dbghelp.dll
v10.0.19041.5848
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 259
#1101 · 0x10f4c0
#1102 · 0x10f560
#1103 · 0x10f6a0
#1104 · 0x10f9b0
#1105 · 0x10fe40
#1106 · 0x10ff20
#1107 · 0x10f620
#1108 · 0x10f8b0
#1109 · 0x10fd80
#1110 · 0x10fe60
#1111 · 0x10f650
#1112 · 0x10f930
#1113 · 0x10fde0
#1114 · 0x10fec0
#1115 · 0x10f6d0
#1116 · 0x10f770
#1117 · 0x10f3d0
#1118 · 0x10f450
#1119 · 0x10f5d0
SymAllocDiaString
#1120 · 0x10f390
SymFreeDiaString
#1121 · 0x144d30
SymGetDiaSession
#1122 · 0x144d40
SymGetOmapBlockBase
#1123 · 0x144d80
SymSetDiaSession
#1124 · 0x10ff40
_EFN_DumpImage
#1125 · 0x139c10
DbgHelpCreateUserDump
#1126 · 0x1508c0
DbgHelpCreateUserDumpW
#1127 · 0x150960
EnumDirTree
#1128 · 0x14b060
EnumDirTreeW
#1129 · 0x14b160
EnumerateLoadedModules64
#1130 · 0x145890
EnumerateLoadedModules
#1131 · 0x145920
EnumerateLoadedModulesEx
#1132 · 0x1459b0
EnumerateLoadedModulesExW
#1133 · 0x145a40
EnumerateLoadedModulesW64
#1134 · 0x145ad0
ExtensionApiVersion
#1135 · 0x3a0f0
FindDebugInfoFile
#1136 · 0x14b1a0
FindDebugInfoFileEx
#1137 · 0x14b1c0
FindDebugInfoFileExW
#1138 · 0x14b280
FindExecutableImage
#1139 · 0x14b2c0
FindExecutableImageEx
#1140 · 0x14b2e0
FindExecutableImageExW
#1141 · 0x14b3c0
FindFileInPath
#1142 · 0x14b400
FindFileInSearchPath
#1143 · 0x14b430
GetSymLoadError
#1144 · 0x2ffd0
GetTimestampForLoadedLibrary
#1145 · 0x1402c0
ImageDirectoryEntryToData
#1146 · 0x140010
ImageDirectoryEntryToDataEx
#1147 · 0x140040
ImageNtHeader
#1148 · 0x140100
ImageRvaToSection
#1149 · 0x140130
ImageRvaToVa
#1150 · 0x140190
ImagehlpApiVersion
#1151 · 0x14b460
ImagehlpApiVersionEx
#1152 · 0x39ff0
MakeSureDirectoryPathExists
#1153 · 0x14b470
MapDebugInformation
#1154 · 0x14b5b0
MiniDumpReadDumpStream
#1155 · 0x17294e
MiniDumpWriteDump
#1156 · 0x17297f
RangeMapAddPeImageSections
#1157 · 0x155410
RangeMapCreate
#1158 · 0x1554a0
RangeMapFree
#1159 · 0x1554e0
RangeMapRead
#1160 · 0x155510
RangeMapRemove
#1161 · 0x155560
RangeMapWrite
#1162 · 0x1555b0
RemoveInvalidModuleList
#1163 · 0x39f30
ReportSymbolLoadSummary
#1164 · 0x39ce0
SearchTreeForFile
#1165 · 0x14b750
SearchTreeForFileW
#1166 · 0x14b780
SetCheckUserInterruptShared
#1167 · 0x39f30
SetSymLoadError
#1168 · 0x145b60
