bzwhll.dll

Description: BZWhll Module

Version: 10.2.2.5194

Architecture: 32-bit

Operating System: Windows

SHA256: a7689087edc8ff09802b2143769d489a

File Size: 789.6 KB

Uploaded At: April 24, 2026, 6:06 p.m.

Views: 35

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0xfec9)
DllGetClassObject (Ordinal: 2, Address: 0xfed5)
DllRegisterServer (Ordinal: 3, Address: 0x10c0b)
DllUnregisterServer (Ordinal: 4, Address: 0x12160)

Imported DLLs & Functions

ADVAPI32.dll

CryptAcquireContextA (Address: 0x1005102c)
CryptCreateHash (Address: 0x10051014)
CryptDecrypt (Address: 0x10051018)
CryptDeriveKey (Address: 0x10051024)
CryptDestroyHash (Address: 0x1005100c)
CryptDestroyKey (Address: 0x10051020)
CryptEncrypt (Address: 0x1005101c)
CryptHashData (Address: 0x10051010)
CryptReleaseContext (Address: 0x10051028)
GetUserNameA (Address: 0x10051008)
ImpersonateLoggedOnUser (Address: 0x10051050)
OpenProcessToken (Address: 0x10051054)
RegCloseKey (Address: 0x10051004)
RegCreateKeyExA (Address: 0x10051044)
RegDeleteKeyA (Address: 0x10051040)
RegDeleteValueA (Address: 0x1005103c)
RegEnumKeyExA (Address: 0x10051038)
RegOpenCurrentUser (Address: 0x10051048)
RegOpenKeyExA (Address: 0x10051058)
RegQueryInfoKeyW (Address: 0x10051034)
RegQueryValueExA (Address: 0x10051000)
RegSetValueExA (Address: 0x10051030)
RevertToSelf (Address: 0x1005104c)

api-ms-win-crt-convert-l1-1-0.dll

_fcvt (Address: 0x10051410)
atof (Address: 0x10051408)
atoi (Address: 0x1005140c)

api-ms-win-crt-filesystem-l1-1-0.dll

_chdrive (Address: 0x10051418)

api-ms-win-crt-heap-l1-1-0.dll

_callnewh (Address: 0x10051420)
_recalloc (Address: 0x10051424)
calloc (Address: 0x10051430)
free (Address: 0x10051428)
malloc (Address: 0x1005142c)

api-ms-win-crt-multibyte-l1-1-0.dll

_mbschr (Address: 0x10051444)
_mbsicmp (Address: 0x10051440)
_mbsnbcpy_s (Address: 0x1005143c)
_mbspbrk (Address: 0x10051438)
_mbsstr (Address: 0x10051448)
_mbsupr_s (Address: 0x1005144c)

api-ms-win-crt-runtime-l1-1-0.dll

_cexit (Address: 0x1005145c)
_configure_narrow_argv (Address: 0x10051470)
_crt_atexit (Address: 0x10051458)
_errno (Address: 0x10051488)
_execute_onexit_table (Address: 0x10051454)
_initialize_narrow_environment (Address: 0x1005146c)
_initialize_onexit_table (Address: 0x10051468)
_initterm (Address: 0x1005147c)
_initterm_e (Address: 0x10051480)
_invalid_parameter_noinfo (Address: 0x10051484)
_invalid_parameter_noinfo_noreturn (Address: 0x1005148c)
_register_onexit_function (Address: 0x10051464)
_resetstkoflw (Address: 0x10051460)
_seh_filter_dll (Address: 0x10051474)
terminate (Address: 0x10051478)

api-ms-win-crt-stdio-l1-1-0.dll

__stdio_common_vsprintf (Address: 0x10051498)
__stdio_common_vsprintf_s (Address: 0x10051494)

api-ms-win-crt-string-l1-1-0.dll

_strdup (Address: 0x100514ac)
_stricmp (Address: 0x100514a8)
_strnicmp (Address: 0x100514b8)
strcmp (Address: 0x100514d8)
strcpy (Address: 0x100514a0)
strcpy_s (Address: 0x100514cc)
strlen (Address: 0x100514e0)
strncpy (Address: 0x100514b4)
strnlen (Address: 0x100514c4)
strpbrk (Address: 0x100514c8)
strtok (Address: 0x100514b0)
tolower (Address: 0x100514e4)
toupper (Address: 0x100514e8)
towupper (Address: 0x100514d4)
wcscat (Address: 0x100514dc)
wcscmp (Address: 0x100514bc)
wcscpy (Address: 0x100514c0)
wcslen (Address: 0x100514d0)
wcsnlen (Address: 0x100514a4)

api-ms-win-crt-utility-l1-1-0.dll

abs (Address: 0x100514f0)

