VAS.dll
Description: 腾讯QQ
Authors: Copyright (C) 1999-2023 Tencent. All Rights Reserved
Version: 9.7.17.29215
Architecture: 32-bit
Operating System: Windows NT
SHA256: a0a1a4d0a6e4c5e171a73c093c5957ba
File Size: 567.9 KB
Uploaded At: Dec. 2, 2025, 2:48 p.m.
Views: 6
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- DllCanUnloadNow (Ordinal: 1, Address: 0x21f88)
- DllGetClassObject (Ordinal: 2, Address: 0x21f9c)
- DllRegisterServer (Ordinal: 3, Address: 0x21fd0)
- DllUnregisterServer (Ordinal: 4, Address: 0x21fdd)
Imported DLLs & Functions
ADVAPI32.dll
- RegCloseKey (Address: 0x64659000)
- RegCreateKeyExW (Address: 0x64659010)
- RegDeleteKeyW (Address: 0x64659018)
- RegDeleteValueW (Address: 0x6465901c)
- RegEnumKeyExW (Address: 0x6465900c)
- RegOpenKeyExW (Address: 0x64659004)
- RegOpenKeyW (Address: 0x64659024)
- RegQueryInfoKeyW (Address: 0x64659020)
- RegQueryValueExW (Address: 0x64659008)
- RegSetValueExW (Address: 0x64659014)
AFBase.DLL
- ?GetUserHeadFile@Head@Contact@Util@@YAHKAAVCTXStringW@@0PAW4UserHeadType@123@@Z (Address: 0x6465902c)
AFUtil.dll
- ?CreateChatFrameType@AFChatSession@Util@@YAHW4CFChatType@ChatFrame@@KPAPAUIAFChatFrameType@@PAUITXData@@@Z (Address: 0x64659038)
- ?GetCurrentStackInfo@Misc@Util@@YA?AVCTXStringW@@XZ (Address: 0x64659044)
- ?GetQQWifiDownloaderPath@QQWifiAutoDetect@Util@@YAXAAVCTXStringW@@AAH@Z (Address: 0x64659040)
- ?IsBubbleMode@Misc@Util@@YAHXZ (Address: 0x64659034)
- ?MakeCfgData@ChatFrameExtMatch@@YAXIPBW4CFExtEvent@ChatFrame@@HPAPAUITXData@@@Z (Address: 0x6465904c)
- ?OpenUrlWithWnd2@URL@Util@@YAPAUHWND__@@UtagUrlWndParam@12@@Z (Address: 0x6465903c)
- ?UrlEscapeW@URL@Util@@YA?AVCTXStringW@@ABV3@@Z (Address: 0x64659048)
api-ms-win-crt-convert-l1-1-0.dll
- _wtoi (Address: 0x646597c4)
- atoi (Address: 0x646597bc)
- wcstol (Address: 0x646597b8)
- wcstoul (Address: 0x646597c0)
api-ms-win-crt-heap-l1-1-0.dll
- _callnewh (Address: 0x646597d4)
- _recalloc (Address: 0x646597d0)
- free (Address: 0x646597cc)
- malloc (Address: 0x646597d8)
api-ms-win-crt-math-l1-1-0.dll
- _except1 (Address: 0x646597e0)
api-ms-win-crt-runtime-l1-1-0.dll
- _beginthreadex (Address: 0x64659800)
- _cexit (Address: 0x64659814)
- _configure_narrow_argv (Address: 0x64659810)
- _crt_atexit (Address: 0x646597fc)
- _errno (Address: 0x64659808)
- _execute_onexit_table (Address: 0x646597f0)
- _initialize_narrow_environment (Address: 0x6465981c)
- _initialize_onexit_table (Address: 0x646597e8)
- _initterm (Address: 0x64659818)
- _initterm_e (Address: 0x64659804)
- _invalid_parameter_noinfo (Address: 0x6465980c)
- _invalid_parameter_noinfo_noreturn (Address: 0x646597f4)
- _register_onexit_function (Address: 0x646597ec)
- _seh_filter_dll (Address: 0x646597f8)
api-ms-win-crt-stdio-l1-1-0.dll
- __stdio_common_vsprintf (Address: 0x6465982c)
- __stdio_common_vsprintf_s (Address: 0x64659830)
- __stdio_common_vsscanf (Address: 0x64659838)
- __stdio_common_vswprintf (Address: 0x64659824)
- __stdio_common_vswprintf_s (Address: 0x64659828)
- __stdio_common_vswscanf (Address: 0x64659834)
api-ms-win-crt-string-l1-1-0.dll
- _wcsicmp (Address: 0x64659854)
- _wcslwr_s (Address: 0x64659858)
- strcmp (Address: 0x6465985c)
- strlen (Address: 0x64659864)
- wcscat_s (Address: 0x64659860)
- wcscpy_s (Address: 0x64659848)
- wcslen (Address: 0x64659840)
- wcsncpy (Address: 0x64659850)
- wcsncpy_s (Address: 0x64659844)
- wmemcpy_s (Address: 0x6465984c)
api-ms-win-crt-time-l1-1-0.dll
- _time32 (Address: 0x6465986c)
api-ms-win-crt-utility-l1-1-0.dll
- _byteswap_ulong (Address: 0x64659874)
AppUtil.dll
- ?CodeServerData_BoolValue@API@AdvConfig@@YAHGHPAPAUITXData@@@Z (Address: 0x64659070)
- ?DecodeServerData_BoolValue@API@AdvConfig@@YAHGPAUITXData@@PAH@Z (Address: 0x6465906c)
- ?DeleteTipInChatSession@ChatSession@Util@@YAHKHPAUITXData@@@Z (Address: 0x64659078)
