mspaint.exe

Description: Paint

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.6926

Architecture: 64-bit

Operating System: Windows NT

SHA256: c83e55184afe0232dcd76c9e0fc3b27e

File Size: 916.5 KB

Uploaded At: July 10, 2026, 12:43 p.m.

Views: 24

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

No exported functions.

Imported DLLs & Functions

ADVAPI32.dll
  • AdjustTokenPrivileges (Address: 0x1400a8c88)
  • DecryptFileW (Address: 0x1400a8c08)
  • DuplicateEncryptionInfoFile (Address: 0x1400a8c18)
  • EncryptFileW (Address: 0x1400a8c00)
  • EventRegister (Address: 0x1400a8c28)
  • EventUnregister (Address: 0x1400a8c20)
  • EventWriteTransfer (Address: 0x1400a8c10)
  • GetAce (Address: 0x1400a8c68)
  • GetAclInformation (Address: 0x1400a8c60)
  • GetNamedSecurityInfoW (Address: 0x1400a8c38)
  • GetSecurityInfo (Address: 0x1400a8c58)
  • GetSidSubAuthority (Address: 0x1400a8c78)
  • GetSidSubAuthorityCount (Address: 0x1400a8c70)
  • InitiateSystemShutdownExW (Address: 0x1400a8c90)
  • LookupPrivilegeValueW (Address: 0x1400a8c80)
  • OpenProcessToken (Address: 0x1400a8c50)
  • OpenThreadToken (Address: 0x1400a8c48)
  • RegCloseKey (Address: 0x1400a8bf0)
  • RegCreateKeyExW (Address: 0x1400a8be0)
  • RegDeleteKeyW (Address: 0x1400a8c98)
  • RegOpenKeyExW (Address: 0x1400a8c30)
  • RegQueryValueExW (Address: 0x1400a8be8)
  • RegSetValueExW (Address: 0x1400a8bf8)
  • SetNamedSecurityInfoW (Address: 0x1400a8c40)
api-ms-win-core-com-l1-1-0.dll
  • CLSIDFromString (Address: 0x1400aa998)
  • CoCreateFreeThreadedMarshaler (Address: 0x1400aa9d0)
  • CoCreateGuid (Address: 0x1400aa9e8)
  • CoCreateInstance (Address: 0x1400aa9d8)
  • CoGetInterfaceAndReleaseStream (Address: 0x1400aa9b8)
  • CoInitializeEx (Address: 0x1400aa9a0)
  • CoMarshalInterThreadInterfaceInStream (Address: 0x1400aa9c8)
  • CoReleaseMarshalData (Address: 0x1400aa9c0)
  • CoTaskMemAlloc (Address: 0x1400aa9e0)
  • CoTaskMemFree (Address: 0x1400aa9a8)
  • CoUninitialize (Address: 0x1400aa9b0)
  • CoWaitForMultipleHandles (Address: 0x1400aaa00)
  • CreateStreamOnHGlobal (Address: 0x1400aa990)
  • FreePropVariantArray (Address: 0x1400aa9f8)
  • PropVariantClear (Address: 0x1400aa9f0)
  • PropVariantCopy (Address: 0x1400aa988)
api-ms-win-core-com-l1-1-1.dll
  • RoGetAgileReference (Address: 0x1400aaa10)
api-ms-win-core-debug-l1-1-0.dll
  • OutputDebugStringA (Address: 0x1400aaa20)
api-ms-win-core-errorhandling-l1-1-0.dll
  • SetUnhandledExceptionFilter (Address: 0x1400aaa30)
  • UnhandledExceptionFilter (Address: 0x1400aaa38)
api-ms-win-core-featurestaging-l1-1-0.dll
  • RecordFeatureUsage (Address: 0x1400aaa48)
  • SubscribeFeatureStateChangeNotification (Address: 0x1400aaa50)
  • UnsubscribeFeatureStateChangeNotification (Address: 0x1400aaa58)
api-ms-win-core-file-l1-1-0.dll
  • CompareFileTime (Address: 0x1400aaa70)
  • GetTempFileNameW (Address: 0x1400aaa68)
api-ms-win-core-libraryloader-l1-2-0.dll
  • FindResourceExW (Address: 0x1400aaa80)
  • LoadResource (Address: 0x1400aaa98)
  • LockResource (Address: 0x1400aaa90)
  • SizeofResource (Address: 0x1400aaa88)
api-ms-win-core-localization-l1-2-0.dll
  • GetLocaleInfoEx (Address: 0x1400aaaa8)
api-ms-win-core-localization-l2-1-0.dll
  • GetNumberFormatEx (Address: 0x1400aaab8)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateThread (Address: 0x1400aaad8)
  • GetStartupInfoW (Address: 0x1400aaac8)
  • TerminateProcess (Address: 0x1400aaad0)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1400aaae8)
api-ms-win-core-registry-l1-1-0.dll
  • RegEnumKeyExW (Address: 0x1400aab08)
  • RegEnumValueW (Address: 0x1400aab10)
  • RegGetValueW (Address: 0x1400aab00)
  • RegQueryInfoKeyW (Address: 0x1400aaaf8)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x1400aab20)
  • RtlLookupFunctionEntry (Address: 0x1400aab28)
  • RtlVirtualUnwind (Address: 0x1400aab30)
api-ms-win-core-string-l1-1-0.dll
  • MultiByteToWideChar (Address: 0x1400aab48)
  • WideCharToMultiByte (Address: 0x1400aab40)
api-ms-win-core-synch-l1-1-0.dll
  • CreateEventExW (Address: 0x1400aab58)
  • CreateMutexW (Address: 0x1400aab78)
  • EnterCriticalSection (Address: 0x1400aab68)
  • InitializeCriticalSection (Address: 0x1400aab60)
  • LeaveCriticalSection (Address: 0x1400aab70)
api-ms-win-core-synch-l1-2-0.dll
  • Sleep (Address: 0x1400aab90)
  • SleepConditionVariableSRW (Address: 0x1400aab88)
  • WakeAllConditionVariable (Address: 0x1400aab98)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTime (Address: 0x1400aabb0)
  • GetSystemTimeAsFileTime (Address: 0x1400aaba8)
api-ms-win-core-timezone-l1-1-0.dll
  • SystemTimeToFileTime (Address: 0x1400aabc0)
api-ms-win-core-winrt-error-l1-1-0.dll
  • SetRestrictedErrorInfo (Address: 0x1400aabd0)
api-ms-win-core-winrt-error-l1-1-1.dll
