browser_switcher_bho.dll

ADVAPI32.dll

RegCloseKey (Address: 0x10046000)
RegCreateKeyExW (Address: 0x10046004)
RegDeleteKeyW (Address: 0x10046008)
RegDeleteValueW (Address: 0x1004600c)
RegEnumKeyExW (Address: 0x10046010)
RegOpenKeyExW (Address: 0x10046014)
RegOpenKeyW (Address: 0x10046020)
RegQueryInfoKeyW (Address: 0x10046018)
RegQueryValueExW (Address: 0x10046024)
RegSetValueExW (Address: 0x1004601c)

api-ms-win-crt-filesystem-l1-1-0.dll

_lock_file (Address: 0x100462d0)
_stat64i32 (Address: 0x100462c8)
_unlock_file (Address: 0x100462d4)
_wstat64i32 (Address: 0x100462cc)

api-ms-win-crt-heap-l1-1-0.dll

_callnewh (Address: 0x100462ec)
_recalloc (Address: 0x100462e0)
free (Address: 0x100462dc)
malloc (Address: 0x100462e8)
realloc (Address: 0x100462e4)

api-ms-win-crt-runtime-l1-1-0.dll

_cexit (Address: 0x10046300)
_configure_narrow_argv (Address: 0x10046324)
_crt_atexit (Address: 0x10046308)
_errno (Address: 0x10046320)
_execute_onexit_table (Address: 0x1004630c)
_initialize_narrow_environment (Address: 0x1004631c)
_initialize_onexit_table (Address: 0x10046318)
_initterm (Address: 0x100462fc)
_initterm_e (Address: 0x100462f8)
_invalid_parameter_noinfo (Address: 0x10046304)
_invalid_parameter_noinfo_noreturn (Address: 0x10046314)
_register_onexit_function (Address: 0x10046310)
_seh_filter_dll (Address: 0x10046328)
_wassert (Address: 0x100462f4)

api-ms-win-crt-stdio-l1-1-0.dll

__acrt_iob_func (Address: 0x10046364)
__stdio_common_vfprintf (Address: 0x10046360)
__stdio_common_vsprintf (Address: 0x10046368)
_fseeki64 (Address: 0x1004634c)
_get_stream_buffer_pointers (Address: 0x1004637c)
_getcwd (Address: 0x10046370)
_wfopen (Address: 0x10046358)
fclose (Address: 0x10046338)
fflush (Address: 0x10046334)
fgetc (Address: 0x10046330)
fgetpos (Address: 0x10046374)
fgetwc (Address: 0x10046378)
fopen (Address: 0x10046354)
fputwc (Address: 0x10046344)
fread (Address: 0x1004633c)
fsetpos (Address: 0x10046348)
fwrite (Address: 0x10046350)
setvbuf (Address: 0x1004636c)
ungetc (Address: 0x1004635c)
ungetwc (Address: 0x10046340)

api-ms-win-crt-string-l1-1-0.dll

_wcsnicmp (Address: 0x100463a4)
isalnum (Address: 0x10046384)
strlen (Address: 0x100463a0)
strncmp (Address: 0x10046394)
strncpy (Address: 0x10046398)
toupper (Address: 0x1004639c)
wcscat_s (Address: 0x10046390)
wcscpy_s (Address: 0x10046388)
wcslen (Address: 0x1004638c)
wcsncpy_s (Address: 0x100463a8)

KERNEL32.dll

CloseHandle (Address: 0x100460cc)
CreateDirectoryW (Address: 0x100460b4)
CreateEventW (Address: 0x1004603c)
CreateMutexW (Address: 0x100460d8)
CreateProcessW (Address: 0x100460e0)
CreateThread (Address: 0x100460dc)
DecodePointer (Address: 0x10046070)
DeleteCriticalSection (Address: 0x10046088)
EncodePointer (Address: 0x100460b8)
EnterCriticalSection (Address: 0x1004607c)
ExpandEnvironmentStringsW (Address: 0x100460c8)
FindResourceW (Address: 0x100460a8)
FreeLibrary (Address: 0x1004608c)
GetCurrentProcess (Address: 0x10046058)
GetCurrentProcessId (Address: 0x10046034)
GetCurrentThreadId (Address: 0x10046030)
GetLastError (Address: 0x10046078)
GetModuleFileNameW (Address: 0x10046090)
GetModuleHandleW (Address: 0x10046094)
GetProcAddress (Address: 0x10046098)
GetSystemTimeAsFileTime (Address: 0x1004602c)
GetThreadLocale (Address: 0x100460c0)
GetVersionExW (Address: 0x100460bc)
InitializeCriticalSectionAndSpinCount (Address: 0x1004604c)
InitializeCriticalSectionEx (Address: 0x10046084)
InitializeSListHead (Address: 0x10046064)
IsDebuggerPresent (Address: 0x1004606c)
IsProcessorFeaturePresent (Address: 0x10046050)
LeaveCriticalSection (Address: 0x10046080)
LoadLibraryExW (Address: 0x1004609c)
LoadResource (Address: 0x100460a0)
lstrcmpiW (Address: 0x100460ac)
MoveFileExW (Address: 0x100460e4)
MultiByteToWideChar (Address: 0x100460b0)
OutputDebugStringW (Address: 0x10046068)
QueryPerformanceCounter (Address: 0x10046038)
RaiseException (Address: 0x10046074)
ReleaseMutex (Address: 0x100460d0)
ResetEvent (Address: 0x10046044)
SetEvent (Address: 0x10046048)
SetThreadLocale (Address: 0x100460c4)
SetUnhandledExceptionFilter (Address: 0x1004605c)
SizeofResource (Address: 0x100460a4)
TerminateProcess (Address: 0x10046054)
UnhandledExceptionFilter (Address: 0x10046060)
WaitForSingleObject (Address: 0x100460d4)
WaitForSingleObjectEx (Address: 0x10046040)
WideCharToMultiByte (Address: 0x100460e8)

