repsvr.dll
Description: WPS Office Expansion tool
Authors: Copyright©2025 Kingsoft Corporation. All rights reserved.
Version: 12.1.0.23125
Architecture: 32-bit
Operating System: Windows NT
SHA256: aeaba038c2e4df7706d7c0c4e0915331
File Size: 655.0 KB
Uploaded At: Dec. 4, 2025, 6:12 a.m.
Views: 5
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- EntryPoint (Ordinal: 1, Address: 0x2b120)
Imported DLLs & Functions
api-ms-win-crt-convert-l1-1-0.dll
- _itow_s (Address: 0x10076374)
- _ui64tow_s (Address: 0x10076370)
- _wtoi (Address: 0x1007636c)
- wcstoul (Address: 0x10076378)
api-ms-win-crt-filesystem-l1-1-0.dll
- _lock_file (Address: 0x10076388)
- _unlock_file (Address: 0x10076380)
- _waccess_s (Address: 0x1007638c)
- _wrename (Address: 0x10076384)
api-ms-win-crt-heap-l1-1-0.dll
- _aligned_free (Address: 0x10076398)
- _aligned_malloc (Address: 0x1007639c)
- _callnewh (Address: 0x10076394)
- free (Address: 0x100763a0)
- malloc (Address: 0x100763a4)
api-ms-win-crt-runtime-l1-1-0.dll
- _cexit (Address: 0x100763cc)
- _configure_narrow_argv (Address: 0x100763b0)
- _crt_atexit (Address: 0x100763e0)
- _errno (Address: 0x100763d8)
- _execute_onexit_table (Address: 0x100763b8)
- _initialize_narrow_environment (Address: 0x100763ac)
- _initialize_onexit_table (Address: 0x100763c4)
- _initterm (Address: 0x100763c0)
- _initterm_e (Address: 0x100763bc)
- _invalid_parameter_noinfo (Address: 0x100763d4)
- _invalid_parameter_noinfo_noreturn (Address: 0x100763d0)
- _register_onexit_function (Address: 0x100763b4)
- _seh_filter_dll (Address: 0x100763dc)
- terminate (Address: 0x100763c8)
api-ms-win-crt-stdio-l1-1-0.dll
- __stdio_common_vsnwprintf_s (Address: 0x100763e8)
- __stdio_common_vswprintf (Address: 0x1007641c)
- __stdio_common_vswprintf_s (Address: 0x1007643c)
- _fseeki64 (Address: 0x10076408)
- _ftelli64 (Address: 0x10076430)
- _get_stream_buffer_pointers (Address: 0x10076420)
- _wfopen (Address: 0x100763fc)
- _wfopen_s (Address: 0x10076418)
- fclose (Address: 0x100763f0)
- fflush (Address: 0x100763f4)
- fgetc (Address: 0x100763f8)
- fgetpos (Address: 0x10076400)
- fgetwc (Address: 0x100763ec)
- fputc (Address: 0x10076428)
- fputwc (Address: 0x10076434)
- fread (Address: 0x10076424)
- fread_s (Address: 0x10076438)
- fsetpos (Address: 0x10076404)
- fwrite (Address: 0x1007640c)
- setvbuf (Address: 0x10076410)
- ungetc (Address: 0x10076414)
- ungetwc (Address: 0x1007642c)
api-ms-win-crt-string-l1-1-0.dll
- _strnicmp (Address: 0x10076448)
- _wcsicmp (Address: 0x10076450)
- _wcsnicmp (Address: 0x10076468)
- iswxdigit (Address: 0x10076444)
- tolower (Address: 0x10076460)
- towupper (Address: 0x1007645c)
- wcscat_s (Address: 0x1007646c)
- wcscpy_s (Address: 0x10076458)
- wcsncmp (Address: 0x10076454)
- wcsnlen (Address: 0x10076464)
- wmemcpy_s (Address: 0x1007644c)
api-ms-win-crt-time-l1-1-0.dll
- _time64 (Address: 0x10076474)
KERNEL32.dll
- CloseHandle (Address: 0x10076040)
- CopyFileTransactedW (Address: 0x100760dc)
- CopyFileW (Address: 0x100760cc)
- CreateDirectoryW (Address: 0x10076014)
- CreateEventW (Address: 0x10076140)
- CreateFileW (Address: 0x10076018)
- CreateMutexW (Address: 0x100760f0)
- CreateProcessW (Address: 0x10076100)
- CreateToolhelp32Snapshot (Address: 0x100760bc)
- DeleteCriticalSection (Address: 0x10076128)
- DeleteFileTransactedW (Address: 0x100760d8)
- DeleteFileW (Address: 0x1007601c)
- DisableThreadLibraryCalls (Address: 0x10076000)
- EnterCriticalSection (Address: 0x1007617c)
- ExpandEnvironmentStringsW (Address: 0x10076134)
- FindClose (Address: 0x10076020)
- FindFirstFileW (Address: 0x10076024)
- FindNextFileW (Address: 0x10076028)
- FindResourceExW (Address: 0x10076080)
- FindResourceW (Address: 0x100760a0)
- FlushInstructionCache (Address: 0x10076164)
