MpGear.dll

Description: Microsoft Antimalware Utility Library

Version: 1.1.25050.5

Architecture: 64-bit

Operating System: Windows NT

SHA256: fbd445e9d8c026609c44f0a449116c01

File Size: 663.6 KB

Uploaded At: Dec. 1, 2025, 8:30 a.m.

Views: 14

Exported Functions

MpGearCloseHandle (Ordinal: 1, Address: 0x1f40)
MpGearContainerAnalyze (Ordinal: 2, Address: 0x38d0)
MpGearContainerCloseObject (Ordinal: 3, Address: 0x39a0)
MpGearContainerCommit (Ordinal: 4, Address: 0x3ab0)
MpGearContainerDelete (Ordinal: 5, Address: 0x3af0)
MpGearContainerFreeObjectInfo (Ordinal: 6, Address: 0x3940)
MpGearContainerGetNext (Ordinal: 7, Address: 0x3880)
MpGearContainerOpen (Ordinal: 8, Address: 0x3800)
MpGearContainerOpenObject (Ordinal: 9, Address: 0x3950)
MpGearContainerRead (Ordinal: 10, Address: 0x39d0)
MpGearContainerRecognize (Ordinal: 11, Address: 0x3b70)
MpGearContainerSetSize (Ordinal: 12, Address: 0x3b30)
MpGearContainerWrite (Ordinal: 13, Address: 0x3a50)
MpGearCreateManager (Ordinal: 14, Address: 0x1cb0)
MpGearDuplicateHandle (Ordinal: 15, Address: 0x1ea0)
MpGearDynamicConfigAddBinary (Ordinal: 16, Address: 0x2160)
MpGearDynamicConfigAddBool (Ordinal: 17, Address: 0x2210)
MpGearDynamicConfigAddDWORD (Ordinal: 18, Address: 0x22d0)
MpGearDynamicConfigAddQWORD (Ordinal: 19, Address: 0x2370)
MpGearDynamicConfigAddString (Ordinal: 20, Address: 0x2410)
MpGearDynamicConfigAddStringList (Ordinal: 21, Address: 0x24c0)
MpGearDynamicConfigClear (Ordinal: 22, Address: 0x20d0)
MpGearDynamicConfigSend (Ordinal: 23, Address: 0x2570)
MpGearFreeData (Ordinal: 24, Address: 0x1ff0)
MpGearGetDllVersion (Ordinal: 25, Address: 0x2ec0)
MpGearGetMAPSURLs (Ordinal: 26, Address: 0x2c70)
MpGearGetManagerInfo (Ordinal: 27, Address: 0x1fb0)
MpGearGetSigDataDWORD (Ordinal: 28, Address: 0x2810)
MpGearGetSigUpdateConfig (Ordinal: 29, Address: 0x29a0)
MpGearGetVirusNames (Ordinal: 30, Address: 0x2780)
MpGearInheritEngine (Ordinal: 31, Address: 0x1e70)
MpGearInitializeMpPLI (Ordinal: 32, Address: 0x2bc0)
MpGearQuarantineDelete (Ordinal: 33, Address: 0x4f70)
MpGearQuarantineGetNext (Ordinal: 34, Address: 0x4cd0)
MpGearQuarantineOpen (Ordinal: 35, Address: 0x4bb0)
MpGearQuarantineOpenEnumerator (Ordinal: 36, Address: 0x4c40)
MpGearQuarantineQuery (Ordinal: 37, Address: 0x4d70)
MpGearQuarantineRecover (Ordinal: 38, Address: 0x4ec0)
MpGearQuarantineRestore (Ordinal: 39, Address: 0x4e20)
MpGearRebootActions (Ordinal: 40, Address: 0x2050)
MpGearRenderPLIData (Ordinal: 41, Address: 0x2c60)
MpGearScanAddScanHint (Ordinal: 42, Address: 0x46c0)
MpGearScanControl (Ordinal: 43, Address: 0x4220)
MpGearScanFull (Ordinal: 44, Address: 0x4040)
MpGearScanGetNextActionResult (Ordinal: 45, Address: 0x4550)
MpGearScanGetNextThreat (Ordinal: 46, Address: 0x4300)
MpGearScanGetStatistics (Ordinal: 47, Address: 0x45f0)
MpGearScanOpen (Ordinal: 48, Address: 0x3dc0)
MpGearScanOpenActionResultsEnumerator (Ordinal: 49, Address: 0x44e0)
MpGearScanOpenThreatEnumerator (Ordinal: 50, Address: 0x4290)
MpGearScanPath (Ordinal: 51, Address: 0x4110)
MpGearScanQuick (Ordinal: 52, Address: 0x3f70)
MpGearScanSetDefaultThreatActions (Ordinal: 53, Address: 0x4420)
MpGearScanSetOption (Ordinal: 54, Address: 0x3e50)
MpGearScanSetOptionEx (Ordinal: 55, Address: 0x3ef0)
MpGearScanSetThreatAction (Ordinal: 56, Address: 0x43a0)
MpGearScanStream (Ordinal: 57, Address: 0x41b0)
MpGearScanSubmitReport (Ordinal: 58, Address: 0x25f0)
MpGearScanSubmitReportData (Ordinal: 59, Address: 0x4660)
MpGearScanTakeActions (Ordinal: 60, Address: 0x4480)
MpGearSetEngine (Ordinal: 61, Address: 0x1de0)
MpGearSetEngineWithResourceSigs (Ordinal: 62, Address: 0x1e20)
MpGearSetSigUpdateConfig (Ordinal: 63, Address: 0x2930)
MpGearSigUpdateCancel (Ordinal: 64, Address: 0x2ad0)
MpGearSigUpdateRollback (Ordinal: 65, Address: 0x2b30)
MpGearSigUpdateStart (Ordinal: 66, Address: 0x2a40)
MpGearSubmitHeartbeatReport (Ordinal: 67, Address: 0x2600)
MpGearSubmitHeartbeatReportData (Ordinal: 68, Address: 0x26a0)
MpGearSubmitReportData (Ordinal: 69, Address: 0x25f0)

