Winks.dll

v9.7.17.29215 32-bit Windows NT Analyzed
Download
Description
腾讯QQ
Authors
Copyright (C) 1999-2023 Tencent. All Rights Reserved
File size
417.9 KB
Uploaded
2025-12-02 14:48
Views
51
SHA-256
53ba80c959c59117eb02a9b5a29b3f4e

Exported functions 4

DllCanUnloadNow #1 · 0x1b3dd
DllGetClassObject #2 · 0x1b3f1
DllRegisterServer #3 · 0x1b425
DllUnregisterServer #4 · 0x1b432

Imported DLLs & functions 320

ADVAPI32.dll 8
RegCloseKey 0x64947008
RegCreateKeyExW 0x6494700c
RegDeleteKeyW 0x64947010
RegDeleteValueW 0x64947014
RegEnumKeyExW 0x64947018
RegOpenKeyExW 0x6494701c
RegQueryInfoKeyW 0x64947000
RegSetValueExW 0x64947004
AFUtil.dll 7
?CreateChatFrameType@AFChatSession@Util@@YAHW4CFChatType@ChatFrame@@KPAPAUIAFChatFrameType@@PAUITXData@@@Z 0x6494702c
?GetCodeByUin@Group@Util@@YAKK@Z 0x64947028
?GetCurrentStackInfo@Misc@Util@@YA?AVCTXStringW@@XZ 0x64947038
?GetGroupHeadFile@Group@Util@@YA?AVCTXStringW@@KH@Z 0x64947034
?GetNameWithCode@CBasicInfo@Group@Util@@SA?AVCTXStringW@@KW4NAME_TYPE@123@@Z 0x64947030
?IsNeedTakeOffWinksFace@DiyFace@Misc@Util@@YAHXZ 0x64947024
?MakeCfgData@ChatFrameExtMatch@@YAXIPBW4CFExtEvent@ChatFrame@@HPAPAUITXData@@@Z 0x6494703c
api-ms-win-crt-heap-l1-1-0.dll 4
_callnewh 0x64947490
_recalloc 0x6494748c
free 0x64947494
malloc 0x64947498
api-ms-win-crt-math-l1-1-0.dll 1
_except1 0x649474a0
api-ms-win-crt-runtime-l1-1-0.dll 13
_cexit 0x649474c0
_configure_narrow_argv 0x649474a8
_crt_atexit 0x649474d4
_errno 0x649474d0
_execute_onexit_table 0x649474d8
_initialize_narrow_environment 0x649474ac
_initialize_onexit_table 0x649474c8
_initterm 0x649474b0
_initterm_e 0x649474bc
_invalid_parameter_noinfo 0x649474cc
_invalid_parameter_noinfo_noreturn 0x649474b4
_register_onexit_function 0x649474c4
_seh_filter_dll 0x649474b8
api-ms-win-crt-stdio-l1-1-0.dll 1
__stdio_common_vsprintf 0x649474e0
api-ms-win-crt-string-l1-1-0.dll 6
strcmp 0x649474f0
wcscat_s 0x649474ec
wcscmp 0x649474f8
wcscpy_s 0x649474e8
wcslen 0x649474f4
wcsncpy_s 0x649474fc
api-ms-win-crt-utility-l1-1-0.dll 1
rand 0x64947504
AppUtil.dll 15
?CodeServerData_BoolValue@API@AdvConfig@@YAHGHPAPAUITXData@@@Z 0x6494704c
?DecodeServerData_BoolValue@API@AdvConfig@@YAHGPAUITXData@@PAH@Z 0x64947050
?GetChatSessionMainWnd@ChatSession@Util@@YAHKHPAPAUIGFFrame@@@Z 0x64947078
?GetChatSessionViewFrame@ChatSession@Util@@YAHKHPAPAUIGFFrame@@@Z 0x64947048
?GetFlashVersion@Misc@Util@@YAHAAK0@Z 0x64947060
