WebCtrl.dll

Description:

Authors:

Version:

Architecture: 32-bit

Operating System:

SHA256: f8ae160a14dc52797a895cab4921582f

File Size: 446.4 KB

Uploaded At: Dec. 2, 2025, 2:47 p.m.

Views: 6

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x18bd6)
  • DllGetClassObject (Ordinal: 2, Address: 0x18b2a)
  • DllMain (Ordinal: 3, Address: 0x18bea)
  • DllRegisterServer (Ordinal: 4, Address: 0x18b45)
  • DllUnregisterServer (Ordinal: 5, Address: 0x18b8f)
  • cef_add_cross_origin_whitelist_entry (Ordinal: 6, Address: 0x2f4a9)
  • cef_add_web_plugin_directory (Ordinal: 7, Address: 0x3002b)
  • cef_add_web_plugin_path (Ordinal: 8, Address: 0x30008)
  • cef_api_hash (Ordinal: 9, Address: 0x2feac)
  • cef_begin_tracing (Ordinal: 10, Address: 0x2ff40)
  • cef_binary_value_create (Ordinal: 11, Address: 0x2fa76)
  • cef_browser_host_create_browser (Ordinal: 12, Address: 0x2f666)
  • cef_browser_host_create_browser_sync (Ordinal: 13, Address: 0x2f68b)
  • cef_build_revision (Ordinal: 14, Address: 0x2fe67)
  • cef_clear_cache (Ordinal: 15, Address: 0x2fe47)
  • cef_clear_cross_origin_whitelist (Ordinal: 16, Address: 0x2f4f3)
  • cef_clear_scheme_handler_factories (Ordinal: 17, Address: 0x2f538)
  • cef_command_line_create (Ordinal: 18, Address: 0x30167)
  • cef_command_line_get_global (Ordinal: 19, Address: 0x30187)
  • cef_cookie_manager_create_manager (Ordinal: 20, Address: 0x2fd3d)
  • cef_cookie_manager_get_global_manager (Ordinal: 21, Address: 0x2fd1d)
  • cef_create_url (Ordinal: 22, Address: 0x2f641)
  • cef_currently_on (Ordinal: 23, Address: 0x2f558)
  • cef_dictionary_value_create (Ordinal: 24, Address: 0x2fa9b)
  • cef_disk_cache_manager_get_global_manager (Ordinal: 25, Address: 0x301a7)
  • cef_do_message_loop_work (Ordinal: 26, Address: 0x2fdca)
  • cef_end_tracing_async (Ordinal: 27, Address: 0x2ff85)
  • cef_execute_process (Ordinal: 28, Address: 0x2fd62)
  • cef_force_web_plugin_shutdown (Ordinal: 29, Address: 0x30094)
  • cef_get_geolocation (Ordinal: 30, Address: 0x2fed1)
  • cef_get_path (Ordinal: 31, Address: 0x2fef6)
  • cef_get_trace_buffer_percent_full_async (Ordinal: 32, Address: 0x2ff65)
  • cef_initialize (Ordinal: 33, Address: 0x2fd87)
  • cef_is_web_plugin_unstable (Ordinal: 34, Address: 0x300da)
  • cef_launch_process (Ordinal: 35, Address: 0x2ff1b)
  • cef_list_value_create (Ordinal: 36, Address: 0x2fabb)
  • cef_now_from_system_trace_time (Ordinal: 37, Address: 0x2ffa5)
  • cef_parse_url (Ordinal: 38, Address: 0x2f61c)
  • cef_post_data_create (Ordinal: 39, Address: 0x2f814)
  • cef_post_data_element_create (Ordinal: 40, Address: 0x2f834)
  • cef_post_delayed_task (Ordinal: 41, Address: 0x2f5a2)
  • cef_post_task (Ordinal: 42, Address: 0x2f57d)
  • cef_process_message_create (Ordinal: 43, Address: 0x300fd)
  • cef_quit_message_loop (Ordinal: 44, Address: 0x2fe06)
  • cef_refresh_web_plugins (Ordinal: 45, Address: 0x2ffea)
  • cef_register_extension (Ordinal: 46, Address: 0x2fadb)
  • cef_register_scheme_handler_factory (Ordinal: 47, Address: 0x2f513)
  • cef_register_web_plugin_crash (Ordinal: 48, Address: 0x300b7)
  • cef_remove_cross_origin_whitelist_entry (Ordinal: 49, Address: 0x2f4ce)
  • cef_remove_web_plugin_path (Ordinal: 50, Address: 0x3004e)
  • cef_request_create (Ordinal: 51, Address: 0x2f7f4)
  • cef_response_create (Ordinal: 52, Address: 0x30147)
  • cef_run_message_loop (Ordinal: 53, Address: 0x2fde8)
  • cef_set_osmodal_loop (Ordinal: 54, Address: 0x2fe24)
  • cef_shutdown (Ordinal: 55, Address: 0x2fdac)
  • cef_stream_reader_create_for_data (Ordinal: 56, Address: 0x2f998)
  • cef_stream_reader_create_for_file (Ordinal: 57, Address: 0x2f973)
  • cef_stream_reader_create_for_handler (Ordinal: 58, Address: 0x2f9bd)
