filenameapphelp.dll
size576000 (0x8ca00)
md5919899e1bfc7a239a2ed278cd8494806
typePE32 executable (DLL) (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe8

Rich Header

lib idversiontimes used
1473072938
10259
239401165
241401166
242401168
238401161
2514011679
237401161
240401161

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections5
TimeDateStamp0x559f3b08
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x2102
Magic0x10b
LinkerVersion12.10
SizeOfCode0x6d400
SizeOfInitializedData0x1fa00
SizeOfUninitializedData0
AddressOfEntryPoint0x40ab0
BaseOfCode0x1000
BaseOfData0x6f000
ImageBase0x78c80000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion10.0
ImageVersion10.0
SubsystemVersion10.0
Reserved10
SizeOfImage0x91000
SizeOfHeaders0x400
CheckSum0x90c01
Subsystem2
DllCharacteristics0x4140
SizeOfStackReserve0x40000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v7.0 DLL

Sections

namevavsizeraw sizeflags
.text0x10000x6d3740x6d400R-X CODE
.data0x6f0000x1bd80x1400RW- IDATA
.idata0x710000x20780x2200R-- IDATA
.rsrc0x740000x167180x16800R-- IDATA
.reloc0x8b0000x527c0x5400R-- IDATA DISCARDABLE

Data Directory

typevasize
EXPORT0x6c8700x1b04
IMPORT0x714280x1a4
RESOURCE0x740000x16718
EXCEPTION00
SECURITY00
BASERELOC0x8b0000x527c
DEBUG0x3ab00x38
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG0x3b080x68
Bound_IAT00
IAT0x710000x424
Delay_IAT00
CLR_Header00
typenamesizecp
MUI#12320
WEVT_TEMPLATE#116340
RCDATA#100887610
VERSION#19360
module_namehintordfunction_name
ntdll.dll1795ZwOpenProcessToken
ntdll.dll1841ZwQueryInformationToken
ntdll.dll1785ZwOpenKey
ntdll.dll1870ZwQueryValueKey
ntdll.dll1659ZwCreateKey
ntdll.dll970RtlGetFullPathName_UEx
ntdll.dll1838ZwQueryInformationProcess
ntdll.dll1942ZwSetInformationProcess
ntdll.dll1269RtlSecondsSince1970ToTime
ntdll.dll148LdrResSearchResource
ntdll.dll2173strncmp
ntdll.dll1938ZwSetInformationFile
ntdll.dll1879ZwReadFile
ntdll.dll732RtlCompareMemory
ntdll.dll1012RtlImageDirectoryEntryToData
ntdll.dll226NtApphelpCacheControl
ntdll.dll1191RtlQueryEnvironmentVariable_U
ntdll.dll851RtlDosPathNameToNtPathName_U_WithStatus
ntdll.dll775RtlCreateEnvironmentEx
ntdll.dll1287RtlSetEnvironmentVar
ntdll.dll1324RtlSizeHeap
ntdll.dll836RtlDestroyEnvironment
ntdll.dll483NtReadFile
ntdll.dll618NtWriteFile
ntdll.dll2155qsort
ntdll.dll2213wcsspn
ntdll.dll2092_vscwprintf
ntdll.dll967RtlGetFileMUIPath
ntdll.dll439NtQueryInformationFile
ntdll.dll574NtSetValueKey
ntdll.dll304NtDeleteValueKey
ntdll.dll1005RtlGetVersion
ntdll.dll1865ZwQuerySystemInformation
ntdll.dll850RtlDosPathNameToNtPathName_U
ntdll.dll261NtCreateKey
ntdll.dll544NtSetInformationKey
ntdll.dll301NtDeleteKey
ntdll.dll691RtlAppendUnicodeStringToString
