winmm.dll
Description: Automatic DLL injector
Authors: Fuck the copyright \ud83d\udd95
Version: 3.0.4.0
Architecture: 64-bit
Operating System: Windows NT
SHA256: af689147cb1b9254b8246b62ab575824
File Size: 7.0 MB
Uploaded At: Aug. 23, 2026, 9:34 p.m.
Views: 20
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory
Exported Functions
- CloseDriver (Ordinal: 1, Address: 0x6c693a)
- DefDriverProc (Ordinal: 2, Address: 0x6c696e)
- DllMain (Ordinal: 3, Address: 0x39e10)
- DriverCallback (Ordinal: 4, Address: 0x6c69ad)
- DrvGetModuleHandle (Ordinal: 5, Address: 0x6c69e9)
- GetDriverModuleHandle (Ordinal: 6, Address: 0x6c6a2c)
- OpenDriver (Ordinal: 7, Address: 0x6c6a67)
- PlaySound (Ordinal: 8, Address: 0x6c6a96)
- PlaySoundA (Ordinal: 9, Address: 0x6c6ac5)
- PlaySoundW (Ordinal: 10, Address: 0x6c6af5)
- SendDriverMessage (Ordinal: 11, Address: 0x6c6b2c)
- WOWAppExit (Ordinal: 12, Address: 0x6c6b63)
- auxGetDevCapsA (Ordinal: 13, Address: 0x6c6b97)
- auxGetDevCapsW (Ordinal: 14, Address: 0x6c6bcf)
- auxGetNumDevs (Ordinal: 15, Address: 0x6c6c06)
- auxGetVolume (Ordinal: 16, Address: 0x6c6c3b)
- auxOutMessage (Ordinal: 17, Address: 0x6c6c70)
- auxSetVolume (Ordinal: 18, Address: 0x6c6ca5)
- joyConfigChanged (Ordinal: 19, Address: 0x6c6cdd)
- joyGetDevCapsA (Ordinal: 20, Address: 0x6c6d17)
- joyGetDevCapsW (Ordinal: 21, Address: 0x6c6d4f)
- joyGetNumDevs (Ordinal: 22, Address: 0x6c6d86)
- joyGetPos (Ordinal: 23, Address: 0x6c6db8)
- joyGetPosEx (Ordinal: 24, Address: 0x6c6de8)
- joyGetThreshold (Ordinal: 25, Address: 0x6c6e1e)
- joyReleaseCapture (Ordinal: 26, Address: 0x6c6e5a)
- joySetCapture (Ordinal: 27, Address: 0x6c6e94)
- joySetThreshold (Ordinal: 28, Address: 0x6c6ecc)
- mciDriverNotify (Ordinal: 29, Address: 0x6c6f06)
- mciDriverYield (Ordinal: 30, Address: 0x6c6f3f)
- mciExecute (Ordinal: 31, Address: 0x6c6f73)
- mciFreeCommandResource (Ordinal: 32, Address: 0x6c6faf)
- mciGetCreatorTask (Ordinal: 33, Address: 0x6c6ff2)
- mciGetDeviceIDA (Ordinal: 34, Address: 0x6c702e)
- mciGetDeviceIDFromElementIDA (Ordinal: 35, Address: 0x6c7075)
- mciGetDeviceIDFromElementIDW (Ordinal: 36, Address: 0x6c70c9)
- mciGetDeviceIDW (Ordinal: 37, Address: 0x6c7110)
- mciGetDriverData (Ordinal: 38, Address: 0x6c714b)
- mciGetErrorStringA (Ordinal: 39, Address: 0x6c7189)
- mciGetErrorStringW (Ordinal: 40, Address: 0x6c71c9)
- mciGetYieldProc (Ordinal: 41, Address: 0x6c7206)
- mciLoadCommandResource (Ordinal: 42, Address: 0x6c7247)
- mciSendCommandA (Ordinal: 43, Address: 0x6c7288)
- mciSendCommandW (Ordinal: 44, Address: 0x6c72c2)
- mciSendStringA (Ordinal: 45, Address: 0x6c72fb)
- mciSendStringW (Ordinal: 46, Address: 0x6c7333)