  • cef_stream_writer_create_for_file (Ordinal: 59, Address: 0x2fa2c)
  • cef_stream_writer_create_for_handler (Ordinal: 60, Address: 0x2fa51)
  • cef_string_ascii_to_utf16 (Ordinal: 61, Address: 0x2f3bb)
  • cef_string_ascii_to_wide (Ordinal: 62, Address: 0x2f396)
  • cef_string_list_alloc (Ordinal: 63, Address: 0x2f0e8)
  • cef_string_list_append (Ordinal: 64, Address: 0x2f152)
  • cef_string_list_clear (Ordinal: 65, Address: 0x2f175)
  • cef_string_list_copy (Ordinal: 66, Address: 0x2f1bb)
  • cef_string_list_free (Ordinal: 67, Address: 0x2f198)
  • cef_string_list_size (Ordinal: 68, Address: 0x2f108)
  • cef_string_list_value (Ordinal: 69, Address: 0x2f12d)
  • cef_string_map_alloc (Ordinal: 70, Address: 0x2f854)
  • cef_string_map_append (Ordinal: 71, Address: 0x2f908)
  • cef_string_map_clear (Ordinal: 72, Address: 0x2f92d)
  • cef_string_map_find (Ordinal: 73, Address: 0x2f899)
  • cef_string_map_free (Ordinal: 74, Address: 0x2f950)
  • cef_string_map_key (Ordinal: 75, Address: 0x2f8be)
  • cef_string_map_size (Ordinal: 76, Address: 0x2f874)
  • cef_string_map_value (Ordinal: 77, Address: 0x2f8e3)
  • cef_string_multimap_alloc (Ordinal: 78, Address: 0x2f6b0)
  • cef_string_multimap_append (Ordinal: 79, Address: 0x2f789)
  • cef_string_multimap_clear (Ordinal: 80, Address: 0x2f7ae)
  • cef_string_multimap_enumerate (Ordinal: 81, Address: 0x2f71a)
  • cef_string_multimap_find_count (Ordinal: 82, Address: 0x2f6f5)
  • cef_string_multimap_free (Ordinal: 83, Address: 0x2f7d1)
  • cef_string_multimap_key (Ordinal: 84, Address: 0x2f73f)
  • cef_string_multimap_size (Ordinal: 85, Address: 0x2f6d0)
  • cef_string_multimap_value (Ordinal: 86, Address: 0x2f764)
  • cef_string_userfree_utf16_alloc (Ordinal: 87, Address: 0x2f420)
  • cef_string_userfree_utf16_free (Ordinal: 88, Address: 0x2f486)
  • cef_string_userfree_utf8_alloc (Ordinal: 89, Address: 0x2f400)
  • cef_string_userfree_utf8_free (Ordinal: 90, Address: 0x2f463)
  • cef_string_userfree_wide_alloc (Ordinal: 91, Address: 0x2f3e0)
  • cef_string_userfree_wide_free (Ordinal: 92, Address: 0x2f440)
  • cef_string_utf16_clear (Ordinal: 93, Address: 0x2f226)
  • cef_string_utf16_cmp (Ordinal: 94, Address: 0x2f293)
  • cef_string_utf16_set (Ordinal: 95, Address: 0x2f0c3)
  • cef_string_utf16_to_utf8 (Ordinal: 96, Address: 0x2f371)
  • cef_string_utf16_to_wide (Ordinal: 97, Address: 0x2f327)
  • cef_string_utf8_clear (Ordinal: 98, Address: 0x2f203)
  • cef_string_utf8_cmp (Ordinal: 99, Address: 0x2f26e)
  • cef_string_utf8_set (Ordinal: 100, Address: 0x2f09e)
  • cef_string_utf8_to_utf16 (Ordinal: 101, Address: 0x2f34c)
  • cef_string_utf8_to_wide (Ordinal: 102, Address: 0x2f2dd)
  • cef_string_wide_clear (Ordinal: 103, Address: 0x2f1e0)
  • cef_string_wide_cmp (Ordinal: 104, Address: 0x2f249)
  • cef_string_wide_set (Ordinal: 105, Address: 0x2f079)
  • cef_string_wide_to_utf16 (Ordinal: 106, Address: 0x2f302)
  • cef_string_wide_to_utf8 (Ordinal: 107, Address: 0x2f2b8)
  • cef_task_runner_get_for_current_thread (Ordinal: 108, Address: 0x2f5d7)
  • cef_task_runner_get_for_thread (Ordinal: 109, Address: 0x2f5f7)
  • cef_unregister_internal_web_plugin (Ordinal: 110, Address: 0x30071)
  • cef_urlrequest_create (Ordinal: 111, Address: 0x30122)
  • cef_v8context_get_current_context (Ordinal: 112, Address: 0x2fb00)
  • cef_v8context_get_entered_context (Ordinal: 113, Address: 0x2fb20)
  • cef_v8context_in_context (Ordinal: 114, Address: 0x2fb40)
  • cef_v8stack_trace_get_current (Ordinal: 115, Address: 0x2fcf8)
  • cef_v8value_create_array (Ordinal: 116, Address: 0x2fcae)
  • cef_v8value_create_bool (Ordinal: 117, Address: 0x2fba0)
  • cef_v8value_create_date (Ordinal: 118, Address: 0x2fc3f)
