apphelp.dll - Apphelp - Application Compatibility Client Library

filename	apphelp.dll
size	576000 (0x8ca00)
md5	919899e1bfc7a239a2ed278cd8494806

type	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xe8

Rich Header

lib id	version	times used
147	30729	38
1	0	259
239	40116	5
241	40116	6
242	40116	8
238	40116	1
251	40116	79
237	40116	1
240	40116	1

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	5
TimeDateStamp	0x559f3b08
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x2102
Magic	0x10b
LinkerVersion	12.10
SizeOfCode	0x6d400
SizeOfInitializedData	0x1fa00
SizeOfUninitializedData	0
AddressOfEntryPoint	0x40ab0
BaseOfCode	0x1000
BaseOfData	0x6f000
ImageBase	0x78c80000
SectionAlignment	0x1000
FileAlignment	0x200
OperatingSystemVersion	10.0
ImageVersion	10.0
SubsystemVersion	10.0
Reserved1	0
SizeOfImage	0x91000
SizeOfHeaders	0x400
CheckSum	0x90c01
Subsystem	2
DllCharacteristics	0x4140
SizeOfStackReserve	0x40000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

name	va	vsize	raw size	flags
.text	0x1000	0x6d374	0x6d400	R-X CODE
.data	0x6f000	0x1bd8	0x1400	RW- IDATA
.idata	0x71000	0x2078	0x2200	R-- IDATA
.rsrc	0x74000	0x16718	0x16800	R-- IDATA
.reloc	0x8b000	0x527c	0x5400	R-- IDATA DISCARDABLE

Data Directory

type	va	size
EXPORT	0x6c870	0x1b04
IMPORT	0x71428	0x1a4
RESOURCE	0x74000	0x16718
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0x8b000	0x527c
DEBUG	0x3ab0	0x38
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0x3b08	0x68
Bound_IAT	0	0
IAT	0x71000	0x424
Delay_IAT	0	0
CLR_Header	0	0