- ?GetChatSessionMainWnd@ChatSession@Util@@YAHKHPAPAUIGFFrame@@@Z (Address: 0x6465905c)
- ?GetChatSessionViewFrame@ChatSession@Util@@YAHKHPAPAUIGFFrame@@@Z (Address: 0x64659058)
- ?GetRegMainKeyBoolField@API@Registry@@YAHPB_WPBDPAHW4__MIDL___MIDL_itf_IRegistry_0000_0000_0003@@W4__MIDL___MIDL_itf_IRegistry_0000_0000_0004@@@Z (Address: 0x64659064)
- ?HandleCFEvent@ChatSession@Util@@YAJKHHPAUITXData@@@Z (Address: 0x64659080)
- ?HandleChatFrameEventCmd@ChatSession@Util@@YAHKW4CFChatType@ChatFrame@@PAUIAFChatFrameEventCmd@@@Z (Address: 0x64659074)
- ?SetRegMainKeyBoolField@API@Registry@@YAHPB_WPBDHW4__MIDL___MIDL_itf_IRegistry_0000_0000_0003@@W4__MIDL___MIDL_itf_IRegistry_0000_0000_0004@@@Z (Address: 0x64659060)
- ?ShowChatViewHostWnd@ChatSession@Util@@YAJKHH@Z (Address: 0x64659068)
- ?WriteMsgInChatSession@ChatSession@Util@@YAXKHPAUITXData@@@Z (Address: 0x64659084)
- ?WriteTipInChatSession@ChatSession@Util@@YAHKHPAUITXData@@@Z (Address: 0x6465907c)
- ?WriteTipInContactChatSession@ChatSession@Util@@YAHKPAUITXData@@@Z (Address: 0x64659054)
AsyncTask.dll
- ??0Lock@AsyncTask@@QAE@XZ (Address: 0x646590a4)
- ??1Lock@AsyncTask@@QAE@XZ (Address: 0x6465908c)
- ?Acquire@Lock@AsyncTask@@QAEXXZ (Address: 0x64659090)
- ?AssertAcquired@Lock@AsyncTask@@QBEXXZ (Address: 0x64659098)
- ?PostDelayedTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@_J@Z (Address: 0x646590a0)
- ?PostTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@@Z (Address: 0x6465909c)
- ?Release@Lock@AsyncTask@@QAEXXZ (Address: 0x64659094)
Common.dll
- (Address: 0x64659138)
- (Address: 0x64659210)
- (Address: 0x6465943c)
- ??0CCmdCodecBase@@QAE@XZ (Address: 0x64659248)
- ??0CFmtString@@QAE@XZ (Address: 0x646590e4)
- ??0CHttpClient@@QAE@XZ (Address: 0x646591bc)
- ??0CTXBSTR@@QAE@ABV0@@Z (Address: 0x6465930c)
- ??0CTXBSTR@@QAE@ABVCTXStringW@@@Z (Address: 0x64659448)
- ??0CTXBSTR@@QAE@H@Z (Address: 0x6465939c)
- ??0CTXBSTR@@QAE@PB_W@Z (Address: 0x646590d4)
- ??0CTXBSTR@@QAE@XZ (Address: 0x64659414)
- ??0CTXCommPack@@QAE@XZ (Address: 0x646591e0)
- ??0CTXHttpDownloadSink@@IAE@XZ (Address: 0x646591b4)
- ??0CTXStringA@@QAE@PBD@Z (Address: 0x64659158)
- ??0CTXStringA@@QAE@PBDH@Z (Address: 0x6465915c)
- ??0CTXStringA@@QAE@UtagEN@@PB_WH@Z (Address: 0x64659354)
- ??0CTXStringA@@QAE@UtagUTF8@@PB_WH@Z (Address: 0x64659160)
- ??0CTXStringA@@QAE@XZ (Address: 0x646593dc)
- ??0CTXStringW@@QAE@ABV0@@Z (Address: 0x646590f4)
- ??0CTXStringW@@QAE@ABVCTXBSTR@@@Z (Address: 0x64659424)
- ??0CTXStringW@@QAE@PA_W@Z (Address: 0x64659170)
- ??0CTXStringW@@QAE@PB_W@Z (Address: 0x64659428)
- ??0CTXStringW@@QAE@PB_WH@Z (Address: 0x64659114)
- ??0CTXStringW@@QAE@UtagUTF8@@PBDH@Z (Address: 0x64659118)
- ??0CTXStringW@@QAE@XZ (Address: 0x646590b0)
- ??0CTXThreadModel@@IAE@XZ (Address: 0x6465928c)
- ??0CTXTime@@QAE@_J@Z (Address: 0x6465919c)
- ??0CTXTime@@QAE@ABV0@@Z (Address: 0x646591a0)
- ??0CTXTime@@QAE@HHHHHHH@Z (Address: 0x6465924c)
- ??0CTXTime@@QAE@XZ (Address: 0x64659454)
- ??0CTXTimeSpan@@QAE@_J@Z (Address: 0x64659238)
- ??0CTXTimeSpan@@QAE@ABV0@@Z (Address: 0x6465923c)
- ??0CTXTimeSpan@@QAE@JHHH@Z (Address: 0x6465920c)
- ??1CCmdCodecBase@@UAE@XZ (Address: 0x64659450)
- ??1CFmtString@@QAE@XZ (Address: 0x646590e8)
- ??1CHttpClient@@QAE@XZ (Address: 0x646591c0)
- ??1CTXBSTR@@QAE@XZ (Address: 0x64659444)
- ??1CTXCommPack@@UAE@XZ (Address: 0x646591e4)
- ??1CTXHttpDownloadSink@@UAE@XZ (Address: 0x646591b8)
- ??1CTXStringA@@QAE@XZ (Address: 0x646593d8)
- ??1CTXStringW@@QAE@XZ (Address: 0x6465944c)
- ??1CTXThreadModel@@MAE@XZ (Address: 0x64659290)
- ??4CTXBSTR@@QAEAAV0@ABV0@@Z (Address: 0x64659310)
- ??4CTXBSTR@@QAEAAV0@PB_W@Z (Address: 0x64659188)
- ??4CTXStringA@@QAEAAV0@PBD@Z (Address: 0x646592cc)
- ??4CTXStringW@@QAEAAV0@ABV0@@Z (Address: 0x646590b8)
- ??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z (Address: 0x6465911c)
- ??4CTXStringW@@QAEAAV0@PA_W@Z (Address: 0x64659174)