  • RoGetMatchingRestrictedErrorInfo (Address: 0x1400aabe0)
api-ms-win-core-winrt-l1-1-0.dll
  • RoGetActivationFactory (Address: 0x1400aabf0)
api-ms-win-core-winrt-string-l1-1-0.dll
  • WindowsCreateString (Address: 0x1400aac18)
  • WindowsCreateStringReference (Address: 0x1400aac10)
  • WindowsDeleteString (Address: 0x1400aac08)
  • WindowsGetStringRawBuffer (Address: 0x1400aac00)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventSetInformation (Address: 0x1400aac28)
COMCTL32.dll
  • (Address: 0x1400a8ca8)
  • (Address: 0x1400a8cd0)
  • ImageList_Draw (Address: 0x1400a8cc8)
  • ImageList_GetImageCount (Address: 0x1400a8cb0)
  • ImageList_Remove (Address: 0x1400a8cb8)
  • ImageList_ReplaceIcon (Address: 0x1400a8cc0)
COMDLG32.dll
  • GetFileTitleW (Address: 0x1400a8ce8)
  • GetOpenFileNameW (Address: 0x1400a8ce0)
DismApi.DLL
  • DismCloseSession (Address: 0x1400a8d08)
  • DismInitialize (Address: 0x1400a8d18)
  • DismOpenSession (Address: 0x1400a8cf8)
  • DismRemoveCapability (Address: 0x1400a8d00)
  • DismShutdown (Address: 0x1400a8d10)
GDI32.dll
  • BitBlt (Address: 0x1400a8f30)
  • CombineRgn (Address: 0x1400a8da8)
  • CreateBitmap (Address: 0x1400a8f18)
  • CreateCompatibleBitmap (Address: 0x1400a8f38)
  • CreateCompatibleDC (Address: 0x1400a8f40)
  • CreateDCW (Address: 0x1400a8d80)
  • CreateDIBitmap (Address: 0x1400a8e28)
  • CreateDIBSection (Address: 0x1400a8e40)
  • CreateFontIndirectW (Address: 0x1400a8d88)
  • CreateFontW (Address: 0x1400a8d70)
  • CreateHalftonePalette (Address: 0x1400a8e38)
  • CreatePalette (Address: 0x1400a8e78)
  • CreatePatternBrush (Address: 0x1400a8ee8)
  • CreatePen (Address: 0x1400a8e10)
  • CreatePolygonRgn (Address: 0x1400a8d58)
  • CreateRectRgn (Address: 0x1400a8db0)
  • CreateRectRgnIndirect (Address: 0x1400a8ec0)
  • CreateSolidBrush (Address: 0x1400a8ee0)
  • DeleteDC (Address: 0x1400a8f28)
  • DeleteObject (Address: 0x1400a8f20)
  • EnumFontFamiliesExW (Address: 0x1400a8d28)
  • ExtFloodFill (Address: 0x1400a8dc0)
  • ExtSelectClipRgn (Address: 0x1400a8db8)
  • FillRgn (Address: 0x1400a8ed0)
  • GdiAlphaBlend (Address: 0x1400a8e88)
  • GdiGradientFill (Address: 0x1400a8d38)
  • GetBrushOrgEx (Address: 0x1400a8d98)
  • GetCurrentObject (Address: 0x1400a8ea8)
  • GetDeviceCaps (Address: 0x1400a8f60)
  • GetDIBColorTable (Address: 0x1400a8eb8)
  • GetDIBits (Address: 0x1400a8e30)
  • GetNearestColor (Address: 0x1400a8e20)
  • GetNearestPaletteIndex (Address: 0x1400a8f00)
  • GetObjectW (Address: 0x1400a8ea0)
  • GetPaletteEntries (Address: 0x1400a8f08)
  • GetPixel (Address: 0x1400a8dc8)
  • GetRgnBox (Address: 0x1400a8da0)
  • GetStockObject (Address: 0x1400a8e68)
  • GetTextExtentPoint32W (Address: 0x1400a8d68)
  • GetTextFaceW (Address: 0x1400a8d30)
  • GetTextMetricsW (Address: 0x1400a8d40)
  • LineTo (Address: 0x1400a8e00)
  • LPtoDP (Address: 0x1400a8e60)
  • MoveToEx (Address: 0x1400a8e08)
  • OffsetRgn (Address: 0x1400a8df0)
  • PatBlt (Address: 0x1400a8ed8)
  • PlayMetaFile (Address: 0x1400a8e48)
  • Polygon (Address: 0x1400a8de8)
  • Polyline (Address: 0x1400a8d48)
  • RealizePalette (Address: 0x1400a8f48)
  • Rectangle (Address: 0x1400a8e80)
  • ResizePalette (Address: 0x1400a8ef8)
  • RestoreDC (Address: 0x1400a8e58)
  • SaveDC (Address: 0x1400a8e70)
  • SelectObject (Address: 0x1400a8f58)
  • SelectPalette (Address: 0x1400a8f50)
  • SetBkColor (Address: 0x1400a8e98)
  • SetBrushOrgEx (Address: 0x1400a8dd8)
  • SetDIBColorTable (Address: 0x1400a8eb0)
  • SetDIBits (Address: 0x1400a8f10)
  • SetDIBitsToDevice (Address: 0x1400a8e18)
  • SetMapMode (Address: 0x1400a8ec8)
  • SetPaletteEntries (Address: 0x1400a8ef0)
  • SetPixel (Address: 0x1400a8df8)
  • SetROP2 (Address: 0x1400a8d50)
  • SetStretchBltMode (Address: 0x1400a8d90)
  • SetTextColor (Address: 0x1400a8e90)
  • SetViewportExtEx (Address: 0x1400a8e50)
  • StretchBlt (Address: 0x1400a8de0)
  • StretchDIBits (Address: 0x1400a8d78)
  • TranslateCharsetInfo (Address: 0x1400a8d60)
  • UnrealizeObject (Address: 0x1400a8dd0)
KERNEL32.dll
  • AcquireSRWLockExclusive (Address: 0x1400a9050)
  • ApplicationRecoveryFinished (Address: 0x1400a9220)
  • ApplicationRecoveryInProgress (Address: 0x1400a9228)
  • CloseHandle (Address: 0x1400a91f8)
  • CompareStringOrdinal (Address: 0x1400a8f78)
  • CopyFileW (Address: 0x1400a8f98)
  • CreateEventW (Address: 0x1400a8fb8)
  • CreateFileW (Address: 0x1400a9160)
  • CreateMutexExW (Address: 0x1400a9210)
  • CreateSemaphoreExW (Address: 0x1400a9188)
  • CreateToolhelp32Snapshot (Address: 0x1400a9240)
  • DebugBreak (Address: 0x1400a9170)
  • DeleteCriticalSection (Address: 0x1400a9000)
  • DeleteFileW (Address: 0x1400a8fa8)
  • DeviceIoControl (Address: 0x1400a90e0)
  • FileTimeToLocalFileTime (Address: 0x1400a90b8)
  • FileTimeToSystemTime (Address: 0x1400a90b0)