?GetRegMainKeyBoolField@API@Registry@@YAHPB_WPBDPAHW4__MIDL___MIDL_itf_IRegistry_0000_0000_0003@@W4__MIDL___MIDL_itf_IRegistry_0000_0000_0004@@@Z 0x64947054
?GetTXChatSession@ChatSession@Util@@YAHKHPAUITXData@@PAPAUIAFChatSession@@@Z 0x64947068
?IsChatSessionOpen@ChatSession@Util@@YAHKH@Z 0x64947070
?IsCurrentChatViewInChatWnd@ChatSession@Util@@YAHKH@Z 0x64947044
?OpenChatSession@ChatSession@Util@@YAXKW4CFChatType@ChatFrame@@PAUITXData@@@Z 0x64947074
?SelRichFaceTabInChatFrame@ChatSession@Util@@YAXKHVCTXStringW@@@Z 0x6494706c
?SendAutoReplyMsgToBuddy@ChatSession@Util@@YAJK@Z 0x64947064
?SetRegMainKeyBoolField@API@Registry@@YAHPB_WPBDHW4__MIDL___MIDL_itf_IRegistry_0000_0000_0003@@W4__MIDL___MIDL_itf_IRegistry_0000_0000_0004@@@Z 0x64947058
?WriteMsgInChatSession@ChatSession@Util@@YAXKHPAUITXMsgPack@@KPAUITXData@@H@Z 0x6494707c
?WriteTipInChatSession@ChatSession@Util@@YAHKHPAUITXData@@@Z 0x6494705c
arkXML.dll 9
arkCreateXMLParser 0x64947510
arkDeleteXMLParser 0x6494750c
arkDeleteXMLTag 0x64947524
arkGetParserXML 0x64947528
arkGetXMLTagName 0x64947520
arkGetXMLTagSubTag 0x64947518
arkGetXMLTagSubTagCount 0x6494751c
arkGetXMLTagValue 0x64947514
arkParserXMLBuffer 0x6494752c
Common.dll 134
0x64947224
0x64947228
0x6494722c
??0CCmdCodecBase@@QAE@XZ 0x649471c0
??0CFmtString@@QAE@XZ 0x64947118
??0CHttpClient@@QAE@XZ 0x649470a0
??0CTXBSTR@@QAE@ABU_GUID@@@Z 0x64947100
??0CTXBSTR@@QAE@ABV0@@Z 0x64947264
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z 0x64947258
??0CTXBSTR@@QAE@PB_W@Z 0x64947268
??0CTXBSTR@@QAE@XZ 0x6494726c
??0CTXHttpDownloadSink@@IAE@XZ 0x64947098
??0CTXStringA@@QAE@PBD@Z 0x64947188
??0CTXStringA@@QAE@PBDH@Z 0x6494718c
??0CTXStringA@@QAE@XZ 0x649470cc
??0CTXStringW@@QAE@_WH@Z 0x6494716c
??0CTXStringW@@QAE@ABV0@@Z 0x6494728c
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z 0x64947284
??0CTXStringW@@QAE@H@Z 0x649470dc
??0CTXStringW@@QAE@PA_W@Z 0x64947288
??0CTXStringW@@QAE@PB_W@Z 0x649470e0
??0CTXStringW@@QAE@UtagEN@@PBDH@Z 0x64947190
??0CTXStringW@@QAE@UtagUTF8@@PBDH@Z 0x6494708c
??0CTXStringW@@QAE@XZ 0x64947290
??1CCmdCodecBase@@UAE@XZ 0x649471c4
??1CFmtString@@QAE@XZ 0x6494711c
??1CHttpClient@@QAE@XZ 0x649470a4
??1CTXBSTR@@QAE@XZ 0x64947250
??1CTXHttpDownloadSink@@UAE@XZ 0x6494709c
??1CTXStringA@@QAE@XZ 0x649470d0
??1CTXStringW@@QAE@XZ 0x64947298
??4CTXBSTR@@QAEAAV0@ABV0@@Z 0x64947260
??4CTXBSTR@@QAEAAV0@ABVCTXStringW@@@Z 0x64947254
??4CTXBSTR@@QAEAAV0@PB_W@Z 0x6494725c
??4CTXStringW@@QAEAAV0@ABV0@@Z 0x64947280
