dbghelp.dll
v10.0.19041.5848
64-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 257
#1101 · 0x12eea0
#1102 · 0x12ef90
#1103 · 0x12f120
#1104 · 0x12f4a0
#1105 · 0x12fb80
#1106 · 0x12fc10
#1107 · 0x12f0e0
#1108 · 0x12f3d0
#1109 · 0x12fb00
#1110 · 0x12fba0
SymAllocDiaString
#1111 · 0x12ed60
SymFreeDiaString
#1112 · 0x12f020
SymGetDiaSession
#1113 · 0x12f030
SymGetLineFromAddrEx
#1114 · 0x12f0e0
#1115 · 0x12f160
#1116 · 0x12f230
#1117 · 0x12ed80
#1118 · 0x12ee30
#1119 · 0xffa60
SymGetLineFromNameEx
#1120 · 0x12f3d0
SymGetLineNextEx
#1121 · 0x12fb00
SymGetLinePrevEx
#1122 · 0x12fba0
SymGetOmapBlockBase
#1123 · 0x12fc30
SymSetDiaSession
#1124 · 0x12fcb0
_EFN_DumpImage
#1125 · 0x121330
DbgHelpCreateUserDump
#1126 · 0x13de10
DbgHelpCreateUserDumpW
#1127 · 0x13df10
EnumDirTree
#1128 · 0x136fe0
EnumDirTreeW
#1129 · 0x137110
EnumerateLoadedModules
#1130 · 0x1307a0
EnumerateLoadedModules64
#1131 · 0x1307a0
EnumerateLoadedModulesEx
#1132 · 0x130800
EnumerateLoadedModulesExW
#1133 · 0x130860
EnumerateLoadedModulesW64
#1134 · 0x1308c0
ExtensionApiVersion
#1135 · 0x1256e0
FindDebugInfoFile
#1136 · 0x137160
FindDebugInfoFileEx
#1137 · 0x137180
FindDebugInfoFileExW
#1138 · 0x137250
FindExecutableImage
#1139 · 0x1372a0
FindExecutableImageEx
#1140 · 0x1372c0
FindExecutableImageExW
#1141 · 0x1373c0
FindFileInPath
#1142 · 0x137410
FindFileInSearchPath
#1143 · 0x137460
GetSymLoadError
#1144 · 0x130920
GetTimestampForLoadedLibrary
#1145 · 0x1279a0
ImageDirectoryEntryToData
#1146 · 0x127620
ImageDirectoryEntryToDataEx
#1147 · 0x127640
ImageNtHeader
#1148 · 0x127770
ImageRvaToSection
#1149 · 0x1277b0
ImageRvaToVa
#1150 · 0x127820
ImagehlpApiVersion
#1151 · 0x1374b0
ImagehlpApiVersionEx
#1152 · 0x1374c0
MakeSureDirectoryPathExists
#1153 · 0x137500
MiniDumpReadDumpStream
#1154 · 0x1c273a
MiniDumpWriteDump
#1155 · 0x1c276b
RangeMapAddPeImageSections
#1156 · 0x14f7c0
RangeMapCreate
#1157 · 0x14f880
RangeMapFree
#1158 · 0x14f8e0
RangeMapRead
#1159 · 0x14f900
RangeMapRemove
#1160 · 0x14f960
RangeMapWrite
#1161 · 0x14f9b0
RemoveInvalidModuleList
#1162 · 0x19470
ReportSymbolLoadSummary
#1163 · 0x120bd0
SearchTreeForFile
#1164 · 0x137690
SearchTreeForFileW
#1165 · 0x1376c0
SetCheckUserInterruptShared
#1166 · 0x19470
SetSymLoadError
#1167 · 0x130930
StackWalk
#1168 · 0xe170
StackWalk64
#1169 · 0xe170
StackWalkEx
#1170 · 0xe2f0
SymAddSourceStream
#1171 · 0x130940
SymAddSourceStreamA
#1172 · 0x130950
SymAddSourceStreamW
#1173 · 0x1309c0
SymAddSymbol
#1174 · 0x130b60
SymAddSymbolW
#1175 · 0x130be0
SymAddrIncludeInlineTrace
#1176 · 0x130cf0