  • FindClose (Address: 0x1400a9108)
  • FindFirstFileW (Address: 0x1400a9038)
  • FindFirstStreamW (Address: 0x1400a9128)
  • FindNextStreamW (Address: 0x1400a9120)
  • FormatMessageW (Address: 0x1400a91d0)
  • FreeLibrary (Address: 0x1400a8fd0)
  • GetACP (Address: 0x1400a8f90)
  • GetCommandLineW (Address: 0x1400a8fe8)
  • GetCurrentProcess (Address: 0x1400a8f80)
  • GetCurrentProcessId (Address: 0x1400a91a0)
  • GetCurrentThread (Address: 0x1400a8f88)
  • GetCurrentThreadId (Address: 0x1400a91c0)
  • GetDateFormatW (Address: 0x1400a90a8)
  • GetExitCodeThread (Address: 0x1400a9098)
  • GetFileAttributesW (Address: 0x1400a9100)
  • GetFileSize (Address: 0x1400a90c0)
  • GetFileSizeEx (Address: 0x1400a9158)
  • GetFileTime (Address: 0x1400a90f8)
  • GetFullPathNameW (Address: 0x1400a9040)
  • GetLastError (Address: 0x1400a91d8)
  • GetLocaleInfoW (Address: 0x1400a90d0)
  • GetModuleFileNameA (Address: 0x1400a9180)
  • GetModuleFileNameW (Address: 0x1400a8f70)
  • GetModuleHandleA (Address: 0x1400a8fb0)
  • GetModuleHandleExW (Address: 0x1400a91b0)
  • GetModuleHandleW (Address: 0x1400a9178)
  • GetProcAddress (Address: 0x1400a9208)
  • GetProcessHeap (Address: 0x1400a9278)
  • GetSystemInfo (Address: 0x1400a9268)
  • GetTempPathW (Address: 0x1400a9020)
  • GetThreadLocale (Address: 0x1400a9008)
  • GetTickCount (Address: 0x1400a9058)
  • GetTimeFormatW (Address: 0x1400a90a0)
  • GlobalAddAtomW (Address: 0x1400a9068)
  • GlobalAlloc (Address: 0x1400a9148)
  • GlobalDeleteAtom (Address: 0x1400a9060)
  • GlobalFree (Address: 0x1400a9150)
  • GlobalLock (Address: 0x1400a9140)
  • GlobalReAlloc (Address: 0x1400a9130)
  • GlobalSize (Address: 0x1400a9090)
  • GlobalUnlock (Address: 0x1400a9138)
  • HeapAlloc (Address: 0x1400a9200)
  • HeapFree (Address: 0x1400a9190)
  • HeapSetInformation (Address: 0x1400a8fe0)
  • IsDebuggerPresent (Address: 0x1400a9168)
  • LoadLibraryExA (Address: 0x1400a9260)
  • LoadLibraryW (Address: 0x1400a8fd8)
  • LocalAlloc (Address: 0x1400a9080)
  • LocalFree (Address: 0x1400a9078)
  • lstrcmpiW (Address: 0x1400a9028)
  • lstrcmpW (Address: 0x1400a9218)
  • lstrlenW (Address: 0x1400a90c8)
  • MoveFileExW (Address: 0x1400a8fa0)
  • MulDiv (Address: 0x1400a90d8)
  • OpenProcess (Address: 0x1400a9018)
  • OpenSemaphoreW (Address: 0x1400a91f0)
  • OutputDebugStringW (Address: 0x1400a91e0)
  • Process32FirstW (Address: 0x1400a9248)
  • Process32NextW (Address: 0x1400a9250)
  • QueryFullProcessImageNameW (Address: 0x1400a9010)
  • QueueUserWorkItem (Address: 0x1400a8fc8)
  • RaiseException (Address: 0x1400a9088)
  • ReadFile (Address: 0x1400a9118)
  • RegisterApplicationRecoveryCallback (Address: 0x1400a9230)
  • RegisterApplicationRestart (Address: 0x1400a9238)
  • ReleaseMutex (Address: 0x1400a91c8)
  • ReleaseSemaphore (Address: 0x1400a91a8)
  • ReleaseSRWLockExclusive (Address: 0x1400a9048)
  • SetEndOfFile (Address: 0x1400a9030)
  • SetErrorMode (Address: 0x1400a9070)
  • SetEvent (Address: 0x1400a8fc0)
  • SetFileAttributesW (Address: 0x1400a90f0)
  • SetFileTime (Address: 0x1400a90e8)
  • SetLastError (Address: 0x1400a9198)
  • VerifyVersionInfoW (Address: 0x1400a8ff0)
  • VerSetConditionMask (Address: 0x1400a8ff8)
  • VirtualProtect (Address: 0x1400a9258)
  • VirtualQuery (Address: 0x1400a9270)
  • WaitForSingleObject (Address: 0x1400a91b8)
  • WaitForSingleObjectEx (Address: 0x1400a91e8)
  • WriteFile (Address: 0x1400a9110)
MFC42u.dll
  • (Address: 0x1400a94e0)
  • (Address: 0x1400a94e8)
  • (Address: 0x1400a94f0)
  • (Address: 0x1400a94f8)
  • (Address: 0x1400a9500)
  • (Address: 0x1400a9508)
  • (Address: 0x1400a9510)
  • (Address: 0x1400a9518)
  • (Address: 0x1400a9520)
  • (Address: 0x1400a9528)
  • (Address: 0x1400a9530)
  • (Address: 0x1400a9538)
  • (Address: 0x1400a9540)
  • (Address: 0x1400a9548)
  • (Address: 0x1400a9550)
  • (Address: 0x1400a9558)
  • (Address: 0x1400a9560)
  • (Address: 0x1400a9568)
  • (Address: 0x1400a9570)
  • (Address: 0x1400a9578)
  • (Address: 0x1400a9580)
  • (Address: 0x1400a9588)
  • (Address: 0x1400a9590)
  • (Address: 0x1400a9598)
  • (Address: 0x1400a95a0)
  • (Address: 0x1400a95a8)
  • (Address: 0x1400a95b0)
  • (Address: 0x1400a95b8)
  • (Address: 0x1400a95c0)
  • (Address: 0x1400a95c8)
  • (Address: 0x1400a95d0)
  • (Address: 0x1400a95d8)
  • (Address: 0x1400a95e0)
  • (Address: 0x1400a95e8)
  • (Address: 0x1400a95f0)
  • (Address: 0x1400a95f8)
  • (Address: 0x1400a9600)
  • (Address: 0x1400a9608)
  • (Address: 0x1400a9610)
  • (Address: 0x1400a9618)
  • (Address: 0x1400a9620)
  • (Address: 0x1400a9628)
  • (Address: 0x1400a9630)
  • (Address: 0x1400a9638)
  • (Address: 0x1400a9640)
  • (Address: 0x1400a9648)
  • (Address: 0x1400a9650)
  • (Address: 0x1400a9658)
  • (Address: 0x1400a9660)
  • (Address: 0x1400a9668)
