VAS.dll - Online Dependency Analysis & Download

Description

腾讯QQ

Authors

File size

567.9 KB

Uploaded

2025-12-02 14:48

Views

SHA-256

a0a1a4d0a6e4c5e171a73c093c5957ba

Security warning

This file has been flagged as potentially dangerous, and downloads are disabled.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported functions 4

DllCanUnloadNow #1 · 0x21f88

DllGetClassObject #2 · 0x21f9c

DllRegisterServer #3 · 0x21fd0

DllUnregisterServer #4 · 0x21fdd

Imported DLLs & functions 541

ADVAPI32.dll 10

RegCloseKey 0x64659000

RegCreateKeyExW 0x64659010

RegDeleteKeyW 0x64659018

RegDeleteValueW 0x6465901c

RegEnumKeyExW 0x6465900c

RegOpenKeyExW 0x64659004

RegOpenKeyW 0x64659024

RegQueryInfoKeyW 0x64659020

RegQueryValueExW 0x64659008

RegSetValueExW 0x64659014

AFBase.DLL 1

?GetUserHeadFile@Head@Contact@Util@@YAHKAAVCTXStringW@@0PAW4UserHeadType@123@@Z 0x6465902c

AFUtil.dll 7

?CreateChatFrameType@AFChatSession@Util@@YAHW4CFChatType@ChatFrame@@KPAPAUIAFChatFrameType@@PAUITXData@@@Z 0x64659038

?GetCurrentStackInfo@Misc@Util@@YA?AVCTXStringW@@XZ 0x64659044

?GetQQWifiDownloaderPath@QQWifiAutoDetect@Util@@YAXAAVCTXStringW@@AAH@Z 0x64659040

?IsBubbleMode@Misc@Util@@YAHXZ 0x64659034

?MakeCfgData@ChatFrameExtMatch@@YAXIPBW4CFExtEvent@ChatFrame@@HPAPAUITXData@@@Z 0x6465904c

?OpenUrlWithWnd2@URL@Util@@YAPAUHWND__@@UtagUrlWndParam@12@@Z 0x6465903c

?UrlEscapeW@URL@Util@@YA?AVCTXStringW@@ABV3@@Z 0x64659048

api-ms-win-crt-convert-l1-1-0.dll 4

_wtoi 0x646597c4

atoi 0x646597bc

wcstol 0x646597b8

wcstoul 0x646597c0

api-ms-win-crt-heap-l1-1-0.dll 4

_callnewh 0x646597d4

_recalloc 0x646597d0

free 0x646597cc

malloc 0x646597d8

api-ms-win-crt-math-l1-1-0.dll 1

_except1 0x646597e0

api-ms-win-crt-runtime-l1-1-0.dll 14

_beginthreadex 0x64659800

_cexit 0x64659814

_configure_narrow_argv 0x64659810

_crt_atexit 0x646597fc

_errno 0x64659808

_execute_onexit_table 0x646597f0

_initialize_narrow_environment 0x6465981c

_initialize_onexit_table 0x646597e8

_initterm 0x64659818

_initterm_e 0x64659804

_invalid_parameter_noinfo 0x6465980c

_invalid_parameter_noinfo_noreturn 0x646597f4

_register_onexit_function 0x646597ec

_seh_filter_dll 0x646597f8

api-ms-win-crt-stdio-l1-1-0.dll 6

__stdio_common_vsprintf 0x6465982c

__stdio_common_vsprintf_s 0x64659830

__stdio_common_vsscanf 0x64659838

__stdio_common_vswprintf 0x64659824

__stdio_common_vswprintf_s 0x64659828

__stdio_common_vswscanf 0x64659834

api-ms-win-crt-string-l1-1-0.dll 10

_wcsicmp 0x64659854

_wcslwr_s 0x64659858

strcmp 0x6465985c

strlen 0x64659864

wcscat_s 0x64659860

wcscpy_s 0x64659848

wcslen 0x64659840

wcsncpy 0x64659850

wcsncpy_s 0x64659844

wmemcpy_s 0x6465984c

api-ms-win-crt-time-l1-1-0.dll 1

_time32 0x6465986c

api-ms-win-crt-utility-l1-1-0.dll 1

_byteswap_ulong 0x64659874

AppUtil.dll 13

?CodeServerData_BoolValue@API@AdvConfig@@YAHGHPAPAUITXData@@@Z 0x64659070

?DecodeServerData_BoolValue@API@AdvConfig@@YAHGPAUITXData@@PAH@Z 0x6465906c

?DeleteTipInChatSession@ChatSession@Util@@YAHKHPAUITXData@@@Z 0x64659078

?GetChatSessionMainWnd@ChatSession@Util@@YAHKHPAPAUIGFFrame@@@Z 0x6465905c

?GetChatSessionViewFrame@ChatSession@Util@@YAHKHPAPAUIGFFrame@@@Z 0x64659058

?GetRegMainKeyBoolField@API@Registry@@YAHPB_WPBDPAHW4__MIDL___MIDL_itf_IRegistry_0000_0000_0003@@W4__MIDL___MIDL_itf_IRegistry_0000_0000_0004@@@Z 0x64659064

