mfdetours.dll
v1.1.0.1
32-bit
Windows
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, VirtualAllocEx
Exported functions 3
Shutdown
#1 · 0x49a60
Startup
#2 · 0x49bb0
DllGetMFDebugHlp
#3 · 0x4df50
No function matches your filter.
Imported DLLs & functions 119
CoTaskMemAlloc
0x1007802c
CoTaskMemFree
0x10078024
PropVariantClear
0x10078028
StringFromGUID2
0x10078020
GetLastError
0x1007804c
RaiseException
0x10078044
SetLastError
0x10078048
SetUnhandledExceptionFilter
0x10078040
UnhandledExceptionFilter
0x10078050
CloseHandle
0x10078058
GetProcessHeap
0x1007806c
HeapAlloc
0x10078070
HeapDestroy
0x10078060
HeapFree
0x10078074
HeapReAlloc
0x10078064
HeapSize
0x10078068
InitializeSListHead
0x1007807c
DisableThreadLibraryCalls
0x1007809c
FindResourceExW
0x10078098
FreeLibrary
0x10078084
GetModuleFileNameA
0x10078088
GetModuleHandleExW
0x10078094
GetModuleHandleW
0x100780a8
GetProcAddress
0x100780a4
LoadResource
0x1007808c
LockResource
0x100780a0
SizeofResource
0x10078090
LoadLibraryA
0x100780b0
ReadProcessMemory
0x100780d8
VirtualAlloc
0x100780d0
VirtualAllocEx
0x100780c8
VirtualFree
0x100780b8
VirtualProtect
0x100780c0
VirtualProtectEx
0x100780cc
VirtualQuery
0x100780bc
VirtualQueryEx
0x100780c4
WriteProcessMemory
0x100780d4
GetEnvironmentVariableA
0x100780e0
GetEnvironmentVariableW
0x100780e8
SetEnvironmentVariableW
0x100780e4
CreateProcessA
0x100780f0
CreateProcessW
0x100780f4
GetCurrentProcess
0x10078100
GetCurrentProcessId
0x100780f8
GetCurrentThreadId
0x100780fc
ResumeThread
0x10078108
TerminateProcess
0x10078104
FlushInstructionCache
0x10078118
GetThreadContext
0x10078110
IsProcessorFeaturePresent
0x1007811c
SetThreadContext
0x10078114
QueryPerformanceCounter
0x10078124
AcquireSRWLockExclusive
0x10078164
AcquireSRWLockShared
0x10078144
DeleteCriticalSection
0x1007815c
EnterCriticalSection
0x10078158
InitializeCriticalSection
0x10078160
InitializeSRWLock
0x10078148
LeaveCriticalSection
0x10078154
ReleaseSRWLockExclusive
0x10078150
ReleaseSRWLockShared
0x1007814c
GetSystemTimeAsFileTime
0x1007816c
IsWow64Process
0x10078174
_except_handler4_common
0x100781c4
_o___std_type_info_destroy_list
0x100781e8
_o___stdio_common_vsprintf
0x100781dc
_o___stdio_common_vsprintf_s
0x100781d8
_o___stdio_common_vswprintf
0x100781d4
_o___stdio_common_vswprintf_s
0x100781d0
_o__callnewh
0x100781cc
_o__cexit
0x100781c8
_o__configure_narrow_argv
0x1007817c
_o__crt_atexit
0x10078180
_o__errno
0x10078184
_o__execute_onexit_table
0x10078188
_o__gcvt_s
0x1007818c
_o__initialize_narrow_environment
0x10078190
_o__initialize_onexit_table
0x10078194
_o__invalid_parameter_noinfo
0x10078198
_o__mbsinc
0x1007819c
_o__recalloc
0x100781a0
_o__register_onexit_function
0x100781a4
_o__seh_filter_dll
0x100781a8
_o__ultoa_s
0x100781ac
_o__wtoi
0x100781b0
_o_calloc
0x100781b4
_o_free
0x100781b8
_o_malloc
0x100781bc
_o_wmemcpy_s
0x100781c0
memcpy
0x100781e4
memmove
0x100781e0
EventRegister
0x1007820c
EventUnregister
0x10078208
EventWrite
0x10078210
ImagehlpApiVersionEx
0x10078218
SymCleanup
0x10078224
SymFromName
0x10078238
SymGetModuleInfo64
0x10078228
SymGetOptions
0x10078220
SymInitialize
0x1007822c
SymLoadModuleEx
0x10078230
SymRegisterCallback64
0x10078234
SymSetOptions
0x1007821c
No function matches your filter.