LoginUI.dll

ADVAPI32.dll

CloseServiceHandle (Address: 0x5764c028)
GetTraceEnableFlags (Address: 0x5764c02c)
GetTraceEnableLevel (Address: 0x5764c030)
GetTraceLoggerHandle (Address: 0x5764c038)
OpenSCManagerW (Address: 0x5764c01c)
OpenServiceW (Address: 0x5764c020)
QueryServiceStatusEx (Address: 0x5764c024)
RegCloseKey (Address: 0x5764c004)
RegDeleteKeyW (Address: 0x5764c000)
RegisterTraceGuidsW (Address: 0x5764c018)
RegOpenKeyExW (Address: 0x5764c008)
RegQueryInfoKeyW (Address: 0x5764c00c)
RegQueryValueExW (Address: 0x5764c034)
TraceEvent (Address: 0x5764c010)
UnregisterTraceGuids (Address: 0x5764c014)

AFBase.DLL

?CloseBubbleTip@BubbleTipMgr2@@YAJPAUIGFFrame@@@Z (Address: 0x5764c064)
?GetDefaultShowText@Status@Contact@Util@@YA?AVCTXStringW@@G@Z (Address: 0x5764c05c)
?GetDirectLoginInfo@SSOLogin@Util@@YAHAAVCTXStringW@@0@Z (Address: 0x5764c06c)
?GetLoginErrorString@ErrorCodeReport@Util@@YA?AVCTXStringW@@PB_WGGGHH@Z (Address: 0x5764c068)
?GetPngFile_2014LoginUI@Status@Contact@Util@@YAHGAAVCTXStringW@@@Z (Address: 0x5764c050)
?GetProductName@Product@Util@@YA?AVCTXStringW@@XZ (Address: 0x5764c058)
?GetStatusMenuToopTip@Status@Contact@Util@@YA?AVCTXStringW@@G@Z (Address: 0x5764c060)
?LoginErrorStringAndReport@ErrorCodeReport@Util@@YA?AVCTXStringW@@KPB_WGGGHH@Z (Address: 0x5764c054)
?PopupBubbleTip@BubbleTipMgr2@@YAJPAUIGFFrame@@PA_W1UtagPOINT@@1IHPAVCSize@@PAUIGFControl@@@Z (Address: 0x5764c04c)
?PopupGuideBubbleTip@BubbleTipMgr2@@YAJPAUIGFFrame@@PA_WUtagPOINT@@1PAUITXCallback@@PAPAUIGFBubbleTip@@@Z (Address: 0x5764c040)
?ReportLoginError@ErrorCodeReport@Util@@YAXKGGG@Z (Address: 0x5764c048)
?SetPerfOPReportDataForWord@PerfDataReportUtil@@YAXKPA_WKH@Z (Address: 0x5764c044)

AFUtil.dll

?ActiveInput@SafeEditMgr@@QAEHKPAUHWND__@@K@Z (Address: 0x5764c074)
?ClearAllInput@SafeEditMgr@@QAEHK@Z (Address: 0x5764c084)
?ConvertFromTXData@IPCBufferConvertor@@YA?AUtagIPCBuffer@@PAUITXData@@@Z (Address: 0x5764c0a0)
?ConvertToTXData@IPCBufferConvertor@@YAPAUITXData@@UtagIPCBuffer@@@Z (Address: 0x5764c09c)
?CreateSafeEdit@SafeEditMgr@@QAEKPAVITSSafeEditExCallback@@@Z (Address: 0x5764c07c)
?DeleteSafeEdit@SafeEditMgr@@QAEHK@Z (Address: 0x5764c08c)
?GetPwdHash@SafeEditMgr@@QAEHKQAE@Z (Address: 0x5764c080)
?HideWnd_Animation@Misc@Util@@YAXPAUIGFWin@@@Z (Address: 0x5764c0a8)
?InactiveInput@SafeEditMgr@@QAEHK@Z (Address: 0x5764c0b0)
?InputSoftKey@SafeEditMgr@@QAEHKEPAE@Z (Address: 0x5764c078)
?Instance@SafeEditMgr@@SAPAV1@XZ (Address: 0x5764c088)
?IsEnableYaHei@Misc@Util@@YAHXZ (Address: 0x5764c090)
?LinearFurbishing@CustomPaint@Util@@YA?AV?$function@$$A6AJPAUIGFFrame@@PAUHGCANVAS__@@M@Z@std@@TtagARGB@@0PBUtagRECT@@H@Z (Address: 0x5764c098)
?MessageBoxExW@Misc@Util@@YAHPAUIGFFrame@@PA_W1IPAUITXData@@PAPAU4@@Z (Address: 0x5764c0ac)
?ShowWnd_Animation@Misc@Util@@YAXPAUIGFWin@@HP6AXHM@Z@Z (Address: 0x5764c0a4)
?StaticDisk@CustomPaint@Util@@YA?AV?$function@$$A6AJPAUIGFFrame@@PAUHGCANVAS__@@M@Z@std@@TtagARGB@@0HVCPoint@@@Z (Address: 0x5764c094)

