twinapi.dll

Description: twinapi

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.5848

Architecture: 64-bit

Operating System: Windows NT

SHA256: fa8070e2df1d0e4b730beeee212a24b2

File Size: 653.5 KB

Uploaded At: Dec. 1, 2025, 7:40 a.m.

Views: 8

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • (Ordinal: 1, Address: 0x9480)
  • (Ordinal: 2, Address: 0x19370)
  • (Ordinal: 3, Address: 0x19350)
  • (Ordinal: 4, Address: 0x19310)
  • (Ordinal: 5, Address: 0x193d0)
  • (Ordinal: 6, Address: 0x19390)
  • (Ordinal: 7, Address: 0x3a910)
  • GetMetroMode (Ordinal: 8, Address: 0x3aaf0)
  • (Ordinal: 9, Address: 0xeca0)
  • (Ordinal: 10, Address: 0x9240)
  • (Ordinal: 11, Address: 0x8130)
  • (Ordinal: 12, Address: 0x19330)
  • (Ordinal: 13, Address: 0x9460)
  • (Ordinal: 14, Address: 0x193b0)
  • (Ordinal: 15, Address: 0x192f0)
  • DllCanUnloadNow (Ordinal: 16, Address: 0x7330)
  • DllGetActivationFactory (Ordinal: 17, Address: 0x7df0)
  • DllGetClassObject (Ordinal: 18, Address: 0x6de0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll
  • ApiSetQueryApiSetPresence (Address: 0x18007e0e0)
api-ms-win-core-atoms-l1-1-0.dll
  • GlobalGetAtomNameW (Address: 0x18007e0f0)
api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x18007e100)
  • IsDebuggerPresent (Address: 0x18007e110)
  • OutputDebugStringW (Address: 0x18007e108)
api-ms-win-core-debug-l1-1-1.dll
  • CheckRemoteDebuggerPresent (Address: 0x18007e120)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x18007e130)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x18007e140)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x18007e170)
  • RaiseException (Address: 0x18007e158)
  • SetLastError (Address: 0x18007e150)
  • SetUnhandledExceptionFilter (Address: 0x18007e168)
  • UnhandledExceptionFilter (Address: 0x18007e160)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x18007e188)
  • DuplicateHandle (Address: 0x18007e180)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x18007e1a0)
  • HeapAlloc (Address: 0x18007e1b0)
  • HeapFree (Address: 0x18007e1a8)
  • HeapReAlloc (Address: 0x18007e198)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x18007e1d0)
  • LocalFree (Address: 0x18007e1c0)
  • LocalReAlloc (Address: 0x18007e1c8)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
  • MulDiv (Address: 0x18007e1e0)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x18007e200)
  • FreeLibrary (Address: 0x18007e1f8)
  • GetModuleFileNameA (Address: 0x18007e210)
  • GetModuleFileNameW (Address: 0x18007e220)
  • GetModuleHandleExW (Address: 0x18007e218)
  • GetModuleHandleW (Address: 0x18007e228)
  • GetProcAddress (Address: 0x18007e1f0)
  • LoadStringW (Address: 0x18007e208)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x18007e238)
  • GetLocaleInfoW (Address: 0x18007e248)
  • ResolveLocaleName (Address: 0x18007e240)
api-ms-win-core-localization-obsolete-l1-2-0.dll
  • GetUserDefaultUILanguage (Address: 0x18007e258)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x18007e298)
