app_hook.dll
vUnknown
64-bit
Unknown OS
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 34
MH_ApplyQueued
#1 · 0x3740
MH_CreateHook
#2 · 0x32c0
MH_CreateHookApi
#3 · 0x3920
MH_CreateHookApiEx
#4 · 0x38b0
MH_DisableHook
#5 · 0x3710
MH_EnableHook
#6 · 0x3700
MH_Initialize
#7 · 0x3150
MH_QueueDisableHook
#8 · 0x3730
MH_QueueEnableHook
#9 · 0x3720
MH_RemoveHook
#10 · 0x3540
MH_StatusToString
#11 · 0x3980
MH_Uninitialize
#12 · 0x31f0
_Z10FreeBufferPv
#13 · 0x26b0
_Z10InitThreadPv
#14 · 0x1c40
_Z12MyShowWindowP6HWND__i
#15 · 0x1810
_Z13MyEnumWindowsPFiP6HWND__xEx
#16 · 0x1370
_Z13MyFindWindowAPKcS0_
#17 · 0x1860
_Z13MyFindWindowWPKwS0_
#18 · 0x18a0
_Z14AllocateBufferPv
#19 · 0x2440
_Z15MyFindWindowExAP6HWND__S0_PKcS2_
#20 · 0x18e0
_Z15MyFindWindowExWP6HWND__S0_PKwS2_
#21 · 0x1920
_Z16InitializeBufferv
#22 · 0x23e0
_Z16MyGetWindowTextAP6HWND__Pci
#23 · 0x1b40
_Z16MyGetWindowTextWP6HWND__Pwi
#24 · 0x1b90
_Z18UninitializeBufferv
#25 · 0x23f0
_Z19IsExecutableAddressPv
#26 · 0x2730
_Z19MyEnumThreadWindowsmPFiP6HWND__xEx
#27 · 0x13a0
_Z22MyGetWindowTextLengthAP6HWND__
#28 · 0x1be0
_Z22MyGetWindowTextLengthWP6HWND__
#29 · 0x1c10
_Z24CreateTrampolineFunctionP11_TRAMPOLINE
#30 · 0x3a80
_Z26MyGetWindowThreadProcessIdP6HWND__Pm
#31 · 0x1af0
_Z26MyNtQuerySystemInformation25_SYSTEM_INFORMATION_CLASSPvmPm
#32 · 0x19a0
hde64_disasm
#33 · 0x3fa0
hde64_table
#34 · 0x6020
No function matches your filter.
Imported DLLs & functions 70
KERNEL32.dll
44
CloseHandle
0x3773dc2d0
CreateEventW
0x3773dc2d8
CreateThread
0x3773dc2e0
CreateToolhelp32Snapshot
0x3773dc2e8
DeleteCriticalSection
0x3773dc2f0
DisableThreadLibraryCalls
0x3773dc2f8
EnterCriticalSection
0x3773dc300
FlushInstructionCache
0x3773dc308
GetCurrentProcess
0x3773dc310
GetCurrentProcessId
0x3773dc318
GetCurrentThread
0x3773dc320
GetCurrentThreadId
0x3773dc328
GetLastError
0x3773dc330
GetModuleFileNameW
0x3773dc338
GetModuleHandleA
0x3773dc340
GetModuleHandleW
0x3773dc348
GetProcAddress
0x3773dc350
GetSystemInfo
0x3773dc358
GetThreadContext
0x3773dc360
HeapAlloc
0x3773dc368
HeapCreate
0x3773dc370
HeapDestroy
0x3773dc378
HeapFree
0x3773dc380
HeapReAlloc
0x3773dc388
InitializeCriticalSection
0x3773dc390
LeaveCriticalSection
0x3773dc398
LoadLibraryA
0x3773dc3a0
OpenEventW
0x3773dc3a8
OpenProcess
0x3773dc3b0
OpenThread
0x3773dc3b8
ProcessIdToSessionId
0x3773dc3c0
QueryFullProcessImageNameW
0x3773dc3c8
ResumeThread
0x3773dc3d0
SetThreadContext
0x3773dc3d8
Sleep
0x3773dc3e0
SuspendThread
0x3773dc3e8
Thread32First
0x3773dc3f0
Thread32Next
0x3773dc3f8
TlsGetValue
0x3773dc400
VirtualAlloc
0x3773dc408
VirtualFree
0x3773dc410
VirtualProtect
0x3773dc418
VirtualQuery
0x3773dc420
WaitForSingleObject
0x3773dc428
msvcrt.dll
17
__iob_func
0x3773dc438
_amsg_exit
0x3773dc440
_initterm
0x3773dc448
_lock
0x3773dc450
_unlock
0x3773dc458
_wcsicmp
0x3773dc460
abort
0x3773dc468
calloc
0x3773dc470
fprintf
0x3773dc478
free
0x3773dc480
memcpy
0x3773dc488
realloc
0x3773dc490
strcmp
0x3773dc498
strlen
0x3773dc4a0
strncmp
0x3773dc4a8
vfprintf
0x3773dc4b0
wcsrchr
0x3773dc4b8
EnumChildWindows
0x3773dc4c8
EnumWindows
0x3773dc4d0
GetAncestor
0x3773dc4d8
GetClassNameA
0x3773dc4e0
GetGuiResources
0x3773dc4e8
GetWindowThreadProcessId
0x3773dc4f0
wsprintfW
0x3773dc4f8
No function matches your filter.