mscordbi.dll

v4.8.4084.0 32-bit Windows Analyzed
Description
Microsoft .NET Runtime Debugging Services
Authors
© Microsoft Corporation. All rights reserved.
File size
1.1 MB
Uploaded
2025-12-01 08:48
Views
35
SHA-256
5cab66e78e34b39dd8115564cd1155e3

Exported functions 5

CreateCordbObject #1 · 0x1d2a0
DllGetClassObjectInternal #2 · 0x1d2d0
OpenVirtualProcess2 #3 · 0x1d8e0
OpenVirtualProcess #4 · 0x1d930
OpenVirtualProcessImpl #5 · 0x1d640

Imported DLLs & functions 168

ADVAPI32.dll 21
AdjustTokenPrivileges 0x10113038
CopySid 0x1011300c
DeregisterEventSource 0x10113048
EqualSid 0x10113004
EventWrite 0x10113028
GetKernelObjectSecurity 0x10113014
GetLengthSid 0x10113018
GetSecurityDescriptorOwner 0x10113010
GetSidSubAuthority 0x10113050
GetSidSubAuthorityCount 0x1011304c
GetTokenInformation 0x10113024
LookupPrivilegeValueW 0x10113040
OpenProcessToken 0x1011303c
OpenThreadToken 0x10113020
RegCloseKey 0x1011302c
RegisterEventSourceW 0x10113044
RegOpenKeyExW 0x10113030
RegQueryValueExW 0x10113034
ReportEventW 0x10113000
RevertToSelf 0x10113008
SetThreadToken 0x1011301c
KERNEL32.dll 131
ActivateActCtx 0x10113168
CloseHandle 0x10113240
ContinueDebugEvent 0x1011305c
CreateActCtxW 0x10113164
CreateEventW 0x10113238
CreateFileMappingW 0x1011307c
CreateFileW 0x10113074
CreateMutexW 0x1011313c
CreateProcessW 0x10113120
CreateSemaphoreW 0x10113150
CreateThread 0x1011320c
CreateToolhelp32Snapshot 0x1011308c
DeactivateActCtx 0x10113170
DebugActiveProcess 0x101130a8
DebugBreak 0x101130e4
DecodePointer 0x10113184
DeleteCriticalSection 0x10113250
DuplicateHandle 0x10113210
EncodePointer 0x10113180
EnterCriticalSection 0x10113244
ExitProcess 0x101131a0
FindClose 0x101130f8
FindFirstFileExA 0x101131cc
FindNextFileA 0x101131d0
FlushFileBuffers 0x101131b8
FlushInstructionCache 0x10113220
FormatMessageW 0x10113110
FreeEnvironmentStringsW 0x101130ec
FreeLibrary 0x10113064
GetACP 0x1011310c
GetCommandLineA 0x101131dc
GetCommandLineW 0x101131e0
GetConsoleCP 0x101131c0
GetConsoleMode 0x101131c4
GetCPInfo 0x10113108
GetCurrentProcess 0x10113224
GetCurrentProcessId 0x101130b4
GetCurrentThread 0x10113100
GetCurrentThreadId 0x10113228
GetEnvironmentStringsW 0x101130f0
GetEnvironmentVariableW 0x101130e8
GetFileAttributesExW 0x10113200
GetFileSize 0x10113078
GetFileType 0x101131b0
GetLastError 0x10113230
GetModuleFileNameA 0x101131a8
GetModuleFileNameW 0x101130a0
GetModuleHandleExW 0x101131a4
GetModuleHandleW 0x1011321c
GetOEMCP 0x101131d8
GetProcAddress 0x10113254
GetProcessHeap 0x101130d0
GetStartupInfoW 0x1011319c
GetStdHandle 0x101131ac
GetStringTypeW 0x101131b4
GetSystemInfo 0x101130d8
GetSystemTimeAsFileTime 0x101130c4
GetThreadContext 0x1011316c
GetWindowsDirectoryW 0x10113174
HeapAlloc 0x101130cc
HeapCreate 0x10113124
HeapDestroy 0x1011314c
HeapFree 0x101130c8
HeapReAlloc 0x101131f4
HeapSize 0x101131f0
HeapValidate 0x10113140
InitializeCriticalSection 0x1011323c
InitializeCriticalSectionAndSpinCount 0x101131c8
InitializeSListHead 0x10113198
InterlockedFlushSList 0x101131f8
IsDBCSLeadByte 0x10113114
IsDebuggerPresent 0x1011317c
IsProcessorFeaturePresent 0x10113190
IsValidCodePage 0x101131d4
IsWow64Process 0x101130b8
LCMapStringW 0x1011311c
LeaveCriticalSection 0x10113248
LoadLibraryExW 0x10113060
LocalFree 0x10113118
MapViewOfFile 0x10113080
Module32FirstW 0x10113098
Module32NextW 0x1011309c
MultiByteToWideChar 0x101130fc
OpenFileMappingW 0x101131fc
OpenProcess 0x10113068
OpenThread 0x101130b0
OutputDebugStringW 0x101130e0
QueryPerformanceCounter 0x10113194
RaiseException 0x101130d4
ReadFile 0x10113208
ReadProcessMemory 0x10113070
ReleaseActCtx 0x10113178
ReleaseMutex 0x1011306c
ReleaseSemaphore 0x1011325c
ResetEvent 0x1011322c
ResumeThread 0x10113214
SetErrorMode 0x10113260
SetEvent 0x10113234
SetFilePointer 0x10113204
SetFilePointerEx 0x101131e8
SetLastError 0x101130c0
SetStdHandle 0x101131e4
SetThreadContext 0x10113058
SetUnhandledExceptionFilter 0x1011318c
Sleep 0x10113088
SleepEx 0x10113154
SuspendThread 0x10113218
SwitchToThread 0x10113104
TerminateProcess 0x10113134
Thread32First 0x10113090
Thread32Next 0x10113094
TlsAlloc 0x10113148
TlsFree 0x1011315c
TlsGetValue 0x10113158
TlsSetValue 0x10113128
UnhandledExceptionFilter 0x10113188
UnmapViewOfFile 0x10113084
VerifyVersionInfoW 0x101130dc
VirtualAlloc 0x10113138
VirtualFree 0x10113130
VirtualProtect 0x1011312c
VirtualQuery 0x10113160
VirtualQueryEx 0x101130a4
WaitForDebugEvent 0x101130ac
WaitForMultipleObjectsEx 0x1011324c
WaitForSingleObject 0x10113258
WaitForSingleObjectEx 0x10113144
WideCharToMultiByte 0x101130f4
WriteConsoleW 0x101131ec
WriteFile 0x101131bc
WriteProcessMemory 0x101130bc
ntdll.dll 2
RtlUnwind 0x10113298
VerSetConditionMask 0x10113294
ole32.dll 6
CoCreateFreeThreadedMarshaler 0x101132ac
CoCreateGuid 0x101132a8
CoTaskMemAlloc 0x101132b4
CoTaskMemFree 0x101132a0
CreateStreamOnHGlobal 0x101132a4
IIDFromString 0x101132b0
OLEAUT32.dll 3
CreateErrorInfo 0x10113268
SetErrorInfo 0x10113270
VariantInit 0x1011326c
USER32.dll 3
GetProcessWindowStation 0x10113280
GetUserObjectInformationW 0x1011327c
LoadStringW 0x10113278
WTSAPI32.dll 2
WTSEnumerateProcessesW 0x10113288
WTSFreeMemory 0x1011328c