MCPcopy Create free account

hub / github.com/0xJs/RedTeaming_CheatSheet / functions

Functions1,919 in github.com/0xJs/RedTeaming_CheatSheet

⨍ Functions 1,919◇ Types & classes 204
MethodGetCurrentThread
()
coding/projects/ReflectiveCode/Shellcode_ReflectiveDLL_Loader/sRDI/DotNet/Program.cs:73
MethodGetExitCodeThread
(IntPtr hThread, Int32 exitCode)
coding/projects/VeraCryptPasswordStealer/sRDI/DotNet/Program.cs:67
MethodGetExitCodeThread
(IntPtr hThread, Int32 exitCode)
coding/projects/Dropper_AES_Reflected_DLL_MapView_Explorer/sRDI/DotNet/Program.cs:67
MethodGetExitCodeThread
(IntPtr hThread, Int32 exitCode)
coding/projects/ReflectiveCode/Shellcode_ReflectiveDLL_Loader/sRDI/DotNet/Program.cs:67
MethodGetListHead
coding/projects/Hooking/Detours/detours/samples/disas/disas.cpp:165
MethodGetListHead
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/disas/disas.cpp:165
MethodGetProcAddress
(IntPtr hModule, String procName)
coding/projects/VeraCryptPasswordStealer/sRDI/DotNet/Program.cs:40
MethodGetProcAddress
(IntPtr hModule, String procName)
coding/projects/Dropper_AES_Reflected_DLL_MapView_Explorer/sRDI/DotNet/Program.cs:40
MethodGetProcAddress
(IntPtr hModule, String procName)
coding/projects/ReflectiveCode/Shellcode_ReflectiveDLL_Loader/sRDI/DotNet/Program.cs:40
FunctionGetProcAddressR
coding/projects/VeraCryptPasswordStealer/sRDI/FunctionTest/FunctionTest.cpp:19
FunctionGetProcAddressR
coding/projects/Dropper_AES_Reflected_DLL_MapView_Explorer/sRDI/FunctionTest/FunctionTest.cpp:19
FunctionGetProcAddressR
coding/projects/ReflectiveCode/Shellcode_ReflectiveDLL_Loader/sRDI/FunctionTest/FunctionTest.cpp:19
FunctionGetSleptTicks
coding/projects/Hooking/Detours/detours/samples/slept/dslept.cpp:42
FunctionGetSleptTicks
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/slept/dslept.cpp:42
MethodGetToClient
coding/projects/Hooking/Detours/detours/samples/cping/cping.cpp:1362
MethodGetToClient
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/cping/cping.cpp:1362
MethodGetToServer
coding/projects/Hooking/Detours/detours/samples/cping/cping.cpp:1363
MethodGetToServer
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/cping/cping.cpp:1363
MethodGetWhen
coding/projects/Hooking/Detours/detours/samples/cping/cping.cpp:1361
MethodGetWhen
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/cping/cping.cpp:1361
FunctionGo
coding/projects/VeraCryptPasswordStealer/VCmigrate/vcmigrate.cpp:259
FunctionGo
coding/projects/Dropper_AES_Reflected_DLL_MapView_Explorer/DLL/implantDLL.cpp:46
FunctionGo
coding/projects/ReflectiveCode/Shellcode_ReflectiveDLL_Loader/implantDLL.cpp:46
FunctionGo
coding/projects/ReflectiveCode/ReflectiveDLL_Loader/implantDLL.cpp:41
FunctionHANDLE ( WINAPI * Real_CreateFileW)(LPCWSTR a0, DWORD a1, DWORD a2, LPSECURITY_ATTRIBUTES a3, DWORD a4, DWORD a5, HANDLE a6) = CreateFileW; BOOL ( WINAPI * Real_WriteFile)(HANDLE hFile, LPCVOID lpBuffer, DWORD nNumberOfBytesToWrite, LPDWORD lpNumberOfBytesWritten, LPOVERLAPPED lpOverlapped) = WriteFile; BOOL ( WINAPI * Real_FlushFileBuffers)(HANDLE hFile) = FlushFileBuffers; BOOL ( WINAPI * Real_CloseHandle)(HANDLE hObject) = CloseHandle; BOOL ( WINAPI * Real_WaitNamedPipeW)(LPCWSTR lpNamedPipeName, DWORD nTimeOut) = WaitNamedPipeW; BOOL ( WINAPI * Real_SetNamedPipeHandleState)(HANDLE hNamedPipe, LPDWORD lpMode, LPDWORD lpMaxCollectionCount, LPDWORD lpCollectDataTimeout) = SetNamedPipeHandleState; DWORD ( WINAPI * Real_GetCurrentProcessId)(VOID) = GetCurrentProcessId; VOID ( WINAPI * Real_GetSystemTimeAsFileTime)(LPFILETIME lpSystemTimeAsFileTime) = GetSystemTimeAsFileTime; VOID ( WINAPI * Real_InitializeCriticalSection)(LPCRITICAL_SECTION lpSection) = InitializeCriticalSection; VOID ( WINAPI * Real_EnterCriticalSection)(LPCRITICAL_SECTION lpSection) = EnterCriticalSection; VOID ( WINAPI * Real_LeaveCriticalSection)
coding/projects/Hooking/Detours/detours/samples/syelog/sltest.cpp:27
FunctionHANDLE ( WINAPI * Real_CreateFileW)(LPCWSTR a0, DWORD a1, DWORD a2, LPSECURITY_ATTRIBUTES a3, DWORD a4, DWORD a5, HANDLE a6) = CreateFileW; BOOL ( WINAPI * Real_WriteFile)(HANDLE hFile, LPCVOID lpBuffer, DWORD nNumberOfBytesToWrite, LPDWORD lpNumberOfBytesWritten, LPOVERLAPPED lpOverlapped) = WriteFile; BOOL ( WINAPI * Real_FlushFileBuffers)(HANDLE hFile) = FlushFileBuffers; BOOL ( WINAPI * Real_CloseHandle)(HANDLE hObject) = CloseHandle; BOOL ( WINAPI * Real_WaitNamedPipeW)(LPCWSTR lpNamedPipeName, DWORD nTimeOut) = WaitNamedPipeW; BOOL ( WINAPI * Real_SetNamedPipeHandleState)(HANDLE hNamedPipe, LPDWORD lpMode, LPDWORD lpMaxCollectionCount, LPDWORD lpCollectDataTimeout) = SetNamedPipeHandleState; DWORD ( WINAPI * Real_GetCurrentProcessId)(VOID) = GetCurrentProcessId; VOID ( WINAPI * Real_GetSystemTimeAsFileTime)(LPFILETIME lpSystemTimeAsFileTime) = GetSystemTimeAsFileTime; VOID ( WINAPI * Real_InitializeCriticalSection)(LPCRITICAL_SECTION lpSection) = InitializeCriticalSection; VOID ( WINAPI * Real_EnterCriticalSection)(LPCRITICAL_SECTION lpSection) = EnterCriticalSection; VOID ( WINAPI * Real_LeaveCriticalSection)
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/syelog/sltest.cpp:27
FunctionHANDLE (WINAPI * Real_CreateFileW)(LPCWSTR a0, DWORD a1, DWORD a2, LPSECURITY_ATTRIBUTES a3, DWORD a4, DWORD a5, HANDLE a6) = CreateFileW; BOOL (WINAPI * Real_WriteFile)(HANDLE hFile, LPCVOID lpBuffer, DWORD nNumberOfBytesToWrite, LPDWORD lpNumberOfBytesWritten, LPOVERLAPPED lpOverlapped) = WriteFile; BOOL (WINAPI * Real_FlushFileBuffers)(HANDLE hFile) = FlushFileBuffers; BOOL (WINAPI * Real_CloseHandle)(HANDLE hObject) = CloseHandle; BOOL (WINAPI * Real_WaitNamedPipeW)(LPCWSTR lpNamedPipeName, DWORD nTimeOut) = WaitNamedPipeW; BOOL (WINAPI * Real_SetNamedPipeHandleState)(HANDLE hNamedPipe, LPDWORD lpMode, LPDWORD lpMaxCollectionCount, LPDWORD lpCollectDataTimeout) = SetNamedPipeHandleState; DWORD (WINAPI * Real_GetCurrentProcessId)(VOID) = GetCurrentProcessId; VOID (WINAPI * Real_GetSystemTimeAsFileTime)(LPFILETIME lpSystemTimeAsFileTime) = GetSystemTimeAsFileTime; VOID (WINAPI * Real_InitializeCriticalSection)(LPCRITICAL_SECTION lpSection) = InitializeCriticalSection; VOID (WINAPI * Real_EnterCriticalSection)(LPCRITICAL_SECTION lpSection) = EnterCriticalSection; VOID (WINAPI * Real_LeaveCriticalSection)(LPCRITICAL_SECTION lpSection) = LeaveCriticalSection; } #if _MSC_VER < 1300 LPVOID (WINAPI * Real_HeapAlloc)(HANDLE hHeap, DWORD dwFlags, DWORD dwBytes) = HeapAlloc; #else LPVOID (WINAPI * Real_HeapAlloc)(HANDLE hHeap, DWORD dwFlags, DWORD_PTR dwBytes) = HeapAlloc; #endif DWORD (WINAPI * Real_GetModuleFileNameW)(HMODULE a0, LPWSTR a1, DWORD a2) = GetModuleFileNameW; DWORD (WINAPI * Real_GetModuleFileNameA)(HMODULE a0, LPSTR a1, DWORD a2) = GetModuleFileNameA; BOOL (WINAPI * Real_CreateProcessW)
coding/projects/Hooking/Detours/detours/samples/tracemem/trcmem.cpp:67
FunctionHANDLE (WINAPI * Real_CreateFileW)(LPCWSTR a0, DWORD a1, DWORD a2, LPSECURITY_ATTRIBUTES a3, DWORD a4, DWORD a5, HANDLE a6) = CreateFileW; BOOL (WINAPI * Real_WriteFile)(HANDLE hFile, LPCVOID lpBuffer, DWORD nNumberOfBytesToWrite, LPDWORD lpNumberOfBytesWritten, LPOVERLAPPED lpOverlapped) = WriteFile; BOOL (WINAPI * Real_FlushFileBuffers)(HANDLE hFile) = FlushFileBuffers; BOOL (WINAPI * Real_CloseHandle)(HANDLE hObject) = CloseHandle; BOOL (WINAPI * Real_WaitNamedPipeW)(LPCWSTR lpNamedPipeName, DWORD nTimeOut) = WaitNamedPipeW; BOOL (WINAPI * Real_SetNamedPipeHandleState)(HANDLE hNamedPipe, LPDWORD lpMode, LPDWORD lpMaxCollectionCount, LPDWORD lpCollectDataTimeout) = SetNamedPipeHandleState; DWORD (WINAPI * Real_GetCurrentProcessId)(VOID) = GetCurrentProcessId; VOID (WINAPI * Real_GetSystemTimeAsFileTime)(LPFILETIME lpSystemTimeAsFileTime) = GetSystemTimeAsFileTime; VOID (WINAPI * Real_InitializeCriticalSection)(LPCRITICAL_SECTION lpSection) = InitializeCriticalSection; VOID (WINAPI * Real_EnterCriticalSection)(LPCRITICAL_SECTION lpSection) = EnterCriticalSection; VOID (WINAPI * Real_LeaveCriticalSection)(LPCRITICAL_SECTION lpSection) = LeaveCriticalSection; } #if _MSC_VER < 1300 LPVOID (WINAPI * Real_HeapAlloc)(HANDLE hHeap, DWORD dwFlags, DWORD dwBytes) = HeapAlloc; #else LPVOID (WINAPI * Real_HeapAlloc)(HANDLE hHeap, DWORD dwFlags, DWORD_PTR dwBytes) = HeapAlloc; #endif DWORD (WINAPI * Real_GetModuleFileNameW)(HMODULE a0, LPWSTR a1, DWORD a2) = GetModuleFileNameW; DWORD (WINAPI * Real_GetModuleFileNameA)(HMODULE a0, LPSTR a1, DWORD a2) = GetModuleFileNameA; BOOL (WINAPI * Real_CreateProcessW)
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/tracemem/trcmem.cpp:67
FunctionHANDLE (WINAPI * Real_CreateFileW)(LPCWSTR a0, DWORD a1, DWORD a2, LPSECURITY_ATTRIBUTES a3, DWORD a4, DWORD a5, HANDLE a6) = CreateFileW; BOOL (WINAPI * Real_WriteFile)(HANDLE hFile, LPCVOID lpBuffer, DWORD nNumberOfBytesToWrite, LPDWORD lpNumberOfBytesWritten, LPOVERLAPPED lpOverlapped) = WriteFile; BOOL (WINAPI * Real_FlushFileBuffers)(HANDLE hFile) = FlushFileBuffers; BOOL (WINAPI * Real_CloseHandle)(HANDLE hObject) = CloseHandle; BOOL (WINAPI * Real_WaitNamedPipeW)(LPCWSTR lpNamedPipeName, DWORD nTimeOut) = WaitNamedPipeW; BOOL (WINAPI * Real_SetNamedPipeHandleState)(HANDLE hNamedPipe, LPDWORD lpMode, LPDWORD lpMaxCollectionCount, LPDWORD lpCollectDataTimeout) = SetNamedPipeHandleState; DWORD (WINAPI * Real_GetCurrentProcessId)(VOID) = GetCurrentProcessId; VOID (WINAPI * Real_GetSystemTimeAsFileTime)(LPFILETIME lpSystemTimeAsFileTime) = GetSystemTimeAsFileTime; VOID (WINAPI * Real_InitializeCriticalSection)(LPCRITICAL_SECTION lpSection) = InitializeCriticalSection; VOID (WINAPI * Real_EnterCriticalSection)(LPCRITICAL_SECTION lpSection) = EnterCriticalSection; VOID (WINAPI * Real_LeaveCriticalSection)(LPCRITICAL_SECTION lpSection) = LeaveCriticalSection; } ////////////////////////////////////////////////////////////////////////////// // BOOL (WINAPI * Real_CopyFileExA)(LPCSTR a0, LPCSTR a1, LPPROGRESS_ROUTINE a2, LPVOID a3, LPBOOL a4, DWORD a5) = CopyFileExA; BOOL (WINAPI * Real_CopyFileExW)(LPCWSTR a0, LPCWSTR a1, LPPROGRESS_ROUTINE a2, LPVOID a3, LPBOOL a4, DWORD a5) = CopyFileExW; BOOL (WINAPI * Real_CreateDirectoryExW)(LPCWSTR a0, LPCWSTR a1, LPSECURITY_ATTRIBUTES a2) = CreateDirectoryExW; BOOL (WINAPI * Real_CreateDirectoryW)(LPCWSTR a0, LPSECURITY_ATTRIBUTES a1) = CreateDirectoryW; BOOL (WINAPI * Real_CreateProcessW)(LPCWSTR lpApplicationName, LPWSTR lpCommandLine, LPSECURITY_ATTRIBUTES lpProcessAttributes, LPSECURITY_ATTRIBUTES lpThreadAttributes, BOOL bInheritHandles, DWORD dwCreationFlags, LPVOID lpEnvironment, LPCWSTR lpCurrentDirectory, LPSTARTUPINFOW lpStartupInfo, LPPROCESS_INFORMATION lpProcessInformation) = CreateProcessW; BOOL (WINAPI * Real_DeleteFileA)(LPCSTR a0) = DeleteFileA; BOOL (WINAPI * Real_DeleteFileW)(LPCWSTR a0) = DeleteFileW; HANDLE (WINAPI * Real_FindFirstFileExA)(LPCSTR a0, FINDEX_INFO_LEVELS a1, LPVOID a2, FINDEX_SEARCH_OPS a3, LPVOID a4, DWORD a5) = FindFirstFileExA; HANDLE (WINAPI * Real_FindFirstFileExW)(LPCWSTR a0, FINDEX_INFO_LEVELS a1, LPVOID a2, FINDEX_SEARCH_OPS a3, LPVOID a4, DWORD a5) = FindFirstFileExW; DWORD (WINAPI * Real_GetFileAttributesW)(LPCWSTR a0) = GetFileAttributesW; DWORD (WINAPI * Real_GetModuleFileNameW)(HMODULE a0, LPWSTR a1, DWORD a2) = GetModuleFileNameW; DWORD (WINAPI * Real_GetModuleFileNameA)(HMODULE a0, LPSTR a1, DWORD a2) = GetModuleFileNameA; FARPROC (WINAPI * Real_GetProcAddress)(struct HINSTANCE__* a0, LPCSTR a1) = GetProcAddress; HMODULE (WINAPI * Real_LoadLibraryExW)(LPCWSTR a0, HANDLE a1, DWORD a2) = LoadLibraryExW; BOOL (WINAPI * Real_MoveFileA)(LPCSTR a0, LPCSTR a1) = MoveFileA; BOOL (WINAPI * Real_MoveFileExA)(LPCSTR a0, LPCSTR a1, DWORD a2) = MoveFileExA; BOOL (WINAPI * Real_MoveFileExW)(LPCWSTR a0, LPCWSTR a1, DWORD a2) = MoveFileExW; BOOL (WINAPI * Real_MoveFileW)(LPCWSTR a0, LPCWSTR a1) = MoveFileW; HFILE (WINAPI * Real_OpenFile)(LPCSTR a0, struct _OFSTRUCT* a1, UINT a2) = OpenFile; LONG (WINAPI * Real_RegCreateKeyExA)(HKEY a0, LPCSTR a1, DWORD a2, LPSTR a3, DWORD a4, REGSAM a5, LPSECURITY_ATTRIBUTES a6, PHKEY a7, LPDWORD a8) = RegCreateKeyExA; LONG (WINAPI * Real_RegCreateKeyExW)(HKEY a0, LPCWSTR a1, DWORD a2, LPWSTR a3, DWORD a4, REGSAM a5, LPSECURITY_ATTRIBUTES a6, PHKEY a7, LPDWORD a8) = RegCreateKeyExW; LONG (WINAPI * Real_RegDeleteKeyA)(HKEY a0, LPCSTR a1) = RegDeleteKeyA; LONG (WINAPI * Real_RegDeleteKeyW)(HKEY a0, LPCWSTR a1) = RegDeleteKeyW; LONG (WINAPI * Real_RegDeleteValueA)(HKEY a0, LPCSTR a1) = RegDeleteValueA; LONG (WINAPI * Real_RegDeleteValueW)(HKEY a0, LPCWSTR a1) = RegDeleteValueW; LONG (WINAPI * Real_RegEnumKeyExA)(HKEY a0, DWORD a1, LPSTR a2, LPDWORD a3, LPDWORD a4, LPSTR a5, LPDWORD a6, struct _FILETIME* a7) = RegEnumKeyExA; LONG (WINAPI * Real_RegEnumKeyExW)(HKEY a0, DWORD a1, LPWSTR a2, LPDWORD a3, LPDWORD a4, LPWSTR a5, LPDWORD a6, struct _FILETIME* a7) = RegEnumKeyExW; LONG (WINAPI * Real_RegEnumValueA)(HKEY a0, DWORD a1, LPSTR a2, LPDWORD a3, LPDWORD a4, LPDWORD a5, LPBYTE a6, LPDWORD a7) = RegEnumValueA; LONG (WINAPI * Real_RegEnumValueW)(HKEY a0, DWORD a1, LPWSTR a2, LPDWORD a3, LPDWORD a4, LPDWORD a5, LPBYTE a6, LPDWORD a7) = RegEnumValueW; LONG (WINAPI * Real_RegOpenKeyExA)(HKEY a0, LPCSTR a1, DWORD a2, REGSAM a3, PHKEY a4) = RegOpenKeyExA; LONG (WINAPI * Real_RegOpenKeyExW)(HKEY a0, LPCWSTR a1, DWORD a2, REGSAM a3, PHKEY a4) = RegOpenKeyExW; LONG (WINAPI * Real_RegQueryInfoKeyA)(HKEY a0, LPSTR a1, LPDWORD a2, LPDWORD a3, LPDWORD a4, LPDWORD a5, LPDWORD a6, LPDWORD a7, LPDWORD a8, LPDWORD a9, LPDWORD a10, struct _FILETIME* a11) = RegQueryInfoKeyA; LONG (WINAPI * Real_RegQueryInfoKeyW)(HKEY a0, LPWSTR a1, LPDWORD a2, LPDWORD a3, LPDWORD a4, LPDWORD a5, LPDWORD a6, LPDWORD a7, LPDWORD a8, LPDWORD a9, LPDWORD a10, struct _FILETIME* a11) = RegQueryInfoKeyW; LONG (WINAPI * Real_RegQueryValueExA)(HKEY a0, LPCSTR a1, LPDWORD a2, LPDWORD a3, LPBYTE a4, LPDWORD a5) = RegQueryValueExA; LONG (WINAPI * Real_RegQueryValueExW)(HKEY a0, LPCWSTR a1, LPDWORD a2, LPDWORD a3, LPBYTE a4, LPDWORD a5) = RegQueryValueExW; LONG (WINAPI * Real_RegSetValueExA)(HKEY a0, LPCSTR a1, DWORD a2, DWORD a3, const BYTE* a4, DWORD a5) = RegSetValueExA; LONG (WINAPI * Real_RegSetValueExW)(HKEY a0, LPCWSTR a1, DWORD a2, DWORD a3, const BYTE* a4, DWORD a5) = RegSetValueExW; HFILE (WINAPI * Real__lcreat)(LPCSTR a0, int a1) = _lcreat; HFILE (WINAPI * Real__lopen)
coding/projects/Hooking/Detours/detours/samples/tracereg/trcreg.cpp:66
FunctionHANDLE (WINAPI * Real_CreateFileW)(LPCWSTR a0, DWORD a1, DWORD a2, LPSECURITY_ATTRIBUTES a3, DWORD a4, DWORD a5, HANDLE a6) = CreateFileW; BOOL (WINAPI * Real_WriteFile)(HANDLE hFile, LPCVOID lpBuffer, DWORD nNumberOfBytesToWrite, LPDWORD lpNumberOfBytesWritten, LPOVERLAPPED lpOverlapped) = WriteFile; BOOL (WINAPI * Real_FlushFileBuffers)(HANDLE hFile) = FlushFileBuffers; BOOL (WINAPI * Real_CloseHandle)(HANDLE hObject) = CloseHandle; BOOL (WINAPI * Real_WaitNamedPipeW)(LPCWSTR lpNamedPipeName, DWORD nTimeOut) = WaitNamedPipeW; BOOL (WINAPI * Real_SetNamedPipeHandleState)(HANDLE hNamedPipe, LPDWORD lpMode, LPDWORD lpMaxCollectionCount, LPDWORD lpCollectDataTimeout) = SetNamedPipeHandleState; DWORD (WINAPI * Real_GetCurrentProcessId)(VOID) = GetCurrentProcessId; VOID (WINAPI * Real_GetSystemTimeAsFileTime)(LPFILETIME lpSystemTimeAsFileTime) = GetSystemTimeAsFileTime; VOID (WINAPI * Real_InitializeCriticalSection)(LPCRITICAL_SECTION lpSection) = InitializeCriticalSection; VOID (WINAPI * Real_EnterCriticalSection)(LPCRITICAL_SECTION lpSection) = EnterCriticalSection; VOID (WINAPI * Real_LeaveCriticalSection)(LPCRITICAL_SECTION lpSection) = LeaveCriticalSection; } ////////////////////////////////////////////////////////////////////////////// // BOOL (WINAPI * Real_CopyFileExA)(LPCSTR a0, LPCSTR a1, LPPROGRESS_ROUTINE a2, LPVOID a3, LPBOOL a4, DWORD a5) = CopyFileExA; BOOL (WINAPI * Real_CopyFileExW)(LPCWSTR a0, LPCWSTR a1, LPPROGRESS_ROUTINE a2, LPVOID a3, LPBOOL a4, DWORD a5) = CopyFileExW; BOOL (WINAPI * Real_CreateDirectoryExW)(LPCWSTR a0, LPCWSTR a1, LPSECURITY_ATTRIBUTES a2) = CreateDirectoryExW; BOOL (WINAPI * Real_CreateDirectoryW)(LPCWSTR a0, LPSECURITY_ATTRIBUTES a1) = CreateDirectoryW; BOOL (WINAPI * Real_CreateProcessW)(LPCWSTR lpApplicationName, LPWSTR lpCommandLine, LPSECURITY_ATTRIBUTES lpProcessAttributes, LPSECURITY_ATTRIBUTES lpThreadAttributes, BOOL bInheritHandles, DWORD dwCreationFlags, LPVOID lpEnvironment, LPCWSTR lpCurrentDirectory, LPSTARTUPINFOW lpStartupInfo, LPPROCESS_INFORMATION lpProcessInformation) = CreateProcessW; BOOL (WINAPI * Real_DeleteFileA)(LPCSTR a0) = DeleteFileA; BOOL (WINAPI * Real_DeleteFileW)(LPCWSTR a0) = DeleteFileW; HANDLE (WINAPI * Real_FindFirstFileExA)(LPCSTR a0, FINDEX_INFO_LEVELS a1, LPVOID a2, FINDEX_SEARCH_OPS a3, LPVOID a4, DWORD a5) = FindFirstFileExA; HANDLE (WINAPI * Real_FindFirstFileExW)(LPCWSTR a0, FINDEX_INFO_LEVELS a1, LPVOID a2, FINDEX_SEARCH_OPS a3, LPVOID a4, DWORD a5) = FindFirstFileExW; DWORD (WINAPI * Real_GetFileAttributesW)(LPCWSTR a0) = GetFileAttributesW; DWORD (WINAPI * Real_GetModuleFileNameW)(HMODULE a0, LPWSTR a1, DWORD a2) = GetModuleFileNameW; DWORD (WINAPI * Real_GetModuleFileNameA)(HMODULE a0, LPSTR a1, DWORD a2) = GetModuleFileNameA; FARPROC (WINAPI * Real_GetProcAddress)(struct HINSTANCE__* a0, LPCSTR a1) = GetProcAddress; HMODULE (WINAPI * Real_LoadLibraryExW)(LPCWSTR a0, HANDLE a1, DWORD a2) = LoadLibraryExW; BOOL (WINAPI * Real_MoveFileA)(LPCSTR a0, LPCSTR a1) = MoveFileA; BOOL (WINAPI * Real_MoveFileExA)(LPCSTR a0, LPCSTR a1, DWORD a2) = MoveFileExA; BOOL (WINAPI * Real_MoveFileExW)(LPCWSTR a0, LPCWSTR a1, DWORD a2) = MoveFileExW; BOOL (WINAPI * Real_MoveFileW)(LPCWSTR a0, LPCWSTR a1) = MoveFileW; HFILE (WINAPI * Real_OpenFile)(LPCSTR a0, struct _OFSTRUCT* a1, UINT a2) = OpenFile; LONG (WINAPI * Real_RegCreateKeyExA)(HKEY a0, LPCSTR a1, DWORD a2, LPSTR a3, DWORD a4, REGSAM a5, LPSECURITY_ATTRIBUTES a6, PHKEY a7, LPDWORD a8) = RegCreateKeyExA; LONG (WINAPI * Real_RegCreateKeyExW)(HKEY a0, LPCWSTR a1, DWORD a2, LPWSTR a3, DWORD a4, REGSAM a5, LPSECURITY_ATTRIBUTES a6, PHKEY a7, LPDWORD a8) = RegCreateKeyExW; LONG (WINAPI * Real_RegDeleteKeyA)(HKEY a0, LPCSTR a1) = RegDeleteKeyA; LONG (WINAPI * Real_RegDeleteKeyW)(HKEY a0, LPCWSTR a1) = RegDeleteKeyW; LONG (WINAPI * Real_RegDeleteValueA)(HKEY a0, LPCSTR a1) = RegDeleteValueA; LONG (WINAPI * Real_RegDeleteValueW)(HKEY a0, LPCWSTR a1) = RegDeleteValueW; LONG (WINAPI * Real_RegEnumKeyExA)(HKEY a0, DWORD a1, LPSTR a2, LPDWORD a3, LPDWORD a4, LPSTR a5, LPDWORD a6, struct _FILETIME* a7) = RegEnumKeyExA; LONG (WINAPI * Real_RegEnumKeyExW)(HKEY a0, DWORD a1, LPWSTR a2, LPDWORD a3, LPDWORD a4, LPWSTR a5, LPDWORD a6, struct _FILETIME* a7) = RegEnumKeyExW; LONG (WINAPI * Real_RegEnumValueA)(HKEY a0, DWORD a1, LPSTR a2, LPDWORD a3, LPDWORD a4, LPDWORD a5, LPBYTE a6, LPDWORD a7) = RegEnumValueA; LONG (WINAPI * Real_RegEnumValueW)(HKEY a0, DWORD a1, LPWSTR a2, LPDWORD a3, LPDWORD a4, LPDWORD a5, LPBYTE a6, LPDWORD a7) = RegEnumValueW; LONG (WINAPI * Real_RegOpenKeyExA)(HKEY a0, LPCSTR a1, DWORD a2, REGSAM a3, PHKEY a4) = RegOpenKeyExA; LONG (WINAPI * Real_RegOpenKeyExW)(HKEY a0, LPCWSTR a1, DWORD a2, REGSAM a3, PHKEY a4) = RegOpenKeyExW; LONG (WINAPI * Real_RegQueryInfoKeyA)(HKEY a0, LPSTR a1, LPDWORD a2, LPDWORD a3, LPDWORD a4, LPDWORD a5, LPDWORD a6, LPDWORD a7, LPDWORD a8, LPDWORD a9, LPDWORD a10, struct _FILETIME* a11) = RegQueryInfoKeyA; LONG (WINAPI * Real_RegQueryInfoKeyW)(HKEY a0, LPWSTR a1, LPDWORD a2, LPDWORD a3, LPDWORD a4, LPDWORD a5, LPDWORD a6, LPDWORD a7, LPDWORD a8, LPDWORD a9, LPDWORD a10, struct _FILETIME* a11) = RegQueryInfoKeyW; LONG (WINAPI * Real_RegQueryValueExA)(HKEY a0, LPCSTR a1, LPDWORD a2, LPDWORD a3, LPBYTE a4, LPDWORD a5) = RegQueryValueExA; LONG (WINAPI * Real_RegQueryValueExW)(HKEY a0, LPCWSTR a1, LPDWORD a2, LPDWORD a3, LPBYTE a4, LPDWORD a5) = RegQueryValueExW; LONG (WINAPI * Real_RegSetValueExA)(HKEY a0, LPCSTR a1, DWORD a2, DWORD a3, const BYTE* a4, DWORD a5) = RegSetValueExA; LONG (WINAPI * Real_RegSetValueExW)(HKEY a0, LPCWSTR a1, DWORD a2, DWORD a3, const BYTE* a4, DWORD a5) = RegSetValueExW; HFILE (WINAPI * Real__lcreat)(LPCSTR a0, int a1) = _lcreat; HFILE (WINAPI * Real__lopen)
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/tracereg/trcreg.cpp:66
FunctionHANDLE (WINAPI * Real_CreateFileW)(LPCWSTR a0, DWORD a1, DWORD a2, LPSECURITY_ATTRIBUTES a3, DWORD a4, DWORD a5, HANDLE a6) = CreateFileW; BOOL (WINAPI * Real_WriteFile)(HANDLE hFile, LPCVOID lpBuffer, DWORD nNumberOfBytesToWrite, LPDWORD lpNumberOfBytesWritten, LPOVERLAPPED lpOverlapped) = WriteFile; BOOL (WINAPI * Real_FlushFileBuffers)(HANDLE hFile) = FlushFileBuffers; BOOL (WINAPI * Real_CloseHandle)(HANDLE hObject) = CloseHandle; BOOL (WINAPI * Real_WaitNamedPipeW)(LPCWSTR lpNamedPipeName, DWORD nTimeOut) = WaitNamedPipeW; BOOL (WINAPI * Real_SetNamedPipeHandleState)(HANDLE hNamedPipe, LPDWORD lpMode, LPDWORD lpMaxCollectionCount, LPDWORD lpCollectDataTimeout) = SetNamedPipeHandleState; DWORD (WINAPI * Real_GetCurrentProcessId)(VOID) = GetCurrentProcessId; VOID (WINAPI * Real_GetSystemTimeAsFileTime)(LPFILETIME lpSystemTimeAsFileTime) = GetSystemTimeAsFileTime; VOID (WINAPI * Real_InitializeCriticalSection)(LPCRITICAL_SECTION lpSection) = InitializeCriticalSection; VOID (WINAPI * Real_EnterCriticalSection)(LPCRITICAL_SECTION lpSection) = EnterCriticalSection; VOID (WINAPI * Real_LeaveCriticalSection)(LPCRITICAL_SECTION lpSection) = LeaveCriticalSection; } BOOL (WINAPI * Real_FreeLibrary)(HMODULE a0) = FreeLibrary; DWORD (WINAPI * Real_GetModuleFileNameW)(HMODULE a0, LPWSTR a1, DWORD a2) = GetModuleFileNameW; HMODULE (WINAPI * Real_GetModuleHandleW)(LPCWSTR a0) = GetModuleHandleW; FARPROC (WINAPI * Real_GetProcAddress)(HMODULE a0, LPCSTR a1) = GetProcAddress; HMODULE (WINAPI * Real_LoadLibraryExW)(LPCWSTR a0, HANDLE a1, DWORD a2) = LoadLibraryExW; HMODULE (WINAPI * Real_LoadLibraryW)
Trampolines for SYELOG library.
