apphelp.dll
v10.0.19041.6157
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 236
#19 · 0x21b80
#20 · 0xd440
#21 · 0x215e0
#22 · 0x21b20
#23 · 0x10bd0
#24 · 0x23a00
#25 · 0x23c50
#26 · 0x29eb0
#27 · 0x20c90
#28 · 0x2af00
#29 · 0x2e6a0
#30 · 0x2ea10
#31 · 0x2dec0
#32 · 0x2a2e0
#33 · 0x2a310
#34 · 0x10cc0
AllowPermLayer
#35 · 0x1ff30
ApphelpCheckExe
#36 · 0x36e00
ApphelpCheckIME
#37 · 0x1e620
ApphelpCheckInstallShieldPackage
#38 · 0x1e670
ApphelpCheckModule
#39 · 0x36e30
ApphelpCheckMsiPackage
#40 · 0x1e8a0
ApphelpCheckRunApp
#41 · 0x37000
ApphelpCheckRunAppEx
#42 · 0x37090
ApphelpCheckShellObject
#43 · 0x3f50
ApphelpChpeModSettingsFromQueryResult
#44 · 0x37fd0
ApphelpCreateAppcompatData
#45 · 0x2290
ApphelpFixMsiPackage
#46 · 0x1eb80
ApphelpFixMsiPackageExe
#47 · 0x1ee50
ApphelpFreeFileAttributes
#48 · 0x20150
ApphelpGetFileAttributes
#49 · 0x20160
ApphelpGetMsiProperties
#50 · 0x1f0f0
ApphelpGetNTVDMInfo
#51 · 0x1f1b0
ApphelpGetShimDebugLevel
#52 · 0x20c20
ApphelpIsPortMonAllowed
#53 · 0x1f300
ApphelpParseModuleData
#54 · 0x374d0
ApphelpQueryModuleData
#55 · 0x37600
ApphelpQueryModuleDataEx
#56 · 0x37640
ApphelpShowDialog
#57 · 0x20170
ApphelpUpdateCacheEntry
#58 · 0x20020
GetPermLayers
#59 · 0x20050
SE_AddHookset
#60 · 0x39260
SE_CALLBACK_AddHook
#61 · 0x393e0
SE_CALLBACK_Lookup
#62 · 0x39490
SE_COM_AddHook
#63 · 0x39510
SE_COM_AddServer
#64 · 0x395a0
SE_COM_HookInterface
#65 · 0x39650
SE_COM_HookObject
#66 · 0x396e0
SE_COM_Lookup
#67 · 0x39770
SE_DllLoaded
#68 · 0x6300
SE_DllUnloaded
#69 · 0x397e0
SE_DynamicShim
#70 · 0x39830
SE_GetHookAPIs
#71 · 0x39b40
SE_GetMaxShimCount
#72 · 0x39ce0
SE_GetProcAddressForCaller
#73 · 0x16d0
SE_GetProcAddressIgnoreIncExc
#74 · 0x39cf0
SE_GetProcAddressLoad
#75 · 0x39d70
SE_GetShimCount
#76 · 0x39dc0
SE_GetShimId
#77 · 0x1cd0
SE_InitializeEngine
#78 · 0x2930
SE_InstallAfterInit
#79 · 0xda00
SE_InstallBeforeInit
#80 · 0xf760
SE_IsShimDll
#81 · 0x39ed0
SE_LdrEntryRemoved
#82 · 0xdd90
SE_LdrResolveDllName
#83 · 0xecc0
SE_LookupAddress
#84 · 0x39f30
SE_LookupCaller
#85 · 0x3a040
SE_ProcessDying
#86 · 0x3a1e0
SE_ShimDPF
#87 · 0xe300
SE_ShimDllLoaded
#88 · 0x1c60
SE_WINRT_AddHook
#89 · 0x3a270
SE_WINRT_HookObject
#90 · 0x3a390
SdbAddLayerTagRefToQuery
#91 · 0x14f0
SdbApphelpNotify
#92 · 0x25fd0
SdbApphelpNotifyEx
#93 · 0x26050
SdbApphelpNotifyEx2
#94 · 0x260d0
SdbBeginWriteListTag
#95 · 0x21630
SdbBuildCompatEnvVariables
#96 · 0x29ab0
SdbCloseApphelpInformation
#97 · 0x262b0
SdbCloseDatabase
#98 · 0x4e90
