AFBase.dll

Description: 腾讯QQ

Authors: Copyright (C) 1999-2023 Tencent. All Rights Reserved

Version: 9.7.17.29215

Architecture: 32-bit

Operating System: Windows NT

SHA256: 077180231df33907b76aeffbb477cc66

File Size: 405.4 KB

Uploaded At: Dec. 2, 2025, 2:46 p.m.

Views: 7

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • ??0CProcessUtil@@QAE@ABV0@@Z (Ordinal: 1, Address: 0x1ff33)
  • ??0CProcessUtil@@QAE@XZ (Ordinal: 2, Address: 0x23c71)
  • ??0CQQDoctorControler@@QAE@XZ (Ordinal: 3, Address: 0x2fdf3)
  • ??0CRichStatus@Contact@Util@@QAE@ABV012@@Z (Ordinal: 4, Address: 0x12b0f)
  • ??0CRichStatus@Contact@Util@@QAE@K@Z (Ordinal: 5, Address: 0x12b35)
  • ??0CScanVirus@@QAE@XZ (Ordinal: 6, Address: 0x32d44)
  • ??0CUserFlags@Contact@Util@@QAE@ABV012@@Z (Ordinal: 7, Address: 0x12b78)
  • ??0CUserFlags@Contact@Util@@QAE@K@Z (Ordinal: 8, Address: 0x12b96)
  • ??1CProcessUtil@@UAE@XZ (Ordinal: 9, Address: 0x23e05)
  • ??1CQQDoctorControler@@UAE@XZ (Ordinal: 10, Address: 0x3003a)
  • ??1CRichStatus@Contact@Util@@UAE@XZ (Ordinal: 11, Address: 0x12baf)
  • ??1CScanVirus@@UAE@XZ (Ordinal: 12, Address: 0x32f3c)
  • ??1CUserFlags@Contact@Util@@UAE@XZ (Ordinal: 13, Address: 0x12bd0)
  • ??4CProcessUtil@@QAEAAV0@ABV0@@Z (Ordinal: 14, Address: 0x2006f)
  • ??4CRichStatus@Contact@Util@@QAEAAV012@ABV012@@Z (Ordinal: 15, Address: 0x12bf1)
  • ??4CUserFlags@Contact@Util@@QAEAAV012@ABV012@@Z (Ordinal: 16, Address: 0x12c0d)
  • ??_7CProcessUtil@@6B@ (Ordinal: 17, Address: 0x46b00)
  • ??_7CQQDoctorControler@@6BCTXHttpDownloadSink@@@ (Ordinal: 18, Address: 0x4d9b4)
  • ??_7CQQDoctorControler@@6BCTXThreadModel@@@ (Ordinal: 19, Address: 0x4d9d4)
  • ??_7CRichStatus@Contact@Util@@6B@ (Ordinal: 20, Address: 0x44478)
  • ??_7CScanVirus@@6B@ (Ordinal: 21, Address: 0x4deb0)
  • ??_7CUserFlags@Contact@Util@@6B@ (Ordinal: 22, Address: 0x44474)
  • ?AddMainPanel@BubbleTipMgr2@@YAJPAUIGFFrame@@@Z (Ordinal: 23, Address: 0xb3ad)
  • ?AnalyseSCFile@ShortcutUtil@@YAJAAVCTXStringW@@PAUITXData@@@Z (Ordinal: 24, Address: 0x3ade2)
  • ?AppendScanResult@CQQDoctorControler@@IAEHU_tagQQDct_SCAN_RESULT@@@Z (Ordinal: 25, Address: 0x30240)
  • ?AutoScanVirus@CScanVirus@@SAHXZ (Ordinal: 26, Address: 0x332b5)
  • ?BeginCheckEngine@CQQDoctorControler@@QAEXXZ (Ordinal: 27, Address: 0x302d8)
  • ?BeginCheckEngine@CScanVirus@@QAEXXZ (Ordinal: 28, Address: 0x334af)
  • ?Bluebar_Cancel@CScanVirus@@IAEXXZ (Ordinal: 29, Address: 0x334c3)
  • ?Bluebar_FinishSafe@CScanVirus@@IAEXXZ (Ordinal: 30, Address: 0x3369d)
  • ?Bluebar_FinishUnSafe@CScanVirus@@IAEXXZ (Ordinal: 31, Address: 0x33809)
  • ?Bluebar_FirstOpenLoginPanel@CScanVirus@@IAEXXZ (Ordinal: 32, Address: 0x33a91)
  • ?Bluebar_InitFail@CScanVirus@@IAEXXZ (Ordinal: 33, Address: 0x33c57)
  • ?Bluebar_NeedResetComputer@CScanVirus@@IAEXXZ (Ordinal: 34, Address: 0x33f58)
  • ?Bluebar_PwdLoadFail@CScanVirus@@IAEXXZ (Ordinal: 35, Address: 0x34166)
  • ?Bluebar_RepairCancel@CScanVirus@@IAEXXZ (Ordinal: 36, Address: 0x3436e)
  • ?Bluebar_RepairFail@CScanVirus@@IAEXXZ (Ordinal: 37, Address: 0x3437c)
  • ?Bluebar_RepairSuccess@CScanVirus@@IAEXXZ (Ordinal: 38, Address: 0x3463c)
  • ?BruceForceCopy@QQUPDATECENTER@@YAHPB_W0@Z (Ordinal: 39, Address: 0x210b8)
  • ?CheckAccountLoginFinished@MultiLogin@Util@@YAHH@Z (Ordinal: 40, Address: 0x18360)
  • ?CheckCmdLineString@MultiLogin@Util@@YAHVCTXStringW@@@Z (Ordinal: 41, Address: 0x183f8)
  • ?CheckDepShow@Misc@Util@@YAXPAUITXData@@@Z (Ordinal: 42, Address: 0x167ee)
  • ?CleanupVirus@CQQDoctorControler@@QAEXXZ (Ordinal: 43, Address: 0x30314)
  • ?CleanupVirus@CScanVirus@@IAEXXZ (Ordinal: 44, Address: 0x347e1)
  • ?Clear@CScanVirus@@QAEXXZ (Ordinal: 45, Address: 0x347fc)
  • ?ClearEventSink@CQQDoctorControler@@QAEJXZ (Ordinal: 46, Address: 0x30358)
  • ?ClearUpdateSuccessedFlag@TXUpdateCfg@@YAHXZ (Ordinal: 47, Address: 0x3ce5e)
  • ?CloseBubbleTip@BubbleTipMgr2@@YAJPAUIGFFrame@@@Z (Ordinal: 48, Address: 0xb471)
  • ?CloseGuideBubbleTip@BubbleTipMgr2@@YAJPA_W@Z (Ordinal: 49, Address: 0xb51f)
  • ?CloseMappingFile@IPCHandler@@YAXVCTXStringW@@@Z (Ordinal: 50, Address: 0x18462)
  • ?Code@CSCArgGenerator@@YAJAAVCTXStringW@@PAUITXData@@@Z (Ordinal: 51, Address: 0x3a825)
  • ?ConvertPic2Ico@AppImage@ShortcutUtil@@YAJAAVCTXStringW@@0H@Z (Ordinal: 52, Address: 0x3b2c0)
  • ?ConvertPic2IcoEx@AppImage@ShortcutUtil@@YAJAAVCTXStringW@@0@Z (Ordinal: 53, Address: 0x3b655)
  • ?CopyRepairFileToQQDocPath@CQQDoctorControler@@IAEHXZ (Ordinal: 54, Address: 0x30366)
  • ?CountRunningInstance@CProcessUtil@@QAEHPB_W@Z (Ordinal: 55, Address: 0x23e40)
  • ?CreateContactHead@Head@Contact@Util@@YAHPAPAUIContactHead@@@Z (Ordinal: 56, Address: 0x12cf0)
  • ?CreateInternetShortCut@ShortcutUtil@@YAJAAVCTXStringW@@0000@Z (Ordinal: 57, Address: 0x3bb99)
  • ?CreateMappingFile@IPCHandler@@YAXVCTXStringW@@I@Z (Ordinal: 58, Address: 0x184db)
  • ?CreateScanVirusConfirmWnd@Misc@Util@@YAHPAPAUIGFStandardWin@@@Z (Ordinal: 59, Address: 0x16c2a)
  • ?CreateScanVirusRestartPCWnd@Misc@Util@@YAHPAPAUIGFStandardWin@@@Z (Ordinal: 60, Address: 0x16ccc)
  • ?CryptDataWinProtect@Encrypt@Util@@YAHPAEKPB_WPAU_CRYPTOAPI_BLOB@@PAHPAK@Z (Ordinal: 61, Address: 0x15538)
  • ?Decode16@QQUPDATECENTER@@YAHPA_WIPAE@Z (Ordinal: 62, Address: 0x21103)
  • ?Decode16@QQUPDATECENTER@@YAHVCTXStringW@@PAE@Z (Ordinal: 63, Address: 0x21218)
  • ?Decode@CSCArgGenerator@@YAJAAVCTXStringW@@PAPAUITXData@@@Z (Ordinal: 64, Address: 0x3a965)
  • ?DecodeBase64@QQUPDATECENTER@@YAHABVCTXStringW@@PAEH@Z (Ordinal: 65, Address: 0x21266)
  • ?DecodeHash@QQUPDATECENTER@@YAHPA_WPAE@Z (Ordinal: 66, Address: 0x21375)
  • ?DecodeSCBootParam@ShortcutUtil@@YAJVCTXStringW@@@Z (Ordinal: 67, Address: 0x3bd12)
  • ?DecryptDataWinProtect@Encrypt@Util@@YAHPAEKPAPA_WPAU_CRYPTOAPI_BLOB@@PAHPAK@Z (Ordinal: 68, Address: 0x15677)
  • ?DecryptMultiLoginDataToFileMapping@MultiLogin@Util@@YAHVCTXStringW@@HAAUsMultiAccountLoginInfo@12@@Z (Ordinal: 69, Address: 0x1853f)
  • ?DelFlagValue@Cfg@Util@@YAHABVCTXStringW@@@Z (Ordinal: 70, Address: 0x3d1c1)
  • ?DelayDelete@QQUPDATECENTER@@YAHPB_W@Z (Ordinal: 71, Address: 0x2138a)
  • ?Encode16@QQUPDATECENTER@@YAHPAEIAAVCTXStringW@@@Z (Ordinal: 72, Address: 0x2139b)
  • ?Encode16@QQUPDATECENTER@@YAHPAEIPA_W@Z (Ordinal: 73, Address: 0x213cf)
  • ?EncodeBase64@QQUPDATECENTER@@YA?AVCTXStringW@@PBEH@Z (Ordinal: 74, Address: 0x2145b)
  • ?EncodeHash@QQUPDATECENTER@@YAHPAEAAVCTXStringW@@@Z (Ordinal: 75, Address: 0x21540)
  • ?EncodeHash@QQUPDATECENTER@@YAHPAEPA_W@Z (Ordinal: 76, Address: 0x2156c)
  • ?EncodeIco@AppImage@ShortcutUtil@@YA_NPAVCxImage@@PAVCxTXFile@@@Z (Ordinal: 77, Address: 0x3bd4d)
  • ?EncodeRGBAIco@AppImage@ShortcutUtil@@YA_NPAVCxImage@@PAVCxTXFile@@@Z (Ordinal: 78, Address: 0x3c025)
  • ?EncryptMultiLoginDataToFileMapping@MultiLogin@Util@@YAHVCTXStringW@@AAUsMultiAccountLoginInfo@12@@Z (Ordinal: 79, Address: 0x186f3)
  • ?EnsureAllDirectory@QQUPDATECENTER@@YAHABVCTXStringW@@@Z (Ordinal: 80, Address: 0x21581)
  • ?GeFileTransferInfo@FileTransfer@Contact@Util@@YAXKPAPAUITXData@@@Z (Ordinal: 81, Address: 0x12d01)
  • ?GenerateMainModuleRegKey@QQUPDATECENTER@@YAHABU_GUID@@PB_WAAVCTXStringW@@@Z (Ordinal: 82, Address: 0x21625)
  • ?GeneratePathSpecificMutexName@QQUPDATECENTER@@YA?AVCTXStringW@@V2@0@Z (Ordinal: 83, Address: 0x216e7)
  • ?GetAppDataDir@Dir@Util@@YA?AVCTXStringW@@XZ (Ordinal: 84, Address: 0x3d46d)
  • ?GetAuTempPath@Dir@Util@@YA?AVCTXStringW@@XZ (Ordinal: 85, Address: 0x3d5f4)
