AppUtil.dll

Description: appUtil

Authors: Baidu. All rights reserved.

Version: 7.60.7.104

Architecture: 32-bit

Operating System: Windows

SHA256: 5b410dfd6347591a5588ff4d57069216

File Size: 1.5 MB

Uploaded At: Dec. 4, 2025, 6:15 a.m.

Views: 10

Exported Functions

  • ?AddAppsToAllProfile@Firewall@UtilElevate@@YAJABV?$vector@UFilewallItem@Misc@AppUtil@@V?$allocator@UFilewallItem@Misc@AppUtil@@@std@@@std@@@Z (Ordinal: 1, Address: 0x3bfc0)
  • AppCheck (Ordinal: 2, Address: 0x14400)
  • ?Base64_MD5_VecString@Misc@AppUtil@@YAJABV?$vector@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V?$allocator@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@std@@@std@@PAPA_W@Z (Ordinal: 3, Address: 0x15940)
  • ?CompareVersion@Misc@AppUtil@@YAHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0@Z (Ordinal: 4, Address: 0x15b90)
  • ?ConstructFilePath@MFS@AppUtil@@YAJPB_W00PAPA_W@Z (Ordinal: 5, Address: 0x12fb0)
  • ?Convert1970TimeSecToFILETIME@Misc@AppUtil@@YAJ_JAAU_FILETIME@@@Z (Ordinal: 6, Address: 0x15be0)
  • CreateCurrentProfileExceptPanItems (Ordinal: 7, Address: 0x15c90)
  • ?CreateSparseFile@Misc@AppUtil@@YAJABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AB_J1_N@Z (Ordinal: 8, Address: 0x15f50)
  • ?CurURLDecode@Misc@AppUtil@@YAJPBDAAV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@@Z (Ordinal: 9, Address: 0x16130)
  • ?CurURLDecode@Misc@AppUtil@@YAJPB_WAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z (Ordinal: 10, Address: 0x16430)
  • ?CurURLEncode@Misc@AppUtil@@YAJPBDAAV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@@Z (Ordinal: 11, Address: 0x16520)
  • ?CurURLEncode@Misc@AppUtil@@YAJPB_WAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z (Ordinal: 12, Address: 0x169b0)
  • ?CurlInetPton4@Misc@AppUtil@@YAHPBDPAE@Z (Ordinal: 13, Address: 0x16aa0)
  • ?CurlInetPton6@Misc@AppUtil@@YAHPBDPAE@Z (Ordinal: 14, Address: 0x16ba0)
  • ?CurlIsIP@Misc@AppUtil@@YAHABV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@@Z (Ordinal: 15, Address: 0x16db0)
  • ?CurlIsIP@Misc@AppUtil@@YAHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z (Ordinal: 16, Address: 0x16ee0)
  • ?CurlIsIPV6@Misc@AppUtil@@YAHABV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@@Z (Ordinal: 17, Address: 0x16fa0)
  • ?CurlIsIPV6@Misc@AppUtil@@YAHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z (Ordinal: 18, Address: 0x170b0)
  • DeleteCurrentProfileExceptPanItem (Ordinal: 19, Address: 0x17170)
  • ?DeleteDirectory@Misc@AppUtil@@YAJABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@_N@Z (Ordinal: 20, Address: 0x17290)
  • ?FreeSparseFile@Misc@AppUtil@@YAJABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AB_J_N@Z (Ordinal: 21, Address: 0x174e0)
  • ?GetBaiduTempPath@Misc@AppUtil@@YAJPAPA_W@Z (Ordinal: 22, Address: 0x17640)
  • ?GetCStringMd5@Misc@AppUtil@@YAJABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAV34@@Z (Ordinal: 23, Address: 0x17820)
  • ?GetChannelInfo@Misc@AppUtil@@YAJPAPA_W@Z (Ordinal: 24, Address: 0x17a90)
  • GetCurrentProfileExceptItems (Ordinal: 25, Address: 0x17b50)
  • ?GetForceUpdateContent@Misc@AppUtil@@YAJPAPA_W00@Z (Ordinal: 26, Address: 0x180a0)
  • GetInt64FromJsonDataShim (Ordinal: 27, Address: 0x181a0)
  • ?GetProxyInfo@HelpProxySetting@@YAJPAKPAPA_WPAG@Z (Ordinal: 28, Address: 0x10c90)
  • ?GetSysTempShellMarkPath@Misc@AppUtil@@YAJAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z (Ordinal: 29, Address: 0x184e0)
