XT_Clees4All.dll

Description:

Authors:

Version:

Architecture: 64-bit

Operating System:

SHA256: 98944e8a54fd40c54f77e134f92c7ca2

File Size: 4.2 MB

Uploaded At: May 27, 2026, 6:36 a.m.

Views: 60

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

XT_About (Ordinal: 1, Address: 0x9824)
XT_Done (Ordinal: 2, Address: 0x9b70)
XT_Finalize (Ordinal: 3, Address: 0x9a43)
XT_Init (Ordinal: 4, Address: 0x957c)
XT_Prepare (Ordinal: 5, Address: 0x9844)
XT_ProcessItem (Ordinal: 6, Address: 0x99a9)
cJSON_AddArrayToObject (Ordinal: 7, Address: 0x1fb7b)
cJSON_AddBoolToObject (Ordinal: 8, Address: 0x1f96e)
cJSON_AddFalseToObject (Ordinal: 9, Address: 0x1f90e)
cJSON_AddItemReferenceToArray (Ordinal: 10, Address: 0x1f7a1)
cJSON_AddItemReferenceToObject (Ordinal: 11, Address: 0x1f7e7)
cJSON_AddItemToArray (Ordinal: 12, Address: 0x1f5eb)
cJSON_AddItemToObject (Ordinal: 13, Address: 0x1f721)
cJSON_AddItemToObjectCS (Ordinal: 14, Address: 0x1f761)
cJSON_AddNullToObject (Ordinal: 15, Address: 0x1f84e)
cJSON_AddNumberToObject (Ordinal: 16, Address: 0x1f9d7)
cJSON_AddObjectToObject (Ordinal: 17, Address: 0x1fb1b)
cJSON_AddRawToObject (Ordinal: 18, Address: 0x1fab0)
cJSON_AddStringToObject (Ordinal: 19, Address: 0x1fa45)
cJSON_AddTrueToObject (Ordinal: 20, Address: 0x1f8ae)
cJSON_Compare (Ordinal: 21, Address: 0x210a8)
cJSON_CreateArray (Ordinal: 22, Address: 0x204f0)
cJSON_CreateArrayReference (Ordinal: 23, Address: 0x2042b)
cJSON_CreateBool (Ordinal: 24, Address: 0x2023d)
cJSON_CreateDoubleArray (Ordinal: 25, Address: 0x20792)
cJSON_CreateFalse (Ordinal: 26, Address: 0x20206)
cJSON_CreateFloatArray (Ordinal: 27, Address: 0x20677)
cJSON_CreateIntArray (Ordinal: 28, Address: 0x2055e)
cJSON_CreateNull (Ordinal: 29, Address: 0x20198)
cJSON_CreateNumber (Ordinal: 30, Address: 0x20285)
cJSON_CreateObject (Ordinal: 31, Address: 0x20527)
cJSON_CreateObjectReference (Ordinal: 32, Address: 0x203dc)
cJSON_CreateRaw (Ordinal: 33, Address: 0x2047a)
cJSON_CreateString (Ordinal: 34, Address: 0x20317)
cJSON_CreateStringArray (Ordinal: 35, Address: 0x2089f)
cJSON_CreateStringReference (Ordinal: 36, Address: 0x2038d)
cJSON_CreateTrue (Ordinal: 37, Address: 0x201cf)
cJSON_Delete (Ordinal: 38, Address: 0x1c59c)
cJSON_DeleteItemFromArray (Ordinal: 39, Address: 0x1fcf8)
cJSON_DeleteItemFromObject (Ordinal: 40, Address: 0x1fd99)
cJSON_DeleteItemFromObjectCaseSensitive (Ordinal: 41, Address: 0x1fdc8)
cJSON_DetachItemFromArray (Ordinal: 42, Address: 0x1fcb5)
cJSON_DetachItemFromObject (Ordinal: 43, Address: 0x1fd25)
cJSON_DetachItemFromObjectCaseSensitive (Ordinal: 44, Address: 0x1fd5f)
cJSON_DetachItemViaPointer (Ordinal: 45, Address: 0x1fbdb)
cJSON_Duplicate (Ordinal: 46, Address: 0x209a6)
cJSON_GetArrayItem (Ordinal: 47, Address: 0x1f2f1)
cJSON_GetArraySize (Ordinal: 48, Address: 0x1f23c)
cJSON_GetErrorPtr (Ordinal: 49, Address: 0x1c280)
cJSON_GetNumberValue (Ordinal: 50, Address: 0x1c2c8)
cJSON_GetObjectItem (Ordinal: 51, Address: 0x1f3f5)
cJSON_GetObjectItemCaseSensitive (Ordinal: 52, Address: 0x1f421)
cJSON_GetStringValue (Ordinal: 53, Address: 0x1c297)
cJSON_HasObjectItem (Ordinal: 54, Address: 0x1f44d)
cJSON_InitHooks (Ordinal: 55, Address: 0x1c485)
cJSON_InsertItemInArray (Ordinal: 56, Address: 0x1fdf7)
cJSON_IsArray (Ordinal: 57, Address: 0x21025)
cJSON_IsBool (Ordinal: 58, Address: 0x20f7a)
cJSON_IsFalse (Ordinal: 59, Address: 0x20f24)
cJSON_IsInvalid (Ordinal: 60, Address: 0x20efa)
cJSON_IsNull (Ordinal: 61, Address: 0x20fa4)
cJSON_IsNumber (Ordinal: 62, Address: 0x20fcf)
cJSON_IsObject (Ordinal: 63, Address: 0x21050)
cJSON_IsRaw (Ordinal: 64, Address: 0x2107b)
cJSON_IsString (Ordinal: 65, Address: 0x20ffa)
cJSON_IsTrue (Ordinal: 66, Address: 0x20f4f)
cJSON_Minify (Ordinal: 67, Address: 0x20df6)
cJSON_Parse (Ordinal: 68, Address: 0x1dd7b)
cJSON_ParseWithLength (Ordinal: 69, Address: 0x1dda4)
cJSON_ParseWithLengthOpts (Ordinal: 70, Address: 0x1dbb3)
cJSON_ParseWithOpts (Ordinal: 71, Address: 0x1db59)
cJSON_Print (Ordinal: 72, Address: 0x1df88)
cJSON_PrintBuffered (Ordinal: 73, Address: 0x1dfdc)
cJSON_PrintPreallocated (Ordinal: 74, Address: 0x1e0b4)
cJSON_PrintUnformatted (Ordinal: 75, Address: 0x1dfb2)
cJSON_ReplaceItemInArray (Ordinal: 76, Address: 0x2000b)
cJSON_ReplaceItemInObject (Ordinal: 77, Address: 0x2012a)
cJSON_ReplaceItemInObjectCaseSensitive (Ordinal: 78, Address: 0x20161)
cJSON_ReplaceItemViaPointer (Ordinal: 79, Address: 0x1fed7)
cJSON_SetNumberHelper (Ordinal: 80, Address: 0x1c91e)
cJSON_SetValuestring (Ordinal: 81, Address: 0x1c99d)
cJSON_Version (Ordinal: 82, Address: 0x1c2fd)
cJSON_free (Ordinal: 83, Address: 0x21416)
cJSON_malloc (Ordinal: 84, Address: 0x213f4)