  • ?GetAudioVideoBizInfo@AudioVideo@Contact@Util@@YAXKPAPAUITXData@@@Z (Ordinal: 86, Address: 0x12e1f)
  • ?GetAutoRelyContent@Self@Contact@Util@@YAHAAVCTXStringW@@@Z (Ordinal: 87, Address: 0x2b77)
  • ?GetBinPathHash@QQUPDATECENTER@@YAXAAVCTXStringW@@@Z (Ordinal: 88, Address: 0x217c1)
  • ?GetBlueBar@CScanVirus@@QAEXPAPAUIGFControl@@@Z (Ordinal: 89, Address: 0x34891)
  • ?GetCircleIcon@Misc@Util@@YA?AVCTXStringW@@PA_W00@Z (Ordinal: 90, Address: 0x16db4)
  • ?GetCompanyFromResource@QQDoctorHelper@@YAXVCTXStringW@@AAV2@@Z (Ordinal: 91, Address: 0x32412)
  • ?GetCustomHeadFile@Head@Contact@Util@@YAJKKAAVCTXStringW@@H@Z (Ordinal: 92, Address: 0x12f17)
  • ?GetDataStorePath@QQUPDATECENTER@@YA?AVCTXStringW@@XZ (Ordinal: 93, Address: 0x218ac)
  • ?GetDefaultShowText@Status@Contact@Util@@YA?AVCTXStringW@@G@Z (Ordinal: 94, Address: 0x133a5)
  • ?GetDesktopPath@ShortcutUtil@@YA?AVCTXStringW@@XZ (Ordinal: 95, Address: 0x3c8c9)
  • ?GetDirectLoginInfo@SSOLogin@Util@@YAHAAVCTXStringW@@0@Z (Ordinal: 96, Address: 0x1b69b)
  • ?GetDownloadDataPath@QQUPDATECENTER@@YA?AVCTXStringW@@XZ (Ordinal: 97, Address: 0x218ac)
  • ?GetEmailTagFile@Head@Contact@Util@@YA?AVCTXStringW@@XZ (Ordinal: 98, Address: 0x134ef)
  • ?GetEnablePreload@Misc@Util@@YAHXZ (Ordinal: 99, Address: 0x171d8)
  • ?GetFLoginState@MultiLogin@Util@@YAEH@Z (Ordinal: 100, Address: 0x1883d)
  • ?GetFSQQDoctorPath@CQQDoctorControler@@IAE?AVCTXStringW@@XZ (Ordinal: 101, Address: 0x3086d)
  • ?GetFSVirusLibraryPath@CQQDoctorControler@@IAE?AVCTXStringW@@XZ (Ordinal: 102, Address: 0x308c7)
  • ?GetFileName@CProcessUtil@@QAEXPA_W0@Z (Ordinal: 103, Address: 0x2407a)
  • ?GetFileSize@QQUPDATECENTER@@YAKPB_WPAK@Z (Ordinal: 104, Address: 0x21927)
  • ?GetFlagValue@Cfg@Util@@YAHABVCTXStringW@@AAH@Z (Ordinal: 105, Address: 0x3d253)
  • ?GetFlagValue@Cfg@Util@@YAHABVCTXStringW@@AAV3@@Z (Ordinal: 106, Address: 0x3d322)
  • ?GetGroupMemberPreventTagFile@Head@Contact@Util@@YA?AVCTXStringW@@XZ (Ordinal: 107, Address: 0x13557)
  • ?GetHwnd@IPCHandler@@YAXIAAPAUHWND__@@@Z (Ordinal: 108, Address: 0x188cf)
  • ?GetIMHwnd@IPCHandler@@YAPAUHWND__@@XZ (Ordinal: 109, Address: 0x18954)
  • ?GetIfLoginProcess@MultiLogin@Util@@YAHXZ (Ordinal: 110, Address: 0x1895a)
  • ?GetIfMulLogin@MultiLogin@Util@@YAHXZ (Ordinal: 111, Address: 0x18960)
  • ?GetIfSingleLogin@MultiLogin@Util@@YAHXZ (Ordinal: 112, Address: 0x1898d)
  • ?GetInstallDir@Dir@Util@@YA?AVCTXStringW@@XZ (Ordinal: 113, Address: 0x3d7c7)
  • ?GetInternetShortCut@ShortcutUtil@@YAJAAVCTXStringW@@00@Z (Ordinal: 114, Address: 0x3c9c9)
  • ?GetInvisibleTagFile@Head@Contact@Util@@YAXAAVCTXStringW@@0@Z (Ordinal: 115, Address: 0x13585)
  • ?GetLoadPwdFlag@CScanVirus@@QAEHXZ (Ordinal: 116, Address: 0x348ce)
  • ?GetLoginErrorString@ErrorCodeReport@Util@@YA?AVCTXStringW@@PB_WGGGHH@Z (Ordinal: 117, Address: 0x158d5)
  • ?GetLoginPerfData@PerfDataReportUtil@@YAXPAPAUITXData@@@Z (Ordinal: 118, Address: 0x1954d)
  • ?GetLogoIconWithStatus@Status@Contact@Util@@YA?AVCTXStringW@@GHH@Z (Ordinal: 119, Address: 0x135f6)
  • ?GetMappingData@IPCHandler@@YAHVCTXStringW@@IPAXI@Z (Ordinal: 120, Address: 0x18ac0)
  • ?GetMobileStatusTagFile@Head@Contact@Util@@YAXGW4MOBILE_USER_TYPE@23@AAVCTXStringW@@1@Z (Ordinal: 121, Address: 0x1379a)
  • ?GetMobileUserType@Contact@Util@@YA?AW4MOBILE_USER_TYPE@12@K@Z (Ordinal: 122, Address: 0x13a1a)
  • ?GetModuleFullPath@QQUPDATECENTER@@YA?AVCTXStringW@@XZ (Ordinal: 123, Address: 0x219c3)
  • ?GetModuleFullPathFileName@QQUPDATECENTER@@YA?AVCTXStringW@@XZ (Ordinal: 124, Address: 0x21ad7)
  • ?GetModulePath@Dir@Util@@YA?AVCTXStringW@@XZ (Ordinal: 125, Address: 0x3d87a)
  • ?GetMultiLoginInfo@MultiLogin@Util@@YAHPAVCTXStringW@@PAK1@Z (Ordinal: 126, Address: 0x18b60)
  • ?GetOSValidVirusLibraryPath@CQQDoctorControler@@IAE?AVCTXStringW@@XZ (Ordinal: 127, Address: 0x30919)
  • ?GetOSVirusLibraryPath@CQQDoctorControler@@IAE?AVCTXStringW@@XZ (Ordinal: 128, Address: 0x30a0f)
  • ?GetPerfReportDataForAllUser@PerfDataReportUtil@@YAXPAPAUITXData@@@Z (Ordinal: 129, Address: 0x1958b)
  • ?GetPerfReportDataForCurUser@PerfDataReportUtil@@YAXPAPAUITXData@@@Z (Ordinal: 130, Address: 0x1961f)
  • ?GetPngFile@Status@Contact@Util@@YAHGAAVCTXStringW@@0@Z (Ordinal: 131, Address: 0x13b5f)
  • ?GetPngFile_2014LoginUI@Status@Contact@Util@@YAHGAAVCTXStringW@@@Z (Ordinal: 132, Address: 0x13da1)
  • ?GetPreventTagFile@Head@Contact@Util@@YA?AVCTXStringW@@XZ (Ordinal: 133, Address: 0x13e6d)
  • ?GetProductExeFile@Product@Util@@YA?AVCTXStringW@@XZ (Ordinal: 134, Address: 0x197da)
  • ?GetProductName@Product@Util@@YA?AVCTXStringW@@XZ (Ordinal: 135, Address: 0x19827)
  • ?GetProductNameVer@Product@Util@@YA?AVCTXStringW@@XZ (Ordinal: 136, Address: 0x19874)
  • ?GetQQDoctorPath@QQDoctorHelper@@YAHAAVCTXStringW@@@Z (Ordinal: 137, Address: 0x3255c)
  • ?GetQQExePath@ShortcutUtil@@YA?AVCTXStringW@@XZ (Ordinal: 138, Address: 0x3cb33)
  • ?GetRemarkName@ShortcutUtil@@YA?AVCTXStringW@@K@Z (Ordinal: 139, Address: 0x3cbc0)
  • ?GetRemoteControlInfo@RemoteControl@Contact@Util@@YAXKPAPAUITXData@@@Z (Ordinal: 140, Address: 0x13e9b)
  • ?GetRepairProgress@CQQDoctorControler@@QAEHAAH@Z (Ordinal: 141, Address: 0x30a51)
  • ?GetRepairTempPath@CQQDoctorControler@@IAE?AVCTXStringW@@XZ (Ordinal: 142, Address: 0x30a84)
  • ?GetSSOLoginInfo@SSOLogin@Util@@YAHPAVCTXStringW@@@Z (Ordinal: 143, Address: 0x1b7e2)
  • ?GetScanBox@CScanVirus@@QAEXPAPAUIGFControl@@@Z (Ordinal: 144, Address: 0x348d5)
  • ?GetShareInfo@IPCHandler@@YAJVCTXStringW@@PAPAUITXData@@@Z (Ordinal: 145, Address: 0x18c98)
  • ?GetStatus@AudioVideo@Contact@Util@@YAHKPAPAUITXArray@@@Z (Ordinal: 146, Address: 0x13fe1)
  • ?GetStatusMenuToopTip@Status@Contact@Util@@YA?AVCTXStringW@@G@Z (Ordinal: 147, Address: 0x14149)
  • ?GetStatusTagFile@Head@Contact@Util@@YAXGAAVCTXStringW@@0@Z (Ordinal: 148, Address: 0x14293)
  • ?GetSystemHeadFile@Head@Contact@Util@@YAXGAAVCTXStringW@@0V4@1@Z (Ordinal: 149, Address: 0x142fd)
  • ?GetSystemHeadOriginFile@Head@Contact@Util@@YAXGAAVCTXStringW@@V4@@Z (Ordinal: 150, Address: 0x14595)
  • ?GetSystemTempPath@QQUPDATECENTER@@YA?AVCTXStringW@@XZ (Ordinal: 151, Address: 0x21b31)
  • ?GetTempDirPath@ShortcutUtil@@YA?AVCTXStringW@@XZ (Ordinal: 152, Address: 0x3cc25)
  • ?GetTempIconFileByTexture@Misc@Util@@YA?AVCTXStringW@@PAUHGTEXTURE__@@PA_W1@Z (Ordinal: 153, Address: 0x1721b)
  • ?GetTextColor@CUserFlags@Contact@Util@@SAKK@Z (Ordinal: 154, Address: 0x1464c)
  • ?GetThreadId@IPCHandler@@YAXIAAK@Z (Ordinal: 155, Address: 0x18d8e)
  • ?GetTipIconFile@Misc@Util@@YA?AVCTXStringW@@W4IconIndex@@@Z (Ordinal: 156, Address: 0x173cf)
  • ?GetTraditionHeadFile@Head@Contact@Util@@YA?AVCTXStringW@@E@Z (Ordinal: 157, Address: 0x146ba)
  • ?GetUinByAccount@Contact@Util@@YAHABVCTXStringW@@PAK@Z (Ordinal: 158, Address: 0x146f4)
  • ?GetUpdateInfoFromIni@CQQDoctorControler@@IAEHVCTXStringW@@@Z (Ordinal: 159, Address: 0x30aaa)
  • ?GetUserHeadFile@Head@Contact@Util@@YAHKAAVCTXStringW@@0PAW4UserHeadType@123@@Z (Ordinal: 160, Address: 0x14781)
  • ?GetUserHeadFileForDiscussGridHead@Head@Contact@Util@@YAHKAAVCTXStringW@@0PAH@Z (Ordinal: 161, Address: 0x14aa0)
  • ?GetVipLevel@Self@Contact@Util@@YAHPAG@Z (Ordinal: 162, Address: 0x14c21)
  • ?GetVirusCleanProgress@CQQDoctorControler@@QAEHAAH@Z (Ordinal: 163, Address: 0x30ecc)
  • ?GetVirusScanProgress@CQQDoctorControler@@QAEHAAH@Z (Ordinal: 164, Address: 0x30ee7)
  • ?GetVirusScanResult@CQQDoctorControler@@QAEHXZ (Ordinal: 165, Address: 0x30f2e)
