imagehlp.dll

Description: Windows NT Image Helper

Version: 10.0.19041.3636

Architecture: 32-bit

Operating System: Windows NT

SHA256: 47273a18bbad56fbf2ba9420a79b6f94

File Size: 94.3 KB

Uploaded At: Dec. 1, 2025, 7:57 a.m.

Views: 10

Exported Functions

RemoveRelocations (Ordinal: 1, Address: 0xb350)
SymAllocDiaString (Ordinal: 2, Address: 0x52b0)
SymFreeDiaString (Ordinal: 3, Address: 0x52e0)
SymGetDiaSession (Ordinal: 4, Address: 0x5300)
SymSetDiaSession (Ordinal: 5, Address: 0x5320)
BindImage (Ordinal: 6, Address: 0x9730)
BindImageEx (Ordinal: 7, Address: 0x9750)
CheckSumMappedFile (Ordinal: 8, Address: 0x9eb0)
EnumerateLoadedModules64 (Ordinal: 9, Address: 0x5340)
EnumerateLoadedModules (Ordinal: 10, Address: 0x5360)
EnumerateLoadedModulesEx (Ordinal: 11, Address: 0x5380)
EnumerateLoadedModulesExW (Ordinal: 12, Address: 0x53a0)
EnumerateLoadedModulesW64 (Ordinal: 13, Address: 0x53c0)
FindDebugInfoFile (Ordinal: 14, Address: 0x53e0)
FindDebugInfoFileEx (Ordinal: 15, Address: 0x5400)
FindExecutableImage (Ordinal: 16, Address: 0x5420)
FindExecutableImageEx (Ordinal: 17, Address: 0x5440)
FindFileInPath (Ordinal: 18, Address: 0x5460)
FindFileInSearchPath (Ordinal: 19, Address: 0x5480)
GetImageConfigInformation (Ordinal: 20, Address: 0xa6a0)
GetImageUnusedHeaderBytes (Ordinal: 21, Address: 0x9c30)
GetSymLoadError (Ordinal: 22, Address: 0x54a0)
GetTimestampForLoadedLibrary (Ordinal: 23, Address: 0x9cf0)
ImageAddCertificate (Ordinal: 24, Address: 0xd670)
ImageDirectoryEntryToData (Ordinal: 25, Address: 0x4e10)
ImageDirectoryEntryToDataEx (Ordinal: 26, Address: 0x4e40)
ImageEnumerateCertificates (Ordinal: 27, Address: 0xd940)
ImageGetCertificateData (Ordinal: 28, Address: 0xdb10)
ImageGetCertificateDataEx (Ordinal: 29, Address: 0x42e0)
ImageGetCertificateHeader (Ordinal: 30, Address: 0xdb40)
ImageGetDigestStream (Ordinal: 31, Address: 0xdbf0)
ImageLoad (Ordinal: 32, Address: 0xa710)
ImageNtHeader (Ordinal: 33, Address: 0x4f10)
ImageRemoveCertificate (Ordinal: 34, Address: 0xe1d0)
ImageRvaToSection (Ordinal: 35, Address: 0xa5e0)
ImageRvaToVa (Ordinal: 36, Address: 0xa640)
ImageUnload (Ordinal: 37, Address: 0xa920)
ImagehlpApiVersion (Ordinal: 38, Address: 0x54c0)
ImagehlpApiVersionEx (Ordinal: 39, Address: 0x54e0)
IsBufferCleanOfInvalidMarkers (Ordinal: 40, Address: 0x49a0)
MakeSureDirectoryPathExists (Ordinal: 41, Address: 0x5500)
MapAndLoad (Ordinal: 42, Address: 0xa9a0)
MapDebugInformation (Ordinal: 43, Address: 0x5520)
MapFileAndCheckSumA (Ordinal: 44, Address: 0x9fa0)
MapFileAndCheckSumW (Ordinal: 45, Address: 0xa040)
ReBaseImage64 (Ordinal: 46, Address: 0xb460)
ReBaseImage (Ordinal: 47, Address: 0xb8f0)
RemoveInvalidModuleList (Ordinal: 48, Address: 0x5540)
RemovePrivateCvSymbolic (Ordinal: 49, Address: 0xcf20)
