What does “Shared module not hooked” mean, and why are some modules DllMain calls never being logged?
Dependency Walker hooks modules as they load in order to track calls to functions like DllMain, LoadLibrary, and GetProcAddress. Any module loaded above address 0x80000000 (usually system modules) on Windows 95/98/Me is shared system-wide and cannot be hooked. The result is that Dependency Walker cannot log information about function calls in those modules. Windows NT/2000/XP/2003/Vista/+ does not have this limitation. See Using Application Profiling to Detect Dynamic Dependencies for more information.
