XLBugHandler.dll
v4.2.1.15
32-bit
Windows
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 22
_XL_AddCrashProcess@12
#1 · 0x26b7
_XL_AddRuntimeLogfile@4
#2 · 0x41f1
_XL_EnableModuleLoadLog@4
#3 · 0x2108
_XL_EnableReportAutoRestartApp@8
#4 · 0x3f0d
_XL_EnableThreadLog@4
#5 · 0x1eba
_XL_EnableXLDoctor@16
#6 · 0x1235
_XL_InitBugHandler@20
#7 · 0x468d
_XL_IsEnableModuleLoadLog@0
#8 · 0x3cb0
_XL_IsEnableThreadLog@0
#9 · 0x1578
_XL_RemoveCrashProcess@4
#10 · 0x1a2d
_XL_SetAlwaysSendReport@4
#11 · 0x1465
_XL_SetBugReportRootDir@4
#12 · 0x37ce
_XL_SetBusinessName@4
#13 · 0x3445
_XL_SetContinueDefaultFilter@4
#14 · 0x3da5
_XL_SetCustomInfo@4
#15 · 0x3b9d
_XL_SetExtraInfo@8
#16 · 0x4354
_XL_SetPeerID@4
#17 · 0x3161
_XL_SetProcessWorkState@4
#18 · 0x4142
_XL_SetReportLanguageID@4
#19 · 0x3fa3
_XL_SetReportPath@4
#20 · 0x3490
_XL_SetReportShowMode@4
#21 · 0x391d
_XL_SetRuntimeInfo@8
#22 · 0x4205
No function matches your filter.
Imported DLLs & functions 154
GetTraceEnableLevel
0x100dd000
GetTraceLoggerHandle
0x100dd004
RegCloseKey
0x100dd014
RegisterTraceGuidsW
0x100dd00c
RegOpenKeyW
0x100dd010
RegQueryValueExW
0x100dd01c
TraceEvent
0x100dd018
UnregisterTraceGuids
0x100dd008
KERNEL32.dll
130
CloseHandle
0x100dd070
CompareStringW
0x100dd218
CopyFileW
0x100dd0e4
CreateEventW
0x100dd118
CreateFileW
0x100dd06c
CreateThread
0x100dd1f4
CreateToolhelp32Snapshot
0x100dd0fc
DecodePointer
0x100dd16c
DeleteCriticalSection
0x100dd10c
EncodePointer
0x100dd1f0
EnterCriticalSection
0x100dd080
EnumSystemLocalesW
0x100dd22c
ExitProcess
0x100dd204
ExitThread
0x100dd1f8
FileTimeToSystemTime
0x100dd0f0
FindClose
0x100dd254
FindFirstFileExW
0x100dd19c
FindNextFileW
0x100dd198
FlushFileBuffers
0x100dd250
FlushInstructionCache
0x100dd148
FreeEnvironmentStringsW
0x100dd060
FreeLibrary
0x100dd0b8
FreeLibraryAndExitThread
0x100dd1fc
GetACP
0x100dd190
GetCommandLineA
0x100dd184
GetCommandLineW
0x100dd068
GetConsoleCP
0x100dd240
GetConsoleMode
0x100dd244
GetCPInfo
0x100dd188
GetCurrentDirectoryW
0x100dd120
GetCurrentProcess
0x100dd08c
GetCurrentProcessId
0x100dd090
GetCurrentThread
0x100dd098
GetCurrentThreadId
0x100dd09c
GetDateFormatW
0x100dd210
GetEnvironmentStringsW
0x100dd15c
GetFileSizeEx
0x100dd248
GetFileType
0x100dd234
GetLastError
0x100dd078
GetLocaleInfoW
0x100dd220
GetModuleFileNameW
0x100dd0bc
GetModuleHandleA
0x100dd0c0
GetModuleHandleExW
0x100dd200
GetModuleHandleW
0x100dd0c4
GetOEMCP
0x100dd18c
GetPrivateProfileIntW
0x100dd180
GetPrivateProfileStringW
0x100dd0dc
GetProcAddress
0x100dd0c8
GetProcessHeap
0x100dd058
GetProcessTimes
0x100dd088
GetStartupInfoW