Imported DLLs & Functions

ADVAPI32.dll

CloseServiceHandle (Address: 0x180073080)
EventRegister (Address: 0x180073078)
EventUnregister (Address: 0x180073070)
EventWriteTransfer (Address: 0x180073088)
GetTraceEnableFlags (Address: 0x180073010)
GetTraceEnableLevel (Address: 0x180073008)
GetTraceLoggerHandle (Address: 0x180073018)
OpenSCManagerW (Address: 0x180073048)
OpenServiceW (Address: 0x180073040)
QueryServiceConfigW (Address: 0x180073038)
QueryServiceStatus (Address: 0x180073030)
RegCloseKey (Address: 0x180073090)
RegCreateKeyExW (Address: 0x180073068)
RegisterTraceGuidsW (Address: 0x180073000)
RegOpenKeyExW (Address: 0x180073060)
RegQueryValueExW (Address: 0x180073058)
RegSetValueExW (Address: 0x180073050)
TraceMessage (Address: 0x180073020)
UnregisterTraceGuids (Address: 0x180073028)

CRYPT32.dll

CertFreeCertificateChain (Address: 0x1800730b0)
CertFreeCertificateContext (Address: 0x1800730b8)
CertGetCertificateChain (Address: 0x1800730a8)
CertVerifyCertificateChainPolicy (Address: 0x1800730c0)
CryptHashCertificate (Address: 0x1800730a0)

