msctf.dll

Description: MSCTF Server DLL

Version: 10.0.19041.5794

Architecture: 64-bit

Operating System: Windows NT

SHA256: bef7942fdf30f45e6655a140d9ef140d

File Size: 1.1 MB

Uploaded At: Dec. 1, 2025, 7:33 a.m.

Views: 9

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

TF_RunInputCPL (Ordinal: 1, Address: 0x5f360)
CtfImeAssociateFocus (Ordinal: 2, Address: 0x15c00)
CtfImeConfigure (Ordinal: 3, Address: 0x5f530)
CtfImeConversionList (Ordinal: 4, Address: 0x5f540)
CtfImeCreateInputContext (Ordinal: 5, Address: 0x327f0)
CtfImeCreateThreadMgr (Ordinal: 6, Address: 0x268f0)
CtfImeDestroy (Ordinal: 7, Address: 0x5f570)
CtfImeDestroyInputContext (Ordinal: 8, Address: 0xca70)
CtfImeDestroyThreadMgr (Ordinal: 9, Address: 0xce00)
CtfImeDispatchDefImeMessage (Ordinal: 10, Address: 0xd450)
CtfImeEnumRegisterWord (Ordinal: 11, Address: 0x5f5a0)
CtfImeEscape (Ordinal: 12, Address: 0x5f5d0)
CtfImeEscapeEx (Ordinal: 13, Address: 0x5f600)
CtfImeGetGuidAtom (Ordinal: 14, Address: 0x5f690)
CtfImeGetRegisterWordStyle (Ordinal: 15, Address: 0x5f700)
CtfImeInquire (Ordinal: 16, Address: 0x5f730)
CtfImeInquireExW (Ordinal: 17, Address: 0x139a0)
CtfImeIsGuidMapEnable (Ordinal: 18, Address: 0x5f760)
CtfImeIsIME (Ordinal: 19, Address: 0x5f7d0)
CtfImeProcessCicHotkey (Ordinal: 20, Address: 0x18d00)
CtfImeProcessKey (Ordinal: 21, Address: 0x15760)
CtfImeRegisterWord (Ordinal: 22, Address: 0x5f850)
CtfImeSelect (Ordinal: 23, Address: 0x5f880)
CtfImeSelectEx (Ordinal: 24, Address: 0x32f60)
CtfImeSetActiveContext (Ordinal: 25, Address: 0x313f0)
CtfImeSetCompositionString (Ordinal: 26, Address: 0x5f8b0)
CtfImeSetFocus (Ordinal: 27, Address: 0x5f8c0)
CtfImeToAsciiEx (Ordinal: 28, Address: 0x5f950)
CtfImeUnregisterWord (Ordinal: 29, Address: 0x5f960)
CtfNotifyIME (Ordinal: 30, Address: 0xe670)
DllCanUnloadNow (Ordinal: 31, Address: 0x3c640)
DllGetClassObject (Ordinal: 32, Address: 0x3d000)
DllRegisterServer (Ordinal: 33, Address: 0x5d850)
DllUnregisterServer (Ordinal: 34, Address: 0x5dbd0)
HasDeferredInputForCoreDispatcher (Ordinal: 35, Address: 0x186d0)
InputFocusMonitorCreate (Ordinal: 36, Address: 0x6f70)
SetInputScope (Ordinal: 37, Address: 0x40680)
SetInputScopeXML (Ordinal: 38, Address: 0x7a200)
SetInputScopes (Ordinal: 39, Address: 0x7a250)
SetInputScopes2 (Ordinal: 40, Address: 0x358e0)
TF_CUASAppFix (Ordinal: 41, Address: 0x5f990)
TF_CanUninitialize (Ordinal: 42, Address: 0x6520)
TF_CleanUpPrivateMessages (Ordinal: 43, Address: 0x6600)
TF_CreateCTFWatchdogMutex (Ordinal: 44, Address: 0x2fc50)
TF_CreateCategoryMgr (Ordinal: 45, Address: 0x5f9d0)
TF_CreateCicLoadMutex (Ordinal: 46, Address: 0x2db00)
TF_CreateCicLoadWinStaMutex (Ordinal: 47, Address: 0x2fd30)
TF_CreateDisplayAttributeMgr (Ordinal: 48, Address: 0x5fa00)
TF_CreateInputProcessorProfiles (Ordinal: 49, Address: 0x3c230)
TF_CreateLangBarItemMgr (Ordinal: 50, Address: 0x5fa20)
TF_CreateLangBarMgr (Ordinal: 51, Address: 0x3b140)
TF_CreateThreadMgr (Ordinal: 52, Address: 0x5fa40)
TF_GetAppCompatFlags (Ordinal: 53, Address: 0x25750)
TF_GetCompatibleKeyboardLayout (Ordinal: 54, Address: 0x5fa60)
TF_GetGlobalCompartment (Ordinal: 55, Address: 0x5fba0)
TF_GetInitSystemFlags (Ordinal: 56, Address: 0x25b40)
TF_GetInputScope (Ordinal: 57, Address: 0x35c60)
TF_GetShowFloatingStatus (Ordinal: 58, Address: 0x7e420)
TF_GetThreadFlags (Ordinal: 59, Address: 0x8590)
TF_GetThreadMgr (Ordinal: 60, Address: 0x5fbb0)
TF_InitSystem (Ordinal: 61, Address: 0x2d630)
TF_InvalidAssemblyListCacheIfExist (Ordinal: 62, Address: 0x3d160)
TF_IsCtfmonRunning (Ordinal: 63, Address: 0x2c9f0)
TF_IsLanguageBarEnabled (Ordinal: 64, Address: 0x5fc70)
TF_IsThreadWithFlags (Ordinal: 65, Address: 0x3d160)
TF_MapCompatibleHKL (Ordinal: 66, Address: 0x5fd70)
TF_MapCompatibleKeyboardTip (Ordinal: 67, Address: 0x5fe00)
TF_Notify (Ordinal: 68, Address: 0x1b8d0)
TF_PostAllThreadMsg (Ordinal: 69, Address: 0x3c9e0)
TF_SendLangBandMsg (Ordinal: 70, Address: 0x5fe10)
TF_SetDefaultRemoteKeyboardLayout (Ordinal: 71, Address: 0x409a0)
TF_SetShowFloatingStatus (Ordinal: 72, Address: 0x7e430)
TF_SetThreadFlags (Ordinal: 73, Address: 0x3d160)
TF_UninitSystem (Ordinal: 74, Address: 0x2f210)
TF_WaitForInitialized (Ordinal: 75, Address: 0x6600)
TextInputClientWrapperCreate (Ordinal: 76, Address: 0x1aaa0)

