PDFXEditCore.x64.dll

Description: PDF-XChange Editor Core API [File deleted after analysis due to size limit > 20MB]

Authors: Copyright (C) 2001-26 by PDF-XChange Co Ltd.

Version: 10.8.4.409

Architecture: 64-bit

Operating System: Windows NT

SHA256: 44f95b1e9950e2482189e904546aa738

File Size: 69.5 MB

Uploaded At: April 18, 2026, 12:26 a.m.

Views: 24

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllVersion (Ordinal: 1, Address: 0x34c6100)
  • PXV_GetTextFromHRESULT (Ordinal: 2, Address: 0xf0a2b0)
  • CallbackAndFreeLibraryAndExitThread (Ordinal: 3, Address: 0xf08910)
  • DllCanUnloadNow (Ordinal: 4, Address: 0x11b3e0)
  • DllGetClassObject (Ordinal: 5, Address: 0xf0ca00)
  • DllInstall (Ordinal: 6, Address: 0xf0cb50)
  • DllRegisterServer (Ordinal: 7, Address: 0xf0ccb0)
  • DllUnregisterServer (Ordinal: 8, Address: 0xf0cdd0)
  • PXV_GetInstance (Ordinal: 9, Address: 0xf563b0)

Imported DLLs & Functions

ACTIVEDS.dll
  • (Address: 0x1834c0000)
  • (Address: 0x1834c0008)
ADVAPI32.dll
  • AllocateAndInitializeSid (Address: 0x1834c0218)
  • CheckTokenMembership (Address: 0x1834c01f8)
  • ConvertStringSidToSidW (Address: 0x1834c0208)
  • CopySid (Address: 0x1834c0080)
  • CreateProcessAsUserW (Address: 0x1834c0060)
  • CryptAcquireContextW (Address: 0x1834c0178)
  • CryptCreateHash (Address: 0x1834c0188)
  • CryptDecrypt (Address: 0x1834c0130)
  • CryptDestroyHash (Address: 0x1834c01c0)
  • CryptDestroyKey (Address: 0x1834c00a8)
  • CryptEnumProvidersW (Address: 0x1834c0128)
  • CryptExportKey (Address: 0x1834c0168)
  • CryptGenKey (Address: 0x1834c0150)
  • CryptGenRandom (Address: 0x1834c0158)
  • CryptGetHashParam (Address: 0x1834c0180)
  • CryptGetProvParam (Address: 0x1834c01c8)
  • CryptGetUserKey (Address: 0x1834c01d0)
  • CryptHashData (Address: 0x1834c0190)
  • CryptReleaseContext (Address: 0x1834c0238)
  • CryptSetHashParam (Address: 0x1834c00b0)
  • CryptSetProvParam (Address: 0x1834c00b8)
  • CryptSignHashW (Address: 0x1834c0160)
  • CryptVerifySignatureW (Address: 0x1834c0170)
  • DeregisterEventSource (Address: 0x1834c0018)
  • DuplicateTokenEx (Address: 0x1834c0058)
  • EventRegister (Address: 0x1834c01e8)
  • EventSetInformation (Address: 0x1834c01e0)
  • EventUnregister (Address: 0x1834c0100)
  • EventWriteTransfer (Address: 0x1834c01d8)
  • FreeSid (Address: 0x1834c0200)
  • GetLengthSid (Address: 0x1834c0038)
  • GetSidIdentifierAuthority (Address: 0x1834c0028)
  • GetSidSubAuthority (Address: 0x1834c0030)
  • GetSidSubAuthorityCount (Address: 0x1834c0088)
  • GetTokenInformation (Address: 0x1834c0220)
  • GetUserNameW (Address: 0x1834c0110)
  • InitializeSecurityDescriptor (Address: 0x1834c01b8)
  • IsValidSid (Address: 0x1834c0090)
  • LsaClose (Address: 0x1834c0048)
  • LsaFreeMemory (Address: 0x1834c0040)
  • LsaLookupNames2 (Address: 0x1834c0068)
  • LsaOpenPolicy (Address: 0x1834c0050)
  • OpenProcessToken (Address: 0x1834c01f0)
  • OpenThreadToken (Address: 0x1834c0020)
  • RegCloseKey (Address: 0x1834c00c0)
  • RegCreateKeyExW (Address: 0x1834c00c8)
  • RegCreateKeyTransactedW (Address: 0x1834c0070)
  • RegDeleteKeyW (Address: 0x1834c00d0)
  • RegDeleteTreeW (Address: 0x1834c0230)
  • RegDeleteValueW (Address: 0x1834c00d8)
  • RegEnumKeyExW (Address: 0x1834c00e0)
  • RegEnumValueW (Address: 0x1834c01a8)
  • RegGetValueW (Address: 0x1834c0148)
  • RegisterEventSourceW (Address: 0x1834c0140)
  • RegOpenKeyExA (Address: 0x1834c0210)
  • RegOpenKeyExW (Address: 0x1834c00e8)
  • RegOpenKeyW (Address: 0x1834c0108)
  • RegQueryInfoKeyW (Address: 0x1834c00f0)
  • RegQueryValueExA (Address: 0x1834c01a0)
  • RegQueryValueExW (Address: 0x1834c0198)
  • RegRenameKey (Address: 0x1834c0078)
  • RegSetKeySecurity (Address: 0x1834c0228)
  • RegSetValueExW (Address: 0x1834c00f8)
  • ReportEventW (Address: 0x1834c0138)
  • SetSecurityDescriptorDacl (Address: 0x1834c01b0)
  • SetSecurityDescriptorGroup (Address: 0x1834c0098)
  • SetSecurityDescriptorOwner (Address: 0x1834c00a0)
  • SetTokenInformation (Address: 0x1834c0120)
  • SystemFunction036 (Address: 0x1834c0118)
COMDLG32.dll
  • CommDlgExtendedError (Address: 0x1834c0248)
  • GetOpenFileNameW (Address: 0x1834c0250)
  • GetSaveFileNameW (Address: 0x1834c0260)
  • PageSetupDlgW (Address: 0x1834c0258)
CRYPT32.dll
  • CertAddEncodedCertificateToStore (Address: 0x1834c0330)
  • CertCloseServerOcspResponse (Address: 0x1834c0290)
  • CertCloseStore (Address: 0x1834c0398)
  • CertCompareCertificate (Address: 0x1834c0300)
  • CertCreateCertificateChainEngine (Address: 0x1834c02c0)
  • CertCreateCertificateContext (Address: 0x1834c03b0)
  • CertCreateContext (Address: 0x1834c0318)
  • CertDuplicateCertificateContext (Address: 0x1834c0348)
  • CertDuplicateStore (Address: 0x1834c0400)
  • CertEnumCertificatesInStore (Address: 0x1834c03a0)
  • CertFindCertificateInStore (Address: 0x1834c03a8)
  • CertFindExtension (Address: 0x1834c02e0)
  • CertFreeCertificateChain (Address: 0x1834c02a8)
  • CertFreeCertificateChainEngine (Address: 0x1834c02b8)
  • CertFreeCertificateContext (Address: 0x1834c03b8)
  • CertFreeServerOcspResponseContext (Address: 0x1834c0408)
  • CertGetCertificateChain (Address: 0x1834c02b0)
  • CertGetCertificateContextProperty (Address: 0x1834c0328)
  • CertGetEnhancedKeyUsage (Address: 0x1834c0310)
  • CertGetIntendedKeyUsage (Address: 0x1834c02d8)
  • CertGetNameStringW (Address: 0x1834c02d0)
  • CertGetPublicKeyLength (Address: 0x1834c02f8)
  • CertGetServerOcspResponseContext (Address: 0x1834c0288)
  • CertNameToStrW (Address: 0x1834c0350)
  • CertOIDToAlgId (Address: 0x1834c03c0)
  • CertOpenServerOcspResponse (Address: 0x1834c0298)
  • CertOpenStore (Address: 0x1834c0390)
  • CertOpenSystemStoreW (Address: 0x1834c03e8)
  • CertSetCertificateContextProperty (Address: 0x1834c0280)
  • CertVerifyRevocation (Address: 0x1834c0308)
  • CertVerifyTimeValidity (Address: 0x1834c02e8)
  • CryptAcquireCertificatePrivateKey (Address: 0x1834c03d0)
  • CryptDecodeObject (Address: 0x1834c0360)
  • CryptDecodeObjectEx (Address: 0x1834c0358)
  • CryptEncodeObject (Address: 0x1834c0270)
  • CryptEncodeObjectEx (Address: 0x1834c0320)
  • CryptExportPublicKeyInfo (Address: 0x1834c0340)