show previews

type	name	size
MUI	#1	232
WEVT_TEMPLATE	#1	1634
RCDATA	#100	88761
VERSION	#1	936

module_name	hint	function_name
ntdll.dll	1795	ZwOpenProcessToken
ntdll.dll	1841	ZwQueryInformationToken
ntdll.dll	1785	ZwOpenKey
ntdll.dll	1870	ZwQueryValueKey
ntdll.dll	1659	ZwCreateKey
ntdll.dll	970	RtlGetFullPathName_UEx
ntdll.dll	1838	ZwQueryInformationProcess
ntdll.dll	1942	ZwSetInformationProcess
ntdll.dll	1269	RtlSecondsSince1970ToTime
ntdll.dll	148	LdrResSearchResource
ntdll.dll	2173	strncmp
ntdll.dll	1938	ZwSetInformationFile
ntdll.dll	1879	ZwReadFile
ntdll.dll	732	RtlCompareMemory
ntdll.dll	1012	RtlImageDirectoryEntryToData
ntdll.dll	226	NtApphelpCacheControl
ntdll.dll	1191	RtlQueryEnvironmentVariable_U
ntdll.dll	851	RtlDosPathNameToNtPathName_U_WithStatus
ntdll.dll	775	RtlCreateEnvironmentEx
ntdll.dll	1287	RtlSetEnvironmentVar
ntdll.dll	1324	RtlSizeHeap
ntdll.dll	836	RtlDestroyEnvironment
ntdll.dll	483	NtReadFile
ntdll.dll	618	NtWriteFile
ntdll.dll	2155	qsort
ntdll.dll	2213	wcsspn
ntdll.dll	2092	_vscwprintf
ntdll.dll	967	RtlGetFileMUIPath
ntdll.dll	439	NtQueryInformationFile
ntdll.dll	574	NtSetValueKey
ntdll.dll	304	NtDeleteValueKey
ntdll.dll	1005	RtlGetVersion
ntdll.dll	1865	ZwQuerySystemInformation
ntdll.dll	850	RtlDosPathNameToNtPathName_U
ntdll.dll	261	NtCreateKey
ntdll.dll	544	NtSetInformationKey
ntdll.dll	301	NtDeleteKey
ntdll.dll	691	RtlAppendUnicodeStringToString
ntdll.dll	1716	ZwEnumerateValueKey
ntdll.dll	1369	RtlUnicodeStringToInteger
ntdll.dll	1970	ZwSetValueKey
ntdll.dll	1479	SbSelectProcedure
ntdll.dll	442	NtQueryInformationProcess
ntdll.dll	2117	atol
ntdll.dll	2078	_strnicmp
ntdll.dll	1333	RtlSubAuthorityCountSid
ntdll.dll	1334	RtlSubAuthoritySid
ntdll.dll	787	RtlCreateServiceSid
ntdll.dll	1160	RtlNtStatusToDosError
ntdll.dll	883	RtlEqualSid
ntdll.dll	959	RtlGetDaclSecurityDescriptor
ntdll.dll	1008	RtlIdentifierAuthoritySid
ntdll.dll	2207	wcsncmp
ntdll.dll	64	EtwEventWriteNoRegistration
ntdll.dll	425	NtQueryAttributesFile
ntdll.dll	456	NtQueryObject
ntdll.dll	2107	_wcsupr_s
ntdll.dll	674	RtlAddVectoredExceptionHandler
ntdll.dll	2076	_strlwr
ntdll.dll	2180	strstr
ntdll.dll	2099	_wcslwr
ntdll.dll	678	RtlAllocateAndInitializeSid
ntdll.dll	718	RtlCheckTokenMembership
ntdll.dll	939	RtlFreeSid
ntdll.dll	130	LdrLoadDll
ntdll.dll	2162	sscanf_s
ntdll.dll	124	LdrGetProcedureAddressEx
ntdll.dll	123	LdrGetProcedureAddress
ntdll.dll	1120	RtlLengthRequiredSid
ntdll.dll	386	NtOpenFile
ntdll.dll	464	NtQuerySecurityObject
ntdll.dll	986	RtlGetOwnerSecurityDescriptor
ntdll.dll	423	NtProtectVirtualMemory