SdbCloseDatabaseWrite
#99 · 0x21930
SdbCloseLocalDatabase
#100 · 0x2b3b0
SdbCommitIndexes
#101 · 0x21940
SdbCreateDatabase
#102 · 0x21a00
SdbCreateHelpCenterURL
#103 · 0x26380
SdbCreateMsiTransformFile
#104 · 0x2bd60
SdbDeclareIndex
#105 · 0x21b60
SdbDeletePermLayerKeys
#106 · 0x29d50
SdbDumpSearchPathPartCaches
#107 · 0x201b0
SdbEndWriteListTag
#108 · 0x21f30
SdbEnumMsiTransforms
#109 · 0x2bec0
SdbEscapeApphelpURL
#110 · 0x26a80
SdbFindCustomActionForPackage
#111 · 0x2c070
SdbFindFirstDWORDIndexedTag
#112 · 0x2cdf0
SdbFindFirstGUIDIndexedTag
#113 · 0x2cec0
SdbFindFirstMsiPackage
#114 · 0x2c150
SdbFindFirstMsiPackage_Str
#115 · 0x2c1c0
SdbFindFirstNamedTag
#116 · 0x9140
SdbFindFirstStringIndexedTag
#117 · 0xd390
SdbFindFirstTag
#118 · 0x9430
SdbFindFirstTagRef
#119 · 0x7d40
SdbFindMsiPackageByID
#120 · 0x2c250
SdbFindNextDWORDIndexedTag
#121 · 0x2cf90
SdbFindNextGUIDIndexedTag
#122 · 0x2cfd0
SdbFindNextMsiPackage
#123 · 0x2c2e0
SdbFindNextStringIndexedTag
#124 · 0x2d010
SdbFindNextTag
#125 · 0x8ed0
SdbFindNextTagRef
#126 · 0xb610
SdbFormatAttribute
#127 · 0x2da00
SdbFreeDatabaseInformation
#128 · 0x2aa90
SdbFreeFileAttributes
#129 · 0x2eb20
SdbFreeFileInfo
#130 · 0x201b0
SdbFreeFlagInfo
#131 · 0x23b60
SdbGUIDFromString
#132 · 0x20c30
SdbGUIDToString
#133 · 0x20c60
SdbGetAppCompatDataSize
#134 · 0x39030
SdbGetAppPatchDir
#135 · 0x2f610
SdbGetBinaryTagData
#136 · 0x7660
SdbGetDatabaseGUID
#137 · 0x23ba0
SdbGetDatabaseID
#138 · 0x7140
SdbGetDatabaseInformation
#139 · 0x2aad0
SdbGetDatabaseInformationByName
#140 · 0x2aae0
SdbGetDatabaseMatch
#141 · 0x313e0
SdbGetDatabaseVersion
#142 · 0x2ad70
SdbGetDllPath
#143 · 0x2b3d0
SdbGetEntryFlags
#144 · 0x35050
SdbGetFileAttributes
#145 · 0x2ebd0
SdbGetFileImageType
#146 · 0x2eed0
SdbGetFileImageTypeEx
#147 · 0x2eef0
SdbGetFileInfo
#148 · 0x20c20
SdbGetFirstChild
#149 · 0x8d30
SdbGetImageType
#150 · 0x2b3f0
SdbGetIndex
#151 · 0xd5e0
SdbGetItemFromItemRef
#152 · 0x7dd0
SdbGetLayerName
#153 · 0x2f680
SdbGetLayerTagRef
#154 · 0x23cf0
SdbGetLocalPDB
#155 · 0x23de0
SdbGetMatchingExe
#156 · 0x2dda0
SdbGetMsiPackageInformation
#157 · 0x2c3a0
SdbGetNamedLayer
#158 · 0x24360
SdbGetNextChild
#159 · 0x8820
SdbGetNthUserSdb
#160 · 0x2f750
SdbGetPDBFromGUID
#161 · 0x243e0
SdbGetPathCustomSdb
#162 · 0x2f7d0
SdbGetPathSystemSdb
#163 · 0x4890
SdbGetPermLayerKeys
#164 · 0x2a020
SdbGetShowDebugInfoOption
#165 · 0x20c20
SdbGetShowDebugInfoOptionValue
#166 · 0x20c20
SdbGetStandardDatabaseGUID
#167 · 0x2f8f0
SdbGetStringTagPtr
