dbghelp.dll

Description: Windows Image Helper

Version: 6.11.1.404

Architecture: 64-bit

Operating System: Windows NT

SHA256: 159b30d9f1bbe69ae03e0d19669d4fcb

File Size: 1.3 MB

Uploaded At: July 12, 2026, 12:22 a.m.

Views: 19

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

SymGetOmapBlockBase (Ordinal: 1, Address: 0x49e20)
DbgHelpCreateUserDump (Ordinal: 2, Address: 0x60da0)
DbgHelpCreateUserDumpW (Ordinal: 3, Address: 0x60ec0)
EnumDirTree (Ordinal: 4, Address: 0x4fb20)
EnumDirTreeW (Ordinal: 5, Address: 0x4fc60)
EnumerateLoadedModules (Ordinal: 6, Address: 0x48df0)
EnumerateLoadedModules64 (Ordinal: 7, Address: 0x48df0)
EnumerateLoadedModulesEx (Ordinal: 8, Address: 0x48f30)
EnumerateLoadedModulesExW (Ordinal: 9, Address: 0x48fd0)
EnumerateLoadedModulesW64 (Ordinal: 10, Address: 0x48e90)
ExtensionApiVersion (Ordinal: 11, Address: 0x31f30)
FindDebugInfoFile (Ordinal: 12, Address: 0x4e0a0)
FindDebugInfoFileEx (Ordinal: 13, Address: 0x4f260)
FindDebugInfoFileExW (Ordinal: 14, Address: 0x4f1f0)
FindExecutableImage (Ordinal: 15, Address: 0x4ce00)
FindExecutableImageEx (Ordinal: 16, Address: 0x4dcc0)
FindExecutableImageExW (Ordinal: 17, Address: 0x4de40)
FindFileInPath (Ordinal: 18, Address: 0x4cc60)
FindFileInSearchPath (Ordinal: 19, Address: 0x4cce0)
GetTimestampForLoadedLibrary (Ordinal: 20, Address: 0x3b100)
ImageDirectoryEntryToData (Ordinal: 21, Address: 0x3ab30)
ImageDirectoryEntryToDataEx (Ordinal: 22, Address: 0x3a970)
ImageNtHeader (Ordinal: 23, Address: 0x3a4f0)
ImageRvaToSection (Ordinal: 24, Address: 0x3ab80)
ImageRvaToVa (Ordinal: 25, Address: 0x3ac30)
ImagehlpApiVersion (Ordinal: 26, Address: 0x500e0)
ImagehlpApiVersionEx (Ordinal: 27, Address: 0x500f0)
MakeSureDirectoryPathExists (Ordinal: 28, Address: 0x4fe50)
MiniDumpReadDumpStream (Ordinal: 29, Address: 0x74000)
MiniDumpWriteDump (Ordinal: 30, Address: 0x73c40)
SearchTreeForFile (Ordinal: 31, Address: 0x4fce0)
SearchTreeForFileW (Ordinal: 32, Address: 0x4fd30)
StackWalk (Ordinal: 33, Address: 0x6b210)
StackWalk64 (Ordinal: 34, Address: 0x6b210)
SymAddSourceStream (Ordinal: 35, Address: 0x460c0)
SymAddSourceStreamA (Ordinal: 36, Address: 0x46050)
SymAddSourceStreamW (Ordinal: 37, Address: 0x45e20)
SymAddSymbol (Ordinal: 38, Address: 0x49760)
SymAddSymbolW (Ordinal: 39, Address: 0x49670)
SymCleanup (Ordinal: 40, Address: 0x43d30)
SymDeleteSymbol (Ordinal: 41, Address: 0x498d0)
SymDeleteSymbolW (Ordinal: 42, Address: 0x497d0)
SymEnumLines (Ordinal: 43, Address: 0x466c0)
SymEnumLinesW (Ordinal: 44, Address: 0x467b0)
SymEnumProcesses (Ordinal: 45, Address: 0x44c60)
SymEnumSourceFileTokens (Ordinal: 46, Address: 0x463f0)
