WenWen.dll

ADVAPI32.dll

RegCloseKey (Address: 0x64819000)
RegCreateKeyExW (Address: 0x64819014)
RegDeleteKeyW (Address: 0x64819018)
RegDeleteValueW (Address: 0x6481901c)
RegEnumKeyExW (Address: 0x64819010)
RegOpenKeyExW (Address: 0x6481900c)
RegQueryInfoKeyW (Address: 0x64819008)
RegSetValueExW (Address: 0x64819004)

AFUtil.dll

?GetCurrentStackInfo@Misc@Util@@YA?AVCTXStringW@@XZ (Address: 0x64819028)
?IsTimeStampValid@TimeStamp@Misc@Util@@YAHKE@Z (Address: 0x64819024)

api-ms-win-crt-heap-l1-1-0.dll

_callnewh (Address: 0x6481931c)
_recalloc (Address: 0x64819314)
free (Address: 0x64819310)
malloc (Address: 0x64819318)

api-ms-win-crt-runtime-l1-1-0.dll

_cexit (Address: 0x64819348)
_configure_narrow_argv (Address: 0x64819330)
_crt_atexit (Address: 0x64819344)
_errno (Address: 0x64819338)
_execute_onexit_table (Address: 0x64819340)
_initialize_narrow_environment (Address: 0x64819334)
_initialize_onexit_table (Address: 0x6481934c)
_initterm (Address: 0x64819350)
_initterm_e (Address: 0x64819354)
_invalid_parameter_noinfo (Address: 0x64819328)
_invalid_parameter_noinfo_noreturn (Address: 0x64819324)
_register_onexit_function (Address: 0x6481933c)
_seh_filter_dll (Address: 0x6481932c)

api-ms-win-crt-stdio-l1-1-0.dll

__stdio_common_vswprintf_s (Address: 0x6481935c)

api-ms-win-crt-string-l1-1-0.dll

wcscat_s (Address: 0x64819370)
wcscpy_s (Address: 0x64819364)
wcslen (Address: 0x64819368)
wcsncpy_s (Address: 0x6481936c)

AsyncTask.dll

?PostDelayedTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@_J@Z (Address: 0x64819030)
?PostTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@@Z (Address: 0x64819034)

