ThunderUnion.dll

Description: ThunderUnion 动态链接库

Version: 1.0.0.16

Architecture: 32-bit

Operating System: Windows

SHA256: 98390fc06452032f7a50dbda6007b921

File Size: 185.0 KB

Uploaded At: Dec. 2, 2025, 2:41 p.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

Start (Ordinal: 1, Address: 0x81e0)

Imported DLLs & Functions

ADVAPI32.dll

ConvertSidToStringSidW (Address: 0x1001e014)
CreateProcessAsUserW (Address: 0x1001e004)
DuplicateTokenEx (Address: 0x1001e008)
GetTraceEnableLevel (Address: 0x1001e040)
GetTraceLoggerHandle (Address: 0x1001e03c)
GetUserNameW (Address: 0x1001e02c)
ImpersonateLoggedOnUser (Address: 0x1001e030)
InitializeSid (Address: 0x1001e018)
LookupAccountNameW (Address: 0x1001e024)
OpenProcessToken (Address: 0x1001e00c)
RegCloseKey (Address: 0x1001e044)
RegisterTraceGuidsW (Address: 0x1001e038)
RegOpenKeyExW (Address: 0x1001e010)
RegOpenKeyW (Address: 0x1001e020)
RegQueryValueExW (Address: 0x1001e01c)
RevertToSelf (Address: 0x1001e028)
TraceEvent (Address: 0x1001e000)
UnregisterTraceGuids (Address: 0x1001e034)

IPHLPAPI.DLL

GetAdaptersInfo (Address: 0x1001e050)
GetExtendedTcpTable (Address: 0x1001e04c)

KERNEL32.dll

CloseHandle (Address: 0x1001e0e8)
CreateDirectoryA (Address: 0x1001e140)
CreateEventW (Address: 0x1001e110)
CreateFileA (Address: 0x1001e0bc)
CreateToolhelp32Snapshot (Address: 0x1001e120)
DeleteCriticalSection (Address: 0x1001e0fc)
DeviceIoControl (Address: 0x1001e0c0)
EnterCriticalSection (Address: 0x1001e0cc)
GetCurrentProcess (Address: 0x1001e098)
GetCurrentProcessId (Address: 0x1001e074)
GetCurrentThreadId (Address: 0x1001e06c)
GetFileAttributesA (Address: 0x1001e0c8)
GetFileAttributesW (Address: 0x1001e134)
GetLastError (Address: 0x1001e0f0)
GetModuleFileNameA (Address: 0x1001e148)
GetModuleFileNameW (Address: 0x1001e0dc)
GetModuleHandleW (Address: 0x1001e108)
GetPrivateProfileStringA (Address: 0x1001e080)
GetProcAddress (Address: 0x1001e10c)
GetProcessHeap (Address: 0x1001e058)
GetSystemDirectoryA (Address: 0x1001e0b0)
GetSystemTime (Address: 0x1001e0e4)
GetSystemTimeAsFileTime (Address: 0x1001e078)
GetTickCount (Address: 0x1001e130)
GetVersionExA (Address: 0x1001e0b4)
GetVolumeInformationA (Address: 0x1001e084)
HeapAlloc (Address: 0x1001e0a8)
HeapDestroy (Address: 0x1001e0ac)
HeapFree (Address: 0x1001e0a4)
HeapReAlloc (Address: 0x1001e0a0)
HeapSize (Address: 0x1001e09c)
InitializeCriticalSection (Address: 0x1001e0f8)
InterlockedCompareExchange (Address: 0x1001e08c)
InterlockedDecrement (Address: 0x1001e0d8)
InterlockedExchange (Address: 0x1001e094)
InterlockedIncrement (Address: 0x1001e0d4)
IsBadCodePtr (Address: 0x1001e13c)
IsDebuggerPresent (Address: 0x1001e064)
LeaveCriticalSection (Address: 0x1001e0d0)
lstrcatA (Address: 0x1001e144)
lstrcpyA (Address: 0x1001e0c4)
MultiByteToWideChar (Address: 0x1001e0ec)
OpenProcess (Address: 0x1001e12c)
Process32FirstW (Address: 0x1001e124)
Process32NextW (Address: 0x1001e128)
QueryPerformanceCounter (Address: 0x1001e068)
RaiseException (Address: 0x1001e070)
SetEvent (Address: 0x1001e100)
SetLastError (Address: 0x1001e118)
SetPriorityClass (Address: 0x1001e0b8)
SetUnhandledExceptionFilter (Address: 0x1001e060)
Sleep (Address: 0x1001e090)
SystemTimeToTzSpecificLocalTime (Address: 0x1001e0e0)
TerminateProcess (Address: 0x1001e088)
UnhandledExceptionFilter (Address: 0x1001e05c)
VirtualQuery (Address: 0x1001e138)
WaitForMultipleObjects (Address: 0x1001e114)
WaitForSingleObject (Address: 0x1001e104)
WideCharToMultiByte (Address: 0x1001e0f4)
WritePrivateProfileStringA (Address: 0x1001e07c)
WTSGetActiveConsoleSessionId (Address: 0x1001e11c)

