MMOG.dll

ADVAPI32.dll

RegCloseKey (Address: 0x6128c004)
RegCreateKeyExW (Address: 0x6128c008)
RegDeleteKeyW (Address: 0x6128c00c)
RegDeleteValueW (Address: 0x6128c010)
RegEnumKeyExW (Address: 0x6128c000)
RegOpenKeyExW (Address: 0x6128c018)
RegQueryInfoKeyW (Address: 0x6128c01c)
RegQueryValueExW (Address: 0x6128c014)
RegSetValueExW (Address: 0x6128c020)

api-ms-win-crt-heap-l1-1-0.dll

_callnewh (Address: 0x6128c3c0)
_recalloc (Address: 0x6128c3bc)
free (Address: 0x6128c3c4)
malloc (Address: 0x6128c3c8)

api-ms-win-crt-math-l1-1-0.dll

_except1 (Address: 0x6128c3d0)

api-ms-win-crt-runtime-l1-1-0.dll

_cexit (Address: 0x6128c408)
_configure_narrow_argv (Address: 0x6128c3ec)
_crt_atexit (Address: 0x6128c400)
_errno (Address: 0x6128c3d8)
_execute_onexit_table (Address: 0x6128c3fc)
_initialize_narrow_environment (Address: 0x6128c3f0)
_initialize_onexit_table (Address: 0x6128c3f4)
_initterm (Address: 0x6128c3e4)
_initterm_e (Address: 0x6128c3e0)
_invalid_parameter_noinfo (Address: 0x6128c404)
_invalid_parameter_noinfo_noreturn (Address: 0x6128c3dc)
_register_onexit_function (Address: 0x6128c3f8)
_seh_filter_dll (Address: 0x6128c3e8)

api-ms-win-crt-stdio-l1-1-0.dll

__stdio_common_vsscanf (Address: 0x6128c410)
__stdio_common_vswprintf_s (Address: 0x6128c414)

api-ms-win-crt-string-l1-1-0.dll

strcmp (Address: 0x6128c430)
strlen (Address: 0x6128c428)
wcscat_s (Address: 0x6128c420)
wcscpy_s (Address: 0x6128c41c)
wcslen (Address: 0x6128c42c)
wcsncpy_s (Address: 0x6128c424)

api-ms-win-crt-time-l1-1-0.dll

_time64 (Address: 0x6128c438)

AppUtil.dll

?CodeServerData_BoolValue@API@AdvConfig@@YAHGHPAPAUITXData@@@Z (Address: 0x6128c02c)
?DecodeServerData_BoolValue@API@AdvConfig@@YAHGPAUITXData@@PAH@Z (Address: 0x6128c028)

AsyncTask.dll

??0Lock@AsyncTask@@QAE@XZ (Address: 0x6128c04c)
??1Lock@AsyncTask@@QAE@XZ (Address: 0x6128c034)
?Acquire@Lock@AsyncTask@@QAEXXZ (Address: 0x6128c038)
?AssertAcquired@Lock@AsyncTask@@QBEXXZ (Address: 0x6128c040)
?PostDelayedTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@_J@Z (Address: 0x6128c048)
?PostTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@@Z (Address: 0x6128c044)
?Release@Lock@AsyncTask@@QAEXXZ (Address: 0x6128c03c)

