[+] Listing ntdll Nt/Zw functions
------------------------------------------
NtAllocateVirtualMemory is hooked
NtAllocateVirtualMemoryEx is hooked
NtCreateMutant is hooked
NtDeviceIoControlFile is hooked
NtGetContextThread is hooked
NtMapViewOfSection is hooked
NtMapViewOfSectionEx is hooked
NtProtectVirtualMemory is hooked
NtQueryInformationThread is hooked
NtQuerySystemTime is hooked
NtQueueApcThread is hooked
NtQueueApcThreadEx is hooked
NtQueueApcThreadEx2 is hooked
NtReadVirtualMemory is hooked
NtResumeThread is hooked
NtSetContextThread is hooked
NtSetInformationProcess is hooked
NtSetInformationThread is hooked
NtSuspendThread is hooked
NtUnmapViewOfSection is hooked
NtUnmapViewOfSectionEx is hooked
NtWriteVirtualMemory is hooked
Mapped 491 functions

[+] Listing loaded modules
------------------------------------------
C:\Users\lab\Desktop\hookchain_finder64.exe is loaded at 0x00007ff6bf510000.
C:\Windows\SYSTEM32\ntdll.dll is loaded at 0x00007ff95f1d0000.
C:\Windows\System32\KERNEL32.DLL is loaded at 0x00007ff95e4e0000.
C:\Windows\System32\KERNELBASE.dll is loaded at 0x00007ff95c510000.
C:\Windows\SYSTEM32\apphelp.dll is loaded at 0x00007ff959860000.
C:\Windows\System32\msvcrt.dll is loaded at 0x00007ff95ef80000.
C:\Windows\System32\umppc18110.dll is loaded at 0x0000021457050000.

[+] Listing hooked modules
------------------------------------------
Checking ntdll.dll at KERNEL32.DLL IAT
  +-- 0 hooked functions.

Checking ntdll.dll at KERNELBASE.dll IAT
  +-- 0 hooked functions.

Checking ntdll.dll at apphelp.dll IAT
  +-- 0 hooked functions.

Checking ntdll.dll at msvcrt.dll IAT
  +-- 0 hooked functions.

Checking ntdll.dll at umppc18110.dll IAT
  +-- 0 hooked functions.

------------------------------------------
Completed