pdm.dll
Description: Process Debug Manager
Authors: © Microsoft Corporation. All rights reserved.
Version: 16.0.81.0
Architecture: 32-bit
Operating System: Windows
SHA256: 35543b1d2b626bbd54cbfbe003c52ab5
File Size: 481.6 KB
Uploaded At: Dec. 1, 2025, 8:10 a.m.
Views: 13
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- DllCanUnloadNow (Ordinal: 1, Address: 0x30ed0)
- DllGetClassObject (Ordinal: 2, Address: 0x30f00)
- DllRegisterServer (Ordinal: 3, Address: 0x30f10)
- DllUnregisterServer (Ordinal: 4, Address: 0x30f20)
Imported DLLs & Functions
ADVAPI32.dll
- AddAce (Address: 0x1006f038)
- CopySid (Address: 0x1006f020)
- EqualSid (Address: 0x1006f080)
- GetAclInformation (Address: 0x1006f00c)
- GetLengthSid (Address: 0x1006f044)
- GetSecurityDescriptorControl (Address: 0x1006f01c)
- GetSecurityDescriptorDacl (Address: 0x1006f008)
- GetSecurityDescriptorGroup (Address: 0x1006f010)
- GetSecurityDescriptorOwner (Address: 0x1006f030)
- GetSecurityDescriptorSacl (Address: 0x1006f000)
- GetSidIdentifierAuthority (Address: 0x1006f070)
- GetSidLengthRequired (Address: 0x1006f018)
- GetSidSubAuthority (Address: 0x1006f014)
- GetSidSubAuthorityCount (Address: 0x1006f078)
- GetTokenInformation (Address: 0x1006f024)
- InitializeAcl (Address: 0x1006f040)
- InitializeSecurityDescriptor (Address: 0x1006f03c)
- InitializeSid (Address: 0x1006f02c)
- IsValidSid (Address: 0x1006f034)
- MakeAbsoluteSD (Address: 0x1006f048)
- OpenProcessToken (Address: 0x1006f074)
- RegCloseKey (Address: 0x1006f064)
- RegCreateKeyExW (Address: 0x1006f054)
- RegDeleteKeyW (Address: 0x1006f050)
- RegDeleteValueW (Address: 0x1006f060)
- RegEnumKeyExW (Address: 0x1006f058)
- RegEnumKeyW (Address: 0x1006f07c)
- RegOpenKeyExW (Address: 0x1006f068)
- RegQueryInfoKeyW (Address: 0x1006f04c)
- RegQueryValueExW (Address: 0x1006f06c)
- RegSetValueExW (Address: 0x1006f05c)
- SetSecurityDescriptorDacl (Address: 0x1006f004)
- SetSecurityDescriptorSacl (Address: 0x1006f028)
KERNEL32.dll
- CloseHandle (Address: 0x1006f210)
- CreateEventW (Address: 0x1006f0ec)
- CreateFileMappingW (Address: 0x1006f0cc)
- CreateFileW (Address: 0x1006f1b4)
- CreateMutexW (Address: 0x1006f088)
- CreateSemaphoreW (Address: 0x1006f1e8)
- CreateThread (Address: 0x1006f09c)
- DecodePointer (Address: 0x1006f208)
- DeleteCriticalSection (Address: 0x1006f200)
- DuplicateHandle (Address: 0x1006f0e4)
- EncodePointer (Address: 0x1006f0a4)
- EnterCriticalSection (Address: 0x1006f22c)
- ExitProcess (Address: 0x1006f14c)
- FindClose (Address: 0x1006f170)
- FindFirstFileExA (Address: 0x1006f174)
- FindNextFileA (Address: 0x1006f178)
- FindResourceExW (Address: 0x1006f1d4)
- FindResourceW (Address: 0x1006f1cc)
- FlushFileBuffers (Address: 0x1006f1ac)
- FormatMessageA (Address: 0x1006f240)
- FormatMessageW (Address: 0x1006f248)
- FreeEnvironmentStringsW (Address: 0x1006f194)
- FreeLibrary (Address: 0x1006f19c)
- FreeLibraryAndExitThread (Address: 0x1006f098)
- GetACP (Address: 0x1006f160)
- GetCommandLineA (Address: 0x1006f188)
- GetCommandLineW (Address: 0x1006f18c)
- GetComputerNameW (Address: 0x1006f234)
- GetConsoleCP (Address: 0x1006f1a0)