- ??4CTXStringW@@QAEAAV0@PB_W@Z (Address: 0x646590b4)
- ??4CTXTime@@QAEAAV0@_J@Z (Address: 0x64659250)
- ??4CTXTime@@QAEAAV0@V0@@Z (Address: 0x64659254)
- ??4CTXTimeSpan@@QAEAAV0@V0@@Z (Address: 0x64659244)
- ??8@YA_NABVCTXStringW@@0@Z (Address: 0x64659320)
- ??8@YA_NABVCTXStringW@@PB_W@Z (Address: 0x64659358)
- ??8@YA_NPB_WABVCTXBSTR@@@Z (Address: 0x64659318)
- ??8@YA_NPB_WABVCTXStringW@@@Z (Address: 0x64659120)
- ??8CTXBSTR@@QBE_NABV0@@Z (Address: 0x64659208)
- ??8CTXBSTR@@QBE_NPA_W@Z (Address: 0x64659374)
- ??8CTXBSTR@@QBE_NPB_W@Z (Address: 0x64659100)
- ??9@YA_NABVCTXStringW@@0@Z (Address: 0x646591d0)
- ??9CTXBSTR@@QBE_NPB_W@Z (Address: 0x646590fc)
- ??ACTXStringW@@QBE_WH@Z (Address: 0x64659124)
- ??BCTXBSTR@@QBEPA_WXZ (Address: 0x64659440)
- ??BCTXStringA@@QBEPBDXZ (Address: 0x6465916c)
- ??BCTXStringW@@QBEPB_WXZ (Address: 0x64659418)
- ??GCTXTime@@QBE?AVCTXTimeSpan@@V0@@Z (Address: 0x646591a4)
- ??H@YA?AVCTXStringW@@ABV0@0@Z (Address: 0x646590bc)
- ??H@YA?AVCTXStringW@@ABV0@PB_W@Z (Address: 0x6465941c)
- ??H@YA?AVCTXStringW@@PB_WABV0@@Z (Address: 0x6465921c)
- ??ICTXBSTR@@QAEPAPA_WXZ (Address: 0x64659410)
- ??M@YA_NABVCTXStringA@@0@Z (Address: 0x64659274)
- ??M@YA_NABVCTXStringW@@0@Z (Address: 0x6465935c)
- ??PCTXTime@@QBE_NV0@@Z (Address: 0x6465933c)
- ??YCTXBSTR@@QAEAAV0@ABVCTXStringW@@@Z (Address: 0x64659334)
- ??YCTXStringA@@QAEAAV0@ABV0@@Z (Address: 0x646591fc)
- ??YCTXStringW@@QAEAAV0@ABV0@@Z (Address: 0x64659218)
- ??YCTXStringW@@QAEAAV0@PB_W@Z (Address: 0x64659368)
- ??YCTXTime@@QAEAAV0@VCTXTimeSpan@@@Z (Address: 0x64659338)
- ?AddRef@CCmdCodecBase@@MAGKXZ (Address: 0x646593f0)
- ?AddStrA@CTXCommPack@@QAEHABVCTXStringA@@@Z (Address: 0x646591ec)
- ?Append@CTXBSTR@@QAEJABV1@@Z (Address: 0x64659314)
- ?Append@CTXBSTR@@QAEJPB_W@Z (Address: 0x64659370)
- ?Append@CTXStringW@@QAEXPB_W@Z (Address: 0x646591d8)
- ?AppendChar@CTXStringW@@QAEX_W@Z (Address: 0x646591dc)
- ?AppendFormat@CTXStringW@@QAAXPB_WZZ (Address: 0x64659134)
- ?Base64Encode@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@H@Z (Address: 0x646591f8)
- ?CancelDownload@CHttpClient@@QAEXXZ (Address: 0x64659378)
- ?CodeArrayLenHead@CCmdCodecBase@@IAEXPBDW4CMDFIELDTYPE@@H@Z (Address: 0x64659384)
- ?CodeArrayTXDataNumber@CCmdCodecBase@@IAEXPBDW4TX_DATA_TYPE@@@Z (Address: 0x64659388)
- ?CodeBufferLenHead@CCmdCodecBase@@IAEXPBDW4CMDFIELDTYPE@@@Z (Address: 0x646592a0)
- ?CodeEndArray@CCmdCodecBase@@IAEXXZ (Address: 0x646592f8)
- ?CodeNumber@CCmdCodecBase@@IAEXPBDW4TX_DATA_TYPE@@@Z (Address: 0x64659438)
- ?CodeStringLenHead@CCmdCodecBase@@IAEXPBDW4CMDFIELDTYPE@@@Z (Address: 0x6465929c)
- ?CodeTXData@CCmdCodecBase@@UAGJPAUITXData@@PAPAUITXBuffer@@@Z (Address: 0x646593ec)
- ?CombinePath@FS@Util@@YA?AVCTXStringW@@ABV3@0@Z (Address: 0x6465922c)
- ?CompareNoCase@CTXStringW@@QBEHPB_W@Z (Address: 0x64659178)
- ?ConvertToPureFile@FS@@YA?AVCTXStringW@@PB_W@Z (Address: 0x6465926c)
- ?ConvertTXDataStringBundle@Convert@Util@@YAHPAUITXData@@@Z (Address: 0x646592bc)
- ?ConvertXMLStrToTXData@Convert@Util@@YAHPA_WPAPA_WPAUITXData@@0@Z (Address: 0x64659364)
- ?Copy@CTXBSTR@@QBEPA_WXZ (Address: 0x6465918c)
- ?CopyTo@CTXBSTR@@QBEJPAPA_W@Z (Address: 0x64659190)
- ?CopyTXDataField@Data@Util@@YAHPAUITXDataRead@@PAUITXData@@PBD2@Z (Address: 0x6465913c)
- ?CreateDirectoryW@FS@@YAHPB_W@Z (Address: 0x64659264)
- ?CreateFileW@FS@@YAHPB_WKPAPAUITXFile@@@Z (Address: 0x646591f0)
- ?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z (Address: 0x64659308)
- ?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z (Address: 0x646591ac)
- ?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z (Address: 0x646593f8)
- ?DecodeArrayLenHead@CCmdCodecBase@@IAEXPBDW4CMDFIELDTYPE@@H@Z (Address: 0x6465938c)
- ?DecodeArrayTXDataNumber@CCmdCodecBase@@IAEXPBDW4TX_DATA_TYPE@@@Z (Address: 0x64659300)
