radardt.dll

v10.0.19041.1 32-bit Windows NT Analyzed
Description
Microsoft Windows Resource Exhaustion Detector
Authors
© Microsoft Corporation. All rights reserved.
File size
89.5 KB
Uploaded
2025-12-01 08:03
Views
96
SHA-256
47d05ca5f4d158567f14cad106b86258

Exported functions 5

RdrSysprepSpecialize #1 · 0xaa00
RdrSysprepSpecializeOffline #2 · 0xaef0
WdiDiagnosticModuleMain #3 · 0x2700
WdiGetDiagnosticModuleInterfaceVersion #4 · 0x39f0
WdiHandleInstance #5 · 0x2ae0

Imported DLLs & functions 106

ADVAPI32.dll 20
CloseServiceHandle 0x10013004
CopySid 0x10013020
EnumServicesStatusExW 0x1001300c
EqualSid 0x10013000
GetLengthSid 0x1001302c
GetTokenInformation 0x10013030
IsValidSid 0x10013024
OpenProcessToken 0x10013028
OpenSCManagerW 0x10013008
OpenServiceW 0x10013014
QueryServiceConfigW 0x10013010
RegCloseKey 0x1001303c
RegCreateKeyExW 0x1001301c
RegDeleteKeyExW 0x10013040
RegDeleteValueW 0x10013018
RegEnumKeyExW 0x10013048
RegOpenKeyExW 0x1001304c
RegQueryInfoKeyW 0x10013044
RegQueryValueExW 0x10013038
RegSetValueExW 0x10013034
KERNEL32.dll 52
CloseHandle 0x100130e4
CreateEventW 0x100130a8
CreateProcessW 0x100130d0
CreateThread 0x1001305c
CreateWaitableTimerExW 0x100130ac
DelayLoadFailureHook 0x10013094
DeleteCriticalSection 0x10013108
DisableThreadLibraryCalls 0x10013104
EnterCriticalSection 0x100130ec
ExpandEnvironmentStringsW 0x10013118
FindFirstVolumeW 0x100130c0
FindNextVolumeW 0x100130d4
FindVolumeClose 0x100130cc
FreeLibrary 0x10013070
FreeLibraryAndExitThread 0x100130a4
GetCurrentProcess 0x10013088
GetCurrentProcessId 0x10013054
GetCurrentThreadId 0x1001307c
GetDriveTypeW 0x100130d8
GetFileAttributesW 0x100130c4
GetLastError 0x100130fc
GetModuleFileNameW 0x100130e0
GetModuleHandleExW 0x10013114
GetProcessHeap 0x1001310c
GetProcessId 0x1001306c
GetProcessTimes 0x10013060
GetSystemDirectoryW 0x100130c8
GetSystemTimeAsFileTime 0x100130bc
GetTickCount 0x10013078
HeapAlloc 0x100130e8
HeapCreate 0x10013110
HeapDestroy 0x10013058
HeapFree 0x100130b8
InitializeCriticalSection 0x100130f4
IsWow64Process 0x10013064
K32GetModuleFileNameExW 0x1001308c
LeaveCriticalSection 0x100130f0
LocalFree 0x10013068
OpenProcess 0x10013098
ProcessIdToSessionId 0x1001311c
QueryPerformanceCounter 0x10013080
ResetEvent 0x100130b4
ResolveDelayLoadedAPI 0x10013090
SetEvent 0x10013100
SetLastError 0x10013074
SetUnhandledExceptionFilter 0x10013120
SetWaitableTimer 0x1001309c
TerminateProcess 0x10013084
TryEnterCriticalSection 0x100130b0
UnhandledExceptionFilter 0x100130dc
WaitForMultipleObjectsEx 0x100130a0
WaitForSingleObject 0x100130f8
KERNELBASE.dll 3
LocalAlloc 0x1001312c
Sleep 0x10013128
WTSGetServiceSessionId 0x10013130
msvcrt.dll 11
_amsg_exit 0x10013158
_except_handler4_common 0x10013148
_initterm 0x1001314c
_vsnwprintf 0x10013168
_wcsicmp 0x10013160
_XcptFilter 0x1001315c
free 0x10013154
malloc 0x10013150
memset 0x1001316c
qsort 0x10013164
wcsrchr 0x10013144
ntdll.dll 18
EtwEventEnabled 0x10013184
EtwEventRegister 0x10013180
EtwEventUnregister 0x10013190
EtwEventWrite 0x100131b0
EtwGetTraceEnableFlags 0x100131a0
EtwGetTraceEnableLevel 0x100131a8
EtwGetTraceLoggerHandle 0x100131a4
EtwRegisterTraceGuidsW 0x100131ac
EtwTraceMessage 0x100131b4
EtwUnregisterTraceGuids 0x1001319c
NtOpenEvent 0x10013174
NtQueryEvent 0x10013194
NtQuerySystemInformation 0x10013198
RtlAllocateAndInitializeSid 0x1001318c
RtlEqualUnicodeString 0x1001317c
RtlFreeSid 0x10013188
RtlInitUnicodeString 0x10013178
RtlNtStatusToDosError 0x100131b8
POWRPROF.dll 2
PowerSettingRegisterNotification 0x1001313c
PowerSettingUnregisterNotification 0x10013138