xweb_elf.dll

v2.3.5.16965 64-bit Windows Analyzed
Description
WeChat
Authors
Copyright (C) 2025 Tencent WeChat Team. All rights reserved.
File size
1.2 MB
Uploaded
2025-12-04 06:18
Views
269
SHA-256
3351bec8b7204acbcb58a33a458219b7

Exported functions 22

ClearReportsBetween_ExportThunk #1 · 0xba950
CrashForException_ExportThunk #2 · 0xba8e0
DisableHook #3 · 0xba440
DrainLog #4 · 0x1c2e0
DumpHungProcessWithPtype_ExportThunk #5 · 0xba960
DumpProcessWithoutCrash #6 · 0xba3c0
GetApplyHookResult #7 · 0x1bca0
GetBlockedModulesCount #8 · 0xba5a0
GetCrashReports_ExportThunk #9 · 0xba800
GetCrashpadDatabasePath_ExportThunk #10 · 0xba940
GetHandleVerifier #11 · 0x39ae0
GetUniqueBlockedModulesCount #12 · 0xba5b0
InjectDumpForHungInput_ExportThunk #13 · 0xba910
IsBrowserProcess #14 · 0x1ab80
IsExtensionPointDisableSet #15 · 0x1ab90
IsThirdPartyInitialized #16 · 0x1cee0
RegisterLogNotification #17 · 0x1c9f0
RequestSingleCrashUpload_ExportThunk #18 · 0xba7a0
SetMetricsClientId #19 · 0xba3d0
SetUploadConsent_ExportThunk #20 · 0xba900
SignalInitializeCrashReporting #21 · 0x1ab00
SignalXWebElf #22 · 0x1ab10