#168 · 0x8890
SdbGetTagDataSize
#169 · 0x95d0
SdbGetTagFromTagID
#170 · 0x9b30
SdbGrabMatchingInfo
#171 · 0x35210
SdbGrabMatchingInfoEx
#172 · 0x35240
SdbInitDatabase
#173 · 0x1fee0
SdbInitDatabaseEx
#174 · 0x4c00
SdbIsDbRuntimePlatformSupportedOnHost
#175 · 0x315e0
SdbIsNullGUID
#176 · 0x47c80
SdbIsStandardDatabase
#177 · 0x2f970
SdbIsTagrefFromLocalDB
#178 · 0x24490
SdbIsTagrefFromMainDB
#179 · 0x244b0
SdbLoadString
#180 · 0x26c90
SdbMakeIndexKeyFromString
#181 · 0x2d050
SdbOpenApphelpDetailsDatabase
#182 · 0x26da0
SdbOpenApphelpDetailsDatabaseSP
#183 · 0x20cc0
SdbOpenApphelpInformation
#184 · 0x26e30
SdbOpenApphelpInformationByID
#185 · 0x27070
SdbOpenApphelpResourceFile
#186 · 0x271d0
SdbOpenDatabase
#187 · 0x2b010
SdbOpenDbFromGuid
#188 · 0x272c0
SdbOpenLocalDatabase
#189 · 0x2b4d0
SdbPackAppCompatData
#190 · 0xcbd0
SdbQueryApphelpInformation
#191 · 0x273c0
SdbQueryBlockUpgrade
#192 · 0x247d0
SdbQueryContext
#193 · 0x24860
SdbQueryData
#194 · 0xb410
SdbQueryDataEx
#195 · 0xb360
SdbQueryDataExTagID
#196 · 0xb220
SdbQueryFlagInfo
#197 · 0x24af0
SdbQueryFlagMask
#198 · 0x24b40
SdbQueryName
#199 · 0x363a0
SdbQueryReinstallUpgrade
#200 · 0x25180
SdbReadApphelpData
#201 · 0x276c0
SdbReadApphelpDetailsData
#202 · 0x27830
SdbReadBYTETag
#203 · 0x30ea0
SdbReadBYTETagRef
#204 · 0x30f40
SdbReadBinaryTag
#205 · 0xa8c0
SdbReadDWORDTag
#206 · 0x8730
SdbReadDWORDTagRef
#207 · 0x1680
SdbReadEntryInformation
#208 · 0x31680
SdbReadMsiTransformInfo
#209 · 0x2c520
SdbReadPatchBits
#210 · 0x2b500
SdbReadQWORDTag
#211 · 0xd0d0
SdbReadQWORDTagRef
#212 · 0xd150
SdbReadStringTag
#213 · 0xcfc0
SdbReadStringTagRef
#214 · 0xd050
SdbReadWORDTag
#215 · 0x87a0
SdbReadWORDTagRef
#216 · 0x310b0
SdbRegisterDatabase
#217 · 0x2e020
SdbRegisterDatabaseEx
#218 · 0x2e030
SdbReleaseDatabase
#219 · 0x4d70
SdbReleaseMatchingExe
#220 · 0x252c0
SdbResolveDatabase
#221 · 0x2fa00
SdbSetApphelpDebugParameters
#222 · 0x27c90
SdbSetEntryFlags
#223 · 0x2fe20
SdbSetImageType
#224 · 0x2b700
SdbSetPermLayerKeys
#225 · 0x2a0e0
SdbShowApphelpDialog
#226 · 0x27dd0
SdbShowApphelpFromQuery
#227 · 0x2610
SdbStartIndexing
#228 · 0x227e0
SdbStopIndexing
#229 · 0x22810
SdbStringDuplicate
#230 · 0x20cd0
SdbStringReplace
#231 · 0x20d10
SdbStringReplaceArray
#232 · 0x20d50
SdbTagIDToTagRef
#233 · 0x8050
SdbTagRefToTagID
#234 · 0x9b70
SdbTagToString
#235 · 0x2efb0
SdbUnpackAppCompatData
#236 · 0x2440
SdbUnpackQueryResult
#237 · 0x2520
SdbUnregisterDatabase
#238 · 0x2e830
SdbWriteBYTETag
#239 · 0x22840