StackWalk64
#1169 · 0x1548c0
StackWalk
#1170 · 0x154980
StackWalkEx
#1171 · 0x31b50
SymAddSourceStream
#1172 · 0x145b80
SymAddSourceStreamA
#1173 · 0x145bb0
SymAddSourceStreamW
#1174 · 0x145bf0
SymAddSymbol
#1175 · 0x145cf0
SymAddSymbolW
#1176 · 0x30b80
SymAddrIncludeInlineTrace
#1177 · 0x3a050
SymCleanup
#1178 · 0x39da0
SymCompareInlineTrace
#1179 · 0x145d40
SymDeleteSymbol
#1180 · 0x1461a0
SymDeleteSymbolW
#1181 · 0x1461e0
SymEnumLines
#1182 · 0x146290
SymEnumLinesW
#1183 · 0x146310
SymEnumProcesses
#1184 · 0x146370
SymEnumSourceFileTokens
#1185 · 0x1463e0
SymEnumSourceFiles
#1186 · 0x146460
SymEnumSourceFilesW
#1187 · 0x146490
SymEnumSourceLines
#1188 · 0x1464c0
SymEnumSourceLinesW
#1189 · 0x1464f0
SymEnumSym
#1190 · 0x146520
SymEnumSymbols
#1191 · 0x146550
SymEnumSymbolsEx
#1192 · 0x146580
SymEnumSymbolsExW
#1193 · 0x30d80
SymEnumSymbolsForAddr
#1194 · 0x1465f0
SymEnumSymbolsForAddrW
#1195 · 0x1466d0
SymEnumSymbolsW
#1196 · 0x1467c0
SymEnumTypes
#1197 · 0x1467f0
SymEnumTypesByName
#1198 · 0x146840
SymEnumTypesByNameW
#1199 · 0x1468f0
SymEnumTypesW
#1200 · 0x146950
SymEnumerateModules64
#1201 · 0x1469b0
SymEnumerateModules
#1202 · 0x1469f0
SymEnumerateModulesW64
#1203 · 0x146a30
SymEnumerateSymbols64
#1204 · 0x146a80
SymEnumerateSymbols
#1205 · 0x146ad0
SymEnumerateSymbolsW64
#1206 · 0x146b20
SymEnumerateSymbolsW
#1207 · 0x146b70
SymFindDebugInfoFile
#1208 · 0x14b7b0
SymFindDebugInfoFileW
#1209 · 0x14b890
SymFindExecutableImage
#1210 · 0x14b8e0
SymFindExecutableImageW
#1211 · 0x14b9c0
SymFindFileInPath
#1212 · 0x14ba10
SymFindFileInPathW
#1213 · 0x14bae0
SymFromAddr
#1214 · 0x146bc0
SymFromAddrW
#1215 · 0x146bf0
SymFromIndex
#1216 · 0x146c20
SymFromIndexW
#1217 · 0x146ca0
SymFromInlineContext
#1218 · 0x146d60
SymFromInlineContextW
#1219 · 0x34950
SymFromName
#1220 · 0x146db0
SymFromNameW
#1221 · 0x146e20
SymFromToken
#1222 · 0x146e50
SymFromTokenW
#1223 · 0x146ee0
SymFunctionTableAccess64
#1224 · 0x34410
SymFunctionTableAccess64AccessRoutines
#1225 · 0x34430
SymFunctionTableAccess
#1226 · 0x146fa0
SymGetExtendedOption
#1227 · 0x10ff80
SymGetFileLineOffsets64
#1228 · 0x140f20
SymGetHomeDirectory
#1229 · 0x146fc0
SymGetHomeDirectoryW
#1230 · 0x147020
