mfdetours.dll
v1.1.0.1
32-bit
Windows
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, VirtualAllocEx
Exported functions 3
Shutdown
#1 · 0x4d060
Startup
#2 · 0x4d1b0
DllGetMFDebugHlp
#3 · 0x4f480
No function matches your filter.
Imported DLLs & functions 119
CoTaskMemAlloc
0x10079028
CoTaskMemFree
0x10079020
PropVariantClear
0x1007902c
StringFromGUID2
0x10079024
GetLastError
0x10079040
RaiseException
0x10079050
SetLastError
0x1007904c
SetUnhandledExceptionFilter
0x10079044
UnhandledExceptionFilter
0x10079048
CloseHandle
0x10079058
GetProcessHeap
0x1007906c
HeapAlloc
0x10079068
HeapDestroy
0x10079070
HeapFree
0x10079060
HeapReAlloc
0x10079074
HeapSize
0x10079064
InitializeSListHead
0x1007907c
DisableThreadLibraryCalls
0x10079094
FindResourceExW
0x10079098
FreeLibrary
0x1007909c
GetModuleFileNameA
0x10079088
GetModuleHandleExW
0x100790a0
GetModuleHandleW
0x100790a8
GetProcAddress
0x10079084
LoadResource
0x100790a4
LockResource
0x10079090
SizeofResource
0x1007908c
LoadLibraryA
0x100790b0
ReadProcessMemory
0x100790bc
VirtualAlloc
0x100790c8
VirtualAllocEx
0x100790c4
VirtualFree
0x100790cc
VirtualProtect
0x100790c0
VirtualProtectEx
0x100790d0
VirtualQuery
0x100790d4
VirtualQueryEx
0x100790b8
WriteProcessMemory
0x100790d8
GetEnvironmentVariableA
0x100790e4
GetEnvironmentVariableW
0x100790e8
SetEnvironmentVariableW
0x100790e0
CreateProcessA
0x100790fc
CreateProcessW
0x10079108
GetCurrentProcess
0x100790f0
GetCurrentProcessId
0x10079100
GetCurrentThreadId
0x100790f4
ResumeThread
0x100790f8
TerminateProcess
0x10079104
FlushInstructionCache
0x10079110
GetThreadContext
0x10079114
IsProcessorFeaturePresent
0x10079118
SetThreadContext
0x1007911c
QueryPerformanceCounter
0x10079124
AcquireSRWLockExclusive
0x10079164
AcquireSRWLockShared
0x10079160
DeleteCriticalSection
0x10079158
EnterCriticalSection
0x10079154
InitializeCriticalSection
0x1007915c
InitializeSRWLock
0x10079148
LeaveCriticalSection
0x10079150
ReleaseSRWLockExclusive
0x10079144
ReleaseSRWLockShared
0x1007914c
GetSystemTimeAsFileTime
0x1007916c
__CxxFrameHandler3
0x100791d8
_except_handler4_common
0x100791c4
_o___std_type_info_destroy_list
0x100791d4
_o___stdio_common_vsprintf
0x100791cc
_o___stdio_common_vsprintf_s
0x100791c8
_o___stdio_common_vswprintf
0x100791a4
_o___stdio_common_vswprintf_s
0x100791dc
_o__callnewh
0x100791d0
_o__cexit
0x100791a8
_o__configure_narrow_argv
0x10079174
_o__crt_atexit
0x10079178
_o__errno
0x1007917c
_o__execute_onexit_table
0x10079180
_o__gcvt_s
0x10079184
_o__initialize_narrow_environment
0x10079188
_o__initialize_onexit_table
0x1007918c
_o__invalid_parameter_noinfo
0x10079190
_o__mbsinc
0x10079194
_o__recalloc
0x10079198
_o__register_onexit_function
0x1007919c
_o__seh_filter_dll
0x100791a0
_o__ultoa_s
0x100791ac
_o__wtoi
0x100791b0
_o_calloc
0x100791b4
_o_free
0x100791b8
_o_malloc
0x100791bc
_o_wmemcpy_s
0x100791c0
memcpy
0x100791e4
memmove
0x100791e0
EventRegister
0x10079208
EventUnregister
0x10079204
EventWrite
0x1007920c
ImagehlpApiVersionEx
0x10079214
SymCleanup
0x10079220
SymFromName
0x10079234
SymGetModuleInfo64
0x10079224
SymGetOptions
0x1007921c
SymInitialize
0x10079228
SymLoadModuleEx
0x1007922c
SymRegisterCallback64
0x10079230
SymSetOptions
0x10079218
No function matches your filter.