Common.dll

(Address: 0x6128c160)
(Address: 0x6128c164)
??0CFmtString@@QAE@XZ (Address: 0x6128c108)
??0CHttpClient@@QAE@XZ (Address: 0x6128c060)
??0CTXArray@@QAE@PAUITXArray@@@Z (Address: 0x6128c1a8)
??0CTXArray@@QAE@XZ (Address: 0x6128c1a4)
??0CTXBSTR@@QAE@ABV0@@Z (Address: 0x6128c13c)
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z (Address: 0x6128c14c)
??0CTXBSTR@@QAE@H@Z (Address: 0x6128c1dc)
??0CTXBSTR@@QAE@PB_W@Z (Address: 0x6128c0e8)
??0CTXBSTR@@QAE@XZ (Address: 0x6128c0e4)
??0CTXData@@QAE@ABV0@@Z (Address: 0x6128c198)
??0CTXData@@QAE@PAUITXData@@@Z (Address: 0x6128c080)
??0CTXData@@QAE@XZ (Address: 0x6128c194)
??0CTXHttpDownloadSink@@IAE@XZ (Address: 0x6128c058)
??0CTXStringA@@QAE@UtagUTF8@@PB_WH@Z (Address: 0x6128c1c4)
??0CTXStringA@@QAE@XZ (Address: 0x6128c130)
??0CTXStringW@@QAE@ABU_GUID@@@Z (Address: 0x6128c138)
??0CTXStringW@@QAE@ABV0@@Z (Address: 0x6128c0b8)
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z (Address: 0x6128c0c0)
??0CTXStringW@@QAE@H@Z (Address: 0x6128c0b4)
??0CTXStringW@@QAE@PA_W@Z (Address: 0x6128c0bc)
??0CTXStringW@@QAE@PB_W@Z (Address: 0x6128c128)
??0CTXStringW@@QAE@UtagUTF8@@PBDH@Z (Address: 0x6128c244)
??0CTXStringW@@QAE@XZ (Address: 0x6128c224)
??1CFmtString@@QAE@XZ (Address: 0x6128c10c)
??1CHttpClient@@QAE@XZ (Address: 0x6128c064)
??1CTXArray@@QAE@XZ (Address: 0x6128c1ac)
??1CTXBSTR@@QAE@XZ (Address: 0x6128c228)
??1CTXData@@QAE@XZ (Address: 0x6128c084)
??1CTXHttpDownloadSink@@UAE@XZ (Address: 0x6128c05c)
??1CTXStringA@@QAE@XZ (Address: 0x6128c0ac)
??1CTXStringW@@QAE@XZ (Address: 0x6128c250)
??4CTXBSTR@@QAEAAV0@ABV0@@Z (Address: 0x6128c1c8)
??4CTXBSTR@@QAEAAV0@PB_W@Z (Address: 0x6128c148)
??4CTXData@@QAEAAV0@PAUITXData@@@Z (Address: 0x6128c19c)
??4CTXDataField@@QAEAAV0@E@Z (Address: 0x6128c17c)
??4CTXDataField@@QAEAAV0@K@Z (Address: 0x6128c180)
??4CTXDataField@@QAEAAV0@PAUITXArray@@@Z (Address: 0x6128c18c)
??4CTXDataField@@QAEAAV0@PB_W@Z (Address: 0x6128c184)
??4CTXDataField@@QAEAAV0@VCTXBSTR@@@Z (Address: 0x6128c188)
??4CTXStringW@@QAEAAV0@ABV0@@Z (Address: 0x6128c248)
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z (Address: 0x6128c240)
??4CTXStringW@@QAEAAV0@PA_W@Z (Address: 0x6128c0c8)
??4CTXStringW@@QAEAAV0@PB_W@Z (Address: 0x6128c0c4)
??8@YA_NABVCTXStringW@@0@Z (Address: 0x6128c1e4)
??8@YA_NPB_WABVCTXStringW@@@Z (Address: 0x6128c0d0)
??8CTXBSTR@@QBE_NPA_W@Z (Address: 0x6128c158)
??8CTXBSTR@@QBE_NPB_W@Z (Address: 0x6128c154)
??9@YA_NABVCTXStringW@@PB_W@Z (Address: 0x6128c0d4)
??ACTXArray@@QAEAAVCTXArrayField@@H@Z (Address: 0x6128c1bc)
??ACTXArray@@QAEAAVCTXArrayField@@I@Z (Address: 0x6128c1b8)
??ACTXData@@QAEAAVCTXDataField@@PBD@Z (Address: 0x6128c090)
??BCTXArray@@QBEPAUITXArray@@XZ (Address: 0x6128c1b0)
??BCTXArrayField@@QBEPAUITXData@@XZ (Address: 0x6128c1a0)
??BCTXBSTR@@QBEPA_WXZ (Address: 0x6128c0ec)
??BCTXData@@QBEPAUITXData@@XZ (Address: 0x6128c088)
??BCTXDataField@@QBE?AVCTXBSTR@@XZ (Address: 0x6128c07c)
??BCTXDataField@@QBE?AVCTXStringW@@XZ (Address: 0x6128c120)
??BCTXDataField@@QBEPAUITXArray@@XZ (Address: 0x6128c190)
??BCTXStringA@@QBEPBDXZ (Address: 0x6128c0b0)
??BCTXStringW@@QBEPB_WXZ (Address: 0x6128c22c)
??CCTXArray@@QBEPAUITXArray@@XZ (Address: 0x6128c1b4)
??CCTXData@@QBEPAUITXData@@XZ (Address: 0x6128c124)
??H@YA?AVCTXStringW@@ABV0@0@Z (Address: 0x6128c23c)
??H@YA?AVCTXStringW@@ABV0@PB_W@Z (Address: 0x6128c140)
??H@YA?AVCTXStringW@@PB_WABV0@@Z (Address: 0x6128c1d4)
??ICTXBSTR@@QAEPAPA_WXZ (Address: 0x6128c0f0)
??ICTXData@@QAEPAPAUITXData@@XZ (Address: 0x6128c08c)
??M@YA_NABVCTXStringA@@0@Z (Address: 0x6128c1e0)
??M@YA_NABVCTXStringW@@0@Z (Address: 0x6128c144)
??YCTXBSTR@@QAEAAV0@PB_W@Z (Address: 0x6128c150)
??YCTXStringW@@QAEAAV0@ABV0@@Z (Address: 0x6128c0cc)
??YCTXStringW@@QAEAAV0@PB_W@Z (Address: 0x6128c1d0)