SymCleanup
#1177 · 0xe120
SymCompareInlineTrace
#1178 · 0x130e70
SymDeleteSymbol
#1179 · 0x1313c0
SymDeleteSymbolW
#1180 · 0x131430
SymEnumLines
#1181 · 0x131520
SymEnumLinesW
#1182 · 0x1315f0
SymEnumProcesses
#1183 · 0x131660
SymEnumSourceFileTokens
#1184 · 0x131700
SymEnumSourceFiles
#1185 · 0x1317b0
SymEnumSourceFilesW
#1186 · 0x1317e0
SymEnumSourceLines
#1187 · 0x131810
SymEnumSourceLinesW
#1188 · 0x131860
SymEnumSym
#1189 · 0x1318b0
SymEnumSymbols
#1190 · 0x1318e0
SymEnumSymbolsEx
#1191 · 0x131910
SymEnumSymbolsExW
#1192 · 0x1319b0
SymEnumSymbolsForAddr
#1193 · 0x131a20
SymEnumSymbolsForAddrW
#1194 · 0x131b50
SymEnumSymbolsW
#1195 · 0x131c90
SymEnumTypes
#1196 · 0x131cc0
SymEnumTypesByName
#1197 · 0x131d10
SymEnumTypesByNameW
#1198 · 0x131de0
SymEnumTypesW
#1199 · 0x131e40
SymEnumerateModules
#1200 · 0x131e90
SymEnumerateModules64
#1201 · 0x131e90
SymEnumerateModulesW64
#1202 · 0x131ed0
SymEnumerateSymbols
#1203 · 0x131f10
SymEnumerateSymbols64
#1204 · 0x131f10
SymEnumerateSymbolsW
#1205 · 0x131f60
SymEnumerateSymbolsW64
#1206 · 0x131f60
SymFindDebugInfoFile
#1207 · 0x1376f0
SymFindDebugInfoFileW
#1208 · 0x1377e0
SymFindExecutableImage
#1209 · 0x137870
SymFindExecutableImageW
#1210 · 0x137970
SymFindFileInPath
#1211 · 0x137a00
SymFindFileInPathW
#1212 · 0x137b40
SymFromAddr
#1213 · 0x131fb0
SymFromAddrW
#1214 · 0x131fe0
SymFromIndex
#1215 · 0x132010
SymFromIndexW
#1216 · 0x132080
SymFromInlineContext
#1217 · 0x132180
SymFromInlineContextW
#1218 · 0x1321e0
SymFromName
#1219 · 0x198b0
SymFromNameW
#1220 · 0x132240
SymFromToken
#1221 · 0x132270
SymFromTokenW
#1222 · 0x132320
SymFunctionTableAccess
#1223 · 0xec60
SymFunctionTableAccess64
#1224 · 0xec60
SymFunctionTableAccess64AccessRoutines
#1225 · 0xec80
SymGetExtendedOption
#1226 · 0x132430
SymGetFileLineOffsets64
#1227 · 0x129d40
SymGetHomeDirectory
#1228 · 0x132450
SymGetHomeDirectoryW
#1229 · 0x1324d0
SymGetLineFromAddr
#1230 · 0x132590
SymGetLineFromAddr64
#1231 · 0x132590
SymGetLineFromAddrW64
#1232 · 0x1325c0
SymGetLineFromInlineContext
#1233 · 0x1325f0
SymGetLineFromInlineContextW
#1234 · 0x132630
SymGetLineFromName
#1235 · 0x132670
SymGetLineFromName64
#1236 · 0x132670
SymGetLineFromNameW64
#1237 · 0x1326a0
SymGetLineNext
#1238 · 0x1326d0
SymGetLineNext64
#1239 · 0x1326d0
SymGetLineNextW64
#1240 · 0x1326e0
SymGetLinePrev
#1241 · 0x132700
SymGetLinePrev64
#1242 · 0x132700
SymGetLinePrevW64
#1243 · 0x132710
SymGetModuleBase
#1244 · 0xfa00
SymGetModuleBase64
#1245 · 0xfa00
SymGetModuleInfo
#1246 · 0x132730
SymGetModuleInfo64
#1247 · 0x132730
SymGetModuleInfoW
