embeddedmodesvc.dll

Description: Debug Register Service

Version: 10.0.19041.5848

Architecture: 64-bit

Operating System: Windows NT

SHA256: 92c70ee3f07291e28385cdb187af8b43

File Size: 156.0 KB

Uploaded At: Dec. 1, 2025, 7:27 a.m.

Views: 6

Exported Functions

ServiceMain (Ordinal: 1, Address: 0x6780)
DllCanUnloadNow (Ordinal: 2, Address: 0x56b0)
DllGetClassObject (Ordinal: 3, Address: 0x55c0)

Imported DLLs & Functions

api-ms-win-core-apiquery-l1-1-0.dll

ApiSetQueryApiSetPresence (Address: 0x18001dc50)

api-ms-win-core-com-l1-1-0.dll

CoCreateFreeThreadedMarshaler (Address: 0x18001dc60)
CoInitializeEx (Address: 0x18001dc78)
CoTaskMemAlloc (Address: 0x18001dc68)
CoTaskMemFree (Address: 0x18001dc70)
CoUninitialize (Address: 0x18001dc80)

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18001dc90)
IsDebuggerPresent (Address: 0x18001dca0)
OutputDebugStringW (Address: 0x18001dc98)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18001dcb0)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18001dcc0)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18001dcd0)
RaiseException (Address: 0x18001dce0)
SetLastError (Address: 0x18001dce8)
SetUnhandledExceptionFilter (Address: 0x18001dcf0)
UnhandledExceptionFilter (Address: 0x18001dcd8)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18001dd00)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18001dd10)
HeapAlloc (Address: 0x18001dd20)
HeapFree (Address: 0x18001dd18)

api-ms-win-core-interlocked-l1-1-0.dll

InitializeSListHead (Address: 0x18001dd30)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x18001dd40)
GetModuleFileNameA (Address: 0x18001dd60)
GetModuleHandleExW (Address: 0x18001dd48)
GetModuleHandleW (Address: 0x18001dd50)
GetProcAddress (Address: 0x18001dd58)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18001dd70)

api-ms-win-core-processthreads-l1-1-0.dll

CreateThread (Address: 0x18001dda0)
GetCurrentProcess (Address: 0x18001dd90)
GetCurrentProcessId (Address: 0x18001dd98)
GetCurrentThreadId (Address: 0x18001dda8)
ProcessIdToSessionId (Address: 0x18001dd80)
TerminateProcess (Address: 0x18001dd88)

api-ms-win-core-processthreads-l1-1-1.dll

IsProcessorFeaturePresent (Address: 0x18001ddb8)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18001ddc8)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18001ddd8)
RegCreateKeyExW (Address: 0x18001ddf0)
RegEnumValueW (Address: 0x18001dde0)
RegFlushKey (Address: 0x18001de18)
RegGetValueW (Address: 0x18001de08)
RegOpenKeyExW (Address: 0x18001de00)
RegQueryInfoKeyW (Address: 0x18001de10)
RegQueryValueExW (Address: 0x18001ddf8)
RegSetValueExW (Address: 0x18001dde8)

api-ms-win-core-registry-l1-1-1.dll

RegDeleteKeyValueW (Address: 0x18001de28)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18001de48)
RtlLookupFunctionEntry (Address: 0x18001de40)
RtlVirtualUnwind (Address: 0x18001de38)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18001deb0)
AcquireSRWLockShared (Address: 0x18001de80)
CreateEventExW (Address: 0x18001de90)
CreateEventW (Address: 0x18001de68)
CreateMutexExW (Address: 0x18001de60)
CreateSemaphoreExW (Address: 0x18001dee0)
CreateWaitableTimerExW (Address: 0x18001df00)
DeleteCriticalSection (Address: 0x18001de78)
EnterCriticalSection (Address: 0x18001dee8)
InitializeCriticalSectionEx (Address: 0x18001de70)
LeaveCriticalSection (Address: 0x18001ded8)
OpenSemaphoreW (Address: 0x18001dec0)
ReleaseMutex (Address: 0x18001dea8)
ReleaseSemaphore (Address: 0x18001dec8)
ReleaseSRWLockExclusive (Address: 0x18001de98)
ReleaseSRWLockShared (Address: 0x18001dea0)
ResetEvent (Address: 0x18001ded0)
SetEvent (Address: 0x18001de58)
SetWaitableTimerEx (Address: 0x18001def8)
WaitForMultipleObjectsEx (Address: 0x18001def0)
WaitForSingleObject (Address: 0x18001deb8)
WaitForSingleObjectEx (Address: 0x18001de88)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x18001df20)
InitOnceComplete (Address: 0x18001df18)
InitOnceExecuteOnce (Address: 0x18001df10)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x18001df30)
GetTickCount64 (Address: 0x18001df38)

api-ms-win-core-sysinfo-l1-2-0.dll

GetSystemFirmwareTable (Address: 0x18001df48)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x18001df60)
EncodePointer (Address: 0x18001df58)

api-ms-win-core-winrt-error-l1-1-0.dll

RoOriginateError (Address: 0x18001df70)

api-ms-win-core-winrt-l1-1-0.dll

RoGetActivationFactory (Address: 0x18001df80)
RoInitialize (Address: 0x18001df88)
RoUninitialize (Address: 0x18001df90)