  • CryptFindOIDInfo (Address: 0x1834c0368)
  • CryptHashCertificate (Address: 0x1834c02f0)
  • CryptImportPublicKeyInfo (Address: 0x1834c03c8)
  • CryptMsgCalculateEncodedLength (Address: 0x1834c03f8)
  • CryptMsgClose (Address: 0x1834c0378)
  • CryptMsgControl (Address: 0x1834c0278)
  • CryptMsgGetParam (Address: 0x1834c0388)
  • CryptMsgOpenToDecode (Address: 0x1834c0370)
  • CryptMsgOpenToEncode (Address: 0x1834c03f0)
  • CryptMsgUpdate (Address: 0x1834c0380)
  • CryptSignAndEncodeCertificate (Address: 0x1834c0338)
  • CryptSignMessage (Address: 0x1834c02c8)
  • CryptVerifyDetachedMessageSignature (Address: 0x1834c03e0)
  • CryptVerifyMessageSignature (Address: 0x1834c03d8)
  • PFXImportCertStore (Address: 0x1834c02a0)
GDI32.dll
  • AbortDoc (Address: 0x1834c06e8)
  • AddFontMemResourceEx (Address: 0x1834c0598)
  • AddFontResourceExW (Address: 0x1834c0738)
  • BeginPath (Address: 0x1834c0630)
  • BitBlt (Address: 0x1834c05c8)
  • CloseEnhMetaFile (Address: 0x1834c0750)
  • CloseFigure (Address: 0x1834c06e0)
  • CloseMetaFile (Address: 0x1834c04c8)
  • CombineRgn (Address: 0x1834c0420)
  • CopyEnhMetaFileW (Address: 0x1834c07a8)
  • CreateBitmap (Address: 0x1834c0800)
  • CreateCompatibleBitmap (Address: 0x1834c05d0)
  • CreateCompatibleDC (Address: 0x1834c05b0)
  • CreateDCW (Address: 0x1834c04c0)
  • CreateDIBSection (Address: 0x1834c05c0)
  • CreateEnhMetaFileW (Address: 0x1834c0418)
  • CreateFontIndirectW (Address: 0x1834c05f0)
  • CreateFontW (Address: 0x1834c05f8)
  • CreateICW (Address: 0x1834c04f0)
  • CreateMetaFileW (Address: 0x1834c04b8)
  • CreatePalette (Address: 0x1834c0528)
  • CreatePen (Address: 0x1834c0618)
  • CreateRectRgn (Address: 0x1834c0458)
  • CreateRectRgnIndirect (Address: 0x1834c04b0)
  • CreateSolidBrush (Address: 0x1834c0760)
  • DeleteDC (Address: 0x1834c04a8)
  • DeleteEnhMetaFile (Address: 0x1834c0798)
  • DeleteMetaFile (Address: 0x1834c04a0)
  • DeleteObject (Address: 0x1834c0658)
  • DPtoLP (Address: 0x1834c0578)
  • Ellipse (Address: 0x1834c0620)
  • EndDoc (Address: 0x1834c0700)
  • EndPage (Address: 0x1834c06f0)
  • EndPath (Address: 0x1834c0638)
  • EnumEnhMetaFile (Address: 0x1834c0780)
  • EnumFontFamiliesExW (Address: 0x1834c0500)
  • ExtCreatePen (Address: 0x1834c06b8)
  • ExtEscape (Address: 0x1834c04f8)
  • ExtSelectClipRgn (Address: 0x1834c0818)
  • ExtTextOutW (Address: 0x1834c0428)
  • FillPath (Address: 0x1834c0640)
  • FrameRgn (Address: 0x1834c07f8)
  • GdiFlush (Address: 0x1834c0580)
  • GdiGetBatchLimit (Address: 0x1834c0740)
  • GdiSetBatchLimit (Address: 0x1834c0748)
  • GetBitmapBits (Address: 0x1834c07f0)
  • GetBkColor (Address: 0x1834c0660)
  • GetBkMode (Address: 0x1834c0678)
  • GetCharABCWidthsI (Address: 0x1834c07d0)
  • GetCharacterPlacementW (Address: 0x1834c07b8)
  • GetCharWidthI (Address: 0x1834c07c8)
  • GetClipBox (Address: 0x1834c05a8)
  • GetClipRgn (Address: 0x1834c0448)
  • GetDCBrushColor (Address: 0x1834c0668)
  • GetDCPenColor (Address: 0x1834c0670)
  • GetDeviceCaps (Address: 0x1834c0498)
  • GetDIBits (Address: 0x1834c0530)
  • GetEnhMetaFileBits (Address: 0x1834c0568)
  • GetEnhMetaFileHeader (Address: 0x1834c05e0)
  • GetFontData (Address: 0x1834c0508)
  • GetFontLanguageInfo (Address: 0x1834c07e8)
  • GetGlyphIndicesW (Address: 0x1834c07c0)
  • GetGlyphOutlineW (Address: 0x1834c07b0)
  • GetICMProfileW (Address: 0x1834c0698)
  • GetKerningPairsW (Address: 0x1834c07d8)
  • GetMetaFileBitsEx (Address: 0x1834c0538)
  • GetObjectType (Address: 0x1834c0728)
  • GetObjectW (Address: 0x1834c05e8)
  • GetOutlineTextMetricsW (Address: 0x1834c0510)
  • GetPixel (Address: 0x1834c0830)
  • GetRandomRgn (Address: 0x1834c0808)
  • GetRegionData (Address: 0x1834c04e0)
  • GetRgnBox (Address: 0x1834c0450)
  • GetStockObject (Address: 0x1834c05d8)
  • GetTextAlign (Address: 0x1834c0680)
  • GetTextColor (Address: 0x1834c0828)
  • GetTextExtentPoint32W (Address: 0x1834c0810)
  • GetTextMetricsW (Address: 0x1834c0520)
  • GetViewportExtEx (Address: 0x1834c0688)
  • GetWindowExtEx (Address: 0x1834c0690)
  • GetWorldTransform (Address: 0x1834c0770)
  • IntersectClipRect (Address: 0x1834c0600)
  • LineTo (Address: 0x1834c0720)
  • LPtoDP (Address: 0x1834c0478)
  • ModifyWorldTransform (Address: 0x1834c0710)
  • MoveToEx (Address: 0x1834c06b0)
  • OffsetRgn (Address: 0x1834c04d0)
  • PlayEnhMetaFile (Address: 0x1834c0570)
  • PlayEnhMetaFileRecord (Address: 0x1834c0778)
  • PlayMetaFile (Address: 0x1834c06a0)
  • PolyBezierTo (Address: 0x1834c06a8)
  • Polygon (Address: 0x1834c0650)
  • PtInRegion (Address: 0x1834c07e0)
  • RealizePalette (Address: 0x1834c0540)
  • Rectangle (Address: 0x1834c0440)
  • RemoveFontMemResourceEx (Address: 0x1834c05a0)
  • RemoveFontResourceExW (Address: 0x1834c0730)
  • ResetDCW (Address: 0x1834c0590)
  • RestoreDC (Address: 0x1834c0490)
  • SaveDC (Address: 0x1834c0488)
  • SelectClipPath (Address: 0x1834c06d8)
  • SelectClipRgn (Address: 0x1834c0438)
  • SelectObject (Address: 0x1834c05b8)
  • SelectPalette (Address: 0x1834c0548)
  • SetArcDirection (Address: 0x1834c0648)
  • SetBkColor (Address: 0x1834c04d8)
  • SetBkMode (Address: 0x1834c0758)
  • SetDIBitsToDevice (Address: 0x1834c0550)
  • SetEnhMetaFileBits (Address: 0x1834c0788)
  • SetGraphicsMode (Address: 0x1834c0518)
  • SetMapMode (Address: 0x1834c0480)
  • SetMetaFileBitsEx (Address: 0x1834c0608)
  • SetMiterLimit (Address: 0x1834c06d0)
  • SetPolyFillMode (Address: 0x1834c0628)
  • SetRectRgn (Address: 0x1834c0588)
  • SetStretchBltMode (Address: 0x1834c07a0)
  • SetTextAlign (Address: 0x1834c0430)
  • SetTextColor (Address: 0x1834c0610)
  • SetViewportExtEx (Address: 0x1834c0768)
  • SetViewportOrgEx (Address: 0x1834c0470)
  • SetWindowExtEx (Address: 0x1834c0468)
  • SetWindowOrgEx (Address: 0x1834c0460)
  • SetWinMetaFileBits (Address: 0x1834c0790)
  • SetWorldTransform (Address: 0x1834c0718)
  • StartDocW (Address: 0x1834c0708)
  • StartPage (Address: 0x1834c06f8)
  • StretchBlt (Address: 0x1834c0558)
  • StretchDIBits (Address: 0x1834c0560)
  • StrokePath (Address: 0x1834c06c8)
  • TextOutW (Address: 0x1834c0820)
  • TranslateCharsetInfo (Address: 0x1834c04e8)