#1248 · 0x10a60
SymGetModuleInfoW64
#1249 · 0x10a60
SymGetOmaps
#1250 · 0x1327c0
SymGetOptions
#1251 · 0x192c0
SymGetScope
#1252 · 0x1328b0
SymGetScopeW
#1253 · 0x132930
SymGetSearchPath
#1254 · 0x132a60
SymGetSearchPathW
#1255 · 0x132af0
SymGetSourceFile
#1256 · 0x132b60
SymGetSourceFileChecksum
#1257 · 0x132be0
SymGetSourceFileChecksumW
#1258 · 0x132c70
SymGetSourceFileFromToken
#1259 · 0x132da0
SymGetSourceFileFromTokenW
#1260 · 0x132e50
SymGetSourceFileToken
#1261 · 0x132ed0
SymGetSourceFileTokenW
#1262 · 0x132f40
SymGetSourceFileW
#1263 · 0x133010
SymGetSourceVarFromToken
#1264 · 0x133090
SymGetSourceVarFromTokenW
#1265 · 0x133160
SymGetSymFromAddr
#1266 · 0x133210
SymGetSymFromAddr64
#1267 · 0x133210
SymGetSymFromName
#1268 · 0x133250
SymGetSymFromName64
#1269 · 0x133250
SymGetSymNext
#1270 · 0x1332c0
SymGetSymNext64
#1271 · 0x1332c0
SymGetSymPrev
#1272 · 0x1332e0
SymGetSymPrev64
#1273 · 0x1332e0
SymGetSymbolFile
#1274 · 0x13c780
SymGetSymbolFileW
#1275 · 0x13c8b0
SymGetTypeFromName
#1276 · 0x1332f0
SymGetTypeFromNameW
#1277 · 0x1333a0
SymGetTypeInfo
#1278 · 0x133510
SymGetTypeInfoEx
#1279 · 0x133550
SymGetUnwindInfo
#1280 · 0x133580
SymInitialize
#1281 · 0x11b60
SymInitializeW
#1282 · 0x17d30
SymLoadModule
#1283 · 0x1ae80
SymLoadModule64
#1284 · 0x1ae80
SymLoadModuleEx
#1285 · 0x1aec0
SymLoadModuleExW
#1286 · 0x133710
SymMatchFileName
#1287 · 0x133770
SymMatchFileNameW
#1288 · 0x133880
SymMatchString
#1289 · 0x133970
SymMatchStringA
#1290 · 0x1339b0
SymMatchStringW
#1291 · 0x1339c0
SymNext
#1292 · 0x133a00
SymNextW
#1293 · 0x133aa0
SymPrev
#1294 · 0x133ac0
SymPrevW
#1295 · 0x133b60
SymQueryInlineTrace
#1296 · 0x133b70
SymRefreshModuleList
#1297 · 0x133e80
SymRegisterCallback
#1298 · 0x133f00
SymRegisterCallback64
#1299 · 0x133f00
SymRegisterCallbackW64
#1300 · 0x133f80
SymRegisterFunctionEntryCallback
#1301 · 0x134010
SymRegisterFunctionEntryCallback64
#1302 · 0x134010
SymSearch
#1303 · 0x134090
SymSearchW
#1304 · 0x134150
SymSetContext
#1305 · 0x1341d0
SymSetExtendedOption
#1306 · 0x134290
SymSetHomeDirectory
#1307 · 0x1342c0
SymSetHomeDirectoryW
#1308 · 0x134360
SymSetOptions
#1309 · 0x181c0
SymSetParentWindow
#1310 · 0x1343e0
SymSetScopeFromAddr
#1311 · 0x134410
SymSetScopeFromIndex
#1312 · 0x134420
SymSetScopeFromInlineContext
#1313 · 0x1344e0
SymSetSearchPath
#1314 · 0x1345a0
SymSetSearchPathW
#1315 · 0x179d0
SymSrvDeltaName
#1316 · 0x13cd60
SymSrvDeltaNameW
#1317 · 0x13ce30
SymSrvGetFileIndexInfo
#1318 · 0x13cfd0
SymSrvGetFileIndexInfoW
#1319 · 0x13d0b0
SymSrvGetFileIndexString
#1320 · 0x13d1f0