- mciSetDriverData (Ordinal: 47, Address: 0x6c736d)
- mciSetYieldProc (Ordinal: 48, Address: 0x6c73a8)
- midiConnect (Ordinal: 49, Address: 0x6c73de)
- midiDisconnect (Ordinal: 50, Address: 0x6c7413)
- midiInAddBuffer (Ordinal: 51, Address: 0x6c744c)
- midiInClose (Ordinal: 52, Address: 0x6c7482)
- midiInGetDevCapsA (Ordinal: 53, Address: 0x6c74ba)
- midiInGetDevCapsW (Ordinal: 54, Address: 0x6c74f8)
- midiInGetErrorTextA (Ordinal: 55, Address: 0x6c7538)
- midiInGetErrorTextW (Ordinal: 56, Address: 0x6c757a)
- midiInGetID (Ordinal: 57, Address: 0x6c75b4)
- midiInGetNumDevs (Ordinal: 58, Address: 0x6c75eb)
- midiInMessage (Ordinal: 59, Address: 0x6c7624)
- midiInOpen (Ordinal: 60, Address: 0x6c7657)
- midiInPrepareHeader (Ordinal: 61, Address: 0x6c7690)
- midiInReset (Ordinal: 62, Address: 0x6c76ca)
- midiInStart (Ordinal: 63, Address: 0x6c76fc)
- midiInStop (Ordinal: 64, Address: 0x6c772d)
- midiInUnprepareHeader (Ordinal: 65, Address: 0x6c7768)
- midiOutCacheDrumPatches (Ordinal: 66, Address: 0x6c77b0)
- midiOutCachePatches (Ordinal: 67, Address: 0x6c77f6)
- midiOutClose (Ordinal: 68, Address: 0x6c7831)
- midiOutGetDevCapsA (Ordinal: 69, Address: 0x6c786b)
- midiOutGetDevCapsW (Ordinal: 70, Address: 0x6c78ab)
- midiOutGetErrorTextA (Ordinal: 71, Address: 0x6c78ed)
- midiOutGetErrorTextW (Ordinal: 72, Address: 0x6c7931)
- midiOutGetID (Ordinal: 73, Address: 0x6c796d)
- midiOutGetNumDevs (Ordinal: 74, Address: 0x6c79a6)
- midiOutGetVolume (Ordinal: 75, Address: 0x6c79e3)
- midiOutLongMsg (Ordinal: 76, Address: 0x6c7a1d)
- midiOutMessage (Ordinal: 77, Address: 0x6c7a55)
- midiOutOpen (Ordinal: 78, Address: 0x6c7a8a)
- midiOutPrepareHeader (Ordinal: 79, Address: 0x6c7ac5)
- midiOutReset (Ordinal: 80, Address: 0x6c7b01)
- midiOutSetVolume (Ordinal: 81, Address: 0x6c7b39)
- midiOutShortMsg (Ordinal: 82, Address: 0x6c7b74)
- midiOutUnprepareHeader (Ordinal: 83, Address: 0x6c7bb5)
- midiStreamClose (Ordinal: 84, Address: 0x6c7bf6)
- midiStreamOpen (Ordinal: 85, Address: 0x6c7c2f)
- midiStreamOut (Ordinal: 86, Address: 0x6c7c66)
- midiStreamPause (Ordinal: 87, Address: 0x6c7c9e)
- midiStreamPosition (Ordinal: 88, Address: 0x6c7cdb)
- midiStreamProperty (Ordinal: 89, Address: 0x6c7d1b)
- midiStreamRestart (Ordinal: 90, Address: 0x6c7d5a)
- midiStreamStop (Ordinal: 91, Address: 0x6c7d95)
- mixerClose (Ordinal: 92, Address: 0x6c7dc9)
- mixerGetControlDetailsA (Ordinal: 93, Address: 0x6c7e06)
- mixerGetControlDetailsW (Ordinal: 94, Address: 0x6c7e50)
- mixerGetDevCapsA (Ordinal: 95, Address: 0x6c7e93)
- mixerGetDevCapsW (Ordinal: 96, Address: 0x6c7ecf)
- mixerGetID (Ordinal: 97, Address: 0x6c7f05)
- mixerGetLineControlsA (Ordinal: 98, Address: 0x6c7f40)