?AllocSysString@CTXStringW@@QBEPA_WXZ (Address: 0x6128c1ec)
?Base64Encode@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@H@Z (Address: 0x6128c12c)
?CombineQNC@FS@@YA?AVCTXStringW@@PB_W0@Z (Address: 0x6128c1f8)
?CompareNoCase@CTXStringW@@QBEHPB_W@Z (Address: 0x6128c0e0)
?ConvertToPureFile@FS@@YA?AVCTXStringW@@PB_W@Z (Address: 0x6128c178)
?ConvertTXDataStringBundle@Convert@Util@@YAHPAUITXData@@@Z (Address: 0x6128c200)
?ConvertXMLStrToTXData@Convert@Util@@YAHPA_WPAPA_WPAUITXData@@0@Z (Address: 0x6128c15c)
?CreateFileW@FS@@YAHPB_WKPAPAUITXFile@@@Z (Address: 0x6128c1f4)
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z (Address: 0x6128c0fc)
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z (Address: 0x6128c0f8)
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z (Address: 0x6128c208)
?Decode16@Encode@Util@@YAHABVCTXStringW@@AAVCTXBuffer@@@Z (Address: 0x6128c1c0)
?Detach@CTXBSTR@@QAEPA_WXZ (Address: 0x6128c1cc)
?DoFormat@CFmtString@@QAEPB_WPB_W@Z (Address: 0x6128c110)
?Download@CHttpClient@@QAEHPB_WPAU_SYSTEMTIME@@0HPA_J@Z (Address: 0x6128c06c)
?Encode16@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@@Z (Address: 0x6128c24c)
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z (Address: 0x6128c16c)
?Format@CTXStringA@@QAAXPBDZZ (Address: 0x6128c134)
?Format@CTXStringW@@QAAXPB_WZZ (Address: 0x6128c0d8)
?GetBSTR@CTXStringW@@QBEPA_WXZ (Address: 0x6128c220)
?GetFileHash@FS@Util@@YAHPB_WAAVCTXBuffer@@AAK@Z (Address: 0x6128c11c)
?GetLength@CTXStringW@@QBEHXZ (Address: 0x6128c238)
?GetMainThreadLoop@Misc@Util@@YAPAVMessageLoopForUI@AsyncTask@@XZ (Address: 0x6128c218)
?GetString@CTXStringW@@QBEPB_WXZ (Address: 0x6128c1d8)
?GetTXDataStr@Data@Util@@YAHPAUITXDataRead@@PBDAAVCTXStringW@@@Z (Address: 0x6128c204)
?GuidFromString@Com@Util@@YAJPA_WAAU_GUID@@@Z (Address: 0x6128c170)
?IsEmpty@CTXBSTR@@QAEHXZ (Address: 0x6128c054)
?IsEmpty@CTXStringW@@QBE_NXZ (Address: 0x6128c0dc)
?IsFileExist@FS@@YAHPB_W@Z (Address: 0x6128c174)
?IsInitAsyncMsgLoop@Misc@Util@@YAHXZ (Address: 0x6128c214)
?IsRunning@CHttpClient@@QBEHXZ (Address: 0x6128c078)
?Left@CTXStringW@@QBE?AV1@H@Z (Address: 0x6128c1e8)
?LoadXmlByName@FS@Util@@YAHPB_WPAPAUIXMLDOMDocument@@@Z (Address: 0x6128c1fc)
?LogTaskEnd@Misc@Util@@YAXK@Z (Address: 0x6128c20c)
?LogTaskStart@Misc@Util@@YAKPB_W@Z (Address: 0x6128c210)
?MoveDownloadFile@CHttpClient@@QAEHPB_WH@Z (Address: 0x6128c070)
?oi_symmetry_encrypt2@@YAXPBEH0PAEPAH@Z (Address: 0x6128c118)
?OnConnected@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@@Z (Address: 0x6128c094)
?OnConnecting@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@PB_W@Z (Address: 0x6128c098)
?OnDownloadStart@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@KK@Z (Address: 0x6128c09c)
?OnError@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@K@Z (Address: 0x6128c0a0)
?OnProgress@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@KK@Z (Address: 0x6128c0a4)
?OnRedirected@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@PB_W@Z (Address: 0x6128c0a8)
?PropertyDWord@CFmtString@@QAEHPB_WK0@Z (Address: 0x6128c104)
?PropertyLong@CFmtString@@QAEHPB_WJ0@Z (Address: 0x6128c1f0)
?PropertyStr@CFmtString@@QAEHPB_W0@Z (Address: 0x6128c100)
?ReverseFind@CTXStringW@@QBEH_W@Z (Address: 0x6128c234)
?Right@CTXStringW@@QBE?AV1@H@Z (Address: 0x6128c230)
?SetEventMask@CHttpClient@@QAEXK@Z (Address: 0x6128c074)
?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z (Address: 0x6128c168)
?SetUIInterface@CHttpClient@@QAEXPAVCTXHttpDownloadSink@@@Z (Address: 0x6128c068)
?TXLoadString@@YAPB_WPB_W0@Z (Address: 0x6128c114)
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z (Address: 0x6128c21c)
?Utf8FromWS@Convert@Util@@YA?AVCTXStringA@@PB_WH@Z (Address: 0x6128c0f4)