  • ?GetTime@Misc@AppUtil@@YA_JXZ (Ordinal: 30, Address: 0x18680)
  • ?GetUpdateLevel@Misc@AppUtil@@YAJPAH@Z (Ordinal: 31, Address: 0x186c0)
  • ?GetValueByKey@HelpAppSetting@@YAJV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0AAH@Z (Ordinal: 32, Address: 0x1f1c0)
  • ?GetValueByKey@HelpAppSetting@@YAJV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0AAI@Z (Ordinal: 33, Address: 0x1f340)
  • ?GetValueByKey@HelpAppSetting@@YAJV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0AAV23@H@Z (Ordinal: 34, Address: 0x1f4f0)
  • ?GetValueByKey@HelpAppSetting@@YAJV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0AA_J@Z (Ordinal: 35, Address: 0x1f740)
  • ?GetVersionValue@Misc@AppUtil@@YA_KABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z (Ordinal: 36, Address: 0x187e0)
  • ?IsAllAUPackageReady@Misc@AppUtil@@YAHAAH@Z (Ordinal: 37, Address: 0x189c0)
  • ?IsAutoRun@Misc@AppUtil@@YAHXZ (Ordinal: 38, Address: 0x18ad0)
  • ?IsAutoUpdate@Misc@AppUtil@@YAHXZ (Ordinal: 39, Address: 0x18ae0)
  • ?IsElevated@UtilElevate@@YAJPAH@Z (Ordinal: 40, Address: 0x3c920)
  • ?IsNeedAutoUpdate@Misc@AppUtil@@YAHXZ (Ordinal: 41, Address: 0x18bd0)
  • ?IsSatisfyForNewCloudeBridge@Misc@AppUtil@@YAJAAH@Z (Ordinal: 42, Address: 0x18cc0)
  • ?IsSparseFile@Misc@AppUtil@@YA_NABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z (Ordinal: 43, Address: 0x18db0)
  • ?IsStartAutoUpdate@Misc@AppUtil@@YAHAAH@Z (Ordinal: 44, Address: 0x18e00)
  • ?IsSupportSparseFile@Misc@AppUtil@@YA_NABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z (Ordinal: 45, Address: 0x18f10)
  • ?JsonEncode@JsonLib@@YAJPAUIGeneralArray@BULL@@AAV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@@Z (Ordinal: 46, Address: 0x36950)
  • ?JsonEncode@JsonLib@@YAJPAUIGeneralData@BULL@@AAV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@@Z (Ordinal: 47, Address: 0x36a80)
  • ?Parse@JsonLib@@YAJPA_WPAPAUIGeneralArray@BULL@@@Z (Ordinal: 48, Address: 0x36bb0)
  • ?Parse@JsonLib@@YAJPA_WPAPAUIGeneralData@BULL@@@Z (Ordinal: 49, Address: 0x36e50)
  • ?RSA_Public_Encrypt@Misc@AppUtil@@YAJV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@0PAPAUIGeneralBuffer@BULL@@@Z (Ordinal: 50, Address: 0x19080)
  • ?RawURLEncode@Misc@AppUtil@@YAJPBDAAV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@@Z (Ordinal: 51, Address: 0x19330)
  • ?RegisterSettingUpdateNotify@HelpAppSetting@@YAJPAUIAppSettingUpdateNotify@@@Z (Ordinal: 52, Address: 0x1f8f0)
  • ?RunElevatedCmd@UtilElevate@@YAJPB_WPA_WPAK@Z (Ordinal: 53, Address: 0x3ca30)
  • ?SaveData@HelpAppSetting@@YAJXZ (Ordinal: 54, Address: 0x1f9d0)
  • ?SetAutoRun@Misc@AppUtil@@YAJH@Z (Ordinal: 55, Address: 0x195d0)
  • ?SetAutoUpdate@Misc@AppUtil@@YAJH@Z (Ordinal: 56, Address: 0x195e0)
  • ?SetProxyInfo@HelpProxySetting@@YAJKPA_WG@Z (Ordinal: 57, Address: 0x10e80)
  • ?SetSparseRange@Misc@AppUtil@@YAJQAXAB_J1@Z (Ordinal: 58, Address: 0x196d0)
  • ?SetValueByKey@HelpAppSetting@@YAJV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@00H@Z (Ordinal: 59, Address: 0x1faa0)
  • ?SetValueByKey@HelpAppSetting@@YAJV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0H@Z (Ordinal: 60, Address: 0x1fcf0)
  • ?SetValueByKey@HelpAppSetting@@YAJV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0I@Z (Ordinal: 61, Address: 0x1ff20)
  • ?SetValueByKey@HelpAppSetting@@YAJV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0_J@Z (Ordinal: 62, Address: 0x20150)
  • Test (Ordinal: 63, Address: 0x5fe0)