?HandleCFEvent@ChatSession@Util@@YAJKHHPAUITXData@@@Z 0x64659080

?HandleChatFrameEventCmd@ChatSession@Util@@YAHKW4CFChatType@ChatFrame@@PAUIAFChatFrameEventCmd@@@Z 0x64659074

?SetRegMainKeyBoolField@API@Registry@@YAHPB_WPBDHW4__MIDL___MIDL_itf_IRegistry_0000_0000_0003@@W4__MIDL___MIDL_itf_IRegistry_0000_0000_0004@@@Z 0x64659060

?ShowChatViewHostWnd@ChatSession@Util@@YAJKHH@Z 0x64659068

?WriteMsgInChatSession@ChatSession@Util@@YAXKHPAUITXData@@@Z 0x64659084

?WriteTipInChatSession@ChatSession@Util@@YAHKHPAUITXData@@@Z 0x6465907c

?WriteTipInContactChatSession@ChatSession@Util@@YAHKPAUITXData@@@Z 0x64659054

AsyncTask.dll 7

??0Lock@AsyncTask@@QAE@XZ 0x646590a4

??1Lock@AsyncTask@@QAE@XZ 0x6465908c

?Acquire@Lock@AsyncTask@@QAEXXZ 0x64659090

?AssertAcquired@Lock@AsyncTask@@QBEXXZ 0x64659098

?PostDelayedTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@_J@Z 0x646590a0

?PostTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@@Z 0x6465909c

?Release@Lock@AsyncTask@@QAEXXZ 0x64659094

Common.dll 235

0x64659138

0x64659210

0x6465943c

??0CCmdCodecBase@@QAE@XZ 0x64659248

??0CFmtString@@QAE@XZ 0x646590e4

??0CHttpClient@@QAE@XZ 0x646591bc

??0CTXBSTR@@QAE@ABV0@@Z 0x6465930c

??0CTXBSTR@@QAE@ABVCTXStringW@@@Z 0x64659448

??0CTXBSTR@@QAE@H@Z 0x6465939c

??0CTXBSTR@@QAE@PB_W@Z 0x646590d4

??0CTXBSTR@@QAE@XZ 0x64659414

??0CTXCommPack@@QAE@XZ 0x646591e0

??0CTXHttpDownloadSink@@IAE@XZ 0x646591b4

??0CTXStringA@@QAE@PBD@Z 0x64659158

??0CTXStringA@@QAE@PBDH@Z 0x6465915c

??0CTXStringA@@QAE@UtagEN@@PB_WH@Z 0x64659354

??0CTXStringA@@QAE@UtagUTF8@@PB_WH@Z 0x64659160

??0CTXStringA@@QAE@XZ 0x646593dc

??0CTXStringW@@QAE@ABV0@@Z 0x646590f4

??0CTXStringW@@QAE@ABVCTXBSTR@@@Z 0x64659424

??0CTXStringW@@QAE@PA_W@Z 0x64659170

??0CTXStringW@@QAE@PB_W@Z 0x64659428

??0CTXStringW@@QAE@PB_WH@Z 0x64659114

??0CTXStringW@@QAE@UtagUTF8@@PBDH@Z 0x64659118

??0CTXStringW@@QAE@XZ 0x646590b0

??0CTXThreadModel@@IAE@XZ 0x6465928c

??0CTXTime@@QAE@_J@Z 0x6465919c

??0CTXTime@@QAE@ABV0@@Z 0x646591a0

??0CTXTime@@QAE@HHHHHHH@Z 0x6465924c

??0CTXTime@@QAE@XZ 0x64659454

??0CTXTimeSpan@@QAE@_J@Z 0x64659238

??0CTXTimeSpan@@QAE@ABV0@@Z 0x6465923c

??0CTXTimeSpan@@QAE@JHHH@Z 0x6465920c

??1CCmdCodecBase@@UAE@XZ 0x64659450

??1CFmtString@@QAE@XZ 0x646590e8

??1CHttpClient@@QAE@XZ 0x646591c0

??1CTXBSTR@@QAE@XZ 0x64659444

??1CTXCommPack@@UAE@XZ 0x646591e4

??1CTXHttpDownloadSink@@UAE@XZ 0x646591b8

??1CTXStringA@@QAE@XZ 0x646593d8

??1CTXStringW@@QAE@XZ 0x6465944c

??1CTXThreadModel@@MAE@XZ 0x64659290

??4CTXBSTR@@QAEAAV0@ABV0@@Z 0x64659310

??4CTXBSTR@@QAEAAV0@PB_W@Z 0x64659188

??4CTXStringA@@QAEAAV0@PBD@Z 0x646592cc

??4CTXStringW@@QAEAAV0@ABV0@@Z 0x646590b8

??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z 0x6465911c

??4CTXStringW@@QAEAAV0@PA_W@Z 0x64659174

??4CTXStringW@@QAEAAV0@PB_W@Z 0x646590b4

??4CTXTime@@QAEAAV0@_J@Z 0x64659250

??4CTXTime@@QAEAAV0@V0@@Z 0x64659254

??4CTXTimeSpan@@QAEAAV0@V0@@Z 0x64659244

??8@YA_NABVCTXStringW@@0@Z 0x64659320

??8@YA_NABVCTXStringW@@PB_W@Z 0x64659358

??8@YA_NPB_WABVCTXBSTR@@@Z 0x64659318

??8@YA_NPB_WABVCTXStringW@@@Z 0x64659120

??8CTXBSTR@@QBE_NABV0@@Z 0x64659208

??8CTXBSTR@@QBE_NPA_W@Z 0x64659374

??8CTXBSTR@@QBE_NPB_W@Z 0x64659100

??9@YA_NABVCTXStringW@@0@Z 0x646591d0

??9CTXBSTR@@QBE_NPB_W@Z 0x646590fc

??ACTXStringW@@QBE_WH@Z 0x64659124

??BCTXBSTR@@QBEPA_WXZ 0x64659440

??BCTXStringA@@QBEPBDXZ 0x6465916c