  • WidenPath (Address: 0x1834c06c0)
HTTPAPI.dll
  • HttpAddUrlToUrlGroup (Address: 0x1834c0860)
  • HttpCloseRequestQueue (Address: 0x1834c0880)
  • HttpCloseServerSession (Address: 0x1834c0870)
  • HttpCreateRequestQueue (Address: 0x1834c0890)
  • HttpCreateServerSession (Address: 0x1834c0878)
  • HttpCreateUrlGroup (Address: 0x1834c0868)
  • HttpInitialize (Address: 0x1834c0888)
  • HttpReceiveHttpRequest (Address: 0x1834c0848)
  • HttpRemoveUrlFromUrlGroup (Address: 0x1834c0858)
  • HttpSendHttpResponse (Address: 0x1834c0840)
  • HttpSetUrlGroupProperty (Address: 0x1834c0850)
  • HttpTerminate (Address: 0x1834c0898)
IMM32.dll
  • ImmGetCompositionStringW (Address: 0x1834c08b8)
  • ImmGetContext (Address: 0x1834c08a8)
  • ImmGetProperty (Address: 0x1834c08d8)
  • ImmNotifyIME (Address: 0x1834c08c0)
  • ImmReleaseContext (Address: 0x1834c08b0)
  • ImmSetCandidateWindow (Address: 0x1834c08d0)
  • ImmSetCompositionWindow (Address: 0x1834c08c8)
KERNEL32.dll
  • AcquireSRWLockExclusive (Address: 0x1834c1080)
  • AcquireSRWLockShared (Address: 0x1834c1078)
  • ActivateActCtx (Address: 0x1834c0c98)
  • AddVectoredExceptionHandler (Address: 0x1834c0d70)
  • AreFileApisANSI (Address: 0x1834c0fb8)
  • CancelIo (Address: 0x1834c0d88)
  • CancelIoEx (Address: 0x1834c0d90)
  • CloseHandle (Address: 0x1834c1148)
  • CloseThreadpoolWork (Address: 0x1834c09f0)
  • CompareFileTime (Address: 0x1834c0e08)
  • CompareStringEx (Address: 0x1834c0970)
  • CompareStringW (Address: 0x1834c0be0)
  • CopyFileExW (Address: 0x1834c0d00)
  • CopyFileW (Address: 0x1834c0fb0)
  • CreateActCtxW (Address: 0x1834c0ca0)
  • CreateDirectoryW (Address: 0x1834c1030)
  • CreateEventA (Address: 0x1834c0d10)
  • CreateEventW (Address: 0x1834c0b08)
  • CreateFileMappingA (Address: 0x1834c1100)
  • CreateFileMappingW (Address: 0x1834c0de8)
  • CreateFileW (Address: 0x1834c1028)
  • CreateHardLinkW (Address: 0x1834c0fa0)
  • CreateMutexA (Address: 0x1834c1130)
  • CreateMutexW (Address: 0x1834c0d50)
  • CreateProcessW (Address: 0x1834c0900)
  • CreateSemaphoreA (Address: 0x1834c0d08)
  • CreateSemaphoreW (Address: 0x1834c0950)
  • CreateThread (Address: 0x1834c0a28)
  • CreateThreadpoolWork (Address: 0x1834c09d8)
  • CreateToolhelp32Snapshot (Address: 0x1834c0db8)
  • DeactivateActCtx (Address: 0x1834c0c90)
  • DebugBreak (Address: 0x1834c10b8)
  • DecodePointer (Address: 0x1834c12a0)
  • DeleteCriticalSection (Address: 0x1834c1278)
  • DeleteFileW (Address: 0x1834c0b28)
  • DuplicateHandle (Address: 0x1834c0d80)
  • EncodePointer (Address: 0x1834c1268)
  • EnterCriticalSection (Address: 0x1834c1260)
  • EnumSystemLocalesEx (Address: 0x1834c10d8)
  • EnumSystemLocalesW (Address: 0x1834c0bb8)
  • ExitProcess (Address: 0x1834c0ed8)
  • ExitThread (Address: 0x1834c0a30)
  • ExpandEnvironmentStringsW (Address: 0x1834c0a80)
  • FileTimeToDosDateTime (Address: 0x1834c1170)
  • FileTimeToLocalFileTime (Address: 0x1834c0988)
  • FileTimeToSystemTime (Address: 0x1834c1158)
  • FindActCtxSectionStringW (Address: 0x1834c0c88)
  • FindClose (Address: 0x1834c1020)
  • FindCloseChangeNotification (Address: 0x1834c0aa8)
  • FindFirstChangeNotificationW (Address: 0x1834c0aa0)
  • FindFirstFileA (Address: 0x1834c0c48)
  • FindFirstFileExW (Address: 0x1834c1010)
  • FindFirstFileW (Address: 0x1834c1018)
  • FindNextChangeNotification (Address: 0x1834c0a98)
  • FindNextFileW (Address: 0x1834c1008)
  • FindResourceExW (Address: 0x1834c0990)
  • FindResourceW (Address: 0x1834c1210)
  • FlsAlloc (Address: 0x1834c0e58)
  • FlsFree (Address: 0x1834c0c00)
  • FlsGetValue (Address: 0x1834c0e50)
  • FlsSetValue (Address: 0x1834c0e48)
  • FlushFileBuffers (Address: 0x1834c0b98)
  • FlushInstructionCache (Address: 0x1834c0a10)
  • FlushViewOfFile (Address: 0x1834c0de0)
  • FormatMessageA (Address: 0x1834c1190)
  • FormatMessageW (Address: 0x1834c1188)
  • FreeEnvironmentStringsW (Address: 0x1834c0e68)
  • FreeLibrary (Address: 0x1834c1250)
  • FreeLibraryAndExitThread (Address: 0x1834c1270)
  • FreeLibraryWhenCallbackReturns (Address: 0x1834c0a00)
  • GetACP (Address: 0x1834c0e90)
  • GetCalendarInfoEx (Address: 0x1834c10e8)
  • GetCommandLineA (Address: 0x1834c0e80)
  • GetCommandLineW (Address: 0x1834c0e78)
  • GetComputerNameExW (Address: 0x1834c0d60)
  • GetComputerNameW (Address: 0x1834c1298)
  • GetConsoleMode (Address: 0x1834c0b88)
  • GetConsoleOutputCP (Address: 0x1834c0b90)
  • GetCPInfo (Address: 0x1834c0ee0)
  • GetCurrentDirectoryA (Address: 0x1834c11e8)
  • GetCurrentDirectoryW (Address: 0x1834c1038)
  • GetCurrentProcess (Address: 0x1834c0f58)
  • GetCurrentProcessId (Address: 0x1834c1128)
  • GetCurrentThread (Address: 0x1834c0ec8)
  • GetCurrentThreadId (Address: 0x1834c1120)
  • GetDateFormatEx (Address: 0x1834c0d40)
  • GetDateFormatW (Address: 0x1834c0bf0)
  • GetDiskFreeSpaceExW (Address: 0x1834c1000)
  • GetDriveTypeW (Address: 0x1834c0a40)
  • GetEnvironmentStringsW (Address: 0x1834c0e70)
  • GetEnvironmentVariableW (Address: 0x1834c08f8)
  • GetExitCodeProcess (Address: 0x1834c0e38)
  • GetExitCodeThread (Address: 0x1834c09c8)
  • GetFileAttributesExW (Address: 0x1834c0ff0)
  • GetFileAttributesW (Address: 0x1834c0ff8)
  • GetFileInformationByHandle (Address: 0x1834c0fe8)
  • GetFileInformationByHandleEx (Address: 0x1834c0f98)
  • GetFileSize (Address: 0x1834c0ac0)
  • GetFileSizeEx (Address: 0x1834c0bb0)
  • GetFileTime (Address: 0x1834c0e00)
  • GetFileType (Address: 0x1834c0eb0)
  • GetFinalPathNameByHandleW (Address: 0x1834c0fe0)
  • GetFullPathNameW (Address: 0x1834c0fd8)
  • GetHandleInformation (Address: 0x1834c1240)
  • GetLastError (Address: 0x1834c1288)
  • GetLocaleInfoA (Address: 0x1834c0d98)
  • GetLocaleInfoEx (Address: 0x1834c10f0)
  • GetLocaleInfoW (Address: 0x1834c0bd0)
  • GetLocalTime (Address: 0x1834c0af8)
  • GetLongPathNameW (Address: 0x1834c0a78)
  • GetModuleFileNameA (Address: 0x1834c10a8)
  • GetModuleFileNameW (Address: 0x1834c1248)
  • GetModuleHandleA (Address: 0x1834c11a0)
  • GetModuleHandleExW (Address: 0x1834c0ed0)
  • GetModuleHandleW (Address: 0x1834c1238)
  • GetNativeSystemInfo (Address: 0x1834c09d0)
  • GetOEMCP (Address: 0x1834c0e88)