Imported DLLs & Functions

api-ms-win-crt-convert-l1-1-0.dll

atoi (Address: 0x2a3dd3e68)
mbrtowc (Address: 0x2a3dd3e70)
strtod (Address: 0x2a3dd3e78)
strtol (Address: 0x2a3dd3e80)
strtoll (Address: 0x2a3dd3e88)
strtoul (Address: 0x2a3dd3e90)
wcrtomb (Address: 0x2a3dd3e98)
wcstombs (Address: 0x2a3dd3ea0)

api-ms-win-crt-environment-l1-1-0.dll

__p__environ (Address: 0x2a3dd3eb0)
__p__wenviron (Address: 0x2a3dd3eb8)
getenv (Address: 0x2a3dd3ec0)

api-ms-win-crt-filesystem-l1-1-0.dll

_access (Address: 0x2a3dd3ed0)
_lock_file (Address: 0x2a3dd3ed8)
_unlock_file (Address: 0x2a3dd3ee0)
_wunlink (Address: 0x2a3dd3ee8)

api-ms-win-crt-heap-l1-1-0.dll

_set_new_mode (Address: 0x2a3dd3ef8)
calloc (Address: 0x2a3dd3f00)
free (Address: 0x2a3dd3f08)
malloc (Address: 0x2a3dd3f10)
realloc (Address: 0x2a3dd3f18)

api-ms-win-crt-locale-l1-1-0.dll

localeconv (Address: 0x2a3dd3f28)

api-ms-win-crt-private-l1-1-0.dll

__intrinsic_setjmpex (Address: 0x2a3dd3f38)
longjmp (Address: 0x2a3dd3f40)
memchr (Address: 0x2a3dd3f48)
memcmp (Address: 0x2a3dd3f50)
memcpy (Address: 0x2a3dd3f58)
memmove (Address: 0x2a3dd3f60)
strchr (Address: 0x2a3dd3f68)
strrchr (Address: 0x2a3dd3f70)

api-ms-win-crt-runtime-l1-1-0.dll

__p___argc (Address: 0x2a3dd3f80)
__p___argv (Address: 0x2a3dd3f88)
__p___wargv (Address: 0x2a3dd3f90)
_assert (Address: 0x2a3dd3f98)
_beginthreadex (Address: 0x2a3dd3fa0)
_configure_narrow_argv (Address: 0x2a3dd3fa8)
_configure_wide_argv (Address: 0x2a3dd3fb0)
_crt_at_quick_exit (Address: 0x2a3dd3fb8)
_crt_atexit (Address: 0x2a3dd3fc0)
_endthreadex (Address: 0x2a3dd3fc8)
_errno (Address: 0x2a3dd3fd0)
_execute_onexit_table (Address: 0x2a3dd3fd8)
_exit (Address: 0x2a3dd3fe0)
_initialize_narrow_environment (Address: 0x2a3dd3fe8)
_initialize_onexit_table (Address: 0x2a3dd3ff0)
_initialize_wide_environment (Address: 0x2a3dd3ff8)
_initterm (Address: 0x2a3dd4000)
_register_onexit_function (Address: 0x2a3dd4008)
abort (Address: 0x2a3dd4010)
exit (Address: 0x2a3dd4018)
signal (Address: 0x2a3dd4020)
strerror (Address: 0x2a3dd4028)
system (Address: 0x2a3dd4030)

api-ms-win-crt-stdio-l1-1-0.dll

__acrt_iob_func (Address: 0x2a3dd4040)
__stdio_common_vfprintf (Address: 0x2a3dd4048)
__stdio_common_vfwprintf (Address: 0x2a3dd4050)
__stdio_common_vsprintf (Address: 0x2a3dd4058)
__stdio_common_vsscanf (Address: 0x2a3dd4060)
__stdio_common_vswprintf (Address: 0x2a3dd4068)
_fileno (Address: 0x2a3dd4070)
_isatty (Address: 0x2a3dd4078)
_pclose (Address: 0x2a3dd4080)
_popen (Address: 0x2a3dd4088)
_read (Address: 0x2a3dd4090)
_setmode (Address: 0x2a3dd4098)
fclose (Address: 0x2a3dd40a0)
fflush (Address: 0x2a3dd40a8)
fgetc (Address: 0x2a3dd40b0)
fgets (Address: 0x2a3dd40b8)
fgetwc (Address: 0x2a3dd40c0)
fopen (Address: 0x2a3dd40c8)
fputc (Address: 0x2a3dd40d0)
fputs (Address: 0x2a3dd40d8)
fputwc (Address: 0x2a3dd40e0)
fread (Address: 0x2a3dd40e8)
fseek (Address: 0x2a3dd40f0)
ftell (Address: 0x2a3dd40f8)
fwrite (Address: 0x2a3dd4100)
getc (Address: 0x2a3dd4108)
putc (Address: 0x2a3dd4110)
putchar (Address: 0x2a3dd4118)
puts (Address: 0x2a3dd4120)
rewind (Address: 0x2a3dd4128)
setvbuf (Address: 0x2a3dd4130)

