imagehlp.dll

Description: Windows NT Image Helper

Version: 10.0.19041.3636

Architecture: 64-bit

Operating System: Windows NT

SHA256: 509ef25f9bac59ebf1c19ec141cb882e

File Size: 106.1 KB

Uploaded At: Dec. 1, 2025, 7:29 a.m.

Views: 11

Exported Functions

RemoveRelocations (Ordinal: 1, Address: 0x8450)
SymAllocDiaString (Ordinal: 2, Address: 0x1350)
SymFreeDiaString (Ordinal: 3, Address: 0x13f0)
SymGetDiaSession (Ordinal: 4, Address: 0x1410)
SymSetDiaSession (Ordinal: 5, Address: 0x1430)
BindImage (Ordinal: 6, Address: 0x5710)
BindImageEx (Ordinal: 7, Address: 0x5740)
CheckSumMappedFile (Ordinal: 8, Address: 0x5ff0)
EnumerateLoadedModules (Ordinal: 9, Address: 0x1450)
EnumerateLoadedModules64 (Ordinal: 10, Address: 0x1450)
EnumerateLoadedModulesEx (Ordinal: 11, Address: 0x1470)
EnumerateLoadedModulesExW (Ordinal: 12, Address: 0x1490)
EnumerateLoadedModulesW64 (Ordinal: 13, Address: 0x14b0)
FindDebugInfoFile (Ordinal: 14, Address: 0x14d0)
FindDebugInfoFileEx (Ordinal: 15, Address: 0x14f0)
FindExecutableImage (Ordinal: 16, Address: 0x1510)
FindExecutableImageEx (Ordinal: 17, Address: 0x1530)
FindFileInPath (Ordinal: 18, Address: 0x1550)
FindFileInSearchPath (Ordinal: 19, Address: 0x1570)
GetImageConfigInformation (Ordinal: 20, Address: 0x6ef0)
GetImageUnusedHeaderBytes (Ordinal: 21, Address: 0x5cb0)
GetSymLoadError (Ordinal: 22, Address: 0x1590)
GetTimestampForLoadedLibrary (Ordinal: 23, Address: 0x5d80)
ImageAddCertificate (Ordinal: 24, Address: 0xa0f0)
ImageDirectoryEntryToData (Ordinal: 25, Address: 0x11e0)
ImageDirectoryEntryToDataEx (Ordinal: 26, Address: 0x6a60)
ImageEnumerateCertificates (Ordinal: 27, Address: 0xa4c0)
ImageGetCertificateData (Ordinal: 28, Address: 0xa700)
ImageGetCertificateDataEx (Ordinal: 29, Address: 0xa720)
ImageGetCertificateHeader (Ordinal: 30, Address: 0xa840)
ImageGetDigestStream (Ordinal: 31, Address: 0xa930)
ImageLoad (Ordinal: 32, Address: 0x6fb0)
ImageNtHeader (Ordinal: 33, Address: 0x6c10)
ImageRemoveCertificate (Ordinal: 34, Address: 0xb060)
ImageRvaToSection (Ordinal: 35, Address: 0x6c50)
ImageRvaToVa (Ordinal: 36, Address: 0x6cc0)
ImageUnload (Ordinal: 37, Address: 0x7250)
ImagehlpApiVersion (Ordinal: 38, Address: 0x15b0)
ImagehlpApiVersionEx (Ordinal: 39, Address: 0x15d0)
IsBufferCleanOfInvalidMarkers (Ordinal: 40, Address: 0xb310)
MakeSureDirectoryPathExists (Ordinal: 41, Address: 0x15f0)
MapAndLoad (Ordinal: 42, Address: 0x72c0)
MapFileAndCheckSumA (Ordinal: 43, Address: 0x6120)
MapFileAndCheckSumW (Ordinal: 44, Address: 0x6250)
ReBaseImage (Ordinal: 45, Address: 0x85b0)
ReBaseImage64 (Ordinal: 46, Address: 0x85b0)
RemoveInvalidModuleList (Ordinal: 47, Address: 0x1610)
RemovePrivateCvSymbolic (Ordinal: 48, Address: 0x8e10)
