dbghelp.dll - Online Dependency Analysis & Download

Description

Windows Image Helper

Authors

File size

1.8 MB

Uploaded

2026-09-16 07:55

Views

SHA-256

fe017bc90a553810f7d48caa3c44591d

Security warning

This file has been flagged as potentially dangerous, and downloads are disabled.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported functions 257

#1101 · 0x11fba0

#1102 · 0x11fc90

#1103 · 0x11fe20

#1104 · 0x1201a0

#1105 · 0x120880

#1106 · 0x120910

#1107 · 0x11fde0

#1108 · 0x1200d0

#1109 · 0x120800

#1110 · 0x1208a0

SymAllocDiaString #1111 · 0x11fa60

SymFreeDiaString #1112 · 0x11fd20

SymGetDiaSession #1113 · 0x11fd30

SymGetLineFromAddrEx #1114 · 0x11fde0

#1115 · 0x11fe60

#1116 · 0x11ff30

#1117 · 0x11fa80

#1118 · 0x11fb30

#1119 · 0xf82b0

SymGetLineFromNameEx #1120 · 0x1200d0

SymGetLineNextEx #1121 · 0x120800

SymGetLinePrevEx #1122 · 0x1208a0

SymGetOmapBlockBase #1123 · 0x120930

SymSetDiaSession #1124 · 0x1209b0

_EFN_DumpImage #1125 · 0x112070

DbgHelpCreateUserDump #1126 · 0x12eb10

DbgHelpCreateUserDumpW #1127 · 0x12ec10

EnumDirTree #1128 · 0x127ce0

EnumDirTreeW #1129 · 0x127e10

EnumerateLoadedModules #1130 · 0x1214a0

EnumerateLoadedModules64 #1131 · 0x1214a0

EnumerateLoadedModulesEx #1132 · 0x121500

EnumerateLoadedModulesExW #1133 · 0x121560

EnumerateLoadedModulesW64 #1134 · 0x1215c0

ExtensionApiVersion #1135 · 0x116420

FindDebugInfoFile #1136 · 0x127e60

FindDebugInfoFileEx #1137 · 0x127e80

FindDebugInfoFileExW #1138 · 0x127f50

FindExecutableImage #1139 · 0x127fa0

FindExecutableImageEx #1140 · 0x127fc0

FindExecutableImageExW #1141 · 0x1280c0

FindFileInPath #1142 · 0x128110

FindFileInSearchPath #1143 · 0x128160

GetSymLoadError #1144 · 0x121620

GetTimestampForLoadedLibrary #1145 · 0x1186e0

ImageDirectoryEntryToData #1146 · 0x118360

ImageDirectoryEntryToDataEx #1147 · 0x118380

ImageNtHeader #1148 · 0x1184b0

ImageRvaToSection #1149 · 0x1184f0

ImageRvaToVa #1150 · 0x118560

ImagehlpApiVersion #1151 · 0x1281b0

ImagehlpApiVersionEx #1152 · 0x1281c0

MakeSureDirectoryPathExists #1153 · 0x128200

MiniDumpReadDumpStream #1154 · 0x19f6ca

MiniDumpWriteDump #1155 · 0x19f6fb

RangeMapAddPeImageSections #1156 · 0x1404d0

RangeMapCreate #1157 · 0x140590

RangeMapFree #1158 · 0x1405f0

RangeMapRead #1159 · 0x140610

RangeMapRemove #1160 · 0x140670

RangeMapWrite #1161 · 0x1406c0

RemoveInvalidModuleList #1162 · 0x18ef0

ReportSymbolLoadSummary #1163 · 0x111910

SearchTreeForFile #1164 · 0x128390

SearchTreeForFileW #1165 · 0x1283c0

SetCheckUserInterruptShared #1166 · 0x18ef0

SetSymLoadError #1167 · 0x121630

StackWalk #1168 · 0xdbf0

StackWalk64 #1169 · 0xdbf0

StackWalkEx #1170 · 0xdd70

SymAddSourceStream #1171 · 0x121640

SymAddSourceStreamA #1172 · 0x121650

SymAddSourceStreamW #1173 · 0x1216c0

SymAddSymbol #1174 · 0x121860

SymAddSymbolW #1175 · 0x1218e0

SymAddrIncludeInlineTrace #1176 · 0x1219f0