SymEnumSourceFiles (Ordinal: 47, Address: 0x4b480)
SymEnumSourceFilesW (Ordinal: 48, Address: 0x4b530)
SymEnumSourceLines (Ordinal: 49, Address: 0x46850)
SymEnumSourceLinesW (Ordinal: 50, Address: 0x46960)
SymEnumSym (Ordinal: 51, Address: 0x4a9d0)
SymEnumSymbols (Ordinal: 52, Address: 0x49ed0)
SymEnumSymbolsForAddr (Ordinal: 53, Address: 0x4a770)
SymEnumSymbolsForAddrW (Ordinal: 54, Address: 0x4a8a0)
SymEnumSymbolsW (Ordinal: 55, Address: 0x49f80)
SymEnumTypes (Ordinal: 56, Address: 0x4acc0)
SymEnumTypesByName (Ordinal: 57, Address: 0x4adc0)
SymEnumTypesByNameW (Ordinal: 58, Address: 0x4aec0)
SymEnumTypesW (Ordinal: 59, Address: 0x4ad40)
SymEnumerateModules (Ordinal: 60, Address: 0x44ea0)
SymEnumerateModules64 (Ordinal: 61, Address: 0x44ea0)
SymEnumerateModulesW64 (Ordinal: 62, Address: 0x44f10)
SymEnumerateSymbols (Ordinal: 63, Address: 0x45120)
SymEnumerateSymbols64 (Ordinal: 64, Address: 0x45120)
SymEnumerateSymbolsW (Ordinal: 65, Address: 0x451a0)
SymEnumerateSymbolsW64 (Ordinal: 66, Address: 0x451a0)
SymFindDebugInfoFile (Ordinal: 67, Address: 0x4f370)
SymFindDebugInfoFileW (Ordinal: 68, Address: 0x4f4a0)
SymFindExecutableImage (Ordinal: 69, Address: 0x4deb0)
SymFindExecutableImageW (Ordinal: 70, Address: 0x4e000)
SymFindFileInPath (Ordinal: 71, Address: 0x4c9e0)
SymFindFileInPathW (Ordinal: 72, Address: 0x4cbb0)
SymFromAddr (Ordinal: 73, Address: 0x49940)
SymFromAddrW (Ordinal: 74, Address: 0x499c0)
SymFromIndex (Ordinal: 75, Address: 0x4a520)
SymFromIndexW (Ordinal: 76, Address: 0x4a5d0)
SymFromName (Ordinal: 77, Address: 0x49c00)
SymFromNameW (Ordinal: 78, Address: 0x49ca0)
SymFromToken (Ordinal: 79, Address: 0x49a40)
SymFromTokenW (Ordinal: 80, Address: 0x49b10)
SymFunctionTableAccess (Ordinal: 81, Address: 0x47b20)
SymFunctionTableAccess64 (Ordinal: 82, Address: 0x47b20)
SymGetFileLineOffsets64 (Ordinal: 83, Address: 0x3cc40)
SymGetHomeDirectory (Ordinal: 84, Address: 0x44620)
SymGetHomeDirectoryW (Ordinal: 85, Address: 0x44530)
SymGetLineFromAddr (Ordinal: 86, Address: 0x46a10)
SymGetLineFromAddr64 (Ordinal: 87, Address: 0x46a10)
SymGetLineFromAddrW64 (Ordinal: 88, Address: 0x46af0)
SymGetLineFromName (Ordinal: 89, Address: 0x47340)
SymGetLineFromName64 (Ordinal: 90, Address: 0x47340)
SymGetLineFromNameW64 (Ordinal: 91, Address: 0x46c70)
SymGetLineNext (Ordinal: 92, Address: 0x47630)
SymGetLineNext64 (Ordinal: 93, Address: 0x47630)
SymGetLineNextW64 (Ordinal: 94, Address: 0x476a0)
SymGetLinePrev (Ordinal: 95, Address: 0x476d0)
SymGetLinePrev64 (Ordinal: 96, Address: 0x476d0)
SymGetLinePrevW64 (Ordinal: 97, Address: 0x47740)