  • cef_v8value_create_double (Ordinal: 119, Address: 0x2fc0f)
  • cef_v8value_create_function (Ordinal: 120, Address: 0x2fcd3)
  • cef_v8value_create_int (Ordinal: 121, Address: 0x2fbc5)
  • cef_v8value_create_null (Ordinal: 122, Address: 0x2fb80)
  • cef_v8value_create_object (Ordinal: 123, Address: 0x2fc89)
  • cef_v8value_create_string (Ordinal: 124, Address: 0x2fc64)
  • cef_v8value_create_uint (Ordinal: 125, Address: 0x2fbea)
  • cef_v8value_create_undefined (Ordinal: 126, Address: 0x2fb60)
  • cef_version_info (Ordinal: 127, Address: 0x2fe87)
  • cef_visit_web_plugin_info (Ordinal: 128, Address: 0x2ffc7)
  • cef_xml_reader_create (Ordinal: 129, Address: 0x2fa07)
  • cef_zip_reader_create (Ordinal: 130, Address: 0x2f9e2)

Imported DLLs & Functions

ADVAPI32.dll
  • RegCloseKey (Address: 0x12648014)
  • RegCreateKeyExW (Address: 0x12648000)
  • RegDeleteKeyW (Address: 0x12648004)
  • RegEnumKeyExW (Address: 0x12648008)
  • RegOpenKeyExW (Address: 0x12648010)
  • RegSetValueExW (Address: 0x1264800c)
arkIPC.dll
  • ShareMemoryCreate (Address: 0x1264864c)
  • ShareMemoryDisconnect (Address: 0x12648648)
  • ShareMemoryGetData (Address: 0x12648640)
  • ShareMemoryGetSize (Address: 0x12648644)
AsyncTask.dll
  • ??0Lock@AsyncTask@@QAE@XZ (Address: 0x12648040)
  • ??0WaitableEvent@AsyncTask@@QAE@_N0@Z (Address: 0x12648054)
  • ??1Lock@AsyncTask@@QAE@XZ (Address: 0x12648058)
  • ??1WaitableEvent@AsyncTask@@QAE@XZ (Address: 0x12648060)
  • ?Acquire@Lock@AsyncTask@@QAEXXZ (Address: 0x12648050)
  • ?PostDelayedTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@_J@Z (Address: 0x12648044)
  • ?PostTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@@Z (Address: 0x12648048)
  • ?Release@Lock@AsyncTask@@QAEXXZ (Address: 0x1264804c)
  • ?Signal@WaitableEvent@AsyncTask@@QAEXXZ (Address: 0x12648064)
  • ?TimedWait@WaitableEvent@AsyncTask@@QAE_NABVTimeDelta@2@@Z (Address: 0x1264805c)
ATL80.DLL
  • (Address: 0x1264801c)
  • (Address: 0x12648020)
  • (Address: 0x12648024)
  • (Address: 0x12648028)
  • (Address: 0x1264802c)
  • (Address: 0x12648030)
  • (Address: 0x12648034)
  • (Address: 0x12648038)
Common.dll
  • ??0CTXBSTR@@QAE@ABV0@@Z (Address: 0x126481f0)
  • ??0CTXBSTR@@QAE@ABVCTXStringW@@@Z (Address: 0x126480f8)
  • ??0CTXBSTR@@QAE@PB_W@Z (Address: 0x12648200)
  • ??0CTXBSTR@@QAE@XZ (Address: 0x1264820c)
  • ??0CTXHttpDownload@@QAE@XZ (Address: 0x12648178)
  • ??0CTXHttpDownloadSink@@IAE@XZ (Address: 0x12648180)
  • ??0CTXStringA@@QAE@ABV0@@Z (Address: 0x126480a0)
  • ??0CTXStringA@@QAE@PBD@Z (Address: 0x1264808c)
  • ??0CTXStringA@@QAE@XZ (Address: 0x12648100)
  • ??0CTXStringW@@QAE@ABV0@@Z (Address: 0x1264822c)
  • ??0CTXStringW@@QAE@ABVCTXBSTR@@@Z (Address: 0x126481e8)
  • ??0CTXStringW@@QAE@PA_W@Z (Address: 0x126481ec)
  • ??0CTXStringW@@QAE@PB_W@Z (Address: 0x126481f4)
  • ??0CTXStringW@@QAE@XZ (Address: 0x12648204)
  • ??0CUnZipFile@@QAE@XZ (Address: 0x126481a0)
  • ??1CTXBSTR@@QAE@XZ (Address: 0x126480c8)
  • ??1CTXHttpDownload@@UAE@XZ (Address: 0x12648174)
  • ??1CTXHttpDownloadSink@@UAE@XZ (Address: 0x1264817c)
  • ??1CTXStringA@@QAE@XZ (Address: 0x1264807c)
  • ??1CTXStringW@@QAE@XZ (Address: 0x12648224)
  • ??1CUnZipFile@@QAE@XZ (Address: 0x12648198)
  • ??4CTXBSTR@@QAEAAV0@ABV0@@Z (Address: 0x126480cc)
  • ??4CTXBSTR@@QAEAAV0@PB_W@Z (Address: 0x126480d4)
  • ??4CTXStringA@@QAEAAV0@ABV0@@Z (Address: 0x12648078)
  • ??4CTXStringW@@QAEAAV0@ABV0@@Z (Address: 0x126480d8)
  • ??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z (Address: 0x12648128)
  • ??4CTXStringW@@QAEAAV0@PA_W@Z (Address: 0x12648208)
  • ??4CTXStringW@@QAEAAV0@PB_W@Z (Address: 0x126480d0)
  • ??8@YA_NABVCTXStringW@@0@Z (Address: 0x126481cc)
