Polytoria Creator.exe
Description: [File deleted after analysis due to size limit > 20MB]
Authors:
Version: 1.0.0.0
Architecture: 64-bit
Operating System: Windows
SHA256: 1e02cf84dc9d92f2d1b3d54c227c66df
File Size: 100.0 MB
Uploaded At: April 23, 2026, 10:19 p.m.
Views: 72
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- AmdPowerXpressRequestHighPerformance (Ordinal: 1, Address: 0x4c1f000)
- NoHotPatch (Ordinal: 2, Address: 0x46a0)
- NvOptimusEnablement (Ordinal: 3, Address: 0x4c1f004)
Imported DLLs & Functions
ADVAPI32.dll
- AdjustTokenPrivileges (Address: 0x1464dfd70)
- GetCurrentHwProfileA (Address: 0x1464dfd78)
- GetSidSubAuthority (Address: 0x1464dfd80)
- GetSidSubAuthorityCount (Address: 0x1464dfd88)
- GetTokenInformation (Address: 0x1464dfd90)
- LookupPrivilegeValueW (Address: 0x1464dfd98)
- OpenProcessToken (Address: 0x1464dfda0)
- RegCloseKey (Address: 0x1464dfda8)
- RegEnumKeyExW (Address: 0x1464dfdb0)
- RegEnumValueW (Address: 0x1464dfdb8)
- RegGetValueW (Address: 0x1464dfdc0)
- RegOpenKeyExW (Address: 0x1464dfdc8)
- RegOpenKeyW (Address: 0x1464dfdd0)
- RegQueryInfoKeyW (Address: 0x1464dfdd8)
- RegQueryValueExW (Address: 0x1464dfde0)
- RegSetValueExW (Address: 0x1464dfde8)
api-ms-win-core-synch-l1-2-0.dll
- WaitOnAddress (Address: 0x1464df8d0)
- WakeByAddressAll (Address: 0x1464df8d8)
- WakeByAddressSingle (Address: 0x1464df8e0)
AVRT.dll
- AvSetMmThreadCharacteristicsW (Address: 0x1464dfdf8)
- AvSetMmThreadPriority (Address: 0x1464dfe00)
bcrypt.dll
- BCryptGenRandom (Address: 0x1464dfe10)
combase.dll
- CoCreateFreeThreadedMarshaler (Address: 0x1464df8f0)
CRYPT32.dll
- CertCloseStore (Address: 0x1464dfe20)
- CertEnumCertificatesInStore (Address: 0x1464dfe28)
- CertGetCertificateContextProperty (Address: 0x1464dfe30)
- CertOpenSystemStoreA (Address: 0x1464dfe38)
- CryptBinaryToStringA (Address: 0x1464dfe40)
dwmapi.dll
- DwmEnableBlurBehindWindow (Address: 0x1464dfe50)
- DwmGetWindowAttribute (Address: 0x1464dfe58)
- DwmSetWindowAttribute (Address: 0x1464dfe60)
DWrite.dll
- DWriteCreateFactory (Address: 0x1464dfe70)
dxgi.dll
- CreateDXGIFactory1 (Address: 0x1464dfe80)
GDI32.dll
- BitBlt (Address: 0x1464dfe90)
- ChoosePixelFormat (Address: 0x1464dfe98)
- CombineRgn (Address: 0x1464dfea0)
- CreateBitmap (Address: 0x1464dfea8)
- CreateCompatibleBitmap (Address: 0x1464dfeb0)
- CreateCompatibleDC (Address: 0x1464dfeb8)
- CreateDIBSection (Address: 0x1464dfec0)
- CreatePolygonRgn (Address: 0x1464dfec8)
- CreateRectRgn (Address: 0x1464dfed0)
- CreateSolidBrush (Address: 0x1464dfed8)
- DeleteDC (Address: 0x1464dfee0)
- DeleteObject (Address: 0x1464dfee8)
- GetDeviceCaps (Address: 0x1464dfef8)
- GetDIBits (Address: 0x1464dfef0)
- GetPixel (Address: 0x1464dff00)
- GetTextExtentPoint32W (Address: 0x1464dff08)
- SelectObject (Address: 0x1464dff10)
- SetDIBitsToDevice (Address: 0x1464dff18)
- SetPixelFormat (Address: 0x1464dff20)
- SwapBuffers (Address: 0x1464dff28)
HID.DLL
- HidD_FreePreparsedData (Address: 0x1464dff38)
- HidD_GetPreparsedData (Address: 0x1464dff40)
- HidD_GetProductString (Address: 0x1464dff48)
- HidP_GetCaps (Address: 0x1464dff50)
IMM32.dll
- ImmAssociateContext (Address: 0x1464dff60)
- ImmGetCompositionStringW (Address: 0x1464dff68)
- ImmGetContext (Address: 0x1464dff70)
- ImmReleaseContext (Address: 0x1464dff78)
- ImmSetCandidateWindow (Address: 0x1464dff80)
- ImmSetCompositionWindow (Address: 0x1464dff88)
IPHLPAPI.DLL
- GetAdaptersAddresses (Address: 0x1464dff98)
- GetBestInterfaceEx (Address: 0x1464dffa0)
KERNEL32.dll
- __C_specific_handler (Address: 0x1464e06a8)
- AcquireSRWLockExclusive (Address: 0x1464dffb0)
