LoginLogic.dll

Description: 腾讯QQ

Version: 9.7.17.29215

Architecture: 32-bit

Operating System: Windows NT

SHA256: 631baa456384ba4d02229462f00cb35f

File Size: 121.4 KB

Uploaded At: Dec. 2, 2025, 2:46 p.m.

Views: 14

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0xc561)
DllGetClassObject (Ordinal: 2, Address: 0xc4e3)
DllRegisterServer (Ordinal: 3, Address: 0xc4f8)
DllUnregisterServer (Ordinal: 4, Address: 0xc522)

Imported DLLs & Functions

ADVAPI32.dll

RegCloseKey (Address: 0x575f3008)
RegDeleteKeyW (Address: 0x575f300c)
RegOpenKeyExW (Address: 0x575f3000)
RegQueryInfoKeyW (Address: 0x575f3004)

AFBase.DLL

?GetDirectLoginInfo@SSOLogin@Util@@YAHAAVCTXStringW@@0@Z (Address: 0x575f301c)
?InitAppFrameworkOnce@Misc@Util@@YAXXZ (Address: 0x575f3020)
?SetPerfReportData@PerfDataReport2DC@@YAXK_J@Z (Address: 0x575f3018)
?SetPerfReportData@PerfDataReport2DC@@YAXK_JH@Z (Address: 0x575f3014)
?SetPerfReportDataForBool@PerfDataReportUtil@@YAXPA_WH@Z (Address: 0x575f3024)
?SetPerfReportDataForWord@PerfDataReportUtil@@YAXPA_WKH@Z (Address: 0x575f3028)

AFUtil.dll

?ActiveInput@SafeEditMgr@@QAEHKPAUHWND__@@K@Z (Address: 0x575f3048)
?CancelAutoLogin@LoginAssistant@@YAJXZ (Address: 0x575f3054)
?ClearAllInput@SafeEditMgr@@QAEHK@Z (Address: 0x575f3044)
?ConvertFromTXData@IPCBufferConvertor@@YA?AUtagIPCBuffer@@PAUITXData@@@Z (Address: 0x575f3050)
?ConvertToTXData@IPCBufferConvertor@@YAPAUITXData@@UtagIPCBuffer@@@Z (Address: 0x575f3060)
?CreateSafeEdit@SafeEditMgr@@QAEKPAVITSSafeEditExCallback@@@Z (Address: 0x575f3034)
?DeleteSafeEdit@SafeEditMgr@@QAEHK@Z (Address: 0x575f3030)
?GetDetailAccountInfo@LoginAssistant@@YAJVCTXStringW@@PAPAUITXDataRead@@@Z (Address: 0x575f3058)
?GetPwdHash@SafeEditMgr@@QAEHKQAE@Z (Address: 0x575f3038)
?InactiveInput@SafeEditMgr@@QAEHK@Z (Address: 0x575f304c)
?InputSoftKey@SafeEditMgr@@QAEHKEPAE@Z (Address: 0x575f3040)
?Instance@SafeEditMgr@@SAPAV1@XZ (Address: 0x575f3064)
?SetAccountInfo@LoginAssistant@@YAJKPAUITXData@@@Z (Address: 0x575f305c)
?SetInputPos@SafeEditMgr@@QAEHKK@Z (Address: 0x575f303c)

api-ms-win-crt-convert-l1-1-0.dll

_wtoi (Address: 0x575f335c)

api-ms-win-crt-heap-l1-1-0.dll

_callnewh (Address: 0x575f3364)
free (Address: 0x575f3368)
malloc (Address: 0x575f336c)

api-ms-win-crt-runtime-l1-1-0.dll

_cexit (Address: 0x575f338c)
_configure_narrow_argv (Address: 0x575f339c)
_crt_atexit (Address: 0x575f3388)
_execute_onexit_table (Address: 0x575f3384)
_initialize_narrow_environment (Address: 0x575f3378)
_initialize_onexit_table (Address: 0x575f337c)
_initterm (Address: 0x575f3394)
_initterm_e (Address: 0x575f3398)
_invalid_parameter_noinfo_noreturn (Address: 0x575f3374)
_register_onexit_function (Address: 0x575f3380)
_seh_filter_dll (Address: 0x575f3390)

api-ms-win-crt-stdio-l1-1-0.dll

__stdio_common_vswprintf_s (Address: 0x575f33a4)

api-ms-win-crt-string-l1-1-0.dll

wcscat_s (Address: 0x575f33b0)
wcscpy_s (Address: 0x575f33b8)
wcslen (Address: 0x575f33b4)
wcsncpy_s (Address: 0x575f33ac)