  • ??8@YA_NABVCTXStringW@@PB_W@Z (Address: 0x12648220)
  • ??8CTXBSTR@@QBE_NPB_W@Z (Address: 0x12648098)
  • ??9@YA_NABVCTXStringW@@0@Z (Address: 0x12648130)
  • ??9@YA_NPB_WABVCTXBSTR@@@Z (Address: 0x12648134)
  • ??9CTXBSTR@@QBE_NPB_W@Z (Address: 0x1264809c)
  • ??ACTXStringW@@QBE_WH@Z (Address: 0x126480b0)
  • ??BCTXBSTR@@QBEPA_WXZ (Address: 0x126480c0)
  • ??BCTXStringA@@QBEPBDXZ (Address: 0x126481c4)
  • ??BCTXStringW@@QBEPB_WXZ (Address: 0x12648138)
  • ??H@YA?AVCTXStringW@@ABV0@0@Z (Address: 0x126481d8)
  • ??H@YA?AVCTXStringW@@ABV0@PB_W@Z (Address: 0x12648194)
  • ??H@YA?AVCTXStringW@@PB_WABV0@@Z (Address: 0x126481e4)
  • ??ICTXBSTR@@QAEPAPA_WXZ (Address: 0x12648124)
  • ??M@YA_NABVCTXStringA@@0@Z (Address: 0x126480f4)
  • ??M@YA_NABVCTXStringW@@0@Z (Address: 0x126481bc)
  • ??YCTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z (Address: 0x12648120)
  • ??YCTXStringW@@QAEAAV0@PB_W@Z (Address: 0x1264811c)
  • ?AddToDeadQueue@Misc@Util@@YAXHP6AXXZ@Z (Address: 0x12648114)
  • ?Append@CTXStringW@@QAEXPB_W@Z (Address: 0x126480e8)
  • ?CancelDownload@CTXHttpDownload@@QAEXXZ (Address: 0x12648164)
  • ?CombineQNC@FS@@YA?AVCTXStringW@@PB_W0@Z (Address: 0x12648188)
  • ?ConvertToPureFile@FS@@YA?AVCTXStringW@@PB_W@Z (Address: 0x1264819c)
  • ?Copy@CTXBSTR@@QBEPA_WXZ (Address: 0x126480b4)
  • ?CreateFileW@FS@@YAHPB_WKPAPAUITXFile@@@Z (Address: 0x12648140)
  • ?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z (Address: 0x1264813c)
  • ?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z (Address: 0x126481d4)
  • ?DeleteDirectory@FS@@YAHPB_W@Z (Address: 0x1264818c)
  • ?Download@CTXHttpDownload@@QAEHPB_WPAU_SYSTEMTIME@@0HPA_J@Z (Address: 0x1264816c)
  • ?EncodeHash@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@@Z (Address: 0x126481f8)
  • ?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z (Address: 0x126481c8)
  • ?Find@CTXStringA@@QBEHPBDH@Z (Address: 0x126481b0)
  • ?Find@CTXStringW@@QBEHPB_WH@Z (Address: 0x126480a4)
  • ?FindFileWithWildcard@FS@Util@@YAXPB_W0AAV?$vector@VCTXStringW@@V?$allocator@VCTXStringW@@@std@@@std@@H@Z (Address: 0x12648184)
  • ?Format@CTXStringA@@QAAXPBDZZ (Address: 0x126480fc)
  • ?Format@CTXStringW@@QAAXPB_WZZ (Address: 0x1264810c)
  • ?GetBSTR@CTXStringW@@QBEPA_WXZ (Address: 0x12648074)
  • ?GetBuffer@CTXStringA@@QAEPADXZ (Address: 0x126480dc)
  • ?GetBuffer@CTXStringW@@QAEPA_WH@Z (Address: 0x12648108)
  • ?GetBuffer@CTXStringW@@QAEPA_WXZ (Address: 0x12648228)
  • ?GetDownloadedFilePath@CTXHttpDownload@@QAEHAAVCTXStringW@@@Z (Address: 0x12648168)
  • ?GetExeDir@Sys@Util@@YA?AVCTXStringW@@XZ (Address: 0x1264812c)
  • ?GetLength@CTXStringA@@QBEHXZ (Address: 0x126481fc)
  • ?GetLength@CTXStringW@@QBEHXZ (Address: 0x12648210)
  • ?GetMainThreadLoop@Misc@Util@@YAPAVMessageLoopForUI@AsyncTask@@XZ (Address: 0x12648094)
  • ?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z (Address: 0x126480a8)
  • ?GetString@CTXStringA@@QBEPBDXZ (Address: 0x126481ac)
  • ?GetString@CTXStringW@@QBEPB_WXZ (Address: 0x126480c4)
  • ?GuidToString@Com@Util@@YAJABU_GUID@@PAPA_WH@Z (Address: 0x126481a8)
  • ?IsDirectoryExist@FS@@YAHPB_W@Z (Address: 0x12648190)
  • ?IsEmpty@CTXBSTR@@QAEHXZ (Address: 0x126480ac)
  • ?IsEmpty@CTXStringA@@QBE_NXZ (Address: 0x12648118)
  • ?IsEmpty@CTXStringW@@QBE_NXZ (Address: 0x126480b8)
  • ?IsInitAsyncMsgLoop@Misc@Util@@YAHXZ (Address: 0x12648088)
  • ?Left@CTXStringW@@QBE?AV1@H@Z (Address: 0x12648080)
  • ?MakeLower@CTXStringW@@QAEAAV1@XZ (Address: 0x12648218)
  • ?Mid@CTXStringA@@QBE?AV1@H@Z (Address: 0x126481c0)
  • ?Mid@CTXStringA@@QBE?AV1@HH@Z (Address: 0x126481b8)
  • ?Mid@CTXStringW@@QBE?AV1@H@Z (Address: 0x12648084)
  • ?Mid@CTXStringW@@QBE?AV1@HH@Z (Address: 0x12648090)