api-ms-win-crt-convert-l1-1-0.dll

_wtoi (Address: 0x5764c620)

api-ms-win-crt-filesystem-l1-1-0.dll

_waccess (Address: 0x5764c628)

api-ms-win-crt-heap-l1-1-0.dll

_callnewh (Address: 0x5764c638)
free (Address: 0x5764c630)
malloc (Address: 0x5764c634)

api-ms-win-crt-math-l1-1-0.dll

_except1 (Address: 0x5764c644)
cos (Address: 0x5764c640)

api-ms-win-crt-runtime-l1-1-0.dll

__p___argc (Address: 0x5764c678)
__p___wargv (Address: 0x5764c674)
_cexit (Address: 0x5764c664)
_configure_narrow_argv (Address: 0x5764c668)
_crt_atexit (Address: 0x5764c654)
_execute_onexit_table (Address: 0x5764c658)
_initialize_narrow_environment (Address: 0x5764c67c)
_initialize_onexit_table (Address: 0x5764c660)
_initterm (Address: 0x5764c64c)
_initterm_e (Address: 0x5764c650)
_invalid_parameter_noinfo_noreturn (Address: 0x5764c670)
_register_onexit_function (Address: 0x5764c65c)
_seh_filter_dll (Address: 0x5764c66c)

api-ms-win-crt-stdio-l1-1-0.dll

__acrt_iob_func (Address: 0x5764c688)
__stdio_common_vfwprintf (Address: 0x5764c68c)
__stdio_common_vsscanf (Address: 0x5764c690)
__stdio_common_vswprintf_s (Address: 0x5764c684)

api-ms-win-crt-string-l1-1-0.dll

_wcsicmp (Address: 0x5764c6a4)
strcmp (Address: 0x5764c698)
strlen (Address: 0x5764c6b4)
toupper (Address: 0x5764c69c)
wcscat_s (Address: 0x5764c6b0)
wcscpy_s (Address: 0x5764c6ac)
wcslen (Address: 0x5764c6a8)
wcsncat_s (Address: 0x5764c6a0)
wcsncpy_s (Address: 0x5764c6b8)

AppUtil.dll

?CheckOtherFlashVersion@Misc@Util@@YAHKK@Z (Address: 0x5764c0b8)

AsyncTask.dll

?PostTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@@Z (Address: 0x5764c0c0)

