repsvr.dll
Description: WPS Office Expansion tool
Authors: Copyright©2025 Kingsoft Corporation. All rights reserved.
Version: 12.9.0.23794
Architecture: 32-bit
Operating System: Windows NT
SHA256: 527528769d392e2e2b2779135f007fcc
File Size: 635.5 KB
Uploaded At: Dec. 4, 2025, 6:17 a.m.
Views: 8
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- EntryPoint (Ordinal: 1, Address: 0x2ac10)
Imported DLLs & Functions
api-ms-win-crt-convert-l1-1-0.dll
- _itow_s (Address: 0x10072368)
- _ui64tow_s (Address: 0x10072370)
- wcstoul (Address: 0x1007236c)
api-ms-win-crt-filesystem-l1-1-0.dll
- _lock_file (Address: 0x1007237c)
- _unlock_file (Address: 0x10072378)
- _waccess_s (Address: 0x10072380)
- _wrename (Address: 0x10072384)
api-ms-win-crt-heap-l1-1-0.dll
- _aligned_free (Address: 0x1007239c)
- _aligned_malloc (Address: 0x10072390)
- _callnewh (Address: 0x10072398)
- free (Address: 0x1007238c)
- malloc (Address: 0x10072394)
api-ms-win-crt-runtime-l1-1-0.dll
- _cexit (Address: 0x100723d0)
- _configure_narrow_argv (Address: 0x100723bc)
- _crt_atexit (Address: 0x100723a4)
- _errno (Address: 0x100723b8)
- _execute_onexit_table (Address: 0x100723a8)
- _initialize_narrow_environment (Address: 0x100723b4)
- _initialize_onexit_table (Address: 0x100723d4)
- _initterm (Address: 0x100723b0)
- _initterm_e (Address: 0x100723d8)
- _invalid_parameter_noinfo (Address: 0x100723c8)
- _invalid_parameter_noinfo_noreturn (Address: 0x100723c4)
- _register_onexit_function (Address: 0x100723ac)
- _seh_filter_dll (Address: 0x100723c0)
- terminate (Address: 0x100723cc)
api-ms-win-crt-stdio-l1-1-0.dll
- __stdio_common_vsnwprintf_s (Address: 0x100723f0)
- __stdio_common_vswprintf (Address: 0x100723e8)
- __stdio_common_vswprintf_s (Address: 0x100723ec)
- _fseeki64 (Address: 0x1007240c)
- _ftelli64 (Address: 0x10072434)
- _get_stream_buffer_pointers (Address: 0x10072420)
- _wfopen (Address: 0x10072404)
- _wfopen_s (Address: 0x10072410)
- fclose (Address: 0x100723f4)
- fflush (Address: 0x100723f8)
- fgetc (Address: 0x100723fc)
- fgetpos (Address: 0x10072400)
- fgetwc (Address: 0x10072428)
- fputc (Address: 0x10072424)
- fputwc (Address: 0x100723e0)
- fread (Address: 0x1007242c)
- fread_s (Address: 0x10072430)
- fsetpos (Address: 0x10072408)
- fwrite (Address: 0x10072414)
- setvbuf (Address: 0x10072418)
- ungetc (Address: 0x1007241c)
- ungetwc (Address: 0x100723e4)
api-ms-win-crt-string-l1-1-0.dll
- _strnicmp (Address: 0x10072448)
- _wcsicmp (Address: 0x10072450)
- _wcsnicmp (Address: 0x1007244c)
- tolower (Address: 0x10072444)
- wcscat_s (Address: 0x10072440)
- wcscpy_s (Address: 0x10072458)
- wcsncmp (Address: 0x10072454)
- wmemcpy_s (Address: 0x1007243c)
api-ms-win-crt-time-l1-1-0.dll
- _time64 (Address: 0x10072460)
KERNEL32.dll
- CloseHandle (Address: 0x10072040)
- CopyFileTransactedW (Address: 0x100720dc)
- CopyFileW (Address: 0x100720cc)
- CreateDirectoryW (Address: 0x10072014)
- CreateEventW (Address: 0x10072140)
- CreateFileW (Address: 0x10072018)
- CreateMutexW (Address: 0x100720f0)
- CreateProcessW (Address: 0x10072100)
- CreateToolhelp32Snapshot (Address: 0x100720bc)
- DeleteCriticalSection (Address: 0x10072128)
- DeleteFileTransactedW (Address: 0x100720d8)
- DeleteFileW (Address: 0x1007201c)
- DisableThreadLibraryCalls (Address: 0x10072000)
- EnterCriticalSection (Address: 0x1007217c)
- ExpandEnvironmentStringsW (Address: 0x10072134)
- FindClose (Address: 0x10072020)
- FindFirstFileW (Address: 0x10072024)
- FindNextFileW (Address: 0x10072028)
- FindResourceExW (Address: 0x10072080)
- FindResourceW (Address: 0x100720a0)
- FlushInstructionCache (Address: 0x10072164)
- FreeLibrary (Address: 0x10072084)
- GetCurrentProcess (Address: 0x10072064)
- GetCurrentProcessId (Address: 0x10072108)
- GetCurrentThread (Address: 0x1007210c)
- GetCurrentThreadId (Address: 0x10072110)
- GetEnvironmentVariableW (Address: 0x1007212c)
- GetExitCodeProcess (Address: 0x1007206c)
- GetFileAttributesW (Address: 0x1007202c)
- GetFileSize (Address: 0x10072030)
- GetFullPathNameW (Address: 0x10072034)
- GetLastError (Address: 0x10072044)
- GetLongPathNameW (Address: 0x1007213c)
- GetModuleFileNameW (Address: 0x10072088)
- GetModuleHandleW (Address: 0x1007208c)
- GetPrivateProfileIntW (Address: 0x100720e4)
- GetPrivateProfileStringW (Address: 0x100720b0)
- GetProcAddress (Address: 0x10072090)
- GetProcessHeap (Address: 0x1007205c)
- GetSystemDirectoryW (Address: 0x10072078)
- GetSystemInfo (Address: 0x10072158)
- GetSystemTimeAsFileTime (Address: 0x10072004)
- GetSystemWow64DirectoryW (Address: 0x1007207c)
- GetThreadContext (Address: 0x1007215c)
- GetTickCount (Address: 0x10072074)
- GetWindowsDirectoryW (Address: 0x10072114)
- HeapAlloc (Address: 0x1007204c)
- HeapDestroy (Address: 0x10072048)
- HeapFree (Address: 0x10072054)
- HeapReAlloc (Address: 0x10072050)
- HeapSize (Address: 0x10072058)
- InitializeCriticalSectionAndSpinCount (Address: 0x10072124)