  • ?MinimzeMemory@Sys@Util@@YAXXZ (Address: 0x12648144)
  • ?OnConnected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@@Z (Address: 0x12648158)
  • ?OnConnecting@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z (Address: 0x1264815c)
  • ?OnDownloadStart@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z (Address: 0x12648154)
  • ?OnError@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@K@Z (Address: 0x12648148)
  • ?OnProgress@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z (Address: 0x12648150)
  • ?OnRedirected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z (Address: 0x1264814c)
  • ?OpenUrlWithDefBrowser@UrlBase@Util@@YAXABVCTXStringW@@@Z (Address: 0x126481dc)
  • ?OpenUrlWithIE@UrlBase@Util@@YAHABVCTXStringW@@@Z (Address: 0x126481e0)
  • ?ReleaseBuffer@CTXStringA@@QAEXH@Z (Address: 0x126480f0)
  • ?ReleaseBuffer@CTXStringW@@QAEXH@Z (Address: 0x12648104)
  • ?Replace@CTXStringW@@QAEHPB_W0@Z (Address: 0x126480e0)
  • ?ReverseFind@CTXStringW@@QBEH_W@Z (Address: 0x12648214)
  • ?Right@CTXStringW@@QBE?AV1@H@Z (Address: 0x1264821c)
  • ?SafeLoadLibrary@Sys@Util@@YAPAUHINSTANCE__@@PB_W@Z (Address: 0x12648110)
  • ?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z (Address: 0x126481d0)
  • ?SetUIInterface@CTXHttpDownload@@QAEXPAVCTXHttpDownloadSink@@@Z (Address: 0x12648170)
  • ?SetUseIEProxy@CTXHttpDownload@@QAEXH@Z (Address: 0x12648160)
  • ?Trim@CTXStringA@@QAEAAV1@XZ (Address: 0x126481b4)
  • ?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z (Address: 0x126480bc)
  • ?UnZipFile@CUnZipFile@@QAE_NABVCTXStringW@@0@Z (Address: 0x126481a4)
  • ?Utf8FromWS@Convert@Util@@YA?AVCTXStringA@@PB_WH@Z (Address: 0x126480ec)
  • ?Utf8ToWS@Convert@Util@@YA?AVCTXStringW@@PBDH@Z (Address: 0x126480e4)
CRYPT32.dll
  • CertGetNameStringW (Address: 0x1264806c)
GF.dll
  • ?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z (Address: 0x12648240)
  • ?DispatchFrameMsg@GF@Util@@YAJPAUIGFFrame@@PAUtagBaseArg@@PAHPAJH@Z (Address: 0x12648234)
  • ?FreeData@Metadata@Util@@YAJAAPA_W@Z (Address: 0x1264824c)
  • ?Get@Metadata@Util@@YAJPAUITXData@@PA_WPAPA_W@Z (Address: 0x12648238)
  • ?IsAccessibilityEnabled@GF@Util@@YAHXZ (Address: 0x12648248)
  • ?MessageBoxW@GF@Util@@YAJPAUIGFFrame@@PAPAUIGFSysMessageBox@@VCTXStringW@@2H@Z (Address: 0x1264823c)
  • ?ScreenPoint2ClientPoint@GF@Util@@YAXPAUIGFFrame@@AAUtagPOINT@@@Z (Address: 0x12648244)
KERNEL32.dll
  • CloseHandle (Address: 0x126482b8)
  • CreateEventW (Address: 0x126482d0)
  • CreateFileW (Address: 0x126482b4)
  • CreateMutexA (Address: 0x12648324)
  • CreateSemaphoreA (Address: 0x1264831c)
  • CreateThread (Address: 0x12648298)
  • DeleteCriticalSection (Address: 0x1264826c)
  • EnterCriticalSection (Address: 0x12648274)
  • FindResourceExW (Address: 0x12648280)
  • FindResourceW (Address: 0x126482e4)
  • FlushInstructionCache (Address: 0x12648314)
  • FreeLibrary (Address: 0x126482dc)
  • GetACP (Address: 0x12648384)
  • GetCurrentProcess (Address: 0x126482d4)
  • GetCurrentProcessId (Address: 0x1264830c)
  • GetCurrentThreadId (Address: 0x12648294)
  • GetEnvironmentVariableW (Address: 0x126482fc)
  • GetFileAttributesW (Address: 0x126482a8)
  • GetFileSize (Address: 0x126482ac)
  • GetLastError (Address: 0x1264827c)
  • GetLocaleInfoA (Address: 0x12648334)
  • GetModuleFileNameW (Address: 0x12648270)
  • GetModuleHandleA (Address: 0x126482e8)
  • GetModuleHandleExW (Address: 0x126482f8)
  • GetModuleHandleW (Address: 0x12648288)
  • GetProcAddress (Address: 0x126482d8)
  • GetProcessHeap (Address: 0x12648378)
  • GetSystemTimeAsFileTime (Address: 0x1264835c)
  • GetTempPathW (Address: 0x12648310)
  • GetThreadLocale (Address: 0x126482c0)
  • GetTickCount (Address: 0x12648290)