Common.dll

(Address: 0x5764c114)
(Address: 0x5764c1e0)
(Address: 0x5764c1e4)
(Address: 0x5764c284)
??0CFmtString@@QAE@XZ (Address: 0x5764c240)
??0CHttpClient@@QAE@XZ (Address: 0x5764c0d0)
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z (Address: 0x5764c280)
??0CTXBSTR@@QAE@H@Z (Address: 0x5764c0f0)
??0CTXBSTR@@QAE@PB_W@Z (Address: 0x5764c298)
??0CTXBSTR@@QAE@XZ (Address: 0x5764c230)
??0CTXHttpDownloadSink@@IAE@XZ (Address: 0x5764c0c8)
??0CTXStringA@@QAE@PBD@Z (Address: 0x5764c168)
??0CTXStringA@@QAE@UtagUTF8@@PB_WH@Z (Address: 0x5764c164)
??0CTXStringA@@QAE@XZ (Address: 0x5764c204)
??0CTXStringW@@QAE@ABV0@@Z (Address: 0x5764c2c8)
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z (Address: 0x5764c278)
??0CTXStringW@@QAE@PA_W@Z (Address: 0x5764c274)
??0CTXStringW@@QAE@PB_W@Z (Address: 0x5764c2bc)
??0CTXStringW@@QAE@UtagUTF8@@PBDH@Z (Address: 0x5764c26c)
??0CTXStringW@@QAE@XZ (Address: 0x5764c2e8)
??1CFmtString@@QAE@XZ (Address: 0x5764c23c)
??1CHttpClient@@QAE@XZ (Address: 0x5764c0d4)
??1CTXBSTR@@QAE@XZ (Address: 0x5764c2b4)
??1CTXHttpDownloadSink@@UAE@XZ (Address: 0x5764c0cc)
??1CTXStringA@@QAE@XZ (Address: 0x5764c160)
??1CTXStringW@@QAE@XZ (Address: 0x5764c2e0)
??4CTXBSTR@@QAEAAV0@ABV0@@Z (Address: 0x5764c1b0)
??4CTXBSTR@@QAEAAV0@ABVCTXStringW@@@Z (Address: 0x5764c1bc)
??4CTXBSTR@@QAEAAV0@PB_W@Z (Address: 0x5764c218)
??4CTXStringW@@QAEAAV0@ABV0@@Z (Address: 0x5764c2b8)
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z (Address: 0x5764c220)
??4CTXStringW@@QAEAAV0@PA_W@Z (Address: 0x5764c18c)
??4CTXStringW@@QAEAAV0@PB_W@Z (Address: 0x5764c268)
??8@YA_NABVCTXStringW@@0@Z (Address: 0x5764c2cc)
??8@YA_NABVCTXStringW@@PB_W@Z (Address: 0x5764c158)
??8@YA_NPA_WABVCTXBSTR@@@Z (Address: 0x5764c0e0)
??8CTXBSTR@@QBE_NABV0@@Z (Address: 0x5764c0e4)
??8CTXBSTR@@QBE_NPA_W@Z (Address: 0x5764c10c)
??8CTXBSTR@@QBE_NPB_W@Z (Address: 0x5764c110)
??9@YA_NABVCTXStringW@@0@Z (Address: 0x5764c2d4)
??9@YA_NPA_WABVCTXBSTR@@@Z (Address: 0x5764c120)
??9@YA_NPB_WABVCTXBSTR@@@Z (Address: 0x5764c144)
??9CTXBSTR@@QBE_NABV0@@Z (Address: 0x5764c1c4)
??ACTXStringW@@QBE_WH@Z (Address: 0x5764c1a4)
??BCTXBSTR@@QBEPA_WXZ (Address: 0x5764c2b0)
??BCTXStringA@@QBEPBDXZ (Address: 0x5764c2a4)
??BCTXStringW@@QBEPB_WXZ (Address: 0x5764c2d0)
??H@YA?AVCTXStringW@@ABV0@0@Z (Address: 0x5764c118)
??H@YA?AVCTXStringW@@ABV0@PB_W@Z (Address: 0x5764c2c0)
??H@YA?AVCTXStringW@@PB_WABV0@@Z (Address: 0x5764c1c0)
??ICTXBSTR@@QAEPAPA_WXZ (Address: 0x5764c22c)
??M@YA_NABVCTXStringA@@0@Z (Address: 0x5764c174)
??M@YA_NABVCTXStringW@@0@Z (Address: 0x5764c2c4)
??YCTXStringW@@QAEAAV0@ABV0@@Z (Address: 0x5764c14c)
??YCTXStringW@@QAEAAV0@PB_W@Z (Address: 0x5764c290)