??BCTXStringW@@QBEPB_WXZ 0x64659418

??GCTXTime@@QBE?AVCTXTimeSpan@@V0@@Z 0x646591a4

??H@YA?AVCTXStringW@@ABV0@0@Z 0x646590bc

??H@YA?AVCTXStringW@@ABV0@PB_W@Z 0x6465941c

??H@YA?AVCTXStringW@@PB_WABV0@@Z 0x6465921c

??ICTXBSTR@@QAEPAPA_WXZ 0x64659410

??M@YA_NABVCTXStringA@@0@Z 0x64659274

??M@YA_NABVCTXStringW@@0@Z 0x6465935c

??PCTXTime@@QBE_NV0@@Z 0x6465933c

??YCTXBSTR@@QAEAAV0@ABVCTXStringW@@@Z 0x64659334

??YCTXStringA@@QAEAAV0@ABV0@@Z 0x646591fc

??YCTXStringW@@QAEAAV0@ABV0@@Z 0x64659218

??YCTXStringW@@QAEAAV0@PB_W@Z 0x64659368

??YCTXTime@@QAEAAV0@VCTXTimeSpan@@@Z 0x64659338

?AddRef@CCmdCodecBase@@MAGKXZ 0x646593f0

?AddStrA@CTXCommPack@@QAEHABVCTXStringA@@@Z 0x646591ec

?Append@CTXBSTR@@QAEJABV1@@Z 0x64659314

?Append@CTXBSTR@@QAEJPB_W@Z 0x64659370

?Append@CTXStringW@@QAEXPB_W@Z 0x646591d8

?AppendChar@CTXStringW@@QAEX_W@Z 0x646591dc

?AppendFormat@CTXStringW@@QAAXPB_WZZ 0x64659134

?Base64Encode@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@H@Z 0x646591f8

?CancelDownload@CHttpClient@@QAEXXZ 0x64659378

?CodeArrayLenHead@CCmdCodecBase@@IAEXPBDW4CMDFIELDTYPE@@H@Z 0x64659384

?CodeArrayTXDataNumber@CCmdCodecBase@@IAEXPBDW4TX_DATA_TYPE@@@Z 0x64659388

?CodeBufferLenHead@CCmdCodecBase@@IAEXPBDW4CMDFIELDTYPE@@@Z 0x646592a0

?CodeEndArray@CCmdCodecBase@@IAEXXZ 0x646592f8

?CodeNumber@CCmdCodecBase@@IAEXPBDW4TX_DATA_TYPE@@@Z 0x64659438

?CodeStringLenHead@CCmdCodecBase@@IAEXPBDW4CMDFIELDTYPE@@@Z 0x6465929c

?CodeTXData@CCmdCodecBase@@UAGJPAUITXData@@PAPAUITXBuffer@@@Z 0x646593ec

?CombinePath@FS@Util@@YA?AVCTXStringW@@ABV3@0@Z 0x6465922c

?CompareNoCase@CTXStringW@@QBEHPB_W@Z 0x64659178

?ConvertToPureFile@FS@@YA?AVCTXStringW@@PB_W@Z 0x6465926c

?ConvertTXDataStringBundle@Convert@Util@@YAHPAUITXData@@@Z 0x646592bc

?ConvertXMLStrToTXData@Convert@Util@@YAHPA_WPAPA_WPAUITXData@@0@Z 0x64659364

?Copy@CTXBSTR@@QBEPA_WXZ 0x6465918c

?CopyTo@CTXBSTR@@QBEJPAPA_W@Z 0x64659190

?CopyTXDataField@Data@Util@@YAHPAUITXDataRead@@PAUITXData@@PBD2@Z 0x6465913c

?CreateDirectoryW@FS@@YAHPB_W@Z 0x64659264

?CreateFileW@FS@@YAHPB_WKPAPAUITXFile@@@Z 0x646591f0

?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z 0x64659308

?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z 0x646591ac

?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z 0x646593f8

?DecodeArrayLenHead@CCmdCodecBase@@IAEXPBDW4CMDFIELDTYPE@@H@Z 0x6465938c

?DecodeArrayTXDataNumber@CCmdCodecBase@@IAEXPBDW4TX_DATA_TYPE@@@Z 0x64659300

?DecodeArrayTXDataStringLenHead@CCmdCodecBase@@IAEXPBDW4CMDFIELDTYPE@@@Z 0x64659390

