XLWFPDownload.dll

Description: XLWFPDownload 动态链接库

Authors: 版权所有 (C) 2018 深圳市迅雷网络技术有限公司

Version: 1.0.1.18

Architecture: 32-bit

Operating System: Windows

SHA256: cd501bd8a7e8c24f34d80519524fd42a

File Size: 208.0 KB

Uploaded At: Dec. 2, 2025, 2:41 p.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • Start (Ordinal: 1, Address: 0xd500)

Imported DLLs & Functions

ADVAPI32.dll
  • ConvertSidToStringSidW (Address: 0x10022048)
  • CreateProcessAsUserW (Address: 0x10022018)
  • DuplicateTokenEx (Address: 0x1002201c)
  • GetTraceEnableLevel (Address: 0x1002202c)
  • GetTraceLoggerHandle (Address: 0x10022024)
  • GetUserNameW (Address: 0x10022034)
  • ImpersonateLoggedOnUser (Address: 0x1002203c)
  • InitializeSecurityDescriptor (Address: 0x1002204c)
  • InitializeSid (Address: 0x10022044)
  • LookupAccountNameW (Address: 0x10022038)
  • OpenProcessToken (Address: 0x10022014)
  • RegCloseKey (Address: 0x10022004)
  • RegisterTraceGuidsW (Address: 0x10022030)
  • RegOpenKeyExW (Address: 0x10022020)
  • RegOpenKeyW (Address: 0x1002200c)
  • RegQueryValueExW (Address: 0x10022010)
  • RevertToSelf (Address: 0x10022040)
  • SetSecurityDescriptorDacl (Address: 0x10022000)
  • TraceEvent (Address: 0x10022008)
  • UnregisterTraceGuids (Address: 0x10022028)
fwpuclnt.dll
  • FwpmGetAppIdFromFileName0 (Address: 0x10022490)
IPHLPAPI.DLL
  • GetAdaptersInfo (Address: 0x10022054)
KERNEL32.dll
  • CloseHandle (Address: 0x100220a8)
  • ConnectNamedPipe (Address: 0x10022108)
  • CreateDirectoryA (Address: 0x1002206c)
  • CreateEventW (Address: 0x100220a4)
  • CreateFileA (Address: 0x10022134)
  • CreateFileW (Address: 0x10022114)
  • CreateNamedPipeW (Address: 0x1002210c)
  • CreateToolhelp32Snapshot (Address: 0x100220c4)
  • DeleteCriticalSection (Address: 0x100220d0)
  • DeviceIoControl (Address: 0x10022078)
  • EnterCriticalSection (Address: 0x10022090)
  • FindClose (Address: 0x100220e4)
  • FindFirstFileW (Address: 0x100220d4)
  • FindNextFileW (Address: 0x10022190)
  • FlushInstructionCache (Address: 0x100220f8)
  • GetCurrentProcess (Address: 0x100220f0)
  • GetCurrentProcessId (Address: 0x10022150)
  • GetCurrentThreadId (Address: 0x10022100)
  • GetFileAttributesA (Address: 0x10022070)
  • GetLastError (Address: 0x1002209c)
  • GetModuleFileNameA (Address: 0x10022064)
  • GetModuleFileNameW (Address: 0x1002208c)
  • GetModuleHandleW (Address: 0x10022120)
  • GetPrivateProfileStringA (Address: 0x100220a0)
  • GetPrivateProfileStringW (Address: 0x100220ac)
  • GetProcAddress (Address: 0x10022124)
  • GetProcessHeap (Address: 0x10022160)
  • GetSystemDirectoryA (Address: 0x10022060)
  • GetSystemDirectoryW (Address: 0x100220d8)
  • GetSystemTime (Address: 0x10022094)
  • GetSystemTimeAsFileTime (Address: 0x10022154)
  • GetTickCount (Address: 0x1002214c)
  • GetVersionExA (Address: 0x1002213c)
  • GetVolumeInformationA (Address: 0x1002205c)
  • HeapAlloc (Address: 0x10022164)
  • HeapDestroy (Address: 0x1002217c)
  • HeapFree (Address: 0x1002215c)
  • HeapReAlloc (Address: 0x10022180)
  • HeapSize (Address: 0x10022184)
  • InitializeCriticalSection (Address: 0x100220c8)
  • InterlockedCompareExchange (Address: 0x10022158)
  • InterlockedDecrement (Address: 0x10022084)
  • InterlockedExchange (Address: 0x10022188)
  • InterlockedIncrement (Address: 0x10022080)
  • IsBadCodePtr (Address: 0x10022130)
  • IsDebuggerPresent (Address: 0x10022144)
  • IsProcessorFeaturePresent (Address: 0x1002216c)
  • LeaveCriticalSection (Address: 0x10022088)
  • LoadLibraryA (Address: 0x10022168)
  • lstrcatA (Address: 0x10022068)
  • lstrcpyA (Address: 0x10022074)
  • MultiByteToWideChar (Address: 0x100220b8)
  • OpenProcess (Address: 0x100220b0)
  • Process32FirstW (Address: 0x100220bc)
  • Process32NextW (Address: 0x100220c0)
  • QueryPerformanceCounter (Address: 0x10022148)
  • RaiseException (Address: 0x100220fc)
  • ReadFile (Address: 0x1002211c)
  • ResetEvent (Address: 0x100220ec)
  • SetEvent (Address: 0x10022104)
  • SetLastError (Address: 0x100220cc)
  • SetPriorityClass (Address: 0x10022138)
  • SetUnhandledExceptionFilter (Address: 0x10022140)
