repsvr.dll

Description: WPS Office Expansion tool

Authors: Copyright©2025 Kingsoft Corporation. All rights reserved.

Version: 12.9.0.22791

Architecture: 32-bit

Operating System: Windows NT

SHA256: 47aad8edae6102c33c440f2b58f847bc

File Size: 648.5 KB

Uploaded At: Dec. 4, 2025, 6:17 a.m.

Views: 11

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • EntryPoint (Ordinal: 1, Address: 0x2b9b0)

Imported DLLs & Functions

api-ms-win-crt-convert-l1-1-0.dll
  • _itow_s (Address: 0x10075364)
  • _ui64tow_s (Address: 0x10075360)
  • _wtoi (Address: 0x1007535c)
  • wcstoul (Address: 0x10075368)
api-ms-win-crt-filesystem-l1-1-0.dll
  • _lock_file (Address: 0x10075378)
  • _unlock_file (Address: 0x10075370)
  • _waccess_s (Address: 0x1007537c)
  • _wrename (Address: 0x10075374)
api-ms-win-crt-heap-l1-1-0.dll
  • _aligned_free (Address: 0x10075388)
  • _aligned_malloc (Address: 0x1007538c)
  • _callnewh (Address: 0x10075384)
  • free (Address: 0x10075390)
  • malloc (Address: 0x10075394)
api-ms-win-crt-runtime-l1-1-0.dll
  • _cexit (Address: 0x100753bc)
  • _configure_narrow_argv (Address: 0x100753a0)
  • _crt_atexit (Address: 0x100753d0)
  • _errno (Address: 0x100753c8)
  • _execute_onexit_table (Address: 0x100753a8)
  • _initialize_narrow_environment (Address: 0x1007539c)
  • _initialize_onexit_table (Address: 0x100753b4)
  • _initterm (Address: 0x100753b0)
  • _initterm_e (Address: 0x100753ac)
  • _invalid_parameter_noinfo (Address: 0x100753c4)
  • _invalid_parameter_noinfo_noreturn (Address: 0x100753c0)
  • _register_onexit_function (Address: 0x100753a4)
  • _seh_filter_dll (Address: 0x100753cc)
  • terminate (Address: 0x100753b8)
api-ms-win-crt-stdio-l1-1-0.dll
  • __stdio_common_vsnwprintf_s (Address: 0x100753e4)
  • __stdio_common_vswprintf (Address: 0x100753dc)
  • __stdio_common_vswprintf_s (Address: 0x100753e0)
  • _fseeki64 (Address: 0x10075400)
  • _ftelli64 (Address: 0x10075420)
  • _get_stream_buffer_pointers (Address: 0x10075418)
  • _wfopen (Address: 0x100753ec)
  • _wfopen_s (Address: 0x10075410)
  • fclose (Address: 0x100753e8)
  • fflush (Address: 0x100753f0)
  • fgetc (Address: 0x100753f4)
  • fgetpos (Address: 0x100753f8)
  • fgetwc (Address: 0x10075414)
  • fputc (Address: 0x1007541c)
  • fputwc (Address: 0x1007542c)
  • fread (Address: 0x10075424)
  • fread_s (Address: 0x10075428)
  • fsetpos (Address: 0x100753fc)
  • fwrite (Address: 0x10075404)
  • setvbuf (Address: 0x10075408)
  • ungetc (Address: 0x1007540c)
  • ungetwc (Address: 0x100753d8)
api-ms-win-crt-string-l1-1-0.dll
  • _strnicmp (Address: 0x10075450)
  • _wcsicmp (Address: 0x10075440)
  • _wcsnicmp (Address: 0x1007545c)
  • iswxdigit (Address: 0x10075438)
  • tolower (Address: 0x10075454)
  • towupper (Address: 0x10075434)
  • wcscat_s (Address: 0x1007544c)
  • wcscpy_s (Address: 0x10075448)
  • wcsncmp (Address: 0x10075444)
  • wcsnlen (Address: 0x10075458)
  • wmemcpy_s (Address: 0x1007543c)
api-ms-win-crt-time-l1-1-0.dll
  • _time64 (Address: 0x10075464)
KERNEL32.dll
  • CloseHandle (Address: 0x10075040)
  • CopyFileTransactedW (Address: 0x100750dc)
  • CopyFileW (Address: 0x100750cc)
  • CreateDirectoryW (Address: 0x10075014)
  • CreateEventW (Address: 0x10075140)
  • CreateFileW (Address: 0x10075018)
  • CreateMutexW (Address: 0x100750f0)
  • CreateProcessW (Address: 0x10075100)
  • CreateToolhelp32Snapshot (Address: 0x100750bc)
  • DeleteCriticalSection (Address: 0x10075128)
  • DeleteFileTransactedW (Address: 0x100750d8)
  • DeleteFileW (Address: 0x1007501c)
  • DisableThreadLibraryCalls (Address: 0x10075000)
  • EnterCriticalSection (Address: 0x1007517c)
  • ExpandEnvironmentStringsW (Address: 0x10075134)
  • FindClose (Address: 0x10075020)
  • FindFirstFileW (Address: 0x10075024)
  • FindNextFileW (Address: 0x10075028)