ntdll.dll1716ZwEnumerateValueKey
ntdll.dll1369RtlUnicodeStringToInteger
ntdll.dll1970ZwSetValueKey
ntdll.dll1479SbSelectProcedure
ntdll.dll442NtQueryInformationProcess
ntdll.dll2117atol
ntdll.dll2078_strnicmp
ntdll.dll1333RtlSubAuthorityCountSid
ntdll.dll1334RtlSubAuthoritySid
ntdll.dll787RtlCreateServiceSid
ntdll.dll1160RtlNtStatusToDosError
ntdll.dll883RtlEqualSid
ntdll.dll959RtlGetDaclSecurityDescriptor
ntdll.dll1008RtlIdentifierAuthoritySid
ntdll.dll2207wcsncmp
ntdll.dll64EtwEventWriteNoRegistration
ntdll.dll425NtQueryAttributesFile
ntdll.dll456NtQueryObject
ntdll.dll2107_wcsupr_s
ntdll.dll674RtlAddVectoredExceptionHandler
ntdll.dll2076_strlwr
ntdll.dll2180strstr
ntdll.dll2099_wcslwr
ntdll.dll678RtlAllocateAndInitializeSid
ntdll.dll718RtlCheckTokenMembership
ntdll.dll939RtlFreeSid
ntdll.dll130LdrLoadDll
ntdll.dll2162sscanf_s
ntdll.dll124LdrGetProcedureAddressEx
ntdll.dll123LdrGetProcedureAddress
ntdll.dll1120RtlLengthRequiredSid
ntdll.dll386NtOpenFile
ntdll.dll464NtQuerySecurityObject
ntdll.dll986RtlGetOwnerSecurityDescriptor
ntdll.dll423NtProtectVirtualMemory
ntdll.dll1049RtlInitializeSRWLock
ntdll.dll107LdrEnumerateLoadedModules
ntdll.dll646RtlAcquireSRWLockExclusive
ntdll.dll1245RtlReleaseSRWLockExclusive
ntdll.dll647RtlAcquireSRWLockShared
ntdll.dll1246RtlReleaseSRWLockShared
ntdll.dll1675ZwCreateSection
ntdll.dll1771ZwMapViewOfSection
ntdll.dll1999ZwUnmapViewOfSection
ntdll.dll1835ZwQueryInformationFile
ntdll.dll1848ZwQueryKey
ntdll.dll1654ZwCreateFile
ntdll.dll2198wcscat_s
ntdll.dll2202wcscpy_s
ntdll.dll884RtlEqualString
ntdll.dll2168strcpy_s
ntdll.dll1019RtlInitAnsiString
ntdll.dll2165strchr
ntdll.dll2159sprintf_s
ntdll.dll1636ZwClose
ntdll.dll1228RtlReAllocateHeap
ntdll.dll2199wcschr
ntdll.dll2189toupper
ntdll.dll1389RtlUpcaseUnicodeChar
ntdll.dll1390RtlUpcaseUnicodeString
ntdll.dll1474RtlxAnsiStringToUnicodeSize
ntdll.dll178NlsMbCodePageTag
ntdll.dll1027RtlInitString
ntdll.dll943RtlGUIDFromString
ntdll.dll1288RtlSetEnvironmentVariable
ntdll.dll2212wcsrchr
ntdll.dll1367RtlUnicodeStringToAnsiString
ntdll.dll709RtlCaptureContext
ntdll.dll848RtlDoesFileExists_U
ntdll.dll792RtlCreateUnicodeString
ntdll.dll2101_wcsnicmp
ntdll.dll2095_vsnwprintf
ntdll.dll126LdrInitShimEngineDynamic
ntdll.dll687RtlAnsiStringToUnicodeString
ntdll.dll1020RtlInitAnsiStringEx
ntdll.dll710RtlCaptureStackBackTrace
ntdll.dll1119RtlLeaveCriticalSection
ntdll.dll871RtlEnterCriticalSection
ntdll.dll1347RtlTimeToTimeFields
ntdll.dll2093_vsnprintf
ntdll.dll2075_stricmp
ntdll.dll2178strrchr
ntdll.dll2110_wtoi
ntdll.dll819RtlDeleteCriticalSection
ntdll.dll1037RtlInitializeCriticalSection
ntdll.dll109LdrFindEntryForAddress
ntdll.dll60EtwEventWrite
