dbghelp.dll
v6.3.9600.17029
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 231
SymGetOmapBlockBase
#1 · 0x40de1
DbgHelpCreateUserDump
#2 · 0x4e7ef
DbgHelpCreateUserDumpW
#3 · 0x4e882
EnumDirTree
#4 · 0x451b5
EnumDirTreeW
#5 · 0x452ae
EnumerateLoadedModules64
#6 · 0x40182
EnumerateLoadedModules
#7 · 0x40105
EnumerateLoadedModulesEx
#8 · 0x4027c
EnumerateLoadedModulesExW
#9 · 0x402f9
EnumerateLoadedModulesW64
#10 · 0x401ff
ExtensionApiVersion
#11 · 0x3211f
FindDebugInfoFile
#12 · 0x43fdc
FindDebugInfoFileEx
#13 · 0x44bfe
FindDebugInfoFileExW
#14 · 0x44bc4
FindExecutableImage
#15 · 0x4348b
FindExecutableImageEx
#16 · 0x43d79
FindExecutableImageExW
#17 · 0x43e61
FindFileInPath
#18 · 0x433de
FindFileInSearchPath
#19 · 0x4340d
GetSymLoadError
#20 · 0x42998
GetTimestampForLoadedLibrary
#21 · 0x37715
ImageDirectoryEntryToData
#22 · 0x373a4
ImageDirectoryEntryToDataEx
#23 · 0x372e6
ImageNtHeader
#24 · 0x370ef
ImageRvaToSection
#25 · 0x373c5
ImageRvaToVa
#26 · 0x3741d
ImagehlpApiVersion
#27 · 0x45515
ImagehlpApiVersionEx
#28 · 0x45520
MakeSureDirectoryPathExists
#29 · 0x453eb
MapDebugInformation
#30 · 0x429b9
MiniDumpReadDumpStream
#31 · 0x589b0
MiniDumpWriteDump
#32 · 0x587bd
RangeMapAddPeImageSections
#33 · 0x53e1e
RangeMapCreate
#34 · 0x53dbd
RangeMapFree
#35 · 0x53df8
RangeMapRead
#36 · 0x53edb
RangeMapRemove
#37 · 0x53e96
RangeMapWrite
#38 · 0x53f1d
RemoveInvalidModuleList
#39 · 0x2822b
ReportSymbolLoadSummary
#40 · 0x27fac
SearchTreeForFile
#41 · 0x452f0
SearchTreeForFileW
#42 · 0x45312
SetCheckUserInterruptShared
#43 · 0x42982
SetSymLoadError
#44 · 0x429a3
StackWalk64
#45 · 0x53647
StackWalk
#46 · 0x52f5d
StackWalkEx
#47 · 0x53148
SymAddSourceStream
#48 · 0x3e0fd
SymAddSourceStreamA
#49 · 0x3e0bc
SymAddSourceStreamW
#50 · 0x3dfae
SymAddSymbol
#51 · 0x4094a
SymAddSymbolW
#52 · 0x40890
SymAddrIncludeInlineTrace
#53 · 0x41e01
SymCleanup
#54 · 0x3c701
SymCompareInlineTrace
#55 · 0x421cd
SymDeleteSymbol
#56 · 0x40a31
SymDeleteSymbolW
#57 · 0x40991
SymEnumLines
#58 · 0x3e4bf
SymEnumLinesW
#59 · 0x3e544
SymEnumProcesses
#60 · 0x3d1aa
SymEnumSourceFileTokens
#61 · 0x3e2be
SymEnumSourceFiles
#62 · 0x41d1e
SymEnumSourceFilesW
#63 · 0x41d9a
SymEnumSourceLines
#64 · 0x3e5a5
SymEnumSourceLinesW
#65 · 0x3e630
SymEnumSym
#66 · 0x41674
SymEnumSymbols
#67 · 0x40ec3
SymEnumSymbolsEx
#68 · 0x40e4b
