FirstLoad.dll
v9.7.17.29215
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory
Exported functions 1
FirstLoad
#1 · 0x1858
No function matches your filter.
Imported DLLs & functions 86
_cexit
0x543d6154
_configure_narrow_argv
0x543d6150
_crt_atexit
0x543d613c
_execute_onexit_table
0x543d6138
_initialize_narrow_environment
0x543d614c
_initialize_onexit_table
0x543d6144
_initterm
0x543d615c
_initterm_e
0x543d6148
_invalid_parameter_noinfo_noreturn
0x543d6158
_register_onexit_function
0x543d6140
_seh_filter_dll
0x543d6160
__stdio_common_vswprintf_s
0x543d6168
_wcsicmp
0x543d6180
_wcslwr
0x543d6170
tolower
0x543d617c
wcscpy_s
0x543d6178
wcsncpy_s
0x543d6184
wcstok
0x543d6174
CertGetNameStringW
0x543d600c
KERNEL32.dll
36
CloseHandle
0x543d6054
DeleteCriticalSection
0x543d6068
EnterCriticalSection
0x543d6024
FlushInstructionCache
0x543d6018
GetCommandLineW
0x543d6028
GetCurrentDirectoryW
0x543d6060
GetCurrentProcess
0x543d608c
GetCurrentProcessId
0x543d606c
GetCurrentThreadId
0x543d603c
GetLastError
0x543d6050
GetModuleFileNameW
0x543d602c
GetModuleHandleW
0x543d6014
GetPrivateProfileStringW
0x543d604c
GetProcAddress
0x543d6048
GetSystemDirectoryW
0x543d6044
GetSystemInfo
0x543d6058
GetSystemTimeAsFileTime
0x543d609c
GetVersionExW
0x543d6040
GetWindowsDirectoryW
0x543d6064
InitializeCriticalSection
0x543d6038
InitializeCriticalSectionAndSpinCount
0x543d6030
InitializeSListHead
0x543d6098
IsDebuggerPresent
0x543d6084
IsProcessorFeaturePresent
0x543d6080
LeaveCriticalSection
0x543d6034
LoadLibraryW
0x543d605c
OutputDebugStringW
0x543d6094
QueryPerformanceCounter
0x543d6088
SetLastError
0x543d6090
SetUnhandledExceptionFilter
0x543d6078
TerminateProcess
0x543d607c
TlsGetValue
0x543d6070
TlsSetValue
0x543d6020
UnhandledExceptionFilter
0x543d6074
VirtualProtect
0x543d60a0
WriteProcessMemory
0x543d601c
?_Xlength_error@std@@YAXPBD@Z
0x543d60a8
SHGetFolderPathW
0x543d60b0
PathAddBackslashW
0x543d60c0
PathCombineW
0x543d60b8
PathFileExistsW
0x543d60c4
PathFindFileNameW
0x543d60bc
__CxxFrameHandler3
0x543d60e0
__std_exception_copy
0x543d60f4
__std_exception_destroy
0x543d60f8
__std_terminate
0x543d60e4
__std_type_info_destroy_list
0x543d60cc
_CxxThrowException
0x543d60fc
_except_handler4_common
0x543d60f0
memcmp
0x543d60dc
memcpy
0x543d60d4
memmove
0x543d60d8
memset
0x543d60d0
wcsrchr
0x543d60ec
wcsstr
0x543d60e8
GetFileVersionInfoSizeW
0x543d610c
GetFileVersionInfoW
0x543d6108
VerQueryValueW
0x543d6104
WinVerifyTrust
0x543d6118
WTHelperGetProvCertFromChain
0x543d611c
WTHelperGetProvSignerFromChain
0x543d6114
WTHelperProvDataFromStateData
0x543d6120
No function matches your filter.