  • (Address: 0x1400a9670)
  • (Address: 0x1400a9678)
  • (Address: 0x1400a9680)
  • (Address: 0x1400a9688)
  • (Address: 0x1400a9690)
  • (Address: 0x1400a9698)
  • (Address: 0x1400a96a0)
  • (Address: 0x1400a96a8)
  • (Address: 0x1400a96b0)
  • (Address: 0x1400a96b8)
  • (Address: 0x1400a96c0)
  • (Address: 0x1400a96c8)
  • (Address: 0x1400a96d0)
  • (Address: 0x1400a96d8)
  • (Address: 0x1400a96e0)
  • (Address: 0x1400a96e8)
  • (Address: 0x1400a96f0)
  • (Address: 0x1400a96f8)
  • (Address: 0x1400a9700)
  • (Address: 0x1400a9708)
  • (Address: 0x1400a9710)
  • (Address: 0x1400a9718)
  • (Address: 0x1400a9720)
  • (Address: 0x1400a9728)
  • (Address: 0x1400a9730)
  • (Address: 0x1400a9738)
  • (Address: 0x1400a9740)
  • (Address: 0x1400a9748)
  • (Address: 0x1400a9750)
  • (Address: 0x1400a9758)
  • (Address: 0x1400a9760)
  • (Address: 0x1400a9768)
  • (Address: 0x1400a9770)
  • (Address: 0x1400a9778)
  • (Address: 0x1400a9780)
  • (Address: 0x1400a9788)
  • (Address: 0x1400a9790)
  • (Address: 0x1400a9798)
  • (Address: 0x1400a97a0)
  • (Address: 0x1400a97a8)
  • (Address: 0x1400a97b0)
  • (Address: 0x1400a97b8)
  • (Address: 0x1400a97c0)
  • (Address: 0x1400a97c8)
  • (Address: 0x1400a97d0)
  • (Address: 0x1400a97d8)
  • (Address: 0x1400a97e0)
  • (Address: 0x1400a97e8)
  • (Address: 0x1400a97f0)
  • (Address: 0x1400a97f8)
  • (Address: 0x1400a9800)
  • (Address: 0x1400a9808)
  • (Address: 0x1400a9810)
  • (Address: 0x1400a9818)
  • (Address: 0x1400a9820)
  • (Address: 0x1400a9828)
  • (Address: 0x1400a9830)
  • (Address: 0x1400a9838)
  • (Address: 0x1400a9840)
  • (Address: 0x1400a9848)
  • (Address: 0x1400a9850)
  • (Address: 0x1400a9858)
  • (Address: 0x1400a9860)
  • (Address: 0x1400a9868)
  • (Address: 0x1400a9870)
  • (Address: 0x1400a9878)
  • (Address: 0x1400a9880)
  • (Address: 0x1400a9888)
  • (Address: 0x1400a9890)
  • (Address: 0x1400a9898)
  • (Address: 0x1400a98a0)
  • (Address: 0x1400a98a8)
  • (Address: 0x1400a98b0)
  • (Address: 0x1400a98b8)
  • (Address: 0x1400aa460)
  • (Address: 0x1400aa468)
  • (Address: 0x1400aa470)
  • (Address: 0x1400aa478)
  • (Address: 0x1400aa480)
  • (Address: 0x1400aa488)
  • (Address: 0x1400aa490)
  • (Address: 0x1400aa498)
  • (Address: 0x1400aa4a0)
  • (Address: 0x1400aa4a8)
  • (Address: 0x1400aa4b0)
  • (Address: 0x1400aa4b8)
  • (Address: 0x1400aa4c0)
  • (Address: 0x1400aa4c8)
  • (Address: 0x1400aa4d0)
  • (Address: 0x1400aa4d8)
  • (Address: 0x1400a98c0)
  • (Address: 0x1400a98c8)
  • (Address: 0x1400a98d0)
  • (Address: 0x1400a98d8)
  • (Address: 0x1400a98e0)
  • (Address: 0x1400a98e8)
  • (Address: 0x1400a98f0)
  • (Address: 0x1400a98f8)
  • (Address: 0x1400a9900)
  • (Address: 0x1400a9908)
  • (Address: 0x1400a9910)
  • (Address: 0x1400a9918)
  • (Address: 0x1400a9920)
  • (Address: 0x1400a9928)
  • (Address: 0x1400a9930)
  • (Address: 0x1400a9938)
  • (Address: 0x1400a9940)
  • (Address: 0x1400a9948)
  • (Address: 0x1400a9950)
  • (Address: 0x1400a9958)
  • (Address: 0x1400a9960)
  • (Address: 0x1400a9968)
  • (Address: 0x1400a9970)
  • (Address: 0x1400a9978)
  • (Address: 0x1400a9980)
  • (Address: 0x1400a9988)
  • (Address: 0x1400a9990)
  • (Address: 0x1400a9998)
  • (Address: 0x1400a99a0)
  • (Address: 0x1400a99a8)
  • (Address: 0x1400a99b0)
  • (Address: 0x1400a99b8)
  • (Address: 0x1400a99c0)
  • (Address: 0x1400a99c8)
  • (Address: 0x1400a99d0)
  • (Address: 0x1400a99d8)
  • (Address: 0x1400a99e0)
  • (Address: 0x1400a99e8)
  • (Address: 0x1400a99f0)
  • (Address: 0x1400a99f8)
  • (Address: 0x1400a9a00)
  • (Address: 0x1400a9a08)
  • (Address: 0x1400a9a10)
  • (Address: 0x1400a9a18)
  • (Address: 0x1400a9a20)
  • (Address: 0x1400a9a28)
  • (Address: 0x1400a9a30)
  • (Address: 0x1400a9a38)
  • (Address: 0x1400a9a40)
  • (Address: 0x1400a9a48)
  • (Address: 0x1400a9a50)
  • (Address: 0x1400a9a58)
  • (Address: 0x1400a9a60)
  • (Address: 0x1400a9a68)
  • (Address: 0x1400a9a70)
  • (Address: 0x1400a9a78)
  • (Address: 0x1400a9a80)
  • (Address: 0x1400a9a88)
  • (Address: 0x1400a9a90)
  • (Address: 0x1400a9a98)
  • (Address: 0x1400a9aa0)
  • (Address: 0x1400a9aa8)
  • (Address: 0x1400a9ab0)
  • (Address: 0x1400a9ab8)
  • (Address: 0x1400a9ac0)
  • (Address: 0x1400a9ac8)
  • (Address: 0x1400a9ad0)
  • (Address: 0x1400a9ad8)
  • (Address: 0x1400a9ae0)
  • (Address: 0x1400a9ae8)
  • (Address: 0x1400a9af0)
  • (Address: 0x1400a9af8)
  • (Address: 0x1400a9b00)
  • (Address: 0x1400a9b08)
  • (Address: 0x1400a9b10)
  • (Address: 0x1400a9b18)
  • (Address: 0x1400a9b20)
  • (Address: 0x1400a9b28)
  • (Address: 0x1400a9b30)
  • (Address: 0x1400a9b38)
  • (Address: 0x1400a9b40)
  • (Address: 0x1400a9b48)
  • (Address: 0x1400a9b50)
  • (Address: 0x1400a9b58)
  • (Address: 0x1400a9b60)
  • (Address: 0x1400a9b68)
  • (Address: 0x1400a9b70)