SdbWriteBinaryTag
#240 · 0x22890
SdbWriteBinaryTagFromFile
#241 · 0x228d0
SdbWriteDWORDTag
#242 · 0x22ab0
SdbWriteNULLTag
#243 · 0x22b00
SdbWriteQWORDTag
#244 · 0x22b50
SdbWriteStringRefTag
#245 · 0x22ba0
SdbWriteStringTag
#246 · 0x22bf0
SdbWriteStringTagDirect
#247 · 0x22c60
SdbWriteWORDTag
#248 · 0x22cc0
SetPermLayerState
#249 · 0x20060
SetPermLayerStateEx
#250 · 0x20090
SetPermLayers
#251 · 0x200e0
ShimDbgPrint
#252 · 0x20d90
ShimDumpCache
#253 · 0x201b0
ShimFlushCache
#254 · 0x37fb0
No function matches your filter.
Imported DLLs & functions 230
BaseFlushAppcompatCache
0x180054118
BaseIsAppcompatInfrastructureDisabled
0x180054110
BaseFreeAppCompatDataForProcess
0x180054128
BaseReadAppCompatDataForProcess
0x180054130
GetLastError
0x180054160
SetLastError
0x180054158
SetUnhandledExceptionFilter
0x180054170
UnhandledExceptionFilter
0x180054168
CreateFileW
0x1800541b8
DeleteFileW
0x180054198
FindClose
0x1800541c0
FindFirstFileW
0x180054180
FindNextFileW
0x1800541c8
GetDriveTypeW
0x1800541d0
GetFileAttributesW
0x1800541a8
GetFinalPathNameByHandleW
0x180054188
GetLongPathNameW
0x1800541b0
SetFilePointer
0x180054190
WriteFile
0x1800541a0
GetTempPathW
0x1800541e0
CloseHandle
0x1800541f0
GetProcessHeap
0x180054200
HeapAlloc
0x180054210
HeapFree
0x180054208
DisableThreadLibraryCalls
0x180054220
FreeLibrary
0x180054240
GetModuleFileNameW
0x180054228
GetModuleHandleExW
0x180054260
GetModuleHandleW
0x180054248
GetProcAddress
0x180054250
LoadLibraryExW
0x180054238
LoadResource
0x180054258
LockResource
0x180054268
SizeofResource
0x180054230
FindResourceW
0x180054278
GetUserDefaultUILanguage
0x1800542a0
ExpandEnvironmentStringsW
0x1800542b8
FreeEnvironmentStringsW
0x1800542c0
GetCurrentDirectoryW
0x1800542c8
GetEnvironmentStringsW
0x1800542b0
CreateProcessW
0x180054308
GetCurrentProcess
0x1800542f0
GetCurrentProcessId
0x1800542e0
GetCurrentThreadId
0x180054300
GetProcessTimes
0x1800542e8
ProcessIdToSessionId
0x1800542d8
TerminateProcess
0x1800542f8
OpenProcess
0x180054318
QueryPerformanceCounter
0x180054328
DeleteCriticalSection
0x180054350
EnterCriticalSection
0x180054338
InitializeCriticalSection
0x180054340
LeaveCriticalSection
0x180054360
OpenMutexW
0x180054348
WaitForSingleObject
0x180054358
Sleep
0x180054370
GetSystemDirectoryW
0x180054388
GetSystemTimeAsFileTime
0x180054398
GetSystemWindowsDirectoryW
0x1800543a0
GetTickCount
0x180054390
GetTickCount64
0x180054380
EventRegister
0x1800543c8
EventSetInformation
0x1800543b8
EventUnregister
0x1800543c0