- ?DecodeArrayTXDataStringLenHead@CCmdCodecBase@@IAEXPBDW4CMDFIELDTYPE@@@Z (Address: 0x64659390)
- ?DecodeBuffer@CCmdCodecBase@@UAGJPAUITXBuffer@@PAPAUITXData@@PAU3@@Z (Address: 0x646593e8)
- ?DecodeBufferLenHead@CCmdCodecBase@@IAEXPBDW4CMDFIELDTYPE@@@Z (Address: 0x646592a8)
- ?DecodeEndArray@CCmdCodecBase@@IAEXXZ (Address: 0x646592fc)
- ?DecodeNumber@CCmdCodecBase@@IAEXPBDW4TX_DATA_TYPE@@@Z (Address: 0x64659430)
- ?DecodeString@CCmdCodecBase@@IAEXPBDI@Z (Address: 0x646593b4)
- ?DecodeStringLenHead@CCmdCodecBase@@IAEXPBDW4CMDFIELDTYPE@@@Z (Address: 0x6465942c)
- ?DeleteFileW@FS@@YAHPB_W@Z (Address: 0x646592e8)
- ?Detach@CTXBSTR@@QAEPA_WXZ (Address: 0x64659204)
- ?DoFormat@CFmtString@@QAEPB_WPB_W@Z (Address: 0x646590ec)
- ?Download@CHttpClient@@QAEHPB_WPAU_SYSTEMTIME@@0HPA_J@Z (Address: 0x64659230)
- ?DownloadToBuffer@CHttpClient@@QAEHPB_WPAU_SYSTEMTIME@@@Z (Address: 0x646591c8)
- ?Empty@CTXStringW@@QAEXXZ (Address: 0x6465917c)
- ?EnableUnicodeString@CCmdCodecBase@@IAEXH@Z (Address: 0x64659294)
- ?Encode16@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@@Z (Address: 0x64659348)
- ?Encode16@Encode@Util@@YA?AVCTXStringW@@PBXI@Z (Address: 0x64659398)
- ?EncodeUrl@Encode@Util@@YA?AVCTXStringW@@ABV3@_N1@Z (Address: 0x646590f0)
- ?EraseAsyncCallback@TXTimer@@YAHPAUITXAsyncCallback@@I@Z (Address: 0x64659260)
- ?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z (Address: 0x64659108)
- ?Find@CTXStringW@@QBEH_WH@Z (Address: 0x64659324)
- ?Find@CTXStringW@@QBEHPB_WH@Z (Address: 0x64659128)
- ?Format@CTXStringA@@QAAXPBDZZ (Address: 0x646590ac)
- ?Format@CTXStringW@@QAAXPB_WZZ (Address: 0x646590c0)
- ?FormatGmt@CTXTime@@QBE?AVCTXStringW@@PB_W@Z (Address: 0x64659340)
- ?GetAt@CTXStringA@@QBEDH@Z (Address: 0x64659164)
- ?GetBSTR@CTXStringW@@QBEPA_WXZ (Address: 0x646590cc)
- ?GetBSTRPtr@CTXStringW@@QAEPAPA_WXZ (Address: 0x646590d0)
- ?GetBuffer@CTXStringW@@QAEPA_WH@Z (Address: 0x646592c0)
- ?GetBuffer@CTXStringW@@QAEPA_WXZ (Address: 0x646590c4)
- ?GetBufferByteLeft@CTXCommPack@@QBEHXZ (Address: 0x646592f0)
- ?GetBufferOut@CTXCommPack@@QAEHAAVCTXBuffer@@@Z (Address: 0x646591e8)
- ?GetBufferSetLength@CTXStringW@@QAEPA_WH@Z (Address: 0x6465936c)
- ?GetByte@CTXCommPack@@QAEHAAEH@Z (Address: 0x646593ac)
- ?GetCodeNumberUnsigned@CCmdCodecBase@@IAEKPBD@Z (Address: 0x64659298)
- ?GetCustomData@CHttpClient@@QAEHPAPAUIUnknown@@@Z (Address: 0x646593a8)
- ?GetDay@CTXTime@@QBEHXZ (Address: 0x646593c4)
- ?GetDays@CTXTimeSpan@@QBE_JXZ (Address: 0x64659240)
- ?GetDecodeNumberSigned@CCmdCodecBase@@IAEHPBD@Z (Address: 0x646592a4)
- ?GetDecodeNumberUnsigned@CCmdCodecBase@@IAEKPBD@Z (Address: 0x64659434)
- ?GetDownloadedBuffer@CHttpClient@@QAEHPAPAEPAK@Z (Address: 0x646591cc)
- ?GetDownloadedFilePath@CHttpClient@@QAEHAAVCTXStringW@@@Z (Address: 0x64659420)
- ?GetExeDir@Sys@Util@@YA?AVCTXStringW@@XZ (Address: 0x646592c8)
- ?GetFileHash@FS@Util@@YAHPB_WAAVCTXBuffer@@AAK@Z (Address: 0x64659224)
- ?GetFileName@FS@Util@@YA?AVCTXStringW@@ABV3@@Z (Address: 0x64659228)
- ?GetHour@CTXTime@@QBEHXZ (Address: 0x646593c8)
- ?GetLCID@NLS@@YAKXZ (Address: 0x646592ec)
- ?GetLength@CTXStringA@@QBEHXZ (Address: 0x64659168)
- ?GetLength@CTXStringW@@QBEHXZ (Address: 0x646590f8)
- ?GetLogicThreadLoop@Misc@Util@@YAPAVMessageLoop@AsyncTask@@XZ (Address: 0x646592d0)
- ?GetLoginServerTime@Time@Util@@YAKXZ (Address: 0x6465910c)
- ?GetMainAndLogicThreadId@Misc@Util@@YAXAAK0@Z (Address: 0x6465927c)
- ?GetMainThreadLoop@Misc@Util@@YAPAVMessageLoopForUI@AsyncTask@@XZ (Address: 0x64659408)
- ?GetMinute@CTXTime@@QBEHXZ (Address: 0x646593cc)
- ?GetMonth@CTXTime@@QBEHXZ (Address: 0x646593c0)
- ?GetParentFolder@FS@Util@@YA?AVCTXStringW@@ABV3@@Z (Address: 0x64659270)
- ?GetRegularBits@Misc@Util@@YAJPAUITXBuffer@@KIAAK@Z (Address: 0x646593d4)
- ?GetRegulatedTime@Time@Util@@YA_NAA_J@Z (Address: 0x64659110)
- ?GetRegulatedTime@Time@Util@@YA_NAAJ@Z (Address: 0x64659214)