Common.dll

(Address: 0x648190c8)
??0CCmdCodecBase@@QAE@XZ (Address: 0x648190e8)
??0CFmtString@@QAE@XZ (Address: 0x648190a4)
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z (Address: 0x64819060)
??0CTXBSTR@@QAE@PB_W@Z (Address: 0x6481905c)
??0CTXBSTR@@QAE@XZ (Address: 0x64819058)
??0CTXCommPack@@QAE@XZ (Address: 0x648190cc)
??0CTXStringA@@QAE@XZ (Address: 0x64819114)
??0CTXStringW@@QAE@ABV0@@Z (Address: 0x648190b4)
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z (Address: 0x64819194)
??0CTXStringW@@QAE@PA_W@Z (Address: 0x64819190)
??0CTXStringW@@QAE@PB_W@Z (Address: 0x6481918c)
??0CTXStringW@@QAE@UtagUTF8@@PBDH@Z (Address: 0x64819198)
??0CTXStringW@@QAE@XZ (Address: 0x64819178)
??0CTXTime@@QAE@_J@Z (Address: 0x64819108)
??1CCmdCodecBase@@UAE@XZ (Address: 0x648190ec)
??1CFmtString@@QAE@XZ (Address: 0x648190a8)
??1CTXBSTR@@QAE@XZ (Address: 0x64819064)
??1CTXCommPack@@UAE@XZ (Address: 0x648190d0)
??1CTXStringA@@QAE@XZ (Address: 0x64819118)
??1CTXStringW@@QAE@XZ (Address: 0x64819174)
??4CTXBSTR@@QAEAAV0@ABV0@@Z (Address: 0x64819128)
??4CTXBSTR@@QAEAAV0@PB_W@Z (Address: 0x6481912c)
??4CTXStringW@@QAEAAV0@ABV0@@Z (Address: 0x64819170)
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z (Address: 0x6481903c)
??4CTXStringW@@QAEAAV0@PB_W@Z (Address: 0x64819138)
??8@YA_NABVCTXStringW@@PB_W@Z (Address: 0x64819048)
??BCTXBSTR@@QBEPA_WXZ (Address: 0x6481906c)
??BCTXStringW@@QBEPB_WXZ (Address: 0x64819054)
??H@YA?AVCTXStringW@@ABV0@0@Z (Address: 0x648190b8)
??H@YA?AVCTXStringW@@ABV0@PB_W@Z (Address: 0x64819044)
??ICTXBSTR@@QAEPAPA_WXZ (Address: 0x64819070)
??M@YA_NABVCTXStringA@@0@Z (Address: 0x6481911c)
??YCTXBSTR@@QAEAAV0@ABV0@@Z (Address: 0x64819078)
??YCTXBSTR@@QAEAAV0@PB_W@Z (Address: 0x6481907c)
??YCTXStringW@@QAEAAV0@PB_W@Z (Address: 0x64819040)
?AddRef@CCmdCodecBase@@MAGKXZ (Address: 0x648190f0)
?CodeArrayLenHead@CCmdCodecBase@@IAEXPBDW4CMDFIELDTYPE@@H@Z (Address: 0x64819140)
?CodeArrayNumber@CCmdCodecBase@@IAEXW4TX_DATA_TYPE@@@Z (Address: 0x6481914c)
?CodeArrayTXDataNumber@CCmdCodecBase@@IAEXPBDW4TX_DATA_TYPE@@@Z (Address: 0x64819148)
?CodeEndArray@CCmdCodecBase@@IAEXXZ (Address: 0x64819144)
?CodeNumber@CCmdCodecBase@@IAEXPBDW4TX_DATA_TYPE@@@Z (Address: 0x6481919c)
?CodeStringLenHead@CCmdCodecBase@@IAEXPBDW4CMDFIELDTYPE@@@Z (Address: 0x6481913c)
?CodeTXData@CCmdCodecBase@@UAGJPAUITXData@@PAPAUITXBuffer@@@Z (Address: 0x648190f4)
?ConvertTXDataStringBundle@Convert@Util@@YAHPAUITXData@@@Z (Address: 0x64819188)
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z (Address: 0x64819098)
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z (Address: 0x64819180)
?DecodeArrayLenHead@CCmdCodecBase@@IAEXPBDW4CMDFIELDTYPE@@H@Z (Address: 0x64819160)
