msctf.dll

Description: MSCTF Server DLL

Version: 10.0.19041.5794

Architecture: 32-bit

Operating System: Windows NT

SHA256: 35ae0d082915bb5129cd87a03a44d2a2

File Size: 842.4 KB

Uploaded At: Dec. 1, 2025, 8 a.m.

Views: 9

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

TF_RunInputCPL (Ordinal: 1, Address: 0x681c0)
CtfImeAssociateFocus (Ordinal: 2, Address: 0x2cbd0)
CtfImeConfigure (Ordinal: 3, Address: 0x68260)
CtfImeConversionList (Ordinal: 4, Address: 0x68280)
CtfImeCreateInputContext (Ordinal: 5, Address: 0x269b0)
CtfImeCreateThreadMgr (Ordinal: 6, Address: 0x3b070)
CtfImeDestroy (Ordinal: 7, Address: 0x682a0)
CtfImeDestroyInputContext (Ordinal: 8, Address: 0x25080)
CtfImeDestroyThreadMgr (Ordinal: 9, Address: 0x40570)
CtfImeDispatchDefImeMessage (Ordinal: 10, Address: 0x25bc0)
CtfImeEnumRegisterWord (Ordinal: 11, Address: 0x682c0)
CtfImeEscape (Ordinal: 12, Address: 0x682e0)
CtfImeEscapeEx (Ordinal: 13, Address: 0x68300)
CtfImeGetGuidAtom (Ordinal: 14, Address: 0x68320)
CtfImeGetRegisterWordStyle (Ordinal: 15, Address: 0x68340)
CtfImeInquire (Ordinal: 16, Address: 0x68360)
CtfImeInquireExW (Ordinal: 17, Address: 0x23ab0)
CtfImeIsGuidMapEnable (Ordinal: 18, Address: 0x68380)
CtfImeIsIME (Ordinal: 19, Address: 0x220e0)
CtfImeProcessCicHotkey (Ordinal: 20, Address: 0x2c9f0)
CtfImeProcessKey (Ordinal: 21, Address: 0x2a550)
CtfImeRegisterWord (Ordinal: 22, Address: 0x683a0)
CtfImeSelect (Ordinal: 23, Address: 0x683c0)
CtfImeSelectEx (Ordinal: 24, Address: 0x26ed0)
CtfImeSetActiveContext (Ordinal: 25, Address: 0x2d700)
CtfImeSetCompositionString (Ordinal: 26, Address: 0x683e0)
CtfImeSetFocus (Ordinal: 27, Address: 0x68410)
CtfImeToAsciiEx (Ordinal: 28, Address: 0x68440)
CtfImeUnregisterWord (Ordinal: 29, Address: 0x68470)
CtfNotifyIME (Ordinal: 30, Address: 0x1ca50)
DllCanUnloadNow (Ordinal: 31, Address: 0x22820)
DllGetClassObject (Ordinal: 32, Address: 0x479f0)
DllRegisterServer (Ordinal: 33, Address: 0x67110)
DllUnregisterServer (Ordinal: 34, Address: 0x673f0)
HasDeferredInputForCoreDispatcher (Ordinal: 35, Address: 0x2fc70)
InputFocusMonitorCreate (Ordinal: 36, Address: 0x4ca40)
SetInputScope (Ordinal: 37, Address: 0x457b0)
SetInputScopeXML (Ordinal: 38, Address: 0x79660)
SetInputScopes2 (Ordinal: 39, Address: 0x45780)
SetInputScopes (Ordinal: 40, Address: 0x4be80)
TF_CUASAppFix (Ordinal: 41, Address: 0x4b730)
TF_CanUninitialize (Ordinal: 42, Address: 0x228e0)
TF_CleanUpPrivateMessages (Ordinal: 43, Address: 0x22d30)
TF_CreateCTFWatchdogMutex (Ordinal: 44, Address: 0x4dde0)
TF_CreateCategoryMgr (Ordinal: 45, Address: 0x48a20)
TF_CreateCicLoadMutex (Ordinal: 46, Address: 0x44f80)
TF_CreateCicLoadWinStaMutex (Ordinal: 47, Address: 0x4dc80)
TF_CreateDisplayAttributeMgr (Ordinal: 48, Address: 0x48a40)
TF_CreateInputProcessorProfiles (Ordinal: 49, Address: 0x22be0)
TF_CreateLangBarItemMgr (Ordinal: 50, Address: 0x68490)
TF_CreateLangBarMgr (Ordinal: 51, Address: 0x20cb0)
TF_CreateThreadMgr (Ordinal: 52, Address: 0x4a770)
TF_GetAppCompatFlags (Ordinal: 53, Address: 0x30840)
TF_GetCompatibleKeyboardLayout (Ordinal: 54, Address: 0x684b0)
TF_GetGlobalCompartment (Ordinal: 55, Address: 0x68570)
TF_GetInitSystemFlags (Ordinal: 56, Address: 0x38f60)
TF_GetInputScope (Ordinal: 57, Address: 0x307d0)
TF_GetShowFloatingStatus (Ordinal: 58, Address: 0x7c440)
TF_GetThreadFlags (Ordinal: 59, Address: 0x21310)
TF_GetThreadMgr (Ordinal: 60, Address: 0x68580)
TF_InitSystem (Ordinal: 61, Address: 0x42dc0)
TF_InvalidAssemblyListCacheIfExist (Ordinal: 62, Address: 0x47bb0)
TF_IsCtfmonRunning (Ordinal: 63, Address: 0x4df20)
TF_IsLanguageBarEnabled (Ordinal: 64, Address: 0x685d0)
TF_IsThreadWithFlags (Ordinal: 65, Address: 0x47df0)
TF_MapCompatibleHKL (Ordinal: 66, Address: 0x686a0)
TF_MapCompatibleKeyboardTip (Ordinal: 67, Address: 0x686c0)
TF_Notify (Ordinal: 68, Address: 0x35d10)
TF_PostAllThreadMsg (Ordinal: 69, Address: 0x229b0)
TF_SendLangBandMsg (Ordinal: 70, Address: 0x686e0)
TF_SetDefaultRemoteKeyboardLayout (Ordinal: 71, Address: 0x4c480)
TF_SetShowFloatingStatus (Ordinal: 72, Address: 0x7c460)
TF_SetThreadFlags (Ordinal: 73, Address: 0x47c60)
TF_UninitSystem (Ordinal: 74, Address: 0x4d360)
TF_WaitForInitialized (Ordinal: 75, Address: 0x22d30)
TextInputClientWrapperCreate (Ordinal: 76, Address: 0x3a6c0)