EventWriteTransfer
0x1800543b0
CancelIo
0x1800540e8
GetOverlappedResult
0x1800540e0
GetPackageFullName
0x180054100
PackageIdFromFullName
0x1800540f0
SetNamedPipeHandleState
0x1800540f8
WaitNamedPipeW
0x1800540d8
ntdll.dll
155
__C_specific_handler
0x180054740
_stricmp
0x180054428
_vscwprintf
0x180054708
_vsnprintf
0x180054430
_vsnwprintf
0x180054800
_wcsicmp
0x180054828
_wcslwr
0x1800544b8
_wcsnicmp
0x180054808
_wtoi
0x180054678
EtwEventEnabled
0x180054818
EtwEventRegister
0x180054820
EtwEventUnregister
0x180054810
EtwEventWrite
0x1800547f8
EtwEventWriteNoRegistration
0x180054480
LdrEnumerateLoadedModules
0x180054568
LdrFindEntryForAddress
0x180054408
LdrGetDllHandle
0x180054838
LdrGetProcedureAddress
0x180054518
LdrGetProcedureAddressEx
0x180054500
LdrInitShimEngineDynamic
0x180054468
LdrLoadDll
0x1800544e8
LdrResSearchResource
0x180054638
memcmp
0x180054898
memcpy
0x1800548a0
memmove
0x1800547d0
memset
0x1800548a8
NtApphelpCacheControl
0x1800547b8
NtClose
0x180054840
NtCreateFile
0x180054790
NtCreateKey
0x1800546a0
NtDeleteKey
0x180054690
NtDeleteValueKey
0x1800546d8
NtOpenFile
0x180054530
NtOpenKey
0x180054858
NtProtectVirtualMemory
0x180054558
NtQueryAttributesFile
0x180054488
NtQueryInformationFile
0x1800546f8
NtQueryObject
0x180054490
NtQuerySecurityObject
0x180054538
NtQueryValueKey
0x180054850
NtReadFile
0x180054760
NtSetInformationKey
0x180054698
NtSetValueKey
0x1800546e0
NtWriteFile
0x180054750
qsort
0x180054748
RtlAcquireSRWLockExclusive
0x180054570
RtlAcquireSRWLockShared
0x180054580
RtlAddVectoredExceptionHandler
0x180054498
RtlAllocateAndInitializeSid
0x1800544d0
RtlAllocateHeap
0x180054880
RtlAnsiStringToUnicodeString
0x180054460
RtlAppendUnicodeStringToString
0x1800546a8
RtlAppendUnicodeToString
0x1800544a8
RtlCaptureContext
0x1800547e8
RtlCaptureStackBackTrace
0x180054450
RtlCheckTokenMembership
0x1800544d8
RtlCompareMemory
0x180054550
RtlCopyUnicodeString
0x180054878
RtlCreateEnvironmentEx
0x180054788
RtlCreateServiceSid
0x180054528
RtlCreateUnicodeString
0x1800546f0
RtlDeleteCriticalSection
0x180054418
RtlDestroyEnvironment
0x180054768
RtlDoesFileExists_U
0x1800546e8
RtlDosPathNameToNtPathName_U
0x1800546c0
RtlDosPathNameToNtPathName_U_WithStatus
0x180054798
RtlDuplicateUnicodeString
0x180054870
RtlEnterCriticalSection
0x180054448
RtlEqualSid
0x180054548
RtlEqualString
0x180054640
RtlExpandEnvironmentStrings_U
0x180054848
RtlFormatCurrentUserKeyPath
0x180054888
RtlFreeAnsiString
0x1800543f8
RtlFreeHeap
0x180054860
RtlFreeSid