coding/projects/Hooking/Detours/detours/samples/tracelnk/trclnk.cpp:72
FunctionHANDLE (WINAPI * Real_CreateFileW)(LPCWSTR a0, DWORD a1, DWORD a2, LPSECURITY_ATTRIBUTES a3, DWORD a4, DWORD a5, HANDLE a6) = CreateFileW; BOOL (WINAPI * Real_WriteFile)(HANDLE hFile, LPCVOID lpBuffer, DWORD nNumberOfBytesToWrite, LPDWORD lpNumberOfBytesWritten, LPOVERLAPPED lpOverlapped) = WriteFile; BOOL (WINAPI * Real_FlushFileBuffers)(HANDLE hFile) = FlushFileBuffers; BOOL (WINAPI * Real_CloseHandle)(HANDLE hObject) = CloseHandle; BOOL (WINAPI * Real_WaitNamedPipeW)(LPCWSTR lpNamedPipeName, DWORD nTimeOut) = WaitNamedPipeW; BOOL (WINAPI * Real_SetNamedPipeHandleState)(HANDLE hNamedPipe, LPDWORD lpMode, LPDWORD lpMaxCollectionCount, LPDWORD lpCollectDataTimeout) = SetNamedPipeHandleState; DWORD (WINAPI * Real_GetCurrentProcessId)(VOID) = GetCurrentProcessId; VOID (WINAPI * Real_GetSystemTimeAsFileTime)(LPFILETIME lpSystemTimeAsFileTime) = GetSystemTimeAsFileTime; VOID (WINAPI * Real_InitializeCriticalSection)(LPCRITICAL_SECTION lpSection) = InitializeCriticalSection; VOID (WINAPI * Real_EnterCriticalSection)(LPCRITICAL_SECTION lpSection) = EnterCriticalSection; VOID (WINAPI * Real_LeaveCriticalSection)(LPCRITICAL_SECTION lpSection) = LeaveCriticalSection; } BOOL (WINAPI * Real_FreeLibrary)(HMODULE a0) = FreeLibrary; DWORD (WINAPI * Real_GetModuleFileNameW)(HMODULE a0, LPWSTR a1, DWORD a2) = GetModuleFileNameW; HMODULE (WINAPI * Real_GetModuleHandleW)(LPCWSTR a0) = GetModuleHandleW; FARPROC (WINAPI * Real_GetProcAddress)(HMODULE a0, LPCSTR a1) = GetProcAddress; HMODULE (WINAPI * Real_LoadLibraryExW)(LPCWSTR a0, HANDLE a1, DWORD a2) = LoadLibraryExW; HMODULE (WINAPI * Real_LoadLibraryW)
Trampolines for SYELOG library.
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/tracelnk/trclnk.cpp:72
FunctionHANDLE (WINAPI * Real_CreateFileW)(LPCWSTR a0, DWORD a1, DWORD a2, LPSECURITY_ATTRIBUTES a3, DWORD a4, DWORD a5, HANDLE a6) = CreateFileW; BOOL (WINAPI * Real_WriteFile)(HANDLE hFile, LPCVOID lpBuffer, DWORD nNumberOfBytesToWrite, LPDWORD lpNumberOfBytesWritten, LPOVERLAPPED lpOverlapped) = WriteFile; BOOL (WINAPI * Real_FlushFileBuffers)(HANDLE hFile) = FlushFileBuffers; BOOL (WINAPI * Real_CloseHandle)(HANDLE hObject) = CloseHandle; BOOL (WINAPI * Real_WaitNamedPipeW)(LPCWSTR lpNamedPipeName, DWORD nTimeOut) = WaitNamedPipeW; BOOL (WINAPI * Real_SetNamedPipeHandleState)(HANDLE hNamedPipe, LPDWORD lpMode, LPDWORD lpMaxCollectionCount, LPDWORD lpCollectDataTimeout) = SetNamedPipeHandleState; DWORD (WINAPI * Real_GetCurrentProcessId)(VOID) = GetCurrentProcessId; VOID (WINAPI * Real_GetSystemTimeAsFileTime)(LPFILETIME lpSystemTimeAsFileTime) = GetSystemTimeAsFileTime; VOID (WINAPI * Real_InitializeCriticalSection)(LPCRITICAL_SECTION lpSection) = InitializeCriticalSection; VOID (WINAPI * Real_EnterCriticalSection)(LPCRITICAL_SECTION lpSection) = EnterCriticalSection; VOID (WINAPI * Real_LeaveCriticalSection)(LPCRITICAL_SECTION lpSection) = LeaveCriticalSection; } DWORD (WINAPI * Real_GetModuleFileNameW)(HMODULE a0, LPWSTR a1, DWORD a2) = GetModuleFileNameW; DWORD (WINAPI * Real_GetModuleFileNameA)(HMODULE a0, LPSTR a1, DWORD a2) = GetModuleFileNameA; BOOL (WINAPI * Real_CreateProcessW)(LPCWSTR a0, LPWSTR a1, LPSECURITY_ATTRIBUTES a2, LPSECURITY_ATTRIBUTES a3, BOOL a4, DWORD a5, LPVOID a6, LPCWSTR a7, struct _STARTUPINFOW* a8, LPPROCESS_INFORMATION a9) = CreateProcessW; BOOL (WINAPI * Real_BuildCommDCBA)(LPCSTR a0, struct _DCB* a1) = BuildCommDCBA; BOOL (WINAPI * Real_BuildCommDCBAndTimeoutsA)(LPCSTR a0, struct _DCB* a1, struct _COMMTIMEOUTS* a2) = BuildCommDCBAndTimeoutsA; BOOL (WINAPI * Real_BuildCommDCBAndTimeoutsW)(LPCWSTR a0, struct _DCB* a1, struct _COMMTIMEOUTS* a2) = BuildCommDCBAndTimeoutsW; BOOL (WINAPI * Real_BuildCommDCBW)(LPCWSTR a0, struct _DCB* a1) = BuildCommDCBW; BOOL (WINAPI * Real_ClearCommBreak)(HANDLE a0) = ClearCommBreak; BOOL (WINAPI * Real_ClearCommError)(HANDLE a0, LPDWORD a1, struct _COMSTAT* a2) = ClearCommError; HANDLE (WINAPI * Real_CreateFileA)(LPCSTR a0, DWORD a1, DWORD a2, LPSECURITY_ATTRIBUTES a3, DWORD a4, DWORD a5, HANDLE a6) = CreateFileA; BOOL (WINAPI * Real_EscapeCommFunction)(HANDLE a0, DWORD a1) = EscapeCommFunction; BOOL (WINAPI * Real_GetCommConfig)(HANDLE a0, LPCOMMCONFIG a1, LPDWORD a2) = GetCommConfig; BOOL (WINAPI * Real_GetCommMask)(HANDLE a0, LPDWORD a1) = GetCommMask; BOOL (WINAPI * Real_GetCommModemStatus)(HANDLE a0, LPDWORD a1) = GetCommModemStatus; BOOL (WINAPI * Real_GetCommProperties)(HANDLE a0, LPCOMMPROP a1) = GetCommProperties; BOOL (WINAPI * Real_GetCommState)(HANDLE a0, struct _DCB* a1) = GetCommState; BOOL (WINAPI * Real_GetCommTimeouts)(HANDLE a0, struct _COMMTIMEOUTS* a1) = GetCommTimeouts; DWORD (WINAPI * Real_GetCurrentThreadId)(void) = GetCurrentThreadId; BOOL (WINAPI * Real_GetOverlappedResult)(HANDLE a0, LPOVERLAPPED a1, LPDWORD a2, BOOL a3) = GetOverlappedResult; BOOL (WINAPI * Real_PurgeComm)(HANDLE a0, DWORD a1) = PurgeComm; BOOL (WINAPI * Real_ReadFile)(HANDLE a0, LPVOID a1, DWORD a2, LPDWORD a3, LPOVERLAPPED a4) = ReadFile; BOOL (WINAPI * Real_SetCommBreak)(HANDLE a0) = SetCommBreak; BOOL (WINAPI * Real_SetCommConfig)(HANDLE a0, LPCOMMCONFIG a1, DWORD a2) = SetCommConfig; BOOL (WINAPI * Real_SetCommMask)(HANDLE a0, DWORD a1) = SetCommMask; BOOL (WINAPI * Real_SetCommState)(HANDLE a0, struct _DCB* a1) = SetCommState; BOOL (WINAPI * Real_SetCommTimeouts)(HANDLE a0, struct _COMMTIMEOUTS* a1) = SetCommTimeouts; BOOL (WINAPI * Real_SetupComm)(HANDLE a0, DWORD a1, DWORD a2) = SetupComm; BOOL (WINAPI * Real_TransmitCommChar)(HANDLE a0, char a1) = TransmitCommChar; BOOL (WINAPI * Real_WaitCommEvent)
coding/projects/Hooking/Detours/detours/samples/traceser/trcser.cpp:64
FunctionHANDLE (WINAPI * Real_CreateFileW)(LPCWSTR a0, DWORD a1, DWORD a2, LPSECURITY_ATTRIBUTES a3, DWORD a4, DWORD a5, HANDLE a6) = CreateFileW; BOOL (WINAPI * Real_WriteFile)(HANDLE hFile, LPCVOID lpBuffer, DWORD nNumberOfBytesToWrite, LPDWORD lpNumberOfBytesWritten, LPOVERLAPPED lpOverlapped) = WriteFile; BOOL (WINAPI * Real_FlushFileBuffers)(HANDLE hFile) = FlushFileBuffers; BOOL (WINAPI * Real_CloseHandle)(HANDLE hObject) = CloseHandle; BOOL (WINAPI * Real_WaitNamedPipeW)(LPCWSTR lpNamedPipeName, DWORD nTimeOut) = WaitNamedPipeW; BOOL (WINAPI * Real_SetNamedPipeHandleState)(HANDLE hNamedPipe, LPDWORD lpMode, LPDWORD lpMaxCollectionCount, LPDWORD lpCollectDataTimeout) = SetNamedPipeHandleState; DWORD (WINAPI * Real_GetCurrentProcessId)(VOID) = GetCurrentProcessId; VOID (WINAPI * Real_GetSystemTimeAsFileTime)(LPFILETIME lpSystemTimeAsFileTime) = GetSystemTimeAsFileTime; VOID (WINAPI * Real_InitializeCriticalSection)(LPCRITICAL_SECTION lpSection) = InitializeCriticalSection; VOID (WINAPI * Real_EnterCriticalSection)(LPCRITICAL_SECTION lpSection) = EnterCriticalSection; VOID (WINAPI * Real_LeaveCriticalSection)(LPCRITICAL_SECTION lpSection) = LeaveCriticalSection; } DWORD (WINAPI * Real_GetModuleFileNameW)(HMODULE a0, LPWSTR a1, DWORD a2) = GetModuleFileNameW; DWORD (WINAPI * Real_GetModuleFileNameA)(HMODULE a0, LPSTR a1, DWORD a2) = GetModuleFileNameA; BOOL (WINAPI * Real_CreateProcessW)(LPCWSTR a0, LPWSTR a1, LPSECURITY_ATTRIBUTES a2, LPSECURITY_ATTRIBUTES a3, BOOL a4, DWORD a5, LPVOID a6, LPCWSTR a7, struct _STARTUPINFOW* a8, LPPROCESS_INFORMATION a9) = CreateProcessW; BOOL (WINAPI * Real_BuildCommDCBA)(LPCSTR a0, struct _DCB* a1) = BuildCommDCBA; BOOL (WINAPI * Real_BuildCommDCBAndTimeoutsA)(LPCSTR a0, struct _DCB* a1, struct _COMMTIMEOUTS* a2) = BuildCommDCBAndTimeoutsA; BOOL (WINAPI * Real_BuildCommDCBAndTimeoutsW)(LPCWSTR a0, struct _DCB* a1, struct _COMMTIMEOUTS* a2) = BuildCommDCBAndTimeoutsW; BOOL (WINAPI * Real_BuildCommDCBW)(LPCWSTR a0, struct _DCB* a1) = BuildCommDCBW; BOOL (WINAPI * Real_ClearCommBreak)(HANDLE a0) = ClearCommBreak; BOOL (WINAPI * Real_ClearCommError)(HANDLE a0, LPDWORD a1, struct _COMSTAT* a2) = ClearCommError; HANDLE (WINAPI * Real_CreateFileA)(LPCSTR a0, DWORD a1, DWORD a2, LPSECURITY_ATTRIBUTES a3, DWORD a4, DWORD a5, HANDLE a6) = CreateFileA; BOOL (WINAPI * Real_EscapeCommFunction)(HANDLE a0, DWORD a1) = EscapeCommFunction; BOOL (WINAPI * Real_GetCommConfig)(HANDLE a0, LPCOMMCONFIG a1, LPDWORD a2) = GetCommConfig; BOOL (WINAPI * Real_GetCommMask)(HANDLE a0, LPDWORD a1) = GetCommMask; BOOL (WINAPI * Real_GetCommModemStatus)(HANDLE a0, LPDWORD a1) = GetCommModemStatus; BOOL (WINAPI * Real_GetCommProperties)(HANDLE a0, LPCOMMPROP a1) = GetCommProperties; BOOL (WINAPI * Real_GetCommState)(HANDLE a0, struct _DCB* a1) = GetCommState; BOOL (WINAPI * Real_GetCommTimeouts)(HANDLE a0, struct _COMMTIMEOUTS* a1) = GetCommTimeouts; DWORD (WINAPI * Real_GetCurrentThreadId)(void) = GetCurrentThreadId; BOOL (WINAPI * Real_GetOverlappedResult)(HANDLE a0, LPOVERLAPPED a1, LPDWORD a2, BOOL a3) = GetOverlappedResult; BOOL (WINAPI * Real_PurgeComm)(HANDLE a0, DWORD a1) = PurgeComm; BOOL (WINAPI * Real_ReadFile)(HANDLE a0, LPVOID a1, DWORD a2, LPDWORD a3, LPOVERLAPPED a4) = ReadFile; BOOL (WINAPI * Real_SetCommBreak)(HANDLE a0) = SetCommBreak; BOOL (WINAPI * Real_SetCommConfig)(HANDLE a0, LPCOMMCONFIG a1, DWORD a2) = SetCommConfig; BOOL (WINAPI * Real_SetCommMask)(HANDLE a0, DWORD a1) = SetCommMask; BOOL (WINAPI * Real_SetCommState)(HANDLE a0, struct _DCB* a1) = SetCommState; BOOL (WINAPI * Real_SetCommTimeouts)(HANDLE a0, struct _COMMTIMEOUTS* a1) = SetCommTimeouts; BOOL (WINAPI * Real_SetupComm)(HANDLE a0, DWORD a1, DWORD a2) = SetupComm; BOOL (WINAPI * Real_TransmitCommChar)(HANDLE a0, char a1) = TransmitCommChar; BOOL (WINAPI * Real_WaitCommEvent)
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/traceser/trcser.cpp:64