Imported DLLs & Functions

api-ms-win-core-atoms-l1-1-0.dll

AddAtomW (Address: 0x100c4368)
DeleteAtom (Address: 0x100c4364)
FindAtomW (Address: 0x100c4370)
GetAtomNameW (Address: 0x100c436c)

api-ms-win-core-com-l1-1-0.dll

CoGetApartmentType (Address: 0x100c4378)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x100c4388)
IsDebuggerPresent (Address: 0x100c4384)
OutputDebugStringW (Address: 0x100c4380)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x100c4390)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x100c4398)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x100c43a8)
RaiseException (Address: 0x100c43a4)
SetLastError (Address: 0x100c43b0)
SetUnhandledExceptionFilter (Address: 0x100c43a0)
UnhandledExceptionFilter (Address: 0x100c43ac)

api-ms-win-core-errorhandling-l1-1-2.dll

RaiseFailFastException (Address: 0x100c43b8)

api-ms-win-core-fibers-l1-1-0.dll

FlsAlloc (Address: 0x100c43c8)
FlsFree (Address: 0x100c43c0)
FlsSetValue (Address: 0x100c43c4)

api-ms-win-core-file-l1-1-0.dll

GetFileAttributesW (Address: 0x100c43d4)
GetFullPathNameW (Address: 0x100c43d8)
SetFilePointer (Address: 0x100c43d0)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x100c43e0)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x100c43e8)
HeapAlloc (Address: 0x100c43ec)
HeapFree (Address: 0x100c43f0)
HeapReAlloc (Address: 0x100c43f4)

