dbghelp.dll
v10.0.18362.1
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 256
#1101 · 0x263e0
#1102 · 0x26520
#1103 · 0x268f0
#1104 · 0x26950
#1105 · 0x273e0
#1106 · 0x274a0
#1107 · 0x266f0
#1108 · 0x26fc0
#1109 · 0x27350
#1110 · 0x27410
SymAllocDiaString
#1111 · 0x2b7d0
SymFreeDiaString
#1112 · 0x2b7c0
SymGetDiaSession
#1113 · 0x2b620
SymGetLineFromAddrEx
#1114 · 0x266f0
#1115 · 0x265e0
#1116 · 0x26750
#1117 · 0x2a420
#1118 · 0x2a500
SymGetLineFromNameEx
#1119 · 0x26fc0
SymGetLineNextEx
#1120 · 0x27350
SymGetLinePrevEx
#1121 · 0x27410
SymGetOmapBlockBase
#1122 · 0x29190
SymSetDiaSession
#1123 · 0x2b6c0
_EFN_DumpImage
#1124 · 0x17c90
DbgHelpCreateUserDump
#1125 · 0x3abc0
DbgHelpCreateUserDumpW
#1126 · 0x3aca0
EnumDirTree
#1127 · 0x2e860
EnumDirTreeW
#1128 · 0x2e980
EnumerateLoadedModules
#1129 · 0x28580
EnumerateLoadedModules64
#1130 · 0x28580
EnumerateLoadedModulesEx
#1131 · 0x28680
EnumerateLoadedModulesExW
#1132 · 0x28700
EnumerateLoadedModulesW64
#1133 · 0x28600
ExtensionApiVersion
#1134 · 0x14400
FindDebugInfoFile
#1135 · 0x2d4b0
FindDebugInfoFileEx
#1136 · 0x2e220
FindDebugInfoFileExW
#1137 · 0x2e1d0
FindExecutableImage
#1138 · 0x2c560
FindExecutableImageEx
#1139 · 0x2d190
FindExecutableImageExW
#1140 · 0x2d2c0
FindFileInPath
#1141 · 0x2c4c0
FindFileInSearchPath
#1142 · 0x2c510
GetSymLoadError
#1143 · 0x2b980
GetTimestampForLoadedLibrary
#1144 · 0x1bef0
ImageDirectoryEntryToData
#1145 · 0x1ba70
ImageDirectoryEntryToDataEx
#1146 · 0x1b880
ImageNtHeader
#1147 · 0x1b760
ImageRvaToSection
#1148 · 0x1ba90
ImageRvaToVa
#1149 · 0x1baf0
ImagehlpApiVersion
#1150 · 0x2ec90
ImagehlpApiVersionEx
#1151 · 0x2eca0
MakeSureDirectoryPathExists
#1152 · 0x2eab0
MiniDumpReadDumpStream
#1153 · 0x1b1336
MiniDumpWriteDump
#1154 · 0x1b1367
RangeMapAddPeImageSections
#1155 · 0x4dec0
RangeMapCreate
#1156 · 0x4dde0
RangeMapFree
#1157 · 0x4de40
RangeMapRead
#1158 · 0x4dfb0
RangeMapRemove
#1159 · 0x4df60
RangeMapWrite
#1160 · 0x4e010
RemoveInvalidModuleList
#1161 · 0x7df0
ReportSymbolLoadSummary
#1162 · 0x95f0
SearchTreeForFile
#1163 · 0x2e9d0
SearchTreeForFileW
#1164 · 0x2ea00
SetCheckUserInterruptShared
#1165 · 0x7df0
SetSymLoadError
#1166 · 0x2b990
StackWalk
#1167 · 0x3ffc0
StackWalk64
#1168 · 0x3ffc0
StackWalkEx
#1169 · 0x3fcb0
SymAddSourceStream
#1170 · 0x25c50
SymAddSourceStreamA
#1171 · 0x25be0
SymAddSourceStreamW
#1172 · 0x25a70
SymAddSymbol
#1173 · 0x28b60
SymAddSymbolW
#1174 · 0x28a70
SymAddrIncludeInlineTrace
#1175 · 0x2a570