?DecodeArrayTXDataBufferLenHead@CCmdCodecBase@@IAEXPBDW4CMDFIELDTYPE@@@Z (Address: 0x6481916c)
?DecodeArrayTXDataNumber@CCmdCodecBase@@IAEXPBDW4TX_DATA_TYPE@@@Z (Address: 0x64819168)
?DecodeBuffer@CCmdCodecBase@@UAGJPAUITXBuffer@@PAPAUITXData@@PAU3@@Z (Address: 0x648190f8)
?DecodeBufferLenHead@CCmdCodecBase@@IAEXPBDW4CMDFIELDTYPE@@@Z (Address: 0x6481915c)
?DecodeEndArray@CCmdCodecBase@@IAEXXZ (Address: 0x64819164)
?DecodeNumber@CCmdCodecBase@@IAEXPBDW4TX_DATA_TYPE@@@Z (Address: 0x64819154)
?DecodeStringLenHead@CCmdCodecBase@@IAEXPBDW4CMDFIELDTYPE@@@Z (Address: 0x64819158)
?DoFormat@CFmtString@@QAEPB_WPB_W@Z (Address: 0x648190ac)
?EnableUnicodeString@CCmdCodecBase@@IAEXH@Z (Address: 0x64819134)
?EncodeUrl@Encode@Util@@YA?AVCTXStringW@@ABV3@_N1@Z (Address: 0x64819104)
?Find@CTXStringW@@QBEHPB_WH@Z (Address: 0x648190bc)
?Format@CTXStringA@@QAAXPBDZZ (Address: 0x64819120)
?Format@CTXStringW@@QAAXPB_WZZ (Address: 0x6481904c)
?Format@CTXTime@@QBE?AVCTXStringW@@PB_W@Z (Address: 0x6481910c)
?GetBSTR@CTXStringW@@QBEPA_WXZ (Address: 0x6481917c)
?GetByte@CTXCommPack@@QAEHAAEH@Z (Address: 0x648190d8)
?GetDecodeNumberUnsigned@CCmdCodecBase@@IAEKPBD@Z (Address: 0x64819150)
?GetDWord@CTXCommPack@@QAEHAAKHH@Z (Address: 0x648190e0)
?GetLength@CTXStringW@@QBEHXZ (Address: 0x64819130)
?GetMainAndLogicThreadId@Misc@Util@@YAXAAK0@Z (Address: 0x6481908c)
?GetMainThreadLoop@Misc@Util@@YAPAVMessageLoopForUI@AsyncTask@@XZ (Address: 0x64819084)
?GetRegulatedTime@Time@Util@@YA_NAA_J@Z (Address: 0x64819110)
?GetString@CTXCommPack@@QAEHAAVCTXStringW@@HHH@Z (Address: 0x648190e4)
?GetTXDataStr@Data@Util@@YAHPAUITXDataRead@@PBDAAVCTXStringW@@@Z (Address: 0x64819184)
?GetWord@CTXCommPack@@QAEHAAGHH@Z (Address: 0x648190dc)
?IsEmpty@CTXBSTR@@QAEHXZ (Address: 0x64819074)
?IsInitAsyncMsgLoop@Misc@Util@@YAHXZ (Address: 0x64819088)
?Left@CTXStringW@@QBE?AV1@H@Z (Address: 0x648190c4)
?Length@CTXBSTR@@QBEIXZ (Address: 0x64819068)
?LogTaskEnd@Misc@Util@@YAXK@Z (Address: 0x64819094)
?LogTaskStart@Misc@Util@@YAKPB_W@Z (Address: 0x64819090)
?Mid@CTXStringW@@QBE?AV1@H@Z (Address: 0x648190c0)
?PropertyDWord@CFmtString@@QAEHPB_WK0@Z (Address: 0x648190a0)
?PropertyStr@CFmtString@@QAEHPB_W0@Z (Address: 0x6481909c)
?QueryInterface@CCmdCodecBase@@MAGJABU_GUID@@PAPAX@Z (Address: 0x648190fc)
?Release@CCmdCodecBase@@MAGKXZ (Address: 0x64819100)
?Replace@CTXStringW@@QAEHPB_W0@Z (Address: 0x64819050)
?SetBufferIn@CTXCommPack@@QAEXAAVCTXBuffer@@H@Z (Address: 0x648190d4)
?Trim@CTXStringW@@QAEAAV1@XZ (Address: 0x64819124)
?TXLoadString@@YAPB_WPB_W0@Z (Address: 0x648190b0)
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z (Address: 0x64819080)