?AddFileSystem@FS@@YAJW4FILESYSTEM_TYPE@@PB_W1HHH@Z (Address: 0x5764c194)
?CompareNoCase@CTXStringW@@QBEHPB_W@Z (Address: 0x5764c104)
?ConvertToPureFile@FS@@YA?AVCTXStringW@@PB_W@Z (Address: 0x5764c224)
?ConvertXMLStrToTXData@Convert@Util@@YAHPA_WPAPA_WPAUITXData@@0@Z (Address: 0x5764c29c)
?CopyTo@CTXBSTR@@QBEJPAPA_W@Z (Address: 0x5764c170)
?CreateDirectoryW@FS@@YAHPB_W@Z (Address: 0x5764c19c)
?CreateFileW@FS@@YAHPB_WKPAPAUITXFile@@@Z (Address: 0x5764c1a8)
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z (Address: 0x5764c0ec)
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z (Address: 0x5764c244)
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z (Address: 0x5764c210)
?DeleteFileW@FS@@YAHPB_W@Z (Address: 0x5764c0e8)
?Detach@CTXBSTR@@QAEPA_WXZ (Address: 0x5764c188)
?DoFormat@CFmtString@@QAEPB_WPB_W@Z (Address: 0x5764c234)
?Download@CHttpClient@@QAEHPB_WPAU_SYSTEMTIME@@0HPA_J@Z (Address: 0x5764c0f4)
?Empty@CTXBSTR@@QAEXXZ (Address: 0x5764c21c)
?Empty@CTXStringW@@QAEXXZ (Address: 0x5764c294)
?Encode16@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@@Z (Address: 0x5764c100)
?Encode16@Encode@Util@@YA?AVCTXStringW@@PBXI@Z (Address: 0x5764c1d4)
?EraseAsyncCallback@TXTimer@@YAHPAUITXAsyncCallback@@I@Z (Address: 0x5764c1d8)
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z (Address: 0x5764c2e4)
?ExitInfo_dwPhase@ExitInfo@Util@@3QBDB (Address: 0x5764c1f4)
?ExitInfo_dwPid@ExitInfo@Util@@3QBDB (Address: 0x5764c1ec)
?ExitInfo_dwTid@ExitInfo@Util@@3QBDB (Address: 0x5764c1f0)
?ExitInfo_i64MainPanelHwnd@ExitInfo@Util@@3QBDB (Address: 0x5764c1f8)
?Find@CTXStringW@@QBEH_WH@Z (Address: 0x5764c258)
?Find@CTXStringW@@QBEHPB_WH@Z (Address: 0x5764c25c)
?Format@CTXStringA@@QAAXPBDZZ (Address: 0x5764c2ac)
?Format@CTXStringW@@QAAXPB_WZZ (Address: 0x5764c208)
?GenerateEx@CComputerIDGenerator@@QAEHPAE@Z (Address: 0x5764c1cc)
?GetBSTR@CTXStringW@@QBEPA_WXZ (Address: 0x5764c1a0)
?GetConfigFieldData@ModuleConfig@@YAJPB_W0PAPAUITXDataRead@@@Z (Address: 0x5764c1b8)
?GetDownloadedFilePath@CHttpClient@@QAEHAAVCTXStringW@@@Z (Address: 0x5764c0f8)
?GetFileHash@FS@Util@@YAHPB_WAAVCTXBuffer@@AAK@Z (Address: 0x5764c0fc)
?GetLCID@NLS@@YAKXZ (Address: 0x5764c11c)
?GetLength@CTXStringA@@QBEHXZ (Address: 0x5764c16c)
?GetLength@CTXStringW@@QBEHXZ (Address: 0x5764c270)
?GetMainThreadLoop@Misc@Util@@YAPAVMessageLoopForUI@AsyncTask@@XZ (Address: 0x5764c17c)
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z (Address: 0x5764c27c)
?GetString@CTXStringA@@QBEPBDXZ (Address: 0x5764c1ac)
?GetString@CTXStringW@@QBEPB_WXZ (Address: 0x5764c214)
?GetTXDataBuf@Data@Util@@YAHPAUITXDataRead@@PB_WAAVCTXBuffer@@@Z (Address: 0x5764c1b4)