- mixerGetLineControlsW (Ordinal: 99, Address: 0x6c7f86)
- mixerGetLineInfoA (Ordinal: 100, Address: 0x6c7fc8)
- mixerGetLineInfoW (Ordinal: 101, Address: 0x6c8006)
- mixerGetNumDevs (Ordinal: 102, Address: 0x6c8042)
- mixerMessage (Ordinal: 103, Address: 0x6c8079)
- mixerOpen (Ordinal: 104, Address: 0x6c80aa)
- mixerSetControlDetails (Ordinal: 105, Address: 0x6c80e5)
- mmDrvInstall (Ordinal: 106, Address: 0x6c8123)
- mmGetCurrentTask (Ordinal: 107, Address: 0x6c815b)
- mmTaskBlock (Ordinal: 108, Address: 0x6c8192)
- mmTaskCreate (Ordinal: 109, Address: 0x6c81c5)
- mmTaskSignal (Ordinal: 110, Address: 0x6c81f9)
- mmTaskYield (Ordinal: 111, Address: 0x6c822c)
- mmioAdvance (Ordinal: 112, Address: 0x6c825e)
- mmioAscend (Ordinal: 113, Address: 0x6c828f)
- mmioClose (Ordinal: 114, Address: 0x6c82be)
- mmioCreateChunk (Ordinal: 115, Address: 0x6c82f2)
- mmioDescend (Ordinal: 116, Address: 0x6c8328)
- mmioFlush (Ordinal: 117, Address: 0x6c8358)
- mmioGetInfo (Ordinal: 118, Address: 0x6c8388)
- mmioInstallIOProcA (Ordinal: 119, Address: 0x6c83c1)
- mmioInstallIOProcW (Ordinal: 120, Address: 0x6c8401)
- mmioOpenA (Ordinal: 121, Address: 0x6c8438)
- mmioOpenW (Ordinal: 122, Address: 0x6c8466)
- mmioRead (Ordinal: 123, Address: 0x6c8493)
- mmioRenameA (Ordinal: 124, Address: 0x6c84c2)
- mmioRenameW (Ordinal: 125, Address: 0x6c84f4)
- mmioSeek (Ordinal: 126, Address: 0x6c8523)
- mmioSendMessage (Ordinal: 127, Address: 0x6c8556)
- mmioSetBuffer (Ordinal: 128, Address: 0x6c858e)
- mmioSetInfo (Ordinal: 129, Address: 0x6c85c2)
- mmioStringToFOURCCA (Ordinal: 130, Address: 0x6c85fc)
- mmioStringToFOURCCW (Ordinal: 131, Address: 0x6c863e)
- mmioWrite (Ordinal: 132, Address: 0x6c8676)
- mmsystemGetVersion (Ordinal: 133, Address: 0x6c86ad)
- sndPlaySoundA (Ordinal: 134, Address: 0x6c86e8)
- sndPlaySoundW (Ordinal: 135, Address: 0x6c871e)
- timeBeginPeriod (Ordinal: 136, Address: 0x6c8756)
- timeEndPeriod (Ordinal: 137, Address: 0x6c878e)
- timeGetDevCaps (Ordinal: 138, Address: 0x6c87c5)
- timeGetSystemTime (Ordinal: 139, Address: 0x6c8800)
- timeGetTime (Ordinal: 140, Address: 0x6c8838)
- timeKillEvent (Ordinal: 141, Address: 0x6c886c)
- timeSetEvent (Ordinal: 142, Address: 0x6c88a1)
- tree_sitter_cpp (Ordinal: 143, Address: 0x191c50)
- waveInAddBuffer (Ordinal: 144, Address: 0x6c88e8)
- waveInClose (Ordinal: 145, Address: 0x6c891e)
- waveInGetDevCapsA (Ordinal: 146, Address: 0x6c8956)
- waveInGetDevCapsW (Ordinal: 147, Address: 0x6c8994)
- waveInGetErrorTextA (Ordinal: 148, Address: 0x6c89d4)
- waveInGetErrorTextW (Ordinal: 149, Address: 0x6c8a16)
- waveInGetID (Ordinal: 150, Address: 0x6c8a50)
- waveInGetNumDevs (Ordinal: 151, Address: 0x6c8a87)