- FreeLibrary (Address: 0x10076084)
- GetCurrentProcess (Address: 0x10076064)
- GetCurrentProcessId (Address: 0x10076108)
- GetCurrentThread (Address: 0x1007610c)
- GetCurrentThreadId (Address: 0x10076110)
- GetEnvironmentVariableW (Address: 0x1007612c)
- GetExitCodeProcess (Address: 0x1007606c)
- GetFileAttributesW (Address: 0x1007602c)
- GetFileSize (Address: 0x10076030)
- GetFullPathNameW (Address: 0x10076034)
- GetLastError (Address: 0x10076044)
- GetLongPathNameW (Address: 0x1007613c)
- GetModuleFileNameW (Address: 0x10076088)
- GetModuleHandleW (Address: 0x1007608c)
- GetPrivateProfileIntW (Address: 0x100760e4)
- GetPrivateProfileStringW (Address: 0x100760b0)
- GetProcAddress (Address: 0x10076090)
- GetProcessHeap (Address: 0x1007605c)
- GetSystemDirectoryW (Address: 0x10076078)
- GetSystemInfo (Address: 0x10076158)
- GetSystemTimeAsFileTime (Address: 0x10076004)
- GetSystemWow64DirectoryW (Address: 0x1007607c)
- GetThreadContext (Address: 0x1007615c)
- GetTickCount (Address: 0x10076074)
- GetWindowsDirectoryW (Address: 0x10076114)
- HeapAlloc (Address: 0x1007604c)
- HeapDestroy (Address: 0x10076048)
- HeapFree (Address: 0x10076054)
- HeapReAlloc (Address: 0x10076050)
- HeapSize (Address: 0x10076058)
- InitializeCriticalSectionAndSpinCount (Address: 0x10076124)
- InitializeSListHead (Address: 0x10076190)
- IsDebuggerPresent (Address: 0x10076154)
- IsProcessorFeaturePresent (Address: 0x10076194)
- IsWow64Process (Address: 0x10076118)
- LeaveCriticalSection (Address: 0x10076180)
- LoadLibraryExA (Address: 0x1007616c)
- LoadLibraryExW (Address: 0x10076170)
- LoadLibraryW (Address: 0x100760a4)
- LoadResource (Address: 0x10076094)
- LocalFree (Address: 0x100760a8)
- LockResource (Address: 0x10076098)
- lstrcmpW (Address: 0x100760ac)
- lstrlenW (Address: 0x1007611c)
- MoveFileExW (Address: 0x100760b4)
- MoveFileTransactedW (Address: 0x100760e0)
- MoveFileW (Address: 0x100760d0)
- MultiByteToWideChar (Address: 0x100760e8)
- OpenMutexW (Address: 0x100760f4)
- OpenProcess (Address: 0x10076070)
- OutputDebugStringW (Address: 0x1007603c)
- Process32FirstW (Address: 0x100760c0)
- Process32NextW (Address: 0x100760c4)
- ProcessIdToSessionId (Address: 0x10076138)
- QueryPerformanceCounter (Address: 0x10076174)
- QueryPerformanceFrequency (Address: 0x10076178)
- RaiseException (Address: 0x10076120)
- ReadFile (Address: 0x100760ec)
- ReleaseMutex (Address: 0x100760f8)
- RemoveDirectoryW (Address: 0x10076038)
- ResetEvent (Address: 0x10076188)
- ResumeThread (Address: 0x10076144)
- SetEnvironmentVariableW (Address: 0x10076130)
- SetEvent (Address: 0x10076184)
- SetLastError (Address: 0x10076104)
- SetThreadContext (Address: 0x10076160)
- SetUnhandledExceptionFilter (Address: 0x10076008)
- SizeofResource (Address: 0x1007609c)
- Sleep (Address: 0x100760c8)
- TerminateProcess (Address: 0x10076068)
- UnhandledExceptionFilter (Address: 0x1007600c)
- VerifyVersionInfoW (Address: 0x100760b8)
- VerSetConditionMask (Address: 0x10076010)
- VirtualAlloc (Address: 0x10076148)
- VirtualFree (Address: 0x1007614c)
- VirtualProtect (Address: 0x10076168)
- VirtualQuery (Address: 0x10076150)
- WaitForSingleObject (Address: 0x10076060)
- WaitForSingleObjectEx (Address: 0x1007618c)
- WideCharToMultiByte (Address: 0x100760d4)
- WritePrivateProfileStringW (Address: 0x100760fc)
ktmw32.dll
- CommitTransaction (Address: 0x10076480)
- CreateTransaction (Address: 0x10076484)
- RollbackTransaction (Address: 0x1007647c)
MSVCP140.dll
- _Mtx_destroy_in_situ (Address: 0x10076278)
- _Mtx_init_in_situ (Address: 0x10076274)
- _Mtx_lock (Address: 0x1007627c)
- _Mtx_unlock (Address: 0x10076280)
- ?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z (Address: 0x100761b8)
