ToolsInjectionWindowsHook64.dll

vUnknown 64-bit Unknown OS Analyzed
Description
—
Authors
Unknown
File size
81.5 KB
Uploaded
2025-12-01 14:54
Views
44
SHA-256
bb3f4238b1e46d13adc757a71a4d252d

Exported functions 1

QuadDWindowsHook #1 · 0x3f00

Imported DLLs & functions 112

api-ms-win-crt-convert-l1-1-0.dll 2
_wtoi 0x18000f2d0
strtol 0x18000f2c8
api-ms-win-crt-environment-l1-1-0.dll 1
_wgetenv 0x18000f2e0
api-ms-win-crt-heap-l1-1-0.dll 3
_callnewh 0x18000f2f8
free 0x18000f2f0
malloc 0x18000f300
api-ms-win-crt-runtime-l1-1-0.dll 12
_beginthreadex 0x18000f358
_cexit 0x18000f340
_configure_narrow_argv 0x18000f328
_crt_atexit 0x18000f318
_execute_onexit_table 0x18000f360
_initialize_narrow_environment 0x18000f320
_initialize_onexit_table 0x18000f368
_initterm 0x18000f348
_initterm_e 0x18000f350
_invalid_parameter_noinfo_noreturn 0x18000f338
_register_onexit_function 0x18000f310
_seh_filter_dll 0x18000f330
api-ms-win-crt-stdio-l1-1-0.dll 8
__acrt_iob_func 0x18000f380
__stdio_common_vfprintf 0x18000f390
__stdio_common_vsprintf 0x18000f3a8
_wfopen 0x18000f3b0
fclose 0x18000f378
feof 0x18000f398
fflush 0x18000f388
fgetc 0x18000f3a0
api-ms-win-crt-string-l1-1-0.dll 2
isspace 0x18000f3c0
strncmp 0x18000f3c8
KERNEL32.dll 52
CloseHandle 0x18000f000
CreateEventA 0x18000f168
CreateEventW 0x18000f0f0
CreateFileA 0x18000f0b8
DeleteCriticalSection 0x18000f0a0
DisableThreadLibraryCalls 0x18000f150
EnterCriticalSection 0x18000f090
FileTimeToSystemTime 0x18000f080
FormatMessageA 0x18000f0d0
GetCurrentProcess 0x18000f130
GetCurrentProcessId 0x18000f018
GetCurrentThreadId 0x18000f048
GetExitCodeProcess 0x18000f020
GetLastError 0x18000f008
GetModuleFileNameA 0x18000f068
GetModuleFileNameW 0x18000f0b0
GetModuleHandleExA 0x18000f070
GetModuleHandleW 0x18000f0f8
GetProcAddress 0x18000f030
GetProcessHeap 0x18000f160
GetSystemTimeAsFileTime 0x18000f060
HeapFree 0x18000f158
InitializeCriticalSection 0x18000f088
InitializeCriticalSectionAndSpinCount 0x18000f198
InitializeSListHead 0x18000f100
IsDebuggerPresent 0x18000f040
IsProcessorFeaturePresent 0x18000f140
LeaveCriticalSection 0x18000f098
LoadLibraryW 0x18000f038
LocalFree 0x18000f0c8
OpenEventA 0x18000f170
OpenProcess 0x18000f028
OutputDebugStringA 0x18000f0a8
QueryPerformanceCounter 0x18000f148
ResetEvent 0x18000f0e0
RtlCaptureContext 0x18000f108
RtlLookupFunctionEntry 0x18000f110
RtlVirtualUnwind 0x18000f118
SetEvent 0x18000f0d8
SetLastError 0x18000f010
SetUnhandledExceptionFilter 0x18000f128
Sleep 0x18000f050
SystemTimeToTzSpecificLocalTime 0x18000f078
TerminateProcess 0x18000f138
TlsAlloc 0x18000f178
TlsFree 0x18000f190
TlsGetValue 0x18000f180
TlsSetValue 0x18000f188
UnhandledExceptionFilter 0x18000f120
WaitForSingleObject 0x18000f058
WaitForSingleObjectEx 0x18000f0e8
WriteFile 0x18000f0c0
MSVCP140.dll 17
_Mtx_destroy_in_situ 0x18000f1d0
_Mtx_init_in_situ 0x18000f1c8
_Mtx_lock 0x18000f1d8
_Mtx_unlock 0x18000f1e0
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ 0x18000f1a8
?_Incref@facet@locale@std@@UEAAXXZ 0x18000f1b0
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z 0x18000f220
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z 0x18000f228
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z 0x18000f200
?_Throw_C_error@std@@YAXH@Z 0x18000f1e8
?_Xlength_error@std@@YAXPEBD@Z 0x18000f1c0
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z 0x18000f210
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ 0x18000f208
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z 0x18000f1f0
??Bid@locale@std@@QEAA_KXZ 0x18000f1f8
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A 0x18000f1b8
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z 0x18000f218
USER32.dll 2
CallNextHookEx 0x18000f238
MessageBoxA 0x18000f240
VCRUNTIME140_1.dll 1
__CxxFrameHandler4 0x18000f2b8
VCRUNTIME140.dll 12
__C_specific_handler 0x18000f268
__std_exception_copy 0x18000f280
__std_exception_destroy 0x18000f278
__std_terminate 0x18000f288
__std_type_info_compare 0x18000f270
__std_type_info_destroy_list 0x18000f2a0
_CxxThrowException 0x18000f2a8
_purecall 0x18000f290
memcmp 0x18000f260
memcpy 0x18000f258
memmove 0x18000f250
memset 0x18000f298