api-ms-win-core-heap-l2-1-0.dll

GlobalAlloc (Address: 0x100c4404)
LocalAlloc (Address: 0x100c4400)
LocalFree (Address: 0x100c4408)
LocalReAlloc (Address: 0x100c43fc)

api-ms-win-core-heap-obsolete-l1-1-0.dll

GlobalLock (Address: 0x100c4414)
GlobalUnlock (Address: 0x100c4410)

api-ms-win-core-kernel32-legacy-l1-1-1.dll

VerifyVersionInfoW (Address: 0x100c441c)

api-ms-win-core-libraryloader-l1-2-0.dll

FindStringOrdinal (Address: 0x100c4434)
FreeLibrary (Address: 0x100c4444)
GetModuleFileNameA (Address: 0x100c4424)
GetModuleFileNameW (Address: 0x100c442c)
GetModuleHandleExW (Address: 0x100c4430)
GetModuleHandleW (Address: 0x100c443c)
GetProcAddress (Address: 0x100c4428)
LoadLibraryExW (Address: 0x100c4440)
LoadStringW (Address: 0x100c4438)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x100c4464)
GetACP (Address: 0x100c444c)
GetLocaleInfoW (Address: 0x100c4450)
GetSystemDefaultLangID (Address: 0x100c4458)
GetSystemDefaultLCID (Address: 0x100c4460)
IsDBCSLeadByteEx (Address: 0x100c445c)
LCMapStringW (Address: 0x100c4454)

api-ms-win-core-localization-obsolete-l1-2-0.dll

CompareStringA (Address: 0x100c4470)
GetUserDefaultUILanguage (Address: 0x100c446c)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x100c4484)
MapViewOfFile (Address: 0x100c447c)
OpenFileMappingW (Address: 0x100c4480)
UnmapViewOfFile (Address: 0x100c4478)

api-ms-win-core-processenvironment-l1-1-0.dll

ExpandEnvironmentStringsW (Address: 0x100c448c)
GetEnvironmentVariableW (Address: 0x100c4490)

api-ms-win-core-processthreads-l1-1-0.dll

CreateProcessW (Address: 0x100c44b8)
CreateThread (Address: 0x100c4498)
ExitThread (Address: 0x100c44d0)
GetCurrentProcess (Address: 0x100c449c)
GetCurrentProcessId (Address: 0x100c44b4)
GetCurrentThreadId (Address: 0x100c44c4)
GetProcessIdOfThread (Address: 0x100c44bc)
OpenProcessToken (Address: 0x100c44a0)
OpenThread (Address: 0x100c44a4)
ProcessIdToSessionId (Address: 0x100c44a8)
TerminateProcess (Address: 0x100c44c8)
TlsAlloc (Address: 0x100c44cc)
TlsFree (Address: 0x100c44c0)
TlsGetValue (Address: 0x100c44ac)
TlsSetValue (Address: 0x100c44b0)

api-ms-win-core-processthreads-l1-1-1.dll

GetProcessMitigationPolicy (Address: 0x100c44dc)
OpenProcess (Address: 0x100c44d8)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x100c44e4)
QueryPerformanceFrequency (Address: 0x100c44e8)

api-ms-win-core-psapi-l1-1-0.dll

K32GetModuleFileNameExW (Address: 0x100c44f4)
K32GetProcessImageFileNameW (Address: 0x100c44f0)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x100c44fc)
RegCreateKeyExW (Address: 0x100c4518)
RegDeleteKeyExW (Address: 0x100c4504)
RegDeleteValueW (Address: 0x100c4510)
RegEnumKeyExW (Address: 0x100c4508)
RegEnumValueW (Address: 0x100c4524)
RegGetValueW (Address: 0x100c450c)
RegOpenCurrentUser (Address: 0x100c451c)
RegOpenKeyExW (Address: 0x100c4520)
RegQueryInfoKeyW (Address: 0x100c4500)
RegQueryValueExW (Address: 0x100c4514)
RegSetValueExW (Address: 0x100c4528)

api-ms-win-core-shlwapi-obsolete-l1-1-0.dll

QISearch (Address: 0x100c4534)
StrStrIW (Address: 0x100c4530)