ntdll.dll59EtwEventUnregister
ntdll.dll55EtwEventEnabled
ntdll.dll57EtwEventRegister
ntdll.dll1030RtlInitUnicodeString
ntdll.dll2098_wcsicmp
ntdll.dll2214wcsstr
ntdll.dll116LdrGetDllHandle
ntdll.dll238NtClose
ntdll.dll895RtlExpandEnvironmentStrings_U
ntdll.dll474NtQueryValueKey
ntdll.dll389NtOpenKey
ntdll.dll859RtlDuplicateUnicodeString
ntdll.dll1330RtlStringFromGUID
ntdll.dll692RtlAppendUnicodeToString
ntdll.dll765RtlCopyUnicodeString
ntdll.dll930RtlFormatCurrentUserKeyPath
ntdll.dll256NtCreateFile
ntdll.dll934RtlFreeAnsiString
ntdll.dll936RtlFreeHeap
ntdll.dll681RtlAllocateHeap
ntdll.dll941RtlFreeUnicodeString
ntdll.dll1159RtlNtPathNameToDosPathName
ntdll.dll2151memmove
ntdll.dll1443RtlpEnsureBufferSize
ntdll.dll2185swprintf_s
ntdll.dll1031RtlInitUnicodeStringEx
ntdll.dll2042_chkstk
ntdll.dll2148memcmp
ntdll.dll2149memcpy
ntdll.dll2153memset
ntdll.dll1388RtlUnwind
api-ms-win-core-appcompat-l1-1-1.dll4BaseFlushAppcompatCache
api-ms-win-core-appcompat-l1-1-1.dll5BaseFreeAppCompatDataForProcess
api-ms-win-core-appcompat-l1-1-1.dll7BaseIsAppcompatInfrastructureDisabled
api-ms-win-core-appcompat-l1-1-1.dll8BaseReadAppCompatDataForProcess
api-ms-win-core-handle-l1-1-0.dllCloseHandle
api-ms-win-core-file-l1-2-1.dll89WriteFile
api-ms-win-core-file-l1-2-1.dll42GetFileAttributesW
api-ms-win-core-file-l1-2-1.dll20FindFirstFileW
api-ms-win-core-file-l1-2-1.dll9DeleteFileW
api-ms-win-core-file-l1-2-1.dll49GetFinalPathNameByHandleW
api-ms-win-core-file-l1-2-1.dll38GetDriveTypeW
api-ms-win-core-file-l1-2-1.dll83SetFilePointer
api-ms-win-core-file-l1-2-1.dll12FindClose
api-ms-win-core-file-l1-2-1.dll26FindNextFileW
api-ms-win-core-file-l1-2-1.dll60GetTempPathW
api-ms-win-core-file-l1-2-1.dll55GetLongPathNameW
api-ms-win-core-file-l1-2-1.dll6CreateFileW
api-ms-win-core-processthreads-l1-1-2.dll75TerminateProcess
api-ms-win-core-processthreads-l1-1-2.dll47OpenProcess
api-ms-win-core-processthreads-l1-1-2.dll17GetCurrentThreadId
api-ms-win-core-processthreads-l1-1-2.dll13GetCurrentProcessId
api-ms-win-core-processthreads-l1-1-2.dll3CreateProcessW
api-ms-win-core-processthreads-l1-1-2.dll12GetCurrentProcess
api-ms-win-core-processthreads-l1-1-2.dll30GetProcessTimes
api-ms-win-core-processthreads-l1-1-2.dll6CreateThread
api-ms-win-core-processthreads-l1-1-2.dll19GetExitCodeProcess
api-ms-win-core-processthreads-l1-1-2.dll51ProcessIdToSessionId
api-ms-win-core-synch-l1-2-0.dll13CreateWaitableTimerExW
api-ms-win-core-synch-l1-2-0.dll42SetWaitableTimer
api-ms-win-core-synch-l1-2-0.dll17EnterCriticalSection
api-ms-win-core-synch-l1-2-0.dll29LeaveCriticalSection
api-ms-win-core-synch-l1-2-0.dll25InitializeCriticalSectionAndSpinCount
api-ms-win-core-synch-l1-2-0.dll54WaitForSingleObject