- waveInGetPosition (Ordinal: 152, Address: 0x6c8ac4)
- waveInMessage (Ordinal: 153, Address: 0x6c8afe)
- waveInOpen (Ordinal: 154, Address: 0x6c8b31)
- waveInPrepareHeader (Ordinal: 155, Address: 0x6c8b6a)
- waveInReset (Ordinal: 156, Address: 0x6c8ba4)
- waveInStart (Ordinal: 157, Address: 0x6c8bd6)
- waveInStop (Ordinal: 158, Address: 0x6c8c07)
- waveInUnprepareHeader (Ordinal: 159, Address: 0x6c8c42)
- waveOutBreakLoop (Ordinal: 160, Address: 0x6c8c83)
- waveOutClose (Ordinal: 161, Address: 0x6c8cbb)
- waveOutGetDevCapsA (Ordinal: 162, Address: 0x6c8cf5)
- waveOutGetDevCapsW (Ordinal: 163, Address: 0x6c8d35)
- waveOutGetErrorTextA (Ordinal: 164, Address: 0x6c8d77)
- waveOutGetErrorTextW (Ordinal: 165, Address: 0x6c8dbb)
- waveOutGetID (Ordinal: 166, Address: 0x6c8df7)
- waveOutGetNumDevs (Ordinal: 167, Address: 0x6c8e30)
- waveOutGetPitch (Ordinal: 168, Address: 0x6c8e6c)
- waveOutGetPlaybackRate (Ordinal: 169, Address: 0x6c8ead)
- waveOutGetPosition (Ordinal: 170, Address: 0x6c8ef1)
- waveOutGetVolume (Ordinal: 171, Address: 0x6c8f2f)
- waveOutMessage (Ordinal: 172, Address: 0x6c8f69)
- waveOutOpen (Ordinal: 173, Address: 0x6c8f9e)
- waveOutPause (Ordinal: 174, Address: 0x6c8fd1)
- waveOutPrepareHeader (Ordinal: 175, Address: 0x6c900d)
- waveOutReset (Ordinal: 176, Address: 0x6c9049)
- waveOutRestart (Ordinal: 177, Address: 0x6c907f)
- waveOutSetPitch (Ordinal: 178, Address: 0x6c90b8)
- waveOutSetPlaybackRate (Ordinal: 179, Address: 0x6c90f9)
- waveOutSetVolume (Ordinal: 180, Address: 0x6c913b)
- waveOutUnprepareHeader (Ordinal: 181, Address: 0x6c917d)
- waveOutWrite (Ordinal: 182, Address: 0x6c91bb)
Imported DLLs & Functions
ADVAPI32.dll
- CryptAcquireContextA (Address: 0x180296000)
- CryptCreateHash (Address: 0x180296010)
- CryptDestroyHash (Address: 0x180296020)
- CryptGetHashParam (Address: 0x180296008)
- CryptHashData (Address: 0x180296018)
- CryptReleaseContext (Address: 0x180296028)
bcrypt.dll
- BCryptGenRandom (Address: 0x180296898)
CRYPT32.dll
- CertAddCertificateContextToStore (Address: 0x180296038)
- CertCloseStore (Address: 0x180296070)
- CertCreateCertificateChainEngine (Address: 0x180296090)
- CertEnumCertificatesInStore (Address: 0x180296068)
- CertFindCertificateInStore (Address: 0x180296060)
- CertFindExtension (Address: 0x180296080)
- CertFreeCertificateChain (Address: 0x1802960b0)
- CertFreeCertificateChainEngine (Address: 0x180296098)
- CertFreeCertificateContext (Address: 0x1802960a8)
- CertGetCertificateChain (Address: 0x1802960a0)
- CertGetNameStringA (Address: 0x180296058)
- CertOpenStore (Address: 0x180296078)
- CryptDecodeObjectEx (Address: 0x180296040)
- CryptQueryObject (Address: 0x180296088)
- CryptStringToBinaryA (Address: 0x180296050)
