mscordbi.dll

v4.8.9186.0 64-bit Windows Analyzed
Description
Microsoft .NET Runtime Debugging Services
Authors
© Microsoft Corporation. All rights reserved.
File size
1.3 MB
Uploaded
2025-12-01 08:29
Views
47
SHA-256
39511e53db61edefcbfc2417fcf0a751

Exported functions 5

CreateCordbObject #1 · 0x10d0
DllGetClassObjectInternal #2 · 0x1100
OpenVirtualProcess #3 · 0x16b0
OpenVirtualProcess2 #4 · 0x1660
OpenVirtualProcessImpl #5 · 0x1460

Imported DLLs & functions 172

ADVAPI32.dll 21
AdjustTokenPrivileges 0x1800fc068
CopySid 0x1800fc028
DeregisterEventSource 0x1800fc090
EqualSid 0x1800fc008
EventWrite 0x1800fc060
GetKernelObjectSecurity 0x1800fc038
GetLengthSid 0x1800fc040
GetSecurityDescriptorOwner 0x1800fc030
GetSidSubAuthority 0x1800fc018
GetSidSubAuthorityCount 0x1800fc010
GetTokenInformation 0x1800fc098
LookupPrivilegeValueW 0x1800fc078
OpenProcessToken 0x1800fc070
OpenThreadToken 0x1800fc0a0
RegCloseKey 0x1800fc050
RegisterEventSourceW 0x1800fc088
RegOpenKeyExW 0x1800fc048
RegQueryValueExW 0x1800fc058
ReportEventW 0x1800fc080
RevertToSelf 0x1800fc000
SetThreadToken 0x1800fc020
KERNEL32.dll 131
ActivateActCtx 0x1800fc2f8
CloseHandle 0x1800fc478
ContinueDebugEvent 0x1800fc0d8
CreateActCtxW 0x1800fc2f0
CreateEventW 0x1800fc468
CreateFileMappingW 0x1800fc118
CreateFileW 0x1800fc108
CreateMutexW 0x1800fc2a0
CreateProcessW 0x1800fc4b8
CreateSemaphoreW 0x1800fc2c8
CreateThread 0x1800fc0b0
CreateToolhelp32Snapshot 0x1800fc138
DeactivateActCtx 0x1800fc308
DebugActiveProcess 0x1800fc170
DebugBreak 0x1800fc0c8
DeleteCriticalSection 0x1800fc498
DuplicateHandle 0x1800fc4b0
EncodePointer 0x1800fc328
EnterCriticalSection 0x1800fc480
ExitProcess 0x1800fc358
FindClose 0x1800fc218
FindFirstFileExA 0x1800fc3b0
FindNextFileA 0x1800fc3b8
FlushFileBuffers 0x1800fc388
FlushInstructionCache 0x1800fc438
FormatMessageW 0x1800fc248
FreeEnvironmentStringsW 0x1800fc200
FreeLibrary 0x1800fc0e8
GetACP 0x1800fc240
GetCommandLineA 0x1800fc3d0
GetCommandLineW 0x1800fc3d8
GetConsoleCP 0x1800fc398
GetConsoleMode 0x1800fc3a0
GetCPInfo 0x1800fc238
GetCurrentProcess 0x1800fc440
GetCurrentProcessId 0x1800fc188
GetCurrentThread 0x1800fc228
GetCurrentThreadId 0x1800fc448
GetEnvironmentStringsW 0x1800fc208
GetEnvironmentVariableW 0x1800fc1f8
GetFileAttributesExW 0x1800fc418
GetFileSize 0x1800fc110
GetFileType 0x1800fc378
GetLastError 0x1800fc458
GetModuleFileNameA 0x1800fc368
GetModuleFileNameW 0x1800fc160
GetModuleHandleExW 0x1800fc360
GetModuleHandleW 0x1800fc430
GetOEMCP 0x1800fc3c8
GetProcAddress 0x1800fc4a0
GetProcessHeap 0x1800fc1d0
GetStartupInfoW 0x1800fc350
GetStdHandle 0x1800fc370
GetStringTypeW 0x1800fc380
GetSystemInfo 0x1800fc1e0
GetSystemTimeAsFileTime 0x1800fc1b0
GetThreadContext 0x1800fc0b8