ntdll.dll	1049	RtlInitializeSRWLock
ntdll.dll	107	LdrEnumerateLoadedModules
ntdll.dll	646	RtlAcquireSRWLockExclusive
ntdll.dll	1245	RtlReleaseSRWLockExclusive
ntdll.dll	647	RtlAcquireSRWLockShared
ntdll.dll	1246	RtlReleaseSRWLockShared
ntdll.dll	1675	ZwCreateSection
ntdll.dll	1771	ZwMapViewOfSection
ntdll.dll	1999	ZwUnmapViewOfSection
ntdll.dll	1835	ZwQueryInformationFile
ntdll.dll	1848	ZwQueryKey
ntdll.dll	1654	ZwCreateFile
ntdll.dll	2198	wcscat_s
ntdll.dll	2202	wcscpy_s
ntdll.dll	884	RtlEqualString
ntdll.dll	2168	strcpy_s
ntdll.dll	1019	RtlInitAnsiString
ntdll.dll	2165	strchr
ntdll.dll	2159	sprintf_s
ntdll.dll	1636	ZwClose
ntdll.dll	1228	RtlReAllocateHeap
ntdll.dll	2199	wcschr
ntdll.dll	2189	toupper
ntdll.dll	1389	RtlUpcaseUnicodeChar
ntdll.dll	1390	RtlUpcaseUnicodeString
ntdll.dll	1474	RtlxAnsiStringToUnicodeSize
ntdll.dll	178	NlsMbCodePageTag
ntdll.dll	1027	RtlInitString
ntdll.dll	943	RtlGUIDFromString
ntdll.dll	1288	RtlSetEnvironmentVariable
ntdll.dll	2212	wcsrchr
ntdll.dll	1367	RtlUnicodeStringToAnsiString
ntdll.dll	709	RtlCaptureContext
ntdll.dll	848	RtlDoesFileExists_U
ntdll.dll	792	RtlCreateUnicodeString
ntdll.dll	2101	_wcsnicmp
ntdll.dll	2095	_vsnwprintf
ntdll.dll	126	LdrInitShimEngineDynamic
ntdll.dll	687	RtlAnsiStringToUnicodeString
ntdll.dll	1020	RtlInitAnsiStringEx
ntdll.dll	710	RtlCaptureStackBackTrace
ntdll.dll	1119	RtlLeaveCriticalSection
ntdll.dll	871	RtlEnterCriticalSection
ntdll.dll	1347	RtlTimeToTimeFields
ntdll.dll	2093	_vsnprintf
ntdll.dll	2075	_stricmp
ntdll.dll	2178	strrchr
ntdll.dll	2110	_wtoi
ntdll.dll	819	RtlDeleteCriticalSection
ntdll.dll	1037	RtlInitializeCriticalSection
ntdll.dll	109	LdrFindEntryForAddress
ntdll.dll	60	EtwEventWrite
ntdll.dll	59	EtwEventUnregister
ntdll.dll	55	EtwEventEnabled
ntdll.dll	57	EtwEventRegister
ntdll.dll	1030	RtlInitUnicodeString
ntdll.dll	2098	_wcsicmp
ntdll.dll	2214	wcsstr
ntdll.dll	116	LdrGetDllHandle
ntdll.dll	238	NtClose
ntdll.dll	895	RtlExpandEnvironmentStrings_U
ntdll.dll	474	NtQueryValueKey
ntdll.dll	389	NtOpenKey
ntdll.dll	859	RtlDuplicateUnicodeString
ntdll.dll	1330	RtlStringFromGUID
ntdll.dll	692	RtlAppendUnicodeToString
ntdll.dll	765	RtlCopyUnicodeString
ntdll.dll	930	RtlFormatCurrentUserKeyPath
ntdll.dll	256	NtCreateFile
ntdll.dll	934	RtlFreeAnsiString
ntdll.dll	936	RtlFreeHeap
ntdll.dll	681	RtlAllocateHeap
ntdll.dll	941	RtlFreeUnicodeString
ntdll.dll	1159	RtlNtPathNameToDosPathName
ntdll.dll	2151	memmove
ntdll.dll	1443	RtlpEnsureBufferSize
ntdll.dll	2185	swprintf_s
ntdll.dll	1031	RtlInitUnicodeStringEx
ntdll.dll	2042	_chkstk
ntdll.dll	2148	memcmp
