWindow (Address: 0x68fbd380)
- EnumClipboardFormats (Address: 0x68fbd2d0)
- FreeDDElParam (Address: 0x68fbd348)
- GetActiveWindow (Address: 0x68fbd388)
- GetClassNameW (Address: 0x68fbd338)
- GetClientRect (Address: 0x68fbd3c4)
- GetClipboardData (Address: 0x68fbd2f0)
- GetClipboardFormatNameA (Address: 0x68fbd318)
- GetClipboardFormatNameW (Address: 0x68fbd320)
- GetClipboardOwner (Address: 0x68fbd2d4)
- GetClipboardSequenceNumber (Address: 0x68fbd2e8)
- GetCursor (Address: 0x68fbd270)
- GetCursorPos (Address: 0x68fbd274)
- GetDC (Address: 0x68fbd3d8)
- GetDesktopWindow (Address: 0x68fbd3c8)
- GetDialogBaseUnits (Address: 0x68fbd428)
- GetDlgItem (Address: 0x68fbd398)
- GetFocus (Address: 0x68fbd408)
- GetIconInfo (Address: 0x68fbd3fc)
- GetKeyState (Address: 0x68fbd260)
- GetMenuItemID (Address: 0x68fbd2a8)
- GetMenuState (Address: 0x68fbd304)
- GetMessageA (Address: 0x68fbd40c)
- GetMessageW (Address: 0x68fbd410)
- GetOpenClipboardWindow (Address: 0x68fbd2b8)
- GetParent (Address: 0x68fbd280)
- GetPropW (Address: 0x68fbd308)
- GetShellWindow (Address: 0x68fbd36c)
- GetSubMenu (Address: 0x68fbd2a4)
- GetSysColor (Address: 0x68fbd3ec)
- GetSystemMetrics (Address: 0x68fbd3e0)
- GetThreadDpiAwarenessContext (Address: 0x68fbd298)
- GetTopWindow (Address: 0x68fbd42c)
- GetWindow (Address: 0x68fbd334)
- GetWindowDpiAwarenessContext (Address: 0x68fbd26c)
- GetWindowLongW (Address: 0x68fbd370)
- GetWindowRect (Address: 0x68fbd3c0)
- GetWindowTextA (Address: 0x68fbd41c)
- GetWindowThreadProcessId (Address: 0x68fbd368)
- GetWindowWord (Address: 0x68fbd32c)
- InSendMessage (Address: 0x68fbd2ac)
- IsClipboardFormatAvailable (Address: 0x68fbd2f4)
- IsIconic (Address: 0x68fbd264)
- IsWindow (Address: 0x68fbd358)
- IsWindowEnabled (Address: 0x68fbd384)
- IsWindowUnicode (Address: 0x68fbd430)
- KillTimer (Address: 0x68fbd35c)
- LoadCursorW (Address: 0x68fbd2e4)
- LoadIconW (Address: 0x68fbd3d4)
- MessageBoxW (Address: 0x68fbd38c)
- MoveWindow (Address: 0x68fbd2cc)
- MsgWaitForMultipleObjects (Address: 0x68fbd3b8)
- MsgWaitForMultipleObjectsEx (Address: 0x68fbd290)
- OpenClipboard (Address: 0x68fbd2e0)
- PackDDElParam (Address: 0x68fbd360)
- PeekMessageW (Address: 0x68fbd3ac)
- PostMessageW (Address: 0x68fbd34c)
- PostQuitMessage (Address: 0x68fbd324)
- RealChildWindowFromPoint (Address: 0x68fbd278)
- RegisterClassW (Address: 0x68fbd340)
- RegisterClipboardFormatA (Address: 0x68fbd31c)
- RegisterClipboardFormatW (Address: 0x68fbd328)
- RegisterWindowMessageW (Address: 0x68fbd314)
- ReleaseCapture (Address: 0x68fbd2f8)
- ReleaseDC (Address: 0x68fbd3f0)
- RemovePropW (Address: 0x68fbd30c)
- ReplyMessage (Address: 0x68fbd2b0)
- ScreenToClient (Address: 0x68fbd29c)
- SendDlgItemMessageW (Address: 0x68fbd394)
- SendMessageW (Address: 0x68fbd3a0)
- SetActiveWindow (Address: 0x68fbd418)
- SetCapture (Address: 0x68fbd2fc)
- SetClipboardData (Address: 0x68fbd2ec)
- SetCursor (Address: 0x68fbd294)
- SetDlgItemTextW (Address: 0x68fbd390)
- SetFocus (Address: 0x68fbd2bc)
- SetForegroundWindow (Address: 0x68fbd25c)
- SetPropW (Address: 0x68fbd310)
- SetRectEmpty (Address: 0x68fbd3e4)
- SetThreadDpiAwarenessContext (Address: 0x68fbd268)
- SetTimer (Address: 0x68fbd288)
- SetWindowLongW (Address: 0x68fbd374)
- SetWindowsHookExW (Address: 0x68fbd2c0)
- SetWindowTextW (Address: 0x68fbd3bc)
- SetWindowWord (Address: 0x68fbd330)
- ShowWindow (Address: 0x68fbd3a4)
- SystemParametersInfoW (Address: 0x68fbd3dc)
- TranslateMessage (Address: 0x68fbd3b0)
- UnhookWindowsHookEx (Address: 0x68fbd300)
- UnpackDDElParam (Address: 0x68fbd364)
- UnregisterClassW (Address: 0x68fbd33c)
- WaitForInputIdle (Address: 0x68fbd354)
- WaitMessage (Address: 0x68fbd28c)
- WindowFromPoint (Address: 0x68fbd27c)
- WinHelpW (Address: 0x68fbd434)