- AcquireSRWLockShared (Address: 0x1464dffb8)
- AddDllDirectory (Address: 0x1464dffc0)
- AddVectoredExceptionHandler (Address: 0x1464dffc8)
- AttachConsole (Address: 0x1464dffd0)
- CancelIo (Address: 0x1464dffd8)
- CloseHandle (Address: 0x1464dffe0)
- CompareFileTime (Address: 0x1464dffe8)
- CompareStringOrdinal (Address: 0x1464dfff0)
- ConnectNamedPipe (Address: 0x1464dfff8)
- CreateDirectoryW (Address: 0x1464e0000)
- CreateEventA (Address: 0x1464e0008)
- CreateEventW (Address: 0x1464e0010)
- CreateFileA (Address: 0x1464e0018)
- CreateFileMappingA (Address: 0x1464e0020)
- CreateFileW (Address: 0x1464e0028)
- CreateMutexA (Address: 0x1464e0030)
- CreateNamedPipeW (Address: 0x1464e0038)
- CreatePipe (Address: 0x1464e0040)
- CreateProcessW (Address: 0x1464e0048)
- CreateSemaphoreA (Address: 0x1464e0050)
- CreateSemaphoreW (Address: 0x1464e0058)
- CreateSymbolicLinkW (Address: 0x1464e0060)
- CreateThread (Address: 0x1464e0068)
- CreateToolhelp32Snapshot (Address: 0x1464e0070)
- DeleteCriticalSection (Address: 0x1464e0078)
- DeleteFileW (Address: 0x1464e0080)
- DeleteProcThreadAttributeList (Address: 0x1464e0088)
- DeviceIoControl (Address: 0x1464e0090)
kernel32.dll
- DuplicateHandle (Address: 0x1464df900)
KERNEL32.dll
- EnterCriticalSection (Address: 0x1464e0098)
- ExitProcess (Address: 0x1464e00a0)
- FindClose (Address: 0x1464e00a8)
- FindFirstFileExW (Address: 0x1464e00b0)
- FindFirstFileW (Address: 0x1464e00b8)
- FindNextFileW (Address: 0x1464e00c0)
- FlushFileBuffers (Address: 0x1464e00c8)
- FormatMessageA (Address: 0x1464e00d0)
- FormatMessageW (Address: 0x1464e00d8)
- FreeEnvironmentStringsW (Address: 0x1464e00e0)
- FreeLibrary (Address: 0x1464e00e8)
- GetACP (Address: 0x1464e00f0)
- GetCommandLineW (Address: 0x1464e00f8)
- GetConsoleMode (Address: 0x1464e0100)
- GetConsoleOutputCP (Address: 0x1464e0108)
- GetConsoleProcessList (Address: 0x1464e0110)
- GetConsoleScreenBufferInfo (Address: 0x1464e0118)
- GetConsoleWindow (Address: 0x1464e0120)
- GetCurrentDirectoryW (Address: 0x1464e0128)
- GetCurrentProcess (Address: 0x1464e0130)
- GetCurrentProcessId (Address: 0x1464e0138)
- GetCurrentProcessorNumber (Address: 0x1464e0140)
- GetCurrentThread (Address: 0x1464e0148)
- GetCurrentThreadId (Address: 0x1464e0150)
- GetDiskFreeSpaceExW (Address: 0x1464e0158)
- GetDynamicTimeZoneInformation (Address: 0x1464e0160)
- GetEnvironmentStringsW (Address: 0x1464e0168)
- GetEnvironmentVariableA (Address: 0x1464e0170)
- GetEnvironmentVariableW (Address: 0x1464e0178)
- GetExitCodeProcess (Address: 0x1464e0180)
- GetExitCodeThread (Address: 0x1464e0188)
- GetFileAttributesExW (Address: 0x1464e0190)
- GetFileAttributesW (Address: 0x1464e0198)
- GetFileInformationByHandle (Address: 0x1464e01a0)
- GetFileInformationByHandleEx (Address: 0x1464e01a8)
- GetFileSize (Address: 0x1464e01b0)
- GetFileSizeEx (Address: 0x1464e01b8)
- GetFileTime (Address: 0x1464e01c0)
- GetFileType (Address: 0x1464e01c8)
- GetFinalPathNameByHandleW (Address: 0x1464e01d0)
- GetFullPathNameW (Address: 0x1464e01d8)
- GetGeoInfoW (Address: 0x1464e01e0)
- GetHandleInformation (Address: 0x1464e01e8)
- GetLargePageMinimum (Address: 0x1464e01f0)
- GetLastError (Address: 0x1464e01f8)
- GetLocaleInfoEx (Address: 0x1464e0208)
- GetLocaleInfoW (Address: 0x1464e0210)
- GetLocalTime (Address: 0x1464e0200)
- GetLogicalDrives (Address: 0x1464e0218)
- GetLongPathNameW (Address: 0x1464e0220)
- GetModuleFileNameA (Address: 0x1464e0228)
- GetModuleFileNameW (Address: 0x1464e0230)
- GetModuleHandleA (Address: 0x1464e0238)
- GetModuleHandleExA (Address: 0x1464e0240)