- GetConsoleMode (Address: 0x1006f1a4)
- GetCPInfo (Address: 0x1006f184)
- GetCurrentProcess (Address: 0x1006f0d8)
- GetCurrentProcessId (Address: 0x1006f094)
- GetCurrentThread (Address: 0x1006f0fc)
- GetCurrentThreadId (Address: 0x1006f08c)
- GetEnvironmentStringsW (Address: 0x1006f190)
- GetFileAttributesW (Address: 0x1006f100)
- GetFileType (Address: 0x1006f168)
- GetLastError (Address: 0x1006f218)
- GetModuleFileNameA (Address: 0x1006f154)
- GetModuleFileNameW (Address: 0x1006f12c)
- GetModuleHandleExW (Address: 0x1006f150)
- GetModuleHandleW (Address: 0x1006f1c0)
- GetOEMCP (Address: 0x1006f180)
- GetProcAddress (Address: 0x1006f1c4)
- GetProcessHeap (Address: 0x1006f1fc)
- GetStartupInfoW (Address: 0x1006f118)
- GetStdHandle (Address: 0x1006f164)
- GetStringTypeW (Address: 0x1006f16c)
- GetSystemInfo (Address: 0x1006f13c)
- GetSystemTimeAsFileTime (Address: 0x1006f120)
- GetThreadLocale (Address: 0x1006f0a0)
- GetTickCount (Address: 0x1006f0d4)
- GetVersion (Address: 0x1006f23c)
- GlobalAlloc (Address: 0x1006f0b0)
- GlobalFree (Address: 0x1006f0b4)
- GlobalLock (Address: 0x1006f0b8)
- GlobalUnlock (Address: 0x1006f0bc)
- HeapAlloc (Address: 0x1006f20c)
- HeapDestroy (Address: 0x1006f204)
- HeapFree (Address: 0x1006f230)
- HeapReAlloc (Address: 0x1006f214)
- HeapSize (Address: 0x1006f21c)
- InitializeCriticalSectionAndSpinCount (Address: 0x1006f138)
- InitializeCriticalSectionEx (Address: 0x1006f220)
- InitializeSListHead (Address: 0x1006f124)
- InterlockedFlushSList (Address: 0x1006f130)
- IsDebuggerPresent (Address: 0x1006f114)
- IsProcessorFeaturePresent (Address: 0x1006f110)
- IsValidCodePage (Address: 0x1006f17c)
- LCMapStringW (Address: 0x1006f15c)
- LeaveCriticalSection (Address: 0x1006f224)
- LoadLibraryExA (Address: 0x1006f24c)
- LoadLibraryExW (Address: 0x1006f0ac)
- LoadLibraryW (Address: 0x1006f1bc)
- LoadResource (Address: 0x1006f1d0)
- LocalFree (Address: 0x1006f244)
- LockResource (Address: 0x1006f1d8)
- lstrcmpiW (Address: 0x1006f0a8)
- MapViewOfFile (Address: 0x1006f0d0)
- MultiByteToWideChar (Address: 0x1006f1c8)
- OpenEventW (Address: 0x1006f0e0)
- OpenFileMappingW (Address: 0x1006f0c0)
- OpenProcess (Address: 0x1006f0e8)
- OutputDebugStringW (Address: 0x1006f1b0)
- ProcessIdToSessionId (Address: 0x1006f238)
- QueryPerformanceCounter (Address: 0x1006f11c)
- RaiseException (Address: 0x1006f1ec)
- RegisterWaitForSingleObject (Address: 0x1006f0dc)
- ReleaseMutex (Address: 0x1006f090)
- ReleaseSemaphore (Address: 0x1006f228)
- RtlUnwind (Address: 0x1006f128)
- SetEvent (Address: 0x1006f0f0)
- SetFilePointerEx (Address: 0x1006f1a8)
- SetLastError (Address: 0x1006f134)
- SetStdHandle (Address: 0x1006f198)
- SetUnhandledExceptionFilter (Address: 0x1006f108)
- SizeofResource (Address: 0x1006f1dc)
- Sleep (Address: 0x1006f0c8)
- TerminateProcess (Address: 0x1006f10c)
- TlsAlloc (Address: 0x1006f1f0)
- TlsFree (Address: 0x1006f1e0)
- TlsGetValue (Address: 0x1006f1e4)
- TlsSetValue (Address: 0x1006f1f8)
- UnhandledExceptionFilter (Address: 0x1006f104)
- UnmapViewOfFile (Address: 0x1006f0c4)
- UnregisterWaitEx (Address: 0x1006f0f4)