libcurl.dll

curl_easy_cleanup (Address: 0x1001e478)
curl_easy_init (Address: 0x1001e470)
curl_easy_perform (Address: 0x1001e484)
curl_easy_setopt (Address: 0x1001e46c)
curl_formadd (Address: 0x1001e488)
curl_formfree (Address: 0x1001e480)
curl_slist_append (Address: 0x1001e474)
curl_slist_free_all (Address: 0x1001e47c)

libexpat.dll

(Address: 0x1001e490)
(Address: 0x1001e494)
(Address: 0x1001e498)
(Address: 0x1001e49c)
(Address: 0x1001e4a0)
(Address: 0x1001e4a4)
(Address: 0x1001e4a8)
(Address: 0x1001e4ac)

MSVCP90.dll

?_Lock@_Mutex@std@@QAEXXZ (Address: 0x1001e1a4)
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ (Address: 0x1001e1b0)
?_Unlock@_Mutex@std@@QAEXXZ (Address: 0x1001e1a8)
??_D?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ (Address: 0x1001e288)
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ (Address: 0x1001e270)
??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ (Address: 0x1001e184)
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ (Address: 0x1001e26c)
??$?5DU?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAD@Z (Address: 0x1001e160)
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z (Address: 0x1001e220)
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z (Address: 0x1001e18c)
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z (Address: 0x1001e150)
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z (Address: 0x1001e230)
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z (Address: 0x1001e188)
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z (Address: 0x1001e174)
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z (Address: 0x1001e21c)
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z (Address: 0x1001e1d8)
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z (Address: 0x1001e234)
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@XZ (Address: 0x1001e280)
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ (Address: 0x1001e250)
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z (Address: 0x1001e194)
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z (Address: 0x1001e240)
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z (Address: 0x1001e1f8)
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z (Address: 0x1001e1c8)
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ (Address: 0x1001e1bc)
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z (Address: 0x1001e1d4)
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z (Address: 0x1001e154)
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z (Address: 0x1001e1d0)
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z (Address: 0x1001e268)
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ (Address: 0x1001e1b4)
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ (Address: 0x1001e1c0)
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ (Address: 0x1001e1b8)
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z (Address: 0x1001e1f4)
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z (Address: 0x1001e1f0)
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z (Address: 0x1001e264)
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z (Address: 0x1001e1c4)
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_J@Z (Address: 0x1001e2b4)
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z (Address: 0x1001e158)
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z (Address: 0x1001e2ac)
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z (Address: 0x1001e2b0)
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z (Address: 0x1001e254)
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z (Address: 0x1001e1dc)
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z (Address: 0x1001e178)
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z (Address: 0x1001e200)
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z (Address: 0x1001e20c)
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z (Address: 0x1001e22c)
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z (Address: 0x1001e260)
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z (Address: 0x1001e208)
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z (Address: 0x1001e1e0)
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z (Address: 0x1001e228)
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z (Address: 0x1001e224)
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z (Address: 0x1001e1fc)
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z (Address: 0x1001e214)
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z (Address: 0x1001e274)
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z (Address: 0x1001e298)
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z (Address: 0x1001e17c)
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z (Address: 0x1001e290)
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ (Address: 0x1001e16c)
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ (Address: 0x1001e1ec)
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ (Address: 0x1001e180)
?close@?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ (Address: 0x1001e278)
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ (Address: 0x1001e244)
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ (Address: 0x1001e170)
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z (Address: 0x1001e294)
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z (Address: 0x1001e168)
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z (Address: 0x1001e28c)
?find_first_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z (Address: 0x1001e258)
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z (Address: 0x1001e25c)
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z (Address: 0x1001e164)
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ (Address: 0x1001e1ac)
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB (Address: 0x1001e1cc)
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB (Address: 0x1001e218)
?open@?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXPB_WHH@Z (Address: 0x1001e27c)
?open@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXPB_WHH@Z (Address: 0x1001e24c)
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z (Address: 0x1001e2b8)
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z (Address: 0x1001e210)
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z (Address: 0x1001e29c)
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z (Address: 0x1001e2a0)
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z (Address: 0x1001e1e8)
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z (Address: 0x1001e19c)
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z (Address: 0x1001e2a4)
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z (Address: 0x1001e2a8)
?str@?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z (Address: 0x1001e190)
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z (Address: 0x1001e238)
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ (Address: 0x1001e23c)
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z (Address: 0x1001e1e4)
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z (Address: 0x1001e198)
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z (Address: 0x1001e204)
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z (Address: 0x1001e1a0)
?uncaught_exception@std@@YA_NXZ (Address: 0x1001e248)
?unget@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ (Address: 0x1001e15c)
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBDH@Z (Address: 0x1001e284)