- GetModuleHandleExW (Address: 0x1464e0248)
- GetModuleHandleW (Address: 0x1464e0250)
- GetNativeSystemInfo (Address: 0x1464e0258)
- GetOverlappedResult (Address: 0x1464e0260)
- GetProcAddress (Address: 0x1464e0268)
- GetProcessAffinityMask (Address: 0x1464e0270)
- GetProcessHeap (Address: 0x1464e0278)
- GetProcessTimes (Address: 0x1464e0280)
- GetShortPathNameW (Address: 0x1464e0288)
- GetStdHandle (Address: 0x1464e0290)
- GetSystemInfo (Address: 0x1464e0298)
- GetSystemTime (Address: 0x1464e02a0)
- GetSystemTimeAsFileTime (Address: 0x1464e02a8)
- GetTempFileNameA (Address: 0x1464e02b0)
- GetTempPathA (Address: 0x1464e02b8)
- GetTempPathW (Address: 0x1464e02c0)
- GetThreadContext (Address: 0x1464e02c8)
- GetThreadId (Address: 0x1464e02d0)
- GetThreadPriority (Address: 0x1464e02d8)
- GetThreadTimes (Address: 0x1464e02e0)
- GetTickCount (Address: 0x1464e02e8)
- GetTickCount64 (Address: 0x1464e02f0)
- GetTimeZoneInformation (Address: 0x1464e02f8)
- GetUserDefaultUILanguage (Address: 0x1464e0300)
- GetUserGeoID (Address: 0x1464e0308)
- GetVolumeInformationW (Address: 0x1464e0310)
- GlobalAlloc (Address: 0x1464e0318)
- GlobalLock (Address: 0x1464e0320)
- GlobalMemoryStatusEx (Address: 0x1464e0328)
- GlobalSize (Address: 0x1464e0330)
- GlobalUnlock (Address: 0x1464e0338)
- HeapAlloc (Address: 0x1464e0340)
- HeapCreate (Address: 0x1464e0348)
- HeapDestroy (Address: 0x1464e0350)
- HeapFree (Address: 0x1464e0358)
- HeapReAlloc (Address: 0x1464e0360)
- InitializeConditionVariable (Address: 0x1464e0380)
- InitializeCriticalSection (Address: 0x1464e0388)
- InitializeCriticalSectionAndSpinCount (Address: 0x1464e0390)
- InitializeProcThreadAttributeList (Address: 0x1464e0398)
- InitializeSRWLock (Address: 0x1464e03a0)
- InitOnceBeginInitialize (Address: 0x1464e0368)
- InitOnceComplete (Address: 0x1464e0370)
- InitOnceExecuteOnce (Address: 0x1464e0378)
- IsDBCSLeadByteEx (Address: 0x1464e03a8)
- IsDebuggerPresent (Address: 0x1464e03b0)
- IsProcessorFeaturePresent (Address: 0x1464e03b8)
- K32GetPerformanceInfo (Address: 0x1464e03c0)
- K32GetProcessMemoryInfo (Address: 0x1464e03c8)
- LCIDToLocaleName (Address: 0x1464e03d0)
- LeaveCriticalSection (Address: 0x1464e03d8)
- LoadLibraryA (Address: 0x1464e03e0)
kernel32.dll
- LoadLibraryExA (Address: 0x1464df908)
KERNEL32.dll
- LoadLibraryExW (Address: 0x1464e03e8)
- LoadLibraryW (Address: 0x1464e03f0)
- LocaleNameToLCID (Address: 0x1464e0400)
- LocalFree (Address: 0x1464e03f8)
- lstrlenW (Address: 0x1464e06b0)
- MapViewOfFile (Address: 0x1464e0408)
- Module32FirstW (Address: 0x1464e0410)
- Module32NextW (Address: 0x1464e0418)
- MoveFileExA (Address: 0x1464e0420)
- MoveFileW (Address: 0x1464e0428)
- MultiByteToWideChar (Address: 0x1464e0430)
- OpenMutexW (Address: 0x1464e0438)
- OpenProcess (Address: 0x1464e0440)
- OutputDebugStringA (Address: 0x1464e0448)
- OutputDebugStringW (Address: 0x1464e0450)
- PeekNamedPipe (Address: 0x1464e0458)
- PowerClearRequest (Address: 0x1464e0460)
- PowerCreateRequest (Address: 0x1464e0468)
- PowerSetRequest (Address: 0x1464e0470)
- QueryFullProcessImageNameW (Address: 0x1464e0478)
- QueryPerformanceCounter (Address: 0x1464e0480)
- QueryPerformanceFrequency (Address: 0x1464e0488)
- RaiseException (Address: 0x1464e0490)
- ReadFile (Address: 0x1464e0498)
- ReleaseMutex (Address: 0x1464e04a0)
- ReleaseSemaphore (Address: 0x1464e04b8)
- ReleaseSRWLockExclusive (Address: 0x1464e04a8)
- ReleaseSRWLockShared (Address: 0x1464e04b0)
- RemoveDirectoryW (Address: 0x1464e04c0)
- RemoveDllDirectory (Address: 0x1464e04c8)
- RemoveVectoredExceptionHandler (Address: 0x1464e04d0)
