dbghelp.dll
v6.12.2.633
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 203
SymGetOmapBlockBase
#1 · 0x4c610
DbgHelpCreateUserDump
#2 · 0x63970
DbgHelpCreateUserDumpW
#3 · 0x63a90
EnumDirTree
#4 · 0x523c0
EnumDirTreeW
#5 · 0x52500
EnumerateLoadedModules
#6 · 0x4b540
EnumerateLoadedModules64
#7 · 0x4b540
EnumerateLoadedModulesEx
#8 · 0x4b680
EnumerateLoadedModulesExW
#9 · 0x4b720
EnumerateLoadedModulesW64
#10 · 0x4b5e0
ExtensionApiVersion
#11 · 0x33dd0
FindDebugInfoFile
#12 · 0x50910
FindDebugInfoFileEx
#13 · 0x51ae0
FindDebugInfoFileExW
#14 · 0x51a70
FindExecutableImage
#15 · 0x4f650
FindExecutableImageEx
#16 · 0x50530
FindExecutableImageExW
#17 · 0x506b0
FindFileInPath
#18 · 0x4f4b0
FindFileInSearchPath
#19 · 0x4f530
GetTimestampForLoadedLibrary
#20 · 0x3d230
ImageDirectoryEntryToData
#21 · 0x3cc50
ImageDirectoryEntryToDataEx
#22 · 0x3ca90
ImageNtHeader
#23 · 0x3c610
ImageRvaToSection
#24 · 0x3cca0
ImageRvaToVa
#25 · 0x3cd50
ImagehlpApiVersion
#26 · 0x52970
ImagehlpApiVersionEx
#27 · 0x52980
MakeSureDirectoryPathExists
#28 · 0x526f0
MiniDumpReadDumpStream
#29 · 0x775a0
MiniDumpWriteDump
#30 · 0x771a0
SearchTreeForFile
#31 · 0x52580
SearchTreeForFileW
#32 · 0x525d0
StackWalk
#33 · 0x6dfc0
StackWalk64
#34 · 0x6dfc0
SymAddSourceStream
#35 · 0x48680
SymAddSourceStreamA
#36 · 0x48610
SymAddSourceStreamW
#37 · 0x483e0
SymAddSymbol
#38 · 0x4bf50
SymAddSymbolW
#39 · 0x4be60
SymCleanup
#40 · 0x462e0
SymDeleteSymbol
#41 · 0x4c0c0
SymDeleteSymbolW
#42 · 0x4bfc0
SymEnumLines
#43 · 0x48c80
SymEnumLinesW
#44 · 0x48d70
SymEnumProcesses
#45 · 0x47220
SymEnumSourceFileTokens
#46 · 0x489b0
SymEnumSourceFiles
#47 · 0x4dc90
SymEnumSourceFilesW
#48 · 0x4dd40
SymEnumSourceLines
#49 · 0x48e10
SymEnumSourceLinesW
#50 · 0x48f20
SymEnumSym
#51 · 0x4d1d0
SymEnumSymbols
#52 · 0x4c6c0
SymEnumSymbolsForAddr
#53 · 0x4cf70
SymEnumSymbolsForAddrW
#54 · 0x4d0a0
SymEnumSymbolsW
#55 · 0x4c770
SymEnumTypes
#56 · 0x4d4c0
SymEnumTypesByName
#57 · 0x4d5c0
SymEnumTypesByNameW
#58 · 0x4d6c0
SymEnumTypesW
#59 · 0x4d540
SymEnumerateModules
#60 · 0x47460
SymEnumerateModules64
#61 · 0x47460
SymEnumerateModulesW64
#62 · 0x474d0
SymEnumerateSymbols
#63 · 0x476e0
SymEnumerateSymbols64
#64 · 0x476e0
SymEnumerateSymbolsW
#65 · 0x47760
SymEnumerateSymbolsW64
#66 · 0x47760
SymFindDebugInfoFile
#67 · 0x51bf0
SymFindDebugInfoFileW
#68 · 0x51d20
SymFindExecutableImage
#69 · 0x50720
SymFindExecutableImageW
#70 · 0x50870
SymFindFileInPath
#71 · 0x4f230
SymFindFileInPathW
#72 · 0x4f400
SymFromAddr
#73 · 0x4c130
SymFromAddrW
#74 · 0x4c1b0
SymFromIndex
#75 · 0x4cd20
SymFromIndexW
#76 · 0x4cdd0
SymFromName
#77 · 0x4c3f0
SymFromNameW
#78 · 0x4c490
SymFromToken
#79 · 0x4c230
SymFromTokenW
#80 · 0x4c300
SymFunctionTableAccess
#81 · 0x4a110