?GetTXDataBuf@Data@Util@@YAHPAUITXDataRead@@PBDAAVCTXBuffer@@@Z (Address: 0x5764c20c)
?GetTXDataStr@Data@Util@@YAHPAUITXDataRead@@PBDAAVCTXStringW@@@Z (Address: 0x5764c28c)
?IsDirectoryExist@FS@@YAHPB_W@Z (Address: 0x5764c198)
?IsEmpty@CTXBSTR@@QAEHXZ (Address: 0x5764c228)
?IsEmpty@CTXStringW@@QBE_NXZ (Address: 0x5764c2d8)
?IsFileExist@FS@@YAHPB_W@Z (Address: 0x5764c288)
?IsInitAsyncMsgLoop@Misc@Util@@YAHXZ (Address: 0x5764c178)
?IsVista@Sys@Util@@YAHXZ (Address: 0x5764c260)
?Left@CTXStringW@@QBE?AV1@H@Z (Address: 0x5764c13c)
?Length@CTXBSTR@@QBEIXZ (Address: 0x5764c2a0)
?LogTaskEnd@Misc@Util@@YAXK@Z (Address: 0x5764c184)
?LogTaskStart@Misc@Util@@YAKPB_W@Z (Address: 0x5764c180)
?MakeLower@CTXStringW@@QAEAAV1@XZ (Address: 0x5764c1fc)
?MakeUpper@CTXStringW@@QAEAAV1@XZ (Address: 0x5764c154)
?Mid@CTXStringW@@QBE?AV1@H@Z (Address: 0x5764c254)
?Mid@CTXStringW@@QBE?AV1@HH@Z (Address: 0x5764c250)
?MoveDownloadFile@CHttpClient@@QAEHPB_WH@Z (Address: 0x5764c108)
?oi_symmetry_encrypt2@@YAXPBEH0PAEPAH@Z (Address: 0x5764c1d0)
?OnConnected@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@@Z (Address: 0x5764c134)
?OnConnecting@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@PB_W@Z (Address: 0x5764c138)
?OnDownloadStart@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@KK@Z (Address: 0x5764c130)
?OnError@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@K@Z (Address: 0x5764c124)
?OnProgress@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@KK@Z (Address: 0x5764c12c)
?OnRedirected@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@PB_W@Z (Address: 0x5764c128)
?PropertyDWord@CFmtString@@QAEHPB_WK0@Z (Address: 0x5764c1c8)
?PropertyStr@CFmtString@@QAEHPB_W0@Z (Address: 0x5764c238)
?Remove@CTXStringW@@QAEH_W@Z (Address: 0x5764c148)
?Replace@CTXStringW@@QAEHPB_W0@Z (Address: 0x5764c248)
?SafeLoadLibrary@Sys@Util@@YAPAUHINSTANCE__@@PB_W@Z (Address: 0x5764c1e8)
?SBCToDBC@Convert@Util@@YA_NAAVCTXStringW@@@Z (Address: 0x5764c140)
?SetAsyncCallback@TXTimer@@YAHPAUITXAsyncCallback@@I@Z (Address: 0x5764c264)
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z (Address: 0x5764c190)
?SetString@CTXStringW@@QAEXPB_WH@Z (Address: 0x5764c1dc)
?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z (Address: 0x5764c15c)
?SetUIInterface@CHttpClient@@QAEXPAVCTXHttpDownloadSink@@@Z (Address: 0x5764c0d8)
?SetUseUtf8Head@CHttpClient@@QAEXH@Z (Address: 0x5764c0dc)
?Tokenize@CTXStringW@@QBE?AV1@PB_WAAH@Z (Address: 0x5764c2a8)
?Trim@CTXStringW@@QAEAAV1@XZ (Address: 0x5764c150)
?TXLoadString@@YAPB_WPB_W0@Z (Address: 0x5764c24c)
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z (Address: 0x5764c2dc)
DetourFunctionWrapper (Address: 0x5764c200)

