mfdetours.dll
v1.1.0.1
64-bit
Windows
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, VirtualAllocEx
Exported functions 3
Shutdown
#1 · 0x61c0
Startup
#2 · 0x6390
DllGetMFDebugHlp
#3 · 0x8bc0
No function matches your filter.
Imported DLLs & functions 122
CoTaskMemAlloc
0x180046050
CoTaskMemFree
0x180046040
PropVariantClear
0x180046058
StringFromGUID2
0x180046048
GetLastError
0x180046080
RaiseException
0x1800460a0
SetLastError
0x180046098
SetUnhandledExceptionFilter
0x180046088
UnhandledExceptionFilter
0x180046090
CloseHandle
0x1800460b0
GetProcessHeap
0x1800460d8
HeapAlloc
0x1800460d0
HeapDestroy
0x1800460e0
HeapFree
0x1800460c0
HeapReAlloc
0x1800460e8
HeapSize
0x1800460c8
InitializeSListHead
0x1800460f8
DisableThreadLibraryCalls
0x180046128
FindResourceExW
0x180046130
FreeLibrary
0x180046138
GetModuleFileNameA
0x180046110
GetModuleHandleExW
0x180046140
GetModuleHandleW
0x180046150
GetProcAddress
0x180046108
LoadResource
0x180046148
LockResource
0x180046120
SizeofResource
0x180046118
LoadLibraryA
0x180046160
ReadProcessMemory
0x180046178
VirtualAlloc
0x180046190
VirtualAllocEx
0x180046188
VirtualFree
0x180046198
VirtualProtect
0x180046180
VirtualProtectEx
0x1800461a0
VirtualQuery
0x1800461a8
VirtualQueryEx
0x180046170
WriteProcessMemory
0x1800461b0
GetEnvironmentVariableA
0x1800461c8
GetEnvironmentVariableW
0x1800461d0
SetEnvironmentVariableW
0x1800461c0
CreateProcessA
0x1800461f8
CreateProcessW
0x180046210
GetCurrentProcess
0x1800461e0
GetCurrentProcessId
0x180046200
GetCurrentThreadId
0x1800461e8
ResumeThread
0x1800461f0
TerminateProcess
0x180046208
FlushInstructionCache
0x180046220
GetThreadContext
0x180046228
IsProcessorFeaturePresent
0x180046230
SetThreadContext
0x180046238
QueryPerformanceCounter
0x180046248
RtlCaptureContext
0x180046270
RtlLookupFunctionEntry
0x180046280
RtlVirtualUnwind
0x180046278
AcquireSRWLockExclusive
0x1800462e8
AcquireSRWLockShared
0x1800462e0
DeleteCriticalSection
0x1800462d0
EnterCriticalSection
0x1800462c8
InitializeCriticalSection
0x1800462d8
InitializeSRWLock
0x1800462b0
LeaveCriticalSection
0x1800462c0
ReleaseSRWLockExclusive
0x1800462a8
ReleaseSRWLockShared
0x1800462b8
GetSystemTimeAsFileTime
0x1800462f8
__C_specific_handler
0x180046388
__CxxFrameHandler3
0x1800463c8
_o___std_type_info_destroy_list
0x1800463c0
_o___stdio_common_vsprintf
0x1800463b0
_o___stdio_common_vsprintf_s
0x1800463a8
_o___stdio_common_vswprintf
0x1800463a0
_o___stdio_common_vswprintf_s
0x180046398
_o__callnewh
0x1800463d8
_o__cexit
0x1800463d0
_o__configure_narrow_argv
0x1800463b8
_o__crt_atexit
0x180046390
_o__errno
0x180046308
_o__execute_onexit_table
0x180046310
_o__gcvt_s
0x180046318
_o__initialize_narrow_environment
0x180046320
_o__initialize_onexit_table
0x180046328
_o__invalid_parameter_noinfo
0x180046330
_o__mbsinc
0x180046338
_o__recalloc
0x180046340
_o__register_onexit_function
0x180046348
_o__seh_filter_dll
0x180046350
_o__ultoa_s
0x180046358
_o__wtoi
0x180046360
_o_calloc
0x180046368
_o_free
0x180046370
_o_malloc
0x180046378
_o_wmemcpy_s
0x180046380
memcpy
0x1800463e8
memmove
0x1800463e0
EventRegister
0x180046428
EventUnregister
0x180046430
EventWrite
0x180046438
ImagehlpApiVersionEx
0x180046458
SymCleanup
0x180046488
SymFromName
0x180046480
SymGetModuleInfo64
0x180046460
SymGetOptions
0x180046450
SymInitialize
0x180046468
SymLoadModuleEx
0x180046470
SymRegisterCallback64
0x180046478
SymSetOptions
0x180046448
No function matches your filter.