dbghelp.dll
v6.3.11.3
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 173
DirTree
#1 · 0x35540
DbgHelpCreateUserDump
#2 · 0x41b50
DbgHelpCreateUserDumpW
#3 · 0x41c40
EnumDirTree
#4 · 0x34c20
EnumDirTreeW
#5 · 0x35580
EnumerateLoadedModules64
#6 · 0x2fc20
EnumerateLoadedModules
#7 · 0x2fb60
ExtensionApiVersion
#8 · 0x1f980
FindDebugInfoFile
#9 · 0x33e70
FindDebugInfoFileEx
#10 · 0x34b60
FindExecutableImage
#11 · 0x33170
FindExecutableImageEx
#12 · 0x33d60
FindExecutableImageExW
#13 · 0x33e30
FindFileInPath
#14 · 0x33090
FindFileInSearchPath
#15 · 0x330c0
GetTimestampForLoadedLibrary
#16 · 0x25220
ImageDirectoryEntryToData
#17 · 0x24da0
ImageDirectoryEntryToDataEx
#18 · 0x24ca0
ImageNtHeader
#19 · 0x24990
ImageRvaToSection
#20 · 0x5e5d0
ImageRvaToVa
#21 · 0x24dc0
ImagehlpApiVersion
#22 · 0x35e60
ImagehlpApiVersionEx
#23 · 0x35e70
MakeSureDirectoryPathExists
#24 · 0x35bc0
MapDebugInformation
#25 · 0x32210
MiniDumpReadDumpStream
#26 · 0x57ad0
MiniDumpWriteDump
#27 · 0x578b0
SearchTreeForFile
#28 · 0x35a90
SearchTreeForFileW
#29 · 0x35ab0
StackWalk64
#30 · 0x43fe0
StackWalk
#31 · 0x43db0
SymAddSymbol
#32 · 0x306c0
SymAddSymbolW
#33 · 0x30560
SymCleanup
#34 · 0x2b490
SymDeleteSymbol
#35 · 0x30840
SymDeleteSymbolW
#36 · 0x30710
SymEnumLines
#37 · 0x2d3c0
SymEnumLinesW
#38 · 0x2d450
SymEnumSourceFiles
#39 · 0x31be0
SymEnumSourceFilesW
#40 · 0x31c50
SymEnumSym
#41 · 0x31690
SymEnumSymbols
#42 · 0x30bc0
SymEnumSymbolsForAddr
#43 · 0x313b0
SymEnumSymbolsForAddrW
#44 · 0x31520
SymEnumSymbolsW
#45 · 0x30c30
SymEnumTypes
#46 · 0x31780
SymEnumTypesW
#47 · 0x317d0
SymEnumerateModules64
#48 · 0x2c080
SymEnumerateModules
#49 · 0x2c040
SymEnumerateModulesW64
#50 · 0x2c0c0
SymEnumerateSymbols64
#51 · 0x2c370
SymEnumerateSymbols
#52 · 0x2c2d0
SymEnumerateSymbolsW64
#53 · 0x2c3d0
SymEnumerateSymbolsW
#54 · 0x2c320
SymFindFileInPath
#55 · 0x32f90
SymFindFileInPathW
#56 · 0x33040
SymFromAddr
#57 · 0x30890
SymFromAddrW
#58 · 0x308f0
SymFromIndex
#59 · 0x31120
SymFromIndexW
#60 · 0x31190
SymFromName
#61 · 0x30b20
SymFromNameW
#62 · 0x30b80
SymFromToken
#63 · 0x30950
SymFromTokenW
#64 · 0x309d0
SymFunctionTableAccess64
#65 · 0x2e7e0
SymFunctionTableAccess
#66 · 0x2e7c0
SymGetFileLineOffsets64
#67 · 0x26930
SymGetHomeDirectory
#68 · 0x2bb10
SymGetHomeDirectoryW
#69 · 0x2ba60
SymGetLineFromAddr64
#70 · 0x2d4a0
SymGetLineFromAddr
#71 · 0x2d720
SymGetLineFromAddrW64
#72 · 0x2d530
SymGetLineFromName64
#73 · 0x2de40
SymGetLineFromName
#74 · 0x2ded0
SymGetLineFromNameW64
#75 · 0x2d770
SymGetLineNext64
#76 · 0x2e1b0
SymGetLineNext
#77 · 0x2e220
SymGetLineNextW64
#78 · 0x2e200
SymGetLinePrev64
#79 · 0x2e280
SymGetLinePrev
#80 · 0x2e2f0
SymGetLinePrevW64
#81 · 0x2e2d0
SymGetModuleBase64
#82 · 0x2f040
SymGetModuleBase
#83 · 0x2f140
SymGetModuleInfo64
#84 · 0x2eab0
SymGetModuleInfo
