eve-memory-reader.dll

vUnknown 64-bit Unknown OS Analyzed
Description
—
Authors
Unknown
File size
38.0 KB
Uploaded
2026-04-12 12:36
Views
98
SHA-256
4b2b58096c29b9a125da767554eb0ae8

Exported functions 7

cleanup #1 · 0x52e0
free_string #2 · 0x52d0
free_ui_json #3 · 0x4a90
get_ui_json #4 · 0x4ac0
initialize #5 · 0x50a0
read_ui_trees #6 · 0x4ad0
read_ui_trees_from_address #7 · 0x4d00

Imported DLLs & functions 50

api-ms-win-crt-convert-l1-1-0.dll 1
wcstombs_s 0x1800080e0
api-ms-win-crt-heap-l1-1-0.dll 4
calloc 0x1800080f0
free 0x180008100
malloc 0x1800080f8
realloc 0x180008108
api-ms-win-crt-runtime-l1-1-0.dll 11
_cexit 0x180008130
_configure_narrow_argv 0x180008148
_errno 0x180008168
_execute_onexit_table 0x180008120
_initialize_narrow_environment 0x180008140
_initialize_onexit_table 0x180008138
_initterm 0x180008160
_initterm_e 0x180008158
_invalid_parameter_noinfo 0x180008118
_seh_filter_dll 0x180008150
exit 0x180008128
api-ms-win-crt-stdio-l1-1-0.dll 4
__acrt_iob_func 0x180008180
__stdio_common_vfprintf 0x180008190
__stdio_common_vsprintf 0x180008188
__stdio_common_vsprintf_s 0x180008178
api-ms-win-crt-string-l1-1-0.dll 3
_strdup 0x1800081a0
strcmp 0x1800081b0
strcpy_s 0x1800081a8
api-ms-win-crt-time-l1-1-0.dll 1
_time64 0x1800081c0
KERNEL32.dll 22
CloseHandle 0x180008020
DisableThreadLibraryCalls 0x180008098
GetCurrentProcess 0x180008038
GetCurrentProcessId 0x180008078
GetCurrentThreadId 0x180008080
GetSystemTimeAsFileTime 0x180008088
InitializeSListHead 0x1800080a0
IsDebuggerPresent 0x180008090
IsProcessorFeaturePresent 0x180008068
K32EnumProcesses 0x180008028
K32EnumProcessModules 0x180008030
K32GetModuleBaseNameW 0x180008018
OpenProcess 0x180008000
QueryPerformanceCounter 0x180008070
ReadProcessMemory 0x180008008
RtlCaptureContext 0x180008060
RtlLookupFunctionEntry 0x180008058
RtlVirtualUnwind 0x180008050
SetUnhandledExceptionFilter 0x180008040
TerminateProcess 0x1800080a8
UnhandledExceptionFilter 0x180008048
VirtualQueryEx 0x180008010
VCRUNTIME140.dll 4
__C_specific_handler 0x1800080c8
__std_type_info_destroy_list 0x1800080b8
memcpy 0x1800080d0
memset 0x1800080c0