SymCleanup #1177 · 0xdba0

SymCompareInlineTrace #1178 · 0x121b70

SymDeleteSymbol #1179 · 0x1220c0

SymDeleteSymbolW #1180 · 0x122130

SymEnumLines #1181 · 0x122220

SymEnumLinesW #1182 · 0x1222f0

SymEnumProcesses #1183 · 0x122360

SymEnumSourceFileTokens #1184 · 0x122400

SymEnumSourceFiles #1185 · 0x1224b0

SymEnumSourceFilesW #1186 · 0x1224e0

SymEnumSourceLines #1187 · 0x122510

SymEnumSourceLinesW #1188 · 0x122560

SymEnumSym #1189 · 0x1225b0

SymEnumSymbols #1190 · 0x1225e0

SymEnumSymbolsEx #1191 · 0x122610

SymEnumSymbolsExW #1192 · 0x1226b0

SymEnumSymbolsForAddr #1193 · 0x122720

SymEnumSymbolsForAddrW #1194 · 0x122850

SymEnumSymbolsW #1195 · 0x122990

SymEnumTypes #1196 · 0x1229c0

SymEnumTypesByName #1197 · 0x122a10

SymEnumTypesByNameW #1198 · 0x122ae0

SymEnumTypesW #1199 · 0x122b40

SymEnumerateModules #1200 · 0x122b90

SymEnumerateModules64 #1201 · 0x122b90

SymEnumerateModulesW64 #1202 · 0x122bd0

SymEnumerateSymbols #1203 · 0x122c10

SymEnumerateSymbols64 #1204 · 0x122c10

SymEnumerateSymbolsW #1205 · 0x122c60

SymEnumerateSymbolsW64 #1206 · 0x122c60

SymFindDebugInfoFile #1207 · 0x1283f0

SymFindDebugInfoFileW #1208 · 0x1284e0

SymFindExecutableImage #1209 · 0x128570

SymFindExecutableImageW #1210 · 0x128670

SymFindFileInPath #1211 · 0x128700

SymFindFileInPathW #1212 · 0x128840

SymFromAddr #1213 · 0x122cb0

SymFromAddrW #1214 · 0x122ce0

SymFromIndex #1215 · 0x122d10

SymFromIndexW #1216 · 0x122d80

SymFromInlineContext #1217 · 0x122e80

SymFromInlineContextW #1218 · 0x122ee0

SymFromName #1219 · 0x19330

SymFromNameW #1220 · 0x122f40

SymFromToken #1221 · 0x122f70

SymFromTokenW #1222 · 0x123020

SymFunctionTableAccess #1223 · 0xe6e0

SymFunctionTableAccess64 #1224 · 0xe6e0

SymFunctionTableAccess64AccessRoutines #1225 · 0xe700

SymGetExtendedOption #1226 · 0x123130

SymGetFileLineOffsets64 #1227 · 0x11aa40

SymGetHomeDirectory #1228 · 0x123150

SymGetHomeDirectoryW #1229 · 0x1231d0

SymGetLineFromAddr #1230 · 0x123290

SymGetLineFromAddr64 #1231 · 0x123290

SymGetLineFromAddrW64 #1232 · 0x1232c0

SymGetLineFromInlineContext #1233 · 0x1232f0

SymGetLineFromInlineContextW #1234 · 0x123330

SymGetLineFromName #1235 · 0x123370

SymGetLineFromName64 #1236 · 0x123370

SymGetLineFromNameW64 #1237 · 0x1233a0

SymGetLineNext #1238 · 0x1233d0

SymGetLineNext64 #1239 · 0x1233d0

SymGetLineNextW64 #1240 · 0x1233e0

SymGetLinePrev #1241 · 0x123400

SymGetLinePrev64 #1242 · 0x123400

SymGetLinePrevW64 #1243 · 0x123410

SymGetModuleBase #1244 · 0xf480

SymGetModuleBase64 #1245 · 0xf480

SymGetModuleInfo #1246 · 0x123430

SymGetModuleInfo64 #1247 · 0x123430

SymGetModuleInfoW #1248 · 0x104e0

SymGetModuleInfoW64 #1249 · 0x104e0

SymGetOmaps #1250 · 0x1234c0

SymGetOptions #1251 · 0x18d40

SymGetScope #1252 · 0x1235b0

SymGetScopeW #1253 · 0x123630

SymGetSearchPath #1254 · 0x123760

SymGetSearchPathW #1255 · 0x1237f0

SymGetSourceFile #1256 · 0x123860