FunctionHANDLE (WINAPI * Real_CreateFileW)(LPCWSTR a0, DWORD a1, DWORD a2, LPSECURITY_ATTRIBUTES a3, DWORD a4, DWORD a5, HANDLE a6) = CreateFileW; BOOL (WINAPI * Real_WriteFile)(HANDLE hFile, LPCVOID lpBuffer, DWORD nNumberOfBytesToWrite, LPDWORD lpNumberOfBytesWritten, LPOVERLAPPED lpOverlapped) = WriteFile; BOOL (WINAPI * Real_FlushFileBuffers)(HANDLE hFile) = FlushFileBuffers; BOOL (WINAPI * Real_CloseHandle)(HANDLE hObject) = CloseHandle; BOOL (WINAPI * Real_WaitNamedPipeW)(LPCWSTR lpNamedPipeName, DWORD nTimeOut) = WaitNamedPipeW; BOOL (WINAPI * Real_SetNamedPipeHandleState)(HANDLE hNamedPipe, LPDWORD lpMode, LPDWORD lpMaxCollectionCount, LPDWORD lpCollectDataTimeout) = SetNamedPipeHandleState; DWORD (WINAPI * Real_GetCurrentProcessId)(VOID) = GetCurrentProcessId; VOID (WINAPI * Real_GetSystemTimeAsFileTime)(LPFILETIME lpSystemTimeAsFileTime) = GetSystemTimeAsFileTime; VOID (WINAPI * Real_InitializeCriticalSection)(LPCRITICAL_SECTION lpSection) = InitializeCriticalSection; VOID (WINAPI * Real_EnterCriticalSection)(LPCRITICAL_SECTION lpSection) = EnterCriticalSection; VOID (WINAPI * Real_LeaveCriticalSection)(LPCRITICAL_SECTION lpSection) = LeaveCriticalSection; } DWORD (WINAPI * Real_GetModuleFileNameW)(HMODULE a0, LPWSTR a1, DWORD a2) = GetModuleFileNameW; BOOL (WINAPI * Real_CreateProcessW)(LPCWSTR a0, LPWSTR a1, LPSECURITY_ATTRIBUTES a2, LPSECURITY_ATTRIBUTES a3, BOOL a4, DWORD a5, LPVOID a6, LPCWSTR a7, LPSTARTUPINFOW a8, LPPROCESS_INFORMATION a9) = CreateProcessW; #if _MSC_VER < 1300 SOCKET (WINAPI * Real_WSAAccept)(SOCKET a0, sockaddr* a1, LPINT a2, LPCONDITIONPROC a3, DWORD a4) = WSAAccept; #else SOCKET (WINAPI * Real_WSAAccept)(SOCKET a0, sockaddr* a1, LPINT a2, LPCONDITIONPROC a3, DWORD_PTR a4) = WSAAccept; #endif INT (WINAPI * Real_WSAAddressToStringA)(LPSOCKADDR a0, DWORD a1, LPWSAPROTOCOL_INFOA a2, LPSTR a3, LPDWORD a4) = WSAAddressToStringA; INT (WINAPI * Real_WSAAddressToStringW)(LPSOCKADDR a0, DWORD a1, LPWSAPROTOCOL_INFOW a2, LPWSTR a3, LPDWORD a4) = WSAAddressToStringW; HANDLE (WINAPI * Real_WSAAsyncGetHostByAddr)(HWND a0, u_int a1, CONST char* a2, int a3, int a4, char* a5, int a6) = WSAAsyncGetHostByAddr; HANDLE (WINAPI * Real_WSAAsyncGetHostByName)(HWND a0, u_int a1, CONST char* a2, char* a3, int a4) = WSAAsyncGetHostByName; HANDLE (WINAPI * Real_WSAAsyncGetProtoByName)(HWND a0, u_int a1, CONST char* a2, char* a3, int a4) = WSAAsyncGetProtoByName; HANDLE (WINAPI * Real_WSAAsyncGetProtoByNumber)(HWND a0, u_int a1, int a2, char* a3, int a4) = WSAAsyncGetProtoByNumber; HANDLE (WINAPI * Real_WSAAsyncGetServByName)(HWND a0, u_int a1, CONST char* a2, CONST char* a3, char* a4, int a5) = WSAAsyncGetServByName; HANDLE (WINAPI * Real_WSAAsyncGetServByPort)(HWND a0, u_int a1, int a2, CONST char* a3, char* a4, int a5) = WSAAsyncGetServByPort; int (WINAPI * Real_WSACancelAsyncRequest)(HANDLE a0) = WSACancelAsyncRequest; int (WINAPI * Real_WSACancelBlockingCall)(void) = WSACancelBlockingCall; int (WINAPI * Real_WSACleanup)(void) = WSACleanup; BOOL (WINAPI * Real_WSACloseEvent)(HANDLE a0) = WSACloseEvent; int (WINAPI * Real_WSAConnect)(SOCKET a0, CONST sockaddr* a1, int a2, LPWSABUF a3, LPWSABUF a4, LPQOS a5, LPQOS a6) = WSAConnect; HANDLE (WINAPI * Real_WSACreateEvent)(void) = WSACreateEvent; int (WINAPI * Real_WSADuplicateSocketA)(SOCKET a0, DWORD a1, LPWSAPROTOCOL_INFOA a2) = WSADuplicateSocketA; int (WINAPI * Real_WSADuplicateSocketW)(SOCKET a0, DWORD a1, LPWSAPROTOCOL_INFOW a2) = WSADuplicateSocketW; INT (WINAPI * Real_WSAEnumNameSpaceProvidersA)(LPDWORD a0, LPWSANAMESPACE_INFOA a1) = WSAEnumNameSpaceProvidersA; INT (WINAPI * Real_WSAEnumNameSpaceProvidersW)(LPDWORD a0, LPWSANAMESPACE_INFOW a1) = WSAEnumNameSpaceProvidersW; int (WINAPI * Real_WSAEnumNetworkEvents)(SOCKET a0, HANDLE a1, LPWSANETWORKEVENTS a2) = WSAEnumNetworkEvents; int (WINAPI * Real_WSAEnumProtocolsA)(LPINT a0, LPWSAPROTOCOL_INFOA a1, LPDWORD a2) = WSAEnumProtocolsA; int (WINAPI * Real_WSAEnumProtocolsW)(LPINT a0, LPWSAPROTOCOL_INFOW a1, LPDWORD a2) = WSAEnumProtocolsW; BOOL (WINAPI * Real_WSAGetOverlappedResult)(SOCKET a0, LPWSAOVERLAPPED a1, LPDWORD a2, BOOL a3, LPDWORD a4) = WSAGetOverlappedResult; BOOL (WINAPI * Real_WSAIsBlocking)(void) = WSAIsBlocking; SOCKET (WINAPI * Real_WSAJoinLeaf)(SOCKET a0, CONST sockaddr* a1, int a2, LPWSABUF a3, LPWSABUF a4, LPQOS a5, LPQOS a6, DWORD a7) = WSAJoinLeaf; INT (WINAPI * Real_WSALookupServiceBeginA)( LPWSAQUERYSETA lpqsRestrictions, DWORD dwControlFlags, LPHANDLE lphLookup ) = WSALookupServiceBeginA; INT (WINAPI * Real_WSALookupServiceBeginW)( LPWSAQUERYSETW lpqsRestrictions, DWORD dwControlFlags, LPHANDLE lphLookup ) = WSALookupServiceBeginW; INT (WINAPI * Real_WSALookupServiceNextA)( HANDLE hLookup, DWORD dwControlFlags, LPDWORD lpdwBufferLength, LPWSAQUERYSETA lpqsResults ) = WSALookupServiceNextA; INT (WINAPI * Real_WSALookupServiceNextW)( HANDLE hLookup, DWORD dwControlFlags, LPDWORD lpdwBufferLength, LPWSAQUERYSETW lpqsResults ) = WSALookupServiceNextW; INT (WINAPI * Real_WSALookupServiceEnd)( HANDLE hLookup ) = WSALookupServiceEnd; INT (WINAPI * Real_WSAProviderConfigChange)(LPHANDLE a0, LPWSAOVERLAPPED a1, LPWSAOVERLAPPED_COMPLETION_ROUTINE a2) = WSAProviderConfigChange; int (WINAPI * Real_WSARecv)(SOCKET a0, LPWSABUF a1, DWORD a2, LPDWORD a3, LPDWORD a4, LPWSAOVERLAPPED a5, LPWSAOVERLAPPED_COMPLETION_ROUTINE a6) = WSARecv; int (WINAPI * Real_WSARecvDisconnect)(SOCKET a0, LPWSABUF a1) = WSARecvDisconnect; int (WINAPI * Real_WSARecvFrom)(SOCKET a0, LPWSABUF a1, DWORD a2, LPDWORD a3, LPDWORD a4, sockaddr* a5, LPINT a6, LPWSAOVERLAPPED a7, LPWSAOVERLAPPED_COMPLETION_ROUTINE a8) = WSARecvFrom; BOOL (WINAPI * Real_WSAResetEvent)(HANDLE a0) = WSAResetEvent; int (WINAPI * Real_WSASend)(SOCKET a0, LPWSABUF a1, DWORD a2, LPDWORD a3, DWORD a4, LPWSAOVERLAPPED a5, LPWSAOVERLAPPED_COMPLETION_ROUTINE a6) = WSASend; int (WINAPI * Real_WSASendDisconnect)(SOCKET a0, LPWSABUF a1) = WSASendDisconnect; int (WINAPI * Real_WSASendTo)(SOCKET a0, LPWSABUF a1, DWORD a2, LPDWORD a3, DWORD a4, CONST sockaddr* a5, int a6, LPWSAOVERLAPPED a7, LPWSAOVERLAPPED_COMPLETION_ROUTINE a8) = WSASendTo; INT (WINAPI * Real_WSAStringToAddressA)(LPSTR a0, INT a1, LPWSAPROTOCOL_INFOA a2, LPSOCKADDR a3, LPINT a4) = WSAStringToAddressA; INT (WINAPI * Real_WSAStringToAddressW)(LPWSTR a0, INT a1, LPWSAPROTOCOL_INFOW a2, LPSOCKADDR a3, LPINT a4) = WSAStringToAddressW; DWORD (WINAPI * Real_WSAWaitForMultipleEvents)(DWORD a0, CONST HANDLE * a1, BOOL a2, DWORD a3, BOOL a4) = WSAWaitForMultipleEvents; SOCKET (WINAPI * Real_accept)(SOCKET a0, sockaddr* a1, int* a2) = accept; int (WINAPI * Real_closesocket)(SOCKET a0) = closesocket; int (WINAPI * Real_connect)(SOCKET a0, CONST sockaddr* a1, int a2) = connect; int (WINAPI * Real_listen)(SOCKET a0, int a1) = listen; int (WINAPI * Real_recv)(SOCKET a0, char* a1, int a2, int a3) = recv; int (WINAPI * Real_recvfrom)(SOCKET a0, char* a1, int a2, int a3, sockaddr* a4, int* a5) = recvfrom; int (WINAPI * Real_send)(SOCKET a0, CONST char* a1, int a2, int a3) = send; int (WINAPI * Real_sendto)(SOCKET a0, CONST char* a1, int a2, int a3, CONST sockaddr* a4, int a5) = sendto; int (WINAPI * Real_shutdown)
coding/projects/Hooking/Detours/detours/samples/tracetcp/trctcp.cpp:68
FunctionHANDLE (WINAPI * Real_CreateFileW)(LPCWSTR a0, DWORD a1, DWORD a2, LPSECURITY_ATTRIBUTES a3, DWORD a4, DWORD a5, HANDLE a6) = CreateFileW; BOOL (WINAPI * Real_WriteFile)(HANDLE hFile, LPCVOID lpBuffer, DWORD nNumberOfBytesToWrite, LPDWORD lpNumberOfBytesWritten, LPOVERLAPPED lpOverlapped) = WriteFile; BOOL (WINAPI * Real_FlushFileBuffers)(HANDLE hFile) = FlushFileBuffers; BOOL (WINAPI * Real_CloseHandle)(HANDLE hObject) = CloseHandle; BOOL (WINAPI * Real_WaitNamedPipeW)(LPCWSTR lpNamedPipeName, DWORD nTimeOut) = WaitNamedPipeW; BOOL (WINAPI * Real_SetNamedPipeHandleState)(HANDLE hNamedPipe, LPDWORD lpMode, LPDWORD lpMaxCollectionCount, LPDWORD lpCollectDataTimeout) = SetNamedPipeHandleState; DWORD (WINAPI * Real_GetCurrentProcessId)(VOID) = GetCurrentProcessId; VOID (WINAPI * Real_GetSystemTimeAsFileTime)(LPFILETIME lpSystemTimeAsFileTime) = GetSystemTimeAsFileTime; VOID (WINAPI * Real_InitializeCriticalSection)(LPCRITICAL_SECTION lpSection) = InitializeCriticalSection; VOID (WINAPI * Real_EnterCriticalSection)(LPCRITICAL_SECTION lpSection) = EnterCriticalSection; VOID (WINAPI * Real_LeaveCriticalSection)(LPCRITICAL_SECTION lpSection) = LeaveCriticalSection; } DWORD (WINAPI * Real_GetModuleFileNameW)(HMODULE a0, LPWSTR a1, DWORD a2) = GetModuleFileNameW; BOOL (WINAPI * Real_CreateProcessW)(LPCWSTR a0, LPWSTR a1, LPSECURITY_ATTRIBUTES a2, LPSECURITY_ATTRIBUTES a3, BOOL a4, DWORD a5, LPVOID a6, LPCWSTR a7, LPSTARTUPINFOW a8, LPPROCESS_INFORMATION a9) = CreateProcessW; #if _MSC_VER < 1300 SOCKET (WINAPI * Real_WSAAccept)(SOCKET a0, sockaddr* a1, LPINT a2, LPCONDITIONPROC a3, DWORD a4) = WSAAccept; #else SOCKET (WINAPI * Real_WSAAccept)(SOCKET a0, sockaddr* a1, LPINT a2, LPCONDITIONPROC a3, DWORD_PTR a4) = WSAAccept; #endif INT (WINAPI * Real_WSAAddressToStringA)(LPSOCKADDR a0, DWORD a1, LPWSAPROTOCOL_INFOA a2, LPSTR a3, LPDWORD a4) = WSAAddressToStringA; INT (WINAPI * Real_WSAAddressToStringW)(LPSOCKADDR a0, DWORD a1, LPWSAPROTOCOL_INFOW a2, LPWSTR a3, LPDWORD a4) = WSAAddressToStringW; HANDLE (WINAPI * Real_WSAAsyncGetHostByAddr)(HWND a0, u_int a1, CONST char* a2, int a3, int a4, char* a5, int a6) = WSAAsyncGetHostByAddr; HANDLE (WINAPI * Real_WSAAsyncGetHostByName)(HWND a0, u_int a1, CONST char* a2, char* a3, int a4) = WSAAsyncGetHostByName; HANDLE (WINAPI * Real_WSAAsyncGetProtoByName)(HWND a0, u_int a1, CONST char* a2, char* a3, int a4) = WSAAsyncGetProtoByName; HANDLE (WINAPI * Real_WSAAsyncGetProtoByNumber)(HWND a0, u_int a1, int a2, char* a3, int a4) = WSAAsyncGetProtoByNumber; HANDLE (WINAPI * Real_WSAAsyncGetServByName)(HWND a0, u_int a1, CONST char* a2, CONST char* a3, char* a4, int a5) = WSAAsyncGetServByName; HANDLE (WINAPI * Real_WSAAsyncGetServByPort)(HWND a0, u_int a1, int a2, CONST char* a3, char* a4, int a5) = WSAAsyncGetServByPort; int (WINAPI * Real_WSACancelAsyncRequest)(HANDLE a0) = WSACancelAsyncRequest; int (WINAPI * Real_WSACancelBlockingCall)(void) = WSACancelBlockingCall; int (WINAPI * Real_WSACleanup)(void) = WSACleanup; BOOL (WINAPI * Real_WSACloseEvent)(HANDLE a0) = WSACloseEvent; int (WINAPI * Real_WSAConnect)(SOCKET a0, CONST sockaddr* a1, int a2, LPWSABUF a3, LPWSABUF a4, LPQOS a5, LPQOS a6) = WSAConnect; HANDLE (WINAPI * Real_WSACreateEvent)(void) = WSACreateEvent; int (WINAPI * Real_WSADuplicateSocketA)(SOCKET a0, DWORD a1, LPWSAPROTOCOL_INFOA a2) = WSADuplicateSocketA; int (WINAPI * Real_WSADuplicateSocketW)(SOCKET a0, DWORD a1, LPWSAPROTOCOL_INFOW a2) = WSADuplicateSocketW; INT (WINAPI * Real_WSAEnumNameSpaceProvidersA)(LPDWORD a0, LPWSANAMESPACE_INFOA a1) = WSAEnumNameSpaceProvidersA; INT (WINAPI * Real_WSAEnumNameSpaceProvidersW)(LPDWORD a0, LPWSANAMESPACE_INFOW a1) = WSAEnumNameSpaceProvidersW; int (WINAPI * Real_WSAEnumNetworkEvents)(SOCKET a0, HANDLE a1, LPWSANETWORKEVENTS a2) = WSAEnumNetworkEvents; int (WINAPI * Real_WSAEnumProtocolsA)(LPINT a0, LPWSAPROTOCOL_INFOA a1, LPDWORD a2) = WSAEnumProtocolsA; int (WINAPI * Real_WSAEnumProtocolsW)(LPINT a0, LPWSAPROTOCOL_INFOW a1, LPDWORD a2) = WSAEnumProtocolsW; BOOL (WINAPI * Real_WSAGetOverlappedResult)(SOCKET a0, LPWSAOVERLAPPED a1, LPDWORD a2, BOOL a3, LPDWORD a4) = WSAGetOverlappedResult; BOOL (WINAPI * Real_WSAIsBlocking)(void) = WSAIsBlocking; SOCKET (WINAPI * Real_WSAJoinLeaf)(SOCKET a0, CONST sockaddr* a1, int a2, LPWSABUF a3, LPWSABUF a4, LPQOS a5, LPQOS a6, DWORD a7) = WSAJoinLeaf; INT (WINAPI * Real_WSALookupServiceBeginA)( LPWSAQUERYSETA lpqsRestrictions, DWORD dwControlFlags, LPHANDLE lphLookup ) = WSALookupServiceBeginA; INT (WINAPI * Real_WSALookupServiceBeginW)( LPWSAQUERYSETW lpqsRestrictions, DWORD dwControlFlags, LPHANDLE lphLookup ) = WSALookupServiceBeginW; INT (WINAPI * Real_WSALookupServiceNextA)( HANDLE hLookup, DWORD dwControlFlags, LPDWORD lpdwBufferLength, LPWSAQUERYSETA lpqsResults ) = WSALookupServiceNextA; INT (WINAPI * Real_WSALookupServiceNextW)( HANDLE hLookup, DWORD dwControlFlags, LPDWORD lpdwBufferLength, LPWSAQUERYSETW lpqsResults ) = WSALookupServiceNextW; INT (WINAPI * Real_WSALookupServiceEnd)( HANDLE hLookup ) = WSALookupServiceEnd; INT (WINAPI * Real_WSAProviderConfigChange)(LPHANDLE a0, LPWSAOVERLAPPED a1, LPWSAOVERLAPPED_COMPLETION_ROUTINE a2) = WSAProviderConfigChange; int (WINAPI * Real_WSARecv)(SOCKET a0, LPWSABUF a1, DWORD a2, LPDWORD a3, LPDWORD a4, LPWSAOVERLAPPED a5, LPWSAOVERLAPPED_COMPLETION_ROUTINE a6) = WSARecv; int (WINAPI * Real_WSARecvDisconnect)(SOCKET a0, LPWSABUF a1) = WSARecvDisconnect; int (WINAPI * Real_WSARecvFrom)(SOCKET a0, LPWSABUF a1, DWORD a2, LPDWORD a3, LPDWORD a4, sockaddr* a5, LPINT a6, LPWSAOVERLAPPED a7, LPWSAOVERLAPPED_COMPLETION_ROUTINE a8) = WSARecvFrom; BOOL (WINAPI * Real_WSAResetEvent)(HANDLE a0) = WSAResetEvent; int (WINAPI * Real_WSASend)(SOCKET a0, LPWSABUF a1, DWORD a2, LPDWORD a3, DWORD a4, LPWSAOVERLAPPED a5, LPWSAOVERLAPPED_COMPLETION_ROUTINE a6) = WSASend; int (WINAPI * Real_WSASendDisconnect)(SOCKET a0, LPWSABUF a1) = WSASendDisconnect; int (WINAPI * Real_WSASendTo)(SOCKET a0, LPWSABUF a1, DWORD a2, LPDWORD a3, DWORD a4, CONST sockaddr* a5, int a6, LPWSAOVERLAPPED a7, LPWSAOVERLAPPED_COMPLETION_ROUTINE a8) = WSASendTo; INT (WINAPI * Real_WSAStringToAddressA)(LPSTR a0, INT a1, LPWSAPROTOCOL_INFOA a2, LPSOCKADDR a3, LPINT a4) = WSAStringToAddressA; INT (WINAPI * Real_WSAStringToAddressW)(LPWSTR a0, INT a1, LPWSAPROTOCOL_INFOW a2, LPSOCKADDR a3, LPINT a4) = WSAStringToAddressW; DWORD (WINAPI * Real_WSAWaitForMultipleEvents)(DWORD a0, CONST HANDLE * a1, BOOL a2, DWORD a3, BOOL a4) = WSAWaitForMultipleEvents; SOCKET (WINAPI * Real_accept)(SOCKET a0, sockaddr* a1, int* a2) = accept; int (WINAPI * Real_closesocket)(SOCKET a0) = closesocket; int (WINAPI * Real_connect)(SOCKET a0, CONST sockaddr* a1, int a2) = connect; int (WINAPI * Real_listen)(SOCKET a0, int a1) = listen; int (WINAPI * Real_recv)(SOCKET a0, char* a1, int a2, int a3) = recv; int (WINAPI * Real_recvfrom)(SOCKET a0, char* a1, int a2, int a3, sockaddr* a4, int* a5) = recvfrom; int (WINAPI * Real_send)(SOCKET a0, CONST char* a1, int a2, int a3) = send; int (WINAPI * Real_sendto)(SOCKET a0, CONST char* a1, int a2, int a3, CONST sockaddr* a4, int a5) = sendto; int (WINAPI * Real_shutdown)
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/tracetcp/trctcp.cpp:68
FunctionHANDLE (WINAPI * Real_CreateFileW)(LPCWSTR a0, DWORD a1, DWORD a2, LPSECURITY_ATTRIBUTES a3, DWORD a4, DWORD a5, HANDLE a6) = CreateFileW; BOOL (WINAPI * Real_WriteFile)(HANDLE hFile, LPCVOID lpBuffer, DWORD nNumberOfBytesToWrite, LPDWORD lpNumberOfBytesWritten, LPOVERLAPPED lpOverlapped) = WriteFile; BOOL (WINAPI * Real_FlushFileBuffers)(HANDLE hFile) = FlushFileBuffers; BOOL (WINAPI * Real_CloseHandle)(HANDLE hObject) = CloseHandle; BOOL (WINAPI * Real_WaitNamedPipeW)(LPCWSTR lpNamedPipeName, DWORD nTimeOut) = WaitNamedPipeW; BOOL (WINAPI * Real_SetNamedPipeHandleState)(HANDLE hNamedPipe, LPDWORD lpMode, LPDWORD lpMaxCollectionCount, LPDWORD lpCollectDataTimeout) = SetNamedPipeHandleState; DWORD (WINAPI * Real_GetCurrentProcessId)(VOID) = GetCurrentProcessId; VOID (WINAPI * Real_GetSystemTimeAsFileTime)(LPFILETIME lpSystemTimeAsFileTime) = GetSystemTimeAsFileTime; VOID (WINAPI * Real_InitializeCriticalSection)(LPCRITICAL_SECTION lpSection) = InitializeCriticalSection; VOID (WINAPI * Real_EnterCriticalSection)(LPCRITICAL_SECTION lpSection) = EnterCriticalSection; VOID (WINAPI * Real_LeaveCriticalSection)(LPCRITICAL_SECTION lpSection) = LeaveCriticalSection; } DWORD (WINAPI * Real_GetModuleFileNameW)(HMODULE a0, LPWSTR a1, DWORD a2) = GetModuleFileNameW; BOOL (WINAPI * Real_CreateProcessW)(LPCWSTR a0, LPWSTR a1, LPSECURITY_ATTRIBUTES a2, LPSECURITY_ATTRIBUTES a3, BOOL a4, DWORD a5, LPVOID a6, LPCWSTR a7, LPSTARTUPINFOW a8, LPPROCESS_INFORMATION a9) = CreateProcessW; #if _MSC_VER < 1300 SOCKET (WINAPI * Real_WSAAccept)(SOCKET a0, sockaddr* a1, LPINT a2, LPCONDITIONPROC a3, DWORD a4) = WSAAccept; #else SOCKET (WINAPI * Real_WSAAccept)(SOCKET a0, sockaddr* a1, LPINT a2, LPCONDITIONPROC a3, DWORD_PTR a4) = WSAAccept; #endif INT (WINAPI * Real_WSAAddressToStringA)(LPSOCKADDR a0, DWORD a1, LPWSAPROTOCOL_INFOA a2, LPSTR a3, LPDWORD a4) = WSAAddressToStringA; INT (WINAPI * Real_WSAAddressToStringW)(LPSOCKADDR a0, DWORD a1, LPWSAPROTOCOL_INFOW a2, LPWSTR a3, LPDWORD a4) = WSAAddressToStringW; HANDLE (WINAPI * Real_WSAAsyncGetHostByAddr)(HWND a0, u_int a1, CONST char* a2, int a3, int a4, char* a5, int a6) = WSAAsyncGetHostByAddr; HANDLE (WINAPI * Real_WSAAsyncGetHostByName)(HWND a0, u_int a1, CONST char* a2, char* a3, int a4) = WSAAsyncGetHostByName; HANDLE (WINAPI * Real_WSAAsyncGetProtoByName)(HWND a0, u_int a1, CONST char* a2, char* a3, int a4) = WSAAsyncGetProtoByName; HANDLE (WINAPI * Real_WSAAsyncGetProtoByNumber)(HWND a0, u_int a1, int a2, char* a3, int a4) = WSAAsyncGetProtoByNumber; HANDLE (WINAPI * Real_WSAAsyncGetServByName)(HWND a0, u_int a1, CONST char* a2, CONST char* a3, char* a4, int a5) = WSAAsyncGetServByName; HANDLE (WINAPI * Real_WSAAsyncGetServByPort)(HWND a0, u_int a1, int a2, CONST char* a3, char* a4, int a5) = WSAAsyncGetServByPort; int (WINAPI * Real_WSACancelAsyncRequest)(HANDLE a0) = WSACancelAsyncRequest; int (WINAPI * Real_WSACancelBlockingCall)(void) = WSACancelBlockingCall; int (WINAPI * Real_WSACleanup)(void) = WSACleanup; BOOL (WINAPI * Real_WSACloseEvent)(HANDLE a0) = WSACloseEvent; int (WINAPI * Real_WSAConnect)(SOCKET a0, CONST sockaddr* a1, int a2, LPWSABUF a3, LPWSABUF a4, LPQOS a5, LPQOS a6) = WSAConnect; HANDLE (WINAPI * Real_WSACreateEvent)(void) = WSACreateEvent; int (WINAPI * Real_WSADuplicateSocketA)(SOCKET a0, DWORD a1, LPWSAPROTOCOL_INFOA a2) = WSADuplicateSocketA; int (WINAPI * Real_WSADuplicateSocketW)(SOCKET a0, DWORD a1, LPWSAPROTOCOL_INFOW a2) = WSADuplicateSocketW; INT (WINAPI * Real_WSAEnumNameSpaceProvidersA)(LPDWORD a0, LPWSANAMESPACE_INFOA a1) = WSAEnumNameSpaceProvidersA; INT (WINAPI * Real_WSAEnumNameSpaceProvidersW)(LPDWORD a0, LPWSANAMESPACE_INFOW a1) = WSAEnumNameSpaceProvidersW; int (WINAPI * Real_WSAEnumNetworkEvents)(SOCKET a0, HANDLE a1, LPWSANETWORKEVENTS a2) = WSAEnumNetworkEvents; int (WINAPI * Real_WSAEnumProtocolsA)(LPINT a0, LPWSAPROTOCOL_INFOA a1, LPDWORD a2) = WSAEnumProtocolsA; int (WINAPI * Real_WSAEnumProtocolsW)(LPINT a0, LPWSAPROTOCOL_INFOW a1, LPDWORD a2) = WSAEnumProtocolsW; BOOL (WINAPI * Real_WSAGetOverlappedResult)(SOCKET a0, LPWSAOVERLAPPED a1, LPDWORD a2, BOOL a3, LPDWORD a4) = WSAGetOverlappedResult; BOOL (WINAPI * Real_WSAIsBlocking)(void) = WSAIsBlocking; SOCKET (WINAPI * Real_WSAJoinLeaf)(SOCKET a0, CONST sockaddr* a1, int a2, LPWSABUF a3, LPWSABUF a4, LPQOS a5, LPQOS a6, DWORD a7) = WSAJoinLeaf; INT (WINAPI * Real_WSAProviderConfigChange)(LPHANDLE a0, LPWSAOVERLAPPED a1, LPWSAOVERLAPPED_COMPLETION_ROUTINE a2) = WSAProviderConfigChange; int (WINAPI * Real_WSARecv)(SOCKET a0, LPWSABUF a1, DWORD a2, LPDWORD a3, LPDWORD a4, LPWSAOVERLAPPED a5, LPWSAOVERLAPPED_COMPLETION_ROUTINE a6) = WSARecv; int (WINAPI * Real_WSARecvDisconnect)(SOCKET a0, LPWSABUF a1) = WSARecvDisconnect; int (WINAPI * Real_WSARecvFrom)(SOCKET a0, LPWSABUF a1, DWORD a2, LPDWORD a3, LPDWORD a4, sockaddr* a5, LPINT a6, LPWSAOVERLAPPED a7, LPWSAOVERLAPPED_COMPLETION_ROUTINE a8) = WSARecvFrom; BOOL (WINAPI * Real_WSAResetEvent)(HANDLE a0) = WSAResetEvent; int (WINAPI * Real_WSASend)(SOCKET a0, LPWSABUF a1, DWORD a2, LPDWORD a3, DWORD a4, LPWSAOVERLAPPED a5, LPWSAOVERLAPPED_COMPLETION_ROUTINE a6) = WSASend; int (WINAPI * Real_WSASendDisconnect)(SOCKET a0, LPWSABUF a1) = WSASendDisconnect; int (WINAPI * Real_WSASendTo)(SOCKET a0, LPWSABUF a1, DWORD a2, LPDWORD a3, DWORD a4, CONST sockaddr* a5, int a6, LPWSAOVERLAPPED a7, LPWSAOVERLAPPED_COMPLETION_ROUTINE a8) = WSASendTo; INT (WINAPI * Real_WSAStringToAddressA)(LPSTR a0, INT a1, LPWSAPROTOCOL_INFOA a2, LPSOCKADDR a3, LPINT a4) = WSAStringToAddressA; INT (WINAPI * Real_WSAStringToAddressW)(LPWSTR a0, INT a1, LPWSAPROTOCOL_INFOW a2, LPSOCKADDR a3, LPINT a4) = WSAStringToAddressW; DWORD (WINAPI * Real_WSAWaitForMultipleEvents)(DWORD a0, CONST HANDLE * a1, BOOL a2, DWORD a3, BOOL a4) = WSAWaitForMultipleEvents; SOCKET (WINAPI * Real_accept)(SOCKET a0, sockaddr* a1, int* a2) = accept; int (WINAPI * Real_closesocket)(SOCKET a0) = closesocket; int (WINAPI * Real_connect)(SOCKET a0, CONST sockaddr* a1, int a2) = connect; int (WINAPI * Real_listen)(SOCKET a0, int a1) = listen; int (WINAPI * Real_recv)(SOCKET a0, char* a1, int a2, int a3) = recv; int (WINAPI * Real_recvfrom)(SOCKET a0, char* a1, int a2, int a3, sockaddr* a4, int* a5) = recvfrom; int (WINAPI * Real_send)(SOCKET a0, CONST char* a1, int a2, int a3) = send; int (WINAPI * Real_sendto)(SOCKET a0, CONST char* a1, int a2, int a3, CONST sockaddr* a4, int a5) = sendto; int (WINAPI * Real_shutdown)(SOCKET a0, int a1) = shutdown; SECURITY_STATUS (SEC_ENTRY * Real_EncryptMessage)( PCtxtHandle phContext, unsigned long fQOP, PSecBufferDesc pMessage, unsigned long MessageSeqNo) = EncryptMessage; SECURITY_STATUS (SEC_ENTRY * Real_DecryptMessage)