SymEnumSymbolsExW
#69 · 0x40eef
SymEnumSymbolsForAddr
#70 · 0x414bb
SymEnumSymbolsForAddrW
#71 · 0x41596
SymEnumSymbolsW
#72 · 0x40f54
SymEnumTypes
#73 · 0x41848
SymEnumTypesByName
#74 · 0x418ff
SymEnumTypesByNameW
#75 · 0x419ad
SymEnumTypesW
#76 · 0x418a2
SymEnumerateModules64
#77 · 0x3d31a
SymEnumerateModules
#78 · 0x3d2d0
SymEnumerateModulesW64
#79 · 0x3d364
SymEnumerateSymbols64
#80 · 0x3d59a
SymEnumerateSymbols
#81 · 0x3d4f2
SymEnumerateSymbolsW64
#82 · 0x3d5ef
SymEnumerateSymbolsW
#83 · 0x3d546
SymFindDebugInfoFile
#84 · 0x44cbd
SymFindDebugInfoFileW
#85 · 0x44d95
SymFindExecutableImage
#86 · 0x43e9b
SymFindExecutableImageW
#87 · 0x43f8a
SymFindFileInPath
#88 · 0x432df
SymFindFileInPathW
#89 · 0x43397
SymFromAddr
#90 · 0x40ac7
SymFromAddrW
#91 · 0x40b42
SymFromIndex
#92 · 0x4130a
SymFromIndexW
#93 · 0x4137b
SymFromInlineContext
#94 · 0x40a75
SymFromInlineContextW
#95 · 0x40af0
SymFromName
#96 · 0x40ca9
SymFromNameW
#97 · 0x40d0d
SymFromToken
#98 · 0x40b6b
SymFromTokenW
#99 · 0x40bf8
SymFunctionTableAccess64
#100 · 0x3f2bb
SymFunctionTableAccess64AccessRoutines
#101 · 0x3f2e0
SymFunctionTableAccess
#102 · 0x3f29a
SymGetFileLineOffsets64
#103 · 0x3842a
SymGetHomeDirectory
#104 · 0x3ccf5
SymGetHomeDirectoryW
#105 · 0x3cc6e
SymGetLineFromAddr64
#106 · 0x3e749
SymGetLineFromAddr
#107 · 0x3e8bc
SymGetLineFromAddrW64
#108 · 0x3e88f
SymGetLineFromInlineContext
#109 · 0x3e697
SymGetLineFromInlineContextW
#110 · 0x3e776
SymGetLineFromName64
#111 · 0x3eca1
SymGetLineFromName
#112 · 0x3ed1e
SymGetLineFromNameW64
#113 · 0x3e903
SymGetLineNext64
#114 · 0x3eebf
SymGetLineNext
#115 · 0x3ef2f
SymGetLineNextW64
#116 · 0x3ef14
SymGetLinePrev64
#117 · 0x3ef82
SymGetLinePrev
#118 · 0x3eff2
SymGetLinePrevW64
#119 · 0x3efd7
SymGetModuleBase64
#120 · 0x3f9ae
SymGetModuleBase
#121 · 0x3fa27
SymGetModuleInfo64
#122 · 0x3f595
SymGetModuleInfo
#123 · 0x3f91f
SymGetModuleInfoW64
#124 · 0x3f615
SymGetModuleInfoW
#125 · 0x3f88c
SymGetOmaps
#126 · 0x40d37
SymGetOptions
#127 · 0x3cf07
SymGetScope
#128 · 0x411bc
SymGetScopeW
#129 · 0x41233
SymGetSearchPath
#130 · 0x3fd90
SymGetSearchPathW
#131 · 0x3fde1
SymGetSourceFile
#132 · 0x3de2e
SymGetSourceFileFromToken
#133 · 0x3e127
SymGetSourceFileFromTokenW
#134 · 0x3e18f
SymGetSourceFileToken
#135 · 0x3deee
SymGetSourceFileTokenW
#136 · 0x3df2f
SymGetSourceFileW