  • ?GetVirusScanResultDetail@CQQDoctorControler@@QAEAAV?$vector@U_tagQQDct_SCAN_RESULT@@V?$allocator@U_tagQQDct_SCAN_RESULT@@@std@@@std@@XZ (Ordinal: 166, Address: 0x30f45)
  • ?GetVisibleTagFile@Head@Contact@Util@@YAXAAVCTXStringW@@0@Z (Ordinal: 167, Address: 0x14cae)
  • ?GetWebQQStatusTagFile@Head@Contact@Util@@YAXGAAVCTXStringW@@0@Z (Ordinal: 168, Address: 0x14d1f)
  • ?HideBluebar@CScanVirus@@IAEXXZ (Ordinal: 169, Address: 0x34916)
  • ?HideScanVirusBox@CScanVirus@@IAEXXZ (Ordinal: 170, Address: 0x34997)
  • ?Init@CQQDoctorControler@@QAEHXZ (Ordinal: 171, Address: 0x45ad)
  • ?Init@CScanVirus@@QAEHPAUIGFFrame@@KPAUITXCallback@@@Z (Ordinal: 172, Address: 0x34aca)
  • ?InitAppFrameworkOnce@Misc@Util@@YAXXZ (Ordinal: 173, Address: 0x17642)
  • ?InitBluebar@CScanVirus@@IAEHXZ (Ordinal: 174, Address: 0x34ba6)
  • ?InitMiniScanWnd@CScanVirus@@IAEHXZ (Ordinal: 175, Address: 0x34f25)
  • ?InitScanWnd@CScanVirus@@IAEHXZ (Ordinal: 176, Address: 0x35111)
  • ?InitStdScanWnd@CScanVirus@@IAEHXZ (Ordinal: 177, Address: 0x3512b)
  • ?InitWithoutState@CScanVirus@@QAEHPAUIGFFrame@@KPAUITXCallback@@@Z (Ordinal: 178, Address: 0x352f4)
  • ?InsertSubMenu@CScanVirus@@IAEHPAUIGFMenu@@IPB_WHH0H@Z (Ordinal: 179, Address: 0x353c4)
  • ?IsAllFileRepaired@CQQDoctorControler@@IAEHXZ (Ordinal: 180, Address: 0x30f70)
  • ?IsAudioVideoOn@AudioVideo@Contact@Util@@YAHK@Z (Ordinal: 181, Address: 0x14e82)
  • ?IsCurrentViewMode@VIEWMODEUTIL@AF@@YAHW4VIEWMODE@@@Z (Ordinal: 182, Address: 0x459f)
  • ?IsEnableYaHei@Misc@Util@@YAHXZ (Ordinal: 183, Address: 0x176f1)
  • ?IsFileExist@ShortcutUtil@@YAHAAVCTXStringW@@@Z (Ordinal: 184, Address: 0x3cc5a)
  • ?IsFirstOpenLoginPanel@CScanVirus@@IAEHXZ (Ordinal: 185, Address: 0x35520)
  • ?IsFlagValid@CUserFlags@Contact@Util@@IAEHK@Z (Ordinal: 186, Address: 0x14fc6)
  • ?IsInTheFileTransfer@FileTransfer@Contact@Util@@YAHK@Z (Ordinal: 187, Address: 0x1505a)
  • ?IsIphoneQQUserOnline@MobileOnline@Contact@Util@@YAHK@Z (Ordinal: 188, Address: 0x1515e)
  • ?IsMobile3GUser@CRichStatus@Contact@Util@@QAEHXZ (Ordinal: 189, Address: 0x151b1)
  • ?IsMobile3GUser@CRichStatus@Contact@Util@@SAHK@Z (Ordinal: 190, Address: 0x15238)
  • ?IsMobileQQUserOnline@MobileOnline@Contact@Util@@YAHK@Z (Ordinal: 191, Address: 0x2b77)
  • ?IsMobileWapUser@CRichStatus@Contact@Util@@QAEHXZ (Ordinal: 192, Address: 0x15260)
  • ?IsMobileWapUser@CRichStatus@Contact@Util@@SAHK@Z (Ordinal: 193, Address: 0x152e7)
  • ?IsNeedPopupGuideBubbleTip@BubbleTipMgr2@@YAHPA_W@Z (Ordinal: 194, Address: 0xb6f1)
  • ?IsNeedRestore@TXUpdateCfg@@YAHXZ (Ordinal: 195, Address: 0x3cea9)
  • ?IsNeedRestorePatch@TXUpdateCfg@@YAHXZ (Ordinal: 196, Address: 0x3cf2c)
  • ?IsOverFrequency@TXUpdateCfg@@YAHXZ (Ordinal: 197, Address: 0x3d06b)
  • ?IsProcessRunning@CProcessUtil@@QAEHPB_WHK@Z (Ordinal: 198, Address: 0x240e3)
  • ?IsProcessUtilInitOK@CProcessUtil@@QAEHXZ (Ordinal: 199, Address: 0x24505)
  • ?IsQQDoctorNeedUpdate@QQDoctorHelper@@YAHAAVCTXStringW@@@Z (Ordinal: 200, Address: 0x325d8)
  • ?IsQQDoctorWell@CQQDoctorControler@@QAEHXZ (Ordinal: 201, Address: 0x45ad)
  • ?IsQQDoctorWell@CScanVirus@@QAEHXZ (Ordinal: 202, Address: 0x3556b)
  • ?IsRemoteControlOn@RemoteControl@Contact@Util@@YAHK@Z (Ordinal: 203, Address: 0x1530f)
  • ?IsRepairSuccess@CQQDoctorControler@@QAEHXZ (Ordinal: 204, Address: 0x310e9)
  • ?IsSupport32BitIcon@Misc@Util@@YAHXZ (Ordinal: 205, Address: 0x177f7)
  • ?IsUpdateSuccessed@TXUpdateCfg@@YAHXZ (Ordinal: 206, Address: 0x3d0d7)
  • ?IsVASFlagValid@Contact@Util@@YAHAAVCTXBuffer@@E@Z (Ordinal: 207, Address: 0x15351)
  • ?IsValidAddress@QQUPDATECENTER@@YAHPBXIH@Z (Ordinal: 208, Address: 0x21bf3)
  • ?IsVipUser@CUserFlags@Contact@Util@@QAEHXZ (Ordinal: 209, Address: 0x15388)
  • ?IsWebQQUser@WebQQ@Contact@Util@@YAHK@Z (Ordinal: 210, Address: 0x15390)
  • ?KillProcess@CProcessUtil@@QAEHPB_WH@Z (Ordinal: 211, Address: 0x24509)
  • ?LoadLib@CQQDoctorControler@@QAEHVCTXStringW@@@Z (Ordinal: 212, Address: 0x310f0)
  • ?LoginErrorStringAndReport@ErrorCodeReport@Util@@YA?AVCTXStringW@@KPB_WGGGHH@Z (Ordinal: 213, Address: 0x15dbe)
  • ?MarkFinishedLogin@MultiLogin@Util@@YAXH@Z (Ordinal: 214, Address: 0x18db5)
  • ?MarkLoginState@MultiLogin@Util@@YAXHE@Z (Ordinal: 215, Address: 0x18e31)
  • ?MessageBoxByHwnd@Misc@Util@@YAHPAUHWND__@@PAPAUIAFMessageBoxEx@@VCTXStringW@@2H@Z (Ordinal: 216, Address: 0x17854)
  • ?MessageBoxEx2@Misc@Util@@YAHPAUIGFFrame@@PA_W1IPAUITXData@@PAPAU4@@Z (Ordinal: 217, Address: 0x1789a)
  • ?MessageBoxExByHwnd@Misc@Util@@YAHPAUHWND__@@PA_W1IPAUITXData@@PAPAU4@@Z (Ordinal: 218, Address: 0x178a3)
  • ?MessageBoxExW@Misc@Util@@YAHPAUIGFFrame@@PA_W1IPAUITXData@@PAPAU4@@Z (Ordinal: 219, Address: 0x178ac)
  • ?MessageBoxW@Misc@Util@@YAHPAUIGFFrame@@PAPAUIAFMessageBoxEx@@VCTXStringW@@2H@Z (Ordinal: 220, Address: 0x178b5)
  • ?MessageBoxW@Misc@Util@@YAHPAUIGFFrame@@VCTXStringW@@1H@Z (Ordinal: 221, Address: 0x178fb)
  • ?MoveFileOnReboot@QQUPDATECENTER@@YAHPB_W0@Z (Ordinal: 222, Address: 0x21c2a)
  • ?NeedNotReport@TXUpdateCfg@@YAHXZ (Ordinal: 223, Address: 0x3d155)
  • ?OnAsyncCallback@CScanVirus@@QAEJI@Z (Ordinal: 224, Address: 0x6af3)
  • ?OnClickBtn1@CScanVirus@@QAEXPAUITXData@@@Z (Ordinal: 225, Address: 0x35617)
  • ?OnClickBtn2@CScanVirus@@QAEXPAUITXData@@@Z (Ordinal: 226, Address: 0x3575f)
  • ?OnClickBtnText@CScanVirus@@QAEXPAUITXData@@@Z (Ordinal: 227, Address: 0x35790)
  • ?OnClickCloseBlueBar@CScanVirus@@QAEXPAUITXData@@@Z (Ordinal: 228, Address: 0x357e8)
  • ?OnClickLink@CScanVirus@@QAEXPAUITXData@@@Z (Ordinal: 229, Address: 0x357f0)
  • ?OnClickMenu@CScanVirus@@QAEXPAUITXData@@@Z (Ordinal: 230, Address: 0x35b81)
  • ?OnClickRestartLater@CScanVirus@@QAEXPAUITXData@@@Z (Ordinal: 231, Address: 0x35b89)
  • ?OnClickRestartNow@CScanVirus@@QAEXPAUITXData@@@Z (Ordinal: 232, Address: 0x35bb4)
  • ?OnDownloadComplete@CQQDoctorControler@@MAEXPAVCHttpClient@@K@Z (Ordinal: 233, Address: 0x31318)
  • ?OnEngineCheckOver@CScanVirus@@UAEXK@Z (Ordinal: 234, Address: 0x35bbc)
  • ?OnGFMenuItemEvent@CScanVirus@@QAEXPAUITXData@@@Z (Ordinal: 235, Address: 0x35be4)
  • ?OnHideAnimationEvent@CScanVirus@@QAEJPAUIGFElement@@W4EGFAniEventType@@K@Z (Ordinal: 236, Address: 0x35cc5)
  • ?OnIdleCallback@CScanVirus@@QAEJI@Z (Ordinal: 237, Address: 0x35d0b)
  • ?OnQQDoctorCtrlCallback@CScanVirus@@QAEJHPAUITXData@@@Z (Ordinal: 238, Address: 0x35e27)
  • ?OnShowAnimationEvent@CScanVirus@@QAEJPAUIGFElement@@W4EGFAniEventType@@K@Z (Ordinal: 239, Address: 0x35e87)
  • ?OnTimerCallback@CScanVirus@@QAEJI@Z (Ordinal: 240, Address: 0x35f1e)
  • ?OnVirusScanStep@CQQDoctorControler@@IAEXVCTXStringA@@@Z (Ordinal: 241, Address: 0x314b0)
  • ?PopScanSettingMenu@CScanVirus@@IAEXXZ (Ordinal: 242, Address: 0x36205)
  • ?PopupBubbleTip@BubbleTipMgr2@@YAJPAUIGFFrame@@PA_W1UtagPOINT@@1IHPAVCSize@@PAUIGFControl@@@Z (Ordinal: 243, Address: 0xc15d)
  • ?PopupCustomTipByID2@BubbleTipMgr2@@YAJPAUIGFFrame@@PA_WUtagPOINT@@PAUIGFWin@@@Z (Ordinal: 244, Address: 0xc8f4)
  • ?PopupCustomTipByID@BubbleTipMgr2@@YAJPAUIGFFrame@@PA_W1UtagPOINT@@PAPAUIGFWin@@@Z (Ordinal: 245, Address: 0xcd3b)
  • ?PopupGuideBubbleTip@BubbleTipMgr2@@YAJPAUIGFFrame@@PA_WUtagPOINT@@1PAUITXCallback@@PAPAUIGFBubbleTip@@@Z (Ordinal: 246, Address: 0xcefc)
  • ?PostMessageTo@IPCHandler@@YAHIIIJ@Z (Ordinal: 247, Address: 0x18ebd)
  • ?PromptResetComputer@CScanVirus@@IAEXXZ (Ordinal: 248, Address: 0x364c6)
  • ?QueryRsAppData@CRichStatus@Contact@Util@@QAEHW4RichStatusType@RichStatus@ContactStatus@@PAPAUITXDataRead@@@Z (Ordinal: 249, Address: 0x1539a)