RemovePrivateCvSymbolicEx (Ordinal: 50, Address: 0xcf60)
ReportSymbolLoadSummary (Ordinal: 51, Address: 0x5560)
SearchTreeForFile (Ordinal: 52, Address: 0x5580)
SetCheckUserInterruptShared (Ordinal: 53, Address: 0x55a0)
SetImageConfigInformation (Ordinal: 54, Address: 0xac50)
SetSymLoadError (Ordinal: 55, Address: 0x55c0)
SplitSymbols (Ordinal: 56, Address: 0xb970)
StackWalk64 (Ordinal: 57, Address: 0x55e0)
StackWalk (Ordinal: 58, Address: 0x5600)
StackWalkEx (Ordinal: 59, Address: 0x5620)
SymAddrIncludeInlineTrace (Ordinal: 60, Address: 0x5640)
SymCleanup (Ordinal: 61, Address: 0x5660)
SymCompareInlineTrace (Ordinal: 62, Address: 0x5680)
SymEnumSym (Ordinal: 63, Address: 0x56a0)
SymEnumSymbols (Ordinal: 64, Address: 0x56c0)
SymEnumSymbolsEx (Ordinal: 65, Address: 0x56e0)
SymEnumSymbolsExW (Ordinal: 66, Address: 0x5700)
SymEnumSymbolsForAddr (Ordinal: 67, Address: 0x5720)
SymEnumTypes (Ordinal: 68, Address: 0x5740)
SymEnumTypesByName (Ordinal: 69, Address: 0x5760)
SymEnumTypesByNameW (Ordinal: 70, Address: 0x5780)
SymEnumTypesW (Ordinal: 71, Address: 0x57a0)
SymEnumerateModules64 (Ordinal: 72, Address: 0x57c0)
SymEnumerateModules (Ordinal: 73, Address: 0x57e0)
SymEnumerateSymbols64 (Ordinal: 74, Address: 0x5800)
SymEnumerateSymbols (Ordinal: 75, Address: 0x5820)
SymEnumerateSymbolsW64 (Ordinal: 76, Address: 0x5840)
SymEnumerateSymbolsW (Ordinal: 77, Address: 0x5860)
SymFindFileInPath (Ordinal: 78, Address: 0x5880)
SymFindFileInPathW (Ordinal: 79, Address: 0x58a0)
SymFromAddr (Ordinal: 80, Address: 0x58c0)
SymFromInlineContext (Ordinal: 81, Address: 0x58e0)
SymFromInlineContextW (Ordinal: 82, Address: 0x5900)
SymFromName (Ordinal: 83, Address: 0x5920)
SymFunctionTableAccess64 (Ordinal: 84, Address: 0x5940)
SymFunctionTableAccess64AccessRoutines (Ordinal: 85, Address: 0x5960)
SymFunctionTableAccess (Ordinal: 86, Address: 0x5980)
SymGetExtendedOption (Ordinal: 87, Address: 0x59a0)
SymGetLineFromAddr64 (Ordinal: 88, Address: 0x59c0)
SymGetLineFromAddr (Ordinal: 89, Address: 0x59e0)
SymGetLineFromInlineContext (Ordinal: 90, Address: 0x5a00)
SymGetLineFromInlineContextW (Ordinal: 91, Address: 0x5a20)
SymGetLineFromName64 (Ordinal: 92, Address: 0x5a40)
SymGetLineFromName (Ordinal: 93, Address: 0x5a60)
SymGetLineNext64 (Ordinal: 94, Address: 0x5a80)
SymGetLineNext (Ordinal: 95, Address: 0x5aa0)
SymGetLinePrev64 (Ordinal: 96, Address: 0x5ac0)
SymGetLinePrev (Ordinal: 97, Address: 0x5ae0)
SymGetModuleBase64 (Ordinal: 98, Address: 0x5b00)
SymGetModuleBase (Ordinal: 99, Address: 0x5b20)
SymGetModuleInfo64 (Ordinal: 100, Address: 0x5b40)
SymGetModuleInfo (Ordinal: 101, Address: 0x5b60)
SymGetModuleInfoW64 (Ordinal: 102, Address: 0x5b80)
SymGetModuleInfoW (Ordinal: 103, Address: 0x5ba0)