SymCleanup
#1176 · 0x23b50
SymCompareInlineTrace
#1177 · 0x2ab50
SymDeleteSymbol
#1178 · 0x28d10
SymDeleteSymbolW
#1179 · 0x28be0
SymEnumLines
#1180 · 0x26250
SymEnumLinesW
#1181 · 0x26320
SymEnumProcesses
#1182 · 0x24a00
SymEnumSourceFileTokens
#1183 · 0x25f00
SymEnumSourceFiles
#1184 · 0x2a3f0
SymEnumSourceFilesW
#1185 · 0x2a4d0
SymEnumSourceLines
#1186 · 0x26390
SymEnumSourceLinesW
#1187 · 0x264d0
SymEnumSym
#1188 · 0x29c80
SymEnumSymbols
#1189 · 0x29330
SymEnumSymbolsEx
#1190 · 0x29290
SymEnumSymbolsExW
#1191 · 0x29360
SymEnumSymbolsForAddr
#1192 · 0x29a30
SymEnumSymbolsForAddrW
#1193 · 0x29b50
SymEnumSymbolsW
#1194 · 0x293c0
SymEnumTypes
#1195 · 0x29e90
SymEnumTypesByName
#1196 · 0x29f30
SymEnumTypesByNameW
#1197 · 0x2a000
SymEnumTypesW
#1198 · 0x29ee0
SymEnumerateModules
#1199 · 0x24b80
SymEnumerateModules64
#1200 · 0x24b80
SymEnumerateModulesW64
#1201 · 0x24bc0
SymEnumerateSymbols
#1202 · 0x24d50
SymEnumerateSymbols64
#1203 · 0x24d50
SymEnumerateSymbolsW
#1204 · 0x24da0
SymEnumerateSymbolsW64
#1205 · 0x24da0
SymFindDebugInfoFile
#1206 · 0x2e2f0
SymFindDebugInfoFileW
#1207 · 0x2e3e0
SymFindExecutableImage
#1208 · 0x2d310
SymFindExecutableImageW
#1209 · 0x2d430
SymFindFileInPath
#1210 · 0x2c310
SymFindFileInPathW
#1211 · 0x2c450
SymFromAddr
#1212 · 0x28dd0
SymFromAddrW
#1213 · 0x28e40
SymFromIndex
#1214 · 0x29840
SymFromIndexW
#1215 · 0x298b0
SymFromInlineContext
#1216 · 0x28d80
SymFromInlineContextW
#1217 · 0x28df0
SymFromName
#1218 · 0x29000
SymFromNameW
#1219 · 0x29080
SymFromToken
#1220 · 0x28e60
SymFromTokenW
#1221 · 0x28f10
SymFunctionTableAccess
#1222 · 0x27700
SymFunctionTableAccess64
#1223 · 0x27700
SymFunctionTableAccess64AccessRoutines
#1224 · 0x27720
SymGetExtendedOption
#1225 · 0x23b90
SymGetFileLineOffsets64
#1226 · 0x1dc30
SymGetHomeDirectory
#1227 · 0x24450
SymGetHomeDirectoryW
#1228 · 0x24390
SymGetLineFromAddr
#1229 · 0x266c0
SymGetLineFromAddr64
#1230 · 0x266c0
SymGetLineFromAddrW64
#1231 · 0x268c0
SymGetLineFromInlineContext
#1232 · 0x265b0
SymGetLineFromInlineContextW
#1233 · 0x26720
SymGetLineFromName
#1234 · 0x26f90
SymGetLineFromName64
#1235 · 0x26f90
SymGetLineFromNameW64
#1236 · 0x26920
SymGetLineNext
#1237 · 0x27340
SymGetLineNext64
#1238 · 0x27340
SymGetLineNextW64
#1239 · 0x273c0
SymGetLinePrev
#1240 · 0x27400
SymGetLinePrev64
#1241 · 0x27400
SymGetLinePrevW64
#1242 · 0x27480
SymGetModuleBase
#1243 · 0x27df0
SymGetModuleBase64
#1244 · 0x27df0
SymGetModuleInfo
#1245 · 0x27ab0