api-ms-win-core-sidebyside-l1-1-0.dll

ActivateActCtx (Address: 0x100c4544)
CreateActCtxW (Address: 0x100c453c)
DeactivateActCtx (Address: 0x100c4548)
ReleaseActCtx (Address: 0x100c4540)

api-ms-win-core-string-l1-1-0.dll

CompareStringOrdinal (Address: 0x100c4558)
CompareStringW (Address: 0x100c4554)
MultiByteToWideChar (Address: 0x100c455c)
WideCharToMultiByte (Address: 0x100c4550)

api-ms-win-core-string-l2-1-0.dll

CharNextW (Address: 0x100c4564)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpW (Address: 0x100c4570)
lstrlenA (Address: 0x100c4574)
lstrlenW (Address: 0x100c456c)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x100c4588)
AcquireSRWLockShared (Address: 0x100c459c)
CreateEventW (Address: 0x100c45d8)
CreateMutexExW (Address: 0x100c4580)
CreateMutexW (Address: 0x100c45b4)
CreateSemaphoreExW (Address: 0x100c458c)
DeleteCriticalSection (Address: 0x100c457c)
EnterCriticalSection (Address: 0x100c45ac)
InitializeCriticalSection (Address: 0x100c45c0)
InitializeCriticalSectionAndSpinCount (Address: 0x100c45bc)
InitializeCriticalSectionEx (Address: 0x100c45b0)
LeaveCriticalSection (Address: 0x100c45a8)
OpenEventW (Address: 0x100c45cc)
OpenMutexW (Address: 0x100c45b8)
OpenSemaphoreW (Address: 0x100c45d4)
ReleaseMutex (Address: 0x100c45a0)
ReleaseSemaphore (Address: 0x100c4594)
ReleaseSRWLockExclusive (Address: 0x100c4590)
ReleaseSRWLockShared (Address: 0x100c45a4)
ResetEvent (Address: 0x100c45c4)
SetEvent (Address: 0x100c45c8)
WaitForMultipleObjectsEx (Address: 0x100c4584)
WaitForSingleObject (Address: 0x100c4598)
WaitForSingleObjectEx (Address: 0x100c45d0)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x100c45ec)
InitOnceComplete (Address: 0x100c45e4)
Sleep (Address: 0x100c45e0)
SleepConditionVariableSRW (Address: 0x100c45f0)
WakeAllConditionVariable (Address: 0x100c45e8)

api-ms-win-core-synch-l1-2-1.dll

WaitForMultipleObjects (Address: 0x100c45f8)

api-ms-win-core-sysinfo-l1-1-0.dll

GetLocalTime (Address: 0x100c460c)
GetSystemDirectoryW (Address: 0x100c4618)
GetSystemInfo (Address: 0x100c4608)
GetSystemTimeAsFileTime (Address: 0x100c4600)
GetSystemWindowsDirectoryW (Address: 0x100c4614)
GetTickCount (Address: 0x100c4610)
GetTickCount64 (Address: 0x100c4604)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolTimer (Address: 0x100c4620)
CreateThreadpoolTimer (Address: 0x100c462c)
SetThreadpoolTimer (Address: 0x100c4624)
WaitForThreadpoolTimerCallbacks (Address: 0x100c4628)

api-ms-win-core-version-l1-1-0.dll

GetFileVersionInfoExW (Address: 0x100c4638)
GetFileVersionInfoSizeExW (Address: 0x100c4634)
VerQueryValueW (Address: 0x100c463c)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCreateString (Address: 0x100c464c)
WindowsDeleteString (Address: 0x100c4648)
WindowsGetStringRawBuffer (Address: 0x100c4644)

api-ms-win-eventing-provider-l1-1-0.dll

EventRegister (Address: 0x100c4660)
EventSetInformation (Address: 0x100c4654)
EventUnregister (Address: 0x100c465c)
EventWriteTransfer (Address: 0x100c4658)