- ?GetResponseFileName@CHttpClient@@QAEHAAVCTXStringW@@@Z (Address: 0x64659278)
- ?GetSecond@CTXTime@@QBEHXZ (Address: 0x646593d0)
- ?GetString@CTXStringA@@QBEPBDXZ (Address: 0x64659200)
- ?GetString@CTXStringW@@QBEPB_WXZ (Address: 0x646591d4)
- ?GetTickCount@CTXTime@@SA?AV1@XZ (Address: 0x64659304)
- ?GetTime@CTXTime@@QBE_JXZ (Address: 0x64659258)
- ?GetTimeSpan@CTXTimeSpan@@QBE_JXZ (Address: 0x646593b8)
- ?GetTotalSeconds@CTXTimeSpan@@QBE_JXZ (Address: 0x64659198)
- ?GetTTPath@URL@Util@@YA?AVCTXStringW@@XZ (Address: 0x646592e4)
- ?GetTXDataStr@Data@Util@@YAHPAUITXDataRead@@PBDAAVCTXStringW@@@Z (Address: 0x646590d8)
- ?GetWord@CTXCommPack@@QAEHAAGHH@Z (Address: 0x646593b0)
- ?GetYear@CTXTime@@QBEHXZ (Address: 0x646593bc)
- ?IsDirectoryExist@FS@@YAHPB_W@Z (Address: 0x646593a0)
- ?IsEmpty@CTXBSTR@@QAEHXZ (Address: 0x64659194)
- ?IsEmpty@CTXStringW@@QBE_NXZ (Address: 0x646590c8)
- ?IsFileExist@FS@@YAHPB_W@Z (Address: 0x64659220)
- ?IsFileSystemFile@FS@@YAHPB_W@Z (Address: 0x646591f4)
- ?IsInitAsyncMsgLoop@Misc@Util@@YAHXZ (Address: 0x64659404)
- ?IsNetConnectionOK@Network@Util@@YAHPAHPAKPAPA_W@Z (Address: 0x646592e0)
- ?IsRunning@CHttpClient@@QBEHXZ (Address: 0x64659380)
- ?IsTencentTrusted@Misc@Util@@YAHPB_W@Z (Address: 0x6465934c)
- ?JumpBuf@CTXCommPack@@QAEHH@Z (Address: 0x646592f4)
- ?Left@CTXStringW@@QBE?AV1@H@Z (Address: 0x64659130)
- ?LoadTinyXmlByContent@FS@Util@@YAHPA_WPAPAVTiXmlDocument@@H@Z (Address: 0x646592dc)
- ?LogTaskEnd@Misc@Util@@YAXK@Z (Address: 0x646593fc)
- ?LogTaskStart@Misc@Util@@YAKPB_W@Z (Address: 0x64659400)
- ?Md5HashBuffer@@YAXPAEPBXK@Z (Address: 0x64659394)
- ?Mid@CTXStringW@@QBE?AV1@H@Z (Address: 0x6465912c)
- ?Mid@CTXStringW@@QBE?AV1@HH@Z (Address: 0x64659330)
- ?MoveDownloadFile@CHttpClient@@QAEHPB_WH@Z (Address: 0x64659234)
- ?oi_symmetry_encrypt2@@YAXPBEH0PAEPAH@Z (Address: 0x64659344)
- ?OnConnected@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@@Z (Address: 0x64659144)
- ?OnConnecting@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@PB_W@Z (Address: 0x64659140)
- ?OnDownloadStart@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@KK@Z (Address: 0x64659148)
- ?OnError@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@K@Z (Address: 0x64659154)
- ?OnProgress@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@KK@Z (Address: 0x6465914c)
- ?OnRedirected@CTXHttpDownloadSink@@UAEXPAVCHttpClient@@PB_W@Z (Address: 0x64659150)
- ?PropertyDWord@CFmtString@@QAEHPB_WK0@Z (Address: 0x646591b0)
- ?PropertyLong@CFmtString@@QAEHPB_WJ0@Z (Address: 0x646590e0)
- ?PropertyStr@CFmtString@@QAEHPB_W0@Z (Address: 0x646590dc)
- ?QueryInterface@CCmdCodecBase@@MAGJABU_GUID@@PAPAX@Z (Address: 0x646593e4)
- ?Release@CCmdCodecBase@@MAGKXZ (Address: 0x646593e0)
- ?ReleaseBuffer@CTXStringW@@QAEXH@Z (Address: 0x646592c4)
- ?RenameFile@FS@@YAHPB_W0@Z (Address: 0x64659268)
- ?Replace@CTXStringW@@QAEHPB_W0@Z (Address: 0x6465931c)
- ?ReverseFind@CTXStringW@@QBEH_W@Z (Address: 0x646592ac)
- ?Right@CTXStringW@@QBE?AV1@H@Z (Address: 0x64659184)
- ?SafeCoLoadLibrary@Sys@Util@@YAPAUHINSTANCE__@@PB_WHH@Z (Address: 0x64659350)
- ?SafeLoadLibrary@Sys@Util@@YAPAUHINSTANCE__@@PB_W@Z (Address: 0x646592b4)
- ?SafeLoadLibraryEx@Sys@Util@@YAPAUHINSTANCE__@@PB_WPAXK@Z (Address: 0x64659280)
- ?SetAsyncCallback@TXTimer@@YAHPAUITXAsyncCallback@@I@Z (Address: 0x6465925c)
- ?SetCustomData@CHttpClient@@QAEHPAUIUnknown@@@Z (Address: 0x646593a4)
- ?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z (Address: 0x64659104)
- ?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z (Address: 0x646592b8)
- ?SetUIInterface@CHttpClient@@QAEXPAVCTXHttpDownloadSink@@@Z (Address: 0x646591c4)
- ?SetUseUtf8Head@CHttpClient@@QAEXH@Z (Address: 0x6465937c)
- ?StartThread@CTXThreadModel@@QAEHXZ (Address: 0x64659284)
- ?StopThread@CTXThreadModel@@QAEHK@Z (Address: 0x64659288)
- ?ToLower@CTXBSTR@@QAEJXZ (Address: 0x64659360)