  • (Address: 0x1400a9b78)
  • (Address: 0x1400a9b80)
  • (Address: 0x1400a9b88)
  • (Address: 0x1400a9b90)
  • (Address: 0x1400a9b98)
  • (Address: 0x1400a9ba0)
  • (Address: 0x1400a9ba8)
  • (Address: 0x1400a9bb0)
  • (Address: 0x1400a9bb8)
  • (Address: 0x1400a9bc0)
  • (Address: 0x1400a9bc8)
  • (Address: 0x1400a9bd0)
  • (Address: 0x1400a9bd8)
  • (Address: 0x1400a9be0)
  • (Address: 0x1400a9be8)
  • (Address: 0x1400a9bf0)
  • (Address: 0x1400a9bf8)
  • (Address: 0x1400a9c00)
  • (Address: 0x1400a9c08)
  • (Address: 0x1400a9c10)
  • (Address: 0x1400a9c18)
  • (Address: 0x1400a9c20)
  • (Address: 0x1400a9c28)
  • (Address: 0x1400a9c30)
  • (Address: 0x1400a9c38)
  • (Address: 0x1400a9c40)
  • (Address: 0x1400a9c48)
  • (Address: 0x1400a9c50)
  • (Address: 0x1400a9c58)
  • (Address: 0x1400a9c60)
  • (Address: 0x1400a9c68)
  • (Address: 0x1400a9c70)
  • (Address: 0x1400a9c78)
  • (Address: 0x1400a9c80)
  • (Address: 0x1400a9c88)
  • (Address: 0x1400a9c90)
  • (Address: 0x1400a9c98)
  • (Address: 0x1400a9ca0)
  • (Address: 0x1400a9ca8)
  • (Address: 0x1400a9cb0)
  • (Address: 0x1400a9cb8)
  • (Address: 0x1400a9cc0)
  • (Address: 0x1400a9cc8)
  • (Address: 0x1400a9cd0)
  • (Address: 0x1400a9cd8)
  • (Address: 0x1400a9ce0)
  • (Address: 0x1400a9ce8)
  • (Address: 0x1400a9cf0)
  • (Address: 0x1400a9cf8)
  • (Address: 0x1400a9d00)
  • (Address: 0x1400a9d08)
  • (Address: 0x1400a9d10)
  • (Address: 0x1400a9d18)
  • (Address: 0x1400a9d20)
  • (Address: 0x1400a9d28)
  • (Address: 0x1400a9d30)
  • (Address: 0x1400a9d38)
  • (Address: 0x1400a9d40)
  • (Address: 0x1400a9d48)
  • (Address: 0x1400a9d50)
  • (Address: 0x1400a9d58)
  • (Address: 0x1400a9d60)
  • (Address: 0x1400a9d68)
  • (Address: 0x1400a9d70)
  • (Address: 0x1400a9d78)
  • (Address: 0x1400a9d80)
  • (Address: 0x1400a9d88)
  • (Address: 0x1400a9d90)
  • (Address: 0x1400a9d98)
  • (Address: 0x1400a9da0)
  • (Address: 0x1400a9da8)
  • (Address: 0x1400a9db0)
  • (Address: 0x1400a9db8)
  • (Address: 0x1400a9dc0)
  • (Address: 0x1400a9dc8)
  • (Address: 0x1400a9dd0)
  • (Address: 0x1400a9dd8)
  • (Address: 0x1400a9de0)
  • (Address: 0x1400a9de8)
  • (Address: 0x1400a9df0)
  • (Address: 0x1400a9df8)
  • (Address: 0x1400a9e00)
  • (Address: 0x1400a9e08)
  • (Address: 0x1400a9e10)
  • (Address: 0x1400a9e18)
  • (Address: 0x1400a9e20)
  • (Address: 0x1400a9e28)
  • (Address: 0x1400a9e30)
  • (Address: 0x1400a9e38)
  • (Address: 0x1400a9e40)
  • (Address: 0x1400a9e48)
  • (Address: 0x1400a9e50)
  • (Address: 0x1400a9e58)
  • (Address: 0x1400a9e60)
  • (Address: 0x1400a9e68)
  • (Address: 0x1400a9e70)
  • (Address: 0x1400a9e78)
  • (Address: 0x1400a9e80)
  • (Address: 0x1400a9e88)
  • (Address: 0x1400a9e90)
  • (Address: 0x1400a9e98)
  • (Address: 0x1400a9ea0)
  • (Address: 0x1400a9ea8)
  • (Address: 0x1400a9eb0)
  • (Address: 0x1400a9eb8)
  • (Address: 0x1400a9ec0)
  • (Address: 0x1400a9ec8)
  • (Address: 0x1400a9ed0)
  • (Address: 0x1400a9ed8)
  • (Address: 0x1400a9ee0)
  • (Address: 0x1400a9ee8)
  • (Address: 0x1400a9ef0)
  • (Address: 0x1400a9ef8)
  • (Address: 0x1400a9f00)
  • (Address: 0x1400a9f08)
  • (Address: 0x1400a9f10)
  • (Address: 0x1400a9f18)
  • (Address: 0x1400a9f20)
  • (Address: 0x1400a9f28)
  • (Address: 0x1400a9f30)
  • (Address: 0x1400a9f38)
  • (Address: 0x1400a9f40)
  • (Address: 0x1400a9f48)
  • (Address: 0x1400a9f50)
  • (Address: 0x1400a9f58)
  • (Address: 0x1400a9f60)
  • (Address: 0x1400a9f68)
  • (Address: 0x1400a9f70)
  • (Address: 0x1400a9f78)
  • (Address: 0x1400a9f80)
  • (Address: 0x1400a9f88)
  • (Address: 0x1400a9f90)
  • (Address: 0x1400a9f98)
  • (Address: 0x1400a9fa0)
  • (Address: 0x1400a9fa8)
  • (Address: 0x1400a9fb0)
  • (Address: 0x1400a9fb8)
  • (Address: 0x1400a9fc0)
  • (Address: 0x1400a9fc8)
  • (Address: 0x1400a9fd0)
  • (Address: 0x1400a9fd8)
  • (Address: 0x1400a9fe0)
  • (Address: 0x1400a9fe8)
  • (Address: 0x1400a9ff0)
  • (Address: 0x1400a9ff8)
  • (Address: 0x1400aa000)
  • (Address: 0x1400aa008)
  • (Address: 0x1400aa010)
  • (Address: 0x1400aa018)
  • (Address: 0x1400aa020)
  • (Address: 0x1400aa028)
  • (Address: 0x1400aa030)
  • (Address: 0x1400aa038)
  • (Address: 0x1400aa040)
  • (Address: 0x1400aa048)
  • (Address: 0x1400aa050)
  • (Address: 0x1400aa058)
  • (Address: 0x1400aa060)
  • (Address: 0x1400aa068)
  • (Address: 0x1400aa070)
  • (Address: 0x1400aa078)
  • (Address: 0x1400a9288)
  • (Address: 0x1400a9290)
  • (Address: 0x1400a9298)
  • (Address: 0x1400a92a0)
  • (Address: 0x1400a92a8)
  • (Address: 0x1400a92b0)
  • (Address: 0x1400a92b8)
  • (Address: 0x1400a92c0)
  • (Address: 0x1400a92c8)
  • (Address: 0x1400a92d0)
  • (Address: 0x1400a92d8)
  • (Address: 0x1400a92e0)
  • (Address: 0x1400a92e8)
  • (Address: 0x1400a92f0)
  • (Address: 0x1400a92f8)
  • (Address: 0x1400a9300)