  • ?ReadMultiLoginDataToFileMapping@MultiLogin@Util@@YAHVCTXStringW@@HAAUsMultiAccountLoginInfo@12@@Z (Ordinal: 250, Address: 0x18f38)
  • ?ReadRegInitFail@CScanVirus@@IAEHPAH@Z (Ordinal: 251, Address: 0x36609)
  • ?RebootNT@CScanVirus@@IAEHXZ (Ordinal: 252, Address: 0x366bc)
  • ?RemoveElemsWith@Misc@Util@@YAXPAUITXMsgPack@@V?$vector@HV?$allocator@H@std@@@std@@@Z (Ordinal: 253, Address: 0x17acf)
  • ?RemoveElemsWithout@Misc@Util@@YAXPAUITXMsgPack@@V?$vector@HV?$allocator@H@std@@@std@@@Z (Ordinal: 254, Address: 0x17b3b)
  • ?RepairFail@CQQDoctorControler@@IAEXXZ (Ordinal: 255, Address: 0x315d4)
  • ?RepairQQDoctor@CScanVirus@@IAEXXZ (Ordinal: 256, Address: 0x3687a)
  • ?RepairSuccess@CQQDoctorControler@@IAEXXZ (Ordinal: 257, Address: 0x315f5)
  • ?ReplaceIcon@AppImage@ShortcutUtil@@YAJAAVCTXStringW@@0@Z (Ordinal: 258, Address: 0x3cca3)
  • ?ReportLoginError@ErrorCodeReport@Util@@YAXKGGG@Z (Ordinal: 259, Address: 0x15eaf)
  • ?Run@CQQDoctorControler@@MAEIXZ (Ordinal: 260, Address: 0x45ad)
  • ?SaveTextureToIconFile@Misc@Util@@YAJPAUHGTEXTURE__@@PA_W@Z (Ordinal: 261, Address: 0x17bac)
  • ?SendMessageTo@IPCHandler@@YAJIIIJ@Z (Ordinal: 262, Address: 0x18f97)
  • ?SetCurMappingName@MultiLogin@Util@@YAXVCTXStringW@@@Z (Ordinal: 263, Address: 0x18fbd)
  • ?SetCurrentViewMode@VIEWMODEUTIL@AF@@YAHW4VIEWMODE@@@Z (Ordinal: 264, Address: 0x45ad)
  • ?SetEnablePreload@Misc@Util@@YAXH@Z (Ordinal: 265, Address: 0x17c5b)
  • ?SetEngineCheckCallBack@CQQDoctorControler@@QAEXPAVIEngineCheckCallBack@@@Z (Ordinal: 266, Address: 0x3191a)
  • ?SetEventSink@CQQDoctorControler@@QAEJPAUITXCallback@@@Z (Ordinal: 267, Address: 0x31927)
  • ?SetFLoginState@MultiLogin@Util@@YAXHE@Z (Ordinal: 268, Address: 0x18fd9)
  • ?SetFirstStartQQ@Misc@Util@@YAXH@Z (Ordinal: 269, Address: 0x17c6e)
  • ?SetFlagValue@Cfg@Util@@YAHABVCTXStringW@@H@Z (Ordinal: 270, Address: 0x3d3ee)
  • ?SetHwnd@IPCHandler@@YAXIPAUHWND__@@@Z (Ordinal: 271, Address: 0x19065)
  • ?SetIMHwnd@IPCHandler@@YAXPAUHWND__@@@Z (Ordinal: 272, Address: 0x190ff)
  • ?SetIfLoginProcess@MultiLogin@Util@@YAXH@Z (Ordinal: 273, Address: 0x1910c)
  • ?SetLoadPwdFlag@CScanVirus@@QAEXH@Z (Ordinal: 274, Address: 0x36890)
  • ?SetMappingData@IPCHandler@@YAXVCTXStringW@@IPAXI@Z (Ordinal: 275, Address: 0x19119)
  • ?SetPerfOPReportDataForWord@PerfDataReportUtil@@YAXKPA_WKH@Z (Ordinal: 276, Address: 0x196ae)
  • ?SetPerfReportData@PerfDataReport2DC@@YAXK_J@Z (Ordinal: 277, Address: 0x196e3)
  • ?SetPerfReportData@PerfDataReport2DC@@YAXK_JH@Z (Ordinal: 278, Address: 0x19715)
  • ?SetPerfReportDataForBool@PerfDataReportUtil@@YAXPA_WH@Z (Ordinal: 279, Address: 0x1974a)
  • ?SetPerfReportDataForByte@PerfDataReportUtil@@YAXPA_WE@Z (Ordinal: 280, Address: 0x19779)
  • ?SetPerfReportDataForWord@PerfDataReportUtil@@YAXPA_WKH@Z (Ordinal: 281, Address: 0x197a8)
  • ?SetShareInfo@IPCHandler@@YAJVCTXStringW@@PAUITXData@@@Z (Ordinal: 282, Address: 0x191a3)
  • ?SetStat@CQQDoctorControler@@IAEXH@Z (Ordinal: 283, Address: 0x3193e)
  • ?SetThreadId@IPCHandler@@YAXIK@Z (Ordinal: 284, Address: 0x1932e)
  • ?ShortPath@CScanVirus@@IAE?AVCTXStringW@@V2@UtagRECT@@@Z (Ordinal: 285, Address: 0x368a0)
  • ?Show2@MsgBox@Util@@YAHPAUIGFFrame@@PA_W1IPAUITXData@@PAPAU4@@Z (Ordinal: 286, Address: 0x161c2)
  • ?Show@MsgBox@Util@@YAHPAUHWND__@@PAPAUIAFMessageBoxEx@@VCTXStringW@@2H@Z (Ordinal: 287, Address: 0x16282)
  • ?Show@MsgBox@Util@@YAHPAUIGFFrame@@PAPAUIAFMessageBoxEx@@VCTXStringW@@2H@Z (Ordinal: 288, Address: 0x16361)
  • ?Show@MsgBox@Util@@YAHPAUIGFFrame@@PA_W1IPAUITXData@@PAPAU4@@Z (Ordinal: 289, Address: 0x16440)
  • ?Show@MsgBox@Util@@YAHPAUIGFFrame@@VCTXStringW@@1H@Z (Ordinal: 290, Address: 0x164fd)
  • ?ShowAboutDlg@Product@Util@@YAXPAUHWND__@@@Z (Ordinal: 291, Address: 0x198c1)
  • ?ShowBluebar@CScanVirus@@IAEXPA_W0HH@Z (Ordinal: 292, Address: 0x36a83)
  • ?ShowEx@MsgBox@Util@@YAHPAUHWND__@@PA_W1IPAUITXData@@PAPAU4@@Z (Ordinal: 293, Address: 0x165e4)
  • ?ShowScanVirusBox@CScanVirus@@IAEXXZ (Ordinal: 294, Address: 0x36be3)
  • ?ShowUseAgreement@Product@Util@@YAXXZ (Ordinal: 295, Address: 0x198e7)
  • ?StartRepairQQDoctor@CQQDoctorControler@@QAEXXZ (Ordinal: 296, Address: 0x3194b)
  • ?StartScan@CScanVirus@@QAEXXZ (Ordinal: 297, Address: 0x36cee)
  • ?StartScanSilence@CScanVirus@@SAXXZ (Ordinal: 298, Address: 0x2b7a)
  • ?StartUpQQDoctor@QQDoctorHelper@@YAHAAVCTXStringW@@AAU_PROCESS_INFORMATION@@V2@@Z (Ordinal: 299, Address: 0x32662)
  • ?StartVirusScan@CQQDoctorControler@@QAEXXZ (Ordinal: 300, Address: 0x31a43)
  • ?StartupQQDoctor@CScanVirus@@QAEXPAUIGFFrame@@VCTXStringW@@@Z (Ordinal: 301, Address: 0x36d14)
  • ?StartupQQDoctor@CScanVirus@@QAEXVCTXStringW@@@Z (Ordinal: 302, Address: 0x36d76)
  • ?State_Cancel@CScanVirus@@IAEXXZ (Ordinal: 303, Address: 0x36ec5)
  • ?State_CleanningVirus@CScanVirus@@IAEXXZ (Ordinal: 304, Address: 0x37118)
  • ?State_FinishSafe@CScanVirus@@IAEXXZ (Ordinal: 305, Address: 0x3734c)
  • ?State_FirstOpenLoginPanel@CScanVirus@@IAEXXZ (Ordinal: 306, Address: 0x374ff)
  • ?State_InitFailed@CScanVirus@@IAEXXZ (Ordinal: 307, Address: 0x37811)
  • ?State_NeedResetComputer@CScanVirus@@IAEXXZ (Ordinal: 308, Address: 0x37d0c)
  • ?State_PwdLoadFail@CScanVirus@@IAEXXZ (Ordinal: 309, Address: 0x37e8b)
  • ?State_RepairFail@CScanVirus@@IAEXXZ (Ordinal: 310, Address: 0x381fb)
  • ?State_RepairSuccess@CScanVirus@@IAEXXZ (Ordinal: 311, Address: 0x38585)
  • ?State_Repairing@CScanVirus@@IAEXXZ (Ordinal: 312, Address: 0x388aa)
  • ?State_ScanningVirus@CScanVirus@@IAEXXZ (Ordinal: 313, Address: 0x38b03)
  • ?State_VirusFinishUnSafe@CScanVirus@@IAEXXZ (Ordinal: 314, Address: 0x38d6f)
  • ?StopRepairQQDoctor@CQQDoctorControler@@QAEXXZ (Ordinal: 315, Address: 0x31a61)
  • ?StopVirusScan@CQQDoctorControler@@QAEXXZ (Ordinal: 316, Address: 0x31a6d)
  • ?SyncScanState@CScanVirus@@QAEHPAUIGFFrame@@KPAUITXCallback@@PAHV?$CTXComPtr@UIGFButton@@@ATL@@3@Z (Ordinal: 317, Address: 0x39084)
  • ?UnInit@CQQDoctorControler@@QAEHXZ (Ordinal: 318, Address: 0x31f9a)
  • ?UnInitBluebar@CScanVirus@@IAEXXZ (Ordinal: 319, Address: 0x392a6)
  • ?UnInitScanWnd@CScanVirus@@IAEXXZ (Ordinal: 320, Address: 0x392ff)
  • ?UnloadLib@CQQDoctorControler@@QAEHXZ (Ordinal: 321, Address: 0x31ff4)
  • ?ViewVirusDetail@CScanVirus@@IAEXXZ (Ordinal: 322, Address: 0x2b7a)
  • ?WaitForMessage@LoginMessage@@YAHIAAUtagMSG@@PAHK@Z (Ordinal: 323, Address: 0x19356)
  • ?WinExecInstantReturn@QQUPDATECENTER@@YAIPB_WI@Z (Ordinal: 324, Address: 0x21ea5)
  • ?WriteMultiLoginDataToFileMapping@MultiLogin@Util@@YAHVCTXStringW@@AAUsMultiAccountLoginInfo@12@@Z (Ordinal: 325, Address: 0x193da)
  • ?WriteRegInitFail@CScanVirus@@IAEHH@Z (Ordinal: 326, Address: 0x394ed)
  • ?auMbstoWcsz@QQUPDATECENTER@@YAHPA_WPBDI@Z (Ordinal: 327, Address: 0x220eb)
  • ?auWcszToMbs@QQUPDATECENTER@@YAHPADPB_WI@Z (Ordinal: 328, Address: 0x22121)
  • ?s_AllQQDoctorControllers@CQQDoctorControler@@2V?$vector@PAVCQQDoctorControler@@V?$allocator@PAVCQQDoctorControler@@@std@@@std@@A (Ordinal: 329, Address: 0x5e544)
  • ?xxx@QQUPDATECENTER@@YAXXZ (Ordinal: 330, Address: 0x2b7a)
  • DllCanUnloadNow (Ordinal: 331, Address: 0x7046)
  • DllGetClassObject (Ordinal: 332, Address: 0x705a)
  • DllRegisterServer (Ordinal: 333, Address: 0x708e)
  • DllUnregisterServer (Ordinal: 334, Address: 0x709b)

Imported DLLs & Functions

ADVAPI32.dll
  • AdjustTokenPrivileges (Address: 0x501d0028)
  • LookupPrivilegeValueW (Address: 0x501d002c)
  • OpenProcessToken (Address: 0x501d0024)
  • RegCloseKey (Address: 0x501d0000)
  • RegCreateKeyExW (Address: 0x501d0004)
  • RegDeleteKeyW (Address: 0x501d0010)
  • RegDeleteValueW (Address: 0x501d0008)
  • RegEnumKeyExW (Address: 0x501d0014)
  • RegOpenKeyExW (Address: 0x501d0020)
  • RegQueryInfoKeyW (Address: 0x501d001c)
  • RegQueryValueExW (Address: 0x501d0018)
  • RegSetValueExW (Address: 0x501d000c)
api-ms-win-crt-convert-l1-1-0.dll
  • _wtoi (Address: 0x501d0764)
  • wcstol (Address: 0x501d0760)
api-ms-win-crt-heap-l1-1-0.dll
  • _callnewh (Address: 0x501d0774)
  • _recalloc (Address: 0x501d0780)
  • calloc (Address: 0x501d077c)
  • free (Address: 0x501d0770)
  • malloc (Address: 0x501d076c)
  • realloc (Address: 0x501d0778)
api-ms-win-crt-runtime-l1-1-0.dll
  • __p___argc (Address: 0x501d0790)
  • __p___wargv (Address: 0x501d078c)
  • _cexit (Address: 0x501d07ac)
  • _configure_narrow_argv (Address: 0x501d0794)
  • _crt_atexit (Address: 0x501d07a8)
  • _errno (Address: 0x501d0788)
  • _execute_onexit_table (Address: 0x501d07a4)
  • _initialize_narrow_environment (Address: 0x501d0798)
  • _initialize_onexit_table (Address: 0x501d079c)
  • _initterm (Address: 0x501d07b0)
  • _initterm_e (Address: 0x501d07b4)
  • _invalid_parameter_noinfo (Address: 0x501d07b8)
  • _invalid_parameter_noinfo_noreturn (Address: 0x501d07bc)
  • _register_onexit_function (Address: 0x501d07a0)
  • _seh_filter_dll (Address: 0x501d07c0)
api-ms-win-crt-stdio-l1-1-0.dll
  • __stdio_common_vsnwprintf_s (Address: 0x501d07c8)
api-ms-win-crt-string-l1-1-0.dll
  • _stricmp (Address: 0x501d07d8)
  • _wcslwr (Address: 0x501d07e8)
  • _wcslwr_s (Address: 0x501d07d0)
  • _wcsnicmp (Address: 0x501d07dc)
  • strlen (Address: 0x501d07e4)
  • strncpy_s (Address: 0x501d07d4)
  • wcscat_s (Address: 0x501d07f8)
  • wcscmp (Address: 0x501d07fc)
  • wcscpy_s (Address: 0x501d07f4)
  • wcslen (Address: 0x501d07ec)
  • wcsncmp (Address: 0x501d07e0)
  • wcsncpy_s (Address: 0x501d07f0)
api-ms-win-crt-time-l1-1-0.dll
  • _mktime64 (Address: 0x501d0804)
  • _time64 (Address: 0x501d0808)
api-ms-win-crt-utility-l1-1-0.dll
  • rand (Address: 0x501d0810)
  • srand (Address: 0x501d0814)
Common.dll
  • (Address: 0x501d0094)
  • (Address: 0x501d01c0)
  • ??0CCmdCodecBase@@QAE@XZ (Address: 0x501d0174)
  • ??0CFmtString@@QAE@XZ (Address: 0x501d00ec)
  • ??0CHttpClient@@QAE@XZ (Address: 0x501d00a8)
  • ??0CTXAutoSpinLock@Util@@QAE@AAVCTXSpinLock@1@@Z (Address: 0x501d0164)
  • ??0CTXBSTR@@QAE@ABV0@@Z (Address: 0x501d013c)
  • ??0CTXBSTR@@QAE@ABVCTXStringW@@@Z (Address: 0x501d00e0)
  • ??0CTXBSTR@@QAE@PB_W@Z (Address: 0x501d0078)
  • ??0CTXBSTR@@QAE@XZ (Address: 0x501d0074)
  • ??0CTXCommPack@@QAE@XZ (Address: 0x501d0214)
  • ??0CTXHttpDownloadSink@@IAE@XZ (Address: 0x501d01d4)
  • ??0CTXSpinLock@Util@@QAE@XZ (Address: 0x501d0154)
  • ??0CTXStringA@@QAE@PBD@Z (Address: 0x501d0128)
  • ??0CTXStringA@@QAE@PBDH@Z (Address: 0x501d0044)
  • ??0CTXStringA@@QAE@UtagUTF8@@PB_WH@Z (Address: 0x501d012c)
  • ??0CTXStringA@@QAE@XZ (Address: 0x501d00bc)
  • ??0CTXStringW@@QAE@ABV0@@Z (Address: 0x501d0050)
  • ??0CTXStringW@@QAE@ABVCTXBSTR@@@Z (Address: 0x501d00fc)
  • ??0CTXStringW@@QAE@PA_W@Z (Address: 0x501d0054)
  • ??0CTXStringW@@QAE@PB_W@Z (Address: 0x501d00c8)
  • ??0CTXStringW@@QAE@PB_WH@Z (Address: 0x501d0284)
  • ??0CTXStringW@@QAE@UtagUTF8@@PBDH@Z (Address: 0x501d0058)
  • ??0CTXStringW@@QAE@XZ (Address: 0x501d02ec)
  • ??0CTXThreadModel@@IAE@XZ (Address: 0x501d02dc)
  • ??0CTXTime@@QAE@_J@Z (Address: 0x501d0314)
  • ??0CTXTime@@QAE@ABV0@@Z (Address: 0x501d0318)
  • ??0CTXTime@@QAE@HHHHHHH@Z (Address: 0x501d031c)
  • ??0EcdsaKey@Ecdsa@@QAE@W4_EccType@01@@Z (Address: 0x501d02a0)
  • ??0EcdsaSignature@Ecdsa@@QAE@XZ (Address: 0x501d02ac)
  • ??1CCmdCodecBase@@UAE@XZ (Address: 0x501d0178)
  • ??1CFmtString@@QAE@XZ (Address: 0x501d00f0)
  • ??1CHttpClient@@QAE@XZ (Address: 0x501d00ac)
  • ??1CTXAutoSpinLock@Util@@QAE@XZ (Address: 0x501d0168)
  • ??1CTXBSTR@@QAE@XZ (Address: 0x501d0080)
  • ??1CTXCommPack@@UAE@XZ (Address: 0x501d0218)
  • ??1CTXHttpDownloadSink@@UAE@XZ (Address: 0x501d01d8)
  • ??1CTXSpinLock@Util@@QAE@XZ (Address: 0x501d0158)
  • ??1CTXStringA@@QAE@XZ (Address: 0x501d0048)
  • ??1CTXStringW@@QAE@XZ (Address: 0x501d035c)
  • ??1CTXThreadModel@@MAE@XZ (Address: 0x501d02e0)
  • ??1EcdsaKey@Ecdsa@@QAE@XZ (Address: 0x501d02a4)
  • ??1EcdsaSignature@Ecdsa@@QAE@XZ (Address: 0x501d02b0)
  • ??4CTXBSTR@@QAEAAV0@ABV0@@Z (Address: 0x501d0140)
  • ??4CTXBSTR@@QAEAAV0@ABVCTXStringW@@@Z (Address: 0x501d01b8)
  • ??4CTXBSTR@@QAEAAV0@PB_W@Z (Address: 0x501d007c)
  • ??4CTXStringW@@QAEAAV0@ABV0@@Z (Address: 0x501d005c)
  • ??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z (Address: 0x501d0244)
  • ??4CTXStringW@@QAEAAV0@PA_W@Z (Address: 0x501d0200)
  • ??4CTXStringW@@QAEAAV0@PB_W@Z (Address: 0x501d0364)
  • ??4CTXTime@@QAEAAV0@_J@Z (Address: 0x501d0320)
  • ??8@YA_NABVCTXStringW@@PB_W@Z (Address: 0x501d0100)
  • ??8@YA_NPA_WABVCTXBSTR@@@Z (Address: 0x501d0148)
  • ??8@YA_NPBDABVCTXStringA@@@Z (Address: 0x501d0130)
  • ??8CTXBSTR@@QBE_NABV0@@Z (Address: 0x501d01bc)
  • ??8CTXBSTR@@QBE_NPA_W@Z (Address: 0x501d0144)
  • ??8CTXBSTR@@QBE_NPB_W@Z (Address: 0x501d0110)
  • ??9@YA_NABVCTXStringW@@PB_W@Z (Address: 0x501d0354)
  • ??9CTXBSTR@@QBE_NPB_W@Z (Address: 0x501d008c)
  • ??ACTXStringW@@QBE_WH@Z (Address: 0x501d025c)
  • ??BCTXBSTR@@QBEPA_WXZ (Address: 0x501d0084)
  • ??BCTXStringA@@QBEPBDXZ (Address: 0x501d02bc)
  • ??BCTXStringW@@QBEPB_WXZ (Address: 0x501d003c)
  • ??GCTXTime@@QBE?AVCTXTimeSpan@@V0@@Z (Address: 0x501d0324)
  • ??H@YA?AVCTXStringW@@ABV0@0@Z (Address: 0x501d0138)
  • ??H@YA?AVCTXStringW@@ABV0@PB_W@Z (Address: 0x501d00cc)
  • ??H@YA?AVCTXStringW@@PB_WABV0@@Z (Address: 0x501d0060)
  • ??ICTXBSTR@@QAEPAPA_WXZ (Address: 0x501d0088)
  • ??M@YA_NABVCTXStringA@@0@Z (Address: 0x501d00c0)
  • ??M@YA_NABVCTXStringW@@0@Z (Address: 0x501d0104)
  • ??PCTXTime@@QBE_NV0@@Z (Address: 0x501d0328)
  • ??YCTXStringW@@QAEAAV0@_W@Z (Address: 0x501d029c)
  • ??YCTXStringW@@QAEAAV0@ABV0@@Z (Address: 0x501d01c4)
  • ??YCTXStringW@@QAEAAV0@PB_W@Z (Address: 0x501d01a8)
  • ?AddInfo@CHttpClient@@QAEHABVCTXStringW@@0@Z (Address: 0x501d01e4)
  • ?AddRef@CCmdCodecBase@@MAGKXZ (Address: 0x501d0184)
  • ?AnsiToUnicode@Convert@Util@@YA_NAAVCTXStringW@@PBDH@Z (Address: 0x501d02c4)
  • ?Append@CTXStringW@@QAEXABV1@@Z (Address: 0x501d0208)
  • ?AppendFormat@CTXStringW@@QAAXPB_WZZ (Address: 0x501d01d0)
  • ?ApplyProxyInfoToHttp@Network@Util@@YAXXZ (Address: 0x501d02f4)
  • ?CancelDownload@CHttpClient@@QAEXXZ (Address: 0x501d02e8)
  • ?CodeBuffer@CCmdCodecBase@@IAEXPBD@Z (Address: 0x501d01a4)
  • ?CodeBufferLenHead@CCmdCodecBase@@IAEXPBDW4CMDFIELDTYPE@@@Z (Address: 0x501d0278)
  • ?CodeNumber@CCmdCodecBase@@IAEXPBDW4TX_DATA_TYPE@@@Z (Address: 0x501d01a0)
  • ?CodeTXData@CCmdCodecBase@@UAGJPAUITXData@@PAPAUITXBuffer@@@Z (Address: 0x501d0188)
  • ?CollateNoCase@CTXStringW@@QBEHPB_W@Z (Address: 0x501d02c0)
  • ?CombineQNC@FS@@YA?AVCTXStringW@@PB_W0@Z (Address: 0x501d01c8)
  • ?Compare@CTXStringW@@QBEHPB_W@Z (Address: 0x501d0068)
  • ?CompareNoCase@CTXStringW@@QBEHPB_W@Z (Address: 0x501d020c)
  • ?ConvertToPureFile@FS@@YA?AVCTXStringW@@PB_W@Z (Address: 0x501d0230)
  • ?ConvertXMLStrToTXData@Convert@Util@@YAHPA_WPAPA_WPAUITXData@@0@Z (Address: 0x501d0090)
  • ?CopyTXDataField@Data@Util@@YAHPAUITXDataRead@@PAUITXData@@PBD2@Z (Address: 0x501d016c)
  • ?CRC32@@YAKKPBEH@Z (Address: 0x501d0358)
  • ?CreateDirectoryW@FS@@YAHPB_W@Z (Address: 0x501d0228)
  • ?CreateFileW@FS@@YAHPB_WKPAPAUITXFile@@@Z (Address: 0x501d019c)
