ebonhold.dll
Description:
Authors:
Version:
Architecture: 32-bit
Operating System:
SHA256: f8b7666123f1ee0f33c48e0f31fbe296
File Size: 175.2 KB
Uploaded At: June 29, 2026, 3:28 p.m.
Views: 35
Exported Functions
- ebonhold_load (Ordinal: 1, Address: 0x2bb0)
Imported DLLs & Functions
ADVAPI32.dll
- CryptAcquireContextW (Address: 0x1001c010)
- CryptCreateHash (Address: 0x1001c004)
- CryptDestroyHash (Address: 0x1001c014)
- CryptGetHashParam (Address: 0x1001c008)
- CryptHashData (Address: 0x1001c000)
- CryptReleaseContext (Address: 0x1001c00c)
CRYPT32.dll
- CryptBinaryToStringA (Address: 0x1001c01c)
KERNEL32.dll
- AcquireSRWLockExclusive (Address: 0x1001c088)
- CloseHandle (Address: 0x1001c064)
- CreateFileA (Address: 0x1001c04c)
- CreateFileW (Address: 0x1001c038)
- CreateThread (Address: 0x1001c06c)
- DecodePointer (Address: 0x1001c034)
- DeleteCriticalSection (Address: 0x1001c0f0)
- DisableThreadLibraryCalls (Address: 0x1001c078)
- EncodePointer (Address: 0x1001c0e0)
- EnterCriticalSection (Address: 0x1001c0e4)
- ExitProcess (Address: 0x1001c0f4)
- FindClose (Address: 0x1001c130)
- FindFirstFileExW (Address: 0x1001c134)
- FindNextFileW (Address: 0x1001c138)
- FlsAlloc (Address: 0x1001c0d0)
- FlsFree (Address: 0x1001c0dc)
- FlsGetValue (Address: 0x1001c040)
- FlsSetValue (Address: 0x1001c0d8)
- FlushFileBuffers (Address: 0x1001c03c)
- FlushInstructionCache (Address: 0x1001c070)
- FreeEnvironmentStringsW (Address: 0x1001c15c)
- FreeLibrary (Address: 0x1001c0fc)
- GetACP (Address: 0x1001c140)
- GetCommandLineA (Address: 0x1001c14c)
- GetCommandLineW (Address: 0x1001c150)
- GetConsoleMode (Address: 0x1001c02c)
- GetConsoleOutputCP (Address: 0x1001c028)
- GetCPInfo (Address: 0x1001c148)
- GetCurrentProcess (Address: 0x1001c068)
- GetCurrentProcessId (Address: 0x1001c0ac)
- GetCurrentThreadId (Address: 0x1001c090)
- GetEnvironmentStringsW (Address: 0x1001c158)
- GetFileSize (Address: 0x1001c050)
- GetFileType (Address: 0x1001c120)
- GetLastError (Address: 0x1001c0c8)
- GetModuleFileNameA (Address: 0x1001c07c)
- GetModuleFileNameW (Address: 0x1001c108)
- GetModuleHandleExW (Address: 0x1001c100)
- GetModuleHandleW (Address: 0x1001c0a8)
- GetOEMCP (Address: 0x1001c144)
- GetProcAddress (Address: 0x1001c104)
- GetProcessHeap (Address: 0x1001c0b8)
- GetStartupInfoW (Address: 0x1001c0a4)
- GetStdHandle (Address: 0x1001c11c)
- GetStringTypeW (Address: 0x1001c048)
- GetSystemTimeAsFileTime (Address: 0x1001c0b0)
- GetSystemTimePreciseAsFileTime (Address: 0x1001c098)
- HeapAlloc (Address: 0x1001c118)
- HeapFree (Address: 0x1001c114)
- HeapReAlloc (Address: 0x1001c030)
- HeapSize (Address: 0x1001c024)
- InitializeCriticalSectionEx (Address: 0x1001c0ec)
- InitializeSListHead (Address: 0x1001c0b4)
- InterlockedFlushSList (Address: 0x1001c0c4)
- IsDebuggerPresent (Address: 0x1001c10c)
- IsProcessorFeaturePresent (Address: 0x1001c09c)
- IsValidCodePage (Address: 0x1001c13c)
- LCMapStringW (Address: 0x1001c128)
- LeaveCriticalSection (Address: 0x1001c0e8)
- LoadLibraryExW (Address: 0x1001c124)
- MultiByteToWideChar (Address: 0x1001c080)
- OutputDebugStringA (Address: 0x1001c060)
- QueryPerformanceCounter (Address: 0x1001c094)
- RaiseException (Address: 0x1001c0bc)
- ReadFile (Address: 0x1001c054)
- ReleaseSRWLockExclusive (Address: 0x1001c084)
- RtlUnwind (Address: 0x1001c0c0)
- SetFilePointer (Address: 0x1001c058)
- SetFilePointerEx (Address: 0x1001c12c)
- SetLastError (Address: 0x1001c0cc)
- SetStdHandle (Address: 0x1001c044)
- SetUnhandledExceptionFilter (Address: 0x1001c0a0)
- TerminateProcess (Address: 0x1001c0f8)
- TryAcquireSRWLockExclusive (Address: 0x1001c08c)
- UnhandledExceptionFilter (Address: 0x1001c110)
- VirtualProtect (Address: 0x1001c074)
- WideCharToMultiByte (Address: 0x1001c154)
- WriteConsoleW (Address: 0x1001c0d4)
- WriteFile (Address: 0x1001c05c)
SHELL32.dll
- ShellExecuteA (Address: 0x1001c164)
WINHTTP.dll
- WinHttpCloseHandle (Address: 0x1001c188)
- WinHttpConnect (Address: 0x1001c184)
- WinHttpCrackUrl (Address: 0x1001c18c)
- WinHttpOpen (Address: 0x1001c16c)
- WinHttpOpenRequest (Address: 0x1001c178)
- WinHttpQueryDataAvailable (Address: 0x1001c17c)
- WinHttpReadData (Address: 0x1001c180)
- WinHttpReceiveResponse (Address: 0x1001c170)
- WinHttpSendRequest (Address: 0x1001c174)