api-ms-win-security-base-l1-1-0.dll

AllocateAndInitializeSid (Address: 0x100c4680)
CheckTokenMembership (Address: 0x100c4674)
CreateWellKnownSid (Address: 0x100c4678)
EqualSid (Address: 0x100c4688)
FreeSid (Address: 0x100c4668)
GetSidSubAuthority (Address: 0x100c467c)
GetSidSubAuthorityCount (Address: 0x100c4670)
GetTokenInformation (Address: 0x100c466c)
InitializeSid (Address: 0x100c4684)

api-ms-win-security-base-l1-2-0.dll

CheckTokenMembershipEx (Address: 0x100c4690)

api-ms-win-service-management-l1-1-0.dll

CloseServiceHandle (Address: 0x100c4698)
OpenSCManagerW (Address: 0x100c46a4)
OpenServiceW (Address: 0x100c46a0)
StartServiceW (Address: 0x100c469c)

GDI32.dll

BitBlt (Address: 0x100c4060)
CreateBitmap (Address: 0x100c4068)
CreateBrushIndirect (Address: 0x100c405c)
CreateCompatibleBitmap (Address: 0x100c4064)
CreateCompatibleDC (Address: 0x100c4084)
CreateDCW (Address: 0x100c4080)
CreateDIBSection (Address: 0x100c4090)
CreateFontIndirectW (Address: 0x100c4028)
CreateFontW (Address: 0x100c4000)
CreatePen (Address: 0x100c404c)
CreateSolidBrush (Address: 0x100c4050)
DeleteDC (Address: 0x100c4088)
DeleteObject (Address: 0x100c407c)
ExtCreatePen (Address: 0x100c4038)
ExtTextOutA (Address: 0x100c4078)
ExtTextOutW (Address: 0x100c4008)
GetBitmapBits (Address: 0x100c402c)
GetCurrentObject (Address: 0x100c403c)
GetDeviceCaps (Address: 0x100c4004)
GetDIBits (Address: 0x100c4020)
GetObjectW (Address: 0x100c4094)
GetStockObject (Address: 0x100c401c)
GetTextAlign (Address: 0x100c4074)
GetTextColor (Address: 0x100c4048)
GetTextExtentPoint32W (Address: 0x100c4018)
GetTextExtentPointA (Address: 0x100c406c)
GetTextMetricsW (Address: 0x100c4024)
LineTo (Address: 0x100c4040)
MoveToEx (Address: 0x100c4044)
PatBlt (Address: 0x100c4030)
Polyline (Address: 0x100c4034)
SelectObject (Address: 0x100c408c)
SetBkColor (Address: 0x100c4010)
SetBkMode (Address: 0x100c4014)
SetLayout (Address: 0x100c4054)
SetTextAlign (Address: 0x100c4070)
SetTextColor (Address: 0x100c400c)
SetViewportOrgEx (Address: 0x100c4058)

IMM32.dll

CtfImmAppCompatEnableIMEonProtectedCode (Address: 0x100c40d4)
CtfImmCoUninitialize (Address: 0x100c40f4)
CtfImmEnterCoInitCountSkipMode (Address: 0x100c40fc)
CtfImmGenerateMessage (Address: 0x100c4114)
CtfImmGetTMAEFlags (Address: 0x100c40f0)
CtfImmIsCiceroStartedInThread (Address: 0x100c409c)
CtfImmLastEnabledWndDestroy (Address: 0x100c40d8)
CtfImmLeaveCoInitCountSkipMode (Address: 0x100c4100)
CtfImmSetCiceroStartInThread (Address: 0x100c40f8)
ImmCreateIMCC (Address: 0x100c40c8)
ImmDestroyIMCC (Address: 0x100c40cc)
ImmEnumInputContext (Address: 0x100c40c4)
ImmGetAppCompatFlags (Address: 0x100c40b8)
ImmGetCompositionFontW (Address: 0x100c40c0)
ImmGetCompositionStringW (Address: 0x100c411c)
ImmGetContext (Address: 0x100c40dc)
ImmGetConversionStatus (Address: 0x100c40e8)
ImmGetDefaultIMEWnd (Address: 0x100c40d0)
ImmGetHotKey (Address: 0x100c4108)
ImmGetIMCCSize (Address: 0x100c40ac)
ImmGetIMEFileNameW (Address: 0x100c410c)
ImmGetOpenStatus (Address: 0x100c4104)
ImmGetProperty (Address: 0x100c40bc)
ImmLockIMC (Address: 0x100c40a4)
ImmLockIMCC (Address: 0x100c40b0)
ImmNotifyIME (Address: 0x100c40a0)
ImmReleaseContext (Address: 0x100c40e0)
ImmRequestMessageW (Address: 0x100c4110)
ImmReSizeIMCC (Address: 0x100c4118)
ImmSetCompositionStringW (Address: 0x100c4120)
ImmSetConversionStatus (Address: 0x100c40ec)
ImmSetOpenStatus (Address: 0x100c40e4)
ImmUnlockIMC (Address: 0x100c40a8)
ImmUnlockIMCC (Address: 0x100c40b4)