Imported DLLs & Functions

api-ms-win-core-atoms-l1-1-0.dll

AddAtomW (Address: 0x1800dc778)
DeleteAtom (Address: 0x1800dc770)
FindAtomW (Address: 0x1800dc768)
GetAtomNameW (Address: 0x1800dc780)

api-ms-win-core-com-l1-1-0.dll

CoGetApartmentType (Address: 0x1800dc790)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x1800dc7b0)
IsDebuggerPresent (Address: 0x1800dc7a0)
OutputDebugStringW (Address: 0x1800dc7a8)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x1800dc7c0)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x1800dc7d0)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x1800dc7f8)
RaiseException (Address: 0x1800dc7f0)
SetLastError (Address: 0x1800dc7e0)
SetUnhandledExceptionFilter (Address: 0x1800dc800)
UnhandledExceptionFilter (Address: 0x1800dc7e8)

api-ms-win-core-errorhandling-l1-1-2.dll

RaiseFailFastException (Address: 0x1800dc810)

api-ms-win-core-fibers-l1-1-0.dll

FlsAlloc (Address: 0x1800dc828)
FlsFree (Address: 0x1800dc820)
FlsSetValue (Address: 0x1800dc830)

api-ms-win-core-file-l1-1-0.dll

GetFileAttributesW (Address: 0x1800dc850)
GetFullPathNameW (Address: 0x1800dc848)
SetFilePointer (Address: 0x1800dc840)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x1800dc860)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x1800dc870)
HeapAlloc (Address: 0x1800dc878)
HeapFree (Address: 0x1800dc888)
HeapReAlloc (Address: 0x1800dc880)

api-ms-win-core-heap-l2-1-0.dll

GlobalAlloc (Address: 0x1800dc8a8)
LocalAlloc (Address: 0x1800dc8b0)
LocalFree (Address: 0x1800dc8a0)
LocalReAlloc (Address: 0x1800dc898)