GF.dll

??0CDPIScaleIgnoreHelper@@QAE@XZ (Address: 0x5764c32c)
??0CDPIScaleIgnoreResetHelper@@QAE@XZ (Address: 0x5764c33c)
??1CDPIScaleIgnoreHelper@@QAE@XZ (Address: 0x5764c328)
??1CDPIScaleIgnoreResetHelper@@QAE@XZ (Address: 0x5764c340)
?CreateCanvas@DPI@GF@Util@@YAPAUHGCANVAS__@@HHPAU4@@Z (Address: 0x5764c318)
?CreateCustomPaintDraw@GF@Util@@YAJPAUIGFFrame@@KPAPAUIGFCustomPaintDraw@@V?$function@$$A6AJPAUIGFFrame@@PAUHGCANVAS__@@M@Z@std@@@Z (Address: 0x5764c31c)
?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z (Address: 0x5764c34c)
?DispatchFrameMsg@GF@Util@@YAJPAUIGFFrame@@PAUtagBaseArg@@PAHPAJH@Z (Address: 0x5764c320)
?DrawTexture@DPI@GF@Util@@YAHPAUHGCANVAS__@@PBUtagRECT@@PAUHGTEXTURE__@@K@Z (Address: 0x5764c30c)
?GetDPIScale@DPI@GF@Util@@YAMXZ (Address: 0x5764c330)
?GetFlashPath@Flash@Util@@YAHAAVCTXStringW@@@Z (Address: 0x5764c308)
?GetVersionByPath@Flash@Util@@YAHPB_WAAK1@Z (Address: 0x5764c304)
?HandleMessageScale@DPI@GF@Util@@YAXPAUtagBaseArg@@@Z (Address: 0x5764c2f4)
?IsScaleIgnore@DPI@GF@Util@@YA_NXZ (Address: 0x5764c2f8)
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@PAUITXCore@@H@Z (Address: 0x5764c300)
?ScaleRECT@DPI@GF@Util@@YAXPAUtagRECT@@@Z (Address: 0x5764c314)
?ScaleSIZE@DPI@GF@Util@@YAXPAUtagSIZE@@@Z (Address: 0x5764c344)
?ScaleX@DPI@GF@Util@@YAHH@Z (Address: 0x5764c2f0)
?SetViewportOrg@DPI@GF@Util@@YAHPAUHGCANVAS__@@HHPAUtagPOINT@@@Z (Address: 0x5764c310)
?SetWindowOrg@DPI@GF@Util@@YAHPAUHGCANVAS__@@HHPAUtagPOINT@@@Z (Address: 0x5764c334)
?SlideFrame@GF@Util@@YAJPAUIGFFrame@@VCRect@@1KDKHKKPAUIGFAnimationEvent@@@Z (Address: 0x5764c338)
?StopSlideFrame@GF@Util@@YAJPAUIGFFrame@@@Z (Address: 0x5764c324)
?UnscaleLONG@DPI@GF@Util@@YAXPAJ@Z (Address: 0x5764c2fc)
?UnscaleSIZE@DPI@GF@Util@@YAXPAUtagSIZE@@@Z (Address: 0x5764c348)

IMM32.dll

ImmAssociateContext (Address: 0x5764c358)
ImmGetContext (Address: 0x5764c354)
ImmReleaseContext (Address: 0x5764c35c)

KERNEL32.dll

CloseHandle (Address: 0x5764c3e4)
CompareStringW (Address: 0x5764c3dc)
CreateFileMappingW (Address: 0x5764c414)
CreateFileW (Address: 0x5764c438)
CreateMutexW (Address: 0x5764c3f0)
CreateProcessW (Address: 0x5764c408)
CreateThread (Address: 0x5764c3e0)
DecodePointer (Address: 0x5764c400)
DeleteCriticalSection (Address: 0x5764c3b4)
EncodePointer (Address: 0x5764c404)
EnterCriticalSection (Address: 0x5764c39c)
GetCommandLineW (Address: 0x5764c3d0)
GetCurrentProcess (Address: 0x5764c434)
GetCurrentProcessId (Address: 0x5764c3d8)
GetCurrentThread (Address: 0x5764c3ec)
GetCurrentThreadId (Address: 0x5764c390)
GetFileSize (Address: 0x5764c43c)
GetLastError (Address: 0x5764c3b8)
GetLocalTime (Address: 0x5764c398)
GetModuleFileNameW (Address: 0x5764c3a8)
GetModuleHandleW (Address: 0x5764c3c4)
GetProcAddress (Address: 0x5764c3c8)
GetSystemTimeAsFileTime (Address: 0x5764c388)
GetThreadLocale (Address: 0x5764c3f8)
GetTickCount (Address: 0x5764c38c)
GetVersionExW (Address: 0x5764c3c0)
GlobalMemoryStatus (Address: 0x5764c3f4)
InitializeCriticalSectionAndSpinCount (Address: 0x5764c3bc)
InitializeSListHead (Address: 0x5764c36c)
InterlockedCompareExchange (Address: 0x5764c424)
InterlockedDecrement (Address: 0x5764c3ac)
InterlockedExchange (Address: 0x5764c394)
InterlockedIncrement (Address: 0x5764c3b0)
IsBadReadPtr (Address: 0x5764c3cc)
IsDebuggerPresent (Address: 0x5764c380)
IsProcessorFeaturePresent (Address: 0x5764c370)
LeaveCriticalSection (Address: 0x5764c3a0)
LocalFree (Address: 0x5764c364)
lstrlenW (Address: 0x5764c444)
MapViewOfFile (Address: 0x5764c418)
OpenFileMappingW (Address: 0x5764c40c)
OpenMutexW (Address: 0x5764c430)
OutputDebugStringW (Address: 0x5764c368)
ProcessIdToSessionId (Address: 0x5764c42c)
QueryPerformanceCounter (Address: 0x5764c384)
QueryPerformanceFrequency (Address: 0x5764c3d4)
RaiseException (Address: 0x5764c3a4)
ReadFile (Address: 0x5764c440)
SetThreadLocale (Address: 0x5764c3fc)
SetUnhandledExceptionFilter (Address: 0x5764c378)
Sleep (Address: 0x5764c420)
SwitchToThread (Address: 0x5764c428)
TerminateProcess (Address: 0x5764c374)
TerminateThread (Address: 0x5764c3e8)
UnhandledExceptionFilter (Address: 0x5764c37c)
UnmapViewOfFile (Address: 0x5764c410)
WaitForSingleObject (Address: 0x5764c41c)

KernelUtil.dll

?CheckUinValid@Misc@Util@@YAHPA_W@Z (Address: 0x5764c480)
?DataReport@DataReport2@Util@@YAXKK@Z (Address: 0x5764c488)
?DataReport@DataReport2@Util@@YAXKKKPA_W0H@Z (Address: 0x5764c46c)
?GetHeadFile100@Misc@Util@@YA?AVCTXStringW@@G@Z (Address: 0x5764c45c)
?GetMajorVer@Version@@YAEXZ (Address: 0x5764c464)
?GetMinorVer@Version@@YAEXZ (Address: 0x5764c468)
?GetSelfUin@Contact@Util@@YAKXZ (Address: 0x5764c48c)
?GetSignFmt@URL@Util@@YAXAAVCFmtString@@@Z (Address: 0x5764c484)
?IsEmailAccount@Misc@Util@@YAHAAVCTXStringW@@@Z (Address: 0x5764c460)
?IsProcessExist@Sys@Util@@YAHVCTXStringW@@@Z (Address: 0x5764c454)
?IsStatusLegal@Misc@Util@@YAHG@Z (Address: 0x5764c458)
?IsSupportAero@Misc@Util@@YAHXZ (Address: 0x5764c478)
?IsValidAccount@Misc@Util@@YAHVCTXStringW@@@Z (Address: 0x5764c450)
?OpenUrlInIM@URL@Util@@YAXABVCTXStringW@@W4URLMODIFYLEVEL@12@0@Z (Address: 0x5764c470)
?ResetSelfUin@Contact@Util@@YAKXZ (Address: 0x5764c474)
?SetBit@OnlineStatusDataReport@Misc@Util@@YAXEH@Z (Address: 0x5764c47c)
?SetUserData@UserData@Util@@YAPAXPBDPAX@Z (Address: 0x5764c44c)

MSVCP140.dll

?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ (Address: 0x5764c4b8)
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ (Address: 0x5764c4dc)
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ (Address: 0x5764c4c8)
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ (Address: 0x5764c4b4)
?_Xbad_function_call@std@@YAXXZ (Address: 0x5764c4f8)
?_Xlength_error@std@@YAXPBD@Z (Address: 0x5764c4fc)
?_Xout_of_range@std@@YAXPBD@Z (Address: 0x5764c4f0)
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ (Address: 0x5764c4d0)
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z (Address: 0x5764c4c4)
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ (Address: 0x5764c4e4)
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ (Address: 0x5764c4c0)
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ (Address: 0x5764c498)
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ (Address: 0x5764c4bc)
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z (Address: 0x5764c494)
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ (Address: 0x5764c4d8)
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z (Address: 0x5764c4cc)
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z (Address: 0x5764c49c)
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z (Address: 0x5764c4a0)
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z (Address: 0x5764c4d4)
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ (Address: 0x5764c4b0)
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z (Address: 0x5764c4e8)
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z (Address: 0x5764c4ec)
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ (Address: 0x5764c4e0)
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ (Address: 0x5764c4ac)
?uncaught_exception@std@@YA_NXZ (Address: 0x5764c4f4)
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z (Address: 0x5764c4a8)
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z (Address: 0x5764c4a4)