SymGetLineFromAddr64
#1231 · 0x1470b0
SymGetLineFromAddr
#1232 · 0x1470e0
SymGetLineFromAddrW64
#1233 · 0x147110
SymGetLineFromInlineContext
#1234 · 0x147140
SymGetLineFromInlineContextW
#1235 · 0x147170
SymGetLineFromName64
#1236 · 0x1471a0
SymGetLineFromName
#1237 · 0x1471d0
SymGetLineFromNameW64
#1238 · 0x147200
SymGetLineNext64
#1239 · 0x147230
SymGetLineNext
#1240 · 0x147250
SymGetLineNextW64
#1241 · 0x147270
SymGetLinePrev64
#1242 · 0x147290
SymGetLinePrev
#1243 · 0x1472b0
SymGetLinePrevW64
#1244 · 0x1472d0
SymGetModuleBase64
#1245 · 0x1472f0
SymGetModuleBase
#1246 · 0x147380
SymGetModuleInfo64
#1247 · 0x1473a0
SymGetModuleInfo
#1248 · 0x147430
SymGetModuleInfoW64
#1249 · 0x393d0
SymGetModuleInfoW
#1250 · 0x1474c0
SymGetOmaps
#1251 · 0x147560
SymGetOptions
#1252 · 0x2ffa0
SymGetScope
#1253 · 0x147610
SymGetScopeW
#1254 · 0x147690
SymGetSearchPath
#1255 · 0x147780
SymGetSearchPathW
#1256 · 0x1477e0
SymGetSourceFile
#1257 · 0x147860
SymGetSourceFileChecksum
#1258 · 0x1478c0
SymGetSourceFileChecksumW
#1259 · 0x147910
SymGetSourceFileFromToken
#1260 · 0x1479d0
SymGetSourceFileFromTokenW
#1261 · 0x147a40
SymGetSourceFileToken
#1262 · 0x147a90
SymGetSourceFileTokenW
#1263 · 0x147ad0
SymGetSourceFileW
#1264 · 0x147b50
SymGetSourceVarFromToken
#1265 · 0x147bb0
SymGetSourceVarFromTokenW
#1266 · 0x147c40
SymGetSymFromAddr64
#1267 · 0x147ca0
SymGetSymFromAddr
#1268 · 0x147ce0
SymGetSymFromName64
#1269 · 0x147d30
SymGetSymFromName
#1270 · 0x147d80
SymGetSymNext64
#1271 · 0x147dd0
SymGetSymNext
#1272 · 0x147df0
SymGetSymPrev64
#1273 · 0x147e60
SymGetSymPrev
#1274 · 0x147e80
SymGetSymbolFile
#1275 · 0x14f740
SymGetSymbolFileW
#1276 · 0x14f810
SymGetTypeFromName
#1277 · 0x147ef0
SymGetTypeFromNameW
#1278 · 0x147f90
SymGetTypeInfo
#1279 · 0x349e0
SymGetTypeInfoEx
#1280 · 0x1480a0
SymGetUnwindInfo
#1281 · 0x1480e0
SymInitialize
#1282 · 0x30450
SymInitializeW
#1283 · 0x304a0
SymLoadModule64
#1284 · 0x148240
SymLoadModule
#1285 · 0x148270
SymLoadModuleEx
#1286 · 0x1482a0
SymLoadModuleExW
#1287 · 0x38dc0
SymMatchFileName
#1288 · 0x148350
SymMatchFileNameW
#1289 · 0x148410
SymMatchString
#1290 · 0x1484d0
SymMatchStringA
#1291 · 0x148510
SymMatchStringW
#1292 · 0x148520
SymNext
#1293 · 0x148560