- PFXImportCertStore (Address: 0x180296048)
KERNEL32.dll
- AcquireSRWLockExclusive (Address: 0x180296380)
- AcquireSRWLockShared (Address: 0x180296688)
- AreFileApisANSI (Address: 0x180296610)
- CloseHandle (Address: 0x180296218)
- CloseThreadpoolTimer (Address: 0x180296718)
- CloseThreadpoolWait (Address: 0x180296730)
- CompareStringEx (Address: 0x1802966c8)
- CompareStringW (Address: 0x180296188)
- ConnectNamedPipe (Address: 0x180296228)
- CopyFileW (Address: 0x180296628)
- CreateDirectoryExW (Address: 0x180296620)
- CreateDirectoryW (Address: 0x180296598)
- CreateEventExW (Address: 0x1802966e0)
- CreateFileA (Address: 0x180296408)
- CreateFileMappingW (Address: 0x180296458)
- CreateFileW (Address: 0x1802965a0)
- CreateHardLinkW (Address: 0x180296638)
- CreateMutexExW (Address: 0x180296290)
- CreateNamedPipeW (Address: 0x180296238)
- CreateProcessW (Address: 0x180296320)
- CreateSemaphoreExW (Address: 0x180296298)
- CreateSymbolicLinkW (Address: 0x180296648)
- CreateThread (Address: 0x1802964b0)
- CreateThreadpoolTimer (Address: 0x180296700)
- CreateThreadpoolWait (Address: 0x180296720)
- DebugBreak (Address: 0x1802961e8)
- DecodePointer (Address: 0x1802966b8)
- DeleteCriticalSection (Address: 0x1802963b0)
- DeleteFileW (Address: 0x180296120)
- DeviceIoControl (Address: 0x180296618)
- DisableThreadLibraryCalls (Address: 0x1802961f8)
- DisconnectNamedPipe (Address: 0x180296230)
- DuplicateHandle (Address: 0x1802964a8)
- EncodePointer (Address: 0x1802966b0)
- EnterCriticalSection (Address: 0x180296398)
- EnumResourceNamesW (Address: 0x180296360)
- EnumSystemLocalesW (Address: 0x1802961b0)
- ExitProcess (Address: 0x1802961c8)
- ExitThread (Address: 0x180296470)
- FileTimeToSystemTime (Address: 0x1802960c0)
- FindClose (Address: 0x1802965a8)
- FindFirstFileExW (Address: 0x1802965b8)
- FindFirstFileW (Address: 0x1802965b0)
- FindNextFileW (Address: 0x1802965c0)
- FindResourceW (Address: 0x180296358)
- FlsAlloc (Address: 0x180296150)
- FlsFree (Address: 0x180296168)
- FlsGetValue (Address: 0x180296158)
- FlsSetValue (Address: 0x180296160)
- FlushFileBuffers (Address: 0x180296200)
- FlushProcessWriteBuffers (Address: 0x1802966e8)
- FormatMessageA (Address: 0x180296578)
- FormatMessageW (Address: 0x1802962e8)
- FreeEnvironmentStringsW (Address: 0x180296110)
- FreeLibrary (Address: 0x1802962b0)
- FreeLibraryAndExitThread (Address: 0x1802960f0)
- FreeLibraryWhenCallbackReturns (Address: 0x1802966f8)
- GetACP (Address: 0x180296510)
- GetCommandLineA (Address: 0x180296500)
- GetCommandLineW (Address: 0x1802961e0)
- GetConsoleMode (Address: 0x180296488)
- GetConsoleOutputCP (Address: 0x180296138)
- GetConsoleScreenBufferInfo (Address: 0x180296498)
