QQAudioHookService.dll
v1.0.0.85
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 14
GetDataFormat
#1 · 0x1350
GetLevel
#2 · 0x1380
HookProcess
#3 · 0x13e0
HookSystem
#4 · 0x15c0
IsCurrentHookAny
#5 · 0x1730
IsCurrentHookProcess
#6 · 0x1570
IsCurrentHookSystem
#7 · 0x16e0
IsCurrentXpHookSystem
#8 · 0x1780
IsPause
#9 · 0x18e0
Pause
#10 · 0x18b0
SetDebugHookDataPath
#11 · 0x12c0
SetTraeInstance
#12 · 0x11e0
SystemHookabled
#13 · 0x15b0
Unhook
#14 · 0x1830
No function matches your filter.
Imported DLLs & functions 120
AddAccessAllowedAce
0x5f572018
AllocateAndInitializeSid
0x5f572004
FreeSid
0x5f572008
GetLengthSid
0x5f572014
InitializeAcl
0x5f572010
InitializeSecurityDescriptor
0x5f57200c
SetSecurityDescriptorDacl
0x5f572000
_access
0x5f572174
_callnewh
0x5f572188
free
0x5f572184
malloc
0x5f57217c
realloc
0x5f572180
_libm_sse2_log10_precise
0x5f572194
_libm_sse2_pow_precise
0x5f572190
_cexit
0x5f5721b8
_configure_narrow_argv
0x5f5721a0
_crt_atexit
0x5f5721b4
_execute_onexit_table
0x5f5721b0
_initialize_narrow_environment
0x5f5721a4
_initialize_onexit_table
0x5f5721a8
_initterm
0x5f5721bc
_initterm_e
0x5f5721c0
_invalid_parameter_noinfo_noreturn
0x5f5721c4
_register_onexit_function
0x5f5721ac
_seh_filter_dll
0x5f57219c
__stdio_common_vsnwprintf_s
0x5f5721cc
fclose
0x5f5721d0
fopen_s
0x5f5721dc
fseek
0x5f5721d4
fwrite
0x5f5721d8
_stricmp
0x5f5721ec
_strlwr_s
0x5f5721e4
_wcsicmp
0x5f5721f0
strncpy_s
0x5f5721f4
wcscpy_s
0x5f5721e8
wcsncpy_s
0x5f5721f8
KERNEL32.dll
54
CloseHandle
0x5f5720c8
CreateEventW
0x5f5720d0
CreateFileMappingW
0x5f57206c
CreateProcessA
0x5f572048
CreateSemaphoreW
0x5f572068
CreateThread
0x5f5720c4
CreateToolhelp32Snapshot
0x5f572078
DeleteCriticalSection
0x5f5720c0
EnterCriticalSection
0x5f5720ec
FreeLibrary
0x5f572044
GetCurrentProcess
0x5f572094
GetCurrentProcessId
0x5f5720bc
GetCurrentThreadId
0x5f5720a4
GetDiskFreeSpaceExW
0x5f572088
GetFileAttributesA
0x5f572038
GetLastError
0x5f5720b4
GetModuleFileNameA
0x5f572030
GetModuleHandleA
0x5f572034
GetProcAddress
0x5f572040
GetProcessHeap
0x5f572064
GetSystemTimeAsFileTime
0x5f5720a8
GetVersionExW
0x5f572028
HeapAlloc
0x5f572060
HeapFree
0x5f57204c
InitializeCriticalSection
0x5f5720e0
InitializeCriticalSectionAndSpinCount
0x5f5720b8
InitializeSListHead
0x5f5720ac
IsDebuggerPresent
0x5f57209c
IsProcessorFeaturePresent
0x5f572098
LeaveCriticalSection
0x5f5720e4
LoadLibraryA
0x5f57203c
MapViewOfFile
0x5f5720f0
MultiByteToWideChar
0x5f5720cc
OpenProcess
0x5f572024
OutputDebugStringW
0x5f5720f4
Process32First
0x5f572070
Process32FirstW
0x5f572084
Process32Next
0x5f572080
Process32NextW
0x5f57207c
QueryPerformanceCounter
0x5f5720a0
ReleaseSemaphore
0x5f572054
ResumeThread
0x5f5720d4
SetEvent
0x5f57205c
SetLastError
0x5f572050
SetThreadPriority
0x5f5720e8
SetUnhandledExceptionFilter
0x5f572090
Sleep
0x5f5720b0
SuspendThread
0x5f5720d8
TerminateProcess
0x5f572074
TerminateThread
0x5f57202c
UnhandledExceptionFilter
0x5f57208c
UnmapViewOfFile
0x5f572058
WaitForSingleObject
0x5f5720dc
WideCharToMultiByte
0x5f572020
?_Xbad_alloc@std@@YAXXZ
0x5f572104
?_Xlength_error@std@@YAXPBD@Z
0x5f572100
?_Xout_of_range@std@@YAXPBD@Z
0x5f5720fc
CoCreateInstance
0x5f572200
CoInitialize
0x5f572214
CoTaskMemAlloc
0x5f572204
CoTaskMemFree
0x5f57220c
CoUninitialize
0x5f572210
PropVariantClear
0x5f572208
ShellExecuteA
0x5f572118
StrStrIA
0x5f572120
GetTopWindow
0x5f572130
GetWindow
0x5f572134
GetWindowLongW
0x5f57212c
GetWindowThreadProcessId
0x5f572138
SwitchToThisWindow
0x5f572128
__CxxFrameHandler3
0x5f572168
__std_exception_copy
0x5f57216c
__std_exception_destroy
0x5f572144
__std_terminate
0x5f57215c
__std_type_info_destroy_list
0x5f572154
_CxxThrowException
0x5f572148
_except_handler4_common
0x5f572150
_purecall
0x5f572140
memcpy
0x5f572164
memmove
0x5f572160
memset
0x5f57214c
strstr
0x5f572158
No function matches your filter.