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z 0x649470e8
??4CTXStringW@@QAEAAV0@PA_W@Z 0x64947194
??4CTXStringW@@QAEAAV0@PB_W@Z 0x649470e4
??8@YA_NABVCTXStringW@@0@Z 0x64947094
??8@YA_NABVCTXStringW@@PB_W@Z 0x649471fc
??8CTXBSTR@@QBE_NABV0@@Z 0x6494710c
??8CTXBSTR@@QBE_NPA_W@Z 0x64947110
??8CTXBSTR@@QBE_NPB_W@Z 0x64947238
??9CTXBSTR@@QBE_NPA_W@Z 0x64947108
??BCTXBSTR@@QBEPA_WXZ 0x64947248
??BCTXStringA@@QBEPBDXZ 0x64947134
??BCTXStringW@@QBEPB_WXZ 0x64947270
??H@YA?AVCTXStringW@@ABV0@0@Z 0x649470ec
??H@YA?AVCTXStringW@@ABV0@PB_W@Z 0x6494727c
??H@YA?AVCTXStringW@@PB_WABV0@@Z 0x6494713c
??ICTXBSTR@@QAEPAPA_WXZ 0x64947244
??M@YA_NABVCTXStringA@@0@Z 0x649470d4
??M@YA_NABVCTXStringW@@0@Z 0x6494719c
??YCTXBSTR@@QAEAAV0@ABVCTXStringW@@@Z 0x6494723c
??YCTXBSTR@@QAEAAV0@PB_W@Z 0x64947240
??YCTXStringW@@QAEAAV0@_W@Z 0x64947198
??YCTXStringW@@QAEAAV0@PB_W@Z 0x64947138
?AddInfo@CHttpClient@@QAEHABVCTXStringW@@0@Z 0x6494717c
?AddRef@CCmdCodecBase@@MAGKXZ 0x649471d4
?CodeTXData@CCmdCodecBase@@UAGJPAUITXData@@PAPAUITXBuffer@@@Z 0x649471d8
?CombinePath@FS@Util@@YA?AVCTXStringW@@ABV3@0@Z 0x64947154
?Compare@CTXStringW@@QBEHPB_W@Z 0x649471a0
?CompareNoCase@CTXStringW@@QBEHPB_W@Z 0x64947278
?ConvertToPureFile@FS@@YA?AVCTXStringW@@PB_W@Z 0x6494712c
?CopyTXDataField@Data@Util@@YAHPAUITXDataRead@@PAUITXData@@PBD2@Z 0x649471bc
?CreateFileW@FS@@YAHPB_WKPAPAUITXFile@@@Z 0x64947234
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z 0x649471b8
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z 0x64947294
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z 0x6494721c
?DecodeBuffer@CCmdCodecBase@@IAEXPBDI@Z 0x64947168
?DecodeBuffer@CCmdCodecBase@@UAGJPAUITXBuffer@@PAPAUITXData@@PAU3@@Z 0x649471dc
?DecodeNumber@CCmdCodecBase@@IAEXPBDW4TX_DATA_TYPE@@@Z 0x64947160
?DecodeStringLenHead@CCmdCodecBase@@IAEXPBDW4CMDFIELDTYPE@@@Z 0x64947164
?DecodeUrl@Encode@Util@@YA?AVCTXStringW@@ABV3@_N@Z 0x649471d0
?Delete@CTXStringW@@QAEHHH@Z 0x64947140
?DeleteFileW@FS@@YAHPB_W@Z 0x64947178
?Detach@CTXBSTR@@QAEPA_WXZ 0x649471e8
?DoFormat@CFmtString@@QAEPB_WPB_W@Z 0x64947120
?Download@CHttpClient@@QAEHPB_WPAU_SYSTEMTIME@@0HPA_J@Z 0x649470ac
?Empty@CTXStringW@@QAEXXZ 0x649471a4
?EnableUnicodeString@CCmdCodecBase@@IAEXH@Z 0x6494715c
?Encode16@Encode@Util@@YA?AVCTXStringW@@PBXI@Z 0x64947130
?EncodeUrl@Encode@Util@@YA?AVCTXStringW@@ABV3@_N1@Z 0x64947158
?EraseAsyncCallback@TXTimer@@YAHPAUITXAsyncCallback@@I@Z 0x64947210