SymGetOptions (Ordinal: 104, Address: 0x5bc0)
SymGetSearchPath (Ordinal: 105, Address: 0x5be0)
SymGetSourceFileChecksumW (Ordinal: 106, Address: 0x5c00)
SymGetSourceFileFromTokenW (Ordinal: 107, Address: 0x5c20)
SymGetSourceFileTokenW (Ordinal: 108, Address: 0x5c40)
SymGetSourceVarFromTokenW (Ordinal: 109, Address: 0x5c60)
SymGetSymFromAddr64 (Ordinal: 110, Address: 0x5c80)
SymGetSymFromAddr (Ordinal: 111, Address: 0x5ca0)
SymGetSymFromName64 (Ordinal: 112, Address: 0x5cc0)
SymGetSymFromName (Ordinal: 113, Address: 0x5ce0)
SymGetSymNext64 (Ordinal: 114, Address: 0x5d00)
SymGetSymNext (Ordinal: 115, Address: 0x5d20)
SymGetSymPrev64 (Ordinal: 116, Address: 0x5d40)
SymGetSymPrev (Ordinal: 117, Address: 0x5d60)
SymGetSymbolFile (Ordinal: 118, Address: 0x5d80)
SymGetSymbolFileW (Ordinal: 119, Address: 0x5da0)
SymGetTypeFromName (Ordinal: 120, Address: 0x5dc0)
SymGetTypeFromNameW (Ordinal: 121, Address: 0x5de0)
SymGetTypeInfo (Ordinal: 122, Address: 0x5e00)
SymGetTypeInfoEx (Ordinal: 123, Address: 0x5e20)
SymInitialize (Ordinal: 124, Address: 0x5e40)
SymLoadModule64 (Ordinal: 125, Address: 0x5e60)
SymLoadModule (Ordinal: 126, Address: 0x5e80)
SymMatchFileName (Ordinal: 127, Address: 0x5ea0)
SymMatchFileNameW (Ordinal: 128, Address: 0x5ec0)
SymMatchString (Ordinal: 129, Address: 0x5ee0)
SymMatchStringA (Ordinal: 130, Address: 0x5f00)
SymMatchStringW (Ordinal: 131, Address: 0x5f20)
SymQueryInlineTrace (Ordinal: 132, Address: 0x5f40)
SymRegisterCallback64 (Ordinal: 133, Address: 0x5f60)
SymRegisterCallback (Ordinal: 134, Address: 0x5f80)
SymRegisterFunctionEntryCallback64 (Ordinal: 135, Address: 0x5fa0)
SymRegisterFunctionEntryCallback (Ordinal: 136, Address: 0x5fc0)
SymSetContext (Ordinal: 137, Address: 0x5fe0)
SymSetExtendedOption (Ordinal: 138, Address: 0x6000)
SymSetOptions (Ordinal: 139, Address: 0x6020)
SymSetScopeFromAddr (Ordinal: 140, Address: 0x6040)
SymSetScopeFromIndex (Ordinal: 141, Address: 0x6060)
SymSetScopeFromInlineContext (Ordinal: 142, Address: 0x6080)
SymSetSearchPath (Ordinal: 143, Address: 0x60a0)
SymSrvGetFileIndexString (Ordinal: 144, Address: 0x60c0)
SymSrvGetFileIndexStringW (Ordinal: 145, Address: 0x60e0)
SymSrvGetFileIndexes (Ordinal: 146, Address: 0x6100)
SymSrvGetFileIndexesW (Ordinal: 147, Address: 0x6120)
SymUnDName64 (Ordinal: 148, Address: 0x6140)
SymUnDName (Ordinal: 149, Address: 0x6160)
SymUnloadModule64 (Ordinal: 150, Address: 0x6180)
SymUnloadModule (Ordinal: 151, Address: 0x61a0)
TouchFileTimes (Ordinal: 152, Address: 0xa0b0)
UnDecorateSymbolName (Ordinal: 153, Address: 0x61c0)
UnMapAndLoad (Ordinal: 154, Address: 0xad00)
UnmapDebugInformation (Ordinal: 155, Address: 0x61e0)
UpdateDebugInfoFile (Ordinal: 156, Address: 0xd280)
UpdateDebugInfoFileEx (Ordinal: 157, Address: 0xd2b0)