SymGetSourceFileChecksum #1257 · 0x1238e0

SymGetSourceFileChecksumW #1258 · 0x123970

SymGetSourceFileFromToken #1259 · 0x123aa0

SymGetSourceFileFromTokenW #1260 · 0x123b50

SymGetSourceFileToken #1261 · 0x123bd0

SymGetSourceFileTokenW #1262 · 0x123c40

SymGetSourceFileW #1263 · 0x123d10

SymGetSourceVarFromToken #1264 · 0x123d90

SymGetSourceVarFromTokenW #1265 · 0x123e60

SymGetSymFromAddr #1266 · 0x123f10

SymGetSymFromAddr64 #1267 · 0x123f10

SymGetSymFromName #1268 · 0x123f50

SymGetSymFromName64 #1269 · 0x123f50

SymGetSymNext #1270 · 0x123fc0

SymGetSymNext64 #1271 · 0x123fc0

SymGetSymPrev #1272 · 0x123fe0

SymGetSymPrev64 #1273 · 0x123fe0

SymGetSymbolFile #1274 · 0x12d480

SymGetSymbolFileW #1275 · 0x12d5b0

SymGetTypeFromName #1276 · 0x123ff0

SymGetTypeFromNameW #1277 · 0x1240a0

SymGetTypeInfo #1278 · 0x124210

SymGetTypeInfoEx #1279 · 0x124250

SymGetUnwindInfo #1280 · 0x124280

SymInitialize #1281 · 0x115e0

SymInitializeW #1282 · 0x177b0

SymLoadModule #1283 · 0x1a900

SymLoadModule64 #1284 · 0x1a900

SymLoadModuleEx #1285 · 0x1a940

SymLoadModuleExW #1286 · 0x124410

SymMatchFileName #1287 · 0x124470

SymMatchFileNameW #1288 · 0x124580

SymMatchString #1289 · 0x124670

SymMatchStringA #1290 · 0x1246b0

SymMatchStringW #1291 · 0x1246c0

SymNext #1292 · 0x124700

SymNextW #1293 · 0x1247a0

SymPrev #1294 · 0x1247c0

SymPrevW #1295 · 0x124860

SymQueryInlineTrace #1296 · 0x124870

SymRefreshModuleList #1297 · 0x124b80

SymRegisterCallback #1298 · 0x124c00

SymRegisterCallback64 #1299 · 0x124c00

SymRegisterCallbackW64 #1300 · 0x124c80

SymRegisterFunctionEntryCallback #1301 · 0x124d10

SymRegisterFunctionEntryCallback64 #1302 · 0x124d10

SymSearch #1303 · 0x124d90

SymSearchW #1304 · 0x124e50

SymSetContext #1305 · 0x124ed0

SymSetExtendedOption #1306 · 0x124f90

SymSetHomeDirectory #1307 · 0x124fc0

SymSetHomeDirectoryW #1308 · 0x125060

SymSetOptions #1309 · 0x17c40

SymSetParentWindow #1310 · 0x1250e0

SymSetScopeFromAddr #1311 · 0x125110

SymSetScopeFromIndex #1312 · 0x125120

SymSetScopeFromInlineContext #1313 · 0x1251e0

SymSetSearchPath #1314 · 0x1252a0

SymSetSearchPathW #1315 · 0x17450

SymSrvDeltaName #1316 · 0x12da60

SymSrvDeltaNameW #1317 · 0x12db30

SymSrvGetFileIndexInfo #1318 · 0x12dcd0

SymSrvGetFileIndexInfoW #1319 · 0x12ddb0

SymSrvGetFileIndexString #1320 · 0x12def0

SymSrvGetFileIndexStringW #1321 · 0x12dfb0

SymSrvGetFileIndexes #1322 · 0x12e080

SymSrvGetFileIndexesW #1323 · 0x12e0f0

SymSrvGetSupplement #1324 · 0x12e1b0

SymSrvGetSupplementW #1325 · 0x12e270

SymSrvIsStore #1326 · 0x12e390

SymSrvIsStoreW #1327 · 0x12e3e0

SymSrvStoreFile #1328 · 0x12e520

SymSrvStoreFileW #1329 · 0x12e5c0

SymSrvStoreSupplement #1330 · 0x12e680

SymSrvStoreSupplementW #1331 · 0x12e750

SymUnDName #1332 · 0x1252f0

SymUnDName64 #1333 · 0x1252f0

SymUnloadModule #1334 · 0x125350

SymUnloadModule64 #1335 · 0x125350

UnDecorateSymbolName #1336 · 0x8380