?DecodeBuffer@CCmdCodecBase@@UAGJPAUITXBuffer@@PAPAUITXData@@PAU3@@Z 0x646593e8

?DecodeBufferLenHead@CCmdCodecBase@@IAEXPBDW4CMDFIELDTYPE@@@Z 0x646592a8

?DecodeEndArray@CCmdCodecBase@@IAEXXZ 0x646592fc

?DecodeNumber@CCmdCodecBase@@IAEXPBDW4TX_DATA_TYPE@@@Z 0x64659430

?DecodeString@CCmdCodecBase@@IAEXPBDI@Z 0x646593b4

?DecodeStringLenHead@CCmdCodecBase@@IAEXPBDW4CMDFIELDTYPE@@@Z 0x6465942c

?DeleteFileW@FS@@YAHPB_W@Z 0x646592e8

?Detach@CTXBSTR@@QAEPA_WXZ 0x64659204

?DoFormat@CFmtString@@QAEPB_WPB_W@Z 0x646590ec

?Download@CHttpClient@@QAEHPB_WPAU_SYSTEMTIME@@0HPA_J@Z 0x64659230

?DownloadToBuffer@CHttpClient@@QAEHPB_WPAU_SYSTEMTIME@@@Z 0x646591c8

?Empty@CTXStringW@@QAEXXZ 0x6465917c

?EnableUnicodeString@CCmdCodecBase@@IAEXH@Z 0x64659294

?Encode16@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@@Z 0x64659348

?Encode16@Encode@Util@@YA?AVCTXStringW@@PBXI@Z 0x64659398

?EncodeUrl@Encode@Util@@YA?AVCTXStringW@@ABV3@_N1@Z 0x646590f0

?EraseAsyncCallback@TXTimer@@YAHPAUITXAsyncCallback@@I@Z 0x64659260

?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z 0x64659108

?Find@CTXStringW@@QBEH_WH@Z 0x64659324

?Find@CTXStringW@@QBEHPB_WH@Z 0x64659128

?Format@CTXStringA@@QAAXPBDZZ 0x646590ac

?Format@CTXStringW@@QAAXPB_WZZ 0x646590c0

?FormatGmt@CTXTime@@QBE?AVCTXStringW@@PB_W@Z 0x64659340

?GetAt@CTXStringA@@QBEDH@Z 0x64659164

?GetBSTR@CTXStringW@@QBEPA_WXZ 0x646590cc

?GetBSTRPtr@CTXStringW@@QAEPAPA_WXZ 0x646590d0

?GetBuffer@CTXStringW@@QAEPA_WH@Z 0x646592c0

?GetBuffer@CTXStringW@@QAEPA_WXZ 0x646590c4

?GetBufferByteLeft@CTXCommPack@@QBEHXZ 0x646592f0

?GetBufferOut@CTXCommPack@@QAEHAAVCTXBuffer@@@Z 0x646591e8

?GetBufferSetLength@CTXStringW@@QAEPA_WH@Z 0x6465936c

?GetByte@CTXCommPack@@QAEHAAEH@Z 0x646593ac

?GetCodeNumberUnsigned@CCmdCodecBase@@IAEKPBD@Z 0x64659298

?GetCustomData@CHttpClient@@QAEHPAPAUIUnknown@@@Z 0x646593a8

?GetDay@CTXTime@@QBEHXZ 0x646593c4

?GetDays@CTXTimeSpan@@QBE_JXZ 0x64659240

?GetDecodeNumberSigned@CCmdCodecBase@@IAEHPBD@Z 0x646592a4

?GetDecodeNumberUnsigned@CCmdCodecBase@@IAEKPBD@Z 0x64659434

?GetDownloadedBuffer@CHttpClient@@QAEHPAPAEPAK@Z 0x646591cc

?GetDownloadedFilePath@CHttpClient@@QAEHAAVCTXStringW@@@Z 0x64659420

?GetExeDir@Sys@Util@@YA?AVCTXStringW@@XZ 0x646592c8

?GetFileHash@FS@Util@@YAHPB_WAAVCTXBuffer@@AAK@Z 0x64659224

?GetFileName@FS@Util@@YA?AVCTXStringW@@ABV3@@Z 0x64659228

?GetHour@CTXTime@@QBEHXZ 0x646593c8

?GetLCID@NLS@@YAKXZ 0x646592ec

?GetLength@CTXStringA@@QBEHXZ 0x64659168

?GetLength@CTXStringW@@QBEHXZ 0x646590f8

?GetLogicThreadLoop@Misc@Util@@YAPAVMessageLoop@AsyncTask@@XZ 0x646592d0

?GetLoginServerTime@Time@Util@@YAKXZ 0x6465910c

?GetMainAndLogicThreadId@Misc@Util@@YAXAAK0@Z 0x6465927c

?GetMainThreadLoop@Misc@Util@@YAPAVMessageLoopForUI@AsyncTask@@XZ 0x64659408

?GetMinute@CTXTime@@QBEHXZ 0x646593cc

?GetMonth@CTXTime@@QBEHXZ 0x646593c0

?GetParentFolder@FS@Util@@YA?AVCTXStringW@@ABV3@@Z 0x64659270

?GetRegularBits@Misc@Util@@YAJPAUITXBuffer@@KIAAK@Z 0x646593d4

?GetRegulatedTime@Time@Util@@YA_NAA_J@Z 0x64659110

?GetRegulatedTime@Time@Util@@YA_NAAJ@Z 0x64659214

?GetResponseFileName@CHttpClient@@QAEHAAVCTXStringW@@@Z 0x64659278

?GetSecond@CTXTime@@QBEHXZ 0x646593d0

?GetString@CTXStringA@@QBEPBDXZ 0x64659200

?GetString@CTXStringW@@QBEPB_WXZ 0x646591d4

?GetTickCount@CTXTime@@SA?AV1@XZ 0x64659304

?GetTime@CTXTime@@QBE_JXZ 0x64659258

?GetTimeSpan@CTXTimeSpan@@QBE_JXZ 0x646593b8

?GetTotalSeconds@CTXTimeSpan@@QBE_JXZ 0x64659198

?GetTTPath@URL@Util@@YA?AVCTXStringW@@XZ 0x646592e4

?GetTXDataStr@Data@Util@@YAHPAUITXDataRead@@PBDAAVCTXStringW@@@Z 0x646590d8

?GetWord@CTXCommPack@@QAEHAAGHH@Z 0x646593b0

?GetYear@CTXTime@@QBEHXZ 0x646593bc

?IsDirectoryExist@FS@@YAHPB_W@Z 0x646593a0

?IsEmpty@CTXBSTR@@QAEHXZ 0x64659194

?IsEmpty@CTXStringW@@QBE_NXZ 0x646590c8

?IsFileExist@FS@@YAHPB_W@Z 0x64659220

?IsFileSystemFile@FS@@YAHPB_W@Z 0x646591f4

?IsInitAsyncMsgLoop@Misc@Util@@YAHXZ 0x64659404

?IsNetConnectionOK@Network@Util@@YAHPAHPAKPAPA_W@Z 0x646592e0

?IsRunning@CHttpClient@@QBEHXZ 0x64659380

?IsTencentTrusted@Misc@Util@@YAHPB_W@Z 0x6465934c

?JumpBuf@CTXCommPack@@QAEHH@Z 0x646592f4

?Left@CTXStringW@@QBE?AV1@H@Z 0x64659130

?LoadTinyXmlByContent@FS@Util@@YAHPA_WPAPAVTiXmlDocument@@H@Z 0x646592dc

?LogTaskEnd@Misc@Util@@YAXK@Z 0x646593fc

?LogTaskStart@Misc@Util@@YAKPB_W@Z 0x64659400

?Md5HashBuffer@@YAXPAEPBXK@Z 0x64659394

?Mid@CTXStringW@@QBE?AV1@H@Z 0x6465912c

?Mid@CTXStringW@@QBE?AV1@HH@Z 0x64659330

?MoveDownloadFile@CHttpClient@@QAEHPB_WH@Z 0x64659234

?oi_symmetry_encrypt2@@YAXPBEH0PAEPAH@Z 0x64659344

?OnConnected@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@@Z 0x64659144

?OnConnecting@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@PB_W@Z 0x64659140

?OnDownloadStart@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@KK@Z 0x64659148

?OnError@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@K@Z 0x64659154

?OnProgress@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@KK@Z 0x6465914c

?OnRedirected@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@PB_W@Z 0x64659150