api-ms-win-core-synch-l1-2-0.dll32OpenMutexW
api-ms-win-core-libraryloader-l1-2-0.dll19GetModuleHandleW
api-ms-win-core-libraryloader-l1-2-0.dll31SizeofResource
api-ms-win-core-libraryloader-l1-2-0.dll23LoadLibraryExW
api-ms-win-core-libraryloader-l1-2-0.dll1DisableThreadLibraryCalls
api-ms-win-core-libraryloader-l1-2-0.dll28LockResource
api-ms-win-core-libraryloader-l1-2-0.dll20GetProcAddress
api-ms-win-core-libraryloader-l1-2-0.dll25LoadResource
api-ms-win-core-libraryloader-l1-2-0.dll15GetModuleFileNameW
api-ms-win-core-libraryloader-l1-2-0.dll11FreeLibrary
api-ms-win-core-libraryloader-l1-2-0.dll18GetModuleHandleExW
api-ms-win-core-processenvironment-l1-2-0.dll11GetEnvironmentVariableW
api-ms-win-core-processenvironment-l1-2-0.dll21SetEnvironmentVariableW
api-ms-win-core-processenvironment-l1-2-0.dll9GetEnvironmentStringsW
api-ms-win-core-processenvironment-l1-2-0.dll3FreeEnvironmentStringsW
api-ms-win-core-processenvironment-l1-2-0.dll7GetCurrentDirectoryW
api-ms-win-core-processenvironment-l1-2-0.dll1ExpandEnvironmentStringsW
api-ms-win-core-errorhandling-l1-1-1.dll5GetLastError
api-ms-win-core-errorhandling-l1-1-1.dll17UnhandledExceptionFilter
api-ms-win-core-errorhandling-l1-1-1.dll15SetUnhandledExceptionFilter
api-ms-win-core-errorhandling-l1-1-1.dll13SetLastError
api-ms-win-core-sysinfo-l1-2-1.dll20GetSystemTimeAsFileTime
api-ms-win-core-sysinfo-l1-2-1.dll24GetTickCount
api-ms-win-core-sysinfo-l1-2-1.dll15GetSystemDirectoryW
api-ms-win-core-sysinfo-l1-2-1.dll25GetTickCount64
api-ms-win-core-sysinfo-l1-2-1.dll23GetSystemWindowsDirectoryW
api-ms-win-core-debug-l1-1-1.dll4DebugBreak
api-ms-win-core-debug-l1-1-1.dll6OutputDebugStringA
api-ms-win-core-profile-l1-1-0.dllQueryPerformanceCounter
api-ms-win-eventing-provider-l1-1-0.dll4EventSetInformation
api-ms-win-eventing-provider-l1-1-0.dll3EventRegister
api-ms-win-eventing-provider-l1-1-0.dll5EventUnregister
api-ms-win-eventing-provider-l1-1-0.dll9EventWriteTransfer
api-ms-win-eventing-provider-l1-1-0.dll6EventWrite
KERNEL32.dll948LocalFree
KERNEL32.dll238CreateToolhelp32Snapshot
KERNEL32.dll1402Thread32Next
KERNEL32.dll1401Thread32First
KERNEL32.dll1502Wow64RevertWow64FsRedirection
KERNEL32.dll1498Wow64DisableWow64FsRedirection
KERNEL32.dll1023PackageIdFromFullName
KERNEL32.dll944LocalAlloc
KERNEL32.dll650GetPackageFullName
KERNEL32.dll889IsWow64Process
api-ms-win-security-base-l1-2-0.dll42EqualSid
api-ms-win-security-base-l1-2-0.dll45GetAce
api-ms-win-security-base-l1-2-0.dll46GetAclInformation
api-ms-win-security-base-l1-2-0.dll54GetSecurityDescriptorDacl
api-ms-win-security-base-l1-2-0.dll22AllocateAndInitializeSid
api-ms-win-core-registry-l1-1-0.dllRegCloseKey