UnDecorateSymbolNameW #1337 · 0x125440

WinDbgExtensionDllInit #1338 · 0x116510

block #1339 · 0x116560

chksym #1340 · 0x116730

dbghelp #1341 · 0x125580

dh #1342 · 0x116920

fptr #1343 · 0x116930

homedir #1344 · 0x1169c0

inlinedbg #1345 · 0x116af0

itoldyouso #1346 · 0x116b60

lmi #1347 · 0x116d50

lminfo #1348 · 0x117070

omap #1349 · 0x117290

optdbgdump #1350 · 0x1174b0

optdbgdumpaddr #1351 · 0x117600

srcfiles #1352 · 0x117750

stack_force_ebp #1353 · 0x117880

stackdbg #1354 · 0x1179f0

sym #1355 · 0x117bc0

symsrv #1356 · 0x117d10

vc7fpo #1357 · 0x117d60

Imported DLLs & functions 242

api-ms-win-core-debug-l1-1-0.dll 4

DebugBreak 0x103169590

IsDebuggerPresent 0x103169598

OutputDebugStringA 0x103169580

OutputDebugStringW 0x103169588

api-ms-win-core-delayload-l1-1-0.dll 1

DelayLoadFailureHook 0x1031695a8

api-ms-win-core-errorhandling-l1-1-0.dll 5

GetLastError 0x1031695c0

SetErrorMode 0x1031695d8

SetLastError 0x1031695b8

SetUnhandledExceptionFilter 0x1031695c8

UnhandledExceptionFilter 0x1031695d0

api-ms-win-core-file-l1-1-0.dll 22

CreateDirectoryA 0x103169690

CreateDirectoryW 0x103169650

CreateFileA 0x103169658

CreateFileW 0x103169670

DeleteFileW 0x103169638

FindClose 0x103169628

FindFirstFileW 0x103169660

FindNextFileW 0x1031695e8

GetFileAttributesA 0x103169618

GetFileAttributesW 0x103169668

GetFileSize 0x103169680

GetFileSizeEx 0x103169678

GetFileType 0x103169608

GetFullPathNameW 0x103169640

ReadFile 0x103169648

RemoveDirectoryW 0x103169688

SetEndOfFile 0x103169610

SetFileAttributesW 0x1031695f8

SetFilePointer 0x103169620

SetFilePointerEx 0x103169630

SetFileTime 0x103169600

WriteFile 0x1031695f0

api-ms-win-core-handle-l1-1-0.dll 2

CloseHandle 0x1031696a8

DuplicateHandle 0x1031696a0

api-ms-win-core-heap-l1-1-0.dll 4

GetProcessHeap 0x1031696d0

HeapAlloc 0x1031696c8

HeapFree 0x1031696b8

HeapReAlloc 0x1031696c0

api-ms-win-core-interlocked-l1-1-0.dll 1

InitializeSListHead 0x1031696e0

api-ms-win-core-io-l1-1-0.dll 1

DeviceIoControl 0x1031696f0

api-ms-win-core-kernel32-legacy-l1-1-0.dll 1

CreateFileMappingA 0x103169700

api-ms-win-core-libraryloader-l1-1-0.dll 7

FreeLibrary 0x103169720

GetModuleFileNameW 0x103169710

GetModuleHandleExW 0x103169730

GetModuleHandleW 0x103169728

GetProcAddress 0x103169738

LoadLibraryExA 0x103169740

LoadLibraryExW 0x103169718

api-ms-win-core-localization-l1-1-0.dll 2

LCMapStringEx 0x103169750

LCMapStringW 0x103169758

api-ms-win-core-localregistry-l1-1-0.dll 5

RegCloseKey 0x103169778

RegEnumKeyExW 0x103169770

RegOpenKeyExW 0x103169768

RegQueryInfoKeyW 0x103169788

RegQueryValueExW 0x103169780

api-ms-win-core-memory-l1-1-0.dll 8

CreateFileMappingW 0x1031697b0

MapViewOfFile 0x1031697b8

MapViewOfFileEx 0x1031697c8

ReadProcessMemory 0x1031697d0

UnmapViewOfFile 0x1031697a8

VirtualAlloc 0x103169798

VirtualFree 0x1031697c0

VirtualProtect 0x1031697a0

api-ms-win-core-misc-l1-1-0.dll 3