COMCTL32.dll

InitCommonControlsEx (Address: 0x10051060)

COMDLG32.dll

GetOpenFileNameA (Address: 0x10051068)
GetSaveFileNameA (Address: 0x1005106c)

KERNEL32.dll

CloseHandle (Address: 0x1005108c)
CompareFileTime (Address: 0x100510b4)
CreateDirectoryW (Address: 0x10051128)
CreateEventW (Address: 0x1005117c)
CreateFileA (Address: 0x1005107c)
CreateFileMappingA (Address: 0x100510a8)
CreateMutexA (Address: 0x10051098)
CreateProcessA (Address: 0x100510f0)
CreateToolhelp32Snapshot (Address: 0x1005110c)
DecodePointer (Address: 0x100511c4)
DeleteCriticalSection (Address: 0x1005119c)
DeleteFileA (Address: 0x100510b8)
DeleteFileW (Address: 0x1005112c)
DisableThreadLibraryCalls (Address: 0x100510f8)
DuplicateHandle (Address: 0x10051150)
EncodePointer (Address: 0x100510ec)
EnterCriticalSection (Address: 0x10051194)
FindResourceA (Address: 0x10051104)
FindResourceExW (Address: 0x100511e0)
FindResourceW (Address: 0x10051110)
FormatMessageA (Address: 0x10051118)
FreeLibrary (Address: 0x100511a4)
GetCurrentDirectoryA (Address: 0x100510e8)
GetCurrentDirectoryW (Address: 0x10051124)
GetCurrentProcess (Address: 0x1005116c)
GetCurrentProcessId (Address: 0x100511e8)
GetCurrentThreadId (Address: 0x100511a0)
GetEnvironmentVariableA (Address: 0x100510b0)
GetEnvironmentVariableW (Address: 0x1005111c)
GetLastError (Address: 0x100511cc)
GetLocalTime (Address: 0x1005109c)
GetLongPathNameA (Address: 0x100510bc)
GetModuleFileNameA (Address: 0x100511a8)
GetModuleHandleA (Address: 0x100510c8)
GetModuleHandleW (Address: 0x10051178)
GetPrivateProfileStringA (Address: 0x100511bc)
GetProcAddress (Address: 0x100510cc)
GetProcessHeap (Address: 0x100511f0)
GetStartupInfoA (Address: 0x10051100)
GetSystemDirectoryA (Address: 0x100510c0)
GetSystemTimeAsFileTime (Address: 0x10051158)
GetTempPathA (Address: 0x100511c0)
GetTickCount (Address: 0x100510e4)
GetTimeFormatA (Address: 0x10051148)
GetVersionExA (Address: 0x100510c4)
GlobalAlloc (Address: 0x100510d4)
GlobalFree (Address: 0x100510e0)
GlobalLock (Address: 0x100510dc)
GlobalSize (Address: 0x1005113c)
GlobalUnlock (Address: 0x100510d8)
HeapAlloc (Address: 0x100511d4)
HeapDestroy (Address: 0x100511d0)
HeapFree (Address: 0x100511f8)
HeapReAlloc (Address: 0x10051200)
HeapSize (Address: 0x100511f4)
InitializeCriticalSection (Address: 0x10051190)
InitializeCriticalSectionAndSpinCount (Address: 0x100510d0)
InitializeCriticalSectionEx (Address: 0x100511ec)
InitializeSListHead (Address: 0x10051154)
IsDBCSLeadByte (Address: 0x10051108)
IsDebuggerPresent (Address: 0x10051160)
IsProcessorFeaturePresent (Address: 0x10051164)
LeaveCriticalSection (Address: 0x10051198)
LoadLibraryA (Address: 0x100511ac)
LoadLibraryExA (Address: 0x100510fc)
LoadResource (Address: 0x100511dc)
LockResource (Address: 0x100511d8)
lstrcatA (Address: 0x100511b4)
lstrcatW (Address: 0x10051140)
lstrcmpA (Address: 0x100511e4)
lstrcmpiA (Address: 0x10051074)
lstrcpyA (Address: 0x100511b0)
lstrlenA (Address: 0x100511b8)
lstrlenW (Address: 0x10051138)
MapViewOfFile (Address: 0x100510a0)
MultiByteToWideChar (Address: 0x10051078)
OpenProcess (Address: 0x100510f4)
OutputDebugStringA (Address: 0x10051088)
OutputDebugStringW (Address: 0x10051204)
Process32First (Address: 0x100511fc)
Process32Next (Address: 0x10051114)
QueryPerformanceCounter (Address: 0x1005115c)
RaiseException (Address: 0x100511c8)
ReadFile (Address: 0x1005114c)
ReleaseMutex (Address: 0x10051090)
RemoveDirectoryW (Address: 0x10051130)
ResetEvent (Address: 0x10051184)
SetCurrentDirectoryW (Address: 0x10051120)
SetEvent (Address: 0x10051188)
SetFilePointer (Address: 0x10051080)
SetUnhandledExceptionFilter (Address: 0x10051170)
SizeofResource (Address: 0x1005118c)
Sleep (Address: 0x10051134)
SystemTimeToFileTime (Address: 0x10051144)
TerminateProcess (Address: 0x10051168)
UnhandledExceptionFilter (Address: 0x10051174)
UnmapViewOfFile (Address: 0x100510a4)
WaitForSingleObject (Address: 0x10051094)
WaitForSingleObjectEx (Address: 0x10051180)
WideCharToMultiByte (Address: 0x100510ac)
WriteFile (Address: 0x10051084)