coding/projects/Hooking/Detours/detours/samples/tracessl/trcssl.cpp:70
FunctionHANDLE (WINAPI * Real_CreateFileW)(LPCWSTR a0, DWORD a1, DWORD a2, LPSECURITY_ATTRIBUTES a3, DWORD a4, DWORD a5, HANDLE a6) = CreateFileW; BOOL (WINAPI * Real_WriteFile)(HANDLE hFile, LPCVOID lpBuffer, DWORD nNumberOfBytesToWrite, LPDWORD lpNumberOfBytesWritten, LPOVERLAPPED lpOverlapped) = WriteFile; BOOL (WINAPI * Real_FlushFileBuffers)(HANDLE hFile) = FlushFileBuffers; BOOL (WINAPI * Real_CloseHandle)(HANDLE hObject) = CloseHandle; BOOL (WINAPI * Real_WaitNamedPipeW)(LPCWSTR lpNamedPipeName, DWORD nTimeOut) = WaitNamedPipeW; BOOL (WINAPI * Real_SetNamedPipeHandleState)(HANDLE hNamedPipe, LPDWORD lpMode, LPDWORD lpMaxCollectionCount, LPDWORD lpCollectDataTimeout) = SetNamedPipeHandleState; DWORD (WINAPI * Real_GetCurrentProcessId)(VOID) = GetCurrentProcessId; VOID (WINAPI * Real_GetSystemTimeAsFileTime)(LPFILETIME lpSystemTimeAsFileTime) = GetSystemTimeAsFileTime; VOID (WINAPI * Real_InitializeCriticalSection)(LPCRITICAL_SECTION lpSection) = InitializeCriticalSection; VOID (WINAPI * Real_EnterCriticalSection)(LPCRITICAL_SECTION lpSection) = EnterCriticalSection; VOID (WINAPI * Real_LeaveCriticalSection)(LPCRITICAL_SECTION lpSection) = LeaveCriticalSection; } DWORD (WINAPI * Real_GetModuleFileNameW)(HMODULE a0, LPWSTR a1, DWORD a2) = GetModuleFileNameW; BOOL (WINAPI * Real_CreateProcessW)(LPCWSTR a0, LPWSTR a1, LPSECURITY_ATTRIBUTES a2, LPSECURITY_ATTRIBUTES a3, BOOL a4, DWORD a5, LPVOID a6, LPCWSTR a7, LPSTARTUPINFOW a8, LPPROCESS_INFORMATION a9) = CreateProcessW; #if _MSC_VER < 1300 SOCKET (WINAPI * Real_WSAAccept)(SOCKET a0, sockaddr* a1, LPINT a2, LPCONDITIONPROC a3, DWORD a4) = WSAAccept; #else SOCKET (WINAPI * Real_WSAAccept)(SOCKET a0, sockaddr* a1, LPINT a2, LPCONDITIONPROC a3, DWORD_PTR a4) = WSAAccept; #endif INT (WINAPI * Real_WSAAddressToStringA)(LPSOCKADDR a0, DWORD a1, LPWSAPROTOCOL_INFOA a2, LPSTR a3, LPDWORD a4) = WSAAddressToStringA; INT (WINAPI * Real_WSAAddressToStringW)(LPSOCKADDR a0, DWORD a1, LPWSAPROTOCOL_INFOW a2, LPWSTR a3, LPDWORD a4) = WSAAddressToStringW; HANDLE (WINAPI * Real_WSAAsyncGetHostByAddr)(HWND a0, u_int a1, CONST char* a2, int a3, int a4, char* a5, int a6) = WSAAsyncGetHostByAddr; HANDLE (WINAPI * Real_WSAAsyncGetHostByName)(HWND a0, u_int a1, CONST char* a2, char* a3, int a4) = WSAAsyncGetHostByName; HANDLE (WINAPI * Real_WSAAsyncGetProtoByName)(HWND a0, u_int a1, CONST char* a2, char* a3, int a4) = WSAAsyncGetProtoByName; HANDLE (WINAPI * Real_WSAAsyncGetProtoByNumber)(HWND a0, u_int a1, int a2, char* a3, int a4) = WSAAsyncGetProtoByNumber; HANDLE (WINAPI * Real_WSAAsyncGetServByName)(HWND a0, u_int a1, CONST char* a2, CONST char* a3, char* a4, int a5) = WSAAsyncGetServByName; HANDLE (WINAPI * Real_WSAAsyncGetServByPort)(HWND a0, u_int a1, int a2, CONST char* a3, char* a4, int a5) = WSAAsyncGetServByPort; int (WINAPI * Real_WSACancelAsyncRequest)(HANDLE a0) = WSACancelAsyncRequest; int (WINAPI * Real_WSACancelBlockingCall)(void) = WSACancelBlockingCall; int (WINAPI * Real_WSACleanup)(void) = WSACleanup; BOOL (WINAPI * Real_WSACloseEvent)(HANDLE a0) = WSACloseEvent; int (WINAPI * Real_WSAConnect)(SOCKET a0, CONST sockaddr* a1, int a2, LPWSABUF a3, LPWSABUF a4, LPQOS a5, LPQOS a6) = WSAConnect; HANDLE (WINAPI * Real_WSACreateEvent)(void) = WSACreateEvent; int (WINAPI * Real_WSADuplicateSocketA)(SOCKET a0, DWORD a1, LPWSAPROTOCOL_INFOA a2) = WSADuplicateSocketA; int (WINAPI * Real_WSADuplicateSocketW)(SOCKET a0, DWORD a1, LPWSAPROTOCOL_INFOW a2) = WSADuplicateSocketW; INT (WINAPI * Real_WSAEnumNameSpaceProvidersA)(LPDWORD a0, LPWSANAMESPACE_INFOA a1) = WSAEnumNameSpaceProvidersA; INT (WINAPI * Real_WSAEnumNameSpaceProvidersW)(LPDWORD a0, LPWSANAMESPACE_INFOW a1) = WSAEnumNameSpaceProvidersW; int (WINAPI * Real_WSAEnumNetworkEvents)(SOCKET a0, HANDLE a1, LPWSANETWORKEVENTS a2) = WSAEnumNetworkEvents; int (WINAPI * Real_WSAEnumProtocolsA)(LPINT a0, LPWSAPROTOCOL_INFOA a1, LPDWORD a2) = WSAEnumProtocolsA; int (WINAPI * Real_WSAEnumProtocolsW)(LPINT a0, LPWSAPROTOCOL_INFOW a1, LPDWORD a2) = WSAEnumProtocolsW; BOOL (WINAPI * Real_WSAGetOverlappedResult)(SOCKET a0, LPWSAOVERLAPPED a1, LPDWORD a2, BOOL a3, LPDWORD a4) = WSAGetOverlappedResult; BOOL (WINAPI * Real_WSAIsBlocking)(void) = WSAIsBlocking; SOCKET (WINAPI * Real_WSAJoinLeaf)(SOCKET a0, CONST sockaddr* a1, int a2, LPWSABUF a3, LPWSABUF a4, LPQOS a5, LPQOS a6, DWORD a7) = WSAJoinLeaf; INT (WINAPI * Real_WSAProviderConfigChange)(LPHANDLE a0, LPWSAOVERLAPPED a1, LPWSAOVERLAPPED_COMPLETION_ROUTINE a2) = WSAProviderConfigChange; int (WINAPI * Real_WSARecv)(SOCKET a0, LPWSABUF a1, DWORD a2, LPDWORD a3, LPDWORD a4, LPWSAOVERLAPPED a5, LPWSAOVERLAPPED_COMPLETION_ROUTINE a6) = WSARecv; int (WINAPI * Real_WSARecvDisconnect)(SOCKET a0, LPWSABUF a1) = WSARecvDisconnect; int (WINAPI * Real_WSARecvFrom)(SOCKET a0, LPWSABUF a1, DWORD a2, LPDWORD a3, LPDWORD a4, sockaddr* a5, LPINT a6, LPWSAOVERLAPPED a7, LPWSAOVERLAPPED_COMPLETION_ROUTINE a8) = WSARecvFrom; BOOL (WINAPI * Real_WSAResetEvent)(HANDLE a0) = WSAResetEvent; int (WINAPI * Real_WSASend)(SOCKET a0, LPWSABUF a1, DWORD a2, LPDWORD a3, DWORD a4, LPWSAOVERLAPPED a5, LPWSAOVERLAPPED_COMPLETION_ROUTINE a6) = WSASend; int (WINAPI * Real_WSASendDisconnect)(SOCKET a0, LPWSABUF a1) = WSASendDisconnect; int (WINAPI * Real_WSASendTo)(SOCKET a0, LPWSABUF a1, DWORD a2, LPDWORD a3, DWORD a4, CONST sockaddr* a5, int a6, LPWSAOVERLAPPED a7, LPWSAOVERLAPPED_COMPLETION_ROUTINE a8) = WSASendTo; INT (WINAPI * Real_WSAStringToAddressA)(LPSTR a0, INT a1, LPWSAPROTOCOL_INFOA a2, LPSOCKADDR a3, LPINT a4) = WSAStringToAddressA; INT (WINAPI * Real_WSAStringToAddressW)(LPWSTR a0, INT a1, LPWSAPROTOCOL_INFOW a2, LPSOCKADDR a3, LPINT a4) = WSAStringToAddressW; DWORD (WINAPI * Real_WSAWaitForMultipleEvents)(DWORD a0, CONST HANDLE * a1, BOOL a2, DWORD a3, BOOL a4) = WSAWaitForMultipleEvents; SOCKET (WINAPI * Real_accept)(SOCKET a0, sockaddr* a1, int* a2) = accept; int (WINAPI * Real_closesocket)(SOCKET a0) = closesocket; int (WINAPI * Real_connect)(SOCKET a0, CONST sockaddr* a1, int a2) = connect; int (WINAPI * Real_listen)(SOCKET a0, int a1) = listen; int (WINAPI * Real_recv)(SOCKET a0, char* a1, int a2, int a3) = recv; int (WINAPI * Real_recvfrom)(SOCKET a0, char* a1, int a2, int a3, sockaddr* a4, int* a5) = recvfrom; int (WINAPI * Real_send)(SOCKET a0, CONST char* a1, int a2, int a3) = send; int (WINAPI * Real_sendto)(SOCKET a0, CONST char* a1, int a2, int a3, CONST sockaddr* a4, int a5) = sendto; int (WINAPI * Real_shutdown)(SOCKET a0, int a1) = shutdown; SECURITY_STATUS (SEC_ENTRY * Real_EncryptMessage)( PCtxtHandle phContext, unsigned long fQOP, PSecBufferDesc pMessage, unsigned long MessageSeqNo) = EncryptMessage; SECURITY_STATUS (SEC_ENTRY * Real_DecryptMessage)
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/tracessl/trcssl.cpp:70
FunctionHANDLE (WINAPI * Real_CreateFileW)(LPCWSTR a0, DWORD a1, DWORD a2, LPSECURITY_ATTRIBUTES a3, DWORD a4, DWORD a5, HANDLE a6) = CreateFileW; HANDLE (WINAPI * Real_CreateFileMappingW)(HANDLE hFile, LPSECURITY_ATTRIBUTES lpAttributes, DWORD flProtect, DWORD dwMaximumSizeHigh, DWORD dwMaximumSizeLow, LPCWSTR lpName ) = CreateFileMappingW; BOOL (WINAPI * Real_CreatePipe)(PHANDLE hReadPipe, PHANDLE hWritePipe, LPSECURITY_ATTRIBUTES lpPipeAttributes, DWORD nSize) = CreatePipe; BOOL (WINAPI * Real_CloseHandle)(HANDLE a0) = CloseHandle; BOOL (WINAPI * Real_DuplicateHandle)(HANDLE hSourceProcessHandle, HANDLE hSourceHandle, HANDLE hTargetProcessHandle, LPHANDLE lpTargetHandle, DWORD dwDesiredAccess, BOOL bInheritHandle, DWORD dwOptions) = DuplicateHandle; BOOL (WINAPI * Real_CreateProcessW)(LPCWSTR lpApplicationName, LPWSTR lpCommandLine, LPSECURITY_ATTRIBUTES lpProcessAttributes, LPSECURITY_ATTRIBUTES lpThreadAttributes, BOOL bInheritHandles, DWORD dwCreationFlags, LPVOID lpEnvironment, LPCWSTR lpCurrentDirectory, LPSTARTUPINFOW lpStartupInfo, LPPROCESS_INFORMATION lpProcessInformation) = CreateProcessW; BOOL (WINAPI * Real_CreateProcessA)(LPCSTR lpApplicationName, LPSTR lpCommandLine, LPSECURITY_ATTRIBUTES lpProcessAttributes, LPSECURITY_ATTRIBUTES lpThreadAttributes, BOOL bInheritHandles, DWORD dwCreationFlags, LPVOID lpEnvironment, LPCSTR lpCurrentDirectory, LPSTARTUPINFOA lpStartupInfo, LPPROCESS_INFORMATION lpProcessInformation) = CreateProcessA; BOOL (WINAPI * Real_DeleteFileW)(LPCWSTR a0) = DeleteFileW; BOOL (WINAPI * Real_DeviceIoControl)(HANDLE a0, DWORD dwIoControlCode, LPVOID lpInBuffer, DWORD nInBufferSize, LPVOID lpOutBuffer, DWORD nOutBufferSize, LPDWORD lpBytesReturned, LPOVERLAPPED lpOverlapped) = DeviceIoControl; DWORD (WINAPI * Real_GetFileAttributesW)(LPCWSTR a0) = GetFileAttributesW; BOOL (WINAPI * Real_MoveFileWithProgressW)(LPCWSTR