  • ?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z (Address: 0x501d0198)
  • ?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z (Address: 0x501d009c)
  • ?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z (Address: 0x501d00a0)
  • ?Decode16@Encode@Util@@YAHABVCTXStringW@@AAVCTXBuffer@@@Z (Address: 0x501d034c)
  • ?DecodeBuffer@CCmdCodecBase@@UAGJPAUITXBuffer@@PAPAUITXData@@PAU3@@Z (Address: 0x501d018c)
  • ?DecodeBufferLenHead@CCmdCodecBase@@IAEXPBDW4CMDFIELDTYPE@@@Z (Address: 0x501d0280)
  • ?DecodeNumber@CCmdCodecBase@@IAEXPBDW4TX_DATA_TYPE@@@Z (Address: 0x501d027c)
  • ?DeleteFileW@FS@@YAHPB_W@Z (Address: 0x501d02c8)
  • ?Detach@CTXBSTR@@QAEPA_WXZ (Address: 0x501d0248)
  • ?DoFormat@CFmtString@@QAEPB_WPB_W@Z (Address: 0x501d00f4)
  • ?Download@CHttpClient@@QAEHPB_WPAU_SYSTEMTIME@@0HPA_J@Z (Address: 0x501d01e0)
  • ?DownloadToBuffer@CHttpClient@@QAEHPB_W_KPAVIHttpClientSink_@@@Z (Address: 0x501d00b0)
  • ?Empty@CTXBSTR@@QAEXXZ (Address: 0x501d0308)
  • ?Empty@CTXStringW@@QAEXXZ (Address: 0x501d01b0)
  • ?Encode16@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@@Z (Address: 0x501d0348)
  • ?EncodeHash@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@@Z (Address: 0x501d0274)
  • ?EraseAsyncCallback@TXTimer@@YAHPAUITXAsyncCallback@@I@Z (Address: 0x501d0294)
  • ?EraseIdleCallback@TXTimer@@YAHPAUITXIdleCallback@@I@Z (Address: 0x501d0340)
  • ?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z (Address: 0x501d0118)
  • ?Find@CTXStringA@@QBEHPBDH@Z (Address: 0x501d004c)
  • ?Find@CTXStringW@@QBEH_WH@Z (Address: 0x501d00d4)
  • ?Find@CTXStringW@@QBEHPB_WH@Z (Address: 0x501d006c)
  • ?Format@CTXStringA@@QAAXPBDZZ (Address: 0x501d00c4)
  • ?Format@CTXStringW@@QAAXPB_WZZ (Address: 0x501d0034)
  • ?GenerateEx@CComputerIDGenerator@@QAEHPAE@Z (Address: 0x501d0350)
  • ?GetAt@CTXStringW@@QBE_WH@Z (Address: 0x501d0204)
  • ?GetBSTR@CTXStringW@@QBEPA_WXZ (Address: 0x501d0038)
  • ?GetBSTRPtr@CTXStringW@@QAEPAPA_WXZ (Address: 0x501d0210)
  • ?GetBuffer@CTXStringW@@QAEPA_WH@Z (Address: 0x501d0254)
  • ?GetBuffer@CTXStringW@@QAEPA_WXZ (Address: 0x501d02f8)
  • ?GetByte@CTXCommPack@@QAEHAAEH@Z (Address: 0x501d0220)
  • ?GetConfigFieldData@ModuleConfig@@YAJPB_W0PAPAUITXDataRead@@@Z (Address: 0x501d023c)
  • ?GetDate@NLS@@YAHAAVCTXStringW@@PBU_SYSTEMTIME@@KPB_W@Z (Address: 0x501d0180)
  • ?GetDay@CTXTime@@QBEHXZ (Address: 0x501d0338)
  • ?GetDays@CTXTimeSpan@@QBE_JXZ (Address: 0x501d030c)
  • ?GetDownloadBuffer@CHttpClient@@QBEHPAPBEPAI@Z (Address: 0x501d00b8)
  • ?GetDownloadedFilePath@CHttpClient@@QAEHAAVCTXStringW@@@Z (Address: 0x501d02e4)
  • ?GetDWord@CTXCommPack@@QAEHAAKHH@Z (Address: 0x501d0224)
  • ?GetFileHash@FS@Util@@YAHPB_WAAVCTXBuffer@@AAK@Z (Address: 0x501d02d0)
  • ?GetFileSystemDirectory@FS@@YAHPB_WAAVCTXStringW@@@Z (Address: 0x501d017c)
  • ?GetLCID@NLS@@YAKXZ (Address: 0x501d0250)
  • ?GetLength@CTXStringW@@QBEHXZ (Address: 0x501d00d0)
  • ?GetLoggerWnd@TXLog@@YAPAUHWND__@@XZ (Address: 0x501d0098)
  • ?GetMemoryUsage@Sys@Util@@YAXAAK0@Z (Address: 0x501d0150)
  • ?GetMonth@CTXTime@@QBEHXZ (Address: 0x501d0334)
  • ?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z (Address: 0x501d00a4)
  • ?GetRegulatedTime@Time@Util@@YA_NAA_J@Z (Address: 0x501d0124)
  • ?GetStatusCode@CHttpClient@@QAEIXZ (Address: 0x501d00b4)
  • ?GetString@CTXStringA@@QBEPBDXZ (Address: 0x501d0134)
  • ?GetString@CTXStringW@@QBEPB_WXZ (Address: 0x501d0064)
  • ?GetTickCount@CTXTime@@SA?AV1@XZ (Address: 0x501d0310)
  • ?GetTime@CTXTime@@QBE_JXZ (Address: 0x501d032c)
  • ?GetTXDataBuf@Data@Util@@YAHPAUITXDataRead@@PBDAAVCTXBuffer@@@Z (Address: 0x501d024c)
  • ?GetTXDataStr@Data@Util@@YAHPAUITXDataRead@@PBDAAVCTXStringW@@@Z (Address: 0x501d00e4)
  • ?GetYear@CTXTime@@QBEHXZ (Address: 0x501d0330)
  • ?InitDownloadTempDirectory@CHttpClient@@SAXPB_W@Z (Address: 0x501d02f0)
  • ?Insert@CTXStringW@@QAEHHPB_W@Z (Address: 0x501d02fc)
  • ?IsDirectoryExist@FS@@YAHPB_W@Z (Address: 0x501d02cc)
  • ?IsEmpty@CTXBSTR@@QAEHXZ (Address: 0x501d010c)
  • ?IsEmpty@CTXStringW@@QBE_NXZ (Address: 0x501d01ac)
  • ?IsFileExist@FS@@YAHPB_W@Z (Address: 0x501d0360)
  • ?IsFileSystemFile@FS@@YAHPB_W@Z (Address: 0x501d022c)
  • ?Left@CTXStringW@@QBE?AV1@H@Z (Address: 0x501d01b4)
  • ?Length@CTXBSTR@@QBEIXZ (Address: 0x501d0304)
  • ?LoadXmlByName@FS@Util@@YAHPB_WPAPAUIXMLDOMDocument@@@Z (Address: 0x501d011c)
  • ?Lock@CTXSpinLock@Util@@QAEXXZ (Address: 0x501d015c)
  • ?LogTaskGetHungData@Misc@Util@@YAXAAK000@Z (Address: 0x501d014c)
  • ?MakeLower@CTXStringW@@QAEAAV1@XZ (Address: 0x501d0070)
  • ?MakeUpper@CTXStringW@@QAEAAV1@XZ (Address: 0x501d0108)
  • ?MD5_Final@@YAXPAEPAUMD5state_st@@@Z (Address: 0x501d0270)
  • ?MD5_Init@@YAXPAUMD5state_st@@@Z (Address: 0x501d0268)
  • ?MD5_Update@@YAXPAUMD5state_st@@PBEK@Z (Address: 0x501d026c)
  • ?Mid@CTXStringW@@QBE?AV1@H@Z (Address: 0x501d00d8)
  • ?Mid@CTXStringW@@QBE?AV1@HH@Z (Address: 0x501d00dc)
  • ?MoveDownloadFile@CHttpClient@@QAEHPB_WH@Z (Address: 0x501d0368)
  • ?oi_symmetry_decrypt2@@YAHPBEH0PAEPAH@Z (Address: 0x501d0238)
  • ?oi_symmetry_encrypt2@@YAXPBEH0PAEPAH@Z (Address: 0x501d0234)
  • ?OnConnected@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@@Z (Address: 0x501d01e8)
  • ?OnConnecting@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@PB_W@Z (Address: 0x501d01ec)
  • ?OnDownloadStart@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@KK@Z (Address: 0x501d01f0)
  • ?OnError@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@K@Z (Address: 0x501d01f4)
  • ?OnProgress@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@KK@Z (Address: 0x501d01f8)
  • ?OnRedirected@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@PB_W@Z (Address: 0x501d01fc)
  • ?ParseDateTime@Time@Util@@YAHAAVCTXStringW@@AAU_SYSTEMTIME@@@Z (Address: 0x501d0120)
  • ?PropertyStr@CFmtString@@QAEHPB_W0@Z (Address: 0x501d00e8)
  • ?QueryInterface@CCmdCodecBase@@MAGJABU_GUID@@PAPAX@Z (Address: 0x501d0190)
  • ?Random@Sys@Util@@YAHXZ (Address: 0x501d0298)
  • ?Release@CCmdCodecBase@@MAGKXZ (Address: 0x501d0194)
  • ?ReleaseBuffer@CTXStringW@@QAEXH@Z (Address: 0x501d0258)
  • ?Remove@CTXStringW@@QAEH_W@Z (Address: 0x501d0300)
  • ?Replace@CTXStringW@@QAEHPB_W0@Z (Address: 0x501d01cc)
  • ?ReverseFind@CTXStringW@@QBEH_W@Z (Address: 0x501d0260)
  • ?Right@CTXStringW@@QBE?AV1@H@Z (Address: 0x501d0240)
  • ?SafeLoadLibrary@Sys@Util@@YAPAUHINSTANCE__@@PB_W@Z (Address: 0x501d028c)
  • ?SafeLoadLibrary@Sys@Util@@YAPAUHINSTANCE__@@PBD@Z (Address: 0x501d0288)
  • ?SetAsyncCallback@TXTimer@@YAHP6GXPAX@Z0PAK@Z (Address: 0x501d0344)
  • ?SetAsyncCallback@TXTimer@@YAHPAUITXAsyncCallback@@I@Z (Address: 0x501d0290)
  • ?SetBufferIn@CTXCommPack@@QAEXAAVCTXBuffer@@H@Z (Address: 0x501d021c)
  • ?SetIdleCallback@TXTimer@@YAHPAUITXIdleCallback@@I@Z (Address: 0x501d033c)
  • ?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z (Address: 0x501d0170)
  • ?SetPublicKey@EcdsaKey@Ecdsa@@QAEXPBEI@Z (Address: 0x501d02a8)
  • ?SetSignature@EcdsaSignature@Ecdsa@@QAE_NPBEI@Z (Address: 0x501d02b4)
  • ?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z (Address: 0x501d0114)
  • ?SetUIInterface@CHttpClient@@QAEXPAVCTXHttpDownloadSink@@@Z (Address: 0x501d01dc)
  • ?StartThread@CTXThreadModel@@QAEHXZ (Address: 0x501d02d4)
  • ?StopThread@CTXThreadModel@@QAEHK@Z (Address: 0x501d02d8)
  • ?TrimLeft@CTXStringW@@QAEAAV1@PB_W@Z (Address: 0x501d0264)
  • ?TXLoadString@@YAPB_WPB_W0@Z (Address: 0x501d00f8)
