dbghelp.dll
v10.0.19041.3636
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 257
#1101 · 0x11fba0
#1102 · 0x11fc90
#1103 · 0x11fe20
#1104 · 0x1201a0
#1105 · 0x120880
#1106 · 0x120910
#1107 · 0x11fde0
#1108 · 0x1200d0
#1109 · 0x120800
#1110 · 0x1208a0
SymAllocDiaString
#1111 · 0x11fa60
SymFreeDiaString
#1112 · 0x11fd20
SymGetDiaSession
#1113 · 0x11fd30
SymGetLineFromAddrEx
#1114 · 0x11fde0
#1115 · 0x11fe60
#1116 · 0x11ff30
#1117 · 0x11fa80
#1118 · 0x11fb30
#1119 · 0xf82b0
SymGetLineFromNameEx
#1120 · 0x1200d0
SymGetLineNextEx
#1121 · 0x120800
SymGetLinePrevEx
#1122 · 0x1208a0
SymGetOmapBlockBase
#1123 · 0x120930
SymSetDiaSession
#1124 · 0x1209b0
_EFN_DumpImage
#1125 · 0x112070
DbgHelpCreateUserDump
#1126 · 0x12eb10
DbgHelpCreateUserDumpW
#1127 · 0x12ec10
EnumDirTree
#1128 · 0x127ce0
EnumDirTreeW
#1129 · 0x127e10
EnumerateLoadedModules
#1130 · 0x1214a0
EnumerateLoadedModules64
#1131 · 0x1214a0
EnumerateLoadedModulesEx
#1132 · 0x121500
EnumerateLoadedModulesExW
#1133 · 0x121560
EnumerateLoadedModulesW64
#1134 · 0x1215c0
ExtensionApiVersion
#1135 · 0x116420
FindDebugInfoFile
#1136 · 0x127e60
FindDebugInfoFileEx
#1137 · 0x127e80
FindDebugInfoFileExW
#1138 · 0x127f50
FindExecutableImage
#1139 · 0x127fa0
FindExecutableImageEx
#1140 · 0x127fc0
FindExecutableImageExW
#1141 · 0x1280c0
FindFileInPath
#1142 · 0x128110
FindFileInSearchPath
#1143 · 0x128160
GetSymLoadError
#1144 · 0x121620
GetTimestampForLoadedLibrary
#1145 · 0x1186e0
ImageDirectoryEntryToData
#1146 · 0x118360
ImageDirectoryEntryToDataEx
#1147 · 0x118380
ImageNtHeader
#1148 · 0x1184b0
ImageRvaToSection
#1149 · 0x1184f0
ImageRvaToVa
#1150 · 0x118560
ImagehlpApiVersion
#1151 · 0x1281b0
ImagehlpApiVersionEx
#1152 · 0x1281c0
MakeSureDirectoryPathExists
#1153 · 0x128200
MiniDumpReadDumpStream
#1154 · 0x19f6ca
MiniDumpWriteDump
#1155 · 0x19f6fb
RangeMapAddPeImageSections
#1156 · 0x1404d0
RangeMapCreate
#1157 · 0x140590
RangeMapFree
#1158 · 0x1405f0
RangeMapRead
#1159 · 0x140610
RangeMapRemove
#1160 · 0x140670
RangeMapWrite
#1161 · 0x1406c0
RemoveInvalidModuleList
#1162 · 0x18ef0
ReportSymbolLoadSummary
#1163 · 0x111910
SearchTreeForFile
#1164 · 0x128390
SearchTreeForFileW
#1165 · 0x1283c0
SetCheckUserInterruptShared
#1166 · 0x18ef0
SetSymLoadError
#1167 · 0x121630
StackWalk
#1168 · 0xdbf0
StackWalk64
#1169 · 0xdbf0
StackWalkEx
#1170 · 0xdd70
SymAddSourceStream
#1171 · 0x121640
SymAddSourceStreamA
#1172 · 0x121650
SymAddSourceStreamW
#1173 · 0x1216c0
SymAddSymbol
#1174 · 0x121860
SymAddSymbolW
#1175 · 0x1218e0
SymAddrIncludeInlineTrace
#1176 · 0x1219f0