#137 · 0x3de8e
SymGetSourceVarFromToken
#138 · 0x3e1d4
SymGetSourceVarFromTokenW
#139 · 0x3e25f
SymGetSymFromAddr64
#140 · 0x3d6e6
SymGetSymFromAddr
#141 · 0x3d71e
SymGetSymFromName64
#142 · 0x3d903
SymGetSymFromName
#143 · 0x3d950
SymGetSymNext64
#144 · 0x3dbf9
SymGetSymNext
#145 · 0x3dacf
SymGetSymPrev64
#146 · 0x3dc75
SymGetSymPrev
#147 · 0x3dc14
SymGetSymbolFile
#148 · 0x4e3af
SymGetSymbolFileW
#149 · 0x4dfb0
SymGetTypeFromName
#150 · 0x41a0b
SymGetTypeFromNameW
#151 · 0x41ab7
SymGetTypeInfo
#152 · 0x427f2
SymGetTypeInfoEx
#153 · 0x4282f
SymGetUnwindInfo
#154 · 0x3f43c
SymInitialize
#155 · 0x3c58a
SymInitializeW
#156 · 0x3c394
SymLoadModule64
#157 · 0x3fc47
SymLoadModule
#158 · 0x3fc78
SymLoadModuleEx
#159 · 0x3fb45
SymLoadModuleExW
#160 · 0x3fbdc
SymMatchFileName
#161 · 0x3f045
SymMatchFileNameW
#162 · 0x3f0fa
SymMatchString
#163 · 0x41bb4
SymMatchStringA
#164 · 0x41be9
SymMatchStringW
#165 · 0x41bf9
SymNext
#166 · 0x3d99d
SymNextW
#167 · 0x3da1b
SymPrev
#168 · 0x3da36
SymPrevW
#169 · 0x3dab4
SymQueryInlineTrace
#170 · 0x41f79
SymRefreshModuleList
#171 · 0x3c312
SymRegisterCallback64
#172 · 0x403f0
SymRegisterCallback
#173 · 0x40376
SymRegisterCallbackW64
#174 · 0x4046c
SymRegisterFunctionEntryCallback64
#175 · 0x3f222
SymRegisterFunctionEntryCallback
#176 · 0x3f1ac
SymSearch
#177 · 0x410ec
SymSearchW
#178 · 0x41156
SymSetContext
#179 · 0x3cf12
SymSetHomeDirectory
#180 · 0x3cbf8
SymSetHomeDirectoryW
#181 · 0x3cb97
SymSetOptions
#182 · 0x3cd4b
SymSetParentWindow
#183 · 0x3c757
SymSetScopeFromAddr
#184 · 0x3cff2
SymSetScopeFromIndex
#185 · 0x3d015
SymSetScopeFromInlineContext
#186 · 0x3cf72
SymSetSearchPath
#187 · 0x3fe56
SymSetSearchPathW
#188 · 0x3fed6
SymSrvDeltaName
#189 · 0x4d5e8
SymSrvDeltaNameW
#190 · 0x4d448
SymSrvGetFileIndexInfo
#191 · 0x4e533
SymSrvGetFileIndexInfoW
#192 · 0x4e5e1
SymSrvGetFileIndexString
#193 · 0x4db93
SymSrvGetFileIndexStringW
#194 · 0x4daca
SymSrvGetFileIndexes
#195 · 0x4da91
SymSrvGetFileIndexesW
#196 · 0x4da06
SymSrvGetSupplement
#197 · 0x4d7d7
SymSrvGetSupplementW
#198 · 0x4d678
SymSrvIsStore
#199 · 0x4d418
SymSrvIsStoreW
#200 · 0x4d359
SymSrvStoreFile
#201 · 0x4dcd1
SymSrvStoreFileW
#202 · 0x4dc36
SymSrvStoreSupplement
#203 · 0x4d989
SymSrvStoreSupplementW
#204 · 0x4d851
SymUnDName64
#205 · 0x3fd1a
SymUnDName
#206 · 0x3fca4
SymUnloadModule64
