dbghelp.dll
v6.11.1.404
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 203
SymGetOmapBlockBase
#1 · 0x49e20
DbgHelpCreateUserDump
#2 · 0x60da0
DbgHelpCreateUserDumpW
#3 · 0x60ec0
EnumDirTree
#4 · 0x4fb20
EnumDirTreeW
#5 · 0x4fc60
EnumerateLoadedModules
#6 · 0x48df0
EnumerateLoadedModules64
#7 · 0x48df0
EnumerateLoadedModulesEx
#8 · 0x48f30
EnumerateLoadedModulesExW
#9 · 0x48fd0
EnumerateLoadedModulesW64
#10 · 0x48e90
ExtensionApiVersion
#11 · 0x31f30
FindDebugInfoFile
#12 · 0x4e0a0
FindDebugInfoFileEx
#13 · 0x4f260
FindDebugInfoFileExW
#14 · 0x4f1f0
FindExecutableImage
#15 · 0x4ce00
FindExecutableImageEx
#16 · 0x4dcc0
FindExecutableImageExW
#17 · 0x4de40
FindFileInPath
#18 · 0x4cc60
FindFileInSearchPath
#19 · 0x4cce0
GetTimestampForLoadedLibrary
#20 · 0x3b100
ImageDirectoryEntryToData
#21 · 0x3ab30
ImageDirectoryEntryToDataEx
#22 · 0x3a970
ImageNtHeader
#23 · 0x3a4f0
ImageRvaToSection
#24 · 0x3ab80
ImageRvaToVa
#25 · 0x3ac30
ImagehlpApiVersion
#26 · 0x500e0
ImagehlpApiVersionEx
#27 · 0x500f0
MakeSureDirectoryPathExists
#28 · 0x4fe50
MiniDumpReadDumpStream
#29 · 0x74000
MiniDumpWriteDump
#30 · 0x73c40
SearchTreeForFile
#31 · 0x4fce0
SearchTreeForFileW
#32 · 0x4fd30
StackWalk
#33 · 0x6b210
StackWalk64
#34 · 0x6b210
SymAddSourceStream
#35 · 0x460c0
SymAddSourceStreamA
#36 · 0x46050
SymAddSourceStreamW
#37 · 0x45e20
SymAddSymbol
#38 · 0x49760
SymAddSymbolW
#39 · 0x49670
SymCleanup
#40 · 0x43d30
SymDeleteSymbol
#41 · 0x498d0
SymDeleteSymbolW
#42 · 0x497d0
SymEnumLines
#43 · 0x466c0
SymEnumLinesW
#44 · 0x467b0
SymEnumProcesses
#45 · 0x44c60
SymEnumSourceFileTokens
#46 · 0x463f0
SymEnumSourceFiles
#47 · 0x4b480
SymEnumSourceFilesW
#48 · 0x4b530
SymEnumSourceLines
#49 · 0x46850
SymEnumSourceLinesW
#50 · 0x46960
SymEnumSym
#51 · 0x4a9d0
SymEnumSymbols
#52 · 0x49ed0
SymEnumSymbolsForAddr
#53 · 0x4a770
SymEnumSymbolsForAddrW
#54 · 0x4a8a0
SymEnumSymbolsW
#55 · 0x49f80
SymEnumTypes
#56 · 0x4acc0
SymEnumTypesByName
#57 · 0x4adc0
SymEnumTypesByNameW
#58 · 0x4aec0
SymEnumTypesW
#59 · 0x4ad40
SymEnumerateModules
#60 · 0x44ea0
SymEnumerateModules64
#61 · 0x44ea0
SymEnumerateModulesW64
#62 · 0x44f10
SymEnumerateSymbols
#63 · 0x45120
SymEnumerateSymbols64
#64 · 0x45120
SymEnumerateSymbolsW
#65 · 0x451a0
SymEnumerateSymbolsW64
#66 · 0x451a0
SymFindDebugInfoFile
#67 · 0x4f370
SymFindDebugInfoFileW
#68 · 0x4f4a0
SymFindExecutableImage
#69 · 0x4deb0
SymFindExecutableImageW
#70 · 0x4e000
SymFindFileInPath
#71 · 0x4c9e0
SymFindFileInPathW
#72 · 0x4cbb0
SymFromAddr
#73 · 0x49940
SymFromAddrW
#74 · 0x499c0
SymFromIndex
#75 · 0x4a520
SymFromIndexW
#76 · 0x4a5d0
SymFromName
#77 · 0x49c00
SymFromNameW
#78 · 0x49ca0
SymFromToken
#79 · 0x49a40
SymFromTokenW
#80 · 0x49b10
SymFunctionTableAccess
#81 · 0x47b20