  • GetCurrentProcessId (Address: 0x18007e270)
  • GetCurrentThread (Address: 0x18007e290)
  • GetCurrentThreadId (Address: 0x18007e2a0)
  • OpenProcessToken (Address: 0x18007e268)
  • OpenThread (Address: 0x18007e278)
  • OpenThreadToken (Address: 0x18007e288)
  • TerminateProcess (Address: 0x18007e280)
api-ms-win-core-processthreads-l1-1-1.dll
  • OpenProcess (Address: 0x18007e2b0)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x18007e2c0)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x18007e2e0)
  • RegGetValueW (Address: 0x18007e2e8)
  • RegOpenKeyExW (Address: 0x18007e2d0)
  • RegQueryInfoKeyW (Address: 0x18007e2d8)
api-ms-win-core-rtlsupport-l1-1-0.dll
  • RtlCaptureContext (Address: 0x18007e2f8)
  • RtlLookupFunctionEntry (Address: 0x18007e300)
  • RtlVirtualUnwind (Address: 0x18007e308)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringOrdinal (Address: 0x18007e318)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x18007e370)
  • AcquireSRWLockShared (Address: 0x18007e3c8)
  • CreateEventExW (Address: 0x18007e338)
  • CreateEventW (Address: 0x18007e348)
  • CreateMutexExW (Address: 0x18007e358)
  • CreateSemaphoreExW (Address: 0x18007e328)
  • DeleteCriticalSection (Address: 0x18007e398)
  • EnterCriticalSection (Address: 0x18007e380)
  • InitializeCriticalSectionEx (Address: 0x18007e390)
  • InitializeSRWLock (Address: 0x18007e3a0)
  • LeaveCriticalSection (Address: 0x18007e388)
  • OpenSemaphoreW (Address: 0x18007e360)
  • ReleaseMutex (Address: 0x18007e3a8)
  • ReleaseSemaphore (Address: 0x18007e350)
  • ReleaseSRWLockExclusive (Address: 0x18007e3c0)
  • ReleaseSRWLockShared (Address: 0x18007e330)
  • ResetEvent (Address: 0x18007e3b8)
  • SetEvent (Address: 0x18007e3b0)
  • WaitForMultipleObjectsEx (Address: 0x18007e340)
  • WaitForSingleObject (Address: 0x18007e378)
  • WaitForSingleObjectEx (Address: 0x18007e368)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x18007e3e8)
  • InitOnceComplete (Address: 0x18007e408)
  • InitOnceExecuteOnce (Address: 0x18007e3e0)
  • InitOnceInitialize (Address: 0x18007e3f8)
  • Sleep (Address: 0x18007e400)
  • WaitOnAddress (Address: 0x18007e3f0)
  • WakeByAddressAll (Address: 0x18007e3d8)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x18007e420)
  • GetTickCount (Address: 0x18007e418)
api-ms-win-core-sysinfo-l1-2-0.dll
  • GetProductInfo (Address: 0x18007e430)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolTimer (Address: 0x18007e460)
  • CloseThreadpoolWait (Address: 0x18007e448)
  • CloseThreadpoolWork (Address: 0x18007e478)
  • CreateThreadpoolTimer (Address: 0x18007e468)
  • CreateThreadpoolWait (Address: 0x18007e440)
  • CreateThreadpoolWork (Address: 0x18007e488)
  • FreeLibraryWhenCallbackReturns (Address: 0x18007e480)
  • SetThreadpoolTimer (Address: 0x18007e470)
  • SetThreadpoolWait (Address: 0x18007e498)
  • SubmitThreadpoolWork (Address: 0x18007e490)
  • WaitForThreadpoolTimerCallbacks (Address: 0x18007e458)