msvcrt.dll

__CxxFrameHandler3 (Address: 0x100c46ec)
__dllonexit (Address: 0x100c46f8)
_amsg_exit (Address: 0x100c4708)
_CIsqrt (Address: 0x100c46d8)
_CxxThrowException (Address: 0x100c46b0)
_except_handler4_common (Address: 0x100c46f0)
_ftol2_sse (Address: 0x100c46dc)
_initterm (Address: 0x100c4704)
_lock (Address: 0x100c4700)
_onexit (Address: 0x100c46f4)
_unlock (Address: 0x100c46fc)
_vsnprintf (Address: 0x100c4730)
_vsnprintf_s (Address: 0x100c46d0)
_vsnwprintf (Address: 0x100c46c0)
_wcsicmp (Address: 0x100c46cc)
_XcptFilter (Address: 0x100c470c)
??0exception@@QAE@ABQBD@Z (Address: 0x100c46bc)
??0exception@@QAE@ABV0@@Z (Address: 0x100c46d4)
??0exception@@QAE@XZ (Address: 0x100c473c)
??1exception@@UAE@XZ (Address: 0x100c46b8)
??1type_info@@UAE@XZ (Address: 0x100c46c4)
?terminate@@YAXXZ (Address: 0x100c46ac)
?what@exception@@UBEPBDXZ (Address: 0x100c46b4)
free (Address: 0x100c471c)
malloc (Address: 0x100c4718)
memcmp (Address: 0x100c46e0)
memcpy (Address: 0x100c46e4)
memcpy_s (Address: 0x100c4738)
memmove (Address: 0x100c46e8)
memmove_s (Address: 0x100c4734)
memset (Address: 0x100c4740)
wcscpy_s (Address: 0x100c4714)
wcsncat_s (Address: 0x100c46c8)
wcsncpy (Address: 0x100c4724)
wcsncpy_s (Address: 0x100c4710)
wcsrchr (Address: 0x100c4720)
wcsstr (Address: 0x100c472c)
wcstoul (Address: 0x100c4728)

ntdll.dll

AlpcGetMessageAttribute (Address: 0x100c4790)
AlpcInitializeMessageAttribute (Address: 0x100c4768)
LdrLockLoaderLock (Address: 0x100c4764)
LdrUnlockLoaderLock (Address: 0x100c4760)
NtAlpcAcceptConnectPort (Address: 0x100c476c)
NtAlpcCancelMessage (Address: 0x100c477c)
NtAlpcConnectPortEx (Address: 0x100c475c)
NtAlpcCreatePort (Address: 0x100c4774)
NtAlpcCreatePortSection (Address: 0x100c478c)
NtAlpcCreateSectionView (Address: 0x100c4788)
NtAlpcDeletePortSection (Address: 0x100c4784)
NtAlpcDeleteSectionView (Address: 0x100c4778)
NtAlpcOpenSenderProcess (Address: 0x100c4770)
NtAlpcQueryInformation (Address: 0x100c4758)
NtAlpcSendWaitReceivePort (Address: 0x100c4780)
NtClose (Address: 0x100c47c0)
NtCreateFile (Address: 0x100c47a0)
NtOpenKey (Address: 0x100c47ac)
NtQueryInformationProcess (Address: 0x100c47bc)
NtQueryValueKey (Address: 0x100c47a8)
NtWriteFile (Address: 0x100c4798)
RtlDllShutdownInProgress (Address: 0x100c4750)
RtlDosPathNameToNtPathName_U (Address: 0x100c47a4)
RtlFormatCurrentUserKeyPath (Address: 0x100c47b4)
RtlFreeUnicodeString (Address: 0x100c479c)
RtlGetDeviceFamilyInfoEnum (Address: 0x100c474c)
RtlInitUnicodeString (Address: 0x100c47b0)
RtlPublishWnfStateData (Address: 0x100c4794)
RtlUnhandledExceptionFilter (Address: 0x100c47b8)
VerSetConditionMask (Address: 0x100c4748)
WinSqmAddToStream (Address: 0x100c47c4)
WinSqmIsOptedIn (Address: 0x100c4754)

