mofd.dll
v10.0.19041.1
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 6
CompileFileViaDLL
#1 · 0x22f70
CreateBMOFViaDLL
#2 · 0x23180
DllCanUnloadNow
#3 · 0xdcc0
DllGetClassObject
#4 · 0xdb30
DllRegisterServer
#5 · 0xdd20
DllUnregisterServer
#6 · 0xdda0
No function matches your filter.
Imported DLLs & functions 226
ADVAPI32.dll
21
AdjustTokenPrivileges
0x1002b004
GetTraceEnableFlags
0x1002b034
GetTraceEnableLevel
0x1002b030
GetTraceLoggerHandle
0x1002b02c
ImpersonateSelf
0x1002b00c
LookupPrivilegeValueW
0x1002b01c
OpenProcessToken
0x1002b050
OpenThreadToken
0x1002b010
RegCloseKey
0x1002b018
RegCreateKeyExW
0x1002b024
RegDeleteKeyW
0x1002b028
RegDeleteValueW
0x1002b04c
RegEnumKeyExW
0x1002b044
RegisterTraceGuidsW
0x1002b038
RegOpenKeyExW
0x1002b048
RegQueryInfoKeyW
0x1002b040
RegQueryValueExW
0x1002b014
RegSetValueExW
0x1002b000
RevertToSelf
0x1002b008
TraceMessage
0x1002b020
UnregisterTraceGuids
0x1002b03c
GetVersionExW
0x1002b1d0
KERNEL32.dll
55
AcquireSRWLockExclusive
0x1002b0b0
CloseHandle
0x1002b0f0
CompareStringW
0x1002b0b8
CreateFileW
0x1002b0f4
CreateProcessW
0x1002b070
DebugBreak
0x1002b0d0
DeleteCriticalSection
0x1002b0f8
DeleteFileW
0x1002b0bc
DisableThreadLibraryCalls
0x1002b088
EnterCriticalSection
0x1002b0fc
ExpandEnvironmentStringsW
0x1002b0cc
FindResourceExW
0x1002b08c
FreeLibrary
0x1002b0e8
GetConsoleOutputCP
0x1002b07c
GetCurrentProcess
0x1002b06c
GetCurrentProcessId
0x1002b118
GetCurrentThread
0x1002b120
GetCurrentThreadId
0x1002b11c
GetFullPathNameW
0x1002b084
GetLastError
0x1002b110
GetModuleFileNameW
0x1002b0c8
GetModuleHandleW
0x1002b0a0
GetProcAddress
0x1002b0e4
GetStdHandle
0x1002b078
GetStringTypeExW
0x1002b064
GetSystemDirectoryW
0x1002b0d8
GetSystemTimeAsFileTime
0x1002b080
GetTempFileNameW
0x1002b12c
GetTempPathW
0x1002b058
GetTickCount
0x1002b124
InitializeCriticalSection
0x1002b0c4
LCMapStringW
0x1002b068
LeaveCriticalSection
0x1002b100
LoadLibraryExW
0x1002b0ec
LoadResource
0x1002b090
LocalFree
0x1002b0a4
lstrcmpiW
0x1002b09c
lstrcmpW
0x1002b0d4
MultiByteToWideChar
0x1002b130
OpenProcess
0x1002b10c
OutputDebugStringA
0x1002b128
QueryPerformanceCounter
0x1002b114
RaiseException
0x1002b098
ReadFile
0x1002b060
ReleaseSRWLockExclusive
0x1002b0ac
SetFilePointer
0x1002b05c
SetUnhandledExceptionFilter
0x1002b104
SizeofResource
0x1002b094
Sleep
0x1002b0a8
SleepConditionVariableSRW
0x1002b0dc
TerminateProcess