  • ?TransUidToString@Misc@AppUtil@@YAJV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAV34@@Z (Ordinal: 64, Address: 0x199b0)
  • ?TransformUtf8BufferToBSTR@Misc@AppUtil@@YAJPAUIGeneralBuffer@BULL@@PAPA_W@Z (Ordinal: 65, Address: 0x19bf0)
  • ?TransformUtf8HttpMemoryBlockToBSTR@Misc@AppUtil@@YAJPAUIHttpMemoryBlock@BULL@@PAPA_W@Z (Ordinal: 66, Address: 0x19d30)
  • ?TransformUtf8StringToWString@Misc@AppUtil@@YAJV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@AAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@4@@Z (Ordinal: 67, Address: 0x19eb0)
  • ?TransformWStringToUtf8String@Misc@AppUtil@@YAJV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@4@@Z (Ordinal: 68, Address: 0x1a070)
  • ?UnRegisterSettingUpdateNotify@HelpAppSetting@@YAJPAUIAppSettingUpdateNotify@@@Z (Ordinal: 69, Address: 0x20500)
  • ?VersionInfoDecode@Misc@AppUtil@@YAJPAPA_WH@Z (Ordinal: 70, Address: 0x1a1f0)
  • ?WinMsgPeek@Misc@AppUtil@@YAJXZ (Ordinal: 71, Address: 0x1ae20)
  • DllCanUnloadNow (Ordinal: 72, Address: 0x5f50)
  • DllGetClassObject (Ordinal: 73, Address: 0x5f70)
  • DllRegisterServer (Ordinal: 74, Address: 0x5fc0)
  • DllUnregisterServer (Ordinal: 75, Address: 0x5fd0)

Imported DLLs & Functions

ADVAPI32.dll
  • CloseServiceHandle (Address: 0x10106034)
  • CryptAcquireContextW (Address: 0x10106050)
  • CryptCreateHash (Address: 0x10106070)
  • CryptDecrypt (Address: 0x10106000)
  • CryptDestroyHash (Address: 0x1010606c)
  • CryptDestroyKey (Address: 0x10106058)
  • CryptEnumProvidersW (Address: 0x10106064)
  • CryptExportKey (Address: 0x10106078)
  • CryptGetProvParam (Address: 0x10106060)
  • CryptGetUserKey (Address: 0x1010607c)
  • CryptReleaseContext (Address: 0x10106054)
  • CryptSetHashParam (Address: 0x1010605c)
  • CryptSignHashW (Address: 0x10106068)
  • DeregisterEventSource (Address: 0x10106044)
  • GetTokenInformation (Address: 0x10106030)
  • OpenProcessToken (Address: 0x1010602c)
  • OpenSCManagerW (Address: 0x10106038)
  • OpenServiceW (Address: 0x1010603c)
  • RegCloseKey (Address: 0x10106074)
  • RegCreateKeyExW (Address: 0x10106004)
  • RegDeleteKeyW (Address: 0x10106008)
  • RegDeleteValueW (Address: 0x1010600c)
  • RegEnumKeyExW (Address: 0x10106010)
  • RegisterEventSourceW (Address: 0x10106048)
  • RegOpenKeyExA (Address: 0x10106020)
  • RegOpenKeyExW (Address: 0x10106014)
  • RegQueryInfoKeyW (Address: 0x10106018)
  • RegQueryValueExA (Address: 0x10106024)
  • RegQueryValueExW (Address: 0x10106028)
  • RegSetValueExW (Address: 0x1010601c)
  • ReportEventW (Address: 0x1010604c)
  • StartServiceW (Address: 0x10106040)
api-ms-win-crt-convert-l1-1-0.dll
  • _itow_s (Address: 0x10106518)
  • _ultoa_s (Address: 0x10106504)
  • _wtoi (Address: 0x10106514)
  • _wtoi64 (Address: 0x10106510)
  • atoi (Address: 0x1010650c)
  • strtol (Address: 0x10106508)
  • strtoul (Address: 0x10106500)
api-ms-win-crt-environment-l1-1-0.dll
  • getenv (Address: 0x10106520)
api-ms-win-crt-filesystem-l1-1-0.dll
  • _lock_file (Address: 0x10106534)
  • _stat64i32 (Address: 0x1010653c)
  • _unlock_file (Address: 0x10106538)
  • _waccess (Address: 0x10106528)
  • _waccess_s (Address: 0x1010652c)
  • _wstat64i32 (Address: 0x10106530)
api-ms-win-crt-heap-l1-1-0.dll
  • _callnewh (Address: 0x10106550)
  • _recalloc (Address: 0x10106554)
  • free (Address: 0x10106548)
  • malloc (Address: 0x10106544)
  • realloc (Address: 0x1010654c)
api-ms-win-crt-math-l1-1-0.dll
  • _except1 (Address: 0x1010655c)
api-ms-win-crt-multibyte-l1-1-0.dll
  • _mbschr (Address: 0x10106564)