  • ?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z (Address: 0x501d0040)
  • ?UnLock@CTXSpinLock@Util@@QAEXXZ (Address: 0x501d0160)
  • ?VerifyBufferData@OpenSSLEcdsa@Ecdsa@@QBE_NAAVEcdsaKey@2@PBEIABVEcdsaSignature@2@@Z (Address: 0x501d02b8)
GDI32.dll
  • CreateCompatibleDC (Address: 0x501d0380)
  • CreateDIBSection (Address: 0x501d0378)
  • DeleteDC (Address: 0x501d037c)
  • DeleteObject (Address: 0x501d0374)
  • SelectObject (Address: 0x501d0370)
GF.dll
  • ??0CDPIScaleIgnoreHelper@@QAE@XZ (Address: 0x501d03dc)
  • ??0CDPIScaleIgnoreResetHelper@@QAE@XZ (Address: 0x501d0390)
  • ??1CDPIScaleIgnoreHelper@@QAE@XZ (Address: 0x501d03d4)
  • ??1CDPIScaleIgnoreResetHelper@@QAE@XZ (Address: 0x501d0394)
  • ?CreateBitmapFromFile@GF@Util@@YAPAUHGBITMAP__@@ABVCTXStringW@@_N1@Z (Address: 0x501d03cc)
  • ?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z (Address: 0x501d03c0)
  • ?FreeData@Metadata@Util@@YAJAAPA_W@Z (Address: 0x501d03d8)
  • ?Get@Metadata@Util@@YAJPAUITXData@@PADPAH@Z (Address: 0x501d0398)
  • ?Get@Metadata@Util@@YAJPAUITXData@@PADPAPA_W@Z (Address: 0x501d03a8)
  • ?GetDPIScale@DPI@GF@Util@@YAMXZ (Address: 0x501d03d0)
  • ?HandleMessageScale@DPI@GF@Util@@YAXPAUtagBaseArg@@@Z (Address: 0x501d038c)
  • ?IsScaleIgnore@DPI@GF@Util@@YA_NXZ (Address: 0x501d0388)
  • ?IsValidGFElement@GF@Util@@YAHPAUIGFElement@@@Z (Address: 0x501d03ac)
  • ?LightInLightOut@GF@Util@@YAJPAUIGFFrame@@EEKDKHKKPAUIGFAnimationEvent@@@Z (Address: 0x501d03b0)
  • ?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@PAUITXCore@@H@Z (Address: 0x501d03c4)
  • ?ScaleSIZE@DPI@GF@Util@@YAXPAUtagSIZE@@@Z (Address: 0x501d03c8)
  • ?ScaleX@DPI@GF@Util@@YAHH@Z (Address: 0x501d03bc)
  • ?SlideFrame@GF@Util@@YAJPAUIGFFrame@@VCRect@@1KDKHKKPAUIGFAnimationEvent@@@Z (Address: 0x501d03b4)
  • ?TransMd2GFElement@Metadata@Util@@YAJPAUITXData@@PAPAUIGFElement@@PA_W@Z (Address: 0x501d03a0)
  • ?UnscaleLONG@DPI@GF@Util@@YAXPAJ@Z (Address: 0x501d03a4)
  • ?UnscalePOINT@DPI@GF@Util@@YAXPAUtagPOINT@@@Z (Address: 0x501d039c)
  • ?UnscaleSIZE@DPI@GF@Util@@YAXPAUtagSIZE@@@Z (Address: 0x501d03b8)
KERNEL32.dll
  • CloseHandle (Address: 0x501d0524)
  • CopyFileW (Address: 0x501d0450)
  • CreateDirectoryW (Address: 0x501d0464)
  • CreateEventW (Address: 0x501d0410)
  • CreateFileMappingW (Address: 0x501d0494)
  • CreateFileW (Address: 0x501d045c)
  • CreateMutexW (Address: 0x501d0528)
  • CreateProcessW (Address: 0x501d046c)
  • CreateThread (Address: 0x501d040c)
  • DecodePointer (Address: 0x501d04c0)
  • DeleteCriticalSection (Address: 0x501d04dc)
  • EncodePointer (Address: 0x501d04bc)
  • EnterCriticalSection (Address: 0x501d04d0)
  • FindClose (Address: 0x501d0514)
  • FindFirstFileW (Address: 0x501d0518)
  • FindResourceW (Address: 0x501d04f8)
  • FormatMessageW (Address: 0x501d043c)
  • FreeLibrary (Address: 0x501d04c4)
  • GetCommandLineW (Address: 0x501d04b8)
  • GetCurrentProcess (Address: 0x501d0498)
  • GetCurrentProcessId (Address: 0x501d0510)
  • GetCurrentThreadId (Address: 0x501d049c)
  • GetExitCodeThread (Address: 0x501d0404)
  • GetFileAttributesW (Address: 0x501d0454)
  • GetFileSize (Address: 0x501d0480)
  • GetFullPathNameW (Address: 0x501d0460)
  • GetLastError (Address: 0x501d04b4)
  • GetModuleFileNameW (Address: 0x501d04f0)
  • GetModuleHandleW (Address: 0x501d04f4)
  • GetPrivateProfileIntW (Address: 0x501d048c)
  • GetPrivateProfileStringW (Address: 0x501d03fc)
  • GetProcAddress (Address: 0x501d04c8)
  • GetShortPathNameW (Address: 0x501d0484)
  • GetSystemDirectoryW (Address: 0x501d0424)
  • GetSystemInfo (Address: 0x501d0400)
  • GetSystemTimeAsFileTime (Address: 0x501d04a0)
  • GetThreadLocale (Address: 0x501d0500)
  • GetTickCount (Address: 0x501d04a4)
  • GetVersionExW (Address: 0x501d0530)
  • GetWindowsDirectoryW (Address: 0x501d0468)
  • GlobalMemoryStatusEx (Address: 0x501d050c)
  • InitializeCriticalSection (Address: 0x501d041c)
  • InitializeCriticalSectionAndSpinCount (Address: 0x501d04d8)
  • InitializeSListHead (Address: 0x501d03f0)
  • InterlockedDecrement (Address: 0x501d04b0)
  • InterlockedExchange (Address: 0x501d0508)
  • InterlockedIncrement (Address: 0x501d04ac)
  • IsBadReadPtr (Address: 0x501d0448)
  • IsBadWritePtr (Address: 0x501d0444)
  • IsDebuggerPresent (Address: 0x501d03ec)
  • IsProcessorFeaturePresent (Address: 0x501d03f4)
  • LeaveCriticalSection (Address: 0x501d04d4)
  • LoadLibraryA (Address: 0x501d0428)
  • LoadLibraryExW (Address: 0x501d04ec)
  • LoadLibraryW (Address: 0x501d052c)
  • LoadResource (Address: 0x501d04e0)
  • lstrcatW (Address: 0x501d0470)
  • lstrcmpiW (Address: 0x501d04e8)
  • lstrcpynW (Address: 0x501d0474)
  • lstrlenW (Address: 0x501d042c)
  • MapViewOfFile (Address: 0x501d0534)
  • MoveFileExA (Address: 0x501d053c)
  • MoveFileExW (Address: 0x501d044c)
  • MultiByteToWideChar (Address: 0x501d04fc)
  • OpenFileMappingW (Address: 0x501d0490)
  • OpenProcess (Address: 0x501d0434)
  • OutputDebugStringW (Address: 0x501d03e8)
  • QueryPerformanceCounter (Address: 0x501d04a8)
  • RaiseException (Address: 0x501d04cc)
  • ReadFile (Address: 0x501d0438)
  • ReleaseMutex (Address: 0x501d051c)
  • ResetEvent (Address: 0x501d0414)
  • SetEndOfFile (Address: 0x501d047c)
  • SetEvent (Address: 0x501d0418)
  • SetFileAttributesW (Address: 0x501d0458)
  • SetFilePointer (Address: 0x501d0478)
  • SetThreadLocale (Address: 0x501d0504)
  • SetUnhandledExceptionFilter (Address: 0x501d03f8)
  • SizeofResource (Address: 0x501d04e4)
  • Sleep (Address: 0x501d0420)
  • TerminateProcess (Address: 0x501d0430)
  • TerminateThread (Address: 0x501d0408)
  • UnhandledExceptionFilter (Address: 0x501d03e4)
  • UnmapViewOfFile (Address: 0x501d0538)
  • WaitForSingleObject (Address: 0x501d0520)
  • WideCharToMultiByte (Address: 0x501d0440)
  • WritePrivateProfileStringW (Address: 0x501d0488)
KernelUtil.dll
  • ??0CDRStrCodecBase@@QAE@XZ (Address: 0x501d05a0)
  • ??0CSystemIndexConvert@Misc@Util@@QAE@XZ (Address: 0x501d0568)
  • ??1CDRStrCodecBase@@UAE@XZ (Address: 0x501d059c)
  • ??1CSystemIndexConvert@Misc@Util@@UAE@XZ (Address: 0x501d0564)
  • ?AddRef@CDRStrCodecBase@@MAGKXZ (Address: 0x501d0590)
  • ?DataReport@DataReport2@Util@@YAXKKKPA_W0H@Z (Address: 0x501d05c0)
  • ?DataReportSync@TdwDataReport@Util@@YAXPAUITXData@@@Z (Address: 0x501d05a4)
  • ?DRCodecStr@CDRStrCodecBase@@UAGJEPAUITXData@@PAPA_W@Z (Address: 0x501d058c)
  • ?GetFaceshopFaceId@Contact@Util@@YAKK@Z (Address: 0x501d0580)
  • ?GetGlobalSysDir@Sys@Util@@YA?AVCTXStringW@@XZ (Address: 0x501d0544)
  • ?GetHttpDataReportURL@Misc@Util@@YAHPAPA_W@Z (Address: 0x501d0550)
  • ?GetMajorVer@Version@@YAEXZ (Address: 0x501d0598)
  • ?GetMinorVer@Version@@YAEXZ (Address: 0x501d0594)
  • ?GetNewIndex@CSystemIndexConvert@Misc@Util@@QAEGG@Z (Address: 0x501d0560)
  • ?GetProgramBinDir@Sys@Util@@YA?AVCTXStringW@@V3@@Z (Address: 0x501d0548)
  • ?GetPubNo@Version@@YAKXZ (Address: 0x501d0554)
  • ?GetRegistryData@NewRegistry@@YAHPAUITXCore@@PB_WW4NEW_REGISTRY_TYPE@1@PAPAUITXData@@@Z (Address: 0x501d05b4)
  • ?GetScene@PerfScene@@YA?BV?$bitset@$0N@@std@@XZ (Address: 0x501d05c8)
  • ?GetSelfUin@Contact@Util@@YAKXZ (Address: 0x501d05bc)
  • ?GetStatus@Contact@Util@@YAGKPAUITXIMContactStatusMgr@@@Z (Address: 0x501d057c)
  • ?GetVersionExW@Version@@YAXAAUtagVersionInfo@1@@Z (Address: 0x501d05b8)
  • ?IsMobileGamePubAcc@PubAcc@Util@@YAHK@Z (Address: 0x501d055c)
  • ?IsMobileTerminal@Contact@Util@@YAHK@Z (Address: 0x501d0574)
  • ?IsOnline@Contact@Util@@YAHK@Z (Address: 0x501d0578)
