dbghelp.dll
v6.4.7.1
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 181
SymEnumProcesses
#1 · 0x2dc60
SymGetOmapBlockBase
#2 · 0x33060
DbgHelpCreateUserDump
#3 · 0x44500
DbgHelpCreateUserDumpW
#4 · 0x445f0
EnumDirTree
#5 · 0x374e0
EnumDirTreeW
#6 · 0x375c0
EnumerateLoadedModules64
#7 · 0x31f10
EnumerateLoadedModules
#8 · 0x31e40
EnumerateLoadedModulesW64
#9 · 0x31fe0
ExtensionApiVersion
#10 · 0x20aa0
FindDebugInfoFile
#11 · 0x36160
FindDebugInfoFileEx
#12 · 0x36f60
FindExecutableImage
#13 · 0x355f0
FindExecutableImageEx
#14 · 0x36020
FindExecutableImageExW
#15 · 0x36120
FindFileInPath
#16 · 0x354f0
FindFileInSearchPath
#17 · 0x35530
GetTimestampForLoadedLibrary
#18 · 0x26da0
ImageDirectoryEntryToData
#19 · 0x26830
ImageDirectoryEntryToDataEx
#20 · 0x26720
ImageNtHeader
#21 · 0x263d0
ImageRvaToSection
#22 · 0x26860
ImageRvaToVa
#23 · 0x268d0
ImagehlpApiVersion
#24 · 0x379c0
ImagehlpApiVersionEx
#25 · 0x379e0
MakeSureDirectoryPathExists
#26 · 0x377d0
MapDebugInformation
#27 · 0x34890
MiniDumpReadDumpStream
#28 · 0x60cc0
MiniDumpWriteDump
#29 · 0x60a90
SearchTreeForFile
#30 · 0x37610
SearchTreeForFileW
#31 · 0x37640
StackWalk64
#32 · 0x46980
StackWalk
#33 · 0x467d0
SymAddSymbol
#34 · 0x32b00
SymAddSymbolW
#35 · 0x329a0
SymCleanup
#36 · 0x2d100
SymDeleteSymbol
#37 · 0x32ca0
SymDeleteSymbolW
#38 · 0x32b60
SymEnumLines
#39 · 0x2f500
SymEnumLinesW
#40 · 0x2f5a0
SymEnumSourceFiles
#41 · 0x34200
SymEnumSourceFilesW
#42 · 0x34270
SymEnumSourceLines
#43 · 0x2f600
SymEnumSourceLinesW
#44 · 0x2f6a0
SymEnumSym
#45 · 0x33c40
SymEnumSymbols
#46 · 0x330f0
SymEnumSymbolsForAddr
#47 · 0x33940
SymEnumSymbolsForAddrW
#48 · 0x33ac0
SymEnumSymbolsW
#49 · 0x33160
SymEnumTypes
#50 · 0x33d40
SymEnumTypesW
#51 · 0x33d90
SymEnumerateModules64
#52 · 0x2dee0
SymEnumerateModules
#53 · 0x2dea0
SymEnumerateModulesW64
#54 · 0x2df20
SymEnumerateSymbols64
#55 · 0x2e200
SymEnumerateSymbols
#56 · 0x2e140
SymEnumerateSymbolsW64
#57 · 0x2e260
SymEnumerateSymbolsW
#58 · 0x2e1a0
SymFindFileInPath
#59 · 0x353f0
SymFindFileInPathW
#60 · 0x354a0
SymFromAddr
#61 · 0x32cf0
SymFromAddrW
#62 · 0x32d50
SymFromIndex
#63 · 0x33680
SymFromIndexW
#64 · 0x33700
SymFromName
#65 · 0x32fa0
SymFromNameW
#66 · 0x33020
SymFromToken
#67 · 0x32db0
SymFromTokenW
#68 · 0x32e40
SymFunctionTableAccess64
#69 · 0x30ab0
SymFunctionTableAccess
#70 · 0x30a90
SymGetFileLineOffsets64
#71 · 0x28370
SymGetHomeDirectory
#72 · 0x2d8a0
SymGetHomeDirectoryW
#73 · 0x2d7e0
SymGetLineFromAddr64
#74 · 0x2f700
SymGetLineFromAddr
#75 · 0x2f980
SymGetLineFromAddrW64
#76 · 0x2f790
SymGetLineFromName64
#77 · 0x300b0
SymGetLineFromName
#78 · 0x30150
SymGetLineFromNameW64
#79 · 0x2f9d0
SymGetLineNext64
#80 · 0x30430
SymGetLineNext
#81 · 0x304b0
SymGetLineNextW64
#82 · 0x30490
SymGetLinePrev64
#83 · 0x30510
SymGetLinePrev
#84 · 0x30590
SymGetLinePrevW64
#85 · 0x30570
SymGetModuleBase64
#86 · 0x31290
SymGetModuleBase
#87 · 0x313c0
SymGetModuleInfo64
#88 · 0x30cc0