0x100dd1d8
GetStdHandle
0x100dd230
GetStringTypeW
0x100dd050
GetSystemDirectoryW
0x100dd0b4
GetSystemTime
0x100dd0ac
GetSystemTimeAsFileTime
0x100dd1c0
GetTempPathW
0x100dd124
GetThreadContext
0x100dd0a0
GetThreadSelectorEntry
0x100dd134
GetTickCount
0x100dd0b0
GetTimeFormatW
0x100dd214
GetTimeZoneInformation
0x100dd238
GetUserDefaultLCID
0x100dd228
GetVersionExW
0x100dd128
GlobalMemoryStatusEx
0x100dd0a8
HeapAlloc
0x100dd208
HeapFree
0x100dd20c
HeapReAlloc
0x100dd170
HeapSize
0x100dd168
InitializeCriticalSection
0x100dd108
InitializeCriticalSectionAndSpinCount
0x100dd1a8
InitializeSListHead
0x100dd1dc
InterlockedCompareExchange
0x100dd13c
InterlockedFlushSList
0x100dd1ec
InterlockedPushEntrySList
0x100dd1e8
IsDebuggerPresent
0x100dd1d4
IsProcessorFeaturePresent
0x100dd1d0
IsValidCodePage
0x100dd194
IsValidLocale
0x100dd224
LCMapStringW
0x100dd21c
LeaveCriticalSection
0x100dd084
LoadLibraryA
0x100dd0d0
LoadLibraryExW
0x100dd0cc
LoadLibraryW
0x100dd0d4
MultiByteToWideChar
0x100dd0f4
OpenProcess
0x100dd0a4
OutputDebugStringW
0x100dd17c
Process32FirstW
0x100dd100
Process32NextW
0x100dd104
QueryPerformanceCounter
0x100dd1a0
QueryPerformanceFrequency
0x100dd1a4
RaiseException
0x100dd1e0
ReadConsoleW
0x100dd164
ReadFile
0x100dd160
ReadProcessMemory
0x100dd130
ResetEvent
0x100dd1c4
ResumeThread
0x100dd144
RtlUnwind
0x100dd1e4
SetConsoleCtrlHandler
0x100dd054
SetEndOfFile
0x100dd174
SetEnvironmentVariableW
0x100dd05c
SetErrorMode
0x100dd07c
SetEvent
0x100dd110
SetFilePointerEx
0x100dd24c
SetLastError
0x100dd12c
SetStdHandle
0x100dd0d8
SetThreadContext
0x100dd14c
SetUnhandledExceptionFilter
0x100dd074
SuspendThread
0x100dd154
SwitchToThread
0x100dd1ac
SystemTimeToTzSpecificLocalTime
0x100dd0ec
TerminateProcess
0x100dd094
TlsAlloc
0x100dd1b0
TlsFree
0x100dd1bc
TlsGetValue
0x100dd1b4
TlsSetValue
0x100dd1b8
UnhandledExceptionFilter
0x100dd1cc
VerifyVersionInfoW
0x100dd0e8
VerSetConditionMask
0x100dd064
VirtualAlloc
0x100dd158
VirtualFree
0x100dd150
VirtualProtect
0x100dd140
VirtualQuery
0x100dd138
WaitForMultipleObjects
0x100dd11c
WaitForSingleObject
0x100dd114
WaitForSingleObjectEx
0x100dd1c8
WideCharToMultiByte
0x100dd0f8
WriteConsoleW
0x100dd178
WriteFile
0x100dd23c
WritePrivateProfileStringW
0x100dd0e0
GetModuleBaseNameW
0x100dd2f0
GetPerformanceInfo
0x100dd2ec
GetProcessMemoryInfo
0x100dd2f4
QueryWorkingSet
0x100dd2f8
PathAppendW
0x100dd368
PathCombineW
0x100dd364
PathFileExistsW
0x100dd35c
PathFindFileNameW
0x100dd360
GetFileVersionInfoSizeW
0x100dd3a0
GetFileVersionInfoW
0x100dd398
VerQueryValueW
0x100dd39c
No function matches your filter.