- GetCPInfo (Address: 0x1802966d0)
- GetCurrentDirectoryW (Address: 0x180296590)
- GetCurrentProcess (Address: 0x180296310)
- GetCurrentProcessId (Address: 0x1802962a0)
- GetCurrentProcessorNumber (Address: 0x1802966f0)
- GetCurrentThread (Address: 0x180296140)
- GetCurrentThreadId (Address: 0x1802962a8)
- GetDateFormatW (Address: 0x180296178)
- GetDiskFreeSpaceExW (Address: 0x1802965c8)
- GetDriveTypeW (Address: 0x1802960e0)
- GetDynamicTimeZoneInformation (Address: 0x180296478)
- GetEnvironmentStringsW (Address: 0x1802961d8)
- GetEnvironmentVariableA (Address: 0x1802963d8)
- GetEnvironmentVariableW (Address: 0x180296308)
- GetExitCodeProcess (Address: 0x180296318)
- GetExitCodeThread (Address: 0x180296660)
- GetFileAttributesExW (Address: 0x1802965d8)
- GetFileAttributesW (Address: 0x1802965d0)
- GetFileInformationByHandle (Address: 0x1802965e0)
- GetFileInformationByHandleEx (Address: 0x180296640)
- GetFileSizeEx (Address: 0x180296410)
- GetFileType (Address: 0x1802960d8)
- GetFinalPathNameByHandleW (Address: 0x1802965e8)
- GetFullPathNameW (Address: 0x180296388)
- GetLargePageMinimum (Address: 0x1802961d0)
- GetLastError (Address: 0x180296220)
- GetLocaleInfoEx (Address: 0x180296580)
- GetLocaleInfoW (Address: 0x180296198)
- GetModuleFileNameA (Address: 0x1802962b8)
- GetModuleFileNameW (Address: 0x1802962c0)
- GetModuleHandleA (Address: 0x1802963c8)
- GetModuleHandleExW (Address: 0x1802962d0)
- GetModuleHandleW (Address: 0x1802962c8)
- GetNativeSystemInfo (Address: 0x180296668)
- GetOEMCP (Address: 0x180296508)
- GetProcAddress (Address: 0x1802962d8)
- GetProcessHeap (Address: 0x180296260)
- GetStartupInfoW (Address: 0x180296558)
- GetStdHandle (Address: 0x180296480)
- GetStringTypeW (Address: 0x1802964f8)
- GetSystemDirectoryA (Address: 0x1802963c0)
- GetSystemDirectoryW (Address: 0x180296328)
- GetSystemInfo (Address: 0x180296430)
- GetSystemTimeAsFileTime (Address: 0x180296560)
- GetTempPathW (Address: 0x180296608)
- GetTickCount (Address: 0x1802963e8)
- GetTickCount64 (Address: 0x180296698)
- GetTimeFormatW (Address: 0x180296180)
- GetTimeZoneInformation (Address: 0x1802961c0)
- GetUserDefaultLCID (Address: 0x1802961a8)
- HeapAlloc (Address: 0x180296250)
- HeapFree (Address: 0x180296258)
- HeapReAlloc (Address: 0x180296148)
- HeapSize (Address: 0x180296100)
- InitializeCriticalSection (Address: 0x180296450)
- InitializeCriticalSectionAndSpinCount (Address: 0x1802964e0)
- InitializeCriticalSectionEx (Address: 0x1802963a8)
- InitializeSListHead (Address: 0x180296568)
- InitOnceBeginInitialize (Address: 0x1802966a0)
- InitOnceComplete (Address: 0x1802966a8)
- InitOnceExecuteOnce (Address: 0x1802966d8)