api-ms-win-core-heap-obsolete-l1-1-0.dll

GlobalLock (Address: 0x1800dc8c8)
GlobalUnlock (Address: 0x1800dc8c0)

api-ms-win-core-kernel32-legacy-l1-1-1.dll

VerifyVersionInfoW (Address: 0x1800dc8d8)

api-ms-win-core-libraryloader-l1-2-0.dll

FindStringOrdinal (Address: 0x1800dc900)
FreeLibrary (Address: 0x1800dc928)
GetModuleFileNameA (Address: 0x1800dc8f0)
GetModuleFileNameW (Address: 0x1800dc8f8)
GetModuleHandleExW (Address: 0x1800dc908)
GetModuleHandleW (Address: 0x1800dc918)
GetProcAddress (Address: 0x1800dc910)
LoadLibraryExW (Address: 0x1800dc920)
LoadStringW (Address: 0x1800dc8e8)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x1800dc938)
GetACP (Address: 0x1800dc940)
GetLocaleInfoW (Address: 0x1800dc960)
GetSystemDefaultLangID (Address: 0x1800dc948)
GetSystemDefaultLCID (Address: 0x1800dc968)
IsDBCSLeadByteEx (Address: 0x1800dc958)
LCMapStringW (Address: 0x1800dc950)

api-ms-win-core-localization-obsolete-l1-2-0.dll

CompareStringA (Address: 0x1800dc978)
GetUserDefaultUILanguage (Address: 0x1800dc980)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x1800dc9a8)
MapViewOfFile (Address: 0x1800dc990)
OpenFileMappingW (Address: 0x1800dc998)
UnmapViewOfFile (Address: 0x1800dc9a0)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x1800dc9c0)
GetEnvironmentVariableW (Address: 0x1800dc9b8)

api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessW (Address: 0x1800dca30)
CreateThread (Address: 0x1800dc9f0)
ExitThread (Address: 0x1800dca28)
GetCurrentProcess (Address: 0x1800dca08)
GetCurrentProcessId (Address: 0x1800dc9f8)
GetCurrentThreadId (Address: 0x1800dc9e0)
GetProcessIdOfThread (Address: 0x1800dca18)
OpenProcessToken (Address: 0x1800dc9d8)
OpenThread (Address: 0x1800dca10)
ProcessIdToSessionId (Address: 0x1800dc9e8)
TerminateProcess (Address: 0x1800dc9d0)
TlsAlloc (Address: 0x1800dca38)
TlsFree (Address: 0x1800dca20)
TlsGetValue (Address: 0x1800dca00)
TlsSetValue (Address: 0x1800dca40)

api-ms-win-core-processthreads-l1-1-1.dll

GetProcessMitigationPolicy (Address: 0x1800dca58)
OpenProcess (Address: 0x1800dca50)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x1800dca68)
QueryPerformanceFrequency (Address: 0x1800dca70)

api-ms-win-core-psapi-l1-1-0.dll

K32GetModuleFileNameExW (Address: 0x1800dca80)
K32GetProcessImageFileNameW (Address: 0x1800dca88)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x1800dcab0)
RegCreateKeyExW (Address: 0x1800dcac8)
RegDeleteKeyExW (Address: 0x1800dcad0)
RegDeleteValueW (Address: 0x1800dcab8)
RegEnumKeyExW (Address: 0x1800dcaa8)
RegEnumValueW (Address: 0x1800dcaf0)
RegGetValueW (Address: 0x1800dca98)
RegOpenCurrentUser (Address: 0x1800dcad8)
RegOpenKeyExW (Address: 0x1800dcae8)
RegQueryInfoKeyW (Address: 0x1800dcaa0)
RegQueryValueExW (Address: 0x1800dcac0)
RegSetValueExW (Address: 0x1800dcae0)