SymCleanup
#1177 · 0xdba0
SymCompareInlineTrace
#1178 · 0x121b70
SymDeleteSymbol
#1179 · 0x1220c0
SymDeleteSymbolW
#1180 · 0x122130
SymEnumLines
#1181 · 0x122220
SymEnumLinesW
#1182 · 0x1222f0
SymEnumProcesses
#1183 · 0x122360
SymEnumSourceFileTokens
#1184 · 0x122400
SymEnumSourceFiles
#1185 · 0x1224b0
SymEnumSourceFilesW
#1186 · 0x1224e0
SymEnumSourceLines
#1187 · 0x122510
SymEnumSourceLinesW
#1188 · 0x122560
SymEnumSym
#1189 · 0x1225b0
SymEnumSymbols
#1190 · 0x1225e0
SymEnumSymbolsEx
#1191 · 0x122610
SymEnumSymbolsExW
#1192 · 0x1226b0
SymEnumSymbolsForAddr
#1193 · 0x122720
SymEnumSymbolsForAddrW
#1194 · 0x122850
SymEnumSymbolsW
#1195 · 0x122990
SymEnumTypes
#1196 · 0x1229c0
SymEnumTypesByName
#1197 · 0x122a10
SymEnumTypesByNameW
#1198 · 0x122ae0
SymEnumTypesW
#1199 · 0x122b40
SymEnumerateModules
#1200 · 0x122b90
SymEnumerateModules64
#1201 · 0x122b90
SymEnumerateModulesW64
#1202 · 0x122bd0
SymEnumerateSymbols
#1203 · 0x122c10
SymEnumerateSymbols64
#1204 · 0x122c10
SymEnumerateSymbolsW
#1205 · 0x122c60
SymEnumerateSymbolsW64
#1206 · 0x122c60
SymFindDebugInfoFile
#1207 · 0x1283f0
SymFindDebugInfoFileW
#1208 · 0x1284e0
SymFindExecutableImage
#1209 · 0x128570
SymFindExecutableImageW
#1210 · 0x128670
SymFindFileInPath
#1211 · 0x128700
SymFindFileInPathW
#1212 · 0x128840
SymFromAddr
#1213 · 0x122cb0
SymFromAddrW
#1214 · 0x122ce0
SymFromIndex
#1215 · 0x122d10
SymFromIndexW
#1216 · 0x122d80
SymFromInlineContext
#1217 · 0x122e80
SymFromInlineContextW
#1218 · 0x122ee0
SymFromName
#1219 · 0x19330
SymFromNameW
#1220 · 0x122f40
SymFromToken
#1221 · 0x122f70
SymFromTokenW
#1222 · 0x123020
SymFunctionTableAccess
#1223 · 0xe6e0
SymFunctionTableAccess64
#1224 · 0xe6e0
SymFunctionTableAccess64AccessRoutines
#1225 · 0xe700
SymGetExtendedOption
#1226 · 0x123130
SymGetFileLineOffsets64
#1227 · 0x11aa40
SymGetHomeDirectory
#1228 · 0x123150
SymGetHomeDirectoryW
#1229 · 0x1231d0
SymGetLineFromAddr
#1230 · 0x123290
SymGetLineFromAddr64
#1231 · 0x123290
SymGetLineFromAddrW64
#1232 · 0x1232c0
SymGetLineFromInlineContext
#1233 · 0x1232f0
SymGetLineFromInlineContextW
#1234 · 0x123330
SymGetLineFromName
#1235 · 0x123370
SymGetLineFromName64
#1236 · 0x123370
SymGetLineFromNameW64
#1237 · 0x1233a0
SymGetLineNext
#1238 · 0x1233d0
SymGetLineNext64
#1239 · 0x1233d0
SymGetLineNextW64
#1240 · 0x1233e0
SymGetLinePrev
#1241 · 0x123400
SymGetLinePrev64
#1242 · 0x123400
SymGetLinePrevW64
#1243 · 0x123410
SymGetModuleBase
#1244 · 0xf480
SymGetModuleBase64
#1245 · 0xf480
SymGetModuleInfo
#1246 · 0x123430
SymGetModuleInfo64
#1247 · 0x123430