ntdll.dll	2149	memcpy
ntdll.dll	2153	memset
ntdll.dll	1388	RtlUnwind
api-ms-win-core-appcompat-l1-1-1.dll	4	BaseFlushAppcompatCache
api-ms-win-core-appcompat-l1-1-1.dll	5	BaseFreeAppCompatDataForProcess
api-ms-win-core-appcompat-l1-1-1.dll	7	BaseIsAppcompatInfrastructureDisabled
api-ms-win-core-appcompat-l1-1-1.dll	8	BaseReadAppCompatDataForProcess
api-ms-win-core-handle-l1-1-0.dll		CloseHandle
api-ms-win-core-file-l1-2-1.dll	89	WriteFile
api-ms-win-core-file-l1-2-1.dll	42	GetFileAttributesW
api-ms-win-core-file-l1-2-1.dll	20	FindFirstFileW
api-ms-win-core-file-l1-2-1.dll	9	DeleteFileW
api-ms-win-core-file-l1-2-1.dll	49	GetFinalPathNameByHandleW
api-ms-win-core-file-l1-2-1.dll	38	GetDriveTypeW
api-ms-win-core-file-l1-2-1.dll	83	SetFilePointer
api-ms-win-core-file-l1-2-1.dll	12	FindClose
api-ms-win-core-file-l1-2-1.dll	26	FindNextFileW
api-ms-win-core-file-l1-2-1.dll	60	GetTempPathW
api-ms-win-core-file-l1-2-1.dll	55	GetLongPathNameW
api-ms-win-core-file-l1-2-1.dll	6	CreateFileW
api-ms-win-core-processthreads-l1-1-2.dll	75	TerminateProcess
api-ms-win-core-processthreads-l1-1-2.dll	47	OpenProcess
api-ms-win-core-processthreads-l1-1-2.dll	17	GetCurrentThreadId
api-ms-win-core-processthreads-l1-1-2.dll	13	GetCurrentProcessId
api-ms-win-core-processthreads-l1-1-2.dll	3	CreateProcessW
api-ms-win-core-processthreads-l1-1-2.dll	12	GetCurrentProcess
api-ms-win-core-processthreads-l1-1-2.dll	30	GetProcessTimes
api-ms-win-core-processthreads-l1-1-2.dll	6	CreateThread
api-ms-win-core-processthreads-l1-1-2.dll	19	GetExitCodeProcess
api-ms-win-core-processthreads-l1-1-2.dll	51	ProcessIdToSessionId
api-ms-win-core-synch-l1-2-0.dll	13	CreateWaitableTimerExW
api-ms-win-core-synch-l1-2-0.dll	42	SetWaitableTimer
api-ms-win-core-synch-l1-2-0.dll	17	EnterCriticalSection
api-ms-win-core-synch-l1-2-0.dll	29	LeaveCriticalSection
api-ms-win-core-synch-l1-2-0.dll	25	InitializeCriticalSectionAndSpinCount
api-ms-win-core-synch-l1-2-0.dll	54	WaitForSingleObject
api-ms-win-core-synch-l1-2-0.dll	32	OpenMutexW
api-ms-win-core-libraryloader-l1-2-0.dll	19	GetModuleHandleW
api-ms-win-core-libraryloader-l1-2-0.dll	31	SizeofResource
api-ms-win-core-libraryloader-l1-2-0.dll	23	LoadLibraryExW
api-ms-win-core-libraryloader-l1-2-0.dll	1	DisableThreadLibraryCalls
api-ms-win-core-libraryloader-l1-2-0.dll	28	LockResource
api-ms-win-core-libraryloader-l1-2-0.dll	20	GetProcAddress
api-ms-win-core-libraryloader-l1-2-0.dll	25	LoadResource
api-ms-win-core-libraryloader-l1-2-0.dll	15	GetModuleFileNameW
api-ms-win-core-libraryloader-l1-2-0.dll	11	FreeLibrary