- ReplaceFileW (Address: 0x1464e04d8)
- ResetEvent (Address: 0x1464e04e0)
- ResumeThread (Address: 0x1464e04e8)
- RtlUnwindEx (Address: 0x1464e04f0)
- SetConsoleCP (Address: 0x1464e04f8)
- SetConsoleCtrlHandler (Address: 0x1464e0500)
- SetConsoleMode (Address: 0x1464e0508)
- SetConsoleOutputCP (Address: 0x1464e0510)
- SetConsoleTextAttribute (Address: 0x1464e0518)
- SetCurrentDirectoryW (Address: 0x1464e0520)
- SetEnvironmentVariableA (Address: 0x1464e0528)
- SetEnvironmentVariableW (Address: 0x1464e0530)
- SetErrorMode (Address: 0x1464e0538)
- SetEvent (Address: 0x1464e0540)
- SetFileAttributesW (Address: 0x1464e0548)
- SetFilePointer (Address: 0x1464e0550)
- SetFilePointerEx (Address: 0x1464e0558)
- SetHandleInformation (Address: 0x1464e0560)
- SetLastError (Address: 0x1464e0568)
- SetNamedPipeHandleState (Address: 0x1464e0570)
- SetPriorityClass (Address: 0x1464e0578)
- SetProcessAffinityMask (Address: 0x1464e0580)
- SetStdHandle (Address: 0x1464e0588)
- SetThreadAffinityMask (Address: 0x1464e0590)
- SetThreadContext (Address: 0x1464e0598)
- SetThreadIdealProcessor (Address: 0x1464e05a0)
- SetThreadPriority (Address: 0x1464e05a8)
- SetUnhandledExceptionFilter (Address: 0x1464e05b0)
- Sleep (Address: 0x1464e05b8)
- SleepConditionVariableCS (Address: 0x1464e05c0)
- SleepConditionVariableSRW (Address: 0x1464e05c8)
- SuspendThread (Address: 0x1464e05d0)
- SwitchToThread (Address: 0x1464e05d8)
- SystemTimeToFileTime (Address: 0x1464e05e0)
- TerminateProcess (Address: 0x1464e05e8)
- TerminateThread (Address: 0x1464e05f0)
- TlsAlloc (Address: 0x1464e05f8)
- TlsFree (Address: 0x1464e0600)
- TlsGetValue (Address: 0x1464e0608)
- TlsSetValue (Address: 0x1464e0610)
- TryAcquireSRWLockExclusive (Address: 0x1464e0618)
- TryEnterCriticalSection (Address: 0x1464e0620)
- UnmapViewOfFile (Address: 0x1464e0628)
- UpdateProcThreadAttribute (Address: 0x1464e0630)
- VerifyVersionInfoW (Address: 0x1464e0640)
- VerSetConditionMask (Address: 0x1464e0638)
- VirtualAlloc (Address: 0x1464e0648)
- VirtualFree (Address: 0x1464e0650)
- VirtualProtect (Address: 0x1464e0658)
- VirtualQuery (Address: 0x1464e0660)
- WaitForMultipleObjects (Address: 0x1464e0668)
- WaitForSingleObject (Address: 0x1464e0670)
- WaitForSingleObjectEx (Address: 0x1464e0678)
- WakeAllConditionVariable (Address: 0x1464e0680)
- WakeConditionVariable (Address: 0x1464e0688)
- WideCharToMultiByte (Address: 0x1464e0690)
- WriteConsoleW (Address: 0x1464e0698)
- WriteFile (Address: 0x1464e06a0)
msvcrt.dll
- ___lc_codepage_func (Address: 0x1464e06c0)
- ___mb_cur_max_func (Address: 0x1464e06c8)
- __getmainargs (Address: 0x1464e06d0)
- __initenv (Address: 0x1464e06d8)
- __iob_func (Address: 0x1464e06e0)
- __set_app_type (Address: 0x1464e06f0)
- __setusermatherr (Address: 0x1464e06f8)
- _aligned_free (Address: 0x1464e0700)
- _aligned_malloc (Address: 0x1464e0708)
- _amsg_exit (Address: 0x1464e0710)
- _assert (Address: 0x1464e0718)
- _beginthreadex (Address: 0x1464e0720)
- _cexit (Address: 0x1464e0728)
- _chsize (Address: 0x1464e0730)
- _commode (Address: 0x1464e0738)
- _endthreadex (Address: 0x1464e0740)
- _errno (Address: 0x1464e0748)
- _fdopen (Address: 0x1464e0be8)
- _filelengthi64 (Address: 0x1464e0750)
- _fileno (Address: 0x1464e0758)
- _fileno (Address: 0x1464e0be0)
- _fmode (Address: 0x1464e0760)
- _fstat (Address: 0x1464e0b98)
- _fstat64 (Address: 0x1464e0768)
- _get_osfhandle (Address: 0x1464e0770)
- _getmaxstdio (Address: 0x1464e0778)
- _getpid (Address: 0x1464e0780)
- _gmtime64 (Address: 0x1464e0788)
- _hypot (Address: 0x1464e0790)
- _initterm (Address: 0x1464e0798)
- _itoa_s (Address: 0x1464e07a0)
