Generated by JEB on 2019/08/01

PE: C:\Windows\System32\oleacchooks.dll Base=0x180000000 SHA-256=0FC6F5D81D530B2E016C2678C73979D306994C00DE225191AE9EFB874C518BBD
PDB: oleacchooks.pdb GUID={3596A9F8-AC67-DB28-9C959869708C72DD} Age=1

134 located named symbols:
0x180001A6C: "__cdecl _raise_securityfailure" __raise_securityfailure
0x180006008: "__cdecl _imp_CallNextHookEx" __imp_CallNextHookEx
0x180001880: "__cdecl FindPESection" _FindPESection
0x1800012E0: "__cdecl _delayLoadHelper2" __delayLoadHelper2
0x180004010: "__cdecl _security_cookie_complement" __security_cookie_complement
0x18000135C: "__cdecl CRT_INIT" _CRT_INIT
0x1800031A8: "__cdecl _imp_GetCurrentThreadId" __imp_GetCurrentThreadId
0x180001D70: "__cdecl guard_dispatch_icall_nop" _guard_dispatch_icall_nop
0x180003338: "__cdecl _pfnDliFailureHook2" __pfnDliFailureHook2
0x180003270: "__cdecl _guard_dispatch_icall_fptr" __guard_dispatch_icall_fptr
0x180001864: "__cdecl XcptFilter" _XcptFilter
0x180003278: "__cdecl _xc_a" __xc_a
0x1800032C0: "__cdecl _guard_iat_table" __guard_iat_table
0x1800032D0: "__cdecl _sz_USER32_dll" __sz_USER32_dll
0x1800037F0: USER32_NULL_THUNK_DATA_DLN
0x180006010: USER32_NULL_THUNK_DATA_DLA
0x180001A3F: "__cdecl initterm" _initterm
0x180003830: USER32_NULL_THUNK_DATA_DLB
0x180003944: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-sysinfo-l1-1-0
0x1800045D0: "__cdecl _dyn_tls_init_callback" __dyn_tls_init_callback
0x180003200: "__cdecl _imp_Sleep" __imp_Sleep
0x180003298: "__cdecl _xi_z" __xi_z
0x1800032E0: "WM_OLEACC_HOOK" ??_C@_1BO@LMKGBKMF@?$AAW?$AAM?$AA_?$AAO?$AAL?$AAE?$AAA?$AAC?$AAC?$AA_?$AAH?$AAO?$AAO?$AAK?$AA?$AA@
0x180003138: "__cdecl _imp_UnhandledExceptionFilter" __imp_UnhandledExceptionFilter
0x180001A4B: "__cdecl _C_specific_handler" __C_specific_handler
0x180003160: api-ms-win-core-handle-l1-1-0_NULL_THUNK_DATA
0x180001CF8: "__cdecl _GSHandlerCheckCommon" __GSHandlerCheckCommon
0x1800045A8: "__cdecl _@@_PchSym_@00@KxulyqvxgPillgKxudrmwldhUlovzxxUlovzxxsllphUlyquivUznwGEUkivxlnkOlyq@oleacchooks" __@@_PchSym_@00@KxulyqvxgPillgKxudrmwldhUlovzxxUlovzxxsllphUlyquivUznwGEUkivxlnkOlyq@oleacchooks
0x180001870: "__cdecl amsg_exit" _amsg_exit
0x180003330: "__cdecl _DefaultResolveDelayLoadedAPIFlags" __DefaultResolveDelayLoadedAPIFlags
0x180003148: api-ms-win-core-errorhandling-l1-1-0_NULL_THUNK_DATA
0x1800031A0: "__cdecl _imp_GetCurrentProcess" __imp_GetCurrentProcess
0x1800045C0: "__cdecl _native_startup_lock" __native_startup_lock
0x180001008: DllMain
0x180003228: "__cdecl _imp___C_specific_handler" __imp___C_specific_handler
0x1800031E0: "__cdecl _imp_RtlCaptureContext" __imp_RtlCaptureContext
0x180003170: api-ms-win-core-libraryloader-l1-2-0_NULL_THUNK_DATA
0x180003158: "__cdecl _imp_DuplicateHandle" __imp_DuplicateHandle
0x180004000: "__cdecl _native_dllmain_reason" __native_dllmain_reason