- ?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z (Address: 0x100762e4)
- ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z (Address: 0x100761d8)
- ?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z (Address: 0x100762dc)
- ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ (Address: 0x100762f4)
- ?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ (Address: 0x100762bc)
- ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ (Address: 0x100761ec)
- ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z (Address: 0x10076260)
- ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ (Address: 0x10076220)
- ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ (Address: 0x1007629c)
- ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ (Address: 0x100761b0)
- ?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ (Address: 0x100762c0)
- ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ (Address: 0x100761e8)
- ?_Random_device@std@@YAIXZ (Address: 0x10076268)
- ?_Throw_C_error@std@@YAXH@Z (Address: 0x10076284)
- ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ (Address: 0x10076224)
- ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ (Address: 0x100762a0)
- ?_Xbad_function_call@std@@YAXXZ (Address: 0x1007626c)
- ?_Xinvalid_argument@std@@YAXPBD@Z (Address: 0x100761c8)
- ?_Xlength_error@std@@YAXPBD@Z (Address: 0x10076300)
- ?_Xout_of_range@std@@YAXPBD@Z (Address: 0x100762fc)
- ??0_Lockit@std@@QAE@H@Z (Address: 0x1007630c)
- ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ (Address: 0x100761a4)
- ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ (Address: 0x10076200)
- ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z (Address: 0x10076218)
- ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z (Address: 0x10076290)
- ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z (Address: 0x10076204)
- ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z (Address: 0x100761a8)
- ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z (Address: 0x10076254)
- ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ (Address: 0x100762d4)
- ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ (Address: 0x100761dc)
- ??1_Lockit@std@@QAE@XZ (Address: 0x10076308)
- ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ (Address: 0x1007619c)
- ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x100761f8)
- ??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ (Address: 0x1007621c)
- ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x10076294)
- ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x10076208)
- ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ (Address: 0x100761ac)
- ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x10076258)
- ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ (Address: 0x100762d0)
- ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x100761e0)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z (Address: 0x10076270)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z (Address: 0x1007628c)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z (Address: 0x10076288)
- ??Bid@locale@std@@QAEIXZ (Address: 0x100762f8)
- ?always_noconv@codecvt_base@std@@QBE_NXZ (Address: 0x100762f0)
- ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ (Address: 0x100761b4)
- ?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ (Address: 0x100762cc)
- ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ (Address: 0x100761e4)
- ?getloc@ios_base@std@@QBE?AVlocale@2@XZ (Address: 0x100762d8)
- ?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A (Address: 0x100761c0)
- ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A (Address: 0x1007623c)
- ?id@?$ctype@_W@std@@2V0locale@2@A (Address: 0x100761c4)
- ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z (Address: 0x10076228)
- ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z (Address: 0x100762a4)
- ?in@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPA_W3AAPA_W@Z (Address: 0x100762ec)
- ?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z (Address: 0x100761cc)
- ?out@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z (Address: 0x10076314)
- ?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z (Address: 0x100761d0)
- ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z (Address: 0x1007620c)
- ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ (Address: 0x10076244)
- ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z (Address: 0x10076210)
- ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@U_Mbstatet@@@2@@Z (Address: 0x10076264)
- ?set_new_handler@std@@YAP6AXXZP6AXXZ@Z (Address: 0x100762b4)
- ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z (Address: 0x1007622c)
- ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z (Address: 0x100762a8)
- ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z (Address: 0x100761a0)
- ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z (Address: 0x100761fc)
- ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z (Address: 0x10076298)
- ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ (Address: 0x10076248)
- ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ (Address: 0x100761bc)
- ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ (Address: 0x10076230)
- ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ (Address: 0x1007624c)
- ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z (Address: 0x100762c8)
- ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z (Address: 0x100762c4)
- ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ (Address: 0x10076234)
- ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ (Address: 0x100762ac)
- ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ (Address: 0x10076214)
- ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ (Address: 0x10076238)
- ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ (Address: 0x100762b0)
- ?uncaught_exception@std@@YA_NXZ (Address: 0x10076304)
- ?uncaught_exceptions@std@@YAHXZ (Address: 0x10076240)
- ?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z (Address: 0x100762e8)
- ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z (Address: 0x100761d4)
- ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z (Address: 0x10076250)
- ?widen@?$ctype@_W@std@@QBE_WD@Z (Address: 0x100762e0)
- ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z (Address: 0x1007625c)
- ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z (Address: 0x100762b8)
- ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z (Address: 0x100761f0)
- ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z (Address: 0x10076310)
- ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z (Address: 0x100761f4)
VCRUNTIME140.dll
- __current_exception (Address: 0x1007631c)
- __current_exception_context (Address: 0x10076324)
- __CxxFrameHandler3 (Address: 0x10076340)
- __RTDynamicCast (Address: 0x10076328)
- __std_exception_copy (Address: 0x10076334)
- __std_exception_destroy (Address: 0x10076338)
- __std_terminate (Address: 0x1007632c)
- __std_type_info_compare (Address: 0x10076354)
- __std_type_info_destroy_list (Address: 0x10076364)
- __std_type_info_name (Address: 0x10076358)
- _CxxThrowException (Address: 0x1007633c)
- _except_handler4_common (Address: 0x10076320)
- _purecall (Address: 0x10076350)
- memchr (Address: 0x1007635c)
- memcpy (Address: 0x10076344)
- memmove (Address: 0x10076348)
- memset (Address: 0x1007634c)
- wcsrchr (Address: 0x10076330)
- wcsstr (Address: 0x10076360)