api-ms-win-core-winrt-string-l1-1-0.dll

WindowsCompareStringOrdinal (Address: 0x18001dfa8)
WindowsCreateStringReference (Address: 0x18001dfb0)
WindowsDeleteString (Address: 0x18001dfa0)
WindowsGetStringRawBuffer (Address: 0x18001dfb8)

api-ms-win-crt-private-l1-1-0.dll

__C_specific_handler (Address: 0x18001e038)
__CxxFrameHandler3 (Address: 0x18001e040)
__CxxFrameHandler4 (Address: 0x18001e098)
__std_terminate (Address: 0x18001e090)
_CxxThrowException (Address: 0x18001e048)
_o___std_exception_copy (Address: 0x18001e080)
_o___std_exception_destroy (Address: 0x18001e078)
_o___std_type_info_destroy_list (Address: 0x18001e070)
_o___stdio_common_vsnprintf_s (Address: 0x18001e068)
_o___stdio_common_vswprintf (Address: 0x18001e060)
_o__callnewh (Address: 0x18001e058)
_o__cexit (Address: 0x18001e050)
_o__configure_narrow_argv (Address: 0x18001e088)
_o__crt_atexit (Address: 0x18001e018)
_o__errno (Address: 0x18001dfc8)
_o__execute_onexit_table (Address: 0x18001dfd0)
_o__initialize_narrow_environment (Address: 0x18001dfd8)
_o__initialize_onexit_table (Address: 0x18001dfe0)
_o__invalid_parameter_noinfo (Address: 0x18001dfe8)
_o__invalid_parameter_noinfo_noreturn (Address: 0x18001dff0)
_o__purecall (Address: 0x18001dff8)
_o__register_onexit_function (Address: 0x18001e000)
_o__seh_filter_dll (Address: 0x18001e008)
_o_free (Address: 0x18001e020)
_o_malloc (Address: 0x18001e028)
_o_powf (Address: 0x18001e030)
memcmp (Address: 0x18001e0a0)
memcpy (Address: 0x18001e0a8)
memmove (Address: 0x18001e010)

api-ms-win-crt-runtime-l1-1-0.dll

_initterm (Address: 0x18001e0c0)
_initterm_e (Address: 0x18001e0b8)

api-ms-win-crt-string-l1-1-0.dll

memset (Address: 0x18001e0d0)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x18001e0f0)
EventRegister (Address: 0x18001e0e8)
EventSetInformation (Address: 0x18001e0e0)
EventUnregister (Address: 0x18001e100)
EventWriteTransfer (Address: 0x18001e0f8)

api-ms-win-security-base-l1-1-0.dll

GetTokenInformation (Address: 0x18001e110)

api-ms-win-security-sddl-l1-1-0.dll

ConvertStringSecurityDescriptorToSecurityDescriptorW (Address: 0x18001e120)

api-ms-win-service-core-l1-1-0.dll

RegisterServiceCtrlHandlerExW (Address: 0x18001e138)
SetServiceStatus (Address: 0x18001e130)

api-ms-win-service-management-l1-1-0.dll

OpenSCManagerW (Address: 0x18001e148)
OpenServiceW (Address: 0x18001e150)

api-ms-win-service-management-l2-1-0.dll

ChangeServiceConfig2W (Address: 0x18001e160)
ChangeServiceConfigW (Address: 0x18001e170)
QueryServiceConfig2W (Address: 0x18001e168)
QueryServiceConfigW (Address: 0x18001e178)

bcrypt.dll

BCryptCloseAlgorithmProvider (Address: 0x18001e198)
BCryptCreateHash (Address: 0x18001e1a0)
BCryptDestroyHash (Address: 0x18001e190)
BCryptFinishHash (Address: 0x18001e1a8)
BCryptGetProperty (Address: 0x18001e1b0)
BCryptHashData (Address: 0x18001e188)
BCryptOpenAlgorithmProvider (Address: 0x18001e1b8)

msvcp_win.dll

?_Xlength_error@std@@YAXPEBD@Z (Address: 0x18001e1c8)

ntdll.dll

NtQueryWnfStateData (Address: 0x18001e1f0)
RtlCopySid (Address: 0x18001e1e0)
RtlLengthSid (Address: 0x18001e1d8)
RtlSubscribeWnfStateChangeNotification (Address: 0x18001e1e8)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x18001e1f8)

OnDemandBrokerClient.dll

CreateOnDemandBrokerClient (Address: 0x18001dbe8)

RPCRT4.dll

NdrServerCall2 (Address: 0x18001dc08)
NdrServerCallAll (Address: 0x18001dc30)
RpcBindingVectorFree (Address: 0x18001dc10)
RpcEpRegisterW (Address: 0x18001dc28)
RpcEpUnregister (Address: 0x18001dbf8)
RpcServerInqBindings (Address: 0x18001dc20)
RpcServerInqCallAttributesW (Address: 0x18001dc38)
RpcServerRegisterIf3 (Address: 0x18001dc18)
RpcServerUnregisterIfEx (Address: 0x18001dc00)
RpcServerUseProtseqW (Address: 0x18001dc40)