  • Sleep (Address: 0x100220f4)
  • SystemTimeToTzSpecificLocalTime (Address: 0x1002207c)
  • TerminateProcess (Address: 0x1002218c)
  • UnhandledExceptionFilter (Address: 0x10022194)
  • VirtualAlloc (Address: 0x10022178)
  • VirtualFree (Address: 0x10022174)
  • VirtualQuery (Address: 0x1002212c)
  • WaitForMultipleObjects (Address: 0x10022128)
  • WaitForSingleObject (Address: 0x10022098)
  • WaitNamedPipeW (Address: 0x10022110)
  • WideCharToMultiByte (Address: 0x100220b4)
  • Wow64DisableWow64FsRedirection (Address: 0x100220dc)
  • Wow64RevertWow64FsRedirection (Address: 0x100220e0)
  • WriteFile (Address: 0x10022118)
  • WritePrivateProfileStringA (Address: 0x10022170)
  • WTSGetActiveConsoleSessionId (Address: 0x100220e8)
libcurl.dll
  • curl_easy_cleanup (Address: 0x100224a4)
  • curl_easy_init (Address: 0x100224b4)
  • curl_easy_perform (Address: 0x100224a0)
  • curl_easy_setopt (Address: 0x1002249c)
  • curl_formadd (Address: 0x100224a8)
  • curl_formfree (Address: 0x100224ac)
  • curl_slist_append (Address: 0x10022498)
  • curl_slist_free_all (Address: 0x100224b0)
libexpat.dll
  • (Address: 0x100224bc)
  • (Address: 0x100224c0)
  • (Address: 0x100224c4)
  • (Address: 0x100224c8)
  • (Address: 0x100224cc)
  • (Address: 0x100224d0)
  • (Address: 0x100224d4)
  • (Address: 0x100224d8)
MSVCP90.dll
  • ?_Lock@_Mutex@std@@QAEXXZ (Address: 0x100221dc)
  • ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ (Address: 0x100221e8)
  • ?_Unlock@_Mutex@std@@QAEXXZ (Address: 0x100221e0)
  • ??_D?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ (Address: 0x100222b4)
  • ??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ (Address: 0x100221b8)
  • ??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ (Address: 0x100221ac)
  • ??$?5DU?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAD@Z (Address: 0x100222d8)
  • ??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z (Address: 0x100221c0)
  • ??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z (Address: 0x100221d8)
  • ??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_WABV10@@Z (Address: 0x10022284)
  • ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z (Address: 0x100221bc)
  • ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z (Address: 0x100222ec)
  • ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z (Address: 0x1002219c)
  • ??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z (Address: 0x10022210)
  • ??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z (Address: 0x100221d4)
  • ??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@XZ (Address: 0x100222a0)
  • ??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z (Address: 0x100221c8)
  • ??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z (Address: 0x100221b4)
  • ??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z (Address: 0x1002223c)
  • ??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z (Address: 0x10022240)
  • ??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WI@Z (Address: 0x10022280)
  • ??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ (Address: 0x10022244)
  • ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z (Address: 0x10022250)
  • ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z (Address: 0x10022208)
  • ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z (Address: 0x10022254)
  • ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z (Address: 0x10022294)
  • ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ (Address: 0x10022258)
  • ??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ (Address: 0x10022238)
  • ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ (Address: 0x1002224c)
  • ??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z (Address: 0x10022234)
  • ??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z (Address: 0x10022230)
  • ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z (Address: 0x1002226c)
  • ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z (Address: 0x10022248)
  • ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_J@Z (Address: 0x10022200)
  • ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z (Address: 0x1002227c)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z (Address: 0x100221f8)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z (Address: 0x100221fc)
  • ??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z (Address: 0x10022218)
  • ??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z (Address: 0x100221a0)
  • ??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z (Address: 0x10022264)
  • ??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z (Address: 0x10022260)
  • ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z (Address: 0x100222e8)
  • ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z (Address: 0x10022268)
  • ?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z (Address: 0x100222b8)
  • ?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z (Address: 0x10022220)
  • ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z (Address: 0x100222b0)
  • ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z (Address: 0x100222c0)
  • ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z (Address: 0x100222a8)
  • ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z (Address: 0x100222ac)
  • ?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z (Address: 0x100222d0)
  • ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z (Address: 0x100222f0)
  • ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z (Address: 0x100222c8)
  • ?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ (Address: 0x10022274)
  • ?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ (Address: 0x100222e0)
  • ?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ (Address: 0x1002222c)
  • ?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ (Address: 0x1002221c)
  • ?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ (Address: 0x100221a8)
  • ?close@?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ (Address: 0x10022298)
  • ?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ (Address: 0x10022270)
  • ?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ (Address: 0x100222e4)
  • ?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z (Address: 0x100222cc)
  • ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z (Address: 0x100222dc)
  • ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z (Address: 0x100222c4)
  • ?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z (Address: 0x10022278)
  • ?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z (Address: 0x100222f4)
  • ?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z (Address: 0x1002225c)
  • ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z (Address: 0x10022290)
  • ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ (Address: 0x100221e4)
  • ?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB (Address: 0x1002220c)
  • ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB (Address: 0x10022288)
  • ?open@?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXPB_WHH@Z (Address: 0x1002229c)
  • ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z (Address: 0x10022204)
  • ?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z (Address: 0x100222bc)
  • ?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z (Address: 0x100221a4)
  • ?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z (Address: 0x10022228)
  • ?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z (Address: 0x100221cc)
  • ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z (Address: 0x100221f0)
  • ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z (Address: 0x100221f4)
  • ?str@?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z (Address: 0x100221c4)
  • ?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ (Address: 0x100221b0)
  • ?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z (Address: 0x10022224)
  • ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z (Address: 0x1002228c)
  • ?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z (Address: 0x10022214)
  • ?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z (Address: 0x100221d0)