SymNextW
#1294 · 0x1485e0
SymPrev
#1295 · 0x148600
SymPrevW
#1296 · 0x148680
SymQueryInlineTrace
#1297 · 0x1486a0
SymRefreshModuleList
#1298 · 0x148900
SymRegisterCallback64
#1299 · 0x148990
SymRegisterCallback
#1300 · 0x148a20
SymRegisterCallbackW64
#1301 · 0x39f70
SymRegisterFunctionEntryCallback64
#1302 · 0x148ab0
SymRegisterFunctionEntryCallback
#1303 · 0x148b40
SymSearch
#1304 · 0x148bc0
SymSearchW
#1305 · 0x148c20
SymSetContext
#1306 · 0x148c80
SymSetExtendedOption
#1307 · 0x10ffa0
SymSetHomeDirectory
#1308 · 0x148ce0
SymSetHomeDirectoryW
#1309 · 0x148d60
SymSetOptions
#1310 · 0x2f980
SymSetParentWindow
#1311 · 0x148dc0
SymSetScopeFromAddr
#1312 · 0x148df0
SymSetScopeFromIndex
#1313 · 0x148e10
SymSetScopeFromInlineContext
#1314 · 0x318a0
SymSetSearchPath
#1315 · 0x148ea0
SymSetSearchPathW
#1316 · 0x30720
SymSrvDeltaName
#1317 · 0x14fc40
SymSrvDeltaNameW
#1318 · 0x14fce0
SymSrvGetFileIndexInfo
#1319 · 0x14fe60
SymSrvGetFileIndexInfoW
#1320 · 0x14ff20
SymSrvGetFileIndexString
#1321 · 0x150010
SymSrvGetFileIndexStringW
#1322 · 0x1500c0
SymSrvGetFileIndexes
#1323 · 0x150160
SymSrvGetFileIndexesW
#1324 · 0x1501a0
SymSrvGetSupplement
#1325 · 0x150230
SymSrvGetSupplementW
#1326 · 0x1502c0
SymSrvIsStore
#1327 · 0x1503c0
SymSrvIsStoreW
#1328 · 0x1503f0
SymSrvStoreFile
#1329 · 0x1504b0
SymSrvStoreFileW
#1330 · 0x150530
SymSrvStoreSupplement
#1331 · 0x1505e0
SymSrvStoreSupplementW
#1332 · 0x150670
SymUnDName64
#1333 · 0x148ed0
SymUnDName
#1334 · 0x148f50
SymUnloadModule64
#1335 · 0x39730
SymUnloadModule
#1336 · 0x148fd0
UnDecorateSymbolName
#1337 · 0x148ff0
UnDecorateSymbolNameW
#1338 · 0x149090
UnmapDebugInformation
#1339 · 0x14bb30
WinDbgExtensionDllInit
#1340 · 0x3a0d0
block
#1341 · 0x13dd80
chksym
#1342 · 0x13df30
dbghelp
#1343 · 0x149100
dh
#1344 · 0x13e0d0
fptr
#1345 · 0x13e0f0
homedir
#1346 · 0x13e170
inlinedbg
#1347 · 0x13e290
itoldyouso
#1348 · 0x13e2f0
lmi
#1349 · 0x13e490
lminfo
#1350 · 0x13e740
omap
#1351 · 0x13e970
optdbgdump
#1352 · 0x13eb50
optdbgdumpaddr
#1353 · 0x13ec90
srcfiles
#1354 · 0x13edc0
stack_force_ebp
#1355 · 0x13eed0
stackdbg
#1356 · 0x13f040
sym
#1357 · 0x13f200
symsrv
#1358 · 0x13f330
vc7fpo
#1359 · 0x13f380
No function matches your filter.
