hook_shield.dll

v2025.630.1806.815 32-bit Windows NT Analyzed
Download
Description
XWA hook shield
Authors
Copyright (C) Jérémy Ansel 2019
File size
62.5 KB
Uploaded
2026-08-28 09:59
Views
16
SHA-256
2bbffaf76ad303eaa960ea0ca5d50fa9

Exported functions 4

GetHookFunction #1 · 0x3b80
GetHookFunctionsCount #2 · 0x3b70
GetHookPatch #3 · 0x3bd0
GetHookPatchesCount #4 · 0x3bc0

Imported DLLs & functions 86

api-ms-win-crt-convert-l1-1-0.dll 1
strtol 0x1000b0e8
api-ms-win-crt-filesystem-l1-1-0.dll 2
_lock_file 0x1000b0f0
_unlock_file 0x1000b0f4
api-ms-win-crt-heap-l1-1-0.dll 3
_callnewh 0x1000b100
free 0x1000b0fc
malloc 0x1000b104
api-ms-win-crt-runtime-l1-1-0.dll 12
_cexit 0x1000b11c
_configure_narrow_argv 0x1000b118
_crt_atexit 0x1000b138
_errno 0x1000b134
_execute_onexit_table 0x1000b110
_initialize_narrow_environment 0x1000b114
_initialize_onexit_table 0x1000b12c
_initterm 0x1000b120
_initterm_e 0x1000b124
_invoke_watson 0x1000b130
_register_onexit_function 0x1000b10c
_seh_filter_dll 0x1000b128
api-ms-win-crt-stdio-l1-1-0.dll 12
_fseeki64 0x1000b16c
_get_stream_buffer_pointers 0x1000b140
fclose 0x1000b164
fflush 0x1000b168
fgetc 0x1000b160
fgetpos 0x1000b148
fputc 0x1000b158
fread 0x1000b150
fsetpos 0x1000b15c
fwrite 0x1000b154
setvbuf 0x1000b144
ungetc 0x1000b14c
api-ms-win-crt-string-l1-1-0.dll 1
_stricmp 0x1000b174
KERNEL32.dll 12
DisableThreadLibraryCalls 0x1000b008
GetCurrentProcess 0x1000b024
GetCurrentProcessId 0x1000b014
GetCurrentThreadId 0x1000b010
GetSystemTimeAsFileTime 0x1000b00c
InitializeSListHead 0x1000b004
IsDebuggerPresent 0x1000b01c
IsProcessorFeaturePresent 0x1000b000
QueryPerformanceCounter 0x1000b018
SetUnhandledExceptionFilter 0x1000b028
TerminateProcess 0x1000b020
UnhandledExceptionFilter 0x1000b02c
MSVCP140.dll 33
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z 0x1000b098
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z 0x1000b04c
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ 0x1000b0ac
?_Id_cnt@id@locale@std@@0HA 0x1000b0a4
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ 0x1000b040
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z 0x1000b088
?_Xbad_alloc@std@@YAXXZ 0x1000b080
?_Xinvalid_argument@std@@YAXPBD@Z 0x1000b0a8
?_Xlength_error@std@@YAXPBD@Z 0x1000b094
?_Xout_of_range@std@@YAXPBD@Z 0x1000b0a0
??0_Lockit@std@@QAE@H@Z 0x1000b0b0
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ 0x1000b054
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z 0x1000b044
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ 0x1000b090
??1_Lockit@std@@QAE@XZ 0x1000b0b4
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ 0x1000b060
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ 0x1000b074
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ 0x1000b064
??Bios_base@std@@QBE_NXZ 0x1000b078
?always_noconv@codecvt_base@std@@QBE_NXZ 0x1000b07c
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ 0x1000b08c
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A 0x1000b09c
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z 0x1000b058
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z 0x1000b05c
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ 0x1000b034
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z 0x1000b084
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ 0x1000b038
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ 0x1000b068
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ 0x1000b03c
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z 0x1000b048
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z 0x1000b050
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z 0x1000b06c
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z 0x1000b070
VCRUNTIME140.dll 10
__CxxFrameHandler3 0x1000b0d4
__std_exception_copy 0x1000b0cc
__std_exception_destroy 0x1000b0d0
__std_terminate 0x1000b0c8
__std_type_info_destroy_list 0x1000b0dc
_CxxThrowException 0x1000b0bc
_except_handler4_common 0x1000b0c4
memcpy 0x1000b0d8
memmove 0x1000b0e0
memset 0x1000b0c0