Explore dynamic libraries from c:\windows\system32\ folder. Check:

    exported function names
    number of functions
    ordinals
    if there are any exported by ordinal only


Use dumpbin and PE-bear