  • GetVersionExA (Address: 0x12648338)
  • GetVersionExW (Address: 0x126482bc)
  • HeapAlloc (Address: 0x1264832c)
  • HeapDestroy (Address: 0x12648330)
  • HeapFree (Address: 0x12648328)
  • HeapReAlloc (Address: 0x12648370)
  • HeapSize (Address: 0x12648374)
  • InitializeCriticalSection (Address: 0x12648264)
  • InterlockedCompareExchange (Address: 0x1264833c)
  • InterlockedDecrement (Address: 0x12648268)
  • InterlockedExchange (Address: 0x1264837c)
  • InterlockedIncrement (Address: 0x1264836c)
  • IsBadReadPtr (Address: 0x126482f4)
  • IsDebuggerPresent (Address: 0x12648358)
  • IsProcessorFeaturePresent (Address: 0x12648344)
  • LeaveCriticalSection (Address: 0x1264825c)
  • LoadLibraryA (Address: 0x12648340)
  • LoadResource (Address: 0x12648260)
  • LockResource (Address: 0x12648254)
  • lstrcmpiW (Address: 0x12648258)
  • lstrlenW (Address: 0x12648368)
  • OpenProcess (Address: 0x1264828c)
  • QueryPerformanceCounter (Address: 0x126482a0)
  • RaiseException (Address: 0x12648284)
  • ReadFile (Address: 0x126482b0)
  • ReadProcessMemory (Address: 0x126482cc)
  • ReleaseMutex (Address: 0x12648320)
  • ReleaseSemaphore (Address: 0x12648318)
  • ResetEvent (Address: 0x126482c8)
  • SetEvent (Address: 0x12648380)
  • SetLastError (Address: 0x12648364)
  • SetThreadLocale (Address: 0x126482c4)
  • SetUnhandledExceptionFilter (Address: 0x12648354)
  • SizeofResource (Address: 0x12648278)
  • Sleep (Address: 0x126482a4)
  • TerminateProcess (Address: 0x1264829c)
  • TerminateThread (Address: 0x12648300)
  • TlsAlloc (Address: 0x12648308)
  • TlsFree (Address: 0x12648304)
  • UnhandledExceptionFilter (Address: 0x12648350)
  • VirtualAlloc (Address: 0x1264834c)
  • VirtualFree (Address: 0x12648348)
  • VirtualProtect (Address: 0x126482ec)
  • VirtualQuery (Address: 0x126482f0)
  • WaitForSingleObject (Address: 0x126482e0)
  • WideCharToMultiByte (Address: 0x12648360)
MSVCP80.dll
  • ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ (Address: 0x12648390)
  • ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ (Address: 0x12648420)
  • ?_Raise_handler@std@@3P6AXABVexception@stdext@@@ZA (Address: 0x12648414)
  • ?_Throw@std@@YAXABVexception@stdext@@@Z (Address: 0x12648418)
  • ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ (Address: 0x126483ac)
  • ??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ (Address: 0x12648424)
  • ??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z (Address: 0x126483a0)
  • ??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z (Address: 0x126483cc)
  • ??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z (Address: 0x126483bc)
  • ??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z (Address: 0x12648404)
  • ??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_WABV10@@Z (Address: 0x126483c4)
  • ??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z (Address: 0x12648398)
  • ??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z (Address: 0x126483c8)
  • ??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z (Address: 0x126483dc)
  • ??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WI@Z (Address: 0x126483d8)
  • ??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ (Address: 0x12648408)
  • ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z (Address: 0x126483f8)
  • ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z (Address: 0x126483f4)
  • ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z (Address: 0x126483f0)
  • ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ (Address: 0x126483e4)
  • ??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ (Address: 0x126483e0)
  • ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ (Address: 0x126483fc)