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll

QISearch (Address: 0x1800dcb00)
StrStrIW (Address: 0x1800dcb08)

api-ms-win-core-sidebyside-l1-1-0.dll

ActivateActCtx (Address: 0x1800dcb30)
CreateActCtxW (Address: 0x1800dcb28)
DeactivateActCtx (Address: 0x1800dcb18)
ReleaseActCtx (Address: 0x1800dcb20)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x1800dcb40)
CompareStringW (Address: 0x1800dcb58)
MultiByteToWideChar (Address: 0x1800dcb50)
WideCharToMultiByte (Address: 0x1800dcb48)

api-ms-win-core-string-l2-1-0.dll

CharNextW (Address: 0x1800dcb68)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpW (Address: 0x1800dcb78)
lstrlenA (Address: 0x1800dcb88)
lstrlenW (Address: 0x1800dcb80)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x1800dcbb8)
AcquireSRWLockShared (Address: 0x1800dcbc8)
CreateEventW (Address: 0x1800dcc10)
CreateMutexExW (Address: 0x1800dcba8)
CreateMutexW (Address: 0x1800dcc08)
CreateSemaphoreExW (Address: 0x1800dcc20)
DeleteCriticalSection (Address: 0x1800dcbe8)
EnterCriticalSection (Address: 0x1800dcbe0)
InitializeCriticalSection (Address: 0x1800dcc40)
InitializeCriticalSectionAndSpinCount (Address: 0x1800dcc50)
InitializeCriticalSectionEx (Address: 0x1800dcc18)
LeaveCriticalSection (Address: 0x1800dcbd8)
OpenEventW (Address: 0x1800dcbf8)
OpenMutexW (Address: 0x1800dcc48)
OpenSemaphoreW (Address: 0x1800dcb98)
ReleaseMutex (Address: 0x1800dcbb0)
ReleaseSemaphore (Address: 0x1800dcbd0)
ReleaseSRWLockExclusive (Address: 0x1800dcbc0)
ReleaseSRWLockShared (Address: 0x1800dcc30)
ResetEvent (Address: 0x1800dcc00)
SetEvent (Address: 0x1800dcc28)
WaitForMultipleObjectsEx (Address: 0x1800dcbf0)
WaitForSingleObject (Address: 0x1800dcc38)
WaitForSingleObjectEx (Address: 0x1800dcba0)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x1800dcc70)
InitOnceComplete (Address: 0x1800dcc80)
Sleep (Address: 0x1800dcc60)
SleepConditionVariableSRW (Address: 0x1800dcc68)
WakeAllConditionVariable (Address: 0x1800dcc78)

api-ms-win-core-synch-l1-2-1.dll

WaitForMultipleObjects (Address: 0x1800dcc90)

api-ms-win-core-sysinfo-l1-1-0.dll

GetLocalTime (Address: 0x1800dccb0)
GetSystemDirectoryW (Address: 0x1800dcca0)
GetSystemInfo (Address: 0x1800dcca8)
GetSystemTimeAsFileTime (Address: 0x1800dccc8)
GetSystemWindowsDirectoryW (Address: 0x1800dccd0)
GetTickCount (Address: 0x1800dccc0)
GetTickCount64 (Address: 0x1800dccb8)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x1800dcce8)
CreateThreadpoolTimer (Address: 0x1800dccf8)
SetThreadpoolTimer (Address: 0x1800dcce0)
WaitForThreadpoolTimerCallbacks (Address: 0x1800dccf0)

api-ms-win-core-version-l1-1-0.dll

GetFileVersionInfoExW (Address: 0x1800dcd10)
GetFileVersionInfoSizeExW (Address: 0x1800dcd18)
VerQueryValueW (Address: 0x1800dcd08)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateString (Address: 0x1800dcd38)
WindowsDeleteString (Address: 0x1800dcd28)
WindowsGetStringRawBuffer (Address: 0x1800dcd30)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x1800dcd58)
EventSetInformation (Address: 0x1800dcd60)
EventUnregister (Address: 0x1800dcd50)
EventWriteTransfer (Address: 0x1800dcd48)

api-ms-win-security-base-l1-1-0.dll

AllocateAndInitializeSid (Address: 0x1800dcda0)
CheckTokenMembership (Address: 0x1800dcd70)
CreateWellKnownSid (Address: 0x1800dcd98)
EqualSid (Address: 0x1800dcda8)
FreeSid (Address: 0x1800dcd90)
GetSidSubAuthority (Address: 0x1800dcd78)
GetSidSubAuthorityCount (Address: 0x1800dcdb0)
GetTokenInformation (Address: 0x1800dcd80)
InitializeSid (Address: 0x1800dcd88)

api-ms-win-security-base-l1-2-0.dll

CheckTokenMembershipEx (Address: 0x1800dcdc0)

api-ms-win-service-management-l1-1-0.dll

CloseServiceHandle (Address: 0x1800dcde8)
OpenSCManagerW (Address: 0x1800dcde0)
OpenServiceW (Address: 0x1800dcdd8)
StartServiceW (Address: 0x1800dcdd0)