SymGetModuleInfoW
#1248 · 0x104e0
SymGetModuleInfoW64
#1249 · 0x104e0
SymGetOmaps
#1250 · 0x1234c0
SymGetOptions
#1251 · 0x18d40
SymGetScope
#1252 · 0x1235b0
SymGetScopeW
#1253 · 0x123630
SymGetSearchPath
#1254 · 0x123760
SymGetSearchPathW
#1255 · 0x1237f0
SymGetSourceFile
#1256 · 0x123860
SymGetSourceFileChecksum
#1257 · 0x1238e0
SymGetSourceFileChecksumW
#1258 · 0x123970
SymGetSourceFileFromToken
#1259 · 0x123aa0
SymGetSourceFileFromTokenW
#1260 · 0x123b50
SymGetSourceFileToken
#1261 · 0x123bd0
SymGetSourceFileTokenW
#1262 · 0x123c40
SymGetSourceFileW
#1263 · 0x123d10
SymGetSourceVarFromToken
#1264 · 0x123d90
SymGetSourceVarFromTokenW
#1265 · 0x123e60
SymGetSymFromAddr
#1266 · 0x123f10
SymGetSymFromAddr64
#1267 · 0x123f10
SymGetSymFromName
#1268 · 0x123f50
SymGetSymFromName64
#1269 · 0x123f50
SymGetSymNext
#1270 · 0x123fc0
SymGetSymNext64
#1271 · 0x123fc0
SymGetSymPrev
#1272 · 0x123fe0
SymGetSymPrev64
#1273 · 0x123fe0
SymGetSymbolFile
#1274 · 0x12d480
SymGetSymbolFileW
#1275 · 0x12d5b0
SymGetTypeFromName
#1276 · 0x123ff0
SymGetTypeFromNameW
#1277 · 0x1240a0
SymGetTypeInfo
#1278 · 0x124210
SymGetTypeInfoEx
#1279 · 0x124250
SymGetUnwindInfo
#1280 · 0x124280
SymInitialize
#1281 · 0x115e0
SymInitializeW
#1282 · 0x177b0
SymLoadModule
#1283 · 0x1a900
SymLoadModule64
#1284 · 0x1a900
SymLoadModuleEx
#1285 · 0x1a940
SymLoadModuleExW
#1286 · 0x124410
SymMatchFileName
#1287 · 0x124470
SymMatchFileNameW
#1288 · 0x124580
SymMatchString
#1289 · 0x124670
SymMatchStringA
#1290 · 0x1246b0
SymMatchStringW
#1291 · 0x1246c0
SymNext
#1292 · 0x124700
SymNextW
#1293 · 0x1247a0
SymPrev
#1294 · 0x1247c0
SymPrevW
#1295 · 0x124860
SymQueryInlineTrace
#1296 · 0x124870
SymRefreshModuleList
#1297 · 0x124b80
SymRegisterCallback
#1298 · 0x124c00
SymRegisterCallback64
#1299 · 0x124c00
SymRegisterCallbackW64
#1300 · 0x124c80
SymRegisterFunctionEntryCallback
#1301 · 0x124d10
SymRegisterFunctionEntryCallback64
#1302 · 0x124d10
SymSearch
#1303 · 0x124d90
SymSearchW
#1304 · 0x124e50
SymSetContext
#1305 · 0x124ed0
SymSetExtendedOption
#1306 · 0x124f90
SymSetHomeDirectory
#1307 · 0x124fc0
SymSetHomeDirectoryW
#1308 · 0x125060
SymSetOptions
#1309 · 0x17c40
SymSetParentWindow
#1310 · 0x1250e0
SymSetScopeFromAddr
#1311 · 0x125110
SymSetScopeFromIndex
#1312 · 0x125120
SymSetScopeFromInlineContext
#1313 · 0x1251e0
SymSetSearchPath
#1314 · 0x1252a0
SymSetSearchPathW
#1315 · 0x17450
SymSrvDeltaName
#1316 · 0x12da60
SymSrvDeltaNameW
#1317 · 0x12db30
SymSrvGetFileIndexInfo
#1318 · 0x12dcd0
SymSrvGetFileIndexInfoW
#1319 · 0x12ddb0
SymSrvGetFileIndexString