0x180001CD4: "__cdecl _GSHandlerCheck" __GSHandlerCheck
0x18000396C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-0
0x1800031B0: "__cdecl _imp_GetCurrentProcessId" __imp_GetCurrentProcessId
0x180003330: "__cdecl _ResolveDelayLoadedAPIFlags" __ResolveDelayLoadedAPIFlags
0x180001930: "__cdecl ValidateImageBase" _ValidateImageBase
0x1800038B8: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-libraryloader-l1-2-0
0x18000107C: "void __cdecl HandleHookMessage(struct tagCWPSTRUCT * __ptr64)" ?HandleHookMessage@@YAXPEAUtagCWPSTRUCT@@@Z
0x1800037BC: "__cdecl _NULL_DELAY_IMPORT_DESCRIPTOR" __NULL_DELAY_IMPORT_DESCRIPTOR
0x1800031C0: "__cdecl _imp_OpenProcess" __imp_OpenProcess
0x1800015A0: "__cdecl DllMainCRTStartup" _DllMainCRTStartup
0x180003230: "__cdecl _imp__initterm" __imp__initterm
0x180003958: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-delayload-l1-1-1
0x1800045A0: "__cdecl _hmod__USER32_dll" __hmod__USER32_dll
0x180006000: "__cdecl _imp_RegisterWindowMessageW" __imp_RegisterWindowMessageW
0x1800045AC: "unsigned int uWM_OLEACC_HOOK" ?uWM_OLEACC_HOOK@@3IA
0x1800045B0: "__cdecl _onexitend" __onexitend
0x180003268: "__cdecl _guard_check_icall_fptr" __guard_check_icall_fptr
0x180003198: "__cdecl _imp_TerminateProcess" __imp_TerminateProcess
0x180003220: api-ms-win-core-sysinfo-l1-1-0_NULL_THUNK_DATA
0x180003288: "__cdecl _xi_a" __xi_a
0x1800031C8: api-ms-win-core-processthreads-l1-1-1_NULL_THUNK_DATA
0x180003218: "__cdecl _imp_GetTickCount" __imp_GetTickCount
0x180003128: "__cdecl _imp_ResolveDelayLoadedAPI" __imp_ResolveDelayLoadedAPI
0x180001C36: "__cdecl _imp_load_CallNextHookEx" __imp_load_CallNextHookEx
0x180001C42: "__cdecl _tailMerge_user32_dll" __tailMerge_user32_dll
0x1800038F4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-0
0x1800038E0: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1" __IMPORT_DESCRIPTOR_api-ms-win-core-processthreads-l1-1-1
0x180003190: api-ms-win-core-memory-l1-1-0_NULL_THUNK_DATA
0x1800045D8: "__cdecl pRawDllMain" _pRawDllMain
0x180001840: "__cdecl _security_check_cookie" __security_check_cookie
0x180003280: "__cdecl _xc_z" __xc_z
0x1800031B8: api-ms-win-core-processthreads-l1-1-0_NULL_THUNK_DATA
0x180003210: "__cdecl _imp_GetSystemTimeAsFileTime" __imp_GetSystemTimeAsFileTime
0x18000379C: "__cdecl _DELAY_IMPORT_DESCRIPTOR_USER32_dll" __DELAY_IMPORT_DESCRIPTOR_USER32_dll
0x180003118: "__cdecl _imp_DelayLoadFailureHook" __imp_DelayLoadFailureHook
0x180003178: "__cdecl _imp_UnmapViewOfFile" __imp_UnmapViewOfFile
0x1800031F8: api-ms-win-core-rtlsupport-l1-1-0_NULL_THUNK_DATA
0x18000391C: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-rtlsupport-l1-1-0
0x1800031D8: api-ms-win-core-profile-l1-1-0_NULL_THUNK_DATA
0x1800032A0: "__cdecl _guard_fids_table" __guard_fids_table