FormatMessageW 0x1031697e8

LocalAlloc 0x1031697e0

Sleep 0x1031697f0

api-ms-win-core-processenvironment-l1-1-0.dll 3

ExpandEnvironmentStringsW 0x103169810

GetEnvironmentVariableW 0x103169800

SetEnvironmentVariableA 0x103169808

api-ms-win-core-processthreads-l1-1-0.dll 10

GetCurrentProcess 0x103169820

GetCurrentProcessId 0x103169838

GetCurrentThread 0x103169858

GetCurrentThreadId 0x103169848

OpenThreadToken 0x103169828

TerminateProcess 0x103169860

TlsAlloc 0x103169868

TlsFree 0x103169840

TlsGetValue 0x103169850

TlsSetValue 0x103169830

api-ms-win-core-profile-l1-1-0.dll 1

QueryPerformanceCounter 0x103169878

api-ms-win-core-rtlsupport-l1-1-0.dll 3

RtlCaptureContext 0x103169888

RtlLookupFunctionEntry 0x103169898

RtlVirtualUnwind 0x103169890

api-ms-win-core-string-l1-1-0.dll 3

GetStringTypeW 0x1031698b8

MultiByteToWideChar 0x1031698b0

WideCharToMultiByte 0x1031698a8

api-ms-win-core-synch-l1-1-0.dll 9

AcquireSRWLockExclusive 0x1031698d8

DeleteCriticalSection 0x1031698d0

EnterCriticalSection 0x1031698f0

InitializeCriticalSection 0x103169900

InitializeCriticalSectionAndSpinCount 0x103169908

InitializeCriticalSectionEx 0x1031698c8

LeaveCriticalSection 0x1031698f8

OpenProcess 0x1031698e0

ReleaseSRWLockExclusive 0x1031698e8

api-ms-win-core-synch-l1-2-0.dll 1

InitOnceExecuteOnce 0x103169918

api-ms-win-core-sysinfo-l1-1-0.dll 8

GetSystemDirectoryW 0x103169950

GetSystemInfo 0x103169930

GetSystemTime 0x103169928

GetSystemTimeAsFileTime 0x103169940

GetTickCount 0x103169938

GetVersionExA 0x103169958

GetVersionExW 0x103169948

SystemTimeToFileTime 0x103169960

api-ms-win-core-util-l1-1-0.dll 2

DecodePointer 0x103169970

EncodePointer 0x103169978

api-ms-win-crt-locale-l1-1-0.dll 2

_lock_locales 0x103169990

_unlock_locales 0x103169988

api-ms-win-crt-private-l1-1-0.dll 104

__C_specific_handler 0x103169cc8

__CxxFrameHandler3 0x103169cd0

__std_terminate 0x103169c80

__uncaught_exception 0x103169bc0

__unDName 0x103169cc0

__unDNameEx 0x103169ca8

_CxxThrowException 0x103169bc8

_o____lc_codepage_func 0x103169c68

_o____lc_locale_name_func 0x103169c60

_o____mb_cur_max_func 0x103169c58

_o___acrt_iob_func 0x103169c50

_o___pctype_func 0x103169c48

_o___std_exception_copy 0x103169c40

_o___std_exception_destroy 0x103169c38

_o___std_type_info_destroy_list 0x103169c30

_o___stdio_common_vfprintf 0x103169c28

_o___stdio_common_vsnprintf_s 0x103169c20

_o___stdio_common_vsnwprintf_s 0x103169c18

_o___stdio_common_vsprintf_s 0x103169c10

_o___stdio_common_vsscanf 0x103169c08

_o___stdio_common_vswprintf_s 0x103169c00

_o__callnewh 0x103169bf8

_o__calloc_base 0x103169bf0

_o__cexit 0x103169be8

_o__close 0x103169be0

_o__configure_narrow_argv 0x103169bd8

_o__crt_atexit 0x103169bd0

_o__errno 0x1031699a0

_o__execute_onexit_table 0x1031699a8

_o__filelengthi64 0x1031699b0

_o__fullpath 0x1031699b8

_o__initialize_narrow_environment 0x1031699c0

