mfdetours.dll
v1.1.0.1
Unknown (0xaa64)
Windows
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, VirtualAllocEx
Exported functions 3
Shutdown
#1 · 0x6e30
Startup
#2 · 0x70a0
DllGetMFDebugHlp
#3 · 0x9840
No function matches your filter.
Imported DLLs & functions 116
CoTaskMemAlloc
0x18004b050
CoTaskMemFree
0x18004b048
PropVariantClear
0x18004b040
StringFromGUID2
0x18004b058
DebugBreak
0x18004b068
GetLastError
0x18004b080
RaiseException
0x18004b078
SetLastError
0x18004b088
CloseHandle
0x18004b098
GetProcessHeap
0x18004b0c0
HeapAlloc
0x18004b0c8
HeapDestroy
0x18004b0a8
HeapFree
0x18004b0b8
HeapReAlloc
0x18004b0d0
HeapSize
0x18004b0b0
InitializeSListHead
0x18004b0e0
DisableThreadLibraryCalls
0x18004b100
FindResourceExW
0x18004b0f8
FreeLibrary
0x18004b128
GetModuleFileNameA
0x18004b0f0
GetModuleHandleExW
0x18004b108
GetModuleHandleW
0x18004b120
GetProcAddress
0x18004b110
LoadResource
0x18004b130
LockResource
0x18004b138
SizeofResource
0x18004b118
LoadLibraryA
0x18004b148
ReadProcessMemory
0x18004b190
VirtualAlloc
0x18004b198
VirtualAllocEx
0x18004b188
VirtualFree
0x18004b160
VirtualProtect
0x18004b178
VirtualProtectEx
0x18004b180
VirtualQuery
0x18004b168
VirtualQueryEx
0x18004b170
WriteProcessMemory
0x18004b158
GetEnvironmentVariableA
0x18004b1b0
GetEnvironmentVariableW
0x18004b1b8
SetEnvironmentVariableW
0x18004b1a8
CreateProcessA
0x18004b1c8
CreateProcessW
0x18004b1f8
GetCurrentProcess
0x18004b1e8
GetCurrentProcessId
0x18004b1e0
GetCurrentThreadId
0x18004b1d0
ResumeThread
0x18004b1d8
TerminateProcess
0x18004b1f0
FlushInstructionCache
0x18004b208
GetThreadContext
0x18004b210
SetThreadContext
0x18004b218
QueryPerformanceCounter
0x18004b228
AcquireSRWLockExclusive
0x18004b290
AcquireSRWLockShared
0x18004b2a8
DeleteCriticalSection
0x18004b280
EnterCriticalSection
0x18004b278
InitializeCriticalSection
0x18004b288
InitializeSRWLock
0x18004b2a0
LeaveCriticalSection
0x18004b270
ReleaseSRWLockExclusive
0x18004b298
ReleaseSRWLockShared
0x18004b268
GetSystemTimeAsFileTime
0x18004b2b8
__C_specific_handler
0x18004b348
__CxxFrameHandler3
0x18004b3a0
_o___std_type_info_destroy_list
0x18004b380
_o___stdio_common_vsprintf
0x18004b370
_o___stdio_common_vsprintf_s
0x18004b368
_o___stdio_common_vswprintf
0x18004b360
_o___stdio_common_vswprintf_s
0x18004b358
_o__callnewh
0x18004b388
_o__cexit
0x18004b378
_o__configure_narrow_argv
0x18004b350
_o__crt_atexit
0x18004b390
_o__errno
0x18004b2c8
_o__execute_onexit_table
0x18004b2d0
_o__gcvt_s
0x18004b2d8
_o__initialize_narrow_environment
0x18004b2e0
_o__initialize_onexit_table
0x18004b2e8
_o__invalid_parameter_noinfo
0x18004b2f0
_o__mbsinc
0x18004b2f8
_o__recalloc
0x18004b300
_o__register_onexit_function
0x18004b308
_o__seh_filter_dll
0x18004b310
_o__ultoa_s
0x18004b318
_o__wtoi
0x18004b320
_o_calloc
0x18004b328
_o_free
0x18004b330
_o_malloc
0x18004b338
_o_wmemcpy_s
0x18004b340
memcmp
0x18004b398
memcpy
0x18004b3b0
memmove
0x18004b3a8
EventRegister
0x18004b3f0
EventUnregister
0x18004b3f8
EventWrite
0x18004b400
ImagehlpApiVersionEx
0x18004b420
SymCleanup
0x18004b450
SymFromName
0x18004b448
SymGetModuleInfo64
0x18004b428
SymGetOptions
0x18004b418
SymInitialize
0x18004b430
SymLoadModuleEx
0x18004b438
SymRegisterCallback64
0x18004b440
SymSetOptions
0x18004b410
No function matches your filter.