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z 0x6494714c
?Find@CTXStringW@@QBEH_WH@Z 0x64947144
?Find@CTXStringW@@QBEHPB_WH@Z 0x649471f0
?Format@CTXStringA@@QAAXPBDZZ 0x649470d8
?Format@CTXStringW@@QAAXPB_WZZ 0x649470f0
?GetAt@CTXStringW@@QBE_WH@Z 0x64947170
?GetBSTR@CTXStringW@@QBEPA_WXZ 0x64947274
?GetBSTRPtr@CTXStringW@@QAEPAPA_WXZ 0x649470fc
?GetDownloadedFilePath@CHttpClient@@QAEHAAVCTXStringW@@@Z 0x64947180
?GetLCID@NLS@@YAKXZ 0x649471c8
?GetLength@CTXStringW@@QBEHXZ 0x649470f8
?GetRegulatedTime@Time@Util@@YA_NAA_J@Z 0x649471cc
?GetStatusCode@CHttpClient@@QAEIXZ 0x64947204
?GetString@CTXStringW@@QBEPB_WXZ 0x649470f4
?IsDirectoryExist@FS@@YAHPB_W@Z 0x64947084
?IsEmpty@CTXBSTR@@QAEHXZ 0x64947104
?IsEmpty@CTXStringW@@QBE_NXZ 0x64947090
?IsFileExist@FS@@YAHPB_W@Z 0x64947088
?IsRunning@CHttpClient@@QBEHXZ 0x64947184
?Left@CTXStringW@@QBE?AV1@H@Z 0x64947148
?Length@CTXBSTR@@QBEIXZ 0x6494724c
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z 0x64947124
?MakeLower@CTXStringW@@QAEAAV1@XZ 0x64947174
?Mid@CTXStringW@@QBE?AV1@HH@Z 0x64947200
?MoveDownloadFile@CHttpClient@@QAEHPB_WH@Z 0x649470b0
?OnConnected@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@@Z 0x649470b4
?OnConnecting@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@PB_W@Z 0x649470b8
?OnDownloadStart@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@KK@Z 0x649470bc
?OnError@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@K@Z 0x649470c0
?OnProgress@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@KK@Z 0x649470c4
?OnRedirected@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@PB_W@Z 0x649470c8
?PropertyDWord@CFmtString@@QAEHPB_WK0@Z 0x64947150
?PropertyStr@CFmtString@@QAEHPB_W0@Z 0x64947114
?QueryInterface@CCmdCodecBase@@MAGJABU_GUID@@PAPAX@Z 0x649471e0
?Release@CCmdCodecBase@@MAGKXZ 0x649471e4
?Replace@CTXStringW@@QAEH_W0@Z 0x64947214
?Replace@CTXStringW@@QAEHPB_W0@Z 0x649471a8
?ReverseFind@CTXStringW@@QBEH_W@Z 0x649471ac
?Right@CTXStringW@@QBE?AV1@H@Z 0x649471b4
?SetAsyncCallback@TXTimer@@YAHPAUITXAsyncCallback@@I@Z 0x6494720c
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z 0x64947208
?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z 0x64947218
?SetUIInterface@CHttpClient@@QAEXPAVCTXHttpDownloadSink@@@Z 0x649470a8
?SetUseUtf8Head@CHttpClient@@QAEXH@Z 0x649471ec
?Trim@CTXStringW@@QAEAAV1@XZ 0x649471b0
?TXLoadString@@YAPB_WPB_W0@Z 0x64947128