SymGetModuleBase (Ordinal: 98, Address: 0x48450)
SymGetModuleBase64 (Ordinal: 99, Address: 0x48450)
SymGetModuleInfo (Ordinal: 100, Address: 0x47f80)
SymGetModuleInfo64 (Ordinal: 101, Address: 0x47f80)
SymGetModuleInfoW (Ordinal: 102, Address: 0x48020)
SymGetModuleInfoW64 (Ordinal: 103, Address: 0x48020)
SymGetOmaps (Ordinal: 104, Address: 0x49d00)
SymGetOptions (Ordinal: 105, Address: 0x44910)
SymGetScope (Ordinal: 106, Address: 0x4a330)
SymGetScopeW (Ordinal: 107, Address: 0x4a3e0)
SymGetSearchPath (Ordinal: 108, Address: 0x48870)
SymGetSearchPathW (Ordinal: 109, Address: 0x488f0)
SymGetSourceFile (Ordinal: 110, Address: 0x45bb0)
SymGetSourceFileFromToken (Ordinal: 111, Address: 0x46110)
SymGetSourceFileFromTokenW (Ordinal: 112, Address: 0x461d0)
SymGetSourceFileToken (Ordinal: 113, Address: 0x45cd0)
SymGetSourceFileTokenW (Ordinal: 114, Address: 0x45d40)
SymGetSourceFileW (Ordinal: 115, Address: 0x45c40)
SymGetSourceVarFromToken (Ordinal: 116, Address: 0x46250)
SymGetSourceVarFromTokenW (Ordinal: 117, Address: 0x46340)
SymGetSymFromAddr (Ordinal: 118, Address: 0x45310)
SymGetSymFromAddr64 (Ordinal: 119, Address: 0x45310)
SymGetSymFromName (Ordinal: 120, Address: 0x455f0)
SymGetSymFromName64 (Ordinal: 121, Address: 0x455f0)
SymGetSymNext (Ordinal: 122, Address: 0x458f0)
SymGetSymNext64 (Ordinal: 123, Address: 0x458f0)
SymGetSymPrev (Ordinal: 124, Address: 0x45920)
SymGetSymPrev64 (Ordinal: 125, Address: 0x45920)
SymGetSymbolFile (Ordinal: 126, Address: 0x604c0)
SymGetSymbolFileW (Ordinal: 127, Address: 0x5fe80)
SymGetTypeFromName (Ordinal: 128, Address: 0x4af40)
SymGetTypeFromNameW (Ordinal: 129, Address: 0x4b020)
SymGetTypeInfo (Ordinal: 130, Address: 0x4baf0)
SymGetTypeInfoEx (Ordinal: 131, Address: 0x4bb70)
SymGetUnwindInfo (Ordinal: 132, Address: 0x47d40)
SymInitialize (Ordinal: 133, Address: 0x43b30)
SymInitializeW (Ordinal: 134, Address: 0x437a0)
SymLoadModule (Ordinal: 135, Address: 0x48780)
SymLoadModule64 (Ordinal: 136, Address: 0x48780)
SymLoadModuleEx (Ordinal: 137, Address: 0x48630)
SymLoadModuleExW (Ordinal: 138, Address: 0x48700)
SymMatchFileName (Ordinal: 139, Address: 0x47770)
SymMatchFileNameW (Ordinal: 140, Address: 0x47900)
SymMatchString (Ordinal: 141, Address: 0x4b240)
SymMatchStringA (Ordinal: 142, Address: 0x4b2b0)
SymMatchStringW (Ordinal: 143, Address: 0x4b2f0)
SymNext (Ordinal: 144, Address: 0x45670)
SymNextW (Ordinal: 145, Address: 0x45720)
SymPrev (Ordinal: 146, Address: 0x45750)
SymPrevW (Ordinal: 147, Address: 0x45800)
SymRefreshModuleList (Ordinal: 148, Address: 0x43720)
SymRegisterCallback (Ordinal: 149, Address: 0x49070)