api-ms-win-core-registry-l1-1-0.dll18RegGetKeySecurity
api-ms-win-core-libraryloader-l1-2-1.dll9FindResourceW
api-ms-win-core-localization-obsolete-l1-3-0.dll8GetUserDefaultUILanguage
api-ms-win-core-localization-l1-2-1.dll61VerLanguageNameW
api-ms-win-core-localization-l1-2-1.dll39IsDBCSLeadByte
api-ms-win-core-string-l1-1-0.dll7WideCharToMultiByte
ordentry_vafunction_name
190x46e20
200x1ec40
210x46950
220x46da0
230x301c0
240x30770
250x47a10
260x4b860
270x30db0
280x33d00
290x4e4b0
300x4e780
310x4dee0
320x4bbb0
330x4bbe0
340x30cb0
350x52830DWM8And16Bit_ChangeDisplaySettingsExW_CallOut
360x603e0DWM8And16Bit_DirectDrawCreateEx_CallOut
370x60420DWM8And16Bit_DirectDrawCreate_CallOut
380x53030DWM8And16Bit_EnumDisplaySettingsExW_CallOut
390x53c30DWM8And16Bit_IsShimApplied_CallOut
400x60640DWM8And16Bit_RestoreDisplayMode_CallOut
410x42b00AllowPermLayer
420x40b90ApphelpCheckExe
430x41750ApphelpCheckIME
440x41790ApphelpCheckInstallShieldPackage
450x40bc0ApphelpCheckModule
460x41960ApphelpCheckMsiPackage
470x40d20ApphelpCheckRunApp
480x40d60ApphelpCheckRunAppEx
490x2dc20ApphelpCheckShellObject
500x2e8e0ApphelpCreateAppcompatData
510x41be0ApphelpFixMsiPackage
520x41e80ApphelpFixMsiPackageExe
530x42cc0ApphelpFreeFileAttributes
540x42cd0ApphelpGetFileAttributes
550x420d0ApphelpGetMsiProperties
560x42170ApphelpGetNTVDMInfo
570x34820ApphelpGetShimDebugLevel
580x33420ApphelpIsPortMonAllowed
590x41020ApphelpParseModuleData
600x41100ApphelpQueryModuleData
610x1e4d0ApphelpQueryModuleDataEx
620x42ce0ApphelpShowDialog
630x42bb0ApphelpUpdateCacheEntry
640x42be0GetPermLayers
650x43540SE_AddHookset
660x43600SE_CALLBACK_AddHook
670x43680SE_CALLBACK_Lookup
680x25b50SE_COM_AddHook
690x32b80SE_COM_AddServer
700x436f0SE_COM_HookInterface
710x43770SE_COM_HookObject
720x437f0SE_COM_Lookup
730x28750SE_DllLoaded
740x43850SE_DllUnloaded
750x438a0SE_DynamicShim
760x43b40SE_GetHookAPIs
770x43c80SE_GetMaxShimCount
780x29c60SE_GetProcAddressForCaller
790x43c90SE_GetProcAddressIgnoreIncExc
800x43d00SE_GetProcAddressLoad
810x43d50SE_GetShimCount
820x20c10SE_GetShimId
830x2ef40SE_InitializeEngine
840x224d0SE_InstallAfterInit
850x21d40SE_InstallBeforeInit
860x43d70SE_IsShimDll
870x22d50SE_LdrEntryRemoved
880x31980SE_LdrResolveDllName
890x43dc0SE_LookupAddress
900x43e90SE_LookupCaller
910x31a70SE_ProcessDying
920x31a30SE_ShimDPF
930x30610SE_ShimDllLoaded
940x43ff0SE_WINRT_AddHook
950x440e0SE_WINRT_HookObject
960x208d0SdbAddLayerTagRefToQuery
970x48830SdbApphelpNotify
980x48870SdbApphelpNotifyEx2
990x48900SdbApphelpNotifyEx
1000x469a0SdbBeginWriteListTag
1010x4b540SdbBuildCompatEnvVariables
1020x48a10SdbCloseApphelpInformation
1030x2cfc0SdbCloseDatabase
1040x46c00SdbCloseDatabaseWrite