  • (Address: 0x1400a9308)
  • (Address: 0x1400a9310)
  • (Address: 0x1400a9318)
  • (Address: 0x1400a9320)
  • (Address: 0x1400a9328)
  • (Address: 0x1400a9330)
  • (Address: 0x1400a9338)
  • (Address: 0x1400a9340)
  • (Address: 0x1400a9348)
  • (Address: 0x1400a9350)
  • (Address: 0x1400a9358)
  • (Address: 0x1400a9360)
  • (Address: 0x1400a9368)
  • (Address: 0x1400a9370)
  • (Address: 0x1400a9378)
  • (Address: 0x1400a9380)
  • (Address: 0x1400a9388)
  • (Address: 0x1400a9390)
  • (Address: 0x1400a9398)
  • (Address: 0x1400a93a0)
  • (Address: 0x1400a93a8)
  • (Address: 0x1400a93b0)
  • (Address: 0x1400a93b8)
  • (Address: 0x1400a93c0)
  • (Address: 0x1400a93c8)
  • (Address: 0x1400a93d0)
  • (Address: 0x1400a93d8)
  • (Address: 0x1400a93e0)
  • (Address: 0x1400a93e8)
  • (Address: 0x1400a93f0)
  • (Address: 0x1400a93f8)
  • (Address: 0x1400a9400)
  • (Address: 0x1400a9408)
  • (Address: 0x1400a9410)
  • (Address: 0x1400a9418)
  • (Address: 0x1400a9420)
  • (Address: 0x1400a9428)
  • (Address: 0x1400a9430)
  • (Address: 0x1400a9438)
  • (Address: 0x1400a9440)
  • (Address: 0x1400a9448)
  • (Address: 0x1400a9450)
  • (Address: 0x1400a9458)
  • (Address: 0x1400a9460)
  • (Address: 0x1400a9468)
  • (Address: 0x1400a9470)
  • (Address: 0x1400a9478)
  • (Address: 0x1400a9480)
  • (Address: 0x1400a9488)
  • (Address: 0x1400a9490)
  • (Address: 0x1400a9498)
  • (Address: 0x1400a94a0)
  • (Address: 0x1400a94a8)
  • (Address: 0x1400a94b0)
  • (Address: 0x1400a94b8)
  • (Address: 0x1400a94c0)
  • (Address: 0x1400a94c8)
  • (Address: 0x1400a94d0)
  • (Address: 0x1400a94d8)
  • (Address: 0x1400aa080)
  • (Address: 0x1400aa088)
  • (Address: 0x1400aa090)
  • (Address: 0x1400aa098)
  • (Address: 0x1400aa0a0)
  • (Address: 0x1400aa0a8)
  • (Address: 0x1400aa0b0)
  • (Address: 0x1400aa0b8)
  • (Address: 0x1400aa0c0)
  • (Address: 0x1400aa0c8)
  • (Address: 0x1400aa0d0)
  • (Address: 0x1400aa0d8)
  • (Address: 0x1400aa0e0)
  • (Address: 0x1400aa0e8)
  • (Address: 0x1400aa0f0)
  • (Address: 0x1400aa0f8)
  • (Address: 0x1400aa100)
  • (Address: 0x1400aa108)
  • (Address: 0x1400aa110)
  • (Address: 0x1400aa118)
  • (Address: 0x1400aa120)
  • (Address: 0x1400aa128)
  • (Address: 0x1400aa130)
  • (Address: 0x1400aa138)
  • (Address: 0x1400aa140)
  • (Address: 0x1400aa148)
  • (Address: 0x1400aa150)
  • (Address: 0x1400aa158)
  • (Address: 0x1400aa160)
  • (Address: 0x1400aa168)
  • (Address: 0x1400aa170)
  • (Address: 0x1400aa178)
  • (Address: 0x1400aa180)
  • (Address: 0x1400aa188)
  • (Address: 0x1400aa190)
  • (Address: 0x1400aa198)
  • (Address: 0x1400aa1a0)
  • (Address: 0x1400aa1a8)
  • (Address: 0x1400aa1b0)
  • (Address: 0x1400aa1b8)
  • (Address: 0x1400aa1c0)
  • (Address: 0x1400aa1c8)
  • (Address: 0x1400aa1d0)
  • (Address: 0x1400aa1d8)
  • (Address: 0x1400aa1e0)
  • (Address: 0x1400aa1e8)
  • (Address: 0x1400aa1f0)
  • (Address: 0x1400aa1f8)
  • (Address: 0x1400aa200)
  • (Address: 0x1400aa208)
  • (Address: 0x1400aa210)
  • (Address: 0x1400aa218)
  • (Address: 0x1400aa220)
  • (Address: 0x1400aa228)
  • (Address: 0x1400aa230)
  • (Address: 0x1400aa238)
  • (Address: 0x1400aa240)
  • (Address: 0x1400aa248)
  • (Address: 0x1400aa250)
  • (Address: 0x1400aa258)
  • (Address: 0x1400aa260)
  • (Address: 0x1400aa268)
  • (Address: 0x1400aa270)
  • (Address: 0x1400aa278)
  • (Address: 0x1400aa280)
  • (Address: 0x1400aa288)
  • (Address: 0x1400aa290)
  • (Address: 0x1400aa298)
  • (Address: 0x1400aa2a0)
  • (Address: 0x1400aa2a8)
  • (Address: 0x1400aa2b0)
  • (Address: 0x1400aa2b8)
  • (Address: 0x1400aa2c0)
  • (Address: 0x1400aa2c8)
  • (Address: 0x1400aa2d0)
  • (Address: 0x1400aa2d8)
  • (Address: 0x1400aa2e0)
  • (Address: 0x1400aa2e8)
  • (Address: 0x1400aa2f0)
  • (Address: 0x1400aa2f8)
  • (Address: 0x1400aa300)
  • (Address: 0x1400aa308)
  • (Address: 0x1400aa310)
  • (Address: 0x1400aa318)
  • (Address: 0x1400aa320)
  • (Address: 0x1400aa328)
  • (Address: 0x1400aa330)
  • (Address: 0x1400aa338)
  • (Address: 0x1400aa340)
  • (Address: 0x1400aa348)
  • (Address: 0x1400aa350)
  • (Address: 0x1400aa358)
  • (Address: 0x1400aa360)
  • (Address: 0x1400aa368)
  • (Address: 0x1400aa370)
  • (Address: 0x1400aa378)
  • (Address: 0x1400aa380)
  • (Address: 0x1400aa388)
  • (Address: 0x1400aa390)
  • (Address: 0x1400aa398)
  • (Address: 0x1400aa3a0)
  • (Address: 0x1400aa3a8)
  • (Address: 0x1400aa3b0)
  • (Address: 0x1400aa3b8)
  • (Address: 0x1400aa3c0)
  • (Address: 0x1400aa3c8)
  • (Address: 0x1400aa3d0)
  • (Address: 0x1400aa3d8)
  • (Address: 0x1400aa3e0)
  • (Address: 0x1400aa3e8)
  • (Address: 0x1400aa3f0)
  • (Address: 0x1400aa3f8)
  • (Address: 0x1400aa400)
  • (Address: 0x1400aa408)
  • (Address: 0x1400aa410)
  • (Address: 0x1400aa418)
  • (Address: 0x1400aa420)
  • (Address: 0x1400aa428)