  • ??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z (Address: 0x126483d0)
  • ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z (Address: 0x12648400)
  • ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z (Address: 0x1264840c)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z (Address: 0x126483a8)
  • ??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z (Address: 0x126483c0)
  • ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z (Address: 0x126483b0)
  • ?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHPB_W@Z (Address: 0x126483d4)
  • ?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z (Address: 0x126483e8)
  • ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ (Address: 0x126483b4)
  • ?length@?$char_traits@D@std@@SAIPBD@Z (Address: 0x1264841c)
  • ?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB (Address: 0x126483b8)
  • ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB (Address: 0x126483ec)
  • ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z (Address: 0x12648410)
  • ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z (Address: 0x126483a4)
  • ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z (Address: 0x1264838c)
  • ?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ (Address: 0x1264839c)
  • ?uncaught_exception@std@@YA_NXZ (Address: 0x12648394)
MSVCR80.dll
  • __clean_type_info_names_internal (Address: 0x1264843c)
  • __CppXcptFilter (Address: 0x1264842c)
  • __CxxFrameHandler3 (Address: 0x126484dc)
  • __dllonexit (Address: 0x1264849c)
  • _adjust_fdiv (Address: 0x12648440)
  • _amsg_exit (Address: 0x126484e8)
  • _crt_debugger_hook (Address: 0x12648438)
  • _CxxThrowException (Address: 0x126484a0)
  • _decode_pointer (Address: 0x1264848c)
  • _encode_pointer (Address: 0x12648498)
  • _encoded_null (Address: 0x12648484)
  • _except_handler4_common (Address: 0x12648430)
  • _initterm (Address: 0x12648480)
  • _initterm_e (Address: 0x12648444)
  • _invalid_parameter_noinfo (Address: 0x126484b0)
  • _lock (Address: 0x12648494)
  • _malloc_crt (Address: 0x12648488)
  • _onexit (Address: 0x12648490)
  • _purecall (Address: 0x12648454)
  • _recalloc (Address: 0x12648470)
  • _stricmp (Address: 0x126484d8)
  • _time64 (Address: 0x126484c8)
  • _unlock (Address: 0x126484ec)
  • ?_type_info_dtor_internal_method@type_info@@QAEXXZ (Address: 0x12648434)
  • ??_V@YAXPAX@Z (Address: 0x1264845c)
  • ??0exception@std@@QAE@ABQBD@Z (Address: 0x126484c0)
  • ??0exception@std@@QAE@ABV01@@Z (Address: 0x126484c4)
  • ??0exception@std@@QAE@XZ (Address: 0x126484bc)
  • ??1exception@std@@UAE@XZ (Address: 0x126484b8)
  • ??2@YAPAXI@Z (Address: 0x12648478)
  • ??3@YAXPAX@Z (Address: 0x12648448)
  • ?terminate@@YAXXZ (Address: 0x126484e4)
  • ?what@exception@std@@UBEPBDXZ (Address: 0x126484b4)
  • abs (Address: 0x126484cc)
  • free (Address: 0x12648468)
  • isxdigit (Address: 0x126484a8)
  • malloc (Address: 0x12648450)
  • memcmp (Address: 0x12648464)
  • memcpy (Address: 0x126484d4)
  • memcpy_s (Address: 0x1264846c)
  • memmove_s (Address: 0x12648460)
  • memset (Address: 0x12648474)
  • strcmp (Address: 0x126484e0)
  • strlen (Address: 0x126484ac)
  • strtoul (Address: 0x126484a4)
  • wcscmp (Address: 0x126484d0)
  • wcscpy_s (Address: 0x1264847c)
  • wcslen (Address: 0x1264844c)
  • wcsncpy_s (Address: 0x12648458)
ole32.dll
  • CoCreateGuid (Address: 0x12648654)
  • CoCreateInstance (Address: 0x12648658)
  • CoTaskMemFree (Address: 0x1264865c)
  • StringFromCLSID (Address: 0x12648660)
OLEAUT32.dll
  • LoadRegTypeLib (Address: 0x12648528)
  • LoadTypeLib (Address: 0x1264852c)
  • SafeArrayAccessData (Address: 0x12648504)
  • SafeArrayCreate (Address: 0x12648514)
