fthsvc.dll

v10.0.19041.1 64-bit Windows NT Analyzed
Description
Microsoft Windows Fault Tolerant Heap Diagnostic Module
Authors
© Microsoft Corporation. All rights reserved.
File size
67.5 KB
Uploaded
2025-12-01 07:28
Views
64
SHA-256
0b43e54341f90429f1347a96ccdc46f2

Exported functions 5

FthSysprepSpecialize #1 · 0x8d10
FthSysprepSpecializeOffline #2 · 0x8e60
WdiDiagnosticModuleMain #3 · 0x1260
WdiGetDiagnosticModuleInterfaceVersion #4 · 0x1230
WdiHandleInstance #5 · 0x1400

Imported DLLs & functions 110

api-ms-win-core-namedpipe-l1-1-0.dll 1
ImpersonateNamedPipeClient 0x18000a2e8
api-ms-win-core-registry-l1-1-0.dll 8
RegCloseKey 0x18000a330
RegCreateKeyExW 0x18000a320
RegDeleteKeyExW 0x18000a328
RegDeleteValueW 0x18000a2f8
RegEnumValueW 0x18000a308
RegOpenKeyExW 0x18000a300
RegQueryValueExW 0x18000a310
RegSetValueExW 0x18000a318
api-ms-win-security-base-l1-1-0.dll 1
RevertToSelf 0x18000a340
api-ms-win-security-sddl-l1-1-0.dll 1
ConvertStringSecurityDescriptorToSecurityDescriptorW 0x18000a350
KERNEL32.dll 55
CancelIo 0x18000a290
CloseHandle 0x18000a218
ConnectNamedPipe 0x18000a1c0
CreateDirectoryW 0x18000a1a0
CreateEventW 0x18000a230
CreateFileW 0x18000a180
CreateThread 0x18000a210
DelayLoadFailureHook 0x18000a1c8
DeleteCriticalSection 0x18000a280
DeleteFileW 0x18000a1b0
DisableThreadLibraryCalls 0x18000a278
DisconnectNamedPipe 0x18000a240
DuplicateHandle 0x18000a250
EnterCriticalSection 0x18000a260
GetCurrentProcess 0x18000a2a0
GetCurrentProcessId 0x18000a130
GetCurrentThreadId 0x18000a2c8
GetLastError 0x18000a228
GetNamedPipeClientProcessId 0x18000a2b8
GetProcessHeap 0x18000a170
GetProcessTimes 0x18000a160
GetSystemTime 0x18000a1e0
GetSystemTimeAsFileTime 0x18000a2d8
GetTempFileNameW 0x18000a168
GetTempPathW 0x18000a188
GetTickCount 0x18000a248
GetWindowsDirectoryW 0x18000a1a8
GlobalMemoryStatusEx 0x18000a1e8
HeapAlloc 0x18000a178
HeapCreate 0x18000a298
HeapDestroy 0x18000a200
HeapFree 0x18000a198
InitializeCriticalSection 0x18000a270
LeaveCriticalSection 0x18000a268
LocalFree 0x18000a1f8
MapViewOfFile 0x18000a1d8
OpenProcess 0x18000a238
OutputDebugStringA 0x18000a190
QueryPerformanceCounter 0x18000a138
ReadFile 0x18000a288
RemoveDirectoryW 0x18000a1b8
ResetEvent 0x18000a208
ResolveDelayLoadedAPI 0x18000a1d0
ResumeThread 0x18000a2d0
SetEvent 0x18000a220
SetUnhandledExceptionFilter 0x18000a148
Sleep 0x18000a158
SystemTimeToFileTime 0x18000a1f0
TerminateProcess 0x18000a140
TerminateThread 0x18000a128
UnhandledExceptionFilter 0x18000a150
UnmapViewOfFile 0x18000a258
WaitForMultipleObjects 0x18000a2b0
WaitForSingleObject 0x18000a2c0
WriteFile 0x18000a2a8
msvcrt.dll 17
__C_specific_handler 0x18000a360
_amsg_exit 0x18000a380
_get_errno 0x18000a398
_initterm 0x18000a368
_set_errno 0x18000a3a0
_vsnwprintf 0x18000a3d8
_wcsicmp 0x18000a3c0
_wcsnicmp 0x18000a3d0
_XcptFilter 0x18000a388
free 0x18000a378
malloc 0x18000a370
memset 0x18000a3e0
sprintf_s 0x18000a390
towlower 0x18000a3c8
vsprintf_s 0x18000a3a8
wcsstr 0x18000a3b0
wcstoul 0x18000a3b8
ntdll.dll 16
EtwEventRegister 0x18000a468
EtwEventUnregister 0x18000a448
EtwEventWrite 0x18000a450
EtwGetTraceEnableFlags 0x18000a410
EtwGetTraceEnableLevel 0x18000a400
EtwGetTraceLoggerHandle 0x18000a408
EtwRegisterTraceGuidsW 0x18000a3f8
EtwTraceMessage 0x18000a440
EtwUnregisterTraceGuids 0x18000a418
NtCreateNamedPipeFile 0x18000a430
NtQueryObject 0x18000a438
RtlCaptureContext 0x18000a460
RtlInitUnicodeString 0x18000a428
RtlLookupFunctionEntry 0x18000a458
RtlVirtualUnwind 0x18000a3f0
WinSqmAddToStream 0x18000a420
wer.dll 7
WerpGetReportConsent 0x18000a478
WerpSetCallBack 0x18000a4a8
WerReportAddFile 0x18000a498
WerReportCloseHandle 0x18000a490
WerReportCreate 0x18000a480
WerReportSetParameter 0x18000a4a0
WerReportSubmit 0x18000a488
wevtapi.dll 4
EvtClose 0x18000a4b8
EvtCreateRenderContext 0x18000a4c0
EvtRender 0x18000a4d0
EvtSubscribe 0x18000a4c8