SymFunctionTableAccess64
#82 · 0x4a110
SymGetFileLineOffsets64
#83 · 0x3ed90
SymGetHomeDirectory
#84 · 0x46bd0
SymGetHomeDirectoryW
#85 · 0x46ae0
SymGetLineFromAddr
#86 · 0x48fe0
SymGetLineFromAddr64
#87 · 0x48fe0
SymGetLineFromAddrW64
#88 · 0x490c0
SymGetLineFromName
#89 · 0x49910
SymGetLineFromName64
#90 · 0x49910
SymGetLineFromNameW64
#91 · 0x49240
SymGetLineNext
#92 · 0x49c10
SymGetLineNext64
#93 · 0x49c10
SymGetLineNextW64
#94 · 0x49c80
SymGetLinePrev
#95 · 0x49cb0
SymGetLinePrev64
#96 · 0x49cb0
SymGetLinePrevW64
#97 · 0x49d20
SymGetModuleBase
#98 · 0x4ab50
SymGetModuleBase64
#99 · 0x4ab50
SymGetModuleInfo
#100 · 0x4a5a0
SymGetModuleInfo64
#101 · 0x4a5a0
SymGetModuleInfoW
#102 · 0x4a650
SymGetModuleInfoW64
#103 · 0x4a650
SymGetOmaps
#104 · 0x4c4f0
SymGetOptions
#105 · 0x46ec0
SymGetScope
#106 · 0x4cb30
SymGetScopeW
#107 · 0x4cbe0
SymGetSearchPath
#108 · 0x4afb0
SymGetSearchPathW
#109 · 0x4b030
SymGetSourceFile
#110 · 0x48170
SymGetSourceFileFromToken
#111 · 0x486d0
SymGetSourceFileFromTokenW
#112 · 0x48790
SymGetSourceFileToken
#113 · 0x48290
SymGetSourceFileTokenW
#114 · 0x48300
SymGetSourceFileW
#115 · 0x48200
SymGetSourceVarFromToken
#116 · 0x48810
SymGetSourceVarFromTokenW
#117 · 0x48900
SymGetSymFromAddr
#118 · 0x478d0
SymGetSymFromAddr64
#119 · 0x478d0
SymGetSymFromName
#120 · 0x47bb0
SymGetSymFromName64
#121 · 0x47bb0
SymGetSymNext
#122 · 0x47eb0
SymGetSymNext64
#123 · 0x47eb0
SymGetSymPrev
#124 · 0x47ee0
SymGetSymPrev64
#125 · 0x47ee0
SymGetSymbolFile
#126 · 0x63060
SymGetSymbolFileW
#127 · 0x62a10
SymGetTypeFromName
#128 · 0x4d750
SymGetTypeFromNameW
#129 · 0x4d830
SymGetTypeInfo
#130 · 0x4e330
SymGetTypeInfoEx
#131 · 0x4e3b0
SymGetUnwindInfo
#132 · 0x4a330
SymInitialize
#133 · 0x460e0
SymInitializeW
#134 · 0x45d40
SymLoadModule
#135 · 0x4aea0
SymLoadModule64
#136 · 0x4aea0
SymLoadModuleEx
#137 · 0x4ad40
SymLoadModuleExW
#138 · 0x4ae10
SymMatchFileName
#139 · 0x49d50
SymMatchFileNameW
#140 · 0x49ef0
SymMatchString
#141 · 0x4da50
SymMatchStringA
#142 · 0x4dac0
SymMatchStringW
#143 · 0x4db00
SymNext
#144 · 0x47c30
SymNextW
#145 · 0x47ce0
SymPrev
#146 · 0x47d10
SymPrevW
#147 · 0x47dc0
SymRefreshModuleList
#148 · 0x45cb0
SymRegisterCallback
#149 · 0x4b7c0
SymRegisterCallback64
#150 · 0x4b7c0
SymRegisterCallbackW64
#151 · 0x4b870
SymRegisterFunctionEntryCallback
#152 · 0x4a070
SymRegisterFunctionEntryCallback64
#153 · 0x4a070
SymSearch
#154 · 0x4c9b0
SymSearchW
#155 · 0x4ca80
SymSetContext
#156 · 0x46ed0
SymSetHomeDirectory
#157 · 0x46a30
SymSetHomeDirectoryW
#158 · 0x46960
SymSetOptions
#159 · 0x46c70
SymSetParentWindow
#160 · 0x46330
SymSetScopeFromAddr
#161 · 0x46f90
SymSetScopeFromIndex
#162 · 0x47060
SymSetSearchPath
#163 · 0x4b0b0
SymSetSearchPathW
#164 · 0x4b1d0
SymSrvDeltaName
#165 · 0x61960