Common.dll

(Address: 0x575f30d8)
(Address: 0x575f30ec)
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z (Address: 0x575f3110)
??0CTXBSTR@@QAE@XZ (Address: 0x575f30e0)
??0CTXStringA@@QAE@UtagGBK@@PB_WH@Z (Address: 0x575f3074)
??0CTXStringA@@QAE@UtagUTF8@@PB_WH@Z (Address: 0x575f30c4)
??0CTXStringW@@QAE@ABV0@@Z (Address: 0x575f30f0)
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z (Address: 0x575f306c)
??0CTXStringW@@QAE@PA_W@Z (Address: 0x575f30b4)
??0CTXStringW@@QAE@PB_W@Z (Address: 0x575f3100)
??0CTXStringW@@QAE@UtagUTF8@@PBDH@Z (Address: 0x575f30d0)
??0CTXStringW@@QAE@XZ (Address: 0x575f310c)
??1CTXBSTR@@QAE@XZ (Address: 0x575f30a8)
??1CTXStringA@@QAE@XZ (Address: 0x575f30c0)
??1CTXStringW@@QAE@XZ (Address: 0x575f311c)
??4CTXStringW@@QAEAAV0@ABV0@@Z (Address: 0x575f30f8)
??4CTXStringW@@QAEAAV0@PB_W@Z (Address: 0x575f30fc)
??8@YA_NABVCTXStringW@@PB_W@Z (Address: 0x575f3084)
??BCTXBSTR@@QBEPA_WXZ (Address: 0x575f30ac)
??BCTXStringW@@QBEPB_WXZ (Address: 0x575f30bc)
??H@YA?AVCTXStringW@@ABV0@0@Z (Address: 0x575f309c)
??H@YA?AVCTXStringW@@ABV0@PB_W@Z (Address: 0x575f3098)
??H@YA?AVCTXStringW@@PB_WABV0@@Z (Address: 0x575f3094)
??ICTXBSTR@@QAEPAPA_WXZ (Address: 0x575f30e8)
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z (Address: 0x575f30d4)
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z (Address: 0x575f3118)
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z (Address: 0x575f3114)
?Encode16@Encode@Util@@YA?AVCTXStringW@@PBXI@Z (Address: 0x575f3090)
?EraseIdleCallback@TXTimer@@YAHPAUITXIdleCallback@@I@Z (Address: 0x575f3088)
?Find@CTXStringW@@QBEHPB_WH@Z (Address: 0x575f30a0)
?Format@CTXStringW@@QAAXPB_WZZ (Address: 0x575f30e4)
?GetBSTR@CTXStringW@@QBEPA_WXZ (Address: 0x575f30f4)
?GetBuffer@CTXStringA@@QAEPADXZ (Address: 0x575f3080)
?GetLength@CTXStringA@@QBEHXZ (Address: 0x575f307c)
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z (Address: 0x575f3108)
?GetString@CTXStringA@@QBEPBDXZ (Address: 0x575f30c8)
?GetString@CTXStringW@@QBEPB_WXZ (Address: 0x575f3070)
?GetTXDataBuf@Data@Util@@YAHPAUITXDataRead@@PB_WAAVCTXBuffer@@@Z (Address: 0x575f30cc)
?GetTXDataBuf@Data@Util@@YAHPAUITXDataRead@@PBDAAVCTXBuffer@@@Z (Address: 0x575f308c)
?IsEmpty@CTXBSTR@@QAEHXZ (Address: 0x575f30b8)
?Length@CTXBSTR@@QBEIXZ (Address: 0x575f30dc)
?Md5HashBuffer@@YAXPAEPBXK@Z (Address: 0x575f3078)
?SetIdleCallback@TXTimer@@YAHPAUITXIdleCallback@@I@Z (Address: 0x575f30a4)
?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z (Address: 0x575f30b0)
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z (Address: 0x575f3104)