0x180001030: OleAccHook_CallWndProc
0x180003260: msvcrt_NULL_THUNK_DATA
0x180003010: "__cdecl load_config_used" _load_config_used
0x180003130: api-ms-win-core-delayload-l1-1-1_NULL_THUNK_DATA
0x180003120: api-ms-win-core-delayload-l1-1-0_NULL_THUNK_DATA
0x180003250: "__cdecl _imp__amsg_exit" __imp__amsg_exit
0x180003168: "__cdecl _imp_DisableThreadLibraryCalls" __imp_DisableThreadLibraryCalls
0x180001260: "long __cdecl StringCchPrintfW(unsigned short * __ptr64,unsigned __int64,unsigned short const * __ptr64,...)" ?StringCchPrintfW@@YAJPEAG_KPEBGZZ
0x1800031F0: "__cdecl _imp_RtlLookupFunctionEntry" __imp_RtlLookupFunctionEntry
0x1800031D0: "__cdecl _imp_QueryPerformanceCounter" __imp_QueryPerformanceCounter
0x1800031E8: "__cdecl _imp_RtlVirtualUnwind" __imp_RtlVirtualUnwind
0x180003338: "__cdecl _pfnDefaultDliFailureHook2" __pfnDefaultDliFailureHook2
0x180003180: "__cdecl _imp_OpenFileMappingW" __imp_OpenFileMappingW
0x180001A60: "__cdecl guard_check_icall_nop" _guard_check_icall_nop
0x1800038A4: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-handle-l1-1-0
0x180003300: "OLEACC_HOOK_SHMEM_%d_%d" ??_C@_1DA@JMMEOCMH@?$AAO?$AAL?$AAE?$AAA?$AAC?$AAC?$AA_?$AAH?$AAO?$AAO?$AAK?$AA_?$AAS?$AAH?$AAM?$AAE?$AAM?$AA_?$AA?$CF?$AAd?$AA_?$AA?$CF?$AAd?$AA?$AA@
0x180003258: "__cdecl _imp__XcptFilter" __imp__XcptFilter
0x180004008: "__cdecl _security_cookie" __security_cookie
0x180003150: "__cdecl _imp_CloseHandle" __imp_CloseHandle
0x180003890: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-errorhandling-l1-1-0
0x1800045B8: "__cdecl _onexitbegin" __onexitbegin
0x180001CC1: "__cdecl _imp_load_RegisterWindowMessageW" __imp_load_RegisterWindowMessageW
0x180003238: "__cdecl _imp__vsnwprintf" __imp__vsnwprintf
0x180003140: "__cdecl _imp_SetUnhandledExceptionFilter" __imp_SetUnhandledExceptionFilter
0x180001964: "__cdecl _security_init_cookie" __security_init_cookie
0x18000387C: "__cdecl _IMPORT_DESCRIPTOR_msvcrt" __IMPORT_DESCRIPTOR_msvcrt
0x180003240: "__cdecl _imp_malloc" __imp_malloc
0x180001AB0: "__cdecl _report_gsfailure" __report_gsfailure
0x1800045C8: "__cdecl _native_startup_state" __native_startup_state
0x1800038CC: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-memory-l1-1-0
0x180003188: "__cdecl _imp_MapViewOfFile" __imp_MapViewOfFile
0x180003908: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0" __IMPORT_DESCRIPTOR_api-ms-win-core-profile-l1-1-0
0x180003248: "__cdecl _imp_free" __imp_free
0x1800018D0: "__cdecl IsNonwritableInCurrentImage" _IsNonwritableInCurrentImage
0x180003208: api-ms-win-core-synch-l1-2-0_NULL_THUNK_DATA
0x180003930: "__cdecl _IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0" __IMPORT_DESCRIPTOR_api-ms-win-core-synch-l1-2-0
0x180003980: "__cdecl _NULL_IMPORT_DESCRIPTOR" __NULL_IMPORT_DESCRIPTOR

[JEB Decompiler by PNF Software]