#207 · 0x3fa42
SymUnloadModule
#208 · 0x3fb25
UnDecorateSymbolName
#209 · 0x4288c
UnDecorateSymbolNameW
#210 · 0x42914
UnmapDebugInformation
#211 · 0x42b55
WinDbgExtensionDllInit
#212 · 0x3212a
block
#213 · 0x33c8f
chksym
#214 · 0x33b0b
dbghelp
#215 · 0x3d118
dh
#216 · 0x34f47
fptr
#217 · 0x322c6
homedir
#218 · 0x33f64
inlinedbg
#219 · 0x3393f
itoldyouso
#220 · 0x33987
lmi
#221 · 0x32b20
lminfo
#222 · 0x328d3
omap
#223 · 0x33df3
optdbgdump
#224 · 0x3621f
optdbgdumpaddr
#225 · 0x36305
srcfiles
#226 · 0x34098
stack_force_ebp
#227 · 0x32570
stackdbg
#228 · 0x3236a
sym
#229 · 0x32727
symsrv
#230 · 0x3283b
vc7fpo
#231 · 0x3233c
No function matches your filter.
Imported DLLs & functions 176
KERNEL32.dll
85
CloseHandle
0x312a0f8
CopyFileExW
0x312a01c
CreateDirectoryA
0x312a15c
CreateFileA
0x312a10c
CreateFileMappingA
0x312a07c
CreateThread
0x312a100
DelayLoadFailureHook
0x312a160
DeleteCriticalSection
0x312a0ec
DeviceIoControl
0x312a014
DuplicateHandle
0x312a0c8
EnterCriticalSection
0x312a0e0
ExitThread
0x312a0f0
FindClose
0x312a0dc
FlushViewOfFile
0x312a03c
FreeLibrary
0x312a120
GetCurrentProcess
0x312a154
GetCurrentProcessId
0x312a0bc
GetCurrentThreadId
0x312a088
GetExitCodeThread
0x312a108
GetFileAttributesA
0x312a0a4
GetFileSize
0x312a110
GetFileType
0x312a018
GetLastError
0x312a0e8
GetModuleHandleA
0x312a0c0
GetModuleHandleW
0x312a034
GetPriorityClass
0x312a06c
GetProcessHeap
0x312a130
GetSystemInfo
0x312a080
GetSystemTimeAsFileTime
0x312a044
GetThreadContext
0x312a070
GetThreadPriority
0x312a068
GetThreadSelectorEntry
0x312a050
GetThreadTimes
0x312a064
GetTickCount
0x312a0f4
GetVersion
0x312a048
GetVersionExA
0x312a12c
HeapAlloc
0x312a138
HeapCreate
0x312a058
HeapDestroy
0x312a05c
HeapFree
0x312a13c
HeapReAlloc
0x312a134
InitializeCriticalSection
0x312a0fc
InitializeCriticalSectionAndSpinCount
0x312a010
InterlockedDecrement
0x312a028
InterlockedIncrement
0x312a02c
IsDBCSLeadByte
0x312a140
LCMapStringW
0x312a024
LeaveCriticalSection
0x312a0e4
LoadLibraryA
0x312a084
LoadLibraryExA
0x312a030
LocalAlloc
0x312a0d0
LocalFree
0x312a040
MapViewOfFile
0x312a0c4
MapViewOfFileEx
0x312a038
OpenProcess
0x312a0b8
OutputDebugStringA
0x312a0ac
QueryPerformanceCounter
0x312a08c
RaiseException
0x312a0d4
ReadFile
0x312a114
ReadProcessMemory
0x312a0a0
ResumeThread
0x312a074
RtlCaptureContext
0x312a09c