SymSrvDeltaNameW
#166 · 0x616c0
SymSrvGetFileIndexInfo
#167 · 0x63340
SymSrvGetFileIndexInfoW
#168 · 0x63430
SymSrvGetFileIndexString
#169 · 0x621f0
SymSrvGetFileIndexStringW
#170 · 0x620d0
SymSrvGetFileIndexes
#171 · 0x62060
SymSrvGetFileIndexesW
#172 · 0x61f70
SymSrvGetSupplement
#173 · 0x61c20
SymSrvGetSupplementW
#174 · 0x61a50
SymSrvIsStore
#175 · 0x61670
SymSrvIsStoreW
#176 · 0x61560
SymSrvStoreFile
#177 · 0x62410
SymSrvStoreFileW
#178 · 0x622e0
SymSrvStoreSupplement
#179 · 0x61e90
SymSrvStoreSupplementW
#180 · 0x61cf0
SymUnDName
#181 · 0x4af00
SymUnDName64
#182 · 0x4af00
SymUnloadModule
#183 · 0x4abe0
SymUnloadModule64
#184 · 0x4abe0
UnDecorateSymbolName
#185 · 0x4e450
UnDecorateSymbolNameW
#186 · 0x4e520
WinDbgExtensionDllInit
#187 · 0x33de0
block
#188 · 0x36960
chksym
#189 · 0x36720
dbghelp
#190 · 0x471a0
dh
#191 · 0x38a90
fptr
#192 · 0x34090
homedir
#193 · 0x36e10
itoldyouso
#194 · 0x364e0
lmi
#195 · 0x35060
lminfo
#196 · 0x34bd0
omap
#197 · 0x36b50
srcfiles
#198 · 0x37030
stack_force_ebp
#199 · 0x346e0
stackdbg
#200 · 0x341b0
sym
#201 · 0x348c0
symsrv
#202 · 0x34a50
vc7fpo
#203 · 0x34130
No function matches your filter.
Imported DLLs & functions 187
KERNEL32.dll
99
__chkstk
0x3001058
CloseHandle
0x3001260
CopyFileW
0x3001308
CreateDirectoryA
0x30011e8
CreateDirectoryW
0x3001018
CreateFileA
0x3001248
CreateFileMappingA
0x30011b8
CreateFileMappingW
0x3001060
CreateFileW
0x3001300
DelayLoadFailureHook
0x3001130
DeleteCriticalSection
0x30012c8
DeleteFileW
0x3001010
DeviceIoControl
0x3001048
DuplicateHandle
0x30011d0
EnterCriticalSection
0x3001238
ExpandEnvironmentStringsW
0x3001310
FindClose
0x3001220
FindFirstFileW
0x3001218
FindNextFileW
0x3001228
FlushViewOfFile
0x3001020
FormatMessageW
0x3001080
FreeLibrary
0x3001290
GetCurrentDirectoryW
0x3001030
GetCurrentProcess
0x30011c8
GetCurrentProcessId
0x30011a0
GetCurrentThreadId
0x3001100
GetEnvironmentVariableW
0x30012f0
GetFileAttributesA
0x3001160
GetFileAttributesW
0x30011f0
GetFileSize
0x3001250
GetFileType
0x3001040
GetFullPathNameW
0x30011f8
GetLastError
0x3001268
GetModuleFileNameW
0x30012f8
GetModuleHandleA
0x30011a8
GetPriorityClass
0x30010e0
GetProcAddress
0x3001288
GetProcessHeap
0x3001148
GetSystemDirectoryW
0x3001158
GetSystemInfo
0x3001110
GetSystemTimeAsFileTime
0x3001118
GetThreadContext
0x30010e8
GetThreadPriority
0x30010d8
GetThreadTimes
0x30010d0
GetTickCount
0x30010a0
GetVersion
0x3001078
GetVersionExA
0x30012a8
GetVersionExW
0x3001170
HeapAlloc
0x30012d8
HeapCreate
0x30012b8
HeapDestroy
0x30012c0
HeapFree
0x30012e0
HeapReAlloc
0x30012d0
InitializeCriticalSection
0x30012b0
InitializeCriticalSectionAndSpinCount
0x3001038
IsDBCSLeadByte
0x30012e8
IsProcessorFeaturePresent
0x3001108
LCMapStringW
0x3001068
LeaveCriticalSection