api-ms-win-core-libraryloader-l1-2-0.dll	18	GetModuleHandleExW
api-ms-win-core-processenvironment-l1-2-0.dll	11	GetEnvironmentVariableW
api-ms-win-core-processenvironment-l1-2-0.dll	21	SetEnvironmentVariableW
api-ms-win-core-processenvironment-l1-2-0.dll	9	GetEnvironmentStringsW
api-ms-win-core-processenvironment-l1-2-0.dll	3	FreeEnvironmentStringsW
api-ms-win-core-processenvironment-l1-2-0.dll	7	GetCurrentDirectoryW
api-ms-win-core-processenvironment-l1-2-0.dll	1	ExpandEnvironmentStringsW
api-ms-win-core-errorhandling-l1-1-1.dll	5	GetLastError
api-ms-win-core-errorhandling-l1-1-1.dll	17	UnhandledExceptionFilter
api-ms-win-core-errorhandling-l1-1-1.dll	15	SetUnhandledExceptionFilter
api-ms-win-core-errorhandling-l1-1-1.dll	13	SetLastError
api-ms-win-core-sysinfo-l1-2-1.dll	20	GetSystemTimeAsFileTime
api-ms-win-core-sysinfo-l1-2-1.dll	24	GetTickCount
api-ms-win-core-sysinfo-l1-2-1.dll	15	GetSystemDirectoryW
api-ms-win-core-sysinfo-l1-2-1.dll	25	GetTickCount64
api-ms-win-core-sysinfo-l1-2-1.dll	23	GetSystemWindowsDirectoryW
api-ms-win-core-debug-l1-1-1.dll	4	DebugBreak
api-ms-win-core-debug-l1-1-1.dll	6	OutputDebugStringA
api-ms-win-core-profile-l1-1-0.dll		QueryPerformanceCounter
api-ms-win-eventing-provider-l1-1-0.dll	4	EventSetInformation
api-ms-win-eventing-provider-l1-1-0.dll	3	EventRegister
api-ms-win-eventing-provider-l1-1-0.dll	5	EventUnregister
api-ms-win-eventing-provider-l1-1-0.dll	9	EventWriteTransfer
api-ms-win-eventing-provider-l1-1-0.dll	6	EventWrite
KERNEL32.dll	948	LocalFree
KERNEL32.dll	238	CreateToolhelp32Snapshot
KERNEL32.dll	1402	Thread32Next
KERNEL32.dll	1401	Thread32First
KERNEL32.dll	1502	Wow64RevertWow64FsRedirection
KERNEL32.dll	1498	Wow64DisableWow64FsRedirection
KERNEL32.dll	1023	PackageIdFromFullName
KERNEL32.dll	944	LocalAlloc
KERNEL32.dll	650	GetPackageFullName
KERNEL32.dll	889	IsWow64Process
api-ms-win-security-base-l1-2-0.dll	42	EqualSid
api-ms-win-security-base-l1-2-0.dll	45	GetAce
api-ms-win-security-base-l1-2-0.dll	46	GetAclInformation
api-ms-win-security-base-l1-2-0.dll	54	GetSecurityDescriptorDacl
api-ms-win-security-base-l1-2-0.dll	22	AllocateAndInitializeSid
api-ms-win-core-registry-l1-1-0.dll		RegCloseKey
api-ms-win-core-registry-l1-1-0.dll	18	RegGetKeySecurity
api-ms-win-core-libraryloader-l1-2-1.dll	9	FindResourceW
api-ms-win-core-localization-obsolete-l1-3-0.dll	8	GetUserDefaultUILanguage
api-ms-win-core-localization-l1-2-1.dll	61	VerLanguageNameW
api-ms-win-core-localization-l1-2-1.dll	39	IsDBCSLeadByte
api-ms-win-core-string-l1-1-0.dll	7	WideCharToMultiByte