#85 · 0x2ef90
SymGetModuleInfoW64
#86 · 0x2eb30
SymGetModuleInfoW
#87 · 0x2ef00
SymGetOptions
#88 · 0x2bd00
SymGetScope
#89 · 0x30f10
SymGetScopeW
#90 · 0x30f90
SymGetSearchPath
#91 · 0x2f720
SymGetSearchPathW
#92 · 0x2f780
SymGetSourceFile
#93 · 0x2cee0
SymGetSourceFileFromToken
#94 · 0x2d050
SymGetSourceFileFromTokenW
#95 · 0x2d0e0
SymGetSourceFileToken
#96 · 0x2cf50
SymGetSourceFileTokenW
#97 · 0x2cfa0
SymGetSourceVarFromToken
#98 · 0x2d140
SymGetSourceVarFromTokenW
#99 · 0x2d1e0
SymGetSymFromAddr64
#100 · 0x2c570
SymGetSymFromAddr
#101 · 0x2c5b0
SymGetSymFromName64
#102 · 0x2c910
SymGetSymFromName
#103 · 0x2c970
SymGetSymNext64
#104 · 0x2cc10
SymGetSymNext
#105 · 0x2cb10
SymGetSymPrev64
#106 · 0x2cca0
SymGetSymPrev
#107 · 0x2cc30
SymGetSymbolFile
#108 · 0x41860
SymGetSymbolFileW
#109 · 0x413c0
SymGetTypeFromName
#110 · 0x31820
SymGetTypeFromNameW
#111 · 0x318b0
SymGetTypeInfo
#112 · 0x31ff0
SymGetTypeInfoEx
#113 · 0x32030
SymInitialize
#114 · 0x2b2a0
SymInitializeW
#115 · 0x2af20
SymLoadModule64
#116 · 0x2f4c0
SymLoadModule
#117 · 0x2f4f0
SymLoadModuleEx
#118 · 0x2f310
SymLoadModuleExW
#119 · 0x2f3f0
SymMatchFileName
#120 · 0x2e350
SymMatchFileNameW
#121 · 0x2e490
SymMatchString
#122 · 0x31a50
SymMatchStringW
#123 · 0x31a70
SymNext
#124 · 0x2c9d0
SymNextW
#125 · 0x2ca50
SymPrev
#126 · 0x2ca70
SymPrevW
#127 · 0x2caf0
SymRegisterCallback64
#128 · 0x2fde0
SymRegisterCallback
#129 · 0x2fce0
SymRegisterCallbackW64
#130 · 0x2fee0
SymRegisterFunctionEntryCallback64
#131 · 0x2e6d0
SymRegisterFunctionEntryCallback
#132 · 0x2e5e0
SymSearch
#133 · 0x30e40
SymSearchW
#134 · 0x30eb0
SymSetContext
#135 · 0x2bd10
SymSetHomeDirectory
#136 · 0x2b9f0
SymSetOptions
#137 · 0x2bb70
SymSetParentWindow
#138 · 0x2b510
SymSetSearchPath
#139 · 0x2f850
SymSetSearchPathW
#140 · 0x2f890
SymSrvDeltaName
#141 · 0x40b20
SymSrvDeltaNameW
#142 · 0x40940
SymSrvGetFileIndexString
#143 · 0x410b0
SymSrvGetFileIndexStringW
#144 · 0x41010
SymSrvGetFileIndexes
#145 · 0x40fd0
SymSrvGetFileIndexesW
#146 · 0x40f20
SymSrvGetSupplement
#147 · 0x40d00
SymSrvGetSupplementW
#148 · 0x40bd0
SymSrvIsStore
#149 · 0x40900
SymSrvIsStoreW
#150 · 0x40830
SymSrvStoreFile
#151 · 0x411e0
SymSrvStoreFileW
#152 · 0x41140
SymSrvStoreSupplement
#153 · 0x40e80
SymSrvStoreSupplementW
#154 · 0x40d90
SymUnDName64
#155 · 0x2f620
SymUnDName
#156 · 0x2f520
SymUnloadModule64
#157 · 0x2f160
SymUnloadModule
#158 · 0x2f2f0
UnDecorateSymbolName
#159 · 0x32090
UnDecorateSymbolNameW
#160 · 0x32180
UnmapDebugInformation
#161 · 0x324c0
WinDbgExtensionDllInit
#162 · 0x1f990
dbghelp
#163 · 0x2bdb0
dh
#164 · 0x21d90
fptr
#165 · 0x1fb70
lmi
#166 · 0x20250
lminfo
#167 · 0x1ffc0
omap
#168 · 0x20520
srcfiles
#169 · 0x207e0
stackdbg
#170 · 0x1fc30
sym
#171 · 0x1fd30
symsrv
#172 · 0x1fe90
vc7fpo
#173 · 0x1fbe0
No function matches your filter.