GF.dll

?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@PAUITXCore@@H@Z (Address: 0x6128c258)

KERNEL32.dll

DecodePointer (Address: 0x6128c27c)
DeleteCriticalSection (Address: 0x6128c2a4)
EncodePointer (Address: 0x6128c278)
EnterCriticalSection (Address: 0x6128c298)
FindResourceW (Address: 0x6128c2c0)
FreeLibrary (Address: 0x6128c288)
GetCurrentProcess (Address: 0x6128c260)
GetCurrentProcessId (Address: 0x6128c2ec)
GetCurrentThreadId (Address: 0x6128c2d4)
GetFileAttributesW (Address: 0x6128c2e4)
GetLastError (Address: 0x6128c294)
GetModuleFileNameW (Address: 0x6128c2b8)
GetModuleHandleW (Address: 0x6128c2bc)
GetProcAddress (Address: 0x6128c28c)
GetSystemTimeAsFileTime (Address: 0x6128c2d8)
GetThreadLocale (Address: 0x6128c2c8)
GetTickCount (Address: 0x6128c2dc)
InitializeCriticalSectionAndSpinCount (Address: 0x6128c2a0)
InitializeSListHead (Address: 0x6128c270)
InterlockedDecrement (Address: 0x6128c284)
InterlockedExchange (Address: 0x6128c2d0)
InterlockedIncrement (Address: 0x6128c280)
IsDebuggerPresent (Address: 0x6128c2f0)
IsProcessorFeaturePresent (Address: 0x6128c2e8)
LeaveCriticalSection (Address: 0x6128c29c)
LoadLibraryExW (Address: 0x6128c2b4)
LoadResource (Address: 0x6128c2a8)
lstrcmpiW (Address: 0x6128c2b0)
MultiByteToWideChar (Address: 0x6128c2c4)
OutputDebugStringW (Address: 0x6128c26c)
QueryPerformanceCounter (Address: 0x6128c2e0)
RaiseException (Address: 0x6128c290)
SetThreadLocale (Address: 0x6128c2cc)
SetUnhandledExceptionFilter (Address: 0x6128c264)
SizeofResource (Address: 0x6128c2ac)
TerminateProcess (Address: 0x6128c274)
UnhandledExceptionFilter (Address: 0x6128c268)

KernelUtil.dll

?AddReport@URL@Util@@YA?AVCTXStringW@@ABV3@0@Z (Address: 0x6128c31c)
?Get32ByteValueAddedSign@Misc@Util@@YA?AVCTXStringW@@XZ (Address: 0x6128c32c)
?GetMajorVer@Version@@YAEXZ (Address: 0x6128c300)
?GetMaskFlag@Contact@Util@@YAJKEKIAAK@Z (Address: 0x6128c304)
?GetMinorVer@Version@@YAEXZ (Address: 0x6128c2fc)
?GetSelfUin@Contact@Util@@YAKXZ (Address: 0x6128c30c)
?GetSignFmt@URL@Util@@YAXAAVCFmtString@@@Z (Address: 0x6128c318)
?GetStringFromBuffer@RichStatusHelper@@YAHABVCTXBuffer@@IAAVCTXBSTR@@AAIH@Z (Address: 0x6128c310)
?GetStringFromBufferWordLen@RichStatusHelper@@YAHABVCTXBuffer@@IAAVCTXBSTR@@AAIH@Z (Address: 0x6128c314)
?IsMaskFlagValid@Contact@Util@@YAJKEKAAH@Z (Address: 0x6128c308)
?IsNewFlagValid@Contact@Util@@YAHKK@Z (Address: 0x6128c320)
?IsOnline@Contact@Util@@YAHK@Z (Address: 0x6128c2f8)
?IsVASFlagValid@Contact@Util@@YAHKE@Z (Address: 0x6128c324)
?IsVASFlagValidEx@Contact@Util@@YAKKEI@Z (Address: 0x6128c328)
?OpenUrlInIM@URL@Util@@YAXABVCTXStringW@@W4URLMODIFYLEVEL@12@0@Z (Address: 0x6128c330)