  • _mbsicmp (Address: 0x10106568)
  • _mbsinc (Address: 0x1010656c)
api-ms-win-crt-runtime-l1-1-0.dll
  • _beginthreadex (Address: 0x101065a0)
  • _cexit (Address: 0x10106574)
  • _configure_narrow_argv (Address: 0x101065b4)
  • _crt_atexit (Address: 0x101065a4)
  • _errno (Address: 0x1010659c)
  • _execute_onexit_table (Address: 0x1010658c)
  • _exit (Address: 0x10106594)
  • _initialize_narrow_environment (Address: 0x101065b0)
  • _initialize_onexit_table (Address: 0x101065ac)
  • _initterm (Address: 0x101065a8)
  • _initterm_e (Address: 0x10106588)
  • _invalid_parameter_noinfo (Address: 0x101065bc)
  • _invalid_parameter_noinfo_noreturn (Address: 0x10106580)
  • _register_onexit_function (Address: 0x10106590)
  • _seh_filter_dll (Address: 0x101065b8)
  • raise (Address: 0x10106598)
  • signal (Address: 0x10106584)
  • strerror_s (Address: 0x1010657c)
  • terminate (Address: 0x10106578)
api-ms-win-crt-stdio-l1-1-0.dll
  • __acrt_iob_func (Address: 0x10106600)
  • __stdio_common_vfprintf (Address: 0x10106608)
  • __stdio_common_vsnwprintf_s (Address: 0x101065e8)
  • __stdio_common_vsprintf (Address: 0x101065e0)
  • __stdio_common_vsprintf_s (Address: 0x101065d8)
  • __stdio_common_vsscanf (Address: 0x101065c4)
  • __stdio_common_vswprintf (Address: 0x10106610)
  • __stdio_common_vswprintf_s (Address: 0x1010660c)
  • _fileno (Address: 0x101065f0)
  • _fseeki64 (Address: 0x1010662c)
  • _get_stream_buffer_pointers (Address: 0x101065d0)
  • _setmode (Address: 0x101065c8)
  • _wfopen (Address: 0x10106614)
  • fclose (Address: 0x101065d4)
  • feof (Address: 0x101065fc)
  • ferror (Address: 0x101065f8)
  • fflush (Address: 0x101065e4)
  • fgetc (Address: 0x10106634)
  • fgetpos (Address: 0x10106604)
  • fgets (Address: 0x101065f4)
  • fopen (Address: 0x10106620)
  • fputc (Address: 0x10106638)
  • fputs (Address: 0x1010661c)
  • fread (Address: 0x101065ec)
  • fseek (Address: 0x101065dc)
  • fsetpos (Address: 0x10106630)
  • ftell (Address: 0x101065cc)
  • fwrite (Address: 0x10106628)
  • setvbuf (Address: 0x10106624)
  • ungetc (Address: 0x10106618)
api-ms-win-crt-string-l1-1-0.dll
  • _stricmp (Address: 0x10106690)
  • _strlwr_s (Address: 0x1010667c)
  • _strnicmp (Address: 0x10106670)
  • _wcsicmp (Address: 0x10106650)
  • _wcslwr_s (Address: 0x10106678)
  • isdigit (Address: 0x1010666c)
  • isspace (Address: 0x10106658)
  • isxdigit (Address: 0x1010665c)
  • strcmp (Address: 0x1010668c)
  • strcspn (Address: 0x10106688)
  • strncmp (Address: 0x10106680)
  • strncpy (Address: 0x10106684)
  • strnlen (Address: 0x10106654)
  • strpbrk (Address: 0x10106668)
  • strspn (Address: 0x10106674)
  • wcscat_s (Address: 0x10106640)
  • wcscpy_s (Address: 0x10106644)
  • wcscspn (Address: 0x10106660)
  • wcsncpy_s (Address: 0x10106648)
  • wcsnlen (Address: 0x1010664c)
  • wcsspn (Address: 0x10106664)
  • wmemcpy_s (Address: 0x10106694)
api-ms-win-crt-time-l1-1-0.dll
  • _gmtime64_s (Address: 0x101066a4)
  • _mktime64 (Address: 0x1010669c)
  • _time64 (Address: 0x101066a0)
api-ms-win-crt-utility-l1-1-0.dll
  • ldiv (Address: 0x101066ac)
  • qsort (Address: 0x101066b0)
bcrypt.dll
  • BCryptGenRandom (Address: 0x101066b8)
Bull140U.DLL
  • ?_wtoui64@@YA_KPB_W@Z (Address: 0x10106084)
  • ?AssertOut@BULL@@YAJPB_WH_N0@Z (Address: 0x1010608c)
  • ?Base64Decode@BULL@@YAJPA_WPAPAUIGeneralBuffer@1@@Z (Address: 0x101060bc)
  • ?Base64Encode@BULL@@YAJPAUIGeneralBuffer@1@PAPA_WK@Z (Address: 0x1010609c)
  • ?CreateGuid@BULL@@YA?AU_GUID@@XZ (Address: 0x101060a4)
