sh32mdp64.dll
v12.9.0.27262
64-bit
Windows NT
Analyzed
Exported functions 2
Sh32MdpRundll32EntryW
#1 · 0x1bd0
Sh32MdpServer
#2 · 0x2350
No function matches your filter.
Imported DLLs & functions 136
KERNEL32.dll
100
AcquireSRWLockExclusive
0x18060f3b0
AssignProcessToJobObject
0x18060f1a0
CloseHandle
0x18060f168
CreateEventW
0x18060f408
CreateFileW
0x18060f130
CreateJobObjectW
0x18060f198
CreateProcessW
0x18060f190
DeleteCriticalSection
0x18060f3d8
DisableThreadLibraryCalls
0x18060f1b8
EncodePointer
0x18060f380
EnterCriticalSection
0x18060f3b8
ExitProcess
0x18060f350
FindClose
0x18060f310
FindFirstFileExW
0x18060f308
FindNextFileW
0x18060f300
FlushFileBuffers
0x18060f2a0
FlushInstructionCache
0x18060f250
FreeEnvironmentStringsW
0x18060f2b8
FreeLibrary
0x18060f278
GetACP
0x18060f2f0
GetCommandLineA
0x18060f2d8
GetCommandLineW
0x18060f2d0
GetConsoleCP
0x18060f290
GetConsoleMode
0x18060f150
GetCPInfo
0x18060f2e0
GetCurrentProcess
0x18060f1c8
GetCurrentProcessId
0x18060f230
GetCurrentThread
0x18060f1d0
GetCurrentThreadId
0x18060f238
GetEnvironmentStringsW
0x18060f2c0
GetEnvironmentVariableW
0x18060f158
GetFileSizeEx
0x18060f320
GetFileType
0x18060f328
GetLastError
0x18060f170
GetModuleFileNameW
0x18060f208
GetModuleHandleA
0x18060f228
GetModuleHandleExW
0x18060f358
GetModuleHandleW
0x18060f1e8
GetOEMCP
0x18060f2e8
GetProcAddress
0x18060f1f0
GetProcessHeap
0x18060f2b0
GetStartupInfoW
0x18060f428
GetStdHandle
0x18060f330
GetStringTypeW
0x18060f2a8
GetSystemInfo
0x18060f398
GetSystemTimeAsFileTime
0x18060f3e8
GetThreadContext
0x18060f220
GetWindowsDirectoryW
0x18060f1d8
HeapAlloc
0x18060f348
HeapFree
0x18060f340
HeapReAlloc
0x18060f138
HeapSize
0x18060f140
InitializeCriticalSectionAndSpinCount
0x18060f3f0
InitializeCriticalSectionEx
0x18060f3c8
InitializeSListHead
0x18060f438
InitializeSRWLock
0x18060f128
InterlockedFlushSList
0x18060f388
IsDebuggerPresent
0x18060f410
IsProcessorFeaturePresent
0x18060f430
IsValidCodePage
0x18060f2f8
IsWow64Process
0x18060f1e0
LCMapStringW
0x18060f338
LeaveCriticalSection
0x18060f3c0
LoadLibraryExA
0x18060f280
LoadLibraryExW
0x18060f288
LoadLibraryW
0x18060f1f8
lstrcmpiW
0x18060f1c0
MultiByteToWideChar
0x18060f2c8
QueryPerformanceCounter
0x18060f3e0
RaiseException
0x18060f390
ReleaseSRWLockExclusive
0x18060f3a8
ResetEvent
0x18060f400
ResumeThread
0x18060f188
SetEnvironmentVariableW
0x18060f160
SetEvent
0x18060f3f8
SetFilePointerEx
0x18060f318
SetInformationJobObject
0x18060f1b0
SetLastError
0x18060f270
SetStdHandle
0x18060f148
SetThreadContext
0x18060f248
SetUnhandledExceptionFilter
0x18060f420
Sleep
0x18060f210
SuspendThread
0x18060f240
TerminateJobObject
0x18060f1a8
TerminateProcess
0x18060f180
TlsAlloc
0x18060f378
TlsFree
0x18060f360
TlsGetValue
0x18060f370
TlsSetValue
0x18060f368
TryEnterCriticalSection
0x18060f3d0
UnhandledExceptionFilter
0x18060f418
VirtualAlloc
0x18060f258
VirtualFree
0x18060f268
VirtualProtect
0x18060f260
VirtualQuery
0x18060f200
WaitForSingleObject
0x18060f178
WaitForSingleObjectEx
0x18060f3a0
WideCharToMultiByte
0x18060f218
WriteConsoleW
0x18060f440
WriteFile
0x18060f298
ntdll.dll
36
LdrGetDllHandleByName
0x18060f0d0
LdrGetProcedureAddress
0x18060f0c8
NtAllocateVirtualMemory
0x18060f0b8
NtClose
0x18060f080
NtCreateFile
0x18060f050
NtFreeVirtualMemory
0x18060f0b0
NtMapViewOfSection
0x18060f090
NtOpenSection
0x18060f098
NtOpenThread
0x18060f070
NtQueryInformationFile
0x18060f048
NtQueryInformationProcess
0x18060f078
NtQuerySystemInformation
0x18060f0c0
NtQueueApcThread
0x18060f058
NtReadFile
0x18060f040
NtReadVirtualMemory
0x18060f0a8
NtSuspendThread
0x18060f108
NtTerminateThread
0x18060f068
NtUnmapViewOfSection
0x18060f088
NtWriteVirtualMemory
0x18060f0a0
RtlAppendUnicodeToString
0x18060f018
RtlAssert
0x18060f060
RtlCaptureContext
0x18060f0d8
RtlCompareString
0x18060f030
RtlCompareUnicodeString
0x18060f110
RtlCreateUnicodeString
0x18060f028
RtlDosPathNameToNtPathName_U_WithStatus
0x18060f008
RtlDowncaseUnicodeString
0x18060f010
RtlFreeUnicodeString
0x18060f020
RtlGetNativeSystemInformation
0x18060f000
RtlInitAnsiString
0x18060f038
RtlInitUnicodeString
0x18060f118
RtlLookupFunctionEntry
0x18060f0e8
RtlPcToFileHeader
0x18060f0f8
RtlQueueApcWow64Thread
0x18060f0e0
RtlUnwindEx
0x18060f100
RtlVirtualUnwind
0x18060f0f0
No function matches your filter.