api-ms-win-crt-string-l1-1-0.dll

_strdup (Address: 0x2a3dd4140)
isalnum (Address: 0x2a3dd4148)
isalpha (Address: 0x2a3dd4150)
isprint (Address: 0x2a3dd4158)
isspace (Address: 0x2a3dd4160)
iswprint (Address: 0x2a3dd4168)
memset (Address: 0x2a3dd4170)
strcmp (Address: 0x2a3dd4178)
strcpy (Address: 0x2a3dd4180)
strcspn (Address: 0x2a3dd4188)
strlen (Address: 0x2a3dd4190)
strncat (Address: 0x2a3dd4198)
strncmp (Address: 0x2a3dd41a0)
strncpy (Address: 0x2a3dd41a8)
strspn (Address: 0x2a3dd41b0)
tolower (Address: 0x2a3dd41b8)
towlower (Address: 0x2a3dd41c0)
wcscat (Address: 0x2a3dd41c8)
wcscmp (Address: 0x2a3dd41d0)
wcscpy (Address: 0x2a3dd41d8)
wcslen (Address: 0x2a3dd41e0)
wcsncat (Address: 0x2a3dd41e8)
wcsncmp (Address: 0x2a3dd41f0)
wcsncpy (Address: 0x2a3dd41f8)

api-ms-win-crt-time-l1-1-0.dll

__daylight (Address: 0x2a3dd4208)
__timezone (Address: 0x2a3dd4210)
__tzname (Address: 0x2a3dd4218)
_localtime64 (Address: 0x2a3dd4220)
_time64 (Address: 0x2a3dd4228)
_tzset (Address: 0x2a3dd4230)
asctime (Address: 0x2a3dd4238)

api-ms-win-crt-utility-l1-1-0.dll

rand_s (Address: 0x2a3dd4248)

archive.dll

archive_entry_free (Address: 0x2a3dd4390)
archive_entry_new (Address: 0x2a3dd4398)
archive_entry_set_mode (Address: 0x2a3dd43a0)
archive_entry_set_pathname (Address: 0x2a3dd43a8)
archive_entry_set_size (Address: 0x2a3dd43b0)
archive_write_data (Address: 0x2a3dd43c0)
archive_write_free (Address: 0x2a3dd43c8)
archive_write_header (Address: 0x2a3dd43b8)
archive_write_new (Address: 0x2a3dd43d0)
archive_write_open_filename (Address: 0x2a3dd43d8)
archive_write_set_format_zip (Address: 0x2a3dd43e0)

GDI32.dll

CreateSolidBrush (Address: 0x2a3dd3ab8)

