mscordbi.dll

v4.8.4645.0 64-bit Windows Analyzed
Description
Microsoft .NET Runtime Debugging Services
Authors
© Microsoft Corporation. All rights reserved.
File size
1.6 MB
Uploaded
2025-12-01 08:29
Views
42
SHA-256
fc006d2b995550df5773ac45a696b317

Exported functions 5

CreateCordbObject #1 · 0x1150
DllGetClassObjectInternal #2 · 0x1180
OpenVirtualProcess #3 · 0x1790
OpenVirtualProcess2 #4 · 0x1740
OpenVirtualProcessImpl #5 · 0x1520

Imported DLLs & functions 172

ADVAPI32.dll 21
AdjustTokenPrivileges 0x180114068
CopySid 0x180114020
DeregisterEventSource 0x180114090
EqualSid 0x180114000
EventWrite 0x180114060
GetKernelObjectSecurity 0x180114030
GetLengthSid 0x180114038
GetSecurityDescriptorOwner 0x180114028
GetSidSubAuthority 0x180114018
GetSidSubAuthorityCount 0x180114010
GetTokenInformation 0x180114040
LookupPrivilegeValueW 0x180114078
OpenProcessToken 0x180114070
OpenThreadToken 0x1801140a0
RegCloseKey 0x180114050
RegisterEventSourceW 0x180114088
RegOpenKeyExW 0x180114048
RegQueryValueExW 0x180114058
ReportEventW 0x180114080
RevertToSelf 0x180114008
SetThreadToken 0x180114098
KERNEL32.dll 131
ActivateActCtx 0x1801142f0
CloseHandle 0x180114480
ContinueDebugEvent 0x1801140d0
CreateActCtxW 0x1801142e8
CreateEventW 0x180114470
CreateFileMappingW 0x180114110
CreateFileW 0x180114100
CreateMutexW 0x180114298
CreateProcessW 0x180114260
CreateSemaphoreW 0x1801142c0
CreateThread 0x180114268
CreateToolhelp32Snapshot 0x180114130
DeactivateActCtx 0x180114300
DebugActiveProcess 0x180114168
DebugBreak 0x1801140c0
DeleteCriticalSection 0x1801144a0
DuplicateHandle 0x1801142e0
EncodePointer 0x180114320
EnterCriticalSection 0x180114488
ExitProcess 0x180114350
FindClose 0x180114210
FindFirstFileExA 0x1801143a8
FindNextFileA 0x1801143b0
FlushFileBuffers 0x180114380
FlushInstructionCache 0x180114440
FormatMessageW 0x180114240
FreeEnvironmentStringsW 0x1801141f8
FreeLibrary 0x1801140e0
GetACP 0x180114238
GetCommandLineA 0x1801143c8
GetCommandLineW 0x1801143d0
GetConsoleCP 0x180114390
GetConsoleMode 0x180114398
GetCPInfo 0x180114230
GetCurrentProcess 0x180114448
GetCurrentProcessId 0x180114180
GetCurrentThread 0x180114220
GetCurrentThreadId 0x180114450
GetEnvironmentStringsW 0x180114200
GetEnvironmentVariableW 0x1801141f0
GetFileAttributesExW 0x180114410
GetFileSize 0x180114108
GetFileType 0x180114370
GetLastError 0x180114460
GetModuleFileNameA 0x180114360
GetModuleFileNameW 0x180114158
GetModuleHandleExW 0x180114358
GetModuleHandleW 0x180114438
GetOEMCP 0x1801143c0
GetProcAddress 0x1801144a8
GetProcessHeap 0x1801141c8
GetStartupInfoW 0x180114348
GetStdHandle 0x180114368
GetStringTypeW 0x180114378
GetSystemInfo 0x1801141d8
GetSystemTimeAsFileTime 0x1801141a8
GetThreadContext 0x1801140b0