GDI32.dll

BitBlt (Address: 0x1800dc138)
CreateBitmap (Address: 0x1800dc1a0)
CreateBrushIndirect (Address: 0x1800dc130)
CreateCompatibleBitmap (Address: 0x1800dc140)
CreateCompatibleDC (Address: 0x1800dc180)
CreateDCW (Address: 0x1800dc090)
CreateDIBSection (Address: 0x1800dc198)
CreateFontIndirectW (Address: 0x1800dc150)
CreateFontW (Address: 0x1800dc158)
CreatePen (Address: 0x1800dc110)
CreateSolidBrush (Address: 0x1800dc118)
DeleteDC (Address: 0x1800dc188)
DeleteObject (Address: 0x1800dc148)
ExtCreatePen (Address: 0x1800dc0e8)
ExtTextOutA (Address: 0x1800dc178)
ExtTextOutW (Address: 0x1800dc0a0)
GetBitmapBits (Address: 0x1800dc1b0)
GetCurrentObject (Address: 0x1800dc0f0)
GetDeviceCaps (Address: 0x1800dc098)
GetDIBits (Address: 0x1800dc0d0)
GetObjectW (Address: 0x1800dc1a8)
GetStockObject (Address: 0x1800dc0c8)
GetTextAlign (Address: 0x1800dc170)
GetTextColor (Address: 0x1800dc108)
GetTextExtentPoint32W (Address: 0x1800dc0c0)
GetTextExtentPointA (Address: 0x1800dc160)
GetTextMetricsW (Address: 0x1800dc1b8)
LineTo (Address: 0x1800dc0f8)
MoveToEx (Address: 0x1800dc100)
PatBlt (Address: 0x1800dc0d8)
Polyline (Address: 0x1800dc0e0)
SelectObject (Address: 0x1800dc190)
SetBkColor (Address: 0x1800dc0b0)
SetBkMode (Address: 0x1800dc0b8)
SetLayout (Address: 0x1800dc120)
SetTextAlign (Address: 0x1800dc168)
SetTextColor (Address: 0x1800dc0a8)
SetViewportOrgEx (Address: 0x1800dc128)

IMM32.dll

CtfImmAppCompatEnableIMEonProtectedCode (Address: 0x1800dc238)
CtfImmCoUninitialize (Address: 0x1800dc278)
CtfImmEnterCoInitCountSkipMode (Address: 0x1800dc288)
CtfImmGenerateMessage (Address: 0x1800dc220)
CtfImmGetTMAEFlags (Address: 0x1800dc270)
CtfImmIsCiceroStartedInThread (Address: 0x1800dc1c8)
CtfImmLastEnabledWndDestroy (Address: 0x1800dc240)
CtfImmLeaveCoInitCountSkipMode (Address: 0x1800dc290)
CtfImmSetCiceroStartInThread (Address: 0x1800dc280)
ImmCreateIMCC (Address: 0x1800dc2c8)
ImmDestroyIMCC (Address: 0x1800dc2c0)
ImmEnumInputContext (Address: 0x1800dc2d0)
ImmGetAppCompatFlags (Address: 0x1800dc200)
ImmGetCompositionFontW (Address: 0x1800dc210)
ImmGetCompositionStringW (Address: 0x1800dc2b0)
ImmGetContext (Address: 0x1800dc248)
ImmGetConversionStatus (Address: 0x1800dc260)
ImmGetDefaultIMEWnd (Address: 0x1800dc230)
ImmGetHotKey (Address: 0x1800dc2a0)
ImmGetIMCCSize (Address: 0x1800dc1e8)
ImmGetIMEFileNameW (Address: 0x1800dc2a8)
ImmGetOpenStatus (Address: 0x1800dc298)
ImmGetProperty (Address: 0x1800dc208)
ImmLockIMC (Address: 0x1800dc1d8)
ImmLockIMCC (Address: 0x1800dc1f0)
ImmNotifyIME (Address: 0x1800dc1d0)
ImmReleaseContext (Address: 0x1800dc250)
ImmRequestMessageW (Address: 0x1800dc218)
ImmReSizeIMCC (Address: 0x1800dc228)
ImmSetCompositionStringW (Address: 0x1800dc2b8)
ImmSetConversionStatus (Address: 0x1800dc268)
ImmSetOpenStatus (Address: 0x1800dc258)
ImmUnlockIMC (Address: 0x1800dc1e0)
ImmUnlockIMCC (Address: 0x1800dc1f8)