SymGetModuleInfo
#89 · 0x311d0
SymGetModuleInfoW64
#90 · 0x30d50
SymGetModuleInfoW
#91 · 0x31130
SymGetOptions
#92 · 0x2dab0
SymGetScope
#93 · 0x33460
SymGetScopeW
#94 · 0x334e0
SymGetSearchPath
#95 · 0x319c0
SymGetSearchPathW
#96 · 0x31a30
SymGetSourceFile
#97 · 0x2eeb0
SymGetSourceFileFromToken
#98 · 0x2f020
SymGetSourceFileFromTokenW
#99 · 0x2f0b0
SymGetSourceFileToken
#100 · 0x2ef20
SymGetSourceFileTokenW
#101 · 0x2ef70
SymGetSourceVarFromToken
#102 · 0x2f110
SymGetSourceVarFromTokenW
#103 · 0x2f1b0
SymGetSymFromAddr64
#104 · 0x2e430
SymGetSymFromAddr
#105 · 0x2e480
SymGetSymFromName64
#106 · 0x2e7f0
SymGetSymFromName
#107 · 0x2e860
SymGetSymNext64
#108 · 0x2eb20
SymGetSymNext
#109 · 0x2ea10
SymGetSymPrev64
#110 · 0x2ebb0
SymGetSymPrev
#111 · 0x2eb40
SymGetSymbolFile
#112 · 0x441f0
SymGetSymbolFileW
#113 · 0x43d10
SymGetTypeFromName
#114 · 0x33de0
SymGetTypeFromNameW
#115 · 0x33e90
SymGetTypeInfo
#116 · 0x34640
SymGetTypeInfoEx
#117 · 0x34690
SymInitialize
#118 · 0x2cf10
SymInitializeW
#119 · 0x2cb60
SymLoadModule64
#120 · 0x31750
SymLoadModule
#121 · 0x31790
SymLoadModuleEx
#122 · 0x315a0
SymLoadModuleExW
#123 · 0x31680
SymMatchFileName
#124 · 0x305f0
SymMatchFileNameW
#125 · 0x30740
SymMatchString
#126 · 0x34030
SymMatchStringA
#127 · 0x34060
SymMatchStringW
#128 · 0x34080
SymNext
#129 · 0x2e8d0
SymNextW
#130 · 0x2e950
SymPrev
#131 · 0x2e970
SymPrevW
#132 · 0x2e9f0
SymRegisterCallback64
#133 · 0x321b0
SymRegisterCallback
#134 · 0x320b0
SymRegisterCallbackW64
#135 · 0x322c0
SymRegisterFunctionEntryCallback64
#136 · 0x30990
SymRegisterFunctionEntryCallback
#137 · 0x30890
SymSearch
#138 · 0x33390
SymSearchW
#139 · 0x33400
SymSetContext
#140 · 0x2dad0
SymSetHomeDirectory
#141 · 0x2d750
SymSetOptions
#142 · 0x2d910
SymSetParentWindow
#143 · 0x2d180
SymSetSearchPath
#144 · 0x31b10
SymSetSearchPathW
#145 · 0x31b50
SymSrvDeltaName
#146 · 0x433c0
SymSrvDeltaNameW
#147 · 0x431d0
SymSrvGetFileIndexString
#148 · 0x439a0
SymSrvGetFileIndexStringW
#149 · 0x438f0
SymSrvGetFileIndexes
#150 · 0x438a0
SymSrvGetFileIndexesW
#151 · 0x437f0
SymSrvGetSupplement
#152 · 0x435b0
SymSrvGetSupplementW
#153 · 0x43470
SymSrvIsStore
#154 · 0x43190
SymSrvIsStoreW
#155 · 0x430b0
SymSrvStoreFile
#156 · 0x43af0
SymSrvStoreFileW
#157 · 0x43a40
SymSrvStoreSupplement
#158 · 0x43750
SymSrvStoreSupplementW
#159 · 0x43650
SymUnDName64
#160 · 0x318c0
SymUnDName
#161 · 0x317c0
SymUnloadModule64
#162 · 0x313e0
SymUnloadModule
#163 · 0x31580
UnDecorateSymbolName
#164 · 0x34710
UnDecorateSymbolNameW
#165 · 0x34800
UnmapDebugInformation
#166 · 0x34b50
WinDbgExtensionDllInit
#167 · 0x20ac0
block
#168 · 0x21c40
dbghelp
#169 · 0x2db70
dh
#170 · 0x237f0
fptr
#171 · 0x20cc0
homedir
#172 · 0x22080
lmi
#173 · 0x21990
lminfo
#174 · 0x21700
omap
#175 · 0x21e10
srcfiles
#176 · 0x22250
stack_force_ebp
#177 · 0x21200
stackdbg
#178 · 0x20d90
sym
#179 · 0x21410
symsrv
#180 · 0x21570
vc7fpo
#181 · 0x20d40
No function matches your filter.