SymGetModuleInfo64
#1246 · 0x27ab0
SymGetModuleInfoW
#1247 · 0x27b40
SymGetModuleInfoW64
#1248 · 0x27b40
SymGetOmaps
#1249 · 0x290b0
SymGetOptions
#1250 · 0x24690
SymGetScope
#1251 · 0x296b0
SymGetScopeW
#1252 · 0x29730
SymGetSearchPath
#1253 · 0x28100
SymGetSearchPathW
#1254 · 0x28180
SymGetSourceFile
#1255 · 0x256a0
SymGetSourceFileChecksum
#1256 · 0x258d0
SymGetSourceFileChecksumW
#1257 · 0x25960
SymGetSourceFileFromToken
#1258 · 0x25c60
SymGetSourceFileFromTokenW
#1259 · 0x25d10
SymGetSourceFileToken
#1260 · 0x257a0
SymGetSourceFileTokenW
#1261 · 0x25810
SymGetSourceFileW
#1262 · 0x25720
SymGetSourceVarFromToken
#1263 · 0x25d80
SymGetSourceVarFromTokenW
#1264 · 0x25e50
SymGetSymFromAddr
#1265 · 0x24ed0
SymGetSymFromAddr64
#1266 · 0x24ed0
SymGetSymFromName
#1267 · 0x25100
SymGetSymFromName64
#1268 · 0x25100
SymGetSymNext
#1269 · 0x25410
SymGetSymNext64
#1270 · 0x25410
SymGetSymPrev
#1271 · 0x25430
SymGetSymPrev64
#1272 · 0x25430
SymGetSymbolFile
#1273 · 0x3a5e0
SymGetSymbolFileW
#1274 · 0x3a110
SymGetTypeFromName
#1275 · 0x2a060
SymGetTypeFromNameW
#1276 · 0x2a130
SymGetTypeInfo
#1277 · 0x2b430
SymGetTypeInfoEx
#1278 · 0x2b7f0
SymGetUnwindInfo
#1279 · 0x27920
SymInitialize
#1280 · 0x23960
SymInitializeW
#1281 · 0x23700
SymLoadModule
#1282 · 0x28070
SymLoadModule64
#1283 · 0x28070
SymLoadModuleEx
#1284 · 0x27f30
SymLoadModuleExW
#1285 · 0x28010
SymMatchFileName
#1286 · 0x274c0
SymMatchFileNameW
#1287 · 0x275b0
SymMatchString
#1288 · 0x2a280
SymMatchStringA
#1289 · 0x2a2c0
SymMatchStringW
#1290 · 0x2a2d0
SymNext
#1291 · 0x251a0
SymNextW
#1292 · 0x25240
SymPrev
#1293 · 0x25260
SymPrevW
#1294 · 0x25300
SymQueryInlineTrace
#1295 · 0x2a7b0
SymRefreshModuleList
#1296 · 0x23610
SymRegisterCallback
#1297 · 0x28780
SymRegisterCallback64
#1298 · 0x28780
SymRegisterCallbackW64
#1299 · 0x287f0
SymRegisterFunctionEntryCallback
#1300 · 0x27690
SymRegisterFunctionEntryCallback64
#1301 · 0x27690
SymSearch
#1302 · 0x29570
SymSearchW
#1303 · 0x29630
SymSetContext
#1304 · 0x246a0
SymSetExtendedOption
#1305 · 0x23bb0
SymSetHomeDirectory
#1306 · 0x242f0
SymSetHomeDirectoryW
#1307 · 0x24270
SymSetOptions
#1308 · 0x244d0
SymSetParentWindow
#1309 · 0x23bd0
SymSetScopeFromAddr
#1310 · 0x24810
SymSetScopeFromIndex
#1311 · 0x24820
SymSetScopeFromInlineContext
#1312 · 0x24750
SymSetSearchPath
#1313 · 0x281e0
SymSetSearchPathW
#1314 · 0x28220
SymSrvDeltaName
#1315 · 0x394e0
SymSrvDeltaNameW
#1316 · 0x392d0
SymSrvGetFileIndexInfo
#1317 · 0x3a7f0