msvcrt.dll

__C_specific_handler (Address: 0x1800dcef8)
__CxxFrameHandler3 (Address: 0x1800dce70)
__dllonexit (Address: 0x1800dce80)
_amsg_exit (Address: 0x1800dcea0)
_CxxThrowException (Address: 0x1800dce48)
_initterm (Address: 0x1800dce98)
_lock (Address: 0x1800dce90)
_onexit (Address: 0x1800dce78)
_unlock (Address: 0x1800dce88)
_vsnprintf (Address: 0x1800dcef0)
_vsnprintf_s (Address: 0x1800dcf10)
_vsnwprintf (Address: 0x1800dce20)
_wcsicmp (Address: 0x1800dce30)
_XcptFilter (Address: 0x1800dcea8)
??0exception@@QEAA@AEBQEBD@Z (Address: 0x1800dce10)
??0exception@@QEAA@AEBV0@@Z (Address: 0x1800dcdf8)
??0exception@@QEAA@XZ (Address: 0x1800dce40)
??1exception@@UEAA@XZ (Address: 0x1800dce38)
??1type_info@@UEAA@XZ (Address: 0x1800dce18)
?terminate@@YAXXZ (Address: 0x1800dce00)
?what@exception@@UEBAPEBDXZ (Address: 0x1800dce08)
free (Address: 0x1800dcec8)
malloc (Address: 0x1800dcec0)
memcmp (Address: 0x1800dce50)
memcpy (Address: 0x1800dce58)
memcpy_s (Address: 0x1800dcf08)
memmove (Address: 0x1800dce60)
memmove_s (Address: 0x1800dcf00)
memset (Address: 0x1800dce68)
sqrt (Address: 0x1800dcf18)
wcscpy_s (Address: 0x1800dceb8)
wcsncat_s (Address: 0x1800dce28)
wcsncpy (Address: 0x1800dced8)
wcsncpy_s (Address: 0x1800dceb0)
wcsrchr (Address: 0x1800dced0)
wcsstr (Address: 0x1800dcee8)
wcstoul (Address: 0x1800dcee0)

ntdll.dll

AlpcGetMessageAttribute (Address: 0x1800dcfd0)
AlpcInitializeMessageAttribute (Address: 0x1800dcf80)
LdrLockLoaderLock (Address: 0x1800dcf78)
LdrUnlockLoaderLock (Address: 0x1800dcf70)
NtAlpcAcceptConnectPort (Address: 0x1800dcf88)
NtAlpcCancelMessage (Address: 0x1800dcfa8)
NtAlpcConnectPortEx (Address: 0x1800dcf68)
NtAlpcCreatePort (Address: 0x1800dcf98)
NtAlpcCreatePortSection (Address: 0x1800dcfc8)
NtAlpcCreateSectionView (Address: 0x1800dcfc0)
NtAlpcDeletePortSection (Address: 0x1800dcfb8)
NtAlpcDeleteSectionView (Address: 0x1800dcfa0)
NtAlpcOpenSenderProcess (Address: 0x1800dcf90)
NtAlpcQueryInformation (Address: 0x1800dcf60)
NtAlpcSendWaitReceivePort (Address: 0x1800dcfb0)
NtClose (Address: 0x1800dd030)
NtCreateFile (Address: 0x1800dcff0)
NtOpenKey (Address: 0x1800dd008)
NtQueryInformationProcess (Address: 0x1800dd028)
NtQueryValueKey (Address: 0x1800dd000)
NtWriteFile (Address: 0x1800dcfe0)
RtlCaptureContext (Address: 0x1800dcf58)
RtlDllShutdownInProgress (Address: 0x1800dcf38)
RtlDosPathNameToNtPathName_U (Address: 0x1800dcff8)
RtlFormatCurrentUserKeyPath (Address: 0x1800dd018)
RtlFreeUnicodeString (Address: 0x1800dcfe8)
RtlGetDeviceFamilyInfoEnum (Address: 0x1800dcf30)
RtlInitUnicodeString (Address: 0x1800dd010)
RtlLookupFunctionEntry (Address: 0x1800dcf50)
RtlPublishWnfStateData (Address: 0x1800dcfd8)
RtlUnhandledExceptionFilter (Address: 0x1800dd020)
RtlVirtualUnwind (Address: 0x1800dcf48)
VerSetConditionMask (Address: 0x1800dcf28)
WinSqmAddToStream (Address: 0x1800dd038)
WinSqmIsOptedIn (Address: 0x1800dcf40)