  • (Address: 0x1400aa430)
  • (Address: 0x1400aa438)
  • (Address: 0x1400aa440)
  • (Address: 0x1400aa448)
  • (Address: 0x1400aa450)
  • (Address: 0x1400aa458)
msvcrt.dll
  • ___lc_codepage_func (Address: 0x1400aad50)
  • ___lc_handle_func (Address: 0x1400aad58)
  • ___mb_cur_max_func (Address: 0x1400aad68)
  • __argc (Address: 0x1400aadc8)
  • __C_specific_handler (Address: 0x1400aadd8)
  • __crtGetStringTypeW (Address: 0x1400aad30)
  • __crtLCMapStringW (Address: 0x1400aad38)
  • __CxxFrameHandler3 (Address: 0x1400aae80)
  • __dllonexit (Address: 0x1400aac38)
  • __mb_cur_max (Address: 0x1400aad40)
  • __pctype_func (Address: 0x1400aad48)
  • __RTDynamicCast (Address: 0x1400aaea8)
  • __set_app_type (Address: 0x1400aacd8)
  • __setusermatherr (Address: 0x1400aacc0)
  • __uncaught_exception (Address: 0x1400aad28)
  • __wargv (Address: 0x1400aadc0)
  • __wgetmainargs (Address: 0x1400aace0)
  • _amsg_exit (Address: 0x1400aace8)
  • _beginthreadex (Address: 0x1400aade8)
  • _callnewh (Address: 0x1400aad80)
  • _cexit (Address: 0x1400aacc8)
  • _commode (Address: 0x1400aaca0)
  • _CxxThrowException (Address: 0x1400aad78)
  • _errno (Address: 0x1400aad60)
  • _exit (Address: 0x1400aacd0)
  • _fmode (Address: 0x1400aaca8)
  • _initterm (Address: 0x1400aacb8)
  • _lock (Address: 0x1400aac48)
  • _onexit (Address: 0x1400aac58)
  • _purecall (Address: 0x1400aae28)
  • _strtoi64 (Address: 0x1400aae18)
  • _strtoui64 (Address: 0x1400aae20)
  • _unlock (Address: 0x1400aac40)
  • _vsnprintf_s (Address: 0x1400aae50)
  • _vsnwprintf (Address: 0x1400aae78)
  • _wcmdln (Address: 0x1400aacb0)
  • _wcsdup (Address: 0x1400aadb8)
  • _wcsicmp (Address: 0x1400aadd0)
  • _wsetlocale (Address: 0x1400aadb0)
  • _wsplitpath_s (Address: 0x1400aadf8)
  • _wtoi (Address: 0x1400aadf0)
  • _XcptFilter (Address: 0x1400aacf0)
  • ??0exception@@QEAA@AEBQEBD@Z (Address: 0x1400aae40)
  • ??0exception@@QEAA@AEBQEBDH@Z (Address: 0x1400aad88)
  • ??0exception@@QEAA@AEBV0@@Z (Address: 0x1400aae58)
  • ??0exception@@QEAA@XZ (Address: 0x1400aae60)
  • ??1exception@@UEAA@XZ (Address: 0x1400aae68)
  • ??1type_info@@UEAA@XZ (Address: 0x1400aac80)
  • ?terminate@@YAXXZ (Address: 0x1400aac98)
  • ?what@exception@@UEBAPEBDXZ (Address: 0x1400aae48)
  • abort (Address: 0x1400aad08)
  • atan2 (Address: 0x1400aaeb0)
  • atan2f (Address: 0x1400aaeb8)
  • cosf (Address: 0x1400aaec0)
  • exit (Address: 0x1400aada0)
  • free (Address: 0x1400aae30)
  • isalnum (Address: 0x1400aad00)
  • isdigit (Address: 0x1400aacf8)
  • isspace (Address: 0x1400aad20)
  • localeconv (Address: 0x1400aae08)
  • malloc (Address: 0x1400aad90)
  • memchr (Address: 0x1400aad10)
  • memcmp (Address: 0x1400aac68)
  • memcpy (Address: 0x1400aac90)
  • memcpy_s (Address: 0x1400aae70)
  • memmove (Address: 0x1400aac78)
  • memmove_s (Address: 0x1400aae38)
  • memset (Address: 0x1400aac70)
  • rand (Address: 0x1400aade0)
  • setlocale (Address: 0x1400aad70)
  • sinf (Address: 0x1400aac60)
  • sprintf_s (Address: 0x1400aae10)
  • sqrtf (Address: 0x1400aac50)
  • strcspn (Address: 0x1400aae00)
  • swprintf_s (Address: 0x1400aae88)
  • tanf (Address: 0x1400aac88)
  • tolower (Address: 0x1400aad18)
  • vsprintf_s (Address: 0x1400aaea0)
  • vswprintf_s (Address: 0x1400aad98)
  • wcscmp (Address: 0x1400aaec8)
  • wcscpy_s (Address: 0x1400aae90)
  • wcsncmp (Address: 0x1400aada8)
  • wcstoul (Address: 0x1400aae98)
ole32.dll
  • CoInitialize (Address: 0x1400aaef0)
  • OleGetClipboard (Address: 0x1400aaee0)
  • ReleaseStgMedium (Address: 0x1400aaee8)
  • WriteClassStg (Address: 0x1400aaed8)
  • WriteFmtUserTypeStg (Address: 0x1400aaef8)
OLEAUT32.dll
  • SafeArrayCopy (Address: 0x1400aa4f0)
  • SafeArrayCreateVector (Address: 0x1400aa508)
  • SafeArrayDestroy (Address: 0x1400aa4f8)
  • SafeArrayPutElement (Address: 0x1400aa500)
  • SysAllocString (Address: 0x1400aa538)
  • SysFreeString (Address: 0x1400aa4e8)
  • VarDecFromI4 (Address: 0x1400aa530)
  • VarDecFromR8 (Address: 0x1400aa510)
  • VariantClear (Address: 0x1400aa520)
  • VariantInit (Address: 0x1400aa528)
  • VarR8FromDec (Address: 0x1400aa518)
PROPSYS.dll
  • PropVariantToString (Address: 0x1400aa548)
  • PropVariantToStringVectorAlloc (Address: 0x1400aa568)
  • PropVariantToUInt32 (Address: 0x1400aa558)
  • PropVariantToUInt32WithDefault (Address: 0x1400aa560)
  • PSGetPropertyDescriptionListFromString (Address: 0x1400aa550)
RPCRT4.dll
  • RpcStringFreeW (Address: 0x1400aa580)
  • UuidCreate (Address: 0x1400aa588)
  • UuidToStringW (Address: 0x1400aa578)
SHELL32.dll
  • (Address: 0x1400aa5e8)
  • (Address: 0x1400aa5c8)
  • (Address: 0x1400aa5d0)
  • CommandLineToArgvW (Address: 0x1400aa5d8)
  • DragFinish (Address: 0x1400aa600)
  • DragQueryFileW (Address: 0x1400aa608)
  • SHAddToRecentDocs (Address: 0x1400aa5f8)