Imported DLLs & Functions

api-ms-win-core-debug-l1-1-0.dll

IsDebuggerPresent (Address: 0x10013000)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x10013008)
RaiseException (Address: 0x10013014)
SetLastError (Address: 0x1001300c)
SetUnhandledExceptionFilter (Address: 0x10013018)
UnhandledExceptionFilter (Address: 0x10013010)

api-ms-win-core-file-l1-1-0.dll

CreateFileA (Address: 0x10013020)
DeleteFileA (Address: 0x10013038)
GetFileSize (Address: 0x10013028)
SetEndOfFile (Address: 0x10013030)
SetFileAttributesA (Address: 0x1001303c)
SetFilePointer (Address: 0x1001302c)
SetFileTime (Address: 0x10013024)
WriteFile (Address: 0x10013034)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x10013044)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x10013054)
HeapAlloc (Address: 0x10013050)
HeapFree (Address: 0x1001304c)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x1001305c)

api-ms-win-core-libraryloader-l1-1-0.dll

FreeLibrary (Address: 0x10013078)
GetModuleFileNameA (Address: 0x10013068)
GetModuleHandleExA (Address: 0x1001306c)
GetProcAddress (Address: 0x10013064)
LoadLibraryExA (Address: 0x10013070)
LoadLibraryExW (Address: 0x10013074)

api-ms-win-core-localregistry-l1-1-0.dll

RegCloseKey (Address: 0x10013088)
RegOpenKeyExW (Address: 0x10013080)
RegQueryValueExW (Address: 0x10013084)

api-ms-win-core-memory-l1-1-0.dll

CreateFileMappingW (Address: 0x100130a8)
FlushViewOfFile (Address: 0x100130a4)
MapViewOfFile (Address: 0x10013098)
MapViewOfFileEx (Address: 0x10013094)
UnmapViewOfFile (Address: 0x10013090)
VirtualProtect (Address: 0x100130a0)
VirtualQuery (Address: 0x1001309c)

api-ms-win-core-misc-l1-1-0.dll

lstrcmpiA (Address: 0x100130b0)

api-ms-win-core-processenvironment-l1-1-0.dll

SearchPathW (Address: 0x100130b8)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x100130d8)
GetCurrentProcessId (Address: 0x100130c0)
GetCurrentThreadId (Address: 0x100130d0)
TerminateProcess (Address: 0x100130dc)
TlsAlloc (Address: 0x100130cc)
TlsFree (Address: 0x100130d4)
TlsGetValue (Address: 0x100130c8)
TlsSetValue (Address: 0x100130c4)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x100130e4)

api-ms-win-core-string-l1-1-0.dll

MultiByteToWideChar (Address: 0x100130ec)
WideCharToMultiByte (Address: 0x100130f0)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x10013100)
DeleteCriticalSection (Address: 0x10013104)
InitializeCriticalSection (Address: 0x100130f8)
ReleaseSRWLockExclusive (Address: 0x100130fc)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemInfo (Address: 0x10013120)
GetSystemTime (Address: 0x10013114)
GetSystemTimeAsFileTime (Address: 0x10013110)
GetVersion (Address: 0x10013118)
GetVersionExA (Address: 0x1001310c)
SystemTimeToFileTime (Address: 0x1001311c)

api-ms-win-crt-private-l1-1-0.dll

__CxxFrameHandler3 (Address: 0x1001316c)
_except_handler4_common (Address: 0x10013168)
_o___std_type_info_destroy_list (Address: 0x10013170)
_o__cexit (Address: 0x10013128)
_o__configure_narrow_argv (Address: 0x1001312c)
_o__execute_onexit_table (Address: 0x10013130)
_o__initialize_narrow_environment (Address: 0x10013134)
_o__initialize_onexit_table (Address: 0x10013138)
_o__makepath_s (Address: 0x1001313c)
_o__seh_filter_dll (Address: 0x10013140)
_o__splitpath_s (Address: 0x10013148)
_o__stricmp (Address: 0x1001314c)
_o__strnicmp (Address: 0x10013150)
_o__ultoa_s (Address: 0x10013154)
_o_atoi (Address: 0x10013158)
_o_strcat_s (Address: 0x1001315c)
_o_strcpy_s (Address: 0x10013160)
_o_strncpy_s (Address: 0x10013164)
memcmp (Address: 0x10013178)
memcpy (Address: 0x1001317c)
memmove (Address: 0x10013144)
strrchr (Address: 0x10013174)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x10013188)
_initterm_e (Address: 0x10013184)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x10013190)
strncmp (Address: 0x10013194)

api-ms-win-eventing-provider-l1-1-0.dll

EventUnregister (Address: 0x1001319c)

ntdll.dll

RtlImageNtHeaderEx (Address: 0x100131a4)
RtlRunOnceExecuteOnce (Address: 0x100131a8)