#1320 · 0x12def0
SymSrvGetFileIndexStringW
#1321 · 0x12dfb0
SymSrvGetFileIndexes
#1322 · 0x12e080
SymSrvGetFileIndexesW
#1323 · 0x12e0f0
SymSrvGetSupplement
#1324 · 0x12e1b0
SymSrvGetSupplementW
#1325 · 0x12e270
SymSrvIsStore
#1326 · 0x12e390
SymSrvIsStoreW
#1327 · 0x12e3e0
SymSrvStoreFile
#1328 · 0x12e520
SymSrvStoreFileW
#1329 · 0x12e5c0
SymSrvStoreSupplement
#1330 · 0x12e680
SymSrvStoreSupplementW
#1331 · 0x12e750
SymUnDName
#1332 · 0x1252f0
SymUnDName64
#1333 · 0x1252f0
SymUnloadModule
#1334 · 0x125350
SymUnloadModule64
#1335 · 0x125350
UnDecorateSymbolName
#1336 · 0x8380
UnDecorateSymbolNameW
#1337 · 0x125440
WinDbgExtensionDllInit
#1338 · 0x116510
block
#1339 · 0x116560
chksym
#1340 · 0x116730
dbghelp
#1341 · 0x125580
dh
#1342 · 0x116920
fptr
#1343 · 0x116930
homedir
#1344 · 0x1169c0
inlinedbg
#1345 · 0x116af0
itoldyouso
#1346 · 0x116b60
lmi
#1347 · 0x116d50
lminfo
#1348 · 0x117070
omap
#1349 · 0x117290
optdbgdump
#1350 · 0x1174b0
optdbgdumpaddr
#1351 · 0x117600
srcfiles
#1352 · 0x117750
stack_force_ebp
#1353 · 0x117880
stackdbg
#1354 · 0x1179f0
sym
#1355 · 0x117bc0
symsrv
#1356 · 0x117d10
vc7fpo
#1357 · 0x117d60
No function matches your filter.
Imported DLLs & functions 242
DebugBreak
0x103169590
IsDebuggerPresent
0x103169598
OutputDebugStringA
0x103169580
OutputDebugStringW
0x103169588
DelayLoadFailureHook
0x1031695a8
GetLastError
0x1031695c0
SetErrorMode
0x1031695d8
SetLastError
0x1031695b8
SetUnhandledExceptionFilter
0x1031695c8
UnhandledExceptionFilter
0x1031695d0
CreateDirectoryA
0x103169690
CreateDirectoryW
0x103169650
CreateFileA
0x103169658
CreateFileW
0x103169670
DeleteFileW
0x103169638
FindClose
0x103169628
FindFirstFileW
0x103169660
FindNextFileW
0x1031695e8
GetFileAttributesA
0x103169618
GetFileAttributesW
0x103169668
GetFileSize
0x103169680
GetFileSizeEx
0x103169678
GetFileType
0x103169608
GetFullPathNameW
0x103169640
ReadFile
0x103169648
RemoveDirectoryW
0x103169688
SetEndOfFile
0x103169610
SetFileAttributesW
0x1031695f8
SetFilePointer
0x103169620
SetFilePointerEx
0x103169630
SetFileTime
0x103169600
WriteFile
0x1031695f0
GetProcessHeap
0x1031696d0
HeapAlloc
0x1031696c8
HeapFree
0x1031696b8
HeapReAlloc
0x1031696c0
InitializeSListHead
0x1031696e0
DeviceIoControl
0x1031696f0
CreateFileMappingA
0x103169700
FreeLibrary
0x103169720
GetModuleFileNameW
0x103169710
GetModuleHandleExW
0x103169730
GetModuleHandleW
0x103169728
GetProcAddress
0x103169738
LoadLibraryExA
0x103169740
LoadLibraryExW
0x103169718
RegCloseKey
0x103169778
RegEnumKeyExW
0x103169770
RegOpenKeyExW
0x103169768
RegQueryInfoKeyW