  • FindResourceExW (Address: 0x10075080)
  • FindResourceW (Address: 0x100750a0)
  • FlushInstructionCache (Address: 0x10075164)
  • FreeLibrary (Address: 0x10075084)
  • GetCurrentProcess (Address: 0x10075064)
  • GetCurrentProcessId (Address: 0x10075108)
  • GetCurrentThread (Address: 0x1007510c)
  • GetCurrentThreadId (Address: 0x10075110)
  • GetEnvironmentVariableW (Address: 0x1007512c)
  • GetExitCodeProcess (Address: 0x1007506c)
  • GetFileAttributesW (Address: 0x1007502c)
  • GetFileSize (Address: 0x10075030)
  • GetFullPathNameW (Address: 0x10075034)
  • GetLastError (Address: 0x10075044)
  • GetLongPathNameW (Address: 0x1007513c)
  • GetModuleFileNameW (Address: 0x10075088)
  • GetModuleHandleW (Address: 0x1007508c)
  • GetPrivateProfileIntW (Address: 0x100750e4)
  • GetPrivateProfileStringW (Address: 0x100750b0)
  • GetProcAddress (Address: 0x10075090)
  • GetProcessHeap (Address: 0x1007505c)
  • GetSystemDirectoryW (Address: 0x10075078)
  • GetSystemInfo (Address: 0x10075158)
  • GetSystemTimeAsFileTime (Address: 0x10075004)
  • GetSystemWow64DirectoryW (Address: 0x1007507c)
  • GetThreadContext (Address: 0x1007515c)
  • GetTickCount (Address: 0x10075074)
  • GetWindowsDirectoryW (Address: 0x10075114)
  • HeapAlloc (Address: 0x1007504c)
  • HeapDestroy (Address: 0x10075048)
  • HeapFree (Address: 0x10075054)
  • HeapReAlloc (Address: 0x10075050)
  • HeapSize (Address: 0x10075058)
  • InitializeCriticalSectionAndSpinCount (Address: 0x10075124)
  • InitializeSListHead (Address: 0x10075190)
  • IsDebuggerPresent (Address: 0x10075154)
  • IsProcessorFeaturePresent (Address: 0x10075194)
  • IsWow64Process (Address: 0x10075118)
  • LeaveCriticalSection (Address: 0x10075180)
  • LoadLibraryExA (Address: 0x1007516c)
  • LoadLibraryExW (Address: 0x10075170)
  • LoadLibraryW (Address: 0x100750a4)
  • LoadResource (Address: 0x10075094)
  • LocalFree (Address: 0x100750a8)
  • LockResource (Address: 0x10075098)
  • lstrcmpW (Address: 0x100750ac)
  • lstrlenW (Address: 0x1007511c)
  • MoveFileExW (Address: 0x100750b4)
  • MoveFileTransactedW (Address: 0x100750e0)
  • MoveFileW (Address: 0x100750d0)
  • MultiByteToWideChar (Address: 0x100750e8)
  • OpenMutexW (Address: 0x100750f4)
  • OpenProcess (Address: 0x10075070)
  • OutputDebugStringW (Address: 0x1007503c)
  • Process32FirstW (Address: 0x100750c0)
  • Process32NextW (Address: 0x100750c4)
  • ProcessIdToSessionId (Address: 0x10075138)
  • QueryPerformanceCounter (Address: 0x10075174)
  • QueryPerformanceFrequency (Address: 0x10075178)
  • RaiseException (Address: 0x10075120)
  • ReadFile (Address: 0x100750ec)
  • ReleaseMutex (Address: 0x100750f8)
  • RemoveDirectoryW (Address: 0x10075038)
  • ResetEvent (Address: 0x10075188)
  • ResumeThread (Address: 0x10075144)
  • SetEnvironmentVariableW (Address: 0x10075130)
  • SetEvent (Address: 0x10075184)
  • SetLastError (Address: 0x10075104)
  • SetThreadContext (Address: 0x10075160)
  • SetUnhandledExceptionFilter (Address: 0x10075008)
  • SizeofResource (Address: 0x1007509c)
  • Sleep (Address: 0x100750c8)
  • TerminateProcess (Address: 0x10075068)
  • UnhandledExceptionFilter (Address: 0x1007500c)
  • VerifyVersionInfoW (Address: 0x100750b8)
  • VerSetConditionMask (Address: 0x10075010)
  • VirtualAlloc (Address: 0x10075148)
  • VirtualFree (Address: 0x1007514c)
  • VirtualProtect (Address: 0x10075168)
  • VirtualQuery (Address: 0x10075150)
  • WaitForSingleObject (Address: 0x10075060)
  • WaitForSingleObjectEx (Address: 0x1007518c)
  • WideCharToMultiByte (Address: 0x100750d4)
  • WritePrivateProfileStringW (Address: 0x100750fc)
ktmw32.dll
  • CommitTransaction (Address: 0x10075470)
  • CreateTransaction (Address: 0x10075474)
  • RollbackTransaction (Address: 0x1007546c)
MSVCP140.dll
  • _Mtx_destroy_in_situ (Address: 0x10075294)