Imported DLLs & functions 240
DebugBreak
0x3192008
IsDebuggerPresent
0x3192000
OutputDebugStringA
0x319200c
OutputDebugStringW
0x3192004
DelayLoadFailureHook
0x3192014
GetLastError
0x319201c
SetErrorMode
0x3192024
SetLastError
0x3192028
SetUnhandledExceptionFilter
0x3192020
UnhandledExceptionFilter
0x319202c
CreateDirectoryA
0x3192088
CreateDirectoryW
0x319206c
CreateFileA
0x3192070
CreateFileW
0x319207c
DeleteFileW
0x3192060
FindClose
0x3192058
FindFirstFileW
0x3192074
FindNextFileW
0x319205c
GetFileAttributesA
0x3192050
GetFileAttributesW
0x3192080
GetFileSize
0x3192084
GetFileSizeEx
0x3192064
GetFileType
0x319203c
GetFullPathNameW
0x3192078
ReadFile
0x3192068
RemoveDirectoryW
0x3192044
SetEndOfFile
0x3192048
SetFileAttributesW
0x3192038
SetFilePointer
0x3192054
SetFilePointerEx
0x319204c
SetFileTime
0x3192040
WriteFile
0x3192034
GetProcessHeap
0x31920a8
HeapAlloc
0x31920a4
HeapFree
0x319209c
HeapReAlloc
0x31920a0
InitializeSListHead
0x31920b0
DeviceIoControl
0x31920b8
CreateFileMappingA
0x31920c0
FreeLibrary
0x31920e0
GetModuleFileNameW
0x31920d4
GetModuleHandleExW
0x31920cc
GetModuleHandleW
0x31920dc
GetProcAddress
0x31920d0
LoadLibraryExA
0x31920d8
LoadLibraryExW
0x31920c8
RegCloseKey
0x31920f8
RegEnumKeyExW
0x3192100
RegOpenKeyExW
0x3192104
RegQueryInfoKeyW
0x31920f4
RegQueryValueExW
0x31920fc
CreateFileMappingW
0x3192114
MapViewOfFile
0x319211c
MapViewOfFileEx
0x3192124
ReadProcessMemory
0x3192120
UnmapViewOfFile
0x3192118
VirtualAlloc
0x3192110
VirtualFree
0x3192128
VirtualProtect
0x319210c
ExpandEnvironmentStringsW
0x3192144
GetEnvironmentVariableW
0x3192148
SetEnvironmentVariableA
0x3192140
GetCurrentProcess
0x3192170
GetCurrentProcessId
0x3192168
GetCurrentThread
0x3192164
GetCurrentThreadId
0x319215c
OpenThreadToken
0x3192160
TerminateProcess
0x3192154
TlsAlloc
0x319216c
TlsFree
0x3192158
TlsGetValue
0x3192150
TlsSetValue
0x3192174
QueryPerformanceCounter
0x319217c
RtlCaptureContext
0x3192184
GetStringTypeW
0x3192190
MultiByteToWideChar
0x3192194
WideCharToMultiByte
0x319218c
AcquireSRWLockExclusive
0x319219c
DeleteCriticalSection
0x31921ac
EnterCriticalSection
0x31921b4
InitializeCriticalSection
0x31921a0
InitializeCriticalSectionAndSpinCount
0x31921bc
InitializeCriticalSectionEx
0x31921a4
LeaveCriticalSection
0x31921a8
OpenProcess
0x31921b0
ReleaseSRWLockExclusive
0x31921b8
InitOnceExecuteOnce
0x31921c4
GetSystemDirectoryW
0x31921e0
GetSystemInfo
0x31921d0
GetSystemTime
0x31921cc
GetSystemTimeAsFileTime
0x31921d8
GetTickCount
0x31921d4
GetVersionExA
0x31921e4
GetVersionExW
0x31921dc
SystemTimeToFileTime
0x31921e8
__CxxFrameHandler3
0x31923a4
__std_terminate
0x3192380
__uncaught_exception
0x3192328
__unDName
0x319239c
__unDNameEx
0x3192390
_CxxThrowException
0x3192330
_except_handler4_common
0x319232c
_o____lc_codepage_func
0x3192374
_o____lc_locale_name_func
0x3192370
_o____mb_cur_max_func
0x319236c
_o___acrt_iob_func
0x3192368
_o___pctype_func
0x3192364