- InterlockedFlushSList (Address: 0x1802964e8)
- InterlockedPushEntrySList (Address: 0x1802964f0)
- IsDebuggerPresent (Address: 0x180296240)
- IsProcessorFeaturePresent (Address: 0x180296550)
- IsThreadAFiber (Address: 0x180296170)
- IsValidCodePage (Address: 0x180296518)
- IsValidLocale (Address: 0x1802961a0)
- K32GetModuleFileNameExW (Address: 0x1802962f8)
- K32GetModuleInformation (Address: 0x180296370)
- LCMapStringEx (Address: 0x1802966c0)
- LCMapStringW (Address: 0x180296190)
- LeaveCriticalSection (Address: 0x1802963a0)
- LoadLibraryA (Address: 0x1802963d0)
- LoadLibraryExW (Address: 0x1802964b8)
- LoadLibraryW (Address: 0x1802962e0)
- LoadResource (Address: 0x180296340)
- LocalFree (Address: 0x180296570)
- LockResource (Address: 0x180296348)
- MapViewOfFile (Address: 0x180296460)
- MoveFileExA (Address: 0x1802963f8)
- MoveFileExW (Address: 0x180296630)
- MultiByteToWideChar (Address: 0x180296300)
- OpenSemaphoreW (Address: 0x180296288)
- OutputDebugStringA (Address: 0x180296448)
- OutputDebugStringW (Address: 0x1802961f0)
- PeekNamedPipe (Address: 0x1802960d0)
- QueryPerformanceCounter (Address: 0x1802963e0)
- QueryPerformanceFrequency (Address: 0x1802963b8)
- RaiseException (Address: 0x180296670)
- ReadConsoleW (Address: 0x180296130)
- ReadFile (Address: 0x180296208)
- ReadProcessMemory (Address: 0x180296428)
- RegisterApplicationRestart (Address: 0x180296368)
- ReleaseMutex (Address: 0x180296270)
- ReleaseSemaphore (Address: 0x180296268)
- ReleaseSRWLockExclusive (Address: 0x180296378)
- ReleaseSRWLockShared (Address: 0x180296680)
- ResumeThread (Address: 0x1802960f8)
- SetConsoleCtrlHandler (Address: 0x180296738)
- SetConsoleTextAttribute (Address: 0x1802964a0)
- SetCurrentDirectoryW (Address: 0x180296588)
- SetEndOfFile (Address: 0x180296520)
- SetEnvironmentVariableW (Address: 0x180296108)
- SetFileAttributesW (Address: 0x1802965f0)
- SetFileInformationByHandle (Address: 0x1802965f8)
- SetFilePointerEx (Address: 0x1802961b8)
- SetFileTime (Address: 0x180296600)
- SetLastError (Address: 0x180296248)
- SetStdHandle (Address: 0x180296128)
- SetThreadpoolTimer (Address: 0x180296708)
- SetThreadpoolWait (Address: 0x180296728)
- SetUnhandledExceptionFilter (Address: 0x180296540)
- SizeofResource (Address: 0x180296350)
- Sleep (Address: 0x1802963f0)
- SleepConditionVariableSRW (Address: 0x180296530)
- SleepEx (Address: 0x180296390)
- SwitchToThread (Address: 0x180296658)
- SystemTimeToFileTime (Address: 0x180296118)
- SystemTimeToTzSpecificLocalTime (Address: 0x1802960c8)
- TerminateProcess (Address: 0x180296548)
- TlsAlloc (Address: 0x1802964d8)
- TlsFree (Address: 0x1802964c0)
- TlsGetValue (Address: 0x1802964d0)