- _lock (Address: 0x1464e07a8)
- _lseeki64 (Address: 0x1464e07b0)
- _memicmp (Address: 0x1464e0bd8)
- _nextafter (Address: 0x1464e0bb0)
- _putenv_s (Address: 0x1464e07b8)
- _read (Address: 0x1464e0bd0)
- _set_error_mode (Address: 0x1464e07c0)
- _setjmp (Address: 0x1464e07c8)
- _setmaxstdio (Address: 0x1464e07d0)
- _strdup (Address: 0x1464e07d8)
- _strdup (Address: 0x1464e0bc8)
- _stricmp (Address: 0x1464e0bc0)
- _stricmp (Address: 0x1464e07e0)
- _strtoi64 (Address: 0x1464e0ba8)
- _strtoui64 (Address: 0x1464e0ba0)
- _time64 (Address: 0x1464e07e8)
- _timezone (Address: 0x1464e07f0)
- _tzname (Address: 0x1464e07f8)
- _tzset (Address: 0x1464e0800)
- _unlock (Address: 0x1464e0808)
- _vscprintf (Address: 0x1464e0810)
- _vsnprintf (Address: 0x1464e0818)
- _vsnprintf_s (Address: 0x1464e0820)
- _vsnprintf_s (Address: 0x1464e0b90)
- _wchdir (Address: 0x1464e0828)
- _wfopen (Address: 0x1464e0830)
- _wfopen_s (Address: 0x1464e0838)
- _wfsopen (Address: 0x1464e0840)
- _wgetcwd (Address: 0x1464e0848)
- _write (Address: 0x1464e0bb8)
- abort (Address: 0x1464e0850)
- acos (Address: 0x1464e0858)
- asin (Address: 0x1464e0868)
- atan (Address: 0x1464e0870)
- atexit (Address: 0x1464e0860)
- atof (Address: 0x1464e0878)
- atoi (Address: 0x1464e0880)
- bsearch (Address: 0x1464e0888)
- calloc (Address: 0x1464e0890)
- ceil (Address: 0x1464e0898)
- clock (Address: 0x1464e08a0)
- cosh (Address: 0x1464e08a8)
- exit (Address: 0x1464e08b0)
- fclose (Address: 0x1464e08b8)
- feof (Address: 0x1464e08c0)
- ferror (Address: 0x1464e08c8)
- fflush (Address: 0x1464e08d0)
- fgetpos (Address: 0x1464e08d8)
- fgets (Address: 0x1464e08e0)
- fopen (Address: 0x1464e08e8)
- fprintf (Address: 0x1464e08f0)
- fputc (Address: 0x1464e08f8)
- fputs (Address: 0x1464e0900)
- fputwc (Address: 0x1464e0908)
- fread (Address: 0x1464e0910)
- free (Address: 0x1464e0918)
- freopen_s (Address: 0x1464e0920)
- fseek (Address: 0x1464e0928)
- fsetpos (Address: 0x1464e0930)
- ftell (Address: 0x1464e0938)
- fwprintf (Address: 0x1464e06e8)
- fwrite (Address: 0x1464e0940)
- getc (Address: 0x1464e0948)
- getenv (Address: 0x1464e0950)
- getwc (Address: 0x1464e0958)
- isalnum (Address: 0x1464e0960)
- isalpha (Address: 0x1464e0968)
- isdigit (Address: 0x1464e0970)
- isspace (Address: 0x1464e0978)
- iswctype (Address: 0x1464e0980)
- isxdigit (Address: 0x1464e0988)
- localeconv (Address: 0x1464e0990)
- log10 (Address: 0x1464e0998)
- longjmp (Address: 0x1464e09a0)
- malloc (Address: 0x1464e09a8)
- mbstowcs (Address: 0x1464e09b0)
- memchr (Address: 0x1464e09b8)
- memcmp (Address: 0x1464e09c0)
- memcpy (Address: 0x1464e09c8)
- memmove (Address: 0x1464e09d0)
- memset (Address: 0x1464e09d8)
- perror (Address: 0x1464e09e0)
- putc (Address: 0x1464e09e8)
- putchar (Address: 0x1464e09f0)
- puts (Address: 0x1464e09f8)
- putwc (Address: 0x1464e0a00)
- qsort (Address: 0x1464e0a08)
- rand (Address: 0x1464e0a10)
- realloc (Address: 0x1464e0a18)
- remove (Address: 0x1464e0a20)
- rewind (Address: 0x1464e0a28)
- setbuf (Address: 0x1464e0a30)
- setlocale (Address: 0x1464e0a38)
- setvbuf (Address: 0x1464e0a40)
- signal (Address: 0x1464e0a48)
- sinh (Address: 0x1464e0a50)
- srand (Address: 0x1464e0a58)
- strcat (Address: 0x1464e0a60)
- strcat_s (Address: 0x1464e0a68)
- strchr (Address: 0x1464e0a70)
- strcmp (Address: 0x1464e0a78)
- strcoll (Address: 0x1464e0a80)
- strcpy (Address: 0x1464e0a88)
- strcpy_s (Address: 0x1464e0a90)
- strcspn (Address: 0x1464e0a98)
- strerror (Address: 0x1464e0aa0)
- strftime (Address: 0x1464e0aa8)
- strlen (Address: 0x1464e0ab0)
- strncat (Address: 0x1464e0ab8)
- strncmp (Address: 0x1464e0ac0)
