ShadowPlayExt.dll
v11.0.5.420
32-bit
Windows
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 5
DllCanUnloadNow
#1 · 0xac820
DllGetClassObject
#2 · 0xac7e0
DllInstall
#3 · 0xac7b0
DllRegisterServer
#4 · 0xac7d0
DllUnregisterServer
#5 · 0xac7c0
No function matches your filter.
Imported DLLs & functions 203
ADVAPI32.dll
14
GetTokenInformation
0x100c3020
LsaNtStatusToWinError
0x100c3000
OpenProcessToken
0x100c301c
RegCloseKey
0x100c302c
RegCreateKeyExW
0x100c3028
RegDeleteKeyW
0x100c3014
RegDeleteValueW
0x100c3010
RegEnumKeyExW
0x100c300c
RegEnumValueW
0x100c3024
RegOpenCurrentUser
0x100c3018
RegOpenKeyExW
0x100c3030
RegQueryInfoKeyW
0x100c3008
RegQueryValueExW
0x100c3034
RegSetValueExW
0x100c3004
KERNEL32.dll
161
AreFileApisANSI
0x100c32a4
ChangeTimerQueueTimer
0x100c31c0
CloseHandle
0x100c3160
CompareStringW
0x100c327c
CreateDirectoryW
0x100c3118
CreateEventA
0x100c30bc
CreateEventW
0x100c3250
CreateFileW
0x100c3174
CreateMutexW
0x100c30cc
CreateThread
0x100c32b4
CreateTimerQueue
0x100c31a4
CreateTimerQueueTimer
0x100c31c4
CreateToolhelp32Snapshot
0x100c3108
DecodePointer
0x100c3094
DeleteCriticalSection
0x100c3074
DeleteFileW
0x100c311c
DeleteTimerQueueTimer
0x100c31bc
DeviceIoControl
0x100c312c
DuplicateHandle
0x100c30f4
EncodePointer
0x100c309c
EnterCriticalSection
0x100c3088
EnumSystemLocalesW
0x100c3220
ExitProcess
0x100c3238
ExitThread
0x100c32b8
ExpandEnvironmentStringsW
0x100c3180
FindClose
0x100c3120
FindFirstFileExA
0x100c3210
FindNextFileA
0x100c320c
FindResourceExW
0x100c3054
FindResourceW
0x100c3050
FlushFileBuffers
0x100c3298
FormatMessageA
0x100c30b8
FormatMessageW
0x100c30b4
FreeEnvironmentStringsW
0x100c31f4
FreeLibrary
0x100c314c
FreeLibraryAndExitThread
0x100c32bc
GetACP
0x100c3234
GetCommandLineA
0x100c3200
GetCommandLineW
0x100c31fc
GetConsoleCP
0x100c31ec
GetConsoleMode
0x100c31e8
GetCPInfo
0x100c3288
GetCurrentProcess
0x100c3184
GetCurrentProcessId
0x100c30e0
GetCurrentThread
0x100c3130
GetCurrentThreadId
0x100c30c8
GetDateFormatW
0x100c3230
GetEnvironmentStringsW
0x100c31f8
GetExitCodeThread
0x100c3084
GetFileAttributesW
0x100c3170
GetFileInformationByHandle
0x100c329c
GetFileSizeEx
0x100c30d8
GetFileType
0x100c3214
GetFullPathNameW
0x100c3188
GetLastError
0x100c3164
GetLocaleInfoW
0x100c3284
GetLogicalProcessorInformation
0x100c3294
GetModuleFileNameA
0x100c3190
GetModuleFileNameW
0x100c317c
GetModuleHandleA
0x100c3168
GetModuleHandleExW
0x100c30e8
GetModuleHandleW
0x100c3150
GetNumaHighestNodeNumber
0x100c31b8
GetOEMCP
0x100c3204
GetProcAddress
0x100c315c
GetProcessAffinityMask
0x100c31b4
GetProcessHeap
0x100c306c
GetProcessId
0x100c30fc
GetProcessTimes
0x100c30ac
GetStartupInfoW
0x100c325c
GetStdHandle
0x100c3218
GetStringTypeW
0x100c3260
GetSystemDirectoryW
0x100c316c
GetSystemInfo
0x100c3138
GetSystemTimeAsFileTime
0x100c30a8
GetTempPathW
0x100c30e4
GetThreadPriority
0x100c31c8
GetThreadTimes
0x100c3148
GetTickCount
0x100c3104
GetTimeFormatW
0x100c322c