SymSrvGetFileIndexStringW
#1321 · 0x13d2b0
SymSrvGetFileIndexes
#1322 · 0x13d380
SymSrvGetFileIndexesW
#1323 · 0x13d3f0
SymSrvGetSupplement
#1324 · 0x13d4b0
SymSrvGetSupplementW
#1325 · 0x13d570
SymSrvIsStore
#1326 · 0x13d690
SymSrvIsStoreW
#1327 · 0x13d6e0
SymSrvStoreFile
#1328 · 0x13d820
SymSrvStoreFileW
#1329 · 0x13d8c0
SymSrvStoreSupplement
#1330 · 0x13d980
SymSrvStoreSupplementW
#1331 · 0x13da50
SymUnDName
#1332 · 0x1345f0
SymUnDName64
#1333 · 0x1345f0
SymUnloadModule
#1334 · 0x134650
SymUnloadModule64
#1335 · 0x134650
UnDecorateSymbolName
#1336 · 0x8900
UnDecorateSymbolNameW
#1337 · 0x134740
WinDbgExtensionDllInit
#1338 · 0x1257d0
block
#1339 · 0x125820
chksym
#1340 · 0x1259f0
dbghelp
#1341 · 0x134880
dh
#1342 · 0x125be0
fptr
#1343 · 0x125bf0
homedir
#1344 · 0x125c80
inlinedbg
#1345 · 0x125db0
itoldyouso
#1346 · 0x125e20
lmi
#1347 · 0x126010
lminfo
#1348 · 0x126330
omap
#1349 · 0x126550
optdbgdump
#1350 · 0x126770
optdbgdumpaddr
#1351 · 0x1268c0
srcfiles
#1352 · 0x126a10
stack_force_ebp
#1353 · 0x126b40
stackdbg
#1354 · 0x126cb0
sym
#1355 · 0x126e80
symsrv
#1356 · 0x126fd0
vc7fpo
#1357 · 0x127020
No function matches your filter.
Imported DLLs & functions 243
DebugBreak
0x10317b9a0
IsDebuggerPresent
0x10317b9a8
OutputDebugStringA
0x10317b990
OutputDebugStringW
0x10317b998
DelayLoadFailureHook
0x10317b9b8
GetLastError
0x10317b9d0
SetErrorMode
0x10317b9e8
SetLastError
0x10317b9c8
SetUnhandledExceptionFilter
0x10317b9d8
UnhandledExceptionFilter
0x10317b9e0
CreateDirectoryA
0x10317baa0
CreateDirectoryW
0x10317ba60
CreateFileA
0x10317ba68
CreateFileW
0x10317ba80
DeleteFileW
0x10317ba48
FindClose
0x10317ba38
FindFirstFileW
0x10317ba70
FindNextFileW
0x10317b9f8
GetFileAttributesA
0x10317ba28
GetFileAttributesW
0x10317ba78
GetFileSize
0x10317ba90
GetFileSizeEx
0x10317ba88
GetFileType
0x10317ba18
GetFullPathNameW
0x10317ba50
ReadFile
0x10317ba58
RemoveDirectoryW
0x10317ba98
SetEndOfFile
0x10317ba20
SetFileAttributesW
0x10317ba08
SetFilePointer
0x10317ba30
SetFilePointerEx
0x10317ba40
SetFileTime
0x10317ba10
WriteFile
0x10317ba00
GetProcessHeap
0x10317bae0
HeapAlloc
0x10317bad8
HeapFree
0x10317bac8
HeapReAlloc
0x10317bad0
InitializeSListHead
0x10317baf0
DeviceIoControl
0x10317bb00
CreateFileMappingA
0x10317bb10
FreeLibrary
0x10317bb30
GetModuleFileNameW
0x10317bb20
GetModuleHandleExW
0x10317bb40
GetModuleHandleW
0x10317bb38
GetProcAddress
0x10317bb48
LoadLibraryExA
0x10317bb50
LoadLibraryExW
0x10317bb28
RegCloseKey
0x10317bb88
RegEnumKeyExW
0x10317bb80
RegOpenKeyExW
0x10317bb78
RegQueryInfoKeyW
0x10317bb98
