2.2.3.2 API Name Formatting

  • Article

The format of an executable file and module names is as follows:

[Directory]\[Executable file/module name], for example, c:\windows\notepad.exe, c:\windows\system32\advapi32.dll

The format of API name is as follows:

[Module name]![API name], for example, advapi32!RegQueryValueExW