MSVCP140.dll

?_Xlength_error@std@@YAXPBD@Z (Address: 0x10051210)
?_Xout_of_range@std@@YAXPBD@Z (Address: 0x1005120c)

ole32.dll

CLSIDFromString (Address: 0x10051500)
CoCreateInstance (Address: 0x10051518)
CoTaskMemAlloc (Address: 0x100514fc)
CoTaskMemFree (Address: 0x10051508)
CoTaskMemRealloc (Address: 0x100514f8)
CreateFileMoniker (Address: 0x10051510)
GetRunningObjectTable (Address: 0x10051514)
OleInitialize (Address: 0x1005151c)
OleUninitialize (Address: 0x1005150c)
ProgIDFromCLSID (Address: 0x10051504)

OLEAUT32.dll

CreateErrorInfo (Address: 0x10051238)
LoadRegTypeLib (Address: 0x10051260)
LoadTypeLib (Address: 0x10051264)
RegisterTypeLib (Address: 0x10051258)
SafeArrayAccessData (Address: 0x10051224)
SafeArrayGetLBound (Address: 0x10051228)
SafeArrayGetUBound (Address: 0x1005122c)
SafeArrayUnaccessData (Address: 0x10051220)
SetErrorInfo (Address: 0x1005123c)
SysAllocString (Address: 0x10051218)
SysAllocStringByteLen (Address: 0x10051244)
SysAllocStringLen (Address: 0x10051250)
SysFreeString (Address: 0x10051270)
SysReAllocStringLen (Address: 0x10051230)
SysStringByteLen (Address: 0x10051248)
SysStringLen (Address: 0x1005126c)
UnRegisterTypeLib (Address: 0x10051254)
VarBstrCmp (Address: 0x10051240)
VariantChangeType (Address: 0x1005121c)
VariantClear (Address: 0x1005124c)
VariantCopy (Address: 0x10051234)
VariantInit (Address: 0x10051268)
VarUI4FromStr (Address: 0x1005125c)

PSAPI.DLL

GetModuleFileNameExA (Address: 0x10051278)

SHELL32.dll

SHBrowseForFolderA (Address: 0x10051280)
ShellExecuteA (Address: 0x1005128c)
ShellExecuteExA (Address: 0x10051294)
SHGetMalloc (Address: 0x10051288)
SHGetPathFromIDListA (Address: 0x10051284)
SHGetSpecialFolderLocation (Address: 0x10051290)

