kwinfork.dll - Online Dependency Analysis & Download

Description

—

Authors

File size

614.0 KB

Uploaded

2025-12-04 06:16

Views

SHA-256

00ed43c440e66ec787efadadfededf70

Security warning

This file has been flagged as potentially dangerous, and downloads are disabled.

Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, OpenProcess

Exported functions 2

g_bForkProcess #1 · 0x90e28

kwinfork #2 · 0x31a0

Imported DLLs & functions 257

api-ms-win-crt-convert-l1-1-0.dll 1

strtoul 0x1002832c

api-ms-win-crt-filesystem-l1-1-0.dll 2

_lock_file 0x10028338

_unlock_file 0x10028334

api-ms-win-crt-heap-l1-1-0.dll 3

_callnewh 0x10028348

free 0x10028344

malloc 0x10028340

api-ms-win-crt-runtime-l1-1-0.dll 15

_beginthreadex 0x10028358

_cexit 0x10028360

_configure_narrow_argv 0x10028374

_crt_atexit 0x10028388

_errno 0x1002835c

_execute_onexit_table 0x10028384

_initialize_narrow_environment 0x10028378

_initialize_onexit_table 0x1002837c

_initterm 0x10028368

_initterm_e 0x10028364

_invalid_parameter_noinfo 0x10028350

_invalid_parameter_noinfo_noreturn 0x1002836c

_register_onexit_function 0x10028380

_seh_filter_dll 0x10028370

terminate 0x10028354

api-ms-win-crt-stdio-l1-1-0.dll 14

__stdio_common_vsnprintf_s 0x100283a0

__stdio_common_vswprintf_s 0x1002839c

_fseeki64 0x100283b8

_get_stream_buffer_pointers 0x10028398

fclose 0x100283b0

fflush 0x10028390

fgetc 0x10028394

fgetpos 0x100283c4

fputc 0x100283c0

fread 0x100283a8

fsetpos 0x100283bc

fwrite 0x100283b4

setvbuf 0x100283ac

ungetc 0x100283a4

api-ms-win-crt-string-l1-1-0.dll 3

_wcsicmp 0x100283cc

_wcsnicmp 0x100283d0

towlower 0x100283d4

api-ms-win-crt-time-l1-1-0.dll 1

_time64 0x100283dc

KERNEL32.dll 78

CloseHandle 0x10028078

CreateEventW 0x10028024

CreateFileMappingW 0x100280b4

CreateFileW 0x1002808c

CreateProcessW 0x10028108

CreateToolhelp32Snapshot 0x100280cc

DeleteCriticalSection 0x10028114

DeleteFileW 0x10028104

DisableThreadLibraryCalls 0x10028008

DuplicateHandle 0x10028090

EnterCriticalSection 0x1002804c

ExpandEnvironmentStringsW 0x100280d8

FlushInstructionCache 0x1002809c

FreeLibrary 0x100280e8

GetCurrentProcess 0x10028054

GetCurrentProcessId 0x10028058

GetCurrentThread 0x1002805c

GetCurrentThreadId 0x10028128

GetEnvironmentVariableW 0x100280fc

