2.2.3.2 API Name Formatting
The format of an executable file and module names is as follows:
[Directory]\[Executable file/module name], for example, c:\windows\notepad.exe, c:\windows\system32\advapi32.dll
The format of API name is as follows:
[Module name]![API name], for example, advapi32!RegQueryValueExW