?PropertyDWord@CFmtString@@QAEHPB_WK0@Z 0x646591b0

?PropertyLong@CFmtString@@QAEHPB_WJ0@Z 0x646590e0

?PropertyStr@CFmtString@@QAEHPB_W0@Z 0x646590dc

?QueryInterface@CCmdCodecBase@@MAGJABU_GUID@@PAPAX@Z 0x646593e4

?Release@CCmdCodecBase@@MAGKXZ 0x646593e0

?ReleaseBuffer@CTXStringW@@QAEXH@Z 0x646592c4

?RenameFile@FS@@YAHPB_W0@Z 0x64659268

?Replace@CTXStringW@@QAEHPB_W0@Z 0x6465931c

?ReverseFind@CTXStringW@@QBEH_W@Z 0x646592ac

?Right@CTXStringW@@QBE?AV1@H@Z 0x64659184

?SafeCoLoadLibrary@Sys@Util@@YAPAUHINSTANCE__@@PB_WHH@Z 0x64659350

?SafeLoadLibrary@Sys@Util@@YAPAUHINSTANCE__@@PB_W@Z 0x646592b4

?SafeLoadLibraryEx@Sys@Util@@YAPAUHINSTANCE__@@PB_WPAXK@Z 0x64659280

?SetAsyncCallback@TXTimer@@YAHPAUITXAsyncCallback@@I@Z 0x6465925c

?SetCustomData@CHttpClient@@QAEHPAUIUnknown@@@Z 0x646593a4

?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z 0x64659104

?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z 0x646592b8

?SetUIInterface@CHttpClient@@QAEXPAVCTXHttpDownloadSink@@@Z 0x646591c4

?SetUseUtf8Head@CHttpClient@@QAEXH@Z 0x6465937c

?StartThread@CTXThreadModel@@QAEHXZ 0x64659284

?StopThread@CTXThreadModel@@QAEHK@Z 0x64659288

?ToLower@CTXBSTR@@QAEJXZ 0x64659360

?Trim@CTXStringW@@QAEAAV1@_W@Z 0x64659180

?TrimLeft@CTXStringW@@QAEAAV1@XZ 0x6465932c

?TrimRight@CTXStringW@@QAEAAV1@XZ 0x64659328

?TXLoadString@@YAPB_WPB_W0@Z 0x646593f4

?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z 0x6465940c

?Utf8FromWS@Convert@Util@@YA?AVCTXStringA@@PB_WH@Z 0x646591a8

?Utf8ToWS@Convert@Util@@YA?AVCTXStringW@@PBDH@Z 0x646592b0

RemoveHardwareBreakpoint 0x646592d8

SetHardwareBreakpoint 0x646592d4

GF.dll 10

??0CDPIScaleIgnoreResetHelper@@QAE@XZ 0x64659470

??1CDPIScaleIgnoreResetHelper@@QAE@XZ 0x64659474

?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z 0x64659478

?GetRealDPIX@DPI@GF@Util@@YAHXZ 0x6465947c

?HandleMessageScale@DPI@GF@Util@@YAXPAUtagBaseArg@@@Z 0x6465946c

?IsScaleIgnore@DPI@GF@Util@@YA_NXZ 0x64659468

?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@PAUITXCore@@H@Z 0x64659480