  • GetOverlappedResult (Address: 0x1834c0910)
  • GetPrivateProfileIntW (Address: 0x1834c0978)
  • GetProcAddress (Address: 0x1834c1230)
  • GetProcessHandleCount (Address: 0x1834c0c70)
  • GetProcessHeap (Address: 0x1834c11c0)
  • GetProcessIdOfThread (Address: 0x1834c0960)
  • GetProcessPreferredUILanguages (Address: 0x1834c0c18)
  • GetProcessTimes (Address: 0x1834c0e28)
  • GetShortPathNameA (Address: 0x1834c0c40)
  • GetShortPathNameW (Address: 0x1834c0cf8)
  • GetStartupInfoW (Address: 0x1834c0f38)
  • GetStdHandle (Address: 0x1834c0eb8)
  • GetStringTypeW (Address: 0x1834c0ea0)
  • GetSystemDirectoryA (Address: 0x1834c0ce0)
  • GetSystemDirectoryW (Address: 0x1834c0c50)
  • GetSystemInfo (Address: 0x1834c1118)
  • GetSystemTime (Address: 0x1834c0ac8)
  • GetSystemTimeAdjustment (Address: 0x1834c0cb0)
  • GetSystemTimeAsFileTime (Address: 0x1834c1178)
  • GetTempFileNameW (Address: 0x1834c0b20)
  • GetTempPathW (Address: 0x1834c0fc0)
  • GetThreadLocale (Address: 0x1834c11f8)
  • GetThreadPreferredUILanguages (Address: 0x1834c0c10)
  • GetTickCount (Address: 0x1834c0af0)
  • GetTickCount64 (Address: 0x1834c1050)
  • GetTimeFormatEx (Address: 0x1834c0d48)
  • GetTimeFormatW (Address: 0x1834c0be8)
  • GetTimeZoneInformation (Address: 0x1834c0938)
  • GetTimeZoneInformationForYear (Address: 0x1834c0c68)
  • GetUserDefaultLangID (Address: 0x1834c0c20)
  • GetUserDefaultLCID (Address: 0x1834c0bc0)
  • GetUserDefaultLocaleName (Address: 0x1834c10e0)
  • GetUserDefaultUILanguage (Address: 0x1834c09a8)
  • GetVersionExA (Address: 0x1834c1098)
  • GetVersionExW (Address: 0x1834c0908)
  • GetVolumeInformationW (Address: 0x1834c09a0)
  • GetWindowsDirectoryW (Address: 0x1834c0c30)
  • GlobalAddAtomW (Address: 0x1834c0ae0)
  • GlobalAlloc (Address: 0x1834c0b58)
  • GlobalFlags (Address: 0x1834c0c28)
  • GlobalFree (Address: 0x1834c0a60)
  • GlobalLock (Address: 0x1834c0b48)
  • GlobalMemoryStatusEx (Address: 0x1834c0b00)
  • GlobalReAlloc (Address: 0x1834c0cf0)
  • GlobalSize (Address: 0x1834c0a68)
  • GlobalUnlock (Address: 0x1834c0b50)
  • HeapAlloc (Address: 0x1834c11d8)
  • HeapCompact (Address: 0x1834c0c78)
  • HeapDestroy (Address: 0x1834c0b60)
  • HeapFree (Address: 0x1834c11c8)
  • HeapQueryInformation (Address: 0x1834c0c08)
  • HeapReAlloc (Address: 0x1834c11d0)
  • HeapSize (Address: 0x1834c0ec0)
  • InitializeConditionVariable (Address: 0x1834c0d20)
  • InitializeCriticalSection (Address: 0x1834c0dd8)
  • InitializeCriticalSectionAndSpinCount (Address: 0x1834c11a8)
  • InitializeCriticalSectionEx (Address: 0x1834c1280)
  • InitializeSListHead (Address: 0x1834c0f28)
  • InitializeSRWLock (Address: 0x1834c0ce8)
  • InitOnceBeginInitialize (Address: 0x1834c0d30)
  • InitOnceComplete (Address: 0x1834c0d28)
  • InterlockedFlushSList (Address: 0x1834c0f08)
  • InterlockedPopEntrySList (Address: 0x1834c0a08)
  • InterlockedPushEntrySList (Address: 0x1834c0f10)
  • IsBadReadPtr (Address: 0x1834c0c58)
  • IsBadWritePtr (Address: 0x1834c0c60)
  • IsDebuggerPresent (Address: 0x1834c0f90)
  • IsProcessorFeaturePresent (Address: 0x1834c0f48)
  • IsValidCodePage (Address: 0x1834c0e98)
  • IsValidLocale (Address: 0x1834c0bc8)
  • K32EnumProcesses (Address: 0x1834c0968)
  • K32EnumProcessModules (Address: 0x1834c0920)
  • K32GetModuleBaseNameW (Address: 0x1834c0dc0)
  • K32GetModuleFileNameExW (Address: 0x1834c0928)
  • K32GetProcessImageFileNameW (Address: 0x1834c0a58)
  • K32GetProcessMemoryInfo (Address: 0x1834c0cc0)
  • LCMapStringEx (Address: 0x1834c09f8)
  • LCMapStringW (Address: 0x1834c0bd8)
  • LeaveCriticalSection (Address: 0x1834c1258)
  • LoadLibraryA (Address: 0x1834c0cd8)
  • LoadLibraryExA (Address: 0x1834c0a18)
  • LoadLibraryExW (Address: 0x1834c1228)
  • LoadLibraryW (Address: 0x1834c0ae8)
  • LoadResource (Address: 0x1834c1220)
  • LocalAlloc (Address: 0x1834c0c38)
  • LocaleNameToLCID (Address: 0x1834c10f8)
  • LocalFileTimeToFileTime (Address: 0x1834c0da0)
  • LocalFree (Address: 0x1834c1198)
  • LockFile (Address: 0x1834c0df8)
  • LockFileEx (Address: 0x1834c08e8)
  • LockResource (Address: 0x1834c0998)
  • lstrcatW (Address: 0x1834c0ab8)
  • lstrcmpiA (Address: 0x1834c0930)
  • lstrcmpiW (Address: 0x1834c1208)
  • lstrcmpW (Address: 0x1834c0a70)
  • lstrcpynW (Address: 0x1834c0ab0)
  • lstrcpyW (Address: 0x1834c0b78)
  • lstrlenA (Address: 0x1834c10a0)
  • lstrlenW (Address: 0x1834c0b38)
  • MapViewOfFile (Address: 0x1834c1110)
  • MoveFileExW (Address: 0x1834c0fa8)
  • MulDiv (Address: 0x1834c0b40)
  • MultiByteToWideChar (Address: 0x1834c1200)
  • OpenProcess (Address: 0x1834c0918)
  • OpenSemaphoreW (Address: 0x1834c0948)
  • OpenThread (Address: 0x1834c0958)
  • OutputDebugStringA (Address: 0x1834c10b0)
  • OutputDebugStringW (Address: 0x1834c0f88)
  • PeekNamedPipe (Address: 0x1834c0a48)
  • Process32FirstW (Address: 0x1834c0db0)
  • Process32NextW (Address: 0x1834c0da8)
  • ProcessIdToSessionId (Address: 0x1834c0e10)
  • QueryActCtxW (Address: 0x1834c0c80)
  • QueryPerformanceCounter (Address: 0x1834c0f30)
  • QueryPerformanceFrequency (Address: 0x1834c0b18)
  • QueueUserAPC (Address: 0x1834c0d78)
  • RaiseException (Address: 0x1834c1290)
  • ReadConsoleA (Address: 0x1834c0cc8)
  • ReadConsoleW (Address: 0x1834c0e40)
  • ReadFile (Address: 0x1834c0b80)
  • ReleaseMutex (Address: 0x1834c1140)
  • ReleaseSemaphore (Address: 0x1834c0940)
  • ReleaseSRWLockExclusive (Address: 0x1834c1090)
  • ReleaseSRWLockShared (Address: 0x1834c1088)
  • RemoveDirectoryW (Address: 0x1834c0d58)
  • RemoveVectoredExceptionHandler (Address: 0x1834c0d68)
  • ResetEvent (Address: 0x1834c0b10)
  • ResolveLocaleName (Address: 0x1834c10d0)
  • ResumeThread (Address: 0x1834c0a38)
  • RtlCaptureContext (Address: 0x1834c0f80)
  • RtlInstallFunctionTableCallback (Address: 0x1834c0ca8)
  • RtlLookupFunctionEntry (Address: 0x1834c0f78)
  • RtlPcToFileHeader (Address: 0x1834c0f20)
  • RtlUnwind (Address: 0x1834c0b68)
  • RtlUnwindEx (Address: 0x1834c0f18)
  • RtlVirtualUnwind (Address: 0x1834c0f70)
  • SetConsoleCtrlHandler (Address: 0x1834c0ea8)
  • SetConsoleMode (Address: 0x1834c0cd0)
  • SetCriticalSectionSpinCount (Address: 0x1834c0cb8)