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z 0x64947220
?Utf8ToWS@Convert@Util@@YA?AVCTXStringW@@PBDH@Z 0x64947230
DetourFunctionWrapper 0x649471f4
DetourRemoveWrapper 0x649471f8
GF.dll 12
??0CDPIScaleIgnoreHelper@@QAE@XZ 0x649472cc
??0CDPIScaleIgnoreResetHelper@@QAE@XZ 0x649472bc
??1CDPIScaleIgnoreHelper@@QAE@XZ 0x649472a4
??1CDPIScaleIgnoreResetHelper@@QAE@XZ 0x649472c0
?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z 0x649472c4
?HandleMessageScale@DPI@GF@Util@@YAXPAUtagBaseArg@@@Z 0x649472b8
?IsScaleIgnore@DPI@GF@Util@@YA_NXZ 0x649472b4
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@PAUITXCore@@H@Z 0x649472a0
?ScaleSIZE@DPI@GF@Util@@YAXPAUtagSIZE@@@Z 0x649472a8
?ScreenPoint2ClientPoint@GF@Util@@YAXPAUIGFFrame@@AAUtagPOINT@@@Z 0x649472c8
?UnscaleLONG@DPI@GF@Util@@YAXPAJ@Z 0x649472b0
?UnscaleSIZE@DPI@GF@Util@@YAXPAUtagSIZE@@@Z 0x649472ac
KERNEL32.dll 43
CompareStringW 0x649472d4
DecodePointer 0x64947374
DeleteCriticalSection 0x64947360
EncodePointer 0x64947378
EnterCriticalSection 0x64947354
FindResourceW 0x64947320
FreeLibrary 0x6494737c
GetCurrentProcess 0x649472f0
GetCurrentProcessId 0x649472f4
GetCurrentThreadId 0x6494734c
GetLastError 0x64947350
GetModuleFileNameW 0x6494736c
GetModuleHandleA 0x64947308
GetModuleHandleW 0x64947324
GetProcAddress 0x64947338
GetSystemInfo 0x64947304
GetSystemTimeAsFileTime 0x64947364
GetThreadLocale 0x64947318
GetTickCount 0x64947368
GetVersionExW 0x649472ec
InitializeCriticalSectionAndSpinCount 0x6494735c
InitializeSListHead 0x649472f8
InterlockedDecrement 0x64947340
InterlockedExchange 0x64947344
InterlockedIncrement 0x6494733c
IsDebuggerPresent 0x649472d8
IsProcessorFeaturePresent 0x649472e8
LeaveCriticalSection 0x64947358
LoadLibraryExW 0x64947328
LoadResource 0x64947334
LocalFree 0x64947310
lstrcmpiW 0x6494732c
MultiByteToWideChar 0x6494731c
OutputDebugStringW 0x649472dc
QueryPerformanceCounter 0x64947370
RaiseException 0x64947348
ReadFile 0x64947300
SetLastError 0x649472fc
SetThreadLocale 0x64947314
SetUnhandledExceptionFilter 0x649472e0
SizeofResource 0x64947330
TerminateProcess 0x649472e4
UnhandledExceptionFilter 0x6494730c
KernelUtil.dll 30
?AddContactToSessionList@Misc@Util@@YAXK@Z 0x649473a0
?AddReport@URL@Util@@YA?AVCTXStringW@@ABV3@0@Z 0x649473cc
?CreateMsgPack@Msg@Util@@YAHPAPAUITXMsgPack@@@Z 0x649473c0
?Get32ByteValueAddedSign@Misc@Util@@YA?AVCTXStringW@@XZ 0x649473d8
?GetCombineName@Contact@Util@@YA?AVCTXStringW@@K@Z 0x649473f8