KERNEL32.dll

__C_specific_handler (Address: 0x2a3dd3e58)
AreFileApisANSI (Address: 0x2a3dd3ac8)
CloseHandle (Address: 0x2a3dd3ad0)
CreateDirectoryA (Address: 0x2a3dd3ad8)
CreateEventA (Address: 0x2a3dd3ae0)
CreateFileA (Address: 0x2a3dd3ae8)
CreateFileMappingA (Address: 0x2a3dd3af0)
CreateFileMappingW (Address: 0x2a3dd3af8)
CreateFileW (Address: 0x2a3dd3b00)
CreateMutexW (Address: 0x2a3dd3b08)
CreateProcessA (Address: 0x2a3dd3b10)
CreateSemaphoreA (Address: 0x2a3dd3b18)
DeleteCriticalSection (Address: 0x2a3dd3b20)
DeleteFileA (Address: 0x2a3dd3b28)
DeleteFileW (Address: 0x2a3dd3b30)
DuplicateHandle (Address: 0x2a3dd3b38)
EnterCriticalSection (Address: 0x2a3dd3b40)
FileTimeToSystemTime (Address: 0x2a3dd3b48)
FlushFileBuffers (Address: 0x2a3dd3b50)
FlushViewOfFile (Address: 0x2a3dd3b58)
FormatMessageA (Address: 0x2a3dd3b60)
FormatMessageW (Address: 0x2a3dd3b68)
FreeLibrary (Address: 0x2a3dd3b70)
GetCommandLineW (Address: 0x2a3dd3b78)
GetConsoleScreenBufferInfo (Address: 0x2a3dd3b80)
GetCurrentProcess (Address: 0x2a3dd3b88)
GetCurrentProcessId (Address: 0x2a3dd3b90)
GetCurrentThread (Address: 0x2a3dd3b98)
GetCurrentThreadId (Address: 0x2a3dd3ba0)
GetDiskFreeSpaceA (Address: 0x2a3dd3ba8)
GetDiskFreeSpaceW (Address: 0x2a3dd3bb0)
GetFileAttributesA (Address: 0x2a3dd3bb8)
GetFileAttributesExA (Address: 0x2a3dd3bc0)
GetFileAttributesExW (Address: 0x2a3dd3bc8)
GetFileAttributesW (Address: 0x2a3dd3bd0)
GetFileSize (Address: 0x2a3dd3bd8)
GetFullPathNameA (Address: 0x2a3dd3be0)
GetFullPathNameW (Address: 0x2a3dd3be8)
GetHandleInformation (Address: 0x2a3dd3bf0)
GetLastError (Address: 0x2a3dd3bf8)
GetModuleFileNameW (Address: 0x2a3dd3c00)
GetModuleHandleA (Address: 0x2a3dd3c08)
GetModuleHandleW (Address: 0x2a3dd3c10)
GetNativeSystemInfo (Address: 0x2a3dd3c18)
GetProcAddress (Address: 0x2a3dd3c20)
GetProcessAffinityMask (Address: 0x2a3dd3c28)
GetProcessHeap (Address: 0x2a3dd3c30)
GetStdHandle (Address: 0x2a3dd3c38)
GetSystemInfo (Address: 0x2a3dd3c40)
GetSystemTime (Address: 0x2a3dd3c48)
GetSystemTimeAsFileTime (Address: 0x2a3dd3c50)
GetTempPathA (Address: 0x2a3dd3c58)
GetTempPathW (Address: 0x2a3dd3c60)
GetThreadContext (Address: 0x2a3dd3c68)
GetThreadPriority (Address: 0x2a3dd3c70)
GetTickCount (Address: 0x2a3dd3c78)