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x1800733c8)
CloseHandle (Address: 0x180073348)
CloseThreadpool (Address: 0x180073198)
CloseThreadpoolWork (Address: 0x1800731b8)
CompareStringW (Address: 0x180073450)
CopyFileW (Address: 0x180073300)
CreateDirectoryW (Address: 0x180073260)
CreateEventW (Address: 0x180073358)
CreateFileW (Address: 0x180073258)
CreateProcessW (Address: 0x1800730f0)
CreateThreadpool (Address: 0x180073180)
CreateThreadpoolWork (Address: 0x1800731a0)
DecodePointer (Address: 0x180073150)
DeleteCriticalSection (Address: 0x180073278)
DeleteFileW (Address: 0x180073250)
EncodePointer (Address: 0x180073478)
EnterCriticalSection (Address: 0x180073298)
ExitProcess (Address: 0x1800734b0)
ExpandEnvironmentStringsW (Address: 0x180073268)
FileTimeToSystemTime (Address: 0x180073368)
FindClose (Address: 0x180073248)
FindFirstFileExW (Address: 0x180073240)
FindNextFileW (Address: 0x180073238)
FlsAlloc (Address: 0x180073420)
FlsFree (Address: 0x180073438)
FlsGetValue (Address: 0x180073428)
FlsSetValue (Address: 0x180073430)
FlushFileBuffers (Address: 0x180073378)
FreeEnvironmentStringsW (Address: 0x180073488)
FreeLibrary (Address: 0x180073328)
GetACP (Address: 0x180073460)
GetCommandLineA (Address: 0x1800734a0)
GetCommandLineW (Address: 0x180073498)
GetComputerNameExW (Address: 0x1800731d8)
GetConsoleMode (Address: 0x180073388)
GetConsoleOutputCP (Address: 0x180073380)
GetCPInfo (Address: 0x180073470)
GetCurrentProcess (Address: 0x1800730e8)
GetCurrentProcessId (Address: 0x1800733e0)
GetCurrentThreadId (Address: 0x1800730d8)
GetDateFormatW (Address: 0x180073440)
GetEnvironmentStringsW (Address: 0x180073490)
GetEnvironmentVariableW (Address: 0x1800730e0)
GetExitCodeProcess (Address: 0x1800732f8)
GetFileAttributesExW (Address: 0x1800731d0)
GetFileAttributesW (Address: 0x180073230)
GetFileSizeEx (Address: 0x180073228)
GetFileType (Address: 0x180073410)
GetFinalPathNameByHandleW (Address: 0x180073330)
GetFullPathNameW (Address: 0x180073220)
GetLastError (Address: 0x180073350)
GetModuleFileNameW (Address: 0x1800732f0)
GetModuleHandleExW (Address: 0x180073130)
GetModuleHandleW (Address: 0x180073308)
GetNativeSystemInfo (Address: 0x180073100)
GetOEMCP (Address: 0x180073468)
GetProcAddress (Address: 0x180073310)
GetProcessHeap (Address: 0x180073148)
GetStartupInfoW (Address: 0x1800733f8)
GetStdHandle (Address: 0x1800731f0)
GetStringTypeW (Address: 0x1800734a8)
GetSystemDirectoryW (Address: 0x1800730f8)
GetSystemPowerStatus (Address: 0x180073360)
GetSystemTime (Address: 0x180073118)
GetSystemTimeAsFileTime (Address: 0x180073120)
GetTempPathW (Address: 0x180073338)
GetTickCount (Address: 0x180073340)
GetTimeFormatW (Address: 0x180073448)
GetTimeZoneInformation (Address: 0x180073418)
GlobalFree (Address: 0x1800732a8)
HeapAlloc (Address: 0x180073138)
HeapFree (Address: 0x180073140)
HeapReAlloc (Address: 0x1800731c0)
HeapSize (Address: 0x1800731c8)
InitializeCriticalSection (Address: 0x1800731e0)
InitializeCriticalSectionAndSpinCount (Address: 0x180073288)
InitializeCriticalSectionEx (Address: 0x1800733a8)
InitializeSListHead (Address: 0x1800733e8)
InterlockedFlushSList (Address: 0x180073408)
IsDebuggerPresent (Address: 0x1800733f0)
IsProcessorFeaturePresent (Address: 0x1800733b8)
IsValidCodePage (Address: 0x180073458)
LCMapStringW (Address: 0x180073480)
LeaveCriticalSection (Address: 0x180073290)
LoadLibraryExW (Address: 0x1800730d0)
lstrcmpiW (Address: 0x180073320)
MultiByteToWideChar (Address: 0x1800732b8)
OutputDebugStringW (Address: 0x180073398)
QueryPerformanceCounter (Address: 0x1800732e8)
QueryPerformanceFrequency (Address: 0x180073110)
RaiseException (Address: 0x180073400)
ReadConsoleW (Address: 0x180073390)
ReadFile (Address: 0x180073218)
ReleaseSRWLockExclusive (Address: 0x1800733c0)
RemoveDirectoryW (Address: 0x180073210)
SetEndOfFile (Address: 0x1800732d0)
SetEnvironmentVariableW (Address: 0x180073270)
SetEvent (Address: 0x180073200)
SetFileAttributesW (Address: 0x180073208)
SetFilePointerEx (Address: 0x1800732e0)
SetLastError (Address: 0x1800732c8)
SetStdHandle (Address: 0x180073370)
SetThreadpoolThreadMaximum (Address: 0x180073188)
SetThreadpoolThreadMinimum (Address: 0x180073190)
SetUnhandledExceptionFilter (Address: 0x1800733b0)
Sleep (Address: 0x180073318)
SleepConditionVariableSRW (Address: 0x1800733d8)
SubmitThreadpoolWork (Address: 0x1800731a8)
SwitchToThread (Address: 0x180073178)
SystemTimeToFileTime (Address: 0x1800732b0)
TerminateProcess (Address: 0x180073108)
TlsAlloc (Address: 0x180073158)
TlsFree (Address: 0x180073170)
TlsGetValue (Address: 0x180073160)
TlsSetValue (Address: 0x180073168)
TryEnterCriticalSection (Address: 0x180073280)
UnhandledExceptionFilter (Address: 0x1800731e8)
VirtualLock (Address: 0x1800732a0)
WaitForMultipleObjects (Address: 0x180073128)
WaitForSingleObject (Address: 0x1800731f8)
WaitForThreadpoolWorkCallbacks (Address: 0x1800731b0)
WakeAllConditionVariable (Address: 0x1800733d0)
WideCharToMultiByte (Address: 0x1800732c0)
WriteConsoleW (Address: 0x1800733a0)
WriteFile (Address: 0x1800732d8)

