AliProtectCollina.dll

Description: AliProtectCollina

Authors: Copyright (C) 2018 Alibaba Group. All right reserved

Version: 1.0.70.830

Architecture: 64-bit

Operating System: Windows NT

SHA256: d47d397b00506cd8401728108ae314de

File Size: 786.1 KB

Uploaded At: Dec. 2, 2025, 2:41 p.m.

Views: 5

Exported Functions

  • FreeUABuff (Ordinal: 1, Address: 0x4460)
  • GetUA (Ordinal: 2, Address: 0x3f60)
  • StartCollina (Ordinal: 3, Address: 0x4320)
  • StopCollina (Ordinal: 4, Address: 0x43d0)

Imported DLLs & Functions

ADVAPI32.dll
  • RegCloseKey (Address: 0x18008d000)
  • RegOpenKeyExW (Address: 0x18008d010)
  • RegQueryValueExW (Address: 0x18008d008)
CRYPT32.dll
  • CertCloseStore (Address: 0x18008d038)
  • CertFindCertificateInStore (Address: 0x18008d028)
  • CertFreeCertificateContext (Address: 0x18008d050)
  • CertGetNameStringA (Address: 0x18008d020)
  • CryptMsgClose (Address: 0x18008d030)
  • CryptMsgGetParam (Address: 0x18008d040)
  • CryptQueryObject (Address: 0x18008d048)
IMM32.dll
  • ImmGetDescriptionA (Address: 0x18008d068)
  • ImmIsIME (Address: 0x18008d060)
IPHLPAPI.DLL
  • GetAdaptersInfo (Address: 0x18008d078)
KERNEL32.dll
  • AreFileApisANSI (Address: 0x18008d398)
  • CloseHandle (Address: 0x18008d128)
  • CompareStringW (Address: 0x18008d3f0)
  • CreateEventW (Address: 0x18008d3e0)
  • CreateFileA (Address: 0x18008d180)
  • CreateFileW (Address: 0x18008d1e8)
  • CreateSemaphoreW (Address: 0x18008d280)
  • CreateThread (Address: 0x18008d348)
  • DecodePointer (Address: 0x18008d178)
  • DeleteCriticalSection (Address: 0x18008d110)
  • DeviceIoControl (Address: 0x18008d2e8)
  • DisableThreadLibraryCalls (Address: 0x18008d088)
  • EncodePointer (Address: 0x18008d330)
  • EnterCriticalSection (Address: 0x18008d0f8)
  • EnumSystemLocalesW (Address: 0x18008d308)
  • ExitProcess (Address: 0x18008d388)
  • ExitThread (Address: 0x18008d350)
  • FatalAppExitA (Address: 0x18008d3a8)
  • FindResourceExW (Address: 0x18008d1c8)
  • FindResourceW (Address: 0x18008d1c0)
  • FlushFileBuffers (Address: 0x18008d210)
  • FreeEnvironmentStringsW (Address: 0x18008d230)
  • FreeLibrary (Address: 0x18008d268)
  • GetACP (Address: 0x18008d2f0)
  • GetCommandLineA (Address: 0x18008d3a0)
  • GetConsoleCP (Address: 0x18008d260)
  • GetConsoleMode (Address: 0x18008d258)
  • GetCPInfo (Address: 0x18008d3b0)
  • GetCurrentProcess (Address: 0x18008d3e8)
  • GetCurrentProcessId (Address: 0x18008d0d0)
  • GetCurrentThread (Address: 0x18008d300)
  • GetCurrentThreadId (Address: 0x18008d0e0)
  • GetDateFormatW (Address: 0x18008d288)
  • GetEnvironmentStringsW (Address: 0x18008d238)
  • GetFileType (Address: 0x18008d250)
  • GetLastError (Address: 0x18008d0e8)
  • GetLocaleInfoW (Address: 0x18008d320)
  • GetModuleFileNameA (Address: 0x18008d248)
  • GetModuleFileNameW (Address: 0x18008d148)
  • GetModuleHandleExW (Address: 0x18008d390)
  • GetModuleHandleW (Address: 0x18008d150)
  • GetOEMCP (Address: 0x18008d2b0)
  • GetProcAddress (Address: 0x18008d190)
  • GetProcessHeap (Address: 0x18008d0c8)
  • GetStartupInfoW (Address: 0x18008d2a0)
  • GetStdHandle (Address: 0x18008d2a8)
  • GetStringTypeW (Address: 0x18008d338)
  • GetSystemInfo (Address: 0x18008d1d0)
  • GetSystemTimeAsFileTime (Address: 0x18008d378)
  • GetTickCount (Address: 0x18008d130)
  • GetTimeFormatW (Address: 0x18008d2e0)
  • GetTimeZoneInformation (Address: 0x18008d228)
  • GetUserDefaultLCID (Address: 0x18008d310)
  • GetVersion (Address: 0x18008d198)
  • GetVersionExA (Address: 0x18008d1d8)
  • GetVersionExW (Address: 0x18008d188)
  • GlobalAlloc (Address: 0x18008d090)
  • GlobalFree (Address: 0x18008d098)
  • HeapAlloc (Address: 0x18008d0a8)
  • HeapDestroy (Address: 0x18008d0a0)
  • HeapFree (Address: 0x18008d0b8)