- ?Trim@CTXStringW@@QAEAAV1@_W@Z (Address: 0x64659180)
- ?TrimLeft@CTXStringW@@QAEAAV1@XZ (Address: 0x6465932c)
- ?TrimRight@CTXStringW@@QAEAAV1@XZ (Address: 0x64659328)
- ?TXLoadString@@YAPB_WPB_W0@Z (Address: 0x646593f4)
- ?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z (Address: 0x6465940c)
- ?Utf8FromWS@Convert@Util@@YA?AVCTXStringA@@PB_WH@Z (Address: 0x646591a8)
- ?Utf8ToWS@Convert@Util@@YA?AVCTXStringW@@PBDH@Z (Address: 0x646592b0)
- RemoveHardwareBreakpoint (Address: 0x646592d8)
- SetHardwareBreakpoint (Address: 0x646592d4)
GF.dll
- ??0CDPIScaleIgnoreResetHelper@@QAE@XZ (Address: 0x64659470)
- ??1CDPIScaleIgnoreResetHelper@@QAE@XZ (Address: 0x64659474)
- ?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z (Address: 0x64659478)
- ?GetRealDPIX@DPI@GF@Util@@YAHXZ (Address: 0x6465947c)
- ?HandleMessageScale@DPI@GF@Util@@YAXPAUtagBaseArg@@@Z (Address: 0x6465946c)
- ?IsScaleIgnore@DPI@GF@Util@@YA_NXZ (Address: 0x64659468)
- ?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@PAUITXCore@@H@Z (Address: 0x64659480)
- ?ScaleSIZE@DPI@GF@Util@@YAXPAUtagSIZE@@@Z (Address: 0x6465945c)
- ?UnscaleLONG@DPI@GF@Util@@YAXPAJ@Z (Address: 0x64659464)
- ?UnscaleSIZE@DPI@GF@Util@@YAXPAUtagSIZE@@@Z (Address: 0x64659460)
KERNEL32.dll
- CloseHandle (Address: 0x6465958c)
- CreateEventW (Address: 0x64659550)
- CreateFileMappingW (Address: 0x64659598)
- CreateFileW (Address: 0x646594d8)
- CreateMutexW (Address: 0x64659490)
- CreateProcessW (Address: 0x64659510)
- CreateSemaphoreW (Address: 0x6465954c)
- CreateThread (Address: 0x64659488)
- DecodePointer (Address: 0x64659508)
- DeleteCriticalSection (Address: 0x64659574)
- DeviceIoControl (Address: 0x64659518)
- EncodePointer (Address: 0x646594d0)
- EnterCriticalSection (Address: 0x64659568)
- ExpandEnvironmentStringsW (Address: 0x646595ac)
- FindClose (Address: 0x646594a8)
- FindFirstFileW (Address: 0x646594a4)
- FindResourceExW (Address: 0x64659514)
- FindResourceW (Address: 0x646594b8)
- FreeLibrary (Address: 0x646595a8)
- GetCurrentProcess (Address: 0x64659524)
- GetCurrentProcessId (Address: 0x646594e0)
- GetCurrentThreadId (Address: 0x64659538)
- GetExitCodeProcess (Address: 0x64659548)
- GetFileAttributesW (Address: 0x6465948c)
- GetLastError (Address: 0x64659564)
- GetLocalTime (Address: 0x646594dc)
- GetLongPathNameW (Address: 0x646594ac)
- GetModuleFileNameW (Address: 0x64659578)
- GetModuleHandleW (Address: 0x646595a4)
- GetProcAddress (Address: 0x646595a0)
- GetProcessHeap (Address: 0x646594e4)
- GetSystemDirectoryW (Address: 0x646595b0)
- GetSystemTime (Address: 0x64659494)
- GetSystemTimeAsFileTime (Address: 0x64659580)
- GetThreadLocale (Address: 0x646594b4)
- GetTickCount (Address: 0x64659584)
- GetVersionExW (Address: 0x6465949c)
- HeapAlloc (Address: 0x64659500)
- HeapDestroy (Address: 0x64659504)
- HeapFree (Address: 0x646594ec)
- HeapReAlloc (Address: 0x646594f0)
- HeapSize (Address: 0x646594e8)
- InitializeCriticalSection (Address: 0x64659528)
- InitializeCriticalSectionAndSpinCount (Address: 0x64659570)
- InitializeSListHead (Address: 0x646594cc)
- InterlockedCompareExchange (Address: 0x6465951c)
- InterlockedDecrement (Address: 0x64659558)
- InterlockedExchange (Address: 0x6465955c)
- InterlockedIncrement (Address: 0x64659554)
- IsDebuggerPresent (Address: 0x6465953c)
- IsProcessorFeaturePresent (Address: 0x646594f4)
- LeaveCriticalSection (Address: 0x6465956c)
- LoadLibraryExW (Address: 0x646594bc)
- LoadResource (Address: 0x646594c8)
- LocalFree (Address: 0x646594a0)
- LockResource (Address: 0x646594d4)
- lstrcmpiW (Address: 0x646594c0)
- MapViewOfFile (Address: 0x64659590)
- MultiByteToWideChar (Address: 0x6465957c)
- OpenFileMappingW (Address: 0x6465959c)
- OpenMutexW (Address: 0x646595b4)
- OpenProcess (Address: 0x64659520)
- OutputDebugStringW (Address: 0x64659544)