  • ?CreateObjectNative@BULL@@YAJABU_GUID@@0PAPAX@Z (Address: 0x10106094)
  • ?GetNamedObject@BULL@@YAJPA_WABU_GUID@@1PAPAX@Z (Address: 0x101060b0)
  • ?KillTimer@BULL@@YAJK@Z (Address: 0x101060a8)
  • ?MD5@BULL@@YAJPAUIGeneralBuffer@1@PAPAU21@@Z (Address: 0x10106098)
  • ?MultiByteToWideChar@BULL@@YAJIPBDPAPA_W@Z (Address: 0x101060c0)
  • ?RC4Decrypt@BULL@@YAJPA_W0PAPA_W@Z (Address: 0x101060b4)
  • ?RC4Encrypt@BULL@@YAJPA_W0PAPA_W@Z (Address: 0x101060b8)
  • ?RegisterObject@BULL@@YAJABU_GUID@@0P6GJPAX0PAPAX@ZPB_W@Z (Address: 0x10106090)
  • ?SetTimer@BULL@@YAJK_NPAUICallbackTimer@1@KPAK@Z (Address: 0x101060ac)
  • ?VersionDecode@BULL@@YAJPAUIGeneralBuffer@1@0PAPAU21@@Z (Address: 0x101060a0)
  • ?WideCharToMultiByte@BULL@@YAJIPB_WPAPAUIGeneralBuffer@1@@Z (Address: 0x101060c4)
  • ?XLogV@BULL@@YAXIPB_W0PAD@Z (Address: 0x10106088)
CRYPT32.dll
  • CertCloseStore (Address: 0x101060e0)
  • CertDuplicateCertificateContext (Address: 0x101060d4)
  • CertEnumCertificatesInStore (Address: 0x101060dc)
  • CertFindCertificateInStore (Address: 0x101060d8)
  • CertFreeCertificateContext (Address: 0x101060d0)
  • CertGetCertificateContextProperty (Address: 0x101060cc)
  • CertOpenStore (Address: 0x101060e4)
IPHLPAPI.DLL
  • GetAdaptersAddresses (Address: 0x101060f0)
  • GetAdaptersInfo (Address: 0x101060ec)
KERNEL32.dll
  • CloseHandle (Address: 0x101061cc)
  • ConvertFiberToThread (Address: 0x10106248)
  • CopyFileW (Address: 0x10106148)
  • CreateDirectoryW (Address: 0x101061e4)
  • CreateEventW (Address: 0x101061a4)
  • CreateFileW (Address: 0x101061e0)
  • CreateProcessW (Address: 0x10106168)
  • DecodePointer (Address: 0x10106288)
  • DeleteCriticalSection (Address: 0x10106270)
  • DeleteFiber (Address: 0x10106244)
  • DeleteFileW (Address: 0x101061dc)
  • DeviceIoControl (Address: 0x10106128)
  • EncodePointer (Address: 0x1010628c)
  • EnterCriticalSection (Address: 0x1010627c)
  • FileTimeToSystemTime (Address: 0x10106150)
  • FindClose (Address: 0x101060f8)
  • FindFirstFileW (Address: 0x101060fc)
  • FindNextFileW (Address: 0x10106100)
  • FindResourceExW (Address: 0x10106228)
  • FindResourceW (Address: 0x101062a0)
  • FlushInstructionCache (Address: 0x10106184)
  • FormatMessageW (Address: 0x10106170)
  • FreeLibrary (Address: 0x1010629c)
  • GetConsoleMode (Address: 0x10106250)
  • GetCurrentProcess (Address: 0x10106294)
  • GetCurrentProcessId (Address: 0x10106164)
  • GetCurrentThreadId (Address: 0x1010613c)
  • GetEnvironmentVariableW (Address: 0x1010624c)
  • GetFileAttributesW (Address: 0x10106108)
  • GetFileSize (Address: 0x101061d8)
  • GetFileSizeEx (Address: 0x1010610c)
  • GetFileTime (Address: 0x10106144)
  • GetFileType (Address: 0x10106240)
  • GetLastError (Address: 0x10106280)
  • GetModuleFileNameW (Address: 0x10106204)
  • GetModuleHandleExW (Address: 0x1010622c)
  • GetModuleHandleW (Address: 0x10106200)
  • GetPrivateProfileIntW (Address: 0x101061ac)
  • GetPrivateProfileStringW (Address: 0x101061c0)
  • GetProcAddress (Address: 0x101061fc)
  • GetProcessHeap (Address: 0x10106224)
  • GetProcessTimes (Address: 0x10106298)
  • GetStdHandle (Address: 0x1010623c)
  • GetSystemDirectoryW (Address: 0x1010612c)
  • GetSystemTimeAsFileTime (Address: 0x10106290)
  • GetTempPathW (Address: 0x10106124)
  • GetThreadLocale (Address: 0x101061ec)
  • GetVersionExW (Address: 0x10106130)
  • GetVolumeInformationA (Address: 0x1010615c)
  • GetVolumeInformationW (Address: 0x10106110)