- strncpy (Address: 0x1464e0ac8)
- strpbrk (Address: 0x1464e0ad0)
- strrchr (Address: 0x1464e0ad8)
- strstr (Address: 0x1464e0ae0)
- strtol (Address: 0x1464e0ae8)
- strtoul (Address: 0x1464e0af0)
- strxfrm (Address: 0x1464e0af8)
- tan (Address: 0x1464e0b00)
- tanh (Address: 0x1464e0b08)
- tolower (Address: 0x1464e0b10)
- toupper (Address: 0x1464e0b18)
- towlower (Address: 0x1464e0b20)
- towupper (Address: 0x1464e0b28)
- ungetc (Address: 0x1464e0b30)
- ungetwc (Address: 0x1464e0b38)
- vfprintf (Address: 0x1464e0b40)
- wcscmp (Address: 0x1464e0b48)
- wcscoll (Address: 0x1464e0b50)
- wcscpy (Address: 0x1464e0b58)
- wcscpy_s (Address: 0x1464e0b60)
- wcsftime (Address: 0x1464e0b68)
- wcslen (Address: 0x1464e0b70)
- wcstol (Address: 0x1464e0b78)
- wcstombs (Address: 0x1464e0b80)
- wcsxfrm (Address: 0x1464e0b88)
ntdll.dll
- NtQueryInformationFile (Address: 0x1464e0bf8)
- NtWriteFile (Address: 0x1464e0c00)
- RtlCaptureContext (Address: 0x1464e0c08)
- RtlLookupFunctionEntry (Address: 0x1464e0c10)
- RtlNtStatusToDosError (Address: 0x1464df918)
- RtlVirtualUnwind (Address: 0x1464e0c18)
ole32.dll
- CoCreateInstance (Address: 0x1464e0c28)
- CoInitializeEx (Address: 0x1464e0c30)
- CoTaskMemFree (Address: 0x1464e0c38)
- CoUninitialize (Address: 0x1464e0c40)
- OleInitialize (Address: 0x1464e0c48)
- OleUninitialize (Address: 0x1464e0c50)
- PropVariantClear (Address: 0x1464e0c58)
- RegisterDragDrop (Address: 0x1464e0c60)
- ReleaseStgMedium (Address: 0x1464e0c68)
- RevokeDragDrop (Address: 0x1464e0c70)
oleaut32.dll
- GetErrorInfo (Address: 0x1464df928)
- SafeArrayCreateVector (Address: 0x1464df930)
- SafeArrayPutElement (Address: 0x1464df938)
- SetErrorInfo (Address: 0x1464df940)
OLEAUT32.dll
- SysAllocString (Address: 0x1464e0c80)
oleaut32.dll
- SysAllocStringLen (Address: 0x1464df948)
OLEAUT32.dll
- SysFreeString (Address: 0x1464e0c88)
oleaut32.dll
- SysStringLen (Address: 0x1464df950)
- VariantClear (Address: 0x1464df958)
OLEAUT32.dll
- VariantInit (Address: 0x1464e0c90)
SHCORE.dll
- GetDpiForMonitor (Address: 0x1464e0ca0)
- SetProcessDpiAwareness (Address: 0x1464e0ca8)
SHELL32.dll
- CommandLineToArgvW (Address: 0x1464e0cb8)
- DragAcceptFiles (Address: 0x1464e0cc0)
- DragQueryFileW (Address: 0x1464e0cc8)
- SetCurrentProcessExplicitAppUserModelID (Address: 0x1464e0cf0)
- SHCreateItemFromParsingName (Address: 0x1464e0cd0)
- Shell_NotifyIconGetRect (Address: 0x1464e0d00)
- Shell_NotifyIconW (Address: 0x1464e0d08)
- ShellExecuteW (Address: 0x1464e0cf8)
- SHFileOperationW (Address: 0x1464e0cd8)
- SHGetKnownFolderPath (Address: 0x1464e0ce0)
- SHGetPropertyStoreForWindow (Address: 0x1464e0ce8)
SHLWAPI.dll
- QISearch (Address: 0x1464e0d18)
- SHLoadIndirectString (Address: 0x1464e0d20)
- SHStrDupW (Address: 0x1464e0d28)
uiautomationcore.dll
- UiaGetReservedMixedAttributeValue (Address: 0x1464df968)
- UiaGetReservedNotSupportedValue (Address: 0x1464df970)
- UiaHostProviderFromHwnd (Address: 0x1464df978)
- UiaLookupId (Address: 0x1464df980)
- UiaRaiseAutomationEvent (Address: 0x1464df988)
- UiaRaiseAutomationPropertyChangedEvent (Address: 0x1464df990)
- UiaReturnRawElementProvider (Address: 0x1464df998)
user32.dll
- ActivateKeyboardLayout (Address: 0x1464df9a8)
- AdjustWindowRectEx (Address: 0x1464df9b0)
- AllowSetForegroundWindow (Address: 0x1464df9b8)
USER32.dll
- AttachThreadInput (Address: 0x1464e0d38)
user32.dll
- CallNextHookEx (Address: 0x1464df9c0)
- CallWindowProcW (Address: 0x1464df9c8)
- ClientToScreen (Address: 0x1464df9d0)
- ClipCursor (Address: 0x1464df9d8)
USER32.dll
- CloseClipboard (Address: 0x1464e0d40)
- CloseTouchInputHandle (Address: 0x1464e0d48)
