mscordbi.dll

v4.8.4645.0 32-bit Windows Analyzed
Description
Microsoft .NET Runtime Debugging Services
Authors
© Microsoft Corporation. All rights reserved.
File size
1.1 MB
Uploaded
2025-12-01 08:48
Views
35
SHA-256
bc344d3d9040eed585f018b1adcd6e48

Exported functions 5

CreateCordbObject #1 · 0x1d310
DllGetClassObjectInternal #2 · 0x1d340
OpenVirtualProcess2 #3 · 0x1d950
OpenVirtualProcess #4 · 0x1d9a0
OpenVirtualProcessImpl #5 · 0x1d6b0

Imported DLLs & functions 168

ADVAPI32.dll 21
AdjustTokenPrivileges 0x10113044
CopySid 0x10113010
DeregisterEventSource 0x10113000
EqualSid 0x10113004
EventWrite 0x10113034
GetKernelObjectSecurity 0x10113018
GetLengthSid 0x1011301c
GetSecurityDescriptorOwner 0x10113014
GetSidSubAuthority 0x10113024
GetSidSubAuthorityCount 0x10113020
GetTokenInformation 0x10113030
LookupPrivilegeValueW 0x1011304c
OpenProcessToken 0x10113048
OpenThreadToken 0x1011302c
RegCloseKey 0x10113038
RegisterEventSourceW 0x10113008
RegOpenKeyExW 0x1011303c
RegQueryValueExW 0x10113040
ReportEventW 0x1011300c
RevertToSelf 0x10113050
SetThreadToken 0x10113028
KERNEL32.dll 131
ActivateActCtx 0x10113160
CloseHandle 0x10113240
ContinueDebugEvent 0x10113130
CreateActCtxW 0x1011315c
CreateEventW 0x10113238
CreateFileMappingW 0x10113074
CreateFileW 0x1011306c
CreateMutexW 0x10113134
CreateProcessW 0x10113118
CreateSemaphoreW 0x10113148
CreateThread 0x1011320c
CreateToolhelp32Snapshot 0x10113084
DeactivateActCtx 0x10113260
DebugActiveProcess 0x101130a0
DebugBreak 0x101130dc
DecodePointer 0x1011317c
DeleteCriticalSection 0x10113250
DuplicateHandle 0x10113210
EncodePointer 0x10113178
EnterCriticalSection 0x10113244
ExitProcess 0x10113198
FindClose 0x101130f0
FindFirstFileExA 0x101131c4
FindNextFileA 0x101131c8
FlushFileBuffers 0x101131b0
FlushInstructionCache 0x10113220
FormatMessageW 0x10113108
FreeEnvironmentStringsW 0x101130e4
FreeLibrary 0x1011305c
GetACP 0x10113104
GetCommandLineA 0x101131d4
GetCommandLineW 0x101131d8
GetConsoleCP 0x101131b8
GetConsoleMode 0x101131bc
GetCPInfo 0x10113100
GetCurrentProcess 0x10113224
GetCurrentProcessId 0x101130ac
GetCurrentThread 0x101130f8
GetCurrentThreadId 0x10113228
GetEnvironmentStringsW 0x101130e8
GetEnvironmentVariableW 0x101130e0
GetFileAttributesExW 0x101131f8
GetFileSize 0x10113070
GetFileType 0x101131a8
GetLastError 0x10113230
GetModuleFileNameA 0x101131a0
GetModuleFileNameW 0x10113098
GetModuleHandleExW 0x1011319c
GetModuleHandleW 0x1011321c
GetOEMCP 0x101131d0
GetProcAddress 0x10113254
GetProcessHeap 0x101130c8
GetStartupInfoW 0x10113194
GetStdHandle 0x101131a4
GetStringTypeW 0x101131ac
GetSystemInfo 0x101130d0
GetSystemTimeAsFileTime 0x101130bc
GetThreadContext 0x10113208
GetWindowsDirectoryW 0x1011316c
HeapAlloc 0x101130c4
HeapCreate 0x1011311c
HeapDestroy 0x10113144
HeapFree 0x101130c0
HeapReAlloc 0x101131ec
HeapSize 0x101131e8
HeapValidate 0x10113138
InitializeCriticalSection 0x1011323c
InitializeCriticalSectionAndSpinCount 0x101131c0
InitializeSListHead 0x10113190
InterlockedFlushSList 0x101131f0
IsDBCSLeadByte 0x1011310c
IsDebuggerPresent 0x10113174
IsProcessorFeaturePresent 0x10113188
IsValidCodePage 0x101131cc
IsWow64Process 0x101130b0
LCMapStringW 0x10113114
LeaveCriticalSection 0x10113248
LoadLibraryExW 0x10113058
LocalFree 0x10113110
MapViewOfFile 0x10113078
Module32FirstW 0x10113090
Module32NextW 0x10113094
MultiByteToWideChar 0x101130f4
OpenFileMappingW 0x101131f4
OpenProcess 0x10113060
OpenThread 0x101130a8
OutputDebugStringW 0x101130d8
QueryPerformanceCounter 0x1011318c
RaiseException 0x101130cc
ReadFile 0x10113200
ReadProcessMemory 0x10113068
ReleaseActCtx 0x10113170
ReleaseMutex 0x10113064
ReleaseSemaphore 0x1011312c
ResetEvent 0x1011322c
ResumeThread 0x10113214
SetErrorMode 0x10113164
SetEvent 0x10113234
SetFilePointer 0x101131fc
SetFilePointerEx 0x101131e0
SetLastError 0x101130b8
SetStdHandle 0x101131dc
SetThreadContext 0x10113168
SetUnhandledExceptionFilter 0x10113184
Sleep 0x10113080
SleepEx 0x1011314c
SuspendThread 0x10113218
SwitchToThread 0x101130fc
TerminateProcess 0x10113204
Thread32First 0x10113088
Thread32Next 0x1011308c
TlsAlloc 0x10113140
TlsFree 0x10113154
TlsGetValue 0x10113150
TlsSetValue 0x10113120
UnhandledExceptionFilter 0x10113180
UnmapViewOfFile 0x1011307c
VerifyVersionInfoW 0x101130d4
VirtualAlloc 0x1011325c
VirtualFree 0x10113128
VirtualProtect 0x10113124
VirtualQuery 0x10113158
VirtualQueryEx 0x1011309c
WaitForDebugEvent 0x101130a4
WaitForMultipleObjectsEx 0x1011324c
WaitForSingleObject 0x10113258
WaitForSingleObjectEx 0x1011313c
WideCharToMultiByte 0x101130ec
WriteConsoleW 0x101131e4
WriteFile 0x101131b4
WriteProcessMemory 0x101130b4
ntdll.dll 2
RtlUnwind 0x10113298
VerSetConditionMask 0x10113294
ole32.dll 6
CoCreateFreeThreadedMarshaler 0x101132ac
CoCreateGuid 0x101132a8
CoTaskMemAlloc 0x101132b4
CoTaskMemFree 0x101132a0
CreateStreamOnHGlobal 0x101132a4
IIDFromString 0x101132b0
OLEAUT32.dll 3
CreateErrorInfo 0x10113268
SetErrorInfo 0x10113270
VariantInit 0x1011326c
USER32.dll 3
GetProcessWindowStation 0x10113280
GetUserObjectInformationW 0x1011327c
LoadStringW 0x10113278
WTSAPI32.dll 2
WTSEnumerateProcessesW 0x10113288
WTSFreeMemory 0x1011328c