?ScaleSIZE@DPI@GF@Util@@YAXPAUtagSIZE@@@Z 0x6465945c

?UnscaleLONG@DPI@GF@Util@@YAXPAJ@Z 0x64659464

?UnscaleSIZE@DPI@GF@Util@@YAXPAUtagSIZE@@@Z 0x64659460

KERNEL32.dll 76

CloseHandle 0x6465958c

CreateEventW 0x64659550

CreateFileMappingW 0x64659598

CreateFileW 0x646594d8

CreateMutexW 0x64659490

CreateProcessW 0x64659510

CreateSemaphoreW 0x6465954c

CreateThread 0x64659488

DecodePointer 0x64659508

DeleteCriticalSection 0x64659574

DeviceIoControl 0x64659518

EncodePointer 0x646594d0

EnterCriticalSection 0x64659568

ExpandEnvironmentStringsW 0x646595ac

FindClose 0x646594a8

FindFirstFileW 0x646594a4

FindResourceExW 0x64659514

FindResourceW 0x646594b8

FreeLibrary 0x646595a8

GetCurrentProcess 0x64659524

GetCurrentProcessId 0x646594e0

GetCurrentThreadId 0x64659538

GetExitCodeProcess 0x64659548

GetFileAttributesW 0x6465948c

GetLastError 0x64659564

GetLocalTime 0x646594dc

GetLongPathNameW 0x646594ac

GetModuleFileNameW 0x64659578

GetModuleHandleW 0x646595a4

GetProcAddress 0x646595a0

GetProcessHeap 0x646594e4

GetSystemDirectoryW 0x646595b0

GetSystemTime 0x64659494

GetSystemTimeAsFileTime 0x64659580

GetThreadLocale 0x646594b4

GetTickCount 0x64659584

GetVersionExW 0x6465949c

HeapAlloc 0x64659500

HeapDestroy 0x64659504

HeapFree 0x646594ec

HeapReAlloc 0x646594f0

HeapSize 0x646594e8

InitializeCriticalSection 0x64659528

InitializeCriticalSectionAndSpinCount 0x64659570

InitializeSListHead 0x646594cc

InterlockedCompareExchange 0x6465951c

InterlockedDecrement 0x64659558

InterlockedExchange 0x6465955c

InterlockedIncrement 0x64659554

IsDebuggerPresent 0x6465953c

IsProcessorFeaturePresent 0x646594f4

LeaveCriticalSection 0x6465956c

LoadLibraryExW 0x646594bc

LoadResource 0x646594c8

LocalFree 0x646594a0

LockResource 0x646594d4

lstrcmpiW 0x646594c0

MapViewOfFile 0x64659590

MultiByteToWideChar 0x6465957c

OpenFileMappingW 0x6465959c

OpenMutexW 0x646595b4

OpenProcess 0x64659520

OutputDebugStringW 0x64659544

QueryPerformanceCounter 0x64659588

RaiseException 0x64659560

ReleaseSemaphore 0x64659530

SetEvent 0x6465952c

SetThreadLocale 0x646594b0

SetUnhandledExceptionFilter 0x646594fc

SizeofResource 0x646594c4

SwitchToThread 0x64659498

TerminateProcess 0x646594f8

UnhandledExceptionFilter 0x64659540

UnmapViewOfFile 0x64659594

WaitForMultipleObjects 0x6465950c

WaitForSingleObject 0x64659534

KernelUtil.dll 37

?CreateMsgPack@Msg@Util@@YAHPAPAUITXMsgPack@@@Z 0x646595dc

?Get32ByteValueAddedSign@Misc@Util@@YA?AVCTXStringW@@XZ 0x646595c8

?GetBrowserInstalled@URL@Util@@YAXAAH0@Z 0x64659630

?GetBuildVer@Version@@YAKXZ 0x6465964c

?GetFlag@@YAHAAK00@Z 0x64659624

?GetIMVersion@Contact@Util@@YAGK@Z 0x64659644

?GetIsUserAdminOrCreator@Group@Util@@YAXKKPAH0@Z 0x646595fc

?GetMaskFlag@Contact@Util@@YAJKEKIAAK@Z 0x646595c0

?GetNickname@Contact@Util@@YA?AVCTXStringW@@K@Z 0x646595d4

?GetPublicName@Contact@Util@@YA?AVCTXStringW@@K@Z 0x646595d0

?GetPubNo@Version@@YAKXZ 0x6465962c

?GetRegistryData@NewRegistry@@YAHPAUITXCore@@PB_WW4NEW_REGISTRY_TYPE@1@PAPAUITXData@@@Z 0x646595ec

?GetRTypeByUin@Contact@Util@@YAKK@Z 0x64659608

?GetSelfUin@Contact@Util@@YAKXZ 0x646595bc

?GetSignFmt@URL@Util@@YAXAAVCFmtString@@@Z 0x646595d8

?GetStatus@Contact@Util@@YAGKPAUITXIMContactStatusMgr@@@Z 0x646595f8

?GetVersionExW@Version@@YAXAAUtagVersionInfo@1@@Z 0x64659628

?IsBuddy@Contact@Util@@YAHK@Z 0x6465961c

?IsColleagueGroup@Group@Util@@YAHK@Z 0x64659600

?IsDiscussExist@Group@Util@@YAHK@Z 0x646595e4

?IsFlagValid@Contact@Util@@YAHKKPAUITXIMContactInfoMgr@@@Z 0x6465960c

?IsGroupAnonymousMsg@Group@Util@@YA_NKPAUITXMsgPack@@@Z 0x646595e8

?IsGroupExist@Group@Util@@YAHK@Z 0x646595e0

?IsInFullScreen@WinScreenStatus@Util@@YAHPAPAUHWND__@@PAH1PAKPAPA_W1@Z 0x64659648

?IsMaskFlagValid@Contact@Util@@YAJKEKAAH@Z 0x64659604

?IsOnline@Contact@Util@@YAHK@Z 0x64659618

?IsPrevented@Contact@Util@@YAHK@Z 0x64659614

?IsRichServerControlBitOn@Misc@Util@@YAHKH@Z 0x646595cc

?IsServerControlBitOn@Misc@Util@@YAHK@Z 0x64659634

?IsSogouInstalled@URL@Util@@YAHH@Z 0x64659620

?IsTTInstall@URL@Util@@YAHXZ 0x64659638

?IsUseRecommendedBrowser@URL@Util@@YAHXZ 0x6465963c

?OidbReqToCsReq@Cmd0x3e3@Oidb@Util@@YAJIPBDPAUITXData@@1@Z 0x64659610

?OpenUrlInIM@URL@Util@@YAXABVCTXStringW@@@Z 0x646595c4

?OpenUrlInIM@URL@Util@@YAXABVCTXStringW@@W4URLMODIFYLEVEL@12@0@Z 0x646595f4

?SetRegistryData@NewRegistry@@YAHPAUITXCore@@PB_WW4NEW_REGISTRY_TYPE@1@PAUITXData@@@Z 0x646595f0