- InitializeSListHead (Address: 0x10072190)
- IsDebuggerPresent (Address: 0x10072154)
- IsProcessorFeaturePresent (Address: 0x10072194)
- IsWow64Process (Address: 0x10072118)
- LeaveCriticalSection (Address: 0x10072180)
- LoadLibraryExA (Address: 0x1007216c)
- LoadLibraryExW (Address: 0x10072170)
- LoadLibraryW (Address: 0x100720a4)
- LoadResource (Address: 0x10072094)
- LocalFree (Address: 0x100720a8)
- LockResource (Address: 0x10072098)
- lstrcmpW (Address: 0x100720ac)
- lstrlenW (Address: 0x1007211c)
- MoveFileExW (Address: 0x100720b4)
- MoveFileTransactedW (Address: 0x100720e0)
- MoveFileW (Address: 0x100720d0)
- MultiByteToWideChar (Address: 0x100720e8)
- OpenMutexW (Address: 0x100720f4)
- OpenProcess (Address: 0x10072070)
- OutputDebugStringW (Address: 0x1007203c)
- Process32FirstW (Address: 0x100720c0)
- Process32NextW (Address: 0x100720c4)
- ProcessIdToSessionId (Address: 0x10072138)
- QueryPerformanceCounter (Address: 0x10072174)
- QueryPerformanceFrequency (Address: 0x10072178)
- RaiseException (Address: 0x10072120)
- ReadFile (Address: 0x100720ec)
- ReleaseMutex (Address: 0x100720f8)
- RemoveDirectoryW (Address: 0x10072038)
- ResetEvent (Address: 0x10072188)
- ResumeThread (Address: 0x10072144)
- SetEnvironmentVariableW (Address: 0x10072130)
- SetEvent (Address: 0x10072184)
- SetLastError (Address: 0x10072104)
- SetThreadContext (Address: 0x10072160)
- SetUnhandledExceptionFilter (Address: 0x10072008)
- SizeofResource (Address: 0x1007209c)
- Sleep (Address: 0x100720c8)
- TerminateProcess (Address: 0x10072068)
- UnhandledExceptionFilter (Address: 0x1007200c)
- VerifyVersionInfoW (Address: 0x100720b8)
- VerSetConditionMask (Address: 0x10072010)
- VirtualAlloc (Address: 0x10072148)
- VirtualFree (Address: 0x1007214c)
- VirtualProtect (Address: 0x10072168)
- VirtualQuery (Address: 0x10072150)
- WaitForSingleObject (Address: 0x10072060)
- WaitForSingleObjectEx (Address: 0x1007218c)
- WideCharToMultiByte (Address: 0x100720d4)
- WritePrivateProfileStringW (Address: 0x100720fc)
ktmw32.dll
- CommitTransaction (Address: 0x1007246c)
- CreateTransaction (Address: 0x10072470)
- RollbackTransaction (Address: 0x10072468)
MSVCP140.dll
- _Mtx_destroy_in_situ (Address: 0x10072270)
- _Mtx_init_in_situ (Address: 0x1007226c)
- _Mtx_lock (Address: 0x10072274)
- _Mtx_unlock (Address: 0x10072278)
- ?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z (Address: 0x100721b4)
- ?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z (Address: 0x10072314)
- ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z (Address: 0x100721d4)
- ?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z (Address: 0x100722dc)
- ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ (Address: 0x100722f4)
- ?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ (Address: 0x100722bc)
- ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ (Address: 0x100721e8)
- ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z (Address: 0x1007225c)
- ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ (Address: 0x1007221c)
- ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ (Address: 0x10072298)
- ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ (Address: 0x100721ac)
- ?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ (Address: 0x100722c0)
- ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ (Address: 0x100721e4)
- ?_Random_device@std@@YAIXZ (Address: 0x10072264)
- ?_Throw_C_error@std@@YAXH@Z (Address: 0x1007227c)
- ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ (Address: 0x10072220)
- ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ (Address: 0x1007229c)
- ?_Xbad_function_call@std@@YAXXZ (Address: 0x10072268)
- ?_Xinvalid_argument@std@@YAXPBD@Z (Address: 0x100721c4)
- ?_Xlength_error@std@@YAXPBD@Z (Address: 0x10072300)
- ?_Xout_of_range@std@@YAXPBD@Z (Address: 0x100722fc)
- ??0_Lockit@std@@QAE@H@Z (Address: 0x1007230c)
- ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ (Address: 0x100721a0)
- ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ (Address: 0x100721fc)
- ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z (Address: 0x10072214)
- ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z (Address: 0x1007228c)
- ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z (Address: 0x10072200)
- ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z (Address: 0x100721a4)
- ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z (Address: 0x10072250)
- ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ (Address: 0x100722d4)
- ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ (Address: 0x100721d8)
- ??1_Lockit@std@@QAE@XZ (Address: 0x10072308)
- ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ (Address: 0x10072310)
- ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x100721f4)
- ??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ (Address: 0x10072218)
- ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x10072290)
- ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x10072204)
- ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ (Address: 0x100721a8)
- ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x10072254)
- ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ (Address: 0x100722d0)
- ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x100721dc)
- ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z (Address: 0x10072280)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z (Address: 0x10072288)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z (Address: 0x10072284)
- ??Bid@locale@std@@QAEIXZ (Address: 0x100722f8)
- ?always_noconv@codecvt_base@std@@QBE_NXZ (Address: 0x100722f0)
- ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ (Address: 0x100721b0)
- ?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ (Address: 0x100722cc)
- ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ (Address: 0x100721e0)
- ?getloc@ios_base@std@@QBE?AVlocale@2@XZ (Address: 0x100722d8)
- ?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A (Address: 0x100721bc)
- ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A (Address: 0x10072238)
- ?id@?$ctype@_W@std@@2V0locale@2@A (Address: 0x100721c0)
- ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z (Address: 0x10072224)
- ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z (Address: 0x100722a0)
- ?in@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPA_W3AAPA_W@Z (Address: 0x100722ec)
- ?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z (Address: 0x100721c8)
- ?out@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z (Address: 0x100722e8)
- ?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z (Address: 0x100721cc)
- ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z (Address: 0x10072208)
- ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ (Address: 0x10072240)
- ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z (Address: 0x1007220c)
- ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@U_Mbstatet@@@2@@Z (Address: 0x10072260)
- ?set_new_handler@std@@YAP6AXXZP6AXXZ@Z (Address: 0x100722b0)
- ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z (Address: 0x10072228)
- ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z (Address: 0x100722a4)
- ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z (Address: 0x1007219c)
- ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z (Address: 0x100721f8)
- ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z (Address: 0x10072294)
- ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ (Address: 0x10072244)
- ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ (Address: 0x100721b8)
- ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ (Address: 0x1007222c)
- ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ (Address: 0x10072248)
- ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z (Address: 0x100722c8)
- ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z (Address: 0x100722c4)
- ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ (Address: 0x10072230)
- ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ (Address: 0x100722a8)
- ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ (Address: 0x10072210)
- ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ (Address: 0x10072234)
- ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ (Address: 0x100722ac)
- ?uncaught_exception@std@@YA_NXZ (Address: 0x10072304)
- ?uncaught_exceptions@std@@YAHXZ (Address: 0x1007223c)
- ?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z (Address: 0x100722e4)
- ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z (Address: 0x100721d0)
- ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z (Address: 0x1007224c)
- ?widen@?$ctype@_W@std@@QBE_WD@Z (Address: 0x100722e0)
- ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z (Address: 0x10072258)
- ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z (Address: 0x100722b8)
- ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z (Address: 0x100721ec)
- ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z (Address: 0x100722b4)
- ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z (Address: 0x100721f0)
VCRUNTIME140.dll
- __current_exception (Address: 0x1007234c)
- __current_exception_context (Address: 0x10072350)
- __CxxFrameHandler3 (Address: 0x10072324)
- __RTDynamicCast (Address: 0x10072344)
- __std_exception_copy (Address: 0x1007235c)
- __std_exception_destroy (Address: 0x10072360)
- __std_terminate (Address: 0x1007231c)
- __std_type_info_compare (Address: 0x10072338)
- __std_type_info_destroy_list (Address: 0x10072354)
- __std_type_info_name (Address: 0x1007233c)
- _CxxThrowException (Address: 0x10072320)
- _except_handler4_common (Address: 0x10072348)
- _purecall (Address: 0x10072334)
- memchr (Address: 0x10072340)
- memcpy (Address: 0x10072328)
- memmove (Address: 0x1007232c)
- memset (Address: 0x10072330)
- wcsrchr (Address: 0x10072358)