user32.dll
- CreateCaret (Address: 0x1464df9e0)
- CreateIconFromResourceEx (Address: 0x1464df9e8)
- CreateIconIndirect (Address: 0x1464df9f0)
- CreatePopupMenu (Address: 0x1464df9f8)
- CreateWindowExA (Address: 0x1464dfa00)
- CreateWindowExW (Address: 0x1464dfa08)
- DefWindowProcW (Address: 0x1464dfa10)
- DestroyCaret (Address: 0x1464dfa18)
- DestroyIcon (Address: 0x1464dfa20)
- DestroyMenu (Address: 0x1464dfa28)
- DestroyWindow (Address: 0x1464dfa30)
- DialogBoxIndirectParamW (Address: 0x1464dfa38)
- DispatchMessageW (Address: 0x1464dfa40)
USER32.dll
- DisplayConfigGetDeviceInfo (Address: 0x1464e0d50)
user32.dll
- DrawTextW (Address: 0x1464dfa48)
USER32.dll
- EmptyClipboard (Address: 0x1464e0d58)
user32.dll
- EndDialog (Address: 0x1464dfa50)
- EnumChildWindows (Address: 0x1464dfa58)
- EnumDisplayMonitors (Address: 0x1464dfa60)
- EnumDisplaySettingsW (Address: 0x1464dfa68)
- EnumWindows (Address: 0x1464dfa70)
- FillRect (Address: 0x1464dfa78)
- FlashWindowEx (Address: 0x1464dfa80)
- GetAsyncKeyState (Address: 0x1464dfa88)
- GetClientRect (Address: 0x1464dfa90)
USER32.dll
- GetClipboardData (Address: 0x1464e0d60)
user32.dll
- GetCursorPos (Address: 0x1464dfa98)
- GetDC (Address: 0x1464dfaa0)
- GetDCEx (Address: 0x1464dfaa8)
USER32.dll
- GetDisplayConfigBufferSizes (Address: 0x1464e0d68)
user32.dll
- GetDlgItem (Address: 0x1464dfab0)
- GetDoubleClickTime (Address: 0x1464dfab8)
- GetForegroundWindow (Address: 0x1464dfac0)
- GetKeyboardLayout (Address: 0x1464dfad0)
- GetKeyboardLayoutList (Address: 0x1464dfad8)
- GetKeyboardState (Address: 0x1464dfae0)
- GetKeyState (Address: 0x1464dfac8)
- GetMenuItemCount (Address: 0x1464dfae8)
- GetMenuItemInfoW (Address: 0x1464dfaf0)
- GetMenuItemRect (Address: 0x1464dfaf8)
- GetMessageExtraInfo (Address: 0x1464dfb00)
- GetMessageTime (Address: 0x1464dfb08)
- GetMessageW (Address: 0x1464dfb10)
- GetMonitorInfoA (Address: 0x1464dfb18)
- GetMonitorInfoW (Address: 0x1464dfb20)
- GetParent (Address: 0x1464dfb28)
USER32.dll
- GetPointerPenInfo (Address: 0x1464e0d70)
- GetPointerType (Address: 0x1464e0d78)
user32.dll
- GetPropW (Address: 0x1464dfb30)
- GetRawInputData (Address: 0x1464dfb38)
- GetRawInputDeviceInfoA (Address: 0x1464dfb40)
- GetRawInputDeviceList (Address: 0x1464dfb48)
- GetSystemMetrics (Address: 0x1464dfb50)
USER32.dll
- GetTouchInputInfo (Address: 0x1464e0d80)
user32.dll
- GetUpdateRect (Address: 0x1464dfb58)
- GetWindowLongPtrA (Address: 0x1464dfb60)
- GetWindowLongPtrW (Address: 0x1464dfb68)
- GetWindowRect (Address: 0x1464dfb70)
- GetWindowTextLengthW (Address: 0x1464dfb78)
- GetWindowTextW (Address: 0x1464dfb80)
- GetWindowThreadProcessId (Address: 0x1464dfb88)
- InsertMenuItemW (Address: 0x1464dfb90)
USER32.dll
- IsClipboardFormatAvailable (Address: 0x1464e0d88)
user32.dll
- IsIconic (Address: 0x1464dfb98)
- IsProcessDPIAware (Address: 0x1464dfba0)
USER32.dll
- IsWindow (Address: 0x1464e0d90)
user32.dll
- IsWindowVisible (Address: 0x1464dfba8)
- IsZoomed (Address: 0x1464dfbb0)
- KillTimer (Address: 0x1464dfbb8)
- LoadCursorA (Address: 0x1464dfbc0)
- LoadIconA (Address: 0x1464dfbc8)
- LoadIconW (Address: 0x1464dfbd0)
USER32.dll
- LogicalToPhysicalPointForPerMonitorDPI (Address: 0x1464e0d98)
user32.dll
- MapVirtualKeyA (Address: 0x1464dfbd8)
- MapVirtualKeyExA (Address: 0x1464dfbe0)
USER32.dll
- MessageBeep (Address: 0x1464e0da0)
user32.dll
- MessageBoxW (Address: 0x1464dfbe8)
- MonitorFromWindow (Address: 0x1464dfbf0)
- MoveWindow (Address: 0x1464dfbf8)
- MsgWaitForMultipleObjects (Address: 0x1464dfc00)
USER32.dll
- OpenClipboard (Address: 0x1464e0da8)