  • SetCurrentDirectoryA (Address: 0x1834c11e0)
  • SetCurrentDirectoryW (Address: 0x1834c1040)
  • SetEndOfFile (Address: 0x1834c0a50)
  • SetEnvironmentVariableW (Address: 0x1834c0e60)
  • SetEvent (Address: 0x1834c0a90)
  • SetFileAttributesW (Address: 0x1834c0fd0)
  • SetFilePointer (Address: 0x1834c10c8)
  • SetFilePointerEx (Address: 0x1834c0ba8)
  • SetFileTime (Address: 0x1834c0fc8)
  • SetLastError (Address: 0x1834c1048)
  • SetStdHandle (Address: 0x1834c0ba0)
  • SetThreadExecutionState (Address: 0x1834c0e30)
  • SetThreadLocale (Address: 0x1834c11f0)
  • SetThreadPreferredUILanguages (Address: 0x1834c0ad0)
  • SetThreadPriority (Address: 0x1834c0d38)
  • SetUnhandledExceptionFilter (Address: 0x1834c0f60)
  • SignalObjectAndWait (Address: 0x1834c0dc8)
  • SizeofResource (Address: 0x1834c1218)
  • Sleep (Address: 0x1834c1058)
  • SleepConditionVariableCS (Address: 0x1834c0d18)
  • SleepConditionVariableSRW (Address: 0x1834c1060)
  • SubmitThreadpoolWork (Address: 0x1834c09e0)
  • SwitchToThread (Address: 0x1834c09c0)
  • SystemTimeToFileTime (Address: 0x1834c1150)
  • SystemTimeToTzSpecificLocalTime (Address: 0x1834c1168)
  • TerminateProcess (Address: 0x1834c0f50)
  • TerminateThread (Address: 0x1834c0e20)
  • TlsAlloc (Address: 0x1834c0f00)
  • TlsFree (Address: 0x1834c0ee8)
  • TlsGetValue (Address: 0x1834c0ef8)
  • TlsSetValue (Address: 0x1834c0ef0)
  • TryAcquireSRWLockExclusive (Address: 0x1834c1070)
  • TryAcquireSRWLockShared (Address: 0x1834c1068)
  • TryEnterCriticalSection (Address: 0x1834c0dd0)
  • TzSpecificLocalTimeToSystemTime (Address: 0x1834c1160)
  • UnhandledExceptionFilter (Address: 0x1834c0f68)
  • UnlockFile (Address: 0x1834c0df0)
  • UnlockFileEx (Address: 0x1834c08f0)
  • UnmapViewOfFile (Address: 0x1834c1108)
  • VerifyVersionInfoW (Address: 0x1834c0ad8)
  • VerSetConditionMask (Address: 0x1834c0b30)
  • VirtualAlloc (Address: 0x1834c11b8)
  • VirtualFree (Address: 0x1834c11b0)
  • VirtualProtect (Address: 0x1834c0bf8)
  • VirtualQuery (Address: 0x1834c0a20)
  • WaitForMultipleObjects (Address: 0x1834c0a88)
  • WaitForSingleObject (Address: 0x1834c1138)
  • WaitForSingleObjectEx (Address: 0x1834c09b8)
  • WaitForThreadpoolWorkCallbacks (Address: 0x1834c09e8)
  • WaitNamedPipeW (Address: 0x1834c0e18)
  • WakeAllConditionVariable (Address: 0x1834c0f40)
  • WakeConditionVariable (Address: 0x1834c09b0)
  • WideCharToMultiByte (Address: 0x1834c1180)
  • WriteConsoleW (Address: 0x1834c0b70)
  • WriteFile (Address: 0x1834c10c0)
  • WritePrivateProfileStringW (Address: 0x1834c0980)
ktmw32.dll
  • CommitTransaction (Address: 0x1834c2098)
  • CreateTransaction (Address: 0x1834c2090)
  • RollbackTransaction (Address: 0x1834c2088)
MPR.dll
  • WNetGetProviderNameW (Address: 0x1834c12b8)
  • WNetGetResourceInformationW (Address: 0x1834c12b0)
  • WNetGetUniversalNameW (Address: 0x1834c12c0)
MSACM32.dll
  • acmMetrics (Address: 0x1834c12f0)
  • acmStreamClose (Address: 0x1834c12d8)
  • acmStreamConvert (Address: 0x1834c12e8)
  • acmStreamOpen (Address: 0x1834c12d0)
  • acmStreamPrepareHeader (Address: 0x1834c1300)
  • acmStreamSize (Address: 0x1834c12e0)
  • acmStreamUnprepareHeader (Address: 0x1834c12f8)
mscms.dll
  • CloseColorProfile (Address: 0x1834c20a8)
  • CreateMultiProfileTransform (Address: 0x1834c20d8)
  • DeleteColorTransform (Address: 0x1834c20e0)
  • GetColorDirectoryW (Address: 0x1834c20b8)
  • GetColorProfileHeader (Address: 0x1834c20d0)
  • IsColorProfileValid (Address: 0x1834c20c8)
  • OpenColorProfileW (Address: 0x1834c20b0)
  • TranslateColors (Address: 0x1834c20c0)
MSIMG32.dll
  • AlphaBlend (Address: 0x1834c1310)
  • GradientFill (Address: 0x1834c1318)
  • TransparentBlt (Address: 0x1834c1320)
ntdll.dll
  • NtCreateKeyedEvent (Address: 0x1834c20f8)
  • NtReleaseKeyedEvent (Address: 0x1834c20f0)
  • NtWaitForKeyedEvent (Address: 0x1834c2100)
ole32.dll
  • CLSIDFromProgID (Address: 0x1834c2298)
  • CLSIDFromString (Address: 0x1834c2290)
  • CoCreateGuid (Address: 0x1834c2158)
  • CoCreateInstance (Address: 0x1834c2150)
  • CoFreeUnusedLibraries (Address: 0x1834c2208)
  • CoGetApartmentType (Address: 0x1834c21b0)
  • CoGetCallerTID (Address: 0x1834c22b0)
  • CoGetClassObject (Address: 0x1834c2190)
  • CoGetInterfaceAndReleaseStream (Address: 0x1834c2170)
  • CoInitialize (Address: 0x1834c2180)
  • CoInitializeEx (Address: 0x1834c21a0)
  • CoInitializeSecurity (Address: 0x1834c2200)
  • CoMarshalInterface (Address: 0x1834c22b8)
  • CoMarshalInterThreadInterfaceInStream (Address: 0x1834c2318)
  • CoRegisterClassObject (Address: 0x1834c2320)
  • CoRegisterInitializeSpy (Address: 0x1834c21b8)
  • CoRegisterPSClsid (Address: 0x1834c22d0)
  • CoReleaseMarshalData (Address: 0x1834c22c0)
  • CoRevokeClassObject (Address: 0x1834c22c8)
  • CoRevokeInitializeSpy (Address: 0x1834c21c0)
  • CoSetProxyBlanket (Address: 0x1834c2160)
  • CoTaskMemAlloc (Address: 0x1834c2140)
  • CoTaskMemFree (Address: 0x1834c2130)
  • CoTaskMemRealloc (Address: 0x1834c2138)
  • CoUninitialize (Address: 0x1834c2178)
  • CoWaitForMultipleHandles (Address: 0x1834c2168)
  • CreateDataAdviseHolder (Address: 0x1834c2300)
  • CreateOleAdviseHolder (Address: 0x1834c21f8)
  • CreateStreamOnHGlobal (Address: 0x1834c2188)
  • DoDragDrop (Address: 0x1834c21d8)
  • GetHGlobalFromStream (Address: 0x1834c22a8)
  • HGLOBAL_UserFree (Address: 0x1834c2228)
  • HGLOBAL_UserFree64 (Address: 0x1834c2268)
  • HGLOBAL_UserMarshal (Address: 0x1834c2218)
  • HGLOBAL_UserMarshal64 (Address: 0x1834c2258)
  • HGLOBAL_UserSize (Address: 0x1834c2210)
  • HGLOBAL_UserSize64 (Address: 0x1834c2250)
  • HGLOBAL_UserUnmarshal (Address: 0x1834c2220)
  • HGLOBAL_UserUnmarshal64 (Address: 0x1834c2260)
  • HWND_UserFree (Address: 0x1834c2248)
  • HWND_UserFree64 (Address: 0x1834c2288)
  • HWND_UserMarshal (Address: 0x1834c2238)
  • HWND_UserMarshal64 (Address: 0x1834c2278)
  • HWND_UserSize (Address: 0x1834c2230)
  • HWND_UserSize64 (Address: 0x1834c2270)
  • HWND_UserUnmarshal (Address: 0x1834c2240)
  • HWND_UserUnmarshal64 (Address: 0x1834c2280)
  • IIDFromString (Address: 0x1834c21a8)
  • OleCreate (Address: 0x1834c21c8)
  • OleDuplicateData (Address: 0x1834c21e8)