SymRegisterCallback64 (Ordinal: 150, Address: 0x49070)
SymRegisterCallbackW64 (Ordinal: 151, Address: 0x49120)
SymRegisterFunctionEntryCallback (Ordinal: 152, Address: 0x47a80)
SymRegisterFunctionEntryCallback64 (Ordinal: 153, Address: 0x47a80)
SymSearch (Ordinal: 154, Address: 0x4a1b0)
SymSearchW (Ordinal: 155, Address: 0x4a280)
SymSetContext (Ordinal: 156, Address: 0x44920)
SymSetHomeDirectory (Ordinal: 157, Address: 0x44480)
SymSetHomeDirectoryW (Ordinal: 158, Address: 0x443b0)
SymSetOptions (Ordinal: 159, Address: 0x446c0)
SymSetParentWindow (Ordinal: 160, Address: 0x43d80)
SymSetScopeFromAddr (Ordinal: 161, Address: 0x449d0)
SymSetScopeFromIndex (Ordinal: 162, Address: 0x44aa0)
SymSetSearchPath (Ordinal: 163, Address: 0x48970)
SymSetSearchPathW (Ordinal: 164, Address: 0x48a90)
SymSrvDeltaName (Ordinal: 165, Address: 0x5ede0)
SymSrvDeltaNameW (Ordinal: 166, Address: 0x5eb40)
SymSrvGetFileIndexInfo (Ordinal: 167, Address: 0x60790)
SymSrvGetFileIndexInfoW (Ordinal: 168, Address: 0x60880)
SymSrvGetFileIndexString (Ordinal: 169, Address: 0x5f670)
SymSrvGetFileIndexStringW (Ordinal: 170, Address: 0x5f550)
SymSrvGetFileIndexes (Ordinal: 171, Address: 0x5f4e0)
SymSrvGetFileIndexesW (Ordinal: 172, Address: 0x5f3f0)
SymSrvGetSupplement (Ordinal: 173, Address: 0x5f0a0)
SymSrvGetSupplementW (Ordinal: 174, Address: 0x5eed0)
SymSrvIsStore (Ordinal: 175, Address: 0x5eaf0)
SymSrvIsStoreW (Ordinal: 176, Address: 0x5e9e0)
SymSrvStoreFile (Ordinal: 177, Address: 0x5f890)
SymSrvStoreFileW (Ordinal: 178, Address: 0x5f760)
SymSrvStoreSupplement (Ordinal: 179, Address: 0x5f310)
SymSrvStoreSupplementW (Ordinal: 180, Address: 0x5f170)
SymUnDName (Ordinal: 181, Address: 0x487e0)
SymUnDName64 (Ordinal: 182, Address: 0x487e0)
SymUnloadModule (Ordinal: 183, Address: 0x484e0)
SymUnloadModule64 (Ordinal: 184, Address: 0x484e0)
UnDecorateSymbolName (Ordinal: 185, Address: 0x4bc10)
UnDecorateSymbolNameW (Ordinal: 186, Address: 0x4bcd0)
WinDbgExtensionDllInit (Ordinal: 187, Address: 0x31f40)
block (Ordinal: 188, Address: 0x34a10)
chksym (Ordinal: 189, Address: 0x34800)
dbghelp (Ordinal: 190, Address: 0x44be0)
dh (Ordinal: 191, Address: 0x36af0)
fptr (Ordinal: 192, Address: 0x321e0)
homedir (Ordinal: 193, Address: 0x34ec0)
itoldyouso (Ordinal: 194, Address: 0x345f0)
lmi (Ordinal: 195, Address: 0x331a0)
lminfo (Ordinal: 196, Address: 0x32d20)
omap (Ordinal: 197, Address: 0x34c00)
srcfiles (Ordinal: 198, Address: 0x350e0)
stack_force_ebp (Ordinal: 199, Address: 0x32830)
stackdbg (Ordinal: 200, Address: 0x32300)
sym (Ordinal: 201, Address: 0x32a10)
symsrv (Ordinal: 202, Address: 0x32ba0)
vc7fpo (Ordinal: 203, Address: 0x32280)