?SetUseRecommendedBrowser@URL@Util@@YAXH@Z 0x64659640

MSVCP140.dll 2

?_Xlength_error@std@@YAXPBD@Z 0x64659654

?_Xout_of_range@std@@YAXPBD@Z 0x64659658

ole32.dll 9

CoCreateGuid 0x6465989c

CoCreateInstance 0x64659890

CoInitialize 0x64659888

CoTaskMemAlloc 0x64659880

CoTaskMemFree 0x64659898

CoTaskMemRealloc 0x64659884

CoUninitialize 0x64659894

StringFromCLSID 0x6465988c

StringFromGUID2 0x6465987c

OLEAUT32.dll 12

LoadRegTypeLib 0x64659660

LoadTypeLib 0x64659664

RegisterTypeLib 0x64659674

SysAllocString 0x64659684

SysFreeString 0x64659688

SysStringLen 0x64659668

UnRegisterTypeLib 0x64659678

VariantChangeType 0x6465968c

VariantClear 0x6465966c

VariantCopy 0x6465967c

VariantInit 0x64659680

VarUI4FromStr 0x64659670

PSAPI.DLL 3

EnumProcesses 0x6465969c

EnumProcessModules 0x64659694

GetModuleBaseNameW 0x64659698

SHELL32.dll 3

ShellExecuteExW 0x646596ac

ShellExecuteW 0x646596a4

SHGetFileInfoW 0x646596a8

SHLWAPI.dll 2

PathAddBackslashW 0x646596b4

PathFileExistsW 0x646596b8

tinyxml.dll 4

?Attribute@TiXmlElement@@QBEPBDPBD@Z 0x646598a8

?FirstChildElement@TiXmlNode@@QAEPAVTiXmlElement@@PBD@Z 0x646598b0

?NextSiblingElement@TiXmlNode@@QAEPAVTiXmlElement@@XZ 0x646598ac

?RootElement@TiXmlDocument@@QAEPAVTiXmlElement@@XZ 0x646598a4

USER32.dll 40

ActivateKeyboardLayout 0x64659708

AttachThreadInput 0x64659730

CharNextW 0x646596fc

CreateWindowExW 0x64659714

DefWindowProcW 0x6465971c

DestroyWindow 0x646596d4

DispatchMessageW 0x64659740

GetCursorPos 0x64659724

GetDesktopWindow 0x6465973c

GetFocus 0x6465972c

GetForegroundWindow 0x646596c0

GetKeyboardLayout 0x64659704

GetKeyNameTextW 0x646596dc

GetMessageW 0x64659720

GetParent 0x646596d8

GetSystemMetrics 0x64659758

GetWindowLongW 0x646596c4

GetWindowPlacement 0x646596f8

GetWindowRect 0x64659748

GetWindowThreadProcessId 0x646596cc

IsIconic 0x64659750

IsWindow 0x6465975c

LoadCursorW 0x646596f4

LoadKeyboardLayoutW 0x6465970c

LoadStringW 0x64659700

MapVirtualKeyW 0x646596e0

PostMessageW 0x64659754

PostQuitMessage 0x646596ec

PostThreadMessageW 0x64659734

RegisterClassExW 0x64659718

RegisterDeviceNotificationW 0x646596e4

SendMessageW 0x64659738

SetCursor 0x64659744

SetForegroundWindow 0x64659728

SetWindowLongW 0x646596c8

SetWindowPos 0x6465974c

ShowWindow 0x64659710

SystemParametersInfoW 0x646596d0

TranslateMessage 0x646596f0

UnregisterDeviceNotification 0x646596e8

VCRUNTIME140.dll 13

__CxxFrameHandler3 0x64659774

__std_exception_copy 0x64659788

__std_exception_destroy 0x6465978c

__std_type_info_destroy_list 0x64659790

_CxxThrowException 0x64659778

_except_handler4_common 0x64659794

_purecall 0x64659784

memcmp 0x64659780

memcpy 0x64659770

memmove 0x6465976c

memset 0x6465977c

wcschr 0x64659768

wcsstr 0x64659764

VERSION.dll 3

GetFileVersionInfoSizeW 0x646597a4

GetFileVersionInfoW 0x6465979c

VerQueryValueW 0x646597a0

WININET.dll 2

InternetGetCookieW 0x646597b0

InternetSetCookieW 0x646597ac

xImage.dll 11

??0CxImage@@QAE@K@Z 0x646598b8

??0CxMemFile@@QAE@PAEK@Z 0x646598d0

??1CxMemFile@@UAE@XZ 0x646598e0

?Decode@CxImage@@QAE_NPAVCxFile@@K@Z 0x646598c4

?Destroy@CxImage@@QAE_NXZ 0x646598cc

?Encode@CxImage@@QAE_NPAVCxFile@@K@Z 0x646598c0

?FindFormat@CxImageHelper@@YAKPAVCxFile@@PAH@Z 0x646598bc

?GetBits@CxImage@@QAEPAEK@Z 0x646598c8

?GetBuffer@CxMemFile@@QAEPAE_N@Z 0x646598d8

?Open@CxMemFile@@QAE_NXZ 0x646598dc

?Size@CxMemFile@@UAEJXZ 0x646598d4