Helper.dll
v1.0.0.4
64-bit
Windows
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess, WriteProcessMemory, VirtualAllocEx
Exported functions 6
Disconnect
#1 · 0x45740
Connect
#2 · 0x458b0
DisConnect
#3 · 0x45830
GetBuffer
#4 · 0x38680
QueryStatus
#5 · 0x45570
SetDebugMode
#6 · 0x45720
No function matches your filter.
Imported DLLs & functions 140
strtol
0x180053350
remove
0x180053360
_aligned_free
0x180053388
_aligned_malloc
0x1800533a0
_callnewh
0x180053378
calloc
0x180053380
free
0x180053390
malloc
0x180053398
realloc
0x180053370
ceilf
0x1800533c8
_cexit
0x1800533e8
_configure_narrow_argv
0x180053428
_crt_atexit
0x1800533e0
_errno
0x180053430
_execute_onexit_table
0x1800533d8
_initialize_narrow_environment
0x180053418
_initialize_onexit_table
0x180053410
_initterm
0x180053400
_initterm_e
0x180053408
_invoke_watson
0x180053420
_register_onexit_function
0x1800533f0
_seh_filter_dll
0x180053438
terminate
0x1800533f8
__acrt_iob_func
0x180053488
__stdio_common_vfprintf
0x180053480
__stdio_common_vsprintf
0x180053470
fclose
0x180053460
fopen
0x180053468
fread
0x180053450
fseek
0x180053448
ftell
0x180053478
fwrite
0x180053458
rewind
0x180053490
MiniDumpWriteDump
0x1800534c0
KERNEL32.dll
58
CloseHandle
0x180053058
CreateFileA
0x1800530d8
CreateFileMappingW
0x180053060
CreateThread
0x180053128
CreateToolhelp32Snapshot
0x1800530a8
DeleteCriticalSection
0x180053028
EnterCriticalSection
0x180053010
FindResourceA
0x180053108
GetCurrentProcess
0x180053158
GetCurrentProcessId
0x180053178
GetCurrentThreadId
0x180053168
GetExitCodeProcess
0x180053148
GetLastError
0x180053080
GetModuleFileNameW
0x180053150
GetModuleHandleExA
0x180053110
GetProcAddress
0x180053090
GetSystemInfo
0x180053000
GetSystemTimeAsFileTime
0x1800531c0
GetThreadId
0x180053170
InitializeCriticalSection
0x180053020
InitializeSListHead
0x180053188
IsDebuggerPresent
0x180053190
IsProcessorFeaturePresent
0x180053198
K32EnumProcessModules
0x1800530f0
K32EnumProcessModulesEx
0x1800530c0
K32GetModuleBaseNameA
0x1800530e0
K32GetModuleFileNameExA
0x1800530d0
K32GetModuleInformation
0x1800530e8
LeaveCriticalSection
0x180053018
LoadLibraryA
0x180053088
LoadResource
0x180053130
LockResource
0x180053120
MapViewOfFile
0x180053068
OpenProcess
0x180053078
OutputDebugStringA
0x180053008
Process32FirstW
0x1800530b8
Process32NextW
0x1800530b0
QueryFullProcessImageNameA
0x180053118
QueryPerformanceCounter
0x180053038
QueryPerformanceFrequency
0x180053030
ReadProcessMemory
0x180053098
RtlCaptureContext
0x1800531c8
RtlLookupFunctionEntry
0x1800531b8
RtlVirtualUnwind
0x1800531b0
SetUnhandledExceptionFilter
0x180053180
SizeofResource
0x180053100
Sleep
0x1800530c8
TerminateProcess
0x1800531a0
UnhandledExceptionFilter
0x1800531a8
UnmapViewOfFile
0x180053050
VirtualAlloc
0x180053048
VirtualAllocEx
0x180053138
VirtualFree
0x180053040
VirtualFreeEx
0x180053140
VirtualQueryEx
0x1800530f8
WaitForSingleObject
0x180053160
WideCharToMultiByte
0x1800530a0
WriteProcessMemory
0x180053070
MSVCP140.dll
22
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z
0x180053218
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
0x180053230
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
0x1800531d8
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
0x180053248
?_Getlconv@_Locinfo@std@@QEBAPEBUlconv@@XZ
0x180053250
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
0x180053240
?_Id_cnt@id@locale@std@@0HA
0x180053200
?_Incref@facet@locale@std@@UEAAXXZ
0x180053238
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
0x1800531f0
?_Xbad_alloc@std@@YAXXZ
0x180053280
?_Xinvalid_argument@std@@YAXPEBD@Z
0x180053270
?_Xlength_error@std@@YAXPEBD@Z
0x180053278
?_Xout_of_range@std@@YAXPEBD@Z
0x180053268
??0_Locinfo@std@@QEAA@PEBD@Z
0x180053260
??0_Lockit@std@@QEAA@H@Z
0x1800531e8
??0facet@locale@std@@IEAA@_K@Z
0x180053228
??1_Locinfo@std@@QEAA@XZ
0x180053258
??1_Lockit@std@@QEAA@XZ
0x1800531e0
??1facet@locale@std@@MEAA@XZ
0x180053220
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
0x180053210
?classic@locale@std@@SAAEBV12@XZ
0x1800531f8
?id@?$numpunct@D@std@@2V0locale@2@A
0x180053208
EnumWindows
0x1800532a0
FindWindowExA
0x1800532b0
GetClassNameA
0x180053298
GetWindowTextA
0x1800532a8
GetWindowThreadProcessId
0x180053290
__CxxFrameHandler4
0x180053340
__C_specific_handler
0x180053320
__current_exception
0x1800532d8
__current_exception_context
0x1800532c8
__std_exception_copy
0x1800532e0
__std_exception_destroy
0x1800532c0
__std_terminate
0x1800532d0
__std_type_info_destroy_list
0x1800532e8
_CxxThrowException
0x180053310
_purecall
0x180053330
memcmp
0x1800532f8
memcpy
0x180053308
memmove
0x180053300
memset
0x1800532f0
strstr
0x180053328
wcsstr
0x180053318
No function matches your filter.