_o__initialize_onexit_table 0x1031699c8

_o__invalid_parameter_noinfo 0x1031699d0

_o__invalid_parameter_noinfo_noreturn 0x1031699d8

_o__itoa_s 0x1031699e0

_o__lseeki64 0x1031699e8

_o__ltoa 0x1031699f0

_o__mbscmp 0x1031699f8

_o__memicmp 0x103169a00

_o__open_osfhandle 0x103169a08

_o__purecall 0x103169a10

_o__read 0x103169a18

_o__register_onexit_function 0x103169a20

_o__seh_filter_dll 0x103169a28

_o__splitpath_s 0x103169a30

_o__stricmp 0x103169a38

_o__strlwr 0x103169a40

_o__strnicmp 0x103169a48

_o__wcsdup 0x103169a50

_o__wcsicmp 0x103169a58

_o__wcslwr 0x103169a60

_o__wcsnicmp 0x103169a68

_o__wctime64 0x103169a70

_o__wdupenv_s 0x103169a78

_o__wfsopen 0x103169a80

_o__wfullpath 0x103169a88

_o__wgetenv 0x103169a90

_o__wmakepath_s 0x103169a98

_o__wsplitpath_s 0x103169aa0

_o__wtoi 0x103169aa8

_o_abort 0x103169ab0

_o_atoi 0x103169ab8

_o_atol 0x103169ac0

_o_bsearch 0x103169ac8

_o_calloc 0x103169ad0

_o_fclose 0x103169ad8

_o_fflush 0x103169ae0

_o_fread 0x103169ae8

_o_free 0x103169af0

_o_frexp 0x103169af8

_o_fseek 0x103169b00

_o_ftell 0x103169b08

_o_isspace 0x103169b10

_o_iswprint 0x103169b18

_o_iswspace 0x103169b20

_o_iswxdigit 0x103169b28

_o_localeconv 0x103169b30

_o_malloc 0x103169b38

_o_qsort 0x103169b40

_o_realloc 0x103169b48

_o_setlocale 0x103169b50

_o_strcat_s 0x103169b58

_o_strcpy_s 0x103169b60

_o_strncat_s 0x103169b68

_o_strncpy_s 0x103169b70

_o_terminate 0x103169b78

_o_tolower 0x103169b80

_o_towlower 0x103169b88

_o_wcscat_s 0x103169b90

_o_wcscpy_s 0x103169b98

_o_wcsncat_s 0x103169ba0

_o_wcsncpy_s 0x103169ba8

_o_wcstoul 0x103169bb0

_o_wmemcpy_s 0x103169bb8

memcmp 0x103169ca0

memcpy 0x103169cd8

memmove 0x103169c98

strchr 0x103169cb8

strrchr 0x103169cb0

strstr 0x103169c78

wcschr 0x103169c90

wcsrchr 0x103169c70

wcsstr 0x103169c88

api-ms-win-crt-runtime-l1-1-0.dll 3

__doserrno 0x103169cf0

_initterm 0x103169ce8

_initterm_e 0x103169cf8

api-ms-win-crt-string-l1-1-0.dll 8

memset 0x103169d10

strcmp 0x103169d30

strcspn 0x103169d20

strlen 0x103169d18

strncmp 0x103169d08

wcscmp 0x103169d38

wcsncmp 0x103169d40

wcsnlen 0x103169d28

api-ms-win-crt-time-l1-1-0.dll 2

_ctime64 0x103169d50

_time64 0x103169d58

api-ms-win-downlevel-kernel32-l2-1-0.dll 1

LocalFree 0x103169d68

api-ms-win-eventing-provider-l1-1-0.dll 4

EventActivityIdControl 0x103169d88

EventRegister 0x103169d80

EventUnregister 0x103169d90

EventWriteTransfer 0x103169d78

api-ms-win-security-base-l1-1-0.dll 4

AccessCheck 0x103169da8

GetFileSecurityW 0x103169db8

ImpersonateSelf 0x103169db0

RevertToSelf 0x103169da0

ntdll.dll 8

NtQueryInformationProcess 0x103169dd0

NtQueryObject 0x103169df0

RtlCreateQueryDebugBuffer 0x103169dc8

RtlDestroyQueryDebugBuffer 0x103169dd8

RtlEqualUnicodeString 0x103169de8

RtlQueryProcessDebugInformation 0x103169df8

RtlRunOnceExecuteOnce 0x103169de0

RtlUTF8ToUnicodeN 0x103169e00