?GetDiscussHeadFile@Group@Util@@YA?AVCTXStringW@@XZ 0x64947390
?GetDiscussName@Group@Util@@YA?AVCTXStringW@@K@Z 0x6494738c
?GetGroupCodeByUin@Group@Util@@YAKK@Z 0x64947384
?GetGroupMemCombineName@Group@Util@@YA?AVCTXStringW@@KK@Z 0x649473c8
?GetIMVersion@Contact@Util@@YAGK@Z 0x649473e8
?GetMajorVer@Version@@YAEXZ 0x649473d4
?GetMinorVer@Version@@YAEXZ 0x649473d0
?GetPublicHeadFile@Contact@Util@@YA?AVCTXStringW@@K@Z 0x6494739c
?GetPublicName@Contact@Util@@YA?AVCTXStringW@@K@Z 0x649473a4
?GetRawName@Contact@Util@@YA?AVCTXStringW@@K@Z 0x649473dc
?GetRTypeByUin@Contact@Util@@YAKK@Z 0x649473f4
?GetSelfUin@Contact@Util@@YAKXZ 0x64947398
?GetSignFmt@URL@Util@@YAXAAVCFmtString@@@Z 0x649473ac
?GetStatus@Contact@Util@@YAGKPAUITXIMContactStatusMgr@@@Z 0x649473f0
?IsDiscussExist@Group@Util@@YAHK@Z 0x64947394
?IsFlagValid@Contact@Util@@YAHKKPAUITXIMContactInfoMgr@@@Z 0x649473b0
?IsGroupExist@Group@Util@@YAHK@Z 0x64947388
?IsGroupMemSheild@Group@Util@@YAHKK@Z 0x649473c4
?IsInBlackList@Contact@Util@@YAHK@Z 0x649473e0
?IsOnline@Contact@Util@@YAHK@Z 0x649473e4
?IsPrevented@Contact@Util@@YAHK@Z 0x649473ec
?OpenUrlInIM@URL@Util@@YAXABVCTXStringW@@W4URLMODIFYLEVEL@12@0@Z 0x649473a8
?SaveMsg194@Msg@Util@@YAHPB_W000KKPAUITXMsgPack@@PAUITXData@@PAUITXCallback@@@Z 0x649473b4
?SaveMsg194@Msg@Util@@YAHPB_WKKKPAUITXMsgPack@@PAUITXData@@PAUITXCallback@@@Z 0x649473b8
?SetMsgTime@Msg@Util@@YAXPAUITXMsgPack@@_J@Z 0x649473bc
MSVCP140.dll 1
?_Xlength_error@std@@YAXPBD@Z 0x64947400
ole32.dll 6
CoCreateGuid 0x64947544
CoCreateInstance 0x64947538
CoTaskMemAlloc 0x64947534
CoTaskMemFree 0x64947540
CoTaskMemRealloc 0x6494753c
StringFromGUID2 0x64947548
OLEAUT32.dll 8
LoadRegTypeLib 0x64947424
LoadTypeLib 0x64947418
RegisterTypeLib 0x6494741c
SysAllocString 0x64947420
SysFreeString 0x6494740c
SysStringLen 0x64947414
UnRegisterTypeLib 0x64947410
VarUI4FromStr 0x64947408
SHELL32.dll 1
CommandLineToArgvW 0x6494742c
USER32.dll 8
CharNextW 0x64947450
GetActiveWindow 0x64947440
GetCursorPos 0x64947444
GetSystemMetrics 0x6494744c
IsIconic 0x6494743c
IsZoomed 0x64947438
MoveWindow 0x64947434
PtInRect 0x64947448
VCRUNTIME140.dll 12
__CxxFrameHandler3 0x64947470
__std_exception_copy 0x6494745c
__std_exception_destroy 0x64947460
__std_type_info_destroy_list 0x64947468
_CxxThrowException 0x6494746c
_except_handler4_common 0x64947464
_purecall 0x64947484
memcmp 0x64947480
memcpy 0x6494747c
memmove 0x64947478
memset 0x64947474
wcsstr 0x64947458