RemovePrivateCvSymbolicEx (Ordinal: 49, Address: 0x8e60)
ReportSymbolLoadSummary (Ordinal: 50, Address: 0x1630)
SearchTreeForFile (Ordinal: 51, Address: 0x1650)
SetCheckUserInterruptShared (Ordinal: 52, Address: 0x1670)
SetImageConfigInformation (Ordinal: 53, Address: 0x79b0)
SetSymLoadError (Ordinal: 54, Address: 0x1690)
SplitSymbols (Ordinal: 55, Address: 0x8a40)
StackWalk (Ordinal: 56, Address: 0x16b0)
StackWalk64 (Ordinal: 57, Address: 0x16b0)
StackWalkEx (Ordinal: 58, Address: 0x16d0)
SymAddrIncludeInlineTrace (Ordinal: 59, Address: 0x16f0)
SymCleanup (Ordinal: 60, Address: 0x1710)
SymCompareInlineTrace (Ordinal: 61, Address: 0x1730)
SymEnumSym (Ordinal: 62, Address: 0x1750)
SymEnumSymbols (Ordinal: 63, Address: 0x1770)
SymEnumSymbolsEx (Ordinal: 64, Address: 0x1790)
SymEnumSymbolsExW (Ordinal: 65, Address: 0x17b0)
SymEnumSymbolsForAddr (Ordinal: 66, Address: 0x17d0)
SymEnumTypes (Ordinal: 67, Address: 0x17f0)
SymEnumTypesByName (Ordinal: 68, Address: 0x1810)
SymEnumTypesByNameW (Ordinal: 69, Address: 0x1830)
SymEnumTypesW (Ordinal: 70, Address: 0x1850)
SymEnumerateModules (Ordinal: 71, Address: 0x1870)
SymEnumerateModules64 (Ordinal: 72, Address: 0x1870)
SymEnumerateSymbols (Ordinal: 73, Address: 0x1890)
SymEnumerateSymbols64 (Ordinal: 74, Address: 0x1890)
SymEnumerateSymbolsW (Ordinal: 75, Address: 0x18b0)
SymEnumerateSymbolsW64 (Ordinal: 76, Address: 0x18b0)
SymFindFileInPath (Ordinal: 77, Address: 0x18d0)
SymFindFileInPathW (Ordinal: 78, Address: 0x18f0)
SymFromAddr (Ordinal: 79, Address: 0x1910)
SymFromInlineContext (Ordinal: 80, Address: 0x1930)
SymFromInlineContextW (Ordinal: 81, Address: 0x1950)
SymFromName (Ordinal: 82, Address: 0x1970)
SymFunctionTableAccess (Ordinal: 83, Address: 0x1990)
SymFunctionTableAccess64 (Ordinal: 84, Address: 0x1990)
SymFunctionTableAccess64AccessRoutines (Ordinal: 85, Address: 0x19b0)
SymGetExtendedOption (Ordinal: 86, Address: 0x19d0)
SymGetLineFromAddr (Ordinal: 87, Address: 0x19f0)
SymGetLineFromAddr64 (Ordinal: 88, Address: 0x19f0)
SymGetLineFromInlineContext (Ordinal: 89, Address: 0x1a10)
SymGetLineFromInlineContextW (Ordinal: 90, Address: 0x1a30)
SymGetLineFromName (Ordinal: 91, Address: 0x1a50)
SymGetLineFromName64 (Ordinal: 92, Address: 0x1a50)
SymGetLineNext (Ordinal: 93, Address: 0x1a70)
SymGetLineNext64 (Ordinal: 94, Address: 0x1a70)
SymGetLinePrev (Ordinal: 95, Address: 0x1a90)
SymGetLinePrev64 (Ordinal: 96, Address: 0x1a90)
SymGetModuleBase (Ordinal: 97, Address: 0x1ab0)
SymGetModuleBase64 (Ordinal: 98, Address: 0x1ab0)
SymGetModuleInfo (Ordinal: 99, Address: 0x1ad0)
SymGetModuleInfo64 (Ordinal: 100, Address: 0x1ad0)
SymGetModuleInfoW (Ordinal: 101, Address: 0x1af0)
SymGetModuleInfoW64 (Ordinal: 102, Address: 0x1af0)