GF.dll

??0CDPIScaleIgnoreResetHelper@@QAE@XZ (Address: 0x575f3130)
??1CDPIScaleIgnoreResetHelper@@QAE@XZ (Address: 0x575f3134)
?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z (Address: 0x575f3140)
?HandleMessageScale@DPI@GF@Util@@YAXPAUtagBaseArg@@@Z (Address: 0x575f3124)
?IsScaleIgnore@DPI@GF@Util@@YA_NXZ (Address: 0x575f3128)
?ScaleSIZE@DPI@GF@Util@@YAXPAUtagSIZE@@@Z (Address: 0x575f3138)
?UnscaleLONG@DPI@GF@Util@@YAXPAJ@Z (Address: 0x575f312c)
?UnscaleSIZE@DPI@GF@Util@@YAXPAUtagSIZE@@@Z (Address: 0x575f313c)

IMM32.dll

ImmAssociateContext (Address: 0x575f3148)
ImmGetContext (Address: 0x575f314c)
ImmReleaseContext (Address: 0x575f3150)

KERNEL32.dll

CloseHandle (Address: 0x575f31ac)
CreateFileMappingW (Address: 0x575f31d4)
CreateProcessW (Address: 0x575f31c8)
CreateThread (Address: 0x575f31e0)
DecodePointer (Address: 0x575f31bc)
DeleteCriticalSection (Address: 0x575f317c)
EncodePointer (Address: 0x575f31c0)
EnterCriticalSection (Address: 0x575f3164)
GetCommandLineW (Address: 0x575f31c4)
GetCurrentProcess (Address: 0x575f315c)
GetCurrentProcessId (Address: 0x575f3158)
GetCurrentThreadId (Address: 0x575f3194)
GetLastError (Address: 0x575f3180)
GetModuleFileNameW (Address: 0x575f3170)
GetModuleHandleW (Address: 0x575f319c)
GetProcAddress (Address: 0x575f31a0)
GetSystemTimeAsFileTime (Address: 0x575f318c)
GetThreadLocale (Address: 0x575f31b4)
GetTickCount (Address: 0x575f31ec)
InitializeCriticalSectionAndSpinCount (Address: 0x575f3184)
InitializeSListHead (Address: 0x575f31f4)
InterlockedDecrement (Address: 0x575f3174)
InterlockedExchange (Address: 0x575f3198)
InterlockedIncrement (Address: 0x575f3178)
IsDebuggerPresent (Address: 0x575f31f0)
IsProcessorFeaturePresent (Address: 0x575f3160)
LeaveCriticalSection (Address: 0x575f3168)
MapViewOfFile (Address: 0x575f31d8)
OpenFileMappingW (Address: 0x575f31cc)
OpenProcess (Address: 0x575f31a4)
OutputDebugStringW (Address: 0x575f31e4)
QueryPerformanceCounter (Address: 0x575f3188)
RaiseException (Address: 0x575f316c)
SetThreadLocale (Address: 0x575f31b8)
SetUnhandledExceptionFilter (Address: 0x575f3190)
Sleep (Address: 0x575f31dc)
TerminateProcess (Address: 0x575f31b0)
UnhandledExceptionFilter (Address: 0x575f31e8)
UnmapViewOfFile (Address: 0x575f31d0)
WaitForSingleObject (Address: 0x575f31a8)

KernelUtil.dll

?CheckUinValid@Misc@Util@@YAHPA_W@Z (Address: 0x575f3200)
?GetAccountType@Account@Util@@YAEK@Z (Address: 0x575f320c)
?GetPublicName@Contact@Util@@YA?AVCTXStringW@@K@Z (Address: 0x575f3208)
?GetSelfUin@Contact@Util@@YAKXZ (Address: 0x575f3224)
?initIOCollector@CTXLoginStatistic@loginstatistics@@QAE_NXZ (Address: 0x575f3220)
?instance@CTXLoginStatistic@loginstatistics@@SAAAV12@XZ (Address: 0x575f3228)
?IsFlagValid@Contact@Util@@YAHKKPAUITXIMContactInfoMgr@@@Z (Address: 0x575f3204)
?reset@CTXLoginStatistic@loginstatistics@@QAEXXZ (Address: 0x575f31fc)
?ResetSelfUin@Contact@Util@@YAKXZ (Address: 0x575f3210)
?setAutoLogin@CTXLoginStatistic@loginstatistics@@QAEX_N@Z (Address: 0x575f3214)
?setLoginStartTick@CTXLoginStatistic@loginstatistics@@QAEXI@Z (Address: 0x575f3218)
?SetUserData@UserData@Util@@YAPAXPBDPAX@Z (Address: 0x575f321c)

