xweb_elf.dll

v2.2.3.14561 64-bit Windows Analyzed
Description
WeChat
Authors
Copyright (C) 2024 Tencent WeChat Team. All rights reserved.
File size
1.2 MB
Uploaded
2026-09-29 07:17
Views
14
SHA-256
6f666ce109fbc2eb17772079c2e499ac

Exported functions 22

ClearReportsBetween_ExportThunk #1 · 0xa5150
CrashForException_ExportThunk #2 · 0xa50e0
DisableHook #3 · 0xa4d20
DrainLog #4 · 0x1b290
DumpHungProcessWithPtype_ExportThunk #5 · 0xa5160
DumpProcessWithoutCrash #6 · 0xa4cb0
GetApplyHookResult #7 · 0x1ac30
GetBlockedModulesCount #8 · 0xa4df0
GetCrashReports_ExportThunk #9 · 0xa5020
GetCrashpadDatabasePath_ExportThunk #10 · 0xa5140
GetHandleVerifier #11 · 0x39620
GetUniqueBlockedModulesCount #12 · 0xa4e00
InjectDumpForHungInput_ExportThunk #13 · 0xa5110
IsBrowserProcess #14 · 0x19b50
IsExtensionPointDisableSet #15 · 0x19b60
IsThirdPartyInitialized #16 · 0x1bf60
RegisterLogNotification #17 · 0x1b9e0
RequestSingleCrashUpload_ExportThunk #18 · 0xa4fd0
SetMetricsClientId #19 · 0x19b40
SetUploadConsent_ExportThunk #20 · 0xa5100
SignalInitializeCrashReporting #21 · 0x19ac0
SignalXWebElf #22 · 0x19ad0