OLEAUT32.dll

SysAllocString (Address: 0x1800dc2e8)
SysAllocStringLen (Address: 0x1800dc2f8)
SysFreeString (Address: 0x1800dc2f0)
SysStringLen (Address: 0x1800dc300)
VariantClear (Address: 0x1800dc2e0)
VariantCopy (Address: 0x1800dc308)

USER32.dll

(Address: 0x1800dc478)
(Address: 0x1800dc480)
(Address: 0x1800dc698)
ActivateKeyboardLayout (Address: 0x1800dc658)
AdjustWindowRectEx (Address: 0x1800dc440)
AnimateWindow (Address: 0x1800dc448)
BeginPaint (Address: 0x1800dc3b0)
ChangeWindowMessageFilter (Address: 0x1800dc748)
ChangeWindowMessageFilterEx (Address: 0x1800dc540)
ClientToScreen (Address: 0x1800dc388)
CopyImage (Address: 0x1800dc578)
CreateIconIndirect (Address: 0x1800dc528)
CreateWindowExW (Address: 0x1800dc548)
DefWindowProcW (Address: 0x1800dc550)
DestroyIcon (Address: 0x1800dc580)
DestroyWindow (Address: 0x1800dc678)
DispatchMessageA (Address: 0x1800dc518)
DispatchMessageW (Address: 0x1800dc560)
DrawEdge (Address: 0x1800dc348)
DrawIconEx (Address: 0x1800dc680)
DrawStateW (Address: 0x1800dc510)
DrawTextExW (Address: 0x1800dc400)
EndPaint (Address: 0x1800dc3b8)
EnumThreadWindows (Address: 0x1800dc638)
EqualRect (Address: 0x1800dc5a8)
FillRect (Address: 0x1800dc4e0)
FindWindowExW (Address: 0x1800dc570)
FindWindowW (Address: 0x1800dc718)
FrameRect (Address: 0x1800dc340)
GetActiveWindow (Address: 0x1800dc5f8)
GetAncestor (Address: 0x1800dc6b0)
GetCaretBlinkTime (Address: 0x1800dc3f0)
GetCIMSSM (Address: 0x1800dc6f0)
GetClassInfoExW (Address: 0x1800dc360)
GetClassLongPtrW (Address: 0x1800dc648)
GetClassNameW (Address: 0x1800dc588)
GetClientRect (Address: 0x1800dc5a0)
GetCurrentInputMessageSource (Address: 0x1800dc6f8)
GetCursor (Address: 0x1800dc460)
GetCursorPos (Address: 0x1800dc3d8)
GetDC (Address: 0x1800dc4c8)
GetDoubleClickTime (Address: 0x1800dc408)
GetFocus (Address: 0x1800dc6a0)
GetGUIThreadInfo (Address: 0x1800dc710)
GetIconInfo (Address: 0x1800dc530)
GetInputLocaleInfo (Address: 0x1800dc4d0)
GetKeyboardLayout (Address: 0x1800dc6d8)
GetKeyboardLayoutList (Address: 0x1800dc4e8)
GetKeyboardState (Address: 0x1800dc5b8)
GetKeyState (Address: 0x1800dc5e8)
GetMessageA (Address: 0x1800dc508)
GetMessageExtraInfo (Address: 0x1800dc470)
GetMessagePos (Address: 0x1800dc418)
GetMessageW (Address: 0x1800dc500)
GetMonitorInfoW (Address: 0x1800dc318)
GetParent (Address: 0x1800dc6c0)
GetPointerInfo (Address: 0x1800dc660)
GetPointerPenInfo (Address: 0x1800dc668)
GetPointerType (Address: 0x1800dc670)
GetProcessWindowStation (Address: 0x1800dc5c8)
GetPropW (Address: 0x1800dc5f0)
GetQueueStatus (Address: 0x1800dc758)
GetSysColor (Address: 0x1800dc328)
GetSystemMetrics (Address: 0x1800dc618)
GetThreadDesktop (Address: 0x1800dc5e0)
GetUserObjectInformationW (Address: 0x1800dc5d8)