ord	entry_va	function_name
19	0x46e20
20	0x1ec40
21	0x46950
22	0x46da0
23	0x301c0
24	0x30770
25	0x47a10
26	0x4b860
27	0x30db0
28	0x33d00
29	0x4e4b0
30	0x4e780
31	0x4dee0
32	0x4bbb0
33	0x4bbe0
34	0x30cb0
35	0x52830	DWM8And16Bit_ChangeDisplaySettingsExW_CallOut
36	0x603e0	DWM8And16Bit_DirectDrawCreateEx_CallOut
37	0x60420	DWM8And16Bit_DirectDrawCreate_CallOut
38	0x53030	DWM8And16Bit_EnumDisplaySettingsExW_CallOut
39	0x53c30	DWM8And16Bit_IsShimApplied_CallOut
40	0x60640	DWM8And16Bit_RestoreDisplayMode_CallOut
41	0x42b00	AllowPermLayer
42	0x40b90	ApphelpCheckExe
43	0x41750	ApphelpCheckIME
44	0x41790	ApphelpCheckInstallShieldPackage
45	0x40bc0	ApphelpCheckModule
46	0x41960	ApphelpCheckMsiPackage
47	0x40d20	ApphelpCheckRunApp
48	0x40d60	ApphelpCheckRunAppEx
49	0x2dc20	ApphelpCheckShellObject
50	0x2e8e0	ApphelpCreateAppcompatData
51	0x41be0	ApphelpFixMsiPackage
52	0x41e80	ApphelpFixMsiPackageExe
53	0x42cc0	ApphelpFreeFileAttributes
54	0x42cd0	ApphelpGetFileAttributes
55	0x420d0	ApphelpGetMsiProperties
56	0x42170	ApphelpGetNTVDMInfo
57	0x34820	ApphelpGetShimDebugLevel
58	0x33420	ApphelpIsPortMonAllowed
59	0x41020	ApphelpParseModuleData
60	0x41100	ApphelpQueryModuleData
61	0x1e4d0	ApphelpQueryModuleDataEx
62	0x42ce0	ApphelpShowDialog
63	0x42bb0	ApphelpUpdateCacheEntry
64	0x42be0	GetPermLayers
65	0x43540	SE_AddHookset
66	0x43600	SE_CALLBACK_AddHook
67	0x43680	SE_CALLBACK_Lookup
68	0x25b50	SE_COM_AddHook
69	0x32b80	SE_COM_AddServer
70	0x436f0	SE_COM_HookInterface
71	0x43770	SE_COM_HookObject
72	0x437f0	SE_COM_Lookup
73	0x28750	SE_DllLoaded
74	0x43850	SE_DllUnloaded
75	0x438a0	SE_DynamicShim
76	0x43b40	SE_GetHookAPIs
77	0x43c80	SE_GetMaxShimCount
78	0x29c60	SE_GetProcAddressForCaller
79	0x43c90	SE_GetProcAddressIgnoreIncExc
80	0x43d00	SE_GetProcAddressLoad
81	0x43d50	SE_GetShimCount
82	0x20c10	SE_GetShimId
83	0x2ef40	SE_InitializeEngine
84	0x224d0	SE_InstallAfterInit
85	0x21d40	SE_InstallBeforeInit
86	0x43d70	SE_IsShimDll
87	0x22d50	SE_LdrEntryRemoved
88	0x31980	SE_LdrResolveDllName
89	0x43dc0	SE_LookupAddress
90	0x43e90	SE_LookupCaller
91	0x31a70	SE_ProcessDying
92	0x31a30	SE_ShimDPF
93	0x30610	SE_ShimDllLoaded
94	0x43ff0	SE_WINRT_AddHook
95	0x440e0	SE_WINRT_HookObject
96	0x208d0	SdbAddLayerTagRefToQuery
97	0x48830	SdbApphelpNotify
98	0x48870	SdbApphelpNotifyEx2
99	0x48900	SdbApphelpNotifyEx
100	0x469a0	SdbBeginWriteListTag
101	0x4b540	SdbBuildCompatEnvVariables
102	0x48a10	SdbCloseApphelpInformation
103	0x2cfc0	SdbCloseDatabase
104	0x46c00	SdbCloseDatabaseWrite
105	0x4c570	SdbCloseLocalDatabase
106	0x46c20	SdbCommitIndexes
107	0x46c70	SdbCreateDatabase
108	0x48ab0	SdbCreateHelpCenterURL
109	0x4cc60	SdbCreateMsiTransformFile
110	0x46de0	SdbDeclareIndex
111	0x4b740	SdbDeletePermLayerKeys
112	0x44290	SdbDumpSearchPathPartCaches
113	0x470f0	SdbEndWriteListTag
