MpGear.dll

v1.1.25050.5 64-bit Windows NT Analyzed
Download
Description
Microsoft Antimalware Utility Library
Authors
© Microsoft Corporation. All rights reserved.
File size
663.6 KB
Uploaded
2025-12-01 08:30
Views
27
SHA-256
fbd445e9d8c026609c44f0a449116c01

Exported functions 69

MpGearCloseHandle #1 · 0x1f40
MpGearContainerAnalyze #2 · 0x38d0
MpGearContainerCloseObject #3 · 0x39a0
MpGearContainerCommit #4 · 0x3ab0
MpGearContainerDelete #5 · 0x3af0
MpGearContainerFreeObjectInfo #6 · 0x3940
MpGearContainerGetNext #7 · 0x3880
MpGearContainerOpen #8 · 0x3800
MpGearContainerOpenObject #9 · 0x3950
MpGearContainerRead #10 · 0x39d0
MpGearContainerRecognize #11 · 0x3b70
MpGearContainerSetSize #12 · 0x3b30
MpGearContainerWrite #13 · 0x3a50
MpGearCreateManager #14 · 0x1cb0
MpGearDuplicateHandle #15 · 0x1ea0
MpGearDynamicConfigAddBinary #16 · 0x2160
MpGearDynamicConfigAddBool #17 · 0x2210
MpGearDynamicConfigAddDWORD #18 · 0x22d0
MpGearDynamicConfigAddQWORD #19 · 0x2370
MpGearDynamicConfigAddString #20 · 0x2410
MpGearDynamicConfigAddStringList #21 · 0x24c0
MpGearDynamicConfigClear #22 · 0x20d0
MpGearDynamicConfigSend #23 · 0x2570
MpGearFreeData #24 · 0x1ff0
MpGearGetDllVersion #25 · 0x2ec0
MpGearGetMAPSURLs #26 · 0x2c70
MpGearGetManagerInfo #27 · 0x1fb0
MpGearGetSigDataDWORD #28 · 0x2810
MpGearGetSigUpdateConfig #29 · 0x29a0
MpGearGetVirusNames #30 · 0x2780
MpGearInheritEngine #31 · 0x1e70
MpGearInitializeMpPLI #32 · 0x2bc0
MpGearQuarantineDelete #33 · 0x4f70
MpGearQuarantineGetNext #34 · 0x4cd0
MpGearQuarantineOpen #35 · 0x4bb0
MpGearQuarantineOpenEnumerator #36 · 0x4c40
MpGearQuarantineQuery #37 · 0x4d70
MpGearQuarantineRecover #38 · 0x4ec0
MpGearQuarantineRestore #39 · 0x4e20
MpGearRebootActions #40 · 0x2050
MpGearRenderPLIData #41 · 0x2c60
MpGearScanAddScanHint #42 · 0x46c0
MpGearScanControl #43 · 0x4220
MpGearScanFull #44 · 0x4040
MpGearScanGetNextActionResult #45 · 0x4550
MpGearScanGetNextThreat #46 · 0x4300
MpGearScanGetStatistics #47 · 0x45f0
MpGearScanOpen #48 · 0x3dc0
MpGearScanOpenActionResultsEnumerator #49 · 0x44e0
MpGearScanOpenThreatEnumerator #50 · 0x4290
MpGearScanPath #51 · 0x4110
MpGearScanQuick #52 · 0x3f70
MpGearScanSetDefaultThreatActions #53 · 0x4420
MpGearScanSetOption #54 · 0x3e50
MpGearScanSetOptionEx #55 · 0x3ef0
MpGearScanSetThreatAction #56 · 0x43a0
MpGearScanStream #57 · 0x41b0
MpGearScanSubmitReport #58 · 0x25f0
MpGearScanSubmitReportData #59 · 0x4660
MpGearScanTakeActions #60 · 0x4480
MpGearSetEngine #61 · 0x1de0
MpGearSetEngineWithResourceSigs #62 · 0x1e20
MpGearSetSigUpdateConfig #63 · 0x2930
MpGearSigUpdateCancel #64 · 0x2ad0
MpGearSigUpdateRollback #65 · 0x2b30
MpGearSigUpdateStart #66 · 0x2a40
MpGearSubmitHeartbeatReport #67 · 0x2600
MpGearSubmitHeartbeatReportData #68 · 0x26a0
MpGearSubmitReportData #69 · 0x25f0