  • ?uncaught_exception@std@@YA_NXZ (Address: 0x100221ec)
  • ?unget@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ (Address: 0x100222d4)
  • ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBDH@Z (Address: 0x100222a4)
MSVCR90.dll
  • __clean_type_info_names_internal (Address: 0x100223a8)
  • __CppXcptFilter (Address: 0x10022398)
  • __CxxFrameHandler3 (Address: 0x10022360)
  • __dllonexit (Address: 0x1002236c)
  • _adjust_fdiv (Address: 0x10022394)
  • _amsg_exit (Address: 0x10022390)
  • _beginthreadex (Address: 0x10022338)
  • _crt_debugger_hook (Address: 0x100223a0)
  • _CxxThrowException (Address: 0x100223ec)
  • _decode_pointer (Address: 0x1002237c)
  • _encode_pointer (Address: 0x10022370)
  • _encoded_null (Address: 0x10022384)
  • _endthreadex (Address: 0x10022334)
  • _except_handler4_common (Address: 0x1002239c)
  • _initterm (Address: 0x10022388)
  • _initterm_e (Address: 0x1002238c)
  • _invalid_parameter_noinfo (Address: 0x10022318)
  • _itoa (Address: 0x100223cc)
  • _lock (Address: 0x10022374)
  • _ltow_s (Address: 0x10022350)
  • _malloc_crt (Address: 0x10022380)
  • _onexit (Address: 0x10022378)
  • _purecall (Address: 0x10022324)
  • _recalloc (Address: 0x10022348)
  • _time64 (Address: 0x100223d4)
  • _unlock (Address: 0x10022368)
  • _vscwprintf (Address: 0x100223b8)
  • _vswprintf_c_l (Address: 0x10022314)
  • _wcsicmp (Address: 0x10022344)
  • _wcsupr_s (Address: 0x1002233c)
  • _wfopen (Address: 0x10022308)
  • ?_type_info_dtor_internal_method@type_info@@QAEXXZ (Address: 0x100223a4)
  • ??_V@YAXPAX@Z (Address: 0x1002231c)
  • ??0exception@std@@QAE@ABQBD@Z (Address: 0x10022400)
  • ??0exception@std@@QAE@ABV01@@Z (Address: 0x100222fc)
  • ??0exception@std@@QAE@XZ (Address: 0x100223ac)
  • ??1exception@std@@UAE@XZ (Address: 0x100223b0)
  • ??2@YAPAXI@Z (Address: 0x10022330)
  • ??3@YAXPAX@Z (Address: 0x100223c8)
  • ?terminate@@YAXXZ (Address: 0x10022364)
  • ?what@exception@std@@UBEPBDXZ (Address: 0x100223b4)
  • fclose (Address: 0x1002232c)
  • feof (Address: 0x100223bc)
  • fread (Address: 0x10022320)
  • free (Address: 0x10022300)
  • isalnum (Address: 0x100223fc)
  • isprint (Address: 0x100223f0)
  • isspace (Address: 0x100223f4)
  • malloc (Address: 0x10022304)
  • memcmp (Address: 0x100223e8)
  • memcpy (Address: 0x100223d0)
  • memcpy_s (Address: 0x1002234c)
  • memmove_s (Address: 0x100223c0)
  • memset (Address: 0x1002235c)
  • printf (Address: 0x10022358)
  • rand (Address: 0x100223dc)
  • sprintf (Address: 0x100223d8)
  • srand (Address: 0x100223e0)
  • strlen (Address: 0x100223e4)
  • strncpy (Address: 0x100223f8)
  • strstr (Address: 0x10022354)
  • swprintf_s (Address: 0x100223c4)
  • tolower (Address: 0x10022340)
  • vswprintf_s (Address: 0x1002230c)
  • wcscpy_s (Address: 0x10022328)
  • wprintf (Address: 0x10022310)
SHELL32.dll
  • SHGetSpecialFolderPathA (Address: 0x10022408)
SHLWAPI.dll
  • PathAppendW (Address: 0x10022414)
  • PathCombineW (Address: 0x10022420)
  • PathFileExistsW (Address: 0x10022410)
  • PathRemoveFileSpecW (Address: 0x1002241c)
  • SHGetValueW (Address: 0x10022418)
USER32.dll
  • CallWindowProcW (Address: 0x10022440)
  • CreateWindowExW (Address: 0x10022428)
  • DefWindowProcW (Address: 0x1002242c)
  • DestroyWindow (Address: 0x10022450)
  • DispatchMessageW (Address: 0x1002243c)
  • GetClassInfoExW (Address: 0x1002245c)
  • GetDesktopWindow (Address: 0x1002246c)
  • GetMessageW (Address: 0x10022430)
  • GetWindowLongW (Address: 0x10022464)
  • IsWindow (Address: 0x10022444)
  • LoadCursorW (Address: 0x10022458)
  • PeekMessageW (Address: 0x10022448)
  • PostMessageW (Address: 0x10022454)
  • PostThreadMessageW (Address: 0x1002244c)
  • RegisterClassExW (Address: 0x10022460)
  • SetWindowLongW (Address: 0x10022468)
  • ShowWindow (Address: 0x10022470)
  • TranslateMessage (Address: 0x10022434)
  • UnregisterClassA (Address: 0x10022438)
USERENV.dll
  • CreateEnvironmentBlock (Address: 0x1002247c)
  • DestroyEnvironmentBlock (Address: 0x10022478)
WTSAPI32.dll
  • WTSQueryUserToken (Address: 0x10022488)