GetWindow (Address: 0x1800dc568)
GetWindowBand (Address: 0x1800dc6a8)
GetWindowLongPtrW (Address: 0x1800dc6b8)
GetWindowLongW (Address: 0x1800dc3d0)
GetWindowRect (Address: 0x1800dc390)
GetWindowThreadProcessId (Address: 0x1800dc700)
InflateRect (Address: 0x1800dc4a8)
InSendMessageEx (Address: 0x1800dc630)
IntersectRect (Address: 0x1800dc590)
InvalidateRect (Address: 0x1800dc378)
IsChild (Address: 0x1800dc370)
IsRectEmpty (Address: 0x1800dc628)
IsThreadTSFEventAware (Address: 0x1800dc620)
IsWindow (Address: 0x1800dc6c8)
IsWindowInDestroy (Address: 0x1800dc650)
IsWindowUnicode (Address: 0x1800dc3e0)
IsWindowVisible (Address: 0x1800dc640)
keybd_event (Address: 0x1800dc3e8)
KillTimer (Address: 0x1800dc608)
LoadCursorW (Address: 0x1800dc358)
LoadIconW (Address: 0x1800dc350)
LoadImageW (Address: 0x1800dc398)
LoadKeyboardLayoutW (Address: 0x1800dc330)
MakeThreadTSFEventAware (Address: 0x1800dc738)
MapVirtualKeyExW (Address: 0x1800dc3f8)
MapVirtualKeyW (Address: 0x1800dc4b8)
MapWindowPoints (Address: 0x1800dc598)
MonitorFromPoint (Address: 0x1800dc430)
MonitorFromRect (Address: 0x1800dc428)
MoveWindow (Address: 0x1800dc3a0)
MsgWaitForMultipleObjects (Address: 0x1800dc558)
NotifyWinEvent (Address: 0x1800dc720)
OffsetRect (Address: 0x1800dc4a0)
PeekMessageA (Address: 0x1800dc520)
PeekMessageW (Address: 0x1800dc690)
PostMessageW (Address: 0x1800dc4f8)
PostQuitMessage (Address: 0x1800dc688)
PostThreadMessageW (Address: 0x1800dc6e0)
PtInRect (Address: 0x1800dc6d0)
RealGetWindowClassW (Address: 0x1800dc708)
RegisterClassExW (Address: 0x1800dc538)
RegisterWindowMessageW (Address: 0x1800dc750)
ReleaseCapture (Address: 0x1800dc438)
ReleaseDC (Address: 0x1800dc4c0)
RemoveThreadTSFEventAwareness (Address: 0x1800dc730)
ScreenToClient (Address: 0x1800dc380)
SendMessageW (Address: 0x1800dc6e8)
SendNotifyMessageW (Address: 0x1800dc488)
SetCapture (Address: 0x1800dc420)
SetCoalescableTimer (Address: 0x1800dc498)
SetCursor (Address: 0x1800dc410)
SetLayeredWindowAttributes (Address: 0x1800dc450)
SetRect (Address: 0x1800dc5c0)
SetRectEmpty (Address: 0x1800dc610)
SetThreadDesktop (Address: 0x1800dc4f0)
SetTimer (Address: 0x1800dc600)
SetWindowLongPtrW (Address: 0x1800dc490)
SetWindowLongW (Address: 0x1800dc468)
SetWindowPos (Address: 0x1800dc3c0)
SetWindowRgn (Address: 0x1800dc458)
SetWinEventHook (Address: 0x1800dc740)
ShowWindow (Address: 0x1800dc3a8)
SystemParametersInfoW (Address: 0x1800dc4d8)
ToUnicode (Address: 0x1800dc5b0)
ToUnicodeEx (Address: 0x1800dc4b0)
UnhookWinEvent (Address: 0x1800dc728)
UnionRect (Address: 0x1800dc3c8)
UnloadKeyboardLayout (Address: 0x1800dc338)
UnregisterClassW (Address: 0x1800dc368)
UpdateLayeredWindow (Address: 0x1800dc320)
WindowFromPoint (Address: 0x1800dc5d0)