user32.dll
- PeekMessageW (Address: 0x1464dfc08)
USER32.dll
- PhysicalToLogicalPointForPerMonitorDPI (Address: 0x1464e0db0)
user32.dll
- PostMessageA (Address: 0x1464dfc10)
- PostThreadMessageW (Address: 0x1464dfc18)
USER32.dll
- QueryDisplayConfig (Address: 0x1464e0db8)
user32.dll
- RegisterClassExA (Address: 0x1464dfc20)
- RegisterClassExW (Address: 0x1464dfc28)
- RegisterClassW (Address: 0x1464dfc30)
USER32.dll
- RegisterClipboardFormatA (Address: 0x1464e0dc0)
user32.dll
- RegisterDeviceNotificationW (Address: 0x1464dfc38)
- RegisterRawInputDevices (Address: 0x1464dfc40)
USER32.dll
- RegisterTouchWindow (Address: 0x1464e0dc8)
user32.dll
- ReleaseCapture (Address: 0x1464dfc48)
- ReleaseDC (Address: 0x1464dfc50)
- RemoveMenu (Address: 0x1464dfc58)
- RemovePropW (Address: 0x1464dfc60)
- ScreenToClient (Address: 0x1464dfc68)
- SendInput (Address: 0x1464dfc70)
- SendMessageA (Address: 0x1464dfc78)
- SendMessageW (Address: 0x1464dfc80)
- SetCapture (Address: 0x1464dfc88)
- SetCaretPos (Address: 0x1464dfc90)
USER32.dll
- SetClipboardData (Address: 0x1464e0dd0)
user32.dll
- SetCursor (Address: 0x1464dfc98)
- SetCursorPos (Address: 0x1464dfca0)
- SetFocus (Address: 0x1464dfca8)
- SetForegroundWindow (Address: 0x1464dfcb0)
- SetMenuInfo (Address: 0x1464dfcb8)
- SetMenuItemInfoW (Address: 0x1464dfcc0)
- SetPropW (Address: 0x1464dfcc8)
- SetTimer (Address: 0x1464dfcd0)
- SetWindowDisplayAffinity (Address: 0x1464dfcd8)
- SetWindowLongPtrA (Address: 0x1464dfce0)
- SetWindowLongPtrW (Address: 0x1464dfce8)
- SetWindowPos (Address: 0x1464dfcf0)
- SetWindowRgn (Address: 0x1464dfcf8)
- SetWindowsHookExA (Address: 0x1464dfd08)
- SetWindowTextW (Address: 0x1464dfd00)
- ShowWindow (Address: 0x1464dfd10)
- SystemParametersInfoA (Address: 0x1464dfd18)
- ToUnicodeEx (Address: 0x1464dfd20)
- TrackMouseEvent (Address: 0x1464dfd28)
- TrackPopupMenuEx (Address: 0x1464dfd30)
- TranslateMessage (Address: 0x1464dfd38)
- UnhookWindowsHookEx (Address: 0x1464dfd40)
- UnregisterClassA (Address: 0x1464dfd48)
- UnregisterClassW (Address: 0x1464dfd50)
- UnregisterDeviceNotification (Address: 0x1464dfd58)
USER32.dll
- WindowFromDC (Address: 0x1464e0dd8)
user32.dll
- WindowFromPoint (Address: 0x1464dfd60)
WINMM.dll
- midiInClose (Address: 0x1464e0de8)
- midiInGetDevCapsA (Address: 0x1464e0df0)
- midiInGetErrorTextA (Address: 0x1464e0df8)
- midiInGetNumDevs (Address: 0x1464e0e00)
- midiInOpen (Address: 0x1464e0e08)
- midiInStart (Address: 0x1464e0e10)
- midiInStop (Address: 0x1464e0e18)
- timeBeginPeriod (Address: 0x1464e0e20)
- timeEndPeriod (Address: 0x1464e0e28)
- timeGetDevCaps (Address: 0x1464e0e30)
WS2_32.dll
- freeaddrinfo (Address: 0x1464e0e48)
- getaddrinfo (Address: 0x1464e0e50)
- getnameinfo (Address: 0x1464e0e58)
- inet_pton (Address: 0x1464e0e60)
- WSAConnect (Address: 0x1464e0e40)
WSOCK32.dll
- __WSAFDIsSet (Address: 0x1464e0e88)
- accept (Address: 0x1464e0e90)
- bind (Address: 0x1464e0e98)
- closesocket (Address: 0x1464e0ea0)
- connect (Address: 0x1464e0ea8)
- getsockname (Address: 0x1464e0eb0)
- htonl (Address: 0x1464e0eb8)
- htons (Address: 0x1464e0ec0)
- inet_addr (Address: 0x1464e0ec8)
- ioctlsocket (Address: 0x1464e0ed0)
- listen (Address: 0x1464e0ed8)
- ntohl (Address: 0x1464e0ee0)
- ntohs (Address: 0x1464e0ee8)
- recv (Address: 0x1464e0ef0)
- recvfrom (Address: 0x1464e0ef8)
- select (Address: 0x1464e0f00)
- send (Address: 0x1464e0f08)
- sendto (Address: 0x1464e0f10)
- setsockopt (Address: 0x1464e0f18)
- socket (Address: 0x1464e0f20)
- WSACleanup (Address: 0x1464e0e70)
- WSAGetLastError (Address: 0x1464e0e78)
- WSAStartup (Address: 0x1464e0e80)