SymSrvGetFileIndexInfoW
#1318 · 0x3a8c0
SymSrvGetFileIndexString
#1319 · 0x39c60
SymSrvGetFileIndexStringW
#1320 · 0x39b40
SymSrvGetFileIndexes
#1321 · 0x39ad0
SymSrvGetFileIndexesW
#1322 · 0x39a10
SymSrvGetSupplement
#1323 · 0x396e0
SymSrvGetSupplementW
#1324 · 0x395c0
SymSrvIsStore
#1325 · 0x39290
SymSrvIsStoreW
#1326 · 0x391a0
SymSrvStoreFile
#1327 · 0x39df0
SymSrvStoreFileW
#1328 · 0x39d20
SymSrvStoreSupplement
#1329 · 0x39940
SymSrvStoreSupplementW
#1330 · 0x397b0
SymUnDName
#1331 · 0x280b0
SymUnDName64
#1332 · 0x280b0
SymUnloadModule
#1333 · 0x27e50
SymUnloadModule64
#1334 · 0x27e50
UnDecorateSymbolName
#1335 · 0x2b840
UnDecorateSymbolNameW
#1336 · 0x2b8d0
WinDbgExtensionDllInit
#1337 · 0x14410
block
#1338 · 0x16490
chksym
#1339 · 0x162c0
dbghelp
#1340 · 0x24980
dh
#1341 · 0x17c80
fptr
#1342 · 0x14460
homedir
#1343 · 0x16880
inlinedbg
#1344 · 0x16080
itoldyouso
#1345 · 0x160f0
lmi
#1346 · 0x14fe0
lminfo
#1347 · 0x14cd0
omap
#1348 · 0x16670
optdbgdump
#1349 · 0x1a280
optdbgdumpaddr
#1350 · 0x1a3c0
srcfiles
#1351 · 0x16a20
stack_force_ebp
#1352 · 0x14840
stackdbg
#1353 · 0x14670
sym
#1354 · 0x14ab0
symsrv
#1355 · 0x14c10
vc7fpo
#1356 · 0x14630
No function matches your filter.
Imported DLLs & functions 233
DebugBreak
0x103173710
IsDebuggerPresent
0x103173720
OutputDebugStringA
0x103173718
OutputDebugStringW
0x103173728
GetLastError
0x103173740
RaiseException
0x103173738
SetErrorMode
0x103173760
SetLastError
0x103173758
SetUnhandledExceptionFilter
0x103173748
UnhandledExceptionFilter
0x103173750
CreateDirectoryA
0x103173788
CreateDirectoryW
0x1031737d8
CreateFileA
0x1031737c0
CreateFileW
0x1031737e8
DeleteFileW
0x1031737e0
FindClose
0x1031737a0
FindFirstFileW
0x1031737b8
FindNextFileW
0x103173780
GetFileAttributesA
0x1031737f8
GetFileAttributesW
0x103173778
GetFileSize
0x103173818
GetFileSizeEx
0x1031737f0
GetFileType
0x103173790
GetFullPathNameW
0x103173770
ReadFile
0x103173810
RemoveDirectoryW
0x103173798
SetEndOfFile
0x1031737a8
SetFileAttributesW
0x103173800
SetFilePointer
0x1031737d0
SetFilePointerEx
0x1031737c8
SetFileTime
0x103173808
WriteFile
0x1031737b0
GetProcessHeap
0x103173848
HeapAlloc
0x103173850
HeapFree
0x103173858
HeapReAlloc
0x103173840
InitializeSListHead
0x103173868
DeviceIoControl
0x103173878
FreeLibrary
0x1031738a0
GetModuleFileNameW
0x103173890
GetModuleHandleA
0x1031738b0
GetModuleHandleExW
0x1031738c0
GetModuleHandleW
0x1031738b8
GetProcAddress
0x1031738a8
LoadLibraryExA
0x103173888