0x3001240
LoadLibraryA
0x3001280
LoadLibraryExA
0x3001138
LoadLibraryW
0x3001150
LocalAlloc
0x3001230
LocalFree
0x3001070
lstrcmpiW
0x3001120
MapViewOfFile
0x30011b0
MapViewOfFileEx
0x3001028
MoveFileW
0x3001000
MultiByteToWideChar
0x3001208
OpenProcess
0x3001198
OutputDebugStringA
0x3001180
OutputDebugStringW
0x3001178
QueryPerformanceCounter
0x30010a8
ReadFile
0x3001258
ReadProcessMemory
0x3001140
ResumeThread
0x30010f0
RtlCaptureContext
0x30010b0
RtlLookupFunctionEntry
0x30010b8
RtlVirtualUnwind
0x30010c0
SetErrorMode
0x3001168
SetFileAttributesW
0x3001050
SetFilePointer
0x3001008
SetLastError
0x3001210
SetUnhandledExceptionFilter
0x3001088
Sleep
0x3001128
SuspendThread
0x30010f8
TerminateProcess
0x3001098
TlsAlloc
0x3001298
TlsFree
0x30012a0
TlsGetValue
0x3001270
TlsSetValue
0x3001278
UnhandledExceptionFilter
0x3001090
UnmapViewOfFile
0x30011c0
VirtualAlloc
0x30011e0
VirtualFree
0x3001190
VirtualProtect
0x30011d8
VirtualQueryEx
0x30010c8
WideCharToMultiByte
0x3001200
WriteFile
0x3001188
msvcrt.dll
88
__badioinfo
0x3001350
__C_specific_handler
0x30013d8
__CxxFrameHandler
0x3001408
__dllonexit
0x30013a8
__mb_cur_max
0x3001388
__pioinfo
0x3001348
__unDName
0x3001518
_amsg_exit
0x30013e0
_chsize
0x3001580
_close
0x3001588
_CxxThrowException
0x30013b8
_errno
0x3001400
_fileno
0x3001338
_get_osfhandle
0x3001578
_initterm
0x30013e8
_iob
0x3001378
_isatty
0x3001320
_ismbblead
0x30013d0
_itoa
0x3001420
_lock
0x30013a0
_lseeki64
0x3001330
_ltoa
0x3001460
_mbscmp
0x30015a8
_memicmp
0x30015a0
_onexit
0x3001398
_open_osfhandle
0x3001590
_purecall
0x3001478
_read
0x3001340
_snprintf
0x3001370
_stricmp
0x30014a0
_strlwr
0x30014b0
_strnicmp
0x3001468
_time64
0x3001568
_unlock
0x30013b0
_vsnwprintf
0x30014e8
_wcsdup
0x3001428
_wcsicmp
0x30014c8
_wcslwr
0x3001440
_wcsnicmp
0x3001470
_wctime
0x3001448
_wfsopen
0x3001538
_wfullpath
0x3001570
_wgetenv
0x30015b0
_write
0x3001328
_wsopen
0x30015d8
_XcptFilter
0x30013f0
??_U@YAPEAX_K@Z
0x3001560
??_V@YAXPEAX@Z
0x3001458
??1type_info@@UEAA@XZ
0x3001358
??2@YAPEAX_K@Z
0x30015d0
??3@YAXPEAX@Z
0x30015c8
atol
0x3001508
bsearch
0x3001530
calloc
0x3001418
ctime
0x3001480
fclose
0x3001510
ferror
0x3001360
fflush
0x3001500
fprintf
0x30014f8
fread
0x3001540
free
0x30014a8
fseek
0x3001548
ftell
0x3001598
isleadbyte
0x3001380
isspace
0x3001498
iswdigit
0x3001520
iswprint
0x30014f0
iswspace
0x3001410
iswxdigit
0x30014d8
malloc
0x3001488
mbtowc
0x3001390
memcmp
0x3001528
memcpy
0x30013c8
memmove
0x30013f8
memset
0x30013c0
qsort
0x30014d0
strchr
0x3001558
strncmp
0x3001490
strstr
0x30014c0
time
0x3001450
tolower
0x3001438
towlower
0x3001430
wcschr
0x30015c0
wcsncmp
0x30014e0
wcsrchr
0x30014b8
wcsstr
0x30015b8
wcstol
0x3001550
wctomb
0x3001368
No function matches your filter.