MSVCR90.dll

__clean_type_info_names_internal (Address: 0x1001e3a4)
__CppXcptFilter (Address: 0x1001e394)
__CxxFrameHandler3 (Address: 0x1001e354)
__dllonexit (Address: 0x1001e368)
_adjust_fdiv (Address: 0x1001e390)
_amsg_exit (Address: 0x1001e38c)
_beginthreadex (Address: 0x1001e320)
_crt_debugger_hook (Address: 0x1001e39c)
_CxxThrowException (Address: 0x1001e3c0)
_decode_pointer (Address: 0x1001e378)
_encode_pointer (Address: 0x1001e36c)
_encoded_null (Address: 0x1001e380)
_endthreadex (Address: 0x1001e324)
_except_handler4_common (Address: 0x1001e398)
_gmtime64_s (Address: 0x1001e338)
_initterm (Address: 0x1001e384)
_initterm_e (Address: 0x1001e388)
_invalid_parameter_noinfo (Address: 0x1001e300)
_itoa (Address: 0x1001e3ac)
_lock (Address: 0x1001e370)
_ltow_s (Address: 0x1001e32c)
_malloc_crt (Address: 0x1001e37c)
_onexit (Address: 0x1001e374)
_purecall (Address: 0x1001e314)
_strnicmp (Address: 0x1001e318)
_time64 (Address: 0x1001e33c)
_unlock (Address: 0x1001e364)
_vscwprintf (Address: 0x1001e2f4)
_vswprintf_c_l (Address: 0x1001e2f8)
_wcsupr_s (Address: 0x1001e340)
_wfopen (Address: 0x1001e304)
?_type_info_dtor_internal_method@type_info@@QAEXXZ (Address: 0x1001e3a0)
??_V@YAXPAX@Z (Address: 0x1001e2d4)
??0exception@std@@QAE@ABQBD@Z (Address: 0x1001e2e8)
??0exception@std@@QAE@ABV01@@Z (Address: 0x1001e2e0)
??0exception@std@@QAE@XZ (Address: 0x1001e3d4)
??1exception@std@@UAE@XZ (Address: 0x1001e2c0)
??2@YAPAXI@Z (Address: 0x1001e2d8)
??3@YAXPAX@Z (Address: 0x1001e3a8)
?terminate@@YAXXZ (Address: 0x1001e360)
?what@exception@std@@UBEPBDXZ (Address: 0x1001e2e4)
atoi (Address: 0x1001e31c)
fclose (Address: 0x1001e310)
feof (Address: 0x1001e308)
fread (Address: 0x1001e30c)
free (Address: 0x1001e2c8)
fwrite (Address: 0x1001e348)
isalnum (Address: 0x1001e3d0)
isprint (Address: 0x1001e3c4)
isspace (Address: 0x1001e3c8)
malloc (Address: 0x1001e2c4)
memcmp (Address: 0x1001e3bc)
memcpy (Address: 0x1001e358)
memmove_s (Address: 0x1001e2cc)
memset (Address: 0x1001e350)
printf (Address: 0x1001e328)
rand (Address: 0x1001e3b4)
realloc (Address: 0x1001e334)
sprintf (Address: 0x1001e3b0)
sprintf_s (Address: 0x1001e344)
srand (Address: 0x1001e3b8)
strlen (Address: 0x1001e35c)
strncpy (Address: 0x1001e3cc)
strstr (Address: 0x1001e330)
swprintf_s (Address: 0x1001e2dc)
tolower (Address: 0x1001e2fc)
vsprintf_s (Address: 0x1001e34c)
vswprintf_s (Address: 0x1001e2f0)
wcscpy_s (Address: 0x1001e2d0)
wprintf (Address: 0x1001e2ec)

SHELL32.dll

SHCreateDirectoryExW (Address: 0x1001e3e0)
SHGetSpecialFolderPathA (Address: 0x1001e3dc)

SHLWAPI.dll

PathAppendW (Address: 0x1001e3f8)
PathCombineW (Address: 0x1001e3f4)
PathFileExistsW (Address: 0x1001e3ec)
PathRemoveFileSpecW (Address: 0x1001e3e8)
SHGetValueW (Address: 0x1001e3f0)

USER32.dll

DispatchMessageW (Address: 0x1001e400)
GetMessageW (Address: 0x1001e408)
TranslateMessage (Address: 0x1001e404)

USERENV.dll

CreateEnvironmentBlock (Address: 0x1001e414)
DestroyEnvironmentBlock (Address: 0x1001e410)

VERSION.dll

GetFileVersionInfoSizeW (Address: 0x1001e424)
GetFileVersionInfoW (Address: 0x1001e41c)
VerQueryValueW (Address: 0x1001e420)

WS2_32.dll

accept (Address: 0x1001e448)
bind (Address: 0x1001e450)
closesocket (Address: 0x1001e43c)
htons (Address: 0x1001e458)
inet_addr (Address: 0x1001e438)
listen (Address: 0x1001e44c)
ntohs (Address: 0x1001e42c)
recv (Address: 0x1001e444)
send (Address: 0x1001e440)
socket (Address: 0x1001e454)
WSACleanup (Address: 0x1001e45c)
WSAGetLastError (Address: 0x1001e430)
WSAStartup (Address: 0x1001e434)

WTSAPI32.dll

WTSQueryUserToken (Address: 0x1001e464)