Imported DLLs & functions 164

KERNEL32.dll 155
AcquireSRWLockExclusive 0x180100e78
CloseHandle 0x180100e80
CompareStringW 0x180100e88
CreateDirectoryW 0x180100e90
CreateEventW 0x180100e98
CreateFileW 0x180100ea0
CreateMutexW 0x180100ea8
CreateRemoteThread 0x180100eb0
CreateThread 0x180100eb8
DeleteCriticalSection 0x180100ec0
DeleteFileW 0x180100ec8
DuplicateHandle 0x180100ed0
EncodePointer 0x180100ed8
EnterCriticalSection 0x180100ee0
EnumSystemLocalesW 0x180100ee8
ExitProcess 0x180100ef0
ExitThread 0x180100ef8
ExpandEnvironmentStringsW 0x180100f00
FileTimeToSystemTime 0x180100f08
FindClose 0x180100f10
FindFirstFileExW 0x180100f18
FindNextFileW 0x180100f20
FlsAlloc 0x180100f28
FlsFree 0x180100f30
FlsGetValue 0x180100f38
FlsSetValue 0x180100f40
FlushFileBuffers 0x180100f48
FormatMessageW 0x180100f50
FreeEnvironmentStringsW 0x180100f58
FreeLibrary 0x180100f60
FreeLibraryAndExitThread 0x180100f68
GetACP 0x180100f70
GetCommandLineA 0x180100f80
GetCommandLineW 0x180100f88
GetConsoleMode 0x180100f90
GetConsoleOutputCP 0x180100f98
GetCPInfo 0x180100f78
GetCurrentDirectoryW 0x180100fa0
GetCurrentProcess 0x180100fa8
GetCurrentProcessId 0x180100fb0
GetCurrentThread 0x180100fb8
GetCurrentThreadId 0x180100fc0
GetDateFormatW 0x180100fc8
GetDriveTypeW 0x180100fd0
GetEnvironmentStringsW 0x180100fd8
GetEnvironmentVariableW 0x180100fe0
GetFileAttributesW 0x180100fe8
GetFileInformationByHandle 0x180100ff0
GetFileSizeEx 0x180100ff8
GetFileTime 0x180101000
GetFileType 0x180101008
GetFullPathNameW 0x180101010
GetLastError 0x180101018
GetLocaleInfoW 0x180101028
GetLocalTime 0x180101020
GetLongPathNameW 0x180101030
GetModuleFileNameW 0x180101038
GetModuleHandleA 0x180101040
GetModuleHandleExW 0x180101048
GetModuleHandleW 0x180101050
GetNativeSystemInfo 0x180101058
GetOEMCP 0x180101060
GetProcAddress 0x180101068
GetProcessHeap 0x180101070
GetProcessId 0x180101078
GetProductInfo 0x180101080
GetStartupInfoW 0x180101088
GetStdHandle 0x180101090
GetStringTypeW 0x180101098
GetSystemDirectoryW 0x1801010a0
GetSystemInfo 0x1801010a8
GetSystemTimeAsFileTime 0x1801010b0
GetTempPathW 0x1801010b8
GetThreadPriority 0x1801010c0
GetTickCount 0x1801010c8
GetTimeFormatW 0x1801010d0
GetTimeZoneInformation 0x1801010d8
GetUserDefaultLCID 0x1801010e0
GetVersionExW 0x1801010e8
GetWindowsDirectoryW 0x1801010f0
InitializeCriticalSectionAndSpinCount 0x180101100
InitializeSListHead 0x180101108
InitOnceExecuteOnce 0x1801010f8
InterlockedFlushSList 0x180101110
IsDebuggerPresent 0x180101118
IsProcessorFeaturePresent 0x180101120
IsValidCodePage 0x180101128
IsValidLocale 0x180101130
IsWow64Process 0x180101138
K32GetMappedFileNameW 0x180101140
LCMapStringW 0x180101148
LeaveCriticalSection 0x180101150
LoadLibraryExA 0x180101158
LoadLibraryExW 0x180101160
LocalFree 0x180101168
LockFileEx 0x180101170
lstrlenA 0x180101348
MultiByteToWideChar 0x180101178
OutputDebugStringA 0x180101180
PeekNamedPipe 0x180101188
QueryPerformanceCounter 0x180101190
QueryPerformanceFrequency 0x180101198
QueryThreadCycleTime 0x1801011a0
RaiseException 0x1801011a8
ReadConsoleW 0x1801011b0
ReadFile 0x1801011b8
ReadProcessMemory 0x1801011c0
ReleaseMutex 0x1801011c8
ReleaseSRWLockExclusive 0x1801011d0
RemoveDirectoryW 0x1801011d8
RemoveVectoredExceptionHandler 0x1801011e0
RtlCaptureContext 0x1801011e8
RtlCaptureStackBackTrace 0x1801011f0
RtlLookupFunctionEntry 0x1801011f8
RtlPcToFileHeader 0x180101200
RtlUnwind 0x180101208
RtlUnwindEx 0x180101210
RtlVirtualUnwind 0x180101218
SetEndOfFile 0x180101220
SetEnvironmentVariableW 0x180101228
SetEvent 0x180101230
SetFilePointerEx 0x180101238
SetLastError 0x180101240
SetStdHandle 0x180101248
SetThreadPriority 0x180101250
SetUnhandledExceptionFilter 0x180101258
Sleep 0x180101260
SleepConditionVariableSRW 0x180101268
SleepEx 0x180101270
SwitchToThread 0x180101278
SystemTimeToTzSpecificLocalTime 0x180101280
TerminateProcess 0x180101288
TlsAlloc 0x180101290
TlsFree 0x180101298
TlsGetValue 0x1801012a0
TlsSetValue 0x1801012a8
TryAcquireSRWLockExclusive 0x1801012b0
UnhandledExceptionFilter 0x1801012b8
UnlockFileEx 0x1801012c0
UnmapViewOfFile 0x1801012c8
UnregisterWaitEx 0x1801012d0
VerifyVersionInfoW 0x1801012e0
VerSetConditionMask 0x1801012d8
VirtualAlloc 0x1801012e8
VirtualFree 0x1801012f0
VirtualProtect 0x1801012f8
VirtualProtectEx 0x180101300
VirtualQuery 0x180101308
WaitForSingleObject 0x180101310
WakeAllConditionVariable 0x180101318
WakeConditionVariable 0x180101320
WideCharToMultiByte 0x180101328
WriteConsoleW 0x180101330
WriteFile 0x180101338
WriteProcessMemory 0x180101340
ntdll.dll 9
NtClose 0x180101358
NtCreateKey 0x180101360
NtDeleteKey 0x180101368
NtOpenKeyEx 0x180101370
NtQueryValueKey 0x180101378
NtSetValueKey 0x180101380
RtlFormatCurrentUserKeyPath 0x180101388
RtlFreeUnicodeString 0x180101390
RtlInitUnicodeString 0x180101398