_o___std_exception_copy
0x3192360
_o___std_exception_destroy
0x319235c
_o___std_type_info_destroy_list
0x3192358
_o___stdio_common_vfprintf
0x3192354
_o___stdio_common_vsnprintf_s
0x3192350
_o___stdio_common_vsnwprintf_s
0x319234c
_o___stdio_common_vsprintf_s
0x3192348
_o___stdio_common_vsscanf
0x3192344
_o___stdio_common_vswprintf_s
0x3192340
_o__callnewh
0x319233c
_o__calloc_base
0x3192338
_o__cexit
0x3192334
_o__close
0x3192208
_o__configure_narrow_argv
0x319220c
_o__crt_atexit
0x3192210
_o__errno
0x3192214
_o__execute_onexit_table
0x3192218
_o__filelengthi64
0x319221c
_o__fullpath
0x3192220
_o__initialize_narrow_environment
0x3192224
_o__initialize_onexit_table
0x3192228
_o__invalid_parameter_noinfo
0x319222c
_o__invalid_parameter_noinfo_noreturn
0x3192230
_o__itoa_s
0x3192234
_o__lseeki64
0x3192238
_o__ltoa
0x319223c
_o__mbscmp
0x3192240
_o__memicmp
0x3192244
_o__open_osfhandle
0x3192248
_o__purecall
0x319224c
_o__read
0x3192250
_o__register_onexit_function
0x3192254
_o__seh_filter_dll
0x3192258
_o__splitpath_s
0x319225c
_o__stricmp
0x3192260
_o__strlwr
0x3192264
_o__strnicmp
0x319226c
_o__wcsdup
0x3192270
_o__wcsicmp
0x3192274
_o__wcslwr
0x3192278
_o__wcsnicmp
0x319227c
_o__wctime32
0x3192280
_o__wdupenv_s
0x3192284
_o__wfsopen
0x3192288
_o__wfullpath
0x319228c
_o__wgetenv
0x3192290
_o__wmakepath_s
0x3192294
_o__wsplitpath_s
0x3192298
_o__wtoi
0x319229c
_o_abort
0x31922a0
_o_atoi
0x31922a4
_o_atol
0x31922a8
_o_bsearch
0x31922ac
_o_calloc
0x31922b0
_o_fclose
0x31922b4
_o_fflush
0x31922b8
_o_fread
0x31922bc
_o_free
0x31922c0
_o_frexp
0x31922c4
_o_fseek
0x31922c8
_o_ftell
0x31922cc
_o_isspace
0x31922d0
_o_iswprint
0x31922d4
_o_iswspace
0x31922d8
_o_iswxdigit
0x31922dc
_o_localeconv
0x31922e0
_o_malloc
0x31922e4
_o_qsort
0x31922e8
_o_realloc
0x31922ec
_o_setlocale
0x31922f0
_o_strcat_s
0x31922f4
_o_strcpy_s
0x31922f8
_o_strncat_s
0x31922fc
_o_strncpy_s
0x3192300
_o_terminate
0x3192304
_o_tolower
0x3192308
_o_towlower
0x319230c
_o_wcscat_s
0x3192310
_o_wcscpy_s
0x3192314
_o_wcsncat_s
0x3192318
_o_wcsncpy_s
0x319231c
_o_wcstoul
0x3192320
_o_wmemcpy_s
0x3192324
memcmp
0x3192268
memcpy
0x31923a0
memmove
0x319238c
strchr
0x3192398
strrchr
0x3192394
strstr
0x319237c
wcschr
0x3192388
wcsrchr
0x3192378
wcsstr
0x3192384
memset
0x31923bc
strcmp
0x31923c0
strcspn
0x31923c4
strlen
0x31923d4
strncmp
0x31923d0
strnlen
0x31923cc
wcsncmp
0x31923d8
wcsnlen
0x31923c8
LocalFree
0x31923ec
EventActivityIdControl
0x31923f8
EventRegister
0x3192400
EventUnregister
0x31923f4
EventWriteTransfer
0x31923fc
AccessCheck
0x319240c
GetFileSecurityW
0x3192414
ImpersonateSelf
0x3192410
RevertToSelf
0x3192408
NtQueryInformationProcess
0x3192430
NtQueryObject
0x319241c
RtlCreateQueryDebugBuffer
0x3192420
RtlDestroyQueryDebugBuffer
0x3192434
RtlEqualUnicodeString
0x3192438
RtlQueryProcessDebugInformation
0x3192424
RtlRunOnceExecuteOnce
0x3192428
RtlUTF8ToUnicodeN
0x319242c
No function matches your filter.