SymFunctionTableAccess64
#82 · 0x47b20
SymGetFileLineOffsets64
#83 · 0x3cc40
SymGetHomeDirectory
#84 · 0x44620
SymGetHomeDirectoryW
#85 · 0x44530
SymGetLineFromAddr
#86 · 0x46a10
SymGetLineFromAddr64
#87 · 0x46a10
SymGetLineFromAddrW64
#88 · 0x46af0
SymGetLineFromName
#89 · 0x47340
SymGetLineFromName64
#90 · 0x47340
SymGetLineFromNameW64
#91 · 0x46c70
SymGetLineNext
#92 · 0x47630
SymGetLineNext64
#93 · 0x47630
SymGetLineNextW64
#94 · 0x476a0
SymGetLinePrev
#95 · 0x476d0
SymGetLinePrev64
#96 · 0x476d0
SymGetLinePrevW64
#97 · 0x47740
SymGetModuleBase
#98 · 0x48450
SymGetModuleBase64
#99 · 0x48450
SymGetModuleInfo
#100 · 0x47f80
SymGetModuleInfo64
#101 · 0x47f80
SymGetModuleInfoW
#102 · 0x48020
SymGetModuleInfoW64
#103 · 0x48020
SymGetOmaps
#104 · 0x49d00
SymGetOptions
#105 · 0x44910
SymGetScope
#106 · 0x4a330
SymGetScopeW
#107 · 0x4a3e0
SymGetSearchPath
#108 · 0x48870
SymGetSearchPathW
#109 · 0x488f0
SymGetSourceFile
#110 · 0x45bb0
SymGetSourceFileFromToken
#111 · 0x46110
SymGetSourceFileFromTokenW
#112 · 0x461d0
SymGetSourceFileToken
#113 · 0x45cd0
SymGetSourceFileTokenW
#114 · 0x45d40
SymGetSourceFileW
#115 · 0x45c40
SymGetSourceVarFromToken
#116 · 0x46250
SymGetSourceVarFromTokenW
#117 · 0x46340
SymGetSymFromAddr
#118 · 0x45310
SymGetSymFromAddr64
#119 · 0x45310
SymGetSymFromName
#120 · 0x455f0
SymGetSymFromName64
#121 · 0x455f0
SymGetSymNext
#122 · 0x458f0
SymGetSymNext64
#123 · 0x458f0
SymGetSymPrev
#124 · 0x45920
SymGetSymPrev64
#125 · 0x45920
SymGetSymbolFile
#126 · 0x604c0
SymGetSymbolFileW
#127 · 0x5fe80
SymGetTypeFromName
#128 · 0x4af40
SymGetTypeFromNameW
#129 · 0x4b020
SymGetTypeInfo
#130 · 0x4baf0
SymGetTypeInfoEx
#131 · 0x4bb70
SymGetUnwindInfo
#132 · 0x47d40
SymInitialize
#133 · 0x43b30
SymInitializeW
#134 · 0x437a0
SymLoadModule
#135 · 0x48780
SymLoadModule64
#136 · 0x48780
SymLoadModuleEx
#137 · 0x48630
SymLoadModuleExW
#138 · 0x48700
SymMatchFileName
#139 · 0x47770
SymMatchFileNameW
#140 · 0x47900
SymMatchString
#141 · 0x4b240
SymMatchStringA
#142 · 0x4b2b0
SymMatchStringW
#143 · 0x4b2f0
SymNext
#144 · 0x45670
SymNextW
#145 · 0x45720
SymPrev
#146 · 0x45750
SymPrevW
#147 · 0x45800
SymRefreshModuleList
#148 · 0x43720
SymRegisterCallback
#149 · 0x49070
SymRegisterCallback64
#150 · 0x49070
SymRegisterCallbackW64
#151 · 0x49120
SymRegisterFunctionEntryCallback
#152 · 0x47a80
SymRegisterFunctionEntryCallback64
#153 · 0x47a80
SymSearch
#154 · 0x4a1b0
SymSearchW
#155 · 0x4a280
SymSetContext
#156 · 0x44920
SymSetHomeDirectory
#157 · 0x44480
SymSetHomeDirectoryW
#158 · 0x443b0
SymSetOptions
#159 · 0x446c0
SymSetParentWindow
#160 · 0x43d80
SymSetScopeFromAddr
#161 · 0x449d0
SymSetScopeFromIndex
#162 · 0x44aa0
SymSetSearchPath
#163 · 0x48970
SymSetSearchPathW
#164 · 0x48a90