Imported DLLs & functions 163

KERNEL32.dll 154
AcquireSRWLockExclusive 0x180111de8
CloseHandle 0x180111df0
CompareStringW 0x180111df8
CreateDirectoryW 0x180111e00
CreateEventW 0x180111e08
CreateFileW 0x180111e10
CreateMutexW 0x180111e18
CreateRemoteThread 0x180111e20
CreateThread 0x180111e28
DeleteCriticalSection 0x180111e30
DeleteFileW 0x180111e38
DuplicateHandle 0x180111e40
EncodePointer 0x180111e48
EnterCriticalSection 0x180111e50
EnumSystemLocalesW 0x180111e58
ExitProcess 0x180111e60
ExpandEnvironmentStringsW 0x180111e68
FileTimeToSystemTime 0x180111e70
FindClose 0x180111e78
FindFirstFileExW 0x180111e80
FindNextFileW 0x180111e88
FlsAlloc 0x180111e90
FlsFree 0x180111e98
FlsGetValue 0x180111ea0
FlsSetValue 0x180111ea8
FlushFileBuffers 0x180111eb0
FormatMessageW 0x180111eb8
FreeEnvironmentStringsW 0x180111ec0
FreeLibrary 0x180111ec8
GetACP 0x180111ed0
GetCommandLineA 0x180111ee0
GetCommandLineW 0x180111ee8
GetConsoleMode 0x180111ef0
GetConsoleOutputCP 0x180111ef8
GetCPInfo 0x180111ed8
GetCurrentDirectoryW 0x180111f00
GetCurrentProcess 0x180111f08
GetCurrentProcessId 0x180111f10
GetCurrentThread 0x180111f18
GetCurrentThreadId 0x180111f20
GetDateFormatW 0x180111f28
GetDriveTypeW 0x180111f30
GetEnvironmentStringsW 0x180111f38
GetEnvironmentVariableW 0x180111f40
GetFileAttributesW 0x180111f48
GetFileInformationByHandle 0x180111f50
GetFileSizeEx 0x180111f58
GetFileTime 0x180111f60
GetFileType 0x180111f68
GetFullPathNameW 0x180111f70
GetLastError 0x180111f78
GetLocaleInfoW 0x180111f88
GetLocalTime 0x180111f80
GetLongPathNameW 0x180111f90
GetModuleFileNameW 0x180111f98
GetModuleHandleA 0x180111fa0
GetModuleHandleExW 0x180111fa8
GetModuleHandleW 0x180111fb0
GetNativeSystemInfo 0x180111fb8
GetOEMCP 0x180111fc0
GetProcAddress 0x180111fc8
GetProcessHeap 0x180111fd0
GetProcessId 0x180111fd8
GetProductInfo 0x180111fe0
GetStartupInfoW 0x180111fe8
GetStdHandle 0x180111ff0
GetStringTypeW 0x180111ff8
GetSystemDirectoryW 0x180112000
GetSystemInfo 0x180112008
GetSystemTimeAsFileTime 0x180112010
GetTempPathW 0x180112018
GetThreadPriority 0x180112020
GetTickCount 0x180112028
GetTimeFormatW 0x180112030
GetTimeZoneInformation 0x180112038
GetUserDefaultLCID 0x180112040
GetVersionExW 0x180112048
GetWindowsDirectoryW 0x180112050
GlobalMemoryStatusEx 0x180112058
InitializeCriticalSectionAndSpinCount 0x180112068
InitializeSListHead 0x180112070
InitOnceExecuteOnce 0x180112060
InterlockedFlushSList 0x180112078
IsDebuggerPresent 0x180112080
IsProcessorFeaturePresent 0x180112088
IsValidCodePage 0x180112090
IsValidLocale 0x180112098
IsWow64Process 0x1801120a0
K32GetMappedFileNameW 0x1801120a8
LCMapStringW 0x1801120b0
LeaveCriticalSection 0x1801120b8
LoadLibraryExA 0x1801120c0
LoadLibraryExW 0x1801120c8
LocalFree 0x1801120d0
LockFileEx 0x1801120d8
MultiByteToWideChar 0x1801120e0
OutputDebugStringA 0x1801120e8
PeekNamedPipe 0x1801120f0
QueryPerformanceCounter 0x1801120f8
QueryPerformanceFrequency 0x180112100
QueryThreadCycleTime 0x180112108
RaiseException 0x180112110
ReadConsoleW 0x180112118
ReadFile 0x180112120
ReadProcessMemory 0x180112128
ReleaseMutex 0x180112130
ReleaseSRWLockExclusive 0x180112138
RemoveDirectoryW 0x180112140
RemoveVectoredExceptionHandler 0x180112148
ResetEvent 0x180112150
RtlCaptureContext 0x180112158
RtlCaptureStackBackTrace 0x180112160
RtlLookupFunctionEntry 0x180112168
RtlPcToFileHeader 0x180112170
RtlUnwind 0x180112178
RtlUnwindEx 0x180112180
RtlVirtualUnwind 0x180112188
SetEndOfFile 0x180112190
SetEnvironmentVariableW 0x180112198
SetEvent 0x1801121a0
SetFilePointerEx 0x1801121a8
SetLastError 0x1801121b0
SetStdHandle 0x1801121b8
SetThreadPriority 0x1801121c0
SetUnhandledExceptionFilter 0x1801121c8
Sleep 0x1801121d0
SleepConditionVariableSRW 0x1801121d8
SleepEx 0x1801121e0
SwitchToThread 0x1801121e8
SystemTimeToTzSpecificLocalTime 0x1801121f0
TerminateProcess 0x1801121f8
TlsAlloc 0x180112200
TlsFree 0x180112208
TlsGetValue 0x180112210
TlsSetValue 0x180112218
TryAcquireSRWLockExclusive 0x180112220
UnhandledExceptionFilter 0x180112228
UnlockFileEx 0x180112230
UnmapViewOfFile 0x180112238
UnregisterWaitEx 0x180112240
VerifyVersionInfoW 0x180112250
VerSetConditionMask 0x180112248
VirtualAlloc 0x180112258
VirtualFree 0x180112260
VirtualProtect 0x180112268
VirtualProtectEx 0x180112270
VirtualQuery 0x180112278
WaitForSingleObject 0x180112280
WakeAllConditionVariable 0x180112288
WakeConditionVariable 0x180112290
WideCharToMultiByte 0x180112298
WriteConsoleW 0x1801122a0
WriteFile 0x1801122a8
WriteProcessMemory 0x1801122b0
ntdll.dll 9
NtClose 0x1801122c0
NtCreateKey 0x1801122c8
NtDeleteKey 0x1801122d0
NtOpenKeyEx 0x1801122d8
NtQueryValueKey 0x1801122e0
NtSetValueKey 0x1801122e8
RtlFormatCurrentUserKeyPath 0x1801122f0
RtlFreeUnicodeString 0x1801122f8
RtlInitUnicodeString 0x180112300