SHLWAPI.dll

PathFindExtensionA (Address: 0x100512b0)
PathRemoveExtensionA (Address: 0x1005129c)
PathRemoveFileSpecA (Address: 0x100512b4)
PathStripPathA (Address: 0x100512a4)
SHDeleteKeyA (Address: 0x100512a8)
StrStrIA (Address: 0x100512ac)
StrStrW (Address: 0x100512a0)

USER32.dll

CharNextA (Address: 0x100513a4)
CloseClipboard (Address: 0x100512cc)
CreateDialogParamA (Address: 0x10051340)
DefDlgProcA (Address: 0x10051338)
DestroyWindow (Address: 0x10051344)
DialogBoxParamA (Address: 0x1005133c)
DispatchMessageA (Address: 0x100512e8)
EmptyClipboard (Address: 0x100512e0)
EndDialog (Address: 0x10051394)
EnumThreadWindows (Address: 0x10051324)
EnumWindows (Address: 0x1005136c)
FindWindowA (Address: 0x10051384)
FindWindowExA (Address: 0x10051388)
GetActiveWindow (Address: 0x10051358)
GetAncestor (Address: 0x10051304)
GetClassNameA (Address: 0x1005130c)
GetClipboardData (Address: 0x10051334)
GetDlgItem (Address: 0x10051300)
GetDlgItemTextA (Address: 0x100513ac)
GetForegroundWindow (Address: 0x1005139c)
GetGUIThreadInfo (Address: 0x10051350)
GetKeyState (Address: 0x10051330)
GetMenu (Address: 0x100513a0)
GetMonitorInfoA (Address: 0x10051360)
GetParent (Address: 0x100512d8)
GetWindow (Address: 0x100512f0)
GetWindowLongA (Address: 0x10051390)
GetWindowPlacement (Address: 0x10051314)
GetWindowRect (Address: 0x100512bc)
GetWindowTextA (Address: 0x10051380)
GetWindowThreadProcessId (Address: 0x10051374)
IsChild (Address: 0x10051354)
IsWindow (Address: 0x100512f4)
IsWindowVisible (Address: 0x1005137c)
keybd_event (Address: 0x1005132c)
LoadCursorA (Address: 0x10051320)
LoadIconA (Address: 0x1005131c)
LoadStringA (Address: 0x100512c8)
MessageBeep (Address: 0x10051328)
MessageBoxA (Address: 0x100513b0)
MonitorFromRect (Address: 0x10051368)
MonitorFromWindow (Address: 0x10051364)
OpenClipboard (Address: 0x100512c4)
PeekMessageA (Address: 0x100512ec)
PostMessageA (Address: 0x100512d4)
RegisterClassA (Address: 0x10051348)
RegisterWindowMessageA (Address: 0x10051370)
SendDlgItemMessageA (Address: 0x100513a8)
SendMessageA (Address: 0x100512d0)
SetClipboardData (Address: 0x100512dc)
SetDlgItemTextA (Address: 0x1005138c)
SetFocus (Address: 0x10051308)
SetForegroundWindow (Address: 0x100512c0)
SetWindowLongA (Address: 0x10051318)
SetWindowPlacement (Address: 0x1005135c)
SetWindowPos (Address: 0x100512fc)
SetWindowTextA (Address: 0x10051398)
ShowWindow (Address: 0x100512f8)
TranslateMessage (Address: 0x100512e4)
WaitForInputIdle (Address: 0x10051310)
wsprintfA (Address: 0x10051378)
wsprintfW (Address: 0x1005134c)

VCRUNTIME140.dll

__CxxFrameHandler3 (Address: 0x100513f0)
__std_exception_copy (Address: 0x100513d0)
__std_exception_destroy (Address: 0x100513cc)
__std_terminate (Address: 0x100513e8)
__std_type_info_destroy_list (Address: 0x100513c8)
_CxxThrowException (Address: 0x100513bc)
_except_handler4_common (Address: 0x100513d4)
_purecall (Address: 0x100513e4)
memchr (Address: 0x100513d8)
memcmp (Address: 0x100513ec)
memcpy (Address: 0x100513c4)
memmove (Address: 0x100513e0)
memset (Address: 0x100513c0)
strrchr (Address: 0x100513b8)
strstr (Address: 0x100513dc)

VERSION.dll

GetFileVersionInfoA (Address: 0x100513f8)
GetFileVersionInfoSizeA (Address: 0x10051400)
VerQueryValueA (Address: 0x100513fc)