ADVAPI32.dll
Binaryfile(standardinput)matches
CRYPT32.dll
GDI32.dll
KERNEL32.dll
PSAPI.DLL
SHELL32.dll
SHLWAPI.dll
USER32.dll
VERSION.dll
WINTRUST.dll
rooksbas.dll
??0rooksdol_extension@rooksdol@@IAE@XZ ??0rooksdol_extension@rooksdol@@QAE@ABV01@@Z ??0rooksdol_intf10@rooksdol@@QAE@ABV01@@Z ??0rooksdol_intf10@rooksdol@@QAE@XZ ??0rooksdol_intf4@rooksdol@@QAE@ABV01@@Z ??0rooksdol_intf4@rooksdol@@QAE@XZ ??0rooksdol_intf5@rooksdol@@QAE@ABV01@@Z ??0rooksdol_intf5@rooksdol@@QAE@XZ ??0rooksdol_intf6@rooksdol@@QAE@ABV01@@Z ??0rooksdol_intf6@rooksdol@@QAE@XZ ??0rooksdol_intf7@rooksdol@@QAE@ABV01@@Z ??0rooksdol_intf7@rooksdol@@QAE@XZ ??0rooksdol_intf8@rooksdol@@QAE@ABV01@@Z ??0rooksdol_intf8@rooksdol@@QAE@XZ ??0rooksdol_intf9@rooksdol@@QAE@ABV01@@Z ??0rooksdol_intf9@rooksdol@@QAE@XZ ??0rooksdol_rook@rooksdol@@IAE@PAVrooks_extension@rooksbase@@@Z ??0rooksdol_rook@rooksdol@@IAE@PBDPAVrooks_extension@rooksbase@@@Z ??0rooksdol_rook@rooksdol@@QAE@ABV01@@Z ??0wndsubclass_rook@rooksdol@@IAE@PAVrooks_extension@rooksbase@@@Z ??0wndsubclass_rook@rooksdol@@IAE@PBDPAVrooks_extension@rooksbase@@@Z ??0wndsubclass_rook@rooksdol@@QAE@ABV01@@Z ??1rooksdol_rook@rooksdol@@UAE@XZ ??1wndsubclass_rook@rooksdol@@UAE@XZ ??4rooksdol_extension@rooksdol@@QAEAAV01@ABV01@@Z ??4rooksdol_intf10@rooksdol@@QAEAAV01@ABV01@@Z ??4rooksdol_intf4@rooksdol@@QAEAAV01@ABV01@@Z ??4rooksdol_intf5@rooksdol@@QAEAAV01@ABV01@@Z ??4rooksdol_intf6@rooksdol@@QAEAAV01@ABV01@@Z ??4rooksdol_intf7@rooksdol@@QAEAAV01@ABV01@@Z ??4rooksdol_intf8@rooksdol@@QAEAAV01@ABV01@@Z ??4rooksdol_intf9@rooksdol@@QAEAAV01@ABV01@@Z ??4rooksdol_rook@rooksdol@@QAEAAV01@ABV01@@Z ??4wndsubclass_rook@rooksdol@@QAEAAV01@ABV01@@Z ??_7rooksdol_extension@rooksdol@@6Brooks_extension@rooksbase@@@ ??_7rooksdol_extension@rooksdol@@6Brooks_extension_check_point@rooksbase@@@ ??_7rooksdol_extension@rooksdol@@6Brooksdol_intf10@1@@ ??_7rooksdol_extension@rooksdol@@6Brooksdol_intf2@1@@ ??_7rooksdol_extension@rooksdol@@6Brooksdol_intf3@1@@ ??_7rooksdol_extension@rooksdol@@6Brooksdol_intf4@1@@ ??_7rooksdol_extension@rooksdol@@6Brooksdol_intf5@1@@ ??_7rooksdol_extension@rooksdol@@6Brooksdol_intf6@1@@ ??_7rooksdol_extension@rooksdol@@6Brooksdol_intf9@1@@ ??_7rooksdol_intf10@rooksdol@@6B@ ??_7rooksdol_intf4@rooksdol@@6B@ ??_7rooksdol_intf5@rooksdol@@6B@ ??_7rooksdol_intf6@rooksdol@@6B@ ??_7rooksdol_intf7@rooksdol@@6B@ ??_7rooksdol_intf8@rooksdol@@6B@ ??_7rooksdol_intf9@rooksdol@@6B@ ??_7rooksdol_rook@rooksdol@@6Brook@rooksbase@@@ ??_7rooksdol_rook@rooksdol@@6Brook_check_point@rooksbase@@@ ??_7wndsubclass_rook@rooksdol@@6B@ ??_7wndsubclass_rook@rooksdol@@6Brook@rooksbase@@@ ??_7wndsubclass_rook@rooksdol@@6Brook_check_point@rooksbase@@@ ?_rooksdol_extension_instance@rooksdol_extension@rooksdol@@0PAV12@A ?create_rook@rooksdol_extension@rooksdol@@UAEPAVrook@rooksbase@@PBD@Z ?dll_process_detach@rooksdol_extension@rooksdol@@QAEX_N@Z ?enum_hooks@@YAXP6AHPBD0PAXPAPAX1@Z1@Z ?fnhook_set_hooked_fn_addr@rooksdol_extension@rooksdol@@QAE_NPBDPAX@Z ?get_doll_extension_version@rooksdol_extension@rooksdol@@UAEKXZ ?get_doll_extension_version@rooksdol_intf4@rooksdol@@UAEKXZ ?get_doll_extension_version@rooksdol_intf5@rooksdol@@UAEKXZ ?get_doll_extension_version@rooksdol_intf6@rooksdol@@UAEKXZ ?get_doll_extension_version@rooksdol_intf8@rooksdol@@UAEKXZ ?get_doll_extension_version@rooksdol_intf9@rooksdol@@UAEKXZ ?get_extension_instance@rooksdol_extension@rooksdol@@SAPAV12@XZ ?get_hooked_code@rooksdol_extension@rooksdol@@UAEXPAPAXPAK@Z ?get_hooking_monitor@rooksdol_extension@rooksdol@@QAEPAVhooking_monitor@@XZ ?get_host@rooksdol_extension@rooksdol@@UAEPAVrooks_extension_host@rooksbase@@XZ ?get_id@rooksdol_extension@rooksdol@@UAE_NPADH@Z ?get_scope_process@wndsubclass_rook@rooksdol@@UAEPBDXZ ?get_subclass@wndsubclass_rook@rooksdol@@AAEPAVwndsubclass@2@XZ ?get_subclass@wndsubclass_rook@rooksdol@@CAPAVwndsubclass@2@ABVrooksdb_string@rooksbase@@@Z ?ietrack_get_web_browser_vtbls@rooksdol_extension@rooksdol@@QAEPAUietracker_web_browser_vtbls@2@XZ ?ietrack_notify_existing_browsers@rooksdol_extension@rooksdol@@QAEXP6G_NPAUIWebBrowser2@@HPAX@Z@Z ?install_hooking_monitor@rooksdol_extension@rooksdol@@UAEXPAVhooking_monitor@@@Z ?is_check_point_suitable@rooksdol_rook@rooksdol@@MBE_NPBD@Z ?is_process_terminating@rooksdol_extension@rooksdol@@QAE_NXZ ?on_init@rooksdol_extension@rooksdol@@MAEXPAVrooks_extension_host@rooksbase@@@Z ?on_load@rooksdol_extension@rooksdol@@MAEXPAVrooks_extension_host@rooksbase@@@Z ?on_shutdown@rooksdol_extension@rooksdol@@MAEXXZ ?realize_rook@rooksdol_extension@rooksdol@@UAEXPAVrook@rooksbase@@QAVrook_sink@4@H@Z ?realize_rook@rooksdol_extension@rooksdol@@UAEXPAVrook@rooksbase@@QAVrook_sink@4@HPBD@Z ?realize_rook@wndsubclass_rook@rooksdol@@MAEXQAVrook_sink@rooksbase@@HPBD@Z ?renew_hooks_for_fn@rooksdol_extension@rooksdol@@UAEXPBD0@Z ?rooksdol_fnhook_hook@@YAXPAVrooks_db@rooksbase@@PBD1PAUROOKSDOL_FNHOOK_ROOK_SINK@@@Z ?rooksdol_fnhook_phook@@YAXPAVrooks_db@rooksbase@@PBD1PAX1PAUROOKSDOL_FNHOOK_ROOK_SINK@@@Z ?rooksdol_fnhook_unhook@@YAXPAVrooks_db@rooksbase@@PBD1PAUROOKSDOL_FNHOOK_ROOK_SINK@@@Z ?rooksdol_rooksctl_handler@rooksdol_extension@rooksdol@@SAXHH@Z ?rooksdol_rooksuninject_handler@rooksdol_extension@rooksdol@@SAXH@Z ?serialize@wndsubclass_rook@rooksdol@@MAEXAAVrooksdb_archive@rooksbase@@@Z ?set_execution_services_provider@rooksdol_extension@rooksdol@@UAEXPAUexecution_services_provider@2@@Z ?set_extension_env@rooksdol_intf5@rooksdol@@UAEXPAUenvironment@@@Z ?set_extension_env@rooksdol_intf6@rooksdol@@UAEXPAUenvironment@@@Z ?set_persistent_subclassing@wndsubclass_rook@rooksdol@@QAEX_N@Z ?signal_rooksdol@rooksdol_extension@rooksdol@@UAE_NFP6AHKPAX@Z0@Z ?subclass_window@wndsubclass_rook@rooksdol@@QAEXPAUHWND__@@PAX@Z ?unsubclass_window@wndsubclass_rook@rooksdol@@QAEXPAUHWND__@@@Z ?wndsubclass_subclass_window@rooksdol_extension@rooksdol@@QAEXPBDPAUHWND__@@PAX@Z ?wndsubclass_unsubclass_all@rooksdol_extension@rooksdol@@QAEXPBD@Z ?wndsubclass_unsubclass_window@rooksdol_extension@rooksdol@@QAEXPBDPAUHWND__@@@Z _Agent_OnLoad@12 begin_fnhook_chelper_hooking end_fnhook_chelper_hooking get_delayed_fnhk_rook_id get_fnhk_rook_id get_fnhk_rook_id_late on_construct_sink on_resolve_sink rooks_ext_get_rooks_extension rooksdol_fnhook_chelper_hook rooksdol_fnhook_chelper_phook rooksdol_fnhook_chelper_unhook update_memory_allocator