114	0x4cd70	SdbEnumMsiTransforms
115	0x49040	SdbEscapeApphelpURL
116	0x4cee0	SdbFindCustomActionForPackage
117	0x4d910	SdbFindFirstDWORDIndexedTag
118	0x4d9b0	SdbFindFirstGUIDIndexedTag
119	0x4cf90	SdbFindFirstMsiPackage
120	0x4cfd0	SdbFindFirstMsiPackage_Str
121	0x27260	SdbFindFirstNamedTag
122	0x1ea70	SdbFindFirstStringIndexedTag
123	0x27650	SdbFindFirstTag
124	0x26ea0	SdbFindFirstTagRef
125	0x4d050	SdbFindMsiPackageByID
126	0x4da50	SdbFindNextDWORDIndexedTag
127	0x4da80	SdbFindNextGUIDIndexedTag
128	0x4d0d0	SdbFindNextMsiPackage
129	0x32c60	SdbFindNextStringIndexedTag
130	0x27790	SdbFindNextTag
131	0x27dc0	SdbFindNextTagRef
132	0x1d760	SdbFormatAttribute
133	0x4c170	SdbFreeDatabaseInformation
134	0x1dd90	SdbFreeFileAttributes
135	0x44290	SdbFreeFileInfo
136	0x47950	SdbFreeFlagInfo
137	0x442a0	SdbGUIDFromString
138	0x442d0	SdbGUIDToString
139	0x42a90	SdbGetAppCompatDataSize
140	0x1f4d0	SdbGetAppPatchDir
141	0x23db0	SdbGetBinaryTagData
142	0x47980	SdbGetDatabaseGUID
143	0x24490	SdbGetDatabaseID
144	0x4c1a0	SdbGetDatabaseInformation
145	0x4c250	SdbGetDatabaseInformationByName
146	0x33970	SdbGetDatabaseMatch
147	0x4c3b0	SdbGetDatabaseVersion
148	0x2e730	SdbGetDllPath
149	0x50a40	SdbGetEntryFlags
150	0x1db90	SdbGetFileAttributes
151	0x4e850	SdbGetFileImageType
152	0x1e460	SdbGetFileImageTypeEx
153	0x44300	SdbGetFileInfo
154	0x274d0	SdbGetFirstChild
155	0x4c590	SdbGetImageType
156	0x1eed0	SdbGetIndex
157	0x2bf80	SdbGetItemFromItemRef
158	0x4e900	SdbGetLayerName
159	0x47a80	SdbGetLayerTagRef
160	0x47b30	SdbGetLocalPDB
161	0x1f3e0	SdbGetMatchingExe
162	0x4d170	SdbGetMsiPackageInformation
163	0x47b50	SdbGetNamedLayer
164	0x26650	SdbGetNextChild
165	0x30f30	SdbGetNthUserSdb
166	0x47bc0	SdbGetPDBFromGUID
167	0x4b9b0	SdbGetPermLayerKeys
168	0x34820	SdbGetShowDebugInfoOption
169	0x34820	SdbGetShowDebugInfoOptionValue
170	0x4e9b0	SdbGetStandardDatabaseGUID
171	0x26510	SdbGetStringTagPtr
172	0x27990	SdbGetTagDataSize
173	0x27d80	SdbGetTagFromTagID
174	0x50b90	SdbGrabMatchingInfo
175	0x50bc0	SdbGrabMatchingInfoEx
176	0x33cc0	SdbInitDatabase
177	0x230b0	SdbInitDatabaseEx
178	0x44470	SdbIsNullGUID
179	0x4ea30	SdbIsStandardDatabase
180	0x47c50	SdbIsTagrefFromLocalDB
181	0x22570	SdbIsTagrefFromMainDB
182	0x491d0	SdbLoadString
183	0x4db00	SdbMakeIndexKeyFromString
184	0x49290	SdbOpenApphelpDetailsDatabase
185	0x44310	SdbOpenApphelpDetailsDatabaseSP
186	0x49320	SdbOpenApphelpInformation
187	0x49500	SdbOpenApphelpInformationByID
188	0x49610	SdbOpenApphelpResourceFile
189	0x4c500	SdbOpenDatabase
190	0x496e0	SdbOpenDbFromGuid
191	0x4c5b0	SdbOpenLocalDatabase
192	0x2ea80	SdbPackAppCompatData
193	0x497a0	SdbQueryApphelpInformation
194	0x47ef0	SdbQueryBlockUpgrade
195	0x47f60	SdbQueryContext
196	0x32680	SdbQueryData
197	0x326b0	SdbQueryDataEx
198	0x32720	SdbQueryDataExTagID