GetVersionExA (Address: 0x2a3dd3c80)
GetVersionExW (Address: 0x2a3dd3c88)
HeapAlloc (Address: 0x2a3dd3c90)
HeapCompact (Address: 0x2a3dd3c98)
HeapCreate (Address: 0x2a3dd3ca0)
HeapDestroy (Address: 0x2a3dd3ca8)
HeapFree (Address: 0x2a3dd3cb0)
HeapReAlloc (Address: 0x2a3dd3cb8)
HeapSize (Address: 0x2a3dd3cc0)
HeapValidate (Address: 0x2a3dd3cc8)
InitializeCriticalSection (Address: 0x2a3dd3cd0)
IsDebuggerPresent (Address: 0x2a3dd3cd8)
LeaveCriticalSection (Address: 0x2a3dd3ce0)
LoadLibraryA (Address: 0x2a3dd3ce8)
LoadLibraryW (Address: 0x2a3dd3cf0)
LocalFree (Address: 0x2a3dd3cf8)
LockFile (Address: 0x2a3dd3d00)
LockFileEx (Address: 0x2a3dd3d08)
MapViewOfFile (Address: 0x2a3dd3d10)
MultiByteToWideChar (Address: 0x2a3dd3d18)
OpenProcess (Address: 0x2a3dd3d20)
OutputDebugStringA (Address: 0x2a3dd3d28)
OutputDebugStringW (Address: 0x2a3dd3d30)
QueryPerformanceCounter (Address: 0x2a3dd3d38)
QueryPerformanceFrequency (Address: 0x2a3dd3d40)
RaiseException (Address: 0x2a3dd3d48)
ReadFile (Address: 0x2a3dd3d50)
ReleaseSemaphore (Address: 0x2a3dd3d58)
ResetEvent (Address: 0x2a3dd3d60)
ResumeThread (Address: 0x2a3dd3d68)
RtlCaptureContext (Address: 0x2a3dd3d70)
RtlLookupFunctionEntry (Address: 0x2a3dd3d78)
RtlUnwindEx (Address: 0x2a3dd3d80)
RtlVirtualUnwind (Address: 0x2a3dd3d88)
SetConsoleTextAttribute (Address: 0x2a3dd3d90)
SetEndOfFile (Address: 0x2a3dd3d98)
SetEvent (Address: 0x2a3dd3da0)
SetFilePointer (Address: 0x2a3dd3da8)
SetLastError (Address: 0x2a3dd3db0)
SetProcessAffinityMask (Address: 0x2a3dd3db8)
SetThreadContext (Address: 0x2a3dd3dc0)
SetThreadPriority (Address: 0x2a3dd3dc8)
Sleep (Address: 0x2a3dd3dd0)
SuspendThread (Address: 0x2a3dd3dd8)
SystemTimeToFileTime (Address: 0x2a3dd3de0)
TlsAlloc (Address: 0x2a3dd3de8)
TlsGetValue (Address: 0x2a3dd3df0)
TlsSetValue (Address: 0x2a3dd3df8)
TryEnterCriticalSection (Address: 0x2a3dd3e00)
UnlockFile (Address: 0x2a3dd3e08)
UnlockFileEx (Address: 0x2a3dd3e10)
UnmapViewOfFile (Address: 0x2a3dd3e18)
VirtualProtect (Address: 0x2a3dd3e20)
VirtualQuery (Address: 0x2a3dd3e28)
WaitForMultipleObjects (Address: 0x2a3dd3e30)
WaitForSingleObject (Address: 0x2a3dd3e38)
WaitForSingleObjectEx (Address: 0x2a3dd3e40)
WideCharToMultiByte (Address: 0x2a3dd3e48)
WriteFile (Address: 0x2a3dd3e50)