MSVCP140.dll

?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ (Address: 0x575f3238)
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ (Address: 0x575f3294)
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ (Address: 0x575f3268)
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ (Address: 0x575f3234)
?_Xlength_error@std@@YAXPBD@Z (Address: 0x575f327c)
?_Xout_of_range@std@@YAXPBD@Z (Address: 0x575f3284)
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ (Address: 0x575f326c)
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z (Address: 0x575f3278)
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ (Address: 0x575f3290)
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ (Address: 0x575f3240)
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ (Address: 0x575f3260)
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ (Address: 0x575f323c)
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z (Address: 0x575f3264)
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ (Address: 0x575f3274)
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z (Address: 0x575f324c)
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z (Address: 0x575f325c)
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z (Address: 0x575f3250)
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z (Address: 0x575f3270)
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ (Address: 0x575f3230)
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z (Address: 0x575f328c)
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z (Address: 0x575f3288)
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ (Address: 0x575f3258)
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ (Address: 0x575f3254)
?uncaught_exception@std@@YA_NXZ (Address: 0x575f3280)
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z (Address: 0x575f3244)
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z (Address: 0x575f3248)

ole32.dll

CoCreateGuid (Address: 0x575f33d0)
CoCreateInstance (Address: 0x575f33c4)
CoTaskMemFree (Address: 0x575f33cc)
StringFromCLSID (Address: 0x575f33c0)
StringFromGUID2 (Address: 0x575f33c8)

OLEAUT32.dll

LoadRegTypeLib (Address: 0x575f32a4)
LoadTypeLib (Address: 0x575f32a0)
RegisterTypeLib (Address: 0x575f32b4)
SysAllocString (Address: 0x575f32b0)
SysFreeString (Address: 0x575f32a8)
SysStringLen (Address: 0x575f32ac)
UnRegisterTypeLib (Address: 0x575f329c)

USER32.dll

CallWindowProcW (Address: 0x575f3308)
CharNextW (Address: 0x575f32e0)
CloseWindow (Address: 0x575f32dc)
CopyRect (Address: 0x575f32f0)
CreateWindowExW (Address: 0x575f32d0)
DefWindowProcW (Address: 0x575f32fc)
DestroyWindow (Address: 0x575f32bc)
DispatchMessageW (Address: 0x575f32d4)
EnumWindows (Address: 0x575f32e4)
GetForegroundWindow (Address: 0x575f330c)
GetMessageW (Address: 0x575f32c0)
GetSystemMetrics (Address: 0x575f32f8)
GetWindowLongW (Address: 0x575f3320)
GetWindowThreadProcessId (Address: 0x575f32ec)
IsWindow (Address: 0x575f32cc)
PostMessageW (Address: 0x575f32e8)
PostQuitMessage (Address: 0x575f3300)
RegisterClassExW (Address: 0x575f32c8)
SendMessageW (Address: 0x575f32c4)
SetCursor (Address: 0x575f3304)
SetParent (Address: 0x575f3318)
SetWindowLongW (Address: 0x575f3314)
SetWindowTextW (Address: 0x575f3310)
ShowWindow (Address: 0x575f331c)
SystemParametersInfoW (Address: 0x575f32f4)
TranslateMessage (Address: 0x575f32d8)

VCRUNTIME140.dll

__CxxFrameHandler3 (Address: 0x575f3334)
__std_exception_copy (Address: 0x575f333c)
__std_exception_destroy (Address: 0x575f3340)
__std_type_info_destroy_list (Address: 0x575f3348)
_CxxThrowException (Address: 0x575f3344)
_except_handler4_common (Address: 0x575f334c)
_purecall (Address: 0x575f3354)
memcmp (Address: 0x575f3350)
memcpy (Address: 0x575f3328)
memmove (Address: 0x575f332c)
memset (Address: 0x575f3338)
wcsrchr (Address: 0x575f3330)