  • OleInitialize (Address: 0x1834c2120)
  • OleLockRunning (Address: 0x1834c22a0)
  • OleRegEnumVerbs (Address: 0x1834c2118)
  • OleRegGetMiscStatus (Address: 0x1834c2110)
  • OleRegGetUserType (Address: 0x1834c22d8)
  • OleRun (Address: 0x1834c22e8)
  • OleSaveToStream (Address: 0x1834c22f8)
  • OleSetContainedObject (Address: 0x1834c21d0)
  • OleUninitialize (Address: 0x1834c2128)
  • PropVariantClear (Address: 0x1834c22f0)
  • ReadClassStm (Address: 0x1834c22e0)
  • RegisterDragDrop (Address: 0x1834c21e0)
  • ReleaseStgMedium (Address: 0x1834c21f0)
  • RevokeDragDrop (Address: 0x1834c2308)
  • StringFromCLSID (Address: 0x1834c2198)
  • StringFromGUID2 (Address: 0x1834c2148)
  • WriteClassStm (Address: 0x1834c2310)
OLEAUT32.dll
  • DispCallFunc (Address: 0x1834c13c0)
  • GetErrorInfo (Address: 0x1834c13d8)
  • LHashValOfNameSys (Address: 0x1834c1400)
  • LoadRegTypeLib (Address: 0x1834c1408)
  • LoadTypeLib (Address: 0x1834c1430)
  • LoadTypeLibEx (Address: 0x1834c13f8)
  • OleCreateFontIndirect (Address: 0x1834c13b8)
  • OleCreatePropertyFrame (Address: 0x1834c1368)
  • RegisterTypeLib (Address: 0x1834c1428)
  • SafeArrayAccessData (Address: 0x1834c13f0)
  • SafeArrayCopy (Address: 0x1834c13a0)
  • SafeArrayCreate (Address: 0x1834c13c8)
  • SafeArrayCreateVector (Address: 0x1834c13e0)
  • SafeArrayDestroy (Address: 0x1834c1378)
  • SafeArrayGetLBound (Address: 0x1834c1388)
  • SafeArrayGetUBound (Address: 0x1834c1380)
  • SafeArrayGetVartype (Address: 0x1834c1398)
  • SafeArrayLock (Address: 0x1834c1390)
  • SafeArrayRedim (Address: 0x1834c1360)
  • SafeArrayUnaccessData (Address: 0x1834c13e8)
  • SafeArrayUnlock (Address: 0x1834c13a8)
  • SysAllocString (Address: 0x1834c1448)
  • SysAllocStringByteLen (Address: 0x1834c1340)
  • SysAllocStringLen (Address: 0x1834c1450)
  • SysFreeString (Address: 0x1834c1440)
  • SysStringByteLen (Address: 0x1834c1338)
  • SysStringLen (Address: 0x1834c1458)
  • SystemTimeToVariantTime (Address: 0x1834c1418)
  • UnRegisterTypeLib (Address: 0x1834c1420)
  • VarBstrCat (Address: 0x1834c1370)
  • VarBstrCmp (Address: 0x1834c1330)
  • VariantChangeType (Address: 0x1834c1358)
  • VariantClear (Address: 0x1834c1350)
  • VariantCopy (Address: 0x1834c13b0)
  • VariantCopyInd (Address: 0x1834c13d0)
  • VariantInit (Address: 0x1834c1348)
  • VariantTimeToSystemTime (Address: 0x1834c1410)
  • VarUI4FromStr (Address: 0x1834c1438)
RPCRT4.dll
  • CStdStubBuffer_AddRef (Address: 0x1834c1468)
  • CStdStubBuffer_Connect (Address: 0x1834c1480)
  • CStdStubBuffer_CountRefs (Address: 0x1834c14b8)
  • CStdStubBuffer_DebugServerQueryInterface (Address: 0x1834c14c0)
  • CStdStubBuffer_DebugServerRelease (Address: 0x1834c14c8)
  • CStdStubBuffer_Disconnect (Address: 0x1834c14a0)
  • CStdStubBuffer_Invoke (Address: 0x1834c14a8)
  • CStdStubBuffer_IsIIDSupported (Address: 0x1834c14b0)
  • CStdStubBuffer_QueryInterface (Address: 0x1834c1478)
  • IUnknown_AddRef_Proxy (Address: 0x1834c14d8)
  • IUnknown_QueryInterface_Proxy (Address: 0x1834c14d0)
  • IUnknown_Release_Proxy (Address: 0x1834c14e0)
  • NdrCStdStubBuffer_Release (Address: 0x1834c14f8)
  • NdrDllGetClassObject (Address: 0x1834c1488)
  • NdrOleAllocate (Address: 0x1834c14e8)
  • NdrOleFree (Address: 0x1834c14f0)
  • RpcStringFreeW (Address: 0x1834c1498)
  • UuidCreate (Address: 0x1834c1500)
  • UuidFromStringW (Address: 0x1834c1470)
  • UuidToStringW (Address: 0x1834c1490)
SETUPAPI.dll
  • CM_Get_Device_IDW (Address: 0x1834c1520)
  • SetupDiEnumDeviceInfo (Address: 0x1834c1518)
  • SetupDiGetClassDevsW (Address: 0x1834c1510)
SHELL32.dll
  • (Address: 0x1834c15b0)
  • (Address: 0x1834c1558)
  • CommandLineToArgvW (Address: 0x1834c1590)
  • DragQueryFileW (Address: 0x1834c1580)
  • ExtractIconExW (Address: 0x1834c1548)
  • SHAppBarMessage (Address: 0x1834c1550)
  • SHBrowseForFolderW (Address: 0x1834c1588)
  • SHChangeNotify (Address: 0x1834c1538)
  • SHCreateItemFromParsingName (Address: 0x1834c15c0)
  • Shell_NotifyIconW (Address: 0x1834c1568)
  • ShellExecuteExW (Address: 0x1834c1540)
  • ShellExecuteW (Address: 0x1834c15a8)
  • SHFileOperationW (Address: 0x1834c1560)
  • SHGetDesktopFolder (Address: 0x1834c1578)
  • SHGetFileInfoW (Address: 0x1834c1598)
  • SHGetFolderPathW (Address: 0x1834c1530)
  • SHGetMalloc (Address: 0x1834c15b8)
  • SHGetPathFromIDListW (Address: 0x1834c1570)
  • SHGetSpecialFolderLocation (Address: 0x1834c15a0)
SHLWAPI.dll
  • (Address: 0x1834c16b8)
  • AssocQueryStringW (Address: 0x1834c1638)
  • ColorHLSToRGB (Address: 0x1834c16c0)
  • ColorRGBToHLS (Address: 0x1834c1700)
  • PathCanonicalizeA (Address: 0x1834c1708)
  • PathCanonicalizeW (Address: 0x1834c15e8)
  • PathCombineW (Address: 0x1834c1668)
  • PathCreateFromUrlW (Address: 0x1834c16e8)
  • PathFileExistsW (Address: 0x1834c1670)
  • PathFindExtensionW (Address: 0x1834c1628)
  • PathGetCharTypeW (Address: 0x1834c16d8)
  • PathIsPrefixW (Address: 0x1834c1620)
  • PathIsRelativeA (Address: 0x1834c16b0)
  • PathIsRelativeW (Address: 0x1834c16f0)
  • PathIsURLW (Address: 0x1834c1630)
  • PathMatchSpecExW (Address: 0x1834c16f8)
  • PathMatchSpecW (Address: 0x1834c15f8)
  • PathRelativePathToW (Address: 0x1834c1610)
  • PathRemoveFileSpecW (Address: 0x1834c1608)
  • PathUnExpandEnvStringsW (Address: 0x1834c15d0)
  • SHCreateStreamOnFileW (Address: 0x1834c15f0)
  • SHDeleteKeyW (Address: 0x1834c1658)
  • StrChrW (Address: 0x1834c1640)
  • StrCmpLogicalW (Address: 0x1834c1618)
  • StrCmpNIA (Address: 0x1834c16d0)
  • StrCmpNIW (Address: 0x1834c1690)
  • StrCmpW (Address: 0x1834c16c8)
  • StrRChrA (Address: 0x1834c16a8)
  • StrRChrW (Address: 0x1834c1600)
  • StrRStrIW (Address: 0x1834c1648)
  • StrStrIA (Address: 0x1834c16e0)
  • StrStrIW (Address: 0x1834c15e0)
  • StrStrNIW (Address: 0x1834c1680)
  • StrStrW (Address: 0x1834c1688)
  • StrToIntExW (Address: 0x1834c1650)
  • StrToIntW (Address: 0x1834c1678)
  • UrlCombineW (Address: 0x1834c15d8)
  • UrlIsW (Address: 0x1834c1660)
  • wnsprintfA (Address: 0x1834c16a0)
  • wnsprintfW (Address: 0x1834c1698)
urlmon.dll
  • URLDownloadToFileW (Address: 0x1834c2330)
USER32.dll
  • AdjustWindowRectEx (Address: 0x1834c1c10)
  • AllowSetForegroundWindow (Address: 0x1834c1890)