ole32.dll

CoCreateGuid (Address: 0x2a3dd4258)
CoCreateInstance (Address: 0x2a3dd4260)
CoTaskMemFree (Address: 0x2a3dd4268)

SHELL32.dll

CommandLineToArgvW (Address: 0x2a3dd4278)
SHBrowseForFolderA (Address: 0x2a3dd4280)
SHCreateDirectoryExA (Address: 0x2a3dd4288)
SHCreateDirectoryExW (Address: 0x2a3dd4290)
SHGetFolderPathA (Address: 0x2a3dd4298)
SHGetPathFromIDListA (Address: 0x2a3dd42a0)

USER32.dll

BeginPaint (Address: 0x2a3dd42b0)
CreateWindowExA (Address: 0x2a3dd42b8)
DefWindowProcA (Address: 0x2a3dd42c0)
DestroyWindow (Address: 0x2a3dd42c8)
DispatchMessageA (Address: 0x2a3dd42d0)
EnableWindow (Address: 0x2a3dd42d8)
EndPaint (Address: 0x2a3dd42e0)
FillRect (Address: 0x2a3dd42e8)
GetDlgItem (Address: 0x2a3dd42f0)
GetMessageA (Address: 0x2a3dd42f8)
GetWindowTextA (Address: 0x2a3dd4300)
GetWindowTextLengthA (Address: 0x2a3dd4308)
GetWindowTextW (Address: 0x2a3dd4310)
IsDialogMessageA (Address: 0x2a3dd4318)
LoadCursorA (Address: 0x2a3dd4320)
MessageBoxA (Address: 0x2a3dd4328)
MessageBoxW (Address: 0x2a3dd4330)
MoveWindow (Address: 0x2a3dd4338)
PostQuitMessage (Address: 0x2a3dd4340)
RegisterClassExA (Address: 0x2a3dd4348)
SendDlgItemMessageA (Address: 0x2a3dd4350)
SendMessageA (Address: 0x2a3dd4358)
SetFocus (Address: 0x2a3dd4360)
SetWindowTextA (Address: 0x2a3dd4368)
SetWindowTextW (Address: 0x2a3dd4370)
ShowWindow (Address: 0x2a3dd4378)
TranslateMessage (Address: 0x2a3dd4380)