Imported DLLs & Functions

KERNEL32.dll

__chkstk (Address: 0x3001058)
CloseHandle (Address: 0x3001270)
CopyFileW (Address: 0x3001308)
CreateDirectoryA (Address: 0x30011e8)
CreateDirectoryW (Address: 0x3001018)
CreateFileA (Address: 0x3001258)
CreateFileMappingA (Address: 0x30011b8)
CreateFileMappingW (Address: 0x3001060)
CreateFileW (Address: 0x3001008)
DelayLoadFailureHook (Address: 0x3001088)
DeleteCriticalSection (Address: 0x30012d8)
DeleteFileW (Address: 0x3001010)
DeviceIoControl (Address: 0x3001048)
DuplicateHandle (Address: 0x30011d0)
EnterCriticalSection (Address: 0x3001248)
ExpandEnvironmentStringsW (Address: 0x3001210)
FindClose (Address: 0x3001230)
FindFirstFileW (Address: 0x3001228)
FindNextFileW (Address: 0x3001238)
FlushViewOfFile (Address: 0x3001020)
FormatMessageW (Address: 0x3001080)
FreeLibrary (Address: 0x30012a0)
GetCurrentDirectoryW (Address: 0x3001030)
GetCurrentProcess (Address: 0x30011c8)
GetCurrentProcessId (Address: 0x30011a0)
GetCurrentThreadId (Address: 0x3001108)
GetEnvironmentVariableW (Address: 0x3001300)
GetFileAttributesA (Address: 0x3001160)
GetFileAttributesW (Address: 0x30011f0)
GetFileSize (Address: 0x3001260)
GetFileType (Address: 0x3001040)
GetFullPathNameW (Address: 0x30011f8)
GetLastError (Address: 0x3001278)
GetModuleFileNameW (Address: 0x3001218)
GetModuleHandleA (Address: 0x30011a8)
GetPriorityClass (Address: 0x30010e8)
GetProcAddress (Address: 0x3001298)
GetProcessHeap (Address: 0x3001148)
GetSystemDirectoryW (Address: 0x3001158)
GetSystemInfo (Address: 0x3001118)
GetSystemTimeAsFileTime (Address: 0x3001120)
GetThreadContext (Address: 0x30010f0)
GetThreadPriority (Address: 0x30010e0)
GetThreadTimes (Address: 0x30010d8)
GetTickCount (Address: 0x30010a8)
GetVersion (Address: 0x3001078)
GetVersionExA (Address: 0x30012b8)
GetVersionExW (Address: 0x3001170)
HeapAlloc (Address: 0x30012e8)
HeapCreate (Address: 0x30012c8)
HeapDestroy (Address: 0x30012d0)
HeapFree (Address: 0x30012f0)
HeapReAlloc (Address: 0x30012e0)
InitializeCriticalSection (Address: 0x30012c0)
InitializeCriticalSectionAndSpinCount (Address: 0x3001038)
IsDBCSLeadByte (Address: 0x30012f8)
IsProcessorFeaturePresent (Address: 0x3001110)
LCMapStringW (Address: 0x3001068)
LeaveCriticalSection (Address: 0x3001250)
LoadLibraryA (Address: 0x3001290)
LoadLibraryExA (Address: 0x3001138)
LoadLibraryW (Address: 0x3001150)
LocalAlloc (Address: 0x3001240)
LocalFree (Address: 0x3001070)
lstrcmpiW (Address: 0x3001128)
MapViewOfFile (Address: 0x30011b0)
MapViewOfFileEx (Address: 0x3001028)
MoveFileW (Address: 0x3001000)
MultiByteToWideChar (Address: 0x3001208)
OpenProcess (Address: 0x3001198)
OutputDebugStringA (Address: 0x3001180)
OutputDebugStringW (Address: 0x3001178)
QueryPerformanceCounter (Address: 0x30010b0)
ReadFile (Address: 0x3001268)
ReadProcessMemory (Address: 0x3001140)
ResumeThread (Address: 0x30010f8)
RtlCaptureContext (Address: 0x30010b8)
RtlLookupFunctionEntry (Address: 0x30010c0)
RtlVirtualUnwind (Address: 0x30010c8)
SetErrorMode (Address: 0x3001168)
SetFileAttributesW (Address: 0x3001050)
SetFilePointer (Address: 0x3001310)
SetLastError (Address: 0x3001220)
SetUnhandledExceptionFilter (Address: 0x3001090)
Sleep (Address: 0x3001130)
SuspendThread (Address: 0x3001100)
TerminateProcess (Address: 0x30010a0)
TlsAlloc (Address: 0x30012a8)
TlsFree (Address: 0x30012b0)
TlsGetValue (Address: 0x3001280)
TlsSetValue (Address: 0x3001288)
UnhandledExceptionFilter (Address: 0x3001098)
UnmapViewOfFile (Address: 0x30011c0)
VirtualAlloc (Address: 0x30011e0)
VirtualFree (Address: 0x3001190)
VirtualProtect (Address: 0x30011d8)
VirtualQueryEx (Address: 0x30010d0)
WideCharToMultiByte (Address: 0x3001200)
WriteFile (Address: 0x3001188)