1050x4c570SdbCloseLocalDatabase
1060x46c20SdbCommitIndexes
1070x46c70SdbCreateDatabase
1080x48ab0SdbCreateHelpCenterURL
1090x4cc60SdbCreateMsiTransformFile
1100x46de0SdbDeclareIndex
1110x4b740SdbDeletePermLayerKeys
1120x44290SdbDumpSearchPathPartCaches
1130x470f0SdbEndWriteListTag
1140x4cd70SdbEnumMsiTransforms
1150x49040SdbEscapeApphelpURL
1160x4cee0SdbFindCustomActionForPackage
1170x4d910SdbFindFirstDWORDIndexedTag
1180x4d9b0SdbFindFirstGUIDIndexedTag
1190x4cf90SdbFindFirstMsiPackage
1200x4cfd0SdbFindFirstMsiPackage_Str
1210x27260SdbFindFirstNamedTag
1220x1ea70SdbFindFirstStringIndexedTag
1230x27650SdbFindFirstTag
1240x26ea0SdbFindFirstTagRef
1250x4d050SdbFindMsiPackageByID
1260x4da50SdbFindNextDWORDIndexedTag
1270x4da80SdbFindNextGUIDIndexedTag
1280x4d0d0SdbFindNextMsiPackage
1290x32c60SdbFindNextStringIndexedTag
1300x27790SdbFindNextTag
1310x27dc0SdbFindNextTagRef
1320x1d760SdbFormatAttribute
1330x4c170SdbFreeDatabaseInformation
1340x1dd90SdbFreeFileAttributes
1350x44290SdbFreeFileInfo
1360x47950SdbFreeFlagInfo
1370x442a0SdbGUIDFromString
1380x442d0SdbGUIDToString
1390x42a90SdbGetAppCompatDataSize
1400x1f4d0SdbGetAppPatchDir
1410x23db0SdbGetBinaryTagData
1420x47980SdbGetDatabaseGUID
1430x24490SdbGetDatabaseID
1440x4c1a0SdbGetDatabaseInformation
1450x4c250SdbGetDatabaseInformationByName
1460x33970SdbGetDatabaseMatch
1470x4c3b0SdbGetDatabaseVersion
1480x2e730SdbGetDllPath
1490x50a40SdbGetEntryFlags
1500x1db90SdbGetFileAttributes
1510x4e850SdbGetFileImageType
1520x1e460SdbGetFileImageTypeEx
1530x44300SdbGetFileInfo
1540x274d0SdbGetFirstChild
1550x4c590SdbGetImageType
1560x1eed0SdbGetIndex
1570x2bf80SdbGetItemFromItemRef
1580x4e900SdbGetLayerName
1590x47a80SdbGetLayerTagRef
1600x47b30SdbGetLocalPDB
1610x1f3e0SdbGetMatchingExe
1620x4d170SdbGetMsiPackageInformation
1630x47b50SdbGetNamedLayer
1640x26650SdbGetNextChild
1650x30f30SdbGetNthUserSdb
1660x47bc0SdbGetPDBFromGUID
1670x4b9b0SdbGetPermLayerKeys
1680x34820SdbGetShowDebugInfoOption
1690x34820SdbGetShowDebugInfoOptionValue
1700x4e9b0SdbGetStandardDatabaseGUID
1710x26510SdbGetStringTagPtr
1720x27990SdbGetTagDataSize
1730x27d80SdbGetTagFromTagID
1740x50b90SdbGrabMatchingInfo
1750x50bc0SdbGrabMatchingInfoEx
1760x33cc0SdbInitDatabase
1770x230b0SdbInitDatabaseEx
1780x44470SdbIsNullGUID
1790x4ea30SdbIsStandardDatabase
1800x47c50SdbIsTagrefFromLocalDB
1810x22570SdbIsTagrefFromMainDB
1820x491d0SdbLoadString
1830x4db00SdbMakeIndexKeyFromString
1840x49290SdbOpenApphelpDetailsDatabase
1850x44310SdbOpenApphelpDetailsDatabaseSP
1860x49320SdbOpenApphelpInformation
1870x49500SdbOpenApphelpInformationByID
1880x49610SdbOpenApphelpResourceFile
1890x4c500SdbOpenDatabase
1900x496e0SdbOpenDbFromGuid
