AutoRecoveryhalf.dll
Description:
Authors:
Version:
Architecture: 64-bit
Operating System:
SHA256: c472feefd643fd53cec06d735a34d663
File Size: 102.0 KB
Uploaded At: June 23, 2026, 4:19 a.m.
Views: 32
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
No exported functions.
Imported DLLs & Functions
api-ms-win-crt-convert-l1-1-0.dll
- strtof (Address: 0x1800133b0)
- strtoll (Address: 0x1800133a8)
- strtoul (Address: 0x1800133a0)
api-ms-win-crt-filesystem-l1-1-0.dll
- _lock_file (Address: 0x1800133c0)
- _stat64i32 (Address: 0x1800133d0)
- _unlock_file (Address: 0x1800133c8)
api-ms-win-crt-heap-l1-1-0.dll
- _callnewh (Address: 0x1800133e0)
- free (Address: 0x1800133f0)
- malloc (Address: 0x1800133e8)
api-ms-win-crt-math-l1-1-0.dll
- ceilf (Address: 0x180013400)
api-ms-win-crt-runtime-l1-1-0.dll
- _cexit (Address: 0x180013420)
- _configure_narrow_argv (Address: 0x180013468)
- _crt_atexit (Address: 0x180013430)
- _errno (Address: 0x180013418)
- _execute_onexit_table (Address: 0x180013440)
- _initialize_narrow_environment (Address: 0x180013460)
- _initialize_onexit_table (Address: 0x180013458)
- _initterm (Address: 0x180013438)
- _initterm_e (Address: 0x180013410)
- _invalid_parameter_noinfo_noreturn (Address: 0x180013428)
- _register_onexit_function (Address: 0x180013450)
- _seh_filter_dll (Address: 0x180013448)
api-ms-win-crt-stdio-l1-1-0.dll
- _fseeki64 (Address: 0x180013488)
- _get_stream_buffer_pointers (Address: 0x180013478)
- fclose (Address: 0x1800134d0)
- fflush (Address: 0x1800134b8)
- fgetc (Address: 0x1800134c8)
- fgetpos (Address: 0x1800134b0)
- fputc (Address: 0x180013480)
- fread (Address: 0x180013490)
- fsetpos (Address: 0x180013498)
- fwrite (Address: 0x1800134c0)
- setvbuf (Address: 0x1800134a8)
- ungetc (Address: 0x1800134a0)
api-ms-win-crt-string-l1-1-0.dll
- tolower (Address: 0x1800134e0)
KERNEL32.dll
- AcquireSRWLockExclusive (Address: 0x180013088)
- CloseHandle (Address: 0x180013048)
- CreateDirectoryA (Address: 0x180013070)
- CreateThread (Address: 0x180013050)
- DisableThreadLibraryCalls (Address: 0x180013040)
- ExitThread (Address: 0x180013018)
- GetCurrentProcess (Address: 0x180013008)
- GetCurrentProcessId (Address: 0x180013060)
- GetCurrentThreadId (Address: 0x1800130f8)
- GetLastError (Address: 0x180013038)
- GetModuleFileNameA (Address: 0x180013000)
- GetModuleHandleExA (Address: 0x180013030)
- GetSystemTimeAsFileTime (Address: 0x180013098)
- InitializeSListHead (Address: 0x180013090)
- IsDebuggerPresent (Address: 0x1800130e8)
- IsProcessorFeaturePresent (Address: 0x1800130e0)
- K32EnumProcessModules (Address: 0x180013068)
- LocalAlloc (Address: 0x180013010)
- LocalFree (Address: 0x180013058)
- OpenProcess (Address: 0x180013020)
- QueryPerformanceCounter (Address: 0x1800130f0)
- ReleaseSRWLockExclusive (Address: 0x180013100)
- RtlCaptureContext (Address: 0x1800130b0)
- RtlLookupFunctionEntry (Address: 0x1800130b8)
- RtlVirtualUnwind (Address: 0x1800130c0)
- SetUnhandledExceptionFilter (Address: 0x1800130d0)
- Sleep (Address: 0x180013028)
- SleepConditionVariableSRW (Address: 0x1800130a8)
- TerminateProcess (Address: 0x1800130d8)
- UnhandledExceptionFilter (Address: 0x1800130c8)
- VirtualQuery (Address: 0x180013078)
- VirtualQueryEx (Address: 0x180013080)
- WakeAllConditionVariable (Address: 0x1800130a0)
MSVCP140.dll
- ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z (Address: 0x1800132b8)
- ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x180013308)
- ?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z (Address: 0x180013288)
- ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ (Address: 0x1800132e8)
- ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ (Address: 0x180013168)
- ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z (Address: 0x180013180)
- ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x1800131d8)
- ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ (Address: 0x180013170)
- ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ (Address: 0x1800131e0)
- ?_Xbad_alloc@std@@YAXXZ (Address: 0x1800132d8)
- ?_Xinvalid_argument@std@@YAXPEBD@Z (Address: 0x1800132d0)
- ?_Xlength_error@std@@YAXPEBD@Z (Address: 0x1800132a0)
- ?_Xout_of_range@std@@YAXPEBD@Z (Address: 0x1800132c8)
- ??0_Lockit@std@@QEAA@H@Z (Address: 0x1800132f8)
- ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x1800131b0)
- ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z (Address: 0x1800131c8)
- ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z (Address: 0x1800131c0)
- ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z (Address: 0x1800131b8)
- ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ (Address: 0x180013160)
- ??1_Lockit@std@@QEAA@XZ (Address: 0x180013300)
- ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x180013220)
- ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x180013260)
- ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x180013240)
- ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x180013228)
- ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ (Address: 0x1800131d0)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z (Address: 0x180013238)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z (Address: 0x180013120)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z (Address: 0x180013118)
- ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z (Address: 0x180013230)
- ??7ios_base@std@@QEBA_NXZ (Address: 0x180013278)
- ??Bid@locale@std@@QEAA_KXZ (Address: 0x180013298)
- ??Bios_base@std@@QEBA_NXZ (Address: 0x180013280)
- ?always_noconv@codecvt_base@std@@QEBA_NXZ (Address: 0x180013290)
- ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z (Address: 0x1800131a0)
- ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A (Address: 0x1800132f0)
- ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ (Address: 0x180013178)
- ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ (Address: 0x180013128)
- ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ (Address: 0x180013268)
- ?good@ios_base@std@@QEBA_NXZ (Address: 0x180013270)
- ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A (Address: 0x1800132c0)
- ?id@?$ctype@D@std@@2V0locale@2@A (Address: 0x1800132a8)
- ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z (Address: 0x180013218)
- ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z (Address: 0x180013188)
- ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z (Address: 0x180013190)
- ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z (Address: 0x180013198)
- ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z (Address: 0x180013248)
- ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ (Address: 0x180013130)
- ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z (Address: 0x180013250)
- ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z (Address: 0x180013208)
- ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z (Address: 0x1800131a8)
- ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z (Address: 0x1800132b0)
- ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ (Address: 0x180013138)
- ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ (Address: 0x1800131e8)
- ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ (Address: 0x180013140)
- ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z (Address: 0x180013148)
- ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z (Address: 0x180013110)
- ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x180013210)
- ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ (Address: 0x180013258)
- ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ (Address: 0x1800131f0)
- ?uncaught_exception@std@@YA_NXZ (Address: 0x1800132e0)
- ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z (Address: 0x180013158)
- ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z (Address: 0x180013150)
- ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z (Address: 0x1800131f8)
- ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z (Address: 0x180013200)
USER32.dll
- MessageBoxA (Address: 0x180013318)
VCRUNTIME140_1.dll
- __CxxFrameHandler4 (Address: 0x180013390)
VCRUNTIME140.dll
- __C_specific_handler (Address: 0x180013340)
- __std_exception_copy (Address: 0x180013370)
- __std_exception_destroy (Address: 0x180013380)
- __std_terminate (Address: 0x180013368)
- __std_type_info_destroy_list (Address: 0x180013358)
- _CxxThrowException (Address: 0x180013338)
- memchr (Address: 0x180013378)
- memcmp (Address: 0x180013330)
- memcpy (Address: 0x180013328)
- memmove (Address: 0x180013348)
- memset (Address: 0x180013360)
- strrchr (Address: 0x180013350)