ntdll.dll

RtlCaptureContext (Address: 0x1800735e8)
RtlGetVersion (Address: 0x1800735d8)
RtlLookupFunctionEntry (Address: 0x1800735c0)
RtlNtStatusToDosError (Address: 0x1800735c8)
RtlPcToFileHeader (Address: 0x1800735f0)
RtlUnwindEx (Address: 0x1800735e0)
RtlVirtualUnwind (Address: 0x1800735d0)

ole32.dll

CoCreateGuid (Address: 0x180073610)
CoCreateInstance (Address: 0x180073628)
CoInitializeEx (Address: 0x180073620)
CoSetProxyBlanket (Address: 0x180073630)
CoUninitialize (Address: 0x180073600)
CoWaitForMultipleHandles (Address: 0x180073608)
IIDFromString (Address: 0x180073638)
StringFromGUID2 (Address: 0x180073618)

OLEAUT32.dll

SysAllocString (Address: 0x1800734d8)
SysFreeString (Address: 0x1800734c0)
SysStringLen (Address: 0x1800734d0)
VariantClear (Address: 0x1800734e0)
VariantInit (Address: 0x1800734c8)

SHLWAPI.dll

PathIsURLW (Address: 0x1800734f0)

WINHTTP.dll

WinHttpAddRequestHeaders (Address: 0x180073548)
WinHttpCloseHandle (Address: 0x180073528)
WinHttpConnect (Address: 0x180073518)
WinHttpCrackUrl (Address: 0x180073520)
WinHttpGetDefaultProxyConfiguration (Address: 0x180073510)
WinHttpGetIEProxyConfigForCurrentUser (Address: 0x180073590)
WinHttpGetProxyForUrl (Address: 0x180073508)
WinHttpOpen (Address: 0x180073578)
WinHttpOpenRequest (Address: 0x180073570)
WinHttpQueryDataAvailable (Address: 0x180073500)
WinHttpQueryHeaders (Address: 0x180073580)
WinHttpQueryOption (Address: 0x180073540)
WinHttpReadData (Address: 0x180073588)
WinHttpReceiveResponse (Address: 0x180073558)
WinHttpSendRequest (Address: 0x180073568)
WinHttpSetOption (Address: 0x180073560)
WinHttpSetStatusCallback (Address: 0x180073530)
WinHttpSetTimeouts (Address: 0x180073538)
WinHttpWriteData (Address: 0x180073550)

WINTRUST.dll

WinVerifyTrust (Address: 0x1800735a8)
WTHelperGetProvSignerFromChain (Address: 0x1800735a0)
WTHelperProvDataFromStateData (Address: 0x1800735b0)