GetWindowsDirectoryW 0x180114308
HeapAlloc 0x1801141c0
HeapCreate 0x1801144b8
HeapDestroy 0x1801142b8
HeapFree 0x1801141b8
HeapReAlloc 0x1801143f8
HeapSize 0x1801143f0
HeapValidate 0x1801142a0
InitializeCriticalSection 0x180114478
InitializeCriticalSectionAndSpinCount 0x1801143a0
InitializeSListHead 0x180114340
InterlockedFlushSList 0x180114400
IsDBCSLeadByte 0x180114248
IsDebuggerPresent 0x180114318
IsProcessorFeaturePresent 0x180114338
IsValidCodePage 0x1801143b8
IsWow64Process 0x180114188
LCMapStringW 0x180114258
LeaveCriticalSection 0x180114490
LoadLibraryExW 0x1801140d8
LocalFree 0x180114250
MapViewOfFile 0x180114118
Module32FirstW 0x180114148
Module32NextW 0x180114150
MultiByteToWideChar 0x180114218
OpenFileMappingW 0x180114408
OpenProcess 0x1801140e8
OpenThread 0x180114178
OutputDebugStringW 0x1801141e8
QueryPerformanceCounter 0x1801141b0
QueryPerformanceFrequency 0x1801141a0
RaiseException 0x1801141d0
ReadFile 0x180114420
ReadProcessMemory 0x1801140f8
ReleaseActCtx 0x180114310
ReleaseMutex 0x1801140f0
ReleaseSemaphore 0x180114288
ResetEvent 0x180114458
ResumeThread 0x180114428
SetErrorMode 0x1801142f8
SetEvent 0x180114468
SetFilePointer 0x180114418
SetFilePointerEx 0x1801143e0
SetLastError 0x180114198
SetStdHandle 0x1801143d8
SetThreadContext 0x1801140c8
SetUnhandledExceptionFilter 0x180114330
Sleep 0x180114128
SleepEx 0x1801142c8
SuspendThread 0x180114430
SwitchToThread 0x180114228
TerminateProcess 0x1801140b8
Thread32First 0x180114138
Thread32Next 0x180114140
TlsAlloc 0x1801142b0
TlsFree 0x1801142d8
TlsGetValue 0x1801142d0
TlsSetValue 0x180114270
UnhandledExceptionFilter 0x180114328
UnmapViewOfFile 0x180114120
VerifyVersionInfoW 0x1801141e0
VirtualAlloc 0x180114290
VirtualFree 0x180114280
VirtualProtect 0x180114278
VirtualQuery 0x1801144c0
VirtualQueryEx 0x180114160
WaitForDebugEvent 0x180114170
WaitForMultipleObjectsEx 0x180114498
WaitForSingleObject 0x1801144b0
WaitForSingleObjectEx 0x1801142a8
WideCharToMultiByte 0x180114208
WriteConsoleW 0x1801143e8
WriteFile 0x180114388
WriteProcessMemory 0x180114190
ntdll.dll 6
RtlCaptureContext 0x180114538
RtlLookupFunctionEntry 0x180114540
RtlPcToFileHeader 0x180114530
RtlUnwindEx 0x180114528
RtlVirtualUnwind 0x180114550
VerSetConditionMask 0x180114548
ole32.dll 6
CoCreateFreeThreadedMarshaler 0x180114580
CoCreateGuid 0x180114570
CoTaskMemAlloc 0x180114588
CoTaskMemFree 0x180114560
CreateStreamOnHGlobal 0x180114578
IIDFromString 0x180114568
OLEAUT32.dll 3
CreateErrorInfo 0x1801144d0
SetErrorInfo 0x1801144e0
VariantInit 0x1801144d8
USER32.dll 3
GetProcessWindowStation 0x180114500
GetUserObjectInformationW 0x1801144f8
LoadStringW 0x1801144f0
WTSAPI32.dll 2
WTSEnumerateProcessesW 0x180114510
WTSFreeMemory 0x180114518