GetExitCodeProcess 0x10028098

GetHandleInformation 0x10028040

GetLastError 0x10028048

GetLongPathNameW 0x100280dc

GetModuleFileNameW 0x100280c0

GetModuleHandleA 0x10028068

GetModuleHandleExA 0x100280c4

GetModuleHandleW 0x100280ec

GetProcAddress 0x1002806c

GetProcessId 0x10028060

GetSystemDirectoryW 0x100280e0

GetSystemInfo 0x10028080

GetSystemTimeAsFileTime 0x1002800c

GetSystemWindowsDirectoryW 0x100280a0

GetSystemWow64DirectoryW 0x100280e4

GetThreadContext 0x10028134

GetThreadId 0x10028064

InitializeCriticalSectionAndSpinCount 0x10028110

InitializeSListHead 0x10028004

IsDebuggerPresent 0x10028014

IsProcessorFeaturePresent 0x10028018

IsWow64Process 0x100280bc

LeaveCriticalSection 0x10028050

LoadLibraryExA 0x100280c8

LoadLibraryW 0x100280f0

lstrlenW 0x100280f4

MapViewOfFile 0x100280b8

Module32FirstW 0x100280d0

Module32NextW 0x100280d4

MultiByteToWideChar 0x100280f8

OpenProcess 0x1002807c

OutputDebugStringW 0x10028000

Process32FirstW 0x1002811c

Process32NextW 0x10028120

ProcessIdToSessionId 0x10028118

QueryPerformanceCounter 0x10028010

RaiseException 0x1002810c

ResetEvent 0x1002802c

ResumeThread 0x10028130

SetEnvironmentVariableW 0x10028100

SetEvent 0x10028030

SetHandleInformation 0x10028074

SetLastError 0x10028124

SetThreadContext 0x1002803c

SetUnhandledExceptionFilter 0x10028044

SuspendThread 0x1002812c

TerminateProcess 0x1002801c

UnhandledExceptionFilter 0x10028020

UnmapViewOfFile 0x10028088

VerifyVersionInfoW 0x10028070

VirtualAlloc 0x100280a4

VirtualFree 0x10028038

VirtualProtect 0x100280a8

VirtualProtectEx 0x100280ac

VirtualQuery 0x10028034

VirtualQueryEx 0x10028084

WaitForSingleObject 0x10028094

WaitForSingleObjectEx 0x10028028

WriteProcessMemory 0x100280b0

krpt.dll 2

_krpt_RuntimeProtect 0x100283e4

_krpt_SuspendRuntimeProtect 0x100283e8

krt.dll 4

?setAppEnv@krt@@YA_NABVQString@kso_qt@@ABVQVariant@3@@Z 0x100283f8

?winBuildVersion@info@krt@@YAIXZ 0x100283f4

?winMajorVersion@info@krt@@YAIXZ 0x100283fc

?winMinorVersion@info@krt@@YAIXZ 0x100283f0

ksolite.dll 3

?getData@KFpccomb@@QAE?AV?$QSharedPointer@VKFpccombData@@@kso_qt@@_J@Z 0x10028408

?getInstance@KFpccomb@@SAPAV1@XZ 0x1002840c

?writeInfo@KxLoggerLite@@SAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z 0x10028404