LoadLibraryExW
0x103173898
RegCloseKey
0x1031738f8
RegEnumKeyExW
0x103173900
RegOpenKeyExW
0x1031738e8
RegQueryInfoKeyW
0x1031738f0
RegQueryValueExW
0x103173908
CreateFileMappingW
0x103173928
MapViewOfFile
0x103173920
MapViewOfFileEx
0x103173958
ReadProcessMemory
0x103173948
UnmapViewOfFile
0x103173930
VirtualAlloc
0x103173940
VirtualFree
0x103173918
VirtualProtect
0x103173950
VirtualQuery
0x103173938
FormatMessageW
0x103173978
LocalAlloc
0x103173970
LocalFree
0x103173968
Sleep
0x103173980
ExpandEnvironmentStringsW
0x103173998
GetEnvironmentVariableW
0x1031739a0
SetEnvironmentVariableA
0x103173990
GetCurrentProcess
0x1031739b0
GetCurrentProcessId
0x1031739f0
GetCurrentThread
0x1031739d0
GetCurrentThreadId
0x1031739e0
OpenThreadToken
0x1031739e8
TerminateProcess
0x1031739b8
TlsAlloc
0x1031739c8
TlsFree
0x1031739c0
TlsGetValue
0x1031739f8
TlsSetValue
0x1031739d8
QueryPerformanceCounter
0x103173a08
RtlCaptureContext
0x103173a18
RtlLookupFunctionEntry
0x103173a20
RtlVirtualUnwind
0x103173a28
GetStringTypeW
0x103173a48
MultiByteToWideChar
0x103173a40
WideCharToMultiByte
0x103173a38
AcquireSRWLockExclusive
0x103173a70
DeleteCriticalSection
0x103173a68
EnterCriticalSection
0x103173a98
InitializeCriticalSection
0x103173a58
InitializeCriticalSectionAndSpinCount
0x103173a60
InitializeCriticalSectionEx
0x103173a78
LeaveCriticalSection
0x103173a90
OpenProcess
0x103173a80
ReleaseSRWLockExclusive
0x103173a88
InitOnceExecuteOnce
0x103173aa8
GetSystemDirectoryW
0x103173ae0
GetSystemInfo
0x103173ad0
GetSystemTime
0x103173af0
GetSystemTimeAsFileTime
0x103173ac0
GetTickCount
0x103173ab8
GetVersionExA
0x103173ad8
GetVersionExW
0x103173ae8
SystemTimeToFileTime
0x103173ac8
__C_specific_handler
0x103173e38
__CxxFrameHandler3
0x103173e40
__uncaught_exception
0x103173d60
__unDName
0x103173e60
_CxxThrowException
0x103173d68
_o____lc_codepage_func
0x103173e10
_o____lc_locale_name_func
0x103173e08
_o____mb_cur_max_func
0x103173e00
_o___acrt_iob_func
0x103173df8
_o___pctype_func
0x103173db8
_o___std_exception_copy
0x103173db0
_o___std_exception_destroy
0x103173da8
_o___std_type_info_destroy_list
0x103173da0
_o___stdio_common_vfprintf
0x103173d98
_o___stdio_common_vsnprintf_s
0x103173d90
_o___stdio_common_vsnwprintf_s
0x103173d88
_o___stdio_common_vsprintf_s
0x103173d80
_o___stdio_common_vsscanf
0x103173d78
_o___stdio_common_vswprintf_s
0x103173d70
_o__callnewh
0x103173df0
_o__calloc_base
0x103173de8
_o__cexit
0x103173de0
_o__chsize_s
0x103173dd8