SymSrvDeltaName
#165 · 0x5ede0
SymSrvDeltaNameW
#166 · 0x5eb40
SymSrvGetFileIndexInfo
#167 · 0x60790
SymSrvGetFileIndexInfoW
#168 · 0x60880
SymSrvGetFileIndexString
#169 · 0x5f670
SymSrvGetFileIndexStringW
#170 · 0x5f550
SymSrvGetFileIndexes
#171 · 0x5f4e0
SymSrvGetFileIndexesW
#172 · 0x5f3f0
SymSrvGetSupplement
#173 · 0x5f0a0
SymSrvGetSupplementW
#174 · 0x5eed0
SymSrvIsStore
#175 · 0x5eaf0
SymSrvIsStoreW
#176 · 0x5e9e0
SymSrvStoreFile
#177 · 0x5f890
SymSrvStoreFileW
#178 · 0x5f760
SymSrvStoreSupplement
#179 · 0x5f310
SymSrvStoreSupplementW
#180 · 0x5f170
SymUnDName
#181 · 0x487e0
SymUnDName64
#182 · 0x487e0
SymUnloadModule
#183 · 0x484e0
SymUnloadModule64
#184 · 0x484e0
UnDecorateSymbolName
#185 · 0x4bc10
UnDecorateSymbolNameW
#186 · 0x4bcd0
WinDbgExtensionDllInit
#187 · 0x31f40
block
#188 · 0x34a10
chksym
#189 · 0x34800
dbghelp
#190 · 0x44be0
dh
#191 · 0x36af0
fptr
#192 · 0x321e0
homedir
#193 · 0x34ec0
itoldyouso
#194 · 0x345f0
lmi
#195 · 0x331a0
lminfo
#196 · 0x32d20
omap
#197 · 0x34c00
srcfiles
#198 · 0x350e0
stack_force_ebp
#199 · 0x32830
stackdbg
#200 · 0x32300
sym
#201 · 0x32a10
symsrv
#202 · 0x32ba0
vc7fpo
#203 · 0x32280
No function matches your filter.
Imported DLLs & functions 184
KERNEL32.dll
99
__chkstk
0x3001058
CloseHandle
0x3001270
CopyFileW
0x3001308
CreateDirectoryA
0x30011e8
CreateDirectoryW
0x3001018
CreateFileA
0x3001258
CreateFileMappingA
0x30011b8
CreateFileMappingW
0x3001060
CreateFileW
0x3001008
DelayLoadFailureHook
0x3001088
DeleteCriticalSection
0x30012d8
DeleteFileW
0x3001010
DeviceIoControl
0x3001048
DuplicateHandle
0x30011d0
EnterCriticalSection
0x3001248
ExpandEnvironmentStringsW
0x3001210
FindClose
0x3001230
FindFirstFileW
0x3001228
FindNextFileW
0x3001238
FlushViewOfFile
0x3001020
FormatMessageW
0x3001080
FreeLibrary
0x30012a0
GetCurrentDirectoryW
0x3001030
GetCurrentProcess
0x30011c8
GetCurrentProcessId
0x30011a0
GetCurrentThreadId
0x3001108
GetEnvironmentVariableW
0x3001300
GetFileAttributesA
0x3001160
GetFileAttributesW
0x30011f0
GetFileSize
0x3001260
GetFileType
0x3001040
GetFullPathNameW
0x30011f8
GetLastError
0x3001278
GetModuleFileNameW
0x3001218
GetModuleHandleA
0x30011a8
GetPriorityClass
0x30010e8
GetProcAddress
0x3001298
GetProcessHeap
0x3001148
GetSystemDirectoryW
0x3001158
GetSystemInfo
0x3001118
GetSystemTimeAsFileTime
0x3001120
GetThreadContext
0x30010f0
GetThreadPriority
0x30010e0
GetThreadTimes
0x30010d8
GetTickCount
0x30010a8
GetVersion
0x3001078
GetVersionExA
0x30012b8
GetVersionExW
0x3001170
HeapAlloc
0x30012e8
HeapCreate
0x30012c8
HeapDestroy
0x30012d0
HeapFree
0x30012f0
HeapReAlloc
0x30012e0
InitializeCriticalSection
0x30012c0
InitializeCriticalSectionAndSpinCount
0x3001038
IsDBCSLeadByte
0x30012f8
IsProcessorFeaturePresent
0x3001110