msvcrt.dll

__badioinfo (Address: 0x3001350)
__C_specific_handler (Address: 0x30013d8)
__CxxFrameHandler (Address: 0x3001408)
__dllonexit (Address: 0x30013a8)
__mb_cur_max (Address: 0x3001388)
__pioinfo (Address: 0x3001348)
__unDName (Address: 0x3001500)
_amsg_exit (Address: 0x30013e0)
_chsize (Address: 0x3001568)
_close (Address: 0x3001570)
_CxxThrowException (Address: 0x30013b8)
_errno (Address: 0x3001400)
_fileno (Address: 0x3001338)
_get_osfhandle (Address: 0x3001560)
_initterm (Address: 0x30013e8)
_iob (Address: 0x3001378)
_isatty (Address: 0x3001320)
_ismbblead (Address: 0x30013d0)
_itoa (Address: 0x3001420)
_lock (Address: 0x30013a0)
_lseeki64 (Address: 0x3001330)
_ltoa (Address: 0x3001460)
_mbscmp (Address: 0x3001590)
_memicmp (Address: 0x3001588)
_onexit (Address: 0x3001398)
_open_osfhandle (Address: 0x3001578)
_purecall (Address: 0x3001470)
_read (Address: 0x3001340)
_snprintf (Address: 0x3001370)
_stricmp (Address: 0x3001498)
_strlwr (Address: 0x30014a8)
_time64 (Address: 0x3001550)
_unlock (Address: 0x30013b0)
_vsnwprintf (Address: 0x30014e0)
_wcsdup (Address: 0x3001428)
_wcsicmp (Address: 0x30014c0)
_wcslwr (Address: 0x3001440)
_wcsnicmp (Address: 0x3001468)
_wctime (Address: 0x3001448)
_wfsopen (Address: 0x3001520)
_wfullpath (Address: 0x3001558)
_wgetenv (Address: 0x3001598)
_write (Address: 0x3001328)
_wsopen (Address: 0x30015c0)
_XcptFilter (Address: 0x30013f0)
??_U@YAPEAX_K@Z (Address: 0x3001548)
??_V@YAXPEAX@Z (Address: 0x3001458)
??1type_info@@UEAA@XZ (Address: 0x3001358)
??2@YAPEAX_K@Z (Address: 0x30015b8)
??3@YAXPEAX@Z (Address: 0x30015b0)
atol (Address: 0x30014f0)
bsearch (Address: 0x3001518)
calloc (Address: 0x3001418)
ctime (Address: 0x3001478)
fclose (Address: 0x30014f8)
ferror (Address: 0x3001360)
fread (Address: 0x3001528)
free (Address: 0x30014a0)
fseek (Address: 0x3001530)
ftell (Address: 0x3001580)
isleadbyte (Address: 0x3001380)
isspace (Address: 0x3001490)
iswdigit (Address: 0x3001508)
iswprint (Address: 0x30014e8)
iswspace (Address: 0x3001410)
iswxdigit (Address: 0x30014d0)
malloc (Address: 0x3001480)
mbtowc (Address: 0x3001390)
memcmp (Address: 0x3001510)
memcpy (Address: 0x30013c8)
memmove (Address: 0x30013f8)
memset (Address: 0x30013c0)
qsort (Address: 0x30014c8)
strchr (Address: 0x3001540)
strncmp (Address: 0x3001488)
strstr (Address: 0x30014b8)
time (Address: 0x3001450)
tolower (Address: 0x3001438)
towlower (Address: 0x3001430)
wcschr (Address: 0x30015a8)
wcsncmp (Address: 0x30014d8)
wcsrchr (Address: 0x30014b0)
wcsstr (Address: 0x30015a0)
wcstol (Address: 0x3001538)
wctomb (Address: 0x3001368)