  • SHBindToParent (Address: 0x1400aa5b0)
  • SHChangeNotify (Address: 0x1400aa618)
  • SHCreateItemFromParsingName (Address: 0x1400aa5a0)
  • SHCreateShellItem (Address: 0x1400aa5b8)
  • SHCreateShellItemArrayFromShellItem (Address: 0x1400aa5a8)
  • ShellAboutW (Address: 0x1400aa5c0)
  • ShellExecuteExW (Address: 0x1400aa5e0)
  • SHGetKnownFolderPath (Address: 0x1400aa598)
  • SHGetSpecialFolderPathW (Address: 0x1400aa5f0)
  • SHParseDisplayName (Address: 0x1400aa610)
SHLWAPI.dll
  • (Address: 0x1400aa640)
  • PathCombineW (Address: 0x1400aa648)
  • PathFileExistsW (Address: 0x1400aa630)
  • PathFindFileNameW (Address: 0x1400aa628)
  • PathStripPathW (Address: 0x1400aa638)
USER32.dll
  • BringWindowToTop (Address: 0x1400aa708)
  • CheckDlgButton (Address: 0x1400aa8f0)
  • CheckMenuItem (Address: 0x1400aa918)
  • ClientToScreen (Address: 0x1400aa748)
  • CloseTouchInputHandle (Address: 0x1400aa8e8)
  • CopyRect (Address: 0x1400aa6d0)
  • DestroyCursor (Address: 0x1400aa770)
  • DestroyIcon (Address: 0x1400aa8c8)
  • DestroyMenu (Address: 0x1400aa790)
  • DestroyWindow (Address: 0x1400aa768)
  • EnableScrollBar (Address: 0x1400aa900)
  • EnableWindow (Address: 0x1400aa888)
  • EqualRect (Address: 0x1400aa6a8)
  • FillRect (Address: 0x1400aa740)
  • GetAsyncKeyState (Address: 0x1400aa6c0)
  • GetCapture (Address: 0x1400aa680)
  • GetCaretPos (Address: 0x1400aa938)
  • GetClassInfoW (Address: 0x1400aa7a8)
  • GetClientRect (Address: 0x1400aa8b8)
  • GetCursorPos (Address: 0x1400aa810)
  • GetDC (Address: 0x1400aa7c0)
  • GetDlgItem (Address: 0x1400aa8e0)
  • GetDlgItemInt (Address: 0x1400aa728)
  • GetFocus (Address: 0x1400aa710)
  • GetKeyboardLayout (Address: 0x1400aa6f8)
  • GetKeyState (Address: 0x1400aa868)
  • GetMenu (Address: 0x1400aa7f8)
  • GetMessageExtraInfo (Address: 0x1400aa738)
  • GetMonitorInfoW (Address: 0x1400aa7a0)
  • GetParent (Address: 0x1400aa6e0)
  • GetSubMenu (Address: 0x1400aa930)
  • GetSysColor (Address: 0x1400aa8c0)
  • GetSystemMenu (Address: 0x1400aa758)
  • GetSystemMetrics (Address: 0x1400aa8a8)
  • GetTouchInputInfo (Address: 0x1400aa720)
  • GetUpdateRect (Address: 0x1400aa908)
  • GetWindowDC (Address: 0x1400aa8f8)
  • GetWindowLongPtrW (Address: 0x1400aa780)
  • GetWindowLongW (Address: 0x1400aa6e8)
  • GetWindowRect (Address: 0x1400aa8b0)
  • GetWindowThreadProcessId (Address: 0x1400aa788)
  • InflateRect (Address: 0x1400aa6d8)
  • IntersectRect (Address: 0x1400aa668)
  • InvalidateRect (Address: 0x1400aa8a0)
  • IsClipboardFormatAvailable (Address: 0x1400aa828)
  • IsMenu (Address: 0x1400aa7f0)
  • IsRectEmpty (Address: 0x1400aa6a0)
  • IsWindow (Address: 0x1400aa898)
  • IsWindowVisible (Address: 0x1400aa950)
  • KillTimer (Address: 0x1400aa698)
  • LoadBitmapW (Address: 0x1400aa7b8)
  • LoadCursorW (Address: 0x1400aa6f0)
  • LoadIconW (Address: 0x1400aa7b0)
  • LoadImageW (Address: 0x1400aa700)
  • LoadMenuW (Address: 0x1400aa928)
  • LoadStringW (Address: 0x1400aa948)
  • MessageBeep (Address: 0x1400aa878)
  • MessageBoxW (Address: 0x1400aa870)
  • MonitorFromRect (Address: 0x1400aa798)
  • MsgWaitForMultipleObjectsEx (Address: 0x1400aa7e0)
  • NotifyWinEvent (Address: 0x1400aa860)
  • OffsetRect (Address: 0x1400aa818)
  • PeekMessageW (Address: 0x1400aa848)
  • PostMessageW (Address: 0x1400aa840)
  • PostQuitMessage (Address: 0x1400aa830)
  • PtInRect (Address: 0x1400aa678)
  • RedrawWindow (Address: 0x1400aa920)
  • RegisterClipboardFormatW (Address: 0x1400aa820)
  • RegisterTouchWindow (Address: 0x1400aa808)
  • RegisterWindowMessageW (Address: 0x1400aa8d8)
  • ReleaseCapture (Address: 0x1400aa858)
  • ReleaseDC (Address: 0x1400aa730)
  • RemoveMenu (Address: 0x1400aa760)
  • ScreenToClient (Address: 0x1400aa658)
  • SendDlgItemMessageW (Address: 0x1400aa7d0)
  • SendInput (Address: 0x1400aa958)
  • SendMessageW (Address: 0x1400aa8d0)
  • SetActiveWindow (Address: 0x1400aa718)
  • SetCapture (Address: 0x1400aa6b8)
  • SetClassLongPtrW (Address: 0x1400aa940)
  • SetCursor (Address: 0x1400aa6b0)
  • SetCursorPos (Address: 0x1400aa960)
  • SetDlgItemInt (Address: 0x1400aa7c8)
  • SetGestureConfig (Address: 0x1400aa838)
  • SetPropW (Address: 0x1400aa6c8)
  • SetRect (Address: 0x1400aa880)
  • SetRectEmpty (Address: 0x1400aa688)
  • SetTimer (Address: 0x1400aa690)
  • SetWindowLongPtrW (Address: 0x1400aa7d8)
  • SetWindowLongW (Address: 0x1400aa7e8)
  • SetWindowTextW (Address: 0x1400aa850)
  • ShowCursor (Address: 0x1400aa968)
  • SystemParametersInfoW (Address: 0x1400aa778)
  • TrackMouseEvent (Address: 0x1400aa750)
  • UnionRect (Address: 0x1400aa660)
  • UnregisterTouchWindow (Address: 0x1400aa800)
  • UpdateWindow (Address: 0x1400aa890)
  • ValidateRect (Address: 0x1400aa910)
  • WindowFromPoint (Address: 0x1400aa670)
WINMM.dll
  • timeGetTime (Address: 0x1400aa978)