Imported DLLs & functions 197
ADVAPI32.dll
10
CryptAcquireContextA
0x2801018
CryptGenRandom
0x2801014
CryptReleaseContext
0x2801010
RegCloseKey
0x280100c
RegEnumKeyExW
0x2801008
RegOpenKeyExA
0x2801024
RegOpenKeyExW
0x2801000
RegQueryInfoKeyW
0x2801004
RegQueryValueExA
0x2801020
RegQueryValueExW
0x280101c
KERNEL32.dll
101
CloseHandle
0x2801198
CopyFileA
0x280111c
CopyFileW
0x2801124
CreateDirectoryA
0x280106c
CreateDirectoryW
0x280103c
CreateFileA
0x280118c
CreateFileMappingA
0x2801080
CreateFileMappingW
0x2801108
CreateFileW
0x2801038
CreateThread
0x2801150
DebugBreak
0x28010a8
DeleteCriticalSection
0x2801178
DeleteFileA
0x2801140
DeleteFileW
0x2801034
DeviceIoControl
0x280110c
DuplicateHandle
0x2801078
EnterCriticalSection
0x280119c
ExpandEnvironmentStringsA
0x280113c
ExpandEnvironmentStringsW
0x2801138
FindClose
0x2801060
FindFirstFileA
0x2801068
FindFirstFileW
0x28011ac
FindNextFileA
0x2801064
FindNextFileW
0x28011b0
FlushViewOfFile
0x28010fc
FormatMessageA
0x2801148
FormatMessageW
0x2801144
FreeLibrary
0x28011b4
GetCurrentProcess
0x280104c
GetCurrentProcessId
0x280108c
GetCurrentThreadId
0x28010bc
GetEnvironmentVariableW
0x280102c
GetFileAttributesA
0x28010a4
GetFileAttributesW
0x2801058
GetFileSize
0x2801190
GetFileType
0x2801104
GetFullPathNameW
0x2801054
GetLastError
0x2801188
GetModuleFileNameW
0x2801040
GetModuleHandleA
0x2801084
GetPriorityClass
0x28010f8
GetProcAddress
0x2801030
GetSystemDirectoryW
0x28010ac
GetSystemInfo
0x280116c
GetSystemTimeAsFileTime
0x28010cc
GetThreadContext
0x280115c
GetThreadPriority
0x2801154
GetThreadSelectorEntry
0x280114c
GetThreadTimes
0x2801158
GetTickCount
0x28010b8
GetVersionExA
0x28010f0
GetVersionExW
0x2801168
HeapAlloc
0x28010dc
HeapCreate
0x2801174
HeapDestroy
0x280117c
HeapFree
0x28010d8
HeapReAlloc
0x28010e0
InitializeCriticalSection
0x2801170
InitializeCriticalSectionAndSpinCount
0x2801110
InterlockedDecrement
0x2801130
InterlockedIncrement
0x280112c
IsDBCSLeadByte
0x28010d4
LCMapStringA
0x2801118
LCMapStringW
0x2801114
LeaveCriticalSection
0x28011a0
LoadLibraryA
0x28011b8
LoadLibraryW
0x28010b0
LocalAlloc
0x28011a4
LocalFree
0x28010e8
MapViewOfFile
0x280107c
MapViewOfFileEx
0x2801100
MultiByteToWideChar
0x2801044
OpenProcess
0x2801088
OutputDebugStringA
0x28010d0
OutputDebugStringW
0x2801094
QueryPerformanceCounter
0x28010b4