RtlUnwind
0x312a04c
SetEnvironmentVariableA
0x312a148
SetErrorMode
0x312a0a8
SetFileAttributesW
0x312a020
SetFilePointer
0x312a14c
SetLastError
0x312a0d8
SetUnhandledExceptionFilter
0x312a094
Sleep
0x312a144
SuspendThread
0x312a078
TerminateProcess
0x312a090
TerminateThread
0x312a054
TlsAlloc
0x312a124
TlsFree
0x312a128
TlsGetValue
0x312a118
TlsSetValue
0x312a11c
UnhandledExceptionFilter
0x312a098
UnmapViewOfFile
0x312a158
VirtualAlloc
0x312a150
VirtualFree
0x312a0b4
VirtualProtect
0x312a0cc
VirtualQueryEx
0x312a060
WaitForSingleObject
0x312a104
WriteFile
0x312a0b0
msvcrt.dll
88
__badioinfo
0x312a178
__CxxFrameHandler
0x312a1ec
__dllonexit
0x312a1ac
__mb_cur_max
0x312a194
__pioinfo
0x312a174
__unDName
0x312a254
_amsg_exit
0x312a1c8
_callnewh
0x312a1d4
_chsize
0x312a278
_close
0x312a27c
_CxxThrowException
0x312a1d0
_errno
0x312a1f0
_fileno
0x312a19c
_get_osfhandle
0x312a280
_initterm
0x312a1c4
_iob
0x312a190
_isatty
0x312a170
_ismbblead
0x312a1c0
_itoa
0x312a188
_lock
0x312a1b4
_lseeki64
0x312a168
_ltoa
0x312a214
_mbscmp
0x312a28c
_memicmp
0x312a290
_onexit
0x312a1a8
_open_osfhandle
0x312a284
_purecall
0x312a21c
_read
0x312a17c
_snprintf
0x312a18c
_stricmp
0x312a230
_strlwr
0x312a234
_strnicmp
0x312a218
_unlock
0x312a1b0
_vsnwprintf
0x312a238
_wcsdup
0x312a1fc
_wcsicmp
0x312a2b8
_wcslwr
0x312a208
_wcsnicmp
0x312a2b4
_wctime
0x312a20c
_wfsopen
0x312a268
_wfullpath
0x312a270
_wgetenv
0x312a274
_write
0x312a16c
_wsopen
0x312a2c0
_XcptFilter
0x312a1cc
??0exception@@QAE@ABV0@@Z
0x312a1e0
??0exception@@QAE@XZ
0x312a1e4
??1exception@@UAE@XZ
0x312a1dc
??1type_info@@UAE@XZ
0x312a1a4
?what@exception@@UBEPBDXZ
0x312a1d8
atol
0x312a248
bsearch
0x312a258
calloc
0x312a1f8
ctime
0x312a220
fclose
0x312a24c
ferror
0x312a180
fflush
0x312a244
fprintf
0x312a240
fread
0x312a260
free
0x312a29c
fseek
0x312a264
ftell
0x312a288
isleadbyte
0x312a1a0
isspace
0x312a22c
iswdigit
0x312a250
iswprint
0x312a23c
iswspace
0x312a1f4
iswxdigit
0x312a2a8
malloc
0x312a224
mbtowc
0x312a198
memcmp
0x312a2c4
memcpy
0x312a1bc
memmove
0x312a1e8
memset
0x312a1b8
qsort
0x312a2a4
realloc
0x312a2a0
strchr
0x312a25c
strncmp
0x312a228
strstr
0x312a298
time
0x312a210
tolower
0x312a204
towlower
0x312a200
wcschr
0x312a2b0
wcsncmp
0x312a2ac
wcsrchr
0x312a294
wcsstr
0x312a2bc
wcstoul
0x312a26c
wctomb
0x312a184
No function matches your filter.