0x1002b108
UnhandledExceptionFilter
0x1002b0e0
WakeAllConditionVariable
0x1002b0b4
WideCharToMultiByte
0x1002b0c0
WriteFile
0x1002b074
msvcrt.dll
62
__CxxFrameHandler3
0x1002b21c
__dllonexit
0x1002b2bc
_amsg_exit
0x1002b2a0
_close
0x1002b224
_CxxThrowException
0x1002b254
_errno
0x1002b1f4
_except_handler4_common
0x1002b2ac
_initterm
0x1002b2a4
_lock
0x1002b2b4
_onexit
0x1002b2c0
_open
0x1002b218
_purecall
0x1002b268
_resetstkoflw
0x1002b270
_ui64tow_s
0x1002b200
_unlock
0x1002b2b8
_vsnwprintf
0x1002b290
_waccess
0x1002b20c
_wcsdup
0x1002b1e0
_wcserror
0x1002b208
_wcsicmp
0x1002b27c
_wcsnicmp
0x1002b278
_wfopen
0x1002b260
_wfullpath
0x1002b210
_write
0x1002b220
_wsplitpath_s
0x1002b214
_wtoi
0x1002b1e4
_wtol
0x1002b1e8
_XcptFilter
0x1002b298
??0exception@@QAE@ABQBD@Z
0x1002b22c
??0exception@@QAE@ABQBDH@Z
0x1002b230
??0exception@@QAE@ABV0@@Z
0x1002b234
??1exception@@UAE@XZ
0x1002b238
??1type_info@@UAE@XZ
0x1002b2b0
?terminate@@YAXXZ
0x1002b2a8
?what@exception@@UBEPBDXZ
0x1002b250
calloc
0x1002b264
fclose
0x1002b248
ferror
0x1002b240
fread
0x1002b244
free
0x1002b29c
fseek
0x1002b25c
ftell
0x1002b24c
fwrite
0x1002b1ec
iswspace
0x1002b284
iswxdigit
0x1002b1f8
malloc
0x1002b26c
mbstowcs
0x1002b23c
memcmp
0x1002b2c4
memcpy
0x1002b258
memcpy_s
0x1002b28c
memmove
0x1002b294
memset
0x1002b2cc
printf
0x1002b1dc
realloc
0x1002b228
swscanf
0x1002b2c8
towupper
0x1002b1f0
wcschr
0x1002b280
wcsncmp
0x1002b288
wcsncpy_s
0x1002b204
wcsrchr
0x1002b274
wcstok
0x1002b1fc
wcstombs
0x1002b1d8
CoCreateGuid
0x1002b140
CoCreateInstance
0x1002b14c
CoQueryProxyBlanket
0x1002b138
CoTaskMemAlloc
0x1002b150
CoTaskMemFree
0x1002b13c
CoTaskMemRealloc
0x1002b144
StringFromGUID2
0x1002b148
OLEAUT32.dll
25
CreateErrorInfo
0x1002b180
GetErrorInfo
0x1002b158
LoadRegTypeLib
0x1002b188
LoadTypeLib
0x1002b18c
SafeArrayCreate
0x1002b178
SafeArrayDestroy
0x1002b174
SafeArrayDestroyData
0x1002b194
SafeArrayDestroyDescriptor
0x1002b1a8
SafeArrayGetElement
0x1002b160
SafeArrayGetLBound
0x1002b190
SafeArrayGetUBound
0x1002b15c
SafeArrayPutElement
0x1002b164
SetErrorInfo
0x1002b17c
SysAllocString
0x1002b1b0
SysAllocStringByteLen
0x1002b170
SysAllocStringLen
0x1002b1b8
SysFreeString
0x1002b198
SysStringByteLen
0x1002b16c
SysStringLen
0x1002b1b4
VarBstrCat
0x1002b168
VariantChangeTypeEx
0x1002b19c
VariantClear
0x1002b1a0
VariantCopy
0x1002b1ac
VariantInit
0x1002b184
VarUI4FromStr
