wardenquest.dll

Description:

Authors:

Version:

Architecture: 64-bit

Operating System:

SHA256: 38843dcdffab4b30053d99d02ef70019

File Size: 495.0 KB

Uploaded At: May 7, 2026, 4:43 p.m.

Views: 52

Exported Functions

  • _DllMainCRTStartup (Ordinal: 1, Address: 0x1000)
  • __xl_a (Ordinal: 2, Address: 0x6db50)
  • __xl_z (Ordinal: 3, Address: 0x6db58)
  • _tls_end (Ordinal: 4, Address: 0x7f020)
  • _tls_index (Ordinal: 5, Address: 0x71020)
  • _tls_start (Ordinal: 6, Address: 0x7f000)
  • _tls_used (Ordinal: 7, Address: 0x6db28)
  • fillRegion (Ordinal: 8, Address: 0x14d0)
  • getMaxY (Ordinal: 9, Address: 0x270c0)
  • getMinY (Ordinal: 10, Address: 0x270d0)
  • prepareRegion (Ordinal: 11, Address: 0x26350)
  • setSeed (Ordinal: 12, Address: 0x270e0)
  • unload (Ordinal: 13, Address: 0x1010)

Imported DLLs & Functions

KERNEL32.dll
  • CreateProcessW (Address: 0x18006e098)
ntdll.dll
  • LdrGetProcedureAddress (Address: 0x18006ded0)
  • LdrLoadDll (Address: 0x18006ded8)
  • LdrUnloadDll (Address: 0x18006dee0)
  • NtAlertThread (Address: 0x18006dee8)
  • NtAlertThreadByThreadId (Address: 0x18006def0)
  • NtAllocateVirtualMemory (Address: 0x18006def8)
  • NtCancelIoFileEx (Address: 0x18006df00)
  • NtCancelSynchronousIoFile (Address: 0x18006df08)
  • NtClose (Address: 0x18006df10)
  • NtCreateFile (Address: 0x18006df18)
  • NtCreateNamedPipeFile (Address: 0x18006df20)
  • NtCreateSection (Address: 0x18006df28)
  • NtCreateThreadEx (Address: 0x18006df30)
  • NtDelayExecution (Address: 0x18006df38)
  • NtDeviceIoControlFile (Address: 0x18006df40)
  • NtFlushBuffersFile (Address: 0x18006df48)
  • NtFreeVirtualMemory (Address: 0x18006df50)
  • NtFsControlFile (Address: 0x18006df58)
  • NtLockFile (Address: 0x18006df60)
  • NtMapViewOfSection (Address: 0x18006df68)
  • NtOpenFile (Address: 0x18006df70)
  • NtOpenThread (Address: 0x18006df78)
  • NtQueryAttributesFile (Address: 0x18006df80)
  • NtQueryDirectoryFile (Address: 0x18006df88)
  • NtQueryInformationFile (Address: 0x18006df90)
  • NtQueryInformationProcess (Address: 0x18006df98)
  • NtQueryInformationThread (Address: 0x18006dfa0)
  • NtQueryObject (Address: 0x18006dfa8)
  • NtQuerySystemInformation (Address: 0x18006dfb0)
  • NtQueryVolumeInformationFile (Address: 0x18006dfb8)
  • NtReadFile (Address: 0x18006dfc0)
  • NtResumeThread (Address: 0x18006dfc8)
  • NtSetInformationFile (Address: 0x18006dfd0)
  • NtTerminateProcess (Address: 0x18006dfd8)
  • NtUnlockFile (Address: 0x18006dfe0)
  • NtUnmapViewOfSection (Address: 0x18006dfe8)
  • NtWaitForAlertByThreadId (Address: 0x18006dff0)
  • NtWaitForSingleObject (Address: 0x18006dff8)
  • NtWriteFile (Address: 0x18006e000)
  • RtlActivateActivationContextEx (Address: 0x18006e008)
  • RtlAllocateHeap (Address: 0x18006e010)
  • RtlEnterCriticalSection (Address: 0x18006e018)
  • RtlEqualUnicodeString (Address: 0x18006e020)
  • RtlExitUserProcess (Address: 0x18006e028)
  • RtlFreeHeap (Address: 0x18006e030)
  • RtlGetActiveActivationContext (Address: 0x18006e038)
  • RtlGetCurrentDirectory_U (Address: 0x18006e040)
  • RtlGetFullPathName_U (Address: 0x18006e048)
  • RtlGetSystemTimePrecise (Address: 0x18006e050)
  • RtlLeaveCriticalSection (Address: 0x18006e058)
  • RtlQueryPerformanceCounter (Address: 0x18006e060)
  • RtlQueryPerformanceFrequency (Address: 0x18006e068)
  • RtlReleaseActivationContext (Address: 0x18006e070)
  • RtlReportSilentProcessExit (Address: 0x18006e078)
  • RtlSetCurrentDirectory_U (Address: 0x18006e080)
  • RtlUpcaseUnicodeChar (Address: 0x18006e088)