OLEAUT32.dll

SysAllocString (Address: 0x100c4128)
SysAllocStringLen (Address: 0x100c4130)
SysFreeString (Address: 0x100c412c)
SysStringLen (Address: 0x100c4134)
VariantClear (Address: 0x100c4138)
VariantCopy (Address: 0x100c413c)

USER32.dll

(Address: 0x100c41bc)
(Address: 0x100c41f0)
(Address: 0x100c42fc)
ActivateKeyboardLayout (Address: 0x100c42dc)
AdjustWindowRectEx (Address: 0x100c41dc)
AnimateWindow (Address: 0x100c421c)
BeginPaint (Address: 0x100c4194)
ChangeWindowMessageFilter (Address: 0x100c4354)
ChangeWindowMessageFilterEx (Address: 0x100c4250)
ClientToScreen (Address: 0x100c4180)
CopyImage (Address: 0x100c426c)
CreateIconIndirect (Address: 0x100c4244)
CreateWindowExW (Address: 0x100c4254)
DefWindowProcW (Address: 0x100c4258)
DestroyIcon (Address: 0x100c4270)
DestroyWindow (Address: 0x100c42f0)
DispatchMessageA (Address: 0x100c423c)
DispatchMessageW (Address: 0x100c4260)
DrawEdge (Address: 0x100c415c)
DrawIconEx (Address: 0x100c4150)
DrawStateW (Address: 0x100c42ec)
DrawTextExW (Address: 0x100c41c0)
EndPaint (Address: 0x100c4198)
EnumThreadWindows (Address: 0x100c42cc)
EqualRect (Address: 0x100c4284)
FillRect (Address: 0x100c4234)
FindWindowExW (Address: 0x100c4268)
FindWindowW (Address: 0x100c433c)
FrameRect (Address: 0x100c4158)
GetActiveWindow (Address: 0x100c42ac)
GetAncestor (Address: 0x100c4308)
GetCaretBlinkTime (Address: 0x100c41b0)
GetCIMSSM (Address: 0x100c4328)
GetClassInfoExW (Address: 0x100c416c)
GetClassLongW (Address: 0x100c42d4)
GetClassNameW (Address: 0x100c4274)
GetClientRect (Address: 0x100c4280)
GetCurrentInputMessageSource (Address: 0x100c432c)
GetCursor (Address: 0x100c41ec)
GetCursorPos (Address: 0x100c41a4)
GetDC (Address: 0x100c4214)
GetDoubleClickTime (Address: 0x100c41c4)
GetFocus (Address: 0x100c4300)
GetGUIThreadInfo (Address: 0x100c4338)
GetIconInfo (Address: 0x100c4248)
GetInputLocaleInfo (Address: 0x100c4218)
GetKeyboardLayout (Address: 0x100c431c)
GetKeyboardLayoutList (Address: 0x100c4224)
GetKeyboardState (Address: 0x100c428c)
GetKeyState (Address: 0x100c42a4)
GetMessageA (Address: 0x100c4238)
GetMessageExtraInfo (Address: 0x100c41b8)
GetMessagePos (Address: 0x100c41d0)
GetMessageW (Address: 0x100c4230)
GetMonitorInfoW (Address: 0x100c4164)
GetParent (Address: 0x100c4310)
GetPointerInfo (Address: 0x100c42e0)
GetPointerPenInfo (Address: 0x100c42e4)
GetPointerType (Address: 0x100c42e8)
GetProcessWindowStation (Address: 0x100c4298)
GetPropW (Address: 0x100c42a8)
GetQueueStatus (Address: 0x100c42f8)
GetSysColor (Address: 0x100c4144)
GetSystemMetrics (Address: 0x100c42bc)
GetThreadDesktop (Address: 0x100c42a0)