RegQueryValueExW
0x10317bb90
CreateFileMappingW
0x10317bbc0
MapViewOfFile
0x10317bbc8
MapViewOfFileEx
0x10317bbd8
ReadProcessMemory
0x10317bbe0
UnmapViewOfFile
0x10317bbb8
VirtualAlloc
0x10317bba8
VirtualFree
0x10317bbd0
VirtualProtect
0x10317bbb0
FormatMessageW
0x10317bbf8
LocalAlloc
0x10317bbf0
Sleep
0x10317bc00
ExpandEnvironmentStringsW
0x10317bc20
GetEnvironmentVariableW
0x10317bc10
SetEnvironmentVariableA
0x10317bc18
GetCurrentProcess
0x10317bc30
GetCurrentProcessId
0x10317bc48
GetCurrentThread
0x10317bc68
GetCurrentThreadId
0x10317bc58
OpenThreadToken
0x10317bc38
TerminateProcess
0x10317bc70
TlsAlloc
0x10317bc78
TlsFree
0x10317bc50
TlsGetValue
0x10317bc60
TlsSetValue
0x10317bc40
QueryPerformanceCounter
0x10317bc88
RtlCaptureContext
0x10317bc98
RtlLookupFunctionEntry
0x10317bca8
RtlVirtualUnwind
0x10317bca0
GetStringTypeW
0x10317bcc8
MultiByteToWideChar
0x10317bcc0
WideCharToMultiByte
0x10317bcb8
AcquireSRWLockExclusive
0x10317bce8
DeleteCriticalSection
0x10317bce0
EnterCriticalSection
0x10317bd00
InitializeCriticalSection
0x10317bd10
InitializeCriticalSectionAndSpinCount
0x10317bd18
InitializeCriticalSectionEx
0x10317bcd8
LeaveCriticalSection
0x10317bd08
OpenProcess
0x10317bcf0
ReleaseSRWLockExclusive
0x10317bcf8
InitOnceExecuteOnce
0x10317bd28
GetSystemDirectoryW
0x10317bd60
GetSystemInfo
0x10317bd40
GetSystemTime
0x10317bd38
GetSystemTimeAsFileTime
0x10317bd50
GetTickCount
0x10317bd48
GetVersionExA
0x10317bd68
GetVersionExW
0x10317bd58
SystemTimeToFileTime
0x10317bd70
__C_specific_handler
0x10317c0e0
__CxxFrameHandler3
0x10317c0e8
__std_terminate
0x10317c090
__uncaught_exception
0x10317bfd0
__unDName
0x10317c0d0
__unDNameEx
0x10317c0b8
_CxxThrowException
0x10317bfd8
_o____lc_codepage_func
0x10317c078
_o____lc_locale_name_func
0x10317c070
_o____mb_cur_max_func
0x10317c068
_o___acrt_iob_func
0x10317c060
_o___pctype_func
0x10317c058
_o___std_exception_copy
0x10317c050
_o___std_exception_destroy
0x10317c048
_o___std_type_info_destroy_list
0x10317c040
_o___stdio_common_vfprintf
0x10317c038
_o___stdio_common_vsnprintf_s
0x10317c030
_o___stdio_common_vsnwprintf_s
0x10317c028
_o___stdio_common_vsprintf_s
0x10317c020
_o___stdio_common_vsscanf
0x10317c018
_o___stdio_common_vswprintf_s
0x10317c010
_o__callnewh
0x10317c008
_o__calloc_base
0x10317c000
_o__cexit
0x10317bff8
_o__close
0x10317bff0
_o__configure_narrow_argv
0x10317bfe8
_o__crt_atexit
0x10317bfe0
_o__errno
0x10317bdb0
_o__execute_onexit_table
0x10317bdb8
_o__filelengthi64
0x10317bdc0
_o__fullpath
0x10317bdc8
_o__initialize_narrow_environment
0x10317bdd0