ReadFile
0x2801194
ReadProcessMemory
0x2801098
ResumeThread
0x2801160
SetErrorMode
0x28010a0
SetFileAttributesA
0x2801120
SetFileAttributesW
0x2801128
SetFilePointer
0x280105c
SetLastError
0x28011a8
SetUnhandledExceptionFilter
0x28010c8
Sleep
0x2801134
SuspendThread
0x2801164
TerminateProcess
0x28010c0
TerminateThread
0x28011bc
TlsAlloc
0x28010ec
TlsFree
0x28010e4
TlsGetValue
0x2801180
TlsSetValue
0x2801184
UnhandledExceptionFilter
0x28010c4
UnmapViewOfFile
0x2801050
VirtualAlloc
0x2801074
VirtualFree
0x2801090
VirtualProtect
0x2801070
VirtualQueryEx
0x28010f4
WideCharToMultiByte
0x2801048
WriteFile
0x280109c
msvcrt.dll
85
__CxxFrameHandler
0x2801254
__dllonexit
0x28011d0
__unDName
0x280125c
_access
0x28012a8
_adjust_fdiv
0x28011d4
_chsize
0x28012c4
_close
0x280121c
_CxxThrowException
0x2801260
_except_handler3
0x28012fc
_fsopen
0x28012b0
_fullpath
0x2801298
_get_osfhandle
0x28012b8
_initterm
0x28011d8
_itoa
0x28011fc
_lseeki64
0x28012c0
_ltoa
0x2801230
_mbscmp
0x28012dc
_mbsicmp
0x28012a0
_memicmp
0x28012e0
_onexit
0x28011cc
_open_osfhandle
0x28012c8
_osver
0x280127c
_purecall
0x280123c
_read
0x28012bc
_snprintf
0x2801280
_snwprintf
0x2801268
_sopen
0x28012d0
_splitpath
0x28012a4
_stricmp
0x2801238
_strlwr
0x28012ec
_vsnprintf
0x2801240
_vsnwprintf
0x28012f8
_wcsdup
0x28012ac
_wcsicmp
0x280120c
_wcslwr
0x2801218
_wcsnicmp
0x2801234
_wfopen
0x2801274
_wfsopen
0x28012b4
_wfullpath
0x280129c
_wgetenv
0x28012d8
_winmajor
0x2801294
_winminor
0x2801290
_wmakepath
0x280128c
_wopen
0x2801220
_write
0x2801200
_wsopen
0x28012cc
_wsplitpath
0x2801318
??1type_info@@UAE@XZ
0x28012e4
??2@YAPAXI@Z
0x280131c
??3@YAXPAX@Z
0x2801314
?terminate@@YAXXZ
0x28012e8
atol
0x2801250
bsearch
0x2801264
calloc
0x28011f0
ctime
0x2801248
fclose
0x2801258
fopen
0x2801278
fread
0x280126c
free
0x28012f0
fseek
0x2801270
ftell
0x28012d4
isspace
0x2801244
iswprint
0x28011e4
iswspace
0x28011ec
iswxdigit
0x2801310
malloc
0x280124c
memmove
0x28011e8
qsort
0x2801300
realloc
0x28011dc
sprintf
0x28011e0
strchr
0x2801208
strncat
0x28011f8
strncmp
0x280122c
strncpy
0x2801204
strstr
0x28012f4
time
0x2801224
tolower
0x2801214
towlower
0x2801210
wcschr
0x2801304
wcsncat
0x28011f4
wcsncmp
0x280130c
wcsncpy
0x2801228
wcsrchr
0x2801288
wcsstr
0x2801308
wcstol
0x2801284
UuidCreate
0x28011c4
No function matches your filter.