GF.dll

??0CDPIScaleIgnoreResetHelper@@QAE@XZ (Address: 0x648191a4)
??1CDPIScaleIgnoreResetHelper@@QAE@XZ (Address: 0x648191c4)
?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z (Address: 0x648191ac)
?HandleMessageScale@DPI@GF@Util@@YAXPAUtagBaseArg@@@Z (Address: 0x648191c0)
?IsScaleIgnore@DPI@GF@Util@@YA_NXZ (Address: 0x648191bc)
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@PAUITXCore@@H@Z (Address: 0x648191a8)
?ScaleSIZE@DPI@GF@Util@@YAXPAUtagSIZE@@@Z (Address: 0x648191b0)
?UnscaleLONG@DPI@GF@Util@@YAXPAJ@Z (Address: 0x648191b8)
?UnscaleSIZE@DPI@GF@Util@@YAXPAUtagSIZE@@@Z (Address: 0x648191b4)

KERNEL32.dll

DecodePointer (Address: 0x648191ec)
DeleteCriticalSection (Address: 0x648191fc)
EncodePointer (Address: 0x64819200)
EnterCriticalSection (Address: 0x64819214)
FindResourceW (Address: 0x64819234)
FreeLibrary (Address: 0x6481920c)
GetCurrentProcess (Address: 0x648191e0)
GetCurrentProcessId (Address: 0x64819258)
GetCurrentThreadId (Address: 0x64819248)
GetLastError (Address: 0x648191f4)
GetModuleFileNameW (Address: 0x6481922c)
GetModuleHandleW (Address: 0x64819230)
GetProcAddress (Address: 0x64819210)
GetSystemTimeAsFileTime (Address: 0x6481924c)
GetThreadLocale (Address: 0x6481923c)
GetTickCount (Address: 0x64819250)
InitializeCriticalSectionAndSpinCount (Address: 0x648191f8)
InitializeSListHead (Address: 0x648191d4)
InterlockedDecrement (Address: 0x64819208)
InterlockedExchange (Address: 0x64819244)
InterlockedIncrement (Address: 0x64819204)
IsDebuggerPresent (Address: 0x648191cc)
IsProcessorFeaturePresent (Address: 0x648191e8)
LeaveCriticalSection (Address: 0x64819218)
LoadLibraryExW (Address: 0x64819228)
LoadResource (Address: 0x6481921c)
lstrcmpiW (Address: 0x64819224)
MultiByteToWideChar (Address: 0x64819238)
OutputDebugStringW (Address: 0x648191d0)
QueryPerformanceCounter (Address: 0x64819254)
RaiseException (Address: 0x648191f0)
SetThreadLocale (Address: 0x64819240)
SetUnhandledExceptionFilter (Address: 0x648191dc)
SizeofResource (Address: 0x64819220)
TerminateProcess (Address: 0x648191e4)
UnhandledExceptionFilter (Address: 0x648191d8)

KernelUtil.dll

?AddReport@URL@Util@@YA?AVCTXStringW@@ABV3@0@Z (Address: 0x6481928c)
?CheckUinValid@Misc@Util@@YAHPA_W@Z (Address: 0x64819264)
?CreateMsgPack@Msg@Util@@YAHPAPAUITXMsgPack@@@Z (Address: 0x64819288)
?Get32ByteValueAddedSign@Misc@Util@@YA?AVCTXStringW@@XZ (Address: 0x648192a0)
?GetPublicName@Contact@Util@@YA?AVCTXStringW@@K@Z (Address: 0x6481927c)
?GetSelfUin@Contact@Util@@YAKXZ (Address: 0x64819298)
?GetSignFmt@URL@Util@@YAXAAVCFmtString@@@Z (Address: 0x64819260)
?IsBuddy@Contact@Util@@YAHK@Z (Address: 0x64819274)
?IsDiscussExist@Group@Util@@YAHK@Z (Address: 0x64819280)
?IsGroupExist@Group@Util@@YAHK@Z (Address: 0x64819284)
?IsMaskFlagValid@Contact@Util@@YAJKEKAAH@Z (Address: 0x6481926c)
?IsOnline@Contact@Util@@YAHK@Z (Address: 0x64819278)
?IsStranger@Contact@Util@@YAHK@Z (Address: 0x64819268)
?IsVASFlagValid@Contact@Util@@YAHKE@Z (Address: 0x6481929c)
?IsVASFlagValidEx@Contact@Util@@YAKKEI@Z (Address: 0x64819270)
?OpenUrlInIM@URL@Util@@YAXABVCTXStringW@@@Z (Address: 0x64819290)
?OpenUrlInIM@URL@Util@@YAXABVCTXStringW@@W4URLMODIFYLEVEL@12@0@Z (Address: 0x64819294)