  • _Mtx_init_in_situ (Address: 0x10075290)
  • _Mtx_lock (Address: 0x10075298)
  • _Mtx_unlock (Address: 0x1007529c)
  • ?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z (Address: 0x100751b8)
  • ?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z (Address: 0x100752d4)
  • ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z (Address: 0x100751d4)
  • ?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z (Address: 0x100752cc)
  • ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ (Address: 0x100752e4)
  • ?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ (Address: 0x100752ac)
  • ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ (Address: 0x100751e8)
  • ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z (Address: 0x10075280)
  • ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ (Address: 0x10075254)
  • ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ (Address: 0x10075220)
  • ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ (Address: 0x100751b0)
  • ?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ (Address: 0x100752b0)
  • ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ (Address: 0x100751e4)
  • ?_Random_device@std@@YAIXZ (Address: 0x10075284)
  • ?_Throw_C_error@std@@YAXH@Z (Address: 0x100752a0)
  • ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ (Address: 0x10075258)
  • ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ (Address: 0x10075224)
  • ?_Xbad_function_call@std@@YAXXZ (Address: 0x10075288)
  • ?_Xinvalid_argument@std@@YAXPBD@Z (Address: 0x10075240)
  • ?_Xlength_error@std@@YAXPBD@Z (Address: 0x100752f0)
  • ?_Xout_of_range@std@@YAXPBD@Z (Address: 0x100752ec)
  • ??0_Lockit@std@@QAE@H@Z (Address: 0x100752fc)
  • ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ (Address: 0x100751a4)
  • ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ (Address: 0x100751fc)
  • ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z (Address: 0x1007524c)
  • ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z (Address: 0x10075214)
  • ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z (Address: 0x10075208)
  • ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z (Address: 0x100751a8)
  • ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ (Address: 0x100752c4)
  • ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ (Address: 0x100751d8)
  • ??1_Lockit@std@@QAE@XZ (Address: 0x100752f8)
  • ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ (Address: 0x1007519c)
  • ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x100751f4)
  • ??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ (Address: 0x10075250)
  • ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x10075218)
  • ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x1007520c)
  • ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ (Address: 0x100751ac)
  • ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ (Address: 0x100752c0)
  • ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x100751dc)
  • ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z (Address: 0x1007528c)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z (Address: 0x10075204)
  • ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z (Address: 0x10075200)
  • ??Bid@locale@std@@QAEIXZ (Address: 0x100752e8)
  • ?always_noconv@codecvt_base@std@@QBE_NXZ (Address: 0x10075304)
  • ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ (Address: 0x100751b4)
  • ?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ (Address: 0x100752bc)
  • ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ (Address: 0x100751e0)
  • ?getloc@ios_base@std@@QBE?AVlocale@2@XZ (Address: 0x100752c8)
  • ?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A (Address: 0x100751c0)
  • ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A (Address: 0x1007523c)
  • ?id@?$ctype@_W@std@@2V0locale@2@A (Address: 0x100751c4)
  • ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z (Address: 0x1007525c)
  • ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z (Address: 0x10075228)
  • ?in@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPA_W3AAPA_W@Z (Address: 0x100752e0)
  • ?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z (Address: 0x100751c8)
  • ?out@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z (Address: 0x100752dc)
  • ?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z (Address: 0x100751cc)
  • ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z (Address: 0x10075210)
  • ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ (Address: 0x10075270)
  • ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z (Address: 0x10075244)
  • ?set_new_handler@std@@YAP6AXXZP6AXXZ@Z (Address: 0x100752a4)
  • ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z (Address: 0x10075260)
  • ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z (Address: 0x1007522c)
  • ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z (Address: 0x100751a0)
  • ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z (Address: 0x100751f8)
  • ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z (Address: 0x1007521c)
  • ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ (Address: 0x10075274)
  • ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ (Address: 0x100751bc)
  • ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ (Address: 0x10075230)
  • ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ (Address: 0x10075278)
  • ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z (Address: 0x100752b8)
  • ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z (Address: 0x100752b4)
  • ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ (Address: 0x10075264)
  • ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ (Address: 0x10075234)
  • ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ (Address: 0x10075248)
  • ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ (Address: 0x10075268)
  • ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ (Address: 0x10075238)
  • ?uncaught_exception@std@@YA_NXZ (Address: 0x100752f4)
  • ?uncaught_exceptions@std@@YAHXZ (Address: 0x1007526c)
  • ?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z (Address: 0x100752d8)
  • ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z (Address: 0x100751d0)
  • ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z (Address: 0x1007527c)
  • ?widen@?$ctype@_W@std@@QBE_WD@Z (Address: 0x100752d0)
  • ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z (Address: 0x100752a8)
  • ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z (Address: 0x100751ec)
  • ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z (Address: 0x10075300)
  • ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z (Address: 0x100751f0)
VCRUNTIME140.dll
  • __current_exception (Address: 0x1007530c)
  • __current_exception_context (Address: 0x10075314)
  • __CxxFrameHandler3 (Address: 0x10075330)
  • __RTDynamicCast (Address: 0x10075318)
  • __std_exception_copy (Address: 0x10075324)
  • __std_exception_destroy (Address: 0x10075328)
  • __std_terminate (Address: 0x1007531c)
  • __std_type_info_compare (Address: 0x10075344)
  • __std_type_info_destroy_list (Address: 0x10075354)
  • __std_type_info_name (Address: 0x10075348)
  • _CxxThrowException (Address: 0x1007532c)
  • _except_handler4_common (Address: 0x10075310)
  • _purecall (Address: 0x10075340)
  • memchr (Address: 0x1007534c)
  • memcpy (Address: 0x10075334)
  • memmove (Address: 0x10075338)
  • memset (Address: 0x1007533c)
  • wcsrchr (Address: 0x10075320)
  • wcsstr (Address: 0x10075350)