Imported DLLs & functions 192

ADVAPI32.dll 19
CloseServiceHandle 0x180073080
EventRegister 0x180073078
EventUnregister 0x180073070
EventWriteTransfer 0x180073088
GetTraceEnableFlags 0x180073010
GetTraceEnableLevel 0x180073008
GetTraceLoggerHandle 0x180073018
OpenSCManagerW 0x180073048
OpenServiceW 0x180073040
QueryServiceConfigW 0x180073038
QueryServiceStatus 0x180073030
RegCloseKey 0x180073090
RegCreateKeyExW 0x180073068
RegisterTraceGuidsW 0x180073000
RegOpenKeyExW 0x180073060
RegQueryValueExW 0x180073058
RegSetValueExW 0x180073050
TraceMessage 0x180073020
UnregisterTraceGuids 0x180073028
CRYPT32.dll 5
CertFreeCertificateChain 0x1800730b0
CertFreeCertificateContext 0x1800730b8
CertGetCertificateChain 0x1800730a8
CertVerifyCertificateChainPolicy 0x1800730c0
CryptHashCertificate 0x1800730a0
KERNEL32.dll 125
AcquireSRWLockExclusive 0x1800733c8
CloseHandle 0x180073348
CloseThreadpool 0x180073198
CloseThreadpoolWork 0x1800731b8
CompareStringW 0x180073450
CopyFileW 0x180073300
CreateDirectoryW 0x180073260
CreateEventW 0x180073358
CreateFileW 0x180073258
CreateProcessW 0x1800730f0
CreateThreadpool 0x180073180
CreateThreadpoolWork 0x1800731a0
DecodePointer 0x180073150
DeleteCriticalSection 0x180073278
DeleteFileW 0x180073250
EncodePointer 0x180073478
EnterCriticalSection 0x180073298
ExitProcess 0x1800734b0
ExpandEnvironmentStringsW 0x180073268
FileTimeToSystemTime 0x180073368
FindClose 0x180073248
FindFirstFileExW 0x180073240
FindNextFileW 0x180073238
FlsAlloc 0x180073420
FlsFree 0x180073438
FlsGetValue 0x180073428
FlsSetValue 0x180073430
FlushFileBuffers 0x180073378
FreeEnvironmentStringsW 0x180073488
FreeLibrary 0x180073328
GetACP 0x180073460
GetCommandLineA 0x1800734a0
GetCommandLineW 0x180073498
GetComputerNameExW 0x1800731d8
GetConsoleMode 0x180073388
GetConsoleOutputCP 0x180073380
GetCPInfo 0x180073470
GetCurrentProcess 0x1800730e8
GetCurrentProcessId 0x1800733e0
GetCurrentThreadId 0x1800730d8
GetDateFormatW 0x180073440
GetEnvironmentStringsW 0x180073490
GetEnvironmentVariableW 0x1800730e0
GetExitCodeProcess 0x1800732f8
GetFileAttributesExW 0x1800731d0
GetFileAttributesW 0x180073230
GetFileSizeEx 0x180073228
GetFileType 0x180073410
GetFinalPathNameByHandleW 0x180073330
GetFullPathNameW 0x180073220
GetLastError 0x180073350
GetModuleFileNameW 0x1800732f0
GetModuleHandleExW 0x180073130
GetModuleHandleW 0x180073308
GetNativeSystemInfo 0x180073100
GetOEMCP 0x180073468
GetProcAddress 0x180073310
GetProcessHeap 0x180073148
GetStartupInfoW 0x1800733f8
GetStdHandle 0x1800731f0
GetStringTypeW 0x1800734a8
GetSystemDirectoryW 0x1800730f8
GetSystemPowerStatus 0x180073360
GetSystemTime 0x180073118
GetSystemTimeAsFileTime 0x180073120
GetTempPathW 0x180073338
GetTickCount 0x180073340
GetTimeFormatW 0x180073448
GetTimeZoneInformation 0x180073418
GlobalFree 0x1800732a8
HeapAlloc 0x180073138
HeapFree 0x180073140
HeapReAlloc 0x1800731c0
HeapSize 0x1800731c8
InitializeCriticalSection 0x1800731e0
