mscordbi.dll

v4.8.4084.0 64-bit Windows Analyzed
Description
Microsoft .NET Runtime Debugging Services
Authors
© Microsoft Corporation. All rights reserved.
File size
1.6 MB
Uploaded
2025-12-01 08:29
Views
40
SHA-256
f1ed727cc43e31cacc2730385500e96b

Exported functions 5

CreateCordbObject #1 · 0x1150
DllGetClassObjectInternal #2 · 0x1180
OpenVirtualProcess #3 · 0x1790
OpenVirtualProcess2 #4 · 0x1740
OpenVirtualProcessImpl #5 · 0x1520

Imported DLLs & functions 172

ADVAPI32.dll 21
AdjustTokenPrivileges 0x180113070
CopySid 0x180113030
DeregisterEventSource 0x180113098
EqualSid 0x180113008
EventWrite 0x180113068
GetKernelObjectSecurity 0x180113040
GetLengthSid 0x180113048
GetSecurityDescriptorOwner 0x180113038
GetSidSubAuthority 0x180113018
GetSidSubAuthorityCount 0x180113010
GetTokenInformation 0x1801130a0
LookupPrivilegeValueW 0x180113080
OpenProcessToken 0x180113078
OpenThreadToken 0x180113028
RegCloseKey 0x180113058
RegisterEventSourceW 0x180113090
RegOpenKeyExW 0x180113050
RegQueryValueExW 0x180113060
ReportEventW 0x180113088
RevertToSelf 0x180113000
SetThreadToken 0x180113020
KERNEL32.dll 131
ActivateActCtx 0x180113308
CloseHandle 0x180113488
ContinueDebugEvent 0x1801130e0
CreateActCtxW 0x180113300
CreateEventW 0x180113478
CreateFileMappingW 0x180113120
CreateFileW 0x180113110
CreateMutexW 0x1801132b0
CreateProcessW 0x180113270
CreateSemaphoreW 0x1801132d8
CreateThread 0x1801130b8
CreateToolhelp32Snapshot 0x180113140
DeactivateActCtx 0x180113318
DebugActiveProcess 0x180113178
DebugBreak 0x1801130d0
DeleteCriticalSection 0x1801134a8
DuplicateHandle 0x1801130b0
EncodePointer 0x180113338
EnterCriticalSection 0x180113490
ExitProcess 0x180113368
FindClose 0x180113220
FindFirstFileExA 0x1801133c0
FindNextFileA 0x1801133c8
FlushFileBuffers 0x180113398
FlushInstructionCache 0x180113448
FormatMessageW 0x180113250
FreeEnvironmentStringsW 0x180113208
FreeLibrary 0x1801130f0
GetACP 0x180113248
GetCommandLineA 0x1801133e0
GetCommandLineW 0x1801133e8
GetConsoleCP 0x1801133a8
GetConsoleMode 0x1801133b0
GetCPInfo 0x180113240
GetCurrentProcess 0x180113450
GetCurrentProcessId 0x180113190
GetCurrentThread 0x180113230
GetCurrentThreadId 0x180113458
GetEnvironmentStringsW 0x180113210
GetEnvironmentVariableW 0x180113200
GetFileAttributesExW 0x180113428
GetFileSize 0x180113118
GetFileType 0x180113388
GetLastError 0x180113468
GetModuleFileNameA 0x180113378
GetModuleFileNameW 0x180113168
GetModuleHandleExW 0x180113370
GetModuleHandleW 0x180113440
GetOEMCP 0x1801133d8
GetProcAddress 0x1801134b0
GetProcessHeap 0x1801131d8
GetStartupInfoW 0x180113360
GetStdHandle 0x180113380
GetStringTypeW 0x180113390
GetSystemInfo 0x1801131e8
GetSystemTimeAsFileTime 0x1801131b8
GetThreadContext 0x1801130c0