Imported DLLs & functions 210
ADVAPI32.dll
10
CryptAcquireContextA
0x3001024
CryptGenRandom
0x3001020
CryptReleaseContext
0x300101c
RegCloseKey
0x3001018
RegEnumKeyExW
0x3001014
RegOpenKeyExA
0x3001000
RegOpenKeyExW
0x300100c
RegQueryInfoKeyW
0x3001010
RegQueryValueExA
0x3001008
RegQueryValueExW
0x3001004
KERNEL32.dll
99
CloseHandle
0x300117c
CopyFileA
0x30010f0
CopyFileW
0x30010f8
CreateDirectoryA
0x300105c
CreateDirectoryW
0x3001038
CreateFileA
0x3001170
CreateFileMappingA
0x3001070
CreateFileMappingW
0x30010e0
CreateFileW
0x3001030
CreateThread
0x3001130
DeleteCriticalSection
0x300114c
DeleteFileA
0x300111c
DeleteFileW
0x3001034
DeviceIoControl
0x30010e8
DuplicateHandle
0x3001068
EnterCriticalSection
0x3001180
ExpandEnvironmentStringsA
0x3001118
ExpandEnvironmentStringsW
0x3001114
FindClose
0x3001058
FindFirstFileW
0x3001194
FindNextFileW
0x3001188
FlushViewOfFile
0x30010d8
FormatMessageA
0x3001128
FormatMessageW
0x3001124
FreeLibrary
0x3001150
GetCurrentProcess
0x3001048
GetCurrentProcessId
0x300107c
GetCurrentThreadId
0x30010a8
GetEnvironmentVariableW
0x30010bc
GetFileAttributesA
0x3001098
GetFileAttributesW
0x3001054
GetFileSize
0x3001174
GetFileType
0x30010e4
GetFullPathNameW
0x3001050
GetLastError
0x300116c
GetModuleFileNameA
0x3001120
GetModuleFileNameW
0x300103c
GetModuleHandleA
0x3001074
GetPriorityClass
0x3001140
GetProcAddress
0x3001198
GetProcessHeap
0x30010a0
GetSystemDirectoryW
0x300109c
GetSystemInfo
0x30011a0
GetSystemTimeAsFileTime
0x30010ac
GetThreadContext
0x30011b0
GetThreadPriority
0x3001144
GetThreadSelectorEntry
0x300112c
GetThreadTimes
0x30011b4
GetTickCount
0x3001160
GetVersionExA
0x30010d0
GetVersionExW
0x30011a4
HeapAlloc
0x30010c8
HeapCreate
0x3001148
HeapDestroy
0x3001154
HeapFree
0x30010c4
HeapReAlloc
0x30010cc
InitializeCriticalSection
0x30010d4
InitializeCriticalSectionAndSpinCount
0x30010ec
InterlockedDecrement
0x3001110
InterlockedIncrement
0x300110c
IsDBCSLeadByte
0x30010c0
LCMapStringA
0x3001100
LCMapStringW
0x3001104
LeaveCriticalSection
0x3001184
LoadLibraryA
0x300119c
LoadLibraryW
0x3001138
LocalAlloc
0x300118c
LocalFree
0x3001108
MapViewOfFile
0x300106c
MapViewOfFileEx
0x30010dc
MultiByteToWideChar
0x3001040
OpenProcess
0x3001078
OutputDebugStringA
0x3001084
OutputDebugStringW
0x300108c
QueryPerformanceCounter
0x30010a4
ReadFile
0x3001178
ReadProcessMemory
0x3001090
ResumeThread
0x30011ac
SetErrorMode
0x3001094
SetFileAttributesA
0x30010f4
SetFileAttributesW