1910x4c5b0SdbOpenLocalDatabase
1920x2ea80SdbPackAppCompatData
1930x497a0SdbQueryApphelpInformation
1940x47ef0SdbQueryBlockUpgrade
1950x47f60SdbQueryContext
1960x32680SdbQueryData
1970x326b0SdbQueryDataEx
1980x32720SdbQueryDataExTagID
1990x481e0SdbQueryFlagInfo
2000x33b60SdbQueryFlagMask
2010x51890SdbQueryName
2020x48240SdbQueryReinstallUpgrade
2030x49a30SdbReadApphelpData
2040x49b50SdbReadApphelpDetailsData
2050x4f120SdbReadBYTETag
2060x4f1a0SdbReadBYTETagRef
2070x23600SdbReadBinaryTag
2080x246b0SdbReadDWORDTag
2090x20b00SdbReadDWORDTagRef
2100x4f500SdbReadEntryInformation
2110x4d2b0SdbReadMsiTransformInfo
2120x4c5e0SdbReadPatchBits
2130x30c40SdbReadQWORDTag
2140x30bf0SdbReadQWORDTagRef
2150x25e30SdbReadStringTag
2160x25dd0SdbReadStringTagRef
2170x23df0SdbReadWORDTag
2180x4f2c0SdbReadWORDTagRef
2190x4dfe0SdbRegisterDatabase
2200x4e000SdbRegisterDatabaseEx
2210x2d000SdbReleaseDatabase
2220x48360SdbReleaseMatchingExe
2230x4eaa0SdbResolveDatabase
2240x49f20SdbSetApphelpDebugParameters
2250x4edf0SdbSetEntryFlags
2260x4c720SdbSetImageType
2270x4ba40SdbSetPermLayerKeys
2280x49ff0SdbShowApphelpDialog
2290x2f680SdbShowApphelpFromQuery
2300x47230SdbStartIndexing
2310x47260SdbStopIndexing
2320x44320SdbStringDuplicate
2330x44350SdbStringReplace
2340x44390SdbStringReplaceArray
2350x28500SdbTagIDToTagRef
2360x27e60SdbTagRefToTagID
2370x4e870SdbTagToString
2380x2fb50SdbUnpackAppCompatData
2390x2fbb0SdbUnpackQueryResult
2400x4e5d0SdbUnregisterDatabase
2410x47290SdbWriteBYTETag
2420x472d0SdbWriteBinaryTag
2430x47310SdbWriteBinaryTagFromFile
2440x47430SdbWriteDWORDTag
2450x47470SdbWriteNULLTag
2460x474b0SdbWriteQWORDTag
2470x474f0SdbWriteStringRefTag
2480x47530SdbWriteStringTag
2490x47580SdbWriteStringTagDirect
2500x475e0SdbWriteWORDTag
2510x42bf0SetPermLayerState
2520x42c20SetPermLayerStateEx
2530x42c60SetPermLayers
2540x34820ShimDbgPrint
2550x42d20ShimDumpCache
2560x41740ShimFlushCache
module_nameapphelp.dll
flags0
timestamp2015-07-10 02:51:59
version0.0
ordinal_base19
nFunctions238
nNames222
Names(222)0x6cc50
Functions(238)0x6c898
NameOrdinals(222)0x6cfc8

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionApplication Compatibility Client Library
FileVersion10.0.10240.16384 (th1.150709-1700)
InternalNameApphelp
LegalCopyright© Microsoft Corporation. All rights reserved.
OriginalFilenameApphelp
ProductNameMicrosoft® Windows® Operating System
ProductVersion10.0.10240.16384

VS_FIXEDFILEINFO

FileVersion10.0.10240.16384
ProductVersion10.0.10240.16384
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags0
FileOS0x40004
FileType2
FileSubtype0
offsetsizetypecomment
0576000DLL07/10/2015 03:24:56#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK