vdmdbg.dll
v10.0.19041.1
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, OpenProcess, CreateRemoteThread
Exported functions 28
VDMBreakThread
#1 · 0x35a0
VDMDetectWOW
#2 · 0x3760
VDMEnumProcessWOW
#3 · 0x3770
VDMEnumTaskWOW
#4 · 0x3a20
VDMEnumTaskWOWEx
#5 · 0x3a40
VDMGetAddrExpression
#6 · 0x2680
VDMGetContext
#7 · 0x3090
VDMGetDbgFlags
#8 · 0x3650
VDMGetModuleSelector
#9 · 0x3630
VDMGetPointer
#10 · 0x2ff0
VDMGetSegmentInfo
#11 · 0x1a40
VDMGetSegtablePointer
#12 · 0x15d0
VDMGetSelectorModule
#13 · 0x3600
VDMGetSymbol
#14 · 0x21c0
VDMGetThreadContext
#15 · 0x3010
VDMGetThreadSelectorEntry
#16 · 0x2fd0
VDMGlobalFirst
#17 · 0x27b0
VDMGlobalNext
#18 · 0x2850
VDMIsModuleLoaded
#19 · 0x15e0
VDMKillWOW
#20 · 0x3760
VDMModuleFirst
#21 · 0x29b0
VDMModuleNext
#22 · 0x2a70
VDMProcessException
#23 · 0x35b0
VDMSetContext
#24 · 0x32d0
VDMSetDbgFlags
#25 · 0x36c0
VDMSetThreadContext
#26 · 0x3050
VDMStartTaskInWOW
#27 · 0x3b10
VDMTerminateTaskWOW
#28 · 0x3a60
No function matches your filter.
Imported DLLs & functions 39
KERNEL32.dll
30
_lclose
0x10006048
_llseek
0x10006044
_lread
0x10006040
CloseHandle
0x10006020
ContinueDebugEvent
0x10006058
CreateRemoteThread
0x1000604c
DisableThreadLibraryCalls
0x1000602c
GetCurrentProcess
0x10006054
GetCurrentProcessId
0x10006010
GetCurrentThreadId
0x1000600c
GetNextVDMCommand
0x10006068
GetProcessHeap
0x10006034
GetSystemTimeAsFileTime
0x10006008
GetThreadContext
0x10006060
GetTickCount
0x10006004
GlobalAddAtomA
0x1000606c
HeapAlloc
0x10006030
HeapFree
0x10006038
OpenFile
0x1000603c
OpenProcess
0x1000601c
QueryPerformanceCounter
0x10006014
ReadProcessMemory
0x10006024
SetThreadContext
0x10006064
SetUnhandledExceptionFilter
0x10006074
TerminateProcess
0x10006018
TerminateThread
0x10006000
UnhandledExceptionFilter
0x10006070
WaitForDebugEvent
0x10006050
WaitForSingleObject
0x1000605c
WriteProcessMemory
0x10006028
_stricmp
0x1000608c
memset
0x100060a0
NtOpenThread
0x1000609c
strcat_s
0x10006090
strcpy_s
0x10006094
strncpy_s
0x10006098
No function matches your filter.