SymGetOptions (Ordinal: 103, Address: 0x1b10)
SymGetSearchPath (Ordinal: 104, Address: 0x1b30)
SymGetSourceFileChecksumW (Ordinal: 105, Address: 0x1b50)
SymGetSourceFileFromTokenW (Ordinal: 106, Address: 0x1b70)
SymGetSourceFileTokenW (Ordinal: 107, Address: 0x1b90)
SymGetSourceVarFromTokenW (Ordinal: 108, Address: 0x1bb0)
SymGetSymFromAddr (Ordinal: 109, Address: 0x1bd0)
SymGetSymFromAddr64 (Ordinal: 110, Address: 0x1bd0)
SymGetSymFromName (Ordinal: 111, Address: 0x1bf0)
SymGetSymFromName64 (Ordinal: 112, Address: 0x1bf0)
SymGetSymNext (Ordinal: 113, Address: 0x1c10)
SymGetSymNext64 (Ordinal: 114, Address: 0x1c10)
SymGetSymPrev (Ordinal: 115, Address: 0x1c30)
SymGetSymPrev64 (Ordinal: 116, Address: 0x1c30)
SymGetSymbolFile (Ordinal: 117, Address: 0x1c50)
SymGetSymbolFileW (Ordinal: 118, Address: 0x1c70)
SymGetTypeFromName (Ordinal: 119, Address: 0x1c90)
SymGetTypeFromNameW (Ordinal: 120, Address: 0x1cb0)
SymGetTypeInfo (Ordinal: 121, Address: 0x1cd0)
SymGetTypeInfoEx (Ordinal: 122, Address: 0x1cf0)
SymInitialize (Ordinal: 123, Address: 0x1d10)
SymLoadModule (Ordinal: 124, Address: 0x1d30)
SymLoadModule64 (Ordinal: 125, Address: 0x1d30)
SymMatchFileName (Ordinal: 126, Address: 0x1d50)
SymMatchFileNameW (Ordinal: 127, Address: 0x1d70)
SymMatchString (Ordinal: 128, Address: 0x1d90)
SymMatchStringA (Ordinal: 129, Address: 0x1db0)
SymMatchStringW (Ordinal: 130, Address: 0x1dd0)
SymQueryInlineTrace (Ordinal: 131, Address: 0x1df0)
SymRegisterCallback (Ordinal: 132, Address: 0x1e10)
SymRegisterCallback64 (Ordinal: 133, Address: 0x1e10)
SymRegisterFunctionEntryCallback (Ordinal: 134, Address: 0x1e30)
SymRegisterFunctionEntryCallback64 (Ordinal: 135, Address: 0x1e30)
SymSetContext (Ordinal: 136, Address: 0x1e50)
SymSetExtendedOption (Ordinal: 137, Address: 0x1e70)
SymSetOptions (Ordinal: 138, Address: 0x1e90)
SymSetScopeFromAddr (Ordinal: 139, Address: 0x1eb0)
SymSetScopeFromIndex (Ordinal: 140, Address: 0x1ed0)
SymSetScopeFromInlineContext (Ordinal: 141, Address: 0x1ef0)
SymSetSearchPath (Ordinal: 142, Address: 0x1f10)
SymSrvGetFileIndexString (Ordinal: 143, Address: 0x1f30)
SymSrvGetFileIndexStringW (Ordinal: 144, Address: 0x1f50)
SymSrvGetFileIndexes (Ordinal: 145, Address: 0x1f70)
SymSrvGetFileIndexesW (Ordinal: 146, Address: 0x1f90)
SymUnDName (Ordinal: 147, Address: 0x1fb0)
SymUnDName64 (Ordinal: 148, Address: 0x1fb0)
SymUnloadModule (Ordinal: 149, Address: 0x1fd0)
SymUnloadModule64 (Ordinal: 150, Address: 0x1fd0)
TouchFileTimes (Ordinal: 151, Address: 0x62f0)
UnDecorateSymbolName (Ordinal: 152, Address: 0x1ff0)
UnMapAndLoad (Ordinal: 153, Address: 0x7b10)
UpdateDebugInfoFile (Ordinal: 154, Address: 0x9200)
UpdateDebugInfoFileEx (Ordinal: 155, Address: 0x9220)