0x103169788
RegQueryValueExW
0x103169780
CreateFileMappingW
0x1031697b0
MapViewOfFile
0x1031697b8
MapViewOfFileEx
0x1031697c8
ReadProcessMemory
0x1031697d0
UnmapViewOfFile
0x1031697a8
VirtualAlloc
0x103169798
VirtualFree
0x1031697c0
VirtualProtect
0x1031697a0
FormatMessageW
0x1031697e8
LocalAlloc
0x1031697e0
Sleep
0x1031697f0
ExpandEnvironmentStringsW
0x103169810
GetEnvironmentVariableW
0x103169800
SetEnvironmentVariableA
0x103169808
GetCurrentProcess
0x103169820
GetCurrentProcessId
0x103169838
GetCurrentThread
0x103169858
GetCurrentThreadId
0x103169848
OpenThreadToken
0x103169828
TerminateProcess
0x103169860
TlsAlloc
0x103169868
TlsFree
0x103169840
TlsGetValue
0x103169850
TlsSetValue
0x103169830
QueryPerformanceCounter
0x103169878
RtlCaptureContext
0x103169888
RtlLookupFunctionEntry
0x103169898
RtlVirtualUnwind
0x103169890
GetStringTypeW
0x1031698b8
MultiByteToWideChar
0x1031698b0
WideCharToMultiByte
0x1031698a8
AcquireSRWLockExclusive
0x1031698d8
DeleteCriticalSection
0x1031698d0
EnterCriticalSection
0x1031698f0
InitializeCriticalSection
0x103169900
InitializeCriticalSectionAndSpinCount
0x103169908
InitializeCriticalSectionEx
0x1031698c8
LeaveCriticalSection
0x1031698f8
OpenProcess
0x1031698e0
ReleaseSRWLockExclusive
0x1031698e8
InitOnceExecuteOnce
0x103169918
GetSystemDirectoryW
0x103169950
GetSystemInfo
0x103169930
GetSystemTime
0x103169928
GetSystemTimeAsFileTime
0x103169940
GetTickCount
0x103169938
GetVersionExA
0x103169958
GetVersionExW
0x103169948
SystemTimeToFileTime
0x103169960
__C_specific_handler
0x103169cc8
__CxxFrameHandler3
0x103169cd0
__std_terminate
0x103169c80
__uncaught_exception
0x103169bc0
__unDName
0x103169cc0
__unDNameEx
0x103169ca8
_CxxThrowException
0x103169bc8
_o____lc_codepage_func
0x103169c68
_o____lc_locale_name_func
0x103169c60
_o____mb_cur_max_func
0x103169c58
_o___acrt_iob_func
0x103169c50
_o___pctype_func
0x103169c48
_o___std_exception_copy
0x103169c40
_o___std_exception_destroy
0x103169c38
_o___std_type_info_destroy_list
0x103169c30
_o___stdio_common_vfprintf
0x103169c28
_o___stdio_common_vsnprintf_s
0x103169c20
_o___stdio_common_vsnwprintf_s
0x103169c18
_o___stdio_common_vsprintf_s
0x103169c10
_o___stdio_common_vsscanf
0x103169c08
_o___stdio_common_vswprintf_s
0x103169c00
_o__callnewh
0x103169bf8
_o__calloc_base
0x103169bf0
_o__cexit
0x103169be8
_o__close
0x103169be0
_o__configure_narrow_argv
0x103169bd8
_o__crt_atexit
0x103169bd0
_o__errno
0x1031699a0
_o__execute_onexit_table
0x1031699a8
_o__filelengthi64
0x1031699b0
_o__fullpath
0x1031699b8
_o__initialize_narrow_environment
