perfts.dll
v10.0.19041.5794
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 6
OpenTSObject
#1 · 0x3d60
CollectTSObjectData
#2 · 0x4190
CloseTSObject
#3 · 0x3da0
OpenLagPerfData
#4 · 0x4930
CollectLagPerfData
#5 · 0x4940
CloseLagPerfData
#6 · 0x4960
No function matches your filter.
Imported DLLs & functions 130
ADVAPI32.dll
14
CloseTrace
0x6200f024
ControlTraceW
0x6200f01c
DeregisterEventSource
0x6200f004
EnableTraceEx2
0x6200f000
EventWriteTransfer
0x6200f02c
FlushTraceW
0x6200f020
OpenTraceW
0x6200f018
ProcessTrace
0x6200f028
QueryAllTracesW
0x6200f034
RegCloseKey
0x6200f008
RegisterEventSourceW
0x6200f010
RegOpenKeyExW
0x6200f00c
RegQueryValueExW
0x6200f014
StartTraceW
0x6200f030
KERNEL32.dll
59
AcquireSRWLockExclusive
0x6200f03c
AcquireSRWLockShared
0x6200f0c0
CloseHandle
0x6200f048
CloseThreadpoolTimer
0x6200f05c
CreateEventExW
0x6200f118
CreateMutexExW
0x6200f0bc
CreateMutexW
0x6200f100
CreateSemaphoreExW
0x6200f120
CreateThread
0x6200f070
CreateThreadpoolTimer
0x6200f054
CreateToolhelp32Snapshot
0x6200f0d4
DebugBreak
0x6200f0e8
DeleteCriticalSection
0x6200f0c4
DisableThreadLibraryCalls
0x6200f07c
EnterCriticalSection
0x6200f114
FormatMessageW
0x6200f0b4
FreeLibrary
0x6200f0f8
GetCurrentProcess
0x6200f098
GetCurrentProcessId
0x6200f0a4
GetCurrentThreadId
0x6200f0a8
GetLastError
0x6200f078
GetModuleFileNameA
0x6200f124
GetModuleHandleExW
0x6200f10c
GetModuleHandleW
0x6200f0c8
GetProcAddress
0x6200f0b8
GetProcessHeap
0x6200f088
GetSystemTimeAsFileTime
0x6200f0ac
GetTickCount
0x6200f0b0
HeapAlloc
0x6200f084
HeapFree
0x6200f0dc
HeapReAlloc
0x6200f080
InitializeCriticalSectionEx
0x6200f0fc
IsDebuggerPresent
0x6200f0e4
LeaveCriticalSection
0x6200f104
LoadLibraryW
0x6200f058
OpenProcess
0x6200f0d8
OpenSemaphoreW
0x6200f040
OutputDebugStringA
0x6200f074
OutputDebugStringW
0x6200f064
Process32FirstW
0x6200f044
Process32NextW
0x6200f068
ProcessIdToSessionId
0x6200f0d0
QueryFullProcessImageNameW
0x6200f0e0
QueryPerformanceCounter
0x6200f0a0
ReleaseMutex
0x6200f0ec
ReleaseSemaphore
0x6200f110
ReleaseSRWLockExclusive
0x6200f06c
ReleaseSRWLockShared
0x6200f050
SetEvent
0x6200f060
SetLastError
0x6200f11c
SetThreadpoolTimer
0x6200f04c
SetUnhandledExceptionFilter
0x6200f094
Sleep
0x6200f08c
TerminateProcess
0x6200f09c
UnhandledExceptionFilter
0x6200f090
WaitForMultipleObjects
0x6200f108
WaitForSingleObject
0x6200f0f0
WaitForSingleObjectEx
0x6200f0cc
WaitForThreadpoolTimerCallbacks
0x6200f0f4
msvcrt.dll
43
__CxxFrameHandler3
0x6200f188
__dllonexit
0x6200f1b8
_amsg_exit
0x6200f1d4
_callnewh
0x6200f1a4
_CxxThrowException
0x6200f194
_except_handler4_common
0x6200f1c4
_initterm
0x6200f1c8
_lock
0x6200f1c0
_ltow
0x6200f1e4
_onexit
0x6200f1b4
_purecall
0x6200f1ac
_ultow_s
0x6200f1ec
_unlock
0x6200f1bc
_vsnprintf
0x6200f1e8
_vsnprintf_s
0x6200f15c
_vsnwprintf
0x6200f180
_wcslwr_s
0x6200f154
_XcptFilter
0x6200f1d8
??_V@YAXPAX@Z
0x6200f184
??0exception@@QAE@ABQBD@Z
0x6200f1a0
??0exception@@QAE@ABQBDH@Z
0x6200f19c
??0exception@@QAE@ABV0@@Z
0x6200f160
??0exception@@QAE@XZ
0x6200f164
??1exception@@UAE@XZ
0x6200f168
??1type_info@@UAE@XZ
0x6200f150
??3@YAXPAX@Z
0x6200f170
?terminate@@YAXXZ
0x6200f14c
?what@exception@@UBEPBDXZ
0x6200f198
free
0x6200f1d0
malloc
0x6200f1cc
memcmp
0x6200f1b0
memcpy
0x6200f190
memcpy_s
0x6200f1dc
memmove
0x6200f16c
memmove_s
0x6200f1a8
memset
0x6200f1f4
vswprintf_s
0x6200f178
wcscpy_s
0x6200f17c
wcsncat_s
0x6200f1f0
wcsncpy_s
0x6200f1e0
wcsrchr
0x6200f18c
wcsstr
0x6200f158
wcstoul
0x6200f174
NtClose
0x6200f210
NtOpenKey
0x6200f200
NtQuerySystemInformation
0x6200f1fc
NtQueryValueKey
0x6200f208
RtlInitUnicodeString
0x6200f204
RtlNtStatusToDosError
0x6200f20c
StrConnectState
0x6200f12c
No function matches your filter.