199	0x481e0	SdbQueryFlagInfo
200	0x33b60	SdbQueryFlagMask
201	0x51890	SdbQueryName
202	0x48240	SdbQueryReinstallUpgrade
203	0x49a30	SdbReadApphelpData
204	0x49b50	SdbReadApphelpDetailsData
205	0x4f120	SdbReadBYTETag
206	0x4f1a0	SdbReadBYTETagRef
207	0x23600	SdbReadBinaryTag
208	0x246b0	SdbReadDWORDTag
209	0x20b00	SdbReadDWORDTagRef
210	0x4f500	SdbReadEntryInformation
211	0x4d2b0	SdbReadMsiTransformInfo
212	0x4c5e0	SdbReadPatchBits
213	0x30c40	SdbReadQWORDTag
214	0x30bf0	SdbReadQWORDTagRef
215	0x25e30	SdbReadStringTag
216	0x25dd0	SdbReadStringTagRef
217	0x23df0	SdbReadWORDTag
218	0x4f2c0	SdbReadWORDTagRef
219	0x4dfe0	SdbRegisterDatabase
220	0x4e000	SdbRegisterDatabaseEx
221	0x2d000	SdbReleaseDatabase
222	0x48360	SdbReleaseMatchingExe
223	0x4eaa0	SdbResolveDatabase
224	0x49f20	SdbSetApphelpDebugParameters
225	0x4edf0	SdbSetEntryFlags
226	0x4c720	SdbSetImageType
227	0x4ba40	SdbSetPermLayerKeys
228	0x49ff0	SdbShowApphelpDialog
229	0x2f680	SdbShowApphelpFromQuery
230	0x47230	SdbStartIndexing
231	0x47260	SdbStopIndexing
232	0x44320	SdbStringDuplicate
233	0x44350	SdbStringReplace
234	0x44390	SdbStringReplaceArray
235	0x28500	SdbTagIDToTagRef
236	0x27e60	SdbTagRefToTagID
237	0x4e870	SdbTagToString
238	0x2fb50	SdbUnpackAppCompatData
239	0x2fbb0	SdbUnpackQueryResult
240	0x4e5d0	SdbUnregisterDatabase
241	0x47290	SdbWriteBYTETag
242	0x472d0	SdbWriteBinaryTag
243	0x47310	SdbWriteBinaryTagFromFile
244	0x47430	SdbWriteDWORDTag
245	0x47470	SdbWriteNULLTag
246	0x474b0	SdbWriteQWORDTag
247	0x474f0	SdbWriteStringRefTag
248	0x47530	SdbWriteStringTag
249	0x47580	SdbWriteStringTagDirect
250	0x475e0	SdbWriteWORDTag
251	0x42bf0	SetPermLayerState
252	0x42c20	SetPermLayerStateEx
253	0x42c60	SetPermLayers
254	0x34820	ShimDbgPrint
255	0x42d20	ShimDumpCache
256	0x41740	ShimFlushCache

module_name	apphelp.dll
flags	0
timestamp	2015-07-10 02:51:59
version	0.0
ordinal_base	19
nFunctions	238
nNames	222
Names(222)	0x6cc50
Functions(238)	0x6c898
NameOrdinals(222)	0x6cfc8

StringTable 040904B0

CompanyName	Microsoft Corporation
FileDescription	Application Compatibility Client Library
FileVersion	10.0.10240.16384 (th1.150709-1700)
InternalName	Apphelp
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	Apphelp
ProductName	Microsoft® Windows® Operating System
ProductVersion	10.0.10240.16384

VS_FIXEDFILEINFO

FileVersion	10.0.10240.16384
ProductVersion	10.0.10240.16384
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	2
FileSubtype	0

show previews

offset	size	type	comment
0	576000	DLL	07/10/2015 03:24:56	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi	Support Me on Ko-fi
Yandex.Money
Thank you!

everything is OK

apphelp.dll-

MZ Header

Rich Header

DOS stub

PE Header

Packer / Compiler

Sections

Data Directory

StringTable 040904B0

VS_FIXEDFILEINFO

apphelp.dll
-