_o__initialize_onexit_table
0x10317bdd8
_o__invalid_parameter_noinfo
0x10317bde0
_o__invalid_parameter_noinfo_noreturn
0x10317bde8
_o__itoa_s
0x10317bdf0
_o__lseeki64
0x10317bdf8
_o__ltoa
0x10317be00
_o__mbscmp
0x10317be08
_o__memicmp
0x10317be10
_o__open_osfhandle
0x10317be18
_o__purecall
0x10317be20
_o__read
0x10317be28
_o__register_onexit_function
0x10317be30
_o__seh_filter_dll
0x10317be38
_o__splitpath_s
0x10317be40
_o__stricmp
0x10317be48
_o__strlwr
0x10317be50
_o__strnicmp
0x10317be58
_o__wcsdup
0x10317be60
_o__wcsicmp
0x10317be68
_o__wcslwr
0x10317be70
_o__wcsnicmp
0x10317be78
_o__wctime64
0x10317be80
_o__wdupenv_s
0x10317be88
_o__wfsopen
0x10317be90
_o__wfullpath
0x10317be98
_o__wgetenv
0x10317bea0
_o__wmakepath_s
0x10317bea8
_o__wsplitpath_s
0x10317beb0
_o__wtoi
0x10317beb8
_o_abort
0x10317bec0
_o_atoi
0x10317bec8
_o_atol
0x10317bed0
_o_bsearch
0x10317bed8
_o_calloc
0x10317bee0
_o_fclose
0x10317bee8
_o_fflush
0x10317bef0
_o_fread
0x10317bef8
_o_free
0x10317bf00
_o_frexp
0x10317bf08
_o_fseek
0x10317bf10
_o_ftell
0x10317bf18
_o_isspace
0x10317bf20
_o_iswprint
0x10317bf28
_o_iswspace
0x10317bf30
_o_iswxdigit
0x10317bf38
_o_localeconv
0x10317bf40
_o_malloc
0x10317bf48
_o_qsort
0x10317bf50
_o_realloc
0x10317bf58
_o_setlocale
0x10317bf60
_o_strcat_s
0x10317bf68
_o_strcpy_s
0x10317bf70
_o_strncat_s
0x10317bf78
_o_strncpy_s
0x10317bf80
_o_terminate
0x10317bf88
_o_tolower
0x10317bf90
_o_towlower
0x10317bf98
_o_wcscat_s
0x10317bfa0
_o_wcscpy_s
0x10317bfa8
_o_wcsncat_s
0x10317bfb0
_o_wcsncpy_s
0x10317bfb8
_o_wcstoul
0x10317bfc0
_o_wmemcpy_s
0x10317bfc8
memcmp
0x10317c0b0
memcpy
0x10317c0d8
memmove
0x10317c0a8
strchr
0x10317c0c8
strrchr
0x10317c0c0
strstr
0x10317c088
wcschr
0x10317c0a0
wcsrchr
0x10317c080
wcsstr
0x10317c098
__doserrno
0x10317c108
_initterm
0x10317c100
_initterm_e
0x10317c0f8
memset
0x10317c150
strcmp
0x10317c140
strcspn
0x10317c130
strlen
0x10317c128
strncmp
0x10317c120
strnlen
0x10317c118
wcscmp
0x10317c148
wcsncmp
0x10317c158
wcsnlen
0x10317c138
LocalFree
0x10317c180
EventActivityIdControl
0x10317c198
EventRegister
0x10317c190
EventUnregister
0x10317c1a8
EventWriteTransfer
0x10317c1a0
AccessCheck
0x10317c1c0
GetFileSecurityW
0x10317c1c8
ImpersonateSelf
0x10317c1d0
RevertToSelf
0x10317c1b8
NtQueryInformationProcess
0x10317c218
NtQueryObject
0x10317c1e0
RtlCreateQueryDebugBuffer
0x10317c1e8
RtlDestroyQueryDebugBuffer
0x10317c208
RtlEqualUnicodeString
0x10317c210
RtlQueryProcessDebugInformation
0x10317c1f0
RtlRunOnceExecuteOnce
0x10317c1f8
RtlUTF8ToUnicodeN
0x10317c200
No function matches your filter.