  • ?IsQQMiniGamePubAcc@PubAcc@Util@@YAHK@Z (Address: 0x501d0558)
  • ?IsScene@PerfScene@@YAHABV?$bitset@$0N@@std@@W4SceneID@1@@Z (Address: 0x501d05c4)
  • ?IsServerControlBitOn@Misc@Util@@YAHK@Z (Address: 0x501d05a8)
  • ?IsSuperVip@Contact@Util@@YAHKPAKPAUITXIMContactInfoMgr@@@Z (Address: 0x501d056c)
  • ?IsWebQQUser@Contact@Util@@YAHK@Z (Address: 0x501d0570)
  • ?OpenUrlInIM@URL@Util@@YAXABVCTXStringW@@@Z (Address: 0x501d054c)
  • ?OpenUrlInIM@URL@Util@@YAXABVCTXStringW@@W4URLMODIFYLEVEL@12@0@Z (Address: 0x501d05ac)
  • ?QueryInterface@CDRStrCodecBase@@MAGJABU_GUID@@PAPAX@Z (Address: 0x501d0588)
  • ?Release@CDRStrCodecBase@@MAGKXZ (Address: 0x501d05cc)
  • ?SetDataDWord@DataReport@Util@@YAJKPBDK@Z (Address: 0x501d0584)
  • ?SetDataReportBit@DataReport@Util@@YAJKPBDE@Z (Address: 0x501d05d0)
  • ?SetRegistryData@NewRegistry@@YAHPAUITXCore@@PB_WW4NEW_REGISTRY_TYPE@1@PAUITXData@@@Z (Address: 0x501d05b0)
MSVCP140.dll
  • _Wcscoll (Address: 0x501d0624)
  • _Wcsxfrm (Address: 0x501d0620)
  • ?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ (Address: 0x501d05e4)
  • ?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z (Address: 0x501d05ec)
  • ?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ (Address: 0x501d0614)
  • ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ (Address: 0x501d05fc)
  • ?_Incref@facet@locale@std@@UAEXXZ (Address: 0x501d05e0)
  • ?_Init@locale@std@@CAPAV_Locimp@12@_N@Z (Address: 0x501d0600)
  • ?_Xbad_alloc@std@@YAXXZ (Address: 0x501d0628)
  • ?_Xlength_error@std@@YAXPBD@Z (Address: 0x501d0634)
  • ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z (Address: 0x501d05e8)
  • ??0_Locinfo@std@@QAE@PBD@Z (Address: 0x501d061c)
  • ??0_Lockit@std@@QAE@H@Z (Address: 0x501d0630)
  • ??0facet@locale@std@@IAE@I@Z (Address: 0x501d0608)
  • ??1_Locinfo@std@@QAE@XZ (Address: 0x501d0618)
  • ??1_Lockit@std@@QAE@XZ (Address: 0x501d062c)
  • ??1facet@locale@std@@MAE@XZ (Address: 0x501d0604)
  • ??Bid@locale@std@@QAEIXZ (Address: 0x501d060c)
  • ?c_str@?$_Yarn@D@std@@QBEPBDXZ (Address: 0x501d0610)
  • ?id@?$collate@_W@std@@2V0locale@2@A (Address: 0x501d05d8)
  • ?id@?$ctype@_W@std@@2V0locale@2@A (Address: 0x501d05dc)
  • ?is@?$ctype@_W@std@@QBE_NF_W@Z (Address: 0x501d05f8)
  • ?tolower@?$ctype@_W@std@@QBE_W_W@Z (Address: 0x501d05f4)
  • ?tolower@?$ctype@_W@std@@QBEPB_WPA_WPB_W@Z (Address: 0x501d05f0)
ole32.dll
  • CoCreateGuid (Address: 0x501d0830)
  • CoCreateInstance (Address: 0x501d081c)
  • CoInitialize (Address: 0x501d0824)
  • CoTaskMemAlloc (Address: 0x501d082c)
  • CoTaskMemFree (Address: 0x501d0834)
  • CoTaskMemRealloc (Address: 0x501d0828)
  • CoUninitialize (Address: 0x501d0820)
  • StringFromGUID2 (Address: 0x501d0838)
OLEAUT32.dll
  • LoadRegTypeLib (Address: 0x501d0654)
  • LoadTypeLib (Address: 0x501d0648)
  • RegisterTypeLib (Address: 0x501d0658)
  • SysAllocString (Address: 0x501d064c)
  • SysFreeString (Address: 0x501d063c)
  • SysStringLen (Address: 0x501d0640)
  • UnRegisterTypeLib (Address: 0x501d0650)
  • VarUI4FromStr (Address: 0x501d0644)
SHELL32.dll
  • ShellExecuteExW (Address: 0x501d0664)
  • ShellExecuteW (Address: 0x501d0668)
  • SHGetPathFromIDListW (Address: 0x501d0660)
  • SHGetSpecialFolderLocation (Address: 0x501d066c)
  • SHGetSpecialFolderPathW (Address: 0x501d0670)
SHLWAPI.dll
  • wnsprintfW (Address: 0x501d0678)
USER32.dll
  • CallWindowProcW (Address: 0x501d069c)
  • CharNextW (Address: 0x501d06b4)
  • CopyRect (Address: 0x501d06a8)
  • DispatchMessageW (Address: 0x501d06cc)
  • ExitWindowsEx (Address: 0x501d0694)
  • GetActiveWindow (Address: 0x501d06bc)
  • GetClientRect (Address: 0x501d06d8)
  • GetDC (Address: 0x501d06e4)
  • GetDesktopWindow (Address: 0x501d0700)
  • GetFocus (Address: 0x501d06fc)
  • GetForegroundWindow (Address: 0x501d0684)
  • GetKeyboardState (Address: 0x501d0688)
  • GetKeyState (Address: 0x501d070c)
  • GetMessageW (Address: 0x501d06c4)
  • GetWindowLongW (Address: 0x501d06d0)
  • GetWindowRect (Address: 0x501d0708)
  • IsWindow (Address: 0x501d06f4)
  • keybd_event (Address: 0x501d0690)
  • LoadCursorW (Address: 0x501d0698)
  • MapVirtualKeyW (Address: 0x501d0680)
  • MessageBoxW (Address: 0x501d06f0)
  • PostMessageA (Address: 0x501d06e0)
  • PostMessageW (Address: 0x501d06b8)
  • PostThreadMessageW (Address: 0x501d06ec)
  • PtInRect (Address: 0x501d0704)
  • ReleaseDC (Address: 0x501d06dc)
  • SendInput (Address: 0x501d068c)
  • SendMessageA (Address: 0x501d06a4)
  • SendMessageTimeoutW (Address: 0x501d06b0)
  • SendMessageW (Address: 0x501d06e8)
  • SetCursor (Address: 0x501d06d4)
  • SetRect (Address: 0x501d06ac)
  • SetWindowLongW (Address: 0x501d06a0)
  • SetWindowPos (Address: 0x501d06f8)
  • SystemParametersInfoW (Address: 0x501d06c0)
  • TranslateMessage (Address: 0x501d06c8)
VCRUNTIME140.dll
  • __CxxFrameHandler3 (Address: 0x501d073c)
  • __std_exception_copy (Address: 0x501d0718)
  • __std_exception_destroy (Address: 0x501d0748)
  • __std_type_info_destroy_list (Address: 0x501d0714)
  • _CxxThrowException (Address: 0x501d0740)
  • _except_handler4_common (Address: 0x501d0728)
  • _purecall (Address: 0x501d0738)
  • memcmp (Address: 0x501d0730)
  • memcpy (Address: 0x501d072c)
  • memmove (Address: 0x501d0720)
  • memset (Address: 0x501d0734)
  • strchr (Address: 0x501d071c)
  • wcschr (Address: 0x501d0724)
  • wcsstr (Address: 0x501d0744)
VERSION.dll
  • GetFileVersionInfoSizeW (Address: 0x501d0754)
  • GetFileVersionInfoW (Address: 0x501d0750)
  • VerQueryValueW (Address: 0x501d0758)
xGraphic32.dll
  • BlendCanvas (Address: 0x501d0868)
  • CanvasToTexture (Address: 0x501d0860)
  • CreateCanvas (Address: 0x501d0874)
  • CreateCanvasFromDC (Address: 0x501d0858)
  • DeleteBitmap (Address: 0x501d0840)
  • DeleteCanvas (Address: 0x501d0870)
  • DeleteTexture (Address: 0x501d088c)
  • DrawBitmap (Address: 0x501d086c)
  • DrawCircle (Address: 0x501d08a0)
  • GetBitmap (Address: 0x501d0848)
  • GetBitmapSize (Address: 0x501d0864)
  • GetTexture (Address: 0x501d0884)
  • GetTextureBitsPixel (Address: 0x501d089c)
  • GetTextureSize (Address: 0x501d0890)
  • LockBitmapBits (Address: 0x501d087c)
  • LockBitmapBitsEx (Address: 0x501d085c)
  • LockTextureBits (Address: 0x501d0894)
  • ReleaseBitmap (Address: 0x501d0878)
  • ReleaseTexture (Address: 0x501d0888)
  • SetCanvasFilter (Address: 0x501d0844)
  • SetColor (Address: 0x501d0850)
  • SetDrawStyle (Address: 0x501d084c)
  • SetSmooth (Address: 0x501d0854)
  • UnlockBitmapBits (Address: 0x501d0880)
  • UnlockTextureBits (Address: 0x501d0898)
xImage.dll
  • ??0CxImage@@QAE@K@Z (Address: 0x501d08e4)
  • ?AlphaGet@CxImage@@QAEEJJ@Z (Address: 0x501d08c0)
  • ?AlphaIsValid@CxImage@@QAE_NXZ (Address: 0x501d08c4)
  • ?AlphaPaletteIsValid@CxImage@@QAE_NXZ (Address: 0x501d08c8)
  • ?CreateFromArray@CxImage@@QAE_NPAEKKKK_N@Z (Address: 0x501d08e0)
  • ?Destroy@CxImage@@QAE_NXZ (Address: 0x501d08cc)
  • ?Draw@CxImage@@QAEJPAUHDC__@@ABUtagRECT@@PAU3@_N@Z (Address: 0x501d08b4)
  • ?Encode@CxImage@@QAE_NPAVCxFile@@K@Z (Address: 0x501d08b8)
  • ?GetBpp@CxImage@@QBEGXZ (Address: 0x501d08d4)
  • ?GetHeight@CxImage@@QBEKXZ (Address: 0x501d08dc)
  • ?GetPalette@CxImage@@QBEPAUtagRGBQUAD@@XZ (Address: 0x501d08ac)
  • ?GetPixelColor@CxImage@@QAE?AUtagRGBQUAD@@JJ_N@Z (Address: 0x501d08b0)
  • ?GetWidth@CxImage@@QBEKXZ (Address: 0x501d08d8)
  • ?IsIndexed@CxImage@@QBE_NXZ (Address: 0x501d08a8)
  • ?IsTransparent@CxImage@@QBE_NXZ (Address: 0x501d08d0)
  • ?Resample@CxImage@@QAE_NJJHPAV1@@Z (Address: 0x501d08bc)