mfdetours.dll
v1.1.0.1
Unknown (0x1c4)
Windows
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, VirtualAllocEx
Exported functions 3
Shutdown
#1 · 0x4c3a1
Startup
#2 · 0x4c511
DllGetMFDebugHlp
#3 · 0x4de31
No function matches your filter.
Imported DLLs & functions 120
CoTaskMemAlloc
0x10081020
CoTaskMemFree
0x1008102c
PropVariantClear
0x10081028
StringFromGUID2
0x10081024
DebugBreak
0x10081034
GetLastError
0x1008103c
RaiseException
0x10081044
SetLastError
0x10081040
CloseHandle
0x1008104c
GetProcessHeap
0x10081054
HeapAlloc
0x1008105c
HeapDestroy
0x10081060
HeapFree
0x10081064
HeapReAlloc
0x10081068
HeapSize
0x10081058
InitializeSListHead
0x10081070
DisableThreadLibraryCalls
0x10081078
FindResourceExW
0x10081084
FreeLibrary
0x10081098
GetModuleFileNameA
0x1008108c
GetModuleHandleExW
0x10081080
GetModuleHandleW
0x10081094
GetProcAddress
0x10081088
LoadResource
0x10081090
LockResource
0x1008107c
SizeofResource
0x1008109c
LoadLibraryA
0x100810a4
ReadProcessMemory
0x100810bc
VirtualAlloc
0x100810c0
VirtualAllocEx
0x100810ac
VirtualFree
0x100810c8
VirtualProtect
0x100810c4
VirtualProtectEx
0x100810b0
VirtualQuery
0x100810b4
VirtualQueryEx
0x100810cc
WriteProcessMemory
0x100810b8
GetEnvironmentVariableA
0x100810d8
GetEnvironmentVariableW
0x100810dc
SetEnvironmentVariableW
0x100810d4
CreateProcessA
0x100810e8
CreateProcessW
0x100810fc
GetCurrentProcess
0x100810f0
GetCurrentProcessId
0x100810f4
GetCurrentThreadId
0x100810ec
ResumeThread
0x100810e4
TerminateProcess
0x100810f8
FlushInstructionCache
0x1008110c
GetThreadContext
0x10081110
IsProcessorFeaturePresent
0x10081104
SetThreadContext
0x10081108
QueryPerformanceCounter
0x10081118
AcquireSRWLockExclusive
0x10081144
AcquireSRWLockShared
0x10081158
DeleteCriticalSection
0x10081150
EnterCriticalSection
0x1008114c
InitializeCriticalSection
0x10081154
InitializeSRWLock
0x10081140
LeaveCriticalSection
0x10081148
ReleaseSRWLockExclusive
0x10081138
ReleaseSRWLockShared
0x1008113c
GetSystemTimeAsFileTime
0x10081160
__C_specific_handler
0x100811a8
__CxxFrameHandler3
0x100811cc
_o___std_type_info_destroy_list
0x100811c4
_o___stdio_common_vsprintf
0x100811bc
_o___stdio_common_vsprintf_s
0x100811b8
_o___stdio_common_vswprintf
0x100811b4
_o___stdio_common_vswprintf_s
0x100811b0
_o__callnewh
0x100811d4
_o__cexit
0x100811d0
_o__configure_narrow_argv
0x100811c0
_o__crt_atexit
0x100811ac
_o__errno
0x10081168
_o__execute_onexit_table
0x1008116c
_o__gcvt_s
0x10081170
_o__initialize_narrow_environment
0x10081174
_o__initialize_onexit_table
0x10081178
_o__invalid_parameter_noinfo
0x1008117c
_o__mbsinc
0x10081180
_o__recalloc
0x10081184
_o__register_onexit_function
0x10081188
_o__seh_filter_dll
0x1008118c
_o__ultoa_s
0x10081190
_o__wtoi
0x10081194
_o_calloc
0x10081198
_o_free
0x1008119c
_o_malloc
0x100811a0
_o_wmemcpy_s
0x100811a4
memcmp
0x100811c8
memcpy
0x100811dc
memmove
0x100811d8
memmove_s
0x100811f4
memset
0x100811fc
strcmp
0x10081200
strlen
0x100811f8
wcslen
0x100811f0
EventRegister
0x10081208
EventUnregister
0x1008120c
EventWrite
0x10081210
ImagehlpApiVersionEx
0x10081220
SymCleanup
0x10081238
SymFromName
0x10081234
SymGetModuleInfo64
0x10081224
SymGetOptions
0x1008121c
SymInitialize
0x10081228
SymLoadModuleEx
0x1008122c
SymRegisterCallback64
0x10081230
SymSetOptions
0x10081218
No function matches your filter.