InitializeCriticalSectionAndSpinCount 0x180073288
InitializeCriticalSectionEx 0x1800733a8
InitializeSListHead 0x1800733e8
InterlockedFlushSList 0x180073408
IsDebuggerPresent 0x1800733f0
IsProcessorFeaturePresent 0x1800733b8
IsValidCodePage 0x180073458
LCMapStringW 0x180073480
LeaveCriticalSection 0x180073290
LoadLibraryExW 0x1800730d0
lstrcmpiW 0x180073320
MultiByteToWideChar 0x1800732b8
OutputDebugStringW 0x180073398
QueryPerformanceCounter 0x1800732e8
QueryPerformanceFrequency 0x180073110
RaiseException 0x180073400
ReadConsoleW 0x180073390
ReadFile 0x180073218
ReleaseSRWLockExclusive 0x1800733c0
RemoveDirectoryW 0x180073210
SetEndOfFile 0x1800732d0
SetEnvironmentVariableW 0x180073270
SetEvent 0x180073200
SetFileAttributesW 0x180073208
SetFilePointerEx 0x1800732e0
SetLastError 0x1800732c8
SetStdHandle 0x180073370
SetThreadpoolThreadMaximum 0x180073188
SetThreadpoolThreadMinimum 0x180073190
SetUnhandledExceptionFilter 0x1800733b0
Sleep 0x180073318
SleepConditionVariableSRW 0x1800733d8
SubmitThreadpoolWork 0x1800731a8
SwitchToThread 0x180073178
SystemTimeToFileTime 0x1800732b0
TerminateProcess 0x180073108
TlsAlloc 0x180073158
TlsFree 0x180073170
TlsGetValue 0x180073160
TlsSetValue 0x180073168
TryEnterCriticalSection 0x180073280
UnhandledExceptionFilter 0x1800731e8
VirtualLock 0x1800732a0
WaitForMultipleObjects 0x180073128
WaitForSingleObject 0x1800731f8
WaitForThreadpoolWorkCallbacks 0x1800731b0
WakeAllConditionVariable 0x1800733d0
WideCharToMultiByte 0x1800732c0
WriteConsoleW 0x1800733a0
WriteFile 0x1800732d8
ntdll.dll 7
RtlCaptureContext 0x1800735e8
RtlGetVersion 0x1800735d8
RtlLookupFunctionEntry 0x1800735c0
RtlNtStatusToDosError 0x1800735c8
RtlPcToFileHeader 0x1800735f0
RtlUnwindEx 0x1800735e0
RtlVirtualUnwind 0x1800735d0
ole32.dll 8
CoCreateGuid 0x180073610
CoCreateInstance 0x180073628
CoInitializeEx 0x180073620
CoSetProxyBlanket 0x180073630
CoUninitialize 0x180073600
CoWaitForMultipleHandles 0x180073608
IIDFromString 0x180073638
StringFromGUID2 0x180073618
OLEAUT32.dll 5
SysAllocString 0x1800734d8
SysFreeString 0x1800734c0
SysStringLen 0x1800734d0
VariantClear 0x1800734e0
VariantInit 0x1800734c8
SHLWAPI.dll 1
PathIsURLW 0x1800734f0
WINHTTP.dll 19
WinHttpAddRequestHeaders 0x180073548
WinHttpCloseHandle 0x180073528
WinHttpConnect 0x180073518
WinHttpCrackUrl 0x180073520
WinHttpGetDefaultProxyConfiguration 0x180073510
WinHttpGetIEProxyConfigForCurrentUser 0x180073590
WinHttpGetProxyForUrl 0x180073508
WinHttpOpen 0x180073578
WinHttpOpenRequest 0x180073570
WinHttpQueryDataAvailable 0x180073500
WinHttpQueryHeaders 0x180073580
WinHttpQueryOption 0x180073540
WinHttpReadData 0x180073588
WinHttpReceiveResponse 0x180073558
WinHttpSendRequest 0x180073568
WinHttpSetOption 0x180073560
WinHttpSetStatusCallback 0x180073530
WinHttpSetTimeouts 0x180073538
WinHttpWriteData 0x180073550
WINTRUST.dll 3
WinVerifyTrust 0x1800735a8
WTHelperGetProvSignerFromChain 0x1800735a0
WTHelperProvDataFromStateData 0x1800735b0