GetWindowsDirectoryW 0x1800fc310
HeapAlloc 0x1800fc1c8
HeapCreate 0x1800fc270
HeapDestroy 0x1800fc2c0
HeapFree 0x1800fc1c0
HeapReAlloc 0x1800fc400
HeapSize 0x1800fc3f8
HeapValidate 0x1800fc2a8
InitializeCriticalSection 0x1800fc470
InitializeCriticalSectionAndSpinCount 0x1800fc3a8
InitializeSListHead 0x1800fc348
InterlockedFlushSList 0x1800fc408
IsDBCSLeadByte 0x1800fc250
IsDebuggerPresent 0x1800fc320
IsProcessorFeaturePresent 0x1800fc340
IsValidCodePage 0x1800fc3c0
IsWow64Process 0x1800fc190
LCMapStringW 0x1800fc260
LeaveCriticalSection 0x1800fc488
LoadLibraryExW 0x1800fc0e0
LocalFree 0x1800fc258
MapViewOfFile 0x1800fc120
Module32FirstW 0x1800fc150
Module32NextW 0x1800fc158
MultiByteToWideChar 0x1800fc220
OpenFileMappingW 0x1800fc410
OpenProcess 0x1800fc0f0
OpenThread 0x1800fc180
OutputDebugStringW 0x1800fc1f0
QueryPerformanceCounter 0x1800fc1b8
QueryPerformanceFrequency 0x1800fc1a8
RaiseException 0x1800fc1d8
ReadFile 0x1800fc428
ReadProcessMemory 0x1800fc100
ReleaseActCtx 0x1800fc318
ReleaseMutex 0x1800fc0f8
ReleaseSemaphore 0x1800fc290
ResetEvent 0x1800fc450
ResumeThread 0x1800fc268
SetErrorMode 0x1800fc300
SetEvent 0x1800fc460
SetFilePointer 0x1800fc420
SetFilePointerEx 0x1800fc3e8
SetLastError 0x1800fc1a0
SetStdHandle 0x1800fc3e0
SetThreadContext 0x1800fc0d0
SetUnhandledExceptionFilter 0x1800fc338
Sleep 0x1800fc130
SleepEx 0x1800fc2d0
SuspendThread 0x1800fc2e8
SwitchToThread 0x1800fc230
TerminateProcess 0x1800fc0c0
Thread32First 0x1800fc140
Thread32Next 0x1800fc148
TlsAlloc 0x1800fc2b8
TlsFree 0x1800fc2e0
TlsGetValue 0x1800fc2d8
TlsSetValue 0x1800fc278
UnhandledExceptionFilter 0x1800fc330
UnmapViewOfFile 0x1800fc128
VerifyVersionInfoW 0x1800fc1e8
VirtualAlloc 0x1800fc298
VirtualFree 0x1800fc288
VirtualProtect 0x1800fc280
VirtualQuery 0x1800fc4c0
VirtualQueryEx 0x1800fc168
WaitForDebugEvent 0x1800fc178
WaitForMultipleObjectsEx 0x1800fc490
WaitForSingleObject 0x1800fc4a8
WaitForSingleObjectEx 0x1800fc2b0
WideCharToMultiByte 0x1800fc210
WriteConsoleW 0x1800fc3f0
WriteFile 0x1800fc390
WriteProcessMemory 0x1800fc198
ntdll.dll 6
RtlCaptureContext 0x1800fc550
RtlLookupFunctionEntry 0x1800fc530
RtlPcToFileHeader 0x1800fc540
RtlUnwindEx 0x1800fc548
RtlVirtualUnwind 0x1800fc538
VerSetConditionMask 0x1800fc528
ole32.dll 6
CoCreateFreeThreadedMarshaler 0x1800fc588
CoCreateGuid 0x1800fc570
CoTaskMemAlloc 0x1800fc560
CoTaskMemFree 0x1800fc568
CreateStreamOnHGlobal 0x1800fc578
IIDFromString 0x1800fc580
OLEAUT32.dll 3
CreateErrorInfo 0x1800fc4e0
SetErrorInfo 0x1800fc4d8
VariantInit 0x1800fc4d0
USER32.dll 3
GetProcessWindowStation 0x1800fc500
GetUserObjectInformationW 0x1800fc4f8
LoadStringW 0x1800fc4f0
WTSAPI32.dll 2
WTSEnumerateProcessesW 0x1800fc518
WTSFreeMemory 0x1800fc510