GetTimeZoneInformation
0x100c321c
GetUserDefaultLCID
0x100c3224
GetVersionExW
0x100c313c
HeapAlloc
0x100c3068
HeapDestroy
0x100c3058
HeapFree
0x100c3064
HeapReAlloc
0x100c3060
HeapSize
0x100c305c
InitializeCriticalSectionAndSpinCount
0x100c3268
InitializeCriticalSectionEx
0x100c3078
InitializeSListHead
0x100c3254
InterlockedFlushSList
0x100c32b0
InterlockedPopEntrySList
0x100c3198
InterlockedPushEntrySList
0x100c32ac
IsDebuggerPresent
0x100c3258
IsProcessorFeaturePresent
0x100c3248
IsValidCodePage
0x100c3208
IsValidLocale
0x100c3228
LCMapStringW
0x100c3280
LeaveCriticalSection
0x100c308c
LoadLibraryExW
0x100c3040
LoadLibraryW
0x100c30ec
LoadResource
0x100c304c
LocalAlloc
0x100c3178
LocalFree
0x100c3158
LockResource
0x100c3048
lstrcmpW
0x100c303c
MoveFileExW
0x100c3134
MultiByteToWideChar
0x100c3114
OpenEventA
0x100c3290
OpenProcess
0x100c3100
OutputDebugStringW
0x100c30b0
Process32FirstW
0x100c310c
Process32NextW
0x100c3110
QueryDepthSList
0x100c319c
QueryDosDeviceW
0x100c3124
QueryPerformanceCounter
0x100c30a0
QueryPerformanceFrequency
0x100c30a4
RaiseException
0x100c3098
ReadConsoleW
0x100c31dc
ReadFile
0x100c31e4
RegisterWaitForSingleObject
0x100c31ac
ReleaseMutex
0x100c30dc
ReleaseSemaphore
0x100c328c
RemoveDirectoryW
0x100c30d0
ResetEvent
0x100c324c
ResumeThread
0x100c3090
RtlUnwind
0x100c32a8
SetEnvironmentVariableA
0x100c31f0
SetEvent
0x100c30c0
SetFileAttributesW
0x100c3128
SetFilePointerEx
0x100c32a0
SetLastError
0x100c318c
SetStdHandle
0x100c31e0
SetThreadAffinityMask
0x100c31b0
SetThreadPriority
0x100c31cc
SetUnhandledExceptionFilter
0x100c3244
SignalObjectAndWait
0x100c31d4
SizeofResource
0x100c3044
Sleep
0x100c323c
SwitchToThread
0x100c31d0
TerminateProcess
0x100c30f8
TerminateThread
0x100c3080
TlsAlloc
0x100c326c
TlsFree
0x100c3278
TlsGetValue
0x100c3270
TlsSetValue
0x100c3274
TryEnterCriticalSection
0x100c3264
UnhandledExceptionFilter
0x100c3240
UnregisterWait
0x100c31a8
UnregisterWaitEx
0x100c31a0
VerifyVersionInfoW
0x100c30f0
VerSetConditionMask
0x100c3154
VirtualAlloc
0x100c3144
VirtualFree
0x100c3194
VirtualProtect
0x100c3140
WaitForSingleObject
0x100c307c
WaitForSingleObjectEx
0x100c30c4
WideCharToMultiByte
0x100c3070
WriteConsoleW
0x100c31d8
WriteFile
0x100c30d4
OLEAUT32.dll
16
LoadRegTypeLib
0x100c32e8
LoadTypeLib
0x100c32ec
SafeArrayCopy
0x100c32e0
SafeArrayDestroy
0x100c32f0
SafeArrayGetLBound
0x100c32f8
SafeArrayGetUBound
0x100c32f4
SafeArrayGetVartype
0x100c32fc
SafeArrayLock
0x100c3300
SafeArrayUnlock
0x100c32c4
SysAllocString
0x100c32e4
SysAllocStringLen
0x100c32dc
SysFreeString
0x100c32c8
SysStringLen
0x100c32d4
VariantChangeType
0x100c32d8
VariantClear
0x100c32cc
VariantInit
0x100c32d0
GetProcessImageFileNameW
0x100c3308
SHGetFolderPathW
0x100c3310
PathFindFileNameW
0x100c3318
EnumWindows
0x100c3330
GetParent
0x100c3328
GetWindow
0x100c3324
GetWindowThreadProcessId
0x100c332c
IsWindowVisible
0x100c3320
PostMessageW
0x100c3334
No function matches your filter.