GetWindowsDirectoryW 0x180113320
HeapAlloc 0x1801131d0
HeapCreate 0x180113280
HeapDestroy 0x1801132d0
HeapFree 0x1801131c8
HeapReAlloc 0x180113410
HeapSize 0x180113408
HeapValidate 0x1801132b8
InitializeCriticalSection 0x180113480
InitializeCriticalSectionAndSpinCount 0x1801133b8
InitializeSListHead 0x180113358
InterlockedFlushSList 0x180113418
IsDBCSLeadByte 0x180113258
IsDebuggerPresent 0x180113330
IsProcessorFeaturePresent 0x180113350
IsValidCodePage 0x1801133d0
IsWow64Process 0x180113198
LCMapStringW 0x180113268
LeaveCriticalSection 0x180113498
LoadLibraryExW 0x1801130e8
LocalFree 0x180113260
MapViewOfFile 0x180113128
Module32FirstW 0x180113158
Module32NextW 0x180113160
MultiByteToWideChar 0x180113228
OpenFileMappingW 0x180113420
OpenProcess 0x1801130f8
OpenThread 0x180113188
OutputDebugStringW 0x1801131f8
QueryPerformanceCounter 0x1801131c0
QueryPerformanceFrequency 0x1801131b0
RaiseException 0x1801131e0
ReadFile 0x180113438
ReadProcessMemory 0x180113108
ReleaseActCtx 0x180113328
ReleaseMutex 0x180113100
ReleaseSemaphore 0x1801132a0
ResetEvent 0x180113460
ResumeThread 0x180113278
SetErrorMode 0x180113310
SetEvent 0x180113470
SetFilePointer 0x180113430
SetFilePointerEx 0x1801133f8
SetLastError 0x1801131a8
SetStdHandle 0x1801133f0
SetThreadContext 0x1801130d8
SetUnhandledExceptionFilter 0x180113348
Sleep 0x180113138
SleepEx 0x1801132e0
SuspendThread 0x1801132f0
SwitchToThread 0x180113238
TerminateProcess 0x1801130c8
Thread32First 0x180113148
Thread32Next 0x180113150
TlsAlloc 0x1801132c8
TlsFree 0x1801134c0
TlsGetValue 0x1801132e8
TlsSetValue 0x180113288
UnhandledExceptionFilter 0x180113340
UnmapViewOfFile 0x180113130
VerifyVersionInfoW 0x1801131f0
VirtualAlloc 0x1801132a8
VirtualFree 0x180113298
VirtualProtect 0x180113290
VirtualQuery 0x1801132f8
VirtualQueryEx 0x180113170
WaitForDebugEvent 0x180113180
WaitForMultipleObjectsEx 0x1801134a0
WaitForSingleObject 0x1801134b8
WaitForSingleObjectEx 0x1801132c0
WideCharToMultiByte 0x180113218
WriteConsoleW 0x180113400
WriteFile 0x1801133a0
WriteProcessMemory 0x1801131a0
ntdll.dll 6
RtlCaptureContext 0x180113538
RtlLookupFunctionEntry 0x180113540
RtlPcToFileHeader 0x180113530
RtlUnwindEx 0x180113528
RtlVirtualUnwind 0x180113550
VerSetConditionMask 0x180113548
ole32.dll 6
CoCreateFreeThreadedMarshaler 0x180113580
CoCreateGuid 0x180113570
CoTaskMemAlloc 0x180113588
CoTaskMemFree 0x180113560
CreateStreamOnHGlobal 0x180113578
IIDFromString 0x180113568
OLEAUT32.dll 3
CreateErrorInfo 0x1801134d0
SetErrorInfo 0x1801134e0
VariantInit 0x1801134d8
USER32.dll 3
GetProcessWindowStation 0x180113500
GetUserObjectInformationW 0x1801134f8
LoadStringW 0x1801134f0
WTSAPI32.dll 2
WTSEnumerateProcessesW 0x180113510
WTSFreeMemory 0x180113518