- QueryPerformanceCounter (Address: 0x64659588)
- RaiseException (Address: 0x64659560)
- ReleaseSemaphore (Address: 0x64659530)
- SetEvent (Address: 0x6465952c)
- SetThreadLocale (Address: 0x646594b0)
- SetUnhandledExceptionFilter (Address: 0x646594fc)
- SizeofResource (Address: 0x646594c4)
- SwitchToThread (Address: 0x64659498)
- TerminateProcess (Address: 0x646594f8)
- UnhandledExceptionFilter (Address: 0x64659540)
- UnmapViewOfFile (Address: 0x64659594)
- WaitForMultipleObjects (Address: 0x6465950c)
- WaitForSingleObject (Address: 0x64659534)
KernelUtil.dll
- ?CreateMsgPack@Msg@Util@@YAHPAPAUITXMsgPack@@@Z (Address: 0x646595dc)
- ?Get32ByteValueAddedSign@Misc@Util@@YA?AVCTXStringW@@XZ (Address: 0x646595c8)
- ?GetBrowserInstalled@URL@Util@@YAXAAH0@Z (Address: 0x64659630)
- ?GetBuildVer@Version@@YAKXZ (Address: 0x6465964c)
- ?GetFlag@@YAHAAK00@Z (Address: 0x64659624)
- ?GetIMVersion@Contact@Util@@YAGK@Z (Address: 0x64659644)
- ?GetIsUserAdminOrCreator@Group@Util@@YAXKKPAH0@Z (Address: 0x646595fc)
- ?GetMaskFlag@Contact@Util@@YAJKEKIAAK@Z (Address: 0x646595c0)
- ?GetNickname@Contact@Util@@YA?AVCTXStringW@@K@Z (Address: 0x646595d4)
- ?GetPublicName@Contact@Util@@YA?AVCTXStringW@@K@Z (Address: 0x646595d0)
- ?GetPubNo@Version@@YAKXZ (Address: 0x6465962c)
- ?GetRegistryData@NewRegistry@@YAHPAUITXCore@@PB_WW4NEW_REGISTRY_TYPE@1@PAPAUITXData@@@Z (Address: 0x646595ec)
- ?GetRTypeByUin@Contact@Util@@YAKK@Z (Address: 0x64659608)
- ?GetSelfUin@Contact@Util@@YAKXZ (Address: 0x646595bc)
- ?GetSignFmt@URL@Util@@YAXAAVCFmtString@@@Z (Address: 0x646595d8)
- ?GetStatus@Contact@Util@@YAGKPAUITXIMContactStatusMgr@@@Z (Address: 0x646595f8)
- ?GetVersionExW@Version@@YAXAAUtagVersionInfo@1@@Z (Address: 0x64659628)
- ?IsBuddy@Contact@Util@@YAHK@Z (Address: 0x6465961c)
- ?IsColleagueGroup@Group@Util@@YAHK@Z (Address: 0x64659600)
- ?IsDiscussExist@Group@Util@@YAHK@Z (Address: 0x646595e4)
- ?IsFlagValid@Contact@Util@@YAHKKPAUITXIMContactInfoMgr@@@Z (Address: 0x6465960c)
- ?IsGroupAnonymousMsg@Group@Util@@YA_NKPAUITXMsgPack@@@Z (Address: 0x646595e8)
- ?IsGroupExist@Group@Util@@YAHK@Z (Address: 0x646595e0)
- ?IsInFullScreen@WinScreenStatus@Util@@YAHPAPAUHWND__@@PAH1PAKPAPA_W1@Z (Address: 0x64659648)
- ?IsMaskFlagValid@Contact@Util@@YAJKEKAAH@Z (Address: 0x64659604)
- ?IsOnline@Contact@Util@@YAHK@Z (Address: 0x64659618)
- ?IsPrevented@Contact@Util@@YAHK@Z (Address: 0x64659614)
- ?IsRichServerControlBitOn@Misc@Util@@YAHKH@Z (Address: 0x646595cc)
- ?IsServerControlBitOn@Misc@Util@@YAHK@Z (Address: 0x64659634)
- ?IsSogouInstalled@URL@Util@@YAHH@Z (Address: 0x64659620)
- ?IsTTInstall@URL@Util@@YAHXZ (Address: 0x64659638)
- ?IsUseRecommendedBrowser@URL@Util@@YAHXZ (Address: 0x6465963c)
- ?OidbReqToCsReq@Cmd0x3e3@Oidb@Util@@YAJIPBDPAUITXData@@1@Z (Address: 0x64659610)
- ?OpenUrlInIM@URL@Util@@YAXABVCTXStringW@@@Z (Address: 0x646595c4)
- ?OpenUrlInIM@URL@Util@@YAXABVCTXStringW@@W4URLMODIFYLEVEL@12@0@Z (Address: 0x646595f4)
- ?SetRegistryData@NewRegistry@@YAHPAUITXCore@@PB_WW4NEW_REGISTRY_TYPE@1@PAUITXData@@@Z (Address: 0x646595f0)
- ?SetUseRecommendedBrowser@URL@Util@@YAXH@Z (Address: 0x64659640)
MSVCP140.dll
- ?_Xlength_error@std@@YAXPBD@Z (Address: 0x64659654)
- ?_Xout_of_range@std@@YAXPBD@Z (Address: 0x64659658)
ole32.dll
- CoCreateGuid (Address: 0x6465989c)
- CoCreateInstance (Address: 0x64659890)
- CoInitialize (Address: 0x64659888)
- CoTaskMemAlloc (Address: 0x64659880)
- CoTaskMemFree (Address: 0x64659898)
- CoTaskMemRealloc (Address: 0x64659884)
- CoUninitialize (Address: 0x64659894)
- StringFromCLSID (Address: 0x6465988c)
- StringFromGUID2 (Address: 0x6465987c)
OLEAUT32.dll
- LoadRegTypeLib (Address: 0x64659660)
- LoadTypeLib (Address: 0x64659664)
- RegisterTypeLib (Address: 0x64659674)
- SysAllocString (Address: 0x64659684)
- SysFreeString (Address: 0x64659688)
- SysStringLen (Address: 0x64659668)