0x1031699c0
_o__initialize_onexit_table
0x1031699c8
_o__invalid_parameter_noinfo
0x1031699d0
_o__invalid_parameter_noinfo_noreturn
0x1031699d8
_o__itoa_s
0x1031699e0
_o__lseeki64
0x1031699e8
_o__ltoa
0x1031699f0
_o__mbscmp
0x1031699f8
_o__memicmp
0x103169a00
_o__open_osfhandle
0x103169a08
_o__purecall
0x103169a10
_o__read
0x103169a18
_o__register_onexit_function
0x103169a20
_o__seh_filter_dll
0x103169a28
_o__splitpath_s
0x103169a30
_o__stricmp
0x103169a38
_o__strlwr
0x103169a40
_o__strnicmp
0x103169a48
_o__wcsdup
0x103169a50
_o__wcsicmp
0x103169a58
_o__wcslwr
0x103169a60
_o__wcsnicmp
0x103169a68
_o__wctime64
0x103169a70
_o__wdupenv_s
0x103169a78
_o__wfsopen
0x103169a80
_o__wfullpath
0x103169a88
_o__wgetenv
0x103169a90
_o__wmakepath_s
0x103169a98
_o__wsplitpath_s
0x103169aa0
_o__wtoi
0x103169aa8
_o_abort
0x103169ab0
_o_atoi
0x103169ab8
_o_atol
0x103169ac0
_o_bsearch
0x103169ac8
_o_calloc
0x103169ad0
_o_fclose
0x103169ad8
_o_fflush
0x103169ae0
_o_fread
0x103169ae8
_o_free
0x103169af0
_o_frexp
0x103169af8
_o_fseek
0x103169b00
_o_ftell
0x103169b08
_o_isspace
0x103169b10
_o_iswprint
0x103169b18
_o_iswspace
0x103169b20
_o_iswxdigit
0x103169b28
_o_localeconv
0x103169b30
_o_malloc
0x103169b38
_o_qsort
0x103169b40
_o_realloc
0x103169b48
_o_setlocale
0x103169b50
_o_strcat_s
0x103169b58
_o_strcpy_s
0x103169b60
_o_strncat_s
0x103169b68
_o_strncpy_s
0x103169b70
_o_terminate
0x103169b78
_o_tolower
0x103169b80
_o_towlower
0x103169b88
_o_wcscat_s
0x103169b90
_o_wcscpy_s
0x103169b98
_o_wcsncat_s
0x103169ba0
_o_wcsncpy_s
0x103169ba8
_o_wcstoul
0x103169bb0
_o_wmemcpy_s
0x103169bb8
memcmp
0x103169ca0
memcpy
0x103169cd8
memmove
0x103169c98
strchr
0x103169cb8
strrchr
0x103169cb0
strstr
0x103169c78
wcschr
0x103169c90
wcsrchr
0x103169c70
wcsstr
0x103169c88
__doserrno
0x103169cf0
_initterm
0x103169ce8
_initterm_e
0x103169cf8
memset
0x103169d10
strcmp
0x103169d30
strcspn
0x103169d20
strlen
0x103169d18
strncmp
0x103169d08
wcscmp
0x103169d38
wcsncmp
0x103169d40
wcsnlen
0x103169d28
LocalFree
0x103169d68
EventActivityIdControl
0x103169d88
EventRegister
0x103169d80
EventUnregister
0x103169d90
EventWriteTransfer
0x103169d78
AccessCheck
0x103169da8
GetFileSecurityW
0x103169db8
ImpersonateSelf
0x103169db0
RevertToSelf
0x103169da0
NtQueryInformationProcess
0x103169dd0
NtQueryObject
0x103169df0
RtlCreateQueryDebugBuffer
0x103169dc8
RtlDestroyQueryDebugBuffer
0x103169dd8
RtlEqualUnicodeString
0x103169de8
RtlQueryProcessDebugInformation
0x103169df8
RtlRunOnceExecuteOnce
0x103169de0
RtlUTF8ToUnicodeN
0x103169e00
No function matches your filter.