GetUserObjectInformationW (Address: 0x100c429c)
GetWindow (Address: 0x100c4264)
GetWindowBand (Address: 0x100c4304)
GetWindowLongW (Address: 0x100c430c)
GetWindowRect (Address: 0x100c4184)
GetWindowThreadProcessId (Address: 0x100c4330)
InflateRect (Address: 0x100c4204)
InSendMessageEx (Address: 0x100c42c8)
IntersectRect (Address: 0x100c4278)
InvalidateRect (Address: 0x100c4178)
IsChild (Address: 0x100c4174)
IsRectEmpty (Address: 0x100c42c4)
IsThreadTSFEventAware (Address: 0x100c42c0)
IsWindow (Address: 0x100c4314)
IsWindowInDestroy (Address: 0x100c42d8)
IsWindowUnicode (Address: 0x100c41a8)
IsWindowVisible (Address: 0x100c42d0)
keybd_event (Address: 0x100c41ac)
KillTimer (Address: 0x100c42b4)
LoadCursorW (Address: 0x100c4168)
LoadIconW (Address: 0x100c4160)
LoadImageW (Address: 0x100c4188)
LoadKeyboardLayoutW (Address: 0x100c4148)
MakeThreadTSFEventAware (Address: 0x100c434c)
MapVirtualKeyExW (Address: 0x100c41b4)
MapVirtualKeyW (Address: 0x100c420c)
MapWindowPoints (Address: 0x100c427c)
MonitorFromPoint (Address: 0x100c41d8)
MonitorFromRect (Address: 0x100c41c8)
MoveWindow (Address: 0x100c418c)
MsgWaitForMultipleObjects (Address: 0x100c425c)
NotifyWinEvent (Address: 0x100c4340)
OffsetRect (Address: 0x100c4200)
PeekMessageA (Address: 0x100c4240)
PeekMessageW (Address: 0x100c435c)
PostMessageW (Address: 0x100c422c)
PostQuitMessage (Address: 0x100c42f4)
PostThreadMessageW (Address: 0x100c4320)
PtInRect (Address: 0x100c4318)
RealGetWindowClassW (Address: 0x100c4334)
RegisterClassExW (Address: 0x100c424c)
RegisterWindowMessageW (Address: 0x100c4358)
ReleaseCapture (Address: 0x100c4294)
ReleaseDC (Address: 0x100c4210)
RemoveThreadTSFEventAwareness (Address: 0x100c4348)
ScreenToClient (Address: 0x100c417c)
SendMessageW (Address: 0x100c4324)
SendNotifyMessageW (Address: 0x100c41f4)
SetCapture (Address: 0x100c41d4)
SetCoalescableTimer (Address: 0x100c41fc)
SetCursor (Address: 0x100c41cc)
SetLayeredWindowAttributes (Address: 0x100c41e4)
SetRect (Address: 0x100c4290)
SetRectEmpty (Address: 0x100c42b8)
SetThreadDesktop (Address: 0x100c4228)
SetTimer (Address: 0x100c42b0)
SetWindowLongW (Address: 0x100c41f8)
SetWindowPos (Address: 0x100c419c)
SetWindowRgn (Address: 0x100c41e8)
SetWinEventHook (Address: 0x100c4350)
ShowWindow (Address: 0x100c4190)
SystemParametersInfoW (Address: 0x100c4220)
ToUnicode (Address: 0x100c4288)
ToUnicodeEx (Address: 0x100c4208)
UnhookWinEvent (Address: 0x100c4344)
UnionRect (Address: 0x100c41a0)
UnloadKeyboardLayout (Address: 0x100c414c)
UnregisterClassW (Address: 0x100c4170)
UpdateLayeredWindow (Address: 0x100c4154)
WindowFromPoint (Address: 0x100c41e0)