MSVCP140.dll 85

_Cnd_do_broadcast_at_thread_exit 0x1002815c

_Mtx_destroy_in_situ 0x100281c8

_Mtx_init_in_situ 0x100281c4

_Mtx_lock 0x100281cc

_Mtx_unlock 0x100281d0

_Thrd_id 0x10028158

_Thrd_join 0x10028154

?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z 0x10028268

?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z 0x10028208

?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ 0x100281f4

?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ 0x10028228

?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z 0x10028258

?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ 0x10028198

?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ 0x10028288

?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ 0x10028184

?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ 0x10028174

?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ 0x10028224

?_Throw_C_error@std@@YAXH@Z 0x100281d4

?_Throw_Cpp_error@std@@YAXH@Z 0x10028160

?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ 0x1002819c

?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ 0x1002828c

?_Xbad_function_call@std@@YAXXZ 0x100281e8

?_Xinvalid_argument@std@@YAXPBD@Z 0x100281bc

?_Xlength_error@std@@YAXPBD@Z 0x10028150

?_Xout_of_range@std@@YAXPBD@Z 0x100281c0

??0_Lockit@std@@QAE@H@Z 0x100281ec

??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ 0x10028180

??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ 0x10028240

??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z 0x10028190

??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z 0x1002827c

??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z 0x10028250

??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z 0x100281dc

??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z 0x10028244

??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ 0x10028164

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ 0x1002820c

??1_Lockit@std@@QAE@XZ 0x100281f0

??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ 0x10028178

??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ 0x10028234

??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ 0x10028194

??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ 0x10028280

??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ 0x10028254

??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ 0x100281e0

??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ 0x10028248

??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ 0x10028168

??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ 0x10028210

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z 0x100281e4

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@J@Z 0x10028188

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z 0x10028278

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z 0x10028274

??Bid@locale@std@@QAEIXZ 0x100281d8

?always_noconv@codecvt_base@std@@QBE_NXZ 0x100281f8

?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ 0x1002818c

?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ 0x10028214

?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A 0x10028270

?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z 0x100281a0

?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z 0x10028148

?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z 0x100281fc

?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z 0x10028200

?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z 0x1002825c

?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ 0x10028218

?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z 0x10028260

?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z 0x100281a4

?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z 0x10028144

?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z 0x1002817c

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z 0x10028238

?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z 0x10028284

?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ 0x1002821c

?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ 0x100281a8

?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ 0x1002826c

?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ 0x10028220

?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z 0x1002816c

?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z 0x10028170

?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ 0x100281ac

?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ 0x1002813c

?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ 0x10028264

?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ 0x100281b0

?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ 0x10028140

?uncaught_exception@std@@YA_NXZ 0x1002814c

?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z 0x10028204

?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z 0x1002823c

?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z 0x1002824c

?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z 0x100281b4

?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z 0x1002822c

?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z 0x100281b8

?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z 0x10028230

ntdll.dll 10

NtAllocateVirtualMemory 0x1002841c

NtCreateUserProcess 0x10028430

NtFreeVirtualMemory 0x10028414

NtProtectVirtualMemory 0x10028434

NtQueryInformationProcess 0x10028428

NtQueryObject 0x1002842c

NtQueryVirtualMemory 0x10028420

NtReadVirtualMemory 0x10028418

RtlExitUserThread 0x10028424

VerSetConditionMask 0x10028438

Qt5CoreKso.dll 21

??0QByteArray@kso_qt@@QAE@PBDH@Z 0x1002829c

??0QString@kso_qt@@QAE@$$QAV01@@Z 0x100282e0

??0QString@kso_qt@@QAE@ABV01@@Z 0x10028298

??0QVariant@kso_qt@@QAE@_N@Z 0x100282ac

??1QByteArray@kso_qt@@QAE@XZ 0x10028294

??1QString@kso_qt@@QAE@XZ 0x100282e4

??1QVariant@kso_qt@@QAE@XZ 0x100282b0

??8QString@kso_qt@@QBE_NPBD@Z 0x100282d8

??Mkso_qt@@YA_NABVQString@0@0@Z 0x100282dc

?applicationName@QCoreApplication@kso_qt@@SA?AVQString@2@XZ 0x100282a8

?begin@QListData@kso_qt@@QBEPAPAXXZ 0x100282cc

?createData@QMapDataBase@kso_qt@@SAPAU12@XZ 0x100282b8

?createNode@QMapDataBase@kso_qt@@QAEPAUQMapNodeBase@2@HHPAU32@_N@Z 0x100282c0

?end@QListData@kso_qt@@QBEPAPAXXZ 0x100282c8

?freeData@QMapDataBase@kso_qt@@SAXPAU12@@Z 0x100282b4

?freeTree@QMapDataBase@kso_qt@@QAEXPAUQMapNodeBase@2@H@Z 0x100282bc

?fromAscii_helper@QString@kso_qt@@CAPAU?$QTypedArrayData@G@2@PBDH@Z 0x100282d0

?instance@QCoreApplication@kso_qt@@SAPAV12@XZ 0x100282a4

?qputenv@kso_qt@@YA_NPBDABVQByteArray@1@@Z 0x100282a0

?recalcMostLeftNode@QMapDataBase@kso_qt@@QAEXXZ 0x100282c4

?toStdWString@QString@kso_qt@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ 0x100282d4

VCRUNTIME140.dll 15

__current_exception 0x100282fc

__current_exception_context 0x100282f8

__CxxFrameHandler3 0x1002831c

__std_exception_copy 0x1002830c

__std_exception_destroy 0x10028310

__std_terminate 0x10028308

__std_type_info_destroy_list 0x100282f0

_CxxThrowException 0x10028318

_except_handler4_common 0x100282ec

memchr 0x10028300

memcpy 0x10028320

memmove 0x100282f4

memset 0x10028324

strstr 0x10028314

wcsstr 0x10028304