  • WaitForThreadpoolWaitCallbacks (Address: 0x18007e450)
api-ms-win-core-threadpool-legacy-l1-1-0.dll
  • CreateTimerQueueTimer (Address: 0x18007e4b0)
  • DeleteTimerQueueTimer (Address: 0x18007e4a8)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x18007e4c8)
  • EncodePointer (Address: 0x18007e4c0)
api-ms-win-eventing-classicprovider-l1-1-0.dll
  • GetTraceEnableFlags (Address: 0x18007e4d8)
  • GetTraceEnableLevel (Address: 0x18007e4e0)
  • GetTraceLoggerHandle (Address: 0x18007e4f8)
  • RegisterTraceGuidsW (Address: 0x18007e4e8)
  • TraceMessage (Address: 0x18007e4f0)
  • UnregisterTraceGuids (Address: 0x18007e500)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventActivityIdControl (Address: 0x18007e518)
  • EventRegister (Address: 0x18007e530)
  • EventSetInformation (Address: 0x18007e510)
  • EventUnregister (Address: 0x18007e528)
  • EventWriteTransfer (Address: 0x18007e520)
api-ms-win-security-base-l1-1-0.dll
  • GetTokenInformation (Address: 0x18007e540)
api-ms-win-shcore-stream-winrt-l1-1-0.dll
  • CreateRandomAccessStreamOverStream (Address: 0x18007e550)
api-ms-win-shcore-taskpool-l1-1-0.dll
  • SHTaskPoolAllowThreadReuse (Address: 0x18007e568)
  • SHTaskPoolQueueTask (Address: 0x18007e560)
combase.dll
  • (Address: 0x18007e578)
  • (Address: 0x18007e580)
  • (Address: 0x18007e588)
msvcrt.dll
  • __C_specific_handler (Address: 0x18007e5d0)
  • __CxxFrameHandler3 (Address: 0x18007e618)
  • __dllonexit (Address: 0x18007e5b8)
  • _amsg_exit (Address: 0x18007e5e8)
  • _callnewh (Address: 0x18007e598)
  • _CxxThrowException (Address: 0x18007e5a0)
  • _initterm (Address: 0x18007e5d8)
  • _lock (Address: 0x18007e5c8)
  • _onexit (Address: 0x18007e5b0)
  • _purecall (Address: 0x18007e620)
  • _unlock (Address: 0x18007e5c0)
  • _vsnwprintf (Address: 0x18007e658)
  • _XcptFilter (Address: 0x18007e5f0)
  • ??0exception@@QEAA@AEBV0@@Z (Address: 0x18007e638)
  • ??0exception@@QEAA@XZ (Address: 0x18007e630)
  • ??1exception@@UEAA@XZ (Address: 0x18007e628)
  • ??1type_info@@UEAA@XZ (Address: 0x18007e650)
  • ?terminate@@YAXXZ (Address: 0x18007e648)
  • free (Address: 0x18007e5f8)
  • malloc (Address: 0x18007e5e0)
  • memcmp (Address: 0x18007e5a8)
  • memcpy (Address: 0x18007e608)
  • memcpy_s (Address: 0x18007e600)
  • memmove (Address: 0x18007e610)
  • memset (Address: 0x18007e660)
  • realloc (Address: 0x18007e640)
ntdll.dll
  • _vsnprintf_s (Address: 0x18007e6e8)
  • iswalnum (Address: 0x18007e6b0)
  • memmove_s (Address: 0x18007e6d0)
  • NtQueryInformationToken (Address: 0x18007e678)
  • NtQuerySystemInformation (Address: 0x18007e6e0)
  • NtQueryWnfStateData (Address: 0x18007e6d8)
  • RtlAllocateHeap (Address: 0x18007e688)
  • RtlCompareUnicodeString (Address: 0x18007e698)
  • RtlFreeHeap (Address: 0x18007e6a0)
  • RtlInitUnicodeString (Address: 0x18007e680)
  • RtlNtStatusToDosError (Address: 0x18007e6a8)
  • RtlNtStatusToDosErrorNoTeb (Address: 0x18007e690)
  • RtlQueryWnfStateData (Address: 0x18007e6c8)
  • RtlSubscribeWnfStateChangeNotification (Address: 0x18007e6c0)
  • RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x18007e6b8)
  • wcschr (Address: 0x18007e670)
  • wcsrchr (Address: 0x18007e6f0)
SHLWAPI.dll
  • (Address: 0x18007dec0)
  • (Address: 0x18007dec8)
  • PathFindFileNameW (Address: 0x18007deb8)
USER32.dll
  • (Address: 0x18007dee0)
  • BeginPaint (Address: 0x18007e048)
  • CallNextHookEx (Address: 0x18007dee8)
  • CopyIcon (Address: 0x18007dfb8)
  • CopyRect (Address: 0x18007df68)
  • CreateWindowExW (Address: 0x18007e098)
  • CreateWindowInBandEx (Address: 0x18007dfd0)
  • DefWindowProcA (Address: 0x18007df90)
  • DefWindowProcW (Address: 0x18007df80)
  • DestroyIcon (Address: 0x18007dfa8)
  • DispatchMessageW (Address: 0x18007e090)
  • EndPaint (Address: 0x18007e030)
  • EnumWindows (Address: 0x18007dfa0)
  • FillRect (Address: 0x18007e040)
  • GetAncestor (Address: 0x18007e010)
  • GetClassInfoExW (Address: 0x18007dfe0)
  • GetClassNameW (Address: 0x18007dfc0)
  • GetClientRect (Address: 0x18007e0c0)
  • GetDesktopWindow (Address: 0x18007df58)
  • GetFocus (Address: 0x18007e050)
  • GetForegroundWindow (Address: 0x18007df70)
  • GetGUIThreadInfo (Address: 0x18007def0)
  • GetKeyboardLayout (Address: 0x18007def8)
  • GetKeyboardState (Address: 0x18007df50)
  • GetKeyState (Address: 0x18007df48)
  • GetMonitorInfoW (Address: 0x18007e028)
  • GetParent (Address: 0x18007e000)
  • GetPropW (Address: 0x18007e008)
  • GetWindowCompositionAttribute (Address: 0x18007dff8)
  • GetWindowDpiAwarenessContext (Address: 0x18007e060)
  • GetWindowLongPtrW (Address: 0x18007df78)
  • GetWindowRect (Address: 0x18007dfd8)
  • GetWindowThreadProcessId (Address: 0x18007dfc8)
  • IntersectRect (Address: 0x18007df30)
  • IsRectEmpty (Address: 0x18007df88)
  • IsWindowUnicode (Address: 0x18007df60)
  • LoadCursorW (Address: 0x18007e0a8)
  • MapWindowPoints (Address: 0x18007df38)
  • MonitorFromPoint (Address: 0x18007df40)
  • MonitorFromRect (Address: 0x18007df98)
  • MonitorFromWindow (Address: 0x18007df28)
  • MsgWaitForMultipleObjectsEx (Address: 0x18007e058)
  • PeekMessageW (Address: 0x18007e068)
  • PostMessageW (Address: 0x18007e0a0)
  • PostQuitMessage (Address: 0x18007e070)
  • RegisterClassExW (Address: 0x18007e088)
  • RegisterWindowMessageW (Address: 0x18007df20)
  • SendMessageTimeoutW (Address: 0x18007dfb0)
  • SendMessageW (Address: 0x18007dff0)
  • SetCursor (Address: 0x18007e0b0)
  • SetFocus (Address: 0x18007e078)
  • SetKeyboardState (Address: 0x18007dfe8)
  • SetParent (Address: 0x18007e038)
  • SetPropW (Address: 0x18007ded8)
  • SetRect (Address: 0x18007e020)
  • SetThreadDpiAwarenessContext (Address: 0x18007e080)
  • SetWindowLongPtrW (Address: 0x18007e018)
  • SetWindowPos (Address: 0x18007e0d0)
  • SetWindowsHookExW (Address: 0x18007df18)
  • ShowWindow (Address: 0x18007e0c8)
  • SystemParametersInfoW (Address: 0x18007df08)
  • ToUnicodeEx (Address: 0x18007df00)
  • TranslateMessage (Address: 0x18007e0b8)
  • UnhookWindowsHookEx (Address: 0x18007df10)