lpExistingFileName, LPCWSTR lpNewFileName, LPPROGRESS_ROUTINE lpProgressRoutine, LPVOID lpData, DWORD dwFlags) = MoveFileWithProgressW; BOOL (WINAPI * Real_MoveFileA)(LPCSTR a0, LPCSTR a1) = MoveFileA; BOOL (WINAPI * Real_MoveFileW)(LPCWSTR a0, LPCWSTR a12) = MoveFileW; BOOL (WINAPI * Real_MoveFileExA)(LPCSTR a0, LPCSTR a1, DWORD a2) = MoveFileExA; BOOL (WINAPI * Real_MoveFileExW)(LPCWSTR a0, LPCWSTR a1, DWORD a2) = MoveFileExW; BOOL (WINAPI * Real_CopyFileExA)(LPCSTR a0, LPCSTR a1, LPPROGRESS_ROUTINE a2, LPVOID a4, LPBOOL a5, DWORD a6) = CopyFileExA; BOOL (WINAPI * Real_CopyFileExW)(LPCWSTR a0, LPCWSTR a1, LPPROGRESS_ROUTINE a2, LPVOID a4, LPBOOL a5, DWORD a6) = CopyFileExW; BOOL (WINAPI * Real_PrivCopyFileExW)(LPCWSTR lpExistingFileName, LPCWSTR lpNewFileName, LPPROGRESS_ROUTINE lpProgressRoutine, LPVOID lpData, LPBOOL pbCancel, DWORD dwCopyFlags) = NULL; BOOL (WINAPI * Real_CreateHardLinkA)(LPCSTR a0, LPCSTR a1, LPSECURITY_ATTRIBUTES a2) = CreateHardLinkA; BOOL (WINAPI * Real_CreateHardLinkW)(LPCWSTR a0, LPCWSTR a1, LPSECURITY_ATTRIBUTES a2) = CreateHardLinkW; BOOL (WINAPI * Real_SetStdHandle)(DWORD a0, HANDLE a1) = SetStdHandle; HMODULE (WINAPI * Real_LoadLibraryA)(LPCSTR a0) = LoadLibraryA; HMODULE (WINAPI * Real_LoadLibraryW)(LPCWSTR a0) = LoadLibraryW; HMODULE (WINAPI * Real_LoadLibraryExA)(LPCSTR a0, HANDLE a1, DWORD a2) = LoadLibraryExA; HMODULE (WINAPI * Real_LoadLibraryExW)(LPCWSTR a0, HANDLE a1, DWORD a2) = LoadLibraryExW; DWORD (WINAPI * Real_SetFilePointer)(HANDLE hFile, LONG lDistanceToMove, PLONG lpDistanceToMoveHigh, DWORD dwMoveMethod) = SetFilePointer; BOOL (WINAPI * Real_SetFilePointerEx)(HANDLE hFile, LARGE_INTEGER liDistanceToMove, PLARGE_INTEGER lpNewFilePointer, DWORD dwMoveMethod) = SetFilePointerEx; BOOL (WINAPI * Real_ReadFile)(HANDLE a0, LPVOID a1, DWORD a2, LPDWORD a3, LPOVERLAPPED a4) = ReadFile; BOOL (WINAPI * Real_ReadFileEx)(HANDLE a0, LPVOID a1, DWORD a2, LPOVERLAPPED a3, LPOVERLAPPED_COMPLETION_ROUTINE a4) = ReadFileEx; BOOL (WINAPI * Real_WriteFile)(HANDLE a0, LPCVOID a1, DWORD a2, LPDWORD a3, LPOVERLAPPED a4) = WriteFile; BOOL (WINAPI * Real_WriteFileEx)(HANDLE a0, LPCVOID a1, DWORD a2, LPOVERLAPPED a3, LPOVERLAPPED_COMPLETION_ROUTINE a4) = WriteFileEx; BOOL (WINAPI * Real_WriteConsoleA)(HANDLE a0, const VOID* a1, DWORD a2, LPDWORD a3, LPVOID a4) = WriteConsoleA; BOOL (WINAPI * Real_WriteConsoleW)(HANDLE a0, const VOID* a1, DWORD a2, LPDWORD a3, LPVOID a4) = WriteConsoleW; VOID (WINAPI * Real_ExitProcess)(UINT a0) = ExitProcess; DWORD (WINAPI * Real_ExpandEnvironmentStringsA)(PCSTR lpSrc, PCHAR lpDst, DWORD nSize) = ExpandEnvironmentStringsA; DWORD (WINAPI * Real_ExpandEnvironmentStringsW)(PCWSTR lpSrc, PWCHAR lpDst, DWORD nSize) = ExpandEnvironmentStringsW; DWORD (WINAPI * Real_GetEnvironmentVariableA)(PCSTR lpName, PCHAR lpBuffer, DWORD nSize) = GetEnvironmentVariableA; DWORD (WINAPI * Real_GetEnvironmentVariableW)(PCWSTR lpName, PWCHAR lpBuffer, DWORD nSize) = GetEnvironmentVariableW; PCWSTR (CDECL * Real_wgetenv)(PCWSTR var) = NULL; PCSTR (CDECL * Real_getenv)(PCSTR var) = NULL; DWORD (CDECL * Real_getenv_s)(DWORD *pValue, PCHAR pBuffer, DWORD cBuffer, PCSTR varname) = NULL; DWORD (CDECL * Real_wgetenv_s)(DWORD *pValue, PWCHAR pBuffer, DWORD cBuffer, PCWSTR varname) = NULL; DWORD (CDECL * Real_dupenv_s)(PCHAR *ppBuffer, DWORD *pcBuffer, PCSTR varname) = NULL; DWORD (CDECL * Real_wdupenv_s)
coding/projects/Hooking/Detours/detours/samples/tracebld/trcbld.cpp:114
FunctionHANDLE (WINAPI * Real_CreateFileW)(LPCWSTR a0, DWORD a1, DWORD a2, LPSECURITY_ATTRIBUTES a3, DWORD a4, DWORD a5, HANDLE a6) = CreateFileW; HANDLE (WINAPI * Real_CreateFileMappingW)(HANDLE hFile, LPSECURITY_ATTRIBUTES lpAttributes, DWORD flProtect, DWORD dwMaximumSizeHigh, DWORD dwMaximumSizeLow, LPCWSTR lpName ) = CreateFileMappingW; BOOL (WINAPI * Real_CreatePipe)(PHANDLE hReadPipe, PHANDLE hWritePipe, LPSECURITY_ATTRIBUTES lpPipeAttributes, DWORD nSize) = CreatePipe; BOOL (WINAPI * Real_CloseHandle)(HANDLE a0) = CloseHandle; BOOL (WINAPI * Real_DuplicateHandle)(HANDLE hSourceProcessHandle, HANDLE hSourceHandle, HANDLE hTargetProcessHandle, LPHANDLE lpTargetHandle, DWORD dwDesiredAccess, BOOL bInheritHandle, DWORD dwOptions) = DuplicateHandle; BOOL (WINAPI * Real_CreateProcessW)(LPCWSTR lpApplicationName, LPWSTR lpCommandLine, LPSECURITY_ATTRIBUTES lpProcessAttributes, LPSECURITY_ATTRIBUTES lpThreadAttributes, BOOL bInheritHandles, DWORD dwCreationFlags, LPVOID lpEnvironment, LPCWSTR lpCurrentDirectory, LPSTARTUPINFOW lpStartupInfo, LPPROCESS_INFORMATION lpProcessInformation) = CreateProcessW; BOOL (WINAPI * Real_CreateProcessA)(LPCSTR lpApplicationName, LPSTR lpCommandLine, LPSECURITY_ATTRIBUTES lpProcessAttributes, LPSECURITY_ATTRIBUTES lpThreadAttributes, BOOL bInheritHandles, DWORD dwCreationFlags, LPVOID lpEnvironment, LPCSTR lpCurrentDirectory, LPSTARTUPINFOA lpStartupInfo, LPPROCESS_INFORMATION lpProcessInformation) = CreateProcessA; BOOL (WINAPI * Real_DeleteFileW)(LPCWSTR a0) = DeleteFileW; BOOL (WINAPI * Real_DeviceIoControl)(HANDLE a0, DWORD dwIoControlCode, LPVOID lpInBuffer, DWORD nInBufferSize, LPVOID lpOutBuffer, DWORD nOutBufferSize, LPDWORD lpBytesReturned, LPOVERLAPPED lpOverlapped) = DeviceIoControl; DWORD (WINAPI * Real_GetFileAttributesW)(LPCWSTR a0) = GetFileAttributesW; BOOL (WINAPI * Real_MoveFileWithProgressW)(LPCWSTR lpExistingFileName, LPCWSTR lpNewFileName, LPPROGRESS_ROUTINE lpProgressRoutine, LPVOID lpData, DWORD dwFlags) = MoveFileWithProgressW; BOOL (WINAPI * Real_MoveFileA)(LPCSTR a0, LPCSTR a1) = MoveFileA; BOOL (WINAPI * Real_MoveFileW)(LPCWSTR a0, LPCWSTR a12) = MoveFileW; BOOL (WINAPI * Real_MoveFileExA)(LPCSTR a0, LPCSTR a1, DWORD a2) = MoveFileExA; BOOL (WINAPI * Real_MoveFileExW)(LPCWSTR a0, LPCWSTR a1, DWORD a2) = MoveFileExW; BOOL (WINAPI * Real_CopyFileExA)(LPCSTR a0, LPCSTR a1, LPPROGRESS_ROUTINE a2, LPVOID a4, LPBOOL a5, DWORD a6) = CopyFileExA; BOOL (WINAPI * Real_CopyFileExW)(LPCWSTR a0, LPCWSTR a1, LPPROGRESS_ROUTINE a2, LPVOID a4, LPBOOL a5, DWORD a6) = CopyFileExW; BOOL (WINAPI * Real_PrivCopyFileExW)(LPCWSTR lpExistingFileName, LPCWSTR lpNewFileName, LPPROGRESS_ROUTINE lpProgressRoutine, LPVOID lpData, LPBOOL pbCancel, DWORD dwCopyFlags) = NULL; BOOL (WINAPI * Real_CreateHardLinkA)(LPCSTR a0, LPCSTR a1, LPSECURITY_ATTRIBUTES a2) = CreateHardLinkA; BOOL (WINAPI * Real_CreateHardLinkW)(LPCWSTR a0, LPCWSTR a1, LPSECURITY_ATTRIBUTES a2) = CreateHardLinkW; BOOL (WINAPI * Real_SetStdHandle)(DWORD a0, HANDLE a1) = SetStdHandle; HMODULE (WINAPI * Real_LoadLibraryA)(LPCSTR a0) = LoadLibraryA; HMODULE (WINAPI * Real_LoadLibraryW)(LPCWSTR a0) = LoadLibraryW; HMODULE (WINAPI * Real_LoadLibraryExA)(LPCSTR a0, HANDLE a1, DWORD a2) = LoadLibraryExA; HMODULE (WINAPI * Real_LoadLibraryExW)(LPCWSTR a0, HANDLE a1, DWORD a2) = LoadLibraryExW; DWORD (WINAPI * Real_SetFilePointer)(HANDLE hFile, LONG lDistanceToMove, PLONG lpDistanceToMoveHigh, DWORD dwMoveMethod) = SetFilePointer; BOOL (WINAPI * Real_SetFilePointerEx)(HANDLE hFile, LARGE_INTEGER liDistanceToMove, PLARGE_INTEGER lpNewFilePointer, DWORD dwMoveMethod) = SetFilePointerEx; BOOL (WINAPI * Real_ReadFile)(HANDLE a0, LPVOID a1, DWORD a2, LPDWORD a3, LPOVERLAPPED a4) = ReadFile; BOOL (WINAPI * Real_ReadFileEx)(HANDLE a0, LPVOID a1, DWORD a2, LPOVERLAPPED a3, LPOVERLAPPED_COMPLETION_ROUTINE a4) = ReadFileEx; BOOL (WINAPI * Real_WriteFile)(HANDLE a0, LPCVOID a1, DWORD a2, LPDWORD a3, LPOVERLAPPED a4) = WriteFile; BOOL (WINAPI * Real_WriteFileEx)(HANDLE a0, LPCVOID a1, DWORD a2, LPOVERLAPPED a3, LPOVERLAPPED_COMPLETION_ROUTINE a4) = WriteFileEx; BOOL (WINAPI * Real_WriteConsoleA)(HANDLE a0, const VOID* a1, DWORD a2, LPDWORD a3, LPVOID a4) = WriteConsoleA; BOOL (WINAPI * Real_WriteConsoleW)(HANDLE a0, const VOID* a1, DWORD a2, LPDWORD a3, LPVOID a4) = WriteConsoleW; VOID (WINAPI * Real_ExitProcess)(UINT a0) = ExitProcess; DWORD (WINAPI * Real_ExpandEnvironmentStringsA)(PCSTR lpSrc, PCHAR lpDst, DWORD nSize) = ExpandEnvironmentStringsA; DWORD (WINAPI * Real_ExpandEnvironmentStringsW)(PCWSTR lpSrc, PWCHAR lpDst, DWORD nSize) = ExpandEnvironmentStringsW; DWORD (WINAPI * Real_GetEnvironmentVariableA)(PCSTR lpName, PCHAR lpBuffer, DWORD nSize) = GetEnvironmentVariableA; DWORD (WINAPI * Real_GetEnvironmentVariableW)(PCWSTR lpName, PWCHAR lpBuffer, DWORD nSize) = GetEnvironmentVariableW; PCWSTR (CDECL * Real_wgetenv)(PCWSTR var) = NULL; PCSTR (CDECL * Real_getenv)(PCSTR var) = NULL; DWORD (CDECL * Real_getenv_s)(DWORD *pValue, PCHAR pBuffer, DWORD cBuffer, PCSTR varname) = NULL; DWORD (CDECL * Real_wgetenv_s)(DWORD *pValue, PWCHAR pBuffer, DWORD cBuffer, PCWSTR varname) = NULL; DWORD (CDECL * Real_dupenv_s)(PCHAR *ppBuffer, DWORD *pcBuffer, PCSTR varname) = NULL; DWORD (CDECL * Real_wdupenv_s)
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/tracebld/trcbld.cpp:114
FunctionHANDLE (WINAPI *Real_CreateFileW)(LPCWSTR a0, DWORD a1, DWORD a2, LPSECURITY_ATTRIBUTES a3, DWORD a4, DWORD a5, HANDLE a6); extern BOOL (WINAPI *Real_WriteFile)(HANDLE hFile, LPCVOID lpBuffer, DWORD nNumberOfBytesToWrite, LPDWORD lpNumberOfBytesWritten, LPOVERLAPPED lpOverlapped); extern BOOL (WINAPI *Real_FlushFileBuffers)(HANDLE hFile); extern BOOL (WINAPI *Real_CloseHandle)(HANDLE hObject); extern BOOL (WINAPI *Real_WaitNamedPipeW)(LPCWSTR lpNamedPipeName, DWORD nTimeOut); extern BOOL (WINAPI *Real_SetNamedPipeHandleState)(HANDLE hNamedPipe, LPDWORD lpMode, LPDWORD lpMaxCollectionCount, LPDWORD lpCollectDataTimeout); extern DWORD (WINAPI *Real_GetCurrentProcessId)(VOID); extern VOID (WINAPI *Real_GetSystemTimeAsFileTime)(LPFILETIME lpSystemTimeAsFileTime); VOID ( WINAPI * Real_InitializeCriticalSection)(LPCRITICAL_SECTION lpSection) = InitializeCriticalSection; VOID ( WINAPI * Real_EnterCriticalSection)(LPCRITICAL_SECTION lpSection) = EnterCriticalSection; VOID ( WINAPI * Real_LeaveCriticalSection)
Trampolines for SYELOG library.