Imported DLLs & Functions

api-ms-win-core-debug-l1-1-0.dll

IsDebuggerPresent (Address: 0x18000c4f8)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18000c528)
RaiseException (Address: 0x18000c510)
SetLastError (Address: 0x18000c508)
SetUnhandledExceptionFilter (Address: 0x18000c520)
UnhandledExceptionFilter (Address: 0x18000c518)

api-ms-win-core-file-l1-1-0.dll

CreateFileA (Address: 0x18000c538)
GetFileSize (Address: 0x18000c548)
SetEndOfFile (Address: 0x18000c558)
SetFilePointer (Address: 0x18000c550)
SetFileTime (Address: 0x18000c540)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18000c568)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18000c588)
HeapAlloc (Address: 0x18000c578)
HeapFree (Address: 0x18000c580)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x18000c598)

api-ms-win-core-libraryloader-l1-1-0.dll

FreeLibrary (Address: 0x18000c5a8)
GetModuleFileNameA (Address: 0x18000c5d0)
GetModuleHandleExA (Address: 0x18000c5c8)
GetProcAddress (Address: 0x18000c5c0)
LoadLibraryExA (Address: 0x18000c5b8)
LoadLibraryExW (Address: 0x18000c5b0)

api-ms-win-core-localregistry-l1-1-0.dll

RegCloseKey (Address: 0x18000c5e8)
RegOpenKeyExW (Address: 0x18000c5e0)
RegQueryValueExW (Address: 0x18000c5f0)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x18000c608)
FlushViewOfFile (Address: 0x18000c620)
MapViewOfFile (Address: 0x18000c628)
MapViewOfFileEx (Address: 0x18000c600)
UnmapViewOfFile (Address: 0x18000c618)
VirtualProtect (Address: 0x18000c630)
VirtualQuery (Address: 0x18000c610)

api-ms-win-core-misc-l1-1-0.dll

lstrcmpiA (Address: 0x18000c640)

api-ms-win-core-processenvironment-l1-1-0.dll

SearchPathW (Address: 0x18000c650)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x18000c678)
GetCurrentProcessId (Address: 0x18000c660)
GetCurrentThreadId (Address: 0x18000c668)
TerminateProcess (Address: 0x18000c680)
TlsAlloc (Address: 0x18000c688)
TlsFree (Address: 0x18000c690)
TlsGetValue (Address: 0x18000c670)
TlsSetValue (Address: 0x18000c698)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18000c6a8)

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar (Address: 0x18000c6b8)
WideCharToMultiByte (Address: 0x18000c6c0)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18000c6d8)
DeleteCriticalSection (Address: 0x18000c6d0)
InitializeCriticalSection (Address: 0x18000c6e8)
ReleaseSRWLockExclusive (Address: 0x18000c6e0)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemInfo (Address: 0x18000c718)
GetSystemTime (Address: 0x18000c6f8)
GetSystemTimeAsFileTime (Address: 0x18000c708)
GetVersion (Address: 0x18000c720)
GetVersionExA (Address: 0x18000c710)
SystemTimeToFileTime (Address: 0x18000c700)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x18000c7c0)
__CxxFrameHandler3 (Address: 0x18000c7a0)
_o___std_type_info_destroy_list (Address: 0x18000c7a8)
_o__cexit (Address: 0x18000c730)
_o__configure_narrow_argv (Address: 0x18000c738)
_o__execute_onexit_table (Address: 0x18000c740)
_o__initialize_narrow_environment (Address: 0x18000c748)
_o__initialize_onexit_table (Address: 0x18000c750)
_o__seh_filter_dll (Address: 0x18000c758)
_o__splitpath_s (Address: 0x18000c760)
_o__stricmp (Address: 0x18000c770)
_o__strnicmp (Address: 0x18000c7b8)
_o__ultoa_s (Address: 0x18000c778)
_o_atoi (Address: 0x18000c780)
_o_strcat_s (Address: 0x18000c788)
_o_strcpy_s (Address: 0x18000c790)
_o_strncpy_s (Address: 0x18000c798)
memcmp (Address: 0x18000c7c8)
memcpy (Address: 0x18000c7d0)
memmove (Address: 0x18000c768)
strrchr (Address: 0x18000c7b0)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x18000c7e8)
_initterm_e (Address: 0x18000c7e0)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x18000c7f8)
strncmp (Address: 0x18000c800)

api-ms-win-eventing-provider-l1-1-0.dll

EventUnregister (Address: 0x18000c810)

ntdll.dll

RtlCaptureContext (Address: 0x18000c828)
RtlImageNtHeaderEx (Address: 0x18000c830)
RtlLookupFunctionEntry (Address: 0x18000c838)
RtlRunOnceExecuteOnce (Address: 0x18000c820)
RtlVirtualUnwind (Address: 0x18000c840)