- UnRegisterTypeLib (Address: 0x64659678)
- VariantChangeType (Address: 0x6465968c)
- VariantClear (Address: 0x6465966c)
- VariantCopy (Address: 0x6465967c)
- VariantInit (Address: 0x64659680)
- VarUI4FromStr (Address: 0x64659670)
PSAPI.DLL
- EnumProcesses (Address: 0x6465969c)
- EnumProcessModules (Address: 0x64659694)
- GetModuleBaseNameW (Address: 0x64659698)
SHELL32.dll
- ShellExecuteExW (Address: 0x646596ac)
- ShellExecuteW (Address: 0x646596a4)
- SHGetFileInfoW (Address: 0x646596a8)
SHLWAPI.dll
- PathAddBackslashW (Address: 0x646596b4)
- PathFileExistsW (Address: 0x646596b8)
tinyxml.dll
- ?Attribute@TiXmlElement@@QBEPBDPBD@Z (Address: 0x646598a8)
- ?FirstChildElement@TiXmlNode@@QAEPAVTiXmlElement@@PBD@Z (Address: 0x646598b0)
- ?NextSiblingElement@TiXmlNode@@QAEPAVTiXmlElement@@XZ (Address: 0x646598ac)
- ?RootElement@TiXmlDocument@@QAEPAVTiXmlElement@@XZ (Address: 0x646598a4)
USER32.dll
- ActivateKeyboardLayout (Address: 0x64659708)
- AttachThreadInput (Address: 0x64659730)
- CharNextW (Address: 0x646596fc)
- CreateWindowExW (Address: 0x64659714)
- DefWindowProcW (Address: 0x6465971c)
- DestroyWindow (Address: 0x646596d4)
- DispatchMessageW (Address: 0x64659740)
- GetCursorPos (Address: 0x64659724)
- GetDesktopWindow (Address: 0x6465973c)
- GetFocus (Address: 0x6465972c)
- GetForegroundWindow (Address: 0x646596c0)
- GetKeyboardLayout (Address: 0x64659704)
- GetKeyNameTextW (Address: 0x646596dc)
- GetMessageW (Address: 0x64659720)
- GetParent (Address: 0x646596d8)
- GetSystemMetrics (Address: 0x64659758)
- GetWindowLongW (Address: 0x646596c4)
- GetWindowPlacement (Address: 0x646596f8)
- GetWindowRect (Address: 0x64659748)
- GetWindowThreadProcessId (Address: 0x646596cc)
- IsIconic (Address: 0x64659750)
- IsWindow (Address: 0x6465975c)
- LoadCursorW (Address: 0x646596f4)
- LoadKeyboardLayoutW (Address: 0x6465970c)
- LoadStringW (Address: 0x64659700)
- MapVirtualKeyW (Address: 0x646596e0)
- PostMessageW (Address: 0x64659754)
- PostQuitMessage (Address: 0x646596ec)
- PostThreadMessageW (Address: 0x64659734)
- RegisterClassExW (Address: 0x64659718)
- RegisterDeviceNotificationW (Address: 0x646596e4)
- SendMessageW (Address: 0x64659738)
- SetCursor (Address: 0x64659744)
- SetForegroundWindow (Address: 0x64659728)
- SetWindowLongW (Address: 0x646596c8)
- SetWindowPos (Address: 0x6465974c)
- ShowWindow (Address: 0x64659710)
- SystemParametersInfoW (Address: 0x646596d0)
- TranslateMessage (Address: 0x646596f0)
- UnregisterDeviceNotification (Address: 0x646596e8)
VCRUNTIME140.dll
- __CxxFrameHandler3 (Address: 0x64659774)
- __std_exception_copy (Address: 0x64659788)
- __std_exception_destroy (Address: 0x6465978c)
- __std_type_info_destroy_list (Address: 0x64659790)
- _CxxThrowException (Address: 0x64659778)
- _except_handler4_common (Address: 0x64659794)
- _purecall (Address: 0x64659784)
- memcmp (Address: 0x64659780)
- memcpy (Address: 0x64659770)
- memmove (Address: 0x6465976c)
- memset (Address: 0x6465977c)
- wcschr (Address: 0x64659768)
- wcsstr (Address: 0x64659764)
VERSION.dll
- GetFileVersionInfoSizeW (Address: 0x646597a4)
- GetFileVersionInfoW (Address: 0x6465979c)
- VerQueryValueW (Address: 0x646597a0)
WININET.dll
- InternetGetCookieW (Address: 0x646597b0)
- InternetSetCookieW (Address: 0x646597ac)
xImage.dll
- ??0CxImage@@QAE@K@Z (Address: 0x646598b8)
- ??0CxMemFile@@QAE@PAEK@Z (Address: 0x646598d0)
- ??1CxMemFile@@UAE@XZ (Address: 0x646598e0)
- ?Decode@CxImage@@QAE_NPAVCxFile@@K@Z (Address: 0x646598c4)
- ?Destroy@CxImage@@QAE_NXZ (Address: 0x646598cc)
- ?Encode@CxImage@@QAE_NPAVCxFile@@K@Z (Address: 0x646598c0)
- ?FindFormat@CxImageHelper@@YAKPAVCxFile@@PAH@Z (Address: 0x646598bc)
- ?GetBits@CxImage@@QAEPAEK@Z (Address: 0x646598c8)
- ?GetBuffer@CxMemFile@@QAEPAE_N@Z (Address: 0x646598d8)
- ?Open@CxMemFile@@QAE_NXZ (Address: 0x646598dc)
- ?Size@CxMemFile@@UAEJXZ (Address: 0x646598d4)