  • GlobalAlloc (Address: 0x10106154)
  • GlobalFree (Address: 0x10106158)
  • HeapAlloc (Address: 0x10106214)
  • HeapDestroy (Address: 0x10106210)
  • HeapFree (Address: 0x1010621c)
  • HeapReAlloc (Address: 0x10106218)
  • HeapSize (Address: 0x10106220)
  • InitializeCriticalSectionAndSpinCount (Address: 0x10106274)
  • InitializeSListHead (Address: 0x10106178)
  • InterlockedPopEntrySList (Address: 0x1010617c)
  • InterlockedPushEntrySList (Address: 0x10106180)
  • IsDebuggerPresent (Address: 0x101062a4)
  • IsProcessorFeaturePresent (Address: 0x10106188)
  • LeaveCriticalSection (Address: 0x10106278)
  • LoadLibraryA (Address: 0x1010626c)
  • LoadLibraryExA (Address: 0x10106194)
  • LoadLibraryExW (Address: 0x101061f8)
  • LoadLibraryW (Address: 0x10106134)
  • LoadResource (Address: 0x10106230)
  • LocalFree (Address: 0x1010616c)
  • LockResource (Address: 0x10106234)
  • lstrcmpiW (Address: 0x101061f4)
  • MoveFileExW (Address: 0x10106104)
  • MultiByteToWideChar (Address: 0x101061f0)
  • OutputDebugStringW (Address: 0x10106174)
  • QueryPerformanceCounter (Address: 0x101061b4)
  • QueueUserWorkItem (Address: 0x10106140)
  • RaiseException (Address: 0x10106284)
  • ReadConsoleA (Address: 0x10106258)
  • ReadConsoleW (Address: 0x1010625c)
  • ReadFile (Address: 0x101061d4)
  • RemoveDirectoryW (Address: 0x10106114)
  • ResetEvent (Address: 0x1010619c)
  • SetConsoleMode (Address: 0x10106254)
  • SetEndOfFile (Address: 0x10106118)
  • SetEvent (Address: 0x10106198)
  • SetFilePointerEx (Address: 0x1010611c)
  • SetFileTime (Address: 0x10106120)
  • SetLastError (Address: 0x10106138)
  • SetThreadLocale (Address: 0x101061e8)
  • SetUnhandledExceptionFilter (Address: 0x10106264)
  • SizeofResource (Address: 0x10106238)
  • Sleep (Address: 0x10106160)
  • SystemTimeToTzSpecificLocalTime (Address: 0x1010614c)
  • TerminateProcess (Address: 0x101061b0)
  • TlsAlloc (Address: 0x101061b8)
  • TlsFree (Address: 0x1010620c)
  • TlsGetValue (Address: 0x101061bc)
  • TlsSetValue (Address: 0x10106208)
  • UnhandledExceptionFilter (Address: 0x101061a8)
  • VirtualAlloc (Address: 0x1010618c)
  • VirtualFree (Address: 0x10106190)
  • WaitForSingleObject (Address: 0x101061c8)
  • WaitForSingleObjectEx (Address: 0x101061a0)
  • WideCharToMultiByte (Address: 0x101061c4)
  • WriteFile (Address: 0x101061d0)
  • WritePrivateProfileSectionW (Address: 0x10106260)
  • WritePrivateProfileStringW (Address: 0x10106268)
MSVCP140.dll
  • ?_BADOFF@std@@3_JB (Address: 0x10106324)
  • ?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z (Address: 0x10106314)
  • ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z (Address: 0x101062d0)
  • ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ (Address: 0x101062bc)
  • ?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ (Address: 0x101062e8)
  • ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ (Address: 0x101062f0)
  • ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ (Address: 0x10106354)
  • ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ (Address: 0x10106340)
  • ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ (Address: 0x101062ec)
  • ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ (Address: 0x10106358)
  • ?_Xbad_alloc@std@@YAXXZ (Address: 0x1010636c)
  • ?_Xlength_error@std@@YAXPBD@Z (Address: 0x101062d4)
  • ?_Xout_of_range@std@@YAXPBD@Z (Address: 0x101062b4)
  • ??0_Lockit@std@@QAE@H@Z (Address: 0x101062ac)
  • ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ (Address: 0x10106300)
  • ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z (Address: 0x10106304)
  • ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z (Address: 0x10106338)
  • ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ (Address: 0x10106370)
  • ??1_Lockit@std@@QAE@XZ (Address: 0x101062b0)
  • ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x101062f4)
  • ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x10106308)
  • ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x1010633c)
  • ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x101062d8)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z (Address: 0x10106348)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z (Address: 0x10106344)
  • ??Bid@locale@std@@QAEIXZ (Address: 0x101062b8)
  • ?always_noconv@codecvt_base@std@@QBE_NXZ (Address: 0x101062c0)
  • ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z (Address: 0x101062f8)
  • ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ (Address: 0x1010634c)
  • ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ (Address: 0x101062dc)
  • ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ (Address: 0x101062e0)
  • ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A (Address: 0x10106328)
  • ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z (Address: 0x1010635c)
  • ?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z (Address: 0x101062c4)
  • ?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z (Address: 0x101062c8)
  • ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ (Address: 0x101062e4)
  • ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z (Address: 0x1010630c)
  • ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z (Address: 0x10106310)
  • ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z (Address: 0x10106360)
  • ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z (Address: 0x101062fc)
  • ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z (Address: 0x10106350)
  • ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ (Address: 0x10106318)
  • ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z (Address: 0x10106330)
  • ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z (Address: 0x10106334)
  • ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ (Address: 0x10106364)
  • ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ (Address: 0x10106368)
  • ?uncaught_exception@std@@YA_NXZ (Address: 0x1010632c)
  • ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z (Address: 0x101062cc)
  • ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z (Address: 0x1010631c)
  • ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z (Address: 0x10106320)
ole32.dll
  • CLSIDFromString (Address: 0x101066e4)
  • CoCreateGuid (Address: 0x101066c8)
  • CoCreateInstance (Address: 0x101066e0)
  • CoInitializeEx (Address: 0x101066c0)
  • CoTaskMemAlloc (Address: 0x101066d8)
  • CoTaskMemFree (Address: 0x101066d0)
  • CoTaskMemRealloc (Address: 0x101066d4)
  • CoUninitialize (Address: 0x101066c4)
  • StringFromCLSID (Address: 0x101066cc)
  • StringFromGUID2 (Address: 0x101066dc)
OLEAUT32.dll
  • LoadRegTypeLib (Address: 0x101063b4)
  • LoadTypeLib (Address: 0x101063a8)
  • RegisterTypeLib (Address: 0x101063a4)
  • SafeArrayDestroy (Address: 0x101063ac)
  • SafeArrayGetLBound (Address: 0x10106398)
  • SafeArrayGetUBound (Address: 0x1010639c)
  • SafeArrayGetVartype (Address: 0x1010638c)
  • SafeArrayLock (Address: 0x10106394)