MSVCP140.dll

?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z (Address: 0x10046104)
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z (Address: 0x100461b8)
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z (Address: 0x1004615c)
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ (Address: 0x10046154)
?_Gnavail@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBE_JXZ (Address: 0x10046208)
?_Gndec@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ (Address: 0x10046200)
?_Gninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ (Address: 0x10046204)
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPAPA_W0PAH001@Z (Address: 0x100461fc)
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ (Address: 0x10046218)
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_N_N@Z (Address: 0x10046110)
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ (Address: 0x1004618c)
?_Pnavail@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBE_JXZ (Address: 0x10046214)
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ (Address: 0x10046210)
?_Xlength_error@std@@YAXPBD@Z (Address: 0x1004614c)
?_Xout_of_range@std@@YAXPBD@Z (Address: 0x100461a4)
??0_Lockit@std@@QAE@H@Z (Address: 0x10046140)
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ (Address: 0x10046130)
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z (Address: 0x10046118)
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z (Address: 0x1004612c)
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ (Address: 0x100461c8)
??1_Lockit@std@@QAE@XZ (Address: 0x10046144)
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ (Address: 0x10046134)
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ (Address: 0x10046114)
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ (Address: 0x10046128)
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ (Address: 0x100461cc)
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAH@Z (Address: 0x1004610c)
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAI@Z (Address: 0x10046108)
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_N@Z (Address: 0x10046124)
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z (Address: 0x10046194)
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z (Address: 0x10046120)
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z (Address: 0x1004611c)
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z (Address: 0x10046190)
??Bid@locale@std@@QAEIXZ (Address: 0x10046150)
?always_noconv@codecvt_base@std@@QBE_NXZ (Address: 0x100461a8)
?bad@ios_base@std@@QBE_NXZ (Address: 0x100461c4)
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z (Address: 0x100460f8)
?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ (Address: 0x100461e4)
?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ (Address: 0x100461f0)
?eof@ios_base@std@@QBE_NXZ (Address: 0x100461bc)
?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ (Address: 0x100460f4)
?fail@ios_base@std@@QBE_NXZ (Address: 0x100461c0)
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WXZ (Address: 0x10046184)
?flags@ios_base@std@@QBEHXZ (Address: 0x10046164)
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ (Address: 0x1004619c)
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z (Address: 0x100461f4)
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ (Address: 0x100461d0)
?getloc@ios_base@std@@QBE?AVlocale@2@XZ (Address: 0x10046170)
?good@ios_base@std@@QBE_NXZ (Address: 0x10046160)
?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ (Address: 0x100461e8)
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A (Address: 0x100460fc)
?id@?$ctype@_W@std@@2V0locale@2@A (Address: 0x100461a0)
?in@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPA_W3AAPA_W@Z (Address: 0x100461ac)
?out@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z (Address: 0x100461b0)
?pbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z (Address: 0x1004620c)
?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ (Address: 0x100461ec)
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@_W@Z (Address: 0x10046198)
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ (Address: 0x10046180)
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ (Address: 0x100461d4)
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z (Address: 0x100461f8)
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z (Address: 0x10046178)
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ (Address: 0x100461d8)
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ (Address: 0x10046100)
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ (Address: 0x100461dc)
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z (Address: 0x10046174)
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z (Address: 0x100461e0)
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ (Address: 0x1004617c)
?uncaught_exception@std@@YA_NXZ (Address: 0x10046148)
?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z (Address: 0x100461b4)
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A (Address: 0x100460f0)
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WD@Z (Address: 0x10046188)
?widen@?$ctype@_W@std@@QBE_WD@Z (Address: 0x10046158)
?width@ios_base@std@@QAE_J_J@Z (Address: 0x1004616c)
?width@ios_base@std@@QBE_JXZ (Address: 0x10046168)
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z (Address: 0x1004613c)
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z (Address: 0x10046138)