  • BeginPaint (Address: 0x1834c1768)
  • BringWindowToTop (Address: 0x1834c1ce8)
  • BroadcastSystemMessageW (Address: 0x1834c17b0)
  • CallNextHookEx (Address: 0x1834c1be0)
  • CallWindowProcW (Address: 0x1834c18e8)
  • ChangeClipboardChain (Address: 0x1834c1a28)
  • CharLowerBuffA (Address: 0x1834c19a0)
  • CharLowerBuffW (Address: 0x1834c1838)
  • CharLowerW (Address: 0x1834c19d0)
  • CharNextExA (Address: 0x1834c18a8)
  • CharNextW (Address: 0x1834c1928)
  • CharUpperA (Address: 0x1834c19d8)
  • CharUpperBuffA (Address: 0x1834c18f8)
  • CharUpperBuffW (Address: 0x1834c18f0)
  • CharUpperW (Address: 0x1834c1920)
  • ClientToScreen (Address: 0x1834c18e0)
  • CloseClipboard (Address: 0x1834c1a70)
  • CopyIcon (Address: 0x1834c1cc0)
  • CopyRect (Address: 0x1834c1a60)
  • CreateAcceleratorTableW (Address: 0x1834c1968)
  • CreateCaret (Address: 0x1834c1d20)
  • CreateIconIndirect (Address: 0x1834c1d08)
  • CreatePopupMenu (Address: 0x1834c1b40)
  • CreateWindowExW (Address: 0x1834c1910)
  • DefWindowProcW (Address: 0x1834c1820)
  • DestroyAcceleratorTable (Address: 0x1834c1960)
  • DestroyCaret (Address: 0x1834c1d28)
  • DestroyCursor (Address: 0x1834c1c48)
  • DestroyIcon (Address: 0x1834c1b80)
  • DestroyMenu (Address: 0x1834c1b38)
  • DestroyWindow (Address: 0x1834c1808)
  • DialogBoxIndirectParamW (Address: 0x1834c1bb8)
  • DispatchMessageW (Address: 0x1834c17a0)
  • DrawAnimatedRects (Address: 0x1834c1ca8)
  • DrawTextW (Address: 0x1834c18b0)
  • EmptyClipboard (Address: 0x1834c1a68)
  • EnableMenuItem (Address: 0x1834c1c80)
  • EnableWindow (Address: 0x1834c19f0)
  • EndDeferWindowPos (Address: 0x1834c1c28)
  • EndDialog (Address: 0x1834c1bc0)
  • EndPaint (Address: 0x1834c1818)
  • EnumChildWindows (Address: 0x1834c1cb0)
  • EnumDisplayMonitors (Address: 0x1834c1b58)
  • EnumWindows (Address: 0x1834c18b8)
  • EqualRect (Address: 0x1834c1748)
  • FillRect (Address: 0x1834c1a90)
  • FindWindowW (Address: 0x1834c1cb8)
  • FlashWindowEx (Address: 0x1834c17c8)
  • GetActiveWindow (Address: 0x1834c1858)
  • GetAncestor (Address: 0x1834c1b00)
  • GetAsyncKeyState (Address: 0x1834c1860)
  • GetCapture (Address: 0x1834c1868)
  • GetCaretBlinkTime (Address: 0x1834c19b0)
  • GetClassInfoExW (Address: 0x1834c1938)
  • GetClassLongPtrW (Address: 0x1834c1cd8)
  • GetClassNameW (Address: 0x1834c18d0)
  • GetClientRect (Address: 0x1834c1728)
  • GetClipboardData (Address: 0x1834c1a18)
  • GetCursor (Address: 0x1834c1ce0)
  • GetCursorInfo (Address: 0x1834c19b8)
  • GetCursorPos (Address: 0x1834c19e0)
  • GetDC (Address: 0x1834c17d8)
  • GetDCEx (Address: 0x1834c1d48)
  • GetDesktopWindow (Address: 0x1834c1a00)
  • GetDialogBaseUnits (Address: 0x1834c1840)
  • GetDlgItem (Address: 0x1834c1978)
  • GetDoubleClickTime (Address: 0x1834c1ad8)
  • GetFocus (Address: 0x1834c17e8)
  • GetForegroundWindow (Address: 0x1834c1880)
  • GetGuiResources (Address: 0x1834c1d60)
  • GetGUIThreadInfo (Address: 0x1834c19e8)
  • GetIconInfo (Address: 0x1834c1bb0)
  • GetKeyboardLayout (Address: 0x1834c1c20)
  • GetKeyboardLayoutList (Address: 0x1834c1d10)
  • GetKeyboardState (Address: 0x1834c19c0)
  • GetKeyNameTextW (Address: 0x1834c1c50)
  • GetKeyState (Address: 0x1834c17e0)
  • GetMenu (Address: 0x1834c1d68)
  • GetMenuItemCount (Address: 0x1834c1c98)
  • GetMenuItemID (Address: 0x1834c1c90)
  • GetMenuState (Address: 0x1834c1c70)
  • GetMenuStringW (Address: 0x1834c1c68)
  • GetMessageExtraInfo (Address: 0x1834c1ca0)
  • GetMessagePos (Address: 0x1834c1d00)
  • GetMessageTime (Address: 0x1834c1b50)
  • GetMessageW (Address: 0x1834c1790)
  • GetMonitorInfoW (Address: 0x1834c1b60)
  • GetParent (Address: 0x1834c1918)
  • GetProcessDefaultLayout (Address: 0x1834c1848)
  • GetProcessWindowStation (Address: 0x1834c1be8)
  • GetPropW (Address: 0x1834c1898)
  • GetShellWindow (Address: 0x1834c1d78)
  • GetSubMenu (Address: 0x1834c1c88)
  • GetSysColor (Address: 0x1834c18d8)
  • GetSystemMenu (Address: 0x1834c1c78)
  • GetSystemMetrics (Address: 0x1834c1878)
  • GetTitleBarInfo (Address: 0x1834c1990)
  • GetUpdateRect (Address: 0x1834c1ab8)
  • GetUpdateRgn (Address: 0x1834c1ab0)
  • GetUserObjectInformationW (Address: 0x1834c1bf0)
  • GetWindow (Address: 0x1834c1b08)
  • GetWindowDC (Address: 0x1834c1988)
  • GetWindowLongPtrW (Address: 0x1834c1758)
  • GetWindowLongW (Address: 0x1834c1778)
  • GetWindowPlacement (Address: 0x1834c1b48)
  • GetWindowRect (Address: 0x1834c1b10)
  • GetWindowRgn (Address: 0x1834c1c00)
  • GetWindowTextLengthW (Address: 0x1834c1940)
  • GetWindowTextW (Address: 0x1834c1948)
  • GetWindowThreadProcessId (Address: 0x1834c1d70)
  • HideCaret (Address: 0x1834c1d30)
  • InflateRect (Address: 0x1834c1cd0)
  • InsertMenuW (Address: 0x1834c1b30)
  • IntersectRect (Address: 0x1834c1730)
  • InvalidateRect (Address: 0x1834c1720)
  • InvalidateRgn (Address: 0x1834c1a48)
  • IsCharAlphaNumericW (Address: 0x1834c18c0)
  • IsCharAlphaW (Address: 0x1834c18c8)
  • IsChild (Address: 0x1834c1810)
  • IsClipboardFormatAvailable (Address: 0x1834c1a08)
  • IsGUIThread (Address: 0x1834c1b90)
  • IsIconic (Address: 0x1834c1830)
  • IsRectEmpty (Address: 0x1834c1a80)
  • IsWindow (Address: 0x1834c1908)
  • IsWindowEnabled (Address: 0x1834c1870)
  • IsWindowVisible (Address: 0x1834c1828)
  • IsZoomed (Address: 0x1834c1c60)
  • KillTimer (Address: 0x1834c1ac8)
  • LoadCursorW (Address: 0x1834c1770)
  • LoadIconW (Address: 0x1834c1b88)
  • LoadImageW (Address: 0x1834c1b98)
  • MapVirtualKeyExW (Address: 0x1834c1c58)
  • MapVirtualKeyW (Address: 0x1834c1d50)
  • MapWindowPoints (Address: 0x1834c1a98)
  • MessageBeep (Address: 0x1834c18a0)
  • MessageBoxW (Address: 0x1834c19c8)
  • MonitorFromPoint (Address: 0x1834c1b70)
  • MonitorFromWindow (Address: 0x1834c1b68)
  • mouse_event (Address: 0x1834c1af8)
  • MoveWindow (Address: 0x1834c1980)
  • MsgWaitForMultipleObjects (Address: 0x1834c19f8)
  • OffsetRect (Address: 0x1834c1740)
  • OpenClipboard (Address: 0x1834c1a78)
  • PeekMessageW (Address: 0x1834c17a8)
  • PostMessageW (Address: 0x1834c17b8)
  • PostQuitMessage (Address: 0x1834c17c0)
  • PostThreadMessageW (Address: 0x1834c1a50)