coding/projects/Hooking/Detours/detours/samples/traceapi/trcapi.cpp:87
FunctionHANDLE (WINAPI *Real_CreateFileW)(LPCWSTR a0, DWORD a1, DWORD a2, LPSECURITY_ATTRIBUTES a3, DWORD a4, DWORD a5, HANDLE a6); extern BOOL (WINAPI *Real_WriteFile)(HANDLE hFile, LPCVOID lpBuffer, DWORD nNumberOfBytesToWrite, LPDWORD lpNumberOfBytesWritten, LPOVERLAPPED lpOverlapped); extern BOOL (WINAPI *Real_FlushFileBuffers)(HANDLE hFile); extern BOOL (WINAPI *Real_CloseHandle)(HANDLE hObject); extern BOOL (WINAPI *Real_WaitNamedPipeW)(LPCWSTR lpNamedPipeName, DWORD nTimeOut); extern BOOL (WINAPI *Real_SetNamedPipeHandleState)(HANDLE hNamedPipe, LPDWORD lpMode, LPDWORD lpMaxCollectionCount, LPDWORD lpCollectDataTimeout); extern DWORD (WINAPI *Real_GetCurrentProcessId)(VOID); extern VOID (WINAPI *Real_GetSystemTimeAsFileTime)(LPFILETIME lpSystemTimeAsFileTime); VOID ( WINAPI * Real_InitializeCriticalSection)(LPCRITICAL_SECTION lpSection) = InitializeCriticalSection; VOID ( WINAPI * Real_EnterCriticalSection)(LPCRITICAL_SECTION lpSection) = EnterCriticalSection; VOID ( WINAPI * Real_LeaveCriticalSection)
Trampolines for SYELOG library.
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/traceapi/trcapi.cpp:87
MethodHash
coding/projects/Hooking/Detours/detours/samples/tracebld/trcbld.cpp:537
MethodHash
coding/projects/Hooking/Detours/detours/samples/tracebld/trcbld.cpp:989
MethodHash
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/tracebld/trcbld.cpp:537
MethodHash
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/tracebld/trcbld.cpp:989
MethodHashFunction
(string name)
coding/projects/VeraCryptPasswordStealer/sRDI/DotNet/Program.cs:482
MethodHashFunction
(string name)
coding/projects/Dropper_AES_Reflected_DLL_MapView_Explorer/sRDI/DotNet/Program.cs:482
MethodHashFunction
(string name)
coding/projects/ReflectiveCode/Shellcode_ReflectiveDLL_Loader/sRDI/DotNet/Program.cs:482
FunctionHidden
coding/projects/Hooking/Detours/detours/samples/findfunc/target.cpp:14
FunctionHidden
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/findfunc/target.cpp:14
FunctionHookedMessageBox
Hooking function
coding/projects/Hooking/Detours/hookem.cpp:13
FunctionHookedMessageBox
Hooking function
coding/projects/Hooking/InLine_Patching/hookem.cpp:19
FunctionHookedMessageBox
Hooking function
coding/projects/Hooking/IAT/hookem.cpp:14
FunctionHookedWideCharToMultiByte
Hooking function
coding/projects/VeraCryptPasswordStealer/VCsniff/VCsniff.cpp:24
FunctionImportFileCallback
coding/projects/Hooking/Detours/detours/samples/tracebld/trcbld.cpp:473
FunctionImportFileCallback
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/tracebld/trcbld.cpp:473
MethodInitObject
coding/projects/Hooking/Detours/detours/samples/cping/cping.cpp:1165
MethodInitObject
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/cping/cping.cpp:1165
MethodInitSystem
coding/projects/Hooking/Detours/detours/samples/cping/cping.cpp:1140
MethodInitSystem
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/cping/cping.cpp:1140
MethodInitialize
coding/projects/Hooking/Detours/detours/samples/tracebld/trcbld.cpp:585
MethodInitialize
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/tracebld/trcbld.cpp:585
FunctionInject
classic injection
coding/projects/WoW64/implant.cpp:161
FunctionInject
classic injection
coding/projects/VeraCryptPasswordStealer/VCmigrate/vcmigrate.cpp:107
FunctionInstanceEnumerate
coding/projects/Hooking/Detours/detours/samples/traceapi/trcapi.cpp:285
FunctionInstanceEnumerate
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/traceapi/trcapi.cpp:285
FunctionIntern
Intern is a detour for Hidden.
coding/projects/Hooking/Detours/detours/samples/findfunc/extend.cpp:34
FunctionIntern
Intern is a detour for Hidden.
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/findfunc/extend.cpp:34
MethodIsWow64Process
(Int32 hProcess)
coding/projects/VeraCryptPasswordStealer/sRDI/DotNet/Program.cs:94
MethodIsWow64Process
(Int32 hProcess)
coding/projects/Dropper_AES_Reflected_DLL_MapView_Explorer/sRDI/DotNet/Program.cs:94
MethodIsWow64Process
(Int32 hProcess)
coding/projects/ReflectiveCode/Shellcode_ReflectiveDLL_Loader/sRDI/DotNet/Program.cs:94
FunctionLPVOID (WINAPI * pVirtualAllocEx)( HANDLE hProcess, LPVOID lpAddress, SIZE_T dwSize, DWORD flAllocationType, DWORD flProtect ); BOOL (WINAPI * pWriteProcessMemory)( HANDLE hProcess, LPVOID lpBaseAddress, LPCVOID lpBuffer, SIZE_T nSize, SIZE_T *lpNumberOfBytesWritten ); HANDLE (WINAPI * pCreateRemoteThread)( HANDLE hProcess, LPSECURITY_ATTRIBUTES lpThreadAttributes, SIZE_T dwStackSize, LPTHREAD_START_ROUTINE lpStartAddress, LPVOID lpParameter, DWORD dwCreationFlags, LPDWORD lpThreadId ); LPVOID (WINAPI * pVirtualAlloc)( LPVOID lpAddress, SIZE_T dwSize, DWORD flAllocationType, DWORD flProtect ); HANDLE (WINAPI * pCreateToolhelp32Snapshot)( DWORD dwFlags, DWORD th32ProcessID ); BOOL (WINAPI * pProcess32First)( HANDLE hSnapshot, LPPROCESSENTRY32 lppe ); BOOL (WINAPI * pProcess32Next)( HANDLE hSnapshot, LPPROCESSENTRY32 lppe ); HRSRC (WINAPI * pFindResourceA)( HMODULE hModule, LPCSTR lpName, LPCSTR lpType ); HGLOBAL (WINAPI * pLoadResource)( HMODULE hModule, HRSRC hResInfo ); LPVOID (WINAPI * pLockResource)( HGLOBAL hResData ); DWORD (WINAPI * pSizeofResource)( HMODULE hModule, HRSRC hResInfo ); VOID (WINAPI * pRtlMoveMemory)( VOID UNALIGNED *Destination, VOID UNALIGNED *Source, SIZE_T Length ); BOOL (WINAPI * pCloseHandle)( HANDLE hObject ); DWORD (WINAPI * pWaitForSingleObject)( HANDLE hHandle, DWORD dwMilliseconds ); HANDLE (WINAPI * pOpenProcess)
coding/projects/Dropper_AES_Favicon_Notepad/implant.cpp:12
FunctionLPVOID (WINAPI * pVirtualAllocEx)( HANDLE hProcess, LPVOID lpAddress, SIZE_T dwSize, DWORD flAllocationType, DWORD flProtect ); BOOL (WINAPI * pWriteProcessMemory)( HANDLE hProcess, LPVOID lpBaseAddress, LPCVOID lpBuffer, SIZE_T nSize, SIZE_T *lpNumberOfBytesWritten ); HANDLE (WINAPI * pCreateRemoteThread)( HANDLE hProcess, LPSECURITY_ATTRIBUTES lpThreadAttributes, SIZE_T dwStackSize, LPTHREAD_START_ROUTINE lpStartAddress, LPVOID lpParameter, DWORD dwCreationFlags, LPDWORD lpThreadId ); LPVOID (WINAPI * pVirtualAlloc)( LPVOID lpAddress, SIZE_T dwSize, DWORD flAllocationType, DWORD flProtect ); HANDLE (WINAPI * pCreateToolhelp32Snapshot)( DWORD dwFlags, DWORD th32ProcessID ); BOOL (WINAPI * pProcess32First)( HANDLE hSnapshot, LPPROCESSENTRY32 lppe ); BOOL (WINAPI * pProcess32Next)( HANDLE hSnapshot, LPPROCESSENTRY32 lppe ); HRSRC (WINAPI * pFindResourceA)( HMODULE hModule, LPCSTR lpName, LPCSTR lpType ); HGLOBAL (WINAPI * pLoadResource)( HMODULE hModule, HRSRC hResInfo ); LPVOID (WINAPI * pLockResource)( HGLOBAL hResData ); DWORD (WINAPI * pSizeofResource)( HMODULE hModule, HRSRC hResInfo ); VOID (WINAPI * pRtlMoveMemory)( VOID UNALIGNED *Destination, VOID UNALIGNED *Source, SIZE_T Length ); BOOL (WINAPI * pCloseHandle)( HANDLE hObject ); DWORD (WINAPI * pWaitForSingleObject)( HANDLE hHandle, DWORD dwMilliseconds ); HANDLE (WINAPI * pOpenProcess)
coding/projects/Dropper_XOR_Favicon_Notepad/implant.cpp:8
FunctionListByway
/////////////////////////////////////////////////////////////////////////
coding/projects/Hooking/Detours/detours/samples/impmunge/impmunge.cpp:43
FunctionListByway
/////////////////////////////////////////////////////////////////////////
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/impmunge/impmunge.cpp:43
FunctionListBywayCallback
/////////////////////////////////////////////////////////////////////////
coding/projects/Hooking/Detours/detours/samples/setdll/setdll.cpp:77
FunctionListBywayCallback
/////////////////////////////////////////////////////////////////////////
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/setdll/setdll.cpp:77
FunctionListCommit
coding/projects/Hooking/Detours/detours/samples/impmunge/impmunge.cpp:96
FunctionListCommit
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/impmunge/impmunge.cpp:96
FunctionListFile
coding/projects/Hooking/Detours/detours/samples/impmunge/impmunge.cpp:54
FunctionListFile
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/impmunge/impmunge.cpp:54
FunctionListFileCallback
coding/projects/Hooking/Detours/detours/samples/setdll/setdll.cpp:90
FunctionListFileCallback
coding/projects/Hooking/Detours/detours/samples/dumpi/dumpi.cpp:40
FunctionListFileCallback
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/setdll/setdll.cpp:90
FunctionListFileCallback
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/dumpi/dumpi.cpp:40
FunctionListSymbol
coding/projects/Hooking/Detours/detours/samples/impmunge/impmunge.cpp:68
FunctionListSymbol
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/impmunge/impmunge.cpp:68
FunctionListSymbolCallback
coding/projects/Hooking/Detours/detours/samples/dumpi/dumpi.cpp:59
FunctionListSymbolCallback
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/dumpi/dumpi.cpp:59
MethodLoadLibrary
(string lpFileName)
coding/projects/Hooking/Detours/detours/samples/tryman/managed.cs:14
MethodLoadLibrary
(string dllToLoad)
coding/projects/VeraCryptPasswordStealer/sRDI/DotNet/Program.cs:25
MethodLoadLibrary
(string lpFileName)
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/tryman/managed.cs:14
MethodLoadLibrary
(string dllToLoad)
coding/projects/Dropper_AES_Reflected_DLL_MapView_Explorer/sRDI/DotNet/Program.cs:25
MethodLoadLibrary
(string dllToLoad)
coding/projects/ReflectiveCode/Shellcode_ReflectiveDLL_Loader/sRDI/DotNet/Program.cs:25
MethodLock
coding/projects/Hooking/Detours/detours/samples/cping/cping.cpp:1178
MethodLock
coding/projects/VeraCryptPasswordStealer/VCsniff/detours/samples/cping/cping.cpp:1178
MethodLockAcquire
coding/projects/Hooking/Detours/detours/samples/tracebld/trcbld.cpp:550
MethodLockAcquire
coding/projects/Hooking/Detours/detours/samples/tracebld/trcbld.cpp:877
MethodLockAcquire
coding/projects/Hooking/Detours/detours/samples/tracebld/trcbld.cpp:1002
← previousnext →1,001–1,100 of 1,919, ranked by callers