- TlsSetValue (Address: 0x1802964c8)
- TryAcquireSRWLockExclusive (Address: 0x180296650)
- TryAcquireSRWLockShared (Address: 0x180296690)
- TzSpecificLocalTimeToSystemTime (Address: 0x1802960e8)
- UnhandledExceptionFilter (Address: 0x180296538)
- UnmapViewOfFile (Address: 0x180296468)
- VerifyVersionInfoW (Address: 0x180296400)
- VirtualAlloc (Address: 0x180296438)
- VirtualFree (Address: 0x180296440)
- VirtualProtect (Address: 0x180296418)
- VirtualQuery (Address: 0x180296330)
- VirtualQueryEx (Address: 0x180296420)
- WaitForSingleObject (Address: 0x180296278)
- WaitForSingleObjectEx (Address: 0x180296280)
- WaitForThreadpoolTimerCallbacks (Address: 0x180296710)
- WakeAllConditionVariable (Address: 0x180296528)
- WakeConditionVariable (Address: 0x180296678)
- WideCharToMultiByte (Address: 0x1802962f0)
- WriteConsoleW (Address: 0x180296490)
- WriteFile (Address: 0x180296210)
- WriteProcessMemory (Address: 0x180296338)
ntdll.dll
- RtlCaptureContext (Address: 0x1802968c8)
- RtlLookupFunctionEntry (Address: 0x1802968c0)
- RtlPcToFileHeader (Address: 0x1802968a8)
- RtlUnwind (Address: 0x1802968b0)
- RtlUnwindEx (Address: 0x1802968d8)
- RtlVirtualUnwind (Address: 0x1802968d0)
- VerSetConditionMask (Address: 0x1802968b8)
SHELL32.dll
- SHGetSpecialFolderPathW (Address: 0x180296748)
USER32.dll
- MessageBoxW (Address: 0x180296760)
- WaitForInputIdle (Address: 0x180296758)
VERSION.dll
- GetFileVersionInfoSizeW (Address: 0x180296778)
- GetFileVersionInfoW (Address: 0x180296780)
- VerQueryValueW (Address: 0x180296770)
WS2_32.dll
- __WSAFDIsSet (Address: 0x1802967b8)
- accept (Address: 0x180296880)
- bind (Address: 0x180296878)
- closesocket (Address: 0x180296870)
- connect (Address: 0x180296868)
- freeaddrinfo (Address: 0x1802967a0)
- getaddrinfo (Address: 0x1802967a8)
- getpeername (Address: 0x180296860)
- getsockname (Address: 0x180296858)
- getsockopt (Address: 0x180296850)
- htonl (Address: 0x180296798)
- htons (Address: 0x180296848)
- ioctlsocket (Address: 0x1802967c0)
- listen (Address: 0x180296790)
- ntohs (Address: 0x180296840)
- recv (Address: 0x180296838)
- select (Address: 0x1802967b0)
- send (Address: 0x180296830)
- setsockopt (Address: 0x180296828)
- socket (Address: 0x180296820)
- WSACleanup (Address: 0x1802967c8)
- WSACloseEvent (Address: 0x180296808)
- WSACreateEvent (Address: 0x180296800)
- WSAEnumNetworkEvents (Address: 0x1802967f8)
- WSAEventSelect (Address: 0x1802967f0)
- WSAGetLastError (Address: 0x1802967e0)
- WSAIoctl (Address: 0x180296810)
- WSAResetEvent (Address: 0x1802967e8)
- WSASetEvent (Address: 0x180296888)
- WSASetLastError (Address: 0x180296818)
- WSAStartup (Address: 0x1802967d0)
- WSAWaitForMultipleEvents (Address: 0x1802967d8)