- VirtualAlloc (Address: 0x1006f140)
- VirtualProtect (Address: 0x1006f144)
- VirtualQuery (Address: 0x1006f148)
- WaitForMultipleObjects (Address: 0x1006f0f8)
- WaitForSingleObject (Address: 0x1006f1f4)
- WideCharToMultiByte (Address: 0x1006f158)
- WriteConsoleW (Address: 0x1006f1b8)
- WriteFile (Address: 0x1006f250)
ole32.dll
- CLSIDFromString (Address: 0x1006f35c)
- CoCreateInstance (Address: 0x1006f324)
- CoGetObjectContext (Address: 0x1006f320)
- CoInitializeEx (Address: 0x1006f340)
- CoMarshalInterface (Address: 0x1006f354)
- CoQueryProxyBlanket (Address: 0x1006f330)
- CoRegisterClassObject (Address: 0x1006f318)
- CoRegisterMessageFilter (Address: 0x1006f338)
- CoRegisterPSClsid (Address: 0x1006f334)
- CoReleaseMarshalData (Address: 0x1006f358)
- CoSetProxyBlanket (Address: 0x1006f31c)
- CoTaskMemAlloc (Address: 0x1006f32c)
- CoTaskMemFree (Address: 0x1006f344)
- CoTaskMemRealloc (Address: 0x1006f348)
- CoUninitialize (Address: 0x1006f33c)
- CoUnmarshalInterface (Address: 0x1006f350)
- CoWaitForMultipleHandles (Address: 0x1006f360)
- CreateStreamOnHGlobal (Address: 0x1006f34c)
- StringFromGUID2 (Address: 0x1006f328)
OLEAUT32.dll
- SafeArrayGetDim (Address: 0x1006f268)
- SafeArrayGetLBound (Address: 0x1006f274)
- SafeArrayGetUBound (Address: 0x1006f270)
- SafeArrayPtrOfIndex (Address: 0x1006f28c)
- SysAllocString (Address: 0x1006f280)
- SysAllocStringByteLen (Address: 0x1006f264)
- SysAllocStringLen (Address: 0x1006f25c)
- SysFreeString (Address: 0x1006f284)
- SysStringByteLen (Address: 0x1006f260)
- SysStringLen (Address: 0x1006f258)
- VarBstrCat (Address: 0x1006f290)
- VariantChangeType (Address: 0x1006f298)
- VariantClear (Address: 0x1006f27c)
- VariantCopy (Address: 0x1006f278)
- VariantCopyInd (Address: 0x1006f288)
- VariantInit (Address: 0x1006f26c)
- VarUI4FromStr (Address: 0x1006f294)
RPCRT4.dll
- CStdStubBuffer_AddRef (Address: 0x1006f2ac)
- CStdStubBuffer_Connect (Address: 0x1006f2d0)
- CStdStubBuffer_CountRefs (Address: 0x1006f2b4)
- CStdStubBuffer_DebugServerQueryInterface (Address: 0x1006f2a4)
- CStdStubBuffer_DebugServerRelease (Address: 0x1006f2c0)
- CStdStubBuffer_Disconnect (Address: 0x1006f2c4)
- CStdStubBuffer_Invoke (Address: 0x1006f2dc)
- CStdStubBuffer_IsIIDSupported (Address: 0x1006f2cc)
- CStdStubBuffer_QueryInterface (Address: 0x1006f2b8)
- IUnknown_AddRef_Proxy (Address: 0x1006f2a0)
- IUnknown_QueryInterface_Proxy (Address: 0x1006f2c8)
- IUnknown_Release_Proxy (Address: 0x1006f2b0)
- NdrCStdStubBuffer_Release (Address: 0x1006f2d8)
- NdrDllGetClassObject (Address: 0x1006f2d4)
- NdrOleAllocate (Address: 0x1006f2bc)
- NdrOleFree (Address: 0x1006f2a8)
USER32.dll
- CharNextW (Address: 0x1006f2e4)
- CreateWindowExW (Address: 0x1006f2f8)
- DefWindowProcW (Address: 0x1006f304)
- DestroyWindow (Address: 0x1006f2fc)
- GetWindowLongW (Address: 0x1006f308)
- IsWindow (Address: 0x1006f310)
- MsgWaitForMultipleObjects (Address: 0x1006f30c)
- PostMessageW (Address: 0x1006f300)
- RegisterClassW (Address: 0x1006f2ec)
- SendMessageW (Address: 0x1006f2f4)
- SetWindowLongW (Address: 0x1006f2e8)
- UnregisterClassW (Address: 0x1006f2f0)