mfdetours.dll
v1.1.0.1
Unknown (0xaa64)
Windows
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, VirtualAllocEx
Exported functions 3
Shutdown
#1 · 0x34b0
Startup
#2 · 0x3720
DllGetMFDebugHlp
#3 · 0x8270
No function matches your filter.
Imported DLLs & functions 116
CoTaskMemAlloc
0x180048040
CoTaskMemFree
0x180048058
PropVariantClear
0x180048050
StringFromGUID2
0x180048048
DebugBreak
0x180048068
GetLastError
0x180048080
RaiseException
0x180048078
SetLastError
0x180048088
CloseHandle
0x180048098
GetProcessHeap
0x1800480b8
HeapAlloc
0x1800480b0
HeapDestroy
0x1800480c0
HeapFree
0x1800480a8
HeapReAlloc
0x1800480d0
HeapSize
0x1800480c8
InitializeSListHead
0x1800480e0
DisableThreadLibraryCalls
0x180048118
FindResourceExW
0x180048110
FreeLibrary
0x180048108
GetModuleFileNameA
0x180048128
GetModuleHandleExW
0x180048138
GetModuleHandleW
0x180048100
GetProcAddress
0x180048130
LoadResource
0x1800480f0
LockResource
0x1800480f8
SizeofResource
0x180048120
LoadLibraryA
0x180048148
ReadProcessMemory
0x180048198
VirtualAlloc
0x180048178
VirtualAllocEx
0x180048180
VirtualFree
0x180048158
VirtualProtect
0x180048170
VirtualProtectEx
0x180048190
VirtualQuery
0x180048160
VirtualQueryEx
0x180048168
WriteProcessMemory
0x180048188
GetEnvironmentVariableA
0x1800481a8
GetEnvironmentVariableW
0x1800481b8
SetEnvironmentVariableW
0x1800481b0
CreateProcessA
0x1800481c8
CreateProcessW
0x1800481d0
GetCurrentProcess
0x1800481e8
GetCurrentProcessId
0x1800481d8
GetCurrentThreadId
0x1800481e0
ResumeThread
0x1800481f8
TerminateProcess
0x1800481f0
FlushInstructionCache
0x180048210
GetThreadContext
0x180048218
SetThreadContext
0x180048208
QueryPerformanceCounter
0x180048228
AcquireSRWLockExclusive
0x1800482a8
AcquireSRWLockShared
0x180048268
DeleteCriticalSection
0x180048298
EnterCriticalSection
0x180048290
InitializeCriticalSection
0x1800482a0
InitializeSRWLock
0x180048270
LeaveCriticalSection
0x180048288
ReleaseSRWLockExclusive
0x180048280
ReleaseSRWLockShared
0x180048278
GetSystemTimeAsFileTime
0x1800482b8
IsWow64Process
0x1800482c8
__C_specific_handler
0x180048360
_o___std_type_info_destroy_list
0x180048388
_o___stdio_common_vsprintf
0x180048378
_o___stdio_common_vsprintf_s
0x180048370
_o___stdio_common_vswprintf
0x180048368
_o___stdio_common_vswprintf_s
0x180048328
_o__callnewh
0x1800483a0
_o__cexit
0x180048398
_o__configure_narrow_argv
0x180048390
_o__crt_atexit
0x180048380
_o__errno
0x1800482d8
_o__execute_onexit_table
0x1800482e0
_o__gcvt_s
0x1800482e8
_o__initialize_narrow_environment
0x1800482f0
_o__initialize_onexit_table
0x1800482f8
_o__invalid_parameter_noinfo
0x180048300
_o__mbsinc
0x180048308
_o__recalloc
0x180048310
_o__register_onexit_function
0x180048318
_o__seh_filter_dll
0x180048320
_o__ultoa_s
0x180048330
_o__wtoi
0x180048338
_o_calloc
0x180048340
_o_free
0x180048348
_o_malloc
0x180048350
_o_wmemcpy_s
0x180048358
memcmp
0x1800483a8
memcpy
0x1800483b8
memmove
0x1800483b0
EventRegister
0x180048400
EventUnregister
0x1800483f8
EventWrite
0x180048408
ImagehlpApiVersionEx
0x180048418
SymCleanup
0x180048430
SymFromName
0x180048458
SymGetModuleInfo64
0x180048438
SymGetOptions
0x180048428
SymInitialize
0x180048440
SymLoadModuleEx
0x180048448
SymRegisterCallback64
0x180048450
SymSetOptions
0x180048420
No function matches your filter.