  • PrivateExtractIconsW (Address: 0x1834c1a58)
  • PtInRect (Address: 0x1834c1750)
  • RedrawWindow (Address: 0x1834c1958)
  • RegisterClassExW (Address: 0x1834c1900)
  • RegisterClassW (Address: 0x1834c1d58)
  • RegisterClipboardFormatW (Address: 0x1834c1a10)
  • RegisterWindowMessageW (Address: 0x1834c1788)
  • ReleaseCapture (Address: 0x1834c1af0)
  • ReleaseDC (Address: 0x1834c17d0)
  • RemovePropW (Address: 0x1834c1cf0)
  • ScreenToClient (Address: 0x1834c19a8)
  • ScrollDC (Address: 0x1834c1a40)
  • SendMessageTimeoutW (Address: 0x1834c1a38)
  • SendMessageW (Address: 0x1834c1ae0)
  • SetActiveWindow (Address: 0x1834c1b20)
  • SetCapture (Address: 0x1834c1970)
  • SetCaretPos (Address: 0x1834c1d40)
  • SetClipboardData (Address: 0x1834c1a20)
  • SetClipboardViewer (Address: 0x1834c1a30)
  • SetCursor (Address: 0x1834c1aa0)
  • SetCursorPos (Address: 0x1834c1aa8)
  • SetDlgItemTextW (Address: 0x1834c1bc8)
  • SetFocus (Address: 0x1834c17f0)
  • SetForegroundWindow (Address: 0x1834c1888)
  • SetGestureConfig (Address: 0x1834c1cf8)
  • SetLayeredWindowAttributes (Address: 0x1834c1998)
  • SetParent (Address: 0x1834c1ba8)
  • SetPropW (Address: 0x1834c1b18)
  • SetRect (Address: 0x1834c1a88)
  • SetTimer (Address: 0x1834c1ad0)
  • SetWindowLongPtrW (Address: 0x1834c1760)
  • SetWindowLongW (Address: 0x1834c1780)
  • SetWindowPos (Address: 0x1834c17f8)
  • SetWindowRgn (Address: 0x1834c1718)
  • SetWindowsHookExW (Address: 0x1834c1bd0)
  • SetWindowTextW (Address: 0x1834c1950)
  • SetWinEventHook (Address: 0x1834c1c38)
  • ShowCaret (Address: 0x1834c1d38)
  • ShowCursor (Address: 0x1834c1d18)
  • ShowWindow (Address: 0x1834c1800)
  • SystemParametersInfoW (Address: 0x1834c1b78)
  • ToUnicodeEx (Address: 0x1834c1c18)
  • TrackPopupMenu (Address: 0x1834c1b28)
  • TranslateMessage (Address: 0x1834c1798)
  • UnhookWindowsHookEx (Address: 0x1834c1bd8)
  • UnhookWinEvent (Address: 0x1834c1c40)
  • UnionRect (Address: 0x1834c1738)
  • UnregisterClassW (Address: 0x1834c1930)
  • UpdateLayeredWindow (Address: 0x1834c1bf8)
  • UpdateWindow (Address: 0x1834c1ac0)
  • ValidateRgn (Address: 0x1834c1c08)
  • WaitForInputIdle (Address: 0x1834c1cc8)
  • WindowFromPoint (Address: 0x1834c1c30)
  • wsprintfA (Address: 0x1834c1850)
  • wsprintfW (Address: 0x1834c1ae8)
  • wvsprintfA (Address: 0x1834c1ba0)
USP10.dll
  • ScriptBreak (Address: 0x1834c1d98)
  • ScriptFreeCache (Address: 0x1834c1dc0)
  • ScriptGetFontProperties (Address: 0x1834c1da0)
  • ScriptGetLogicalWidths (Address: 0x1834c1d90)
  • ScriptItemize (Address: 0x1834c1dc8)
  • ScriptLayout (Address: 0x1834c1d88)
  • ScriptPlace (Address: 0x1834c1da8)
  • ScriptShape (Address: 0x1834c1db0)
  • ScriptString_pLogAttr (Address: 0x1834c1dd0)
  • ScriptStringAnalyse (Address: 0x1834c1dd8)
  • ScriptStringFree (Address: 0x1834c1db8)
VERSION.dll
  • GetFileVersionInfoSizeW (Address: 0x1834c1df0)
  • GetFileVersionInfoW (Address: 0x1834c1de8)
  • VerQueryValueW (Address: 0x1834c1df8)
WININET.dll
  • FtpCreateDirectoryW (Address: 0x1834c1ec8)
  • FtpDeleteFileW (Address: 0x1834c1eb8)
  • FtpFindFirstFileW (Address: 0x1834c1ea0)
  • FtpGetFileSize (Address: 0x1834c1ef8)
  • FtpGetFileW (Address: 0x1834c1ea8)
  • FtpOpenFileW (Address: 0x1834c1e70)
  • FtpPutFileW (Address: 0x1834c1eb0)
  • FtpRemoveDirectoryW (Address: 0x1834c1ed8)
  • FtpRenameFileW (Address: 0x1834c1ec0)
  • HttpAddRequestHeadersW (Address: 0x1834c1e78)
  • HttpEndRequestW (Address: 0x1834c1e88)
  • HttpOpenRequestW (Address: 0x1834c1e18)
  • HttpQueryInfoA (Address: 0x1834c1e90)
  • HttpQueryInfoW (Address: 0x1834c1e28)
  • HttpSendRequestExW (Address: 0x1834c1e80)
  • HttpSendRequestW (Address: 0x1834c1e20)
  • InternetAttemptConnect (Address: 0x1834c1e48)
  • InternetCloseHandle (Address: 0x1834c1ee8)
  • InternetConnectW (Address: 0x1834c1ee0)
  • InternetCrackUrlW (Address: 0x1834c1ed0)
  • InternetErrorDlg (Address: 0x1834c1e30)
  • InternetFindNextFileW (Address: 0x1834c1e98)
  • InternetGetLastResponseInfoW (Address: 0x1834c1e68)
  • InternetOpenW (Address: 0x1834c1ef0)
  • InternetQueryDataAvailable (Address: 0x1834c1e58)
  • InternetQueryOptionW (Address: 0x1834c1e60)
  • InternetReadFile (Address: 0x1834c1e38)
  • InternetSetCookieW (Address: 0x1834c1e40)
  • InternetSetOptionW (Address: 0x1834c1e08)
  • InternetSetStatusCallbackW (Address: 0x1834c1e10)
  • InternetWriteFile (Address: 0x1834c1e50)
WINMM.dll
  • PlaySoundW (Address: 0x1834c1f28)
  • sndPlaySoundW (Address: 0x1834c1f40)
  • timeBeginPeriod (Address: 0x1834c1f38)
  • timeEndPeriod (Address: 0x1834c1f30)
  • waveOutClose (Address: 0x1834c1f18)
  • waveOutOpen (Address: 0x1834c1f20)
  • waveOutPrepareHeader (Address: 0x1834c1f10)
  • waveOutReset (Address: 0x1834c1f48)
  • waveOutWrite (Address: 0x1834c1f08)
WINSPOOL.DRV
  • (Address: 0x1834c1f70)
  • ClosePrinter (Address: 0x1834c1f58)
  • DeviceCapabilitiesW (Address: 0x1834c1f68)
  • DocumentPropertiesW (Address: 0x1834c1f90)
  • EnumPrintersW (Address: 0x1834c1f78)
  • GetPrinterDataW (Address: 0x1834c1f80)
  • GetPrinterW (Address: 0x1834c1f88)
  • OpenPrinterW (Address: 0x1834c1f60)
WS2_32.dll
  • bind (Address: 0x1834c2038)
  • closesocket (Address: 0x1834c1fc0)
  • connect (Address: 0x1834c2010)
  • gethostbyaddr (Address: 0x1834c1fd8)
  • gethostbyname (Address: 0x1834c2058)
  • getpeername (Address: 0x1834c2028)
  • getservbyname (Address: 0x1834c1fe8)
  • getservbyport (Address: 0x1834c1fe0)
  • getsockname (Address: 0x1834c1fd0)
  • getsockopt (Address: 0x1834c2048)
  • htonl (Address: 0x1834c1fb8)
  • htons (Address: 0x1834c2068)
  • inet_addr (Address: 0x1834c2070)
  • inet_ntoa (Address: 0x1834c2078)
  • ioctlsocket (Address: 0x1834c2040)
  • ntohs (Address: 0x1834c1fa0)
  • recv (Address: 0x1834c1ff0)
  • recvfrom (Address: 0x1834c2020)
  • select (Address: 0x1834c2050)
  • send (Address: 0x1834c2000)
  • sendto (Address: 0x1834c2018)
  • setsockopt (Address: 0x1834c2030)
  • shutdown (Address: 0x1834c2008)
  • socket (Address: 0x1834c1fa8)
  • WSACleanup (Address: 0x1834c1fb0)
  • WSAGetLastError (Address: 0x1834c2060)
  • WSASetLastError (Address: 0x1834c1ff8)
  • WSAStartup (Address: 0x1834c1fc8)