0x1800544e0
RtlFreeUnicodeString
0x180054868
RtlGetFileMUIPath
0x180054700
RtlGetFullPathName_UEx
0x1800547a0
RtlGetNativeSystemInformation
0x1800545d8
RtlGetNtSystemRoot
0x180054478
RtlGetOwnerSecurityDescriptor
0x180054540
RtlGetVersion
0x1800546d0
RtlGUIDFromString
0x180054598
RtlImageDirectoryEntryToData
0x180054510
RtlInitAnsiString
0x1800544c8
RtlInitAnsiStringEx
0x180054458
RtlInitializeCriticalSection
0x180054410
RtlInitializeSRWLock
0x180054560
RtlInitString
0x180054508
RtlInitUnicodeString
0x1800547a8
RtlInitUnicodeStringEx
0x180054890
RtlLeaveCriticalSection
0x180054440
RtlLengthRequiredSid
0x180054520
RtlLookupFunctionEntry
0x1800547e0
RtlMultiByteToUnicodeN
0x180054648
RtlNtPathNameToDosPathName
0x1800543d8
RtlNtStatusToDosError
0x1800544c0
RtlpEnsureBufferSize
0x1800547c8
RtlQueryEnvironmentVariable_U
0x1800543e0
RtlReAllocateHeap
0x180054770
RtlReleaseSRWLockExclusive
0x180054578
RtlReleaseSRWLockShared
0x180054588
RtlRunOnceExecuteOnce
0x1800546b8
RtlSecondsSince1970ToTime
0x180054688
RtlSetEnvironmentVar
0x180054780
RtlSetEnvironmentVariable
0x1800543e8
RtlSizeHeap
0x180054778
RtlStringFromGUID
0x1800547c0
RtlTimeToTimeFields
0x180054680
RtlTryEnterCriticalSection
0x180054438
RtlUnicodeStringToAnsiString
0x1800543f0
RtlUnicodeStringToInteger
0x180054660
RtlUpcaseUnicodeChar
0x1800545b0
RtlUpcaseUnicodeString
0x1800546b0
RtlVerifyVersionInfo
0x1800545e0
RtlVirtualUnwind
0x1800547d8
RtlWow64GetProcessMachines
0x180054400
RtlxAnsiStringToUnicodeSize
0x1800545c0
sprintf_s
0x1800544f0
sscanf_s
0x1800544f8
strchr
0x180054650
strcpy_s
0x1800544a0
strncmp
0x180054608
strrchr
0x180054420
swprintf_s
0x1800547b0
toupper
0x1800545a0
VerSetConditionMask
0x180054620
wcscat_s
0x180054710
wcschr
0x180054730
wcscpy_s
0x180054718
wcsncmp
0x180054470
wcsrchr
0x1800547f0
wcsspn
0x180054738
wcsstr
0x180054830
ZwClose
0x180054720
ZwCreateFile
0x1800545a8
ZwCreateKey
0x1800545d0
ZwCreateSection
0x1800545b8
ZwEnumerateKey
0x180054610
ZwEnumerateValueKey
0x180054668
ZwMapViewOfSection
0x180054600
ZwOpenFile
0x180054628
ZwOpenKey
0x1800544b0
ZwOpenProcessToken
0x180054618
ZwQueryDirectoryFile
0x1800545e8
ZwQueryInformationFile
0x180054630
ZwQueryInformationProcess
0x1800545c8
ZwQueryInformationToken
0x1800545f8
ZwQueryKey
0x180054670
ZwQuerySystemInformation
0x1800546c8
ZwQuerySystemTime
0x180054758
ZwQueryValueKey
0x180054728
ZwSetInformationProcess
0x1800545f0
ZwSetValueKey
0x180054658
ZwUnmapViewOfSection
0x180054590
No function matches your filter.