0x1002b1a4
wbemcomn.dll
52
_ThrowMemoryException_
0x1002b2d4
??0CFlexArray@@QAE@HH@Z
0x1002b358
??0CMRCICompression@@QAE@XZ
0x1002b348
??0Registry@@QAE@PBGK@Z
0x1002b330
??0WString@@QAE@PBG@Z
0x1002b370
??0WString@@QAE@XZ
0x1002b2e8
??1CFlexArray@@QAE@XZ
0x1002b35c
??1CMRCICompression@@QAE@XZ
0x1002b364
??1CVar@@QAE@XZ
0x1002b388
??1Registry@@QAE@XZ
0x1002b39c
??4WString@@QAEAAV0@PBG@Z
0x1002b318
?AddEnvironmentValue@CWbemInstallObject@@SGJPBG0@Z
0x1002b2ec
?CleanUp@CWbemInstallObject@@SGXXZ
0x1002b314
?CoCreateInstance@CWbemInstallObject@@SGJABU_GUID@@PAUIUnknown@@K0PAPAX@Z
0x1002b344
?DeleteString@WString@@AAEXPAG@Z
0x1002b2d8
?ExpandEnvironmentStringsW@CWbemInstallObject@@SGKPBGPAGK@Z
0x1002b350
?FlushRepository@CWbemInstallObject@@SGJXZ
0x1002b310
?GetAt@CFlexArray@@QBEPAXH@Z
0x1002b360
?GetMultiStr@Registry@@QAEPAGPBGAAK@Z
0x1002b338
?GetRepositoryFolder@CWbemInstallObject@@SGPBGXZ
0x1002b354
?GetText@CVar@@QAEPAGJJPBG@Z
0x1002b38c
?Init@CVar@@AAEXXZ
0x1002b380
?InsertAt@CFlexArray@@QAEHHPAX@Z
0x1002b390
?IsOffline@CWbemInstallObject@@SG_NXZ
0x1002b2e4
?LocaleName_To_LCID@CMUILocale@@SGJPBGPA_NPAK@Z
0x1002b37c
?Mrci1Decompress@CBaseMrciCompression@@QAEIPAEI0I@Z
0x1002b34c
?Mrci1MaxCompress@CBaseMrciCompression@@QAEIPAEI0I@Z
0x1002b398
?ms_XXX_Locale_To_LCID@CMUILocale@@SGJPBGPAK@Z
0x1002b378
?RemoveAt@CFlexArray@@QAEHH@Z
0x1002b394
?SetAutoRecoverFolder@CWbemInstallObject@@SGXPBG@Z
0x1002b300
?SetBinaryPath@CWbemInstallObject@@SGXPBG@Z
0x1002b2f8
?SetMultiStr@Registry@@QAEHPBGPAGK@Z
0x1002b33c
?SetOffline@CWbemInstallObject@@SGX_N@Z
0x1002b2f4
?SetRegistryPathCIMOM@CWbemInstallObject@@SGXPBG@Z
0x1002b308
?SetRegistryPathWbem@CWbemInstallObject@@SGXPBG@Z
0x1002b304
?SetRepositoryFolder@CWbemInstallObject@@SGXPBG@Z
0x1002b2fc
?SetStr@Registry@@QAEHPBG0@Z
0x1002b340
?SetVariant@CVar@@QAEHPAUtagVARIANT@@H@Z
0x1002b384
?Shutdown@CWbemInstallObject@@SGXXZ
0x1002b2f0
?WbemMemAlloc@CWin32DefaultArena@@SAPAXK@Z
0x1002b3a0
?WbemMemFree@CWin32DefaultArena@@SAHPAX@Z
0x1002b334
?Write@CMemoryLog@@QAEXJ@Z
0x1002b2dc
bAreWeLocal
0x1002b36c
CopyFileToAutorecover
0x1002b32c
ExtractMachineName
0x1002b368
GetMemLogObject
0x1002b2e0
RegisterDLL
0x1002b31c
RegisterDllAppid
0x1002b320
RemoveFileFromAutoRecoverFolder
0x1002b30c
UnRegisterDLL
0x1002b324
UnregisterDllAppid
0x1002b328
WbemVariantChangeType
0x1002b374
No function matches your filter.