LCMapStringW
0x3001068
LeaveCriticalSection
0x3001250
LoadLibraryA
0x3001290
LoadLibraryExA
0x3001138
LoadLibraryW
0x3001150
LocalAlloc
0x3001240
LocalFree
0x3001070
lstrcmpiW
0x3001128
MapViewOfFile
0x30011b0
MapViewOfFileEx
0x3001028
MoveFileW
0x3001000
MultiByteToWideChar
0x3001208
OpenProcess
0x3001198
OutputDebugStringA
0x3001180
OutputDebugStringW
0x3001178
QueryPerformanceCounter
0x30010b0
ReadFile
0x3001268
ReadProcessMemory
0x3001140
ResumeThread
0x30010f8
RtlCaptureContext
0x30010b8
RtlLookupFunctionEntry
0x30010c0
RtlVirtualUnwind
0x30010c8
SetErrorMode
0x3001168
SetFileAttributesW
0x3001050
SetFilePointer
0x3001310
SetLastError
0x3001220
SetUnhandledExceptionFilter
0x3001090
Sleep
0x3001130
SuspendThread
0x3001100
TerminateProcess
0x30010a0
TlsAlloc
0x30012a8
TlsFree
0x30012b0
TlsGetValue
0x3001280
TlsSetValue
0x3001288
UnhandledExceptionFilter
0x3001098
UnmapViewOfFile
0x30011c0
VirtualAlloc
0x30011e0
VirtualFree
0x3001190
VirtualProtect
0x30011d8
VirtualQueryEx
0x30010d0
WideCharToMultiByte
0x3001200
WriteFile
0x3001188
msvcrt.dll
85
__badioinfo
0x3001350
__C_specific_handler
0x30013d8
__CxxFrameHandler
0x3001408
__dllonexit
0x30013a8
__mb_cur_max
0x3001388
__pioinfo
0x3001348
__unDName
0x3001500
_amsg_exit
0x30013e0
_chsize
0x3001568
_close
0x3001570
_CxxThrowException
0x30013b8
_errno
0x3001400
_fileno
0x3001338
_get_osfhandle
0x3001560
_initterm
0x30013e8
_iob
0x3001378
_isatty
0x3001320
_ismbblead
0x30013d0
_itoa
0x3001420
_lock
0x30013a0
_lseeki64
0x3001330
_ltoa
0x3001460
_mbscmp
0x3001590
_memicmp
0x3001588
_onexit
0x3001398
_open_osfhandle
0x3001578
_purecall
0x3001470
_read
0x3001340
_snprintf
0x3001370
_stricmp
0x3001498
_strlwr
0x30014a8
_time64
0x3001550
_unlock
0x30013b0
_vsnwprintf
0x30014e0
_wcsdup
0x3001428
_wcsicmp
0x30014c0
_wcslwr
0x3001440
_wcsnicmp
0x3001468
_wctime
0x3001448
_wfsopen
0x3001520
_wfullpath
0x3001558
_wgetenv
0x3001598
_write
0x3001328
_wsopen
0x30015c0
_XcptFilter
0x30013f0
??_U@YAPEAX_K@Z
0x3001548
??_V@YAXPEAX@Z
0x3001458
??1type_info@@UEAA@XZ
0x3001358
??2@YAPEAX_K@Z
0x30015b8
??3@YAXPEAX@Z
0x30015b0
atol
0x30014f0
bsearch
0x3001518
calloc
0x3001418
ctime
0x3001478
fclose
0x30014f8
ferror
0x3001360
fread
0x3001528
free
0x30014a0
fseek
0x3001530
ftell
0x3001580
isleadbyte
0x3001380
isspace
0x3001490
iswdigit
0x3001508
iswprint
0x30014e8
iswspace
0x3001410
iswxdigit
0x30014d0
malloc
0x3001480
mbtowc
0x3001390
memcmp
0x3001510
memcpy
0x30013c8
memmove
0x30013f8
memset
0x30013c0
qsort
0x30014c8
strchr
0x3001540
strncmp
0x3001488
strstr
0x30014b8
time
0x3001450
tolower
0x3001438
towlower
0x3001430
wcschr
0x30015a8
wcsncmp
0x30014d8
wcsrchr
0x30014b0
wcsstr
0x30015a0
wcstol
0x3001538
wctomb
0x3001368
No function matches your filter.