0x30010fc
SetFilePointer
0x300102c
SetLastError
0x3001190
SetUnhandledExceptionFilter
0x30010b8
SuspendThread
0x30011a8
TerminateProcess
0x30010b0
TerminateThread
0x3001134
TlsAlloc
0x300115c
TlsFree
0x3001158
TlsGetValue
0x3001164
TlsSetValue
0x3001168
UnhandledExceptionFilter
0x30010b4
UnmapViewOfFile
0x300104c
VirtualAlloc
0x3001064
VirtualFree
0x3001080
VirtualProtect
0x3001060
VirtualQueryEx
0x300113c
WideCharToMultiByte
0x3001044
WriteFile
0x3001088
msvcrt.dll
100
__badioinfo
0x3001260
__CxxFrameHandler
0x3001284
__dllonexit
0x30011c4
__mb_cur_max
0x300124c
__pioinfo
0x3001264
__unDName
0x300129c
_access
0x30012e0
_adjust_fdiv
0x30011c8
_amsg_exit
0x30011cc
_chsize
0x3001300
_close
0x3001304
_CxxThrowException
0x30012a8
_errno
0x3001240
_except_handler3
0x3001234
_fileno
0x3001274
_fsopen
0x30012ec
_fullpath
0x30012d4
_get_osfhandle
0x30012f4
_initterm
0x30011d0
_iob
0x3001270
_isatty
0x300126c
_ismbblead
0x3001244
_itoa
0x30011f0
_lseek
0x300125c
_lseeki64
0x30012fc
_ltoa
0x300120c
_mbscmp
0x3001324
_mbsicmp
0x30012dc
_memicmp
0x3001320
_onexit
0x3001268
_open_osfhandle
0x3001308
_osver
0x3001294
_purecall
0x3001218
_read
0x30012f8
_snprintf
0x3001254
_snwprintf
0x30012b0
_sopen
0x3001310
_splitpath
0x30012e4
_stricmp
0x3001214
_strlwr
0x3001228
_vsnwprintf
0x30011e0
_wcsdup
0x30012e8
_wcsicmp
0x300123c
_wcslwr
0x30011fc
_wcsnicmp
0x3001210
_wctime
0x3001204
_wfopen
0x30012bc
_wfsopen
0x30012f0
_wfullpath
0x30012d8
_wgetenv
0x300131c
_winmajor
0x3001290
_winminor
0x300128c
_wmakepath
0x30012d0
_write
0x3001330
_wsopen
0x300130c
_wsplitpath
0x3001298
_XcptFilter
0x30011d4
??1type_info@@UAE@XZ
0x300132c
??2@YAPAXI@Z
0x3001350
??3@YAXPAX@Z
0x300134c
?terminate@@YAXXZ
0x3001328
atol
0x3001278
bsearch
0x30012ac
calloc
0x30011ec
ctime
0x3001220
fclose
0x3001288
fopen
0x30012c0
fread
0x30012b4
free
0x300122c
fseek
0x30012b8
ftell
0x3001318
isdigit
0x30012a0
isleadbyte
0x3001250
isspace
0x300121c
iswprint
0x30011dc
iswspace
0x30011e8
iswxdigit
0x3001344
malloc
0x3001224
mbtowc
0x3001248
memcpy
0x3001238
memmove
0x30011e4
memset
0x3001348
qsort
0x3001334
realloc
0x30011d8
sprintf
0x3001280
strchr
0x30012c8
strncmp
0x3001208
strncpy
0x30012a4
strstr
0x3001230
time
0x3001200
tolower
0x30011f8
towlower
0x30011f4
wcschr
0x3001338
wcsncmp
0x3001340
wcsncpy
0x300127c
wcsrchr
0x30012cc
wcsstr
0x300133c
wcstol
0x30012c4
wctomb
0x3001258
wprintf
0x3001314
UuidCreate
0x30011bc
No function matches your filter.