  • SafeArrayGetLBound (Address: 0x12648508)
  • SafeArrayGetUBound (Address: 0x1264850c)
  • SafeArrayPutElement (Address: 0x12648510)
  • SafeArrayUnaccessData (Address: 0x12648500)
  • SysAllocString (Address: 0x12648518)
  • SysFreeString (Address: 0x12648524)
  • SysStringByteLen (Address: 0x126484fc)
  • SysStringLen (Address: 0x126484f8)
  • VariantClear (Address: 0x12648520)
  • VariantInit (Address: 0x126484f4)
  • VarUI4FromStr (Address: 0x1264851c)
PSAPI.DLL
  • GetProcessImageFileNameW (Address: 0x12648534)
SHELL32.dll
  • SHGetFileInfoW (Address: 0x12648540)
  • SHGetSpecialFolderPathW (Address: 0x1264853c)
SHLWAPI.dll
  • PathAppendW (Address: 0x12648550)
  • PathFileExistsW (Address: 0x1264854c)
  • PathRemoveFileSpecW (Address: 0x12648554)
  • UrlUnescapeA (Address: 0x12648548)
USER32.dll
  • BeginDeferWindowPos (Address: 0x12648598)
  • CallWindowProcW (Address: 0x12648580)
  • CharNextW (Address: 0x126485ec)
  • ClientToScreen (Address: 0x1264855c)
  • CopyRect (Address: 0x12648560)
  • CreateWindowExW (Address: 0x126485f0)
  • DeferWindowPos (Address: 0x126485a4)
  • DefWindowProcW (Address: 0x12648608)
  • DestroyWindow (Address: 0x12648604)
  • DispatchMessageW (Address: 0x126485d4)
  • EndDeferWindowPos (Address: 0x126485ac)
  • EnumDisplaySettingsW (Address: 0x126485fc)
  • GetAncestor (Address: 0x126485dc)
  • GetCapture (Address: 0x126485b0)
  • GetCursorPos (Address: 0x12648574)
  • GetDoubleClickTime (Address: 0x126485b8)
  • GetFocus (Address: 0x126485a8)
  • GetKeyState (Address: 0x126485c0)
  • GetMessageW (Address: 0x12648590)
  • GetMonitorInfoW (Address: 0x1264856c)
  • GetSystemMetrics (Address: 0x126485c4)
  • GetWindowLongW (Address: 0x1264859c)
  • GetWindowRect (Address: 0x12648568)
  • IsWindow (Address: 0x12648588)
  • KillTimer (Address: 0x126485e8)
  • MessageBoxW (Address: 0x126485cc)
  • MonitorFromWindow (Address: 0x12648570)
  • PeekMessageW (Address: 0x126485e4)
  • PostMessageW (Address: 0x12648600)
  • PostThreadMessageW (Address: 0x12648594)
  • PtInRect (Address: 0x12648584)
  • RegisterClassExW (Address: 0x126485f4)
  • RegisterWindowMessageW (Address: 0x12648578)
  • ReleaseCapture (Address: 0x126485bc)
  • SendMessageW (Address: 0x1264857c)
  • SetCapture (Address: 0x126485b4)
  • SetCursor (Address: 0x126485e0)
  • SetFocus (Address: 0x1264860c)
  • SetRect (Address: 0x12648564)
  • SetTimer (Address: 0x126485d0)
  • SetWindowLongW (Address: 0x126485a0)
  • SetWindowPos (Address: 0x1264858c)
  • TranslateMessage (Address: 0x126485d8)
  • UnregisterClassA (Address: 0x126485f8)
  • UpdateWindow (Address: 0x126485c8)
WINTRUST.dll
  • CryptCATAdminAcquireContext (Address: 0x12648630)
  • CryptCATAdminCalcHashFromFileHandle (Address: 0x1264861c)
  • CryptCATAdminEnumCatalogFromHash (Address: 0x12648620)
  • CryptCATAdminReleaseCatalogContext (Address: 0x12648638)
  • CryptCATAdminReleaseContext (Address: 0x12648634)
  • CryptCATCatalogInfoFromContext (Address: 0x12648624)
  • WinVerifyTrust (Address: 0x12648614)
  • WTHelperGetProvCertFromChain (Address: 0x12648628)
  • WTHelperGetProvSignerFromChain (Address: 0x12648618)
  • WTHelperProvDataFromStateData (Address: 0x1264862c)
xGraphic32.dll
  • CreateCanvas (Address: 0x12648698)
  • CreateTexture (Address: 0x12648674)
  • DeleteCanvas (Address: 0x12648668)
  • DeleteTexture (Address: 0x12648680)
  • DrawTexture (Address: 0x12648684)
  • FillSolidRectEx (Address: 0x12648690)
  • GetTexture (Address: 0x1264868c)
  • GetTextureSize (Address: 0x12648694)
  • LockTextureBits (Address: 0x1264867c)
  • ReleaseTexture (Address: 0x1264866c)
  • SetCanvasFilter (Address: 0x12648688)
  • SetTextureFilter (Address: 0x12648670)
  • UnlockTextureBits (Address: 0x12648678)