  • SafeArrayUnlock (Address: 0x10106390)
  • SysAllocString (Address: 0x101063bc)
  • SysAllocStringByteLen (Address: 0x10106380)
  • SysAllocStringLen (Address: 0x10106388)
  • SysFreeString (Address: 0x101063c0)
  • SysStringByteLen (Address: 0x10106384)
  • SysStringLen (Address: 0x101063c4)
  • UnRegisterTypeLib (Address: 0x101063a0)
  • VarBstrCmp (Address: 0x101063b8)
  • VariantChangeType (Address: 0x101063b0)
  • VariantClear (Address: 0x101063cc)
  • VariantCopy (Address: 0x10106378)
  • VariantInit (Address: 0x1010637c)
  • VarUI4FromStr (Address: 0x101063c8)
SHELL32.dll
  • SHCreateDirectoryExW (Address: 0x101063d8)
  • SHGetSpecialFolderPathW (Address: 0x101063d4)
SHLWAPI.dll
  • PathAppendW (Address: 0x101063ec)
  • PathFileExistsW (Address: 0x101063e8)
  • PathIsDirectoryW (Address: 0x101063e0)
  • PathRemoveFileSpecW (Address: 0x101063e4)
USER32.dll
  • CallWindowProcW (Address: 0x10106414)
  • CharLowerBuffW (Address: 0x10106408)
  • CharNextW (Address: 0x10106448)
  • CreateWindowExW (Address: 0x10106420)
  • DefWindowProcW (Address: 0x10106410)
  • DestroyWindow (Address: 0x10106428)
  • DispatchMessageW (Address: 0x10106400)
  • GetClassInfoExW (Address: 0x1010641c)
  • GetProcessWindowStation (Address: 0x10106440)
  • GetUserObjectInformationW (Address: 0x10106444)
  • GetWindowLongW (Address: 0x1010642c)
  • IsWindow (Address: 0x10106424)
  • KillTimer (Address: 0x1010643c)
  • LoadCursorW (Address: 0x10106434)
  • MessageBoxW (Address: 0x101063f4)
  • PeekMessageW (Address: 0x10106404)
  • PostMessageW (Address: 0x1010640c)
  • RegisterClassExW (Address: 0x10106418)
  • SetTimer (Address: 0x10106438)
  • SetWindowLongW (Address: 0x10106430)
  • TranslateMessage (Address: 0x101063fc)
  • UnregisterClassW (Address: 0x101063f8)
VCRUNTIME140.dll
  • __CxxFrameHandler3 (Address: 0x10106458)
  • __std_exception_copy (Address: 0x1010647c)
  • __std_exception_destroy (Address: 0x10106480)
  • __std_terminate (Address: 0x10106464)
  • __std_type_info_destroy_list (Address: 0x10106488)
  • __vcrt_InitializeCriticalSectionEx (Address: 0x10106490)
  • _CxxThrowException (Address: 0x10106454)
  • _except_handler4_common (Address: 0x1010648c)
  • _purecall (Address: 0x10106498)
  • memchr (Address: 0x10106494)
  • memcpy (Address: 0x1010645c)
  • memmove (Address: 0x10106450)
  • memset (Address: 0x10106460)
  • strchr (Address: 0x10106478)
  • strrchr (Address: 0x10106484)
  • strstr (Address: 0x1010646c)
  • wcschr (Address: 0x10106470)
  • wcsrchr (Address: 0x10106474)
  • wcsstr (Address: 0x10106468)
VERSION.dll
  • GetFileVersionInfoSizeW (Address: 0x101064a0)
  • GetFileVersionInfoW (Address: 0x101064a4)
  • VerQueryValueW (Address: 0x101064a8)
WININET.dll
  • HttpAddRequestHeadersA (Address: 0x101064c0)
  • HttpEndRequestA (Address: 0x101064b8)
  • HttpOpenRequestA (Address: 0x101064c4)
  • HttpQueryInfoA (Address: 0x101064b4)
  • HttpSendRequestExA (Address: 0x101064bc)
  • InternetCloseHandle (Address: 0x101064b0)
  • InternetConnectA (Address: 0x101064d8)
  • InternetOpenA (Address: 0x101064dc)
  • InternetQueryDataAvailable (Address: 0x101064cc)
  • InternetReadFile (Address: 0x101064d4)
  • InternetSetOptionA (Address: 0x101064c8)
  • InternetWriteFile (Address: 0x101064d0)
WS2_32.dll
  • closesocket (Address: 0x101064f4)
  • recv (Address: 0x101064ec)
  • send (Address: 0x101064f0)
  • WSACleanup (Address: 0x101064e4)
  • WSAGetLastError (Address: 0x101064e8)
  • WSASetLastError (Address: 0x101064f8)