  • HeapReAlloc (Address: 0x18008d0b0)
  • HeapSize (Address: 0x18008d0c0)
  • InitializeCriticalSection (Address: 0x18008d0f0)
  • InitializeCriticalSectionAndSpinCount (Address: 0x18008d108)
  • IsBadReadPtr (Address: 0x18008d158)
  • IsDebuggerPresent (Address: 0x18008d340)
  • IsProcessorFeaturePresent (Address: 0x18008d380)
  • IsValidCodePage (Address: 0x18008d2f8)
  • IsValidLocale (Address: 0x18008d318)
  • LCMapStringW (Address: 0x18008d328)
  • LeaveCriticalSection (Address: 0x18008d100)
  • LoadLibraryExW (Address: 0x18008d358)
  • LoadLibraryW (Address: 0x18008d1e0)
  • LoadResource (Address: 0x18008d1a8)
  • LocalAlloc (Address: 0x18008d138)
  • LocalFree (Address: 0x18008d140)
  • LockResource (Address: 0x18008d1a0)
  • lstrlenA (Address: 0x18008d270)
  • lstrlenW (Address: 0x18008d278)
  • MultiByteToWideChar (Address: 0x18008d160)
  • OutputDebugStringA (Address: 0x18008d170)
  • OutputDebugStringW (Address: 0x18008d1b8)
  • QueryPerformanceCounter (Address: 0x18008d240)
  • RaiseException (Address: 0x18008d0d8)
  • ReadConsoleW (Address: 0x18008d1f8)
  • ReadFile (Address: 0x18008d200)
  • RtlCaptureContext (Address: 0x18008d3b8)
  • RtlLookupFunctionEntry (Address: 0x18008d368)
  • RtlPcToFileHeader (Address: 0x18008d360)
  • RtlUnwindEx (Address: 0x18008d370)
  • RtlVirtualUnwind (Address: 0x18008d3c0)
  • SetConsoleCtrlHandler (Address: 0x18008d290)
  • SetEnvironmentVariableA (Address: 0x18008d1f0)
  • SetFilePointerEx (Address: 0x18008d220)
  • SetLastError (Address: 0x18008d3d8)
  • SetStdHandle (Address: 0x18008d218)
  • SetUnhandledExceptionFilter (Address: 0x18008d3d0)
  • SizeofResource (Address: 0x18008d1b0)
  • Sleep (Address: 0x18008d120)
  • TerminateProcess (Address: 0x18008d2d8)
  • TlsAlloc (Address: 0x18008d2d0)
  • TlsFree (Address: 0x18008d2b8)
  • TlsGetValue (Address: 0x18008d2c8)
  • TlsSetValue (Address: 0x18008d2c0)
  • UnhandledExceptionFilter (Address: 0x18008d3c8)
  • WaitForSingleObject (Address: 0x18008d118)
  • WideCharToMultiByte (Address: 0x18008d168)
  • WriteConsoleW (Address: 0x18008d208)
  • WriteFile (Address: 0x18008d298)
ole32.dll
  • CoCreateInstance (Address: 0x18008d530)
  • CoInitializeEx (Address: 0x18008d538)
  • CoSetProxyBlanket (Address: 0x18008d548)
  • CoUninitialize (Address: 0x18008d540)
OLEAUT32.dll
  • CreateErrorInfo (Address: 0x18008d420)
  • GetErrorInfo (Address: 0x18008d428)
  • SetErrorInfo (Address: 0x18008d438)
  • SysAllocString (Address: 0x18008d418)
  • SysFreeString (Address: 0x18008d410)
  • VariantChangeType (Address: 0x18008d430)
  • VariantClear (Address: 0x18008d400)
  • VariantInit (Address: 0x18008d408)
RPCRT4.dll
  • UuidFromStringW (Address: 0x18008d448)
SETUPAPI.dll
  • SetupDiDestroyDeviceInfoList (Address: 0x18008d468)
  • SetupDiEnumDeviceInfo (Address: 0x18008d470)
  • SetupDiGetClassDevsW (Address: 0x18008d460)
  • SetupDiGetDeviceInstanceIdW (Address: 0x18008d478)
  • SetupDiGetDeviceRegistryPropertyW (Address: 0x18008d458)
USER32.dll
  • CallNextHookEx (Address: 0x18008d4a8)
  • FindWindowExW (Address: 0x18008d498)
  • GetClassNameA (Address: 0x18008d4c0)
  • GetForegroundWindow (Address: 0x18008d4d8)
  • GetKeyboardLayout (Address: 0x18008d4f8)
  • GetKeyState (Address: 0x18008d4f0)
  • GetLastInputInfo (Address: 0x18008d4e8)
  • GetSystemMetrics (Address: 0x18008d4e0)
  • GetWindowRect (Address: 0x18008d4c8)
  • GetWindowTextA (Address: 0x18008d4d0)
  • GetWindowThreadProcessId (Address: 0x18008d4a0)
  • IsWindow (Address: 0x18008d490)
  • SetWindowsHookExW (Address: 0x18008d4b8)
  • UnhookWindowsHookEx (Address: 0x18008d4b0)
  • UnregisterClassW (Address: 0x18008d488)
WS2_32.dll
  • htonl (Address: 0x18008d508)
  • htons (Address: 0x18008d520)
  • ntohl (Address: 0x18008d510)
  • ntohs (Address: 0x18008d518)