_o__close
0x103173dd0
_o__configure_narrow_argv
0x103173dc8
_o__crt_atexit
0x103173dc0
_o__errno
0x103173e48
_o__execute_onexit_table
0x103173b30
_o__filelengthi64
0x103173b38
_o__fullpath
0x103173b40
_o__get_osfhandle
0x103173b48
_o__initialize_narrow_environment
0x103173b50
_o__initialize_onexit_table
0x103173b58
_o__invalid_parameter_noinfo
0x103173b60
_o__invalid_parameter_noinfo_noreturn
0x103173b68
_o__itoa_s
0x103173b70
_o__lseeki64
0x103173b78
_o__ltoa
0x103173b80
_o__mbscmp
0x103173b88
_o__memicmp
0x103173b90
_o__open_osfhandle
0x103173b98
_o__purecall
0x103173ba0
_o__read
0x103173ba8
_o__register_onexit_function
0x103173bb0
_o__seh_filter_dll
0x103173bb8
_o__splitpath_s
0x103173bc0
_o__stricmp
0x103173bc8
_o__strlwr
0x103173bd0
_o__strnicmp
0x103173bd8
_o__wcsdup
0x103173be0
_o__wcsicmp
0x103173be8
_o__wcslwr
0x103173bf0
_o__wcsnicmp
0x103173bf8
_o__wctime64
0x103173c00
_o__wdupenv_s
0x103173c08
_o__wfsopen
0x103173c10
_o__wfullpath
0x103173c18
_o__wgetenv
0x103173c20
_o__wmakepath_s
0x103173c28
_o__write
0x103173c30
_o__wsopen_s
0x103173c38
_o__wsplitpath_s
0x103173c40
_o__wtoi
0x103173c48
_o_abort
0x103173c50
_o_atoi
0x103173c58
_o_atol
0x103173c60
_o_bsearch
0x103173c68
_o_calloc
0x103173c70
_o_fclose
0x103173c78
_o_fflush
0x103173c80
_o_fread
0x103173c88
_o_free
0x103173c90
_o_frexp
0x103173c98
_o_fseek
0x103173ca0
_o_ftell
0x103173ca8
_o_isspace
0x103173cb0
_o_iswprint
0x103173cb8
_o_iswspace
0x103173cc0
_o_iswxdigit
0x103173cc8
_o_localeconv
0x103173cd0
_o_malloc
0x103173cd8
_o_qsort
0x103173ce0
_o_realloc
0x103173ce8
_o_setlocale
0x103173cf0
_o_strcat_s
0x103173cf8
_o_strcpy_s
0x103173d00
_o_strncat_s
0x103173d08
_o_strncpy_s
0x103173d10
_o_terminate
0x103173d18
_o_tolower
0x103173d20
_o_towlower
0x103173d28
_o_wcscat_s
0x103173d30
_o_wcscpy_s
0x103173d38
_o_wcsncat_s
0x103173d40
_o_wcsncpy_s
0x103173d48
_o_wcstoul
0x103173d50
_o_wmemcpy_s
0x103173d58
memcmp
0x103173e70
memcpy
0x103173e58
memmove
0x103173e68
strchr
0x103173e50
strrchr
0x103173e78
strstr
0x103173e20
wcschr
0x103173e30
wcsrchr
0x103173e18
wcsstr
0x103173e28
__doserrno
0x103173e88
_initterm
0x103173e98
_initterm_e
0x103173e90
memset
0x103173ec0
strcmp
0x103173ed0
strcspn
0x103173eb8
strncmp
0x103173ea8
wcscmp
0x103173ec8
wcsncmp
0x103173ed8
wcsnlen
0x103173eb0
AccessCheck
0x103173f08
GetFileSecurityW
0x103173f10
ImpersonateSelf
0x103173f18
RevertToSelf
0x103173f00
RtlRunOnceExecuteOnce
0x103173f28
No function matches your filter.